did you done something else before the power cycle?
do you have a backup and can reinstall it?
no i just pulled the cable. i had openwrt in one of the partitions but i was using the official fw from the other partition because i was testing the wifi
I just got one of these and was thinking about converting it to official openwrt.
The last few posts are a little confusing because it sounds like this is not going to be a simple flashing yet there is a page for the device.
https://openwrt.org/toh/hwdata/acer/acer_predator_w6
Am I missing a thread or something and this can be done now?
the more reason to have a device page, serial is never "easy"...
Guess I'll use it with factory firmware until I see some activity in this page then. Maybe I can still set it up as a dumb AP in the meantime. I've not looked yet.
There's no guarantee the flashing will ever move from serial to browser.
Yes, I understand that. Serial is not so bad, other than the mentions that it might have to be re-done now and then. Not good if you're remote or not there but need some wifi things communicating after a power failure or something.
Installation as per Wiki (also added OEM and OpenWrt stable/snapshot bootlogs there) worked smoothly for me. However, when running either latest stable or snapshot I am consistently/reproducible seeing the following:
I have 3 separate SSIDs one for each frequency, 2.4 GHz, 5 GHz and 6 GHz. If I connect to one after the other it consistently crashes/reboots at the 3rd connection attempt regardless in which order I do those connections.
[ 367.491381] Unable to handle kernel read from unreadable memory at virtual address 0000000000000024
[ 367.500422] Mem abort info:
[ 367.503212] ESR = 0x0000000096000005
[ 367.506943] EC = 0x25: DABT (current EL), IL = 32 bits
[ 367.512242] SET = 0, FnV = 0
[ 367.515280] EA = 0, S1PTW = 0
[ 367.518405] FSC = 0x05: level 1 translation fault
[ 367.523268] Data abort info:
[ 367.526132] ISV = 0, ISS = 0x00000005
[ 367.529949] CM = 0, WnR = 0
[ 367.532906] user pgtable: 4k pages, 39-bit VAs, pgdp=0000000044bbc000
[ 367.539326] [0000000000000024] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000
[ 367.548007] Internal error: Oops: 0000000096000005 [#1] SMP
[ 367.553560] Modules linked in: pppoe ppp_async nft_fib_inet nf_flow_table_ipv6 nf_flow_table_ipv4 nf_flow_table_inet pppox ppp_generic nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject nft_redir nft_quota nft_objref nft_numgen nft_nat nft_masq nft_log nft_limit nft_hash nft_flow_offload nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_ct nft_counter nft_chain_nat nf_tables nf_nat nf_flow_table nf_conntrack mt7915e mt76_connac_lib mt76 mac80211 cfg80211 slhc nfnetlink nf_reject_ipv6 nf_reject_ipv4 nf_log_syslog nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c compat crypto_safexcel sha1_generic seqiv md5 des_generic libdes authencesn authenc leds_gpio xhci_plat_hcd xhci_pci xhci_mtk_hcd xhci_hcd gpio_button_hotplug usbcore usb_common aquantia crc_ccitt
[ 367.619093] CPU: 0 PID: 1625 Comm: hostapd Not tainted 5.15.150 #0
[ 367.625254] Hardware name: Acer Predator W6 (DT)
[ 367.629852] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 367.636793] pc : 0xffffffc000a0aee4 [mt76@00000000eb01ad90+0xf000]
[ 367.642960] lr : 0xffffffc000a0aec4 [mt76@00000000eb01ad90+0xf000]
[ 367.649120] sp : ffffffc00a31b700
[ 367.652417] x29: ffffffc00a31b700 x28: ffffff8000bc8000 x27: ffffffc00a31bdd0
[ 367.659533] x26: ffffff80000ad080 x25: ffffffc008b54440 x24: 0000000000000001
[ 367.666647] x23: ffffffc000a0b184 x22: 0000000000000000 x21: ffffff800569acc8
[ 367.673762] x20: ffffffc00a31b748 x19: ffffff8004cd2020 x18: 0000000000000000
