Xiaomi Wifi Router 3G - 18.06.X / feedback and help

Installing and Using OpenWrt
91

I tried to install openwrt via serial console, but it seems something went wrong. I booted up the router and used the following sequence of the commands to flash the firmware:

Installation through telnet/ssh:

1. copy lede-ramips-mt7621-mir3g-squashfs-kernel1.bin and lede-ramips-mt7621-mir3g-squashfs-rootfs0.bin to usb disk or wget it from LEDE download site to /tmp

2. switch to /extdisks/sda1/ (if copied to USB drive) or to /tmp if wgetted from LEDE download site

3. run: mtd write lede-ramips-mt7621-mir3g-squashfs-kernel1.bin kernel1

4. run: mtd write lede-ramips-mt7621-mir3g-squashfs-rootfs0.bin rootfs0

5. run: nvram set flag_try_sys1_failed=1

6. run: nvram commit

7. run: reboot

I used this image http://downloads.openwrt.org/releases/18.06.1/targets/ramips/mt7621/openwrt-18.06.1-ramips-mt7621-mir3g-squashfs-sysupgrade.tar

when I rebooted the router I got the following:

===================================================================
                MT7621   stage1 code done
                CPU=50000000 HZ BUS=12500000 HZ
===================================================================


U-Boot 1.1.3 (Apr 17 2018 - 02:09:51)

Board: Ralink APSoC DRAM:  256 MB
Power on memory test. Memory size= 256 MB...OK!
relocate_code Pointer at: 8ffac000

Config XHCI 40M PLL
Allocate 16 byte aligned buffer: 8ffe1090
Enable NFI Clock
# MTK NAND # : Use HW ECC
NAND ID [C8 D1 80 95 40]
Device not found, ID: c8d1
Not Support this Device!
chip_mode=00000001
Support this Device in MTK table! c8d1
select_chip
[NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
Signature matched and data read!
load_fact_bbt success 1023
load fact bbt success
[mtk_nand] probe successfully!
mtd->writesize=2048 mtd->oobsize=64,    mtd->erasesize=131072  devinfo.iowidth=8
..============================================
Ralink UBoot Version: 5.0.0.0
--------------------------------------------
ASIC MT7621A DualCore (MAC to MT7530 Mode)
DRAM_CONF_FROM: Auto-Detection
DRAM_TYPE: DDR3
DRAM bus: 16 bit
Xtal Mode=5 OCP Ratio=1/4
Flash component: NAND Flash
Date:Apr 17 2018  Time:02:09:51
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:256, ways:4, linesz:32 ,total:32768

 ##### The CPU freq = 880 MHZ ####
 estimate memory size =256 Mbytes
#Reset_MT7530
set LAN/WAN LWLLL

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.
 0
Booting System 2
..ranand_erase: start:80000, len:20000
..Done!
done

3: System Boot system code via Flash.
## Booting image at bc600000 ...
   Image Name:   MIPS OpenWrt Linux-4.14.63
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    1818093 Bytes =  1.7 MB
   Load Address: 80001000
   Entry Point:  80001000
............................   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
commandline uart_en=1 factory_mode=0 usb_u3=0
No initrd
## Transferring control to Linux (at address 80001000) ...
## Giving linux memsize in MB, 256

Starting kernel ...

