R7800 -> Flashing openwrt causes bootloop (bad block in kernel area)

It seems there were other cases, however people returned their routers or gave up. I will try to flash it tomorrow without the padding bytes. Cheers

Actually, how to best identify / remove the padding?

No easy way. Because you are looking at kernel's logic that calculates the expected location of the rootfs partition based on the kernel partition's own size, without any knowledge about the hardware layer that skips bad blocks, the amount of which is not known in advance. (well, in your case it is now 128 kB)

You would probably need to compile your own version, where you have modified the kernel (or mtd?) source code so that it adds 128 kB to the expected location after calculating the place.

But two practical solutions for you:

1 )

The earlier advice of using an initramfs image to "sysupgrade" a normal image, might work due to a small difference in handling kernel and rootfs in various images:

  • Initial "factory" image is a continuous single image. It contains first the kernel, then zeroes until the fixed-size kernel partition ends, and then the rootfs. It is flashed at one step by the OEM GUI flash and TFTP flash. (Thus a bad block can move later partitions' locations on flash.)

  • The "sysupgrade" image contains actually two files inside a .tar archive file: kernel and rootfs. The space from the actual kernel's end to the end of the kernel partition is not included in the image and is not flashed. When you run OpenWrt sysupgrade, it first flashes the kernel, and then as a second step the rootfs gets flashed to the expected rootfs location.

    So, in sysupgrade the rootfs would end up in the correct location even if the kernel gets longer due to bad blocks, as the space at the end of kernel is simply ignored.

(I have never used initramfs, but in theory that would work)

2 )

Manually edit the factory image with a hex editor and remove 128 kB of "00" bytes from the middle. There is about a megabyte of zeroes between kernel and rootfs. Simply remove a flash block from there.

When you then flash the image, the rootfs gets written 128 kB earlier than now. And it should be on the correct location.

After that you should be able to use sysupgrade like explained above in the first idea, as kernel and rootfs get flashed separately.

You would only hit problems if you need to flash again via TFTP or OEM GUI.

Thanks, I tried to delete 128bytes of the empty space. However I get the following error:

** check rootfs image **

** Bad Magic Number 0x0 **

And the goes back into boot mode. I'll try some different images tonight.

Upgrade Mode            Upgrade Mode            
Rcv:
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	..............
Done!
Bytes transferred = 8388441 (7fff59 hex)
MODEL ID on image: R7800
Firmware Image MODEL ID do not match open source firmware ID
 131072 bytes read: OK
HW ID on board: 29764958+0+128+512+4x4+4x4+cascade
HW ID on image: 29764958+0+128+512+4x4+4x4+cascade
Firmware Image HW ID matched Board HW ID

 131072 bytes read: OK
MODEL ID on board: R7800
MODEL ID on image: R7800
Firmware Image MODEL ID matched Board model ID

 131072 bytes read: OK
MODEL ID on board: R7800
MODEL ID on image: R7800
Firmware Image MODEL ID matched Board model ID

Erasing: off 1480000, size 20000

Erasing at 0x1480000 -- 100% complete. Cleanmarker written at 0x1480000.
OK
Writing: from RAM addr 42000080, to NAND off 1480000, size 20000
 131072 bytes written: OK
Active-timer expires
Skipping erasing bad block at 0x014a0000
Erasing: off 14c0000, size 20000

Erasing at 0x14c0000 -- 100% complete. Cleanmarker written at 0x14c0000.
OK
Writing: from RAM addr 42020080, to NAND off 14c0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 14e0000, size 20000

Erasing at 0x14e0000 -- 100% complete. Cleanmarker written at 0x14e0000.
OK
Writing: from RAM addr 42040080, to NAND off 14e0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1500000, size 20000

Erasing at 0x1500000 -- 100% complete. Cleanmarker written at 0x1500000.
OK
Writing: from RAM addr 42060080, to NAND off 1500000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1520000, size 20000

Erasing at 0x1520000 -- 100% complete. Cleanmarker written at 0x1520000.
OK
Writing: from RAM addr 42080080, to NAND off 1520000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1540000, size 20000

Erasing at 0x1540000 -- 100% complete. Cleanmarker written at 0x1540000.
OK
Writing: from RAM addr 420a0080, to NAND off 1540000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1560000, size 20000

Erasing at 0x1560000 -- 100% complete. Cleanmarker written at 0x1560000.
OK
Writing: from RAM addr 420c0080, to NAND off 1560000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1580000, size 20000

Erasing at 0x1580000 -- 100% complete. Cleanmarker written at 0x1580000.
OK
Writing: from RAM addr 420e0080, to NAND off 1580000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 15a0000, size 20000

Erasing at 0x15a0000 -- 100% complete. Cleanmarker written at 0x15a0000.
OK
Writing: from RAM addr 42100080, to NAND off 15a0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 15c0000, size 20000

Erasing at 0x15c0000 -- 100% complete. Cleanmarker written at 0x15c0000.
OK
Writing: from RAM addr 42120080, to NAND off 15c0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 15e0000, size 20000

Erasing at 0x15e0000 -- 100% complete. Cleanmarker written at 0x15e0000.
OK
Writing: from RAM addr 42140080, to NAND off 15e0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1600000, size 20000

Erasing at 0x1600000 -- 100% complete. Cleanmarker written at 0x1600000.
OK
Writing: from RAM addr 42160080, to NAND off 1600000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1620000, size 20000

Erasing at 0x1620000 -- 100% complete. Cleanmarker written at 0x1620000.
OK
Writing: from RAM addr 42180080, to NAND off 1620000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1640000, size 20000

Erasing at 0x1640000 -- 100% complete. Cleanmarker written at 0x1640000.
OK
Writing: from RAM addr 421a0080, to NAND off 1640000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1660000, size 20000

Erasing at 0x1660000 -- 100% complete. Cleanmarker written at 0x1660000.
OK
Writing: from RAM addr 421c0080, to NAND off 1660000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1680000, size 20000

Erasing at 0x1680000 -- 100% complete. Cleanmarker written at 0x1680000.
OK
Writing: from RAM addr 421e0080, to NAND off 1680000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 16a0000, size 20000

Erasing at 0x16a0000 -- 100% complete. Cleanmarker written at 0x16a0000.
OK
Writing: from RAM addr 42200080, to NAND off 16a0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 16c0000, size 20000

Erasing at 0x16c0000 -- 100% complete. Cleanmarker written at 0x16c0000.
OK
Writing: from RAM addr 42220080, to NAND off 16c0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 16e0000, size 20000

Erasing at 0x16e0000 -- 100% complete. Cleanmarker written at 0x16e0000.
OK
Writing: from RAM addr 42240080, to NAND off 16e0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1700000, size 20000

Erasing at 0x1700000 -- 100% complete. Cleanmarker written at 0x1700000.
OK
Writing: from RAM addr 42260080, to NAND off 1700000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1720000, size 20000

Erasing at 0x1720000 -- 100% complete. Cleanmarker written at 0x1720000.
OK
Writing: from RAM addr 42280080, to NAND off 1720000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1740000, size 20000

Erasing at 0x1740000 -- 100% complete. Cleanmarker written at 0x1740000.
OK
Writing: from RAM addr 422a0080, to NAND off 1740000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1760000, size 20000

Erasing at 0x1760000 -- 100% complete. Cleanmarker written at 0x1760000.
OK
Writing: from RAM addr 422c0080, to NAND off 1760000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1780000, size 20000

Erasing at 0x1780000 -- 100% complete. Cleanmarker written at 0x1780000.
OK
Writing: from RAM addr 422e0080, to NAND off 1780000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 17a0000, size 20000

Erasing at 0x17a0000 -- 100% complete. Cleanmarker written at 0x17a0000.
OK
Writing: from RAM addr 42300080, to NAND off 17a0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 17c0000, size 20000

Erasing at 0x17c0000 -- 100% complete. Cleanmarker written at 0x17c0000.
OK
Writing: from RAM addr 42320080, to NAND off 17c0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 17e0000, size 20000

Erasing at 0x17e0000 -- 100% complete. Cleanmarker written at 0x17e0000.
OK
Writing: from RAM addr 42340080, to NAND off 17e0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1800000, size 20000

Erasing at 0x1800000 -- 100% complete. Cleanmarker written at 0x1800000.
OK
Writing: from RAM addr 42360080, to NAND off 1800000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1820000, size 20000

Erasing at 0x1820000 -- 100% complete. Cleanmarker written at 0x1820000.
OK
Writing: from RAM addr 42380080, to NAND off 1820000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1840000, size 20000

Erasing at 0x1840000 -- 100% complete. Cleanmarker written at 0x1840000.
OK
Writing: from RAM addr 423a0080, to NAND off 1840000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1860000, size 20000

Erasing at 0x1860000 -- 100% complete. Cleanmarker written at 0x1860000.
OK
Writing: from RAM addr 423c0080, to NAND off 1860000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1880000, size 20000

Erasing at 0x1880000 -- 100% complete. Cleanmarker written at 0x1880000.
OK
Writing: from RAM addr 423e0080, to NAND off 1880000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 18a0000, size 20000

Erasing at 0x18a0000 -- 100% complete. Cleanmarker written at 0x18a0000.
OK
Writing: from RAM addr 42400080, to NAND off 18a0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 18c0000, size 20000

Erasing at 0x18c0000 -- 100% complete. Cleanmarker written at 0x18c0000.
OK
Writing: from RAM addr 42420080, to NAND off 18c0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 18e0000, size 20000

Erasing at 0x18e0000 -- 100% complete. Cleanmarker written at 0x18e0000.
OK
Writing: from RAM addr 42440080, to NAND off 18e0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1900000, size 20000

Erasing at 0x1900000 -- 100% complete. Cleanmarker written at 0x1900000.
OK
Writing: from RAM addr 42460080, to NAND off 1900000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1920000, size 20000

Erasing at 0x1920000 -- 100% complete. Cleanmarker written at 0x1920000.
OK
Writing: from RAM addr 42480080, to NAND off 1920000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1940000, size 20000

Erasing at 0x1940000 -- 100% complete. Cleanmarker written at 0x1940000.
OK
Writing: from RAM addr 424a0080, to NAND off 1940000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1960000, size 20000

Erasing at 0x1960000 -- 100% complete. Cleanmarker written at 0x1960000.
OK
Writing: from RAM addr 424c0080, to NAND off 1960000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1980000, size 20000

Erasing at 0x1980000 -- 100% complete. Cleanmarker written at 0x1980000.
OK
Writing: from RAM addr 424e0080, to NAND off 1980000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 19a0000, size 20000

Erasing at 0x19a0000 -- 100% complete. Cleanmarker written at 0x19a0000.
OK
Writing: from RAM addr 42500080, to NAND off 19a0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 19c0000, size 20000

Erasing at 0x19c0000 -- 100% complete. Cleanmarker written at 0x19c0000.
OK
Writing: from RAM addr 42520080, to NAND off 19c0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 19e0000, size 20000

Erasing at 0x19e0000 -- 100% complete. Cleanmarker written at 0x19e0000.
OK
Writing: from RAM addr 42540080, to NAND off 19e0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1a00000, size 20000

Erasing at 0x1a00000 -- 100% complete. Cleanmarker written at 0x1a00000.
OK
Writing: from RAM addr 42560080, to NAND off 1a00000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1a20000, size 20000

Erasing at 0x1a20000 -- 100% complete. Cleanmarker written at 0x1a20000.
OK
Writing: from RAM addr 42580080, to NAND off 1a20000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1a40000, size 20000

Erasing at 0x1a40000 -- 100% complete. Cleanmarker written at 0x1a40000.
OK
Writing: from RAM addr 425a0080, to NAND off 1a40000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1a60000, size 20000

Erasing at 0x1a60000 -- 100% complete. Cleanmarker written at 0x1a60000.
OK
Writing: from RAM addr 425c0080, to NAND off 1a60000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1a80000, size 20000

Erasing at 0x1a80000 -- 100% complete. Cleanmarker written at 0x1a80000.
OK
Writing: from RAM addr 425e0080, to NAND off 1a80000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1aa0000, size 20000

Erasing at 0x1aa0000 -- 100% complete. Cleanmarker written at 0x1aa0000.
OK
Writing: from RAM addr 42600080, to NAND off 1aa0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1ac0000, size 20000

Erasing at 0x1ac0000 -- 100% complete. Cleanmarker written at 0x1ac0000.
OK
Writing: from RAM addr 42620080, to NAND off 1ac0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1ae0000, size 20000

