Very odd thing, I figured out the UART (it is the unpopulated 4 pin header - requires 926100 baud rate capable interface or you will see nothing), and then it booted successfully without a kernel panic:
SC2:BL:fb9e82;ID:80566015C1412629;FEAT:3FF0F0F:1FFE0000:B002F:1;POC:FF;RCY:0;OVD:0;DFU:0;eMMC:0;RD-0:0;CHK:0;RVK-N:8000;RVK-C:8000;RVK-A:800;RVK-C:8800;RVK-A:800;RVK-C:8800;RVK-N:8000;RVK-C:8800;SCS:0;RVK-N:00004000;RVK-C:0000c800;RVK-N:00002000;RVK-C:0000e800;
build in ddr magic:lpddr4
OTP_LIC00 : 0f0fff030000fe1f2f000b0000000000
OTP_LIC10 : 00820700aa01fe00ff00001f00400300
OTP_LIC20 : ffffffbf00000000c280000000000001
OTP_LIC30 : 000000f201000000ff0200f207000000
TE: 202160
BL2 Built : 04:10:44, Mar 15 2023. sc2 gSynamedia_v1.0-10-g7567d24 - jenkins@walle02-sh
Board ID = 1
Set sys clock to 24Mhz
gp1pll is 1200Mhz. Locked
syspll is 1512Mhz. Locked
Set sys clock to 167Mhz
hifipll is 1800Mhz. Locked
bl2_platform_setup
boot area list:
1STBLOB 00000200 00040000
BL2E 00040200 00013000
BL2X 00053200 00011000
DDRFIP 00064200 00040000
DEVFIP 000a4200 00300000
s_setup from rom:00010081
dma mode
read PFID OK
DDR driver_vesion: LPDDR4_PHY_SC2_0_1_31 build time: Mar 15 2023 04:10:25
ddr clk to 1320MHz
ddr fw flag:1
fw_type:2, cfg max:2, mask:0003
LPDDR4 probe
ddr clk to 1320MHz
Check phy result
Training has failed!
Check phy result
Training has failed!
Check phy result
dram_init
Training has failed!
1D training failed
fw_type:2, cfg max:2, mask:0002
LPDDR4 probe
ddr clk to 1320MHz
Check phy result
CA training
dram_init
Training successfully!
Check phy result
dram_init
read enable training
fine write leveling
read dq deskew
mpr read training
Write leveling coarse
1d read dqs
Training successfully!
Check phy result
dram_init
mpr read training
1d write dqs
1d read dqs
read latency training
Training successfully!
1D training succeed
Check phy result
dram_init
2d read
2d read
2d write
2d write
Training successfully!
soc_vref_reg_value 0x 0000001c 0000001e 0000001d 0000001c 0000001d 0000001b 0000001c 0000001e 0000001d 0000001d 0000001d 0000001e 0000001c 0000001e 0000001d 0000001e 0000001e 0000001e 0000001d 0000001c 0000001e 0000001f 0000001d 0000001e 0000001e 0000001d 0000001d 0000001d 0000001d 0000001b 0000001e 0000001e dram_vref_reg_value 0x 0000004e
2D training succeed
auto size-- 65535DDR cs0 size: 2048MB
DDR cs1 size: 0MB
DMC_DDR_CTRL: 00c00054DDR size: 2048MB
cs0 DataBus test pass
cs0 AddrBus test pass
non-sec scramble use random key
sec scramble use random key
ddr scramble enabled
100bdlr_step_size ps== 450
load mask:00
Load: DDRFIP From: eMMC - 3.0 src: 00000000, dst: f700ab90, size: 00009600sdemmc src: ;
Load: DDRFIP From: eMMC - 3.0 src: 0000a000, dst: f700ab90, size: 00009600sdemmc src: ;
Load: DDRFIP From: eMMC - 3.0 src: 00014000, dst: f700ab90, size: 00009600sdemmc src: ;
Load: DDRFIP From: eMMC - 3.0 src: 0001e000, dst: f700ab90, size: 00009600sdemmc src: ;
Load: DDRFIP From: eMMC - 3.0 src: 00028000, dst: f700ab90, size: 00009600sdemmc src: ;
Load: DDRFIP From: eMMC - 3.0 src: 00032000, dst: f700ab90, size: 00009600sdemmc src: ;
result report
boot times 0
INFO: bl2_load_bl2ex start!
INFO: load ...
Load: BL2E From: eMMC - 3.0 src: 00002000, dst: 00fffff0, size: 00011000sdemmc src: ;
INFO: check ...
SHA CHK OK!
INFO: load ...
Load: BL2X From: eMMC - 3.0 src: 00000000, dst: 007ffff0, size: 00011000sdemmc src: ;
INFO: check ...
SHA CHK OK!