[ 367.680876] x17: 0000000000001020 x16: ffffffc008e45000 x15: 0000000000000810
[ 367.687991] x14: ffffff800569ae28 x13: ffffff800569ae28 x12: 0000000000000000
[ 367.695106] x11: 0000000000000000 x10: ffffff800569ae30 x9 : ffffff800569ae28
[ 367.702221] x8 : 0000000000000000 x7 : ffffff8004cd6020 x6 : 0000000000000000
[ 367.709337] x5 : 0000000000000031 x4 : 0000000000000000 x3 : 0000000000000001
[ 367.716452] x2 : 0000000000000000 x1 : ffffff8000bc8000 x0 : 0000000000000024
[ 367.723567] Call trace:
[ 367.725999] 0xffffffc000a0aee4 [mt76@00000000eb01ad90+0xf000]
[ 367.731813] 0xffffffc000a0b184 [mt76@00000000eb01ad90+0xf000]
[ 367.737627] 0xffffffc000a0b25c [mt76@00000000eb01ad90+0xf000]
[ 367.743441] 0xffffffc000a2b844 [mt7915e@00000000c2ce2300+0x21000]
[ 367.749601] 0xffffffc000983dd4 [mac80211@00000000fa683f50+0x83000]
[ 367.755848] 0xffffffc0009883ac [mac80211@00000000fa683f50+0x83000]
[ 367.762095] 0xffffffc000989654 [mac80211@00000000fa683f50+0x83000]
[ 367.768342] 0xffffffc0009899cc [mac80211@00000000fa683f50+0x83000]
[ 367.774589] 0xffffffc0009a1418 [mac80211@00000000fa683f50+0x83000]
[ 367.780836] 0xffffffc00094b964 [cfg80211@000000005b499a6c+0x43000]
[ 367.787084] 0xffffffc0086dde34
[ 367.790209] 0xffffffc0086de2c0
[ 367.793334] 0xffffffc0086dcfa8
[ 367.796460] 0xffffffc0086dd784
[ 367.799585] 0xffffffc0086dc764
[ 367.802710] 0xffffffc0086dc9fc
[ 367.805835] 0xffffffc00863f740
[ 367.808960] 0xffffffc008641f50
[ 367.812085] 0xffffffc008642084
[ 367.815210] 0xffffffc008642100
[ 367.818335] 0xffffffc00801f4ac
[ 367.821460] 0xffffffc00801f580
[ 367.824586] 0xffffffc0088343c8
[ 367.827710] 0xffffffc008835070
[ 367.830835] 0xffffffc0080115cc
[ 367.833962] Code: d2800002 910092c0 52800023 f9800011 (885f7c01)
[ 367.840034] ---[ end trace 810de6740d06b309 ]---
[ 367.850548] Kernel panic - not syncing: Oops: Fatal exception in interrupt
[ 367.857402] SMP: stopping secondary CPUs
[ 367.861310] Kernel Offset: disabled
[ 367.864780] CPU features: 0x0,00000000,20000802
[ 367.869294] Memory Limit: none
[ 367.877729] Rebooting in 3 seconds..
My Netgear WAX220, albeit only with 2.4 GHz and 5 GHz radios but running similar Mediatek/Filogic chipset, runs stable with more than 2 months of uptime. And my Verizon CR1000A, albeit with Qualcomm chipset, with the exact same Wi-Fi configuration also runs stable in the exact same use case.
Has anybody else experienced such instability issues?
Anyway, as the Acer Predator Connect W6 can be had for as little as 99 bucks here in Switzerland I will just get another one to rule out any kind of hardware issue. Thanks!
BTW: That's the exact same crash on snapshot.
[ 264.695939] Unable to handle kernel read from unreadable memory at virtual address 0000000000000024
[ 264.704978] Mem abort info:
[ 264.707766] ESR = 0x0000000096000005
[ 264.711499] EC = 0x25: DABT (current EL), IL = 32 bits
[ 264.716797] SET = 0, FnV = 0
[ 264.719836] EA = 0, S1PTW = 0
[ 264.722961] FSC = 0x05: level 1 translation fault
[ 264.727824] Data abort info:
[ 264.730688] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
[ 264.736162] CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[ 264.741194] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[ 264.746491] user pgtable: 4k pages, 39-bit VAs, pgdp=0000000046167000
[ 264.752913] [0000000000000024] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000
[ 264.761597] Internal error: Oops: 0000000096000005 [#1] SMP
