Just to confirm, the images I should be flashing with nandwrite -p are the *.img files, right? Not the *.bin/sysupgrade files?
Now load LEDE normally via console
No luck 
Marvell>> run flash_pri_image
Using egiga0 device
TFTP from server 192.168.1.254; our IP address is 192.168.1.1
Filename 'cobra.img'.
Load address: 0x2000000
Loading: #################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#############################################################
6.9 MiB/s
done
Bytes transferred = 15204352 (e80000 hex)
NAND erase: device 0 offset 0xa00000, size 0x2800000
Skipping bad block at 0x00fa0000
Skipping bad block at 0x01260000
Skipping bad block at 0x026c0000
Skipping bad block at 0x02e20000
Erasing at 0x31e0000 -- 100% complete.
OK
NAND write: device 0 offset 0xa00000, size 0xe80000
Skip bad block 0x00fa0000
Skip bad block 0x01260000
15204352 bytes written: OK
Marvell>> run nandboot
NAND read: device 0 offset 0xa00000, size 0x600000
Skipping bad block 0x00fa0000
6291456 bytes read: OK
## Booting kernel from Legacy Image at 02000000 ...
Image Name: ARM LEDE Linux-4.9.20
Created: 2017-05-19 22:26:03 UTC
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2268411 Bytes = 2.2 MiB
Load Address: 00008000
Entry Point: 00008000
Verifying Checksum ... OK
Loading Kernel Image ... OK
OK
Starting kernel ...
[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Linux version 4.9.20 (ag33e33@ubuntu) (gcc version 5.4.0 (LEDE GCC 5.4.0 r4164-48d71ab) ) #0 SMP Fri May 19 22:26:03 2017
[ 0.000000] CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=10c5387d
[ 0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[ 0.000000] OF: fdt:Machine model: Linksys WRT1900ACv2
[ 0.000000] Memory policy: Data cache writealloc
[ 0.000000] percpu: Embedded 13 pages/cpu @dfbcf000 s22732 r8192 d22324 u53248
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 130048
[ 0.000000] Kernel command line: console=ttyS0,115200 root=/dev/mtdblock5 ro rootdelay=1 rootfstype=jffs2 earlyprintk mtdparts=armada-nand:2048K(uboot)ro,256K(u_env),256K(s_env),1m@9m(devinfo),40m@10m(kernel),34m@16m(rootfs),40m@50m(alt_kernel),34m@56m(alt_rootfs),80m@10m(ubifs),-@90m(syscfg)
[ 0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[ 0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[ 0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.000000] Memory: 512828K/524288K available (4548K kernel code, 180K rwdata, 1244K rodata, 284K init, 310K bss, 11460K reserved, 0K cma-reserved, 0K highmem)
[ 0.000000] Virtual kernel memory layout:
[ 0.000000] vector : 0xffff0000 - 0xffff1000 ( 4 kB)
[ 0.000000] fixmap : 0xffc00000 - 0xfff00000 (3072 kB)
[ 0.000000] vmalloc : 0xe0800000 - 0xff800000 ( 496 MB)
[ 0.000000] lowmem : 0xc0000000 - 0xe0000000 ( 512 MB)
[ 0.000000] pkmap : 0xbfe00000 - 0xc0000000 ( 2 MB)
[ 0.000000] modules : 0xbf000000 - 0xbfe00000 ( 14 MB)
[ 0.000000] .text : 0xc0008000 - 0xc04792c0 (4549 kB)
[ 0.000000] .init : 0xc05d5000 - 0xc061c000 ( 284 kB)
[ 0.000000] .data : 0xc061c000 - 0xc0649200 ( 181 kB)
[ 0.000000] .bss : 0xc0649200 - 0xc0696a00 ( 310 kB)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[ 0.000000] Hierarchical RCU implementation.
