[S600]【 Kernel panic】运行/usr/hobot/bin/hb_switch_ion.sh balanced后无法启动

[19566035]

在运行/usr/hobot/bin/hb_switch_ion.sh balanced后，执行reboot，系统无法正常启动，开机log如下：

U-Boot SPL 2022.04-00885-ge6f5dae98d (May 26 2026 - 23:08:56 +0800)
board_init_f
hb_spl_enable_syscnt
hb_spl_set_l2sram_firewall
hb_spl_set_smmu
spl_dram_init
NOTICE: RunImage_Lld_RunInitDDR
NOTICE: DDR_Read_Sys_Status: 255
NOTICE: DDR_Read_Adc_Code: 0
NOTICE: reason_raw = 0xdeadf003, should maintain pstore
ufs mphy trim value: 0x6e6e7769
ufs eq: main:29 pre:0 post:6
ufs io ref clk: value: 0x34
ufs_hobot ufs@0x33700000: [RX, TX]: gear=[4, 4], lane[2, 2], pwr[FAST MODE, FAST MODE], rate = 2
hb_blk_get_quickboot_location
hb_blk_get_quickboot_location:257 read sector: 00000000, blkcnt: 1 ret: 1
bootinfo magic=0xefbeadde
bootinfo quickboot_start_lba=0x000080
bootinfo quickboot_end_lba=0x00017f
hb_blk_quickboot_io:332 read sector: 00000080, blkcnt: 64 ret: 64
NOTICE: begin parser hobot ddr
NOTICE: begin register ops into ddr
DDRC: INFO: ddrc_sw_v:1.0.0 Aug 20 2025 - 14:44:54 11617f4 clean
DDRP: INFO: ddrp_sw_v:1.0.0 May 26 2026 - 23:08:47 348623a3 clean
NOTICE: begin init ddr, freq:6400 mode:7
DDRC: INFO: DDR CS Num : 1
DDRC: INFO: DDR BOOT DATARATE : 6400MT/s
DDRC: INFO: DDR Type : LPDDR5
DDRC: INFO: DDR Swap Type : 0
DDRC: INFO: DDR Board ID : 0
DDRC: INFO: DDR Inline ecc : 0
DDRC: INFO: boot flag: 0x1
DDRC: INFO: DDRSys0 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys0 Initializing done
DDRC: INFO: DDRSys1 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys1 Initializing done
DDRC: INFO: DDRSys2 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys2 Initializing done
DDRC: INFO: DDRSys3 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys3 Initializing done
DDRC: INFO: DDRSys4 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys4 Initializing done
DDRC: INFO: DDRSys5 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys5 Initializing done
DDRC: INFO: DDRSys6 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys6 Initializing done
DDRC: INFO: DDRSys7 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys7 Initializing done
DDRC: INFO: restore pstore region spend 447518 us
DDRC: INFO: Manufacturer: 255(Micron)
DDRC: INFO: Sys infomation:
DDRC: INFO: DDRSys inited, Boot Freq: 6400Mbps
DDRC: INFO: Density:0x0000000100000000(4GB)
DDRC: INFO: Useable Size:0x0000000100000000(4096MB)
DDRC: INFO: ddr init spend time 0x00000000000d567c
write ddr init 0x68686200
NOTICE: update_quickboot_para 0
ddr_bank[0].start = 80000000
ddr_bank[0].size = 80000000
ddr_bank[0].info = 190001ff
ddr_bank[1].start = 4080000000
ddr_bank[1].size = 780000000
ddr_bank[1].info = 190001ff
NOTICE: ddrc sw_version: ddrc_sw_v:1.0.0
NOTICE: ddrc build_time: Aug 20 2025 - 14:44:54
NOTICE: ddrc commit_info: 11617f4 clean
NOTICE: ddrp sw_version: ddrp_sw_v:1.0.0
NOTICE: ddrp build_time: May 26 2026 - 23:08:47
NOTICE: ddrp commit_info: 348623a3 clean
NOTICE: init ddr done
spl set ddr version info done

