Asus TUF Gaming AX6000 support

I requested the GPL sources over the Dutch Asus support. They told me that they would be released in August. They kept promise.
Obviously, it would be better if the sources would come with the image, but this at least provides a solid base for OpenWRT AX6000 support.

2 Likes

Yes, this is about the same router. Asus has currently (at least) 2 AX6000 options: the more expensive ROG Capture GT-AX6000 based upon Qualcomm and the TUF Gaming AX6000 based upon Mediatek. The former is (and will only) be supported by Asus Merlin. OpenWRT might support both in the end.
(Note: I'm using the official Asus EU commercial names - they might differ in other regions)

Hell will freeze over before BCM will provide FOSS support.

3 Likes

According to their source code https://dlsvr04.asus.com.cn/pub/ASUS/wireless/TX-AX6000/GPL_TX_AX6000_300438831927..zip?model=TUF-AX6000
It is possible that it has the same hardware with TUF-AX6000, since there isn't a dedicated build config for it.

Hi, I have created first build for this router based on the more mature code

I can share fully tested and stable images if you like.

I also created bug for openvSwitch

OpenWRT boot log:


NOTICE:  BL2: v2.6(release):
NOTICE:  BL2: Built : 14:42:59, Jul 22 2022
NOTICE:  WDT: disabled
NOTICE:  CPU: MT7986 (2000MHz)
NOTICE:  EMI: Using DDR4 settings
NOTICE:  EMI: Detected DRAM size: 512MB
NOTICE:  EMI: complex R/W mem test passed
NOTICE:  SPI_NAND parses attributes from parameter page.
NOTICE:  SPI_NAND Detected ID 0xef
NOTICE:  Page size 2048, Block size 131072, size 268435456
NOTICE:  BL2: Booting BL31
NOTICE:  BL31: v2.6(release):
NOTICE:  BL31: Built : 14:43:05, Jul 22 2022


U-Boot 2022.04-rc1 (Nov 14 2022 - 14:58:21 +0800)
TUF-AX6000 bootloader version: 1.0.0.2

CPU:   MediaTek MT7986
Model: mt7986-rfb
DRAM:  512 MiB
Core:  43 devices, 15 uclasses, devicetree: embed
MMC:   mmc@11230000: 0
Loading Environment from MTD... 
SPINAND raw ID: 00 EF AA 22 
spi-nand: spi_nand spi_nand@1: Winbond SPI NAND was found.
spi-nand: spi_nand spi_nand@1: 256 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
OK
In:    serial@11002000
Out:   serial@11002000
Err:   serial@11002000
ASUS TUF-AX6000 gpio/led init
Net:   eth0: ethernet1@15100000, eth1: ethernet0@15100000
ubi0: attaching mtd4
ubi0: scanning is finished
ubi0: attached mtd4 (name "UBI_DEV", size 252 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 2016, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 6, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 4/1, WL threshold: 4096, image sequence number: 867648407
ubi0: available PEBs: 0, total reserved PEBs: 2016, PEBs reserved for bad PEB handling: 40
UBI:   vol_id  reserved_pebs  alignment  data_pad  vol_type  usable_leb_size  used_ebs  used_bytes  last_eb_bytes  corrupted  upd_marker  name_len  name
UBI:        0              1          1         0   dynamic            1f000         1       1f000         1f000          0           0         5  nvram
UBI:        1              8          1         0   dynamic            1f000         8       f8000         1f000          0           0         7  Factory
UBI:        2              8          1         0   dynamic            1f000         8       f8000         1f000          0           0         8  Factory2
UBI:        3            242          1         0   dynamic            1f000       242     45fe000         1f000          0           0         5  linux
UBI:        4            242          1         0   dynamic            1f000       242     45fe000         1f000          0           0         6  linux2
UBI:        5            31f          1         0   dynamic            1f000       31f     60c1000         1f000          0           0         5  jffs2
UBI: 7fffefff              2          1         0   dynamic            1f000         2       3e000             2          0           0         d  layout volume
Read 1015808 bytes from volume Factory to 000000005f707ac0
EEPROM set 0: OK (version 59)
Read 1015808 bytes from volume Factory2 to 000000005f707ac0
EEPROM set 1: OK (version 59)
Read 1015808 bytes from volume Factory to 000000005fb53c50
Select EEPROM set 0 at offset 0x0.

Please choose the operation: 
   1: Load System code to SDRAM via TFTP.
   2: Load System code then write to Flash via TFTP.
   3: Boot System code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.

You choosed 1


   1: Load System code to SDRAM via TFTP.
 Please Input new ones /or Ctrl-C to discard
        Input device IP (192.168.1.1) ==:
        Input server IP (192.168.1.70) ==:
        Input Linux Kernel filename (TUF-AX6000.trx) ==:
switch prereq:0
Using ethernet0@15100000 device
TFTP from server 192.168.1.70; our IP address is 192.168.1.1
Filename 'TUF-AX6000.trx'.
Load address: 0x46000000
Loading: Got ARP REPLY, set eth addr (a4:4c:c8:6f:cd:d1)
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #####################################
         1.2 MiB/s
done
Bytes transferred = 7208960 (6e0000 hex)
Automatic boot of image at addr 0x46000000 ...
## Loading kernel from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-5.15.130
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x460000ec
     Data Size:    3990337 Bytes = 3.8 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x48000000
     Entry Point:  0x48000000
     Hash algo:    crc32
     Hash value:   a3cd5dc6
     Hash algo:    sha1
     Hash value:   28382ea35f7c6c424cf6941b2096e9e5d224ba6c
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading ramdisk from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'initrd-1' ramdisk subimage
     Description:  ARM64 OpenWrt asus_tuf-ax6000 initrd
     Type:         RAMDisk Image
     Compression:  Unknown Compression
     Data Start:   0x463ce56c
     Data Size:    3147192 Bytes = 3 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: unavailable
     Entry Point:  unavailable
     Hash algo:    crc32
     Hash value:   eff2002c
     Hash algo:    sha1
     Hash value:   98edf8cdc6dcaaf82c2c4f55e0a96b0faca2ba8b
   Verifying Hash Integrity ... crc32+ sha1+ OK
WARNING: 'compression' nodes for ramdisks are deprecated, please fix your .its file!
## Loading fdt from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt asus_tuf-ax6000 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x466cec30
     Data Size:    21012 Bytes = 20.5 KiB
     Architecture: AArch64
     Load Address: 0x47000000
     Hash algo:    crc32
     Hash value:   6e5fa899
     Hash algo:    sha1
     Hash value:   f89702ddbf44e4e2c2d9cf04bdb9945030c00ce3
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Loading fdt from 0x466cec30 to 0x47000000
   Booting using the fdt blob at 0x47000000
   Uncompressing Kernel Image
   Loading Ramdisk to 5f4fb000, end 5f7fb5b8 ... OK
   Loading Device Tree to 000000005f4f2000, end 000000005f4fa213 ... OK
volume linux seq: 4

