求助，小爱AI音箱变砖，如何自己解决不去售后！？

taichi

同事的小爱AI音箱



，10多天之前成了这样。





无论怎么组合按键，也没动静。
主板是这样的





在论坛里转了一下午，自己用TTL线连上了，用putty连进去就是这个



密码，是用MD5（SN+B0168A6D-119A-F21A-DA58-980732F80A19）取前14位计算的，也没能进去。




求助坛内高手，如何解决这样的问题？


还有些疑问：
1.这个主板型号是不是S12A？
2.我root账户密码对了，进去之后能干啥？有人说进去格式化DATA分区就行，是否有正确的操作方法？
3.还有介绍说插电的一瞬间按F进安全模式，那个啥样子呢？

ben_ben_ji

发给你了，祝你好运！

taichi

感谢您的回复！！您提供的方法现在进不去啊，给您发信息了。

taichi

您   
AXG:BL1:d95c53:a4926f;FEAT:E0DC318C:2000OC:F;EMMC:800;NAND:0;READ:0;0.0;CHK:0;
sdio debug board detected
TE: 23350

BL2 Built : 18:30:39, Aug 28 2018. axg g56303a2-dirty - liang.yang@droid11-sz

set vcck to 1140 mv
set vddee to 1070 mv
Board ID = 2
CPU clk: 1200MHz
DDR low power enabled
DDR3 chl: Rank0 16bit @ 792MHz
bist_test rank: 0 28 03 4e 34 10 59 26 01 4b 37 12 5c 00 00 00 00 00 00 00 00 00 00 00 00 637   - PASS
Rank0: 256MB(auto)-2T-11
AddrBus test pass!
NAND init
page0 page0->bbt:
0000000000000000000000000000000000000000000000000000000000000000
page0 bbt:
0000000000000000000000000000000000000000000000000000000000000000
Load FIP HDR from NAND, src: 0x0000c000, des: 0x01700000, size: 0x00004000
Load BL3x from NAND, src: 0x00010000, des: 0x01704000, size: 0x00080000
NOTICE:  BL31: v1.3(release):a1a8551
NOTICE:  BL31: Built : 15:59:55, Nov  9 2017
NOTICE:  BL31: AXG normal boot!
NOTICE:  BL31: BL33 decompress pass
[Image: axg_v1.1.3268-b93dd79 2017-12-01 14:22:18 huan.biao@droid12]
OPS=0x42
b1 ca c3 d3 f0 62 91 24 61 48 eb 50 bl30:axg ver: 9 mode: 0
bl30:axg thermal0
[0.014613 Inits done]
secure task start!
high task start!
low task start!
ERROR:   Error initializing runtime service opteed_fast


U-Boot 2015.01 (Dec 24 2019 - 07:00:02), Build: jenkins-Mico_s12a_ota_publish-379

