Xiaomi WiFi Router 3G - bricked

Hi,
I recently purchased this router, and immediately decided to flash it with using the following guide

After flashing, the router is now in a boot cycle.
Here is the ssh session from when I flashed:
image(1)

I've also connected through serial to get the boot logs (see below). I've searched for similar issues online but couldn't find anything that corresponds to the issue.
I could probably restore the route using kernel0.bin (as suggested in many places), but without knowing what went wrong, I feel like it might just go back to boot cycling after I reflash.
Any help appreciated!

===================================================================

     		MT7621   stage1 code 10:33:11 (ASIC)

     		CPU=50000000 HZ BUS=12500000 HZ

==================================================================

Change MPLL source from XTAL to CR...

do MEMPLL setting..

MEMPLL Config : 0x11100000

3PLL mode + External loopback

=== XTAL-40Mhz === DDR-1200Mhz ===

PLL4 FB_DL: 0x0, 1/0 = 894/130 01000000

PLL3 FB_DL: 0x8, 1/0 = 622/402 21000000

PLL2 FB_DL: 0xc, 1/0 = 693/331 31000000

do DDR setting..[00320381]

Apply DDR3 Setting...(use customer AC)

          0    8   16   24   32   40   48   56   64   72   80   88   96  104  112  120

      --------------------------------------------------------------------------------

0000:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0001:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0002:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0003:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0004:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0005:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0006:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0007:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0008:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0009:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

000A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

000B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

000C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

000D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    1

000E:|    0    0    0    0    0    0    0    0    0    1    1    1    1    1    1    1

000F:|    0    0    0    0    1    1    1    1    1    1    1    1    1    1    0    0

0010:|    1    1    1    1    1    1    1    1    0    0    0    0    0    0    0    0

0011:|    1    1    1    1    0    0    0    0    0    0    0    0    0    0    0    0

0012:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0013:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0014:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0015:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0016:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0017:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0018:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0019:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001E:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001F:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

rank 0 coarse = 15

rank 0 fine = 72

B:|    0    0    0    0    0    0    0    1    1    1    0    0    0    0    0    0

opt_dle value:8

DRAMC_R0DELDLY[018]=00001E1F

==================================================================

		RX	DQS perbit delay software calibration 

==================================================================

1.0-15 bit dq delay value

==================================================================

bit|     0  1  2  3  4  5  6  7  8  9

--------------------------------------

0 |    10 7 10 10 7 8 9 7 3 7 

10 |    6 8 7 10 6 9 

--------------------------------------



==================================================================

2.dqs window

x=pass dqs delay value (min~max)center 

y=0-7bit DQ of every group

input delay:DQS0 =31 DQS1 = 30

==================================================================

bit	DQS0	 bit      DQS1

0  (0~60)30  8  (1~56)28

1  (2~57)29  9  (2~55)28

2  (1~56)28  10  (1~56)28

3  (1~60)30  11  (1~55)28

4  (0~60)30  12  (1~58)29

5  (1~58)29  13  (1~57)29

6  (2~57)29  14  (1~58)29

7  (1~62)31  15  (1~59)30

==================================================================

3.dq delay value last

==================================================================

bit|    0  1  2  3  4  5  6  7  8   9

--------------------------------------

0 |    11 9 13 11 8 10 11 7 5 9 

10 |    8 10 8 11 7 9 

==================================================================

==================================================================

     TX  perbyte calibration 

==================================================================

DQS loop = 15, cmp_err_1 = ffff0000 

dqs_perbyte_dly.last_dqsdly_pass[0]=15,  finish count=1 

dqs_perbyte_dly.last_dqsdly_pass[1]=15,  finish count=2 

DQ loop=15, cmp_err_1 = ffff05ea

DQ loop=14, cmp_err_1 = ffff00aa

dqs_perbyte_dly.last_dqdly_pass[1]=14,  finish count=1 

DQ loop=13, cmp_err_1 = ffff00a0

DQ loop=12, cmp_err_1 = ffff0000

dqs_perbyte_dly.last_dqdly_pass[0]=12,  finish count=2 

byte:0, (DQS,DQ)=(9,8)

byte:1, (DQS,DQ)=(8,8)

20,data:89

[EMI] DRAMC calibration passed




===================================================================

     		MT7621   stage1 code done 

     		CPU=50000000 HZ BUS=12500000 HZ

===================================================================



U-Boot 1.1.3 (Jul 14 2017 - 15:16:26)


Board: Ralink APSoC DRAM:  256 MB

Power on memory test. Memory size= 256 MB...OK!