Erasing at 0x1ae0000 -- 100% complete. Cleanmarker written at 0x1ae0000.
OK
Writing: from RAM addr 42640080, to NAND off 1ae0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1b00000, size 20000

Erasing at 0x1b00000 -- 100% complete. Cleanmarker written at 0x1b00000.
OK
Writing: from RAM addr 42660080, to NAND off 1b00000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1b20000, size 20000

Erasing at 0x1b20000 -- 100% complete. Cleanmarker written at 0x1b20000.
OK
Writing: from RAM addr 42680080, to NAND off 1b20000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1b40000, size 20000

Erasing at 0x1b40000 -- 100% complete. Cleanmarker written at 0x1b40000.
OK
Writing: from RAM addr 426a0080, to NAND off 1b40000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1b60000, size 20000

Erasing at 0x1b60000 -- 100% complete. Cleanmarker written at 0x1b60000.
OK
Writing: from RAM addr 426c0080, to NAND off 1b60000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1b80000, size 20000

Erasing at 0x1b80000 -- 100% complete. Cleanmarker written at 0x1b80000.
OK
Writing: from RAM addr 426e0080, to NAND off 1b80000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1ba0000, size 20000

Erasing at 0x1ba0000 -- 100% complete. Cleanmarker written at 0x1ba0000.
OK
Writing: from RAM addr 42700080, to NAND off 1ba0000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1bc0000, size 20000

Erasing at 0x1bc0000 -- 100% complete. Cleanmarker written at 0x1bc0000.
OK
Writing: from RAM addr 42720080, to NAND off 1bc0000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1be0000, size 20000

Erasing at 0x1be0000 -- 100% complete. Cleanmarker written at 0x1be0000.
OK
Writing: from RAM addr 42740080, to NAND off 1be0000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1c00000, size 20000

Erasing at 0x1c00000 -- 100% complete. Cleanmarker written at 0x1c00000.
OK
Writing: from RAM addr 42760080, to NAND off 1c00000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1c20000, size 20000

Erasing at 0x1c20000 -- 100% complete. Cleanmarker written at 0x1c20000.
OK
Writing: from RAM addr 42780080, to NAND off 1c20000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1c40000, size 20000

Erasing at 0x1c40000 -- 100% complete. Cleanmarker written at 0x1c40000.
OK
Writing: from RAM addr 427a0080, to NAND off 1c40000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1c60000, size 20000

Erasing at 0x1c60000 -- 100% complete. Cleanmarker written at 0x1c60000.
OK
Writing: from RAM addr 427c0080, to NAND off 1c60000, size 20000
 131072 bytes written: OK
Alive-timer 18
Erasing: off 1c80000, size 20000

Erasing at 0x1c80000 -- 100% complete. Cleanmarker written at 0x1c80000.
OK
Writing: from RAM addr 427e0080, to NAND off 1c80000, size 20000
 131072 bytes written: OK
Alive-timer 18
Done
Rebooting...
resetting ...

Resetting with watch dog!


U-Boot 2012.07 [local,local] (Sep 03 2015 - 17:33:28)

U-boot 2012.07 dni1 V0.4 for DNI HW ID: 29764958 NOR flash 0MB; NAND flash 128MB; RAM 512MB; 1st Radio 4x4; 2nd Radio 4x4; Cascade
smem ram ptable found: ver: 0 len: 5
DRAM:  491 MiB
NAND:  SF: Unsupported manufacturer 00
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
128 MiB
MMC:   
*** Warning - bad CRC, using default environment

PCI0 Link Intialized
PCI1 Link Intialized
In:    serial
Out:   serial
Err:   serial
 131072 bytes read: OK
MMC Device 0 not found
cdp: get part failed for 0:HLOS
Net:   MAC1 addr:3c:37:86:2a:c8:f6
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
MAC2 addr:3c:37:86:2a:c8:f5
eth0, eth1
Hit any key to stop autoboot:  2  1  0 

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !

Loading from device 0: nand0 (offset 0x1480000)
Skipping bad block 0x014a0000

** check kernel image **
   Verifying Checksum ... OK

** check rootfs image **

** Bad Magic Number 0x0 **

The Router is in TFTP Server Firmware Recovery mode NOW!
Listening on Port : 69, IP Address: 192.168.1.1 ...
Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            Upgrade Mode            
Rcv:

128 bytes?
Should be 128 kilobytes.

Sorry, 128kB. If I delete 131072 bytes with the hex editor in the 00 00 00 ... area of openwrt-18.06.0-ipq806x-netgear_r7800-squashfs-factory, I get the following serial out:

Rcv:
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	.................................................................
	....
Done!
Bytes transferred = 7008271 (6af00f hex)
MODEL ID on image: R7800
Firmware Image MODEL ID do not match open source firmware ID
 131072 bytes read: OK
HW ID on board: 29764958+0+128+512+4x4+4x4+cascade
HW ID on image: 29764958+0+128+512+4x4+4x4+cascade
Firmware Image HW ID matched Board HW ID

 131072 bytes read: OK
MODEL ID on board: R7800
MODEL ID on image: R7800
Firmware Image MODEL ID matched Board model ID

 131072 bytes read: OK
MODEL ID on board: R7800
MODEL ID on image: R7800
Firmware Image MODEL ID matched Board model ID

Erasing: off 1480000, size 20000

Erasing at 0x1480000 -- 100% complete. Cleanmarker written at 0x1480000.
OK
Writing: from RAM addr 42000080, to NAND off 1480000, size 20000
 131072 bytes written: OK
Alive-timer 26
NmrpAliveTimerBase 15
Skipping erasing bad block at 0x014a0000
Erasing: off 14c0000, size 20000

Erasing at 0x14c0000 -- 100% complete. Cleanmarker written at 0x14c0000.
OK
Writing: from RAM addr 42020080, to NAND off 14c0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 14e0000, size 20000

Erasing at 0x14e0000 -- 100% complete. Cleanmarker written at 0x14e0000.
OK
Writing: from RAM addr 42040080, to NAND off 14e0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1500000, size 20000

Erasing at 0x1500000 -- 100% complete. Cleanmarker written at 0x1500000.
OK
Writing: from RAM addr 42060080, to NAND off 1500000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1520000, size 20000

Erasing at 0x1520000 -- 100% complete. Cleanmarker written at 0x1520000.
OK
Writing: from RAM addr 42080080, to NAND off 1520000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1540000, size 20000

Erasing at 0x1540000 -- 100% complete. Cleanmarker written at 0x1540000.
OK
Writing: from RAM addr 420a0080, to NAND off 1540000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1560000, size 20000

Erasing at 0x1560000 -- 100% complete. Cleanmarker written at 0x1560000.
OK
Writing: from RAM addr 420c0080, to NAND off 1560000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1580000, size 20000

Erasing at 0x1580000 -- 100% complete. Cleanmarker written at 0x1580000.
OK
Writing: from RAM addr 420e0080, to NAND off 1580000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 15a0000, size 20000

Erasing at 0x15a0000 -- 100% complete. Cleanmarker written at 0x15a0000.
OK
Writing: from RAM addr 42100080, to NAND off 15a0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 15c0000, size 20000

Erasing at 0x15c0000 -- 100% complete. Cleanmarker written at 0x15c0000.
OK
Writing: from RAM addr 42120080, to NAND off 15c0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 15e0000, size 20000

Erasing at 0x15e0000 -- 100% complete. Cleanmarker written at 0x15e0000.
OK
Writing: from RAM addr 42140080, to NAND off 15e0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1600000, size 20000

Erasing at 0x1600000 -- 100% complete. Cleanmarker written at 0x1600000.
OK
Writing: from RAM addr 42160080, to NAND off 1600000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1620000, size 20000

Erasing at 0x1620000 -- 100% complete. Cleanmarker written at 0x1620000.
OK
Writing: from RAM addr 42180080, to NAND off 1620000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1640000, size 20000

Erasing at 0x1640000 -- 100% complete. Cleanmarker written at 0x1640000.
OK
Writing: from RAM addr 421a0080, to NAND off 1640000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1660000, size 20000

Erasing at 0x1660000 -- 100% complete. Cleanmarker written at 0x1660000.
OK
Writing: from RAM addr 421c0080, to NAND off 1660000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 1680000, size 20000

Erasing at 0x1680000 -- 100% complete. Cleanmarker written at 0x1680000.
OK
Writing: from RAM addr 421e0080, to NAND off 1680000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 16a0000, size 20000

Erasing at 0x16a0000 -- 100% complete. Cleanmarker written at 0x16a0000.
OK
Writing: from RAM addr 42200080, to NAND off 16a0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 16c0000, size 20000

Erasing at 0x16c0000 -- 100% complete. Cleanmarker written at 0x16c0000.
OK
Writing: from RAM addr 42220080, to NAND off 16c0000, size 20000
 131072 bytes written: OK
Alive-timer 15
Erasing: off 16e0000, size 20000

Erasing at 0x16e0000 -- 100% complete. Cleanmarker written at 0x16e0000.
OK
Writing: from RAM addr 42240080, to NAND off 16e0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1700000, size 20000

Erasing at 0x1700000 -- 100% complete. Cleanmarker written at 0x1700000.
OK
Writing: from RAM addr 42260080, to NAND off 1700000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1720000, size 20000

Erasing at 0x1720000 -- 100% complete. Cleanmarker written at 0x1720000.
OK
Writing: from RAM addr 42280080, to NAND off 1720000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1740000, size 20000

Erasing at 0x1740000 -- 100% complete. Cleanmarker written at 0x1740000.
OK
Writing: from RAM addr 422a0080, to NAND off 1740000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1760000, size 20000

Erasing at 0x1760000 -- 100% complete. Cleanmarker written at 0x1760000.
OK
Writing: from RAM addr 422c0080, to NAND off 1760000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1780000, size 20000

Erasing at 0x1780000 -- 100% complete. Cleanmarker written at 0x1780000.
OK
Writing: from RAM addr 422e0080, to NAND off 1780000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 17a0000, size 20000

Erasing at 0x17a0000 -- 100% complete. Cleanmarker written at 0x17a0000.
OK
Writing: from RAM addr 42300080, to NAND off 17a0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 17c0000, size 20000

Erasing at 0x17c0000 -- 100% complete. Cleanmarker written at 0x17c0000.
OK
Writing: from RAM addr 42320080, to NAND off 17c0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 17e0000, size 20000

Erasing at 0x17e0000 -- 100% complete. Cleanmarker written at 0x17e0000.
OK
Writing: from RAM addr 42340080, to NAND off 17e0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1800000, size 20000

Erasing at 0x1800000 -- 100% complete. Cleanmarker written at 0x1800000.
OK
Writing: from RAM addr 42360080, to NAND off 1800000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1820000, size 20000

Erasing at 0x1820000 -- 100% complete. Cleanmarker written at 0x1820000.
OK
Writing: from RAM addr 42380080, to NAND off 1820000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1840000, size 20000

Erasing at 0x1840000 -- 100% complete. Cleanmarker written at 0x1840000.
OK
Writing: from RAM addr 423a0080, to NAND off 1840000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1860000, size 20000

Erasing at 0x1860000 -- 100% complete. Cleanmarker written at 0x1860000.
OK
Writing: from RAM addr 423c0080, to NAND off 1860000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1880000, size 20000

Erasing at 0x1880000 -- 100% complete. Cleanmarker written at 0x1880000.
OK
Writing: from RAM addr 423e0080, to NAND off 1880000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 18a0000, size 20000

Erasing at 0x18a0000 -- 100% complete. Cleanmarker written at 0x18a0000.
OK
Writing: from RAM addr 42400080, to NAND off 18a0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 18c0000, size 20000

Erasing at 0x18c0000 -- 100% complete. Cleanmarker written at 0x18c0000.
OK
Writing: from RAM addr 42420080, to NAND off 18c0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 18e0000, size 20000

Erasing at 0x18e0000 -- 100% complete. Cleanmarker written at 0x18e0000.
OK
Writing: from RAM addr 42440080, to NAND off 18e0000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1900000, size 20000

Erasing at 0x1900000 -- 100% complete. Cleanmarker written at 0x1900000.
OK
Writing: from RAM addr 42460080, to NAND off 1900000, size 20000
 131072 bytes written: OK
Alive-timer 16
Erasing: off 1920000, size 20000

