OpenWrt support for Linksys MX4200

[eginnc]

Wonderful! I'll have some time this weekend to set it up as one of my dumb AP's. I'll let you know how it goes.

[JayDude]

The OpenWRT Firmware Selector says 24.10.1 is now available. I have a couple of MX4200 V1's and tried upgrading from 24.10.0 using the sysupgrade.bin as downloaded from the sysupgrade button on the firmware selector page. However, the device appears to hang on upgrade. I tried both using the luci interface and command line process with sysupgrade as outlined on the device page. I made sure to download sysupgrade for V1 of the MX4200.

In both cases, when sysupgrade starts, I get a fast blinking green led that just never seems to end. I left it running for 30 mins, but no change. The device is unreachable through ethernet. When I unplug the power, wait a few minutes and plug back in I get a solid blue LED and the device still cannot be reached. Unplug again, wait a few more minutes and plug back in and the device boots back into 24.10.0.

According to luci advanced boot:
Partition 1 has OpenWRT 24.10.0 installed.
Partition 2 has Linksys/unknown firmware.

What am I doing wrong? Or is there a problem with the the sysupgrade file?

EDIT: just wanted to add that I followed the exact same process with several of my other devices and their respective firmwares and it all worked on those.

[sw11]

Cross posting -- are there any known issues configuring VLANs on the MX4300? I'm getting very bad performance using vanilla openwrt (snapshot) on an AP connected over a trunk port. Connections to SSIDs assigned to the VLAN time out when using the NSS build, so I can't try that (I thought h/w acceleration might help). I've been searching to see if anyone else is having these kinds of problems but haven't found anything. Thanks

Details of my setup:

Issue with MX4300 extending Dumb AP with 2 VLANs, no internet from AP

One strange thing now is that the speed is abysmal through the AP [image] Rotuer speed test: [image]

[teleport]

current snapshot has wifi issues. use release version 24.10.1

[Mountable]

Hi @loyahek659 where do you configure the disconnect and stay values? in the /etc/config/wireless? I'm using wpad-mesh-openssl not sure if that matters. (couldn't find anything in the Luci UI)

[sw11]

Ruled out wifi issues, something else is causing it. Details here Qualcommax NSS Build - #4895 by qosmio

[bd0426]

How did the soak test go?

@eginnc ?

I gave this build a shot with high hopes but it didn't help the MX4200v1 in my particular environment.

Due to the poor memory situation with mainline OpenWRT on the MX4200v1, I have been using a build from the NSS community that seems to manage the limited memory a little better (https://github.com/AgustinLorenzo/openwrt/releases). I have often wondered what kind of voodoo magic goes into the NSS build to make it stable with such limited memory, but I lack the time (and probably skills) necessary to investigate.

Mainline OpenWRT will always crash within 24hrs (usually less) on this hardware whereas the NSS build never crashes and only gets rebooted if the power is interrupted or I'm testing / updating. It literally runs for months at a time with 100+MB available.

Screenshot with your linked build:

Screenshot with NSS build (Recent build, but was running a build from Dec 2024 prior to being upgraded during this test):

Thanks very much for your efforts!

[sw11]

If anyone is curious, setting "rx-gro-list" to off on both router and AP solved the VLAN speed issue for me. https://github.com/openwrt/openwrt/issues/19195#issuecomment-2993472302

[hpeters]

So what was the one line fix?

[kbmystery7]

Since @arix builds are no longer being updated, where is the best place to get a NSS enabled build for the MX4300?

[OpenWRT-fanboy]

Qualcommax NSS Build

Hi boys, This version include NSS offload for WiFi I am redo the repos over the latest commit from OpenWRT. Changelog (include upstream of OpenWRT): Updated NSS kernel and software to version 6.12.31 Added the latest changes developed by @qosmio for NSS. WARNING: (IN CASE YOU USE THEM). The following services are disabled on first startup: mwan3, sqm, mesh11sd (MESH build) and you have to re-enable them from: Luci -> System -> Startup WARNING: Now I am only compiling for AX3600, AX6, AX9000…

[deseag]

Hello, community!
I have an MX4200v1 where the blue LED is constantly on. When connecting via UART, I can see that the device attempts to boot from one partition, then from another, and eventually hangs at the message “Starting kernel...”.

• Running run flashimg or run flashimg2 with the image FW_MX4200_1.0.13.210200_prod.img or any OpenWRT image like openwrt-qualcommax-ipq807x-linksys_mx4200v1-squashfs-factory.bin (of course renamed to chiron.img) does not change the device's behavior.
• Using tftpboot openwrt-qualcommax-ipq807x-linksys_mx4200v1-initramfs-uImage.itb; bootm results in a loop of kernel boot attempts.

What am I doing wrong? What should I pay attention to?

printenv output:
altkern=a680000
baudrate=115200
bootargs=console=ttyMSM0,115200n8
bootcmd=if test $auto_recovery = no; then bootipq; elif test $boot_part = 1; then run bootpart1; else run bootpart2; fi
bootdelay=2
bootpart1=set bootargs $partbootargs && nand read $loadaddr $prikern $kernsize && bootm $loadaddr
bootpart2=set bootargs $partbootargs2 && nand read $loadaddr $altkern $kernsize && bootm $loadaddr
eth1addr=39:9F:e0:58:28:79
ethact=eth0
ethaddr=39:9F:e0:58:28:79
fdt_high=0x4A400000
fdtcontroladdr=4a97b4b0
flash_type=2
flashimg=tftpboot $loadaddr $image && nand erase $prikern $imgsize && nand write $loadaddr $prikern $filesize
flashimg2=tftpboot $loadaddr $image && nand erase $altkern $imgsize && nand write $loadaddr $altkern $filesize
image=chiron.img
imgsize=9600000
ipaddr=192.168.1.1
kernsize=600000
loadaddr=44000000
machid=801000d
maxpartialboots=3
mtdids=nand0=nand0
netmask=255.255.255.0
partbootargs=init=/sbin/init rootfstype=squashfs ubi.mtd=22,2048 ubi.block=0,0 root=/dev/ubiblock0_0 rootwait ro
partbootargs2=init=/sbin/init rootfstype=squashfs ubi.mtd=24,2048 ubi.block=0,0 root=/dev/ubiblock0_0 rootwait ro
prikern=1080000
serverip=192.168.1.100
soc_version_major=2
soc_version_minor=0
stderr=serial@78B3000
stdin=serial@78B3000
stdout=serial@78B3000
auto_recovery=yes
boot_part_ready=3
boot_part=2