SPL: board_init_r()
spl_init
spl_board_init
hb_spl_set_dram_firewall
aon read scmi_shm_base 0xcaad000
aon read scmi_shm_size 0x1000
aon read strap_pin 0x200bc0
aon read debug_mask 0x0
aon read boardid_adc_ch0 0x5131310
aon read boardid_adc_ch1 0x0
aon read system_slot 0x0
aon read antirollback 0x0
aon read secboot_label 0x0
aon read bootinfo 0x0
aon read bootcount 0x7
aon read secure_lifecycle 0x0
hb_fetch_boardinfo targetid[0x5131310]
boot_flags.scmi_shm_base 0xcaad000
boot_flags.scmi_shm_size 0x1000
boot_flags.strap_pin 0x200bc0
boot_flags.debug_mask 0x0
boot_flags.boardid_adc_ch0 0x5131310
boot_flags.boardid_adc_ch1 0x0
boot_flags.system_slot 0x0
boot_flags.antirollback 0x0
boot_flags.chipid 0x15d2601
boot_flags.pg_map 0x8000000
boot_flags.secboot_label 0x0
boot_flags.bootinfo 0x0
boot_flags.bootcount 0x7
boot_flags.secure_lifecycle 0x0
boot_flags.soc_name S600
boot_flags.hw_name rdk
boot_flags.version V1P0
boot_flags.pcie_mode rc
boot_flags.bootsrc strappin
boot_flags.fdt_feat drobot-s600-rdk
boot_flags.pxe_label drobot-s600-rdk-v1p0-kernel
ddr_bank[0].start = 80000000
ddr_bank[0].size = 80000000
ddr_bank[0].info = 190001ff
ddr_bank[1].start = 4080000000
ddr_bank[1].size = 780000000
ddr_bank[1].info = 190001ff
Trying to boot from HB_BLK
hb_get_boot_device mode=[strappin]
load img from ufs
block_dev num 0
hb_load_image bl31_CONF
hb_load_image load partition name acore_cfg_a
hb_load_image partition start 0000000000000380 size 512
part_info.blksz = 1000
hb_blk_load_image_raw_sector:116 read sector: 00000380, blkcnt: 1 ret: 1
fmt_ver 4
src_addr ab000000
load_addr ab000000 len 52bc0
magic 47464341
hb_blk_load_image_raw_sector:116 read sector: 00000380, blkcnt: 84 ret: 84
rsa verify succesd
update hb post hash
hb_load_image bl31
hb_load_image load partition name bl31_a
hb_load_image partition start 0000000000000780 size 512
part_info.blksz = 1000
hb_blk_load_image_raw_sector:116 read sector: 00000780, blkcnt: 1 ret: 1
fmt_ver 3
src_addr a0100000
load_addr a0100000 len 954a0
magic 31334c42
hb_blk_load_image_raw_sector:116 read sector: 00000780, blkcnt: 150 ret: 150
hb_auth_post succeed
hb_load_image optee
hb_load_image load partition name optee_a
hb_load_image partition start 0000000000000b80 size 2048
part_info.blksz = 1000
hb_blk_load_image_raw_sector:116 read sector: 00000b80, blkcnt: 1 ret: 1
fmt_ver 3
src_addr a2000000
load_addr a2000000 len d9980
magic 32334c42
hb_blk_load_image_raw_sector:116 read sector: 00000b80, blkcnt: 218 ret: 218
hb_auth_post succeed
hb_load_image uboot
hb_load_image load partition name uboot_a
hb_load_image partition start 0000000000001b80 size 2048
part_info.blksz = 1000
hb_blk_load_image_raw_sector:116 read sector: 00001b80, blkcnt: 1 ret: 1
fmt_ver 3
src_addr ab200000
load_addr ab200000 len 10cb80
magic 33334c42
hb_blk_load_image_raw_sector:116 read sector: 00001b80, blkcnt: 269 ret: 269
hb_auth_post succeed
Jumping to U-Boot…
image entry point: 0xa0100000
BL31:1970:01:01:00:00:02:080992 NOTICE: fconf_populate_uart: Use uart at 0x3484c000 Freq: 500000000 Baud: 921600
BL31:1970:01:01:00:00:02:082627 INFO: FCONF: Reading PSCI_PLAT_CONFIG firmware configuration file from: 0xab000000
BL31:1970:01:01:00:00:02:084312 INFO: FCONF: Reading firmware configuration information for: scp_s600
BL31:1970:01:01:00:00:02:085840 INFO: FCONF: Reading PSCI_SCMI_CONFIG firmware configuration file from: 0xab000000
BL31:1970:01:01:00:00:02:087524 INFO: FCONF: Reading firmware configuration information for: scmi
BL31:1970:01:01:00:00:02:089330 INFO: SCMI version: 0xdead0001
BL31:1970:01:01:00:00:02:094140 INFO: SCMI driver initialized
BL31:1970:01:01:00:00:02:095182 INFO: FCONF: Reading PSCI_CONFIG firmware configuration file from: 0xab000000
BL31:1970:01:01:00:00:02:096819 INFO: FCONF: Reading PSCI_MINI_CONFIG firmware configuration file from: 0xab000000
BL31:1970:01:01:00:00:02:098500 INFO: FCONF: Reading firmware configuration information for: pmu_mini
BL31:1970:01:01:00:00:02:100032 INFO: FCONF: Reading MEM_SCAN firmware configuration file from: 0xab000000
BL31:1970:01:01:00:00:02:101624 INFO: FCONF: Reading firmware configuration information for: mem_scan
BL31:1970:01:01:00:00:02:103649 INFO: fconf_populate_conf: mem_scan_conf node not found, skip setup it
BL31:1970:01:01:00:00:02:126568 INFO: mem_scan_by_dtb: skip memory scan
BL31:1970:01:01:00:00:02:127717 INFO: Super_atf_dump_platform_data: PE: 0x81040000 cfg_index: 0
BL31:1970:01:01:00:00:02:129157 INFO: Super_atf_dump_platform_data: BL32 entry: 0xa2000000
BL31:1970:01:01:00:00:02:130535 INFO: Super_atf_dump_platform_data: BL33 entry: 0xab200000
BL31:1970:01:01:00:00:02:131914 INFO: Super_atf_dump_platform_data: dtb entry: 0xab000000
BL31:1970:01:01:00:00:02:133278 INFO: Super_atf_dump_platform_data: gicd_base: 0x32900000
BL31:1970:01:01:00:00:02:134644 INFO: Super_atf_dump_platform_data: gicr_base: 0x32980000
BL31:1970:01:01:00:00:02:136009 INFO: Super_atf_dump_platform_data: rdistif_num: 18
BL31:1970:01:01:00:00:02:137303 INFO: Super_atf_dump_platform_data: cpusys base 0x0
BL31:1970:01:01:00:00:02:138595 INFO: Super_atf_dump_platform_data: toppmu base 0x0
BL31:1970:01:01:00:00:02:139888 INFO: Super_atf_dump_platform_data: cpupmu base 0x0
BL31:1970:01:01:00:00:02:141181 INFO: Super_atf_dump_platform_data: pmu_type: 0
BL31:1970:01:01:00:00:02:142425 INFO: Super_atf_dump_platform_data: run_mode: 0
BL31:1970:01:01:00:00:02:143671 INFO: Super_atf_dump_platform_data: mcusram_for_atf_base: 0xcaad000
BL31:1970:01:01:00:00:02:145170 NOTICE: ATF booting at PE 81040000
BL31:1970:01:01:00:00:02:146232 NOTICE: OP-TEE has been loaded by SCP firmware
BL31:1970:01:01:00:00:02:147495 INFO: DDR bank: base: 0x80000000 size: 0x80000000
BL31:1970:01:01:00:00:02:148805 INFO: DDR bank: base: 0x4080000000 size: 0x77ffff000
BL31:1970:01:01:00:00:02:150108 INFO: found regmap0 base 0xa0000000 size 0x200 permission 2
BL31:1970:01:01:00:00:02:151498 INFO: found regmap1 base 0xa0000200 size 0xe00 permission 3
BL31:1970:01:01:00:00:02:336475 NOTICE: BL31: v2.8(debug):LNX-PL4.0-WB-20250115-227-gf741ab9e9
BL31:1970:01:01:00:00:02:337791 NOTICE: BL31: Built : 20:06:20, Nov 30 2025
BL31:1970:01:01:00:00:02:338889 INFO: GICv3 without legacy support detected.
BL31:1970:01:01:00:00:02:340015 INFO: ARM GICv3 driver initialized in EL3
BL31:1970:01:01:00:00:02:341110 INFO: Maximum SPI INTID supported: 991
BL31:1970:01:01:00:00:02:450642 INFO: FCONF: Reading HW_CONFIG firmware configuration file from: 0xab000000
BL31:1970:01:01:00:00:02:452136 INFO: FCONF: Reading firmware configuration information for: fw_clocks
BL31:1970:01:01:00:00:02:453581 INFO: FCONF: Reading firmware configuration information for: fw_clk_data
BL31:1970:01:01:00:00:02:455050 INFO: FCONF: Reading firmware configuration information for: cmm
BL31:1970:01:01:00:00:02:456422 INFO: FCONF: Reading firmware configuration information for: fw_s600_cmm_data
BL31:1970:01:01:00:00:02:457951 INFO: FCONF: Reading firmware configuration information for: fw_s600_pmu_data
BL31:1970:01:01:00:00:02:459480 INFO: FCONF: Reading firmware configuration information for: scmi_source_data
BL31:1970:01:01:00:00:02:461010 INFO: FCONF: Reading firmware configuration information for: firewall
BL31:1970:01:01:00:00:02:462686 INFO: Setup Firewall for 0x31000000
BL31:1970:01:01:00:00:02:463788 INFO: Setup Firewall for 0x31400000
BL31:1970:01:01:00:00:02:464903 INFO: Setup Firewall for 0x31800000
BL31:1970:01:01:00:00:02:466027 INFO: Setup Firewall for 0x31c00000
BL31:1970:01:01:00:00:02:467154 INFO: Setup Firewall for 0x32000000
BL31:1970:01:01:00:00:02:468286 INFO: Setup Firewall for 0x28210000
BL31:1970:01:01:00:00:02:469408 INFO: Setup Firewall for 0x29210000
BL31:1970:01:01:00:00:02:470537 INFO: Setup Firewall for 0x2a210000
BL31:1970:01:01:00:00:02:471672 INFO: Setup Firewall for 0x2b210000
BL31:1970:01:01:00:00:02:472815 INFO: Setup Firewall for 0x253c0000
BL31:1970:01:01:00:00:02:474227 INFO: Setup Firewall for 0x257c0000
BL31:1970:01:01:00:00:02:475705 INFO: Setup Firewall for 0x25bc0000
BL31:1970:01:01:00:00:02:477090 INFO: Setup Firewall for 0x25fc0000
BL31:1970:01:01:00:00:02:478577 INFO: Setup Firewall for 0x360c0000
BL31:1970:01:01:00:00:02:479699 INFO: Setup Firewall for 0x35050000
BL31:1970:01:01:00:00:02:480881 INFO: Setup Firewall for 0x35850000
BL31:1970:01:01:00:00:02:482092 INFO: Setup Firewall for 0x26ff0000
BL31:1970:01:01:00:00:02:483277 INFO: Setup Firewall for 0x42d00000
BL31:1970:01:01:00:00:02:484511 INFO: Setup Firewall for 0x48d00000
BL31:1970:01:01:00:00:02:485795 INFO: Setup Firewall for 0x4ed00000
BL31:1970:01:01:00:00:02:487039 INFO: Setup Firewall for 0x54d00000
BL31:1970:01:01:00:00:02:488352 INFO: Setup Firewall for 0x42c30000
BL31:1970:01:01:00:00:02:490071 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:491032 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:491993 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:492956 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:493922 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:494888 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:495856 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:496827 INFO: Setup Firewall for 0x33f10000
BL31:1970:01:01:00:00:02:498455 INFO: Setup Firewall for 0x30400000
BL31:1970:01:01:00:00:02:499782 INFO: Setup Firewall for 0x38f00000
BL31:1970:01:01:00:00:02:501222 INFO: Setup Firewall for 0x37cb0000
BL31:1970:01:01:00:00:02:502330 INFO: Setup Firewall for 0x374e0000
BL31:1970:01:01:00:00:02:503438 INFO: Setup Firewall for 0x376e0000
BL31:1970:01:01:00:00:02:504540 INFO: Setup Firewall for 0x378e0000
BL31:1970:01:01:00:00:02:505641 INFO: Setup Firewall for 0x37ae0000
BL31:1970:01:01:00:00:02:506746 INFO: Setup Firewall for 0x390a0000
BL31:1970:01:01:00:00:02:507987 INFO: Setup Firewall for 0x3b400000
BL31:1970:01:01:00:00:02:509264 INFO: Setup Firewall for 0x3b000000
BL31:1970:01:01:00:00:02:510853 INFO: FCONF: Reading firmware configuration information for: clock
BL31:1970:01:01:00:00:02:512384 INFO: SCMI CLOCK protocol version 0x10000 detected
BL31:1970:01:01:00:00:02:514001 INFO: fconf_populate_conf: clock_conf node not found, skip setup it
BL31:1970:01:01:00:00:02:551975 INFO: fconf_populate_clock_by_dtb: Can’t find clock node, use defult clock
BL31:1970:01:01:00:00:02:553455 INFO: FCONF: Reading firmware configuration information for: pwr_recovery
BL31:1970:01:01:00:00:02:555208 INFO: FCONF: Reading firmware configuration information for: reboot_mode
BL31:1970:01:01:00:00:02:556839 INFO: FCONF: Reading firmware configuration information for: reboot_reason
BL31:1970:01:01:00:00:02:558464 INFO: FCONF: Reading firmware configuration information for: regmap
BL31:1970:01:01:00:00:02:559973 INFO: found regmap2 base 0x23200038 size 0x4 permission 3
BL31:1970:01:01:00:00:02:561250 INFO: found regmap3 base 0x23200024 size 0x4 permission 3
BL31:1970:01:01:00:00:02:562535 INFO: found regmap4 base 0x23217414 size 0x18 permission 3
BL31:1970:01:01:00:00:02:563833 INFO: found regmap5 base 0x37010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:565155 INFO: found regmap6 base 0x37020000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:566477 INFO: found regmap7 base 0x37c00000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:567799 INFO: found regmap8 base 0x37400000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:569121 INFO: found regmap9 base 0x37600000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:570443 INFO: found regmap10 base 0x37800000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:571777 INFO: found regmap11 base 0x37a00000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:573111 INFO: found regmap12 base 0x35010000 size 0x10000 permission 3
BL31:1970:01:01:00:00:02:574456 INFO: found regmap13 base 0x35810000 size 0x10000 permission 3
BL31:1970:01:01:00:00:02:575802 INFO: found regmap14 base 0x36010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:577136 INFO: found regmap15 base 0x31220000 size 0x10000 permission 3
BL31:1970:01:01:00:00:02:578482 INFO: found regmap16 base 0x32220000 size 0x10000 permission 3
BL31:1970:01:01:00:00:02:579828 INFO: found regmap17 base 0x32870000 size 0x10000 permission 3
BL31:1970:01:01:00:00:02:581174 INFO: found regmap18 base 0x39010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:582508 INFO: found regmap19 base 0x28010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:583842 INFO: found regmap20 base 0x29010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:585176 INFO: found regmap21 base 0x2a010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:586509 INFO: found regmap22 base 0x2b010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:587841 INFO: FCONF: Reading firmware configuration information for: scmi_server
BL31:1970:01:01:00:00:02:589398 INFO: FCONF: Reading firmware configuration information for: sdei_backtrace
BL31:1970:01:01:00:00:02:627266 INFO: Can’t found sdei backtrace node, skip setup it
BL31:1970:01:01:00:00:02:628479 INFO: FCONF: Reading firmware configuration information for: suspend_mode
BL31:1970:01:01:00:00:02:630010 INFO: FCONF: Reading firmware configuration information for: int_sender
BL31:1970:01:01:00:00:02:650502 INFO: sys info reg value is 0x0
BL31:1970:01:01:00:00:02:651461 INFO: cfg mediabot int sender
BL31:1970:01:01:00:00:02:652418 INFO: cfg mediatop int sender
BL31:1970:01:01:00:00:02:653367 INFO: cfg cpusys int sender
BL31:1970:01:01:00:00:02:654324 INFO: cfg 1 int sender
BL31:1970:01:01:00:00:02:655180 INFO: cfg 16 int sender
BL31:1970:01:01:00:00:02:656056 INFO: cfg 32 int sender
BL31:1970:01:01:00:00:02:656921 INFO: cfg 64 int sender
BL31:1970:01:01:00:00:02:657797 INFO: cfg 128 int sender
BL31:1970:01:01:00:00:02:658684 INFO: cfg 256 int sender
BL31:1970:01:01:00:00:02:659568 INFO: cfg 512 int sender
BL31:1970:01:01:00:00:02:660528 INFO: cfg 1024 int sender
BL31:1970:01:01:00:00:02:661445 INFO: cfg 2048 int sender
BL31:1970:01:01:00:00:02:662339 INFO: cfg 65536 int sender
BL31:1970:01:01:00:00:02:663247 INFO: cfg 131072 int sender
BL31:1970:01:01:00:00:02:664169 INFO: cfg 262144 int sender
BL31:1970:01:01:00:00:02:665091 INFO: cfg 524288 int sender
BL31:1970:01:01:00:00:02:666010 INFO: cfg 1048576 int sender
BL31:1970:01:01:00:00:02:666942 INFO: cfg 2097152 int sender
BL31:1970:01:01:00:00:02:667877 INFO: cfg 4194304 int sender
BL31:1970:01:01:00:00:02:668813 INFO: cfg 8388608 int sender
BL31:1970:01:01:00:00:02:669747 INFO: cfg 16777216 int sender
BL31:1970:01:01:00:00:02:670693 INFO: cfg 33554432 int sender
BL31:1970:01:01:00:00:02:671630 INFO: cfg 67108864 int sender
BL31:1970:01:01:00:00:02:672580 INFO: FCONF: Reading firmware configuration information for: int_router
BL31:1970:01:01:00:00:02:674457 INFO: fconf_populate_conf: int_router_conf node not found, skip setup it
BL31:1970:01:01:00:00:02:695034 INFO: hb_populate_router_by_dtb: skip int router setup
BL31:1970:01:01:00:00:02:696273 INFO: BL31: Initialising Exception Handling Framework
BL31:1970:01:01:00:00:02:697509 INFO: BL31: Initializing runtime services
BL31:1970:01:01:00:00:02:698602 INFO: BL31: cortex_a78_ae: CPU workaround for cve_2022_23960 was applied
BL31:1970:01:01:00:00:02:700083 INFO: SDEI platform setup
BL31:1970:01:01:00:00:02:700970 INFO: BL31: Initializing BL32
I/TC:
I/TC: OP-TEE version: 348623a3-dev (gcc version 13.2.1 20231009 (Arm GNU Toolchain 13.2.rel1 (Build arm-13.7))) #1 Tue May 26 15:08:51 UTC 2026 aarch64
I/TC: Primary CPU initializing
I/TC: Primary CPU switching to normal world boot
BL31:1970:01:01:00:00:03:068029 INFO: BL31: Preparing for EL3 exit to normal world
BL31:1970:01:01:00:00:03:069222 INFO: Entry point address = 0xab200000
BL31:1970:01:01:00:00:03:070279 INFO: SPSR = 0x3c9

