Uqmi LTE module fail on TL-MR6400 v4

Hi, I installed OpenWRT successfully on the TL-MR6400 v4, but the LTE module has a problem. I added an interface with QMI Cellular and installed https://github.com/mrhaav/openwrt uqmi replacement.

My log says:


root@OpenWrt:~# logread | grep LTE
Mon Nov 21 22:18:37 2022 daemon.notice netifd: Interface 'LTE' is setting up now
Mon Nov 21 22:18:50 2022 daemon.notice netifd: LTE (2075): Waiting for modem to initiate
Mon Nov 21 22:18:53 2022 daemon.notice netifd: LTE (2075): PINcode disabled
Mon Nov 21 22:18:53 2022 daemon.notice netifd: LTE (2075): Data format set to raw-ip
Mon Nov 21 22:18:53 2022 daemon.notice netifd: LTE (2075): Default profile: 1
Mon Nov 21 22:18:53 2022 daemon.notice netifd: LTE (2075): Airplane mode off
Mon Nov 21 22:20:51 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped)
Mon Nov 21 22:20:51 2022 daemon.notice netifd: LTE (2075): Failed to parse message data
Mon Nov 21 22:20:51 2022 daemon.notice netifd: LTE (2075):   on
Mon Nov 21 22:20:53 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped)
Mon Nov 21 22:20:53 2022 daemon.notice netifd: LTE (2075): Failed to parse message data
Mon Nov 21 22:20:53 2022 daemon.notice netifd: LTE (2075):   on
Mon Nov 21 22:20:55 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped)
Mon Nov 21 22:20:55 2022 daemon.notice netifd: LTE (2075): Failed to parse message data
Mon Nov 21 22:20:55 2022 daemon.notice netifd: LTE (2075):   on
Mon Nov 21 22:20:57 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped)
Mon Nov 21 22:20:57 2022 daemon.notice netifd: LTE (2075): Failed to parse message data
Mon Nov 21 22:20:57 2022 daemon.notice netifd: LTE (2075):   on
Mon Nov 21 22:21:01 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped)
Mon Nov 21 22:21:01 2022 daemon.notice netifd: LTE (2075): Failed to parse message data
Mon Nov 21 22:21:01 2022 daemon.notice netifd: LTE (2075):   on
Mon Nov 21 22:21:04 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped)
Mon Nov 21 22:21:04 2022 daemon.notice netifd: LTE (2075): Failed to parse message data
Mon Nov 21 22:21:04 2022 daemon.notice netifd: LTE (2075):   on
Mon Nov 21 22:21:07 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped)
Mon Nov 21 22:21:07 2022 daemon.notice netifd: LTE (2075): Failed to parse message data
Mon Nov 21 22:21:07 2022 daemon.notice netifd: LTE (2075):   on
Mon Nov 21 22:21:10 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped)
Mon Nov 21 22:21:10 2022 daemon.notice netifd: LTE (2075): Failed to parse message data
Mon Nov 21 22:21:10 2022 daemon.notice netifd: LTE (2075):   on
Mon Nov 21 22:21:16 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped)
Mon Nov 21 22:21:16 2022 daemon.notice netifd: LTE (2075): Failed to parse message data
Mon Nov 21 22:21:16 2022 daemon.notice netifd: LTE (2075):   on
Mon Nov 21 22:21:22 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped)
Mon Nov 21 22:21:22 2022 daemon.notice netifd: LTE (2075): Failed to parse message data
Mon Nov 21 22:21:22 2022 daemon.notice netifd: LTE (2075):   on
root@OpenWrt:~#

root@OpenWrt:~# uqmi -d /dev/cdc-wdm0 --get-data-status
"connected"
root@OpenWrt:~#

root@OpenWrt:~# uci show network.LTE
network.LTE=interface
network.LTE.proto='qmi'
network.LTE.device='/dev/cdc-wdm0'
network.LTE.auth='none'
network.LTE.pdptype='ipv4v6'
network.LTE.apn='internet'
network.LTE.default_profile='1'
root@OpenWrt:~#

Any idea?

