I have a VDSL line with Plusnet (UK) - the connection is pppoe - ptm0.101. With the supplied modem/router the line and connection is stable with no disconnects. With LEDE the connection is established and works well until it disconnects (sometimes as early as few minutes other times it stays connected up to an hour). After the disconnect there is no reconnection until a reboot. Restarting wan interface (ifdown wan/ifup wan) or dsl connection (/etc/init.d/dslcontrol stop/start) does not help.

Supply the following if possible:
- Device problem occurs on TP-w8970 and BTHomehub 5A (same crash on both lantiq based devices)
- Software versions of LEDE release, packages, etc. Tested on LEDE RC2, earlier LEDE snapshot from October 2016, Openwrt CC - same symptoms
- Steps to reproduce - VDSL connection on ptm0.101 via pppoe

Here is a trace of the crash (dmesg):

[ 1414.124413] —[ beginning trace ff034b465cdad16b ]— [ 1414.125631] WARNING: CPU: 0 PID: 0 at net/sched/sch_generic.c:303 dev_watchdog+0x1a8/0x2f0()
[ 1414.126471] NETDEV WATCHDOG: ptm0 (): transmit queue 0 timed out
[ 1414.132456] Modules linked in: ltq_ptm_vr9 option iptable_nat ath9k usb_wwan rt2800usb rt2800lib
pppoe nf_nat_ipv4 nf_conntrack_ipv6 nf_conntrack_ipv4 l2tp_ppp ipt_REJECT ipt_MASQUERADE ath9k_common
xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_recent xt_policy xt_nat xt_multiport xt_mark xt_mac
xt_limit xt_length xt_id xt_hl xt_helper xt_esp xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit
xt_connbytes xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_HL xt_DSCP xt_CT xt_CLASSIFY usbserial rt2x00usb
rt2x00lib pppox ppp_async nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_nat nf_log_ipv4 nf_defrag_ipv6
nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack ltq_deu_vr9 iptable_raw iptable_mangle iptable_filter ipt_ah ipt_ECN
ip_tables crc_itu_t crc_ccitt cdc_acm ath9k_hw ath10k_pci ath10k_core ath mac80211 cfg80211 compat drv_dsl_cpe_api
drv_mei_cpe xt_set ip_set_list_set ip_set_hash_netiface ip_set_hash_netport ip_set_hash_netnet ip_set_hash_net
ip_set_hash_netportnet ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark
ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink ip6t_REJECT nf_reject_ipv6
nf_log_ipv6 nf_log_common ip6table_raw ip6table_mangle ip6table_filter ip6_tables x_tables pppoatm ppp_generic slhc
l2tp_ip6 l2tp_ip l2tp_eth sit l2tp_netlink l2tp_core udp_tunnel ip6_udp_tunnel ipcomp xfrm4_tunnel xfrm4_mode_tunnel
xfrm4_mode_transport xfrm4_mode_beet esp4 ah4 tunnel4 ip_tunnel tun af_key xfrm_user xfrm_ipcomp xfrm_algo br2684 atm
drv_ifxos echainiv sha256_generic sha1_generic jitterentropy_rng drbg md5 hmac des_generic cbc authenc usb_storage
dwc2 uhci_hcd ehci_platform ehci_hcd sd_mod scsi_mod gpio_button_hotplug ext4 jbd2 mbcache aead crypto_null
[ 1414.287462] CPU: 0 PID: 0 Comm: swapper Not tainted 4.4.7 #1
[ 1414.293130] Stack : 804b0000 00000001 00000000 00000000 805172b8 80516f43 80489a24 00000000
[ 1414.293130] 80673844 00010000 80510000 805159bc 80515abc 80055664 00000003 80510000
[ 1414.293130] 80491b4c 00000000 8048ff50 80511c44 80515abc 800535b0 00000006 00000001
[ 1414.293130] 00000000 80512000 00000000 00000000 00000000 00000000 00000000 00000000
[ 1414.293130] 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 1414.293130] ...
[ 1414.328618] Call Trace:
[ 1414.331095] [<800178a8>] show_stack+0×50/0×84 [ 1414.335454] [<8002af48>] warn_slowpath_common+0xa0/0xd0
[ 1414.340670] [<8002afa4>] warn_slowpath_fmt+0x2c/0×38 [ 1414.345636] [<802e637c>] dev_watchdog+0x1a8/0x2f0
[ 1414.350348] [<8005f7b0>] call_timer_fn.isra.5+0×24/0×80 [ 1414.355557] [<8005fa2c>] run_timer_softirq+0x1a4/0×208 [ 1414.360694] [<8002de80>] __do_softirq+0×298/0x2b0
[ 1414.365388] [<80002430>] ret_from_irq+0×0/0×4 [ 1414.369760] [<80013a8c>] r4k_wait_irqoff+0×18/0×20 [ 1414.374528] [<8004ff6c>] cpu_startup_entry+0xa4/0xf8
[ 1414.379508] [<80539bf8>] start_kernel+0×474/0×494 [ 1414.384180]
[ 1414.385631] —[ end trace ff034b465cdad16b ]—

Supply the following if possible:
- Device problem occurs on
- Software versions of LEDE release, packages, etc.
- Steps to reproduce

Thu Mar  2 19:00:04 2017 daemon.notice hostapd: wlan0: interface state UNINITIALIZED->COUNTRY_UPDATE
Thu Mar  2 19:00:04 2017 kern.info kernel: [  752.321498] device wlan0 entered promiscuous mode
Thu Mar  2 19:00:04 2017 kern.info kernel: [  752.321575] br-lan: port 2(wlan0) entered forwarding state
Thu Mar  2 19:00:04 2017 kern.info kernel: [  752.321620] br-lan: port 2(wlan0) entered forwarding state
Thu Mar  2 19:00:04 2017 daemon.notice hostapd: ACS: Automatic channel selection started, this may take a bit
Thu Mar  2 19:00:04 2017 daemon.notice hostapd: wlan0: interface state COUNTRY_UPDATE->ACS
Thu Mar  2 19:00:04 2017 daemon.notice hostapd: wlan0: ACS-STARTED 
Thu Mar  2 19:00:04 2017 kern.info kernel: [  752.439961] br-lan: port 2(wlan0) entered disabled state
Thu Mar  2 19:00:06 2017 daemon.notice hostapd: handle_probe_req: send failed
Thu Mar  2 19:00:11 2017 daemon.notice hostapd: ACS: Survey is missing noise floor
Thu Mar  2 19:00:11 2017 daemon.notice hostapd: ACS: Survey is missing noise floor
Thu Mar  2 19:00:11 2017 daemon.notice hostapd: ACS: Survey is missing noise floor
Thu Mar  2 19:00:11 2017 daemon.notice hostapd: ACS: Survey is missing noise floor
Thu Mar  2 19:00:11 2017 daemon.notice hostapd: ACS: Survey is missing noise floor
Thu Mar  2 19:00:11 2017 daemon.notice hostapd: ACS: Survey is missing noise floor
Thu Mar  2 19:00:11 2017 daemon.notice hostapd: ACS: Survey is missing noise floor
Thu Mar  2 19:00:11 2017 daemon.notice hostapd: ACS: Survey is missing noise floor
Thu Mar  2 19:00:11 2017 daemon.notice hostapd: ACS: Survey is missing noise floor
Thu Mar  2 19:00:11 2017 daemon.notice hostapd: ACS: Survey is missing noise floor
Thu Mar  2 19:00:11 2017 daemon.notice hostapd: ACS: Survey is missing noise floor
Thu Mar  2 19:00:11 2017 daemon.notice hostapd: wlan0: ACS-COMPLETED freq=2412 channel=1
Thu Mar  2 19:00:11 2017 daemon.notice hostapd: wlan0: interface state ACS->HT_SCAN
Thu Mar  2 19:00:12 2017 daemon.notice hostapd: 20/40 MHz operation not permitted on channel pri=1 sec=5 based on overlapping BSSes
Thu Mar  2 19:00:12 2017 daemon.err hostapd: Using interface wlan0 with hwaddr 00:08:b8:78:08:60 and ssid "PorpularTravel_board"
Thu Mar  2 19:00:12 2017 daemon.notice hostapd: wlan0: interface state HT_SCAN->ENABLED
Thu Mar  2 19:00:12 2017 daemon.notice hostapd: wlan0: AP-ENABLED 
Thu Mar  2 19:00:12 2017 kern.info kernel: [  754.180673] br-lan: port 2(wlan0) entered forwarding state
Thu Mar  2 19:00:12 2017 kern.info kernel: [  754.180754] br-lan: port 2(wlan0) entered forwarding state
Thu Mar  2 19:00:12 2017 daemon.notice netifd: Network device 'wlan0' link is up
Thu Mar  2 19:00:13 2017 daemon.info hostapd: wlan0: STA 94:db:bc:99:a9:1d IEEE 802.11: authenticated
Thu Mar  2 19:00:13 2017 daemon.info hostapd: wlan0: STA 94:db:bc:99:a9:1d IEEE 802.11: associated (aid 1)
Thu Mar  2 19:00:13 2017 daemon.notice hostapd: wlan0: AP-STA-CONNECTED 94:db:bc:99:a9:1d
Thu Mar  2 19:00:13 2017 daemon.info dnsmasq-dhcp[6435]: DHCPREQUEST(br-lan) 192.168.93.206 94:db:bc:99:a9:1d 
Thu Mar  2 19:00:13 2017 daemon.info dnsmasq-dhcp[6435]: DHCPACK(br-lan) 192.168.93.206 94:db:bc:99:a9:1d android-784c4ebcefd3b9d2
Thu Mar  2 19:00:14 2017 kern.info kernel: [  754.668303] br-lan: port 2(wlan0) entered forwarding state
Thu Mar  2 19:00:16 2017 kern.err kernel: [  754.982348] ieee80211 phy0: rt2x00queue_write_tx_frame: Error - Arrived at non-free entry in th
Thu Mar  2 19:00:16 2017 kern.err kernel: [  754.982348] Please file bug report to http://rt2x00.serialmonkey.com
Thu Mar  2 19:00:42 2017 daemon.info hostapd: wlan0: STA b8:ee:65:2d:8d:79 IEEE 802.11: authenticated
Thu Mar  2 19:00:42 2017 daemon.info hostapd: wlan0: STA b8:ee:65:2d:8d:79 IEEE 802.11: associated (aid 2)
Thu Mar  2 19:00:42 2017 daemon.notice hostapd: wlan0: AP-STA-CONNECTED b8:ee:65:2d:8d:79
Thu Mar  2 19:00:43 2017 daemon.info dnsmasq-dhcp[6435]: DHCPREQUEST(br-lan) 192.168.92.22 b8:ee:65:2d:8d:79 
Thu Mar  2 19:00:43 2017 daemon.info dnsmasq-dhcp[6435]: DHCPACK(br-lan) 192.168.92.22 b8:ee:65:2d:8d:79 JON-PC
Thu Mar  2 19:00:46 2017 daemon.info dnsmasq-dhcp[6435]: DHCPINFORM(br-lan) 192.168.92.22 b8:ee:65:2d:8d:79 
Thu Mar  2 19:00:46 2017 daemon.info dnsmasq-dhcp[6435]: DHCPACK(br-lan) 192.168.92.22 b8:ee:65:2d:8d:79 JON-PC
Thu Mar  2 19:00:57 2017 kern.err kernel: [  762.060348] ieee80211 phy0: rt2x00queue_write_tx_frame: Error - Arrived at non-free entry in th
Thu Mar  2 19:00:57 2017 kern.err kernel: [  762.060348] Please file bug report to http://rt2x00.serialmonkey.com

wireless clients remain connected but could not access the network nor the internet.
MTK7620n
LEDE master

Supply the following if possible:
- Device problem occurs on: Nucom 5010UN v2 (brcm63xx)
- Software versions of LEDE release, packages, etc.: Just download and install latest Lede build (lede-17.01.0-r3205-59508e3) for Nucom 5010UN v2 from https://downloads.lede-project.org/releases/17.01.0/targets/brcm63xx/generic/lede-17.01.0-r3205-59508e3-brcm63xx-generic-R5010UNv2-squashfs-cfe.bin - Steps to reproduce: Configure Nucom 5010UN v2 as Wireless Routed Client
- Bug: After one hour or two, the Wireless Routed Clients looses connection with the Router it is connected to. It means, connecting by ssh or Luci website on Wireless Routed Client and running “ping 192.168.1.1” where 192.168.1.1 is the router it is connected to returns 100% of packets loss, also, “ping google.com” doesn’t work. But logging into Luci website and navigating to Network → WiFi, in Wireless Overview it shows as the Wireless Client Routed router is connected to the main one but there’s no working connection between them, at least pings are not working on both sides. Restarting the router seems to fix the issue but after one or two hours of uptime, the issue arises again.

Note, the bug was first introduced on OpenWrt Chaos Calmer 15.05 as OpenWrt Barrier Breaker does not suffer from this bug.

The following is as more complete explanation:

Hi,

i’ve just installed latest Lede-Project build, version 17.01.0-r3205-59508e3, on a Nucom 5010UN V2 router and everything seemed to work fine until i noticed that it keeps loosing Internet/network connection. The router is configured as Wireless Routed Client and the firmware was downloaded from https://downloads.lede-project.org/releases/17.01.0/targets/brcm63xx/generic/lede-17.01.0-r3205-59508e3-brcm63xx-generic-R5010UNv2-squashfs-cfe.bin

Also note, i think it’s a common bug inherited from OpenWrt as i suffered the same exact bug on an ADB P.DG A4001N1 router running latest build of OpenWrt, Chaos Calmer 15.05 and also 15.05.1. Also note that after posting on OpenWrt forums more users complained about the same bug.

Also, i want to state that in OpenWrt, the issue can be workarounded by downgrading to Barrier Breaker 14.07 which means the bug was introduced on the next build or next commits.

Anyway, my current setup is on Nucom 5010UN v2 is Wireless Routed Client [https://wiki.openwrt.org/doc/howto/clientmode#routed] + Static Route [https://wiki.openwrt.org/doc/recipes/routedclient#usingrouting] so clients on Nucom (Client Router) can “see” hosts on ADSL router (acting as AP).

I performed a clean install by resetting my custom configuration and the update went fine, but after reconfiguring the router as Wireless Routed Client it always happens that after being operating as Wifi Routed Client for about 2 hours suddenly it loses Internet connection/connection to AP. I say Internet connection because running a ping to google.com from ssh within inside the router doesn’t work but if i check through LUCI Network→Wifi it shows the router Wifi is still connected to the main ADSL router.

Here’s [https://forum.openwrt.org/viewtopic.php?pid=355180#p355180] a post on OpwnWrt site where i exposed the same issue for an ADB P.DG A4001N1 router and some other users replied complaining about the same issue.

These are the files modified by me through LUCI when configuring the routed as Wireless Routed Client, as i’ve been entirely configuring the router through LUCI except for the Static Route [https://wiki.openwrt.org/doc/recipes/routedclient#usingrouting] where i followed the indications on the link:
ddns
dhcp
dropbear
firewall
fstab
luci
network
rpcd
system
ucitrack
uh_t_tpd (I had to add underscores because of the buggy URL detection of the forum)
wireless

This is dhcp and dnmasq config:
cat etc config dhcp
config dnsmasq

      option domainneeded '1'
      option boguspriv '1'
      option localise_queries '1'
      option rebind_protection '1'
      option rebind_localhost '1'
      option local '/lan/'
      option domain 'lan'
      option expandhosts '1'
      option readethers '1'
      option leasefile '/tmp/dhcp.leases'
      option resolvfile '/tmp/resolv.conf.auto'
      option localservice '1'

config dhcp ‘lan’

      option interface 'lan'
      option dhcpv6 'server'
      option ra 'server'
      option ra_management '1'
      option start '100'
      option limit '150'
      option leasetime '12h'

config dhcp ‘wan’

      option interface 'wan'
      option ignore '1'

config odhcpd ‘odhcpd’

      option maindhcp '0'
      option leasefile '/tmp/hosts/odhcpd'
      option leasetrigger '/usr/sbin/odhcpd-update'

config host

      option name 'Host1'
      option mac 'XX:XX:XX:XX:XX:XY'
      option ip '192.168.2.2'

config host

      option name 'Host2'
      option mac 'XX:XX:XX:XX:XX:XZ'
      option ip '192.168.2.3'

config host

      option name 'ClientRouter'
      option mac 'XX:XX:XX:XX:XX:XX'
      option ip '192.168.2.92'

This is network:
cat etc config network
config interface ‘loopback’

      option ifname 'lo'
      option proto 'static'
      option ipaddr '127.0.0.1'
      option netmask '255.0.0.0'

config globals ‘globals’

      option ula_prefix 'fd05:6cbe:d307::/48'

config interface ‘lan’

      option force_link '1'
      option type 'bridge'
      option proto 'static'
      option netmask '255.255.255.0'
      option ip6assign '60'
      option _orig_ifname 'eth0.1'
      option _orig_bridge 'true'
      option ipaddr '192.168.2.1'
      option dns '8.8.8.8'
      option ifname 'eth0.1'

config switch

      option name 'eth0'
      option reset '1'
      option enable_vlan '1'

config switch_vlan

      option device 'eth0'
      option vlan '1'
      option ports '0 1 2 3 8t'

config interface ‘wwan’

      option proto 'dhcp'

This is wireless:
cat etc config wireless
config wifi-device ‘radio0’

      option type 'mac80211'
      option hwmode '11g'
      option path 'pci0000:00/0000:00:00.0/0000:01:00.0/bcma0:1'
      option disabled '0'
      option channel '13'
      option txpower '20'
      option country 'ES'

config wifi-device ‘radio1’

      option type 'mac80211'
      option path 'platform/ehci-platform/usb1/1-1/1-1:1.0'
      option txpower '20'
      option country 'ES'
      option hwmode '11a'
      option channel 'auto'

config wifi-iface

      option ssid 'MainADSLSSID'
      option device 'radio0'
      option mode 'sta'
      option bssid 'XX:XX:XX:XX:XX:YY'
      option key 'WiFiPassword'
      option encryption 'psk-mixed'
      option network 'wwan lan'
 

I have two this devices. I try to figure out which is the ideal firmware for it so I tested it with a few. I tested it with OpenWRT 15.05.1, LEDE 17.01.0 and Gargoyle 1.9.1/1.9.2. But I found a common issue. The device lose packets via wifi. Tested with several clients/devices. No matter what configuration I use. No problem on LAN but on wifi it lose a bunch of packets. Maybe it’s a driver issue? Would be good to figure out.

I also noticed that the latency is unstable on wifi. I guess it’s also a related with this issue. Should I open another ticket for it?

[code]/e-data/4089-AD8E/tools # flash_erase /dev/mtd0 0 4
Erasing 128 Kibyte @ 60000 – 100 % complete[/code]

now when I flash the LEDE uboot I get this

[code]/e-data/4089-AD8E # nandwrite /dev/mtd0 kirkwood/generic/u-boot-nsa325/u-boot.kwb
Input file is not page aligned Data did not fit into device, due to bad blocks
: Success[/code]

the expected should be
[code]/ # nandwrite /dev/mtd0 /e-data/4089-AD8E/uboot.2016.05-tld-1.nsa325.mtd0.kwb
Writing data to block 0 at offset 0×0 Writing data to block 1 at offset 0×20000 Writing data to block 2 at offset 0×40000 Writing data to block 3 at offset 0×60000[/code]

now I can’t even turn off my device. Hopeful to be resolve asap.

- Device problem occurs on: Netgear Nighthawk X4S R7800
- Software versions of LEDE release, packages, etc.: LEDE Reboot SNAPSHOT r4173-5d48dc1146 / LuCI Master (git-17.141.68918-5ca3864)
- Steps to reproduce
Boot device, wait for it to crash within 24hours

The paste ending in Hn was recorder after wifi stopped working and i turned wifi off and on.
The paste ending in Wu happend about 30 minutes after that and could only be resolved by rebooting the device.

- Device problem occurs on: TP-Link Archer C7 v1.1
- Software versions of LEDE release, packages, etc: https://downloads.lede-project.org/releases/17.01.2/targets/ar71xx/generic/lede-17.01.2-ar71xx-generic-archer-c7-v1-squashfs-factory.bin - Steps to reproduce: trying to re-flash router with lede-17.01.2-ar71xx-generic-archer-c7-v1-squashfs-factory.bin image will result in bricked router stuck in reboot loop. I tried flashing from both factory image (from factory firmware) and sysupgrade image (from OpenWRT using both SSH and web interface). Both images result in bricked router.

Unbricking was done by forcing router into failsafe mode, SSH:in into it and uploading/flashing old firmware via NC from a PC.

I suggest pulling this image from a list of supported images for Archer C7 v1.1, until issues have been solved. Otherwise, it might result in bricked equipment.

Ubiquiti AirGateway and Bullet M2
LEDE 17.01.2
Lighttpd
PHP7

Runs very well on boot up. Then after some interval ranging from minutes to days, the following typical error occurs, repeated numerous times with differing blocks:
Mon Jul 24 07:09:39 2017 kern.err kernel: [43650.730023] SQUASHFS error: xz decompression failed, data probably corrupt
Mon Jul 24 07:09:39 2017 kern.err kernel: [43650.735459] SQUASHFS error: squashfs_read_data failed to read block 0x1e5d9a

Following this the unit becomes unresponsive, very slow or reboots its self.
Tried on two different devices and get the same result.

Images produced with Imagebuilder with ipv6, usb, ppp, luci removed to give space on flash.

The exact same config on OpenWrt CC (but with php5) gives no problems.

root@BlueWave:~# free

           total       used       free     shared    buffers     cached

Mem: 28176 19956 8220 132 1460 4296
-/+ buffers/cache: 14200 13976
Swap: 0 0 0

root@BlueWave:~# df -h
Filesystem Size Used Available Use% Mounted on
/dev/root 4.8M 4.8M 0 100% /rom
tmpfs 13.8M 132.0K 13.6M 1% /tmp
/dev/mtdblock5 1.4M 508.0K 964.0K 35% /overlay
overlayfs:/overlay 1.4M 508.0K 964.0K 35% /
tmpfs 512.0K 0 512.0K 0% /dev

- Device problem occurs on: WRT3200ACM
- Software versions of LEDE release, packages, etc.: LEDE Reboot SNAPSHOT r5096-a29848c / LuCI Master (git-17.260.43176-678c15c)
- Steps to reproduce: I’ve been consistently having problems with wlan2 going offline after the router has been up for a day or so, but just stumbled across this in dmesg. I’ll see if I can figure out the circumstances leading to it.

[85338.316517] WARNING: CPU: 1 PID: 0 at net/sched/sch_generic.c:316 dev_watchdog+0x1b4/0×234 [85338.324820] NETDEV WATCHDOG: wlan2 (mwifiex_sdio): transmit queue 1 timed out
[85338.331987] Modules linked in: pppoe ppp_async pppox ppp_generic nf_conntrack_ipv6 iptable_nat ipt_REJECT ipt_MASQUERADE xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_recent xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_HL xt_DSCP xt_CLASSIFY slhc rfcomm nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack mwifiex_sdio mwifiex iptable_mangle iptable_filter ipt_ECN ip_tables hidp hci_uart crc_ccitt btusb btmrvl_sdio btmrvl btintel bnep bluetooth hid evdev input_core mwlwifi mac80211 cfg80211 compat xt_set ip_set_list_set ip_set_hash_netiface ip_set_hash_netport
[85338.404541] ip_set_hash_netnet ip_set_hash_net ip_set_hash_netportnet ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables x_tables tun regmap_mmio ecb cmac uhci_hcd ohci_platform ohci_hcd gpio_button_hotplug
[85338.442106] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.9.54 #0
[85338.448049] Hardware name: Marvell Armada 380/385 (Device Tree)
[85338.454003] [<c0016010>] (unwind_backtrace) from [<c0012220>] (show_stack+0×10/0×14)
[85338.461782] [<c0012220>] (show_stack) from [<c020c1a0>] (dump_stack+0x7c/0x9c)
[85338.469036] [<c020c1a0>] (dump_stack) from [<c0029218>] (warn+0xbc/0xec)
[85338.475939] [<c0029218>] (warn) from [<c002927c>] (warn_slowpath_fmt+0×34/0×44)
[85338.483455] [<c002927c>] (warn_slowpath_fmt) from [<c03b6c38>] (dev_watchdog+0x1b4/0×234)
[85338.491661] [<c03b6c38>] (dev_watchdog) from [<c006ffe8>] (call_timer_fn+0×20/0×94)
[85338.499349] [<c006ffe8>] (call_timer_fn) from [<c0070220>] (run_timer_softirq+0x1c4/0×200)
[85338.507650] [<c0070220>] (run_timer_softirq) from [<c002d2b4>] (do_softirq+0xd0/0×204)
[85338.515775] [<c002d2b4>] (do_softirq) from [<c002d66c>] (irq_exit+0×94/0xb8)
[85338.523029] [<c002d66c>] (irq_exit) from [<c0061e04>] (handle_domain_irq+0×90/0xb4)
[85338.530892] [<c0061e04>] (handle_domain_irq) from [<c0009428>] (gic_handle_irq+0×50/0×94)
[85338.539277] [<c0009428>] (gic_handle_irq) from [<c0012c8c>] (irq_svc+0x6c/0×90)
[85338.546789] Exception stack(0xdf475f90 to 0xdf475fd8)
[85338.551860] 5f80: 00000001 00000000 00000000 c001b1c0
[85338.560071] 5fa0: 00000000 df474000 c0604fe4 00000002 c05ff168 00000000 df475fe8 00000001
[85338.568282] 5fc0: 00000000 df475fe0 c000f808 c000f80c 60000013 ffffffff
[85338.574925] [<c0012c8c>] (irq_svc) from [<c000f80c>] (arch_cpu_idle+0x2c/0×38)
[85338.582355] [<c000f80c>] (arch_cpu_idle) from [<c005b154>] (cpu_startup_entry+0xf0/0x19c)
[85338.590567] [<c005b154>] (cpu_startup_entry) from [<000095ac>] (0x95ac)
[85338.597214] —[ end trace 7ee504210e2aead0 ]— [85338.601865] mwifiex_sdio mmc0:0001:1: 8504333 : Tx timeout(#1), bss_type-num = 1-0
[85344.871433] mwifiex_sdio mmc0:0001:1: 8504960 : Tx timeout(#2), bss_type-num = 1-0
[85350.631045] mwifiex_sdio mmc0:0001:1: 8505536 : Tx timeout(#3), bss_type-num = 1-0
[85356.400657] mwifiex_sdio mmc0:0001:1: 8506113 : Tx timeout(#4), bss_type-num = 1-0
[85366.309996] mwifiex_sdio mmc0:0001:1: 8507104 : Tx timeout(#5), bss_type-num = 1-0
[85376.309327] mwifiex_sdio mmc0:0001:1: 8508104 : Tx timeout(#6), bss_type-num = 1-0
[85386.318652] mwifiex_sdio mmc0:0001:1: 8509105 : Tx timeout(#7), bss_type-num = 1-0
[85386.326257] mwifiex_sdio mmc0:0001:1: tx_timeout_cnt exceeds threshold. Triggering card reset!
[85386.356950] mwifiex_sdio mmc0:0001:1: info: shutdown mwifiex...
[85386.362967] mwifiex_sdio mmc0:0001:1: PREP_CMD: card is removed
[85386.368924] mwifiex_sdio mmc0:0001:1: Failed to delete mgmt IEs!
[85386.374978] mwifiex_sdio mmc0:0001:1: PREP_CMD: card is removed
[85386.380928] mwifiex_sdio mmc0:0001:1: Failed to stop the BSS
[85386.387009] br-lan: port 4(wlan2) entered disabled state
[85386.394495] device wlan2 left promiscuous mode
[85386.398975] br-lan: port 4(wlan2) entered disabled state
[85386.404593] mwifiex_sdio mmc0:0001:1: PREP_CMD: card is removed
[85386.410562] mwifiex_sdio mmc0:0001:1: PREP_CMD: card is removed
[85386.416507] mwifiex_sdio mmc0:0001:1: PREP_CMD: card is removed
[85386.603147] mwifiex_sdio mmc0:0001:1: WLAN FW already running! Skip FW dnld
[85386.610161] mwifiex_sdio mmc0:0001:1: WLAN FW is active
[85396.707953] mwifiex_sdio mmc0:0001:1: mwifiex_cmd_timeout_func: Timeout cmd id = 0xa9, act = 0×0 [85396.716787] mwifiex_sdio mmc0:0001:1: num_data_h2c_failure = 0
[85396.722652] mwifiex_sdio mmc0:0001:1: num_cmd_h2c_failure = 0
[85396.728423] mwifiex_sdio mmc0:0001:1: is_cmd_timedout = 1
[85396.733842] mwifiex_sdio mmc0:0001:1: num_tx_timeout = 0
[85396.739178] mwifiex_sdio mmc0:0001:1: last_cmd_index = 3
[85396.744512] mwifiex_sdio mmc0:0001:1: last_cmd_id: b3 00 b3 00 b2 00 a9 00 b3 00
[85396.751940] mwifiex_sdio mmc0:0001:1: last_cmd_act: 00 00 00 00 00 00 00 00 00 00
[85396.759457] mwifiex_sdio mmc0:0001:1: last_cmd_resp_index = 2
[85396.765225] mwifiex_sdio mmc0:0001:1: last_cmd_resp_id: b3 80 b3 80 b2 80 b3 80 b3 80
[85396.773093] mwifiex_sdio mmc0:0001:1: last_event_index = 2
[85396.778603] mwifiex_sdio mmc0:0001:1: last_event: 37 00 55 00 43 00 55 00 55 00
[85396.785944] mwifiex_sdio mmc0:0001:1: data_sent=1 cmd_sent=1
[85396.791630] mwifiex_sdio mmc0:0001:1: ps_mode=0 ps_state=0
[85396.797372] mwifiex_sdio mmc0:0001:1: info: _mwifiex_fw_dpc: unregister device

Yesterday I upgraded the Linksys wrt1200ac from openwrt 15.05.1
to lede-17.01.4. The upgrade was done through a luci web
interface.

After reboot the wan connection was gone, as well as all local
ethernet ports. Wifi continued to work fine. The configuration
seems to have survived the upgrade. I couldn’t find anything
wrong with the configuration.

On the Internet port there were no packets coming in. On the
ethernet port 1 there are bootp/dhcp requests coming from the
router.

Not sure if that is relevant, but reverting back to 15.05.1
didn’t work either: the router is currently completely
inaccessible. I don’t have a serial cable, will probably order
one to try to debrick the thing.

D-Link DIR-320 B1, currently with Lede 17.01.4 (basically, default config).
Had no problems in years with 7 of my wireless devices (consoles, phones and tablets) in same room - everything works perfect.

But my new Android 6 tablet (Lenovo Tab 3 8 Plus) keeps losing network.
It can happen randomly - for example, I can notice that every 3 minutes in Google PlayStore, or only couple times per hour (maybe it happens more often, but I’m not checking something online that time).
And it seems, tablet doesn’t even notice that there is no network - signal strenght icon is there (filled icon - “connected”), but data is not transfered (no send/receive arrows).
If there was a download, then it stops and not trying to resume or restore connection.
Or, for example, Google PlayStore doesn’t say “wifi is off” - it just keeps trying to load page (rotating loading symbol).
Some time after it gets his connection back, or it much faster just to turn off/on wireless.

Router system log have this message: “disconnected due to excessive missing ACKs”.
I tried to add “disassoc_low_ack 0” and this error gone from log, but this not solved connection problem.
I tried to use another router DIR-300NRU6 with stock firmware - everything OK, not a single disconnect.

Using the 5 Ghz radio in accesspoint mode (mode ap) and client mode (mode sta) at the same time doesnt work.
Only client mode works.
No error messages will be generated.
With version V17.01.4 all is fine (same configuration).