U-Boot 2022.04-00885-ge6f5dae98d (May 26 2026 - 23:08:56 +0800)

Reset cause: unknown reset
Model: D-Robotics S600 Module Board
DRAM: 32 GiB
EL Level: EL2
Core: 51 devices, 18 uclasses, devicetree: fit
MMC:
SCSI: ufs mphy trim value: 0x6e6e7769
ufs eq: main:29 pre:0 post:6
ufs io ref clk: value: 0x34
ufs_hobot ufs@0x33700000: [RX, TX]: gear=[4, 4], lane[2, 2], pwr[FAST MODE, FAST MODE], rate = 2

Loading Environment from SCSI… *** Warning - bad CRC, using default environment

hobot pcie probe success !
PCI: Failed autoconfig bar 10
PCI: Failed autoconfig bar 14
NVME:
In: serial
Out: serial
Err: serial
Net:
Warning: gmac2 (eth0) using random MAC address - ce:75:48:34:a5:5c
eth0: gmac2
system_slot: 0 adc_boardinfo: 5131310
strap_pin = 0x200bc0 bootinfo = 0x0 bootcount = 0x7
boot_block_device [0]
** File not found config.txt **
flash boot
success!
Hit any key to stop autoboot: 0
ANDROID: Booting slot: a
Using slot a
bootinterface: scsi, bootdev:0, slot_suffix = _a
skip verify boot partition
scanning bus for devices…
Device 0: (0:0) Vendor: PHISON Prod.: PSUF31L17-G064SX Rev: 01.4
Type: Hard Disk
Capacity: 61000.0 MB = 59.5 GB (15616000 x 4096)
Device 1: (0:1) Vendor: PHISON Prod.: PSUF31L17-G064SX Rev: 01.4
Type: Hard Disk
Capacity: 4.0 MB = 0.0 GB (1024 x 4096)
Device 2: (0:2) Vendor: PHISON Prod.: PSUF31L17-G064SX Rev: 01.4
Type: Hard Disk
Capacity: 4.0 MB = 0.0 GB (1024 x 4096)
boot partition is:c
Scanning scsi 0:c…
Found /extlinux/extlinux.conf
Retrieving file: /extlinux/extlinux.conf
15: drobot-s600-rdk-v1p0-kernel
Retrieving file: /lantinhv
Retrieving file: /vmlinuz-6.1.158-rt58-DR-5.1.0-2605251554-g369e4b-gf8e87c
Uncompressing Kernel Image
Retrieving file: /initrd.img-6.1.158-rt58-DR-5.1.0-2605251554-g369e4b-gf8e87c
Retrieving file: /hobot/rdk-s600-mcb-v1p0.dtb
no ipaddr exist in uboot-env
os cmdline: console=ttyS0,921600n8 systemd.show-status=auto loglevel=1 hobot.kernel_in=scsi0 hobotboot.socname=S600 board.hwname=rdk board.ver=V1P0 board.pcie_mode=rc hobotboot.slot_suffix=_a hobotboot.mode=normal hobotboot.secureboot=1 hobotboot.bootcount=7 systemd.unified_cgrofdt_root: FDT_ERR_BADMAGIC
ERROR: root node setup failed
setup domu1 fdt failed
1: drobot-s100-rdk-v1-2-kernel
Retrieving file: /initrd.img-6.1.158-rt58-DR-5.1.0-2605251554-g369e4b-gf8e87c
Retrieving file: /vmlinuz-6.1.158-rt58-DR-5.1.0-2605251554-g369e4b-gf8e87c
Retrieving file: /hobot/rdk-s100-v1-2.dtb

No elf image at address 0x90000000

no ipaddr exist in uboot-env
os cmdline: console=ttyS0,921600n8 systemd.show-status=auto loglevel=1 hobot.kernel_in=scsi0 hobotboot.socname=S600 board.hwname=rdk board.ver=V1P0 board.pcie_mode=rc hobotboot.slot_suffix=_a hobotboot.mode=normal hobotboot.secureboot=1 hobotboot.bootcount=7 systemd.unified_cgro Uncompressing Kernel Image

