BE6500 reboot under sustained Wi-Fi upload load

Router
1

Hi GL.iNet team & community,

I’m experiencing a reproducible router reboot/crash on a GL-BE6500 during sustained high-throughput uploads over Wi-Fi. This is not a NAS/container/app crash, the router’s Wi-Fi subsystem (WCSS/CNSS) crashes and then the whole router reboots.

Environment

  • Device: GL.iNet GL-BE6500

  • Firmware: v4.8.7 (OpenWrt 23.05-SNAPSHOT)

  • Kernel Version: 5.4.213

  • Uplink: Vodafone cable modem in front (router behind it) Vodafone modem → WAN Port

  • Client: MacBook (Wi-Fi)

  • Target: NAS on LAN (Audiobookshelf running in Docker on NAS; upload via web UI through reverse proxy/Nginx Proxy Manager)

What triggers it

  • Uploading large audiobook files (multi-GB) via HTTPS to the NAS.

  • After some time under sustained upload load the router reboots.

  • The NAS / container remain fine; the router crashes.

Expected behavior

  • At worst I would expect the application or upload to fail/timeout.

  • Router should not reboot due to traffic load.

Actual behavior

  • Router reboots; logs show WCSS/CNSS fatal errors / TARGET ASSERTED.

  • Appears to be a Wi-Fi firmware/driver crash (not an application issue).

Relevant log excerpt (system log)

Jan 23 11:20:49 192.168.8.1 kernel: [49264.750834] WARN: Access Violation!!!, Run "cat /sys/kernel/debug/qti_debug_logs/tz_log" for more details
Jan 23 11:20:50 192.168.8.1 kernel: [49264.795502] qcom-q6-mpd d10000.remoteproc: fatal error received: err_memv_err 2.1:
Jan 23 11:20:50 192.168.8.1 kernel: [49264.759502] QC Image Version : QC_IMAGE_VERSION_STRING=WLAN.WBE.1.4-01734-QCAHKSWPL_SILICONZ-1.99380.1.110523.21
Jan 23 11:20:50 192.168.8.1 kernel: [49264.759502] Image Variant : IMAGE_VARIANT_STRING=5332.wlanfw.evalQ
Jan 23 11:20:50 192.168.8.1 kernel: [49264.759502] Exception : 0 Exception detected PName:wlan0 TName:IST2
Jan 23 11:20:50 192.168.8.1 kernel: [49264.807588] cnss[2]: ERR: XXX TARGET ASSERTED XXX
Jan 23 11:20:50 192.168.8.1 kernel: [49264.829698] cnss[2]: ERR: XXX TARGET QCA5332 instance_id 0x2 plat_env idx 0 XXX
Jan 23 11:20:50 192.168.8.1 kernel: [49264.834559] remoteproc remoteproc0: crash detected in d10000.remoteproc: type fatal error
Jan 23 11:20:52 192.168.8.1 kernel: [49267.682017] cnss_pci 0001:01:00.0: CRASHED - [DID:DOMAIN:BUS:SLOT] - 1109:0001:01:00
Jan 23 11:20:52 192.168.8.1 kernel: [49267.682050] cnss-pci 0001:01:00.0: Fatal error received from WCSS software!
Jan 23 11:20:52 192.168.8.1 kernel: [49267.682050] QC Image Version : QC_IMAGE_VERSION_STRING=WLAN.WBE.1.4-01734-QCAHKSWPL_SILICONZ-1.99380.1.110523.21
Jan 23 11:20:52 192.168.8.1 kernel: [49267.682050] Image Variant : IMAGE_VARIANT_STRING=9224.wlanfw.eval_v2Q
Jan 23 11:20:52 192.168.8.1 kernel: [49267.682050] platform_mlo.c:2196 Assertion !partner_chip_crash_ind_failedparam0 :zero, param1 :zero, param2 :zero.

