Xiaomi WiFi Router 3G

thx, fixed :wink:

but does not help.

this is my FireTv it tries to connect .....

Mon Feb 12 09:24:39 2018 daemon.notice hostapd: wlan0: STA 0c:47:c9:b8:12:52 IEEE 802.11: did not acknowledge authentication response
Mon Feb 12 09:24:49 2018 daemon.info hostapd: wlan0: STA 0c:47:c9:b8:12:52 IEEE 802.11: disassociated
Mon Feb 12 09:24:50 2018 daemon.info hostapd: wlan0: STA 0c:47:c9:b8:12:52 IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)
Mon Feb 12 09:29:39 2018 daemon.notice hostapd: wlan0: STA 0c:47:c9:b8:12:52 IEEE 802.11: did not acknowledge authentication response
Mon Feb 12 09:29:49 2018 daemon.info hostapd: wlan0: STA 0c:47:c9:b8:12:52 IEEE 802.11: disassociated
Mon Feb 12 09:29:50 2018 daemon.info hostapd: wlan0: STA 0c:47:c9:b8:12:52 IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)
Mon Feb 12 09:34:39 2018 daemon.notice hostapd: wlan0: STA 0c:47:c9:b8:12:52 IEEE 802.11: did not acknowledge authentication response
Mon Feb 12 09:34:49 2018 daemon.info hostapd: wlan0: STA 0c:47:c9:b8:12:52 IEEE 802.11: disassociated
Mon Feb 12 09:34:50 2018 daemon.info hostapd: wlan0: STA 0c:47:c9:b8:12:52 IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)
Mon Feb 12 09:39:40 2018 daemon.notice hostapd: wlan0: STA 0c:47:c9:b8:12:52 IEEE 802.11: did not acknowledge authentication response
Mon Feb 12 09:39:50 2018 daemon.info hostapd: wlan0: STA 0c:47:c9:b8:12:52 IEEE 802.11: disassociated
Mon Feb 12 09:39:51 2018 daemon.info hostapd: wlan0: STA 0c:47:c9:b8:12:52 IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)

30 mins later ...... connect

Mon Feb 12 09:55:22 2018 daemon.info hostapd: wlan0: STA 0c:47:c9:b8:12:52 IEEE 802.11: associated (aid 3)
Mon Feb 12 09:55:22 2018 daemon.notice hostapd: wlan0: AP-STA-CONNECTED 0c:47:c9:b8:12:52
Mon Feb 12 09:55:22 2018 daemon.info hostapd: wlan0: STA 0c:47:c9:b8:12:52 WPA: pairwise key handshake completed (RSN)
Mon Feb 12 09:55:23 2018 daemon.info dnsmasq-dhcp[1591]: DHCPREQUEST(br-lan) 192.168.1.198 0c:47:c9:b8:12:52
Mon Feb 12 09:55:23 2018 daemon.info dnsmasq-dhcp[1591]: DHCPACK(br-lan) 192.168.1.198 0c:47:c9:b8:12:52 amazon-f25e4e77f
1 Like

Hi all,

I bought this router a couple of weeks ago. First I tested with the original firmware but the whoole stuff with the chinese characters made me angry.
So I decided to install lede on this device. But this was a mistake from my point of view. I must say, I am not a programmer, only a experienced technician and this in Windows enviroment.

I followed the installation steps of hammer (Xiaomi WiFi Router 3G) and since this moment nothing works anymore.
My router was booting with a yellow led at startup and after some seconds there were the blue led blinking one time and further color was permanent yellow.

I tried to recover to original firmware but had no chance anymore. I tried the LED version to debrick the router and also the stuff with the wireshark sniffer but nothing works.
So I bought a UART cable (https://www.amazon.de/gp/product/B071CWTFWL/ref=oh_aui_detailpage_o02_s00?ie=UTF8&psc=1) and waited again some time.

Now everything is here and I started to debrick the router and had again trouble. If I connect the UART cable with the PCB (3,3V; tx ; rx ; ground) and start then the router by reconnecting the power supply
nothing happens. I get only a connection to the router when I follow these steps.

  1. Prepare putty with com23 and 115200 bit per sec
  2. Disconnect USB adapter and router from power supply.
  3. Connect router to power supply
  4. Connect USB adapter to laptop
  5. Start prepared putty session

Is this the right way? Or is there any other possibility to connect to te router?

When I then disconnect the power supply and reconnect it, nothing happens to the router. That means the router seems to be not booting, also the led stays grey or without any colour.
So, can someone help me with this connection steps?

Nevertheless, I can see a little success in the putty window but then the whole boot process seems to be interrupted by an error:
[ 4.652564] [<8051dd8c>] kernel_init_freeable+0x180/0x238
[ 4.657952] [<803f74dc>] kernel_init+0x10/0x10c
[ 4.662462] [<8000a458>] ret_from_kernel_thread+0x14/0x1c
[ 4.667926] ubi0 error: __erase_worker: failed to erase PEB 939, error -5
[ 4.674721] ubi0: mark PEB 939 as bad

What does this mean now and can anybody help me to debrick the router?

Hope someone reads and understand my phrases here.

Will try to add the whole putty output of the boot procedure.