Flattened Device Tree blob at ab000000

Booting using the fdt blob at 0xab000000
Loading Ramdisk to ea4c7000, end eb9f3e14 … OK
Loading Device Tree to 00000000ea49e000, end 00000000ea4c6ee1 … OK
miss ion_uncache_size, ready to get size from dts
Failed to get reg property for ‘ion_uncache’
miss ion_reserved_size, ready to get size from dts
miss ion_carveout_size, ready to get size from dts
miss ion_cma_size, ready to get size from dts
Set Reserved Mem [ion_reserved] Size to 0x0000000040000000 @0x40c0000000
Set Reserved Mem [ion_carveout] Size to 0x0000000020000000 @0x4100000000
Set Reserved Mem [ion_cma] Size to 0x0000000020000000 @0x4120000000
Set Reserved Mem [ion_uncache] Size to 0x0000000000000000 @0x4140000000
super_setup_arch_platform: get pg_map cfg: 0x8000000
Timer summary in microseconds (53 records):
Mark Elapsed Stage
0 0 reset
806,737 806,737 SPL
1,819,290 1,012,553 board_init_r
1,829,189 9,899 malloc_init
1,852,293 23,104 blk_dev_init
1,852,751 458 acore_cfg
1,860,601 7,850 blk_dev_init
1,862,528 1,927 blk_dev_init
1,866,546 4,018 → load
1,971,610 105,064 → check
1,971,818 208 bl31
1,981,330 9,512 blk_dev_init
1,983,403 2,073 blk_dev_init
1,989,046 5,643 → load
1,995,015 5,969 → check
1,995,244 229 optee
2,007,494 12,250 blk_dev_init
2,009,321 1,827 blk_dev_init
2,013,407 4,086 → load
2,021,989 8,582 → check
2,022,218 229 uboot
2,037,185 14,967 blk_dev_init
2,039,111 1,926 blk_dev_init
2,042,909 3,798 → load
2,053,450 10,541 → check
2,053,689 239 end phase
3,074,869 1,021,180 board_init_f
3,074,876 7 initf_bootstage
3,178,479 103,603 arch_cpu_init_dm
3,178,487 8 board_early_init_f
3,217,685 39,198 display_text_info
3,236,474 18,789 dram_init
3,284,252 47,778 clear_bss
3,352,673 68,421 initr_malloc
3,352,673 0 board_init_r
3,353,347 674 initr_dm
3,353,575 228 serial_initialize
3,354,186 611 initr_mmc
3,445,122 90,936 initr_scsi
3,454,308 9,186 initr_env
3,631,139 176,831 console_init_r
3,631,215 76 id=64
3,632,033 818 id=65
3,632,164 131 initr_net
3,650,232 18,068 last_stage_init
3,650,233 1 main_loop
3,881,306 231,073 bootm_start
3,919,172 37,866 id=12
3,960,254 41,082 id=15
3,960,255 1 start_kernel

Accumulated time:
627 dm_r
10,318 dm_spl
103,580 dm_f

Starting kernel …

[ 0.000000] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000078
[ 0.000000] Mem abort info:
[ 0.000000] ESR = 0x0000000096000005
[ 0.000000] EC = 0x25: DABT (current EL), IL = 32 bits
[ 0.000000] SET = 0, FnV = 0
[ 0.000000] EA = 0, S1PTW = 0
[ 0.000000] FSC = 0x05: level 1 translation fault
[ 0.000000] Data abort info:
[ 0.000000] ISV = 0, ISS = 0x00000005
[ 0.000000] CM = 0, WnR = 0
[ 0.000000] [0000000000000078] user address but active_mm is swapper
[ 0.000000] Internal error: Oops: 0000000096000005 [#1] PREEMPT_RT SMP
[ 0.000000] Modules linked in:
[ 0.000000] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.1.158-rt58-DR-5.1.0-2605251554-g369e4b-gf8e87c #29
[ 0.000000] Hardware name: D-Robotics RDK S100 V1.2 (DT)
[ 0.000000] pstate: 60000009 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=–)
[ 0.000000] pc : __ipi_send_mask+0x20/0x11c
[ 0.000000] lr : smp_cross_call+0x4c/0x100
[ 0.000000] sp : ffff80000a8af9d0
[ 0.000000] pmr_save: 000000e0
[ 0.000000] x29: ffff80000a8af9d0 x28: 0000000000000000 x27: ffff800009f05000
[ 0.000000] x26: 0000000000000000 x25: 0000000000000100 x24: ffff800009f05f48
[ 0.000000] x23: 0000000000000dc0 x22: ffff800008feea30 x21: 0000000000000005
[ 0.000000] x20: 0000000000000060 x19: 0000000000000001 x18: ffff80000a8cfbf8
[ 0.000000] x17: ffff800009fa0120 x16: 00000000d1e9a755 x15: 000000007724a94d
[ 0.000000] x14: 000000000e86fd55 x13: 00000000a13b62ac x12: 00000000c820dc47
[ 0.000000] x11: 0000000000000000 x10: a940f3b104e68db8 x9 : ffff800008026bdc
[ 0.000000] x8 : ffff80000a8afc98 x7 : 0000000000000000 x6 : 000000000000003f
[ 0.000000] x5 : ffff800009f05fa8 x4 : ffff800009f05fa8 x3 : ffff800008cbfea0
[ 0.000000] x2 : ffff8000097a68d0 x1 : ffff800008cbfec0 x0 : 0000000000000000
[ 0.000000] Call trace:
[ 0.000000] __ipi_send_mask+0x20/0x11c
[ 0.000000] smp_cross_call+0x4c/0x100
[ 0.000000] arch_irq_work_raise+0x48/0x5c
[ 0.000000] __irq_work_queue_local+0x40/0xa0
[ 0.000000] irq_work_queue+0x4c/0x90
[ 0.000000] __kfence_alloc+0xb8/0x754
[ 0.000000] kmem_cache_alloc+0x3ac/0x444
[ 0.000000] __proc_create+0x11c/0x294
[ 0.000000] proc_create_reg+0x54/0xb4
[ 0.000000] proc_create_seq_private+0x30/0x70
[ 0.000000] init_mm_internals+0x1b4/0x228
[ 0.000000] kernel_init_freeable+0x124/0x2b8
[ 0.000000] kernel_init+0x2c/0x140
[ 0.000000] ret_from_fork+0x10/0x20
[ 0.000000] Code: 910003fd a90153f3 91018014 a90363f7 (f9400e97)
[ 0.000000] —[ end trace 0000000000000000 ]—
[ 0.000000] Kernel panic - not syncing: Oops: Fatal exception

U-Boot SPL 2022.04-00885-ge6f5dae98d (May 26 2026 - 23:08:56 +0800)
board_init_f
hb_spl_enable_syscnt
hb_spl_set_l2sram_firewall
hb_spl_set_smmu
spl_dram_init
NOTICE: RunImage_Lld_RunInitDDR
NOTICE: DDR_Read_Sys_Status: 255
NOTICE: DDR_Read_Adc_Code: 0
NOTICE: reason_raw = 0xdeadf003, should maintain pstore
ufs mphy trim value: 0x6e6e7769
ufs eq: main:29 pre:0 post:6
ufs io ref clk: value: 0x34
ufs_hobot ufs@0x33700000: [RX, TX]: gear=[4, 4], lane[2, 2], pwr[FAST MODE, FAST MODE], rate = 2
hb_blk_get_quickboot_location
hb_blk_get_quickboot_location:257 read sector: 00000000, blkcnt: 1 ret: 1
bootinfo magic=0xefbeadde
bootinfo quickboot_start_lba=0x000080
bootinfo quickboot_end_lba=0x00017f
hb_blk_quickboot_io:332 read sector: 00000080, blkcnt: 64 ret: 64
NOTICE: begin parser hobot ddr
NOTICE: begin register ops into ddr
DDRC: INFO: ddrc_sw_v:1.0.0 Aug 20 2025 - 14:44:54 11617f4 clean
DDRP: INFO: ddrp_sw_v:1.0.0 May 26 2026 - 23:08:47 348623a3 clean
NOTICE: begin init ddr, freq:6400 mode:7
DDRC: INFO: DDR CS Num : 1
DDRC: INFO: DDR BOOT DATARATE : 6400MT/s
DDRC: INFO: DDR Type : LPDDR5
DDRC: INFO: DDR Swap Type : 0
DDRC: INFO: DDR Board ID : 0
DDRC: INFO: DDR Inline ecc : 0
DDRC: INFO: boot flag: 0x1
DDRC: INFO: DDRSys0 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys0 Initializing done
DDRC: INFO: DDRSys1 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys1 Initializing done
DDRC: INFO: DDRSys2 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys2 Initializing done
DDRC: INFO: DDRSys3 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys3 Initializing done
DDRC: INFO: DDRSys4 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys4 Initializing done
DDRC: INFO: DDRSys5 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys5 Initializing done
DDRC: INFO: DDRSys6 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys6 Initializing done
DDRC: INFO: DDRSys7 Initializing…
DDRC: INFO: Freq = 6400
DDRC: INFO: DDRSys7 Initializing done
DDRC: INFO: restore pstore region spend 447619 us
DDRC: INFO: Manufacturer: 255(Micron)
DDRC: INFO: Sys infomation:
DDRC: INFO: DDRSys inited, Boot Freq: 6400Mbps
DDRC: INFO: Density:0x0000000100000000(4GB)
DDRC: INFO: Useable Size:0x0000000100000000(4096MB)
DDRC: INFO: ddr init spend time 0x00000000000d5738
write ddr init 0x68686200
NOTICE: update_quickboot_para 0
ddr_bank[0].start = 80000000
ddr_bank[0].size = 80000000
ddr_bank[0].info = 190001ff
ddr_bank[1].start = 4080000000
ddr_bank[1].size = 780000000
ddr_bank[1].info = 190001ff
NOTICE: ddrc sw_version: ddrc_sw_v:1.0.0
NOTICE: ddrc build_time: Aug 20 2025 - 14:44:54
NOTICE: ddrc commit_info: 11617f4 clean
NOTICE: ddrp sw_version: ddrp_sw_v:1.0.0
NOTICE: ddrp build_time: May 26 2026 - 23:08:47
NOTICE: ddrp commit_info: 348623a3 clean
NOTICE: init ddr done
spl set ddr version info done

