can u tell me how to use spi tools?

I did not do a TFTP recovery on this router, you have to check it on google/youtube.....

Your router not dead.

search for mtk_uartboot, you can boot even without flash chip

PS. Did you erase BL2?

I progress

I acheived to load image into RAM
But after, how i can load final image ? I have to connect with ssh? I have to unplug serial connector ? Restore default parameter on ethernet card ?

After you loaded the RAM image into, just reboot it from CLI (Do not power off).
Then you will access luci from 192.168.1.1
Then do sysupgrade in luci.

You'll see the boot process from serial logs.

I'm sorry, but it'snt working.
I flash RAM, u boot ask me if i want to run data load now.

I answers yes. I's booting, without error.

But after, impossible to connect to 192.168.1.1
Impossible to ping too.
If i remove fixed ip on computer, it's the same.

I don't know what to do.

I'm next to solve my problem !

Thanks in advance

Hi, Do you still get the bootloader logs before?

  *** U-Boot Boot Menu ***

     1. Startup system (Default)
     2. Startup firmware0
     3. Startup firmware1
     4. Upgrade firmware
     5. Upgrade ATF BL2
     6. Upgrade ATF FIP
     7. Upgrade single image
     8. Load image
     0. U-Boot console

  Press UP/DOWN to move, ENTER to select, ESC/CTRL+C to quit

in above, 4. Upgrade firmware, is writing into the current firmware0 or firmware1, coordinate mtd9 / mtd8. use the TFTP, you have to use the -factory.ubi: (https://downloads.openwrt.org/releases/23.05.4/targets/mediatek/filogic/openwrt-23.05.4-mediatek-filogic-xiaomi_mi-router-ax3000t-initramfs-factory.ubi).

or in above, 8. Load image, this is TFTP the code into ram. Try to TFTP this code -kernel.bin: (https://downloads.openwrt.org/releases/23.05.4/targets/mediatek/filogic/openwrt-23.05.4-mediatek-filogic-xiaomi_mi-router-ax3000t-initramfs-kernel.bin).

Summary

then reboot....

(sorry I was tell you using the -initramfs-factory.bui code into 8. Load image, is wrong!!,
should be the -initramfs-kernel.bin code.)

I used with solution, and i think it ok. Led is white

Log of boot :

Net:   eth0: ethernet@15100000

  *** U-Boot Boot Menu ***

     1. Startup system (Default)
     2. Startup firmware0
     3. Startup firmware1
     4. Upgrade firmware
     5. Upgrade ATF BL2
     6. Upgrade ATF FIP
     7. Upgrade single image
     8. Load image
     0. U-Boot console


  Press UP/DOWN to move, ENTER to select, ESC/CTRL+C to quit
detect button reset released!
Reading from 0x0 to 0x4f7fdd7c, size 0x4 ... OK
Boot failure detected on both systems
Reading from 0x0 to 0x4f7fdd7c, size 0x4 ... OK
Saving Environment to MTD... Erasing on MTD device 'nmbm0'... OK
Writing to MTD device 'nmbm0'... OK
OK
Booting System 0, sys1_failed = 1519, sys2_failed = 12
ubi0: attaching mtd9
ubi0: scanning is finished
ubi0: attached mtd9 (name "ubi", size 34 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 272, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 1, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1721081658
ubi0: available PEBs: 191, total reserved PEBs: 81, PEBs reserved for bad PEB handling: 19
Reading from volume 'kernel' to 0x46000000, size 0x0 ... OK
## Loading kernel from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-5.15.162
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x460000ec
     Data Size:    3779836 Bytes = 3.6 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x48000000
     Entry Point:  0x48000000
     Hash algo:    crc32
     Hash value:   b736c825
     Hash algo:    sha1
     Hash value:   2fc05ba58e3317134cc541a2cd331f7e54ae5060
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading ramdisk from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'initrd-1' ramdisk subimage
     Description:  ARM64 OpenWrt xiaomi_mi-router-ax3000t initrd
     Type:         RAMDisk Image
     Compression:  Unknown Compression
     Data Start:   0x4639af2c
     Data Size:    3495464 Bytes = 3.3 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: unavailable
     Entry Point:  unavailable
     Hash algo:    crc32
     Hash value:   ba5afe98
     Hash algo:    sha1
     Hash value:   a8eb27d4ca1d75d96edcba7defd0bccc038f89fb
   Verifying Hash Integrity ... crc32+ sha1+ OK
WARNING: 'compression' nodes for ramdisks are deprecated, please fix your .its file!
## Loading fdt from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt xiaomi_mi-router-ax3000t device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x466f0668
     Data Size:    22874 Bytes = 22.3 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   5b871b54
     Hash algo:    sha1
     Hash value:   d8aedfaf36f563c8615b35711eb51cc446e917c7
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x466f0668
   Uncompressing Kernel Image
   Loading Ramdisk to 4f4a3000, end 4f7f8628 ... OK
   Loading Device Tree to 000000004f49a000, end 000000004f4a2959 ... OK

