JCG Q30 PRO救砖教程，MTK mt798x 系列基本通用

无名12138

自己折腾JCG Q30 Pro的时候，一直闲自己刷的UBoot不带DHCP功能，天灵大佬的带，气不过就在宿舍、后台直接刷UBoot文件，还傻大胆一样的直接断电重启，结果就变砖了，因为是刷UBoot变砖的，直接进不去UBoot了。
然后就是漫无目的的找教程，然后发现有编程器固件，当时心里一喜，有救了，按刷BIOS的方法拆flash芯片刷机，就是芯片名称为25N01GVZEIG，拆下来用编程器刷入固件，结果还是不行，拆下来重新刷，找其他的再刷都不行，一时间有点懵逼，然后下意识的看了下芯片资料，再结合网上的一些资料，发现是大家备份出来的固件是不带校验，简单说就是大家的固件都是通过ssh备份出来的，读的时候MTK会跟你做校验，防止数据出问题，然后舍去校验数据，写的时候MTK会跟你生成校验数据一起写入Flash里，现在用编程器写不带校验的数据就出问题了，你写完要主控芯片去读取，结果就是校验出错。
再一次陷入到茫然中，最后在@那些年偷过的网 的帖子下留言，后面他给了TTL救砖教程，才引导启动成功。下面是具体方法
你得准备一个串口，把线接好，注意TXD接RXD，RXD接TXD，GND接GND，VCC不接，用串口工具打开串口，波特率为115200、数据位8、停止位1、其他无，如下图，软件为putty中文版



打开串口后，你至少会收到如下数据。我的即使拆了Flash也有。有其他输出的大概率有救，没有的自求多福，我没遇到没有的（耸肩）



如果到这一步，说明有救了，可以参考https://www.cnblogs.com/p123/p/18046679这个救砖教程进入uboot。如果你没像我用编程器刷过的，那大概率重新刷一下UBoot就好了，如果用编程器刷过的，记得拆下来用编程器擦除数据，一定要擦除，不然直接Flash报错，根本不能刷。
首先从这个地址下载https://www.lanzouw.com/ioTYu1pvi23gBL2文件，解压缩后得到mtk_recovery这个文件夹，最好把文件夹放到非c盘根目录下，进入mtk_recovery文件夹，再当前目录运行CMD、或者在终端里进到该目录，然后运行下面的代码，其中fip.bin文件要你自己准备，为你机器对应的UBoot，COM4是你的串口名称，在设备管理器中查看。其中fip.bin文件要你自己准备，为你机器对应的UBoot，COM4是你的串口名称，在设备管理器中查看。其中fip.bin文件要你自己准备，为你机器对应的UBoot，COM4是你的串口名称，在设备管理器中查看（重要的事情说三遍），其他芯片的命令大致相同。

1. .\mtk_uartboot.exe -s COM4 -p .\mt7981\mt7981-ddr3-bl2.bin -a -f fip.bin --brom-load-baudrate 115200 --bl2-load-baudrate 115200

复制代码

先在终端中运行该命令再上电，出现下面的输出信息，证明已经成功99%了。


当命令走完，再用串口连接设备，动作慢会发现啥也没有，不慌，按一下回车或者ctrl+c试试，有显示说明UBoot引导成功，可以敲命令刷UBoot了（没试过网线行不行，大概率直接按照在UBoot下刷机的操作应该是可以的）敲入以下命令，开始刷UBoot

1. mtkupgrade fip

复制代码

然后选择TFTP传输（这个软件很简单，网上随便下一个就好了），一步一步输入信息，input U-Boot·s IP address，input TFTP server`s IP address，input IP netmask默认就可以了，（一般input IP netmask是你电脑的IP），input FILe name就是文件名，完整带后缀。


刷完输入reset重启，那么恭喜，救砖成功。（如果不成功，可以监控一下串口输出的数据，如果不对，那就再来一次，如果不像我这样清空过闪存的，一般刷完UBoot就完成了）
如果清空过闪存的要刷入BL2和固件，可以输入mtkupgrade命令选择后刷入。