[    0.000000] Linux version 4.14.63 (buildbot@builds-03.infra.lede-project.org) (gcc version 7.3.0 (OpenWrt GCC 7.3.0 r7102-3f3a2c9)) #0 SMP Thu Aug 16 07:51:15 2018
[    0.000000] SoC Type: MediaTek MT7621 ver:1 eco:3
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001992f (MIPS 1004Kc)
[    0.000000] MIPS: machine is Xiaomi Mi Router 3G
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 10000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] VPE topology {2,2} total 4
[    0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x000000000fffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x000000000fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x000000000fffffff]
[    0.000000] random: get_random_bytes called from 0x80549740 with crng_init=0
[    0.000000] percpu: Embedded 14 pages/cpu @81210000 s26256 r8192 d22896 u57344
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 65024
[    0.000000] Kernel command line: console=ttyS0,115200n8 rootfstype=squashfs,jffs2
[    0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Writing ErrCtl register=00002100
[    0.000000] Readback ErrCtl register=00002100
[    0.000000] Memory: 253664K/262144K available (4596K kernel code, 239K rwdata, 564K rodata, 220K init, 270K bss, 8480K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS: 256
[    0.000000] clocksource: GIC: mask: 0xffffffffffffffff max_cycles: 0xcaf478abb4, max_idle_ns: 440795247997 ns
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 4343773742 ns
[    0.000010] sched_clock: 32 bits at 440MHz, resolution 2ns, wraps every 4880645118ns
[    0.007812] Calibrating delay loop... 586.13 BogoMIPS (lpj=2930688)
[    0.073974] pid_max: default: 32768 minimum: 301
[    0.078742] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.085250] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.094034] Hierarchical SRCU implementation.
[    0.099168] smp: Bringing up secondary CPUs ...
[    0.111267] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.111277] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.111289] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.111425] CPU1 revision is: 0001992f (MIPS 1004Kc)
[    0.163914] Synchronize counters for CPU 1: done.
[    0.205384] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.205393] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.205402] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.205472] CPU2 revision is: 0001992f (MIPS 1004Kc)
[    0.255030] Synchronize counters for CPU 2: done.
[    0.292398] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[    0.292407] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.292414] MIPS secondary cache 256kB, 8-way, linesize 32 bytes.
[    0.292494] CPU3 revision is: 0001992f (MIPS 1004Kc)
[    0.340212] Synchronize counters for CPU 3: done.
[    0.370076] smp: Brought up 1 node, 4 CPUs
[    0.377817] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.387601] futex hash table entries: 1024 (order: 3, 32768 bytes)
[    0.393893] pinctrl core: initialized pinctrl subsystem
[    0.399709] NET: Registered protocol family 16
[    0.409921] Can't analyze schedule() prologue at 80478bc4
[    0.415990] pull PCIe RST: RALINK_RSTCTRL = 4000000
[    0.721237] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.726270] ***** Xtal 40MHz *****
[    0.729644] release PCIe RST: RALINK_RSTCTRL = 7000000
[    0.734750] Port 0 N_FTS = 1b102800
[    0.738193] Port 1 N_FTS = 1b102800
[    0.741652] Port 2 N_FTS = 1b102800
[    1.896968] PCIE2 no card, disable it(RST&CLK)
[    1.901315]  -> 21007f2
[    1.903731] PCIE0 enabled
[    1.906339] PCIE1 enabled
[    1.908923] PCI host bridge /pcie@1e140000 ranges:
[    1.913686]  MEM 0x0000000060000000..0x000000006fffffff
[    1.918871]   IO 0x000000001e160000..0x000000001e16ffff
[    1.924043] PCI coherence region base: 0xbfbf8000, mask/settings: 0x60000000
[    1.940048] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.945914] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.951691] mt7621_gpio 1e000600.gpio: registering 32 gpios
[    1.958823] PCI host bridge to bus 0000:00
[    1.962849] pci_bus 0000:00: root bus resource [mem 0x60000000-0x6fffffff]
[    1.969705] pci_bus 0000:00: root bus resource [io  0xffffffff]
[    1.975537] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    1.982293] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    1.990863] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    1.998797] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    2.008012] pci 0000:00:00.0: BAR 0: no space for [mem size 0x80000000]
[    2.014559] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.021436] pci 0000:00:01.0: BAR 0: no space for [mem size 0x80000000]
[    2.028026] pci 0000:00:01.0: BAR 0: failed to assign [mem size 0x80000000]
[    2.034920] pci 0000:00:00.0: BAR 8: assigned [mem 0x60000000-0x600fffff]
[    2.041678] pci 0000:00:01.0: BAR 8: assigned [mem 0x60100000-0x601fffff]
[    2.048396] pci 0000:00:01.0: BAR 9: assigned [mem 0x60200000-0x602fffff pref]
[    2.055582] pci 0000:00:00.0: BAR 1: assigned [mem 0x60300000-0x6030ffff]
[    2.062305] pci 0000:00:01.0: BAR 1: assigned [mem 0x60310000-0x6031ffff]