Thanks, Ingo

Hi
What OpenWrt and uqmi versions have you installed?

Mon Nov 21 22:20:51 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped)
This is the issue, clearly printed.
However, the reason for this is not obvious. I suggest, you first use complete official openwrt, before trying some modified stuff. Which modem are you using ? I have MC7455 and various EC25 up and running using QMI from official openwrt (22.03.02)

1 Like

Hi, I followed the guideline here: https://openwrt.org/toh/tp-link/tl-mr6400_v4 and first installed the version openwrt-22.03.2-ramips-mt76x8-tplink_tl-mr6400-v4-squashfs-tftp-recovery.bin. After that I installed luci-proto-qmi. After creating the interface "LTE" I recognized that it did not connect, so I had a little search and found your repository, which I installed. How can I check the uqmi version?

Hi, I also installed openwrt 22.03.2 and tried it only with luci-proto-wmi without success. The hardware is:

How can I get more infos about the LTE module?

Thanks a lot for your help and fast responses, guys!

All the best, Ingo

root@OpenWrt:~# cat /sys/kernel/debug/usb/devices

T:  Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480  MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0002 Rev= 5.10
S:  Manufacturer=Linux 5.10.146 ehci_hcd
S:  Product=EHCI Host Controller
S:  SerialNumber=101c0000.ehci
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T:  Bus=01 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#=  2 Spd=480  MxCh= 0
D:  Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=05c6 ProdID=9025 Rev= 3.18
S:  Manufacturer=Android
S:  Product=Android
S:  SerialNumber=484c3a85
C:* #Ifs= 6 Cfg#= 1 Atr=a0 MxPwr=500mA
I:* If#= 0 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
E:  Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=01(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=42 Prot=01 Driver=(none)
E:  Ad=02(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=82(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 2 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=(none)
E:  Ad=84(I) Atr=03(Int.) MxPS=  10 Ivl=32ms
E:  Ad=83(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=03(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 3 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=(none)
E:  Ad=86(I) Atr=03(Int.) MxPS=  10 Ivl=32ms
E:  Ad=85(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=04(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 4 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=qmi_wwan
E:  Ad=88(I) Atr=03(Int.) MxPS=   8 Ivl=32ms
E:  Ad=87(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=05(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
I:* If#= 5 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=(none)
E:  Ad=89(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
E:  Ad=06(O) Atr=02(Bulk) MxPS= 512 Ivl=125us

T:  Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=12   MxCh= 1
B:  Alloc=  0/900 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 1.10 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0001 Rev= 5.10
S:  Manufacturer=Linux 5.10.146 ohci_hcd
S:  Product=Generic Platform OHCI controller
S:  SerialNumber=101c1000.ohci
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   2 Ivl=255ms
root@OpenWrt:~#

LSUSB shows:

root@OpenWrt:~# lsusb
Bus 002 Device 001: ID 1d6b:0001 Linux 5.10.146 ohci_hcd Generic Platform OHCI controller
Bus 001 Device 002: ID 05c6:9025 Android Android
Bus 001 Device 001: ID 1d6b:0002 Linux 5.10.146 ehci_hcd EHCI Host Controller

