Asus RT-AX53U bricked, but talks on LAN1

I was erasing some blocks in the NAND (yay...), which after that turned out to be used, however these blocks are outside the configured partitions.
After powering on, 2 secs later the LAN1 LED starts to blink i.e. starts communicating, but doesn't accept things like TFTP connection, Asus Rescue, nor even telneting to some known ports. No other LEDs are doing anything.
On the serial connection, which was working before, there is nothing showing up at all anymore :frowning:
Also tried to press/hold around reset, wds buttons, it is I think stuck now before the bootloader. What it wants from the end of the NAND where the bad block table is and why it doesn't proceed, I have no idea.
Sadly I also don't know if it is possible to reprogram the NAND externally, but since it does something on LAN1, it should be possible to be rescued I think, just nowhere I found yet how exactly.

This is a router with MT7621, which is using the new NMBM stuff to manage bad blocks, that's where I came with the idea to erase the bad blocks it has already on it, which was not a good idea.
Btw I was advancing pretty good to have the device supported, but now I'm really stuck.

Anyone saw such behavior before yet?

Wireshark is showing some stuff, but not much, here it goes, PC is set to 192.168.1.2 just as it excepts by default (on serial TFTP) and itself is all the time on 192.168.1.1 :

No.	Time	Source	Destination	Protocol	Length	Info
1	0.000000	ASUSTekC_cf:73:1b	LLDP_Multicast	LLDP	58	MA/04:d9:f5:cf:73:1b MA/04:d9:f5:cf:73:1b 3601 
2	0.017762	fe80::b16e:2a15:b3fe:9ba2	ff02::1:2	DHCPv6	150	Solicit XID: 0xef35e9 CID: 0001000128f711c604d9f5cf731a 
3	0.117250	ASUSTekC_cf:73:1b	Broadcast	ARP	42	Who has 192.168.1.2? (ARP Probe)
4	0.117317	192.168.1.2	224.0.0.22	IGMPv3	62	Membership Report / Join group 224.0.0.251 for any sources / Join group 239.255.255.250 for any sources
5	0.117365	::	ff02::1:fffe:9ba2	ICMPv6	78	Neighbor Solicitation for fe80::b16e:2a15:b3fe:9ba2
6	0.117397	fe80::b16e:2a15:b3fe:9ba2	ff02::2	ICMPv6	62	Router Solicitation
7	0.117428	fe80::b16e:2a15:b3fe:9ba2	ff02::16	ICMPv6	110	Multicast Listener Report Message v2
8	0.617205	192.168.1.2	224.0.0.22	IGMPv3	62	Membership Report / Join group 224.0.0.251 for any sources / Join group 239.255.255.250 for any sources
9	0.617230	fe80::b16e:2a15:b3fe:9ba2	ff02::16	ICMPv6	110	Multicast Listener Report Message v2
10	0.999731	ASUSTekC_cf:73:1b	LLDP_Multicast	LLDP	58	MA/04:d9:f5:cf:73:1b MA/04:d9:f5:cf:73:1b 3601 
11	1.018011	fe80::b16e:2a15:b3fe:9ba2	ff02::1:2	DHCPv6	150	Solicit XID: 0xef35e9 CID: 0001000128f711c604d9f5cf731a 
12	1.117429	ASUSTekC_cf:73:1b	Broadcast	ARP	42	Who has 192.168.1.2? (ARP Probe)
13	1.117505	fe80::b16e:2a15:b3fe:9ba2	ff02::1	ICMPv6	86	Neighbor Advertisement fe80::b16e:2a15:b3fe:9ba2 (ovr) is at 04:d9:f5:cf:73:1b
14	1.124283	fe80::b16e:2a15:b3fe:9ba2	ff02::16	ICMPv6	90	Multicast Listener Report Message v2
15	1.124375	192.168.1.2	224.0.0.22	IGMPv3	54	Membership Report / Join group 224.0.0.252 for any sources
16	1.125268	192.168.1.2	224.0.0.251	MDNS	74	Standard query 0x0000 ANY host.local, "QM" question
17	1.125901	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	94	Standard query 0x0000 ANY host.local, "QM" question
18	1.126315	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	132	Standard query response 0x0000 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2
19	1.126652	192.168.1.2	224.0.0.251	MDNS	74	Standard query 0x0000 ANY host.local, "QM" question
20	1.126723	fe80::b16e:2a15:b3fe:9ba2	ff02::16	ICMPv6	90	Multicast Listener Report Message v2
21	1.127028	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	94	Standard query 0x0000 ANY host.local, "QM" question
22	1.127370	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	132	Standard query response 0x0000 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2
23	1.127698	192.168.1.2	224.0.0.251	MDNS	112	Standard query response 0x0000 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2
24	1.128148	192.168.1.2	224.0.0.251	MDNS	112	Standard query response 0x0000 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2
25	1.617677	192.168.1.2	224.0.0.22	IGMPv3	54	Membership Report / Join group 224.0.0.252 for any sources
26	1.617717	fe80::b16e:2a15:b3fe:9ba2	ff02::16	ICMPv6	110	Multicast Listener Report Message v2
27	1.999961	ASUSTekC_cf:73:1b	LLDP_Multicast	LLDP	58	MA/04:d9:f5:cf:73:1b MA/04:d9:f5:cf:73:1b 3601 
28	2.117569	ASUSTekC_cf:73:1b	Broadcast	ARP	42	Who has 192.168.1.2? (ARP Probe)
29	3.000122	ASUSTekC_cf:73:1b	LLDP_Multicast	LLDP	58	MA/04:d9:f5:cf:73:1b MA/04:d9:f5:cf:73:1b 3601 
30	3.018223	fe80::b16e:2a15:b3fe:9ba2	ff02::1:2	DHCPv6	150	Solicit XID: 0xef35e9 CID: 0001000128f711c604d9f5cf731a 
31	3.117246	ASUSTekC_cf:73:1b	Broadcast	ARP	42	ARP Announcement for 192.168.1.2