[    2.069074] pci 0000:01:00.0: BAR 0: assigned [mem 0x60000000-0x600fffff]
[    2.075788] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.080730] pci 0000:00:00.0:   bridge window [mem 0x60000000-0x600fffff]
[    2.087455] pci 0000:02:00.0: BAR 0: assigned [mem 0x60100000-0x601fffff 64bit]
[    2.094731] pci 0000:02:00.0: BAR 6: assigned [mem 0x60200000-0x6020ffff pref]
[    2.101871] pci 0000:00:01.0: PCI bridge to [bus 02]
[    2.106817] pci 0000:00:01.0:   bridge window [mem 0x60100000-0x601fffff]
[    2.113541] pci 0000:00:01.0:   bridge window [mem 0x60200000-0x602fffff pref]
[    2.122087] clocksource: Switched to clocksource GIC
[    2.128507] NET: Registered protocol family 2
[    2.133643] TCP established hash table entries: 2048 (order: 1, 8192 bytes)
[    2.140527] TCP bind hash table entries: 2048 (order: 2, 16384 bytes)
[    2.146973] TCP: Hash tables configured (established 2048 bind 2048)
[    2.153393] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    2.159157] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    2.165642] NET: Registered protocol family 1
[    2.402040] 4 CPUs re-calibrate udelay(lpj = 2924544)
[    2.408451] Crashlog allocated RAM at address 0x3f00000
[    2.413784] workingset: timestamp_bits=30 max_order=16 bucket_order=0
[    2.427713] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    2.433487] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    2.444879] random: fast init done
[    2.450032] io scheduler noop registered
[    2.453909] io scheduler deadline registered (default)
[    2.459606] gpio-export gpio_export: 1 gpio(s) exported
[    2.465619] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    2.475467] console [ttyS0] disabled
[    2.479015] 1e000c00.uartlite: ttyS0 at MMIO 0x1e000c00 (irq = 18, base_baud = 3125000) is a 16550A
[    2.488068] console [ttyS0] enabled
[    2.488068] console [ttyS0] enabled
[    2.494947] bootconsole [early0] disabled
[    2.494947] bootconsole [early0] disabled
[    2.503894] cacheinfo: Failed to find cpu0 device node
[    2.509016] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    2.515940] MediaTek Nand driver init, version v2.1 Fix AHB virt2phys error
[    2.523053] Enable NFI Clock
[    2.525924] # MTK NAND # : Use HW ECC
[    2.529584] Device found in MTK table, ID: c8d1, EXT_ID: 809540
[    2.535518] Support this Device in MTK table! c8d1
[    2.540466] [NAND]select ecc bit:4, sparesize :64 spare_per_sector=16
[    2.546938] nand: device found, Manufacturer ID: 0xc8, Chip ID: 0xd1
[    2.553272] nand: ESMT NAND 128MiB 3,3V 8-bit
[    2.557609] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    2.565172] Scanning device for bad blocks
[    2.713099] 10 fixed-partitions partitions found on MTD device MT7621-NAND
[    2.719939] Creating 10 MTD partitions on "MT7621-NAND":
[    2.725246] 0x000000000000-0x000000080000 : "Bootloader"
[    2.731514] 0x000000080000-0x0000000c0000 : "Config"
[    2.737352] 0x0000000c0000-0x000000100000 : "Bdata"
[    2.743126] 0x000000100000-0x000000140000 : "Factory"
[    2.748994] 0x000000140000-0x000000180000 : "crash"
[    2.754758] 0x000000180000-0x0000001c0000 : "crash_syslog"
[    2.761078] 0x0000001c0000-0x000000200000 : "reserved0"
[    2.767238] 0x000000200000-0x000000600000 : "kernel_stock"
[    2.773642] 0x000000600000-0x000000a00000 : "kernel"
[    2.779486] 0x000000a00000-0x000007f80000 : "ubi"
[    2.786079] [mtk_nand] probe successfully!
[    2.790887] Signature matched and data read!
[    2.795152] load_fact_bbt success 1023
[    2.799494] libphy: Fixed MDIO Bus: probed
[    2.874639] libphy: mdio: probed
[    4.278188] mtk_soc_eth 1e100000.ethernet: loaded mt7530 driver
[    4.284789] mtk_soc_eth 1e100000.ethernet eth0: mediatek frame engine at 0xbe100000, irq 20
[    4.295348] NET: Registered protocol family 10
[    4.301332] Segment Routing with IPv6
[    4.305140] NET: Registered protocol family 17
[    4.309632] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    4.322544] 8021q: 802.1Q VLAN Support v1.8
[    4.329680] UBI error: no valid UBI magic found inside mtd9
[    4.335319] hctosys: unable to open rtc device (rtc0)
[    4.341114] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    4.348581] Please append a correct "root=" boot option; here are the available partitions:
[    4.356916] 1f00             512 mtdblock0
[    4.356923]  (driver?)
[    4.363445] 1f01             256 mtdblock1
[    4.363450]  (driver?)
[    4.369950] 1f02             256 mtdblock2
[    4.369954]  (driver?)
[    4.376470] 1f03             256 mtdblock3
[    4.376475]  (driver?)
[    4.382988] 1f04             256 mtdblock4
[    4.382993]  (driver?)
[    4.389494] 1f05             256 mtdblock5
[    4.389497]  (driver?)
[    4.396013] 1f06             256 mtdblock6
[    4.396018]  (driver?)
[    4.402533] 1f07            4096 mtdblock7
[    4.402538]  (driver?)
[    4.409038] 1f08            4096 mtdblock8
[    4.409042]  (driver?)
[    4.415557] 1f09          120320 mtdblock9
[    4.415562]  (driver?)
[    4.422078] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    4.432225] Rebooting in 1 seconds..