RVK-A:00000400;RVK-C:0000ec00;RVK-N:00004000;RVK-C:0000ec00;RVK-N:00002000;RVK-C:0000ec00;RVK-A:00000400;RVK-C:0000ec00;run into bl2e
info: get valid params from BL2 !
bl2_gd_init
BL2E: do things as vendor specific ...
Hello world, now in BL2E
TE: 580459
BL2E Built : 07:42:47, Feb 20 2023. sc2 g486c9eb - jenkins@walle02-sh
Start to do bl2e platform setup !
boot area list:
1STBLOB 00000200 00040000
BL2E 00040200 00013000
BL2X 00053200 00011000
DDRFIP 00064200 00040000
DEVFIP 000a4200 00300000
eMMC boot @ 0
sw-hs2 s
tun-w: s=4, sz=4
sw8 s
aml log : BL2E load BL3X.....
TE: 587126
Load FIP HDR from eMMC, src: 0x00000000, des: 0x00300000, size: 0x00008000, part: 0
Load BL3X from eMMC, src: 0x00008000, des: 0x00308000, size: 0x0026c260, part: 0
bl30 payload size: 0x00010260
bl30 memcpy
info: process payload 0 bl3x_toc: 0x00300020 bl3x_data: 0x00308000 rc=148
bl40 payload size: 0x00018470
info: process payload 1 bl3x_toc: 0x00300048 bl3x_data: 0x00319000 rc=188
bl31 payload size: 0x00040470
info: process payload 2 bl3x_toc: 0x00300070 bl3x_data: 0x00332000 rc=211
bl32 payload size: 0x00080470
info: process payload 3 bl3x_toc: 0x00300098 bl3x_data: 0x00373000 rc=245
bl33 memcpy
bl33 payload size: 0x00180260 offset: 0x000f4000
info: process payload 4 bl3x_toc: 0x003000c0 bl3x_data: 0x003f4000 rc=268
info: process payload 5 bl3x_toc: 0x003000e8 bl3x_data: 0x003001e0 rc=148
info: process payload 6 bl3x_toc: 0x00300110 bl3x_data: 0x00300fe0 rc=188
info: process payload 7 bl3x_toc: 0x00300138 bl3x_data: 0x00301de0 rc=211
info: process payload 8 bl3x_toc: 0x00300160 bl3x_data: 0x00302be0 rc=245
info: process payload 9 bl3x_toc: 0x00300188 bl3x_data: 0x003039e0 rc=268
info: process payload 10 bl3x_toc: 0x003001b0 bl3x_data: 0x003047e0 rc=314
aml log : BL2E loading BL3X is done...!
boot bl2x
params to bl2x, address=0x0100c130
Hello, we are in BL2X world !
TE: 703076
BL2X Built : 14:16:10, Jan 10 2022. sc2 gSynamedia_v1.0-3-g61a1ae4 - jenkins@walle02-sh
bl2_platform_setup
INFO: get valid list_blobinfo, 0x0100c130
Info: get valid bl31 payload info, address= 0x00332000 size= 0x00040470
Info: bl31 image is now ready !
Info: get valid bl40 payload info, address= 0x00319000 size= 0x00018470
RVK-A:00000200;RVK-C:0000ee00;RVK-A:00000200;RVK-C:0000ee00;
FEAT_DISABLE_SECURE_ENCLAVE: 1
szmin_default_areas: 0
bl2e_2 entry: 010000c0
run into bl31
NOTICE: BL31: v1.3(release):83e28731f
NOTICE: BL31: Built : 07:10:56, Feb 3 2023
BL31:tsensor calibration: pll tsensor: 0xfa008028, ddr tsensor: 0xfa00000d
[mhu]: mhu_init-v1
[mhu]: 0xfe007080, 0x12120210
[mhu]: 0xfe007084, 0x12121002
[mhu]: 0xfe00708c, 0xa0a0802
[mhu]: 0xfe007010, 0x2
[mhu]: 0xfe007018, 0x10
[mhu]: 0xfe007014, 0x8
[mhu]: 0xfe007020, 0x89
[mhu]: 0xfe007024, 0x440
[mhu]: 0xfe007028, 0x6
[mhu]: mhu_init-v1 done
DEVICE_MVN=0x0
NOTICE: BL31: SC2 normal boot!
NOTICE: BL31: BL33 decompress pass
E/TC:0 00 INFO: BL3-2: ATOS-V3.8.0-e09061cdf (gcc version 8.3.0 (GNU Toolchain for the A-profile Architecture 8.3-2019.03 (arm-rel-8.36))) #1 Fri 13 Jan 2023 11:38:15 AM UTC arm
E/TC:0 00 INFO: BL3-2: secure time TEE
E/TC:0 00 INFO: BL3-2: Chip: SC2 Rev: B (32:B - 0:1)
Hello world again, bl2e meet you guys!
valid entry info for bl33, pc
but it still keeps crashing now since I rebooted, so this was the only time I booted successfully.
