TP-Link AX23 recovery

maxddd · January 11, 2026, 9:43am

A year ago i somehow bricked TP-Link AX23 EUv1.20 trying to fix the version number after going back from OpenWRT to original (link) and out of frustration just left it there. Moreover, i dont have a log of what i executed, so i dont know where exactly was my error. Web recovery and flashing from OpenWRT in RAM dont help - "Parsing Partition Table ... FAILED" still there.

U-Boot 1.1.3 (Feb 16 2022 - 16:26:34)


Board: Ralink APSoC DRAM:  128 MB

relocate_code Pointer at: 87f58000


Config XHCI 40M PLL 

flash manufacture id: 20, device id 40 18

Warning: un-recognized chip ID, please update bootloader!

*** Warning - bad CRC, using default environment


============================================ 

Ralink UBoot Version: 5.0.0.0

-------------------------------------------- 

ASIC MT7621A DualCore (MAC to MT7530 Mode)

DRAM_CONF_FROM: Auto-Detection 

DRAM_TYPE: DDR3 

DRAM bus: 16 bit

Xtal Mode=3 OCP Ratio=1/3

Flash component: SPI Flash

Date:Feb 16 2022  Time:16:26:34

============================================ 

THIS IS uboot

icache: sets:256, ways:4, linesz:32 ,total:32768

dcache: sets:256, ways:4, linesz:32 ,total:32768 


 ##### The CPU freq = 880 MHZ #### 

 estimate memory size =128 Mbytes


Press '4' or 't' to break the booting process


Press 'x' to enter recovery web server

... 0 

nm_init:791

nm_initFwupPtnStruct:276

nm_lib_readPtnTable:738

[NM_Debug](nm_lib_readPtnTable) 00743: NM_PTN_TABLE_BASE = 0xfe0000

[NM_Debug](nm_lib_readPtnFromNvram) 00569: partition_used_len = -1, requried len = 8192

[NM_Debug](nm_lib_readPtnTable) 00751: Reading Partition Table from NVRAM ... OK

[NM_Error](nm_lib_parsePtnIndexFile) 00640: invalid partition-index-file para id.

[NM_Error](nm_lib_readPtnTable) 00756: Parsing Partition Table ... FAILED

[NM_Error](nm_api_checkInteger) 00316: factory boot check integer partition init fail.

#Reset_MT7530

set LAN/WAN LLLLW



 NetTxPacket = 0x87FE7A80 


 KSEG1ADDR(NetTxPacket) = 0xA7FE7A80 

Trying Eth0 (10/100-M)


 Waitting for RX_DMA_BUSY status Start... done



 ETH_STATE_ACTIVE!! 

HTTP server is starting at IP: 192.168.0.1

HTTP server is ready!

(I understand that this issue may not be entirely relevant to the forum topic, but I don`t know of a better place to ask for help yet)

frollic · January 11, 2026, 10:00am

Post the flash attempt from the initramfs?

maxddd · January 11, 2026, 10:05am


U-Boot 1.1.3 (Feb 16 2022 - 16:26:34)


Board: Ralink APSoC DRAM:  128 MB

relocate_code Pointer at: 87f58000


Config XHCI 40M PLL 

flash manufacture id: 20, device id 40 18

Warning: un-recognized chip ID, please update bootloader!

*** Warning - bad CRC, using default environment


============================================ 

Ralink UBoot Version: 5.0.0.0

-------------------------------------------- 

ASIC MT7621A DualCore (MAC to MT7530 Mode)

DRAM_CONF_FROM: Auto-Detection 

DRAM_TYPE: DDR3 

DRAM bus: 16 bit

Xtal Mode=3 OCP Ratio=1/3

Flash component: SPI Flash

Date:Feb 16 2022  Time:16:26:34

============================================ 

THIS IS uboot

icache: sets:256, ways:4, linesz:32 ,total:32768

dcache: sets:256, ways:4, linesz:32 ,total:32768 


 ##### The CPU freq = 880 MHZ #### 

 estimate memory size =128 Mbytes


Press '4' or 't' to break the booting process


Press 'x' to enter recovery web server

 0 

#Reset_MT7530

set LAN/WAN LLLLW


   

4: System Enter Boot Command Line Interface.


U-Boot 1.1.3 (Feb 16 2022 - 16:26:34)

MT7621 # tftpboot 0x81000000 test.bin


 NetLoop,call eth_halt ! 


 NetLoop,call eth_init ! 

Trying Eth0 (10/100-M)


 Waitting for RX_DMA_BUSY status Start... done



 ETH_STATE_ACTIVE!! 

TFTP from server 192.168.0.5; our IP address is 192.168.0.1

Filename 'test.bin'.


 TIMEOUT_COUNT=10,Load address: 0x81000000

Loading: *Got ARP REQUEST, return our IP

checksum bad

Got ARP REQUEST, return our IP

checksum bad

checksum bad

checksum bad

Got ARP REQUEST, return our IP

checksum bad

Got ARP REQUEST, return our IP

checksum bad

checksum bad

checksum bad

Got ARP REQUEST, return our IP

checksum bad

Got ARP REPLY, set server/gtwy eth addr (38:2c:4a:b1:55:b4)

Got it

#################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 ###########

done

Bytes transferred = 7372936 (708088 hex)

LoadAddr=81000000 NetBootFileXferSize= 00708088

MT7621 # bootm 0x81000000

## Booting image at 81000000 ...

   Image Name:   MIPS OpenWrt Linux-6.6.119

   Image Type:   MIPS Linux Kernel Image (lzma compressed)

   Data Size:    7372872 Bytes =  7 MB

   Load Address: 80001000

   Entry Point:  80001000

   Verifying Checksum ... OK

   Uncompressing Kernel Image ... OK

No initrd

nm_init:791

nm_initFwupPtnStruct:276

nm_lib_readPtnTable:738

[NM_Debug](nm_lib_readPtnTable) 00743: NM_PTN_TABLE_BASE = 0xfe0000

[NM_Debug](nm_lib_readPtnFromNvram) 00569: partition_used_len = -1, requried len = 8192

[NM_Debug](nm_lib_readPtnTable) 00751: Reading Partition Table from NVRAM ... OK



[NM_Error](nm_lib_parsePtnIndexFile) 00640: invalid partition-index-file para id.



[NM_Error](nm_lib_readPtnTable) 00756: Parsing Partition Table ... FAILED





[NM_Error](nm_api_checkTestMode) 00402: factory boot check testmode flag, init fail.



### test_mode=disable,boot_args:console=ttyS1,115200 root=/dev/mtdblock2 rootfstype=squashfs init=/etc/preinit mtdparts=raspi:256k(uboot),4096k(uImage),11968k@0x440000(rootfs),64k@0xff0000(ART) mem=128M test_mode=disable

## Transferring control to Linux (at address 80001000) ...

## Giving linux memsize in MB, 128


Starting kernel ...


