@Portisch apparently I managed to brick a TX3 16/2 that I bought from Aliexpress.
Coreelec boot fine, then I tried to inject bl301 which succeed:
CoreELEC-Sala:~ # inject_bl301
Starting bootloader blob BL301 injection tool...
This tool can be used to update the bootloader
blob BL301 of the vendor bootloader on the internal
eMMC. This bootloader blob BL301 is customized by
Team CoreELEC to support all wake-up features like
CEC, Wake-On-LAN, IR, and GPIO wake-up from
suspend or power off state!
Device serial number: 2b0b0100011d10000006333150525250
Using CPU type SM1 (2b): S905X3, S905D3
Using binary type because of CoreELEC DT-ID: Generic
Using /dev/bootloader as bootloader partition
Did not find Amlogic image v2 header magic!
Found a valid Amlogic v3 ToC header (0x10210)
Amlogic magic: AA640001
Serial Number: 12345678
Flags: 0
TOC ENTRY #0
UUID: 9766FD3D89BEE849AE5D78A140608213
Offset Address: 0x68000 (absolute: 0x78210)
Size: 0xFD70
Flags: 0x0
Found BL30 blob image at: 0x00078210
Amlogic magic: @AML
Old signature bl30: C8F04691B675B6A870705D801E9FD54D80A20A1A4B278BC18C2546FDF98F538C
Using bl301 blob: Generic_2b_bl301.bin
Use config.ini value: remotewakeup = 0xbf40fe01
Use config.ini value: decode_type = 0x00
Use config.ini value: remotewakeupmask = 0xffffffff
New signature bl30: 46D63B3A8248E011C1BFA0E730C11AE052F36B68060D9F163D5CEF3BF43C7F6B
BL301.bin needs to be updated on eMMC
Please confirm to write the bootloader blob BL301 to
the internal eMMC! Please ensure to update first the device
to the last vendor firmware! And remember if the vendor
firmware get updated you have to do this step again as the
bootloader blob will be overwritten!
Continue? [y/n] y
Make backup of vendor bootloader to: /flash/2b0b0100011d10000006333150525250_bl301.bin
Finished update of BL3* blobs on internal eMMC!
Please reboot device now and enjoy the new CoreELEC wake-up features!
CoreELEC-Sala:~ # reboot
CoreELEC-Sala:~ #
But then Uboot crash, check this log:
Any clue?