RT-AC88U random crashes

[samw5]

Been having some issues lately with my AC88U just crashing or having the wireless restart.

I had a complete lock up this morning where I had to power cycle the router for it to come back online.
The one thing that I'm wondering may be causing the issue is that I am forcing my phone (OnePlus 8 Pro) to stay on the 2.4Ghz band as it's having major issues with the 5Ghz. From looking at the logs I see the mac of the phone in the error so I wonder if related.

This doesn't happen very often and more so in the morning when in close proximity to the router (ie when it should be on the 5Ghz band) and when using the phone extensively.
I've attached the log file with the dump errors.

If anyone is able to share some light that would be great.

 

[vaboro]

Here’s the problem:

May  6 08:09:57 kernel: DUMP CONSOLE: TRAP 4(2acd90): pc 11144, lr 206743, sp 2acde8, cpsr 68000193, spsr 68000033
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481   dfsr 5, dfar 5e000004
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481   r0 5e00000c, r1 5e000004, r2 2007f8, r3 5e00000c, r4 bf18bbf, r5 3f7c58, r6 3f7c58
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481   r7 6a00, r8 100, r9 3f8b90, r10 e, r11 0, r12 26
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481
May  6 08:09:57 kernel: DUMP CONSOLE:    sp+0 003f7a10 003f0148 003f7c58 00206743
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481   sp+10 003f0148 003f6890 003f7c58 00207cc7
May  6 08:09:57 kernel: DUMP CONSOLE:
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+c 00206743
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+1c 00207cc7
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+3c 0020b6dd
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+7c 0020887d
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+84 0020a6f3
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+8c 0020a70f
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+94 0020ba43
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+a4 0020e78d
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+c4 002087f5
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+e4 0020be5b
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+ec 0001145f
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+fc 0020d635
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+104 0020d3f5
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+124 0027d21d
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+4c4 000089bd
May  6 08:09:57 kernel: DUMP CONSOLE: 045122.481 sp+4f0 0000072f
May  6 08:09:57 kernel: dhdpcie_checkdied: msgtrace address : 0x00000000
May  6 08:09:57 kernel: console address  : 0x003FFCF0
May  6 08:09:57 kernel: Assrt not built in dongle
May  6 08:09:57 kernel: TRAP type 0x4 @ epc 0x11144, cpsr 0x68000193, spsr 0x68000033, sp 0x2acde8, lp 0x206743, rpc 0x11144
May  6 08:09:57 kernel: Trap offset 0x2acd90, r0 0x5e00000c, r1 0x5e000004, r2 0x2007f8, r3 0x5e00000c, r4 0xbf18bbf, r5 0x3f7c58, r6 0x3f7c58, r7 0x6a00

Maybe some ambiguous config settings are causing the kernel trap? Have you done any firmware updates and/or configuration changes lately?

 

[samw5]

I'm honestly at a loss here

 

[vaboro]

I'm honestly at a loss here

Cheer up, your router is fully functional, no reason to be at a loss
Tweaking config settings a lot may sometimes result in weird behavior up to kernel panics. I may recommend nvram reset and setting up the router manually from ground up again. Take a look at this post: http://www.snbforums.com/threads/rt-ac86u-random-crash.72031/
I have two AC86U's which I both recovered from kernel panics and boot loops using the method described in the recommened post. In step (4) unplug not only the power cord but any cables connected to the router (I mean WAN and LAN cables if any, USB dongles, unplug everything).
Unfortunately, there's a slight chance that holding WPS+power button at boot works differently for AC88U unlike for AC86U. I hope it's the same.
Anyways, since you have access to console you will see what WPS+power at boot means for your router. For AC86U the console output is this

Spoiler: AC86U interative CFE mode on boot

----
BTRM
V1.6
CPU0
L1CD
MMUI
MMU7
DATA
ZBBS
MAIN
OTP?
OTPP
USBT
NAND
IMG?
IMGL
UHD?
UHDP
RLO?
RLOP
UBI?
UBIP
PASS
----
HELO
.-1.0.38-161.122

CPU0
L1CD
MMUI
MMU>
CODE
ZBBS
MAIN
NVRAM memcfg 0x1527
MCB chksum 0xa8b35841, config 0x1527

MemsysInit lpf0_generic_aarch64 1.3.0.1 20150910
DDR3
90001328 80018000 8001A000 00000000 00000000 0060371A
MCB rev=0x00040301 Ref ID=0x0371A Sub Bld=0x006
Dram Timing 11-11-11

DDR3-1600 CL11 total 1024MB 1 16bits part[s] %1 SSC

Add/Ctl Alignment
no adjustment

ZQ Cal LP PHY
R in Ohm
P: Finger=0x2D0 Term=0x78 Drv=0x2A
N: Finger=0x2D0 Term=0x78 Drv=0x2A

PLL Ref(Hz)=0x02FAF080 UI STEPS=0x038
DDR CLK(MHz)=0x31B WL CLK dly(ps)=0x0C8 bitT(ps)=0x274 VDLsize(fs)=0x2BCE CLK_VDL=0x01A

SHMOO 28nm
8001A000 80018800 00000000 00020000 00000000

Shmoo WL

One UI Steps : 0x43

auto-clk result = 00B (filter=0C steps)
initial CLK shift = 01A
final CLK shift   = 00B

   0000000000111111111122222222223333333333444444444455555555556666666
   0123456789012345678901234567890123456789012345678901234567890123456
00 S-----------------X++++++++++++++++++++++++++++++++++++++++++++++++
01 S-------------------X++++++++++++++++++++++++++++++++++++++++++++++

