Default MMU TLB entry setting for EBI space is set with Physical Base Address 0x0000_0000. It is because of possible boot from external bus. This need to changed to 0x2000_0000 by user code (it is also being set by debugger script what can be enough in case RAM target, but not in case internal FLASH target because in this case debugger script executes before execution of BAM code).

It can be changed by following source code for instance:
static asm void External_SRAM_MMU_init(void)
{
nofralloc
lis r3, 0x1002 /* Select TLB entry #, define R/W replacment control */
mtMAS0 r3 /* Load MAS0 with 0x1002 0000 for TLB entry #2 */
tlbre /* Get TLB entry # information */
mfspr r3, MAS3
oris r3, r3, 0x2000 /* EBI Physical Base Addr changed to 0x2000_0000 */
ori r3, r3, 0x0000
mtMAS3 r3
msync /* make sure we finished all memory accesses */
tlbwe /* Write entry defined in MAS0 (entry 1 here) to MMU TLB */
isync /* Wait for tlbwe to complete, then flush instruction buffer */
blr
}