Ubee RAC2V1U build image

I have Ubee RAC2V1U with specs


https://wikidevi.wi-cat.ru/Ubee_RAC2V1U
same hardware Phicomm K3 w/t BCM4709C0 wifi BCM4366. So I decided flash k3 openwrt firmware
Stock log when I serial console

CFE version 7.14.164.306 (r670480) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Ubee CFE vesion 1.0.0.4 Build Date: Fri May 26 17:45:01 CST 2017 (albert@albert-VirtualBox)
Copyright (C) 2000-2008 Broadcom Corporation.

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1400,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 7.14.164.306 (r670480)
CPU type 0x0: 1400MHz
Tot mem: 1048576 KBytes

CFE mem:    0x00F00000 - 0x017A6388 (9069448)
Data:       0x00F4E954 - 0x00F4EE88 (1332)
BSS:        0x00F4EE98 - 0x00FA4388 (349424)
Heap:       0x00FA4388 - 0x017A4388 (8388608)
Stack:      0x017A4388 - 0x017A6388 (8192)
Text:       0x00F00000 - 0x00F453F8 (283640)

before en config 0xf0c00 timing 0x19003200
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
not ready reg 0x80000e00tx after notready 0
Finish to init LED IC...
Device eth0:  hwaddr E8-9E-B4-10-9F-F6, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: Failed.
Could not load :: Timeout occured
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: ..... 4990048 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
console [ttyS0] enabled, bootconsole disabled
serial8250.0: ttyS1 at MMIO 0x18000400 (irq = 117) is a 16550
brd: module loaded
loop: module loaded
pflash: found no supported devices
bcmsflash: found no supported devices
Boot partition size = 524288(0x80000)
lookup_nflash_rootfs_offset: offset = 0x200000
nflash: squash filesystem with lzma found at block 31
Creating 17 MTD partitions on "nflash":
0x000000000000-0x000000080000 : "boot"
0x000000080000-0x000000200000 : "nvram"
0x000000200000-0x000006f00000 : "linux"
0x0000003f5f1c-0x000006f00000 : "rootfs"
0x000007400000-0x000007480000 : "board_data"
0x000007480000-0x000007580000 : "POT1"
0x000007580000-0x000007680000 : "POT2"
0x000007680000-0x000007940000 : "T_Meter1"
0x000007940000-0x000007c00000 : "T_Meter2"
0x000007c00000-0x000007c80000 : "ML1"
0x000007c80000-0x000007d00000 : "ML2"
0x000007d00000-0x000007d80000 : "ML3"
0x000007d80000-0x000007e00000 : "ML4"
0x000007e00000-0x000007e80000 : "ML5"
0x000007e80000-0x000007f00000 : "ML6"
0x000007f00000-0x000007f80000 : "ML7"
0x000007f80000-0x000008000000 : "DebugMsg"
PPP generic driver version 2.4.2
NET: Registered protocol family 24
usbmon: debugfs is not available
usbcore: registered new interface driver usblp
Initializing USB Mass Storage driver...
usbcore: registered new interface driver usb-storage
USB Mass Storage support registered.
i2c /dev entries driver
lp5562_init: lp5562_init...
bcm947xx_i2c_device_register: NVRAM variable i2c_sda_gpio missing for I2C interface
bcm947xx_i2c_device_register: NVRAM variable i2c_scl_gpio missing for I2C interface
i2c-gpio i2c-gpio.0: using pins 5 (SDA) and 4 (SCL)
lp5562_init: platform_device_register OK.
lp5562_init: i2c_get_adapter OK.
lp5562_init: lp5562_init i2c_new_device OK.
lp5562_probe: start...
lp5562_probe: kzalloc OK.
lp5562_probe: i2c_set_clientdata OK.
lp5562_probe: mutex_init OK.
lp5562_probe: pdata->setup_resources OK.
lp5562_probe: chip enable OK.
lp5562_probe: LP5562_REG_RESET OK.
lp5562_probe: lp5562_detect OK.
lp5562 0-0030: lp5562 programmable led chip found
lp5562_probe: lp5562_configure OK.
Registered led device: lp5562:channel0
Registered led device: lp5562:channel2
lp5562_probe: Initialize leds OK.
lp5562_probe: lp5562_register_sysfs OK.
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (16159 buckets, 64636 max)
ctnetlink v0.93: registering with nfnetlink.
xt_time: kernel timezone is -0000
ip_tables: (C) 2000-2006 Netfilter Core Team
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
Northstar brcmnand NAND Flash Controller driver, Version 0.1 (c) Broadcom Inc. 2012
NAND device: Manufacturer ID: 0x01, Chip ID: 0xda (AMD NAND 256MiB 3,3V 8-bit)
Spare area=64 eccbytes 28, ecc bytes located at:
9 10 11 12 13 14 15 25 26 27 28 29 30 31 41 42 43 44 45 46 47 57 58 59 60 61 62 63
Available 35 bytes at (off,len):
(1,8) (16,9) (32,9) (48,9) (0,0) (0,0) (0,0) (0,0)
Scanning device for bad blocks
Options: NO_AUTOINCR,NO_READRDY,BBT_SCAN2NDPAGE,
Creating 1 MTD partitions on "brcmnand":
0x000002000000-0x000010000000 : "brcmnand"
SQUASHFS error: Xattrs in filesystem, these will be ignored
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
devtmpfs: mounted
Freeing init memory: 300K
----set fa

