Ran nand erase.chip....help?

so i was trying to revert back to linksys stock firmware on one of my wrt1900ac routers and mistakenly did the command

"nand erase.chip"

which i had later found removed everything including the boot loader. So i now realize i was too careless.

After checking and following instructions i was able to get the bootloader back on and loaded the linksys firmware. the problem i have now is that i am stuck at "waiting" on the linksys webgui and the wireless says "linksys40000" or something. so i am pretty sure that the boot loader contained default wifi settings for when the router was at factory stock settings.

Any idea on what else i should do?

Also, here is what it looks like when i boot it up.

BootROM 1.20
Booting from NAND flash
Step 1: First phase of PEX-PIPE Configuration
Step 2: Configure the desire PIN_PHY_GEN
Step 3 QSGMII enable 
Step 4: Configure SERDES MUXes 
Step 5: Activate the RX High Impedance Mode  
Step 6: [PEX-Only] PEX-Main configuration (X4 or X1)
Step 6.2: [PEX-Only] PCI Express Link Capabilities
Step 7: [PEX-X4 Only] To create PEX-Link 
Steps 7,8,9,10 and 11
Steps 12: [PEX-Only] Last phase of PEX-PIPE ConfigurationSteps 13: Wait 15ms before checking resultsSteps 14: [PEX-Only]  In order to configureSteps 15: [PEX-Only]  In order to configureSteps 16: [PEX-On7
step 17:  PEX0  pexUnit= 0
** Link is Gen1, check the EP capability 
 --> 0050
mvPexConfigRead: return addr=0x%x0050
 --> 7001
 --> 7001
 --> A005
 --> A005
 --> 0010
 --> 4C12
Gen2 client!
step 17:  PEX1  pexUnit= 0
step 17:  PEX2  pexUnit= 0
** Link is Gen1, check the EP capability 
 --> 0040
mvPexConfigRead: return addr=0x%x0040
 --> 5001
 --> 5001
 --> 7005
 --> 7005
 --> 0010
 --> DC12
Gen2 client!
step 17:  PEX3  pexUnit= 0
PEX3 : Detected No Link. Status Reg(0x0004DA64) = 0x00000001
step 17:  PEX4  pexUnit= 1
PEX4 : Detected No Link. Status Reg(0x00081A64) = 0x00000001
step 17:  PEX5  pexUnit= 1
PEX5 : Detected No Link. Status Reg(0x00085A64) = 0x00000001
step 17:  PEX6  pexUnit= 1
PEX6 : Detected No Link. Status Reg(0x00089A64) = 0x00000001
                                                            DDR3 Training Sequence - Ver 4.5.DDR3 Training Sequence - Static MC Init 
DDR3 Training Sequence - HW Training Procedure 
DDR3 Training Sequence - Switching XBAR Window to FastPath Window 
BootROM: Image checksum verification PASSED

 __   __                      _ _
|  \/  | __ _ _ ____   _____| | |
| |\/| |/ _` | '__\ \ / / _ \ | |
| |  | | (_| | |   \ V /  __/ | |
|_|  |_|\__,_|_|    \_/ \___|_|_|
         _   _     ____              _
        | | | |   | __ )  ___   ___ | |_ 
        | | | |___|  _ \ / _ \ / _ \| __| 
        | |_| |___| |_) | (_) | (_) | |_ 
         \___/    |____/ \___/ \___/ \__| 
 ** LOADER **


U-Boot 2011.12 (Feb 06 2014 - 17:14:13) Marvell version: v2011.12 2013_Q1.2

Boot version:v1.3.25

Board: RD-AXP-GP rev 1.0
SoC:   MV78230 B0
       running 2 CPUs
       Custom configuration
CPU:   Marvell PJ4B (584) v7 (Rev 2) LE
       CPU 0
       CPU    @ 1200 [MHz]
       L2     @ 600 [MHz]
       TClock @ 250 [MHz]
       DDR    @ 600 [MHz]
       DDR 32Bit Width, FastPath Memory Access
       DDR ECC Disabled
DRAM:  256 MiB

Map:   Code:            0x0fea7000:0x0ff5e2d4
       BSS:             0x0ffefd80
       Stack:           0x0f9a6ef8
       Heap:            0x0f9a7000:0x0fea7000

NAND:  Spansion 1Gb(ID=F101) 128 MiB
MMC:   MRVL_MMC: 0
Bad block table found at page 65472, version 0x01
Bad block table found at page 65408, version 0x01
*** Warning - bad CRC, using default environment

Can not get hw_mac_addr from devinfo !!


