HB-WIFI-Z6 "SpyCam"

[ShonP40]

I've recently stumbled across #418 which added support for a device I own, but I couldn't figure out how to flash the rootfs.bin file onto my unit.

The unit I have is unable to boot into its original firmware due to some corruption (probably), but I am able to execute commands in U-Boot.

Is there any way to overwrite the rootfs partition from U-Boot using this rootfs.bin file?

Here's the full bootlog:

U-Boot SPL 2013.07 (Jul 31 2017 - 17:53:34)
pll_init:347
l2cache_clk = 450000000
pll_cfg.pdiv = 8, pll_cfg.h2div = 4, pll_cfg.h0div = 4, pll_cfg.cdiv = 1, pll_cfg.l2div = 2
nf=36 nr = 1 od0 = 1 od1 = 1
cppcr is 02404900
CPM_CPAPCR 0470890d
nf=50 nr = 1 od0 = 1 od1 = 1
cppcr is 03204900
CPM_CPMPCR 0320490d
cppcr 0x9a7b5510
apll_freq 860160000 
mpll_freq 1200000000 
ddr sel mpll, cpu sel apll
ddrfreq 400000000
cclk  860160000
l2clk 430080000
h0clk 300000000
h2clk 300000000
pclk  150000000
CPM_DDRCDR(0000002c) = a0000002
DDRC_DLP:0000f003
CPM_SSICDR(00000074) = e0000011

U-Boot 2013.07 (Jul 31 2017 - 17:53:34)

Board: ISVP (Ingenic XBurst T10 SoC)
DRAM:  64 MiB
Top of RAM usable for U-Boot at: 84000000
Reserving 435k for U-Boot at: 83f90000
Reserving 32784k for malloc() at: 81f8c000
Reserving 32 Bytes for Board Info at: 81f8bfe0
Reserving 124 Bytes for Global Data at: 81f8bf64
Reserving 128k for boot params() at: 81f6bf64
Stack Pointer at: 81f6bf48
Now running in RAM - U-Boot at: 83f90000
MMC:   msc: 0
CPM_SSICDR(74) = e000000b
the manufacturer ef
SF: Detected W25Q64JV

*** Warning - bad CRC, using default environment

In:    serial
Out:   serial
Err:   serial
Net:   CPM_MACCDR(54) = a0000017
Jz4775-9161
Hit any key to stop autoboot:  0 
CPM_SSICDR(74) = e000000b
the manufacturer ef
SF: Detected W25Q64JV

--->probe spend 7 ms
SF: 2621440 bytes @ 0x40000 Read: OK
--->read spend 422 ms
## Booting kernel from Legacy Image at 80600000 ...
   Image Name:   Linux-3.10.14
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1807916 Bytes = 1.7 MiB
   Load Address: 80010000
   Entry Point:  803c83e0
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK

Starting kernel ...