[frollic]

@deseag

Using tftpboot openwrt-qualcommax-ipq807x-linksys_mx4200v1-initramfs-uImage.itb; bootm results in a loop of kernel boot attempts.
What am I doing wrong? What should I pay attention to?

post the boot sequence output up until the boot loop, use the </> button to sandwich the cli output you paste.

[deseag]

@frollic

post the boot sequence output up until the boot loop, use the </> button to sandwich the cli output you paste.

Oh, shure.

Filename 'chiron.img'.
Load address: 0x44000000
Loading: *
Got TFTP_OACK: TFTP remote port: changes from 69 to 58587
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ##########################
         293 KiB/s
done
Bytes transferred = 14682112 (e00800 hex)
ipq807x_eth_halt: done

NAND erase: device 0 offset 0x1080000, size 0x9600000
Erasing at 0xa660000 -- 100% complete.
OK

NAND write: device 0 offset 0x1080000, size 0xe00800
 14682112 bytes written: OK
IPQ807x# reset
resetting ...

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158
S - IMAGE_VARIANT_STRING=HAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002e5
B -       201 - PBL, Start
B -      2735 - bootable_media_detect_entry, Start
B -      3441 - bootable_media_detect_success, Start
B -      3446 - elf_loader_entry, Start
B -      6107 - auth_hash_seg_entry, Start
B -      6349 - auth_hash_seg_exit, Start
B -     68222 - elf_segs_hash_verify_entry, Start
B -    131064 - PBL, End
B -    215787 - SBL1, Start
B -    294477 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B -    304268 - pm_device_init, Start
B -    485316 - PM_SET_VAL:Skip
D -    179096 - pm_device_init, Delta
B -    487725 - pm_driver_init, Start
D -      5337 - pm_driver_init, Delta
B -    494039 - clock_init, Start
D -      2165 - clock_init, Delta
B -    498126 - boot_flash_init, Start
D -     13389 - boot_flash_init, Delta
B -    515175 - boot_config_data_table_init, Start
D -      3263 - boot_config_data_table_init, Delta - (575 Bytes)
B -    522678 - Boot Setting :  0x00000618
B -    526613 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:13
B -    533536 - sbl1_ddr_set_params, Start
B -    537379 - CPR configuration: 0x30c
B -    540856 - cpr_init, Start
B -    543632 - Rail:0 Mode: 5 Voltage: 808000
B -    548878 - CL CPR settled at 760000mV
B -    551623 - Rail:1 Mode: 5 Voltage: 880000
B -    555893 - Rail:1 Mode: 7 Voltage: 896000
D -     16470 - cpr_init, Delta
B -    562694 - Pre_DDR_clock_init, Start
B -    566720 - Pre_DDR_clock_init, End
B -    570106 - DDR Type : PCDDR3
B -    575870 - do ddr sanity test, Start
D -      1067 - do ddr sanity test, Delta
B -    580598 - DDR: Start of HAL DDR Boot Training
B -    585234 - DDR: End of HAL DDR Boot Training
B -    591029 - DDR: Checksum to be stored on flash is 1222473762
B -    601338 - Image Load, Start
D -    226310 - QSEE Image Loaded, Delta - (1376448 Bytes)
B -    827739 - Image Load, Start
D -        61 - SEC Image Loaded, Delta - (0 Bytes)
B -    835425 - Image Load, Start
D -     10767 - DEVCFG Image Loaded, Delta - (26008 Bytes)
B -    846253 - Image Load, Start
D -     22173 - RPM Image Loaded, Delta - (86584 Bytes)
B -    868518 - Image Load, Start
D -     94702 - APPSBL Image Loaded, Delta - (574916 Bytes)
B -    963342 - QSEE Execution, Start
D -        61 - QSEE Execution, Delta
B -    969137 - USB D+ check, Start
D -        30 - USB D+ check, Delta
B -    975542 - SBL1, End
D -    762043 - SBL1, Delta
S - Flash Throughput, 6653 KB/s  (2065203 Bytes,  310391 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 800 MHz


U-Boot 2016.01-WNC_v0.4 (Aug 27 2020 - 09:20:09 +0800)

DRAM:  smem ram ptable found: ver: 1 len: 4
512 MiB
board_env_offset=1000000, board_env_size=40000
board_devinfo_offset=1060000, board_devinfo_size=20000
board_senv_offset=1040000, board_senv_size=20000
NAND:  Could not find nand_gpio in dts, using defaults
ONFI device found
ID = 1590acad
Vendor = ad
Device = ac
qpic_nand: changing oobsize to 64 from 128 bytes
SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
512 MiB
MMC:   <NULL>: 0
[devinfo_relocate] devinfo_relocate[147] malloced DEVINFO at 4a601d28
[devinfo_relocate_spec] ret: 0 , total: 131072 , CONFIG_DEVINFO_SIZE: 131072
In:    serial@78B3000
Out:   serial@78B3000
Err:   serial@78B3000
machid: 801000d
Card did not respond to voltage select!
eth2 MAC Address from ART is not valid
eth3 MAC Address from ART is not valid
eth4 MAC Address from ART is not valid
eth5 MAC Address from ART is not valid
#################################
######### auto_recovery #########
#################################
 ===  enabled:1,  ===  boot_part:1,    ===  maxpartialboots:3
boot_count_buffer_size = 2048, total number = 64
i=42, offset = 0x1055000, last_offset = 0x1054800
Updating boot_count...
boot->Count:3 ,boot->CheckSum:20110814, offset:0x1055000
#### ~~~~~~~~~~~~~ ####
Auto-update from TFTP: failed, env. variable 'updatefile' not found
#### auto_recovery check ####
Hit any key to stop autoboot:  0
Normal boot

