Hello all!
This time I have a Pirelli A112 ADSL Modem, which I would like to use to prototype with some stuff (removing ATM, ADSL, ISDN and PPPoE stuff since it's not necessary).

It has a CPU chip marked as BCM6332KFBG, but either the bootloader and the original image treat it as a BCM96338.

Also, there is an 4Mb SPI Flash, and 16Mb of RAM.
Originally, the board ID was "PirelliCMB_1PG", but for testing purposes I've selected "96338W".

Other options:

96338SV          ------- 0
96338L-2M-8M     ------- 1
96338L-65-2M-8M  ------- 2
96338W           ------- 3
96338W-20P2      ------- 4
96338E4          ------- 5
PirelliCMB_1PG   ------- 6
96332CG          ------- 7

Well, since the only "compatible" ID is "96338W", I've selected it, and flashed the 64k-CFE. It didn't worked, because a Kernel panic appeared.

Here I attach the full serial log, in which one can see some interesting things:
in the bootloader:
* Sizes and positions informed by bootloader doesn't match others that I've seen in the official BCM63xx thread
* Serial flash device: name , id 0xc216, size 4096KB (No chip name, but its an KH 25L3205D 32MBit = 4Mbyte)
in the kernel:
* board_bcm963xx: CFE version: unknown
* physmap-flash physmap-flash.0: map_probe failed
* VFS: Cannot open root device "mtdblock2" or unknown-block(0,0): error -6



CFE version 1.0.37-13.2 for P01 (BCM96338)
Build Date: gio feb 12 14:19:59 CET 2009 ( dela@buildserver )
Copyright (C) 2000-2006 Broadcom Corporation.

Boot Address 0xbfc00000

Initializing Arena.
Initializing Devices.
Serial flash device: name , id 0xc216, size 4096KB
CPU type 0x29010: 240MHz
Total memory: 16777216 bytes (16MB)

Total memory used by CFE:  0x80401000 - 0x80527990 (1206672)
Initialized Data:          0x8041D320 - 0x8041F1B0 (7824)
BSS Area:                  0x8041F1B0 - 0x80425990 (26592)
Local Heap:                0x80425990 - 0x80525990 (1048576)
Stack Area:                0x80525990 - 0x80527990 (8192)
Text (code) segment:       0x80401000 - 0x8041D318 (115480)
Boot area (physical):      0x00528000 - 0x00568000
Relocation Factor:         I:00000000 - D:00000000

Board IP address                  : 192.168.10.33:ffffff00
Host IP address                   : 192.168.10.250
Gateway IP address                : 192.168.10.1
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Board Id (0-7)                    : 96338W
Number of MAC Addresses (1-32)    : 11
Base MAC Address                  : 00:25:53:77:e6:ec
PSI Size (1-64) KBytes            : 1

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
Booting from only image (0xbfc10000) ...
Code Address: 0x80010000, Entry Address: 0x80010000
Decompression OK!
Entry at 0x80010000
Closing network.
Starting program at 0x80010000
[    0.000000] Linux version 3.7.9 (openwrt@snapon) (gcc version 4.6.4 20121210 (prerelease) (Linaro GCC 4.6-2012.12) ) #1 Mon Feb 25 12:44:25 PST 2013
[    0.000000] Detected Broadcom 0x6338 CPU revision a2
[    0.000000] CPU frequency is 240 MHz
[    0.000000] 16MB of RAM installed
[    0.000000] registering 8 GPIOs
[    0.000000] board_bcm963xx: Boot address 0xbfc00000
[    0.000000] board_bcm963xx: CFE version: unknown
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU revision is: 00029010 (Broadcom BCM6338)
[    0.000000] board_bcm963xx: board name: 96338W
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 01000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x00000000-0x00ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x00000000-0x00ffffff]
[    0.000000] Reserving 0MB of memory at 0MB for crashkernel
[    0.000000] Primary instruction cache 16kB, VIPT, 2-way, linesize 16 bytes.
[    0.000000] Primary data cache 8kB, 2-way, VIPT, no aliases, linesize 16 bytes
[    0.000000] Built 1 zonelists in Zone order, mobility grouping off.  Total pages: 4064
[    0.000000] Kernel command line:  root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
[    0.000000] PID hash table entries: 64 (order: -4, 256 bytes)
[    0.000000] Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000000] __ex_table already sorted, skipping sort
[    0.000000] Memory: 12540k/16384k available (2390k kernel code, 3844k reserved, 683k data, 252k init, 0k highmem)
[    0.000000] NR_IRQS:128
[    0.000000] Calibrating delay loop... 237.82 BogoMIPS (lpj=475648)
[    0.040000] pid_max: default: 32768 minimum: 301
[    0.044000] Mount-cache hash table entries: 512
[    0.056000] NET: Registered protocol family 16
[    0.124000] bio: create slab <bio-0> at 0
[    0.144000] Switching to clocksource MIPS
[    0.172000] NET: Registered protocol family 2
[    0.176000] TCP established hash table entries: 512 (order: 0, 4096 bytes)
[    0.184000] TCP bind hash table entries: 512 (order: -1, 2048 bytes)
[    0.192000] TCP: Hash tables configured (established 512 bind 512)
[    0.200000] TCP: reno registered
[    0.204000] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.208000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.216000] NET: Registered protocol family 1
[    0.232000] audit: initializing netlink socket (disabled)
[    0.236000] type=2000 audit(0.235:1): initialized
[    0.244000] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.252000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.264000] msgmni has been set to 24
[    0.268000] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 253)
[    0.276000] io scheduler noop registered
[    0.280000] io scheduler deadline registered (default)
[    0.296000] bcm63xx_uart.0: ttyS0 at MMIO 0xfffe0300 (irq = 10) is a bcm63xx_uart
[    0.304000] console [ttyS0] enabled, bootconsole disabled
[    0.304000] console [ttyS0] enabled, bootconsole disabled
[    0.328000] physmap platform flash device: 00400000 at 1fc00000
[    0.340000] physmap-flash physmap-flash.0: map_probe failed
[    0.352000] bcm63xx-spi bcm63xx-spi: at 0xfffe0c00 (irq 9, FIFOs size 63) v0.1.2
[    0.384000] libphy: bcm63xx_enet MII bus: probed
[    0.388000] bcm63xx_enet bcm63xx_enet.0: attached PHY at address 0 [Generic PHY]
[    0.408000] bcm63xx-wdt bcm63xx-wdt:  started, timer margin: 30 sec
[    0.428000] TCP: cubic registered
[    0.432000] NET: Registered protocol family 17
[    0.440000] Bridge firewalling registered
[    0.444000] 8021q: 802.1Q VLAN Support v1.8
[    0.456000] VFS: Cannot open root device "mtdblock2" or unknown-block(0,0): error -6
[    0.464000] Please append a correct "root=" boot option; here are the available partitions:
[    0.472000] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)

I've loaded both 64kCFE and 128kCFE, but neither work, since they can't get a Flash Map (and the dmesg is identically to this one).

Now I'm compiling Kamikaze r25563 (I know its old, but to test for now) with some modifications in the board_brcm63xx and the corresponding Makefile to add my image. However these config is the same as the 6338W, so I don't expect any improvment.

What can I do to fix this?

Thanks!