Shmoo RD En
FORCED WR ODT = 0x18001800
DQSN DRIVE PAD CONTROL (from) (to)
B0 00031A31 00079A31
B1 00031A31 00079A31
B0 RISE UI=1 VDL=18 PICK UI=2 VDL=18
B1 RISE UI=1 VDL=0D PICK UI=2 VDL=0D
   0000000000111111111122222222223333333333444444444455555555556666666
   0123456789012345678901234567890123456789012345678901234567890123456
00 --S---------------------X++++++++++++++++++++++++++++++++++++++++++
01 --S----------X+++++++++++++++++++++++++++++++++++++++++++++++++++++

Shmoo RD DQ NP
DQS :
B0 VDL=38 ok
B1 VDL=38 ok
   0000000000111111111122222222223333333333444444444455555555556666666
   0123456789012345678901234567890123456789012345678901234567890123456
00 ---+++++++++++++++++++++++++X+++++++++++++++++++++++++-------------
01 ------++++++++++++++++++++++++X++++++++++++++++++++++++------------
02 ---++++++++++++++++++++++++X+++++++++++++++++++++++++--------------
...

15 ----++++++++++++++++++++++++X+++++++++++++++++++++++++-------------

Shmoo RD DQ P
   0000000000111111111122222222223333333333444444444455555555556666666
   0123456789012345678901234567890123456789012345678901234567890123456
00 --++++++++++++++++++++++++++X++++++++++++++++++++++++++------------
01 -----++++++++++++++++++++++++X+++++++++++++++++++++++++------------
...

15 ---++++++++++++++++++++++++++X+++++++++++++++++++++++++++----------

Shmoo RD DQ N
   0000000000111111111122222222223333333333444444444455555555556666666
   0123456789012345678901234567890123456789012345678901234567890123456
00 ---++++++++++++++++++++++++++X++++++++++++++++++++++++++-----------
01 ------+++++++++++++++++++++++++X++++++++++++++++++++++++++---------
...

15 ---+++++++++++++++++++++++++X++++++++++++++++++++++++++------------

RD DQS adjustments :
BL0: Start: 0x38 Final: 0x38
BL1: Start: 0x38 Final: 0x38

Shmoo WR DQ
   0000000000111111111122222222223333333333444444444455555555556666666
   0123456789012345678901234567890123456789012345678901234567890123456
00 --+++++++++++++++++++++++++X++++++++++++++++++++++++++-------------
01 -----+++++++++++++++++++++++++X+++++++++++++++++++++++++-----------
...

15 ----++++++++++++++++++++++++++X+++++++++++++++++++++++++++---------

Shmoo WR DM
WR DM
   0000000000111111111122222222223333333333444444444455555555556666666
   0123456789012345678901234567890123456789012345678901234567890123456
00 ------++++++++++++++++++++++++++X+++++++++++++++++++++++++++-------
01 -++++++++++++++++++++++++++X+++++++++++++++++++++++++++------------
DDR test done successfully

FPS0
----
PAR0
J004
JFFS
BT04
0008
----
PAR1
J003
JFFS
BT03
0768
----
TRY0
NAN3
JFS2
RFS1
JFFS
JFS2
NAN5


CFE version 1.0.38-161.122 for BCM94908 (64bit,SP,LE)
Build Date: Wed Nov 25 14:33:00 CST 2020 (defjovi@ubuntu-4JB1262-ext)
Copyright (C) 2000-2015 Broadcom Corporation.

Boot Strap Register:  0x6fc42
Chip ID: BCM4906_A0, Broadcom B53 Quad Core: 1800MHz
Total Memory: 1073741824 bytes (1024MB)
Status wait timeout: nandsts=0x50000000 mask=0x40000000, count=0
NAND ECC BCH-4, page size 0x800 bytes, spare size used 64 bytes
NAND flash device: , id 0xc2da block 128KB size 262144KB
pmc_init:PMC using DQM mode
pmc_init:AVS disabled
Skip Rescue Mode

wps button pressed...
wps button pressed...
wps button pressed...
wps button pressed...
wps button pressed...
wps button pressed...
You could release wps button now

Board IP address                  : 192.168.1.1:ffffff00
Host IP address                   : 192.168.1.100
Gateway IP address                :
Run from flash/host/tftp (f/h/c)  : f
Default host run file name        : vmlinux
Default host flash file name      : bcm963xx_fs_kernel
Boot delay (0-9 seconds)          : 3
Boot image (0=latest, 1=previous) : 0
Default host ramdisk file name    :
Default ramdisk store address     :
Default DTB file name             :
Board Id                          : GT-AC2900
Number of MAC Addresses (1-64)    : 11
Base MAC Address                  : 25:40:ff:2f:26:a4
PSI Size (1-128) KBytes           : 48
Enable Backup PSI [0|1]           : 0
System Log Size (0-256) KBytes    : 0
Auxillary File System Size Percent: 0
flow memory allocation (MB)       : 14
buffer memory allocation (MB)     : 16
DHD 0 memory allocation (MB)      : 0
DHD 1 memory allocation (MB)      : 0
DHD 2 memory allocation (MB)      : 0
WLan Feature                      : 0x00
Partition 1 Size (MB)             : 8M
Partition 2 Size (MB)             : 48M
Partition 3 Size (MB)             : 0M
Partition 4 Size (MB) (Data)      : 8M

Initalizing switch low level hardware.
pmc_switch_power_up: Rgmii Tx clock zone1 enable 1 zone2 enable 1.
Software Resetting Switch ... Done.
Waiting MAC port Rx/Tx to be enabled by hardware ...Done
Disable Switch All MAC port Rx/Tx
Enable Switch MAC Port Rx/Tx, set PBVLAN to FAN out, set switch to NO-STP.
CFE>
web info: Waiting for connection on socket 0.