[2024-06-17 18:58:54.122] U-Boot 1.1.4 (Aug 11 2010 - 18:28:15)
[2024-06-17 18:58:54.124] WonderMedia Technologies, Inc.
[2024-06-17 18:58:54.125] WMT U-Boot Version : 0.12.01.00.27
[2024-06-17 18:58:54.128] U-Boot code: 03F80000 -> 03FBA184  BSS: -> 04007DA0
[2024-06-17 18:58:54.133] RAM Configuration:
[2024-06-17 18:58:54.133] Bank #0: 00000000 128 MB
[2024-06-17 18:58:54.136] boot from spi flash.
[2024-06-17 18:58:54.139] flash:
[2024-06-17 18:58:54.139]      Bank1: FFF80000 -- FFFFFFFF
[2024-06-17 18:58:54.142]      Bank2: FF780000 -- FFF7FFFF
[2024-06-17 18:58:54.144] Flash:  8.5 MB
[2024-06-17 18:58:54.174] vibra start !
[2024-06-17 18:58:54.174]   reg op: 0xD811005C | 0x8
[2024-06-17 18:58:54.176]   reg op: 0xD8110084 | 0x8
[2024-06-17 18:58:54.179]   reg op: 0xD81100AC | 0x8
[2024-06-17 18:58:54.191] vibra time: 200 mesc
[2024-06-17 18:58:54.399] vibra stop !
[2024-06-17 18:58:54.399]   reg op: 0xD81100AC & 0xFFFFFFF7
[2024-06-17 18:58:54.619] In:    serial
[2024-06-17 18:58:54.619] Out:   serial
[2024-06-17 18:58:54.619] Err:   serial
[2024-06-17 18:58:54.714] bootcmd="nand readblob 3C00000 3E00000;logo show"
[2024-06-17 18:58:54.716] maddr = 0x3c00000, naddr = 0x3e00000
[2024-06-17 18:58:54.717] 
[2024-06-17 18:58:54.717] <1> Read header
[2024-06-17 18:58:54.722] find NAND Flash SAMSUNG_K9GAG08U0D
[2024-06-17 18:58:54.726] nfc 0x1324 , divisor b
[2024-06-17 18:58:54.726] block4095 tag=74624230  version =1
[2024-06-17 18:58:54.731] block4094 tag=62743142  version =1
[2024-06-17 18:58:54.735] Un-know id = 0x0
[2024-06-17 18:58:54.735] Read finsih
[2024-06-17 18:58:54.738] Header is 0x00119436 0x80101000
[2024-06-17 18:58:54.741] 
[2024-06-17 18:58:54.741] <2> Read Data
[2024-06-17 18:58:54.744] error happen at 0x3c03ff8 ( 0 ) data area  byte387 , bit4 
[2024-06-17 18:58:54.746] org ( 0x3c0417b ) 0x10 =>  0x0
[2024-06-17 18:58:54.749] error happen at 0x3c04ff8 ( 4 ) data area  byte452 , bit0 
[2024-06-17 18:58:54.755] org ( 0x3c059bc ) 0x1 =>  0x0
[2024-06-17 18:58:54.759] error happen at 0x3c08ff8 ( 2 ) data area  byte291 , bit1 
[2024-06-17 18:58:54.765] org ( 0x3c0951b ) 0x2 =>  0x0
[2024-06-17 18:58:54.767] error happen at 0x3c08ff8 ( 4 ) data area  byte67 , bit2 
[2024-06-17 18:58:54.773] org ( 0x3c0983b ) 0x4 =>  0x0
[2024-06-17 18:58:54.777] error happen at 0x3c0cff8 ( 2 ) data area  byte359 , bit5 
[2024-06-17 18:58:54.782] org ( 0x3c0d55f ) 0x20 =>  0x0
[2024-06-17 18:58:54.786] error happen at 0x3c10ff8 ( 0 ) data area  byte397 , bit6 
[2024-06-17 18:58:54.791] org ( 0x3c11185 ) 0x40 =>  0x0
[2024-06-17 18:58:54.794] error happen at 0x3c10ff8 ( 1 ) data area  byte361 , bit3 
[2024-06-17 18:58:54.801] org ( 0x3c11361 ) 0x8 =>  0x0
[2024-06-17 18:58:54.801] error happen at 0x3c10ff8 ( 3 ) data area  byte333 , bit3 
[2024-06-17 18:58:54.806] org ( 0x3c11745 ) 0x8 =>  0x0
[2024-06-17 18:58:54.810] error happen at 0x3c13ff8 ( 6 ) data area  byte219 , bit5 
[2024-06-17 18:58:54.815] org ( 0x3c14cd3 ) 0x20 =>  0x0
[2024-06-17 18:58:54.818] error happen at 0x3c14ff8 ( 1 ) data area  byte493 , bit6 
[2024-06-17 18:58:54.824] org ( 0x3c153e5 ) 0xac =>  0xec
[2024-06-17 18:58:54.826] error happen at 0x3c14ff8 ( 3 ) data area  byte113 , bit3 
[2024-06-17 18:58:54.833] org ( 0x3c15669 ) 0x8 =>  0x0
[2024-06-17 18:58:54.834]  byte487 , bit2 
[2024-06-17 18:58:54.839] org ( 0x3c157df ) 0x4 =>  0x0

....................... 

[2024-06-17 18:58:55.958] org ( 0x3d110fa ) 0x20 =>  0x0
[2024-06-17 18:58:55.962] error happen at 0x3d10ff8 ( 5 ) data area  byte304 , bit2 
[2024-06-17 18:58:55.967] org ( 0x3d11b28 ) 0x4 =>  0x0
[2024-06-17 18:58:55.971] error happen at 0x3d17ff8 ( 0 ) data area  byte520 , bit0 
[2024-06-17 18:58:55.974] org ( 0x3d18200 ) 0xb4 =>  0xb5
[2024-06-17 18:58:55.978] error happen at 0x3d17ff8 ( 6 ) data area  byte239 , bit3 
[2024-06-17 18:58:55.983] org ( 0x3d18ce7 ) 0x8 =>  0x0
[2024-06-17 18:58:55.985] error happen at 0x3d17ff8 ( 7 ) data area  byte2 , bit0 
[2024-06-17 18:58:55.991] org ( 0x3d18dfa ) 0x1 =>  0x0
[2024-06-17 18:58:55.994] error happen at 0x3d18ff8 ( 1 ) data area  byte98 , bit3 
[2024-06-17 18:58:55.998] org ( 0x3d1925a ) 0x8 =>  0x0
[2024-06-17 18:58:56.002] error happen at 0x3d18ff8 ( 6 ) data area  byte233 , bit4 
[2024-06-17 18:58:56.007] org ( 0x3d19ce1 ) 0x92 =>  0x82
[2024-06-17 18:58:56.010] Read finsih
[2024-06-17 18:58:56.010] show logo .....
[2024-06-17 18:58:56.014] LCD param (setting): 1,30000,8,800,480,48,40,40,3,29,13,d8110508|10,d8110504|10,d8110500|10
[2024-06-17 18:58:56.023] PWM param (setting): 0,25,100,90,98,58,8,0,27
[2024-06-17 18:58:56.035] LCD FrameBuffer = 0x07600000, BMP Address = 0x03C00000
[2024-06-17 18:58:56.271] Loading BMP ..... 
[2024-06-17 18:58:56.271] colorBits = 24
[2024-06-17 18:58:56.274] logo_width = 800, logo_height= 480
[2024-06-17 18:58:56.277] lcd_width= 800, lcd_height = 480
[2024-06-17 18:58:56.487] ok
[2024-06-17 18:58:56.491] Execute register operation for LCD:
[2024-06-17 18:58:56.494]   reg op: 0xD8110508 | 0x10
[2024-06-17 18:58:56.497]   reg op: 0xD8110504 | 0x10
[2024-06-17 18:58:56.497]   reg op: 0xD8110500 | 0x10
[2024-06-17 18:58:56.503] PWM0 input freq = 47916666 Hz, output freq = 19166 Hz
[2024-06-17 18:58:56.506] PWM0 register setting: scalar = 24, period = 99, duty = 89
[2024-06-17 18:58:56.512] REG32_VAL(0xd8000440) = 0x08080800
[2024-06-17 18:58:56.515] memory size: 128MB
[2024-06-17 18:58:56.520] ### main_loop entered: bootdelay=1
[2024-06-17 18:58:56.525] 
[2024-06-17 18:58:56.525] Execute register operation:
[2024-06-17 18:58:56.527]   reg op: 0xD8110064 | 0xC
[2024-06-17 18:58:56.527]   reg op: 0xD811008C | 0xC
[2024-06-17 18:58:56.530]   reg op: 0xD81100B4 & 0xFFFFFFFB
[2024-06-17 18:58:56.532]   reg op: 0xD81100B4 | 0x8
[2024-06-17 18:58:56.536]   reg op: 0xD8130054 | 0x1
[2024-06-17 18:58:56.542] ### main_loop: bootcmd="nand readblob 100000 0;go 100000"
[2024-06-17 18:58:56.545] Hit Enter key to stop autoboot:  1  0 
[2024-06-17 18:58:56.550] WMT # oot
[2024-06-17 19:02:25.373] Unknown command 'oot' - try 'help'
[2024-06-17 19:02:25.375] WMT # bot
[2024-06-17 19:02:27.685] Unknown command 'bot' - try 'help'
[2024-06-17 19:02:27.688] WMT # boot
[2024-06-17 19:02:29.727] maddr = 0x100000, naddr = 0x0
[2024-06-17 19:02:29.727] 
[2024-06-17 19:02:29.730] <1> Read header
[2024-06-17 19:02:29.730] Read finsih
[2024-06-17 19:02:29.730] Header is 0x015d7950 0x80101000
[2024-06-17 19:02:29.735] 
[2024-06-17 19:02:29.735] <2> Read Data
[2024-06-17 19:02:29.737] error happen at 0x103ff8 ( 0 ) data area  byte188 , bit2 
[2024-06-17 19:02:29.740] org ( 0x1040b4 ) 0x85 =>  0x81
[2024-06-17 19:02:29.743] error happen at 0x103ff8 ( 6 ) data area  byte200 , bit2 
[2024-06-17 19:02:29.748] org ( 0x104cc0 ) 0x65 =>  0x61
[2024-06-17 19:02:29.751] error happen at 0x104ff8 ( 3 ) data area  byte365 , bit4 
[2024-06-17 19:02:29.757] org ( 0x105765 ) 0x50 =>  0x40
[2024-06-17 19:02:29.760] error happen at 0x104ff8 ( 5 ) data area  byte369 , bit4 
[2024-06-17 19:02:29.765] org ( 0x105b69 ) 0x10 =>  0x0
[2024-06-17 19:02:29.768] error happen at 0x104ff8 ( 7 ) data area  byte171 , bit1 
[2024-06-17 19:02:29.773] org ( 0x105ea3 ) 0x2 =>  0x0
[2024-06-17 19:02:29.777] error happen at 0x107ff8 ( 2 ) data area  byte35 , bit2 
[2024-06-17 19:02:29.780] org ( 0x10841b ) 0xe6 =>  0xe2
[2024-06-17 19:02:29.783] error happen at 0x108ff8 ( 4 ) data area  byte186 , bit2 
[2024-06-17 19:02:29.789] org ( 0x1098b2 ) 0x86 =>  0x82
[2024-06-17 19:02:29.793] error happen at 0x10cff8 ( 0 ) data area  byte340 , bit7 
[2024-06-17 19:02:29.798] org ( 0x10d14c ) 0x80 =>  0x0
[2024-06-17 19:02:29.801] error happen at 0x10cff8 ( 3 ) data area  byte146 , bit5 
[2024-06-17 19:02:29.806] org ( 0x10d68a ) 0xad =>  0x8d
[2024-06-17 19:02:29.810] error happen at 0x10fff8 ( 0 ) data area  byte40 , bit7 
[2024-06-17 19:02:29.817] org ( 0x110020 ) 0x80 =>  0x0
[2024-06-17 19:02:29.819] error happen at 0x110ff8 ( 0 ) data area  byte176 , bit1 
[2024-06-17 19:02:29.825] org ( 0x1110a8 ) 0x5b =>  0x59
[2024-06-17 19:02:29.829] error happen at 0x117ff8 ( 0 ) data area  byte388 , bit4 
[2024-06-17 19:02:29.833] org ( 0x11817c ) 0x57 =>  0x47
[2024-06-17 19:02:29.835] error happen at 0x118ff8 ( 5 ) data area  byte496 , bit1 
[2024-06-17 19:02:29.841] org ( 0x119be8 ) 0xff =>  0xfd
[2024-06-17 19:02:29.843] error happen at 0x118ff8 ( 6 ) data area  byte468 , bit0 
[2024-06-17 19:02:29.849] org ( 0x119dcc ) 0x1 =>  0x0
[2024-06-17 19:02:29.854] error happen at 0x11cff8 ( 6 ) data area  byte312 , bit1 
[2024-06-17 19:02:29.857] org ( 0x11dd30 ) 0x12 =>  0x10
[2024-06-17 19:02:29.861] error happen at 0x120ff8 ( 2 ) data area  byte129 , bit0 
[2024-06-17 19:02:29.866] org ( 0x121479 ) 0x31 =>  0x30
[2024-06-17 19:02:29.870] error happen at 0x123ff8 ( 0 ) data area  byte110 , bit2 
[2024-06-17 19:02:29.876] org ( 0x124066 ) 0x94 =>  0x90
[2024-06-17 19:02:29.878] error happen at 0x123ff8 ( 4 ) data area  byte213 , bit3 
[2024-06-17 19:02:29.884] org ( 0x1248cd ) 0x8 =>  0x0
[2024-06-17 19:02:29.887] error happen at 0x123ff8 ( 6 ) data area  byte351 , bit4 
[2024-06-17 19:02:29.892] org ( 0x124d57 ) 0xf1 =>  0xe1
[2024-06-17 19:02:29.899] error happen at 0x12fff8 ( 3 ) data area  byte478 , bit3 
......
[2024-06-17 19:02:47.982] error happen at 0x16c3ff8 ( 3 ) data area  byte6 , bit6 
[2024-06-17 19:02:47.988] org ( 0x16c45fe ) 0xe0 =>  0xa0
[2024-06-17 19:02:47.992] error happen at 0x16c8ff8 ( 5 ) data area  byte289 , bit1 
[2024-06-17 19:02:47.995] org ( 0x16c9b19 ) 0x2 =>  0x0
[2024-06-17 19:02:47.999] error happen at 0x16cbff8 ( 5 ) data area  byte368 , bit5 
[2024-06-17 19:02:48.005] org ( 0x16ccb68 ) 0xa0 =>  0x80
[2024-06-17 19:02:48.009] error happen at 0x16cfff8 ( 6 ) data area  byte242 , bit7 
[2024-06-17 19:02:48.014] org ( 0x16d0cea ) 0x80 =>  0x0
[2024-06-17 19:02:48.017] error happen at 0x16d0ff8 ( 6 ) data area  byte476 , bit4 
[2024-06-17 19:02:48.023] org ( 0x16d1dd4 ) 0x10 =>  0x0
[2024-06-17 19:02:48.029] Read finsih
[2024-06-17 19:02:48.029] ## Starting application at 0x00100000 ...
[2024-06-17 19:02:48.055] Windows CE Kernel for ARM (Thumb Enabled) Built on Oct 20 2009 at 18:39:19
[2024-06-17 19:02:48.061] +WMTOEMInit
[2024-06-17 19:02:48.061] [WMSOC 8505] BSP version: 0.1
[2024-06-17 19:02:48.064] NKForceCleanBoot
[2024-06-17 19:02:48.067] -WMTOEMInit
[2024-06-17 19:02:48.067] OEMGetExtensionDRAM: DRAM (128+0)MB
[2024-06-17 19:02:48.212] bEnvConfig=FALSE.
[2024-06-17 19:02:48.212] okey to crc verified, go...
[2024-06-17 19:02:48.219] warning:parse keypad param failed.
[2024-06-17 19:02:48.222] FMD_Init for board: WM8505_GLink7
[2024-06-17 19:02:48.225] OALIoCtlShowBootProgress(0)
[2024-06-17 19:02:48.228] FMD!DumpRegKey> Drivers\BuiltIn\NFlash 
[2024-06-17 19:02:48.233] 		Profile = MSFlash
[2024-06-17 19:02:48.235] 		IClass :
[2024-06-17 19:02:48.235] 			{A4E7EDDA-E575-4252-9D6B-4195D48BB865}
[2024-06-17 19:02:48.241] 		Order = 00000000
[2024-06-17 19:02:48.241] 		FriendlyName = VIA NAND FLASH Driver (System Disk)
[2024-06-17 19:02:48.246] 		Dll = flashmdd.dll
[2024-06-17 19:02:48.249] 		FlashPddDll = wm_flashpdd_600.dll
[2024-06-17 19:02:48.252] 		Prefix = DSK
[2024-06-17 19:02:48.252] 		Flags = 00001000
[2024-06-17 19:02:48.255] FMD_Init: g_hNandMutex = 0x01050003, 0
[2024-06-17 19:02:48.421] FMD:NAND_WAIT_READY: B2R Status not ready!!
[2024-06-17 19:02:48.425] FMD_Init: nand_reset chip 0 OK!
[2024-06-17 19:02:48.428] ReadFlashID
[2024-06-17 19:02:48.428] FMD_Init: Flash ID is ec d5 94 29 34
[2024-06-17 19:02:48.434] initChipInfo Product ID=SAMSUNG_NF_K9GAG08U0D 
[2024-06-17 19:02:48.437] PLLB_clock Clock=575 MHz
[2024-06-17 19:02:48.439] Clock=00000007 r/w cycle=00002424
[2024-06-17 19:02:48.442] INFO: INT0: Mapped DMAIrq 0x1d to SysDMAIntr 0x10.
[2024-06-17 19:02:48.448] FMD_Init: hevDMAInterrupt = 0x01060003, 0
[2024-06-17 19:02:48.451] ReadBBTSectorBCH:Spare ECC error: startSectorAddr=0x0007ff80                                       
[2024-06-17 19:02:48.459] (sector offset in chip is 0x0007ff80),                                     
[2024-06-17 19:02:48.464] BCH Error count 0x0000000f
[2024-06-17 19:02:48.467] IsBadBlockTBLExisted(block 0x00000fff):Read sector:  0x0007ff80 Failed
[2024-06-17 19:02:48.475] FMD:Scan_NandFlash:  chip 0x00000000 BLOCK 0x00000fff scan fail
[2024-06-17 19:02:48.481] IsBadBlockTBLExisted(block 0x00000ffe):Linux Mirror BBT found:  1tbB
[2024-06-17 19:02:48.487] FMD:Scan_NandFlash: Found Wince TBL pattern=31746242
[2024-06-17 19:02:48.490] FMD:Scan_NandFlash:  chip 0x00000000 BLOCK 0x00000ffd scan fail
[2024-06-17 19:02:48.495] FMD:Scan_NandFlash:  chip 0x00000000 BLOCK 0x00000ffc scan fail
[2024-06-17 19:02:48.504] LoadNandFlashTBL: Use TBL1
[2024-06-17 19:02:48.504] GetBadBlockNum: block 0xb63 in chip 0 is bad block
[2024-06-17 19:02:48.509] GetBadBlockNum: block 0xc72 in chip 0 is bad block
[2024-06-17 19:02:48.515] LoadNandFlashTBL: Bad Block Num=2
[2024-06-17 19:02:48.520] FMD_Init: (Left ~ Right) / Total = (64MB ~ 256MB) / 2048MB !
[2024-06-17 19:02:48.523] FMD_Init done: System Disk.
[2024-06-17 19:02:48.526] FMD_GetInfo
[2024-06-17 19:02:48.529] FMD_GetInfo
[2024-06-17 19:02:48.751] BCH_ReadSector:Spare ECC  error: startSectorAddr=0x00006990                                (sector offset in chip is 0x00006990), NFECC_STATUS2_REG value 0x00000801, ERR_POS_REG1 0x102000e1,                                ERR_POS_REG2 0x00000b51
[2024-06-17 19:02:48.782] BCH_ReadSector:Spare ECC  error: startSectorAddr=0x0000cc18                                (sector offset in chip is 0x0000cc18), NFECC_STATUS2_REG value 0x00000801, ERR_POS_REG1 0x1020001c,                                ERR_POS_REG2 0x00000b51
[2024-06-17 19:02:48.825] BCH_ReadSector:Data ECC  error: startSectorAddr=0x0000ea80                                     (sector offset in chip is 0x0000ea80),                                      NFECC_STATUS2_REG value 0x00000101, ERR_POS_REG1 0x10200e19,ERR_POS_REG2 0x00000b51
[2024-06-17 19:02:48.847] BCH_ReadSector:Data ECC  error: startSectorAddr=0x0000ea80                                     (sector offset in chip is 0x0000ea80),                                      NFECC_STATUS2_REG value 0x00000301, ERR_POS_REG1 0x10200733,ERR_POS_REG2 0x00000b51
[2024-06-17 19:02:48.869] BCH_ReadSector:Data ECC  error: startSectorAddr=0x0000ea80                                     (sector offset in chip is 0x0000ea80),                                      NFECC_STATUS2_REG value 0x00000501, ERR_POS_REG1 0x10200230,ERR_POS_REG2 0x00000b51
[2024-06-17 19:02:48.891] BCH_ReadSector:Data ECC  error: startSectorAddr=0x0000ea80                                     
.....
[2024-06-17 19:03:34.033] BCH_ReadSector:Data ECC  error: startSectorAddr=0x00009409                                     (sector offset in chip is 0x00009409),                                      NFECC_STATUS2_REG value 0x00000701, ERR_POS_REG1 0x0e9503a8,ERR_POS_REG2 0x00001055
[2024-06-17 19:03:34.062] BCH_ReadSector:Data ECC  error: startSectorAddr=0x00009410                                     (sector offset in chip is 0x00009410),                                      NFECC_STATUS2_REG value 0x00000201, ERR_POS_REG1 0x0e950ee5,ERR_POS_REG2 0x00001055
[2024-06-17 19:03:34.087] BCH_ReadSector:Data ECC  error: startSectorAddr=0x00009411                                     (sector offset in chip is 0x00009411),                                      NFECC_STATUS2_REG value 0x00000101, ERR_POS_REG1 0x0e950fde,ERR_POS_REG2 0x00001055
[2024-06-17 19:03:34.122] BCH_ReadSector:Data ECC  error: startSectorAddr=0x00009418                                     (sector offset in chip is 0x00009418),                                      NFECC_STATUS2_REG value 0x00000401, ERR_POS_REG1 0x0e951010,ERR_POS_REG2 0x00001055
[2024-06-17 19:03:34.144] BCH_ReadSector:Data ECC parity error: startSectorAddr=0x00009418                                             (sector offset in chip is 0x00009418),                                              NFECC_STATUS2_REG value 0x00000401, ERR_POS_REG1 0x0e951010,ERR_POS_REG2 0x00001055
[2024-06-17 19:03:34.172] BCH_ReadSector:Data ECC  error: startSectorAddr=0x0000941c                                     (sector offset in chip is 0x0000941c),