[    0.000000] Initializing cgroup subsys cpu
[    0.000000] Initializing cgroup subsys cpuacct
[    0.000000] Linux version 3.10.14 (root@tang-virtual-machine) (gcc version 4.7.2 (Ingenic 2015.02) ) #36 PREEMPT Mon Jul 31 18:07:54 CST 2017
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 RESET ERROR PC:3D059BC0
[    0.000000] CPU0 revision is: 00d00100 (Ingenic Xburst)
[    0.000000] FPU revision is: 00b70000
[    0.000000] CCLK:860MHz L2CLK:430Mhz H0CLK:200MHz H2CLK:200Mhz PCLK:100Mhz
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 004f8000 @ 00010000 (usable)
[    0.000000]  memory: 00038000 @ 00508000 (usable after init)
[    0.000000] User-defined physical RAM map:
[    0.000000]  memory: 02700000 @ 00000000 (usable)
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x026fffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x026fffff]
[    0.000000] Primary instruction cache 32kB, 8-way, VIPT, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 8-way, VIPT, no aliases, linesize 32 bytes
[    0.000000] pls check processor_id[0x00d00100],sc_jz not support!
[    0.000000] MIPS secondary cache 128kB, 8-way, linesize 32 bytes.
[    0.000000] Built 1 zonelists in Zone order, mobility grouping off.  Total pages: 9906
[    0.000000] Kernel command line: console=ttyS1,115200n8 mem=39M@0x0 ispmem=5M@0x2700000 rmem=20M@0x2c00000 init=/linuxrc rootfstype=squashfs root=/dev/mtdblock2 rw mtdparts=jz_sfc:256k(boot),2560k(kernel),2048k(root),-(appfs)
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Memory: 33568k/39936k available (3846k kernel code, 6368k reserved, 1240k data, 224k init, 0k highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] Preemptible hierarchical RCU implementation.
[    0.000000] NR_IRQS:418
[    0.000000] clockevents_config_and_register success.
[    0.000022] Calibrating delay loop... 858.52 BogoMIPS (lpj=4292608)
[    0.087752] pid_max: default: 32768 minimum: 301
[    0.092718] Mount-cache hash table entries: 512
[    0.097833] Initializing cgroup subsys debug
[    0.102099] Initializing cgroup subsys freezer
[    0.109060] regulator-dummy: no parameters
[    0.113322] NET: Registered protocol family 16
[    0.131170] bio: create slab <bio-0> at 0
[    0.137468] jz-dma jz-dma: JZ SoC DMA initialized
[    0.142542] usbcore: registered new interface driver usbfs
[    0.148166] usbcore: registered new interface driver hub
[    0.153602] usbcore: registered new device driver usb
[    0.158888] i2c-gpio i2c-gpio.0: using pins 12 (SDA) and 13 (SCL)
[    0.165098] i2c-gpio i2c-gpio.1: using pins 57 (SDA) and 58 (SCL)
[    0.171238] media: Linux media interface: v0.10
[    0.175844] Linux video capture interface: v2.00
[    0.182574] Switching to clocksource jz_clocksource
[    0.187536] cfg80211: Calling CRDA to update world regulatory domain
[    0.194604] jz-dwc2 jz-dwc2: cgu clk gate get error
[    0.199543] jz-dwc2 jz-dwc2: regulator vbus get error
[    0.204672] DWC IN OTG MODE
[    0.359292] sft id =========================off
[    0.363884] dwc2 dwc2: Keep PHY ON
[    0.367272] dwc2 dwc2: Using Buffer DMA mode
[    0.571404] dwc2 dwc2: Core Release: 3.00a
[    0.575538] dwc2 dwc2: DesignWare USB2.0 High-Speed Host Controller
[    0.581855] dwc2 dwc2: new USB bus registered, assigned bus number 1
[    0.589250] hub 1-0:1.0: USB hub found
[    0.593005] hub 1-0:1.0: 1 port detected
[    0.597158] dwc2 dwc2: DWC2 Host Initialized
[    0.601646] NET: Registered protocol family 2
[    0.606618] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[    0.613540] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[    0.620028] TCP: Hash tables configured (established 512 bind 512)
[    0.626314] TCP: reno registered
[    0.629513] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.635471] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.642062] NET: Registered protocol family 1
[    0.646880] freq_udelay_jiffys[0].max_num = 10
[    0.651309] cpufreq  udelay  loops_per_jiffy 
[    0.655770] 12000     59885   59885  
[    0.658992] 24000     119771  119771 
[    0.662434] 60000     299428  299428 
[    0.665891] 120000    598857  598857 
[    0.669409] 200000    998095  998095 
[    0.672940] 300000    1497142     1497142    
[    0.676670] dwc2 dwc2: ID PIN CHANGED!
[    0.680476] init DWC as A_HOST
[    0.683564] 600000    2994285     2994285    
[    0.687261] 792000    3952457     3952457    
[    0.690953] 1008000   5030400     5030400    
[    0.694857] 1200000   5988571     5988571    
[    0.705323] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.711427] jffs2: version 2.2. © 2001-2006 Red Hat, Inc.
[    0.717447] msgmni has been set to 65
[    0.722556] io scheduler noop registered
[    0.726605] io scheduler cfq registered (default)
[    0.733004] jz-uart.0: ttyS0 at MMIO 0x10030000 (irq = 59) is a uart0
[    0.739730] jz-uart.1: ttyS1 at MMIO 0x10031000 (irq = 58) is a uart1
[    0.748053] console [ttyS1] enabled, bootconsole disabled
[    0.748053] console [ttyS1] enabled, bootconsole disabled
[    0.763085] brd: module loaded
[    0.768461] loop: module loaded
[    0.771809] logger: created 256K log 'log_main'
[    0.777230] jz SADC driver registeres over!
[    0.782521] jz TCU driver register completed
[    0.787732] the id code = ef7017, the flash name is W25Q64JV
[    0.793613] JZ SFC Controller for SFC channel 0 driver register
[    0.799841] 4 cmdlinepart partitions found on MTD device jz_sfc
[    0.806001] Creating 4 MTD partitions on "jz_sfc":
[    0.810979] 0x000000000000-0x000000040000 : "boot"
[    0.816531] 0x000000040000-0x0000002c0000 : "kernel"
[    0.822181] 0x0000002c0000-0x0000004c0000 : "root"
[    0.827795] 0x0000004c0000-0x000000800000 : "appfs"
[    0.833367] SPI NOR MTD LOAD OK
[    0.836753] tun: Universal TUN/TAP device driver, 1.6
[    0.841997] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[    0.848557] Bus Mode Reg after reset: 0x00020101, cnt=0
[    0.855005] Bus Mode Reg after reset: 0x00020101, cnt=1
[    0.861423] Bus Mode Reg after reset: 0x00020101, cnt=2
[    0.867902] Bus Mode Reg after reset: 0x00020101, cnt=3
[    0.874341] Bus Mode Reg after reset: 0x00020101, cnt=4
[    0.880760] Bus Mode Reg after reset: 0x00020101, cnt=5
[    0.887190] Bus Mode Reg after reset: 0x00020101, cnt=6
[    0.893616] Bus Mode Reg after reset: 0x00020101, cnt=7
[    0.900045] Bus Mode Reg after reset: 0x00020101, cnt=8
[    0.906493] Bus Mode Reg after reset: 0x00020101, cnt=9
[    0.912913] func:jz_mii_bus_probe, synopGMAC_reset failed
[    0.918539] jz_mii_bus: probe of jz_mii_bus.0 failed with error -1
[    0.925039] =======>gmacdev = 0x819e0100<================
[    0.930643] =========>gmacdev->MacBase = 0xb34b0000 DmaBase = 0xb34b1000
[    0.937615] Bus Mode Reg after reset: 0x00020101, cnt=0
[    0.944093] Bus Mode Reg after reset: 0x00020101, cnt=1
[    0.950512] Bus Mode Reg after reset: 0x00020101, cnt=2
