I have a crash log when it crashed running 1.8.5.
PTP Clock: Using sclk reference at 600000000 Hz
bio: create slab <bio-0> at 0
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
Switching to clocksource OCTEON_CVMCOUNT
NET: Registered protocol family 2
TCP established hash table entries: 16384 (order: 6, 262144 bytes)
TCP bind hash table entries: 16384 (order: 6, 262144 bytes)
TCP: Hash tables configured (established 16384 bind 16384)
TCP: reno registered
UDP hash table entries: 1024 (order: 3, 32768 bytes)
UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes)
NET: Registered protocol family 1
octeon_pci_console: Console not created.
/proc/octeon_perf: Octeon performance counter interface loaded
HugeTLB registered 2 MB page size, pre-allocated 0 pages
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Registering unionfs 2.5egistered (default)
Serial: 8250/16550 driver, 6 ports, IRQ sharing disabled
1180000000800.serial: ttyS0 at MMIO 0x1180000000800 (irq = 34) is a OCTEON
console [ttyS0] enabled, bootconsole disabled
console [ttyS0] enabled, bootconsole disabled
1180000000c00.serial: ttyS1 at MMIO 0x1180000000c00 (irq = 35) is a OCTEON
loop: module loaded
ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
octeon-ehci 16f0000000000.ehci: Octeon EHCI
octeon-ehci 16f0000000000.ehci: new USB bus registered, assigned bus number 1
octeon-ehci 16f0000000000.ehci: irq 56, io mem 0x16f0000000000
octeon-ehci 16f0started, EHCI 1.00
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
octeon-ohci 16f0000000400.ohci: Octeon OHCI
octeon-ohci 16f0000000400.ohci: new USB bus registered, assigned bus number 2
octeon-ohci 16f0000000400.ohci: irq 56, io mem 0x16f0000000400
hub 2-0:1.0: USB hub found
hub 2-0:1.0: 2 ports detected
i2c-octeon 1180000001000.i2c: version 2.5
i2c-octeon 1180000001200.i2c: version 2.5
octeon_wdt: Initial granularity 5 Sec
TCP: cubic registered
NET: Registered protocol family 17
NET: Registered protocol family 15
Bootbus flash: Setting flash for 8MB flash at 0x1f400000
phys_mapped_flash: Found 1 x16 devices at 0x0 in 8-bit bank. Manufacturer ID 0x0
000c2 Chip ID 0x0000c9
Amd/Fujitsu Extended Query Table at 0x0040
Amd/Fujitsu Extended Query version 1.1.
phys_mapped_flash: Swapping erase regions for top-boot CFI table.
number of CFI chips: 1
3 cmdlinepart partitions found on MTD device phys_mapped_flash
Creating 3 MTD partitions on "phys_mapped_flash":
0x000000000000-0x0000000a0000 : "boot0"
0x0000000a0000-0x000000140000 : "boot1"
mmc0: BKOPS_EN bit is not set
0x000000140000-0x000000150000 : "eeprom"
mmc0: new high speed DDR MMC card at address 0001
Waiting 10sec before mounting root device...
mmcblk0: mmc0:0001 SEM04G 3.68 GiB
mmcblk0boot0: mmc0:0001 SEM04G partition 1 2.00 MiB
mmcblk0boot1: mmc0:0001 SEM04G partition 2 2.00 MiB
mmcblk0rpmb: mmc0:0001 SEM04G partition 3 2.00 MiB
mmcblk0: p1 p2
mmcblk0boot1: unknown partition table
mmcblk0boot0: unknown partition table
kjournald starting. Commit interval 3 seconds
EXT3-fs (mmcblk0p2): using internal journal
EXT3-fs (mmcblk0p2): recovery complete
EXT3-fs (mmcblk0p2): mounted filesystem with journal data mode
VFS: Mounted root (unionfs filesystem) on device 0:11.
Freeing unused kernel memory: 264K (ffffffffc05de000 - ffffffffc0620000)
Algorithmics/MIPS FPU Emulator v1.5
INIT: version 2.88 booting
INIT: Entering runlevel: 2
[....] Starting routing daemon: rib nsm ribd. ok
[....] Starting EdgeOS router: migrate rl-system configure. ok
Welcome to EdgeOS AgencyCore ttyS0
By logging in, accessing, or using the Ubiquiti product, you
acknowledge that you have read and understood the Ubiquiti
License Agreement (available in the Web UI at, by default,
http://192.168.1.1) and agree to be bound by its terms.