Config details:

config wifi-device 'radio0'
	option type 'mac80211'
	option hwmode '11a'
	option path 'pci0000:01/0000:01:00.0'
	option noscan '1'
	option htmode 'VHT80'
	option multicast_querier '0'
	option igmp_snooping '0'
	option distance '8'
	option log_level '3'
	option compression '1'
	option bursting '1'
	option ff '1'
	option country 'US'
	option txpower '23'
	option channel '112'

config wifi-device 'radio1'
	option type 'mac80211'
	option hwmode '11g'
	option path 'platform/qca955x_wmac'
	option noscan '1'
	option htmode 'HT40'
	option distance '15'
	option multicast_querier '0'
	option igmp_snooping '0'
	option log_level '3'
	option compression '1'
	option bursting '1'
	option ff '1'
	option channel '9'
	option country 'US'
	option txpower '24'
	option disabled '0'

config wifi-iface
	option encryption 'psk2'
	option device 'radio0'
	**option mode 'sta'**
	option bssid '08:96:D7:7B:89:BA'
	option key 'xxxxxxxxxxxxxxxxxxxxxx'
	option multicast_querier '0'
	option igmp_snooping '0'
	option ssid 'Fritz_5Ghz'
	option network 'WWAN WWAN6'

config wifi-iface
	option ssid 'im6shop'
	option device 'radio1'
	option key 'xxxxxxxxxxxxxxxxxxxxxx'
	option multicast_querier '0'
	option igmp_snooping '0'
	option network 'LAN'
	option mode 'ap'
	option encryption 'psk2'

config wifi-iface
	option device 'radio0'
	**option mode 'ap'**
	option key 'xxxxxxxxxxxxxxxxxxxxxx'
	option macfilter 'allow'
	list maclist '78:0C:B8:8A:12:45'
	list maclist '88:32:9B:F6:70:79'
	list maclist 'F0:27:65:7F:7A:19'
	option encryption 'psk2+ccmp'
	option network 'LAN'
	option ssid 'im6shop'

If you need further details, let me know

regards Klaus

After problems described in this bug:

Try to flash sysupgrade from here.

LuCI let this image pass but the device do not came back after reboot.
Only the Power-LED ist on, no blinking of RSSIHIGH during boot.
On LAN or WAN is no activity. Checked by tcpdump.

Expected behavior:
System reboot in LEDE-17.01.4

Like described in this bug it is not possible to recover via TFTP the device. It pulls the firmware but do not flash anything.
Try to recover with LEDE but also with all stock-images from tp-link website.

Hello,

Device: RT-N12+
Issue: WLAN is not working properly. When enabled the signal status shows 0db noise 0db. Wireless devices would properly show the SSID however unable to join. Even with No encryption. The system log would even show that radio0 is up.
Steps done:
- Reboot Router
- Re-flash firmware
- Manually set WiFi config: Band 20mhz or 40mhz.
- Toggled between N and Legacy.
- Manually set WiFi channels.
- Tried different encryption.

Additional information:
- I am well aware that this router support is still WIP as stated: https://lede-project.org/toh/hwdata/asus/asus_rt-n12 Basically just putting out this bug report since so far everything seemed fine except for wireless broadcast.
- Used latest snapshot build from downloads page dated: Thu Jan 25 12:07:37 2018

It appears this has been broken for quite some time, likely before LEDE forked from OpenWrt, as there are CC builds with initrams images working fine (early 2016), however the CC repo no longer compiles a working initrams image, nor does LEDE.

• The changes causing the issue appear to have occurred between 2016.02.18 and 2016.09.06
  • I have a working OpenWrt initramfs image created 2016.02.17 @14:26:46 UTC which boots w/o issue.
  • This post from the SolidRun forum on 2016.09.06 @ 10:30am (local) verifies boot issues occurring at least as of this date.
    • Xue Liu’s [clockworkbird9] repo is mentioned and a link to his blog is provided, however he either forked OpenWrt prior to the issue originating or fixed whatever was broken.

Unexpected Output

Current LEDE/OpenWrt initramfs image is a mess all around (Compiled 2018.01.25)

   Marvell>> tftpboot lede-mvebu-armada-388-clearfog-pro-initramfs.bin
   Using egiga1 device
   TFTP from server 10.4.50.38; our IP address is 10.4.50.170
   Filename 'lede-mvebu-armada-388-clearfog-pro-initramfs.bin'.
   Load address: 0x2000000
   Loading: #################################################################
	        #################################################################
	        #################################################################
	        2.4 MiB/s
   done
   Bytes transferred = 4690096 (4790b0 hex)
 
   Marvell>> bootm
   Wrong Image Format for bootm command
   ERROR: cant get kernel image!

Booting a LEDE zImage goes a bit better (...until the kernel panic | Compiled 2018.01.25)

    Marvell>> tftpboot zImage-Solidrun-Clearfog-A1                 
    Using egiga1 device
    TFTP from server 10.4.50.38; our IP address is 10.4.50.170
    Filename 'zImage-Solidrun-Clearfog-A1'.
    Load address: 0x2000000
    Loading: #################################################################
    	 #################################################################
    	 #################################################################
    	 2.4 MiB/s
    done
    Bytes transferred = 2132324 (208964 hex)
    Marvell>> bootz
 
    Starting kernel ...
 
    [    0.000000] Booting Linux on physical CPU 0x0
    [    0.000000] Linux version 4.4.14 (thepeople@trabant) (gcc version 5.3.0 (OpenWrt GCC 5.3.0 50140) ) #1 SMP Thu Dec 7 14:50:07 UTC 2017
    [    0.000000] CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=10c5387d
    [    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
    [    0.000000] Machine model: SolidRun Clearfog A1
    [    0.000000] Memory policy: Data cache writealloc
    [    0.000000] PERCPU: Embedded 12 pages/cpu @ef7ce000 s17984 r8192 d22976 u49152
    [    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 260608
    [    0.000000] Kernel command line: 
    [    0.000000] PID hash table entries: 4096 (order: 2, 16384 bytes)
    [    0.000000] Dentry cache hash table entries: 131072 (order: 7, 524288 bytes)
    [    0.000000] Inode-cache hash table entries: 65536 (order: 6, 262144 bytes)
    [    0.000000] Memory: 1032820K/1048576K available (4223K kernel code, 178K rwdata, 1572K rodata, 264K init, 301K bss, 15756K reserved, 0K cma-reserved, 262144K highmem)
    [    0.000000] Virtual kernel memory layout:
    [    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    [    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
    [    0.000000]     vmalloc : 0xf0800000 - 0xff800000   ( 240 MB)
    [    0.000000]     lowmem  : 0xc0000000 - 0xf0000000   ( 768 MB)
    [    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
    [    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
    [    0.000000]       .text : 0xc0008000 - 0xc05b1078   (5797 kB)
    [    0.000000]       .init : 0xc05b2000 - 0xc05f4000   ( 264 kB)
    [    0.000000]       .data : 0xc05f4000 - 0xc0620a5c   ( 179 kB)
    [    0.000000]        .bss : 0xc0620a5c - 0xc066c244   ( 302 kB)
    [    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
    [    0.000000] Hierarchical RCU implementation.
    [    0.000000] 	RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
    [    0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
    [    0.000000] NR_IRQS:16 nr_irqs:16 16
    [    0.000000] mvebu_mbus: [Firmware Warn]: deprecated mbus-mvebu Device Tree, suspend/resume will not work
    [    0.000000] L2C-310 enabling early BRESP for Cortex-A9
    [    0.000000] L2C-310 full line of zeros enabled for Cortex-A9
    [    0.000000] L2C-310 D prefetch enabled, offset 1 lines
    [    0.000000] L2C-310 dynamic clock gating enabled, standby mode enabled
    [    0.000000] L2C-310 Coherent cache controller enabled, 16 ways, 1024 kB
    [    0.000000] L2C-310 Coherent: CACHE_ID 0x410054c9, AUX_CTRL 0x56070001
    [    0.000000] Switching to timer-based delay loop, resolution 40ns
    [    0.000002] sched_clock: 32 bits at 25MHz, resolution 40ns, wraps every 85899345900ns
    [    0.000009] clocksource: armada_370_xp_clocksource: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 76450417870 ns
    [    0.000106] Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=250000)
    [    0.000113] pid_max: default: 32768 minimum: 301
    [    0.000148] Mount-cache hash table entries: 2048 (order: 1, 8192 bytes)
    [    0.000152] Mountpoint-cache hash table entries: 2048 (order: 1, 8192 bytes)
    [    0.000340] CPU: Testing write buffer coherency: ok
    [    0.000439] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
    [    0.000465] Setting up static identity map for 0x8280 - 0x82d8
    [    0.000550] mvebu-soc-id: MVEBU SoC ID=0x6828, Rev=0x4
    [    0.000633] mvebu-pmsu: Initializing Power Management Service Unit
    [    0.001026] Booting CPU 1
    [    0.001190] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
    [    0.001218] Brought up 2 CPUs
    [    0.001223] SMP: Total of 2 processors activated (100.00 BogoMIPS).
    [    0.001226] CPU: All CPU(s) started in SVC mode.
    [    0.002883] VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 4
    [    0.002954] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
    [    0.003000] pinctrl core: initialized pinctrl subsystem
    [    0.003380] NET: Registered protocol family 16
    [    0.003837] DMA: preallocated 256 KiB pool for atomic coherent allocations
    [    0.029930] cpuidle: using governor ladder
    [    0.032504] mvebu-pmsu: CPU hotplug support is currently broken on Armada 38x: disabling
    [    0.032512] mvebu-pmsu: CPU idle is currently broken on Armada 38x: disabling
    [    0.060714] SCSI subsystem initialized
    [    0.060995] usbcore: registered new interface driver usbfs
    [    0.061020] usbcore: registered new interface driver hub
    [    0.061042] usbcore: registered new device driver usb
    [    0.061712] clocksource: Switched to clocksource armada_370_xp_clocksource
    [    0.062143] NET: Registered protocol family 2
    [    0.062382] TCP established hash table entries: 8192 (order: 3, 32768 bytes)
    [    0.062424] TCP bind hash table entries: 8192 (order: 4, 65536 bytes)
    [    0.062484] TCP: Hash tables configured (established 8192 bind 8192)
    [    0.062516] UDP hash table entries: 512 (order: 2, 16384 bytes)
    [    0.062538] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes)
    [    0.062619] NET: Registered protocol family 1
    [    0.062981] futex hash table entries: 512 (order: 3, 32768 bytes)
    [    0.065945] squashfs: version 4.0 (2009/01/31) Phillip Lougher
    [    0.065956] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
    [    0.066587] bounce: pool size: 64 pages
    [    0.066594] io scheduler noop registered
    [    0.066599] io scheduler deadline registered (default)
    [    0.066978] armada-38x-pinctrl f1018000.pinctrl: registered pinctrl driver
    [    0.067276] irq: Cannot allocate irq_descs @ IRQ50, assuming pre-allocated
    [    0.067412] irq: Cannot allocate irq_descs @ IRQ82, assuming pre-allocated
    [    0.067660] mv_xor f1060800.xor: Marvell shared XOR driver
    [    0.101937] mv_xor f1060800.xor: Marvell XOR (Descriptor Mode): ( xor cpy intr )
    [    0.102017] mv_xor f1060900.xor: Marvell shared XOR driver
    [    0.141919] mv_xor f1060900.xor: Marvell XOR (Descriptor Mode): ( xor cpy intr )
    [    0.142055] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
    [    0.142889] console [ttyS0] disabled
    [    0.162961] f1012000.serial: ttyS0 at MMIO 0xf1012000 (irq = 23, base_baud = 15625000) is a 16550A
    [    0.715227] console [ttyS0] enabled
    [    0.738916] f1012100.serial: ttyS1 at MMIO 0xf1012100 (irq = 24, base_baud = 15625000) is a 16550A
    [    0.748295] ahci-mvebu f10a8000.sata: AHCI 0001.0000 32 slots 2 ports 6 Gbps 0x3 impl platform mode
    [    0.757374] ahci-mvebu f10a8000.sata: flags: 64bit ncq sntf led only pmp fbs pio slum part sxs 
    [    0.766754] scsi host0: ahci-mvebu
    [    0.770314] scsi host1: ahci-mvebu
    [    0.773824] ata1: SATA max UDMA/133 mmio [mem 0xf10a8000-0xf10a9fff] port 0x100 irq 45
    [    0.781766] ata2: SATA max UDMA/133 mmio [mem 0xf10a8000-0xf10a9fff] port 0x180 irq 45
    [    0.789792] ahci-mvebu f10e0000.sata: AHCI 0001.0000 32 slots 2 ports 6 Gbps 0x3 impl platform mode
    [    0.798869] ahci-mvebu f10e0000.sata: flags: 64bit ncq sntf led only pmp fbs pio slum part sxs 
    [    0.808345] scsi host2: ahci-mvebu
    [    0.811918] scsi host3: ahci-mvebu
    [    0.815415] ata3: SATA max UDMA/133 mmio [mem 0xf10e0000-0xf10e1fff] port 0x100 irq 46
    [    0.823359] ata4: SATA max UDMA/133 mmio [mem 0xf10e0000-0xf10e1fff] port 0x180 irq 46
    [    0.832327] libphy: Fixed MDIO Bus: probed
    [    0.836538] libphy: orion_mdio_bus: probed
    [    0.841803] mvneta f1030000.ethernet eth0: Using hardware mac address 00:50:43:4c:18:3b
    [    0.850637] mvneta f1034000.ethernet eth1: Using random mac address c6:31:9b:9c:a7:67
    [    0.859250] mvneta f1070000.ethernet eth2: Using hardware mac address 00:50:43:ee:18:3b
    [    0.867330] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
    [    0.873879] ehci-pci: EHCI PCI platform driver
    [    0.878359] ehci-platform: EHCI generic platform driver
    [    0.883691] ehci-orion: EHCI orion driver
    [    0.887777] orion-ehci f1058000.usb: EHCI Host Controller
    [    0.893203] orion-ehci f1058000.usb: new USB bus registered, assigned bus number 1
    [    0.900847] orion-ehci f1058000.usb: irq 40, io mem 0xf1058000
    [    0.921501] orion-ehci f1058000.usb: USB 2.0 started, EHCI 1.00
    [    0.927667] hub 1-0:1.0: USB hub found
    [    0.931437] hub 1-0:1.0: 1 port detected
    [    0.935663] xhci-hcd f10f0000.usb3: xHCI Host Controller
    [    0.940994] xhci-hcd f10f0000.usb3: new USB bus registered, assigned bus number 2
    [    0.948605] xhci-hcd f10f0000.usb3: hcc params 0x0a000990 hci version 0x100 quirks 0x00010010
    [    0.957170] xhci-hcd f10f0000.usb3: irq 48, io mem 0xf10f0000
    [    0.963146] hub 2-0:1.0: USB hub found
    [    0.966914] hub 2-0:1.0: 1 port detected
    [    0.970927] xhci-hcd f10f0000.usb3: xHCI Host Controller
    [    0.976265] xhci-hcd f10f0000.usb3: new USB bus registered, assigned bus number 3
    [    0.983796] usb usb3: We dont know the algorithms for LPM for this host, disabling LPM.
    [    0.992105] hub 3-0:1.0: USB hub found
    [    0.995872] hub 3-0:1.0: 1 port detected
    [    0.999930] xhci-hcd f10f8000.usb3: xHCI Host Controller
    [    1.005271] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 4
    [    1.012863] xhci-hcd f10f8000.usb3: hcc params 0x0a000990 hci version 0x100 quirks 0x00010010
    [    1.021422] xhci-hcd f10f8000.usb3: irq 49, io mem 0xf10f8000
    [    1.027391] hub 4-0:1.0: USB hub found
    [    1.031159] hub 4-0:1.0: 1 port detected
    [    1.035201] xhci-hcd f10f8000.usb3: xHCI Host Controller
    [    1.040528] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 5
    [    1.048072] usb usb5: We dont know the algorithms for LPM for this host, disabling LPM.
    [    1.056389] hub 5-0:1.0: USB hub found
    [    1.060156] hub 5-0:1.0: 1 port detected
    [    1.064290] usbcore: registered new interface driver usb-storage
    [    1.070460] armada38x-rtc f10a3800.rtc: rtc core: registered f10a3800.rtc as rtc0
    [    1.078105] i2c /dev entries driver
    [    1.092469] orion_wdt: Initial timeout 171 sec
    [    1.097786] marvell-cesa f1090000.crypto: CESA device successfully registered
    [    1.105445] NET: Registered protocol family 10
    [    1.110382] NET: Registered protocol family 17
    [    1.114870] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
    [    1.127526] Bridge firewalling registered
    [    1.131551] 8021q: 802.1Q VLAN Support v1.8
    [    1.135771] Registering SWP/SWPB emulation handler
    [    1.141319] armada38x-rtc f10a3800.rtc: setting system clock to 1970-06-02 16:51:43 UTC (13193503)
    [    1.141517] ata1: SATA link down (SStatus 0 SControl 300)
    [    1.141542] ata2: SATA link down (SStatus 0 SControl 300)
    [    1.161504] ata4: SATA link down (SStatus 0 SControl 300)
    [   1.166942] ata3: SATA link down (SStatus 0 SControl 300)
    [    1.172389] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
    [    1.179889] Please append a correct "root=" boot option; here are the available partitions:
    [    1.188270] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
    [    1.196553] CPU1: stopping
    [    1.199266] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.4.14 #1
    [    1.205198] Hardware name: Marvell Armada 380/385 (Device Tree)
    [    1.211142] [<c001fab8>] (unwind_backtrace) from [<c001c420>] (show_stack+0x10/0x14)
    [    1.218909] [<c001c420>] (show_stack) from [<c019f54c>] (dump_stack+0x8c/0xa0)
    [    1.226149] [<c019f54c>] (dump_stack) from [<c001e94c>] (handle_IPI+0x108/0x1a0)
    [    1.233563] [<c001e94c>] (handle_IPI) from [<c0009508>] (gic_handle_irq+0x80/0x94)
    [    1.241151] [<c0009508>] (gic_handle_irq) from [<c000a5f4>] (__irq_svc+0x54/0x70)
    [    1.248650] Exception stack(0xef073f80 to 0xef073fc8)
    [    1.253712] 3f80: 00000001 00000000 00000000 c000b3c0 ef072000 c05f6498 c04fcab4 00000000
    [    1.261909] 3fa0: c05ee224 ef073fd8 00000000 c05f1118 00000000 ef073fd0 c00194cc c00194d0
    [    1.270104] 3fc0: 60000013 ffffffff
    [    1.273600] [<c000a5f4>] (__irq_svc) from [<c00194d0>] (arch_cpu_idle+0x34/0x50)
    [    1.281015] [<c00194d0>] (arch_cpu_idle) from [<c005b324>] (cpu_startup_entry+0x148/0x210)
    [    1.289298] [<c005b324>] (cpu_startup_entry) from [<000095ac>] (0x95ac)
    [    1.295928] ---[ end Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)

Current OpenWrt CC initramfs freezes upon loading the kernel (Compiled 2018.01.27)

   Marvell>> tftpboot openwrt-mvebu-armada-388-clearfog-initramfs
   Using egiga1 device
   TFTP from server 10.4.50.38; our IP address is 10.4.50.170
   Filename 'openwrt-mvebu-armada-388-clearfog-initramfs'.
   Load address: 0x2000000
   Loading: #################################################################
	        #################################################################
	        #################################################################
	        2.4 MiB/s
   done
   Bytes transferred = 7925725 (78efdd hex)
 
   Marvell>> bootm
   ## Booting kernel from Legacy Image at 02000000 ...
      Image Name:   ARM OpenWrt Linux-3.18.91
      Created:      2018-01-27   3:22:24 UTC
      Image Type:   ARM Linux Kernel Image (uncompressed)
      Data Size:    7925661 Bytes = 7.6 MiB
      Load Address: 00008000
      Entry Point:  00008000
      Verifying Checksum ... OK
      Loading Kernel Image ... OK
   OK
 
   Starting kernel ...

Expected Output (working initramfs)

r48735 (Compiled 2016.02.17)

    Marvell>> tftpboot openwrt-mvebu-armada-388-clearfog-initramfs
    Using egiga1 device
    TFTP from server 10.4.50.38; our IP address is 10.4.50.170
    Filename 'openwrt-mvebu-armada-388-clearfog-initramfs'.
    Load address: 0x2000000
    Loading: #################################################################
    	  #################################################################
    	  #################################################################
    	  2.4 MiB/s
    done
    Bytes transferred = 3022310 (2e1de6 hex)
 
    Marvell>> bootm
    ## Booting kernel from Legacy Image at 02000000 ...
       Image Name:   ARM OpenWrt Linux-4.1.16
       Created:      2016-02-17  14:26:46 UTC
       Image Type:   ARM Linux Kernel Image (uncompressed)
       Data Size:    3022246 Bytes = 2.9 MiB
       Load Address: 00008000
       Entry Point:  00008000
       Verifying Checksum ... OK
       Loading Kernel Image ... OK
    OK
 
    Starting kernel ...
 
    [    0.000000] Booting Linux on physical CPU 0x0
    [    0.000000] Linux version 4.1.16 (vlado@b50) (gcc version 5.2.0 (OpenWrt GCC 5.2.0 r48723) ) #6 SMP Wed Feb 17 14:59:16 UTC 2016
    [    0.000000] CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=10c5387d
    [    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
    [    0.000000] Machine model: SolidRun Clearfog A1
    [    0.000000] Memory policy: Data cache writealloc
    [    0.000000] PERCPU: Embedded 10 pages/cpu @eefd1000 s11776 r8192 d20992 u40960
    [    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 260624
    [    0.000000] Kernel command line: 
    [    0.000000] PID hash table entries: 4096 (order: 2, 16384 bytes)
    [    0.000000] Dentry cache hash table entries: 131072 (order: 7, 524288 bytes)
    [    0.000000] Inode-cache hash table entries: 65536 (order: 6, 262144 bytes)
    [    0.000000] Memory: 1029820K/1048576K available (3435K kernel code, 138K rwdata, 1228K rodata, 4592K init, 168K bss, 18756K reserved, 0K cma-reserved, 270336K highmem)
    [    0.000000] Virtual kernel memory layout:
    [    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
    [    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
    [    0.000000]     vmalloc : 0xf0000000 - 0xff000000   ( 240 MB)
    [    0.000000]     lowmem  : 0xc0000000 - 0xef800000   ( 760 MB)
    [    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
    [    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
    [    0.000000]       .text : 0xc0008000 - 0xc0495e9c   (4664 kB)
    [    0.000000]       .init : 0xc0496000 - 0xc0912000   (4592 kB)
    [    0.000000]       .data : 0xc0912000 - 0xc09348dc   ( 139 kB)
    [    0.000000]        .bss : 0xc09348dc - 0xc095e9a4   ( 169 kB)
    [    0.000000] Hierarchical RCU implementation.
    [    0.000000] 	RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
    [    0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
    [    0.000000] NR_IRQS:16 nr_irqs:16 16
    [    0.000000] mvebu_mbus: [Firmware Warn]: deprecated mbus-mvebu Device Tree, suspend/resume will not work
    [    0.000000] L2C-310 enabling early BRESP for Cortex-A9
    [    0.000000] L2C-310 full line of zeros enabled for Cortex-A9
    [    0.000000] L2C-310 dynamic clock gating enabled, standby mode enabled
    [    0.000000] L2C-310 Coherent cache controller enabled, 16 ways, 1024 kB
    [    0.000000] L2C-310 Coherent: CACHE_ID 0x410054c9, AUX_CTRL 0x46070001
    [    0.000006] sched_clock: 32 bits at 25MHz, resolution 40ns, wraps every 85899345900ns
    [    0.000016] clocksource armada_370_xp_clocksource: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 76450417870 ns
    [    0.000157] Calibrating delay loop... 3188.32 BogoMIPS (lpj=15941632)
    [    0.059922] pid_max: default: 32768 minimum: 301
    [    0.059975] Mount-cache hash table entries: 2048 (order: 1, 8192 bytes)
    [    0.059980] Mountpoint-cache hash table entries: 2048 (order: 1, 8192 bytes)
    [    0.060187] CPU: Testing write buffer coherency: ok
    [    0.060286] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
    [    0.060311] Setting up static identity map for 0x8280 - 0x82d8
    [    0.060398] mvebu-soc-id: MVEBU SoC ID=0x6828, Rev=0x4
    [    0.060484] mvebu-pmsu: Initializing Power Management Service Unit
    [    0.060915] Booting CPU 1
    [    0.119940] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
    [    0.119969] Brought up 2 CPUs
    [    0.119975] SMP: Total of 2 processors activated (6384.02 BogoMIPS).
    [    0.119978] CPU: All CPU(s) started in SVC mode.
    [    0.121764] VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 4
    [    0.121843] clocksource jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
    [    0.121875] pinctrl core: initialized pinctrl subsystem
    [    0.122216] NET: Registered protocol family 16
    [    0.122655] DMA: preallocated 256 KiB pool for atomic coherent allocations
    [    0.149929] cpuidle: using governor ladder
    [    0.152518] mvebu-pmsu: CPU hotplug support is currently broken on Armada 38x: disabling
    [    0.152527] mvebu-pmsu: CPU idle is currently broken on Armada 38x: disabling[    0.180892] Switched to clocksource armada_370_xp_clocksource
    [    0.181354] NET: Registered protocol family 2
    [    0.181626] TCP established hash table entries: 8192 (order: 3, 32768 bytes)
    [    0.181665] TCP bind hash table entries: 8192 (order: 4, 65536 bytes)
    [    0.181728] TCP: Hash tables configured (established 8192 bind 8192)
    [    0.181766] UDP hash table entries: 512 (order: 2, 16384 bytes)
    [    0.181790] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes)
    [    0.181897] NET: Registered protocol family 1
    [    0.202800] futex hash table entries: 512 (order: 3, 32768 bytes)
    [    0.203086] squashfs: version 4.0 (2009/01/31) Phillip Lougher
    [    0.203094] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
    [    0.203620] bounce: pool size: 64 pages
    [    0.203629] io scheduler noop registered
    [    0.203635] io scheduler deadline registered (default)
    [    0.204062] armada-38x-pinctrl f1018000.pinctrl: registered pinctrl driver
    [    0.204398] irq: Cannot allocate irq_descs @ IRQ48, assuming pre-allocated
    [    0.204557] irq: Cannot allocate irq_descs @ IRQ80, assuming pre-allocated
    [    0.204865] mvebu-pcie soc:pcie-controller: PCI host bridge to bus 0000:00
    [    0.204873] pci_bus 0000:00: root bus resource [io  0x1000-0xfffff]
    [    0.204878] pci_bus 0000:00: root bus resource [mem 0xe0000000-0xe7ffffff]
    [    0.204883] pci_bus 0000:00: root bus resource [bus 00-ff]
    [    0.205081] PCI: bus0: Fast back to back transfers disabled
    [    0.205087] pci 0000:00:02.0: bridge configuration invalid ([bus 00-00]), reconfiguring
    [    0.205094] pci 0000:00:03.0: bridge configuration invalid ([bus 00-00]), reconfiguring
    [    0.205147] PCI: bus1: Fast back to back transfers enabled
    [    0.205205] PCI: bus2: Fast back to back transfers enabled
    [    0.205227] pci 0000:00:02.0: PCI bridge to [bus 01]
    [    0.205235] pci 0000:00:03.0: PCI bridge to [bus 02]
    [    0.205319] mv_xor f1060800.xor: Marvell shared XOR driver
    [    0.240922] mv_xor f1060800.xor: Marvell XOR: ( xor cpy )
    [    0.280920] mv_xor f1060800.xor: Marvell XOR: ( xor cpy )
    [    0.280980] mv_xor f1060900.xor: Marvell shared XOR driver
    [    0.320931] mv_xor f1060900.xor: Marvell XOR: ( xor cpy )
    [    0.360921] mv_xor f1060900.xor: Marvell XOR: ( xor cpy )
    [    0.361040] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
    [    0.361326] console [ttyS0] disabled
    [    0.381355] f1012000.serial: ttyS0 at MMIO 0xf1012000 (irq = 23, base_baud = 15625000) is a 16550A
    [    0.965181] console [ttyS0] enabled
    [    0.988835] f1012100.serial: ttyS1 at MMIO 0xf1012100 (irq = 24, base_baud = 15625000) is a 16550A
    [    0.998710] libphy: Fixed MDIO Bus: probed
    [    1.002938] libphy: orion_mdio_bus: probed
    [    1.008077] mvneta f1030000.ethernet eth0: Using hardware mac address 00:50:43:11:03:0d
    [    1.016851] mvneta f1034000.ethernet eth1: Using random mac address fa:fb:df:f9:5e:cc
    [    1.025385] mvneta f1070000.ethernet eth2: Using hardware mac address 00:50:43:0b:03:0d
    [    1.033899] NET: Registered protocol family 10
    [    1.038792] NET: Registered protocol family 17
    [    1.043270] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
    [    1.055917] 8021q: 802.1Q VLAN Support v1.8
    [    1.060127] Registering SWP/SWPB emulation handler
    [    1.065542] hctosys: unable to open rtc device (rtc0)
    [    1.073694] Freeing unused kernel memory: 4592K (c0496000 - c0912000)
    [    1.084136] init: Console is alive
    [    1.092498] usbcore: registered new interface driver usbfs
    [    1.098025] usbcore: registered new interface driver hub
    [    1.103400] usbcore: registered new device driver usb
    [    1.110084] SCSI subsystem initialized
    [    1.114896] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
    [    1.121693] ehci-platform: EHCI generic platform driver
    [    1.127263] ehci-orion: EHCI orion driver
    [    1.131413] orion-ehci f1058000.usb: EHCI Host Controller
    [    1.136834] orion-ehci f1058000.usb: new USB bus registered, assigned bus number 1
    [    1.144492] orion-ehci f1058000.usb: irq 40, io mem 0xf1058000
    [    1.160910] orion-ehci f1058000.usb: USB 2.0 started, EHCI 1.00
    [    1.167093] hub 1-0:1.0: USB hub found
    [    1.170862] hub 1-0:1.0: 1 port detected
    [    1.179139] xhci-hcd f10f0000.usb3: xHCI Host Controller
    [    1.184488] xhci-hcd f10f0000.usb3: new USB bus registered, assigned bus number 2
    [    1.192080] xhci-hcd f10f0000.usb3: hcc params 0x0a000990 hci version 0x100 quirks 0x00010010
    [    1.200644] xhci-hcd f10f0000.usb3: irq 46, io mem 0xf10f0000
    [    1.206652] hub 2-0:1.0: USB hub found
    [    1.210421] hub 2-0:1.0: 1 port detected
    [    1.214450] xhci-hcd f10f0000.usb3: xHCI Host Controller
    [    1.219779] xhci-hcd f10f0000.usb3: new USB bus registered, assigned bus number 3
    [    1.227335] usb usb3: We dont know the algorithms for LPM for this host, disabling LPM.
    [    1.235651] hub 3-0:1.0: USB hub found
    [    1.239417] hub 3-0:1.0: 1 port detected
    [    1.243492] xhci-hcd f10f8000.usb3: xHCI Host Controller
    [    1.248823] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 4
    [    1.256412] xhci-hcd f10f8000.usb3: hcc params 0x0a000990 hci version 0x100 quirks 0x00010010
    [    1.264975] xhci-hcd f10f8000.usb3: irq 47, io mem 0xf10f8000
    [    1.270975] hub 4-0:1.0: USB hub found
    [    1.274743] hub 4-0:1.0: 1 port detected
    [    1.278759] xhci-hcd f10f8000.usb3: xHCI Host Controller
    [    1.284092] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 5
    [    1.291620] usb usb5: We dont know the algorithms for LPM for this host, disabling LPM.
    [    1.299925] hub 5-0:1.0: USB hub found
    [    1.303697] hub 5-0:1.0: 1 port detected
    [    1.308557] usbcore: registered new interface driver usb-storage
    [    2.087795] init: - preinit -
    Press the [f] key and hit [enter] to enter failsafe mode
    Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
    [    5.131673] procd: - early -
    [    5.706452] procd: - ubus -
    [    6.710759] random: ubusd urandom read with 0 bits of entropy available
    [    6.717649] procd: - init -
    Please press Enter to activate this console.
    [    6.863841] ip6_tables: (C) 2000-2006 Netfilter Core Team
    [    6.871496] i2c /dev entries driver
    [    6.876831] ip_tables: (C) 2000-2006 Netfilter Core Team
    [    6.884031] nf_conntrack version 0.5.0 (16162 buckets, 64648 max)
    [    7.074295] xt_time: kernel timezone is -0000
    [    7.091235] PPP generic driver version 2.4.2
    [    7.095849] NET: Registered protocol family 24
    [    8.723584] device eth0 entered promiscuous mode
    [    8.728953] br-lan: port 1(eth0) entered forwarding state
    [    8.734388] br-lan: port 1(eth0) entered forwarding state
    [    8.751499] device eth1 entered promiscuous mode
    [    8.756174] br-lan: port 2(eth1) entered forwarding state
    [    8.761615] br-lan: port 2(eth1) entered forwarding state
    [    8.781126] IPv6: ADDRCONF(NETDEV_UP): eth2: link is not ready
    [    9.720913] br-lan: port 1(eth0) entered disabled state
    [    9.726221] br-lan: port 2(eth1) entered disabled state
    [   10.730912] mvneta f1030000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
    [   10.738772] br-lan: port 1(eth0) entered forwarding state
    [   10.744197] br-lan: port 1(eth0) entered forwarding state
    [   10.750020] mvneta f1034000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
    [   10.757942] br-lan: port 2(eth1) entered forwarding state
    [   10.763366] br-lan: port 2(eth1) entered forwarding state
    [   12.740888] br-lan: port 1(eth0) entered forwarding state
    [   12.760887] br-lan: port 2(eth1) entered forwarding state
 
 
    BusyBox v1.24.1 () built-in shell (ash)
 
      _______                     ________        __
     |       |.-----.-----.-----.|  |  |  |.----.|  |_
     |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
     |_______||   __|_____|__|__||________||__|  |____|
              |__| W I R E L E S S   F R E E D O M
     -----------------------------------------------------
     DESIGNATED DRIVER (Bleeding Edge, r48735)
     -----------------------------------------------------
      * 2 oz. Orange Juice         Combine all juices in a
      * 2 oz. Pineapple Juice      tall glass filled with
      * 2 oz. Grapefruit Juice     ice, stir well.
      * 2 oz. Cranberry Juice
     -----------------------------------------------------
    root@OpenWrt:/#

r49395 (Compiled 2018.01.27 | Xue Liu’s OpenWrt Repo)

   Marvell>> tftpboot openwrt-mvebu-armada-388-clearfog-initramfs
   Using egiga1 device
   TFTP from server 10.4.50.38; our IP address is 10.4.50.170
   Filename 'openwrt-mvebu-armada-388-clearfog-initramfs'.
   Load address: 0x2000000
   Loading: #################################################################
   	  #################################################################
   	  #################################################################
   	  2.4 MiB/s
   done
   Bytes transferred = 3920894 (3bd3fe hex)
   Marvell>> bootm
   ## Booting kernel from Legacy Image at 02000000 ...
      Image Name:   ARM OpenWrt Linux-4.1.23
      Created:      2016-06-30   5:39:05 UTC
      Image Type:   ARM Linux Kernel Image (uncompressed)
      Data Size:    3920830 Bytes = 3.7 MiB
      Load Address: 00008000
      Entry Point:  00008000
      Verifying Checksum ... OK
      Loading Kernel Image ... OK
   OK
 
   Starting kernel ...
 
