Please upload bootloader for the M2 EU version

[vladyslavchupryn]

Hi! Could you please also upload the bootloader for the M2 EU version? I flashed my device with https://github.com/niceboygithub/AqaraM1SM2fw/blob/main/raw/bootloader_1.0.0_0001/bootload_1.0.0_0001.bin, and it stopped booting at all?

Log from PuTTY: uart ok strap:0x412b8ae2 enable spi-nand ROM ver:v1.21, sig:866c151, time:2016.11.04-11:26+0800, CPU(400 MHz), DDR2(533 M Hz)

Found recognized ID, rdid=0x00efaa21 init IP fail(0xffffffff) init ddr ok img sig err ECC_DECODE_FAIL,ecc_start_addr = 0xbfe006e8 img sig err ECC_DECODE_FAIL,ecc_start_addr = 0xbfe006e8 img sig err ECC_DECODE_FAIL,ecc_start_addr = 0xbfe006e8 img sig err load img fail(0xffffffff) s-boot sec sig err fail

[rezmus]

https://ufile.io/vidnpnot

[vladyslavchupryn]

Hi! It is booting now, thanks a lot!!! Could you please also upload boot_info by any chance?

Now I am getting the following log via PuTTY: uart ok strap:0x412b8ae2 enable spi-nand ROM ver:v1.21, sig:866c151, time:2016.11.04-11:26+0800, CPU(400 MHz), DDR2(533 M Hz)

Found recognized ID, rdid=0x00efaa21 init IP fail(0xffffffff) init ddr ok img sig ok chksum ok load img ok s-boot sec sig ok decrypt img jump 0xa0000000

SPI Nand ID=00efaa21 SPI Nand die chipsize=0x08000000 byte SPI Nand dienum=1, SPI Nand blocksize=0x00020000 byte, SPI Nand pagesize=0x00000800 byte, SPI Nand oobsize=0x00000040 byte, [rtkn_scan_bbt, line 1812], RBA=51, this->RBA_PERCENT = 5,block_v2r_num=1024 [rtkn_scan_bbt, line 1822] block_v2r_num 00000400

INFO: Stored BBT in Die 0: block=8 , block_status_p1=0x000000bb load bbt v2r table:0 page:512 rtk_scan_v2r_bbt have created v2r bbt table:0 on block 8, just loads it !! check v2r bbt table:0 OK [rtk_nand_scan_bbt, line 393] mem_page_num=1 bbt_page 704 INFO: Stored BBT in Die 0: block=11 , block_status_p1=0x000000bb load bbt table:0 page:704 [rtk_nand_scan_bbt] have created bbt table:0 on block 11, just loads it !! check bbt table:0 OK [dump_BBT] Nand BBT Content Congratulation!! No BBs in this Nand. Realtek Crypto Engine v0.1 =>CPU Wake-up interrupt happen! GISR=09000084

---Realtek RTL8197F boot code at 2020.07.14-20:40+0800 v3.4T-pre2.2 (993MHz) Info: Load boot_info success! == RTL8197 Aqara Gateway bootloader == boot_info: ver:0 kernel: newest:1, curr:1 rootfs: newest:0, curr:1 kernel[0]: sum:0x81ab, size:2233348, fail:3 [1]: sum:0x80bc, size:2233412, fail:3 rootfs[0]: sum:0x64e3, size:9601028, fail:3 [1]: sum:0xfbb5, size:9445444, fail:3 root_sum_check: off watchdog_time: 0 boot_version: 1.0.0_0001 boot_magic: 0000917c priv mode Info: kernel 1 is invalid Info: kernel 0 is invalid Warn: all kernels are invalid !

---Ethernet init Okay!

I tried to flash both rootfs_1 and linuxfs_1 from https://github.com/niceboygithub/AqaraM1SM2fw/tree/main/original/M2_EU/3.3.0_0021_0526 with the flag "Signed firmware" via aqaragateway.exe, but seems like there is an issue with incorrect signature.

[niceboygithub]

boot_info depends on the kernel and rootfs. If you use aqaragateway.exe to flash firmware, it will calculate the checksum of kernel and rootfs then write to boot_info and reset the number of booting failure.