NAND read: device 0 offset 0x1080000, size 0x600000
 6291456 bytes read: OK
## Loading kernel from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-6.6.93
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x440000e8
     Data Size:    5136185 Bytes = 4.9 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x41000000
     Entry Point:  0x41000000
     Hash algo:    crc32
     Hash value:   32d90fd7
     Hash algo:    sha1
     Hash value:   7f9eff7fc88bc74dc5e35e8bd8d2de04048209b2
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt linksys_mx4200v1 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x444e6164
     Data Size:    45747 Bytes = 44.7 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   94b74c01
     Hash algo:    sha1
     Hash value:   96988b4479157c60ac70062acb1b9cc84a444ffb
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x444e6164
   Uncompressing Kernel Image ... OK
   Loading Device Tree to 4a3f1000, end 4a3ff2b2 ... OK
Using machid 0x801000d from environment

Starting kernel ...

Jumping to AARCH64 kernel via monitor

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158
S - IMAGE_VARIANT_STRING=HAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002e5
B -       201 - PBL, Start
B -      2736 - bootable_media_detect_entry, Start
B -      3444 - bootable_media_detect_success, Start
B -      3448 - elf_loader_entry, Start
B -      6118 - auth_hash_seg_entry, Start
B -      6360 - auth_hash_seg_exit, Start
B -     68408 - elf_segs_hash_verify_entry, Start
B -    131251 - PBL, End
B -    216062 - SBL1, Start
B -    294752 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B -    304573 - pm_device_init, Start
B -    487085 - PM_SET_VAL:Skip
D -    180590 - pm_device_init, Delta
B -    489525 - pm_driver_init, Start
D -      5398 - pm_driver_init, Delta
B -    495899 - clock_init, Start
D -      2165 - clock_init, Delta
B -    499895 - boot_flash_init, Start
D -     13389 - boot_flash_init, Delta
B -    516944 - boot_config_data_table_init, Start
D -      3294 - boot_config_data_table_init, Delta - (575 Bytes)
B -    524447 - Boot Setting :  0x00000618
B -    528382 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:13
B -    535305 - sbl1_ddr_set_params, Start
B -    539148 - CPR configuration: 0x30c
B -    542625 - cpr_init, Start
B -    545401 - Rail:0 Mode: 5 Voltage: 808000
B -    550647 - CL CPR settled at 760000mV
B -    553361 - Rail:1 Mode: 5 Voltage: 880000
B -    557662 - Rail:1 Mode: 7 Voltage: 896000
D -     16470 - cpr_init, Delta
B -    564433 - Pre_DDR_clock_init, Start
B -    568459 - Pre_DDR_clock_init, End
B -    571844 - DDR Type : PCDDR3
B -    577639 - do ddr sanity test, Start
D -      1067 - do ddr sanity test, Delta
B -    582367 - DDR: Start of HAL DDR Boot Training
B -    587033 - DDR: End of HAL DDR Boot Training
B -    592798 - DDR: Checksum to be stored on flash is 1222473762
B -    603107 - Image Load, Start
D -    226340 - QSEE Image Loaded, Delta - (1376448 Bytes)
B -    829539 - Image Load, Start
D -        61 - SEC Image Loaded, Delta - (0 Bytes)
B -    837225 - Image Load, Start
D -     10766 - DEVCFG Image Loaded, Delta - (26008 Bytes)
B -    848052 - Image Load, Start
D -     22204 - RPM Image Loaded, Delta - (86584 Bytes)
B -    870348 - Image Load, Start
D -     94641 - APPSBL Image Loaded, Delta - (574916 Bytes)
B -    965111 - QSEE Execution, Start
D -        61 - QSEE Execution, Delta
B -    970906 - USB D+ check, Start
D -         0 - USB D+ check, Delta
B -    977311 - SBL1, End
D -    763567 - SBL1, Delta
S - Flash Throughput, 6657 KB/s  (2065203 Bytes,  310209 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 800 MHz


U-Boot 2016.01-WNC_v0.4 (Aug 27 2020 - 09:20:09 +0800)

DRAM:  smem ram ptable found: ver: 1 len: 4
512 MiB
board_env_offset=1000000, board_env_size=40000
board_devinfo_offset=1060000, board_devinfo_size=20000
board_senv_offset=1040000, board_senv_size=20000
NAND:  Could not find nand_gpio in dts, using defaults
ONFI device found
ID = 1590acad
Vendor = ad
Device = ac
qpic_nand: changing oobsize to 64 from 128 bytes
SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
512 MiB
MMC:   <NULL>: 0
[devinfo_relocate] devinfo_relocate[147] malloced DEVINFO at 4a601d28
[devinfo_relocate_spec] ret: 0 , total: 131072 , CONFIG_DEVINFO_SIZE: 131072
In:    serial@78B3000
Out:   serial@78B3000
Err:   serial@78B3000
machid: 801000d
Card did not respond to voltage select!
eth2 MAC Address from ART is not valid
eth3 MAC Address from ART is not valid
eth4 MAC Address from ART is not valid
eth5 MAC Address from ART is not valid
#################################
######### auto_recovery #########
#################################
 ===  enabled:1,  ===  boot_part:1,    ===  maxpartialboots:3
boot_count_buffer_size = 2048, total number = 64
i=43, offset = 0x1055800, last_offset = 0x1055000
BOOT_COUNT_TO_RECOVERY
Updating boot_count...
boot->Count:1 ,boot->CheckSum:20110812, offset:0x1055800
#### ~~~~~~~~~~~~~ ####
Auto-update from TFTP: failed, env. variable 'updatefile' not found
#### auto_recovery check ####
Erasing NAND...
Erasing at 0x1020000 -- 100% complete.
Writing to NAND... OK
#### auto_recovery:2 ####
Hit any key to stop autoboot:  0

[frollic]

same behavior on 24.10.2 instead of snapshot ?