   [    0.000000] Booting Linux on physical CPU 0x0
   [    0.000000] Linux version 4.1.23 (jw@u17) (gcc version 5.3.0 (OpenWrt GCC 5.3.0 r49395) ) #2 SMP Sat Jan 27 05:52:51 UTC 2018
   [    0.000000] CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=10c5387d
   [    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
   [    0.000000] Machine model: SolidRun Clearfog A1
   [    0.000000] Memory policy: Data cache writealloc
   [    0.000000] PERCPU: Embedded 10 pages/cpu @eefd1000 s11776 r8192 d20992 u40960
   [    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 260624
   [    0.000000] Kernel command line: 
   [    0.000000] PID hash table entries: 4096 (order: 2, 16384 bytes)
   [    0.000000] Dentry cache hash table entries: 131072 (order: 7, 524288 bytes)
   [    0.000000] Inode-cache hash table entries: 65536 (order: 6, 262144 bytes)
   [    0.000000] Memory: 1026868K/1048576K available (3435K kernel code, 138K rwdata, 1228K rodata, 7544K init, 168K bss, 21708K reserved, 0K cma-reserved, 270336K highmem)
   [    0.000000] Virtual kernel memory layout:
   [    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
   [    0.000000]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
   [    0.000000]     vmalloc : 0xf0000000 - 0xff000000   ( 240 MB)
   [    0.000000]     lowmem  : 0xc0000000 - 0xef800000   ( 760 MB)
   [    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
   [    0.000000]     modules : 0xbf000000 - 0xbfe00000   (  14 MB)
   [    0.000000]       .text : 0xc0008000 - 0xc0495e9c   (4664 kB)
   [    0.000000]       .init : 0xc0496000 - 0xc0bf4000   (7544 kB)
   [    0.000000]       .data : 0xc0bf4000 - 0xc0c1694c   ( 139 kB)
   [    0.000000]        .bss : 0xc0c1694c - 0xc0c40a24   ( 169 kB)
   [    0.000000] Hierarchical RCU implementation.
   [    0.000000] 	RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
   [    0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
   [    0.000000] NR_IRQS:16 nr_irqs:16 16
   [    0.000000] mvebu_mbus: [Firmware Warn]: deprecated mbus-mvebu Device Tree, suspend/resume will not work
   [    0.000000] L2C-310 enabling early BRESP for Cortex-A9
   [    0.000000] L2C-310 full line of zeros enabled for Cortex-A9
   [    0.000000] L2C-310 dynamic clock gating enabled, standby mode enabled
   [    0.000000] L2C-310 Coherent cache controller enabled, 16 ways, 1024 kB
   [    0.000000] L2C-310 Coherent: CACHE_ID 0x410054c9, AUX_CTRL 0x46070001
   [    0.000006] sched_clock: 32 bits at 25MHz, resolution 40ns, wraps every 85899345900ns
   [    0.000016] clocksource armada_370_xp_clocksource: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 76450417870 ns
   [    0.000156] Calibrating delay loop... 3188.32 BogoMIPS (lpj=15941632)
   [    0.059921] pid_max: default: 32768 minimum: 301
   [    0.059975] Mount-cache hash table entries: 2048 (order: 1, 8192 bytes)
   [    0.059980] Mountpoint-cache hash table entries: 2048 (order: 1, 8192 bytes)
   [    0.060187] CPU: Testing write buffer coherency: ok
   [    0.060287] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
   [    0.060312] Setting up static identity map for 0x8280 - 0x82d8
   [    0.060399] mvebu-soc-id: MVEBU SoC ID=0x6828, Rev=0x4
   [    0.060486] mvebu-pmsu: Initializing Power Management Service Unit
   [    0.060919] Booting CPU 1
   [    0.119939] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
   [    0.119968] Brought up 2 CPUs
   [    0.119974] SMP: Total of 2 processors activated (6384.02 BogoMIPS).
   [    0.119977] CPU: All CPU(s) started in SVC mode.
   [    0.121712] VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 4
   [    0.121790] clocksource jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
   [    0.121823] pinctrl core: initialized pinctrl subsystem
   [    0.122159] NET: Registered protocol family 16
   [    0.122595] DMA: preallocated 256 KiB pool for atomic coherent allocations
   [    0.149921] cpuidle: using governor ladder
   [    0.152478] mvebu-pmsu: CPU hotplug support is currently broken on Armada 38x: disabling
   [    0.152487] mvebu-pmsu: CPU idle is currently broken on Armada 38x: disabling[    0.180937] Switched to clocksource armada_370_xp_clocksource
   [    0.181394] NET: Registered protocol family 2
   [    0.181808] TCP established hash table entries: 8192 (order: 3, 32768 bytes)
   [    0.181846] TCP bind hash table entries: 8192 (order: 4, 65536 bytes)
   [    0.181909] TCP: Hash tables configured (established 8192 bind 8192)
   [    0.181945] UDP hash table entries: 512 (order: 2, 16384 bytes)
   [    0.181969] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes)
   [    0.182064] NET: Registered protocol family 1
   [    0.211472] futex hash table entries: 512 (order: 3, 32768 bytes)
   [    0.211907] squashfs: version 4.0 (2009/01/31) Phillip Lougher
   [    0.211916] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
   [    0.212261] bounce: pool size: 64 pages
   [    0.212269] io scheduler noop registered
   [    0.212276] io scheduler deadline registered (default)
   [    0.212708] armada-38x-pinctrl f1018000.pinctrl: registered pinctrl driver
   [    0.213051] irq: Cannot allocate irq_descs @ IRQ48, assuming pre-allocated
   [    0.213206] irq: Cannot allocate irq_descs @ IRQ80, assuming pre-allocated
   [    0.213509] mvebu-pcie soc:pcie-controller: PCI host bridge to bus 0000:00
   [    0.213517] pci_bus 0000:00: root bus resource [io  0x1000-0xfffff]
   [    0.213525] pci_bus 0000:00: root bus resource [mem 0xe0000000-0xe7ffffff]
   [    0.213531] pci_bus 0000:00: root bus resource [bus 00-ff]
   [    0.213721] PCI: bus0: Fast back to back transfers disabled
   [    0.213728] pci 0000:00:02.0: bridge configuration invalid ([bus 00-00]), reconfiguring
   [    0.213734] pci 0000:00:03.0: bridge configuration invalid ([bus 00-00]), reconfiguring
   [    0.213786] PCI: bus1: Fast back to back transfers enabled
   [    0.213847] PCI: bus2: Fast back to back transfers enabled
   [    0.213868] pci 0000:00:02.0: PCI bridge to [bus 01]
   [    0.213876] pci 0000:00:03.0: PCI bridge to [bus 02]
   [    0.213955] mv_xor f1060800.xor: Marvell shared XOR driver
   [    0.251038] mv_xor f1060800.xor: Marvell XOR: ( xor cpy )
   [    0.290970] mv_xor f1060800.xor: Marvell XOR: ( xor cpy )
   [    0.291030] mv_xor f1060900.xor: Marvell shared XOR driver
   [    0.330964] mv_xor f1060900.xor: Marvell XOR: ( xor cpy )
   [    0.370964] mv_xor f1060900.xor: Marvell XOR: ( xor cpy )
   [    0.371073] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
   [    0.371364] console [ttyS0] disabled
   [    0.391394] f1012000.serial: ttyS0 at MMIO 0xf1012000 (irq = 23, base_baud = 15625000) is a 16550A
   [    0.974982] console [ttyS0] enabled
   [    0.998634] f1012100.serial: ttyS1 at MMIO 0xf1012100 (irq = 24, base_baud = 15625000) is a 16550A
   [    1.008502] libphy: Fixed MDIO Bus: probed
   [    1.012730] libphy: orion_mdio_bus: probed
   [    1.017876] mvneta f1030000.ethernet eth0: Using hardware mac address 00:50:43:5a:07:04
   [    1.026640] mvneta f1034000.ethernet eth1: Using random mac address d6:15:0c:61:68:d9
   [    1.035175] mvneta f1070000.ethernet eth2: Using hardware mac address 00:50:43:0a:07:04
   [    1.043675] NET: Registered protocol family 10
   [    1.048569] NET: Registered protocol family 17
   [    1.053061] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
   [    1.065708] 8021q: 802.1Q VLAN Support v1.8
   [    1.069920] Registering SWP/SWPB emulation handler
   [    1.075317] hctosys: unable to open rtc device (rtc0)
   [    1.084968] Freeing unused kernel memory: 7544K (c0496000 - c0bf4000)
   [    1.095444] init: Console is alive
   [    1.105049] usbcore: registered new interface driver usbfs
   [    1.110581] usbcore: registered new interface driver hub
   [    1.115954] usbcore: registered new device driver usb
   [    1.126902] SCSI subsystem initialized
   [    1.131749] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
   [    1.138544] ehci-platform: EHCI generic platform driver
   [    1.144141] ehci-orion: EHCI orion driver
   [    1.148257] orion-ehci f1058000.usb: EHCI Host Controller
   [    1.153689] orion-ehci f1058000.usb: new USB bus registered, assigned bus number 1
   [    1.161343] orion-ehci f1058000.usb: irq 40, io mem 0xf1058000
   [    1.180940] orion-ehci f1058000.usb: USB 2.0 started, EHCI 1.00
   [    1.187137] hub 1-0:1.0: USB hub found
   [    1.190909] hub 1-0:1.0: 1 port detected
   [    1.199341] xhci-hcd f10f0000.usb3: xHCI Host Controller
   [    1.204699] xhci-hcd f10f0000.usb3: new USB bus registered, assigned bus number 2
   [    1.212291] xhci-hcd f10f0000.usb3: hcc params 0x0a000990 hci version 0x100 quirks 0x00010010
   [    1.220854] xhci-hcd f10f0000.usb3: irq 46, io mem 0xf10f0000
   [    1.226864] hub 2-0:1.0: USB hub found
   [    1.230634] hub 2-0:1.0: 1 port detected
   [    1.234670] xhci-hcd f10f0000.usb3: xHCI Host Controller
   [    1.239997] xhci-hcd f10f0000.usb3: new USB bus registered, assigned bus number 3
   [    1.247530] usb usb3: We dont know the algorithms for LPM for this host, disabling LPM.
   [    1.255845] hub 3-0:1.0: USB hub found
   [    1.259613] hub 3-0:1.0: 1 port detected
   [    1.263710] xhci-hcd f10f8000.usb3: xHCI Host Controller
   [    1.269041] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 4
   [    1.276630] xhci-hcd f10f8000.usb3: hcc params 0x0a000990 hci version 0x100 quirks 0x00010010
   [    1.285195] xhci-hcd f10f8000.usb3: irq 47, io mem 0xf10f8000
   [    1.291190] hub 4-0:1.0: USB hub found
   [    1.294958] hub 4-0:1.0: 1 port detected
   [    1.298974] xhci-hcd f10f8000.usb3: xHCI Host Controller
   [    1.304309] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 5
   [    1.311842] usb usb5: We dont know the algorithms for LPM for this host, disabling LPM.
   [    1.320147] hub 5-0:1.0: USB hub found
   [    1.323921] hub 5-0:1.0: 1 port detected
   [    1.329839] sdhci: Secure Digital Host Controller Interface driver
   [    1.336054] sdhci: Copyright(c) Pierre Ossman
   [    1.340684] sdhci-pltfm: SDHCI platform and OF driver helper
   [    1.347178] usbcore: registered new interface driver usb-storage
   [    1.360572] init: - preinit -
   Press the [f] key and hit [enter] to enter failsafe mode
   Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
   [    4.406424] procd: - early -
   [    4.965685] procd: - ubus -
   [    5.019086] random: ubusd urandom read with 0 bits of entropy available
   [    5.025976] procd: - init -
   Please press Enter to activate this console.
   [    5.196134] device-mapper: ioctl: 4.31.0-ioctl (2015-3-12) initialised: dm-devel@redhat.com
   [    5.207844] ip6_tables: (C) 2000-2006 Netfilter Core Team
   [    5.215742] i2c /dev entries driver
   [    5.221208] ip_tables: (C) 2000-2006 Netfilter Core Team
   [    5.228628] nf_conntrack version 0.5.0 (16162 buckets, 64648 max)
   [    5.414558] xt_time: kernel timezone is -0000
   [    5.431616] PPP generic driver version 2.4.2
   [    5.436259] NET: Registered protocol family 24
   [    7.114973] device eth0 entered promiscuous mode
   [    7.122099] br-lan: port 1(eth0) entered forwarding state
   [    7.127527] br-lan: port 1(eth0) entered forwarding state
   [    7.148077] device eth1 entered promiscuous mode
   [    7.152853] br-lan: port 2(eth1) entered forwarding state
   [    7.158270] br-lan: port 2(eth1) entered forwarding state
   [    7.173015] IPv6: ADDRCONF(NETDEV_UP): eth2: link is not ready
   [    8.110954] br-lan: port 1(eth0) entered disabled state
   [    8.116262] br-lan: port 2(eth1) entered disabled state
   [    9.120956] mvneta f1030000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
   [    9.128814] br-lan: port 1(eth0) entered forwarding state
   [    9.134240] br-lan: port 1(eth0) entered forwarding state
   [    9.140957] mvneta f1034000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
   [    9.148813] br-lan: port 2(eth1) entered forwarding state
   [    9.154235] br-lan: port 2(eth1) entered forwarding state
   [   11.130932] br-lan: port 1(eth0) entered forwarding state
   [   11.150930] br-lan: port 2(eth1) entered forwarding state
 
   BusyBox v1.24.2 () built-in shell (ash)
   Enter 'help' for a list of built-in commands.
      _______                     ________        __
    |       |.-----.-----.-----.|  |  |  |.----.|  |_
    |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
    |_______||   __|_____|__|__||________||__|  |____|
             |__| W I R E L E S S   F R E E D O M
    -----------------------------------------------------
    DESIGNATED DRIVER (Bleeding Edge, r49395)
    -----------------------------------------------------
     * 2 oz. Orange Juice         Combine all juices in a
     * 2 oz. Pineapple Juice      tall glass filled with
     * 2 oz. Grapefruit Juice     ice, stir well.
     * 2 oz. Cranberry Juice
    -----------------------------------------------------
   root@OpenWrt:/#

Device: Linksys E1700 (dual antenna, 2.4Ghz only)
Techdata: https://openwrt.org/toh/hwdata/linksys/linksys_e1700 LEDE firmware installed: lede-17.01.4-ramips-mt7620-e1700-squashfs-factory.bin
LEDE supported since commit: https://git.lede-project.org/?p=source.git;a=commit;h=d738d22bf8303bd84e925b2b0c90793a1f3d89e5 LEDE supported since rel: 17.01.0
LEDE supported current rel: 17.01.4

Good: Openwrt/LEDE installs fine and generally runs well. Linux stable. LAN stable. LuCI works. SSH works. Able to access DSL modem web interface on WAN side through LUCI interface configuration, etc.

Bad: Wireless radio is unstable and unusable.
Symptoms observed:

1. jamming across all WiFi channels
    - other nearby WiFi networks on different channels are disrupted (e.g. channels 4 and 12)
    - connection is lost to these other wireless networks from multiple devices and test pings show there is packet loss. (This happens after booting the Linksys E1700 LEDE device with wireless enabled)
2. difficulty connecting to a new LEDE wireless network
    - seemingly placement of laptop 'not too close' and 'not too far' is required plus several attempts to successfully join the network
    - once connected, ping tests show some packet loss, intermittent variable round trip time (30ms-2400ms) and regular network drops (within a few minutes).

Test environment:

1. Existing, working Linksys WAG200G router in home with an existing SSID and DSL connection
2. Client: Ubuntu laptop (Asus Zenbook UX310U)
3. Client: Android phone (Pixel)
4. WiFi scanner and ‘nmcli d wifi’ are used to monitor wireless networks

Tested with settings:

1. Linksys E1700 (with OpenWRT/LEDE installed) wireless network on channel 4
2. Existing router (Linksys WAG200G) wireless network on channel 12
3. WLAN security mode: WPA2 Personal, PSK

Steps to reproduce:

1. Have a Linksys E1700 device for testing and some other device with an existing wireless network on which a test laptop and phone are connected
2. Upgrade firmware on new Linksys E1700 device to lede-17.01.4-ramips-mt7620-e1700-squashfs-factory.bin using factory GUI (from original firmware version 1.0.0: FW_E1700_v1.0.00.081_20131220.bin).
3. Boot into LEDE. Perform initial setup. Configure wireless interface on channel 4 (or any channel other than the existing), security mode: WPA2 PSK, visible SSID
4. Enable Wireless
5. Note that soon after, all client devices in proximity become disconnected from the unrelated wireless network operating on channel 12 - this is the 'jamming effect' observed
6. Try to connect the test laptop to the LEDE wireless network. Joining is difficult/unreliable (regardless of distance of the router from the laptop)
7. When connectivity is established, ping the router from the test laptop. This will show some dropped packets and intermittent huge variation on round trip times  (30ms-2400ms). Network will drop regularly and hard to get back on.
8. Repeat test with LEDE Linksys E1700 device on same channel, different channels, busy and free channels, etc. - makes no difference to outcome.
9. Disable Wireless.  (Jamming effect seems to remain until power off but can't be 100% sure.)
10. Power off the Linksys. The jamming effect disappears and the adversely affected devices reconnect to their original other network(s).

Steps taken to isolate fault:

1. Restore firmware to Linksys factory default firmware (1.0.0).
2. Create the same test wireless network and connect the test laptop to it.
3. Ping test. This shows 100%, no packet loss, stable low round trip time.
4. Connect the test laptop to the existing wireless network. Ping test. 100%. No side effects can be observed on other networks or client devices.
5. Repeat LEDE router test from various distances.

This seems to rule out a hardware fault. Seems to be a radio fault.

There are two antennae on the E1700. It is unclear to me how these interact or how they can be configured.

I would be grateful if somebody can offer an explanation/suspicion of cause for this as I have not seen this with a WiFi device before. If LEDE can be patched to fix this then I am happy to help conduct further diagnostics if someone is willing to look at this.

Flash map for Linksys E1700:

root@LEDE:~# cat /proc/mtd
dev: size erasesize name
mtd0: 00030000 00001000 “u-boot” mtd1: 00010000 00001000 “config” mtd2: 00010000 00001000 “factory” mtd3: 007b0000 00001000 “firmware” mtd4: 001286c8 00001000 “kernel” mtd5: 00687938 00001000 “rootfs” mtd6: 00458000 00001000 “rootfs_data”

When I used the Moto XT1085 to connect to my wireless, the XT1085 typically disconnected the wireless connection within one or two seconds after I got the IP address, and I got the syslog

Mon Feb 19 09:04:02 2018 daemon.info hostapd: wlan1: STA 38:a4:ed:db:3c:6c IEEE 802.11: authenticated
Mon Feb 19 09:04:02 2018 daemon.info hostapd: wlan1: STA 38:a4:ed:db:3c:6c IEEE 802.11: associated (aid 1)
Mon Feb 19 09:04:02 2018 daemon.notice hostapd: wlan1: AP-STA-CONNECTED 38:a4:ed:db:3c:6c
Mon Feb 19 09:04:02 2018 daemon.info dnsmasq-dhcp[1413]: DHCPDISCOVER(br-lan) 38:a4:ed:db:3c:6c
Mon Feb 19 09:04:02 2018 daemon.info dnsmasq-dhcp[1413]: DHCPOFFER(br-lan) 192.168.1.152 38:a4:ed:db:3c:6c
Mon Feb 19 09:04:02 2018 daemon.info dnsmasq-dhcp[1413]: DHCPREQUEST(br-lan) 192.168.1.152 38:a4:ed:db:3c:6c
Mon Feb 19 09:04:02 2018 daemon.info dnsmasq-dhcp[1413]: DHCPACK(br-lan) 192.168.1.152 38:a4:ed:db:3c:6c android-a222c0967a127f80
Mon Feb 19 09:04:05 2018 daemon.notice hostapd: wlan1: AP-STA-DISCONNECTED 38:a4:ed:db:3c:6c

This does not seem to have any useful information

So I try to use my moto x ghost to connect wireless, although also disconnected the wireless connection, but I got a different syslog

Mon Feb 19 09:18:32 2018 daemon.info hostapd: wlan1: STA f8:cf:c5:bc:7d:17 IEEE 802.11: disassociated
Mon Feb 19 09:18:33 2018 daemon.info hostapd: wlan1: STA f8:cf:c5:bc:7d:17 IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)
Mon Feb 19 09:18:34 2018 daemon.info hostapd: wlan1: STA f8:cf:c5:bc:7d:17 IEEE 802.11: authenticated
Mon Feb 19 09:18:34 2018 daemon.info hostapd: wlan1: STA f8:cf:c5:bc:7d:17 IEEE 802.11: associated (aid 1)
Mon Feb 19 09:18:34 2018 daemon.notice hostapd: wlan1: AP-STA-CONNECTED f8:cf:c5:bc:7d:17
Mon Feb 19 09:18:34 2018 daemon.info dnsmasq-dhcp[1413]: DHCPDISCOVER(br-lan) f8:cf:c5:bc:7d:17
Mon Feb 19 09:18:34 2018 daemon.info dnsmasq-dhcp[1413]: DHCPOFFER(br-lan) 192.168.1.150 f8:cf:c5:bc:7d:17
Mon Feb 19 09:18:34 2018 daemon.info dnsmasq-dhcp[1413]: DHCPREQUEST(br-lan) 192.168.1.150 f8:cf:c5:bc:7d:17
Mon Feb 19 09:18:34 2018 daemon.info dnsmasq-dhcp[1413]: DHCPACK(br-lan) 192.168.1.150 f8:cf:c5:bc:7d:17 android-e221edb7e67bd21f
Mon Feb 19 09:18:37 2018 daemon.notice hostapd: wlan1: AP-STA-DISCONNECTED f8:cf:c5:bc:7d:17

Mon Feb 19 09:18:33 2018 daemon.info hostapd: wlan1: STA f8:cf:c5:bc:7d:17 IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)

This looks interesting

I got the solution after google

uci set wireless.@wifi-iface[0].disassoc_low_ack=‘0’ && uci commit && reboot

After that I can use the XT1085 to connect wirelessly and get this syslog

Mon Feb 19 09:32:45 2018 daemon.info hostapd: wlan1: STA 44:80:eb:cb:e5:88 IEEE 802.11: authenticated
Mon Feb 19 09:32:46 2018 daemon.info hostapd: wlan1: STA 44:80:eb:cb:e5:88 IEEE 802.11: associated (aid 3)
Mon Feb 19 09:32:46 2018 daemon.notice hostapd: wlan1: AP-STA-CONNECTED 44:80:eb:cb:e5:88
Mon Feb 19 09:32:49 2018 daemon.info dnsmasq-dhcp[1413]: DHCPDISCOVER(br-lan) 44:80:eb:cb:e5:88
Mon Feb 19 09:32:49 2018 daemon.info dnsmasq-dhcp[1413]: DHCPOFFER(br-lan) 192.168.1.115 44:80:eb:cb:e5:88
Mon Feb 19 09:32:49 2018 daemon.info dnsmasq-dhcp[1413]: DHCPREQUEST(br-lan) 192.168.1.115 44:80:eb:cb:e5:88
Mon Feb 19 09:32:49 2018 daemon.info dnsmasq-dhcp[1413]: DHCPACK(br-lan) 192.168.1.115 44:80:eb:cb:e5:88 android-8e596bd7d2f79888

This really works, but does that happen on other MT7620 routers?

Supply the following if possible:
- Device problem occurs on

  Linksys 3200ACM

- Software versions of OpenWrt/LEDE release, packages, etc.

   OpenWrt SNAPSHOT r6365-45fdb12 / LuCI Master (git-18.061.42275-852ec6e)

   Additional Packages:
   openssh-sftp-server    7.6p1-1
   nginx                  1.12.2-1

- Steps to reproduce

   Embedded platform such ESP8266, Wireless Cameras are unable to connect 
   to 2.4Ghz radio1 on 3200ACM with WPA2-CCMP.

   DHCP does not seem to discover these devices although radio1 (mwlwifi) successfully
   authenticates the devices.

  Clients: 4 x ESP8266 (SonOff Switches, FluxLED, etc.), Unbranded Wireless Camera

1. DHCP Configuration

    config dnsmasq
        option domainneeded '1'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.auto'
        option nonwildcard '1'
        option localservice '1'

    config dhcp 'lan'
        option interface 'lan'
        option start '100'
        option limit '150'
        option leasetime '12h'
        list dhcp_option '6,8.8.8.8,8.8.4.4'

    config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

    config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

    config host
        option name 'VelopNode1'
        option dns '1'
        option mac '58:ef:xx:xx:xx:xx'
        option ip '192.168.1.151'
        option leasetime 'infinite'

    config host
        option name 'Hikam-0505'
        option dns '1'
        option mac '88:83:5d:xx:xx:xx'
        option ip '192.168.1.200'
        option leasetime 'infinite'

    config host
        option name 'ESP_C0F513'
        option dns '1'
        option mac 'dc:4f:22:xx:xx:xx'
        option ip '192.168.1.235'
        option leasetime 'infinite'

1. 2.4Ghz radio1 configuration:

    wireless.radio1=wifi-device
    wireless.radio1.type='mac80211'
    wireless.radio1.hwmode='11g'
    wireless.radio1.path='soc/soc:pcie/pci0000:00/0000:00:02.0/0000:02:00.0'
    wireless.radio1.country='US'
    wireless.radio1.channel='11'
    wireless.radio1.htmode='HT20'
    wireless.radio1.legacy_rates='1'
    wireless.radio1.txpower='30'
    root@openwrt:~# uci show wireless.default_radio1
    wireless.default_radio1=wifi-iface
    wireless.default_radio1.device='radio1'
    wireless.default_radio1.network='lan'
    wireless.default_radio1.ssid='SSID'
    wireless.default_radio1.key='PASSWORD'
    wireless.default_radio1.mode='ap'
    wireless.default_radio1.encryption='psk2'

- Logs:

    Sun Mar  4 04:07:41 2018 daemon.notice hostapd: wlan1: AP-STA-CONNECTED dc:4f:22:xx:xx:xx
    Sun Mar  4 04:07:41 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx WPA: pairwise key handshake completed (RSN)
    Sun Mar  4 04:07:50 2018 authpriv.info dropbear[3371]: Child connection from 192.168.1.151:57119
    Sun Mar  4 04:08:07 2018 daemon.notice hostapd: wlan1: AP-STA-DISCONNECTED dc:4f:22:xx:xx:xx
    Sun Mar  4 04:08:07 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: disassociated
    Sun Mar  4 04:08:07 2018 kern.debug kernel: [  105.684705] ieee80211 phy1: staid 3 deleted
    Sun Mar  4 04:08:08 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)
    Sun Mar  4 04:08:10 2018 kern.debug kernel: [  107.923936] ieee80211 phy1: staid 2 deleted
    Sun Mar  4 04:08:10 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: associated (aid 2)
    Sun Mar  4 04:08:10 2018 daemon.notice hostapd: wlan1: AP-STA-CONNECTED dc:4f:22:xx:xx:xx
    Sun Mar  4 04:08:10 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx WPA: pairwise key handshake completed (RSN)
    Sun Mar  4 04:08:13 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: associated (aid 3)
    Sun Mar  4 04:08:13 2018 daemon.notice hostapd: wlan1: AP-STA-CONNECTED dc:4f:22:xx:xx:xx
    Sun Mar  4 04:08:13 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx WPA: pairwise key handshake completed (RSN)
    Sun Mar  4 04:08:26 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: authenticated
    Sun Mar  4 04:08:26 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: authenticated
    Sun Mar  4 04:08:26 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: authenticated
    Sun Mar  4 04:08:26 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: authenticated
    Sun Mar  4 04:08:44 2018 kern.debug kernel: [  141.932637] ieee80211 phy1: staid 2 deleted
    Sun Mar  4 04:08:44 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: associated (aid 2)
    Sun Mar  4 04:08:44 2018 daemon.notice hostapd: wlan1: AP-STA-CONNECTED dc:4f:22:xx:xx:xx
    Sun Mar  4 04:08:44 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx WPA: pairwise key handshake completed (RSN)
    Sun Mar  4 04:08:44 2018 kern.debug kernel: [  142.629431] ieee80211 phy1: staid 3 deleted
    Sun Mar  4 04:08:48 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: associated (aid 3)
    Sun Mar  4 04:08:48 2018 daemon.notice hostapd: wlan1: AP-STA-CONNECTED dc:4f:22:xx:xx:xx
    Sun Mar  4 04:08:48 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx WPA: pairwise key handshake completed (RSN)
    Sun Mar  4 04:09:22 2018 kern.debug kernel: [  180.723186] ieee80211 phy1: staid 3 deleted
    Sun Mar  4 04:09:22 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: associated (aid 3)
    Sun Mar  4 04:09:23 2018 kern.debug kernel: [  181.044324] ieee80211 phy1: staid 2 deleted
    Sun Mar  4 04:09:23 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: associated (aid 2)
    Sun Mar  4 04:09:23 2018 daemon.notice hostapd: wlan1: AP-STA-CONNECTED dc:4f:22:xx:xx:xx
    Sun Mar  4 04:09:23 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx WPA: pairwise key handshake completed (RSN)
    Sun Mar  4 04:09:26 2018 kern.debug kernel: [  184.838938] ieee80211 phy1: staid 3 deleted
    Sun Mar  4 04:09:26 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: associated (aid 3)
    Sun Mar  4 04:09:28 2018 daemon.notice hostapd: wlan1: AP-STA-CONNECTED dc:4f:22:xx:xx:xx
    Sun Mar  4 04:09:28 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx WPA: pairwise key handshake completed (RSN)
    Sun Mar  4 04:09:34 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: authenticated
    Sun Mar  4 04:09:34 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: authenticated
    Sun Mar  4 04:09:34 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: authenticated
    Sun Mar  4 04:09:34 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: authenticated
    Sun Mar  4 04:09:34 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: authenticated
    Sun Mar  4 04:09:34 2018 kern.debug kernel: [  191.989466] ieee80211 phy1: staid 3 deleted
    Sun Mar  4 04:09:34 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: authenticated
    Sun Mar  4 04:10:06 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: associated (aid 3)
    Sun Mar  4 04:10:06 2018 daemon.notice hostapd: wlan1: AP-STA-CONNECTED dc:4f:22:xx:xx:xx
    Sun Mar  4 04:10:06 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx WPA: pairwise key handshake completed (RSN)
    Sun Mar  4 04:10:07 2018 kern.debug kernel: [  225.251038] ieee80211 phy1: staid 2 deleted
    Sun Mar  4 04:10:07 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx IEEE 802.11: associated (aid 2)
    Sun Mar  4 04:10:07 2018 daemon.notice hostapd: wlan1: AP-STA-CONNECTED dc:4f:22:xx:xx:xx
    Sun Mar  4 04:10:07 2018 daemon.info hostapd: wlan1: STA dc:4f:22:xx:xx:xx WPA: pairwise key handshake completed (RSN)

Note: These clients are able to join my alternative access point (Velop Nodes) on same frequency and encryption. They are also

  able to join on factory image(FW_WRT3200ACM_1.0.6.186168_prod) radio1 access point and as well as radio2 in openwrt stipulated build.