[    0.000000] Linux version 6.6.119 (builder@buildhost) (mipsel-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r29087-d9c5716d1d) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Wed Dec 17 21:08:22 2025
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] printk: bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is TP-Link Archer AX23 v1
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] percpu: Embedded 12 pages/cpu s19040 r8192 d21920 u49152
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] Writing ErrCtl register=00000007
[    0.000000] Readback ErrCtl register=00000007
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32480
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 113960K/131072K available (8390K kernel code, 654K rwdata, 1020K rodata, 5284K init, 229K bss, 17112K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] 	Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 256
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000004] sched_clock: 64 bits at 880MHz, resolution 1ns, wraps every 4398046511103ns
[    0.008067] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.066230] pid_max: default: 32768 minimum: 301
[    0.079626] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.086867] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.103473] RCU Tasks Trace: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=4.
[    0.113303] rcu: Hierarchical SRCU implementation.
[    0.118006] rcu: 	Max phase no-delay instances is 1000.
[    0.124074] smp: Bringing up secondary CPUs ...
[    0.129460] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.129488] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.129503] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.129553] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.183523] Synchronize counters for CPU 1: done.
[    0.216134] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.216156] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.216168] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.216199] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.275103] Synchronize counters for CPU 2: done.
[    0.305795] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.305817] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.305829] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.305865] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.360302] Synchronize counters for CPU 3: done.
[    0.390164] smp: Brought up 1 node, 4 CPUs
[    0.401336] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.411151] futex hash table entries: 1024 (order: 3, 32768 bytes, linear)
[    0.421991] pinctrl core: initialized pinctrl subsystem
[    0.430084] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.436797] thermal_sys: Registered thermal governor 'step_wise'
[    0.438876] /pinctrl: Fixed dependency cycle(s) with /pinctrl/pinctrl0
[    0.466718] clocksource: Switched to clocksource GIC
[    0.481646] NET: Registered PF_INET protocol family
[    0.486741] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.495398] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.503759] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.511436] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.519043] TCP bind hash table entries: 1024 (order: 2, 16384 bytes, linear)
[    0.526151] TCP: Hash tables configured (established 1024 bind 1024)
[    0.533437] MPTCP token hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.540935] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.547423] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.555291] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.560958] PCI: CLS 0 bytes, default 32
[    0.569275] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[    0.577172] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.582926] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.598763] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    1.023652] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.029870] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.036016] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.042530] mt7621-pci 1e140000.pcie: host bridge /pcie@1e140000 ranges:
[    1.049254] mt7621-pci 1e140000.pcie:   No bus range found for /pcie@1e140000, using [bus 00-ff]
[    1.058044] mt7621-pci 1e140000.pcie:      MEM 0x0060000000..0x006fffffff -> 0x0060000000
[    1.066149] mt7621-pci 1e140000.pcie:       IO 0x001e160000..0x001e16ffff -> 0x0000000000
[    1.446718] mt7621-pci 1e140000.pcie: pcie2 no card, disable it (RST & CLK)
[    1.453639] mt7621-pci 1e140000.pcie: PCIE0 enabled
[    1.458489] mt7621-pci 1e140000.pcie: PCIE1 enabled
[    1.463499] PCI coherence region base: 0x60000000, mask/settings: 0xf0000002
[    1.470676] mt7621-pci 1e140000.pcie: PCI host bridge to bus 0000:00
[    1.476988] pci_bus 0000:00: root bus resource [bus 00-ff]
[    1.482406] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    1.489248] pci_bus 0000:00: root bus resource [io  0x0000-0xffff]
[    1.495504] pci 0000:00:00.0: [0e8d:0801] type 01 class 0x060400
[    1.501578] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x7fffffff]
[    1.507817] pci 0000:00:00.0: reg 0x14: [mem 0x00000000-0x0000ffff]
[    1.514082] pci 0000:00:00.0: supports D1
[    1.518049] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    1.524564] pci 0000:00:01.0: [0e8d:0801] type 01 class 0x060400
[    1.530585] pci 0000:00:01.0: reg 0x10: [mem 0x00000000-0x7fffffff]
[    1.536805] pci 0000:00:01.0: reg 0x14: [mem 0x00000000-0x0000ffff]
[    1.543084] pci 0000:00:01.0: supports D1
[    1.547032] pci 0000:00:01.0: PME# supported from D0 D1 D3hot
[    1.554786] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.562756] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.571071] pci 0000:01:00.0: [14c3:7916] type 00 class 0x000280
[    1.577082] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[    1.584236] pci 0000:01:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[    1.591438] pci 0000:01:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[    1.598727] pci 0000:01:00.0: supports D1 D2
[    1.602909] pci 0000:01:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[    1.609540] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[    1.624613] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    1.629816] pci 0000:00:00.0:   bridge window [io  0x0000-0x0fff]
[    1.635821] pci 0000:00:00.0:   bridge window [mem 0x00000000-0x000fffff]
[    1.642586] pci 0000:00:00.0:   bridge window [mem 0x00000000-0x000fffff pref]
[    1.649759] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    1.656732] pci 0000:02:00.0: [14c3:7915] type 00 class 0x000280
[    1.662704] pci 0000:02:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[    1.669879] pci 0000:02:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[    1.677053] pci 0000:02:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[    1.684317] pci 0000:02:00.0: supports D1 D2
[    1.688529] pci 0000:02:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[    1.695099] pci 0000:02:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:01.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[    1.710249] pci 0000:00:01.0: PCI bridge to [bus 02-ff]
[    1.715423] pci 0000:00:01.0:   bridge window [io  0x0000-0x0fff]
[    1.721491] pci 0000:00:01.0:   bridge window [mem 0x00000000-0x000fffff]
[    1.728220] pci 0000:00:01.0:   bridge window [mem 0x00000000-0x000fffff pref]
[    1.735372] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 02
[    1.742085] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    1.748644] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    1.755523] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000]
[    1.762161] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000]
[    1.769163] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    1.775888] pci 0000:00:00.0: BAR 9: assigned [mem 0x60100000-0x602fffff pref]
[    1.783112] pci 0000:00:01.0: BAR 8: assigned [mem 0x60300000-0x603fffff]
[    1.789854] pci 0000:00:01.0: BAR 9: assigned [mem 0x60400000-0x605fffff pref]
[    1.797034] pci 0000:00:00.0: BAR 1: assigned [mem 0x60600000-0x6060ffff]
[    1.803750] pci 0000:00:01.0: BAR 1: assigned [mem 0x60610000-0x6061ffff]
[    1.810523] pci 0000:00:00.0: BAR 7: assigned [io  0x0000-0x0fff]
[    1.816527] pci 0000:00:01.0: BAR 7: assigned [io  0x1000-0x1fff]
[    1.822632] pci 0000:01:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit pref]
[    1.830325] pci 0000:01:00.0: BAR 2: assigned [mem 0x60200000-0x60203fff 64bit pref]
[    1.838015] pci 0000:01:00.0: BAR 4: assigned [mem 0x60204000-0x60204fff 64bit pref]
[    1.845676] pci 0000:00:00.0: PCI bridge to [bus 01]
[    1.850617] pci 0000:00:00.0:   bridge window [io  0x0000-0x0fff]
[    1.856636] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    1.863385] pci 0000:00:00.0:   bridge window [mem 0x60100000-0x602fffff pref]
[    1.870602] pci 0000:02:00.0: BAR 0: assigned [mem 0x60400000-0x604fffff 64bit pref]
[    1.878283] pci 0000:02:00.0: BAR 2: assigned [mem 0x60500000-0x60503fff 64bit pref]
[    1.885943] pci 0000:02:00.0: BAR 4: assigned [mem 0x60504000-0x60504fff 64bit pref]
[    1.893662] pci 0000:00:01.0: PCI bridge to [bus 02]
[    1.898573] pci 0000:00:01.0:   bridge window [io  0x1000-0x1fff]
[    1.904596] pci 0000:00:01.0:   bridge window [mem 0x60300000-0x603fffff]
[    1.911363] pci 0000:00:01.0:   bridge window [mem 0x60400000-0x605fffff pref]
[    1.920193] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    1.935066] printk: console [ttyS0] disabled
[    1.940281] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    1.949336] printk: console [ttyS0] enabled
[    1.949336] printk: console [ttyS0] enabled
[    1.957634] printk: bootconsole [early0] disabled
[    1.957634] printk: bootconsole [early0] disabled
[    2.039059] spi-mt7621 1e000b00.spi: sys_freq: 220000000
[    2.047093] spi-nor spi0.0: XM25QH128C (16384 Kbytes)
[    2.052321] 5 fixed-partitions partitions found on MTD device spi0.0
[    2.058746] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions
[    2.066077] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions
[    2.073751] Creating 5 MTD partitions on "spi0.0":
[    2.078588] 0x000000000000-0x000000040000 : "u-boot"
[    2.085322] 0x000000040000-0x000000fa0000 : "firmware"
[    2.091753] 2 uimage-fw partitions found on MTD device firmware
[    2.097708] Creating 2 MTD partitions on "firmware":
[    2.102659] 0x000000000000-0x0000003092f7 : "kernel"
[    2.107627] mtd: partition "kernel" doesn't end on an erase/write block -- force read-only
[    2.117117] 0x0000003092f7-0x000000f60000 : "rootfs"
[    2.122100] mtd: partition "rootfs" doesn't start on an erase/write block boundary -- force read-only
[    2.132411] mtd: setting mtd3 (rootfs) as root device
[    2.137577] 1 squashfs-split partitions found on MTD device rootfs
[    2.143744] 0x000000740000-0x000000f60000 : "rootfs_data"
[    2.150584] 0x000000fa0000-0x000000fb0000 : "config"
[    2.156886] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions
[    2.164563] 0x000000fb0000-0x000000ff0000 : "tplink"
[    2.170736] 0x000000ff0000-0x000001000000 : "radio"
[    2.176853] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions
[    2.330104] mt7530-mdio mdio-bus:1f: MT7530 adapts as multi-chip module
[    2.347675] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19
[    2.359016] mtk_soc_eth 1e100000.ethernet eth1: mediatek frame engine at 0xbe100000, irq 19
[    2.369220] i2c_dev: i2c /dev entries driver
[    2.377378] NET: Registered PF_INET6 protocol family
[    2.385665] Segment Routing with IPv6
[    2.389479] In-situ OAM (IOAM) with IPv6
[    2.393533] NET: Registered PF_PACKET protocol family
[    2.398685] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    2.412306] 8021q: 802.1Q VLAN Support v1.8
[    2.444985] mt7530-mdio mdio-bus:1f: MT7530 adapts as multi-chip module
[    6.029254] mt7530-mdio mdio-bus:1f: configuring for fixed/rgmii link mode
[    6.036954] mt7530-mdio mdio-bus:1f: Link is Up - 1Gbps/Full - flow control rx/tx
[    6.045197] mt7530-mdio mdio-bus:1f lan1 (uninitialized): PHY [mt7530-0:00] driver [MediaTek MT7530 PHY] (irq=21)
[    6.059186] mt7530-mdio mdio-bus:1f lan2 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7530 PHY] (irq=22)
[    6.072260] mt7530-mdio mdio-bus:1f lan3 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7530 PHY] (irq=23)
[    6.085612] mt7530-mdio mdio-bus:1f lan4 (uninitialized): PHY [mt7530-0:03] driver [MediaTek MT7530 PHY] (irq=24)
[    6.098839] mtk_soc_eth 1e100000.ethernet eth0: entered promiscuous mode
[    6.105691] DSA: tree 0 setup
[    6.109681] clk: Disabling unused clocks
[    6.132193] Freeing unused kernel image (initmem) memory: 5284K
[    6.138264] This architecture does not have kernel memory protection.
[    6.144699] Run /init as init process
[    6.796179] init: Console is alive
[    6.800056] init: - watchdog -
[    6.817799] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.827275] gpio_button_hotplug: loading out-of-tree module taints kernel.
[    6.841293] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.859377] init: - preinit -
[    7.081939] mtk_soc_eth 1e100000.ethernet wan: renamed from eth1
[    8.506734] random: crng init done
[    8.952374] mtk_soc_eth 1e100000.ethernet eth0: configuring for fixed/rgmii link mode
[    8.965014] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
[    8.972208] mtk_soc_eth 1e100000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[   13.334268] procd: - early -
[   13.337484] procd: - watchdog -
[   13.912052] procd: - watchdog -
[   13.915623] procd: - ubus -
[   14.075115] procd: - init -
Please press Enter to activate this console.
[   14.482647] kmodloader: loading kernel modules from /etc/modules.d/*
[   14.503292] mtk-eip93 1e004000.crypto: EIP93 Crypto Engine Initialized.
[   15.072624] Loading modules backported from Linux version v6.12.61-0-gdcbeffaf66d0
[   15.080314] Backport generated by backports.git v6.1.110-1-35-g410656ef
[   15.157988] pci 0000:00:00.0: enabling device (0000 -> 0003)
[   15.163682] mt7915e_hif 0000:01:00.0: enabling device (0000 -> 0002)
[   15.170616] pci 0000:00:01.0: enabling device (0000 -> 0003)
[   15.176330] mt7915e 0000:02:00.0: enabling device (0000 -> 0002)
[   15.338379] mt7915e 0000:02:00.0: HW/SW Version: 0x8a108a10, Build Time: 20240429200716a
[   15.338379] 
[   15.364136] mt7915e 0000:02:00.0: WM Firmware Version: ____000000, Build Time: 20240429200752
[   15.397431] mt7915e 0000:02:00.0: WA Firmware Version: DEV_000000, Build Time: 20240429200812
[   15.515952] mt7915e 0000:02:00.0: registering led 'mt76-phy0'
[   15.650747] urngd: v1.0.2 started.
[   15.661156] mt7915e 0000:02:00.0: registering led 'mt76-phy1'
[   15.880893] PPP generic driver version 2.4.2
[   15.888759] NET: Registered PF_PPPOX protocol family
[   15.902013] kmodloader: done loading kernel modules from /etc/modules.d/*
[   30.230078] mtk_soc_eth 1e100000.ethernet eth0: Link is Down
[   30.261889] mtk_soc_eth 1e100000.ethernet eth0: configuring for fixed/rgmii link mode
[   30.270821] mtk_soc_eth 1e100000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[   30.287975] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
[   30.297050] br-lan: port 1(lan1) entered blocking state
[   30.302357] br-lan: port 1(lan1) entered disabled state
[   30.307985] mt7530-mdio mdio-bus:1f lan1: entered allmulticast mode
[   30.314302] mtk_soc_eth 1e100000.ethernet eth0: entered allmulticast mode
[   30.324683] mt7530-mdio mdio-bus:1f lan1: entered promiscuous mode
[   30.364490] mt7530-mdio mdio-bus:1f lan2: configuring for phy/gmii link mode
[   30.372808] br-lan: port 2(lan2) entered blocking state
[   30.378226] br-lan: port 2(lan2) entered disabled state
[   30.383618] mt7530-mdio mdio-bus:1f lan2: entered allmulticast mode
[   30.392822] mt7530-mdio mdio-bus:1f lan2: entered promiscuous mode
[   30.413503] mt7530-mdio mdio-bus:1f lan3: configuring for phy/gmii link mode
[   30.423026] br-lan: port 3(lan3) entered blocking state
[   30.428551] br-lan: port 3(lan3) entered disabled state
[   30.433930] mt7530-mdio mdio-bus:1f lan3: entered allmulticast mode
[   30.442812] mt7530-mdio mdio-bus:1f lan3: entered promiscuous mode
[   30.461782] mt7530-mdio mdio-bus:1f lan4: configuring for phy/gmii link mode
[   30.470805] br-lan: port 4(lan4) entered blocking state
[   30.476098] br-lan: port 4(lan4) entered disabled state
[   30.481619] mt7530-mdio mdio-bus:1f lan4: entered allmulticast mode
[   30.490783] mt7530-mdio mdio-bus:1f lan4: entered promiscuous mode
[   30.514629] mtk_soc_eth 1e100000.ethernet wan: PHY [mt7530-0:04] driver [MediaTek MT7530 PHY] (irq=POLL)
[   30.524349] mtk_soc_eth 1e100000.ethernet wan: configuring for phy/rgmii link mode
[   33.610857] mt7530-mdio mdio-bus:1f lan3: Link is Up - 1Gbps/Full - flow control rx/tx
[   33.610958] br-lan: port 3(lan3) entered blocking state
[   33.624045] br-lan: port 3(lan3) entered forwarding state
Watchdog handover: fd=3
- watchdog -
Watchdog does not have CARDRESET support
Thu Jan  1 00:02:54 UTC 1970 upgrade: Sending TERM to remaining processes ...
Thu Jan  1 00:02:58 UTC 1970 upgrade: Sending KILL to remaining processes ...
[  184.854328] stage2 (3260): drop_caches: 3
Thu Jan  1 00:03:04 UTC 1970 upgrade: Switching to ramdisk...
Thu Jan  1 00:03:07 UTC 1970 upgrade: Performing system upgrade...
[  187.406951] do_stage2 (3260): drop_caches: 3
Unlocking firmware ...

Writing from <stdin> to firmware ...  [ ][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w]    
Thu Jan  1 00:04:47 UTC 1970 upgrade: Upgrade completed
Thu Jan  1 00:04:48 UTC 1970 upgrade: Rebooting system...
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
[  288.341624] mt7530-mdio mdio-bus:1f lan3: Link is Down
[  288.348591] br-lan: port 4(lan4) entered disabled state
[  288.354033] br-lan: port 3(lan3) entered disabled state
[  288.359617] br-lan: port 2(lan2) entered disabled state
[  288.365020] br-lan: port 1(lan1) entered disabled state
[  288.376867] mtk_soc_eth 1e100000.ethernet eth0: Link is Down
[  288.385953] reboot: Restarting system



U-Boot 1.1.3 (Feb 16 2022 - 16:26:34)


Board: Ralink APSoC DRAM:  128 MB

relocate_code Pointer at: 87f58000


Config XHCI 40M PLL 

******************************

Software System Reset Occurred

******************************

flash manufacture id: 20, device id 40 18

Warning: un-recognized chip ID, please update bootloader!