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 5.15.130 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 12.3.0 r23884-e3fd447dcf) 12.3.0, GNU ld (GNU Binutils) 2.40.0) #0 SMP Wed Sep 6 13:58:25 2023
[    0.000000] Machine model: ASUS TUF-AX6000
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000042ffffff]
[    0.000000]   node   0: [mem 0x0000000043000000-0x000000004302ffff]
[    0.000000]   node   0: [mem 0x0000000043030000-0x000000004fbfffff]
[    0.000000]   node   0: [mem 0x000000004fc00000-0x000000004ffbffff]
[    0.000000]   node   0: [mem 0x000000004ffc0000-0x000000005fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.2
[    0.000000] percpu: Embedded 17 pages/cpu s30040 r8192 d31400 u69632
[    0.000000] pcpu-alloc: s30040 r8192 d31400 u69632 alloc=17*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: detected: GIC system register CPU interface
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 129024
[    0.000000] Kernel command line: ubi.mtd=UBI_DEV
[    0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 494112K/524288K available (8448K kernel code, 912K rwdata, 2288K rodata, 448K init, 303K bss, 30176K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] GICv3: GIC: Using split EOI/Deactivate mode
[    0.000000] GICv3: 640 SPIs implemented
[    0.000000] GICv3: 0 Extended SPIs implemented
[    0.000000] GICv3: Distributor has no Range Selector support
[    0.000000] Root IRQ handler: gic_handle_irq
[    0.000000] GICv3: 16 PPIs implemented
[    0.000000] GICv3: CPU0: found redistributor 0 region 0:0x000000000c080000
[    0.000000] arch_timer: cp15 timer(s) running at 13.00MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2ff89eacb, max_idle_ns: 440795202429 ns
[    0.000000] sched_clock: 56 bits at 13MHz, resolution 76ns, wraps every 4398046511101ns
[    0.000109] Calibrating delay loop (skipped), value calculated using timer frequency.. 26.00 BogoMIPS (lpj=130000)
[    0.000116] pid_max: default: 32768 minimum: 301
[    0.000318] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.000326] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.001353] rcu: Hierarchical SRCU implementation.
[    0.001621] smp: Bringing up secondary CPUs ...
[    0.001884] Detected VIPT I-cache on CPU1
[    0.001908] GICv3: CPU1: found redistributor 1 region 0:0x000000000c0a0000
[    0.001933] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[    0.002194] Detected VIPT I-cache on CPU2
[    0.002206] GICv3: CPU2: found redistributor 2 region 0:0x000000000c0c0000
[    0.002217] CPU2: Booted secondary processor 0x0000000002 [0x410fd034]
[    0.002462] Detected VIPT I-cache on CPU3
[    0.002473] GICv3: CPU3: found redistributor 3 region 0:0x000000000c0e0000
[    0.002482] CPU3: Booted secondary processor 0x0000000003 [0x410fd034]
[    0.002508] smp: Brought up 1 node, 4 CPUs
[    0.002521] SMP: Total of 4 processors activated.
[    0.002525] CPU features: detected: 32-bit EL0 Support
[    0.002528] CPU features: detected: CRC32 instructions
[    0.002551] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.002606] CPU: All CPU(s) started at EL2
[    0.002615] alternatives: patching kernel code
[    0.005020] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.005041] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.005191] pinctrl core: initialized pinctrl subsystem
[    0.005826] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.006066] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[    0.006086] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.006105] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.006349] thermal_sys: Registered thermal governor 'fair_share'
[    0.006352] thermal_sys: Registered thermal governor 'bang_bang'
[    0.006355] thermal_sys: Registered thermal governor 'step_wise'
[    0.006358] thermal_sys: Registered thermal governor 'user_space'
[    0.006527] ASID allocator initialised with 65536 entries
[    0.006840] pstore: Registered ramoops as persistent store backend
[    0.006845] ramoops: using 0x10000@0x42ff0000, ecc: 0
[    0.014810] cryptd: max_cpu_qlen set to 1000
[    0.016567] SCSI subsystem initialized
[    0.016644] libata version 3.00 loaded.
[    0.017443] clocksource: Switched to clocksource arch_sys_counter
[    0.017980] NET: Registered PF_INET protocol family
[    0.018052] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.018409] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.018421] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.018427] TCP established hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.018449] TCP bind hash table entries: 4096 (order: 4, 65536 bytes, linear)
[    0.018493] TCP: Hash tables configured (established 4096 bind 4096)
[    0.018546] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.018558] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.018652] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.018677] PCI: CLS 0 bytes, default 64
[    0.018817] Unpacking initramfs...
[    0.039442] workingset: timestamp_bits=46 max_order=17 bucket_order=0
[    0.042129] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.042143] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.064731] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.068248] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.070123] printk: console [ttyS0] disabled
[    0.090278] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 121, base_baud = 2500000) is a ST16650V2
[    0.624451] Freeing initrd memory: 3072K
[    0.628190] printk: console [ttyS0] enabled
[    0.628860] mtk_rng 1020f000.rng: registered RNG driver
[    0.628920] hwrng: no data available
[    0.749678] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    0.757934] loop: module loaded
[    0.761083] Loading iSCSI transport class v2.0-870.
[    0.767797] spi-nand spi0.0: Winbond SPI NAND was found.
[    0.773105] spi-nand spi0.0: 256 MiB, block size: 128 KiB, page size: 2048, OOB size: 128
[    0.784395] 2 fixed-partitions partitions found on MTD device spi0.0
[    0.790765] Creating 2 MTD partitions on "spi0.0":
[    0.795540] 0x000000000000-0x000000400000 : "Bootloader"
[    0.805272] 0x000000400000-0x000010000000 : "UBI_DEV"
[    1.168619] mtk_soc_eth 15100000.ethernet: generated random MAC address da:c0:98:28:08:07
[    1.176845] mtk_soc_eth 15100000.ethernet: generated random MAC address 4e:31:93:77:62:77
[    1.296554] Maxlinear Ethernet GPY211C mdio-bus:05: Firmware Version: 0x886F (release)
[    1.313808] Maxlinear Ethernet GPY211C mdio-bus:06: Firmware Version: 0x886F (release)
[    1.323636] mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc00d780000, irq 129
[    1.333419] mtk_soc_eth 15100000.ethernet eth1: mediatek frame engine at 0xffffffc00d780000, irq 129
[    1.342895] i2c_dev: i2c /dev entries driver
[    1.348089] mtk-wdt 1001c000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[    1.356509] NET: Registered PF_INET6 protocol family
[    1.362097] Segment Routing with IPv6
[    1.365765] In-situ OAM (IOAM) with IPv6
[    1.369720] NET: Registered PF_PACKET protocol family
[    1.374781] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.387817] 8021q: 802.1Q VLAN Support v1.8
[    1.392782] pstore: Using crash dump compression: deflate
[    1.438470] mt7530-mdio mdio-bus:1f: no interrupt support
[    1.461201] mt7530-mdio mdio-bus:1f: configuring for fixed/2500base-x link mode
[    1.470333] mt7530-mdio mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    1.479272] MediaTek MT7531 PHY mt7530-0:01: Configure LED registers (num=14)
[    1.493795] mt7530-mdio mdio-bus:1f lan4 (uninitialized): PHY [mt7530-0:01] driver [MediaTek MT7531 PHY] (irq=POLL)
[    1.513809] MediaTek MT7531 PHY mt7530-0:02: Configure LED registers (num=14)
[    1.528344] mt7530-mdio mdio-bus:1f lan3 (uninitialized): PHY [mt7530-0:02] driver [MediaTek MT7531 PHY] (irq=POLL)
[    1.548071] MediaTek MT7531 PHY mt7530-0:03: Configure LED registers (num=14)
[    1.562600] mt7530-mdio mdio-bus:1f lan2 (uninitialized): PHY [mt7530-0:03] driver [MediaTek MT7531 PHY] (irq=POLL)
[    1.582326] MediaTek MT7531 PHY mt7530-0:04: Configure LED registers (num=14)
[    1.596859] mt7530-mdio mdio-bus:1f lan1 (uninitialized): PHY [mt7530-0:04] driver [MediaTek MT7531 PHY] (irq=POLL)
[    1.608069] mt7530-mdio mdio-bus:1f lan5 (uninitialized): PHY [mdio-bus:05] driver [Maxlinear Ethernet GPY211C] (irq=POLL)
[    1.619423] DSA: tree 0 setup
[    1.622586] ubi0: default fastmap pool size: 100
[    1.627192] ubi0: default fastmap WL pool size: 50
[    1.631980] ubi0: attaching mtd1
[    4.377442] random: crng init done
[    5.757709] ubi0: scanning is finished
[    5.784620] ubi0 warning: ubi_eba_init: cannot reserve enough PEBs for bad PEB handling, reserved 38, need 40
[    5.795189] ubi0: attached mtd1 (name "UBI_DEV", size 252 MiB)
[    5.801022] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.807879] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.814644] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.821586] ubi0: good PEBs: 2016, bad PEBs: 0, corrupted PEBs: 0
[    5.827663] ubi0: user volume: 6, internal volumes: 1, max. volumes count: 128
[    5.834862] ubi0: max/mean erase counter: 4/1, WL threshold: 4096, image sequence number: 867648407
[    5.843885] ubi0: available PEBs: 0, total reserved PEBs: 2016, PEBs reserved for bad PEB handling: 38
[    5.853174] ubi0: background thread "ubi_bgt0d" started, PID 468
[    5.859437] Freeing unused kernel memory: 448K
[    5.897479] Run /init as init process
[    5.901126]   with arguments:
[    5.904077]     /init
[    5.906334]   with environment:
[    5.909465]     HOME=/
[    5.911811]     TERM=linux
[    6.013366] init: Console is alive
[    6.016852] init: - watchdog -
[    6.022754] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    6.033687] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    6.050446] init: - preinit -
[    6.120128] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[    6.128578] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
ip: SIOCSIFHWADDR: Resource busy
[    6.280840] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    8.323541] procd: - early -
[    8.326460] procd: - watchdog -
[    8.841303] procd: - watchdog -
[    8.844581] procd: - ubus -
[    8.897733] procd: - init -
Please press Enter to activate this console.
[    8.984992] kmodloader: loading kernel modules from /etc/modules.d/*
[    8.995546] crypto-safexcel 10320000.crypto: EIP97:230(0,1,4,4)-HIA:270(0,5,5),PE:150/433(alg:7fcdfc00)/0/0/0
[    9.009605] Loading modules backported from Linux version v6.1.24-0-g0102425ac76b
[    9.017079] Backport generated by backports.git v5.15.92-1-44-gd6ea70fafd36
[    9.124415] urngd: v1.0.2 started.
[    9.370707] mt798x-wmac 18000000.wifi: Direct firmware load for mediatek/mt7986_rom_patch.bin failed with error -2
[    9.381065] mt798x-wmac 18000000.wifi: Falling back to sysfs fallback for: mediatek/mt7986_rom_patch.bin
[    9.405717] mt798x-wmac: probe of 18000000.wifi failed with error -12
[    9.425191] PPP generic driver version 2.4.2
[    9.430036] NET: Registered PF_PPPOX protocol family
[    9.436890] kmodloader: done loading kernel modules from /etc/modules.d/*
[   12.536442] mtk_soc_eth 15100000.ethernet eth0: Link is Down
[   12.548088] mtk_soc_eth 15100000.ethernet eth0: configuring for fixed/2500base-x link mode
[   12.556495] mtk_soc_eth 15100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[   12.560247] device eth0 entered promiscuous mode
[   12.570133] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
[   12.577822] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   12.586441] br-lan: port 1(lan1) entered blocking state
[   12.591673] br-lan: port 1(lan1) entered disabled state
[   12.598418] device lan1 entered promiscuous mode
[   12.612962] mt7530-mdio mdio-bus:1f lan2: configuring for phy/gmii link mode
[   12.622840] br-lan: port 2(lan2) entered blocking state
[   12.628098] br-lan: port 2(lan2) entered disabled state
[   12.635010] device lan2 entered promiscuous mode
[   12.646295] mt7530-mdio mdio-bus:1f lan3: configuring for phy/gmii link mode
[   12.656138] br-lan: port 3(lan3) entered blocking state
[   12.661392] br-lan: port 3(lan3) entered disabled state
[   12.668515] device lan3 entered promiscuous mode
[   12.679730] mt7530-mdio mdio-bus:1f lan4: configuring for phy/gmii link mode
[   12.689636] br-lan: port 4(lan4) entered blocking state
[   12.694856] br-lan: port 4(lan4) entered disabled state
[   12.702096] device lan4 entered promiscuous mode
[   12.710944] mt7530-mdio mdio-bus:1f lan5: configuring for phy/2500base-x link mode
[   12.720276] br-lan: port 5(lan5) entered blocking state
[   12.725488] br-lan: port 5(lan5) entered disabled state
[   12.732856] device lan5 entered promiscuous mode
[   12.742048] mtk_soc_eth 15100000.ethernet eth1: PHY [mdio-bus:06] driver [Maxlinear Ethernet GPY211C] (irq=POLL)
[   12.752230] mtk_soc_eth 15100000.ethernet eth1: configuring for phy/2500base-x link mode
[   15.849847] mt7530-mdio mdio-bus:1f lan5: Link is Up - 2.5Gbps/Full - flow control rx/tx
[   15.857969] br-lan: port 5(lan5) entered blocking state
[   15.863179] br-lan: port 5(lan5) entered forwarding state
[   15.869025] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   16.811979] mt7530-mdio mdio-bus:1f lan3: Link is Up - 1Gbps/Full - flow control rx/tx
[   16.819922] br-lan: port 3(lan3) entered blocking state
[   16.825131] br-lan: port 3(lan3) entered forwarding state