More info: https://github.com/kaloz/mwlwifi/issues/278

Supply the following if possible:
- Device problem occurs on
- Software versions of OpenWrt/LEDE release, packages, etc.
- Steps to reproduce

- Device problem occurs on
Xiaomi mi router 3G (R3G)

- Software versions of OpenWrt/LEDE release, packages, etc.
Latest trunk (r6893-bfbdeeb) custom build

- Steps to reproduce
Did not notice there is a pattern here.

- The issue
The kernel crash causes the router to reboot. Here are two traces I was able to catch

May 13 07:24:52 router kernel: [82948.434471] CPU 1 Unable to handle kernel paging request at virtual address 07407800, epc == 80136a70, ra == 8013694c
May 13 07:24:52 router kernel: [82948.445103] Oops[#1]:
May 13 07:24:52 router kernel: [82948.447387] CPU: 1 PID: 1977 Comm: kworker/u8:1 Not tainted 4.14.37 #0
May 13 07:24:52 router kernel: [82948.453909] Workqueue: writeback wb_workfn (flush-8:0)
May 13 07:24:52 router kernel: [82948.459046] task: 8ff3ddc0 task.stack: 8dd62000
May 13 07:24:52 router kernel: [82948.463565] $ 0 : 00000000 00000001 00000000 812286b0
May 13 07:24:52 router kernel: [82948.468800] $ 4 : 805aa44c 00000001 00000001 07407800
May 13 07:24:52 router kernel: [82948.474019] $ 8 : 000facb3 000facb2 00000002 00064000
May 13 07:24:52 router kernel: [82948.479248] $12 : 00000009 0004001a fffeffff 00001000
May 13 07:24:52 router kernel: [82948.484473] $16 : 8fc02c00 000001b8 01011200 8022b6f0
May 13 07:24:52 router kernel: [82948.489695] $20 : 8ebb0000 8006a664 8e56d81c 01400000
May 13 07:24:52 router kernel: [82948.494913] $24 : 81196320 00000000
May 13 07:24:52 router kernel: [82948.500133] $28 : 8dd62000 8dd63950 8fd77d40 8013694c
May 13 07:24:52 router kernel: [82948.505351] Hi : 00000000
May 13 07:24:52 router kernel: [82948.508214] Lo : 00840480
May 13 07:24:52 router kernel: [82948.511113] epc : 80136a70 kmalloc+0x1f8/0x2ec
May 13 07:24:52 router kernel: [82948.515887] ra : 8013694c kmalloc+0xd4/0x2ec
May 13 07:24:52 router kernel: [82948.520568] Status: 11007c03#011KERNEL EXL IE May 13 07:24:52 router kernel: [82948.524750] Cause : 40800008 (ExcCode 02)
May 13 07:24:52 router kernel: [82948.528740] BadVA : 07407800
May 13 07:24:52 router kernel: [82948.531605] PrId : 0001992f (MIPS 1004Kc)
May 13 07:24:52 router kernel: [82948.535679] Modules linked in: pppoe ppp_async pppox ppp_generic nf_conntrack_ipv6 mt76x2e mt7603e mt76 mac80211 iptable_nat ipt_REJECT ipt_MASQUERADE cfg80211 cdc_ether xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_recent xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_HL xt_FLOWOFFLOAD xt_DSCP xt_CLASSIFY usbnet slhc nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack libcrc32c iptable_mangle iptable_filter ipt_ECN ip_tables crc_ccitt compat ledtrig_usbport xt_set ip_set_list_set ip_set_hash_netiface ip_set_hash_netport
May 13 07:24:52 router kernel: [82948.606444] ip_set_hash_netnet ip_set_hash_net ip_set_hash_netportnet ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables x_tables vfat fat nls_utf8 nls_iso8859_1 nls_cp437 usb_storage leds_gpio xhci_mtk xhci_plat_hcd xhci_pci xhci_hcd sd_mod scsi_mod gpio_button_hotplug ext4 jbd2 mbcache usbcore nls_base usb_common mii crc32c_generic
May 13 07:24:52 router kernel: [82948.655996] Process kworker/u8:1 (pid: 1977, threadinfo=8dd62000, task=8ff3ddc0, tls=00000000)
May 13 07:24:52 router kernel: [82948.664578] Stack : 01011200 00400000 8006a664 8f0c719c 00000001 00000000 8fd33300 01011200
May 13 07:24:52 router kernel: [82948.672925] 8fe74850 01011200 00000001 00400000 8006a664 8022b6f0 8fe74850 01011200
May 13 07:24:52 router kernel: [82948.681267] 01411200 8fdf9e00 01011200 01411200 8e56d800 800ecd30 8fe74850 01011200
May 13 07:24:52 router kernel: [82948.689609] 01411200 8fdf9d00 01400000 00400000 8006a664 800ecd30 00060000 00000001
May 13 07:24:52 router kernel: [82948.697952] 8dd63a48 8fe74850 00000000 8fe74850 00000001 8fe74850 00000000 8fe74878
May 13 07:24:52 router kernel: [82948.706292] ...
May 13 07:24:52 router kernel: [82948.708733] Call Trace:
May 13 07:24:52 router kernel: [82948.711201] [<80136a70>] __kmalloc+0x1f8/0x2ec
May 13 07:24:52 router kernel: [82948.715643] [<8022b6f0>] alloc_request_size+0x2c/0x7c
May 13 07:24:52 router kernel: [82948.720708] [<800ecd30>] mempool_alloc+0x6c/0×178 May 13 07:24:52 router kernel: [82948.725402] [<8022cf88>] get_request+0×360/0x76c
May 13 07:24:52 router kernel: [82948.730005] [<802303c4>] blk_queue_bio+0x1cc/0×430 May 13 07:24:52 router kernel: [82948.734781] [<8022e3cc>] generic_make_request+0xd8/0×288 May 13 07:24:52 router kernel: [82948.740078] [<8022e6a0>] submit_bio+0×124/0×164 May 13 07:24:52 router kernel: [82948.744663] [<8f1c3014>] ext4_io_submit+0×50/0×64 [ext4]
May 13 07:24:52 router kernel: [82948.749989] [<8f1a5994>] ext4_mark_inode_dirty+0xeac/0×1368 [ext4]
May 13 07:24:52 router kernel: [82948.756166] Code: 32428000 8e020014 00e23821 <8ce20000> 1000002c cc400000 1280ffbc 00000000 8e060010
May 13 07:24:52 router kernel: [82948.765910]
May 13 07:24:52 router kernel: [82948.767638] —[ end trace e8f9893fb33e6a26 ]—

and the second case

May 15 15:52:16 router kernel: [67618.480256] CPU 0 Unable to handle kernel paging request at virtual address 07402800, epc == 80136784, ra == 800ecd30
May 15 15:52:16 router kernel: [67618.490997] Oops[#1]:
May 15 15:52:16 router kernel: [67618.493275] CPU: 0 PID: 14159 Comm: kworker/u8:1 Not tainted 4.14.37 #0
May 15 15:52:16 router kernel: [67618.499875] Workqueue: writeback wb_workfn (flush-8:0)
May 15 15:52:16 router kernel: [67618.504997] task: 8c3276c0 task.stack: 8b656000
May 15 15:52:16 router kernel: [67618.509500] $ 0 : 00000000 00000001 00000000 8121a6c0
May 15 15:52:16 router kernel: [67618.514709] $ 4 : 805aa44c 00000001 00000001 07402800
May 15 15:52:16 router kernel: [67618.519918] $ 8 : 00005ddf 00005dde 8fb9b6a0 00000120
May 15 15:52:16 router kernel: [67618.525127] $12 : 8000001f 00000010 00000124 00000001
May 15 15:52:16 router kernel: [67618.530336] $16 : 8fd4a200 01011200 800ecd30 8b0e0000
May 15 15:52:16 router kernel: [67618.535545] $20 : 00400000 8006a664 8fd4981c 80660000
May 15 15:52:16 router kernel: [67618.540754] $24 : ffffffe0 ffff0000
May 15 15:52:16 router kernel: [67618.545963] $28 : 8b656000 8b657970 8f1c2c24 800ecd30
May 15 15:52:16 router kernel: [67618.551174] Hi : 00000000
May 15 15:52:16 router kernel: [67618.554035] Lo : 008402f0
May 15 15:52:16 router kernel: [67618.556924] epc : 80136784 kmem_cache_alloc+0x13c/0×230 May 15 15:52:16 router kernel: [67618.562323] ra : 800ecd30 mempool_alloc+0x6c/0×178 May 15 15:52:16 router kernel: [67618.567345] Status: 11008403#011KERNEL EXL IE May 15 15:52:16 router kernel: [67618.571515] Cause : 40800008 (ExcCode 02)
May 15 15:52:16 router kernel: [67618.575499] BadVA : 07402800
May 15 15:52:16 router kernel: [67618.578361] PrId : 0001992f (MIPS 1004Kc)
May 15 15:52:16 router kernel: [67618.582431] Modules linked in: pppoe ppp_async pppox ppp_generic nf_conntrack_ipv6 mt76x2e mt7603e mt76 mac80211 iptable_nat ipt_REJECT ipt_MASQUERADE cfg80211 cdc_ether xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_recent xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_HL xt_FLOWOFFLOAD xt_DSCP xt_CLASSIFY usbnet slhc nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack libcrc32c iptable_mangle iptable_filter ipt_ECN ip_tables crc_ccitt compat ledtrig_usbport xt_set ip_set_list_set ip_set_hash_netiface ip_set_hash_netport
May 15 15:52:16 router kernel: [67618.653177] ip_set_hash_netnet ip_set_hash_net ip_set_hash_netportnet ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink ip6t_REJECT nf_reject_ipv6 nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables x_tables vfat fat nls_utf8 nls_iso8859_1 nls_cp437 usb_storage leds_gpio xhci_mtk xhci_plat_hcd xhci_pci xhci_hcd sd_mod scsi_mod gpio_button_hotplug ext4 jbd2 mbcache usbcore nls_base usb_common mii crc32c_generic
May 15 15:52:16 router kernel: [67618.702675] Process kworker/u8:1 (pid: 14159, threadinfo=8b656000, task=8c3276c0, tls=00000000)
May 15 15:52:16 router kernel: [67618.711326] Stack : 8e648b20 8f147e00 8e648b20 01011200 00000001 8022b710 00000002 01011200
May 15 15:52:16 router kernel: [67618.719658] 01411200 8fd49800 01400000 00400000 8006a664 800ecd30 00000001 01011200
May 15 15:52:16 router kernel: [67618.727990] 01411200 8fd49700 01400000 00400000 8006a664 800ecd30 8e330030 8c499000
May 15 15:52:16 router kernel: [67618.736322] 8fd9f000 8b657a2c 01400000 8fd49800 01400000 01400000 8e47fa00 8d44d8f8
May 15 15:52:16 router kernel: [67618.744655] 80660000 80225974 8fd49600 00000100 01400000 8d48d7c0 8e47fa00 8fd49600
May 15 15:52:16 router kernel: [67618.752989] ...
May 15 15:52:16 router kernel: [67618.755425] Call Trace:
May 15 15:52:16 router kernel: [67618.757859] [<80136784>] kmem_cache_alloc+0x13c/0×230 May 15 15:52:16 router kernel: [67618.762897] [<800ecd30>] mempool_alloc+0x6c/0×178 May 15 15:52:16 router kernel: [67618.767596] [<80225974>] bvec_alloc+0xdc/0×154 May 15 15:52:16 router kernel: [67618.772020] [<80225b44>] bio_alloc_bioset+0×158/0×250 May 15 15:52:16 router kernel: [67618.777111] [<8f1c3358>] ext4_bio_write_page+0×320/0x5c4 [ext4]
May 15 15:52:16 router kernel: [67618.783028] [<8f19e3f4>] ext4_convert_inline_data+0×874/0x21a8 [ext4]
May 15 15:52:16 router kernel: [67618.789461] [<8f19e860>] ext4_convert_inline_data+0xce0/0x21a8 [ext4]
May 15 15:52:16 router kernel: [67618.795881] Code: 32228000 8e020014 00e23821 <8ce20000> 1000002d cc400000 1260ffbc 00000000 8e060010
May 15 15:52:16 router kernel: [67618.805607]
May 15 15:52:16 router kernel: [67618.807332] —[ end trace 3b32ff5399a1bc64 ]—

DAP-1522 A1 stock firmware 1.21 or 1.42 , device page https://openwrt.org/toh/hwdata/d-link/d-link_dap-1522_a1 Flash via GUI or Recovery interface , both the same result/fail.
Since this device is not supported on 17.04.1 https://downloads.lede-project.org/releases/17.01.4/targets/ramips/rt288x/
I try the snapshot from https://downloads.openwrt.org/snapshots/targets/ramips/rt288x/openwrt-ramips-rt288x-dlink_dap-1522-a1-squashfs-factory.bin Checksum ok

Here is the boot log

U-Boot 1.1.3 (Aug 28 2009 - 15:47:01) Build 001--ALPHA_v011

Board: RT2880 DRAM:  32 MB
        twe0 set to <NULL>
        toe0 set to <NULL>
============================================
ASIC -VerB/C (MAC to MAC Mode)
DRAM COMPONENT=256Mbits
DRAM BUS=16BIT
Total memory = 32Mbytes
Date:Aug 28 2009  Time:15:47:01
============================================

Eth0 (10/100-M)



Hit any key to stop autoboot:  0
## Booting image at bc440000 ...
   Image Name:   7zip Linux Kernel
   Created:      1970-01-01   0:00:00 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    -1 Bytes = 4096 MB
   Load Address: 8a000000
   Entry Point:  8a000000
   Uncompressing Kernel Image with LZMA ...
OK

Starting kernel ...

[    0.000000] Linux version 4.14.48 (buildbot@slashdirt-02) (gcc version 7.3.0                                                                 (OpenWrt GCC 7.3.0
r7172-f60301d)) #0 Sat Jun 9 20:39:17 2018
[    0.000000] SoC Type: Ralink RT2880 id:2 rev:0
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0001906c (MIPS 4KEc)
[    0.000000] MIPS: machine is D-Link DAP-1522 A1
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 02000000 @ 08000000 (usable)
[    0.000000] Wasting 1048576 bytes for tracking 32768 unused pages
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 16kB, VIPT, 4-way, linesize 16 bytes.
[    0.000000] Primary data cache 16kB, 4-way, VIPT, no aliases, linesize 16 byt                                                                es
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000009ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000009ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000009ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x8c/0x47c with                                                                 crng_init=0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 40640
[    0.000000] Kernel command line: console=ttyS0,57600 rootfstype=squashfs,jffs                                                                2
[    0.000000] PID hash table entries: 1024 (order: 0, 4096 bytes)
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Memory: 25248K/163840K available (3518K kernel code, 174K rwdata,                                                                 844K rodata, 1216K
init, 214K bss, 138592K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=16, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] Failed to request intc memory
[    0.000000] Kernel panic - not syncing: Failed to request resources for ralin                                                                k,rt2880-sysc
[    0.000000] Rebooting in 1 seconds..
[    0.000000] Reboot failed -- System halted

Regards,

Hello,

I was unable to upgrade from lede-17.01.4 to lede-17.01.5 from web interface or from bootloader tftpd with wnr3500l-v1-other-regions images, attached the boot log from both firmware and the sha256sums:

sha256sum lede-17.01.5-brcm47xx-mips74k-netgear-wnr3500l-v1-other-regions-squashfs.chk
5dbaddfae5bbbcca6fb4f0e2810de2135dbadf0bf346e755ca6063700f445d4d lede-17.01.5-brcm47xx-mips74k-netgear-wnr3500l-v1-other-regions-squashfs.chk

sha256sum lede-17.01.4-brcm47xx-mips74k-netgear-wnr3500l-v1-other-regions-squashfs.chk
6e4eaa5e988f99f77b5e00d8be4f288934ae69e3056ceaffc4e3fb60099d2a3c lede-17.01.4-brcm47xx-mips74k-netgear-wnr3500l-v1-other-regions-squashfs.chk

Start TFTP server
Reading :: Done. 3805242 bytes read
Programming...done. 3805242 bytes written
Write len/chksum offset @ 0x0074FFF8...done.
Decompressing..........done

CFE for WNR3500L version: v1.0.36
Build Date: Tue Aug 11 15:09:14 CST 2009
Init Arena
Init Devs.
Boot partition size = 262144(0×40000)
Found a 8MB ST compatible serial flash
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.56.28
CPU type 0×19740: 453MHz
Tot mem: 65536 KBytes

Device eth0: hwaddr C0-3F-0E-E1-97-EA, ipaddr 192.168.1.1, mask 255.255.255.0

      gateway not set, nameserver not set

too long file.
LZMA boot failed
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 3864 bytes read
Entry at 0×80001000 Closing network.
Starting program at 0×80001000 [ 0.000000] Linux version 4.4.140 (buildbot@builds-02.infra.lede-project.org) (gcc version 5.4.0 (LEDE GCC 5.4.0 r3104-41de9a2) ) #0 Fri Jul 13 19:25:14 2018
[ 0.000000] CPU0 revision is: 00019740 (MIPS 74Kc)
[ 0.000000] bcm47xx: Using bcma bus
[ 0.000000] bcma: bus0: Found chip with id 0×4716, rev 0×01 and package 0x0A
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 04000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0×0000000000000000-0x0000000003ffffff]
[ 0.000000] HighMem empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0×0000000000000000-0x0000000003ffffff]
[ 0.000000] Initmem setup node 0 [mem 0×0000000000000000-0x0000000003ffffff]
[ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256
[ 0.000000] Kernel command line: noinitrd console=ttyS0,115200
[ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.000000] Writing ErrCtl register=00000000
[ 0.000000] Readback ErrCtl register=00000000
[ 0.000000] Memory: 60876K/65536K available (3006K kernel code, 139K rwdata, 368K rodata, 188K init, 294K bss, 4660K reserved, 0K cma-reserved, 0K highmem)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS:128
[ 0.000000] bcma: bus0: Core 0 found: ChipCommon (manuf 0x4BF, id 0×800, rev 0x1F, class 0×0)
[ 0.000000] bcma: bus0: Core 1 found: IEEE 802.11 (manuf 0x4BF, id 0×812, rev 0×11, class 0×0)
[ 0.000000] bcma: bus0: Core 2 found: GBit MAC (manuf 0x4BF, id 0x82D, rev 0×00, class 0×0)
[ 0.000000] bcma: bus0: Core 3 found: MIPS 74K (manuf 0x4A7, id 0x82C, rev 0×01, class 0×0)
[ 0.000000] bcma: bus0: Core 4 found: USB 2.0 Host (manuf 0x4BF, id 0×819, rev 0×04, class 0×0)
[ 0.000000] bcma: bus0: Core 5 found: PCIe (manuf 0x4BF, id 0×820, rev 0x0E, class 0×0)
[ 0.000000] bcma: bus0: Core 6 found: DDR1/DDR2 Memory Controller (manuf 0x4BF, id 0x82E, rev 0×01, class 0×0)
[ 0.000000] bcma: bus0: Core 7 found: Internal Memory (manuf 0x4BF, id 0x80E, rev 0×07, class 0×0)
[ 0.000000] bcma: bus0: Core 8 found: I2S (manuf 0x4BF, id 0×834, rev 0×00, class 0×0)
[ 0.000000] bcma: bus0: Found M25P64 serial flash (size: 8192KiB, blocksize: 0×10000, blocks: 128)
[ 0.000000] bcma: bus0: Early bus registered
[ 0.000000] MIPS: machine is Netgear WNR3500L
[ 0.000000] bcm47xx: Setting up vectored interrupts
[ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 8438235966 ns
[ 0.000016] sched_clock: 32 bits at 226MHz, resolution 4ns, wraps every 9481163773ns
[ 0.000088] Calibrating delay loop... 226.09 BogoMIPS (lpj=1130496)
[ 0.070059] pid_max: default: 32768 minimum: 301
[ 0.070323] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.070355] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.074430] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.074486] futex hash table entries: 256 (order: -1, 3072 bytes)
[ 0.075763] NET: Registered protocol family 16
[ 0.076831] Can’t analyze schedule() prologue at 800077c8
[ 0.097612] clocksource: Switched to clocksource MIPS
[ 0.099778] NET: Registered protocol family 2
[ 0.101549] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.101611] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.101653] TCP: Hash tables configured (established 1024 bind 1024)
[ 0.101827] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.101880] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.102346] NET: Registered protocol family 1
[ 0.136945] bcma: bus0: PCIEcore in host mode found
[ 0.136961] bcma: bus0: This PCIE core is disabled and not working
[ 0.138624] bcma: bus0: Bus registered
[ 0.140082] Crashlog allocated RAM at address 0x3f00000
[ 0.173818] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.173852] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) © 2001-2006 Red Hat, Inc.
[ 0.179094] io scheduler noop registered
[ 0.179132] io scheduler deadline registered (default)
[ 0.179528] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.184744] console [ttyS0] disabled
[ 0.205005] serial8250.0: ttyS0 at MMIO 0xb8000300 (irq = 2, base_baud = 1250000) is a U6_16550A
[ 0.650369] console [ttyS0] enabled
[ 0.716781] 8 bcm47xxpart partitions found on MTD device bcm47xxsflash
[ 0.723492] Creating 8 MTD partitions on “bcm47xxsflash”:
[ 0.729058] 0×000000000000-0×000000040000 : “boot” [ 0.738490] 0×000000040000-0x0000007d0000 : “firmware” [ 0.746855] 0x0000007d0000-0x0000007e0000 : “POT” [ 0.754929] 0x0000007e0000-0x0000007f0000 : “board_data” [ 0.763597] 0x0000007f0000-0×000000800000 : “nvram” [ 0.771879] 0x00000004001c-0×000000040924 : “loader” [ 0.780208] 0×000000040924-0x000000167c00 : “linux” [ 0.788492] 0x000000167c00-0x0000007d0000 : “rootfs” [ 0.796719] mtd: device 7 (rootfs) set to be root filesystem
[ 0.802656] 1 squashfs-split partitions found on MTD device rootfs
[ 0.809019] 0x0000003a0000-0x0000007d0000 : “rootfs_data” [ 0.821473] libphy: Fixed MDIO Bus: probed
[ 0.825896] bgmac_bcma bcma0:2: Found PHY addr: 30 (NOREGS)
[ 0.834901] libphy: bcma_mdio mii bus: probed
[ 0.839469] bgmac_bcma bcma0:2: Support for Roboswitch not implemented
[ 0.993379] b53_common: found switch: BCM53115, rev 8
[ 1.000032] bgmac_bcma: Broadcom 47xx GBit MAC driver loaded
[ 1.006312] bcm47xx-wdt bcm47xx-wdt.0: BCM47xx Watchdog Timer enabled (30 seconds)
[ 1.016346] NET: Registered protocol family 10
[ 1.027256] NET: Registered protocol family 17
[ 1.032044] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[ 1.044946] 8021q: 802.1Q VLAN Support v1.8
[ 1.061633] VFS: Mounted root (squashfs filesystem) readonly on device 31:7.
[ 1.070250] Freeing unused kernel memory: 188K

FE for WNR3500L version: v1.0.36
Build Date: Tue Aug 11 15:09:14 CST 2009
Init Arena
Init Devs.
Boot partition size = 262144(0×40000)
Found a 8MB ST compatible serial flash
et0: Broadcom BCM47XX 10/100/1000 Mbps Ethernet Controller 5.10.56.28
CPU type 0×19740: 453MHz
Tot mem: 65536 KBytes

Device eth0: hwaddr C0-3F-0E-E1-97-EA, ipaddr 192.168.1.1, mask 255.255.255.0

      gateway not set, nameserver not set

too long file.
LZMA boot failed
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 3848 bytes read
Entry at 0×80001000 Closing network.
Starting program at 0×80001000 [ 0.000000] Linux version 4.4.92 (buildbot@builds-02.infra.lede-project.org) (gcc version 5.4.0 (LEDE GCC 5.4.0 r3104-41de9a2) ) #0 Tue Oct 17 17:46:20 2017
[ 0.000000] CPU0 revision is: 00019740 (MIPS 74Kc)
[ 0.000000] bcm47xx: Using bcma bus
[ 0.000000] bcma: bus0: Found chip with id 0×4716, rev 0×01 and package 0x0A
[ 0.000000] Determined physical RAM map:
[ 0.000000] memory: 04000000 @ 00000000 (usable)
[ 0.000000] Initrd not found or empty - disabling initrd
[ 0.000000] Zone ranges:
[ 0.000000] Normal [mem 0×0000000000000000-0x0000000003ffffff]
[ 0.000000] HighMem empty
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0×0000000000000000-0x0000000003ffffff]
[ 0.000000] Initmem setup node 0 [mem 0×0000000000000000-0x0000000003ffffff]
[ 0.000000] Primary instruction cache 32kB, VIPT, 4-way, linesize 32 bytes.
[ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16256
[ 0.000000] Kernel command line: noinitrd console=ttyS0,115200
[ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[ 0.000000] Writing ErrCtl register=00000000
[ 0.000000] Readback ErrCtl register=00000000
[ 0.000000] Memory: 60940K/65536K available (2979K kernel code, 134K rwdata, 368K rodata, 156K init, 294K bss, 4596K reserved, 0K cma-reserved, 0K highmem)
[ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[ 0.000000] NR_IRQS:128
[ 0.000000] bcma: bus0: Core 0 found: ChipCommon (manuf 0x4BF, id 0×800, rev 0x1F, class 0×0)
[ 0.000000] bcma: bus0: Core 1 found: IEEE 802.11 (manuf 0x4BF, id 0×812, rev 0×11, class 0×0)
[ 0.000000] bcma: bus0: Core 2 found: GBit MAC (manuf 0x4BF, id 0x82D, rev 0×00, class 0×0)
[ 0.000000] bcma: bus0: Core 3 found: MIPS 74K (manuf 0x4A7, id 0x82C, rev 0×01, class 0×0)
[ 0.000000] bcma: bus0: Core 4 found: USB 2.0 Host (manuf 0x4BF, id 0×819, rev 0×04, class 0×0)
[ 0.000000] bcma: bus0: Core 5 found: PCIe (manuf 0x4BF, id 0×820, rev 0x0E, class 0×0)
[ 0.000000] bcma: bus0: Core 6 found: DDR1/DDR2 Memory Controller (manuf 0x4BF, id 0x82E, rev 0×01, class 0×0)
[ 0.000000] bcma: bus0: Core 7 found: Internal Memory (manuf 0x4BF, id 0x80E, rev 0×07, class 0×0)
[ 0.000000] bcma: bus0: Core 8 found: I2S (manuf 0x4BF, id 0×834, rev 0×00, class 0×0)
[ 0.000000] bcma: bus0: Found M25P64 serial flash (size: 8192KiB, blocksize: 0×10000, blocks: 128)
[ 0.000000] bcma: bus0: Early bus registered
[ 0.000000] MIPS: machine is Netgear WNR3500L
[ 0.000000] bcm47xx: Setting up vectored interrupts
[ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 8438235966 ns
[ 0.000015] sched_clock: 32 bits at 226MHz, resolution 4ns, wraps every 9481163773ns
[ 0.000087] Calibrating delay loop... 226.09 BogoMIPS (lpj=1130496)
[ 0.070070] pid_max: default: 32768 minimum: 301
[ 0.070333] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.070363] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.074377] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[ 0.074431] futex hash table entries: 256 (order: -1, 3072 bytes)
[ 0.075699] NET: Registered protocol family 16
[ 0.076766] Can’t analyze schedule() prologue at 800077c8
[ 0.097432] clocksource: Switched to clocksource MIPS
[ 0.099646] NET: Registered protocol family 2
[ 0.101436] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.101500] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[ 0.101541] TCP: Hash tables configured (established 1024 bind 1024)
[ 0.101723] UDP hash table entries: 256 (order: 0, 4096 bytes)
[ 0.101772] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[ 0.102233] NET: Registered protocol family 1
[ 0.138267] bcma: bus0: PCIEcore in host mode found
[ 0.138284] bcma: bus0: This PCIE core is disabled and not working
[ 0.139823] bcma: bus0: Bus registered
[ 0.141279] Crashlog allocated RAM at address 0x3f00000
[ 0.173720] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[ 0.173754] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) © 2001-2006 Red Hat, Inc.
[ 0.178931] io scheduler noop registered
[ 0.178969] io scheduler deadline registered (default)
[ 0.179399] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[ 0.184624] console [ttyS0] disabled
[ 0.204881] serial8250.0: ttyS0 at MMIO 0xb8000300 (irq = 2, base_baud = 1250000) is a U6_16550A
[ 0.649908] console [ttyS0] enabled
[ 0.716330] 8 bcm47xxpart partitions found on MTD device bcm47xxsflash
[ 0.723042] Creating 8 MTD partitions on “bcm47xxsflash”:
[ 0.728592] 0×000000000000-0×000000040000 : “boot” [ 0.737974] 0×000000040000-0x0000007d0000 : “firmware” [ 0.746296] 0x0000007d0000-0x0000007e0000 : “POT” [ 0.754307] 0x0000007e0000-0x0000007f0000 : “board_data” [ 0.762954] 0x0000007f0000-0×000000800000 : “nvram” [ 0.771197] 0x00000004001c-0x00000004091c : “loader” [ 0.779503] 0x00000004091c-0×000000166000 : “linux” [ 0.787711] 0×000000166000-0x0000007d0000 : “rootfs” [ 0.795968] mtd: device 7 (rootfs) set to be root filesystem
[ 0.801906] 1 squashfs-split partitions found on MTD device rootfs
[ 0.808266] 0x0000003a0000-0x0000007d0000 : “rootfs_data” [ 0.821280] libphy: Fixed MDIO Bus: probed
[ 0.825701] bgmac_bcma bcma0:2: Found PHY addr: 30 (NOREGS)
[ 0.834008] libphy: bcma_mdio mii bus: probed
[ 0.838578] bgmac_bcma bcma0:2: Support for Roboswitch not implemented
[ 0.993243] b53_common: found switch: BCM53115, rev 8
[ 0.999847] bgmac_bcma: Broadcom 47xx GBit MAC driver loaded
[ 1.006179] bcm47xx-wdt bcm47xx-wdt.0: BCM47xx Watchdog Timer enabled (30 seconds)
[ 1.016224] NET: Registered protocol family 10
[ 1.027053] NET: Registered protocol family 17
[ 1.031842] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[ 1.044737] 8021q: 802.1Q VLAN Support v1.8
[ 1.059021] VFS: Mounted root (squashfs filesystem) readonly on device 31:7.
[ 1.067285] Freeing unused kernel memory: 156K
[ 2.806611] init: Console is alive
[ 2.810639] init: - watchdog -
[ 3.997377] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[ 4.143653] usbcore: registered new interface driver usbfs
[ 4.149584] usbcore: registered new interface driver hub
[ 4.155199] usbcore: registered new device driver usb
[ 4.169708] ehci_hcd: USB 2.0 ‘Enhanced’ Host Controller (EHCI) Driver
[ 4.178819] ehci-platform: EHCI generic platform driver
[ 4.184317] ehci-platform ehci-platform.0: EHCI Host Controller
[ 4.190529] ehci-platform ehci-platform.0: new USB bus registered, assigned bus number 1
[ 4.199005] ehci-platform ehci-platform.0: irq 5, io mem 0×18004000 [ 4.217502] ehci-platform ehci-platform.0: USB 2.0 started, EHCI 1.00
[ 4.225784] hub 1-0:1.0: USB hub found
[ 4.230502] hub 1-0:1.0: 2 ports detected
[ 4.239429] ohci_hcd: USB 1.1 ‘Open’ Host Controller (OHCI) Driver
[ 4.248047] ohci-platform: OHCI generic platform driver
[ 4.253525] ohci-platform ohci-platform.0: Generic Platform OHCI controller
[ 4.260791] ohci-platform ohci-platform.0: new USB bus registered, assigned bus number 2
[ 4.269219] ohci-platform ohci-platform.0: irq 5, io mem 0×18009000 [ 4.333295] hub 2-0:1.0: USB hub found
[ 4.338046] hub 2-0:1.0: 2 ports detected
[ 4.348953] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[ 4.358415] init: - preinit -
[ 4.937596] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 6.107517] bgmac_bcma bcma0:2 eth0: Link is Up - 1Gbps/Full - flow control off
[ 6.115064] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 7.012167] random: procd: uninitialized urandom read (4 bytes read, 11 bits of entropy available)
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[ 10.209518] mount_root: jffs2 not ready yet, using temporary tmpfs overlay
[ 10.223679] urandom-seed: Seed file not found (/etc/urandom.seed)
[ 10.512569] procd: - early -
[ 10.515754] procd: - watchdog -
[ 11.163982] procd: - watchdog -
[ 11.168071] procd: - ubus -
[ 11.325865] random: ubusd: uninitialized urandom read (4 bytes read, 18 bits of entropy available)
[ 11.441414] random: ubusd: uninitialized urandom read (4 bytes read, 18 bits of entropy available)
[ 11.451517] random: ubusd: uninitialized urandom read (4 bytes read, 18 bits of entropy available)
[ 11.460856] random: ubusd: uninitialized urandom read (4 bytes read, 18 bits of entropy available)
[ 11.470925] random: ubusd: uninitialized urandom read (4 bytes read, 18 bits of entropy available)
[ 11.480252] random: ubusd: uninitialized urandom read (4 bytes read, 18 bits of entropy available)
[ 11.489980] random: ubusd: uninitialized urandom read (4 bytes read, 18 bits of entropy available)
[ 11.499705] random: ubusd: uninitialized urandom read (4 bytes read, 18 bits of entropy available)
[ 11.509819] procd: - init -
Please press Enter to activate this console.
[ 13.270551] kmodloader: loading kernel modules from /etc/modules.d/*
[ 13.285240] ip6_tables: (C) 2000-2006 Netfilter Core Team
[ 13.311701] Loading modules backported from Linux version wt-2017-01-31-0-ge882dff19e7f
[ 13.319947] Backport generated by backports.git backports-20160324-13-g24da7d3c
[ 13.333019] ip_tables: (C) 2000-2006 Netfilter Core Team
[ 13.352710] nf_conntrack version 0.5.0 (954 buckets, 3816 max)
[ 13.416167] xt_time: kernel timezone is -0000
[ 13.508191] PPP generic driver version 2.4.2
[ 13.517216] NET: Registered protocol family 24
[ 13.540700] b43-phy0: Broadcom 4716 WLAN found (core revision 17)
[ 13.547966] b43-phy0: Found PHY: Analog 8, Type 4 (N), Revision 5
[ 13.554192] b43-phy0: Found Radio: Manuf 0x17F, ID 0×2056, Revision 7, Version 0
[ 13.562486] Broadcom 43xx driver loaded [ Features: NL ]
[ 13.686566] kmodloader: done loading kernel modules from /etc/modules.d/*
[ 15.687579] random: jshn: uninitialized urandom read (4 bytes read, 25 bits of entropy available)
[ 25.746893] jffs2_scan_eraseblock(): End of filesystem marker found at 0×0 [ 25.777547] jffs2_build_filesystem(): unlocking the mtd device... done.
[ 25.784300] jffs2_build_filesystem(): erasing all blocks after the end marker...
[ 30.647563] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 30.687011] device eth0.1 entered promiscuous mode
[ 30.692016] device eth0 entered promiscuous mode
[ 30.730434] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[ 30.868472] IPv6: ADDRCONF(NETDEV_UP): eth0.2: link is not ready
[ 32.267639] bgmac_bcma bcma0:2 eth0: Link is Up - 1Gbps/Full - flow control off
[ 32.275184] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 32.307649] br-lan: port 1(eth0.1) entered forwarding state
[ 32.313443] br-lan: port 1(eth0.1) entered forwarding state
[ 32.319424] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.2: link becomes ready
[ 32.427588] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[ 34.307460] br-lan: port 1(eth0.1) entered forwarding state

Supply the following if possible:
- Device problem occurs on

1. BCM2710 (Raspberry Pi 3B)

- Software versions of OpenWrt/LEDE release, packages, etc.

