coolearn

Google search engine brings me here when I try to unbrick my AMCREST IP camera IP2M-841B after I learnt the camera is actual from Dahua. What a fruitive forum! I found so many knowledges, tips... This 5 years ago thread about unbricking Dahua IP camera also gives many helps, but finally I guess I will need this unfinished part to guide me how to unbrick. Situation: 1. Following the instruction by using TFTP to flash latest official seems ok, but uboot stopped at "Starting kernel ... " https://ipcamtalk.com/threads/dahua-ipc-easy-unbricking-recovery-over-tftp.17189/ https://ipcamtalk.com/threads/dahua-ipc-unbricking-recovery-over-serial-uart-and-tftp.16474/ in this phase, I can see uboot startuo loop, no PING response, no port listening; 2. After several times reboot loop, it seems to be in recovery (?) mode; ping response is stable; only 3800 port is listening; No telnet port; sometimes I can find it by amcrest/dahua config tool via port 3800, but not able to upgrade it. Here is my COM port output: =~=~=~=~=~=~=~=~=~=~=~= MobaXterm log 2021.01.30 20:25:21 =~=~=~=~=~=~=~=~=~=~=~= U-Boot 2010.06-svn4559 (May 27 2017 - 14:14:01) I2C: ready DRAM: 110 MiB gBootLogPtr:00b80008. spinor flash ID is 0xc81840c8 partition file version 2 rootfstype squashfs root /dev/mtdblock5 gParameter[0]:node=bootargs, parameter=console=ttyS0,115200 mem=110M root=/dev/mtdblock5 rootfstype=squashfs init=/linuxrc. gParameter[1]:node=sdupdate, parameter=gpio=33 offset=0 ledtype=state. TEXT_BASE:01000000 Net: Detected MACID:3c:ef:8c:60:f8:f7 PHY:0x001cc816,addr:0x00 phy RTL8201 init gpio:33, offset:0x0, ledtype:state MMC: sdmmc init Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'upgrade_info_7db780a713a4.txt'. Download to address: 0x5000000 Downloading: *# done Bytes transferred = 277 (115 hex) bootdelay=3 baudrate=115200 ipaddr=192.168.1.108 serverip=192.168.1.1 autoload=yes gatewayip=192.168.1.1 netmask=255.255.255.0 dh_keyboard=1 appauto=1 sysbackup=1 logserver=127.0.0.1 loglevel=4 autosip=192.168.254.254 autolip=192.168.1.108 autogw=192.168.1.1 autonm=255.255.255.0 ethact=ambarella mac BSN=1M0364BPAU02834 wifiaddr=3C:EF:8C:68:9D:83 HWID=IPC-AW25W-V2-Amcrest:01:02:08:33:18:00:01:06:01:01:04:258:03:02:00:00:00:00:00:00:100 hwidEx=04:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00 devalias=IP2M-841B da=tftp 0x2000000 dhboot.bin.img; flwrite; tftp dhboot-min.bin.img;flwrite dr=tftp 0x2000000 romfs-x.squashfs.img; flwrite dk=tftp 0x2000000 kernel.img; flwrite du=tftp 0x2000000 user-x.squashfs.img; flwrite dw=tftp 0x2000000 web-x.squashfs.img; flwrite dc=tftp 0x2000000 custom-x.squashfs.img; flwrite dt=tftp 0x2000000 data-x.squashfs.img; flwrite dp=tftp 0x02000000 partition-x.cramfs.img;flwrite up=tftp 0x2000000 update.img; flwrite tk=tftp 0x200100 hawthorn.dts.dtb;tftp 0x2000000 uImage;bootm 0x2000000 bootcmd=sf read 0x200100 0x8000 0x8000;sf read 0x2000000 0xf0000 0x180000;bootm 0x2000000 bootargs=console=ttyS0,115200 mem=110M root=/dev/mtdblock5 rootfstype=squashfs init=/linuxrc ID=AMC000R6510455T3J8 ethaddr=3C:EF:8C:60:F8:F7 stdin=serial stdout=serial stderr=serial filesize=115 fileaddr=5000000 Environment size: 1326/131068 bytes name cs offset size flag fs_flags fs_type MinBoot 0 0x0000000000000000 0x0000000000040000 0x00000000 0x00000000 0x00000000 U-Boot 0 0x0000000000080000 0x0000000000040000 0x00000000 0x00000000 0x00000000 hwid 0 0x00000000000c0000 0x0000000000020000 0x00000000 0x00000000 0x00000000 partition 0 0x00000000000e0000 0x0000000000010000 0x00000000 0x00000001 0x00000001 Kernel 0 0x00000000000f0000 0x0000000000180000 0x00000000 0x00000000 0x00000000 romfs 0 0x0000000000270000 0x0000000000150000 0x00000000 0x00000001 0x00000002 web 0 0x00000000003c0000 0x0000000000240000 0x00000000 0x00000001 0x00000002 user 0 