[ 0.000000] RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[ 0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[ 0.000000] NR_IRQS:16 nr_irqs:16 16
[ 0.000000] mvebu_mbus: [Firmware Warn]: deprecated mbus-mvebu Device Tree, suspend/resume will not work
[ 0.000000] L2C-310 enabling early BRESP for Cortex-A9
[ 0.000000] L2C-310 full line of zeros enabled for Cortex-A9
[ 0.000000] L2C-310 D prefetch enabled, offset 1 lines
[ 0.000000] L2C-310 dynamic clock gating enabled, standby mode enabled
[ 0.000000] L2C-310 Coherent cache controller enabled, 16 ways, 1024 kB
[ 0.000000] L2C-310 Coherent: CACHE_ID 0x410054c9, AUX_CTRL 0x56070001
[ 0.000000] Switching to timer-based delay loop, resolution 40ns
[ 0.000003] sched_clock: 32 bits at 25MHz, resolution 40ns, wraps every 85899345900ns
[ 0.000009] clocksource: armada_370_xp_clocksource: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 76450417870 ns
[ 0.000129] Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=250000)
[ 0.000136] pid_max: default: 32768 minimum: 301
[ 0.000179] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.000183] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.000401] CPU: Testing write buffer coherency: ok
[ 0.000502] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[ 0.000514] Setting up static identity map for 0x8280 - 0x82d8
[ 0.000580] mvebu-soc-id: MVEBU SoC ID=0x6820, Rev=0x4
[ 0.000648] mvebu-pmsu: Initializing Power Management Service Unit
[ 0.001120] Booting CPU 1
[ 0.001265] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[ 0.001298] Brought up 2 CPUs
[ 0.001304] SMP: Total of 2 processors activated (100.00 BogoMIPS).
[ 0.001307] CPU: All CPU(s) started in SVC mode.
[ 0.003184] VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 4
[ 0.003240] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.003248] futex hash table entries: 512 (order: 3, 32768 bytes)
[ 0.003285] pinctrl core: initialized pinctrl subsystem
[ 0.003634] NET: Registered protocol family 16
[ 0.004130] DMA: preallocated 256 KiB pool for atomic coherent allocations
[ 0.029929] cpuidle: using governor ladder
[ 0.030075] mvebu-pmsu: CPU hotplug support is currently broken on Armada 38x: disabling
[ 0.030082] mvebu-pmsu: CPU idle is currently broken on Armada 38x: disabling
[ 0.060389] reg-fixed-voltage xhci0-vbus: could not find pctldev for node /soc/internal-regs/pinctrl@18000/xhci0-vbus-pins, deferring probe
[ 0.060542] SCSI subsystem initialized
[ 0.060747] usbcore: registered new interface driver usbfs
[ 0.060775] usbcore: registered new interface driver hub
[ 0.060799] usbcore: registered new device driver usb
[ 0.061333] clocksource: Switched to clocksource armada_370_xp_clocksource
[ 0.061690] NET: Registered protocol family 2
[ 0.061940] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.061965] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[ 0.062000] TCP: Hash tables configured (established 4096 bind 4096)
[ 0.062022] UDP hash table entries: 256 (order: 1, 8192 bytes)
[ 0.062034] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[ 0.062095] NET: Registered protocol family 1
[ 0.063005] Crashlog allocated RAM at address 0x3f00000
[ 0.063088] workingset: timestamp_bits=30 max_order=17 bucket_order=0