*** Warning - bad CRC, using default environment


============================================ 

Ralink UBoot Version: 5.0.0.0

-------------------------------------------- 

ASIC MT7621A DualCore (MAC to MT7530 Mode)

DRAM_CONF_FROM: Auto-Detection 

DRAM_TYPE: DDR3 

DRAM bus: 16 bit

Xtal Mode=3 OCP Ratio=1/3

Flash component: SPI Flash

Date:Feb 16 2022  Time:16:26:34

============================================ 

THIS IS uboot

icache: sets:256, ways:4, linesz:32 ,total:32768

dcache: sets:256, ways:4, linesz:32 ,total:32768 


 ##### The CPU freq = 880 MHZ #### 

 estimate memory size =128 Mbytes


Press '4' or 't' to break the booting process


Press 'x' to enter recovery web server

 0 

nm_init:791

nm_initFwupPtnStruct:276

nm_lib_readPtnTable:738

[NM_Debug](nm_lib_readPtnTable) 00743: NM_PTN_TABLE_BASE = 0xfe0000

[NM_Debug](nm_lib_readPtnFromNvram) 00569: partition_used_len = -1, requried len = 8192

[NM_Debug](nm_lib_readPtnTable) 00751: Reading Partition Table from NVRAM ... OK



[NM_Error](nm_lib_parsePtnIndexFile) 00640: invalid partition-index-file para id.



[NM_Error](nm_lib_readPtnTable) 00756: Parsing Partition Table ... FAILED





[NM_Error](nm_api_checkInteger) 00316: factory boot check integer partition init fail.



#Reset_MT7530

set LAN/WAN LLLLW



 NetTxPacket = 0x87FE7A80 


 KSEG1ADDR(NetTxPacket) = 0xA7FE7A80 

Trying Eth0 (10/100-M)


 Waitting for RX_DMA_BUSY status Start... done



 ETH_STATE_ACTIVE!! 

HTTP server is starting at IP: 192.168.0.1

HTTP server is ready!

frollic · January 11, 2026, 10:07am

What's test.bin ?

maxddd · January 11, 2026, 10:14am

Thats a renamed openwrt-24.10.5-ramips-mt7621-tplink_archer-ax23-v1-initramfs-kernel.bin

Tried to flash both OpenWRT sysupgrade and converted tplink images, same result.

frollic · January 11, 2026, 10:47am

Try something older than 24.10.5, like 23.05.

hecatae · January 11, 2026, 12:00pm

23.05.6?

Weird how that's missing on downloads.openwrt.org main page

maxddd · January 11, 2026, 12:02pm

I dont see 23.10 in the list, but i`ve tried 23.05.5:




U-Boot 1.1.3 (Feb 16 2022 - 16:26:34)


Board: Ralink APSoC DRAM:  128 MB

relocate_code Pointer at: 87f58000


Config XHCI 40M PLL 

flash manufacture id: 20, device id 40 18

Warning: un-recognized chip ID, please update bootloader!

*** Warning - bad CRC, using default environment


============================================ 

Ralink UBoot Version: 5.0.0.0

-------------------------------------------- 

ASIC MT7621A DualCore (MAC to MT7530 Mode)

DRAM_CONF_FROM: Auto-Detection 

DRAM_TYPE: DDR3 

DRAM bus: 16 bit

Xtal Mode=3 OCP Ratio=1/3

Flash component: SPI Flash

Date:Feb 16 2022  Time:16:26:34

============================================ 

THIS IS uboot

icache: sets:256, ways:4, linesz:32 ,total:32768

dcache: sets:256, ways:4, linesz:32 ,total:32768 


 ##### The CPU freq = 880 MHZ #### 

 estimate memory size =128 Mbytes


Press '4' or 't' to break the booting process


Press 'x' to enter recovery web server

 0 

#Reset_MT7530

set LAN/WAN LLLLW


   

4: System Enter Boot Command Line Interface.


U-Boot 1.1.3 (Feb 16 2022 - 16:26:34)

MT7621 # tftpboot 0x81000000 openwrt-23.05.5-ramips-mt7621-tplink_archer-ax23-v1-initramfs-kernel.bin


 NetLoop,call eth_halt ! 


 NetLoop,call eth_init ! 

Trying Eth0 (10/100-M)


 Waitting for RX_DMA_BUSY status Start... done



 ETH_STATE_ACTIVE!! 

TFTP from server 192.168.0.5; our IP address is 192.168.0.1

Filename 'openwrt-23.05.5-ramips-mt7621-tplink_archer-ax23-v1-initramfs-kernel.bin'.


 TIMEOUT_COUNT=10,Load address: 0x81000000

Loading: *Got ARP REQUEST, return our IP

checksum bad

Got ARP REQUEST, return our IP

Got ARP REQUEST, return our IP

checksum bad

checksum bad

checksum bad

Got ARP REQUEST, return our IP

checksum bad

Got ARP REQUEST, return our IP

checksum bad

checksum bad

checksum bad

checksum bad

Got ARP REQUEST, return our IP

Got ARP REQUEST, return our IP

checksum bad

Got ARP REPLY, set server/gtwy eth addr (38:2c:4a:b1:55:b4)

Got it

#################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 ####################

done

Bytes transferred = 5755131 (57d0fb hex)

LoadAddr=81000000 NetBootFileXferSize= 0057d0fb

MT7621 # bootm 0x81000000

## Booting image at 81000000 ...

   Image Name:   MIPS OpenWrt Linux-5.15.167

   Image Type:   MIPS Linux Kernel Image (lzma compressed)

   Data Size:    5755067 Bytes =  5.5 MB

   Load Address: 80001000

   Entry Point:  80001000

   Verifying Checksum ... OK

   Uncompressing Kernel Image ... OK

No initrd

nm_init:791

nm_initFwupPtnStruct:276

nm_lib_readPtnTable:738

[NM_Debug](nm_lib_readPtnTable) 00743: NM_PTN_TABLE_BASE = 0xfe0000

[NM_Debug](nm_lib_readPtnFromNvram) 00569: partition_used_len = -1, requried len = 8192

[NM_Debug](nm_lib_readPtnTable) 00751: Reading Partition Table from NVRAM ... OK



[NM_Error](nm_lib_parsePtnIndexFile) 00640: invalid partition-index-file para id.



[NM_Error](nm_lib_readPtnTable) 00756: Parsing Partition Table ... FAILED





[NM_Error](nm_api_checkTestMode) 00402: factory boot check testmode flag, init fail.



### test_mode=disable,boot_args:console=ttyS1,115200 root=/dev/mtdblock2 rootfstype=squashfs init=/etc/preinit mtdparts=raspi:256k(uboot),4096k(uImage),11968k@0x440000(rootfs),64k@0xff0000(ART) mem=128M test_mode=disable

## Transferring control to Linux (at address 80001000) ...

## Giving linux memsize in MB, 128


Starting kernel ...