[    0.956947] Bus Mode Reg after reset: 0x00020101, cnt=3
[    0.963367] Bus Mode Reg after reset: 0x00020101, cnt=4
[    0.969798] Bus Mode Reg after reset: 0x00020101, cnt=5
[    0.976227] Bus Mode Reg after reset: 0x00020101, cnt=6
[    0.982645] Bus Mode Reg after reset: 0x00020101, cnt=7
[    0.989072] Bus Mode Reg after reset: 0x00020101, cnt=8
[    0.995500] Bus Mode Reg after reset: 0x00020101, cnt=9
[    1.001916] func:jz_mac_probe, synopGMAC_reset failed
[    1.007178] jz_mac: probe of jz_mac.0 failed with error -1
[    1.012984] usbcore: registered new interface driver zd1201
[    1.019185] jzmmc_v1.2 jzmmc_v1.2.0: vmmc regulator missing
[    1.064103] jzmmc_v1.2 jzmmc_v1.2.0: register success!
[    1.069501] jzmmc_v1.2 jzmmc_v1.2.1: vmmc regulator missing
[    1.115011] jzmmc_v1.2 jzmmc_v1.2.1: register success!
[    1.120431] ------------ init codec driver start!
[    1.125426] jz_codec_probe: probe() start
[    1.129597] jz_codec_probe, codec iomem is :0xb0021000
[    1.134998] usb 1-1: new high-speed USB device number 2 using dwc2
[    1.141522] jz_codec_probe: probe() done
[    1.145753] i2s global init
[    1.148667] current codec is :819e5f00
[    1.152831] i2s init success.
[    1.584435] u32 classifier
[    1.587252]     Actions configured
[    1.590956] TCP: cubic registered
[    1.594458] NET: Registered protocol family 17
[    1.599152] Key type dns_resolver registered
[    1.604575] input: gpio-keys as /devices/platform/gpio-keys/input/input0
[    1.611728] drivers/rtc/hctosys.c: unable to open rtc device (rtc0)
[    1.622877] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    1.630789] Freeing unused kernel memory: 224K (80508000 - 80540000)
mdev is ok......
[    2.979323] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001538e4: 0x1980 instead
[    2.989199] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001538e8: 0x002e instead
[    2.999054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001538ec: 0x9ed4 instead
[    3.008909] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001538f0: 0x0004 instead
[    3.018760] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001538f4: 0x001b instead
[    3.028611] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001538f8: 0x0005 instead
[    3.038462] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001538fc: 0x0037 instead
[    3.048315] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00153900: 0x0406 instead
[    3.058168] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00153904: 0xc460 instead
[    3.068019] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00153908: 0xb613 instead
[    3.077866] jffs2: Further such events for this erase block will not be printed
[    3.206386] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001dc5cc: 0x1904 instead
[    3.216254] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001dc5d0: 0x0068 instead
[    3.226108] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001dc5d4: 0xeb9b instead
[    3.235960] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001dc5d8: 0x017f instead
[    3.245812] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001dc5dc: 0x0002 instead
[    3.255662] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001dc5e0: 0x81ed instead
[    3.265516] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001dc5e8: 0x0024 instead
[    3.275366] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001dc5ec: 0x44c8 instead
[    3.285218] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001dc5f0: 0x44c8 instead
[    3.295068] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x001dc5f4: 0x44c8 instead
[    3.304917] jffs2: Further such events for this erase block will not be printed
[    3.452529] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0026a73c: 0x1900 instead
[    3.462398] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0026a740: 0x0033 instead
[    3.472252] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0026a744: 0x1196 instead
[    3.482105] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0026a748: 0x0004 instead
[    3.491958] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0026a74c: 0x0015 instead
[    3.501811] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0026a750: 0x0024 instead
[    3.511661] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0026a754: 0x0037 instead
[    3.521511] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0026a758: 0x080b instead
[    3.531364] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0026a75c: 0x648b instead
[    3.541215] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0026a760: 0x84e9 instead
[    3.551065] jffs2: Further such events for this erase block will not be printed
[    3.583347] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280db8: 0x1905 instead
[    3.593210] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280dbc: 0x003a instead
[    3.603065] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280dc0: 0x5e1c instead
[    3.612916] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280dc4: 0x0004 instead
[    3.622771] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280dc8: 0x001c instead
[    3.632623] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280dcc: 0x0027 instead
[    3.642474] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280dd0: 0x0037 instead
[    3.652385] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280dd4: 0x0812 instead
[    3.662243] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280dd8: 0xfa5b instead
[    3.672096] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00280ddc: 0xc086 instead
[    3.681943] jffs2: Further such events for this erase block will not be printed
[    3.795393] jffs2: Old JFFS2 bitmask found at 0x002dfbc8
[    3.800910] jffs2: You cannot use older JFFS2 filesystems with newer kernels
[    3.808248] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002dfbcc: 0x0386 instead
[    3.818103] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002dfbd0: 0x63c9 instead
[    3.827957] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002dfbd4: 0x001e instead
[    3.837807] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002dfbd8: 0x00e2 instead
[    3.847659] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002dfbdc: 0x81ed instead
[    3.857513] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002dfbe4: 0x4f60 instead
[    3.867364] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002dfbe8: 0x004d instead
[    3.877213] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002dfbec: 0x004d instead
[    3.887065] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002dfbf0: 0x004d instead
[    3.896917] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x002dfbf4: 0xd000 instead
[    3.906763] jffs2: Further such events for this erase block will not be printed
[    4.053375] name : i2c-gpio0 nr : 0
[    4.121246]  sensor_read: addr=0xa value = 0xa0