[vladyslavchupryn]

Thanks a lot for your answer!

[vladyslavchupryn]

Hi! Could you please upload a newer version of firmware for M2 EU?

Unfortunately, I am facing continuous reboots after flashing 3.3. Log is the following: uart ok strap:0x412b8ae2 enable spi-nand ROM ver:v1.21, sig:866c151, time:2016.11.04-11:26+0800, CPU(400 MHz), DDR2(533 MHz)

Found recognized ID, rdid=0x00efaa21 init IP fail(0xffffffff) init ddr ok img sig ok chksum ok load img ok s-boot sec sig ok decrypt img jump 0xa0000000

SPI Nand ID=00efaa21 SPI Nand die chipsize=0x08000000 byte SPI Nand dienum=1, SPI Nand blocksize=0x00020000 byte, SPI Nand pagesize=0x00000800 byte, SPI Nand oobsize=0x00000040 byte, [rtkn_scan_bbt, line 1812], RBA=51, this->RBA_PERCENT = 5,block_v2r_num=1024 [rtkn_scan_bbt, line 1822] block_v2r_num 00000400

INFO: Stored BBT in Die 0: block=8 , block_status_p1=0x000000bb load bbt v2r table:0 page:512 rtk_scan_v2r_bbt have created v2r bbt table:0 on block 8, just loads it !! check v2r bbt table:0 OK [rtk_nand_scan_bbt, line 393] mem_page_num=1 bbt_page 704 INFO: Stored BBT in Die 0: block=11 , block_status_p1=0x000000bb load bbt table:0 page:704 [rtk_nand_scan_bbt] have created bbt table:0 on block 11, just loads it !! check bbt table:0 OK [dump_BBT] Nand BBT Content Congratulation!! No BBs in this Nand. Realtek Crypto Engine v0.1 =>CPU Wake-up interrupt happen! GISR=09000084