[LED]start led serviyaffs: dev is 32505873 name is "mtdblock17" rw
cesyaffs: passed flags ""

yaffs: yaffs: Attempting MTD mount of 31.17,"mtdblock17"
yaffs: checking block 0 bad
yaffs: yaffs_read_super: is_checkpointed 1
/tmp/media/nand/config.tgz: No such file or directory
/sbin/hotplug2: No such file or directory
Reading board data...fxn rc

Done insmod insmod: bcm57xx.ko: no module by that name found
et
Done insmod bcm57xx
Done insmod dpsta
Done insmod dhd
Done insmod hotplug detected product:  1d6b/3/206
hotplug detected product:  1d6b/3/206
hotplug detected product:  1d6b/2/206
hotplug detected product:  1d6b/2/206
hotplug detected product:  1d6b/1/206
hotplug detected product:  1d6b/1/206

FA on.
GMAC3 based forwarding not compatible with ETFA - AuX port...
wl WARNING: console log level set to 1
eth1: WLC_GET_VAR(wme_tx_params): Operation not supported
eth1: WLC_SET_VAR(bss): Numerical result out of range
eth1: WLC_SET_VAR(wet_tunnel): Operation not supported
eth1: cmd=142: Invalid argument
eth1: cmd=142: Invalid argument
eth1: WLC_SET_VAR(chanspec): Invalid argument
eth1: WLC_SET_VAR(wme_tx_params): Operation not supported
eth1: WLC_SET_VAR(avg_dma_xfer_rate): Operation not supported
eth1: cmd=64: Operation not supported
eth2: cmd=231: Invalid argument
eth2: WLC_SET_VAR(wet_enab): Operation not supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(ampdu_rr_retry_limit_tid): Operation not supported
eth2: WLC_SET_VAR(avg_dma_xfer_rate): Operation not supported
eth2: cmd=64: Operation not supported
info, udhcp server (v0.9.8) started
error, unable to open config file: /media/nand/udhcpd_resrv.conf
info, udhcp server (v0.9.8) started
error, unable to open config file: /media/nand/udhcpd_resrv.conf
killall: hspotap: no process killed
rm: cannot remove '/tmp/media/nand/NETWORK_UPTIME': No such file or directory

### wps_wfi_init(): <wl0_wfi_enable=(null)><wl1_wfi_enable=(null)>WFI is not enabled ###
WBD is not enabled: =0
BSD is not enabled: 0=0
Both BSD and WBD is Disabled. flag=0
killall: dhd_monitor: no process killed
killall: smbd: no process killed
rm: cannot remove '/tmp/samba/private/passdb.tdb': No such file or directory
rm: cannot remove '/tmp/samba/private/secrets.tdb': No such file or directory
WBD-Master >> (3) wbd_info_init: WiFi Blanket Disabled. Aborting...
WBD-Slave >> (3) wbd_info_init: WiFi Blanket Disabled. Aborting...
------------ START FIREWALL ------------
info, udhcp client (v0.9.8) started
vlan2 dhcp
vlan2: No such process