it seems the kernel can't find the root. What went wrong? how to recover and install openwrt?

92

How and what do I have to flash via tftp to get back to stock?
I am struggling a bit :grimacing:
1.) which kernel do I have to use?
2.) which IP address do I have to push the kernel to, I guess 192.168.31.1, right?
3.) which option in the boot menu do I have to use?
Is there somewhere a step-by-step howto?

93

Hey Guys,
is just want to break down my sucess story.

mir3g router with standard firmware.

  1. first i found that ( https://dzone.com/articles/hacking-into-xiaomi-mi-router-3g-and-openwrt-firmw ) manual, and tryed to connect through serial.
    i got connection to serial, got to the "command line", but there were only a few commands possible ( no cd, no ls, no mount, write...)

  2. next step was to upload the developer firmware, and try it again with serial only. did not work. same outcome.

  3. than i got an old android phone installed the spy mihome app , registered an fake account, added the router (hat to choose china mainland to make it work), also i had to use internet explorer and change "https" to "http" back and forth on that sketchy link to get the ssh password. (manual https://klseet.com/267-lede/lede-miwifi/392-miwifi-3g-lede-unifi-ready )

  4. got ssh working, and installed " OpenWrt SNAPSHOT r9086-8c9b182 / LuCI Master (git-19.021.69271-b6e240d) " by USB.

I only use 2.4g wifi but until now it works perfectly for 3 days . no issues so far.
Awesome work! i just started with openwrt ( i think i had an ddwrt router maybe 10 years ago :D) and try to find a good setup for me :slight_smile:

94

Hello
I just received my router and I tried to install openwrt but it did not work I'm in firmware 2.28 .... when I try to put an older firmware (I'm trying 4) it puts me echec
how can I do ?

95

I managed to unlock my Xiaomi

It was a continuous bootloop, with an Arduino connect on it I could navigate the menu and unlock it.

1 Like
96

Can someone help me in this case?

97

Hi @after,
I encountered the same issue.
Has this random reboot problem been solved?

