We don't need to open the case or even soldering anything. We can use three goldpin wires, remove from them plastic cover from connectors and connect to the console via the case holes. We can see three console holes ( from down RX(orange), TX (green), Ground(blue) - partially covered).
(First photo from youtube video : https://www.youtube.com/watch?v=mLTGbSnRaos )
OEM boot log:
F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [1000]
T0: 0000 0209 [010F]
Jump to BL
NOTICE: BL2: v2.6(release):
NOTICE: BL2: Built : 14:42:59, Jul 22 2022
NOTICE: WDT: disabled
NOTICE: CPU: MT7986 (2000MHz)
NOTICE: EMI: Using DDR4 settings
NOTICE: EMI: Detected DRAM size: 512MB
NOTICE: EMI: complex R/W mem test passed
NOTICE: SPI_NAND parses attributes from parameter page.
NOTICE: SPI_NAND Detected ID 0xef
NOTICE: Page size 2048, Block size 131072, size 268435456
NOTICE: BL2: Booting BL31
NOTICE: BL31: v2.6(release):
NOTICE: BL31: Built : 14:43:05, Jul 22 2022
U-Boot 2022.04-rc1 (Nov 14 2022 - 14:58:21 +0800)
TUF-AX6000 bootloader version: 1.0.0.2
CPU: MediaTek MT7986
Model: mt7986-rfb
DRAM: 512 MiB
Core: 43 devices, 15 uclasses, devicetree: embed
MMC: mmc@11230000: 0
Loading Environment from MTD...
SPINAND raw ID: 00 EF AA 22
spi-nand: spi_nand spi_nand@1: Winbond SPI NAND was found.
spi-nand: spi_nand spi_nand@1: 256 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
*** Warning - bad CRC, using default environment
In: serial@11002000
Out: serial@11002000
Err: serial@11002000
ASUS TUF-AX6000 gpio/led init
Net:
Warning: ethernet1@15100000 (eth0) using random MAC address - xxxx
eth0: ethernet1@15100000
Warning: ethernet0@15100000 (eth1) using random MAC address - xxxx
, eth1: ethernet0@15100000
ubi0: attaching mtd4
ubi0: scanning is finished
ubi0: attached mtd4 (name "UBI_DEV", size 252 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 2016, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 6, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 4/1, WL threshold: 4096, image sequence number: 867648407
ubi0: available PEBs: 0, total reserved PEBs: 2016, PEBs reserved for bad PEB handling: 40
UBI: vol_id reserved_pebs alignment data_pad vol_type usable_leb_size used_ebs used_bytes last_eb_bytes corrupted upd_marker name_len name
UBI: 0 1 1 0 dynamic 1f000 1 1f000 1f000 0 0 5 nvram
UBI: 1 8 1 0 dynamic 1f000 8 f8000 1f000 0 0 7 Factory
UBI: 2 8 1 0 dynamic 1f000 8 f8000 1f000 0 0 8 Factory2
UBI: 3 242 1 0 dynamic 1f000 242 45fe000 1f000 0 0 5 linux
UBI: 4 242 1 0 dynamic 1f000 242 45fe000 1f000 0 0 6 linux2
UBI: 5 31f 1 0 dynamic 1f000 31f 60c1000 1f000 0 0 5 jffs2
UBI: 7fffefff 2 1 0 dynamic 1f000 2 3e000 2 0 0 d layout volume
Read 1015808 bytes from volume Factory to 000000005f707ac0
EEPROM set 0: OK (version 59)
Read 1015808 bytes from volume Factory2 to 000000005f707ac0
EEPROM set 1: OK (version 59)
Read 1015808 bytes from volume Factory to 000000005fb425f0
Select EEPROM set 0 at offset 0x0.
Please choose the operation:
1: Load System code to SDRAM via TFTP.
2: Load System code then write to Flash via TFTP.
3: Boot System code via Flash (default).
4: Entr boot command line interface.
7: Load Boot Loader code then write to Flash via Serial.
9: Load Boot Loader code then write to Flash via TFTP.
0
3: Boot System code via Flash (default).