SPL: board_init_r()
spl_init
spl_board_init
hb_spl_set_dram_firewall
aon read scmi_shm_base 0xcaad000
aon read scmi_shm_size 0x1000
aon read strap_pin 0x200bc0
aon read debug_mask 0x0
aon read boardid_adc_ch0 0x5131310
aon read boardid_adc_ch1 0x0
aon read system_slot 0x0
aon read antirollback 0x0
aon read secboot_label 0x0
aon read bootinfo 0x0
aon read bootcount 0x8
aon read secure_lifecycle 0x0
hb_fetch_boardinfo targetid[0x5131310]
boot_flags.scmi_shm_base 0xcaad000
boot_flags.scmi_shm_size 0x1000
boot_flags.strap_pin 0x200bc0
boot_flags.debug_mask 0x0
boot_flags.boardid_adc_ch0 0x5131310
boot_flags.boardid_adc_ch1 0x0
boot_flags.system_slot 0x0
boot_flags.antirollback 0x0
boot_flags.chipid 0x15d2601
boot_flags.pg_map 0x8000000
boot_flags.secboot_label 0x0
boot_flags.bootinfo 0x0
boot_flags.bootcount 0x8
boot_flags.secure_lifecycle 0x0
boot_flags.soc_name S600
boot_flags.hw_name rdk
boot_flags.version V1P0
boot_flags.pcie_mode rc
boot_flags.bootsrc strappin
boot_flags.fdt_feat drobot-s600-rdk
boot_flags.pxe_label drobot-s600-rdk-v1p0-kernel
ddr_bank[0].start = 80000000
ddr_bank[0].size = 80000000
ddr_bank[0].info = 190001ff
ddr_bank[1].start = 4080000000
ddr_bank[1].size = 780000000
ddr_bank[1].info = 190001ff
Trying to boot from HB_BLK
hb_get_boot_device mode=[strappin]
load img from ufs
block_dev num 0
hb_load_image bl31_CONF
hb_load_image load partition name acore_cfg_a
hb_load_image partition start 0000000000000380 size 512
part_info.blksz = 1000
hb_blk_load_image_raw_sector:116 read sector: 00000380, blkcnt: 1 ret: 1
fmt_ver 4
src_addr ab000000
load_addr ab000000 len 52bc0
magic 47464341
hb_blk_load_image_raw_sector:116 read sector: 00000380, blkcnt: 84 ret: 84
rsa verify succesd
update hb post hash
hb_load_image bl31
hb_load_image load partition name bl31_a
hb_load_image partition start 0000000000000780 size 512
part_info.blksz = 1000
hb_blk_load_image_raw_sector:116 read sector: 00000780, blkcnt: 1 ret: 1
fmt_ver 3
src_addr a0100000
load_addr a0100000 len 954a0
magic 31334c42
hb_blk_load_image_raw_sector:116 read sector: 00000780, blkcnt: 150 ret: 150
hb_auth_post succeed
hb_load_image optee
hb_load_image load partition name optee_a
hb_load_image partition start 0000000000000b80 size 2048
part_info.blksz = 1000
hb_blk_load_image_raw_sector:116 read sector: 00000b80, blkcnt: 1 ret: 1
fmt_ver 3
src_addr a2000000
load_addr a2000000 len d9980
magic 32334c42
hb_blk_load_image_raw_sector:116 read sector: 00000b80, blkcnt: 218 ret: 218
hb_auth_post succeed
hb_load_image uboot
hb_load_image load partition name uboot_a
hb_load_image partition start 0000000000001b80 size 2048
part_info.blksz = 1000
hb_blk_load_image_raw_sector:116 read sector: 00001b80, blkcnt: 1 ret: 1
fmt_ver 3
src_addr ab200000
load_addr ab200000 len 10cb80
magic 33334c42
hb_blk_load_image_raw_sector:116 read sector: 00001b80, blkcnt: 269 ret: 269
hb_auth_post succeed
Jumping to U-Boot…
image entry point: 0xa0100000
BL31:1970:01:01:00:00:02:083110 NOTICE: fconf_populate_uart: Use uart at 0x3484c000 Freq: 500000000 Baud: 921600
BL31:1970:01:01:00:00:02:084745 INFO: FCONF: Reading PSCI_PLAT_CONFIG firmware configuration file from: 0xab000000
BL31:1970:01:01:00:00:02:086432 INFO: FCONF: Reading firmware configuration information for: scp_s600
BL31:1970:01:01:00:00:02:087960 INFO: FCONF: Reading PSCI_SCMI_CONFIG firmware configuration file from: 0xab000000
BL31:1970:01:01:00:00:02:089645 INFO: FCONF: Reading firmware configuration information for: scmi
BL31:1970:01:01:00:00:02:091450 INFO: SCMI version: 0xdead0001
BL31:1970:01:01:00:00:02:096147 INFO: SCMI driver initialized
BL31:1970:01:01:00:00:02:097189 INFO: FCONF: Reading PSCI_CONFIG firmware configuration file from: 0xab000000
BL31:1970:01:01:00:00:02:098827 INFO: FCONF: Reading PSCI_MINI_CONFIG firmware configuration file from: 0xab000000
BL31:1970:01:01:00:00:02:100507 INFO: FCONF: Reading firmware configuration information for: pmu_mini
BL31:1970:01:01:00:00:02:102041 INFO: FCONF: Reading MEM_SCAN firmware configuration file from: 0xab000000
BL31:1970:01:01:00:00:02:103634 INFO: FCONF: Reading firmware configuration information for: mem_scan
BL31:1970:01:01:00:00:02:105658 INFO: fconf_populate_conf: mem_scan_conf node not found, skip setup it
BL31:1970:01:01:00:00:02:128538 INFO: mem_scan_by_dtb: skip memory scan
BL31:1970:01:01:00:00:02:129688 INFO: Super_atf_dump_platform_data: PE: 0x81040000 cfg_index: 0
BL31:1970:01:01:00:00:02:131130 INFO: Super_atf_dump_platform_data: BL32 entry: 0xa2000000
BL31:1970:01:01:00:00:02:132508 INFO: Super_atf_dump_platform_data: BL33 entry: 0xab200000
BL31:1970:01:01:00:00:02:133887 INFO: Super_atf_dump_platform_data: dtb entry: 0xab000000
BL31:1970:01:01:00:00:02:135253 INFO: Super_atf_dump_platform_data: gicd_base: 0x32900000
BL31:1970:01:01:00:00:02:136618 INFO: Super_atf_dump_platform_data: gicr_base: 0x32980000
BL31:1970:01:01:00:00:02:137983 INFO: Super_atf_dump_platform_data: rdistif_num: 18
BL31:1970:01:01:00:00:02:139277 INFO: Super_atf_dump_platform_data: cpusys base 0x0
BL31:1970:01:01:00:00:02:140572 INFO: Super_atf_dump_platform_data: toppmu base 0x0
BL31:1970:01:01:00:00:02:141865 INFO: Super_atf_dump_platform_data: cpupmu base 0x0
BL31:1970:01:01:00:00:02:143158 INFO: Super_atf_dump_platform_data: pmu_type: 0
BL31:1970:01:01:00:00:02:144403 INFO: Super_atf_dump_platform_data: run_mode: 0
BL31:1970:01:01:00:00:02:145648 INFO: Super_atf_dump_platform_data: mcusram_for_atf_base: 0xcaad000
BL31:1970:01:01:00:00:02:147148 NOTICE: ATF booting at PE 81040000
BL31:1970:01:01:00:00:02:148209 NOTICE: OP-TEE has been loaded by SCP firmware
BL31:1970:01:01:00:00:02:149473 INFO: DDR bank: base: 0x80000000 size: 0x80000000
BL31:1970:01:01:00:00:02:150781 INFO: DDR bank: base: 0x4080000000 size: 0x77ffff000
BL31:1970:01:01:00:00:02:152084 INFO: found regmap0 base 0xa0000000 size 0x200 permission 2
BL31:1970:01:01:00:00:02:153473 INFO: found regmap1 base 0xa0000200 size 0xe00 permission 3
BL31:1970:01:01:00:00:02:338491 NOTICE: BL31: v2.8(debug):LNX-PL4.0-WB-20250115-227-gf741ab9e9
BL31:1970:01:01:00:00:02:339806 NOTICE: BL31: Built : 20:06:20, Nov 30 2025
BL31:1970:01:01:00:00:02:340904 INFO: GICv3 without legacy support detected.
BL31:1970:01:01:00:00:02:342031 INFO: ARM GICv3 driver initialized in EL3
BL31:1970:01:01:00:00:02:343126 INFO: Maximum SPI INTID supported: 991
BL31:1970:01:01:00:00:02:452777 INFO: FCONF: Reading HW_CONFIG firmware configuration file from: 0xab000000
BL31:1970:01:01:00:00:02:454273 INFO: FCONF: Reading firmware configuration information for: fw_clocks
BL31:1970:01:01:00:00:02:455719 INFO: FCONF: Reading firmware configuration information for: fw_clk_data
BL31:1970:01:01:00:00:02:457188 INFO: FCONF: Reading firmware configuration information for: cmm
BL31:1970:01:01:00:00:02:458561 INFO: FCONF: Reading firmware configuration information for: fw_s600_cmm_data
BL31:1970:01:01:00:00:02:460092 INFO: FCONF: Reading firmware configuration information for: fw_s600_pmu_data
BL31:1970:01:01:00:00:02:461623 INFO: FCONF: Reading firmware configuration information for: scmi_source_data
BL31:1970:01:01:00:00:02:463154 INFO: FCONF: Reading firmware configuration information for: firewall
BL31:1970:01:01:00:00:02:464831 INFO: Setup Firewall for 0x31000000
BL31:1970:01:01:00:00:02:465934 INFO: Setup Firewall for 0x31400000
BL31:1970:01:01:00:00:02:467050 INFO: Setup Firewall for 0x31800000
BL31:1970:01:01:00:00:02:468175 INFO: Setup Firewall for 0x31c00000
BL31:1970:01:01:00:00:02:469303 INFO: Setup Firewall for 0x32000000
BL31:1970:01:01:00:00:02:470436 INFO: Setup Firewall for 0x28210000
BL31:1970:01:01:00:00:02:471561 INFO: Setup Firewall for 0x29210000
BL31:1970:01:01:00:00:02:472691 INFO: Setup Firewall for 0x2a210000
BL31:1970:01:01:00:00:02:473827 INFO: Setup Firewall for 0x2b210000
BL31:1970:01:01:00:00:02:474971 INFO: Setup Firewall for 0x253c0000