32	3.124261	fe80::b16e:2a15:b3fe:9ba2	ff02::16	ICMPv6	90	Multicast Listener Report Message v2
33	3.124292	192.168.1.2	224.0.0.22	IGMPv3	54	Membership Report / Leave group 224.0.0.252
34	3.130275	fe80::b16e:2a15:b3fe:9ba2	ff02::16	ICMPv6	90	Multicast Listener Report Message v2
35	3.130372	192.168.1.2	224.0.0.22	IGMPv3	54	Membership Report / Join group 224.0.0.252 for any sources
36	3.136273	192.168.1.2	224.0.0.22	IGMPv3	54	Membership Report / Join group 224.0.0.9 for any sources
37	3.136595	192.168.1.2	192.168.1.255	RIPv1	66	Request
38	3.136643	192.168.1.2	224.0.0.9	RIPv2	66	Request
39	3.137367	192.168.1.2	224.0.0.251	MDNS	74	Standard query 0x0000 ANY host.local, "QM" question
40	3.137973	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	94	Standard query 0x0000 ANY host.local, "QM" question
41	3.138398	192.168.1.2	224.0.0.251	MDNS	112	Standard query response 0x0000 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2
42	3.138473	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	132	Standard query response 0x0000 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2
43	3.138931	192.168.1.2	224.0.0.251	MDNS	74	Standard query 0x0000 ANY host.local, "QM" question
44	3.139303	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	94	Standard query 0x0000 ANY host.local, "QM" question
45	3.139798	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	132	Standard query response 0x0000 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2
46	3.140251	192.168.1.2	224.0.0.251	MDNS	112	Standard query response 0x0000 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2
47	3.159668	192.168.1.2	192.168.1.255	STEAMDISCOVER	309	Client Status from host
48	3.159813	192.168.1.2	192.168.1.255	STEAMDISCOVER	83	Client Discovery Seq=38
49	3.194801	192.168.1.2	192.168.1.255	NBNS	110	Registration NB host<20>
50	3.194845	192.168.1.2	192.168.1.255	NBNS	110	Registration NB host<00>
51	3.194873	192.168.1.2	192.168.1.255	NBNS	110	Registration NB WORKGROUP<00>
52	3.617685	192.168.1.2	224.0.0.22	IGMPv3	62	Membership Report / Join group 224.0.0.252 for any sources / Join group 224.0.0.9 for any sources
53	3.617726	fe80::b16e:2a15:b3fe:9ba2	ff02::16	ICMPv6	90	Multicast Listener Report Message v2
54	3.945500	192.168.1.2	192.168.1.255	NBNS	110	Registration NB host<20>
55	3.945529	192.168.1.2	192.168.1.255	NBNS	110	Registration NB WORKGROUP<00>
56	3.945547	192.168.1.2	192.168.1.255	NBNS	110	Registration NB host<00>
57	4.117651	fe80::b16e:2a15:b3fe:9ba2	ff02::2	ICMPv6	70	Router Solicitation from 04:d9:f5:cf:73:1b
58	4.171300	192.168.1.2	192.168.1.255	STEAMDISCOVER	83	Client Discovery Seq=38
59	4.655147	192.168.1.2	239.255.255.250	SSDP	217	M-SEARCH * HTTP/1.1 
60	4.659232	192.168.1.2	239.255.255.250	SSDP	211	M-SEARCH * HTTP/1.1 
61	4.679547	192.168.1.2	239.255.255.250	SSDP	212	M-SEARCH * HTTP/1.1 
62	4.695996	192.168.1.2	192.168.1.255	NBNS	110	Registration NB host<00>
63	4.696028	192.168.1.2	192.168.1.255	NBNS	110	Registration NB WORKGROUP<00>
64	4.696052	192.168.1.2	192.168.1.255	NBNS	110	Registration NB host<20>
65	5.162147	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
66	5.162559	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
67	5.162863	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
68	5.163190	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
69	5.163516	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
70	5.163875	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
71	5.164161	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
72	5.164494	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
73	5.164671	192.168.1.2	192.168.1.255	NBNS	92	Name query NB WPAD<00>
74	5.164826	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
75	5.165139	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
76	5.165252	192.168.1.2	192.168.1.255	NBNS	92	Name query NB WPAD<00>
77	5.165431	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
78	5.165754	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
79	5.166063	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
80	5.166443	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
81	5.166754	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
82	5.167135	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
83	5.359766	192.168.1.2	224.0.0.251	MDNS	112	Standard query 0x0000 PTR _sleep-proxy._udp.local, "QM" question OPT
84	5.446165	192.168.1.2	192.168.1.255	NBNS	110	Registration NB host<20>
85	5.446196	192.168.1.2	192.168.1.255	NBNS	110	Registration NB WORKGROUP<00>
86	5.446219	192.168.1.2	192.168.1.255	NBNS	110	Registration NB host<00>
87	5.577196	fe80::b16e:2a15:b3fe:9ba2	ff02::1:3	LLMNR	84	Standard query 0x33bd AAAA wpad
88	5.577197	fe80::b16e:2a15:b3fe:9ba2	ff02::1:3	LLMNR	84	Standard query 0x4851 A wpad
89	5.577267	192.168.1.2	224.0.0.252	LLMNR	64	Standard query 0x4851 A wpad
90	5.577269	192.168.1.2	224.0.0.252	LLMNR	64	Standard query 0x33bd AAAA wpad
