EC21 failing after 2 years

firmware: EC21EFAR06A01M4G

We have a number of failed EC21 modules returned from customers that show the same symptoms.

They fail to register onto the network and show a signal strength in response to AT+CSQ of 99,99.

But, more worrying, all 5 failing EC21s show bad block errors in the console output (log attached). They all show exactly the same blocks as bad, numbers 76 to 107 - very odd they are the same!!!

What could be the cause of bad blocks and is that the reason the EC21s are failing?

Value
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset)COMMA D - DeltaCOMMA S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.1.2-00084
S - IMAGE_VARIANT_STRING=LAATANAZA
S - OEM_IMAGE_VERSION_STRING=SH-SW-ZhaomengP
S - Boot ConfigCOMMA 0x000002e1
B - 1216 - PBLCOMMA Start
B - 3723 - bootable_media_detect_entryCOMMA Start
B - 4392 - bootable_media_detect_successCOMMA Start
B - 4396 - elf_loader_entryCOMMA Start
B - 7848 - auth_hash_seg_entryCOMMA Start
B - 8069 - auth_hash_seg_exitCOMMA Start
B - 55119 - elf_segs_hash_verify_entryCOMMA Start
B - 98690 - PBLCOMMA End
B - 107116 - SBL1COMMA Start
B - 165706 - pm_device_initCOMMA Start
B - 185684 - PM_SET_VAL:Skip
D - 18178 - pm_device_initCOMMA Delta
B - 186660 - boot_config_data_table_initCOMMA Start
\0
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset)COMMA D - DeltaCOMMA S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.1.2-00084
S - IMAGE_VARIANT_STRING=LAATANAZA
S - OEM_IMAGE_VERSION_STRING=SH-SW-ZhaomengP
S - Boot ConfigCOMMA 0x000002e1
B - 1216 - PBLCOMMA Start
B - 3723 - bootable_media_detect_entryCOMMA Start
B - 4403 - bootable_media_detect_successCOMMA Start
B - 4407 - elf_loader_entryCOMMA Start
B - 7859 - auth_hash_seg_entryCOMMA Start
B - 8080 - auth_hash_seg_exitCOMMA Start
B - 55129 - elf_segs_hash_verify_entryCOMMA Start
B - 98700 - PBLCOMMA End
B - 107177 - SBL1COMMA Start
B - 165767 - pm_device_initCOMMA Start
B - 185714 - PM_SET_VAL:Skip
D - 18147 - pm_device_initCOMMA Delta
B - 186690 - boot_config_data_table_initCOMMA Start
\0
Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset)COMMA D - DeltaCOMMA S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.1.2-00084
S - IMAGE_VARIANT_STRING=LAATANAZA
S - OEM_IMAGE_VERSION_STRING=SH-SW-ZhaomengP
S - Boot ConfigCOMMA 0x000002e1
B - 1216 - PBLCOMMA Start
B - 3723 - bootable_media_detect_entryCOMMA Start
B - 4392 - bootable_media_detect_successCOMMA Start
B - 4396 - elf_loader_entryCOMMA Start
B - 7848 - auth_hash_seg_entryCOMMA Start
B - 8069 - auth_hash_seg_exitCOMMA Start
B - 55119 - elf_segs_hash_verify_entryCOMMA Start
B - 98690 - PBLCOMMA End
B - 107024 - SBL1COMMA Start
B - 165554 - pm_device_initCOMMA Start
B - 185501 - PM_SET_VAL:Skip
D - 18178 - pm_device_initCOMMA Delta
B - 186507 - boot_config_data_table_initCOMMA Start
D - 174917 - boot_config_data_table_initCOMMA Delta - (420 Bytes)
B - 364932 - CDT version:3COMMAPlatform ID:8COMMAMajor ID:1COMMAMinor ID:0COMMASubtype:0
B - 371124 - sbl1_ddr_set_paramsCOMMA Start
B - 374936 - Pre_DDR_clock_initCOMMA Start
D - 213 - Pre_DDR_clock_initCOMMA Delta
D - 0 - sbl1_ddr_set_paramsCOMMA Delta
B - 387533 - pm_driver_initCOMMA Start
D - 4544 - pm_driver_initCOMMA Delta
B - 393938 - cpr_initCOMMA Start
D - 30 - cpr_initCOMMA Delta
B - 398543 - cpr_cx_mx_apc_vol_updateCOMMA Start
D - 61 - cpr_cx_mx_apc_vol_updateCOMMA Delta
B - 413092 - sbl1_qhsusb_al_do_fast_enumCOMMA Start
D - 30 - sbl1_qhsusb_al_do_fast_enumCOMMA Delta
B - 416325 - clock_initCOMMA Start
D - 152 - clock_initCOMMA Delta
B - 422120 - boot_flash_initCOMMA Start
D - 39101 - boot_flash_initCOMMA Delta
B - 465399 - Image LoadCOMMA Start
B - 465430 - [QUEC_SECBOOT]Image Type = 1
B - 472018 - [QUEC_SECBOOT]Image Auth Enable Sate = 1
B - 479643 - [QUEC_SECBOOT]Image Auth Result Sate = 0
D - 66704 - QSEE Image LoadedCOMMA Delta - (491164 Bytes)
D - 213 - boot_pm_post_tz_device_initCOMMA Delta
B - 536495 - sbl1_efs_handle_cookiesCOMMA Start
D - 0 - sbl1_efs_handle_cookiesCOMMA Delta
B - 543815 - Devcfg Partition does not exist
B - 548085 - Image LoadCOMMA Start
D - 30 - SEC Image LoadedCOMMA Delta - (0 Bytes)
B - 555679 - Image LoadCOMMA Start
B - 558668 - [QUEC_SECBOOT]Image Type = 1
B - 565683 - [QUEC_SECBOOT]Image Auth Enable Sate = 1
B - 573278 - [QUEC_SECBOOT]Image Auth Result Sate = 0
D - 32940 - RPM Image LoadedCOMMA Delta - (153168 Bytes)
B - 588680 - Image LoadCOMMA Start
B - 590327 - [QUEC_SECBOOT]Image Type = 1
B - 597434 - [QUEC_SECBOOT]Image Auth Enable Sate = 1
B - 605028 - [QUEC_SECBOOT]Image Auth Result Sate = 0
D - 53070 - APPSBL Image LoadedCOMMA Delta - (383076 Bytes)
B - 641781 - QSEE ExecutionCOMMA Start
D - 213 - QSEE ExecutionCOMMA Delta
B - 647454 - SBL1COMMA End
D - 542809 - SBL1COMMA Delta
S - ThroughputCOMMA 3000 KB/s (1027828 BytesCOMMA 287549 us)
S - DDR FrequencyCOMMA 240 MHz
\0Android Bootloader - UART_DM Initialized!!!
[0] welcome to lk