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 5.15.162 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r24012-d8dd03c46f) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Mon Jul 15 22:14:18 2024
[    0.000000] Machine model: Xiaomi Mi Router AX3000T
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000004fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000042ffffff]
[    0.000000]   node   0: [mem 0x0000000043000000-0x000000004302ffff]
[    0.000000]   node   0: [mem 0x0000000043030000-0x0000000047c7ffff]
[    0.000000]   node   0: [mem 0x0000000047c80000-0x0000000047ffffff]
[    0.000000]   node   0: [mem 0x0000000048000000-0x000000004fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000004fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.2
[    0.000000] percpu: Embedded 18 pages/cpu s33112 r8192 d32424 u73728
[    0.000000] pcpu-alloc: s33112 r8192 d32424 u73728 alloc=18*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: detected: GIC system register CPU interface
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 64512
[    0.000000] Kernel command line: console=ttyS0,115200n1 loglevel=8 swiotlb=512 rootfstype=squashfs firmware=0 mtd=ubi uart_en=1
[    0.000000] Unknown kernel command line parameters "firmware=0 mtd=ubi uart_en=1", will be passed to user space.
[    0.000000] Dentry cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.000000] Inode-cache hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 237952K/262144K available (8384K kernel code, 906K rwdata, 1488K rodata, 448K init, 300K bss, 24192K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] rcu:     RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] GICv3: GIC: Using split EOI/Deactivate mode
[    0.000000] GICv3: 640 SPIs implemented
[    0.000000] GICv3: 0 Extended SPIs implemented
[    0.000000] GICv3: Distributor has no Range Selector support
[    0.000000] Root IRQ handler: 0xffffffc008010090
[    0.000000] GICv3: 16 PPIs implemented
[    0.000000] GICv3: CPU0: found redistributor 0 region 0:0x000000000c080000
[    0.000000] arch_timer: cp15 timer(s) running at 13.00MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2ff89eacb, max_idle_ns: 440795202429 ns
[    0.000000] sched_clock: 56 bits at 13MHz, resolution 76ns, wraps every 4398046511101ns
[    0.000152] Calibrating delay loop (skipped), value calculated using timer frequency.. 26.00 BogoMIPS (lpj=130000)
[    0.000162] pid_max: default: 32768 minimum: 301
[    0.000440] Mount-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.000449] Mountpoint-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.001743] rcu: Hierarchical SRCU implementation.
[    0.002112] smp: Bringing up secondary CPUs ...
[    0.002432] Detected VIPT I-cache on CPU1
[    0.002458] GICv3: CPU1: found redistributor 1 region 0:0x000000000c0a0000
[    0.002487] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[    0.002552] smp: Brought up 1 node, 2 CPUs
[    0.002565] SMP: Total of 2 processors activated.
[    0.002569] CPU features: detected: 32-bit EL0 Support
[    0.002574] CPU features: detected: CRC32 instructions
[    0.002601] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.002663] CPU: All CPU(s) started at EL2
[    0.002674] alternatives: patching kernel code
[    0.006103] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.006125] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[    0.006271] pinctrl core: initialized pinctrl subsystem
[    0.007102] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.007454] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[    0.007483] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.007506] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.007845] thermal_sys: Registered thermal governor 'fair_share'
[    0.007850] thermal_sys: Registered thermal governor 'bang_bang'
[    0.007854] thermal_sys: Registered thermal governor 'step_wise'
[    0.007858] thermal_sys: Registered thermal governor 'user_space'
[    0.008084] ASID allocator initialised with 65536 entries
[    0.008542] pstore: Registered ramoops as persistent store backend
[    0.008548] ramoops: using 0x10000@0x42ff0000, ecc: 0
[    0.018916] cryptd: max_cpu_qlen set to 1000
[    0.021247] SCSI subsystem initialized
[    0.021388] libata version 3.00 loaded.