[ 0.065481] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.065488] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 0.066328] io scheduler noop registered
[ 0.066333] io scheduler deadline registered (default)
[ 0.066742] armada-38x-pinctrl f1018000.pinctrl: registered pinctrl driver
[ 0.067422] mvebu-pcie soc:pcie-controller: PCI host bridge to bus 0000:00
[ 0.067431] pci_bus 0000:00: root bus resource [io 0x1000-0xfffff]
[ 0.067436] pci_bus 0000:00: root bus resource [mem 0xe0000000-0xe7ffffff]
[ 0.067441] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 0.067636] PCI: bus0: Fast back to back transfers disabled
[ 0.067642] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 0.067649] pci 0000:00:02.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 0.067860] PCI: bus1: Fast back to back transfers disabled
[ 0.068111] PCI: bus2: Fast back to back transfers disabled
[ 0.068198] pci 0000:00:01.0: BAR 8: assigned [mem 0xe0000000-0xe01fffff]
[ 0.068204] pci 0000:00:02.0: BAR 8: assigned [mem 0xe0200000-0xe03fffff]
[ 0.068211] pci 0000:01:00.0: BAR 0: assigned [mem 0xe0000000-0xe00fffff 64bit pref]
[ 0.068221] pci 0000:01:00.0: BAR 2: assigned [mem 0xe0100000-0xe01fffff 64bit pref]
[ 0.068230] pci 0000:00:01.0: PCI bridge to [bus 01]
[ 0.068236] pci 0000:00:01.0: bridge window [mem 0xe0000000-0xe01fffff]
[ 0.068243] pci 0000:02:00.0: BAR 0: assigned [mem 0xe0200000-0xe02fffff 64bit pref]
[ 0.068253] pci 0000:02:00.0: BAR 2: assigned [mem 0xe0300000-0xe03fffff 64bit pref]
[ 0.068263] pci 0000:00:02.0: PCI bridge to [bus 02]
[ 0.068268] pci 0000:00:02.0: bridge window [mem 0xe0200000-0xe03fffff]
[ 0.068488] mv_xor f1060800.xor: Marvell shared XOR driver
[ 0.121804] mv_xor f1060800.xor: Marvell XOR (Descriptor Mode): ( xor cpy intr )
[ 0.121894] mv_xor f1060900.xor: Marvell shared XOR driver
[ 0.181784] mv_xor f1060900.xor: Marvell XOR (Descriptor Mode): ( xor cpy intr )
[ 0.181931] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.182815] console [ttyS0] disabled
[ 0.202883] f1012000.serial: ttyS0 at MMIO 0xf1012000 (irq = 21, base_baud = 15625000) is a 16550A
[ 0.910272] console [ttyS0] enabled
[ 0.915898] loop: module loaded
[ 0.919289] ahci-mvebu f10a8000.sata: AHCI 0001.0000 32 slots 2 ports 6 Gbps 0x3 impl platform mode
[ 0.928376] ahci-mvebu f10a8000.sata: flags: 64bit ncq sntf led only pmp fbs pio slum part sxs
[ 0.937496] scsi host0: ahci-mvebu
[ 0.941059] scsi host1: ahci-mvebu
[ 0.944571] ata1: SATA max UDMA/133 mmio [mem 0xf10a8000-0xf10a9fff] port 0x100 irq 41
[ 0.952515] ata2: SATA max UDMA/133 mmio [mem 0xf10a8000-0xf10a9fff] port 0x180 irq 41
[ 0.960823] pxa3xx-nand f10d0000.flash: This platform can't do DMA on this device
[ 0.968575] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xf1
[ 0.974953] nand: AMD/Spansion S34ML01G2
[ 0.978883] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[ 0.986477] pxa3xx-nand f10d0000.flash: ECC strength 16, ECC step size 2048
[ 0.993634] Bad block table found at page 65472, version 0x01
[ 0.999706] Bad block table found at page 65408, version 0x01
[ 1.005631] nand_read_bbt: bad block at 0x000000fa0000
[ 1.010779] nand_read_bbt: bad block at 0x000001260000
[ 1.015935] nand_read_bbt: bad block at 0x0000026c0000
[ 1.021083] nand_read_bbt: bad block at 0x000002e20000
[ 1.026234] nand_read_bbt: bad block at 0x0000032a0000
[ 1.031473] 10 ofpart partitions found on MTD device pxa3xx_nand-0