TUF-AX6000 bootloader version: 1.0.0.2
MAC Address: xxxx
HwID A
Read 40 bytes from volume linux to 0000000046000000
FIT/FDT format image found at 0x46000000,size 0x231ea04
Read 36825644 bytes from volume linux to 0000000046000000
## Loading kernel from FIT Image at 46000000 ...
Using 'config-1' configuration
Trying 'kernel-1' kernel subimage
Description: ARM64 OpenWrt Linux-3.0
Type: Kernel Image
Compression: lzma compressed
Data Start: 0x460000e4
Data Size: 3263424 Bytes = 3.1 MiB
Architecture: AArch64
OS: Linux
Load Address: 0x48080000
Entry Point: 0x48080000
Hash algo: crc32
Hash value: 5c914100
Hash algo: sha1
Hash value: 685bae8843df222784f89ae284b9490f9044c002
Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading ramdisk from FIT Image at 46000000 ...
Using 'config-1' configuration
Trying 'rootfs-1' ramdisk subimage
Description: Root File System
Type: RAMDisk Image
Compression: Unknown Compression
Data Start: 0x4632241c
Data Size: 33538289 Bytes = 32 MiB
Architecture: Unknown Architecture
OS: Unknown OS
Load Address: 0x00000000
Entry Point: 0x00000000
Hash algo: crc32
Hash value: b7adb441
Hash algo: sha1
Hash value: b19f4353901ab197da38d467d1a939c260799518
Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 46000000 ...
Using 'config-1' configuration
Trying 'fdt-1' fdt subimage
Description: ARM64 OpenWrt mt7986a-tuf-ax6000 device tree blob
Type: Flat Device Tree
Compression: uncompressed
Data Start: 0x4631cde8
Data Size: 21823 Bytes = 21.3 KiB
Architecture: AArch64
Hash algo: crc32
Hash value: 95b68a8b
Hash algo: sha1
Hash value: ef994b7bd8ba2c97efbeea383ad97423df83facb
Verifying Hash Integrity ... crc32+ sha1+ OK
Booting using the fdt blob at 0x4631cde8
Read 40 bytes from volume linux2 to 000000005f7ffb90
Uncompressing Kernel Image
Loading Device Tree to 000000005f7f3000, end 000000005f7fb53e ... OK
volume linux seq: 4
Starting kernel ...
Booting Linux on physical CPU 0x0000000000 [0x410fd034]
Linux version 5.4.182 (root@asus) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r16530-c6256a6533)) #1 SMP Wed Dec 28 13:11:16 CST 2022
Machine model: TUF-AX6000
earlycon: uart8250 at MMIO32 0x0000000011002000 (options '')
printk: bootconsole [uart8250] enabled
On node 0 totalpages: 130058
DMA32 zone: 2048 pages used for memmap
DMA32 zone: 0 pages reserved
DMA32 zone: 130058 pages, LIFO batch:31
psci: probing for conduit method from DT.
psci: PSCIv1.1 detected in firmware.
psci: Using standard PSCI v0.2 function IDs
psci: MIGRATE_INFO_TYPE not supported.
psci: SMC Calling Convention v1.0
percpu: Embedded 20 pages/cpu s43032 r8192 d30696 u81920
pcpu-alloc: s43032 r8192 d30696 u81920 alloc=20*4096
pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3
Detected VIPT I-cache on CPU0
CPU features: detected: GIC system register CPU interface
CPU features: kernel page table isolation disabled by kernel configuration
Built 1 zonelists, mobility grouping on. Total pages: 128010
Kernel command line: root_rfs=0x32241c rootfstype=squashfs ubi.mtd=UBI_DEV console=ttyS0,115200n1 loglevel=8 earlycon=uart8250,mmio32,0x11002000 root=/dev/mtdblock6
Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
mem auto-init: stack:off, heap alloc:off, heap free:off
Memory: 492080K/520232K available (6526K kernel code, 518K rwdata, 1664K rodata, 448K init, 288K bss, 28152K reserved, 0K cma-reserved)
SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
Invalid signature of oopsbuf: 40-6F-60-41-00-74-24-00 (len 0)
rcu: Hierarchical RCU implementation.
rcu: CONFIG_RCU_FANOUT set to non-default value of 32.
rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
GICv3: GIC: Using split EOI/Deactivate mode
GICv3: 640 SPIs implemented
GICv3: 0 Extended SPIs implemented
GICv3: Distributor has no Range Selector support
GICv3: 16 PPIs implemented
GICv3: no VLPI support, no direct LPI support
GICv3: CPU0: found redistributor 0 region 0:0x000000000c080000
random: get_random_bytes called from start_kernel+0x2d4/0x418 with crng_init=0
arch_timer: cp15 timer(s) running at 13.00MHz (phys).
clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2ff89eacb, max_idle_ns: 440795202429 ns
sched_clock: 56 bits at 13MHz, resolution 76ns, wraps every 4398046511101ns
Calibrating delay loop (skipped), value calculated using timer frequency.. 26.00 BogoMIPS (lpj=52000)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
ASID allocator initialised with 65536 entries
rcu: Hierarchical SRCU implementation.
smp: Bringing up secondary CPUs ...