1. LEDE 17.01.05 → Directly from download page, and from clean build

- Steps to reproduce

1. Perform initial flash of software.
2. Boot device up and confirm interfaces work correctly, and DHCP is server properly from eth0
3. Confirm that configuration for /etc/dhcp and /etc/network looks correct
4. Reboot device (either via LuCI or console reboot)
5. Upon start, confirm that dhcp config is empty, network config is defaulted (missing wlan0, etc).
6. Confirm that interfaces do not work correctly, GUI is no longer navigable even with a static IP fixed on PC.

The same issue as this, but on the final release: https://bugs.openwrt.org/index.php?do=details&task_id=1663&string=unifi&type%5B0%5D=&sev%5B0%5D=&pri%5B0%5D=&due%5B0%5D=&reported%5B0%5D=&cat%5B0%5D=&status%5B0%5D=open&percent%5B0%5D=&opened=&dev=&closed=&duedatefrom=&duedateto=&changedfrom=&changedto=&openedfrom=&openedto=&closedfrom=&closedto=

OpenWrt 18.06.0, r7188-b0b5c64c22
Device: Xiaomi Mir3G
Modem: Huawei E3372

How to reproduce:
1. Bring up wwan interface
2. Reconnect modem (or echo ‘at^reset’ > /dev/ttyUSB0)
3. See in logs:

Fri Aug  3 16:59:02 2018 kern.info kernel: [  950.710901] usb 1-1: USB disconnect, device number 3
Fri Aug  3 16:59:02 2018 kern.info kernel: [  950.716646] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
Fri Aug  3 16:59:02 2018 kern.info kernel: [  950.725206] option 1-1:1.0: device disconnected
Fri Aug  3 16:59:02 2018 kern.info kernel: [  950.730738] option1 ttyUSB1: GSM modem (1-port) converter now disconnected from ttyUSB1
Fri Aug  3 16:59:02 2018 kern.info kernel: [  950.739145] option 1-1:1.1: device disconnected
Fri Aug  3 16:59:02 2018 kern.info kernel: [  950.744808] huawei_cdc_ncm 1-1:1.2 wwan0: unregister 'huawei_cdc_ncm' usb-1e1c0000.xhci-1, Huawei CDC NCM device
Fri Aug  3 16:59:02 2018 daemon.notice netifd: Network device 'wwan0' link is down
Fri Aug  3 16:59:02 2018 daemon.notice netifd: Network alias 'wwan0' link is down
Fri Aug  3 16:59:02 2018 daemon.notice netifd: Interface 'wwan_4' has link connectivity loss
Fri Aug  3 16:59:02 2018 daemon.notice netifd: Interface 'wwan_4' is disabled
Fri Aug  3 16:59:02 2018 daemon.info chronyd[1303]: Source 94.247.111.10 offline
Fri Aug  3 16:59:02 2018 daemon.info chronyd[1303]: Source 195.91.239.8 offline
Fri Aug  3 16:59:02 2018 daemon.info chronyd[1303]: Source 91.207.136.50 offline
Fri Aug  3 16:59:02 2018 daemon.info chronyd[1303]: Source 195.210.189.106 offline
Fri Aug  3 16:59:02 2018 daemon.info chronyd[1303]: Can't synchronise: no selectable sources
Fri Aug  3 16:59:02 2018 daemon.notice netifd: wwan_4 (4421): udhcpc: SIOCGIFINDEX: No such device
Fri Aug  3 16:59:02 2018 daemon.notice netifd: wwan_4 (4421): udhcpc: received SIGTERM
Fri Aug  3 16:59:03 2018 daemon.notice netifd: wwan (4800): Stopping network wwan
Fri Aug  3 16:59:03 2018 daemon.notice netifd: wwan (4800): Can't open device /dev/ttyUSB1.
Fri Aug  3 16:59:03 2018 daemon.notice netifd: wwan (4800): Failed to disconnect
Fri Aug  3 16:59:03 2018 daemon.notice netifd: Interface 'wwan' is now down
Fri Aug  3 16:59:03 2018 daemon.warn dnsmasq[4567]: no servers found in /tmp/resolv.conf.auto, will retry
Fri Aug  3 16:59:09 2018 kern.info kernel: [  957.683961] usb 1-1: new high-speed USB device number 4 using xhci-mtk
Fri Aug  3 16:59:09 2018 kern.info kernel: [  957.867590] option 1-1:1.0: GSM modem (1-port) converter detected
Fri Aug  3 16:59:09 2018 kern.info kernel: [  957.874380] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0
Fri Aug  3 16:59:09 2018 kern.info kernel: [  957.882334] option 1-1:1.1: GSM modem (1-port) converter detected
Fri Aug  3 16:59:09 2018 kern.info kernel: [  957.889115] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB1
Fri Aug  3 16:59:09 2018 kern.info kernel: [  957.915707] huawei_cdc_ncm 1-1:1.2: resetting NTB format to 16-bit
Fri Aug  3 16:59:09 2018 kern.info kernel: [  957.926799] huawei_cdc_ncm 1-1:1.2: MAC-Address: 00:1e:10:1f:00:00
Fri Aug  3 16:59:09 2018 kern.info kernel: [  957.933038] huawei_cdc_ncm 1-1:1.2: setting rx_max = 16384
Fri Aug  3 16:59:09 2018 kern.info kernel: [  957.938957] huawei_cdc_ncm 1-1:1.2: NDP will be placed at end of frame for this device.
Fri Aug  3 16:59:09 2018 kern.info kernel: [  957.947454] huawei_cdc_ncm 1-1:1.2: cdc-wdm0: USB WDM device
Fri Aug  3 16:59:09 2018 kern.info kernel: [  957.955970] huawei_cdc_ncm 1-1:1.2 wwan0: register 'huawei_cdc_ncm' at usb-1e1c0000.xhci-1, Huawei CDC NCM device, 00:1e:10:1f:00:00
Fri Aug  3 16:59:10 2018 daemon.notice netifd: Interface 'wwan' is setting up now
Fri Aug  3 16:59:10 2018 daemon.notice netifd: wwan (5197): Stopping network wwan
Fri Aug  3 16:59:11 2018 daemon.notice netifd: wwan (5197): sending ->
Fri Aug  3 16:59:15 2018 daemon.notice netifd: Interface 'wwan' is now down

Now ``ifup wwan`` or ``ifdown wwan`` doesn’t do anything until restart of netifd process.

Netgear R7800 running 17.01.4 kept up with my ISP line speed (nominal 250Mbps/15Mbps) when configured to use SQM with cake/piece_of_cake.
In 18.06, it cannot keep up
Possibly the same root cause as issue 1598

DSLreports speed test with SQM enabled in 17.01.4 (223.1/14.71 Mbps):
http://www.dslreports.com/speedtest/29614883

and with 18.06 ( 95.8/14.16 Mbps):
http://www.dslreports.com/speedtest/36981183

root@LEDE:~# cat /etc/config/sqm

config queue 'eth1'
	option qdisc_advanced '0'
	option verbosity '5'
	option upload '15000'
	option linklayer 'ethernet'
	option overhead '18'
	option debug_logging '1'
	option download '232750'
	option interface 'eth0.2'
	option enabled '1'
	option qdisc 'cake'
	option script 'piece_of_cake.qos'

Sample tc output after running the DSLreports speed test

root@LEDE:~# tc -d qdisc
qdisc noqueue 0: dev lo root refcnt 2 
qdisc mq 0: dev eth0 root 
qdisc fq_codel 0: dev eth0 parent :1 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 4Mb ecn 
qdisc mq 0: dev eth1 root 
qdisc fq_codel 0: dev eth1 parent :1 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 4Mb ecn 
qdisc noqueue 0: dev br-lan root refcnt 2 
qdisc noqueue 0: dev eth1.1 root refcnt 2 
qdisc cake 8012: dev eth0.2 root refcnt 2 bandwidth 15Mbit besteffort triple-isolate split-gso rtt 100.0ms noatm overhead 18 
qdisc ingress ffff: dev eth0.2 parent ffff:fff1 ---------------- 
qdisc noqueue 0: dev br-guest root refcnt 2 
qdisc noqueue 0: dev br-iot root refcnt 2 
qdisc noqueue 0: dev wlan0 root refcnt 2 
qdisc noqueue 0: dev wlan1 root refcnt 2 
qdisc noqueue 0: dev wlan1-1 root refcnt 2 
qdisc noqueue 0: dev wlan1-2 root refcnt 2 
qdisc noqueue 0: dev wlan0-1 root refcnt 2 
qdisc fq_codel 0: dev ovpns0 root refcnt 2 limit 10240p flows 1024 quantum 1500 target 5.0ms interval 100.0ms memory_limit 4Mb ecn 
qdisc fq_codel 0: dev ovpns1 root refcnt 2 limit 10240p flows 1024 quantum 1500 target 5.0ms interval 100.0ms memory_limit 4Mb ecn 
qdisc cake 8013: dev ifb4eth0.2 root refcnt 2 bandwidth 232750Kbit besteffort triple-isolate wash split-gso rtt 100.0ms noatm overhead 18 

root@LEDE:~# tc -s qdisc
qdisc noqueue 0: dev lo root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc mq 0: dev eth0 root 
 Sent 351709498 bytes 2034499 pkt (dropped 0, overlimits 0 requeues 65185) 
 backlog 0b 0p requeues 65185
qdisc fq_codel 0: dev eth0 parent :1 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 4Mb ecn 
 Sent 351709498 bytes 2034499 pkt (dropped 0, overlimits 0 requeues 65185) 
 backlog 0b 0p requeues 65185
  maxpacket 1514 drop_overlimit 0 new_flow_count 60774 ecn_mark 0
  new_flows_len 0 old_flows_len 0
qdisc mq 0: dev eth1 root 
 Sent 4385184093 bytes 3164614 pkt (dropped 0, overlimits 0 requeues 109126) 
 backlog 0b 0p requeues 109126
qdisc fq_codel 0: dev eth1 parent :1 limit 10240p flows 1024 quantum 1514 target 5.0ms interval 100.0ms memory_limit 4Mb ecn 
 Sent 4385184093 bytes 3164614 pkt (dropped 0, overlimits 0 requeues 109126) 
 backlog 0b 0p requeues 109126
  maxpacket 1514 drop_overlimit 0 new_flow_count 137321 ecn_mark 0
  new_flows_len 0 old_flows_len 0
qdisc noqueue 0: dev br-lan root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc noqueue 0: dev eth1.1 root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc cake 8012: dev eth0.2 root refcnt 2 bandwidth 15Mbit besteffort triple-isolate split-gso rtt 100.0ms noatm overhead 18 
 Sent 41321462 bytes 92960 pkt (dropped 919, overlimits 39456 requeues 0) 
 backlog 0b 0p requeues 0
 memory used: 194432b of 4Mb
 capacity estimate: 15Mbit
 min/max network layer size:           28 /    1500
 min/max overhead-adjusted size:       46 /    1518
 average network hdr offset:           14

                  Tin 0
  thresh         15Mbit
  target          5.0ms
  interval      100.0ms
  pk_delay        672us
  av_delay        211us
  sp_delay         11us
  backlog            0b
  pkts            93879
  bytes        42712828
  way_inds            6
  way_miss          392
  way_cols            0
  drops             919
  marks               0
  ack_drop            0
  sp_flows            0
  bk_flows            1
  un_flows            0
  max_len         12112
  quantum           457

qdisc ingress ffff: dev eth0.2 parent ffff:fff1 ---------------- 
 Sent 143870988 bytes 121001 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc noqueue 0: dev br-guest root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc noqueue 0: dev br-iot root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc noqueue 0: dev wlan0 root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc noqueue 0: dev wlan1 root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc noqueue 0: dev wlan1-1 root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc noqueue 0: dev wlan1-2 root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc noqueue 0: dev wlan0-1 root refcnt 2 
 Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
qdisc fq_codel 0: dev ovpns0 root refcnt 2 limit 10240p flows 1024 quantum 1500 target 5.0ms interval 100.0ms memory_limit 4Mb ecn 
 Sent 2015423 bytes 2972 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
  maxpacket 0 drop_overlimit 0 new_flow_count 0 ecn_mark 0
  new_flows_len 0 old_flows_len 0
qdisc fq_codel 0: dev ovpns1 root refcnt 2 limit 10240p flows 1024 quantum 1500 target 5.0ms interval 100.0ms memory_limit 4Mb ecn 
 Sent 228 bytes 3 pkt (dropped 0, overlimits 0 requeues 0) 
 backlog 0b 0p requeues 0
  maxpacket 0 drop_overlimit 0 new_flow_count 0 ecn_mark 0
  new_flows_len 0 old_flows_len 0
qdisc cake 8013: dev ifb4eth0.2 root refcnt 2 bandwidth 232750Kbit besteffort triple-isolate wash split-gso rtt 100.0ms noatm overhead 18 
 Sent 148570176 bytes 120706 pkt (dropped 297, overlimits 622 requeues 0) 
 backlog 0b 0p requeues 0
 memory used: 661056b of 11637500b
 capacity estimate: 232750Kbit
 min/max network layer size:           46 /    1500
 min/max overhead-adjusted size:       64 /    1518
 average network hdr offset:           14

                  Tin 0
  thresh     232750Kbit
  target          5.0ms
  interval      100.0ms
  pk_delay        245us
  av_delay         45us
  sp_delay          4us
  backlog            0b
  pkts           121003
  bytes       149019834
  way_inds            6
  way_miss          384
  way_cols            0
  drops             297
  marks               0
  ack_drop            0
  sp_flows            0
  bk_flows            1
  un_flows            0
  max_len         12112
  quantum          1514

Device problem occurs on TP-Link AC1750 Archer C7 v4
OpenWrt 18.06.0 release, packages, etc.

I have seen that NUT package runs without issues on Raspberry Pi + board. However, when I tried to install NUT from OpenWrt 18.06.0, I noticed that I cannot perform a forced shutdown command which is very critical for my application.

When I try to execute forced shutdown command (upsdrvctl shutdown), I get the following error:

root@TPLINKAC1750:~# upsdrvctl shutdown
Network UPS Tools - UPS driver controller 2.7.4
Network UPS Tools - Generic HID driver 0.41 (2.7.4)
USB communication driver 0.33
Can’t claim USB device [0764:0501]: No such file or directory
Driver failed to start (exit status=1)

Also, when I try to read the USB descriptors using lsusb, it says “UNAVAILABLE”.
Report Descriptors:
* UNAVAILABLE *

There seems to be a hotplug issue on the USB. If I unplug/re-plug the USB, the USB descriptors are complete when queried and the forced shutdown command succeeds.

root@TPLINKAC1750:~# upsdrvctl shutdown
Network UPS Tools - UPS driver controller 2.7.4
Network UPS Tools - Generic HID driver 0.41 (2.7.4)
USB communication driver 0.33
Using subdriver: CyberPower HID 0.4
Initiating UPS shutdown

Upgrade an MR24 from LEDE 17.01.5 to 18.06.1, and wait a day. Device locks up. WIFI is still advertised, but lan port is no longer pingable.

After i have flashed Openwrt 18.06.1 on my Archer c2600 the tftp recovery dont work anymore. I updated the Openwrt factory image over the web interface. Now i have tried to flash back the original firmware over tftp but it dont work. Im able to start the recovery, and the image is transferred over tftp from my pc, but the router just reboots and load Openwrt again. If i try to flash the Openwrt factory image it also dont work this way anymore. This is a big problem, because somebody would have trouble with the system, he would not be able to recover the router. Also because its not very easy to connect the serial port from the router.

I’m building OpenWrt trunk (commit dceee8cc09a54f96dee82a6e95e3e77a6dd7ac13) for Netgear R7800 (though I think, device doesn’t matter here).

It turns out that if both CONFIG_PKG_ASLR_PIE and CONFIG_USE_MKLIBS are turned on, the system renders unusable. In my case, when building with GCC 7, dropbear doesn’t start, and when building with GCC 8, the system doesn’t boot, and the status LED is off.

The culprit is this line: https://git.openwrt.org/?p=openwrt/openwrt.git;a=blob;f=include/rootfs.mk;h=76425c017a8b33340dbcc41cecaf1241352c7dbc;hb=HEAD#l7

      # first find all programs and add them to the mklibs list
      find $(STAGING_DIR_ROOT) -type f -perm /100 -exec \
              file -r -N -F '' {} + | \
              awk ' /executable.*dynamically/ { print $$1 }' > $(TMP_DIR)/mklibs-progs

It should generate the list of executables for mklibs, however, with PIE turned on, most of the executables don’t get into that list. In my config, only fw_printenv gets into the mklibs-progs list. And, because some executables are not on the list, the symbols they need may be stripped off the libraries, rendering these executables unusable.

The reason is that the file command detects PIE executables as shared objects, not as executables. Compare:

  With ASLR off:
  bin/busybox ELF 32-bit LSB executable, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-musl-armhf.so.1, with debug_info, not stripped

  With ASLR on:
  bin/busybox ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-musl-armhf.so.1, with debug_info, not stripped

  This one single executable displays the same, independently of ASLR state:
  usr/sbin/fw_printenv ELF 32-bit LSB executable, ARM, EABI5 version 1 (SYSV), dynamically linked, interpreter /lib/ld-musl-armhf.so.1, stripped

If CONFIG_PKG_ASLR_PIE=n, all executables are detected properly and get into the mklibs-progs list.

A more proper way should be found to detect executables, as the current one skips PIE executables completely and makes the system unusable, because some of the PIE executables can’t start due to missing symbols in libraries.

I’ve chosen the critical severity, because the system doesn’t work if I set those two config options to y, and this combination isn’t something unusual, because many people would like both increased security and smaller size of the firmware.

The router reboots continuously while booting into OpenWrt 18.06.1. The same thing happens on version 18.06.0 as well.
Last working one is LEDE 17.01.6 .

Boot log:

CFE version 1.0.37-102.6 for BCM96368 (32bit,SP,BE)
Build Date: Fri Apr 16 15:18:13 CST 2010 (lihua@IBM_x3500)
Copyright (C) 2000-2008 Broadcom Corporation.

Parallel flash device: name AM29LV320MB, id 0x2200, size 8192KB
CPU type 0x2A031: 400MHz, Bus: 160MHz, Ref: 64MHz
CPU running TP0
Total memory: 67108864 bytes (64MB)
Boot Address 0xb8000000


Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host (f/h)         : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 1
Boot image (0=latest, 1=previous) : 0
Board Id (0-6)                    : HW65x
Number of MAC Addresses (1-32)    : 11
Base MAC Address                  : 02:10:18:01:00:01
PSI Size (1-64) KBytes            : 64
Main Thread Number [0|1]          : 0

*** Press any key to stop auto run (2 seconds) ***
Auto run second count down: 0
LZMA: Prossible old LZMA format, trying to decompress..
Decompression OK!
Entry at 0x80a00000
Closing network.
Disabling Switch ports.
Flushing Receive Buffers...
0 buffers found.
Closing DMA Channels.
Starting program at 0x80a00000
[    0.000000] Linux version 4.9.120 (buildbot@builds-03.infra.lede-project.org) (gcc version 7.3.0 (OpenWrt GCC 7.3.0 r7102-3f3a2c9) ) #0 SMP Wed Aug 15 20:42:39 2018
[    0.000000] Detected Broadcom 0x6368 CPU revision b2
[    0.000000] CPU frequency is 400 MHz
[    0.000000] 64MB of RAM installed
[    0.000000] board_bcm963xx: Boot address 0xb8000000
[    0.000000] board_bcm963xx: CFE version: 1.0.37-102.6
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0002a031 (Broadcom BMIPS4350)
[    0.000000] board: board name: HW65x
[    0.000000] MIPS: machine is Huawei HG655b
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
[    0.000000] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] percpu: Embedded 12 pages/cpu @8108a000 s17440 r8192 d23520 u49152
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Memory: 58636K/65536K available (3773K kernel code, 183K rwdata, 588K rodata, 1336K init, 227K bss, 6900K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=16, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000] NR_IRQS:256
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 9556302233 ns
[    0.000015] sched_clock: 32 bits at 200MHz, resolution 5ns, wraps every 10737418237ns
[    0.008130] Calibrating delay loop... 397.82 BogoMIPS (lpj=795648)
[    0.042781] pid_max: default: 32768 minimum: 301
[    0.047767] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.054541] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.069410] SMP: Booting CPU1...
[   11.992235] Primary instruction cache 64kB, VIPT, 4-way, linesize 16 bytes.
[   11.992251] Primary data cache 32kB, 2-way, VIPT, cache aliases, linesize 16 bytes
[   11.992575] CPU1 revision is: 0002a031 (Broadcom BMIPS4350)
[    0.121564] Synchronize counters for CPU 1:
[    0.121565] done.
[    0.121573] SMP: CPU1 is running
[    0.131460] Brought up 2 CPUs
[    0.142908] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.152949] futex hash table entries: 512 (order: 1, 8192 bytes)
[    0.159260] pinctrl core: initialized pinctrl subsystem
[    0.166652] NET: Registered protocol family 16
[    0.175484] Can't analyze schedule() prologue at 803baf08
[    0.197227] registering PCI controller with io_map_base unset
[    0.203139] registering PCI controller with io_map_base unset
[    0.234630] PCI host bridge to bus 0000:00
[    0.238879] pci_bus 0000:00: root bus resource [mem 0x30000000-0x37ffffff]
[    0.245938] pci_bus 0000:00: root bus resource [io  0x8000000-0x8007fff]
[    0.252837] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.259812] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.276363] pci 0000:00:01.0: BAR 0: assigned [mem 0x30000000-0x3000ffff]
[    0.284076] PCI host bridge to bus 0000:01
[    0.288281] pci_bus 0000:01: root bus resource [mem 0x38000000-0x3fffffff]
[    0.295332] pci_bus 0000:01: root bus resource [io  0x8008000-0x800ffff]
[    0.302249] pci_bus 0000:01: root bus resource [??? 0x00000000 flags 0x0]
[    0.309225] pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff]
[    0.317823] pci 0000:01:1e.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.326326] pci 0000:01:1e.0: BAR 10: assigned [mem 0x38000000-0x3fffffff]
[    0.333401] pci 0000:01:1e.0: BAR 7: assigned [io  0x8008000-0x80080ff]
[    0.340186] pci 0000:01:1e.0: BAR 8: assigned [io  0x8008400-0x80084ff]
[    0.346986] pci 0000:01:1e.0: CardBus bridge to [bus 02-05]
[    0.352727] pci 0000:01:1e.0:   bridge window [io  0x8008000-0x80080ff]
[    0.359528] pci 0000:01:1e.0:   bridge window [io  0x8008400-0x80084ff]
[    0.366347] pci 0000:01:1e.0:   bridge window [mem 0x38000000-0x3fffffff]
[    0.380818] clocksource: Switched to clocksource MIPS
[    0.388361] NET: Registered protocol family 2
[    0.394665] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.401924] TCP bind hash table entries: 1024 (order: 1, 8192 bytes)
[    0.408534] TCP: Hash tables configured (established 1024 bind 1024)
[    0.415436] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.421530] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.428514] NET: Registered protocol family 1
[    0.435230] Crashlog allocated RAM at address 0x3f00000
[    0.444861] random: fast init done
[    0.450589] workingset: timestamp_bits=30 max_order=14 bucket_order=0
[    0.471721] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.477733] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.512734] io scheduler noop registered
[    0.516874] io scheduler deadline registered (default)
[    0.525247] bcm6368-pinctrl 10000080.pin-controller: registered at mmio b0000080
[    0.534012] 10000100.serial: ttyS0 at MMIO 0x10000100 (irq = 10, base_baud = 1562500) is a bcm63xx_uart
[    0.543754] console [ttyS0] enabled
[    0.543754] console [ttyS0] enabled
[    0.550889] bootconsole [early0] disabled
[    0.550889] bootconsole [early0] disabled
[    0.559894] bcm63xx-rng bcm63xx-rng: registered RNG driver
[    0.566702] 18000000.nor: Found 1 x16 devices at 0x0 in 16-bit bank. Manufacturer ID 0x000001 Chip ID 0x001000
[    0.577107] Amd/Fujitsu Extended Query Table at 0x0040
[    0.582383]   Amd/Fujitsu Extended Query version 1.3.
[    0.587560] number of CFI chips: 1
[    0.591665] bcm63xxpart: Partition 0 is CFE offset 0 and length 10000
[    0.598317] bcm63xxpart: Partition 1 is nvram offset 7f0000 and length 10000
[    0.605576] bcm63xxpart: Partition 2 is linux offset 10000 and length 7e0000
[    0.612884] 3 bcm63xxpart partitions found on MTD device 18000000.nor
[    0.619494] Creating 3 MTD partitions on "18000000.nor":
[    0.624958] 0x000000000000-0x000000010000 : "CFE"
[    0.631868] 0x0000007f0000-0x000000800000 : "nvram"
[    0.638937] 0x000000010000-0x0000007f0000 : "linux"
[    0.646345] parser_imagetag: rootfs: CFE image tag at 0x0 CRC invalid (expected 0212102b, actual 24b1b887)
[    0.657859] bcm63xx-spi 10000800.spi: at [mem 0x10000800-0x10000f0b flags 0x200] (irq 9, FIFOs size 542)
[    0.669448] libphy: Fixed MDIO Bus: probed
[    0.717976] b53_common: found switch: BCM63xx, rev 0
[    0.723524] bcm63xx-wdt bcm63xx-wdt:  started, timer margin: 30 sec
[    0.733982] NET: Registered protocol family 10
[    0.741672] NET: Registered protocol family 17
[    0.746347] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    0.759683] 8021q: 802.1Q VLAN Support v1.8
[    0.774484] VFS: Cannot open root device "(null)" or unknown-block(0,0): error -6
[    0.782230] Please append a correct "root=" boot option; here are the available partitions:
[    0.790832] 1f00              64 mtdblock0 [    0.794921]  (driver?)
[    0.797342] 1f01              64 mtdblock1 [    0.801455]  (driver?)
[    0.803858] 1f02            8064 mtdblock2 [    0.807994]  (driver?)
[    0.810425] Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)
[    0.820791] Rebooting in 1 seconds..
[    1.819072] triggering watchdog soft-reset...

- Device problem occurs on
Attempting build for Raspberry Pi 3B+ with gdbserver included

- Software versions of OpenWrt/LEDE release, packages, etc.
commit d3bf5ff9bc7b55b2a3dab93853b33a0cd2c4ca47 (HEAD → master, origin/master, origin/HEAD)
Author: Jonas Gorski jonas.gorski@gmail.com Date: Mon Sep 10 11:42:53 2018 +0200

- Steps to reproduce
(I successfully built and ran it without gdbserver.)
In menuconfig, selected the correct SoC, added Luci, then followed https://openwrt.org/docs/guide-developer/gdb:
“Compiling Tools” - exactly as described.
“Add debugging to a package” - option “Global build settings > Compile packages with debugging info” (whether this is activated or not has no effect on the problem)

gdb compilation for the target fails, see error below.

