b27: poll re-init skip + bits pref-set

qemu/run-sbl.sh

@@ -5,7 +5,7 @@
 set -e
 cd "$(dirname "$0")/.."
 QEMU=~/qemu-src/qemu-8.2.2/build/qemu-system-arm
-B=${1:-b24}
+B=${1:-b27}
 IMG=fw/img/emmc-real.img
 if [ ! -f "$IMG" ]; then
   echo "no $IMG — сначала: python3 tools/ffu_extract.py fw/dl/RM1127_059X5R5_orig.ffu --emmc-user fw/img/user-real.bin"

qemu/saimaa.c

@@ -719,9 +719,10 @@ static void saimaa_machine_init(MachineState *machine)
                 uint32_t v = 0x08006B8D;
                 cpu_physical_memory_write(0x080528D0, &v, 4);
             }
-            /* HW-ready bit (b25): [0x073A100] bit2 (SBL read-only poll). */
+            /* HW-ready bits (b25/b26): [0x073A100] bits 0,1,2 (SBL
+             * read-only polls: bit2 poll#1, bit1 poll#2, bit0 gate). */
             {
-                uint32_t v = 0x00000004;
+                uint32_t v = 0x00000007;
                 cpu_physical_memory_write(0x073A100, &v, 4);
             }
             /* PBL world-switch Thumb-stub (b24, 4B @0x00221EF8):