Dahua IPC unbricking / recovery over serial UART and TFTP

it's normal and it's threaded tasks.
No need stop it at this mode.
Just check load mode.
I don't see any other trouble at boot log ( maybe I missed something )
I need to type and operate in directories but every 10 seconds this string jump in my commands and I cant do anything!
 
It's what bothers me. Every 10 second repeating.
Then every 3 minutes reboot!
So how can I type commands?
 

Attachments

  • 20240805_163519.jpg
    20240805_163519.jpg
    1.4 MB · Views: 18
Hi, I tried it, changed appauto=0, but nothing changed and it boots every 3 minuts again!
appauto=0 is not load module as you already had

show printenv before you change
printenv
setenv appauto 1
saveenv
reboot
 
has someone tried this on newer cams like S3 series??

Sun Aug 18 14:20:51 2024: Sending 'romfs-x.squashfs.img' file to 192.168.1.108 in binary mode
#
Sun Aug 18 14:20:54 2024: Failed ( State Error ).

Code:
upTool#upTool#run dr
eth0 link is up...

Tftp print, localip:'192.168.1.108', serverip:'192.168.1.100', netmask:'255.255.255.0', ethaddr:'D4:43:0E:56:F4:3A'.
Download Filename : 'romfs-x.squashfs.img'.
Downloading:deal Tftp Pack OACK, opcode(3) error.
deal Tftp Pack OACK fail
TFTP Do Download failed
tftp Download file romfs-x.squashfs.img failed
do_tftp failed, argc = 2, fileName = romfs-x.squashfs.img.
do flwrite, tftp Buf is NULL.
do run command failed, p1 = dr, p2 = -1.

upTool#upTool#ping 192.168.1.100
eth0 link is up...
PING 192.168.1.100(192.168.1.100) 56 bytes of data, send_num:5.
64 bytes from 192.168.1.100 (192.168.1.100):icmp_req = 13 ttl=128 time=2.212ms.
64 bytes from 192.168.1.100 (192.168.1.100):icmp_req = 14 ttl=128 time=0.715ms.
64 bytes from 192.168.1.100 (192.168.1.100):icmp_req = 15 ttl=128 time=0.720ms.
64 bytes from 192.168.1.100 (192.168.1.100):icmp_req = 16 ttl=128 time=0.694ms.
64 bytes from 192.168.1.100 (192.168.1.100):icmp_req = 17 ttl=128 time=0.681ms.

----------------PING statistics---------------
17 packets transmitted,17 recevid,%0 lost






Code:
DH-Boot ver001.001.001-svn10658 (Aug 02 2023 - 10:08:59 +0800)

Vadc chan: 0x2000038, adc_data = 0x147
ddr_type_cfg = LPDDR4_SINGLE_RANK_1G
ddr init success!
Master_boot_reason: 0x0
The system boot form EMMC
enter boot normal mode
secure boot enabled


DH-Boot ver001.001.001-svn10658 (Aug 02 2023 - 10:08:59 +0800)