---Realtek RTL8197F boot code at 2020.07.14-20:40+0800 v3.4T-pre2.2 (993MHz) Info: Load boot_info success! == RTL8197 Aqara Gateway bootloader == boot_info: ver:0 kernel: newest:0, curr:0 rootfs: newest:0, curr:1 kernel[0]: sum:0x80bc, size:2233412, fail:0 [1]: sum:0x80bc, size:2233412, fail:2 rootfs[0]: sum:0xfba6, size:9445444, fail:3 [1]: sum:0xfba6, size:9445444, fail:0 root_sum_check: off watchdog_time: 0 boot_version: 1.0.0_0001 boot_magic: 0000917c priv mode Info: loading kernel 0 ... size 2233412 Info: checking kernel 0 ... Success! Info: rootfs 0 is invalid Info: loading rootfs 1 ... Done Info: checking rootfs 1 ... Info: checking rootfs 1 ... rootfs check Success Info: select rootfs 1 cmdline:root=/dev/mtdblock7 console=ttyS0,38400 Info: booting... Jump to image start=0x80a00000... decompressing kernel: Uncompressing Linux... done, booting the kernel. done decompressing kernel. start address: 0x804e4f10 [ 0.000000] Linux version 3.10.90 (liaozhaobao@compilex64-ipg) (gcc version 4.9.4 20151028 (prerelease) (Realtek MSDK-4.9.4p1 Build 2648) ) #15 Wed Sep 1 21:01:47 CST 2021 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU revision is: 00019385 (MIPS 24Kc) [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x00000000-0x03ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00000000-0x03ffffff] [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.000000] Built 1 zonelists in Zone order, mobility grouping off. Total pages: 4088 [ 0.000000] Kernel command line: root=/dev/mtdblock7 console=ttyS0,38400 [ 0.000000] PID hash table entries: 256 (order: -4, 1024 bytes) [ 0.000000] Dentry cache hash table entries: 8192 (order: 1, 32768 bytes) [ 0.000000] Inode-cache hash table entries: 4096 (order: 0, 16384 bytes) [ 0.000000] Writing ErrCtl register=00000008 [ 0.000000] Readback ErrCtl register=00000008 [ 0.000000] Memory: 57488k/65536k available (5043k kernel code, 8048k reserved, 1243k data, 240k init, 0k highmem) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:192 [ 0.000000] Realtek GPIO IRQ init [ 0.000000] Calibrating delay loop... 660.68 BogoMIPS (lpj=3303424) [ 0.070000] pid_max: default: 32768 minimum: 301 [ 0.080000] Mount-cache hash table entries: 2048 [ 0.090000] NET: Registered protocol family 16 [ 0.100000] <<<<>>>> [ 0.120000] Do MDIO_RESET [ 0.150000] 40MHz [ 0.510000] PCIE -> Cannot LinkUP [ 0.520000] INFO: initializing USB devices ... [ 0.570000] enable port 0 two port enable [ 0.730000] patch new usb phy para for 40M OSC [ 1.270000] Realtek GPIO controller driver init [ 1.280000] INFO: initializing i2c devices ... [ 1.290000] INFO: registering sheipa spi device [ 1.310000] bio: create slab at 0 [ 1.320000] SCSI subsystem initialized [ 1.330000] INFO: sheipa spi driver register [ 1.340000] INFO: sheipa spi probe [ 1.350000] usbcore: registered new interface driver usbfs [ 1.360000] usbcore: registered new interface driver hub [ 1.370000] usbcore: registered new device driver usb [ 1.380000] Advanced Linux Sound Architecture Driver Initialized. [ 1.390000] cfg80211: Calling CRDA to update world regulatory domain [ 1.400000] Switching to clocksource MIPS [ 1.410000] NET: Registered protocol family 2 [ 1.420000] TCP established hash table entries: 2048 (order: 0, 16384 bytes) [ 1.440000] TCP bind hash table entries: 2048 (order: -1, 8192 bytes) [ 1.460000] TCP: Hash tables configured (established 2048 bind 2048) [ 1.480000] TCP: reno registered [ 1.490000] UDP hash table entries: 1024 (order: 0, 16384 bytes) [ 1.510000] UDP-Lite hash table entries: 1024 (order: 0, 16384 bytes) [ 1.530000] NET: Registered protocol family 1 [ 1.550000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 1.570000] exFAT: Version 1.2.9 [ 1.580000] NTFS driver 2.1.30 [Flags: R/O]. [ 1.590000] msgmni has been set to 112 [ 1.610000] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254) [ 1.630000] io scheduler noop registered (default) [ 1.640000] pwm_probe [ 1.770000] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled [ 1.810000] console [ttyS0] enabled, bootconsole disabled7) is a 16550A [ 1.810000] console [ttyS0] enabled, bootconsole disabled [ 1.840000] serial8250: ttyS1 at MMIO 0x18147400 (irq = 5) is a 16550A [ 1.860000] serial8250: ttyS2 at MMIO 0x18147800 (irq = 47) is a 16550A [ 1.880000] Realtek GPIO Driver for Flash Reload Default [ 1.900000] id_chain value=efaa219f [ 1.910000] id_chain value=efaa219f [ 1.920000] NAND device: Manufacturer ID: 0xef, Chip ID: 0xaa (Unknown W25M01GV 1G SPI NAND), 128MiB, page size: 2048, OOB size: 64 [ 1.950000] [rtkn_scan_bbt, line 1812], RBA=51, this->RBA_PERCENT = 5,block_v2r_num=1024 [ 1.980000] [rtkn_scan_bbt, line 1822] block_v2r_num 400

