Support for Asus RT-BE14000/ZenWiFi BT8 Tri-band Wifi7 (Mediatek MT7988)?

Right, as far as I saw, the RTL8372 switch is not supported by OpenWrt

What does this mean:

I have tried all the ports of course but they do not work.

I pretty much lost all of the enthusiasm for this now, but I will at least try to get my own initramfs image to work. The first attempt will not load, but I have higher hopes for my second try :slight_smile:

1 Like

This means that the Ethernet port is part of the MT7988 chip. Usually the switch is connected to this port to provide additional LAN ports on the router

Yes, I hoped it meant something like that - does it mean that one network port could work ?

At least that will make it a good access point :wink:

Probably depends on the initial state of the switch. Do you have to get it out of reset or configure it to work? Or is it just running as a “dump” switch.

OK, now at least I am connected (with usb-ethernet adapter) and using Luci.

However "apk update" gives me:

ERROR: Unable to lock database: temporary error (try again later)
ERROR: Failed to open apk database: temporary error (try again later)
1 Like

What is the goal of installing packages in an initramfs image?
Do you have two usb Ethernet adapters where one is connected to the Internet?

No, just one that is connected to the internet and there was no goal - just some packages that I forgot to include like nano and pciutils etc. But I can make a new image with the missing ones.

I dont know if this is interesting anymore, I kinda lost interest myself now and stopped reading about nanddump when its not going to be a good router to run OpenWRT on.

We'll need a device tree dump if we want to do some actual process on supporting it. Sadly ASUS hasn't released source code for this router yet, so we can't just copy the dts out and modify it to support upstream kernel.

1 Like

OK, I think I am close to doing a correct dump now - have authorized a linux-computer ssh root access - the instructions says to "ssh root@192.168.1.44 md5sum /dev/file* > md5sum.txt"

This is what I see under /dev/:

rwxr-xr-x    3 root     root            60 Jan  1  1970 bus
crw-------    1 root     root        5,   1 Jan  9 11:52 console
lrwxrwxrwx    1 root     root            13 Jan  1  1970 fd -> /proc/self/fd
crw-rw-rw-    1 root     root        1,   7 Jan  1  1970 full
crw-------    1 root     root      254,   0 Jan  1  1970 gpiochip0
crw-------    1 root     root       10, 183 Jan  1  1970 hwrng
crw-------    1 root     root       89,   0 Jan  1  1970 i2c-0
crw-------    1 root     root       89,   1 Jan  1  1970 i2c-1
crw-------    1 root     root        1,  11 Jan  1  1970 kmsg
srw-rw-rw-    1 root     root             0 Jan  1  1970 log
crw-------    1 root     root       10, 237 Jan  1  1970 loop-control
brw-------    1 root     root        7,   0 Jan  1  1970 loop0
brw-------    1 root     root        7,   1 Jan  1  1970 loop1
brw-------    1 root     root        7,   2 Jan  1  1970 loop2
brw-------    1 root     root        7,   3 Jan  1  1970 loop3
brw-------    1 root     root        7,   4 Jan  1  1970 loop4
brw-------    1 root     root        7,   5 Jan  1  1970 loop5
brw-------    1 root     root        7,   6 Jan  1  1970 loop6
brw-------    1 root     root        7,   7 Jan  1  1970 loop7
crw-rw-rw-    1 root     root        1,   3 Jan  1  1970 null
crw-------    1 root     root      253,   0 Jan  1  1970 pmsg0
crw-------    1 root     root        1,   4 Jan  1  1970 port
crw-------    1 root     root      108,   0 Jan  1  1970 ppp
crw-rw-rw-    1 root     root        5,   2 Jan  9 11:47 ptmx
drwxr-xr-x    2 root     root             0 Jan  1  1970 pts
crw-rw-rw-    1 root     root        1,   8 Jan  1  1970 random
lrwxrwxrwx    1 root     root             8 Jan  1  1970 shm -> /tmp/shm
lrwxrwxrwx    1 root     root            15 Jan  1  1970 stderr -> /proc/self/fd/2
lrwxrwxrwx    1 root     root            15 Jan  1  1970 stdin -> /proc/self/fd/0
lrwxrwxrwx    1 root     root            15 Jan  1  1970 stdout -> /proc/self/fd/1
crw-rw-rw-    1 root     root        5,   0 Jan  9 11:52 tty
crw-------    1 root     root        4,  64 Jan  9 11:52 ttyS0
crw-rw----    1 root     dialout     4,  65 Jan  1  1970 ttyS1
crw-rw----    1 root     dialout     4,  74 Jan  1  1970 ttyS10
crw-rw----    1 root     dialout     4,  75 Jan  1  1970 ttyS11
crw-rw----    1 root     dialout     4,  76 Jan  1  1970 ttyS12
crw-rw----    1 root     dialout     4,  77 Jan  1  1970 ttyS13
crw-rw----    1 root     dialout     4,  78 Jan  1  1970 ttyS14
crw-rw----    1 root     dialout     4,  79 Jan  1  1970 ttyS15
crw-rw----    1 root     dialout     4,  66 Jan  1  1970 ttyS2
crw-rw----    1 root     dialout     4,  67 Jan  1  1970 ttyS3
crw-rw----    1 root     dialout     4,  68 Jan  1  1970 ttyS4
crw-rw----    1 root     dialout     4,  69 Jan  1  1970 ttyS5
crw-rw----    1 root     dialout     4,  70 Jan  1  1970 ttyS6
crw-rw----    1 root     dialout     4,  71 Jan  1  1970 ttyS7
crw-rw----    1 root     dialout     4,  72 Jan  1  1970 ttyS8
crw-rw----    1 root     dialout     4,  73 Jan  1  1970 ttyS9
crw-------    1 root     root       10, 127 Jan  1  1970 ubi_ctrl
crw-rw-rw-    1 root     root        1,   9 Jan  1  1970 urandom
crw-------    1 root     root       10, 130 Jan  1  1970 watchdog
crw-------    1 root     root      251,   0 Jan  1  1970 watchdog0
crw-rw-rw-    1 root     root        1,   5 Jan  1  1970 zero

Am I getting closer ? What file(s) would be interesting ?

Stock DevTree: https://drive.google.com/file/d/1L9YzZYriwxG32Ho0VCz6LJjsbaosoSJy/view?usp=sharing

5 Likes

Thanks remittor, takes a load off my unexperienced shoulders :slight_smile:

1 Like

Just adding some info.

This is cat /proc/mtd from the original Asus firmware:

dev:    size   erasesize  name
mtd0: 00400000 00020000 "Bootloader"
mtd1: 07c00000 00020000 "UBI_DEV"
mtd2: 0001f000 0001f000 "nvram"
mtd3: 00155000 0001f000 "Factory"
mtd4: 00155000 0001f000 "Factory2"
mtd5: 040e8000 0001f000 "linux"
mtd6: 03d9d2dc 0001f000 "rootfs"

The content in /dev looks like this:

admin@ZenWiFi_BT8-3964:/dev# ls -l
drwxr-xr-x    3 admin    root            60 Jan  1 01:01 bus
crw-------    1 admin    root        5,   1 Jan  1 01:24 console
crw-------    1 admin    root       10,  63 Jan  1  1970 cpu_dma_latency
crw-rw-rw-    1 admin    root        1,   7 Jan  1  1970 full
crw-------    1 admin    root      254,   0 Jan  1  1970 gpiochip0
crw-------    1 admin    root       10, 183 Jan  1  1970 hwrng
crw-------    1 admin    root       89,   0 Jan  1  1970 i2c-0
crw-------    1 admin    root       89,   1 Jan  1  1970 i2c-1
crw-r--r--    1 admin    root        1,  11 Jan  1  1970 kmsg
srw-rw-rw-    1 admin    root             0 Jan  1 01:24 log
crw-------    1 admin    root        1,   1 Jan  1  1970 mem
crw-------    1 admin    root       90,   0 Jan  1  1970 mtd0
crw-------    1 admin    root       90,   1 Jan  1  1970 mtd0ro
crw-------    1 admin    root       90,   2 Jan  1  1970 mtd1
crw-------    1 admin    root       90,   3 Jan  1  1970 mtd1ro
crw-------    1 admin    root       90,   4 Jan  1  1970 mtd2
crw-------    1 admin    root       90,   5 Jan  1  1970 mtd2ro
crw-------    1 admin    root       90,   6 Jan  1  1970 mtd3
crw-------    1 admin    root       90,   7 Jan  1  1970 mtd3ro
crw-------    1 admin    root       90,   8 Jan  1  1970 mtd4
crw-------    1 admin    root       90,   9 Jan  1  1970 mtd4ro
crw-------    1 admin    root       90,  10 Jan  1  1970 mtd5
crw-------    1 admin    root       90,  11 Jan  1  1970 mtd5ro
crw-------    1 admin    root       90,  12 Jan  1  1970 mtd6
crw-------    1 admin    root       90,  13 Jan  1  1970 mtd6ro
brw-------    1 admin    root       31,   0 Jan  1  1970 mtdblock0
brw-------    1 admin    root       31,   1 Jan  1  1970 mtdblock1
brw-------    1 admin    root       31,   2 Jan  1  1970 mtdblock2
brw-------    1 admin    root       31,   3 Jan  1  1970 mtdblock3
brw-------    1 admin    root       31,   4 Jan  1  1970 mtdblock4
brw-------    1 admin    root       31,   5 Jan  1  1970 mtdblock5
brw-------    1 admin    root       31,   6 Jan  1  1970 mtdblock6
crw-rw-rw-    1 admin    root        1,   3 Jan  1  1970 null
crw-rw-rw-    1 admin    root      228,   0 Jan  1  1970 nvram
crw-------    1 admin    root        1,   4 Jan  1  1970 port
crw-------    1 admin    root      108,   0 Jan  1  1970 ppp
crw-rw-rw-    1 admin    root        5,   2 Jan  1 01:47 ptmx
drwxr-xr-x    2 admin    root             0 Jan  1  1970 pts
crw-------    1 admin    root        2,   0 Jan  1  1970 ptyp0
crw-------    1 admin    root        2,   1 Jan  1  1970 ptyp1
crw-------    1 admin    root        2,   2 Jan  1  1970 ptyp2
crw-------    1 admin    root        2,   3 Jan  1  1970 ptyp3
crw-------    1 admin    root        2,   4 Jan  1  1970 ptyp4
crw-------    1 admin    root        2,   5 Jan  1  1970 ptyp5
crw-------    1 admin    root        2,   6 Jan  1  1970 ptyp6
crw-------    1 admin    root        2,   7 Jan  1  1970 ptyp7
crw-------    1 admin    root        2,   8 Jan  1  1970 ptyp8
crw-------    1 admin    root        2,   9 Jan  1  1970 ptyp9
crw-------    1 admin    root        2,  10 Jan  1  1970 ptypa
crw-------    1 admin    root        2,  11 Jan  1  1970 ptypb
crw-------    1 admin    root        2,  12 Jan  1  1970 ptypc
crw-------    1 admin    root        2,  13 Jan  1  1970 ptypd
crw-------    1 admin    root        2,  14 Jan  1  1970 ptype
crw-------    1 admin    root        2,  15 Jan  1  1970 ptypf
crw-rw-rw-    1 admin    root        1,   8 Jan  1  1970 random
lrwxrwxrwx    1 admin    root             9 Jan  1  1970 root -> mtdblock6
drwxr-xr-x    2 admin    root            40 Jan  1  1970 shm
crw-rw-rw-    1 admin    root        5,   0 Jan  1  1970 tty
crw-------    1 admin    root        4,  64 Jan  1  1970 ttyS0
crw-------    1 admin    root        4,  65 Jan  1  1970 ttyS1
crw-------    1 admin    root        4,  66 Jan  1  1970 ttyS2
crw-------    1 admin    root      251,   0 Jan  1  1970 ttynull
crw-------    1 admin    root        3,   0 Jan  1  1970 ttyp0
crw-------    1 admin    root        3,   1 Jan  1  1970 ttyp1
crw-------    1 admin    root        3,   2 Jan  1  1970 ttyp2
crw-------    1 admin    root        3,   3 Jan  1  1970 ttyp3
crw-------    1 admin    root        3,   4 Jan  1  1970 ttyp4
crw-------    1 admin    root        3,   5 Jan  1  1970 ttyp5
crw-------    1 admin    root        3,   6 Jan  1  1970 ttyp6
crw-------    1 admin    root        3,   7 Jan  1  1970 ttyp7
crw-------    1 admin    root        3,   8 Jan  1  1970 ttyp8
crw-------    1 admin    root        3,   9 Jan  1  1970 ttyp9
crw-------    1 admin    root        3,  10 Jan  1  1970 ttypa
crw-------    1 admin    root        3,  11 Jan  1  1970 ttypb
crw-------    1 admin    root        3,  12 Jan  1  1970 ttypc
crw-------    1 admin    root        3,  13 Jan  1  1970 ttypd
crw-------    1 admin    root        3,  14 Jan  1  1970 ttype
crw-------    1 admin    root        3,  15 Jan  1  1970 ttypf
crw-------    1 admin    root      249,   0 Jan  1  1970 ubi0
crw-------    1 admin    root      249,   1 Jan  1  1970 ubi0_0
crw-------    1 admin    root      249,   2 Jan  1  1970 ubi0_1
crw-------    1 admin    root      249,   3 Jan  1  1970 ubi0_2
crw-------    1 admin    root      249,   4 Jan  1  1970 ubi0_3
crw-------    1 admin    root      249,   5 Jan  1  1970 ubi0_4
crw-------    1 admin    root       10,  62 Jan  1  1970 ubi_ctrl
crw-rw-rw-    1 admin    root        1,   9 Jan  1  1970 urandom
crw-r--r--    1 admin    root      189,   0 Jan  1 01:01 usb1
crw-r--r--    1 admin    root      189, 128 Jan  1 01:01 usb2
crw-rw-rw-    1 admin    root        1,   5 Jan  1  1970 zero

(yes, I know how stupid it was to post the content in /dev from the initramfs earlier - I did not know I could SSH to the original ASUS firmware and could not run commands from the serial console)

Its even possible to run nanddump.

I tried 'nanddump mtd0 -f /tmp/mnt/usb/mtd0copy' and it worked, but I do not know if it is correct.

I got the information regarding the RTL8723N switch from this TechinfoDepot site - It also says its manufactured in Vietnam.

My router seems to be manufactured in China (as you can see in one image above) and so far I have not found any information on the hardware itself or in any logs that it uses a Realtek switch - it seems to be Mediatek ?

Thats probably clear in the DTS file that remittor posted too ?

Here is a partial dmesg from the original Asus firmware, but its mostly nonsence.

7990@NOTICE.FW,ra0,UniCmdBssInfoRate() 362: ucMloCPFixedRateIdx=8
7990@NOTICE.FW,ra0,UniCmdBssInfoRate() 360: Bssid:(ce:28:aa:52:39:64),BcRate=0,McRate=0,ucPreamMode=0,BcFRateIdx=7,McFRateIdx=7
7990@NOTICE.FW,ra0,UniCmdBssInfoRate() 362: ucMloCPFixedRateIdx=8
7990@NOTICE.FW,ra0,UniCmdBssInfoMld() 1435: if_addr(ce:28:aa:52:39:64),mld_group_idx=17,T=26,L=16,GrpMldId=17,MldIdx=17,RemaIdx=255,MldAddr=ce:28:aa:52:39:64
WiFi@ERROR.MLO,bss_mngr_dev_reg() 1482: wdev(2)
WiFi@ERROR.MLO,bss_mngr_fill_bss_info() 1387: dev_type UNDEFINED
WiFi@NOTICE.MLO,bss_mngr_fill_bss_info() 1447: phymode=590, reg_time=4056407296, hw_tsf=24132853
WiFi@ERROR.MLO,bss_mngr_con_dev_reg() 3110: ===> netdev(23) (ra1)
WiFi@WARN.MLO,bss_mngr_con_dev_reg() 3116: 	entry exist!!
WiFi@ERROR.MLO,bss_mngr_con_ie_buf_alloc() 1484: allocated (MLD:000000007f3a5e0b)
WiFi@ERROR.MLO,bss_mngr_con_sync_entry() 2948: [1]
WiFi@NOTICE.MLO,bss_mngr_con_mld_group_add_link() 2386: ===> wdev(ra1) requests to join mld_grp(17)
WiFi@ERROR.MLO,bss_mngr_con_mld_group_add_link() 2402: 	entry(ra1) has already affiliated with mld_grp(17)
WiFi@ERROR.MLO,bss_mngr_con_dev_reg() 3187: <=== entry = 00000000c785c8dc(bss_idx_tx = 1) (dev_cnt = 2)
WiFi@NOTICE.MLO,bss_mngr_con_sync_ml_probe_rsp_per_sta_profile() 5381: ra1(active) sync probe rsp STA-Pf, mlo:1, cnt:1
7990@NOTICE.CFG,ra1,mtk_cfg80211_set_hide_ssid() 135: mwctl:set bss(1) HideSSID=0
WiFi@NOTICE.MLME,ap_mlme_broadcast_deauth_req_action() 256: send broadcast de-auth req, reason=2
7990@NOTICE.SEC,ra1,PMF_PerformTxFrameAction() 1730: [PMF] : GROUP_ROBUST_FRAME
WiFi@NOTICE.RSV,CFG80211_OpsVirtualInfAdd() 3611: 80211> ==>
WiFi@NOTICE.RSV,CFG80211_OpsVirtualInfAdd() 3636: Support WIPHY_FLAG_4ADDR_STATION
WiFi@NOTICE.PROTO,wlan_config_set_ht_bw() 64: ht_bw=1
WiFi@NOTICE.PROTO,wlan_operate_set_support_ch_width_set() 266: ch_width_set=1
WiFi@NOTICE.PROTO,wlan_config_set_vht_bw() 63: vht_bw=1
wlan_config_set_eht_bw: cfg bw = 2
wlan_config_set_eht_tx_nss: cfg tx_nss = 2
wlan_config_set_eht_rx_nss: cfg rx_nss = 2
WiFi@NOTICE.HW,MtAsicSetMbssWdevIfAddrGen2() 365: band_idx=0, mbss_idx=2, if_addr =ce:28:aa:62:39:64
7990@WARN.AP,ra1,mbss_virtual_if_open() 137:  ===> ra2
7990@NOTICE.INIT,ra1,RTMP_COM_IoctlHandle() 1593: -> CMD_RTPRIV_IOCTL_VIRTUAL_INF_INIT
7990@NOTICE.INIT,ra1,RTMP_COM_IoctlHandle() 1566:  -> CMD_RTPRIV_IOCTL_VIRTUAL_INF_UP
WiFi@WARN.CFG,wifi_sys_open() 990: wdev idx = 3
WiFi@NOTICE.HW,MtAsicSetMbssWdevIfAddrGen2() 365: band_idx=0, mbss_idx=2, if_addr =ce:28:aa:62:39:64
7990@WARN.FW,ra1,wdev_attr_update() 497: (): wdevId3 = ce:28:aa:62:39:64
7990@WARN.INIT,ra1,hwifi_add_interface() 589: (caller:HcAcquireRadioForWdev+0x28/0x88 [mt_wifi]), wdev(3,ra2).
mt7990 0000:01:00.0: connac_if_config_bss(): fw_idx 2, omac_idx 12, wmm_idx 0, band_idx 0
7990@WARN.HIF,ra1,hwifi_update_wdev() 516: (caller:mtk_mac_free_hw+0x97c/0x10b0 [mt_wifi]), wdev(3).
7990@NOTICE.CFG80211,ra1,BuildChannelList() 629: BandIdx = 0, PhyMode = 590
7990@NOTICE.CFG80211,ra1,radio_operate_init() 75: coex(1), bNeedFallBack(1).
7990@NOTICE.CFG80211,ra1,operate_loader_phy() 492: (caller:wlan_operate_init+0xbc/0x1c0 [mt_wifi]), PhyMode=590.
7990@NOTICE.CFG80211,ra1,operate_loader_phy() 501: oper_cfg: prim_ch(1), ht_bw(0), extcha(0), vht_bw(0), eht_bw(2), cen_ch_2(0).
WiFi@WARN.PROTO,dump_ht_cap() 36: Caller: wlan_operate_init+0xc4/0x1c0 [mt_wifi]
mt7990 0000:01:00.0: mtk_hwctrl_sta_alloc(G): mld_sta_idx=65535, wcid=1027, hw_sta=0000000074a420bc
7990@NOTICE.HIF,ra1,hwifi_add_bmc_sta() 718: (caller:HcAcquireGroupKeyWcid+0x6c/0x1a8 [mt_wifi]), wdev(3). sw_wcid=1027, bmc_sta->link_wcid=1027
7990@WARN.HW,ra1,AsicRadioOnOffCtrl() 1845: DbdcIdx=0 RadioOn
7990@WARN.CFG80211,ra1,ApAutoChannelAtBootUp() 309: ----------------->
7990@NOTICE.CFG80211,ra1,nl80211_send_acs_complete_event() 4797: 
WiFi@NOTICE.CFG80211,wlan_operate_set_prim_ch() 767: (caller:ApAutoChannelAtBootUp+0x120/0x4e0 [mt_wifi]), wdev_idx:3.
7990@NOTICE.CFG80211,ra1,operate_loader_phy() 492: (caller:wlan_operate_set_prim_ch+0x5c/0x110 [mt_wifi]), PhyMode=590.
7990@NOTICE.CFG80211,ra1,operate_loader_phy() 501: oper_cfg: prim_ch(1), ht_bw(0), extcha(0), vht_bw(0), eht_bw(2), cen_ch_2(0).
WiFi@ERROR.HW,UniCmdTxPwrShowInfo() 23745: u1BandIdx 0, ucTxPowerInfoCatg = 2
7990@ERROR.CFG80211,ra1,DfsBuildChannelList() 4312: [RDM]: wdev is not 5G.
7990@NOTICE.CFG80211,ra1,zero_wait_dfs_switch_ch() 1035: (caller:ApAutoChannelAtBootUp+0x3c0/0x4e0 [mt_wifi]), outband ch 0, ch_stat 0
7990@WARN.RSV,ra1,APStartUpForMbss() 1015: ===>(caller:ap_inf_open+0x1fc/0x640 [mt_wifi]), mbss_idx:2, CfgMode:0
nss_cap->max_nss = 2, nss_cap->max_path =(tx:2 /rx:2)!!
7990@NOTICE.CFG80211,ra1,BuildChannelList() 629: BandIdx = 0, PhyMode = 590
WiFi@NOTICE.CFG80211,wlan_operate_set_ht_bw() 297: (caller:RTMPSetHT+0x120/0x3c0 [mt_wifi]), PhyMode=590.
WiFi@WARN.PROTO,dump_ht_cap() 36: Caller: dump_ht_cap+0x10/0x20 [mt_wifi]
7990@WARN.CFG80211,ra1,APOverlappingBSSScan() 4860: leverage result of wdev(0@BN0), FallBack=1 (remaining 55776 ms)
WiFi@NOTICE.CFG80211,wlan_operate_set_prim_ch() 767: (caller:APOverlappingBSSScan+0x5e0/0x780 [mt_wifi]), wdev_idx:3.
7990@NOTICE.CFG80211,ra1,operate_loader_phy() 492: (caller:wlan_operate_set_prim_ch+0x5c/0x110 [mt_wifi]), PhyMode=590.
7990@NOTICE.CFG80211,ra1,operate_loader_phy() 501: oper_cfg: prim_ch(1), ht_bw(0), extcha(0), vht_bw(0), eht_bw(2), cen_ch_2(0).
WiFi@ERROR.HW,UniCmdTxPwrShowInfo() 23745: u1BandIdx 0, ucTxPowerInfoCatg = 2
WiFi@NOTICE.CFG80211,wlan_operate_set_ht_bw() 297: (caller:APOverlappingBSSScan+0x5f0/0x780 [mt_wifi]), PhyMode=590.
7990@NOTICE.MLO,ra1,eht_ap_mld_create() 6865: ===> Create AP MLD, grp(0), addr(ce:28:aa:62:39:64)
WiFi@NOTICE.MLO,bss_mngr_con_mld_group_create() 1970: ===> mld_grp(0), mld_addr(ce:28:aa:62:39:64)
WiFi@WARN.MLO,mld_grp_aquire() 188: : found non-occupied mld_grp:18
WiFi@ERROR.MLO,mld_grp_aquire() 197: mld_grp [18]
WiFi@NOTICE.MLO,bss_mngr_con_mld_group_create() 2025: 	Old id 0 -> New id 18
7990@NOTICE.MLO,ra1,hwifi_add_mld() 825: (caller:HcAcquireMldRsc+0x2c/0x90 [mt_wifi]) type(1), idx(18), addr(ce:28:aa:62:39:64).
WiFi@NOTICE.MLO,bss_mngr_con_mld_group_create() 2083: 	Create mld_grp(0->18) w/ type(1) addr(ce:28:aa:62:39:64) success
7990@NOTICE.MLO,ra1,eht_ap_mld_create() 6890: 	Create AP MLD Success, grp(18)(ML:0), type(1), addr(ce:28:aa:62:39:64)
WiFi@WARN.RSV,ap_link_up() 9236: (caller:wdev_do_linkup+0x48/0x78 [mt_wifi]), wdev(3)
7990@WARN.CFG,ra1,wifi_sys_linkup() 1447: wdev idx = 3
WiFi@NOTICE.HW,HcAcquireGroupKeyWcid() 396: wdev_idx=3, tr_tb_idx=1027, wcid=1027
WiFi@NOTICE.AP,bssinfo_feature_decision() 643: wdev(3) is legacy bss, func_idx=2, ROLE=0
WiFi@ERROR.MLO,bss_mngr_dev_reg() 1482: wdev(3)
WiFi@ERROR.MLO,bss_mngr_fill_bss_info() 1387: dev_type UNDEFINED
WiFi@NOTICE.MLO,bss_mngr_fill_bss_info() 1447: phymode=590, reg_time=4057607296, hw_tsf=25332699
WiFi@ERROR.MLO,bss_mngr_con_dev_reg() 3110: ===> netdev(24) (ra2)
WiFi@WARN.MLO,bss_idx_aquire() 67: : found non-occupied bssidx:2
WiFi@ERROR.MLO,bss_idx_aquire() 75: : bssidx [2]
WiFi@ERROR.MLO,bss_mngr_con_sync_entry() 2948: [2]
WiFi@NOTICE.MLO,bss_mngr_con_mld_group_add_link() 2386: ===> wdev(ra2) requests to join mld_grp(18)
7990@NOTICE.MLO,ra1,hwifi_mld_add_link() 865: (caller:HcAcquireMldLinkRsc+0x2c/0x90 [mt_wifi]) if(ra2), idx(18).
mt7990 0000:01:00.0: connac_if_mld_add_link(): grp 18, mat 18, mldmat 18, remap 255
WiFi@WARN.MLO,tid_map_sanity() 1743: [2] unmapped_tid(0x0)
WiFi@NOTICE.MLO,bss_mngr_event_bss_attr_update() 51: ===> ra2
wlan_config_set_t2lm_nego_support: cfg t2lm_nego_support = 1
wlan_config_set_emlsr_mr: cfg emlsr_mr = 0
wlan_config_set_trans_to: cfg trans_to = 0
wlan_config_set_eml_omn_en: cfg EML OMN enable = 0
WiFi@NOTICE.MLO,bss_mngr_con_mld_group_add_link() 2494: 	bss_idx(2,ra2) join mld_grp(18) success
7990@ERROR.AP,ra1,UpdateBeaconHandler() 1623: wdev(3) bss not ready (state:2, caller:bss_mngr_event_bcn_update+0x40/0xa0 [mt_wifi])!!
WiFi@ERROR.MLO,bss_mngr_con_dev_reg() 3187: <=== entry = 0000000020aaeb5b(bss_idx_tx = 2) (dev_cnt = 3)
WiFi@NOTICE.MLO,bss_mngr_con_sync_ml_probe_rsp_per_sta_profile() 5381: ra2(active) sync probe rsp STA-Pf, mlo:1, cnt:1
WiFi@NOTICE.MLO,wifi_sys_bss_query_mld() 1997: (in):lk_cnt=1,lk_id=0,mld_gp_idx=18,mld_addr=ce:28:aa:62:39:64
WiFi@NOTICE.MLO,wifi_sys_bss_query_mld() 2012: (out):mld_gp_idx=18,mld_addr=ce:28:aa:62:39:64
WiFi@NOTICE.CFG,mtk_cfg80211_send_bss_ml_event() 12838: ml_event ===> event(0) grp(18) link(0) addr(ce:28:aa:62:39:64)
7990@NOTICE.FW,ra1,UniCmdBssInfoRate() 360: Bssid:(ce:28:aa:62:39:64),BcRate=0,McRate=0,ucPreamMode=0,BcFRateIdx=7,McFRateIdx=7
7990@NOTICE.FW,ra1,UniCmdBssInfoRate() 362: ucMloCPFixedRateIdx=8
7990@NOTICE.FW,ra1,UniCmdBssInfoRate() 360: Bssid:(ce:28:aa:62:39:64),BcRate=0,McRate=0,ucPreamMode=0,BcFRateIdx=7,McFRateIdx=7
7990@NOTICE.FW,ra1,UniCmdBssInfoRate() 362: ucMloCPFixedRateIdx=8
7990@NOTICE.FW,ra1,UniCmdBssInfoMld() 1435: if_addr(ce:28:aa:62:39:64),mld_group_idx=18,T=26,L=16,GrpMldId=18,MldIdx=18,RemaIdx=255,MldAddr=ce:28:aa:62:39:64
WiFi@ERROR.HW,UniCmdTxPowerSKUCtrl() 23298: BandIdx 0, tx_pwr_sku_en: 1
WiFi@ERROR.BF,UniCmdTxBfBackoffCtrl() 23527: BandIdx 0, fgTxBFBackoffEn: 1
WiFi@ERROR.HW,UniCmdTxPowerPercentCtrl() 23375: BandIdx 0, fgTxPowerPercentEn: 0
WiFi@ERROR.HW,UniCmdTxPowerDropCtrl() 23451: BandIdx 0, cPowerDropLevel: 0
u1CCKTxStream = 4 
set wrong parameters
WiFi@WARN.FW,UniCmdResultRsp() 69: BUG::UniCmdResult.u4Status = 0xc0000001 cid: = 0x37
UniEventEDCCAThresholdProc: fginit = 1, EDCCA Threshold=191, 194, 197, 201
WiFi@ERROR.HW,UniCmdTxPwrShowInfo() 23745: u1BandIdx 0, ucTxPowerInfoCatg = 2
7990@WARN.CFG,ra1,set_pp_on_off_ctrl() 190: band(0),enable(0) success!
WiFi@NOTICE.CFG80211,wlan_operate_set_ht_bw() 297: (caller:ap_inf_open+0x514/0x640 [mt_wifi]), PhyMode=590.
mtk_ppe_dev_register_hook : ineterface ra2 register (3)
WiFi@ERROR.RSV,CFG80211_OpsUpdate_mgmt_frame_registrations() 2390: UNSUPPORT mgmt frame type mask: 0x5 for intf ra2
WiFi@ERROR.RSV,CFG80211_OpsUpdate_mgmt_frame_registrations() 2390: UNSUPPORT mgmt frame type mask: 0x800 for intf ra2
WiFi@NOTICE.RSV,CFG80211_OpsUpdate_mgmt_frame_registrations() 2381: PROBE frame was unregistered for intf ra2
WiFi@ERROR.RSV,CFG80211_OpsUpdate_mgmt_frame_registrations() 2390: UNSUPPORT mgmt frame type mask: 0x800 for intf ra2
WiFi@ERROR.RSV,CFG80211_OpsUpdate_mgmt_frame_registrations() 2390: UNSUPPORT mgmt frame type mask: 0x5 for intf ra2
WiFi@NOTICE.RSV,CFG80211_OpsUpdate_mgmt_frame_registrations() 2381: PROBE frame was registered for intf ra2
7990@NOTICE.CFG,ra1,mtk_cfg80211_ft_ie() 11652: ifname: ra0
7990@NOTICE.CFG,ra1,parse_hostapd_ftie() 11601: OwnMac: ce28aa623964
7990@ERROR.CFG,ra1,parse_hostapd_ftie() 11633: 11R disabled in driver
WiFi@NOTICE.RSV,CFG80211_OpsStartAp() 2599: 80211> ==>
WiFi@NOTICE.RSV,CFG80211DRV_OpsBeaconAdd() 1455: 80211> ==>
WiFi@NOTICE.RSV,CFG80211DRV_OpsBeaconAdd() 1465: 80211> ==> apidx=2, tr_tb_idx=1027
7990@NOTICE.SEC,ra1,CFG80211DRV_UpdateApSettingFromBeacon() 457: hostapd config pwe_method:1 and saepk is :0
7990@NOTICE.AP,ra1,CFG80211DRV_UpdateApSettingFromBeacon() 483: beacon capability info field: 0431
7990@ERROR.AP,ra1,CFG80211DRV_UpdateApSettingFromBeacon() 875: MDIE is NULL
7990@NOTICE.AP,ra1,CFG80211_ParseBeaconIE() 1881: =>wpa(1 0 0), AuthMode=WPA2PSK, Cipher(AES AES), MFPC=0, MFPR=0, igtk_cipher=0x0
7990@NOTICE.AP,ra1,CFG80211DRV_UpdateApSettingFromBeacon() 1101: security (akm, pcipher, gcipher, igtk):  0x880, 0x20, 0x20, 0x200
WiFi@NOTICE.AP,bssinfo_feature_decision() 643: wdev(3) is legacy bss, func_idx=2, ROLE=0
7990@NOTICE.FW,ra1,UniCmdBssInfoRate() 360: Bssid:(ce:28:aa:62:39:64),BcRate=0,McRate=0,ucPreamMode=0,BcFRateIdx=7,McFRateIdx=7
7990@NOTICE.FW,ra1,UniCmdBssInfoRate() 362: ucMloCPFixedRateIdx=8
7990@NOTICE.FW,ra1,UniCmdBssInfoRate() 360: Bssid:(ce:28:aa:62:39:64),BcRate=0,McRate=0,ucPreamMode=0,BcFRateIdx=7,McFRateIdx=7
7990@NOTICE.FW,ra1,UniCmdBssInfoRate() 362: ucMloCPFixedRateIdx=8
7990@NOTICE.FW,ra1,UniCmdBssInfoMld() 1435: if_addr(ce:28:aa:62:39:64),mld_group_idx=18,T=26,L=16,GrpMldId=18,MldIdx=18,RemaIdx=255,MldAddr=ce:28:aa:62:39:64
WiFi@ERROR.MLO,bss_mngr_dev_reg() 1482: wdev(3)
WiFi@ERROR.MLO,bss_mngr_fill_bss_info() 1387: dev_type UNDEFINED
WiFi@NOTICE.MLO,bss_mngr_fill_bss_info() 1447: phymode=590, reg_time=4058027296, hw_tsf=25753700
WiFi@ERROR.MLO,bss_mngr_con_dev_reg() 3110: ===> netdev(24) (ra2)
WiFi@WARN.MLO,bss_mngr_con_dev_reg() 3116: 	entry exist!!
WiFi@ERROR.MLO,bss_mngr_con_ie_buf_alloc() 1484: allocated (MLD:00000000a3966614)
WiFi@ERROR.MLO,bss_mngr_con_sync_entry() 2948: [2]
WiFi@NOTICE.MLO,bss_mngr_con_mld_group_add_link() 2386: ===> wdev(ra2) requests to join mld_grp(18)
WiFi@ERROR.MLO,bss_mngr_con_mld_group_add_link() 2402: 	entry(ra2) has already affiliated with mld_grp(18)
WiFi@ERROR.MLO,bss_mngr_con_dev_reg() 3187: <=== entry = 0000000020aaeb5b(bss_idx_tx = 2) (dev_cnt = 3)
WiFi@NOTICE.MLO,bss_mngr_con_sync_ml_probe_rsp_per_sta_profile() 5381: ra2(active) sync probe rsp STA-Pf, mlo:1, cnt:1
7990@NOTICE.CFG,ra2,mtk_cfg80211_set_hide_ssid() 135: mwctl:set bss(2) HideSSID=0
WiFi@NOTICE.MLME,ap_mlme_broadcast_deauth_req_action() 256: send broadcast de-auth req, reason=2
7990@NOTICE.SEC,ra2,PMF_PerformTxFrameAction() 1730: [PMF] : GROUP_ROBUST_FRAME
WiFi@NOTICE.RSV,CFG80211_OpsUpdate_mgmt_frame_registrations() 2386: ACTION frame was registered for intf rai0
WiFi@ERROR.RSV,CFG80211_OpsUpdate_mgmt_frame_registrations() 2390: UNSUPPORT mgmt frame type mask: 0x800 for intf rai0
WiFi@ERROR.RSV,CFG80211_OpsUpdate_mgmt_frame_registrations() 2390: UNSUPPORT mgmt frame type mask: 0x5 for intf rai0
WiFi@NOTICE.RSV,CFG80211_OpsUpdate_mgmt_frame_registrations() 2381: PROBE frame was registered for intf rai0
WiFi@NOTICE.INIT,RTMP_COM_IoctlHandle() 1593: -> CMD_RTPRIV_IOCTL_VIRTUAL_INF_INIT
get_dev_l2profile: Band1: profile path=/etc/wireless/mediatek/mt7990.b1.dat
mt7990 0000:01:00.0: Direct firmware load for mediatek/mt7990.b1.dat failed with error -2
mt7990 0000:01:00.0: Falling back to sysfs fallback for: mediatek/mt7990.b1.dat
firmware mediatek!mt7990.b1.dat: firmware_loading_store: unexpected value (0)
RtmpMgmtTaskInit(956): task_name is RtmpCmdQTask_01
WscThreadInit(11511): task_name is RtmpWscTask_01
bcn_bpcc_TaskInit(3824): task_name is BPCCCmdQTask_01
ser_init(313): task_name is ser_task_01
WiFi@WARN.RX,UserCfgInit() 974: [DPP]: Gas DL List Init!
get_dev_l2profile: Band1: profile path=/etc/wireless/mediatek/mt7990.b1.dat
mt7990 0000:01:00.0: Direct firmware load for mediatek/mt7990.b1.dat failed with error -2
mt7990 0000:01:00.0: Falling back to sysfs fallback for: mediatek/mt7990.b1.dat
firmware mediatek!mt7990.b1.dat: firmware_loading_store: unexpected value (0)
WiFi@ERROR.CFG,RTMPWirelessModeCfg() 391: Init: BSS0 PhyMode=1201
WiFi@ERROR.CFG,RTMPHide11BEIE() 362: Init: BSS0 Hide[Multi-Link:0 EHT_CAP:0 EHT_OP:0 EXTRA_IE:0]
WiFi@ERROR.CFG,RTMPHide11BEIE() 362: Init: BSS1 Hide[Multi-Link:0 EHT_CAP:0 EHT_OP:0 EXTRA_IE:0]
WiFi@WARN.CFG80211,auto_ch_select_set_cfg() 4092: AutoChannelAtBootup=1, AutoChannelAlg = 3
configure(rai0)bVLAN_Tag=1
WiFi@NOTICE.CFG,RTMPSetProfileParameters() 6850: IEEE80211H=1
WiFi@ERROR.SEC,Set_PMFMFPC_Proc() 2178: [PMF] :: apidx=0, Desired MFPC=1
WiFi@ERROR.SEC,Set_PMFMFPC_Proc() 2178: [PMF] :: apidx=1, Desired MFPC=1
WiFi@ERROR.SEC,Set_ApCliPMFMFPC_Proc() 2547: [PMF]: MFPC=0, MFPR=0, SHA256=0
WiFi@ERROR.SEC,Set_ApCliPMFMFPR_Proc() 2611: [PMF]: MFPC=0, MFPR=0, SHA256=0
WiFi@NOTICE.PROTO,wlan_config_set_ht_bw() 64: ht_bw=1
WiFi@NOTICE.PROTO,wlan_operate_set_support_ch_width_set() 266: ch_width_set=1
WiFi@NOTICE.PROTO,wlan_config_set_ht_bw() 64: ht_bw=1
WiFi@NOTICE.PROTO,wlan_operate_set_support_ch_width_set() 266: ch_width_set=1
WiFi@NOTICE.PROTO,wlan_config_set_ht_bw() 64: ht_bw=1
WiFi@NOTICE.PROTO,wlan_operate_set_support_ch_width_set() 266: ch_width_set=1
wlan_config_set_eht_tx_nss: cfg tx_nss = 3
wlan_config_set_eht_tx_nss: cfg tx_nss = 3
wlan_config_set_eht_rx_nss: cfg rx_nss = 3
wlan_config_set_eht_rx_nss: cfg rx_nss = 3
WiFi@NOTICE.PROTO,wlan_config_set_vht_bw() 63: vht_bw=2
WiFi@NOTICE.PROTO,wlan_config_set_vht_bw() 63: vht_bw=2
WiFi@NOTICE.PROTO,wlan_config_set_vht_bw() 63: vht_bw=2
BSS0 mld_grp_idx=16
BSS1 mld_grp_idx=0
BSS0 mld_grp_idx=16 (02:28:aa:72:39:64)
Line.1432 - AP Band1(MBSS0) ==> wlan_config_set_eht_bw: cfg bw = 3
wlan_config_set_eht_bw: cfg bw = 3
Line.1432 - AP Band1(MBSS1) ==> wlan_config_set_eht_bw: cfg bw = 3
Line.1545 - AP Band1(MBSS0) ==> wlan_config_set_t2lm_nego_support: cfg t2lm_nego_support = 1
Line.1545 - AP Band1(MBSS1) ==> wlan_config_set_t2lm_nego_support: cfg t2lm_nego_support = 1
I/F STA (ra0) ==> ApcliMloDisable = 1
bss_color_profile_enable: value = 255
twt_ctrl_init()
WiFi@NOTICE.RSV,hwifi_start() 383: 
mt7990 0000:01:00.0: connac_if_start()
WiFi@NOTICE.CFG,UniCmdFwDup11vMbssBcn() 7941: WM DUP BCN = 0
WiFi@NOTICE.FW,MtUniCmdFwMbssBcnDup() 9055: (Ret = 0, bWMDup=0)
WiFi@NOTICE.INIT,hwifi_start() 436: MAC Init Done!
efuse_probe: efuse = 0
WiFi@NOTICE.HW,mt7990_get_band_select_from_eeprom() 1172: band_idx:1, band_sel:2
mt7990 sku: 0 ADIE_76_77_77
mt7990 sku: 0 ADIE_76_77_77
WiFi@NOTICE.HW,NICReadEEPROMParameters() 524: mac efuse ready done, ignore efuse set to fw.
NICReadEEPROMParameters: MacAddrAdj=0x0
WiFi@ERROR.HW,antenna_default_reset() 1090: value = 0x1b, TxPath = 3, RxPath = 3
wlan_config_set_eht_tx_nss: cfg tx_nss = 3
wlan_config_set_eht_rx_nss: cfg rx_nss = 3
wlan_config_set_eht_tx_nss: cfg tx_nss = 3
wlan_config_set_eht_rx_nss: cfg rx_nss = 3
WiFi@NOTICE.INIT,hwifi_start() 453: EEPROM Init Done!
WiFi@NOTICE.AP,cfg80211_StateMachineInit() 3110: 
ch_switch_monitor_state_machine_init:: enter
ch_switch_monitor_cfg_reset:: enter
MlmeInit(1934): task_name is RtmpMlmeTask_01
WiFi@ERROR.HW,HcGetBandByWdev() 596: no hook api, please check.
WiFi@NOTICE.CFG80211,UNI_Set_SCSEnable_Proc() 4916: : BandIdx=0, SCSEnable=1
WiFi@NOTICE.CFG80211,UNI_Set_SCSEnable_Proc() 4925: (Ret = 0_
SCS_init(): SCS Default Enable, Ret=0
WiFi@ERROR.HW,set_ack_timeout_mode_byband() 12813: CTS/ACK Timeout Range should between [0xFFFF:0]!!
WiFi@ERROR.HW,set_datcfg_ack_cts_timeout() 12907: DAT config band(1) cck_timeout Fail!
WiFi@ERROR.HW,set_ack_timeout_mode_byband() 12813: CTS/ACK Timeout Range should between [0xFFFF:0]!!
WiFi@ERROR.HW,set_datcfg_ack_cts_timeout() 12918: DAT config band(1) ofdm_timeout Fail!
WiFi@ERROR.HW,set_ack_timeout_mode_byband() 12813: CTS/ACK Timeout Range should between [0xFFFF:0]!!
WiFi@ERROR.HW,set_datcfg_ack_cts_timeout() 12929: DAT config band(1) ofdma_timeout Fail!
WiFi@NOTICE.PROTO,wlan_config_set_ht_bw() 64: ht_bw=1
WiFi@NOTICE.PROTO,wlan_operate_set_support_ch_width_set() 266: ch_width_set=1
WiFi@NOTICE.PROTO,wlan_config_set_vht_bw() 63: vht_bw=2
wlan_config_set_eht_bw: cfg bw = 3
wlan_config_set_eht_tx_nss: cfg tx_nss = 3
wlan_config_set_eht_rx_nss: cfg rx_nss = 3
WiFi@NOTICE.RSV,CFG80211_SupBandInit() 488: 80211> RFICType= 7, NumOfChan= 108, ReInit = 1
WiFi@NOTICE.RSV,CFG80211_SupBandInit() 490: 80211> Number of rate = 12
mt_serv_get_chip_info: 4276
[mt_serv_init_test][515]: band_num = 3, band_idx = 1
WiFi@NOTICE.INIT,RTMP_COM_IoctlHandle() 1566:  -> CMD_RTPRIV_IOCTL_VIRTUAL_INF_UP
WiFi@WARN.CFG,wifi_sys_open() 990: wdev idx = 0
WiFi@NOTICE.HW,MtAsicSetMbssWdevIfAddrGen2() 365: band_idx=1, mbss_idx=0, if_addr =cc:28:aa:72:39:65
WiFi@WARN.FW,wdev_attr_update() 497: (): wdevId0 = cc:28:aa:72:39:65
WiFi@WARN.INIT,hwifi_add_interface() 589: (caller:HcAcquireRadioForWdev+0x28/0x88 [mt_wifi]), wdev(0,rai0).
mt7990 0000:01:00.0: connac_if_config_bss(): fw_idx 3, omac_idx 0, wmm_idx 0, band_idx 1
WiFi@WARN.HIF,hwifi_update_wdev() 516: (caller:mtk_mac_free_hw+0x97c/0x10b0 [mt_wifi]), wdev(0).
WiFi@NOTICE.CFG80211,BuildChannelList() 629: BandIdx = 1, PhyMode = 1201
[Nop_List_Backup] NopList Channel count:0 <----
WiFi@NOTICE.RSV,CFG80211OS_UpdateRegRuleByRegionIdx() 1412: pChDesc2G=0000000000000000, pChDesc5G=00000000937e6ee8, pChDesc6G=0000000000000000
WiFi@NOTICE.RSV,cfg80211_clear_band_info() 1384: band_idx=0
WiFi@NOTICE.RSV,cfg80211_clear_band_info() 1384: band_idx=3
WiFi@NOTICE.CFG80211,BuildChannelList() 677: BandIdx = 1, PhyMode = 1201, ChListNum = 19:
WiFi@ERROR.CFG80211,DfsAdjustOpBwSetting() 7339: [Phil]: CurrentBw: 0, NewBw 2
WiFi@NOTICE.CFG80211,radio_operate_init() 75: coex(1), bNeedFallBack(0).
WiFi@NOTICE.CFG80211,operate_loader_phy() 492: (caller:wlan_operate_init+0xbc/0x1c0 [mt_wifi]), PhyMode=1201.
WiFi@NOTICE.CFG80211,operate_loader_phy() 501: oper_cfg: prim_ch(0), ht_bw(1), extcha(3), vht_bw(2), eht_bw(3), cen_ch_2(0).
WiFi@ERROR.CFG80211,phy_freq_adjust() 172: no prim_ch value for adjust!
WiFi@ERROR.CFG80211,operate_loader_phy() 511: phy_freq_adjust failed!
WiFi@WARN.PROTO,dump_ht_cap() 36: Caller: wlan_operate_init+0xc4/0x1c0 [mt_wifi]
mt7990 0000:01:00.0: mtk_hwctrl_sta_alloc(G): mld_sta_idx=65535, wcid=1028, hw_sta=00000000cab502b2
WiFi@NOTICE.HIF,hwifi_add_bmc_sta() 718: (caller:HcAcquireGroupKeyWcid+0x6c/0x1a8 [mt_wifi]), wdev(0). sw_wcid=1028, bmc_sta->link_wcid=1028
WiFi@WARN.HW,AsicRadioOnOffCtrl() 1845: DbdcIdx=1 RadioOn
WiFi@WARN.CFG80211,ApAutoChannelAtBootUp() 309: ----------------->
WiFi@NOTICE.CFG80211,AutoChSelBuildChannelListFor56G() 3378: acs_max_prio(3), ch_max_prio(3)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(36), Prio(1)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(40), Prio(1)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(44), Prio(1)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(48), Prio(1)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(52), Prio(1)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(56), Prio(1)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(60), Prio(1)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(64), Prio(1)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(100), Prio(3)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(104), Prio(3)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(108), Prio(3)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(112), Prio(3)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(116), Prio(3)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(120), Prio(3)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(124), Prio(3)
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3132: Ch(128), Prio(3)
WiFi@WARN.CFG80211,build_acs_scan_ch_list_by_bw() 3136: ChListNum56G = 16
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel= 36, CenChannel= 50, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=1
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel= 40, CenChannel= 50, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=1
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel= 44, CenChannel= 50, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=1
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel= 48, CenChannel= 50, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=1
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel= 52, CenChannel= 50, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=1
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel= 56, CenChannel= 50, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=1
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel= 60, CenChannel= 50, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=1
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel= 64, CenChannel= 50, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=1
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel=100, CenChannel=114, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=3
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel=104, CenChannel=114, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=3
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel=108, CenChannel=114, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=3
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel=112, CenChannel=114, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=3
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel=116, CenChannel=114, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=3
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel=120, CenChannel=114, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=3
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel=124, CenChannel=114, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=3
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3231: PrimChannel=128, CenChannel=114, BW=3, BwCap=1, SkipChannel=0, BuildDone=1, ChannelPriority=3
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3265: ChListNum(16).
WiFi@NOTICE.CFG80211,build_acs_scan_ch_list_by_bw() 3296: ACSChListNum = 16, ACSChBW = 3
WiFi@ERROR.AP,UpdateBeaconHandler() 1623: wdev(0) bss not ready (state:0, caller:MTAPAutoSelectChannel+0xb8/0x2d8 [mt_wifi])!!
mt7990 0000:01:00.0: connac_if_config_phy(): update channel to 36
WiFi@NOTICE.CFG80211,DfsSwitchCheck() 4531: DFS ByPass TX calibration.
WiFi@NOTICE.CFG80211,UniCmdChannelSwitch() 6331: ctl_chl=36, cen_ch=36, eht_cen_ch=0, DBDCIdx=1, Band=1, BW=0, scan=1
WiFi@NOTICE.CFG80211,UniCmdChannelSwitch() 6431: TXStream=3, RXStream=3, 


On the box of my router it says:
H/W version B1

I tried the Initramfs files for Bananapi and Mediatek again, but I get this error with the .itb files:

Working FDT set to 45f00000
   Uncompressing Kernel Image to 46000000
lzma compressed: uncompress error 1
Must RESET board to recover
Resetting the board...

There's little reason to some you have another Realtek switch on board, the main SoC can handle that. Would mean a heavier BOM for Asus.

1 Like

Im hoping someone with more knowledge than me are looking at this now.

The initramfs image just says:

[   37.778499] platform 15020000.switch: deferred probe pending
[   37.784162] platform 15100000.ethernet: deferred probe pending

The wireless chips seems to be identical to the ones in the Banana pi Wifi7 card and I tried getting wireless to work yesterday , but there were just timeouts.

[   61.288084] mt7996e 0000:01:00.0: Message 0012002d (seq 6) timeout

I guess the Adtran smartrg image just uses other hardware adresses ?

Are there there any package I can add to the initramfs image that can analyze the hardware and give me more information ?

Or a command I can run on the original Asus firmware ?

The "UDE L22T027-0" and "UDE L22N001-0" are just hardware chips for the network ports ?

Edit:

lspci -v on the initramfs image compared to the same information from the Banana Pi BPI-R4:

root@OpenWrt:~# lspci -v
00:00.0 PCI bridge: MEDIATEK Corp. Device 7988 (rev 01) (prog-if 00 [Normal decode])
	Device tree node: /sys/firmware/devicetree/base/soc/pcie@11300000/pcie@0,0
	Flags: bus master, fast devsel, latency 0, IRQ 115
	Memory at 30500000 (64-bit, non-prefetchable) [size=32K]
	Bus: primary=00, secondary=01, subordinate=01, sec-latency=0
	I/O behind bridge: [disabled] [32-bit]
	Memory behind bridge: 30400000-304fffff [size=1M] [32-bit]
	Prefetchable memory behind bridge: 30200000-303fffff [size=2M] [32-bit]
	Capabilities: [80] Express Root Port (Slot-), IntMsgNum 0
	Capabilities: [e0] MSI: Enable+ Count=1/32 Maskable+ 64bit+
	Capabilities: [f8] Power Management version 3
	Capabilities: [100] Vendor Specific Information: ID=1556 Rev=1 Len=008 <?>
	Capabilities: [110] L1 PM Substates
	Capabilities: [200] Advanced Error Reporting
	Capabilities: [300] Secondary PCI Express
	Kernel driver in use: pcieport
lspci: Unable to load libkmod resources: error -2

01:00.0 Network controller: MEDIATEK Corp. Device 7990
	Subsystem: MEDIATEK Corp. Device 6639
	Device tree node: /sys/firmware/devicetree/base/soc/pcie@11300000/pcie@0,0/mt7996@0,0
	Flags: bus master, fast devsel, latency 0, IRQ 118
	Memory at 30200000 (64-bit, prefetchable) [size=2M]
	Memory at 30400000 (64-bit, non-prefetchable) [size=32K]
	Capabilities: [80] Express Endpoint, IntMsgNum 0
	Capabilities: [e0] MSI: Enable+ Count=1/32 Maskable+ 64bit+
	Capabilities: [f8] Power Management version 3
	Capabilities: [100] Vendor Specific Information: ID=1556 Rev=1 Len=008 <?>
	Capabilities: [108] Latency Tolerance Reporting
	Capabilities: [110] L1 PM Substates
	Capabilities: [200] Advanced Error Reporting
	Capabilities: [300] Secondary PCI Express
	Kernel driver in use: mt7996e