root@OpenWrt:~# lsusb -v -s 001:002

Bus 001 Device 002: ID 05c6:9025 Android Android
Device Descriptor:
  bLength                18
  bDescriptorType         1
  bcdUSB               2.00
  bDeviceClass            0
  bDeviceSubClass         0
  bDeviceProtocol         0
  bMaxPacketSize0        64
  idVendor           0x05c6
  idProduct          0x9025
  bcdDevice            3.18
  iManufacturer           1 Android
  iProduct                2 Android
  iSerial                 3 484c3a85
  bNumConfigurations      1
  Configuration Descriptor:
    bLength                 9
    bDescriptorType         2
    wTotalLength       0x00ce
    bNumInterfaces          6
    bConfigurationValue     1
    iConfiguration          0
    bmAttributes         0xa0
      (Bus Powered)
      Remote Wakeup
    MaxPower              500mA
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        0
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass       255
      bInterfaceSubClass    255
      bInterfaceProtocol    255
      iInterface              0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x81  EP 1 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x01  EP 1 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        1
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass       255
      bInterfaceSubClass     66
      bInterfaceProtocol      1
      iInterface              6 ADB Interface
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x02  EP 2 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x82  EP 2 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        2
      bAlternateSetting       0
      bNumEndpoints           3
      bInterfaceClass       255
      bInterfaceSubClass      0
      bInterfaceProtocol      0
      iInterface              0
      ** UNRECOGNIZED:  05 24 00 10 01
      ** UNRECOGNIZED:  05 24 01 00 00
      ** UNRECOGNIZED:  04 24 02 02
      ** UNRECOGNIZED:  05 24 06 00 00
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x84  EP 4 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x000a  1x 10 bytes
        bInterval               9
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x83  EP 3 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x03  EP 3 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        3
      bAlternateSetting       0
      bNumEndpoints           3
      bInterfaceClass       255
      bInterfaceSubClass      0
      bInterfaceProtocol      0
      iInterface              0
      ** UNRECOGNIZED:  05 24 00 10 01
      ** UNRECOGNIZED:  05 24 01 00 00
      ** UNRECOGNIZED:  04 24 02 02
      ** UNRECOGNIZED:  05 24 06 00 00
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x86  EP 6 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x000a  1x 10 bytes
        bInterval               9
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x85  EP 5 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x04  EP 4 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        4
      bAlternateSetting       0
      bNumEndpoints           3
      bInterfaceClass       255
      bInterfaceSubClass    255
      bInterfaceProtocol    255
      iInterface              0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x88  EP 8 IN
        bmAttributes            3
          Transfer Type            Interrupt
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0008  1x 8 bytes
        bInterval               9
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x87  EP 7 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x05  EP 5 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
    Interface Descriptor:
      bLength                 9
      bDescriptorType         4
      bInterfaceNumber        5
      bAlternateSetting       0
      bNumEndpoints           2
      bInterfaceClass         8
      bInterfaceSubClass      6
      bInterfaceProtocol     80
      iInterface              4 Mass Storage
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x89  EP 9 IN
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               0
      Endpoint Descriptor:
        bLength                 7
        bDescriptorType         5
        bEndpointAddress     0x06  EP 6 OUT
        bmAttributes            2
          Transfer Type            Bulk
          Synch Type               None
          Usage Type               Data
        wMaxPacketSize     0x0200  1x 512 bytes
        bInterval               1
Device Qualifier (for other device speed):
  bLength                10
  bDescriptorType         6
  bcdUSB               2.00
  bDeviceClass            0
  bDeviceSubClass         0
  bDeviceProtocol         0
  bMaxPacketSize0        64
  bNumConfigurations      1
Device Status:     0x0000
  (Bus Powered)
root@OpenWrt:~#

But I think the modem is somewhere else?

Bus 001 Device 002: ID 05c6:9025 Android Android

ok I posted a detailed output above your comment at the same time.

Also my dsmesg shows:


root@OpenWrt:~# dmesg
[    0.000000] Linux version 5.10.146 (builder@buildhost) (mipsel-openwrt-linux-musl-gcc (OpenWrt GCC 11.2.0 r19803-9a599fee93) 11.2.0, GNU ld (GNU Binutils) 2.37) #0 Fri Oct 14 22:44:41 2022
[    0.000000] Board has DDR2
[    0.000000] Analog PMU set to hw control
[    0.000000] Digital PMU set to hw control
[    0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2
[    0.000000] printk: bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019655 (MIPS 24KEc)
[    0.000000] MIPS: machine is TP-Link TL-MR6400 v4
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff]
[    0.000000] On node 0 totalpages: 16384
[    0.000000]   Normal zone: 144 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 16384 pages, LIFO batch:3
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 16240
[    0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2
[    0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes, linear)
[    0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes, linear)
[    0.000000] Writing ErrCtl register=0000cba3
[    0.000000] Readback ErrCtl register=0000cba3
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 56416K/65536K available (5669K kernel code, 616K rwdata, 692K rodata, 1204K init, 209K bss, 9120K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS: 256
[    0.000000] intc: using register map from devicetree
[    0.000000] CPU Clock: 580MHz
[    0.000000] timer_probe: no matching timers found
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns
[    0.000010] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns
[    0.007644] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216)
[    0.073572] pid_max: default: 32768 minimum: 301
[    0.078207] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.085226] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.095102] dyndbg: Ignore empty _ddebug table in a CONFIG_DYNAMIC_DEBUG_CORE build
[    0.106455] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.115976] futex hash table entries: 256 (order: -1, 3072 bytes, linear)
[    0.122620] pinctrl core: initialized pinctrl subsystem
[    0.132659] NET: Registered protocol family 16
[    0.137792] thermal_sys: Registered thermal governor 'step_wise'
[    0.200236] clocksource: Switched to clocksource MIPS
[    0.212326] NET: Registered protocol family 2
[    0.216782] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear)
[    0.224723] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.232890] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.240271] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.247050] TCP: Hash tables configured (established 1024 bind 1024)
[    0.253353] UDP hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.259637] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.266749] NET: Registered protocol family 1
[    0.270989] PCI: CLS 0 bytes, default 32
[    0.282329] workingset: timestamp_bits=14 max_order=14 bucket_order=0
[    0.293865] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.299446] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.311273] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252)
[    0.320971] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.326556] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.332261] mt7621_gpio 10000600.gpio: registering 32 gpios
[    0.337894] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.346776] printk: console [ttyS0] disabled
[    0.351015] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A
[    0.359729] printk: console [ttyS0] enabled
[    0.368162] printk: bootconsole [early0] disabled
[    0.379139] spi-mt7621 10000b00.spi: sys_freq: 193333333
[    0.404009] spi-nor spi0.0: s25fl064k (8192 Kbytes)
[    0.409027] 4 fixed-partitions partitions found on MTD device spi0.0
[    0.415601] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions
[    0.423054] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions
[    0.430881] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions
[    0.438316] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions
[    0.446396] Creating 4 MTD partitions on "spi0.0":
[    0.451332] 0x000000000000-0x000000020000 : "boot"
[    0.460123] 0x000000020000-0x0000007c0000 : "firmware"
