I managed to get the web recovery portal working but everytime I upload a firmware the console just says:

Data will be downloaded at 0x81000000 in RAM
Upgrade type: firmware
Upload file size: 9699493 bytes
Loading: ### Error: couldn't find start of data in next packet!

I have tried with some different omega2lte firmwares and just some regular omega2 firmwares but it has the same error each time.

For reference I tried these firmwares from http://repo.onioniot.com/omega2/images/:

2021-06-04T21:33:05.000Z 9.3 MB omega2lte-v0.3.3-b251.bin
2023-06-28T21:18:14.000Z 9.3 MB omega2lte-v0.3.4-b257.bin
2020-03-19T23:33:49.000Z 9.3 MB omega2-v0.3.2-b235.bin

Here's some output in the console I could capture:

[ 36.057386] DMA Scheduler Mode=0(LMAC)
[ 36.061217] efuse_probe: efuse = 10000012
[ 36.065389] 1. Phy Mode = 14
[ 36.292112] ERROR: initialization error 781:
[ 36.292112] buffer=383831653539303234373863
[ 36.292112]
[ 36.302300] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[ 36.994255] ERROR: initialization error 781:
[ 36.994255] buffer=383831653539303234373863
[ 36.994255]
[ 37.957332] ERROR: initialization error 781:
[ 37.957332] buffer=383831653539303234373863
[ 37.957332]

ledtrig_heartbeat ledtrig_gpio ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables x_tables nfs msdos snd_pcm_dmaengine snd_compress snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd_rawmidi snd_seq_device snd_hwdep snd soundcore vfat fat ntfs lockd sunrpc grace configfs autofs4 nls_utf8 nls_iso8859_1 nls_cp437 regmap_spi regmap_i2c dma_shared_buffer ecdh_generic kpp ecb cmac
[ 67.197901] crypto_acompress mmc_block usb_storage sdhci_pltfm sdhci mtk_sd mmc_core leds_gpio ohci_platform ohci_hcd ledtrig_transient ehci_platform sd_mod scsi_mod ehci_hcd gpio_button_hotplug ext4 jbd2 mbcache exfat usbcore nls_base usb_common crc16 mii aead crypto_null cryptomgr crc32c_generic crypto_hash
[ 67.225851] Process ifconfig (pid: 2098, threadinfo=867a8000, task=87c23700, tls=77f5fdc0)
[ 67.234222] Stack : c061a000 00090000 000b0000 86b40000 c061a000 86a3fb40 00000000 c073a000
[ 67.242710] 86b15fe8 86aab250 00000001 86a4f9c8 c061a000 86b40000 c073a000 86b15fe8
[ 67.251196] 86b15fe8 7f8eba7c 00008914 86a52530 00008914 86afe244 86b15fe8 00000001
[ 67.259682] 00000100 00000200 873d3800 c061a000 873d3800 c061a000 804a0000 ffffa4ef
[ 67.268167] 7f8eba7c 86ad8ea8 8782d89c 8782d884 867a9cd8 867a9cd8 00000000 00000000
[ 67.276653] ...
[ 67.279135] Call Trace:
[ 67.281636] [<8005ad78>] add_timer+0x8/0x14
[ 67.286363] [<86a5121c>] RTMPSetTimer+0x8c/0x10c [mt_wifi]
[ 67.292876] [<86a3fb40>] MlmeInit+0x1ac/0x2f4 [mt_wifi]
[ 67.299126] [<86a52530>] rt28xx_init+0x124/0x72c [mt_wifi]
[ 67.305651] [<86ad8ea8>] rt28xx_open+0xbc/0x30c [mt_wifi]
[ 67.312092] [<86a69194>] RTMP_COM_IoctlHandle+0x52c/0x984 [mt_wifi]
[ 67.319414] [<86ad87f4>] MainVirtualIF_open+0x74/0x110 [mt_wifi]
[ 67.325991] [<802868b8>] __dev_open+0x128/0x140
[ 67.330588] [<80286b90>] __dev_change_flags+0xe4/0x198
[ 67.335801] [<80286c6c>] dev_change_flags+0x28/0x70
[ 67.340752] [<802f7700>] devinet_ioctl+0x2f0/0x6d0
[ 67.345631] [<802677f4>] sock_ioctl+0x140/0x328
[ 67.350240] [<800e15c0>] vfs_ioctl+0x28/0x40
[ 67.354573] [<800e1764>] do_vfs_ioctl+0xb8/0x728
[ 67.359261] [<800e1e24>] SyS_ioctl+0x50/0x9c
[ 67.363601] [<8001354c>] syscall_common+0x34/0x58
[ 67.368368] Code: 8fa20014 8c820004 0002102b <00020336> 08016b01 8c850008 27bdffd8 afb10020 afb0001c
[ 67.378277]
[ 67.379862] ---[ end trace b6f73e036426644a ]---
[ 67.387894] Kernel panic - not syncing: Fatal exception in interrupt
[ 67.395945] Rebooting in 3 seconds..