[    0.022579] clocksource: Switched to clocksource arch_sys_counter
[    0.023201] NET: Registered PF_INET protocol family
[    0.023289] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.023694] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.023710] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.023719] TCP established hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.023738] TCP bind hash table entries: 2048 (order: 3, 32768 bytes, linear)
[    0.023766] TCP: Hash tables configured (established 2048 bind 2048)
[    0.023831] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.023848] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.023972] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.024001] PCI: CLS 0 bytes, default 64
[    0.024341] Unpacking initramfs...
[    0.034818] workingset: timestamp_bits=46 max_order=16 bucket_order=0
[    0.038428] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.038443] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.072210] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.073041] pwm-mediatek 10048000.pwm: clock: top fail: -517
[    0.083183] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.085089] printk: console [ttyS0] disabled
[    0.105268] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 18, base_baud = 2500000) is a ST16650V2
[    0.752774] printk: console [ttyS0] enabled
[    0.757698] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    0.767503] loop: module loaded
[    0.770650] Loading iSCSI transport class v2.0-870.
[    0.794338] spi spi0.0: setup: ignoring unsupported mode bits a00
[    0.800901] spi-nand spi0.0: ESMT SPI NAND was found.
[    0.806022] spi-nand spi0.0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
[    0.814807] Signature found at block 1023 [0x07fe0000]
[    0.819947] NMBM management region starts at block 960 [0x07800000]
[    0.828185] First info table with writecount 0 found in block 960
[    0.840081] Second info table with writecount 0 found in block 963
[    0.846306] NMBM has been successfully attached
[    1.036327] Freeing initrd memory: 3412K
[    1.048735] 10 fixed-partitions partitions found on MTD device spi0.0
[    1.055219] Creating 10 MTD partitions on "spi0.0":
[    1.060086] 0x000000000000-0x000000100000 : "BL2"
[    1.065956] 0x000000100000-0x000000140000 : "Nvram"
[    1.071682] 0x000000140000-0x000000180000 : "Bdata"
[    1.077504] 0x000000180000-0x000000380000 : "Factory"
[    1.084814] 0x000000380000-0x000000580000 : "FIP"
[    1.091357] 0x000000580000-0x0000005c0000 : "crash"
[    1.096939] 0x0000005c0000-0x000000600000 : "crash_log"
[    1.102802] 0x000007600000-0x000007640000 : "KF"
[    1.108022] 0x000000600000-0x000002800000 : "ubi_kernel"
[    1.138027] 0x000002800000-0x000007600000 : "ubi"
[    1.353089] mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc009100000, irq 83
[    1.362676] i2c_dev: i2c /dev entries driver
[    1.368985] mtk-wdt 1001c000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[    1.377801] NET: Registered PF_INET6 protocol family
[    1.383618] Segment Routing with IPv6
[    1.387302] In-situ OAM (IOAM) with IPv6
[    1.391257] NET: Registered PF_PACKET protocol family
[    1.396383] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.409565] 8021q: 802.1Q VLAN Support v1.8
[    1.415102] pstore: Using crash dump compression: deflate
[    1.495441] mt7530-mdio mdio-bus:1f: configuring for fixed/2500base-x link mode
[    1.504525] mt7530-mdio mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    1.513475] mt7530-mdio mdio-bus:1f wan (uninitialized): PHY [mt7530-0:00] driver [MediaTek MT7531 PHY] (irq=92)
[    1.533774] mt7530-mdio mdio-bus:1f lan2 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7531 PHY] (irq=93)
[    1.553968] mt7530-mdio mdio-bus:1f lan3 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7531 PHY] (irq=94)
[    1.574166] mt7530-mdio mdio-bus:1f lan4 (uninitialized): PHY [mt7530-0:03] driver [MediaTek MT7531 PHY] (irq=95)
[    1.585731] DSA: tree 0 setup
[    1.589504] UBI: auto-attach mtd9
[    1.592855] ubi0: default fastmap pool size: 30
[    1.597376] ubi0: default fastmap WL pool size: 15
[    1.602154] ubi0: attaching mtd9
[    2.151129] ubi0: scanning is finished
[    2.165185] ubi0: attached mtd9 (name "ubi", size 78 MiB)