[    0.467173] 2 tplink-fw partitions found on MTD device firmware
[    0.473285] Creating 2 MTD partitions on "firmware":
[    0.478327] 0x000000000000-0x0000002184f5 : "kernel"
[    0.483371] mtd: partition "kernel" doesn't end on an erase/write block -- force read-only
[    0.494802] 0x0000002184f8-0x0000007a0000 : "rootfs"
[    0.499857] mtd: partition "rootfs" doesn't start on an erase/write block boundary -- force read-only
[    0.510439] mtd: device 3 (rootfs) set to be root filesystem
[    0.517336] 1 squashfs-split partitions found on MTD device rootfs
[    0.523704] 0x0000005c0000-0x0000007a0000 : "rootfs_data"
[    0.530525] 0x0000007c0000-0x0000007d0000 : "config"
[    0.538523] 0x0000007d0000-0x000000800000 : "factory"
[    0.598702] rt3050-esw 10110000.esw: mediatek esw at 0xb0110000, irq 25 initialized
[    0.607383] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5
[    0.617699] NET: Registered protocol family 10
[    0.627983] Segment Routing with IPv6
[    0.631924] NET: Registered protocol family 17
[    0.636526] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    0.649704] 8021q: 802.1Q VLAN Support v1.8
[    0.671292] VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
[    0.685249] Freeing unused kernel memory: 1204K
[    0.689844] This architecture does not have kernel memory protection.
[    0.696414] Run /sbin/init as init process
[    0.700590]   with arguments:
[    0.700596]     /sbin/init
[    0.700600]   with environment:
[    0.700606]     HOME=/
[    0.700610]     TERM=linux
[    1.730784] init: Console is alive
[    1.734843] init: - watchdog -
[    3.428598] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    3.606587] usbcore: registered new interface driver usbfs
[    3.612341] usbcore: registered new interface driver hub
[    3.617825] usbcore: registered new device driver usb
[    3.631715] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    3.641659] ehci-fsl: Freescale EHCI Host controller driver
[    3.649270] ehci-platform: EHCI generic platform driver
[    3.665105] phy phy-10120000.usbphy.0: remote usb device wakeup disabled
[    3.671921] phy phy-10120000.usbphy.0: UTMI 16bit 30MHz
[    3.677218] ehci-platform 101c0000.ehci: EHCI Host Controller
[    3.683083] ehci-platform 101c0000.ehci: new USB bus registered, assigned bus number 1
[    3.691272] ehci-platform 101c0000.ehci: irq 26, io mem 0x101c0000
[    3.720260] ehci-platform 101c0000.ehci: USB 2.0 started, EHCI 1.00
[    3.727697] hub 1-0:1.0: USB hub found
[    3.732547] hub 1-0:1.0: 1 port detected
[    3.744857] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    3.752914] ohci-platform: OHCI generic platform driver
[    3.758621] ohci-platform 101c1000.ohci: Generic Platform OHCI controller
[    3.765623] ohci-platform 101c1000.ohci: new USB bus registered, assigned bus number 2
[    3.773815] ohci-platform 101c1000.ohci: irq 26, io mem 0x101c1000
[    3.845312] hub 2-0:1.0: USB hub found
[    3.850031] hub 2-0:1.0: 1 port detected
[    3.864152] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    3.882200] init: - preinit -
[    4.789359] rt3050-esw 10110000.esw: port 1 link up
[    5.370350] usb 1-1: new high-speed USB device number 2 using ehci-platform
[    5.598473] random: procd: uninitialized urandom read (4 bytes read)
[    5.767889] random: jshn: uninitialized urandom read (4 bytes read)
[    5.885462] random: jshn: uninitialized urandom read (4 bytes read)
[    6.788640] rt3050-esw 10110000.esw: port 1 link down
[   11.145255] rt3050-esw 10110000.esw: port 1 link up
[   11.150490] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   11.157446] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready
[   11.535410] jffs2: notice: (430) jffs2_build_xattr_subsystem: complete building xattr subsystem, 175 of xdatum (108 unchecked, 6 orphan) and 189 of xref (8 dead, 0 orphan) found.
[   11.556795] mount_root: switching to jffs2 overlay
[   11.575766] overlayfs: upper fs does not support tmpfile.
[   11.591483] urandom-seed: Seeding with /etc/urandom.seed
[   11.828483] procd: - early -
[   11.831986] procd: - watchdog -
[   12.769859] procd: - watchdog -
[   12.777636] procd: - ubus -
[   13.195708] random: ubusd: uninitialized urandom read (4 bytes read)
