Tylko skąd wziąć bootloader?

Po drugie on jest na BGA   więc nie dam rady tego zrobić.   Są dwie wersje  jedna ma 128MB flash + 8MB  SPI  druga to 256MB ale BGA

Załączam log jak to wygląda .  Caly się nie zmiescił.

U-Boot 2012.07-01112-g58c3494-dirty [local,local] (Mar 14 2017 - 14:50:38)
BRT-AC828 bootloader version: 1.0.0.8

smem ram ptable found: ver: 0 len: 5
ASUS BRT-AC828 gpio init : wps / reset pin
DRAM:  491 MiB
Maximum malloc length: 4096 KBytes
mem_malloc_start/brk/end: 0x5fb15000/5fb15000/5ff35000
Relocation offset: 1ed35000
NAND:  SF: Unsupported manufacturer 00
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
256 MiB
*** Warning - bad CRC, using default environment

PCI0 Link Intialized
PCI1 Link Intialized
In:    serial
Out:   serial
Err:   serial
Check bootloader area ...
name         : offset   size
0:SBL1       : 00000000 00020000
0:MIBIB      : 00020000 00060000
0:SBL2       : 00080000 00040000
0:SBL3       : 000c0000 00060000
0:DDRCONFIG  : 00120000 00040000
0:SSD        : 00160000 00040000
0:TZ         : 001a0000 00080000
0:RPM        : 00220000 00060000
0:APPSBL     : 00280000 00160000
0:APPSBLENV  : 003e0000 00020000
Net:   software reset RTL8370MB...
.....88a8
rtk_switch_init() return 0
rtk_port_macForceLinkExt_set(EXT_PORT:16): return 0
rtk_port_macForceLinkExt_set(EXT_PORT:17): return 0
rtk_led_enable_set(LED_GROUP_0...): return 0
rtk_led_operation_set(): return 0
rtk_led_groupConfig_set(LED_GROUP_0...): return 0
current led blinkRate: 0
Rtkswitch inits done
MAC0 addr:0:aa:bb:cc:dd:e0
Port:0 speed 10Mbps
MAC1 addr:0:aa:bb:cc:dd:e0
MAC2 addr:0:aa:bb:cc:dd:e0
MAC3 addr:0:aa:bb:cc:dd:e0
Port:3 speed 10Mbps
eth0, eth1, eth2, eth3
Creating 1 MTD partitions on "nand0":
0x00400000-0x10000000 : "mtd=2"
UBI: attaching mtd1 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    126976 bytes
UBI: smallest flash I/O unit:    2048
UBI: VID header offset:          2048 (aligned 2048)
UBI: data offset:                4096
UBI: max. sequence number:       6891
UBI warning: print_rsvd_warning: cannot reserve enough PEBs for bad PEB handling                                                                                                                                                             , reserved 18, need 20
UBI error: ubi_wl_init_scan: no enough physical eraseblocks (0, need 1)
UBI error: ubi_init: cannot attach mtd1
UBI error: ubi_init: UBI error: cannot initialize UBI, error -12
UBI init error 12
Mount UBI device fail. (r = 12)

Please choose the operation:
   1: Load System code to SDRAM via TFTP.
   2: Load System code then write to Flash via TFTP.
   3: Boot System code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.                     0
   3: Boot System code via Flash (default).

BRT-AC828 bootloader version: 1.0.0.8
EEPROM set in RAM damaged! (w = -2, all_sets_damaged 0)
Read from Flash offset 0x0!
Read EEPROM set from Flash 0x0 fail! (r = -2)

### [set boot ver] flash write fail
MAC Address:xx
MAC0 addr:0:aa:bb:cc:dd:e0
Port:0 speed 10Mbps
MAC1 addr:0:aa:bb:cc:dd:e0
MAC2 addr:0:aa:bb:cc:dd:e0
MAC3 addr:0:aa:bb:cc:dd:e0
Port:3 speed 10Mbps
, eth0, eth1, eth2, eth3
   No valid 2nd firmware found at 0x044aa000
ERROR: can't get kernel image!
   No valid 1st firmware found at 0x0049b000
ERROR: can't get kernel image!

