Meraki MR33 only has 433Mbps on 5G channel

Hello experts, sorry to bother you since I have nothing to choose with this issue.

I have 3 MR33 and 2 MR42 as my home wireless connector. Due to the expired cloud contracts, all devices flashed with OpenWRT.

But right now, I see that all MR33 APs only reach 433Mbps speed under the 5G channel.

The system log as below:

[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 5.10.120 (haitao@haitao) (arm-openwrt-linux-muslgnueabi-gcc (OpenWrt GCC 11.3.0 r19822-7e627f12f6) 11.3.0, GNU ld (GNU Binutils) 2.37) #0 SMP Sat Jun 18 08:34:18 2022
[    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt: Machine model: Meraki MR33 Access Point
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000080000000-0x000000008fffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000080000000-0x0000000087dfffff]
[    0.000000]   node   0: [mem 0x0000000087e00000-0x0000000087ffffff]
[    0.000000]   node   0: [mem 0x0000000088000000-0x000000008fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000080000000-0x000000008fffffff]
[    0.000000] On node 0 totalpages: 65536
[    0.000000]   Normal zone: 576 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 65536 pages, LIFO batch:15
[    0.000000] percpu: Embedded 15 pages/cpu s30860 r8192 d22388 u61440
[    0.000000] pcpu-alloc: s30860 r8192 d22388 u61440 alloc=15*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 64960
[    0.000000] Kernel command line: 
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes, linear)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 247180K/262144K available (6180K kernel code, 603K rwdata, 1552K rodata, 1024K init, 236K bss, 14964K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000] 	Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] arch_timer: cp15 timer(s) running at 48.00MHz (virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb11fd3bfb, max_idle_ns: 440795203732 ns
[    0.000009] sched_clock: 56 bits at 48MHz, resolution 20ns, wraps every 4398046511096ns
[    0.000025] Switching to timer-based delay loop, resolution 20ns
[    0.000323] Calibrating delay loop (skipped), value calculated using timer frequency.. 96.00 BogoMIPS (lpj=480000)
[    0.000349] pid_max: default: 32768 minimum: 301
[    0.000533] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.000552] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.001549] CPU: Testing write buffer coherency: ok
[    0.001908] qcom_scm: convention: smc legacy
[    0.002854] Setting up static identity map for 0x80300000 - 0x8030003c
[    0.003006] rcu: Hierarchical SRCU implementation.
[    0.003271] dyndbg: Ignore empty _ddebug table in a CONFIG_DYNAMIC_DEBUG_CORE build
[    0.003629] smp: Bringing up secondary CPUs ...
[    0.007084] smp: Brought up 1 node, 4 CPUs
[    0.007109] SMP: Total of 4 processors activated (384.00 BogoMIPS).
[    0.007118] CPU: All CPU(s) started in SVC mode.
[    0.012204] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[    0.012356] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.012383] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.012612] pinctrl core: initialized pinctrl subsystem
[    0.014373] NET: Registered protocol family 16
[    0.014676] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.015781] thermal_sys: Registered thermal governor 'step_wise'
[    0.016210] cpuidle: using governor ladder
[    0.016266] cpuidle: using governor menu
[    0.042241] cryptd: max_cpu_qlen set to 1000
[    0.046436] usbcore: registered new interface driver usbfs
[    0.046513] usbcore: registered new interface driver hub
[    0.046573] usbcore: registered new device driver usb
[    0.046625] pps_core: LinuxPPS API ver. 1 registered
[    0.046638] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.046666] PTP clock support registered
[    0.048300] clocksource: Switched to clocksource arch_sys_counter
[    0.049198] NET: Registered protocol family 2
[    0.049445] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.050192] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 6144 bytes, linear)
[    0.050241] TCP established hash table entries: 2048 (order: 1, 8192 bytes, linear)
