Ruijie RG-EW3200GX PRO not Loading kernel from FIT Image

adikus · October 30, 2025, 7:12am

Dear Master,

After follow https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=ce8a33b021a703b1933f627835f6cdc88c0ecdd3

My Ruijie RG-EW3200GX PRO can not booting.. How to Fix it.

[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[ 0.000000] Linux version 5.15.189 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r24232-539228933c) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Thu Aug 14 18:27:40 2025
[ 0.000000] Machine model: Ruijie RG-EW3200GX PRO
[ 0.000000] Zone ranges:
[ 0.000000] DMA [mem 0x0000000040000000-0x000000004fffffff]
[ 0.000000] DMA32 empty
[ 0.000000] Normal empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000040000000-0x0000000042ffffff]
[ 0.000000] node 0: [mem 0x0000000043000000-0x000000004302ffff]
[ 0.000000] node 0: [mem 0x0000000043030000-0x000000004fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000004fffffff]
[ 0.000000] psci: probing for conduit method from DT.
[ 0.000000] psci: PSCIv0.2 detected in firmware.
[ 0.000000] psci: Using standard PSCI v0.2 function IDs
[ 0.000000] psci: Trusted OS migration not required
[ 0.000000] percpu: Embedded 18 pages/cpu s33176 r8192 d32360 u73728
[ 0.000000] pcpu-alloc: s33176 r8192 d32360 u73728 alloc=184096
[ 0.000000] pcpu-alloc: [0] 0 [0] 1
[ 0.000000] Detected VIPT I-cache on CPU0
[ 0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[ 0.000000] CPU features: detected: ARM erratum 843419
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 64512
[ 0.000000] Kernel command line: console=ttyS0,115200n1 swiotlb=512
[ 0.000000] Dentry cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 16384 (order: 5, 131072 bytes, linear)
[ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[ 0.000000] Memory: 241156K/262144K available (8448K kernel code, 904K rwdata, 1436K rodata, 448K init, 307K bss, 20988K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] Tracing variant of Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[ 0.000000] Root IRQ handler: 0xffffffc008010000
[ 0.000000] GIC: Using split EOI/Deactivate mode
[ 0.000000] arch_timer: cp15 timer(s) running at 12.50MHz (phys).
[ 0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2e2049cda, max_idle_ns: 440795202628 ns
[ 0.000000] sched_clock: 56 bits at 12MHz, resolution 80ns, wraps every 4398046511080ns
[ 0.000178] Calibrating delay loop (skipped), value calculated using timer frequency.. 25.00 BogoMIPS (lpj=125000)
[ 0.000188] pid_max: default: 32768 minimum: 301
[ 0.000450] Mount-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[ 0.000459] Mountpoint-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[ 0.001769] rcu: Hierarchical SRCU implementation.
[ 0.002093] smp: Bringing up secondary CPUs ...
[ 0.002451] Detected VIPT I-cache on CPU1
[ 0.002498] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[ 0.002563] smp: Brought up 1 node, 2 CPUs
[ 0.002573] SMP: Total of 2 processors activated.
[ 0.002577] CPU features: detected: 32-bit EL0 Support
[ 0.002581] CPU features: detected: CRC32 instructions
[ 0.002616] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[ 0.002677] CPU: All CPU(s) started at EL2
[ 0.002688] alternatives: patching kernel code
[ 0.006620] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.006644] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[ 0.006799] pinctrl core: initialized pinctrl subsystem
[ 0.007625] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.007901] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[ 0.007937] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[ 0.007962] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[ 0.008214] thermal_sys: Registered thermal governor 'fair_share'
[ 0.008218] thermal_sys: Registered thermal governor 'bang_bang'
[ 0.008222] thermal_sys: Registered thermal governor 'step_wise'
[ 0.008226] thermal_sys: Registered thermal governor 'user_space'
[ 0.008407] ASID allocator initialised with 65536 entries
[ 0.008745] pstore: Registered ramoops as persistent store backend
[ 0.008751] ramoops: using 0x10000@0x42ff0000, ecc: 0
[ 0.028208] cryptd: max_cpu_qlen set to 1000
[ 0.030220] SCSI subsystem initialized
[ 0.030327] libata version 3.00 loaded.
[ 0.031358] clocksource: Switched to clocksource arch_sys_counter
[ 0.031933] NET: Registered PF_INET protocol family
[ 0.032016] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear)
[ 0.032403] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[ 0.032421] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.032430] TCP established hash table entries: 2048 (order: 2, 16384 bytes, linear)
[ 0.032449] TCP bind hash table entries: 2048 (order: 3, 32768 bytes, linear)
[ 0.032480] TCP: Hash tables configured (established 2048 bind 2048)
[ 0.032588] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.032605] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[ 0.032727] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.032750] PCI: CLS 0 bytes, default 64
[ 0.032936] Unpacking initramfs...
[ 0.042526] workingset: timestamp_bits=46 max_order=16 bucket_order=0
[ 0.045966] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.045982] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.078682] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[ 0.083219] mt-pmic-pwrap 10001000.pwrap: unexpected interrupt int=0x1
[ 0.097512] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.099358] printk: console [ttyS0] disabled
[ 0.119615] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 124, base_baud = 1562500) is a ST16650V2
[ 0.688825] printk: console [ttyS0] enabled
[ 0.694417] mtk_rng 1020f000.rng: registered RNG driver
[ 0.700284] random: crng init done
[ 0.706852] loop: module loaded
[ 0.710000] Loading iSCSI transport class v2.0-870.
[ 0.718304] spi-nor spi0.0: XM25QH128C (16384 Kbytes)
[ 1.024265] Freeing initrd memory: 3688K
[ 1.039071] 8 fixed-partitions partitions found on MTD device spi0.0
[ 1.045473] OF: Bad cell count for /spi@11014000/flash@0/partitions
[ 1.051770] OF: Bad cell count for /spi@11014000/flash@0/partitions
[ 1.058234] Creating 8 MTD partitions on "spi0.0":
[ 1.063048] 0x000000000000-0x000000040000 : "Preloader"
[ 1.068666] 0x000000040000-0x000000060000 : "ATF"
[ 1.074136] 0x000000060000-0x0000000b0000 : "u-boot"
[ 1.079389] 0x0000000b0000-0x0000000d0000 : "u-boot-env"
[ 1.085036] 0x0000000d0000-0x000000150000 : "Factory"
[ 1.090327] 0x000000150000-0x000000160000 : "product_info"
[ 1.096073] 0x000000160000-0x000000170000 : "kdump"
[ 1.101186] 0x000000170000-0x000001000000 : "firmware"
[ 1.106781] 2 fit-fw partitions found on MTD device firmware
[ 1.112458] Creating 2 MTD partitions on "firmware":
[ 1.117416] 0x000000000000-0x000000200000 : "kernel"
[ 1.122789] 0x000000200000-0x000000e90000 : "rootfs"
[ 1.127996] mtd: setting mtd9 (rootfs) as root device
[ 1.133091] 1 squashfs-split partitions found on MTD device rootfs
[ 1.139264] 0x000000db0000-0x000000e90000 : "rootfs_data"
[ 1.156089] mtk-spi-nor 11014000.spi: spi frequency: 46666653 Hz
[ 1.294822] mtk_soc_eth 1b100000.ethernet eth0: mediatek frame engine at 0xffffffc008f00000, irq 132
[ 1.304577] i2c_dev: i2c /dev entries driver
[ 1.309796] mtk-wdt 10212000.watchdog: IRQ index 0 not found
[ 1.315609] mtk-wdt 10212000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[ 1.325155] NET: Registered PF_INET6 protocol family
[ 1.330798] Segment Routing with IPv6
[ 1.334492] In-situ OAM (IOAM) with IPv6
[ 1.338442] NET: Registered PF_PACKET protocol family
[ 1.343516] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[ 1.356724] 8021q: 802.1Q VLAN Support v1.8
[ 1.362029] pstore: Using crash dump compression: deflate
[ 1.376670] mtk-pcie 1a143000.pcie: host bridge /pcie@1a143000 ranges:
[ 1.383256] mtk-pcie 1a143000.pcie: Parsing ranges property...
[ 1.389086] mtk-pcie 1a143000.pcie: MEM 0x0020000000..0x0027ffffff -> 0x0020000000
[ 1.550129] mtk-pcie 1a143000.pcie: PCI host bridge to bus 0000:00