[    2.170590] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    2.177461] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    2.184240] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    2.191187] ubi0: good PEBs: 624, bad PEBs: 0, corrupted PEBs: 0
[    2.197182] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
[    2.204392] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1874825678
[    2.213512] ubi0: available PEBs: 599, total reserved PEBs: 25, PEBs reserved for bad PEB handling: 19
[    2.222817] ubi0: background thread "ubi_bgt0d" started, PID 462
[    2.223063] clk: Disabling unused clocks
[    2.233303] Freeing unused kernel memory: 448K
[    2.237784] Run /init as init process
[    2.241433]   with arguments:
[    2.244395]     /init
[    2.246656]   with environment:
[    2.249783]     HOME=/
[    2.252130]     TERM=linux
[    2.254828]     firmware=0
[    2.257522]     mtd=ubi
[    2.259955]     uart_en=1
[    2.443235] init: Console is alive
[    2.446761] init: - watchdog -
[    2.453791] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.465337] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.480498] init: - preinit -
[    2.587161] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[    2.595716] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    2.604435] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    2.611178] mt7530-mdio mdio-bus:1f lan4: configuring for phy/gmii link mode
[    2.623921] random: procd: uninitialized urandom read (4 bytes read)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    4.665629] procd: - early -
[    4.668583] procd: - watchdog -
[    5.200752] procd: - watchdog -
[    5.204100] procd: - ubus -
[    5.209414] random: ubusd: uninitialized urandom read (4 bytes read)
[    5.256672] random: ubusd: uninitialized urandom read (4 bytes read)
[    5.263208] random: ubusd: uninitialized urandom read (4 bytes read)
[    5.270602] procd: - init -
Please press Enter to activate this console.
[    5.438721] kmodloader: loading kernel modules from /etc/modules.d/*
[    5.452945] crypto-safexcel 10320000.crypto: EIP97:230(0,1,4,4)-HIA:270(0,5,5),PE:150/433(alg:7fcdfc00)/0/0/0
[    5.469329] Loading modules backported from Linux version v6.1.97-0-g7753af06eebfb
[    5.476941] Backport generated by backports.git v6.1.97-1-0-g2431d56e
[    5.621843] urngd: v1.0.2 started.
[    5.790387] random: crng init done
[    5.793814] random: 23 urandom warning(s) missed due to ratelimiting
[    5.812726] mt798x-wmac 18000000.wifi: Direct firmware load for mediatek/mt7981_rom_patch.bin failed with error -2
[    5.823078] mt798x-wmac 18000000.wifi: Falling back to sysfs fallback for: mediatek/mt7981_rom_patch.bin
[    5.855182] mt798x-wmac: probe of 18000000.wifi failed with error -12
[    5.887302] PPP generic driver version 2.4.2
[    5.892350] NET: Registered PF_PPPOX protocol family
[    5.900481] kmodloader: done loading kernel modules from /etc/modules.d/*
[    6.973379] mtdblock: MTD device 'Bdata' is NAND, please consider using UBI block devices instead.
[   11.979292] mtk_soc_eth 15100000.ethernet eth0: Link is Down
[   12.002418] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[   12.015147] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[   12.018726] mt7530-mdio mdio-bus:1f lan2: configuring for phy/gmii link mode
[   12.034227] br-lan: port 1(lan2) entered blocking state
[   12.039460] br-lan: port 1(lan2) entered disabled state
[   12.046161] device lan2 entered promiscuous mode
[   12.050778] device eth0 entered promiscuous mode
[   12.058063] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   12.078755] mt7530-mdio mdio-bus:1f lan3: configuring for phy/gmii link mode
[   12.089049] br-lan: port 2(lan3) entered blocking state
[   12.094364] br-lan: port 2(lan3) entered disabled state
[   12.102471] device lan3 entered promiscuous mode
[   12.115485] mt7530-mdio mdio-bus:1f lan4: configuring for phy/gmii link mode
[   12.125728] br-lan: port 3(lan4) entered blocking state
[   12.130964] br-lan: port 3(lan4) entered disabled state
[   12.139911] device lan4 entered promiscuous mode
[   12.157994] mt7530-mdio mdio-bus:1f wan: configuring for phy/gmii link mode
[   14.574051] mt7530-mdio mdio-bus:1f wan: Link is Up - 100Mbps/Full - flow control rx/tx
[   14.582071] IPv6: ADDRCONF(NETDEV_CHANGE): wan: link becomes ready