[lytr]

@lytr

usb start && usbboot $loadaddr 0 && bootm $loadaddr

@lytr

dd bs=1M if=openwrt-qualcommax-ipq807x-linksys_mx4300-initramfs-uImage.itb of=/dev/sdX

Try booting the initramfs image from USB.

[deseag]

@frollic

same behavior on 24.10.2 instead of snapshot ?

This behavior occurs with all images: 24.10.2, 24.10.0, SNAPSHOT, or FW_MX4200_1.0.13.210200_prod.img... no changes.

log FW_MX4200_1.0.13.210200

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158
S - IMAGE_VARIANT_STRING=HAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002e5
B -       201 - PBL, Start
B -      2735 - bootable_media_detect_entry, Start
B -      3441 - bootable_media_detect_success, Start
B -      3446 - elf_loader_entry, Start
B -      6107 - auth_hash_seg_entry, Start
B -      6349 - auth_hash_seg_exit, Start
B -     68222 - elf_segs_hash_verify_entry, Start
B -    131065 - PBL, End
B -    215757 - SBL1, Start
B -    294477 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B -    304268 - pm_device_init, Start
B -    485346 - PM_SET_VAL:Skip
D -    179126 - pm_device_init, Delta
B -    487756 - pm_driver_init, Start
D -      5337 - pm_driver_init, Delta
B -    494069 - clock_init, Start
D -      2165 - clock_init, Delta
B -    498156 - boot_flash_init, Start
D -     13389 - boot_flash_init, Delta
B -    515206 - boot_config_data_table_init, Start
D -      3294 - boot_config_data_table_init, Delta - (575 Bytes)
B -    522709 - Boot Setting :  0x00000618
B -    526643 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:13
B -    533567 - sbl1_ddr_set_params, Start
B -    537410 - CPR configuration: 0x30c
B -    540887 - cpr_init, Start
B -    543662 - Rail:0 Mode: 5 Voltage: 808000
B -    548817 - CL CPR settled at 760000mV
B -    551653 - Rail:1 Mode: 5 Voltage: 880000
B -    555832 - Rail:1 Mode: 7 Voltage: 896000
D -     16470 - cpr_init, Delta
B -    562725 - Pre_DDR_clock_init, Start
B -    566751 - Pre_DDR_clock_init, End
B -    570136 - DDR Type : PCDDR3
B -    575779 - do ddr sanity test, Start
D -      1067 - do ddr sanity test, Delta
B -    580628 - DDR: Start of HAL DDR Boot Training
B -    585264 - DDR: End of HAL DDR Boot Training
B -    591059 - DDR: Checksum to be stored on flash is 1222473762
B -    601368 - Image Load, Start
D -    226371 - QSEE Image Loaded, Delta - (1376448 Bytes)
B -    827831 - Image Load, Start
D -        61 - SEC Image Loaded, Delta - (0 Bytes)
B -    835517 - Image Load, Start
D -     10736 - DEVCFG Image Loaded, Delta - (26008 Bytes)
B -    846344 - Image Load, Start
D -     22174 - RPM Image Loaded, Delta - (86584 Bytes)
B -    868609 - Image Load, Start
D -     94672 - APPSBL Image Loaded, Delta - (574916 Bytes)
B -    963403 - QSEE Execution, Start
D -        61 - QSEE Execution, Delta
B -    969229 - USB D+ check, Start
D -         0 - USB D+ check, Delta
B -    975603 - SBL1, End
D -    762164 - SBL1, Delta
S - Flash Throughput, 6653 KB/s  (2065203 Bytes,  310391 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 800 MHz


U-Boot 2016.01-WNC_v0.4 (Aug 27 2020 - 09:20:09 +0800)

DRAM:  smem ram ptable found: ver: 1 len: 4
512 MiB
board_env_offset=1000000, board_env_size=40000
board_devinfo_offset=1060000, board_devinfo_size=20000
board_senv_offset=1040000, board_senv_size=20000
NAND:  Could not find nand_gpio in dts, using defaults
ONFI device found
ID = 1590acad
Vendor = ad
Device = ac
qpic_nand: changing oobsize to 64 from 128 bytes
SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
512 MiB
MMC:   <NULL>: 0
[devinfo_relocate] devinfo_relocate[147] malloced DEVINFO at 4a601d28
[devinfo_relocate_spec] ret: 0 , total: 131072 , CONFIG_DEVINFO_SIZE: 131072
In:    serial@78B3000
Out:   serial@78B3000
Err:   serial@78B3000
machid: 801000d
Card did not respond to voltage select!
eth2 MAC Address from ART is not valid
eth3 MAC Address from ART is not valid
eth4 MAC Address from ART is not valid
eth5 MAC Address from ART is not valid
#################################
######### auto_recovery #########
#################################
 ===  enabled:1,  ===  boot_part:1,    ===  maxpartialboots:3
boot_count_buffer_size = 2048, total number = 64
i=37, offset = 0x1052800, last_offset = 0x1052000
BOOT_COUNT_TO_RECOVERY
Updating boot_count...
boot->Count:1 ,boot->CheckSum:20110812, offset:0x1052800
#### ~~~~~~~~~~~~~ ####
Auto-update from TFTP: failed, env. variable 'updatefile' not found
#### auto_recovery check ####
Erasing NAND...
Erasing at 0x1020000 -- 100% complete.
Writing to NAND... OK
#### auto_recovery:2 ####
Hit any key to stop autoboot:  0
Normal boot