regards

1 Like

We don't need to open the case or even soldering anything. We can use three goldpin wires, remove from them plastic cover from connectors and connect to the console via the case holes. We can see three console holes ( from down RX(orange), TX (green), Ground(blue) - partially covered).
(First photo from youtube video : https://www.youtube.com/watch?v=mLTGbSnRaos )


OEM boot log:

F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [1000]
T0: 0000 0209 [010F]
Jump to BL

NOTICE:  BL2: v2.6(release):
NOTICE:  BL2: Built : 14:42:59, Jul 22 2022
NOTICE:  WDT: disabled
NOTICE:  CPU: MT7986 (2000MHz)
NOTICE:  EMI: Using DDR4 settings
NOTICE:  EMI: Detected DRAM size: 512MB
NOTICE:  EMI: complex R/W mem test passed
NOTICE:  SPI_NAND parses attributes from parameter page.
NOTICE:  SPI_NAND Detected ID 0xef
NOTICE:  Page size 2048, Block size 131072, size 268435456
NOTICE:  BL2: Booting BL31
NOTICE:  BL31: v2.6(release):
NOTICE:  BL31: Built : 14:43:05, Jul 22 2022


U-Boot 2022.04-rc1 (Nov 14 2022 - 14:58:21 +0800)
TUF-AX6000 bootloader version: 1.0.0.2