[   13.215961] random: ubusd: uninitialized urandom read (4 bytes read)
[   13.233415] random: ubusd: uninitialized urandom read (4 bytes read)
[   13.252724] procd: - init -
[   14.324020] random: ubusd: uninitialized urandom read (4 bytes read)
[   14.331765] random: ubus: uninitialized urandom read (4 bytes read)
[   14.509455] random: jsonfilter: uninitialized urandom read (4 bytes read)
[   15.352378] random: jshn: uninitialized urandom read (4 bytes read)
[   15.766524] kmodloader: loading kernel modules from /etc/modules.d/*
[   16.684636] urngd: v1.0.2 started.
[   16.729497] usbcore: registered new interface driver cdc_wdm
[   16.751190] Loading modules backported from Linux version v5.15.58-0-g7d8048d4e064
[   16.758887] Backport generated by backports.git v5.15.58-1-0-g42a95ce7
[   16.833525] usbcore: registered new interface driver usbserial_generic
[   16.840321] usbserial: USB Serial support registered for generic
[   17.113802] mt76_wmac 10300000.wmac: ASIC revision: 76280001
[   17.247031] random: crng init done
[   17.250560] random: 46 urandom warning(s) missed due to ratelimiting
[   18.153567] mt76_wmac 10300000.wmac: Firmware Version: 20151201
[   18.159596] mt76_wmac 10300000.wmac: Build Time: 20151201183641
[   18.180241] mt76_wmac 10300000.wmac: firmware init done
[   18.349049] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[   18.628194] PPP generic driver version 2.4.2
[   18.637847] NET: Registered protocol family 24
[   18.647310] qmi_wwan 1-1:1.4: cdc-wdm0: USB WDM device
[   18.661389] qmi_wwan 1-1:1.4 wwan0: register 'qmi_wwan' at usb-101c0000.ehci-1, WWAN/QMI device, 2e:07:2a:d1:eb:9c
[   18.672278] usbcore: registered new interface driver qmi_wwan
[   18.714733] usbcore: registered new interface driver option
[   18.720588] usbserial: USB Serial support registered for GSM modem (1-port)
[   18.756555] kmodloader: done loading kernel modules from /etc/modules.d/*
[   32.748642] rt3050-esw 10110000.esw: port 1 link down
[   36.889201] rt3050-esw 10110000.esw: port 1 link up
[   42.858618] br-lan: port 1(eth0.1) entered blocking state
[   42.864366] br-lan: port 1(eth0.1) entered disabled state
[   42.870303] device eth0.1 entered promiscuous mode
[   42.875174] device eth0 entered promiscuous mode
[   42.907028] br-lan: port 1(eth0.1) entered blocking state
[   42.912594] br-lan: port 1(eth0.1) entered forwarding state
[   43.860907] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   51.497823] wlan0: authenticate with 2c:91:ab:4c:8c:86
[   51.511150] wlan0: send auth to 2c:91:ab:4c:8c:86 (try 1/3)
[   52.111097] wlan0: authenticate with 2c:91:ab:4c:8c:86
[   52.116368] wlan0: send auth to 2c:91:ab:4c:8c:86 (try 1/3)
[   52.126995] wlan0: authenticated
[   52.140328] wlan0: associate with 2c:91:ab:4c:8c:86 (try 1/3)
[   52.162123] wlan0: RX AssocResp from 2c:91:ab:4c:8c:86 (capab=0x1431 status=0 aid=10)
[   52.170386] wlan0: associated
[   52.190845] wlan0: Limiting TX power to 20 (20 - 0) dBm as advertised by 2c:91:ab:4c:8c:86
[   53.087410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.429248] do_page_fault(): sending SIGSEGV to uqmi for invalid write access to 00000000
[   69.437629] epc = 77d82ef4 in libc.so[77d5e000+a9000]
[   69.442827] ra  = 004036c9 in uqmi[400000+14000]
[   72.532711] do_page_fault(): sending SIGSEGV to uqmi for invalid write access to 00000000
[   72.541076] epc = 77e16ef4 in libc.so[77df2000+a9000]
[   72.546237] ra  = 004036c9 in uqmi[400000+14000]
[   75.636879] do_page_fault(): sending SIGSEGV to uqmi for invalid write access to 00000000
[   75.645267] epc = 77e34ef4 in libc.so[77e10000+a9000]
[   75.650435] ra  = 004036c9 in uqmi[400000+14000]
[   78.772462] do_page_fault(): sending SIGSEGV to uqmi for invalid write access to 00000000
[   78.780823] epc = 77d87ef4 in libc.so[77d63000+a9000]
[   78.785983] ra  = 004036c9 in uqmi[400000+14000]
[   84.885213] do_page_fault(): sending SIGSEGV to uqmi for invalid write access to 00000000
[   84.893598] epc = 77db0ef4 in libc.so[77d8c000+a9000]
[   84.898761] ra  = 004036c9 in uqmi[400000+14000]
[   90.996737] do_page_fault(): sending SIGSEGV to uqmi for invalid write access to 00000000
[   91.005115] epc = 77e5cef4 in libc.so[77e38000+a9000]
[   91.010277] ra  = 004036c9 in uqmi[400000+14000]
root@OpenWrt:~#