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.19.125 (jenkins@3045b4480d4a) (gcc version 7.5.0 (Linaro GCC 7.5-2019.12)) #2 SMP PREEMPT Wed Aug 2 10:10:40 CST 2023
[    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt: Machine model: axera,ax620x
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] random: get_random_bytes called from start_kernel+0x98/0x484 with crng_init=0
[    0.000000] percpu: Embedded 20 pages/cpu s49420 r8192 d24308 u81920
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 126992
[    0.000000] Kernel command line: mem=498M abnorm_key=yes blkdevparts=mmcblk0:512K@0(miniBoot),1M@512K(U-Boot),1536K@1536K(reserved),1M@3M(hwid),1M@4M(dgs),32M@5M(config),32M@37M(backup),16M@69M(syslog),1M@85M(updateflag),1M@86M(smc),1M@87M(dtb),16M@88M(product),32M@104M(Kernel),360M@136M(romfs),64M@496M(web),16M@560M(aewb),1M@576M(backsmc),1M@577M(backdtb),16M@578M(backproduct),32M@594M(backkernel),360M@626M(backromfs),64M@986M(backweb),16M@1050M(backaewb),32M@1066M(data),768M@1098M(firmware),128M@1866M(ext),2102M@1994M(appdata) console=ttyS0,115200n8 earlyprintk=dw_uart,board_id=0,0x04992000 initcall_debug=0 loglevel=7 vmalloc=768M root=/dev/mmcblk0p14 rootfstype=squashfs rw rootwait upgradeMode:switchBootPart=1 initrd=0x41519240,0x68e1e6
[    0.000000] mem_setup = M all_mem_size = 498
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Memory: 482752K/509952K available (8192K kernel code, 606K rwdata, 2080K rodata, 1024K init, 1299K bss, 27200K reserved, 0K cma-reserved, 256000K highmem)
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000]     vmalloc : 0xd0000000 - 0xff800000   ( 760 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xcf800000   ( 248 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
[    0.000000]       .text : 0x(ptrval) - 0x(ptrval)   (9184 kB)
[    0.000000]       .init : 0x(ptrval) - 0x(ptrval)   (1024 kB)
[    0.000000]       .data : 0x(ptrval) - 0x(ptrval)   ( 607 kB)
[    0.000000]        .bss : 0x(ptrval) - 0x(ptrval)   (1300 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Preemptible hierarchical RCU implementation.
[    0.000000] rcu:     RCU event tracing is enabled.
[    0.000000]  Tasks RCU enabled.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] arch_timer: cp15 timer(s) running at 24.00MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x588fe9dc0, max_idle_ns: 440795202592 ns
[    0.000007] sched_clock: 56 bits at 24MHz, resolution 41ns, wraps every 4398046511097ns
[    0.000021] Switching to timer-based delay loop, resolution 41ns
[    0.000584] Console: colour dummy device 80x30
[    0.000634] Calibrating delay loop (skipped), value calculated using timer frequency.. 48.00 BogoMIPS (lpj=240000)
[    0.000649] pid_max: default: 32768 minimum: 301
[    0.000802] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000817] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.001437] CPU: Testing write buffer coherency: ok
[    0.001774] CODE_0_39 defined
[    0.001831] /cpus/cpu@0 missing clock-frequency property
[    0.001850] /cpus/cpu@1 missing clock-frequency property
[    0.001870] /cpus/cpu@2 missing clock-frequency property
[    0.001890] /cpus/cpu@3 missing clock-frequency property
[    0.001905] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.059998] Setting up static identity map for 0x40100000 - 0x40100060
[    0.079983] rcu: Hierarchical SRCU implementation.
[    0.120068] smp: Bringing up secondary CPUs ...
[    0.200491] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[    0.280550] CPU2: thread -1, cpu 2, socket 0, mpidr 80000002
[    0.360653] CPU3: thread -1, cpu 3, socket 0, mpidr 80000003
[    0.360768] smp: Brought up 1 node, 4 CPUs
[    0.360792] SMP: Total of 4 processors activated (192.00 BogoMIPS).
[    0.360799] CPU: All CPU(s) started in SVC mode.
[    0.361794] devtmpfs: initialized
[    0.370870] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[    0.371343] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.371370] futex hash table entries: 1024 (order: 4, 65536 bytes)
[    0.371654] pinctrl core: initialized pinctrl subsystem
[    0.372090] NET: Registered protocol family 16
[    0.372583] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.374182] hw-breakpoint: found 5 (+1 reserved) breakpoint and 4 watchpoint registers.
[    0.374196] hw-breakpoint: maximum watchpoint size is 8 bytes.
[    0.375402] console [pstore-1] enabled
[    0.375413] pstore: Registered ramoops as persistent store backend
[    0.375424] ramoops: attached 0xf0000@0x44000000, ecc: 0/0
[    0.394403] usbcore: registered new interface driver usbfs
[    0.394480] usbcore: registered new interface driver hub
[    0.394549] usbcore: registered new device driver usb
[    0.395506] Advanced Linux Sound Architecture Driver Initialized.
[    0.396353] clocksource: Switched to clocksource arch_sys_counter
[    0.456644] NET: Registered protocol family 2
[    0.457373] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes)
[    0.457411] TCP established hash table entries: 2048 (order: 1, 8192 bytes)
[    0.457450] TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
[    0.457489] TCP: Hash tables configured (established 2048 bind 2048)
[    0.457598] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.457641] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.457813] NET: Registered protocol family 1
[    0.458413] RPC: Registered named UNIX socket transport module.
[    0.458431] RPC: Registered udp transport module.
[    0.458441] RPC: Registered tcp transport module.
[    0.458450] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    0.458687] Unpacking initramfs...
[    0.842798] Freeing initrd memory: 6716K
[    0.844678] Initialise system trusted keyrings
[    0.844953] workingset: timestamp_bits=30 max_order=17 bucket_order=0
[    0.851350] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.851554] exFAT: file-system version 5.8-2arter97
[    0.852299] NFS: Registering the id_resolver key type
[    0.852339] Key type id_resolver registered
[    0.852350] Key type id_legacy registered
[    0.853012] Key type cifs.idmap registered
[    0.857126] Key type asymmetric registered
[    0.857155] Asymmetric key parser 'x509' registered
[    0.857240] bounce: pool size: 64 pages
