ezviz CS-CV248 davinci bootloop

[sirsikor]

Hello,
I've just bought an ezviz CS-CV248 camera which was labeled by the seller as a device registered to a different user. I'm not a fun of cloud offered features especially in a surveilance applications so I planned to use it locally. Unfortunatelly the device bootloops. I started from attaching a console and finally I got an output from the boot process:

System startup


svn_ver:39700 (Aug 29 2018 - 15:17:58)

DRAM:  64 MiB
Check Flash Memory Controller v100 ... Found
SPI Nor(cs 0) ID: 0xc8 0x40 0x18
Block:64KB Chip:16MB Name:"GD25Q128"
SPI Nor total size: 16MB
MMC:   
EMMC/MMC/SD controller initialization.
Card did not respond to voltage select!
No EMMC/MMC/SD device found !
In:    serial
Out:   serial
Err:   serial
*No SD card found!
No mmc storage device found!
load_update_file fail
Hit Ctrl+u to stop autoboot:  2  1  0
load kernel to 0x80007fc0 ...
check backup upgrade flag
Done!
## Booting kernel from Legacy Image at 80007fc0 ...
   Image Name:   Linux-3.4.35
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2044440 Bytes = 1.9 MiB
   Load Address: 80008000
   Entry Point:  80008000
   XIP Kernel Image ... OK
OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.

init started: BusyBox v1.22.1 (2018-09-05 11:32:22 CST)
8188eu.ko ASC16 ASC32.bin HZK16 bcm43143.ko bcmdl blogo.bin certs.tar.gz da_info davinci default.script dhcpd.conf execSystemCmd flash_eraseall fw_bcmdhd_r79.bin.trx gpio_test hi_cipher.ko hostapd initrun.sh ipchelper libbonjour.so libezDevSDK_Common_Module.so libezDevSDK_boot.so libmicrokernel.so libnl-genl.so.2.0.0 libnl.so.2.0.0 libr2_isp.so libsqlite3.so libusb-0.1.so libusb-1.0.so libwolfssl.so load_module.sh mav_cal.conf mfgutil mlan.ko mlogo.bin nvram_wubb-738gn.nvm r2_modules.tgz slogo.bin step_motor.ko t1 udhcpd usb8801.ko usb8801_uapsta.bin voice voice.tar.gz wpa_cli wpa_supplicant
mmz_start: 0x82400000, mmz_size: 28M
0x200f0040: 0x00000000 --> 0x00000002
0x200f0044: 0x00000000 --> 0x00000002
0x200f007c: 0x00000000 --> 0x00000001
0x200f0080: 0x00000000 --> 0x00000001
0x200f0084: 0x00000000 --> 0x00000001
0x200f0088: 0x00000000 --> 0x00000001
0x200f008c: 0x00000000 --> 0x00000002
0x200f0090: 0x00000000 --> 0x00000002
0x200f0094: 0x00000000 --> 0x00000001
0x2003002c: 0x000C4003 --> 0x000C4001
==== Your input Sensor type is ov9750 ====
out gpio_pin=38 val=1
out gpio_pin=38 val=0
ln: help: File exists
/ # LIBSYS Utils : ipchelper
autoApp = 2
LIBSYS Utils : Auto to start program
LIBSYS Utils :
== DEVICE INFO ==
LIBSYS Utils : device : flash size = 16 MB, ram size = 64 MB
LIBSYS Utils : kernel : version 3.4.35, build number = 20120425
dbg <sysInit>:bootParms.videoinType=45
LIBSYS Utils : make_serial_no: CS-CV248-A0-<OMMITED>
fm2018_init type=0.
LIBSYS ERROR: FILE->Src/Devices/EchoCancellation/fm2018.c, LINE->291:Open i2c-2 error!
[10 01:05:46][DEVLOG][ERROR]zone:8 timzezone[1:0], Dst enable:1, DSTBias:60, tz_index:138, start[3-5-0-2],end[10-5-0-3]
[10 01:05:46][DEVLOG][ERROR]timezone[1:0]
powerLineFrequencyMode = 0
[10 01:05:46][DEVLOG][ERROR]zone:8 timzezone[1:0], Dst enable:1, DSTBias:60, tz_index:138, start[3-5-0-2],end[10-5-0-3]
db version old: 1136, cur: 1136
[10 01:05:47][OTHER][ERROR]Direct reading of the database
[device status]idx: 1, enable: 1
[device status]idx: 2, enable: 0
[device status]idx: 7, enable: 0
[device status]idx: 9, enable: 0
[device status]idx: 10, enable: 1
[device status]idx: 21, enable: 0
[device status]idx: 22, enable: 0
[device status]idx: 25, enable: 0
[device status]idx: 29, enable: 0
[device status]idx: 2000, enable: 0
[device status]idx: 2201, enable: 2
[10 01:05:47][OTHER][ERROR]openPrivacy_steps:0
[10 01:05:47][OTHER][ERROR]isPanReversed:0
[10 01:05:47][OTHER][ERROR]isTiltReversed:0
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
[10 01:05:47][OTHER][ERROR]PresetDefined:0
[10 01:05:47][OTHER][ERROR]pan_pos:0
[10 01:05:47][OTHER][ERROR]tilt_pos:5
create bcm config file zone = 8
adjust time: adjusttimebyrtc stime ret=0, adjustTime=1294621547, currtime:1294621547
[10 01:05:47][HW_IF][ERROR]insmod /dav/step_motor.ko succ
[10 01:05:48][SDKCMD][ERROR]start [eth0] dhcp task
[10 01:05:48][DSP][ERROR]g_pdsp->viResolution = 0x101b
[10 01:05:48][DSP][ERROR]g_pdsp->VideoInitParam.max_viW = 1920
[10 01:05:48][DSP][ERROR]g_pdsp->VideoInitParam.max_viH = 1080
[10 01:05:48][DSP][ERROR]g_pdsp->VideoInitParam.original_viW = 1920
[10 01:05:48][DSP][ERROR]g_pdsp->VideoInitParam.original_viH = 1080
[10 01:05:48][DSP][ERROR]g_pdsp->VideoInitParam.image_viW = 1920
[10 01:05:48][DSP][ERROR]g_pdsp->VideoInitParam.image_viH = 1080
[10 01:05:48][DSP][ERROR]hwif_dsp_init start_dsp before
************************************
**************ezdsp SVN*************
********SVN VERSION IS 40487********
************************************
********Dsp Dev Ability*********
YsDevType: 5
u32AuADCVal: 19
u32AuDACVal: 14
u32IvsStartThr: 70
IvsSensity: 80
u32QrWidth: 512
u32QrHeight: 288
<lib> dspTaskCreat ok!
=============SAMPLE_COMM_VI_SetMipiAttr ViType: 64
<ISP> isp start
<ISP> img size 0 x 0
<ISP>is outdoor 0
<ISP>isp ae cfg reg : 0
linear mode
=====sensor mipi 1080P15fps linear mode init success!=====