[ 1.037666] Creating 10 MTD partitions on "pxa3xx_nand-0":
[ 1.043173] 0x000000000000-0x000000200000 : "u-boot"
[ 1.048454] 0x000000200000-0x000000240000 : "u_env"
[ 1.053614] 0x000000240000-0x000000280000 : "s_env"
[ 1.058760] 0x000000900000-0x000000a00000 : "devinfo"
[ 1.064090] 0x000000a00000-0x000003200000 : "kernel1"
[ 1.069504] 0x000001000000-0x000003200000 : "ubi"
[ 1.074583] 0x000003200000-0x000005a00000 : "kernel2"
[ 1.080003] 0x000003800000-0x000005a00000 : "rootfs2"
[ 1.085424] 0x000005a00000-0x000008000000 : "syscfg"
[ 1.090754] 0x000000280000-0x000000900000 : "unused_area"
[ 1.096751] libphy: Fixed MDIO Bus: probed
[ 1.101123] libphy: orion_mdio_bus: probed
[ 1.105383] mvneta_bm f10c8000.bm: Buffer Manager for network controller enabled
[ 1.114149] mvneta f1070000.ethernet eth0: Using hardware mac address c0:56:27:7a:6d:4f
[ 1.123228] mvneta f1034000.ethernet eth1: Using random mac address 66:19:13:a9:94:b6
[ 1.131127] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[ 1.137679] ehci-pci: EHCI PCI platform driver
[ 1.142166] ehci-platform: EHCI generic platform driver
[ 1.147481] ehci-orion: EHCI orion driver
[ 1.151575] orion-ehci f1058000.usb: EHCI Host Controller
[ 1.156996] orion-ehci f1058000.usb: new USB bus registered, assigned bus number 1
[ 1.164632] orion-ehci f1058000.usb: irq 37, io mem 0xf1058000
[ 1.191325] orion-ehci f1058000.usb: USB 2.0 started, EHCI 1.00
[ 1.197493] hub 1-0:1.0: USB hub found
[ 1.201263] hub 1-0:1.0: 1 port detected
[ 1.205595] usbcore: registered new interface driver usb-storage
[ 1.211756] armada38x-rtc f10a3800.rtc: rtc core: registered f10a3800.rtc as rtc0
[ 1.219373] i2c /dev entries driver
[ 1.234361] orion_wdt: Initial timeout 171 sec
[ 1.239060] sdhci: Secure Digital Host Controller Interface driver
[ 1.245261] sdhci: Copyright(c) Pierre Ossman
[ 1.249725] sdhci-pltfm: SDHCI platform and OF driver helper
[ 1.258469] marvell-cesa f1090000.crypto: CESA device successfully registered
[ 1.266080] NET: Registered protocol family 10
[ 1.271025] NET: Registered protocol family 17
[ 1.275506] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[ 1.288496] 8021q: 802.1Q VLAN Support v1.8
[ 1.292706] ata2: SATA link down (SStatus 0 SControl 300)
[ 1.292757] Registering SWP/SWPB emulation handler
[ 1.293866] xhci-hcd f10f8000.usb3: xHCI Host Controller
[ 1.293878] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 2
[ 1.293940] xhci-hcd f10f8000.usb3: hcc params 0x0a000990 hci version 0x100 quirks 0x00010010
[ 1.293961] xhci-hcd f10f8000.usb3: irq 43, io mem 0xf10f8000
[ 1.294235] hub 2-0:1.0: USB hub found
[ 1.294249] hub 2-0:1.0: 1 port detected
[ 1.294333] xhci-hcd f10f8000.usb3: xHCI Host Controller
[ 1.294341] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 3
[ 1.294374] usb usb3: We don't know the algorithms for LPM for this host, disabling LPM.
[ 1.294553] hub 3-0:1.0: USB hub found
[ 1.294566] hub 3-0:1.0: 1 port detected
[ 1.295059] UBI error: no valid UBI magic found inside mtd5
[ 1.295059] mvsw61xx 10.mvsw61xx: Found MV88E6176 at f1072004.mdio-mi:10
[ 1.295062] mvsw61xx 10.mvsw61xx: Using direct addressing
[ 1.308253] armada38x-rtc f10a3800.rtc: setting system clock to 2089-02-01 00:16:31 UTC (3758055391)
[ 1.393312] Waiting 1 sec before mounting root device...