[LED]start to check link state
killall: pppoe-relay: no process killed
Zz start the relay!![fun=main,267],
Zz [fun=main,337],initial!
Table does not exist (do you need to insmod?)
/proc/sys/net/ipv6/conf/all/rp_filter: No such file or directory
Reading board data...fxn rc

>>> charter_read_sn():sn=E89EB4109FF6
rmmod: NetUSB: No such file or directory
rmmod: GPL_NetUSB: No such file or directory

[DBG]:ipv6_cleanup...

radvdconf_add_if,190,prepare radvd config.

get_prefix,101

get_prefix,104, ipv6_addr null!

get_prefix,101

get_prefix,104, ipv6_addr null!

start_radvd,668 :If WAN has no IPv6 gw and lan ip, don't forward !!

start_radvd,734,command=radvd -d 1 -C /tmp/radvd.conf &

start_dhcpsv6,806, prepare create wide 6s config...

start_dhcpsv6,974,command=wdhcp6s -f  -c /tmp/dhcp6s.conf br0
Disable XBOX Optimization!
Dec/31/1969 16:00:08: dhcp6_ctl_authinit: failed to open /etc/dhcp6sctlkey: No such file or directory
Dec/31/1969 16:00:09: dhcp6_set_vendorclass: Empty vendor list
Dec/31/1969 16:00:09: dhcp6_set_vendor: Empty vendor list
Dec/31/1969 16:00:09: server6_send: transmit advertise to fe80::8d3e:57b6:15b0:801 failed

Write wdhcp6c config done!

[DBG] start_wan_ipv6,1915,enter start_wan_ipv6.
killall: dhcp6s: no process killed
killall: wdhcp6c: no process killed
killall: wdhcp6c: no process killed
killall: wdhcp6s: no process killed
sh: syntax error: "(" unexpected
sh: syntax error: "(" unexpected

6c_wan_down_killgw...
route: ioctl 0x890c failed: No such process

radvdconf_add_if,190,prepare radvd config.

get_prefix,101

get_prefix,104, ipv6_addr null!

get_prefix,101

get_prefix,104, ipv6_addr null!

start_radvd,668 :If WAN has no IPv6 gw and lan ip, don't forward !!

start_radvd,734,command=radvd -d 1 -C /tmp/radvd.conf &

start_dhcpsv6,806, prepare create wide 6s config...

start_dhcpsv6,974,command=wdhcp6s -f  -c /tmp/dhcp6s.conf br0
command = 'ifconfig vlan2 del fe80:0000:0000:0000:ea9e:b4ff:fe10:9ff6/64'
Dec/31/1969 16:00:13: dhcp6_ctl_authinit: failed to open /etc/dhcp6sctlkey: No such file or directory
ip6tables: Bad rule (does a matching rule exist in that chain?).
ip6tables: Bad rule (does a matching rule exist in that chain?).
command = 'ifconfig vlan2 add fe80:0000:0000:0000:ea9e:b4ff:fe10:9ff6/64'
Dec/31/1969 16:00:17: dhcp6_set_vendorclass: Empty vendor list
Dec/31/1969 16:00:17: dhcp6_set_vendor: Empty vendor list

start_wan_ipv6,2118, ipv6_proto=dhcp, ipv6_proto_by_auto=-1

start_dhcp6c,1790,start dhcp6c, command=wdhcp6c -f -c /tmp/dhcp6c_widev6.conf vlan2 vlan2 &
killall: rtsol: no process killed

start_dhcp6c,1803,start rtsol, command=rtsol -d -I vlan2
killall: cwmpCPE: no process killed

[main,462],Use wide-dhcpv6.
Hit enter to continue...[main] System is ready. WAN PORT MONITOR go!
Dec/31/1969 16:00:33: dhcp6_set_vendorclass: Empty vendor list
Dec/31/1969 16:00:33: dhcp6_set_vendor: Empty vendor list


Login: admin

I flash K3 firmware by command in CFE "flash -noheader 192.168.1.2:/openwrt-bcm53xx-generic-phicomm-k3-squashfs.trx nflash0.trx "and It has boot loop, can not boot but I can serial
Here is log