1. mtkupgrade

复制代码

剩下的就看你的动手能力了。
新人发帖，有用的话记得回复一下。
隐藏内容为工具包，按需下载

游客，如果您要查看本帖隐藏内容请回复

237176253

支持一下              

成哥哥呀

会场不辍~~~.




~~~~~~~~~~~~~~~

thunder372

mtk这方案真是玩儿不死啊

那些年偷过的网

老哥，动手能力极强👍️👍️👍️

amymylove

mtk这方案真是玩儿不死啊

天天有好运

感谢楼主分享                  

Longct666

厉害，我之前也刷错uboot了，ttl直接救回

奔波馆

MTK YES！支持，支持！

131993

上传固件错误，变砖，感谢分享

飞起来~

JCG Q30 PRO救砖教程，MTK mt798x 系列基本通用

那些年偷过的网

补充一个小点，可以直接等刷完fip，就进入uboot刷factory.bin

谁明知做戏

mtkupgrade mtkupgrade

无名12138

那些年偷过的网 发表于 2024-4-19 20:40
老哥，动手能力极强👍️👍️👍️

还是得感觉你提供救砖教程

那些年偷过的网

无名12138 发表于 2024-4-21 14:35
还是得感觉你提供救砖教程

我这已经砖了一个，救不活了，bl2,fip,固件都在mtkupgrade下刷了一遍

1. 
   
2. Starting kernel ...
   
3. 
   
4. [    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
   
5. [    0.000000] Linux version 5.4.255 (YaoDao@AE86) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r0-3fa9687)) #0 SMP Sun Feb 25 04:28:13 2024
   
6. [    0.000000] Machine model: JCG Q30
   
7. [    0.000000] earlycon: uart8250 at MMIO32 0x0000000011002000 (options '')
   
8. [    0.000000] printk: bootconsole [uart8250] enabled
   
9. [    0.000000] On node 0 totalpages: 130128
   
10. [    0.000000]   DMA32 zone: 2048 pages used for memmap
    
11. [    0.000000]   DMA32 zone: 0 pages reserved
    
12. [    0.000000]   DMA32 zone: 130128 pages, LIFO batch:31
    
13. [    0.000000] psci: probing for conduit method from DT.
    
14. [    0.000000] psci: PSCIv1.1 detected in firmware.
    
15. [    0.000000] psci: Using standard PSCI v0.2 function IDs
    
16. [    0.000000] psci: MIGRATE_INFO_TYPE not supported.
    
17. [    0.000000] psci: SMC Calling Convention v1.0
    
18. [    0.000000] percpu: Embedded 20 pages/cpu s44056 r8192 d29672 u81920
    
19. [    0.000000] pcpu-alloc: s44056 r8192 d29672 u81920 alloc=20*4096
    
20. [    0.000000] pcpu-alloc: [0] 0 [0] 1
    
21. [    0.000000] Detected VIPT I-cache on CPU0
    
22. [    0.000000] CPU features: detected: GIC system register CPU interface
    
23. [    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
    
24. [    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 128080
    
25. [    0.000000] Kernel command line: console=ttyS0,115200n1 loglevel=8 earlycon=uart8250,mmio32,0x11002000
    
26. [    0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
    
27. [    0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
    
28. [    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
    
29. [    0.000000] Memory: 491120K/520512K available (7486K kernel code, 538K rwdata, 2052K rodata, 448K init, 288K bss, 29392K reserved, 0K cma-reserved)
    
30. [    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
    
31. [    0.000000] rcu: Hierarchical RCU implementation.
    
32. [    0.000000] rcu:     CONFIG_RCU_FANOUT set to non-default value of 32.
    
33. [    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
    
34. [    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
    
35. [    0.000000] GICv3: GIC: Using split EOI/Deactivate mode
    
36. [    0.000000] GICv3: 640 SPIs implemented
    
37. [    0.000000] GICv3: 0 Extended SPIs implemented
    
38. [    0.000000] GICv3: Distributor has no Range Selector support
    
39. [    0.000000] GICv3: 16 PPIs implemented
    
40. [    0.000000] GICv3: no VLPI support, no direct LPI support
    
41. [    0.000000] GICv3: CPU0: found redistributor 0 region 0:0x000000000c080000
    
