OpenWrt 25.12.4 and GL.iNET Flint 2 Router - Crash with port mirror

Installing and Using OpenWrt Network and Wireless Configuration
1

The router crashes every few hours (around 3 to 7 hours).

Chatgpt says it is related to tc (port mirror), other than that, it is not able to provide any solutions and suggests it could be an linux upstream problem (not sure what that means).

I do have port mirror setup: Mirroring the Br-lan to Wan1/Lan 1 port (2.5Gbps), and use a pi to monitor the 2.5Gbps with ntopng.

Any ideas?

Did I setup port mirror correctly?
If not tc, what else should I use?

Here's the content of the rc.d

cat /etc/rc.local
# Put your custom commands here that should be executed once
# the system init finished. By default this file does nothing.

# Ensure RRD directory symlink exists added on 5/24/2026
if [ ! -L /tmp/rrd ]; then
    rm -rf /tmp/rrd
    ln -s /mnt/rrd /tmp/rrd
fi



# remove lan 1 from br-lan
brctl delif br-lan lan1
ip link set lan1 up

# Port mirroring: br-lan to lan1
tc qdisc add dev br-lan clsact
tc filter add dev br-lan ingress matchall action mirred egress mirror dev lan1
tc filter add dev br-lan egress matchall action mirred egress mirror dev lan1

# Workaround for USB detection failure on boot
if [ ! -b "/dev/sda" ] && [ ! -b "/dev/sda1" ] && [ ! -b "/dev/sda2" ]; then
    echo "USB device not found, resetting xHCI controller..." > /dev/console
    echo -n "11200000.usb" > /sys/bus/platform/drivers/xhci-mtk/unbind 2>/dev/null
    sleep 3
    echo -n "11200000.usb" > /sys/bus/platform/drivers/xhci-mtk/bind 2>/dev/null
    sleep 15
fi

exit 0

Crash log:

 cat /sys/fs/pstore/dmesg-ramoops-0
Oops#1 Part1
<6>[   16.180613] xhci-mtk 11200000.usb: irq 124, io mem 0x11200000
<6>[   16.186483] xhci-mtk 11200000.usb: xHCI Host Controller
<6>[   16.191827] xhci-mtk 11200000.usb: new USB bus registered, assigned bus number 2
<6>[   16.199270] xhci-mtk 11200000.usb: Host supports USB 3.2 Enhanced SuperSpeed
<6>[   16.207204] hub 1-0:1.0: USB hub found
<6>[   16.211077] hub 1-0:1.0: 2 ports detected
<6>[   16.215532] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
<6>[   16.225006] hub 2-0:1.0: USB hub found
<6>[   16.228833] hub 2-0:1.0: 1 port detected
<6>[   16.633454] br-lan: port 6(phy1-ap0) entered blocking state
<6>[   16.639041] br-lan: port 6(phy1-ap0) entered forwarding state
<6>[   17.448630] usb 2-1: new SuperSpeed USB device number 2 using xhci-mtk
<6>[   17.498280] usb-storage 2-1:1.0: USB Mass Storage device detected
<6>[   17.504715] scsi host0: usb-storage 2-1:1.0
<5>[   18.578766] scsi 0:0:0:0: Direct-Access     Kingston DataTraveler 3.0      PQ: 0 ANSI: 6
<5>[   18.588786] sd 0:0:0:0: [sda] 120845300 512-byte logical blocks: (61.9 GB/57.6 GiB)
<5>[   18.596661] sd 0:0:0:0: [sda] Write Protect is off
<7>[   18.601550] sd 0:0:0:0: [sda] Mode Sense: 4f 00 00 00
<5>[   18.607470] sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
<6>[   18.669108]  sda: sda1
<5>[   18.671741] sd 0:0:0:0: [sda] Attached SCSI removable disk
<6>[   20.777087] br-lan: port 1(phy0-ap0) entered blocking state
<6>[   20.782673] br-lan: port 1(phy0-ap0) entered forwarding state
<6>[   40.058374] br-lan: port 7(phy1-ap0.sta3) entered blocking state
<6>[   40.064388] br-lan: port 7(phy1-ap0.sta3) entered disabled state
<6>[   40.070489] mt798x-wmac 18000000.wifi phy1-ap0.sta3: entered allmulticast mode
<6>[   40.077903] mt798x-wmac 18000000.wifi phy1-ap0.sta3: entered promiscuous mode
<6>[   40.085257] br-lan: port 7(phy1-ap0.sta3) entered blocking state
<6>[   40.091270] br-lan: port 7(phy1-ap0.sta3) entered forwarding state
<7>[22912.995167] ------------[ cut here ]------------
<2>[22912.999786] Kernel BUG at 0xffffffc0806f0200 [verbose debug info unavailable]
<0>[22913.006904] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP
<7>[22913.012979] Modules linked in: pppoe ppp_async nft_fib_inet nf_flow_table_inet ebtable_nat ebtable_filter ebtable_broute xt_state xt_conntrack xt_CT pppox ppp_generic nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject nft_redir nft_quota nft_numgen nft_nat nft_masq nft_log nft_limit nft_hash nft_flow_offload nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_ct nft_compat nft_chain_nat nf_tables nf_nat nf_flow_table nf_conntrack mt7915e(O) mt76_connac_lib(O) mt76(O) mac80211(O) iptable_mangle iptable_filter ipt_REJECT ip_tables ebtables ebt_vlan ebt_stp ebt_redirect ebt_pkttype ebt_mark_m ebt_mark ebt_limit ebt_among ebt_802_3 cfg80211(O) xt_time xt_tcpudp xt_multiport xt_mark xt_mac xt_limit xt_comment xt_TEE xt_TCPMSS xt_LOG x_tables slhc nfnetlink nf_reject_ipv6 nf_reject_ipv4 nf_log_syslog nf_dup_ipv6 nf_dup_ipv4 nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c compat(O) crypto_safexcel fuse sch_tbf sch_ingress sch_htb sch_hfsc em_u32 cls_u32 cls_route cls_matchall cls_fw cls_flow cls_basic act_skbedit act_mirred act_gact
<7>[22913.013163]  sha512_arm64 sha1_ce sha1_generic seqiv md5 geniv des_generic libdes authencesn authenc usb_storage leds_gpio xhci_plat_hcd xhci_pci xhci_mtk_hcd xhci_hcd gpio_button_hotplug(O) usbcore usb_common
<7>[22913.121188] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G           O       6.12.87 #0
<7>[22913.129259] Tainted: [O]=OOT_MODULE
<7>[22913.132732] Hardware name: GL.iNet GL-MT6000 (DT)
<7>[22913.137418] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
<7>[22913.144359] pc : 0xffffffc0806f0200
<7>[22913.147833] lr : 0xffffffc08065f674
<7>[22913.151305] sp : ffffffc080d13130
<7>[22913.154604] x29: ffffffc080d13130 x28: ffffff8001372138 x27: ffffff800a219500
<7>[22913.161722] x26: ffffff8001372080 x25: 0000000000000584 x24: 0000000000000ec0