Detected VIPT I-cache on CPU1
GICv3: CPU1: found redistributor 1 region 0:0x000000000c0a0000
CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
Detected VIPT I-cache on CPU2
GICv3: CPU2: found redistributor 2 region 0:0x000000000c0c0000
CPU2: Booted secondary processor 0x0000000002 [0x410fd034]
Detected VIPT I-cache on CPU3
GICv3: CPU3: found redistributor 3 region 0:0x000000000c0e0000
CPU3: Booted secondary processor 0x0000000003 [0x410fd034]
smp: Brought up 1 node, 4 CPUs
SMP: Total of 4 processors activated.
CPU features: detected: 32-bit EL0 Support
CPU features: detected: CRC32 instructions
CPU: All CPU(s) started at EL2
alternatives: patching kernel code
devtmpfs: initialized
clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
pinctrl core: initialized pinctrl subsystem
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic allocations
cryptd: max_cpu_qlen set to 1000
SCSI subsystem initialized
libata version 3.00 loaded.
rbus 18000000.wbsys: PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [mem 0x18000000-0x18ffffff]
pci_bus 0000:00: root bus resource [bus 00-ff]
pci_bus 0000:00: scanning bus
pci 0000:00:00.0: [14c3:7986] type 00 class 0x000280
pci 0000:00:00.0: reg 0x10: [mem 0x18000000-0x1800000f 64bit]
pci 0000:00:00.0: reg 0x18: [mem 0x00000000-0x0000000f]
pci 0000:00:00.0: reg 0x1c: [mem 0x00000000-0x0000000f]
pci 0000:00:00.0: reg 0x20: [mem 0x00000000-0x0000000f]
pci 0000:00:00.0: reg 0x24: [mem 0x00000000-0x0000000f]
pci_bus 0000:00: fixups for bus
pci_bus 0000:00: bus scan returning with max=00
clocksource: Switched to clocksource arch_sys_counter
thermal_sys: Registered thermal governor 'fair_share'
thermal_sys: Registered thermal governor 'bang_bang'
thermal_sys: Registered thermal governor 'step_wise'
thermal_sys: Registered thermal governor 'user_space'
thermal_sys: Registered thermal governor 'power_allocator'
NET: Registered protocol family 2
IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
TCP established hash table entries: 4096 (order: 3, 32768 bytes, linear)
TCP bind hash table entries: 4096 (order: 4, 65536 bytes, linear)
TCP: Hash tables configured (established 4096 bind 4096)
UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
NET: Registered protocol family 1
PCI: CLS 0 bytes, default 64
workingset: timestamp_bits=62 max_order=17 bucket_order=0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
mtk-pcie 11280000.pcie: host bridge /pcie@11280000 ranges:
mtk-pcie 11280000.pcie: Parsing ranges property...