42. [    0.000000] arch_timer: cp15 timer(s) running at 13.00MHz (phys).
    
43. [    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2ff89eacb, max_idle_ns: 440795202429 ns
    
44. [    0.000004] sched_clock: 56 bits at 13MHz, resolution 76ns, wraps every 4398046511101ns
    
45. [    0.008189] Calibrating delay loop (skipped), value calculated using timer frequency.. 26.00 BogoMIPS (lpj=52000)
    
46. [    0.018508] pid_max: default: 32768 minimum: 301
    
47. [    0.023226] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
    
48. [    0.030577] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
    
49. [    0.039261] ASID allocator initialised with 65536 entries
    
50. [    0.044763] rcu: Hierarchical SRCU implementation.
    
51. [    0.049881] smp: Bringing up secondary CPUs ...
    
52. [    0.054764] Detected VIPT I-cache on CPU1
    
53. [    0.054785] GICv3: CPU1: found redistributor 1 region 0:0x000000000c0a0000
    
54. [    0.054806] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
    
55. [    0.054865] smp: Brought up 1 node, 2 CPUs
    
56. [    0.076480] SMP: Total of 2 processors activated.
    
57. [    0.081206] CPU features: detected: 32-bit EL0 Support
    
58. [    0.086368] CPU features: detected: CRC32 instructions
    
59. [    0.091638] CPU: All CPU(s) started at EL2
    
60. [    0.095761] alternatives: patching kernel code
    
61. [    0.102413] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
    
62. [    0.112225] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
    
63. [    0.119124] pinctrl core: initialized pinctrl subsystem
    
64. [    0.125029] NET: Registered protocol family 16
    
65. [    0.129717] DMA: preallocated 256 KiB pool for atomic allocations
    
66. [    0.136716] pstore: Registered ramoops as persistent store backend
    
67. [    0.142946] ramoops: using 0x10000@0x42ff0000, ecc: 0
    
68. [    0.161738] cryptd: max_cpu_qlen set to 1000
    
69. [    0.167931] SCSI subsystem initialized
    
70. [    0.172402] libata version 3.00 loaded.
    
71. [    0.176444] usbcore: registered new interface driver usbfs
    
72. [    0.182034] usbcore: registered new interface driver hub
    
73. [    0.187412] usbcore: registered new device driver usb
    
74. [    0.193283] Bluetooth: Core ver 2.22
    
75. [    0.196932] NET: Registered protocol family 31
    
76. [    0.201404] Bluetooth: HCI device and connection manager initialized
    
77. [    0.207796] Bluetooth: HCI socket layer initialized
    
78. [    0.212698] Bluetooth: L2CAP socket layer initialized
    
79. [    0.217781] Bluetooth: SCO socket layer initialized
    
80. [    0.222904] rbus 18000000.wbsys: PCI host bridge to bus 0000:00
    
81. [    0.228868] pci_bus 0000:00: root bus resource [mem 0x18000000-0x18ffffff]
    
82. [    0.235780] pci_bus 0000:00: root bus resource [bus 00-ff]
    
83. [    0.241292] pci_bus 0000:00: scanning bus
    
84. [    0.245332] pci 0000:00:00.0: [14c3:7981] type 00 class 0x000280
    
85. [    0.251378] pci 0000:00:00.0: reg 0x10: [mem 0x18000000-0x1800000f 64bit]
    
86. [    0.258202] pci 0000:00:00.0: reg 0x18: [mem 0x00000000-0x0000000f]
    
87. [    0.264502] pci 0000:00:00.0: reg 0x1c: [mem 0x00000000-0x0000000f]
    
88. [    0.270802] pci 0000:00:00.0: reg 0x20: [mem 0x00000000-0x0000000f]
    