[    0.000000] Linux version 5.15.167 (builder@buildhost) (mipsel-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r24106-10cc5fcd00) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Mon Sep 23 12:34:46 2024
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] printk: bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is TP-Link Archer AX23 v1
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] percpu: Embedded 12 pages/cpu s17808 r8192 d23152 u49152
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32480
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] Writing ErrCtl register=00004000
[    0.000000] Readback ErrCtl register=00004000
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 116400K/131072K available (7323K kernel code, 629K rwdata, 884K rodata, 4080K init, 225K bss, 14672K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] 	Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 256
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000004] sched_clock: 64 bits at 880MHz, resolution 1ns, wraps every 4398046511103ns
[    0.008047] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.066215] pid_max: default: 32768 minimum: 301
[    0.071621] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.078833] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.090358] rcu: Hierarchical SRCU implementation.
[    0.095824] smp: Bringing up secondary CPUs ...
[    0.101208] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.101234] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.101248] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.101292] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.160590] Synchronize counters for CPU 1: done.
[    0.193071] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.193090] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.193101] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.193127] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.252047] Synchronize counters for CPU 2: done.
[    0.282671] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.282691] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.282702] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.282735] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.337233] Synchronize counters for CPU 3: done.
[    0.367089] smp: Brought up 1 node, 4 CPUs
[    0.376286] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.386085] futex hash table entries: 1024 (order: 3, 32768 bytes, linear)
[    0.393182] pinctrl core: initialized pinctrl subsystem
[    0.399929] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.406543] thermal_sys: Registered thermal governor 'step_wise'
[    0.431394] clocksource: Switched to clocksource GIC
[    0.437628] NET: Registered PF_INET protocol family
[    0.442709] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.450721] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.459031] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.466696] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.474331] TCP bind hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.481299] TCP: Hash tables configured (established 1024 bind 1024)
[    0.487810] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.494340] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.501658] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.507265] PCI: CLS 0 bytes, default 32
[    0.523147] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[    0.537811] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.543725] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.555328] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    1.017244] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.023446] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.029488] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.035674] mt7621-pci 1e140000.pcie: host bridge /pcie@1e140000 ranges:
[    1.042489] mt7621-pci 1e140000.pcie:   No bus range found for /pcie@1e140000, using [bus 00-ff]
[    1.051251] mt7621-pci 1e140000.pcie:      MEM 0x0060000000..0x006fffffff -> 0x0060000000
[    1.059483] mt7621-pci 1e140000.pcie:       IO 0x001e160000..0x001e16ffff -> 0x0000000000
[    1.421553] mt7621-pci 1e140000.pcie: pcie2 no card, disable it (RST & CLK)
[    1.428465] mt7621-pci 1e140000.pcie: PCIE0 enabled
[    1.433333] mt7621-pci 1e140000.pcie: PCIE1 enabled
[    1.438163] PCI coherence region base: 0x60000000, mask/settings: 0xf0000002
[    1.445455] mt7621-pci 1e140000.pcie: PCI host bridge to bus 0000:00
[    1.451746] pci_bus 0000:00: root bus resource [bus 00-ff]
[    1.457164] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    1.464007] pci_bus 0000:00: root bus resource [io  0x0000-0xffff]
[    1.470182] pci 0000:00:00.0: [0e8d:0801] type 01 class 0x060400
[    1.476139] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x7fffffff]
[    1.482355] pci 0000:00:00.0: reg 0x14: [mem 0x00000000-0x0000ffff]
[    1.488622] pci 0000:00:00.0: supports D1
[    1.492560] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    1.499058] pci 0000:00:01.0: [0e8d:0801] type 01 class 0x060400
[    1.505036] pci 0000:00:01.0: reg 0x10: [mem 0x00000000-0x7fffffff]
[    1.511220] pci 0000:00:01.0: reg 0x14: [mem 0x00000000-0x0000ffff]
[    1.517530] pci 0000:00:01.0: supports D1
[    1.521477] pci 0000:00:01.0: PME# supported from D0 D1 D3hot
[    1.529656] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.537611] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.545892] pci 0000:01:00.0: [14c3:7916] type 00 class 0x000280
[    1.551870] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[    1.559018] pci 0000:01:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[    1.566207] pci 0000:01:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[    1.573494] pci 0000:01:00.0: supports D1 D2
[    1.577677] pci 0000:01:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[    1.584302] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[    1.601197] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    1.606400] pci 0000:00:00.0:   bridge window [io  0x0000-0x0fff]
[    1.612424] pci 0000:00:00.0:   bridge window [mem 0x00000000-0x000fffff]
[    1.619146] pci 0000:00:00.0:   bridge window [mem 0x00000000-0x000fffff pref]
[    1.626337] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    1.633250] pci 0000:02:00.0: [14c3:7915] type 00 class 0x000280
[    1.639206] pci 0000:02:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[    1.646383] pci 0000:02:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[    1.653555] pci 0000:02:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[    1.660823] pci 0000:02:00.0: supports D1 D2
[    1.665036] pci 0000:02:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[    1.671627] pci 0000:02:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:01.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[    1.688494] pci 0000:00:01.0: PCI bridge to [bus 02-ff]
[    1.693677] pci 0000:00:01.0:   bridge window [io  0x0000-0x0fff]
[    1.699699] pci 0000:00:01.0:   bridge window [mem 0x00000000-0x000fffff]
[    1.706455] pci 0000:00:01.0:   bridge window [mem 0x00000000-0x000fffff pref]
[    1.713633] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 02
[    1.720230] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    1.726782] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    1.733681] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000]
[    1.740227] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000]
[    1.747160] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    1.753900] pci 0000:00:00.0: BAR 9: assigned [mem 0x60100000-0x602fffff pref]
[    1.761052] pci 0000:00:01.0: BAR 8: assigned [mem 0x60300000-0x603fffff]
[    1.767810] pci 0000:00:01.0: BAR 9: assigned [mem 0x60400000-0x605fffff pref]
[    1.774986] pci 0000:00:00.0: BAR 1: assigned [mem 0x60600000-0x6060ffff]
[    1.781738] pci 0000:00:01.0: BAR 1: assigned [mem 0x60610000-0x6061ffff]
[    1.788443] pci 0000:00:00.0: BAR 7: assigned [io  0x0000-0x0fff]
[    1.794507] pci 0000:00:01.0: BAR 7: assigned [io  0x1000-0x1fff]
[    1.800550] pci 0000:01:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit pref]
[    1.808258] pci 0000:01:00.0: BAR 2: assigned [mem 0x60200000-0x60203fff 64bit pref]
[    1.815946] pci 0000:01:00.0: BAR 4: assigned [mem 0x60204000-0x60204fff 64bit pref]
[    1.823635] pci 0000:00:00.0: PCI bridge to [bus 01]
[    1.828530] pci 0000:00:00.0:   bridge window [io  0x0000-0x0fff]
[    1.834600] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    1.841317] pci 0000:00:00.0:   bridge window [mem 0x60100000-0x602fffff pref]
[    1.848529] pci 0000:02:00.0: BAR 0: assigned [mem 0x60400000-0x604fffff 64bit pref]
[    1.856213] pci 0000:02:00.0: BAR 2: assigned [mem 0x60500000-0x60503fff 64bit pref]
[    1.863902] pci 0000:02:00.0: BAR 4: assigned [mem 0x60504000-0x60504fff 64bit pref]
[    1.871590] pci 0000:00:01.0: PCI bridge to [bus 02]
[    1.876485] pci 0000:00:01.0:   bridge window [io  0x1000-0x1fff]
[    1.882553] pci 0000:00:01.0:   bridge window [mem 0x60300000-0x603fffff]
[    1.889272] pci 0000:00:01.0:   bridge window [mem 0x60400000-0x605fffff pref]
[    1.898816] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    1.909131] printk: console [ttyS0] disabled
[    1.913486] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 19, base_baud = 3125000) is a 16550A
[    1.922503] printk: console [ttyS0] enabled
[    1.922503] printk: console [ttyS0] enabled
[    1.930751] printk: bootconsole [early0] disabled
[    1.930751] printk: bootconsole [early0] disabled
[    2.186184] spi-mt7621 1e000b00.spi: sys_freq: 220000000
[    2.193378] spi-nor spi0.0: XM25QH128C (16384 Kbytes)
[    2.198599] 5 fixed-partitions partitions found on MTD device spi0.0
[    2.205035] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions
[    2.212411] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions
[    2.220036] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions
[    2.227392] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions
[    2.235448] Creating 5 MTD partitions on "spi0.0":
[    2.240257] 0x000000000000-0x000000040000 : "u-boot"
[    2.246377] 0x000000040000-0x000000fa0000 : "firmware"
[    2.252665] 2 uimage-fw partitions found on MTD device firmware
[    2.258602] Creating 2 MTD partitions on "firmware":
[    2.263574] 0x000000000000-0x0000002ad2d5 : "kernel"
[    2.268524] mtd: partition "kernel" doesn't end on an erase/write block -- force read-only
[    2.277814] 0x0000002ad2d5-0x000000f60000 : "rootfs"
[    2.282815] mtd: partition "rootfs" doesn't start on an erase/write block boundary -- force read-only
[    2.292969] mtd: setting mtd3 (rootfs) as root device
[    2.298127] 1 squashfs-split partitions found on MTD device rootfs
[    2.304324] 0x000000690000-0x000000f60000 : "rootfs_data"
[    2.310862] 0x000000fa0000-0x000000fb0000 : "config"
[    2.317006] 0x000000fb0000-0x000000ff0000 : "tplink"
[    2.322989] 0x000000ff0000-0x000001000000 : "radio"
[    2.474664] mt7530-mdio mdio-bus:1f: MT7530 adapts as multi-chip module
[    4.993409] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 21
[    5.005475] mtk_soc_eth 1e100000.ethernet wan: mediatek frame engine at 0xbe100000, irq 21
[    5.016055] i2c_dev: i2c /dev entries driver
[    5.023222] NET: Registered PF_INET6 protocol family
[    5.030596] Segment Routing with IPv6
[    5.034484] In-situ OAM (IOAM) with IPv6
[    5.038521] NET: Registered PF_PACKET protocol family
[    5.043741] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    5.057349] 8021q: 802.1Q VLAN Support v1.8
[    5.067591] mt7530-mdio mdio-bus:1f: MT7530 adapts as multi-chip module
[    5.147585] mt7530-mdio mdio-bus:1f: configuring for fixed/rgmii link mode
[    5.155291] mt7530-mdio mdio-bus:1f: Link is Up - 1Gbps/Full - flow control rx/tx
[    5.162294] mt7530-mdio mdio-bus:1f lan1 (uninitialized): PHY [mt7530-0:00] driver [MediaTek MT7530 PHY] (irq=23)
[    5.176029] mt7530-mdio mdio-bus:1f lan2 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7530 PHY] (irq=24)
[    5.188862] mt7530-mdio mdio-bus:1f lan3 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7530 PHY] (irq=25)
[    5.201720] mt7530-mdio mdio-bus:1f lan4 (uninitialized): PHY [mt7530-0:03] driver [MediaTek MT7530 PHY] (irq=26)
[    5.214373] DSA: tree 0 setup
[    5.218756] clk: Disabling unused clocks
[    5.237359] Freeing unused kernel image (initmem) memory: 4080K
[    5.243333] This architecture does not have kernel memory protection.
[    5.249765] Run /init as init process
[    5.753383] init: Console is alive
[    5.757185] init: - watchdog -
[    5.770872] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    5.786640] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    5.801906] init: - preinit -
[    6.022635] random: jshn: uninitialized urandom read (4 bytes read)
[    6.104348] random: jshn: uninitialized urandom read (4 bytes read)
[    6.152413] random: jshn: uninitialized urandom read (4 bytes read)
[    6.480786] mtk_soc_eth 1e100000.ethernet eth0: configuring for fixed/rgmii link mode
[    6.493566] mtk_soc_eth 1e100000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[    6.494042] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
[    6.509605] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    8.837087] procd: - early -
[    8.840204] procd: - watchdog -
[    9.409832] procd: - watchdog -
[    9.413466] procd: - ubus -
[    9.423914] random: ubusd: uninitialized urandom read (4 bytes read)
[    9.466238] random: ubusd: uninitialized urandom read (4 bytes read)
[    9.473180] random: ubusd: uninitialized urandom read (4 bytes read)
[    9.483204] procd: - init -
Please press Enter to activate this console.
[    9.838183] kmodloader: loading kernel modules from /etc/modules.d/*
[    9.897872] PPP generic driver version 2.4.2
[    9.904056] NET: Registered PF_PPPOX protocol family
[    9.916389] kmodloader: done loading kernel modules from /etc/modules.d/*
[   10.989968] urngd: v1.0.2 started.
[   11.063001] random: jshn: uninitialized urandom read (4 bytes read)
[   11.172920] random: jshn: uninitialized urandom read (4 bytes read)
[   11.238496] random: jshn: uninitialized urandom read (4 bytes read)
[   11.869159] random: crng init done
[   11.872690] random: 37 urandom warning(s) missed due to ratelimiting
[   22.496645] mtk_soc_eth 1e100000.ethernet eth0: Link is Down
[   22.534006] mtk_soc_eth 1e100000.ethernet eth0: configuring for fixed/rgmii link mode
[   22.542317] mtk_soc_eth 1e100000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[   22.550992] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   22.563167] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
[   22.572708] br-lan: port 1(lan1) entered blocking state
[   22.577992] br-lan: port 1(lan1) entered disabled state
[   22.585274] device lan1 entered promiscuous mode
[   22.589949] device eth0 entered promiscuous mode
[   22.619881] mt7530-mdio mdio-bus:1f lan2: configuring for phy/gmii link mode
[   22.628526] br-lan: port 2(lan2) entered blocking state
[   22.633941] br-lan: port 2(lan2) entered disabled state
[   22.641294] device lan2 entered promiscuous mode
[   22.656446] mt7530-mdio mdio-bus:1f lan3: configuring for phy/gmii link mode
[   22.665076] br-lan: port 3(lan3) entered blocking state
[   22.670357] br-lan: port 3(lan3) entered disabled state
[   22.678009] device lan3 entered promiscuous mode
[   22.693763] mt7530-mdio mdio-bus:1f lan4: configuring for phy/gmii link mode
[   22.702583] br-lan: port 4(lan4) entered blocking state
[   22.707878] br-lan: port 4(lan4) entered disabled state
[   22.733227] device lan4 entered promiscuous mode
[   22.758600] mtk_soc_eth 1e100000.ethernet wan: PHY [mdio-bus:04] driver [MediaTek MT7530 PHY] (irq=POLL)
[   22.768181] mtk_soc_eth 1e100000.ethernet wan: configuring for phy/rgmii link mode
[   25.856040] mt7530-mdio mdio-bus:1f lan4: Link is Up - 1Gbps/Full - flow control rx/tx
[   25.856125] br-lan: port 4(lan4) entered blocking state
[   25.869258] br-lan: port 4(lan4) entered forwarding state
[   25.875612] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
Watchdog handover: fd=3
- watchdog -
Watchdog does not have CARDRESET support
Mon Sep 23 12:36:48 UTC 2024 upgrade: Sending TERM to remaining processes ...
Mon Sep 23 12:36:48 UTC 2024 upgrade: Sending signal TERM to ntpd (2240)
Mon Sep 23 12:36:48 UTC 2024 upgrade: Sending signal TERM to ntpd (2243)
Mon Sep 23 12:36:52 UTC 2024 upgrade: Sending KILL to remaining processes ...
Mon Sep 23 12:36:52 UTC 2024 upgrade: Sending signal KILL to ntpd (2240)
Mon Sep 23 12:36:54 UTC 2024 upgrade: Sending signal KILL to ntpd (2243)
[  146.042832] stage2 (2966): drop_caches: 3
Mon Sep 23 12:37:02 UTC 2024 upgrade: Switching to ramdisk...
Mon Sep 23 12:37:04 UTC 2024 upgrade: Performing system upgrade...
[  148.384962] do_stage2 (2966): drop_caches: 3
Unlocking firmware ...

Writing from <stdin> to firmware ...  [ ][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w][e][w]    
Mon Sep 23 12:37:47 UTC 2024 upgrade: Upgrade completed
Mon Sep 23 12:37:48 UTC 2024 upgrade: Rebooting system...
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource [  192.322844] reboot: Restarting system
busy



U-Boot 1.1.3 (Feb 16 2022 - 16:26:34)


Board: Ralink APSoC DRAM:  128 MB

relocate_code Pointer at: 87f58000


Config XHCI 40M PLL 

******************************

Software System Reset Occurred

******************************

flash manufacture id: 20, device id 40 18

Warning: un-recognized chip ID, please update bootloader!

*** Warning - bad CRC, using default environment


============================================ 

Ralink UBoot Version: 5.0.0.0

-------------------------------------------- 

ASIC MT7621A DualCore (MAC to MT7530 Mode)

DRAM_CONF_FROM: Auto-Detection 

DRAM_TYPE: DDR3 

DRAM bus: 16 bit

Xtal Mode=3 OCP Ratio=1/3

Flash component: SPI Flash

Date:Feb 16 2022  Time:16:26:34

============================================ 

THIS IS uboot

icache: sets:256, ways:4, linesz:32 ,total:32768

dcache: sets:256, ways:4, linesz:32 ,total:32768 


 ##### The CPU freq = 880 MHZ #### 

 estimate memory size =128 Mbytes


Press '4' or 't' to break the booting process


Press 'x' to enter recovery web server

 0 

nm_init:791

nm_initFwupPtnStruct:276

nm_lib_readPtnTable:738

[NM_Debug](nm_lib_readPtnTable) 00743: NM_PTN_TABLE_BASE = 0xfe0000

[NM_Debug](nm_lib_readPtnFromNvram) 00569: partition_used_len = -1, requried len = 8192

[NM_Debug](nm_lib_readPtnTable) 00751: Reading Partition Table from NVRAM ... OK



[NM_Error](nm_lib_parsePtnIndexFile) 00640: invalid partition-index-file para id.



[NM_Error](nm_lib_readPtnTable) 00756: Parsing Partition Table ... FAILED





[NM_Error](nm_api_checkInteger) 00316: factory boot check integer partition init fail.



#Reset_MT7530

set LAN/WAN LLLLW



 NetTxPacket = 0x87FE7A80 


 KSEG1ADDR(NetTxPacket) = 0xA7FE7A80 

Trying Eth0 (10/100-M)


 Waitting for RX_DMA_BUSY status Start... done



 ETH_STATE_ACTIVE!! 

