求助！TTL救砖无法进入u-boot

woshi1q1q · 发表于 2020-6-29 02:07

小米R4A，之前刷breed的时候，不小心把breed mtd到了firmware分区，后面路由器好像就成砖了,开机黄灯常亮，进不去后台。
于是准备用TTL救砖，发现TTL连接时候在无限重启，过程中无法输入数字进入u-boot，大佬给帮忙看下吗。后面附上TTL的输出信息

woshi1q1q · 发表于 2020-6-29 02:09

===================================================================
     MT7621 stage1 code Oct 28 2018 20:39:32 (ASIC)
     CPU=500000000 HZ BUS=166666666 HZ
==================================================================
Change MPLL source from XTAL to CR...
do MEMPLL setting..
MEMPLL Config : 0x11100000
3PLL mode + External loopback
=== XTAL-40Mhz === DDR-1200Mhz ===
PLL3 FB_DL: 0xa, 1/0 = 673/351 29000000
PLL2 FB_DL: 0xc, 1/0 = 556/468 31000000
PLL4 FB_DL: 0x10, 1/0 = 658/366 41000000
do DDR setting..[01F40000]
Apply DDR3 Setting...(use customer AC)
      0 8 16 24 32 40 48 56 64 72 80 88 96  104  112  120
   --------------------------------------------------------------------------------
0000:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0001:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0002:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0003:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0004:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0005:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0006:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0007:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0008:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0009:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000A:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000B:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000C:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
000D:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1
000E:| 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1
000F:| 0 0 0 1 1 1 1 1 1 1 1 1 1 1 0 0
0010:| 1 1 1 1 1 1 1 1 0 0 0 0 0 0 0 0
0011:| 1 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0
0012:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0013:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0014:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0015:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0016:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0017:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0018:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
0019:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001A:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001B:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001C:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001D:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001E:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
001F:| 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
DRAMC_DQSCTL1[0e0]=13000000
DRAMC_DQSGCTL[124]=80000033
rank 0 coarse = 15
rank 0 fine = 64
B:| 0 0 0 0 0 0 0 1 1 1 0 0 0 0 0 0
opt_dle value:8
DRAMC_DDR2CTL[07c]=C287220D
DRAMC_PADCTL4[0e4]=000022B3
DRAMC_DQIDLY1[210]=0D0A0B0A
DRAMC_DQIDLY2[214]=060A0909
DRAMC_DQIDLY3[218]=0C080809
DRAMC_DQIDLY4[21c]=0B070B09
DRAMC_R0DELDLY[018]=00002020
==================================================================
RX DQS perbit delay software calibration
==================================================================
1.0-15 bit dq delay value
==================================================================
bit|    0  1  2  3  4  5  6  7  8  9
--------------------------------------
0 | 9 9 9 12 7 8 9 6 6 6
10 | 7 10 7 9 7 8
--------------------------------------

==================================================================
2.dqs window
x=pass dqs delay value (min~max)center
y=0-7bit DQ of every group
input delay

QS0 =32 DQS1 = 32
==================================================================
bit DQS0    bit    DQS1
0  (1~62)31  8  (1~58)29
1  (1~60)30  9  (1~59)30
2  (1~62)31  10  (1~61)31
3  (1~62)31  11  (1~59)30
4  (1~60)30  12  (1~60)30
5  (1~62)31  13  (1~59)30
6  (1~61)31  14  (1~63)32
7  (1~63)32  15  (1~58)29
==================================================================
3.dq delay value last
==================================================================
bit| 0  1  2  3  4  5  6  7  8 9
--------------------------------------
0 | 10 11 10 13 9 9 10 6 9 8
10 | 8 12 9 11 7 11
==================================================================
==================================================================
   TX  perbyte calibration
==================================================================
DQS loop = 15, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqsdly_pass[0]=15,  finish count=1
dqs_perbyte_dly.last_dqsdly_pass[1]=15,  finish count=2
DQ loop=15, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqdly_pass[0]=15,  finish count=1
dqs_perbyte_dly.last_dqdly_pass[1]=15,  finish count=2
byte:0, (DQS,DQ)=(8,8)
byte:1, (DQS,DQ)=(8,8)
DRAMC_DQODLY1[200]=88888888
DRAMC_DQODLY2[204]=88888888
20,data:88
[EMI] DRAMC calibration passed