BL31:1970:01:01:00:00:02:476384 INFO: Setup Firewall for 0x257c0000
BL31:1970:01:01:00:00:02:477867 INFO: Setup Firewall for 0x25bc0000
BL31:1970:01:01:00:00:02:479253 INFO: Setup Firewall for 0x25fc0000
BL31:1970:01:01:00:00:02:480737 INFO: Setup Firewall for 0x360c0000
BL31:1970:01:01:00:00:02:481861 INFO: Setup Firewall for 0x35050000
BL31:1970:01:01:00:00:02:483043 INFO: Setup Firewall for 0x35850000
BL31:1970:01:01:00:00:02:484255 INFO: Setup Firewall for 0x26ff0000
BL31:1970:01:01:00:00:02:485441 INFO: Setup Firewall for 0x42d00000
BL31:1970:01:01:00:00:02:486677 INFO: Setup Firewall for 0x48d00000
BL31:1970:01:01:00:00:02:487962 INFO: Setup Firewall for 0x4ed00000
BL31:1970:01:01:00:00:02:489207 INFO: Setup Firewall for 0x54d00000
BL31:1970:01:01:00:00:02:490521 INFO: Setup Firewall for 0x42c30000
BL31:1970:01:01:00:00:02:492241 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:493203 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:494166 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:495130 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:496095 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:497063 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:498032 INFO: Setup Region 64
BL31:1970:01:01:00:00:02:499003 INFO: Setup Firewall for 0x33f10000
BL31:1970:01:01:00:00:02:500633 INFO: Setup Firewall for 0x30400000
BL31:1970:01:01:00:00:02:501961 INFO: Setup Firewall for 0x38f00000
BL31:1970:01:01:00:00:02:503402 INFO: Setup Firewall for 0x37cb0000
BL31:1970:01:01:00:00:02:504511 INFO: Setup Firewall for 0x374e0000
BL31:1970:01:01:00:00:02:505621 INFO: Setup Firewall for 0x376e0000
BL31:1970:01:01:00:00:02:506725 INFO: Setup Firewall for 0x378e0000
BL31:1970:01:01:00:00:02:507826 INFO: Setup Firewall for 0x37ae0000
BL31:1970:01:01:00:00:02:508934 INFO: Setup Firewall for 0x390a0000
BL31:1970:01:01:00:00:02:510176 INFO: Setup Firewall for 0x3b400000
BL31:1970:01:01:00:00:02:511454 INFO: Setup Firewall for 0x3b000000
BL31:1970:01:01:00:00:02:513044 INFO: FCONF: Reading firmware configuration information for: clock
BL31:1970:01:01:00:00:02:516392 INFO: SCMI CLOCK protocol version 0x10000 detected
BL31:1970:01:01:00:00:02:518009 INFO: fconf_populate_conf: clock_conf node not found, skip setup it
BL31:1970:01:01:00:00:02:555964 INFO: fconf_populate_clock_by_dtb: Can’t find clock node, use defult clock
BL31:1970:01:01:00:00:02:557445 INFO: FCONF: Reading firmware configuration information for: pwr_recovery
BL31:1970:01:01:00:00:02:559198 INFO: FCONF: Reading firmware configuration information for: reboot_mode
BL31:1970:01:01:00:00:02:560831 INFO: FCONF: Reading firmware configuration information for: reboot_reason
BL31:1970:01:01:00:00:02:562456 INFO: FCONF: Reading firmware configuration information for: regmap
BL31:1970:01:01:00:00:02:563967 INFO: found regmap2 base 0x23200038 size 0x4 permission 3
BL31:1970:01:01:00:00:02:565244 INFO: found regmap3 base 0x23200024 size 0x4 permission 3
BL31:1970:01:01:00:00:02:566531 INFO: found regmap4 base 0x23217414 size 0x18 permission 3
BL31:1970:01:01:00:00:02:567829 INFO: found regmap5 base 0x37010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:569152 INFO: found regmap6 base 0x37020000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:570474 INFO: found regmap7 base 0x37c00000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:571797 INFO: found regmap8 base 0x37400000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:573119 INFO: found regmap9 base 0x37600000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:574442 INFO: found regmap10 base 0x37800000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:575776 INFO: found regmap11 base 0x37a00000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:577110 INFO: found regmap12 base 0x35010000 size 0x10000 permission 3
BL31:1970:01:01:00:00:02:578457 INFO: found regmap13 base 0x35810000 size 0x10000 permission 3
BL31:1970:01:01:00:00:02:579803 INFO: found regmap14 base 0x36010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:581137 INFO: found regmap15 base 0x31220000 size 0x10000 permission 3
BL31:1970:01:01:00:00:02:582484 INFO: found regmap16 base 0x32220000 size 0x10000 permission 3
BL31:1970:01:01:00:00:02:583831 INFO: found regmap17 base 0x32870000 size 0x10000 permission 3
BL31:1970:01:01:00:00:02:585177 INFO: found regmap18 base 0x39010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:586511 INFO: found regmap19 base 0x28010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:587845 INFO: found regmap20 base 0x29010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:589180 INFO: found regmap21 base 0x2a010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:590514 INFO: found regmap22 base 0x2b010000 size 0x1000 permission 3
BL31:1970:01:01:00:00:02:591846 INFO: FCONF: Reading firmware configuration information for: scmi_server
BL31:1970:01:01:00:00:02:593403 INFO: FCONF: Reading firmware configuration information for: sdei_backtrace
BL31:1970:01:01:00:00:02:631284 INFO: Can’t found sdei backtrace node, skip setup it
BL31:1970:01:01:00:00:02:632498 INFO: FCONF: Reading firmware configuration information for: suspend_mode
BL31:1970:01:01:00:00:02:634029 INFO: FCONF: Reading firmware configuration information for: int_sender
BL31:1970:01:01:00:00:02:654527 INFO: sys info reg value is 0x0
BL31:1970:01:01:00:00:02:655486 INFO: cfg mediabot int sender
BL31:1970:01:01:00:00:02:656442 INFO: cfg mediatop int sender
BL31:1970:01:01:00:00:02:657392 INFO: cfg cpusys int sender
BL31:1970:01:01:00:00:02:658350 INFO: cfg 1 int sender
BL31:1970:01:01:00:00:02:659205 INFO: cfg 16 int sender
BL31:1970:01:01:00:00:02:660082 INFO: cfg 32 int sender
BL31:1970:01:01:00:00:02:660946 INFO: cfg 64 int sender
BL31:1970:01:01:00:00:02:661823 INFO: cfg 128 int sender
BL31:1970:01:01:00:00:02:662710 INFO: cfg 256 int sender
BL31:1970:01:01:00:00:02:663594 INFO: cfg 512 int sender
BL31:1970:01:01:00:00:02:664553 INFO: cfg 1024 int sender
BL31:1970:01:01:00:00:02:665469 INFO: cfg 2048 int sender
BL31:1970:01:01:00:00:02:666363 INFO: cfg 65536 int sender
BL31:1970:01:01:00:00:02:667272 INFO: cfg 131072 int sender
BL31:1970:01:01:00:00:02:668194 INFO: cfg 262144 int sender
BL31:1970:01:01:00:00:02:669116 INFO: cfg 524288 int sender
BL31:1970:01:01:00:00:02:670036 INFO: cfg 1048576 int sender
BL31:1970:01:01:00:00:02:670968 INFO: cfg 2097152 int sender
BL31:1970:01:01:00:00:02:671904 INFO: cfg 4194304 int sender
BL31:1970:01:01:00:00:02:672840 INFO: cfg 8388608 int sender
BL31:1970:01:01:00:00:02:673774 INFO: cfg 16777216 int sender
BL31:1970:01:01:00:00:02:674721 INFO: cfg 33554432 int sender
BL31:1970:01:01:00:00:02:675656 INFO: cfg 67108864 int sender
BL31:1970:01:01:00:00:02:676606 INFO: FCONF: Reading firmware configuration information for: int_router
BL31:1970:01:01:00:00:02:678484 INFO: fconf_populate_conf: int_router_conf node not found, skip setup it
BL31:1970:01:01:00:00:02:699054 INFO: hb_populate_router_by_dtb: skip int router setup
BL31:1970:01:01:00:00:02:700293 INFO: BL31: Initialising Exception Handling Framework
BL31:1970:01:01:00:00:02:701530 INFO: BL31: Initializing runtime services
BL31:1970:01:01:00:00:02:702624 INFO: BL31: cortex_a78_ae: CPU workaround for cve_2022_23960 was applied
BL31:1970:01:01:00:00:02:704107 INFO: SDEI platform setup
BL31:1970:01:01:00:00:02:704996 INFO: BL31: Initializing BL32
I/TC:
I/TC: OP-TEE version: 348623a3-dev (gcc version 13.2.1 20231009 (Arm GNU Toolchain 13.2.rel1 (Build arm-13.7))) #1 Tue May 26 15:08:51 UTC 2026 aarch64
I/TC: Primary CPU initializing
I/TC: Primary CPU switching to normal world boot
BL31:1970:01:01:00:00:03:071996 INFO: BL31: Preparing for EL3 exit to normal world
BL31:1970:01:01:00:00:03:073188 INFO: Entry point address = 0xab200000
BL31:1970:01:01:00:00:03:074245 INFO: SPSR = 0x3c9