Please help me with spotting the source of an error causing the davinci to bootloop
I'm not familiar with a davinci software suite but I managed to break the loading process during the reset of the wifi card in initrun.sh and got a console with root privileges. After this I configured the eth0 and managed to download the ipc_db to the PC. The database seems to be OK (can browse under the sqlite3 viewer). I also dumped the whole flash image so I can attach the content of the /dev partition if needed
Regards
Marek

 

[Amaaramaar]

Hit Ctrl+u to stop autoboo

As mentioned in the terminal , try it

 

[alastairstevenson]

Please help me with spotting the source of an error causing the davinci to bootloop

It doesn't look like your transcript is going far enough to show an error that causes a reboot.

 

[sirsikor]

Hello Alastair. I was hoping that You answer in this thread. I've seen many of your posts on this forum. Thanks for the prompt reply. It seems to me that the reboot is performed by some kind of a watchdog, regardless of the hardware configuration. If I unplugged a camera connector the davinci went a bit further and even acquired a dhcp address before the autoreboot. Funny thing is that when I run a modified initrun.sh (without last two lines starting execSystemcmd and ipchelper - which starts davinci) everything works in a stable way so a can do ifconfig and use tftp to transfer data between camera and PC. I'm curious whether this error stuff in a davinci startup ([OTHER][ERROR],[SDKCMD][error]) sequence seems familiar to You. dmesg says that everything loads properly. I even tried to use a copy of davinci from another copy of the european version of the firmware in a hope that the flash is corrupted but the result is the same. After starting davinci it continues to load and then autoreboots the device