#### auto_recovery ####
[u_env] get auto_recovery == yes
[u_env] get auto_recovery == yes
[u_env] get boot_part == 1
[u_env] get boot_part_ready == 3
auto_recovery enabled:1, boot_part:1, boot_part_ready:3 

[boot_count_read] block:0x140000, size:256KB, records:128 
[boot_count_read_record] boot_count:0, next_record:16

[boot_count_write] erase:0, auto_recovery->block_offset:0x140000 

Updating boot_count ... 
[boot_count_write] offset:0x148000 , length:2048
done

PEX 0.0(0): Root Complex Interface, Detected Link X1, GEN 2.0
PEX 0.1(1): Root Complex Interface, Detected Link X1, GEN 1.1
PEX 0.2(2): Root Complex Interface, Detected Link X1, GEN 2.0
PEX 0.3(3): Detected No Link.
PEX 1.0(4): Detected No Link.
PEX 1.1(5): Detected No Link.
PEX 1.2(6): Detected No Link.

boot_end Offset: 0x100000
u_env_off Offset: 0x100000
s_env_off Offset: 0x140000
devinfo Offset: 0x900000

===================
total_badCount: 0
boot_badCount: 0
u_env_badCount: 0
s_env_badCount: 0
buff_badCount: 0
===================

FPU initialized to Run Fast Mode.
USB 0: Host Mode
USB 1: Host Mode
USB 2: Device Mode
Modules Detected:
mvEthE6171SwitchBasicInit finished 
Net:   mvSysNetaInit enter 
set port 0 to rgmii enter 
set port 1 to rgmii enter 
egiga0 [PRIME], egiga1
modify Phy Status
auto_recovery_check changes bootcmd: run nandboot 
Hit any key to stop autoboot:  0 

NAND read: device 0 offset 0xa00000, size 0x400000
 4194304 bytes read: OK
## Booting kernel from Legacy Image at 02000000 ...
   Image Name:   Linux-3.2.40
   Created:      2018-03-29   8:43:47 UTC
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    3903000 Bytes = 3.7 MiB
   Load Address: 00008000
   Entry Point:  00008000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
Booting Linux on physical CPU 0
Initializing cgroup subsys cpuset
Initializing cgroup subsys cpu
Linux version 3.2.40 (root@build-vm) (gcc version 4.6.4 20120731 (prerelease) (Linaro GCC branch-4.6.4. Marvell GCC 201301-1645.aee66e26) ) #1 SMP Thu Mar 29 01:43:27 PDT 2018
CPU: Marvell PJ4Bv7 Processor [562f5842] revision 2 (ARMv7), cr=10c53c7d
CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
Machine: Marvell Armada XP GP Board
Using UBoot passing parameters structure
Reserving training memory: base=0x  (null) size=0x2800
Memory policy: ECC disabled, Data cache writealloc
SMP: init cpus
PERCPU: Embedded 7 pages/cpu @c09e7000 s6944 r8192 d13536 u32768
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 65024
Kernel command line: console=ttyS0,115200 mtdparts=armada-nand:1024K(uboot)ro,256K(u_env),256K(s_env),1m@9m(devinfo),40m@10m(kernel),37m@13m(rootfs),40m@50m(alt_kernel),37m@53m(alt_rootfs),80m@10m(ubifs)t
PID hash table entries: 1024 (order: 0, 4096 bytes)
Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
allocated 1048576 bytes of page_cgroup
please try 'cgroup_disable=memory' option if you don't want memory cgroups
Memory: 256MB = 256MB total
Memory: 250640k/250640k available, 11504k reserved, 0K highmem
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    vmalloc : 0xd0800000 - 0xfa800000   ( 672 MB)
    lowmem  : 0xc0000000 - 0xd0000000   ( 256 MB)
    pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
    modules : 0xbf000000 - 0xbfe00000   (  14 MB)
      .text : 0xc0008000 - 0xc07154d8   (7222 kB)
      .init : 0xc0716000 - 0xc074db20   ( 223 kB)
      .data : 0xc074e000 - 0xc078df20   ( 256 kB)
       .bss : 0xc078df44 - 0xc07e3088   ( 341 kB)
Hierarchical RCU implementation.
        RCU debugfs-based tracing is enabled.
NR_IRQS:211
Initializing ArmadaXP SOC Timer 0
sched_clock: 32 bits at 25MHz, resolution 40ns, wraps every 171798ms
Calibrating delay loop... 1191.11 BogoMIPS (lpj=5955584)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
Initializing cgroup subsys debug
Initializing cgroup subsys cpuacct
Initializing cgroup subsys memory
Initializing cgroup subsys devices
Initializing cgroup subsys freezer
Initializing cgroup subsys blkio
CPU: Testing write buffer coherency: ok
CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
SMP: prepare CPUs (4 cores)
Setting Clocks for secondary CPUs
Armada-XP Performance Monitor Unit detected (Marvell ID)!!!
hw perfevents: enabled with Armada PJ4 PMU driver, 7 counters available
SMP: CPU 0 Waking up CPU 1
CPU1: Booted secondary processor
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
Brought up 2 CPUs
SMP: Total of 2 processors activated (2382.23 BogoMIPS).
devtmpfs: initialized
xor: measuring software checksum speed
   arm4regs  :  1160.400 MB/sec
   8regs     :   865.600 MB/sec
   32regs    :  1066.400 MB/sec
xor: using function: arm4regs (1160.400 MB/sec)
NET: Registered protocol family 16
Aurora: Working in ARMv7 mode
L0 cache Enabled
Speculative Prefetch Disabled
Aurora L2 Cache Enabled
Support IO coherency.

