Glad to hear someone's got it working. Do you remember specifically what you did to get it working (on a 2.6 branch). In terms of what I do, it's not much. I've recently synced from the backfire branch (rather than trunk), and built myself. Selected the stable driver and a number of other packages:
base-files - 43-r21620
busybox - 1.15.3-2
crda - 1.1.0-2
dnsmasq - 2.52-4
dropbear - 0.52-4
faad2 - 2.7-1
fdisk - 2.13.0.1-4
ffmpeg - 20080419-2
firewall - 1-10
glib2 - 2.22.2-1
hotplug2 - 1.0-beta-2
iptables - 1.4.6-2
iptables-mod-conntrack - 1.4.6-2
iptables-mod-nat - 1.4.6-2
iw - 0.9.19-1
kernel - 2.6.32.10-1
kmod-b43 - 2.6.32.10+2010-04-28-3
kmod-b43legacy - 2.6.32.10+2010-04-28-3
kmod-cfg80211 - 2.6.32.10+2010-04-28-3
kmod-crypto-aes - 2.6.32.10-1
kmod-crypto-arc4 - 2.6.32.10-1
kmod-crypto-core - 2.6.32.10-1
kmod-diag - 2.6.32.10-7
kmod-fs-ext2 - 2.6.32.10-1
kmod-fs-hfsplus - 2.6.32.10-1
kmod-fs-vfat - 2.6.32.10-1
kmod-input-core - 2.6.32.10-1
kmod-ipt-conntrack - 2.6.32.10-1
kmod-ipt-core - 2.6.32.10-1
kmod-ipt-nat - 2.6.32.10-1
kmod-ipt-nathelper - 2.6.32.10-1
kmod-mac80211 - 2.6.32.10+2010-04-28-3
kmod-nls-base - 2.6.32.10-1
kmod-nls-cp437 - 2.6.32.10-1
kmod-nls-iso8859-1 - 2.6.32.10-1
kmod-nls-utf8 - 2.6.32.10-1
kmod-scsi-core - 2.6.32.10-1
kmod-sound-core - 2.6.32.10-1
kmod-switch - 2.6.32.10-3
kmod-usb-audio - 2.6.32.10-1
kmod-usb-core - 2.6.32.10-1
kmod-usb-ohci - 2.6.32.10-1
kmod-usb-storage - 2.6.32.10-1
kmod-usb-uhci - 2.6.32.10-1
libaudiofile - 0.2.6-2
libc - 0.9.30.1-43
libcurl - 7.19.6-1
libext2fs - 1.41.11-1
libfaad2 - 2.7-1
libffmpeg - 20080419-2
libflac - 1.1.2-1
libgcc - 4.3.3+cs-43
libiconv - 1.11-1
libid3tag - 0.15.1b-3
libintl - 0.17-1
libiptc - 1.4.6-2
liblua - 5.1.4-6
libmad - 0.15.1b-3
libmms - 0.5-1
libnl-tiny - 0.1-1
libogg - 1.1.4-2
libopenssl - 0.9.8m-3
libpostproc - 20080419-2
libpthread - 0.9.30.1-43
librt - 0.9.30.1-43
libshout - 2.2.2-1
libsqlite3 - 3.6.20-2
libuci - 12012009.5-2
libuci-lua - 12012009.5-2
libvorbis - 1.2.3-1
libvorbisidec - 1.0.2+svn14261-1
libxtables - 1.4.6-2
lua - 5.1.4-6
luci - 0.9.0-1
luci-admin-core - 0.9.0-1
luci-admin-full - 0.9.0-1
luci-admin-mini - 0.9.0-1
luci-admin-rpc - 0.9.0-1
luci-app-firewall - 0.9.0-1
luci-app-initmgr - 0.9.0-1
luci-app-livestats - 0.9.0-1
luci-app-statistics - 0.9.0-1
luci-cbi - 0.9.0-1
luci-core - 0.9.0-1
luci-http - 0.9.0-1
luci-i18n-english - 0.9.0-1
luci-ipkg - 0.9.0-1
luci-json - 0.9.0-1
luci-lmo - 0.9.0-1
luci-medium - 0.9.0-1
luci-nixio - 0.9.0-1
luci-sgi-cgi - 0.9.0-1
luci-sys - 0.9.0-1
luci-theme-base - 0.9.0-1
luci-theme-openwrt - 0.9.0-1
luci-theme-openwrtlight - 0.9.0-1
luci-uci - 0.9.0-1
luci-uvl - 0.9.0-1
luci-web - 0.9.0-1
mpc - 0.17-1
mpd - 0.15.8-2
mtd - 12
nvram - 7
opkg - 513-2
uci - 12012009.5-2
udevtrigger - 106-1
uhttpd - 9
wireless-tools - 29-4
wpad-mini - 20100418-1
zlib - 1.2.3-5
All of that was selected in the build process. I've made a variety of changes to the packages selected in make menuconfig, particularly around which USB and Luci packages were included by default as I worked out other problems. None of that has made a difference.