Ingenic-g1_1 login: [    4.187450] error: sensor_read,172 ret = -6
[    4.191797]  sensor_read: addr=0x300a value = 0x0
[    4.196716] err sensor read addr = 0x300a, value = 0x0
[    4.263022] error: sensor_read,172 ret = -6
[    4.267379]  sensor_read: addr=0x300b value = 0x0
[    4.272258] err sensor read addr = 0x300b, value = 0x0
[    4.338338]  sensor_read: addr=0xa value = 0xa0
[    4.343702]  sensor_read: addr=0xb value = 0x62
[    4.409397]  sensor_read: addr=0x580b value = 0xb
[    4.475196]  sensor_read: addr=0x580b value = 0xb
[    4.540992]  sensor_read: addr=0x3107 value = 0x7
[    4.606828]  sensor_read: addr=0x3107 value = 0x7
[    4.672714] error: sensor_read,172 ret = -6
[    4.677086]  sensor_read: addr=0x3000 value = 0x0
[    4.681973] err sensor read addr = 0x3000, value = 0x0
[    4.748103]  sensor_read: addr=0xa value = 0xa0
[    4.753462]  sensor_read: addr=0xb value = 0x62
[    4.819085] error: sensor_read,172 ret = -6
[    4.823423]  sensor_read: addr=0xf0 value = 0x0
[    4.828141] err sensor read addr = 0xf0, value = 0x0
[    4.894170] error: sensor_read,172 ret = -6
[    4.898511]  sensor_read: addr=0xf0 value = 0x0
[    4.903211] err sensor read addr = 0xf0, value = 0x0
[    4.969314] error: sensor_read,172 ret = -6
[    4.973654]  sensor_read: addr=0xf0 value = 0x0
[    4.978404] err sensor read addr = 0xf0, value = 0x0
[    5.020281] jffs2: warning: (54) jffs2_do_read_inode_internal: Truncating ino #21 to 26256 bytes failed because it only had 24576 bytes to start with!
[    5.058611] error: sensor_read,172 ret = -6
[    5.062952]  sensor_read: addr=0xfc value = 0x0
[    5.067669] err sensor read addr = 0xfc, value = 0x0
[    5.133583] error: sensor_read,172 ret = -6
[    5.137937]  sensor_read: addr=0x3004 value = 0x0
[    5.142815] err sensor read addr = 0x3004, value = 0x0
[    5.208922] error: sensor_read,172 ret = -6
[    5.213263]  sensor_read: addr=0x300a value = 0x0
[    5.218159] err sensor read addr = 0x300a, value = 0x0
[    5.284405] error: sensor_read,172 ret = -6
[    5.288748]  sensor_read: addr=0x31f3 value = 0x0
[    5.293629] err sensor read addr = 0x31f3, value = 0x0
[    5.359865]  sensor_read: addr=0x3107 value = 0x7
[    5.425703] error: sensor_read,172 ret = -6
[    5.430045]  sensor_read: addr=0x4 value = 0x0
[    5.434683] err sensor read addr = 0x4, value = 0x0
[    5.500513]  sensor_read: addr=0xa value = 0xa0
[    5.505909]  sensor_read: addr=0xb value = 0x62
[    5.510614] info: success sensor find : jxh62
[    5.515168] name : i2c-gpio1 nr : 1
sensor :jxh62
[    5.717314] register all isp device successfully!
[    5.729090] @@@@ tx-isp-probe ok @@@@@
Search Module ver 1.0
ssid_in-->ME[2]
rotuepwd_in-->cfans1234.[3]
dhcp_in-->1[4]
ipcip_in-->192.168.0.10[5]
alias_de-->IPC-1234redf6qwe[1]
AliasLen =16,AliasBuf=IPC-1234redf6qwe
ioctl() error:No such device!
pwd on
ioctl() error:No such device!
ioctl() error:No such device!
ioctl() error:No such device!
**v ok
gpio CLOSE---==
MB wifiModel=1
AP model
[    9.705340] RTL871X: module init start
[    9.709241] RTL871X: rtl8188eu v4.3.0.8_13968.20150417
[    9.714736] RTL871X: build time: Jul 31 2017 19:15:26
[    9.720099] RTL871X: 
[    9.720099] usb_endpoint_descriptor(0):
[    9.726558] RTL871X: bLength=7
[    9.729742] RTL871X: bDescriptorType=5
[    9.733630] RTL871X: bEndpointAddress=81
[    9.737807] RTL871X: wMaxPacketSize=512
[    9.741795] RTL871X: bInterval=0
[    9.745222] RTL871X: RT_usb_endpoint_is_bulk_in = 1
[    9.750293] RTL871X: 
[    9.750293] usb_endpoint_descriptor(1):
[    9.756696] RTL871X: bLength=7
[    9.759872] RTL871X: bDescriptorType=5
[    9.763759] RTL871X: bEndpointAddress=2
[    9.767812] RTL871X: wMaxPacketSize=512
[    9.771798] RTL871X: bInterval=0
[    9.775212] RTL871X: RT_usb_endpoint_is_bulk_out = 2
[    9.780368] RTL871X: 
[    9.780368] usb_endpoint_descriptor(2):
[    9.786753] RTL871X: bLength=7
[    9.789925] RTL871X: bDescriptorType=5
[    9.793811] RTL871X: bEndpointAddress=3
[    9.797854] RTL871X: wMaxPacketSize=512
[    9.801838] RTL871X: bInterval=0
[    9.805242] RTL871X: RT_usb_endpoint_is_bulk_out = 3
[    9.810402] RTL871X: nr_endpoint=3, in_num=1, out_num=2
[    9.810402] 
[    9.817414] RTL871X: USB_SPEED_HIGH
[    9.821088] RTL871X: CHIP TYPE: RTL8188E
[    9.825296] RTL871X: register rtw_netdev_ops to netdev_ops
[    9.831334] RTL871X: Chip Version Info: CHIP_8188E_Normal_Chip_TSMC_D_CUT_1T1R_RomVer(0)
[    9.839803] RTL871X: RF_Type is 3!!
[    9.843426] RTL871X: _ConfigNormalChipOutEP_8188E OutEpQueueSel(0x05), OutEpNumber(2) 
[    9.851820] RTL871X: EEPROM type is E-FUSE
[    9.856099] RTL871X: ====> _ReadAdapterInfo8188EU
[    9.861085] RTL871X: Boot from EFUSE, Autoload OK !
[    9.868316] RTL871X: SetHwReg8188EU: bMacPwrCtrlOn=1
[    9.873624] bFWReady == _FALSE call reset 8051...
[    9.878948] RTL871X: =====> _8051Reset88E(): 8051 reset success .
[    9.903636] RTL871X: efuse_read_phymap_from_txpktbuf bcnhead:0
[    9.910194] RTL871X: efuse_read_phymap_from_txpktbuf len:161, lenbak:161, aaa:161, aaabak:161
[    9.924671] RTL871X: efuse_read_phymap_from_txpktbuf read count:159
[    9.931411] RTL871X: EEPROM ID=0x8129