  Marvell Armada-XP RD-AXP-GP rev 1.0 Board -  Soc: MV78230 B0 LE
  Detected Tclk 250000000, SysClk 600000000, FabricClk 600000000, PClk 1200000000
  LSP version: linux-3.2.y-2013_Q1.2p2 - WIFI_RD RC

registered dev#0 asa ehci_marvell
Marvell USB EHCI Host controller #0: cf85a800
registered dev#1 asa ehci_marvell
Marvell USB EHCI Host controller #1: cf85a600
registered dev#2 asa mv_udc
Marvell USB Gadget controller #2: cf85a400
bio: create slab <bio-0> at 0
raid6: int32x1    137 MB/s
raid6: int32x2    211 MB/s
raid6: int32x4    208 MB/s
raid6: int32x8    243 MB/s
raid6: using algorithm int32x8 (243 MB/s)
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new interface driver ethub
usbcore: registered new device driver usb
Sangoma WANPIPE Router v1.1 (c) 1995-2000 Sangoma Technologies Inc.
Switching to clocksource axp_clocksource
NET: Registered protocol family 2
IP route cache hash table entries: 2048 (order: 1, 8192 bytes)
TCP established hash table entries: 8192 (order: 4, 65536 bytes)
TCP bind hash table entries: 8192 (order: 4, 65536 bytes)
TCP: Hash tables configured (established 8192 bind 8192)
TCP reno registered
UDP hash table entries: 128 (order: 0, 4096 bytes)
UDP-Lite hash table entries: 128 (order: 0, 4096 bytes)
NET: Registered protocol family 1
RPC: Registered named UNIX socket transport module.
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
RPC: Registered tcp NFSv4.1 backchannel transport module.
PCI-E: Cheking physical bus #0 (controller #0): Enabled - Link UP
PCI-E: Cheking physical bus #1 (controller #1): Enabled - Link UP
PCI-E: Cheking physical bus #2 (controller #2): Enabled - Link UP
PCI-E: Cheking physical bus #3 (controller #3): Enabled - No Link
PCI-E: Cheking physical bus #4 (controller #4): Enabled - No Link
PCI-E: Cheking physical bus #5 (controller #5): Enabled - No Link
PCI-E: Cheking physical bus #6 (controller #6): Enabled - No Link
PCI: bus0: Fast back to back transfers disabled
PCI: bus1: Fast back to back transfers disabled
PCI: bus2: Fast back to back transfers disabled
pci 0000:02:00.0: BAR 0: assigned [mem 0xf2400000-0xf24fffff 64bit pref]
pci 0000:02:00.0: BAR 0: set to [mem 0xf2400000-0xf24fffff 64bit pref] (PCI address [0xf2400000-0xf24fffff])
pci 0000:02:00.0: BAR 2: assigned [mem 0xf2500000-0xf25fffff 64bit pref]
pci 0000:02:00.0: BAR 2: set to [mem 0xf2500000-0xf25fffff 64bit pref] (PCI address [0xf2500000-0xf25fffff])
pci 0000:01:00.0: BAR 0: assigned [mem 0xf2200000-0xf22fffff 64bit pref]
pci 0000:01:00.0: BAR 0: set to [mem 0xf2200000-0xf22fffff 64bit pref] (PCI address [0xf2200000-0xf22fffff])
pci 0000:01:00.0: BAR 2: assigned [mem 0xf2300000-0xf23fffff 64bit pref]
pci 0000:01:00.0: BAR 2: set to [mem 0xf2300000-0xf23fffff 64bit pref] (PCI address [0xf2300000-0xf23fffff])
pci 0000:00:00.0: BAR 0: assigned [mem 0xf2000000-0xf2007fff 64bit]
pci 0000:00:00.0: BAR 0: set to [mem 0xf2000000-0xf2007fff 64bit] (PCI address [0xf2000000-0xf2007fff])
cesadev_init(c071dab8)
mvCesaInit: channels=2, session=640, queue=64
Armada XP hwmon thermal sensor initialized.
ArmadaXP Power Managament Suspend Operations Initialized
Initializing Armada-XP CPU power management  (WFI)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
nfs4filelayout_init: NFSv4 File Layout Driver Registering...
JFFS2 version 2.2. (NAND) �© 2001-2006 Red Hat, Inc.
SGI XFS with security attributes, large block/inode numbers, no debug enabled
msgmni has been set to 489
async_tx: api initialized (async)
io scheduler noop registered
io scheduler deadline registered
io scheduler cfq registered (default)
Initializing ths8200_init
mv_xor_shared mv_xor_shared.0: Marvell shared XOR driver
mv_xor_shared mv_xor_shared.1: Marvell shared XOR driver
mv_xor mv_xor.0: Marvell XOR: ( xor cpy )
mv_xor mv_xor.1: Marvell XOR: ( xor fill cpy )
mv_xor mv_xor.2: Marvell XOR: ( xor )
mv_xor mv_xor.3: Marvell XOR: ( fill cpy )
HDLC line discipline maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
serial8250.0: ttyS0 at MMIO 0xf1012000 (irq = 41) is a 16550A
console [ttyS0] enabled
loop: module loaded
sata_mv sata_mv.0: cannot get clkdev
sata_mv sata_mv.0: slots 32 ports 2
scsi0 : sata_mv
scsi1 : sata_mv
ata1: SATA max UDMA/133 irq 55
ata2: SATA max UDMA/133 irq 55

