mt76 icon indicating copy to clipboard operation
mt76 copied to clipboard

MT7981/MT7975 AX STA doesn't receive messages from AP after sometime

Open trunneml opened this issue 11 months ago • 25 comments

Describe the bug

On my Banana Pi R3 running 23.05.2 my two iPhones are loosing network access after some time. This occurs multiple times on a day, when the phone is in standby. They are the only AX clients in my wifi. All other clients/STA are AC and working fine.

The wifi the connection is shown on the router and the phone and signal is still good. But the phone can't access any website or luci (100% package loose) and is not pingable. Turning Wifi off and on helps and it is working again for some hours.

I tried

option dtim_period '3'
option wpa_group_rekey '86400'
option disassoc_low_ack '0'

But it didn't help. Syslog doesn't show anything special. See: https://github.com/openwrt/openwrt/issues/14824#issuecomment-2003037670

When that issue occurs, the iPhone with the connection problem no longer has HE-MCS and HE-NSS attributes in LUCI.

grafik

Running tcpdump when that error occurs shows that the AP still receives packages from the iPhone and answers them (for examle DNS Request) but it seems that the iPhone doesn't receives them:

3:22:17.430825 IP (tos 0x0, ttl 64, id 55241, offset 0, flags [none], proto UDP (17), length 57)
    192.168.1.70.63557 > 192.168.1.1.53: 19527+ HTTPS? openwrt.org. (29)
13:22:17.431386 IP (tos 0x0, ttl 64, id 18739, offset 0, flags [DF], proto UDP (17), length 124)
    192.168.1.1.53 > 192.168.1.70.63557: 19527 0/1/0 (96)
13:22:17.433705 IP (tos 0x0, ttl 64, id 29105, offset 0, flags [none], proto UDP (17), length 57)
    192.168.1.70.53183 > 192.168.1.1.53: 33776+ AAAA? openwrt.org. (29)
13:22:17.433705 IP (tos 0x0, ttl 64, id 54214, offset 0, flags [none], proto UDP (17), length 57)
    192.168.1.70.63373 > 192.168.1.1.53: 51319+ A? openwrt.org. (29)
13:22:17.434177 IP (tos 0x0, ttl 64, id 18740, offset 0, flags [DF], proto UDP (17), length 85)
    192.168.1.1.53 > 192.168.1.70.53183: 33776 1/0/0 openwrt.org. AAAA 2a03:b0c0:3:d0::1a51:c001 (57)
13:22:17.434232 IP (tos 0x0, ttl 64, id 18741, offset 0, flags [DF], proto UDP (17), length 73)
    192.168.1.1.53 > 192.168.1.70.63373: 51319 1/0/0 openwrt.org. A 64.226.122.113 (45)
13:22:17.494128 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2003:c3:b732:32f1:b894:735d:7743:5a2d > ff02::1:ff00:43a: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2003:c3:b732:32f1::43a
	  source link-address option (1), length 8 (1): b0:8c:75:ec:15:e7
13:22:17.494139 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2003:c3:b732:32f1:b894:735d:7743:5a2d > ff02::1:ff00:43a: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2003:c3:b732:32f1::43a
	  source link-address option (1), length 8 (1): b0:8c:75:ec:15:e7
13:22:17.494129 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fd6e:281:90d1:0:8b3:8f5:ab9:c10a > ff02::1:ff74:91bf: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fd6e:281:90d1:0:eb:c855:3d74:91bf
	  source link-address option (1), length 8 (1): b0:8c:75:ec:15:e7
13:22:17.494204 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fd6e:281:90d1:0:8b3:8f5:ab9:c10a > ff02::1:ff74:91bf: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fd6e:281:90d1:0:eb:c855:3d74:91bf
	  source link-address option (1), length 8 (1): b0:8c:75:ec:15:e7
13:22:17.494261 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2003:c3:b732:32f1:b894:735d:7743:5a2d > ff02::1:ff73:adb9: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2003:c3:b732:32f1:1850:2bb1:c973:adb9
	  source link-address option (1), length 8 (1): b0:8c:75:ec:15:e7
13:22:17.494267 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2003:c3:b732:32f1:b894:735d:7743:5a2d > ff02::1:ff73:adb9: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has 2003:c3:b732:32f1:1850:2bb1:c973:adb9
	  source link-address option (1), length 8 (1): b0:8c:75:ec:15:e7
13:22:17.495423 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::1c31:a960:b2f3:52d9 > ff02::1:ff75:3675: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::108d:a1ca:fe75:3675
	  source link-address option (1), length 8 (1): b0:8c:75:ec:15:e7
13:22:17.495427 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::1c31:a960:b2f3:52d9 > ff02::1:ff75:3675: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::108d:a1ca:fe75:3675
	  source link-address option (1), length 8 (1): b0:8c:75:ec:15:e7
13:22:17.740743 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2003:c3:b732:32f1:5c58:4eb9:8503:f8cf > 2003:c3:b732:32f1:b894:735d:7743:5a2d: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2003:c3:b732:32f1::43a, Flags [solicited, override]
	  destination link-address option (2), length 8 (1): a4:83:e7:d8:19:73
13:22:17.740756 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2003:c3:b732:32f1:5c58:4eb9:8503:f8cf > 2003:c3:b732:32f1:b894:735d:7743:5a2d: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2003:c3:b732:32f1::43a, Flags [solicited, override]
	  destination link-address option (2), length 8 (1): a4:83:e7:d8:19:73
13:22:17.740743 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fd6e:281:90d1:0:eb:c855:3d74:91bf > fd6e:281:90d1:0:8b3:8f5:ab9:c10a: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is fd6e:281:90d1:0:eb:c855:3d74:91bf, Flags [solicited, override]
	  destination link-address option (2), length 8 (1): a4:83:e7:d8:19:73
13:22:17.740769 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fd6e:281:90d1:0:eb:c855:3d74:91bf > fd6e:281:90d1:0:8b3:8f5:ab9:c10a: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is fd6e:281:90d1:0:eb:c855:3d74:91bf, Flags [solicited, override]
	  destination link-address option (2), length 8 (1): a4:83:e7:d8:19:73
13:22:17.740743 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2003:c3:b732:32f1:5c58:4eb9:8503:f8cf > 2003:c3:b732:32f1:b894:735d:7743:5a2d: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2003:c3:b732:32f1:1850:2bb1:c973:adb9, Flags [solicited, override]
	  destination link-address option (2), length 8 (1): a4:83:e7:d8:19:73
13:22:17.740774 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) 2003:c3:b732:32f1:5c58:4eb9:8503:f8cf > 2003:c3:b732:32f1:b894:735d:7743:5a2d: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is 2003:c3:b732:32f1:1850:2bb1:c973:adb9, Flags [solicited, override]
	  destination link-address option (2), length 8 (1): a4:83:e7:d8:19:73
13:22:17.741164 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::108d:a1ca:fe75:3675 > fe80::1c31:a960:b2f3:52d9: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is fe80::108d:a1ca:fe75:3675, Flags [solicited, override]
	  destination link-address option (2), length 8 (1): a4:83:e7:d8:19:73
13:22:17.741167 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::108d:a1ca:fe75:3675 > fe80::1c31:a960:b2f3:52d9: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is fe80::108d:a1ca:fe75:3675, Flags [solicited, override]
	  destination link-address option (2), length 8 (1): a4:83:e7:d8:19:73

