OpenWrt 25.12.5 - Service Release

hauke · July 1, 2026, 12:05am

Hi,

The OpenWrt community is proud to announce the fifth service release of the OpenWrt 25.12 stable series.

Download firmware images using the OpenWrt Firmware Selector:

https://firmware-selector.openwrt.org/?version=25.12.5

Download firmware images directly from our download servers:

https://downloads.openwrt.org/releases/25.12.5/targets/

Main changes between OpenWrt 25.12.4 and OpenWrt 25.12.5

Only the main changes are listed below. See the full changelog for details.

Security fixes

This release fixes several remotely triggerable vulnerabilities in core network services that are enabled by default. Updating is strongly recommended.

odhcpd (DHCPv6/DHCPv4/RA server, enabled by default): multiple vulnerabilities reachable by a network-adjacent attacker were fixed by updating odhcpd:
- CVE-2026-53921 (Critical): stack buffer overflow in the DHCPv6 IA reply serialization, triggerable with crafted DHCPv6 REQUEST packets. https://github.com/openwrt/odhcpd/security/advisories/GHSA-7fwx-hhrg-3496
- CVE-2026-53918 (High): use-after-free in the DHCPv6 IA handler. https://github.com/openwrt/odhcpd/security/advisories/GHSA-44ff-jcwh-wgc2
- CVE-2026-53920 (High): stack memory disclosure via a truncated DHCPv6 IA_NA/IA_PD option. https://github.com/openwrt/odhcpd/security/advisories/GHSA-p769-5v73-pc4f
- CVE-2026-53922 (Moderate): pre-auth denial of service via a size_t underflow in DHCPv6 IA handling. https://github.com/openwrt/odhcpd/security/advisories/GHSA-7hcw-g2jh-pqv5
- CVE-2026-55606 (Moderate): stack buffer overread caused by a DUID length endianness mismatch. https://github.com/openwrt/odhcpd/security/advisories/GHSA-x8x4-7gvf-gp45
- No CVE assigned (Moderate, CVSS 5.4): the NDP relay accepted IPv6 Neighbor Solicitations with a hop limit other than 255 (RFC 4861 violation), letting an off-link attacker spoof NS packets through the relay (neighbor-cache poisoning, traffic redirection or DoS). Only relevant when the NDP relay is enabled. https://github.com/openwrt/odhcpd/security/advisories/GHSA-qvg7-9jf5-wgjc
odhcpd / LuCI stored XSS (Critical): an unauthenticated DHCPv6 client could inject lease-file lines through a crafted FQDN hostname, resulting in stored cross-site scripting on the LuCI DHCPv6 leases status page. Fixed by escaping client hostnames in the lease state file. https://github.com/openwrt/openwrt/security/advisories/GHSA-hhmc-92hw-535f
uhttpd (web server): three HTTP request smuggling issues on keep-alive connections were fixed:
- CVE-2026-55612 (High): invalid chunk-length state reset. https://github.com/openwrt/uhttpd/security/advisories/GHSA-p55c-rmhc-qfm5
- CVE-2026-55614 (High): case-sensitive Transfer-Encoding matching. https://github.com/openwrt/uhttpd/security/advisories/GHSA-mcfg-c4r7-pjpf
- CVE-2026-55613 (Moderate): ubus POST body parse-error desync. https://github.com/openwrt/uhttpd/security/advisories/GHSA-wgwp-64hh-f52p
cgi-io: ACL bypass / arbitrary file read (Moderate): a path-traversal flaw in the cgi-download handler let an authenticated user with wildcard read permission read any root-readable file (e.g. /etc/shadow). https://github.com/openwrt/openwrt/security/advisories/GHSA-jw5r-xhf5-2xcq
LuCI (web interface): a set of issues in LuCI core modules and applications were fixed. Most let a logged-in user with limited (delegated) permissions escalate to root command execution; a few are stored XSS issues reachable by clients on the network. The privilege-escalation issues only apply if the affected app is installed and the account/ACL in question exists:
- luci-app-tailscale-community (Critical, CVSS 9.9): command injection allowing delegated users to run commands as root via tailscale.do_login. https://github.com/openwrt/luci/security/advisories/GHSA-xwc5-mx58-rh35
- luci-app-advanced-reboot (High): CVE-2026-55897 — a read ACL exposes /bin/sh via file.exec, allowing delegated users to run commands as root. https://github.com/openwrt/luci/security/advisories/GHSA-vj96-f37g-37f6
- luci-app-adblock-fast (High): CVE-2026-55159 — delegated users can reach root command execution via newline-separated cron entries. https://github.com/openwrt/luci/security/advisories/GHSA-ggpf-xrph-wg5v
- luci-app-samba4 (High): a read ACL allows authenticated root command execution via the smbd file.exec permission. https://github.com/openwrt/luci/security/advisories/GHSA-vx64-mmp7-h36c
- luci-app-travelmate (High): a delegated UCI write can execute the travelmate auto-login command as root. https://github.com/openwrt/luci/security/advisories/GHSA-p35r-3323-6g7g
- luci-app-upnp (High): stored XSS — an unauthenticated LAN client can inject JavaScript via a UPnP port-mapping description. https://github.com/openwrt/luci/security/advisories/GHSA-8v49-6387-7f89
- luci-mod-network / luci-mod-status (High): stored XSS via a DHCPv6 lease hostname (FQDN) shown in the status tables. https://github.com/openwrt/luci/security/advisories/GHSA-686p-p8p9-x6fh
- luci-app-banip (High): a crafted LuCI login username can inject an arbitrary IP into banIP's log parser, causing the wrong address to be blocked. https://github.com/openwrt/luci/security/advisories/GHSA-r6hx-4f83-vp8m
ead (Emergency Access Daemon): CVE-2026-55490 (Moderate): an integer underflow in handle_send_a() allowed a pre-auth denial of service. https://github.com/openwrt/openwrt/security/advisories/GHSA-9558-77jp-g3fw
Linux kernel: update to 6.12.94, pulling in the upstream 6.12.88 through 6.12.94 stable releases, which fix multiple security vulnerabilities, such as CVE-2026-43500.
OpenSSL: update to 3.5.7, fixing multiple security vulnerabilities (CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447).
musl libc: backport upstream fixes for CVE-2026-6042 and CVE-2026-40200.
dropbear (SSH): backport security fixes from upstream 2026.90 and 2026.91, including CVE-2019-6111 (a malicious server could trick the scp client into overwriting arbitrary local files) and CVE-2026-35385.

Beyond the issues listed above, this release fixes a number of further security problems for which no CVE number or dedicated advisory was assigned. We strongly recommend upgrading to the latest OpenWrt release and installing all available package updates.

Device support

New devices supported in 25.12.5:

ipq40xx: Linksys MR9000
mediatek (filogic): GL.iNET GL-MT3600BE
mediatek (filogic): Huasifei WH3000R (NAND)
mediatek (filogic): JioRouter AX6000 (JIDU6101)
mediatek (filogic): netis EAP930 V1
mediatek (filogic): netis MEX605
mediatek (filogic): TP-Link F65 v1
mediatek (filogic): Zbtlink ZBT-Z8106AX-S
mvebu: Zyxel NAS326
ramips (mt76x8): Cudy WR300 v1
ramips (mt7621): I-O DATA WN-AX2033GR2

New image variants for already supported devices:

mediatek (filogic): Qihoo 360T7 - add UBI layout image
mediatek (filogic): Creatlentem CLT-R30B1 - add all-in-UBI layout image
mediatek (filogic): Bazis AX3000WM - also recognized under its alternative name WD-R3000N-G2A

Device fixes:

ath79: MikroTik - build AG71XX_LEGACY as a module, fixing AR8216/AR8236/AR8316 switch bring-up on boot on some MikroTik devices (https://github.com/openwrt/openwrt/issues/23739)
mediatek: do not let devfreq power off the CPU (stability fix)
mediatek (filogic): Wavlink WL-WN536AX6 rev A - several fixes (correct 5 GHz MAC address, MAC-address nvmem layout, NAND bad-block management, SPI drive strength, network LED)
mediatek (filogic): Qihoo 360T7 - fix DDR3 rate
mediatek: Acer Predator W6X - add LED boot status support
ramips: PAX1800 Lite - fix label MAC device and avoid attaching both UBI partitions on boot
ramips (mt76x8): Cudy LT300 v3 - fix backup partition offset
rtl8367b: fix RTL8367S-VB VLAN multicast memory handling
mvebu: uDPU / eDPU - convert to dual (A/B) firmware
ipq806x: AP3935 - disable hibernation on LAN1
airoha (an7581): platform improvements and upstream networking fixes

WiFi fixes and improvements

wifi-scripts: fix a null dereference on 6 GHz-only radios
wifi-scripts: fix EAP (802.1X) station mode in the wpa_supplicant configuration generator
wifi-scripts: fix tracking of disabled virtual interfaces
hostapd: fix a misplaced radar-detected (DFS) ubus notification

Network and service improvements

New "network" LED trigger (lan/wan/wlan) for link and activity indication on supported devices
odhcpd and odhcp6c received many DHCPv6/DHCPv4 and IPv6 prefix-delegation correctness and robustness fixes, on top of the security fixes listed above, including more stable DHCPv6 IAID handling
More robust handling of invalid DHCP / DHCPv6 client identifiers
ubus, rpcd, uhttpd, umdns, uclient and fstools updated with stability and hardening fixes

Other changes

kmod-nf-nathelper-extra was split into individual per-protocol packages, so only the needed NAT helper modules have to be installed.
Matching the linker max-page-size to the target page size removes unnecessary padding, which can make many binaries - and thus the images - a bit smaller.
OpenWrt builds are now more reproducible.