[ 1727.771750] Unhandled kernel unaligned access[#1]:
[ 1727.781300] CPU: 3 PID: 70 Comm: kworker/3:1 Not tainted 4.14.105 #0
[ 1727.794041] Workqueue: events_long nf_ct_kill_acct [nf_conntrack]
[ 1727.794061] task: 8fd80c80 task.stack: 8fd08000
[ 1727.794066] $ 0   : 00000000 00000001 00000000 00022ba7
[ 1727.794083] $ 4   : 8e6025d8 00000000 3c8a8035 00000001
[ 1727.794098] $ 8   : 00000000 00007c00 00000192 0021c0de
[ 1727.794113] $12   : 00000000 00000000 3b9aca00 00000000
[ 1727.794127] $16   : 8e6025d8 8e494700 8e494700 fffffff0
[ 1727.794145] $20   : 00000000 00000604 80580000 00000003
[ 1727.794165] $24   : 27739c00 8e4c06bc
[ 1727.794186] $28   : 8fd08000 8fd09db8 8e4d0000 8e600650
[ 1727.794210] Hi    : 0000001d
[ 1727.794215] Lo    : 74955000
[ 1727.794242] epc   : 8e600658 nf_ct_nat_ext_add+0x218/0x928 [nf_nat]
[ 1727.794261] ra    : 8e600650 nf_ct_nat_ext_add+0x210/0x928 [nf_nat]
[ 1727.794266] Status: 11007c03 KERNEL EXL IE
[ 1727.794283] Cause : 40800014 (ExcCode 05)
[ 1727.794287] BadVA : 00022ba7
[ 1727.794291] PrId  : 0001992f (MIPS 1004Kc)
[ 1727.794294] Modules linked in: pppoe ppp_async pppox ppp_generic nf_conntrack_ipv6 mt76x2e mt76x2_common mt76x02_lib mt76 mac80211 iptable_nat ipt_REJECT ipt_MASQUERADE cfg80211 xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_socket xt_recent xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_iprange xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_TPROXY xt_TCPMSS xt_REDIRECT xt_LOG xt_HL xt_FLOWOFFLOAD xt_DSCP xt_CT xt_CLASSIFY slhc nf_socket_ipv6 nf_socket_ipv4 nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack_netlink nf_conntrack libcrc32c iptable_raw iptable_mangle iptable_filter ipt_ECN ip6table_raw
[ 1727.794503]  ip_tables crc_ccitt compat fuse tcp_bbr sch_tbf sch_ingress sch_htb sch_hfsc em_u32 cls_u32 cls_tcindex cls_route cls_matchall cls_fw cls_flow cls_basic act_skbedit act_mirred ledtrig_usbport xt_set ip_set_list_set ip_set_hash_netportnet ip_set_hash_netport ip_set_hash_netnet ip_set_hash_netiface ip_set_hash_net ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 ifb vfat fat nls_utf8 nls_iso8859_1 nls_cp437 mmc_block mtk_sd mmc_core leds_gpio xhci_plat_hcd xhci_pci xhci_mtk xhci_hcd ahci libahci libata sd_mod scsi_mod gpio_button_hotplug ext4 mbcache
[ 1727.794745]  jbd2 usbcore nls_base usb_common crc32c_generic
[ 1727.794778] Process kworker/3:1 (pid: 70, threadinfo=8fd08000, task=8fd80c80, tls=00000000)
[ 1727.794783] Stack : fffffff0 00000000 00000604 80580000 8e494700 8e4cfdc8 8e4cfdd8 8e4caeb8
[ 1727.794819]         8fc2b300 00000000 05600003 8e494700 8e494700 8e494710 00000007 8e4c066c
[ 1727.794856]         8f6cd924 8fd36100 8123fa00 00000001 8e494700 8e4c1c48 8123e380 8008ad90
[ 1727.794882]         8fd80fa0 80470000 8f6cd94c 8059ce20 8e4d0000 8e4d0000 00000020 00000000
[ 1727.794905]         8e4cfd64 8e4ccad4 81242700 00000000 8e4cfd64 8fd36100 8123fa00 81242900
[ 1727.794939]         ...
[ 1727.794963] Call Trace:
[ 1727.794983] [<8e600658>] nf_ct_nat_ext_add+0x218/0x928 [nf_nat]
[ 1727.795049] Code: 02002025  8e23007c  8e220078 <ac620000> 10400002  00000000  ac430004  24020200  ae22007c
[ 1727.795090]
[ 1727.795199] ---[ end trace 46ae1a2b6c1a5eb2 ]---
[ 1727.806443] Kernel panic - not syncing: Fatal exception in interrupt
[ 1728.445305] Rebooting in 3 seconds..
99

you have access in ssh?