INFO: Found cfi_flash_0 0 - base 0xf4000000, size 0x2000000, bus 2
INFO: Found spi_flash 0 - base 0xf6000000, size 0x1000000
INFO: flashInfoFill - Found 2 Flash Devices
INFO: flash_map_init - detected 2 devices
MTD: Initialize the cfi_flash_0 device at address 0xf4000000

INFO: Io remapped successfully - phy addr = 0xf4000000, virt addr = 0xd1000000
INFO: Using cfi_probe to probe cfi_flash_0 at address 0xf4000000, size 0x2000000, width 2m - Not detected - FAILED!
MTD: Initialize the spi_flash device at address 0xf6000000

INFO: Io remapped successfully - phy addr = 0xf6000000, virt addr = 0xd4000000
INFO: Using sflash to probe spi_flash at address 0xf6000000, size 0x1000000, width 2mmvSFlashInit ERROR: Unknown SPI flash device!
ERROR: sflash_probe - Failed to initialize the SFlash. - Not detected - FAILED!
armada-nand armada-nand.0: Initialize HAL based NFC in 8bit mode with DMA Disabled using BCH 4bit ECC
NAND Spansion 1Gb(ID=F101)
NAND device: Manufacturer ID: 0x01, Chip ID: 0xf1 (AMD NAND 128MiB 3,3V 8-bit)
Bad block table found at page 65472, version 0x01
Bad block table found at page 65408, version 0x01
10 cmdlinepart partitions found on MTD device armada-nand
10 cmdlinepart partitions found on MTD device armada-nand
Creating 10 MTD partitions on "armada-nand":
0x000000000000-0x000000100000 : "uboot"
0x000000100000-0x000000140000 : "u_env"
0x000000140000-0x000000180000 : "s_env"
0x000000900000-0x000000a00000 : "devinfo"
0x000000a00000-0x000003200000 : "kernel"
0x000000d00000-0x000003200000 : "rootfs"
0x000003200000-0x000005a00000 : "alt_kernel"
0x000003500000-0x000005a00000 : "alt_rootfs"
0x000000a00000-0x000005a00000 : "ubifs"
0x000005a00000-0x000008000000 : "syscfg"
mv_eth_probe: port_mask=0xf, cpu_mask=0x3 
mvPncVirtBase = 0xd0a00000
  o 4 Giga ports supported
  o SKB recycle supported (Enabled)
  o NETA acceleration mode 3
  o PnC supported (Enabled)
  o RX Queue support: 8 Queues * 128 Descriptors
  o TX Queue support: 8 Queues * 532 Descriptors
  o GSO supported
  o GRO supported
  o Receive checksum offload supported
  o Transmit checksum offload supported
  o Driver ERROR statistics enabled

  o Loading Switch QuarterDeck driver
    o Device ID     : 0x172
    o No. of Ports  : 7
    o CPU Port      : 5
  o Loading network interface(s)