NAND read: device 0 offset 0xa680000, size 0x600000
 6291456 bytes read: OK
## Loading kernel from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'kernel@1' kernel subimage
     Description:  ARM OpenWrt Linux-4.4.60
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x440000e4
     Data Size:    3751961 Bytes = 3.6 MiB
     Architecture: ARM
     OS:           Linux
     Load Address: 0x41208000
     Entry Point:  0x41208000
     Hash algo:    crc32
     Hash value:   171a2ca6
     Hash algo:    sha1
     Hash value:   581d36e76743afd01c0dfdc4801cc1c0f81a39b8
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'fdt@1' fdt subimage
     Description:  ARM OpenWrt chiron device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x44394230
     Data Size:    79756 Bytes = 77.9 KiB
     Architecture: ARM
     Hash algo:    crc32
     Hash value:   41c9c202
     Hash algo:    sha1
     Hash value:   0045dee491f74bbc8972d30c790348226006fa60
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x44394230
   Uncompressing Kernel Image ... OK
   Loading Device Tree to 4a3e9000, end 4a3ff78b ... OK
Using machid 0x801000d from environment

Starting kernel ...

[deseag]

@lytr

bootcmd

Hello community, sorry for the delay in responding, I had other things to do...

I can’t execute:

• mtd -r -e alt_kernel -n write openwrt-qualcommax-ipq807x-linksys_mx4200v2-squashfs-factory.bin alt_kernel
  or
• mtd -r -e kernel -n write openwrt-qualcommax-ipq807x-linksys_mx4200v2-squashfs-factory.bin kernel

because I’m connected via UART and Putty (or am I wrong?), but it seems that run flashimg or run flashimg2 performs the same function, just addressing NAND by the address instead of the name.

I*m changing bootusb and bootcmd to boot from USB and try boot my device (result is below).
So, I have no idea what to do with this device(((

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158
S - IMAGE_VARIANT_STRING=HAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002e5
B -       201 - PBL, Start
B -      2735 - bootable_media_detect_entry, Start
B -      3442 - bootable_media_detect_success, Start
B -      3447 - elf_loader_entry, Start
B -      6110 - auth_hash_seg_entry, Start
B -      6353 - auth_hash_seg_exit, Start
B -     68270 - elf_segs_hash_verify_entry, Start
B -    131112 - PBL, End
B -    143502 - SBL1, Start
B -    195901 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B -    202398 - pm_device_init, Start
B -    324764 - PM_SET_VAL:Skip
D -    121878 - pm_device_init, Delta
B -    327173 - pm_driver_init, Start
D -      5368 - pm_driver_init, Delta
B -    333548 - clock_init, Start
D -      2135 - clock_init, Delta
B -    337513 - boot_flash_init, Start
D -     13359 - boot_flash_init, Delta
B -    354654 - boot_config_data_table_init, Start
D -      3263 - boot_config_data_table_init, Delta - (575 Bytes)
B -    362157 - Boot Setting :  0x00000618
B -    366091 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:13
B -    373015 - sbl1_ddr_set_params, Start
B -    376858 - CPR configuration: 0x30c
B -    380335 - cpr_init, Start
B -    383110 - Rail:0 Mode: 5 Voltage: 808000
B -    388356 - CL CPR settled at 760000mV
B -    391101 - Rail:1 Mode: 5 Voltage: 880000
B -    395371 - Rail:1 Mode: 7 Voltage: 896000
D -     16470 - cpr_init, Delta
B -    402142 - Pre_DDR_clock_init, Start
B -    406168 - Pre_DDR_clock_init, End
B -    409584 - DDR Type : PCDDR3
B -    415318 - do ddr sanity test, Start
D -      1037 - do ddr sanity test, Delta
B -    420076 - DDR: Start of HAL DDR Boot Training
B -    424712 - DDR: End of HAL DDR Boot Training
B -    430507 - DDR: Checksum to be stored on flash is 1222473762
B -    440816 - Image Load, Start
D -    226341 - QSEE Image Loaded, Delta - (1376448 Bytes)
B -    667248 - Image Load, Start
D -        61 - SEC Image Loaded, Delta - (0 Bytes)
B -    674934 - Image Load, Start
D -     10767 - DEVCFG Image Loaded, Delta - (26008 Bytes)
B -    685792 - Image Load, Start
D -     22174 - RPM Image Loaded, Delta - (86584 Bytes)
B -    708057 - Image Load, Start
D -     94672 - APPSBL Image Loaded, Delta - (574916 Bytes)
B -    802851 - QSEE Execution, Start
D -        61 - QSEE Execution, Delta
B -    808677 - USB D+ check, Start
D -         0 - USB D+ check, Delta
B -    815051 - SBL1, End
D -    673867 - SBL1, Delta
S - Flash Throughput, 6652 KB/s  (2065203 Bytes,  310422 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 800 MHz


U-Boot 2016.01-WNC_v0.4 (Aug 27 2020 - 09:20:09 +0800)