Device eth0:  hwaddr 00-90-4C-11-22-34, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:tftp Dev:eth0 File:: Options:(null)
Loading: Failed.
Could not load :: Timeout occured
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: ... 2118044 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
Uncompressing Linux... done, booting the kernel.
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.19.108 (builder@buildhost) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r12648-67b04e767a)) #0 SMP Thu Mar 19 22:48:23 2020
[    0.000000] CPU: ARMv7 Processor [413fc090] revision 0 (ARMv7), cr=10c5387d
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt: Machine model: Phicomm K3
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] Hit pending asynchronous external abort (FSR=0x00001c06) during first unmask, this is most likely caused by a firmware/bootloader bug.
[    0.000000] random: get_random_bytes called from start_kernel+0x84/0x440 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu s26700 r8192 d22452 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 130784
[    0.000000] Kernel command line: console=ttyS0,115200
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Memory: 511764K/524288K available (4645K kernel code, 145K rwdata, 1136K rodata, 1024K init, 288K bss, 12524K reserved, 0K cma-reserved, 393216K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xc8800000 - 0xff800000   ( 880 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xc8000000   ( 128 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0x(ptrval) - 0x(ptrval)   (5638 kB)
[    0.000000]       .init : 0x(ptrval) - 0x(ptrval)   (1024 kB)
[    0.000000]       .data : 0x(ptrval) - 0x(ptrval)   ( 146 kB)
[    0.000000]        .bss : 0x(ptrval) - 0x(ptrval)   ( 289 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] L2C: DT/platform modifies aux control register: 0x0a130000 -> 0x0a530000
[    0.000000] L2C-310 enabling early BRESP for Cortex-A9
[    0.000000] L2C-310 full line of zeros enabled for Cortex-A9
[    0.000000] L2C-310 ID prefetch enabled, offset 1 lines
[    0.000000] L2C-310 dynamic clock gating enabled, standby mode enabled
[    0.000000] L2C-310 cache controller enabled, 16 ways, 256 kB
[    0.000000] L2C-310: CACHE_ID 0x410000c8, AUX_CTRL 0x7e530001
[    0.000010] sched_clock: 64 bits at 700MHz, resolution 1ns, wraps every 4398046511103ns
[    0.000022] clocksource: arm_global_timer: mask: 0xffffffffffffffff max_cycles: 0xa17102bcf3, max_idle_ns: 440795224838 ns
[    0.000041] Switching to timer-based delay loop, resolution 1ns
[    0.000212] Calibrating delay loop (skipped), value calculated using timer frequency.. 1400.00 BogoMIPS (lpj=7000000)
[    0.000222] pid_max: default: 32768 minimum: 301
[    0.000312] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000319] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000821] CPU: Testing write buffer coherency: ok
[    0.000848] CPU0: Spectre v2: using BPIALL workaround
[    0.001098] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.001478] Setting up static identity map for 0x100000 - 0x10003c
[    0.001603] rcu: Hierarchical SRCU implementation.
[    0.001966] smp: Bringing up secondary CPUs ...
[    0.002533] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[    0.002539] CPU1: Spectre v2: using BPIALL workaround
[    0.002625] smp: Brought up 1 node, 2 CPUs
[    0.002635] SMP: Total of 2 processors activated (2800.00 BogoMIPS).
[    0.002641] CPU: WARNING: CPU(s) started in wrong/inconsistent modes (primary CPU mode 0x13)