<7>[22913.168840] x23: ffffffc080d13278 x22: ffffff80000b5c10 x21: ffffff8007a69300
<7>[22913.175956] x20: 0000000000000000 x19: ffffff800a219500 x18: ffffff803fda1180
<7>[22913.183073] x17: 09809dfc56aad748 x16: 0000000000000000 x15: 000000000005723d
<7>[22913.190190] x14: 00000000000002d0 x13: 00080000200022f1 x12: ffffff8001372080
<7>[22913.197306] x11: ffffff800131a000 x10: ffffffc080d13278 x9 : ffffffc080d13290
<7>[22913.204423] x8 : 000000000000ffff x7 : 0000000000000018 x6 : 000000000000e760
<7>[22913.211540] x5 : 00000000ffffffff x4 : 000000004a2bc0fc x3 : 0000000000000820
<7>[22913.218658] x2 : 0000000000000ec0 x1 : 0000000000000002 x0 : ffffff800a219500
<7>[22913.225774] Call trace:
<7>[22913.228207]  0xffffffc0806f0200
<7>[22913.231334]  0xffffffc08065f674
<7>[22913.234459]  0xffffffc08070cb30
<7>[22913.237585]  0xffffffc080761cf8
<7>[22913.240711]  0xffffffc0807620dc
<7>[22913.243837]  0xffffffc08070d68c
<7>[22913.246963]  0xffffffc0808eace0
<7>[22913.250089]  0xffffffc0808eadd4
<7>[22913.253215]  0xffffffc08070cb30
<7>[22913.256340]  0xffffffc08070d580
<7>[22913.259466]  0xffffffc078dfd0d0 [act_mirred@0000000040dce4b9+0x2000]
<7>[22913.265848]  0xffffffc08076fc1c
<7>[22913.268974]  0xffffffc078dfdaa0 [act_mirred@0000000040dce4b9+0x2000]
<7>[22913.275322]  0xffffffc078dfdd38 [act_mirred@0000000040dce4b9+0x2000]
<7>[22913.281669]  0xffffffc08076f990
<7>[22913.284794]  0xffffffc078e33204 [cls_matchall@00000000ea7cd576+0x2000]
<7>[22913.291314]  0xffffffc080769070
<7>[22913.294440]  0xffffffc080769258
<7>[22913.297565]  0xffffffc0807089b4
<7>[22913.300691]  0xffffffc08070eb24
<7>[22913.303817]  0xffffffc08070f648
<7>[22913.306942]  0xffffffc08070f69c
<7>[22913.310068]  0xffffffc08070f700
<7>[22913.313193]  0xffffffc0808a73e0
<7>[22913.316318]  0xffffffc0808a7a74
<7>[22913.319444]  0xffffffc0808a7c70
<7>[22913.322570]  0xffffffc08070e754
<7>[22913.325696]  0xffffffc08070f648
<7>[22913.328822]  0xffffffc08070f69c
<7>[22913.331948]  0xffffffc08070f7e0
<7>[22913.335074]  0xffffffc0807103c4
<7>[22913.338199]  0xffffffc080710b60
<7>[22913.341325]  0xffffffc080042e40
<7>[22913.344451]  0xffffffc080010150
<7>[22913.347577]  0xffffffc0800148cc
<7>[22913.350702]  0xffffffc0800148a0
<7>[22913.353828]  0xffffffc0800148f8
<7>[22913.356954]  0xffffffc080043284
<7>[22913.360079]  0xffffffc08094ad74
<7>[22913.363205]  0xffffffc08094b33c
<7>[22913.366331]  0xffffffc080011304
<7>[22913.369456]  0xffffffc08094c404
<7>[22913.372582]  0xffffffc080081b50
<7>[22913.375707]  0xffffffc080081d50
<7>[22913.378833]  0xffffffc08001e744
<7>[22913.381959]  0xffffffc080021f34
<0>[22913.385088] Code: aa1303e0 52800021 97ffff0a 17ffffd2 (d4210000)
<4>[22913.391162] ---[ end trace 0000000000000000 ]---

DISTRIB_ID='OpenWrt'
DISTRIB_RELEASE='25.12.4'
DISTRIB_REVISION='r32933-4ccb782af7'
DISTRIB_TARGET='mediatek/filogic'
DISTRIB_ARCH='aarch64_cortex-a53'
DISTRIB_DESCRIPTION='OpenWrt 25.12.4 r32933-4ccb782af7'
2

I don't see a direct issue other than:

Maybe you want it as readonly then you need to be sure to be in promiscious mode, this is often advised for monitoring devices, in this case if the monitoring happens on your router itself, otherwise the device connected to lan1 needs it set to promiscious mode.

Another probability of the issue is, maybe try a smaller part instead of the full br-lan bridge, I also tested this on a bigger bridge with more than 12 vlans, it crashed within a day and the console log was filled with tc messages that the buffer was full, either something does not clear or it is expected to fill up, either way I knew it was going to be bad because I overwhelmed the router by doubling congestion on a congested network.

Maybe the ip link command to remove lan1 from the bridge isn't that playing well with netifd events on the system and maybe plugins?

3

the monitoring occurs on an orange pi. The orange pi (which hosts netdata, and ntopng) runs very stable. I just upgraded to v25.12.5, I don't expect any improvement, but who knows.