/ __ ___ ()__ ___ / __ _ _ ___ ___ ____ _
/ // / _ / / _ / _ \ / // / ' / -) _ / _ /
_/////___//// _////_/_, /_,/
W H A T W I L L Y O U I N V E N T ? /__/"

Board: Onion Omega2 APSoC DRAM: 128 MB
relocate_code Pointer at: 87f60

I just want to be able to unbrick this device.

I tried using that firmware already, I used these three with the same error when trying to load and none of them worked:

2021-06-04T21:33:05.000Z 9.3 MB omega2lte-v0.3.3-b251.bin
2023-06-28T21:18:14.000Z 9.3 MB omega2lte-v0.3.4-b257.bin
2020-03-19T23:33:49.000Z 9.3 MB omega2-v0.3.2-b235.bin

67.107462]
[ 29.727559] FAT-fs (mmcblk0p1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 35.134528] br-lan: port 1(eth0) entered blocking state
[ 35.139843] br-lan: port 1(eth0) entered disabled state
[ 35.145579] device eth0 entered promiscuous mode
[ 35.198911] br-lan: port 1(eth0) entered blocking state
[ 35.204284] br-lan: port 1(eth0) entered forwarding state
[ 35.209964] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[ 35.354234] IPv6: ADDRCONF(NETDEV_UP): br-wlan: link is not ready
[ 36.087798]
[ 36.087798] _ _____ ___ ___ _________ ___ ____
[ 36.087798] | | /| / / _ | / _ / _ \ / / __ / _ / / V1.1
[ 36.087798] | |/ |/ / __ |/ , _/ / / // // / , _/ _/
[ 36.087798] |/|// |//|// _/_//|//
[ 36.087798] Onion Enhanced MT7688 WiFi Driver
[ 36.087798]
[ 36.407406] DMA Scheduler Mode=0(LMAC)
[ 36.411238] efuse_probe: efuse = 10000012
[ 36.415532] 1. Phy Mode = 14
[ 36.627333] ERROR: initialization error 781:
[ 36.627333] buffer=383831653539303234373863
[ 36.627333]
[ 36.639443] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[ 37.312402] ERROR: initialization error 781:
[ 37.312402] buffer=383831653539303234373863
[ 37.312402]
[ 38.277344] ERROR: initialization error 781:
[ 38.277344] buffer=383831653539303234373863
[ 38.277344]
[ 66.817493]
[ 66.817493] _ _____ ___ ___ _________ ___ ____
[ 66.817493] | | /| / / _ | / _ / _ \ / / __ / _ / / V1.1
[ 66.817493] | |/ |/ / __ |/ , _/ / / // // / , _/ _/
[ 66.817493] |/|// |//|// _/_//|/__/
[ 66.817493] Onion Enhanced MT7688 WiFi Driver
[ 66.817493]
[ 66.895463] Kernel bug detected[#1]:
[ 66.899113] CPU: 0 PID: 2105 Comm: ifconfig Not tainted 4.14.81 #0
[ 66.905379] task: 87de1080 task.stack: 86532000
[ 66.909969] $ 0 : 00000000 804f0000 00000001 ffffa4f0
[ 66.915276] $ 4 : c06d3bac ffffa4fa 86e75560 c06d3bac
[ 66.920582] $ 8 : c06b9e24 0000001c 86e40fd8 00000000
[ 66.925887] $12 : 7fbbaad8 00000000 00000000 77f392c0
[ 66.931191] $16 : c06d3bac 00090000 000b0000 86f40000
[ 66.936497] $20 : c06d3bac c06b3000 00000001 7f91ebbc
[ 66.941803] $24 : 00000018 80045dec
[ 66.947109] $28 : 86532000 86533c48 00403a18 86e5121c
[ 66.952416] Hi : 00000000
[ 66.955332] Lo : 0000000a
[ 66.958283] epc : 8005ad78 add_timer+0x8/0x14
[ 66.963401] ra : 86e5121c RTMPSetTimer+0x8c/0x10c [mt_wifi]
[ 66.969313] Status: 1100e403 KERNEL EXL IE
[ 66.973564] Cause : 10800034 (ExcCode 0d)
[ 66.977626] PrId : 00019655 (MIPS 24KEc)