CPU:   MediaTek MT7986
Model: mt7986-rfb
DRAM:  512 MiB
Core:  43 devices, 15 uclasses, devicetree: embed
MMC:   mmc@11230000: 0
Loading Environment from MTD... 
SPINAND raw ID: 00 EF AA 22 
spi-nand: spi_nand spi_nand@1: Winbond SPI NAND was found.
spi-nand: spi_nand spi_nand@1: 256 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
*** Warning - bad CRC, using default environment

In:    serial@11002000
Out:   serial@11002000
Err:   serial@11002000
ASUS TUF-AX6000 gpio/led init
Net:   
Warning: ethernet1@15100000 (eth0) using random MAC address - xxxx
eth0: ethernet1@15100000
Warning: ethernet0@15100000 (eth1) using random MAC address - xxxx
, eth1: ethernet0@15100000
ubi0: attaching mtd4
ubi0: scanning is finished
ubi0: attached mtd4 (name "UBI_DEV", size 252 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 2016, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 6, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 4/1, WL threshold: 4096, image sequence number: 867648407
ubi0: available PEBs: 0, total reserved PEBs: 2016, PEBs reserved for bad PEB handling: 40
UBI:   vol_id  reserved_pebs  alignment  data_pad  vol_type  usable_leb_size  used_ebs  used_bytes  last_eb_bytes  corrupted  upd_marker  name_len  name
UBI:        0              1          1         0   dynamic            1f000         1       1f000         1f000          0           0         5  nvram
UBI:        1              8          1         0   dynamic            1f000         8       f8000         1f000          0           0         7  Factory
UBI:        2              8          1         0   dynamic            1f000         8       f8000         1f000          0           0         8  Factory2
UBI:        3            242          1         0   dynamic            1f000       242     45fe000         1f000          0           0         5  linux
UBI:        4            242          1         0   dynamic            1f000       242     45fe000         1f000          0           0         6  linux2
UBI:        5            31f          1         0   dynamic            1f000       31f     60c1000         1f000          0           0         5  jffs2
UBI: 7fffefff              2          1         0   dynamic            1f000         2       3e000             2          0           0         d  layout volume
Read 1015808 bytes from volume Factory to 000000005f707ac0
EEPROM set 0: OK (version 59)
Read 1015808 bytes from volume Factory2 to 000000005f707ac0
EEPROM set 1: OK (version 59)
Read 1015808 bytes from volume Factory to 000000005fb425f0
Select EEPROM set 0 at offset 0x0.

Please choose the operation: 
   1: Load System code to SDRAM via TFTP.
   2: Load System code then write to Flash via TFTP.
   3: Boot System code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
 0 
   3: Boot System code via Flash (default).

TUF-AX6000 bootloader version: 1.0.0.2
MAC Address: xxxx
HwID A
Read 40 bytes from volume linux to 0000000046000000
   FIT/FDT format image found at 0x46000000,size 0x231ea04
Read 36825644 bytes from volume linux to 0000000046000000
## Loading kernel from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-3.0
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x460000e4
     Data Size:    3263424 Bytes = 3.1 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x48080000
     Entry Point:  0x48080000
     Hash algo:    crc32
     Hash value:   5c914100
     Hash algo:    sha1
     Hash value:   685bae8843df222784f89ae284b9490f9044c002
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading ramdisk from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'rootfs-1' ramdisk subimage
     Description:  Root File System
     Type:         RAMDisk Image
     Compression:  Unknown Compression
     Data Start:   0x4632241c
     Data Size:    33538289 Bytes = 32 MiB
     Architecture: Unknown Architecture
     OS:           Unknown OS
     Load Address: 0x00000000
     Entry Point:  0x00000000
     Hash algo:    crc32
     Hash value:   b7adb441
     Hash algo:    sha1
     Hash value:   b19f4353901ab197da38d467d1a939c260799518
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt mt7986a-tuf-ax6000 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x4631cde8
     Data Size:    21823 Bytes = 21.3 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   95b68a8b
     Hash algo:    sha1
     Hash value:   ef994b7bd8ba2c97efbeea383ad97423df83facb
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x4631cde8
Read 40 bytes from volume linux2 to 000000005f7ffb90
   Uncompressing Kernel Image
   Loading Device Tree to 000000005f7f3000, end 000000005f7fb53e ... OK
volume linux seq: 4

Starting kernel ...