[    0.002645] CPU: This may indicate a broken bootloader or firmware.
[    0.004303] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.004322] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.004471] pinctrl core: initialized pinctrl subsystem
[    0.004929] NET: Registered protocol family 16
[    0.005517] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.015986] clocksource: Switched to clocksource arm_global_timer
[    0.017000] NET: Registered protocol family 2
[    0.017581] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes)
[    0.017608] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.017621] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    0.017635] TCP: Hash tables configured (established 1024 bind 1024)
[    0.017712] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.017743] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.017897] NET: Registered protocol family 1
[    0.018575] Crashlog allocated RAM at address 0x3f00000
[    0.019129] workingset: timestamp_bits=14 max_order=17 bucket_order=3
[    0.022946] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.022963] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.026400] bounce: pool size: 64 pages
[    0.026419] io scheduler noop registered
[    0.026425] io scheduler deadline registered (default)
[    0.027614] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.029205] console [ttyS0] disabled
[    0.029263] 18000300.serial: ttyS0 at MMIO 0x18000300 (irq = 18, base_baud = 7812500) is a 16550
[    0.526316] console [ttyS0] enabled
[    0.530300] 18000400.serial: ttyS1 at MMIO 0x18000400 (irq = 18, base_baud = 7812500) is a 16550
[    0.540413] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xda
[    0.546804] nand: AMD/Spansion S34ML02G2
[    0.550736] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 128
[    0.558425] iproc_nand 18028000.nand: detected 256MiB total, 128KiB blocks, 2KiB pages, 32B OOB, 8-bit, BCH-4
[    0.568373] Scanning device for bad blocks
[    0.593171] random: fast init done
[    1.674182] random: crng init done
[    2.517103] 4 fixed-partitions partitions found on MTD device brcmnand.0
[    2.523829] Creating 4 MTD partitions on "brcmnand.0":
[    2.528984] 0x000000000000-0x000000080000 : "boot"
[    2.534366] 0x000000080000-0x000000180000 : "nvram"
[    2.539797] 0x000000180000-0x000000400000 : "phicomm"
[    2.545410] 0x000000400000-0x000008000000 : "firmware"
[    2.552195] MTD reading error: -74
[    2.556051] bcm_iproc 18029200.spi: using bspi-mspi mode
[    2.562420] libphy: iProc MDIO bus: probed
[    2.566578] iproc-mdio 18003000.mdio: Broadcom iProc MDIO bus at 0x03c43e02
[    2.573835] libphy: mdio_mux: probed
[    2.578090] libphy: Fixed MDIO Bus: probed
[    2.582255] bgmac_bcma: Broadcom 47xx GBit MAC driver loaded
[    2.588304] bcma-host-soc 18000000.axi: bus0: Found chip with id 53030, rev 0x00 and package 0x00
[    2.597268] bcma-host-soc 18000000.axi: bus0: Core 0 found: ChipCommon (manuf 0x4BF, id 0x800, rev 0x2A, class 0x0)
[    2.607826] bcma-host-soc 18000000.axi: bus0: Core 1 found: Chipcommon B (manuf 0x4BF, id 0x50B, rev 0x05, class 0x0)
[    2.618551] bcma-host-soc 18000000.axi: bus0: Core 2 found: DMA (manuf 0x4BF, id 0x502, rev 0x04, class 0x0)
[    2.628517] bcma-host-soc 18000000.axi: bus0: Core 3 found: GBit MAC (manuf 0x4BF, id 0x82D, rev 0x07, class 0x0)
[    2.638908] bcma-host-soc 18000000.axi: bus0: Core 4 found: GBit MAC (manuf 0x4BF, id 0x82D, rev 0x07, class 0x0)