[0] SCM call: 0x2000601 failed with :fffffffc
[0] Failed to initialize SCM
[10] platform_init()
[10] target_init()
[10] 111 flash->id=0x2690ac98COMMAsupported_flash[0]=0x1590ac2cCOMMA flash->id2=0x81676COMMA supported_flash_id2=0x56[20] 111 flash->id=0x2690ac98COMMAsupported_flash[1]=0x1590ac01COMMA flash->id2=0x81676COMMA supported_flash_id2=0x56[30] 111 flash->id=0x2690ac98COMMAsupported_flash[2]=0x1590aaadCOMMA flash->id2=0x81676COMMA supported_flash_id2=0x46[30] 111 flash->id=0x2690ac98COMMAsupported_flash[3]=0x1590aa98COMMA flash->id2=0x81676COMMA supported_flash_id2=0x76[40] 111 flash->id=0x2690ac98COMMAsupported_flash[4]=0x1590acadCOMMA flash->id2=0x81676COMMA supported_flash_id2=0x56[50] 111 flash->id=0x2690ac98COMMAsupported_flash[5]=0x1680acadCOMMA flash->id2=0x81676COMMA supported_flash_id2=0x20[60] 111 flash->id=0x2690ac98COMMAsupported_flash[6]=0x1680ac01COMMA flash->id2=0x81676COMMA supported_flash_id2=0x20[70] 111 flash->id=0x2690ac98COMMAsupported_flash[7]=0x1590ac2cCOMMA flash->id2=0x81676COMMA supported_flash_id2=0x57[80] 111 flash->id=0x2690ac98COMMAsupported_flash[8]=0x1590aa2cCOMMA flash->id2=0x81676COMMA supported_flash_id2=0x6[90] 111 flash->id=0x2690ac98COMMAsupported_flash[9]=0x2690ac2cCOMMA flash->id2=0x81676COMMA supported_flash_id2=0x54[100] 111 flash->id=0x2690ac98COMMAsupported_flash[10]=0x1590acadCOMMA flash->id2=0x81676COMMA supported_flash_id2=0x0[110] 111 flash->id=0x2690ac98COMMAsupported_flash[11]=0x9590dc2cCOMMA flash->id2=0x81676COMMA supported_flash_id2=0x56[120] 111 flash->id=0x2690ac98COMMAsupported_flash[12]=0x1590aa98COMMA flash->id2=0x81676COMMA supported_flash_id2=0x76[130] 111 flash->id=0x2690ac98COMMAsupported_flash[13]=0x2690a32cCOMMA flash->id2=0x81676COMMA supported_flash_id2=0x64[140] 111 flash->id=0x2690ac98COMMAsupported_flash[14]=0x2680ac2cCOMMA flash->id2=0x81676COMMA supported_flash_id2=0x62[150] 111 flash->id=0x2690ac98COMMAsupported_flash[15]=0x2690ac98COMMA flash->id2=0x81676COMMA supported_flash_id2=0x81676[150] smem ptable found: ver: 4 len: 21
[160] ERROR: No devinfo partition found
[160] Neither ā€˜configā€™ nor ā€˜frpā€™ partition found
[170] [Ramos] get fastboot message start !!!
[170] [Ramos] get fastboot message end !!!
CTRL+C: enter instruction mode
PINTEST OR FASTBOOT