100

Hello,

I received the router a few days ago, flashed padavan with prometheus, and wanted to switch to OpenWRT/LEDE with the breed bootloader, so i installed breed. Well, apparently the install wasn't successful and now the router starts, but has a constant violet led and doesnt react to anything.
I tried accessing it over Serial with the TX/RX, and this ist what i receive:

Boot and Recovery Environment for Embedded Devices
Copyright (C) 2018 HackPascal <hackpascal@gmail.com>
Build date 2018-12-29 [git-135bed9]
Version 1.1 (r1266)

Bootloader data is corrupted!

System halted.

//

I can't access the serial console, so, is there any way to fix it? i searched a lot, i also looked tat the 4pda forum with autotranslate, found two similar cases, but there wasn't a fix mentioned, except maybe the NOR (SPI_pamyat) memory.
Can somebody help me figure out how to fix it?

101

update:
I figured out that it was because of the breed-bootloader, after I switched back to the original one the messages disappeared!

original message:
I am getting "compare signature failed" messages in kernel.log. Anything I need to worry about or is it meaningless?

[    2.684424] 10 fixed-partitions partitions found on MTD device MT7621-NAND
[    2.691280] Creating 10 MTD partitions on "MT7621-NAND":
[    2.696593] 0x000000000000-0x000000080000 : "Bootloader"
[    2.702994] 0x000000080000-0x0000000c0000 : "Config"
[    2.708970] 0x0000000c0000-0x000000100000 : "Bdata"
[    2.714835] 0x000000100000-0x000000140000 : "Factory"
[    2.720928] 0x000000140000-0x000000180000 : "crash"
[    2.726815] 0x000000180000-0x0000001c0000 : "crash_syslog"
[    2.733312] 0x0000001c0000-0x000000200000 : "reserved0"
[    2.739593] 0x000000200000-0x000000600000 : "kernel_stock"
[    2.746167] 0x000000600000-0x000000a00000 : "kernel"
[    2.752160] 0x000000a00000-0x000007f80000 : "ubi"
[    2.758845] [mtk_nand] probe successfully!
[    2.763086] compare signature failed ffc0
[    2.767235] compare signature failed ff80
[    2.771362] compare signature failed ff40
[    2.775486] compare signature failed ff00
[    2.779632] compare signature failed fec0
[    2.783759] compare signature failed fe80
[    2.787899] compare signature failed fe40
[    2.792026] compare signature failed fe00
[    2.796177] compare signature failed fdc0
[    2.800304] compare signature failed fd80
[    2.804428] compare signature failed fd40
[    2.808569] compare signature failed fd00
[    2.812695] compare signature failed fcc0
[    2.816841] compare signature failed fc80
[    2.820968] compare signature failed fc40
[    2.825092] compare signature failed fc00
[    2.829233] compare signature failed fbc0
[    2.833359] compare signature failed fb80
[    2.837505] compare signature failed fb40
[    2.841632] compare signature failed fb00
[    2.845773] compare signature failed fac0
[    2.849899] compare signature failed fa80
[    2.854023] compare signature failed fa40
[    2.858171] compare signature failed fa00
[    2.862299] compare signature failed f9c0
[    2.866439] compare signature failed f980
[    2.870565] compare signature failed f940
[    2.874689] compare signature failed f900
[    2.878835] compare signature failed f8c0
[    2.882962] compare signature failed f880
[    2.887103] compare signature failed f840
[    2.891229] compare signature failed f800
[    2.895212] load_fact_bbt failed
102