91	5.577675	fe80::b16e:2a15:b3fe:9ba2	ff02::1:3	LLMNR	84	Standard query 0x9924 A wpad
92	5.577707	fe80::b16e:2a15:b3fe:9ba2	ff02::1:3	LLMNR	84	Standard query 0xd2a2 AAAA wpad
93	5.577723	192.168.1.2	224.0.0.252	LLMNR	64	Standard query 0x9924 A wpad
94	5.577774	192.168.1.2	224.0.0.252	LLMNR	64	Standard query 0xd2a2 AAAA wpad
95	5.655801	192.168.1.2	239.255.255.250	SSDP	217	M-SEARCH * HTTP/1.1 
96	5.660299	192.168.1.2	239.255.255.250	SSDP	211	M-SEARCH * HTTP/1.1 
97	5.679833	192.168.1.2	239.255.255.250	SSDP	212	M-SEARCH * HTTP/1.1 
98	5.685384	192.168.1.2	224.0.0.251	MDNS	254	Standard query 0x0000 ANY 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local, "QM" question ANY host.local, "QM" question ANY host.local, "QM" question SRV 0 0 47989 host.local A 192.168.1.2 AAAA fe80::b16e:2a15:b3fe:9ba2 OPT
99	5.685501	192.168.1.2	224.0.0.251	MDNS	170	Standard query response 0x0000 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2
100	5.914977	192.168.1.2	192.168.1.255	NBNS	92	Name query NB WPAD<00>
101	5.915406	192.168.1.2	192.168.1.255	NBNS	92	Name query NB WPAD<00>
102	5.933501	192.168.1.2	224.0.0.251	MDNS	254	Standard query 0x0000 ANY 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local, "QM" question ANY host.local, "QM" question ANY host.local, "QM" question SRV 0 0 47989 host.local A 192.168.1.2 AAAA fe80::b16e:2a15:b3fe:9ba2 OPT
103	5.933657	192.168.1.2	224.0.0.251	MDNS	170	Standard query response 0x0000 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2
104	6.162212	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
105	6.162726	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
106	6.163082	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
107	6.163425	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
108	6.163693	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
109	6.164015	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
110	6.164285	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
111	6.164610	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
112	6.164877	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
113	6.165204	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
114	6.165485	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
115	6.165837	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
116	6.166125	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
117	6.166482	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
118	6.166779	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
119	6.167132	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
120	6.243773	192.168.1.2	224.0.0.251	MDNS	254	Standard query 0x0000 ANY 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local, "QM" question ANY host.local, "QM" question ANY host.local, "QM" question SRV 0 0 47989 host.local A 192.168.1.2 AAAA fe80::b16e:2a15:b3fe:9ba2 OPT
121	6.243885	192.168.1.2	224.0.0.251	MDNS	170	Standard query response 0x0000 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2 AAAA fe80::b16e:2a15:b3fe:9ba2 A 192.168.1.2
122	6.368387	192.168.1.2	224.0.0.251	MDNS	112	Standard query 0x0000 PTR _sleep-proxy._udp.local, "QM" question OPT
123	6.498523	192.168.1.2	224.0.0.251	MDNS	497	Standard query response 0x0000 TXT, cache flush PTR _nvstream_dbd._tcp.local PTR 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local SRV, cache flush 0 0 47989 host.local PTR, cache flush host.local PTR, cache flush host.local A, cache flush 192.168.1.2 AAAA, cache flush fe80::b16e:2a15:b3fe:9ba2 NSEC, cache flush 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local NSEC, cache flush 2.1.168.192.in-addr.arpa NSEC, cache flush 2.A.B.9.E.F.3.B.5.1.A.2.E.6.1.B.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush host.local OPT
124	6.656582	192.168.1.2	239.255.255.250	SSDP	217	M-SEARCH * HTTP/1.1 
125	6.661048	192.168.1.2	239.255.255.250	SSDP	211	M-SEARCH * HTTP/1.1 
126	6.665029	192.168.1.2	192.168.1.255	NBNS	92	Name query NB WPAD<00>
127	6.665540	192.168.1.2	192.168.1.255	NBNS	92	Name query NB WPAD<00>
128	6.680094	192.168.1.2	239.255.255.250	SSDP	212	M-SEARCH * HTTP/1.1 
129	7.018305	fe80::b16e:2a15:b3fe:9ba2	ff02::1:2	DHCPv6	150	Solicit XID: 0xef35e9 CID: 0001000128f711c604d9f5cf731a 
130	7.497561	192.168.1.2	224.0.0.251	MDNS	497	Standard query response 0x0000 TXT, cache flush PTR _nvstream_dbd._tcp.local PTR 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local SRV, cache flush 0 0 47989 host.local PTR, cache flush host.local PTR, cache flush host.local A, cache flush 192.168.1.2 AAAA, cache flush fe80::b16e:2a15:b3fe:9ba2 NSEC, cache flush 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local NSEC, cache flush 2.1.168.192.in-addr.arpa NSEC, cache flush 2.A.B.9.E.F.3.B.5.1.A.2.E.6.1.B.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush host.local OPT
131	7.656309	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