DRAM:  smem ram ptable found: ver: 1 len: 4
512 MiB
board_env_offset=1000000, board_env_size=40000
board_devinfo_offset=1060000, board_devinfo_size=20000
board_senv_offset=1040000, board_senv_size=20000
NAND:  Could not find nand_gpio in dts, using defaults
ONFI device found
ID = 1590acad
Vendor = ad
Device = ac
qpic_nand: changing oobsize to 64 from 128 bytes
SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
512 MiB
MMC:   <NULL>: 0
[devinfo_relocate] devinfo_relocate[147] malloced DEVINFO at 4a601d28
[devinfo_relocate_spec] ret: 0 , total: 131072 , CONFIG_DEVINFO_SIZE: 131072
In:    serial@78B3000
Out:   serial@78B3000
Err:   serial@78B3000
machid: 801000d
Card did not respond to voltage select!
eth2 MAC Address from ART is not valid
eth3 MAC Address from ART is not valid
eth4 MAC Address from ART is not valid
eth5 MAC Address from ART is not valid
#################################
######### auto_recovery #########
#################################
 ===  enabled:1,  ===  boot_part:1,    ===  maxpartialboots:3
boot_count_buffer_size = 2048, total number = 64
i=59, offset = 0x105d800, last_offset = 0x105d000
Updating boot_count...
boot->Count:2 ,boot->CheckSum:20110813, offset:0x105d800
#### ~~~~~~~~~~~~~ ####
Auto-update from TFTP: failed, env. variable 'updatefile' not found
#### auto_recovery check ####
Hit any key to stop autoboot:  0
Normal boot
starting USB...
USB0:   Register 2000140 NbrPorts 2
Starting the controller
USB XHCI 1.10
scanning bus 0 for devices... 2 USB Device(s) found
USB1:   Register 2000140 NbrPorts 2
Starting the controller
USB XHCI 1.10
scanning bus 1 for devices... 1 USB Device(s) found

Loading from usb device 0, partition 0: Name: Whole Disk  Type: U-Boot
Fit image detected...
   FIT description: ARM64 OpenWrt FIT (Flattened Image Tree)
    Image 0 (kernel-1)
     Description:  ARM64 OpenWrt Linux-6.6.93
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x440000e8
     Data Size:    13531914 Bytes = 12.9 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x41000000
     Entry Point:  0x41000000
     Hash algo:    crc32
     Hash value:   8d1135f6
     Hash algo:    sha1
     Hash value:   1a7251eae4cec693e20150d6bae08422b4a3ed96
    Image 1 (fdt-1)
     Description:  ARM64 OpenWrt linksys_mx4200v1 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x44ce7d34
     Data Size:    45747 Bytes = 44.7 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   94b74c01
     Hash algo:    sha1
     Hash value:   96988b4479157c60ac70062acb1b9cc84a444ffb
    Default Configuration: 'config@1'
    Configuration 0 (config@1)
     Description:  OpenWrt linksys_mx4200v1
     Kernel:       kernel-1
     FDT:          fdt-1
## Loading kernel from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-6.6.93
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x440000e8
     Data Size:    13531914 Bytes = 12.9 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x41000000
     Entry Point:  0x41000000
     Hash algo:    crc32
     Hash value:   8d1135f6
     Hash algo:    sha1
     Hash value:   1a7251eae4cec693e20150d6bae08422b4a3ed96
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt linksys_mx4200v1 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x44ce7d34
     Data Size:    45747 Bytes = 44.7 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   94b74c01
     Hash algo:    sha1
     Hash value:   96988b4479157c60ac70062acb1b9cc84a444ffb
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x44ce7d34
   Uncompressing Kernel Image ... OK
   Loading Device Tree to 4a3f1000, end 4a3ff2b2 ... OK
Using machid 0x801000d from environment

Starting kernel ...

Jumping to AARCH64 kernel via monitor

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158
S - IMAGE_VARIANT_STRING=HAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002e5
B -       201 - PBL, Start
B -      2734 - bootable_media_detect_entry, Start
B -      3442 - bootable_media_detect_success, Start
B -      3446 - elf_loader_entry, Start
B -      6113 - auth_hash_seg_entry, Start
B -      6356 - auth_hash_seg_exit, Start
B -     68358 - elf_segs_hash_verify_entry, Start
B -    131201 - PBL, End
B -    215696 - SBL1, Start
B -    294294 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B -    304085 - pm_device_init, Start
B -    485407 - PM_SET_VAL:Skip
D -    179431 - pm_device_init, Delta
B -    487817 - pm_driver_init, Start
D -      5368 - pm_driver_init, Delta
B -    494161 - clock_init, Start
D -      2165 - clock_init, Delta
B -    498156 - boot_flash_init, Start
D -     13389 - boot_flash_init, Delta
B -    515297 - boot_config_data_table_init, Start
D -      3294 - boot_config_data_table_init, Delta - (575 Bytes)
B -    522800 - Boot Setting :  0x00000618
B -    526735 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:13
B -    533658 - sbl1_ddr_set_params, Start
B -    537501 - CPR configuration: 0x30c
B -    540978 - cpr_init, Start
B -    543754 - Rail:0 Mode: 5 Voltage: 808000
B -    549000 - CL CPR settled at 760000mV
B -    551714 - Rail:1 Mode: 5 Voltage: 880000
B -    556015 - Rail:1 Mode: 7 Voltage: 896000
D -     16439 - cpr_init, Delta
B -    562786 - Pre_DDR_clock_init, Start
B -    566812 - Pre_DDR_clock_init, End
B -    570197 - DDR Type : PCDDR3
B -    575962 - do ddr sanity test, Start
D -      1067 - do ddr sanity test, Delta
B -    580720 - DDR: Start of HAL DDR Boot Training
B -    585356 - DDR: End of HAL DDR Boot Training
B -    591120 - DDR: Checksum to be stored on flash is 1222473762
B -    601429 - Image Load, Start
D -    226463 - QSEE Image Loaded, Delta - (1376448 Bytes)
B -    827983 - Image Load, Start
D -        61 - SEC Image Loaded, Delta - (0 Bytes)
B -    835669 - Image Load, Start
D -     10767 - DEVCFG Image Loaded, Delta - (26008 Bytes)
B -    846527 - Image Load, Start
D -     22174 - RPM Image Loaded, Delta - (86584 Bytes)
B -    868792 - Image Load, Start
D -     94642 - APPSBL Image Loaded, Delta - (574916 Bytes)
B -    963556 - QSEE Execution, Start
D -        61 - QSEE Execution, Delta
B -    969381 - USB D+ check, Start
D -         0 - USB D+ check, Delta
B -    975756 - SBL1, End
D -    762378 - SBL1, Delta
S - Flash Throughput, 6649 KB/s  (2065203 Bytes,  310573 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 800 MHz