[    0.050281] TCP bind hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.050332] TCP: Hash tables configured (established 2048 bind 2048)
[    0.050454] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.050498] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.050774] NET: Registered protocol family 1
[    0.050822] PCI: CLS 0 bytes, default 64
[    0.053004] workingset: timestamp_bits=14 max_order=16 bucket_order=2
[    0.057383] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.057409] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.190767] qcom-pcie 40000000.pci: host bridge /soc/pci@40000000 ranges:
[    0.190827] qcom-pcie 40000000.pci:       IO 0x0040200000..0x00402fffff -> 0x0040200000
[    0.190860] qcom-pcie 40000000.pci:      MEM 0x0040300000..0x0040ffffff -> 0x0040300000
[    0.469875] qcom-pcie 40000000.pci: Link up
[    0.470050] qcom-pcie 40000000.pci: PCI host bridge to bus 0000:00
[    0.470075] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.470093] pci_bus 0000:00: root bus resource [io  0x0000-0xfffff] (bus address [0x40200000-0x402fffff])
[    0.470109] pci_bus 0000:00: root bus resource [mem 0x40300000-0x40ffffff]
[    0.470160] pci 0000:00:00.0: [17cb:1001] type 01 class 0x060400
[    0.470189] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x00000fff]
[    0.470259] pci 0000:00:00.0: PME# supported from D0 D3hot
[    0.471845] PCI: bus0: Fast back to back transfers disabled
[    0.472166] pci 0000:01:00.0: [168c:0050] type 00 class 0x028000
[    0.472342] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    0.472612] pci 0000:01:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref]
[    0.473151] pci 0000:01:00.0: supports D1
[    0.473165] pci 0000:01:00.0: PME# supported from D0 D1 D3hot
[    0.474955] PCI: bus1: Fast back to back transfers disabled
[    0.475007] pci 0000:00:00.0: BAR 8: assigned [mem 0x40300000-0x405fffff]
[    0.475026] pci 0000:00:00.0: BAR 0: assigned [mem 0x40600000-0x40600fff]
[    0.475051] pci 0000:01:00.0: BAR 0: assigned [mem 0x40400000-0x405fffff 64bit]
[    0.475141] pci 0000:01:00.0: BAR 6: assigned [mem 0x40300000-0x4030ffff pref]
[    0.475159] pci 0000:00:00.0: PCI bridge to [bus 01-ff]
[    0.475176] pci 0000:00:00.0:   bridge window [mem 0x40300000-0x405fffff]
[    0.478006] pcieport 0000:00:00.0: AER: enabled with IRQ 105
[    0.480086] bam-dma-engine 8e04000.dma: num-channels unspecified in dt
[    0.480112] bam-dma-engine 8e04000.dma: num-ees unspecified in dt
[    0.481493] tcsr 1953000.ess_tcsr: setting ess interface select = 1
[    0.481596] tcsr 1949000.tcsr: setting wifi_glb_cfg = 41000000
[    0.481687] tcsr 1957000.tcsr: setting wifi_noc_memtype_m0_m2 = 2222222
[    0.481995] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
[    0.482558] msm_serial 78af000.serial: msm_serial: detected port #0
[    0.482602] msm_serial 78af000.serial: uartclk = 1843200
[    0.482656] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 34, base_baud = 115200) is a MSM
[    0.482684] msm_serial: console setup on port #0
[    1.168561] printk: console [ttyMSM0] enabled
[    1.173805] msm_serial 78b0000.serial: msm_serial: detected port #1
[    1.177506] msm_serial 78b0000.serial: uartclk = 1843200
[    1.183656] 78b0000.serial: ttyMSM1 at MMIO 0x78b0000 (irq = 35, base_baud = 115200) is a MSM
[    1.189601] msm_serial: driver initialized
[    1.202941] loop: module loaded
[    1.204577] nand: device found, Manufacturer ID: 0xc2, Chip ID: 0xf1
[    1.204897] nand: Macronix MX30LF1G18AC
[    1.211540] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    1.215063] Block protection check failed
[    1.222787] 12 fixed-partitions partitions found on MTD device qcom_nand.0
[    1.226772] Creating 12 MTD partitions on "qcom_nand.0":
[    1.233566] 0x000000000000-0x000000100000 : "sbl1"
[    1.240591] 0x000000100000-0x000000200000 : "mibib"
[    1.245069] 0x000000200000-0x000000300000 : "bootconfig"
[    1.249954] 0x000000300000-0x000000400000 : "qsee"
[    1.255486] 0x000000400000-0x000000500000 : "qsee_alt"
[    1.260096] 0x000000500000-0x000000580000 : "cdt"
[    1.264653] 0x000000580000-0x000000600000 : "cdt_alt"
[    1.269478] 0x000000600000-0x000000680000 : "ddrparams"