132	7.656386	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
133	7.656921	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
134	7.656976	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
135	7.657254	192.168.1.2	239.255.255.250	SSDP	217	M-SEARCH * HTTP/1.1 
136	7.659277	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
137	7.659366	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
138	7.659963	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
139	7.660030	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
140	7.662045	192.168.1.2	239.255.255.250	SSDP	211	M-SEARCH * HTTP/1.1 
141	7.680420	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
142	7.680528	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
143	7.681155	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
144	7.681234	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
145	7.681531	192.168.1.2	239.255.255.250	SSDP	212	M-SEARCH * HTTP/1.1 
146	8.117572	fe80::b16e:2a15:b3fe:9ba2	ff02::2	ICMPv6	70	Router Solicitation from 04:d9:f5:cf:73:1b
147	8.147676	192.168.1.2	192.168.1.255	STEAMDISCOVER	309	Client Status from host
148	8.657770	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
149	8.657898	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
150	8.658478	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
151	8.658551	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
152	8.660072	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
153	8.660151	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
154	8.660759	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
155	8.660836	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
156	8.682253	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
157	8.682362	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
158	8.683055	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
159	8.683131	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
160	9.177817	192.168.1.2	192.168.1.255	STEAMDISCOVER	83	Client Discovery Seq=38
161	9.388048	192.168.1.2	224.0.0.251	MDNS	112	Standard query 0x0000 PTR _sleep-proxy._udp.local, "QM" question OPT
162	9.494154	192.168.1.2	224.0.0.251	MDNS	497	Standard query response 0x0000 TXT, cache flush PTR _nvstream_dbd._tcp.local PTR 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local SRV, cache flush 0 0 47989 host.local PTR, cache flush host.local PTR, cache flush host.local A, cache flush 192.168.1.2 AAAA, cache flush fe80::b16e:2a15:b3fe:9ba2 NSEC, cache flush 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local NSEC, cache flush 2.1.168.192.in-addr.arpa NSEC, cache flush 2.A.B.9.E.F.3.B.5.1.A.2.E.6.1.B.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush host.local OPT
163	10.659592	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
164	10.659680	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
165	10.660211	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
166	10.660279	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
167	10.660801	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
168	10.660888	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
169	10.661497	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
170	10.661574	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
171	10.683125	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
172	10.683214	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
173	10.683869	192.168.1.2	224.0.0.251	MDNS	82	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
174	10.683949	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	102	Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
175	13.493129	192.168.1.2	224.0.0.251	MDNS	497	Standard query response 0x0000 TXT, cache flush PTR _nvstream_dbd._tcp.local PTR 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local SRV, cache flush 0 0 47989 host.local PTR, cache flush host.local PTR, cache flush host.local A, cache flush 192.168.1.2 AAAA, cache flush fe80::b16e:2a15:b3fe:9ba2 NSEC, cache flush 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local NSEC, cache flush 2.1.168.192.in-addr.arpa NSEC, cache flush 2.A.B.9.E.F.3.B.5.1.A.2.E.6.1.B.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush host.local OPT
176	14.165411	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
177	14.165863	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
178	14.166214	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
179	14.166597	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
180	14.166914	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
181	14.167296	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
182	14.167677	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
183	14.168140	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
184	14.168176	192.168.1.2	192.168.1.255	NBNS	92	Name query NB WPAD<00>
185	14.168504	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