Core component updates

Linux kernel: update from 6.12.87 to 6.12.94
OpenSSL: update from 3.5.6 to 3.5.7 (multiple security fixes, see above)
wireless-regdb: update from 2026.03.18 to 2026.05.30
dnsmasq: update from 2.91 to 2.93
ca-certificates: update from 20260223 to 20260601 (refreshed root CA bundle)
util-linux: update from 2.41.3 to 2.41.5

Upgrading to 25.12.5

Upgrading from 24.10 to 25.12 should be transparent on most devices, as most configuration data has either remained the same or will be translated correctly on first boot by the package init scripts.
For upgrades within the OpenWrt 25.12 stable series, Attended Sysupgrade is also supported, which allows preserving the installed packages.

Sysupgrade from 23.05 or earlier to 25.12 is not officially supported.
Cron log level was fixed in busybox. system.@system[0].cronloglevel should be set to 7 for normal logging. 7 is the default now. If this option is not set, the default is used and no manual action is needed. https://github.com/openwrt/openwrt/commit/fc0c518a88e68d3deef04bec73b33d35186d6546
Bananapi BPI-R4: Interface eth1 was renamed to sfp-lan or lan4, and interface eth2 was renamed to sfp-wan to match the labels. You have to upgrade without saving the configuration. https://github.com/openwrt/openwrt/commit/cd8dcfef378044a1687adfa3738f01f9a9622baf
TP-Link RE355 v1, RE450 v1 and RE450 v2: The partition layout and block size changed in this release to fix configuration loss on sysupgrade. Users upgrading from OpenWrt 25.12.0 or earlier must use sysupgrade -F to force the upgrade. The image must not exceed 5.875 MB (6016 KiB).
Meraki MX60: Direct sysupgrade to 25.12.5 is not possible without manual preparation — meraki_loadaddr must be changed before upgrading, as the default value is insufficient to boot OpenWrt 25.12+. See the device wiki page for instructions.
Sitecom WLR-7100 (X7 AC1200): This device was moved from the ath79/generic target to the ath79/tiny target in OpenWrt 25.12.4. Users upgrading from 25.12.3 or earlier need to flash the new image from the ath79/tiny target (use sysupgrade -F).

Known issues

Zyxel EX5601-T0: the WAN interface was renamed from eth1 to wan — check and update your network configuration after upgrading.
Pixel 10 phones have problems connecting to WPA3-protected WiFi 6 APs. https://github.com/openwrt/openwrt/issues/21486
802.11r Fast Transition (FT) causes connection problems with some WiFi clients when WPA3 is used. https://github.com/openwrt/openwrt/issues/22200
SQM CAKE MQ (cake_mq): throughput may be unexpectedly low on some configurations after the scheduler fixes in this release. https://github.com/openwrt/openwrt/issues/22344

Full release notes and upgrade instructions are available at
https://openwrt.org/releases/25.12/notes-25.12.5

In particular, make sure to read the known issues before upgrading:
https://openwrt.org/releases/25.12/notes-25.12.5#known_issues

For a detailed list of all changes, refer to
https://openwrt.org/releases/25.12/changelog-25.12.5

To download the 25.12.5 images, navigate to:
https://downloads.openwrt.org/releases/25.12.5/targets/
Use OpenWrt Firmware Selector to download:
https://firmware-selector.openwrt.org?version=25.12.5

As always, a big thank you goes to all our active package maintainers, testers, documenters and supporters.

Have fun!

The OpenWrt Community

To stay informed of new OpenWrt releases and security advisories, there
are new channels available:

a low-volume mailing list for important announcements:
https://lists.openwrt.org/mailman/listinfo/openwrt-announce
a dedicated "announcements" section in the forum:
https://forum.openwrt.org/c/announcements/14
other announcement channels (such as RSS feeds) might be added in the
future, they will be listed at https://openwrt.org/contact

efahl · July 1, 2026, 12:09am

The 25.12.5 builds went fine, but ASU testing was delayed a bit by CDN not updating (I test from the US west coast, so LA is my local Fastly exit node for downloads.openwrt.org). Tested from a linode in Arlington, VA (US east coast) and it had updated immediately, so whatever.

If you encounter issues with ASU upgrades, please report them on the respective client threads:

Documibozu · July 1, 2026, 12:16am

Mt2500 gl.inet update ok but fails to issue addresses via dhcp... I'll make further investigation tomorrow

AJCxZ0 · July 1, 2026, 1:02am

Three TP-LINK Archer A7s updated from 25.12.4 to 25.12.5 using owut with no problems.

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt 25.12.5, r33051-f5dae5ece4 Dave's Guitar
 -----------------------------------------------------

JustAnotherEndUser · July 1, 2026, 1:05am

I attempted to upgrade a test device from a 05-2026 Snapshot to 25.12.5.
There were 38 Downgrades listed. Is this normal, or perhaps packages hadn't sync'd yet?
Specifically, the 2024-dated chipset firmware package.

Text paste:

owut - OpenWrt Upgrade Tool 2026.04.09~5d6760b5-r1 (/usr/bin/owut)
ASU-Server     https://sysupgrade.openwrt.org
Upstream       https://downloads.openwrt.org
Target         qualcommax/ipq807x
Profile        dynalink_dl-wrx36
Package-arch   aarch64_cortex-a53
Root-FS-type   squashfs
Sys-type       sysupgrade
Version-from   SNAPSHOT r34359-dfbacabec6 (kernel 6.12.85)
Version-to     25.12-SNAPSHOT r33054-c8ee844d60 (kernel 6.12.94) DOWNGRADE
Build-commit   https://git.openwrt.org/?p=openwrt/openwrt.git;a=shortlog;h=c8ee844d60
Build-FS-type  squashfs
Build-at       2026-06-30T07:11:43Z (~14 hours ago)
Image-prefix   openwrt-25.12-snapshot-r33054-c8ee844d60-qualcommax-ipq807x-dynalink_dl-wrx36
Image-URL      https://downloads.openwrt.org/releases/25.12-SNAPSHOT/targets/qualcommax/ipq807x
Image-file     openwrt-25.12-snapshot-r33054-c8ee844d60-qualcommax-ipq807x-dynalink_dl-wrx36-squashfs-sysupgrade.bin
Installed      251 packages
Top-level       91 packages
Default         40 packages
User-installed  57 packages (top-level only)