aboot_init char: aboot_init char: aboot_init char: aboot_init char: aboot_init char: aboot_init char: aboot_init char: aboot_init char: aboot_init char: aboot_init char: [290] flash_read_image: success (0 errors)
[290] @Ramos Ql_check_RestoreFlag:offset=440000COMMA magic1=78e5d4c2COMMAmagic2=54f7d60eCOMMAlinuxfs_restoreFlag=0COMMA cefs_restoreFlag=1COMMA modem_restoreFlag=0COMMArecoveryfs_restoreFlag=0 image_restoring_flag=0
[300] @Ramos linuxfs_restore_times=14COMMA cefs_restore_times=262539COMMA modem_restore_times=0
[310] flash_read_image: success (0 errors)
[320] @Ramos check AllRestoring flag =-1COMMAfota_updateRecoveryImgFlag=-1
[320] @Ramos Restore the CEFS start now
[330] @Ramos Get backup partition:sys_revCOMMA size=20
[660] @Ramos Restroe partition:efs2COMMA size=88
[900] @Ramos efs2 restore sz=1470464COMMA page_count=359COMMAfile magic1=51d24368COMMAcrc=a3415288COMMAdata_crc=a3415288
[1040] NAND Erase error: Block address belongs to bad block: 76
[1050] Erase operation failed @ page #76
[1050] NAND Erase error: Block address belongs to bad block: 77
[1060] Erase operation failed @ page #77
[1060] NAND Erase error: Block address belongs to bad block: 78
[1070] Erase operation failed @ page #78
[1070] NAND Erase error: Block address belongs to bad block: 79
[1080] Erase operation failed @ page #79
[1080] NAND Erase error: Block address belongs to bad block: 80
[1080] Erase operation failed @ page #80
[1090] NAND Erase error: Block address belongs to bad block: 81
[1090] Erase operation failed @ page #81
[1100] NAND Erase error: Block address belongs to bad block: 82
[1100] Erase operation failed @ page #82
[1110] NAND Erase error: Block address belongs to bad block: 83
[1110] Erase operation failed @ page #83
[1120] NAND Erase error: Block address belongs to bad block: 84
[1120] Erase operation failed @ page #84
[1130] NAND Erase error: Block address belongs to bad block: 85
[1130] Erase operation failed @ page #85
[1130] NAND Erase error: Block address belongs to bad block: 86
[1140] Erase operation failed @ page #86
[1140] NAND Erase error: Block address belongs to bad block: 87
[1150] Erase operation failed @ page #87
[1150] NAND Erase error: Block address belongs to bad block: 88
[1160] Erase operation failed @ page #88
[1160] NAND Erase error: Block address belongs to bad block: 89
[1170] Erase operation failed @ page #89
[1170] NAND Erase error: Block address belongs to bad block: 90
[1180] Erase operation failed @ page #90
[1180] NAND Erase error: Block address belongs to bad block: 91
[1190] Erase operation failed @ page #91
[1190] NAND Erase error: Block address belongs to bad block: 92
[1200] Erase operation failed @ page #92
[1200] NAND Erase error: Block address belongs to bad block: 93
[1210] Erase operation failed @ page #93
[1210] NAND Erase error: Block address belongs to bad block: 94
[1210] Erase operation failed @ page #94
[1220] NAND Erase error: Block address belongs to bad block: 95
[1220] Erase operation failed @ page #95
[1230] NAND Erase error: Block address belongs to bad block: 96
[1230] Erase operation failed @ page #96
[1240] NAND Erase error: Block address belongs to bad block: 97
[1240] Erase operation failed @ page #97
[1250] NAND Erase error: Block address belongs to bad block: 98
[1250] Erase operation failed @ page #98
[1260] NAND Erase error: Block address belongs to bad block: 99
[1260] Erase operation failed @ page #99
[1270] NAND Erase error: Block address belongs to bad block: 101
[1270] Erase operation failed @ page #101
[1280] NAND Erase error: Block address belongs to bad block: 102
[1280] Erase operation failed @ page #102
[1290] NAND Erase error: Block address belongs to bad block: 103
[1290] Erase operation failed @ page #103
[1300] NAND Erase error: Block address belongs to bad block: 104