[ 66.981686] Modules linked in: pppoe ppp_async option w1_therm w1_gpio uvcvideo usb_wwan snd_usb_audio qmi_wwan pppox ppp_generic pl2303 nf_conntrack_ipv6 lzo iptable_nat ipt_REJECT ipt_MASQUERADE ftdi_sio cp210x ch341 xt_time xt_tcpudp xt_state xt_nat xt_multiport xt_mark xt_mac xt_limit xt_conntrack xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_FLOWOFFLOAD wire videobuf2_v4l2 usbserial usbnet usblp usbhid ums_usbat ums_sddr55 ums_sddr09 ums_karma ums_jumpshot ums_isd200 ums_freecom ums_datafab ums_cypress ums_alauda uinput spidev snd_usbmidi_lib slhc rfcomm pwm_mediatek_ramips nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack lzo_decompress lzo_compress
[ 67.053517] iptable_mangle iptable_filter ip_tables hwmon hidp hid_generic hci_uart crc_ccitt cdc_wdm cdc_acm btusb btintel bnep bluetooth p44_ledchain snd_soc_simple_card snd_soc_simple_card_utils snd_soc_ralink_i2s snd_soc_wm8960 videobuf2_vmalloc videobuf2_memops videobuf2_core hid v4l2_common videodev evdev snd_soc_core mt_wifi ralink_gdma virt_dma ledtrig_oneshot ledtrig_morse ledtrig_heartbeat ledtrig_gpio ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables x_tables nfs msdos snd_pcm_dmaengine snd_compress snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd_rawmidi snd_seq_device snd_hwdep snd soundcore vfat fat ntfs lockd sunrpc grace configfs autofs4 nls_utf8 nls_iso8859_1 nls_cp437 regmap_spi regmap_i2c dma_shared_buffer ecdh_generic kpp ecb cmac
[ 67.125192] crypto_acompress mmc_block usb_storage sdhci_pltfm sdhci mtk_sd mmc_core leds_gpio ohci_platform ohci_hcd ledtrig_transient ehci_platform sd_mod scsi_mod ehci_hcd gpio_button_hotplug ext4 jbd2 mbcache exfat usbcore nls_base usb_common crc16 mii aead crypto_null cryptomgr crc32c_generic crypto_hash
[ 67.153142] Process ifconfig (pid: 2105, threadinfo=86532000, task=87de1080, tls=77f39dc0)
[ 67.161513] Stack : c0623000 00090000 000b0000 86f40000 c0623000 86e3fb40 00000000 c0743000
[ 67.170001] 86f15fe8 86eab250 00000001 86e4f9c8 c0623000 86f40000 c0743000 86f15fe8
[ 67.178486] 86f15fe8 7f91ebfc 00008914 86e52530 00008914 86efe244 86f15fe8 00000001
[ 67.186972] 00000100 00000200 873f7800 c0623000 873f7800 c0623000 804a0000 ffffa4e8
[ 67.195458] 7f91ebfc 86ed8ea8 8782d89c 8782d884 86533cd8 86533cd8 00000000 00000000
[ 67.203942] ...
[ 67.206424] Call Trace:
[ 67.208923] [<8005ad78>] add_timer+0x8/0x14
[ 67.213650] [<86e5121c>] RTMPSetTimer+0x8c/0x10c [mt_wifi]
[ 67.220162] [<86e3fb40>] MlmeInit+0x1ac/0x2f4 [mt_wifi]
[ 67.226409] [<86e52530>] rt28xx_init+0x124/0x72c [mt_wifi]
[ 67.232934] [<86ed8ea8>] rt28xx_open+0xbc/0x30c [mt_wifi]
[ 67.239373] [<86e69194>] RTMP_COM_IoctlHandle+0x52c/0x984 [mt_wifi]
[ 67.246696] [<86ed87f4>] MainVirtualIF_open+0x74/0x110 [mt_wifi]
[ 67.253271] [<802868b8>] __dev_open+0x128/0x140
[ 67.257869] [<80286b90>] __dev_change_flags+0xe4/0x198
[ 67.263081] [<80286c6c>] dev_change_flags+0x28/0x70
[ 67.268033] [<802f7700>] devinet_ioctl+0x2f0/0x6d0
[ 67.272910] [<802677f4>] sock_ioctl+0x140/0x328
[ 67.277519] [<800e15c0>] vfs_ioctl+0x28/0x40
[ 67.281853] [<800e1764>] do_vfs_ioctl+0xb8/0x728
[ 67.286540] [<800e1e24>] SyS_ioctl+0x50/0x9c
[ 67.290881] [<8001354c>] syscall_common+0x34/0x58
[ 67.295647] Code: 8fa20014 8c820004 0002102b <00020336> 08016b01 8c850008 27bdffd8 afb10020 afb0001c
[ 67.305555]
[ 67.307142] ---[ end trace 89e18d56e036244e ]---
[ 67.315214] Kernel panic - not syncing: Fatal exception in interrupt
[ 67.323366] Rebooting in 3 seconds..