Package version changes:
  ath11k-firmware-ipq8074        20260410-r1                    2024.10.14~15f05012-r1 (downgrade)
  base-files                     1693~dfbacabec6                1712~c8ee844d60
  ca-bundle                      20260223-r1                    20260601-r1
  cgi-io                         2025.12.11~658b14bd-r1         2026.06.28~7314451c-r1
  collectd                       5.12.0-r55                     5.12.0-r56
  collectd-mod-conntrack         5.12.0-r55                     5.12.0-r56
  collectd-mod-cpu               5.12.0-r55                     5.12.0-r56
  collectd-mod-cpufreq           5.12.0-r55                     5.12.0-r56
  collectd-mod-csv               5.12.0-r55                     5.12.0-r56
  collectd-mod-df                5.12.0-r55                     5.12.0-r56
  collectd-mod-disk              5.12.0-r55                     5.12.0-r56
  collectd-mod-dns               5.12.0-r55                     5.12.0-r56
  collectd-mod-ethstat           5.12.0-r55                     5.12.0-r56
  collectd-mod-exec              5.12.0-r55                     5.12.0-r56
  collectd-mod-interface         5.12.0-r55                     5.12.0-r56
  collectd-mod-ipstatistics      5.12.0-r55                     5.12.0-r56
  collectd-mod-irq               5.12.0-r55                     5.12.0-r56
  collectd-mod-iwinfo            5.12.0-r55                     5.12.0-r56
  collectd-mod-load              5.12.0-r55                     5.12.0-r56
  collectd-mod-memory            5.12.0-r55                     5.12.0-r56
  collectd-mod-network           5.12.0-r55                     5.12.0-r56
  collectd-mod-processes         5.12.0-r55                     5.12.0-r56
  collectd-mod-protocols         5.12.0-r55                     5.12.0-r56
  collectd-mod-rrdtool           5.12.0-r55                     5.12.0-r56
  collectd-mod-sensors           5.12.0-r55                     5.12.0-r56
  collectd-mod-tcpconns          5.12.0-r55                     5.12.0-r56
  collectd-mod-thermal           5.12.0-r55                     5.12.0-r56
  curl                           8.19.0-r1                      8.19.0-r2
  dnsmasq                        2.92-r1                        2.93-r1
  dropbear                       2025.89-r1                     2025.89-r3
  e2fsprogs                      1.47.4-r1                      1.47.3-r1 (downgrade)
  ethtool-full                   6.19-r2                        6.15-r1 (downgrade)
  fstools                        2026.02.15~8d377aa6-r1         2026.05.23~16718b6e-r1
  hostapd-common                 2026.04.02~b004de0b-r1         2025.08.26~ca266cc2-r1 (downgrade)
  ipq-wifi-dynalink_dl-wrx36     2026.05.05~fc4cf487-r1         2026.05.18~e20f4c6f-r1
  jansson                        2.15.0-r1                      2.14.1-r1 (downgrade)
  jshn                           2026.03.13~81563384-r1         2026.06.19~7dd12784-r1
  kmod-ath                       6.12.85.6.18.26-r1             6.12.94.6.18.26-r1
  kmod-ath11k                    6.12.85.6.18.26-r1             6.12.94.6.18.26-r1
  kmod-ath11k-ahb                6.12.85.6.18.26-r1             6.12.94.6.18.26-r1
  kmod-cfg80211                  6.12.85.6.18.26-r1             6.12.94.6.18.26-r1
  kmod-crypto-aead               6.12.85-r1                     6.12.94-r1
  kmod-crypto-ccm                6.12.85-r1                     6.12.94-r1
  kmod-crypto-cmac               6.12.85-r1                     6.12.94-r1
  kmod-crypto-crc32              6.12.85-r1                     6.12.94-r1
  kmod-crypto-crc32c             6.12.85-r1                     6.12.94-r1
  kmod-crypto-ctr                6.12.85-r1                     6.12.94-r1
  kmod-crypto-gcm                6.12.85-r1                     6.12.94-r1
  kmod-crypto-geniv              6.12.85-r1                     6.12.94-r1
  kmod-crypto-gf128              6.12.85-r1                     6.12.94-r1
  kmod-crypto-ghash              6.12.85-r1                     6.12.94-r1
  kmod-crypto-hash               6.12.85-r1                     6.12.94-r1
  kmod-crypto-hmac               6.12.85-r1                     6.12.94-r1
  kmod-crypto-manager            6.12.85-r1                     6.12.94-r1
  kmod-crypto-michael-mic        6.12.85-r1                     6.12.94-r1
  kmod-crypto-null               6.12.85-r1                     6.12.94-r1
  kmod-crypto-rng                6.12.85-r1                     6.12.94-r1
  kmod-crypto-seqiv              6.12.85-r1                     6.12.94-r1
  kmod-crypto-sha3               6.12.85-r1                     6.12.94-r1
  kmod-crypto-sha512             6.12.85-r1                     6.12.94-r1
  kmod-fs-exfat                  6.12.85-r1                     6.12.94-r1
  kmod-fs-ext4                   6.12.85-r1                     6.12.94-r1
  kmod-fs-f2fs                   6.12.85-r1                     6.12.94-r1
  kmod-fs-ntfs3                  6.12.85-r1                     6.12.94-r1
  kmod-fs-vfat                   6.12.85-r1                     6.12.94-r1
  kmod-gpio-button-hotplug       6.12.85-r5                     6.12.94-r5
  kmod-hwmon-core                6.12.85-r1                     6.12.94-r1
  kmod-i2c-core                  6.12.85-r1                     6.12.94-r1
  kmod-leds-gpio                 6.12.85-r1                     6.12.94-r1
  kmod-lib-crc-ccitt             6.12.85-r1                     6.12.94-r1
  kmod-lib-crc-itu-t             6.12.85-r1                     6.12.94-r1
  kmod-lib-crc16                 6.12.85-r1                     6.12.94-r1
  kmod-lib-crc32c                6.12.85-r1                     6.12.94-r1
  kmod-libphy                    6.12.85-r1                     6.12.94-r1
  kmod-mac80211                  6.12.85.6.18.26-r1             6.12.94.6.18.26-r1
  kmod-nf-conntrack              6.12.85-r1                     6.12.94-r1
  kmod-nf-flow                   6.12.85-r1                     6.12.94-r1
  kmod-nf-log                    6.12.85-r1                     6.12.94-r1
  kmod-nf-log6                   6.12.85-r1                     6.12.94-r1
  kmod-nf-nat                    6.12.85-r1                     6.12.94-r1
  kmod-nf-reject                 6.12.85-r1                     6.12.94-r1
  kmod-nf-reject6                6.12.85-r1                     6.12.94-r1
  kmod-nfnetlink                 6.12.85-r1                     6.12.94-r1
  kmod-nft-core                  6.12.85-r1                     6.12.94-r1
  kmod-nft-fib                   6.12.85-r1                     6.12.94-r1
  kmod-nft-nat                   6.12.85-r1                     6.12.94-r1
  kmod-nft-offload               6.12.85-r1                     6.12.94-r1
  kmod-nls-base                  6.12.85-r1                     6.12.94-r1
  kmod-nls-cp437                 6.12.85-r1                     6.12.94-r1
  kmod-nls-iso8859-1             6.12.85-r1                     6.12.94-r1
  kmod-nls-utf8                  6.12.85-r1                     6.12.94-r1
  kmod-phy-aquantia              6.12.85-r1                     6.12.94-r1
  kmod-ppp                       6.12.85-r1                     6.12.94-r1
  kmod-pppoe                     6.12.85-r1                     6.12.94-r1
  kmod-pppox                     6.12.85-r1                     6.12.94-r1
  kmod-qca-nss-dp                6.12.85.2026.03.13~6a5c4716-r1 6.12.94.2025.11.24~19c51af0-r1
  kmod-qca-ssdk                  6.12.85.2025.05.30~446db12b-r1 6.12.94.2025.05.30~446db12b-r1
  kmod-qcom-qmi-helpers          6.12.85.6.18.26-r1             6.12.94.6.18.26-r1
  kmod-qrtr                      6.12.85-r1                     6.12.94-r1
  kmod-qrtr-smd                  6.12.85-r1                     6.12.94-r1
  kmod-slhc                      6.12.85-r1                     6.12.94-r1
  kmod-thermal                   6.12.85-r1                     6.12.94-r1
  kmod-usb-common                6.12.85-r1                     6.12.94-r1
  kmod-usb-core                  6.12.85-r1                     6.12.94-r1
  kmod-usb-dwc3                  6.12.85-r1                     6.12.94-r1
  kmod-usb-dwc3-qcom             6.12.85-r1                     6.12.94-r1
  kmod-usb-roles                 6.12.85-r1                     6.12.94-r1
  kmod-usb-xhci-hcd              6.12.85-r1                     6.12.94-r1
  kmod-usb3                      6.12.85-r1                     6.12.94-r1
  libblkid                       2.42-r1                        2.41.5-r1 (downgrade)
  libblobmsg-json                2026.03.13~81563384-r1         2026.06.19~7dd12784-r1
  libcomerr                      1.47.4-r1                      1.47.3-r1 (downgrade)
  libcurl                        8.19.0-r1                      8.19.0-r2
  libe2p                         1.47.4-r1                      1.47.3-r1 (downgrade)
  libext2fs                      1.47.4-r1                      1.47.3-r1 (downgrade)
  libjson-script                 2026.03.13~81563384-r1         2026.06.19~7dd12784-r1
  libmount                       2.42-r1                        2.41.5-r1 (downgrade)
  libopenssl                     3.5.6-r1                       3.5.7-r1
  libsensors                     3.6.2-r5                       3.6.2-r6
  libsmartcols                   2.42-r1                        2.41.5-r1 (downgrade)
  libss                          1.47.4-r1                      1.47.3-r1 (downgrade)
  libubox                        2026.03.13~81563384-r1         2026.06.19~7dd12784-r1
  libubus                        2025.12.02~3cc98db1-r1         2026.06.28~24864e78-r2
  libuclient                     2026.02.20~7a0aa2e4-r1         2026.06.07~daad21fa-r1
  libucode                       2026.04.24~0beaa9dc-r1         2026.01.16~85922056-r1 (downgrade)
  libudev-zero                   1.0.3-r2                       1.0.4-r1
  libuuid                        2.42-r1                        2.41.5-r1 (downgrade)
  lm-sensors                     3.6.2-r5                       3.6.2-r6
  losetup                        2.42-r1                        2.41.5-r1 (downgrade)
  lsblk                          2.42-r1                        2.41.5-r1 (downgrade)
  lscpu                          2.42-r1                        2.41.5-r1 (downgrade)
  lslocks                        2.42-r1                        2.41.5-r1 (downgrade)
  lsns                           2.42-r1                        2.41.5-r1 (downgrade)
  luci                           26.127.29573~cc69f29           26.180.75667~128a781
  luci-app-attendedsysupgrade    26.127.29573~cc69f29           26.180.75667~128a781
  luci-app-firewall              26.127.29573~cc69f29           26.180.75667~128a781
  luci-app-package-manager       26.127.29573~cc69f29           26.180.75667~128a781
  luci-app-statistics            26.127.29573~cc69f29           26.180.75667~128a781
  luci-base                      26.127.29573~cc69f29           26.180.75667~128a781
  luci-lib-uqr                   26.127.29573~cc69f29           26.180.75667~128a781
  luci-light                     26.127.29573~cc69f29           26.180.75667~128a781
  luci-mod-admin-full            26.127.29573~cc69f29           26.180.75667~128a781
  luci-mod-network               26.127.29573~cc69f29           26.180.75667~128a781
  luci-mod-status                26.127.29573~cc69f29           26.180.75667~128a781
  luci-mod-system                26.127.29573~cc69f29           26.180.75667~128a781
  luci-proto-ipv6                26.127.29573~cc69f29           26.180.75667~128a781
  luci-proto-ppp                 26.127.29573~cc69f29           26.180.75667~128a781
  luci-ssl                       26.127.29573~cc69f29           26.180.75667~128a781
  luci-theme-bootstrap           26.127.29573~cc69f29           26.180.75667~128a781
  netifd                         2026.04.23~e45b890f-r1         2026.02.26~cbb83a18-r1 (downgrade)
  nftables-json                  1.1.6-r1                       1.1.6-r2
  odhcp6c                        2026.01.25~24485bb4-r1         2026.06.20~07d324ee-r1
  odhcpd-ipv6only                2026.03.16~160e5fa3-r1         2026.06.29~5d7be43f-r1
  procd                          2026.03.25~cd7a4e5f-r1         2026.03.13~58eb263d-r1 (downgrade)
  procd-seccomp                  2026.03.25~cd7a4e5f-r1         2026.03.13~58eb263d-r1 (downgrade)
  procd-ujail                    2026.03.25~cd7a4e5f-r1         2026.03.13~58eb263d-r1 (downgrade)
  rpcd                           2025.12.03~ffb9961c-r1         2026.06.04~28faf640-r1
  rpcd-mod-file                  2025.12.03~ffb9961c-r1         2026.06.04~28faf640-r1
  rpcd-mod-iwinfo                2025.12.03~ffb9961c-r1         2026.06.04~28faf640-r1
  rpcd-mod-rpcsys                2025.12.03~ffb9961c-r1         2026.06.04~28faf640-r1
  rpcd-mod-ucode                 2025.12.03~ffb9961c-r1         2026.06.04~28faf640-r1
  ubi-utils                      2.3.1-r1                       2.3.0-r1 (downgrade)
  uboot-envtools                 2026.04-r1                     2025.10-r2 (downgrade)
  ubus                           2025.12.02~3cc98db1-r1         2026.06.28~24864e78-r2
  ubusd                          2025.12.02~3cc98db1-r1         2026.06.28~24864e78-r2
  uclient-fetch                  2026.02.20~7a0aa2e4-r1         2026.06.07~daad21fa-r1
  ucode                          2026.04.24~0beaa9dc-r1         2026.01.16~85922056-r1 (downgrade)
  ucode-mod-digest               2026.04.24~0beaa9dc-r1         2026.01.16~85922056-r1 (downgrade)
  ucode-mod-fs                   2026.04.24~0beaa9dc-r1         2026.01.16~85922056-r1 (downgrade)
  ucode-mod-log                  2026.04.24~0beaa9dc-r1         2026.01.16~85922056-r1 (downgrade)
  ucode-mod-math                 2026.04.24~0beaa9dc-r1         2026.01.16~85922056-r1 (downgrade)
  ucode-mod-nl80211              2026.04.24~0beaa9dc-r1         2026.01.16~85922056-r1 (downgrade)
  ucode-mod-rtnl                 2026.04.24~0beaa9dc-r1         2026.01.16~85922056-r1 (downgrade)
  ucode-mod-ubus                 2026.04.24~0beaa9dc-r1         2026.01.16~85922056-r1 (downgrade)
  ucode-mod-uci                  2026.04.24~0beaa9dc-r1         2026.01.16~85922056-r1 (downgrade)
  ucode-mod-uclient              2026.02.20~7a0aa2e4-r1         2026.06.07~daad21fa-r1
  ucode-mod-uloop                2026.04.24~0beaa9dc-r1         2026.01.16~85922056-r1 (downgrade)
  uhttpd                         2025.10.03~ebb92e6b-r1         2026.06.16~7b1bec45-r1
  uhttpd-mod-ubus                2025.10.03~ebb92e6b-r1         2026.06.16~7b1bec45-r1
  usbids                         0.405-r1                       0.407-r1
  usbutils                       017-r2                         019-r1
  wget-ssl                       1.25.0-r4                      1.25.0-r2 (downgrade)
  wireless-regdb                 2026.03.18-r1                  2026.05.30-r1
  wpad-mbedtls                   2026.04.02~b004de0b-r1         2025.08.26~ca266cc2-r1 (downgrade)
  zlib                           1.3.2-r1                       1.3.1-r1 (downgrade)
38 packages were downgraded
185 packages are out-of-date