[    1.274469] 0x000000700000-0x000000900000 : "u-boot"
[    1.280995] 0x000000900000-0x000000b00000 : "u-boot-backup"
[    1.286119] 0x000000b00000-0x000000b80000 : "ART"
[    1.290082] 0x000000c00000-0x000007c00000 : "ubi"
[    1.406211] mdio_bus 90000.mdio-1: MDIO device at address 0 is missing.
[    1.408422] mdio_bus 90000.mdio-1: MDIO device at address 2 is missing.
[    1.412018] mdio_bus 90000.mdio-1: MDIO device at address 3 is missing.
[    1.418619] mdio_bus 90000.mdio-1: MDIO device at address 4 is missing.
[    1.425212] mdio_bus 90000.mdio-1: MDIO device at address 5 is missing.
[    1.578408] EDMA using MAC@ - using
[    1.578425] be:d1:97:61:32:ab
[    1.660707] i2c /dev entries driver
[    1.660983] i2c_qup 78b7000.i2c: using default clock-frequency 100000
[    1.663766] at24 0-0050: supply vcc not found, using dummy regulator
[    1.670488] at24 0-0050: 8192 byte 24c64 EEPROM, read-only
[    1.676519] i2c_qup 78b8000.i2c: using default clock-frequency 100000
[    1.684111] sdhci: Secure Digital Host Controller Interface driver
[    1.687836] sdhci: Copyright(c) Pierre Ossman
[    1.693985] sdhci-pltfm: SDHCI platform and OF driver helper
[    1.728757] lp5562 1-0030: internal clock used
[    1.749741] NET: Registered protocol family 10
[    1.751540] Segment Routing with IPv6
[    1.753213] NET: Registered protocol family 17
[    1.756905] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.761230] 8021q: 802.1Q VLAN Support v1.8
[    1.774327] Registering SWP/SWPB emulation handler
[    1.789258] UBI: auto-attach mtd11
[    1.789303] ubi0: attaching mtd11
[    2.591695] ubi0: scanning is finished
[    2.607465] ubi0: attached mtd11 (name "ubi", size 112 MiB)
[    2.607552] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    2.611998] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    2.618939] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    2.625700] ubi0: good PEBs: 896, bad PEBs: 0, corrupted PEBs: 0
[    2.632533] ubi0: user volume: 5, internal volumes: 1, max. volumes count: 128
[    2.638809] ubi0: max/mean erase counter: 3/1, WL threshold: 4096, image sequence number: 2086049366
[    2.645759] ubi0: available PEBs: 0, total reserved PEBs: 896, PEBs reserved for bad PEB handling: 20
[    2.655213] ubi0: background thread "ubi_bgt0d" started, PID 117
[    2.656502] block ubiblock0_2: created from ubi0:2(rootfs)
[    2.670227] ubiblock: device ubiblock0_2 (rootfs) set to be root filesystem
[    2.681339] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    2.683299] Freeing unused kernel memory: 1024K
[    2.711690] Run /sbin/init as init process
[    2.711917]   with arguments:
[    2.712002]     /sbin/init
[    2.712072]   with environment:
[    2.712147]     HOME=/
[    2.712221]     TERM=linux
[    3.063076] init: Console is alive
[    3.063373] init: - watchdog -
[    3.823852] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    3.844549] genirq: irq_chip msmgpio did not update eff. affinity mask of irq 106
[    3.854918] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    3.859496] init: - preinit -
[    4.357531] random: crng init done
[    5.631167] ess_edma c080000.edma eth0: Link is Down
[    9.770605] ess_edma c080000.edma eth0: Link is Up - 1Gbps/Full - flow control off
[    9.771601] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    9.931776] UBIFS (ubi0:3): Mounting in unauthenticated mode
[    9.932011] UBIFS (ubi0:3): background thread "ubifs_bgt0_3" started, PID 188
[   10.040792] UBIFS (ubi0:3): UBIFS: mounted UBI device 0, volume 3, name "rootfs_data"
[   10.040848] UBIFS (ubi0:3): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   10.047631] UBIFS (ubi0:3): FS size: 90025984 bytes (85 MiB, 709 LEBs), journal size 4571136 bytes (4 MiB, 36 LEBs)
[   10.057578] UBIFS (ubi0:3): reserved for root: 4252149 bytes (4152 KiB)
[   10.067792] UBIFS (ubi0:3): media format: w5/r0 (latest is w5/r0), UUID ADD1CB9A-DFA3-4B47-893B-A0888FE4D300, small LPT model
[   10.076221] mount_root: overlay filesystem has not been fully initialized yet
[   10.086895] mount_root: switching to ubifs overlay
[   10.887891] urandom-seed: Seed file not found (/etc/urandom.seed)
[   11.062441] ess_edma c080000.edma eth0: Link is Down