Hello!! Enter Recuse Mode: (Check error)

preferred nic: eth1
switch prereq:0
tftpd start

Our IP address is:(192.168.1.1)
Wait for TFTP request...
tftpd open
D D D D D D D D D D D D D D D D D D D D D D D D D D D Got ARP REQUEST, return ou                                                                                                                                                             r IP
D D D D D
Get read request from:(192.168.1.114)
Firmware Restoration assigns IP address: 192.168.1.49
Got ARP REPLY, set eth addr (xx)
Got ARP REQUEST, return our IP
D #
First block received
#####
done
RAMtoFLASH
Chk trx magic
Download of 0x2aa9745 bytes completed
Check TRX and write it to FLASH
Solve TRX, ptr=0x42000000
   Image Name:
   Image Type:   ARM Linux Kernel Image (lzma compressed)
   Data Size:    44734213 Bytes = 42.7 MiB
   Load Address: 41508000
   Entry Point:  41508000
   Verifying Checksum ... OK

Erase kernel block !!
From c049b000 To c2f44745 (44734277/h:2aa9745)
Write 1st firmware fail. (r = -2)
Write 2nd firmware fail. (r = -2)
rescue failed! (-2)
resetting ...

Resetting with watch dog!

U-Boot 2012.07-01112-g58c3494-dirty [local,local] (Mar 14 2017 - 14:50:38)
BRT-AC828 bootloader version: 1.0.0.8

smem ram ptable found: ver: 0 len: 5
ASUS BRT-AC828 gpio init : wps / reset pin
DRAM:  491 MiB
Maximum malloc length: 4096 KBytes
mem_malloc_start/brk/end: 0x5fb15000/5fb15000/5ff35000
Relocation offset: 1ed35000
NAND:  SF: Unsupported manufacturer 00
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
256 MiB
*** Warning - bad CRC, using default environment

PCI0 Link Intialized
PCI1 Link Intialized
In:    serial
Out:   serial
Err:   serial
Check bootloader area ...
name         : offset   size
0:SBL1       : 00000000 00020000
0:MIBIB      : 00020000 00060000
0:SBL2       : 00080000 00040000
0:SBL3       : 000c0000 00060000
0:DDRCONFIG  : 00120000 00040000
0:SSD        : 00160000 00040000
0:TZ         : 001a0000 00080000
0:RPM        : 00220000 00060000
0:APPSBL     : 00280000 00160000
0:APPSBLENV  : 003e0000 00020000
Net:   software reset RTL8370MB...
.....88a8
rtk_switch_init() return 0
rtk_port_macForceLinkExt_set(EXT_PORT:16): return 0
rtk_port_macForceLinkExt_set(EXT_PORT:17): return 0
rtk_led_enable_set(LED_GROUP_0...): return 0
rtk_led_operation_set(): return 0
rtk_led_groupConfig_set(LED_GROUP_0...): return 0
current led blinkRate: 0
Rtkswitch inits done
MAC0 addr:0:aa:bb:cc:dd:e0
Port:0 speed 10Mbps
MAC1 addr:0:aa:bb:cc:dd:e0
MAC2 addr:0:aa:bb:cc:dd:e0
MAC3 addr:0:aa:bb:cc:dd:e0
Port:3 speed 10Mbps
eth0, eth1, eth2, eth3
Creating 1 MTD partitions on "nand0":
0x00400000-0x10000000 : "mtd=2"
UBI: attaching mtd1 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    126976 bytes
UBI: smallest flash I/O unit:    2048
UBI: VID header offset:          2048 (aligned 2048)
UBI: data offset:                4096
UBI: max. sequence number:       6891
UBI warning: print_rsvd_warning: cannot reserve enough PEBs for bad PEB handling                                                                                                                                                             , reserved 18, need 20
UBI error: ubi_wl_init_scan: no enough physical eraseblocks (0, need 1)
UBI error: ubi_init: cannot attach mtd1
UBI error: ubi_init: UBI error: cannot initialize UBI, error -12
UBI init error 12
Mount UBI device fail. (r = 12)

Please choose the operation:
   1: Load System code to SDRAM via TFTP.
   2: Load System code then write to Flash via TFTP.
   3: Boot System code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.                     0
   3: Boot System code via Flash (default).