[1300] Erase operation failed @ page #104
[1310] NAND Erase error: Block address belongs to bad block: 105
[1310] Erase operation failed @ page #105
[1320] NAND Erase error: Block address belongs to bad block: 106
[1320] Erase operation failed @ page #106
[1330] NAND Erase error: Block address belongs to bad block: 107
[1330] Erase operation failed @ page #107
[1340] @Ramos writing 0x167000 bytes to ā€˜efs2ā€™
[1710] NAND Erase error: Block address belongs to bad block: 76
[1720] flash_write_image: bad block @ 76
[1720] NAND Erase error: Block address belongs to bad block: 77
[1730] flash_write_image: bad block @ 77
[1730] NAND Erase error: Block address belongs to bad block: 78
[1740] flash_write_image: bad block @ 78
[1740] NAND Erase error: Block address belongs to bad block: 79
[1750] flash_write_image: bad block @ 79
[1750] NAND Erase error: Block address belongs to bad block: 80
[1750] flash_write_image: bad block @ 80
[1760] NAND Erase error: Block address belongs to bad block: 81
[1760] flash_write_image: bad block @ 81
[1770] NAND Erase error: Block address belongs to bad block: 82
[1770] flash_write_image: bad block @ 82
[1780] NAND Erase error: Block address belongs to bad block: 83
[1780] flash_write_image: bad block @ 83
[1790] NAND Erase error: Block address belongs to bad block: 84
[1790] flash_write_image: bad block @ 84
[1800] NAND Erase error: Block address belongs to bad block: 85
[1800] flash_write_image: bad block @ 85
[1810] NAND Erase error: Block address belongs to bad block: 86
[1810] flash_write_image: bad block @ 86
[1810] NAND Erase error: Block address belongs to bad block: 87
[1820] flash_write_image: bad block @ 87
[1820] NAND Erase error: Block address belongs to bad block: 88
[1830] flash_write_image: bad block @ 88
[1830] NAND Erase error: Block address belongs to bad block: 89
[1840] flash_write_image: bad block @ 89
[1840] NAND Erase error: Block address belongs to bad block: 90
[1850] flash_write_image: bad block @ 90
[1850] NAND Erase error: Block address belongs to bad block: 91
[1860] flash_write_image: bad block @ 91
[1860] NAND Erase error: Block address belongs to bad block: 92
[1870] flash_write_image: bad block @ 92
[1870] NAND Erase error: Block address belongs to bad block: 93
[1880] flash_write_image: bad block @ 93
[1880] NAND Erase error: Block address belongs to bad block: 94
[1880] flash_write_image: bad block @ 94
[1890] NAND Erase error: Block address belongs to bad block: 95
[1890] flash_write_image: bad block @ 95
[1900] NAND Erase error: Block address belongs to bad block: 96
[1900] flash_write_image: bad block @ 96
[1910] NAND Erase error: Block address belongs to bad block: 97
[1910] flash_write_image: bad block @ 97
[1920] NAND Erase error: Block address belongs to bad block: 98
[1920] flash_write_image: bad block @ 98
[1930] NAND Erase error: Block address belongs to bad block: 99
[1930] flash_write_image: bad block @ 99
[1940] NAND Erase error: Block address belongs to bad block: 101
[1940] flash_write_image: bad block @ 101
[1950] NAND Erase error: Block address belongs to bad block: 102
[1950] flash_write_image: bad block @ 102
[1960] NAND Erase error: Block address belongs to bad block: 103
[1960] flash_write_image: bad block @ 103
[1970] NAND Erase error: Block address belongs to bad block: 104
[1970] flash_write_image: bad block @ 104
[1980] NAND Erase error: Block address belongs to bad block: 105
[1980] flash_write_image: bad block @ 105
[1990] NAND Erase error: Block address belongs to bad block: 106
[1990] flash_write_image: bad block @ 106
[2000] NAND Erase error: Block address belongs to bad block: 107
[2000] flash_write_image: bad block @ 107
[2000] flash_write_image: success
[2010] flash_read_image: success (0 errors)
[2010]