[ 264.767149] Modules linked in: pppoe ppp_async nft_fib_inet nf_flow_table_inet pppox ppp_generic nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject nft_redir nft_quota nft_numgen nft_nat nft_masq nft_log nft_limit nft_hash nft_flow_offload nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_ct nft_chain_nat nf_tables nf_nat nf_flow_table nf_conntrack mt7915e(O) mt76_connac_lib(O) mt76(O) mac80211(O) cfg80211(O) slhc nfnetlink nf_reject_ipv6 nf_reject_ipv4 nf_log_syslog nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c compat(O) crypto_safexcel sha512_arm64 sha1_ce sha1_generic seqiv md5 geniv des_generic libdes authencesn authenc leds_gpio xhci_plat_hcd xhci_pci xhci_mtk_hcd xhci_hcd gpio_button_hotplug(O) usbcore usb_common aquantia
[ 264.830702] CPU: 2 PID: 1776 Comm: hostapd Tainted: G O 6.6.32 #0
[ 264.838163] Hardware name: Acer Predator W6 (DT)
[ 264.842761] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 264.849701] pc : mt76_wcid_cleanup+0x84/0x208 [mt76]
[ 264.854669] lr : mt76_wcid_cleanup+0x64/0x208 [mt76]
[ 264.859625] sp : ffffffc0825cb6c0
[ 264.862923] x29: ffffffc0825cb6c0 x28: ffffff8000e93980 x27: ffffffc0825cbdc8
[ 264.870039] x26: 0000000000000004 x25: ffffffc078e7a000 x24: 0000000000000001
[ 264.877154] x23: ffffffc078f35d3c x22: 0000000000000000 x21: ffffff8004d1ece8
[ 264.884270] x20: ffffffc0825cb708 x19: ffffff8004112000 x18: 00000000ffffffff
[ 264.891385] x17: 0000000000000028 x16: 0000000000000000 x15: 00000000000024e0
[ 264.898502] x14: ffffff8004d1ee50 x13: ffffff8004d1ee50 x12: 0000000000000000
[ 264.905618] x11: 0000000000000040 x10: 0000000000000000 x9 : ffffff8004d1ee50
[ 264.912734] x8 : 0000000000000000 x7 : 0000030000000000 x6 : 0000000000000000
[ 264.919849] x5 : ffffffc078f878d8 x4 : 0000000000000000 x3 : 0000000000000001
[ 264.926964] x2 : 0000000000000000 x1 : ffffff8000e93980 x0 : 0000000000000024
[ 264.934080] Call trace:
[ 264.936511] mt76_wcid_cleanup+0x84/0x208 [mt76]
[ 264.941120] __mt76_sta_remove+0x70/0xb8 [mt76]
[ 264.945642] mt76_sta_state+0x8c/0x1a0 [mt76]
[ 264.949990] mt7915_eeprom_get_power_delta+0x1400/0x2348 [mt7915e]
[ 264.956162] drv_sta_state+0x250/0x2f4 [mac80211]
[ 264.960883] ieee80211_find_sta_by_link_addrs+0xbb8/0x1684 [mac80211]
[ 264.967325] sta_set_sinfo+0xbf0/0xd14 [mac80211]
[ 264.972033] sta_info_destroy_addr_bss+0x50/0x70 [mac80211]
[ 264.977607] ieee80211_channel_switch_disconnect+0x1a3c/0x1d18 [mac80211]
[ 264.984396] cfg80211_check_station_change+0x1148/0x32b4 [cfg80211]
[ 264.990661] genl_family_rcv_msg_doit+0xa8/0x108
[ 264.995265] genl_rcv_msg+0x1b0/0x244
[ 264.998912] netlink_rcv_skb+0x5c/0x128
[ 265.002735] genl_rcv+0x34/0x48
[ 265.005861] netlink_unicast+0x1e0/0x2c8
[ 265.009769] netlink_sendmsg+0x198/0x3c8
[ 265.013677] ____sys_sendmsg+0x1c8/0x278
[ 265.017587] ___sys_sendmsg+0x7c/0xc0
[ 265.021234] __sys_sendmsg+0x44/0x98
[ 265.024794] __arm64_sys_sendmsg+0x20/0x28
[ 265.028874] invoke_syscall.constprop.0+0x4c/0xe0
[ 265.033563] do_el0_svc+0x3c/0xb8
[ 265.036862] el0_svc+0x18/0x4c
[ 265.039905] el0t_64_sync_handler+0x118/0x124
[ 265.044246] el0t_64_sync+0x150/0x154
[ 265.047896] Code: d2800002 910092c0 52800023 f9800011 (885f7c01)
[ 265.053968] ---[ end trace 0000000000000000 ]---
[ 265.064265] pstore: backend (ramoops) writing error (-28)
[ 265.069648] Kernel panic - not syncing: Oops: Fatal exception in interrupt
[ 265.076499] SMP: stopping secondary CPUs
[ 265.080406] Kernel Offset: disabled
[ 265.083878] CPU features: 0x0,00000000,00000000,1000400b
[ 265.089172] Memory Limit: none
[ 265.097791] Rebooting in 3 seconds..
Connect to the serial console, interrupt the autoboot process by pressing '0' twice when prompted
Sorry for the noob question, but why I am not being prompted? I was trying both minicom and picocom.
I can see the output, but cant stop boot.