ERROR: Update checks reveal package downgrades
root@TestDevice1:~#

efahl · July 1, 2026, 1:12am

Yes, for a downgrade from snapshot to release, you'll almost always have a number of packages downgrading. It looks like the ath11k-firmware one has changed version formats or sources, which confuses owut, so that's definitely part of the issue.

The longer the gap between when the first 25.12 was branched from snapshot, the more downgrades you'll see.

Edit:
I just did owut check -V 24.10 from a current snapshot and it shows 236 packages downgraded, so you can see the trend pretty clearly.

JustAnotherEndUser · July 1, 2026, 1:15am

Thank you @efahl, I expected some downgrades, but the 2024-dated chipset firmware is what stood out the most.

efahl · July 1, 2026, 1:18am

Yeah, I suspect that this was due to someone changing the versioning from an OpenWrt-based one ("we changed the Makefile today, so use that date") to one derived from upstream source information, which would account for the backwards jump.

Sunspark · July 1, 2026, 1:21am

Why does upgrading uninstall stuff installed into luci, e.g. banip, unless you do attended-sysupgrade? Shouldn't it keep a note of what is installed as part of the configuration?

efahl · July 1, 2026, 1:25am

Upgrading simply writes whatever image you point it to into flash, and has no mechanism to add or remove packages (sysupgrade has no idea what a "package" is).

Attended Sysupgrade is a mechanism that creates an image containing your customizations, so that when sysupgrade gets around to writing the image, the result will mirror the package list from the pre-upgrade state.

r1ch · July 1, 2026, 1:36am

Going from 25.12.2 → 25.12.5 seems to have killed the LAN port on my ath79-based Mikrotik wAP AC (mikrotik_routerboard-wap-g-5hact2hnd), presumably caused by the ath79 "device fixes" change. PoE works and the link comes up at 1G, however it no longer passes any packets over the Ethernet port.

The device is booting up normally otherwise - configured APs are visible, but unfortunately with the firewall and VLAN setup, trying to recover from Wi-Fi will be a challenge as only the Ethernet port was part of the management network.

otnert · July 1, 2026, 1:42am

Dynalink DL-WRX36 25.12.4 here.

I just did anowut check before upgrading to 25.12.5 and it advised 10x extra packages are being included when I only want to have: kmod-nf-nathelper-extra

Extra packages:

kmod-nf-nathelper-amanda
kmod-nf-nathelper-broadcast
kmod-nf-nathelper-extra
kmod-nf-nathelper-h323
kmod-nf-nathelper-irc
kmod-nf-nathelper-netbios
kmod-nf-nathelper-pptp
kmod-nf-nathelper-sane
kmod-nf-nathelper-sip
kmod-nf-nathelper-snmp
kmod-nf-nathelper-tftp

Is this what's expected in 25.12.5with the kmod-nf-nathelper-extra package?

If I remove the extra packages after the upgrade, will this have a detrimental effect on the kmod-nf-nathelper-extra package?

efahl · July 1, 2026, 1:47am

Looks like most of those are dependencies, required by the -extra package. Since they are dependencies, it is very likely that the package you want won't work without them.

$ apk query --fields name,depends --format yaml kmod-nf-nathelper-extra
# 1 items
- name: kmod-nf-nathelper-extra
  depends: # 11 items
    - kernel=6.18.37~03cdecc012a4f2c13ca9098617068dcf-r1
    - kmod-nf-nathelper-amanda
    - kmod-nf-nathelper-broadcast
    - kmod-nf-nathelper-h323
    - kmod-nf-nathelper-irc
    - kmod-nf-nathelper-netbios
    - kmod-nf-nathelper-pptp
    - kmod-nf-nathelper-sane
    - kmod-nf-nathelper-sip
    - kmod-nf-nathelper-snmp
    - kmod-nf-nathelper-tftp

EDIT:
Hang on, the -extra package is just a collection, it doesn't actually contain anything, it just installs all of those dependencies. See its description:

Compatibility package providing all extra Netfilter conntrack and NAT helpers. This package depends on all individual helper packages: - amanda - broadcast - h323 - irc - netbios - pptp - sane - sip - snmp - tftp Select individual helper packages instead if only a subset is required.

otnert · July 1, 2026, 1:57am

Thanks @efahl

I had the kmod-nf-nathelper-extrapackage installed for PPTP passthrough.

I have noticed kmod-nf-nathelper-pptp is included in the list.

How to configure using owut... I gather:

owut download -V 25.12.5 -r kmod-nf-nathelper-extra -a kmod-nf-nathelper-pptp? is not throwing any errors.

I'll keep plugging away!

efahl · July 1, 2026, 2:11am

If you've just done the download, look in /tmp/firmware-manifest.json and scan it for kmod-nf-nathelper, that should tell you exactly what packages were installed.

el_charlie · July 1, 2026, 2:30am

This release has considerable changes in odhcpd and DHCPv6, so after installing it, I don't get IPv6 addresses, nor the router nor the clients. Flashing back 25.12.4 on my RT3200 restores IPv6 connectivity. I get a message of ra_lifeline of 0 or something like that.

What do I do???

Thanks in advance.

otnert · July 1, 2026, 2:32am

Yes checked kmod-nf-nathelper-pptp has installed, however these 2x packages got removed:

kmod-asn1-decoder
kmod-lib-textsearch

If I run apk query --fields name,depends --format yaml kmod-nf-nathelper-extra on 25.12.4, I noticed they were part of.....

