[Solved] AC86U - possible memory leaks. AiProtection(dcd) crashing is guilty

[dave14305]

Maybe ... any idea how to change this br0ixelserv-tls interface name? its mentioned in this file which created when installing diversion standard : /opt/etc/init.d/S80pixelserv-tls

I will try this:
1. ifconfig br0ixelserv-t 192.168.1.2 down
2. ifconfig br0:t 192.168.1.2 down
I will check if I see dcd crash and report back

Maybe @thelonelycoder can help ...

Is the name also truncated in ifconfig? If there’s s kernel limit of 15 chars then it’s not necessarily what I thought was happening in your log.

 

[Delusion]

Is the name also truncated in ifconfig? If there’s s kernel limit of 15 chars then it’s not necessarily what I thought was happening in your log.

Yes.. this name appears in ifconfig . Instead of editing the file , I removed the virtual device created by diversion for pixelserv-tls and created new br0:t device with the same ip (192.168.1.2) . This log is from running dcd with -l 8 option (dcd -i 3600 -p 43200 -b -l 8 -d /tmp/bwdpi/ ).

I will report if I see a crash ...

 

[RMerlin]

Are they (Asus & Trend Micro) aware of this issue? dcd crashes when pixelserv-tls installed

This has nothing to do with pixelserv. People reported the exact same issue on the Asuswrt original firmware forum, so I assume Asus has read about it already.

 

[Delusion]

This has nothing to do with pixelserv. People reported the exact same issue on the Asuswrt original firmware forum, so I assume Asus has read about it already.

Oh.. didn't know.. . However, for me and others who are running Diversion and Pixelserv , this crash happens 100% because of pixelsrv . Never ever had this crash without pixelserv installed . Its really easy to see . Once it crash (for those who installed diversion and pixelserv), the crash happens every 20 minutes. Remove pixelserv and the crash stop immediately .

And now I learned it happens due to creating virtual device on br0 interface (at least for us)

 

[dave14305]

Oh.. didn't know.. . However, for me and others who are running Diversion and Pixelserv , this crash happens 100% because of pixelsrv . Never ever had this crash without pixelserv installed . Its really easy to see . Once it crash (for those who installed diversion and pixelserv), the crash happens every 20 minutes. Remove pixelserv and the crash stop immediately .

And now I learned it happens due to creating virtual device on br0 interface (at least for us)

So did you learn anything more with the shorter interface name? Still crashing?

 

[Delusion]

So did you learn anything more with the shorter interface name? Still crashing?

Yes its crashing. If you create virtual interface which is what pixelserv-tls uses, you will get dcd crash.
Maybe RMerlin can forward this to Asus .

To reproduce the crash you don't need pixelserv . Just create virtual interface , not matter if its on eth0 or br0 or if the ip of the virtual interface inside ip pool range: (o=zero)

ifconfig br0:dave 192.168.1.23 up


this will create virtual interface with 192.168.1.23 ip, now you have to wait for the first dcd crash and then it will continue crashing every X minutes . You can try go to http://5ka.ru.com which will get blocked by AiProtection and dcd will start crashing.

To remove the interface :

ifconfig br0:dave 192.168.1.23 down

 

[lalala2]

Hi PeterV, thanks for the troubleshooting. It looks like finally there is a workaround for the issue that I reported last year which is still occurring. I will withdraw TrendMicro privacy settings to turn off AIProtection/AdaptiveQoS and see if the router can last more than a week.

https://www.snbforums.com/threads/asus-rt-ac86u-signature-updates-and-reboots.48694/#post-446698

 

[lalala2]

My router has lasted 10 days which is a new record! The amount of RAM used is still only 69%. It seems that performing the workaround stabilizes the router.

 

[Starrbuck]

Yes its crashing. If you create virtual interface which is what pixelserv-tls uses, you will get dcd crash.
Maybe RMerlin can forward this to Asus .

To reproduce the crash you don't need pixelserv . Just create virtual interface , not matter if its on eth0 or br0 or if the ip of the virtual interface inside ip pool range: (o=zero)

ifconfig br0:dave 192.168.1.23 up


this will create virtual interface with 192.168.1.23 ip, now you have to wait for the first dcd crash and then it will continue crashing every X minutes . You can try go to http://5ka.ru.com which will get blocked by AiProtection and dcd will start crashing.