[   11.072423] procd: - early -
[   11.072950] procd: - watchdog -
[   11.636347] procd: - watchdog -
[   11.641176] procd: - ubus -
[   11.730153] procd: - init -
[   43.152428] kmodloader: loading kernel modules from /etc/modules.d/*
[   43.176994] Bridge firewalling registered
[   43.178209] Loading modules backported from Linux version v5.15.33-0-g06f50ca83ace
[   43.180033] Backport generated by backports.git v5.15.33-1-0-g183c4ab2
[   43.192632] MRM The MAC Address Re-Mapper is now in the kernel
[   43.215976] xt_time: kernel timezone is -0000
[   43.224198] urngd: v1.0.2 started.
[   43.291450] PPP generic driver version 2.4.2
[   43.292708] NET: Registered protocol family 24
[   43.310308] ath10k 5.15 driver, optimized for CT firmware, probing pci device: 0x50.
[   43.311258] ath10k_pci 0000:01:00.0: enabling device (0140 -> 0142)
[   43.319846] ath10k_pci 0000:01:00.0: pci irq msi oper_irq_mode 2 irq_mode 0 reset_mode 0
[   45.178872] ath10k_pci 0000:01:00.0: qca9887 hw1.0 target 0x4100016d chip_id 0x004000ff sub 0000:0000
[   45.178936] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   45.189171] ath10k_pci 0000:01:00.0: firmware ver 10.1-ct-87-__fW-022-ecad3248 api 2 features wmi-10.x,has-wmi-mgmt-tx,mfp,txstatus-noack,wmi-10.x-CT,ratemask-CT,txrate-CT,get-temp-CT,tx-rc-CT,cust-stats-CT,retry-gt2-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT crc32 61a92df5
[   45.222590] ath10k_pci 0000:01:00.0: Loading BDF type 0
[   45.534128] ath10k_pci 0000:01:00.0: board_file api 1 bmi_id N/A crc32 546cca0d
[   46.402189] ath10k_pci 0000:01:00.0: 10.1 wmi init: vdevs: 16  peers: 127  tid: 256
[   46.409242] ath10k_pci 0000:01:00.0: wmi print 'P 128 V 8 T 410'
[   46.409414] ath10k_pci 0000:01:00.0: wmi print 'msdu-desc: 1424  sw-crypt: 0 ct-sta: 0'
[   46.415009] ath10k_pci 0000:01:00.0: wmi print 'alloc rem: 25560 iram: 24780'
[   46.454898] ath10k_pci 0000:01:00.0: htt-ver 2.1 wmi-op 2 htt-op 2 cal file max-sta 128 raw 0 hwcrypto 1
[   46.465026] ath10k_pci 0000:01:00.0: NOTE:  Firmware DBGLOG output disabled in debug_mask: 0x10000000
[   46.582447] ath: EEPROM regdomain: 0x0
[   46.582480] ath: EEPROM indicates default country code should be used
[   46.582499] ath: doing EEPROM country->regdmn map search
[   46.582531] ath: country maps to regdmn code: 0x3a
[   46.582554] ath: Country alpha2 being used: US
[   46.582573] ath: Regpair used: 0x3a
[   48.686199] ath10k_ahb a000000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003900ff sub 0000:0000
[   48.686252] ath10k_ahb a000000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   48.698088] ath10k_ahb a000000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b
[   48.749857] ath10k_ahb a000000.wifi: Loading BDF type 0
[   48.811342] ath10k_ahb a000000.wifi: board_file api 2 bmi_id 0:20 crc32 11892f9b
[   50.098557] ath10k_ahb a000000.wifi: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   50.098610] ath10k_ahb a000000.wifi: msdu-desc: 2500  skid: 32
[   50.146519] ath10k_ahb a000000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   50.150179] ath10k_ahb a000000.wifi: wmi print 'free: 53252 iram: 13432 sram: 35752'
[   50.441619] ath10k_ahb a000000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   50.709130] ath: EEPROM regdomain: 0x0
[   50.709145] ath: EEPROM indicates default country code should be used
[   50.709151] ath: doing EEPROM country->regdmn map search
[   50.709160] ath: country maps to regdmn code: 0x3a
[   50.709167] ath: Country alpha2 being used: US
[   50.709173] ath: Regpair used: 0x3a
[   51.847728] ath10k_ahb a800000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003900ff sub 0000:0000
[   51.847785] ath10k_ahb a800000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   51.861139] ath10k_ahb a800000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b
[   51.911383] ath10k_ahb a800000.wifi: Loading BDF type 0
[   51.918979] ath10k_ahb a800000.wifi: board_file api 2 bmi_id 0:21 crc32 11892f9b
[   53.207125] ath10k_ahb a800000.wifi: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   53.207186] ath10k_ahb a800000.wifi: msdu-desc: 2500  skid: 32