Summary

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2018.02.12 13:21:11 =~=~=~=~=~=~=~=~=~=~=~=
ÿ¡ørelocate_code Pointer at: 8ffac000

Config XHCI 40M PLL

Allocate 16 byte aligned buffer: 8ffdffd0

Enable NFI Clock

MTK NAND # : Use HW ECC

NAND ID [C8 D1 80 95 42]

Device not found,à]¢¡¥ÍDevice!

chip_mode=00000001

Support this Device in MTK table! c8d1

select_chip

[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16

Signature matched and data read!

load_fact_bbt success 1023

load fact bbt success

[mtk_nand] probe successfully!

mtd->writesize=2048 mtd->oobsize=64, mtd->erasesize=131072 devinfo.iowidth=8

..============================================

Ralink UBoot Version: 5.0.0.0


ASIC MT7621A DualCore (MAC to MT7530 Mode)

DRAM_CONF_FROM: Auto-Detection

DRAM_TYPE: DDR3

DRAM bus: 16 bit

Xtal Mode=5 OCP Ratio=1/4

Flash component: NAND Flash

Date:Apr 17 2017 Time:17:00:02

============================================

icache: sets:256, ways:4, linesz:32 ,total:32768

dcache: sets:256, ways:4, linesz:32 ,total:32768

The CPU freq = 880 MHZ

estimate memory size =256 Mbytes

©Y®×ÕñŠJ¨ø
§þ’¨ZYºùþ+Í¡via TFTP.

šþ 2 1 0

Booting System 2

..Erasing NAND Flash...

ranand_erase: start:80000, len:20000

.Writing to NAND Flash...

done

3: System Boot system code via Flash.

Booting image at bc600000 ...

Image Name: MIPS OpenWrt Linux-4.9.76

Image Type: MIPS Linux Kernel Image (lzma compressed)

Data Size: 1709929 Bytes = 1.6 MB

Load Address: 80001000

Entry Point: 80001000

........................... Verifying Checksum ... OK

Uncompressing Kernel Image ... OK

commandline uart_en=0 factory_mode=0 usb_u3=0

No initrd

Transferring control to Linux (at address 80001000) ...

Giving linux memsize in MB, 256

Starting kernel ...