After installing the build, all I have to do is enable wireless and wait. Typically the best I can get out of it is 6 hours, but it often fails in much less time than that. The amount of wireless traffic being generated doesn't seem to make a huge difference. After that the router remains functional for ethernet/routing, but eventually DHCP will fail (seemingly tied to the wireless failure, as DHCP is stable without wireless). The only way to get power down/power up the system.
Initially I thought it might have been related to encryption, so I tried WPA, then WEP, and finally no encryption with DHCP only doling IPs to specific Mac addresses. None of this made a difference.
The only thing I haven't tried is one tweak mentioned by someon in the bug 6907 thread - tweaking 'CONFIG_B43_FW_SQUASH_COREREVS="13"'. Not exactly sure where to do this, and not sure if it's critical.
I've opened bug 7403 on the hang, but no response yet. Debug is enabled with symbols, this is the dmesg output:
1 root@OpenWrt:~# dmesg
2 Linux version 2.6.32.10 (lee@lee-dev) (gcc version 4.3.3 (GCC) ) #2 Sun May 30 10:45:54 MYT 2010
3 CPU revision is: 00029029 (Broadcom BCM3302)
4 ssb: Core 0 found: ChipCommon (cc 0x800, rev 0x14, vendor 0x4243)
5 ssb: Core 1 found: Fast Ethernet (cc 0x806, rev 0x09, vendor 0x4243)
6 ssb: Core 2 found: MIPS 3302 (cc 0x816, rev 0x08, vendor 0x4243)
7 ssb: Core 3 found: USB 2.0 Host (cc 0x819, rev 0x02, vendor 0x4243)
8 ssb: Core 4 found: MEMC SDRAM (cc 0x80F, rev 0x04, vendor 0x4243)
9 ssb: Core 5 found: IEEE 802.11 (cc 0x812, rev 0x0D, vendor 0x4243)
10 ssb: Core 6 found: Roboswitch (cc 0x81C, rev 0x02, vendor 0x4243)
11 ssb: Found rev 0 PMU (capabilities 0x04A63400)
12 ssb: Initializing MIPS core...