[    0.857264] io scheduler noop registered (default)
[    0.857275] io scheduler mq-deadline registered
[    0.857285] io scheduler kyber registered
[    0.865180] axera_dma 1920000.dw_dmac: DesignWare AXI DMA Controller, 2 channels
[    0.867752] uname = dgsmem  base = 4477c000 size = 2000
[    0.867777] uname = logmem  base = 4477e000 size = 80000
[    0.867795] uname = memlimit  base = 447fe000 size = 2000
[    0.867814] uname = ramoops_mem@44000000  base = 44000000 size = f0000
[    0.867835] uname = ax_memory_dump@4cffe000  base = 4cffe000 size = 1000
[    0.871371] Serial: 8250/16550 driver, 5 ports, IRQ sharing disabled
[    0.872923] console [ttyS0] disabled
[    0.873025] 4990000.dw_uart: ttyS0 at MMIO 0x4990000 (irq = 33, base_baud = 12500000) is a 16550A
[    1.573299] console [ttyS0] enabled
[    1.577715] 4992000.dw_uart: ttyS1 at MMIO 0x4992000 (irq = 34, base_baud = 12500000) is a 16550A
[    1.587455] 4995000.dw_uart: ttyS3 at MMIO 0x4995000 (irq = 35, base_baud = 12500000) is a 16550A
[    1.596961] panel_simple_probe bus-format = 4
[    1.601333] panel_simple_probe prepare: 0, unprepare: 0, enable: 0, disable: 0, reset_low: 0, reset_high: 0
[    1.611104] panel_simple_probe num_modes = 3
[    1.615472] panel_simple_probe use the bus_flags of the first mode as the bus_flags of connector, bus_flags = 0x2
[    1.625766] panel_simple_probe mode: 0:"1920x1080" 25 74250 1920 2448 2492 2640 1080 1084 1089 1125 0x0 0x5
[    1.635584] panel_simple_probe mode: 0:"720x576" 50 27000 720 732 794 862 576 581 586 625 0x0 0xa
[    1.644533] panel_simple_probe mode: 0:"720x480" 60 27000 720 736 798 856 480 489 495 525 0x0 0xa
[    1.653537] [drm] ax_drm_init enter
[    1.657153] [drm] ax_drm_platform_probe enter
[    1.661726] [drm] ax_crtc_probe enter, of_node: 0x(ptrval)
[    1.667404] [drm] ax_mipi_dsi_probe enter, of_node: 0xcf407da8
[    1.673244] [drm] ax_drm_bind enter
[    1.676965] [drm] ax_crtc_bind enter
[    1.680547] [drm] ax_crtc_create enter
[    1.684336] [drm] ax_plane_create enter, plane = 0x(ptrval), prop_cnt = 18
[    1.691259] [drm] ax_plane_create enter, plane = 0x(ptrval), prop_cnt = 18
[    1.698165] [drm] ax_plane_create enter, plane = 0x(ptrval), prop_cnt = 18
[    1.705057] [drm] ax_plane_create enter, plane = 0x(ptrval), prop_cnt = 18
[    1.711961] [drm] ax_vfb_init 0 enter
[    1.715629] [drm] ax_vfb_init the vfb0 is not supported
[    1.720868] [drm] ax_vfb_init 1 enter
[    1.724535] [drm] ax_vfb_init the vfb1 is not supported
[    1.729773] [drm] ax_misc_connector_create enter
[    1.734404] [drm] ax_misc_panel_find panel found
[    1.739034] [drm] ax_misc_panel_find done, ret = 0
[    1.743849] [drm] ax_misc_connector_create [connector:58:AX_VIRT], [encoder:59:Virtual-1]
[    1.752042] [drm] ax_misc_connector_create done
[    1.756605] ax drm drv drm: bound crtc@0 (ops 0xc0959228)
[    1.762009] [drm] ax_mipi_dsi_bind enter
[    1.765937] [drm] cdns_dsi_drm_probe enter
[    1.770054] [drm] cdns_dsi_drm_probe enable-dsi = 1
[    1.774951] [drm] cdns_dsi_drm_probe regs[0] = 0xd0068000
[    1.780409] [drm] cdns_dsi_drm_probe get irq done, irq[0] = 49
[    1.786254] [drm] cdns_dsi_drm_probe regs[1] = 0xd006a000
[    1.791709] [drm] cdns_dsi_drm_probe get irq done, irq[1] = 50
[    1.797597] dphy->power_regs:2220000
[    1.801206] [drm] cdns_dphy_probe tx esc clk freq = 10000000
[    1.806886] [drm] cdns_dphy_probe pll ref clk freq = 12000000
[    1.812701] [drm] cdns_dsi_drm_probe request irq[0] done
[    1.818061] [drm] cdns_dsi_drm_probe request irq[1] done
[    1.823520] panel_dsi_dts_parse format = 0, lanes = 4, flags = 0x805
[    1.829897] panel_dsi_dts_parse num_init_seqs = 4
[    1.834611] panel-init-seq: 05 00 01 00
[    1.838471] panel_dsi_dts_parse done
[    1.842060] panel_simple_probe prepare: 0, unprepare: 0, enable: 0, disable: 0, reset_low: 20, reset_high: 100
[    1.852075] panel_simple_probe num_modes = 1
[    1.856392] panel_simple_probe use the bus_flags of the first mode as the bus_flags of connector, bus_flags = 0x1
[    1.866671] panel_simple_probe mode: 0:"1920x1080" 60 148500 1920 2008 2052 2200 1080 1084 1089 1125 0x0 0xa
[    1.876515] [drm] cdns_dsi_attach enter, dev: 0x(ptrval), mode_flags: 0x805
[    1.883492] [drm] cdns_dsi_attach done
[    1.887332] [drm] cdns_dsi_drm_probe done
[    1.891370] ax drm drv drm: bound 4490000.dsi (ops 0xc095967c)
[    1.897224] [drm] Supports vblank timestamp caching Rev 2 (21.10.2013).
[    1.903842] [drm] No driver support for vblank timestamp query.
[    1.910304] [drm] Initialized AXERA 1.0.0 20210624 for drm on minor 0
[    1.916782] [drm] ax_drm_bind done
[    1.918807] null: module loaded
[    1.927466] ret = 0x0, phy_addr = 0x1d, read_data1 = 0xffff, read_data2 = 0xffff
[    1.934880] libphy: Fixed MDIO Bus: probed
[    1.939515] stmmaceth 4970000.ethernet: probe axera emac
[    1.944957] stmmaceth 4970000.ethernet: config axera emac clock
[    1.951043] stmmaceth 4970000.ethernet: emac bus clock: 312MHz
[    1.956944] stmmaceth 4970000.ethernet: emac phy clock: 25MHz
[    1.962698] stmmaceth 4970000.ethernet: rmii phy txc direction: input
[    1.969177] stmmaceth 4970000.ethernet: set rmii phy txc input mode
[    1.975482] stmmaceth 4970000.ethernet: PTP uses main clock
[    1.981120] stmmaceth 4970000.ethernet: reset axera emac and phy...
[    3.990496] stmmaceth 4970000.ethernet: select RMII mode
[    3.996010] stmmaceth 4970000.ethernet: User ID: 0x10, Synopsys ID: 0x52
[    4.002745] stmmaceth 4970000.ethernet:      DWMAC4/5
[    4.007471] stmmaceth 4970000.ethernet: DMA HW capability register supported
[    4.014525] stmmaceth 4970000.ethernet: RX Checksum Offload Engine supported
[    4.021587] stmmaceth 4970000.ethernet: TX Checksum insertion supported
[    4.028216] stmmaceth 4970000.ethernet: Wake-Up On Lan supported
[    4.034266] stmmaceth 4970000.ethernet: TSO supported
[    4.039336] stmmaceth 4970000.ethernet: Enable RX Mitigation via HW Watchdog Timer
[    4.046936] stmmaceth 4970000.ethernet (unnamed net_device) (uninitialized): device MAC address 7e:82:fe:5a:7a:78
[    4.057215] stmmaceth 4970000.ethernet: TSO feature enabled
[    4.062932] libphy: stmmac: probed
[    4.066360] mdio_bus stmmac-0: phy@1 has invalid PHY address
[    4.072031] mdio_bus stmmac-0: scan phy phy at address 0