Erasing at 0x1920000 -- 100% complete. Cleanmarker written at 0x1920000.
OK
Writing: from RAM addr 42480080, to NAND off 1920000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1940000, size 20000

Erasing at 0x1940000 -- 100% complete. Cleanmarker written at 0x1940000.
OK
Writing: from RAM addr 424a0080, to NAND off 1940000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1960000, size 20000

Erasing at 0x1960000 -- 100% complete. Cleanmarker written at 0x1960000.
OK
Writing: from RAM addr 424c0080, to NAND off 1960000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1980000, size 20000

Erasing at 0x1980000 -- 100% complete. Cleanmarker written at 0x1980000.
OK
Writing: from RAM addr 424e0080, to NAND off 1980000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 19a0000, size 20000

Erasing at 0x19a0000 -- 100% complete. Cleanmarker written at 0x19a0000.
OK
Writing: from RAM addr 42500080, to NAND off 19a0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 19c0000, size 20000

Erasing at 0x19c0000 -- 100% complete. Cleanmarker written at 0x19c0000.
OK
Writing: from RAM addr 42520080, to NAND off 19c0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 19e0000, size 20000

Erasing at 0x19e0000 -- 100% complete. Cleanmarker written at 0x19e0000.
OK
Writing: from RAM addr 42540080, to NAND off 19e0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1a00000, size 20000

Erasing at 0x1a00000 -- 100% complete. Cleanmarker written at 0x1a00000.
OK
Writing: from RAM addr 42560080, to NAND off 1a00000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1a20000, size 20000

Erasing at 0x1a20000 -- 100% complete. Cleanmarker written at 0x1a20000.
OK
Writing: from RAM addr 42580080, to NAND off 1a20000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1a40000, size 20000

Erasing at 0x1a40000 -- 100% complete. Cleanmarker written at 0x1a40000.
OK
Writing: from RAM addr 425a0080, to NAND off 1a40000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1a60000, size 20000

Erasing at 0x1a60000 -- 100% complete. Cleanmarker written at 0x1a60000.
OK
Writing: from RAM addr 425c0080, to NAND off 1a60000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1a80000, size 20000

Erasing at 0x1a80000 -- 100% complete. Cleanmarker written at 0x1a80000.
OK
Writing: from RAM addr 425e0080, to NAND off 1a80000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1aa0000, size 20000

Erasing at 0x1aa0000 -- 100% complete. Cleanmarker written at 0x1aa0000.
OK
Writing: from RAM addr 42600080, to NAND off 1aa0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1ac0000, size 20000

Erasing at 0x1ac0000 -- 100% complete. Cleanmarker written at 0x1ac0000.
OK
Writing: from RAM addr 42620080, to NAND off 1ac0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1ae0000, size 20000

Erasing at 0x1ae0000 -- 100% complete. Cleanmarker written at 0x1ae0000.
OK
Writing: from RAM addr 42640080, to NAND off 1ae0000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1b00000, size 20000

Erasing at 0x1b00000 -- 100% complete. Cleanmarker written at 0x1b00000.
OK
Writing: from RAM addr 42660080, to NAND off 1b00000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1b20000, size 20000

Erasing at 0x1b20000 -- 100% complete. Cleanmarker written at 0x1b20000.
OK
Writing: from RAM addr 42680080, to NAND off 1b20000, size 20000
 131072 bytes written: OK
Alive-timer 17
Erasing: off 1b40000, size 20000

Erasing at 0x1b40000 -- 100% complete. Cleanmarker written at 0x1b40000.
OK
Writing: from RAM addr 426a0080, to NAND off 1b40000, size 20000
 131072 bytes written: OK
Alive-timer 17
Done
Rebooting...
resetting ...

Resetting with watch dog!


U-Boot 2012.07 [local,local] (Sep 03 2015 - 17:33:28)

U-boot 2012.07 dni1 V0.4 for DNI HW ID: 29764958 NOR flash 0MB; NAND flash 128MB; RAM 512MB; 1st Radio 4x4; 2nd Radio 4x4; Cascade
smem ram ptable found: ver: 0 len: 5
DRAM:  491 MiB
NAND:  SF: Unsupported manufacturer 00
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
128 MiB
MMC:   
*** Warning - bad CRC, using default environment

PCI0 Link Intialized
PCI1 Link Intialized
In:    serial
Out:   serial
Err:   serial
 131072 bytes read: OK
MMC Device 0 not found
cdp: get part failed for 0:HLOS
Net:   MAC1 addr:3c:37:86:2a:c8:f6
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
MAC2 addr:3c:37:86:2a:c8:f5
eth0, eth1
Hit any key to stop autoboot:  2  1  0 

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !

Loading from device 0: nand0 (offset 0x1480000)
Skipping bad block 0x014a0000

** check kernel image **
   Verifying Checksum ... OK

** check rootfs image **
   Verifying Checksum ... OK
MMC Device 0 not found

Loading from nand0, offset 0x1480000
   Image Name:   ARM OpenWrt Linux-4.14.151
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2188793 Bytes = 2.1 MiB
   Load Address: 42208000
   Entry Point:  42208000
Skipping bad block 0x014a0000
Automatic boot of image at addr 0x44000000 ...
   Image Name:   ARM OpenWrt Linux-4.14.151
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2188793 Bytes = 2.1 MiB
   Load Address: 42208000
   Entry Point:  42208000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK
mtdparts variable not set, see 'help mtdparts'
no partitions defined

defaults:
mtdids  : nand0=msm_nand
mtdparts: none
info: "mtdparts" not set
Using machid 0x136c from environment

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.14.151 (buildbot@62f0e5d67d46) (gcc version 7.3.0 (OpenWrt GCC 7.3.0 r7897-9d401013fc)) #0 SMP Tue Nov 5 14:12:18 2019
[    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5787d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
[    0.000000] OF: fdt: Machine model: Netgear Nighthawk X4S R7800
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] random: get_random_bytes called from 0xc09008dc with crng_init=0
[    0.000000] percpu: Embedded 15 pages/cpu s29388 r8192 d23860 u61440
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 121920
[    0.000000] Kernel command line: 
[    0.000000] Bootloader command line (ignored): console=ttyHSL1,115200n8
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Memory: 477376K/491520K available (4912K kernel code, 162K rwdata, 760K rodata, 1024K init, 234K bss, 14144K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xde800000 - 0xff800000   ( 528 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xde000000   ( 480 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0208000 - 0xc07cc198   (5905 kB)
[    0.000000]       .init : 0xc0900000 - 0xc0a00000   (1024 kB)
[    0.000000]       .data : 0xc0a00000 - 0xc0a28840   ( 163 kB)
[    0.000000]        .bss : 0xc0a2a000 - 0xc0a64a98   ( 235 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] clocksource: dg_timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 305801671480 ns
[    0.000007] sched_clock: 32 bits at 6MHz, resolution 160ns, wraps every 343597383600ns
[    0.000021] Switching to timer-based delay loop, resolution 160ns
[    0.000222] Calibrating delay loop (skipped), value calculated using timer frequency.. 12.50 BogoMIPS (lpj=62500)
[    0.000245] pid_max: default: 32768 minimum: 301
[    0.000368] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000385] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000954] CPU: Testing write buffer coherency: ok
[    0.001721] Setting up static identity map for 0x42300000 - 0x42300060
[    0.001876] Hierarchical SRCU implementation.
[    0.002599] smp: Bringing up secondary CPUs ...
[    0.004425] smp: Brought up 1 node, 2 CPUs
[    0.004444] SMP: Total of 2 processors activated (25.00 BogoMIPS).
[    0.004456] CPU: All CPU(s) started in SVC mode.
[    0.014961] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
[    0.015127] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.015151] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.015263] pinctrl core: initialized pinctrl subsystem
[    0.016231] NET: Registered protocol family 16
[    0.016476] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.017784] cpuidle: using governor ladder
[    0.017851] cpuidle: using governor menu
[    0.040569] msm_bus_fabric_init_driver
[    0.042076] usbcore: registered new interface driver usbfs
[    0.042153] usbcore: registered new interface driver hub
[    0.042235] usbcore: registered new device driver usb
[    0.042292] pps_core: LinuxPPS API ver. 1 registered
[    0.042304] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.042338] PTP clock support registered
[    0.043998] clocksource: Switched to clocksource dg_timer
[    0.047181] NET: Registered protocol family 2
[    0.047770] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    0.047814] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[    0.047870] TCP: Hash tables configured (established 4096 bind 4096)
[    0.047963] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.047989] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.048166] NET: Registered protocol family 1
[    0.049307] No memory allocated for crashlog
[    0.049584] workingset: timestamp_bits=30 max_order=17 bucket_order=0
[    0.054580] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.054595] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.061511] io scheduler noop registered
[    0.061530] io scheduler deadline registered (default)
[    0.063339] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda not found, using dummy regulator
[    0.063446] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_phy not found, using dummy regulator
[    0.063541] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_refclk not found, using dummy regulator
[    0.064446] OF: PCI: host bridge /soc/pci@1b500000 ranges:
[    0.064491] OF: PCI:    IO 0x0fe00000..0x0fefffff -> 0x0fe00000
[    0.064517] OF: PCI:   MEM 0x08000000..0x0fdfffff -> 0x08000000
[    0.172647] qcom-pcie 1b500000.pci: link up
[    0.172808] qcom-pcie 1b500000.pci: PCI host bridge to bus 0000:00
[    0.172831] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.172852] pci_bus 0000:00: root bus resource [io  0x0000-0xfffff] (bus address [0xfe00000-0xfefffff])
[    0.172867] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fdfffff]
[    0.173385] PCI: bus0: Fast back to back transfers disabled
[    0.175715] PCI: bus1: Fast back to back transfers disabled
[    0.175812] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
[    0.175836] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
[    0.175965] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    0.175990] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
[    0.176519] pcieport 0000:00:00.0: AER enabled with IRQ 35
[    0.177039] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda not found, using dummy regulator
[    0.177137] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_phy not found, using dummy regulator
[    0.177239] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_refclk not found, using dummy regulator
[    0.178000] OF: PCI: host bridge /soc/pci@1b700000 ranges:
[    0.178037] OF: PCI:    IO 0x31e00000..0x31efffff -> 0x31e00000
[    0.178061] OF: PCI:   MEM 0x2e000000..0x31dfffff -> 0x2e000000
[    0.287983] qcom-pcie 1b700000.pci: link up
[    0.288127] qcom-pcie 1b700000.pci: PCI host bridge to bus 0001:00
[    0.288146] pci_bus 0001:00: root bus resource [bus 00-ff]
[    0.288160] pci_bus 0001:00: root bus resource [mem 0x2e000000-0x31dfffff]
[    0.288617] PCI: bus0: Fast back to back transfers disabled
[    0.290953] PCI: bus1: Fast back to back transfers disabled
[    0.291039] pci 0001:00:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
[    0.291062] pci 0001:01:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
[    0.291192] pci 0001:00:00.0: PCI bridge to [bus 01-ff]
[    0.291212] pci 0001:00:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
[    0.291684] pcieport 0001:00:00.0: AER enabled with IRQ 68
[    0.294034] L2 @ QSB rate. Forcing new rate.
[    0.294374] L2 @ 384000 KHz
[    0.294558] CPU0 @ 800000 KHz
[    0.294571] CPU1 @ QSB rate. Forcing new rate.
[    0.294699] CPU1 @ 384000 KHz
[    0.298553] gsbi 16300000.gsbi: GSBI port protocol: 6 crci: 0
[    0.300478] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.303028] msm_serial 16340000.serial: msm_serial: detected port #0
[    0.303134] msm_serial 16340000.serial: uartclk = 7372800
[    0.303217] 16340000.serial: ttyMSM0 at MMIO 0x16340000 (irq = 101, base_baud = 460800) is a MSM
[    0.303255] msm_serial: console setup on port #0
[    1.023180] console [ttyMSM0] enabled
[    1.028025] msm_serial: driver initialized
[    1.036608] loop: module loaded
[    1.038628] nand: device found, Manufacturer ID: 0xc2, Chip ID: 0xa1
[    1.038661] nand: Macronix MX30UF1G18AC
[    1.045240] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.048823] 8 fixed-partitions partitions found on MTD device qcom_nand.0
[    1.056459] Creating 8 MTD partitions on "qcom_nand.0":
[    1.063219] 0x000000000000-0x000000c80000 : "qcadata"
[    1.073272] random: fast init done
[    1.090994] 0x000000c80000-0x000001180000 : "APPSBL"
[    1.100454] 0x000001180000-0x000001200000 : "APPSBLENV"
[    1.102088] 0x000001200000-0x000001340000 : "art"
[    1.107475] 0x000001340000-0x000001480000 : "artbak"
[    1.112248] 0x000001480000-0x000001880000 : "kernel"
[    1.122116] 0x000001880000-0x000007900000 : "ubi"
[    1.289503] 0x000007900000-0x000008000000 : "reserve"
[    1.303616] libphy: GPIO Bitbanged MDIO: probed
[    1.325074] switch0: Atheros AR8337 rev. 2 switch registered on gpio-0
[    2.186780] libphy: Fixed MDIO Bus: probed
[    2.188975] ipq806x-gmac-dwmac 37200000.ethernet: PTP uses main clock
[    2.190090] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.196382] ipq806x-gmac-dwmac 37200000.ethernet: Ring mode enabled
[    2.201320] ipq806x-gmac-dwmac 37200000.ethernet: DMA HW capability register supported
[    2.207471] ipq806x-gmac-dwmac 37200000.ethernet: Enhanced/Alternate descriptors
[    2.215461] ipq806x-gmac-dwmac 37200000.ethernet: Enabled extended descriptors
[    2.222935] ipq806x-gmac-dwmac 37200000.ethernet: RX Checksum Offload Engine supported
[    2.230050] ipq806x-gmac-dwmac 37200000.ethernet: COE Type 2
[    2.237921] ipq806x-gmac-dwmac 37200000.ethernet: TX Checksum insertion supported
[    2.243680] ipq806x-gmac-dwmac 37200000.ethernet: Wake-Up On Lan supported
[    2.251139] ipq806x-gmac-dwmac 37200000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.259485] ipq806x-gmac-dwmac 37400000.ethernet: PTP uses main clock
[    2.266699] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.272761] ipq806x-gmac-dwmac 37400000.ethernet: Ring mode enabled
[    2.277878] ipq806x-gmac-dwmac 37400000.ethernet: DMA HW capability register supported
[    2.283874] ipq806x-gmac-dwmac 37400000.ethernet: Enhanced/Alternate descriptors
[    2.291934] ipq806x-gmac-dwmac 37400000.ethernet: Enabled extended descriptors
[    2.299494] ipq806x-gmac-dwmac 37400000.ethernet: RX Checksum Offload Engine supported
[    2.306523] ipq806x-gmac-dwmac 37400000.ethernet: COE Type 2
[    2.314396] ipq806x-gmac-dwmac 37400000.ethernet: TX Checksum insertion supported
[    2.320156] ipq806x-gmac-dwmac 37400000.ethernet: Wake-Up On Lan supported
[    2.327612] ipq806x-gmac-dwmac 37400000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.335043] i2c /dev entries driver
[    2.343724] Calibration not found.
[    2.347367] Speed bin: 0
[    2.349572] PVS bin: 4
[    2.353590] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.354616] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.362174] sdhci: Secure Digital Host Controller Interface driver
[    2.369036] sdhci: Copyright(c) Pierre Ossman
[    2.375248] sdhci-pltfm: SDHCI platform and OF driver helper
[    2.381141] NET: Registered protocol family 10
[    2.386780] Segment Routing with IPv6
[    2.389666] NET: Registered protocol family 17
[    2.393376] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    2.398476] 8021q: 802.1Q VLAN Support v1.8
[    2.410910] Registering SWP/SWPB emulation handler
[    2.427103] qcom_rpm 108000.rpm: RPM firmware 3.0.16777364
[    2.439275] s1a: supplied by regulator-dummy
[    2.439376] s1a: Bringing 0uV into 1050000-1050000uV
[    2.442868] s1b: supplied by regulator-dummy
[    2.447694] s1b: Bringing 0uV into 1050000-1050000uV
[    2.452043] s2a: supplied by regulator-dummy
[    2.456887] s2a: Bringing 0uV into 775000-775000uV
[    2.461251] s2b: supplied by regulator-dummy
[    2.465750] s2b: Bringing 0uV into 775000-775000uV
[    2.474916] UBI error: no valid UBI magic found insid⸮[    2.481097] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    2.481123] Please append a correct "root=" boot option; here are the available partitions:
[    2.487672] 1f00           12800 mtdblock0 
[    2.487678]  (driver?)
[    2.499879] 1f01            5120 mtdblock1 
[    2.499885]  (driver?)
[    2.506459] 1f02             512 mtdblock2 
[    2.506466]  (driver?)
[    2.512899] 1f03            1280 mtdblock3 
[    2.512904]  (driver?)
[    2.519410] 1f04            1280 mtdblock4 
[    2.519416]  (driver?)
[    2.525984] 1f05            4096 mtdblock5 
[    2.525990]  (driver?)
[    2.532429] 1f06           98816 mtdblock6 
[    2.532435]  (driver?)
[    2.538940] 1f07            7168 mtdblock7 
[    2.538946]  (driver?)
[    2.545538] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    2.547907] CPU1: stopping
[    2.556140] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.14.151 #0
[    2.558825] Hardware name: Generic DT based system
[    2.565002] Function entered at [<c030f1b8>] from [<c030b388>]
[    2.569682] Function entered at [<c030b388>] from [<c07b14d8>]
[    2.575498] Function entered at [<c07b14d8>] from [<c030e400>]
[    2.581311] Function entered at [<c030e400>] from [<c03014b8>]
[    2.587128] Function entered at [<c03014b8>] from [<c030bf8c>]
[    2.592943] Exception stack(0xdd461f80 to 0xdd461fc8)
[    2.598798] 1f80: 00000001 00000000 00000000 c0314f60 ffffe000 c0a03c74 c0a03c28 00000000
[    2.603923] 1fa0: 00000000 512f04d0 00000000 00000000 dd461fc8 dd461fd0 c03086ac c03086b0
[    2.612052] 1fc0: 60000013 ffffffff
[    2.620198] Function entered at [<c030bf8c>] from [<c03086b0>]
[    2.623499] Function entered at [<c03086b0>] from [<c034fd70>]
[    2.629403] Function entered at [<c034fd70>] from [<c03500b8>]
[    2.635216] Function entered at [<c03500b8>] from [<423017cc>]
[    2.641041] Rebooting in 1 seconds..