/ __ ___ ()__ ___ / __ _ _ ___ ___ ____ _

/ // / _ / / _ / _ \ / // / ' / -_) _ / _ /

_/////_//// _////_/_, /_,/

W H A T W I L L Y O U I N V E N T ? /___/"

Board: Onion Omega2 APSoC DRAM: 128 MB

relocate_code Pointer at: 87f60000

Software System Reset Occurred

flash manufacture id: ef, device id 40 19

find flash: W25Q256FV

*** Warning - bad CRC, using default environment

============================================

Onion Omega2 UBoot Version: 4.3.0.3

ASIC 7628_MP (Port5<->None)

DRAM component: 1024 Mbits DDR, width 16

DRAM bus: 16 bit

Total memory: 128 MBytes

Flash component: SPI Flash

Date:Nov 18 2022 Time:19:21:40

============================================

icache: sets:512, ways:4, linesz:32 ,total:65536

dcache: sets:256, ways:4, linesz:32 ,total:32768

CPU freq = 575 MHZ

Estimated memory size = 128 Mbytes

Resetting MT7628 PHY.

Initializing MT7688 GPIO system.

wifi mac address = 881E5902478C.

• Hold Reset button for more options *

Boot Linux from Flash NO RESET PRESSED.

Booting image at bc050000 ...

Image Name: MIPS OpenWrt Linux-4.14.81

Image Type: MIPS Linux Kernel Image (lzma compressed)

Data Size: 1617491 Bytes = 1.5 MB

Load Address: 80000000

Entry Point: 80000000

Verifying Checksum ... OK

Uncompressing Kernel Image ... OK

No initrd

Transferring control to Linux (at address 80000000) ...

Giving linux memsize in MB, 128

Starting kernel ...