[    4.078018] mdio_bus stmmac-0: scan phy phy at address 1
[    4.083748] mdio_bus stmmac-0: scan phy phy at address 2
[    4.089232] mdio_bus stmmac-0: scan phy phy at address 3
[    4.094645] mdio_bus stmmac-0: scan phy phy at address 4
[    4.100073] mdio_bus stmmac-0: scan phy phy at address 5
[    4.105482] mdio_bus stmmac-0: scan phy phy at address 6
[    4.110908] mdio_bus stmmac-0: scan phy phy at address 7
[    4.116332] mdio_bus stmmac-0: scan phy phy at address 8
[    4.121743] mdio_bus stmmac-0: scan phy phy at address 9
[    4.127184] mdio_bus stmmac-0: scan phy phy at address 10
[    4.132681] mdio_bus stmmac-0: scan phy phy at address 11
[    4.138198] mdio_bus stmmac-0: scan phy phy at address 12
[    4.143695] mdio_bus stmmac-0: scan phy phy at address 13
[    4.149205] mdio_bus stmmac-0: scan phy phy at address 14
[    4.154703] mdio_bus stmmac-0: scan phy phy at address 15
[    4.160213] mdio_bus stmmac-0: scan phy phy at address 16
[    4.165710] mdio_bus stmmac-0: scan phy phy at address 17
[    4.171220] mdio_bus stmmac-0: scan phy phy at address 18
[    4.176731] mdio_bus stmmac-0: scan phy phy at address 19
[    4.182227] mdio_bus stmmac-0: scan phy phy at address 20
[    4.187737] mdio_bus stmmac-0: scan phy phy at address 21
[    4.193234] mdio_bus stmmac-0: scan phy phy at address 22
[    4.198743] mdio_bus stmmac-0: scan phy phy at address 23
[    4.204240] mdio_bus stmmac-0: scan phy phy at address 24
[    4.209750] mdio_bus stmmac-0: scan phy phy at address 25
[    4.215246] mdio_bus stmmac-0: scan phy phy at address 26
[    4.220755] mdio_bus stmmac-0: scan phy phy at address 27
[    4.226252] mdio_bus stmmac-0: scan phy phy at address 28
[    4.231760] mdio_bus stmmac-0: scan phy phy at address 29
[    4.237953] ret = 0x0, phy_addr = 0x1d, read_data1 = 0xffff, read_data2 = 0xffff
[    4.245355] mdio_bus stmmac-0: scan phy phy at address 30
[    4.250864] mdio_bus stmmac-0: scan phy phy at address 31
[    4.346089] PPP generic driver version 2.4.2
[    4.350563] NET: Registered protocol family 24
[    4.355267] cdns-usb3 4800000.usb: start cdns3 probe
[    4.360262] cdns-usb3 4800000.usb: axera usb init
[    4.367003] cdns-usb3 4800000.usb: config axera cdns usb clock
[    4.372863] cdns-usb3 4800000.usb: usb_pclk: 312MHz
[    4.377854] cdns-usb3 4800000.usb: stb_predft_clk: 32764Hz
[    4.383367] cdns-usb3 4800000.usb: otg_fast_clk: 24MHz
[    4.388699] cdns-usb3 4800000.usb: usb otg init
[    4.446358] cdns-usb3 4800000.usb: switch usb role: NONE -> DEVICE
[    4.453011] cdns-usb3 4800000.usb: cdns3 core probe succeed!
[    4.459146] usbcore: registered new interface driver cdc_acm
[    4.464813] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[    4.472892] usbcore: registered new interface driver usbtest
[    4.478843] i2c /dev entries driver
[    4.487232] sdhci: Secure Digital Host Controller Interface driver
[    4.493426] sdhci: Copyright(c) Pierre Ossman
[    4.497812] sdhci-pltfm: SDHCI platform and OF driver helper
[    4.503784] 10000000.sdhc get flash clk:200000000Hz
[    4.508837] mmc0: Unknown controller version (3). You may experience problems.
[    4.566392] mmc0: SDHCI controller on 10000000.sdhc [10000000.sdhc] using ADMA 64-bit
[    4.574234] sdhci_cdns_read_phy_reg: phy lock successful
[    4.579816] 4940000.sdhc get flash clk:200000000Hz
[    4.584767] mmc1: Unknown controller version (3). You may experience problems.
[    4.646385] mmc1: SDHCI controller on 4940000.sdhc [4940000.sdhc] using ADMA 64-bit
[    4.654155] sdhci_cdns_read_phy_reg: phy lock successful
[    4.659680] 4950000.sdhc get flash clk:200000000Hz
[    5.006385] mmc2: Unknown controller version (3). You may experience problems.
[    5.176426] mmc2: SDHCI controller on 4950000.sdhc [4950000.sdhc] using ADMA 64-bit
[    5.184091] sdhci_cdns_read_phy_reg: phy lock successful
[    5.190520] mmc0: new HS400 MMC card at address 0001
[    5.196542] mmcblk0: mmc0:0001 004GA1 3.69 GiB
[    5.201665] mmcblk0boot0: mmc0:0001 004GA1 partition 1 2.00 MiB
[    5.208617] usbcore: registered new interface driver usbhid
[    5.214242] usbhid: USB HID core driver
[    5.218833] mmcblk0boot1: mmc0:0001 004GA1 partition 2 2.00 MiB
[    5.227201] oprofile: no performance counters
[    5.231709] oprofile: using timer interrupt.
[    5.236200] mmcblk0rpmb: mmc0:0001 004GA1 partition 3 512 KiB, chardev (250:0)
[    5.244841] NET: Registered protocol family 10
[    5.250119]  mmcblk0: p1(miniBoot) p2(U-Boot) p3(reserved) p4(hwid) p5(dgs) p6(config) p7(backup) p8(syslog) p9(updateflag) p10(smc) p11(dtb) p12(product) p13(Kernel) p14(romfs) p15(web) p16(aewb) p17(backsmc) p18(backdtb) p19(backproduct) p20(backkernel) p21(backromfs) p22(backweb) p23(backaewb) p24(data) p25(firmware) p26(ext) p27(appdata)
[    5.257300] Segment Routing with IPv6
[    5.284197] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[    5.290825] NET: Registered protocol family 17
[    5.295340] 8021q: 802.1Q VLAN Support v1.8
[    5.299612] Key type dns_resolver registered
[    5.304170] Registering SWP/SWPB emulation handler
[    5.309672] ax620 wakeup int mask is not defined, be careful
[    5.315736] Setting up static identity map for 0x0 - 0x18000
[    5.321437] ax620 pm int successfully
[    5.325728] Loading compiled-in X.509 certificates
[    5.330948] pstore: Using compression: deflate
[    5.358430] i2c_designware 4982000.i2c: running with gpio recovery mode! scl,sda
[    5.366534] i2c_designware 49b4000.i2c: running with gpio recovery mode! scl,sda
[    5.374494] sgm7220 8-0047: sgm7220 probe
[    5.378622] sgm7220 8-0047: device id is not correct
[    5.383595] sgm7220 8-0047: check device id fail
[    5.388555] hctosys: unable to open rtc device (rtc0)
[    5.394548] ALSA device list:
[    5.397551]   #0: Dummy 1
[    5.401794] Freeing unused kernel memory: 1024K
[    5.406524] Run /init as init process
1. enter init script
262143+0 records in
262143+0 records out
1048572 bytes (1024.0KB) copied, 1.919206 seconds, 533.6KB/s
get ethaddr1 failed, please check again!
[    7.841476] ephy: loading out-of-tree module taints kernel.
[    7.852258]
[    7.852258] ePHY Build on Aug  2 2023 at 10:18:20.
[    7.852258]
[    7.956904] match phydev drv, find addr(0x1) phy(Realtek RTL8201G/0x1cc828).
IPC-HDW5442T-ZE-2712