186	14.168931	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
187	14.169116	192.168.1.2	192.168.1.255	NBNS	92	Name query NB WPAD<00>
188	14.169295	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
189	14.169688	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
190	14.170006	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
191	14.170378	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
192	14.170690	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
193	14.171070	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
194	14.580970	fe80::b16e:2a15:b3fe:9ba2	ff02::1:3	LLMNR	84	Standard query 0x26bf A wpad
195	14.580970	fe80::b16e:2a15:b3fe:9ba2	ff02::1:3	LLMNR	84	Standard query 0x78f4 AAAA wpad
196	14.581031	192.168.1.2	224.0.0.252	LLMNR	64	Standard query 0x26bf A wpad
197	14.581031	192.168.1.2	224.0.0.252	LLMNR	64	Standard query 0x78f4 AAAA wpad
198	14.581470	fe80::b16e:2a15:b3fe:9ba2	ff02::1:3	LLMNR	84	Standard query 0xe9ef A wpad
199	14.581529	192.168.1.2	224.0.0.252	LLMNR	64	Standard query 0xe9ef A wpad
200	14.581928	fe80::b16e:2a15:b3fe:9ba2	ff02::1:3	LLMNR	84	Standard query 0x66f5 AAAA wpad
201	14.581973	192.168.1.2	224.0.0.252	LLMNR	64	Standard query 0x66f5 AAAA wpad
202	14.918153	192.168.1.2	192.168.1.255	NBNS	92	Name query NB WPAD<00>
203	14.919079	192.168.1.2	192.168.1.255	NBNS	92	Name query NB WPAD<00>
204	15.018657	fe80::b16e:2a15:b3fe:9ba2	ff02::1:2	DHCPv6	150	Solicit XID: 0xef35e9 CID: 0001000128f711c604d9f5cf731a 
205	15.165443	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
206	15.166015	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
207	15.166438	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
208	15.166864	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
209	15.167181	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
210	15.167554	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
211	15.167869	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
212	15.168247	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
213	15.168606	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
214	15.169052	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
215	15.169436	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 A wpad.local, "QM" question
216	15.169854	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 A wpad.local, "QM" question
217	15.170173	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
218	15.170552	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
219	15.170868	192.168.1.2	224.0.0.251	MDNS	70	Standard query 0x0000 AAAA wpad.local, "QM" question
220	15.171247	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	90	Standard query 0x0000 AAAA wpad.local, "QM" question
221	15.668189	192.168.1.2	192.168.1.255	NBNS	92	Name query NB WPAD<00>
222	15.669180	192.168.1.2	192.168.1.255	NBNS	92	Name query NB WPAD<00>
223	18.415167	192.168.1.2	224.0.0.251	MDNS	112	Standard query 0x0000 PTR _sleep-proxy._udp.local, "QM" question OPT
224	21.496675	192.168.1.2	224.0.0.251	MDNS	497	Standard query response 0x0000 TXT, cache flush PTR _nvstream_dbd._tcp.local PTR 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local SRV, cache flush 0 0 47989 host.local PTR, cache flush host.local PTR, cache flush host.local A, cache flush 192.168.1.2 AAAA, cache flush fe80::b16e:2a15:b3fe:9ba2 NSEC, cache flush 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local NSEC, cache flush 2.1.168.192.in-addr.arpa NSEC, cache flush 2.A.B.9.E.F.3.B.5.1.A.2.E.6.1.B.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush host.local OPT
225	26.453257	192.168.1.2	224.0.0.251	MDNS	87	Standard query 0x0000 PTR _spotify-connect._tcp.local, "QM" question
226	26.454125	fe80::b16e:2a15:b3fe:9ba2	ff02::fb	MDNS	107	Standard query 0x0000 PTR _spotify-connect._tcp.local, "QM" question
227	27.186895	192.168.1.2	192.168.1.255	STEAMDISCOVER	309	Client Status from host
228	28.289110	192.168.1.2	239.255.255.250	SSDP	167	M-SEARCH * HTTP/1.1 
229	31.019135	fe80::b16e:2a15:b3fe:9ba2	ff02::1:2	DHCPv6	150	Solicit XID: 0xef35e9 CID: 0001000128f711c604d9f5cf731a 
230	33.156679	192.168.1.2	192.168.1.255	UDP	86	57621 → 57621 Len=44
231	37.498333	192.168.1.2	224.0.0.251	MDNS	497	Standard query response 0x0000 TXT, cache flush PTR _nvstream_dbd._tcp.local PTR 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local SRV, cache flush 0 0 47989 host.local PTR, cache flush host.local PTR, cache flush host.local A, cache flush 192.168.1.2 AAAA, cache flush fe80::b16e:2a15:b3fe:9ba2 NSEC, cache flush 3.25.1.27-host.8e7d5a43-c644-4def-b727-218e0a3cb6cb._nvstream_dbd._tcp.local NSEC, cache flush 2.1.168.192.in-addr.arpa NSEC, cache flush 2.A.B.9.E.F.3.B.5.1.A.2.E.6.1.B.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush host.local OPT
232	45.479618	192.168.1.2	224.0.0.251	MDNS	112	Standard query 0x0000 PTR _sleep-proxy._udp.local, "QM" question OPT