[ 0.000000] Linux version 4.14.81 (root@d7d1d9c1ebc3) (gcc version 7.3.0 (OpenWrt GCC 7.3.0 r0+7490-bddedc4e25)) #0 Fri Jun 4 20:35:27 2021
[ 0.000000] Board has DDR2
[ 0.000000] Analog PMU set to hw control
[ 0.000000] Digital PMU set to hw control
[ 0.000000] SoC Type: MediaTek MT7688 ver:1 eco:2
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[ 0.000000] MIPS: machine is Onion Omega2 LTE
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 08000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[ 0.000000] random: get_random_bytes called from start_kernel+0x8c/0x474 with crng_init=0
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 32512
[ 0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Writing ErrCtl register=0001f02e
[ 0.000000] Readback ErrCtl register=0001f02e
[ 0.000000] Memory: 124580K/131072K available (3708K kernel code, 207K rwdata, 920K rodata, 212K init, 205K bss, 6492K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS: 256
[ 0.000000] intc: using register map from devicetree
[ 0.000000] CPU Clock: 580MHz
[ 0.000000] timer_probe: no matching timers found
[ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[ 0.000012] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[ 0.007674] Console: colour dummy device 80x25
[ 0.011933] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[ 0.073505] pid_max: default: 32768 minimum: 301
[ 0.078195] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.084537] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.098574] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.108067] futex hash table entries: 256 (order: -1, 3072 bytes)
[ 0.114015] pinctrl core: initialized pinctrl subsystem
[ 0.119593] NET: Registered protocol family 16
[ 0.156039] mt7621_gpio 10000600.gpio: registering 32 gpios
[ 0.161698] mt7621_gpio 10000600.gpio: registering 32 gpios
[ 0.167224] mt7621_gpio 10000600.gpio: registering 32 gpios
[ 0.173880] i2c-mt7621 10000900.i2c: clock 100 kHz
[ 0.183438] clocksource: Switched to clocksource MIPS
[ 0.195522] NET: Registered protocol family 2
[ 0.200670] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.207419] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.213523] TCP: Hash tables configured (established 1024 bind 1024)
[ 0.219787] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.225420] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.231693] NET: Registered protocol family 1
[ 0.250216] Crashlog allocated RAM at address 0x3f00000
[ 0.256832] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[ 0.269156] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.274775] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.294796] io scheduler noop registered
[ 0.298527] io scheduler deadline registered (default)
[ 0.304568] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
[ 0.311904] console [ttyS0] disabled
[ 0.315404] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
[ 0.324125] console [ttyS0] enabled
[ 0.324125] console [ttyS0] enabled
[ 0.331121] bootconsole [early0] disabled
[ 0.331121] bootconsole [early0] disabled
[ 0.339927] 10000d00.uart1: ttyS1 at MMIO 0x10000d00 (irq = 29, base_baud = 2500000) is a 16550A
[ 0.349590] 10000e00.uart2: ttyS2 at MMIO 0x10000e00 (irq = 30, base_baud = 2500000) is a 16550A
[ 0.359123] cacheinfo: Failed to find cpu0 device node
[ 0.364375] cacheinfo: Unable to detect cache hierarchy for CPU 0
[ 0.371331] spi-mt7621 10000b00.spi: sys_freq: 193333333
[ 0.391430] m25p80 spi0.0: w25q256 (32768 Kbytes)
[ 0.396299] 4 fixed-partitions partitions found on MTD device spi0.0
[ 0.402739] Creating 4 MTD partitions on "spi0.0":
[ 0.407619] 0x000000000000-0x000000030000 : "u-boot"
[ 0.413680] 0x000000030000-0x000000040000 : "u-boot-env"
[ 0.419926] 0x000000040000-0x000000050000 : "factory"
[ 0.425973] 0x000000050000-0x000002000000 : "firmware"
[ 0.525267] 2 uimage-fw partitions found on MTD device firmware
[ 0.531295] 0x000000050000-0x0000001dae93 : "kernel"
[ 0.537275] 0x0000001dae93-0x000002000000 : "rootfs"
[ 0.543083] mtd: device 5 (rootfs) set to be root filesystem
[ 0.550348] 1 squashfs-split partitions found on MTD device rootfs
[ 0.556690] 0x000000980000-0x000002000000 : "rootfs_data"
[ 0.564183] libphy: Fixed MDIO Bus: probed
[ 0.577104] rt3050-esw 10110000.esw: link changed 0x00
[ 0.586778] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[ 0.595471] i2c /dev entries driver
[ 0.600868] NET: Registered protocol family 10
[ 0.609628] Segment Routing with IPv6
[ 0.613539] NET: Registered protocol family 17
[ 0.618099] 8021q: 802.1Q VLAN Support v1.8
[ 0.629558] VFS: Mounted root (squashfs filesystem) readonly on device 31:5.
[ 0.637933] Freeing unused kernel memory: 212K
[ 0.642438] This architecture does not have kernel memory protection.
[ 1.548653] init: Console is alive
[ 1.552340] init: - watchdog -
[ 2.243447] random: fast init done
[ 5.188454] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[ 5.472165] usbcore: registered new interface driver usbfs
[ 5.477910] usbcore: registered new interface driver hub
[ 5.483401] usbcore: registered new device driver usb
[ 5.494981] exFAT: Version 1.2.9
[ 5.533929] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 5.550491] SCSI subsystem initialized
[ 5.560000] ehci-platform: EHCI generic platform driver
[ 5.575694] phy phy-10120000.usbphy.0: remote usb device wakeup disabled
[ 5.582496] phy phy-10120000.usbphy.0: UTMI 16bit 30MHz
[ 5.587833] ehci-platform 101c0000.ehci: EHCI Host Controller
[ 5.593708] ehci-platform 101c0000.ehci: new USB bus registered, assigned bus number 1
[ 5.601877] ehci-platform 101c0000.ehci: irq 26, io mem 0x101c0000
[ 5.633484] ehci-platform 101c0000.ehci: USB 2.0 started, EHCI 1.00
[ 5.640997] hub 1-0:1.0: USB hub found
[ 5.645278] hub 1-0:1.0: 1 port detected
[ 5.655229] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[ 5.663250] ohci-platform: OHCI generic platform driver
[ 5.668936] ohci-platform 101c1000.ohci: Generic Platform OHCI controller
[ 5.675901] ohci-platform 101c1000.ohci: new USB bus registered, assigned bus number 2
[ 5.684033] ohci-platform 101c1000.ohci: irq 26, io mem 0x101c1000
[ 5.758553] hub 2-0:1.0: USB hub found
[ 5.762822] hub 2-0:1.0: 1 port detected
[ 5.782134] MTK MSDC device init.
[ 5.843674] mtk-sd: MediaTek MT6575 MSDC Driver
[ 5.855293] sdhci: Secure Digital Host Controller Interface driver
[ 5.861584] sdhci: Copyright(c) Pierre Ossman
[ 5.867860] sdhci-pltfm: SDHCI platform and OF driver helper
[ 5.881874] usbcore: registered new interface driver usb-storage
[ 5.891793] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[ 5.909696] init: - preinit -
[ 5.986781] mmc0: new high speed SDHC card at address aaaa
[ 6.001602] mmcblk0: mmc0:aaaa SD32G 29.7 GiB
[ 6.013527] usb 1-1: new high-speed USB device number 2 using ehci-platform
[ 6.020919] mmcblk0: p1
[ 6.695369] random: procd: uninitialized urandom read (4 bytes read)
[ 7.142168] rt3050-esw 10110000.esw: link changed 0x00
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 10.483769] mount_root: loading kmods from internal overlay
[ 10.563652] kmodloader: loading kernel modules from //etc/modules-boot.d/*
[ 10.577076] kmodloader: done loading kernel modules from //etc/modules-boot.d/*