le 400W 1G
[    8.216404] dh_set_workqueue_phynode, get epoe objnode, 0x1 0x1cc828
[    8.368450] axera_audio_init enter
[    8.372106] dw_i2s_probe enter, pdata = 0x  (null)
[    8.376955] dev->intr_type = 0
[    8.380085] config global register to 0xf80
[    8.384373] dw_i2s_probe get irq is 43
[    8.388153] comp1: 24c00fe, 961
[    8.391300] comp1: 24c00fe, dw_configure_dai, 656
[    8.396037] IIS get i2s_mclk: 12000000
[    8.401020] IIS get i2s_mclk: 12288000
[    8.404814] IIS probe OK
[    8.407802] register dummy codec
[    8.411253] lx asoc_simple_card_probe
[    8.415031] lx ret=0,err=517
[    8.418201] es8328_component_probe, clk_get_rate before: 12000000
[    8.425468] es8328_component_probe, clk_get_rate after: 12288000
[    8.431517] designware-i2s 49ac000.i2s_mst: ASoC: Failed to create component debugfs directory
[    8.440151] dw_i2s_set_fmt, fmt: 0x4001
[    8.444206] asoc-simple-card sound: snd-soc-dummy-dai <-> 49ac000.i2s_mst mapping ok
[    8.451983] asoc-simple-card sound: ASoC: no source widget found for LOUT2
[    8.458876] asoc-simple-card sound: ASoC: Failed to add route LOUT2 -> direct -> Headphone Jack
[    8.467590] asoc-simple-card sound: ASoC: no source widget found for ROUT2
[    8.474471] asoc-simple-card sound: ASoC: Failed to add route ROUT2 -> direct -> Headphone Jack
[    8.483181] asoc-simple-card sound: ASoC: no sink widget found for LINPUT2
[    8.490069] asoc-simple-card sound: ASoC: Failed to add route Mic Jack -> direct -> LINPUT2
[    8.498433] asoc-simple-card sound: ASoC: no sink widget found for LINPUT1
[    8.505313] asoc-simple-card sound: ASoC: Failed to add route Mic Jack -> direct -> LINPUT1
[    8.513678] asoc-simple-card sound: ASoC: no sink widget found for RINPUT1
[    8.520567] asoc-simple-card sound: ASoC: Failed to add route Mic Jack -> direct -> RINPUT1
[    8.529026] es8328_set_bias_level, 198
[    8.533449] asoc_simple_card_probe, 449, ret=0
[    8.559456] [drm] register display0 done
[    8.622836] tdp_dev 4410000.tdp: probe
[    8.654353] gdc_dev 2620000.gdc: probe
[    9.131041] ax_rtc 10040000.rtc-top: rtc core: registered 10040000.rtc-top as rtc0
[    9.143360] set phy force state(6/IEEE_FORCE)
mp_autotest_flag=0
[    9.256376] update phy eLinkStat state(6/IEEE_FORCE)
[    9.306354] config register, has exist phyinfo
[    9.311385] Realtek RTL8201G stmmac-0:01: attached PHY driver [Realtek RTL8201G] (mii_bus:phy_addr=stmmac-0:01, irq=POLL)
[    9.333492] stmmaceth 4970000.ethernet eth0: No Safety Features support found
[    9.340671] stmmaceth 4970000.ethernet eth0: IEEE 1588-2008 Advanced Timestamp supported
[    9.349656] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[    9.726980] random: fast init done
[    9.738612] EXT4-fs (mmcblk0p8): recovery complete
[    9.743960] EXT4-fs (mmcblk0p8): mounted filesystem with ordered data mode. Opts: (null)
[    9.901548] EXT4-fs (mmcblk0p6): recovery complete
[    9.907016] EXT4-fs (mmcblk0p6): mounted filesystem with ordered data mode. Opts: (null)
[   10.064617] EXT4-fs (mmcblk0p7): recovery complete
[   10.069946] EXT4-fs (mmcblk0p7): mounted filesystem with ordered data mode. Opts: (null)
productname=IPC-HDW5442T-ZE-2712
uptool do memlock