I also booted the initramfs image, then did a sysupgrade. However the system seems to hang now at

IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready

Generic sysupgrade was used: f4a74dcd25cee33c2611770f60bdf91961ef0c77099716055662dd7518b5ebde 5170.3 KB Tue Dec 3 13:52:54 2019)

root@OpenWrt:/tmp# sysupgrade -n openwrt-ipq806x-generic-netgear_r7800-squashfs-
sysupgrade.bin
Commencing upgrade. Closing all shell sessions.

Serial out:

Watchdog handover: fd=3
- watchdog -
killall: telnetd: no process killed
killall: ash: no process killed
Sending TERM to remaining processes ... ntpd odhcp6c udhcpc ubusd askfirst dnsmasq urngd hostapd wpa_supplicant hostapd wpa_supplicant logd netifd odhcpd 
Sending KILL to remaining processes ... 
Switching to ramdisk...
[  297.745849] UBIFS (ubi0:7): background thread "ubifs_bgt0_7" stops
[  297.822688] UBIFS (ubi0:7): un-mount UBI device 0
Performing system upgrade...
Unlocking kernel ...

Writing from <stdin> to kernel ...  [ ][e][w][e]
Skipping bad block at 0x00020000   [e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w]    
removing ubiblock0_6
[  299.376731] block ubiblock0_6: released
Volume ID 6, size 23 LEBs (2920448 bytes, 2.7 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs", alignment 1
Set volume size to 27807744
Volume ID 7, size 219 LEBs (27807744 bytes, 26.5 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
sysupgrade successful
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
[  301.317509] reboot: Restarting system


U-Boot 2012.07 [local,local] (Sep 03 2015 - 17:33:28)

U-boot 2012.07 dni1 V0.4 for DNI HW ID: 29764958 NOR flash 0MB; NAND flash 128MB; RAM 512MB; 1st Radio 4x4; 2nd Radio 4x4; Cascade
smem ram ptable found: ver: 0 len: 5
DRAM:  491 MiB
NAND:  SF: Unsupported manufacturer 00
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
128 MiB
MMC:   
*** Warning - bad CRC, using default environment

PCI0 Link Intialized
PCI1 Link Intialized
In:    serial
Out:   serial
Err:   serial
 131072 bytes read: OK
MMC Device 0 not found
cdp: get part failed for 0:HLOS
Net:   MAC1 addr:3c:37:86:2a:c8:f6
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
MAC2 addr:3c:37:86:2a:c8:f5
eth0, eth1
Hit any key to stop autoboot:  2  1  0 

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !

Loading from device 0: nand0 (offset 0x1480000)
Skipping bad block 0x014a0000

** check kernel image **
   Verifying Checksum ... OK

** check rootfs image **
   Verifying Checksum ... OK
MMC Device 0 not found

Loading from nand0, offset 0x1480000
   Image Name:   ARM OpenWrt Linux-4.14.156
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2430520 Bytes = 2.3 MiB
   Load Address: 42208000
   Entry Point:  42208000
Skipping bad block 0x014a0000
Automatic boot of image at addr 0x44000000 ...
   Image Name:   ARM OpenWrt Linux-4.14.156
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2430520 Bytes = 2.3 MiB
   Load Address: 42208000
   Entry Point:  42208000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK
mtdparts variable not set, see 'help mtdparts'
no partitions defined

defaults:
mtdids  : nand0=msm_nand
mtdparts: none
info: "mtdparts" not set
Using machid 0x136c from environment