[ 0.000000] Linux version 4.9.76 (buildbot@builds) (gcc version 5.5.0 (OpenWrt GCC 5.5.0 r5678-0b28cc5) ) #0 SMP Sat Jan 13 07:00:14 2018
[ 0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[ 0.000000] bootconsole [early0] enabled
[ 0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[ 0.000000] MIPS: machine is Xiaomi Mi Router 3G
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 10000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] VPE topology {2,2} total 4
[ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0x0000000000000000-0x000000000fffffff]
[ 0.000000] HighMem empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000000000000-0x000000000fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x000000000fffffff]
[ 0.000000] percpu: Embedded 12 pages/cpu @8120f000 s17744 r8192 d23216 u49152
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 65024
[ 0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[ 0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[ 0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[ 0.000000] Writing ErrCtl register=00054004
[ 0.000000] Readback ErrCtl register=00054004
[ 0.000000] Memory: 253888K/262144K available (4082K kernel code, 221K rwdata, 920K rodata, 204K init, 272K bss, 8256K reserved, 0K cma-reserved, 0K highmem)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[ 0.000000] Hierarchical RCU implementation.
[ 0.000000] NR_IRQS:256
[ 0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[ 0.000009] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[ 0.007792] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[ 0.070420] pid_max: default: 32768 minimum: 301
[ 0.075152] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.081677] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.092987] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.093000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.093011] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 0.093164] CPU1 revision is: 0001992f (MIPS 1004Kc)
[ 0.177428] Synchronize counters for CPU 1:
[ 0.177430] done.
[ 0.188538] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.188546] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.188555] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 0.188638] CPU2 revision is: 0001992f (MIPS 1004Kc)
[ 0.269443] Synchronize counters for CPU 2:
[ 0.269444] done.
[ 0.277035] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.277042] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[ 0.277050] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[ 0.277143] CPU3 revision is: 0001992f (MIPS 1004Kc)
[ 0.354625] Synchronize counters for CPU 3:
[ 0.354626] done.
[ 0.360866] Brought up 4 CPUs
[ 0.367755] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.377545] futex hash table entries: 1024 (order: 3, 32768 bytes)
[ 0.383789] pinctrl core: initialized pinctrl subsystem
[ 0.389672] NET: Registered protocol family 16
[ 0.439538] pull PCIe RST: RALINK_RSTCTRL = 4000000
[ 0.744715] release PCIe RST: RALINK_RSTCTRL = 7000000
[ 0.749764] ***** Xtal 40MHz *****
[ 0.753119] release PCIe RST: RALINK_RSTCTRL = 7000000
[ 0.758215] Port 0 N_FTS = 1b102800
[ 0.761688] Port 1 N_FTS = 1b102800
[ 0.765126] Port 2 N_FTS = 1b102800
[ 1.919885] PCIE2 no card, disable it(RST&CLK)
[ 1.924244] -> 21007f2
[ 1.926643] PCIE0 enabled
[ 1.929236] PCIE1 enabled
[ 1.931832] PCI host bridge /pcie@1e140000 ranges:
[ 1.936615] MEM 0x0000000060000000..0x000000006fffffff
[ 1.941770] IO 0x000000001e160000..0x000000001e16ffff
[ 1.946971] PCI coherence region base: 0x60000000, mask/settings: 0xf0000002
[ 2.008455] mt7621_gpio 1e000600.gpio: registering 32 gpios
[ 2.014269] mt7621_gpio 1e000600.gpio: registering 32 gpios
[ 2.019973] mt7621_gpio 1e000600.gpio: registering 32 gpios
[ 2.026771] PCI host bridge to bus 0000:00
[ 2.030796] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[ 2.037637] pci_bus 0000:00: root bus resource [io 0xffffffff]
[ 2.043482] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[ 2.050237] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[ 2.058796] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 2.066716] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[ 2.075795] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[ 2.082335] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[ 2.089222] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000]
[ 2.095798] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000]
[ 2.102700] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[ 2.109451] pci 0000:00:01.0: BAR 8: assigned [mem 0x60100000-0x601fffff]
[ 2.116174] pci 0000:00:01.0: BAR 9: assigned [mem 0x60200000-0x602fffff pref]
[ 2.123361] pci 0000:00:00.0: BAR 1: assigned [mem 0x60300000-0x6030ffff]
[ 2.130093] pci 0000:00:01.0: BAR 1: assigned [mem 0x60310000-0x6031ffff]
[ 2.136849] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff]
[ 2.143568] pci 0000:00:00.0: PCI bridge to [bus 01]
[ 2.148504] pci 0000:00:00.0: bridge window [mem 0x60000000-0x600fffff]
[ 2.155235] pci 0000:02:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit]
[ 2.162511] pci 0000:02:00.0: BAR 6: assigned [mem 0x60200000-0x6020ffff pref]
[ 2.169657] pci 0000:00:01.0: PCI bridge to [bus 02]
[ 2.174596] pci 0000:00:01.0: bridge window [mem 0x60100000-0x601fffff]
[ 2.181321] pci 0000:00:01.0: bridge window [mem 0x60200000-0x602fffff pref]
[ 2.188518] BAR0 at slot 0 = 0
[ 2.191508] bus=0x0, slot = 0x0
[ 2.194624] BAR0 at slot 1 = 0
[ 2.197643] bus=0x0, slot = 0x1
[ 2.200775] bus=0x1, slot = 0x0, irq=0xff
[ 2.204737] bus=0x2, slot = 0x1, irq=0xff
[ 2.209929] clocksource: Switched to clocksource GIC
[ 2.216579] NET: Registered protocol family 2
[ 2.221739] TCP established hash table entries: 2048 (order: 1, 8192 bytes)
[ 2.228629] TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
[ 2.235051] TCP: Hash tables configured (established 2048 bind 2048)
[ 2.241396] UDP hash table entries: 256 (order: 1, 8192 bytes)
[ 2.247153] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[ 2.253606] NET: Registered protocol family 1
[ 2.489876] 4 CPUs re-calibrate udelay(lpj = 2924544)
[ 2.496290] Crashlog allocated RAM at address 0x3f00000
[ 2.501830] workingset: timestamp_bits=30 max_order=16 bucket_order=0
[ 2.513661] random: fast init done
[ 2.517013] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 2.522841] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[ 2.535186] io scheduler noop registered
[ 2.539022] io scheduler deadline registered (default)
[ 2.544618] gpio-export gpio_export: 1 gpio(s) exported
[ 2.550329] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 2.559498] console [ttyS0] disabled
[ 2.563109] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[ 2.572086] console [ttyS0] enabled
[ 2.572086] console [ttyS0] enabled
[ 2.578943] bootconsole [early0] disabled
[ 2.578943] bootconsole [early0] disabled
[ 2.588124] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[ 2.595215] Allocate 16 byte aligned buffer: 80588360
[ 2.600263] Enable NFI Clock
[ 2.603129] # MTK NAND # : Use HW ECC
[ 2.606785] Device not found, ID: c8d1
[ 2.610529] Not Support this Device!

[ 2.614257] chip_mode=00000001
[ 2.617302] Support this Device in MTK table! c8d1