89. [    0.277101] pci 0000:00:00.0: reg 0x24: [mem 0x00000000-0x0000000f]
    
90. [    0.284208] pci_bus 0000:00: fixups for bus
    
91. [    0.288420] pci_bus 0000:00: bus scan returning with max=00
    
92. [    0.294348] clocksource: Switched to clocksource arch_sys_counter
    
93. [    0.301042] thermal_sys: Registered thermal governor 'fair_share'
    
94. [    0.301045] thermal_sys: Registered thermal governor 'bang_bang'
    
95. [    0.307205] thermal_sys: Registered thermal governor 'step_wise'
    
96. [    0.313245] thermal_sys: Registered thermal governor 'user_space'
    
97. [    0.319281] thermal_sys: Registered thermal governor 'power_allocator'
    
98. [    0.325644] NET: Registered protocol family 2
    
99. [    0.336683] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
    
100. [    0.344362] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
     
101. [    0.352821] TCP established hash table entries: 4096 (order: 3, 32768 bytes, linear)
     
102. [    0.360636] TCP bind hash table entries: 4096 (order: 4, 65536 bytes, linear)
     
103. [    0.367853] TCP: Hash tables configured (established 4096 bind 4096)
     
104. [    0.374308] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
     
105. [    0.380880] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
     
106. [    0.387985] NET: Registered protocol family 1
     
107. [    0.392391] PCI: CLS 0 bytes, default 64
     
108. [    0.397120] workingset: timestamp_bits=46 max_order=17 bucket_order=0
     
109. [    0.406434] squashfs: version 4.0 (2009/01/31) Phillip Lougher
     
110. [    0.412308] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
     
111. [    0.434947] NET: Registered protocol family 38
     
112. [    0.439931] phy phy-usb-phy@11e10000.1: type_sw - reg 0x218, index 0
     
113. [    0.456835] Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
     
114. [    0.463915] printk: console [ttyS0] disabled
     
115. [    0.488318] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 12, base_baud = 2500000) is a ST16650V2
     
116. [    0.497528] printk: console [ttyS0] enabled
     
117. [    0.497528] printk: console [ttyS0] enabled
     
118. [    0.505886] printk: bootconsole [uart8250] disabled
     
119. [    0.505886] printk: bootconsole [uart8250] disabled
     
120. [    0.516269] mtk_rng trng@1020f000: registered RNG driver
     
121. [    0.516295] random: crng init done
     
122. [    0.521740] cacheinfo: Unable to detect cache hierarchy for CPU 0
     
123. [    0.533298] loop: module loaded
     
124. [    0.537314] mt7981-pinctrl 11d00000.pinctrl: pin_config_set op failed for pin 19
     
125. [    0.544719] mtk-spi 1100a000.spi: Error applying setting, reverse things back
     
126. [    0.551926] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010
     
127. [    0.560695] Mem abort info:
     
128. [    0.563478]   ESR = 0x96000005
     
129. [    0.566519]   EC = 0x25: DABT (current EL), IL = 32 bits
     
130. [    0.571815]   SET = 0, FnV = 0
     
131. [    0.574856]   EA = 0, S1PTW = 0
     
132. [    0.577983] Data abort info:
     
133. [    0.580849]   ISV = 0, ISS = 0x00000005
     
134. [    0.584671]   CM = 0, WnR = 0
     
135. [    0.587624] [0000000000000010] user address but active_mm is swapper
     
136. [    0.593962] Internal error: Oops: 96000005 [#1] SMP
     