[ 11.379569] rt3050-esw 10110000.esw: link changed 0x01
[ 11.835063] block: attempting to load /etc/config/fstab
[ 11.842494] block: unable to load configuration (fstab: Entry not found)
[ 11.849467] block: no usable configuration
[ 11.854606] mount_root: jffs2 not ready yet, using temporary tmpfs overlay
[ 11.935131] urandom-seed: Seed file not found (/etc/urandom.seed)
[ 12.140424] procd: - early -
[ 12.144272] procd: - watchdog -
[ 12.887926] random: jshn: uninitialized urandom read (4 bytes read)
[ 12.894549] procd: - watchdog -
[ 12.898002] procd: - ubus -
Failed to connect to ubus
[ 13.213695] random: ubusd: uninitialized urandom read (4 bytes read)
[ 13.389696] random: jshn: uninitialized urandom read (4 bytes read)
[ 13.410704] procd: - init -
Please press Enter to activate this console.
[ 14.770585] kmodloader: loading kernel modules from /etc/modules.d/*
[ 15.072094] RPC: Registered named UNIX socket transport module.
[ 15.078172] RPC: Registered udp transport module.
[ 15.082938] RPC: Registered tcp transport module.
[ 15.087714] RPC: Registered tcp NFSv4.1 backchannel transport module.
[ 15.106272] ntfs: driver 2.1.32 [Flags: R/O MODULE].
[ 15.191265] ip6_tables: (C) 2000-2006 Netfilter Core Team
[ 15.809957]
[ 15.809957]
[ 15.809957] === pAd = c0623000, size = 1178064 ===
[ 15.809957]
[ 15.821271] mt7628_init(FW(8a00), HW(8a01), CHIPID(7628))
[ 15.891647] Linux video capture interface: v2.00
[ 15.954730] hidraw: raw HID events driver (C) Jiri Kosina
[ 16.022104] ledchain: pwm_base=0xB0005000
[ 16.026402] ledchain: v6 - Device: /dev/ledchain2
[ 16.031172] ledchain: - PWM channel : 2
[ 16.035351] ledchain: - PWM buffer size: 12
[ 16.039587] ledchain: - Number of LEDs : 1
[ 16.043746] ledchain: - Inverted : 0
[ 16.047898] ledchain: - LED type : WS2813 GRB
[ 16.052838] ledchain: - Max retries : 3
[ 16.056996] ledchain: - Max Tpassive : 0 nS (0=chip default)
[ 16.217575] Bluetooth: Core ver 2.22
[ 16.221335] NET: Registered protocol family 31
[ 16.225890] Bluetooth: HCI device and connection manager initialized
[ 16.232345] Bluetooth: HCI socket layer initialized
[ 16.237305] Bluetooth: L2CAP socket layer initialized
[ 16.242456] Bluetooth: SCO socket layer initialized
[ 16.250311] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[ 16.255773] Bluetooth: BNEP filters: protocol multicast
[ 16.261084] Bluetooth: BNEP socket layer initialized
[ 16.290296] usbcore: registered new interface driver btusb
[ 16.390274] usbcore: registered new interface driver cdc_acm
[ 16.396090] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[ 16.407452] usbcore: registered new interface driver cdc_wdm
[ 16.417700] Bluetooth: HCI UART driver ver 2.3
[ 16.422219] Bluetooth: HCI UART protocol H4 registered
[ 16.427502] Bluetooth: HCI UART protocol BCSP registered
[ 16.437317] Bluetooth: HIDP (Human Interface Emulation) ver 1.2
[ 16.443344] Bluetooth: HIDP socket layer initialized
[ 16.454679] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 16.488525] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[ 16.590019] rt2880-pinmux pinctrl: pin io18 already requested by pinctrl; cannot claim for 10005000.pwm
[ 16.599649] rt2880-pinmux pinctrl: pin-18 (10005000.pwm) status -22
[ 16.606019] rt2880-pinmux pinctrl: could not request pin 18 (io18) from group pwm0 on device rt2880-pinmux
[ 16.615902] mtk-pwm 10005000.pwm: Error applying setting, reverse things back
[ 16.630508] Bluetooth: RFCOMM TTY layer initialized
[ 16.635555] Bluetooth: RFCOMM socket layer initialized
[ 16.640794] Bluetooth: RFCOMM ver 1.11
[ 16.661261] usbcore: registered new interface driver ums-alauda