[    9.935243] RTL871X: VID = 0x0BDA, PID = 0x0179
[    9.939945] RTL871X: Customer ID: 0x00, SubCustomer ID: 0xCD
[    9.945880] RTL871X: Hal_ReadPowerSavingMode88E...bHWPwrPindetect(0)-bHWPowerdown(0) ,bSupportRemoteWakeup(1)
[    9.956193] RTL871X: ### PS params=>  power_mgnt(1),usbss_enable(0) ###
[    9.963060] RTL871X: ======= Path 0, Channel 1 =======
[    9.968440] RTL871X: Index24G_CCK_Base[0][1] = 0x2e
[    9.973508] RTL871X: Index24G_BW40_Base[0][1] = 0x2e
[    9.978720] RTL871X: ======= Path 0, Channel 2 =======
[    9.984072] RTL871X: Index24G_CCK_Base[0][2] = 0x2e
[    9.989134] RTL871X: Index24G_BW40_Base[0][2] = 0x2e
[    9.994339] RTL871X: ======= Path 0, Channel 3 =======
[    9.999678] RTL871X: Index24G_CCK_Base[0][3] = 0x2e
[   10.004796] RTL871X: Index24G_BW40_Base[0][3] = 0x2d
[   10.009954] RTL871X: ======= Path 0, Channel 4 =======
[   10.015343] RTL871X: Index24G_CCK_Base[0][4] = 0x2e
[   10.020411] RTL871X: Index24G_BW40_Base[0][4] = 0x2d
[   10.025618] RTL871X: ======= Path 0, Channel 5 =======
[   10.030956] RTL871X: Index24G_CCK_Base[0][5] = 0x2e
[   10.036073] RTL871X: Index24G_BW40_Base[0][5] = 0x2d
[   10.041230] RTL871X: ======= Path 0, Channel 6 =======
[   10.046621] RTL871X: Index24G_CCK_Base[0][6] = 0x2e
[   10.051687] RTL871X: Index24G_BW40_Base[0][6] = 0x2c
[   10.056896] RTL871X: ======= Path 0, Channel 7 =======
[   10.062454] RTL871X: Index24G_CCK_Base[0][7] = 0x2e
[   10.070736] RTL871X: Index24G_BW40_Base[0][7] = 0x2c
ioctl() error:No such device!
[   10.079182] RTL871X: ======= Path 0, Channel 8 =======
[   10.087196] RTL871X: Index24G_CCK_Base[0][8] = 0x2e
[   10.092266] RTL871X: Index24G_BW40_Base[0][8] = 0x2c
[   10.097498] RTL871X: ======= Path 0, Channel 9 =======
[   10.102839] RTL871X: Index24G_CCK_Base[0][9] = 0x2e
[   10.108033] RTL871X: Index24G_BW40_Base[0][9] = 0x2c
[   10.113193] RTL871X: ======= Path 0, Channel 10 =======
[   10.118699] RTL871X: Index24G_CCK_Base[0][10] = 0x2e
[   10.123859] RTL871X: Index24G_BW40_Base[0][10] = 0x2c
[   10.129174] RTL871X: ======= Path 0, Channel 11 =======
[   10.134626] RTL871X: Index24G_CCK_Base[0][11] = 0x2e
[   10.139776] RTL871X: Index24G_BW40_Base[0][11] = 0x2c
[   10.145075] RTL871X: ======= Path 0, Channel 12 =======
[   10.150506] RTL871X: Index24G_CCK_Base[0][12] = 0x2e
[   10.155710] RTL871X: Index24G_BW40_Base[0][12] = 0x2b
[   10.160958] RTL871X: ======= Path 0, Channel 13 =======
[   10.166434] RTL871X: Index24G_CCK_Base[0][13] = 0x2e
[   10.171593] RTL871X: Index24G_BW40_Base[0][13] = 0x2b
[   10.176894] RTL871X: ======= Path 0, Channel 14 =======
[   10.182321] RTL871X: Index24G_CCK_Base[0][14] = 0x2e
[   10.187528] RTL871X: Index24G_BW40_Base[0][14] = 0x2b
[   10.192777] RTL871X: ======= TxCount 0 =======
[   10.197444] RTL871X: CCK_24G_Diff[0][0]= 0
[   10.201700] RTL871X: OFDM_24G_Diff[0][0]= 1
[   10.206116] RTL871X: BW20_24G_Diff[0][0]= 0
[   10.210465] RTL871X: BW40_24G_Diff[0][0]= 0
[   10.214875] RTL871X: EEPROMRegulatory = 0x0
[   10.219226] RTL871X: mlmepriv.ChannelPlan = 0x20
[   10.224073] RTL871X: CrystalCap: 0x21
[   10.227879] RTL871X: EEPROM Customer ID: 0x 0
[   10.232398] RTL871X: EEPROM : AntDivCfg = 0, TRxAntDivType = 3
[   10.238492] RTL871X: Board Type: 0x 0
[   10.242298] RTL871X: ThermalMeter = 0x1a
[   10.246427] RTL871X: <==== _ReadAdapterInfo8188EU in 390 ms
[   10.252443] RTL871X: init_channel_set ChannelPlan ID 20 Chan num:13  
[   10.260371] RTL871X: rtw_macaddr_cfg MAC Address  = 28:f3:66:96:7a:42
[   10.267253] RTL871X: bDriverStopped:1, bSurpriseRemoved:0, bup:0, hw_init_completed:0
[   10.275449] RTL871X: rtw_ndev_init(wlan0)
[   10.294207] RTL871X: _rtw_drv_register_netdev, MAC Address (if1) = 28:f3:66:96:7a:42
[   10.306025] usbcore: registered new interface driver rtl8188eu
[   10.312111] RTL871X: module init ret=0
ioctl() error:Cannot assign requested address!
[   11.327299] RTL871X: +871x_drv - drv_open, bup=0
[   11.332106] RTL871X: Set RF Chip ID to RF_6052 and RF type to 1T1R.
[   11.339010] RTL871X: rtl8188e_FirmwareDownload fw:NIC, size: 13904
[   11.345468] RTL871X: rtl8188e_FirmwareDownload: fw_ver=b fw_subver=0001 sig=0x88e1, Month=11, Date=27, Hour=30, Minute=36
[   11.366920] RTL871X: polling_fwdl_chksum: Checksum report OK! (1, 0ms), REG_MCUFWDL:0x00030005
[   11.376443] RTL871X: =====> _8051Reset88E(): 8051 reset success .
[   11.382822] RTL871X: _FWFreeToGo: Polling FW ready OK! (1, 0ms), REG_MCUFWDL:0x000300c6
[   11.391155] RTL871X: FWDL success. write_fw:1, 30ms
[   11.664269] ==> rtl8188e_iol_efuse_patch 
[   11.735985] RTL871X: pDM_Odm TxPowerTrackControl = 1
[   11.974431] RTL871X: rtl8188eu_hal_init in 650ms
[   11.979502] RTL871X: hw_var_set_opmode()-4042 mode = 2
[   11.987717] RTL871X: MAC Address = 28:f3:66:96:7a:42
[   11.993060] RTL871X: -871x_drv - drv_open, bup=1
mask: 255.255.255.0
NetGetMask ra0 nret=0
mask0=ffffffff
wlan0--192.179.8.1
eth0--0.0.0.0
ioctl() error:No such device!
NetGetMask eth0 nret=ffffffff
mask1=0
--MAC:  28:f3:66:96:7a:42
readuid fail
Configuration file: /system/spdisk/rtl_hostapd_2G.conf
drv->ifindex=2
l2_sock_recv==l2_sock_xmit=0x0x46f640[   12.124234] RTL871X: set_mode = IW_MODE_MASTER