[    2.649301] bcma-host-soc 18000000.axi: bus0: Core 5 found: GBit MAC (manuf 0x4BF, id 0x82D, rev 0x07, class 0x0)
[    2.659694] bcma-host-soc 18000000.axi: bus0: Core 6 found: GBit MAC (manuf 0x4BF, id 0x82D, rev 0x07, class 0x0)
[    2.670055] bcma-host-soc 18000000.axi: bus0: Core 7 found: PCIe Gen 2 (manuf 0x4BF, id 0x501, rev 0x07, class 0x0)
[    2.680590] bcma-host-soc 18000000.axi: bus0: Core 8 found: PCIe Gen 2 (manuf 0x4BF, id 0x501, rev 0x07, class 0x0)
[    2.691145] bcma-host-soc 18000000.axi: bus0: Core 9 found: PCIe Gen 2 (manuf 0x4BF, id 0x501, rev 0x07, class 0x0)
[    2.701703] bcma-host-soc 18000000.axi: bus0: Core 10 found: ARM Cortex A9 core (ihost) (manuf 0x4BF, id 0x510, rev 0x07, class 0x0)
[    2.713731] bcma-host-soc 18000000.axi: bus0: Core 11 found: USB 2.0 (manuf 0x4BF, id 0x504, rev 0x07, class 0x0)
[    2.724101] bcma-host-soc 18000000.axi: bus0: Core 12 found: USB 3.0 (manuf 0x4BF, id 0x505, rev 0x07, class 0x0)
[    2.734479] bcma-host-soc 18000000.axi: bus0: Core 13 found: SDIO3 (manuf 0x4BF, id 0x503, rev 0x01, class 0x0)
[    2.744678] bcma-host-soc 18000000.axi: bus0: Core 14 found: I2S (manuf 0x4BF, id 0x834, rev 0x03, class 0x0)
[    2.754713] bcma-host-soc 18000000.axi: bus0: Core 15 found: ARM Cortex A9 JTAG (manuf 0x4BF, id 0x506, rev 0x01, class 0x0)
[    2.766049] bcma-host-soc 18000000.axi: bus0: Core 16 found: Denali DDR2/DDR3 memory controller (manuf 0x4BF, id 0x507, rev 0x01, class 0x0)
[    2.778777] bcma-host-soc 18000000.axi: bus0: Core 17 found: ROM (manuf 0x4BF, id 0x508, rev 0x08, class 0x0)
[    2.788829] bcma-host-soc 18000000.axi: bus0: Core 18 found: NAND flash controller (manuf 0x4BF, id 0x509, rev 0x01, class 0x0)
[    2.800423] bcma-host-soc 18000000.axi: bus0: Core 19 found: SPI flash controller (manuf 0x4BF, id 0x50A, rev 0x01, class 0x0)
[    2.811855] bcma-host-soc 18000000.axi: bus0: Flash type not supported
[    2.830210] bgmac_bcma bcma0:3: Found PHY addr: 0
[    2.834978] bgmac_bcma bcma0:3: Invalid MAC addr: 00:00:00:00:00:00
[    2.841266] bgmac_bcma bcma0:3: Using random MAC: 9a:b2:32:f4:8a:68
[    2.871372] b53_common: found switch: BCM53012, rev 0
[    2.877131] bgmac_bcma bcma0:4: Found PHY addr: 0
[    2.881865] bgmac_bcma bcma0:4: Invalid MAC addr: 00:00:00:00:00:00
[    2.888174] bgmac_bcma bcma0:4: Using random MAC: 96:3d:e4:28:97:a0
[    2.896249] bgmac_bcma bcma0:5: Found PHY addr: 0
[    2.900979] bgmac_bcma bcma0:5: Invalid MAC addr: 00:00:00:00:00:00
[    2.907288] bgmac_bcma bcma0:5: Using random MAC: 96:50:b4:a4:85:19
[    2.915365] bgmac_bcma bcma0:6: Unsupported core_unit 3
[    2.920642] bgmac_bcma: probe of bcma0:6 failed with error -524
[    3.042542] pcie_iproc_bcma bcma0:7: link: UP
[    3.047012] pcie_iproc_bcma bcma0:7: PCI host bridge to bus 0000:00
[    3.053314] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fffffff]
[    3.060206] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    3.068186] pci_bus 0000:00: 2-byte config write to 0000:00:00.0 offset 0x4 may corrupt adjacent RW1C bits
[    3.077874] pci_bus 0000:00: 2-byte config write to 0000:00:00.0 offset 0x4 may corrupt adjacent RW1C bits
[    3.087602] pci_bus 0000:00: 2-byte config write to 0000:00:00.0 offset 0x4c may corrupt adjacent RW1C bits
[    3.098053] pci_bus 0000:00: 2-byte config write to 0000:00:00.0 offset 0x3e may corrupt adjacent RW1C bits
[    3.107830] pci_bus 0000:00: 2-byte config write to 0000:00:00.0 offset 0x4 may corrupt adjacent RW1C bits
[    3.117510] pci_bus 0000:00: 1-byte config write to 0000:00:00.0 offset 0xc may corrupt adjacent RW1C bits
