Tapo H500
Spec
SoC: SigmaStar SSR920G
DRAM: 128 MiB
eMMC: 14.6 GiB (from kprintf)
Baudrate: 115200
好きな rootfs で起動させる方法
1. 分解する
2. UART を引き出す
基板裏のシールド右下にある
TX と RX は直列の 0Ω が unmount されているので、0Ω 上側のランドに直接はんだ付けするか、はんだでブリッジさせてから TP7, TP8 に結線する
https://gyazo.com/adef5c3b9137b917eeb5f92c3d7bba1e
https://gyazo.com/b99eeb62f8011f87bb4c44036f4a03e2
3. UART を PC で開く
4. 電源コネクタを接続して電源を入れ、その瞬間に eMMC の信号が流れる抵抗と周囲の銀色のシールド間をピンセットでつまんで eMMC の読み取り動作を壊す(下図)
https://gyazo.com/3720a06d3c37df469e423b7d0b2965fe
5. U-Boot がエラーにより shell に fallback する
code:エラー時の出力
IPL g9154ea4
D-27
HW Reset
MCP1866_4X
miupll_468MHz
1024MB
BIST0_0001-OK
GIC Init
Load IPL_CUST from EMMC
Checksum OK
IPL_CUST g9154ea4
Load UBOOT from EMMC
u32RunAddr = 0x23e00000
laodaddr = 0x23d00000
U-Boot 2015.01 (Feb 07 2025 - 17:09:24)
Version: M6##g4bf9b3f
I2C: ready
DRAM:
WARNING: Caches not enabled
MMC:
board_emmc_init
au8_CID: 3F 15 1 0 41 4A 54 44 34 52
eMMC 14909MB
part_type: 6(0:Unknw 6:eMMC) has_init: 1
Mstar-eMMC: 0
In: serial
Out: serial
Err: serial
Net: MAC Address 00:30:1B:BA:02:DB
Auto-Negotiation...
Link Status Speed:100 Full-duplex:1
sstar_emac
NM_Error(nm_lib_parsePtnIndexFile) 00597: invalid partition-index-file para id. NM_Error(nm_lib_readPtnTable) 00707: Parsing Partition Table ... FAILED NM_Error(nm_lib_parsePtnIndexFile) 00597: invalid partition-index-file para id. NM_Error(nm_lib_readPtnTable) 00732: Parsing Partition Table2 ... FAILED NM_Error(nm_api_selectBootImage) 00629: init failed. ERR:Please check the blk# or partiton name!
Wrong Image Format for bootm command
ERROR: can't get kernel image!
SigmaStar #
6. env を書き込み USB の root file system を mount して init するように向ける
code: u-boot.sh
env set bootargs root=/dev/ude1 console=ttyS0,115200
7. ブートを継続する
code:u-boot.sh
run bootcmd
ログイン
Linux kernel に入って以降も UART TX は機能しているが RX が塞がれる?のでシリアルコンソールではログインできない。事前に sshd と NetworkManager を有効化した適当な distro の root file system を用意して起動させ、SSH 経由でログインする。筆者は SHARP Brain x1 向けの rootfs (sdimage-x1-2024-12-23-202715.img の ext4) を使った。 次回起動時以降も hacked rootfs で起動させる方法 (未検証)
/dev/mmcblk0 の 0x4f000 にある U-Boot の env に上記 cmdline の変更を書き込んで env を永続化させる
root= を SATA で接続されたディスクのパーティションにすればおk?