BRT-AC828 bootloader version: 1.0.0.8
EEPROM set in RAM damaged! (w = -2, all_sets_damaged 0)
Read from Flash offset 0x0!
Read EEPROM set from Flash 0x0 fail! (r = -2)

### [set boot ver] flash write fail
MAC Address: 18:4D:B1:5F:90:80
MAC0 addr:0:aa:bb:cc:dd:e0
Port:0 speed 10Mbps
MAC1 addr:0:aa:bb:cc:dd:e0
MAC2 addr:0:aa:bb:cc:dd:e0
MAC3 addr:0:aa:bb:cc:dd:e0
Port:3 speed 10Mbps
, eth0, eth1, eth2, eth3
   Image Name:
   Image Type:   ARM Linux Kernel Image (lzma compressed)
   Data Size:    44734213 Bytes = 42.7 MiB
   Load Address: 41508000
   Entry Point:  41508000
   Verifying Checksum ... OK
   Image Name:
   Image Type:   ARM Linux Kernel Image (lzma compressed)
   Data Size:    44734213 Bytes = 42.7 MiB
   Load Address: 41508000
   Entry Point:  41508000
   Verifying Checksum ... OK
   Image Name:
   Image Type:   ARM Linux Kernel Image (lzma compressed)
   Data Size:    44734213 Bytes = 42.7 MiB
   Load Address: 41508000
   Entry Point:  41508000
   Uncompressing Kernel Image ... OK
volume linux seq: 4
Using machid 0x1260 from environment

Starting kernel ...