Here is a log from an unsuccessful boot:
SC2:BL:fb9e82;ID:80566015C1412629;FEAT:3FF0F0F:1FFE0000:B002F:1;POC:FF;RCY:0;OVD:0;DFU:0;eMMC:0;RD-0:0;CHK:0;RVK-N:8000;RVK-C:8000;RVK-A:800;RVK-C:8800;RVK-A:800;RVK-C:8800;RVK-N:8000;RVK-C:8800;SCS:0;RVK-N:00004000;RVK-C:0000c800;RVK-N:00002000;RVK-C:0000e800;
build in ddr magic:lpddr4
OTP_LIC00 : 0f0fff030000fe1f2f000b0000000000
OTP_LIC10 : 00820700aa01fe00ff00001f00400300
OTP_LIC20 : ffffffbf00000000c280000000000001
OTP_LIC30 : 000000f201000000ff0200f207000000
TE: 234284
BL2 Built : 04:10:44, Mar 15 2023. sc2 gSynamedia_v1.0-10-g7567d24 - jenkins@walle02-sh
Board ID = 1
Set sys clock to 24Mhz
gp1pll is 1200Mhz. Locked
syspll is 1512Mhz. Locked
Set sys clock to 167Mhz
hifipll is 1800Mhz. Locked
bl2_platform_setup
boot area list:
1STBLOB 00000200 00040000
BL2E 00040200 00013000
BL2X 00053200 00011000
DDRFIP 00064200 00040000
DEVFIP 000a4200 00300000
s_setup from rom:00010081
dma mode
read PFID OK
DDR driver_vesion: LPDDR4_PHY_SC2_0_1_31 build time: Mar 15 2023 04:10:25
ddr clk to 1320MHz
ddr fw flag:1
fw_type:2, cfg max:2, mask:0003
LPDDR4 probe
ddr clk to 1320MHz
Check phy result
Training has failed!
Check phy result
Training has failed!
Check phy result
dram_init
Training has failed!
1D training failed
fw_type:2, cfg max:2, mask:0002
LPDDR4 probe
ddr clk to 1320MHz
Check phy result
CA training
dram_init
Training successfully!
Check phy result
dram_init
read enable training
fine write leveling
read dq deskew
mpr read training
Write leveling coarse
1d read dqs
Training successfully!
Check phy result
dram_init
mpr read training
1d write dqs
1d read dqs
read latency training
Training successfully!
1D training succeed
Check phy result
dram_init
2d read
2d read
2d write
2d write
Training successfully!
soc_vref_reg_value 0x 0000001c 0000001e 0000001d 0000001d 0000001d 0000001b 0000001d 0000001e 0000001d 0000001d 0000001d 0000001e 0000001c 0000001e 0000001e 0000001e 0000001e 0000001e 0000001d 0000001d 0000001e 0000001f 0000001d 0000001e 0000001e 0000001d 0000001d 0000001d 0000001d 0000001b 0000001e 0000001e dram_vref_reg_value 0x 0000004e
2D training succeed
auto size-- 65535DDR cs0 size: 2048MB
DDR cs1 size: 0MB
DMC_DDR_CTRL: 00c00054DDR size: 2048MB
cs0 DataBus test pass
cs0 AddrBus test pass
non-sec scramble use random key
sec scramble use random key
ddr scramble enabled
100bdlr_step_size ps== 445
load mask:00
Load: DDRFIP From: eMMC - 3.0 src: 00000000, dst: f700ab90, size: 00009600sdemmc src: ;
Load: DDRFIP From: eMMC - 3.0 src: 0000a000, dst: f700ab90, size: 00009600sdemmc src: ;
Load: DDRFIP From: eMMC - 3.0 src: 00014000, dst: f700ab90, size: 00009600sdemmc src: ;
Load: DDRFIP From: eMMC - 3.0 src: 0001e000, dst: f700ab90, size: 00009600sdemmc src: ;
Load: DDRFIP From: eMMC - 3.0 src: 00028000, dst: f700ab90, size: 00009600sdemmc src: ;
Load: DDRFIP From: eMMC - 3.0 src: 00032000, dst: f700ab90, size: 00009600sdemmc src: ;
result report
boot times 0
INFO: bl2_load_bl2ex start!
INFO: load ...
Load: BL2E From: eMMC - 3.0 src: 00002000, dst: 00fffff0, size: 00011000sdemmc src: ;
INFO: check ...
SHA CHK OK!
INFO: load ...
Load: BL2X From: eMMC - 3.0 src: 00000000, dst: 007ffff0, size: 00011000sdemmc src: ;
INFO: check ...
SHA CHK OK!