mtk-pcie 11280000.pcie: MEM 0x20000000..0x2fffffff -> 0x20000000
phy phy-pcie-phy@11c00000.0: try to get sw efuse
phy phy-pcie-phy@11c00000.0: try to get sw efuse+
phy phy-pcie-phy@11c00000.0: u3 auto load valid efuse: ENABLE with value: 1
phy phy-pcie-phy@11c00000.0: u3 efuse - intr 2b, rx_imp 10, tx_imp f
phy phy-pcie-phy@11c00000.0: pcie auto load valid efuse: ENABLE with value: 1
phy phy-pcie-phy@11c00000.0: u3 lane1 efuse - intr 2b, rx_imp 10, tx_imp f
mtk-pcie 11280000.pcie: PCIe link down, ltssm reg val: 0x0
mtk-pcie: probe of 11280000.pcie failed with error -110
Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
printk: console [ttyS0] disabled
11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 12, base_baud = 2500000) is a ST16650V2
printk: console [ttyS0] enabled
printk: console [ttyS0] enabled
printk: bootconsole [uart8250] disabled
printk: bootconsole [uart8250] disabled
11003000.serial: ttyS1 at MMIO 0x11003000 (irq = 13, base_baud = 1625000) is a ST16650V2
11004000.serial: ttyS2 at MMIO 0x11004000 (irq = 14, base_baud = 1625000) is a ST16650V2
mtk_rng 1020f000.trng: registered RNG driver
random: fast init done
cacheinfo: Unable to detect cache hierarchy for CPU 0
crng init done
loop: module loaded
mt7986-pinctrl 1001f000.pinctrl: pin_config_set op failed for pin 36
mtk-spi 1100a000.spi: Error applying setting, reverse things back
spi-nor spi0.0: unrecognized JEDEC id bytes: ff ef aa 22 00 00
spi-nor: probe of spi0.0 failed with error -2
spi-nand spi0.1: Winbond SPI NAND was found.
spi-nand spi0.1: 256 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
2 fixed-partitions partitions found on MTD device spi0.1
Creating 2 MTD partitions on "spi0.1":
0x000000000000-0x000000400000 : "Bootloader"
0x000000400000-0x000010000000 : "UBI_DEV"
Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011)
IMQ driver loaded successfully. (numdevs = 8, numqueues = 1, imq_dev_accurate_stats = 1)
Hooking IMQ after NAT on PREROUTING.
Hooking IMQ before NAT on POSTROUTING.
[mtk_hw_init] reset_lock:0, force:0
[mtk_hw_init] execute fe cold reset
mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc011800000, irq 124
mtk_soc_eth 15100000.ethernet eth1: mediatek frame engine at 0xffffffc011800000, irq 124
(unnamed net_device) (dummy): netif_napi_add() called with weight 256
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
i2c /dev entries driver
mtk-wdt 1001c000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
crypto-safexcel 10320000.crypto: EIP97:230(0,1,4,4)-HIA:270(0,5,5),PE:150/433,alg:7fcdfc00
u32 classifier
Performance counters on
input device check on
xt_time: kernel timezone is -0000
gre: GRE over IPv4 demultiplexor driver
IPv4 over IPsec tunneling driver
NET: Registered protocol family 10
Segment Routing with IPv6
NET: Registered protocol family 17
NET: Registered protocol family 15
Bridge firewalling registered
l2tp_core: L2TP core driver, V2.0
l2tp_ppp: PPPoL2TP kernel driver, V2.0
l2tp_netlink: L2TP netlink interface
8021q: 802.1Q VLAN Support v1.8
mt7530 mdio-bus:1f lan4 (uninitialized): PHY [dsa-0.0:01] driver [Generic PHY]
mt7530 mdio-bus:1f lan3 (uninitialized): PHY [dsa-0.0:02] driver [Generic PHY]
mt7530 mdio-bus:1f lan2 (uninitialized): PHY [dsa-0.0:03] driver [Generic PHY]
mt7530 mdio-bus:1f lan1 (uninitialized): PHY [dsa-0.0:04] driver [Generic PHY]
mt7530 mdio-bus:1f: configuring for fixed/2500base-x link mode
DSA: tree 0 setup
mt7530 mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
ubi0: attaching mtd1
ubi0: scanning is finished
ubi0: attached mtd1 (name "UBI_DEV", size 252 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 2016, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 6, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 4/1, WL threshold: 4096, image sequence number: 867648407
ubi0: available PEBs: 0, total reserved PEBs: 2016, PEBs reserved for bad PEB handling: 40
ubi0: background thread "ubi_bgt0d" started, PID 889
gluebi_create: Hook read/write method of Factory.
gluebi_create: Hook read/write method of Factory2.
[Factory-0]: OK (ver: 59)
[Factory2-0]: OK (ver: 59)
Select [Factory-0]
volume linux rfs_offset 32241c mtd->size 45fe000
Creating 1 MTD partitions on "linux":
0x00000032241c-0x0000045fe000 : "rootfs"
mtd: device 6 (rootfs) set to be root filesystem
volume linux2 rfs_offset 32241c mtd->size 45fe000
Creating 1 MTD partitions on "linux2":
0x00000032241c-0x0000045fe000 : "rootfs2"
gluebi_create: skip jffs2 volume
VFS: Mounted root (squashfs filesystem) readonly on device 31:6.
devtmpfs: mounted
Freeing unused kernel memory: 448K
Run /sbin/init as init process
init_main start.