WonderMedia Technologies, Inc.
W-Load Version : 0.19.00.01
ethaddr............found


U-Boot 1.1.4 (Aug 11 2010 - 18:28:15)
WonderMedia Technologies, Inc.
WMT U-Boot Version : 0.12.01.00.27
U-Boot code: 03F80000 -> 03FBA184  BSS: -> 04007DA0
RAM Configuration:
Bank #0: 00000000 128 MB
boot from spi flash.
flash:
     Bank1: FFF80000 -- FFFFFFFF
     Bank2: FF780000 -- FFF7FFFF
Flash:  8.5 MB
vibra start !
  reg op: 0xD811005C | 0x8
  reg op: 0xD8110084 | 0x8
  reg op: 0xD81100AC | 0x8
vibra time: 200 mesc
vibra stop !
  reg op: 0xD81100AC & 0xFFFFFFF7
In:    serial
Out:   serial
Err:   serial
bootcmd="nand readblob 3C00000 3E00000;logo show"
maddr = 0x3c00000, naddr = 0x3e00000

<1> Read header
find NAND Flash SAMSUNG_K9GAG08U0D
nfc 0x1324 , divisor b
block4095 tag=74624230  version =1
block4094 tag=62743142  version =1
Un-know id = 0x0
Read finsih
Header is 0x00119436 0x80101000

<2> Read Data
error happen at 0x3c03ff8 ( 0 ) data area  byte387 , bit4
org ( 0x3c0417b ) 0x10 =>  0x0
error happen at 0x3c04ff8 ( 4 ) data area  byte452 , bit0
org ( 0x3c059bc ) 0x1 =>  0x0
error happen at 0x3c08ff8 ( 2 ) data area  byte291 , bit1
org ( 0x3c0951b ) 0x2 =>  0x0
error happen at 0x3c08ff8 ( 4 ) data area  byte67 , bit2
org ( 0x3c0983b ) 0x4 =>  0x0
........
org ( 0x3d1925a ) 0x8 =>  0x0
error happen at 0x3d18ff8 ( 6 ) data area  byte233 , bit4
org ( 0x3d19ce1 ) 0x92 =>  0x82
Read finsih
show logo .....
LCD param (setting): 1,30000,8,800,480,48,40,40,3,29,13,d8110508|10,d8110504|10,d8110500|10
PWM param (setting): 0,25,100,90,98,58,8,0,27
LCD FrameBuffer = 0x07600000, BMP Address = 0x03C00000
Loading BMP .....
colorBits = 24
logo_width = 800, logo_height= 480
lcd_width= 800, lcd_height = 480
ok
Execute register operation for LCD:
  reg op: 0xD8110508 | 0x10
  reg op: 0xD8110504 | 0x10
  reg op: 0xD8110500 | 0x10
PWM0 input freq = 47916666 Hz, output freq = 19166 Hz
PWM0 register setting: scalar = 24, period = 99, duty = 89
REG32_VAL(0xd8000440) = 0x08080800
memory size: 128MB
### main_loop entered: bootdelay=1

Execute register operation:
  reg op: 0xD8110064 | 0xC
  reg op: 0xD811008C | 0xC
  reg op: 0xD81100B4 & 0xFFFFFFFB
  reg op: 0xD81100B4 | 0x8
  reg op: 0xD8130054 | 0x1
### main_loop: bootcmd="nand readblob 100000 0;go 100000"
Hit Enter key to stop autoboot:  0
WMT #
WMT # ?
shutdown the board
?       - alias for 'help'
autoscr - run script from memory
base    - print or set address offset
bdinfo  - print Board Info structure
boot    - boot default, i.e., run 'bootcmd'
bootd   - boot default, i.e., run 'bootcmd'
bootm   - boot application image from memory
bootp   - boot image via network using BootP/TFTP protocol
cleanlcd - clean LCD screen
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
crc32   - checksum calculation
dhcp    - invoke DHCP client to obtain IP/boot params
diskboot- boot from IDE device
dmacp     - dma memory copy
echo    - echo args to console
erase   - erase FLASH memory
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls   - list files in a directory (default /)
fatstore - store binary file to a dos filesystem
flinfo  - print FLASH memory information
go      - start application at address 'addr'
help    - print online help
ide     - IDE sub-system
iminfo  - print header information for application image
imls    - list all images found in flash
itest   - return true/false on integer compare
lcdinit - initialize LCD
loadb   - load binary file over serial line (kermit mode)
loads   - load S-Record file over serial line
show    -
loop    - infinite loop on address range
md      - memory display
mii     - MII utility commands
mm      - memory modify (auto-incrementing)
mmcinit - init mmc card
msleep   - delay execution for some time
mtest   - simple RAM test
mw      - memory write (fill)
nand    - NAND sub-system
nfs     - boot image via network using NFS protocol
nm      - memory modify (constant address)
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
randmac - generate a random MAC address and save to "ethaddr" environment variable
rarpboot- boot image via network using RARP/TFTP protocol
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
sdwaitins - wait sd card inserted or removed
sdwaitins 0 -- waiting removed
sdwaitins 1 -- waiting inserted
setenv  - set environment variables
shutdown the board
sleep   - delay execution for some time
textout - show text to the screen
textout x y "str" color
color is 24bit Hex, R[23:16], G[15:8], B[7:0]
for example: textout 0 0 "hello world" FFFFFF
tftpboot- boot image via network using TFTP protocol
tmpt     - execute Mass Production Tool
uploadfile- Transfer the spi flash image to the server.
version - print monitor version
WMT # printenv
baudrate=115200
ipaddr=192.168.1.2
serverip=192.168.1.1
netmask=255.255.255.0
bootfile="uzImage.bin"
loadaddr=0x02000000
serialnum=a2f8d8e6232b7aa93a935f6900349222
sys.flt=947142419
text1=textout 728 458 "V1.7.3" c5c5c5
touchic=true
audioic=wm9715
touchirq=gpio5
kpadid=gcx710v1_17
panelres.x=800
panelres.y=480
bootargs=mem=109M noinitrd root=/dev/mtdblock9 rootfstype=yaffs2 rw console=ttyS0,115200n8 init=/init lcdid=1 androidboot.console=ttyS0
amp_powerup=0xd811005c|0x4,0xd8110084|0x4,0xd81100ac&~0x4
amp_powerdown=0xd811005c|0x4,0xd8110084|0x4,0xd81100ac|0x4
wifi_powerdown=0xd811005c|0x2,0xd8110084|0x2,0xd81100ac&~0x2
wifi_powerup=0xd811005c|0x2,0xd8110084|0x2,0xd81100ac|0x2
basevolt=3300
hibernation_ui=yes
eth_ui=yes
gsensor_axis=0,1,1,-1,2,1
gsensor_int=gpio6
gsensor_ui=yes
motor_ui=yes
vibra_start=0xD811005C|0x8,0xD8110084|0x8,0xD81100AC|0x8
vibra_stop=0xD81100AC&~0x8
vibra_enable=1
restore=no
need_restore_data=yes
orientation_ui=yes
camera_ui=yes
camera_rotate=90
camera_up=5c|0x1,84|0x1,ac|0x1
camera_down=ac&~0x1
pppoe_ui=yes
modem3g_ui=no
enable_hw_scal=no
musicplayer_black_cd=no
restore_byandroid=no
audio.dacpcmvol=15
lcdparam=1,30000,8,800,480,48,40,40,3,29,13,d8110508|10,d8110504|10,d8110500|10
board_name=WM8505_GLink7
TouchIC=0
NoBootProgressBar=0
NoBootInformation=0
battvoltlist=6774,6889,7377,7498,7538,7599,7650,7698,7763,7821,7939
bLowVoltShutdown=1
audio.recordselect=MicIn
audio.gpio=3
audio.ic=VT1613
pwmparam=0,25,100,90,98,58,8,0,27
EthernetIC=1
WIFIGPIO=2
LowVoltConfig=12
gpiostate=1
FakeBattDetect=4
fakeadcpercent=1
ThreshholdCnt=520000
regop=D8110064|C,D811008C|C,D81100B4&~4,D81100B4|8,D8130054|1
ethaddr=00:40:63:2E:0B:9A
wince_system_disk_start_mb=40
wince_system_disk_end_mb=100
wince_flash_disk_start_mb=100
wince_flash_disk_end_mb=ffffffff
flash_safeaddr=2000000
flash_bmpaddr=3E00000
bootdelay=1
SHOW_LOGO=1
LCD_ENABLE=1
LCD_ID=1
BMP_ADR=3C00000
LCDC_FB=7600000
CxScreen=320
CyScreen=1E0
LOGO_STRING=Loading OS Image ...
X_LTEXT=116
Y_LTEXT=166
logocmd=nand readblob 3C00000 3E00000;logo show
bootcmd=nand readblob 100000 0;go 100000
filesize=119436
stdin=serial
stdout=serial
stderr=serial
ver=U-Boot 1.1.4 (Aug 11 2010 - 18:28:15)

Environment size: 2184/65531 bytes
WMT #

ath> printenv
printenv
bootargs=root=31:03 rootfstype=jffs2 init=/init console=0 panic=3
bootdelay=1
ipaddr=192.168.1.20
serverip=192.168.1.254
mtdparts=mtdparts=ath-nor0:384k(u-boot),64k(u-boot-env),11264k(firmware),768k(cfg),3776k(recovery),64k(prst),64k(EEPROM)
ubntappinit=go ${ubntaddr} uappinit;go ${ubntaddr} ufsdetect
ubntrecoveryaddr=0xBFC30000
ubntrecovery=bootm ${ubntrecoveryaddr}
ubnturescue=go ${ubntaddr} uappinit;urescue;go ${ubntaddr} uwrite
ethact=eth0
led1=5
led2=7
appinitdone=true
ubntboot=go ${ubntaddr} uflext 0; bootm 0xBF070000
customboot=bootm bf070000
bootcmd=run ubntappinit customboot
stdin=serial
stdout=serial
stderr=serial
ubntaddr=80200020

ath> flinfo
flinfo

Bank # 1: mx25l25635f (Id: 0xc22019)
	Size: 32 MB in 512 sectors

// SPDX-License-Identifier: GPL-2.0-or-later OR MIT

#include "qca956x.dtsi"

#include <dt-bindings/gpio/gpio.h>
#include <dt-bindings/input/input.h>

/ {
	compatible = "ubnt,amplifi-router-hd", "qca,qca9563";
	model = "Ubiquiti AmpliFi Router HD";

	aliases {
		label-mac-device = &eth0;
	};

	keys {
		compatible = "gpio-keys";

		reset {
			label = "Reset button";
			linux,code = <KEY_RESTART>;
			gpios = <&gpio 2 GPIO_ACTIVE_LOW>;
			debounce-interval = <60>;
		};
	};
};

&pcie {
	status = "okay";

	wifi@0,0 {
		compatible = "qcom,ath10k";
		reg = <0x0000 0 0 0 0>;
		nvmem-cells = <&cal_art_5000>;
		nvmem-cell-names = "calibration";
	};
};

&spi {
	status = "okay";

	flash@0 {
		compatible = "jedec,spi-nor";
		reg = <0>;
		spi-max-frequency = <25000000>;

		partitions {
			compatible = "fixed-partitions";
			#address-cells = <1>;
			#size-cells = <1>;

			partition@0 {
				label = "u-boot";
				reg = <0x000000 0x060000>;
				read-only;
			};

			partition@60000 {
				compatible = "u-boot,env";
				label = "u-boot-env";
				reg = <0x060000 0x010000>;
			};

			partition@70000 {
				compatible = "denx,uimage";
				label = "firmware";
				reg = <0x070000 0xb00000>;
			};

			partition@b70000 {
				label = "cfg";
				reg = <0xb70000 0x0c0000>;
				read-only;
			};

			partition@c30000 {
				label = "recovery";
				reg = <0xc30000 0x3b0000>;
				read-only;
			};

			partition@fe0000 {
				label = "prst";
				reg = <0xfe0000 0x010000>;
				read-only;
			};

			partition@ff0000 {
				/* eeprom */
				label = "art";
				reg = <0xff0000 0x010000>;
				read-only;

				nvmem-layout {
					compatible = "fixed-layout";
					#address-cells = <1>;
					#size-cells = <1>;

					macaddr_art_0: macaddr@0 {
						compatible = "mac-base";
						reg = <0x0 0x6>;
						#nvmem-cell-cells = <1>;
					};

					cal_art_1000: calibration@1000 {
						reg = <0x1000 0x440>;
					};

					cal_art_5000: calibration@5000 {
						reg = <0x5000 0x844>;
					};
				};
			};

			partition@1000000 {
				label = "bs1";
				reg = <0x1000000 0x010000>;
				};

			partition@1010000 {
				label = "bs2";
				reg = <0x1010000 0x010000>;
				read-only;
			};

			partition@1020000 {
				label = "stats";
				reg = <0x1020000 0x400000>;
				read-only;
			};

			partition@1420000 {
				label = "fw_inactive";
				reg = <0x1420000 0xb00000>;
				read-only;
			};

			partition@1f20000 {
				label = "reserved";
				reg = <0x1f20000 0x0e0000>;
				read-only;
			};
		};
	};
};

&mdio0 {
	status = "okay";

	phy0: ethernet-phy@0 {
		reg = <0>;
		phy-mode = "sgmii";

		qca,ar8327-initvals = <
			0x04 0x00000080 /* AR8327_REG_PAD0_MODE */
			0x08 0x00000000 /* PORT5 PAD MODE CTRL */
			0x0c 0x00000000 /* PORT6 PAD MODE CTRL */
			0x10 0x602613a0 /* AR8327_REG_POWER_ON_STRAP */
			0x50 0xcc35cc35 /* AR8327_REG_LED_CTRL0 */
			0x54 0xca35ca35 /* AR8327_REG_LED_CTRL1 */
			0x58 0xc935c935 /* AR8327_REG_LED_CTRL2 */
			0x5c 0x03ffff00 /* AR8327_REG_LED_CTRL3 */
			0x7c 0x0000007e /* AR8327_REG_PORT_STATUS(0) */
			0x94 0x00001080 /* AR8327_REG_PORT_STATUS(6) */
		>;
	};
};

&eth0 {
	status = "okay";
	
	pll-data = <0x03000101 0x00000101 0x00001919>;

	phy-mode = "sgmii";
	phy-handle = <&phy0>;

	nvmem-cells = <&macaddr_art_0 0>;
	nvmem-cell-names = "mac-address";
};

&wmac {
	status = "okay";

	nvmem-cells = <&macaddr_art_0 (-2)>, <&cal_art_1000>;
	nvmem-cell-names = "mac-address", "calibration";
};

&usb_phy0 {
	status = "okay";
};

&usb0 {
	status = "okay";
};

root@OpenWrt:/# cat /proc/mtd
cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00060000 00010000 "u-boot"
mtd1: 00010000 00010000 "u-boot-env"
mtd2: 00b00000 00010000 "firmware"
mtd3: 002b0000 00010000 "kernel"
mtd4: 00850000 00010000 "rootfs"
mtd5: 004a0000 00010000 "rootfs_data"
mtd6: 000c0000 00010000 "cfg"
mtd7: 003b0000 00010000 "recovery"
mtd8: 00010000 00010000 "prst"
mtd9: 00010000 00010000 "art"
mtd10: 00010000 00010000 "bs1"
mtd11: 00010000 00010000 "bs2"
mtd12: 00400000 00010000 "stats"
mtd13: 00b00000 00010000 "fw_inactive"
mtd14: 000e0000 00010000 "reserved"

