RUTX50 (7.25.3): kernel module crash with MultiAP on 2.4GHz

Networking Solutions Issue
1

Hello

Hope to get some support from Teltonika on this issue.

Description:
A reproducible issue has been identified where the 2.4GHz radio module crashes after a short uptime and following the transfer of only a few hundred megabytes of data.

Environment & Configuration:

  • Router Configuration: MultiAP is enabled for the 2.4GHz band.
  • Client Connection: Clients can connect via either the 5GHz or 2.4GHz band.
  • Uplink Settings: Encryption settings appear irrelevant to the stability; crashes occur in various environments, including secured/insecure campsite APs and at home using OpenWRT-based routers.

Affected Scenarios:

  • The issue occurs exclusively when MultiAP is enabled on the 2.4GHz band.
  • No crashes are observed when MultiAP is configured for the 5GHz band.

Expected Behavior:
Stable radio connection without crashes regardless of uptime or data volume, provided MultiAP is active.

Actual Behavior:
The 2.4GHz radio module fails after a brief period of operation.

Steps to Reproduce:

  1. Configure the router with MultiAP mode enabled for the 2.4GHz band.
  2. Establish a connection with a client device.
  3. Initiate data transfer (a few hundred MB is sufficient).
  4. Monitor system status over a short duration.

Additional Information:
The issue is not new, I observed it frist time in 2025, but took me while to debug it more detail this year.

Because I cannou upload files as new users, here’s extract of the kernel exception trace taht happends:

[ 4819.049971] ath10k_ahb a000000.wifi: bss channel survey timed out
[ 4822.090009] ath10k_ahb a000000.wifi: wmi command 36892 timeout, restarting hardware
[ 4822.090102] ath10k_ahb a000000.wifi: failed to set dtim period for vdev 0: -11
[ 4822.096744] ath10k_ahb a000000.wifi: failed to recalculate rts/cts prot for vdev 0: -108
[ 4822.104072] ath10k_ahb a000000.wifi: failed to set cts protection for vdev 0: -108
[ 4822.112660] ath10k_ahb a000000.wifi: failed to set erp slot for vdev 0: -108
[ 4822.119694] ath10k_ahb a000000.wifi: failed to set preamble for vdev 0: -108
[ 4822.126797] ath10k_ahb a000000.wifi: failed to set mgmt tx rate -108
[ 4822.156799] ieee80211 phy0: Hardware restart was requested
[ 4822.160291] ath10k_ahb a000000.wifi: failed to halt axi bus: 0
[ 4822.335487] ath10k_ahb a000000.wifi: Failed to get pcie state addr: -16
[ 4822.335600] ath10k_ahb a000000.wifi: failed to setup init config: -16
[ 4822.341205] ath10k_ahb a000000.wifi: Could not init hif: -16
[ 4822.347610] ------------[ cut here ]------------
[ 4822.353580] WARNING: CPU: 3 PID: 32533 at backports-6.12.6/net/mac80211/util.c:1828 ieee80211_reconfig+0xdb4/0x1008 [mac80211]
[ 4822.357906] Hardware became unavailable during restart.
[ 4822.369147] Modules linked in: pppoe ppp_async l2tp_ppp ath10k_pci(O) ath10k_core(O) ath(O) qmi_wwan pptp pppox ppp_mppe ppp_generic option mac80211(O) ipt_REJECT cfg80211(O) cdc_ncm cdc_ether xt_time xt_tcpudp xt_tcpmss xt_statistic xt_state xt_recent xt_policy xt_nat xt_multiport xt_mark xt_mac xt_limit xt_length xt_hl xt_helper xt_hashlimit xt_esp xt_ecn xt_dscp xt_coova(O) xt_conntrack xt_connmark xt_connlimit xt_connbytes xt_comment xt_TCPMSS xt_REDIRECT xt_NFLOG xt_MASQUERADE xt_LOG xt_HL xt_FLOWOFFLOAD xt_DSCP xt_CT xt_CLASSIFY xfrm_interface wireguard usbnet usb_wwan ts_fsm ts_bm slhc sch_cake rfcomm pl2303 nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject nft_redir nft_quota nft_numgen nft_log nft_limit nft_hash nft_fwd_netdev nft_dup_netdev nft_ct nfnetlink_log nf_tables nf_reject_ipv4 nf_nat_tftp nf_nat_snmp_basic nf_nat_sip nf_nat_pptp nf_nat_irc nf_nat_h323 nf_nat_ftp nf_nat_amanda nf_log_syslog nf_flow_table nf_dup_netdev nf_conntrack_tftp nf_conntrack_snmp nf_conntrack_sip nf_conntrack_pptp
[ 4822.369765] nf_conntrack_netlink nf_conntrack_irc nf_conntrack_h323 nf_conntrack_ftp nf_conntrack_broadcast ts_kmp nf_conntrack_amanda nf_conncount libcrc32c libchacha20poly1305 iptable_raw iptable_nat iptable_mangle iptable_filter ipt_ah ipt_ECN ip6table_raw ip_tables hidp hci_uart ftdi_sio cypress_m8 curve25519_neon cp210x compat(O) ch343 ch341 cdc_wdm cdc_acm btusb btrtl btintel bnep bluetooth belkin_sa asn1_decoder ark3116 act_ipt pulse_counter(O) cypress_serial(O) usbserial sch_tbf sch_ingress sch_htb sch_hfsc em_u32 cls_u32 cls_route cls_matchall cls_fw cls_flow cls_basic act_skbedit act_mirred act_gact hid evdev input_core tlt_gpio(O) xt_set ip_set_list_set ip_set_hash_netportnet ip_set_hash_netport ip_set_hash_netnet ip_set_hash_netiface ip_set_hash_net ip_set_hash_mac ip_set_hash_ipportnet ip_set_hash_ipportip ip_set_hash_ipport ip_set_hash_ipmark ip_set_hash_ip ip_set_bitmap_port ip_set_bitmap_ipmac ip_set_bitmap_ip ip_set nfnetlink ip6table_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip6t_NPT
[ 4822.442516] ip6table_mangle ip6table_filter ip6_tables ip6t_REJECT x_tables nf_reject_ipv6 msdos ip6_gre ip_gre gre ifb l2tp_ip6 l2tp_ip l2tp_eth l2tp_netlink l2tp_core ipcomp6 xfrm6_tunnel esp6 ah6 xfrm4_tunnel ipcomp esp4 ah4 ip6_tunnel tunnel6 tunnel4 ip_tunnel vrf tun ovpn_dco_v2(O) udp_tunnel ip6_udp_tunnel xfrm_user xfrm_ipcomp af_key xfrm_algo vfat fat ntfs autofs4 nls_utf8 nls_iso8859_1 nls_cp437 ecdh_generic ecc algif_skcipher algif_rng algif_hash algif_aead af_alg echainiv cmac usb_storage leds_gpio xhci_plat_hcd xhci_pci xhci_hcd dwc3 dwc3_qcom uhci_hcd sd_mod scsi_mod scsi_common r2ec(O) gpio_button_hotplug(O) ext4 mbcache jbd2 exfat mii crc32c_generic
[ 4822.590589] CPU: 3 PID: 32533 Comm: kworker/3:0 Tainted: G O 6.6.126 #0
[ 4822.612759] Hardware name: Generic DT based system
[ 4822.620563] Workqueue: events_freezable ieee80211_restart_work [mac80211]
[ 4822.625436] unwind_backtrace from show_stack+0x10/0x14
[ 4822.632283] show_stack from dump_stack_lvl+0x40/0x4c
[ 4822.637314] dump_stack_lvl from __warn+0x98/0xc0
[ 4822.642523] __warn from warn_slowpath_fmt+0x10c/0x174
[ 4822.647211] warn_slowpath_fmt from ieee80211_reconfig+0xdb4/0x1008 [mac80211]
[ 4822.652327] ieee80211_reconfig [mac80211] from ieee80211_restart_work+0xd4/0x148 [mac80211]
[ 4822.659457] ieee80211_restart_work [mac80211] from process_scheduled_works+0x1e0/0x394
[ 4822.668050] process_scheduled_works from worker_thread+0x190/0x3dc
[ 4822.675771] worker_thread from kthread+0xe8/0x104
[ 4822.682019] kthread from ret_from_fork+0x14/0x28
[ 4822.686879] Exception stack(0xc71c1fb0 to 0xc71c1ff8)
[ 4822.691657] 1fa0: 00000000 00000000 00000000 00000000
[ 4822.696699] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 4822.704858] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000
[ 4822.713062] —[ end trace 0000000000000000 ]—
[ 4822.719477] wlan0-3: deauthenticating from by local choice (Reason: 3=DEAUTH_LEAVING)
[ 4822.724743] wlan0-3: HW problem - can not stop rx aggregation for tid 0
[ 4822.733479] wlan0-3: HW problem - can not stop rx aggregation for tid 4