HTTP server is starting at IP: 192.168.0.1

HTTP server is ready!

hecatae · January 11, 2026, 12:14pm

It's trying to upgrade itself using the initramfs and reboots believing it's written it to the flash.
What happens if you tftpboot the sysyupgrade?

maxddd · January 11, 2026, 12:32pm




U-Boot 1.1.3 (Feb 16 2022 - 16:26:34)


Board: Ralink APSoC DRAM:  128 MB

relocate_code Pointer at: 87f58000


Config XHCI 40M PLL 

flash manufacture id: 20, device id 40 18

Warning: un-recognized chip ID, please update bootloader!

*** Warning - bad CRC, using default environment


============================================ 

Ralink UBoot Version: 5.0.0.0

-------------------------------------------- 

ASIC MT7621A DualCore (MAC to MT7530 Mode)

DRAM_CONF_FROM: Auto-Detection 

DRAM_TYPE: DDR3 

DRAM bus: 16 bit

Xtal Mode=3 OCP Ratio=1/3

Flash component: SPI Flash

Date:Feb 16 2022  Time:16:26:34

============================================ 

THIS IS uboot

icache: sets:256, ways:4, linesz:32 ,total:32768

dcache: sets:256, ways:4, linesz:32 ,total:32768 


 ##### The CPU freq = 880 MHZ #### 

 estimate memory size =128 Mbytes


Press '4' or 't' to break the booting process


Press 'x' to enter recovery web server

 0 

#Reset_MT7530

set LAN/WAN LLLLW


   

4: System Enter Boot Command Line Interface.


U-Boot 1.1.3 (Feb 16 2022 - 16:26:34)

MT7621 # tftpboot 0x81000000 openwrt-23.05.5-ramips-mt7621-tplink_archer-ax23-v1-squashfs-sysupgrade.bin


 NetLoop,call eth_halt ! 


 NetLoop,call eth_init ! 

Trying Eth0 (10/100-M)


 Waitting for RX_DMA_BUSY status Start... done



 ETH_STATE_ACTIVE!! 

TFTP from server 192.168.0.5; our IP address is 192.168.0.1

Filename 'openwrt-23.05.5-ramips-mt7621-tplink_archer-ax23-v1-squashfs-sysupgrade.bin'.


 TIMEOUT_COUNT=10,Load address: 0x81000000

Loading: *Got ARP REQUEST, return our IP

checksum bad

checksum bad

checksum bad

checksum bad

Got ARP REQUEST, return our IP

Got ARP REQUEST, return our IP

checksum bad

Got ARP REQUEST, return our IP

Got ARP REQUEST, return our IP

Got ARP REPLY, set server/gtwy eth addr (38:2c:4a:b1:55:b4)

Got it

Got ARP REQUEST, return our IP

#################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #################################################################

	 #############################################

done

Bytes transferred = 6881886 (69025e hex)

LoadAddr=81000000 NetBootFileXferSize= 0069025e

MT7621 # bootm 0x81000000

## Booting image at 81000000 ...

   Image Name:   MIPS OpenWrt Linux-5.15.167

   Image Type:   MIPS Linux Kernel Image (lzma compressed)

   Data Size:    2806421 Bytes =  2.7 MB

   Load Address: 80001000

   Entry Point:  80001000

   Verifying Checksum ... OK

   Uncompressing Kernel Image ... OK

No initrd

nm_init:791

nm_initFwupPtnStruct:276

nm_lib_readPtnTable:738

[NM_Debug](nm_lib_readPtnTable) 00743: NM_PTN_TABLE_BASE = 0xfe0000

[NM_Debug](nm_lib_readPtnFromNvram) 00569: partition_used_len = -1, requried len = 8192

[NM_Debug](nm_lib_readPtnTable) 00751: Reading Partition Table from NVRAM ... OK



[NM_Error](nm_lib_parsePtnIndexFile) 00640: invalid partition-index-file para id.



[NM_Error](nm_lib_readPtnTable) 00756: Parsing Partition Table ... FAILED





[NM_Error](nm_api_checkTestMode) 00402: factory boot check testmode flag, init fail.



### test_mode=disable,boot_args:console=ttyS1,115200 root=/dev/mtdblock2 rootfstype=squashfs init=/etc/preinit mtdparts=raspi:256k(uboot),4096k(uImage),11968k@0x440000(rootfs),64k@0xff0000(ART) mem=128M test_mode=disable

## Transferring control to Linux (at address 80001000) ...

## Giving linux memsize in MB, 128


Starting kernel ...


[    0.000000] Linux version 5.15.167 (builder@buildhost) (mipsel-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r24106-10cc5fcd00) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Mon Sep 23 12:34:46 2024
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] printk: bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is TP-Link Archer AX23 v1
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] percpu: Embedded 12 pages/cpu s17808 r8192 d23152 u49152
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32480
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] Writing ErrCtl register=00002046
[    0.000000] Readback ErrCtl register=00002046
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 119216K/131072K available (7323K kernel code, 629K rwdata, 884K rodata, 1264K init, 225K bss, 11856K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] 	Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 256
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000004] sched_clock: 64 bits at 880MHz, resolution 1ns, wraps every 4398046511103ns
[    0.008047] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.066214] pid_max: default: 32768 minimum: 301
[    0.071618] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.078830] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.090347] rcu: Hierarchical SRCU implementation.
[    0.095818] smp: Bringing up secondary CPUs ...
[    0.101204] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.101230] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.101245] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.101289] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.160588] Synchronize counters for CPU 1: done.
[    0.193073] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.193093] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.193103] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.193130] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.252049] Synchronize counters for CPU 2: done.
[    0.282669] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.282689] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.282699] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.282730] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.337233] Synchronize counters for CPU 3: done.
[    0.367088] smp: Brought up 1 node, 4 CPUs
[    0.376284] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.386083] futex hash table entries: 1024 (order: 3, 32768 bytes, linear)
[    0.393179] pinctrl core: initialized pinctrl subsystem
[    0.399930] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.406549] thermal_sys: Registered thermal governor 'step_wise'
[    0.431457] clocksource: Switched to clocksource GIC
[    0.437842] NET: Registered PF_INET protocol family
[    0.442875] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.450967] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.459282] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.466953] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.474583] TCP bind hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.481577] TCP: Hash tables configured (established 1024 bind 1024)
[    0.487999] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.494492] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.501785] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.507392] PCI: CLS 0 bytes, default 32
[    0.514023] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[    0.525862] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.531746] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.542952] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.553931] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    0.559863] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    0.565846] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    0.572001] mt7621-pci 1e140000.pcie: host bridge /pcie@1e140000 ranges:
[    0.578673] mt7621-pci 1e140000.pcie:   No bus range found for /pcie@1e140000, using [bus 00-ff]
[    0.587445] mt7621-pci 1e140000.pcie:      MEM 0x0060000000..0x006fffffff -> 0x0060000000
[    0.595558] mt7621-pci 1e140000.pcie:       IO 0x001e160000..0x001e16ffff -> 0x0000000000
[    0.961464] mt7621-pci 1e140000.pcie: pcie2 no card, disable it (RST & CLK)
[    0.968359] mt7621-pci 1e140000.pcie: PCIE0 enabled
[    0.973245] mt7621-pci 1e140000.pcie: PCIE1 enabled
[    0.978054] PCI coherence region base: 0x60000000, mask/settings: 0xf0000002
[    0.985290] mt7621-pci 1e140000.pcie: PCI host bridge to bus 0000:00
[    0.991582] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.996985] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    1.003838] pci_bus 0000:00: root bus resource [io  0x0000-0xffff]
[    1.009997] pci 0000:00:00.0: [0e8d:0801] type 01 class 0x060400
[    1.015943] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x7fffffff]
[    1.022168] pci 0000:00:00.0: reg 0x14: [mem 0x00000000-0x0000ffff]
[    1.028418] pci 0000:00:00.0: supports D1
[    1.032352] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    1.038729] pci 0000:00:01.0: [0e8d:0801] type 01 class 0x060400
[    1.044757] pci 0000:00:01.0: reg 0x10: [mem 0x00000000-0x7fffffff]
[    1.050949] pci 0000:00:01.0: reg 0x14: [mem 0x00000000-0x0000ffff]
[    1.057261] pci 0000:00:01.0: supports D1
[    1.061179] pci 0000:00:01.0: PME# supported from D0 D1 D3hot
[    1.068712] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.076704] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.084947] pci 0000:01:00.0: [14c3:7916] type 00 class 0x000280
[    1.090900] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[    1.098092] pci 0000:01:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[    1.105256] pci 0000:01:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[    1.112536] pci 0000:01:00.0: supports D1 D2
[    1.116712] pci 0000:01:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[    1.123343] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[    1.139375] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    1.144579] pci 0000:00:00.0:   bridge window [io  0x0000-0x0fff]
[    1.150575] pci 0000:00:00.0:   bridge window [mem 0x00000000-0x000fffff]
[    1.157339] pci 0000:00:00.0:   bridge window [mem 0x00000000-0x000fffff pref]
[    1.164523] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    1.171298] pci 0000:02:00.0: [14c3:7915] type 00 class 0x000280
[    1.177286] pci 0000:02:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[    1.184466] pci 0000:02:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[    1.191633] pci 0000:02:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[    1.198878] pci 0000:02:00.0: supports D1 D2
[    1.203086] pci 0000:02:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[    1.209652] pci 0000:02:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:01.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[    1.225792] pci 0000:00:01.0: PCI bridge to [bus 02-ff]
[    1.230949] pci 0000:00:01.0:   bridge window [io  0x0000-0x0fff]
[    1.237036] pci 0000:00:01.0:   bridge window [mem 0x00000000-0x000fffff]
[    1.243758] pci 0000:00:01.0:   bridge window [mem 0x00000000-0x000fffff pref]
[    1.250907] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 02
[    1.257582] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    1.264136] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    1.271013] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000]
[    1.277602] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000]
[    1.284518] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    1.291230] pci 0000:00:00.0: BAR 9: assigned [mem 0x60100000-0x602fffff pref]
[    1.298436] pci 0000:00:01.0: BAR 8: assigned [mem 0x60300000-0x603fffff]
[    1.305168] pci 0000:00:01.0: BAR 9: assigned [mem 0x60400000-0x605fffff pref]
[    1.312339] pci 0000:00:00.0: BAR 1: assigned [mem 0x60600000-0x6060ffff]
[    1.319054] pci 0000:00:01.0: BAR 1: assigned [mem 0x60610000-0x6061ffff]
[    1.325826] pci 0000:00:00.0: BAR 7: assigned [io  0x0000-0x0fff]
[    1.331865] pci 0000:00:01.0: BAR 7: assigned [io  0x1000-0x1fff]
[    1.337896] pci 0000:01:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit pref]
[    1.345615] pci 0000:01:00.0: BAR 2: assigned [mem 0x60200000-0x60203fff 64bit pref]
[    1.353304] pci 0000:01:00.0: BAR 4: assigned [mem 0x60204000-0x60204fff 64bit pref]
[    1.360965] pci 0000:00:00.0: PCI bridge to [bus 01]
[    1.365906] pci 0000:00:00.0:   bridge window [io  0x0000-0x0fff]
[    1.371954] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    1.378666] pci 0000:00:00.0:   bridge window [mem 0x60100000-0x602fffff pref]
[    1.385878] pci 0000:02:00.0: BAR 0: assigned [mem 0x60400000-0x604fffff 64bit pref]
[    1.393567] pci 0000:02:00.0: BAR 2: assigned [mem 0x60500000-0x60503fff 64bit pref]
[    1.401227] pci 0000:02:00.0: BAR 4: assigned [mem 0x60504000-0x60504fff 64bit pref]
[    1.408950] pci 0000:00:01.0: PCI bridge to [bus 02]
[    1.413856] pci 0000:00:01.0:   bridge window [io  0x1000-0x1fff]
[    1.419879] pci 0000:00:01.0:   bridge window [mem 0x60300000-0x603fffff]
[    1.426643] pci 0000:00:01.0:   bridge window [mem 0x60400000-0x605fffff pref]
[    1.435945] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    1.445986] printk: console [ttyS0] disabled
[    1.450428] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 19, base_baud = 3125000) is a 16550A
[    1.459529] printk: console [ttyS0] enabled
[    1.459529] printk: console [ttyS0] enabled
[    1.467853] printk: bootconsole [early0] disabled
[    1.467853] printk: bootconsole [early0] disabled
[    1.481012] spi-mt7621 1e000b00.spi: sys_freq: 220000000
[    1.488016] spi-nor spi0.0: XM25QH128C (16384 Kbytes)
[    1.493217] 5 fixed-partitions partitions found on MTD device spi0.0
[    1.499584] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions
[    1.506959] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions
[    1.514791] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions
[    1.522196] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions
[    1.530216] Creating 5 MTD partitions on "spi0.0":
[    1.535091] 0x000000000000-0x000000040000 : "u-boot"
[    1.541582] 0x000000040000-0x000000fa0000 : "firmware"
[    1.548247] 2 uimage-fw partitions found on MTD device firmware
[    1.554231] Creating 2 MTD partitions on "firmware":
[    1.559184] 0x000000000000-0x000000400000 : "kernel"
[    1.565208] 0x000000400000-0x000000f60000 : "rootfs"
[    1.570962] mtd: setting mtd3 (rootfs) as root device
[    1.576202] 1 squashfs-split partitions found on MTD device rootfs
[    1.582408] 0x000000eb0000-0x000000f60000 : "rootfs_data"
[    1.588865] 0x000000fa0000-0x000000fb0000 : "config"
[    1.594996] 0x000000fb0000-0x000000ff0000 : "tplink"
[    1.601061] 0x000000ff0000-0x000001000000 : "radio"
[    1.744515] mt7530-mdio mdio-bus:1f: MT7530 adapts as multi-chip module
[    1.760926] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 21
[    1.772754] mtk_soc_eth 1e100000.ethernet wan: mediatek frame engine at 0xbe100000, irq 21
[    1.783622] i2c_dev: i2c /dev entries driver
[    1.790837] NET: Registered PF_INET6 protocol family
[    1.798292] Segment Routing with IPv6
[    1.802134] In-situ OAM (IOAM) with IPv6
[    1.806171] NET: Registered PF_PACKET protocol family
[    1.811300] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.824860] 8021q: 802.1Q VLAN Support v1.8
[    1.835239] mt7530-mdio mdio-bus:1f: MT7530 adapts as multi-chip module
[    1.865717] mt7530-mdio mdio-bus:1f: configuring for fixed/rgmii link mode
[    1.873454] mt7530-mdio mdio-bus:1f: Link is Up - 1Gbps/Full - flow control rx/tx
[    1.881725] mt7530-mdio mdio-bus:1f lan1 (uninitialized): PHY [mt7530-0:00] driver [MediaTek MT7530 PHY] (irq=23)
[    1.894748] mt7530-mdio mdio-bus:1f lan2 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7530 PHY] (irq=24)
[    1.907517] mt7530-mdio mdio-bus:1f lan3 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7530 PHY] (irq=25)
[    1.920317] mt7530-mdio mdio-bus:1f lan4 (uninitialized): PHY [mt7530-0:03] driver [MediaTek MT7530 PHY] (irq=26)
[    1.932967] DSA: tree 0 setup
[    1.937210] clk: Disabling unused clocks
[    1.948893] VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
[    1.960182] Freeing unused kernel image (initmem) memory: 1264K
[    1.966156] This architecture does not have kernel memory protection.
[    1.972612] Run /sbin/init as init process
[    2.095057] process '/bin/busybox' started with executable stack