18.06.02 flashed successfully with the manual from the other thread/wiki.
2.4GHz WLAN as Client Mode works.
5GHz WLAN as Client Mode does not work. It keeps disconnecting because of:

Kernel Log

[ 1621.818052] wlan1: authenticate with a4:93:3f:72:8b:26
[ 1622.539192] wlan1: send auth to a4:93:3f:72:8b:26 (try 1/3)
[ 1622.545819] wlan1: authenticated
[ 1622.556607] wlan1: associate with a4:93:3f:72:8b:26 (try 1/3)
[ 1622.563590] wlan1: RX AssocResp from a4:93:3f:72:8b:26 (capab=0x1011 status=0 aid=1)
[ 1622.571547] wlan1: associated
[ 1622.656357] wlan1: Limiting TX power to 23 (23 - 0) dBm as advertised by a4:93:3f:72:8b:26
[ 1630.589526] wlan1: deauthenticated from a4:93:3f:72:8b:26 (Reason: 15=4WAY_HANDSHAKE_TIMEOUT)

Someone got an idea what i could try? Password is correct and same channel and bandwidth.

103

Probably the only way is to flash memory with external flasher. Of corse You have Your full memory backup?

104

It is very annoying that the Mi Router 3G's integrated switch lacks support for igmp snooping.
When using it as a switch to bridge from one LAN-port to the other, it has problems with an IPTV multicast stream using igmp v3. The GUI reacts slow and the load increases to almost one.

According to [SOLVED] IGMP Snooping on Switch Ports the mt7530 chip or driver seems to lack the igmp snooping feature.

swconfig list
Found: switch0 - mt7530
105

Just bridge separate VLANs in software, and IGMP snooping will work just fine. I used it as a workaround for my mt7621 device as well.

106

True, good workaround.
Create 2 additional vlans, e.g. 92 for lan2 and 93 for wan. Add cpu as tagged and for 92 lan2 as untagged (93: wan untagged). After that save and reboot. Then add the two new vlans 91 and 92 to the br-lan and you are fine.
I had to reboot because otherwise I could not at them to br-lan as they were not listed.

107

I have a backup of the entire flash memory of another router of the same Modell. Would that work? And what kind of external flasher would be required? I am a newbie when it's comes to actual external flashing

108

@Double-G can you share your network config, I did add new vlan but it seems problem still happen

109

Hello Pataha,

I had the situation that I needed to reboot after the vlan creation to properly add it to the lan-(bridge)interface.
In my setup I assigned all three ports to the lan-bridge as I do not use wan or any routing. In my setup the mi router 3g is just a layer2 accesspoint and switch.
So what I changed is:
Switch-Config:

  • vlan 1: untagged on port lan1, tagged on cpu (unchanged), port lan 2 removed.
  • crate vlan 92 and 93.
  • vlan 92: untagged on port lan 2, tagged on cpu.
  • vlan 93: untagged on port wan, tagged on cpu.
    Screenshot:
    vlan
    vlan.JPG973×382 38.1 KB

Interface-Config for LAN:
Physical settings:
add interfaces eth0.92 and eth0.93.
Screenshot:

interface-lan
interface-lan.png559×596 25.3 KB

The load on the system does not jump to 1 anymore, it stay at 0.6-0.7 even during high performance transfers and the GUI does not get sluggish anymore in such a situation. No packetloss.

110

@Double-G thanks for the helps, mine extract the same
did you use igmpproxy? if yes can you show the config /etc/config/igmpproxy and interfaces /etc/config/network
btw, Im on the latest snapshot of openwrt, what your version?

111

All I did happened on 18.06.2 and was:

  1. enable igmp snooping on lan:
    /etc/config/network
config interface 'lan'
        option igmp_snooping '1'
  1. Force the device to use v3.
    /etc/sysctl.conf
net.ipv4.conf.all.force_igmp_version=3

[reboot for changes to take effect or adust /proc/sys/...]

I do not use igmpproxy because the device acts as layer2 switch and not as layer3 router (no wan, therefor no need for NAT on this device; got another router running).