relocate_code Pointer at: 8ffac000


Config XHCI 40M PLL 

******************************

Software System Reset Occurred

******************************

Allocate 16 byte aligned buffer: 8ffdff50

Enable NFI Clock

# MTK NAND # : Use HW ECC

NAND ID [C8 D1 80 95 40]

Device not found, ID: c8d1

Not Support this Device! 

chip_mode=00000001

Support this Device in MTK table! c8d1 

select_chip

[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16

Signature matched and data read!

load_fact_bbt success 1023

load fact bbt success

[mtk_nand] probe successfully!

mtd->writesize=2048 mtd->oobsize=64,	mtd->erasesize=131072  devinfo.iowidth=8

..============================================ 

Ralink UBoot Version: 5.0.0.0

-------------------------------------------- 

ASIC MT7621A DualCore (MAC to MT7530 Mode)

DRAM_CONF_FROM: Auto-Detection 

DRAM_TYPE: DDR3 

DRAM bus: 16 bit

Xtal Mode=5 OCP Ratio=1/4

Flash component: NAND Flash

Date:Jul 14 2017  Time:15:16:26

============================================ 

icache: sets:256, ways:4, linesz:32 ,total:32768

dcache: sets:256, ways:4, linesz:32 ,total:32768 


 ##### The CPU freq = 880 MHZ #### 

 estimate memory size =256 Mbytes

#Reset_MT7530

set LAN/WAN LWLLL


Please choose the operation: 

   1: Load system code to SDRAM via TFTP. 

   2: Load system code then write to Flash via TFTP. 

   3: Boot system code via Flash (default).

   4: Entr boot command line interface.

   7: Load Boot Loader code then write to Flash via Serial. 

   9: Load Boot Loader code then write to Flash via TFTP. 

    4     3     2     1     0 

Booting System 2

..ranand_erase: start:80000, len:20000 

..Done!

done

   

3: System Boot system code via Flash.

## Booting image at bc600000 ...

   Image Name:   MIPS OpenWrt Linux-4.14.132

   Image Type:   MIPS Linux Kernel Image (lzma compressed)

   Data Size:    2090462 Bytes =  2 MB

   Load Address: 80001000

   Entry Point:  80001000

................................   Verifying Checksum ... OK

   Uncompressing Kernel Image ... OK

commandline uart_en=0 factory_mode=0 usb_u3=1

No initrd

## Transferring control to Linux (at address 80001000) ...

## Giving linux memsize in MB, 256


Starting kernel ...