  o Port 0 is connected to Linux netdevice
        giga p=0: mtu=1500, mac=cf833eec
    o eth0, ifindex = 2, GbE port = 0

  o Port 1 is connected to Linux netdevice
        giga p=1: mtu=1500, mac=cf833eec
    o eth1, ifindex = 3, GbE port = 1

  o Warning: GbE port 2 is powered off


tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
e100: Intel(R) PRO/100 Network Driver, 3.5.24-k2-NAPI
e100: Copyright(c) 1999-2006 Intel Corporation
e1000e: Intel(R) PRO/1000 Network Driver - 1.5.1-k
e1000e: Copyright(c) 1999 - 2011 Intel Corporation.
sky2: driver version 1.30
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
ehci_marvell ehci_marvell.0: Marvell Orion EHCI
ehci_marvell ehci_marvell.0: new USB bus registered, assigned bus number 1
ehci_marvell ehci_marvell.0: irq 45, io base 0xfbc50100
ata1: SATA link down (SStatus 0 SControl F300)
ehci_marvell ehci_marvell.0: USB 2.0 started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
ehci_marvell ehci_marvell.1: Marvell Orion EHCI
ehci_marvell ehci_marvell.1: new USB bus registered, assigned bus number 2
ehci_marvell ehci_marvell.1: irq 46, io base 0xfbc51100
ehci_marvell ehci_marvell.1: USB 2.0 started, EHCI 1.00
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
PCI: enabling device 0000:00:00.0 (0140 -> 0142)
etxhci_hcd_130530 0000:00:00.0: Etron xHCI Host Controller
etxhci_hcd_130530 0000:00:00.0: new USB bus registered, assigned bus number 3
etxhci_hcd_130530 0000:00:00.0: irq 58, io mem 0xf2000000
ethub 3-0:1.0: USB hub found
ethub 3-0:1.0: 2 ports detected
etxhci_hcd_130530 0000:00:00.0: Etron xHCI Host Controller
etxhci_hcd_130530 0000:00:00.0: new USB bus registered, assigned bus number 4
ethub 4-0:1.0: USB hub found
ethub 4-0:1.0: 2 ports detected
usbcore: registered new interface driver usbserial
USB Serial support registered for generic
usbcore: registered new interface driver usbserial_generic
usbserial: USB Serial Driver core
USB Serial support registered for cp210x
usbcore: registered new interface driver cp210x
cp210x: v0.09:Silicon Labs CP210x RS232 serial adaptor driver
USB Serial support registered for FTDI USB Serial Device
usbcore: registered new interface driver ftdi_sio
ftdi_sio: v1.6.0:USB FTDI Serial Converters Driver
USB Serial support registered for pl2303
usbcore: registered new interface driver pl2303
pl2303: Prolific PL2303 USB to serial adaptor driver
mousedev: PS/2 mouse device common for all mice
ata2: SATA link down (SStatus 0 SControl F300)
rtc-mv rtc-mv: internal RTC not ticking
i2c /dev entries driver
md: linear personality registered for level -1
md: raid0 personality registered for level 0
md: raid1 personality registered for level 1
md: raid10 personality registered for level 10
md: raid6 personality registered for level 6
md: raid5 personality registered for level 5
md: raid4 personality registered for level 4
cpuidle: using governor ladder
cpuidle: using governor menu
mmc0: mvsdio driver initialized, lacking card detect (fall back to polling)
oprofile: using arm/mrvl_pj4b
u32 classifier
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (3916 buckets, 15664 max)
ctnetlink v0.93: registering with nfnetlink.
nf_conntrack_rtsp v0.6.21 loading
GRE over IPv4 demultiplexor driver
GRE over IPv4 tunneling driver
nf_nat_rtsp v0.6.21 loading
ip_tables: (C) 2000-2006 Netfilter Core Team
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
IPv6 over IPv4 tunneling driver
NET: Registered protocol family 17
Bridge firewalling registered
Ebtables v2.0 registered
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
8021q: 802.1Q VLAN Support v1.8
Registering the dns_resolver key type
VFP support v0.3: implementor 56 architecture 2 part 20 variant 9 rev 6
drivers/rtc/hctosys.c: unable to open rtc device (rtc0)
md: Waiting for all devices to be available before autodetect
md: If you don't use raid, use raid=noautodetect
md: Autodetecting RAID arrays.
md: Scanned 0 and added 0 devices.
md: autorun ...
md: ... autorun DONE.
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x9976 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xd0f4 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x729d instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x25dd instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x310c instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xeadd instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x9d5b instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x59d0 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xd52c instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xf726 instead
Further such events for this erase block will not be printed
Old JFFS2 bitmask found at 0x000018bc
You cannot use older JFFS2 filesystems with newer kernels
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020000: 0x9674 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020004: 0x788b instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020008: 0xf6bb instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0002000c: 0xf809 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020010: 0x9ea9 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020014: 0x59a4 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020018: 0xbc37 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0002001c: 0x28a0 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020020: 0xe9fc instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00020024: 0x7bce instead
Further such events for this erase block will not be printed
Old JFFS2 bitmask found at 0x00022ce4
You cannot use older JFFS2 filesystems with newer kernels
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040000: 0x68b7 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040004: 0x1919 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040008: 0x0306 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0004000c: 0xfd32 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040010: 0x1f2d instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040014: 0x0d2b instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040018: 0xf882 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0004001c: 0x9324 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040020: 0x093b instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00040024: 0x6d4b instead
Further such events for this erase block will not be printed
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060000: 0x04e4 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060004: 0x1492 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060008: 0x1526 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0006000c: 0x1775 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060010: 0x4666 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060014: 0x2c9b instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060018: 0xec5e instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0006001c: 0x4a3f instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060020: 0x92f6 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00060024: 0x905e instead
Further such events for this erase block will not be printed
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080000: 0x733c instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080004: 0xd8bf instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080008: 0xf958 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0008000c: 0xf0bf instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080010: 0xf563 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080014: 0x3b6e instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080018: 0x343f instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0008001c: 0xdaab instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080020: 0x743f instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00080024: 0x17e6 instead
Further such events for this erase block will not be printed
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0000: 0x2749 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0004: 0x3e97 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0008: 0x2b87 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a000c: 0x6b8a instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0010: 0xefaf instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0014: 0x8f2a instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0018: 0x8f5d instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a001c: 0xf865 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0020: 0xa40c instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000a0024: 0xddb7 instead
Further such events for this erase block will not be printed
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x018c0000: 0x4c2e instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x018c0004: 0x534b instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x018c0008: 0x302e instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x018c000c: 0x3030 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x018c0010: 0x5741 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x018c0014: 0x3931 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x018c0018: 0x4341 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x018c001c: 0x2020 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x018c0020: 0x3339 instead
jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x018c0024: 0x3736 instead
Further such events for this erase block will not be printed
VFS: Mounted root (jffs2 filesystem) readonly on device 31:5.
devtmpfs: mounted
Freeing init memory: 220K
*********************************************************************************
              _        _  __    _    __ _____ __   __ _____
             | |      | ||  \  | |  / // ____]\ \ / // ____]TM
             | |      | ||   \ | | / /| (___   \ V /| (____
             | |      | || |\ \| |\ \  \____ \  \ /  \____ \
             | |_____ | || | \   | \ \  ____) | | |   ____) |
             |_______||_||_|  \__|  \_\[____ /  |_|  [_____/