init started: BusyBox v1.19.4 (2024-04-24 11:37:57 CST)
/etc/init.d/rcS: line 46: can't create /dev/null: Read-only file system
/etc/init.d/rcS: line 55: can't open '/dev/null'

hecatae · January 11, 2026, 12:44pm

Please update bootloader, which stock firmware did you try to return to?

maxddd · January 11, 2026, 1:48pm

I have tried 1.1.0 and 1.1.3.
As for bootloader, i cant unless there is a foolproof guide (doubt)

sparky8512 · January 11, 2026, 5:31pm

In my experience with bricking an AX21(US) v4.6 (similar hardware and same stock firmware image as AX23(US) v1.20), your best bet is to load the stock firmware back on using the recovery web loader. sysupgrade will not fix whatever is broken in tplink mtd block.

What error do you get when attempting to load stock firmware? If it is version mismatch, that should be recoverable, but you may need to fix more than what the guide you linked in your original post outlined.

maxddd · January 12, 2026, 9:27am

U-Boot 1.1.3 (Feb 16 2022 - 16:26:34)


Board: Ralink APSoC DRAM:  128 MB

relocate_code Pointer at: 87f58000


Config XHCI 40M PLL 

flash manufacture id: 20, device id 40 18

Warning: un-recognized chip ID, please update bootloader!

*** Warning - bad CRC, using default environment


============================================ 

Ralink UBoot Version: 5.0.0.0

-------------------------------------------- 

ASIC MT7621A DualCore (MAC to MT7530 Mode)

DRAM_CONF_FROM: Auto-Detection 

DRAM_TYPE: DDR3 

DRAM bus: 16 bit

Xtal Mode=3 OCP Ratio=1/3

Flash component: SPI Flash

Date:Feb 16 2022  Time:16:26:34

============================================ 

THIS IS uboot

icache: sets:256, ways:4, linesz:32 ,total:32768

dcache: sets:256, ways:4, linesz:32 ,total:32768 


 ##### The CPU freq = 880 MHZ #### 

 estimate memory size =128 Mbytes


Press '4' or 't' to break the booting process


Press 'x' to enter recovery web server

 0 

nm_init:791

nm_initFwupPtnStruct:276

nm_lib_readPtnTable:738

[NM_Debug](nm_lib_readPtnTable) 00743: NM_PTN_TABLE_BASE = 0xfe0000

[NM_Debug](nm_lib_readPtnFromNvram) 00569: partition_used_len = -1, requried len = 8192

[NM_Debug](nm_lib_readPtnTable) 00751: Reading Partition Table from NVRAM ... OK



[NM_Error](nm_lib_parsePtnIndexFile) 00640: invalid partition-index-file para id.



[NM_Error](nm_lib_readPtnTable) 00756: Parsing Partition Table ... FAILED





[NM_Error](nm_api_checkInteger) 00316: factory boot check integer partition init fail.



#Reset_MT7530

set LAN/WAN LLLLW



 NetTxPacket = 0x87FE7A80 


 KSEG1ADDR(NetTxPacket) = 0xA7FE7A80 

Trying Eth0 (10/100-M)


 Waitting for RX_DMA_BUSY status Start... done



 ETH_STATE_ACTIVE!! 

HTTP server is starting at IP: 192.168.0.1

HTTP server is ready!


Data will be downloaded at 0x80500000 in RAM

Upgrade type: firmware

Upload file size: 15051062 bytes

Loading: #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #######################################

         #####


Firmware process cloud.

Firmware verify OK!

firmware(size 0xe5a936) verify pass!

HTTP upload is done! Upgrading...

do http upgrade

nm_tpFirmwareRecovery---

nm_init:791

nm_initFwupPtnStruct:276

nm_lib_readPtnTable:738

[NM_Debug](nm_lib_readPtnTable) 00743: NM_PTN_TABLE_BASE = 0xfe0000

[NM_Debug](nm_lib_readPtnFromNvram) 00569: partition_used_len = -1, requried len = 8192

[NM_Debug](nm_lib_readPtnTable) 00751: Reading Partition Table from NVRAM ... OK



[NM_Error](nm_lib_parsePtnIndexFile) 00640: invalid partition-index-file para id.



[NM_Error](nm_lib_readPtnTable) 00756: Parsing Partition Table ... FAILED





[NM_Error](nm_tpFirmwareCheck) 01392: Init failed.



Web recovery failed type 0.

## Error: HTTP ugrade failed!


Trying Eth0 (10/100-M)


 ETH_STATE_ACTIVE!! 

HTTP server is starting at IP: 192.168.0.1

HTTP server is ready!

As you can see every method ends on

[NM_Debug](nm_lib_readPtnTable) 00743: NM_PTN_TABLE_BASE = 0xfe0000
[NM_Debug](nm_lib_readPtnFromNvram) 00569: partition_used_len = -1, requried len = 8192
[NM_Debug](nm_lib_readPtnTable) 00751: Reading Partition Table from NVRAM ... OK
[NM_Error](nm_lib_parsePtnIndexFile) 00640: invalid partition-index-file para id.
[NM_Error](nm_lib_readPtnTable) 00756: Parsing Partition Table ... FAILED
[NM_Error](nm_tpFirmwareCheck) 01392: Init failed.

My uneducated guess would be that something that isnt overwritten by loading new .bin was corrupted by wrong command, and now the best bet is, if possible, to copy entire memory/partition from another device which i dont have.

frollic · January 12, 2026, 9:53am

I have a full AX23 dump stored, but I guess you need to be able to boot an initramfs to write it ...

Post help output from U-Boot.

maxddd · January 12, 2026, 1:45pm

But it can boot, as i tried to do sysupgrade from there, so with the clear instructions what to do i can try it.

uboot:

U-Boot 1.1.3 (Feb 16 2022 - 16:26:34)


Board: Ralink APSoC DRAM:  128 MB

relocate_code Pointer at: 87f58000


Config XHCI 40M PLL 

flash manufacture id: 20, device id 40 18

Warning: un-recognized chip ID, please update bootloader!

*** Warning - bad CRC, using default environment


============================================ 

Ralink UBoot Version: 5.0.0.0

-------------------------------------------- 

ASIC MT7621A DualCore (MAC to MT7530 Mode)

DRAM_CONF_FROM: Auto-Detection 

DRAM_TYPE: DDR3 

DRAM bus: 16 bit

Xtal Mode=3 OCP Ratio=1/3

Flash component: SPI Flash

Date:Feb 16 2022  Time:16:26:34

============================================ 

THIS IS uboot

icache: sets:256, ways:4, linesz:32 ,total:32768

dcache: sets:256, ways:4, linesz:32 ,total:32768 


 ##### The CPU freq = 880 MHZ #### 

 estimate memory size =128 Mbytes


Press '4' or 't' to break the booting process


Press 'x' to enter recovery web server

 0 

#Reset_MT7530

set LAN/WAN LLLLW


   

4: System Enter Boot Command Line Interface.


U-Boot 1.1.3 (Feb 16 2022 - 16:26:34)

MT7621 # help

?       - alias for 'help'

bootm   - boot application image from memory

cp      - memory copy

erase   - erase SPI FLASH memory

ethon   - enable ethernet.

go      - start application at address 'addr'

help    - print online help

httpd -start www server for firmware recovery

loadb   - load binary file over serial line (kermit mode)

md      - memory display

mdio   - Ralink PHY register R/W command !!

mm      - memory modify (auto-incrementing)

mtest   - simple RAM test

nm      - memory modify (constant address)

printenv- print environment variables

reset   - Perform RESET of the CPU

rf      - read/write rf register

saveenv - save environment variables to persistent storage

setenv  - set environment variables

spi	- spi command

tftpboot- boot image via network using TFTP protocol

version - print monitor version

MT7621 # printenv

bootargs=console=ttyS1,115200 root=/dev/mtdblock2 rootfstype=squashfs init=/etc/preinit mtdparts=raspi:256k(uboot),4096k(uImage),11968k@0x440000(rootfs),64k@0xff0000(ART) mem=128M

bootcmd=tftp

bootdelay=0x1

baudrate=115200

ethaddr="00:AA:BB:CC:DD:10"

ipaddr=192.168.0.1

serverip=192.168.0.5

stdin=serial

stdout=serial

stderr=serial


Environment size: 332/4092 bytes

MT7621 #

frollic · January 12, 2026, 2:06pm

The idea would be to tftpboot the mtd1 which contains the main partition, then write it to flash using the cp.b command, but here I'm out of my comfort depth, since I've never done it before.

I'll PM you a link to my MTD dump.

Have you, @hecatae ?

hecatae · January 12, 2026, 2:33pm

@frollic I'm just reading that two other ax23 users can only boot 23.05.4 successfully:

github.com/openwrt/openwrt

TP-Link Archer AX23 v1.20 - Unable to boot sometimes

opened 12:14PM - 16 May 25 UTC

xMikooo

target/ramips bug Official Image Supported Device release/24.10

### Describe the bug Router TP-Link Archer ax23 v.120 is unable to boot properl…y since release 23.05.5, with older 23.05.4 works flawlesly. This issue still occurs in the newest snapshot. The boot process will happen as usual, then hang at power LED and will stay like that forever. I have connected serial connection to one router running snapshot firmware and factory reset. I thought the router might kernel panic or hang at uboot somewhere, but no. It boots normally, you can access the console, the interfaces supposedly have IP addresses. However no ping and any kind of access is possible. Below is the bootlog, I'm not competent enough to troubleshoot further. This issue makes it not practical to use such router in a setup without backup power. In my case i have to reboot the router around 5 times to make it boot properly. ``` U-Boot 1.1.3 (Feb 16 2022 - 16:26:34) Board: Ralink APSoC DRAM: 128 MB relocate_code Pointer at: 87f58000 Config XHCI 40M PLL ****************************** Software System Reset Occurred ****************************** flash manufacture id: 20, device id 40 18 Warning: un-recognized chip ID, please update bootloader! *** Warning - bad CRC, using default environment ============================================ Ralink UBoot Version: 5.0.0.0 -------------------------------------------- ASIC MT7621A DualCore (MAC to MT7530 Mode) DRAM_CONF_FROM: Auto-Detection DRAM_TYPE: DDR3 DRAM bus: 16 bit Xtal Mode=3 OCP Ratio=1/3 Flash component: SPI Flash Date:Feb 16 2022 Time:16:26:34 ============================================ THIS IS uboot icache: sets:256, ways:4, linesz:32 ,total:32768 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 880 MHZ #### estimate memory size =128 Mbytes Press '4' or 't' to break the booting process Press 'x' to enter recovery web server 0 nm_init:791 nm_initFwupPtnStruct:276 nm_lib_readPtnTable:738 [NM_Debug](nm_lib_readPtnTable) 00743: NM_PTN_TABLE_BASE = 0xfe0000 [NM_Debug](nm_lib_readPtnFromNvram) 00569: partition_used_len = 1054, requried len = 8192 [NM_Debug](nm_lib_readPtnTable) 00751: Reading Partition Table from NVRAM ... OK [NM_Debug](nm_lib_readPtnTable) 00759: Parsing Partition Table ... OK [NM_Debug](nm_lib_readPtnFromNvram) 00569: partition_used_len = 2, requried len = 3 factory boot check integer ok. 3: System Boot system code via Flash. ## Booting image at bc040000 ... Image Name: MIPS OpenWrt Linux-6.6.89 Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 3403996 Bytes = 3.2 MB Load Address: 80001000 Entry Point: 80001000 Verifying Checksum ... OK Uncompressing Kernel Image ... OK No initrd [NM_Debug](nm_lib_readPtnFromNvram) 00569: partition_used_len = 2, requried len = 3 [NM_Error](nm_api_checkTestMode) 00417: factory boot check testmode flag is not 1. ### test_mode=disable,boot_args:console=ttyS1,115200 root=/dev/mtdblock2 rootfstype=squashfs init=/etc/preinit mtdparts=raspi:256k(uboot),4096k(uImage),11968k@0x440000(rootfs),64k@0xff0000(ART) mem=128M test_mode=disable ## Transferring control to Linux (at address 80001000) ... ## Giving linux memsize in MB, 128 Starting kernel ... [ 0.000000] Linux version 6.6.89 (builder@buildhost) (mipsel-openwrt-linux-musl-gcc (OpenWrt GCC 14.2.0 r29528-ffde9a9fe9) 14.2.0, GNU ld (GNU Binutils) 2.42) #0 SMP Fri May 9 14:38:19 2025 [ 0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3 [ 0.000000] printk: bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc) [ 0.000000] MIPS: machine is TP-Link Archer AX23 v1 [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] VPE topology {2,2} total 4 [ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes. [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff] [ 0.000000] percpu: Embedded 12 pages/cpu s19136 r8192 d21824 u49152 [ 0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2 [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear) [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear) [ 0.000000] Writing ErrCtl register=00000000 [ 0.000000] Readback ErrCtl register=00000000 [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 32480 [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] Memory: 117224K/131072K available (8412K kernel code, 652K rwdata, 1776K rodata, 1244K init, 229K bss, 13848K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 [ 0.000000] rcu: Hierarchical RCU implementation. [ 0.000000] Tracing variant of Tasks RCU enabled. [ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 0.000000] NR_IRQS: 256 [ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention. [ 0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns [ 0.000004] sched_clock: 64 bits at 880MHz, resolution 1ns, wraps every 4398046511103ns [ 0.008064] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688) [ 0.066217] pid_max: default: 32768 minimum: 301 [ 0.079800] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.087040] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.103642] RCU Tasks Trace: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=4. [ 0.113427] rcu: Hierarchical SRCU implementation. [ 0.118126] rcu: Max phase no-delay instances is 1000. [ 0.124155] smp: Bringing up secondary CPUs ... [ 0.129507] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.129535] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.129550] MIPS secondary cache 256kB, 8-way, linesize 32 bytes. [ 0.129597] CPU1 revision is: 0001992f (MIPS 1004Kc) [ 0.183593] Synchronize counters for CPU 1: done. [ 0.215708] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.215730] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.215742] MIPS secondary cache 256kB, 8-way, linesize 32 bytes. [ 0.215774] CPU2 revision is: 0001992f (MIPS 1004Kc) [ 0.274906] Synchronize counters for CPU 2: done. [ 0.305611] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes. [ 0.305632] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.305645] MIPS secondary cache 256kB, 8-way, linesize 32 bytes. [ 0.305681] CPU3 revision is: 0001992f (MIPS 1004Kc) [ 0.360104] Synchronize counters for CPU 3: done. [ 0.389971] smp: Brought up 1 node, 4 CPUs [ 0.401021] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.410830] futex hash table entries: 1024 (order: 3, 32768 bytes, linear) [ 0.421751] pinctrl core: initialized pinctrl subsystem [ 0.429941] NET: Registered PF_NETLINK/PF_ROUTE protocol family [ 0.436622] thermal_sys: Registered thermal governor 'step_wise' [ 0.438747] /pinctrl: Fixed dependency cycle(s) with /pinctrl/pinctrl0 [ 0.467022] clocksource: Switched to clocksource GIC [ 0.482499] NET: Registered PF_INET protocol family [ 0.487634] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear) [ 0.496432] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear) [ 0.504744] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) [ 0.512413] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.520029] TCP bind hash table entries: 1024 (order: 2, 16384 bytes, linear) [ 0.527156] TCP: Hash tables configured (established 1024 bind 1024) [ 0.534424] MPTCP token hash table entries: 256 (order: 0, 4096 bytes, linear) [ 0.541951] UDP hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.548440] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear) [ 0.556293] NET: Registered PF_UNIX/PF_LOCAL protocol family [ 0.561959] PCI: CLS 0 bytes, default 32 [ 0.569728] workingset: timestamp_bits=14 max_order=15 bucket_order=1 [ 0.577497] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.583241] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.599390] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251) [ 0.610236] mt7621_gpio 1e000600.gpio: registering 32 gpios [ 0.616138] mt7621_gpio 1e000600.gpio: registering 32 gpios [ 0.622197] mt7621_gpio 1e000600.gpio: registering 32 gpios [ 0.628400] mt7621-pci 1e140000.pcie: host bridge /pcie@1e140000 ranges: [ 0.635040] mt7621-pci 1e140000.pcie: No bus range found for /pcie@1e140000, using [bus 00-ff] [ 0.643818] mt7621-pci 1e140000.pcie: MEM 0x0060000000..0x006fffffff -> 0x0060000000 [ 0.651923] mt7621-pci 1e140000.pcie: IO 0x001e160000..0x001e16ffff -> 0x0000000000 [ 1.017025] mt7621-pci 1e140000.pcie: pcie2 no card, disable it (RST & CLK) [ 1.023928] mt7621-pci 1e140000.pcie: PCIE0 enabled [ 1.028798] mt7621-pci 1e140000.pcie: PCIE1 enabled [ 1.033772] PCI coherence region base: 0x60000000, mask/settings: 0xf0000002 [ 1.040978] mt7621-pci 1e140000.pcie: PCI host bridge to bus 0000:00 [ 1.047292] pci_bus 0000:00: root bus resource [bus 00-ff] [ 1.052699] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff] [ 1.059556] pci_bus 0000:00: root bus resource [io 0x0000-0xffff] [ 1.065710] pci 0000:00:00.0: [0e8d:0801] type 01 class 0x060400 [ 1.071658] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x7fffffff] [ 1.077882] pci 0000:00:00.0: reg 0x14: [mem 0x60600000-0x6060ffff] [ 1.084128] pci 0000:00:00.0: supports D1 [ 1.088063] pci 0000:00:00.0: PME# supported from D0 D1 D3hot [ 1.094458] pci 0000:00:01.0: [0e8d:0801] type 01 class 0x060400 [ 1.100476] pci 0000:00:01.0: reg 0x10: [mem 0x00000000-0x7fffffff] [ 1.106665] pci 0000:00:01.0: reg 0x14: [mem 0x60610000-0x6061ffff] [ 1.112974] pci 0000:00:01.0: supports D1 [ 1.116893] pci 0000:00:01.0: PME# supported from D0 D1 D3hot [ 1.124972] pci 0000:01:00.0: [14c3:7916] type 00 class 0x000280 [ 1.131006] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref] [ 1.138196] pci 0000:01:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref] [ 1.145331] pci 0000:01:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref] [ 1.152642] pci 0000:01:00.0: supports D1 D2 [ 1.156818] pci 0000:01:00.0: PME# supported from D0 D1 D2 D3hot D3cold [ 1.163454] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link) [ 1.178469] pci 0000:00:00.0: PCI bridge to [bus 01-ff] [ 1.183624] pci 0000:00:00.0: bridge window [io 0x0000-0x0fff] [ 1.189723] pci 0000:00:00.0: bridge window [mem 0x60000000-0x600fffff] [ 1.196415] pci 0000:00:00.0: bridge window [mem 0x60100000-0x602fffff pref] [ 1.203629] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01 [ 1.210494] pci 0000:02:00.0: [14c3:7915] type 00 class 0x000280 [ 1.216459] pci 0000:02:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref] [ 1.223655] pci 0000:02:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref] [ 1.230834] pci 0000:02:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref] [ 1.238114] pci 0000:02:00.0: supports D1 D2 [ 1.242292] pci 0000:02:00.0: PME# supported from D0 D1 D2 D3hot D3cold [ 1.248930] pci 0000:02:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:01.