U-Boot 2016.01-WNC_v0.4 (Aug 27 2020 - 09:20:09 +0800)

DRAM:  smem ram ptable found: ver: 1 len: 4
512 MiB
board_env_offset=1000000, board_env_size=40000
board_devinfo_offset=1060000, board_devinfo_size=20000
board_senv_offset=1040000, board_senv_size=20000
NAND:  Could not find nand_gpio in dts, using defaults
ONFI device found
ID = 1590acad
Vendor = ad
Device = ac
qpic_nand: changing oobsize to 64 from 128 bytes
SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
512 MiB
MMC:   <NULL>: 0
[devinfo_relocate] devinfo_relocate[147] malloced DEVINFO at 4a601d28
[devinfo_relocate_spec] ret: 0 , total: 131072 , CONFIG_DEVINFO_SIZE: 131072
In:    serial@78B3000
Out:   serial@78B3000
Err:   serial@78B3000
machid: 801000d
Card did not respond to voltage select!
eth2 MAC Address from ART is not valid
eth3 MAC Address from ART is not valid
eth4 MAC Address from ART is not valid
eth5 MAC Address from ART is not valid
#################################
######### auto_recovery #########
#################################
 ===  enabled:1,  ===  boot_part:1,    ===  maxpartialboots:3
boot_count_buffer_size = 2048, total number = 64
i=60, offset = 0x105e000, last_offset = 0x105d800
Updating boot_count...
boot->Count:3 ,boot->CheckSum:20110814, offset:0x105e000
#### ~~~~~~~~~~~~~ ####
Auto-update from TFTP: failed, env. variable 'updatefile' not found
#### auto_recovery check ####
Hit any key to stop autoboot:  0
Normal boot
starting USB...
USB0:   Register 2000140 NbrPorts 2
Starting the controller
USB XHCI 1.10
scanning bus 0 for devices... 2 USB Device(s) found
USB1:   Register 2000140 NbrPorts 2
Starting the controller
USB XHCI 1.10
scanning bus 1 for devices... 1 USB Device(s) found

Loading from usb device 0, partition 0: Name: Whole Disk  Type: U-Boot
Fit image detected...
   FIT description: ARM64 OpenWrt FIT (Flattened Image Tree)
    Image 0 (kernel-1)
     Description:  ARM64 OpenWrt Linux-6.6.93
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x440000e8
     Data Size:    13531914 Bytes = 12.9 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x41000000
     Entry Point:  0x41000000
     Hash algo:    crc32
     Hash value:   8d1135f6
     Hash algo:    sha1
     Hash value:   1a7251eae4cec693e20150d6bae08422b4a3ed96
    Image 1 (fdt-1)
     Description:  ARM64 OpenWrt linksys_mx4200v1 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x44ce7d34
     Data Size:    45747 Bytes = 44.7 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   94b74c01
     Hash algo:    sha1
     Hash value:   96988b4479157c60ac70062acb1b9cc84a444ffb
    Default Configuration: 'config@1'
    Configuration 0 (config@1)
     Description:  OpenWrt linksys_mx4200v1
     Kernel:       kernel-1
     FDT:          fdt-1
## Loading kernel from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-6.6.93
     Type:         Kernel Image
     Compression:  gzip compressed
     Data Start:   0x440000e8
     Data Size:    13531914 Bytes = 12.9 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x41000000
     Entry Point:  0x41000000
     Hash algo:    crc32
     Hash value:   8d1135f6
     Hash algo:    sha1
     Hash value:   1a7251eae4cec693e20150d6bae08422b4a3ed96
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 44000000 ...
   Using 'config@1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt linksys_mx4200v1 device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x44ce7d34
     Data Size:    45747 Bytes = 44.7 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   94b74c01
     Hash algo:    sha1
     Hash value:   96988b4479157c60ac70062acb1b9cc84a444ffb
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x44ce7d34
   Uncompressing Kernel Image ... OK
   Loading Device Tree to 4a3f1000, end 4a3ff2b2 ... OK
Using machid 0x801000d from environment

Starting kernel ...

Jumping to AARCH64 kernel via monitor

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158
S - IMAGE_VARIANT_STRING=HAACANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002e5
B -       201 - PBL, Start
B -      2735 - bootable_media_detect_entry, Start
B -      3441 - bootable_media_detect_success, Start
B -      3446 - elf_loader_entry, Start
B -      6107 - auth_hash_seg_entry, Start
B -      6349 - auth_hash_seg_exit, Start
B -     68222 - elf_segs_hash_verify_entry, Start
B -    131065 - PBL, End
B -    215543 - SBL1, Start
B -    294172 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B -    303963 - pm_device_init, Start
B -    484919 - PM_SET_VAL:Skip
D -    179004 - pm_device_init, Delta
B -    487329 - pm_driver_init, Start
D -      5337 - pm_driver_init, Delta
B -    493642 - clock_init, Start
D -      2165 - clock_init, Delta
B -    497729 - boot_flash_init, Start
D -     13359 - boot_flash_init, Delta
B -    514779 - boot_config_data_table_init, Start
D -      3263 - boot_config_data_table_init, Delta - (575 Bytes)
B -    522282 - Boot Setting :  0x00000618
B -    526216 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:13
B -    533140 - sbl1_ddr_set_params, Start
B -    536983 - CPR configuration: 0x30c
B -    540460 - cpr_init, Start
B -    543235 - Rail:0 Mode: 5 Voltage: 808000
B -    548481 - CL CPR settled at 760000mV
B -    551226 - Rail:1 Mode: 5 Voltage: 880000
B -    555496 - Rail:1 Mode: 7 Voltage: 896000
D -     16470 - cpr_init, Delta
B -    562298 - Pre_DDR_clock_init, Start
B -    566324 - Pre_DDR_clock_init, End
B -    569709 - DDR Type : PCDDR3
B -    575443 - do ddr sanity test, Start
D -      1037 - do ddr sanity test, Delta
B -    580201 - DDR: Start of HAL DDR Boot Training
B -    584837 - DDR: End of HAL DDR Boot Training
B -    590602 - DDR: Checksum to be stored on flash is 1222473762
B -    600941 - Image Load, Start
D -    226341 - QSEE Image Loaded, Delta - (1376448 Bytes)
B -    827373 - Image Load, Start
D -        61 - SEC Image Loaded, Delta - (0 Bytes)
B -    835059 - Image Load, Start
D -     10766 - DEVCFG Image Loaded, Delta - (26008 Bytes)
B -    845887 - Image Load, Start
D -     22173 - RPM Image Loaded, Delta - (86584 Bytes)
B -    868152 - Image Load, Start
D -     94641 - APPSBL Image Loaded, Delta - (574916 Bytes)
B -    962946 - QSEE Execution, Start
D -        91 - QSEE Execution, Delta
B -    968741 - USB D+ check, Start
D -         0 - USB D+ check, Delta
B -    975146 - SBL1, End
D -    761890 - SBL1, Delta
S - Flash Throughput, 6654 KB/s  (2065203 Bytes,  310360 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 800 MHz