DRAM:  256 MiB
Relocation Offset is: 0ef17000
register usb cfg[0][1] = 000000000ff89690
NAND:  nand id: 0x98 0xda
256MiB, SLC, page size: 2048, OOB size: 64
NAND device id: 98 da 90 15 f6 16
NAND device: Manufacturer ID: 0x98, Chip ID: 0x98 (Toshiba A revision NAND 2Gib TC58BVG1S3HTA00 )
oob avail size 6
Creating 1 MTD partitions on "A revision NAND 2Gib TC58BVG1S3HTA00 ":
0x000000000000-0x000000200000 : "bootloader"
A revision NAND 2Gib TC58BVG1S3HTA00  initialized ok
nand id: 0x98 0xda
256MiB, SLC, page size: 2048, OOB size: 64
NAND device id: 98 da 90 15 f6 16
NAND device: Manufacturer ID: 0x98, Chip ID: 0x98 (Toshiba A revision NAND 2Gib TC58BVG1S3HTA00 )
PLANE change!
aml_nand_init obmul=1,oobfree.length=8,oob_size=64
oob avail size 8
bbt_start=20 env_start=24 key_start=32 dtb_start=40
nbbt: info size=0x800 max_scan_blk=24, start_blk=20
nbbt : phy_blk_addr=20, ec=0, phy_page_addr=0, timestamp=1
nbbt free list:
blockN=21, ec=-1, dirty_flag=0
blockN=22, ec=-1, dirty_flag=0
blockN=23, ec=-1, dirty_flag=0
aml_nand_scan_rsv_info 1251: page_num=1
aml_nand_scan_rsv_info 1254
nbbt valid addr: 280000
aml_nand_bbt_check 1389 bbt is valid, reading.
aml_nand_read_rsv_info:397,read nbbt info to 280000
nenv: info size=0x10000 max_scan_blk=32, start_blk=24
nenv : phy_blk_addr=25, ec=83, phy_page_addr=0, timestamp=172
nenv free list:
blockN=24, ec=83, dirty_flag=1
blockN=26, ec=3, dirty_flag=1
blockN=27, ec=-1, dirty_flag=0
blockN=28, ec=-1, dirty_flag=0
blockN=29, ec=-1, dirty_flag=0
blockN=30, ec=-1, dirty_flag=0
blockN=31, ec=-1, dirty_flag=0
aml_nand_scan_rsv_info 1251: page_num=32
aml_nand_scan_rsv_info 1254
nenv valid addr: 320000
nkey: info size=0x8000 max_scan_blk=40, start_blk=32
nkey : phy_blk_addr=33, ec=0, phy_page_addr=0, timestamp=2
nkey free list:
blockN=32, ec=0, dirty_flag=1
blockN=34, ec=-1, dirty_flag=0
blockN=35, ec=-1, dirty_flag=0
blockN=36, ec=-1, dirty_flag=0
blockN=37, ec=-1, dirty_flag=0
blockN=38, ec=-1, dirty_flag=0
blockN=39, ec=-1, dirty_flag=0
aml_nand_scan_rsv_info 1251: page_num=16
aml_nand_scan_rsv_info 1254
nkey valid addr: 430000
ndtb: info size=0x20000 max_scan_blk=44, start_blk=40
ndtb : phy_blk_addr=40, ec=5, phy_page_addr=0, timestamp=11
ndtb free list:
blockN=41, ec=4, dirty_flag=1
blockN=42, ec=-1, dirty_flag=0
blockN=43, ec=-1, dirty_flag=0
aml_nand_scan_rsv_info 1251: page_num=64
aml_nand_scan_rsv_info 1254
ndtb valid addr: 500000
tpl: off 8388608, size 8388608
NAND bbt detect factory Bad block at c000000
NAND bbt detect factory Bad block at c020000
Creating 6 MTD partitions on "A revision NAND 2Gib TC58BVG1S3HTA00 ":
0x000000800000-0x000001000000 : "tpl"
0x000001000000-0x000001800000 : "boot0"
0x000001800000-0x000002000000 : "boot1"
0x000002000000-0x000004000000 : "system0"
0x000004000000-0x000006000000 : "system1"
0x000006000000-0x000010000000 : "data"
NAND bbt detect factory Bad block at c000000
NAND bbt detect factory Bad block at c020000
A revision NAND 2Gib TC58BVG1S3HTA00  initialized ok
aml_key_init 170
MMC:
uboot env amlnf_env_read : ####
aml_nand_read_rsv_info:397,read nenv info to 320000
In:    serial
Out:   serial
Err:   serial
[store]To run cmd[amlnf dtb_read 0x1000000 0x20000]
sub cmd dtb
new argv[1] dtb_read
do_dtb_ops(): argc 4
arg 0: amlnf
arg 1: dtb_read
arg 2: 0x1000000
arg 3: 0x20000
do_dtb_ops() read
amlnf_dtb_read: ####
aml_nand_read_rsv_info:397,read ndtb info to 500000
do_dtb_ops(): 131072 bytes read : OK
      Amlogic multi-dtb tool
      GZIP format, decompress...
      Multi dtb detected
      Multi dtb tool version: v2 .
      Support 5 dtbs.
        aml_dt soc: xiaomi platform: s12a variant: v01
        dtb 0 soc: xiaomi   plat: s12   vari: v1
        dtb 1 soc: xiaomi   plat: s12a   vari: v01
        dtb 2 soc: xiaomi   plat: s12c   vari: v01
        dtb 3 soc: xiaomi   plat: s12c   vari: v02
        dtb 4 soc: xiaomi   plat: s12c   vari: v03
      Find match dtb: 1
amlkey_init() enter!
amlnf_key_read key data len too much
aml_nand_read_rsv_info:397,read nkey info to 430000
[EFUSE_MSG]keynum is 4
InUsbBurn
noSof
Hit Enter or space or Ctrl+C key to stop autoboot -- :  0
HAVE SN Code ...
Saving Environment to aml-storage...
uboot env amlnf_env_save : ####
aml_nand_save_rsv_info:656, nenv: valid=1, pages=32
aml_nand_save_rsv_info:716,save info to 330000
aml_nand_write_rsv:520,write info to 330000
[burnup]Rd:Up sz 0x3a6440 to align 0x1000
save_power_post ...
## Booting Android Image at 0x01080000 ...
reloc_addr =f0348e0
copy done
load dtb from 0x1000000 ......
      Amlogic multi-dtb tool
      Single dtb detected
   Uncompressing Kernel Image ... OK
   kernel loaded at 0x01080000, end = 0x017a7808
   Loading Ramdisk to 0eead000, end 0f004b83 ... OK
   Loading Device Tree to 000000000eea2000, end 000000000eeac807 ... OK

Starting kernel ...