Booting Linux on physical CPU 0x0000000000 [0x410fd034]
Linux version 5.4.182 (root@asus) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r16530-c6256a6533)) #1 SMP Wed Dec 28 13:11:16 CST 2022
Machine model: TUF-AX6000
earlycon: uart8250 at MMIO32 0x0000000011002000 (options '')
printk: bootconsole [uart8250] enabled
On node 0 totalpages: 130058
  DMA32 zone: 2048 pages used for memmap
  DMA32 zone: 0 pages reserved
  DMA32 zone: 130058 pages, LIFO batch:31
psci: probing for conduit method from DT.
psci: PSCIv1.1 detected in firmware.
psci: Using standard PSCI v0.2 function IDs
psci: MIGRATE_INFO_TYPE not supported.
psci: SMC Calling Convention v1.0
percpu: Embedded 20 pages/cpu s43032 r8192 d30696 u81920
pcpu-alloc: s43032 r8192 d30696 u81920 alloc=20*4096
pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 
Detected VIPT I-cache on CPU0
CPU features: detected: GIC system register CPU interface
CPU features: kernel page table isolation disabled by kernel configuration
Built 1 zonelists, mobility grouping on.  Total pages: 128010
Kernel command line: root_rfs=0x32241c rootfstype=squashfs ubi.mtd=UBI_DEV console=ttyS0,115200n1 loglevel=8                            earlycon=uart8250,mmio32,0x11002000 root=/dev/mtdblock6 
Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
mem auto-init: stack:off, heap alloc:off, heap free:off
Memory: 492080K/520232K available (6526K kernel code, 518K rwdata, 1664K rodata, 448K init, 288K bss, 28152K reserved, 0K cma-reserved)
SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
Invalid signature of oopsbuf: 40-6F-60-41-00-74-24-00 (len 0)
rcu: Hierarchical RCU implementation.
rcu:    CONFIG_RCU_FANOUT set to non-default value of 32.
rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
GICv3: GIC: Using split EOI/Deactivate mode
GICv3: 640 SPIs implemented
GICv3: 0 Extended SPIs implemented
GICv3: Distributor has no Range Selector support
GICv3: 16 PPIs implemented
GICv3: no VLPI support, no direct LPI support
GICv3: CPU0: found redistributor 0 region 0:0x000000000c080000
random: get_random_bytes called from start_kernel+0x2d4/0x418 with crng_init=0
arch_timer: cp15 timer(s) running at 13.00MHz (phys).
clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2ff89eacb, max_idle_ns: 440795202429 ns
sched_clock: 56 bits at 13MHz, resolution 76ns, wraps every 4398046511101ns
Calibrating delay loop (skipped), value calculated using timer frequency.. 26.00 BogoMIPS (lpj=52000)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
ASID allocator initialised with 65536 entries
rcu: Hierarchical SRCU implementation.
smp: Bringing up secondary CPUs ...
Detected VIPT I-cache on CPU1
GICv3: CPU1: found redistributor 1 region 0:0x000000000c0a0000
CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
Detected VIPT I-cache on CPU2
GICv3: CPU2: found redistributor 2 region 0:0x000000000c0c0000
CPU2: Booted secondary processor 0x0000000002 [0x410fd034]
Detected VIPT I-cache on CPU3
GICv3: CPU3: found redistributor 3 region 0:0x000000000c0e0000
CPU3: Booted secondary processor 0x0000000003 [0x410fd034]
smp: Brought up 1 node, 4 CPUs
SMP: Total of 4 processors activated.
CPU features: detected: 32-bit EL0 Support
CPU features: detected: CRC32 instructions
CPU: All CPU(s) started at EL2
alternatives: patching kernel code
devtmpfs: initialized
clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
pinctrl core: initialized pinctrl subsystem
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic allocations
cryptd: max_cpu_qlen set to 1000
SCSI subsystem initialized
libata version 3.00 loaded.
rbus 18000000.wbsys: PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [mem 0x18000000-0x18ffffff]
pci_bus 0000:00: root bus resource [bus 00-ff]
pci_bus 0000:00: scanning bus
pci 0000:00:00.0: [14c3:7986] type 00 class 0x000280
pci 0000:00:00.0: reg 0x10: [mem 0x18000000-0x1800000f 64bit]
pci 0000:00:00.0: reg 0x18: [mem 0x00000000-0x0000000f]
pci 0000:00:00.0: reg 0x1c: [mem 0x00000000-0x0000000f]
pci 0000:00:00.0: reg 0x20: [mem 0x00000000-0x0000000f]
pci 0000:00:00.0: reg 0x24: [mem 0x00000000-0x0000000f]
pci_bus 0000:00: fixups for bus
pci_bus 0000:00: bus scan returning with max=00
clocksource: Switched to clocksource arch_sys_counter
thermal_sys: Registered thermal governor 'fair_share'
thermal_sys: Registered thermal governor 'bang_bang'
thermal_sys: Registered thermal governor 'step_wise'
thermal_sys: Registered thermal governor 'user_space'
thermal_sys: Registered thermal governor 'power_allocator'
NET: Registered protocol family 2
IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
TCP established hash table entries: 4096 (order: 3, 32768 bytes, linear)
TCP bind hash table entries: 4096 (order: 4, 65536 bytes, linear)
TCP: Hash tables configured (established 4096 bind 4096)
UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
NET: Registered protocol family 1
PCI: CLS 0 bytes, default 64
workingset: timestamp_bits=62 max_order=17 bucket_order=0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
mtk-pcie 11280000.pcie: host bridge /pcie@11280000 ranges:
mtk-pcie 11280000.pcie: Parsing ranges property...
mtk-pcie 11280000.pcie:   MEM 0x20000000..0x2fffffff -> 0x20000000
phy phy-pcie-phy@11c00000.0: try to get sw efuse
phy phy-pcie-phy@11c00000.0: try to get sw efuse+
phy phy-pcie-phy@11c00000.0: u3 auto load valid efuse: ENABLE with value: 1
phy phy-pcie-phy@11c00000.0: u3 efuse - intr 2b, rx_imp 10, tx_imp f
phy phy-pcie-phy@11c00000.0: pcie auto load valid efuse: ENABLE with value: 1
phy phy-pcie-phy@11c00000.0: u3 lane1 efuse - intr 2b, rx_imp 10, tx_imp f
mtk-pcie 11280000.pcie: PCIe link down, ltssm reg val: 0x0
mtk-pcie: probe of 11280000.pcie failed with error -110
Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
printk: console [ttyS0] disabled
11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 12, base_baud = 2500000) is a ST16650V2
printk: console [ttyS0] enabled
printk: console [ttyS0] enabled
printk: bootconsole [uart8250] disabled
printk: bootconsole [uart8250] disabled
11003000.serial: ttyS1 at MMIO 0x11003000 (irq = 13, base_baud = 1625000) is a ST16650V2
11004000.serial: ttyS2 at MMIO 0x11004000 (irq = 14, base_baud = 1625000) is a ST16650V2
mtk_rng 1020f000.trng: registered RNG driver
random: fast init done
cacheinfo: Unable to detect cache hierarchy for CPU 0
crng init done
loop: module loaded
mt7986-pinctrl 1001f000.pinctrl: pin_config_set op failed for pin 36
mtk-spi 1100a000.spi: Error applying setting, reverse things back
spi-nor spi0.0: unrecognized JEDEC id bytes: ff ef aa 22 00 00
spi-nor: probe of spi0.0 failed with error -2
spi-nand spi0.1: Winbond SPI NAND was found.
spi-nand spi0.1: 256 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
2 fixed-partitions partitions found on MTD device spi0.1
Creating 2 MTD partitions on "spi0.1":
0x000000000000-0x000000400000 : "Bootloader"
0x000000400000-0x000010000000 : "UBI_DEV"
Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011)
IMQ driver loaded successfully. (numdevs = 8, numqueues = 1, imq_dev_accurate_stats = 1)
        Hooking IMQ after NAT on PREROUTING.
        Hooking IMQ before NAT on POSTROUTING.
[mtk_hw_init] reset_lock:0, force:0
[mtk_hw_init] execute fe cold reset
mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc011800000, irq 124
mtk_soc_eth 15100000.ethernet eth1: mediatek frame engine at 0xffffffc011800000, irq 124
(unnamed net_device) (dummy): netif_napi_add() called with weight 256
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
i2c /dev entries driver
mtk-wdt 1001c000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
crypto-safexcel 10320000.crypto: EIP97:230(0,1,4,4)-HIA:270(0,5,5),PE:150/433,alg:7fcdfc00
u32 classifier
    Performance counters on
    input device check on
xt_time: kernel timezone is -0000
gre: GRE over IPv4 demultiplexor driver
IPv4 over IPsec tunneling driver
NET: Registered protocol family 10
Segment Routing with IPv6
NET: Registered protocol family 17
NET: Registered protocol family 15
Bridge firewalling registered
l2tp_core: L2TP core driver, V2.0
l2tp_ppp: PPPoL2TP kernel driver, V2.0
l2tp_netlink: L2TP netlink interface
8021q: 802.1Q VLAN Support v1.8
mt7530 mdio-bus:1f lan4 (uninitialized): PHY [dsa-0.0:01] driver [Generic PHY]
mt7530 mdio-bus:1f lan3 (uninitialized): PHY [dsa-0.0:02] driver [Generic PHY]
mt7530 mdio-bus:1f lan2 (uninitialized): PHY [dsa-0.0:03] driver [Generic PHY]
mt7530 mdio-bus:1f lan1 (uninitialized): PHY [dsa-0.0:04] driver [Generic PHY]
mt7530 mdio-bus:1f: configuring for fixed/2500base-x link mode
DSA: tree 0 setup
mt7530 mdio-bus:1f: Link is Up - 2.5Gbps/Full - flow control rx/tx
ubi0: attaching mtd1
ubi0: scanning is finished
ubi0: attached mtd1 (name "UBI_DEV", size 252 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 2016, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 6, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 4/1, WL threshold: 4096, image sequence number: 867648407
ubi0: available PEBs: 0, total reserved PEBs: 2016, PEBs reserved for bad PEB handling: 40
ubi0: background thread "ubi_bgt0d" started, PID 889
gluebi_create: Hook read/write method of Factory.
gluebi_create: Hook read/write method of Factory2.
[Factory-0]: OK (ver: 59)
[Factory2-0]: OK (ver: 59)
Select [Factory-0]
volume linux rfs_offset 32241c mtd->size 45fe000
Creating 1 MTD partitions on "linux":
0x00000032241c-0x0000045fe000 : "rootfs"
mtd: device 6 (rootfs) set to be root filesystem
volume linux2 rfs_offset 32241c mtd->size 45fe000
Creating 1 MTD partitions on "linux2":
0x00000032241c-0x0000045fe000 : "rootfs2"
gluebi_create: skip jffs2 volume
VFS: Mounted root (squashfs filesystem) readonly on device 31:6.
devtmpfs: mounted
Freeing unused kernel memory: 448K
Run /sbin/init as init process
init_main start.
/dev/nvram: No such file or directory
/dev/nvram: No such file or directory
offset 0x4000 elapse 16ms
_nvram_free: 936(modprobe) nvram_idx(1 / 2)
found private data block and skip it
1: set_action 0