0x0000000000600000 0x0000000000800000 0x00000000 0x00000001 0x00000002 updateflag 0 0x0000000000e00000 0x0000000000030000 0x00000000 0x00000000 0x00000000 config 0 0x0000000000e30000 0x0000000000070000 0x00000000 0x00000003 0x00000004 product 0 0x0000000000ea0000 0x0000000000010000 0x00000000 0x00000001 0x00000002 custom 0 0x0000000000eb0000 0x0000000000020000 0x00000000 0x00000001 0x00000002 backupker 0 0x0000000000ed0000 0x00000000000e0000 0x00000000 0x00000001 0x00000002 backupfs 0 0x0000000000fb0000 0x0000000000050000 0x00000000 0x00000001 0x00000002 MinBoot mountcmd: U-Boot mountcmd: hwid mountcmd: partition mountcmd: Kernel mountcmd: romfs mountcmd: web mountcmd:mount /dev/mtdblock6 /mnt/web/ user mountcmd:mount /dev/mtdblock7 /usr/ updateflag mountcmd: config mountcmd:mnt_jffs2 /dev/mtdblock9 /mnt/mtd jffs2 product mountcmd:mount /dev/mtdblock10 /mnt/pd/ custom mountcmd:mount /dev/mtdblock11 /mnt/custom/ backupker mountcmd: backupfs mountcmd: HUSH_VERSION=0.01 usage: fatinfo <interface> <dev[:part]> Base Address: 0x00000000 SPI probe: 16384 KiB GD25Q128C at 0:0 is now current device ### filesystem type is JFFS2 Scanning JFFS2 FS: done. Compression: NONE frag count: 0 compressed sum: 0 uncompressed sum: 0 Compression: ZERO frag count: 0 compressed sum: 0 uncompressed sum: 0 Compression: RTIME frag count: 0 compressed sum: 0 uncompressed sum: 0 Compression: RUBINMIPS frag count: 0 compressed sum: 0 uncompressed sum: 0 Compression: COPY frag count: 0 compressed sum: 0 uncompressed sum: 0 Compression: DYNRUBIN frag count: 0 compressed sum: 0 uncompressed sum: 0 Compression: ZLIB frag count: 0 compressed sum: 0 uncompressed sum: 0 ? - alias for 'help' backup - backup- manual backup program. base - print or set address offset bdinfo - print Board Info structure boot - boot default, i.e., run 'bootcmd' bootd - boot default, i.e., run 'bootcmd' bootf - boot from flash bootm - boot application image from memory bootp - boot image via network using BOOTP/TFTP protocol cfgRestore- erase config and backup partition. cmp - memory compare coninfo - print console devices and information cp - memory copy crc32 - checksum calculation dcache - enable or disable data cache dhcp - boot image via network using DHCP/TFTP protocol echo - echo args to console editenv - edit environment variable erasepart- erasepart exit - exit script false - do nothing, unsuccessfully fatinfo - print information about filesystem fatload - load binary file from a dos filesystem fatls - list files in a directory (default /) fdt - flattened device tree utility commands flwrite - flwrite - write data into FLASH memory fsinfo - print information about filesystems fsload - load binary file from a filesystem image go - start application at address 'addr' gpio - gpio test help - print command description/usage hwid - hwid - set hardware id and save to flash i2c - I2C sub-system icache - enable or disable instruction cache iminfo - print header information for application image itest - return true/false on integer compare kload - kload - load uImage file from parttion lip - lip - set local ip address but not save to flash loadb - load binary file over serial line (kermit mode) loads - load S-Record file over serial line loady - load binary file over serial line (ymodem mode) logsend - get log buf loop - infinite loop on address range ls - list files in a directory (default /) mac - mac - set mac address and save to flash mcu - mcu sub-system md - memory display memsize - memsize- set mem size mii - MII utility commands mm - memory modify (auto-incrementing address) mmc - MMC sub system mmcinfo - mmcinfo <dev num>-- display MMC info mtest - simple RAM read/write test mw - memory write (fill) nfs - boot image via network using NFS protocol nm - memory modify (constant address) partition- print partition information ping - send ICMP ECHO_REQUEST to network host printenv- print environment variables rarpboot- boot image via network using RARP/TFTP protocol rdefault- rdefault-recover default env reset - Perform RESET of the CPU run - run commands in an environment variable saveenv - save environment variables to persistent storage setenv - set environment variables sf - SPI flash sub-system showvar - print local hushshell variables sip - sip - set server ip address but not save to flash sleep - delay execution for some time source - run script from memory sync_uboot- sync_uboot - sync uboot to uboot-bak test - minimal test like /bin/sh tftpboot- tftpboot- boot image via network using TFTP protocol true - do nothing, successfully usleep - delay execution for some time version - print monitor version Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'dhboot.bin.img'. Download to address: 0x2000000 Downloading: *################################################### done Bytes transferred = 260160 (3f840 hex) same boot, quit upgrade!current version=U-Boot 2010.06-svn4559, upgrade svn_version=4559, current time=14:14:01, upgrade timestamp=14:14:01 Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'dhboot-min.bin.img'. Download to address: 0x2000000 Downloading: *########################## done Bytes transferred = 131136 (20040 hex) Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'romfs-x.squashfs.img'. Download to address: 0x2000000 Downloading: *################################################################# ################################################################# ################################################################# ######################################################### done Bytes transferred = 1286208 (13a040 hex) ## Checking Image at 02000000 ... Legacy image found Image Name: romfs Created: 2020-02-17 11:20:10 UTC Image Type: ARM Linux Kernel Image (uncompressed) Data Size: 1286144 Bytes = 1.2 MiB Load Address: 00270000 Entry Point: 003c0000 Verifying Checksum ... OK Programing start at: 0x00270000 write : 0% write : 0% write : 5% write : 10% write : 15% write : 20% write : 25% write : 30% write : 35% write : 40% write : 45% write : 50% write : 55% write : 60% write : 65% write : 70% write : 75% write : 80% write : 85% write : 90% write : 95% write : 100% done Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'kernel.img'. Download to address: 0x2000000 Downloading: *################################################################# ################################################################# ################################################################# ################################################################# ############################################# done Bytes transferred = 1558880 (17c960 hex) ## Checking Image at 02000000 ... Legacy image found Image Name: kernel Created: 2020-02-17 11:20:04 UTC Image Type: ARM Linux Firmware (uncompressed) Data Size: 1558816 Bytes = 1.5 MiB Load Address: 000f0000 Entry Point: 00270000 Verifying Checksum ... OK Programing start at: 0x000f0000 write : 0% write : 0% write : 4% write : 8% write : 12% write : 16% write : 20% write : 25% write : 29% write : 33% write : 37% write : 41% write : 45% write : 50% write : 54% write : 58% write : 62% write : 66% write : 70% write : 75% write : 79% write : 83% write : 87% write : 91% write : 95% write : 100% done Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'user-x.squashfs.img'. Download to address: 0x2000000 Downloading: *################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ######### done Bytes transferred = 8364096 (7fa040 hex) ## Checking Image at 02000000 ... Legacy image found Image Name: user Created: 2020-02-17 11:20:20 UTC Image Type: ARM Linux Standalone Program (uncompressed) Data Size: 8364032 Bytes = 8 MiB Load Address: 00600000 Entry Point: 00e00000 Verifying Checksum ... OK Programing start at: 0x00600000 write : 0% write : 0% write : 0% write : 1% write : 2% write : 3% write : 3% write : 4% write : 5% write : 6% write : 7% write : 7% write : 8% write : 9% write : 10% write : 10% write : 11% write : 12% write : 13% write : 14% write : 14% write : 15% write : 16% write : 17% write : 17% write : 18% write : 19% write : 20% write : 21% write : 21% write : 22% write : 23% write : 24% write : 25% write : 25% write : 26% write : 27% write : 28% write : 28% write : 29% write : 30% write : 31% write : 32% write : 32% write : 33% write : 34% write : 35% write : 35% write : 36% write : 37% write : 38% write : 39% write : 39% write : 40% write : 41% write : 42% write : 42% write : 43% write : 44% write : 45% write : 46% write : 46% write : 47% write : 48% write : 49% write : 50% write : 50% write : 51% write : 52% write : 53% write : 53% write : 54% write : 55% write : 56% write : 57% write : 57% write : 58% write : 59% write : 60% write : 60% write : 61% write : 62% write : 63% write : 64% write : 64% write : 65% write : 66% write : 67% write : 67% write : 68% write : 69% write : 70% write : 71% write : 71% write : 72% write : 73% write : 74% write : 75% write : 75% write : 76% write : 77% write : 78% write : 78% write : 79% write : 80% write : 81% write : 82% write : 82% write : 83% write : 84% write : 85% write : 85% write : 86% write : 87% write : 88% write : 89% write : 89% write : 90% write : 91% write : 92% write : 92% write : 93% write : 94% write : 95% write : 96% write : 96% write : 97% write : 98% write : 99% write : 100% done Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'web-x.squashfs.img'. Download to address: 0x2000000 Downloading: *################################################################# ################################################################# ################################################################# ################################################################# ################################################################# ####################################### done Bytes transferred = 1859648 (1c6040 hex) ## Checking Image at 02000000 ... Legacy image found Image Name: web Created: 2020-02-17 11:20:12 UTC Image Type: ARM Linux Standalone Program (uncompressed) Data Size: 1859584 Bytes = 1.8 MiB Load Address: 003c0000 Entry Point: 00600000 Verifying Checksum ... OK Programing start at: 0x003c0000 write : 0% write : 0% write : 3% write : 6% write : 10% write : 13% write : 17% write : 20% write : 24% write : 27% write : 31% write : 34% write : 37% write : 41% write : 44% write : 48% write : 51% write : 55% write : 58% write : 62% write : 65% write : 68% write : 72% write : 75% write : 79% write : 82% write : 86% write : 89% write : 93% write : 96% write : 100% done Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'partition-x.cramfs.img'. Download to address: 0x2000000 Downloading: *# done Bytes transferred = 4160 (1040 hex) ## Checking Image at 02000000 ... Legacy image found Image Name: partition Created: 2020-02-17 11:20:04 UTC Image Type: ARM Linux Standalone Program (uncompressed) Data Size: 4096 Bytes = 4 KiB Load Address: 000e0000 Entry Point: 000f0000 Verifying Checksum ... OK Programing start at: 0x000e0000 write : 0% write : 0% write : 100% done Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'custom-x.squashfs.img'. Download to address: 0x2000000 Downloading: *############## done Bytes transferred = 69696 (11040 hex) ## Checking Image at 02000000 ... Legacy image found Image Name: custom Created: 2020-02-17 11:20:22 UTC Image Type: ARM Linux Standalone Program (uncompressed) Data Size: 69632 Bytes = 68 KiB