/dev/nvram: No such file or directory
/dev/nvram: No such file or directory
offset 0x4000 elapse 16ms
_nvram_free: 936(modprobe) nvram_idx(1 / 2)
found private data block and skip it
1: set_action 0
Hit ENTER for console...
firmware version: 3.0.0.4.388_31374-g617d05c, dev:(R1IG67600326SK9/C8:7F:54:B6:37:4A)
mtd productid: 1�0
bootloader version: 1�0-01-00-00-02
firmware version: 0.0.0.116
odmpid: init (1): drop_caches: 1
TUF-AX6000
current FW productid: TUF-AX6000
current FW firmver: 3.0.0.4
R1IG67600326SK9
clean_mode(1) clean_time(2) threshold(0)
free_caches: Start syncing...
free_caches: Start cleaning...
free_caches: waiting 2 second...
free_caches: Finish.
[1 inbled: GPIO#2: netdev ra0 nr_users 1.
it:init_nvram +1bled: GPIO#2: netdev rax0 nr_users 2.
0] init_nvram for model(154)
set_basic_ifname_vars: WAN eth1 LAN lan1 lan2 lan3 lan4 lan5 [lan1 lan2 lan3 lan4 lan5 eth1 ra0 rax0] WIRED [lan1 lan2 lan3 lan4 lan5] ETH_IFNAMES [] 2G ra0 5G rax0 60G N/A USB usb AP_LAN N/A DW_WAN (null) DW_LAN force_dwlan 0, sw_mode 3
wan_ifnames:
init_amas_subunit: Set default value.
init_amas_subunit(9777): update wl1_vifnames [wl1.1 wl1.2 wl1.3 wl1.4]
init_amas_subunit(9796): update wl0_vifnames [wl0.1 wl0.2 wl0.3 wl0.4]
1: check_action 0: 1(init)
1: set_action 7
nvram_commit(): pid 1 comm [init]
_nvram_free: 1(init) nvram_idx(0 / 2)
found private data block and skip it
1: set_action 0
config_switch(0x0216): link down all ports
config_mt7986_mt7531_LANWANPartition: LAN/P.WAN/S.WAN portmask 0000003f/00000000/00000000 Upstream eth1 (unit 0)
config_switch(0x0546): link up wan port(s)
1+0 records in
1+0 records out
conninfra@(mtk_conninfra_drv_init:644) Before platform_driver_register
Get Index(0-TOP_MISC_BASE) phy_addr(0x11d10000) vir_addr=(0xffffffc010a75000) size=(0x1000)
Get Index(1-TOPRGU_BASE) phy_addr(0x1001c000) vir_addr=(0xffffffc010a7d000) size=(0x1000)
Get Index(2-GPIO_BASE) phy_addr(0x1001f000) vir_addr=(0xffffffc010a85000) size=(0x1000)
Get Index(3-IOCFG_TR_BASE) phy_addr(0x11f00000) vir_addr=(0xffffffc010a8d000) size=(0x1000)
Get Index(4-IOCFG_TL_BASE) phy_addr(0x11f10000) vir_addr=(0xffffffc010a95000) size=(0x1000)
Get Index(5-INFRACFG_AO_BASE) phy_addr(0x10003000) vir_addr=(0xffffffc010a9d000) size=(0x1000)
Get Index(6-CONN_INFRA_CFG_BASE) phy_addr(0x18001000) vir_addr=(0xffffffc010aa5000) size=(0x1000)
Get Index(7-CONN_INFRA_SYSRAM_BASE) phy_addr(0x18050000) vir_addr=(0xffffffc010aad000) size=(0x1000)
Get Index(8-CONN_INFRA_CLKGEN_ON_TOP_BASE) phy_addr(0x18009000) vir_addr=(0xffffffc010ab5000) size=(0x1000)
Get Index(9-CONN_HOST_CSR_TOP_BASE) phy_addr(0x18060000) vir_addr=(0xffffffc010abd000) size=(0x1000)
Get Index(10-CONN_INFRA_BUS_CR_BASE) phy_addr(0x1800e000) vir_addr=(0xffffffc010ad1000) size=(0x1000)
Get Index(11-CONN_INFRA_RGU_BASE) phy_addr(0x18000000) vir_addr=(0xffffffc010ad3000) size=(0x1000)
Get Index(12-CONN_WT_SLP_CTL_REG_BASE) phy_addr(0x18005000) vir_addr=(0xffffffc010ad5000) size=(0x1000)
Get Index(13-INST2_CONN_WT_SLP_CTL_REG_BASE) phy_addr(0x18085000) vir_addr=(0xffffffc010add000) size=(0x1000)
Get Index(14-CONN_RF_SPI_MST_REG_BASE) phy_addr(0x18004000) vir_addr=(0xffffffc010ae5000) size=(0x1000)
Get Index(15-INST2_CONN_RF_SPI_MST_REG_BASE) phy_addr(0x18084000) vir_addr=(0xffffffc010ae7000) size=(0x1000)
Get Index(16-CONN_SEMAPHORE_BASE) phy_addr(0x18070000) vir_addr=(0xffffffc010bc0000) size=(0x10000)
Get Index(17-CONN_AFE_CTL_BASE) phy_addr(0x18003000) vir_addr=(0xffffffc010ae9000) size=(0x1000)
Get Index(18-CONN_AFE_CTL_2ND_BASE) phy_addr(0x18083000) vir_addr=(0xffffffc010aeb000) size=(0x1000)
Get Index(19-WF_TOP_SLPPROT_ON_BASE) phy_addr(0x184c0000) vir_addr=(0xffffffc010be0000) size=(0x10000)