[    3.127185] PCI: bus0: Fast back to back transfers disabled
[    3.132776] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    3.140796] pci_bus 0000:00: 2-byte config write to 0000:00:00.0 offset 0x3e may corrupt adjacent RW1C bits
[    3.150567] pci_bus 0000:00: 2-byte config write to 0000:00:00.0 offset 0xc8 may corrupt adjacent RW1C bits
[    3.160333] pci_bus 0000:00: 2-byte config write to 0000:00:00.0 offset 0x3e may corrupt adjacent RW1C bits
[    3.170103] pci_bus 0000:00: 2-byte config write to 0000:00:00.0 offset 0x3e may corrupt adjacent RW1C bits
[    3.180771] PCI: bus1: Fast back to back transfers disabled
[    3.186418] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x080fffff]
[    3.193231] pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x08007fff 64bit]
[    3.200565] pci 0000:00:00.0: PCI bridge to [bus 01]
[    3.205552] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x080fffff]
[    3.332541] pcie_iproc_bcma bcma0:8: link: UP
[    3.336993] pcie_iproc_bcma bcma0:8: PCI host bridge to bus 0001:00
[    3.343293] pci_bus 0001:00: root bus resource [mem 0x20000000-0x27ffffff]
[    3.350187] pci_bus 0001:00: No busn resource found for root bus, will use [bus 00-ff]
[    3.358867] PCI: bus0: Fast back to back transfers disabled
[    3.364467] pci 0001:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    3.373403] PCI: bus1: Fast back to back transfers disabled
[    3.379034] pci 0001:00:00.0: BAR 8: assigned [mem 0x20000000-0x20bfffff]
[    3.385853] pci 0001:00:00.0: BAR 9: assigned [mem 0x20c00000-0x20cfffff 64bit pref]
[    3.393622] pci 0001:01:00.0: BAR 2: assigned [mem 0x20000000-0x207fffff 64bit]
[    3.400959] pci 0001:01:00.0: BAR 4: assigned [mem 0x20c00000-0x20cfffff 64bit pref]
[    3.408735] pci 0001:01:00.0: BAR 0: assigned [mem 0x20800000-0x20807fff 64bit]
[    3.416071] pci 0001:00:00.0: PCI bridge to [bus 01]
[    3.421047] pci 0001:00:00.0:   bridge window [mem 0x20000000-0x20bfffff]
[    3.427859] pci 0001:00:00.0:   bridge window [mem 0x20c00000-0x20cfffff 64bit pref]
[    3.552538] pcie_iproc_bcma bcma0:9: PHY or data link is INACTIVE!
[    3.558734] pcie_iproc_bcma bcma0:9: no PCIe EP device detected
[    3.564680] pcie_iproc_bcma bcma0:9: PCIe controller setup failed
[    3.571624] bcm47xx-wdt bcm47xx-wdt.0: BCM47xx Watchdog Timer enabled (30 seconds, Software Timer)
[    3.580672] bcma-host-soc 18000000.axi: bus0: Bus registered
[    3.586644] pci 0000:00:00.0: enabling device (0140 -> 0142)
[    3.592333] bcma-pci-bridge 0000:01:00.0: enabling device (0140 -> 0142)
[    3.599092] bcma-pci-bridge 0000:01:00.0: bus1: Found chip with id 0x4360, rev 0x03 and package 0x01
[    3.608284] bcma-pci-bridge 0000:01:00.0: bus1: Core 0 found: ChipCommon (manuf 0x4BF, id 0x800, rev 0x2B, class 0x0)
[    3.618935] bcma-pci-bridge 0000:01:00.0: bus1: Core 1 found: IEEE 802.11 (manuf 0x4BF, id 0x812, rev 0x2A, class 0x0)
[    3.629683] bcma-pci-bridge 0000:01:00.0: bus1: Core 2 found: ARM CR4 (manuf 0x4BF, id 0x83E, rev 0x02, class 0x0)
[    3.640081] bcma-pci-bridge 0000:01:00.0: bus1: Core 3 found: PCIe Gen2 (manuf 0x4BF, id 0x83C, rev 0x01, class 0x0)
[    3.650651] bcma-pci-bridge 0000:01:00.0: bus1: Core 4 found: USB 2.0 Device (manuf 0x4BF, id 0x81A, rev 0x11, class 0x0)
[    3.693123] bcma-pci-bridge 0000:01:00.0: bus1: Invalid SPROM read from the PCIe card, trying to use fallback SPROM
[    3.722855] bcma-pci-bridge 0000:01:00.0: bus1: Bus registered
[    3.729472] NET: Registered protocol family 10