You can see the version under System - Software - Installed and filter on uqmi.

Thanks, it states: uqmi 2022-05-04-56cb2d40-1

Try the latest version:

wget https://github.com/mrhaav/openwrt/raw/master/22.03.2/uqmi_2022-09-13-0.9_mipsel_24kc.ipk
opkg install uqmi_2022-09-13-0.9_mipsel_24kc.ipk

Now it states: uqmi 2022-09-13-0.9

But still the same segmentation fault:

Tue Nov 22 10:31:36 2022 daemon.notice netifd: Interface 'LTE' is now down
Tue Nov 22 11:38:57 2022 daemon.notice netifd: Interface 'LTE' is setting up now
Tue Nov 22 11:39:07 2022 daemon.notice netifd: LTE (4097): PINcode disabled
Tue Nov 22 11:39:08 2022 daemon.notice netifd: LTE (4097): Data format set to raw-ip
Tue Nov 22 11:39:08 2022 daemon.notice netifd: LTE (4097): Default profile: 1
Tue Nov 22 11:39:08 2022 daemon.notice netifd: LTE (4097): Segmentation fault (core dumped)
Tue Nov 22 11:39:08 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
Tue Nov 22 11:39:08 2022 daemon.notice netifd: LTE (4097):   on
Tue Nov 22 11:39:10 2022 daemon.notice netifd: LTE (4097): Segmentation fault (core dumped)
Tue Nov 22 11:39:10 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
Tue Nov 22 11:39:10 2022 daemon.notice netifd: LTE (4097):   on
Tue Nov 22 11:39:12 2022 daemon.notice netifd: LTE (4097): Segmentation fault (core dumped)
Tue Nov 22 11:39:12 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
Tue Nov 22 11:39:13 2022 daemon.notice netifd: LTE (4097):   on
Tue Nov 22 11:39:15 2022 daemon.notice netifd: LTE (4097): Segmentation fault (core dumped)
Tue Nov 22 11:39:15 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
Tue Nov 22 11:39:15 2022 daemon.notice netifd: LTE (4097):   on
Tue Nov 22 11:39:18 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
Tue Nov 22 11:39:18 2022 daemon.notice netifd: LTE (4097):   on
Tue Nov 22 11:39:21 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
Tue Nov 22 11:39:21 2022 daemon.notice netifd: LTE (4097):   on
Tue Nov 22 11:39:24 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
Tue Nov 22 11:39:24 2022 daemon.notice netifd: LTE (4097):   on
Tue Nov 22 11:39:27 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
Tue Nov 22 11:39:27 2022 daemon.notice netifd: LTE (4097):   on
Tue Nov 22 11:39:33 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
Tue Nov 22 11:39:33 2022 daemon.notice netifd: LTE (4097):   on
Tue Nov 22 11:39:39 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
Tue Nov 22 11:39:39 2022 daemon.notice netifd: LTE (4097):   on

Strange
Can you run following uqmi commands to see which cause the segmentfault?

uqmi -d /dev/cdc-wdm0 --get-profile-settings 3gpp,1
uqmi -d /dev/cdc-wdm0 --get-device-operating-mode
uqmi -d /dev/cdc-wdm0 --get-serving-system

Yes, of course:


root@OpenWrt:~# uqmi -d /dev/cdc-wdm0 --get-profile-settings 3gpp,1
{
        "apn": "internet",
        "pdp-type": "ipv4v6",
        "username": "",
        "password": "",
        "auth": "none",
        "no-roaming": false,
        "apn-disabled": false
}
root@OpenWrt:~# uqmi -d /dev/cdc-wdm0 --get-device-operating-mode
"online"
root@OpenWrt:~# uqmi -d /dev/cdc-wdm0 --get-serving-system
"Failed to connect to service"
root@OpenWrt:~#

I will take look at the code later today.
What provider do you use and what name is visible in the phone?

Thank you very much. When I insert the sim card into my ipad, it works out of the box without a pincode. I have a multicard from this provider: https://service.handyvertrag.de/public/impressum Drillisch GmbH, but on the ipad it states the provider behind: O2

I have another sim card from the Telekom, I will try this card as well.