1 items
  * name: kmod-nf-nathelper-extra
  depends: # 4 items
  * kernel=6.12.87\~3d7d87f192c223e4910f823c81da8927-r1
  * kmod-asn1-decoder
  * kmod-lib-textsearch
  * kmod-nf-nat

I'll just do the upgrade, and check PPTP pass through, post upgrade I think?

Thanks for your help! appreciated

efahl · July 1, 2026, 2:49am

You can check what caused it to be included in the first place with the reverse-depends field:

$ apk query --fields name,reverse-depends --format yaml kmod-asn1-decoder
# 1 items
- name: kmod-asn1-decoder
  reverse-depends:
    - kmod-crypto-rsa
    - kmod-fs-ksmbd
    - kmod-nf-nathelper-snmp
    - kmod-fs-cifs

So it appears that with the removal of the -snmp kmod, it's no longer needed. (Use --fields all if you want to see everything about the packages, I've just been selective for brevity.)

Tommiefr · July 1, 2026, 4:21am

Tried to update over unattended sysupgrade but keep getting this error:

"system_board": {
"kernel": "6.12.87",
"hostname": "OpenWrt",
"system": "Intel(R) Core(TM) i3-7100U CPU @ 2.40GHz",
"model": "Intel Corporation NUC7i3BNH",
"board_name": "intel-corporation-nuc7i3bnh",
"rootfs_type": "ext4",
"release": {
"distribution": "OpenWrt",
"version": "25.12.4",
"firmware_url": "https://downloads.openwrt.org/",
"revision": "r32933-4ccb782af7",
"target": "x86/64",
"description": "OpenWrt 25.12.4 r32933-4ccb782af7",
"builddate": "1778712129"
}
},
"advanced_mode": "0",
"url": "https://sysupgrade.openwrt.org",
"branch": "25.12",
"revision": "r32933-4ccb782af7",
"efi": true,
"request_hash": "40b7adc61253d6d0a9481fb7723d68f4d14eb0a83238d5691acde0ec85694090",
"sha256_unsigned": "",
"client": "luci/26.143.25613~74927c2",
"packages": {
"apk-mbedtls": "3.0.5-r3",
"banip": "1.8.9-r2",
"base-files": "1707~4ccb782af7",
"block-mount": "2026.02.15~8d377aa6-r1",
"ca-bundle": "20260223-r1",
"ca-certificates": "20260223-r1",
"collectd-mod-cpufreq": "5.12.0-r54",
"collectd-mod-dns": "5.12.0-r54",
"collectd-mod-ping": "5.12.0-r54",
"collectd-mod-thermal": "5.12.0-r54",
"collectd-mod-uptime": "5.12.0-r54",
"dnsmasq": "2.91-r3",
"dropbear": "2025.89-r1",
"e2fsprogs": "1.47.3-r1",
"firewall4": "2025.03.17~b6e51575-r2",
"fstools": "2026.02.15~8d377aa6-r1",
"fstrim": "2.41.5-r1",
"grep": "3.12-r1",
"grub2-bios-setup": "2.12-r1",
"kernel": "6.12.87~d037e17efc2c7cd4972f63d6de88677f-r1",
"kmod-amazon-ena": "6.12.87-r1",
"kmod-amd-xgbe": "6.12.87-r1",
"kmod-bnx2": "6.12.87-r1",
"kmod-button-hotplug": "6.12.87-r3",
"kmod-drm-i915": "6.12.87-r1",
"kmod-dwmac-intel": "6.12.87-r1",
"kmod-e1000": "6.12.87-r1",
"kmod-e1000e": "6.12.87-r1",
"kmod-forcedeth": "6.12.87-r1",
"kmod-fs-ext4": "6.12.87-r1",
"kmod-fs-vfat": "6.12.87-r1",
"kmod-igb": "6.12.87-r1",
"kmod-igc": "6.12.87-r1",
"kmod-ixgbe": "6.12.87-r1",
"kmod-nft-offload": "6.12.87-r1",
"kmod-r8169": "6.12.87-r1",
"kmod-tg3": "6.12.87-r1",
"kmod-usb-net-rtl8152": "6.12.87-r1",
"kmod-usb-storage": "6.12.87-r1",
"libc": "1.2.5-r5",
"libgcc": "14.3.0-r5",
"libustream-mbedtls": "2026.03.01~99f1c0db-r1",
"libustream-openssl": "2026.03.01~99f1c0db-r1",
"logd": "2025.10.30~6f78fa49-r1",
"luci": "26.143.25613~74927c2",
"luci-app-attendedsysupgrade": "26.143.25613~74927c2",
"luci-app-banip": "1.8.9-r1",
"luci-app-filebrowser": "1.1.0-r1",
"luci-app-openvpn": "26.143.25613~74927c2",
"luci-app-pbr": "1.2.3-r67",
"luci-app-sqm": "26.143.25613~74927c2",
"luci-app-statistics": "26.143.25613~74927c2",
"luci-i18n-attendedsysupgrade-nl": "26.143.25613~74927c2",
"luci-i18n-banip-nl": "26.164.56110~44618b5",
"luci-i18n-base-nl": "26.143.25613~74927c2",
"luci-i18n-filebrowser-nl": "26.158.67103~e99e132",
"luci-i18n-firewall-nl": "26.143.25613~74927c2",
"luci-i18n-openvpn-nl": "26.143.25613~74927c2",
"luci-i18n-package-manager-nl": "26.143.25613~74927c2",
"luci-i18n-pbr-nl": "26.155.67407~06be235",
"luci-i18n-sqm-nl": "26.143.25613~74927c2",
"luci-i18n-statistics-nl": "26.143.25613~74927c2",
"mkf2fs": "1.16.0-r4",
"mtd": "27",
"netifd": "2026.02.26~cbb83a18-r1",
"odhcp6c": "2026.01.25~ee2949e3-r1",
"odhcpd-ipv6only": "2026.03.16~edf2e523-r1",
"openvpn-openssl": "2.7.4-r1",
"partx-utils": "2.41.3-r1",
"pbr": "1.2.3-r67",
"ppp": "2.5.2-r3",
"ppp-mod-pppoe": "2.5.2-r3",
"procd-ujail": "2026.03.13~58eb263d-r1",
"rclone": "1.74.1-r1",
"tar": "1.35-r1",
"tcpdump-mini": "4.99.6-r1",
"uci": "2025.12.02~66127cd7-r1",
"uclient-fetch": "2026.02.20~7a0aa2e4-r1",
"ulogd": "2.0.9-r1",
"ulogd-mod-extra": "2.0.9-r1",
"urandom-seed": "3",
"urngd": "2025.10.03~f17e33d9-r1",
"wget-ssl": "1.25.0-r2",
"zoneinfo-core": "2026b-r1"
},
"profile": "intel-corporation-nuc7i3bnh",
"target": "x86/64",
"version": "25.12.4",
"diff_packages": true,
"filesystem": "ext4",
"rootfs_size_mb": null

STDOUT

`Checking 'true'... ok.
Checking 'false'... ok.
Checking 'working-make'... ok.
Checking 'case-sensitive-fs'... ok.
Checking 'proper-umask'... ok.
Checking 'perl-data-dumper'... ok.
Checking 'perl-findbin'... ok.
Checking 'perl-file-copy'... ok.
Checking 'perl-file-compare'... ok.
Checking 'perl-thread-queue'... ok.
Checking 'perl-ipc-cmd'... ok.
Checking 'tar'... ok.
Checking 'find'... ok.
Checking 'bash'... ok.
Checking 'xargs'... ok.
Checking 'patch'... ok.
Checking 'diff'... ok.
Checking 'cp'... ok.
Checking 'seq'... ok.
Checking 'awk'... ok.
Checking 'grep'... ok.
Checking 'egrep'... ok.
Checking 'getopt'... ok.
Checking 'realpath'... ok.
Checking 'stat'... ok.
Checking 'gzip'... ok.
Checking 'unzip'... ok.
Checking 'bzip2'... ok.
Checking 'wget'... ok.
Checking 'install'... ok.
Checking 'perl'... ok.
Checking 'python'... ok.
Checking 'python3'... ok.
Checking 'python3-distutils'... ok.
Checking 'python3-stdlib'... ok.
Checking 'file'... ok.
Checking 'which'... ok.
Checking 'ldconfig-stub'... ok.
Building images for x86 - Generic x86/64
Packages: apk-mbedtls banip base-files block-mount ca-bundle ca-certificates collectd-mod-cpufreq collectd-mod-dns collectd-mod-ping collectd-mod-thermal collectd-mod-uptime dnsmasq dropbear e2fsprogs firewall4 fstools fstrim grep grub2-bios-setup kernel kmod-amazon-ena kmod-amd-xgbe kmod-bnx2 kmod-button-hotplug kmod-drm-i915 kmod-dwmac-intel kmod-e1000 kmod-e1000e kmod-forcedeth kmod-fs-ext4 kmod-fs-vfat kmod-igb kmod-igc kmod-ixgbe kmod-nft-offload kmod-r8169 kmod-tg3 kmod-usb-net-rtl8152 kmod-usb-storage libc libgcc libustream-mbedtls libustream-openssl logd luci luci-app-attendedsysupgrade luci-app-banip luci-app-filebrowser luci-app-openvpn luci-app-pbr luci-app-sqm luci-app-statistics luci-i18n-attendedsysupgrade-nl luci-i18n-banip-nl luci-i18n-base-nl luci-i18n-filebrowser-nl luci-i18n-firewall-nl luci-i18n-openvpn-nl luci-i18n-package-manager-nl luci-i18n-pbr-nl luci-i18n-sqm-nl luci-i18n-statistics-nl mkf2fs mtd netifd odhcp6c odhcpd-ipv6only openvpn-openssl partx-utils pbr ppp ppp-mod-pppoe procd-ujail rclone tar tcpdump-mini uci uclient-fetch ulogd ulogd-mod-extra urandom-seed urngd wget-ssl zoneinfo-core apk-mbedtls base-files ca-bundle dnsmasq dropbear e2fsprogs firewall4 fstools grub2-bios-setup kernel kmod-amazon-ena kmod-amd-xgbe kmod-bnx2 kmod-button-hotplug kmod-drm-i915 kmod-dwmac-intel kmod-e1000 kmod-e1000e kmod-forcedeth kmod-fs-vfat kmod-igb kmod-igc kmod-ixgbe kmod-nft-offload kmod-r8169 kmod-tg3 libc libgcc libustream-mbedtls logd mkf2fs mtd netifd odhcp6c odhcpd-ipv6only partx-utils ppp ppp-mod-pppoe procd-ujail uci uclient-fetch urandom-seed urngd "base-files=1711~f5dae5ece4" "libc=1.2.5-r5" "kernel=6.12.94~a7bc15f451f9652701ba04af9cfb0b95-r1"

