Try to unload netlink and related packages (nf tables?) seems some package is reserving the hook
If so then we need that big netfilter patch I wanted to avoid
After revert the debug commit, the router no longer died, and shortcut-fe seems working(sirq is much lower, 30% vs 90% when downloading at 100Mbits/s).
net/netfilter/nf_conntrack_netlink.c: In function 'ctnetlink_conntrack_event':
net/netfilter/nf_conntrack_netlink.c:648:23: error: 'item' undeclared (first use in this function)
struct nf_conn *ct = item->ct;
^
The next patch would create the file net/netfilter/nf_conntrack_rtcache.c,
which already exists! Applying it anyway.
patching file net/netfilter/nf_conntrack_rtcache.c
Hunk #1 FAILED at 1.
1 out of 1 hunk FAILED -- saving rejects to file net/netfilter/nf_conntrack_rtcache.c.rej
Patch failed! Please fix /home/azuwis/src/lede/target/linux/generic/patches-4.4/953-net-conntrack-events-support-multiple-registrant.patch!
@dissent1: You seem to have taken lead of this thread; started by @gwlim. Did you basically confirm that the kernel module "shortcut-fe-cm" is not required for SFE to work?
Yes, I'm pretty confident in that. Upon deeper digging into the code I can conclude that you should use either sfe-cm or fast-classifier. Fast-classifier is a clone of sfe-cm with additional functions and is preferable. It has some additional checks, adds statistics and allows bridge offloading as well:
echo 1 > /sys/fast_classifier/skip_to_bridge_ingress
These both modules shouldn't be used together because fast-classifier decides to offload when the certain connection hits 128 packets (you can adjust it with /sys/fast_classifier/offload_at_pkts), but sfe-cm does it at the moment, so packets don't go to fast-classifier anymore because the offloading rule is already created by sfe-cm. It's a race condition.
You should be able to load the fast-classifier along with netlink if you use my latest commit. Please confirm it's important.
Cherry-picked 93ae487 on LEDE 97eb8ab, run tested on Mercury MW4530R v1(ar71xx mips_24kc), both nlbwmon(which depends on kmod-nf-conntrack-netlink) and shortcut-fe worked.