Booting Linux on physical CPU 0
Linux version 3.4.103 (root@asus) (gcc version 4.6.3 20120201 (prerelease) (Lina                                                                                                                                                             ro GCC 4.6-2012.02) ) #1 SMP PREEMPT Wed Dec 5 01:57:32 CST 2018
CPU: ARMv7 Processor [512f04d0] revision 0 (ARMv7), cr=10c5387d
CPU: PIPT / VIPT nonaliasing data cache, PIPT instruction cache
Machine: Qualcomm Atheros AP148 reference board
msm_reserve_memory: 0x44000000, 0x600000
msm_reserve_memory: 0x44600000, 0x200000
memory pool 3 (start 5fc00000 size 400000) initialized
Memory policy: ECC disabled, Data cache writealloc
smem_find(137, 80): wrong size 72
socinfo_init: v6, id=280, ver=3.0, raw_id=17, raw_ver=17, hw_plat=0,  hw_plat_ve                                                                                                                                                             r=65536
accessory_chip=0 hw_plat_subtype=0
PERCPU: Embedded 8 pages/cpu @c0d61000 s11136 r8192 d13440 u32768
Built 1 zonelists in Zone order, mobility grouping off.  Total pages: 121642
Kernel command line: console=ttyHSL1,115200n8 rootfstype=squashfs root=/dev/mtdb                                                                                                                                                             lock6 ubi.mtd=UBI_DEV
PID hash table entries: 2048 (order: 1, 8192 bytes)
Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
Memory: 43MB 436MB = 479MB total
Memory: 476292k/488580k available, 14204k reserved, 0K highmem
Virtual kernel memory layout:
    vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
    vmalloc : 0xdf000000 - 0xff000000   ( 512 MB)
    lowmem  : 0xc0000000 - 0xdeb00000   ( 491 MB)
    pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
    modules : 0xbf000000 - 0xbfe00000   (  14 MB)
      .text : 0xc0008000 - 0xc0633000   (6316 kB)
      .init : 0xc0700000 - 0xc0803b80   (1039 kB)
      .data : 0xc0804000 - 0xc089ade0   ( 604 kB)
       .bss : 0xc089ae04 - 0xc095d83c   ( 779 kB)
SLUB: Genslabs=11, HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
_ Reboot message ... _______________________________________________________
>>> Restarting system.
>>> Going down for restart now
>>>
____________________________________________________________________________
Preemptible hierarchical RCU implementation.
NR_IRQS:1433
sched_clock: 32 bits at 32kHz, resolution 31233ns, wraps every 134146462ms
Calibrating delay using timer specific routine.. 12.55 BogoMIPS (lpj=62799)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
hw perfevents: enabled with ARMv7 Krait PMU driver, 5 counters available
Setting up static identity map for 0x419040c8 - 0x41904150
CPU1: Booted secondary processor
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
Brought up 2 CPUs
SMP: Total of 2 processors activated (25.11 BogoMIPS).
dummy:
NET: Registered protocol family 16
AXI: msm_bus_fabric_init_driver(): msm_bus_fabric_init_driver
meminfo_init: smem ram ptable found: ver: 0 len: 5
Found 1 memory banks grouped into 8 memory regions
gpiochip_add: registered GPIOs 0 to 151 on device: msmgpio
smem_find(137, 80): wrong size 72
socinfo_init: v6, id=280, ver=3.0, raw_id=17, raw_ver=17, hw_plat=0,  hw_plat_ve                                                                                                                                                             r=65536
accessory_chip=0 hw_plat_subtype=0
msm_rpm_init: RPM firmware 3.0.16777371
clk_tbl_nss_fast - loaded
hw-breakpoint: found 5 (+1 reserved) breakpoint and 4 watchpoint registers.
hw-breakpoint: maximum watchpoint size is 8 bytes.
msm_dmov_memcpy_init: Success
sps:BAM 0x12244000 enabled: ver:0x5, number of pipes:20
sps:BAM 0x12244000 is registered.
sps:sps is ready.
msm_pcie_setup: link initialized
PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [mem 0x08000000-0x0fefffff]
PCI: bus0: Fast back to back transfers disabled
pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
PCI: bus1: Fast back to back transfers disabled
msm_pcie_setup: link initialized
PCI host bridge to bus 0000:02
pci_bus 0000:02: root bus resource [mem 0x2e000000-0x31efffff]
PCI: bus2: Fast back to back transfers disabled
pci 0000:02:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
PCI: bus3: Fast back to back transfers disabled
pci 0000:02:00.0: BAR 8: assigned [mem 0x2e000000-0x2e1fffff]
pci 0000:03:00.0: BAR 0: assigned [mem 0x2e000000-0x2e1fffff 64bit]
pci 0000:02:00.0: PCI bridge to [bus 03-03]
pci 0000:02:00.0:   bridge window [mem 0x2e000000-0x2e1fffff]
PCI: enabling device 0000:02:00.0 (0140 -> 0143)
pci 0000:00:00.0: BAR 8: assigned [mem 0x08000000-0x081fffff]
pci 0000:01:00.0: BAR 0: assigned [mem 0x08000000-0x081fffff 64bit]
pci 0000:00:00.0: PCI bridge to [bus 01-01]
pci 0000:00:00.0:   bridge window [mem 0x08000000-0x081fffff]
PCI: enabling device 0000:00:00.0 (0140 -> 0143)
bio: create slab <bio-0> at 0
SCSI subsystem initialized
Switching to clocksource gp_timer
NET: Registered protocol family 2
IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
TCP established hash table entries: 16384 (order: 5, 131072 bytes)
TCP bind hash table entries: 16384 (order: 5, 131072 bytes)
TCP: Hash tables configured (established 16384 bind 16384)
TCP: reno registered
UDP hash table entries: 256 (order: 1, 8192 bytes)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
NET: Registered protocol family 1
Detected 5 counters on the L2CC PMU.
Partition(from smem) SBL1 -- Offset:0 Size:1
Partition(from smem) MIBIB -- Offset:1 Size:3
Partition(from smem) SBL2 -- Offset:4 Size:2
Partition(from smem) SBL3 -- Offset:6 Size:3
Partition(from smem) DDRCONFIG -- Offset:9 Size:2
Partition(from smem) SSD -- Offset:b Size:2
Partition(from smem) TZ -- Offset:d Size:4
Partition(from smem) RPM -- Offset:11 Size:3
Partition(from smem) APPSBL -- Offset:14 Size:b
Partition(from smem) APPSBLENV -- Offset:1f Size:1
acpuclk-ipq806x acpuclk-ipq806x: SPEED BIN: 0
acpuclk-ipq806x acpuclk-ipq806x: ACPU PVS: 4
acpuclk-ipq806x acpuclk-ipq806x: CPU0: 6 frequencies supported
acpuclk-ipq806x acpuclk-ipq806x: CPU1: 6 frequencies supported
msm_rpm_log_probe: OK
squashfs: version 4.0 (2009/01/31) Phillip Lougher
msgmni has been set to 930
alg: No test for cipher_null (cipher_null-generic)