OK: 0 B in 0 packages

Installing packages...
(  1/290) Installing libgcc1 (14.3.0-r5)
(  2/290) Installing libc (1.2.5-r5)
(  3/290) Installing libmbedtls21 (3.6.6-r2)
(  4/290) Installing libubox20260213 (2026.06.19~7dd12784-r1)
(  5/290) Installing libuclient20201210 (2026.06.07~daad21fa-r1)
(  6/290) Installing uclient-fetch (2026.06.07~daad21fa-r1)
(  7/290) Installing zlib (1.3.1-r1)
(  8/290) Installing apk-mbedtls (3.0.5-r3)
(  9/290) Installing ca-bundle (20260601-r1)
( 10/290) Installing kernel (6.12.94~a7bc15f451f9652701ba04af9cfb0b95-r1)
( 11/290) Installing kmod-crypto-hash (6.12.94-r1)
( 12/290) Installing kmod-crypto-crc32c (6.12.94-r1)
( 13/290) Installing kmod-lib-crc32c (6.12.94-r1)
( 14/290) Installing kmod-nf-conntrack (6.12.94-r1)
( 15/290) Installing kmod-nf-conntrack6 (6.12.94-r1)
( 16/290) Installing kmod-nf-log (6.12.94-r1)
( 17/290) Installing kmod-nf-log6 (6.12.94-r1)
( 18/290) Installing kmod-nf-nat (6.12.94-r1)
( 19/290) Installing kmod-nf-reject (6.12.94-r1)
( 20/290) Installing kmod-nf-reject6 (6.12.94-r1)
( 21/290) Installing kmod-nfnetlink (6.12.94-r1)
( 22/290) Installing kmod-nft-core (6.12.94-r1)
( 23/290) Installing kmod-nft-fib (6.12.94-r1)
( 24/290) Installing kmod-nft-nat (6.12.94-r1)
( 25/290) Installing kmod-nf-flow (6.12.94-r1)
( 26/290) Installing kmod-nft-offload (6.12.94-r1)
( 27/290) Installing jansson4 (2.14.1-r1)
( 28/290) Installing libmnl0 (1.0.5-r1)
( 29/290) Installing libnftnl11 (1.3.1-r1)
( 30/290) Installing nftables-json (1.1.6-r2)
( 31/290) Installing libjson-c5 (0.18-r1)
( 32/290) Installing libucode20230711 (2026.01.16~85922056-r1)
( 33/290) Installing ucode (2026.01.16~85922056-r1)
( 34/290) Installing ucode-mod-fs (2026.01.16~85922056-r1)
( 35/290) Installing libblobmsg-json20260213 (2026.06.19~7dd12784-r1)
( 36/290) Installing libubus20251202 (2026.06.28~24864e78-r2)
( 37/290) Installing ucode-mod-ubus (2026.01.16~85922056-r1)
( 38/290) Installing libuci20250120 (2025.12.02~66127cd7-r1)
( 39/290) Installing ucode-mod-uci (2026.01.16~85922056-r1)
( 40/290) Installing firewall4 (2025.03.17~b6e51575-r2)
( 41/290) Installing terminfo (6.4-r3)
( 42/290) Installing libncurses6 (6.4-r3)
( 43/290) Installing libreadline8 (8.3-r1)
( 44/290) Installing gawk (5.3.2-r1)
( 45/290) Installing jshn (2026.06.19~7dd12784-r1)
( 46/290) Installing jsonfilter (2026.03.16~b9034210-r1)
( 47/290) Installing rpcd (2026.06.04~28faf640-r1)
( 48/290) Installing rpcd-mod-rpcsys (2026.06.04~28faf640-r1)
( 49/290) Installing banip (1.8.10-r1)
( 50/290) Installing busybox (1.37.0-r6)
( 51/290) Installing ubusd (2026.06.28~24864e78-r2)
( 52/290) Installing ubus (2026.06.28~24864e78-r2)
( 53/290) Installing ubox (2025.10.30~6f78fa49-r1)
( 54/290) Installing fstools (2026.05.23~16718b6e-r1)
( 55/290) Installing fwtool (2025.10.03~04cd252e-r1)
( 56/290) Installing libnl-tiny1 (2025.12.02~40493a65-r1)
( 57/290) Installing libudebug (2026.01.16~875e1a7a)
( 58/290) Installing ucode-mod-uloop (2026.01.16~85922056-r1)
( 59/290) Installing netifd (2026.02.26~cbb83a18-r1)
( 60/290) Installing openwrt-keyring (2025.12.10~f0670054-r1)
( 61/290) Installing libjson-script20260213 (2026.06.19~7dd12784-r1)
( 62/290) Installing procd (2026.03.13~58eb263d-r1)
( 63/290) Installing procd-seccomp (2026.03.13~58eb263d-r1)
( 64/290) Installing usign (2025.10.03~c4c72b1b-r1)
( 65/290) Installing base-files (1711~f5dae5ece4)
( 66/290) Installing block-mount (2026.05.23~16718b6e-r1)
( 67/290) Installing ca-certificates (20260601-r1)
( 68/290) Installing libltdl7 (2.5.4-r1)
( 69/290) Installing libpthread (1.2.5-r5)
( 70/290) Installing collectd (5.12.0-r56)
( 71/290) Installing collectd-mod-cpufreq (5.12.0-r56)
( 72/290) Installing libpcap1 (1.10.6-r1)
( 73/290) Installing collectd-mod-dns (5.12.0-r56)
( 74/290) Installing liboping (1.10.0-r3)
( 75/290) Installing collectd-mod-ping (5.12.0-r56)
( 76/290) Installing collectd-mod-thermal (5.12.0-r56)
( 77/290) Installing collectd-mod-uptime (5.12.0-r56)
( 78/290) Installing dnsmasq (2.93-r1)
( 79/290) Installing dropbear (2025.89-r3)
( 80/290) Installing librt (1.2.5-r5)
( 81/290) Installing libuuid1 (2.41.5-r1)
( 82/290) Installing libe2p2 (1.47.3-r1)
( 83/290) Installing libblkid1 (2.41.5-r1)
( 84/290) Installing libcomerr0 (1.47.3-r1)
( 85/290) Installing libss2 (1.47.3-r1)
( 86/290) Installing libext2fs2 (1.47.3-r1)
( 87/290) Installing e2fsprogs (1.47.3-r1)
( 88/290) Installing libmount1 (2.41.5-r1)
( 89/290) Installing libsmartcols1 (2.41.5-r1)
( 90/290) Installing fstrim (2.41.5-r1)
( 91/290) Installing libpcre2 (10.47-r1)
( 92/290) Installing grep (3.12-r1)
( 93/290) Installing grub2-bios-setup (2.12-r1)
( 94/290) Installing kmod-amazon-ena (6.12.94-r1)
( 95/290) Installing kmod-libphy (6.12.94-r1)
( 96/290) Installing kmod-mdio-devres (6.12.94-r1)
( 97/290) Installing kmod-pps (6.12.94-r1)
( 98/290) Installing kmod-ptp (6.12.94-r1)
( 99/290) Installing kmod-amd-xgbe (6.12.94-r1)
(100/290) Installing bnx2-firmware (20260221-r1)
(101/290) Installing kmod-bnx2 (6.12.94-r1)
(102/290) Installing kmod-input-core (6.12.94-r1)
(103/290) Installing kmod-button-hotplug (6.12.94-r3)
(104/290) Installing i915-firmware-dmc (20260221-r1)
(105/290) Installing kmod-fb (6.12.94-r1)
(106/290) Installing kmod-backlight (6.12.94-r1)
(107/290) Installing kmod-acpi-video (6.12.94-r1)
(108/290) Installing kmod-dma-buf (6.12.94-r1)
(109/290) Installing kmod-i2c-core (6.12.94-r1)
(110/290) Installing kmod-drm (6.12.94-r1)
(111/290) Installing kmod-drm-buddy (6.12.94-r1)
(112/290) Installing kmod-fb-cfb-copyarea (6.12.94-r1)
(113/290) Installing kmod-fb-cfb-fillrect (6.12.94-r1)
(114/290) Installing kmod-fb-cfb-imgblt (6.12.94-r1)
(115/290) Installing kmod-fb-sys-fops (6.12.94-r1)
(116/290) Installing kmod-fb-sys-ram (6.12.94-r1)
(117/290) Installing kmod-drm-kms-helper (6.12.94-r1)
(118/290) Installing kmod-drm-display-helper (6.12.94-r1)
(119/290) Installing kmod-drm-exec (6.12.94-r1)
(120/290) Installing kmod-drm-suballoc-helper (6.12.94-r1)
(121/290) Installing kmod-drm-ttm (6.12.94-r1)
(122/290) Installing kmod-drm-ttm-helper (6.12.94-r1)
(123/290) Installing kmod-i2c-algo-bit (6.12.94-r1)
(124/290) Installing kmod-drm-i915 (6.12.94-r1)
(125/290) Installing kmod-phylink (6.12.94-r1)
(126/290) Installing kmod-pcs-xpcs (6.12.94-r1)
(127/290) Installing kmod-stmmac-core (6.12.94-r1)
(128/290) Installing kmod-dwmac-intel (6.12.94-r1)
(129/290) Installing kmod-e1000 (6.12.94-r1)
(130/290) Installing kmod-e1000e (6.12.94-r1)
(131/290) Installing kmod-forcedeth (6.12.94-r1)
(132/290) Installing kmod-lib-crc16 (6.12.94-r1)
(133/290) Installing kmod-fs-ext4 (6.12.94-r1)
(134/290) Installing kmod-nls-base (6.12.94-r1)
(135/290) Installing kmod-nls-cp437 (6.12.94-r1)
(136/290) Installing kmod-nls-iso8859-1 (6.12.94-r1)
(137/290) Installing kmod-nls-utf8 (6.12.94-r1)
(138/290) Installing kmod-fs-vfat (6.12.94-r1)
(139/290) Installing kmod-hwmon-core (6.12.94-r1)
(140/290) Installing kmod-igb (6.12.94-r1)
(141/290) Installing kmod-igc (6.12.94-r1)
(142/290) Installing kmod-mdio (6.12.94-r1)
(143/290) Installing kmod-ixgbe (6.12.94-r1)
(144/290) Installing kmod-mii (6.12.94-r1)
(145/290) Installing kmod-phy-realtek (6.12.94-r1)
(146/290) Installing r8169-firmware (20260221-r1)
(147/290) Installing kmod-r8169 (6.12.94-r1)
(148/290) Installing kmod-tg3 (6.12.94-r1)