Load Address: 00eb0000 Entry Point: 00ed0000 Verifying Checksum ... OK Programing start at: 0x00eb0000 write : 0% write : 0% write : 50% write : 100% done Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'pd-x.squashfs.img'. Download to address: 0x2000000 Downloading: *##### done Bytes transferred = 20544 (5040 hex) ## Checking Image at 02000000 ... Legacy image found Image Name: pd Created: 2020-02-17 11:20:21 UTC Image Type: ARM Linux Standalone Program (uncompressed) Data Size: 20480 Bytes = 20 KiB Load Address: 00ea0000 Entry Point: 00eb0000 Verifying Checksum ... OK Programing start at: 0x00ea0000 write : 0% write : 0% write : 100% done Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename '.FLASHING_DONE_STOP_TFTP_NOW'. Download to address: 0x2000000 Downloading: *# done config erased. Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'success.txt'. Download to address: 0x2000000 Downloading: * TFTP error: (512)Erasing SPI flash... Writing to SPI flash... done Support backupVer:255 state:ff,err_count:01 ## Booting kernel from Legacy Image at 02000000 ... Image Name: Linux-3.10.50 Created: 2017-06-06 8:17:43 UTC Image Type: ARM Linux Kernel Image (uncompressed) Data Size: 1558752 Bytes = 1.5 MiB Load Address: 00208000 Entry Point: 00208000 Verifying Checksum ... OK Loading Kernel Image ...OK OK partition file version 2 rootfstype squashfs root /dev/mtdblock5 fail to load bootargsParameters.txt fail to load bootargsParameters.txt file Starting kernel ... crashflasg:1, logmagic:54410011. U-Boot 2010.06-svn4559 (May 27 2017 - 14:14:01) I2C: ready DRAM: 110 MiB gBootLogPtr:00b80008. spinor flash ID is 0xc81840c8 partition file version 2 rootfstype squashfs root /dev/mtdblock5 gParameter[0]:node=bootargs, parameter=console=ttyS0,115200 mem=110M root=/dev/mtdblock5 rootfstype=squashfs init=/linuxrc. gParameter[1]:node=sdupdate, parameter=gpio=33 offset=0 ledtype=state. TEXT_BASE:01000000 Net: Detected MACID:3c:ef:8c:60:f8:f7 PHY:0x001cc816,addr:0x00 phy RTL8201 init gpio:33, offset:0x0, ledtype:state MMC: sdmmc init Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'upgrade_info_7db780a713a4.txt'. Download to address: 0x5000000 Downloading: * Retry count exceeded; starting again Try again use backup_serverip Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'upgrade_info_7db780a713a4.txt'. Download to address: 0x5000000 Downloading: * Retry count exceeded; starting again string value is 0 AUF_getValidLine, the end of file Failed to get a Line;Crc check error! PreProcess data error! Init error! Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'failed.txt'. Download to address: 0x2000000 Downloading: * Retry count exceeded; starting again Support backupVer:255 state:ff,err_count:02 SPI probe: 16384 KiB GD25Q128C at 0:0 is now current device ## Booting kernel from Legacy Image at 02000000 ... Image Name: Linux-3.10.50 Created: 2017-06-06 8:17:43 UTC Image Type: ARM Linux Kernel Image (uncompressed) Data Size: 1558752 Bytes = 1.5 MiB Load Address: 00208000 Entry Point: 00208000 Verifying Checksum ... OK Loading Kernel Image ...OK OK partition file version 2 rootfstype squashfs root /dev/mtdblock5 fail to load bootargsParameters.txt fail to load bootargsParameters.txt file Starting kernel ... U-Boot 2010.06-svn4559 (May 27 2017 - 14:14:01) I2C: ready DRAM: 110 MiB gBootLogPtr:00b80008. spinor flash ID is 0xc81840c8 partition file version 2 rootfstype squashfs root /dev/mtdblock5 gParameter[0]:node=bootargs, parameter=console=ttyS0,115200 mem=110M root=/dev/mtdblock5 rootfstype=squashfs init=/linuxrc. gParameter[1]:node=sdupdate, parameter=gpio=33 offset=0 ledtype=state. TEXT_BASE:01000000 Net: Detected MACID:3c:ef:8c:60:f8:f7 PHY:0x001cc816,addr:0x00 phy RTL8201 init gpio:33, offset:0x0, ledtype:state MMC: sdmmc init Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'upgrade_info_7db780a713a4.txt'. Download to address: 0x5000000 Downloading: * Retry count exceeded; starting again Try again use backup_serverip Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'upgrade_info_7db780a713a4.txt'. Download to address: 0x5000000 Downloading: * Retry count exceeded; starting again string value is 0 AUF_getValidLine, the end of file Failed to get a Line;Crc check error! PreProcess data error! Init error! Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'failed.txt'. Download to address: 0x2000000 Downloading: * Retry count exceeded; starting again Support backupVer:255 state:ff,err_count:03 SPI probe: 16384 KiB GD25Q128C at 0:0 is now current device ## Booting kernel from Legacy Image at 02000000 ... Image Name: Linux-3.10.50 Created: 2017-06-06 8:17:43 UTC Image Type: ARM Linux Kernel Image (uncompressed) Data Size: 1558752 Bytes = 1.5 MiB Load Address: 00208000 Entry Point: 00208000 Verifying Checksum ... OK Loading Kernel Image ...OK OK partition file version 2 rootfstype squashfs root /dev/mtdblock5 fail to load bootargsParameters.txt fail to load bootargsParameters.txt file Starting kernel ... U-Boot 2010.06-svn4559 (May 27 2017 - 14:14:01) I2C: ready DRAM: 110 MiB gBootLogPtr:00b80008. spinor flash ID is 0xc81840c8 partition file version 2 rootfstype squashfs root /dev/mtdblock5 gParameter[0]:node=bootargs, parameter=console=ttyS0,115200 mem=110M root=/dev/mtdblock5 rootfstype=squashfs init=/linuxrc. gParameter[1]:node=sdupdate, parameter=gpio=33 offset=0 ledtype=state. TEXT_BASE:01000000 Net: Detected MACID:3c:ef:8c:60:f8:f7 PHY:0x001cc816,addr:0x00 phy RTL8201 init gpio:33, offset:0x0, ledtype:state MMC: sdmmc init Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'upgrade_info_7db780a713a4.txt'. Download to address: 0x5000000 Downloading: * Retry count exceeded; starting again Try again use backup_serverip Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'upgrade_info_7db780a713a4.txt'. Download to address: 0x5000000 Downloading: * Retry count exceeded; starting again string value is 0 AUF_getValidLine, the end of file Failed to get a Line;Crc check error! PreProcess data error! Init error! Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'failed.txt'. Download to address: 0x2000000 Downloading: * Retry count exceeded; starting again Support backupVer:255 state:ff,err_count:04 SPI probe: 16384 KiB GD25Q128C at 0:0 is now current device ## Booting kernel from Legacy Image at 02000000 ... Image Name: Linux-3.10.50 Created: 2017-06-06 8:17:43 UTC Image Type: ARM Linux Kernel Image (uncompressed) Data Size: 1558752 Bytes = 1.5 MiB Load Address: 00208000 Entry Point: 00208000 Verifying Checksum ... OK Loading Kernel Image ...OK OK partition file version 2 rootfstype squashfs root /dev/mtdblock5 fail to load bootargsParameters.txt fail to load bootargsParameters.txt file Starting kernel ... U-Boot 2010.06-svn4559 (May 27 2017 - 14:14:01) I2C: ready DRAM: 110 MiB gBootLogPtr:00b80008. spinor flash ID is 0xc81840c8 partition file version 2 rootfstype squashfs root /dev/mtdblock5 gParameter[0]:node=bootargs, parameter=console=ttyS0,115200 mem=110M root=/dev/mtdblock5 rootfstype=squashfs init=/linuxrc. gParameter[1]:node=sdupdate, parameter=gpio=33 offset=0 ledtype=state. TEXT_BASE:01000000 Net: Detected MACID:3c:ef:8c:60:f8:f7 PHY:0x001cc816,addr:0x00 phy RTL8201 init gpio:33, offset:0x0, ledtype:state MMC: sdmmc init Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'upgrade_info_7db780a713a4.txt'. Download to address: 0x5000000 Downloading: * Retry count exceeded; starting again Try again use backup_serverip Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'upgrade_info_7db780a713a4.txt'. Download to address: 0x5000000 Downloading: * Retry count exceeded; starting again string value is 0 AUF_getValidLine, the end of file Failed to get a Line;Crc check error! PreProcess data error! Init error! Using ambarella mac device TFTP from server 192.168.254.254; our IP address is 192.168.1.108; sending through gateway 192.168.1.1 Download Filename 'failed.txt'. Download to address: 0x2000000 Downloading: * Retry count exceeded; starting again Support backupVer:255 state:ff,err_count:05 SPI probe: 16384 KiB GD25Q128C at 0:0 is now current device ## Booting kernel from Legacy Image at 02000000 ... Image Name: Linux-3.10.50 Created: 2014-12-15 5:29:43 UTC Image Type: ARM Linux Kernel Image (uncompressed) Data Size: 888128 Bytes = 867.3 KiB Load Address: 00208000 Entry Point: 00208000 Verifying Checksum ... OK Loading Kernel Image ...OK OK partition file version 2 rootfstype squashfs root /dev/mtdblock5 fail to load bootargsParameters.txt fail to load bootargsParameters.txt file get bootargs info failed Starting kernel ... init started: BusyBox v1.18.4 (2014-12-01 15:02:35 CST) mount: mounting none on /proc/bus/usb failed: No such file or directory mount: mounting tmpfs on /var failed: Invalid argument mount: mounting /dev/mtdblock3 on /mnt/custom failed: Invalid argument mount: mounting /dev/mtdblock4 on /mnt/pd failed: Invalid argument mount: mounting /dev/mtdblock8 on /mnt/afix/autoFix failed: Invalid argument mount: mounting /dev/mtdblock9 on /mnt/afix/autoFixBackup failed: Invalid argument BusyBox v1.18.4 (2014-12-01 15:02:35 CST) built-in shell (ash) Revision: 7312 Enter 'help' for a list of built-in commands. /bin/sh: can't access tty; job control turned off ~ # UPGRADED_MSG: Do memlock [libpdi] Support backup partition !!! [libpdi] Flashtype = 3,patSize = 40000,rwSize = 10000,ersSize = 10000 pPartionId = 9 eth0: MAC: <3c:ef:8c:60:f8:f7> [libpdi] ERROR (save_Attr_file|1269): open failed for PRIO[libpdi] ERROR (save_Attr_file|1269): open failed for PRIO[libpdi] set eth0 as defaultEth IP: <192.168.1.108>netmask: <255.255.255.0> [libpdi] ERROR (save_Attr_file|1269): open failed for HOSTIP[libpdi] ERROR (PDI_rtcWriteSram|162): Fail to ioctl rtc [libpdi] ERROR (SaveEthAttrInFile|1368): Fail to write ip paramenters [libpdi] ERROR (save_Attr_file|1269): open failed for SUBMASK[libpdi] ERROR (PDI_rtcWriteSram|162): Fail to ioctl rtc [libpdi] ERROR (SaveEthAttrInFile|1368): Fail to write ip paramenters SOCK_PACKET: Address family not supported by protocol [libpdi] [libPDI] Gateway: <192.168.1.1> [libpdi] SetGateWay success [libpdi] ERROR (save_Attr_file|1269): open failed for GATEWAYIP[libpdi] ERROR (PDI_rtcWriteSram|162): Fail to ioctl rtc [libpdi] ERROR (SaveEthAttrInFile|1368): Fail to write ip paramenters SOCK_PACKET: Address family not supported by protocol [libpdi] [libPDI] Name: upgraded, bulid date: Dec 1 2014 14:47:00, svn: 444 UPGRADED_MSG: start download file! ~ # ps ps: applet not found ~ # help Built-in commands: ------------------ . : alias bg break cd chdir continue eval exec exit export false fg hash help jobs kill let local pwd read readonly return set shift source times trap true type ulimit umask unalias unset wait ~ # help -? Built-in commands: ------------------ . : alias bg break cd chdir continue eval exec exit export false fg hash help jobs kill let local pwd read readonly return set shift source times trap true type ulimit umask unalias unset wait ~ # mount rootfs on / type rootfs (rw) /dev/root on / type squashfs (ro,relatime) devtmpfs on /dev type devtmpfs (rw,relatime,mode=0755) proc on /proc type proc (rw,relatime) sysfs on /sys type sysfs (rw,relatime) devpts on /dev/pts type devpts (rw,relatime,mode=600) /dev/mtdblock7 on /mnt/web type squashfs (ro,relatime) /dev/mtdblock9 on /mnt/mtd type jffs2 (rw,relatime) ~ # Any idea how can I fix it?