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.14.156 (builder@buildhost) (gcc version 8.3.0 (OpenWrt GCC 8.3.0 r11618-416d2cc71e)) #0 SMP Mon Dec 2 20:52:33 2019
[    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5787d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
[    0.000000] OF: fdt: Machine model: Netgear Nighthawk X4S R7800
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] random: get_random_bytes called from start_kernel+0x8c/0x42c with crng_init=0
[    0.000000] percpu: Embedded 15 pages/cpu s29260 r8192 d23988 u61440
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 121800
[    0.000000] Kernel command line: 
[    0.000000] Bootloader command line (ignored): console=ttyHSL1,115200n8
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Memory: 475852K/491520K available (5189K kernel code, 176K rwdata, 1324K rodata, 1024K init, 239K bss, 15668K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xde800000 - 0xff800000   ( 528 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xde000000   ( 480 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0208000 - 0xc0811670   (6182 kB)
[    0.000000]       .init : 0xc0a00000 - 0xc0b00000   (1024 kB)
[    0.000000]       .data : 0xc0b00000 - 0xc0b2c100   ( 177 kB)
[    0.000000]        .bss : 0xc0b2e000 - 0xc0b69d98   ( 240 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] clocksource: dg_timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 305801671480 ns
[    0.000006] sched_clock: 32 bits at 6MHz, resolution 160ns, wraps every 343597383600ns
[    0.000020] Switching to timer-based delay loop, resolution 160ns
[    0.000214] Calibrating delay loop (skipped), value calculated using timer frequency.. 12.50 BogoMIPS (lpj=62500)
[    0.000241] pid_max: default: 32768 minimum: 301
[    0.000404] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000425] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.001241] CPU: Testing write buffer coherency: ok
[    0.002093] Setting up static identity map for 0x42300000 - 0x42300060
[    0.002264] Hierarchical SRCU implementation.
[    0.003055] smp: Bringing up secondary CPUs ...
[    0.004944] smp: Brought up 1 node, 2 CPUs
[    0.004960] SMP: Total of 2 processors activated (25.00 BogoMIPS).
[    0.004971] CPU: All CPU(s) started in SVC mode.
[    0.016500] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
[    0.016671] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.016701] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.016856] pinctrl core: initialized pinctrl subsystem
[    0.017910] NET: Registered protocol family 16
[    0.018168] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.019528] cpuidle: using governor ladder
[    0.019595] cpuidle: using governor menu
[    0.042818] msm_bus_fabric_init_driver
[    0.044226] usbcore: registered new interface driver usbfs
[    0.044308] usbcore: registered new interface driver hub
[    0.044393] usbcore: registered new device driver usb
[    0.044453] pps_core: LinuxPPS API ver. 1 registered
[    0.044467] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.044500] PTP clock support registered
[    0.046266] clocksource: Switched to clocksource dg_timer
[    0.049636] NET: Registered protocol family 2
[    0.050219] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    0.050263] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[    0.050318] TCP: Hash tables configured (established 4096 bind 4096)
[    0.050415] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.050442] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.050655] NET: Registered protocol family 1
[    0.052067] No memory allocated for crashlog
[    0.052299] workingset: timestamp_bits=14 max_order=17 bucket_order=3
[    0.058201] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.058220] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.065084] io scheduler noop registered
[    0.065102] io scheduler deadline registered (default)
[    0.066894] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda not found, using dummy regulator
[    0.067008] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_phy not found, using dummy regulator
[    0.067107] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_refclk not found, using dummy regulator
[    0.067917] OF: PCI: host bridge /soc/pci@1b500000 ranges:
[    0.067961] OF: PCI:    IO 0x0fe00000..0x0fefffff -> 0x0fe00000
[    0.067987] OF: PCI:   MEM 0x08000000..0x0fdfffff -> 0x08000000
[    0.176150] qcom-pcie 1b500000.pci: link up
[    0.176325] qcom-pcie 1b500000.pci: PCI host bridge to bus 0000:00
[    0.176348] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.176481] pci_bus 0000:00: root bus resource [io  0x0000-0xfffff] (bus address [0xfe00000-0xfefffff])
[    0.176499] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fdfffff]
[    0.177047] PCI: bus0: Fast back to back transfers disabled
[    0.179279] PCI: bus1: Fast back to back transfers disabled
[    0.179380] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
[    0.179406] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
[    0.179536] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    0.179560] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
[    0.180120] pcieport 0000:00:00.0: AER enabled with IRQ 35
[    0.180668] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda not found, using dummy regulator
[    0.180782] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_phy not found, using dummy regulator
[    0.180875] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_refclk not found, using dummy regulator
[    0.181650] OF: PCI: host bridge /soc/pci@1b700000 ranges:
[    0.181692] OF: PCI:    IO 0x31e00000..0x31efffff -> 0x31e00000
[    0.181714] OF: PCI:   MEM 0x2e000000..0x31dfffff -> 0x2e000000
[    0.291608] qcom-pcie 1b700000.pci: link up
[    0.291763] qcom-pcie 1b700000.pci: PCI host bridge to bus 0001:00
[    0.291783] pci_bus 0001:00: root bus resource [bus 00-ff]
[    0.291799] pci_bus 0001:00: root bus resource [mem 0x2e000000-0x31dfffff]
[    0.292261] PCI: bus0: Fast back to back transfers disabled
[    0.294613] PCI: bus1: Fast back to back transfers disabled
[    0.294699] pci 0001:00:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
[    0.294723] pci 0001:01:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
[    0.294853] pci 0001:00:00.0: PCI bridge to [bus 01-ff]
[    0.294874] pci 0001:00:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
[    0.295380] pcieport 0001:00:00.0: AER enabled with IRQ 68
[    0.297894] L2 @ QSB rate. Forcing new rate.
[    0.298121] L2 @ 384000 KHz
[    0.298296] CPU0 @ 800000 KHz
[    0.298309] CPU1 @ QSB rate. Forcing new rate.
[    0.298434] CPU1 @ 384000 KHz
[    0.302351] gsbi 16300000.gsbi: GSBI port protocol: 6 crci: 0
[    0.304297] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.307011] msm_serial 16340000.serial: msm_serial: detected port #0
[    0.307116] msm_serial 16340000.serial: uartclk = 7372800
[    0.307202] 16340000.serial: ttyMSM0 at MMIO 0x16340000 (irq = 101, base_baud = 460800) is a MSM
[    0.307241] msm_serial: console setup on port #0
[    1.028204] console [ttyMSM0] enabled
[    1.032902] msm_serial: driver initialized
[    1.041946] loop: module loaded
[    1.043999] nand: device found, Manufacturer ID: 0xc2, Chip ID: 0xa1
[    1.044034] nand: Macronix MX30UF1G18AC
[    1.050617] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.054162] 8 fixed-partitions partitions found on MTD device qcom_nand.0
[    1.061794] Creating 8 MTD partitions on "qcom_nand.0":
[    1.068648] 0x000000000000-0x000000c80000 : "qcadata"
[    1.078566] random: fast init done
[    1.096404] 0x000000c80000-0x000001180000 : "APPSBL"
[    1.105865] 0x000001180000-0x000001200000 : "APPSBLENV"
[    1.107600] 0x000001200000-0x000001340000 : "art"
[    1.112915] 0x000001340000-0x000001480000 : "artbak"
[    1.117765] 0x000001480000-0x000001880000 : "kernel"
[    1.127546] 0x000001880000-0x000007900000 : "ubi"
[    1.295433] 0x000007900000-0x000008000000 : "reserve"
[    1.309714] libphy: GPIO Bitbanged MDIO: probed
[    1.331206] switch0: Atheros AR8337 rev. 2 switch registered on gpio-0
[    2.187502] ar8327: qca,phy-rgmii-en is not specified
[    2.187897] libphy: Fixed MDIO Bus: probed
[    2.193742] ipq806x-gmac-dwmac 37200000.ethernet: PTP uses main clock
[    2.195842] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.202134] ipq806x-gmac-dwmac 37200000.ethernet: Ring mode enabled
[    2.207162] ipq806x-gmac-dwmac 37200000.ethernet: DMA HW capability register supported
[    2.213156] ipq806x-gmac-dwmac 37200000.ethernet: Enhanced/Alternate descriptors
[    2.221207] ipq806x-gmac-dwmac 37200000.ethernet: Enabled extended descriptors
[    2.228766] ipq806x-gmac-dwmac 37200000.ethernet: RX Checksum Offload Engine supported
[    2.235724] ipq806x-gmac-dwmac 37200000.ethernet: COE Type 2
[    2.243701] ipq806x-gmac-dwmac 37200000.ethernet: TX Checksum insertion supported
[    2.249511] ipq806x-gmac-dwmac 37200000.ethernet: Wake-Up On Lan supported
[    2.256887] ipq806x-gmac-dwmac 37200000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.265248] ipq806x-gmac-dwmac 37400000.ethernet: PTP uses main clock
[    2.272463] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.278597] ipq806x-gmac-dwmac 37400000.ethernet: Ring mode enabled
[    2.283550] ipq806x-gmac-dwmac 37400000.ethernet: DMA HW capability register supported
[    2.289715] ipq806x-gmac-dwmac 37400000.ethernet: Enhanced/Alternate descriptors
[    2.297681] ipq806x-gmac-dwmac 37400000.ethernet: Enabled extended descriptors
[    2.305165] ipq806x-gmac-dwmac 37400000.ethernet: RX Checksum Offload Engine supported
[    2.312273] ipq806x-gmac-dwmac 37400000.ethernet: COE Type 2
[    2.320174] ipq806x-gmac-dwmac 37400000.ethernet: TX Checksum insertion supported
[    2.325913] ipq806x-gmac-dwmac 37400000.ethernet: Wake-Up On Lan supported
[    2.333360] ipq806x-gmac-dwmac 37400000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.340821] i2c /dev entries driver
[    2.349599] Calibration not found.
[    2.353022] Speed bin: 0
[    2.355328] PVS bin: 4
[    2.359500] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.360267] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.367999] sdhci: Secure Digital Host Controller Interface driver
[    2.374692] sdhci: Copyright(c) Pierre Ossman
[    2.381027] sdhci-pltfm: SDHCI platform and OF driver helper
[    2.386958] NET: Registered protocol family 10
[    2.392529] Segment Routing with IPv6
[    2.395435] NET: Registered protocol family 17
[    2.399261] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    2.404104] 8021q: 802.1Q VLAN Support v1.8
[    2.416664] Registering SWP/SWPB emulation handler
[    2.433934] qcom_rpm 108000.rpm: RPM firmware 3.0.16777364
[    2.446160] s1a: supplied by regulator-dummy
[    2.446251] s1a: Bringing 0uV into 1050000-1050000uV
[    2.449842] s1b: supplied by regulator-dummy
[    2.454498] s1b: Bringing 0uV into 1050000-1050000uV
[    2.459044] s2a: supplied by regulator-dummy
[    2.463712] s2a: Bringing 0uV into 775000-775000uV
[    2.468214] s2b: supplied by regulator-dummy
[    2.472561] s2b: Bringing 0uV into 775000-775000uV
[    2.481914] UBI: auto-attach mtd6
[    2.481947] ubi0: attaching mtd6
[    2.534810] random: crng init done
[    3.195219] ubi0: scanning is finished
[    3.205168] ubi0: attached mtd6 (name "ubi", size 96 MiB)
[    3.205187] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    3.209603] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    3.216306] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    3.223233] ubi0: good PEBs: 772, bad PEBs: 0, corrupted PEBs: 0
[    3.229999] ubi0: user volume: 8, internal volumes: 1, max. volumes count: 128
[    3.236187] ubi0: max/mean erase counter: 3/1, WL threshold: 4096, image sequence number: 0
[    3.243276] ubi0: available PEBs: 0, total reserved PEBs: 772, PEBs reserved for bad PEB handling: 20
[    3.251628] ubi0: background thread "ubi_bgt0d" started, PID 58
[    3.252233] block ubiblock0_6: created from ubi0:6(rootfs)
[    3.266614] ubiblock: device ubiblock0_6 (rootfs) set to be root file⸮[    3.283854] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    3.285251] Freeing unused kernel memory: 1024K
[    3.743249] init: Console is alive
[    3.743490] init: - watchdog -
[    4.376071] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    4.442090] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    4.443910] SCSI subsystem initialized
[    4.451701] ahci 29000000.sata: forcing port_map 0x0 -> 0x1
[    4.451748] ahci 29000000.sata: AHCI 0001.0300 32 slots 1 ports 6 Gbps 0x1 impl platform mode
[    4.456775] ahci 29000000.sata: flags: ncq sntf pm led clo only pmp pio slum part ccc apst 
[    4.466020] scsi host0: ahci
[    4.473730] ata1: SATA max UDMA/133 mmio [mem 0x29000000-0x2900017f] port 0x100 irq 26
[    4.808193] ata1: SATA link down (SStatus 0 SControl 300)
[    4.810771] ehci-platform: EHCI generic platform driver
[    4.817107] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    4.818324] ohci-platform: OHCI generic platform driver
[    4.955513] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    4.955625] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[    4.960377] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f065 hci version 0x100 quirks 0x0000000002010010
[    4.967694] xhci-hcd xhci-hcd.0.auto: irq 105, io mem 0x11000000
[    4.977600] hub 1-0:1.0: USB hub found
[    4.983103] hub 1-0:1.0: 1 port detected
[    4.986964] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    4.990720] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[    4.996014] xhci-hcd xhci-hcd.0.auto: Host supports USB 3.0  SuperSpeed
[    5.003727] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    5.010541] hub 2-0:1.0: USB hub found
[    5.018578] hub 2-0:1.0: 1 port detected
[    5.022275] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    5.026140] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 3
[    5.031633] xhci-hcd xhci-hcd.1.auto: hcc params 0x0228f065 hci version 0x100 quirks 0x0000000002010010
[    5.039069] xhci-hcd xhci-hcd.1.auto: irq 106, io mem 0x10000000
[    5.048791] hub 3-0:1.0: USB hub found
[    5.054621] hub 3-0:1.0: 1 port detected
[    5.058416] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    5.062246] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 4
[    5.067605] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0  SuperSpeed
[    5.075158] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM.
[    5.082079] hub 4-0:1.0: USB hub found
[    5.090116] hub 4-0:1.0: 1 port detected
[    5.095073] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    5.101110] init: - preinit -
[    6.958189] Generic PHY fixed-0:01: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:01, irq=POLL)
[    6.959328] dwmac1000: Master AXI performs any burst length
[    6.967189] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported
[    6.972603] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock
[    6.982225] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    8.009312] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
[    8.011515] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[   10.160226] UBIFS (ubi0:7): default file-system created
[   10.161475] UBIFS (ubi0:7): background thread "ubifs_bgt0_7" started, PID 139
[   10.255984] UBIFS (ubi0:7): UBIFS: mounted UBI device 0, volume 7, name "rootfs_data"
[   10.256012] UBIFS (ubi0:7): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   10.262882] UBIFS (ubi0:7): FS size: 26537984 bytes (25 MiB, 209 LEBs), journal size 1269760 bytes (1 MiB, 10 LEBs)
[   10.272767] UBIFS (ubi0:7): reserved for root: 1253454 bytes (1224 KiB)
[   10.282999] UBIFS (ubi0:7): media format: w4/r0 (latest is w5/r0), UUID 3C8A96BF-7D99-48F9-9831-0B55A0CB9FA4, small LPT model
[   10.291989] mount_root: overlay filesystem has not been fully initialized yet
[   10.301523] mount_root: switching to ubifs overlay
[   10.336107] urandom-seed: Seed file not found (/etc/urandom.seed)
[   10.435107] procd: - early -
[   10.435258] procd: - watchdog -
[   11.076081] procd: - watchdog -
[   11.076732] procd: - ubus -
[   11.225643] procd: - init -
Please press Enter to activate this console.
[   11.374900] urngd: v1.0.1 started.
[   11.387554] kmodloader: loading kernel modules from /etc/modules.d/*
[   11.390170] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   11.396649] Loading modules backported from Linux version v5.4-rc8-0-gaf42d3466bdc
[   11.398261] Backport generated by backports.git v5.4-rc8-1-0-g368e8c51
[   11.406504] ip_tables: (C) 2000-2006 Netfilter Core Team
[   11.414936] nf_conntrack version 0.5.0 (8192 buckets, 32768 max)
[   11.452901] xt_time: kernel timezone is -0000
[   11.482449] PPP generic driver version 2.4.2
[   11.483802] NET: Registered protocol family 24
[   11.492296] ath10k 4.19 driver, optimized for CT firmware, probing pci device: 0x46.
[   11.492830] ath10k_pci 0000:01:00.0: enabling device (0140 -> 0142)
[   11.499697] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   11.669246] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/fwcfg-pci-0000:01:00.0.txt failed with error -2
[   11.669289] ath10k_pci 0000:01:00.0: Falling back to user helper
[   11.786971] firmware ath10k!fwcfg-pci-0000:01:00.0.txt: firmware_loading_store: map pages failed
[   11.787140] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/pre-cal-pci-0000:01:00.0.bin failed with error -2
[   11.794821] ath10k_pci 0000:01:00.0: Falling back to user helper
[   11.936227] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA9984/hw1.0/ct-firmware-5.bin failed with error -2
[   11.936267] ath10k_pci 0000:01:00.0: Falling back to user helper
[   11.992401] firmware ath10k!QCA9984!hw1.0!ct-firmware-5.bin: firmware_loading_store: map pages failed
[   11.992713] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA9984/hw1.0/ct-firmware-2.bin failed with error -2
[   12.000749] ath10k_pci 0000:01:00.0: Falling back to user helper
[   12.053694] firmware ath10k!QCA9984!hw1.0!ct-firmware-2.bin: firmware_loading_store: map pages failed
[   12.054006] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA9984/hw1.0/firmware-6.bin failed with error -2
[   12.062031] ath10k_pci 0000:01:00.0: Falling back to user helper
[   12.113606] firmware ath10k!QCA9984!hw1.0!firmware-6.bin: firmware_loading_store: map pages failed
[   12.425847] ath10k_pci 0000:01:00.0: qca9984/qca9994 hw1.0 target 0x01000000 chip_id 0x00000000 sub 168c:cafe
[   12.425889] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   12.438852] ath10k_pci 0000:01:00.0: firmware ver 10.4b-ct-9984-fW-012-0ee2f206b api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 c3fbc410
[   14.780332] ath10k_pci 0000:01:00.0: board_file api 2 bmi_id 0:1 crc32 85498734
[   20.640907] ath10k_pci 0000:01:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   20.640936] ath10k_pci 0000:01:00.0: msdu-desc: 2500  skid: 32
[   20.722888] ath10k_pci 0000:01:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   20.723742] ath10k_pci 0000:01:00.0: wmi print 'free: 81784 iram: 23220 sram: 14440'
[   20.980291] ath10k_pci 0000:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   21.080120] ath10k 4.19 driver, optimized for CT firmware, probing pci device: 0x46.
[   21.081565] ath10k_pci 0001:01:00.0: enabling device (0140 -> 0142)
[   21.087780] ath10k_pci 0001:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   21.258703] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/fwcfg-pci-0001:01:00.0.txt failed with error -2
[   21.258739] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.510661] firmware ath10k!fwcfg-pci-0001:01:00.0.txt: firmware_loading_store: map pages failed
[   21.511339] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/pre-cal-pci-0001:01:00.0.bin failed with error -2
[   21.518621] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.586080] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA9984/hw1.0/ct-firmware-5.bin failed with error -2
[   21.586111] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.617990] firmware ath10k!QCA9984!hw1.0!ct-firmware-5.bin: firmware_loading_store: map pages failed
[   21.618262] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA9984/hw1.0/ct-firmware-2.bin failed with error -2
[   21.626207] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.677337] firmware ath10k!QCA9984!hw1.0!ct-firmware-2.bin: firmware_loading_store: map pages failed
[   21.677555] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA9984/hw1.0/firmware-6.bin failed with error -2
[   21.685544] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.752782] firmware ath10k!QCA9984!hw1.0!firmware-6.bin: firmware_loading_store: map pages failed
[   21.752918] ath10k_pci 0001:01:00.0: qca9984/qca9994 hw1.0 target 0x01000000 chip_id 0x00000000 sub 168c:cafe
[   21.760733] ath10k_pci 0001:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   21.772866] ath10k_pci 0001:01:00.0: firmware ver 10.4b-ct-9984-fW-012-0ee2f206b api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 c3fbc410
[   24.110436] ath10k_pci 0001:01:00.0: board_file api 2 bmi_id 0:2 crc32 85498734
[   29.981045] ath10k_pci 0001:01:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   29.981075] ath10k_pci 0001:01:00.0: msdu-desc: 2500  skid: 32
[   30.064880] ath10k_pci 0001:01:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   30.065752] ath10k_pci 0001:01:00.0: wmi print 'free: 81784 iram: 23220 sram: 14440'
[   30.328002] ath10k_pci 0001:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   30.433250] kmodloader: done loading kernel modules from /etc/modules.d/*
[   36.581155] Generic PHY fixed-0:01: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:01, irq=POLL)
[   36.582369] dwmac1000: Master AXI performs any burst length
[   36.590176] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported
[   36.595698] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock
[   36.604673] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
[   36.614220] br-lan: port 1(eth1.1) entered blocking state
[   36.617347] br-lan: port 1(eth1.1) entered disabled state
[   36.622949] device eth1.1 entered promiscuous mode
[   36.628195] device eth1 entered promiscuous mode
[   36.634745] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   36.649747] Generic PHY fixed-0:00: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:00, irq=POLL)
[   36.650739] dwmac1000: Master AXI performs any burst length
[   36.658776] ipq806x-gmac-dwmac 37200000.ethernet eth0: IEEE 1588-2008 Advanced Timestamp supported
[   36.664234] ipq806x-gmac-dwmac 37200000.ethernet eth0: registered PTP clock
[   36.673793] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   36.683029] IPv6: ADDRCONF(NETDEV_UP): eth0.2: link is not ready
[   37.686839] ipq806x-gmac-dwmac 37200000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
[   37.686931] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
[   37.699713] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   37.704124] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.2: link becomes ready
[   37.710099] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[   37.738312] br-lan: port 1(eth1.1) entered blocking state
[   37.738338] br-lan: port 1(eth1.1) entered forwarding state
[   37.747824] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready

Same thing, booting openwrt-19.07.0-rc2-ipq806x-generic-netgear_r7800-initramfs-uImage with ssh sysupgrade on router based on openwrt-19.07.0-rc2-ipq806x-generic-netgear_r7800-squashfs-sysupgrade:

Watchdog handover: fd=3
- watchdog -
killall: telnetd: no process killed
killall: ash: no process killed
Sending TERM to remaining processes ... ntpd udhcpc odhcp6c dnsmasq ubusd askfirst urngd logd rpcd netifd odhcpd uhttpd 
Sending KILL to remaining processes ... ntpd 
Performing system upgrade...
Unlocking kernel ...

Writing from <stdin> to kernel ...  [ ][e][w][e]
Skipping bad block at 0x00020000   [e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w]    
removing ubiblock0_6
[  144.163945] block ubiblock0_6: released
Volume ID 6, size 25 LEBs (3174400 bytes, 3.0 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs", alignment 1
Set volume size to 27553792
Volume ID 7, size 217 LEBs (27553792 bytes, 26.2 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
sysupgrade successful
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
umount: can't unmount /: Invalid argument
[  145.974659] reboot: Restarting system


U-Boot 2012.07 [local,local] (Sep 03 2015 - 17:33:28)

U-boot 2012.07 dni1 V0.4 for DNI HW ID: 29764958 NOR flash 0MB; NAND flash 128MB; RAM 512MB; 1st Radio 4x4; 2nd Radio 4x4; Cascade
smem ram ptable found: ver: 0 len: 5
DRAM:  491 MiB
NAND:  SF: Unsupported manufacturer 00
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
128 MiB
MMC:   
*** Warning - bad CRC, using default environment

PCI0 Link Intialized
PCI1 Link Intialized
In:    serial
Out:   serial
Err:   serial
 131072 bytes read: OK
MMC Device 0 not found
cdp: get part failed for 0:HLOS
Net:   MAC1 addr:3c:37:86:2a:c8:f6
athrs17_reg_init: complete
athrs17_vlan_config ...done
S17c init  done
MAC2 addr:3c:37:86:2a:c8:f5
eth0, eth1
Hit any key to stop autoboot:  2  1  0 

 Client starts...[Listening] for ADVERTISE...TTT
Retry count exceeded; boot the image as usual

 nmrp server is stopped or failed !

Loading from device 0: nand0 (offset 0x1480000)
Skipping bad block 0x014a0000

** check kernel image **
   Verifying Checksum ... OK

** check rootfs image **
   Verifying Checksum ... OK
MMC Device 0 not found

Loading from nand0, offset 0x1480000
   Image Name:   ARM OpenWrt Linux-4.14.156
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2198227 Bytes = 2.1 MiB
   Load Address: 42208000
   Entry Point:  42208000
Skipping bad block 0x014a0000
Automatic boot of image at addr 0x44000000 ...
   Image Name:   ARM OpenWrt Linux-4.14.156
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2198227 Bytes = 2.1 MiB
   Load Address: 42208000
   Entry Point:  42208000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK
mtdparts variable not set, see 'help mtdparts'
no partitions defined

defaults:
mtdids  : nand0=msm_nand
mtdparts: none
info: "mtdparts" not set
Using machid 0x136c from environment