uboot time: 1793574 us
domain-0 init dvfs: 4
[    0.273157@1] ff803000.serial: clock gate not found
[    0.576194@2] i2c i2c-2: [aml_i2c_xfer] error ret = -5 (-EIO)
[    0.576307@2] i2c i2c-2: token 1, master_no(2) 300K addr 0x6d
get key is 0x00 , curr_boot is boot0
Booting from boot0
/dev/mtdblock4 is ready now.
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
Please press Enter to activate this console.
[    4.756307@0] cyttsp 0-0008: Failed to request firmware touch.cyacd
[    4.756938@0] cyttsp 0-0008: Failed to update firmware;
[    6.251480@1] ubi0 error: ubi_attach: bad image sequence number 9699389 in PEB 40, expected 811945928
[    6.255063@1] Erase counter header dump:
[    6.258932@1]        magic          0x55424923
[    6.262813@1]        version        1
[    6.265917@1]        ec             3
[    6.269014@1]        vid_hdr_offset 2048
[    6.272385@1]        data_offset    4096
[    6.275749@1]        image_seq      9699389
[    6.279371@1]        hdr_crc        0x6d56ac3
[    6.283165@1] erase counter header hexdump:
[    6.287343@1] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd6, error -22
[    6.473933@3] i2c i2c-1: [aml_i2c_xfer] error ret = -5 (-EIO)
[    6.474058@3] i2c i2c-1: token 1, master_no(1) 300K addr 0x3c


以上是我开机出现的内容

taichi

如果我在提示Hit Enter or space or Ctrl+C key to stop autoboot ，在这里按enter之后，出现的是
s12#
的光标，输入help显示的如下
s12#help
?       - alias for 'help'
aml_sysrecovery- Burning with amlogic format package from partition sysrecovery
amlmmc  - AMLMMC sub system
amlnf   - aml mtd nand sub-system
autoscr - run script from memory
base    - print or set address offset
booti   - boot arm64 Linux Image image from memory
bootm   - boot application image from memory
chpart  - change active partition
clkmsr  - Amlogic measure clock
cmp     - memory compare
cp      - memory copy
crc32   - checksum calculation
dcache  - enable or disable data cache
defenv_reserv- reserve some specified envs after defaulting env
echo    - echo args to console
efuse   - efuse commands
efuse_user- efuse user space read write ops
emmc    - EMMC sub system
env     - environment handling commands
exit    - exit script
false   - do nothing, unsuccessfully
fdt     - flattened device tree utility commands
forceupdate- forceupdate
get_rebootmode- get reboot mode
get_version- get uboot version
go      - start application at address 'addr'
gpio    - query and control gpio pins
help    - print command description/usage
icache  - enable or disable instruction cache
imgread - Read the image from internal flash with actual size
itest   - return true/false on integer compare
jtagoff - disable jtag
jtagon  - enable jtag
keyman  - Unify key ops interfaces based dts cfg
keyunify- key unify sub-system
loadb   - load binary file over serial line (kermit mode)
loadx   - load binary file over serial line (xmodem mode)
loady   - load binary file over serial line (ymodem mode)
loop    - infinite loop on address range
md      - memory display
mm      - memory modify (auto-incrementing address)
mmc     - MMC sub system
mmcinfo - display MMC info
mtdparts- define flash/nand partitions
mw      - memory write (fill)
mwm     - mw mask function
nand    - NAND sub-system
nboot   - boot from NAND device
nm      - memory modify (constant address)
open_scp_log- print SCP messgage
printenv- print environment variables
query   - SoC query commands
read_temp- cpu temp-system
reboot  - set reboot mode and reboot system
reset   - Perform RESET of the CPU
rpmb_state- RPMB sub-system
rsvmem  - reserve memory
run     - run commands in an environment variable
saradc  - saradc sub-system
saradc_12bit- saradc sub-system
saveenv - save environment variables to persistent storage
sdc_burn- Burning with amlogic format package in sdmmc
sdc_update- Burning a partition with image file in sdmmc card
set_trim_base- cpu temp-system
set_usb_boot- set usb boot mode
setenv  - set environment variables
showvar - print local hushshell variables
sleep   - delay execution for some time
store   - STORE sub-system
systemoff- system off
temp_triming- cpu temp-system
test    - minimal test like /bin/sh
true    - do nothing, successfully
unpackimg- un pack logo image into pictures
update  - Enter v2 usbburning mode
usb     - USB sub-system
usb_burn- Burning with amlogic format package in usb
usb_update- Burning a partition with image file in usb host
usbboot - boot from USB device
version - print monitor, compiler and linker version
vpp     - vpp sub-system
watchdog- enable or disable watchdog
write_trim- cpu temp-system
write_version- cpu temp-system
s12#

wktsm

楼主您这个弄好了吗？我的音箱也是这种情况能告知怎么弄的吗？

taichi

wktsm 发表于 2021-1-15 00:09
楼主您这个弄好了吗？我的音箱也是这种情况能告知怎么弄的吗？

并没有！目前还没有高人回复我

ben_ben_ji

你的启动是加载的整个启动过程，正确方式：连上TTL，打开putty。接上电源，然后一直不停的按f,enter。就会进入安全模式也就是从第2步开始了。

chinafilm

我按这个https://bbs.hassbian.com/thread-9687-1-1.html方法可以了，可不不知什么原因配不了网。

yuan185

我的现在也这样了 怎么办呢