[ 1.393388] ata1: SATA link down (SStatus 0 SControl 300)
[ 1.651324] usb 2-1: new high-speed USB device number 2 using xhci-hcd
[ 1.823720] usb-storage 2-1:1.0: USB Mass Storage device detected
[ 1.829913] scsi host2: usb-storage 2-1:1.0
[ 2.481396] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[ 2.488895] Please append a correct "root=" boot option; here are the available partitions:
[ 2.497280] 1f00 2048 mtdblock0 [ 2.501296] (driver?)
[ 2.503667] 1f01 256 mtdblock1 [ 2.507682] (driver?)
[ 2.510047] 1f02 256 mtdblock2 [ 2.514067] (driver?)
[ 2.516431] 1f03 1024 mtdblock3 [ 2.520445] (driver?)
[ 2.522813] 1f04 40960 mtdblock4 [ 2.526828] (driver?)
[ 2.529193] 1f05 34816 mtdblock5 [ 2.533212] (driver?)
[ 2.535576] 1f06 40960 mtdblock6 [ 2.539591] (driver?)
[ 2.541959] 1f07 34816 mtdblock7 [ 2.545974] (driver?)
[ 2.548338] 1f08 38912 mtdblock8 [ 2.552357] (driver?)
[ 2.554721] 1f09 6656 mtdblock9 [ 2.558736] (driver?)
[ 2.561100] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[ 2.569383] CPU1: stopping
[ 2.572098] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.9.20 #0
[ 2.578030] Hardware name: Marvell Armada 380/385 (Device Tree)
[ 2.583976] [<c0016010>] (unwind_backtrace) from [<c0012220>] (show_stack+0x10/0x14)
[ 2.591741] [<c0012220>] (show_stack) from [<c020f63c>] (dump_stack+0x7c/0x9c)
[ 2.598981] [<c020f63c>] (dump_stack) from [<c0014f0c>] (handle_IPI+0xcc/0x184)
[ 2.606308] [<c0014f0c>] (handle_IPI) from [<c0009450>] (gic_handle_irq+0x78/0x94)
[ 2.613895] [<c0009450>] (gic_handle_irq) from [<c0012c8c>] (__irq_svc+0x6c/0x90)
[ 2.621394] Exception stack(0xdf475f90 to 0xdf475fd8)
[ 2.626455] 5f80: 00000001 00000000 00000000 c001b160
[ 2.634652] 5fa0: 00000000 df474000 c061efe4 00000002 c0619138 00000000 df475fe8 00000001
[ 2.642848] 5fc0: df46c040 df475fe0 c000f808 c000f80c 60000013 ffffffff
[ 2.649478] [<c0012c8c>] (__irq_svc) from [<c000f80c>] (arch_cpu_idle+0x2c/0x38)
[ 2.656895] [<c000f80c>] (arch_cpu_idle) from [<c005b00c>] (cpu_startup_entry+0xf0/0x19c)
[ 2.665093] [<c005b00c>] (cpu_startup_entry) from [<000095ac>] (0x95ac)
[ 2.672132] Rebooting in 1 seconds..
BootROM - 1.73Interesting, when I flash the OEM stock image, I get different bad blocks identified while flashing versus any other image:
OEM:
Marvell>> run flash_pri_image
Using egiga0 device
TFTP from server 192.168.1.254; our IP address is 192.168.1.1
Filename 'cobra.img'.
Load address: 0x2000000
Loading: #################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
##########
6.9 MiB/s
done
Bytes transferred = 30671104 (1d40100 hex)
NAND erase: device 0 offset 0xa00000, size 0x2800000
Skipping bad block at 0x00fa0000
Skipping bad block at 0x01260000
Skipping bad block at 0x026c0000
Skipping bad block at 0x02e20000
Erasing at 0x31e0000 -- 100% complete.