[    0.000000] Linux version 6.6.45 (builder@buildhost) (mips-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r27160-b72c4b5386) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 Fri Aug 16 18:40:34 2024
[    0.000000] printk: bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019750 (MIPS 74Kc)
[    0.000000] MIPS: machine is Ubiquiti AmpliFi Router HD
[    0.000000] SoC: Qualcomm Atheros QCA956X ver 1 rev 0
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0 
[    0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 32480
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 119416K/131072K available (6721K kernel code, 600K rwdata, 1580K rodata, 1204K init, 215K bss, 11656K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 51
[    0.000000] CPU clock: 775.000 MHz
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4932285024 ns
[    0.000001] sched_clock: 32 bits at 388MHz, resolution 2ns, wraps every 5541893118ns
[    0.008299] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.074799] pid_max: default: 32768 minimum: 301
[    0.089171] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.096909] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.113489] RCU Tasks Trace: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1.
[    0.125993] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.136415] futex hash table entries: 256 (order: -1, 3072 bytes, linear)
[    0.146074] pinctrl core: initialized pinctrl subsystem
[    0.154339] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.161136] thermal_sys: Registered thermal governor 'step_wise'
[    0.174785] clocksource: Switched to clocksource MIPS
[    0.196749] NET: Registered PF_INET protocol family
[    0.202138] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.211195] tcp_listen_portaddr_hash hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.220182] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.228371] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.236468] TCP bind hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.243937] TCP: Hash tables configured (established 1024 bind 1024)
[    0.250796] UDP hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.257763] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.266027] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.272048] PCI: CLS 0 bytes, default 32
[    0.280735] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[    0.289206] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.295402] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.312930] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.324254] pinctrl-single 1804002c.pinmux: 544 pins, size 68
[    0.331582] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.343369] printk: console [ttyS0] disabled
[    0.348475] 18020000.uart: ttyS0 at MMIO 0x18020000 (irq = 11, base_baud = 1562500) is a 16550A
[    0.357738] printk: console [ttyS0] enabled
[    0.366807] printk: bootconsole [early0] disabled
[    0.410750] spi-nor spi0.0: mx25l25635e (32768 Kbytes)
[    0.416294] 12 fixed-partitions partitions found on MTD device spi0.0
[    0.422986] OF: Bad cell count for /ahb/spi@1f000000/flash@0/partitions
[    0.429880] OF: Bad cell count for /ahb/spi@1f000000/flash@0/partitions
[    0.436995] OF: Bad cell count for /ahb/spi@1f000000/flash@0/partitions
[    0.443850] OF: Bad cell count for /ahb/spi@1f000000/flash@0/partitions
[    0.450927] Creating 12 MTD partitions on "spi0.0":
[    0.456011] 0x000000000000-0x000000060000 : "u-boot"
[    0.464549] 0x000000060000-0x000000070000 : "u-boot-env"
[    0.471548] 0x000000070000-0x000000b70000 : "firmware"
[    0.479041] 2 uimage-fw partitions found on MTD device firmware
[    0.485221] Creating 2 MTD partitions on "firmware":
[    0.490397] 0x000000000000-0x0000002b0000 : "kernel"
[    0.497369] 0x0000002b0000-0x000000b00000 : "rootfs"
[    0.504359] mtd: setting mtd4 (rootfs) as root device
[    0.509707] 1 squashfs-split partitions found on MTD device rootfs
[    0.516117] 0x000000660000-0x000000b00000 : "rootfs_data"
[    0.523669] 0x000000b70000-0x000000c30000 : "cfg"
[    0.530517] 0x000000c30000-0x000000fe0000 : "recovery"
[    0.537889] 0x000000fe0000-0x000000ff0000 : "prst"
[    0.544858] 0x000000ff0000-0x000001000000 : "art"
[    0.551885] OF: Bad cell count for /ahb/spi@1f000000/flash@0/partitions
[    0.559076] 0x000001000000-0x000001010000 : "bs1"
[    0.566343] 0x000001010000-0x000001020000 : "bs2"
[    0.573174] 0x000001020000-0x000001420000 : "stats"
[    0.580255] 0x000001420000-0x000001f20000 : "fw_inactive"
[    0.587902] 0x000001f20000-0x000002000000 : "reserved"
[    1.289283] switch0: Atheros AR8327 rev. 4 switch registered on mdio.0
[    1.946514] ag71xx 19000000.eth: connected to PHY at mdio.0:00 [uid=004dd034, driver=Atheros AR8216/AR8236/AR8316]
[    1.957999] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode: sgmii
[    1.964995] i2c_dev: i2c /dev entries driver
[    2.014201] NET: Registered PF_INET6 protocol family
[    2.029497] Segment Routing with IPv6
[    2.033374] In-situ OAM (IOAM) with IPv6
[    2.037650] NET: Registered PF_PACKET protocol family
[    2.042915] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    2.056766] 8021q: 802.1Q VLAN Support v1.8
[    2.078832] PCI host bridge to bus 0000:00
[    2.083090] pci_bus 0000:00: root bus resource [mem 0x12000000-0x13ffffff]
[    2.090244] pci_bus 0000:00: root bus resource [io  0x0000]
[    2.096014] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    2.104238] pci 0000:00:00.0: [168c:003c] type 00 class 0x028000
[    2.110492] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    2.117563] pci 0000:00:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref]
[    2.124558] pci 0000:00:00.0: supports D1
[    2.128713] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    2.135613] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00
[    2.142476] pci 0000:00:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64bit]
[    2.150084] pci 0000:00:00.0: BAR 6: assigned [mem 0x12200000-0x1220ffff pref]
[    2.177259] clk: Disabling unused clocks
[    2.190266] VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
[    2.204026] Freeing unused kernel image (initmem) memory: 1204K
[    2.210202] This architecture does not have kernel memory protection.
[    2.216876] Run /sbin/init as init process
[    2.221101]   with arguments:
[    2.221106]     /sbin/init
[    2.221111]   with environment:
[    2.221116]     HOME=/
[    2.221120]     TERM=linux
[    2.860356] init: Console is alive
[    2.864289] init: - watchdog -
[    4.366025] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    4.448052] usbcore: registered new interface driver usbfs
[    4.453836] usbcore: registered new interface driver hub
[    4.459497] usbcore: registered new device driver usb
[    4.468942] gpio_button_hotplug: loading out-of-tree module taints kernel.
[    4.487796] ehci-platform 1b000000.usb: EHCI Host Controller
[    4.493687] ehci-platform 1b000000.usb: new USB bus registered, assigned bus number 1
[    4.502009] ehci-platform 1b000000.usb: irq 13, io mem 0x1b000000
[    4.534804] ehci-platform 1b000000.usb: USB 2.0 started, EHCI 1.00
[    4.542206] hub 1-0:1.0: USB hub found
[    4.547029] hub 1-0:1.0: 1 port detected
[    4.556622] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    4.574670] init: - preinit -
[    4.908642] usb 1-1: new high-speed USB device number 2 using ehci-platform
[    5.350338] hub 1-1:1.0: USB hub found
[    5.411475] hub 1-1:1.0: 4 ports detected
[    7.624818] random: crng init done
[    9.388779] Atheros AR8216/AR8236/AR8316 mdio.0:00: Port 1 is up
[    9.395225] Atheros AR8216/AR8236/AR8316 mdio.0:00: Port 2 is up
[    9.408847] eth0: link up (1000Mbps/Full duplex)
[   11.755179] jffs2: notice: (534) jffs2_build_xattr_subsystem: complete building xattr subsystem, 31 of xdatum (31 unchecked, 0 orphan) and 46 of xref (5 dead, 0 orphan) found.
[   11.773460] mount_root: switching to jffs2 overlay
[   11.782684] overlayfs: upper fs does not support tmpfile.
[   11.797366] urandom-seed: Seeding with /etc/urandom.seed
[   11.865416] eth0: link down
[   11.899335] procd: - early -
[   11.902624] procd: - watchdog -
[   12.725002] procd: - watchdog -
[   12.729170] procd: - ubus -
[   12.935958] procd: - init -
[   15.904970] kmodloader: loading kernel modules from /etc/modules.d/*
[   16.488272] urngd: v1.0.2 started.
[   18.065247] hid: raw HID events driver (C) Jiri Kosina
[   18.391667] Bluetooth: Core ver 2.22
[   18.395537] NET: Registered PF_BLUETOOTH protocol family
[   18.401035] Bluetooth: HCI device and connection manager initialized
[   18.407633] Bluetooth: HCI socket layer initialized
[   18.412678] Bluetooth: L2CAP socket layer initialized
[   18.417968] Bluetooth: SCO socket layer initialized
[   18.428521] Bluetooth: BNEP (Ethernet Emulation) ver 1.3
[   18.434036] Bluetooth: BNEP filters: protocol multicast
[   18.439491] Bluetooth: BNEP socket layer initialized
[   18.494897] usbcore: registered new interface driver btusb
[   18.501777] Loading modules backported from Linux version v6.9.9-0-g28fdf4518483
[   18.509477] Backport generated by backports.git v6.1.97-1-29-gf1d24a3683b2
[   18.528267] Bluetooth: HCI UART driver ver 2.3
[   18.532884] Bluetooth: HCI UART protocol H4 registered
[   18.538238] Bluetooth: HCI UART protocol BCSP registered
[   18.543722] Bluetooth: HCI UART protocol ATH3K registered
[   18.559298] Bluetooth: HIDP (Human Interface Emulation) ver 1.2
[   18.565490] Bluetooth: HIDP socket layer initialized
[   18.617549] Bluetooth: RFCOMM TTY layer initialized
[   18.622623] Bluetooth: RFCOMM socket layer initialized
[   18.627997] Bluetooth: RFCOMM ver 1.11
[   18.635756] SPI driver spidev has no spi_device_id for rohm,bh2228fv
[   19.161004] ath10k 6.9 driver, optimized for CT firmware, probing pci device: 0x3c.
[   19.170456] ath10k_pci 0000:00:00.0: enabling device (0000 -> 0002)
[   19.179248] ath10k_pci 0000:00:00.0: pci irq legacy oper_irq_mode 1 irq_mode 0 reset_mode 0
[   22.438815] ath10k_pci 0000:00:00.0: qca988x hw2.0 target 0x4100016c chip_id 0x043202ff sub 0000:0000
[   22.448432] ath10k_pci 0000:00:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   22.458890] ath10k_pci 0000:00:00.0: firmware ver 10.1-ct-8x-__fW-022-ecad3248 api 2 features wmi-10.x,has-wmi-mgmt-tx,mfp,txstatus-noack,wmi-10.x-CT,ratemask-CT,txrate-CT,get-temp-CT,tx-rc-CT,cust-stats-CT,retry-gt2-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT crc32 3e4cf97f
[   23.344741] ath10k_pci 0000:00:00.0: board_file api 1 bmi_id N/A crc32 bebc7c08
[   24.301346] ath10k_pci 0000:00:00.0: 10.1 wmi init: vdevs: 16  peers: 127  tid: 256
[   24.318117] ath10k_pci 0000:00:00.0: wmi print 'P 128 V 8 T 410'
[   24.324371] ath10k_pci 0000:00:00.0: wmi print 'msdu-desc: 1424  sw-crypt: 0 ct-sta: 0'
[   24.332660] ath10k_pci 0000:00:00.0: wmi print 'alloc rem: 24984 iram: 38672'
[   24.382706] ath10k_pci 0000:00:00.0: htt-ver 2.1 wmi-op 2 htt-op 2 cal nvmem max-sta 128 raw 0 hwcrypto 1
[   24.395611] ath10k_pci 0000:00:00.0: NOTE:  Firmware DBGLOG output disabled in debug_mask: 0x10000000
[   24.536513] ath: EEPROM regdomain: 0x2a
[   24.536539] ath: EEPROM indicates we should expect a direct regpair map
[   24.536554] ath: Country alpha2 being used: US
[   24.536561] ath: Regpair used: 0x2a
[   24.608916] ath: EEPROM regdomain: 0x2a
[   24.608942] ath: EEPROM indicates we should expect a direct regpair map
[   24.608958] ath: Country alpha2 being used: US
[   24.608965] ath: Regpair used: 0x2a
[   24.620754] ieee80211 phy1: Selected rate control algorithm 'minstrel_ht'
[   24.621718] ieee80211 phy1: Atheros AR9561 Rev:0 mem=0x5a90922c, irq=2
[   24.655547] kmodloader: done loading kernel modules from /etc/modules.d/*
[   40.642334] eth0: link up (1000Mbps/Full duplex)
[   40.674941] br-lan: port 1(eth0.1) entered blocking state
[   40.680546] br-lan: port 1(eth0.1) entered disabled state
[   40.686215] eth0.1: entered allmulticast mode
[   40.690732] ag71xx 19000000.eth eth0: entered allmulticast mode
[   40.697141] eth0.1: entered promiscuous mode
[   40.701575] ag71xx 19000000.eth eth0: entered promiscuous mode
[   40.744980] br-lan: port 1(eth0.1) entered blocking state
[   40.750586] br-lan: port 1(eth0.1) entered forwarding state

flashrom --programmer internal --read currentrom.bin
flashrom 1.4.0 (git:v1.4.0) on Linux 6.6.47-1-lts (x86_64)
flashrom is free software, get the source code at https://flashrom.org

Opened /dev/mtd0 successfully
Found Programmer flash chip "Opaque flash chip" (8192 kB, Programmer-specific) on internal.
Reading flash... done.

for x in 0 1 2 3 4 5 6 7; do mmc read 0 0x2000000 0x${x}00000 0x100000 ; md.b 0x2000000 20000000; done

#!/bin/bash

infile="$1"
address_pattern='^[0-9a-fA-F]\{8\}: '
data_pattern='.\{47\}'
ascii_pattern='.*'

sed -e "/${address_pattern}/!d" -e "s/$address_pattern\($data_pattern\)$ascii_pattern/\1/g" "$infile" | xxd -revert -plain > "$infile.bin"
exit

• wrote it to a usb drive
• mounted the rootfs on my PC
• chroot'd in and changed the root password
• unmounted it and moved it to the device
• changed the cmdline in boot to use /dev/sda2 as the rootfs
• log in with the new root password
• repeat the mount/chroot/passwd to change the root password on the emmc

## Booting image at 02000000 ...
## Booting kernel from Legacy Image at 02000000 ...
   Image Name:   Linux-6.6.2-mvebu-tld-1
   Created:      2024-10-12  19:07:40 UTC
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    5197128 Bytes = 5 MiB
   Load Address: 00008000
   Entry Point:  00008000
   Verifying Checksum ... OK
## Loading init Ramdisk from Legacy Image at 02900000 ...
   Image Name:   initramfs-6.6.2-mvebu-tld-1
   Created:      2023-12-12  22:03:52 UTC
   Image Type:   ARM Linux RAMDisk Image (gzip compressed)
   Data Size:    5257109 Bytes = 5 MiB
   Load Address: 00000000
   Entry Point:  00000000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK
stopping USB..

Starting kernel ...