I reverted 2 last commits to the gdb package, to what it was at this commit:
commit 525b8f06501233414ad6e56fe1134ae82ab28fc2
Author: Rosen Penev rosenp@gmail.com
Date: Wed Jun 6 18:22:26 2018 -0700

using these commands:
cd package/devel
git checkout 525b8f06501 gdb

and the build succeeded. Looks like the updated gdb

.config is attached.

aarch64-openwrt-linux-musl-g++ -x c++ -Os -pipe -mcpu=cortex-a53 -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -iremap/mnt/1TB/ow/openwrt/build_dir/target-aarch64_cortex-a53_musl/gdb-8.2:gdb-8.2 -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro -I. -I. -I./common -I./config -DLOCALEDIR=”“/usr/share/locale”” -DHAVE_CONFIG_H -I./../include/opcode -I./../opcodes/.. -I./../zlib -I../bfd -I./../bfd -I./../include -I../libdecnumber -I./../libdecnumber -I./gnulib/import -Ibuild-gnulib/import -DTUI=1 -Wall -Wpointer-arith -Wno-unused -Wunused-value -Wunused-function -Wno-switch -Wno-char-subscripts -Wempty-body -Wunused-but-set-parameter -Wunused-but-set-variable -Wno-sign-compare -Wno-narrowing -Wno-error=maybe-uninitialized -Wsuggest-override -Wimplicit-fallthrough=3 -Wduplicated-cond -Wformat-nonliteral -c -o aarch64-linux-nat.o -MT aarch64-linux-nat.o -MMD -MP -MF ./.deps/aarch64-linux-nat.Tpo aarch64-linux-nat.c
In file included from nat/aarch64-sve-linux-ptrace.h:23:0,
from aarch64-linux-nat.c:35:
/mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/asm/sigcontext.h:26:8: error: redefinition of ‘struct sigcontext’ struct sigcontext {

In file included from /mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/signal.h:48:0,
from build-gnulib/import/signal.h:52,
from linux-nat.h:23,
from aarch64-linux-nat.c:26:
/mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/bits/signal.h:18:16: note: previous definition of ‘struct sigcontext’ typedef struct sigcontext {

In file included from nat/aarch64-sve-linux-ptrace.h:23:0,
from aarch64-linux-nat.c:35:
/mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/asm/sigcontext.h:63:8: error: redefinition of ‘struct _aarch64_ctx’ struct _aarch64_ctx {

In file included from /mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/signal.h:48:0,
from build-gnulib/import/signal.h:52,
from linux-nat.h:23,
from aarch64-linux-nat.c:26:
/mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/bits/signal.h:29:8: note: previous definition of ‘struct _aarch64_ctx’ struct _aarch64_ctx {

In file included from nat/aarch64-sve-linux-ptrace.h:23:0,
from aarch64-linux-nat.c:35:
/mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/asm/sigcontext.h:70:8: error: redefinition of ‘struct fpsimd_context’ struct fpsimd_context {

In file included from /mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/signal.h:48:0,
from build-gnulib/import/signal.h:52,
from linux-nat.h:23,
from aarch64-linux-nat.c:26:
/mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/bits/signal.h:33:8: note: previous definition of ‘struct fpsimd_context’ struct fpsimd_context {

In file included from nat/aarch64-sve-linux-ptrace.h:23:0,
from aarch64-linux-nat.c:35:
/mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/asm/sigcontext.h:80:8: error: redefinition of ‘struct esr_context’ struct esr_context {

In file included from /mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/signal.h:48:0,
from build-gnulib/import/signal.h:52,
from linux-nat.h:23,
from aarch64-linux-nat.c:26:
/mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/bits/signal.h:39:8: note: previous definition of ‘struct esr_context’ struct esr_context {

In file included from nat/aarch64-sve-linux-ptrace.h:23:0,
from aarch64-linux-nat.c:35:
/mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/asm/sigcontext.h:113:8: error: redefinition of ‘struct extra_context’ struct extra_context {

In file included from /mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/signal.h:48:0,
from build-gnulib/import/signal.h:52,
from linux-nat.h:23,
from aarch64-linux-nat.c:26:
/mnt/1TB/ow/openwrt/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.4.0_musl/include/bits/signal.h:43:8: note: previous definition of ‘struct extra_context’ struct extra_context {

aarch64-linux-nat.c: In function ‘void store_sveregs_to_thread(regcache*)’:
aarch64-linux-nat.c:419:59: error: invalid use of incomplete type ‘struct store_sveregs_to_thread(regcache*)::user_sve_header’ iovec.iov_len = 1)→size;

aarch64-linux-nat.c:419:28: note: forward declaration of ‘struct store_sveregs_to_thread(regcache)::user_sve_header’ iovec.iov_len = 2)→size;

Makefile:1622: recipe for target ‘aarch64-linux-nat.o’ failed

Hi,
The sha1 file in openwrt/tools/firmware-utils/src/sha1.c is not fixed and is vulnerable to remote code execution or DoS. The CVE (CVE-2018-0487) and fixed in multiple other repos including ubuntu. (https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-0487.html)

Device: TP-LINK RE350 v1
OpenWRT: 18.06-SNAPSHOOT 22.01.2019
Wireless setup:

  config wifi-device 'radio0'
      option type 'mac80211'
      option channel '1'
      option hwmode '11g'
      option path 'pci0000:00/0000:00:00.0/0000:01:00.0'
      option ldpc '1'
      option greenfield '0'
      option diversity '1'
      option htmode 'HT40'
      option country 'PL'
      option log_level '8'
      option disabled '0'
      option legacy_rates '0'
      option noscan '1'

  config wifi-iface
      option device 'radio0'
      option mode 'sta'
      option ssid 'XXX'
      option bssid 'xxx'
      option encryption 'psk2'
      option key 'xxx'
      option disassoc_low_ack '0'
      option network 'wan'
      option disabled '0'
      option wmm '1'

  config wifi-iface
      option device 'radio0'
      option mode 'ap'
      option ssid 'XXX'
      option encryption 'psk2'
      option key 'xxx'
      option disassoc_low_ack '0'
      option network 'lan'
      option disabled '0'
      option wds '1'
      option wmm '1'

Problem and solution:
AP and STA works on Channel 1. STA few seconds after connection to upstream AP losts RX stream.

  Station xx:xx:xx:xx:xx:xx (on wlan0)
      inactive time:  20570 ms
      rx bytes:       222792
      rx packets:     1657
      tx bytes:       1482
      tx packets:     20
      tx retries:     133
      tx failed:      12
      beacon loss:    10
      beacon rx:      756
      rx drop misc:   2
      signal:         -68 [-68, -69] dBm
      signal avg:     -68 [-68, -68] dBm
      beacon signal avg:      188 dBm
      tx bitrate:     43.3 MBit/s MCS 10 short GI
      **rx bitrate:     1.0 MBit/s**
      authorized:     yes
      authenticated:  yes
      associated:     yes
      preamble:       long
      WMM/WME:        yes
      MFP:            no
      TDLS peer:      no
      DTIM period:    2
      beacon interval:100
      short slot time:yes
      connected time: 83 seconds

This is 100 % reproducible with a fresh and unchanged installation of OpenWRT 18.06.2 on a GL-Inet GL-AR150, and it gave me quite some headache until I found out what’s happening here:

If a LAN cable is plugged during the device’s boot process and one does a DHCP request when it’s ready, the router offers an IPv4 address (as expected) and one can access it on 192.168.1.1. This is also the case for a DHCP request via WLAN, as soon as one does enable it.

If however the device is powered up without a LAN cable being plugged, no IPv4 address will be offered, neither for a LAN nor for a WLAN connection. One can connect to the router via the IPv6 address to be found in /etc/resov.conf (on the client) though, but not via IPv4. This is also the case if a LAN cable is plugged after booting.

Looking at /var/etc/dnsmasq.conf.cfg01411c, it does contain the line

  dhcp-range=set:lan,192.168.1.100,192.168.1.249,255.255.255.0,12h

if a LAN cable has been plugged during bootup, and no such entry if none has been plugged.

This makes the device completely unusable for what I intend to use it ... as this happens with a completely unaltered, fresh installation, I suppose this is no misconfiguration but a bug?

The kernel 4.14.107 is unable to boot on the Hg556a (BCM6358).

Steps to reproduce:

  Intall the latest trunk version kernel 4.14.107

Sympthoms:

  No Boot
  It stucks at “random: fast init done”, and apparently no more kernel messages
  But after a minute it spits the last message random: crng init done

Boot Log:

*** Press any key to stop auto run (1 seconds) ***
Auto run second count down: 0
boot kernel from be020100
Code Address: 0x80A00000, Entry Address: 0x80a00000
Decompression OK!
Entry at 0x80a00000
Closing network.
Starting program at 0x80a00000
[    0.000000] Linux version 4.14.107 (hg556a@localhost.localdomain) (gcc version 7.4.0 (OpenWrt GCC 7.4.0 r9015-34696ce25e)) #0 Thu Mar 10 15:47:43 2019
[    0.000000] Detected Broadcom 0x6358 CPU revision a1
[    0.000000] CPU frequency is 300 MHz
[    0.000000] 64MB of RAM installed
[    0.000000] board_bcm963xx: Boot address 0xbe000000
[    0.000000] board_bcm963xx: CFE version: d081.5003
[    0.000000] bcm63xx_nvram: nvram checksum failed, contents may be invalid (expected 33313330, got 3c502ae7)
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 0002a010 (Broadcom BMIPS4350)
[    0.000000] board: board name: HW556_B
[    0.000000] MIPS: machine is Huawei EchoLife HG556a (version B)
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 04000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 16kB, VIPT, 2-way, linesize 16 bytes.
[    0.000000] Primary data cache 16kB, 2-way, VIPT, cache aliases, linesize 16 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] random: get_random_bytes called from start_kernel+0x80/0x488 with crng_init=0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16256
[    0.000000] Kernel command line: rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
[    0.000000] PID hash table entries: 256 (order: -2, 1024 bytes)
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Memory: 54392K/65536K available (6369K kernel code, 343K rwdata, 2132K rodata, 1324K init, 256K bss, 11144K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=16, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 12741736309 ns
[    0.000026] sched_clock: 32 bits at 150MHz, resolution 6ns, wraps every 14316557820ns
[    1.034043] random: fast init done
[   53.820705] random: crng init done

One of 5 EA3500’s, each at a different site, keeps crashing and restarting. Both 18.06.2 and Snapshot r9614-b614954 are suffering it at this particular site. I could finally keep it booting up after disabling radio1 (5 GHz). Other 4 sites have no trouble with the same system and wireless configuration.

I can pretty much rule out hardware problems. Just boot up Snapshot r9614-b614954 on an EA4500, whose radio1 (5G) worked on another site. It suffers the same infinite crash/restart sequence. At least 3 different devices worked at different locations, but crash only at this one.

From the serial console: A crash at backports-4.19.23-1/net/mac80211/rx.c:4516 ieee80211_rx_napi+0x1fc/0xa54 [mac80211]

[   22.960919] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   23.010664] br-lan: port 1(eth0.1) entered blocking state
[   23.016172] br-lan: port 1(eth0.1) entered disabled state
[   23.021848] device eth0.1 entered promiscuous mode
[   23.026687] device eth0 entered promiscuous mode
[   23.110502] br-lan: port 1(eth0.1) entered blocking state
[   23.115976] br-lan: port 1(eth0.1) entered forwarding state
[   23.121730] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   23.191580] mv643xx_eth_port mv643xx_eth_port.1 eth1: link up, 1000 Mb/s, full duplex, flow control disabled
[   23.202650] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
[   24.009012] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   24.015903] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   24.022546] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[   25.052979] 0000:01:00.0: unable to load firmware helper image
[   25.058872] ieee80211 phy0: Cannot start firmware
[   25.063675] ieee80211 phy0: Trying to reload the firmware again
[   25.987785] ieee80211 phy0: 88w8366 v7, 20aa4b891bf2, AP firmware 5.2.8.17
[   26.047574] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[   26.113947] 0000:02:00.0: unable to load firmware helper image
[   26.119821] ieee80211 phy1: Cannot start firmware
[   26.124636] ieee80211 phy1: Trying to reload the firmware again
[   26.511780] ieee80211 phy1: 88w8366 v7, 20aa4b891bf4, AP firmware 5.2.8.17
[   26.565994] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[   26.577344] br-lan: port 2(wlan0) entered blocking state
[   26.582745] br-lan: port 2(wlan0) entered disabled state
[   26.588309] device wlan0 entered promiscuous mode
[   26.614795] br-lan: port 3(wlan1) entered blocking state
[   26.620186] br-lan: port 3(wlan1) entered disabled state
[   26.625800] device wlan1 entered promiscuous mode
[   27.137261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   27.143826] br-lan: port 2(wlan0) entered blocking state
[   27.149170] br-lan: port 2(wlan0) entered forwarding state
[   27.179154] ------------[ cut here ]------------
[   27.183961] WARNING: CPU: 0 PID: 0 at backports-4.19.23-1/net/mac80211/rx.c:4516 ieee80211_rx_napi+0x1fc/0xa54 [mac80211]
[   27.194991] Modules linked in: pppoe ppp_async pppox ppp_generic nf_conntrack_ipv6 mwl8k mac80211 iptable_nat ipt_REJECT ipt_MASQUERADE cfg80211 xt_time xt_tcpudp xt_state xt_nat xt_multiport xt_mark xt_mac xt_limit xt_conntrack xt_comment xt_TCPMSS xt_REDIRECT xt_LOG xt_FLOWOFFLOAD xt_CT slhc nf_reject_ipv4 nf_nat_redirect nf_nat_masquerade_ipv4 nf_conntrack_ipv4 nf_nat_ipv4 nf_nat nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_defrag_ipv6 nf_defrag_ipv4 nf_conntrack_rtcache nf_conntrack iptable_mangle iptable_filter ip_tables crc_ccitt compat nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 tun gpio_button_hotplug
[   27.254721] CPU: 0 PID: 0 Comm: swapper Not tainted 4.14.105 #0
[   27.260669] Hardware name: Marvell Kirkwood (Flattened Device Tree)
[   27.266969] Backtrace: 
[   27.269438] [<c010530c>] (dump_backtrace) from [<c01055f4>] (show_stack+0x18/0x1c)
[   27.277057]  r7:bf1f012c r6:00000000 r5:bf227600 r4:00000000
[   27.282772] [<c01055dc>] (show_stack) from [<c058b880>] (dump_stack+0x20/0x28)
[   27.290036] [<c058b860>] (dump_stack) from [<c01196b0>] (__warn+0xdc/0x108)
[   27.297048] [<c01195d4>] (__warn) from [<c0119794>] (warn_slowpath_null+0x28/0x30)
[   27.304665]  r9:c7104ff0 r8:bf226390 r7:bf226318 r6:c71058a0 r5:c7104bc0 r4:c72be9c0
[   27.312535] [<c011976c>] (warn_slowpath_null) from [<bf1f012c>] (ieee80211_rx_napi+0x1fc/0xa54 [mac80211])
[   27.322376] [<bf1eff30>] (ieee80211_rx_napi [mac80211]) from [<bf1cb68c>] (ieee80211_tasklet_handler+0x64/0xc0 [mac80211])
[   27.333486]  r10:00000000 r9:c7104ff0 r8:bf226390 r7:bf226318 r6:c7104bc0 r5:c7104fe4
[   27.341359]  r4:c72be9c0
[   27.343976] [<bf1cb628>] (ieee80211_tasklet_handler [mac80211]) from [<c011c5dc>] (tasklet_action+0x88/0xd8)
[   27.353865]  r9:00000100 r8:ffffe000 r7:00000000 r6:c082a000 r5:c08085fc r4:00000000
[   27.361664] [<c011c554>] (tasklet_action) from [<c0101464>] (__do_softirq+0xac/0x25c)
[   27.369534]  r7:c082a020 r6:40000006 r5:c082a038 r4:00000006
[   27.375236] [<c01013b8>] (__do_softirq) from [<c011c940>] (irq_exit+0xc8/0x110)
[   27.382594]  r10:00000000 r9:c0801f00 r8:c7805200 r7:00000001 r6:00000000 r5:c0829178
[   27.390458]  r4:00000000
[   27.393022] [<c011c878>] (irq_exit) from [<c01465e4>] (__handle_domain_irq+0x8c/0xa8)
[   27.400893] [<c0146558>] (__handle_domain_irq) from [<c010138c>] (orion_handle_irq+0x74/0xa0)
[   27.409469]  r9:c0801f00 r8:00000001 r7:c085564c r6:c780801c r5:00000400 r4:0000000a
[   27.417263] [<c0101318>] (orion_handle_irq) from [<c01060c8>] (__irq_svc+0x68/0x84)
[   27.424968] Exception stack(0xc0801f00 to 0xc0801f48)
[   27.430044] 1f00: 00000000 00000000 00000000 60000013 00000000 ffffe000 c0803094 c08206e0
[   27.438271] 1f20: c080a852 c065e3e0 00000000 c0801f5c c0801f50 c0801f50 c0102ec0 c05a6814
[   27.446494] 1f40: 60000013 ffffffff
[   27.450004]  r10:00000000 r9:c0800000 r8:c080a852 r7:c0801f34 r6:ffffffff r5:60000013
[   27.457875]  r4:c05a6814
[   27.460441] [<c05a67dc>] (default_idle_call) from [<c013fdb8>] (do_idle+0x84/0x144)
[   27.468154] [<c013fd34>] (do_idle) from [<c01400d8>] (cpu_startup_entry+0x14/0x18)
[   27.475774]  r10:00721c14 r9:c0723a20 r8:c7ffcc80 r7:00000000 r6:c0803020 r5:ffffffff
[   27.483654]  r4:c0809c4c r3:40000013
[   27.487258] [<c01400c4>] (cpu_startup_entry) from [<c05a1660>] (rest_init+0x74/0x94)
[   27.495063] [<c05a15ec>] (rest_init) from [<c0700d3c>] (start_kernel+0x3a0/0x424)
[   27.502595]  r5:ffffffff r4:c08299a0
[   27.506188] [<c070099c>] (start_kernel) from [<00008048>] (0x8048)
[   27.512404] ---[ end trace 351d5fe97981d9fa ]---

This is the same as issue 20982 on dev.openwrt.org

Using the nightly build of LEDE and installing on a Ubiquiti PicoStation M2 (Ar7xxx, XM hardware rev, AirOS 5.6.3), got the following error:

sent DATA <block=6657, 412 bytes>
received ERROR <code=2, msg=Firmware check failed>
Error code 2: Firmware check failed
Sent 3407872 bytes in 6.6 seconds

The only work-around I have found works consistently is to:

Flash from recovery (tftp) the AirOS 5.6 image,
Downgrade to AirOS 5.5, then
Flash LEDE (or OpenWRT).

This same error seems to occur on the Bullet M2 (same hardware) and the NanoStation LOCO M2.

The severity is high - it can be worked around, but it prevents installation without significant work-arounds. I view this as a high-priority bug, because the Ubiquiti hardware is popular and the problem has been fixed in AirOS and DD-WRT.

PPPoE is broken on WRT1900ACS

Upgraded from Lede r578 to latest Lede r1814 and PPPOE doesn’t work anymore altough the pppd version and PPPoE version are the same:
- Linksys WRT1900ACS
- LEDE reboot r1814

pppd debug log:

Plugin rp-pppoe.so loaded.
RP-PPPoE plugin version 3.8p compiled against pppd 2.4.7
Send PPPOE Discovery V1T1 PADI session 0×0 length 4
dst ff:ff:ff:ff:ff:ff src c2:56:27:ca:d7:d4
[service-name]
Send PPPOE Discovery V1T1 PADI session 0×0 length 4
dst ff:ff:ff:ff:ff:ff src c2:56:27:ca:d7:d4
[service-name]
Send PPPOE Discovery V1T1 PADI session 0×0 length 4
dst ff:ff:ff:ff:ff:ff src c2:56:27:ca:d7:d4
[service-name]
Timeout waiting for PADO packets
Unable to complete PPPoE Discovery
Plugin rp-pppoe.so loaded.
RP-PPPoE plugin version 3.8p compiled against pppd 2.4.7
Send PPPOE Discovery V1T1 PADI session 0×0 length 4
dst ff:ff:ff:ff:ff:ff src c2:56:27:ca:d7:d4
[service-name]
Send PPPOE Discovery V1T1 PADI session 0×0 length 4
dst ff:ff:ff:ff:ff:ff src c2:56:27:ca:d7:d4
[service-name]
Send PPPOE Discovery V1T1 PADI session 0×0 length 4
dst ff:ff:ff:ff:ff:ff src c2:56:27:ca:d7:d4
[service-name]

While on the same hardware running LEDE r578, the PPPoE module works as expected:

Plugin rp-pppoe.so loaded.
RP-PPPoE plugin version 3.8p compiled against pppd 2.4.7
Send PPPOE Discovery V1T1 PADI session 0×0 length 4
dst ff:ff:ff:ff:ff:ff src c2:56:27:ca:d7:d4
[service-name]
Recv PPPOE Discovery V1T1 PADO session 0×0 length 40
dst c2:56:27:ca:d7:d4 src a0:f3:e4:34:d8:21
[service-name] [AC-name acc-aln1.hac] [AC-cookie 75 58 37 a5 ba 3c e4 a5 2a 61 bb 23 92 5c 1b dc]
Send PPPOE Discovery V1T1 PADR session 0×0 length 24
dst a0:f3:e4:34:d8:21 src c2:56:27:ca:d7:d4
[service-name] [AC-cookie 75 58 37 a5 ba 3c e4 a5 2a 61 bb 23 92 5c 1b dc]
Recv PPPOE Discovery V1T1 PADS session 0x30b length 4
dst c2:56:27:ca:d7:d4 src a0:f3:e4:34:d8:21
[service-name]
PADS: Service-Name: ‘’ PPP session is 779
Connected to a0:f3:e4:34:d8:21 via interface eth0
using channel 2
Using interface pppoe-wan
Connect: pppoe-wan ←→ eth0
sent [LCP ConfReq id=0×1 <mru 1492> <magic 0xc6952556>]
rcvd [LCP ConfReq id=0×66 <mru 1492> <auth chap MD5> <magic 0x4cc73648>]
sent [LCP ConfAck id=0×66 <mru 1492> <auth chap MD5> <magic 0x4cc73648>]
rcvd [LCP ConfAck id=0×1 <mru 1492> <magic 0xc6952556>]
sent [LCP EchoReq id=0×0 magic=0xc6952556]
rcvd [CHAP Challenge id=0×1 <7131a44524d1de8f1cd1061cac6d8c071d8bfe7351bc4ea7bd08f56684428475f229ba177a192696ebab32>, name = “acc-aln1.hac”]
sent [CHAP Response id=0×1 <4bb1a418b298790b128ad4d7ef3109ad>, name = “bthomehub@btbroadband.com”]
rcvd [LCP EchoRep id=0×0 magic=0x4cc73648]
rcvd [CHAP Success id=0×1 “CHAP authentication success”]
CHAP authentication succeeded: CHAP authentication success
CHAP authentication succeeded
peer from calling number A0:F3:E4:34:D8:21 authorized
sent [IPCP ConfReq id=0×1 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>]
sent [IPV6CP ConfReq id=0×1 <addr fe80::c595:37d1:3987:1929>]
rcvd [IPV6CP ConfReq id=0x7b <addr fe80::0221:05ff:feb4:8824>]
sent [IPV6CP ConfAck id=0x7b <addr fe80::0221:05ff:feb4:8824>]
rcvd [IPCP ConfReq id=0×38 <addr 172.16.12.12>]
sent [IPCP ConfAck id=0×38 <addr 172.16.12.12>]
rcvd [IPCP ConfNak id=0×1 <addr 81.146.2.155> <ms-dns1 81.139.57.100> <ms-dns2 81.139.56.100>]
sent [IPCP ConfReq id=0×2 <addr 81.146.2.155> <ms-dns1 81.139.57.100> <ms-dns2 81.139.56.100>]
rcvd [IPV6CP ConfAck id=0×1 <addr fe80::c595:37d1:3987:1929>]
local LL address fe80::c595:37d1:3987:1929
remote LL address fe80::0221:05ff:feb4:8824
Script /lib/netifd/ppp-up started (pid 2646)
rcvd [IPCP ConfAck id=0×2 <addr 81.146.2.155> <ms-dns1 81.139.57.100> <ms-dns2 81.139.56.100>]
local IP address 81.146.2.155
remote IP address 172.16.12.12
primary DNS address 81.139.57.100
secondary DNS address 81.139.56.100
ppp.log
secondary DNS address 81.139.56.100
Script /lib/netifd/ppp-up started (pid 2653)
Script /lib/netifd/ppp-up finished (pid 2646), status = 0×9 Script /lib/netifd/ppp-up finished (pid 2653), status = 0×9

I am having a problem on a UBNT UAP-LR where, if many clients stay connected the router for a long time, multicast packets will stop being reliably sent to the wireless clients. I can reproduce this with LEDE r1953, but it goes back at least as far as OpenWRT 15.05.1 with kernel 3.18. I can not, however, reproduce it on another network with the same WAP but with only one or two wireless clients.

This originally manifested as IPv6 ceasing to work since the (multicasted) RA packets were not reaching the wireless clients. I used tcpdump on the WAP and determined that the RAs were arriving through the wired interface and leaving through the wireless interface as they should, but tcpdump on the client indicates that a vast majority of the RAs are never received. (Please note that the IPv6 issue is not reproducible with the router running OpenWRT/LEDE and odhcpd, since odhcpd unicasts RAs sent as a response to an RS instead of multicasting them, while it is reproducible when the router is running radvd, for example as pfSense does.)

For the last month or so, and persisting in r2248, when a Ubiquiti Bullet M is booted through typical Ubiquiti 10/100 passive PoE injector, the interface appears to come up in gigabit mode (see timestamp 18.990274 below), despite being only a 10/100 Mbps interface. Restarting /etc/init.d/network fixes it. I am running batman-adv over the ethernet interface, which may be involved. I will check if it happens when batman-adv is not used on the interface and report in a followup comment.

The dmesg look like this:

[    0.000000] Linux version 4.4.32 (openwrt@hawg) (gcc version 5.4.0 (LEDE GCC 5.4.0 r1439) ) #0 Mon Nov 21 07:14:51 2016
[    0.000000] MyLoader: sysp=00030800, boardp=088201a0, parts=fdeffeff
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019374 (MIPS 24Kc)
[    0.000000] SoC: Atheros AR7240 rev 2
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] No valid device tree found, continuing without
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000001ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000001ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000001ffffff]
[    0.000000] On node 0 totalpages: 8192
[    0.000000] free_area_init_node: node 0, pgdat 80412320, node_mem_map 81000000
[    0.000000]   Normal zone: 64 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 8192 pages, LIFO batch:0
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0 
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
[    0.000000] Kernel command line:  board=UBNT-BM mtdparts=spi0.0:256k(u-boot)ro,64k(u-boot-env)ro,7552k(firmware),256k(cfg)ro,64k(EEPROM)ro console=ttyS0,115200 rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 128 (order: -3, 512 bytes)
[    0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 27616K/32768K available (2990K kernel code, 174K rwdata, 756K rodata, 296K init, 198K bss, 5152K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Clocks: CPU:390.000MHz, DDR:390.000MHz, AHB:195.000MHz, Ref:40.000MHz
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 9801335621 ns
[    0.000013] sched_clock: 32 bits at 195MHz, resolution 5ns, wraps every 11012737021ns
[    0.007858] Calibrating delay loop... 259.27 BogoMIPS (lpj=1296384)
[    0.080537] pid_max: default: 32768 minimum: 301
[    0.085319] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.091915] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.102739] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.113516] NET: Registered protocol family 16
[    0.120053] MIPS: machine is Ubiquiti Bullet M
[    0.126714] registering PCI controller with io_map_base unset
[    0.357171] PCI host bridge to bus 0000:00
[    0.361273] pci_bus 0000:00: root bus resource [mem 0x10000000-0x13ffffff]
[    0.368174] pci_bus 0000:00: root bus resource [io  0x0000]
[    0.373719] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.380486] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.388422] pci 0000:00:00.0: [168c:002a] type 00 class 0x028000
[    0.388466] pci 0000:00:00.0: fixup device configuration
[    0.395018] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x0000ffff 64bit]
[    0.395154] pci 0000:00:00.0: supports D1
[    0.395179] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    0.395521] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00
[    0.395573] pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x1000ffff 64bit]
[    0.402864] pci 0000:00:00.0: using irq 40 for pin 1
[    0.408959] clocksource: Switched to clocksource MIPS
[    0.415845] NET: Registered protocol family 2
[    0.421435] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.428393] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.434796] TCP: Hash tables configured (established 1024 bind 1024)
[    0.441291] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.447126] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.453786] NET: Registered protocol family 1
[    0.458221] PCI: CLS 0 bytes, default 32
[    0.464223] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.470512] Crashlog allocated RAM at address 0x1f00000
[    0.495166] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.501050] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.514332] io scheduler noop registered
[    0.518252] io scheduler deadline registered (default)
[    0.523724] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.530709] console [ttyS0] disabled
[    0.554342] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11, base_baud = 12187500) is a 16550A
[    0.563020] console [ttyS0] enabled
[    0.570030] bootconsole [early0] disabled
[    0.582486] m25p80 spi0.0: found mx25l6405d, expected m25p80
[    0.588201] m25p80 spi0.0: mx25l6405d (8192 Kbytes)
[    0.593207] 5 cmdlinepart partitions found on MTD device spi0.0
[    0.599160] Creating 5 MTD partitions on "spi0.0":
[    0.603978] 0x000000000000-0x000000040000 : "u-boot"
[    0.611975] 0x000000040000-0x000000050000 : "u-boot-env"
[    0.619659] 0x000000050000-0x0000007b0000 : "firmware"
[    0.638850] 2 uimage-fw partitions found on MTD device firmware
[    0.644866] 0x000000050000-0x0000001a0000 : "kernel"
[    0.651748] 0x0000001a0000-0x0000007b0000 : "rootfs"
[    0.658927] mtd: device 4 (rootfs) set to be root filesystem
[    0.664753] 1 squashfs-split partitions found on MTD device rootfs
[    0.671002] 0x000000550000-0x0000007b0000 : "rootfs_data"
[    0.678725] 0x0000007b0000-0x0000007f0000 : "cfg"
[    0.685799] 0x0000007f0000-0x000000800000 : "EEPROM"
[    0.713743] libphy: ag71xx_mdio: probed
[    1.302694] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.0:04 [uid=004dd041, driver=Generic PHY]
[    1.312905] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode:MII
[    1.322158] NET: Registered protocol family 10
[    1.332118] NET: Registered protocol family 17
[    1.336691] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[    1.349583] 8021q: 802.1Q VLAN Support v1.8
[    1.362372] VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
[    1.372025] Freeing unused kernel memory: 296K (80436000 - 80480000)
[    2.887723] init: Console is alive
[    2.891524] init: - watchdog -
[    4.278153] usbcore: registered new interface driver usbfs
[    4.283867] usbcore: registered new interface driver hub
[    4.289377] usbcore: registered new device driver usb
[    4.301662] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    4.310384] ehci-platform: EHCI generic platform driver
[    4.319460] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    4.327414] ohci-platform: OHCI generic platform driver
[    4.336259] init: - preinit -
[    5.148878] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[    5.181862] random: procd: uninitialized urandom read (4 bytes read, 8 bits of entropy available)
[    7.440590] eth0: link up (100Mbps/Full duplex)
[    7.445184] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    8.484066] jffs2: notice: (361) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[    8.501955] mount_root: switching to jffs2 overlay
[    8.517794] urandom-seed: Seeding with /etc/urandom.seed
[    8.794632] eth0: link down
[    8.814035] procd: - early -
[    8.817063] procd: - watchdog -
[    9.492101] procd: - ubus -
[    9.545805] random: ubusd: uninitialized urandom read (4 bytes read, 15 bits of entropy available)
[    9.555498] random: ubusd: uninitialized urandom read (4 bytes read, 15 bits of entropy available)
[    9.564637] random: ubusd: uninitialized urandom read (4 bytes read, 15 bits of entropy available)
[    9.574254] random: ubusd: uninitialized urandom read (4 bytes read, 15 bits of entropy available)
[    9.583375] random: ubusd: uninitialized urandom read (4 bytes read, 15 bits of entropy available)
[    9.593373] random: ubusd: uninitialized urandom read (4 bytes read, 16 bits of entropy available)
[    9.602738] random: ubusd: uninitialized urandom read (4 bytes read, 16 bits of entropy available)
[    9.612394] procd: - init -
[   10.066368] Loading modules backported from Linux version wt-2016-10-03-1-g6fcb1a6
[   10.074041] Backport generated by backports.git backports-20160324-9-g0e38f5c
[   10.125220] batman_adv: B.A.T.M.A.N. advanced 2016.4 (compatibility version 15) loaded
[   10.213939] PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
[   10.224958] ath: phy0: Ignoring endianness difference in EEPROM magic bytes.
[   10.233630] ath: EEPROM regdomain: 0x0
[   10.233647] ath: EEPROM indicates default country code should be used
[   10.233661] ath: doing EEPROM country->regdmn map search
[   10.233689] ath: country maps to regdmn code: 0x3a
[   10.233705] ath: Country alpha2 being used: US
[   10.233718] ath: Regpair used: 0x3a
[   10.248634] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[   10.257391] ieee80211 phy0: Atheros AR9280 Rev:2 mem=0xb0000000, irq=40
[   11.870351] random: jshn: uninitialized urandom read (4 bytes read, 19 bits of entropy available)
[   12.001559] random: ubusd: uninitialized urandom read (4 bytes read, 19 bits of entropy available)
[   18.855427] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   18.875510] IPv6: ADDRCONF(NETDEV_UP): br-pub: link is not ready
[   18.990274] eth0: link up (1000Mbps/Full duplex)
[   18.994964] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   19.330349] batman_adv: bat0: Adding interface: eth0
[   19.335365] batman_adv: bat0: The MTU of interface eth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the
 performance. Setting the MTU to 1532 would solve the problem.
[   19.359419] batman_adv: bat0: Interface activated: eth0
[   19.367077] 8021q: adding VLAN 0 to HW filter on device bat0
[   19.406417] device bat0 entered promiscuous mode
[   19.411309] br-pub: port 1(bat0) entered forwarding state
[   19.416772] br-pub: port 1(bat0) entered forwarding state
[   19.422579] IPv6: ADDRCONF(NETDEV_CHANGE): br-pub: link becomes ready
[   19.870508] batman_adv: bat0: bridge_loop_avoidance: Changing from: enabled to: disabled
[   20.359133] batman_adv: bat0: No IGMP Querier present - multicast optimizations disabled
[   20.367269] batman_adv: bat0: No MLD Querier present - multicast optimizations disabled
[   21.412169] br-pub: port 1(bat0) entered forwarding state
[   21.549966] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[   21.563679] device wlan0 entered promiscuous mode
[   21.591315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   21.597879] br-pub: port 2(wlan0) entered forwarding state
[   21.603541] br-pub: port 2(wlan0) entered forwarding state
[   21.784924] IPv6: ADDRCONF(NETDEV_UP): mesh0: link is not ready
[   21.912131] IPv6: ADDRCONF(NETDEV_CHANGE): mesh0: link becomes ready
[   22.268273] batman_adv: bat0: Adding interface: mesh0
[   22.273432] batman_adv: bat0: Interface activated: mesh0
[   23.599046] br-pub: port 2(wlan0) entered forwarding state
[   29.369162] batman_adv: bat0: IGMP Querier appeared
[   29.374093] batman_adv: bat0: MLD Querier appeared
[   34.068975] ------------[ cut here ]------------
[   34.073700] WARNING: CPU: 0 PID: 0 at net/sched/sch_generic.c:306 dev_watchdog+0x1dc/0x260()
[   34.082197] NETDEV WATCHDOG: eth0 (ag71xx): transmit queue 0 timed out
[   34.088754] Modules linked in: ath9k ath9k_common mac80211 ath9k_hw ath batman_adv libcrc32c cfg80211 compat ohci_platform ohci_hcd ehci_platform ehci_hcd gpio_button_hotplug usbcore nls_base usb_common crc16
 cryptomgr aead crypto_null crc32c_generic crypto_hash
[   34.112252] CPU: 0 PID: 0 Comm: swapper Not tainted 4.4.32 #0
[   34.118013] Stack : 803c8fc4 00000000 00000001 80420000 80413038 80412cc3 803aa67c 00000000
[   34.118013] 	  8048379c 8041135c 00000200 00100000 0000000a 800a71a8 803afce8 80410000
[   34.118013] 	  00000003 8041135c 803ae0f4 8040dc2c 0000000a 800a5124 00000006 00000000
[   34.118013] 	  00000000 801f3100 00000000 00000000 00000000 00000000 00000000 00000000
[   34.118013] 	  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[   34.118013] 	  ...
[   34.153969] Call Trace:
[   34.156440] [<80071af0>] show_stack+0x50/0x84
[   34.160843] [<80081870>] warn_slowpath_common+0xa0/0xd0
[   34.166096] [<800818cc>] warn_slowpath_fmt+0x2c/0x38
[   34.171111] [<80290970>] dev_watchdog+0x1dc/0x260
[   34.175854] [<800b0460>] call_timer_fn.isra.5+0x24/0x80
[   34.181125] [<800b06e4>] run_timer_softirq+0x1b4/0x1fc
[   34.186296] [<80083dec>] __do_softirq+0x250/0x298
[   34.191059] [<8006a5d0>] plat_irq_dispatch+0xd4/0x10c
[   34.196134] [<80060830>] ret_from_irq+0x0/0x4
[   34.200526] [<80060a80>] __r4k_wait+0x20/0x40
[   34.204906] [<800a2304>] cpu_startup_entry+0x9c/0xe8
[   34.209934] [<80436bd4>] start_kernel+0x470/0x490
[   34.214656] 
[   34.216159] ---[ end trace ef06a4b3ec78272a ]---
[   34.220810] eth0: tx timeout
[   37.565193] random: nonblocking pool is initialized
[   44.068999] eth0: tx timeout
[   54.069064] eth0: tx timeout
[   64.068993] eth0: tx timeout
[   74.069871] eth0: tx timeout
[   82.660973] batman_adv: bat0: MLD Querier disappeared - multicast optimizations disabled
[   84.070901] eth0: tx timeout
[   92.701961] batman_adv: bat0: MLD Querier appeared
[   94.071717] eth0: tx timeout
[  104.072355] eth0: tx timeout
[  114.072669] eth0: tx timeout
[...]