13 ssb: set_irq: core 0x0806, irq 4 => 4
14 ssb: set_irq: core 0x0816, irq 5 => 2
15 ssb: set_irq: core 0x0812, irq 2 => 5
16 ssb: after irq reconfiguration
17 ssb: core 0x0800, irq : 2(S) 3* 4 5 6 D I
18 ssb: core 0x0806, irq : 2(S) 3 4* 5 6 D I
19 ssb: core 0x0816, irq : 2(S)* 3 4 5 6 D I
20 ssb: core 0x0819, irq : 2(S) 3 4 5 6* D I
21 ssb: core 0x080f, irq : 2(S) 3 4 5 6 D I*
22 ssb: core 0x0812, irq : 2(S) 3 4 5* 6 D I
23 ssb: core 0x081c, irq : 2(S) 3 4 5 6 D I*
24 ssb: Sonics Silicon Backplane found at address 0x18000000
25 Serial init done.
26 Determined physical RAM map:
27 memory: 02000000 @ 00000000 (usable)
28 Initrd not found or empty - disabling initrd
29 Zone PFN ranges:
30 Normal 0x00000000 -> 0x00002000
31 Movable zone start PFN for each node
32 early_node_map[1] active PFN ranges
33 0: 0x00000000 -> 0x00002000
34 On node 0 totalpages: 8192
35 free_area_init_node: node 0, pgdat 802a3b10, node_mem_map 81000000
36 Normal zone: 64 pages used for memmap
37 Normal zone: 0 pages reserved
38 Normal zone: 8128 pages, LIFO batch:0
39 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 8128
40 Kernel command line: root=/dev/mtdblock2 rootfstype=squashfs,jffs2 noinitrd console=ttyS0,115200
41 PID hash table entries: 128 (order: -3, 512 bytes)
42 Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
43 Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
44 Primary instruction cache 16kB, VIPT, 4-way, linesize 16 bytes.
45 Primary data cache 16kB, 2-way, VIPT, cache aliases, linesize 16 bytes
46 Memory: 29504k/32768k available (2229k kernel code, 3264k reserved, 471k data, 136k init, 0k highmem)
47 Hierarchical RCU implementation.
48 NR_IRQS:128
49 console [ttyS0] enabled
50 Calibrating delay loop... 239.10 BogoMIPS (lpj=478208)
51 Mount-cache hash table entries: 512
52 NET: Registered protocol family 16
53 bio: create slab <bio-0> at 0
54 Switching to clocksource MIPS
55 NET: Registered protocol family 2
56 IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
57 TCP established hash table entries: 1024 (order: 1, 8192 bytes)
58 TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
59 TCP: Hash tables configured (established 1024 bind 1024)
60 TCP reno registered
61 NET: Registered protocol family 1
62 squashfs: version 4.0 (2009/01/31) Phillip Lougher
63 Registering mini_fo version $Id$
64 JFFS2 version 2.2. (NAND) (SUMMARY) © 2001-2006 Red Hat, Inc.
65 msgmni has been set to 57
66 io scheduler noop registered
67 io scheduler deadline registered (default)
68 Serial: 8250/16550 driver, 2 ports, IRQ sharing enabled
69 serial8250: ttyS0 at MMIO 0xb8000300 (irq = 3) is a 16550A
70 serial8250: ttyS1 at MMIO 0xb8000400 (irq = 3) is a 16550A
71 serial8250.0: ttyS0 at MMIO 0xb8000300 (irq = 3) is a 16550A
72 serial8250.0: ttyS1 at MMIO 0xb8000400 (irq = 3) is a 16550A
73 flash init: 0x1c000000 0x02000000
74 Physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
75 Physically mapped flash: Found an alias at 0x800000 for the chip at 0x0
76 Physically mapped flash: Found an alias at 0x1000000 for the chip at 0x0
77 Physically mapped flash: Found an alias at 0x1800000 for the chip at 0x0
78 Amd/Fujitsu Extended Query Table at 0x0040
79 number of CFI chips: 1
80 cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
81 Flash device: 0x800000 at 0x1fc00000
82 bootloader size: 131072
83 Updating TRX offsets and length:
84 old trx = [0x0000001c, 0x00000974, 0x000e2800], len=0x00521000 crc32=0xfb2d1252
85 new trx = [0x0000001c, 0x00000974, 0x000e2800], len=0x000e2800 crc32=0xf6de2be0
86 Done
87 Creating 4 MTD partitions on "Physically mapped flash":
88 0x000000000000-0x000000020000 : "cfe"
89 0x000000020000-0x0000007f0000 : "linux"
90 0x000000102800-0x0000007f0000 : "rootfs"
91 mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- forcing read-only
92 mtd: partition "rootfs" set to be root filesystem
93 mtd: partition "rootfs_data" created automatically, ofs=520000, len=2D0000
94 0x000000520000-0x0000007f0000 : "rootfs_data"
95 0x0000007f0000-0x000000800000 : "nvram"