U-Boot 2022.04-00885-ge6f5dae98d (May 26 2026 - 23:08:56 +0800)

Reset cause: unknown reset
Model: D-Robotics S600 Module Board
DRAM: 32 GiB
EL Level: EL2
Core: 51 devices, 18 uclasses, devicetree: fit
MMC:
SCSI: ufs mphy trim value: 0x6e6e7769
ufs eq: main:29 pre:0 post:6
ufs io ref clk: value: 0x34
ufs_hobot ufs@0x33700000: [RX, TX]: gear=[4, 4], lane[2, 2], pwr[FAST MODE, FAST MODE], rate = 2

Loading Environment from SCSI… *** Warning - bad CRC, using default environment

hobot pcie probe success !
PCI: Failed autoconfig bar 10
PCI: Failed autoconfig bar 14
NVME:
In: serial
Out: serial
Err: serial
Net:
Warning: gmac2 (eth0) using random MAC address - 6e:80:05:25:a7:8a
eth0: gmac2
system_slot: 0 adc_boardinfo: 5131310
strap_pin = 0x200bc0 bootinfo = 0x0 bootcount = 0x8
boot_block_device [0]
** File not found config.txt **
flash boot
success!
Hit any key to stop autoboot: 0
ANDROID: Booting slot: a
Using slot a
bootinterface: scsi, bootdev:0, slot_suffix = _a
skip verify boot partition
scanning bus for devices…
Device 0: (0:0) Vendor: PHISON Prod.: PSUF31L17-G064SX Rev: 01.4
Type: Hard Disk
Capacity: 61000.0 MB = 59.5 GB (15616000 x 4096)
Device 1: (0:1) Vendor: PHISON Prod.: PSUF31L17-G064SX Rev: 01.4
Type: Hard Disk
Capacity: 4.0 MB = 0.0 GB (1024 x 4096)
Device 2: (0:2) Vendor: PHISON Prod.: PSUF31L17-G064SX Rev: 01.4
Type: Hard Disk
Capacity: 4.0 MB = 0.0 GB (1024 x 4096)
boot partition is:c
Scanning scsi 0:c…
Found /extlinux/extlinux.conf
Retrieving file: /extlinux/extlinux.conf
15: drobot-s600-rdk-v1p0-kernel
Retrieving file: /lantinhv
Retrieving file: /vmlinuz-6.1.158-rt58-DR-5.1.0-2605251554-g369e4b-gf8e87c
Uncompressing Kernel Image
Retrieving file: /initrd.img-6.1.158-rt58-DR-5.1.0-2605251554-g369e4b-gf8e87c
Retrieving file: /hobot/rdk-s600-mcb-v1p0.dtb
no ipaddr exist in uboot-env
os cmdline: console=ttyS0,921600n8 systemd.show-status=auto loglevel=1 hobot.kernel_in=scsi0 hobotboot.socname=S600 board.hwname=rdk board.ver=V1P0 board.pcie_mode=rc hobotboot.slot_suffix=_a hobotboot.mode=normal hobotboot.secureboot=1 hobotboot.bootcount=8 systemd.unified_cgrofdt_root: FDT_ERR_BADMAGIC
ERROR: root node setup failed
setup domu1 fdt failed
1: drobot-s100-rdk-v1-2-kernel
Retrieving file: /initrd.img-6.1.158-rt58-DR-5.1.0-2605251554-g369e4b-gf8e87c
Retrieving file: /vmlinuz-6.1.158-rt58-DR-5.1.0-2605251554-g369e4b-gf8e87c
Retrieving file: /hobot/rdk-s100-v1-2.dtb

No elf image at address 0x90000000

no ipaddr exist in uboot-env
os cmdline: console=ttyS0,921600n8 systemd.show-status=auto loglevel=1 hobot.kernel_in=scsi0 hobotboot.socname=S600 board.hwname=rdk board.ver=V1P0 board.pcie_mode=rc hobotboot.slot_suffix=_a hobotboot.mode=normal hobotboot.secureboot=1 hobotboot.bootcount=8 systemd.unified_cgro Uncompressing Kernel Image

Flattened Device Tree blob at ab000000

Booting using the fdt blob at 0xab000000
Loading Ramdisk to ea4c7000, end eb9f3e14 … OK
Loading Device Tree to 00000000ea49e000, end 00000000ea4c6ee1 … OK
miss ion_uncache_size, ready to get size from dts
Failed to get reg property for ‘ion_uncache’
miss ion_reserved_size, ready to get size from dts
miss ion_carveout_size, ready to get size from dts
miss ion_cma_size, ready to get size from dts
Set Reserved Mem [ion_reserved] Size to 0x0000000040000000 @0x40c0000000
Set Reserved Mem [ion_carveout] Size to 0x0000000020000000 @0x4100000000
Set Reserved Mem [ion_cma] Size to 0x0000000020000000 @0x4120000000
Set Reserved Mem [ion_uncache] Size to 0x0000000000000000 @0x4140000000
super_setup_arch_platform: get pg_map cfg: 0x8000000
Timer summary in microseconds (53 records):
Mark Elapsed Stage
0 0 reset
806,897 806,897 SPL
1,819,792 1,012,895 board_init_r
1,829,685 9,893 malloc_init
1,852,795 23,110 blk_dev_init
1,853,252 457 acore_cfg
1,861,158 7,906 blk_dev_init
1,863,079 1,921 blk_dev_init
1,866,498 3,419 → load
1,971,674 105,176 → check
1,971,882 208 bl31
1,981,393 9,511 blk_dev_init
1,983,467 2,074 blk_dev_init
1,991,121 7,654 → load
1,997,087 5,966 → check
1,997,315 228 optee
2,009,563 12,248 blk_dev_init
2,011,389 1,826 blk_dev_init
2,015,433 4,044 → load
2,024,014 8,581 → check
2,024,243 229 uboot
2,039,207 14,964 blk_dev_init
2,041,134 1,927 blk_dev_init
2,045,064 3,930 → load
2,055,603 10,539 → check
2,055,842 239 end phase
3,078,838 1,022,996 board_init_f
3,078,845 7 initf_bootstage
3,182,546 103,701 arch_cpu_init_dm
3,182,554 8 board_early_init_f
3,221,790 39,236 display_text_info
3,240,605 18,815 dram_init
3,288,406 47,801 clear_bss
3,356,817 68,411 initr_malloc
3,356,818 1 board_init_r
3,357,491 673 initr_dm
3,357,718 227 serial_initialize
3,358,328 610 initr_mmc
3,449,474 91,146 initr_scsi
3,457,854 8,380 initr_env
3,634,673 176,819 console_init_r
3,634,749 76 id=64
3,635,565 816 id=65
3,635,696 131 initr_net
3,649,960 14,264 last_stage_init
3,649,961 1 main_loop
3,881,580 231,619 bootm_start
3,919,483 37,903 id=12
3,960,671 41,188 id=15
3,960,671 0 start_kernel

