ZTE MF286D no IMEI after install

Hello all, Hope someone can help me. I have spent countless hours trying to fix this, but came nowhere.
I got myself a MF286D, and thought I would try the Framework install first, as it seemed easy at the time. MF286D - Install and Unlock - #11 by frollic
Everything worked as it should, even framework, in my windows VM. It flashed as per instruction the first firmware, Nordic to Nordic. files here: https://mega.nz/folder/NmdGzCSL#SidoZEe7xKBn96pGOMqx5Q/folder/4mckVTDQ

However, when rebooted, the IMEI was gone (It is still printed on the label, but could not find a way to program it back), and thus the framework did not want to play anymore either. I found that i now have the version B06 on the unit.
I managed to get Luci going, and got the permanent system installed using soldered serial connection and tftp. So now the unit is running Openwrt, 24.10.
I see everywhere you should issue ATI commands to /dev/ttyUSB1, but i have only USB0, and no /dev/cdc-wdm0 which according to the Openwrt wiki guide is the LTE modem.

I don't know how i should proceed, I can't update to B12 using FOTA as i dont have the ttyUSB1 (think it belongs to the LTE modem) tried to connect to ttyUSB0 using picocom, but I only get 0000000.... and cant type, it only prints 000... perhaps a baud issue, but i suspect it is the wrong tty..

Regards,
Frode.

root@OpenWrt:~# opkg list-installed *usb*
kmod-usb-core - 6.6.73-r1
kmod-usb-dwc3 - 6.6.73-r1
kmod-usb-dwc3-qcom - 6.6.73-r1
kmod-usb-net - 6.6.73-r1
kmod-usb-net-qmi-wwan - 6.6.73-r1
kmod-usb-serial - 6.6.73-r1
kmod-usb-serial-option - 6.6.73-r1
kmod-usb-serial-wwan - 6.6.73-r1
kmod-usb-wdm - 6.6.73-r1
kmod-usb-xhci-hcd - 6.6.73-r1
kmod-usb3 - 6.6.73-r1
root@OpenWrt:~# 