[    0.000000] Linux version 4.14.132 (builder@buildhost) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r10571-1282a63027)) #0 SMP Tue Jul 23 12:54:07 2019
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is Xiaomi Mi Router 3G
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 10000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x000000000fffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x000000000fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x000000000fffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x9c/0x4e0 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu s26128 r8192 d23024 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 64960
[    0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Writing ErrCtl register=00058c00
[    0.000000] Readback ErrCtl register=00058c00
[    0.000000] Memory: 251428K/262144K available (5003K kernel code, 260K rwdata, 1076K rodata, 1264K init, 260K bss, 10716K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] CPU Clock: 880MHz
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.007811] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.073978] pid_max: default: 32768 minimum: 301
[    0.078800] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.085310] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.094469] Hierarchical SRCU implementation.
[    0.099692] smp: Bringing up secondary CPUs ...
[    0.106312] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.106321] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.106332] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.106469] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.164447] Synchronize counters for CPU 1: done.
[    0.200437] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.200446] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.200455] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.200532] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.255662] Synchronize counters for CPU 2: done.
[    0.287527] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.287536] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.287544] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.287621] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.340843] Synchronize counters for CPU 3: done.
[    0.370709] smp: Brought up 1 node, 4 CPUs
[    0.379022] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.388823] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.395226] pinctrl core: initialized pinctrl subsystem
[    0.401948] NET: Registered protocol family 16
[    0.417062] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.722506] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.727539] ***** Xtal 40MHz *****
[    0.730910] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.736024] Port 0 N_FTS = 1b105000
[    0.739462] Port 1 N_FTS = 1b105000
[    0.742920] Port 2 N_FTS = 1b102800
[    1.898417] PCIE2 no card, disable it(RST&CLK)
[    1.902765]  -> 21007f2
[    1.905181] PCIE0 enabled
[    1.907787] PCIE1 enabled
[    1.910375] PCI host bridge /pcie@1e140000 ranges:
[    1.915139]  MEM 0x0000000060000000..0x000000006fffffff
[    1.920325]   IO 0x000000001e160000..0x000000001e16ffff
[    1.925492] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    1.942391] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.948273] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.954005] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.961779] PCI host bridge to bus 0000:00
[    1.965815] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    1.972649] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    1.978501] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    1.985258] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.995049] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.001589] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.008481] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000]
[    2.015054] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.021952] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.028711] pci 0000:00:01.0: BAR 8: assigned [mem 0x60100000-0x601fffff]
[    2.035433] pci 0000:00:01.0: BAR 9: assigned [mem 0x60200000-0x602fffff pref]
[    2.042617] pci 0000:00:00.0: BAR 1: assigned [mem 0x60300000-0x6030ffff]
[    2.049351] pci 0000:00:01.0: BAR 1: assigned [mem 0x60310000-0x6031ffff]
[    2.056105] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff]
[    2.062818] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.067763] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.074490] pci 0000:02:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit]
[    2.081772] pci 0000:02:00.0: BAR 6: assigned [mem 0x60200000-0x6020ffff pref]
[    2.088913] pci 0000:00:01.0: PCI bridge to [bus 02]
[    2.093853] pci 0000:00:01.0:   bridge window [mem 0x60100000-0x601fffff]
[    2.100576] pci 0000:00:01.0:   bridge window [mem 0x60200000-0x602fffff pref]
[    2.109073] clocksource: Switched to clocksource GIC
[    2.115717] NET: Registered protocol family 2
[    2.120833] TCP established hash table entries: 2048 (order: 1, 8192 bytes)
[    2.127719] TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
[    2.134181] TCP: Hash tables configured (established 2048 bind 2048)
[    2.140601] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.146368] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.152845] NET: Registered protocol family 1
[    2.389020] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.395280] Crashlog allocated RAM at address 0x3f00000
[    2.400932] workingset: timestamp_bits=14 max_order=16 bucket_order=2
[    2.413921] random: fast init done
[    2.414802] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.423098] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.436563] io scheduler noop registered
[    2.440476] io scheduler deadline registered (default)
[    2.446504] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    2.455933] console [ttyS0] disabled
[    2.459529] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 19, base_baud = 3125000) is a 16550A
[    2.468485] console [ttyS0] enabled
[    2.468485] console [ttyS0] enabled
[    2.475394] bootconsole [early0] disabled
[    2.475394] bootconsole [early0] disabled
[    2.484061] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    2.490912] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.497972] Enable NFI Clock
[    2.500964] # MTK NAND # : Use HW ECC
[    2.504629] Device found in MTK table, ID: c8d1, EXT_ID: 809540
[    2.510541] Support this Device in MTK table! c8d1 