alg: No test for ecb(cipher_null) (ecb-cipher_null)
alg: No test for digest_null (digest_null-generic)
alg: No test for compress_null (compress_null-generic)
alg: No test for xz (xz-generic)
alg: No test for stdrng (krng)
Asymmetric key parser 'x509' registered
io scheduler noop registered
io scheduler deadline registered (default)
io scheduler cfq registered
HDLC line discipline maxframe=4096
N_HDLC line discipline registered.
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
msm_serial_hs: probe of msm_serial_hs.0 failed with error -2
msm_serial_hs module loaded
msm_serial_hsl: detected port #1
msm_serial_hsl.1: ttyHSL1 at MMIO 0x12490000 (irq = 227) is a MSM
msm_serial_hsl: console setup on port #1
console [ttyHSL1] enabled
msm_serial_hsl: driver initialized
using mdc(1) mdio(0)
0x88a8,0x88a8,0x88a8,0x88a8,0x88a8,0x88a8,
MDC delay in 250 nano second
rtk_switch_init() return 0
initialize_switch: Skip rtk_port_macForceLinkExt_set(port 16)
initialize_switch: Skip rtk_port_macForceLinkExt_set(port 17)
power down all ports
rtk_led_enable_set(LED_GROUP_0...): return 0
rtk_led_operation_set(): return 0
rtk_led_groupConfig_set(LED_GROUP_0...): return 0
current led blinkRate: 0
rtk_switch_maxPktLenCfg_get(0): return 0
current rtk_switch_maxPktLen(0): 16368
rtk_switch_maxPktLenCfg_set(0): return 0
rtk_switch_maxPktLenCfg_get(1): return 0
current rtk_switch_maxPktLen(1): 16368
rtk_switch_maxPktLenCfg_set(1): return 0
rtk_switch_portMaxPktLen_set(0, GE, 0): return 0
rtk_switch_portMaxPktLen_set(1, GE, 0): return 0
rtk_switch_portMaxPktLen_set(2, GE, 0): return 0
rtk_switch_portMaxPktLen_set(3, GE, 0): return 0
rtk_switch_portMaxPktLen_set(4, GE, 0): return 0
rtk_switch_portMaxPktLen_set(5, GE, 0): return 0
rtk_switch_portMaxPktLen_set(6, GE, 0): return 0
rtk_switch_portMaxPktLen_set(7, GE, 0): return 0
rtk_switch_greenEthernet_get(): return 0
current rtk_switch_greenEthernet state: 1
rtk_switch_greenEthernet_set(): return 0
rtk_vlan_init(): return 0
rtk_filter_igrAcl_init(): return 0
wan_stb_x 0 STB,LAN/WAN ports mask 0x000,300ff/000
# setting realtek trunk group(2) ports(00030000)
# setting realtek trunk algo(0x00000001,0)
rtl8370mb driver initialized
brd: module loaded
ahci ahci.0: forcing PORTS_IMPL to 0x1
ahci ahci.0: AHCI 0001.0300 32 slots 1 ports 6 Gbps 0x1 impl platform mode
ahci ahci.0: flags: ncq sntf pm led clo only pmp pio slum part ccc apst
scsi0 : ahci_platform
ata1: SATA max UDMA/133 mmio [mem 0x29000000-0x2900017f] port 0x100 irq 241
msm_nand_probe: phys addr 0x1ac00000
msm_nand_probe: dmac 0x3
msm_nand_probe: allocated dma buffer at ffdfe000, dma_addr 5ef12000
status: 20
nandid: 1590aac2 maker c2 device aa
ONFI probe : Found an ONFI compliant device MX30UF2G18AB        -
ONFI probe success
Found a supported NAND device
NAND Controller ID : 0x4030
NAND Device ID  : 0x1590aac2
Buswidth : 8 Bits
Density  : 256 MByte
Pagesize : 2048 Bytes
Erasesize: 131072 Bytes
Oobsize  : 64 Bytes
CFG0 Init  : 0xa8d408c0
CFG1 Init  : 0x0004745c
ECCBUFCFG  : 0x00000203
MTD_BOOT_PART_SIZE 3e0000 MTD_CONFIG_PART_SIZE 20000 msm_nand_partitions[0].size                                                                                                                                                              3e0000 mtd->erasesize 20000
Creating 2 MTD partitions on "msm_nand":
0x000000000000-0x0000003e0000 : "Bootloader"
0x000000400000-0x000010000000 : "UBI_DEV"
ata1: SATA link down (SStatus 0 SControl 300)
UBI: attaching mtd1 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    126976 bytes
UBI: smallest flash I/O unit:    2048
UBI: VID header offset:          2048 (aligned 2048)
UBI: data offset:                4096
UBI: max. sequence number:       6891
UBI warning: print_rsvd_warning: cannot reserve enough PEBs for bad PEB handling                                                                                                                                                             , reserved 17, need 20
UBI: attached mtd1 to ubi0
UBI: MTD device name:            "UBI_DEV"
UBI: MTD device size:            252 MiB
UBI: number of good PEBs:        2003
UBI: number of bad PEBs:         13
UBI: number of corrupted PEBs:   0
UBI: max. allowed volumes:       128
UBI: wear-leveling threshold:    4096
UBI: number of internal volumes: 1
UBI: number of user volumes:     6
UBI: available PEBs:             0
UBI: total number of reserved PEBs: 2003
UBI: number of PEBs reserved for bad PEB handling: 17
UBI: max/mean erase counter: 8195/7
UBI: image sequence number:  1803883902
UBI: background thread "ubi_bgt0d" started, PID 58
gluebi_create: Hook read/write method of Factory.
gluebi_create: Hook read/write method of Factory2.
[Factory-0]: OK (ver: 22)
[Factory2-0]: OK (ver: 22)
Select [Factory-0]
Creating 1 MTD partitions on "linux":
0x0000002106c0-0x00000400f000 : "rootfs"
Creating 1 MTD partitions on "linux2":
0x0000002106c0-0x00000400f000 : "rootfs2"
gluebi_create: skip jffs2 volume
bonding: Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011)
IMQ driver loaded successfully. (numdevs = 8, numqueues = 1)
        Hooking IMQ after NAT on PREROUTING.
        Hooking IMQ before NAT on POSTROUTING.
GPIO Bitbanged MDIO: probed
PPP generic driver version 2.4.2
PPP MPPE Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
cpuidle: using governor ladder
cpuidle: using governor menu
u32 classifier
nf_conntrack version 0.5.0 (7442 buckets, 29768 max)
xt_time: kernel timezone is -0000
gre: GRE over IPv4 demultiplexor driver
ip_tables: (C) 2000-2006 Netfilter Core Team
arp_tables: (C) 2002 David S. Miller
TCP: cubic registered
NET: Registered protocol family 10
ip6_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 17
NET: Registered protocol family 15
Bridge firewalling registered
L2TP core driver, V2.0
PPPoL2TP kernel driver, V2.0
8021q: 802.1Q VLAN Support v1.8
VFP support v0.3: implementor 51 architecture 64 part 4d variant 2 rev 0
Registering SWP/SWPB emulation handler
clock_late_init: Removing enables held for handed-off clocks
ipq_nss_get_mac_addr: MAC[0]: xx
ipq_nss_get_mac_addr: MAC[1]: xx
ipq_nss_get_mac_addr: MAC[2]: xx
ipq_nss_get_mac_addr: MAC[3]: 3xx
no pmic restart interrupt specified
VFS: Mounted root (squashfs filesystem) readonly on device 31:6.
Freeing init memory: 1036K
offset 0x13000 elapse 40ms
1: set_action 0