[ 1.556327] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 1.561818] pci_bus 0000:00: root bus resource [mem 0x20000000-0x27ffffff]
[ 1.568688] pci_bus 0000:00: scanning bus
[ 1.572893] pci 0000:00:00.0: [14c3:3258] type 01 class 0x060400
[ 1.579076] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x1ffffffff 64bit pref]
[ 1.588845] pci_bus 0000:00: fixups for bus
[ 1.593046] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 0
[ 1.599742] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 1.607822] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 1
[ 1.614900] pci_bus 0000:01: scanning bus
[ 1.619113] pci 0000:01:00.0: [14c3:7915] type 00 class 0x000280
[ 1.625300] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[ 1.632630] pci 0000:01:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[ 1.639953] pci 0000:01:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[ 1.647917] pci 0000:01:00.0: supports D1 D2
[ 1.652187] pci 0000:01:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[ 1.658820] pci 0000:01:00.0: PME# disabled
[ 1.663329] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[ 1.704388] pci_bus 0000:01: fixups for bus
[ 1.708583] pci_bus 0000:01: bus scan returning with max=01
[ 1.714187] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[ 1.720821] pci_bus 0000:00: bus scan returning with max=01
[ 1.726413] pci 0000:00:00.0: BAR 0: no space for [mem size 0x200000000 64bit pref]
[ 1.734067] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x200000000 64bit pref]
[ 1.742073] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
[ 1.748857] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit pref]
[ 1.756682] pci 0000:01:00.0: BAR 2: assigned [mem 0x20100000-0x20103fff 64bit pref]
[ 1.764509] pci 0000:01:00.0: BAR 4: assigned [mem 0x20104000-0x20104fff 64bit pref]
[ 1.772333] pci 0000:00:00.0: PCI bridge to [bus 01]
[ 1.777296] pci 0000:00:00.0: bridge window [mem 0x20000000-0x201fffff]
[ 1.784195] pcieport 0000:00:00.0: assign IRQ: got 137
[ 1.789338] pcieport 0000:00:00.0: enabling device (0000 -> 0002)
[ 1.795448] pcieport 0000:00:00.0: enabling bus mastering
[ 1.800877] mtk-pcie 1a143000.pcie: msi#0 address_hi 0x0 address_lo 0x44d3d0c0
[ 1.808249] pcieport 0000:00:00.0: PME: Signaling with IRQ 137
[ 1.814153] pcieport 0000:00:00.0: saving config space at offset 0x0 (reading 0x325814c3)
[ 1.822335] pcieport 0000:00:00.0: saving config space at offset 0x4 (reading 0x100006)
[ 1.830332] pcieport 0000:00:00.0: saving config space at offset 0x8 (reading 0x6040000)
[ 1.838420] pcieport 0000:00:00.0: saving config space at offset 0xc (reading 0x10000)
[ 1.846334] pcieport 0000:00:00.0: saving config space at offset 0x10 (reading 0xc)
[ 1.853987] pcieport 0000:00:00.0: saving config space at offset 0x14 (reading 0x0)
[ 1.861641] pcieport 0000:00:00.0: saving config space at offset 0x18 (reading 0x40010100)
[ 1.869898] pcieport 0000:00:00.0: saving config space at offset 0x1c (reading 0x4200000)
[ 1.878071] pcieport 0000:00:00.0: saving config space at offset 0x20 (reading 0x20102000)
[ 1.886335] pcieport 0000:00:00.0: saving config space at offset 0x24 (reading 0x0)
[ 1.893989] pcieport 0000:00:00.0: saving config space at offset 0x28 (reading 0x0)
[ 1.901642] pcieport 0000:00:00.0: saving config space at offset 0x2c (reading 0x0)
[ 1.909291] pcieport 0000:00:00.0: saving config space at offset 0x30 (reading 0x0)
[ 1.916943] pcieport 0000:00:00.0: saving config space at offset 0x34 (reading 0x50)
[ 1.924684] pcieport 0000:00:00.0: saving config space at offset 0x38 (reading 0x0)
[ 1.932337] pcieport 0000:00:00.0: saving config space at offset 0x3c (reading 0x20189)
[ 1.940933] mtk_hsdma 1b007000.dma-controller: MediaTek HSDMA driver registered
[ 2.020552] mt7530-mdio mdio-bus:00: configuring for fixed/2500base-x link mode
[ 2.029811] mt7530-mdio mdio-bus:00: Link is Up - 2.5Gbps/Full - flow control rx/tx
[ 2.038773] mt7530-mdio mdio-bus:00 lan1 (uninitialized): PHY [mt7530-0:00] driver [MediaTek MT7531 PHY] (irq=138)
[ 2.059184] mt7530-mdio mdio-bus:00 lan2 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7531 PHY] (irq=139)
[ 2.079323] mt7530-mdio mdio-bus:00 lan3 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7531 PHY] (irq=140)
[ 2.099733] mt7530-mdio mdio-bus:00 lan4 (uninitialized): PHY [mt7530-0:03] driver [MediaTek MT7531 PHY] (irq=141)
[ 2.119898] mt7530-mdio mdio-bus:00 wan (uninitialized): PHY [mt7530-0:04] driver [MediaTek MT7531 PHY] (irq=142)
[ 2.130994] DSA: tree 0 setup
[ 2.134696] clk: Disabling unused clocks
[ 2.139286] Freeing unused kernel memory: 448K
[ 2.143784] Run /init as init process
[ 2.147437] with arguments:
[ 2.150394] /init
[ 2.152662] with environment:
[ 2.155793] HOME=/
[ 2.158142] TERM=linux
[ 2.335662] init: Console is alive
[ 2.339171] init: - watchdog -
[ 2.346570] kmodloader: loading kernel modules from /etc/modules-boot.d/
[ 2.356192] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[ 2.373773] init: - preinit -
[ 2.430750] mtk_soc_eth 1b100000.ethernet eth0: configuring for fixed/2500base-x link mode
[ 2.439385] mtk_soc_eth 1b100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[ 2.441172] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 2.454859] mt7530-mdio mdio-bus:00 lan1: configuring for phy/gmii link mode
[ 4.677784] procd: - early -
[ 4.680754] procd: - watchdog -
[ 5.213870] procd: - watchdog -
[ 5.217371] procd: - ubus -
[ 5.274317] procd: - init -
[ 5.434933] kmodloader: loading kernel modules from /etc/modules.d/*
[ 5.443964] Loading modules backported from Linux version v6.1.145-0-gf2198ea7eb3e7
[ 5.451656] Backport generated by backports.git v6.1.145-1-0-g874a7631
[ 5.497263] mt7622-wmac 18000000.wmac: Invalid MAC address, using random address 72:e2:4d:0b:23:89
[ 5.507358] mt7622-wmac 18000000.wmac: registering led 'mt76-phy0'
[ 5.551811] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[ 5.571737] mt7622-wmac 18000000.wmac: HW/SW Version: 0x8a108a10, Build Time: 20190801210006a
[ 5.571737]
[ 5.588521] PPP generic driver version 2.4.2
[ 5.594333] NET: Registered PF_PPPOX protocol family
[ 5.607009] mt7622-wmac 18000000.wmac: N9 Firmware Version: reserved, Build Time: 20220630094834
[ 5.618979] kmodloader: done loading kernel modules from /etc/modules.d/*
[ 5.679401] urngd: v1.0.2 started.
[ 11.948397] mtk_soc_eth 1b100000.ethernet eth0: Link is Down
[ 11.965400] mtk_soc_eth 1b100000.ethernet eth0: configuring for fixed/2500base-x link mode
[ 11.975136] mtk_soc_eth 1b100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[ 11.979174] device eth0 entered promiscuous mode
[ 11.991830] mt7530-mdio mdio-bus:00 lan1: configuring for phy/gmii link mode
[ 12.002348] br-lan: port 1(lan1) entered blocking state
[ 12.007585] br-lan: port 1(lan1) entered disabled state
[ 12.014570] device lan1 entered promiscuous mode
[ 12.021847] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 12.040698] mt7530-mdio mdio-bus:00 lan2: configuring for phy/gmii link mode
[ 12.051125] br-lan: port 2(lan2) entered blocking state
[ 12.056444] br-lan: port 2(lan2) entered disabled state
[ 12.064507] device lan2 entered promiscuous mode
[ 12.077891] mt7530-mdio mdio-bus:00 lan3: configuring for phy/gmii link mode
[ 12.088609] br-lan: port 3(lan3) entered blocking state
[ 12.093907] br-lan: port 3(lan3) entered disabled state
[ 12.101346] device lan3 entered promiscuous mode
[ 12.114305] mt7530-mdio mdio-bus:00 lan4: configuring for phy/gmii link mode
[ 12.125181] br-lan: port 4(lan4) entered blocking state
[ 12.130423] br-lan: port 4(lan4) entered disabled state
[ 12.138611] device lan4 entered promiscuous mode
[ 12.155182] mt7530-mdio mdio-bus:00 wan: configuring for phy/gmii link mode
[ 15.580519] mt7530-mdio mdio-bus:00 lan2: Link is Up - 1Gbps/Full - flow control rx/tx
[ 15.580560] br-lan: port 2(lan2) entered blocking state
[ 15.593730] br-lan: port 2(lan2) entered forwarding state
[ 15.600159] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready

root@OpenWrt:/# cat /proc/mtd
dev: size erasesize name
mtd0: 00040000 00010000 "Preloader"
mtd1: 00020000 00010000 "ATF"
mtd2: 00050000 00010000 "u-boot"
mtd3: 00020000 00010000 "u-boot-env"
mtd4: 00080000 00010000 "Factory"
mtd5: 00010000 00010000 "product_info"
mtd6: 00010000 00010000 "kdump"
mtd7: 00e90000 00010000 "firmware"
mtd8: 00200000 00010000 "kernel"
mtd9: 00c90000 00010000 "rootfs"
mtd10: 000e0000 00010000 "rootfs_data"

F0: 102B 0000
F1: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 0000 0041 [0000]
G0: 0190 0000
T0: 0000 02E9 [000F]
Jump to BL

UNIVPLL_CON0 = 0xFE000000!!!
mt_pll_init: Set pll frequency for 25M crystal
RAM_CONSOLE preloader last status: 0x0 0x0 0x0 0x0 0x0 0x0
[PMIC_WRAP]wrap_init pass,the return value=0.
[pmic_init] Preloader Start..................
[pmic_init] MT6380 CHIP Code, reg_val = 0, 1:E2 0:E3
[pmic_init] Done...................
Chip part number:7622B
MT7622 Version: 1.2.8, (iPA)
SSC OFF
mt_pll_post_init: mt_get_cpu_freq = 1350000Khz
mt_pll_post_init: mt_get_mem_freq = 1600000Khz
mt_pll_post_init: mt_get_bus_freq = 280078Khz
[PLFM] Init I2C: OK(0)

[BLDR] Build Time: 20210415-111027
==== Dump RGU Reg ========
RGU MODE: 14
RGU LENGTH: FFE0
RGU STA: 40000000
RGU INTERVAL: FFF
RGU SWSYSRST: 8000
==== Dump RGU Reg End ====
RGU: g_rgu_satus:2
mtk_wdt_mode_config mode value=10, tmp:22000010
PL RGU RST: ??
SW reset with bypass power key flag
Find bypass powerkey flag
WDT NONRST=0x20000000
WDT IRQ_EN=0x340003
RGU mtk_wdt_init:MTK_WDT_DEBUG_CTL(590200F3)
[EMI] MDL number = 2
[EMI] DRAMC calibration start

[EMI] DRAMC calibration end

[EMI]rank size auto detect
[EMI]start_addr[0x40000000]=0x12345678, test_addr[0x48000000]= 0xEDCBA987
[EMI]start_addr[0x40000000]=0xEDCBA987, test_addr[0x50000000]= 0xEDCBA987
[EMI]rank0 size: 0x10000000
[MEM] complex R/W mem test pass
RAM_CONSOLE wdt status (0x2)=0x2
Flash Index: 0, MenuID: 0x20, DevID1: 0x40, DevID2: 0x18
Read flash id fail, apply shadow flash parameters.
Roger debug: size=1000000, flash_num=1
Flash #0: write protect disable successfully!
Flash #0: write protect enable successfully
size = 1000000, exit 4 byte mode
[PLFM] Init Boot Device: OK(0)

[PART] blksz: 1B
[PART] [0x0000000000000000-0x000000000001FFFF] "PRELOADER" (131072 blocks)
[PART] [0x0000000000020000-0x000000000002FFFF] "tee1" (65536 blocks)
[PART] [0x0000000000030000-0x000000000006FFFF] "lk" (262144 blocks)

Device APC domain init setup:

Domain Setup (0x0)
Domain Setup (0x0)
Device APC domain after setup:
Domain Setup (0x0)
Domain Setup (0x0)
[PART] Image with part header
[PART] name : U-Boot
[PART] addr : 41E00000h mode : -1
[PART] size : 259304
[PART] magic: 58881688h

[PART] load "lk" from 0x0000000000030200 (dev) to 0x41E00000 (mem) [SUCCESS]
[PART] load speed: 606KB/s, 259304 bytes, 417ms
load lk (ret=0)
[PART] Image with part header
[PART] name : atf
[PART] addr : FFFFFFFFh mode : -1
[PART] size : 57936
[PART] magic: 58881688h

[PART] load "tee1" from 0x0000000000020200 (dev) to 0x43000DC0 (mem) [SUCCESS]
[PART] load speed: 607KB/s, 57936 bytes, 93ms
load tee1 (ret=0)
[BLDR] bldr load tee part ret=0x0, addr=0x43001000
[BLDR] boot part. not found
[BLDR] part_load_images ret=0x0
[BLDR] Others, jump to ATF

[BLDR] jump to 0x41E00000
[BLDR] <0x41E00000>=0xEA00000F
[BLDR] <0x41E00004>=0xE59FF014

U-Boot 2014.04-rc1-svn432 (Apr 20 2021 - 10:04:57)

auto detection g_total_rank_size = 0x F000000
DRAM: 240 MiB
NOR: Flash Index: 0, MenuID: 20, DevID1: 40, DevID2: 18
Read flash id fail, apply shadow flash parameters.
Roger debug: size=1000000, flash_num=1
Flash #0: write protect disable successfully!
Flash #0: write protect enable successfully
size = 1000000, exit 4 byte mode
In: serial
Out: serial
Err: serial
Net: mtk_eth
Uip activated
product info crc check success e344aa36
Saving Environment to SPI NOR Flash...
Erasing SPI NOR flash...mtk_nor_erase addr=0x80000,len=0x10000
erase part flash#0 successful!
Writing to SPI NOR flash...done

please press CTRL+T to enter ddr test menu !!!

*** U-Boot SPI NOR ***
```
 1. System Load Linux to SDRAM via TFTP.
 2. System Load Linux firmware then write to Flash via TFTP.
 3. Boot system code via Flash.
 4. System Load U-Boot then write to Flash via TFTP.
 5. System Load U-Boot then write to Flash via Serial.
 6. System Load ATF then write to Flash via TFTP.
 7. System Load Preloader then write to Flash via TFTP.
 8. System Load ROM header then write to Flash via TFTP.
 9. System Load CTP then write to Flash via TFTP.
 a. System Load CTP then Boot to CTP (via Flash).
 b. System Load SingleImage then write to Flash via TFTP.
 U-Boot console
```
Press UP/DOWN to move or Press 1~9,a~b to choose, ENTER to select
read len: 8192
[do_read_image_blks] This is a FIT image,img_size = 0x732498
[do_read_image_blks] img_blks = 0x732498
[do_read_image_blks] img_align_size = 0x732498
read len: 7546008
bootm flag=0, states=70f

Loading kernel from FIT Image at 4007ff28 ...

Bad FIT kernel image format!
ERROR: can't get kernel image!
MT7622>
Error reading from serial device

Thank you.

frollic · October 30, 2025, 9:22am

How are we supposed to know what you've done ?

adikus · October 30, 2025, 11:54pm

First booting like this. How to Fix this error.

frollic · October 31, 2025, 7:18am

You're still not answering the question, how did you get there ?

Redo the install, post all steps.

Use the </> button when posting serial output.

adikus · November 5, 2025, 2:27am

Dear @frollic,

#1 Flash using UART Tftp

*** U-Boot SPI NOR ***

     1. System Load Linux to SDRAM via TFTP.
     2. System Load Linux firmware then write to Flash via TFTP.
     3. Boot system code via Flash.
     4. System Load U-Boot then write to Flash via TFTP.
     5. System Load U-Boot then write to Flash via Serial.
     6. System Load ATF then write to Flash via TFTP.
     7. System Load Preloader then write to Flash via TFTP.
     8. System Load ROM header then write to Flash via TFTP.
     9. System Load CTP then write to Flash via TFTP.
     a. System Load CTP then Boot to CTP (via Flash).
     b. System Load SingleImage then write to Flash via TFTP.
     U-Boot console


  Press UP/DOWN to move or Press 1~9,a~b to choose, ENTER to select

        Input kernel file name (initramfs.bin) ==:
        Input server IP (10.10.10.3) ==:
        Input device IP (10.10.10.254) ==:
ETH already turn on and power on flow will be skipped...

 Waitting for RX_DMA_BUSY status Start... done

mt7531: mt7531_core_pll_setup, hwstrap = 000000ff, xtal=25MHz
mt7531: timeout waiting for SGMII_LINK
>>>>>>>>>>>>>>>>>>>>>>>>>>>>> START CALIBRATION:
-------- gephy-calbration (port:0) --------

PORT 4 RX_DC_OFFSET
before pairA output = d
after pairA output = 1
before pairB output = f
after pairB output = ff
before pairC output = d
after pairC output = 0
before pairD output = 1e
after pairD output = fe
 0x1b000014 = 0x00110214
Using mtk_eth device
TFTP from server 10.10.10.3; our IP address is 10.10.10.254
Filename 'initramfs.bin'.
Load address: 0x4007ff28
Loading: T T #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #########
         2.2 MiB/s
done
Bytes transferred = 8706652 (84da5c hex)
get filesize 0x84da5c
bootm flag=0, states=70f
## Loading kernel from FIT Image at 4007ff28 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-6.6.110
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x40080010
     Data Size:    4155541 Bytes = 4 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x44000000
     Entry Point:  0x44000000
     Hash algo:    crc32
     Hash value:   ad44bb67
     Hash algo:    sha1
     Hash value:   928d20e04b575966afd056f9b1e589aa40fbefaf
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading ramdisk from FIT Image at 4007ff28 ...
   Using 'config-1' configuration
   Trying 'initrd-1' ramdisk subimage
     Description:  ARM64 OpenWrt ruijie_rg-ew3200gx-pro initrd
     Type:         RAMDisk Image
     Compression:  Unknown Compression
     Data Start:   0x404769e8
     Data Size:    4520308 Bytes = 4.3 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: unavailable
     Entry Point:  unavailable
     Hash algo:    crc32
     Hash value:   923a213b
     Hash algo:    sha1
     Hash value:   1380ba3b3f068ffdef3170e6c88340af4c1170c5
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 4007ff28 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt ruijie_rg-ew3200gx-pro device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x408c6470
     Data Size:    28632 Bytes = 28 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   e3313728
     Hash algo:    sha1
     Hash value:   4e4f29fb04415561063a950c8d0cf82ad6acfeb4
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x408c6470
   Uncompressing Kernel Image ... OK
   Loading Ramdisk to 4cb0e000, end 4cf5d974 ... OK
   Loading Device Tree to 4cb04000, end 4cb0dfd7 ... OK

Starting kernel ...