Normally this is what comes up on serial, after powering on, but now nothing at all:


===================================================================
                MT7621   stage1 code Dec 16 2019 17:45:55 (ASIC)
                CPU=500000000 HZ BUS=166666666 HZ
==================================================================
Change MPLL source from XTAL to CR...
do MEMPLL setting..
MEMPLL Config : 0x11000000
3PLL mode + External loopback
=== XTAL-40Mhz === DDR-1200Mhz ===
PLL4 FB_DL: 0x9, 1/0 = 658/366 25000000
PLL3 FB_DL: 0x11, 1/0 = 551/473 45000000
PLL2 FB_DL: 0x1d, 1/0 = 569/455 75000000
DDR patch working
do DDR setting..[01F40000]
Apply DDR3 Setting...(use default AC)
          0    8   16   24   32   40   48   56   64   72   80   88   96  104  112  120
      --------------------------------------------------------------------------------
0000:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0001:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0002:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0003:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0004:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0005:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0006:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0007:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0008:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0009:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000E:|    0    0    0    0    0    0    0    0    0    0    1    1    1    1    1    1
000F:|    0    0    0    0    0    1    1    1    1    1    1    1    1    1    1    0
0010:|    1    1    1    1    1    1    1    1    1    1    0    0    0    0    0    0
0011:|    1    1    1    1    0    0    0    0    0    0    0    0    0    0    0    0
0012:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0013:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0014:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0015:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0016:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0017:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0018:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0019:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001E:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001F:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
DRAMC_DQSCTL1[0e0]=14000000
DRAMC_DQSGCTL[124]=80000000
rank 0 coarse = 16
rank 0 fine = 40
B:|    0    0    0    0    0    0    0    1    1    1    0    0    0    0    0    0
opt_dle value:8
DRAMC_DDR2CTL[07c]=C287220D
DRAMC_PADCTL4[0e4]=000022B3
DRAMC_DQIDLY1[210]=0E0D0C0B
DRAMC_DQIDLY2[214]=070A090A
DRAMC_DQIDLY3[218]=0B0A0907
DRAMC_DQIDLY4[21c]=0A090C0A
DRAMC_R0DELDLY[018]=00001F21
==================================================================
                RX      DQS perbit delay software calibration
==================================================================
1.0-15 bit dq delay value
==================================================================
bit|     0  1  2  3  4  5  6  7  8  9
--------------------------------------
0 |    9 9 10 12 8 9 9 7 7 7
10 |    9 10 10 11 9 10
--------------------------------------