[    0.000000][    T0] Booting Linux on physical CPU 0x0
[    0.000000][    T0] Linux version 6.6.2-mvebu-tld-1 (root@tldDebian) (gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for D3
[    0.000000][    T0] CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=10c5387d
[    0.000000][    T0] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000][    T0] OF: fdt: Machine model: WD My Cloud EX4100
[    0.000000][    T0] Memory policy: Data cache writealloc
[    0.000000][    T0] Zone ranges:
[    0.000000][    T0]   Normal   [mem 0x0000000000000000-0x000000002fffffff]
[    0.000000][    T0]   HighMem  [mem 0x0000000030000000-0x000000007fffffff]
[    0.000000][    T0] Movable zone start for each node
[    0.000000][    T0] Early memory node ranges
[    0.000000][    T0]   node   0: [mem 0x0000000000000000-0x000000007fffffff]
[    0.000000][    T0] Initmem setup node 0 [mem 0x0000000000000000-0x000000007fffffff]
[    0.000000][    T0] percpu: Embedded 29 pages/cpu s25364 r8192 d85228 u118784
[    0.000000][    T0] Kernel command line: root=/dev/ram console=ttyS0,115200
[    0.000000][    T0] Dentry cache hash table entries: 131072 (order: 7, 524288 bytes, linear)
[    0.000000][    T0] Inode-cache hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.000000][    T0] Built 1 zonelists, mobility grouping on.  Total pages: 522560
[    0.000000][    T0] mem auto-init: stack:off, heap alloc:on, heap free:off
[    0.000000][    T0] Memory: 2053708K/2097152K available (10240K kernel code, 873K rwdata, 3492K rodata, 1024K init, 314K bss, 4)
[    0.000000][    T0] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000][    T0] rcu: Preemptible hierarchical RCU implementation.
[    0.000000][    T0] rcu:     RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[    0.000000][    T0]  Trampoline variant of Tasks RCU enabled.
[    0.000000][    T0]  Tracing variant of Tasks RCU enabled.
[    0.000000][    T0] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000][    T0] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[    0.000000][    T0] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000][    T0] L2C: DT/platform modifies aux control register: 0x06070000 -> 0x16070000
[    0.000000][    T0] L2C-310 enabling early BRESP for Cortex-A9
[    0.000000][    T0] L2C-310 full line of zeros enabled for Cortex-A9
[    0.000000][    T0] L2C-310 D prefetch enabled, offset 1 lines
[    0.000000][    T0] L2C-310 dynamic clock gating enabled, standby mode enabled
[    0.000000][    T0] L2C-310 Coherent cache controller enabled, 16 ways, 1024 kB
[    0.000000][    T0] L2C-310 Coherent: CACHE_ID 0x410054c9, AUX_CTRL 0x56070001
[    0.000000][    T0] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000001][    T0] sched_clock: 64 bits at 800MHz, resolution 1ns, wraps every 4398046511103ns
[    0.000015][    T0] clocksource: arm_global_timer: mask: 0xffffffffffffffff max_cycles: 0xb881274fa3, max_idle_ns: 440795210636s
[    0.000032][    T0] Switching to timer-based delay loop, resolution 1ns
[    0.000219][    T0] Ignoring duplicate/late registration of read_current_timer delay
[    0.000224][    T0] clocksource: armada_370_xp_clocksource: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 76450417870 ns
[    0.000507][    T0] kfence: initialized - using 2097152 bytes for 255 objects at 0x(ptrval)-0x(ptrval)
[    0.000776][    T0] Console: colour dummy device 80x30
[    0.000804][    T0] Calibrating delay loop (skipped), value calculated using timer frequency.. 1600.00 BogoMIPS (lpj=8000000)
[    0.000814][    T0] CPU: Testing write buffer coherency: ok
[    0.000840][    T0] CPU0: Spectre v2: using BPIALL workaround
[    0.000844][    T0] pid_max: default: 32768 minimum: 301
[    0.003553][    T0] LSM: initializing lsm=capability,integrity
[    0.004323][    T0] Mount-cache hash table entries: 2048 (order: 1, 8192 bytes, linear)
[    0.004331][    T0] Mountpoint-cache hash table entries: 2048 (order: 1, 8192 bytes, linear)
[    0.007802][    T1] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.008500][    T1] RCU Tasks: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1.
[    0.008613][    T1] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1.
[    0.008705][    T1] Setting up static identity map for 0x100000 - 0x100060
[    0.008804][    T1] mvebu-soc-id: MVEBU SoC ID=0x6828, Rev=0x4
[    0.008907][    T1] mvebu-pmsu: Initializing Power Management Service Unit
[    0.009025][    T1] rcu: Hierarchical SRCU implementation.
[    0.009029][    T1] rcu:     Max phase no-delay instances is 1000.
[    0.009588][    T1] smp: Bringing up secondary CPUs ...
[    0.009936][    T1] Booting CPU 1
[    0.010086][    T0] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[    0.010098][    T0] CPU1: Spectre v2: using BPIALL workaround
[    0.010201][    T1] smp: Brought up 1 node, 2 CPUs
[    0.010208][    T1] SMP: Total of 2 processors activated (3200.00 BogoMIPS).
[    0.010213][    T1] CPU: All CPU(s) started in SVC mode.
[    0.011177][    T1] devtmpfs: initialized
[    0.014316][    T1] VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 4
[    0.014554][    T1] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.014572][    T1] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[    0.016346][    T1] prandom: seed boundary self test passed
[    0.017672][    T1] prandom: 100 self tests passed
[    0.017677][    T1] pinctrl core: initialized pinctrl subsystem
[    0.018842][    T1] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.019416][    T1] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.021646][    T1] audit: initializing netlink subsys (disabled)
[    0.021805][   T30] audit: type=2000 audit(0.020:1): state=initialized audit_enabled=0 res=1
[    0.022215][    T1] thermal_sys: Registered thermal governor 'step_wise'
[    0.022262][    T1] cpuidle: using governor ladder
[    0.022279][    T1] cpuidle: using governor menu
[    0.022374][    T1] hw-breakpoint: found 5 (+1 reserved) breakpoint and 1 watchpoint registers.
[    0.022380][    T1] hw-breakpoint: maximum watchpoint size is 4 bytes.
[    0.022517][    T1] mvebu-pmsu: CPU hotplug support is currently broken on Armada 38x: disabling
[    0.022525][    T1] mvebu-pmsu: CPU idle is currently broken on Armada 38x: disabling
[    0.024533][    T1] platform soc: Fixed dependency cycle(s) with /soc/internal-regs/interrupt-controller@d000
[    0.200157][    T1] raid6: int32x8  gen()   319 MB/s
[    0.370141][    T1] raid6: int32x4  gen()   333 MB/s
[    0.540105][    T1] raid6: int32x2  gen()   551 MB/s
[    0.710105][    T1] raid6: int32x1  gen()   637 MB/s
[    0.710108][    T1] raid6: using algorithm int32x1 gen() 637 MB/s
[    0.880104][    T1] raid6: .... xor() 247 MB/s, rmw enabled
[    0.880108][    T1] raid6: using intx1 recovery algorithm
[    0.881139][    T1] SCSI subsystem initialized
[    0.881421][    T1] usbcore: registered new interface driver usbfs
[    0.881447][    T1] usbcore: registered new interface driver hub
[    0.881474][    T1] usbcore: registered new device driver usb
[    0.881693][    T1] pps_core: LinuxPPS API ver. 1 registered
[    0.881697][    T1] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.881709][    T1] PTP clock support registered
[    0.882924][    T1] vgaarb: loaded
[    0.883229][    T1] clocksource: Switched to clocksource arm_global_timer
[    0.886097][    T1] VFS: Disk quotas dquot_6.6.0
[    0.886245][    T1] VFS: Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
[    0.893055][    T1] NET: Registered PF_INET protocol family
[    0.893207][    T1] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.894434][    T1] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.894504][    T1] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.894531][    T1] TCP established hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.894597][    T1] TCP bind hash table entries: 8192 (order: 5, 131072 bytes, linear)
[    0.894717][    T1] TCP: Hash tables configured (established 8192 bind 8192)
[    0.894988][    T1] MPTCP token hash table entries: 1024 (order: 2, 16384 bytes, linear)
[    0.895145][    T1] UDP hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.895167][    T1] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear)
[    0.895492][    T1] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.895992][    T1] RPC: Registered named UNIX socket transport module.
[    0.895998][    T1] RPC: Registered udp transport module.
[    0.896001][    T1] RPC: Registered tcp transport module.
[    0.896003][    T1] RPC: Registered tcp-with-tls transport module.
[    0.896006][    T1] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    0.896015][    T1] PCI: CLS 0 bytes, default 64
[    0.896193][   T29] Trying to unpack rootfs image as initramfs...
[    0.913649][    T1] hw perfevents: enabled with armv7_cortex_a9 PMU driver, 7 counters available
[    0.915463][    T1] Initialise system trusted keyrings
[    0.915561][    T1] Key type blacklist registered
[    0.916408][    T1] workingset: timestamp_bits=14 max_order=19 bucket_order=5
[    0.916445][    T1] zbud: loaded
[    0.922008][    T1] NFS: Registering the id_resolver key type
[    0.922038][    T1] Key type id_resolver registered
[    0.922042][    T1] Key type id_legacy registered
[    0.922135][    T1] nfs4filelayout_init: NFSv4 File Layout Driver Registering...
[    0.922145][    T1] nfs4flexfilelayout_init: NFSv4 Flexfile Layout Driver Registering...
[    1.003088][    T1] xor: measuring software checksum speed
[    1.006907][    T1]    arm4regs        :  2609 MB/sec
[    1.011825][    T1]    8regs           :  2003 MB/sec
[    1.016580][    T1]    32regs          :  2081 MB/sec
[    1.016587][    T1] xor: using function: arm4regs (2609 MB/sec)
[    1.016602][    T1] async_tx: api initialized (async)
[    1.016614][    T1] Key type asymmetric registered
[    1.016617][    T1] Asymmetric key parser 'x509' registered
[    1.016839][    T1] bounce: pool size: 64 pages
[    1.017220][    T1] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 245)
[    1.017507][    T1] io scheduler bfq registered
[    1.025931][    T1] armada-38x-pinctrl f1018000.pinctrl: registered pinctrl driver
[    1.027051][    T1] gpio gpiochip0: Static allocation of GPIO base is deprecated, use dynamic allocation.
[    1.027424][    T1] debugfs: Directory 'f1018100.gpio' with parent 'regmap' already present!
[    1.028036][    T1] gpio gpiochip1: Static allocation of GPIO base is deprecated, use dynamic allocation.
[    1.028382][    T1] debugfs: Directory 'f1018140.gpio' with parent 'regmap' already present!
[    1.030000][    T1] mv_xor f1060800.xor: Marvell shared XOR driver
[    1.047134][   T29] Freeing initrd memory: 5136K
[    1.084137][    T1] mv_xor f1060800.xor: Marvell XOR (Descriptor Mode): ( xor cpy intr )
[    1.086397][    T1] mv_xor f1060900.xor: Marvell shared XOR driver
[    1.144091][    T1] mv_xor f1060900.xor: Marvell XOR (Descriptor Mode): ( xor cpy intr )
[    1.221061][    T1] Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
[    1.224851][    T1] printk: console [ttyS0] disabled
[    1.245732][    T1] f1012000.serial: ttyS0 at MMIO 0xf1012000 (irq = 39, base_baud = 12500000) is a 16550A
[    1.245777][    T1] printk: console [ttyS0] enabled
[    2.317461][    T1] f1012100.serial: ttyS1 at MMIO 0xf1012100 (irq = 40, base_baud = 12500000) is a 16550A
[    2.328893][    T1] ahci-mvebu f10a8000.sata: supply ahci not found, using dummy regulator
[    2.337416][    T1] ahci-mvebu f10a8000.sata: supply phy not found, using dummy regulator
[    2.345691][    T1] ahci-mvebu f10a8000.sata: supply target not found, using dummy regulator
[    2.354342][    T1] ahci-mvebu f10a8000.sata: AHCI 0001.0000 32 slots 2 ports 6 Gbps 0x3 impl platform mode
[    2.364147][    T1] ahci-mvebu f10a8000.sata: flags: 64bit ncq sntf led only pmp fbs pio slum part sxs
[    2.375110][    T1] scsi host0: ahci-mvebu
[    2.380123][    T1] scsi host1: ahci-mvebu
[    2.384567][    T1] ata1: SATA max UDMA/133 mmio [mem 0xf10a8000-0xf10a9fff] port 0x100 irq 41
[    2.393244][    T1] ata2: SATA max UDMA/133 mmio [mem 0xf10a8000-0xf10a9fff] port 0x180 irq 41
[    2.402175][    T1] ahci-mvebu f10e0000.sata: supply ahci not found, using dummy regulator
[    2.410697][    T1] ahci-mvebu f10e0000.sata: supply phy not found, using dummy regulator
[    2.418992][    T1] ahci-mvebu f10e0000.sata: supply target not found, using dummy regulator
[    2.427611][    T1] ahci-mvebu f10e0000.sata: AHCI 0001.0000 32 slots 2 ports 6 Gbps 0x3 impl platform mode
[    2.437417][    T1] ahci-mvebu f10e0000.sata: flags: 64bit ncq sntf led only pmp fbs pio slum part sxs
[    2.448335][    T1] scsi host2: ahci-mvebu
[    2.453150][    T1] scsi host3: ahci-mvebu
[    2.457600][    T1] ata3: SATA max UDMA/133 mmio [mem 0xf10e0000-0xf10e1fff] port 0x100 irq 42
[    2.466269][    T1] ata4: SATA max UDMA/133 mmio [mem 0xf10e0000-0xf10e1fff] port 0x180 irq 42
[    2.476397][    T1] nand: device found, Manufacturer ID: 0xad, Chip ID: 0xdc
[    2.483507][    T1] nand: Hynix H27U4G8F2DTR-BC
[    2.488059][    T1] nand: 512 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.496676][    T1] Bad block table found at page 262080, version 0x01
[    2.503552][    T1] Bad block table found at page 262016, version 0x01
[    2.510263][    T1] nand_read_bbt: bad block at 0x000001040000
[    2.516135][    T1] nand_read_bbt: bad block at 0x000007f20000
[    2.522001][    T1] nand_read_bbt: bad block at 0x00000ff00000
[    2.527865][    T1] nand_read_bbt: bad block at 0x00000ff20000
[    2.533739][    T1] nand_read_bbt: bad block at 0x000016140000
[    2.539695][    T1] 8 fixed-partitions partitions found on MTD device pxa3xx_nand-0
[    2.547406][    T1] Creating 8 MTD partitions on "pxa3xx_nand-0":
[    2.553536][    T1] 0x000000000000-0x000000500000 : "U-Boot"
[    2.560480][    T1] 0x000000500000-0x000000f00000 : "uImage"
[    2.567310][    T1] 0x000000a00000-0x000001900000 : "uRamdisk"
[    2.574206][    T1] 0x000000f00000-0x00001d700000 : "image.cfs"
[    2.582212][    T1] 0x00001c800000-0x000039f00000 : "rescue_fw"
[    2.588186][    T1] mtd: partition "rescue_fw" extends beyond the end of device "pxa3xx_nand-0" -- size truncated to 0x3800000
[    2.600899][    T1] 0x00001d700000-0x00003c200000 : "config"
[    2.606609][    T1] mtd: partition "config" extends beyond the end of device "pxa3xx_nand-0" -- size truncated to 0x2900000
[    2.618987][    T1] 0x00001eb00000-0x00003e000000 : "reserve1"
[    2.624872][    T1] mtd: partition "reserve1" extends beyond the end of device "pxa3xx_nand-0" -- size truncated to 0x1500000
[    2.637469][    T1] 0x00001f500000-0x00003f400000 : "reserve2"
[    2.643355][    T1] mtd: partition "reserve2" extends beyond the end of device "pxa3xx_nand-0" -- size truncated to 0xb00000
[    2.657238][    T1] spi-nor spi0.0: unrecognized JEDEC id bytes: ff ff ff ff ff ff
[    2.665228][    T1] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information.
[    2.673810][    T1] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
[    2.699390][    T1] hwmon hwmon0: temp1_input not attached to any thermal zone
[    2.716460][    T1] hwmon hwmon1: temp1_input not attached to any thermal zone
[    2.723793][  T679] ata1: SATA link down (SStatus 0 SControl 300)
[    2.729968][  T690] ata2: SATA link down (SStatus 0 SControl 300)
[    2.737431][    T1] mvneta_bm f10c8000.bm: Buffer Manager for network controller enabled
[    2.751261][    T1] mvneta f1070000.ethernet eth0: Using random mac address 2a:17:74:6d:7a:95
[    2.765451][    T1] mvneta f1030000.ethernet eth1: Using random mac address 42:26:6f:a6:0a:05
[    2.774692][    T1] usbcore: registered new interface driver smsc75xx
[    2.781496][    T1] orion-ehci f1058000.usb: EHCI Host Controller
[    2.787780][    T1] orion-ehci f1058000.usb: new USB bus registered, assigned bus number 1
[    2.796205][    T1] orion-ehci f1058000.usb: irq 46, io mem 0xf1058000
[    2.807849][  T699] ata3: SATA link down (SStatus 0 SControl 300)
[    2.814017][  T709] ata4: SATA link down (SStatus 0 SControl 300)
[    2.823244][    T1] orion-ehci f1058000.usb: USB 2.0 started, EHCI 1.00
[    2.830066][    T1] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.06
[    2.839112][    T1] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    2.847077][    T1] usb usb1: Product: EHCI Host Controller
[    2.852675][    T1] usb usb1: Manufacturer: Linux 6.6.2-mvebu-tld-1 ehci_hcd
[    2.859763][    T1] usb usb1: SerialNumber: f1058000.usb
[    2.865729][    T1] hub 1-0:1.0: USB hub found
[    2.870221][    T1] hub 1-0:1.0: 1 port detected
[    2.875907][    T1] xhci-hcd f10f0000.usb3: xHCI Host Controller
[    2.881960][    T1] xhci-hcd f10f0000.usb3: new USB bus registered, assigned bus number 2
[    2.890280][    T1] xhci-hcd f10f0000.usb3: hcc params 0x0a000990 hci version 0x100 quirks 0x0000000000000010
[    2.900284][    T1] xhci-hcd f10f0000.usb3: irq 47, io mem 0xf10f0000
[    2.907199][    T1] xhci-hcd f10f0000.usb3: xHCI Host Controller
[    2.913260][    T1] xhci-hcd f10f0000.usb3: new USB bus registered, assigned bus number 3
[    2.921489][    T1] xhci-hcd f10f0000.usb3: Host supports USB 3.0 SuperSpeed
[    2.928695][    T1] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.06
[    2.937712][    T1] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    2.945678][    T1] usb usb2: Product: xHCI Host Controller
[    2.951277][    T1] usb usb2: Manufacturer: Linux 6.6.2-mvebu-tld-1 xhci-hcd
[    2.958364][    T1] usb usb2: SerialNumber: f10f0000.usb3
[    2.964350][    T1] hub 2-0:1.0: USB hub found
[    2.968841][    T1] hub 2-0:1.0: 1 port detected
[    2.973914][    T1] usb usb3: We don't know the algorithms for LPM for this host, disabling LPM.
[    2.982835][    T1] usb usb3: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 6.06
[    2.991854][    T1] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    2.999815][    T1] usb usb3: Product: xHCI Host Controller
[    3.005475][    T1] usb usb3: Manufacturer: Linux 6.6.2-mvebu-tld-1 xhci-hcd
[    3.012556][    T1] usb usb3: SerialNumber: f10f0000.usb3
[    3.018478][    T1] hub 3-0:1.0: USB hub found
[    3.022975][    T1] hub 3-0:1.0: 1 port detected
[    3.028354][    T1] xhci-hcd f10f8000.usb3: xHCI Host Controller
[    3.034422][    T1] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 4
[    3.042711][    T1] xhci-hcd f10f8000.usb3: hcc params 0x0a000990 hci version 0x100 quirks 0x0000000000000010
[    3.052731][    T1] xhci-hcd f10f8000.usb3: irq 48, io mem 0xf10f8000
[    3.059336][    T1] xhci-hcd f10f8000.usb3: xHCI Host Controller
[    3.065422][    T1] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 5
[    3.073662][    T1] xhci-hcd f10f8000.usb3: Host supports USB 3.0 SuperSpeed
[    3.080860][    T1] usb usb4: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.06
[    3.089877][    T1] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    3.097845][    T1] usb usb4: Product: xHCI Host Controller
[    3.103450][    T1] usb usb4: Manufacturer: Linux 6.6.2-mvebu-tld-1 xhci-hcd
[    3.110530][    T1] usb usb4: SerialNumber: f10f8000.usb3
[    3.116685][    T1] hub 4-0:1.0: USB hub found
[    3.121179][    T1] hub 4-0:1.0: 1 port detected
[    3.126277][    T1] usb usb5: We don't know the algorithms for LPM for this host, disabling LPM.
[    3.135258][    T1] usb usb5: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 6.06
[    3.144275][    T1] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    3.152229][    T1] usb usb5: Product: xHCI Host Controller
[    3.157894][    T1] usb usb5: Manufacturer: Linux 6.6.2-mvebu-tld-1 xhci-hcd
[    3.164989][    T1] usb usb5: SerialNumber: f10f8000.usb3
[    3.170933][    T1] hub 5-0:1.0: USB hub found
[    3.175486][    T1] hub 5-0:1.0: 1 port detected
[    3.181020][    T1] usbcore: registered new interface driver usblp
[    3.187461][    T1] usbcore: registered new interface driver usb-storage
[    3.194664][    T1] mousedev: PS/2 mouse device common for all mice
[    3.202593][    T1] armada38x-rtc f10a3800.rtc: registered as rtc0
[    3.208919][    T1] armada38x-rtc f10a3800.rtc: setting system clock to 2024-10-15T00:58:53 UTC (1728953933)
[    3.219687][    T1] i2c_dev: i2c /dev entries driver
[    3.224953][    T1] mv64xxx_i2c f1011000.i2c: can't get pinctrl, bus recovery not supported
[    3.233784][    T1] mv64xxx_i2c f1011100.i2c: can't get pinctrl, bus recovery not supported
[    3.246166][    T1] orion_wdt: Initial timeout 171 sec
[    3.251907][    T1] device-mapper: uevent: version 1.0.3
[    3.257668][    T1] device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@redhat.com
[    3.266883][  T105] usb 2-1: new high-speed USB device number 2 using xhci-hcd
[    3.273621][    T1] device-mapper: multipath round-robin: version 1.2.0 loaded
[    3.281410][    T1] device-mapper: multipath queue-length: version 0.2.0 loaded
[    3.288846][    T1] device-mapper: multipath service-time: version 0.3.0 loaded
[    3.296346][    T1] device-mapper: dm-log-userspace: version 1.3.0 loaded
[    3.303330][    T1] sdhci: Secure Digital Host Controller Interface driver
[    3.310239][    T1] sdhci: Copyright(c) Pierre Ossman
[    3.315429][    T1] sdhci-pltfm: SDHCI platform and OF driver helper
[    3.323843][    T1] marvell-cesa f1090000.crypto: CESA device successfully registered
[    3.332482][    T1] hid: raw HID events driver (C) Jiri Kosina
[    3.338840][    T1] usbcore: registered new interface driver usbhid
[    3.345160][    T1] usbhid: USB HID core driver
[    3.351770][    T1] NET: Registered PF_INET6 protocol family
[    3.358673][    T1] Segment Routing with IPv6
[    3.363056][    T1] RPL Segment Routing with IPv6
[    3.367858][   T26] mmc0: SDHCI controller on f10d8000.sdhci [f10d8000.sdhci] using ADMA
[    3.376058][    T1] In-situ OAM (IOAM) with IPv6
[    3.380806][    T1] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[    3.388930][    T1] NET: Registered PF_PACKET protocol family
[    3.394886][    T1] 8021q: 802.1Q VLAN Support v1.8
[    3.399881][    T1] Key type dns_resolver registered
[    3.405029][    T1] ThumbEE CPU extension supported.
[    3.410039][    T1] Registering SWP/SWPB emulation handler
[    3.443110][    T1] registered taskstats version 1
[    3.448078][    T1] Loading compiled-in X.509 certificates
[    3.465384][  T105] usb 2-1: New USB device found, idVendor=045b, idProduct=0209, bcdDevice= 1.00
[    3.465575][    T1] Key type .fscrypt registered
[    3.474374][  T105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[    3.479091][    T1] Key type fscrypt-provisioning registered
[    3.488144][  T105] hub 2-1:1.0: USB hub found
[    3.493613][    T1] Key type big_key registered
[    3.497186][  T105] hub 2-1:1.0: 4 ports detected
[    3.522763][    T1] Key type encrypted registered
[    3.529905][    T1] clk: Disabling unused clocks
[    3.536480][    T1] Freeing unused kernel image (initmem) memory: 1024K
[    3.573813][    T1] Checked W+X mappings: passed, no W+X pages found
[    3.580206][    T1] Run /init as init process
Loading, please wait...
[    3.613490][   T10] usb 3-1: new SuperSpeed USB device number 2 using xhci-hcd
[    3.645136][   T10] usb 3-1: New USB device found, idVendor=045b, idProduct=0210, bcdDevice= 1.00
[    3.654092][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[    3.663555][   T10] hub 3-1:1.0: USB hub found
[    3.668793][   T10] hub 3-1:1.0: 4 ports detected
Starting systemd-udevd version 252.19-1~deb12u1
[    4.253483][ T1352] mtdblock: MTD device 'U-Boot' is NAND, please consider using UBI block devices instead.
[    4.263767][ T1346] mtdblock: MTD device 'uRamdisk' is NAND, please consider using UBI block devices instead.
[    4.264512][ T1345] mtdblock: MTD device 'uImage' is NAND, please consider using UBI block devices instead.
[    4.289412][ T1351] mtdblock: MTD device 'rescue_fw' is NAND, please consider using UBI block devices instead.
[    4.299083][ T1349] mtdblock: MTD device 'reserve2' is NAND, please consider using UBI block devices instead.
[    4.302095][ T1350] mtdblock: MTD device 'config' is NAND, please consider using UBI block devices instead.
[    4.319595][ T1349] mtdblock: MTD device 'reserve1' is NAND, please consider using UBI block devices instead.
[    4.325177][ T1354] mtdblock: MTD device 'image.cfs' is NAND, please consider using UBI block devices instead.
Begin: Loading essential drivers ... done.
Begin: Running /scripts/init-premount ... done.
Begin: Mounting root file system ... Begin: Running /scripts/local-top ... done.
Begin: Running /scripts/local-premount ... done.
Begin: Waiting for root file system ... Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
done.
Gave up waiting for root file system device.  Common problems:
 - Boot args (cat /proc/cmdline)
   - Check rootdelay= (did the system wait long enough?)
 - Missing modules (cat /proc/modules; ls /dev)
ALERT!  /dev/ram does not exist.  Dropping to a shell!

resetting ...