[ATF][    15.158349]save kernel info
[ATF][    15.161285]Kernel_EL2
[ATF][    15.163955]Kernel is 64Bit
[ATF][    15.167044]pc=0x44000000, r0=0x4cb04000, r1=0x0
INFO:    BL3-1: Preparing for EL3 exit to normal world, Kernel
INFO:    BL3-1: Next image address = 0x44000000
INFO:    BL3-1: Next image spsr = 0x3c9
[ATF][    15.184742]el3_exit
[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 6.6.110 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r28959-29397011cc) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Sun Oct 19 16:37:45 2025
[    0.000000] Machine model: Ruijie RG-EW3200GX PRO
[    0.000000] OF: reserved mem: 0x0000000042ff0000..0x0000000042ffffff (64 KiB) map non-reusable ramoops@42ff0000
[    0.000000] OF: reserved mem: 0x0000000043000000..0x000000004302ffff (192 KiB) nomap non-reusable secmon@43000000
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000004fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000042ffffff]
[    0.000000]   node   0: [mem 0x0000000043000000-0x000000004302ffff]
[    0.000000]   node   0: [mem 0x0000000043030000-0x000000004fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000004fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv0.2 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: Trusted OS migration not required
[    0.000000] percpu: Embedded 18 pages/cpu s35624 r8192 d29912 u73728
[    0.000000] pcpu-alloc: s35624 r8192 d29912 u73728 alloc=18*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] CPU features: detected: ARM erratum 843419
[    0.000000] alternatives: applying boot alternatives
[    0.000000] Kernel command line: console=ttyS0,115200n1 swiotlb=512
[    0.000000] Dentry cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.000000] Inode-cache hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 64512
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] software IO TLB: area num 2.
[    0.000000] software IO TLB: mapped [mem 0x000000004f900000-0x000000004fa00000] (1MB)
[    0.000000] Memory: 238492K/262144K available (9152K kernel code, 950K rwdata, 1624K rodata, 448K init, 310K bss, 23652K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] Root IRQ handler: 0xffffffc080010000
[    0.000000] GIC: Using split EOI/Deactivate mode
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] arch_timer: cp15 timer(s) running at 12.50MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2e2049cda, max_idle_ns: 440795202628 ns
[    0.000000] sched_clock: 56 bits at 13MHz, resolution 80ns, wraps every 4398046511080ns
[    0.000205] Calibrating delay loop (skipped), value calculated using timer frequency.. 25.00 BogoMIPS (lpj=125000)
[    0.000213] pid_max: default: 32768 minimum: 301
[    0.002968] Mount-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.002975] Mountpoint-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.005632] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2.
[    0.005767] rcu: Hierarchical SRCU implementation.
[    0.005770] rcu:     Max phase no-delay instances is 1000.
[    0.006148] smp: Bringing up secondary CPUs ...
[    0.006541] Detected VIPT I-cache on CPU1
[    0.006613] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[    0.006680] smp: Brought up 1 node, 2 CPUs
[    0.006684] SMP: Total of 2 processors activated.
[    0.006688] CPU features: detected: 32-bit EL0 Support
[    0.006691] CPU features: detected: CRC32 instructions
[    0.006721] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.006725] CPU: All CPU(s) started at EL2
[    0.006726] alternatives: applying system-wide alternatives
[    0.010962] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.010979] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[    0.012209] pinctrl core: initialized pinctrl subsystem
[    0.013327] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.013615] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[    0.013639] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.013660] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.014056] thermal_sys: Registered thermal governor 'fair_share'
[    0.014060] thermal_sys: Registered thermal governor 'bang_bang'
[    0.014062] thermal_sys: Registered thermal governor 'step_wise'
[    0.014065] thermal_sys: Registered thermal governor 'user_space'
[    0.014112] ASID allocator initialised with 65536 entries
[    0.014765] pstore: Using crash dump compression: deflate
[    0.014769] pstore: Registered ramoops as persistent store backend
[    0.014772] ramoops: using 0x10000@0x42ff0000, ecc: 0
[    0.022852] Modules: 29616 pages in range for non-PLT usage
[    0.022862] Modules: 521136 pages in range for PLT usage
[    0.023800] cryptd: max_cpu_qlen set to 1000
[    0.024778] SCSI subsystem initialized
[    0.024876] libata version 3.00 loaded.
[    0.026239] clocksource: Switched to clocksource arch_sys_counter
[    0.028397] NET: Registered PF_INET protocol family
[    0.028487] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.029690] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.029702] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.029710] TCP established hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.029728] TCP bind hash table entries: 2048 (order: 4, 65536 bytes, linear)
[    0.029787] TCP: Hash tables configured (established 2048 bind 2048)
[    0.030158] MPTCP token hash table entries: 256 (order: 0, 6144 bytes, linear)
[    0.030262] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.030277] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.030453] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.030486] PCI: CLS 0 bytes, default 64
[    0.030694] Unpacking initramfs...
[    0.037412] workingset: timestamp_bits=46 max_order=16 bucket_order=0
[    0.041980] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.041985] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.096187] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.107524] mt-pmic-pwrap 10001000.pwrap: unexpected interrupt int=0x1
[    0.120898] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.123816] printk: console [ttyS0] disabled
[    0.144153] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 118, base_baud = 1562500) is a ST16650V2
[    0.144201] printk: console [ttyS0] enabled
[    0.798079] mtk_rng 1020f000.rng: registered RNG driver
[    0.803794] random: crng init done
[    0.818663] loop: module loaded
[    0.825133] spi-nor spi0.0: XM25QH128C (16384 Kbytes)
[    1.244216] Freeing initrd memory: 4412K
[    1.254655] 8 fixed-partitions partitions found on MTD device spi0.0
[    1.261100] OF: Bad cell count for /spi@11014000/flash@0/partitions
[    1.267395] OF: Bad cell count for /spi@11014000/flash@0/partitions
[    1.273879] Creating 8 MTD partitions on "spi0.0":
[    1.278673] 0x000000000000-0x000000040000 : "Preloader"
[    1.284236] 0x000000040000-0x000000060000 : "ATF"
[    1.289242] 0x000000060000-0x0000000b0000 : "u-boot"
[    1.294462] 0x0000000b0000-0x0000000d0000 : "u-boot-env"
[    1.300643] 0x0000000d0000-0x000000150000 : "Factory"
[    1.305974] 0x000000150000-0x000000160000 : "product_info"
[    1.311746] 0x000000160000-0x000000170000 : "kdump"
[    1.316897] 0x000000170000-0x000001000000 : "firmware"
[    1.322401] 2 fit-fw partitions found on MTD device firmware
[    1.328076] Creating 2 MTD partitions on "firmware":
[    1.333033] 0x000000000000-0x000000400000 : "kernel"
[    1.338430] 0x000000400000-0x000000e90000 : "rootfs"
[    1.343653] mtd: setting mtd9 (rootfs) as root device
[    1.348749] 1 squashfs-split partitions found on MTD device rootfs
[    1.354924] 0x000000a60000-0x000000e90000 : "rootfs_data"
[    1.362878] mtk-spi-nor 11014000.spi: spi frequency: 46666653 Hz
[    1.500271] mtk_soc_eth 1b100000.ethernet eth0: mediatek frame engine at 0xffffffc080fa0000, irq 122
[    1.510040] i2c_dev: i2c /dev entries driver
[    1.515662] mtk-wdt 10212000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[    1.525448] NET: Registered PF_INET6 protocol family
[    1.531324] Segment Routing with IPv6
[    1.535005] In-situ OAM (IOAM) with IPv6
[    1.538991] NET: Registered PF_PACKET protocol family
[    1.544069] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.557343] 8021q: 802.1Q VLAN Support v1.8
[    1.581868] mtk-pcie 1a143000.pcie: host bridge /pcie@1a143000 ranges:
[    1.588467] mtk-pcie 1a143000.pcie: Parsing ranges property...
[    1.594299] mtk-pcie 1a143000.pcie:      MEM 0x0020000000..0x0027ffffff -> 0x0020000000
[    1.875131] mtk-pcie 1a143000.pcie: PCI host bridge to bus 0000:00
[    1.881346] pci_bus 0000:00: root bus resource [bus 00-ff]
[    1.886838] pci_bus 0000:00: root bus resource [mem 0x20000000-0x27ffffff]
[    1.893709] pci_bus 0000:00: scanning bus
[    1.897908] pci 0000:00:00.0: [14c3:3258] type 01 class 0x060400
[    1.904088] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x1ffffffff 64bit pref]
[    1.914134] pci_bus 0000:00: fixups for bus