Get Index(20-WF_TOP_CFG_BASE) phy_addr(0x184b0000) vir_addr=(0xffffffc010aed000) size=(0x1000)
Get Index(21-WF_MCU_CONFIG_LS_BASE) phy_addr(0x184f0000) vir_addr=(0xffffffc010af5000) size=(0x1000)
Get Index(22-WF_MCU_BUS_CR_BASE) phy_addr(0x18400000) vir_addr=(0xffffffc010afd000) size=(0x1000)
Get Index(23-WF_MCUSYS_INFRA_BUS_FULL_U_DEBUG_CTRL_AO_BASE) phy_addr(0x18500000) vir_addr=(0xffffffc010b46000) size=(0x1000)
Get Index(24-WF_TOP_CFG_ON_BASE) phy_addr(0x184c0000) vir_addr=(0xffffffc010e30000) size=(0x10000)
eeFlashId: 0x7986, EEPROM_content_valid = 1
conninfra@(consys_plt_hw_init:221) tx_stream = 0x4, rx_stream = 0x4, band0_pa_type = 0x3, band1_pa_type = 0x3
conninfra@(consys_plt_hw_init:230) adie_cfg_type = 2, one_adie_dbdc = 0
[emi_mng_init] gConEmiPhyBase = [0x4fc00000] size = [0x100000] fw size = [0x100000] ops=[000000008e0894a8]
conninfra@(mtk_conninfra_drv_init:650) After platform_driver_register
ConnInfra Dev: init (0)
conninfra@(_consys_polling_chipid_int:459) Read CONNSYS HW IP version successfully! (0x02070000)
conninfra@(consys_bus_clock_ctrl:485) drv=[4] conninfra_bus_clock_wpll=[0]->[16] enable
conninfra@(connsys_d_die_cfg:530) D-die efuse: 0x00000000
conninfra@(_connsys_a_die_chip_id_confirm:1911) adie_idx[0]: A-die CHIP ID = 0x7976, HW Version = 0x8a20
conninfra@(_connsys_a_die_chip_id_confirm:1911) adie_idx[1]: A-die CHIP ID = 0x7976, HW Version = 0x8a20
conninfra@(consys_spi_write_nolock:670) addr = 0x0a00, val = 0xffffffff
conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x00000000
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x43a60000
conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008700bc, 0x00000000]
conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x23a6003a
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x63a7003a
conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008700bc, 0x00000000]
conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x23a7003a
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x63ac003a
conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008700bc, 0x00000000]
conninfra@(consys_spi_write_nolock:670) addr = 0x0038, val = 0x4a563b00
conninfra@(consys_spi_write_nolock:670) addr = 0x065c, val = 0x1959f80f
conninfra@(consys_spi_write_nolock:670) addr = 0x0664, val = 0x34d00fe0
conninfra@(consys_spi_write_nolock:670) addr = 0x0a00, val = 0xffffffff
conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x00000000
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x43a60000
conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008800b6, 0x00000000]
conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x23a6003a
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x63a7003a
conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008800b6, 0x00000000]
conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x23a7003a
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x63ac003a
conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008800b6, 0x00000000]
conninfra@(consys_spi_write_nolock:670) addr = 0x0038, val = 0x4a563b00
conninfra@(consys_spi_write_nolock:670) addr = 0x065c, val = 0x1959f80f
conninfra@(consys_spi_write_nolock:670) addr = 0x0664, val = 0x34d00fe0
conninfra@(consys_spi_write_nolock:670) addr = 0x0070, val = 0x88888005
conninfra@(consys_spi_write_nolock:670) addr = 0x0070, val = 0x00000005
conninfra@(consys_spi_write_nolock:670) addr = 0x0070, val = 0x88888005
conninfra@(consys_spi_write_nolock:670) addr = 0x0070, val = 0x00000005
conninfra@(_consys_polling_chipid_int:459) Read CONNSYS HW IP version successfully! (0x02070000)
conninfra@(_consys_hw_conninfra_wakeup:470) conninfra_wakeup refcnt=[0]->[1] wakeup!!