To remove the interface :

ifconfig br0:dave 192.168.1.23 down

Wow, thanks for this! I uninstalled Diversion and pixelserv-tls and my RT-AC86U is no longer having DCD crashes.

 

[dave14305]

Does dcd crash if DNS Privacy (DoT) is enabled with the extra loopback interface lo:0 127.0.1.1?

 

[gattaca]

Hi PeterV, thanks for the troubleshooting. It looks like finally there is a workaround for the issue that I reported last year which is still occurring. I will withdraw TrendMicro privacy settings to turn off AIProtection/AdaptiveQoS and see if the router can last more than a week.

https://www.snbforums.com/threads/asus-rt-ac86u-signature-updates-and-reboots.48694/#post-446698

So do I read this correctly that Turning OFF TrendMicro's AIProtection/AdaptiveQoS stops the dcd traps which have plagued us for so long? If so, most excellent deductions. I hope this helps ASUS light a fire under TrendMicro to fix it pronto. Your post about just creating the interface makes me wonder though.. it might in rooted in ASUS's code and perhaps TrendMicro is doing something similar under the covers? IDK. THANKS! Peace.

 

[Starrbuck]

I have found if TrendMicro AIProtection is off and there is no virtual interface from any other process, there are no dcd errors.

 

[gattaca]

I have found if TrendMicro AIProtection is off and there is no virtual interface from any other process, there are no dcd errors.

So it could be rooted in ASUS's code... sweet. RMerlin, not that you have any sway, ASUS should give the finder a free router of his choosing.. and finally be able to recreate/fix this one! I think you made a lot of folks day! Peace.

 

[jksmurf]

Then I guess we'll have to wait for Trend Micro to fix it (that binary comes from them, I don't think Asus has access to its source code).

Not sure why it mostly affects the RT-AC86U, even the RT-AX88U (which has a very similar architecture) doesn't show any issue.

Apart from removing diversion and pixelserv and disabling the Trendmicro settings, was this ever fixed by ASUS please? Merlin 384.15 on both Main and Node.