When I do an /etc/init.d/network restart, the interface recovers to normal function, and I get this in dmesg:

[ 1296.763793] br-pub: port 2(wlan0) entered disabled state
[ 1296.769232] br-pub: port 1(bat0) entered disabled state
[ 1296.808305] device bat0 left promiscuous mode
[ 1296.812986] br-pub: port 1(bat0) entered disabled state
[ 1296.862085] IPv6: ADDRCONF(NETDEV_UP): bat0: link is not ready
[ 1296.879239] device wlan0 left promiscuous mode
[ 1296.883945] br-pub: port 2(wlan0) entered disabled state
[ 1296.904196] batman_adv: bat0: Interface deactivated: mesh0
[ 1296.909752] batman_adv: bat0: Removing interface: mesh0
[ 1296.963462] batman_adv: bat0: Interface deactivated: eth0
[ 1296.993492] eth0: link down
[ 1296.998705] batman_adv: bat0: Removing interface: eth0
[ 1301.629484] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 1301.649941] IPv6: ADDRCONF(NETDEV_UP): br-pub: link is not ready
[ 1301.985100] eth0: link up (100Mbps/Full duplex)
[ 1301.989698] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 1302.191373] batman_adv: bat0: Adding interface: eth0
[ 1302.196453] batman_adv: bat0: The MTU of interface eth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the
 performance. Setting the MTU to 1532 would solve the problem.
[ 1302.220488] batman_adv: bat0: Interface activated: eth0
[ 1302.228092] 8021q: adding VLAN 0 to HW filter on device bat0
[ 1302.275944] device bat0 entered promiscuous mode
[ 1302.280747] br-pub: port 1(bat0) entered forwarding state
[ 1302.286292] br-pub: port 1(bat0) entered forwarding state
[ 1302.292106] IPv6: ADDRCONF(NETDEV_CHANGE): br-pub: link becomes ready
[ 1302.590333] batman_adv: bat0: bridge_loop_avoidance: Changing from: enabled to: disabled
[ 1303.213417] batman_adv: bat0: No IGMP Querier present - multicast optimizations disabled
[ 1303.221556] batman_adv: bat0: No MLD Querier present - multicast optimizations disabled
[ 1304.283452] br-pub: port 1(bat0) entered forwarding state
[ 1304.672382] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 1304.782643] device wlan0 entered promiscuous mode
[ 1304.827845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1304.834479] br-pub: port 2(wlan0) entered forwarding state
[ 1304.840053] br-pub: port 2(wlan0) entered forwarding state
[ 1305.112607] IPv6: ADDRCONF(NETDEV_UP): mesh0: link is not ready
[ 1305.190600] IPv6: ADDRCONF(NETDEV_CHANGE): mesh0: link becomes ready
[ 1305.692918] batman_adv: bat0: Adding interface: mesh0
[ 1305.698080] batman_adv: bat0: Interface activated: mesh0
[ 1306.833410] br-pub: port 2(wlan0) entered forwarding state
[ 1312.303688] batman_adv: bat0: IGMP Querier appeared
[ 1312.308629] batman_adv: bat0: MLD Querier appeared

If I disconnect the other end of the ethernet cable so that there is no link peer, I do not see the problem (see below):

[    0.000000] Linux version 4.4.32 (openwrt@hawg) (gcc version 5.4.0 (LEDE GCC 5.4.0 r1439) ) #0 Mon Nov 21 07:14:51 2016
[    0.000000] MyLoader: sysp=00000000, boardp=00000000, parts=ffffffff
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019374 (MIPS 24Kc)
[    0.000000] SoC: Atheros AR7240 rev 2
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 02000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] No valid device tree found, continuing without
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000001ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000001ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000001ffffff]
[    0.000000] On node 0 totalpages: 8192
[    0.000000] free_area_init_node: node 0, pgdat 80412320, node_mem_map 81000000
[    0.000000]   Normal zone: 64 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 8192 pages, LIFO batch:0
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0 
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
[    0.000000] Kernel command line:  board=UBNT-BM mtdparts=spi0.0:256k(u-boot)ro,64k(u-boot-env)ro,7552k(firmware),256k(cfg)ro,64k(EEPROM)ro console=ttyS0,115200 rootfstype=squashfs,jffs2 noinitrd
[    0.000000] PID hash table entries: 128 (order: -3, 512 bytes)
[    0.000000] Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 27616K/32768K available (2990K kernel code, 174K rwdata, 756K rodata, 296K init, 198K bss, 5152K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Clocks: CPU:390.000MHz, DDR:390.000MHz, AHB:195.000MHz, Ref:40.000MHz
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 9801335621 ns
[    0.000013] sched_clock: 32 bits at 195MHz, resolution 5ns, wraps every 11012737021ns
[    0.007859] Calibrating delay loop... 259.27 BogoMIPS (lpj=1296384)
[    0.080537] pid_max: default: 32768 minimum: 301
[    0.085319] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.091915] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.102743] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.113517] NET: Registered protocol family 16
[    0.120061] MIPS: machine is Ubiquiti Bullet M
[    0.126721] registering PCI controller with io_map_base unset
[    0.357179] PCI host bridge to bus 0000:00
[    0.361281] pci_bus 0000:00: root bus resource [mem 0x10000000-0x13ffffff]
[    0.368182] pci_bus 0000:00: root bus resource [io  0x0000]
[    0.373728] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.380495] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.388431] pci 0000:00:00.0: [168c:002a] type 00 class 0x028000
[    0.388474] pci 0000:00:00.0: fixup device configuration
[    0.395026] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x0000ffff 64bit]
[    0.395163] pci 0000:00:00.0: supports D1
[    0.395187] pci 0000:00:00.0: PME# supported from D0 D1 D3hot
[    0.395530] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00
[    0.395581] pci 0000:00:00.0: BAR 0: assigned [mem 0x10000000-0x1000ffff 64bit]
[    0.402872] pci 0000:00:00.0: using irq 40 for pin 1
[    0.408968] clocksource: Switched to clocksource MIPS
[    0.415854] NET: Registered protocol family 2
[    0.421444] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.428402] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.434805] TCP: Hash tables configured (established 1024 bind 1024)
[    0.441299] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.447134] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.453795] NET: Registered protocol family 1
[    0.458229] PCI: CLS 0 bytes, default 32
[    0.464231] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.470521] Crashlog allocated RAM at address 0x1f00000
[    0.495175] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.501058] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.514341] io scheduler noop registered
[    0.518261] io scheduler deadline registered (default)
[    0.523733] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled
[    0.530718] console [ttyS0] disabled
[    0.554351] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11, base_baud = 12187500) is a 16550A
[    0.563030] console [ttyS0] enabled
[    0.570040] bootconsole [early0] disabled
[    0.582496] m25p80 spi0.0: found mx25l6405d, expected m25p80
[    0.588212] m25p80 spi0.0: mx25l6405d (8192 Kbytes)
[    0.593216] 5 cmdlinepart partitions found on MTD device spi0.0
[    0.599171] Creating 5 MTD partitions on "spi0.0":
[    0.603989] 0x000000000000-0x000000040000 : "u-boot"
[    0.611984] 0x000000040000-0x000000050000 : "u-boot-env"
[    0.619662] 0x000000050000-0x0000007b0000 : "firmware"
[    0.638852] 2 uimage-fw partitions found on MTD device firmware
[    0.644868] 0x000000050000-0x0000001a0000 : "kernel"
[    0.651750] 0x0000001a0000-0x0000007b0000 : "rootfs"
[    0.658926] mtd: device 4 (rootfs) set to be root filesystem
[    0.664753] 1 squashfs-split partitions found on MTD device rootfs
[    0.671004] 0x000000550000-0x0000007b0000 : "rootfs_data"
[    0.678725] 0x0000007b0000-0x0000007f0000 : "cfg"
[    0.685800] 0x0000007f0000-0x000000800000 : "EEPROM"
[    0.713752] libphy: ag71xx_mdio: probed
[    1.302703] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.0:04 [uid=004dd041, driver=Generic PHY]
[    1.312917] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode:MII
[    1.322177] NET: Registered protocol family 10
[    1.332146] NET: Registered protocol family 17
[    1.336720] bridge: automatic filtering via arp/ip/ip6tables has been deprecated. Update your scripts to load br_netfilter if you need this.
[    1.349611] 8021q: 802.1Q VLAN Support v1.8
[    1.362390] VFS: Mounted root (squashfs filesystem) readonly on device 31:4.
[    1.372040] Freeing unused kernel memory: 296K (80436000 - 80480000)
[    2.887726] init: Console is alive
[    2.891520] init: - watchdog -
[    4.278086] usbcore: registered new interface driver usbfs
[    4.283799] usbcore: registered new interface driver hub
[    4.289318] usbcore: registered new device driver usb
[    4.301475] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    4.310215] ehci-platform: EHCI generic platform driver
[    4.319363] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    4.327317] ohci-platform: OHCI generic platform driver
[    4.336163] init: - preinit -
[    5.148612] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[    5.181619] random: procd: uninitialized urandom read (4 bytes read, 8 bits of entropy available)
[    8.484735] jffs2: notice: (361) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[    8.502585] mount_root: switching to jffs2 overlay
[    8.518273] urandom-seed: Seeding with /etc/urandom.seed
[    8.810840] procd: - early -
[    8.813863] procd: - watchdog -
[    9.487850] procd: - ubus -
[    9.541721] random: ubusd: uninitialized urandom read (4 bytes read, 15 bits of entropy available)
[    9.551409] random: ubusd: uninitialized urandom read (4 bytes read, 15 bits of entropy available)
[    9.560553] random: ubusd: uninitialized urandom read (4 bytes read, 15 bits of entropy available)
[    9.570163] random: ubusd: uninitialized urandom read (4 bytes read, 15 bits of entropy available)
[    9.579297] random: ubusd: uninitialized urandom read (4 bytes read, 15 bits of entropy available)
[    9.589333] random: ubusd: uninitialized urandom read (4 bytes read, 15 bits of entropy available)
[    9.598611] random: ubusd: uninitialized urandom read (4 bytes read, 15 bits of entropy available)
[    9.608223] procd: - init -
[   10.064115] Loading modules backported from Linux version wt-2016-10-03-1-g6fcb1a6
[   10.071796] Backport generated by backports.git backports-20160324-9-g0e38f5c
[   10.122372] batman_adv: B.A.T.M.A.N. advanced 2016.4 (compatibility version 15) loaded
[   10.205329] PCI: Enabling device 0000:00:00.0 (0000 -> 0002)
[   10.216362] ath: phy0: Ignoring endianness difference in EEPROM magic bytes.
[   10.225034] ath: EEPROM regdomain: 0x0
[   10.225051] ath: EEPROM indicates default country code should be used
[   10.225065] ath: doing EEPROM country->regdmn map search
[   10.225093] ath: country maps to regdmn code: 0x3a
[   10.225109] ath: Country alpha2 being used: US
[   10.225122] ath: Regpair used: 0x3a
[   10.240049] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[   10.248689] ieee80211 phy0: Atheros AR9280 Rev:2 mem=0xb0000000, irq=40
[   11.861887] random: jshn: uninitialized urandom read (4 bytes read, 19 bits of entropy available)
[   11.993063] random: ubusd: uninitialized urandom read (4 bytes read, 19 bits of entropy available)
[   18.833441] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   18.855566] IPv6: ADDRCONF(NETDEV_UP): br-pub: link is not ready
[   21.215610] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[   21.255512] device wlan0 entered promiscuous mode
[   21.286637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   21.293301] br-pub: port 1(wlan0) entered forwarding state
[   21.298864] br-pub: port 1(wlan0) entered forwarding state
[   21.335689] IPv6: ADDRCONF(NETDEV_CHANGE): br-pub: link becomes ready
[   21.541225] IPv6: ADDRCONF(NETDEV_UP): mesh0: link is not ready
[   21.594616] IPv6: ADDRCONF(NETDEV_CHANGE): mesh0: link becomes ready
[   22.284927] batman_adv: bat0: Adding interface: mesh0
[   22.290148] batman_adv: bat0: Interface activated: mesh0
[   22.297750] 8021q: adding VLAN 0 to HW filter on device bat0
[   22.362868] device bat0 entered promiscuous mode
[   22.367627] br-pub: port 2(bat0) entered forwarding state
[   22.373200] br-pub: port 2(bat0) entered forwarding state
[   22.718089] batman_adv: bat0: bridge_loop_avoidance: Changing from: enabled to: disabled
[   23.289035] br-pub: port 1(wlan0) entered forwarding state
[   23.309325] batman_adv: bat0: No IGMP Querier present - multicast optimizations disabled
[   23.317459] batman_adv: bat0: No MLD Querier present - multicast optimizations disabled
[   24.369054] br-pub: port 2(bat0) entered forwarding state
[   29.389161] batman_adv: bat0: IGMP Querier appeared
[   38.069058] random: nonblocking pool is initialized
[   44.920666] eth0: link up (100Mbps/Full duplex)
[   44.925732] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   45.001214] batman_adv: bat0: Adding interface: eth0
[   45.006233] batman_adv: bat0: The MTU of interface eth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the
 performance. Setting the MTU to 1532 would solve the problem.
[   45.030291] batman_adv: bat0: Interface activated: eth0
[   50.459193] batman_adv: bat0: MLD Querier appeared
[   67.509156] batman_adv: bat0: MLD Querier disappeared - multicast optimizations disabled
[   77.549128] batman_adv: bat0: MLD Querier appeared

My LEDE diffconfig looks like this:

CONFIG_TARGET_ar71xx=y
CONFIG_TARGET_ar71xx_generic=y
CONFIG_TARGET_ar71xx_generic_DEVICE_ubnt-bullet-m=y
CONFIG_DEVEL=y
CONFIG_BUSYBOX_CUSTOM=y
CONFIG_ALFRED_NEEDS_lua=y
CONFIG_BUILD_LOG=y
CONFIG_BUSYBOX_CONFIG_MESG=y
CONFIG_BUSYBOX_CONFIG_PKILL=y
CONFIG_BUSYBOX_CONFIG_RDATE=y
# CONFIG_BUSYBOX_CONFIG_SHA256SUM is not set
CONFIG_KMOD_BATMAN_ADV_BATMAN_V=y
CONFIG_KMOD_BATMAN_ADV_BLA=y
CONFIG_KMOD_BATMAN_ADV_DAT=y
CONFIG_KMOD_BATMAN_ADV_DEBUGFS=y
CONFIG_KMOD_BATMAN_ADV_MCAST=y
CONFIG_LIBCURL_COOKIES=y
CONFIG_LIBCURL_FILE=y
CONFIG_LIBCURL_FTP=y
CONFIG_LIBCURL_HTTP=y
CONFIG_LIBCURL_NO_SMB="!"
CONFIG_LIBCURL_POLARSSL=y
CONFIG_LIBCURL_PROXY=y
CONFIG_OPENSSL_ENGINE_CRYPTO=y
CONFIG_OPENSSL_WITH_DEPRECATED=y
CONFIG_OPENSSL_WITH_EC=y
CONFIG_OPENSSL_WITH_NPN=y
CONFIG_OPENSSL_WITH_PSK=y
CONFIG_OPENSSL_WITH_SRP=y
CONFIG_PACKAGE_ALFRED_BATHOSTS=y
CONFIG_PACKAGE_ALFRED_VIS=y
CONFIG_PACKAGE_alfred=y
CONFIG_PACKAGE_batctl=y
CONFIG_PACKAGE_bridge=y
CONFIG_PACKAGE_curl=y
CONFIG_PACKAGE_diffutils=y
# CONFIG_PACKAGE_dnsmasq is not set
# CONFIG_PACKAGE_firewall is not set
CONFIG_PACKAGE_horst=y
CONFIG_PACKAGE_iftop=y
# CONFIG_PACKAGE_ip6tables is not set
CONFIG_PACKAGE_iperf3=y
# CONFIG_PACKAGE_iptables is not set
CONFIG_PACKAGE_kmod-batman-adv=y
CONFIG_PACKAGE_kmod-bridge=y
CONFIG_PACKAGE_kmod-crypto-aead=y
CONFIG_PACKAGE_kmod-crypto-crc32c=y
CONFIG_PACKAGE_kmod-crypto-hash=y
CONFIG_PACKAGE_kmod-crypto-manager=y
CONFIG_PACKAGE_kmod-crypto-null=y
CONFIG_PACKAGE_kmod-crypto-pcompress=y
# CONFIG_PACKAGE_kmod-ip6tables is not set
# CONFIG_PACKAGE_kmod-ipt-conntrack is not set
# CONFIG_PACKAGE_kmod-ipt-core is not set
# CONFIG_PACKAGE_kmod-ipt-nat is not set
# CONFIG_PACKAGE_kmod-lib-crc-ccitt is not set
CONFIG_PACKAGE_kmod-lib-crc16=y
CONFIG_PACKAGE_kmod-lib-crc32c=y
CONFIG_PACKAGE_kmod-llc=y
# CONFIG_PACKAGE_kmod-nf-conntrack is not set
# CONFIG_PACKAGE_kmod-nf-conntrack6 is not set
# CONFIG_PACKAGE_kmod-nf-ipt is not set
# CONFIG_PACKAGE_kmod-nf-ipt6 is not set
# CONFIG_PACKAGE_kmod-nf-nat is not set
# CONFIG_PACKAGE_kmod-ppp is not set
CONFIG_PACKAGE_kmod-stp=y
CONFIG_PACKAGE_libcurl=y
# CONFIG_PACKAGE_libip4tc is not set
# CONFIG_PACKAGE_libip6tc is not set
CONFIG_PACKAGE_liblua=y
CONFIG_PACKAGE_libncursesw=y
CONFIG_PACKAGE_libnetsnmp=y
CONFIG_PACKAGE_libopenssl=y
CONFIG_PACKAGE_libpcap=y
CONFIG_PACKAGE_libpcre=y
CONFIG_PACKAGE_libpolarssl=y
CONFIG_PACKAGE_libpopt=y
CONFIG_PACKAGE_libpthread=y
CONFIG_PACKAGE_librt=y
# CONFIG_PACKAGE_libxtables is not set
CONFIG_PACKAGE_lua=y
# CONFIG_PACKAGE_odhcp6c is not set
# CONFIG_PACKAGE_odhcpd is not set
# CONFIG_PACKAGE_ppp is not set
CONFIG_PACKAGE_procps-ng=y
CONFIG_PACKAGE_procps-ng-free=y
CONFIG_PACKAGE_procps-ng-kill=y
CONFIG_PACKAGE_procps-ng-pgrep=y
CONFIG_PACKAGE_procps-ng-pkill=y
CONFIG_PACKAGE_procps-ng-pmap=y
CONFIG_PACKAGE_procps-ng-ps=y
CONFIG_PACKAGE_procps-ng-pwdx=y
CONFIG_PACKAGE_procps-ng-skill=y
CONFIG_PACKAGE_procps-ng-slabtop=y
CONFIG_PACKAGE_procps-ng-snice=y
CONFIG_PACKAGE_procps-ng-tload=y
CONFIG_PACKAGE_procps-ng-top=y
CONFIG_PACKAGE_procps-ng-uptime=y
CONFIG_PACKAGE_procps-ng-vmstat=y
CONFIG_PACKAGE_procps-ng-w=y
CONFIG_PACKAGE_procps-ng-watch=y
CONFIG_PACKAGE_ptp-utils=y
CONFIG_PACKAGE_rsync=y
CONFIG_PACKAGE_snmpd=y
CONFIG_PACKAGE_tcpdump=y
CONFIG_PACKAGE_terminfo=y
CONFIG_PACKAGE_wget=y
CONFIG_PACKAGE_wireless-tools=y
CONFIG_PACKAGE_zlib=y
CONFIG_RSYNC_zlib=y

My uci show looks like this (system and wireless elided):

alfred.alfred=alfred
alfred.alfred.mode='master'
alfred.alfred.batmanif='bat0'
alfred.alfred.start_vis='1'
alfred.alfred.run_facters='1'
alfred.alfred.interface='br-pub'
alfred.alfred.disabled='0'
batman-adv.bat0=mesh
batman-adv.bat0.bridge_loop_avoidance='0'
dropbear.@dropbear[0]=dropbear
dropbear.@dropbear[0].PasswordAuth='on'
dropbear.@dropbear[0].RootPasswordAuth='on'
dropbear.@dropbear[0].Port='22'
network.loopback=interface
network.loopback.ifname='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.pub=interface
network.pub.type='bridge'
network.pub.proto='static'
network.pub.ip6assign='60'
network.pub.ifname='bat0'
network.pub.ipaddr='10.11.x.y'
network.pub.netmask='255.255.252.0'
network.pub.gateway='10.11.x.1'
network.pub.dns='10.11.x.1'
network.mesh=interface
network.mesh.mtu='1532'
network.mesh.proto='batadv'
network.mesh.mesh='bat0'
network.meshwire=interface
network.meshwire.proto='batadv'
network.meshwire.mesh='bat0'
network.meshwire.ifname='eth0'

version: 17.01.0-rc1, r3042-ec095b5 and latest master
device: pcengine apu2c4, toshiba 32GB usb3.0 storage
packages: kmod-usb-storage, kmod-usb-core, kmod-scsi-core

<success case>
After boot, inserting usb storage is detected successfully, like this

   _________
  /        /\      _    ___ ___  ___
 /  LE    /  \    | |  | __|   \| __|
/    DE  /    \   | |__| _|| |) | _|

 /  LE    /  \    | |  | __|   \| __|
/    DE  /    \   | |__| _|| |) | _|

I have run into strange trouble with my new WRT3200ACM:

anon_mount 1 option in /etc/config/fstab causes the boot process to hang.
Hang can be triggered manually with “/sbin/block mount” when that option is set.
Kernel log fills from entries “pxa3xx-nand f10d0000.flash: Wait time out!!!”

I am filing this bug report for 17.01, but the bug seems to be also in master.

For some reason enabling the anon_mount option in /etc/config/fstab prevents the boot process from completing. The boot progresses to some stage and router e.g. answers ping, but power led blinks and it does not allow login and does not provide dhcp etc. services.

I have had that option in all my routers (WNDR3700, WNDR3800, R7800) to make USB memory sticks to automount when inserted into the router’s USB port. So it is a quite normal setting.

I first compiled a mvebu wrt3200acm firmware image from master with kernel 4.9, and that failed to boot. I thought that the new kernel 4.9 might be the reason. So I installed 17.01.0-rc2 official image and it booted ok. I installed packages, configured, rebooted and everything was ok as long as I did not change that anon_mount to 1 in fstab. After changing that, the next boot again gets stuck. (Editing the option in failsafe enables the router to boot normally.)

Boot completes ok with the output of “block detect” entered into fstab:

  config 'global'
          option  anon_swap       '0'
          option  anon_mount      '0'
          option  auto_swap       '1'
          option  auto_mount      '1'
          option  delay_root      '5'
          option  check_fs        '0'

Boot does not complete with anon_mount 1 in /etc/config/fstab:

  config 'global'
          option  anon_swap       '0'
          option  anon_mount      '1'
          option  auto_swap       '1'
          option  auto_mount      '1'
          option  delay_root      '5'
          option  check_fs        '0'

I have no good guess about the reason. My initial guess was some connection to ubi1:syscfg being mounted as /tmp/syscfg as that is different than in my other devices, but it is hard to see how that could be the reason. (That mounting is done in /lib/preinit/81_linksys_syscfg )

After some investigation it looks like the reason is actually “/sbin/block mount”.

At the boot the init script /etc/init.d/fstab actually runs “/sbin/block mount”.
Running that command manually from console (with anon_mount 1) makes the console to hang. From another console window I can see that system & kernel log fills from entries like these:

  kern.err kernel: [ 3032.483307] pxa3xx-nand f10d0000.flash: Wait time out!!!
  kern.err kernel: [ 3032.683301] pxa3xx-nand f10d0000.flash: Wait time out!!!
  kern.err kernel: [ 3032.883296] pxa3xx-nand f10d0000.flash: Wait time out!!!
  kern.err kernel: [ 3033.083293] pxa3xx-nand f10d0000.flash: Wait time out!!!
  kern.err kernel: [ 3033.283291] pxa3xx-nand f10d0000.flash: Wait time out!!!
  kern.err kernel: [ 3033.483287] pxa3xx-nand f10d0000.flash: Wait time out!!!
  kern.err kernel: [ 3033.683283] pxa3xx-nand f10d0000.flash: Wait time out!!!

And the “block” process can’t even be killed with “kill -9” or “kill -15”.
I rebooted the router from power switch to get it killed.

With anon_mount 0 in fstab the same command works ok and produces:

 root@LEDE:~# /sbin/block mount
 block: /dev/ubiblock0_0 is already mounted on /rom
 block: /dev/ubi0_1 is already mounted on /overlay

Supply the following if possible:
- Device problem occurs on
VirtualBox x86_64 Version 5.0.32 r112930
- Software versions of LEDE release, packages, etc.
17.01.00rc2
- Steps to reproduce
Create the disk image
Switch from EHCI (the default in a new VM) to xHCI.
Boot the machine
The machine will deadlock soon after initializing the USB ports

If you set up dnsmasq to ignore resolv file it will ignore it until reboot is performed. To make ignore it again the option must be uncheck and apply and then check and apply again.

I have /etc/resolv.conf as a symlink to /tmp/resolv.conf, when the router boots up the contents are the dns offered from dhcp over the wan interface. When the ignore resolv option is checked or unchecked the contens are overwrited to search lan and nameserver 127.0.0.1 but it doesn’t seems to affect as if you uncheck ignore resolv the router resolv names, and when you check again the option it can resolv names even the contents still are search lan and nameserver 127.0.0.1.

I haven’t seen yet any other change that can cause the reboot to make dnsmasq follow resolv file when the option is checked until you uncheck-apply and check-apply.

I am currently testing two MT7620 devices - the ZBT WE826 and the Sanlinking D240. During the first seconds of the boot, I see that packets leak between the WAN and LAN ports. Typically, this results in clients receiving a DHCP reply from my upstream router, rendering the clients without connectivity when the switch is properly initialized. I have also tested with the default firmware and do not see this behavior. Also, if I stop the devices in the bootloader, then packets do not leak until I resume boot again.

In order to try to solve this bug, I have tried to port some (at least to me) missing steps from the bootloader switch code and to the mt7620 switch driver in LEDE. This did not have an effect, at least not on the packet leak. A work-around I have found is to update u-boot and remove the input delay, so that the device will boot immediately. However, this is quite cumbersome to install and not very reliable. I suspect my luck with this work-around is more due to the timing of the DHCP clients in Ubuntu and Windows 10.

Does anyone have any idea as to what could be wrong and where to start looking?

Thanks in advance for any help.

After flashing my HooToo HT-TM02 with LEDE 17.01 I noticed that my hostless modem
ZTE MF823 is not detected when attached during boot. lsusb or cat /sys/kernel/debug/usb/devices
just shows nothing. Also dmesg is logging nothing regarding the device during boot.
If the modem is hotplugged, everything works fine. Same behaviour in OpenWRT Chaos Chalmer.

Tried unloading and reloading all usb related modules with no success. No detection at all.
Only unplugging and replugging helps. If the modem is detected after replugging, a
router reboot will detect it properly. A reboot without a forced detection via replugging leads to
no detection. Powering the router down, also results in no detection after rebooting.

If attached to a “non powered” USB-Hub it gets detected during boot, so no power issue here.

And the modem works perfekt after boot on a WD MyNet 600 with LEDE 17.01. So i think it’s a
platform related issue handling the usb modules.

Hope there is enough info for someone to find the bug.

THX.

I have the default bridge with ethernet and WLAN in it. When i try to send data from a client to another, both connected to the same WLAN SSID, it doesn’t work (Destination unreachable).
Wireshark shows that it sends endless ARP requests to Broadcast, but the other clients in that WLAN never get it (and therefore can’t answer). The broadcast gets still delivery to every client connected through Ethernet. If i create a second WLAN SSID (even on the same adapter) and and add it to the bridge, it gets also all broadcast packets from the other WLAN...
So if i put the 2 clients in different WLAN SSIDs or ethernet they get the broadcast from each other, but not when both are connected to the same.

The isolate option is not set in the wireless config.
Archer C5 v1 with latest LEDE snapshot (no difference to 17.01 stable or rc).

I can´t get my Seagate Expansion Portable 1TB STEA1000400 USB3.0 drive to be be recognized on the USB 3.0 port of the router after a reboot or cold start on WRT3200 but if i remove and hotplug the drive, it is automatically detected and can be mounted.
It happens with images from Openwrt 15.05.1, LEDE 17.01.1 and many snapshots from both projects that i have installed. I have no problem with another usb2.0 drive from Samsung that is installed in another USB2.0 port.

