Help me identify device - ARM, BCM4708, BCM4366, ASUS, LINKSYS, OR ???

[creativeinstigator]

So I have this device I picked up and need help identifying it so i can flash the correct firmware. There are no markings, no stickers or identifiable printings on the boards. I have console access and the device boots up to load a kernel then crashes. Id like to flash a firmware but wanna make sure I know what the device is so I can get the correct build. From what I have gathered is its a ARMv7 Processor with a Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller.

Here is the boot console output. Maybe someone can help shed some light on this.

Thanks in advance!

Decompressing...done
Found a ST compatible (Winbond/NexFlash) serial flash with 256 64KB blocks; total size 16MB
CFE version 7.14.170.1708 (r720827) based on BBP 1.0.37
Copyright (C) 2000-2008 Broadcom Corporation.
Init Arena
Init Devs.
Boot partition size = 262144(0x40000)
Found a Mxic NAND flash:
Total size:  512MB
Block size:  128KB
Page Size:   2048B
OOB Size:    64B
Sector size: 512B
Spare size:  16B
ECC level:   8 (8-bit)
Device ID: 0xc2 0xdc 0x90 0x95 0x56 0x00
DDR Clock: 800 MHz
Info: DDR frequency set from clkfreq=1400,*800*
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 7.14.170.1708 (r720827)
CPU type 0x0: 1400MHz
Tot mem: 524288 KByte
CFE mem:    0x00F00000 - 0x017A0C34 (9047092)
Data:       0x00F590D0 - 0x00F596A0 (1488)
BSS:        0x00F596B0 - 0x00F9EC34 (284036)
Heap:       0x00F9EC34 - 0x0179EC34 (8388608)
Stack:      0x0179EC34 - 0x017A0C34 (8192)
Text:       0x00F00000 - 0x00F4DA5C (318044)
Boot:       0x017A1000 - 0x017E1000
Reloc:      I:00000000 - D:00000000
Device eth0:  hwaddr 00-00-00-00-00-00, ipaddr 192.168.50.1, mask 255.255.255.0
        gateway not set, nameserver not set
Loader:raw Filesys:raw Dev:nflash0.os File: Options:(null)
Loading: ... 1639493 bytes read
Entry at 0x00008000
Closing network.
Starting program at 0x00008000
Uncompressing Linux... done, booting the kernel.
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.4.194 (jenkins@openwrt_build) (gcc version 5.4.0 (LEDE GCC 5.4.0 r0+4266-fdb07c5) ) #0 SMP Wed Apr 14 08:29:14 2021
[    0.000000] CPU: ARMv7 Processor [413fc090] revision 0 (ARMv7), cr=10c5387d
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] bootconsole [uart0] enabled
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] Hit pending asynchronous external abort (FSR=0x00001c06) during first unmask, this is most likely caused by a firmware/bootloader bug.
[    0.000000] PERCPU: Embedded 11 pages/cpu @c6bcd000 s12608 r8192 d24256 u45056
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 130816
[    0.000000] Kernel command line: console=ttyS0,115200 earlycon
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Memory: 514512K/524288K available (3458K kernel code, 118K rwdata, 1272K rodata, 220K init, 270K bss, 9776K reserved, 0K cma-reserved, 393216K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xc8800000 - 0xff800000   ( 880 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xc8000000   ( 128 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0xc0008000 - 0xc04a6e2c   (4732 kB)
[    0.000000]       .init : 0xc04a7000 - 0xc04de000   ( 220 kB)
[    0.000000]       .data : 0xc04de000 - 0xc04fba3c   ( 119 kB)
[    0.000000]        .bss : 0xc04fba3c - 0xc053f374   ( 271 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] L2C: DT/platform modifies aux control register: 0x0a130000 -> 0x0a530000
[    0.000000] L2C-310 enabling early BRESP for Cortex-A9
[    0.000000] L2C-310 full line of zeros enabled for Cortex-A9
[    0.000000] L2C-310 ID prefetch enabled, offset 1 lines
[    0.000000] L2C-310 dynamic clock gating enabled, standby mode enabled
[    0.000000] L2C-310 cache controller enabled, 16 ways, 256 kB
[    0.000000] L2C-310: CACHE_ID 0x410000c8, AUX_CTRL 0x7e530001
[    0.000011] sched_clock: 64 bits at 700MHz, resolution 1ns, wraps every 4398046511103ns
[    0.008064] clocksource: arm_global_timer: mask: 0xffffffffffffffff max_cycles: 0xa17102bcf3, max_idle_ns: 440795224838 ns
[    0.019276] Calibrating delay loop... 2786.91 BogoMIPS (lpj=13934592)
[    0.082079] pid_max: default: 32768 minimum: 301
[    0.086759] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.093427] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.100912] Initializing cgroup subsys io
[    0.104945] Initializing cgroup subsys devices
[    0.109418] Initializing cgroup subsys freezer
[    0.113869] Initializing cgroup subsys net_cls
[    0.118341] Initializing cgroup subsys pids
[    0.122555] CPU: Testing write buffer coherency: ok
[    0.127686] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.133459] Setting up static identity map for 0x82a0 - 0x82d4
[    0.199216] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[    0.199276] Brought up 2 CPUs
[    0.207957] SMP: Total of 2 processors activated (5580.39 BogoMIPS).
[    0.214374] CPU: All CPU(s) started in SVC mode.
[    0.220848] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.230774] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.237081] pinctrl core: initialized pinctrl subsystem
[    0.242676] NET: Registered protocol family 16
[    0.247632] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.280880] clocksource: Switched to clocksource arm_global_timer
[    0.288014] NET: Registered protocol family 2
[    0.292978] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.299986] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    0.306373] TCP: Hash tables configured (established 1024 bind 1024)
[    0.312792] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.318687] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.325170] NET: Registered protocol family 1
[    0.330396] Crashlog allocated RAM at address 0x3f00000
[    0.341538] squashfs: version 4.0 (2009/01/31)
[    0.347421] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.358864] bounce: pool size: 64 pages
[    0.362766] io scheduler noop registered
[    0.366712] io scheduler deadline registered (default)
[    0.372310] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.379205] console [ttyS0] disabled
[    0.382868] 18000300.serial: ttyS0 at MMIO 0x18000300 (irq = 18, base_baud = 7812500) is a 16550
[    0.391755] console [ttyS0] enabled
[    0.391755] console [ttyS0] enabled
[    0.398773] bootconsole [uart0] disabled
[    0.398773] bootconsole [uart0] disabled
[    0.408095] nand: Could not find valid ONFI parameter page; aborting
error restarting...

 

[Tech9]

So I have this device I picked up and need help identifying it

Use Google Lens, take a picture of the device, Google will tell you.

 

[sfx2000]

There's a good reason why it's in the bin in the first place...

I would responsibly e-waste this one - the HW is quite literally 15 years old as the bootloader suggests...

The crash you're seeing is due to bad NAND, and the other key is the MAC addr of all zeros...

Better things to do with your time...

 

[RMerlin]

Broadcom SDK7 device BCM4709 @ 1.4 GHz, so probably somewhere around the 2014-2016 era.

Defaults to the 192.168.50.0/24 subnet, so it might be an Asus device.

Would need a photo to identify it, but looks to be defective hardware indeed as there is no MAC. Failure to boot could be either failed hardware or wrong OpenWRT version flashed.