Hit ENTER for console...

firmware version: 3.0.0.4.380_7587-ga6a3821
bootloader version: BRT-AC828-01-00-00-08
firmware version: 3.0.0.4
[1 init:init_nvram +10] init_nvram fobled: GPIO#9: switch ports mask        0.
r model(22)
set_basic_ifname_vars: WAN eth0 LAN bond0 2G ath0 5bled: GPIO#6: switch ports ma                                                                                                                                                             sk        0.
G ath1 USB usb AP_LAN N/A DW_WAN vlan2 DW_LAN vlan3 force_dwlan bled: GPIO#68: n                                                                                                                                                             etdev ath0.
0, sw_mode 1
wan_ifnames: eth0 eth3
bled: GPIO#67: netdev ath1.
bled: GPIO#7: USB BUS mask        3.
bled: GPIO#15: USB BUS mask        c.
bled: GPIO#25: interrupt 0.
1: check_action 0
1: set_action 7
1: set_action 0
**********************************************************
* Driver    :NSS GMAC Driver for RTL v(3.72a)
* Version   :1.0
* Copyright :Copyright (c) 2013-2015 The Linux Foundation. All rights reserved.
**********************************************************
hotplug net INTERFACE=eth2 ACTION=add
hotplug net INTERFACE=eth0 ACTION=add
hotplug net INTERFACE=eth1 ACTION=add
hotplug net INTERFACE=eth3 ACTION=add
nss_driver - fw of size 422976  bytes copied to load addr: 40000000, nss_id : 0
nss_driver - Turbo Support 1
Supported Frequencies - 110Mhz 600Mhz 800Mhz
hotplug net INTERFACE=qca-nss-dev0 ACTION=add
hotplug net INTERFACE=qca-nss-dev1 ACTION=add
nss_driver - fw of size 187968  bytes copied to load addr: 40800000, nss_id : 1
Error - Duplicate Interface CB Registered for interface 107
Error - Duplicate Interface CB Registered for interface 110
hotplug net INTERFACE=qca-nss-dev3 ACTION=add
hotplug net INTERFACE=qca-nss-dev2 ACTION=add
<NSS-CRYPTO>:Register with NSS driver-
config_switch(0x0161): link down all ports
power down all ports
LAN: P0,P1,P2,P3 WAN: P4
wan_stb_x 0 STB,LAN/WAN ports mask 0x000,300ff/000
# setting realtek trunk group(2) ports(00030000)
# setting realtek trunk algo(0x00000001,0)
config_switch(0x0183): ISP Profile/STB: none/0
# setting realtek trunk group(0) ports(00000000)
# setting realtek trunk group(1) ports(00000000)
set unknown unicast strom control rate as: 20