CEFS restore times=262540!!!

[2020] flash_write_image: success
[2020] AAAAALoading (boot) image (5914624): start
[2610] AAAAALoading (boot) image (5914624): done
[2610] Authenticating boot image (5914624): start
[2680] Authenticating boot image: done return value = 1
[2730] DTB Total entry: 25COMMA DTB version: 3
[2740] Using DTB entry 0x00000129/00010000/0x00000008/0 for device 0x00000129/00010000/0x00010008/0
[2750] [Dawn] alloc len: 36864 block len: 262144 pagesize=:4096
[2750] flash_read_image: success (0 errors)
[2760] [Dawn] 0x7fffff01 not existCOMMAPllease set item before!!
[2760] [Dawn] alloc len: 36864 block len: 262144 pagesize=:4096
[2770] flash_read_image: success (0 errors)
[2780] [Dawn] 0x7fffff02 not existCOMMAPllease set item before!!
[2780] [Dawn] alloc len: 36864 block len: 262144 pagesize=:4096
[2790] flash_read_image: success (0 errors)
[2790] [Dawn] 0x7fffff03 not existCOMMAPllease set item before!!
[2800] cmdline: noinitrd rw console=ttyHSL0COMMA115200COMMAn8 androidboot.hardware=qcom ehci-hcd.park=3 msm_rtb.filter=0x37 lpm_levels.sleep_disabled=1 earlycon=msm_hsl_uartCOMMA0x78b3000 androidboot.serialno=30ade6b1 androidboot.authorized_kernel=true androidboot.baseba[2820] Updating device tree: start
[2940] [Dawn] alloc len: 36864 block len: 262144 pagesize=:4096
[2940] flash_read_image: success (0 errors)
[2950] [Dawn] 0x7fffff03 not existCOMMAPllease set item before!!
[2950] Updating device tree: done
[2960] booting linux @ 0x80008000COMMA ramdisk @ 0x80008000 (0)COMMA tags/device tree @ 0x81e00000
INIT: version 2.88 booting
Switching to composition number 0x9025
@Ramos modem file check ok !!!Starting psmd: done
/firmware/image
Nothing to do. No firmware links needed.
Starting ipacm_perf: done
Starting ipacmdiag: done
Starting QCMAP_ConnectionManager: done
Starting qti: done
Mon Aug 16 05:53:26 UTC 2021
hwclock: RTC_SET_TIME: Invalid argument
INIT: Entering runlevel: 5
Starting quectel_pcm_daemon: done
Configuring network interfacesā€¦ Error: argument ā€œeth0ā€ is wrong: Unknown device
Starting syslogd done
Starting tftp_server: /sbin/tftp_server is already running
367
Starting irsc_util: Starting irsc tool
Failed to open file:/etc/sec_config
Absent/Invalid configCOMMADefault rules apply
Ending irsc tool
done
Starting time_services: done
Starting modem dependent daemons: Starting/Loading embms_kernel module: done loading embms_kernel module
Starting qmuxd: done
Starting thermal-engine: done
Starting qllog: done
Starting remote_efs_service done
Starting netmgrd: done
Starting qmi_shutdown_modem: done
Starting quectel-gps-handle: done
Starting quectel_daemon: done
Starting quectel-thermal: done
Starting quectel-uart-ddp: done
Starting quectel-writedata-test: done
Starting quectel_daemon: done
Starting quectel_psm_aware: done
Starting quectel_sbfota: done
Starting quectel-remotefs-service done
Starting quectel-smd-atcmd: done
Starting quectel-tts-service done
Starting eMBMs_TunnelingModule: done
Starting subsystem_ramdump: done
Starting wlan_servicesā€¦ start
Setting restart level: system
done
Starting/Loading Shortcut_FE Driver: done loading Shortcut FE driver
Starting system message bus: dbus.
Starting modem dependent daemons: Starting diagrebootapp: done
Starting atreset: done
Starting qti_ppp: done
done

  • Starting Avahi Unicast DNS Configuration Daemon: avahi-dnsconfd
    ā€¦fail!
    S:2345:respawn:/sbin/getty -L ttyHSL0 115200 console
    Starting powerconfig for mdm9607: Starting fs-scrub-daemon: /sbin/fs-scrub-daemon is already running
    368
    Starting pdc daemon: done
    Starting ql_forward done
    Starting ql_manager_server: done
    Starting ql-softsim: done

msm 202108161332 mdm9607-perf /dev/ttyHSL0

mdm9607-perf login:

Hi @Roger1
It seems that the flash is damaged. Does it frequently erase and write the flash during normal use?

1 Like