but i can't connect to luci with 192.168.1.1
Is luci installed on this image ?

No It's okkkkkkkkkkkkkkkkk :!!!!!!!!!!!!!!!!!!!!!!!!!!!

It's just that i plug ethernet cable on first port, for Wan

Big big big thanks to you !

No i will try to load back-up of settings

Hi Dude first router Dead I Buy Enother and after white final image this errorr see and boot loop HEEEEEELPPPP
[Dual Image] Booting System 1, sys1_failed = 1, sys2_failed = 5
ubi0: attaching mtd10
ubi0: scanning is finished
ubi0: attached mtd10 (name "ubi1", size 34 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 272, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0
ubi0: available PEBs: 249, total reserved PEBs: 23, PEBs reserved for bad PEB handling: 19
Reading from volume 'kernel' to 0x46000000, size 0x0 ... *** Cannot find volume 'kernel' ***
resetting ...

What is this, serial logs? pls upload the full logs from power-on.

1 Like

F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [1000]
T0: 0000 024F [010F]
Jump to BL

NOTICE: BL2: v2.6(release):9548a30134d-dirty
NOTICE: BL2: Built : 02:27:18, Jan 24 2024
NOTICE: WDT: disabled
NOTICE: EMI: Using DDR3 settings

dump toprgu registers data:
1001c000 | 00000000 0000ffe0 00000000 00000000
1001c010 | 00000fff 00000000 00f00000 00000000
1001c020 | 00000000 00000000 00000000 00000000
1001c030 | 003c0003 003c0003 00000000 00000000
1001c040 | 00000000 00000000 00000000 00000000
1001c050 | 00000000 00000000 00000000 00000000
1001c060 | 00000000 00000000 00000000 00000000
1001c070 | 00000000 00000000 00000000 00000000
1001c080 | 00000000 00000000 00000000 00000000

dump drm registers data:
1001d000 | 00000000 00000000 00000000 00000000
1001d010 | 00000000 00000000 00000000 00000000
1001d020 | 00000000 00000000 00000000 00000000
1001d030 | 00a083f1 000003ff 00100000 00000000
1001d040 | 00000000 00000000 00020303 000000ff
1001d050 | 00000000 00000000 00000000 00000000
1001d060 | 00000002 00000000 00000000 00000000
drm: 500 = 0x8
[DDR Reserve] ddr reserve mode not be enabled yet
DDR RESERVE Success 0
[EMI] ComboMCP not ready, using default setting
BYTE_swap:0
BYTE_swap:0
Window Sum 600, worse bit 4, min window 72
Window Sum 552, worse bit 13, min window 64
Window Sum 398, worse bit 0, min window 46
Window Sum 326, worse bit 15, min window 36
Window Sum 412, worse bit 2, min window 50
Window Sum 334, worse bit 15, min window 38
Window Sum 348, worse bit 15, min window 40
Window Sum 418, worse bit 0, min window 50
Window Sum 360, worse bit 15, min window 40
Window Sum 426, worse bit 0, min window 52
Window Sum 358, worse bit 15, min window 42
Window Sum 372, worse bit 8, min window 44
NOTICE: EMI: Detected DRAM size: 256MB
NOTICE: EMI: complex R/W mem test passed
NOTICE: CPU: MT7981 (1300MHz)
NOTICE: SPI_NAND parses attributes from parameter page.
NOTICE: SPI_NAND Detected ID 0xc8
NOTICE: Page size 2048, Block size 131072, size 134217728
NOTICE: Initializing NMBM ...
NOTICE: Signature found at block 1023 [0x07fe0000]
NOTICE: First info table with writecount 0 found in block 960
NOTICE: Second info table with writecount 0 found in block 963
NOTICE: NMBM has been successfully attached in read-only mode
NOTICE: BL2: Booting BL31
NOTICE: BL31: v2.6(release):9548a30134d-dirty
NOTICE: BL31: Built : 02:27:18, Jan 24 2024
NOTICE: Hello BL31!!!
In: serial@11002000
Out: serial@11002000
Err: serial@11002000
Net: eth0: ethernet@15100000

*** U-Boot Boot Menu ***

 1. Startup system (Default)
 2. Startup firmware0
 3. Startup firmware1
 4. Upgrade firmware
 5. Upgrade ATF BL2
 6. Upgrade ATF FIP
 7. Upgrade single image
 8. Load image
 0. U-Boot console