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link) [ 1.264013] pci 0000:00:01.0: PCI bridge to [bus 02-ff] [ 1.269222] pci 0000:00:01.0: bridge window [io 0x0000-0x0fff] [ 1.275232] pci 0000:00:01.0: bridge window [mem 0x60300000-0x603fffff] [ 1.282001] pci 0000:00:01.0: bridge window [mem 0x60400000-0x605fffff pref] [ 1.289179] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 02 [ 1.295749] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000] [ 1.302304] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000] [ 1.309220] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000] [ 1.315751] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000] [ 1.322709] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff] [ 1.329439] pci 0000:00:00.0: BAR 9: assigned [mem 0x60100000-0x602fffff pref] [ 1.336576] pci 0000:00:01.0: BAR 8: assigned [mem 0x60300000-0x603fffff] [ 1.343346] pci 0000:00:01.0: BAR 9: assigned [mem 0x60400000-0x605fffff pref] [ 1.350520] pci 0000:00:00.0: BAR 1: assigned [mem 0x60600000-0x6060ffff] [ 1.357263] pci 0000:00:01.0: BAR 1: assigned [mem 0x60610000-0x6061ffff] [ 1.363966] pci 0000:00:00.0: BAR 7: assigned [io 0x0000-0x0fff] [ 1.370047] pci 0000:00:01.0: BAR 7: assigned [io 0x1000-0x1fff] [ 1.376069] pci 0000:01:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit pref] [ 1.383801] pci 0000:01:00.0: BAR 2: assigned [mem 0x60200000-0x60203fff 64bit pref] [ 1.391487] pci 0000:01:00.0: BAR 4: assigned [mem 0x60204000-0x60204fff 64bit pref] [ 1.399172] pci 0000:00:00.0: PCI bridge to [bus 01] [ 1.404056] pci 0000:00:00.0: bridge window [io 0x0000-0x0fff] [ 1.410137] pci 0000:00:00.0: bridge window [mem 0x60000000-0x600fffff] [ 1.416843] pci 0000:00:00.0: bridge window [mem 0x60100000-0x602fffff pref] [ 1.424052] pci 0000:02:00.0: BAR 0: assigned [mem 0x60400000-0x604fffff 64bit pref] [ 1.431750] pci 0000:02:00.0: BAR 2: assigned [mem 0x60500000-0x60503fff 64bit pref] [ 1.439443] pci 0000:02:00.0: BAR 4: assigned [mem 0x60504000-0x60504fff 64bit pref] [ 1.447132] pci 0000:00:01.0: PCI bridge to [bus 02] [ 1.452014] pci 0000:00:01.0: bridge window [io 0x1000-0x1fff] [ 1.458087] pci 0000:00:01.0: bridge window [mem 0x60300000-0x603fffff] [ 1.464799] pci 0000:00:01.0: bridge window [mem 0x60400000-0x605fffff pref] [ 1.473643] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled [ 1.489555] printk: console [ttyS0] disabled [ 1.494671] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A [ 1.503771] printk: console [ttyS0] enabled [ 1.503771] printk: console [ttyS0] enabled [ 1.512071] printk: bootconsole [early0] disabled [ 1.512071] printk: bootconsole [early0] disabled [ 1.526839] spi-mt7621 1e000b00.spi: sys_freq: 220000000 [ 1.533981] spi-nor spi0.0: XM25QH128C (16384 Kbytes) [ 1.539209] 5 fixed-partitions partitions found on MTD device spi0.0 [ 1.545578] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions [ 1.552903] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions [ 1.560502] Creating 5 MTD partitions on "spi0.0": [ 1.565303] 0x000000000000-0x000000040000 : "u-boot" [ 1.571943] 0x000000040000-0x000000fa0000 : "firmware" [ 1.578420] 2 uimage-fw partitions found on MTD device firmware [ 1.584356] Creating 2 MTD partitions on "firmware": [ 1.589328] 0x000000000000-0x00000033f11c : "kernel" [ 1.594277] mtd: partition "kernel" doesn't end on an erase/write block -- force read-only [ 1.603690] 0x00000033f11c-0x000000f60000 : "rootfs" [ 1.608698] mtd: partition "rootfs" doesn't start on an erase/write block boundary -- force read-only [ 1.619226] mtd: setting mtd3 (rootfs) as root device [ 1.624368] 1 squashfs-split partitions found on MTD device rootfs [ 1.630567] 0x000000790000-0x000000f60000 : "rootfs_data" [ 1.637571] 0x000000fa0000-0x000000fb0000 : "config" [ 1.643887] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions [ 1.651575] 0x000000fb0000-0x000000ff0000 : "tplink" [ 1.657942] 0x000000ff0000-0x000001000000 : "radio" [ 1.664083] OF: Bad cell count for /palmbus@1e000000/spi@b00/flash@0/partitions [ 1.810452] mt7530-mdio mdio-bus:1f: MT7530 adapts as multi-chip module [ 1.825862] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 19 [ 1.837308] mtk_soc_eth 1e100000.ethernet eth1: mediatek frame engine at 0xbe100000, irq 19 [ 1.847343] i2c_dev: i2c /dev entries driver [ 1.855552] NET: Registered PF_INET6 protocol family [ 1.863728] Segment Routing with IPv6 [ 1.867552] In-situ OAM (IOAM) with IPv6 [ 1.871602] NET: Registered PF_PACKET protocol family [ 1.876701] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. [ 1.890217] 8021q: 802.1Q VLAN Support v1.8 [ 1.923782] mt7530-mdio mdio-bus:1f: MT7530 adapts as multi-chip module [ 1.957571] mt7530-mdio mdio-bus:1f: configuring for fixed/rgmii link mode [ 1.965189] mt7530-mdio mdio-bus:1f: Link is Up - 1Gbps/Full - flow control rx/tx [ 1.967865] mt7530-mdio mdio-bus:1f lan1 (uninitialized): PHY [mt7530-0:00] driver [MediaTek MT7530 PHY] (irq=21) [ 1.986222] mt7530-mdio mdio-bus:1f lan2 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7530 PHY] (irq=22) [ 1.999222] mt7530-mdio mdio-bus:1f lan3 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7530 PHY] (irq=23) [ 2.012253] mt7530-mdio mdio-bus:1f lan4 (uninitialized): PHY [mt7530-0:03] driver [MediaTek MT7530 PHY] (irq=24) [ 2.025029] mtk_soc_eth 1e100000.ethernet eth0: entered promiscuous mode [ 2.031926] DSA: tree 0 setup [ 2.035853] clk: Disabling unused clocks [ 2.046879] VFS: Mounted root (squashfs filesystem) readonly on device 31:3. [ 2.058174] Freeing unused kernel image (initmem) memory: 1244K [ 2.064118] This architecture does not have kernel memory protection. [ 2.070584] Run /sbin/init as init process [ 2.644353] init: Console is alive [ 2.648150] init: - watchdog - [ 3.480292] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 3.506656] gpio_button_hotplug: loading out-of-tree module taints kernel. [ 3.521110] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 3.532025] init: - preinit - [ 4.218244] mtk_soc_eth 1e100000.ethernet wan: renamed from eth1 [ 5.677044] random: crng init done [ 6.109302] mtk_soc_eth 1e100000.ethernet eth0: configuring for fixed/rgmii link mode [ 6.121896] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode [ 6.129093] mtk_soc_eth 1e100000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx Press the [f] key and hit [enter] to enter failsafe mode Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level [ 10.507535] jffs2: notice: (604) jffs2_build_xattr_subsystem: complete building xattr subsystem, 17 of xdatum (0 unchecked, 17 orphan) and 18 of xref (9 dead, 9 orphan) found. [ 10.525351] mount_root: overlay filesystem has not been fully initialized yet [ 10.533352] mount_root: switching to jffs2 overlay [ 10.540320] overlayfs: upper fs does not support tmpfile. [ 10.550846] urandom-seed: Seed file not found (/etc/urandom.seed) [ 10.657966] procd: - early - [ 10.661065] procd: - watchdog - [ 11.272488] procd: - watchdog - [ 11.290587] procd: - ubus - [ 11.454138] procd: - init - Please press Enter to activate this console. [ 12.153729] kmodloader: loading kernel modules from /etc/modules.d/* [ 12.195078] mtk-eip93 1e004000.crypto: EIP93 Crypto Engine Initialized. [ 12.773160] Loading modules backported from Linux version v6.12.6-0-ge9d65b48ce1a [ 12.780800] Backport generated by backports.git v6.1.110-1-35-g410656ef04d2 [ 12.990026] pci 0000:00:00.0: enabling device (0006 -> 0007) [ 12.995719] mt7915e_hif 0000:01:00.0: enabling device (0000 -> 0002) [ 13.002624] pci 0000:00:01.0: enabling device (0006 -> 0007) [ 13.008352] mt7915e 0000:02:00.0: enabling device (0000 -> 0002) [ 13.215057] urngd: v1.0.2 started. [ 13.331710] mt7915e 0000:02:00.0: HW/SW Version: 0x8a108a10, Build Time: 20240429200716a [ 13.331710] [ 13.826195] mt7915e 0000:02:00.0: WM Firmware Version: ____000000, Build Time: 20240429200752 [ 13.867868] mt7915e 0000:02:00.0: WA Firmware Version: DEV_000000, Build Time: 20240429200812 [ 13.987141] mt7915e 0000:02:00.0: registering led 'mt76-phy0' [ 14.112241] mt7915e 0000:02:00.0: registering led 'mt76-phy1' [ 14.256725] PPP generic driver version 2.4.2 [ 14.263031] NET: Registered PF_PPPOX protocol family [ 14.274778] kmodloader: done loading kernel modules from /etc/modules.d/* [ 34.591993] mtk_soc_eth 1e100000.ethernet eth0: Link is Down [ 34.624271] mtk_soc_eth 1e100000.ethernet eth0: configuring for fixed/rgmii link mode [ 34.632871] mtk_soc_eth 1e100000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx [ 34.639889] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode [ 34.652138] br-lan: port 1(lan1) entered blocking state [ 34.657521] br-lan: port 1(lan1) entered disabled state [ 34.662944] mt7530-mdio mdio-bus:1f lan1: entered allmulticast mode [ 34.669463] mtk_soc_eth 1e100000.ethernet eth0: entered allmulticast mode [ 34.679718] mt7530-mdio mdio-bus:1f lan1: entered promiscuous mode [ 34.711920] mt7530-mdio mdio-bus:1f lan2: configuring for phy/gmii link mode [ 34.720985] br-lan: port 2(lan2) entered blocking state [ 34.726277] br-lan: port 2(lan2) entered disabled state [ 34.731872] mt7530-mdio mdio-bus:1f lan2: entered allmulticast mode [ 34.741082] mt7530-mdio mdio-bus:1f lan2: entered promiscuous mode [ 34.761511] mt7530-mdio mdio-bus:1f lan3: configuring for phy/gmii link mode [ 34.770498] br-lan: port 3(lan3) entered blocking state [ 34.775787] br-lan: port 3(lan3) entered disabled state [ 34.781410] mt7530-mdio mdio-bus:1f lan3: entered allmulticast mode [ 34.790485] mt7530-mdio mdio-bus:1f lan3: entered promiscuous mode [ 34.808912] mt7530-mdio mdio-bus:1f lan4: configuring for phy/gmii link mode [ 34.817436] br-lan: port 4(lan4) entered blocking state [ 34.822699] br-lan: port 4(lan4) entered disabled state [ 34.828104] mt7530-mdio mdio-bus:1f lan4: entered allmulticast mode [ 34.836535] mt7530-mdio mdio-bus:1f lan4: entered promiscuous mode [ 34.858215] mtk_soc_eth 1e100000.ethernet wan: PHY [mt7530-0:04] driver [MediaTek MT7530 PHY] (irq=POLL) [ 34.867921] mtk_soc_eth 1e100000.ethernet wan: configuring for phy/rgmii link mode BusyBox v1.37.0 (2025-05-10 10:14:18 UTC) built-in shell (ash) _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- OpenWrt SNAPSHOT, r29528-ffde9a9fe9 ----------------------------------------------------- === WARNING! ===================================== There is no root password defined on this device! Use the "passwd" command to set up a new password in order to prevent unauthorized SSH logins. -------------------------------------------------- OpenWrt recently switched to the "apk" package manager! OPKG Command APK Equivalent Description ------------------------------------------------------------------ opkg install <pkg> apk add <pkg> Install a package opkg remove <pkg> apk del <pkg> Remove a package opkg upgrade apk upgrade Upgrade all packages opkg files <pkg> apk info -L <pkg> List package contents opkg list-installed apk info List installed packages opkg update apk update Update package lists opkg search <pkg> apk search <pkg> Search for packages ------------------------------------------------------------------ For more https://openwrt.org/docs/guide-user/additional-software/opkg-to-apk-cheatsheet root@OpenWrt:~# ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1504 qdisc mq state UP qlen 1000 link/ether 20:23:51:ee:ea:a1 brd ff:ff:ff:ff:ff:ff inet6 fe80::2223:51ff:feee:eaa1/64 scope link valid_lft forever preferred_lft forever 3: wan: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN qlen 1000 link/ether 20:23:51:ee:ea:a2 brd ff:ff:ff:ff:ff:ff 4: lan1@eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue master br-lan state LOWERLAYERDOWN qlen 1000 link/ether 20:23:51:ee:ea:a1 brd ff:ff:ff:ff:ff:ff 5: lan2@eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue master br-lan state LOWERLAYERDOWN qlen 1000 link/ether 20:23:51:ee:ea:a1 brd ff:ff:ff:ff:ff:ff 6: lan3@eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue master br-lan state LOWERLAYERDOWN qlen 1000 link/ether 20:23:51:ee:ea:a1 brd ff:ff:ff:ff:ff:ff 7: lan4@eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue master br-lan state LOWERLAYERDOWN qlen 1000 link/ether 20:23:51:ee:ea:a1 brd ff:ff:ff:ff:ff:ff 8: br-lan: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN qlen 1000 link/ether 20:23:51:ee:ea:a1 brd ff:ff:ff:ff:ff:ff inet 192.168.1.1/24 brd 192.168.1.255 scope global br-lan valid_lft forever preferred_lft forever inet6 fd71:f41c:aa8f::1/60 scope global tentative noprefixroute valid_lft forever preferred_lft forever root@OpenWrt:~# ``` ### OpenWrt version r28597-0425664679 ### OpenWrt release 24.10.1 ### OpenWrt target/subtarget ramips/mt7621 ### Device TP-Link Archer AX23 v1 ### Image kind Official downloaded image ### Steps to reproduce Install any version newer than 23.05.4 and try to boot the router. ### Actual behaviour When booting the router hangs at power LED, no ping, ssh etc. 80% of the time ### Expected behaviour Router boots normally ### Additional info _No response_ ### Diffconfig ```text ``` ### Terms - [x] I am reporting an issue for OpenWrt, not an unsupported fork.

same uboot version, most of the boot process looks identical to @maxddd boot log, so I'd be interested if 23.05.4 boots for them.

frollic · January 12, 2026, 2:40pm

The one I have is on 24.10, but I don't have access to it, it sits in our summer house, but I guess U-Boot version can be extraced from the MTD dumps I've kept.

hecatae · January 12, 2026, 2:44pm

should be able to, my ax23 is running 25.12, but it's currently unplugged and I'm at work so no time to check at present.