U-Boot env
code:sudo dd if=/dev/mmcblk0 | xxd | less
0004f000: 52e0 1ab5 6261 7564 7261 7465 3d31 3135 R...baudrate=115
0004f010: 3230 3000 626f 6f74 6172 6773 3d72 6f6f 200.bootargs=roo
0004f020: 743d 2f64 6576 2f6d 6d63 626c 6b30 7032 t=/dev/mmcblk0p2
0004f030: 2061 6964 6576 3d2f 6465 762f 6d6d 6362 aidev=/dev/mmcb
0004f040: 6c6b 3070 3320 7269 6e67 6465 763d 2f64 lk0p3 ringdev=/d
0004f050: 6576 2f6d 6d63 626c 6b30 7034 2072 7764 ev/mmcblk0p4 rwd
0004f060: 6576 3d2f 6465 762f 6d6d 6362 6c6b 3070 ev=/dev/mmcblk0p
0004f070: 3920 726f 6f74 6673 7479 7065 3d73 7175 9 rootfstype=squ
0004f080: 6173 6866 7320 7669 7274 7561 6c5f 6d74 ashfs virtual_mt
0004f090: 646e 756d 3d30 2072 6f20 696e 6974 3d2f dnum=0 ro init=/
0004f0a0: 6c69 6e75 7872 6320 4c58 5f4d 454d 3d30 linuxrc LX_MEM=0
0004f0b0: 7833 6666 6530 3030 3020 6d6d 615f 6865 x3ffe0000 mma_he
0004f0c0: 6170 3d6d 6d61 5f68 6561 705f 6e61 6d65 ap=mma_heap_name
0004f0d0: 302c 6d69 753d 302c 737a 3d30 7831 4630 0,miu=0,sz=0x1F0
0004f0e0: 3030 3030 3020 6d6d 615f 6d65 6d62 6c6f 00000 mma_memblo
0004f0f0: 636b 5f72 656d 6f76 653d 3120 636d 613d ck_remove=1 cma=
0004f100: 324d 4030 7832 3338 3030 3030 3020 6d6d 2M@0x23800000 mm
0004f110: 6170 5f72 6573 6572 7665 643d 6662 2c6d ap_reserved=fb,m
0004f120: 6975 3d30 2c73 7a3d 3078 3830 3030 3030 iu=0,sz=0x800000
0004f130: 2c6d 6178 5f73 7461 7274 5f6f 6666 3d30 ,max_start_off=0
0004f140: 7833 4630 3030 3030 302c 6d61 785f 656e x3F000000,max_en
0004f150: 645f 6f66 663d 3078 3346 3830 3030 3030 d_off=0x3F800000
0004f160: 2066 6173 743d 3000 626f 6f74 636d 643d fast=0.bootcmd=
0004f170: 656d 6d63 2072 6561 642e 7020 3078 3231 emmc read.p 0x21
0004f180: 3030 3030 3030 206b 6572 6e65 6c20 3078 000000 kernel 0x
0004f190: 3330 3030 3030 203b 626f 6f74 6d20 3078 300000 ;bootm 0x
0004f1a0: 3231 3030 3030 3030 0062 6f6f 7464 656c 21000000.bootdel
0004f1b0: 6179 3d30 0065 7468 6163 743d 7373 7461 ay=0.ethact=ssta
0004f1c0: 725f 656d 6163 0065 7468 6164 6472 3d30 r_emac.ethaddr=0
0004f1d0: 303a 3330 3a31 623a 6261 3a30 323a 6462 0:30:1b:ba:02:db
0004f1e0: 0073 7464 6572 723d 7365 7269 616c 0073 .stderr=serial.s
0004f1f0: 7464 696e 3d73 6572 6961 6c00 7374 646f tdin=serial.stdo
0004f200: 7574 3d73 6572 6961 6c00 0000 0000 0000 ut=serial.......
ブートログ (改造 rootfs)
code:bootlog_hacked_rootfs
IPL g9154ea4
D-27
HW Reset
MCP1866_4X
miupll_468MHz
1024MB
BIST0_0001-OK
GIC Init
Load IPL_CUST from EMMC
Checksum OK
IPL_CUST g9154ea4
Load UBOOT from EMMC
u32RunAddr = 0x23e00000
laodaddr = 0x23d00000
U-Boot 2015.01 (Feb 07 2025 - 17:09:24)
Version: M6##g4bf9b3f
I2C: ready
DRAM:
WARNING: Caches not enabled
MMC:
board_emmc_init
au8_CID: 3F 15 1 0 41 4A 54 44 34 52
eMMC 14909MB
part_type: 6(0:Unknw 6:eMMC) has_init: 1
Mstar-eMMC: 0
In: serial
Out: serial
Err: serial
Net: MAC Address 00:30:1B:BA:02:DB
Auto-Negotiation...