Press UP/DOWN to move, ENTER to select, ESC/CTRL+C to quit
detect button reset released!
Reading from 0x0 to 0x4f7fdd7c, size 0x4 ... OK
[Dual Image] Boot failure detected on both systems
Reading from 0x0 to 0x4f7fdd7c, size 0x4 ... OK
Saving Environment to MTD... Erasing on MTD device 'nmbm0'... OK
Writing to MTD device 'nmbm0'... OK
OK
[Dual Image] Booting System 0, sys1_failed = 2, sys2_failed = 6
ubi0: attaching mtd9
ubi0: scanning is finished
ubi0: attached mtd9 (name "ubi", size 34 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 272, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0
ubi0: available PEBs: 249, total reserved PEBs: 23, PEBs reserved for bad PEB ha ndling: 19
Reading from volume 'kernel' to 0x46000000, size 0x0 ... *** Cannot find volume 'kernel' ***
resetting ...

F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [1000]
T0: 0000 024F [010F]
Jump to BL

NOTICE: BL2: v2.6(release):9548a30134d-dirty
NOTICE: BL2: Built : 02:27:18, Jan 24 2024
NOTICE: WDT: disabled
NOTICE: EMI: Using DDR3 settings

dump toprgu registers data:
1001c000 | 00000000 0000ffe0 00000000 00000000
1001c010 | 00000fff 00000000 00f00000 00000000
1001c020 | 00000000 00000000 00000000 00000000
1001c030 | 003c0003 003c0003 00000000 00000000
1001c040 | 00000000 00000000 00000000 00000000
1001c050 | 00000000 00000000 00000000 00000000
1001c060 | 00000000 00000000 00000000 00000000
1001c070 | 00000000 00000000 00000000 00000000
1001c080 | 00000000 00000000 00000000 00000000

dump drm registers data:
1001d000 | 00000000 00000000 00000000 00000000
1001d010 | 00000000 00000000 00000000 00000000
1001d020 | 00000000 00000000 00000000 00000000
1001d030 | 00a003f1 000000ff 00100000 00000000
1001d040 | 00027e71 000200a0 00020303 000000ff
1001d050 | 00000000 00000000 00000000 00000000
1001d060 | 00000002 00000000 00000000 00000000
drm: 500 = 0xc
[DDR Reserve] ddr reserve mode not be enabled yet
DDR RESERVE Success 0
[EMI] ComboMCP not ready, using default setting
BYTE_swap:0
BYTE_swap:0
Window Sum 592, worse bit 6, min window 68
Window Sum 560, worse bit 9, min window 68
Window Sum 398, worse bit 0, min window 48
Window Sum 324, worse bit 15, min window 36
Window Sum 402, worse bit 2, min window 48
Window Sum 334, worse bit 15, min window 38
Window Sum 408, worse bit 2, min window 48
Window Sum 340, worse bit 15, min window 38
Window Sum 418, worse bit 0, min window 50
Window Sum 356, worse bit 15, min window 40
Window Sum 424, worse bit 0, min window 52
Window Sum 364, worse bit 15, min window 42
Window Sum 426, worse bit 2, min window 52
Window Sum 366, worse bit 15, min window 42
Window Sum 428, worse bit 2, min window 52
Window Sum 372, worse bit 15, min window 42
Window Sum 372, worse bit 13, min window 44
NOTICE: EMI: Detected DRAM size: 256MB
NOTICE: EMI: complex R/W mem test passed
NOTICE: CPU: MT7981 (1300MHz)
NOTICE: SPI_NAND parses attributes from parameter page.
NOTICE: SPI_NAND Detected ID 0xc8
NOTICE: Page size 2048, Block size 131072, size 134217728
NOTICE: Initializing NMBM ...
NOTICE: Signature found at block 1023 [0x07fe0000]
NOTICE: First info table with writecount 0 found in block 960
NOTICE: Second info table with writecount 0 found in block 963
NOTICE: NMBM has been successfully attached in read-only mode
NOTICE: BL2: Booting BL31
NOTICE: BL31: v2.6(release):9548a30134d-dirty
NOTICE: BL31: Built : 02:27:18, Jan 24 2024
NOTICE: Hello BL31!!!
In: serial@11002000
Out: serial@11002000
Err: serial@11002000
Net: eth0: ethernet@15100000

*** U-Boot Boot Menu ***

 1. Startup system (Default)
 2. Startup firmware0
 3. Startup firmware1
 4. Upgrade firmware
 5. Upgrade ATF BL2
 6. Upgrade ATF FIP
 7. Upgrade single image
 8. Load image
 0. U-Boot console