137. [    0.598824] Modules linked in:
     
138. [    0.601870] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.4.255 #0
     
139. [    0.607859] Hardware name: JCG Q30 (DT)
     
140. [    0.611682] pstate: 40000085 (nZcv daIf -PAN -UAO)
     
141. [    0.616463] pc : mtk_spi_can_dma+0x0/0x30
     
142. [    0.620459] lr : mtk_spi_interrupt+0x60/0x358
     
143. [    0.624801] sp : ffffffc010003e70
     
144. [    0.628102] x29: ffffffc010003e70 x28: ffffffc010a5ecc0
     
145. [    0.633400] x27: 0000000000000060 x26: ffffffc010914cd0
     
146. [    0.638697] x25: ffffffc010acd2da x24: ffffff80032fbe00
     
147. [    0.643994] x23: 0000000000000053 x22: ffffffc010003f3c
     
148. [    0.649291] x21: 0000000000000000 x20: ffffff801e332000
     
149. [    0.654588] x19: ffffff801e332600 x18: 00000000a5ecee8c
     
150. [    0.659886] x17: 00000000bff78c54 x16: 000000009d829f97
     
151. [    0.665183] x15: 00000000f61a0bdf x14: 0000003fffffffff
     
152. [    0.670481] x13: 0000003fffffffff x12: 0000000000000000
     
153. [    0.675778] x11: 00000000000000f4 x10: 0000000000000040
     
154. [    0.681075] x9 : ffffffc010a676e0 x8 : ffffffc010a676d8
     
155. [    0.686372] x7 : ffffff801e45f790 x6 : 0000000000000000
     
156. [    0.691670] x5 : ffffff801e45f6d0 x4 : ffffffc00f483000
     
157. [    0.696967] x3 : ffffffc0104c5fe0 x2 : 0000000000000000
     
158. [    0.702263] x1 : 0000000000000000 x0 : ffffff801e332000
     
159. [    0.707560] Call trace:
     
160. [    0.709995]  mtk_spi_can_dma+0x0/0x30
     
161. [    0.713648]  __handle_irq_event_percpu+0x54/0x148
     
162. [    0.718339]  handle_irq_event_percpu+0x1c/0x60
     
163. [    0.722769]  handle_irq_event+0x40/0xb0
     
164. [    0.726591]  handle_fasteoi_irq+0xdc/0x190
     
165. [    0.730674]  generic_handle_irq+0x24/0x38
     
166. [    0.734670]  __handle_domain_irq+0x60/0xb8
     
167. [    0.738753]  gic_handle_irq+0xc0/0x158
     
168. [    0.742489]  el1_irq+0xb8/0x140
     
169. [    0.745618]  arch_cpu_idle+0x10/0x18
     
170. [    0.749183]  do_idle+0x120/0x148
     
171. [    0.752399]  cpu_startup_entry+0x24/0x60
     
172. [    0.756310]  rest_init+0xb0/0xbc
     
173. [    0.759526]  arch_call_rest_init+0xc/0x14
     
174. [    0.763521]  start_kernel+0x3f4/0x40c
     
175. [    0.767174] Code: 2a0203e4 52800003 17ffffe6 d503201f (b9401041)
     
176. [    0.773254] ---[ end trace f9cfeb0e925a1d47 ]---
     
177. [    0.778660] Kernel panic - not syncing: Fatal exception in interrupt
     
178. [    0.784998] SMP: stopping secondary CPUs
     
179. [    0.788909] Kernel Offset: disabled
     
180. [    0.792384] CPU features: 0x00002,20002008
     
181. [    0.796465] Memory Limit: none
     
182. [    0.800314] Rebooting in 1 seconds..
     
183. 
     
184. F0: 102B 0000
     
185. FA: 1040 0000
     
186. FA: 1040 0000 [0200]
     
187. F9: 3903 0041
     
188. F3: 1001 0000 [0200]
     
189. F3: 1001 0000
     
190. F6: 102C 0000
     
191. F5: 480A 0031
     
192. 00: 1005 0000
     
193. FA: 1040 0000
     
194. FA: 1040 0000 [0200]
     
195. F9: 3903 0041
     
196. F3: 1001 0000 [0200]
     
197. F3: 1001 0000
     
198. F6: 102C 0000
     
199. 01: 102A 0001
     
200. 02: 1005 0000
     
201. BP: 2000 00C0 [0001]
     
202. EC: 0000 0000 [1000]
     
203. T0: 0000 00ED [010F]
     
204. System halt!
     

复制代码