6:23:10 kernel: x1 : 000000000007c66c x0 : 0000000000000000
Mar  8 06:36:42 kernel: dcd[8562]: unhandled level 3 translation fault (11) at 0x00000000, esr 0x92000007
Mar  8 06:36:42 kernel: pgd = ffffffc010f0a000
Mar  8 06:36:42 kernel: [00000000] *pgd=0000000010e12003, *pud=0000000010e12003, *pmd=000000001504a003, *pte=0000000000000000
Mar  8 06:36:42 kernel: CPU: 1 PID: 8562 Comm: dcd Tainted: P           O    4.1.27 #2
Mar  8 06:36:42 kernel: Hardware name: Broadcom-v8A (DT)
Mar  8 06:36:42 kernel: task: ffffffc01e002100 ti: ffffffc010eec000 task.ti: ffffffc010eec000
Mar  8 06:36:42 kernel: PC is at 0xf7408f44
Mar  8 06:36:42 kernel: LR is at 0x1dc74
Mar  8 06:36:42 kernel: pc : [<00000000f7408f44>] lr : [<000000000001dc74>] pstate: 600e0010
Mar  8 06:36:42 kernel: sp : 00000000fff7a0f8
Mar  8 06:36:42 kernel: x12: 000000000009ff08
Mar  8 06:36:42 kernel: x11: 00000000f66ff024 x10: 00000000000a02ac
Mar  8 06:36:42 kernel: x9 : 00000000f66ff6b8 x8 : 00000000000a0764
Mar  8 06:36:42 kernel: x7 : 00000000f66ff6f0 x6 : 00000000000a075e
Mar  8 06:36:42 kernel: x5 : 0000000000000000 x4 : 00000000f66ff69c
Mar  8 06:36:42 kernel: x3 : 0000000000000000 x2 : 00000000fff7a0d4
Mar  8 06:36:42 kernel: x1 : 000000000007c66c x0 : 0000000000000000
Mar  8 07:05:27 kernel: dcd[9819]: unhandled level 3 translation fault (11) at 0x00000000, esr 0x92000007
Mar  8 07:05:27 kernel: pgd = ffffffc0111da000
Mar  8 07:05:27 kernel: [00000000] *pgd=0000000014082003, *pud=0000000014082003, *pmd=000000000763b003, *pte=0000000000000000
Mar  8 07:05:27 kernel: CPU: 1 PID: 9819 Comm: dcd Tainted: P           O    4.1.27 #2
Mar  8 07:05:27 kernel: Hardware name: Broadcom-v8A (DT)
Mar  8 07:05:27 kernel: task: ffffffc01937a100 ti: ffffffc010eec000 task.ti: ffffffc010eec000
Mar  8 07:05:27 kernel: PC is at 0xf7395f44
Mar  8 07:05:27 kernel: LR is at 0x1dc74
Mar  8 07:05:27 kernel: pc : [<00000000f7395f44>] lr : [<000000000001dc74>] pstate: 600e0010
Mar  8 07:05:27 kernel: sp : 00000000ffb4bf38
Mar  8 07:05:27 kernel: x12: 000000000009ff08
Mar  8 07:05:27 kernel: x11: 00000000f66ff024 x10: 00000000000a02ac
Mar  8 07:05:27 kernel: x9 : 00000000f66ff6b8 x8 : 00000000000a0764
Mar  8 07:05:27 kernel: x7 : 00000000f66ff6f0 x6 : 00000000000a075e
Mar  8 07:05:27 kernel: x5 : 0000000000000000 x4 : 00000000f66ff69c
Mar  8 07:05:27 kernel: x3 : 0000000000000000 x2 : 00000000ffb4bf14
Mar  8 07:05:27 kernel: x1 : 000000000007c66c x0 : 0000000000000000
Mar  8 07:35:35 kernel: dcd[12716]: unhandled level 3 translation fault (11) at 0x00000000, esr 0x92000007
Mar  8 07:35:35 kernel: pgd = ffffffc010f2f000
Mar  8 07:35:35 kernel: [00000000] *pgd=0000000008300003, *pud=0000000008300003, *pmd=000000000763e003, *pte=0000000000000000
Mar  8 07:35:35 kernel: CPU: 1 PID: 12716 Comm: dcd Tainted: P           O    4.1.27 #2
Mar  8 07:35:35 kernel: Hardware name: Broadcom-v8A (DT)
Mar  8 07:35:35 kernel: task: ffffffc01710d4c0 ti: ffffffc010e64000 task.ti: ffffffc010e64000
Mar  8 07:35:35 kernel: PC is at 0xf6e7ef44
Mar  8 07:35:35 kernel: LR is at 0x1dc74
Mar  8 07:35:35 kernel: pc : [<00000000f6e7ef44>] lr : [<000000000001dc74>] pstate: 600e0010
Mar  8 07:35:35 kernel: sp : 00000000ffec6768
Mar  8 07:35:35 kernel: x12: 000000000009ff08
Mar  8 07:35:35 kernel: x11: 00000000f61ff024 x10: 00000000000a02ac
Mar  8 07:35:35 kernel: x9 : 00000000f61ff6b8 x8 : 00000000000a0764
Mar  8 07:35:35 kernel: x7 : 00000000f61ff6f0 x6 : 00000000000a075e