[ 2.020000] INFO: Stored BBT in Die 0: block=8 , block_status_p1=0xbb [ 2.040000] load bbt v2r table:0 page:512 rtk_scan_v2r_bbt have created v2r bbt table:0 on block 8, just loads it !! check v2r bbt table:0 OK [rtk_nand_scan_bbt, line 393] mem_page_num=1 bbt_page 704 [ 2.110000] INFO: Stored BBT in Die 0: block=11 , block_status_p1=0xbb [ 2.130000] load bbt table:0 page:704 [rtk_nand_scan_bbt] have created bbt table:0 on block 11, just loads it !! check bbt table:0 OK [dump_BBT] Nand BBT Content [ 2.170000] Congratulation!! No BBs in this Nand. [ 2.190000] 9 rtkxxpart partitions found on MTD device rtk_nand [ 2.200000] Creating 9 MTD partitions on "rtk_nand": [ 2.220000] 0x000000000000-0x0000000a0000 : "bootloader" [ 2.240000] 0x0000000a0000-0x0000000e0000 : "boot_info" [ 2.250000] 0x0000000e0000-0x000000120000 : "factory" [ 2.270000] 0x000000120000-0x000000200000 : "bbt" [ 2.290000] 0x000000200000-0x000000500000 : "linux_1" [ 2.300000] 0x000000500000-0x000001500000 : "rootfs_1" [ 2.320000] 0x000001500000-0x000001800000 : "linux_2" [ 2.340000] 0x000001800000-0x000002800000 : "rootfs_2" [ 2.350000] 0x000002800000-0x000007320000 : "data" [ 2.370000] Realtek WLAN driver - version 1.7 (2015-10-30)(SVN:Unversioned directory) [ 2.390000] Adaptivity function - version 9.3.4 [ 2.410000] Device Name = RTKWiFi0 [ 2.420000] VIF_NUM=9 [ 2.420000] MACHAL_version_init [ 2.440000] RFE TYPE =0 [ 2.440000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 2.460000] rtl819x-ehci rtl819x-ehci: Realtek rtl819x On-Chip EHCI Host Controller [ 2.490000] rtl819x-ehci rtl819x-ehci: new USB bus registered, assigned bus number 1 [ 2.540000] rtl819x-ehci rtl819x-ehci: irq 21, io mem 0x18021000 [ 2.570000] rtl819x-ehci rtl819x-ehci: USB 2.0 started, EHCI 1.00 [ 2.580000] hub 1-0:1.0: USB hub found [ 2.600000] hub 1-0:1.0: 2 ports detected [ 2.610000] usbcore: registered new interface driver usb-storage [ 2.630000] lumi_btn_probe reset btn=7 [ 2.640000] input: lumi_key as /devices/virtual/input/input0 [ 2.660000] i2c /dev entries driver [ 2.670000] usbcore: registered new interface driver usbhid [ 2.690000] usbhid: USB HID core driver [ 2.700000] soc-audio soc-audio: ASoC: machine rtl819xd_rt5680 should use snd_soc_register_card() [ 2.730000] soc-audio soc-audio: snd-soc-dummy-dai <-> rtl819x-iis mapping ok [ 2.750000] TCP: cubic registered [ 2.760000] NET: Registered protocol family 10 [ 2.780000] sit: IPv6 over IPv4 tunneling driver [ 2.790000] NET: Registered protocol family 17 [ 2.800000] Key type dns_resolver registered [ 2.820000] [ 2.820000] Probing RTL819X NIC-kenel stack size order[0]... [ 3.510000] eth0 added. vid=9 Member port 0x110... [ 3.530000] eth1 added. vid=8 Member port 0x0... [ 3.550000] ALSA device list: [ 3.560000] #0: rtl819xd_rt5680 [ 3.580000] VFS: Mounted root (squashfs filesystem) readonly on device 31:7. [ 3.600000] Freeing unused kernel memory: 240K (80624000 - 80660000) init started: BusyBox v1.22.1 (2021-05-12 15:41:14 CST) Try attaching UBI(0,0) on MTD8 and mounting in [/data]. [ 4.540000] UBI: attaching mtd8 to ubi0 [ 6.430000] UBI: scanning is finished [ 6.470000] UBI warning: print_rsvd_warning: cannot reserve enough PEBs for bad PEB handling, reserved 18, need 20 [ 6.510000] UBI: attached mtd8 (name "data", size 75 MiB) to ubi0 [ 6.530000] UBI: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes [ 6.550000] UBI: min./max. I/O unit sizes: 2048/2048, sub-page size 2048 [ 6.570000] UBI: VID header offset: 2048 (aligned 2048), data offset: 4096 [ 6.590000] UBI: good PEBs: 601, bad PEBs: 0, corrupted PEBs: 0 [ 6.600000] UBI: user volume: 1, internal volumes: 1, max. volumes count: 128 [ 6.630000] UBI: max/mean erase counter: 6/1, WL threshold: 4096, image sequence number: 737251932 [ 6.650000] UBI: available PEBs: 0, total reserved PEBs: 601, PEBs reserved for bad PEB handling: 18 [ 6.680000] UBI: background thread "ubi_bgt0d" started, PID 883 UBI device number 0, total 601 LEBs (76312576 bytes, 72.8 MiB), available 0 LEBs (0 bytes), LEB size 126976 bytes (124.0 KiB) [ 6.930000] UBIFS: parse sync [ 7.040000] UBIFS: background thread "ubifs_bgt0_0" started, PID 891 [ 7.150000] UBIFS: recovery needed [ 7.670000] UBIFS: recovery completed [ 7.680000] UBIFS: mounted UBI device 0, volume 0, name "app" [ 7.700000] UBIFS: LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes [ 7.720000] UBIFS: FS size: 69709824 bytes (66 MiB, 549 LEBs), journal size 9023488 bytes (8 MiB, 72 LEBs) [ 7.750000] UBIFS: reserved for root: 0 bytes (0 KiB) [ 7.770000] UBIFS: media format: w4/r0 (latest is w4/r0), UUID 3F9D6A6F-1428-41C3-9434-74CB792DDB47, small LPT model Mount UBIFS successfully! [ 7.940000] WlanSupportAbility = 0x3 [ 7.950000] [ODM_software_init] [ 7.950000] [97F] Bonding Type 97FS, PKG1 [ 7.950000] [97F] RFE type 0 PHY paratemters: DEFAULT [ 7.950000] clock 40MHz [ 7.950000] load efuse ok [ 7.950000] rom_progress: 0x200006f [ 7.950000] rom_progress: 0x400006f [ 8.020000] [GetHwReg88XX][PHY_REG_PG_8197Fmp_Type0] size [ 8.040000] [GetHwReg88XX][PHY_REG_PG_8197Fmp_Type0] [ 8.260000] [GetHwReg88XX][rtl8197Ffw] [ 8.270000] [GetHwReg88XX][rtl8197Ffw size] [ 8.710000] [97F] Default BB Swing=30 fw_manager.sh revision: 2 pre-revision: 2