==================================================================
2.dqs window
x=pass dqs delay value (min~max)center
y=0-7bit DQ of every group
input delay:DQS0 =33 DQS1 = 31
==================================================================
bit     DQS0     bit      DQS1
0  (1~62)31  8  (1~61)31
1  (1~60)30  9  (1~58)29
2  (1~60)30  10  (1~60)30
3  (1~62)31  11  (1~60)30
4  (1~62)31  12  (1~62)31
5  (1~66)33  13  (1~60)30
6  (1~63)32  14  (1~62)31
7  (1~66)33  15  (1~62)31
==================================================================
3.dq delay value last
==================================================================
bit|    0  1  2  3  4  5  6  7  8   9
--------------------------------------
0 |    11 12 13 14 10 9 10 7 7 9
10 |    10 11 10 12 9 10
==================================================================
==================================================================
     TX  perbyte calibration
==================================================================
DQS loop = 15, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqsdly_pass[0]=15,  finish count=1
dqs_perbyte_dly.last_dqsdly_pass[1]=15,  finish count=2
DQ loop=15, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqdly_pass[0]=15,  finish count=1
dqs_perbyte_dly.last_dqdly_pass[1]=15,  finish count=2
byte:0, (DQS,DQ)=(8,8)
byte:1, (DQS,DQ)=(8,8)
DRAMC_DQODLY1[200]=88888888
DRAMC_DQODLY2[204]=88888888
20,data:88
[EMI] DRAMC calibration passed