Link Status Speed:100 Full-duplex:1
sstar_emac
NM_Error(nm_lib_parsePtnIndexFile) 00597: invalid partition-index-file para id. NM_Error(nm_lib_readPtnTable) 00707: Parsing Partition Table ... FAILED NM_Error(nm_lib_parsePtnIndexFile) 00597: invalid partition-index-file para id. NM_Error(nm_lib_readPtnTable) 00732: Parsing Partition Table2 ... FAILED NM_Error(nm_api_selectBootImage) 00629: init failed. ERR:Please check the blk# or partiton name!
Wrong Image Format for bootm command
ERROR: can't get kernel image!
SigmaStar #
SigmaStar #
SigmaStar # env set bootargs root=/dev/ude1 console=ttyS0,115200
SigmaStar # run bootcmd
MMC read: dev # 0, block # 1536, count 6144 ... 6144 blocks read: OK
## Booting kernel from Legacy Image at 21000000 ...
Image Name: MVX4##M6##g3d72e8c81KL_LX409##[B
Image Type: ARM Linux Kernel Image (lzma compressed)
Data Size: 2482052 Bytes = 2.4 MiB
Load Address: 20008000
Entry Point: 20008000
Verifying Checksum ... OK
Uncompressing Kernel Image ...
XZ !!!reserved 0x21000000 length=0x 1000000 for xz!! XZ: uncompressed size=0x4a6000, ret=7
OK
atags:0x20000000
Starting kernel ...
Booting Linux on physical CPU 0x0
Linux version 4.9.227 (tplink@Ub2004ci-Cp) (gcc version 9.1.0 (crosstool-NG 1.24.0) ) #3 SMP PREEMPT Fri Aug 22 18:16:57 CST 2025 CPU: ARMv7 Processor 410fd034 revision 4 (ARMv7), cr=70c5383d CPU: div instructions available: patching division code
CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
early_atags_to_fdt() success
OF: fdt:Machine model: MERCURY6 SSC016A-S01A-S
LXmem is 0x0 PHYS_OFFSET is 0x20000000
LX_MEM = 0x20000000, 0x0
LX_MEM2 = 0x0, 0x0
LX_MEM3 = 0x0, 0x0
EMAC_LEN= 0x0
DRAM_LEN= 0x0
no any mmap reserved
no any mma heap
cma: Reserved 2 MiB at 0x0000000025e00000
Memory policy: Data cache writealloc
percpu: Embedded 13 pages/cpu s21528 r8192 d23528 u53248
Built 1 zonelists in Zone order, mobility grouping on. Total pages: 24384
Kernel command line: root=/dev/ude1 console=ttyS0,115200 os_size=2482116
PID hash table entries: 512 (order: -1, 2048 bytes)
Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
Memory: 90124K/98304K available (3247K kernel code, 267K rwdata, 896K rodata, 180K init, 198K bss, 6132K reserved, 2048K cma-reserved, 0K highmem)
Virtual kernel memory layout:
vector : 0xffff0000 - 0xffff1000 ( 4 kB)
fixmap : 0xffc00000 - 0xfff00000 (3072 kB)
vmalloc : 0xc6800000 - 0xff800000 ( 912 MB)
lowmem : 0xc0000000 - 0xc6000000 ( 96 MB)
pkmap : 0xbfe00000 - 0xc0000000 ( 2 MB)
modules : 0xbf000000 - 0xbfe00000 ( 14 MB)
.text : 0xc0008000 - 0xc0333f70 (3248 kB)
.init : 0xc043d000 - 0xc046a000 ( 180 kB)
.data : 0xc046a000 - 0xc04acf60 ( 268 kB)
.bss : 0xc04ae000 - 0xc04dfbdc ( 199 kB)
SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
Preemptible hierarchical RCU implementation.
Build-time adjustment of leaf fanout to 32.
RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
RCU: Adjusting geometry for rcu_fanout_leaf=32, nr_cpu_ids=2
NR_IRQS:16 nr_irqs:16 16
GICv3: CPU0: found redistributor 0 region 0:0x0000000016040000
ms_init_main_intc: np->name=ms_main_intc, parent=gic
ms_init_pm_intc: np->name=ms_pm_intc, parent=ms_main_intc
ss_init_gpi_intc: np->name=ms_gpi_intc, parent=ms_main_intc
Find CLK_ven_pll, hook ms_venpll_ops
Find CLK_cpupll_clk, hook ms_cpuclk_ops
arm_arch_timer: Architected cp15 timer(s) running at 6.00MHz (virt).
clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x1623fa770, max_idle_ns: 440795202238 ns
sched_clock: 56 bits at 6MHz, resolution 166ns, wraps every 4398046511055ns
Switching to timer-based delay loop, resolution 166ns
Console: colour dummy device 80x30
Calibrating delay loop (skipped), value calculated using timer frequency.. 12.00 BogoMIPS (lpj=6000)
pid_max: default: 4096 minimum: 301
Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
CPU: Testing write buffer coherency: ok
CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
Setting up static identity map for 0x20008280 - 0x200082b0
GICv3: CPU1: found redistributor 1 region 0:0x0000000016060000
CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
Brought up 2 CPUs
SMP: Total of 2 processors activated (24.00 BogoMIPS).
CPU: All CPU(s) started in SVC mode.
devtmpfs: initialized
VFP support v0.3: implementor 41 architecture 3 part 40 variant 3 rev 4
clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns
futex hash table entries: 16 (order: -2, 1024 bytes)
xor: measuring software checksum speed
arm4regs : 1228.000 MB/sec
8regs : 728.000 MB/sec
32regs : 916.000 MB/sec
neon : 716.000 MB/sec
xor: using function: arm4regs (1228.000 MB/sec)
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic coherent allocations
GPIO: probe endPadmuxreset PAD7(reg 0x3f00:1; mask0x8) t0 PWM1_MODE_1 (org: GPIO_MODE) Padmuxreset PAD4(reg 0x103c00:73; mask0x7) t0 UART2_MODE_7 (org: I2C3_MODE_7) hw-breakpoint: found 5 (+1 reserved) breakpoint and 4 watchpoint registers.
hw-breakpoint: maximum watchpoint size is 8 bytes.
raid6: int32x1 gen() 144 MB/s
raid6: int32x1 xor() 125 MB/s
raid6: int32x2 gen() 187 MB/s
raid6: int32x2 xor() 146 MB/s
raid6: int32x4 gen() 183 MB/s
raid6: int32x4 xor() 130 MB/s
raid6: int32x8 gen() 148 MB/s
raid6: int32x8 xor() 113 MB/s
raid6: neonx1 gen() 476 MB/s
raid6: neonx1 xor() 460 MB/s
raid6: neonx2 gen() 726 MB/s
raid6: neonx2 xor() 578 MB/s
raid6: neonx4 gen() 871 MB/s
raid6: neonx4 xor() 634 MB/s
raid6: neonx8 gen() 503 MB/s
raid6: neonx8 xor() 404 MB/s
raid6: using algorithm neonx4 gen() 871 MB/s
raid6: .... xor() 634 MB/s, rmw enabled
raid6: using intx1 recovery algorithm
SCSI subsystem initialized
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
clocksource: Switched to clocksource arch_sys_counter
NET: Registered protocol family 2
TCP established hash table entries: 1024 (order: 0, 4096 bytes)
TCP bind hash table entries: 1024 (order: 2, 20480 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
UDP hash table entries: 128 (order: 0, 6144 bytes)
UDP-Lite hash table entries: 128 (order: 0, 6144 bytes)
NET: Registered protocol family 1
hw perfevents: enabled with armv7_cortex_a53 PMU driver, 7 counters available
workingset: timestamp_bits=30 max_order=15 bucket_order=0
exFAT: Version 1.2.9
squashfs: version 4.0 (2009/01/31) Phillip Lougher
jffs2: version 2.2. © 2001-2006 Red Hat, Inc.