[    3.735023] Segment Routing with IPv6
[    3.738761] NET: Registered protocol family 17
[    3.743296] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    3.756288] 8021q: 802.1Q VLAN Support v1.8
[    3.760508] Registering SWP/SWPB emulation handler
[    3.767728] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    3.775260] Please append a correct "root=" boot option; here are the available partitions:
[    3.783646] 1f00             512 mtdblock0 
[    3.783648]  (driver?)
[    3.790201] 1f01            1024 mtdblock1 
[    3.790203]  (driver?)
[    3.796755] 1f02            2560 mtdblock2 
[    3.796756]  (driver?)
[    3.803313] 1f03          126976 mtdblock3 
[    3.803315]  (driver?)
[    3.809862] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    3.818142] CPU0: stopping
[    3.820858] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.19.108 #0
[    3.826962] Hardware name: BCM5301X
[    3.830454] Backtrace: 
[    3.832917] [<c0106ae8>] (dump_backtrace) from [<c0106d44>] (show_stack+0x18/0x1c)
[    3.840501]  r7:00000000 r6:60000193 r5:00000000 r4:c08239a4
[    3.846179] [<c0106d2c>] (show_stack) from [<c057043c>] (dump_stack+0x9c/0xb0)
[    3.853420] [<c05703a0>] (dump_stack) from [<c0108548>] (handle_IPI+0xf8/0x1a4)
[    3.860745]  r7:00000000 r6:00000000 r5:c0801ee8 r4:c0824708
[    3.866417] [<c0108450>] (handle_IPI) from [<c0350284>] (gic_handle_irq+0x94/0x98)
[    3.874001]  r7:c8802100 r6:c880210c r5:c0815148 r4:c0804058
[    3.879669] [<c03501f0>] (gic_handle_irq) from [<c0101a0c>] (__irq_svc+0x6c/0x90)
[    3.887169] Exception stack(0xc0801ee8 to 0xc0801f30)
[    3.892228] 1ee0:                   00000000 00030ed4 c69572b0 c010f400 ffffe000 c0803c6c
[    3.900420] 1f00: 00000001 c0803cac c080ad71 c0639e6c 00000001 c0801f44 c0801f48 c0801f38
[    3.908617] 1f20: c0103534 c0103538 60000013 ffffffff
[    3.913676]  r9:c0800000 r8:c080ad71 r7:c0801f1c r6:ffffffff r5:60000013 r4:c0103538
[    3.921450] [<c01034fc>] (arch_cpu_idle) from [<c0588e50>] (default_idle_call+0x30/0x34)
[    3.929570] [<c0588e20>] (default_idle_call) from [<c01402ac>] (do_idle+0xc8/0x128)
[    3.937246] [<c01401e4>] (do_idle) from [<c0140574>] (cpu_startup_entry+0x20/0x24)
[    3.944836]  r10:c7ffcd80 r9:c072ea30 r8:00000001 r7:ffffffff r6:c0803c40 r5:c0824480
[    3.952684]  r4:000000c7 r3:c073714c
[    3.956265] [<c0140554>] (cpu_startup_entry) from [<c0583388>] (rest_init+0xb0/0xb4)
[    3.964029] [<c05832d8>] (rest_init) from [<c0700e04>] (start_kernel+0x430/0x440)
[    3.971528]  r5:c0824480 r4:c08244cc
[    3.975107] [<c07009d4>] (start_kernel) from [<00000000>] (  (null))
[    3.981470]  r10:10c5387d r9:413fc090 r8:00a27720 r7:000000ff r6:10c0387d r5:00000051
[    3.989310]  r4:c0700330
[    3.992344] Rebooting in 1 seconds..

How I modify K3 firmware to compatible Ubee router with Quick build image Openwrt,Thank. Sorry my bad English

no quick build [naughty!]... get yourself a buildroot and modify the dts...

  • start with your partition layout

while it's risky... ( you should typically work with booting an initramfs and not flashing )... if your careful and have a method of recovery ( don't stuff uboot ) you should be ok.

Other than that... do a search and use the wiki and forum to find out about adding devices... ( leds, mac detection ) ( by all means seek help on things you try and fail... :slight_smile: )

1 Like

I also have another Uber rac2v1u. How I clone stock fine firmware to the bricked router. Thank so much

I used asus ac5300 dd-wrt firmware. An it's working