OK
NAND write: device 0 offset 0xa00000, size 0x1d40100
Skip bad block 0x00fa0000
Skip bad block 0x01260000
Skip bad block 0x026c0000
30671104 bytes written: OK
Marvell>> run nandboot
NAND read: device 0 offset 0xa00000, size 0x600000
Skipping bad block 0x00fa0000
6291456 bytes read: OK
## Booting kernel from Legacy Image at 02000000 ...
Image Name: Linksys WRT1900ACS Router
Created: 2015-10-03 7:53:20 UTC
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 4232779 Bytes = 4 MiB
Load Address: 00008000
Entry Point: 00008000
Verifying Checksum ... OK
Loading Kernel Image ... OK
OK
Starting kernel ...
Uncompressing Linux... done, booting the kernel.
Booting Linux on physical CPU 0x0
Linux version 3.10.39 (root@build-vm) (gcc version 4.6.4 (Linaro GCC branch-4.6.4. Marvell GCC Dev 201310-2126.3d181f66 64K MAXPAGESIZE ALIGN) ) #1 SMP Sat Oct 3 00:53:03 PDT 2015
Flashing for example LEDE gives me:
Marvell>> run flash_alt_image
Using egiga0 device
TFTP from server 192.168.1.254; our IP address is 192.168.1.1
Filename 'cobra.img'.
Load address: 0x2000000
Loading: #################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#############################################################
6.9 MiB/s
done
Bytes transferred = 15204352 (e80000 hex)
NAND erase: device 0 offset 0x3200000, size 0x2800000
Skipping bad block at 0x032a0000
Erasing at 0x59e0000 -- 100% complete.
OK
NAND write: device 0 offset 0x3200000, size 0xe80000
Skip bad block 0x032a0000
15204352 bytes written: OK
Marvell>> run altnandboot
NAND read: device 0 offset 0x3200000, size 0x600000
Skipping bad block 0x032a0000
6291456 bytes read: OK
## Booting kernel from Legacy Image at 02000000 ...
Image Name: ARM LEDE Linux-4.9.20
Created: 2017-05-19 22:26:03 UTC
Image Type: ARM Linux Kernel Image (uncompressed)
Data Size: 2268411 Bytes = 2.2 MiB
Load Address: 00008000
Entry Point: 00008000
Verifying Checksum ... OK
Loading Kernel Image ... OK
OK
Starting kernel ...
[ 0.000000] Booting Linux on physical CPU 0x0
[ 0.000000] Linux version 4.9.20 (ag33e33@ubuntu) (gcc version 5.4.0 (LEDE GCC 5.4.0 r4164-48d71ab) ) #0 SMP Fri May 19 22:26:03 2017
[ 0.000000] CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=10c5387d
Also, during Linksys OEM boot, I see it doing some interesting block masking stuff that other firmwares don't do. Is this what allows Linksys firmware to boot with bad nandblocks?
md: Waiting for all devices to be available before autodetect
md: If you don't use raid, use raid=noautodetect
md: Autodetecting RAID arrays.
md: Scanned 0 and added 0 devices.
md: autorun ...
md: ... autorun DONE.
jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x017a0000: 0x4c2e instead
jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x017a0004: 0x534b instead
jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x017a0008: 0x302e instead
jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x017a000c: 0x3030 instead
jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x017a0010: 0x5742 instead
jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x017a0014: 0x3931 instead
jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x017a0018: 0x4341 instead
jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x017a001c: 0x2020 instead
jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x017a0020: 0x3241 instead
jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x017a0024: 0x3534 instead
jffs2: Further such events for this erase block will not be printed
VFS: Mounted root (jffs2 filesystem) readonly on device 31:5.