A możesz popatrzec na ten log

Wyglada jaky cfe nie wykrywał kostki     Po wgraniu softu już zaczyna wykrywać  Może wystaczy zmienić jakiś adres do UBI

Jak wybieram opcje 4  4: Entr boot command line interface.   i później daje polecenie  do sprawdzenia co jest na kosce to wykrywa 3 partycje  Za chwile wrzuce log jak to wyglada

NAND:  SF: Unsupported manufacturer 00
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
256 MiB
*** Warning - bad CRC, using default environment

Bootloader musi nie wykrywać 2 czyli UBI   gdzie jest wgrany system
Przy nand też jest info NAND:  SF: Unsupported manufacturer 00

No valid 2nd firmware found at 0x044aa000
ERROR: can't get kernel image!
   No valid 1st firmware found at 0x0049b000
ERROR: can't get kernel image!

Pytanie o czy da się to jakoś naprawić.    Wygląda na to ,ze w nowej wersji oporgramowania coś zmienili  i stary bootloader nie może wyszukać softu.
Niestety wgranie starszej wersji softu już nic nie daje.

polecenie  mtdparts

device nand0 <nand0>, # parts = 3
#: name                size            offset          mask_flags
0: Bootloader          0x003e0000      0x00000000      0
1: environment         0x00020000      0x003e0000      0
2: UBI_DEV             0x0fc00000      0x00400000      0

active partition: nand0,0 - (Bootloader) 0x003e0000 @ 0x00000000

lista polecen

ar8xxx_dump- Dump ar8xxx registers
base    - print or set address offset
bootipq - bootipq from flash device
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
bootz   - boot Linux zImage image from memory
chpart  - change active partition
cmp     - memory compare
cp      - memory copy
crc32   - checksum calculation
dhcp    - boot image via network using DHCP/TFTP protocol
dumpipq_data- dumpipq_data crashdump collection from memory
echo    - echo args to console
env     - environment handling commands
ethspeed- Force ethernet speed to 10/100/autoneg
exit    - exit script
false   - do nothing, unsuccessfully
fdt     - flattened device tree utility commands
fuseipq - fuse QFPROM registers from memory

