We have set DEVSTAT to 0x106e7 in order to perform a NAND boot by the ARM. However, once the DEVSTAT register is read by the RBL by the instruction at address 0x120F0. The instruction there is "ldr r5,[r5]" and it correctly reads 0x106E7 from the DEVSTAT register.
However, the RBL does not seem to progress to a NAND flash boot, and instead ends up looping at 0x0128 forever.