 (c) 2013 Belkin International, Inc. and/or its affiliates. All rights reserved.
 Booting blk-mamba (firmware version 1.1.10.187766) 
*********************************************************************************
[utopia][init] System Initialization
[utopia][init] Creating /proc
[utopia][init] Creating /sys
[utopia][init] Creating /dev
[utopia][init] Creating /tmp
[utopia][init] Allocating 50M for /tmp
[utopia][init] Prepairing /dev/pts
[utopia][init] Setting /tmp and /var permissions
[utopia][init] Starting udev..
bdutil board utility kernel module, version 1.4
bdutil board utility kernel module boardId (9)
bdutil board utility gpio kernel module, version 1.3
bdutil board utility buttons kernel module, version 1.4
bdutil board utility LEDs kernel module, version 2.5
mod_bdutil (leds): i2c-dev (0) LEDs driver initialized
Orion Watchdog Timer: Initial timeout 30 sec, nowayout
Attempting mount of ubifs syscfg partition
UBI device number 0, total 296 LEBs (37584896 bytes, 35.8 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB)
[utopia][init] Using persistent syscfg data from /var/config/syscfg
[utopia][init] Starting system logging
[utopia][init] Starting sysevent subsystem
net.netfilter.nf_conntrack_acct = 1
watchdog running
[utopia][init] Setting any unset system values to default
[utopia][init] no persistence config file (/var/config/pstcfg) found
read_mfg_data,skuapi read devinfo data from mtd return error
read_mfg_data,skuapi read devinfo data from mtd return error
read_mfg_data,skuapi read devinfo data from mtd return error
read_mfg_data,skuapi read devinfo data from mtd return error
read_mfg_data,skuapi read devinfo data from mtd return error
read_mfg_data,skuapi read devinfo data from mtd return error
read_mfg_data,skuapi read devinfo data from mtd return error
read_mfg_data,skuapi read devinfo data from mtd return error
read_mfg_data,skuapi read devinfo data from mtd return error
read_mfg_data,skuapi read devinfo data from mtd return error
mac_setup.sh, setting up MAC addresses for all interfaces based on 
Please check switch mac address
read_mfg_data,skuapi read devinfo data from mtd return error
Updating NTP Servers if necessary
Command line is not complete. Try option "help"
checking for interactive script start up...
Usage: syscfg [show | set [ns] name value | get [ns] name | unset [ns] name | 
       setencrypt [ns] name value | getencrypt [ns] name | 
       ismatch [ns] name value | commit | getdefault [ns] name | reset [ns] name]
Warning : No device serial number found in configuration database
TODO : Create real serial number in 01_init.sh
Updating BootCount Page[17]:8800 ... Done