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.14.156 (builder@buildhost) (gcc version 7.5.0 (OpenWrt GCC 7.5.0 r10775-db8345d8e4)) #0 SMP Sat Nov 30 15:52:33 2019
[    0.000000] CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5787d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
[    0.000000] OF: fdt: Machine model: Netgear Nighthawk X4S R7800
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] random: get_random_bytes called from 0xc09008dc with crng_init=0
[    0.000000] percpu: Embedded 15 pages/cpu s29388 r8192 d23860 u61440
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 121920
[    0.000000] Kernel command line: 
[    0.000000] Bootloader command line (ignored): console=ttyHSL1,115200n8
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Memory: 477372K/491520K available (4970K kernel code, 160K rwdata, 756K rodata, 1024K init, 234K bss, 14148K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xde800000 - 0xff800000   ( 528 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xde000000   ( 480 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0208000 - 0xc07dab88   (5963 kB)
[    0.000000]       .init : 0xc0900000 - 0xc0a00000   (1024 kB)
[    0.000000]       .data : 0xc0a00000 - 0xc0a28140   ( 161 kB)
[    0.000000]        .bss : 0xc0a2a000 - 0xc0a64a98   ( 235 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] clocksource: dg_timer: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 305801671480 ns
[    0.000007] sched_clock: 32 bits at 6MHz, resolution 160ns, wraps every 343597383600ns
[    0.000023] Switching to timer-based delay loop, resolution 160ns
[    0.000224] Calibrating delay loop (skipped), value calculated using timer frequency.. 12.50 BogoMIPS (lpj=62500)
[    0.000249] pid_max: default: 32768 minimum: 301
[    0.000379] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000396] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000971] CPU: Testing write buffer coherency: ok
[    0.001736] Setting up static identity map for 0x42300000 - 0x42300060
[    0.001895] Hierarchical SRCU implementation.
[    0.002640] smp: Bringing up secondary CPUs ...
[    0.004464] smp: Brought up 1 node, 2 CPUs
[    0.004480] SMP: Total of 2 processors activated (25.00 BogoMIPS).
[    0.004491] CPU: All CPU(s) started in SVC mode.
[    0.014648] VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
[    0.014824] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.014853] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.014964] pinctrl core: initialized pinctrl subsystem
[    0.015955] NET: Registered protocol family 16
[    0.016201] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.017537] cpuidle: using governor ladder
[    0.017600] cpuidle: using governor menu
[    0.040043] msm_bus_fabric_init_driver
[    0.041558] usbcore: registered new interface driver usbfs
[    0.041638] usbcore: registered new interface driver hub
[    0.041726] usbcore: registered new device driver usb
[    0.041781] pps_core: LinuxPPS API ver. 1 registered
[    0.041793] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.041825] PTP clock support registered
[    0.043506] clocksource: Switched to clocksource dg_timer
[    0.046729] NET: Registered protocol family 2
[    0.047335] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    0.047377] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[    0.047432] TCP: Hash tables configured (established 4096 bind 4096)
[    0.047524] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.047549] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.047726] NET: Registered protocol family 1
[    0.048904] No memory allocated for crashlog
[    0.049174] workingset: timestamp_bits=30 max_order=17 bucket_order=0
[    0.054281] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.054299] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.060877] io scheduler noop registered
[    0.060894] io scheduler deadline registered (default)
[    0.062531] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda not found, using dummy regulator
[    0.062638] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_phy not found, using dummy regulator
[    0.062729] qcom-pcie 1b500000.pci: 1b500000.pci supply vdda_refclk not found, using dummy regulator
[    0.063515] OF: PCI: host bridge /soc/pci@1b500000 ranges:
[    0.063559] OF: PCI:    IO 0x0fe00000..0x0fefffff -> 0x0fe00000
[    0.063585] OF: PCI:   MEM 0x08000000..0x0fdfffff -> 0x08000000
[    0.171805] qcom-pcie 1b500000.pci: link up
[    0.171971] qcom-pcie 1b500000.pci: PCI host bridge to bus 0000:00
[    0.171995] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.172017] pci_bus 0000:00: root bus resource [io  0x0000-0xfffff] (bus address [0xfe00000-0xfefffff])
[    0.172033] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fdfffff]
[    0.172563] PCI: bus0: Fast back to back transfers disabled
[    0.174915] PCI: bus1: Fast back to back transfers disabled
[    0.175015] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
[    0.175041] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
[    0.175170] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    0.175194] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
[    0.175731] pcieport 0000:00:00.0: AER enabled with IRQ 35
[    0.176254] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda not found, using dummy regulator
[    0.176358] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_phy not found, using dummy regulator
[    0.176465] qcom-pcie 1b700000.pci: 1b700000.pci supply vdda_refclk not found, using dummy regulator
[    0.177224] OF: PCI: host bridge /soc/pci@1b700000 ranges:
[    0.177267] OF: PCI:    IO 0x31e00000..0x31efffff -> 0x31e00000
[    0.177290] OF: PCI:   MEM 0x2e000000..0x31dfffff -> 0x2e000000
[    0.287233] qcom-pcie 1b700000.pci: link up
[    0.287382] qcom-pcie 1b700000.pci: PCI host bridge to bus 0001:00
[    0.287400] pci_bus 0001:00: root bus resource [bus 00-ff]
[    0.287416] pci_bus 0001:00: root bus resource [mem 0x2e000000-0x31dfffff]
[    0.287880] PCI: bus0: Fast back to back transfers disabled
[    0.290220] PCI: bus1: Fast back to back transfers disabled
[    0.290306] pci 0001:00:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
[    0.290329] pci 0001:01:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
[    0.290462] pci 0001:00:00.0: PCI bridge to [bus 01-ff]
[    0.290483] pci 0001:00:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
[    0.290960] pcieport 0001:00:00.0: AER enabled with IRQ 68
[    0.293288] L2 @ QSB rate. Forcing new rate.
[    0.293502] L2 @ 384000 KHz
[    0.293679] CPU0 @ 800000 KHz
[    0.293691] CPU1 @ QSB rate. Forcing new rate.
[    0.293943] CPU1 @ 384000 KHz
[    0.297787] gsbi 16300000.gsbi: GSBI port protocol: 6 crci: 0
[    0.299725] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.302241] msm_serial 16340000.serial: msm_serial: detected port #0
[    0.302346] msm_serial 16340000.serial: uartclk = 7372800
[    0.302424] 16340000.serial: ttyMSM0 at MMIO 0x16340000 (irq = 101, base_baud = 460800) is a MSM
[    0.302463] msm_serial: console setup on port #0
[    1.022299] console [ttyMSM0] enabled
[    1.027078] msm_serial: driver initialized
[    1.035679] loop: module loaded
[    1.037686] nand: device found, Manufacturer ID: 0xc2, Chip ID: 0xa1
[    1.037721] nand: Macronix MX30UF1G18AC
[    1.044336] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.047888] 8 fixed-partitions partitions found on MTD device qcom_nand.0
[    1.055523] Creating 8 MTD partitions on "qcom_nand.0":
[    1.062290] 0x000000000000-0x000000c80000 : "qcadata"
[    1.072360] random: fast init done
[    1.090086] 0x000000c80000-0x000001180000 : "APPSBL"
[    1.099576] 0x000001180000-0x000001200000 : "APPSBLENV"
[    1.101222] 0x000001200000-0x000001340000 : "art"
[    1.106580] 0x000001340000-0x000001480000 : "artbak"
[    1.111383] 0x000001480000-0x000001880000 : "kernel"
[    1.121270] 0x000001880000-0x000007900000 : "ubi"
[    1.289606] 0x000007900000-0x000008000000 : "reserve"
[    1.303862] libphy: GPIO Bitbanged MDIO: probed
[    1.325251] switch0: Atheros AR8337 rev. 2 switch registered on gpio-0
[    2.185075] ar8327: qca,phy-rgmii-en is not specified
[    2.185470] libphy: Fixed MDIO Bus: probed
[    2.191263] ipq806x-gmac-dwmac 37200000.ethernet: PTP uses main clock
[    2.193420] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.199690] ipq806x-gmac-dwmac 37200000.ethernet: Ring mode enabled
[    2.204722] ipq806x-gmac-dwmac 37200000.ethernet: DMA HW capability register supported
[    2.210728] ipq806x-gmac-dwmac 37200000.ethernet: Enhanced/Alternate descriptors
[    2.218800] ipq806x-gmac-dwmac 37200000.ethernet: Enabled extended descriptors
[    2.226332] ipq806x-gmac-dwmac 37200000.ethernet: RX Checksum Offload Engine supported
[    2.233295] ipq806x-gmac-dwmac 37200000.ethernet: COE Type 2
[    2.241265] ipq806x-gmac-dwmac 37200000.ethernet: TX Checksum insertion supported
[    2.247072] ipq806x-gmac-dwmac 37200000.ethernet: Wake-Up On Lan supported
[    2.254449] ipq806x-gmac-dwmac 37200000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.262783] ipq806x-gmac-dwmac 37400000.ethernet: PTP uses main clock
[    2.270059] stmmac - user ID: 0x10, Synopsys ID: 0x37
[    2.276157] ipq806x-gmac-dwmac 37400000.ethernet: Ring mode enabled
[    2.281122] ipq806x-gmac-dwmac 37400000.ethernet: DMA HW capability register supported
[    2.287279] ipq806x-gmac-dwmac 37400000.ethernet: Enhanced/Alternate descriptors
[    2.295277] ipq806x-gmac-dwmac 37400000.ethernet: Enabled extended descriptors
[    2.302739] ipq806x-gmac-dwmac 37400000.ethernet: RX Checksum Offload Engine supported
[    2.309834] ipq806x-gmac-dwmac 37400000.ethernet: COE Type 2
[    2.317739] ipq806x-gmac-dwmac 37400000.ethernet: TX Checksum insertion supported
[    2.323484] ipq806x-gmac-dwmac 37400000.ethernet: Wake-Up On Lan supported
[    2.330923] ipq806x-gmac-dwmac 37400000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    2.338390] i2c /dev entries driver
[    2.347148] Calibration not found.
[    2.350614] Speed bin: 0
[    2.352902] PVS bin: 4
[    2.356969] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.357836] cpuidle: enable-method property 'qcom,kpss-acc-v1' found operations
[    2.365614] sdhci: Secure Digital Host Controller Interface driver
[    2.372265] sdhci: Copyright(c) Pierre Ossman
[    2.378591] sdhci-pltfm: SDHCI platform and OF driver helper
[    2.384346] NET: Registered protocol family 10
[    2.390041] Segment Routing with IPv6
[    2.392997] NET: Registered protocol family 17
[    2.396829] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    2.401625] 8021q: 802.1Q VLAN Support v1.8
[    2.414222] Registering SWP/SWPB emulation handler
[    2.430244] qcom_rpm 108000.rpm: RPM firmware 3.0.16777364
[    2.442283] s1a: supplied by regulator-dummy
[    2.442379] s1a: Bringing 0uV into 1050000-1050000uV
[    2.445965] s1b: supplied by regulator-dummy
[    2.450615] s1b: Bringing 0uV into 1050000-1050000uV
[    2.455163] s2a: supplied by regulator-dummy
[    2.459831] s2a: Bringing 0uV into 775000-775000uV
[    2.464328] s2b: supplied by regulator-dummy
[    2.468678] s2b: Bringing 0uV into 775000-775000uV
[    2.477908] UBI: auto-attach mtd6
[    2.477942] ubi0: attaching mtd6
[    2.527754] random: crng init done
[    3.181966] ubi0: scanning is finished
[    3.191830] ubi0: attached mtd6 (name "ubi", size 96 MiB)
[    3.191849] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    3.196264] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    3.202967] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    3.209888] ubi0: good PEBs: 772, bad PEBs: 0, corrupted PEBs: 0
[    3.216663] ubi0: user volume: 8, internal volumes: 1, max. volumes count: 128
[    3.222848] ubi0: max/mean erase counter: 3/1, WL threshold: 4096, image sequence number: 0
[    3.229937] ubi0: available PEBs: 0, total reserved PEBs: 772, PEBs reserved for bad PEB handling: 20
[    3.238290] ubi0: background thread "ubi_bgt0d" started, PID 59
[    3.238865] block ubiblock0_6: created from ubi0:6(rootfs)
[    3.253228] ubiblock: device ubiblock0_6 (rootfs) set to be root file[    3.269304] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    3.270747] Freeing unused kernel memory: 1024K
[    3.697189] init: Console is alive
[    3.697308] init: - watchdog -
[    4.104129] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    4.120732] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    4.122282] SCSI subsystem initialized
[    4.129805] ahci 29000000.sata: forcing port_map 0x0 -> 0x1
[    4.129900] ahci 29000000.sata: AHCI 0001.0300 32 slots 1 ports 6 Gbps 0x1 impl platform mode
[    4.135442] ahci 29000000.sata: flags: ncq sntf pm led clo only pmp pio slum part ccc apst 
[    4.144543] scsi host0: ahci
[    4.152309] ata1: SATA max UDMA/133 mmio [mem 0x29000000-0x2900017f] port 0x100 irq 26
[    4.486494] ata1: SATA link down (SStatus 0 SControl 300)
[    4.489461] ehci-platform: EHCI generic platform driver
[    4.496312] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    4.497113] ohci-platform: OHCI generic platform driver
[    4.631994] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    4.632085] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[    4.636763] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f065 hci version 0x100 quirks 0x0000000002010010
[    4.644117] xhci-hcd xhci-hcd.0.auto: irq 105, io mem 0x11000000
[    4.654032] hub 1-0:1.0: USB hub found
[    4.659582] hub 1-0:1.0: 1 port detected
[    4.663369] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    4.667277] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[    4.672491] xhci-hcd xhci-hcd.0.auto: Host supports USB 3.0  SuperSpeed
[    4.680191] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    4.687023] hub 2-0:1.0: USB hub found
[    4.695054] hub 2-0:1.0: 1 port detected
[    4.698751] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    4.702615] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 3
[    4.708106] xhci-hcd xhci-hcd.1.auto: hcc params 0x0228f065 hci version 0x100 quirks 0x0000000002010010
[    4.715552] xhci-hcd xhci-hcd.1.auto: irq 106, io mem 0x10000000
[    4.725279] hub 3-0:1.0: USB hub found
[    4.731099] hub 3-0:1.0: 1 port detected
[    4.734912] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    4.738724] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 4
[    4.744084] xhci-hcd xhci-hcd.1.auto: Host supports USB 3.0  SuperSpeed
[    4.751630] usb usb4: We don't know the algorithms for LPM for this host, disabling LPM.
[    4.758573] hub 4-0:1.0: USB hub found
[    4.766631] hub 4-0:1.0: 1 port detected
[    4.771537] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    4.782893] init: - preinit -
[    6.584340] Generic PHY fixed-0:01: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:01, irq=POLL)
[    6.585031] dwmac1000: Master AXI performs any burst length
[    6.593232] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported
[    6.598794] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock
[    6.608135] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    7.674069] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
[    7.674144] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[    9.755160] UBIFS (ubi0:7): default file-system created
[    9.756236] UBIFS (ubi0:7): background thread "ubifs_bgt0_7" started, PID 142
[    9.840592] UBIFS (ubi0:7): UBIFS: mounted UBI device 0, volume 7, name "rootfs_data"
[    9.840617] UBIFS (ubi0:7): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[    9.847486] UBIFS (ubi0:7): FS size: 26284032 bytes (25 MiB, 207 LEBs), journal size 1269760 bytes (1 MiB, 10 LEBs)
[    9.857351] UBIFS (ubi0:7): reserved for root: 1241459 bytes (1212 KiB)
[    9.867603] UBIFS (ubi0:7): media format: w4/r0 (latest is w5/r0), UUID 87FBD393-E7B7-4ACE-BD31-FD786D14B0A8, small LPT model
[    9.876149] mount_root: overlay filesystem has not been fully initialized yet
[    9.885856] mount_root: switching to ubifs overlay
[    9.917080] urandom-seed: Seed file not found (/etc/urandom.seed)
[   10.031587] procd: - early -
[   10.031740] procd: - watchdog -
[   10.676829] procd: - watchdog -
[   10.677346] procd: - ubus -
[   10.763393] procd: - init -
Please press Enter to activate this console.
[   10.938260] urngd: v1.0.0 started.
[   10.953580] kmodloader: loading kernel modules from /etc/modules.d/*
[   10.966089] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   10.970784] Loading modules backported from Linux version v4.19.85-0-gc63ee2939dc1
[   10.970810] Backport generated by backports.git v4.19.85-1-0-g8a8be258
[   10.979331] ip_tables: (C) 2000-2006 Netfilter Core Team
[   10.988027] nf_conntrack version 0.5.0 (8192 buckets, 32768 max)
[   11.021798] xt_time: kernel timezone is -0000
[   11.041373] PPP generic driver version 2.4.2
[   11.042074] NET: Registered protocol family 24
[   11.053638] ath10k 4.19 driver, optimized for CT firmware, probing pci device: 0x46.
[   11.054452] ath10k_pci 0000:01:00.0: enabling device (0140 -> 0142)
[   11.061016] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   11.236503] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/fwcfg-pci-0000:01:00.0.txt failed with error -2
[   11.236560] ath10k_pci 0000:01:00.0: Falling back to user helper
[   11.286674] firmware ath10k!fwcfg-pci-0000:01:00.0.txt: firmware_loading_store: map pages failed
[   11.286852] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/pre-cal-pci-0000:01:00.0.bin failed with error -2
[   11.294627] ath10k_pci 0000:01:00.0: Falling back to user helper
[   11.696107] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA9984/hw1.0/ct-firmware-5.bin failed with error -2
[   11.696147] ath10k_pci 0000:01:00.0: Falling back to user helper
[   11.736588] firmware ath10k!QCA9984!hw1.0!ct-firmware-5.bin: firmware_loading_store: map pages failed
[   11.736880] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA9984/hw1.0/ct-firmware-2.bin failed with error -2
[   11.744908] ath10k_pci 0000:01:00.0: Falling back to user helper
[   11.798522] firmware ath10k!QCA9984!hw1.0!ct-firmware-2.bin: firmware_loading_store: map pages failed
[   11.798834] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA9984/hw1.0/firmware-6.bin failed with error -2
[   11.806872] ath10k_pci 0000:01:00.0: Falling back to user helper
[   11.850499] firmware ath10k!QCA9984!hw1.0!firmware-6.bin: firmware_loading_store: map pages failed
[   12.188144] ath10k_pci 0000:01:00.0: qca9984/qca9994 hw1.0 target 0x01000000 chip_id 0x00000000 sub 168c:cafe
[   12.188176] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   12.198906] ath10k_pci 0000:01:00.0: firmware ver 10.4b-ct-9984-fW-012-0ee2f206b api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 c3fbc410
[   14.521501] ath10k_pci 0000:01:00.0: board_file api 2 bmi_id 0:1 crc32 85498734
[   20.355648] ath10k_pci 0000:01:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   20.355677] ath10k_pci 0000:01:00.0: msdu-desc: 2500  skid: 32
[   20.437490] ath10k_pci 0000:01:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   20.438334] ath10k_pci 0000:01:00.0: wmi print 'free: 81784 iram: 23220 sram: 14440'
[   20.694348] ath10k_pci 0000:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   20.802454] ath10k 4.19 driver, optimized for CT firmware, probing pci device: 0x46.
[   20.805024] ath10k_pci 0001:01:00.0: enabling device (0140 -> 0142)
[   20.810007] ath10k_pci 0001:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   20.985357] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/fwcfg-pci-0001:01:00.0.txt failed with error -2
[   20.985388] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.269166] firmware ath10k!fwcfg-pci-0001:01:00.0.txt: firmware_loading_store: map pages failed
[   21.269545] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/pre-cal-pci-0001:01:00.0.bin failed with error -2
[   21.277180] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.656966] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA9984/hw1.0/ct-firmware-5.bin failed with error -2
[   21.657008] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.698828] firmware ath10k!QCA9984!hw1.0!ct-firmware-5.bin: firmware_loading_store: map pages failed
[   21.699080] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA9984/hw1.0/ct-firmware-2.bin failed with error -2
[   21.707153] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.759992] firmware ath10k!QCA9984!hw1.0!ct-firmware-2.bin: firmware_loading_store: map pages failed
[   21.760250] ath10k_pci 0001:01:00.0: Direct firmware load for ath10k/QCA9984/hw1.0/firmware-6.bin failed with error -2
[   21.768352] ath10k_pci 0001:01:00.0: Falling back to user helper
[   21.824230] firmware ath10k!QCA9984!hw1.0!firmware-6.bin: firmware_loading_store: map pages failed
[   21.824430] ath10k_pci 0001:01:00.0: qca9984/qca9994 hw1.0 target 0x01000000 chip_id 0x00000000 sub 168c:cafe
[   21.832099] ath10k_pci 0001:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   21.844803] ath10k_pci 0001:01:00.0: firmware ver 10.4b-ct-9984-fW-012-0ee2f206b api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 c3fbc410
[   24.166375] ath10k_pci 0001:01:00.0: board_file api 2 bmi_id 0:2 crc32 85498734
[   30.009448] ath10k_pci 0001:01:00.0: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   30.009481] ath10k_pci 0001:01:00.0: msdu-desc: 2500  skid: 32
[   30.093382] ath10k_pci 0001:01:00.0: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   30.094264] ath10k_pci 0001:01:00.0: wmi print 'free: 81784 iram: 23220 sram: 14440'
[   30.294842] ath10k_pci 0001:01:00.0: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   30.460059] kmodloader: done loading kernel modules from /etc/modules.d/*
[   43.156527] Generic PHY fixed-0:01: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:01, irq=POLL)
[   43.157196] dwmac1000: Master AXI performs any burst length
[   43.165536] ipq806x-gmac-dwmac 37400000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported
[   43.170911] ipq806x-gmac-dwmac 37400000.ethernet eth1: registered PTP clock
[   43.179991] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
[   43.198373] br-lan: port 1(eth1.1) entered blocking state
[   43.198401] br-lan: port 1(eth1.1) entered disabled state
[   43.202911] device eth1.1 entered promiscuous mode
[   43.208220] device eth1 entered promiscuous mode
[   43.216998] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   43.224544] Generic PHY fixed-0:00: attached PHY driver [Generic PHY] (mii_bus:phy_addr=fixed-0:00, irq=POLL)
[   43.225312] dwmac1000: Master AXI performs any burst length
[   43.233446] ipq806x-gmac-dwmac 37200000.ethernet eth0: IEEE 1588-2008 Advanced Timestamp supported
[   43.238977] ipq806x-gmac-dwmac 37200000.ethernet eth0: registered PTP clock
[   43.248385] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   43.264689] IPv6: ADDRCONF(NETDEV_UP): eth0.2: link is not ready
[   44.234016] ipq806x-gmac-dwmac 37400000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
[   44.237031] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[   44.242948] br-lan: port 1(eth1.1) entered blocking state
[   44.248087] br-lan: port 1(eth1.1) entered forwarding state
[   44.254506] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   44.313972] ipq806x-gmac-dwmac 37200000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
[   44.314047] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   44.323012] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.2: link becomes ready