Mar  8 07:35:35 kernel: x5 : 0000000000000000 x4 : 00000000f61ff69c
Mar  8 07:35:35 kernel: x3 : 0000000000000000 x2 : 00000000ffec6744
Mar  8 07:35:35 kernel: x1 : 000000000007c66c x0 : 0000000000000000
Mar  8 07:44:40 kernel: dcd[15642]: unhandled level 3 translation fault (11) at 0x00000000, esr 0x92000007
Mar  8 07:44:40 kernel: pgd = ffffffc0153d4000
Mar  8 07:44:40 kernel: [00000000] *pgd=0000000009c63003, *pud=0000000009c63003, *pmd=0000000010ec4003, *pte=0000000000000000
Mar  8 07:44:40 kernel: CPU: 1 PID: 15642 Comm: dcd Tainted: P           O    4.1.27 #2
Mar  8 07:44:40 kernel: Hardware name: Broadcom-v8A (DT)
Mar  8 07:44:40 kernel: task: ffffffc019307540 ti: ffffffc010e30000 task.ti: ffffffc010e30000
Mar  8 07:44:40 kernel: PC is at 0xf70f6f44
Mar  8 07:44:40 kernel: LR is at 0x1dc74
Mar  8 07:44:40 kernel: pc : [<00000000f70f6f44>] lr : [<000000000001dc74>] pstate: 600e0010
Mar  8 07:44:40 kernel: sp : 00000000fff4d0e8
Mar  8 07:44:40 kernel: x12: 000000000009ff08
Mar  8 07:44:40 kernel: x11: 00000000f63ff024 x10: 00000000000a02ac
Mar  8 07:44:40 kernel: x9 : 00000000f63ff6b8 x8 : 00000000000a0764
Mar  8 07:44:40 kernel: x7 : 00000000f63ff6f0 x6 : 00000000000a075e
Mar  8 07:44:40 kernel: x5 : 0000000000000000 x4 : 00000000f63ff69c
Mar  8 07:44:40 kernel: x3 : 0000000000000000 x2 : 00000000fff4d0c4
Mar  8 07:44:40 kernel: x1 : 000000000007c66c x0 : 0000000000000000
Mar  8 07:56:50 wlceventd: WLCEVENTD wlceventd_proc_event(386): eth6: Deauth_ind 40:26:19:AF:8A:BD, status: 0, reason: Disassociated due to inactivity (4)
Mar  8 07:56:50 wlceventd: WLCEVENTD wlceventd_proc_event(401): eth6: Disassoc 40:26:19:AF:8A:BD, status: 0, reason: Disassociated because sending station is leaving (or has left) BSS (8)
Mar  8 07:58:42 wlceventd: WLCEVENTD wlceventd_proc_event(386): eth6: Deauth_ind 40:26:19:AF:8A:BD, status: 0, reason: Class 3 frame received from nonassociated station (7)
Mar  8 07:58:45 wlceventd: WLCEVENTD wlceventd_proc_event(420): eth6: Auth 40:26:19:AF:8A:BD, status: 0, reason: d11 RC reserved (0)
Mar  8 07:58:45 wlceventd: WLCEVENTD wlceventd_proc_event(449): eth6: Assoc 40:26:19:AF:8A:BD, status: 0, reason: d11 RC reserved (0)
Mar  8 08:00:33 kernel: dcd[17177]: unhandled level 3 translation fault (11) at 0x00000000, esr 0x92000007
Mar  8 08:00:33 kernel: pgd = ffffffc010cb3000
Mar  8 08:00:33 kernel: [00000000] *pgd=0000000019179003, *pud=0000000019179003, *pmd=0000000010ef9003, *pte=0000000000000000
Mar  8 08:00:33 kernel: CPU: 1 PID: 17177 Comm: dcd Tainted: P           O    4.1.27 #2
Mar  8 08:00:33 kernel: Hardware name: Broadcom-v8A (DT)
Mar  8 08:00:33 kernel: task: ffffffc0014c8180 ti: ffffffc010eec000 task.ti: ffffffc010eec000
Mar  8 08:00:33 kernel: PC is at 0xf6e4bf44
Mar  8 08:00:33 kernel: LR is at 0x1dc74
Mar  8 08:00:33 kernel: pc : [<00000000f6e4bf44>] lr : [<000000000001dc74>] pstate: 600e0010
Mar  8 08:00:33 kernel: sp : 00000000ffdef148
Mar  8 08:00:33 kernel: x12: 000000000009ff08
Mar  8 08:00:33 kernel: x11: 00000000f60ff024 x10: 00000000000a02ac
Mar  8 08:00:33 kernel: x9 : 00000000f60ff6b8 x8 : 00000000000a0764
Mar  8 08:00:33 kernel: x7 : 00000000f60ff6f0 x6 : 00000000000a075e
Mar  8 08:00:33 kernel: x5 : 0000000000000000 x4 : 00000000f60ff69c
Mar  8 08:00:33 kernel: x3 : 0000000000000000 x2 : 00000000ffdef124
Mar  8 08:00:33 kernel: x1 : 000000000007c66c x0 : 0000000000000000