===================================================================
                MT7621   stage1 code done
                CPU=500000000 HZ BUS=166666666 HZ
===================================================================

U-Boot SPL 2018.09 (Feb 24 2021 - 10:45:40 +0800)
Trying to boot from NAND

Initializing NMBM ...
Signature found at block 1023 [0x07fe0000]
First info table with writecount 0 found in block 960
Second info table with writecount 0 found in block 963
NMBM has been successfully attached


U-Boot 2018.09 (Feb 24 2021 - 10:45:40 +0800)



RT-AX53U bootloader version: 1.0.0.0

CPU:   MediaTek MT7621AT ver 1, eco 3
Clocks: CPU: 880MHz, DDR: 600MHz (1200MT/s), Bus: 220MHz, XTAL: 40MHz
Model: MediaTek MT7621 reference board (NAND)
DRAM:  256 MiB
NAND:  128 MiB

Initializing NMBM ...
Signature found at block 1023 [0x07fe0000]
First info table with writecount 0 found in block 960
Second info table with writecount 0 found in block 963
NMBM has been successfully attached

Loading Environment from NMBM... *** Warning - bad CRC, using default environment

In:    uartlite0@1e000c00
Out:   uartlite0@1e000c00
Err:   uartlite0@1e000c00
Net:
Warning: eth@1e100000 (eth0) using random MAC address - b2:2c:7c:04:74:43
eth0: eth@1e100000
gpio_init ......
Hit any key to stop autoboot:  0

  *** U-Boot Boot Menu ***

     1. Startup system (Default)
     2. Upgrade firmware
     3. Upgrade bootloader
     4. Upgrade bootloader (advanced mode)
     5. Load image
     0. U-Boot console



So if you are not seeing the bootloader might be that some how when you cleared the bad blocks you also removed some of the bootloader data from the NAND

Some devices have a backup bootloader that lives on a separate chip maybe you can try hold the reset button while powering on and see if that helps you boot into a secondary bootloader or rescue bootloader whatever we decide to call it :slight_smile:

I don't know for sure if ASUS has this on their routers but its worth a shot

Yep I tried pressing/holding things, but no luck.
The layout suggests only 1 bootloader :frowning:

[    2.344417] Creating 7 MTD partitions on "nmbm":
[    2.349017] 0x000000000000-0x0000000e0000 : "Bootloader"
[    2.355913] 0x0000000e0000-0x0000001e0000 : "nvram"
[    2.362216] 0x0000001e0000-0x0000002e0000 : "Factory"
[    2.368775] 0x0000002e0000-0x0000003e0000 : "Factory2"
[    2.375407] 0x0000003e0000-0x0000035e0000 : "Kernel"
[    2.714306] 2 fit-fw partitions found on MTD device Kernel
[    2.719798] 0x0000003e0000-0x0000007a0000 : "linux"
[    2.726250] 0x00000078e614-0x0000035e0000 : "rootfs"
[    2.732935] mtd: device 7 (rootfs) set to be root filesystem
[    2.738637] 0x0000035e0000-0x0000067e0000 : "Kernel2"
[    2.745458] 0x0000067e0000-0x000007800000 : "jffs2"
[

Thinking the same what you mentioned, right now I'm looking for desoldering-reflashing-resoldering methods and even compatible NANDs, because this one is hard to come by. I made backups, so maybe it is doable :wink:

Well NAND is out, programmer is on the way, also some additional NANDs, but only substitutes, so this will be funny.

Well its not funny anymore, I created some binaries for the NAND, flashed it, but the device is not booting them. The NAND structure can vary in more ways and the original chip seems to be not functioning anymore = going sort of blind.
Also killed a pin on the PCB, which I patched, but since I only have the real data backed up, i.e. no raw-NAND contents, it stops here and the device takes its new form as paperweight.
Also no idea what it expects on LAN1, didn't find any documentation about this.

PS: careful with them NANDs!