4

I just confirmed the same crash occurs also when using mode “Client” (instead of Multi AP) to connect to an upstream 2.4Ghz WLAN.

5

Greetings,

For troubleshooting purposes, we will require more sensitive information from your end, such as the troubleshoot file, which may contain passwords, public IP addresses, serial numbers, and such. To avoid leaking this information, we have sent you a form to fill out, which you will receive in your e-mail inbox that you have registered your account with in the forums. In the Ticket ID field of the form, please enter the ID of this thread, which is 21370.

Thank you,
Martyna

6

I had the same issue: it appears you cannot have MultiAP and Clients on the same radio. In your case, deselect the 2.4 GHz radio for clients and it will run stable.

My use case:
I’m running failover on 5GHz with MultiAP as a client to my tethered iPhone connection, all clients are on 2.4GHz (had same issues as you when also enabling 5GHz access, so keep that off). The MultiAP is the highest priority (higher than the mobile SIM card connection). With this setup, I can simply switch on my iPhone tether an d then all traffic goes via my iPhone, instead of the RUTX50 mobile connection.
To me this is handy whenever the RUTX mobile connection has its usage limits or simply has a worse mobile connection than my iPhone…

Hope this helps.

7

Hello Martyna
I gave it attempt to fill the form today, but I cannot attach any files there.. I was hoping the form has multiple pages, but it finished once the first page is completed and submitted.
so sending you the troubleshoot file remains impossible.

Please let me know how this file should be transferred.

8

Tanks for sharing your expericence, but my case seems to differ in direction of that the client is not joined on the 2.4G radio but on 5G or even connected to the LAN port.

Turning off either of radios is not option, I have mixed set of devices to connect with and also upstream connectivity is need on both frequencies depending on the location.

The kernel module crash is clearly an indication there’s something broken in the code and requires a sustaineble fix rather than can configuration/behavior workaround.

regards

9

Hello @DaringOwl62,

Thank you for submitting the form!

We’ve emailed you instructions on how to download and send us your troubleshoot file. Please check your inbox and reply back whenever you’re ready.

Best regards,
Martyna