BootROM - 1.73
Booting from NAND flash

mvBoardIdGet: TWSI Read for Marvell Board ID failed (57)
        Using default board ID



General initialization - Version: 1.0.0
Detected Device ID 6828
High speed PHY - Version: 2.0

Initialize DB-88F6820-BP board topology
board SerDes lanes topology details:
 | Lane #  | Speed |  Type       |
 --------------------------------
 |   0    |  06   |  SATA0      |
 |   1    |  00   |  SGMII1     |
 |   2    |  06   |  SATA1      |
 |   3    |  06   |  SATA3      |
 |   4    |  05   |  USB3 HOST0 |
 |   5    |  06   |  SATA2      |
 --------------------------------
High speed PHY - Ended Successfully
DDR3 Training Sequence - Ver TIP-1.26.0
mvSysEnvGetTopologyUpdateInfo: TWSI Read failed
DDR3 1 Training Sequence - Switching XBAR Window to FastPath Window
DDR3 Training Sequence - Ended Successfully
BootROM: Image checksum verification PASSED

 __   __                      _ _
|  \/  | __ _ _ ____   _____| | |
| |\/| |/ _` | '__\ \ / / _ \ | |
| |  | | (_| | |   \ V /  __/ | |
|_|  |_|\__,_|_|    \_/ \___|_|_|
         _   _     ____              _
        | | | |   | __ )  ___   ___ | |_
        | | | |___|  _ \ / _ \ / _ \| __|
        | |_| |___| |_) | (_) | (_) | |_
         \___/    |____/ \___/ \___/ \__|
 ** LOADER **


U-Boot 2013.01_v1.06 (Jan 08 2015 - 10:04:46) Marvell version: 2014_T3.0p6

mvBoardSatRRead: Error: Read from S@R failed
mvBoardSatRRead: Error: Read from S@R failed
mvBoardSatRRead: Error: Read from S@R failed
Board: DB-88F6820-BP
SoC:   MV88F6828 Rev A0
       running 2 CPUs
CPU:   ARM Cortex A9 MPCore (Rev 1) LE
       CPU 0
       CPU    @ 1600 [MHz]
       L2     @ 800 [MHz]
       TClock @ 200 [MHz]
       DDR    @ 800 [MHz]
       DDR 32 Bit Width, FastPath Memory Access, DLB Enabled, ECC Disabled
DRAM:  2 GiB

Map:   Code:                    0x7fece000:0x7ff95d44
       BSS:                     0x7ffef254
       Stack:                   0x7f9cdf20
       Heap:                    0x7f9ce000:0x7fece000
raise: Signal # 8 caught
raise: Signal # 8 caught
       U-Boot Environment:      0x00000000:0x00080000 (NAND)

NAND:  ID: dcad ,512 MiB
MMC:   mv_sdh: 0
USB2.0 0: Host Mode
USB3.0 0: Host Mode
USB3.0 1: Host Mode
Board configuration detected:
Creating 1 MTD partitions on "nand0":
0x00001f500000-0x00001ff00000 : "mtd=7"
UBI: attaching mtd1 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    126976 bytes
UBI: smallest flash I/O unit:    2048
UBI: VID header offset:          2048 (aligned 2048)
UBI: data offset:                4096
UBI: attached mtd1 to ubi0
UBI: MTD device name:            "mtd=7"
UBI: MTD device size:            10 MiB
UBI: number of good PEBs:        80
UBI: number of bad PEBs:         0
UBI: max. allowed volumes:       128
UBI: wear-leveling threshold:    4096
UBI: number of internal volumes: 1
UBI: number of user volumes:     1
UBI: available PEBs:             32
UBI: total number of reserved PEBs: 48
UBI: number of PEBs reserved for bad PEB handling: 2
UBI: max/mean erase counter: 4/1
UBIFS: mounted UBI device 0, volume 0, name "reserve2"
UBIFS: mounted read-only
UBIFS: file system size:   4063232 bytes (3968 KiB, 3 MiB, 32 LEBs)
UBIFS: journal size:       1015809 bytes (992 KiB, 0 MiB, 6 LEBs)
UBIFS: media format:       w4/r0 (latest is w4/r0)
UBIFS: default compressor: LZO
UBIFS: reserved for root:  200807 bytes (196 KiB)
Loading file '/mac_addr' to addr 0x02000000 with size 36 (0x00000024)...
Done
lan mac_addr :  00 90 a9 e7 b6 2c
Set lan 0 WakeOnLan ok
Set lan 1 WakeOnLan ok
MicroP Enable HD
Enable HD1
Enable HD2
Enable HD3
Enable HD4
Net:
|  port  | Interface | PHY address  |
|--------|-----------|--------------|
| egiga0 |   RGMII   |     0x00     |
| egiga1 |   SGMII   |     0x01     |
egiga0 [PRIME], egiga1
Hit any key to stop autoboot:  0
Marvell>> 111111111111111<INTERRUPT>
Marvell>> usb start
(Re)start USB...
USB0:   Port (usbActive) : 0    Interface (usbType = 3) : USB XHCI 1.00
scanning bus 0 for devices... 4 USB Device(s) found
       scanning usb for storage devices... 1 Storage Device(s) found
       scanning usb for ethernet devices... 0 Ethernet Device(s) found
Marvell>> ext4load usb 0:1 0x0800000 boot/uboot6.bin
956160 bytes read in 511 ms (1.8 MiB/s)
Marvell>> nand erase 0x0 0x60000

NAND erase: device 0 offset 0x0, size 0x60000
Erasing at 0x40000 -- 100% complete.
OK
Marvell>> nand write 0x0800000 0x0 0x60000

NAND write: device 0 offset 0x0, size 0x60000
 393216 bytes written: OK
Marvell>> reset
resetting ...

BootROM - 1.73
Booting from NAND flashBootROM: Bad header at offset 00000000
BootROM: Bad header at offset 00010000
BootROM: Bad header at offset 00020000
BootROM: Bad header at offset 00030000
BootROM: Bad header at offset 00040000
BootROM: Bad header at offset 00050000
BootROM: Bad header at offset 00060000
BootROM: Bad header at offset 00070000
BootROM: Bad header at offset 00080000
BootROM: Bad header at offset 00090000
BootROM: Bad header at offset 000A0000
BootROM: Bad header at offset 000B0000
BootROM: Bad header at offset 000C0000
BootROM: Bad header at offset 000D0000
BootROM: Bad header at offset 000E0000
BootROM: Bad header at offset 000F0000
BootROM: Bad header at offset 00100000
BootROM: Bad header at offset 00110000
BootROM: Bad header at offset 00120000
BootROM: Bad header at offset 00130000
BootROM: Bad header at offset 00140000
BootROM: Bad header at offset 00150000
BootROM: Bad header at offset 00160000
BootROM: Bad header at offset 00170000
BootROM: Bad header at offset 00180000
BootROM:
Trying Uart ot

ex@cd:~ $ ./kwboot -t -B 115200 /dev/ttyS0 -b uboot6.bin -s 0 -q 1 -t
kwboot version 2024.04-rc3-00001-g0861eab8ec-dirty
Detected kwbimage v1 with UART boot signature
Sending boot message. Please reboot the target...-
Sending boot image header (71552 bytes)...
  0 % [......................................................................]
 12 % [......................................................................]
 25 % [......................................................................]
 37 % [......................................................................]
 50 % [......................................................................]
 62 % [......................................................................]
 75 % [......................................................................]
 87 % [..................................................................... ]
Done
Sending boot image data (884608 bytes)...
  0 % [......................................................................]
  1 % [......................................................................]
  2 % [......................................................................]
  3 % [......................................................................]
  4 % [......................................................................]
  5 % [......................................................................]
  6 % [......................................................................]
  7 % [......................................................................]
  8 % [......................................................................]
  9 % [......................................................................]
 10 % [......................................................................]
 11 % [......................................................................]
 12 % [......................................................................]
 13 % [......................................................................]
 14 % [......................................................................]
 15 % [......................................................................]
 16 % [......................................................................]
 17 % [......................................................................]
 18 % [......................................................................]
 19 % [......................................................................]
 20 % [......................................................................]
 21 % [......................................................................]
 22 % [......................................................................]
 23 % [......................................................................]
 24 % [......................................................................]
 25 % [......................................................................]
 26 % [......................................................................]
 27 % [......................................................................]
 28 % [......................................................................]
 29 % [......................................................................]
 30 % [......................................................................]
 31 % [......................................................................]
 32 % [......................................................................]
 33 % [......................................................................]
 34 % [......................................................................]
 35 % [......................................................................]
 36 % [......................................................................]
 37 % [......................................................................]
 38 % [......................................................................]
 39 % [......................................................................]
 40 % [......................................................................]
 41 % [......................................................................]
 42 % [......................................................................]
 43 % [......................................................................]
 44 % [......................................................................]
 45 % [......................................................................]
 46 % [......................................................................]
 47 % [......................................................................]
 48 % [......................................................................]
 49 % [......................................................................]
 50 % [......................................................................]
 51 % [......................................................................]
 52 % [......................................................................]
 53 % [......................................................................]
 54 % [......................................................................]
 55 % [......................................................................]
 56 % [......................................................................]
 57 % [......................................................................]
 58 % [......................................................................]
 59 % [......................................................................]
 60 % [......................................................................]
 61 % [......................................................................]
 62 % [......................................................................]
 63 % [......................................................................]
 64 % [......................................................................]
 65 % [......................................................................]
 66 % [......................................................................]
 67 % [......................................................................]
 68 % [......................................................................]
 69 % [......................................................................]
 70 % [......................................................................]
 71 % [......................................................................]
 72 % [......................................................................]
 73 % [......................................................................]
 74 % [......................................................................]
 75 % [......................................................................]
 76 % [......................................................................]
 78 % [......................................................................]
 79 % [......................................................................]
 80 % [......................................................................]
 81 % [......................................................................]
 82 % [......................................................................]
 83 % [......................................................................]
 84 % [......................................................................]
 85 % [......................................................................]
 86 % [......................................................................]
 87 % [......................................................................]
 88 % [......................................................................]
 89 % [......................................................................]
 90 % [......................................................................]
 91 % [......................................................................]
 92 % [......................................................................]
 93 % [......................................................................]
 94 % [......................................................................]
 95 % [......................................................................]
 96 % [......................................................................]
 97 % [......................................................................]
 98 % [......................................................................]
 99 % [...................................................                   ]
Done
Finishing transfer
[Type Ctrl-\ + c to quit]

 __   __                      _ _
|  \/  | __ _ _ ____   _____| | |
| |\/| |/ _` | '__\ \ / / _ \ | |
| |  | | (_| | |   \ V /  __/ | |
|_|  |_|\__,_|_|    \_/ \___|_|_|
         _   _     ____              _
        | | | |   | __ )  ___   ___ | |_
        | | | |___|  _ \ / _ \ / _ \| __|
        | |_| |___| |_) | (_) | (_) | |_
         \___/    |____/ \___/ \___/ \__|
 ** LOADER **


U-Boot 2013.01_v1.06 (Jun 30 2017 - 16:08:19) Marvell version: 2014_T3.0p6 - bodhi-tld-6

mvBoardSatRRead: Error: Read from S@R failed
mvBoardSatRRead: Error: Read from S@R failed
mvBoardSatRRead: Error: Read from S@R failed
Board: DB-88F6820-BP
SoC:   MV88F6828 Rev A0
       running 2 CPUs
CPU:   ARM Cortex A9 MPCore (Rev 1) LE
       CPU 0
       CPU    @ 1600 [MHz]
       L2     @ 800 [MHz]
       TClock @ 200 [MHz]
       DDR    @ 800 [MHz]
       DDR 32 Bit Width, FastPath Memory Access, DLB Enabled, ECC Disabled
DRAM:  2 GiB

Map:   Code:                    0x7fece000:0x7ff960f0
       BSS:                     0x7ffef654
       Stack:                   0x7f9cdf20
       Heap:                    0x7f9ce000:0x7fece000
       U-Boot Environment:      0x00100000:0x00180000 Address: 0x00100000(NAND)

NAND:  ID: dcad ,512 MiB
MMC:   mv_sdh: 0
bootcmd: run bootcmd_custom; setenv bootargs root=/dev/ram console=ttyS0,115200; nand read.e 0xa00000 0x500000 0x500000;nand read.e 0xf00000 0xa00000 0x500000;bootm 0xa00000 0xf00000
USB2.0 0: Host Mode
USB3.0 0: Host Mode
USB3.0 1: Host Mode
Board configuration detected:
Creating 1 MTD partitions on "nand0":
0x00001f500000-0x00001ff00000 : "mtd=7"
UBI: attaching mtd1 to ubi0
UBI: physical eraseblock size:   131072 bytes (128 KiB)
UBI: logical eraseblock size:    126976 bytes
UBI: smallest flash I/O unit:    2048
UBI: VID header offset:          2048 (aligned 2048)
UBI: data offset:                4096
UBI: attached mtd1 to ubi0
UBI: MTD device name:            "mtd=7"
UBI: MTD device size:            10 MiB
UBI: number of good PEBs:        80
UBI: number of bad PEBs:         0
UBI: max. allowed volumes:       128
UBI: wear-leveling threshold:    4096
UBI: number of internal volumes: 1
UBI: number of user volumes:     1
UBI: available PEBs:             32
UBI: total number of reserved PEBs: 48
UBI: number of PEBs reserved for bad PEB handling: 2
UBI: max/mean erase counter: 4/1
UBIFS: mounted UBI device 0, volume 0, name "reserve2"
UBIFS: mounted read-only
UBIFS: file system size:   4063232 bytes (3968 KiB, 3 MiB, 32 LEBs)
UBIFS: journal size:       1015809 bytes (992 KiB, 0 MiB, 6 LEBs)
UBIFS: media format:       w4/r0 (latest is w4/r0)
UBIFS: default compressor: LZO
UBIFS: reserved for root:  200807 bytes (196 KiB)
Loading file '/mac_addr' to addr 0x02000000 with size 36 (0x00000024)...
Done
lan mac_addr :  00 90 a9 e7 b6 2c
Set lan 0 WakeOnLan ok
Set lan 1 WakeOnLan ok
MicroP Enable HD
Enable HD1
Enable HD2
Enable HD3
Enable HD4
Net:
|  port  | Interface | PHY address  |
|--------|-----------|--------------|
| egiga0 |   RGMII   |     0x00     |
| egiga1 |   SGMII   |     0x01     |
egiga0 [PRIME], egiga1
Hit any key to stop autoboot:  0
Marvell>> printenv
CASset=max
MALLOC_len=5
MPmode=SMP
autoload=no
baudrate=115200
boot_order=hd_scr usb_scr mmc_scr hd_img usb_img mmc_img pxe net_img net_scr
bootargs=root=/dev/ram console=ttyS0,115200
bootargs_dflt=$console $nandEcc $mtdparts $bootargs_root nfsroot=$serverip:$rootpath ip=$ipaddr:$serverip$bootargs_end $mvNetConfig video=dovefb:lcd0:$lcd0_params clcd.lcd0_enable=$lcd0_enable clcd.lcd_panel=$lcd_panel
bootargs_end=:10.4.50.254:255.255.255.0:Armada38x:eth0:none
bootargs_root=root=/dev/nfs rw
bootcmd=run bootcmd_custom; setenv bootargs root=/dev/ram console=ttyS0,115200; nand read.e 0xa00000 0x500000 0x500000;nand read.e 0xf00000 0xa00000 0x500000;bootm 0xa00000 0xf00000
bootcmd_auto=stage_boot $boot_order
bootcmd_fdt=tftpboot 0x2000000 $image_name;tftpboot $fdtaddr $fdtfile;setenv bootargs $console $nandEcc $mtdparts $bootargs_root nfsroot=$serverip:$rootpath ip=$ipaddr:$serverip$bootargs_end $mvNetConfig video=dovefb:lcd0:$lcd0_params clcd.lcd0_enable=$lcd0_enable clcd.lcd_panel=$lcd_panel; bootz 0x2000000 - $fdtaddr;
bootcmd_fdt_boot=tftpboot 0x2000000 $image_name; setenv bootargs $console $nandEcc $mtdparts $bootargs_root nfsroot=$serverip:$rootpath ip=$ipaddr:$serverip$bootargs_end $mvNetConfig video=dovefb:lcd0:$lcd0_params clcd.lcd0_enable=$lcd0_enable clcd.lcd_panel=$lcd_panel; bootz 0x2000000 - $fdtaddr;
bootcmd_fdt_edit=tftpboot $fdtaddr $fdtfile; fdt addr $fdtaddr; setenv bootcmd $bootcmd_fdt_boot
bootcmd_lgcy=tftpboot 0x2000000 $image_name; setenv bootargs $bootargs_dflt; bootm 0x2000000;
bootdelay=1
cacheShare=no
console=console=ttyS0,115200
device_partition=0:1
disaMvPnp=no
eeeEnable=no0
enaClockGating=no
enaCpuStream=no
enaFPU=yes
enaMonExt=no
enaWrAllo=no
eth1addr=00:50:43:12:22:20
eth1mtu=1500
eth2addr=00:50:43:12:01:20
eth2mtu=1500
eth3addr=00:50:43:22:01:12
eth3mtu=1500
ethact=egiga0
ethaddr=00:50:43:01:22:20
ethmtu=1500
ethprime=egiga0
fdt_addr=2040000
fdt_skip_update=no
fdtaddr=0x1000000
fdtfile=armada-38x-modular.dtb
filesize=24
ide_path=/
image_name=uImage
initrd_name=uInitrd
ipaddr=2.66.66.203
kernel_addr_r=2080000
lcd0_enable=0
lcd0_params=640x480-16@60
lcd_panel=0
loadaddr=0x02000000
loads_echo=0
mtddevname=u-boot
mtddevnum=0
mtdids=nand0=armada-nand
mtdparts=mtdparts=armada-nand:5m(u-boot)ro,5m@5m(kernel),5m@10m(uRamdisk),441m@15m(image.cfs),15m@456m(rescue_fw),20m@471m(config),10m@491m(reserve1),10m@501m(reserve2)
mvNetConfig=mv_net_config=4,(00:50:43:11:11:11,0:1:2:3),mtu=1500
mv_pon_addr=00:50:43:20:01:12
nandEcc=nfcConfig=4bitecc
netbsd_en=no
netmask=255.255.255.0
netretry=no
partition=nand0,0
pcieTune=no
pexMode=RC
pxe_files_load=:default.arm-armadaxp-db:default.arm-armadaxp:default.arm
pxefile_addr_r=3100000
ramdisk_addr_r=2880000
rootpath=/srv/nfs/
sata_delay_reset=0
sata_dma_mode=yes
script_addr_r=3000000
script_name=boot.scr
serverip=2.66.66.32
standalone=fsload 0x2000000 $image_name;setenv bootargs $console $nandEcc $mtdparts root=/dev/mtdblock0 rw ip=$ipaddr:$serverip$bootargs_end; bootm 0x2000000;
stderr=serial
stdin=serial
stdout=serial
usb0Mode=host
usbActive=0
usbType=3
vxworks_en=no
yuk_ethaddr=00:00:00:EE:51:81

sha256:
bb1b7ad85d2282b48e4d8199bb9b882b135dc550670f4f338d34b237c305cf1b  uboot.2024.10-tld-1.moi_plus.bodhi.tar

uboot.2024.10-tld-1.moi_plus.kwb
uboot.2024.10-tld-1.moi_plus.environment
uboot.2024.10-tld-1.moi_plus.environment.img