[   53.254487] ath10k_ahb a800000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   53.256260] ath10k_ahb a800000.wifi: wmi print 'free: 53252 iram: 13432 sram: 35752'
[   53.394091] ath10k_ahb a800000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-file max-sta 32 raw 0 hwcrypto 1
[   53.557407] ath: EEPROM regdomain: 0x0
[   53.557422] ath: EEPROM indicates default country code should be used
[   53.557428] ath: doing EEPROM country->regdmn map search
[   53.557437] ath: country maps to regdmn code: 0x3a
[   53.557444] ath: Country alpha2 being used: US
[   53.557450] ath: Regpair used: 0x3a
[   53.569427] kmodloader: done loading kernel modules from /etc/modules.d/*
[   62.080973] br-lan: port 1(eth0) entered blocking state
[   62.081028] br-lan: port 1(eth0) entered disabled state
[   62.085455] device eth0 entered promiscuous mode
[   62.892081] ath: EEPROM regdomain: 0x809c
[   62.892122] ath: EEPROM indicates we should expect a country code
[   62.895099] ath: doing EEPROM country->regdmn map search
[   62.901377] ath: country maps to regdmn code: 0x52
[   62.906556] ath: Country alpha2 being used: CN
[   62.911214] ath: Regpair used: 0x52
[   62.915606] ath: regdomain 0x809c dynamically updated by user
[   62.919114] ath: EEPROM regdomain: 0x809c
[   62.924852] ath: EEPROM indicates we should expect a country code
[   62.928972] ath: doing EEPROM country->regdmn map search
[   62.934926] ath: country maps to regdmn code: 0x52
[   62.940339] ath: Country alpha2 being used: CN
[   62.944905] ath: Regpair used: 0x52
[   62.949364] ath: regdomain 0x809c dynamically updated by user
[   62.952818] ath: EEPROM regdomain: 0x809c
[   62.958648] ath: EEPROM indicates we should expect a country code
[   62.962617] ath: doing EEPROM country->regdmn map search
[   62.968721] ath: country maps to regdmn code: 0x52
[   62.974075] ath: Country alpha2 being used: CN
[   62.978789] ath: Regpair used: 0x52
[   62.983123] ath: regdomain 0x809c dynamically updated by user
[   65.209450] ess_edma c080000.edma eth0: Link is Up - 1Gbps/Full - flow control off
[   65.391070] ath10k_pci 0000:01:00.0: 10.1 wmi init: vdevs: 16  peers: 127  tid: 256
[   65.398132] ath10k_pci 0000:01:00.0: wmi print 'P 128 V 8 T 410'
[   65.398498] ath10k_pci 0000:01:00.0: wmi print 'msdu-desc: 1424  sw-crypt: 0 ct-sta: 0'
[   65.403980] ath10k_pci 0000:01:00.0: wmi print 'alloc rem: 25560 iram: 24780'
[   65.452367] ath10k_pci 0000:01:00.0: pdev param 0 not supported by firmware
[   65.461039] ath10k_pci 0000:01:00.0: rts threshold -1
[   65.468151] br-lan: port 1(eth0) entered blocking state
[   65.468857] br-lan: port 1(eth0) entered forwarding state
[   65.477908] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   65.479549] br-lan: port 2(wlan0) entered blocking state
[   65.484350] br-lan: port 2(wlan0) entered disabled state
[   65.490235] device wlan0 entered promiscuous mode
[   67.931388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.931728] br-lan: port 2(wlan0) entered blocking state
[   67.936837] br-lan: port 2(wlan0) entered forwarding state
[  615.171781] Rekeying PTK for STA 4e:55:b7:e0:29:6b but driver can't safely do that.
[  615.171862] ath10k_pci 0000:01:00.0: mac flush vdev 0 drop 0 queues 0x1 ar->paused: 0x0  arvif->paused: 0x0
[ 3725.289944] device wlan0 left promiscuous mode
[ 3725.290353] br-lan: port 2(wlan0) entered disabled state
[ 3725.371501] ath10k_pci 0000:01:00.0: mac flush null vif, drop 0 queues 0xffff
[ 3727.370871] ath10k_pci 0000:01:00.0: 10.1 wmi init: vdevs: 16  peers: 127  tid: 256
[ 3727.377876] ath10k_pci 0000:01:00.0: wmi print 'P 128 V 8 T 410'
[ 3727.378149] ath10k_pci 0000:01:00.0: wmi print 'msdu-desc: 1424  sw-crypt: 0 ct-sta: 0'
[ 3727.383945] ath10k_pci 0000:01:00.0: wmi print 'alloc rem: 25560 iram: 24780'
[ 3727.432705] ath10k_pci 0000:01:00.0: pdev param 0 not supported by firmware
[ 3727.439566] ath10k_pci 0000:01:00.0: rts threshold -1
[ 3727.445573] br-lan: port 2(wlan0) entered blocking state
[ 3727.445665] br-lan: port 2(wlan0) entered disabled state
[ 3727.451301] device wlan0 entered promiscuous mode
[ 3729.740559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3729.740892] br-lan: port 2(wlan0) entered blocking state
[ 3729.746009] br-lan: port 2(wlan0) entered forwarding state

Below is output of wireless interface confirmation. Only 5G is working.

root@MR33:/etc/config# uci show wireless
wireless.radio0=wifi-device
wireless.radio0.type='mac80211'
wireless.radio0.path='soc/40000000.pci/pci0000:00/0000:00:00.0/0000:01:00.0'
wireless.radio0.band='5g'
wireless.radio0.htmode='VHT80'
wireless.radio0.country='CN'
wireless.radio0.cell_density='0'
wireless.radio0.channel='149'
wireless.radio0.mu_beamformer='1'
wireless.radio0.legacy_rates='0'
wireless.default_radio0=wifi-iface
wireless.default_radio0.device='radio0'
wireless.default_radio0.network='lan'
wireless.default_radio0.mode='ap'
wireless.default_radio0.ssid='JuliHome'
wireless.default_radio0.key='abbcccdddd'
wireless.default_radio0.ieee80211r='1'
wireless.default_radio0.mobility_domain='4f57'
wireless.default_radio0.ft_over_ds='1'
wireless.default_radio0.ft_psk_generate_local='1'
wireless.default_radio0.ieee80211k='1'
wireless.default_radio0.ieee80211v='1'
wireless.default_radio0.time_advertisement='0'
wireless.default_radio0.encryption='psk2'
wireless.radio1=wifi-device
wireless.radio1.type='mac80211'
wireless.radio1.path='platform/soc/a000000.wifi'
wireless.radio1.channel='1'
wireless.radio1.band='2g'
wireless.radio1.htmode='HT20'
wireless.default_radio1=wifi-iface
wireless.default_radio1.device='radio1'
wireless.default_radio1.network='lan'
wireless.default_radio1.mode='ap'
wireless.default_radio1.ssid='OpenWrt'
wireless.default_radio1.encryption='none'
wireless.default_radio1.disabled='1'
wireless.radio2=wifi-device
wireless.radio2.type='mac80211'
wireless.radio2.path='platform/soc/a800000.wifi'
wireless.radio2.channel='36'
wireless.radio2.band='5g'
wireless.radio2.htmode='VHT80'
wireless.default_radio2=wifi-iface
wireless.default_radio2.device='radio2'
wireless.default_radio2.network='lan'
wireless.default_radio2.mode='ap'
wireless.default_radio2.ssid='OpenWrt'
wireless.default_radio2.encryption='none'
wireless.default_radio2.disabled='1'
root@MR33:/etc/config# 

The below picture is the version of firmware I made with the OpenWRT git repo.

I request a way to get the issue away. Thanks a lot!

Here is the picture for associated devices on this AP. The device with 433 Mbps is iPad mini 6.

Try setup two 5Ghz interfaces mr33 with the same channel SSID and security. In my case help handle 866Mb/s.