[utopia][init] Starting bdutil daemon
BDUTIL daemon mode (Olympus)
Warning: Bad CRC, using default environment
Segmentation fault
CAUTION: uboot auto_recovery not enabled!!!
uBoot auto_recovery will be enabled for Linksys firmwares
Warning: Bad CRC, using default environment
Segmentation fault
attempting to sync sysinfo.cgi auth credentials
cpu temp monitor created
Sun Aug 18 09:15:00 UTC 2019
wdev0     no private ioctls.

wdev1     no private ioctls.

wan, sysevent received: wan-start
wdev0ap0  no private ioctls.

wdev0ap1  no private ioctls.

wdev0ap2  no private ioctls.

wdev0ap3  no private ioctls.

wdev1ap0  no private ioctls.

wdev1ap1  no private ioctls.

wdev1ap2  no private ioctls.

WARN: Model base was empty
Generating Rainier lighttpd config
wifi, sysevent received: lan-started (Sun Aug 18 02:15:03 PDT 2019)
Build temporary www configuration directory: 
wifi, service_start()
TSLIIHauhEfGE
Power cycle Ethernet ports.
Registering Service myrouter._http._tcp.local port 80
/usr/bin/lua: /etc/init.d/service_devidentd/deviceupdate.lua:54: invalid UUID string 
stack traceback:
        [C]: in function 'uuid'
        /etc/init.d/service_devidentd/deviceupdate.lua:54: in main chunk
        [C]: ?
Got a reply for myrouter._http._tcp.local.: Name now registered and active
wifi, wifi_physical_start(wdev0)
wifi_physical, iwconfig wdev0 commit
wifi, wifi_virtual_start(wdev0)
wifi, wifi_user_start(wdev0)
wifi, primary AP: wdev0ap0 is up
wifi, wifi_guest_start(wdev0)
wifi, guest wdev0ap1 is disabled, do not start wifi guest
wifi, wifi_physical_start(wdev1)
wifi_physical, iwconfig wdev1 commit
wifi, wifi_virtual_start(wdev1)
wifi, wifi_user_start(wdev1)
Command line is not complete. Try option "help"
wifi, primary AP: wdev1ap0 is up
wifi, wifi_guest_start(wdev1)
wifi, guest wdev1ap1 is disabled, do not start wifi guest
wifi, start_hostapd()
Configuration file: /tmp/hostapd-wdev0ap0.conf
Line 25: invalid WPA passphrase length 0 (expected 8..63)
Line 33: invalid UUID
WPA-PSK enabled, but PSK or passphrase is not configured.
3 errors found in configuration file '/tmp/hostapd-wdev0ap0.conf'
Not ready for JNAP. Sleeping for 15 seconds...
[utopia] Not setting ppp_clamp_mtu
udhcpc (v1.15.2) started
Sending discover...
Sending select for 192.168.2.147...
Restarting nfqrecv service...
[utopia] Not setting ppp_clamp_mtu on dslite protocol
wan, sysevent received: phylink_wan_state
Lease of 192.168.2.147 obtained, lease time 86400
Sun Aug 18 09:15:36 2019 xrac Device is not associated, exiting... 
server keys for OpenVPN already exist
Belkin ICC Cron job created
Starting smbd ...

Looks like a boot sequence for Linksys through the kernel and root file system, so at least you've got something bootable.

Unfortunately, there may be calibration data required to get the wireless to perform well. These are per-instance so you can't copy it from one device to another. Do you have a backup of the "devinfo" partition from that specific unit?

Unfortunately I do not. If I have to hex edit my way through this I may as well. Not sure how it's gonna be done exactly.