tz_log

0035dbbe5
[0035ea6c7]xPUAC Enabled
003635554
[1136022b550]MEMNOC ERROR: ERRLOG0_LOW = 0x00001605
[1136022b88e]MEMNOC ERROR: ERRLOG0_HIGH = 0x00000003
[1136022bb52]MEMNOC ERROR: ERRLOG1_LOW = 0x0000001c
[1136022be29]MEMNOC ERROR: ERRLOG1_HIGH = 0x0000410e
[1136022c0e2]MEMNOC ERROR: ERRLOG2_LOW = 0x0c480000
[1136022c3b7]MEMNOC ERROR: ERRLOG2_HIGH = 0x00000000
[1136022c660]MEMNOC ERROR: ERRLOG3_LOW = 0x00000004
[1136022c917]MEMNOC ERROR: ERRLOG3_HIGH = 0x00000000
[1136022cbc2]MEMNOC ERROR: SBM0 FAULTINSTATUS0_LOW = 0x00000001
[1136022cea8]MEMNOC ERROR Decode : BID = 0x2, PID = 0x1, MID = 0xe
[1136022d1ab]MEMNOC ERROR Decode : Initiator = 0x3 - wcssq6, Target = 0x4 - qxs_snoc
[1136022d4fb]MEMNOC ERROR Decode : ErrCode = Time-out error
[1136022d78f]MEMNOC ERROR Decode : Address of Violation = 0xc480000
[1136022dbb8]SNOC ERROR: ERRLOG0_LOW = 0x00031605
[1136022deb5]SNOC ERROR: ERRLOG0_HIGH = 0x00000003
[1136022e134]SNOC ERROR: ERRLOG1_LOW = 0x0000008b
[1136022e39e]SNOC ERROR: ERRLOG1_HIGH = 0x0000410e
[1136022e62b]SNOC ERROR: ERRLOG2_LOW = 0x00080000
[1136022e8af]SNOC ERROR: ERRLOG2_HIGH = 0x00000000
[1136022eb11]SNOC ERROR: ERRLOG3_LOW = 0x00000004
[1136022ed8b]SNOC ERROR: ERRLOG3_HIGH = 0x00000000
[1136022f061]SNOC ERROR: SBM0 FAULTINSTATUS0_LOW = 0x00000001
[1136022f395]SNOC ERROR Decode : BID = 0x2, PID = 0x1, MID = 0xe
[1136022f6e0]SNOC ERROR Decode : Initiator = 0x4 - memnoc, Target = 0xb - wcss
[1136022fa37]SNOC ERROR Decode : ErrCode = Time-out error
[1136022fcbc]SNOC ERROR Decode : Address of Violation = 0x80000
[1137a91db4d](70022d 47)
[1137a92a69d](700111 1 2)
[1137a92a898](700111 2 2)
[1137a92aa67](700111 3 2)
[1137a92ac35](700116 2 2)
[1137a92adfd](700116 0 2)
[1137a92afdb](700116 1 2)
[1137a92c0f1]Reset Reason: HLOS Panic
[1137a92c52d](70023b 2 d)
[1137a930c28](700111 1 0)
[1137a930e2b](700111 2 0)
[1137a930ff3](700111 3 0)
[1137a9311cb](700116 2 0)
[1137a93138d](700116 0 0)
[1137a931554](700116 1 0)
[1137a932636]SGI Interrupt
[1137a9337af](70023b 0 f)
[1137a937c76](700111 1 1)
[1137a937e8b](700111 2 1)
[1137a938055](700111 3 1)
[1137a938241](700116 2 1)
[1137a93840b](700116 0 1)
[1137a9385df](700116 1 1)
[1137a9396e5]SGI Interrupt
[1137a93a86c](70023b 1 f)
[1137a93eddf](700111 1 3)
[1137a93effa](700111 2 3)
[1137a93f1ca](700111 3 3)
[1137a93f3ba](700116 2 3)
[1137a93f581](700116 0 3)
[1137a93f74f](700116 1 3)
[1137a940885]SGI Interrupt
[1137a941a22](70023b 3 f)
[1137a9673e3](700126)
[1137a967566]Reset using PS hold

What I already checked / tried

  • MLO is OFF

  • Tried changing channel/

2

Hi

Could you please help further confirm the following:

  1. After the issue occurs again, please export the complete logs and send them to us via private message so we can investigate further.
  2. Can this issue be reproduced consistently/continuously under the same conditions?
  3. Is there a specific size of the uploaded file, or does it occur randomly—for example, sometimes after uploading 1 GB, 2 GB, or 3 GB?
  4. If HTTPS is not used, and other file transfer protocols such as Samba are used instead, does the issue still occur?
  5. If possible, please change the Admin Panel password to a simple one, then go to LuCI → System → Backup / Flash Firmware to export the configuration and send the backup file and the password to us via private message, so we can import your configuration locally and test whether this issue is related to a specific configuration.

How to export logs:

image
image1430×911 87 KB

How to send private messages:

image
image632×233 19.1 KB

How to export the backup file:

image
image1227×834 39 KB

5

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.