Hit ENTER for console...

firmware version: 3.0.0.4.388_31374-g617d05c, dev:(R1IG67600326SK9/C8:7F:54:B6:37:4A)
mtd productid: 1�0
bootloader version: 1�0-01-00-00-02
firmware version: 0.0.0.116
odmpid: init (1): drop_caches: 1
TUF-AX6000
current FW productid: TUF-AX6000
current FW firmver: 3.0.0.4
R1IG67600326SK9
clean_mode(1) clean_time(2) threshold(0)
free_caches: Start syncing...
free_caches: Start cleaning...
free_caches: waiting 2 second...
free_caches: Finish.
[1 inbled: GPIO#2: netdev ra0 nr_users 1.
it:init_nvram +1bled: GPIO#2: netdev rax0 nr_users 2.
0] init_nvram for model(154)
set_basic_ifname_vars: WAN eth1 LAN lan1 lan2 lan3 lan4 lan5 [lan1 lan2 lan3 lan4 lan5 eth1 ra0 rax0] WIRED [lan1 lan2 lan3 lan4 lan5] ETH_IFNAMES [] 2G ra0 5G rax0 60G N/A USB usb AP_LAN N/A DW_WAN (null) DW_LAN  force_dwlan 0, sw_mode 3
wan_ifnames: 
init_amas_subunit: Set default value.
init_amas_subunit(9777): update wl1_vifnames [wl1.1 wl1.2 wl1.3 wl1.4] 
init_amas_subunit(9796): update wl0_vifnames [wl0.1 wl0.2 wl0.3 wl0.4] 
1: check_action 0: 1(init)
1: set_action 7
nvram_commit(): pid 1 comm [init]
_nvram_free: 1(init) nvram_idx(0 / 2)
found private data block and skip it
1: set_action 0
config_switch(0x0216): link down all ports
config_mt7986_mt7531_LANWANPartition: LAN/P.WAN/S.WAN portmask 0000003f/00000000/00000000 Upstream eth1 (unit 0)
config_switch(0x0546): link up wan port(s)
1+0 records in
1+0 records out
conninfra@(mtk_conninfra_drv_init:644) Before platform_driver_register
Get Index(0-TOP_MISC_BASE) phy_addr(0x11d10000) vir_addr=(0xffffffc010a75000) size=(0x1000)
Get Index(1-TOPRGU_BASE) phy_addr(0x1001c000) vir_addr=(0xffffffc010a7d000) size=(0x1000)
Get Index(2-GPIO_BASE) phy_addr(0x1001f000) vir_addr=(0xffffffc010a85000) size=(0x1000)
Get Index(3-IOCFG_TR_BASE) phy_addr(0x11f00000) vir_addr=(0xffffffc010a8d000) size=(0x1000)
Get Index(4-IOCFG_TL_BASE) phy_addr(0x11f10000) vir_addr=(0xffffffc010a95000) size=(0x1000)
Get Index(5-INFRACFG_AO_BASE) phy_addr(0x10003000) vir_addr=(0xffffffc010a9d000) size=(0x1000)
Get Index(6-CONN_INFRA_CFG_BASE) phy_addr(0x18001000) vir_addr=(0xffffffc010aa5000) size=(0x1000)
Get Index(7-CONN_INFRA_SYSRAM_BASE) phy_addr(0x18050000) vir_addr=(0xffffffc010aad000) size=(0x1000)
Get Index(8-CONN_INFRA_CLKGEN_ON_TOP_BASE) phy_addr(0x18009000) vir_addr=(0xffffffc010ab5000) size=(0x1000)
Get Index(9-CONN_HOST_CSR_TOP_BASE) phy_addr(0x18060000) vir_addr=(0xffffffc010abd000) size=(0x1000)
Get Index(10-CONN_INFRA_BUS_CR_BASE) phy_addr(0x1800e000) vir_addr=(0xffffffc010ad1000) size=(0x1000)
Get Index(11-CONN_INFRA_RGU_BASE) phy_addr(0x18000000) vir_addr=(0xffffffc010ad3000) size=(0x1000)
Get Index(12-CONN_WT_SLP_CTL_REG_BASE) phy_addr(0x18005000) vir_addr=(0xffffffc010ad5000) size=(0x1000)
Get Index(13-INST2_CONN_WT_SLP_CTL_REG_BASE) phy_addr(0x18085000) vir_addr=(0xffffffc010add000) size=(0x1000)
Get Index(14-CONN_RF_SPI_MST_REG_BASE) phy_addr(0x18004000) vir_addr=(0xffffffc010ae5000) size=(0x1000)
Get Index(15-INST2_CONN_RF_SPI_MST_REG_BASE) phy_addr(0x18084000) vir_addr=(0xffffffc010ae7000) size=(0x1000)
Get Index(16-CONN_SEMAPHORE_BASE) phy_addr(0x18070000) vir_addr=(0xffffffc010bc0000) size=(0x10000)
Get Index(17-CONN_AFE_CTL_BASE) phy_addr(0x18003000) vir_addr=(0xffffffc010ae9000) size=(0x1000)
Get Index(18-CONN_AFE_CTL_2ND_BASE) phy_addr(0x18083000) vir_addr=(0xffffffc010aeb000) size=(0x1000)
Get Index(19-WF_TOP_SLPPROT_ON_BASE) phy_addr(0x184c0000) vir_addr=(0xffffffc010be0000) size=(0x10000)
Get Index(20-WF_TOP_CFG_BASE) phy_addr(0x184b0000) vir_addr=(0xffffffc010aed000) size=(0x1000)
Get Index(21-WF_MCU_CONFIG_LS_BASE) phy_addr(0x184f0000) vir_addr=(0xffffffc010af5000) size=(0x1000)
Get Index(22-WF_MCU_BUS_CR_BASE) phy_addr(0x18400000) vir_addr=(0xffffffc010afd000) size=(0x1000)
Get Index(23-WF_MCUSYS_INFRA_BUS_FULL_U_DEBUG_CTRL_AO_BASE) phy_addr(0x18500000) vir_addr=(0xffffffc010b46000) size=(0x1000)
Get Index(24-WF_TOP_CFG_ON_BASE) phy_addr(0x184c0000) vir_addr=(0xffffffc010e30000) size=(0x10000)
eeFlashId: 0x7986, EEPROM_content_valid = 1
conninfra@(consys_plt_hw_init:221) tx_stream = 0x4, rx_stream = 0x4, band0_pa_type = 0x3, band1_pa_type = 0x3
conninfra@(consys_plt_hw_init:230) adie_cfg_type = 2, one_adie_dbdc = 0
[emi_mng_init] gConEmiPhyBase = [0x4fc00000] size = [0x100000] fw size = [0x100000] ops=[000000008e0894a8]
conninfra@(mtk_conninfra_drv_init:650) After platform_driver_register
ConnInfra Dev: init (0)
conninfra@(_consys_polling_chipid_int:459) Read CONNSYS HW IP version successfully! (0x02070000)
conninfra@(consys_bus_clock_ctrl:485) drv=[4] conninfra_bus_clock_wpll=[0]->[16] enable
conninfra@(connsys_d_die_cfg:530) D-die efuse: 0x00000000
conninfra@(_connsys_a_die_chip_id_confirm:1911) adie_idx[0]: A-die CHIP ID = 0x7976, HW Version = 0x8a20
conninfra@(_connsys_a_die_chip_id_confirm:1911) adie_idx[1]: A-die CHIP ID = 0x7976, HW Version = 0x8a20
conninfra@(consys_spi_write_nolock:670) addr = 0x0a00, val = 0xffffffff
conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x00000000
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x43a60000
conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008700bc, 0x00000000]
conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x23a6003a
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x63a7003a
conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008700bc, 0x00000000]
conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x23a7003a
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x63ac003a
conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008700bc, 0x00000000]
conninfra@(consys_spi_write_nolock:670) addr = 0x0038, val = 0x4a563b00
conninfra@(consys_spi_write_nolock:670) addr = 0x065c, val = 0x1959f80f
conninfra@(consys_spi_write_nolock:670) addr = 0x0664, val = 0x34d00fe0
conninfra@(consys_spi_write_nolock:670) addr = 0x0a00, val = 0xffffffff
conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x00000000
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x43a60000
conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008800b6, 0x00000000]
conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x23a6003a
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x63a7003a
conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008800b6, 0x00000000]
conninfra@(consys_spi_write_nolock:670) addr = 0x0144, val = 0x00000002
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x23a7003a
conninfra@(consys_spi_write_nolock:670) addr = 0x0148, val = 0x63ac003a
conninfra@(connsys_a_die_efuse_read_nolock:906) efuse = [0x00000001, 0x00c40000, 0x008800b6, 0x00000000]
conninfra@(consys_spi_write_nolock:670) addr = 0x0038, val = 0x4a563b00