RVK-A:00000400;RVK-C:0000ec00;RVK-N:00004000;RVK-C:0000ec00;RVK-N:00002000;RVK-C:0000ec00;RVK-A:00000400;RVK-C:0000ec00;run into bl2e
info: get valid params from BL2 !
bl2_gd_init
BL2E: do things as vendor specific ...
Hello world, now in BL2E
TE: 611357
BL2E Built : 07:42:47, Feb 20 2023. sc2 g486c9eb - jenkins@walle02-sh
Start to do bl2e platform setup !
boot area list:
1STBLOB 00000200 00040000
BL2E 00040200 00013000
BL2X 00053200 00011000
DDRFIP 00064200 00040000
DEVFIP 000a4200 00300000
eMMC boot @ 0
sw-hs2 s
tun-w: s=4, sz=4
sw8 s
aml log : BL2E load BL3X.....
TE: 618023
Load FIP HDR from eMMC, src: 0x00000000, des: 0x00300000, size: 0x00008000, part: 0
Load BL3X from eMMC, src: 0x00008000, des: 0x00308000, size: 0x0026c260, part: 0
bl30 payload size: 0x00010260
bl30 memcpy
info: process payload 0 bl3x_toc: 0x00300020 bl3x_data: 0x00308000 rc=148
bl40 payload size: 0x00018470
info: process payload 1 bl3x_toc: 0x00300048 bl3x_data: 0x00319000 rc=188
bl31 payload size: 0x00040470
info: process payload 2 bl3x_toc: 0x00300070 bl3x_data: 0x00332000 rc=211
bl32 payload size: 0x00080470
info: process payload 3 bl3x_toc: 0x00300098 bl3x_data: 0x00373000 rc=245
bl33 memcpy
bl33 payload size: 0x00180260 offset: 0x000f4000
info: process payload 4 bl3x_toc: 0x003000c0 bl3x_data: 0x003f4000 rc=268
info: process payload 5 bl3x_toc: 0x003000e8 bl3x_data: 0x003001e0 rc=148
info: process payload 6 bl3x_toc: 0x00300110 bl3x_data: 0x00300fe0 rc=188
info: process payload 7 bl3x_toc: 0x00300138 bl3x_data: 0x00301de0 rc=211
info: process payload 8 bl3x_toc: 0x00300160 bl3x_data: 0x00302be0 rc=245
info: process payload 9 bl3x_toc: 0x00300188 bl3x_data: 0x003039e0 rc=268
info: process payload 10 bl3x_toc: 0x003001b0 bl3x_data: 0x003047e0 rc=314
aml log : BL2E loading BL3X is done...!
boot bl2x
params to bl2x, address=0x0100c130
Hello, we are in BL2X world !
TE: 733483
BL2X Built : 14:16:10, Jan 10 2022. sc2 gSynamedia_v1.0-3-g61a1ae4 - jenkins@walle02-sh
bl2_platform_setup
INFO: get valid list_blobinfo, 0x0100c130
Info: get valid bl31 payload info, address= 0x00332000 size= 0x00040470
Info: bl31 image is now ready !
Info: get valid bl40 payload info, address= 0x00319000 size= 0x00018470
RVK-A:00000200;RVK-C:0000ee00;RVK-A:00000200;RVK-C:0000ee00;
FEAT_DISABLE_SECURE_ENCLAVE: 1
szmin_default_areas: 0
bl2e_2 entry: 010000c0
run into bl31
NOTICE: BL31: v1.3(release):83e28731f
NOTICE: BL31: Built : 07:10:56, Feb 3 2023
BL31:tsensor calibration: pll tsensor: 0xfa008028, ddr tsensor: 0xfa00000d
[mhu]: mhu_init-v1
[mhu]: 0xfe007080, 0x12120210
[mhu]: 0xfe007084, 0x12121002
[mhu]: 0xfe00708c, 0xa0a0802
[mhu]: 0xfe007010, 0x2
[mhu]: 0xfe007018, 0x10
[mhu]: 0xfe007014, 0x8
[mhu]: 0xfe007020, 0x89
[mhu]: 0xfe007024, 0x440
[mhu]: 0xfe007028, 0x6
[mhu]: mhu_init-v1 done
DEVICE_MVN=0x0
NOTICE: BL31: SC2 normal boot!
NOTICE: BL31: BL33 decompress pass
E/TC:0 00 INFO: BL3-2: ATOS-V3.8.0-e09061cdf (gcc version 8.3.0 (GNU Toolchain for the A-profile Architecture 8.3-2019.03 (arm-rel-8.36))) #1 Fri 13 Jan 2023 11:38:15 AM UTC arm
E/TC:0 00 INFO: BL3-2: secure time TEE
E/TC:0 00 INFO: BL3-2: Chip: SC2 Rev: B (32:B - 0:1)
Hello world again, bl2e meet you guys!
valid entry info for bl33, pc