[    1.918337] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 0
[    1.925034] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.933109] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 1
[    1.940194] pci_bus 0000:01: scanning bus
[    1.944351] pci 0000:01:00.0: [14c3:7915] type 00 class 0x000280
[    1.950541] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[    1.957883] pci 0000:01:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[    1.965207] pci 0000:01:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[    1.973181] pci 0000:01:00.0: supports D1 D2
[    1.977452] pci 0000:01:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[    1.984086] pci 0000:01:00.0: PME# disabled
[    1.988612] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[    2.026500] pci_bus 0000:01: fixups for bus
[    2.030690] pci_bus 0000:01: bus scan returning with max=01
[    2.036296] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    2.042932] pci_bus 0000:00: bus scan returning with max=01
[    2.048546] pci 0000:00:00.0: BAR 0: no space for [mem size 0x200000000 64bit pref]
[    2.056211] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x200000000 64bit pref]
[    2.064216] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
[    2.071014] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit pref]
[    2.078845] pci 0000:01:00.0: BAR 2: assigned [mem 0x20100000-0x20103fff 64bit pref]
[    2.086672] pci 0000:01:00.0: BAR 4: assigned [mem 0x20104000-0x20104fff 64bit pref]
[    2.094492] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.099458] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x201fffff]
[    2.106370] pcieport 0000:00:00.0: assign IRQ: got 126
[    2.111508] pcieport 0000:00:00.0: enabling device (0000 -> 0002)
[    2.117617] pcieport 0000:00:00.0: enabling bus mastering
[    2.123064] mtk-pcie 1a143000.pcie: msi#0 address_hi 0x0 address_lo 0x44e750c0
[    2.130462] pcieport 0000:00:00.0: PME: Signaling with IRQ 126
[    2.136368] pcieport 0000:00:00.0: save config 0x00: 0x325814c3
[    2.142283] pcieport 0000:00:00.0: save config 0x04: 0x00100006
[    2.148205] pcieport 0000:00:00.0: save config 0x08: 0x06040000
[    2.154119] pcieport 0000:00:00.0: save config 0x0c: 0x00010000
[    2.160037] pcieport 0000:00:00.0: save config 0x10: 0x0000000c
[    2.165951] pcieport 0000:00:00.0: save config 0x14: 0x00000000
[    2.171870] pcieport 0000:00:00.0: save config 0x18: 0x40010100
[    2.177788] pcieport 0000:00:00.0: save config 0x1c: 0x04200000
[    2.183701] pcieport 0000:00:00.0: save config 0x20: 0x20102000
[    2.189618] pcieport 0000:00:00.0: save config 0x24: 0x00000000
[    2.195531] pcieport 0000:00:00.0: save config 0x28: 0x00000000
[    2.201449] pcieport 0000:00:00.0: save config 0x2c: 0x00000000
[    2.207368] pcieport 0000:00:00.0: save config 0x30: 0x00000000
[    2.213281] pcieport 0000:00:00.0: save config 0x34: 0x00000050
[    2.219198] pcieport 0000:00:00.0: save config 0x38: 0x00000000
[    2.225110] pcieport 0000:00:00.0: save config 0x3c: 0x0002017e
[    2.231711] mtk_hsdma 1b007000.dma-controller: MediaTek HSDMA driver registered
[    2.344005] mt7530-mdio mdio-bus:1f: configuring for fixed/2500base-x link mode
[    2.357215] mt7530-mdio mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    2.364124] mt7530-mdio mdio-bus:1f lan1 (uninitialized): PHY [mt7530-0:00] driver [MediaTek MT7531 PHY] (irq=128)
[    2.387164] mt7530-mdio mdio-bus:1f lan2 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7531 PHY] (irq=129)
[    2.409182] mt7530-mdio mdio-bus:1f lan3 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7531 PHY] (irq=130)
[    2.431163] mt7530-mdio mdio-bus:1f lan4 (uninitialized): PHY [mt7530-0:03] driver [MediaTek MT7531 PHY] (irq=131)
[    2.453123] mt7530-mdio mdio-bus:1f wan (uninitialized): PHY [mt7530-0:04] driver [MediaTek MT7531 PHY] (irq=132)
[    2.464272] mtk_soc_eth 1b100000.ethernet eth0: entered promiscuous mode
[    2.471008] DSA: tree 0 setup
[    2.474380] clk: Disabling unused clocks
[    2.479017] Freeing unused kernel memory: 448K
[    2.483503] Run /init as init process
[    2.487170]   with arguments:
[    2.490129]     /init
[    2.492392]   with environment:
[    2.495523]     HOME=/
[    2.497881]     TERM=linux
[    2.682575] init: Console is alive
[    2.686071] init: - watchdog -
[    2.695054] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.702415] gpio_button_hotplug: loading out-of-tree module taints kernel.
[    2.711947] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.721672] init: - preinit -
[    2.787647] mtk_soc_eth 1b100000.ethernet eth0: configuring for fixed/2500base-x link mode
[    2.796136] mtk_soc_eth 1b100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    2.809971] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    5.054736] mt7530-mdio mdio-bus:1f lan1: Link is Up - 1Gbps/Full - flow control rx/tx
[    7.008170] mt7530-mdio mdio-bus:1f lan1: Link is Down
[    7.019607] procd: - early -
[    7.022611] procd: - watchdog -
[    7.559081] procd: - watchdog -
[    7.562703] procd: - ubus -
[    7.718874] procd: - init -
Please press Enter to activate this console.
[    7.925456] kmodloader: loading kernel modules from /etc/modules.d/*
[    7.938358] Loading modules backported from Linux version v6.12.52-0-g2b2cbdcede38
[    7.945934] Backport generated by backports.git v6.1.110-1-35-g410656ef
[    8.000245] mt7622-wmac 18000000.wmac: Invalid MAC address, using random address 46:94:db:bf:8a:86
[    8.010092] mt7622-wmac 18000000.wmac: registering led 'mt76-phy0'
[    8.038559] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[    8.056770] mt7915e 0000:01:00.0: assign IRQ: got 126
[    8.061880] mt7915e 0000:01:00.0: enabling device (0000 -> 0002)
[    8.068014] mt7915e 0000:01:00.0: enabling bus mastering
[    8.075572] mt7622-wmac 18000000.wmac: HW/SW Version: 0x8a108a10, Build Time: 20190801210006a
[    8.075572]
[    8.118886] mt7622-wmac 18000000.wmac: N9 Firmware Version: _reserved_, Build Time: 20220630094834
[    8.127481] urngd: v1.0.2 started.
[    8.226428] mtk-pcie 1a143000.pcie: msi#0 address_hi 0x0 address_lo 0x44e750c0
[    8.286831] mt7915e 0000:01:00.0: HW/SW Version: 0x8a108a10, Build Time: 20240429200716a
[    8.286831]
[    8.309516] mt7915e 0000:01:00.0: WM Firmware Version: ____000000, Build Time: 20240429200752
[    8.331409] mt7915e 0000:01:00.0: WA Firmware Version: DEV_000000, Build Time: 20240429200812
[    8.448228] mt7915e 0000:01:00.0: eeprom load fail, use default bin
[    8.454614] mt7915e 0000:01:00.0: Direct firmware load for mediatek/mt7915_eeprom.bin failed with error -2
[    8.464321] mt7915e 0000:01:00.0: Falling back to sysfs fallback for: mediatek/mt7915_eeprom.bin
[    8.482754] mt7915e: probe of 0000:01:00.0 failed with error -12
[    8.506553] PPP generic driver version 2.4.2
[    8.511453] NET: Registered PF_PPPOX protocol family
[    8.518960] kmodloader: done loading kernel modules from /etc/modules.d/*
[   16.757739] mtk_soc_eth 1b100000.ethernet eth0: Link is Down
[   16.781034] mtk_soc_eth 1b100000.ethernet eth0: configuring for fixed/2500base-x link mode
[   16.790029] mtk_soc_eth 1b100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[   16.796738] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
[   16.810190] br-lan: port 1(lan1) entered blocking state
[   16.815454] br-lan: port 1(lan1) entered disabled state
[   16.820775] mt7530-mdio mdio-bus:1f lan1: entered allmulticast mode
[   16.827080] mtk_soc_eth 1b100000.ethernet eth0: entered allmulticast mode
[   16.837154] mt7530-mdio mdio-bus:1f lan1: entered promiscuous mode
[   16.857244] mt7530-mdio mdio-bus:1f lan2: configuring for phy/gmii link mode
[   16.869989] br-lan: port 2(lan2) entered blocking state
[   16.875237] br-lan: port 2(lan2) entered disabled state
[   16.880562] mt7530-mdio mdio-bus:1f lan2: entered allmulticast mode
[   16.900223] mt7530-mdio mdio-bus:1f lan2: entered promiscuous mode
[   16.924631] mt7530-mdio mdio-bus:1f lan3: configuring for phy/gmii link mode
[   16.953460] br-lan: port 3(lan3) entered blocking state
[   16.958773] br-lan: port 3(lan3) entered disabled state
[   16.964039] mt7530-mdio mdio-bus:1f lan3: entered allmulticast mode
[   16.975754] mt7530-mdio mdio-bus:1f lan3: entered promiscuous mode
[   16.994377] mt7530-mdio mdio-bus:1f lan4: configuring for phy/gmii link mode
[   17.016506] br-lan: port 4(lan4) entered blocking state
[   17.021754] br-lan: port 4(lan4) entered disabled state
[   17.027080] mt7530-mdio mdio-bus:1f lan4: entered allmulticast mode
[   17.057344] mt7530-mdio mdio-bus:1f lan4: entered promiscuous mode
[   17.094647] mt7530-mdio mdio-bus:1f wan: configuring for phy/gmii link mode
[   19.539425] mt7530-mdio mdio-bus:1f lan1: Link is Up - 1Gbps/Full - flow control rx/tx
[   19.539472] br-lan: port 1(lan1) entered blocking state
[   19.552617] br-lan: port 1(lan1) entered forwarding state