fuse init (API version 7.26)
io scheduler noop registered
io scheduler deadline registered (default)
SStar USB3 PHY probe, base:fd2a4600
MStar_gpio: gpio driver initialized
libphy: Fixed MDIO Bus: probed
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
ehci monitor start running
Mstar_ehc_init version:20180309
Sstar-ehci-1 H.W init
Titania3_series_start_ehc start
USB enable miu lower bound address subtraction USB init squelch level 0x2 USB no platform_data, device tree coming USBEHC dma coherent_mask 0xffffffffffffffff mask 0xffffffffffffffff BC disable
USB soc:Sstar-ehci-1 irq --> 89 Sstar-ehci-1 soc:Sstar-ehci-1: EHCI Host Controller
Sstar-ehci-1 soc:Sstar-ehci-1: new USB bus registered, assigned bus number 1
Sstar-ehci-1 soc:Sstar-ehci-1: irq 89, io mem 0xfd284800
usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb1: Product: EHCI Host Controller
usb usb1: Manufacturer: Linux 4.9.227 ehci_hcd
usb usb1: SerialNumber: mstar
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 1 port detected
Sstar-ehci-2 H.W init
Titania3_series_start_ehc start
USB enable miu lower bound address subtraction USB init squelch level 0x2 USB no platform_data, device tree coming USBEHC dma coherent_mask 0xffffffffffffffff mask 0xffffffffffffffff BC disable
USB soc:Sstar-ehci-2 irq --> 90 Sstar-ehci-2 soc:Sstar-ehci-2: EHCI Host Controller
Sstar-ehci-2 soc:Sstar-ehci-2: new USB bus registered, assigned bus number 2
Sstar-ehci-2 soc:Sstar-ehci-2: irq 90, io mem 0xfd286400
usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
usb usb2: Product: EHCI Host Controller
usb usb2: Manufacturer: Linux 4.9.227 ehci_hcd
usb usb2: SerialNumber: mstar
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 1 port detected
usbcore: registered new interface driver usb-storage
mousedev: PS/2 mouse device common for all mice
i2c /dev entries driver
usbcore: registered new interface driver usbhid
usbhid: USB HID core driver
1f221000.uart: ttyS0 at MMIO 0x0 (irq = 58, base_baud = 10800000) is a unknown
1f221200.uart1: ttyS1 at MMIO 0x0 (irq = 59, base_baud = 10800000) is a unknown
1f220400.fuart: ttyS2 at MMIO 0x0 (irq = 60, base_baud = 10800000) is a unknown
1f221400.uart2: ttyS3 at MMIO 0x0 (irq = 62, base_baud = 10800000) is a unknown
1f221600.uart3: ttyS4 at MMIO 0x0 (irq = 63, base_baud = 10800000) is a unknown
Failed to get gpio for voltage control!! -1
sstar,voltage-ctrl: probe of soc:cpu_power failed with error -1
Failed to get gpio for voltage control!! -1
sstar,voltage-ctrl: probe of soc:core_power failed with error -1
Failed to get gpio for voltage control!! -1
sstar,voltage-ctrl: probe of soc:dla_power failed with error -1
eMMC: no SD 1006
flash_chrdev : flash_chrdev_init
MSYS: DMEM request: emac0_buff:0x00000812 success, CPU phy:@0x25E4C000, virt:@0xC5E4C000 libphy: mdio: probed
mdio_bus mdio-bus@emac0: /soc/emac0/mdio-bus@emac0/ethernet-phy@0 has invalid PHY address
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 0
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 1
==20180309==> hub_port_init 1 #0 mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 2
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 3
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 4
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 5
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 6
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 7
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 8
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 9
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 10
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 11
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 12
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 13
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 14
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 15
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 16
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 17
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 18
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 19
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 20
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 21
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 22
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 23
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 24
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 25
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 26
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 27
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 28
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 29
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 30
mdio_bus mdio-bus@emac0: scan phy ethernet-phy at address 31
MSYS: DMEM request: emac1_buff:0x00060812 success, CPU phy:@0x25E50000, virt:@0xC5E50000 libphy: mdio: probed
mdio_bus mdio-bus@emac1: /soc/emac1/mdio-bus@emac1/ethernet-phy@1 has invalid PHY address
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 0
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 1
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 2
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 3
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 4
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 5
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 6
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 7
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 8
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 9
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 10
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 11
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 12
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 13
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 14
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 15
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 16
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 17
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 18
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 19
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 20
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 21
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 22
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 23
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 24
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 25
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 26
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 27
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 28
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 29
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 30
mdio_bus mdio-bus@emac1: scan phy ethernet-phy at address 31
sstar,rtcpwc 1f006800.rtcpwc: rtc core: registered 1f006800.rtcpwc as rtc0
MSYS: DMEM request: AESDMA_ENG:0x00001000 success, CPU phy:@0x25E4D000, virt:@0xC5E4D000 MSYS: DMEM request: AESDMA_ENG1:0x00001000 success, CPU phy:@0x25E4E000, virt:@0xC5E4E000 NOTICEpwm-isr(82) success. If not i6e or i6b0, pls confirm it on .dtsi mstar notify driver install successfully
SATA phy_mode= 1, phy_setting= 0x4200, ssc_mode= 0x0 SATA_TX_R50 trim=0x0012
SATA_RX_R50 trim=0x0012
SATA_TX_R50_IBIAS trim=0x0030
SATA MAC interrupt mask = 0x000000CF
sstar sata HW settings done!!!