 # MTD device name	Device offset	Env. size	Flash sector size	Number of sectors 
/dev/mtd0 0xc0000 0x20000 0x20000

echo "/dev/mtd0 0xc0000 0x20000 0x20000" > /etc/fw_env.config

dev:    size   erasesize  name
mtd0: 00100000 00020000 "uboot"
. . .

nanddump --noecc --omitoob -l 0x80000 -f mtd0.moi_plus /dev/mtd0

fw_printenv > current_envs.txt

dmesg | grep -i 'bad'

[    2.413231] Scanning device for bad blocks
[    2.417731] Bad eraseblock 3 at 0x000000060000

cd /tmp
tar xf uboot.2024.10-tld-1.moi_plus.bodhi.tar

flash_erase /dev/mtd0 0 4

Erase Total 4 Units 
Performing Flash Erase of length 131072 at offset 0x60000 done

nandwrite /dev/mtd0 uboot.2024.10-tld-1.moi_plus.kwb

Writing data to block 0 at offset 0x0 
Writing data to block 1 at offset 0x20000 
Writing data to block 2 at offset 0x40000 
Writing data to block 3 at offset 0x60000

flash_erase /dev/mtd0 0xc0000 1

Erase Total 1 Units
Performing Flash Erase of length 131072 at offset 0xc0000 done

nandwrite -s 786432 /dev/mtd0 /tmp/uboot.2024.10-tld-1.moi_plus.environment.img

Writing data to block 6 at offset 0xc0000

fw_setenv ethaddr 'xx:xx:xx:xx:xx:xx'

fw_printenv

U-Boot 2024.10-tld-1 (Nov 11 2024 - . . .)
TBS2903 MOI Plus DVB to IP Gateway Box

sha256:
d110467d3fe0fd2a482f24223b30dfe49da73f4a2f7dd0529f91556e0a656ed9

uboot.2024.10-tld-1.ds211.kwb
uboot.2024.10-tld-1.ds211.environment
uboot.2024.10-tld-1.ds211.environment.img

dd if=/dev/mtd0 of=mtd0.ds211 conv=sync
dd if=/dev/mtd1 of=mtd1.ds211 conv=sync
dd if=/dev/mtd2 of=mtd2.ds211 conv=sync
dd if=/dev/mtd3 of=mtd3.ds211 conv=sync
dd if=/dev/mtd4 of=mtd4.ds211 conv=sync
dd if=/dev/mtd5 of=mtd5.ds211 conv=sync

 # MTD device name	Device offset	Env. size	Flash sector size	Number of sectors 
/dev/mtd1 0x0 0x10000 0x10000

echo "/dev/mtd1 0x0 0x10000 0x10000" > /etc/fw_env.config

dev:    size   erasesize  name
mtd0: 00080000 00010000 "u-boot"		 
mtd1: 00010000 00010000 "u-boot-env"

0
786432

fw_printenv > current_envs.txt

cd /tmp
tar xf uboot.2024.10-tld-1.ds211.bodhi.tar

flashcp -v /tmp/uboot.2024.10-tld-1.ds211.kwb /dev/mtd0

Erasing blocks: xxx/xxx (100%)
Writing data: 512k/0k (100%)
Verifying data: 512k/0k (100%)

flashcp -v uboot.2024.10-tld-1.ds211.environment.img /dev/mtd1

Erasing blocks: xxx/xxx (100%)
Writing data: 64k/0k (100%)
Verifying data: 64k/0k (100%)

fw_setenv ethaddr 'xx:xx:xx:xx:xx:xx'

fw_printenv

U-Boot 2024.10-tld-1 (Nov 17 2024 ...)
Synology DS211

===================================================================

     		MT7621   stage1 code Mar 12 2015 14:43:30 (ASIC)

     		CPU=500000000 HZ BUS=125000000 HZ

==================================================================

Change MPLL source from XTAL to CR...

do MEMPLL setting..

MEMPLL Config : 0x31000000

3PLL mode + External loopback

=== XTAL-40Mhz === DDR-800Mhz ===

PLL3 FB_DL: 0x14, 1/0 = 609/415 51000000

MEMPLL 3PLL mode calibration fail

do DDR setting..[01F40000]

Apply DDR2 Setting...(use default AC)

          0    8   16   24   32   40   48   56   64   72   80   88   96  104  112  120

      --------------------------------------------------------------------------------

0000:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0001:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0002:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0003:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0004:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0005:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0006:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    1    1

0007:|    0    0    0    0    0    0    0    1    1    1    1    1    1    1    1    1

0008:|    1    1    1    1    1    1    1    1    1    1    1    1    1    1    0    0

0009:|    1    1    1    1    1    1    0    0    0    0    0    0    0    0    0    0

000A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

000B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

000C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

000D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

000E:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

000F:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0010:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0011:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0012:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0013:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0014:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0015:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0016:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0017:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0018:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

0019:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001E:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

001F:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0

DRAMC_DQSCTL1[0e0]=1A000000

DRAMC_DQSGCTL[124]=80000000

rank 0 coarse = 8

rank 0 fine = 56

B:|    0    0    0    0    1    1    1    0    0    0    0    0    0    0    0    0

opt_dle value:5

DRAMC_DDR2CTL[07c]=40001253

DRAMC_PADCTL4[0e4]=00000005

DRAMC_DQIDLY1[210]=00000000

DRAMC_DQIDLY2[214]=00000000

DRAMC_DQIDLY3[218]=00000000

DRAMC_DQIDLY4[21c]=00000000

DRAMC_R0DELDLY[018]=00000000

==================================================================

		RX	DQS perbit delay software calibration 

==================================================================

1.0-15 bit dq delay value

==================================================================

bit|     0  1  2  3  4  5  6  7  8  9

--------------------------------------

0 |    0 0 0 0 0 0 0 0 0 0 

10 |    0 0 0 0 0 0 

--------------------------------------

==================================================================

2.dqs window

x=pass dqs delay value (min~max)center 

y=0-7bit DQ of every group

input delay:DQS0 =0 DQS1 = 0

==================================================================

bit	DQS0	 bit      DQS1

0  (-1~-1)0  8  (-1~-1)0

1  (-1~-1)0  9  (-1~-1)0

2  (-1~-1)0  10  (-1~-1)0

3  (-1~-1)0  11  (-1~-1)0

4  (-1~-1)0  12  (-1~-1)0

5  (-1~-1)0  13  (-1~-1)0

6  (-1~-1)0  14  (-1~-1)0

7  (-1~-1)0  15  (-1~-1)0

==================================================================

3.dq delay value last

==================================================================

bit|    0  1  2  3  4  5  6  7  8   9

--------------------------------------

0 |    0 0 0 0 0 0 0 0 0 0 

10 |    0 0 0 0 0 0 

==================================================================

==================================================================

     TX  perbyte calibration 

==================================================================

DQS loop = 15, cmp_err_1 = ffffffff 

DQS loop = 14, cmp_err_1 = ffffffff 

DQS loop = 13, cmp_err_1 = ffffffff 

DQS loop = 12, cmp_err_1 = ffffffff 

DQS loop = 11, cmp_err_1 = ffffffff 

DQS loop = 10, cmp_err_1 = ffffffff 

DQS loop = 9, cmp_err_1 = ffffffff 

DQS loop = 8, cmp_err_1 = ffffffff 

DQS loop = 7, cmp_err_1 = ffffffff 

DQS loop = 6, cmp_err_1 = ffffffff 

DQS loop = 5, cmp_err_1 = ffffffff 

DQS loop = 4, cmp_err_1 = ffffffff 

DQS loop = 3, cmp_err_1 = ffffffff 

DQS loop = 2, cmp_err_1 = ffffffff 

DQS loop = 1, cmp_err_1 = ffffffff 

DQS loop = 0, cmp_err_1 = ffffffff 

DQ loop=15, cmp_err_1 = ffffffff

DQ loop=14, cmp_err_1 = ffffffff

DQ loop=13, cmp_err_1 = ffffffff

DQ loop=12, cmp_err_1 = ffffffff

DQ loop=11, cmp_err_1 = ffffffff

DQ loop=10, cmp_err_1 = ffffffff

DQ loop=9, cmp_err_1 = ffffffff

DQ loop=8, cmp_err_1 = ffffffff

DQ loop=7, cmp_err_1 = ffffffff

DQ loop=6, cmp_err_1 = ffffffff

DQ loop=5, cmp_err_1 = ffffffff

DQ loop=4, cmp_err_1 = ffffffff

DQ loop=3, cmp_err_1 = ffffffff

DQ loop=2, cmp_err_1 = ffffffff

DQ loop=1, cmp_err_1 = ffffffff

DQ loop=0, cmp_err_1 = ffffffff

byte:0, (DQS,DQ)=(8,8)

byte:1, (DQS,DQ)=(8,8)

DRAMC_DQODLY1[200]=88888888

DRAMC_DQODLY2[204]=88888888

20,data:88

[EMI] DRAMC calibration passed


===================================================================

     		MT7621   stage1 code done 

     		CPU=500000000 HZ BUS=125000000 HZ

===================================================================

# /etc/exports: the access control list for filesystems which may be exported
#               to NFS clients.  See exports(5).
#
# Example for NFSv2 and NFSv3:
# /srv/homes       hostname1(rw,sync,no_subtree_check) hostname2(ro,sync,no_subtree_check)
#
# Example for NFSv4:
# /srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)
# /srv/nfs4/homes  gss/krb5i(rw,sync,no_subtree_check)
#
#/home/alex/embedded-linux-qemu-labs/tinysystem/nfsroot 172.23.78.42(rw,no_root_squash,no_subtree_check)
#/home/alex/embedded-linux-qemu-labs/tinysystem/nfsroot 127.0.0.1(rw,no_root_squash,no_subtree_check,insecure)
#/home/alex/embedded-linux-qemu-labs/tinysystem/nfsroot *(rw,sync,no_subtree_check)
/home/alex/embedded-linux-qemu-labs/tinysystem/nfsroot 10.0.2.15(rw,sync,no_subtree_check)

arch=arm
baudrate=38400
board=vexpress
board_name=vexpress
boot_a_script=load ${devtype} ${devnum}:${distro_bootpart} ${scriptaddr} ${prefix}${script}; source ${scriptaddr}
boot_efi_binary=load ${devtype} ${devnum}:${distro_bootpart} ${kernel_addr_r} efi/boot/bootarm.efi; if fdt addr -q ${fdt_addr_r}; then bootefi ${kernel_addr_r} ${fdt_addr_r};else bootefi ${kernel_addr_r} ${fdtcontroladdr};fi
boot_efi_bootmgr=if fdt addr -q ${fdt_addr_r}; then bootefi bootmgr ${fdt_addr_r};else bootefi bootmgr;fi
boot_extlinux=sysboot ${devtype} ${devnum}:${distro_bootpart} any ${scriptaddr} ${prefix}${boot_syslinux_conf}
boot_prefixes=/ /boot/
boot_script_dhcp=boot.scr.uimg
boot_scripts=boot.scr.uimg boot.scr
boot_syslinux_conf=extlinux/extlinux.conf
boot_targets=mmc1 mmc0 pxe dhcp
bootargs=console=ttyAMA0,115200 root=/dev/nfs ip=10.0.2.15::::::eth0 nfsroot=10.0.2.2:/home/alex/embedded-linux-qemu-labs/tinysystem/nfsroot,nfsvers=3,tcp rw
bootargs_tmp=root=/dev/sda1 rw console=ttyAMA0,38400n8 mem=1024M mtdparts=armflash:1M@0x800000(uboot),7M@0x1000000(kernel),24M@0x2000000(initrd) mmci.fmax=190000 devtmpfs.mount=0 vmalloc=256M
bootcmd=run distro_bootcmd;  tftp 0x61000000 zImage;tftp 0x62000000 vexpress-v2p-ca9.dtb; bootz 0x61000000 - 0x62000000
bootcmd_dhcp=devtype=dhcp; if dhcp ${scriptaddr} ${boot_script_dhcp}; then source ${scriptaddr}; fi;setenv efi_fdtfile ${fdtfile}; if test -z "${fdtfile}" -a -n "${soc}"; then setenv efi_fdtfile ${soc}-${board}${boardver}.dtb; fi; setenv efi_old_vci ${bootp_vci};setenv efi_old_arch ${bootp_arch};setenv bootp_vci PXEClient:Arch:00010:UNDI:003000;setenv bootp_arch 0xa;if dhcp ${kernel_addr_r}; then tftpboot ${fdt_addr_r} dtb/${efi_fdtfile};if fdt addr -q ${fdt_addr_r}; then bootefi ${kernel_addr_r} ${fdt_addr_r}; else bootefi ${kernel_addr_r} ${fdtcontroladdr};fi;fi;setenv bootp_vci ${efi_old_vci};setenv bootp_arch ${efi_old_arch};setenv efi_fdtfile;setenv efi_old_arch;setenv efi_old_vci;
bootcmd_mmc0=devnum=0; run mmc_boot
bootcmd_mmc1=devnum=1; run mmc_boot
bootcmd_pxe=dhcp; if pxe get; then pxe boot; fi
bootdelay=2
bootfile=boot.scr.uimg
bootflash=run flashargs; cp ${ramdisk_addr} ${ramdisk_addr_r} ${maxramdisk}; bootm ${kernel_addr} ${ramdisk_addr_r}
bootfstype=fat
console=ttyAMA0,38400n8
cpu=armv7
disable_ipv6=1
distro_bootcmd=for target in ${boot_targets}; do run bootcmd_${target}; done
distro_bootpart_uuid=af3731d1-01
dnsip=10.0.2.3
dram=1024M
efi_dtb_prefixes=/ /dtb/ /dtb/current/
env=bootcmd tftp 0x61000000 zImage
ethact=ethernet@3,02000000
ethaddr=52:54:00:12:34:56
fdt_addr_r=0x60000000
fdtcontroladdr=6087ff30
fdtfile=vexpress-v2p-ca9.dtb
fileaddr=62000000
filesize=3701
flashargs=setenv bootargs root=${root} console=${console} mem=${dram} mtdparts=${mtd} mmci.fmax=190000 devtmpfs.mount=0  vmalloc=256M
foo=bar
gatewayip=10.0.2.2
ipaddr=10.0.2.15
kernel_addr_r=0x60100000
load_efi_dtb=load ${devtype} ${devnum}:${distro_bootpart} ${fdt_addr_r} ${prefix}${efi_fdtfile}
loadaddr=0x60100000
mmc_boot=if mmc dev ${devnum}; then devtype=mmc; run scan_dev_for_boot_part; fi
mtd=armflash:1M@0x800000(uboot),7M@0x1000000(kernel),24M@0x2000000(initrd)
netmask=255.255.255.0
nfsroot=172.23.78.41:/home/alex/embedded-linux-qemu-labs/tinysystem/nfsroot
root=/dev/sda1 rw
scan_dev_for_boot=echo Scanning ${devtype} ${devnum}:${distro_bootpart}...; for prefix in ${boot_prefixes}; do run scan_dev_for_extlinux; run scan_dev_for_scripts; done;run scan_dev_for_efi;
scan_dev_for_boot_part=part list ${devtype} ${devnum} -bootable devplist; env exists devplist || setenv devplist 1; for distro_bootpart in ${devplist}; do if fstype ${devtype} ${devnum}:${distro_bootpart} bootfstype; then part uuid ${devtype} ${devnum}:${distro_bootpart} distro_bootpart_uuid ; run scan_dev_for_boot; fi; done; setenv devplist
scan_dev_for_efi=setenv efi_fdtfile ${fdtfile}; if test -z "${fdtfile}" -a -n "${soc}"; then setenv efi_fdtfile ${soc}-${board}${boardver}.dtb; fi; for prefix in ${efi_dtb_prefixes}; do if test -e ${devtype} ${devnum}:${distro_bootpart} ${prefix}${efi_fdtfile}; then run load_efi_dtb; fi;done;run boot_efi_bootmgr;if test -e ${devtype} ${devnum}:${distro_bootpart} efi/boot/bootarm.efi; then echo Found EFI removable media binary efi/boot/bootarm.efi; run boot_efi_binary; echo EFI LOAD FAILED: continuing...; fi; setenv efi_fdtfile
scan_dev_for_extlinux=if test -e ${devtype} ${devnum}:${distro_bootpart} ${prefix}${boot_syslinux_conf}; then echo Found ${prefix}${boot_syslinux_conf}; run boot_extlinux; echo EXTLINUX FAILED: continuing...; fi
scan_dev_for_scripts=for script in ${boot_scripts}; do if test -e ${devtype} ${devnum}:${distro_bootpart} ${prefix}${script}; then echo Found U-Boot script ${prefix}${script}; run boot_a_script; echo SCRIPT FAILED: continuing...; fi; done
serverip=10.0.2.2
stderr=uart@9000
stdin=uart@9000
stdout=uart@9000
ubifs_boot=if ubi part ${bootubipart} ${bootubioff} && ubifsmount ubi0:${bootubivol}; then devtype=ubi; devnum=ubi0; bootfstype=ubifs; distro_bootpart=${bootubivol}; run scan_dev_for_boot; ubifsumount; fi
vendor=armltd

Environment size: 5048/262140 bytes

setenv ipdaddr 172.23.78.42
setenv serverip 172.23.78.41
saveenv

ns2> env default -a
## Resetting to default environment
ns2> saveenv
Saving Environment to SPI Flash... SF: Detected mx25l4005a with page size 256 Bytes, erase size 4 KiB, total 512 KiB
Erasing SPI flash...Writing to SPI flash...done
OK
ns2> env save
Saving Environment to SPI Flash... Erasing SPI flash...Writing to SPI flash...done
OK
ns2> reset

U-Boot 2020.07-rc5-00057-gfce0bb3e2bd8 (Jul 09 2020 - 11:11:59 +0200) NS v2

SoC:   Kirkwood 88F6281_A1
I2C:   ready
DRAM:  256 MiB
Loading Environment from SPI Flash... SF: Detected mx25l4005a with page size 256 Bytes, erase size 4 KiB, total 512 KiB
*** Warning - bad CRC, using default environment

In:    serial
Out:   serial
Err:   serial
Net:   eth0: ethernet-controller@72000
88E1116 Initialized on ethernet-controller@72000
Hit any key to stop autoboot:  0
ns2> version
U-Boot 2020.07-rc5-00057-gfce0bb3e2bd8 (Jul 09 2020 - 11:11:59 +0200) NS v2

arm-buildroot-linux-gnueabi-gcc.br_real (Buildroot 2020.02-00011-g7ea8a52) 8.4.0
GNU ld (GNU Binutils) 2.32
ns2>

U-Boot 2023.04-tld-1 (Jun 24 2023 - 17:50:21 -0700)
ZyXEL NSA325 2-Bay Power Media Server

SoC:   Kirkwood 88F6282_A1
Model: ZyXEL NSA325
DRAM:  512 MiB
Core:  19 devices, 15 uclasses, devicetree: separate
NAND:  128 MiB
Loading Environment from NAND... OK
Resetting console stdin/stdout/stderr to serial...
In:    serial
Out:   serial
Err:   serial
pcie0.0: Link up
Net:   eth0: ethernet-controller@72000
Hit any key to stop autoboot:  0 
Wrong Image Format for bootm command
Error occured, error code = 112
ERROR: can't get kernel image!

NSA325> printenv
CONTRY_TYPE=FF
FEATURE_BIT=00
MODEL_ID=A203
PRODUCT_NAME=NSA-310
VENDOR_NAME=ZyXEL Communications Corp.
baudrate=115200
bootargs=console=ttyS0,115200 root=LABEL=rootfs rootdelay=10
bootcmd=bootm 0x00800000
bootdelay=2
ethaddr=EC:43:F6:A4:00:D6
fdtcontroladdr=1fb516e0
kernel_addr=480000
loadaddr=0x00800000
mtddevname=uboot
mtddevnum=0
mtdids=nand0=orion_nand
mtdparts=mtdparts=orion_nand:0x100000(uboot),0x80000(stock_uboot_env),0x80000(key_store),0x80000(info),0xA00000(etc),0xA00000(kernel_1),0x2FC0000(rootfs1),0xA00000(kernel_2),0x2FC0000(rootfs2)
nandEcc=1bit
partition=nand0,0
ver=U-Boot 2023.04-tld-1 (Jun 24 2023 - 17:50:21 -0700)\
ZyXEL NSA325 2-Bay Power Media Server

Environment size: 680/131068 bytes
NSA325>

NSA325> usb start
starting USB...
Bus ehci@50000: USB EHCI 1.00
Bus xhci_pci: Register 4000820 NbrPorts 4
Starting the controller
USB XHCI 0.96
scanning bus ehci@50000 for devices... 3 USB Device(s) found
scanning bus xhci_pci for devices... 1 USB Device(s) found
       scanning usb for storage devices... 1 Storage Device(s) found
NSA325> ext2ls usb 0:1 /
<DIR>       4096 .
<DIR>       4096 ..
<DIR>      16384 lost+found
<DIR>       4096 proc
<SYM>          8 sbin
<DIR>       4096 dev
<DIR>       4096 root
<DIR>       4096 usr
<DIR>       4096 opt
<DIR>       4096 boot
<SYM>          7 bin
<DIR>       4096 etc
<DIR>       4096 tmp
<DIR>       4096 mnt
<DIR>       4096 var
<DIR>       4096 home
<DIR>       4096 media
<DIR>       4096 sys
<DIR>       4096 run
<SYM>          7 lib
<DIR>       4096 srv
NSA325> ext2ls usb 0:1 /boot
<DIR>       4096 .
<DIR>       4096 ..
         6223880 zImage-6.5.7-kirkwood-tld-1
         8557164 linux-headers-6.5.7-kirkwood-tld-1_1_armel.deb
         6223880 vmlinuz-6.5.7-kirkwood-tld-1
         5791271 uInitrd
         5791207 initrd.img-6.5.7-kirkwood-tld-1
<DIR>       4096 dts
         6223944 uImage
          198312 config-6.5.7-kirkwood-tld-1
         4543778 System.map-6.5.7-kirkwood-tld-1
         6223880 zImage.fdt
            1262 uboot.2023.04-tld-1.nsa325.boot.scr
            2890 uboot.2023.04-tld-1.nsa325.environment
          131072 uboot.2023.04-tld-1.nsa325.environment.img
          524288 uboot.2023.04-tld-1.nsa325.kwb
NSA325>

  __  __                      _ _
        |  \/  | __ _ _ ____   _____| | |
        | |\/| |/ _` | '__\ \ / / _ \ | |
        | |  | | (_| | |   \ V /  __/ | |
        |_|  |_|\__,_|_|    \_/ \___|_|_|
 _   _     ____              _
| | | |   | __ )  ___   ___ | |_
| | | |___|  _ \ / _ \ / _ \| __|
| |_| |___| |_) | (_) | (_) | |_
 \___/    |____/ \___/ \___/ \__|
 ** MARVELL BOARD: RD-88F6281A LE
  
U-Boot 1.1.4 (Sep  4 2009 - 09:36:11) Marvell version: 3.4.14
  
U-Boot code: 00600000 -> 0067FFF0  BSS: -> 006CEE60
  
Soc: MV88F6281 Rev 3 (DDR2)
CPU running @ 1000Mhz L2 running @ 333Mhz
SysClock = 333Mhz , TClock = 200Mhz
  
DRAM CAS Latency = 5 tRP = 5 tRAS = 18 tRCD=6
DRAM CS[0] base 0x00000000   size  64MB
DRAM CS[1] base 0x04000000   size  64MB
DRAM Total size 128MB  16bit width
Flash:  0 kB
Addresses 8M - 0M are saved for the U-Boot usage.
Mem malloc Initialization (8M - 7M): Done
NAND:256 MB
CRC in Flash: ffffffff, Calculated CRC: 619d86db
+++++++++++++++++++++++++++Checksum Error!++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++Checksum Error!++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++Checksum Error!++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++Checksum Error!++++++++++++++++++++++++++++++
+++++++++++++++++++++++++++Checksum Error!++++++++++++++++++++++++++++++
## Error: environment overflow, "stdin" deleted
## Error: environment overflow, "stdout" deleted
## Error: environment overflow, "stderr" deleted
  
CPU : Marvell Feroceon (Rev 1)
## Error: environment overflow, "console" deleted
## Error: environment overflow, "mainlineLinux" deleted
## Error: environment overflow, "CASset" deleted
## Error: environment overflow, "enaMonExt" deleted
## Error: environment overflow, "enaCpuStream" deleted
## Error: environment overflow, "enaWrAllo" deleted
## Error: environment overflow, "pexMode" deleted
## Error: environment overflow, "disL2Cache" deleted
## Error: environment overflow, "setL2CacheWT" deleted
## Error: environment overflow, "disL2Prefetch" deleted
## Error: environment overflow, "enaICPref" deleted
## Error: environment overflow, "enaDCPref" deleted
## Error: environment overflow, "sata_dma_mode" deleted
## Error: environment overflow, "MALLOC_len" deleted
## Error: environment overflow, "ethprime" deleted
## Error: environment overflow, "netbsd_en" deleted
## Error: environment overflow, "vxworks_en" deleted
## Error: environment overflow, "bootargs_root" deleted
## Error: environment overflow, "bootargs_end" deleted
## Error: environment overflow, "image_name" deleted
## Error: environment overflow, "bootcmd" deleted
## Error: environment overflow, "standalone" deleted
## Error: environment overflow, "bootdelay" deleted
## Error: environment overflow, "disaMvPnp" deleted
## Error: environment overflow, "disaMvPnp" deleted
## Error: environment overflow, "ethaddr" deleted
## Error: environment overflow, "ethmtu" deleted
## Error: environment overflow, "eth1addr" deleted
## Error: environment overflow, "eth1mtu" deleted
## Error: environment overflow, "mvPhoneConfig" deleted
## Error: environment overflow, "mvNetConfig" deleted
## Error: environment overflow, "usb0Mode" deleted
## Error: environment overflow, "yuk_ethaddr" deleted
## Error: environment overflow, "nandEcc" deleted
## Error: environment overflow, "hddPowerCtrl" deleted
## Error: environment overflow, "netretry" deleted
## Error: environment overflow, "rcvrip" deleted
## Error: environment overflow, "loadaddr" deleted
## Error: environment overflow, "autoload" deleted
## Error: environment overflow, "enaAutoRecovery" deleted
  
Streaming disabled
Write allocate disabled
  
Module 0 is RGMII
Module 1 is TDM
  
USB 0: device mode
PEX 0: interface detected no Link.
Net:   ## Error: environment overflow, "ethact" deleted
egiga0, egiga1## Error: environment overflow, "ethact" deleted
  
USB:   scanning bus for devices... 1 USB Device(s) found
       scanning bus for storage devices... 0 Storage Device(s) found
Aquiring an IP address using DHCP...
## Error: environment overflow, "ethact" deleted
egiga0 no link
## Error: environment overflow, "ethact" deleted
egiga1 no link
## Error: environment overflow, "ethact" deleted
*** ERROR: `ethaddr' not set
## Error: environment overflow, "ethact" deleted
egiga1 no link
## Error: environment overflow, "ethact" deleted
egiga0 no link
## Error: environment overflow, "ethact" deleted
## Error: environment overflow, "ethact" deleted
egiga1 no link
## Error: environment overflow, "ethact" deleted
egiga0 no link
## Error: environment overflow, "ethact" deleted
*** ERROR: `eth1addr' not set
## Error: environment overflow, "ethact" deleted
egiga0 no link
## Error: environment overflow, "ethact" deleted
egiga1 no link
## Error: environment overflow, "ethact" deleted
## Error: environment overflow, "ethact" deleted
egiga0 no link
## Error: environment overflow, "ethact" deleted
egiga1 no link
## Error: environment overflow, "ethact" deleted
*** ERROR: `ethaddr' not set
## Error: environment overflow, "ethact" deleted
egiga1 no link
## Error: environment overflow, "ethact" deleted
egiga0 no link
## Error: environment overflow, "ethact" deleted
Failed to retreive an IP address assuming default (<NULL>)!
Starting the Recovery process to retreive the file...
## Error: environment overflow, "ethact" deleted
egiga1 no link
## Error: environment overflow, "ethact" deleted
egiga0 no link
## Error: environment overflow, "ethact" deleted
*** ERROR: `eth1addr' not set
## Error: environment overflow, "ethact" deleted
egiga0 no link
## Error: environment overflow, "ethact" deleted
egiga1 no link
## Error: environment overflow, "ethact" deleted
Failed
Power Button is pressed!
MPP Sel: 00000530, Data IN Enable: 00020058, Data In Polarity: 00000040, Data In: 00000010
Power Button is released!
MAC: 00:01:B8:4A:48:0B, IP: 10.74.72.11
## Error: environment overflow, "ethaddr" deleted
## Error: environment overflow, "ipaddr" deleted
## Error: environment overflow, "serverip" deleted
## Error: environment overflow, "netmask" deleted
## Error: environment overflow, "image_name" deleted
## Error: environment overflow, "console" deleted
## Error: environment overflow, "bootargs_root" deleted
## Error: environment overflow, "rootpath" deleted
## Error: environment overflow, "ethact" deleted
egiga0 no link
## Error: environment overflow, "ethact" deleted
egiga1 no link
## Error: environment overflow, "ethact" deleted
*** ERROR: `serverip' not set
## Error: environment overflow, "bootargs" deleted
## Booting image at 00800000 ...
Bad Magic Number

U-Boot 2017.07-tld-1 (Sep 05 2017 - 00:38:05 -0700)
Netgear Stora MS2110

SoC:   Kirkwood 88F6281_A0
DRAM:  128 MiB
WARNING: Caches not enabled
NAND:  256 MiB
*** Warning - bad CRC, using default environment

In:    serial
Out:   serial
Err:   serial
Net:   egiga0
PHY reset timed out
88E1116 Initialized on egiga0
Hit any key to stop autoboot:  0 
starting USB...
USB0:   USB EHCI 1.00
scanning bus 0 for devices... 2 USB Device(s) found
       scanning usb for storage devices... 
Use USB retry period from the environment: 15 second(s)
1 Storage Device(s) found

Reset IDE: ide_preinit failed

Partition Map for USB device 0  --   Partition Type: DOS

Part	Start Sector	Num Sectors	UUID		Type
  1	2048      	7829504   	135e42c5-01	83

## Unknown partition table type 0

## Unknown partition table type 0

## Unknown partition table type 0

## Unknown partition table type 0

## Unknown partition table type 0

## Unknown partition table type 0
loading envs from usb 0 ...
** File not found /boot/uEnv.txt **

no IDE devices available
running scan_disk ...
Scan device usb
device usb 0:1
1 bytes read in 692 ms (0 Bytes/s)
Found bootable drive on usb 0
loading uImage ...
6235659 bytes read in 1155 ms (5.1 MiB/s)
loading uInitrd ...
EHCI timed out on TD - token=0xce008d80
EHCI timed out on TD - token=0xe008d80
5791271 bytes read in 12554 ms (450.2 KiB/s)
loading DTB /boot/dts/kirkwood-netgear_stora_ms2000 ...
** File not found /boot/dts/kirkwood-netgear_stora_ms2000 **
## Booting kernel from Legacy Image at 00800000 ...
   Image Name:   Linux-6.5.7-kirkwood-tld-1
   Created:      2025-02-09  18:02:18 UTC
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    6235595 Bytes = 5.9 MiB
   Load Address: 00008000
   Entry Point:  00008000
   Verifying Checksum ... OK
## Loading init Ramdisk from Legacy Image at 01100000 ...
   Image Name:   initramfs-6.5.7-kirkwood-tld-1
   Created:      2023-10-31  22:53:55 UTC
   Image Type:   ARM Linux RAMDisk Image (gzip compressed)
   Data Size:    5791207 Bytes = 5.5 MiB
   Load Address: 00000000
   Entry Point:  00000000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
   Loading Ramdisk to 03a7a000, end 03fffde7 ... OK

Starting kernel ...

[    0.000000][    T0] Booting Linux on physical CPU 0x0
[    0.000000][    T0] Linux version 6.5.7-kirkwood-tld-1 (root@tldDebian) (gcc (Debian 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #2 PREEMPT Wed Oct 18 21:14:11 PDT 2023
[    0.000000][    T0] CPU: Feroceon 88FR131 [56251311] revision 1 (ARMv5TE), cr=0005397f
[    0.000000][    T0] CPU: VIVT data cache, VIVT instruction cache
[    0.000000][    T0] OF: fdt: Machine model: NETGEAR MS2000 / MS2110 aka Stora
[    0.000000][    T0] Memory policy: Data cache writeback
[    0.000000][    T0] Zone ranges:
[    0.000000][    T0]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000][    T0] Movable zone start for each node
[    0.000000][    T0] Early memory node ranges
[    0.000000][    T0]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000][    T0] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000][    T0] Kernel command line: console=ttyS0,115200 root=LABEL=rootfs rootdelay=10 mtdparts=orion_nand:1m(uboot),4m@1m(kernel),251m@5m(rootfs) rw
[    0.000000][    T0] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000][    T0] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000][    T0] Built 1 zonelists, mobility grouping on.  Total pages: 32480
[    0.000000][    T0] mem auto-init: stack:off, heap alloc:on, heap free:off
[    0.000000][    T0] Memory: 102520K/131072K available (12288K kernel code, 1755K rwdata, 5416K rodata, 1024K init, 301K bss, 28552K reserved, 0K cma-reserved)
[    0.000000][    T0] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000][    T0] trace event string verifier disabled
[    0.000000][    T0] rcu: Preemptible hierarchical RCU implementation.
[    0.000000][    T0] 	Trampoline variant of Tasks RCU enabled.
[    0.000000][    T0] 	Tracing variant of Tasks RCU enabled.
[    0.000000][    T0] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000][    T0] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000][    T0] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000][    T0] clocksource: orion_clocksource: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 9556302233 ns
[    0.000002][    T0] sched_clock: 32 bits at 200MHz, resolution 5ns, wraps every 10737418237ns
[    0.000060][    T0] Switching to timer-based delay loop, resolution 5ns
[    0.000793][    T0] Console: colour dummy device 80x30
[    0.000884][    T0] Calibrating delay loop (skipped), value calculated using timer frequency.. 400.00 BogoMIPS (lpj=2000000)
[    0.000922][    T0] CPU: Testing write buffer coherency: ok
[    0.001088][    T0] pid_max: default: 32768 minimum: 301
[    0.011737][    T0] LSM: initializing lsm=capability,integrity
[    0.014622][    T0] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.014668][    T0] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.030052][    T1] RCU Tasks: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1.
[    0.030592][    T1] RCU Tasks Trace: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1.
[    0.031209][    T1] Setting up static identity map for 0x100000 - 0x100058
[    0.031626][    T1] mvebu-soc-id: MVEBU SoC ID=0x6281, Rev=0x2
[    0.032241][    T1] rcu: Hierarchical SRCU implementation.
[    0.032263][    T1] rcu: 	Max phase no-delay instances is 1000.
[    0.035928][    T1] devtmpfs: initialized
[    0.048466][    T1] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.048523][    T1] futex hash table entries: 256 (order: -1, 3072 bytes, linear)
[    0.052086][    T1] prandom: seed boundary self test passed
[    0.057209][    T1] prandom: 100 self tests passed
[    0.057228][    T1] pinctrl core: initialized pinctrl subsystem
[    0.062837][    T1] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.064010][    T1] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.070582][    T1] audit: initializing netlink subsys (disabled)
[    0.073332][    T1] thermal_sys: Registered thermal governor 'step_wise'
[    0.073544][   T19] audit: type=2000 audit(0.070:1): state=initialized audit_enabled=0 res=1
[    0.073609][    T1] cpuidle: using governor ladder
[    0.073711][    T1] cpuidle: using governor menu
[    0.074534][    T1] Feroceon L2: Enabling L2
[    0.074582][    T1] Feroceon L2: Cache support initialised.
[    0.087568][    T1] No ATAGs?
[    0.450081][    T1] raid6: int32x8  gen()    91 MB/s
[    0.790075][    T1] raid6: int32x4  gen()    88 MB/s
[    1.130114][    T1] raid6: int32x2  gen()   113 MB/s
[    1.470075][    T1] raid6: int32x1  gen()    82 MB/s
[    1.470092][    T1] raid6: using algorithm int32x2 gen() 113 MB/s
[    1.810079][    T1] raid6: .... xor() 72 MB/s, rmw enabled
[    1.810096][    T1] raid6: using intx1 recovery algorithm
[    1.812175][    T1] SCSI subsystem initialized
[    1.813150][    T1] usbcore: registered new interface driver usbfs
[    1.813285][    T1] usbcore: registered new interface driver hub
[    1.813407][    T1] usbcore: registered new device driver usb
[    1.813839][    T1] pps_core: LinuxPPS API ver. 1 registered
[    1.813851][    T1] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    1.813891][    T1] PTP clock support registered
[    1.817288][    T1] vgaarb: loaded
[    1.830883][    T1] clocksource: Switched to clocksource orion_clocksource
[    1.842499][    T1] VFS: Disk quotas dquot_6.6.0
[    1.843025][    T1] VFS: Dquot-cache hash table entries: 1024 (order 0, 4096 bytes)
[    1.882184][    T1] NET: Registered PF_INET protocol family
[    1.882557][    T1] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    1.884939][    T1] tcp_listen_portaddr_hash hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    1.885234][    T1] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    1.885271][    T1] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    1.885312][    T1] TCP bind hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    1.885353][    T1] TCP: Hash tables configured (established 1024 bind 1024)
[    1.886203][    T1] MPTCP token hash table entries: 512 (order: 0, 6144 bytes, linear)
[    1.886499][    T1] UDP hash table entries: 256 (order: 0, 4096 bytes, linear)
[    1.886542][    T1] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear)
[    1.887609][    T1] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    1.892053][    T1] RPC: Registered named UNIX socket transport module.
[    1.892071][    T1] RPC: Registered udp transport module.
[    1.892079][    T1] RPC: Registered tcp transport module.
[    1.892086][    T1] RPC: Registered tcp-with-tls transport module.
[    1.892094][    T1] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    1.892121][    T1] PCI: CLS 0 bytes, default 32
[    1.901503][   T32] Trying to unpack rootfs image as initramfs...
[    3.086787][   T32] Freeing initrd memory: 5656K
[    4.299770][    T1] Initialise system trusted keyrings
[    4.299902][    T1] Key type blacklist registered
[    4.301842][    T1] workingset: timestamp_bits=14 max_order=15 bucket_order=1
[    4.302072][    T1] zbud: loaded
[    4.325155][    T1] NFS: Registering the id_resolver key type
[    4.325220][    T1] Key type id_resolver registered
[    4.325233][    T1] Key type id_legacy registered
[    4.325470][    T1] nfs4filelayout_init: NFSv4 File Layout Driver Registering...
[    4.325497][    T1] nfs4flexfilelayout_init: NFSv4 Flexfile Layout Driver Registering...
[    4.327414][    T1] jffs2: version 2.2. (NAND) (SUMMARY)  © 2001-2006 Red Hat, Inc.
[    4.328502][    T1] fuse: init (API version 7.38)
[    4.330277][    T1] orangefs_debugfs_init: called with debug mask: :none: :0:
[    4.330732][    T1] orangefs_init: module version upstream loaded
[    4.331262][    T1] SGI XFS with ACLs, security attributes, realtime, scrub, quota, no debug enabled
[    4.585844][    T1] xor: measuring software checksum speed
[    4.596630][    T1]    arm4regs        :   917 MB/sec
[    4.614356][    T1]    8regs           :   556 MB/sec
[    4.626846][    T1]    32regs          :   789 MB/sec
[    4.626858][    T1] xor: using function: arm4regs (917 MB/sec)
[    4.626878][    T1] async_tx: api initialized (async)
[    4.626898][    T1] Key type asymmetric registered
[    4.626908][    T1] Asymmetric key parser 'x509' registered
[    4.690376][    T1] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 246)
[    4.691038][    T1] io scheduler bfq registered
[    4.919167][    T1] kirkwood-pinctrl f1010000.pin-controller: registered pinctrl driver
[    4.921642][    T1] gpio gpiochip0: Static allocation of GPIO base is deprecated, use dynamic allocation.
[    4.923272][    T1] gpio gpiochip1: Static allocation of GPIO base is deprecated, use dynamic allocation.
[    4.924514][    T1] mvebu-pcie mbus@f1000000:pcie@82000000: host bridge /mbus@f1000000/pcie@82000000 ranges:
[    4.924615][    T1] mvebu-pcie mbus@f1000000:pcie@82000000:      MEM 0x00f1040000..0x00f1041fff -> 0x0000040000
[    4.924670][    T1] mvebu-pcie mbus@f1000000:pcie@82000000:      MEM 0xffffffffffffffff..0x00fffffffe -> 0x0100000000
[    4.924706][    T1] mvebu-pcie mbus@f1000000:pcie@82000000:       IO 0xffffffffffffffff..0x00fffffffe -> 0x0100000000
[    4.925783][    T1] mvebu-pcie mbus@f1000000:pcie@82000000: PCI host bridge to bus 0000:00
[    4.925809][    T1] pci_bus 0000:00: root bus resource [bus 00-ff]
[    4.925834][    T1] pci_bus 0000:00: root bus resource [mem 0xf1040000-0xf1041fff] (bus address [0x00040000-0x00041fff])
[    4.925854][    T1] pci_bus 0000:00: root bus resource [mem 0xe0000000-0xefffffff]
[    4.925872][    T1] pci_bus 0000:00: root bus resource [io  0x1000-0xeffff]
[    4.926013][    T1] pci 0000:00:01.0: [11ab:6281] type 01 class 0x060400
[    4.928126][    T1] PCI: bus0: Fast back to back transfers disabled
[    4.928161][    T1] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    4.928562][    T1] PCI: bus1: Fast back to back transfers enabled
[    4.928589][    T1] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    4.928641][    T1] pci 0000:00:01.0: PCI bridge to [bus 01]
[    4.929949][    T1] mv_xor f1060800.xor: Marvell shared XOR driver
[    4.994098][    T1] mv_xor f1060800.xor: Marvell XOR (Registers Mode): ( xor cpy intr )
[    4.999860][    T1] mv_xor f1060900.xor: Marvell shared XOR driver
[    5.064099][    T1] mv_xor f1060900.xor: Marvell XOR (Registers Mode): ( xor cpy intr )
[    5.070224][    T1] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    5.073685][    T1] printk: console [ttyS0] disabled
[    5.074506][    T1] f1012000.serial: ttyS0 at MMIO 0xf1012000 (irq = 28, base_baud = 12500000) is a 16550A
[    5.074587][    T1] printk: console [ttyS0] enabled
[    6.077123][    T1] loop: module loaded
[    6.082363][    T1] sata_mv f1080000.sata: slots 32 ports 2
[    6.094068][    T1] scsi host0: sata_mv
[    6.099903][    T1] scsi host1: sata_mv
[    6.104443][    T1] ata1: SATA max UDMA/133 irq 29
[    6.109280][    T1] ata2: SATA max UDMA/133 irq 29
[    6.115912][    T1] nand: device found, Manufacturer ID: 0xec, Chip ID: 0xda
[    6.123064][    T1] nand: Samsung NAND 256MiB 3,3V 8-bit
[    6.128409][    T1] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    6.136779][    T1] Scanning device for bad blocks
[    6.328820][    T1] Bad eraseblock 1736 at 0x00000d900000
[    6.367953][    T1] 3 cmdlinepart partitions found on MTD device orion_nand
[    6.375013][    T1] Creating 3 MTD partitions on "orion_nand":
[    6.380944][    T1] 0x000000000000-0x000000100000 : "uboot"
[    6.387643][    T1] 0x000000100000-0x000000500000 : "kernel"
[    6.394351][    T1] 0x000000500000-0x000010000000 : "rootfs"
[    6.403487][    T1] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information.
[    6.412159][    T1] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
[    6.428241][    T1] [Firmware Warn]: /ocp@f1000000/mdio-bus@72004/ethernet-phy@8: Whitelisted compatible string. Please remove
[    6.444963][   T53] ata1: SATA link down (SStatus 0 SControl F300)
[    6.474235][    T1] mv643xx_eth: MV-643xx 10/100/1000 ethernet driver version 1.4
[    6.802637][   T55] ata2: SATA link down (SStatus 0 SControl F300)
[    7.242515][    T1] mv643xx_eth_port mv643xx_eth_port.0 eth0: port 0 with MAC address 52:3b:20:9c:11:51
[    7.252845][    T1] orion-ehci f1050000.ehci: EHCI Host Controller
[    7.259121][    T1] orion-ehci f1050000.ehci: new USB bus registered, assigned bus number 1
[    7.267882][    T1] orion-ehci f1050000.ehci: irq 32, io mem 0xf1050000
[    7.300925][    T1] orion-ehci f1050000.ehci: USB 2.0 started, EHCI 1.00
[    7.308166][    T1] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.05
[    7.317229][    T1] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    7.325223][    T1] usb usb1: Product: EHCI Host Controller
[    7.330839][    T1] usb usb1: Manufacturer: Linux 6.5.7-kirkwood-tld-1 ehci_hcd
[    7.338214][    T1] usb usb1: SerialNumber: f1050000.ehci
[    7.344938][    T1] hub 1-0:1.0: USB hub found
[    7.349475][    T1] hub 1-0:1.0: 1 port detected
[    7.355482][    T1] usbcore: registered new interface driver usb-storage
[    7.363029][    T1] mousedev: PS/2 mouse device common for all mice
[    7.640931][   T50] usb 1-1: new high-speed USB device number 2 using orion-ehci
[    7.842013][   T50] usb 1-1: New USB device found, idVendor=18a5, idProduct=0302, bcdDevice= 1.00
[    7.851001][   T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[    7.858918][   T50] usb 1-1: Product: STORE N GO                    
[    7.865340][   T50] usb 1-1: Manufacturer: Verbatim                      
[    7.872214][   T50] usb 1-1: SerialNumber: 10J223000000411D
[    7.879066][   T50] usb-storage 1-1:1.0: USB Mass Storage device detected
[    7.887147][   T50] scsi host2: usb-storage 1-1:1.0
[    8.400938][    T1] rtc-mv f1010300.rtc: internal RTC not ticking
[    8.407475][    T1] i2c_dev: i2c /dev entries driver
[    8.417108][    T1] rtc-pcf8563 0-0051: registered as rtc0
[    8.424006][    T1] rtc-pcf8563 0-0051: setting system clock to 2025-02-10T18:19:48 UTC (1739211588)
[    8.435932][    T1] device-mapper: uevent: version 1.0.3
[    8.442106][    T1] device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@redhat.com
[    8.452125][    T1] device-mapper: multipath round-robin: version 1.2.0 loaded
[    8.459402][    T1] device-mapper: multipath queue-length: version 0.2.0 loaded
[    8.466850][    T1] device-mapper: multipath service-time: version 0.3.0 loaded
[    8.474335][    T1] device-mapper: dm-log-userspace: version 1.3.0 loaded
[    8.484819][    T1] ledtrig-cpu: registered to indicate activity on CPUs
[    8.491871][    T1] hid: raw HID events driver (C) Jiri Kosina
[    8.498322][    T1] drop_monitor: Initializing network drop monitor service
[    8.507301][    T1] NET: Registered PF_INET6 protocol family
[    8.515675][    T1] Segment Routing with IPv6
[    8.520082][    T1] RPL Segment Routing with IPv6
[    8.525047][    T1] In-situ OAM (IOAM) with IPv6
[    8.529916][    T1] NET: Registered PF_PACKET protocol family
[    8.536205][    T1] Key type dns_resolver registered
[    8.564766][    T1] registered taskstats version 1
[    8.569897][    T1] Loading compiled-in X.509 certificates
[    8.602396][    T1] Key type .fscrypt registered
[    8.607065][    T1] Key type fscrypt-provisioning registered
[    8.620813][    T1] Key type big_key registered
[    8.682101][    T1] Key type encrypted registered
[    8.818820][  T107] "cryptomgr_test" (107) uses obsolete ecb(arc4) skcipher
[    8.961990][   T18] scsi 2:0:0:0: Direct-Access     Verbatim STORE N GO       1.00 PQ: 0 ANSI: 2
[    8.983446][   T32] sd 2:0:0:0: [sda] 7831552 512-byte logical blocks: (4.01 GB/3.73 GiB)
[    9.001680][   T32] sd 2:0:0:0: [sda] Write Protect is off
[    9.020944][   T32] sd 2:0:0:0: [sda] No Caching mode page found
[    9.027008][   T32] sd 2:0:0:0: [sda] Assuming drive cache: write through
[    9.047460][   T32]  sda: sda1
[    9.061275][   T32] sd 2:0:0:0: [sda] Attached SCSI removable disk
[   11.633319][    T1] clk: Disabling unused clocks
[   11.642627][    T1] Freeing unused kernel image (initmem) memory: 1024K
[   11.661987][    T1] Checked W+X mappings: passed, no W+X pages found
[   11.668410][    T1] Run /init as init process
Loading, please wait...
Starting systemd-udevd version 252.17-1~deb12u1
[   13.437877][  T157] usbcore: registered new interface driver uas
Begin: Loading essential drivers ... done.
Begin: Running /scripts/init-premount ... done.
Begin: Mounting root file system ... Begin: Running /scripts/local-top ... done.
Begin: Running /scripts/local-premount ... done.
Begin: Waiting for root file system ... Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
Begin: Running /scripts/local-block ... done.
done.
Gave up waiting for root file system device.  Common problems:
 - Boot args (cat /proc/cmdline)
   - Check rootdelay= (did the system wait long enough?)
 - Missing modules (cat /proc/modules; ls /dev)
ALERT!  LABEL=rootfs does not exist.  Dropping to a shell!


BusyBox v1.35.0 (Debian 1:1.35.0-4+b3) built-in shell (ash)
Enter 'help' for a list of built-in commands.

(initramfs) [   75.930948][    C0] random: crng init done

sudo ./kwboot -t -B 115200 /dev/ttyAMA0 -b uboot.2023.04-tld-1.nsa325.kwb -p
kwboot version 2024.04-rc3-00001-g0861eab8ec-dirty
Detected kwbimage v0 with NAND boot signature
Patching image boot signature to UART
Sending boot message. Please reboot the target...\

./kwboot -t -B 115200 /dev/ttyUSB0 -b uboot.2017.07-tld-1.nsa325.mtd0.kwb  -p
kwboot version 2025.01-rc1-ge61ea9f2e5d2-dirty
Detected kwbimage v0 with NAND boot signature
Patching image boot signature to UART
Sending boot message. Please reboot the target.../

md5:
191129892f36f5e6538e86ffccd07fa9
sha256:
4f6eefbc570019b47f6db83a963876d6c213d221b59c07d6cdd874020f8830bd

uboot.2024.10-tld-1.dns325.kwb
uboot.2024.10-tld-1.dns325.environment
uboot.2024.10-tld-1.dns325.environment.img
uboot.2024.10-tld-1.dns325.boot.cmd
uboot.2024.10-tld-1.dns325.boot.scr

 # MTD device name	Device offset	Env. size	Flash sector size	Number of sectors 
/dev/mtd0 0xc0000 0x20000 0x20000

echo "/dev/mtd0 0xc0000 0x20000 0x20000" > /etc/fw_env.config

dev:    size   erasesize  name
mtd0: 00100000 00020000 "uboot"
. . .

nanddump --noecc --omitoob mtd0.dns325 /dev/mtd0

fw_printenv > current_envs.txt

dmesg | grep -i 'bad'

[    2.413231] Scanning device for bad blocks
[    2.417731] Bad eraseblock 3 at 0x000000060000

cd /tmp
tar xf uboot.2024.10-tld-1.dns325.bodhi.tar

flash_erase /dev/mtd0 0 4

Erase Total 4 Units 
Performing Flash Erase of length 131072 at offset 0x60000 done

nandwrite /dev/mtd0 uboot.2024.10-tld-1.dns325.kwb

Writing data to block 0 at offset 0x0 
Writing data to block 1 at offset 0x20000 
Writing data to block 2 at offset 0x40000 
Writing data to block 3 at offset 0x60000

flash_erase /dev/mtd0 0xc0000 1

Erase Total 1 Units
Performing Flash Erase of length 131072 at offset 0xc0000 done

nandwrite -s 786432 /dev/mtd0 /tmp/uboot.2024.10-tld-1.dns325.environment.img

Writing data to block 6 at offset 0xc0000

fw_setenv ethaddr 'xx:xx:xx:xx:xx:xx'

fw_printenv

U-Boot 2024.10-tld-1 (Apr 08 2025 - 13:52:33 -0700)
D-Link DNS-325

rescue:/mnt/tmp# flash_erase /dev/mtd0 0 4
Erase Total 4 Units
Performing Flash Erase of length 131072 at offset 0x60000 done
rescue:/mnt/tmp# nandwrite /dev/mtd0 uboot.2017.07-tld-1.pogo_e02.mtd0.kwb
Writing data to block 0 at offset 0x0

fw_printenv
ethact=egiga0
bootdelay=3
baudrate=115200
mainlineLinux=yes
console=ttyS0,115200
led_init=green blinking
led_exit=green off
led_error=orange blinking
mtdparts=mtdparts=orion_nand:1M(u-boot),4M(uImage),32M(rootfs),-(data)
mtdids=nand0=orion_nand
partition=nand0,2
stdin=serial
stdout=serial
stderr=serial
rescue_set_bootargs=setenv bootargs console=$console ubi.mtd=2 root=ubi0:rootfs ro rootfstype=ubifs $mtdparts $rescue_custom_params
rescue_bootcmd=if test $rescue_installed -eq 1; then run rescue_set_bootargs; nand read.e 0x800000 0x100000 0x400000; bootm 0x800000; else run pogo_bootcmd; fi
pogo_bootcmd=if fsload uboot-original-mtd0.kwb; then go 0x800200; fi
force_rescue=0
force_rescue_bootcmd=if test $force_rescue -eq 1 || ext2load usb 0:1 0x1700000 /rescueme 1 || fatload usb 0:1 0x1700000 /rescueme.txt 1; then run rescue_bootcmd; fi
ubifs_mtd=3
ubifs_set_bootargs=setenv bootargs console=$console ubi.mtd=$ubifs_mtd root=ubi0:rootfs rootfstype=ubifs $mtdparts $ubifs_custom_params
ubifs_bootcmd=run ubifs_set_bootargs; if ubi part data && ubifsmount rootfs && ubifsload 0x800000 /boot/uImage && ubifsload 0x1100000 /boot/uInitrd; then bootm 0x800000 0x1100000; fi
usb_scan=usb_scan_done=0;for scan in $usb_scan_list; do run usb_scan_$scan; if test $usb_scan_done -eq 0 && ext2load usb $usb 0x800000 /boot/uImage 1; then usb_scan_done=1; echo "Found bootable drive on usb $usb"; setenv usb_device $usb; setenv usb_root /dev/$dev; fi; done
usb_scan_3=usb=2:1 dev=sdc1
usb_scan_4=usb=3:1 dev=sdd1
usb_init=run usb_scan
usb_device=0:1
usb_rootdelay=10
usb_set_bootargs=setenv bootargs console=$console root=$usb_root rootdelay=$usb_rootdelay rootfstype=$usb_rootfstype $mtdparts $usb_custom_params
usb_bootcmd=run usb_init; run usb_set_bootargs; run usb_boot
usb_boot=mw 0x800000 0 1; ext2load usb $usb_device 0x800000 /boot/uImage; if ext2load usb $usb_device 0x1100000 /boot/uInitrd; then bootm 0x800000 0x1100000; else bootm 0x800000; fi
bootcmd=usb start; run force_rescue_bootcmd; run ubifs_bootcmd; run usb_bootcmd; usb stop; run rescue_bootcmd; run pogo_bootcmd; reset
ethaddr=00:25:31:04:85:C5
arcNumber=2097
usb_rootfstype=ext3
if_netconsole=ping $serverip
start_netconsole=setenv ncip $serverip; setenv bootdelay 10; setenv stdin nc; setenv stdout nc; setenv stderr nc; version;
preboot=run if_netconsole start_netconsole
usb_scan_list=1 2 3 4
usb_scan_2=usb=1:1 dev=sdb1
usb_custom_params=zswap.enabled=1
rescue_installed=1
serverip=192.168.65.255
usb_scan_1=usb=0:2=dev=sda1

$ sudo kwboot -t -B 115200 /dev/ttyUSB0 -b ~/Downloads/u-boot.kwb 
kwboot version 2024.01
Detected kwbimage v0 with NAND boot signature
Patching image boot signature to UART
Sending boot message. Please reboot the target...|