Maybe this bug is related to: https://github.com/openwrt/mt76/issues/792

OpenWrt version

r23630-842932a63d and r23806-03a3a729ec

OpenWrt release

23.05.2 and 23.05-SNAPSHOT

OpenWrt target/subtarget

mediatek/filogic

Device

Bananapi BPI-R3 (MT7981/MT7975P)

trunneml avatar Mar 21 '24 18:03 trunneml

There is comment that some corrupted Ethernet Frames could freeze RX DMA on that chip: https://github.com/openwrt/openwrt/issues/13198#issuecomment-1777269938

trunneml avatar Mar 21 '24 18:03 trunneml

In the same discussion - other suspected trigger is when other STA disconnects and iphone(s) freeze.

brada4 avatar Mar 21 '24 19:03 brada4

In the same discussion - other suspected trigger is when other STA disconnects and iphone(s) freeze.

No other STA disconnected or joined, when that error occurred the last two times.

trunneml avatar Mar 21 '24 19:03 trunneml

Short feedback. My Banana Pi R3 is running 5G in AC mode now for about 4 days and no disconnection of my iphones. I think the bug is somewhere in the AX Mode. Can someone tell me how to debug that stuff?

trunneml avatar Mar 25 '24 07:03 trunneml

Are you able to reproduce this issue on OpenWrt main SNAPSHOT?

mrkiko avatar Apr 12 '24 22:04 mrkiko