go      - start application at address 'addr'
help    - print command description/usage
i2c     - I2C sub-system
iminfo  - print header information for application image
imxtract- extract a part of a multi-image
ipq_nand- Switch between SBL and Linux kernel page layout.
loadb   - load binary file over serial line (kermit mode)
loady   - load binary file over serial line (ymodem mode)
loop    - infinite loop on address range
md      - memory display
mii     - MII utility commands
mm      - memory modify (auto-incrementing address)
mphyrd  - qca8511 packet processor PHY register display
mphyrw  - qca8511 packet processor PHY register write (fill)
mprd    - qca8511 packet processor register display
mprw    - qca8511 packet processor register write (fill)
mtdparts- define flash/nand partitions
mtest   - simple RAM read/write test
mw      - memory write (fill)
nand    - NAND sub-system
nboot   - boot from NAND device
nm      - memory modify (constant address)
pci     - list and access PCI Configuration Space
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
sf      - SPI flash sub-system
showvar - print local hushshell variables
smeminfo- print SMEM FLASH information
source  - run script from memory
test    - minimal test like /bin/sh
tftpboot- boot image via network using TFTP protocol
tftpd   - tftpd  -load the data by tftp protocol

tftpput - TFTP put command, for uploading files to a server
true    - do nothing, successfully
uartrd  - uartrd from flash device
uartwr  - uartwr from flash device
ubi     - ubi commands
usb     - USB sub-system
usbboot - boot from USB device
version - print monitor, compiler and linker version

Czyli jedynie co to zostaje  podmiana  z zaktualizowanego routera?

A jak się nie uda to zgon.

Już lepiej chyba zostawić jak jest , bo router pomimo to działa prawidłowo. Po załadowaniu softu widzie wszystkie 8 prartycji  Dopóki nie zabraknie zasilania jest ok.  Więć ewidentnie coś skopali w cfe. Wgranie softu trwa kilka sekund. Ale jest to irytujące.   

mtd0: 003e0000 00020000 "Bootloader"
mtd1: 0fc00000 00020000 "UBI_DEV"
mtd2: 0005d000 0001f000 "nvram"
mtd3: 0001f000 0001f000 "Factory"
mtd4: 0001f000 0001f000 "Factory2"
mtd5: 0400f000 0001f000 "linux"
mtd6: 03dfe940 0001f000 "rootfs"
mtd7: 0400f000 0001f000 "linux2"
mtd8: 03dfe940 0001f000 "rootfs2"

Tak jasne zobacz log  Bez tego router nie uruchomi się ,bo nie widzi kernela na flash

w pierwszym poscie masz co nalezy zrobic wedlug asusa

    In some corner cases, the bootloader of BRT-AC828 will be failed to mount UBI volume occasionally and result in system boot failure. We strongly recommend you to upgrade bootloader from the old version to v1.0.1.0.

    How to get bootloader version:
    1. Telnet or SSH to BRT-AC828
    2. Use command "nvram get blver" to check bootloader version
    3. You may find version information like BRT-AC828-01-00-00-08, it means the version is 1.0.0.8.

    How to update bootloader:
    1. Download ASUS Firmware Restoration utility from HelpDesk site:
    https://www.asus.com/Business-Networkin … _Download/
    2. Install ASUS Firmware Restoration
    3. Follow the instruction to update bootloader via rescue mode,
    https://www.asus.com/support/faq/1000814/

jeżeli nie zadziała to zostaje tylko kontakt z serwisem

    If you confront the booting problem that BRT-AC828 cannot boot successfully and blinks all LEDs continually and cannot fix by press reset button, please contact ASUS for technical inquiries and support.
     

podczas wgrywnia  bootloadera wyskakuje  Jakby nie mógł usunąc partycji CFE Może jest zabezpieczona przed nadpisaniem

crc32+ Flashing mibib: Removing MTD device #0 (nand0) wi th use count 1
[failed]
done. 4063168 bytes written
SYSTEM RESET

a serwis na to odpowiedział ,ze Oni sie nie znają tylko wymieniąją całe urządzenie a to trafia na smietnik  Zresztą nie Oni a firma co sprzedała urządzenie. Z nimi trzeba się kontaktować

Spróbuje jeszcze napisać do serwisu za granicą Ale wątpie ,ze jest ktoś ko by mógl to ogarnąć
Myslałem ,ze Cezary pomoże ;]
jego wiedza jest większa niż moja.