[    2.515489] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.521971] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0xd1
[    2.528292] nand: ESMT NAND 128MiB 3,3V 8-bit
[    2.532647] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.540231] Scanning device for bad blocks
[    2.688615] 10 fixed-partitions partitions found on MTD device MT7621-NAND
[    2.695475] Creating 10 MTD partitions on "MT7621-NAND":
[    2.700796] 0x000000000000-0x000000080000 : "Bootloader"
[    2.707183] 0x000000080000-0x0000000c0000 : "Config"
[    2.713073] 0x0000000c0000-0x000000100000 : "Bdata"
[    2.718856] 0x000000100000-0x000000140000 : "Factory"
[    2.724930] 0x000000140000-0x000000180000 : "crash"
[    2.730776] 0x000000180000-0x0000001c0000 : "crash_syslog"
[    2.737234] 0x0000001c0000-0x000000200000 : "reserved0"
[    2.743425] 0x000000200000-0x000000600000 : "kernel_stock"
[    2.749921] 0x000000600000-0x000000a00000 : "kernel"
[    2.755779] 0x000000a00000-0x000007f80000 : "ubi"
[    2.762398] [mtk_nand] probe successfully!
[    2.767206] Signature matched and data read!
[    2.771495] load_fact_bbt success 1023
[    2.775907] libphy: Fixed MDIO Bus: probed
[    2.851673] libphy: mdio: probed
[    4.255346] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.262048] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 21
[    4.272795] NET: Registered protocol family 10
[    4.278798] Segment Routing with IPv6
[    4.282579] NET: Registered protocol family 17
[    4.287078] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    4.299995] 8021q: 802.1Q VLAN Support v1.8
[    4.307078] UBI: auto-attach mtd9
[    4.310462] ubi0: attaching mtd9
[    5.420258] ubi0: scanning is finished
[    5.440461] ubi0: attached mtd9 (name "ubi", size 117 MiB)
[    5.445938] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.452809] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.459581] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.466507] ubi0: good PEBs: 940, bad PEBs: 0, corrupted PEBs: 0
[    5.472499] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    5.479705] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 540486296
[    5.488707] ubi0: available PEBs: 0, total reserved PEBs: 940, PEBs reserved for bad PEB handling: 20
[    5.497919] ubi0: background thread "ubi_bgt0d" started, PID 404
[    5.499693] block ubiblock0_0: created from ubi0:0(rootfs)
[    5.509389] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    5.516328] hctosys: unable to open rtc device (rtc0)
[    5.521621] usb_vbus: disabling
[    5.530679] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    5.542069] Freeing unused kernel memory: 1264K
[    5.546596] This architecture does not have kernel memory protection.
[    5.995172] init: Console is alive
[    5.998790] init: - watchdog -
[    6.616290] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.705800] usbcore: registered new interface driver usbfs
[    6.711417] usbcore: registered new interface driver hub
[    6.716893] usbcore: registered new device driver usb
[    6.729890] xhci-mtk 1e1c0000.xhci: 1e1c0000.xhci supply vusb33 not found, using dummy regulator
[    6.738810] xhci-mtk 1e1c0000.xhci: xHCI Host Controller
[    6.744160] xhci-mtk 1e1c0000.xhci: new USB bus registered, assigned bus number 1
[    6.759239] xhci-mtk 1e1c0000.xhci: hcc params 0x01401198 hci version 0x96 quirks 0x0000000000210010
[    6.768406] xhci-mtk 1e1c0000.xhci: irq 20, io mem 0x1e1c0000
[    6.775239] hub 1-0:1.0: USB hub found
[    6.779092] hub 1-0:1.0: 2 ports detected
[    6.783753] xhci-mtk 1e1c0000.xhci: xHCI Host Controller
[    6.789111] xhci-mtk 1e1c0000.xhci: new USB bus registered, assigned bus number 2
[    6.796575] xhci-mtk 1e1c0000.xhci: Host supports USB 3.0  SuperSpeed
[    6.803215] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    6.812247] hub 2-0:1.0: USB hub found
[    6.816073] hub 2-0:1.0: 1 port detected
[    6.825256] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.839427] init: - preinit -
[    7.604969] mtk_soc_eth 1e100000.ethernet: PPE started
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    7.679832] random: procd: uninitialized urandom read (4 bytes read)
[   10.823747] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 508
[   10.898361] UBIFS (ubi0:1): recovery needed
[   11.000754] UBIFS (ubi0:1): recovery completed
[   11.005330] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[   11.013177] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   11.023071] UBIFS (ubi0:1): FS size: 112627712 bytes (107 MiB, 887 LEBs), journal size 5586944 bytes (5 MiB, 44 LEBs)
[   11.033645] UBIFS (ubi0:1): reserved for root: 4952683 bytes (4836 KiB)
[   11.040250] UBIFS (ubi0:1): media format: w4/r0 (latest is w5/r0), UUID 0C733CCC-29A4-4326-B3FF-FA6F8C02C6CF, small LPT model
[   11.054198] mount_root: overlay filesystem has not been fully initialized yet