Failed to request a scan of neighboring BSSes[   12.132551] RTL871X: hw_var_set_opmode()-4042 mode = 3

[   12.141817] RTL871X: rtw_hostapd_sta_flush
[   12.146539] RTL871X: rtw_sta_flush(wlan0)
[   12.150709] RTL871X: issue_deauth to ff:ff:ff:ff:ff:ff
+rtl871x_sta_deauth_ops, ff:ff:ff:ff:ff:ff is deauth, reason=2[   12.156461] RTL871X: rtw_set_encryption

rtl871x_set_key_ops
[   12.165695] RTL871X: clear default encryption keys, keyid=0
rtl871x_set_key_ops
[   12.173534] RTL871X: rtw_set_encryption
[   12.179286] RTL871X: clear default encryption keys, keyid=1
rtl871x_set_key_ops
[   12.185167] RTL871X: rtw_set_encryption
[   12.190951] RTL871X: clear default encryption keys, keyid=2
rtl871x_set_key_ops
[   12.196833] RTL871X: rtw_set_encryption
[   12.202572] RTL871X: clear default encryption keys, keyid=3
Using interface wlan0 with hwaddr 28:f3:66:96:7a:42 and ssid 'CM[   12.208671] RTL871X: rtw_set_wps_assoc_resp, len=14
4A1CF-44334c404c4cc'
rtl871x_set_wps_assoc_resp_ie
[   12.219385] RTL871X: rtw_set_wps_beacon, len=14
rtl871x_set_wps_beacon_ie
rtl871x_set_wps_probe_resp_ie[   12.228529] RTL871X: rtw_set_wps_probe_resp, len=14