Press UP/DOWN to move, ENTER to select, ESC/CTRL+C to quit

Please use the Hide Details to upload the logs:

Summary

image

1 Like
Summary

F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [1000]
T0: 0000 024F [010F]
Jump to BL

NOTICE: BL2: v2.6(release):9548a30134d-dirty
NOTICE: BL2: Built : 02:27:18, Jan 24 2024
NOTICE: WDT: disabled
NOTICE: EMI: Using DDR3 settings

dump toprgu registers data:
1001c000 | 00000000 0000ffe0 00000000 00000000
1001c010 | 00000fff 00000000 00f00000 00000000
1001c020 | 00000000 00000000 00000000 00000000
1001c030 | 003c0003 003c0003 00000000 00000000
1001c040 | 00000000 00000000 00000000 00000000
1001c050 | 00000000 00000000 00000000 00000000
1001c060 | 00000000 00000000 00000000 00000000
1001c070 | 00000000 00000000 00000000 00000000
1001c080 | 00000000 00000000 00000000 00000000

dump drm registers data:
1001d000 | 00000000 00000000 00000000 00000000
1001d010 | 00000000 00000000 00000000 00000000
1001d020 | 00000000 00000000 00000000 00000000
1001d030 | 00a083f1 000003ff 00100000 00000000
1001d040 | 00000000 00000000 00020303 000000ff
1001d050 | 00000000 00000000 00000000 00000000
1001d060 | 00000002 00000000 00000000 00000000
drm: 500 = 0x8
[DDR Reserve] ddr reserve mode not be enabled yet
DDR RESERVE Success 0
[EMI] ComboMCP not ready, using default setting
BYTE_swap:0
BYTE_swap:0
Window Sum 600, worse bit 4, min window 72
Window Sum 552, worse bit 13, min window 64
Window Sum 398, worse bit 0, min window 46
Window Sum 326, worse bit 15, min window 36
Window Sum 412, worse bit 2, min window 50
Window Sum 334, worse bit 15, min window 38
Window Sum 348, worse bit 15, min window 40
Window Sum 418, worse bit 0, min window 50
Window Sum 360, worse bit 15, min window 40
Window Sum 426, worse bit 0, min window 52
Window Sum 358, worse bit 15, min window 42
Window Sum 372, worse bit 8, min window 44
NOTICE: EMI: Detected DRAM size: 256MB
NOTICE: EMI: complex R/W mem test passed
NOTICE: CPU: MT7981 (1300MHz)
NOTICE: SPI_NAND parses attributes from parameter page.
NOTICE: SPI_NAND Detected ID 0xc8
NOTICE: Page size 2048, Block size 131072, size 134217728
NOTICE: Initializing NMBM ...
NOTICE: Signature found at block 1023 [0x07fe0000]
NOTICE: First info table with writecount 0 found in block 960
NOTICE: Second info table with writecount 0 found in block 963
NOTICE: NMBM has been successfully attached in read-only mode
NOTICE: BL2: Booting BL31
NOTICE: BL31: v2.6(release):9548a30134d-dirty
NOTICE: BL31: Built : 02:27:18, Jan 24 2024
NOTICE: Hello BL31!!!
In: serial@11002000
Out: serial@11002000
Err: serial@11002000
Net: eth0: ethernet@15100000

*** U-Boot Boot Menu ***

 1. Startup system (Default)
 2. Startup firmware0
 3. Startup firmware1
 4. Upgrade firmware
 5. Upgrade ATF BL2
 6. Upgrade ATF FIP
 7. Upgrade single image
 8. Load image
 0. U-Boot console

Press UP/DOWN to move, ENTER to select, ESC/CTRL+C to quit
detect button reset released!
Reading from 0x0 to 0x4f7fdd7c, size 0x4 ... OK
[Dual Image] Boot failure detected on both systems
Reading from 0x0 to 0x4f7fdd7c, size 0x4 ... OK
Saving Environment to MTD... Erasing on MTD device 'nmbm0'... OK
Writing to MTD device 'nmbm0'... OK
OK
[Dual Image] Booting System 0, sys1_failed = 2, sys2_failed = 6
ubi0: attaching mtd9
ubi0: scanning is finished
ubi0: attached mtd9 (name "ubi", size 34 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 272, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 0
ubi0: available PEBs: 249, total reserved PEBs: 23, PEBs reserved for bad PEB ha ndling: 19
Reading from volume 'kernel' to 0x46000000, size 0x0 ... *** Cannot find volume 'kernel' ***
resetting ...

