Nintendo Switch - fully working except payload injection

What diode or resistance reading do you get on D+/D- relative to ground in both probe polarities do you get? (diode mode is better here due to the differences in board revisions and the typically high resistance)

At least some USB functionality must be remaining if it’s showing up in RCM state in TegraRCMGUI

No, I haven’t checked the Tegra datasheet but would imagine there is more USB bus I/O, though I have no idea if they are broken out anywhere, if they are a potential workaround could in theory be installed - assuming of course it isn’t reliant on the presumed bad I/O