[ 2.622267] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[ 2.628724] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0xd1
[ 2.635062] nand: ESMT NAND 128MiB 3,3V 8-bit
[ 2.639398] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[ 2.646959] Scanning device for bad blocks
[ 2.729489] Bad eraseblock 551 at 0x0000044e0000
[ 2.734955] Bad eraseblock 557 at 0x0000045a0000
[ 2.750218] Bad eraseblock 632 at 0x000004f00000
[ 2.778126] Bad eraseblock 796 at 0x000006380000
[ 2.788700] Bad eraseblock 838 at 0x0000068c0000
[ 2.793462] Bad eraseblock 839 at 0x0000068e0000
[ 2.824283] 10 ofpart partitions found on MTD device MT7621-NAND
[ 2.830280] Creating 10 MTD partitions on "MT7621-NAND":
[ 2.835572] 0x000000000000-0x000000080000 : "Bootloader"
[ 2.842155] 0x000000080000-0x0000000c0000 : "Config"
[ 2.848182] 0x0000000c0000-0x000000100000 : "Bdata"
[ 2.854529] 0x000000100000-0x000000140000 : "Factory"
[ 2.860900] 0x000000140000-0x000000180000 : "crash"
[ 2.866865] 0x000000180000-0x0000001c0000 : "crash_syslog"
[ 2.873492] 0x0000001c0000-0x000000200000 : "reserved0"
[ 2.879816] 0x000000200000-0x000000600000 : "kernel_stock"
[ 2.886472] 0x000000600000-0x000000a00000 : "kernel"
[ 2.892612] 0x000000a00000-0x000007f80000 : "ubi"
[ 2.899284] [mtk_nand] probe successfully!
[ 2.904148] Signature matched and data read!
[ 2.908396] load_fact_bbt success 1023
[ 2.912717] libphy: Fixed MDIO Bus: probed
[ 2.982530] libphy: mdio: probed
[ 4.385340] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[ 4.392089] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 20
[ 4.402552] NET: Registered protocol family 10
[ 4.408521] NET: Registered protocol family 17
[ 4.413068] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[ 4.425985] 8021q: 802.1Q VLAN Support v1.8
[ 4.433092] UBI: auto-attach mtd9
[ 4.436415] ubi0: attaching mtd9
[ 4.462063] UBI: EOF marker found, PEBs from 19 will be erased
[ 4.469060] ubi0: scanning is finished
[ 4.488901] ubi0 warning: do_sync_erase: error -5 while erasing PEB 939, retry
[ 4.496183] ubi0 warning: do_sync_erase: error -5 while erasing PEB 939, retry
[ 4.503452] ubi0 warning: do_sync_erase: error -5 while erasing PEB 939, retry
[ 4.510783] ubi0 error: do_sync_erase: cannot erase PEB 939, error -5
[ 4.517197] CPU: 3 PID: 1 Comm: swapper/0 Not tainted 4.9.76 #0
[ 4.523085] Stack : 00000000 00000000 80557b4a 00000033 8040fbe4 00000000 00000000 80550000
[ 4.531435] 8fc5031c 804f5ea7 8048ccf4 00000003 00000001 80553824 802a2388 fffffffb
[ 4.539779] 00000000 8006ab98 80557b4a 00000039 00000000 00000000 80491900 8fc3b8b4
[ 4.548124] 8ff0f000 800a7840 00000000 00000003 8fc3b930 00000000 802a2388 00c3b8b4
[ 4.556469] 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 4.564812] ...
[ 4.567248] Call Trace:
[ 4.569702] [<8000f814>] show_stack+0x54/0x88
[ 4.574044] [<801e5b6c>] dump_stack+0x8c/0xd0
[ 4.578380] [<802a3d94>] do_sync_erase+0x174/0x2f0
[ 4.583151] [<802a41a8>] ubi_io_sync_erase+0x298/0x2e0
[ 4.588266] [<802a4e0c>] __erase_worker+0x184/0x658
[ 4.593122] [<802a5328>] erase_worker+0x48/0x70
[ 4.597630] [<802a4508>] do_work+0xe8/0x128
[ 4.601796] [<802a6ae0>] ubi_wl_get_peb+0xd0/0x250
[ 4.606565] [<8029f924>] try_write_vid_and_data+0x54/0x1f8
[ 4.612027] [<802a13b0>] ubi_eba_atomic_leb_change+0x1ec/0x2f4
[ 4.617857] [<802986d4>] ubi_update_layout_vol+0x54/0x80
[ 4.623146] [<80298d6c>] ubi_change_vtbl_record+0xb0/0x104
[ 4.628605] [<8029ab3c>] ubi_resize_volume+0x298/0x38c
[ 4.633720] [<8029bc24>] autoresize+0xd8/0x160
[ 4.638141] [<8029cb0c>] ubi_attach_mtd_dev+0x750/0xb5c
[ 4.643360] [<80534878>] ubi_init+0x284/0x340
[ 4.647696] [<80005658>] do_one_initcall+0xdc/0x1a4
[ 4.652564] [<8051dd8c>] kernel_init_freeable+0x180/0x238
[ 4.657952] [<803f74dc>] kernel_init+0x10/0x10c
[ 4.662462] [<8000a458>] ret_from_kernel_thread+0x14/0x1c
[ 4.667926] ubi0 error: __erase_worker: failed to erase PEB 939, error -5
[ 4.674721] ubi0: mark PEB 939 as bad

sry for that question, but did you ever tried the recovery with an USB stick ?

USB Stick (FAT)
Store a original Firmware on it.
Rename original Firmware to miwifi.bin

Power off device

Hold reset and power on until LED begins blinking in Yellow.

Now the system should read from USB and install Stock FW.

And again sry, but it could be possible that you did everything right. But after installing the image you are require to install the LUCI Webgui.

P.S.: Only an idea, i'am no Specialist !

Regards

LuFi

@Andy_x I don't know what went wrong but you are obviously booting a snapshot kernel (OpenWrt Linux-4.9.76 in the log). If you were booting the stock kernel it will be lower than 4.9 (can't remember the number).
Maybe you only flashed the kernel but forgot the rootfs?

I would try to revert to factory firmware as this process formats the nand partitions as far as I understand. I have used this process 2 or 3 times Xiaomi WiFi Router 3G
After that retry installing the snapshot again and hopefully you will be successful. Maybe redownload the snapshot files to make sure they were not broken (not completed).

hi guys i have some troubles here. my xiaomi router does not boot up any more but i have acces to failsafemode. I would like to restore lede to its original state, unfortunatly when i run firstboot it says -ash: firstboot : not found I don't know what to do I would like not to break something even more. do you know how i can fix it? thanks

Before firstboot you have to mount root so

mount_root
firstboot

thank you, I finally manage to restore my router. Now I get this message
`Packages for samba36-client found , but incompatible with the architectures configured``

when trying to install samba36-server pakage.How can I solve this? I've already upgraded using sysupgrade

Is this router relatively stable now?

Dear lfiebach,

the recovery with the USB stick I made first but as you can see in the trace output the USB interface isn't booted at this time and so the recovery process didn't work for this situation.