Accumulated time:
627 dm_r
10,333 dm_spl
103,677 dm_f

Starting kernel …

[ 0.000000] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000078
[ 0.000000] Mem abort info:
[ 0.000000] ESR = 0x0000000096000005
[ 0.000000] EC = 0x25: DABT (current EL), IL = 32 bits
[ 0.000000] SET = 0, FnV = 0
[ 0.000000] EA = 0, S1PTW = 0
[ 0.000000] FSC = 0x05: level 1 translation fault
[ 0.000000] Data abort info:
[ 0.000000] ISV = 0, ISS = 0x00000005
[ 0.000000] CM = 0, WnR = 0
[ 0.000000] [0000000000000078] user address but active_mm is swapper
[ 0.000000] Internal error: Oops: 0000000096000005 [#1] PREEMPT_RT SMP
[ 0.000000] Modules linked in:
[ 0.000000] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.1.158-rt58-DR-5.1.0-2605251554-g369e4b-gf8e87c #29
[ 0.000000] Hardware name: D-Robotics RDK S100 V1.2 (DT)
[ 0.000000] pstate: 60000009 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=–)
[ 0.000000] pc : __ipi_send_mask+0x20/0x11c
[ 0.000000] lr : smp_cross_call+0x4c/0x100
[ 0.000000] sp : ffff80000a8af9d0
[ 0.000000] pmr_save: 000000e0
[ 0.000000] x29: ffff80000a8af9d0 x28: 0000000000000000 x27: ffff800009f05000
[ 0.000000] x26: 0000000000000000 x25: 0000000000000100 x24: ffff800009f05f48
[ 0.000000] x23: 0000000000000dc0 x22: ffff800008feea30 x21: 0000000000000005
[ 0.000000] x20: 0000000000000060 x19: 0000000000000001 x18: ffff80000a8cfbf8
[ 0.000000] x17: ffff800009fa0120 x16: 000000006c5a6e6d x15: 0000000002d338ff
[ 0.000000] x14: 00000000cfb72e2c x13: 00000000d8867618 x12: 000000001a3a0591
[ 0.000000] x11: 0000000000000000 x10: e9ad398f3fd39957 x9 : ffff800008026bdc
[ 0.000000] x8 : ffff80000a8afc98 x7 : 0000000000000000 x6 : 000000000000003f
[ 0.000000] x5 : ffff800009f05fa8 x4 : ffff800009f05fa8 x3 : ffff800008cbfea0
[ 0.000000] x2 : ffff8000097a68d0 x1 : ffff800008cbfec0 x0 : 0000000000000000
[ 0.000000] Call trace:
[ 0.000000] __ipi_send_mask+0x20/0x11c
[ 0.000000] smp_cross_call+0x4c/0x100
[ 0.000000] arch_irq_work_raise+0x48/0x5c
[ 0.000000] __irq_work_queue_local+0x40/0xa0
[ 0.000000] irq_work_queue+0x4c/0x90
[ 0.000000] __kfence_alloc+0xb8/0x754
[ 0.000000] kmem_cache_alloc+0x3ac/0x444
[ 0.000000] __proc_create+0x11c/0x294
[ 0.000000] proc_create_reg+0x54/0xb4
[ 0.000000] proc_create_seq_private+0x30/0x70
[ 0.000000] init_mm_internals+0x1b4/0x228
[ 0.000000] kernel_init_freeable+0x124/0x2b8
[ 0.000000] kernel_init+0x2c/0x140
[ 0.000000] ret_from_fork+0x10/0x20
[ 0.000000] Code: 910003fd a90153f3 91018014 a90363f7 (f9400e97)
[ 0.000000] —[ end trace 0000000000000000 ]—
[ 0.000000] Kernel panic - not syncing: Oops: Fatal exception

[地瓜小助手_bot]

我来帮你分析这个问题。这是一个典型的 ION 内存配置与设备树不匹配 导致的 Kernel panic。

问题定位

从日志中可以看到几个关键错误：

1. 设备树加载失败：

   fdt_root: FDT_ERR_BADMAGIC
   ERROR: root node setup failed
   

2. ION 内存配置缺失：

   Failed to get reg property for 'ion_uncache'
   miss ion_reserved_size, ready to get size from dts
   miss ion_carveout_size, ready to get size from dts
   miss ion_cma_size, ready to get size from dts
   

3. Kernel panic 发生在内存分配阶段：

   Unable to handle kernel NULL pointer dereference at virtual address 0000000000000078
   __ipi_send_mask -> smp_cross_call -> __kfence_alloc -> kmem_cache_alloc
   

根本原因

hb_switch_ion.sh balanced 脚本修改了 ION 内存分区配置，但：

• 设备树 (DTB) 没有同步更新
• 或者脚本执行后需要重新生成/更新 boot 配置
• 导致内核启动时内存配置与实际硬件分配不一致

解决方案

方案一：恢复默认 ION 配置（推荐优先尝试）

通过串口进入 U-Boot 命令行，恢复默认配置：

# 在 U-Boot 倒计时时按任意键中断启动
# 进入 U-Boot 命令行后执行：

# 方法 1：切换到另一 slot 启动（如果另一 slot 配置正常）
setenv boot_slot b
saveenv
reset

# 方法 2：清除 bootcount 尝试恢复
setenv bootcount 0
saveenv
reset

方案二：通过 recovery 模式恢复

# 在 U-Boot 中设置 recovery 模式
setenv reboot_reason recovery
saveenv
reset

方案三：重新刷写完整镜像

如果上述方法无效，需要重新刷写系统镜像：

# 使用 Hobot 提供的烧录工具
# 1. 下载对应版本的 S600 镜像
# 2. 使用 hobot_flash 工具重新烧录

预防措施

hb_switch_ion.sh 脚本使用注意事项：

1. 执行前备份当前配置
2. 执行后需要验证配置是否生效
3. 不要随意修改 ION 配置后直接 reboot

# 查看当前 ION 配置
cat /proc/ion_heap_info

# 查看脚本支持的参数
/usr/hobot/bin/hb_switch_ion.sh --help

# 通常支持的配置模式：
# - default: 默认配置
# - balanced: 平衡配置
# - performance: 性能优先

需要进一步确认的信息

请补充以下信息以便更精确定位：

1. 执行脚本前的 ION 配置是什么？
2. 系统镜像版本是多少？（查看 /etc/hobot_version）
3. 是否有串口可以进入 U-Boot 命令行？
4. 之前是否成功切换过 ION 配置？

---

社区相关资源

让我搜索一下社区是否有类似的案例和官方解决方案：

问题分析

根据你提供的启动日志，问题非常明确：

根本原因：运行 hb_switch_ion.sh balanced 后，脚本修改了设备树（DTB）中的 ION 内存配置，但生成的配置与 S600 平台不兼容，导致内核启动时解析设备树失败，触发 Kernel Panic。

关键错误信息：

fdt_root: FDT_ERR_BADMAGIC
ERROR: root node setup failed
setup domu1 fdt failed
...
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000078

这表明设备树二进制文件（DTB）已损坏或格式错误。

---

解决方案

方案一：恢复备份的设备树（推荐）

脚本执行时会自动创建备份文件 .bak，你需要通过串口或 U-Boot 恢复它。

步骤：

1. 进入 U-Boot 命令行
   在启动时快速按任意键中断自动启动，进入 U-Boot 命令行。

2. 恢复备份的 DTB 文件

   # 查看 /boot/hobot/ 目录下的文件
   ls scsi 0:c /hobot/
   
   # 确认备份文件存在（应该是 rdk-s600-mcb-v1p0.dtb.bak）
   
   # 复制备份文件覆盖当前 DTB
   fatcopy scsi 0:c /hobot/rdk-s600-mcb-v1p0.dtb.bak /hobot/rdk-s600-mcb-v1p0.dtb
   

3. 重启系统

   reset
   

---

方案二：重新烧录系统（如果方案一无效）

如果备份文件也损坏或不存在，需要重新烧录官方系统镜像。

步骤：

1. 下载 S600 最新官方镜像
2. 使用地平线提供的烧录工具（DFU 模式）重新烧录
3. 烧录完成后重启

---

后续使用建议

1. 使用 hb_switch_ion.sh 前的注意事项

• 务必确认脚本版本：旧版本脚本对 S600 支持不完善，建议先检查脚本内容
• 手动备份 DTB：在执行前手动备份 /boot/hobot/*.dtb
• 检查 /boot 分区空间：确保有足够空间（至少 50MB 可用）

# 手动备份
sudo cp /boot/hobot/rdk-s600-mcb-v1p0.dtb /boot/hobot/rdk-s600-mcb-v1p0.dtb.manual_backup

# 检查空间
df -h /boot

2. 推荐的内存配置模式

根据你的使用场景选择：

模式	适用场景	风险
bpu_first	AI 推理任务（BPU 优先）	可能导致 CPU 内存不足
cpu_first	传统计算任务	BPU 可用内存减少
balanced	通用场景	较安全，但需确认脚本兼容性
default	恢复出厂设置	无风险

3. 验证脚本兼容性

在执行脚本前，先检查脚本是否支持 S600：

# 查看脚本内容
cat /usr/hobot/bin/hb_switch_ion.sh | grep -A 20 "s600"

如果脚本中没有 S600 的配置分支，不要执行。

---

社区参考

相关问题已在社区讨论：

• RDK S 系列设备树内存分配调整指南
• 该帖子已更新了修复后的脚本版本，建议参考最新版本

---

需要进一步帮助？

如果恢复后仍有问题，请提供：

1. 当前 /boot/hobot/ 目录下的文件列表
2. 执行 cat /sys/class/boardinfo/adc_boardid 的输出
3. 是否能看到 U-Boot 命令行

我会在社区帮你跟进此问题，建议也将恢复过程反馈到原帖子，帮助其他遇到相同问题的开发者。

[Marcelo6151]

你好，基于[RDK OS Version]: 5.1.0

此脚本运行正常 ，是否存在前置其他操作？