BusyBox v1.36.1 (2025-10-19 16:37:45 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 24.10.4, r28959-29397011cc
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:~#

file initramfs.bin is going well (original file name is openwrt-24.10.4-mediatek-mt7622-ruijie_rg-ew3200gx-pro-initramfs-kernel.bin), as seen below:

#2 (important) Back up firmware(mtd7) partitions with:
dd if=/dev/mtd7 of=/tmp/firmware.bin

root@OpenWrt:~# dd if=/dev/mtd7 of=/tmp/firmware.bin
29824+0 records in
29824+0 records out
root@OpenWrt:~#

and then download the firmware.bin image via SCP.

#3 Flash the OpenWrt sysupgrade firmware.

Transfer the firmware.bin image to the device.
Flash the image with:
mtd write firmware.bin firmware

root@OpenWrt:/tmp# mtd write firmware.bin firmware
Unlocking firmware ...

Writing from firmware.bin to firmware ...
root@OpenWrt:/tmp#

#4 Rebooting

root@OpenWrt:/tmp# reboot
root@OpenWrt:/tmp# [ 1040.857272] br-lan: port 1(lan1) entered disabled state
[ 1040.864192] mt7530-mdio mdio-bus:1f lan1: left allmulticast mode
[ 1040.870463] mt7530-mdio mdio-bus:1f lan1: left promiscuous mode
[ 1040.876558] br-lan: port 1(lan1) entered disabled state
[ 1040.928888] mt7530-mdio mdio-bus:1f lan1: Link is Down
[ 1040.940372] mt7530-mdio mdio-bus:1f lan2: left allmulticast mode
[ 1040.946430] mt7530-mdio mdio-bus:1f lan2: left promiscuous mode
[ 1040.952442] br-lan: port 2(lan2) entered disabled state
[ 1041.004667] mt7530-mdio mdio-bus:1f lan3: left allmulticast mode
[ 1041.010726] mt7530-mdio mdio-bus:1f lan3: left promiscuous mode
[ 1041.016752] br-lan: port 3(lan3) entered disabled state
[ 1041.044465] mt7530-mdio mdio-bus:1f lan4: left allmulticast mode
[ 1041.050513] mtk_soc_eth 1b100000.ethernet eth0: left allmulticast mode
[ 1041.057058] mt7530-mdio mdio-bus:1f lan4: left promiscuous mode
[ 1041.063065] br-lan: port 4(lan4) entered disabled state
[ 1041.512913] mtk_soc_eth 1b100000.ethernet eth0: Link is Down
[ 1045.607976] reboot: Restarting system

F0: 102B 0000
F1: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 0000 0041 [0000]
G0: 0190 0000
T0: 0000 02E9 [000F]
Jump to BL

UNIVPLL_CON0 = 0xFE000000!!!
mt_pll_init: Set pll frequency for 25M crystal
RAM_CONSOLE preloader last status: 0x0 0x0 0x0 0x0 0x0 0x0
[PMIC_WRAP]wrap_init pass,the return value=0.
[pmic_init] Preloader Start..................
[pmic_init] MT6380 CHIP Code, reg_val = 0, 1:E2  0:E3
[pmic_init] Done...................
Chip part number:7622B
MT7622 Version: 1.2.8, (iPA)
SSC OFF
mt_pll_post_init: mt_get_cpu_freq = 1350000Khz
mt_pll_post_init: mt_get_mem_freq = 1600000Khz
mt_pll_post_init: mt_get_bus_freq = 279980Khz
[PLFM] Init I2C: OK(0)

[BLDR] Build Time: 20210415-111027
==== Dump RGU Reg ========
RGU MODE:     14
RGU LENGTH:   FFE0
RGU STA:      40000000
RGU INTERVAL: FFF
RGU SWSYSRST: 8000
==== Dump RGU Reg End ====
RGU: g_rgu_satus:2
 mtk_wdt_mode_config  mode value=10, tmp:22000010
PL RGU RST: ??
SW reset with bypass power key flag
Find bypass powerkey flag
WDT NONRST=0x20000000
WDT IRQ_EN=0x340003
RGU mtk_wdt_init:MTK_WDT_DEBUG_CTL(590200F3)
[EMI] MDL number = 2
[EMI] DRAMC calibration start

[DDR] Gating glitch patched (0<cnt<=6)
[EMI] DRAMC calibration end

[EMI]rank size auto detect
[EMI]start_addr[0x40000000]=0x12345678, test_addr[0x48000000]= 0xEDCBA987
[EMI]start_addr[0x40000000]=0xEDCBA987, test_addr[0x50000000]= 0xEDCBA987
[EMI]rank0 size: 0x10000000
[MEM] complex R/W mem test pass
RAM_CONSOLE wdt status (0x2)=0x2
Flash Index: 0, MenuID: 0x20, DevID1: 0x40, DevID2: 0x18
Read flash id fail, apply shadow flash parameters.
Roger debug: size=1000000, flash_num=1
Flash #0: write protect disable successfully!
Flash #0: write protect enable successfully
size = 1000000, exit 4 byte mode
[PLFM] Init Boot Device: OK(0)

[PART] blksz: 1B
[PART] [0x0000000000000000-0x000000000001FFFF] "PRELOADER" (131072 blocks)
[PART] [0x0000000000020000-0x000000000002FFFF] "tee1" (65536 blocks)
[PART] [0x0000000000030000-0x000000000006FFFF] "lk" (262144 blocks)

Device APC domain init setup:

Domain Setup (0x0)
Domain Setup (0x0)
Device APC domain after setup:
Domain Setup (0x0)
Domain Setup (0x0)
[PART] Image with part header
[PART] name : U-Boot
[PART] addr : 41E00000h mode : -1
[PART] size : 259304
[PART] magic: 58881688h

[PART] load "lk" from 0x0000000000030200 (dev) to 0x41E00000 (mem) [SUCCESS]
[PART] load speed: 608KB/s, 259304 bytes, 416ms
load lk (ret=0)
[PART] Image with part header
[PART] name : atf
[PART] addr : FFFFFFFFh mode : -1
[PART] size : 57936
[PART] magic: 58881688h

[PART] load "tee1" from 0x0000000000020200 (dev) to 0x43000DC0 (mem) [SUCCESS]
[PART] load speed: 607KB/s, 57936 bytes, 93ms
load tee1 (ret=0)
[BLDR] bldr load tee part ret=0x0, addr=0x43001000
[BLDR] boot part. not found
[BLDR] part_load_images ret=0x0
[BLDR] Others, jump to ATF

[BLDR] jump to 0x41E00000
[BLDR] <0x41E00000>=0xEA00000F
[BLDR] <0x41E00004>=0xE59FF014


U-Boot 2014.04-rc1-svn432 (Apr 20 2021 - 10:04:57)

auto detection g_total_rank_size = 0x F000000
DRAM:  240 MiB
NOR:  Flash Index: 0, MenuID: 20, DevID1: 40, DevID2: 18
Read flash id fail, apply shadow flash parameters.
Roger debug: size=1000000, flash_num=1
Flash #0: write protect disable successfully!
Flash #0: write protect enable successfully
size = 1000000, exit 4 byte mode
In:    serial
Out:   serial
Err:   serial
Net:   mtk_eth
Uip activated
product info crc check success e344aa36
Saving Environment to SPI NOR Flash...
Erasing SPI NOR flash...mtk_nor_erase addr=0x80000,len=0x10000
erase part flash#0 successful!
Writing to SPI NOR flash...done

please press CTRL+T to enter ddr test menu !!!

read len: 8192
[do_read_image_blks] This is a FIT image,img_size = 0x84da5c
[do_read_image_blks] img_blks = 0x84da5c
[do_read_image_blks] img_align_size = 0x84da5c
read len: 8706652
bootm flag=0, states=70f
## Loading kernel from FIT Image at 4007ff28 ...
Bad FIT kernel image format!
ERROR: can't get kernel image!
MT7622>

Well, at this point I'm wondering why the booting failed.

Need your expert opinion.

Thank you.

adikus · November 10, 2025, 12:40am

Dear All,

I've found the solution for my Ruijie RG-EW3200GX PRO and tried it myself. It's not difficult. It can all be done using a web browser (unless the router is already bricked).

Just download the Reyee AX3200 E5 Platform MediaTek MT7622 model at https://firmware-selector.openwrt.org/

Starting kernel ...