DH-uptool svn-103083  build-time (08/02/2023 - 10:06:11 +0800)

upTool, init start.
##flash info.
    flash type:EMMC
    flash rwSize:0x200
    flash ersSize:0x4000
    flash oobSize:0
second autoupgrade statue:0, compatible statue:0.
upTool#[   13.526674] stmmaceth 4970000.ethernet: fix axera emac speed: 100Mhz
[   13.534091] stmmaceth 4970000.ethernet eth0: Link is Up - 100Mbps/Full - flow control rx/tx
[   13.542492] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready

Code:
upTool#printenv
bootargs=mem=768M console=ttyS0,115200n8 earlyprintk=dw_uart,board_id=0,0x04992000 initcall_debug=0 loglevel=7 vmalloc=768M root=/dev/mmcblk0p14 rootfstype=squashfs rw rootwait  upgradeMode:switchBootPart=1
bootdelay=2
baudrate=115200
ipaddr=192.168.1.108
serverip=192.168.1.100
gatewayip=192.168.1.1
netmask=255.255.255.0
bootfile=uImage
wifiaddr=00:12:34:56:78:91
da=tftp dhboot.bin.img;flwrite;
dr=tftp romfs-x.squashfs.img; flwrite
dk=tftp kernel.img; flwrite
du=tftp user-x.squashfs.img; flwrite
dw=tftp web-x.squashfs.img; flwrite
ds=tftp dsp-x.cramfs.img; flwrite
dp=tftp partition-x.cramfs.img;flwrite
dc=tftp custom-x.squashfs.img; flwrite
up=tftp runUpInfo.img
tk=tftp uImage; bootm
sysbackup=1
fdt_high=0xffffffffffffffff
splashsource=mmc_fs
splashfile=data/dpu/axera_logo.bmp
splashimage=0x420000000
framebuffer=0x404800000
splashpos=m,m
autosip=192.168.254.254
autogw=192.168.1.1
autonm=255.255.255.0
backupsip=192.168.1.100
nfssip=192.168.1.109
dpd=tftp pd-x.squashfs.img; flwrite
dfw=tftp firmware-x.squashfs.img;flwrite
dtb=tftp dhdtb.bin.img;flwrite
BSN=XXX
HWID=IPC-XXX
devalias=IPC
ID=XXX
ethaddr=XXX
filesize=152058104
appauto=1
autolip=192.168.1.251
dh_keyboard=1
mp_autotest=0

entironment size : 0x5a7 / 0x20000
 
Looks like you can just put files on FAT32 sdcard and run

sdupgrade

Code:
upTool#sdupgrade
[SD]:find 1 sd card!
[SD]:mount /dev/mmc2p1 success!
[SD]:start handle file /mnt/sd/web-x.squashfs.img
Otp version is 0x00000000, Flash version is 0x00000000
upTool_commonSwRsaVerify run successfully!