conninfra@(_consys_hw_conninfra_sleep:490) conninfra_sleep refcnt=[1]->[0] sleep!!
conninfra@(opfunc_power_on_internal:241) [Conninfra Pwr On] BT=[0] FM=[0] GPS=[0] WF=[0] CONNINFRA=[1]
mediatek_soc_hnat 15100000.hnat: wan = eth1
mediatek_soc_hnat 15100000.hnat: lan = lan
mediatek_soc_hnat 15100000.hnat: ppd = eth0
mediatek_soc_hnat 15100000.hnat: gmac num = 2
mediatek_soc_hnat 15100000.hnat: ppe num = 1
mediatek_soc_hnat 15100000.hnat: PPE0 entry number = 8192
mediatek_soc_hnat 15100000.hnat: PPE0 hwnat start
hnat roaming work enable
mt_wifi: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
conninfra@(conninfra_pwr_on:120) [conninfra_pwr_on] drv=[3]
conninfra@(_consys_polling_chipid_int:459) Read CONNSYS HW IP version successfully! (0x02070000)
Adie Type: 0x7976
SKU Type: 6000
conninfra@(opfunc_power_on_internal:241) [Conninfra Pwr On] BT=[0] FM=[0] GPS=[0] WF=[1] CONNINFRA=[1]
WiFi@C12L1,get_dbg_setting_by_profile() 4249: debug level setting=INDEX0_debug_level not found!!
WiFi@C12L1,get_dbg_setting_by_profile() 4272: debug option setting=INDEX0_debug_option not found!!
mt_rbus 0000:00:00.0: runtime IRQ mapping not provided by arch
mt7986_init()-->
sku:0xf, ADIE=MT7976
<--mt7986_init()
RtmpRaDevCtrlInit(): MCS_LUT not used becasue MacTb size(544) > 128!
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX1
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX2
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX3
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX4
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX5
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX6
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX7
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX8
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX9
WiFi@C12L2,match_index_by_chipname() 512: Not find slot id, back to old rule.
msta_ifname not found
hotplug net INTERFACE=ra0 ACTION=add SEQNUM=737
warp_module_init(): module init and register callback for warp
create warp_ctrl ok!!!
wed_get_slot_map(): assign slot_id:0 for entry: 0!
wed_get_slot_map(): assign slot_id:1 for entry: 1!
mtk_warp_proxy: module uses symbols from proprietary module mt_wifi, inheriting taint.
1: check_action 0: 1(init)
*** ubifs: jffs2 0, 5, 101453824
console fd is 0
1: check_action 0: 1(init)
1: set_action 7
_nvram_free: 1(init) nvram_idx(1 / 2)
1: set_action 0
[adjust_vpnc_config, 184]
Insert USB modules early.
