@tqh I have already hacked the debug console with pl011, while it doesn’t work(AFAIK it’s caused by mmu somehow, the address is not 0x9000000), and will hang all the kernel launching process. That’s why I want to debug with framebuffer showing the boot message to screen.