## Checking Image at 0xb5d43008 ...
   Legacy image found
   Image Name:   web
   Image Type:   ARM Linux Standalone Program (gzip compressed)
   Data Size:    17711104 Bytes = 17296.00 kB = 16.89 MB
   Load Address: 1f000000
   Entry Point:  23000000
   Verifying Checksum ... OK
crc from program is :0x8a6b1148
flwrite ok!
get part info by name, mini-Boot failed.
get boot partition info failed!
[SD]:start handle file /mnt/sd/kernel.img
Otp version is 0x00000000, Flash version is 0x00000000
upTool_commonSwRsaVerify run successfully!

## Checking Image at 0xb61cb008 ...
   Legacy image found
   Image Name:   kernel
   Image Type:   ARM Linux Firmware (uncompressed)
   Data Size:    12958720 Bytes = 12655.00 kB = 12.36 MB
   Load Address: 06800000
   Entry Point:  08800000
   Verifying Checksum ... OK
crc from program is :0xe19c55e5
flwrite ok!
get part info by name, mini-Boot failed.
get boot partition info failed!
[SD]:start handle file /mnt/sd/partition-x.cramfs.img
Otp version is 0x00000000, Flash version is 0x00000000
upTool_commonSwRsaVerify run successfully!

## Checking Image at 0x1cbf9a8 ...
   Legacy image found
   Image Name:   partition
   Image Type:   ARM Linux Firmware (uncompressed)
   Data Size:    4096 Bytes = 4.00 kB = 0.00 MB
   Load Address: 05700000
   Entry Point:  05800000
   Verifying Checksum ... OK
crc from program is :0x7423af57
flwrite ok!
get part info by name, mini-Boot failed.
get boot partition info failed!
[SD]:start handle file /mnt/sd/pd-x.squashfs.img
Otp version is 0x00000000, Flash version is 0x00000000
upTool_commonSwRsaVerify run successfully!

## Checking Image at 0xb6a90008 ...
   Legacy image found
   Image Name:   pd
   Image Type:   ARM Linux Standalone Program (gzip compressed)
   Data Size:    3764224 Bytes = 3676.00 kB = 3.59 MB
   Load Address: 05800000
   Entry Point:  06800000
   Verifying Checksum ... OK
crc from program is :0xa8344a4
flwrite ok!
get part info by name, mini-Boot failed.
get boot partition info failed!
[SD]:start handle file /mnt/sd/romfs-x.squashfs.img
Otp version is 0x00000000, Flash version is 0x00000000
upTool_commonSwRsaVerify run successfully!

## Checking Image at 0xae591008 ...
   Legacy image found
   Image Name:   romfs
   Image Type:   ARM Linux Standalone Program (gzip compressed)
   Data Size:    143220736 Bytes = 139864.00 kB = 136.59 MB
   Load Address: 08800000
   Entry Point:  1f000000
   Verifying Checksum ... OK
crc from program is :0x12ea07d6
flwrite ok!
get part info by name, mini-Boot failed.
get boot partition info failed!
[SD]:start handle file /mnt/sd/firmware-x.squashfs.img
Otp version is 0x00000000, Flash version is 0x00000000
upTool_commonSwRsaVerify run successfully!

## Checking Image at 0xad1f3008 ...
   Legacy image found
   Image Name:   firmware
   Image Type:   ARM Linux Standalone Program (gzip compressed)
   Data Size:    163790848 Bytes = 159952.00 kB = 156.20 MB
   Load Address: 44a00000
   Entry Point:  74a00000
   Verifying Checksum ... OK
crc from program is :0xd2766825
flwrite ok!
get part info by name, mini-Boot failed.
get boot partition info failed!
[SD]:/dev/mmc2p1 : upgrade 6 file success
upTool#[ 1849.206503] mmc2: card aaaa removed
 
  • Like
Reactions: iTuneDVR
I'm trying to flash VTH 5221, the console stops with current errors, what could be the reason?


Code:
        HELLO! BOOT0 is starting! Mar 12 2019 03:15:40
boot0 version : 4.0.0
boot0 commit : 8
i2c gpio config 22777722
axp209 read error
axp152 read error
DRAM DRIVE INFO: V0.7
DRAM Type = 3 (2:DDR2,3:DDR3,6:LPDDR2,7:LPDDR3)
DRAM CLK = 672 MHz
DRAM zq value: 000039bb
DRAM size = 128 MB
Reg 0x01c20848: 0x00003333
0x01c20028 0x90041811
0x01c200a0 0x8100000f
SpiNand_read_id 00000000 000000ef 000000aa
SPN_BLOCK_SIZE 131072
SPN_PAGE_SIZE 2048
spinand UBOOT_LAST_BLK_NUM 19
Succeed in opening spi nand flash.
Succeed in reading Boot1 file head.
current block is 2.
current block is 3.
current block is 4.
current block is 5.
current block is 6.
current block is 7.
sum=832c0e3e
src_sum=832c0e3e
The file stored in block 2 to block 6 is perfect.
----------storage_type = 5  in boot0-------------------------
Ready to disable icache.
Jump to secend Boot.
[      0.489]