But also me, I am no specialist in this case. Therefore I wrote in this forum.

Nevertheless, thanks for your input.

Andy_x

Dear hammer,

thank you for your input. I will try your statement later. I hope it will work. I will give you a feedback.

Andy_x

I have soldered 3 pins to the board of my Xiaomi 3G router. I buy in Aliexpress an USB TTL cp2102.
I have followed the following tutorial for Linux:
https://elinux.org/Communicate_with_hardware_using_USB_cable_for_Ubuntu

Everything seems Ok.

But I try.
Power on the router.... then conect the usb to de pc... them
sudo gtkterm
Configuration -> Port -> /dev/ttyUSB0 -> baud rate 115200

But the screen of gtkterm is black. What am I doing wrong?


In windows i install the drivers. Open putty -> COM0 -> 115200 => Black screen

RX <—> TX — correctly
TX <—> RX — correctly

TX <—> TX — wrong
RX <—> RX — wrong

Seems ar71xx (big endian MIPS) is affected as well. I'm saying kernel bug at this point.

1 Like

Thanks all. I see some light :). I put in the console:

setenv flag_try_sys1_failed 0
setenv flag_last_success 0
saveenv
reset

But do not work :(. Then I try:

setenv ssh_en 1
setenv uart_en 1
saveenv
reset

But it do not work. This is what I get in console (Pardon for the format):

[    4.381281] 8021q: 802.1Q VLAN Support v1.8
[    4.388554] UBI: auto-attach mtd9
[    4.391885] ubi0: attaching mtd9
[    5.503402] ubi0: scanning is finished
[    5.523224] ubi0: attached mtd9 (name "ubi", size 117 MiB)
[    5.528728] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    5.535581] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    5.542334] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    5.549272] ubi0: good PEBs: 940, bad PEBs: 0, corrupted PEBs: 0
[    5.555263] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
[    5.562452] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2105747779
[    5.571549] ubi0: available PEBs: 916, total reserved PEBs: 24, PEBs reserved for bad PEB handling: 20
[    5.580843] ubi0: background thread "ubi_bgt0d" started, PID 375
[    5.580861] hctosys: unable to open rtc device (rtc0)
[    5.592400] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    5.599891] Please append a correct "root=" boot option; here are the available partitions:
[    5.608235] 1f00             512 mtdblock0 [    5.612222]  (driver?)
[    5.614572] 1f01             256 mtdblock1 [    5.618566]  (driver?)
[    5.620917] 1f02             256 mtdblock2 [    5.624899]  (driver?)
[    5.627267] 1f03             256 mtdblock3 [    5.631251]  (driver?)
[    5.633600] 1f04             256 mtdblock4 [    5.637594]  (driver?)
[    5.639945] 1f05             256 mtdblock5 [    5.643927]  (driver?)
[    5.646295] 1f06             256 mtdblock6 [    5.650280]  (driver?)
[    5.652629] 1f07            4096 mtdblock7 [    5.656623]  (driver?)
[    5.658974] 1f08            4096 mtdblock8 [    5.662956]  (driver?)
[    5.665327] 1f09          120320 mtdblock9 [    5.669312]  (driver?)
[    5.671661] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    5.682169] Rebooting in 1 seconds..

===================================================================
     		MT7621   stage1 code 10:33:11 (ASIC)
     		CPU=50000000 HZ BUS=12500000 HZ
==================================================================
Change MPLL source from XTAL to CR...
do MEMPLL setting..
MEMPLL Config : 0x11100000
3PLL mode + External loopback
=== XTAL-40Mhz === DDR-1200Mhz ===
PLL3 FB_DL: 0xc, 1/0 = 676/348 31000000
PLL4 FB_DL: 0x10, 1/0 = 547/477 41000000
PLL2 FB_DL: 0x14, 1/0 = 749/275 51000000
do DDR setting..[00320381]
Apply DDR3 Setting...(use customer AC)
          0    8   16   24   32   40   48   56   64   72   80   88   96  104  112  120
      --------------------------------------------------------------------------------
0000:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0001:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0002:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0003:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0004:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0005:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0006:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0007:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0008:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0009:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
000D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    1
000E:|    0    0    0    0    0    0    0    0    0    1    1    1    1    1    1    1
000F:|    0    0    0    0    1    1    1    1    1    1    1    1    1    1    0    0
0010:|    1    1    1    1    1    1    1    1    1    0    0    0    0    0    0    0
0011:|    1    1    1    1    0    0    0    0    0    0    0    0    0    0    0    0
0012:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0013:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0014:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0015:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0016:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0017:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0018:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
0019:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001A:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001B:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001C:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001D:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001E:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
001F:|    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0    0
rank 0 coarse = 15
rank 0 fine = 72
B:|    0    0    0    0    0    0    0    0    0    0    1    1    1    0    0    0
opt_dle value:11
DRAMC_R0DELDLY[018]=0000211F
==================================================================
		RX	DQS perbit delay software calibration 
==================================================================
1.0-15 bit dq delay value
==================================================================
bit|     0  1  2  3  4  5  6  7  8  9
--------------------------------------
0 |    10 6 9 9 7 7 9 5 6 7 
10 |    8 9 9 10 7 11 
--------------------------------------

==================================================================
2.dqs window
x=pass dqs delay value (min~max)center 
y=0-7bit DQ of every group
input delay:DQS0 =31 DQS1 = 33
==================================================================
bit	DQS0	 bit      DQS1
0  (1~60)30  8  (1~58)29
1  (1~59)30  9  (1~58)29
2  (1~62)31  10  (1~61)31
3  (1~60)30  11  (1~59)30
4  (1~60)30  12  (1~62)31
5  (1~62)31  13  (1~61)31
6  (1~62)31  14  (1~60)30
7  (1~60)30  15  (3~63)33
==================================================================
3.dq delay value last
==================================================================
bit|    0  1  2  3  4  5  6  7  8   9
--------------------------------------
0 |    11 7 9 10 8 7 9 6 10 11 
10 |    10 12 11 12 10 11 
==================================================================
==================================================================
     TX  perbyte calibration 
==================================================================
DQS loop = 15, cmp_err_1 = ffff0000 
dqs_perbyte_dly.last_dqsdly_pass[0]=15,  finish count=1 
dqs_perbyte_dly.last_dqsdly_pass[1]=15,  finish count=2 
DQ loop=15, cmp_err_1 = ffff01a2
DQ loop=14, cmp_err_1 = ffff0080
dqs_perbyte_dly.last_dqdly_pass[1]=14,  finish count=1 
DQ loop=13, cmp_err_1 = ffff0080
DQ loop=12, cmp_err_1 = ffff0000
dqs_perbyte_dly.last_dqdly_pass[0]=12,  finish count=2 
byte:0, (DQS,DQ)=(9,8)
byte:1, (DQS,DQ)=(8,8)
20,data:89
[EMI] DRAMC calibration passed

===================================================================
     		MT7621   stage1 code done 
     		CPU=50000000 HZ BUS=12500000 HZ
===================================================================


U-Boot 1.1.3 (Jul 13 2017 - 17:10:56)

Board: Ralink APSoC DRAM:  256 MB
Power on memory test. Memory size= 256 MB...OK!
relocate_code Pointer at: 8ffac000

Config XHCI 40M PLL 
******************************
Software System Reset Occurred
******************************
Allocate 16 byte aligned buffer: 8ffdff50
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [C8 D1 80 95 40]
Device not found, ID: c8d1
Not Support this Device! 
chip_mode=00000001
Support this Device in MTK table! c8d1 
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,	mtd->erasesize=131072  devinfo.iowidth=8
..============================================ 
Ralink UBoot Version: 5.0.0.0
-------------------------------------------- 
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection 
DRAM_TYPE: DDR3 
DRAM bus: 16 bit
Xtal Mode=5 OCP Ratio=1/4
Flash component: NAND Flash
Date:Jul 13 2017  Time:17:10:56
============================================ 
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768 

 ##### The CPU freq = 880 MHZ #### 
 estimate memory size =256 Mbytes
#Reset_MT7530
set LAN/WAN LWLLL

Please choose the operation: 
   1: Load system code to SDRAM via TFTP. 
   2: Load system code then write to Flash via TFTP. 
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial. 
   9: Load Boot Loader code then write to Flash via TFTP. 
 3 
You choosed 4

 0 

   
4: System Enter Boot Command Line Interface.

U-Boot 1.1.3 (Jul 13 2017 - 17:10:56)
MT7621 #

Thanks to @guilhermehnog:

I’ve been able to unbrick, what i did was:

"1 - Conect to Serial
2 - type 4 to enter command prompt
3 - type this commands:
setenv flag_try_sys1_failed=0 (check if flag name is correct with printenv)
setenv flag_try_sys2_failed=0 (check if flag name is correct with printenv)
setenv flag_last_success=0
saveenv
4 - connect pendrive with original stock dev firmware renamed to miwifi.bin
5 - default brick recovery process: reboot pressing reset button until yellow led start flashing, then release reset button.
6 - wait completion
7 - Done.

Thanks Hammer and Rising_sun for the help."

Works!!!!

OpenWrt SNAPSHOT r6150-dc7a1e8
signal strength: -60dbm
I use just only one client to connect router: a ipad air2.
When wlan just start:
I'm a newuser of this forum , I can post just one image, so I delete this image.
ping value is mostly below 100ms at this time.

After play game for some time, network get stucked, at the same place, close all programs on pad, ping value increase huge, won't decrease untill restart wlan on router, after restart ping value decrease to normal:
IMG_1879
sometimes, ping value is huge just at first connect.
I'm sure it's mt76 driver's problem, because it's never happen at wndr3800 openwrt system, when totally at same conditons.

Looks pretty normal, I think you have a huge beacon intervall setting.

Here with standard beacon intervall :