===================================================================
     MT7621 stage1 code done
     CPU=500000000 HZ BUS=166666666 HZ
===================================================================

U-Boot 1.1.3 (Feb 22 2019 - 06:43:39)

Board: Ralink APSoC DRAM:  128 MB
Power on memory test. Memory size= 128 MB...OK!
relocate_code Pointer at: 87fb0000

Config XHCI 40M PLL
RT2880_RSTSTAT_REG 0xc0030000
***************************
Board power on Occurred
***************************
flash manufacture id: c8, device id 40 18
find flash: GD25Q128C
============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection
DRAM_TYPE: DDR3
DRAM bus: 16 bit
Xtal Mode=3 OCP Ratio=1/3
Flash component: SPI Flash
Date:Feb 22 2019  Time:06:43:39
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768

##### The CPU freq = 880 MHZ ####
estimate memory size =128 Mbytes
#Reset_MT7530
set LAN/WAN LLLLW

restore_defaults:<NULL>

Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
7: Load Boot Loader code then write to Flash via Serial.
9: Load Boot Loader code then write to Flash via TFTP.

n3: System Boot system code via Flash.
Booting System 1
Erasing SPI Flash...
raspi_erase: offs:30000 len:10000
.
Writing to SPI Flash...
.
done
## Booting image at bc180000 ...
Bad Magic Number,FF000010, try to reboot
Erasing SPI Flash...
raspi_erase: offs:30000 len:10000
.
Writing to SPI Flash...
.
done

zyguowei · 发表于 2020-6-29 02:14

woshi1q1q 发表于 2020-6-29 02:09
===================================================================
MT7621 stage1 code Oct ...

按住复位键，然后再通电，，，，

应该这里
（Please choose the operation:
1: Load system code to SDRAM via TFTP.
2: Load system code then write to Flash via TFTP.
3: Boot system code via Flash (default).
4: Entr boot command line interface.
7: Load Boot Loader code then write to Flash via Serial.
9: Load Boot Loader code then write to Flash via TFTP.）

就有倒计时，来得急选的

woshi1q1q · 发表于 2020-6-29 02:17

zyguowei 发表于 2020-6-29 02:14
按住复位键，然后再通电，，，，

应该这里

试了一晚上了不行，我复位键如果长按，过一会儿灯熄了，ttl控制台也没输出信息。

diluxiaoxiao · 发表于 2020-6-29 09:13

按住reset插电会闪烁黄灯么，用官方救砖工具试过么。这个4a千兆版是spi flash，实在不行上编程器吧，ch341a才十几块包邮

zhuoling1234 · 发表于 2020-6-29 09:37

出现楼上说的红色字体的时候马上按2回车，然后搭建一个tftp把固件放里面，再用命令刷进去就可以了

woshi1q1q · 发表于 2020-6-29 14:15

diluxiaoxiao 发表于 2020-6-29 09:13
按住reset插电会闪烁黄灯么，用官方救砖工具试过么。这个4a千兆版是spi flash，实在不行上编程器吧，ch341a ...

有时候可以闪黄灯，但是官方救砖还是不行，可能只能上编程器了

woshi1q1q · 发表于 2020-6-29 14:16

zhuoling1234 发表于 2020-6-29 09:37
出现楼上说的红色字体的时候马上按2回车，然后搭建一个tftp把固件放里面，再用命令刷进去就可以了

就是这个地方按不了，一通电就一直在按没用

diluxiaoxiao · 发表于 2020-6-29 14:42

看TTL信息最终卡在哪里，会不会是硬件的问题。我遇到过2个小米4是cpu坏了。你可以搜下我的帖子，有故障机器的TTL信息

zhuoling1234 · 发表于 2020-6-29 16:09

woshi1q1q 发表于 2020-6-29 14:16
就是这个地方按不了，一通电就一直在按没用

https://jingyan.baidu.com/article/425e69e6f57195be15fc16e9.html可以参考下这个，实在不行就用编程器吧

账号		自动登录	找回密码
密码			立即注册

[R4A] 求助！TTL救砖无法进入u-boot

相关帖子

点评

点评

点评

点评

欢迎大家光临恩山无线论坛 /1