[   11.062661] mount_root: switching to ubifs overlay
[   11.087169] urandom-seed: Seed file not found (/etc/urandom.seed)
[   11.167905] mtk_soc_eth 1e100000.ethernet: 0x100 = 0x6060000c, 0x10c = 0x80818
[   11.183157] procd: - early -
[   11.186137] procd: - watchdog -
[   11.879223] procd: - watchdog -
[   11.882679] procd: - ubus -
[   11.911055] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.939901] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.946631] random: ubusd: uninitialized urandom read (4 bytes read)
[   11.954021] procd: - init -
Please press Enter to activate this console.
[   12.520053] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.531572] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.540450] urngd: v1.0.0 started.
[   12.544927] Loading modules backported from Linux version v5.2-rc7-0-g6fbc7275c7a9
[   12.552544] Backport generated by backports.git v5.2-rc7-1-0-g021a6ba1
[   12.561088] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.573367] nf_conntrack version 0.5.0 (4096 buckets, 16384 max)
[   12.622320] xt_time: kernel timezone is -0000
[   12.689153] random: crng init done
[   12.692654] random: 6 urandom warning(s) missed due to ratelimiting
[   12.693429] bus=0x1, slot = 0x0, irq=0xff
[   12.703190] mt7603e 0000:01:00.0: ASIC revision: 76030010
[   12.710859] CPU 2 Unable to handle kernel paging request at virtual address fffffff0, epc == 8f2835c8, ra == 8f2835bc
[   12.721467] Oops[#1]:
[   12.723746] CPU: 2 PID: 633 Comm: kmodloader Not tainted 4.14.132 #0
[   12.730078] task: 8fcf6180 task.stack: 8e9ee000
[   12.734585] $ 0   : 00000000 00000061 ffffffed 00000006
[   12.739802] $ 4   : 807ada00 00000001 00000000 0000000d
[   12.745014] $ 8   : 00000010 804dc880 ffffffff ffffffff
[   12.750227] $12   : ffffffff 80620000 00000000 ffffffff
[   12.755438] $16   : 8f1fd5c0 8f1fd5c0 000f0040 04000000
[   12.760649] $20   : 000f0008 000f0040 8f7ed480 000f0000
[   12.765859] $24   : 00000000 8f280000                  
[   12.771072] $28   : 8e9ee000 8e9efb00 8f260000 8f2835bc
[   12.776284] Hi    : 00000248
[   12.779148] Lo    : e9cb0000
[   12.782037] epc   : 8f2835c8 mt76_eeprom_override+0x38/0xdc [mt76]
[   12.788187] ra    : 8f2835bc mt76_eeprom_override+0x2c/0xdc [mt76]
[   12.794336] Status: 11007c03	KERNEL EXL IE 
[   12.798508] Cause : 40800008 (ExcCode 02)
[   12.802495] BadVA : fffffff0
[   12.805359] PrId  : 0001992f (MIPS 1004Kc)
[   12.809432] Modules linked in: mt7603e(+) mt76 mac80211 iptable_nat ipt_REJECT ipt_MASQUERADE cfg80211 xt_time xt_tcpudp xt_state xt_nat xt_multiport xt_mark xt_mac xt_limit xt_conntrack xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_FLOWOFFLOAD xt_CT slhc nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack iptable_mangle iptable_filter ip_tables crc_ccitt compat ledtrig_usbport nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 leds_gpio xhci_plat_hcd xhci_pci xhci_mtk xhci_hcd gpio_button_hotplug usbcore nls_base usb_common
[   12.872906] Process kmodloader (pid: 633, threadinfo=8e9ee000, task=8fcf6180, tls=77ffaeb8)
[   12.881214] Stack : 00000008 00000400 8f7ed180 8f1fd5c0 000f0040 8f7ed180 8f1fd5c0 8f257664
[   12.889552]         8f258a48 802fa7e0 00000000 8f253214 000003e8 8f1fd5c0 8f1fd5c0 8f258898
[   12.897887]         8f1fd5c0 8fe9cc00 8f1fd5c0 8f258a48 8f1fcbe0 8f1fc1a0 00000008 00000028
[   12.906220]         80600000 8f251d00 00000017 8f7b9280 00000000 8f1fd5c0 00000017 80080ebc
[   12.914556]         8fe71c00 8e9efba8 8f258a48 802f2a54 8f2585e8 8f1fd5c0 00000000 8fe9cc00
[   12.922894]         ...
[   12.925333] Call Trace:
[   12.927770] [<8f2835c8>] mt76_eeprom_override+0x38/0xdc [mt76]
[   12.933619] [<8f257664>] mt7603_eeprom_init+0x2e4/0x504 [mt7603e]
[   12.939707] [<8f251d00>] mt7603_register_device+0x130/0xb8c [mt7603e]
[   12.946135] [<8f250188>] init_module+0x8b4188/0x8b5240 [mt7603e]
[   12.952125] Code: 14400002  00000000  2402ffed <88430003> 26110a9c  98430000  aa230003  ba230000  90430004 
[   12.961854] 
[   12.963516] ---[ end trace 2cae12dc8e0d9023 ]---
[   12.969816] Kernel panic - not syncing: Fatal exception
[   12.976412] Rebooting in 1 seconds..

Posted an issue on the github project, apparently this was fixed in a later firmware. Will report back when I try out latest

This looks like a bug in the kernel you flashed. Try using the 18.06.4 version-- first use the bootloader to tftp and boot the initramfs image, then run its sysupgrade to flash the sysupgrade tar.

thanks mk24. Not 100% certain I know how to do all do you suggest.
If I follow Debricking Xiaomi R3G I guess I should be ok to reflash stock and then restart the procedure.

So flashing to latest fixes the issue. Got unlucky when flashing it seems.
Followed the unbricking steps, and went smoothly.
Thanks for the help!

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.