Hi all,
have linksys EA9300 with bootloop.
I will connect USB - ttl adapter and have in bootlog BAD NAND.
I replce NAND to new one W29N02GVSIAA and load dump from another worked EA9300
after staring router have this:
Base: 5.2_02HNDrc17
CFE version: v1.1.1
Build Date: Tue May 23 17:24:59 CST 2017
Boot Strap Register: 0x6fd43
Chip ID: BCM4908_A0, Broadcom B53 Quad Core: 1800MHz
Total Memory: 536870912 bytes (512MB)
Status wait timeout: nandsts=0x50000000 mask=0x40000000, count=0
NAND ECC BCH-8, page size 0x800 bytes, spare size used 108 bytes
NAND flash device: , id 0xefda block 128KB size 262144KB
Uncorrectable ECC Error: intr 0x70, addr=0x00010600, blk=0,
Uncorrectable ECC Error: intr 0x70, addr=0x00010800, blk=0,
pmc_init:PMC using DQM mode
pmc_init:7 0 fb270428 3660365
Board IP address : 192.168.1.1:ffffff00
Host IP address : 192.168.1.254
Gateway IP address :
Run from flash/host/tftp (f/h/c) : c
Default host run file name : vmlinux_rd_boot
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 1
Default host ramdisk file name : ramdisk
Default ramdisk store address : 0x8000000
Default DTB file name : 94908.dtb
Board Id : EA9300
Number of MAC Addresses (1-64) : 11
Base MAC Address : 24:f5:a2:b1:d6:0a
PSI Size (1-128) KBytes : 48
Enable Backup PSI [0|1] : 0
System Log Size (0-256) KBytes : 0
Auxillary File System Size Percent: 0
flow memory allocation (MB) : 14
buffer memory allocation (MB) : 32
DHD 0 memory allocation (MB) : 14
DHD 1 memory allocation (MB) : 0
DHD 2 memory allocation (MB) : 0
WLan Feature : 0x00
Partition 1 Size (MB) : 8M
Partition 2 Size (MB) : 2M
Partition 3 Size (MB) : 76M
Partition 4 Size (MB) (Data) : 8M
Partition 5 Size (MB) : 1M
Initalizing switch low level hardware.
Software Resetting Switch ... Done.
Waiting MAC port Rx/Tx to be enabled by hardware ...Done
Disable Switch All MAC port Rx/Tx
Uncorrectable ECC Error: intr 0x70, addr=0x0a000000, blk=1280,
Uncorrectable ECC Error: intr 0x50, addr=0x0a000400, blk=1280,
Uncorrectable ECC Error: intr 0x70, addr=0x0a000800, blk=1280,
Uncorrectable ECC Error: intr 0x50, addr=0x0a01f400, blk=1280,
Uncorrectable ECC Error: intr 0x70, addr=0x0a01f800, blk=1280,
Uncorrectable ECC Error: intr 0x50, addr=0x0a01fc00, blk=1280,
block with Many error like this
block with Many error like this
devinfo: block read
devinfo: data is valid!
*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
Enable Switch MAC Port Rx/Tx, set PBVLAN to FAN out, set switch to NO-STP.
Loading 192.168.1.254:94908.dtb image at address 0x08000000..
Loading FW .....
Loading failed.: CFE error -21
boot from flash, mfg mode = -1
Loading FW .....
Loading failed.: CFE error -21
Booting from only image (address 0x00100000, flash offset 0x00100000) ...
Uncorrectable ECC Error: intr 0x70, addr=0x00100000, blk=8,
Uncorrectable ECC Error: intr 0x70, addr=0x00100000, blk=8,
Uncorrectable ECC Error: intr 0x50, addr=0x00100400, blk=8,
Uncorrectable ECC Error: intr 0x70, addr=0x00100800, blk=8,
Uncorrectable ECC Error: intr 0x70, addr=0x0010f000, blk=8,
Uncorrectable ECC Error: intr 0x50, addr=0x0010f400, blk=8,
block with Many error like this
after this i download official firmware for ea9300. rename to belkin_ea9300.w
and upload to router via tftp server, and have the same log, and router don't worked.
after this i press ctrl+c and enter CFE, typing help and see this commands:
otpcfg Reading/fusing potp/sotp bits
x Change extra partitions size
find Find string in NAND
comp Compare NAND blocks
fb Find NAND bad blocks
dn Dump NAND contents along with spare area
phy Set memory or registers.
meminfo Display CFE System Memory
kernp Updates extra bootloader parameter for kernel. To end input enter // consecutively at any time then press <enter>
mfg mfg tools
bd boot delay setup
sm Set memory or registers.
db Dump bytes.
dh Dump half-words.
dw Dump words.
devinfo devinfo - devinfo handling commands
w Write the whole image start from beginning of the flash
e Erase NAND flash
wp Write pmc (previously loaded through JTAG to flash block 0.
ws Write whole image (priviously loaded by kermit or JTAG) to flash .
ldt load device tree blob from tftp server.
go goto and execute from specefic address.
loadb load binary via network or kermit protocol.
r Run program from flash image or from host depending on [f/h/c] flags
p Print boot line and board parameter info
c Change booline parameters
i Erase persistent storage data
avs Change AVS config
ddr Change board DDR config
a Change board AFE ID
b Change board parameters
reset Reset the board
reboot
pmdio Pseudo MDIO access for external switches.
spi Legacy SPI access of external switch.
pmc pmc cmd
closeavs pmc close avs cmd
cpufreq set CPU frequency
force override chipid check for images.
help Obtain help for CFE commands
i try to upload fulldump to nand via command
w 192.168.1.254:fulldump.bin
and have the same like on beggining.