[ATF][    17.859317]save kernel info
[ATF][    17.862254]Kernel_EL2
[ATF][    17.864924]Kernel is 64Bit
[ATF][    17.868012]pc=0x44000000, r0=0x4cb04000, r1=0x0
INFO:    BL3-1: Preparing for EL3 exit to normal world, Kernel
INFO:    BL3-1: Next image address = 0x44000000
INFO:    BL3-1: Next image spsr = 0x3c9
[ATF][    17.885710]el3_exit
[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 6.6.110 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r28959-29397011cc) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Sun Oct 19 16:37:45 2025
[    0.000000] Machine model: reyee AX3200 E5
[    0.000000] OF: reserved mem: 0x0000000042ff0000..0x0000000042ffffff (64 KiB) map non-reusable ramoops@42ff0000
[    0.000000] OF: reserved mem: 0x0000000043000000..0x000000004302ffff (192 KiB) nomap non-reusable secmon@43000000
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000004fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000042ffffff]
[    0.000000]   node   0: [mem 0x0000000043000000-0x000000004302ffff]
[    0.000000]   node   0: [mem 0x0000000043030000-0x000000004fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000004fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv0.2 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: Trusted OS migration not required
[    0.000000] percpu: Embedded 18 pages/cpu s35624 r8192 d29912 u73728
[    0.000000] pcpu-alloc: s35624 r8192 d29912 u73728 alloc=18*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] CPU features: detected: ARM erratum 843419
[    0.000000] alternatives: applying boot alternatives
[    0.000000] Kernel command line: console=ttyS0,115200n1 swiotlb=512
[    0.000000] Dentry cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.000000] Inode-cache hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 64512
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] software IO TLB: area num 2.
[    0.000000] software IO TLB: mapped [mem 0x000000004f900000-0x000000004fa00000] (1MB)
[    0.000000] Memory: 238492K/262144K available (9152K kernel code, 950K rwdata, 1624K rodata, 448K init, 310K bss, 23652K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] Root IRQ handler: 0xffffffc080010000
[    0.000000] GIC: Using split EOI/Deactivate mode
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] arch_timer: cp15 timer(s) running at 12.50MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2e2049cda, max_idle_ns: 440795202628 ns
[    0.000000] sched_clock: 56 bits at 13MHz, resolution 80ns, wraps every 4398046511080ns
[    0.000197] Calibrating delay loop (skipped), value calculated using timer frequency.. 25.00 BogoMIPS (lpj=125000)
[    0.000206] pid_max: default: 32768 minimum: 301
[    0.002951] Mount-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.002958] Mountpoint-cache hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.005615] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=2.
[    0.005751] rcu: Hierarchical SRCU implementation.
[    0.005753] rcu:     Max phase no-delay instances is 1000.
[    0.006130] smp: Bringing up secondary CPUs ...
[    0.006525] Detected VIPT I-cache on CPU1
[    0.006599] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[    0.006666] smp: Brought up 1 node, 2 CPUs
[    0.006671] SMP: Total of 2 processors activated.
[    0.006674] CPU features: detected: 32-bit EL0 Support
[    0.006677] CPU features: detected: CRC32 instructions
[    0.006707] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.006711] CPU: All CPU(s) started at EL2
[    0.006713] alternatives: applying system-wide alternatives
[    0.010942] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.010960] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[    0.012191] pinctrl core: initialized pinctrl subsystem
[    0.013305] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.013592] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[    0.013616] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.013637] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.014036] thermal_sys: Registered thermal governor 'fair_share'
[    0.014039] thermal_sys: Registered thermal governor 'bang_bang'
[    0.014042] thermal_sys: Registered thermal governor 'step_wise'
[    0.014044] thermal_sys: Registered thermal governor 'user_space'
[    0.014092] ASID allocator initialised with 65536 entries
[    0.014793] pstore: Using crash dump compression: deflate
[    0.014797] pstore: Registered ramoops as persistent store backend
[    0.014800] ramoops: using 0x10000@0x42ff0000, ecc: 0
[    0.022875] Modules: 29616 pages in range for non-PLT usage
[    0.022885] Modules: 521136 pages in range for PLT usage
[    0.023823] cryptd: max_cpu_qlen set to 1000
[    0.024796] SCSI subsystem initialized
[    0.024897] libata version 3.00 loaded.
[    0.026259] clocksource: Switched to clocksource arch_sys_counter
[    0.028408] NET: Registered PF_INET protocol family
[    0.028501] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.029703] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.029715] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.029724] TCP established hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.029741] TCP bind hash table entries: 2048 (order: 4, 65536 bytes, linear)
[    0.029798] TCP: Hash tables configured (established 2048 bind 2048)
[    0.030162] MPTCP token hash table entries: 256 (order: 0, 6144 bytes, linear)
[    0.030267] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.030282] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.030459] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.030492] PCI: CLS 0 bytes, default 64
[    0.030706] Unpacking initramfs...
[    0.037420] workingset: timestamp_bits=46 max_order=16 bucket_order=0
[    0.041984] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.041989] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.096294] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.107625] mt-pmic-pwrap 10001000.pwrap: unexpected interrupt int=0x1
[    0.120874] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.123801] printk: console [ttyS0] disabled
[    0.144141] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 118, base_baud = 1562500) is a ST16650V2
[    0.144189] printk: console [ttyS0] enabled
[    0.797613] mtk_rng 1020f000.rng: registered RNG driver
[    0.803320] random: crng init done
[    0.809768] loop: module loaded
[    0.815345] spi-nor spi0.0: XM25QH128C (16384 Kbytes)
[    1.244041] Freeing initrd memory: 4412K
[    1.254381] 8 fixed-partitions partitions found on MTD device spi0.0
[    1.260823] OF: Bad cell count for /spi@11014000/flash@0/partitions
[    1.267118] OF: Bad cell count for /spi@11014000/flash@0/partitions
[    1.273601] Creating 8 MTD partitions on "spi0.0":
[    1.278395] 0x000000000000-0x000000020000 : "Preloader"
[    1.283959] 0x000000020000-0x000000050000 : "ATF"
[    1.289057] 0x000000030000-0x0000000b0000 : "u-boot"
[    1.294275] 0x000000080000-0x000000110000 : "u-boot-env"
[    1.300421] 0x000000090000-0x000000160000 : "Factory"
[    1.305888] 0x0000000d0000-0x0000001b0000 : "product_info"
[    1.311681] 0x0000000e0000-0x0000001d0000 : "kdump"
[    1.316873] 0x0000000f0000-0x0000010f0000 : "firmware"
[    1.322008] mtd: partition "firmware" extends beyond the end of device "spi0.0" -- size truncated to 0xf10000
[    1.332447] 2 fit-fw partitions found on MTD device firmware
[    1.338129] Creating 2 MTD partitions on "firmware":
[    1.343087] 0x000000000000-0x000000400000 : "kernel"
[    1.348487] 0x000000400000-0x000000f10000 : "rootfs"
[    1.353715] mtd: setting mtd9 (rootfs) as root device
[    1.358811] 1 squashfs-split partitions found on MTD device rootfs
[    1.364986] 0x0000008b0000-0x000000f10000 : "rootfs_data"
[    1.372961] mtk-spi-nor 11014000.spi: spi frequency: 46666653 Hz
[    1.510317] mtk_soc_eth 1b100000.ethernet eth0: mediatek frame engine at 0xffffffc081040000, irq 122
[    1.520104] i2c_dev: i2c /dev entries driver
[    1.525679] mtk-wdt 10212000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[    1.535459] NET: Registered PF_INET6 protocol family
[    1.541343] Segment Routing with IPv6
[    1.545023] In-situ OAM (IOAM) with IPv6
[    1.549019] NET: Registered PF_PACKET protocol family
[    1.554090] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.567357] 8021q: 802.1Q VLAN Support v1.8
[    1.591610] mtk-pcie 1a143000.pcie: host bridge /pcie@1a143000 ranges:
[    1.598190] mtk-pcie 1a143000.pcie: Parsing ranges property...
[    1.604020] mtk-pcie 1a143000.pcie:      MEM 0x0020000000..0x0027ffffff -> 0x0020000000
[    1.873668] mtk-pcie 1a143000.pcie: PCI host bridge to bus 0000:00
[    1.879894] pci_bus 0000:00: root bus resource [bus 00-ff]
[    1.885381] pci_bus 0000:00: root bus resource [mem 0x20000000-0x27ffffff]
[    1.892264] pci_bus 0000:00: scanning bus
[    1.896336] pci 0000:00:00.0: [14c3:3258] type 01 class 0x060400