(149/290) Installing kmod-crypto-sha256 (6.12.94-r1)
(150/290) Installing kmod-usb-common (6.12.94-r1)
(151/290) Installing kmod-usb-core (6.12.94-r1)
(152/290) Installing r8152-firmware (20260221-r1)
(153/290) Installing kmod-usb-net-rtl8152 (6.12.94-r1)
(154/290) Installing kmod-scsi-core (6.12.94-r1)
(155/290) Installing kmod-usb-storage (6.12.94-r1)
(156/290) Installing libustream-mbedtls20201210 (2026.03.01~99f1c0db-r1)
(157/290) Installing libopenssl3 (3.5.7-r1)
(158/290) Installing libustream-openssl20201210 (2026.03.01~99f1c0db-r1)
(159/290) Installing logd (2025.10.30~6f78fa49-r1)
(160/290) Installing cgi-io (2026.06.28~7314451c-r1)
(161/290) Installing liblucihttp0 (2023.03.15~9b5b683f-r1)
(162/290) Installing liblucihttp-ucode (2023.03.15~9b5b683f-r1)
(163/290) Installing rpcd-mod-file (2026.06.04~28faf640-r1)
(164/290) Installing rpcd-mod-luci (20240305-r1)
(165/290) Installing rpcd-mod-ucode (2026.06.04~28faf640-r1)
(166/290) Installing ucode-mod-html (1)
(167/290) Installing ucode-mod-log (2026.01.16~85922056-r1)
(168/290) Installing ucode-mod-math (2026.01.16~85922056-r1)
(169/290) Installing luci-base (26.180.75667~128a781)
(170/290) Installing luci-app-package-manager (26.180.75667~128a781)
(171/290) Installing luci-app-firewall (26.180.75667~128a781)
(172/290) Installing luci-lib-uqr (26.180.75667~128a781)
(173/290) Installing libiwinfo-data (2026.01.14~f5dd57a8-r1)
(174/290) Installing libiwinfo20230701 (2026.01.14~f5dd57a8-r1)
(175/290) Installing rpcd-mod-iwinfo (2026.06.04~28faf640-r1)
(176/290) Installing luci-mod-network (26.180.75667~128a781)
(177/290) Installing luci-mod-status (26.180.75667~128a781)
(178/290) Installing luci-mod-system (26.180.75667~128a781)
(179/290) Installing luci-mod-admin-full (26.180.75667~128a781)
(180/290) Installing luci-proto-ipv6 (26.180.75667~128a781)
(181/290) Installing luci-proto-ppp (26.180.75667~128a781)
(182/290) Installing luci-theme-bootstrap (26.180.75667~128a781)
(183/290) Installing rpcd-mod-rrdns (20170710)
(184/290) Installing uhttpd (2026.06.16~7b1bec45-r1)
(185/290) Installing uhttpd-mod-ubus (2026.06.16~7b1bec45-r1)
(186/290) Installing luci-light (26.180.75667~128a781)
(187/290) Installing luci (26.180.75667~128a781)
(188/290) Installing attendedsysupgrade-common (10)
(189/290) Installing luci-app-attendedsysupgrade (26.180.75667~128a781)
(190/290) Installing luci-app-banip (1.8.10-r1)
(191/290) Installing luci-app-filebrowser (1.1.0-r1)
(192/290) Installing liblua5.1.5 (5.1.5-r11)
(193/290) Installing liblucihttp-lua (2023.03.15~9b5b683f-r1)
(194/290) Installing libubus-lua (2026.06.28~24864e78-r2)
(195/290) Installing lua (5.1.5-r11)
(196/290) Installing luci-lib-ip (26.180.75667~128a781)
(197/290) Installing luci-lib-jsonc (26.180.75667~128a781)
(198/290) Installing luci-lib-nixio (26.180.75667~128a781)
(199/290) Installing luci-lib-base (26.180.75667~128a781)
(200/290) Installing ucode-mod-lua (1)
(201/290) Installing luci-lua-runtime (26.180.75667~128a781)
(202/290) Installing luci-compat (26.180.75667~128a781)
(203/290) Installing luci-app-openvpn (26.180.75667~128a781)
(204/290) Installing libelf1 (0.192-r1)
(205/290) Installing libbpf1 (1.6.2-r1)
(206/290) Installing ip-full (6.18.0-r2)
(207/290) Installing resolveip (2)
(208/290) Installing pbr (1.2.2-r14)
(209/290) Installing luci-app-pbr (1.2.2-r14)
(210/290) Installing kmod-nf-ipt (6.12.94-r1)
(211/290) Installing kmod-ipt-core (6.12.94-r1)
(212/290) Installing kmod-nft-compat (6.12.94-r1)
(213/290) Installing libxtables12 (1.8.10-r3)
(214/290) Installing libiptext-nft0 (1.8.10-r3)
(215/290) Installing libiptext0 (1.8.10-r3)
(216/290) Installing libiptext6-0 (1.8.10-r3)
(217/290) Installing xtables-nft (1.8.10-r3)
(218/290) Installing iptables-nft (1.8.10-r3)
(219/290) Installing kmod-ipt-ipopt (6.12.94-r1)
(220/290) Installing iptables-mod-ipopt (1.8.10-r3)
(221/290) Installing kmod-ifb (6.12.94-r1)
(222/290) Installing kmod-sched-core (6.12.94-r1)
(223/290) Installing kmod-sched-cake (6.12.94-r1)
(224/290) Installing tc-tiny (6.18.0-r2)
(225/290) Installing sqm-scripts (1.7.2-r1)
(226/290) Installing luci-app-sqm (26.180.75667~128a781)
(227/290) Installing collectd-mod-cpu (5.12.0-r56)
(228/290) Installing collectd-mod-interface (5.12.0-r56)
(229/290) Installing collectd-mod-iwinfo (5.12.0-r56)
(230/290) Installing collectd-mod-load (5.12.0-r56)
(231/290) Installing collectd-mod-memory (5.12.0-r56)
(232/290) Installing collectd-mod-network (5.12.0-r56)
(233/290) Installing librrd1 (1.0.50-r7)
(234/290) Installing collectd-mod-rrdtool (5.12.0-r56)
(235/290) Installing rrdtool1 (1.0.50-r7)
(236/290) Installing luci-app-statistics (26.180.75667~128a781)
(237/290) Installing luci-i18n-attendedsysupgrade-nl (26.180.75667~128a781)
(238/290) Installing luci-i18n-banip-nl (26.180.75667~128a781)
(239/290) Installing luci-i18n-base-nl (26.180.75667~128a781)
(240/290) Installing luci-i18n-filebrowser-nl (26.180.75667~128a781)
(241/290) Installing luci-i18n-firewall-nl (26.180.75667~128a781)
(242/290) Installing luci-i18n-openvpn-nl (26.180.75667~128a781)
(243/290) Installing luci-i18n-package-manager-nl (26.180.75667~128a781)
(244/290) Installing luci-i18n-pbr-nl (26.180.75667~128a781)
(245/290) Installing luci-i18n-sqm-nl (26.180.75667~128a781)
(246/290) Installing luci-i18n-statistics-nl (26.180.75667~128a781)
(247/290) Installing libf2fs6 (1.16.0-r4)
(248/290) Installing mkf2fs (1.16.0-r4)
(249/290) Installing mtd (27)
(250/290) Installing odhcp6c (2026.06.20~07d324ee-r1)
(251/290) Installing odhcpd-ipv6only (2026.06.29~5d7be43f-r1)
(252/290) Installing kmod-tun (6.12.94-r1)
(253/290) Installing libcap-ng (0.8.4-r2)
(254/290) Installing liblz4-1 (1.10.0-r1)
(255/290) Installing liblzo2 (2.10-r5)
(256/290) Installing openvpn-openssl (2.7.4-r2)
(257/290) Installing partx-utils (2.41.5-r1)
(258/290) Installing kmod-lib-crc-ccitt (6.12.94-r1)
(259/290) Installing kmod-slhc (6.12.94-r1)
(260/290) Installing kmod-ppp (6.12.94-r1)
(261/290) Installing ppp (2.5.2-r3)
(262/290) Installing kmod-pppox (6.12.94-r1)
(263/290) Installing kmod-pppoe (6.12.94-r1)
(264/290) Installing ppp-mod-pppoe (2.5.2-r3)
(265/290) Installing procd-ujail (2026.03.13~58eb263d-r1)
(266/290) Installing kmod-fuse (6.12.94-r1)
(267/290) Installing libfuse3-3 (3.17.3-r1)
(268/290) Installing fuse3-utils (3.17.3-r1)
(269/290) Installing rclone (1.74.1-r1)
(270/290) Installing libbz2-1.0 (1.0.8-r1)
(271/290) Installing bzip2 (1.0.8-r1)
(272/290) Installing libattr (2.5.2-r3)
(273/290) Installing libacl (2.3.2-r2)
(274/290) Installing libzstd (1.5.7-r1)
(275/290) Installing liblzma (5.8.1-r1)
(276/290) Installing xz-utils (5.8.1-r1)
(277/290) Installing xz (5.8.1-r1)
(278/290) Installing tar (1.35-r1)
(279/290) Installing tcpdump-mini (4.99.6-r1)
(280/290) Installing uci (2025.12.02~66127cd7-r1)
(281/290) Installing kmod-nf-conntrack-netlink (6.12.94-r1)
(282/290) Installing libnfnetlink0 (1.0.2-r1)
(283/290) Installing libnetfilter-conntrack3 (1.1.0-r1)
(284/290) Installing ulogd (2.0.9-r1)
(285/290) Installing ulogd-mod-extra (2.0.9-r1)
(286/290) Installing getrandom (2025.10.30~6f78fa49-r1)
(287/290) Installing urandom-seed (3)
(288/290) Installing urngd (2025.10.03~f17e33d9-r1)
(289/290) Installing wget-ssl (1.25.0-r2)
(290/290) Installing zoneinfo-core (2026b-r1)
OK: 112.8 MiB in 290 packages