F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [1000]
T0: 0000 024F [010F]
Jump to BL

NOTICE: BL2: v2.6(release):9548a30134d-dirty
NOTICE: BL2: Built : 02:27:18, Jan 24 2024
NOTICE: WDT: disabled
NOTICE: EMI: Using DDR3 settings

dump toprgu registers data:
1001c000 | 00000000 0000ffe0 00000000 00000000
1001c010 | 00000fff 00000000 00f00000 00000000
1001c020 | 00000000 00000000 00000000 00000000
1001c030 | 003c0003 003c0003 00000000 00000000
1001c040 | 00000000 00000000 00000000 00000000
1001c050 | 00000000 00000000 00000000 00000000
1001c060 | 00000000 00000000 00000000 00000000
1001c070 | 00000000 00000000 00000000 00000000
1001c080 | 00000000 00000000 00000000 00000000

dump drm registers data:
1001d000 | 00000000 00000000 00000000 00000000
1001d010 | 00000000 00000000 00000000 00000000
1001d020 | 00000000 00000000 00000000 00000000
1001d030 | 00a003f1 000000ff 00100000 00000000
1001d040 | 00027e71 000200a0 00020303 000000ff
1001d050 | 00000000 00000000 00000000 00000000
1001d060 | 00000002 00000000 00000000 00000000
drm: 500 = 0xc
[DDR Reserve] ddr reserve mode not be enabled yet
DDR RESERVE Success 0
[EMI] ComboMCP not ready, using default setting
BYTE_swap:0
BYTE_swap:0
Window Sum 592, worse bit 6, min window 68
Window Sum 560, worse bit 9, min window 68
Window Sum 398, worse bit 0, min window 48
Window Sum 324, worse bit 15, min window 36
Window Sum 402, worse bit 2, min window 48
Window Sum 334, worse bit 15, min window 38
Window Sum 408, worse bit 2, min window 48
Window Sum 340, worse bit 15, min window 38
Window Sum 418, worse bit 0, min window 50
Window Sum 356, worse bit 15, min window 40
Window Sum 424, worse bit 0, min window 52
Window Sum 364, worse bit 15, min window 42
Window Sum 426, worse bit 2, min window 52
Window Sum 366, worse bit 15, min window 42
Window Sum 428, worse bit 2, min window 52
Window Sum 372, worse bit 15, min window 42
Window Sum 372, worse bit 13, min window 44
NOTICE: EMI: Detected DRAM size: 256MB
NOTICE: EMI: complex R/W mem test passed
NOTICE: CPU: MT7981 (1300MHz)
NOTICE: SPI_NAND parses attributes from parameter page.
NOTICE: SPI_NAND Detected ID 0xc8
NOTICE: Page size 2048, Block size 131072, size 134217728
NOTICE: Initializing NMBM ...
NOTICE: Signature found at block 1023 [0x07fe0000]
NOTICE: First info table with writecount 0 found in block 960
NOTICE: Second info table with writecount 0 found in block 963
NOTICE: NMBM has been successfully attached in read-only mode
NOTICE: BL2: Booting BL31
NOTICE: BL31: v2.6(release):9548a30134d-dirty
NOTICE: BL31: Built : 02:27:18, Jan 24 2024
NOTICE: Hello BL31!!!
In: serial@11002000
Out: serial@11002000
Err: serial@11002000
Net: eth0: ethernet@15100000

*** U-Boot Boot Menu ***

 1. Startup system (Default)
 2. Startup firmware0
 3. Startup firmware1
 4. Upgrade firmware
 5. Upgrade ATF BL2
 6. Upgrade ATF FIP
 7. Upgrade single image
 8. Load image
 0. U-Boot console

Press UP/DOWN to move, ENTER to select, ESC/CTRL+C to quit

i hope see it
tanx for your time dude

You could try to recover it by

using -initramfs-kernel.bin image.

1 Like

https://downloads.openwrt.org/releases/23.05.4/targets/mediatek/filogic/openwrt-23.05.4-mediatek-filogic-xiaomi_mi-router-ax3000t-initramfs-kernel.bin

This File?

or snapshop
https://downloads.openwrt.org/snapshots/targets/mediatek/filogic/openwrt-mediatek-filogic-xiaomi_mi-router-ax3000t-initramfs-kernel.bin

unstable and no luci by defaut.

v23.05.4 is better.

1 Like