ASUS BT running Adtran Smartrg initramfs

root@BPI_R4_AP_Wifi7_1:~# lspci -v
0000:00:00.0 PCI bridge: MEDIATEK Corp. Device 7988 (rev 01) (prog-if 00 [Normal decode])
	Flags: bus master, fast devsel, latency 0, IRQ 116
	Memory at 30500000 (64-bit, non-prefetchable) [size=32K]
	Bus: primary=00, secondary=01, subordinate=01, sec-latency=0
	I/O behind bridge: [disabled] [32-bit]
	Memory behind bridge: 30400000-304fffff [size=1M] [32-bit]
	Prefetchable memory behind bridge: 30200000-303fffff [size=2M] [32-bit]
	Capabilities: [80] Express Root Port (Slot-), IntMsgNum 0
	Capabilities: [e0] MSI: Enable+ Count=1/32 Maskable+ 64bit+
	Capabilities: [f8] Power Management version 3
	Capabilities: [100] Vendor Specific Information: ID=1556 Rev=1 Len=008 <?>
	Capabilities: [110] L1 PM Substates
	Capabilities: [200] Advanced Error Reporting
	Capabilities: [300] Secondary PCI Express
	Kernel driver in use: pcieport
lspci: Unable to load libkmod resources: error -2

0000:01:00.0 Network controller: MEDIATEK Corp. Device 7990
	Subsystem: MEDIATEK Corp. Device 6639
	Flags: bus master, fast devsel, latency 0, IRQ 126
	Memory at 30200000 (64-bit, prefetchable) [size=2M]
	Memory at 30400000 (64-bit, non-prefetchable) [size=32K]
	Capabilities: [80] Express Endpoint, IntMsgNum 0
	Capabilities: [e0] MSI: Enable+ Count=1/32 Maskable+ 64bit+
	Capabilities: [f8] Power Management version 3
	Capabilities: [100] Vendor Specific Information: ID=1556 Rev=1 Len=008 <?>
	Capabilities: [108] Latency Tolerance Reporting
	Capabilities: [110] L1 PM Substates
	Capabilities: [200] Advanced Error Reporting
	Capabilities: [300] Secondary PCI Express
	Kernel driver in use: mt7996e

0001:00:00.0 PCI bridge: MEDIATEK Corp. Device 7988 (rev 01) (prog-if 00 [Normal decode])
	Flags: bus master, fast devsel, latency 0, IRQ 119
	Memory at 38500000 (64-bit, non-prefetchable) [size=32K]
	Bus: primary=00, secondary=01, subordinate=01, sec-latency=0
	I/O behind bridge: [disabled] [32-bit]
	Memory behind bridge: 38400000-384fffff [size=1M] [32-bit]
	Prefetchable memory behind bridge: 38200000-383fffff [size=2M] [32-bit]
	Capabilities: [80] Express Root Port (Slot-), IntMsgNum 0
	Capabilities: [e0] MSI: Enable+ Count=1/32 Maskable+ 64bit+
	Capabilities: [f8] Power Management version 3
	Capabilities: [100] Vendor Specific Information: ID=1556 Rev=1 Len=008 <?>
	Capabilities: [110] L1 PM Substates
	Capabilities: [200] Advanced Error Reporting
	Capabilities: [300] Secondary PCI Express
	Kernel driver in use: pcieport

0001:01:00.0 Network controller: MEDIATEK Corp. Device 7991
	Subsystem: MEDIATEK Corp. Device 6639
	Flags: bus master, fast devsel, latency 0, IRQ 127
	Memory at 38200000 (64-bit, prefetchable) [size=2M]
	Memory at 38400000 (64-bit, non-prefetchable) [size=32K]
	Capabilities: [80] Express Endpoint, IntMsgNum 0
	Capabilities: [e0] MSI: Enable+ Count=1/32 Maskable+ 64bit+
	Capabilities: [f8] Power Management version 3
	Capabilities: [100] Vendor Specific Information: ID=1556 Rev=1 Len=008 <?>
	Capabilities: [108] Latency Tolerance Reporting
	Capabilities: [110] L1 PM Substates
	Capabilities: [200] Advanced Error Reporting
	Capabilities: [300] Secondary PCI Express
	Kernel driver in use: mt7996e_hif

Banana Pi BPI-R4

One more small thing this is printenv from the Uboot:

U-Boot 2024.04 (May 30 2024 - 18:58:13 +0800)
MT7988> printenv
baudrate=115200
bootcmd=mmc read 0x40000000 0x00004400 0x0010000; fdt addr $(fdtcontroladdr); fdt rm /signature; bootm 0x40000000
bootdelay=2
bootfile=BT8.trx
eth1addr=cc:28:aa:72:39:65
ethaddr=cc:28:aa:72:39:64
fdtcontroladdr=7f7fd2f0
filesize=155000
ipaddr=192.168.1.1
loadaddr=0x46000000
mtdids=spi-nand0=spi-nand0
mtdparts=mtdparts=spi-nand0:1024k(BL2),512k(environment),2560k(FIP),-(UBI_DEV)
netmask=255.255.255.0
serverip=192.168.1.70
stderr=serial@11000000
stdin=serial@11000000
stdout=serial@11000000

Environment size: 510/131068 bytes

From the startlog of the original firmware:

Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011)
IMQ driver loaded successfully. (numdevs = 8, numqueues = 1, imq_dev_accurate_stats = 1)
	Hooking IMQ after NAT on PREROUTING.
	Hooking IMQ before NAT on POSTROUTING.
mt7988-pinctrl 1001f000.pinctrl: invalid function mdio in map table
[mtk_hw_init] reset_lock:0, force:0
[mtk_hw_init] execute fe cold reset
mtk_soc_eth 15100000.ethernet: MDC is running on 8333333 Hz
Maxlinear Ethernet GPY211C mdio-bus:05: Firmware Version: 0x886F (release)
mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc010b00000, irq 13
mtk_soc_eth 15100000.ethernet eth1: mediatek frame engine at 0xffffffc010b00000, irq 13
mtk_soc_eth 15100000.ethernet eth2: mediatek frame engine at 0xffffffc010b00000, irq 13

Isnt

Maxlinear Ethernet GPY211C

something that already has support in other Openwrt routers ?

And I assume that

mtk-soc-eth

means that it is a Mediatek switch after all ?

I realize I haven't posted the full startlog of the original firmware yet but I think its too long for the single post limit in this forum.

Will get back with an edit or a new post with the second half of the startlog at least :slight_smile:

Edit: This from the full log also sounds like a Mediatek ethernet

MediaTek MT7988 PHY dsa-0.0:00: TX-VCM SW cal result: 0x3
MediaTek MT7988 PHY dsa-0.0:01: TX-VCM SW cal result: 0x3
MediaTek MT7988 PHY dsa-0.0:02: TX-VCM SW cal result: 0x3
MediaTek MT7988 PHY dsa-0.0:03: TX-VCM SW cal result: 0x3
mt7530 mdio-bus:1f lan2 (uninitialized): PHY [dsa-0.0:01] driver [MediaTek MT7988 PHY]
mt7530 mdio-bus:1f lan1 (uninitialized): PHY [dsa-0.0:02] driver [MediaTek MT7988 PHY]
mt7530 mdio-bus:1f: configuring for fixed/10gbase-kr link mode

Full startlog original firmware:

Terminal ready

F0: 102B 0000
FA: 1042 0000
FA: 1042 0000 [0200]
F9: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 0600 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [1000]
MK: 0000 0000 [0000]
T0: 0000 019F [0101]
Jump to BL

NOTICE:  BL2: v2.10.0(release):
NOTICE:  BL2: Built : 14:59:39, May 28 2024
NOTICE:  WDT: Cold boot
NOTICE:  WDT: disabled
NOTICE:  CPU: MT7988
NOTICE:  EMI: Using DDR4 settings
NOTICE:  EMI: Detected DRAM size: 1024 MB
NOTICE:  EMI: complex R/W mem test passed
NOTICE:  SPI_NAND parses attributes from parameter page.
NOTICE:  SPI_NAND Detected ID 0xef
NOTICE:  Page size 2048, Block size 131072, size 134217728
NOTICE:  BL2: Booting BL31
NOTICE:  BL31: v2.10.0(release):
NOTICE:  BL31: Built : 14:59:48, May 28 2024


U-Boot 2024.04 (May 30 2024 - 18:58:13 +0800)
BT8 bootloader version: 1.0.0.2

CPU:   MediaTek MT7988
Model: mt7988-rfb
DRAM:  1 GiB
Core:  44 devices, 12 uclasses, devicetree: separate
Loading Environment from MTD... 
SPINAND raw ID: EF AE 21 
spi-nand: spi_nand spi_nand@0: Winbond W25N01KV SPI NAND was found.
spi-nand: spi_nand spi_nand@0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 94, ECC strength 4/512, custom ECC status.
OK
In:    serial@11000000
Out:   serial@11000000
Err:   serial@11000000
ASUS BT8 gpio/led init
Net:   eth0: ethernet@15100000
ubi0: attaching mtd4
ubi0: scanning is finished
ubi0: attached mtd4 (name "UBI_DEV", size 124 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 992, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 5, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 8/4, WL threshold: 4096, image sequence number: 1694403399
ubi0: available PEBs: 0, total reserved PEBs: 992, PEBs reserved for bad PEB handling: 20
UBI:   vol_id  reserved_pebs  alignment  data_pad  vol_type  usable_leb_size  used_ebs  used_bytes  last_eb_bytes  corrupted  upd_marker  name_len  name
UBI:        0              1          1         0   dynamic            1f000         1       1f000         1f000          0           0         5  nvram
UBI:        1              b          1         0   dynamic            1f000         b      155000         1f000          0           0         7  Factory
UBI:        2              b          1         0   dynamic            1f000         b      155000         1f000          0           0         8  Factory2
UBI:        3            218          1         0   dynamic            1f000       218     40e8000         1f000          0           0         5  linux
UBI:        4            199          1         0   dynamic            1f000       199     3187000         1f000          0           0         5  jffs2
UBI: 7fffefff              2          1         0   dynamic            1f000         2       3e000             2          0           0         d  layout volume
Read 1396736 bytes from volume Factory to 000000007f6a7ff0
EEPROM set 0: OK (version 109)
Read 1396736 bytes from volume Factory2 to 000000007f6a7ff0
EEPROM set 1: OK (version 109)
Read 1396736 bytes from volume Factory to 000000007fb3fbf0
Select EEPROM set 0 at offset 0x0.

BT8 bootloader version: 1.0.0.2
MAC Address: CC:28:AA:72:39:64

Please choose the operation: 
   1: Load System code to SDRAM via TFTP.
   2: Load System code then write to Flash via TFTP.
   3: Boot System code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
 0 
   3: Boot System code via Flash (default).
HwID B
Read 40 bytes from volume linux to 0000000046000000
   FIT/FDT format image found at 0x46000000,size 0x3db8f38
Read 64720736 bytes from volume linux to 0000000046000000
## Loading kernel from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-3.0
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x460000e4
     Data Size:    3419904 Bytes = 3.3 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x48080000
     Entry Point:  0x48080000
     Hash algo:    crc32
     Hash value:   5e5c664d
     Hash algo:    sha1
     Hash value:   fc254683db45e642c04ebb0a46e3a5b0239f525a
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading ramdisk from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'rootfs-1' ramdisk subimage
     Description:  Root File System
     Type:         RAMDisk Image
     Compression:  uncompressed
     Data Start:   0x4634ad24
     Data Size:    61267229 Bytes = 58.4 MiB
     Architecture: Unknown Architecture
     OS:           Unknown OS
     Load Address: 0x00000000
     Entry Point:  0x00000000
     Hash algo:    crc32
     Hash value:   37a3facc
     Hash algo:    sha1
     Hash value:   a3946e1fddb99db79994406597ddee31abfe36b6
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 46000000 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt mt7986d-bt8 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x46343120
     Data Size:    31504 Bytes = 30.8 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   9f418426
     Hash algo:    sha1
     Hash value:   8922d50fe2610b3be29f5a49dc5b905a7e54c023
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x46343120
Working FDT set to 46343120
   Uncompressing Kernel Image to 48080000
   Loading Device Tree to 000000007f7ee000, end 000000007f7f8b0f ... OK
Working FDT set to 7f7ee000

Starting kernel ...

Booting Linux on physical CPU 0x0000000000 [0x411fd090]
Linux version 5.4.271 (root@asus) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r0-febaa0c8)) #1 SMP Mon Oct 7 11:00:01 CST 2024
Machine model: ASUS BT8
earlycon: uart8250 at MMIO32 0x0000000011000000 (options '')
printk: bootconsole [uart8250] enabled
On node 0 totalpages: 259256
  DMA32 zone: 4096 pages used for memmap
  DMA32 zone: 0 pages reserved
  DMA32 zone: 259256 pages, LIFO batch:63
psci: probing for conduit method from DT.
psci: PSCIv1.1 detected in firmware.
psci: Using standard PSCI v0.2 function IDs
psci: MIGRATE_INFO_TYPE not supported.
psci: SMC Calling Convention v1.0
percpu: Embedded 23 pages/cpu s56024 r8192 d29992 u94208
pcpu-alloc: s56024 r8192 d29992 u94208 alloc=23*4096
pcpu-alloc: [0] 0 [0] 1 [0] 2 
Detected VIPT I-cache on CPU0
CPU features: detected: GIC system register CPU interface
CPU features: kernel page table isolation disabled by kernel configuration
CPU features: detected: Spectre-BHB
Built 1 zonelists, mobility grouping on.  Total pages: 255160
Kernel command line: root_rfs=0x34ad24 rootfstype=squashfs ubi.mtd=UBI_DEV console=ttyS0,115200n1 loglevel=8  			    earlycon=uart8250,mmio32,0x11000000 			    pci=pcie_bus_perf root=/dev/mtdblock4 
Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
mem auto-init: stack:off, heap alloc:off, heap free:off
Memory: 1006532K/1037024K available (7038K kernel code, 474K rwdata, 1744K rodata, 448K init, 309K bss, 30492K reserved, 0K cma-reserved)
SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=3, Nodes=1
Invalid signature of oopsbuf: FF-FF-FF-FF-FF-FF-FF-FF (len -1)
rcu: Hierarchical RCU implementation.
rcu: 	CONFIG_RCU_FANOUT set to non-default value of 32.
rcu: 	RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=3.
rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=3
NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
GICv3: GIC: Using split EOI/Deactivate mode
GICv3: 416 SPIs implemented
GICv3: 0 Extended SPIs implemented
GICv3: Distributor has no Range Selector support
GICv3: 16 PPIs implemented
GICv3: no VLPI support, no direct LPI support
GICv3: CPU0: found redistributor 0 region 0:0x000000000c080000
arch_timer: cp15 timer(s) running at 13.00MHz (phys).
clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2ff89eacb, max_idle_ns: 440795202429 ns
sched_clock: 56 bits at 13MHz, resolution 76ns, wraps every 4398046511101ns
Calibrating delay loop (skipped), value calculated using timer frequency.. 26.00 BogoMIPS (lpj=52000)
pid_max: default: 32768 minimum: 301
Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
ASID allocator initialised with 65536 entries
rcu: Hierarchical SRCU implementation.
smp: Bringing up secondary CPUs ...
Detected VIPT I-cache on CPU1
GICv3: CPU1: found redistributor 1 region 0:0x000000000c0a0000
CPU1: Booted secondary processor 0x0000000001 [0x411fd090]
Detected VIPT I-cache on CPU2
GICv3: CPU2: found redistributor 2 region 0:0x000000000c0c0000
CPU2: Booted secondary processor 0x0000000002 [0x411fd090]
smp: Brought up 1 node, 3 CPUs
SMP: Total of 3 processors activated.
CPU features: detected: 32-bit EL0 Support
CPU features: detected: CRC32 instructions
CPU: All CPU(s) started at EL2
alternatives: patching kernel code
devtmpfs: initialized
clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
pinctrl core: initialized pinctrl subsystem
NET: Registered protocol family 16
DMA: preallocated 256 KiB pool for atomic allocations
SCSI subsystem initialized
libata version 3.00 loaded.
rbus 18000000.wbsys: PCI host bridge to bus 0004:00
pci_bus 0004:00: root bus resource [mem 0x18000000-0x18ffffff]
pci_bus 0004:00: root bus resource [bus 00-ff]
pci_bus 0004:00: scanning bus
pci 0004:00:00.0: [14c3:7981] type 00 class 0x000280
pci 0004:00:00.0: reg 0x10: [mem 0x18000000-0x1800000f 64bit]
pci 0004:00:00.0: reg 0x18: [mem 0x00000000-0x0000000f]
pci 0004:00:00.0: reg 0x1c: [mem 0x00000000-0x0000000f]
pci 0004:00:00.0: reg 0x20: [mem 0x00000000-0x0000000f]
pci 0004:00:00.0: reg 0x24: [mem 0x00000000-0x0000000f]
pci_bus 0004:00: fixups for bus
pci_bus 0004:00: bus scan returning with max=00
clocksource: Switched to clocksource arch_sys_counter
thermal_sys: Registered thermal governor 'step_wise'
thermal_sys: Registered thermal governor 'user_space'
NET: Registered protocol family 2
IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear)
TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear)
TCP bind hash table entries: 8192 (order: 5, 131072 bytes, linear)
TCP: Hash tables configured (established 8192 bind 8192)
UDP hash table entries: 512 (order: 2, 16384 bytes, linear)
UDP-Lite hash table entries: 512 (order: 2, 16384 bytes, linear)
NET: Registered protocol family 1
PCI: CLS 0 bytes, default 64
workingset: timestamp_bits=62 max_order=18 bucket_order=0
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Debug interface error
phy phy-usb-phy@11e10000.3: type_sw - reg 0x218, index 0
mtk-pcie 11300000.pcie: host bridge /pcie@11300000 ranges:
mtk-pcie 11300000.pcie: Parsing ranges property...
mtk-pcie 11300000.pcie:    IO 0x30000000..0x301fffff -> 0x30000000
mtk-pcie 11300000.pcie:   MEM 0x30200000..0x37ffffff -> 0x30200000
mtk-pcie 11300000.pcie: failed to get max link width
mtk-pcie 11300000.pcie: PCI host bridge to bus 0000:00
pci_bus 0000:00: root bus resource [bus 00-ff]
pci_bus 0000:00: root bus resource [io  0x0000-0x1fffff] (bus address [0x30000000-0x301fffff])
pci_bus 0000:00: root bus resource [mem 0x30200000-0x37ffffff]
pci_bus 0000:00: scanning bus
pci 0000:00:00.0: [14c3:7988] type 01 class 0x060400
pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x00007fff 64bit]
pci 0000:00:00.0: PME# supported from D0 D3hot D3cold
pci 0000:00:00.0: PME# disabled
pci_bus 0000:00: fixups for bus
pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 0
pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 1
pci_bus 0000:01: scanning bus
pci 0000:01:00.0: [14c3:7990] type 00 class 0x028000
pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit pref]
pci 0000:01:00.0: reg 0x18: [mem 0x00000000-0x00007fff 64bit]
pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
pci 0000:01:00.0: PME# disabled
pci_bus 0000:01: fixups for bus
pci_bus 0000:01: bus scan returning with max=01
pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
pci_bus 0000:00: bus scan returning with max=01
pci 0000:00:00.0: BAR 9: assigned [mem 0x30200000-0x303fffff 64bit pref]
pci 0000:00:00.0: BAR 8: assigned [mem 0x30400000-0x304fffff]
pci 0000:00:00.0: BAR 0: assigned [mem 0x30500000-0x30507fff 64bit]
pci 0000:01:00.0: BAR 0: assigned [mem 0x30200000-0x303fffff 64bit pref]
pci 0000:01:00.0: BAR 2: assigned [mem 0x30400000-0x30407fff 64bit]
pci 0000:00:00.0: PCI bridge to [bus 01]
pci 0000:00:00.0:   bridge window [mem 0x30400000-0x304fffff]
pci 0000:00:00.0:   bridge window [mem 0x30200000-0x303fffff 64bit pref]
pci 0000:00:00.0: Max Payload Size set to  256/ 256 (was  128), Max Read Rq  256
pci 0000:01:00.0: Max Payload Size set to  256/ 256 (was  128), Max Read Rq  256
mtk-pcie 11290000.pcie: host bridge /pcie@11290000 ranges:
mtk-pcie 11290000.pcie: Parsing ranges property...
mtk-pcie 11290000.pcie:    IO 0x28000000..0x281fffff -> 0x28000000
mtk-pcie 11290000.pcie:   MEM 0x28200000..0x2fffffff -> 0x28200000
mtk-pcie 11290000.pcie: failed to get max link width
mtk-pcie 11290000.pcie: PCI host bridge to bus 0002:00
pci_bus 0002:00: root bus resource [bus 00-ff]
pci_bus 0002:00: root bus resource [io  0x200000-0x3fffff] (bus address [0x28000000-0x281fffff])
pci_bus 0002:00: root bus resource [mem 0x28200000-0x2fffffff]
pci_bus 0002:00: scanning bus
pci 0002:00:00.0: [14c3:7988] type 01 class 0x060400
pci 0002:00:00.0: reg 0x10: [mem 0x00000000-0x00007fff 64bit]
pci 0002:00:00.0: PME# supported from D0 D3hot D3cold
pci 0002:00:00.0: PME# disabled
pci_bus 0002:00: fixups for bus
pci 0002:00:00.0: scanning [bus 00-00] behind bridge, pass 0
pci 0002:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
pci 0002:00:00.0: scanning [bus 00-00] behind bridge, pass 1
pci_bus 0002:01: scanning bus
pci 0002:01:00.0: [14c3:7991] type 00 class 0x028000
pci 0002:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit pref]
pci 0002:01:00.0: reg 0x18: [mem 0x00000000-0x00007fff 64bit]
pci 0002:01:00.0: PME# supported from D0 D3hot D3cold
pci 0002:01:00.0: PME# disabled
pci 0002:01:00.0: 7.876 Gb/s available PCIe bandwidth, limited by 8 GT/s x1 link at 0002:00:00.0 (capable of 15.752 Gb/s with 8 GT/s x2 link)
pci_bus 0002:01: fixups for bus
pci_bus 0002:01: bus scan returning with max=01
pci_bus 0002:01: busn_res: [bus 01-ff] end is updated to 01
pci_bus 0002:00: bus scan returning with max=01
pci 0002:00:00.0: BAR 9: assigned [mem 0x28200000-0x283fffff 64bit pref]
pci 0002:00:00.0: BAR 8: assigned [mem 0x28400000-0x284fffff]
pci 0002:00:00.0: BAR 0: assigned [mem 0x28500000-0x28507fff 64bit]
pci 0002:01:00.0: BAR 0: assigned [mem 0x28200000-0x283fffff 64bit pref]
pci 0002:01:00.0: BAR 2: assigned [mem 0x28400000-0x28407fff 64bit]
pci 0002:00:00.0: PCI bridge to [bus 01]
pci 0002:00:00.0:   bridge window [mem 0x28400000-0x284fffff]
pci 0002:00:00.0:   bridge window [mem 0x28200000-0x283fffff 64bit pref]
pci 0002:00:00.0: Max Payload Size set to  256/ 256 (was  128), Max Read Rq  256
pci 0002:01:00.0: Max Payload Size set to  256/ 256 (was  128), Max Read Rq  256
mtk-power-controller 11d10000.topmisc: /topmisc@11d10000/eth2p5@2: A default off power domain has been ON
Serial: 8250/16550 driver, 3 ports, IRQ sharing disabled
printk: console [ttyS0] disabled
11000000.serial: ttyS0 at MMIO 0x11000000 (irq = 16, base_baud = 2500000) is a ST16650V2
printk: console [ttyS0] enabled
printk: console [ttyS0] enabled
printk: bootconsole [uart8250] disabled
printk: bootconsole [uart8250] disabled
mtk_rng trng@1020f000: registered RNG driver
random: crng init done
spi-nand spi0.0: calibration result: 0x2
spi-nand spi0.0: Winbond W25N01KVxxIR SPI NAND was found. (ID: efae2100)
spi-nand spi0.0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 96, ECC strength 4/512, custom ECC status.
2 fixed-partitions partitions found on MTD device spi0.0
Creating 2 MTD partitions on "spi0.0":
0x000000000000-0x000000400000 : "Bootloader"
0x000000400000-0x000008000000 : "UBI_DEV"
Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011)
IMQ driver loaded successfully. (numdevs = 8, numqueues = 1, imq_dev_accurate_stats = 1)
	Hooking IMQ after NAT on PREROUTING.
	Hooking IMQ before NAT on POSTROUTING.
mt7988-pinctrl 1001f000.pinctrl: invalid function mdio in map table
[mtk_hw_init] reset_lock:0, force:0
[mtk_hw_init] execute fe cold reset
mtk_soc_eth 15100000.ethernet: MDC is running on 8333333 Hz
Maxlinear Ethernet GPY211C mdio-bus:05: Firmware Version: 0x886F (release)
mtk_soc_eth 15100000.ethernet eth0: mediatek frame engine at 0xffffffc010b00000, irq 13
mtk_soc_eth 15100000.ethernet eth1: mediatek frame engine at 0xffffffc010b00000, irq 13
mtk_soc_eth 15100000.ethernet eth2: mediatek frame engine at 0xffffffc010b00000, irq 13
(unnamed net_device) (dummy): netif_napi_add() called with weight 256
PPP generic driver version 2.4.2
PPP BSD Compression module registered
PPP Deflate Compression module registered
PPP MPPE Compression module registered
NET: Registered protocol family 24
PPTP driver version 0.8.5
i2c /dev entries driver
vcore: supplied by rt5190a-buck1
proc: supplied by rt5190a-buck1
rt5190a-buck4: supplied by rt5190a-buck1
rt5190a-ldo: supplied by regulator-dummy
mtk-soc-temp-lvts 1100a000.lvts: [lvts_cal] golden_temp = 60
mtk-soc-temp-lvts 1100a000.lvts: [lvts_cal] num:g_count:g_count_rc 0:19515:5367 1:19523:0 2:19543:0 3:19546:0 4:19467:5393 5:19498:0 6:19478:0 7:19518:0 
mtk-soc-temp-lvts 1100a000.lvts: [COUNT_RC_NOW] 0:5383 1:5383 2:5383 3:5381 4:5400 5:5398 6:5400 7:5400 
mtk-soc-temp-lvts 1100a000.lvts: set_polling_speed 0, LVTSMONCTL1_0= 0x10000c,LVTSMONCTL2_0= 0x10001
mtk-soc-temp-lvts 1100a000.lvts: set_hw_filter 0, LVTSMSRCTL0_0= 0xb6d
mtk-soc-temp-lvts 1100a000.lvts: lvts0: read all 4 sensors in 10080 us, one in 2404 us
mtk-soc-temp-lvts 1100a000.lvts: set_polling_speed 1, LVTSMONCTL1_0= 0x10000c,LVTSMONCTL2_0= 0x10001
mtk-soc-temp-lvts 1100a000.lvts: set_hw_filter 1, LVTSMSRCTL0_0= 0xb6d
mtk-soc-temp-lvts 1100a000.lvts: lvts1: read all 4 sensors in 10080 us, one in 2404 us
mtk-soc-temp-lvts 1100a000.lvts: set_tc_hw_reboot_threshold: LVTS0, the dominator sensing point= 0
mtk-soc-temp-lvts 1100a000.lvts: set_tc_hw_reboot_threshold: LVTS1, the dominator sensing point= 0
cpu cpu0: dummy supplies not allowed for exclusive requests
icp201xx 1-0063: init chip error -6
init chip error -6
------------[ cut here ]------------
refcount_t: underflow; use-after-free.
WARNING: CPU: 0 PID: 1 at refcount_warn_saturate+0xf0/0x140
Modules linked in:
CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.4.271 #1
Hardware name: ASUS BT8 (DT)
pstate: 60000005 (nZCv daif -PAN -UAO)
pc : refcount_warn_saturate+0xf0/0x140
lr : refcount_warn_saturate+0xf0/0x140
sp : ffffff800c8abb30
x29: ffffff800c8abb30 x28: 0000000000000000 
x27: 0000000000000000 x26: ffffffc010920484 
x25: ffffffc010911c48 x24: 0000000000000000 
x23: 0000000000000001 x22: ffffff800c8abbd0 
x21: ffffff8003394020 x20: ffffff800c8abbd0 
x19: ffffff8003398018 x18: 0000000000020000 
x17: 0000000086e7961e x16: 00000000cc4b7db4 
x15: 00000000fffffff0 x14: ffffffc0109adf58 
x13: 0000000000000000 x12: ffffffc010a0e000 
x11: ffffffc0109ad000 x10: ffffffc010a0e710 
x9 : 0000000000000000 x8 : ffffffc01039a2e8 
x7 : 00000000000000e9 x6 : ffffffc010a0eca6 
x5 : 0000000000000007 x4 : 0000000000000000 
x3 : 0000000000000000 x2 : 00000000ffffffff 
x1 : ffffffc0109adfd0 x0 : 0000000000000026 
Call trace:
 refcount_warn_saturate+0xf0/0x140
 kobject_put+0xec/0x110
 put_device+0x10/0x20
 devm_iio_device_release+0x18/0x28
 release_nodes+0x1a0/0x1f8
 devres_release_all+0x5c/0x158
 really_probe+0x1c0/0x300
 driver_probe_device+0x54/0xe8
 device_driver_attach+0x6c/0x78
 __driver_attach+0x60/0xe8
 bus_for_each_dev+0x60/0x98
 driver_attach+0x20/0x28
 bus_add_driver+0x180/0x1f0
 driver_register+0x60/0x110
 i2c_register_driver+0x44/0x88
 icp201xx_driver_init+0x18/0x20
 do_one_initcall+0x74/0x1d0
 kernel_init_freeable+0x17c/0x234
 kernel_init+0x10/0xfc
 ret_from_fork+0x10/0x1c
---[ end trace 21a99979bfb64aed ]---
u32 classifier
    Performance counters on
    input device check on
xt_time: kernel timezone is -0000
gre: GRE over IPv4 demultiplexor driver
IPv4 over IPsec tunneling driver
NET: Registered protocol family 10
Segment Routing with IPv6
NET: Registered protocol family 17
NET: Registered protocol family 15
Bridge firewalling registered
l2tp_core: L2TP core driver, V2.0
l2tp_ppp: PPPoL2TP kernel driver, V2.0
l2tp_netlink: L2TP netlink interface
8021q: 802.1Q VLAN Support v1.8
MediaTek MT7988 PHY dsa-0.0:00: TX-VCM SW cal result: 0x3
MediaTek MT7988 PHY dsa-0.0:01: TX-VCM SW cal result: 0x3
MediaTek MT7988 PHY dsa-0.0:02: TX-VCM SW cal result: 0x3
MediaTek MT7988 PHY dsa-0.0:03: TX-VCM SW cal result: 0x3
mt7530 mdio-bus:1f lan2 (uninitialized): PHY [dsa-0.0:01] driver [MediaTek MT7988 PHY]
mt7530 mdio-bus:1f lan1 (uninitialized): PHY [dsa-0.0:02] driver [MediaTek MT7988 PHY]
mt7530 mdio-bus:1f: configuring for fixed/10gbase-kr link mode
DSA: tree 0 setup
mt7530 mdio-bus:1f: Link is Up - 10Gbps/Full - flow control rx/tx
mt7530-nl: genl_register_family_with_ops 
ubi0: attaching mtd1
ubi0: scanning is finished
ubi0: attached mtd1 (name "UBI_DEV", size 124 MiB)
ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
ubi0: good PEBs: 992, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 5, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 8/4, WL threshold: 4096, image sequence number: 1694403399
ubi0: available PEBs: 0, total reserved PEBs: 992, PEBs reserved for bad PEB handling: 20
ubi0: background thread "ubi_bgt0d" started, PID 874
gluebi_create: Hook read/write method of Factory.
gluebi_create: Hook read/write method of Factory2.
[Factory-0]: OK (ver: 109)
[Factory2-0]: OK (ver: 109)
Select [Factory-0]
volume linux rfs_offset 34ad24 mtd->size 40e8000
Creating 1 MTD partitions on "linux":
0x00000034ad24-0x0000040e8000 : "rootfs"
mtd: device 6 (rootfs) set to be root filesystem
gluebi_create: skip jffs2 volume
Override root device as 31:6
VFS: Mounted root (squashfs filesystem) readonly on device 31:6.
devtmpfs: mounted
Freeing unused kernel memory: 448K
Run /sbin/init as init process
init_main start.
/dev/nvram: No such file or directory
/dev/nvram: No such file or directory
offset 0xd000 elapse 4ms
_nvram_free: 908(modprobe) nvram_idx(1 / 2)
found private data block and skip it
!! no use mtab
1: set_action 0


No console...

firmware version: 3.0.0.6.102_56199-gd950865_172-gbd161_M7EC, dev:(SBIG7J301290Cinit (1): drop_caches: 1
BZ/CC:28:AA:72:39:64)
mtd productid: BT8
bootloader version: BT8-01-00-00-02
firmware version: 3.0.0.6
odmpid: ZenWiFi_BT8
current FW productid: BT8
current FW firmver: 3.0.0.6
SBIG7J301290CBZ
clean_mode(1) clean_time(2) threshold(0)
free_caches: Start syncing...
free_caches: Start cleaning...
free_caches: waiting 2 second...
free_caches: Finish.
json_object_from_file: error opening file /tmp/apg_ifnames_used.json: No such file or directory

After this it continius with a lot of Wifi Errors from my previous dmesg log.

I bought one of the device and also shipped one to @hauke
basic ramboot now works for me. however we will need to replace u-boot on this device prior to flashing OpenWrt.

support is in flight.

4 Likes