Finalizing root filesystem...
add alternative: /usr/bin/ssh-keygen -> /usr/sbin/dropbear
add alternative: /usr/bin/scp -> /usr/sbin/dropbear
add alternative: /usr/bin/ssh -> /usr/sbin/dropbear
add alternative: /usr/bin/awk -> /usr/bin/gawk
add alternative: /bin/egrep -> /usr/libexec/egrep-gnu
add alternative: /bin/fgrep -> /usr/libexec/fgrep-gnu
add alternative: /bin/grep -> /usr/libexec/grep-gnu
add alternative: /sbin/ip -> /usr/libexec/ip-full
add alternative: /usr/sbin/iptables -> xtables-nft-multi
add alternative: /usr/sbin/iptables-restore -> xtables-nft-multi
add alternative: /usr/sbin/iptables-save -> xtables-nft-multi
add alternative: /usr/sbin/iptables-nft -> xtables-nft-multi
add alternative: /usr/sbin/iptables-nft-restore -> xtables-nft-multi
add alternative: /usr/sbin/iptables-nft-save -> xtables-nft-multi
add alternative: /usr/sbin/iptables-restore-translate -> xtables-nft-multi
add alternative: /usr/sbin/iptables-translate -> xtables-nft-multi
add alternative: /sbin/logread -> /usr/libexec/logread-ubox
add alternative: /bin/tar -> /usr/libexec/tar-gnu
add alternative: /sbin/tc -> /usr/libexec/tc-tiny
add alternative: /sbin/rmmod -> /sbin/kmodloader
add alternative: /sbin/insmod -> /sbin/kmodloader
add alternative: /sbin/lsmod -> /sbin/kmodloader
add alternative: /sbin/modinfo -> /sbin/kmodloader
add alternative: /sbin/modprobe -> /sbin/kmodloader
add alternative: /usr/bin/wget -> /usr/libexec/wget-ssl
add alternative: /usr/bin/xz -> /usr/libexec/xz-lzmautils
add alternative: /usr/bin/lzcat -> /usr/libexec/xz-lzmautils
add alternative: /usr/bin/lzma -> /usr/libexec/xz-lzmautils
add alternative: /usr/bin/unlzma -> /usr/libexec/xz-lzmautils
add alternative: /usr/bin/unxz -> /usr/libexec/xz-lzmautils
add alternative: /usr/bin/xzcat -> /usr/libexec/xz-lzmautils
Enabling banip
Enabling boot
Enabling collectd
Enabling cron
Enabling dnsmasq
Enabling done
Enabling dropbear
Enabling firewall
Enabling fstab
Enabling gpio_switch
Enabling led
Enabling log
Enabling luci_statistics
Enabling network
Enabling odhcpd
Enabling openvpn
Enabling packet_steering
Enabling pbr
Enabling rpcd
Enabling sqm
Enabling sysctl
Enabling sysfixtime
Enabling sysntpd
Enabling system
Enabling ucitrack
Enabling uhttpd
Enabling ulogd
Enabling umount
Enabling urandom_seed
Enabling urngd

Building images...
Parallel mksquashfs: Using 16 processors
Creating 4.0 filesystem on /builder/build_dir/target-x86_64_musl/linux-x86_64/root.squashfs, block size 262144.

[|                                                             ]    0/2189   0%
[=============================================================] 2304/2304 100%

Exportable Squashfs 4.0 filesystem, xz compressed, data block size 262144
compressed data, compressed metadata, compressed fragments,
no xattrs, compressed ids
duplicates are removed
Filesystem size 32405.52 Kbytes (31.65 Mbytes)
27.97% of uncompressed filesystem size (115851.60 Kbytes)
Inode table size 19334 bytes (18.88 Kbytes)
22.81% of uncompressed inode table size (84775 bytes)
Directory table size 25082 bytes (24.49 Kbytes)
47.59% of uncompressed directory table size (52702 bytes)
Number of duplicate files found 46
Number of inodes 2441
Number of files 1834
Number of fragments 78
Number of symbolic links 429
Number of device nodes 1
Number of fifo nodes 0
Number of socket nodes 0
Number of directories 177
Number of hard-links 0
Number of ids (unique uids + gids) 1
Number of uids 1
unknown (0)
Number of gids 1
unknown (0)
Creating filesystem with parameters:
Size: 109051904
Block size: 4096
Blocks per group: 32768
Inodes per group: 6656
Inode size: 256
Journal blocks: 1024
Label: rootfs
Blocks: 26624
Block groups: 1
Reserved blocks: 0
Reserved block group size: 7

STDERR:

Pseudo file "dev" exists in source filesystem "/builder/build_dir/target-x86_64_musl/root-x86/dev".
Ignoring, exclude it (-e/-ef) to override.
error: ext4_allocate_best_fit_partial: failed to allocate 453 blocks, out of space?
make[3]: *** [/builder/include/image.mk:426: /builder/build_dir/target-x86_64_musl/linux-x86_64/root.ext4] Error 1
make[2]: *** [Makefile:288: build_image] Error 2
make[1]: *** [Makefile:185: _call_image] Error 2
make: *** [Makefile:357: image] Error 2

Traceback (most recent call last):
  File "/app/.venv/lib/python3.14/site-packages/rq/worker/base.py", line 1538, in perform_job
    return_value = job.perform()
  File "/app/.venv/lib/python3.14/site-packages/rq/job.py", line 1342, in perform
    self._result = self._execute()
                   ~~~~~~~~~~~~~^^
  File "/app/.venv/lib/python3.14/site-packages/rq/job.py", line 1402, in _execute
    result = self.func(*self.args, **self.kwargs)
  File "/app/asu/build.py", line 500, in build
    result = _build(build_request, job)
  File "/app/asu/build.py", line 355, in _build
    report_error(job, "Selected packages exceed device storage")
    ~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/asu/util.py", line 338, in report_error
    raise RuntimeError(msg)
RuntimeError: Selected packages exceed device storage