[ 16.670545] usbcore: registered new interface driver ums-cypress
[ 16.680071] usbcore: registered new interface driver ums-datafab
[ 16.689315] usbcore: registered new interface driver ums-freecom
[ 16.698761] usbcore: registered new interface driver ums-isd200
[ 16.708312] usbcore: registered new interface driver ums-jumpshot
[ 16.717702] usbcore: registered new interface driver ums-karma
[ 16.727897] usbcore: registered new interface driver ums-sddr09
[ 16.737332] usbcore: registered new interface driver ums-sddr55
[ 16.747199] usbcore: registered new interface driver ums-usbat
[ 16.760451] usbcore: registered new interface driver usbhid
[ 16.766177] usbhid: USB HID core driver
[ 16.774558] usbcore: registered new interface driver usblp
[ 16.801196] usbcore: registered new interface driver usbserial
[ 16.807318] usbcore: registered new interface driver usbserial_generic
[ 16.814079] usbserial: USB Serial support registered for generic
[ 16.834143] Driver for 1-wire Dallas network protocol.
[ 16.863984] xt_time: kernel timezone is -0000
[ 16.870905] usbcore: registered new interface driver ch341
[ 16.876677] usbserial: USB Serial support registered for ch341-uart
[ 16.886154] usbcore: registered new interface driver cp210x
[ 16.891917] usbserial: USB Serial support registered for cp210x
[ 16.901994] usbcore: registered new interface driver ftdi_sio
[ 16.908014] usbserial: USB Serial support registered for FTDI USB Serial Device
[ 16.929948] usbcore: registered new interface driver pl2303
[ 16.935804] usbserial: USB Serial support registered for pl2303
[ 16.947890] PPP generic driver version 2.4.2
[ 16.955735] NET: Registered protocol family 24
[ 16.967140] qmi_wwan 1-1:1.4: cdc-wdm0: USB WDM device
[ 16.975853] qmi_wwan 1-1:1.4 wwan0: register 'qmi_wwan' at usb-101c0000.ehci-1, WWAN/QMI device, 86:c9:8be0:a9
[ 16.986717] usbcore: registered new interface driver qmi_wwan
[ 17.025516] usbcore: registered new interface driver snd-usb-audio
[ 17.096673] usbcore: registered new interface driver uvcvideo
[ 17.102509] USB Video Class driver (1.1.1)
[ 17.139728] usbcore: registered new interface driver option
[ 17.145583] usbserial: USB Serial support registered for GSM modem (1-port)
[ 17.153207] option 1-1:1.0: GSM modem (1-port) converter detected
[ 17.159765] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0
[ 17.167134] option 1-1:1.1: GSM modem (1-port) converter detected
[ 17.173719] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB1
[ 17.181008] option 1-1:1.2: GSM modem (1-port) converter detected
[ 17.187584] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB2
[ 17.194950] option 1-1:1.3: GSM modem (1-port) converter detected
[ 17.201459] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB3
[ 17.293973] kmodloader: done loading kernel modules from /etc/modules.d/*

It's interesting because I have 3 that are acting the same way. I even tried to update the uboot and it still says the same thing for each type of upload regardless of firmware or uboot.

Loading: ### Error: couldn't find start of data in next packet!

For anyone else having this problem, I finally managed to solve it just by using a different computer. I followed the exact steps from this article: https://docs.onion.io/omega2-docs/Firmware-Flashing-Web-Recovery.html

Originally I was using my Mac to do the web recovery and was getting the error: Loading: ### Error: couldn't find start of data in next packet!

I switched to a different Mac and then the web recovery worked using the exact same steps and firmware binaries.

Is there anything different (OS, hardware, etc) about the new mac that works?