U-Boot 2016.01-WNC_v0.4 (Aug 27 2020 - 09:20:09 +0800)

DRAM:  smem ram ptable found: ver: 1 len: 4
512 MiB
board_env_offset=1000000, board_env_size=40000
board_devinfo_offset=1060000, board_devinfo_size=20000
board_senv_offset=1040000, board_senv_size=20000
NAND:  Could not find nand_gpio in dts, using defaults
ONFI device found
ID = 1590acad
Vendor = ad
Device = ac
qpic_nand: changing oobsize to 64 from 128 bytes
SF: Unsupported flash IDs: manuf ff, jedec ffff, ext_jedec ffff
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
512 MiB
MMC:   <NULL>: 0
[devinfo_relocate] devinfo_relocate[147] malloced DEVINFO at 4a601d28
[devinfo_relocate_spec] ret: 0 , total: 131072 , CONFIG_DEVINFO_SIZE: 131072
In:    serial@78B3000
Out:   serial@78B3000
Err:   serial@78B3000
machid: 801000d
Card did not respond to voltage select!
eth2 MAC Address from ART is not valid
eth3 MAC Address from ART is not valid
eth4 MAC Address from ART is not valid
eth5 MAC Address from ART is not valid
#################################
######### auto_recovery #########
#################################
 ===  enabled:1,  ===  boot_part:1,    ===  maxpartialboots:3
boot_count_buffer_size = 2048, total number = 64
i=61, offset = 0x105e800, last_offset = 0x105e000
BOOT_COUNT_TO_RECOVERY
Updating boot_count...
boot->Count:1 ,boot->CheckSum:20110812, offset:0x105e800
#### ~~~~~~~~~~~~~ ####
Auto-update from TFTP: failed, env. variable 'updatefile' not found
#### auto_recovery check ####
Erasing NAND...
Erasing at 0x1020000 -- 100% complete.
Writing to NAND... OK
#### auto_recovery:2 ####
Hit any key to stop autoboot:  0

my printenv

IPQ807x# printenv
altkern=a680000
auto_recovery=yes
baudrate=115200
boot_part=2
bootargs=console=ttyMSM0,115200n8
bootcmd=run bootusb; if test $auto_recovery = no; then bootipq; elif test $boot_part = 1; then run bootpart1; else run bootpart2; fi
bootdelay=2
bootpart1=set bootargs $partbootargs && nand read $loadaddr $prikern $kernsize && bootm $loadaddr
bootpart2=set bootargs $partbootargs2 && nand read $loadaddr $altkern $kernsize && bootm $loadaddr
bootusb=usb start && usbboot $loadaddr 0 && bootm $loadaddr
eth1addr=c4:41:1e:f9:39:72
ethact=eth0
ethaddr=c4:41:1e:f9:39:72
fdt_high=0x4A400000
fdtcontroladdr=4a97b4b0
fileaddr=44000000
filesize=b2e7
flash_type=2
flashimg=tftpboot $loadaddr $image && nand erase $prikern $imgsize && nand write $loadaddr $prikern $filesize
flashimg2=tftpboot $loadaddr $image && nand erase $altkern $imgsize && nand write $loadaddr $altkern $filesize
ftd_high=0x4A400000
image=chiron.img
imgsize=9600000
ipaddr=192.168.1.1
kernsize=600000
loadaddr=44000000
machid=801000d
maxpartialboots=3
mtdids=nand0=nand0
netmask=255.255.255.0
partbootargs=init=/sbin/init rootfstype=squashfs ubi.mtd=22,2048 ubi.block=0,0 root=/dev/ubiblock0_0 rootwait ro
partbootargs2=init=/sbin/init rootfstype=squashfs ubi.mtd=24,2048 ubi.block=0,0 root=/dev/ubiblock0_0 rootwait ro
prikern=1080000
serverip=192.168.1.100
soc_version_major=2
soc_version_minor=0
stderr=serial@78B3000
stdin=serial@78B3000
stdout=serial@78B3000

Environment size: 1503/262140 bytes

[lytr]

@deseag

Starting kernel ...

Jumping to AARCH64 kernel via monitor

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158
S - IMAGE_VARIANT_STRING=HAACANAZA

It looks like your router is broken. When trying to load the kernel it returns to uboot.
Try running mtest from uboot.

[FanOfOpenWRT]

I stuck my MX4300 in a closet and went back to Linksys E8450 a while back mainly because the MX4300 would randomly drop or refuse WiFi connections from my phone (Pixel 6 Pro) on 5GHz...

Has this been a problem for anyone else, or has it been fixed some time ago? Thanks. (Some context that might be helpful to inform a response: I run SNAPSHOT, and stopped using the MX4300 in February.)