I was hoping that flashing the original wrt1900ac bootloader that i downloaded would help but it does not look like it's going to.

I also noticed that I cannot do

Run_linksysnandboot

I have to type

Run_nandboot

Which concerns me.

Ok so I found this

And it does not look so bad. All I would need to do is put in the mac address and wifi info and that would be it, right?

If so, how exactly? (I'm still trying to figure out a way here. May update you all if I am successful or if i come across something else)

bit of info

1 Like

I do not understand? those instructions helped only a little. When I typed "tftp 192.168.1.10" it was looking for a file literally named "192.168.1.10". So i do not know what i did wrong here. Also, the command "get" it gave me "unknown command".

i was able to use kwboot-patched to restore the boot loader and then get back to factory stock firmware from linksys but its stuck at "please wait".

Currently trying to figure out how to fill out the dev info partition in mtd3. I have no idea how and i am hoping to find the answer how. Like do i type those commands at the "Marvell>>" prompt or in linksys stock firmware itself?

I started over from scratch. i issued the command "nand erase.chip" again and followed the instructions in the link you posted and also used the same files as well.

so i saved the logfile in google docs and created a link to it.

The only useful thing i learned about really was the devinfo mtd whatever and thats it. I already created my own but i do not know how to flash it to mtd3 specifically.

It feels like i am getting little help here.

The general process to flash only mtd3 would be to install and load kmod-mtd-rw so that the mtd partitions are not write protected, then prepare a file that is an image of what you want in mtd3, then use nandwrite to write it to the chip.

Did you do step 7?

The get command is part of tftp application, which is not happening; at least from the errors that appear to be occurring.

So after doing a little bit of googling, this is an OpenWRT package.

Which would mean that i would have to flash openwrt back to the router, use this tool, and then flash back to linksys firmware. Right?

That part, i did not know about.

Instead what i had done originally was use linux to run kwboot and then used tftpd on a seperate windows computer to send the boot loader to the router and then later the linksys stock firmware that i wanted to test in the first place.

That's assuming you're running OpenWrt. Stock firmware likely does not allow writing to the devinfo partition since it's only supposed to be written at the factory.

You could likely run OpenWrt from RAM using an initramfs image that you tftp in to the bootloader. This will let you modify the flash without flashing the whole image.

I could, but i just installed openwrt back on the router.

Doing this will still allow me to flash the mtd3 partition yeh?

Also, i had made a text file "sysinfo.cgi" and copied the info from the chadter777 link into the text file. i filled out the necessary blanks and placed it in the tftp folder.

figuring out the kmod-mtd-rw package atm...unless anyone wants to enlighten me here while i figure it out

EDIT: Also, i noticed that the mac address on the label of the router does not match up with the one in the interface...or any of them. I know that there are at least 3 different mac addresses, but what i care about is the one on the label not matching any of them in the interface.

Could it be that i have wiped out all mac addresses? or is it just for the one on the label?

EDIT2: forgot to post the link.

The devinfo appears to be text key-value pairs. Realize that echo "key=value" >> file
is a shell command to add the literal text in the quotes to the end of the file. You could do the same thing with a text editor. I believe the real devinfo has something other than a regular line break between entries, but likely it will still parse if it does have line breaks.

hw_mac_addr should be the first one on the label of your unit. I believe the other two are made at run time by adding one and two to that base address. If OpenWrt is unable to locate a "factory" MAC address during bootup it will create one at random.

I just realized that as i was taking this router apart to find a mac address, I had remembered that my younger self had made nvram back ups of this router when i was originally testing it for WDS things.

I still have it :smiley: . And its for dd-wrt. So i used notepad+ to check it and it indeed does have at least one of the mac addresses that match the one on the router. i am trying to check for the wireless macs as well.

Would this be all i need then?

also, putting the router back together atm. will be making an attempt it this thing later once its put together.

EDIT: it appears that the wireless macs i found in the nvram backup are indeed different from the wireless macs as well. So im going to assume that once i put the info back in, it will all go back to normal.

so far i changed the name of "sysinfo.cgi" to "devinfo" and copied it to the tmp folder using winscp.

i tried to run the flash_erase commands but it did not work

i also tried nand flash commands as well but still nothing...so i must be missing another thing.

I looked in the software list and found nand utils and openocd (for giggles)

now i am getting permission denied...hmmm

exactly how do i unlock mtd3?

when i run mtd unlock /dev/mtd3

it gives me "could not open mtd device"

i did run dmesg and i see the devinfo partition in there.

changed over to mcwrt. i was able to execute the commands, but i still dont see a change in mac address.

any idea on how exactly im supposed to save the file? what name it should be? still making some attempts on my part here