conninfra@(consys_spi_write_nolock:670) addr = 0x065c, val = 0x1959f80f
conninfra@(consys_spi_write_nolock:670) addr = 0x0664, val = 0x34d00fe0
conninfra@(consys_spi_write_nolock:670) addr = 0x0070, val = 0x88888005
conninfra@(consys_spi_write_nolock:670) addr = 0x0070, val = 0x00000005
conninfra@(consys_spi_write_nolock:670) addr = 0x0070, val = 0x88888005
conninfra@(consys_spi_write_nolock:670) addr = 0x0070, val = 0x00000005
conninfra@(_consys_polling_chipid_int:459) Read CONNSYS HW IP version successfully! (0x02070000)
conninfra@(_consys_hw_conninfra_wakeup:470) conninfra_wakeup refcnt=[0]->[1] wakeup!!
conninfra@(_consys_hw_conninfra_sleep:490) conninfra_sleep refcnt=[1]->[0] sleep!!
conninfra@(opfunc_power_on_internal:241) [Conninfra Pwr On] BT=[0] FM=[0] GPS=[0] WF=[0] CONNINFRA=[1]
mediatek_soc_hnat 15100000.hnat: wan = eth1
mediatek_soc_hnat 15100000.hnat: lan = lan
mediatek_soc_hnat 15100000.hnat: ppd = eth0
mediatek_soc_hnat 15100000.hnat: gmac num = 2
mediatek_soc_hnat 15100000.hnat: ppe num = 1
mediatek_soc_hnat 15100000.hnat: PPE0 entry number = 8192
mediatek_soc_hnat 15100000.hnat: PPE0 hwnat start
hnat roaming work enable
mt_wifi: module license 'Proprietary' taints kernel.
Disabling lock debugging due to kernel taint
conninfra@(conninfra_pwr_on:120) [conninfra_pwr_on] drv=[3]
conninfra@(_consys_polling_chipid_int:459) Read CONNSYS HW IP version successfully! (0x02070000)
Adie Type: 0x7976
SKU Type: 6000
conninfra@(opfunc_power_on_internal:241) [Conninfra Pwr On] BT=[0] FM=[0] GPS=[0] WF=[1] CONNINFRA=[1]
WiFi@C12L1,get_dbg_setting_by_profile() 4249: debug level setting=INDEX0_debug_level not found!!
WiFi@C12L1,get_dbg_setting_by_profile() 4272: debug option setting=INDEX0_debug_option not found!!
mt_rbus 0000:00:00.0: runtime IRQ mapping not provided by arch
mt7986_init()-->
 sku:0xf, ADIE=MT7976 
<--mt7986_init()
RtmpRaDevCtrlInit(): MCS_LUT not used becasue MacTb size(544) > 128!
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX1
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX2
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX3
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX4
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX5
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX6
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX7
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX8
WiFi@C12L1,match_index_by_chipname() 507: not find chip name INDEX9
WiFi@C12L2,match_index_by_chipname() 512: Not find slot id, back to old rule.
msta_ifname not found
hotplug net INTERFACE=ra0 ACTION=add SEQNUM=737
warp_module_init(): module init and register callback for warp
create warp_ctrl ok!!!
wed_get_slot_map(): assign slot_id:0 for entry: 0!
wed_get_slot_map(): assign slot_id:1 for entry: 1!
mtk_warp_proxy: module uses symbols from proprietary module mt_wifi, inheriting taint.
1: check_action 0: 1(init)
*** ubifs: jffs2 0, 5, 101453824
console fd is 0
1: check_action 0: 1(init)
1: set_action 7
_nvram_free: 1(init) nvram_idx(1 / 2)
1: set_action 0
[adjust_vpnc_config, 184]
Insert USB modules early.
xhci-mtk 11200000.xhci: 11200000.xhci supply vbus not found, using dummy regulator
xhci-mtk 11200000.xhci: 11200000.xhci supply vusb33 not found, using dummy regulator
phy phy-usb-phy@11e10000.1: try to get sw efuse
phy phy-usb-phy@11e10000.1: try to get sw efuse+
phy phy-usb-phy@11e10000.2: try to get sw efuse
phy phy-usb-phy@11e10000.2: try to get sw efuse+
phy phy-usb-phy@11e10000.3: try to get sw efuse
phy phy-usb-phy@11e10000.3: try to get sw efuse+
usb hotplug INTERFACE=9/0/0 ACTION=add USBPORT=(null) HOST=(null) DEVICE=(null)
1074: check_action 0: 1(init)
checking for user scripts: '.usbhotplug'
usb hotplug INTERFACE=(null) ACTION=add USBPORT=(null) HOST=(null) DEVICE=(null)
usb hotplug INTERFACE=9/0/0 ACTION=add USBPORT=(null) HOST=(null) DEVICE=(null)
1083: check_action 0: 1(init)
checking for user scripts: '.usbhotplug'
usb hotplug INTERFACE=(null) ACTION=bind USBPORT=(null) HOST=(null) DEVICE=(null)
usb hotplug INTERFACE=9/0/0 ACTION=bind USBPORT=(null) HOST=(null) DEVICE=(null)
1078: check_action 0: 1(init)
checking for user scripts: '.usbhotplug'
usb hotplug INTERFACE=9/0/0 ACTION=bind USBPORT=(null) HOST=(null) DEVICE=(null)
1087: check_action 0: 1(init)
checking for user scripts: '.usbhotplug'
usb hotplug INTERFACE=(null) ACTION=bind USBPORT=(null) HOST=(null) DEVICE=(null)
usb hotplug INTERFACE=(null) ACTION=add USBPORT=(null) HOST=(null) DEVICE=(null)
update_lan_state(lan_, 0, 0)
1+0 records in
1+0 records out
hotplug net INTERFACE=br0 ACTION=add SEQNUM=785
hotplug net INTERFACE=br0 ACTION=add SEQNUM=785
_ifconfig: name=lan1 flags=1243 IFUP addr= netmask=
_ifconfig: name=lan2 flags=1243 IFUP addr= netmask=
_ifconfig: name=lan3 flags=1243 IFUP addr= netmask=
_ifconfig: name=lan4 flags=1243 IFUP addr= netmask=
_ifconfig: name=lan5 flags=1243 IFUP addr= netmask=
_ifconfig: name=eth1 flags=1243 IFUP addr= netmask=
gen ralink config
gen ralink iNIC config
_ifconfig: name=WiFi@C01L2,RTMP_COM_IoctlHandle() 1511: -> CMD_RTPRIV_IOCTL_VIRTUAL_INF_INIT
ra0 flags=1243 Imsta_ifname not found
FUP addr= netmask=
warp_dev0: probe of 15010000.wed2 failed with error -1
WiFi@C02L1,HwCtrlInit() 551: ser_init() return NDIS_STATUS_FAILURE
WiFi@C12L1,RTMPWirelessModeCfg() 599: Init: BSS0 PhyMode=78
WiFi@C12L1,RTMPWirelessModeCfg() 599: Init: BSS1 PhyMode=177
WiFi@C03L1,AndesSendCmdMsg() 754: Could not send in band command due to diablefRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
WiFi@C03L2,AndesSendCmdMsg() 765: Command type = ed, Extension command type = 48
WiFi@C03L1,AndesSendCmdMsg() 754: Could not send in band command due to diablefRTMP_ADAPTER_MCU_SEND_IN_BAND_CMD
WiFi@C03L2,AndesSendCmdMsg() 765: Command type = ed, Extension command type = 48
 sku:0xf, ADIE=MT7976 
using E1 ROM patch
using E1 RAM
current sync CR = 0x1
        Built date: 20221125171548a
        Platform: ALPS
        HW/SW version: 0x8a108a10
        Patch version: 0xffffffff
current sync CR = 0x1
        Chip ID: 0x0f
        Eco version: 0x00
        Region number: 0x0b
        Format version: 0x02
        Format flag: 0x01
        Ram version: ____000000
        Built date: 20221125171609
        Common crc: 0xfabec89b
        Release info: header tag = 0, total length = 108
        tag 1, padding length = 3, tag length = 101
        payload: t-neptune-main-2111-7986-imp_v7640_wk2219-MT7986_E1_ASIC_ROM_RAM_REBB_IMP_V7640_WK2219-20221125171501
        Chip ID: 0x00
        Eco version: 0x00
        Region number: 0x03
        Format version: 0x02
        Format flag: 0x01
        Ram version: DEV_000000
        Built date: 20221125171806
        Common crc: 0xefcb8833



PR:

5 Likes

Where do we download the (initramfs) image for this router, for all of us who don’t know how to compile it ourselves? Looks like your commit still haven’t got merged unfortunately.

Hi,
you can download my build from last week.
https://drive.google.com/drive/folders/1cpcsZ4p6-kPWOOcM-F1qngFJT0wMzpLd

@blocktrron Do you have any plans to merge support for this router?

Router with this openWRT build have two problems:

  • WED is unstable during high wifi 5GHz throughput. I suggest not enable WED. ( I need to collect logs and create bug ). With not enabled WED I don't have any problems.
  • LED for 2,5Gb LAN is on when link is down. When link in up LED behave normally.

best regards,
Patryk

how to install?

Happy to beta test anything if needed.

you can find instruction in the commit description :slight_smile:

and below :slight_smile:

Installation

 Download the OpenWrt initramfs image. Copy the image to a TFTP server
 reachable at 192.168.1.70/24. Rename the image to TUF-AX6000.bin.

 Connect to the serial console, interrupt the auto boot process by pressing '4' when prompted or press '1' and set
 client IP, server IP and name of the image.

( We don't need to open the case or even soldering anything. We can use three goldpin wires, remove from them plastic cover from connectors and connect to the console via the case holes. We can see three console holes ( from down RX, TX, Ground - partially covered).

 Download & Boot the OpenWrt initramfs image.

When pressed '4'
$ setenv ipaddr 192.168.1.1
$ setenv serverip 192.168.1.70
$ tftpboot 0x46000000 TUF-AX6000.bin
$ bootm 0x46000000

When pressed '1' just write image name like below:
1: Load System code to SDRAM via TFTP.
Please Input new ones /or Ctrl-C to discard
Input device IP (192.168.1.1) ==:
Input server IP (192.168.1.70) ==:
Input Linux Kernel filename (TUF-AX6000.trx) ==:

 Wait for OpenWrt to boot. Transfer the sysupgrade image to the device
 using scp and install using sysupgrade.

 $ sysupgrade -n <path-to-sysupgrade.bin>
2 Likes

@patrykk Thank you for doing all the hard work here! We all appreciate it! :heart: I was about to go with TUF-AX4200, but since I saw your post, I decided to get TUF-AX6000 instead.

I have two questions though:

  1. Can this router handle 1Gbps QoS (cake)?
  2. Have you ever managed to restore the original firware successfully?

I assume we only have to pay attention when using TTL, to have real 3.3V, so we don’t burn the router? Some USB TTL adapters change only VCC line to 3.3V, and keep the rest to 5V.

ad.1 . Probably yes, but I cant confirm it. My WAN is only 20Mbits :wink: . But I don't know any other openwrt router more suitable that this. In other words; if not this router then which one ? :slight_smile:
ad.2. No, but based on the ax4200 experience it should works.

I connect only 3 pins, ground, tx and RX. Please dont connect any voltage pin! You can burn something.

1 Like

Same thing as with serial port on mosf other routers: only GND, TX and RX are used. No VCC.

I assume TX goes to RX, and RX to TX…

What about packages: do we need to compile them, or we can install them using ipkg/Luci Software, just as with any other (officially) supported router?

All your replies were very helpful! Thank you one more time! :innocent: I’m about to get this device asap.

You can use official packages from official repo. If you like I can build new images with last kernel. Then you will not have any problems with depends. I'll supply today also packages created during building process.

Update:
I supplied packages to the same google disk:
https://drive.google.com/drive/folders/1cpcsZ4p6-kPWOOcM-F1qngFJT0wMzpLd

2 Likes

Wow, you rock! Thank you very much!

Does anybody knows how to backup the stock firmware (full), so in case anything goes wrong, it's possible to recover it?

Hi, please look at link:

1 Like

There is a very interesting discussion in ASUS TUF-AX4200 forum thread:

@remittor managed go create a tool that creates Asuswrt compatible trx image out of OpenWRT bin image. :heart: Which means you don’t need to use TTL serial port anymore for that router.

I wonder does it work on ASUS TUF-AX6000 as well. Anyone? @patrykk, have you managed to test that tool with this router, too?

Hi, I already have this router with OpenWRT as a main router at home. I can supply build with required modifications but I don't have possibility to test it now. Solution should be common for both routers.

@patrykk Please do. I’ll have this router here sometimes next week and can test it.