In the Q&A of the provider they say:

Alternatively, you can conveniently request the configuration data via SMS to your end device.

  1. Use your device to send an SMS with the content handy to the free short code 80100
  2. The configuration data will then be sent to you via SMS.
  3. Save the configuration data on your end device
  4. Make sure that data roaming is activated on your end device and EU roaming (applies only to Apple end devices with the iOS 8 operating system) is inactive.
  5. Turn on your device.

With the telekom card I get:

Tue Nov 22 13:55:35 2022 daemon.notice netifd: Interface 'wwan' is now down
Tue Nov 22 13:55:36 2022 daemon.notice netifd: Interface 'wwan' has link connectivity
Tue Nov 22 13:55:36 2022 daemon.notice netifd: Interface 'wwan' is setting up now
Tue Nov 22 14:02:00 2022 daemon.notice netifd: wwan (3204): PINcode verified
Tue Nov 22 14:02:00 2022 daemon.notice netifd: wwan (3204): Data format set to raw-ip
Tue Nov 22 14:02:00 2022 daemon.notice netifd: wwan (3204): Default profile: 1
Tue Nov 22 14:02:00 2022 daemon.notice netifd: wwan (3204): Airplane mode off
Tue Nov 22 14:02:02 2022 daemon.notice netifd: wwan (3204):  searching on 26201
Tue Nov 22 14:02:04 2022 daemon.notice netifd: wwan (3204):  registered on 26201
Tue Nov 22 14:02:06 2022 daemon.notice netifd: wwan (3204): Registered to Telekom.de on LTE
Tue Nov 22 14:02:07 2022 daemon.notice netifd: wwan (3204): Unable to connect with ipv4, check APN settnings
Tue Nov 22 14:02:08 2022 daemon.notice netifd: wwan (3604): Stopping network wwan
Tue Nov 22 14:02:08 2022 daemon.notice netifd: wwan (3604): Command failed: ubus call network.interface notify_proto { "action": 0, "link-up": false, "keep": false, "interface": "wwan" } (Permission denied)
Tue Nov 22 14:02:08 2022 daemon.notice netifd: Interface 'wwan' is now down

I tried to correct the --get-serving-system command. Can you try:

wget https://github.com/mrhaav/openwrt/raw/master/uqmi_test/uqmi_2022-11-22-0.9_mipsel_24kc.ipk
opkg install uqmi_2022-11-22-0.9_mipsel_24kc.ipk

and then run

uqmi -d /dev/cdc-wdm0 --get-serving-system

Hi, I used your commands and got one fail:

Command failed: Not found

root@OpenWrt:~# wget https://github.com/mrhaav/openwrt/raw/master/uqmi_test/uqmi_2022-11-22-0.9_mipsel_24kc.ipk
Downloading 'https://github.com/mrhaav/openwrt/raw/master/uqmi_test/uqmi_2022-11-22-0.9_mipsel_24kc.ipk'
Connecting to 140.82.121.4:443
Redirected to /mrhaav/openwrt/master/uqmi_test/uqmi_2022-11-22-0.9_mipsel_24kc.ipk on raw.githubusercontent.com
Writing to 'uqmi_2022-11-22-0.9_mipsel_24kc.ipk'
uqmi_2022-11-22-0.9_ 100% |*******************************| 42212   0:00:00 ETA
Download completed (42212 bytes)
root@OpenWrt:~# opkg install uqmi_2022-11-22-0.9_mipsel_24kc.ipk
Upgrading uqmi on root from 2022-09-13-0.9 to 2022-11-22-0.9...
Command failed: Not found
Configuring uqmi.

But the last command did work:

root@OpenWrt:~# uqmi -d /dev/cdc-wdm0 --get-serving-system
{
        "registration": "registered",
        "plmn_description": "handyvertrag.de",
        "lenght": 15,
        "plmn_mcc": 262,
        "plmn_mnc": 3,
        "mnc_length": 2,
        "roaming": false
}