Hello. I’ve bought the Brume 2 yesterday, and tried to install some software that requires iptables-mod-nfqueue, but trying to install it crashes/hangs the router. Specifically, it happens on the “Configuring kmod-nfnetlink-queue” step.
Firmware version 4.5.16, all the opkg packages are updated to latest versions.
Crash log
<14>[ 179.192031] kmodloader: loading kernel modules from /etc/modules.d/*
<3>[ 179.202277] dm_mod: exports duplicate symbol dm_consume_args (owned by kernel)
<1>[ 179.246444] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000088
<1>[ 179.255273] Mem abort info:
<1>[ 179.258055] ESR = 0x96000006
<1>[ 179.261115] EC = 0x25: DABT (current EL), IL = 32 bits
<1>[ 179.266421] SET = 0, FnV = 0
<1>[ 179.269477] EA = 0, S1PTW = 0
<1>[ 179.272696] Data abort info:
<1>[ 179.275580] ISV = 0, ISS = 0x00000006
<1>[ 179.279411] CM = 0, WnR = 0
<1>[ 179.282367] user pgtable: 4k pages, 39-bit VAs, pgdp=000000007912e000
<1>[ 179.288799] [0000000000000088] pgd=000000006ef29003, pud=000000006ef29003, pmd=0000000000000000
<0>[ 179.297492] Internal error: Oops: 96000006 [#1] SMP
<7>[ 179.302354] Modules linked in: nfnetlink_queue(+) mtkhnat pppoe ppp_async option wireguard usb_wwan rndis_host qmi_wwan pppox ppp_generic libchacha20poly1305 ipt_REJECT huawei_cdc_ncm chacha_neon cdc_ncm cdc_ether zstd xt_time xt_tcpudp xt_tcpmss xt_string xt_statistic xt_state xt_recent xt_quota xt_pkttype xt_owner xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_ecn xt_dscp xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_bpf xt_addrtype xt_TCPMSS xt_REDIRECT xt_MASQUERADE xt_LOG xt_HL xt_FLOWOFFLOAD xt_DSCP xt_CT xt_CLASSIFY usbserial usbnet ts_kmp ts_fsm ts_bm slhc poly1305_neon nf_reject_ipv4 nf_log_ipv4 nf_flow_table_hw nf_flow_table nf_conntrack_netlink nf_conncount mtqos mtfwd libcurve25519_generic libchacha iptable_raw iptable_nat iptable_mangle iptable_filter ipt_ECN ipheth ip_tables exfat crc_ccitt cdc_wdm cdc_acm arptable_filter arpt_mangle arp_tables fuse sch_tbf sch_ingress sch_htb sch_hfsc em_u32 cls_u32 cls_tcindex cls_route
<7>[ 179.302447] cls_matchall cls_fw cls_flow cls_basic act_skbedit act_mirred act_gact xt_set ip_set_list_set ip_set_hash_netportnet ip_set_hash_netport ip_set_hash_netnet ip_set_hash_netiface ip_set_hash_net ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink ip6table_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip6t_NPT ip6t_rt ip6t_mh ip6t_ipv6header ip6t_hbh ip6t_frag ip6t_eui64 ip6t_ah nf_log_ipv6 nf_log_common ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 ifb ip6_udp_tunnel udp_tunnel veth tun vfat fat ntfs dax nls_utf8 nls_iso8859_1 nls_cp437 shortcut_fe_ipv6 shortcut_fe mtdoops btrfs xor zstd_decompress zstd_compress xxhash xor_neon raid6_pq libcrc32c leds_gpio xhci_plat_hcd uhci_hcd ohci_platform ohci_hcd fsl_mph_dr_of ehci_platform ehci_fsl kmwan ehci_hcd gpio_button_hotplug gl_sdk4_tertf
<7>[ 179.389177] gl_sdk4_black_white_list f2fs ext4 mbcache jbd2 mii crc32c_generic crc32_generic gl_sdk4_hw_info
<7>[ 179.484605] CPU: 0 PID: 8256 Comm: kmodloader Not tainted 5.4.211 #0