hostname: Aqara-Hub-M2-2D2D type: lumi.gateway.iragl7, model: AH_M2_BLE Jan 1 00:00:09 mDNSResponder: mDNSResponder (Engineering Build) (May 12 2021 15:43:36) starting Jan 1 00:00:09 mDNSResponder: Unable to parse DNS server list. Unicast DNS-SD unavailable Jan 1 00:00:09 mDNSResponder: mDNSPlatformSourceAddrForDest: connect 1.1.1.1 failed errno 128 (Network is unreachable) Jan 1 00:00:09 mDNSResponder: WARNING: mdnsd continuing as root because user "nobody" do[ 9.570000] store_tty0_enable buf=disable [ 9.570000] , count=8 es not exist [ 14.370000] genirq: Flags mismatch irq 79. 00000083 (gpiolib) vs. 00000082 (wps btn) [ 16.130000] WlanSupportAbility = 0x3 [ 16.140000] [ODM_software_init] [ 16.140000] [97F] Bonding Type 97FS, PKG1 [ 16.140000] [97F] RFE type 0 PHY paratemters: DEFAULT [ 16.140000] clock 40MHz [ 16.140000] load efuse ok [ 16.140000] rom_progress: 0x200006f [ 16.140000] rom_progress: 0x400006f [ 16.210000] [GetHwReg88XX][PHY_REG_PG_8197Fmp_Type0] size [ 16.230000] [GetHwReg88XX][PHY_REG_PG_8197Fmp_Type0] [ 16.450000] [GetHwReg88XX][rtl8197Ffw] [ 16.460000] [GetHwReg88XX][rtl8197Ffw size] [ 16.900000] [97F] Default BB Swing=30 uart ok strap:0x412b8ae2 enable spi-nand ROM ver:v1.21, sig:866c151, time:2016.11.04-11:26+0800, CPU(400 MHz), DDR2(533 MHz)

Found recognized ID, rdid=0x00efaa21 init IP fail(0xffffffff) init ddr ok img sig ok chksum ok load img ok s-boot sec sig ok decrypt img jump 0xa0000000

[niceboygithub]

I uploaded, but I am not sure that what it can help for you.

[vladyslavchupryn]

Thanks a lot! I will try.