U-Boot 2011.09-rc1-svn6551 (Aug 01 2024 - 08:10:34)

[      0.496]version: 1.1.0
[      0.499]uboot commit : 8
[      0.504]pmbus:   ready
not set main pmu id
axp read error
probe axp20x failed
axp152 read error
probe axp15 failed
axp_probe error
set power on vol to default
dcdc2_vol = 1100
axp set dcdc2_vol to 1100 failed
dcdc3_vol = 3300
axp set dcdc3_vol to 3300 failed
aldo2_vol = 2500
axp set aldo2_vol to 2500 failed
aldo3_vol = 3000
axp set aldo3_vol to 3000 failed
ldo1_vol = 3300
axp set ldo1_vol to 3300 failed
ldo2_vol = 3000
axp set ldo2_vol to 3000 failed
ldo3_vol = 3000
axp set ldo3_vol to 3000 failed
ldo4_vol = 1800
axp set ldo4_vol to 1800 failed
find power_sply to end
vbus exist
no battery, limit to dc
[      0.764]DRAM:  LogMagicNum:0 gBootLogPtr:46a00008.
save config for small mem_size
workmode = 0
storage type = 5
[      0.825]SPINAND: x5 spinand is initing...OK
spinand id is 0xaaef
spi_nand_scan_id_table chip->pages_per_blk 64
spi_nand_scan_id_table chip->page_size 2048
spi_nand_scan_id_table chip->page_spare_size 64
spi_nand_scan_id_table chip->blks_per_chip 1024
ret 0 status b0 18
ret 0 status b0 18
ret 0 status c0 0
ret 0 status a0 0
find Bbt0
find 1tbB
block 399 bad
block 400 bad
block 402 bad
block 403 bad
good block is 1020
[      0.866]sunxi flash init ok
read mbr from n + 0
can't find corresponding entry
partition file version 2
success to parse partinfo from patition file.
----------------- partinfo ------------------
fs_tpye :0 NO 1 CRAMFS 2 SQUASHFS 3 UBI 4 JFFS2 5 EXT4 6 VFAT
fs_flags:1 Read 2 Write
-name-        -offset-      -size-       -fs_flags-   -fs_type-    -backup_off-
boot0       : 0             40000         0             0             ffffffff                                                                                                                                                                                                                                                                                                                                                             
boot        : 40000         240000        0             0             ffffffff                                                                                                                                                                                                                                                                                                                                                             
mbr         : 280000        20000         0             0             ffffffff                                                                                                                                                                                                                                                                                                                                                             
env         : 2a0000        20000         0             0             42a0000                                                                                                                                                                                                                                                                                                                                                             
updateflag  : 2c0000        100000        0             0             ffffffff                                                                                                                                                                                                                                                                                                                                                             
partition   : 3c0000        100000        1             1             43c0000                                                                                                                                                                                                                                                                                                                                                             
kernel      : 4c0000        500000        0             0             44c0000                                                                                                                                                                                                                                                                                                                                                             
romfs       : 9c0000        500000        1             1             49c0000                                                                                                                                                                                                                                                                                                                                                             
logo        : ec0000        20000         1             0             4ec0000                                                                                                                                                                                                                                                                                                                                                             
web         : ee0000        500000        1             1             4ee0000                                                                                                                                                                                                                                                                                                                                                             
data        : 13e0000       500000        1             1             53e0000                                                                                                                                                                                                                                                                                                                                                             
usr         : 18e0000       f00000        1             1             58e0000                                                                                                                                                                                                                                                                                                                                                             
pd          : 27e0000       20000         1             1             67e0000                                                                                                                                                                                                                                                                                                                                                             
rootfstype cramfs root /dev/mtdblock7
sunxi_partition_get_offset_byname env,0x100
env import count 0
 
I don't remember what term you used for what this cam is doing or if you guys said this Dahua ptz1a225-hnrxa is bricked or not. It never flashes at night. Only during the day time. If you can tell me where to post this, I'd appreciate it. Thank you. My owl season is coming up and it would be nice if this cam was working. Thanks in advance for your time.
 

Attachments

Dear experts,
I tried to bring a Dahua IPC HFW2431T-ZS-27135 back into life from a boot loop situation. Probably a wrong software was uploaded, or placed in the wrong place, but the camera no longer logs in to the serial terminal. Is there a solution to bring the camera back to life? even a flash dump would be a huge help.

Last words from the Camera:

TFTP from server 192.168.254.254; our IP address is 192.168.254.253
Download Filename 'dhboot-min.bin.img'.
Download to address: 0x2000000
Downloading: #################################################
done
Bytes transferred = 1602632 (187448 hex)

## Checking Image at 02000000 ...
Legacy image found
Image Name: boot
Created: 2021-05-08 8:44:08 UTC
Image Type: ARM Linux Firmware (uncompressed)
Data Size: 1602568 Bytes = 1.5 MiB
Load Address: 00000000
Entry Point: 00280000
Verifying Checksum ... OK
Programing start at: 0x00000000
SPI probe: 32768 KiB W25Q256FV at 0:0 is now current device
write : 100%
done
fail to load partition.txt from e0000
fail to load partition file
fail to load bootargsParametersV22.txt
fail to load bootargsParametersV21.txt
resetting ...

Thanks to all, who helps me.

Kalman