Output:
MMC: mmc@11230000: 0
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[ 0.000000] Linux version 5.4.225 (jenkins@jenkins) (gcc version 8.4.0 (OpenWrt GCC 8.4.0 r0-607ce83e2)) #0 SM4
[ 0.000000] Machine model: MediaTek MT7986a RFB
[ 0.000000] earlycon: uart8250 at MMIO32 0x0000000011002000 (options '')
[ 0.000000] printk: bootconsole [uart8250] enabled
And thats it
1 Like
If you've come that far, you've already missed the boot loader.
U-Boot 2023.04 (Jan 15 2024 - 14:30:51 +0800), Build: jenkins-YX6ES_mesh-187
CPU: MediaTek MT7986
Model: mt7986-rfb
(mediatek,mt7986-emmc-rfb)
DRAM: 1 GiB
Core: 70 devices, 20 uclasses, devicetree: separate
MMC: mmc@11230000: 0
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[ 0.000000] Linux version 5.4.225 (jenkins@jenkins) (gcc version 8.4.0 (Open4
[ 0.000000] Machine model: MediaTek MT7986a RFB
[ 0.000000] earlycon: uart8250 at MMIO32 0x0000000011002000 (options '')
[ 0.000000] printk: bootconsole [uart8250] enabled
F0: 102B 0000
FA: 1040 0000
FA: 1040 0000 [0200]
F9: 103F 0000
F3: 1006 0033 [0200]
F3: 4001 00E0 [0200]
F3: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 2400 0041 [0000]
G0: 1190 0000
EC: 0000 0000 [2000]
T0: 0000 026F [010F]
Jump to BL
U-Boot 2023.04 (Jan 15 2024 - 14:30:51 +0800), Build: jenkins-YX6ES_mesh-187
CPU: MediaTek MT7986
Model: mt7986-rfb
(mediatek,mt7986-emmc-rfb)
DRAM: 1 GiB
Core: 70 devices, 20 uclasses, devicetree: separate
MMC: mmc@11230000: 0
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[ 0.000000] Linux version 5.4.225 (jenkins@jenkins) (gcc version 8.4.0 (Open4
[ 0.000000] Machine model: MediaTek MT7986a RFB
[ 0.000000] earlycon: uart8250 at MMIO32 0x0000000011002000 (options '')
[ 0.000000] printk: bootconsole [uart8250] enabled
I am not sure how that should work, but I am trying to type '0' 2 times right after pluging in. Nothing being typed in the minicoom/picocom and the boot process continues. Also nothing being prompted to me as well...
Your output looks rather truncated around the initial bootloader part. It actually displays kinda a bootmenu which likely requires some special terminal functionality (e.g. VT100 escape sequences?) to render properly. Anyway, that is what it should look like:
*** U-Boot Boot Menu ***
Press UP/DOWN to move, ENTER to select, ESC/CTRL+C to quit
1. Startup system (Default)
2. Upgrade firmware
3. Upgrade ATF BL2
4. Upgrade ATF FIP
5. Upgrade eMMC partition table
6. Upgrade single image
7. Load image
0. U-Boot console
Hit any key to stop autoboot: 4
Vs. on mine:
U-Boot 2022.07-rc3 (Jan 12 2023 - 14:03:18 +0800), Build: jenkins-YX6_MT7986-AX7800-367
So yours is also running a much later U-Boot version potentially even on different hardware? Who knows whether or not the same procedure will work in your case...
3 Likes
Great. That is my luck 
Yes, this is definitely Predator Connect w6.
Firmware version: w6_2.15.402115
Okay, I actually never even run mine with the vendor firmware apart from having it boot once to capture the OEM boot log 
So I don't even know what exact version mine was running 
BTW: Here one may find the change log of the vendor firmware:
Thank you.
There is nothing specific about security patches in the changelog... But nevertheless looks like the uboot access is blocked on that firmware.
I re-soldered second time, just to be sure that there is no issue with wires. I have no much experience with uboot but it looks blocked to me. I tried 2 different UART dongles and several terminals.
If someone has any idea what I can try next, please let me know.
Thank you in advance!
1 Like
Hello friend, can you upload backup of mmcblk0p3 factoy partition? I have a MT7986 AX7800 router with the same specifications, but the wireless cannot work properly, I need your help. If you can provide, thank you very much
Maybe someone knows if it is possible to do something like this on the ofw?
nvram set uart_en=1
nvram set boot_wait=on
nvram commit
1 Like
Anyone asked Acer to provide the Openwrt SDK they use to build the Stock firmware:
Or a recovery image seeing as:
The Predator Connect W6 router uses OpenWRT because it provides better security than DD-WRT.