mmc0: new high speed MMC card at address 0001
mmcblk0: mmc0:0001 AJTD4R 14.6 GiB
emmc_sectors: 30535680
mmcblk0boot0: mmc0:0001 AJTD4R partition 1 4.00 MiB
mmcblk0boot1: mmc0:0001 AJTD4R partition 2 4.00 MiB
mmcblk0rpmb: mmc0:0001 AJTD4R partition 3 4.00 MiB
emmc_partition()
Start_block=1536, block_count=6144
Start_block=7680, block_count=40960
Start_block=48640, block_count=98304
Start_block=146944, block_count=57344
Start_block=214528, block_count=6144
Start_block=220672, block_count=40960
Start_block=261632, block_count=98304
Start_block=359936, block_count=57344
Start_block=427520, block_count=65536
Start_block=524288, block_count=2097152
Start_block=2621440, block_count=27914232
mmcblk0: p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11
Plug in USB Port1
usb 1-1: new high-speed USB device number 2 using Sstar-ehci-1
usb 1-1: New USB device found, idVendor=090c, idProduct=1000
usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
usb 1-1: Product: USB DISK
usb 1-1: Manufacturer: SMI Corporation
usb 1-1: SerialNumber: AAGWAQGK4CUCVZEI
usb-storage 1-1:1.0: USB Mass Storage device detected
usb-storage 1-1:1.0: Quirks match for vid 090c pid 1000: 400
scsi host0: usb-storage 1-1:1.0
scsi 0:0:0:0: Direct-Access SMI USB DISK 1100 PQ: 0 ANSI: 4
sdp-host hostt's name is usb-storage
sd 0:0:0:0: ude 15826944 512-byte logical blocks: (8.10 GB/7.55 GiB) sd 0:0:0:0: ude Write Protect is off sd 0:0:0:0: ude No Caching mode page found sd 0:0:0:0: ude Assuming drive cache: write through ude: ude1
sd 0:0:0:0: ude Attached SCSI removable disk ahci_sstar 1f346800.sata: AHCI 0001.0300 32 slots 1 ports 6 Gbps 0x1 impl platform mode
ahci_sstar 1f346800.sata: flags: ncq sntf pm led clo only pmp fbs pio slum part ccc apst
ahci_sstar 1f346800.sata: port 0 can do FBS, forcing FBSCP
scsi host1: ahci_sstar
NET: Registered protocol family 17
Registering SWP/SWPB emulation handler
Btrfs loaded, crc32c=crc32c-generic
Key type encrypted registered
mstar pwm init
PWM mstar_pwm_config duty_ns=0, period_ns=1000000 clk=12000000, u16Div=0 u32Duty=0x0 u32Period=0x2edf
sstar,rtcpwc 1f006800.rtcpwc: setting system clock to 2026-03-08 15:18:31 UTC (1772983111)
OF: fdt:not creating '/sys/firata1: SATA link down (SStatus 0 SControl 300)
EXT4-fs (ude1): couldn't mount as ext3 due to feature incompatibilities
EXT4-fs (ude1): couldn't mount as ext2 due to feature incompatibilities
EXT4-fs (ude1): mounted filesystem with ordered data mode. Opts: (null)
VFS: Mounted root (ext4 filesystem) readonly on device 8:65.
devtmpfs: mounted
This architecture does not have kernel memory protection.
random: fast init done
systemd1: Failed to look up module alias 'autofs4': Function not implemented cgroup: cgroup2: unknown option "nsdelegate,memory_recursiveprot"
cgroup: cgroup2: unknown option "nsdelegate"
systemd1: systemd 247.3-7+deb11u5 running in system mode. (+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +ZSTD +SECCOMP +) systemd1: Detected architecture arm. Welcome to Debian GNU/Linux 11 (bullseye)!