AgencyCore login: Kernel unaligned instruction access[#1]:
CPU: 1 PID: 3797 Comm: lighttpd Tainted: P O 3.10.20-UBNT #1
task: 80000000896c1500 ti: 800000008dcb4000 task.ti: 800000008dcb4000
$ 0 : 0000000000000000 0000000010109ce1 ffffffffc04e0d20 ffffffffc03a2f40
$ 4 : 800000008a4dad00 000000000000467f 000000007f8387a0 0000000000000050
$ 8 : 0000000000000003 0000000000000000 0000000000000000 0000000000000000
$12 : 0000000000000000 ffffffff80080008 ffffffffc01db3c0 800000008dd290b8
$16 : 800000008a4dad00 000000000000467f 800000008df83880 000000007f8387a0
$20 : 00c0000000000000 000000000000467f 800000008df83880 800000008a4dad30
$24 : 0000000000008000 000000000000c1ff
$28 : 800000008dcb4000 800000008dcb7d10 000000000000c000 ffffffffc03a2f90
Hi : 0000000000000001
Lo : 56031b748b800000
epc : 00c0000000000000 0xc0000000000000
Tainted: P O
ra : ffffffffc03a2f90 compat_sock_ioctl+0x50/0x12b0
Status: 10109ce3 KX SX UX KERNEL EXL IE
Cause : 00800010
BadVA : 00c0000000000000
PrId : 000d9301 (Cavium Octeon II)
Modules linked in: authenc xfrm6_mode_tunnel xfrm4_mode_tunnel sha1_generic xfrm
_user xfrm4_tunnel tunnel4 ipcomp xfrm_ipcomp esp4 ah4 tun ipt_MASQUERADE xt_nat
xt_LOG xt_tcpudp xt_set xt_recent xt_conntrack xt_comment ip_set_bitmap_port ip
6table_mangle ip6table_filter ip6table_raw ip6_tables iptable_nat nf_conntrack_i
pv4 nf_defrag_ipv4 nf_nat_ipv4 iptable_mangle xt_CT iptable_raw nf_nat_pptp nf_c
onntrack_pptp nf_conntrack_proto_gre nf_nat_h323 nf_conntrack_h323 nf_nat_sip nf
_conntrack_sip nf_nat_proto_gre nf_nat_tftp nf_nat_ftp nf_nat nf_conntrack_tftp
nf_conntrack_ftp nf_conntrack ip_set_hash_net ip_set nfnetlink iptable_filter ip
_tables x_tables ipv6 imq cavium_ip_offload(PO) ubnt_nf_app(PO) tdts(PO) octeon_
rng rng_core octeon_ethernet mdio_octeon of_mdio ethernet_mem octeon_common ubnt
_platform(PO) libphy [last unloaded: cvm_ipsec_kame]
Process lighttpd (pid: 3797, threadinfo=800000008dcb4000, task=80000000896c1500,
tls=0000000076ff66a0)
Stack : 0000000100000000 800000008dd29080 0000000000000000 800000008dd290e0
00000000000f423f 0000000000000001 000000007f8387a0 0000000000000000
000000000000000a 0000000000000001 0000000000440000 000000000000467f
800000008df83880 800000008a4dad30 000000000000c000 ffffffffc01db4c0
0000000031b8e5eb 000002ab51c001eb 0000000000000b76 0000000031b8e5eb
80000000898b9280 0000000000497298 0000000000000401 00000000000003e8
0000000000000000 0000000000000000 000000000049e998 0000000000425758
0000000000425744 ffffffffc01d0074 0000000000541290 000000000043bdf8
0000000000440000 0000000000000001 0000000000440000 0000000000425850
0000000000000000 ffffffffffffffff 0000000076f64078 ffffffffc008c4a0
...
Call Trace:
[<ffffffffc01db4c0>] compat_sys_ioctl+0x100/0x1a90
[<ffffffffc01d0074>] SyS_epoll_wait+0xfc/0x120
[<ffffffffc008c4a0>] handle_sys+0x120/0x144
Code:
*** NMI Watchdog interrupt on Core 0x01 ***
$0 0x0000000000000000 at 0x0000000010109ce0
v0 0x0000000000010000 v1 0x0000000000000000
a0 0xffffffffc0740058 a1 0x0000000000000001
a2 0x000000000000000f a3 0x0000000000000000
a4 0x0000000000000004 a5 0x000000000000000b
a6 0x0000000000000010 a7 0xffffffffc0750000
t0 0x0000000040808c10 t1 0x0000000000000010
t2 0x0000000000000000 t3 0x0000000000000000
s0 0x800000008dcb7720 s1 0xffffffffc0740000
s2 0xffffffffc052d098 s3 0x000000000000000b
s4 0x0000000000000000 s5 0x0000000000000001
s6 0x0000000000000022 s7 0x800000008a4dad30
t8 0xffffffff8a160000 t9 0x0000000000000008
k0 0x0000000000000000 k1 0x0000000000000000
gp 0x800000008dcb4000 sp 0x800000008dcb7690
s8 0x000000000000c000 ra 0xffffffffc007ecfc
err_epc 0xffffffffc049f37c epc 0xffffffffc0080980
status 0x0000000010589ce4 cause 0x0000000040808c10
sum0 0x0004000100000000 en0 0x0000000100000000
*** Chip soft reset soon ***
Jumping to start of image at address 0xbfca0000