PING 192.168.178.54 (192.168.178.54): 56 data bytes
64 bytes from 192.168.178.54: seq=4 ttl=64 time=255.147 ms << screen already on
64 bytes from 192.168.178.54: seq=5 ttl=64 time=2.927 ms
64 bytes from 192.168.178.54: seq=6 ttl=64 time=125.018 ms
64 bytes from 192.168.178.54: seq=7 ttl=64 time=37.873 ms
64 bytes from 192.168.178.54: seq=8 ttl=64 time=50.598 ms
64 bytes from 192.168.178.54: seq=9 ttl=64 time=66.231 ms
64 bytes from 192.168.178.54: seq=10 ttl=64 time=80.357 ms
64 bytes from 192.168.178.54: seq=11 ttl=64 time=93.982 ms
64 bytes from 192.168.178.54: seq=12 ttl=64 time=108.623 ms
64 bytes from 192.168.178.54: seq=13 ttl=64 time=122.140 ms
64 bytes from 192.168.178.54: seq=14 ttl=64 time=134.786 ms
64 bytes from 192.168.178.54: seq=15 ttl=64 time=534.684 ms
64 bytes from 192.168.178.54: seq=16 ttl=64 time=162.722 ms
64 bytes from 192.168.178.54: seq=17 ttl=64 time=176.963 ms
64 bytes from 192.168.178.54: seq=18 ttl=64 time=192.263 ms
64 bytes from 192.168.178.54: seq=19 ttl=64 time=206.420 ms
64 bytes from 192.168.178.54: seq=20 ttl=64 time=218.882 ms
64 bytes from 192.168.178.54: seq=21 ttl=64 time=232.816 ms
64 bytes from 192.168.178.54: seq=22 ttl=64 time=248.760 ms
64 bytes from 192.168.178.54: seq=23 ttl=64 time=261.155 ms
64 bytes from 192.168.178.54: seq=24 ttl=64 time=1.559 ms << used wifi on my iphone
64 bytes from 192.168.178.54: seq=25 ttl=64 time=2.284 ms
64 bytes from 192.168.178.54: seq=26 ttl=64 time=1.342 ms
64 bytes from 192.168.178.54: seq=27 ttl=64 time=1.739 ms
64 bytes from 192.168.178.54: seq=28 ttl=64 time=2.394 ms
64 bytes from 192.168.178.54: seq=29 ttl=64 time=2.915 ms
64 bytes from 192.168.178.54: seq=30 ttl=64 time=104.120 ms
64 bytes from 192.168.178.54: seq=31 ttl=64 time=118.033 ms
64 bytes from 192.168.178.54: seq=32 ttl=64 time=1.323 ms
64 bytes from 192.168.178.54: seq=33 ttl=64 time=1.315 ms
64 bytes from 192.168.178.54: seq=34 ttl=64 time=1.332 ms
64 bytes from 192.168.178.54: seq=35 ttl=64 time=2.730 ms
64 bytes from 192.168.178.54: seq=36 ttl=64 time=2.804 ms
64 bytes from 192.168.178.54: seq=37 ttl=64 time=3.635 ms << put screen to off
64 bytes from 192.168.178.54: seq=38 ttl=64 time=217.033 ms
64 bytes from 192.168.178.54: seq=39 ttl=64 time=2.900 ms
64 bytes from 192.168.178.54: seq=40 ttl=64 time=1.859 ms
64 bytes from 192.168.178.54: seq=41 ttl=64 time=3.371 ms
64 bytes from 192.168.178.54: seq=42 ttl=64 time=17.241 ms
64 bytes from 192.168.178.54: seq=43 ttl=64 time=31.232 ms
64 bytes from 192.168.178.54: seq=44 ttl=64 time=45.347 ms
64 bytes from 192.168.178.54: seq=45 ttl=64 time=59.348 ms
.... << no answer anymore

Now with 2500ms as beacon intervall :