96 b44.c:v2.0
97 eth0: Broadcom 44xx/47xx 10/100BaseT Ethernet 90:e6:ba:43:6d:71
98 BCM47xx Watchdog Timer enabled (30 seconds, nowayout)
99 TCP westwood registered
100 NET: Registered protocol family 17
101 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
102 All bugs added by David S. Miller <davem@redhat.com>
103 VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
104 Freeing unused kernel memory: 136k freed
105 Please be patient, while OpenWrt loads ...
106 diag: Detected 'ASUS WL-500g Premium V2'
107 b44: eth0: Link is up at 100 Mbps, full duplex.
108 b44: eth0: Flow control is off for TX and off for RX.
109 roboswitch: Probing device eth0: found a 5325! It's a 5350.
110 jffs2_scan_eraseblock(): End of filesystem marker found at 0x10000
111 jffs2_build_filesystem(): unlocking the mtd device... done.
112 jffs2_build_filesystem(): erasing all blocks after the end marker... done.
113 mini_fo: using base directory: /
114 mini_fo: using storage directory: /overlay
115 b44: eth0: powering down PHY
116 b44: eth0: Link is up at 100 Mbps, full duplex.
117 b44: eth0: Flow control is off for TX and off for RX.
118 device eth0.0 entered promiscuous mode
119 device eth0 entered promiscuous mode
120 br-lan: port 1(eth0.0) entering forwarding state
121 Generic kernel compatibility enabled based on linux-next next-20100113
122 cfg80211: Calling CRDA to update world regulatory domain
123 SCSI subsystem initialized
124 usbcore: registered new interface driver usbfs
125 usbcore: registered new interface driver hub
126 usbcore: registered new device driver usb
127 cfg80211: World regulatory domain updated:
128 (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
129 (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
130 (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)
131 (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm)
132 (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
133 (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm)
134 b43-phy0: Broadcom 5354 WLAN found (core revision 13)
135 phy0: Selected rate control algorithm 'minstrel'
136 Registered led device: b43-phy0::tx
137 Registered led device: b43-phy0::rx
138 Broadcom 43xx driver loaded [ Features: PL, Firmware-ID: FW13 ]
139 Broadcom 43xx-legacy driver loaded [ Features: PLID, Firmware-ID: FW10 ]
140 ip_tables: (C) 2000-2006 Netfilter Core Team
141 ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
142 nf_conntrack version 0.5.0 (463 buckets, 1852 max)
