set this in .config
CONFIG_FLASH_APPLICATION_ADDRESS=0x8009000
But this won’t help currently, as it can’t be flashed for some reason
I dumped whole flash through debug interface and indeed the bootloader is 36KiB
Here is the dumped flash with original firmware installed
flash.bin.zip (178.9 KB)