What do you mean with "hang" ???? The router freezes?
No reaction to keyboard via the serial console?

To me that looks like a rather normal end to the boot process, so I wonder what is the actual symptom that you see.

Have you tried pushing enter, space, whatever... so that you would enter the console (via the serial connection)?

Generic snapshot sysupgrade image has no LuCI, so you only have the SSH console available via wired connection.

But great that you have actually been able to flash an image successfully now.

1 Like

Ouch, you are right. I was so used to check if Wifi would come on, I completely forgot I had to enable it myself. Yes, everything works fine, even lucy was part of the susupgrade!

Possibly managing corrupt memory segments could be implemented in openwrt as well. I guess Netgear implemented this routine so they could use cheaper memory quality.

I am happy I can finally use openwrt :smile: Thanks for all the help everyone!

1 Like

LuCI is included in release images (like 19.07.0-rc2) but not in snapshots.

its interesting that you could flash ddwrt. I think that means ddwrt has the functionality to deal with bad nand blocks during flash like the stock images.

I wonder if this is visible in their code repo and if it could be ported...

It should also be visible in the Netgear GPL repo, I guess.

perhaps the preinit script?

I think that ddwrt failed.
Only OEM was ok and then also "Voxel's" (?) firmware.

yes, you are correct, dd-wrt did not work.

This seems like a infrequent issue but I'm kinda interested. I'll post in a new thread if find anything interesting.

Likely this part in mtdpart.c (based on grepping for "correct location of partition":
R7800-V1.0.2.44_gpl_src\git_home\linux.git\sourcecode\drivers\mtd\mtdpart.c

static void correct_rootfs_partition(struct mtd_part *slave)
{
	uint64_t rootfs_offset = 0;
	int bad_blocks = 0;

	/* Search rootfs header and reset the offset and size of rootfs partition */
	if (slave->mtd.name && !strcmp(slave->mtd.name, "rootfs") &&
	    !(find_rootfs_header(slave->master, &slave->mtd, &rootfs_offset, &bad_blocks))) {
		slave->offset += rootfs_offset;
		slave->mtd.size -= rootfs_offset;
		if (slave->master->_block_isbad)
			slave->mtd.ecc_stats.badblocks -= bad_blocks;

		printk(KERN_INFO "the correct location of partition \"%s\": 0x%012llx-0x%012llx\n", slave->mtd.name,
		       (unsigned long long)slave->offset, (unsigned long long)(slave->offset + slave->mtd.size));

		/* Build partition mapping for rootfs partition */
		create_partition_mapping(&slave->mtd);
	}
}
#endif

EDIT:
It seems to be a larger code block inside ifdef DNI_PARTITION_MAPPING, so something that Netgear has added for their mtd version.

2 Likes

I'm happy to test anything. After so many flashes on this router I don't mind a few more :smile: Plus there seem to be quite a few other cases on the net with what was most likely the same issue.

DD-WRT also failed, only Stock and Voxel's worked.

:+1: on getting something like this into OpenWrt.

Bad-block handling (including appropriate reservations) has been haunting me since I started working with low-level NAND early this year. Some thought and questions at http://lists.infradead.org/pipermail/openwrt-devel/2019-November/020023.html

Well, this is the whole mtdpart.c file extracted into Github:

It seems to contains rather large logic for parsing the partition table with Netgear's extensions. I have not compared it to the standard mtd.

1 Like