143 ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
144 ohci_hcd ssb0:1: SSB OHCI Controller
145 ohci_hcd ssb0:1: new USB bus registered, assigned bus number 1
146 ohci_hcd ssb0:1: irq 6, io mem 0x18003000
147 usb usb1: configuration #1 chosen from 1 choice
148 hub 1-0:1.0: USB hub found
149 hub 1-0:1.0: 2 ports detected
150 ohci_hcd ssb0:1: SSB EHCI Controller
151 ohci_hcd ssb0:1: new USB bus registered, assigned bus number 2
152 ohci_hcd ssb0:1: irq 6, io mem 0x18003800
153 ohci_hcd ssb0:1: USB 0.0 started, EHCI 1.00
154 usb usb2: configuration #1 chosen from 1 choice
155 hub 2-0:1.0: USB hub found
156 hub 2-0:1.0: 2 ports detected
157 uhci_hcd: USB Universal Host Controller Interface driver
158 usb 2-1: new high speed USB device using ohci_hcd and address 2
159 usb 2-1: configuration #1 chosen from 1 choice
160 hub 2-1:1.0: USB hub found
161 hub 2-1:1.0: 2 ports detected
162 usbcore: registered new interface driver snd-usb-audio
163 Initializing USB Mass Storage driver...
164 usbcore: registered new interface driver usb-storage
165 USB Mass Storage support registered.
166 b43-phy0: Loading firmware version 410.2160 (2007-05-26 15:32:10)
167 b43-phy0: Loading firmware version 410.2160 (2007-05-26 15:32:10)
168 device wlan0 entered promiscuous mode
169 br-lan: port 2(wlan0) entering forwarding state
170 device wlan0 left promiscuous mode
171 br-lan: port 2(wlan0) entering disabled state
172 device wlan0 entered promiscuous mode
173 br-lan: port 2(wlan0) entering forwarding state
174 usb 2-1.2: new full speed USB device using ohci_hcd and address 3
175 usb 2-1.2: configuration #1 chosen from 1 choice
176 usb 2-1.1: new high speed USB device using ohci_hcd and address 4
177 usb 2-1.1: configuration #1 chosen from 1 choice
178 scsi0 : SCSI emulation for USB Mass Storage devices
179 usb-storage: device found at 4
180 usb-storage: waiting for device to settle before scanning
181 scsi 0:0:0:0: Direct-Access WD My Passport 070A 1030 PQ: 0 ANSI: 4
182 scsi 0:0:0:1: CD-ROM WD Virtual CD 070A 1030 PQ: 0 ANSI: 4
183 sd 0:0:0:0: [sda] 1463775232 512-byte logical blocks: (749 GB/697 GiB)
184 scsi 0:0:0:2: Enclosure WD SES Device 1030 PQ: 0 ANSI: 4
185 sd 0:0:0:0: [sda] Write Protect is off
186 sd 0:0:0:0: [sda] Mode Sense: 23 00 10 00
187 sd 0:0:0:0: [sda] Assuming drive cache: write through
188 sd 0:0:0:0: [sda] Assuming drive cache: write through
189 sda: sda1
190 usb-storage: device scan complete
191 sd 0:0:0:0: [sda] Assuming drive cache: write through
192 sd 0:0:0:0: [sda] Attached SCSI disk
193 hfs: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only.
194 ohci_hcd ssb0:1: fatal error
195 ohci_hcd ssb0:1: force halt; handhake b8003814 00004000 00004000 -> -145
196 ohci_hcd ssb0:1: HC died; cleaning up
197 usb 2-1: USB disconnect, address 2
198 usb 2-1.1: USB disconnect, address 4
199 usb 2-1.2: USB disconnect, address 3
200 usb 1-1: new full speed USB device using ohci_hcd and address 2
201 usb 1-1: not running at top speed; connect to a high speed hub
202 usb 1-1: configuration #1 chosen from 1 choice
203 hub 1-1:1.0: USB hub found
204 hub 1-1:1.0: 2 ports detected
205 usb 1-1.1: new full speed USB device using ohci_hcd and address 3
206 usb 1-1.1: not running at top speed; connect to a high speed hub
207 usb 1-1.1: configuration #1 chosen from 1 choice
208 scsi1 : SCSI emulation for USB Mass Storage devices
209 usb-storage: device found at 3
210 usb-storage: waiting for device to settle before scanning
211 usb 1-1.2: new full speed USB device using ohci_hcd and address 4
212 usb 1-1.2: configuration #1 chosen from 1 choice
213 scsi 1:0:0:0: Direct-Access WD My Passport 070A 1030 PQ: 0 ANSI: 4
214 scsi 1:0:0:1: CD-ROM WD Virtual CD 070A 1030 PQ: 0 ANSI: 4
215 sd 1:0:0:0: [sdb] 1463775232 512-byte logical blocks: (749 GB/697 GiB)
216 scsi 1:0:0:2: Enclosure WD SES Device 1030 PQ: 0 ANSI: 4
217 sd 1:0:0:0: [sdb] Write Protect is off
218 sd 1:0:0:0: [sdb] Mode Sense: 23 00 10 00
219 sd 1:0:0:0: [sdb] Assuming drive cache: write through
220 usb-storage: device scan complete
221 sd 1:0:0:0: [sdb] Assuming drive cache: write through
222 sdb: sdb1
223 sd 1:0:0:0: [sdb] Assuming drive cache: write through
224 sd 1:0:0:0: [sdb] Attached SCSI disk
225 hfs: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only.
226 skb_over_panic: text:80d1a5c4 len:2370 put:2370 head:80eb2000 data:80eb2040 tail:0x80eb2982 end:0x80eb2980 dev:<NULL>
227 Kernel bug detected[#1]:
228 Cpu 0
229 $ 0 : 00000000 1000f800 0000007c 00000001
230 $ 4 : 80297480 00002ebf ffffffff 00002ebf
231 $ 8 : 00004000 00000000 8029dce0 00000001
232 $12 : 0000000f 80239728 ffffffff 00000002
233 $16 : 00eb2040 80eb2040 00000924 81e57980
234 $20 : 80e26180 00000001 a0ec5010 80d21158
235 $24 : 00000002 8015efd0
236 $28 : 80ecc000 80ecddb0 00000003 8019bbbc
237 Hi : 00000000
238 Lo : 00000077
239 epc : 8019bbbc skb_put+0x74/0x90
240 Not tainted
241 ra : 8019bbbc skb_put+0x74/0x90
242 Status: 1000f803 KERNEL EXL IE
243 Cause : 00800024
244 PrId : 00029029 (Broadcom BCM3302)
245 Modules linked in: usb_storage snd_usb_audio snd_usb_lib uhci_hcd ohci_hcd nf_nat_tftp nf_conntrack_tftp nf_nat_irc nf_conntrack_irc nf_nat_ftp nf_conntrack_ftp ipt_MASQUERADE iptable_nat nf_nat xt_NOTRACK iptable_raw xt_state nf_conntrack_ipv4 nf_defrag_ipv4 nf_conntrack ehci_hcd sd_mod ipt_REJECT xt_TCPMSS ipt_LOG xt_comment xt_multiport xt_mac xt_limit iptable_mangle iptable_filter ip_tables xt_tcpudp x_tables ext2 snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd_rawmidi snd_seq_device snd_hwdep snd_page_alloc snd soundcore vfat fat hfsplus b43legacy b43 nls_utf8 nls_iso8859_1 nls_cp437 mac80211 usbcore scsi_mod nls_base cfg80211 compat_firmware_class compat input_core arc4 aes_generic deflate ecb cbc switch_robo switch_core diag
246 Process irq/5-b43 (pid: 806, threadinfo=80ecc000, task=81f2f650, tls=00000000)
247 Stack : 00000000 80d1a5c4 00000942 00000942 80eb2000 80eb2040 80eb2982 80eb2980
248 80273cac 80e26180 00000001 80d1a5c4 80ecde50 00ff0000 80e262a4 00010000
249 802d1880 00000000 81f8540c 80016838 80d21158 00010000 00010000 81f52c00
250 00008000 00010000 80e262a4 00010000 802d1880 00000000 80299314 80d07280
251 80ecdfe0 81f2f650 80e26280 81f2f650 81f2f7e0 80e262a4 00010000 802d1880
252 ...
253 Call Trace:
254 [<8019bbbc>] skb_put+0x74/0x90
255 [<80d1a5c4>] b43_dma_rx+0x350/0x474 [b43]
256 [<80d07280>] b43_controller_restart+0x7a8/0x97c [b43]
257
258
259 Code: afab001c 0c0028c2 afa20020 <0200000d> 08066ef0 00000000 8fbf002c 01201021 03e00008
260 Disabling lock debugging due to kernel taint
261 exiting task "irq/5-b43" (806) is an active IRQ thread (irq 5)
262 root@OpenWrt:~#
(Last edited by ldolse on 12 Jun 2010, 01:07)