devtmpfs: mounted
Freeing unused kernel memory: 252K (c0766000 - c07a5000)There's a slight different in the mtd memory layouts between stock and wrt/lede:
OEM/Linksys:
Creating 10 MTD partitions on "armada-nand":
0x000000000000-0x000000200000 : "uboot"
0x000000200000-0x000000240000 : "u_env"
0x000000240000-0x000000280000 : "s_env"
0x000000900000-0x000000a00000 : "devinfo"
0x000000a00000-0x000003200000 : "kernel"
0x000001000000-0x000003200000 : "rootfs"
0x000003200000-0x000005a00000 : "alt_kernel"
0x000003800000-0x000005a00000 : "alt_rootfs"
0x000000a00000-0x000005a00000 : "ubifs"
0x000005a00000-0x000008000000 : "syscfg"
LEDE
[ 1.041892] 10 ofpart partitions found on MTD device pxa3xx_nand-0
[ 1.048086] Creating 10 MTD partitions on "pxa3xx_nand-0":
[ 1.053591] 0x000000000000-0x000000200000 : "u-boot"
[ 1.058873] 0x000000200000-0x000000240000 : "u_env"
[ 1.064028] 0x000000240000-0x000000280000 : "s_env"
[ 1.069186] 0x000000900000-0x000000a00000 : "devinfo"
[ 1.074519] 0x000000a00000-0x000003200000 : "kernel1"
[ 1.079937] 0x000001000000-0x000003200000 : "rootfs1"
[ 1.085345] 0x000003200000-0x000005a00000 : "kernel2"
[ 1.090764] 0x000003800000-0x000005a00000 : "ubi"
[ 1.095837] 0x000005a00000-0x000008000000 : "syscfg"
[ 1.101169] 0x000000280000-0x000000900000 : "unused_area"
McDebian:
[ 1.083816] 10 ofpart partitions found on MTD device pxa3xx_nand-0
[ 1.090009] Creating 10 MTD partitions on "pxa3xx_nand-0":
[ 1.095517] 0x000000000000-0x000000200000 : "u-boot"
[ 1.100954] 0x000000200000-0x000000240000 : "u_env"
[ 1.106257] 0x000000240000-0x000000280000 : "s_env"
[ 1.111513] 0x000000900000-0x000000a00000 : "devinfo"
[ 1.116965] 0x000000a00000-0x000003200000 : "kernel1"
[ 1.122512] 0x000001000000-0x000003200000 : "rootfs1"
[ 1.128014] 0x000003200000-0x000005a00000 : "kernel2"
[ 1.133556] 0x000003800000-0x000005a00000 : "rootfs2"
[ 1.139070] 0x000005a00000-0x000008000000 : "syscfg"
[ 1.144521] 0x000000280000-0x000000900000 : "unused_area"
The UBI partition is on 0x000003800000-0x000005a00000 on LEDE image and UBI partition is on 0x000000a00000-0x000005a00000. Meanwhile, McDebian which is the only other one left, doesn't even have a UBI partition on MTD. I wonder if that sidesteps any bad nand blocks? Is there a way to alter this on LEDE?
Output about bad nandblocks from mcdebian tools:
root@MCDEBIAN:/tmp# nandtest /dev/mtd4
ECC corrections: 0
ECC failures : 0
Bad blocks : 4
BBT blocks : 0
Bad block at 0x005a0000
Bad block at 0x00860000
01aa0000: reading...
1 bit(s) ECC corrected at 01aa0000
Bad block at 0x01cc0000
Bad block at 0x02420000
027e0000: checking...
Finished pass 1 successfully
root@MCDEBIAN:/tmp# nandtest /dev/mtd6
ECC corrections: 0
ECC failures : 0
Bad blocks : 1
BBT blocks : 0
Bad block at 0x000a0000
027e0000: checking...
Finished pass 1 successfullytry nandtest on mtd5 and mtd7
I'm throwing in the towel and returning this unit actually. There's way too much wrong with the NAND stuff, and I've spent a lot of time chasing this down. Hopefully others benefit from my documentation.
Also sorry to starcms@ from the other thread -- I really didn't have any intentions of shitting up the other thread. It just ended up veering offtopic, and my propensity for posting detailed logs probably did make the other thread less readable.
Thank you chadster766@ for making McDebian and being so helpful, along with the other people on this forum! I will happily continue to run david & cybernook's builds on my WRT1200AC that was bought new -- and so you might see me pop up again.
Great community.
Sorry you couldn't get it going, you certainly put yourself through it! Don't feel the need to apologize to anyone, we are all here to help, anyone who feels otherwise can stop posting.
In your position, I would likely return it as well.