After Cold START or REBOOT

 root@LEDE:~# dmesg
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 4.9.20 (ag33e33@ubuntu) (gcc version 5.4.0 (LEDE GCC 5.4.0 r3963-7ae58be) ) #0 SMP Wed Apr 12 16:12:18 2017
[    0.000000] CPU: ARMv7 Processor [414fc091] revision 1 (ARMv7), cr=10c5387d
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt:Machine model: Linksys WRT3200ACM
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] On node 0 totalpages: 131072
[    0.000000] free_area_init_node: node 0, pgdat c0646900, node_mem_map dfbf9000
[    0.000000]   Normal zone: 1024 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 131072 pages, LIFO batch:31
[    0.000000] percpu: Embedded 13 pages/cpu @dfbce000 s22732 r8192 d22324 u53248
[    0.000000] pcpu-alloc: s22732 r8192 d22324 u53248 alloc=13*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 130048
[    0.000000] Kernel command line: console=ttyS0,115200 root=/dev/mtdblock6 ro rootdelay=1 rootfstype=jffs2 earlyprintk mtdparts=armada-nand:2048K(uboot)ro,128K(u_env),256K(s_env),256K@8064K(devinfo),1920K@8320K(sysdiag),80m@10m(kernel),74m@16m(rootfs),80m@90m(alt_kernel),74m@96m(alt_rootfs),160m@10m(ubifs),-@170m(syscfg)
[    0.000000] PID hash table entries: 2048 (order: 1, 8192 bytes)
[    0.000000] Dentry cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Inode-cache hash table entries: 32768 (order: 5, 131072 bytes)
[    0.000000] Memory: 512848K/524288K available (4545K kernel code, 180K rwdata, 1244K rodata, 280K init, 310K bss, 11440K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] Virtual kernel memory layout:
                   vector  : 0xffff0000 - 0xffff1000   (   4 kB)
                   fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
                   vmalloc : 0xe0800000 - 0xff800000   ( 496 MB)
                   lowmem  : 0xc0000000 - 0xe0000000   ( 512 MB)
                   pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
                   modules : 0xbf000000 - 0xbfe00000   (  14 MB)
                     .text : 0xc0008000 - 0xc0478918   (4547 kB)
                     .init : 0xc05d4000 - 0xc061a000   ( 280 kB)
                     .data : 0xc061a000 - 0xc0647200   ( 181 kB)
                      .bss : 0xc0647200 - 0xc0694a00   ( 310 kB)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000]  RCU restricting CPUs from NR_CPUS=4 to nr_cpu_ids=2.
[    0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] mvebu_mbus: [Firmware Warn]: deprecated mbus-mvebu Device Tree, suspend/resume will not work
[    0.000000] L2C-310 enabling early BRESP for Cortex-A9
[    0.000000] L2C-310 full line of zeros enabled for Cortex-A9
[    0.000000] L2C-310 D prefetch enabled, offset 1 lines
[    0.000000] L2C-310 dynamic clock gating enabled, standby mode enabled
[    0.000000] L2C-310 Coherent cache controller enabled, 16 ways, 1024 kB
[    0.000000] L2C-310 Coherent: CACHE_ID 0x410054c9, AUX_CTRL 0x56070001
[    0.000000] Selected CPU frequency (16) unsupported
[    0.000000] Switching to timer-based delay loop, resolution 40ns
[    0.000002] sched_clock: 32 bits at 25MHz, resolution 40ns, wraps every 85899345900ns
[    0.000008] clocksource: armada_370_xp_clocksource: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 76450417870 ns
[    0.000114] Calibrating local timer... 933.22MHz.
[    0.060032] Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=250000)
[    0.060037] pid_max: default: 32768 minimum: 301
[    0.060076] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.060079] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.060274] CPU: Testing write buffer coherency: ok
[    0.060365] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.060376] Setting up static identity map for 0x8280 - 0x82d8
[    0.060434] mvebu-soc-id: MVEBU SoC ID=0x6820, Rev=0x4
[    0.060494] mvebu-pmsu: Initializing Power Management Service Unit
[    0.060904] Booting CPU 1
[    0.061041] CPU1: thread -1, cpu 1, socket 0, mpidr 80000001
[    0.061070] Brought up 2 CPUs
[    0.061075] SMP: Total of 2 processors activated (100.00 BogoMIPS).
[    0.061078] CPU: All CPU(s) started in SVC mode.
[    0.062739] VFP support v0.3: implementor 41 architecture 3 part 30 variant 9 rev 4
[    0.062790] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.062796] futex hash table entries: 512 (order: 3, 32768 bytes)
[    0.062831] pinctrl core: initialized pinctrl subsystem
[    0.063142] NET: Registered protocol family 16
[    0.063575] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.090041] cpuidle: using governor ladder
[    0.090171] mvebu-pmsu: CPU hotplug support is currently broken on Armada 38x: disabling
[    0.090177] mvebu-pmsu: CPU idle is currently broken on Armada 38x: disabling
[    0.120467] reg-fixed-voltage xhci0-vbus: could not find pctldev for node /soc/internal-regs/pinctrl@18000/xhci0-vbus-pins, deferring probe
[    0.120607] SCSI subsystem initialized
[    0.120687] libata version 3.00 loaded.
[    0.120790] usbcore: registered new interface driver usbfs
[    0.120815] usbcore: registered new interface driver hub
[    0.120835] usbcore: registered new device driver usb
[    0.121329] clocksource: Switched to clocksource armada_370_xp_clocksource
[    0.121647] NET: Registered protocol family 2
[    0.121869] TCP established hash table entries: 4096 (order: 2, 16384 bytes)
[    0.121890] TCP bind hash table entries: 4096 (order: 3, 32768 bytes)
[    0.121920] TCP: Hash tables configured (established 4096 bind 4096)
[    0.121941] UDP hash table entries: 256 (order: 1, 8192 bytes)
[    0.121952] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes)
[    0.122009] NET: Registered protocol family 1
[    0.122021] PCI: CLS 0 bytes, default 64
[    0.122803] Crashlog allocated RAM at address 0x3f00000
[    0.122877] workingset: timestamp_bits=30 max_order=17 bucket_order=0
[    0.124945] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.124953] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.125699] io scheduler noop registered
[    0.125703] io scheduler deadline registered (default)
[    0.126071] armada-38x-pinctrl f1018000.pinctrl: registered pinctrl driver
[    0.126671] mvebu-pcie soc:pcie-controller: PCI host bridge to bus 0000:00
[    0.126679] pci_bus 0000:00: root bus resource [io  0x1000-0xfffff]
[    0.126683] pci_bus 0000:00: root bus resource [mem 0xe0000000-0xe7ffffff]
[    0.126687] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.126701] pci 0000:00:01.0: [11ab:6820] type 01 class 0x060400
[    0.126784] pci 0000:00:02.0: [11ab:6820] type 01 class 0x060400
[    0.126859] PCI: bus0: Fast back to back transfers disabled
[    0.126864] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.126870] pci 0000:00:02.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    0.126918] pci 0000:01:00.0: [11ab:2b40] type 00 class 0x020000
[    0.126933] pci 0000:01:00.0: reg 0x10: [mem 0x40000000-0x401fffff 64bit pref]
[    0.126943] pci 0000:01:00.0: reg 0x18: [mem 0x40200000-0x402fffff 64bit pref]
[    0.127002] pci 0000:01:00.0: supports D1 D2
[    0.127005] pci 0000:01:00.0: PME# supported from D0 D1 D3hot D3cold
[    0.127068] PCI: bus1: Fast back to back transfers disabled
[    0.127073] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    0.127132] pci 0000:02:00.0: [11ab:2b40] type 00 class 0x020000
[    0.127151] pci 0000:02:00.0: reg 0x10: [mem 0x42000000-0x421fffff 64bit pref]
[    0.127162] pci 0000:02:00.0: reg 0x18: [mem 0x42200000-0x422fffff 64bit pref]
[    0.127244] pci 0000:02:00.0: supports D1 D2
[    0.127246] pci 0000:02:00.0: PME# supported from D0 D1 D3hot D3cold
[    0.127310] PCI: bus2: Fast back to back transfers disabled
[    0.127315] pci_bus 0000:02: busn_res: [bus 02-ff] end is updated to 02
[    0.127384] pci 0000:00:01.0: BAR 8: assigned [mem 0xe0000000-0xe02fffff]
[    0.127390] pci 0000:00:02.0: BAR 8: assigned [mem 0xe0400000-0xe06fffff]
[    0.127396] pci 0000:01:00.0: BAR 0: assigned [mem 0xe0000000-0xe01fffff 64bit pref]
[    0.127405] pci 0000:01:00.0: BAR 2: assigned [mem 0xe0200000-0xe02fffff 64bit pref]
[    0.127413] pci 0000:00:01.0: PCI bridge to [bus 01]
[    0.127418] pci 0000:00:01.0:   bridge window [mem 0xe0000000-0xe02fffff]
[    0.127425] pci 0000:02:00.0: BAR 0: assigned [mem 0xe0400000-0xe05fffff 64bit pref]
[    0.127434] pci 0000:02:00.0: BAR 2: assigned [mem 0xe0600000-0xe06fffff 64bit pref]
[    0.127443] pci 0000:00:02.0: PCI bridge to [bus 02]
[    0.127448] pci 0000:00:02.0:   bridge window [mem 0xe0400000-0xe06fffff]
[    0.127646] mv_xor f1060800.xor: Marvell shared XOR driver
[    0.181754] mv_xor f1060800.xor: Marvell XOR (Descriptor Mode): ( xor cpy intr )
[    0.181840] mv_xor f1060900.xor: Marvell shared XOR driver
[    0.241717] mv_xor f1060900.xor: Marvell XOR (Descriptor Mode): ( xor cpy intr )
[    0.241857] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.242621] console [ttyS0] disabled
[    0.262683] f1012000.serial: ttyS0 at MMIO 0xf1012000 (irq = 21, base_baud = 12500000) is a 16550A
[    0.983287] console [ttyS0] enabled
[    0.988691] loop: module loaded
[    0.992090] ahci-mvebu f10a8000.sata: AHCI 0001.0000 32 slots 2 ports 6 Gbps 0x3 impl platform mode
[    1.001176] ahci-mvebu f10a8000.sata: flags: 64bit ncq sntf led only pmp fbs pio slum part sxs
[    1.010274] scsi host0: ahci-mvebu
[    1.013847] scsi host1: ahci-mvebu
[    1.017348] ata1: SATA max UDMA/133 mmio [mem 0xf10a8000-0xf10a9fff] port 0x100 irq 41
[    1.025306] ata2: SATA max UDMA/133 mmio [mem 0xf10a8000-0xf10a9fff] port 0x180 irq 41
[    1.033594] pxa3xx-nand f10d0000.flash: This platform can't do DMA on this device
[    1.041369] nand: device found, Manufacturer ID: 0x01, Chip ID: 0xda
[    1.047747] nand: AMD/Spansion S34ML02G2
[    1.051690] nand: 256 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 128
[    1.059379] pxa3xx-nand f10d0000.flash: ECC strength 16, ECC step size 2048
[    1.066556] Bad block table found at page 131008, version 0x01
[    1.072752] Bad block table found at page 130944, version 0x01
[    1.078863] 11 ofpart partitions found on MTD device pxa3xx_nand-0
[    1.085074] Creating 11 MTD partitions on "pxa3xx_nand-0":
[    1.090582] 0x000000000000-0x000000200000 : "u-boot"
[    1.095830] 0x000000200000-0x000000220000 : "u_env"
[    1.100951] 0x000000220000-0x000000260000 : "s_env"
[    1.106089] 0x0000007e0000-0x000000820000 : "devinfo"
[    1.111433] 0x000000820000-0x000000a00000 : "sysdiag"
[    1.116797] 0x000000a00000-0x000005a00000 : "kernel1"
[    1.122301] 0x000001000000-0x000005a00000 : "ubi"
[    1.127404] 0x000005a00000-0x00000aa00000 : "kernel2"
[    1.132905] 0x000006000000-0x00000aa00000 : "rootfs2"
[    1.138362] 0x00000aa00000-0x000010000000 : "syscfg"
[    1.143774] 0x000000260000-0x000000820000 : "unused_area"
[    1.149701] libphy: Fixed MDIO Bus: probed
[    1.154064] libphy: orion_mdio_bus: probed
[    1.158297] mvneta_bm f10c8000.bm: Buffer Manager for network controller enabled
[    1.166962] mvneta f1070000.ethernet eth0: Using hardware mac address 60:38:e0:b9:ea:c0
[    1.175959] mvneta f1034000.ethernet eth1: Using random mac address a2:8d:5e:6d:ee:98
[    1.183881] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    1.190435] ehci-pci: EHCI PCI platform driver
[    1.194928] ehci-platform: EHCI generic platform driver
[    1.200245] ehci-orion: EHCI orion driver
[    1.204336] orion-ehci f1058000.usb: EHCI Host Controller
[    1.209765] orion-ehci f1058000.usb: new USB bus registered, assigned bus number 1
[    1.217412] orion-ehci f1058000.usb: irq 37, io mem 0xf1058000
[    1.251329] orion-ehci f1058000.usb: USB 2.0 started, EHCI 1.00
[    1.257480] hub 1-0:1.0: USB hub found
[    1.261254] hub 1-0:1.0: 1 port detected
[    1.265551] usbcore: registered new interface driver usb-storage
[    1.271723] armada38x-rtc f10a3800.rtc: rtc core: registered f10a3800.rtc as rtc0
[    1.279341] i2c /dev entries driver
[    1.294252] orion_wdt: Initial timeout 171 sec
[    1.298933] sdhci: Secure Digital Host Controller Interface driver
[    1.305146] sdhci: Copyright(c) Pierre Ossman
[    1.362546] ata1: SATA link down (SStatus 0 SControl 300)
[    1.367991] ata2: SATA link down (SStatus 0 SControl 300)
[    1.371354] mmc0: SDHCI controller on f10d8000.sdhci [f10d8000.sdhci] using ADMA
[    1.371428] sdhci-pltfm: SDHCI platform and OF driver helper
[    1.377154] marvell-cesa f1090000.crypto: CESA device successfully registered
[    1.377556] NET: Registered protocol family 10
[    1.391590] NET: Registered protocol family 17
[    1.391604] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.391605] 8021q: 802.1Q VLAN Support v1.8
[    1.391661] Registering SWP/SWPB emulation handler
[    1.392791] xhci-hcd f10f8000.usb3: xHCI Host Controller
[    1.392803] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 2
[    1.392861] xhci-hcd f10f8000.usb3: hcc params 0x0a000990 hci version 0x100 quirks 0x00010010
[    1.392881] xhci-hcd f10f8000.usb3: irq 44, io mem 0xf10f8000
[    1.393134] hub 2-0:1.0: USB hub found
[    1.393160] hub 2-0:1.0: 1 port detected
[    1.393247] xhci-hcd f10f8000.usb3: xHCI Host Controller
[    1.393253] xhci-hcd f10f8000.usb3: new USB bus registered, assigned bus number 3
[    1.393292] usb usb3: We don't know the algorithms for LPM for this host, disabling LPM.
[    1.393478] hub 3-0:1.0: USB hub found
[    1.393501] hub 3-0:1.0: 1 port detected
[    1.393820] UBI: auto-attach mtd6
[    1.393824] ubi0: attaching mtd6
[    1.397930] random: fast init done
[    1.401551] mmc0: new high speed SDIO card at address 0001
[    1.593092] ubi0: scanning is finished
[    1.601334] ubi0: attached mtd6 (name "ubi", size 74 MiB)
[    1.606756] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    1.613664] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    1.620479] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    1.627475] ubi0: good PEBs: 592, bad PEBs: 0, corrupted PEBs: 0
[    1.633508] ubi0: user volume: 2, internal volumes: 1, max. volumes count: 128
[    1.640759] ubi0: max/mean erase counter: 1/0, WL threshold: 4096, image sequence number: 1419003487
[    1.649932] ubi0: available PEBs: 0, total reserved PEBs: 592, PEBs reserved for bad PEB handling: 40
[    1.659197] ubi0: background thread "ubi_bgt0d" started, PID 668
[    1.659208] usb 1-1: new high-speed USB device number 2 using orion-ehci
[    1.659643] block ubiblock0_0: created from ubi0:0(rootfs)
[    1.659645] ubiblock: device ubiblock0_0 (rootfs) set to be root filesystem
[    1.659829] mvsw61xx 10.mvsw61xx: Found MV88E6352 at f1072004.mdio-mi:10
[    1.659832] mvsw61xx 10.mvsw61xx: Using direct addressing
[    1.671972] armada38x-rtc f10a3800.rtc: setting system clock to 2101-11-05 12:45:50 UTC (4160637950)
[    1.705850] Waiting 1 sec before mounting root device...
[    1.852932] usb-storage 1-1:1.0: USB Mass Storage device detected
[    1.859142] scsi host2: usb-storage 1-1:1.0
[    2.722974] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    2.730260] Freeing unused kernel memory: 280K (c05d4000 - c061a000)
[    2.736655] This architecture does not have kernel memory protection.
[    2.855724] init: Console is alive
[    2.859203] init: - watchdog -
[    2.924338] scsi 2:0:0:0: Direct-Access     Samsung  S2 Portable           PQ: 0 ANSI: 2 CCS
[    3.111498] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    3.151660] sd 2:0:0:0: [sda] 976773168 512-byte logical blocks: (500 GB/466 GiB)
[    3.159777] sd 2:0:0:0: [sda] Write Protect is off
[    3.164597] sd 2:0:0:0: [sda] Mode Sense: 28 00 00 00
[    3.165152] sd 2:0:0:0: [sda] No Caching mode page found
[    3.170490] sd 2:0:0:0: [sda] Assuming drive cache: write through
[    3.179038]  sda: sda1
[    3.183653] sd 2:0:0:0: [sda] Attached SCSI disk
[    3.188738] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    3.195221] ohci-platform: OHCI generic platform driver
[    3.200902] uhci_hcd: USB Universal Host Controller Interface driver
[    3.207556] ohci-pci: OHCI PCI platform driver
[    3.212156] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    3.228593] init: - preinit -
[    3.422394] mvneta f1070000.ethernet tmp0: renamed from eth0
[    3.462586] mvneta f1034000.ethernet eth0: renamed from eth1
[    3.512510] mvneta f1070000.ethernet eth1: renamed from tmp0
[    3.833291] mvneta f1034000.ethernet eth0: configuring for fixed link mode
[    3.840562] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[    3.846607] mvneta f1034000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
[    3.854578] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[    5.909798] mount_root: loading kmods from internal overlay
[    5.921475] kmodloader: loading kernel modules from //etc/modules-boot.d/*
[    5.929503] kmodloader: done loading kernel modules from //etc/modules-boot.d/*
[    6.328768] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 806
[    6.357145] UBIFS (ubi0:1): recovery needed
[    6.403932] random: crng init done
[    6.431762] UBIFS (ubi0:1): recovery completed
[    6.436249] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[    6.444117] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[    6.454076] UBIFS (ubi0:1): FS size: 61329408 bytes (58 MiB, 483 LEBs), journal size 3047424 bytes (2 MiB, 24 LEBs)
[    6.464556] UBIFS (ubi0:1): reserved for root: 2896739 bytes (2828 KiB)
[    6.471198] UBIFS (ubi0:1): media format: w4/r0 (latest is w4/r0), UUID DEE50754-EFFE-4990-A7A6-C97266C9BEF0, small LPT model
[    6.483473] block: attempting to load /tmp/ubifs_cfg/upper/etc/config/fstab
[    6.493882] block: extroot: not configured
[    6.531369] UBIFS (ubi0:1): un-mount UBI device 0
[    6.536097] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" stops
[    6.544028] UBIFS (ubi0:1): background thread "ubifs_bgt0_1" started, PID 809
[    6.591527] UBIFS (ubi0:1): UBIFS: mounted UBI device 0, volume 1, name "rootfs_data"
[    6.599392] UBIFS (ubi0:1): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[    6.609356] UBIFS (ubi0:1): FS size: 61329408 bytes (58 MiB, 483 LEBs), journal size 3047424 bytes (2 MiB, 24 LEBs)
[    6.619838] UBIFS (ubi0:1): reserved for root: 2896739 bytes (2828 KiB)
[    6.626483] UBIFS (ubi0:1): media format: w4/r0 (latest is w4/r0), UUID DEE50754-EFFE-4990-A7A6-C97266C9BEF0, small LPT model
[    6.641627] mount_root: loading kmods from internal overlay
[    6.652909] kmodloader: loading kernel modules from /tmp/overlay/upper/etc/modules-boot.d/*
[    6.670201] kmodloader: done loading kernel modules from /tmp/overlay/upper/etc/modules-boot.d/*
[    7.078279] block: attempting to load /tmp/ubifs_cfg/upper/etc/config/fstab
[    7.086484] block: extroot: not configured
[    7.132013] mount_root: switching to ubifs overlay
[    7.176201] ubi1: attaching mtd9
[    7.407547] ubi1: scanning is finished
[    7.415742] ubi1: attached mtd9 (name "syscfg", size 86 MiB)
[    7.421435] ubi1: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    7.428338] ubi1: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    7.435155] ubi1: VID header offset: 2048 (aligned 2048), data offset: 4096
[    7.442148] ubi1: good PEBs: 680, bad PEBs: 8, corrupted PEBs: 0
[    7.448177] ubi1: user volume: 1, internal volumes: 1, max. volumes count: 128
[    7.455430] ubi1: max/mean erase counter: 6/4, WL threshold: 4096, image sequence number: 1148089792
[    7.464603] ubi1: available PEBs: 0, total reserved PEBs: 680, PEBs reserved for bad PEB handling: 32
[    7.473869] ubi1: background thread "ubi_bgt1d" started, PID 824
[    7.485213] UBIFS (ubi1:0): background thread "ubifs_bgt1_0" started, PID 828
[    7.537764] UBIFS (ubi1:0): UBIFS: mounted UBI device 1, volume 0, name "syscfg"
[    7.545202] UBIFS (ubi1:0): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[    7.555161] UBIFS (ubi1:0): FS size: 80375808 bytes (76 MiB, 633 LEBs), journal size 4063232 bytes (3 MiB, 32 LEBs)
[    7.565642] UBIFS (ubi1:0): reserved for root: 3796347 bytes (3707 KiB)
[    7.572287] UBIFS (ubi1:0): media format: w4/r0 (latest is w4/r0), UUID A5EAB2F8-92D3-4D0B-A69A-9F6CA9A608B3, small LPT model
[    7.585463] urandom-seed: Seeding with /etc/urandom.seed
[    7.684142] procd: - early -
[    7.687055] procd: - watchdog -
[    8.315049] procd: - ubus -
[    8.371904] procd: - init -
[    8.546612] kmodloader: loading kernel modules from /etc/modules.d/*
[    8.557859] tun: Universal TUN/TAP device driver, 1.6
[    8.562965] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[    8.571391] Ethernet Channel Bonding Driver: v3.7.1 (April 27, 2011)
[    8.580401] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    8.587876] cryptodev: driver 1.8 loaded.
[    8.592340] Loading modules backported from Linux version wt-2017-01-31-0-ge882dff19e7f
[    8.600387] Backport generated by backports.git backports-20160324-13-g24da7d3c
[    8.615059] <<Marvell 802.11ac Wireless Network Driver version 10.3.2.0-20170110>>
[    8.622702] pci 0000:00:01.0: enabling device (0140 -> 0142)
[    8.628443] ieee80211 phy0: priv->iobase0 = e0f80000
[    8.628454] ieee80211 phy0: priv->iobase1 = e1200000
[    8.628463] ieee80211 phy0: priv->pcmd_buf = ddf08000  priv->pphys_cmd_buf = 1df08000
[    8.636458] ieee80211 phy0: fw download start
[    8.699990] ieee80211 phy0: FwSize = 207660 downloaded Size = 207660 curr_iteration 65522
[   12.431324] ieee80211 phy0: fw download complete
[   12.431783] ieee80211 phy0: pcmd = ddf08000
[   12.449817] ieee80211 phy0: firmware version: 0x7080004
[   12.809338] ieee80211 phy0: firmware region code: 10
[   12.851995] ieee80211 phy0: 2G disabled, 5G enabled
[   12.856895] ieee80211 phy0: 4 TX antennas, 4 RX antennas
[   12.862298] pci 0000:00:02.0: enabling device (0140 -> 0142)
[   12.868032] ieee80211 phy1: priv->iobase0 = e1380000
[   12.868043] ieee80211 phy1: priv->iobase1 = e1600000
[   12.868052] ieee80211 phy1: priv->pcmd_buf = dddf0000  priv->pphys_cmd_buf = 1ddf0000
[   12.874418] ieee80211 phy1: fw download start
[   12.939175] ieee80211 phy1: FwSize = 207660 downloaded Size = 207660 curr_iteration 65527
[   14.327325] ieee80211 phy1: fw download complete
[   14.327812] ieee80211 phy1: pcmd = dddf0000
[   14.345344] ieee80211 phy1: firmware version: 0x7080004
[   14.706323] ieee80211 phy1: firmware region code: 10
[   14.750021] ieee80211 phy1: 2G enabled, 5G disabled
[   14.754934] ieee80211 phy1: 4 TX antennas, 4 RX antennas
[   14.762803] u32 classifier
[   14.765522]     input device check on
[   14.769196]     Actions configured
[   14.773037] Mirror/redirect action on
[   14.778285] nf_conntrack version 0.5.0 (8192 buckets, 32768 max)
[   14.790080] ip_tables: (C) 2000-2006 Netfilter Core Team
[   14.799009] mwifiex: rx work enabled, cpus 2
[   14.846998] usbcore: registered new interface driver ums-alauda
[   14.853672] usbcore: registered new interface driver ums-cypress
[   14.860218] usbcore: registered new interface driver ums-datafab
[   14.866723] usbcore: registered new interface driver ums-freecom
[   14.873187] usbcore: registered new interface driver ums-isd200
[   14.879542] usbcore: registered new interface driver ums-jumpshot
[   14.886112] usbcore: registered new interface driver ums-karma
[   14.892282] usbcore: registered new interface driver ums-sddr09
[   14.898499] usbcore: registered new interface driver ums-sddr55
[   14.904752] usbcore: registered new interface driver ums-usbat
[   14.917781] xt_time: kernel timezone is -0000
[   14.925132] PPP generic driver version 2.4.2
[   14.929843] NET: Registered protocol family 24
[   14.935112] kmodloader: done loading kernel modules from /etc/modules.d/*
[   15.469997] mwifiex_sdio mmc0:0001:1: info: FW download over, size 391772 bytes
[   15.831665] mwifiex_sdio mmc0:0001:1: WLAN FW is active
[   15.864262] mwifiex_sdio mmc0:0001:1: CMD_RESP: cmd 0x242 error, result=0x2
[   15.871261] mwifiex_sdio mmc0:0001:1: mwifiex_process_cmdresp: cmd 0x242 failed during       initialization
[   15.890625] mwifiex_sdio mmc0:0001:1: info: MWIFIEX VERSION: mwifiex 1.0 (15.68.7.p5)
[   15.898674] mwifiex_sdio mmc0:0001:1: driver_version = mwifiex 1.0 (15.68.7.p5)
[   16.052347] mvneta f1034000.ethernet eth0: configuring for fixed link mode
[   16.059309] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   16.065375] mvneta f1034000.ethernet eth0: Link is Up - 1Gbps/Full - flow control off
[   16.073372] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   16.081683] br-lan: port 1(eth0.1) entered blocking state
[   16.087106] br-lan: port 1(eth0.1) entered disabled state
[   16.092675] device eth0.1 entered promiscuous mode
[   16.097485] device eth0 entered promiscuous mode
[   16.103227] br-lan: port 1(eth0.1) entered blocking state
[   16.108650] br-lan: port 1(eth0.1) entered forwarding state
[   16.122758] mvneta f1070000.ethernet eth1: configuring for fixed link mode
[   16.130044] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
[   16.136169] mvneta f1070000.ethernet eth1: Link is Up - 1Gbps/Full - flow control off
[   16.144170] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[   16.342477] pppoe-wan: renamed from ppp0
[   16.900336] ieee80211 phy1: change: 0xffffffff
[   17.006509] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[   17.137396] ieee80211 phy0: change: 0xffffffff
[   17.271596] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[   17.277594] br-lan: port 2(wlan1) entered blocking state
[   17.282955] br-lan: port 2(wlan1) entered disabled state
[   17.288408] device wlan1 entered promiscuous mode
[   17.293166] br-lan: port 2(wlan1) entered blocking state
[   17.298502] br-lan: port 2(wlan1) entered forwarding state
[   17.304255] br-lan: port 2(wlan1) entered disabled state
[   17.309734] br-lan: port 3(wlan0) entered blocking state
[   17.315091] br-lan: port 3(wlan0) entered disabled state
[   17.320543] device wlan0 entered promiscuous mode
[   17.327109] ieee80211 phy0: change: 0x100
[   17.344423] ieee80211 phy0: change: 0x40
[   17.380440] ieee80211 phy1: change: 0x100
[   17.392530] ieee80211 phy1: change: 0x42
[   17.593821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   17.600257] br-lan: port 2(wlan1) entered blocking state
[   17.605603] br-lan: port 2(wlan1) entered forwarding state
[   17.611269] ieee80211 phy0: change: 0x40
[   17.671185] ieee80211 phy1: change: 0x20
[   17.861365] ieee80211 phy0: change: 0x40
[   17.993370] ieee80211 phy0: change: 0x100
[   18.060535] ieee80211 phy0: change: 0x100
[   18.073629] ieee80211 phy0: change: 0x42
[   18.341340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   18.347812] br-lan: port 3(wlan0) entered blocking state
[   18.353170] br-lan: port 3(wlan0) entered forwarding state

 root@LEDE:~# lsusb
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 002: ID 04e8:1f05 Samsung Electronics Co., Ltd S2 Portable [JMicron] (500GB)
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub

After i remove the cable and hotplug i get this additional lines in DMESG:

 #
[  527.103849] usb 3-1: new SuperSpeed USB device number 2 using xhci-hcd
[  527.134880] usb-storage 3-1:1.0: USB Mass Storage device detected
[  527.141155] scsi host3: usb-storage 3-1:1.0
[  528.154087] scsi 3:0:0:0: Direct-Access     Seagate  Expansion        1805 PQ: 0 ANSI: 6
[  529.455313] sd 3:0:0:0: [sdb] 1953525167 512-byte logical blocks: (1.00 TB/932 GiB)
[  529.463210] sd 3:0:0:0: [sdb] Write Protect is off
[  529.468032] sd 3:0:0:0: [sdb] Mode Sense: 33 00 00 08
[  529.473381] sd 3:0:0:0: [sdb] No Caching mode page found
[  529.478724] sd 3:0:0:0: [sdb] Assuming drive cache: write through
[  529.499962]  sdb: sdb1 sdb2
[  529.503903] sd 3:0:0:0: [sdb] Attached SCSI disk
[  612.132851] EXT4-fs (sdb2): mounted filesystem with ordered data mode. Opts:

root@LEDE:~# lsusb
Bus 003 Device 002: ID 0bc2:231b Seagate RSS LLC
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 002: ID 04e8:1f05 Samsung Electronics Co., Ltd S2 Portable [JMicron] (500GB)
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 003 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub 

Device: Linksys EA4500 (mwl8k driver)
LEDE: 17.01.1

Hi all
I would like to recall to attention an issue that various user are
observing running mwl8k driver together with android and iOS clients
Relevant information can be found here:

https://dev.openwrt.org/ticket/21284 http://www.spinics.net/lists/linux-wireless/msg151171.html

I can add that the problem seems to get worst depending on the
bandwidth usage (higher is worst).
And I can confirm that apparently only android clients are affected,
in the sense that here I have also iPhones and some IP WebCam that
work rock stable with the same router.
Also both 5Ghz and 2.5Ghz radio are affected
Userland seems to have no influence, I have tried wpad and hostapd.
Actually I was trying to workaround the below problem using WPA2-EAP.
But the PEAP-mschapv2 doesn’t work with mwl8k driver on 5Ghz radio
My setup include two different Cisco/Linksys EA4500 running LEDE
17.01.1 and one TPLink WDR3600 with ath9x radios
The EA4500 chipset is Marvell 88W8366 v48.
Well with both 5Ghz radio of my two EA4500 the PEAP MSCHAPV2
authentication fails at the certificates exchange
This is the log I see in freeradius 2

Wed May 3 21:17:26 2017 : Debug: Going to the next request
Wed May 3 21:17:26 2017 : Debug: Waking up in 4.9 seconds.
Wed May 3 21:17:31 2017 : Info: Cleaning up request 34 ID 41 with timestamp +574
Wed May 3 21:17:31 2017 : Info: Cleaning up request 35 ID 42 with timestamp +574
Wed May 3 21:17:31 2017 : Info: Cleaning up request 36 ID 43 with timestamp +574
Wed May 3 21:17:31 2017 : Debug: WARNING:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Wed May 3 21:17:31 2017 : Debug: WARNING: !! EAP session for state
0xd1f19d03d34c849e did not finish!
Wed May 3 21:17:31 2017 : Debug: WARNING: !! Please read
http://wiki.freeradius.org/guide/Certificate_Compatibility Wed May 3 21:17:31 2017 : Debug: WARNING:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Wed May 3 21:17:31 2017 : Info: Ready to process requests.

On hostapd size the logs say that the radius response is received but
the next stage never arrives.
Using the same freeradius 2 I can get PEAP working with the 2.4Ghz
radio with no issue and most important with both 2.4Ghz and 5Ghz radio
on wdr3600, that run the same LEDE release (same kernel) and the same
userland app, so it seems that the problem is really in the
interaction between the mwl8k driver, 5Ghz radio and hostapd and
freeradius.
The problem is shared by two android device (one 7.0.1 and one 6.1)
and and iPhone 7.