64 bytes from 192.168.178.54: seq=176 ttl=64 time=300.258 ms   << screen already on
64 bytes from 192.168.178.54: seq=177 ttl=64 time=1835.747 ms
64 bytes from 192.168.178.54: seq=178 ttl=64 time=825.881 ms
64 bytes from 192.168.178.54: seq=179 ttl=64 time=3.251 ms
64 bytes from 192.168.178.54: seq=180 ttl=64 time=2745.522 ms
64 bytes from 192.168.178.54: seq=181 ttl=64 time=1735.636 ms
64 bytes from 192.168.178.54: seq=182 ttl=64 time=725.718 ms
64 bytes from 192.168.178.54: seq=183 ttl=64 time=1.354 ms
64 bytes from 192.168.178.54: seq=184 ttl=64 time=1369.269 ms
64 bytes from 192.168.178.54: seq=185 ttl=64 time=359.392 ms
64 bytes from 192.168.178.54: seq=186 ttl=64 time=183.468 ms
64 bytes from 192.168.178.54: seq=187 ttl=64 time=1.801 ms
64 bytes from 192.168.178.54: seq=188 ttl=64 time=1.388 ms
64 bytes from 192.168.178.54: seq=189 ttl=64 time=674.256 ms
64 bytes from 192.168.178.54: seq=190 ttl=64 time=1329.445 ms
64 bytes from 192.168.178.54: seq=191 ttl=64 time=319.563 ms
64 bytes from 192.168.178.54: seq=192 ttl=64 time=1.359 ms
64 bytes from 192.168.178.54: seq=193 ttl=64 time=1.321 ms
64 bytes from 192.168.178.54: seq=194 ttl=64 time=9.719 ms
64 bytes from 192.168.178.54: seq=195 ttl=64 time=2.946 ms
64 bytes from 192.168.178.54: seq=196 ttl=64 time=551.672 ms
64 bytes from 192.168.178.54: seq=197 ttl=64 time=837.358 ms
64 bytes from 192.168.178.54: seq=198 ttl=64 time=3.050 ms
64 bytes from 192.168.178.54: seq=199 ttl=64 time=77.710 ms
64 bytes from 192.168.178.54: seq=200 ttl=64 time=1627.863 ms
64 bytes from 192.168.178.54: seq=201 ttl=64 time=618.004 ms
64 bytes from 192.168.178.54: seq=202 ttl=64 time=4700.818 ms
64 bytes from 192.168.178.54: seq=203 ttl=64 time=3690.964 ms
64 bytes from 192.168.178.54: seq=204 ttl=64 time=2682.227 ms
64 bytes from 192.168.178.54: seq=205 ttl=64 time=1672.348 ms
64 bytes from 192.168.178.54: seq=206 ttl=64 time=662.512 ms
64 bytes from 192.168.178.54: seq=207 ttl=64 time=2.810 ms
64 bytes from 192.168.178.54: seq=208 ttl=64 time=1228.982 ms
64 bytes from 192.168.178.54: seq=209 ttl=64 time=219.114 ms
64 bytes from 192.168.178.54: seq=210 ttl=64 time=1.200 ms << used wifi on iphone
64 bytes from 192.168.178.54: seq=211 ttl=64 time=1.940 ms
64 bytes from 192.168.178.54: seq=212 ttl=64 time=1.478 ms
64 bytes from 192.168.178.54: seq=213 ttl=64 time=2.280 ms
64 bytes from 192.168.178.54: seq=214 ttl=64 time=3.137 ms
64 bytes from 192.168.178.54: seq=215 ttl=64 time=3.010 ms
64 bytes from 192.168.178.54: seq=216 ttl=64 time=830.521 ms
64 bytes from 192.168.178.54: seq=217 ttl=64 time=2.988 ms
64 bytes from 192.168.178.54: seq=218 ttl=64 time=258.152 ms
64 bytes from 192.168.178.54: seq=219 ttl=64 time=357.862 ms
64 bytes from 192.168.178.54: seq=220 ttl=64 time=201.423 ms
64 bytes from 192.168.178.54: seq=221 ttl=64 time=2.967 ms
64 bytes from 192.168.178.54: seq=222 ttl=64 time=67.781 ms
64 bytes from 192.168.178.54: seq=223 ttl=64 time=2.833 ms
64 bytes from 192.168.178.54: seq=224 ttl=64 time=428.884 ms
64 bytes from 192.168.178.54: seq=225 ttl=64 time=166.965 ms
64 bytes from 192.168.178.54: seq=226 ttl=64 time=3.050 ms
64 bytes from 192.168.178.54: seq=227 ttl=64 time=2.789 ms << screen off somewhere here
64 bytes from 192.168.178.54: seq=240 ttl=64 time=1.360 ms
64 bytes from 192.168.178.54: seq=241 ttl=64 time=295.652 ms
64 bytes from 192.168.178.54: seq=242 ttl=64 time=129.838 ms
64 bytes from 192.168.178.54: seq=243 ttl=64 time=423.607 ms
64 bytes from 192.168.178.54: seq=244 ttl=64 time=271.309 ms
64 bytes from 192.168.178.54: seq=245 ttl=64 time=3.209 ms
64 bytes from 192.168.178.54: seq=246 ttl=64 time=6793.239 ms
64 bytes from 192.168.178.54: seq=247 ttl=64 time=5783.348 ms
64 bytes from 192.168.178.54: seq=248 ttl=64 time=4776.219 ms
64 bytes from 192.168.178.54: seq=249 ttl=64 time=3766.335 ms
64 bytes from 192.168.178.54: seq=250 ttl=64 time=2756.420 ms
64 bytes from 192.168.178.54: seq=251 ttl=64 time=1746.496 ms
64 bytes from 192.168.178.54: seq=252 ttl=64 time=736.554 ms
64 bytes from 192.168.178.54: seq=253 ttl=64 time=3.134 ms
64 bytes from 192.168.178.54: seq=254 ttl=64 time=1466.780 ms
64 bytes from 192.168.178.54: seq=255 ttl=64 time=456.913 ms
64 bytes from 192.168.178.54: seq=256 ttl=64 time=4881.948 ms
64 bytes from 192.168.178.54: seq=257 ttl=64 time=3872.095 ms
64 bytes from 192.168.178.54: seq=258 ttl=64 time=2862.241 ms
64 bytes from 192.168.178.54: seq=259 ttl=64 time=1852.294 ms
64 bytes from 192.168.178.54: seq=260 ttl=64 time=842.311 ms
64 bytes from 192.168.178.54: seq=261 ttl=64 time=2.997 ms
64 bytes from 192.168.178.54: seq=262 ttl=64 time=450.499 ms
.... << no answer anymore

But having one small issue at 5Ghz, device cant transfer anything at bad wifi reception anymore, iPhone and router shows as connected, and does not recover for a long time eventhough standing in front of the router after the event. Wifi down, up (command "wifi") helps instantly. Maybe it has something with the iPhone -70dbm management. And I think does only happen with my iPhone 7 and not iPhone 5s. The biggest difference I see between the devices is one stream vs two streams for the wifi stream.

2.4Ghz is broken for my iPhones with this router.

Running great otherweise with 5Ghz. Thanks to nbd and the openwrt developers. Great work. :slight_smile:

Edit: Ofcourse not normal if you have not changed dtim at all.
Edit2:I mean beacon intervall not dtim.

no, I have not set beacon interval at all. and I check /var/run/hostapd-phy1.conf, beacon_int=100.
on the contrary, my 2.4g is good with this ipad, so I use 2.4g currently. 5g is buggy and unuseable.
whatever you do on ipad, 5g turns to high ping value >1000ms .
I think problem is in 7612 driver, if problem is in ipad or ios, 2.4g would suffer either. but 2.4g and wndr3800’s 5g are good at same conditions.