<7>[ 179.490941] Hardware name: GL.iNet GL-MT2500 (DT)
<7>[ 179.495632] pstate: 80000005 (Nzcv daif -PAN -UAO)
<7>[ 179.500414] pc : init_module+0x8201e4/0x8222bc [nfnetlink_queue]
<7>[ 179.506409] lr : ops_init+0x3c/0x120
<7>[ 179.509969] sp : ffffffc012c3bab0
<7>[ 179.513270] x29: ffffffc012c3bab0 x28: 0000000000000003
<7>[ 179.518567] x27: ffffffc0109c84d0 x26: ffffffc008f7c0c0
<7>[ 179.523864] x25: ffffffc012c3bd60 x24: ffffffc010a0bbe8
<7>[ 179.529161] x23: ffffffc010a0bbc0 x22: 0000000000000011
<7>[ 179.534458] x21: ffffffc010a0bcc0 x20: ffffffc010a0bcc0
<7>[ 179.539754] x19: ffffff803c9ce500 x18: 0000000000000000
<7>[ 179.545051] x17: 0000000000000000 x16: 0000000000000000
<7>[ 179.550348] x15: 07151c58130e131d x14: ffffff803abacb80
<7>[ 179.555644] x13: ffffff803a899980 x12: ffffff803bbd1500
<7>[ 179.560941] x11: ffffff803aaa9900 x10: ffffff803e212a00
<7>[ 179.566238] x9 : ffffff803e212900 x8 : ffffff803a5e4080
<7>[ 179.571535] x7 : ffffff803a622380 x6 : ffffff803c9ce488
<7>[ 179.576831] x5 : 0000000000000040 x4 : 0000000000000008
<7>[ 179.582127] x3 : 00000000000000a3 x2 : 0000000000002710
<7>[ 179.587425] x1 : 0000000000000011 x0 : 0000000000000000
<7>[ 179.592721] Call trace:
<7>[ 179.595158] init_module+0x8201e4/0x8222bc [nfnetlink_queue]
<7>[ 179.600802] ops_init+0x3c/0x120
<7>[ 179.604019] register_pernet_operations+0xdc/0x1e8
<7>[ 179.608796] register_pernet_subsys+0x2c/0x48
<7>[ 179.613141] init_module+0x20/0x1000 [nfnetlink_queue]
<7>[ 179.618266] do_one_initcall+0x74/0x1c8
<7>[ 179.622090] do_init_module+0x40/0x1e0
<7>[ 179.625826] load_module+0x1ac0/0x1d08
<7>[ 179.629562] __do_sys_init_module+0x140/0x1d0
<7>[ 179.633904] __arm64_sys_init_module+0x18/0x20
<7>[ 179.638336] el0_svc_common.constprop.2+0x7c/0x110
<7>[ 179.643113] el0_svc_handler+0x20/0x80
<7>[ 179.646849] el0_svc+0x8/0x680
<0>[ 179.649895] Code: b9408021 a90153f3 aa0003f4 f946d000 (f8615802)
<4>[ 179.655973] —[ end trace b98cad4a06757e17 ]—
<0>[ 179.661532] Kernel panic - not syncing: Fatal exception
<2>[ 179.666744] SMP: stopping secondary CPUs
<0>[ 179.670656] Kernel Offset: disabled
<0>[ 179.674132] CPU features: 0x00002,20002008
<0>[ 179.678213] Memory Limit: none
Guess you used the official OpenWrt sources for it?
Won’t work.
The GL firmware is an older (custom) OpenWrt repo, you can’t just “upgrade” like on Ubuntu or sth. else.
Guess you used the official OpenWrt sources for it?
Oh, no, no. I meant that I updated all packages to the latest available version. I didn’t change package sources, they’re still default.
The general advice is to not upgrade the packages itself, at least not all. Can cause trouble.
I don’t think it was caused by that. First time I tried to install the nfqueue mod, I didn’t touch installed packages, and the crash still happened. I then reset router, installed updates for packages, and tried again to the same result.
Maybe the whole system isn’t compatible with this mod. Since iptables is highly used for nearly everything I could imagine that installing the package you want to have might be not possible.