rtl871x_set_beacon_ops
[   12.239060] RTL871X: rtw_set_beacon, len=149
[   12.245561] RTL871X: rtw_check_beacon_data, len=135
[   12.250635] RTL871X: [HT] Support STBC = 0x01
[   12.255205] RTL871X: update_hw_ht_param
[   12.259805] RTL871X: update_hw_ht_param(): WLAN_HT_CAP_SM_PS_STATIC
[   12.273271] RTL871X: CH=4, BW=1, offset=1
[   12.278021] RTL871X: HW_VAR_BASIC_RATE: 0x15f -> 0x15f -> 0x15f
[   12.285245] RTL871X: ### Set STA_(1) info
[   12.289416] RTL871X: update_bmc_sta=> mac_id:1 , raid:6 , bitmap=0xf
[   12.296042] RTL871X: rtl8188e_Add_RateATid=> mac_id:1 , raid:6 , ra_bitmap=0xf, shortGIrate=0x00
[   12.305178] RTL871X: ### MacID(1),Set Max Tx RPT MID(2)
[   12.310719] RTL871X: ### rtl8188e_set_FwMediaStatus_cmd: MStatus=1 MACID=1 
[   12.318636] RTL871X: assoc success
rtl871x_set_hidden_ssid ignore_broadcast_ssid:0, CM4A1CF-44334c4[   12.322540] RTL871X: rtw_set_hidden_ssid(wlan0) ignore_broadcast_ssid:0, CM4A1CF-44334c404c4cc,21
04c4cc,21
rtl871x_set_acl
[   13.342605] jffs2: warning: (136) jffs2_do_read_inode_internal: Truncating ino #21 to 26256 bytes failed because it only had 24576 bytes to start with!
Selected interface 'wlan0'
Selected interface 'wlan0'
OK
udhcp server (v0.9.8) started
unable to open config file: /system/etc/udhcpd.conf
Unable to open /var/lib/misc/udhcpd.leases for reading
SIOCGIFADDR failed, is the interface up and configured?: No such device
Install AP Fail!
[   13.571015] set sensor gpio as PA-low-10bit
[   13.601167] jxh62 0-0030: jxh62 chip found @ 0x30 (i2c-gpio0)
[   13.607177] tx_isp: Registered sensor subdevice jxh62 0-0030
[   13.613235] ISP: open /etc/sensor/jxh62.bin file for isp calibrate read failed
[   14.342421] ###### image_tuning_v4l2_open 3905 #######
i264e[info]: profile Main, level 3.1
i264e[info]: profile Main, level 2.2
[   14.370349] &&& chan0  scaler.max_width = 0 max_height = 0  min_width = 0 min_height = 0 &&&
[   14.382589] &&& chan1  scaler.max_width = 640 max_height = 480  min_width = 128 min_height = 128 &&&
[chn1] scaler->outwidth = 640 scaler->outheight = 480, sscaler.o[   14.395983] ------ come to i2s_enable 
utwidth = 640 sscaler.outheight = 480
enc init 
end DealH264en[   14.403531] dp->filter convert_16bits_stereo2mono
cThread
FiRecRecordInit :0
mask: 255.255.255.0
[   14.416286] dma dma0chan24: Channel 24 have been requested.(phy id 7,type 0x06 desc a2265000)
end RTP init 
ch(0) WReFileThFlag:685ff4a0
will get uid[   14.428835] do_page_fault() #2: sending SIGSEGV to xtipc_ctl for invalid read access from
[   14.428835] 00000000 (epc == 76d0357c, ra == 00418bb0)