xhci-mtk 11200000.xhci: 11200000.xhci supply vbus not found, using dummy regulator
xhci-mtk 11200000.xhci: 11200000.xhci supply vusb33 not found, using dummy regulator
phy phy-usb-phy@11e10000.1: try to get sw efuse
phy phy-usb-phy@11e10000.1: try to get sw efuse+
phy phy-usb-phy@11e10000.2: try to get sw efuse
phy phy-usb-phy@11e10000.2: try to get sw efuse+
phy phy-usb-phy@11e10000.3: try to get sw efuse
phy phy-usb-phy@11e10000.3: try to get sw efuse+
usb hotplug INTERFACE=9/0/0 ACTION=add USBPORT=(null) HOST=(null) DEVICE=(null)
1074: check_action 0: 1(init)
checking for user scripts: '.usbhotplug'
usb hotplug INTERFACE=(null) ACTION=add USBPORT=(null) HOST=(null) DEVICE=(null)
usb hotplug INTERFACE=9/0/0 ACTION=add USBPORT=(null) HOST=(null) DEVICE=(null)
1083: check_action 0: 1(init)
checking for user scripts: '.usbhotplug'
usb hotplug INTERFACE=(null) ACTION=bind USBPORT=(null) HOST=(null) DEVICE=(null)
usb hotplug INTERFACE=9/0/0 ACTION=bind USBPORT=(null) HOST=(null) DEVICE=(null)
1078: check_action 0: 1(init)
checking for user scripts: '.usbhotplug'
usb hotplug INTERFACE=9/0/0 ACTION=bind USBPORT=(null) HOST=(null) DEVICE=(null)
1087: check_action 0: 1(init)
checking for user scripts: '.usbhotplug'
usb hotplug INTERFACE=(null) ACTION=bind USBPORT=(null) HOST=(null) DEVICE=(null)
usb hotplug INTERFACE=(null) ACTION=add USBPORT=(null) HOST=(null) DEVICE=(null)
update_lan_state(lan_, 0, 0)
1+0 records in
1+0 records out
hotplug net INTERFACE=br0 ACTION=add SEQNUM=785
hotplug net INTERFACE=br0 ACTION=add SEQNUM=785
_ifconfig: name=lan1 flags=1243 IFUP addr= netmask=
_ifconfig: name=lan2 flags=1243 IFUP addr= netmask=
_ifconfig: name=lan3 flags=1243 IFUP addr= netmask=
_ifconfig: name=lan4 flags=1243 IFUP addr= netmask=
_ifconfig: name=lan5 flags=1243 IFUP addr= netmask=
_ifconfig: name=eth1 flags=1243 IFUP addr= netmask=
gen ralink config
gen ralink iNIC config
_ifconfig: name=WiFi@C01L2,RTMP_COM_IoctlHandle() 1511: -> CMD_RTPRIV_IOCTL_VIRTUAL_INF_INIT
ra0 flags=1243 Imsta_ifname not found
FUP addr= netmask=
warp_dev0: probe of 15010000.wed2 failed with error -1
WiFi@C02L1,HwCtrlInit() 551: ser_init() return NDIS_STATUS_FAILURE
WiFi@C12L1,RTMPWirelessModeCfg() 599: Init: BSS0 PhyMode=78
WiFi@C12L1,RTMPWirelessModeCfg() 599: Init: BSS1 PhyMode=177
WiFi@C03L1,AndesSendCmdMsg() 754: Could not send in band command due to diablefRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
WiFi@C03L2,AndesSendCmdMsg() 765: Command type = ed, Extension command type = 48
WiFi@C03L1,AndesSendCmdMsg() 754: Could not send in band command due to diablefRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
WiFi@C03L2,AndesSendCmdMsg() 765: Command type = ed, Extension command type = 48
sku:0xf, ADIE=MT7976
using E1 ROM patch
using E1 RAM
current sync CR = 0x1
Built date: 20221125171548a
Platform: ALPS
HW/SW version: 0x8a108a10
Patch version: 0xffffffff
current sync CR = 0x1
Chip ID: 0x0f
Eco version: 0x00
Region number: 0x0b
Format version: 0x02
Format flag: 0x01
Ram version: ____000000
Built date: 20221125171609
Common crc: 0xfabec89b
Release info: header tag = 0, total length = 108
tag 1, padding length = 3, tag length = 101
payload: t-neptune-main-2111-7986-imp_v7640_wk2219-MT7986_E1_ASIC_ROM_RAM_REBB_IMP_V7640_WK2219-20221125171501
Chip ID: 0x00
Eco version: 0x00
Region number: 0x03
Format version: 0x02
Format flag: 0x01
Ram version: DEV_000000
Built date: 20221125171806
Common crc: 0xefcb8833
PR: