=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2026.07.10 17:08:44 =~=~=~=~=~=~=~=~=~=~=~= Boot- Scramble value: 0x00000056 .65 package [CH= 0 Calibration done] [CH= 1 Calibration done] [CH= 2 Calibration done] [CH= 3 Calibration done] # Init_DRAM take 310 ms. Dram size:2 Start Pmain EMMC boot load preloader2 image ... SrcOffset:0x00010000 DstAddr:0x409fffb0 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 CID:0xbac9a7ad :0x5206c622 :0x4a544434 :0x15010041 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 plain size:0x0001a8f0 LZHS size:0x0000f2fc image size:0x0000f450 LZHS checksum:0x00000080 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS dec begin LZHS ok load preloader2 image ok u4BSSLimit:0x0001f450 MsdcAccuVect(CMD):0x00000100 LZHS addr:0x40100040 plain size:0x0015e850 LZHS size:0x00068e91 LZHS checksum:0x000000cb MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS begin LZHS ok loader ver check ... [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- [preloader2_main.c:150] psVersion = 0x40e5e822 image version(header addr is 0x40cfffa0): 0.0.0 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- record version: 0.0.0 comparing loader ver with record return 0 loader ver check done Boot Start Lmain [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 MT5887 Boot Loader v0.9 setup_usb_host: Setting up USB HOST controller... mt53xx_u3phy_ports_enable: mt53xx_u3phy_ports_enable u2p:3, u3p:1 mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(0) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(1) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(2) setup_usb_host: phy power-on done. xhci_init: regbase: 0x100c4000 xhci_init: opreg: 0x100c4020 xhci_init: caplen: 0x20 xhci_init: rtsoff: 0x600 xhci_init: dboff: 0x800 xhci_init: hciversion: 1.16 xhci_init: context size: 32 xhci_init: pagesize: 0x1000 xhci_init: xhci->dma_buffer = 0x41d10000 xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reset: Resetting controller... ok. xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reinit: [yl]xhci->ev_ring_table[0].seg_base_lo:0x41d00100, seg_base_hi:0x0, seg_size:0x8 xhci_reinit: [yl]xhci->hcrreg->intrrs[0].erstsz:0x1, erstba_lo :0x41d001c0, erstba_hi:0x0 xHCI: root hub init done(ports:4) dev 0x41e00340 MUSB3_init OK ++ USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. [MSDC] enter into HS400 Mode, max dtr 200000000 [MSDC] Saved info: flag 0xaabbccdd,speedmode 5. [MSDC] Cur info: flag 0xaabbccdd, speedmode 5. [MSDC] The information is match, Alrady run autok before, ignore this time [MSDC] Load Param: [MSDC] SpeedMode : 0x00000005. [MSDC] K_IOCON : 0x02000008. [MSDC] K_PAD_TUNE0 : 0x003f2000. [MSDC] K_PAD_TUNE1 : 0x00280000. [MSDC] K_PATCH_BIT0 : 0x403c0047. [MSDC] K_PATCH_BIT1 : 0xfffe4640. [MSDC] K_PATCH_BIT2 : 0x0408180f. [MSDC] K_EMMC50_CFG0 : 0x00288832. [MSDC] K_DAT_RD_DLY0 : 0x01010101. [MSDC] K_DAT_RD_DLY1 : 0x01010101. [MSDC] K_DAT_RD_DLY2 : 0x00000000. [MSDC] K_DAT_RD_DLY3 : 0x00000000. [MSDC] K_EMMC50_PAD_DS_TUNE : 0x00014029. [MSDC] K_EMMC50_PAD_CMD_TUNE : 0x00000000. [MSDC] K_EMMC50_PAD_DAT01_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT23_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT45_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT67_TUNE: 0x00000000. [MSDC] check autok done. speed mode 1 ,clock 25 [MSDC] Set Bus Clock as HS0(MHz) Success!,src 0 ,mode 0, div 16 [MSDC] Set Bus Clock as HS50(MHz) Success!,src 3 ,mode 0, div 2 [MSDC] Set Bus Clock as HS400(MHz) Success!,src 3 ,mode 3, div 0 [MSDC] Set driving: CLK 7 ,CMD 7, DAT 9 [MSDC] Set device to HS400 mode successful! [MSDC] Loader apply autok param done. [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- Support network!. 1st MAC in EEP is valid (68:07:0a:4a:66:a5) 1st : (68:07:0a:4a:66:a5) 2nd : (68:07:0a:4a:66:a5) POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress Boot reason: A/C power on!!Servoadc Channel1 frist update!!!, value is 1023 Servoadc Channel1 finish update!!!, value is 1023 [OBR]u4ServoADCChannelValue: 1023 [OBR-AC] nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]u4ServoADCChannelValue: 1023 [TCON-RESET]nothing happened. LOADER_MtkEnvInitFunc: PDWNC_ReadWakeupReason = 6 LOADER_MtkEnvInitFunc: AC_POWER, set ui4_EnableQHBEepAddr to 0 LOADER_MtkEnvInitFunc: [QHB] Set QHB flag when AC on & Previous system state is off. LOADER_MtkEnvInitFunc : ui4_EmmcFirstBootEepAddr = 0x97a LOADER_MtkEnvInitFunc: [QHB] u1EmmcFirstBoot = 0x1LOADER_MtkEnvInitFunc: [QHB] It is not EmmcFirstBoot, do no cation with QHB. LOADER_MtkEnvInitFunc: set ui1_reboot_event_detail to 0 LOADER_MtkEnvInitFunc: ui1_reboot_event_detail = 0 (read back) Remove Quiet Boot misc control in eeprom when Watchdog reason. [IRRX_InitMtkIrRegSetup]SetRC5WakeupKey - Temporary comment IR DATA register : 0x 0 T8032 init A/C on case loader stage... Load T8032 FW (addr: 0x40e20c88, size: 28410)success!! T8032 FW version: 7 T8032 change to loader stage... LDR_FlashCopy 0x4000f010 0x88680 0x80 POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =128 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 128 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress [OBR]u4ServoADCChannelValue: 1023 [OBR-AC] nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]u4ServoADCChannelValue: 1023 [TCON-RESET]nothing happened. CC_PHP_SUPPORT_LOADER_CONSOLE_LOCK defined Uart Rx disabled [OBR]Is OBR triggered?. NVM_FSR_RECOVERY_MODE_ADDRESS=0 LOADER_MtkEnvInitFunc: ui4_fullstandbyctrlEepAddr = 0xa16 LOADER_MtkEnvInitFunc: ui1_tpvfullstandbyctrl = 1 [_LdrDetermineEnterStandby 419] PDWNC_WAKE_UP_REASON_AC_POWER enter FULL STANDBY Servoadc Channel1 frist update!!!, value is 1023 Servoadc Channel1 finish update!!!, value is 1023 [IRRX_InitMtkIrRegSetup]SetRC5WakeupKey - Temporary comment Disable VGA wakeup support WOL _PDWNC_SetupEthernetWakeup(WOL):u4WOWLVal:0x1 _PDWNC_SetupEthernetWakeup(WOL)!! MAC register switch to arm _PDWNC_SetupEthernetWakeup(WOL) NIC Not Ready! get edid port: 1 sel u1EdidIdx: 1 get edid port: 2 sel u1EdidIdx: 0 get edid port: 3 sel u1EdidIdx: 0 get edid port: 4 sel u1EdidIdx: 0 ui4_RedLedBriEepAddr : 0x317b use NVM LEDdutyControl value u1RedLedBriValue : 45 Standby [PDWNC_MTK_SetupPowerDown 1076] ui4_CtnEepAddr = 0x980 [PDWNC_MTK_SetupPowerDown 1078] CTN = 65PUS8505/12 PDWNC_TPV_SetupWakeupSourceIR PDWNC_TPV_SetupWakeupSourceWOWLAN: u1Wowlan = 1 PDWNC_TPV_SetupWakeupSourceWOWLAN: uiSwitchOnWithchromecast = 1 PDWNC_TPV_SetupWakeupSourceWOWLAN : WOW_GPIO_DET = 1, WOBLE_GPIO_DET = 1 use NVM LEDdutyControl value PDWNC_TPV_SetupSilentReboot: ui1_silent_reboot = 0 PDWNC_TPV_SetupSilentReboot: no need to setup register time of silent reboot PDWNC_EnterPowerDown(200100,6) Boot- Scramble value: 0x00000056 .65 package [CH= 0 Calibration done] [CH= 1 Calibration done] [CH= 2 Calibration done] [CH= 3 Calibration done] # Init_DRAM take 298 ms. Dram size:2 Start Pmain EMMC boot load preloader2 image ... SrcOffset:0x00010000 DstAddr:0x409fffb0 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 CID:0xbac9a7ad :0x5206c622 :0x4a544434 :0x15010041 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 plain size:0x0001a8f0 LZHS size:0x0000f2fc image size:0x0000f450 LZHS checksum:0x00000080 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS dec begin LZHS ok load preloader2 image ok u4BSSLimit:0x0001f450 MsdcAccuVect(CMD):0x00000100 LZHS addr:0x40100040 plain size:0x0015e850 LZHS size:0x00068e91 LZHS checksum:0x000000cb MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS begin LZHS ok loader ver check ... [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- [preloader2_main.c:150] psVersion = 0x40e5e822 image version(header addr is 0x40cfffa0): 0.0.0 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- record version: 0.0.0 comparing loader ver with record return 0 loader ver check done Boot Start Lmain [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 MT5887 Boot Loader v0.9 setup_usb_host: Setting up USB HOST controller... mt53xx_u3phy_ports_enable: mt53xx_u3phy_ports_enable u2p:3, u3p:1 mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(0) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(1) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(2) setup_usb_host: phy power-on done. xhci_init: regbase: 0x100c4000 xhci_init: opreg: 0x100c4020 xhci_init: caplen: 0x20 xhci_init: rtsoff: 0x600 xhci_init: dboff: 0x800 xhci_init: hciversion: 1.16 xhci_init: context size: 32 xhci_init: pagesize: 0x1000 xhci_init: xhci->dma_buffer = 0x41d10000 xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reset: Resetting controller... ok. xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reinit: [yl]xhci->ev_ring_table[0].seg_base_lo:0x41d00100, seg_base_hi:0x0, seg_size:0x8 xhci_reinit: [yl]xhci->hcrreg->intrrs[0].erstsz:0x1, erstba_lo :0x41d001c0, erstba_hi:0x0 xHCI: root hub init done(ports:4) dev 0x41e00340 MUSB3_init OK ++ USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. [MSDC] enter into HS400 Mode, max dtr 200000000 [MSDC] Saved info: flag 0xaabbccdd,speedmode 5. [MSDC] Cur info: flag 0xaabbccdd, speedmode 5. [MSDC] The information is match, Alrady run autok before, ignore this time [MSDC] Load Param: [MSDC] SpeedMode : 0x00000005. [MSDC] K_IOCON : 0x02000008. [MSDC] K_PAD_TUNE0 : 0x003f2000. [MSDC] K_PAD_TUNE1 : 0x00280000. [MSDC] K_PATCH_BIT0 : 0x403c0047. [MSDC] K_PATCH_BIT1 : 0xfffe4640. [MSDC] K_PATCH_BIT2 : 0x0408180f. [MSDC] K_EMMC50_CFG0 : 0x00288832. [MSDC] K_DAT_RD_DLY0 : 0x01010101. [MSDC] K_DAT_RD_DLY1 : 0x01010101. [MSDC] K_DAT_RD_DLY2 : 0x00000000. [MSDC] K_DAT_RD_DLY3 : 0x00000000. [MSDC] K_EMMC50_PAD_DS_TUNE : 0x00014029. [MSDC] K_EMMC50_PAD_CMD_TUNE : 0x00000000. [MSDC] K_EMMC50_PAD_DAT01_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT23_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT45_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT67_TUNE: 0x00000000. [MSDC] check autok done. speed mode 1 ,clock 25 [MSDC] Set Bus Clock as HS0(MHz) Success!,src 0 ,mode 0, div 16 [MSDC] Set Bus Clock as HS50(MHz) Success!,src 3 ,mode 0, div 2 [MSDC] Set Bus Clock as HS400(MHz) Success!,src 3 ,mode 3, div 0 [MSDC] Set driving: CLK 7 ,CMD 7, DAT 9 [MSDC] Set device to HS400 mode successful! [MSDC] Loader apply autok param done. [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- Support network!. 1st MAC in EEP is valid (68:07:0a:4a:66:a5) 1st : (68:07:0a:4a:66:a5) 2nd : (68:07:0a:4a:66:a5) POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =128 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress Boot reason: A/C power on!!Servoadc Channel1 frist update!!!, value is 10 Servoadc Channel1 finish update!!!, value is 11 [OBR]u4ServoADCChannelValue: 12 [OBR-AC] nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]u4ServoADCChannelValue: 11 [TCON-RESET]nothing happened. LOADER_MtkEnvInitFunc: PDWNC_ReadWakeupReason = 6 LOADER_MtkEnvInitFunc: AC_POWER, set ui4_EnableQHBEepAddr to 0 LOADER_MtkEnvInitFunc: [QHB] Set QHB flag when AC on & Previous system state is off. LOADER_MtkEnvInitFunc : ui4_EmmcFirstBootEepAddr = 0x97a LOADER_MtkEnvInitFunc: [QHB] u1EmmcFirstBoot = 0x1LOADER_MtkEnvInitFunc: [QHB] It is not EmmcFirstBoot, do no cation with QHB. LOADER_MtkEnvInitFunc: set ui1_reboot_event_detail to 0 LOADER_MtkEnvInitFunc: ui1_reboot_event_detail = 0 (read back) Remove Quiet Boot misc control in eeprom when Watchdog reason. [IRRX_InitMtkIrRegSetup]SetRC5WakeupKey - Temporary comment IR DATA register : 0x 0 T8032 init A/C on case loader stage... Load T8032 FW (addr: 0x40e20c88, size: 28410)success!! T8032 FW version: 7 T8032 change to loader stage... LDR_FlashCopy 0x4000f010 0x88680 0x80 POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =128 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 128 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress [OBR]u4ServoADCChannelValue: 11 [OBR-AC] nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]u4ServoADCChannelValue: 11 [TCON-RESET]nothing happened. CC_PHP_SUPPORT_LOADER_CONSOLE_LOCK defined Uart Rx disabled [OBR]Is OBR triggered?. NVM_FSR_RECOVERY_MODE_ADDRESS=0 LOADER_MtkEnvInitFunc: ui4_fullstandbyctrlEepAddr = 0xa16 LOADER_MtkEnvInitFunc: ui1_tpvfullstandbyctrl = 1 [_LdrDetermineEnterStandby 419] PDWNC_WAKE_UP_REASON_AC_POWER enter FULL STANDBY Servoadc Channel1 frist update!!!, value is 10 Servoadc Channel1 finish update!!!, value is 10 [IRRX_InitMtkIrRegSetup]SetRC5WakeupKey - Temporary comment Disable VGA wakeup support WOL _PDWNC_SetupEthernetWakeup(WOL):u4WOWLVal:0x1 _PDWNC_SetupEthernetWakeup(WOL)!! MAC register switch to arm _PDWNC_SetupEthernetWakeup(WOL) NIC Not Ready! get edid port: 1 sel u1EdidIdx: 1 get edid port: 2 sel u1EdidIdx: 0 get edid port: 3 sel u1EdidIdx: 0 get edid port: 4 sel u1EdidIdx: 0 ui4_RedLedBriEepAddr : 0x317b use NVM LEDdutyControl value u1RedLedBriValue : 45 Standby [PDWNC_MTK_SetupPowerDown 1076] ui4_CtnEepAddr = 0x980 [PDWNC_MTK_SetupPowerDown 1078] CTN = 65PUS8505/12 PDWNC_TPV_SetupWakeupSourceIR PDWNC_TPV_SetupWakeupSourceWOWLAN: u1Wowlan = 1 PDWNC_TPV_SetupWakeupSourceWOWLAN: uiSwitchOnWithchromecast = 1 PDWNC_TPV_SetupWakeupSourceWOWLAN : WOW_GPIO_DET = 1, WOBLE_GPIO_DET = 1 use NVM LEDdutyControl value PDWNC_TPV_SetupSilentReboot: ui1_silent_reboot = 0 PDWNC_TPV_SetupSilentReboot: no need to setup register time of silent reboot PDWNC_EnterPowerDown(200100,6) SWITCH_T8032 0x00000000 DC WakeuBoot- DC wakeup Power ready check time : 96ms. Preloader T8032 ack ! Scramble value: 0x00000056 .65 package [CH= 0 Calibration done] [CH= 1 Calibration done] [CH= 2 Calibration done] [CH= 3 Calibration done] # Init_DRAM take 306 ms. Dram size:2 Start Pmain EMMC boot load preloader2 image ... SrcOffset:0x00010000 DstAddr:0x409fffb0 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 CID:0xbac9a7ad :0x5206c622 :0x4a544434 :0x15010041 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 plain size:0x0001a8f0 LZHS size:0x0000f2fc image size:0x0000f450 LZHS checksum:0x00000080 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS dec begin LZHS ok load preloader2 image ok u4BSSLimit:0x0001f450 MsdcAccuVect(CMD):0x00000100 LZHS addr:0x40100040 plain size:0x0015e850 LZHS size:0x00068e91 LZHS checksum:0x000000cb MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS begin LZHS ok loader ver check ... [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- [preloader2_main.c:150] psVersion = 0x40e5e822 image version(header addr is 0x40cfffa0): 0.0.0 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- record version: 0.0.0 comparing loader ver with record return 0 loader ver check done Boot Start Lmain [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 MT5887 Boot Loader v0.9 setup_usb_host: Setting up USB HOST controller... mt53xx_u3phy_ports_enable: mt53xx_u3phy_ports_enable u2p:3, u3p:1 mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(0) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(1) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(2) setup_usb_host: phy power-on done. xhci_init: regbase: 0x100c4000 xhci_init: opreg: 0x100c4020 xhci_init: caplen: 0x20 xhci_init: rtsoff: 0x600 xhci_init: dboff: 0x800 xhci_init: hciversion: 1.16 xhci_init: context size: 32 xhci_init: pagesize: 0x1000 xhci_init: xhci->dma_buffer = 0x41d10000 xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reset: Resetting controller... ok. xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reinit: [yl]xhci->ev_ring_table[0].seg_base_lo:0x41d00100, seg_base_hi:0x0, seg_size:0x8 xhci_reinit: [yl]xhci->hcrreg->intrrs[0].erstsz:0x1, erstba_lo :0x41d001c0, erstba_hi:0x0 xHCI: root hub init done(ports:4) dev 0x41e00340 MUSB3_init OK ++ USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. [MSDC] enter into HS400 Mode, max dtr 200000000 [MSDC] Saved info: flag 0xaabbccdd,speedmode 5. [MSDC] Cur info: flag 0xaabbccdd, speedmode 5. [MSDC] The information is match, Alrady run autok before, ignore this time [MSDC] Load Param: [MSDC] SpeedMode : 0x00000005. [MSDC] K_IOCON : 0x02000008. [MSDC] K_PAD_TUNE0 : 0x003f2000. [MSDC] K_PAD_TUNE1 : 0x00280000. [MSDC] K_PATCH_BIT0 : 0x403c0047. [MSDC] K_PATCH_BIT1 : 0xfffe4640. [MSDC] K_PATCH_BIT2 : 0x0408180f. [MSDC] K_EMMC50_CFG0 : 0x00288832. [MSDC] K_DAT_RD_DLY0 : 0x01010101. [MSDC] K_DAT_RD_DLY1 : 0x01010101. [MSDC] K_DAT_RD_DLY2 : 0x00000000. [MSDC] K_DAT_RD_DLY3 : 0x00000000. [MSDC] K_EMMC50_PAD_DS_TUNE : 0x00014029. [MSDC] K_EMMC50_PAD_CMD_TUNE : 0x00000000. [MSDC] K_EMMC50_PAD_DAT01_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT23_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT45_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT67_TUNE: 0x00000000. [MSDC] check autok done. speed mode 1 ,clock 25 [MSDC] Set Bus Clock as HS0(MHz) Success!,src 0 ,mode 0, div 16 [MSDC] Set Bus Clock as HS50(MHz) Success!,src 3 ,mode 0, div 2 [MSDC] Set Bus Clock as HS400(MHz) Success!,src 3 ,mode 3, div 0 [MSDC] Set driving: CLK 7 ,CMD 7, DAT 9 [MSDC] Set device to HS400 mode successful! [MSDC] Loader apply autok param done. [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- Support network!. 1st MAC in EEP is valid (68:07:0a:4a:66:a5) 1st : (68:07:0a:4a:66:a5) 2nd : (68:07:0a:4a:66:a5) POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =128 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress [OBR-nonAC]nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]nothing happened. LOADER_MtkEnvInitFunc: PDWNC_ReadWakeupReason = 3 LOADER_MtkEnvInitFunc: [2K17_gpio] IRRC/KEYPAD/CEC, set EEPROM_TPV_ENABLE_QHB_ADDRESS to 0 ui4_RedLedBriEepAddr : 0x317b use NVM LEDdutyControl value u1RedLedBriValue : 45 Remove Quiet Boot misc control in eeprom when Watchdog reason. [IRRX_InitMtkIrRegSetup]SetRC5WakeupKey - Temporary comment IR DATA register : 0x 0 T8032 change to loader stage... LDR_FlashCopy 0x4000f010 0x88680 0x80 POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress [OBR-nonAC]nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]nothing happened. CC_PHP_SUPPORT_LOADER_CONSOLE_LOCK defined Uart Rx disabled [OBR]Is OBR triggered?. NVM_FSR_RECOVERY_MODE_ADDRESS=0 [_LdrDetermineEnterStandby 432] not PDWNC_WAKE_UP_REASON_AC_POWER [UPG upgrade ~ not PDWNC_WAKE_UP_REASON_AC_POWER] u1SlicneUpgradeStatus = 0 PDWNC_Init GPIO_MtkPowerOnFunc: ui4_SilentRebootEepAddr = 0xa1c GPIO_MtkPowerOnFunc: ui4_EnableQHBEepAddr = 0xa10 GPIO_MtkPowerOnFunc: ui4_FullStandbyCtrEepAddr = 0xa16 GPIO_MtkPowerOnFunc: normal cold boot ui1_silent_reboot = 0, ui1_tpvEnableQHB = 0, uil_FullStandbyCtr = 1 GPIO_MtkPowerOnFunc: After check ui1_silent_reboot, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: not QUIET_HOT_BOOT [GPIO_MtkPowerOnFunc 2102] u1_factory_mode = 0 [GPIO_MtkPowerOnFunc 2121] ui4_CtnEepAddr = 0x980 [GPIO_MtkPowerOnFunc 2123] CTN = 65PUS8505/12 [GPIO_MtkPowerOnFunc 2153] start led sine wave blinking [GPIO_MtkPowerOnFunc 2165] Not PD9000 model, no need to set PDEL light switch FPGA-reset-pin:137 GPIO_MtkPowerOnFunc: efrcpowerGpio=256 GPIO_MtkPowerOnFunc: Power On FRC rDtvCfg.u1Flags4 = 0, PDWNC_ReadWakeupReason() = 3 GPIO_MtkPowerOnFunc: After FRC power, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: eResetfrcGpio is not available The init function of this module is NULL The init function of this module is NULL USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. ui4_CtnEepAddr = 0x980 CTN = 65PUS8505/12 u4BmpWidthTopBlack:848,u4BmpHeightTopBlack:422, u4BmpSizeTopBlack:1431424 u4BmpWidthMidBlack:848,u4BmpHeightMidBlack:196, u4BmpSizeMidBlack:664832 puDstAddress:0xc8400000 puBmpAddress:0x40defe40 u4ColorMode:0xe u4BmpWidth:848 u4BmpHeight:236 u4BmpSizePhilipsLogo:800512 u4DstAddressPhilipsLogo:0xc855d780 Display 0x40e5b5e0 background:0x00000000 Panel ID is 34. Panel ID 34 writing is done... vDrvResetVOPLLFlowFlag ###VbyOne VOPLLInit finsih######VbyOne VOPLLSet finsih###[SA7] _fgVopllUseDDDS = True [LVDS] VOPLL Initialize successful ! LDR_OsdDisplay(14, 0xc8400000, 848, 236) Color:14 BmpAddr:0xc8400000 Width:848 Height:1080 [OSD]OSD_BASE_SetPlaneSwitchOrder: OSD plane order[3,2,1] OSD_BASE_GetDisplayWidth upHaderAddr = 0xc9b80000, upDisAddr= 0xc9b81000 Panel 3840 x 2160 *************u4BmpPitch=3392****************** u4OutWidth=848,u4OutHeight=1080,u4OutX=536,u4OutY=0. [OSD]OSD_PLA_Enable: plane:2, enable:1 u1NVMFSRRecoveryMode = 0x0 ui_HW_AUD_BW = 0 ui_HW_DISPLAY_TECHNOLOGY = 0 not OLED set or in recovery, no need to extends 5 seconds display for OLED philips logo LDR_CheckWeakSymbol_mtk. [LDR]_factoryCmdUpgradeByFunctionType_init is called [LDR] ui4_upgradeDeviceTypeAddr : 0x7200 [LDR] ui1_upgradeDeviceType : 0x0 [LDR] ui1_functionType : 0xff [LDR]_factoryCmdUpgradeByFunctionType_isSkipUpgradeEnabled return FALSE Do USB upgrade [UFRC] NVM 0x317c[0x0], 0x97d[0x0] u1USBBlock = 0x42002840 [yl] usb_poll loop:0, controller->devices[0]:0x41e00340 xhci xhci_rh_hub_status_changed: 0x10, changed:1 generic_hub: Port change at 4 generic_hub: Attachment at port 4 generic_hub: Success at port 4 highspeed device xhci_post_command: Command 9 (@0x41d00040) xhci_handle_event: Port Status Change Event for 4: 1 xhci_handle_event: Port Status Change Event for 4: 1 xhci_set_address: Enabled slot 1 xhci_post_command: Command 11 (@0x41d00050) xhci_set_address: Addressed device 1 (USB: 1) xhci_post_command: Command 13 (@0x41d00060) xhci_post_command: Handling LINK pointer (@0x41d00070) * found device (0xabcd:0x1234, USB 2.0, MPS0: 64) device has 1 configurations device has 1 interfaces Interface 0: class 0x8, sub 0x6. proto 0x50 #Endpoint 1 (out), max packet size 200, type bulk #Endpoint 1 (in), max packet size 200, type bulk xhci_finish_ep_config: Filling epctx (@0x41d22060) xhci_finish_ep_config: Filling epctx (@0x41d22080) xhci_finish_device_config: config_id: 1 xhci_post_command: Command 12 (@0x41d00040) xhci_finish_device_config: Endpoints configured Class: MSC usb set_address ok;device address := 1 it uses SCSI transparent command set it uses Bulk-Only Transport protocol using endpoint 81 as in, 1 as out has 1 luns Waiting for device to become ready...ok. Reading capacity of mass storage device. 7864320 512-byte sectors (4026 MB) usb_msc_init OK detect the usb device stop to poll. [yl] usb_poll loop:1, controller->devices[1]:0x42003940 Waiting for device to become ready...ok. Reading capacity of mass storage device. 7864320 512-byte sectors (4026 MB) Find msc device USB DETECT Find USB device on U3 port. prLdrData->rDtvCfg.u1Upgrade_Ext :0x0 _fgDeviceType :0x0 Wait USB medium to be mounted... /dev is created. /mnt is already existed. That is OK. /dev/usb is created. /mnt/usb_0 is created. /dev/usb_0 is mounted as /mnt/usb_0. [LDR]Factory Request: 0x0, 0xff, 0, 0 FWUUTPV Upgrade @@eLoadeepromSetFileNameFun [LDR]bLdrUsbUpgradeDebug := 1 [LDR] ////////////////////////////////////check TPV file name format start [LDR]ac_usbFileName := . [LDR]e_fileType := 12 [LDR]ac_usbFileName := .. [LDR]e_fileType := 12 [LDR]ac_usbFileName := System Volume Information [LDR]e_fileType := 12 [LDR]ac_usbFileName := autorun.upg [LDR]e_fileType := 12 [LDR]b_Standard_pkg_found == 0! [LDR]b_Standard_NVM_found == 0! [LDR]b_cust_pkg_found == 0! [LDR]b_cust_nvm_found == 0! [LDR]_szFileName == upgrade.pkg! [LDR]////////////////////////////////////ui1_lookup_count := 0 [LDR]b_Standard_pkg_found and b_Standard_NVM_found are both FALSE [LDR]ac_usbFileName := . [LDR]e_fileType := 12 [LDR]ac_usbFileName := .. [LDR]e_fileType := 12 [LDR]ac_usbFileName := System Volume Information [LDR]e_fileType := 12 .[LDR]ac_usbFileName := autorun.upg [LDR]e_fileType := 12 [LDR]b_Standard_pkg_found == 0! [LDR]b_Standard_NVM_found == 0! [LDR]b_cust_pkg_found == 0! [LDR]b_cust_nvm_found == 0! [LDR]_szFileName == upgrade.pkg! [LDR]////////////////////////////////////ui1_lookup_count := 1 [LDR]b_Standard_pkg_found and b_Standard_NVM_found are both FALSE [LDR] ////////////////////////////////////check TPV file name format end [LDR]b_Standard_NVM_found and b_cust_nvm_found are both FALSE .. Error: Open file upgrade.pkg fail, Error: No valid upgrade file found, USB upgrade stop [CMain 1321][OLED Tcon error handle]display_techonlogy = 0 [CMain 1325][OLED Tcon error handle] Not OLED Panel. LDR_PostInit _LOADER_ResetWiFi_2nd _LOADER_EnableCI5VPower Flash load lzhs header from 0x100000 to dram(0x42061350), size=2048 Decompression uboot to 0x41800000... Flash load image from 0x100000 to dram(0x42061350), size=0x69f03 LZHS start LZHS done Starting image... U-Boot 2011.12.12 (Apr 15 2022 - 15:30:24) Total ( 1 ) DRAM Channels. Total DRAM for kernel: 2 GiB # Channel-A DRAM Size: 4096 MB. WARNING: Caches not enabled MMC: [MSDC] Uboot max clock 400000000 [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] HOST 1, rca 0x1 [MSDC] Set DMA Mode! [MSDC] id1:A7AD5206 id2:C6224A54 [MSDC] Uboot share parameters with loader. [MSDC] Load Param SpeedMode : 0x5. : 0 msdcgpio=76,-1,-1,176,-1,-1, [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 0 (BIM_increaseCrashCounter) write ok [crash count] WakeupReason is not PDWNC_WAKE_UP_REASON_AC_POWER, counter accumulate 1 [crash count] count = 1 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: enter normal mode! pmisc_msg: enter normal mode! ###########################i4_misc_val==0x0000 ###########################i4QueryRet==0x0000 ###########################i4ReadRet==0x0000 ###########################u4Addr==0x0a18 ###########################u4Val==0x0000 ###########################Final u4Val==0x0000 Env_common.c/env_add_adb_support read EEPROM ADB Support = 0 [Panel Type] :0x0 [Panel Type] Non-OLED wifi dat cfg = [0] msdcautok=0x2000008,0x3f2000,0x280000,0x403c0047,0xfffe4640,0x408180f,0x288832,0x1010101,0x1010101,0x0,0x0,0x14029,0x0,0x0,0x0,0x0,0x0 loaderlogo=0x0@0x0 ...=====PMIC I2C Param=====... mt53xxregulator=198:2:3:4:1:600:1500:1000:4:0:200:5:6:16:1:700:1500:1000:4:1: In: serial Out: serial Err: serial pmisc_msg: [zzuu]test uboot loader B new flow. [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 1 (BIM_increaseCrashCounter) write ok [crash count] WakeupReason is not PDWNC_WAKE_UP_REASON_AC_POWER, counter accumulate 1 [crash count] count = 2 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: enter normal mode! [main_loop][490] 0 ### main_loop: bootcmd="eboot boot" Hit any key to stop autoboot: 0 ###### Android Verify Boot 2.0 ###### The requested partitions: [boot] [dtbo] [tzbp] @@ Trying to verify slot _b --ENTER RPMB-- -- set count success -- write ok -- set count success -- -- set count success -- write ok -- set count success -- --EXIT RPMB-- System will boot from slot: _b ## AVB2.0 append extra bootargs: dm="1 system none ro 1,0 4817320 verity 1 179:46 179:46 4096 4096 602165 602165 sha1 16458f7ed1cb6ffdf026841bdff9584c4c0414ed 80b418d5e89df9e12bde3d86f4a3b465c4445f5f3067f5e6c588f51a1da072ba 10 restart_on_corruption ignore_zero_blocks use_fec_from_device 179:46 fec_roots 2 fec_blocks 606908 fec_start 606908" root=/dev/dm-0 androidboot.vbmeta.device=179:9 androidboot.vbmeta.avb_version=1.0 androidboot.vbmeta.device_state=locked androidboot.vbmeta.hash_alg=sha256 androidboot.vbmeta.size=16384 androidboot.vbmeta.digest=8b774890f5b9cf8b8890c46cc194ea1869f5fbf4c8823f311c46034f9cab5fdd androidboot.veritymode=enforcing Boot/Recovery image header version: 1 Boot state is: Green ! signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x49583358,dst=0xfa610000,psize=0x61b000,lsize=0x1cd54f,chk=0xba ## Loading image from partition: r20_b signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x4991dff0,dst=0xf9600000,psize=0x4a0d8,lsize=0x2b83b,chk=0xd1 ## Loading image from partition: r21_b signature verification is OK ## Plaintext img, src=0x49d1e010,dst=0xf9a00000,psize=0x0,lsize=0x0,chk=0x0 ## Loading image from partition: 3dlut_b signature verification is OK ## Plaintext img, src=0x4a11e020,dst=0xfa200000,psize=0x0,lsize=0x0,chk=0x0 ## Booting kernel from Legacy Image at 48043340 ... ## Flattened Device Tree from Legacy Image at 48043340 Booting using the fdt blob at 0x47800000 Uncompressing Kernel Image ... OK reserving fdt memory region: addr=0 size=10000 Applying the overlay fdt of index: 0 ... OK ## boot_ufdt_overlay: Merge DTBO to main DTB done, takes 13.564 ms Loading Device Tree to 463f5000, end 463ff220 ... OK ## Transferring control to Linux (at address fa610000) ... ## Linux start= 0x040000000 size= 0x07d264000 ... ## Linux start= 0x100000000 size= 0x000000000 ... ## uBoot bootargs size is limited: 4096 Bytes, current size: 2592 Bytes. Starting kernel ... [ATF][ 0.000000]LK boot argument [ATF][ 0.002869]atf_magic=0x4d415446 [ATF][ 0.004735]tee_support=0x1 [ATF][ 0.006384]tee_entry=0xfa635000 [ATF][ 0.008250]tee_boot_arg_addr=0x0 [ATF][ 0.010159]atf_log_port=0x0 [ATF][ 0.011852]atf_log_baudrate=0x0 [ATF][ 0.013718]atf_log_buf_start=0x0 [ATF][ 0.015628]atf_log_buf_size=0x0 [ATF][ 0.017493]atf_aee_debug_buf_start=0x0 [ATF][ 0.019663]atf_aee_debug_buf_size=0x0 [ATF][ 0.021790]atf_irq_num=0 [ATF][ 0.023352]BL33_START_ADDRESS=0x40080000 [ATF][ 0.025609]bl31_setup [ATF][ 0.027041]RESET_TO_BL31 [ATF][ 0.029168]BL31 Built : [ATF][ 0.030654]mtk: platform_setup_pm [ATF][ 0.032512][BL31] tvtee_setup! [ATF][ 0.034394][BL31] Jump to secure OS for initialization! TZ_Check_KernelStatus start TZ status=0x1 welcome to lk/MP boot args 0x0 0x0 0x0 0x0 HKDF-SHA256 Verification: PASS initializing trusty (Built: ) Initializing Trusted OS SMC handler Trusty Init Done, Jump to linux Kernel 4294967294 [ATF][ 0.059860]Kernel is 64Bit [ATF][ 0.062709]pc=0x40080000, r0=0x463f5000, r1=0x16ff,r2=0x0 [ATF][ 0.065661]KERNEL_AT_NON-SECURE! [ATF][ 0.067613][BL31] Final dump! SvcEx_SVP_AddKernelProtect u4Start = 40080000, u4End = 40920000 SvcEx_SVP_AddKernelProtect u4Start = 40920000, u4End = bd264000 read data: Addr failure, 0 read data: Addr failure, 0 read data: Addr failure, 0 fs_init_from_super:310: loaded super block version 2 super_block_valid:155: bad magic, 0x20708acbf2780f98 super_block_valid:155: bad magic, 0x20708acbf2780f98 fs_init_from_super:313: clear requested, create empty [OEMCrypto_IsKeyboxValid(): BAD_MAGIC] [OEMCrypto_InstallKeybox] FACTORY_KEYBOX_SIZE=212 [OEMCrypto_InstallKeybox]: FACTORY_KEYBOX_SIZE success [UTSetGenEpoch(): entry] epoch=1420070452 [UTSetGenEpoch(): master_generation=0] [UTSetGenEpoch(): exit] [OEMCrypto_Initialize]: zj entry [UTCreate(): exit] [UTLoadGenerationNumber(): 2 this->master_generation_number_=0] UTLoadUsageTableHeader: 2 clear.count=0 UTLoadUsageTableHeader: exit [OEMCrypto_LoadUsageTableHeader(): success] [OEMCrypto_Terminate]: entry [OEMCrypto_Initialize]: zj entry [UTCreate(): exit] [UTLoadGenerationNumber(): 2 this->master_generation_number_=0] UTLoadUsageTableHeader: 2 clear.count=0 UTLoadUsageTableHeader: exit [OEMCrypto_LoadUsageTableHeader(): success] OEMCrypto_GetOEMPublicCertificate: Provisioning method = 2.[OEMCrypto_Terminate]: entry [OEMCrypto_Initialize]: zj entry [UTCreate(): exit] [UTLoadGenerationNumber(): 2 this->master_generation_number_=0] UTLoadUsageTableHeader: 2 clear.count=0 UTLoadUsageTableHeader: exit [OEMCrypto_LoadUsageTableHeader(): success] [OEMCrypto_Terminate]: entry [OEMCrypto_Initialize]: zj entry [UTCreate(): exit] [UTLoadGenerationNumber(): 2 this->master_generation_number_=0] UTLoadUsageTableHeader: 2 clear.count=0 UTLoadUsageTableHeader: exit [OEMCrypto_LoadUsageTableHeader(): success] OEMCrypto_GetOEMPublicCertificate: Provisioning method = 2.[OEMCrypto_Terminate]: entry Boot- Scramble value: 0x00000056 .65 package [CH= 0 Calibration done] [CH= 1 Calibration done] [CH= 2 Calibration done] [CH= 3 Calibration done] # Init_DRAM take 305 ms. Dram size:2 Start Pmain EMMC boot load preloader2 image ... SrcOffset:0x00010000 DstAddr:0x409fffb0 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 CID:0xbac9a7ad :0x5206c622 :0x4a544434 :0x15010041 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 plain size:0x0001a8f0 LZHS size:0x0000f2fc image size:0x0000f450 LZHS checksum:0x00000080 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS dec begin LZHS ok load preloader2 image ok u4BSSLimit:0x0001f450 MsdcAccuVect(CMD):0x00000100 LZHS addr:0x40100040 plain size:0x0015e850 LZHS size:0x00068e91 LZHS checksum:0x000000cb MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS begin LZHS ok loader ver check ... [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- [preloader2_main.c:150] psVersion = 0x40e5e822 image version(header addr is 0x40cfffa0): 0.0.0 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- record version: 0.0.0 comparing loader ver with record return 0 loader ver check done Boot Start Lmain [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 MT5887 Boot Loader v0.9 setup_usb_host: Setting up USB HOST controller... mt53xx_u3phy_ports_enable: mt53xx_u3phy_ports_enable u2p:3, u3p:1 mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(0) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(1) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(2) setup_usb_host: phy power-on done. xhci_init: regbase: 0x100c4000 xhci_init: opreg: 0x100c4020 xhci_init: caplen: 0x20 xhci_init: rtsoff: 0x600 xhci_init: dboff: 0x800 xhci_init: hciversion: 1.16 xhci_init: context size: 32 xhci_init: pagesize: 0x1000 xhci_init: xhci->dma_buffer = 0x41d10000 xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reset: Resetting controller... ok. xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reinit: [yl]xhci->ev_ring_table[0].seg_base_lo:0x41d00100, seg_base_hi:0x0, seg_size:0x8 xhci_reinit: [yl]xhci->hcrreg->intrrs[0].erstsz:0x1, erstba_lo :0x41d001c0, erstba_hi:0x0 xHCI: root hub init done(ports:4) dev 0x41e00340 MUSB3_init OK ++ USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. [MSDC] enter into HS400 Mode, max dtr 200000000 [MSDC] Saved info: flag 0xaabbccdd,speedmode 5. [MSDC] Cur info: flag 0xaabbccdd, speedmode 5. [MSDC] The information is match, Alrady run autok before, ignore this time [MSDC] Load Param: [MSDC] SpeedMode : 0x00000005. [MSDC] K_IOCON : 0x02000008. [MSDC] K_PAD_TUNE0 : 0x003f2000. [MSDC] K_PAD_TUNE1 : 0x00280000. [MSDC] K_PATCH_BIT0 : 0x403c0047. [MSDC] K_PATCH_BIT1 : 0xfffe4640. [MSDC] K_PATCH_BIT2 : 0x0408180f. [MSDC] K_EMMC50_CFG0 : 0x00288832. [MSDC] K_DAT_RD_DLY0 : 0x01010101. [MSDC] K_DAT_RD_DLY1 : 0x01010101. [MSDC] K_DAT_RD_DLY2 : 0x00000000. [MSDC] K_DAT_RD_DLY3 : 0x00000000. [MSDC] K_EMMC50_PAD_DS_TUNE : 0x00014029. [MSDC] K_EMMC50_PAD_CMD_TUNE : 0x00000000. [MSDC] K_EMMC50_PAD_DAT01_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT23_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT45_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT67_TUNE: 0x00000000. [MSDC] check autok done. speed mode 1 ,clock 25 [MSDC] Set Bus Clock as HS0(MHz) Success!,src 0 ,mode 0, div 16 [MSDC] Set Bus Clock as HS50(MHz) Success!,src 3 ,mode 0, div 2 [MSDC] Set Bus Clock as HS400(MHz) Success!,src 3 ,mode 3, div 0 [MSDC] Set driving: CLK 7 ,CMD 7, DAT 9 [MSDC] Set device to HS400 mode successful! [MSDC] Loader apply autok param done. [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- Support network!. 1st MAC in EEP is valid (68:07:0a:4a:66:a5) 1st : (68:07:0a:4a:66:a5) 2nd : (68:07:0a:4a:66:a5) POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress Boot reason: A/C power on!!Servoadc Channel1 frist update!!!, value is 613 Servoadc Channel1 finish update!!!, value is 612 [OBR]triggered [OBR]Enter recovery mode to wipe data and then switch boot slot! [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]u4ServoADCChannelValue: 614 [TCON-RESET]nothing happened. LOADER_MtkEnvInitFunc: PDWNC_ReadWakeupReason = 6 LOADER_MtkEnvInitFunc: AC_POWER, set ui4_EnableQHBEepAddr to 0 LOADER_MtkEnvInitFunc : ui4_EmmcFirstBootEepAddr = 0x97a LOADER_MtkEnvInitFunc: [QHB] u1EmmcFirstBoot = 0x1LOADER_MtkEnvInitFunc: [QHB] It is not EmmcFirstBoot, do no cation with QHB. LOADER_MtkEnvInitFunc: set ui1_reboot_event_detail to 0 LOADER_MtkEnvInitFunc: ui1_reboot_event_detail = 0 (read back) Remove Quiet Boot misc control in eeprom when Watchdog reason. [IRRX_InitMtkIrRegSetup]SetRC5WakeupKey - Temporary comment IR DATA register : 0x 0 T8032 init A/C on case loader stage... Load T8032 FW (addr: 0x40e20c88, size: 28410)success!! T8032 FW version: 7 T8032 change to loader stage... LDR_FlashCopy 0x4000f010 0x88680 0x80 POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress [OBR]triggered [OBR]Enter recovery mode to wipe data and then switch boot slot! [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]u4ServoADCChannelValue: 614 [TCON-RESET]nothing happened. CC_PHP_SUPPORT_LOADER_CONSOLE_LOCK defined Uart Rx disabled [OBR]Is OBR triggered?. NVM_FSR_RECOVERY_MODE_ADDRESS=1 LOADER_MtkEnvInitFunc: ui4_fullstandbyctrlEepAddr = 0xa16 LOADER_MtkEnvInitFunc: ui1_tpvfullstandbyctrl = 0 [_LdrDetermineEnterStandby 424] PDWNC_WAKE_UP_REASON_AC_POWER continue bootup[UPG upgrade ~ PDWNC_WAKE_UP_REASON_AC_POWER] u1SlicneUpgradeStatus = 0 Org:0x30 Flags:0x30 Before u1EmmcFirstBoot = 0x1 Do not need to configure boot flag After EmmcFirstBoot Org:0x30 Flags:0x30 After u1EmmcFirstBoot = 0x1PDWNC_Init GPIO_MtkPowerOnFunc: ui4_SilentRebootEepAddr = 0xa1c GPIO_MtkPowerOnFunc: ui4_EnableQHBEepAddr = 0xa10 GPIO_MtkPowerOnFunc: ui4_FullStandbyCtrEepAddr = 0xa16 GPIO_MtkPowerOnFunc: normal cold boot ui1_silent_reboot = 0, ui1_tpvEnableQHB = 0, uil_FullStandbyCtr = 0 GPIO_MtkPowerOnFunc: After check ui1_silent_reboot, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: not QUIET_HOT_BOOT ui4_RedLedBriEepAddr : 0x317b use NVM LEDdutyControl value u1RedLedBriValue : 45 [GPIO_MtkPowerOnFunc 2102] u1_factory_mode = 0 [GPIO_MtkPowerOnFunc 2121] ui4_CtnEepAddr = 0x980 [GPIO_MtkPowerOnFunc 2123] CTN = 65PUS8505/12 [OBR]Blinking [GPIO_MtkPowerOnFunc 2165] Not PD9000 model, no need to set PDEL light switch FPGA-reset-pin:137 GPIO_MtkPowerOnFunc: efrcpowerGpio=256 GPIO_MtkPowerOnFunc: Power On FRC rDtvCfg.u1Flags4 = 0, PDWNC_ReadWakeupReason() = 6 GPIO_MtkPowerOnFunc: After FRC power, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: eResetfrcGpio is not available The init function of this module is NULL The init function of this module is NULL USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. ui4_CtnEepAddr = 0x980 CTN = 65PUS8505/12 u4BmpWidthTopBlack:848,u4BmpHeightTopBlack:422, u4BmpSizeTopBlack:1431424 u4BmpWidthMidBlack:848,u4BmpHeightMidBlack:196, u4BmpSizeMidBlack:664832 puDstAddress:0xc8400000 puBmpAddress:0x40defe40 u4ColorMode:0xe u4BmpWidth:848 u4BmpHeight:236 u4BmpSizePhilipsLogo:800512 u4DstAddressPhilipsLogo:0xc855d780 Display 0x40e5b5e0 background:0x00000000 Panel ID is 34. Panel ID 34 writing is done... vDrvResetVOPLLFlowFlag ###VbyOne VOPLLInit finsih######VbyOne VOPLLSet finsih###[SA7] _fgVopllUseDDDS = True [LVDS] VOPLL Initialize successful ! LDR_OsdDisplay(14, 0xc8400000, 848, 236) Color:14 BmpAddr:0xc8400000 Width:848 Height:1080 [OSD]OSD_BASE_SetPlaneSwitchOrder: OSD plane order[3,2,1] OSD_BASE_GetDisplayWidth upHaderAddr = 0xc9b80000, upDisAddr= 0xc9b81000 Panel 3840 x 2160 *************u4BmpPitch=3392****************** u4OutWidth=848,u4OutHeight=1080,u4OutX=536,u4OutY=0. [OSD]OSD_PLA_Enable: plane:2, enable:1 u1NVMFSRRecoveryMode = 0x2 ui_HW_AUD_BW = 0 ui_HW_DISPLAY_TECHNOLOGY = 0 not OLED set or in recovery, no need to extends 5 seconds display for OLED philips logo LDR_CheckWeakSymbol_mtk. [LDR]_factoryCmdUpgradeByFunctionType_init is called [LDR] ui4_upgradeDeviceTypeAddr : 0x7200 [LDR] ui1_upgradeDeviceType : 0x0 [LDR] ui1_functionType : 0xff [LDR]_factoryCmdUpgradeByFunctionType_isSkipUpgradeEnabled return FALSE Do USB upgrade [UFRC] NVM 0x317c[0x0], 0x97d[0x0] u1USBBlock = 0x42809740 [yl] usb_poll loop:0, controller->devices[0]:0x41e00340 xhci xhci_rh_hub_status_changed: 0x10, changed:1 generic_hub: Port change at 4 generic_hub: Attachment at port 4 generic_hub: Success at port 4 highspeed device xhci_post_command: Command 9 (@0x41d00040) xhci_handle_event: Port Status Change Event for 4: 1 xhci_handle_event: Port Status Change Event for 4: 1 xhci_set_address: Enabled slot 1 xhci_post_command: Command 11 (@0x41d00050) xhci_set_address: Addressed device 1 (USB: 1) xhci_post_command: Command 13 (@0x41d00060) xhci_post_command: Handling LINK pointer (@0x41d00070) * found device (0xabcd:0x1234, USB 2.0, MPS0: 64) device has 1 configurations device has 1 interfaces Interface 0: class 0x8, sub 0x6. proto 0x50 #Endpoint 1 (out), max packet size 200, type bulk #Endpoint 1 (in), max packet size 200, type bulk xhci_finish_ep_config: Filling epctx (@0x41d22060) xhci_finish_ep_config: Filling epctx (@0x41d22080) xhci_finish_device_config: config_id: 1 xhci_post_command: Command 12 (@0x41d00040) xhci_finish_device_config: Endpoints configured Class: MSC usb set_address ok;device address := 1 it uses SCSI transparent command set it uses Bulk-Only Transport protocol using endpoint 81 as in, 1 as out has 1 luns Waiting for device to become ready...ok. Reading capacity of mass storage device. 7864320 512-byte sectors (4026 MB) usb_msc_init OK detect the usb device stop to poll. [yl] usb_poll loop:1, controller->devices[1]:0x4280a840 Waiting for device to become ready...ok. Reading capacity of mass storage device. 7864320 512-byte sectors (4026 MB) Find msc device USB DETECT Find USB device on U3 port. prLdrData->rDtvCfg.u1Upgrade_Ext :0x0 _fgDeviceType :0x0 Wait USB medium to be mounted... /dev is created. /mnt is already existed. That is OK. /dev/usb is created. /mnt/usb_0 is created. /dev/usb_0 is mounted as /mnt/usb_0. [LDR]Factory Request: 0x0, 0xff, 0, 0 [FRC] OPFRC: 0x00, BL TYPE: 0x00, OP BACKEND=0, OP DISP TECH=0, PanelID=34, Platform: 2K20 No FRC upgrade !!!, check if has OLED FW JBLut upgrade !!! _u1OpDispTech=0 FWUUTPV Upgrade @@eLoadeepromSetFileNameFun [LDR]bLdrUsbUpgradeDebug := 1 [LDR] ////////////////////////////////////check TPV file name format start [LDR]ac_usbFileName := . [LDR]e_fileType := 12 [LDR]ac_usbFileName := .. [LDR]e_fileType := 12 [LDR]ac_usbFileName := System Volume Information [LDR]e_fileType := 12 [LDR]ac_usbFileName := LOST.DIR [LDR]e_fileType := 12 [LDR]ac_usbFileName := Android [LDR]e_fileType := 12 [LDR]ac_usbFileName := autorun.upg [LDR]e_fileType := 12 [LDR]b_Standard_pkg_found == 0! [LDR]b_Standard_NVM_found == 0! [LDR]b_cust_pkg_found == 0! [LDR]b_cust_nvm_found == 0! [LDR]_szFileName == upgrade.pkg! [LDR]////////////////////////////////////ui1_lookup_count := 0 [LDR]b_Standard_pkg_found and b_Standard_NVM_found are both FALSE [LDR]ac_usbFileName := . [LDR]e_fileType := 12 [LDR]ac_usbFileName := .. [LDR]e_fileType := 12 [LDR]ac_usbFileName := System Volume Information [LDR]e_fileType := 12 [LDR]ac_usbFileName := LOST.DIR [LDR]e_fileType := 12 [LDR]ac_usbFileName := Android [LDR]e_fileType := 12 .[LDR]ac_usbFileName := autorun.upg [LDR]e_fileType := 12 [LDR]b_Standard_pkg_found == 0! [LDR]b_Standard_NVM_found == 0! [LDR]b_cust_pkg_found == 0! [LDR]b_cust_nvm_found == 0! [LDR]_szFileName == upgrade.pkg! [LDR]////////////////////////////////////ui1_lookup_count := 1 [LDR]b_Standard_pkg_found and b_Standard_NVM_found are both FALSE [LDR] ////////////////////////////////////check TPV file name format end [LDR]b_Standard_NVM_found and b_cust_nvm_found are both FALSE ... Error: Open file upgrade.pkg fail, Error: No valid upgrade file found, USB upgrade stop [CMain 1321][OLED Tcon error handle]display_techonlogy = 0 [CMain 1325][OLED Tcon error handle] Not OLED Panel. LDR_PostInit _LOADER_ResetWiFi_2nd _LOADER_EnableCI5VPower Flash load lzhs header from 0x100000 to dram(0x4286b350), size=2048 Decompression uboot to 0x41800000... Flash load image from 0x100000 to dram(0x4286b350), size=0x69f03 LZHS start LZHS done Starting image... U-Boot 2011.12.12 (Apr 15 2022 - 15:30:24) Total ( 1 ) DRAM Channels. Total DRAM for kernel: 2 GiB # Channel-A DRAM Size: 4096 MB. WARNING: Caches not enabled MMC: [MSDC] Uboot max clock 400000000 [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] HOST 1, rca 0x1 [MSDC] Set DMA Mode! [MSDC] id1:A7AD5206 id2:C6224A54 [MSDC] Uboot share parameters with loader. [MSDC] Load Param SpeedMode : 0x5. : 0 msdcgpio=76,-1,-1,176,-1,-1, [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 0 (BIM_increaseCrashCounter) Boot reason: A/C power on!! [crash count] WakeupReason is PDWNC_WAKE_UP_REASON_AC_POWER, Not accumulate counter [crash count] count = 0 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: boot-recovery before enter recovery,disable osd1 and osd2====== pmisc_msg: boot-recovery before enter recovery,disable osd1 and osd2====== ###########################i4_misc_val==0x0001 ###########################i4QueryRet==0x0000 ###########################i4ReadRet==0x0000 ###########################u4Addr==0x0a18 ###########################u4Val==0x0000 Recovery mode detected, overwrite UART_TX_ENABLE to on ###########################Final u4Val==0x0001 Env_common.c/env_add_adb_support read EEPROM ADB Support = 0 [Panel Type] :0x0 [Panel Type] Non-OLED wifi dat cfg = [0] msdcautok=0x2000008,0x3f2000,0x280000,0x403c0047,0xfffe4640,0x408180f,0x288832,0x1010101,0x1010101,0x0,0x0,0x14029,0x0,0x0,0x0,0x0,0x0 loaderlogo=0x0@0x0 ...=====PMIC I2C Param=====... mt53xxregulator=198:2:3:4:1:600:1500:1000:4:0:200:5:6:16:1:700:1500:1000:4:1: In: serial Out: serial Err: serial pmisc_msg: [zzuu]test uboot loader B new flow. [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 0 (BIM_increaseCrashCounter) Boot reason: A/C power on!! [crash count] WakeupReason is PDWNC_WAKE_UP_REASON_AC_POWER, Not accumulate counter [crash count] count = 0 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: boot-recovery before enter recovery,disable osd1 and osd2====== [main_loop][490] 1 [main_loop][493] 1 [main_loop][495] clear counter before enter recovery mode ! write ok Got env for recovery_cmd ### main_loop: bootcmd="eboot recovery" Hit any key to stop autoboot: 0 ###### Android Verify Boot 2.0 ###### The requested partitions: [boot] [dtbo] [tzbp] @@ Trying to verify slot _b --ENTER RPMB-- -- set count success -- write ok -- set count success -- -- set count success -- write ok -- set count success -- --EXIT RPMB-- System will boot from slot: _b ## AVB2.0 append extra bootargs: dm="1 system none ro 1,0 4817320 verity 1 179:46 179:46 4096 4096 602165 602165 sha1 16458f7ed1cb6ffdf026841bdff9584c4c0414ed 80b418d5e89df9e12bde3d86f4a3b465c4445f5f3067f5e6c588f51a1da072ba 10 restart_on_corruption ignore_zero_blocks use_fec_from_device 179:46 fec_roots 2 fec_blocks 606908 fec_start 606908" root=/dev/dm-0 androidboot.vbmeta.device=179:9 androidboot.vbmeta.avb_version=1.0 androidboot.vbmeta.device_state=locked androidboot.vbmeta.hash_alg=sha256 androidboot.vbmeta.size=16384 androidboot.vbmeta.digest=8b774890f5b9cf8b8890c46cc194ea1869f5fbf4c8823f311c46034f9cab5fdd androidboot.veritymode=enforcing Boot/Recovery image header version: 1 Boot state is: Green ! signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x49583358,dst=0xfa610000,psize=0x61b000,lsize=0x1cd54f,chk=0xba ## Loading image from partition: r20_b signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x4991dff0,dst=0xf9600000,psize=0x4a0d8,lsize=0x2b83b,chk=0xd1 ## Loading image from partition: r21_b signature verification is OK ## Plaintext img, src=0x49d1e010,dst=0xf9a00000,psize=0x0,lsize=0x0,chk=0x0 ## Loading image from partition: 3dlut_b signature verification is OK ## Plaintext img, src=0x4a11e020,dst=0xfa200000,psize=0x0,lsize=0x0,chk=0x0 ## Booting kernel from Legacy Image at 48043340 ... ## Flattened Device Tree from Legacy Image at 48043340 Booting using the fdt blob at 0x47800000 Uncompressing Kernel Image ... OK reserving fdt memory region: addr=0 size=10000 Applying the overlay fdt of index: 0 ... OK ## boot_ufdt_overlay: Merge DTBO to main DTB done, takes 13.571 ms Loading Device Tree to 463f5000, end 463ff220 ... OK ## Transferring control to Linux (at address fa610000) ... ## Linux start= 0x040000000 size= 0x07d264000 ... ## Linux start= 0x100000000 size= 0x000000000 ... ## uBoot bootargs size is limited: 4096 Bytes, current size: 2593 Bytes. Starting kernel ... [ATF][ 0.000000]LK boot argument [ATF][ 0.002868]atf_magic=0x4d415446 [ATF][ 0.004734]tee_support=0x1 [ATF][ 0.006383]tee_entry=0xfa635000 [ATF][ 0.008249]tee_boot_arg_addr=0x0 [ATF][ 0.010158]atf_log_port=0x0 [ATF][ 0.011851]atf_log_baudrate=0x0 [ATF][ 0.013717]atf_log_buf_start=0x0 [ATF][ 0.015626]atf_log_buf_size=0x0 [ATF][ 0.017492]atf_aee_debug_buf_start=0x0 [ATF][ 0.019662]atf_aee_debug_buf_size=0x0 [ATF][ 0.021788]atf_irq_num=0 [ATF][ 0.023351]BL33_START_ADDRESS=0x40080000 [ATF][ 0.025607]bl31_setup [ATF][ 0.027040]RESET_TO_BL31 [ATF][ 0.029168]BL31 Built : [ATF][ 0.030653]mtk: platform_setup_pm [ATF][ 0.032512][BL31] tvtee_setup! [ATF][ 0.034393][BL31] Jump to secure OS for initialization! TZ_Check_KernelStatus start TZ status=0x1 welcome to lk/MP boot args 0x0 0x0 0x0 0x0 HKDF-SHA256 Verification: PASS initializing trusty (Built: ) Initializing Trusted OS SMC handler Trusty Init Done, Jump to linux Kernel 4294967294 [ATF][ 0.059951]Kernel is 64Bit [ATF][ 0.062800]pc=0x40080000, r0=0x463f5000, r1=0x16ff,r2=0x0 [ATF][ 0.065752]KERNEL_AT_NON-SECURE! [ATF][ 0.067704][BL31] Final dump! [ 0.000000] WARNING: x1-x3 nonzero in violation of boot protocol: [ 0.000000] x1: 00000000000016ff [ 0.000000] x2: 0000000000000000 [ 0.000000] x3: 0000000000000000 [ 0.000000] This indicates a broken bootloader or old kernel [ 0.000000] msdc_part_enc -> 2,3,4,12,13,18,27,44,48,53 [ 0.000000] (yjdbg) Android recovery mode [ 0.279065] mediatek-mt5887-pinctrl 1000d000.pinctrl: pinctrl not use syscon regmap [ 0.279102] mediatek-mt5887-pinctrl 1000d000.pinctrl: tv_reg_base is: 0xffffff8008800000 [ 0.404285] zzy : [mt65xx_u3phy_probe][679] [ 0.404628] zzy : [mt65xx_u3phy_probe][752] [ 0.404678] zzy : [mt65xx_u3phy_probe][679] [ 0.404781] zzy : [mt65xx_u3phy_probe][752] [ 0.409120] _log2usb_3init_module [ 0.409219] _log2usb_3init_module init ok [ 0.458944] mtk_usb [oc_mtk_init][381][0] [ 0.458986] mtk_usb [mtk_usboc_create_timer][298] [ 0.459690] ssusb wifi_standbypower = 0 [ 0.459745] mt53xx-u3phy 100c0000.ssusb1-phy: init done and port base is ffffff8008202300 [ 0.459762] mt53xx-u3phy 100c0000.ssusb1-phy: init done and port base is ffffff8008206300 [ 0.459778] mt53xx-u3phy 100c0000.ssusb1-phy: init done and port base is ffffff800820a300 [ 0.459889] USB port C apply power to hdmi [ 0.463297] mediatek-mt5887-pinctrl 1000d000.pinctrl: missing pins property in node usb_jtag just return [ 0.463533] ssusb mtk wifi_standbypower = 0 [ 0.463550] 0: vbus_gpio 42,vbus_gpio_pol 1,oc_gpio 233,oc_pol 0,using 1[ 0.463561] 1: vbus_gpio 43,vbus_gpio_pol 1,oc_gpio 233,oc_pol 0,using 1 2: vbus_gpio 44,vbus_gpio_pol 1,oc_gpio 234,oc_pol 0,using 0[ 0.463581] 3: vbus_gpio 219,vbus_gpio_pol 1,oc_gpio 234,oc_pol 0,using 0 [ 0.463657] dma_mask=0xffffffffffffffff coherent_dma_mask=0xffffffffffffffff [ 0.464400] [USB] usb_set_configuration => [ 0.464886] [USB] usb_set_configuration <= [ 0.465391] [USB] usb_set_configuration => [ 0.465735] [USB] usb_set_configuration <= [ 0.465947] ssusb wifi_standbypower = 1 [ 0.465981] mt53xx-u3phy 100d0000.ssusb2-phy: init done and port base is ffffff800820d800 [ 0.466282] ssusb mtk wifi_standbypower = 1 [ 0.466347] dma_mask=0xffffffffffffffff coherent_dma_mask=0xffffffffffffffff [ 0.466987] [USB] usb_set_configuration => [ 0.467349] [USB] usb_set_configuration <= [ 0.467849] [USB] usb_set_configuration => [ 0.468187] [USB] usb_set_configuration <= [ 0.477417] mtk-msdc 1006d000.MSDC0: msdc_aes_config_init. [ 0.477656] mtk-msdc 1006d000.MSDC0: power up! [ 0.477723] mtk-msdc 1006d000.MSDC0: msdc_aes_config_init. [ 0.477762] mtk-msdc 1006d000.MSDC0: msdc_ops_switch_volt! [ 0.515051] ion_device_create num_heaps = 2 [ 0.527609] otg_wakelock_init: No USB transceiver found [ 0.532300] @mt_gpufreq_update_volt: index[1] old volt = 100000, new volt = 101800 [ 0.564632] mtk-msdc 1006d000.MSDC0: msdc_ops_switch_volt! [ 0.568230] mtk-msdc 1006d000.MSDC0: PAD_TUNE 00202000, 0. [ 0.570186] mtk-msdc 1006d000.MSDC0: phase: [map:ffffff81] [maxlen:25] [final:19] [ 0.570212] mtk-msdc 1006d000.MSDC0: Final cmd pad delay: 13 [ 0.570311] mmc_select_hs400 1196. [ 0.570367] mmc0: new HS400 MMC card at address 0001 [ 0.570820] mmcblk0: mmc0:0001 AJTD4R 14.6 GiB [ 0.570984] mmcblk0boot0: mmc0:0001 AJTD4R partition 1 4.00 MiB [ 0.571142] mmcblk0rpmb: mmc0:0001 AJTD4R partition 3 4.00 MiB [ 1.066069] init: Init cannot set 'ro.boot.linux,phandle' to ' [ 1.086796] init: waitid failed: No child processes [ 1.088948] init: Unable to set property 'ro.product.vendor.manufacturer' to 'Philips' in property file '/prop.default': Read-only property was already set [ 1.088999] init: Unable to set property 'ro.product.vendor.model' to 'TPM191E' in property file '/prop.default': Read-only property was already set [ 1.089047] init: Unable to set property 'ro.product.vendor.name' to 'PH9M_EA_5599' in property file '/prop.default': Read-only property was already set [ 1.103313] ueventd: Unable to read config file '/vendor/ueventd.rc': open() failed: No such file or directory [ 1.103384] ueventd: Unable to read config file '/odm/ueventd.rc': open() failed: No such file or directory [ 1.103506] ueventd: Unable to read config file '/ueventd.mt5887.rc': open() failed: No such file or directory [ 1.114464] [USB] usb_set_configuration => [ 1.120459] [USB] usb_set_configuration <= [ 1.192712] ueventd: Failed to symlink /dev/block/mmcblk0p58 to /dev/block/platform/soc/1006d000.MSDC0/by-name/Panel_Table_b, which already links to: /dev/block/mmcblk0p21: File exists [ 2.145955] sd 0:0:0:0: [sda] No Caching mode page found [ 2.145987] sd 0:0:0:0: [sda] Assuming drive cache: write through [ 7.320408] dtv-mod soc:dtv_mod@10028000: eep wp gpio num=2SvcEx_SVP_AddKernelProtect u4Start = 40080000, u4End = 40920000 SvcEx_SVP_AddKernelProtect u4Start = 40920000, u4End = bd264000 07 pol=1 [ 7.350827] [VER: 20.00.09.02] IP Compiled at:[Oct 19 2021 08:51:59]. [ 7.350827] [ 7.350864] [pqsoccontrolR_infra_readOptionByteItem] PLF[1] FRC=[0] P5_PRO[0] DisplayID NVM=[34] MTK=[34] ISF[1] HDR[2] LS[9] TS[2] OLED[0] WCG[1] RES[2] BL[0] 100Hz[0] PNR[0] AIPQ[0] XRAY[0] [ 7.350881] IP Enter, Exit, No FRC, FRC=[0] P5_Pro[0] AiPQ[0] [ 7.350881] [ 7.350891] PqDbgTuning started [ 7.350979] IP Exit return 7 [ 7.399044] init: /recovery not specified in fstab # [ 9.353209] Recovery: "/sbin/recovery" [ 9.353254] Recovery: "--wipe_data" [ 13.740719] Recovery: "mount_upgrade exec_cmd result: 0" [ 13.775421] Recovery: "umount_upgrade exec_cmd result: 0" [ 14.454045] watchdogd: Failed to open /dev/watchdog: No such file or directory # [ 15.314146] [PTP] PTP_TEMP = 20 [ 15.314222] @mt_gpufreq_update_volt: index[0] old volt = 102500, new volt = 100600 [ 17.598837] reboot: Restarting system with command '' Boot- Scramble value: 0x00000056 .65 package [CH= 0 Calibration done] [CH= 1 Calibration done] [CH= 2 Calibration done] [CH= 3 Calibration done] # Init_DRAM take 312 ms. Dram size:2 Start Pmain EMMC boot load preloader2 image ... SrcOffset:0x00010000 DstAddr:0x409fffb0 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 CID:0xbac9a7ad :0x5206c622 :0x4a544434 :0x15010041 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 plain size:0x0001a8f0 LZHS size:0x0000f2fc image size:0x0000f450 LZHS checksum:0x00000080 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS dec begin LZHS ok load preloader2 image ok u4BSSLimit:0x0001f450 MsdcAccuVect(CMD):0x00000100 LZHS addr:0x40100040 plain size:0x0015e850 LZHS size:0x00068e91 LZHS checksum:0x000000cb MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS begin LZHS ok loader ver check ... [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- [preloader2_main.c:150] psVersion = 0x40e5e822 image version(header addr is 0x40cfffa0): 0.0.0 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- record version: 0.0.0 comparing loader ver with record return 0 loader ver check done Boot Start Lmain [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 MT5887 Boot Loader v0.9 setup_usb_host: Setting up USB HOST controller... mt53xx_u3phy_ports_enable: mt53xx_u3phy_ports_enable u2p:3, u3p:1 mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(0) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(1) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(2) setup_usb_host: phy power-on done. xhci_init: regbase: 0x100c4000 xhci_init: opreg: 0x100c4020 xhci_init: caplen: 0x20 xhci_init: rtsoff: 0x600 xhci_init: dboff: 0x800 xhci_init: hciversion: 1.16 xhci_init: context size: 32 xhci_init: pagesize: 0x1000 xhci_init: xhci->dma_buffer = 0x41d10000 xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reset: Resetting controller... ok. xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reinit: [yl]xhci->ev_ring_table[0].seg_base_lo:0x41d00100, seg_base_hi:0x0, seg_size:0x8 xhci_reinit: [yl]xhci->hcrreg->intrrs[0].erstsz:0x1, erstba_lo :0x41d001c0, erstba_hi:0x0 xHCI: root hub init done(ports:4) dev 0x41e00340 MUSB3_init OK ++ USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. [MSDC] enter into HS400 Mode, max dtr 200000000 [MSDC] Saved info: flag 0xaabbccdd,speedmode 5. [MSDC] Cur info: flag 0xaabbccdd, speedmode 5. [MSDC] The information is match, Alrady run autok before, ignore this time [MSDC] Load Param: [MSDC] SpeedMode : 0x00000005. [MSDC] K_IOCON : 0x02000008. [MSDC] K_PAD_TUNE0 : 0x003f2000. [MSDC] K_PAD_TUNE1 : 0x00280000. [MSDC] K_PATCH_BIT0 : 0x403c0047. [MSDC] K_PATCH_BIT1 : 0xfffe4640. [MSDC] K_PATCH_BIT2 : 0x0408180f. [MSDC] K_EMMC50_CFG0 : 0x00288832. [MSDC] K_DAT_RD_DLY0 : 0x01010101. [MSDC] K_DAT_RD_DLY1 : 0x01010101. [MSDC] K_DAT_RD_DLY2 : 0x00000000. [MSDC] K_DAT_RD_DLY3 : 0x00000000. [MSDC] K_EMMC50_PAD_DS_TUNE : 0x00014029. [MSDC] K_EMMC50_PAD_CMD_TUNE : 0x00000000. [MSDC] K_EMMC50_PAD_DAT01_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT23_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT45_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT67_TUNE: 0x00000000. [MSDC] check autok done. speed mode 1 ,clock 25 [MSDC] Set Bus Clock as HS0(MHz) Success!,src 0 ,mode 0, div 16 [MSDC] Set Bus Clock as HS50(MHz) Success!,src 3 ,mode 0, div 2 [MSDC] Set Bus Clock as HS400(MHz) Success!,src 3 ,mode 3, div 0 [MSDC] Set driving: CLK 7 ,CMD 7, DAT 9 [MSDC] Set device to HS400 mode successful! [MSDC] Loader apply autok param done. [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- Support network!. 1st MAC in EEP is valid (68:07:0a:4a:66:a5) 1st : (68:07:0a:4a:66:a5) 2nd : (68:07:0a:4a:66:a5) POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress Boot reason: Watch dog0 reset (0x1000000) !![OBR-nonAC]nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]nothing happened. LOADER_MtkEnvInitFunc: PDWNC_ReadWakeupReason = 32 LOADER_MtkEnvInitFunc: ui1_reboot_event_detail = 0 LOADER_MtkEnvInitFunc: TV reboot by watch dog, ui1_tpvEnableQHB is 0 TV reboot by watch dog0 reset (0x1000000) !!LOADER_MtkEnvInitFunc: set ui1_reboot_event_detail to 5 LOADER_MtkEnvInitFunc: ui1_reboot_event_detail = 5 (read back) Remove Quiet Boot misc control in eeprom when Watchdog reason. [IRRX_InitMtkIrRegSetup]SetRC5WakeupKey - Temporary comment IR DATA register : 0x 0 T8032 init A/C on case loader stage... Load T8032 FW (addr: 0x40e20c88, size: 28410)success!! T8032 FW version: 7 T8032 change to loader stage... LDR_FlashCopy 0x4000f010 0x88680 0x80 POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress [OBR-nonAC]nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]nothing happened. CC_PHP_SUPPORT_LOADER_CONSOLE_LOCK defined Uart Rx disabled [OBR]Is OBR triggered?. NVM_FSR_RECOVERY_MODE_ADDRESS=2 [_LdrDetermineEnterStandby 432] not PDWNC_WAKE_UP_REASON_AC_POWER [UPG upgrade ~ not PDWNC_WAKE_UP_REASON_AC_POWER] u1SlicneUpgradeStatus = 0 PDWNC_Init GPIO_MtkPowerOnFunc: ui4_SilentRebootEepAddr = 0xa1c GPIO_MtkPowerOnFunc: ui4_EnableQHBEepAddr = 0xa10 GPIO_MtkPowerOnFunc: ui4_FullStandbyCtrEepAddr = 0xa16 GPIO_MtkPowerOnFunc: normal cold boot ui1_silent_reboot = 0, ui1_tpvEnableQHB = 0, uil_FullStandbyCtr = 0 GPIO_MtkPowerOnFunc: After check ui1_silent_reboot, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: not QUIET_HOT_BOOT ui4_RedLedBriEepAddr : 0x317b use NVM LEDdutyControl value u1RedLedBriValue : 45 [GPIO_MtkPowerOnFunc 2102] u1_factory_mode = 0 [GPIO_MtkPowerOnFunc 2121] ui4_CtnEepAddr = 0x980 [GPIO_MtkPowerOnFunc 2123] CTN = 65PUS8505/12 [GPIO_MtkPowerOnFunc 2153] start led sine wave blinking [GPIO_MtkPowerOnFunc 2165] Not PD9000 model, no need to set PDEL light switch FPGA-reset-pin:137 GPIO_MtkPowerOnFunc: efrcpowerGpio=256 GPIO_MtkPowerOnFunc: Power On FRC rDtvCfg.u1Flags4 = 0, PDWNC_ReadWakeupReason() = 32 GPIO_MtkPowerOnFunc: After FRC power, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: eResetfrcGpio is not available The init function of this module is NULL The init function of this module is NULL USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. ui4_CtnEepAddr = 0x980 CTN = 65PUS8505/12 u4BmpWidthTopBlack:848,u4BmpHeightTopBlack:422, u4BmpSizeTopBlack:1431424 u4BmpWidthMidBlack:848,u4BmpHeightMidBlack:196, u4BmpSizeMidBlack:664832 puDstAddress:0xc8400000 puBmpAddress:0x40defe40 u4ColorMode:0xe u4BmpWidth:848 u4BmpHeight:236 u4BmpSizePhilipsLogo:800512 u4DstAddressPhilipsLogo:0xc855d780 Display 0x40e5b5e0 background:0x00000000 Panel ID is 34. Panel ID 34 writing is done... vDrvResetVOPLLFlowFlag ###VbyOne VOPLLInit finsih######VbyOne VOPLLSet finsih###[SA7] _fgVopllUseDDDS = True [LVDS] VOPLL Initialize successful ! LDR_OsdDisplay(14, 0xc8400000, 848, 236) Color:14 BmpAddr:0xc8400000 Width:848 Height:1080 [OSD]OSD_BASE_SetPlaneSwitchOrder: OSD plane order[3,2,1] OSD_BASE_GetDisplayWidth upHaderAddr = 0xc9b80000, upDisAddr= 0xc9b81000 Panel 3840 x 2160 *************u4BmpPitch=3392****************** u4OutWidth=848,u4OutHeight=1080,u4OutX=536,u4OutY=0. [OSD]OSD_PLA_Enable: plane:2, enable:1 u1NVMFSRRecoveryMode = 0x2 ui_HW_AUD_BW = 0 ui_HW_DISPLAY_TECHNOLOGY = 0 not OLED set or in recovery, no need to extends 5 seconds display for OLED philips logo LDR_CheckWeakSymbol_mtk. [LDR]_factoryCmdUpgradeByFunctionType_init is called [LDR] ui4_upgradeDeviceTypeAddr : 0x7200 [LDR] ui1_upgradeDeviceType : 0x0 [LDR] ui1_functionType : 0xff [LDR]_factoryCmdUpgradeByFunctionType_isSkipUpgradeEnabled return FALSE Do USB upgrade [UFRC] NVM 0x317c[0x0], 0x97d[0x0] u1USBBlock = 0x42009740 [yl] usb_poll loop:0, controller->devices[0]:0x41e00340 xhci xhci_rh_hub_status_changed: 0x10, changed:1 generic_hub: Port change at 4 generic_hub: Attachment at port 4 generic_hub: Success at port 4 highspeed device xhci_post_command: Command 9 (@0x41d00040) xhci_handle_event: Port Status Change Event for 4: 1 xhci_handle_event: Port Status Change Event for 4: 1 xhci_set_address: Enabled slot 1 xhci_post_command: Command 11 (@0x41d00050) xhci_set_address: Addressed device 1 (USB: 1) xhci_post_command: Command 13 (@0x41d00060) xhci_post_command: Handling LINK pointer (@0x41d00070) * found device (0xabcd:0x1234, USB 2.0, MPS0: 64) device has 1 configurations device has 1 interfaces Interface 0: class 0x8, sub 0x6. proto 0x50 #Endpoint 1 (out), max packet size 200, type bulk #Endpoint 1 (in), max packet size 200, type bulk xhci_finish_ep_config: Filling epctx (@0x41d22060) xhci_finish_ep_config: Filling epctx (@0x41d22080) xhci_finish_device_config: config_id: 1 xhci_post_command: Command 12 (@0x41d00040) xhci_finish_device_config: Endpoints configured Class: MSC usb set_address ok;device address := 1 it uses SCSI transparent command set it uses Bulk-Only Transport protocol using endpoint 81 as in, 1 as out has 1 luns Waiting for device to become ready...ok. Reading capacity of mass storage device. 7864320 512-byte sectors (4026 MB) usb_msc_init OK detect the usb device stop to poll. [yl] usb_poll loop:1, controller->devices[1]:0x4200a840 Waiting for device to become ready...ok. Reading capacity of mass storage device. 7864320 512-byte sectors (4026 MB) Find msc device USB DETECT Find USB device on U3 port. prLdrData->rDtvCfg.u1Upgrade_Ext :0x0 _fgDeviceType :0x0 Wait USB medium to be mounted... /dev is created. /mnt is already existed. That is OK. /dev/usb is created. /mnt/usb_0 is created. /dev/usb_0 is mounted as /mnt/usb_0. [LDR]Factory Request: 0x0, 0xff, 0, 0 FWUUTPV Upgrade @@eLoadeepromSetFileNameFun [LDR]bLdrUsbUpgradeDebug := 1 [LDR] ////////////////////////////////////check TPV file name format start [LDR]ac_usbFileName := . [LDR]e_fileType := 12 [LDR]ac_usbFileName := .. [LDR]e_fileType := 12 [LDR]ac_usbFileName := System Volume Information [LDR]e_fileType := 12 [LDR]ac_usbFileName := LOST.DIR [LDR]e_fileType := 12 [LDR]ac_usbFileName := Android [LDR]e_fileType := 12 [LDR]ac_usbFileName := autorun.upg [LDR]e_fileType := 12 [LDR]b_Standard_pkg_found == 0! [LDR]b_Standard_NVM_found == 0! [LDR]b_cust_pkg_found == 0! [LDR]b_cust_nvm_found == 0! [LDR]_szFileName == upgrade.pkg! [LDR]////////////////////////////////////ui1_lookup_count := 0 [LDR]b_Standard_pkg_found and b_Standard_NVM_found are both FALSE [LDR]ac_usbFileName := . [LDR]e_fileType := 12 [LDR]ac_usbFileName := .. [LDR]e_fileType := 12 [LDR]ac_usbFileName := System Volume Information [LDR]e_fileType := 12 [LDR]ac_usbFileName := LOST.DIR [LDR]e_fileType := 12 [LDR]ac_usbFileName := Android [LDR]e_fileType := 12 .[LDR]ac_usbFileName := autorun.upg [LDR]e_fileType := 12 [LDR]b_Standard_pkg_found == 0! [LDR]b_Standard_NVM_found == 0! [LDR]b_cust_pkg_found == 0! [LDR]b_cust_nvm_found == 0! [LDR]_szFileName == upgrade.pkg! [LDR]////////////////////////////////////ui1_lookup_count := 1 [LDR]b_Standard_pkg_found and b_Standard_NVM_found are both FALSE [LDR] ////////////////////////////////////check TPV file name format end [LDR]b_Standard_NVM_found and b_cust_nvm_found are both FALSE ... Error: Open file upgrade.pkg fail, Error: No valid upgrade file found, USB upgrade stop [CMain 1321][OLED Tcon error handle]display_techonlogy = 0 [CMain 1325][OLED Tcon error handle] Not OLED Panel. LDR_PostInit _LOADER_ResetWiFi_2nd _LOADER_EnableCI5VPower Flash load lzhs header from 0x100000 to dram(0x4206b350), size=2048 Decompression uboot to 0x41800000... Flash load image from 0x100000 to dram(0x4206b350), size=0x69f03 LZHS start LZHS done Starting image... U-Boot 2011.12.12 (Apr 15 2022 - 15:30:24) Total ( 1 ) DRAM Channels. Total DRAM for kernel: 2 GiB # Channel-A DRAM Size: 4096 MB. WARNING: Caches not enabled MMC: [MSDC] Uboot max clock 400000000 [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] HOST 1, rca 0x1 [MSDC] Set DMA Mode! [MSDC] id1:A7AD5206 id2:C6224A54 [MSDC] Uboot share parameters with loader. [MSDC] Load Param SpeedMode : 0x5. : 0 msdcgpio=76,-1,-1,176,-1,-1, [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 0 (BIM_increaseCrashCounter) write ok [crash count] WakeupReason is not PDWNC_WAKE_UP_REASON_AC_POWER, counter accumulate 1 [crash count] count = 1 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: enter normal mode! pmisc_msg: enter normal mode! ###########################i4_misc_val==0x0000 ###########################i4QueryRet==0x0000 ###########################i4ReadRet==0x0000 ###########################u4Addr==0x0a18 ###########################u4Val==0x0000 ###########################Final u4Val==0x0000 Env_common.c/env_add_adb_support read EEPROM ADB Support = 0 env_add_bootreason: set androidboot.bootreason=reboot [Panel Type] :0x0 [Panel Type] Non-OLED wifi dat cfg = [0] msdcautok=0x2000008,0x3f2000,0x280000,0x403c0047,0xfffe4640,0x408180f,0x288832,0x1010101,0x1010101,0x0,0x0,0x14029,0x0,0x0,0x0,0x0,0x0 loaderlogo=0x0@0x0 ...=====PMIC I2C Param=====... mt53xxregulator=198:2:3:4:1:600:1500:1000:4:0:200:5:6:16:1:700:1500:1000:4:1: In: serial Out: serial Err: serial pmisc_msg: [zzuu]test uboot loader B new flow. [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 1 (BIM_increaseCrashCounter) write ok [crash count] WakeupReason is not PDWNC_WAKE_UP_REASON_AC_POWER, counter accumulate 1 [crash count] count = 2 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: enter normal mode! [main_loop][490] 0 ### main_loop: bootcmd="eboot boot" Hit any key to stop autoboot: 0 ###### Android Verify Boot 2.0 ###### The requested partitions: [boot] [dtbo] [tzbp] @@ Trying to verify slot _b --ENTER RPMB-- -- set count success -- write ok -- set count success -- -- set count success -- write ok -- set count success -- --EXIT RPMB-- System will boot from slot: _b ## AVB2.0 append extra bootargs: dm="1 system none ro 1,0 4817320 verity 1 179:46 179:46 4096 4096 602165 602165 sha1 16458f7ed1cb6ffdf026841bdff9584c4c0414ed 80b418d5e89df9e12bde3d86f4a3b465c4445f5f3067f5e6c588f51a1da072ba 10 restart_on_corruption ignore_zero_blocks use_fec_from_device 179:46 fec_roots 2 fec_blocks 606908 fec_start 606908" root=/dev/dm-0 androidboot.vbmeta.device=179:9 androidboot.vbmeta.avb_version=1.0 androidboot.vbmeta.device_state=locked androidboot.vbmeta.hash_alg=sha256 androidboot.vbmeta.size=16384 androidboot.vbmeta.digest=8b774890f5b9cf8b8890c46cc194ea1869f5fbf4c8823f311c46034f9cab5fdd androidboot.veritymode=enforcing Boot/Recovery image header version: 1 Boot state is: Green ! signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x49583358,dst=0xfa610000,psize=0x61b000,lsize=0x1cd54f,chk=0xba ## Loading image from partition: r20_b signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x4991dff0,dst=0xf9600000,psize=0x4a0d8,lsize=0x2b83b,chk=0xd1 ## Loading image from partition: r21_b signature verification is OK ## Plaintext img, src=0x49d1e010,dst=0xf9a00000,psize=0x0,lsize=0x0,chk=0x0 ## Loading image from partition: 3dlut_b signature verification is OK ## Plaintext img, src=0x4a11e020,dst=0xfa200000,psize=0x0,lsize=0x0,chk=0x0 ## Booting kernel from Legacy Image at 48043340 ... ## Flattened Device Tree from Legacy Image at 48043340 Booting using the fdt blob at 0x47800000 Uncompressing Kernel Image ... OK reserving fdt memory region: addr=0 size=10000 Applying the overlay fdt of index: 0 ... OK ## boot_ufdt_overlay: Merge DTBO to main DTB done, takes 13.578 ms Loading Device Tree to 463f5000, end 463ff220 ... OK ## Transferring control to Linux (at address fa610000) ... ## Linux start= 0x040000000 size= 0x07d264000 ... ## Linux start= 0x100000000 size= 0x000000000 ... ## uBoot bootargs size is limited: 4096 Bytes, current size: 2622 Bytes. Starting kernel ... [ATF][ 0.000000]LK boot argument [ATF][ 0.002870]atf_magic=0x4d415446 [ATF][ 0.004736]tee_support=0x1 [ATF][ 0.006385]tee_entry=0xfa635000 [ATF][ 0.008251]tee_boot_arg_addr=0x0 [ATF][ 0.010161]atf_log_port=0x0 [ATF][ 0.011853]atf_log_baudrate=0x0 [ATF][ 0.013719]atf_log_buf_start=0x0 [ATF][ 0.015629]atf_log_buf_size=0x0 [ATF][ 0.017495]atf_aee_debug_buf_start=0x0 [ATF][ 0.019664]atf_aee_debug_buf_size=0x0 [ATF][ 0.021791]atf_irq_num=0 [ATF][ 0.023353]BL33_START_ADDRESS=0x40080000 [ATF][ 0.025610]bl31_setup [ATF][ 0.027042]RESET_TO_BL31 [ATF][ 0.029169]BL31 Built : [ATF][ 0.030655]mtk: platform_setup_pm [ATF][ 0.032513][BL31] tvtee_setup! [ATF][ 0.034395][BL31] Jump to secure OS for initialization! TZ_Check_KernelStatus start TZ status=0x1 welcome to lk/MP boot args 0x0 0x0 0x0 0x0 HKDF-SHA256 Verification: PASS initializing trusty (Built: ) Initializing Trusted OS SMC handler Trusty Init Done, Jump to linux Kernel 4294967294 [ATF][ 0.060040]Kernel is 64Bit [ATF][ 0.062889]pc=0x40080000, r0=0x463f5000, r1=0x16ff,r2=0x0 [ATF][ 0.065842]KERNEL_AT_NON-SECURE! [ATF][ 0.067793][BL31] Final dump! SvcEx_SVP_AddKernelProtect u4Start = 40080000, u4End = 40920000 SvcEx_SVP_AddKernelProtect u4Start = 40920000, u4End = bd264000 read data: Addr failure, 0 read data: Addr failure, 0 read data: Addr failure, 0 fs_init_from_super:310: loaded super block version 2 super_block_valid:155: bad magic, 0x20708acbf2780f98 super_block_valid:155: bad magic, 0x20708acbf2780f98 fs_init_from_super:313: clear requested, create empty Boot- Scramble value: 0x00000056 .65 package [CH= 0 Calibration done] [CH= 1 Calibration done] [CH= 2 Calibration done] [CH= 3 Calibration done] # Init_DRAM take 308 ms. Dram size:2 Start Pmain EMMC boot load preloader2 image ... SrcOffset:0x00010000 DstAddr:0x409fffb0 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 CID:0xbac9a7ad :0x5206c622 :0x4a544434 :0x15010041 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 plain size:0x0001a8f0 LZHS size:0x0000f2fc image size:0x0000f450 LZHS checksum:0x00000080 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS dec begin LZHS ok load preloader2 image ok u4BSSLimit:0x0001f450 MsdcAccuVect(CMD):0x00000100 LZHS addr:0x40100040 plain size:0x0015e850 LZHS size:0x00068e91 LZHS checksum:0x000000cb MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS begin LZHS ok loader ver check ... [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- [preloader2_main.c:150] psVersion = 0x40e5e822 image version(header addr is 0x40cfffa0): 0.0.0 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- record version: 0.0.0 comparing loader ver with record return 0 loader ver check done Boot Start Lmain [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 MT5887 Boot Loader v0.9 setup_usb_host: Setting up USB HOST controller... mt53xx_u3phy_ports_enable: mt53xx_u3phy_ports_enable u2p:3, u3p:1 mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(0) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(1) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(2) setup_usb_host: phy power-on done. xhci_init: regbase: 0x100c4000 xhci_init: opreg: 0x100c4020 xhci_init: caplen: 0x20 xhci_init: rtsoff: 0x600 xhci_init: dboff: 0x800 xhci_init: hciversion: 1.16 xhci_init: context size: 32 xhci_init: pagesize: 0x1000 xhci_init: xhci->dma_buffer = 0x41d10000 xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reset: Resetting controller... ok. xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reinit: [yl]xhci->ev_ring_table[0].seg_base_lo:0x41d00100, seg_base_hi:0x0, seg_size:0x8 xhci_reinit: [yl]xhci->hcrreg->intrrs[0].erstsz:0x1, erstba_lo :0x41d001c0, erstba_hi:0x0 xHCI: root hub init done(ports:4) dev 0x41e00340 MUSB3_init OK ++ USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. [MSDC] enter into HS400 Mode, max dtr 200000000 [MSDC] Saved info: flag 0xaabbccdd,speedmode 5. [MSDC] Cur info: flag 0xaabbccdd, speedmode 5. [MSDC] The information is match, Alrady run autok before, ignore this time [MSDC] Load Param: [MSDC] SpeedMode : 0x00000005. [MSDC] K_IOCON : 0x02000008. [MSDC] K_PAD_TUNE0 : 0x003f2000. [MSDC] K_PAD_TUNE1 : 0x00280000. [MSDC] K_PATCH_BIT0 : 0x403c0047. [MSDC] K_PATCH_BIT1 : 0xfffe4640. [MSDC] K_PATCH_BIT2 : 0x0408180f. [MSDC] K_EMMC50_CFG0 : 0x00288832. [MSDC] K_DAT_RD_DLY0 : 0x01010101. [MSDC] K_DAT_RD_DLY1 : 0x01010101. [MSDC] K_DAT_RD_DLY2 : 0x00000000. [MSDC] K_DAT_RD_DLY3 : 0x00000000. [MSDC] K_EMMC50_PAD_DS_TUNE : 0x00014029. [MSDC] K_EMMC50_PAD_CMD_TUNE : 0x00000000. [MSDC] K_EMMC50_PAD_DAT01_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT23_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT45_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT67_TUNE: 0x00000000. [MSDC] check autok done. speed mode 1 ,clock 25 [MSDC] Set Bus Clock as HS0(MHz) Success!,src 0 ,mode 0, div 16 [MSDC] Set Bus Clock as HS50(MHz) Success!,src 3 ,mode 0, div 2 [MSDC] Set Bus Clock as HS400(MHz) Success!,src 3 ,mode 3, div 0 [MSDC] Set driving: CLK 7 ,CMD 7, DAT 9 [MSDC] Set device to HS400 mode successful! [MSDC] Loader apply autok param done. [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- Support network!. 1st MAC in EEP is valid (68:07:0a:4a:66:a5) 1st : (68:07:0a:4a:66:a5) 2nd : (68:07:0a:4a:66:a5) POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress Boot reason: Watch dog0 reset (0x1000000) !![OBR-nonAC]nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]nothing happened. LOADER_MtkEnvInitFunc: PDWNC_ReadWakeupReason = 32 LOADER_MtkEnvInitFunc: ui1_reboot_event_detail = 8 LOADER_MtkEnvInitFunc: TV reboot by watch dog, ui1_tpvEnableQHB is 0 system was rebooted by external reboot Remove Quiet Boot misc control in eeprom when Watchdog reason. [IRRX_InitMtkIrRegSetup]SetRC5WakeupKey - Temporary comment IR DATA register : 0x 0 T8032 init A/C on case loader stage... Load T8032 FW (addr: 0x40e20c88, size: 28410)success!! T8032 FW version: 7 T8032 change to loader stage... LDR_FlashCopy 0x4000f010 0x88680 0x80 POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress [OBR-nonAC]nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]nothing happened. CC_PHP_SUPPORT_LOADER_CONSOLE_LOCK defined Uart Rx disabled [OBR]Is OBR triggered?. NVM_FSR_RECOVERY_MODE_ADDRESS=2 [_LdrDetermineEnterStandby 432] not PDWNC_WAKE_UP_REASON_AC_POWER [UPG upgrade ~ not PDWNC_WAKE_UP_REASON_AC_POWER] u1SlicneUpgradeStatus = 0 PDWNC_Init GPIO_MtkPowerOnFunc: ui4_SilentRebootEepAddr = 0xa1c GPIO_MtkPowerOnFunc: ui4_EnableQHBEepAddr = 0xa10 GPIO_MtkPowerOnFunc: ui4_FullStandbyCtrEepAddr = 0xa16 GPIO_MtkPowerOnFunc: normal cold boot ui1_silent_reboot = 0, ui1_tpvEnableQHB = 0, uil_FullStandbyCtr = 0 GPIO_MtkPowerOnFunc: After check ui1_silent_reboot, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: not QUIET_HOT_BOOT ui4_RedLedBriEepAddr : 0x317b use NVM LEDdutyControl value u1RedLedBriValue : 45 [GPIO_MtkPowerOnFunc 2102] u1_factory_mode = 0 [GPIO_MtkPowerOnFunc 2121] ui4_CtnEepAddr = 0x980 [GPIO_MtkPowerOnFunc 2123] CTN = 65PUS8505/12 [GPIO_MtkPowerOnFunc 2153] start led sine wave blinking [GPIO_MtkPowerOnFunc 2165] Not PD9000 model, no need to set PDEL light switch FPGA-reset-pin:137 GPIO_MtkPowerOnFunc: efrcpowerGpio=256 GPIO_MtkPowerOnFunc: Power On FRC rDtvCfg.u1Flags4 = 0, PDWNC_ReadWakeupReason() = 32 GPIO_MtkPowerOnFunc: After FRC power, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: eResetfrcGpio is not available The init function of this module is NULL The init function of this module is NULL USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. ui4_CtnEepAddr = 0x980 CTN = 65PUS8505/12 u4BmpWidthTopBlack:848,u4BmpHeightTopBlack:422, u4BmpSizeTopBlack:1431424 u4BmpWidthMidBlack:848,u4BmpHeightMidBlack:196, u4BmpSizeMidBlack:664832 puDstAddress:0xc8400000 puBmpAddress:0x40defe40 u4ColorMode:0xe u4BmpWidth:848 u4BmpHeight:236 u4BmpSizePhilipsLogo:800512 u4DstAddressPhilipsLogo:0xc855d780 Display 0x40e5b5e0 background:0x00000000 Panel ID is 34. Panel ID 34 writing is done... vDrvResetVOPLLFlowFlag ###VbyOne VOPLLInit finsih######VbyOne VOPLLSet finsih###[SA7] _fgVopllUseDDDS = True [LVDS] VOPLL Initialize successful ! LDR_OsdDisplay(14, 0xc8400000, 848, 236) Color:14 BmpAddr:0xc8400000 Width:848 Height:1080 [OSD]OSD_BASE_SetPlaneSwitchOrder: OSD plane order[3,2,1] OSD_BASE_GetDisplayWidth upHaderAddr = 0xc9b80000, upDisAddr= 0xc9b81000 Panel 3840 x 2160 *************u4BmpPitch=3392****************** u4OutWidth=848,u4OutHeight=1080,u4OutX=536,u4OutY=0. [OSD]OSD_PLA_Enable: plane:2, enable:1 u1NVMFSRRecoveryMode = 0x2 ui_HW_AUD_BW = 0 ui_HW_DISPLAY_TECHNOLOGY = 0 not OLED set or in recovery, no need to extends 5 seconds display for OLED philips logo LDR_CheckWeakSymbol_mtk. [LDR]_factoryCmdUpgradeByFunctionType_init is called [LDR] ui4_upgradeDeviceTypeAddr : 0x7200 [LDR] ui1_upgradeDeviceType : 0x0 [LDR] ui1_functionType : 0xff [LDR]_factoryCmdUpgradeByFunctionType_isSkipUpgradeEnabled return FALSE Do USB upgrade [UFRC] NVM 0x317c[0x0], 0x97d[0x0] u1USBBlock = 0x42009740 [yl] usb_poll loop:0, controller->devices[0]:0x41e00340 xhci xhci_rh_hub_status_changed: 0x10, changed:1 generic_hub: Port change at 4 generic_hub: Attachment at port 4 generic_hub: Success at port 4 highspeed device xhci_post_command: Command 9 (@0x41d00040) xhci_handle_event: Port Status Change Event for 4: 1 xhci_handle_event: Port Status Change Event for 4: 1 xhci_set_address: Enabled slot 1 xhci_post_command: Command 11 (@0x41d00050) xhci_set_address: Addressed device 1 (USB: 1) xhci_post_command: Command 13 (@0x41d00060) xhci_post_command: Handling LINK pointer (@0x41d00070) * found device (0xabcd:0x1234, USB 2.0, MPS0: 64) device has 1 configurations device has 1 interfaces Interface 0: class 0x8, sub 0x6. proto 0x50 #Endpoint 1 (out), max packet size 200, type bulk #Endpoint 1 (in), max packet size 200, type bulk xhci_finish_ep_config: Filling epctx (@0x41d22060) xhci_finish_ep_config: Filling epctx (@0x41d22080) xhci_finish_device_config: config_id: 1 xhci_post_command: Command 12 (@0x41d00040) xhci_finish_device_config: Endpoints configured Class: MSC usb set_address ok;device address := 1 it uses SCSI transparent command set it uses Bulk-Only Transport protocol using endpoint 81 as in, 1 as out has 1 luns Waiting for device to become ready...ok. Reading capacity of mass storage device. 7864320 512-byte sectors (4026 MB) usb_msc_init OK detect the usb device stop to poll. [yl] usb_poll loop:1, controller->devices[1]:0x4200a840 Waiting for device to become ready...ok. Reading capacity of mass storage device. 7864320 512-byte sectors (4026 MB) Find msc device USB DETECT Find USB device on U3 port. prLdrData->rDtvCfg.u1Upgrade_Ext :0x0 _fgDeviceType :0x0 Wait USB medium to be mounted... /dev is created. /mnt is already existed. That is OK. /dev/usb is created. /mnt/usb_0 is created. /dev/usb_0 is mounted as /mnt/usb_0. [LDR]Factory Request: 0x0, 0xff, 0, 0 FWUUTPV Upgrade @@eLoadeepromSetFileNameFun [LDR]bLdrUsbUpgradeDebug := 1 [LDR] ////////////////////////////////////check TPV file name format start [LDR]ac_usbFileName := . [LDR]e_fileType := 12 [LDR]ac_usbFileName := .. [LDR]e_fileType := 12 [LDR]ac_usbFileName := System Volume Information [LDR]e_fileType := 12 [LDR]ac_usbFileName := LOST.DIR [LDR]e_fileType := 12 [LDR]ac_usbFileName := Android [LDR]e_fileType := 12 [LDR]ac_usbFileName := autorun.upg [LDR]e_fileType := 12 [LDR]b_Standard_pkg_found == 0! [LDR]b_Standard_NVM_found == 0! [LDR]b_cust_pkg_found == 0! [LDR]b_cust_nvm_found == 0! [LDR]_szFileName == upgrade.pkg! [LDR]////////////////////////////////////ui1_lookup_count := 0 [LDR]b_Standard_pkg_found and b_Standard_NVM_found are both FALSE [LDR]ac_usbFileName := . [LDR]e_fileType := 12 [LDR]ac_usbFileName := .. [LDR]e_fileType := 12 [LDR]ac_usbFileName := System Volume Information [LDR]e_fileType := 12 [LDR]ac_usbFileName := LOST.DIR [LDR]e_fileType := 12 [LDR]ac_usbFileName := Android [LDR]e_fileType := 12 .[LDR]ac_usbFileName := autorun.upg [LDR]e_fileType := 12 [LDR]b_Standard_pkg_found == 0! [LDR]b_Standard_NVM_found == 0! [LDR]b_cust_pkg_found == 0! [LDR]b_cust_nvm_found == 0! [LDR]_szFileName == upgrade.pkg! [LDR]////////////////////////////////////ui1_lookup_count := 1 [LDR]b_Standard_pkg_found and b_Standard_NVM_found are both FALSE [LDR] ////////////////////////////////////check TPV file name format end [LDR]b_Standard_NVM_found and b_cust_nvm_found are both FALSE ... Error: Open file upgrade.pkg fail, Error: No valid upgrade file found, USB upgrade stop [CMain 1321][OLED Tcon error handle]display_techonlogy = 0 [CMain 1325][OLED Tcon error handle] Not OLED Panel. LDR_PostInit _LOADER_ResetWiFi_2nd _LOADER_EnableCI5VPower Flash load lzhs header from 0x100000 to dram(0x4206b350), size=2048 Decompression uboot to 0x41800000... Flash load image from 0x100000 to dram(0x4206b350), size=0x69f03 LZHS start LZHS done Starting image... U-Boot 2011.12.12 (Apr 15 2022 - 15:30:24) Total ( 1 ) DRAM Channels. Total DRAM for kernel: 2 GiB # Channel-A DRAM Size: 4096 MB. WARNING: Caches not enabled MMC: [MSDC] Uboot max clock 400000000 [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] HOST 1, rca 0x1 [MSDC] Set DMA Mode! [MSDC] id1:A7AD5206 id2:C6224A54 [MSDC] Uboot share parameters with loader. [MSDC] Load Param SpeedMode : 0x5. : 0 msdcgpio=76,-1,-1,176,-1,-1, [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 0 (BIM_increaseCrashCounter) write ok [crash count] WakeupReason is not PDWNC_WAKE_UP_REASON_AC_POWER, counter accumulate 1 [crash count] count = 1 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: enter normal mode! pmisc_msg: enter normal mode! ###########################i4_misc_val==0x0000 ###########################i4QueryRet==0x0000 ###########################i4ReadRet==0x0000 ###########################u4Addr==0x0a18 ###########################u4Val==0x0000 ###########################Final u4Val==0x0000 Env_common.c/env_add_adb_support read EEPROM ADB Support = 0 env_add_bootreason: ui1_reboot_event_detail = 8 env_add_bootreason: no match case env_add_bootreason: set write ok env_add_bootreason: set 0 env_add_bootreason: ui1_reboot_event_detail = 0 (read back) [Panel Type] :0x0 [Panel Type] Non-OLED wifi dat cfg = [0] msdcautok=0x2000008,0x3f2000,0x280000,0x403c0047,0xfffe4640,0x408180f,0x288832,0x1010101,0x1010101,0x0,0x0,0x14029,0x0,0x0,0x0,0x0,0x0 loaderlogo=0x0@0x0 ...=====PMIC I2C Param=====... mt53xxregulator=198:2:3:4:1:600:1500:1000:4:0:200:5:6:16:1:700:1500:1000:4:1: In: serial Out: serial Err: serial pmisc_msg: [zzuu]test uboot loader B new flow. [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 1 (BIM_increaseCrashCounter) write ok [crash count] WakeupReason is not PDWNC_WAKE_UP_REASON_AC_POWER, counter accumulate 1 [crash count] count = 2 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: enter normal mode! [main_loop][490] 0 ### main_loop: bootcmd="eboot boot" Hit any key to stop autoboot: 0 ###### Android Verify Boot 2.0 ###### The requested partitions: [boot] [dtbo] [tzbp] @@ Trying to verify slot _b --ENTER RPMB-- -- set count success -- write ok -- set count success -- -- set count success -- write ok -- set count success -- --EXIT RPMB-- System will boot from slot: _b ## AVB2.0 append extra bootargs: dm="1 system none ro 1,0 4817320 verity 1 179:46 179:46 4096 4096 602165 602165 sha1 16458f7ed1cb6ffdf026841bdff9584c4c0414ed 80b418d5e89df9e12bde3d86f4a3b465c4445f5f3067f5e6c588f51a1da072ba 10 restart_on_corruption ignore_zero_blocks use_fec_from_device 179:46 fec_roots 2 fec_blocks 606908 fec_start 606908" root=/dev/dm-0 androidboot.vbmeta.device=179:9 androidboot.vbmeta.avb_version=1.0 androidboot.vbmeta.device_state=locked androidboot.vbmeta.hash_alg=sha256 androidboot.vbmeta.size=16384 androidboot.vbmeta.digest=8b774890f5b9cf8b8890c46cc194ea1869f5fbf4c8823f311c46034f9cab5fdd androidboot.veritymode=enforcing Boot/Recovery image header version: 1 Boot state is: Green ! signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x49583358,dst=0xfa610000,psize=0x61b000,lsize=0x1cd54f,chk=0xba ## Loading image from partition: r20_b signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x4991dff0,dst=0xf9600000,psize=0x4a0d8,lsize=0x2b83b,chk=0xd1 ## Loading image from partition: r21_b signature verification is OK ## Plaintext img, src=0x49d1e010,dst=0xf9a00000,psize=0x0,lsize=0x0,chk=0x0 ## Loading image from partition: 3dlut_b signature verification is OK ## Plaintext img, src=0x4a11e020,dst=0xfa200000,psize=0x0,lsize=0x0,chk=0x0 ## Booting kernel from Legacy Image at 48043340 ... ## Flattened Device Tree from Legacy Image at 48043340 Booting using the fdt blob at 0x47800000 Uncompressing Kernel Image ... OK reserving fdt memory region: addr=0 size=10000 Applying the overlay fdt of index: 0 ... OK ## boot_ufdt_overlay: Merge DTBO to main DTB done, takes 13.583 ms Loading Device Tree to 463f5000, end 463ff220 ... OK ## Transferring control to Linux (at address fa610000) ... ## Linux start= 0x040000000 size= 0x07d264000 ... ## Linux start= 0x100000000 size= 0x000000000 ... ## uBoot bootargs size is limited: 4096 Bytes, current size: 2593 Bytes. Starting kernel ... [ATF][ 0.000000]LK boot argument [ATF][ 0.002870]atf_magic=0x4d415446 [ATF][ 0.004736]tee_support=0x1 [ATF][ 0.006385]tee_entry=0xfa635000 [ATF][ 0.008251]tee_boot_arg_addr=0x0 [ATF][ 0.010160]atf_log_port=0x0 [ATF][ 0.011853]atf_log_baudrate=0x0 [ATF][ 0.013719]atf_log_buf_start=0x0 [ATF][ 0.015628]atf_log_buf_size=0x0 [ATF][ 0.017494]atf_aee_debug_buf_start=0x0 [ATF][ 0.019664]atf_aee_debug_buf_size=0x0 [ATF][ 0.021790]atf_irq_num=0 [ATF][ 0.023353]BL33_START_ADDRESS=0x40080000 [ATF][ 0.025609]bl31_setup [ATF][ 0.027041]RESET_TO_BL31 [ATF][ 0.029168]BL31 Built : [ATF][ 0.030654]mtk: platform_setup_pm [ATF][ 0.032512][BL31] tvtee_setup! [ATF][ 0.034394][BL31] Jump to secure OS for initialization! TZ_Check_KernelStatus start TZ status=0x1 welcome to lk/MP boot args 0x0 0x0 0x0 0x0 HKDF-SHA256 Verification: PASS initializing trusty (Built: ) Initializing Trusted OS SMC handler Trusty Init Done, Jump to linux Kernel 4294967294 [ATF][ 0.059933]Kernel is 64Bit [ATF][ 0.062783]pc=0x40080000, r0=0x463f5000, r1=0x16ff,r2=0x0 [ATF][ 0.065735]KERNEL_AT_NON-SECURE! [ATF][ 0.067686][BL31] Final dump! SvcEx_SVP_AddKernelProtect u4Start = 40080000, u4End = 40920000 SvcEx_SVP_AddKernelProtect u4Start = 40920000, u4End = bd264000 read data: Addr failure, 0 read data: Addr failure, 0 read data: Addr failure, 0 fs_init_from_super:310: loaded super block version 2 super_block_valid:155: bad magic, 0x20708acbf2780f98 super_block_valid:155: bad magic, 0x20708acbf2780f98 fs_init_from_super:313: clear requested, create empty Boot- Scramble value: 0x00000056 .65 package [CH= 0 Calibration done] [CH= 1 Calibration done] [CH= 2 Calibration done] [CH= 3 Calibration done] # Init_DRAM take 309 ms. Dram size:2 Start Pmain EMMC boot load preloader2 image ... SrcOffset:0x00010000 DstAddr:0x409fffb0 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 CID:0xbac9a7ad :0x5206c622 :0x4a544434 :0x15010041 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 plain size:0x0001a8f0 LZHS size:0x0000f2fc image size:0x0000f450 LZHS checksum:0x00000080 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS dec begin LZHS ok load preloader2 image ok u4BSSLimit:0x0001f450 MsdcAccuVect(CMD):0x00000100 LZHS addr:0x40100040 plain size:0x0015e850 LZHS size:0x00068e91 LZHS checksum:0x000000cb MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS begin LZHS ok loader ver check ... [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- [preloader2_main.c:150] psVersion = 0x40e5e822 image version(header addr is 0x40cfffa0): 0.0.0 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- record version: 0.0.0 comparing loader ver with record return 0 loader ver check done Boot Start Lmain [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 MT5887 Boot Loader v0.9 setup_usb_host: Setting up USB HOST controller... mt53xx_u3phy_ports_enable: mt53xx_u3phy_ports_enable u2p:3, u3p:1 mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(0) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(1) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(2) setup_usb_host: phy power-on done. xhci_init: regbase: 0x100c4000 xhci_init: opreg: 0x100c4020 xhci_init: caplen: 0x20 xhci_init: rtsoff: 0x600 xhci_init: dboff: 0x800 xhci_init: hciversion: 1.16 xhci_init: context size: 32 xhci_init: pagesize: 0x1000 xhci_init: xhci->dma_buffer = 0x41d10000 xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reset: Resetting controller... ok. xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reinit: [yl]xhci->ev_ring_table[0].seg_base_lo:0x41d00100, seg_base_hi:0x0, seg_size:0x8 xhci_reinit: [yl]xhci->hcrreg->intrrs[0].erstsz:0x1, erstba_lo :0x41d001c0, erstba_hi:0x0 xHCI: root hub init done(ports:4) dev 0x41e00340 MUSB3_init OK ++ USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. [MSDC] enter into HS400 Mode, max dtr 200000000 [MSDC] Saved info: flag 0xaabbccdd,speedmode 5. [MSDC] Cur info: flag 0xaabbccdd, speedmode 5. [MSDC] The information is match, Alrady run autok before, ignore this time [MSDC] Load Param: [MSDC] SpeedMode : 0x00000005. [MSDC] K_IOCON : 0x02000008. [MSDC] K_PAD_TUNE0 : 0x003f2000. [MSDC] K_PAD_TUNE1 : 0x00280000. [MSDC] K_PATCH_BIT0 : 0x403c0047. [MSDC] K_PATCH_BIT1 : 0xfffe4640. [MSDC] K_PATCH_BIT2 : 0x0408180f. [MSDC] K_EMMC50_CFG0 : 0x00288832. [MSDC] K_DAT_RD_DLY0 : 0x01010101. [MSDC] K_DAT_RD_DLY1 : 0x01010101. [MSDC] K_DAT_RD_DLY2 : 0x00000000. [MSDC] K_DAT_RD_DLY3 : 0x00000000. [MSDC] K_EMMC50_PAD_DS_TUNE : 0x00014029. [MSDC] K_EMMC50_PAD_CMD_TUNE : 0x00000000. [MSDC] K_EMMC50_PAD_DAT01_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT23_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT45_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT67_TUNE: 0x00000000. [MSDC] check autok done. speed mode 1 ,clock 25 [MSDC] Set Bus Clock as HS0(MHz) Success!,src 0 ,mode 0, div 16 [MSDC] Set Bus Clock as HS50(MHz) Success!,src 3 ,mode 0, div 2 [MSDC] Set Bus Clock as HS400(MHz) Success!,src 3 ,mode 3, div 0 [MSDC] Set driving: CLK 7 ,CMD 7, DAT 9 [MSDC] Set device to HS400 mode successful! [MSDC] Loader apply autok param done. [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- Support network!. 1st MAC in EEP is valid (68:07:0a:4a:66:a5) 1st : (68:07:0a:4a:66:a5) 2nd : (68:07:0a:4a:66:a5) POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress Boot reason: A/C power on!!Servoadc Channel1 frist update!!!, value is 612 Servoadc Channel1 finish update!!!, value is 612 [OBR]triggered [OBR]Enter recovery mode to wipe data and then switch boot slot! [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]u4ServoADCChannelValue: 615 [TCON-RESET]nothing happened. LOADER_MtkEnvInitFunc: PDWNC_ReadWakeupReason = 6 LOADER_MtkEnvInitFunc: AC_POWER, set ui4_EnableQHBEepAddr to 0 LOADER_MtkEnvInitFunc : ui4_EmmcFirstBootEepAddr = 0x97a LOADER_MtkEnvInitFunc: [QHB] u1EmmcFirstBoot = 0x1LOADER_MtkEnvInitFunc: [QHB] It is not EmmcFirstBoot, do no cation with QHB. LOADER_MtkEnvInitFunc: set ui1_reboot_event_detail to 0 LOADER_MtkEnvInitFunc: ui1_reboot_event_detail = 0 (read back) Remove Quiet Boot misc control in eeprom when Watchdog reason. [IRRX_InitMtkIrRegSetup]SetRC5WakeupKey - Temporary comment IR DATA register : 0x 0 T8032 init A/C on case loader stage... Load T8032 FW (addr: 0x40e20c88, size: 28410)success!! T8032 FW version: 7 T8032 change to loader stage... LDR_FlashCopy 0x4000f010 0x88680 0x80 POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress [OBR]triggered [OBR]Enter recovery mode to wipe data and then switch boot slot! [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]u4ServoADCChannelValue: 614 [TCON-RESET]nothing happened. CC_PHP_SUPPORT_LOADER_CONSOLE_LOCK defined Uart Rx disabled [OBR]Is OBR triggered?. NVM_FSR_RECOVERY_MODE_ADDRESS=1 LOADER_MtkEnvInitFunc: ui4_fullstandbyctrlEepAddr = 0xa16 LOADER_MtkEnvInitFunc: ui1_tpvfullstandbyctrl = 0 [_LdrDetermineEnterStandby 424] PDWNC_WAKE_UP_REASON_AC_POWER continue bootup[UPG upgrade ~ PDWNC_WAKE_UP_REASON_AC_POWER] u1SlicneUpgradeStatus = 0 Org:0x30 Flags:0x30 Before u1EmmcFirstBoot = 0x1 Do not need to configure boot flag After EmmcFirstBoot Org:0x30 Flags:0x30 After u1EmmcFirstBoot = 0x1PDWNC_Init GPIO_MtkPowerOnFunc: ui4_SilentRebootEepAddr = 0xa1c GPIO_MtkPowerOnFunc: ui4_EnableQHBEepAddr = 0xa10 GPIO_MtkPowerOnFunc: ui4_FullStandbyCtrEepAddr = 0xa16 GPIO_MtkPowerOnFunc: normal cold boot ui1_silent_reboot = 0, ui1_tpvEnableQHB = 0, uil_FullStandbyCtr = 0 GPIO_MtkPowerOnFunc: After check ui1_silent_reboot, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: not QUIET_HOT_BOOT ui4_RedLedBriEepAddr : 0x317b use NVM LEDdutyControl value u1RedLedBriValue : 45 [GPIO_MtkPowerOnFunc 2102] u1_factory_mode = 0 [GPIO_MtkPowerOnFunc 2121] ui4_CtnEepAddr = 0x980 [GPIO_MtkPowerOnFunc 2123] CTN = 65PUS8505/12 [OBR]Blinking [GPIO_MtkPowerOnFunc 2165] Not PD9000 model, no need to set PDEL light switch FPGA-reset-pin:137 GPIO_MtkPowerOnFunc: efrcpowerGpio=256 GPIO_MtkPowerOnFunc: Power On FRC rDtvCfg.u1Flags4 = 0, PDWNC_ReadWakeupReason() = 6 GPIO_MtkPowerOnFunc: After FRC power, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: eResetfrcGpio is not available The init function of this module is NULL The init function of this module is NULL USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. ui4_CtnEepAddr = 0x980 CTN = 65PUS8505/12 u4BmpWidthTopBlack:848,u4BmpHeightTopBlack:422, u4BmpSizeTopBlack:1431424 u4BmpWidthMidBlack:848,u4BmpHeightMidBlack:196, u4BmpSizeMidBlack:664832 puDstAddress:0xc8400000 puBmpAddress:0x40defe40 u4ColorMode:0xe u4BmpWidth:848 u4BmpHeight:236 u4BmpSizePhilipsLogo:800512 u4DstAddressPhilipsLogo:0xc855d780 Display 0x40e5b5e0 background:0x00000000 Panel ID is 34. Panel ID 34 writing is done... vDrvResetVOPLLFlowFlag ###VbyOne VOPLLInit finsih######VbyOne VOPLLSet finsih###[SA7] _fgVopllUseDDDS = True [LVDS] VOPLL Initialize successful ! LDR_OsdDisplay(14, 0xc8400000, 848, 236) Color:14 BmpAddr:0xc8400000 Width:848 Height:1080 [OSD]OSD_BASE_SetPlaneSwitchOrder: OSD plane order[3,2,1] OSD_BASE_GetDisplayWidth upHaderAddr = 0xc9b80000, upDisAddr= 0xc9b81000 Panel 3840 x 2160 *************u4BmpPitch=3392****************** u4OutWidth=848,u4OutHeight=1080,u4OutX=536,u4OutY=0. [OSD]OSD_PLA_Enable: plane:2, enable:1 u1NVMFSRRecoveryMode = 0x2 ui_HW_AUD_BW = 0 ui_HW_DISPLAY_TECHNOLOGY = 0 not OLED set or in recovery, no need to extends 5 seconds display for OLED philips logo LDR_CheckWeakSymbol_mtk. [LDR]_factoryCmdUpgradeByFunctionType_init is called [LDR] ui4_upgradeDeviceTypeAddr : 0x7200 [LDR] ui1_upgradeDeviceType : 0x0 [LDR] ui1_functionType : 0xff [LDR]_factoryCmdUpgradeByFunctionType_isSkipUpgradeEnabled return FALSE Do USB upgrade [UFRC] NVM 0x317c[0x0], 0x97d[0x0] u1USBBlock = 0x42809740 [yl] usb_poll loop:0, controller->devices[0]:0x41e00340 xhci xhci_rh_hub_status_changed: 0x0, changed:0 [yl] usb_poll loop:1, controller->devices[1]:0x0 [yl] usb_poll loop:2, controller->devices[2]:0x0 [yl] usb_poll loop:3, controller->devices[3]:0x0 [yl] usb_poll loop:4, controller->devices[4]:0x0 [yl] usb_poll loop:5, controller->devices[5]:0x0 [yl] usb_poll loop:6, controller->devices[6]:0x0 [yl] usb_poll loop:7, controller->devices[7]:0x0 [yl] usb_poll loop:8, controller->devices[8]:0x0 [yl] usb_poll loop:9, controller->devices[9]:0x0 No U3 USB device. prLdrData->rDtvCfg.u1Upgrade_Ext :0x0 _fgDeviceType :0x1 USB upgrade stop [CMain 1321][OLED Tcon error handle]display_techonlogy = 0 [CMain 1325][OLED Tcon error handle] Not OLED Panel. LDR_PostInit _LOADER_ResetWiFi_2nd _LOADER_EnableCI5VPower Flash load lzhs header from 0x100000 to dram(0x4280a750), size=2048 Decompression uboot to 0x41800000... Flash load image from 0x100000 to dram(0x4280a750), size=0x69f03 LZHS start LZHS done Starting image... U-Boot 2011.12.12 (Apr 15 2022 - 15:30:24) Total ( 1 ) DRAM Channels. Total DRAM for kernel: 2 GiB # Channel-A DRAM Size: 4096 MB. WARNING: Caches not enabled MMC: [MSDC] Uboot max clock 400000000 [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] HOST 1, rca 0x1 [MSDC] Set DMA Mode! [MSDC] id1:A7AD5206 id2:C6224A54 [MSDC] Uboot share parameters with loader. [MSDC] Load Param SpeedMode : 0x5. : 0 msdcgpio=76,-1,-1,176,-1,-1, [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 0 (BIM_increaseCrashCounter) Boot reason: A/C power on!! [crash count] WakeupReason is PDWNC_WAKE_UP_REASON_AC_POWER, Not accumulate counter [crash count] count = 0 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: boot-recovery before enter recovery,disable osd1 and osd2====== pmisc_msg: boot-recovery before enter recovery,disable osd1 and osd2====== ###########################i4_misc_val==0x0001 ###########################i4QueryRet==0x0000 ###########################i4ReadRet==0x0000 ###########################u4Addr==0x0a18 ###########################u4Val==0x0000 Recovery mode detected, overwrite UART_TX_ENABLE to on ###########################Final u4Val==0x0001 Env_common.c/env_add_adb_support read EEPROM ADB Support = 0 [Panel Type] :0x0 [Panel Type] Non-OLED wifi dat cfg = [0] msdcautok=0x2000008,0x3f2000,0x280000,0x403c0047,0xfffe4640,0x408180f,0x288832,0x1010101,0x1010101,0x0,0x0,0x14029,0x0,0x0,0x0,0x0,0x0 loaderlogo=0x0@0x0 ...=====PMIC I2C Param=====... mt53xxregulator=198:2:3:4:1:600:1500:1000:4:0:200:5:6:16:1:700:1500:1000:4:1: In: serial Out: serial Err: serial pmisc_msg: [zzuu]test uboot loader B new flow. [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 0 (BIM_increaseCrashCounter) Boot reason: A/C power on!! [crash count] WakeupReason is PDWNC_WAKE_UP_REASON_AC_POWER, Not accumulate counter [crash count] count = 0 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: boot-recovery before enter recovery,disable osd1 and osd2====== [main_loop][490] 1 [main_loop][493] 1 [main_loop][495] clear counter before enter recovery mode ! write ok Got env for recovery_cmd ### main_loop: bootcmd="eboot recovery" Hit any key to stop autoboot: 0 ###### Android Verify Boot 2.0 ###### The requested partitions: [boot] [dtbo] [tzbp] @@ Trying to verify slot _b --ENTER RPMB-- -- set count success -- write ok -- set count success -- -- set count success -- write ok -- set count success -- --EXIT RPMB-- System will boot from slot: _b ## AVB2.0 append extra bootargs: dm="1 system none ro 1,0 4817320 verity 1 179:46 179:46 4096 4096 602165 602165 sha1 16458f7ed1cb6ffdf026841bdff9584c4c0414ed 80b418d5e89df9e12bde3d86f4a3b465c4445f5f3067f5e6c588f51a1da072ba 10 restart_on_corruption ignore_zero_blocks use_fec_from_device 179:46 fec_roots 2 fec_blocks 606908 fec_start 606908" root=/dev/dm-0 androidboot.vbmeta.device=179:9 androidboot.vbmeta.avb_version=1.0 androidboot.vbmeta.device_state=locked androidboot.vbmeta.hash_alg=sha256 androidboot.vbmeta.size=16384 androidboot.vbmeta.digest=8b774890f5b9cf8b8890c46cc194ea1869f5fbf4c8823f311c46034f9cab5fdd androidboot.veritymode=enforcing Boot/Recovery image header version: 1 Boot state is: Green ! signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x49583358,dst=0xfa610000,psize=0x61b000,lsize=0x1cd54f,chk=0xba ## Loading image from partition: r20_b signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x4991dff0,dst=0xf9600000,psize=0x4a0d8,lsize=0x2b83b,chk=0xd1 ## Loading image from partition: r21_b signature verification is OK ## Plaintext img, src=0x49d1e010,dst=0xf9a00000,psize=0x0,lsize=0x0,chk=0x0 ## Loading image from partition: 3dlut_b signature verification is OK ## Plaintext img, src=0x4a11e020,dst=0xfa200000,psize=0x0,lsize=0x0,chk=0x0 ## Booting kernel from Legacy Image at 48043340 ... ## Flattened Device Tree from Legacy Image at 48043340 Booting using the fdt blob at 0x47800000 Uncompressing Kernel Image ... OK reserving fdt memory region: addr=0 size=10000 Applying the overlay fdt of index: 0 ... OK ## boot_ufdt_overlay: Merge DTBO to main DTB done, takes 13.580 ms Loading Device Tree to 463f5000, end 463ff220 ... OK ## Transferring control to Linux (at address fa610000) ... ## Linux start= 0x040000000 size= 0x07d264000 ... ## Linux start= 0x100000000 size= 0x000000000 ... ## uBoot bootargs size is limited: 4096 Bytes, current size: 2593 Bytes. Starting kernel ... [ATF][ 0.000000]LK boot argument [ATF][ 0.002868]atf_magic=0x4d415446 [ATF][ 0.004735]tee_support=0x1 [ATF][ 0.006384]tee_entry=0xfa635000 [ATF][ 0.008250]tee_boot_arg_addr=0x0 [ATF][ 0.010159]atf_log_port=0x0 [ATF][ 0.011852]atf_log_baudrate=0x0 [ATF][ 0.013718]atf_log_buf_start=0x0 [ATF][ 0.015627]atf_log_buf_size=0x0 [ATF][ 0.017493]atf_aee_debug_buf_start=0x0 [ATF][ 0.019663]atf_aee_debug_buf_size=0x0 [ATF][ 0.021789]atf_irq_num=0 [ATF][ 0.023351]BL33_START_ADDRESS=0x40080000 [ATF][ 0.025608]bl31_setup [ATF][ 0.027040]RESET_TO_BL31 [ATF][ 0.029167]BL31 Built : [ATF][ 0.030653]mtk: platform_setup_pm [ATF][ 0.032511][BL31] tvtee_setup! [ATF][ 0.034393][BL31] Jump to secure OS for initialization! TZ_Check_KernelStatus start TZ status=0x1 welcome to lk/MP boot args 0x0 0x0 0x0 0x0 HKDF-SHA256 Verification: PASS initializing trusty (Built: ) Initializing Trusted OS SMC handler Trusty Init Done, Jump to linux Kernel 4294967294 [ATF][ 0.059939]Kernel is 64Bit [ATF][ 0.062788]pc=0x40080000, r0=0x463f5000, r1=0x16ff,r2=0x0 [ATF][ 0.065741]KERNEL_AT_NON-SECURE! [ATF][ 0.067692][BL31] Final dump! [ 0.000000] WARNING: x1-x3 nonzero in violation of boot protocol: [ 0.000000] x1: 00000000000016ff [ 0.000000] x2: 0000000000000000 [ 0.000000] x3: 0000000000000000 [ 0.000000] This indicates a broken bootloader or old kernel [ 0.000000] msdc_part_enc -> 2,3,4,12,13,18,27,44,48,53 [ 0.000000] (yjdbg) Android recovery mode [ 0.275097] mediatek-mt5887-pinctrl 1000d000.pinctrl: pinctrl not use syscon regmap [ 0.275132] mediatek-mt5887-pinctrl 1000d000.pinctrl: tv_reg_base is: 0xffffff8008800000 [ 0.396980] zzy : [mt65xx_u3phy_probe][679] [ 0.397324] zzy : [mt65xx_u3phy_probe][752] [ 0.397381] zzy : [mt65xx_u3phy_probe][679] [ 0.397488] zzy : [mt65xx_u3phy_probe][752] [ 0.401838] _log2usb_3init_module [ 0.401928] _log2usb_3init_module init ok [ 0.466822] mtk_usb [oc_mtk_init][381][0] [ 0.466862] mtk_usb [mtk_usboc_create_timer][298] [ 0.467555] ssusb wifi_standbypower = 0 [ 0.467610] mt53xx-u3phy 100csm_get_api_version:121: lock api version 2 0000.ssusb1-phy: init done and port base is ffffff8008202300 [ 0.467627] mt53xx-u3phy 100c0000.ssusb1-phy: init done and port base is ffffff8008206300 [ 0.467642] mt53xx-u3phy 100c0000.ssusb1-phy: init done and port base is ffffff800820a300 [ 0.467753] USB port C apply power to hdmi [ 0.471236] mediatek-mt5887-pinctrl 1000d000.pinctrl: missing pins property in node usb_jtag just return [ 0.471472] ssusb mtk wifi_standbypower = 0 [ 0.471490] 0: vbus_gpio 42,vbus_gpio_pol 1,oc_gpio 233,oc_pol 0,using 1[ 0.471501] 1: vbus_gpio 43,vbus_gpio_pol 1,oc_gpio 233,oc_pol 0,using 1 2: vbus_gpio 44,vbus_gpio_pol 1,oc_gpio 234,oc_pol 0,using 0[ 0.471520] 3: vbus_gpio 219,vbus_gpio_pol 1,oc_gpio 234,oc_pol 0,using 0 [ 0.471600] dma_mask=0xffffffffffffffff coherent_dma_mask=0xffffffffffffffff [ 0.472308] [USB] usb_set_configuration => [ 0.472866] [USB] usb_set_configuration <= [ 0.473432] [USB] usb_set_configuration => [ 0.473858] [USB] usb_set_configuration <= [ 0.474075] ssusb wifi_standbypower = 1 [ 0.474109] mt53xx-u3phy 100d0000.ssusb2-phy: init done and port base is ffffff800820d800 [ 0.474498] ssusb mtk wifi_standbypower = 1 [ 0.474574] dma_mask=0xffffffffffffffff coherent_dma_mask=0xffffffffffffffff [ 0.475310] [USB] usb_set_configuration => [ 0.475731] [USB] usb_set_configuration <= [ 0.476292] [USB] usb_set_configuration => [ 0.476696] [USB] usb_set_configuration <= [ 0.490199] mtk-msdc 1006d000.MSDC0: msdc_aes_config_init. [ 0.490444] mtk-msdc 1006d000.MSDC0: power up! [ 0.490510] mtk-msdc 1006d000.MSDC0: msdc_aes_config_init. [ 0.490548] mtk-msdc 1006d000.MSDC0: msdc_ops_switch_volt! [ 0.529292] ion_device_create num_heaps = 2 [ 0.540522] otg_wakelock_init: No USB transceiver found [ 0.545032] @mt_gpufreq_update_volt: index[1] old volt = 100000, new volt = 101800 [ 0.578796] mtk-msdc 1006d000.MSDC0: msdc_ops_switch_volt! [ 0.582374] mtk-msdc 1006d000.MSDC0: PAD_TUNE 00202000, 0. [ 0.584483] mtk-msdc 1006d000.MSDC0: phase: [map:ffffff80] [maxlen:25] [final:19] [ 0.584509] mtk-msdc 1006d000.MSDC0: Final cmd pad delay: 13 [ 0.584635] mmc_select_hs400 1196. [ 0.584704] mmc0: new HS400 MMC card at address 0001 [ 0.585239] mmcblk0: mmc0:0001 AJTD4R 14.6 GiB [ 0.585457] mmcblk0boot0: mmc0:0001 AJTD4R partition 1 4.00 MiB [ 0.585635] mmcblk0rpmb: mmc0:0001 AJTD4R partition 3 4.00 MiB [ 1.055263] init: Init cannot set 'ro.boot.linux,phandle' to ' [ 1.076041] init: waitid failed: No child processes [ 1.078156] init: Unable to set property 'ro.product.vendor.manufacturer' to 'Philips' in property file '/prop.default': Read-only property was already set [ 1.078206] init: Unable to set property 'ro.product.vendor.model' to 'TPM191E' in property file '/prop.default': Read-only property was already set [ 1.078253] init: Unable to set property 'ro.product.vendor.name' to 'PH9M_EA_5599' in property file '/prop.default': Read-only property was already set [ 1.092530] ueventd: Unable to read config file '/vendor/ueventd.rc': open() failed: No such file or directory [ 1.092600] ueventd: Unable to read config file '/odm/ueventd.rc': open() failed: No such file or directory [ 1.092718] ueventd: Unable to read config file '/ueventd.mt5887.rc': open() failed: No such file or directory [ 1.186468] ueventd: Failed to symlink /dev/block/mmcblk0p21 to /dev/block/platform/soc/1006d000.MSDC0/by-name/Panel_Table_b, which already links to: /dev/block/mmcblk0p58: File exists [ 7.302571] dtv-mod soc:dtv_SvcEx_SVP_AddKernelProtect u4Start = 40080000, u4End = 40920000 SvcEx_SVP_AddKernelProtect u4Start = 40920000, u4End = bd264000 mod@10028000: eep wp gpio num=207 pol=1 [ 7.330313] [VER: 20.00.09.02] IP Compiled at:[Oct 19 2021 08:51:59]. [ 7.330313] [ 7.330352] [pqsoccontrolR_infra_readOptionByteItem] PLF[1] FRC=[0] P5_PRO[0] DisplayID NVM=[34] MTK=[34] ISF[1] HDR[2] LS[9] TS[2] OLED[0] WCG[1] RES[2] BL[0] 100Hz[0] PNR[0] AIPQ[0] XRAY[0] [ 7.330357] IP Enter, Exit, No FRC, FRC=[0] P5_Pro[0] AiPQ[0] [ 7.330357] [ 7.330366] PqDbgTuning started [ 7.330433] IP Exit return 7 init: /recovery not specified in fstab # [ 9.328831] Recovery: "/sbin/recovery" [ 9.328876] Recovery: "--wipe_data" [ 13.305427] Recovery: "mount_upgrade exec_cmd result: 0" [ 13.339700] Recovery: "umount_upgrade exec_cmd result: 0" [ 14.030685] watchdogd: Failed to open /dev/watchdog: No such file or directory # [ 15.293614] [PTP] PTP_TEMP = 23 [ 15.293701] @mt_gpufreq_update_volt: index[0] old volt = 102500, new volt = 100600 [ 17.163015] reboot: Restarting system with command '' Boot- Scramble value: 0x00000056 .65 package [CH= 0 Calibration done] [CH= 1 Calibration done] [CH= 2 Calibration done] [CH= 3 Calibration done] # Init_DRAM take 313 ms. Dram size:2 Start Pmain EMMC boot load preloader2 image ... SrcOffset:0x00010000 DstAddr:0x409fffb0 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 CID:0xbac9a7ad :0x5206c622 :0x4a544434 :0x15010041 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 plain size:0x0001a8f0 LZHS size:0x0000f2fc image size:0x0000f450 LZHS checksum:0x00000080 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS dec begin LZHS ok load preloader2 image ok u4BSSLimit:0x0001f450 MsdcAccuVect(CMD):0x00000100 LZHS addr:0x40100040 plain size:0x0015e850 LZHS size:0x00068e91 LZHS checksum:0x000000cb MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS begin LZHS ok loader ver check ... [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- [preloader2_main.c:150] psVersion = 0x40e5e822 image version(header addr is 0x40cfffa0): 0.0.0 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- record version: 0.0.0 comparing loader ver with record return 0 loader ver check done Boot Start Lmain [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 MT5887 Boot Loader v0.9 setup_usb_host: Setting up USB HOST controller... mt53xx_u3phy_ports_enable: mt53xx_u3phy_ports_enable u2p:3, u3p:1 mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(0) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(1) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(2) setup_usb_host: phy power-on done. xhci_init: regbase: 0x100c4000 xhci_init: opreg: 0x100c4020 xhci_init: caplen: 0x20 xhci_init: rtsoff: 0x600 xhci_init: dboff: 0x800 xhci_init: hciversion: 1.16 xhci_init: context size: 32 xhci_init: pagesize: 0x1000 xhci_init: xhci->dma_buffer = 0x41d10000 xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reset: Resetting controller... ok. xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reinit: [yl]xhci->ev_ring_table[0].seg_base_lo:0x41d00100, seg_base_hi:0x0, seg_size:0x8 xhci_reinit: [yl]xhci->hcrreg->intrrs[0].erstsz:0x1, erstba_lo :0x41d001c0, erstba_hi:0x0 xHCI: root hub init done(ports:4) dev 0x41e00340 MUSB3_init OK ++ USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. [MSDC] enter into HS400 Mode, max dtr 200000000 [MSDC] Saved info: flag 0xaabbccdd,speedmode 5. [MSDC] Cur info: flag 0xaabbccdd, speedmode 5. [MSDC] The information is match, Alrady run autok before, ignore this time [MSDC] Load Param: [MSDC] SpeedMode : 0x00000005. [MSDC] K_IOCON : 0x02000008. [MSDC] K_PAD_TUNE0 : 0x003f2000. [MSDC] K_PAD_TUNE1 : 0x00280000. [MSDC] K_PATCH_BIT0 : 0x403c0047. [MSDC] K_PATCH_BIT1 : 0xfffe4640. [MSDC] K_PATCH_BIT2 : 0x0408180f. [MSDC] K_EMMC50_CFG0 : 0x00288832. [MSDC] K_DAT_RD_DLY0 : 0x01010101. [MSDC] K_DAT_RD_DLY1 : 0x01010101. [MSDC] K_DAT_RD_DLY2 : 0x00000000. [MSDC] K_DAT_RD_DLY3 : 0x00000000. [MSDC] K_EMMC50_PAD_DS_TUNE : 0x00014029. [MSDC] K_EMMC50_PAD_CMD_TUNE : 0x00000000. [MSDC] K_EMMC50_PAD_DAT01_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT23_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT45_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT67_TUNE: 0x00000000. [MSDC] check autok done. speed mode 1 ,clock 25 [MSDC] Set Bus Clock as HS0(MHz) Success!,src 0 ,mode 0, div 16 [MSDC] Set Bus Clock as HS50(MHz) Success!,src 3 ,mode 0, div 2 [MSDC] Set Bus Clock as HS400(MHz) Success!,src 3 ,mode 3, div 0 [MSDC] Set driving: CLK 7 ,CMD 7, DAT 9 [MSDC] Set device to HS400 mode successful! [MSDC] Loader apply autok param done. [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- Support network!. 1st MAC in EEP is valid (68:07:0a:4a:66:a5) 1st : (68:07:0a:4a:66:a5) 2nd : (68:07:0a:4a:66:a5) POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress Boot reason: Watch dog0 reset (0x1000000) !![OBR-nonAC]nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]nothing happened. LOADER_MtkEnvInitFunc: PDWNC_ReadWakeupReason = 32 LOADER_MtkEnvInitFunc: ui1_reboot_event_detail = 0 LOADER_MtkEnvInitFunc: TV reboot by watch dog, ui1_tpvEnableQHB is 0 TV reboot by watch dog0 reset (0x1000000) !!LOADER_MtkEnvInitFunc: set ui1_reboot_event_detail to 5 LOADER_MtkEnvInitFunc: ui1_reboot_event_detail = 5 (read back) Remove Quiet Boot misc control in eeprom when Watchdog reason. [IRRX_InitMtkIrRegSetup]SetRC5WakeupKey - Temporary comment IR DATA register : 0x 0 T8032 init A/C on case loader stage... Load T8032 FW (addr: 0x40e20c88, size: 28410)success!! T8032 FW version: 7 T8032 change to loader stage... LDR_FlashCopy 0x4000f010 0x88680 0x80 POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress [OBR-nonAC]nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]nothing happened. CC_PHP_SUPPORT_LOADER_CONSOLE_LOCK defined Uart Rx disabled [OBR]Is OBR triggered?. NVM_FSR_RECOVERY_MODE_ADDRESS=2 [_LdrDetermineEnterStandby 432] not PDWNC_WAKE_UP_REASON_AC_POWER [UPG upgrade ~ not PDWNC_WAKE_UP_REASON_AC_POWER] u1SlicneUpgradeStatus = 0 PDWNC_Init GPIO_MtkPowerOnFunc: ui4_SilentRebootEepAddr = 0xa1c GPIO_MtkPowerOnFunc: ui4_EnableQHBEepAddr = 0xa10 GPIO_MtkPowerOnFunc: ui4_FullStandbyCtrEepAddr = 0xa16 GPIO_MtkPowerOnFunc: normal cold boot ui1_silent_reboot = 0, ui1_tpvEnableQHB = 0, uil_FullStandbyCtr = 0 GPIO_MtkPowerOnFunc: After check ui1_silent_reboot, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: not QUIET_HOT_BOOT ui4_RedLedBriEepAddr : 0x317b use NVM LEDdutyControl value u1RedLedBriValue : 45 [GPIO_MtkPowerOnFunc 2102] u1_factory_mode = 0 [GPIO_MtkPowerOnFunc 2121] ui4_CtnEepAddr = 0x980 [GPIO_MtkPowerOnFunc 2123] CTN = 65PUS8505/12 [GPIO_MtkPowerOnFunc 2153] start led sine wave blinking [GPIO_MtkPowerOnFunc 2165] Not PD9000 model, no need to set PDEL light switch FPGA-reset-pin:137 GPIO_MtkPowerOnFunc: efrcpowerGpio=256 GPIO_MtkPowerOnFunc: Power On FRC rDtvCfg.u1Flags4 = 0, PDWNC_ReadWakeupReason() = 32 GPIO_MtkPowerOnFunc: After FRC power, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: eResetfrcGpio is not available The init function of this module is NULL The init function of this module is NULL USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. ui4_CtnEepAddr = 0x980 CTN = 65PUS8505/12 u4BmpWidthTopBlack:848,u4BmpHeightTopBlack:422, u4BmpSizeTopBlack:1431424 u4BmpWidthMidBlack:848,u4BmpHeightMidBlack:196, u4BmpSizeMidBlack:664832 puDstAddress:0xc8400000 puBmpAddress:0x40defe40 u4ColorMode:0xe u4BmpWidth:848 u4BmpHeight:236 u4BmpSizePhilipsLogo:800512 u4DstAddressPhilipsLogo:0xc855d780 Display 0x40e5b5e0 background:0x00000000 Panel ID is 34. Panel ID 34 writing is done... vDrvResetVOPLLFlowFlag ###VbyOne VOPLLInit finsih######VbyOne VOPLLSet finsih###[SA7] _fgVopllUseDDDS = True [LVDS] VOPLL Initialize successful ! LDR_OsdDisplay(14, 0xc8400000, 848, 236) Color:14 BmpAddr:0xc8400000 Width:848 Height:1080 [OSD]OSD_BASE_SetPlaneSwitchOrder: OSD plane order[3,2,1] OSD_BASE_GetDisplayWidth upHaderAddr = 0xc9b80000, upDisAddr= 0xc9b81000 Panel 3840 x 2160 *************u4BmpPitch=3392****************** u4OutWidth=848,u4OutHeight=1080,u4OutX=536,u4OutY=0. [OSD]OSD_PLA_Enable: plane:2, enable:1 u1NVMFSRRecoveryMode = 0x2 ui_HW_AUD_BW = 0 ui_HW_DISPLAY_TECHNOLOGY = 0 not OLED set or in recovery, no need to extends 5 seconds display for OLED philips logo LDR_CheckWeakSymbol_mtk. [LDR]_factoryCmdUpgradeByFunctionType_init is called [LDR] ui4_upgradeDeviceTypeAddr : 0x7200 [LDR] ui1_upgradeDeviceType : 0x0 [LDR] ui1_functionType : 0xff [LDR]_factoryCmdUpgradeByFunctionType_isSkipUpgradeEnabled return FALSE Do USB upgrade [UFRC] NVM 0x317c[0x0], 0x97d[0x0] u1USBBlock = 0x42009740 [yl] usb_poll loop:0, controller->devices[0]:0x41e00340 xhci xhci_rh_hub_status_changed: 0x0, changed:0 [yl] usb_poll loop:1, controller->devices[1]:0x0 [yl] usb_poll loop:2, controller->devices[2]:0x0 [yl] usb_poll loop:3, controller->devices[3]:0x0 [yl] usb_poll loop:4, controller->devices[4]:0x0 [yl] usb_poll loop:5, controller->devices[5]:0x0 [yl] usb_poll loop:6, controller->devices[6]:0x0 [yl] usb_poll loop:7, controller->devices[7]:0x0 [yl] usb_poll loop:8, controller->devices[8]:0x0 [yl] usb_poll loop:9, controller->devices[9]:0x0 No U3 USB device. prLdrData->rDtvCfg.u1Upgrade_Ext :0x0 _fgDeviceType :0x1 USB upgrade stop [CMain 1321][OLED Tcon error handle]display_techonlogy = 0 [CMain 1325][OLED Tcon error handle] Not OLED Panel. LDR_PostInit _LOADER_ResetWiFi_2nd _LOADER_EnableCI5VPower Flash load lzhs header from 0x100000 to dram(0x4200a750), size=2048 Decompression uboot to 0x41800000... Flash load image from 0x100000 to dram(0x4200a750), size=0x69f03 LZHS start LZHS done Starting image... U-Boot 2011.12.12 (Apr 15 2022 - 15:30:24) Total ( 1 ) DRAM Channels. Total DRAM for kernel: 2 GiB # Channel-A DRAM Size: 4096 MB. WARNING: Caches not enabled MMC: [MSDC] Uboot max clock 400000000 [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] HOST 1, rca 0x1 [MSDC] Set DMA Mode! [MSDC] id1:A7AD5206 id2:C6224A54 [MSDC] Uboot share parameters with loader. [MSDC] Load Param SpeedMode : 0x5. : 0 msdcgpio=76,-1,-1,176,-1,-1, [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 0 (BIM_increaseCrashCounter) write ok [crash count] WakeupReason is not PDWNC_WAKE_UP_REASON_AC_POWER, counter accumulate 1 [crash count] count = 1 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: enter normal mode! pmisc_msg: enter normal mode! ###########################i4_misc_val==0x0000 ###########################i4QueryRet==0x0000 ###########################i4ReadRet==0x0000 ###########################u4Addr==0x0a18 ###########################u4Val==0x0000 ###########################Final u4Val==0x0000 Env_common.c/env_add_adb_support read EEPROM ADB Support = 0 env_add_bootreason: set androidboot.bootreason=reboot [Panel Type] :0x0 [Panel Type] Non-OLED wifi dat cfg = [0] msdcautok=0x2000008,0x3f2000,0x280000,0x403c0047,0xfffe4640,0x408180f,0x288832,0x1010101,0x1010101,0x0,0x0,0x14029,0x0,0x0,0x0,0x0,0x0 loaderlogo=0x0@0x0 ...=====PMIC I2C Param=====... mt53xxregulator=198:2:3:4:1:600:1500:1000:4:0:200:5:6:16:1:700:1500:1000:4:1: In: serial Out: serial Err: serial pmisc_msg: [zzuu]test uboot loader B new flow. [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 1 (BIM_increaseCrashCounter) write ok [crash count] WakeupReason is not PDWNC_WAKE_UP_REASON_AC_POWER, counter accumulate 1 [crash count] count = 2 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: enter normal mode! [main_loop][490] 0 ### main_loop: bootcmd="eboot boot" Hit any key to stop autoboot: 0 ###### Android Verify Boot 2.0 ###### The requested partitions: [boot] [dtbo] [tzbp] @@ Trying to verify slot _b --ENTER RPMB-- -- set count success -- write ok -- set count success -- -- set count success -- write ok -- set count success -- --EXIT RPMB-- System will boot from slot: _b ## AVB2.0 append extra bootargs: dm="1 system none ro 1,0 4817320 verity 1 179:46 179:46 4096 4096 602165 602165 sha1 16458f7ed1cb6ffdf026841bdff9584c4c0414ed 80b418d5e89df9e12bde3d86f4a3b465c4445f5f3067f5e6c588f51a1da072ba 10 restart_on_corruption ignore_zero_blocks use_fec_from_device 179:46 fec_roots 2 fec_blocks 606908 fec_start 606908" root=/dev/dm-0 androidboot.vbmeta.device=179:9 androidboot.vbmeta.avb_version=1.0 androidboot.vbmeta.device_state=locked androidboot.vbmeta.hash_alg=sha256 androidboot.vbmeta.size=16384 androidboot.vbmeta.digest=8b774890f5b9cf8b8890c46cc194ea1869f5fbf4c8823f311c46034f9cab5fdd androidboot.veritymode=enforcing Boot/Recovery image header version: 1 Boot state is: Green ! signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x49583358,dst=0xfa610000,psize=0x61b000,lsize=0x1cd54f,chk=0xba ## Loading image from partition: r20_b signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x4991dff0,dst=0xf9600000,psize=0x4a0d8,lsize=0x2b83b,chk=0xd1 ## Loading image from partition: r21_b signature verification is OK ## Plaintext img, src=0x49d1e010,dst=0xf9a00000,psize=0x0,lsize=0x0,chk=0x0 ## Loading image from partition: 3dlut_b signature verification is OK ## Plaintext img, src=0x4a11e020,dst=0xfa200000,psize=0x0,lsize=0x0,chk=0x0 ## Booting kernel from Legacy Image at 48043340 ... ## Flattened Device Tree from Legacy Image at 48043340 Booting using the fdt blob at 0x47800000 Uncompressing Kernel Image ... OK reserving fdt memory region: addr=0 size=10000 Applying the overlay fdt of index: 0 ... OK ## boot_ufdt_overlay: Merge DTBO to main DTB done, takes 13.569 ms Loading Device Tree to 463f5000, end 463ff220 ... OK ## Transferring control to Linux (at address fa610000) ... ## Linux start= 0x040000000 size= 0x07d264000 ... ## Linux start= 0x100000000 size= 0x000000000 ... ## uBoot bootargs size is limited: 4096 Bytes, current size: 2622 Bytes. Starting kernel ... [ATF][ 0.000000]LK boot argument [ATF][ 0.002869]atf_magic=0x4d415446 [ATF][ 0.004735]tee_support=0x1 [ATF][ 0.006384]tee_entry=0xfa635000 [ATF][ 0.008250]tee_boot_arg_addr=0x0 [ATF][ 0.010159]atf_log_port=0x0 [ATF][ 0.011852]atf_log_baudrate=0x0 [ATF][ 0.013718]atf_log_buf_start=0x0 [ATF][ 0.015627]atf_log_buf_size=0x0 [ATF][ 0.017493]atf_aee_debug_buf_start=0x0 [ATF][ 0.019663]atf_aee_debug_buf_size=0x0 [ATF][ 0.021789]atf_irq_num=0 [ATF][ 0.023352]BL33_START_ADDRESS=0x40080000 [ATF][ 0.025608]bl31_setup [ATF][ 0.027041]RESET_TO_BL31 [ATF][ 0.029167]BL31 Built : [ATF][ 0.030653]mtk: platform_setup_pm [ATF][ 0.032511][BL31] tvtee_setup! [ATF][ 0.034393][BL31] Jump to secure OS for initialization! TZ_Check_KernelStatus start TZ status=0x1 welcome to lk/MP boot args 0x0 0x0 0x0 0x0 HKDF-SHA256 Verification: PASS initializing trusty (Built: ) Initializing Trusted OS SMC handler Trusty Init Done, Jump to linux Kernel 4294967294 [ATF][ 0.059958]Kernel is 64Bit [ATF][ 0.062808]pc=0x40080000, r0=0x463f5000, r1=0x16ff,r2=0x0 [ATF][ 0.065760]KERNEL_AT_NON-SECURE! [ATF][ 0.067711][BL31] Final dump! SvcEx_SVP_AddKernelProtect u4Start = 40080000, u4End = 40920000 SvcEx_SVP_AddKernelProtect u4Start = 40920000, u4End = bd264000 read data: Addr failure, 0 read data: Addr failure, 0 read data: Addr failure, 0 fs_init_from_super:310: loaded super block version 2 super_block_valid:155: bad magic, 0x20708acbf2780f98 super_block_valid:155: bad magic, 0x20708acbf2780f98 fs_init_from_super:313: clear requested, create empty Boot- Scramble value: 0x00000056 .65 package [CH= 0 Calibration done] [CH= 1 Calibration done] [CH= 2 Calibration done] [CH= 3 Calibration done] # Init_DRAM take 310 ms. Dram size:2 Start Pmain EMMC boot load preloader2 image ... SrcOffset:0x00010000 DstAddr:0x409fffb0 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 CID:0xbac9a7ad :0x5206c622 :0x4a544434 :0x15010041 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 plain size:0x0001a8f0 LZHS size:0x0000f2fc image size:0x0000f450 LZHS checksum:0x00000080 MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS dec begin LZHS ok load preloader2 image ok u4BSSLimit:0x0001f450 MsdcAccuVect(CMD):0x00000100 LZHS addr:0x40100040 plain size:0x0015e850 LZHS size:0x00068e91 LZHS checksum:0x000000cb MsdcAccuVect(CMD):0x00000100 MsdcAccuVect(CMD):0x00000100 LZHS begin LZHS ok loader ver check ... [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- [preloader2_main.c:150] psVersion = 0x40e5e822 image version(header addr is 0x40cfffa0): 0.0.0 [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- record version: 0.0.0 comparing loader ver with record return 0 loader ver check done Boot Start Lmain [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] LOADER FAST READ EMMC! [MSDC] id1:00414a54 id2:44345206 [MSDC] Set Bus Clock as HS25(MHz) Success!,src 3 ,mode 0, div 4 MT5887 Boot Loader v0.9 setup_usb_host: Setting up USB HOST controller... mt53xx_u3phy_ports_enable: mt53xx_u3phy_ports_enable u2p:3, u3p:1 mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_u3phy_ports_enable: [yl]u3p_readl(sif_base, U3P_U2_CTRL(i)):0x4c mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(0) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(1) mt53xx_phy_index_power_on: mt53xx_phy_index_power_on(2) setup_usb_host: phy power-on done. xhci_init: regbase: 0x100c4000 xhci_init: opreg: 0x100c4020 xhci_init: caplen: 0x20 xhci_init: rtsoff: 0x600 xhci_init: dboff: 0x800 xhci_init: hciversion: 1.16 xhci_init: context size: 32 xhci_init: pagesize: 0x1000 xhci_init: xhci->dma_buffer = 0x41d10000 xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reset: Resetting controller... ok. xhci_wait_ready: Waiting for controller to be ready... ok. xhci_reinit: [yl]xhci->ev_ring_table[0].seg_base_lo:0x41d00100, seg_base_hi:0x0, seg_size:0x8 xhci_reinit: [yl]xhci->hcrreg->intrrs[0].erstsz:0x1, erstba_lo :0x41d001c0, erstba_hi:0x0 xHCI: root hub init done(ports:4) dev 0x41e00340 MUSB3_init OK ++ USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. [MSDC] enter into HS400 Mode, max dtr 200000000 [MSDC] Saved info: flag 0xaabbccdd,speedmode 5. [MSDC] Cur info: flag 0xaabbccdd, speedmode 5. [MSDC] The information is match, Alrady run autok before, ignore this time [MSDC] Load Param: [MSDC] SpeedMode : 0x00000005. [MSDC] K_IOCON : 0x02000008. [MSDC] K_PAD_TUNE0 : 0x003f2000. [MSDC] K_PAD_TUNE1 : 0x00280000. [MSDC] K_PATCH_BIT0 : 0x403c0047. [MSDC] K_PATCH_BIT1 : 0xfffe4640. [MSDC] K_PATCH_BIT2 : 0x0408180f. [MSDC] K_EMMC50_CFG0 : 0x00288832. [MSDC] K_DAT_RD_DLY0 : 0x01010101. [MSDC] K_DAT_RD_DLY1 : 0x01010101. [MSDC] K_DAT_RD_DLY2 : 0x00000000. [MSDC] K_DAT_RD_DLY3 : 0x00000000. [MSDC] K_EMMC50_PAD_DS_TUNE : 0x00014029. [MSDC] K_EMMC50_PAD_CMD_TUNE : 0x00000000. [MSDC] K_EMMC50_PAD_DAT01_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT23_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT45_TUNE: 0x00000000. [MSDC] K_EMMC50_PAD_DAT67_TUNE: 0x00000000. [MSDC] check autok done. speed mode 1 ,clock 25 [MSDC] Set Bus Clock as HS0(MHz) Success!,src 0 ,mode 0, div 16 [MSDC] Set Bus Clock as HS50(MHz) Success!,src 3 ,mode 0, div 2 [MSDC] Set Bus Clock as HS400(MHz) Success!,src 3 ,mode 3, div 0 [MSDC] Set driving: CLK 7 ,CMD 7, DAT 9 [MSDC] Set device to HS400 mode successful! [MSDC] Loader apply autok param done. [MSDC] --ENTER RPMB-- [MSDC] --EXIT RPMB-- Support network!. 1st MAC in EEP is valid (68:07:0a:4a:66:a5) 1st : (68:07:0a:4a:66:a5) 2nd : (68:07:0a:4a:66:a5) POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress Boot reason: Watch dog0 reset (0x1000000) !![OBR-nonAC]nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]nothing happened. LOADER_MtkEnvInitFunc: PDWNC_ReadWakeupReason = 32 LOADER_MtkEnvInitFunc: ui1_reboot_event_detail = 8 LOADER_MtkEnvInitFunc: TV reboot by watch dog, ui1_tpvEnableQHB is 0 system was rebooted by external reboot Remove Quiet Boot misc control in eeprom when Watchdog reason. [IRRX_InitMtkIrRegSetup]SetRC5WakeupKey - Temporary comment IR DATA register : 0x 0 T8032 init A/C on case loader stage... Load T8032 FW (addr: 0x40e20c88, size: 28410)success!! T8032 FW version: 7 T8032 change to loader stage... LDR_FlashCopy 0x4000f010 0x88680 0x80 POWER ON FRC reset GPIO to output high LOADER_MtkEnvInitFunc: ui4_RebootEventDetailEepAddr = 0xa1a LOADER_MtkEnvInitFunc: ui4_EnableQHBEepAddr = 0xa10 LOADER_MtkEnvInitFunc: ui4_SilentRebootEepAddr = 0xa1c LOADER_MtkEnvInitFunc: ui4_RegisterTimeOfSilentRebootEepAddr = 0xa1b =========================================== [QHB flag] rDtvCfg.u1Flags4 =0 [HB flag] rDtvCfg.u1Flags2 =0 [QHB flag] prLdrData->rDtvCfg.u1Flags4 = 0 [HB flag] prLdrData->rDtvCfg.u1Flags2 = 0 =========================================== [OBR]LDR_checkIfLkbDownPress [OBR-nonAC]nothing happened. [TCON-RESET]LDR_checkIfLkbUpPress [TCON-RESET]nothing happened. CC_PHP_SUPPORT_LOADER_CONSOLE_LOCK defined Uart Rx disabled [OBR]Is OBR triggered?. NVM_FSR_RECOVERY_MODE_ADDRESS=2 [_LdrDetermineEnterStandby 432] not PDWNC_WAKE_UP_REASON_AC_POWER [UPG upgrade ~ not PDWNC_WAKE_UP_REASON_AC_POWER] u1SlicneUpgradeStatus = 0 PDWNC_Init GPIO_MtkPowerOnFunc: ui4_SilentRebootEepAddr = 0xa1c GPIO_MtkPowerOnFunc: ui4_EnableQHBEepAddr = 0xa10 GPIO_MtkPowerOnFunc: ui4_FullStandbyCtrEepAddr = 0xa16 GPIO_MtkPowerOnFunc: normal cold boot ui1_silent_reboot = 0, ui1_tpvEnableQHB = 0, uil_FullStandbyCtr = 0 GPIO_MtkPowerOnFunc: After check ui1_silent_reboot, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: not QUIET_HOT_BOOT ui4_RedLedBriEepAddr : 0x317b use NVM LEDdutyControl value u1RedLedBriValue : 45 [GPIO_MtkPowerOnFunc 2102] u1_factory_mode = 0 [GPIO_MtkPowerOnFunc 2121] ui4_CtnEepAddr = 0x980 [GPIO_MtkPowerOnFunc 2123] CTN = 65PUS8505/12 [GPIO_MtkPowerOnFunc 2153] start led sine wave blinking [GPIO_MtkPowerOnFunc 2165] Not PD9000 model, no need to set PDEL light switch FPGA-reset-pin:137 GPIO_MtkPowerOnFunc: efrcpowerGpio=256 GPIO_MtkPowerOnFunc: Power On FRC rDtvCfg.u1Flags4 = 0, PDWNC_ReadWakeupReason() = 32 GPIO_MtkPowerOnFunc: After FRC power, [QHB]u1Flags4: org=0, flag4=0 GPIO_MtkPowerOnFunc: eResetfrcGpio is not available The init function of this module is NULL The init function of this module is NULL USB0: Set GPIO42 = 1. USB1: Set GPIO43 = 1. USB2: Set GPIO44 = 1. USB3: Set GPIO219 = 1. ui4_CtnEepAddr = 0x980 CTN = 65PUS8505/12 u4BmpWidthTopBlack:848,u4BmpHeightTopBlack:422, u4BmpSizeTopBlack:1431424 u4BmpWidthMidBlack:848,u4BmpHeightMidBlack:196, u4BmpSizeMidBlack:664832 puDstAddress:0xc8400000 puBmpAddress:0x40defe40 u4ColorMode:0xe u4BmpWidth:848 u4BmpHeight:236 u4BmpSizePhilipsLogo:800512 u4DstAddressPhilipsLogo:0xc855d780 Display 0x40e5b5e0 background:0x00000000 Panel ID is 34. Panel ID 34 writing is done... vDrvResetVOPLLFlowFlag ###VbyOne VOPLLInit finsih######VbyOne VOPLLSet finsih###[SA7] _fgVopllUseDDDS = True [LVDS] VOPLL Initialize successful ! LDR_OsdDisplay(14, 0xc8400000, 848, 236) Color:14 BmpAddr:0xc8400000 Width:848 Height:1080 [OSD]OSD_BASE_SetPlaneSwitchOrder: OSD plane order[3,2,1] OSD_BASE_GetDisplayWidth upHaderAddr = 0xc9b80000, upDisAddr= 0xc9b81000 Panel 3840 x 2160 *************u4BmpPitch=3392****************** u4OutWidth=848,u4OutHeight=1080,u4OutX=536,u4OutY=0. [OSD]OSD_PLA_Enable: plane:2, enable:1 u1NVMFSRRecoveryMode = 0x2 ui_HW_AUD_BW = 0 ui_HW_DISPLAY_TECHNOLOGY = 0 not OLED set or in recovery, no need to extends 5 seconds display for OLED philips logo LDR_CheckWeakSymbol_mtk. [LDR]_factoryCmdUpgradeByFunctionType_init is called [LDR] ui4_upgradeDeviceTypeAddr : 0x7200 [LDR] ui1_upgradeDeviceType : 0x0 [LDR] ui1_functionType : 0xff [LDR]_factoryCmdUpgradeByFunctionType_isSkipUpgradeEnabled return FALSE Do USB upgrade [UFRC] NVM 0x317c[0x0], 0x97d[0x0] u1USBBlock = 0x42009740 [yl] usb_poll loop:0, controller->devices[0]:0x41e00340 xhci xhci_rh_hub_status_changed: 0x0, changed:0 [yl] usb_poll loop:1, controller->devices[1]:0x0 [yl] usb_poll loop:2, controller->devices[2]:0x0 [yl] usb_poll loop:3, controller->devices[3]:0x0 [yl] usb_poll loop:4, controller->devices[4]:0x0 [yl] usb_poll loop:5, controller->devices[5]:0x0 [yl] usb_poll loop:6, controller->devices[6]:0x0 [yl] usb_poll loop:7, controller->devices[7]:0x0 [yl] usb_poll loop:8, controller->devices[8]:0x0 [yl] usb_poll loop:9, controller->devices[9]:0x0 No U3 USB device. prLdrData->rDtvCfg.u1Upgrade_Ext :0x0 _fgDeviceType :0x1 USB upgrade stop [CMain 1321][OLED Tcon error handle]display_techonlogy = 0 [CMain 1325][OLED Tcon error handle] Not OLED Panel. LDR_PostInit _LOADER_ResetWiFi_2nd _LOADER_EnableCI5VPower Flash load lzhs header from 0x100000 to dram(0x4200a750), size=2048 Decompression uboot to 0x41800000... Flash load image from 0x100000 to dram(0x4200a750), size=0x69f03 LZHS start LZHS done Starting image... U-Boot 2011.12.12 (Apr 15 2022 - 15:30:24) Total ( 1 ) DRAM Channels. Total DRAM for kernel: 2 GiB # Channel-A DRAM Size: 4096 MB. WARNING: Caches not enabled MMC: [MSDC] Uboot max clock 400000000 [MSDC] MSDC AES INIT CONFIG DONE. [MSDC] HOST 1, rca 0x1 [MSDC] Set DMA Mode! [MSDC] id1:A7AD5206 id2:C6224A54 [MSDC] Uboot share parameters with loader. [MSDC] Load Param SpeedMode : 0x5. : 0 msdcgpio=76,-1,-1,176,-1,-1, [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 0 (BIM_increaseCrashCounter) write ok [crash count] WakeupReason is not PDWNC_WAKE_UP_REASON_AC_POWER, counter accumulate 1 [crash count] count = 1 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: enter normal mode! pmisc_msg: enter normal mode! ###########################i4_misc_val==0x0000 ###########################i4QueryRet==0x0000 ###########################i4ReadRet==0x0000 ###########################u4Addr==0x0a18 ###########################u4Val==0x0000 ###########################Final u4Val==0x0000 Env_common.c/env_add_adb_support read EEPROM ADB Support = 0 env_add_bootreason: ui1_reboot_event_detail = 8 env_add_bootreason: no match case env_add_bootreason: set write ok env_add_bootreason: set 0 env_add_bootreason: ui1_reboot_event_detail = 0 (read back) [Panel Type] :0x0 [Panel Type] Non-OLED wifi dat cfg = [0] msdcautok=0x2000008,0x3f2000,0x280000,0x403c0047,0xfffe4640,0x408180f,0x288832,0x1010101,0x1010101,0x0,0x0,0x14029,0x0,0x0,0x0,0x0,0x0 loaderlogo=0x0@0x0 ...=====PMIC I2C Param=====... mt53xxregulator=198:2:3:4:1:600:1500:1000:4:0:200:5:6:16:1:700:1500:1000:4:1: In: serial Out: serial Err: serial pmisc_msg: [zzuu]test uboot loader B new flow. [crash count] the 0x46c is 0xc [crash count] OPW7-07 0 [crash count] enable = 1 (func: BIM_IsRecoveryMode) [crash count] u4Crashcount_bit = 1 (BIM_increaseCrashCounter) write ok [crash count] WakeupReason is not PDWNC_WAKE_UP_REASON_AC_POWER, counter accumulate 1 [crash count] count = 2 (MAX = 20) (func: BIM_IsRecoveryMode) [crash count] Crash counter has not exceed the MAX, boot base on misc pmisc_msg: enter normal mode! [main_loop][490] 0 ### main_loop: bootcmd="eboot boot" Hit any key to stop autoboot: 0 ###### Android Verify Boot 2.0 ###### The requested partitions: [boot] [dtbo] [tzbp] @@ Trying to verify slot _b --ENTER RPMB-- -- set count success -- write ok -- set count success -- -- set count success -- write ok -- set count success -- --EXIT RPMB-- System will boot from slot: _b ## AVB2.0 append extra bootargs: dm="1 system none ro 1,0 4817320 verity 1 179:46 179:46 4096 4096 602165 602165 sha1 16458f7ed1cb6ffdf026841bdff9584c4c0414ed 80b418d5e89df9e12bde3d86f4a3b465c4445f5f3067f5e6c588f51a1da072ba 10 restart_on_corruption ignore_zero_blocks use_fec_from_device 179:46 fec_roots 2 fec_blocks 606908 fec_start 606908" root=/dev/dm-0 androidboot.vbmeta.device=179:9 androidboot.vbmeta.avb_version=1.0 androidboot.vbmeta.device_state=locked androidboot.vbmeta.hash_alg=sha256 androidboot.vbmeta.size=16384 androidboot.vbmeta.digest=8b774890f5b9cf8b8890c46cc194ea1869f5fbf4c8823f311c46034f9cab5fdd androidboot.veritymode=enforcing Boot/Recovery image header version: 1 Boot state is: Green ! signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x49583358,dst=0xfa610000,psize=0x61b000,lsize=0x1cd54f,chk=0xba ## Loading image from partition: r20_b signature verification is OK LZHS start LZHS done ## LZHS decode success! src=0x4991dff0,dst=0xf9600000,psize=0x4a0d8,lsize=0x2b83b,chk=0xd1 ## Loading image from partition: r21_b signature verification is OK ## Plaintext img, src=0x49d1e010,dst=0xf9a00000,psize=0x0,lsize=0x0,chk=0x0 ## Loading image from partition: 3dlut_b signature verification is OK ## Plaintext img, src=0x4a11e020,dst=0xfa200000,psize=0x0,lsize=0x0,chk=0x0 ## Booting kernel from Legacy Image at 48043340 ... ## Flattened Device Tree from Legacy Image at 48043340 Booting using the fdt blob at 0x47800000 Uncompressing Kernel Image ... OK reserving fdt memory region: addr=0 size=10000 Applying the overlay fdt of index: 0 ... OK ## boot_ufdt_overlay: Merge DTBO to main DTB done, takes 13.573 ms Loading Device Tree to 463f5000, end 463ff220 ... OK ## Transferring control to Linux (at address fa610000) ... ## Linux start= 0x040000000 size= 0x07d264000 ... ## Linux start= 0x100000000 size= 0x000000000 ... ## uBoot bootargs size is limited: 4096 Bytes, current size: 2593 Bytes. Starting kernel ... [ATF][ 0.000000]LK boot argument [ATF][ 0.002868]atf_magic=0x4d415446 [ATF][ 0.004734]tee_support=0x1 [ATF][ 0.006383]tee_entry=0xfa635000 [ATF][ 0.008249]tee_boot_arg_addr=0x0 [ATF][ 0.010159]atf_log_port=0x0 [ATF][ 0.011851]atf_log_baudrate=0x0 [ATF][ 0.013717]atf_log_buf_start=0x0 [ATF][ 0.015627]atf_log_buf_size=0x0 [ATF][ 0.017493]atf_aee_debug_buf_start=0x0 [ATF][ 0.019663]atf_aee_debug_buf_size=0x0 [ATF][ 0.021789]atf_irq_num=0 [ATF][ 0.023351]BL33_START_ADDRESS=0x40080000 [ATF][ 0.025608]bl31_setup [ATF][ 0.027040]RESET_TO_BL31 [ATF][ 0.029168]BL31 Built : [ATF][ 0.030654]mtk: platform_setup_pm [ATF][ 0.032512][BL31] tvtee_setup! [ATF][ 0.034394][BL31] Jump to secure OS for initialization! TZ_Check_KernelStatus start TZ status=0x1 welcome to lk/MP boot args 0x0 0x0 0x0 0x0 HKDF-SHA256 Verification: PASS initializing trusty (Built: ) Initializing Trusted OS SMC handler Trusty Init Done, Jump to linux Kernel 4294967294 [ATF][ 0.059888]Kernel is 64Bit [ATF][ 0.062737]pc=0x40080000, r0=0x463f5000, r1=0x16ff,r2=0x0 [ATF][ 0.065689]KERNEL_AT_NON-SECURE! [ATF][ 0.067641][BL31] Final dump! SvcEx_SVP_AddKernelProtect u4Start = 40080000, u4End = 40920000 SvcEx_SVP_AddKernelProtect u4Start = 40920000, u4End = bd264000 read data: Addr failure, 0 read data: Addr failure, 0 read data: Addr failure, 0 fs_init_from_super:310: loaded super block version 2 super_block_valid:155: bad magic, 0x20708acbf2780f98 super_block_valid:155: bad magic, 0x20708acbf2780f98 fs_init_from_super:313: clear requested, create empty