readuid fail
read ppconf fail
[   14.461311] codec_set_device 13 
[   14.464788] codec_set_device: set device: MIC...
[   14.887243] watchdog watchdog0: watchdog did not stop!
[   14.893788] free_count: 8
[   14.896603] codec_codec_ctl: set CODEC_TURN_OFF...

Stopped autoboot in this log to get into U-Boot:

U-Boot SPL 2013.07 (Jul 31 2017 - 17:53:34)
pll_init:347
l2cache_clk = 450000000
pll_cfg.pdiv = 8, pll_cfg.h2div = 4, pll_cfg.h0div = 4, pll_cfg.cdiv = 1, pll_cfg.l2div = 2
nf=36 nr = 1 od0 = 1 od1 = 1
cppcr is 02404900
CPM_CPAPCR 0470890d
nf=50 nr = 1 od0 = 1 od1 = 1
cppcr is 03204900
CPM_CPMPCR 0320490d
cppcr 0x9a7b5510
apll_freq 860160000 
mpll_freq 1200000000 
ddr sel mpll, cpu sel apll
ddrfreq 400000000
cclk  860160000
l2clk 430080000
h0clk 300000000
h2clk 300000000
pclk  150000000
CPM_DDRCDR(0000002c) = a0000002
DDRC_DLP:0000f003
CPM_SSICDR(00000074) = e0000011

U-Boot 2013.07 (Jul 31 2017 - 17:53:34)

Board: ISVP (Ingenic XBurst T10 SoC)
DRAM:  64 MiB
Top of RAM usable for U-Boot at: 84000000
Reserving 435k for U-Boot at: 83f90000
Reserving 32784k for malloc() at: 81f8c000
Reserving 32 Bytes for Board Info at: 81f8bfe0
Reserving 124 Bytes for Global Data at: 81f8bf64
Reserving 128k for boot params() at: 81f6bf64
Stack Pointer at: 81f6bf48
Now running in RAM - U-Boot at: 83f90000
MMC:   msc: 0
CPM_SSICDR(74) = e000000b
the manufacturer ef
SF: Detected W25Q64JV

*** Warning - bad CRC, using default environment

In:    serial
Out:   serial
Err:   serial
Net:   CPM_MACCDR(54) = a0000017
Jz4775-9161
Hit any key to stop autoboot:  0 
isvp# help
?       - alias for 'help'
base    - print or set address offset
boot    - boot default, i.e., run 'bootcmd'
boota   - boot android system
bootd   - boot default, i.e., run 'bootcmd'
bootm   - boot application image from memory
bootp   - boot image via network using BOOTP/TFTP protocol
chpart  - change active partition
cmp     - memory compare
coninfo - print console devices and information
cp      - memory copy
crc32   - checksum calculation
echo    - echo args to console
env     - environment handling commands
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls   - list files in a directory (default /)
gettime - get timer val elapsed,

go      - start application at address 'addr'
help    - print command description/usage
loadb   - load binary file over serial line (kermit mode)
loads   - load S-Record file over serial line
loady   - load binary file over serial line (ymodem mode)
loop    - infinite loop on address range
md      - memory display
mm      - memory modify (auto-incrementing address)
mmc     - MMC sub system
mmcinfo - display MMC info
mtdparts- define flash/nand partitions
mw      - memory write (fill)
nm      - memory modify (constant address)
ping    - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
reset   - Perform RESET of the CPU
run     - run commands in an environment variable
saveenv - save environment variables to persistent storage
setenv  - set environment variables
sf      - SPI flash sub-system
sleep   - delay execution for some time
source  - run script from memory
tftpboot- boot image via network using TFTP protocol
version - print monitor, compiler and linker version

Thanks in advance

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.