[    1.902372] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x1ffffffff 64bit pref]
[    1.911639] pci_bus 0000:00: fixups for bus
[    1.915825] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 0
[    1.922535] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.930556] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 1
[    1.937394] pci_bus 0000:01: scanning bus
[    1.941559] pci 0000:01:00.0: [14c3:7915] type 00 class 0x000280
[    1.947756] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[    1.955086] pci 0000:01:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[    1.962422] pci 0000:01:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[    1.970400] pci 0000:01:00.0: supports D1 D2
[    1.974668] pci 0000:01:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[    1.981313] pci 0000:01:00.0: PME# disabled
[    1.985826] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[    2.026593] pci_bus 0000:01: fixups for bus
[    2.030777] pci_bus 0000:01: bus scan returning with max=01
[    2.036384] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    2.043019] pci_bus 0000:00: bus scan returning with max=01
[    2.048633] pci 0000:00:00.0: BAR 0: no space for [mem size 0x200000000 64bit pref]
[    2.056302] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x200000000 64bit pref]
[    2.064301] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
[    2.071093] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit pref]
[    2.078920] pci 0000:01:00.0: BAR 2: assigned [mem 0x20100000-0x20103fff 64bit pref]
[    2.086746] pci 0000:01:00.0: BAR 4: assigned [mem 0x20104000-0x20104fff 64bit pref]
[    2.094565] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.099531] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x201fffff]
[    2.106443] pcieport 0000:00:00.0: assign IRQ: got 126
[    2.111582] pcieport 0000:00:00.0: enabling device (0000 -> 0002)
[    2.117691] pcieport 0000:00:00.0: enabling bus mastering
[    2.123139] mtk-pcie 1a143000.pcie: msi#0 address_hi 0x0 address_lo 0x44e750c0
[    2.130524] pcieport 0000:00:00.0: PME: Signaling with IRQ 126
[    2.136432] pcieport 0000:00:00.0: save config 0x00: 0x325814c3
[    2.142347] pcieport 0000:00:00.0: save config 0x04: 0x00100006
[    2.148270] pcieport 0000:00:00.0: save config 0x08: 0x06040000
[    2.154184] pcieport 0000:00:00.0: save config 0x0c: 0x00010000
[    2.160101] pcieport 0000:00:00.0: save config 0x10: 0x0000000c
[    2.166014] pcieport 0000:00:00.0: save config 0x14: 0x00000000
[    2.171932] pcieport 0000:00:00.0: save config 0x18: 0x40010100
[    2.177849] pcieport 0000:00:00.0: save config 0x1c: 0x04200000
[    2.183762] pcieport 0000:00:00.0: save config 0x20: 0x20102000
[    2.189679] pcieport 0000:00:00.0: save config 0x24: 0x00000000
[    2.195592] pcieport 0000:00:00.0: save config 0x28: 0x00000000
[    2.201509] pcieport 0000:00:00.0: save config 0x2c: 0x00000000
[    2.207429] pcieport 0000:00:00.0: save config 0x30: 0x00000000
[    2.213342] pcieport 0000:00:00.0: save config 0x34: 0x00000050
[    2.219260] pcieport 0000:00:00.0: save config 0x38: 0x00000000
[    2.225173] pcieport 0000:00:00.0: save config 0x3c: 0x0002017e
[    2.231764] mtk_hsdma 1b007000.dma-controller: MediaTek HSDMA driver registered
[    2.345056] mt7530-mdio mdio-bus:1f: configuring for fixed/2500base-x link mode
[    2.354281] mt7530-mdio mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    2.365044] mt7530-mdio mdio-bus:1f lan1 (uninitialized): PHY [mt7530-0:00] driver [MediaTek MT7531 PHY] (irq=128)
[    2.387843] mt7530-mdio mdio-bus:1f lan2 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7531 PHY] (irq=129)
[    2.409885] mt7530-mdio mdio-bus:1f lan3 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7531 PHY] (irq=130)
[    2.431877] mt7530-mdio mdio-bus:1f lan4 (uninitialized): PHY [mt7530-0:03] driver [MediaTek MT7531 PHY] (irq=131)
[    2.453868] mt7530-mdio mdio-bus:1f wan (uninitialized): PHY [mt7530-0:04] driver [MediaTek MT7531 PHY] (irq=132)
[    2.465020] mtk_soc_eth 1b100000.ethernet eth0: entered promiscuous mode
[    2.471776] DSA: tree 0 setup
[    2.475180] clk: Disabling unused clocks
[    2.479801] Freeing unused kernel memory: 448K
[    2.484285] Run /init as init process
[    2.487953]   with arguments:
[    2.490910]     /init
[    2.493173]   with environment:
[    2.496316]     HOME=/
[    2.498666]     TERM=linux
[    2.682262] init: Console is alive
[    2.685765] init: - watchdog -
[    2.692947] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    2.700835] gpio_button_hotplug: loading out-of-tree module taints kernel.
[    2.711016] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    2.719783] init: - preinit -
[    2.787323] mtk_soc_eth 1b100000.ethernet eth0: configuring for fixed/2500base-x link mode
[    2.795803] mtk_soc_eth 1b100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    2.803359] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    5.191339] mt7530-mdio mdio-bus:1f lan1: Link is Up - 1Gbps/Full - flow control rx/tx
[    6.990264] mt7530-mdio mdio-bus:1f lan1: Link is Down
[    7.000610] procd: - early -
[    7.003587] procd: - watchdog -
[    7.539327] procd: - watchdog -
[    7.542958] procd: - ubus -
[    7.697252] procd: - init -
Please press Enter to activate this console.
[    7.892268] kmodloader: loading kernel modules from /etc/modules.d/*
[    7.903197] Loading modules backported from Linux version v6.12.52-0-g2b2cbdcede38
[    7.910815] Backport generated by backports.git v6.1.110-1-35-g410656ef
[    7.972420] mt7622-wmac 18000000.wmac: registering led 'mt76-phy0'
[    7.997202] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[    8.014941] mt7915e 0000:01:00.0: assign IRQ: got 126
[    8.016739] mt7622-wmac 18000000.wmac: HW/SW Version: 0x8a108a10, Build Time: 20190801210006a
[    8.016739]
[    8.020087] mt7915e 0000:01:00.0: enabling device (0000 -> 0002)
[    8.036079] mt7915e 0000:01:00.0: enabling bus mastering
[    8.061068] mt7622-wmac 18000000.wmac: N9 Firmware Version: _reserved_, Build Time: 20220630094834
[    8.125779] urngd: v1.0.2 started.
[    8.186458] mtk-pcie 1a143000.pcie: msi#0 address_hi 0x0 address_lo 0x44e750c0
[    8.266838] mt7915e 0000:01:00.0: HW/SW Version: 0x8a108a10, Build Time: 20240429200716a
[    8.266838]
[    8.291265] mt7915e 0000:01:00.0: WM Firmware Version: ____000000, Build Time: 20240429200752
[    8.313202] mt7915e 0000:01:00.0: WA Firmware Version: DEV_000000, Build Time: 20240429200812
[    8.430345] mt7915e 0000:01:00.0: registering led 'mt76-phy1'
[    8.501936] PPP generic driver version 2.4.2
[    8.507871] NET: Registered PF_PPPOX protocol family
[    8.515987] kmodloader: done loading kernel modules from /etc/modules.d/*
[   13.633474] mtk_soc_eth 1b100000.ethernet eth0: Link is Down
[   13.648696] mtk_soc_eth 1b100000.ethernet eth0: configuring for fixed/2500base-x link mode
[   13.662030] mtk_soc_eth 1b100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[   13.665084] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
[   13.685290] br-lan: port 1(lan1) entered blocking state
[   13.690629] br-lan: port 1(lan1) entered disabled state
[   13.695903] mt7530-mdio mdio-bus:1f lan1: entered allmulticast mode
[   13.702229] mtk_soc_eth 1b100000.ethernet eth0: entered allmulticast mode
[   13.714416] mt7530-mdio mdio-bus:1f lan1: entered promiscuous mode
[   13.739816] mt7530-mdio mdio-bus:1f lan2: configuring for phy/gmii link mode
[   13.751861] br-lan: port 2(lan2) entered blocking state
[   13.757196] br-lan: port 2(lan2) entered disabled state
[   13.762463] mt7530-mdio mdio-bus:1f lan2: entered allmulticast mode
[   13.770960] mt7530-mdio mdio-bus:1f lan2: entered promiscuous mode
[   13.785687] mt7530-mdio mdio-bus:1f lan3: configuring for phy/gmii link mode
[   13.802943] br-lan: port 3(lan3) entered blocking state
[   13.808225] br-lan: port 3(lan3) entered disabled state
[   13.813488] mt7530-mdio mdio-bus:1f lan3: entered allmulticast mode
[   13.822267] mt7530-mdio mdio-bus:1f lan3: entered promiscuous mode
[   13.858933] mt7530-mdio mdio-bus:1f lan4: configuring for phy/gmii link mode
[   13.872126] br-lan: port 4(lan4) entered blocking state
[   13.877441] br-lan: port 4(lan4) entered disabled state
[   13.882712] mt7530-mdio mdio-bus:1f lan4: entered allmulticast mode
[   13.894276] mt7530-mdio mdio-bus:1f lan4: entered promiscuous mode
[   13.916168] mt7530-mdio mdio-bus:1f wan: configuring for phy/gmii link mode
[   16.324456] mt7530-mdio mdio-bus:1f lan1: Link is Up - 1Gbps/Full - flow control rx/tx
[   16.324502] br-lan: port 1(lan1) entered blocking state
[   16.337671] br-lan: port 1(lan1) entered forwarding state



BusyBox v1.36.1 (2025-10-19 16:37:45 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 24.10.4, r28959-29397011cc
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:~#

everything works well.