root@OpenWrt:~# dmesg
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Linux version 6.6.73 (builder@buildhost) (arm-openwrt-linux-muslgnueabi-gcc (OpenWrt GCC 13.3.0 r28427-6df0e3d02a) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Mon Feb  3 23:09:37 2025
[    0.000000] CPU: ARMv7 Processor [410fc075] revision 5 (ARMv7), cr=10c5387d
[    0.000000] CPU: div instructions available: patching division code
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] OF: fdt: Machine model: ZTE MF286D
[    0.000000] Memory policy: Data cache writealloc
[    0.000000] OF: reserved mem: 0x87e00000..0x87e7ffff (512 KiB) nomap non-reusable smem@87e00000
[    0.000000] OF: reserved mem: 0x87e80000..0x87ffffff (1536 KiB) nomap non-reusable tz@87e80000
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000080000000-0x000000008fffffff]
[    0.000000]   HighMem  empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000080000000-0x0000000087dfffff]
[    0.000000]   node   0: [mem 0x0000000087e00000-0x0000000087ffffff]
[    0.000000]   node   0: [mem 0x0000000088000000-0x000000008fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000080000000-0x000000008fffffff]
[    0.000000] percpu: Embedded 13 pages/cpu s21524 r8192 d23532 u53248
[    0.000000] pcpu-alloc: s21524 r8192 d23532 u53248 alloc=13*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 
[    0.000000] Kernel command line: ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs rootwait root=/dev/ubiblock0_1
[    0.000000] Dentry cache hash table entries: 32768 (order: 5, 131072 bytes, linear)
[    0.000000] Inode-cache hash table entries: 16384 (order: 4, 65536 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 64960
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] Memory: 246128K/262144K available (7663K kernel code, 643K rwdata, 1136K rodata, 1024K init, 248K bss, 16016K reserved, 0K cma-reserved, 0K highmem)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 16, nr_irqs: 16, preallocated irqs: 16
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] arch_timer: cp15 timer(s) running at 48.00MHz (virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0xb11fd3bfb, max_idle_ns: 440795203732 ns
[    0.000001] sched_clock: 56 bits at 48MHz, resolution 20ns, wraps every 4398046511096ns
[    0.000018] Switching to timer-based delay loop, resolution 20ns
[    0.000331] Calibrating delay loop (skipped), value calculated using timer frequency.. 96.00 BogoMIPS (lpj=480000)
[    0.000354] CPU: Testing write buffer coherency: ok
[    0.000400] pid_max: default: 32768 minimum: 301
[    0.010371] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.010394] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear)
[    0.018867] qcom_scm: convention: smc legacy
[    0.020325] RCU Tasks Trace: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=4.
[    0.020500] Setting up static identity map for 0x80300000 - 0x8030003c
[    0.020694] rcu: Hierarchical SRCU implementation.
[    0.020702] rcu:     Max phase no-delay instances is 1000.
[    0.021390] smp: Bringing up secondary CPUs ...
[    0.024987] smp: Brought up 1 node, 4 CPUs
[    0.025010] SMP: Total of 4 processors activated (384.00 BogoMIPS).
[    0.025021] CPU: All CPU(s) started in SVC mode.
[    0.033554] VFP support v0.3: implementor 41 architecture 2 part 30 variant 7 rev 5
[    0.033734] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.033763] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.038924] pinctrl core: initialized pinctrl subsystem
[    0.042152] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.042582] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.044063] thermal_sys: Registered thermal governor 'step_wise'
[    0.044166] cpuidle: using governor ladder
[    0.044208] cpuidle: using governor menu
[    0.062356] cryptd: max_cpu_qlen set to 1000
[    0.067012] usbcore: registered new interface driver usbfs
[    0.067070] usbcore: registered new interface driver hub
[    0.067157] usbcore: registered new device driver usb
[    0.067235] pps_core: LinuxPPS API ver. 1 registered
[    0.067243] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.067268] PTP clock support registered
[    0.069885] clocksource: Switched to clocksource arch_sys_counter
[    0.080612] NET: Registered PF_INET protocol family
[    0.080840] IP idents hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.082552] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear)
[    0.082592] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.082612] TCP established hash table entries: 2048 (order: 1, 8192 bytes, linear)
[    0.082648] TCP bind hash table entries: 2048 (order: 3, 32768 bytes, linear)
[    0.082729] TCP: Hash tables configured (established 2048 bind 2048)
[    0.083766] MPTCP token hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.084151] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.084190] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.084923] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.084976] PCI: CLS 0 bytes, default 64
[    0.086623] workingset: timestamp_bits=14 max_order=16 bucket_order=2
[    0.087613] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.087627] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.332142] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 248)
[    0.338889] tcsr 1949000.tcsr: setting wifi_glb_cfg = 41000000
[    0.339005] tcsr 194b000.tcsr: setting usb hs phy mode select = e700e7
[    0.339102] tcsr 1953000.ess_tcsr: setting ess interface select = 0
[    0.339192] tcsr 1957000.tcsr: setting wifi_noc_memtype_m0_m2 = 2222222
[    0.339715] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.343562] msm_serial 78af000.serial: msm_serial: detected port #0
[    0.343611] msm_serial 78af000.serial: uartclk = 1843200
[    0.343944] 78af000.serial: ttyMSM0 at MMIO 0x78af000 (irq = 32, base_baud = 115200) is a MSM
[    0.343985] msm_serial: console setup on port #0
[    0.344039] printk: console [ttyMSM0] enabled
[    0.933208] msm_serial: driver initialized
[    0.944366] loop: module loaded
[    0.946374] nand: device found, Manufacturer ID: 0x2c, Chip ID: 0xf1
[    0.946422] nand: Micron MT29F1G08ABAEAWP
[    0.952955] nand: 128 MiB, SLC, erase size: 128 KiB, page size: 2048, OOB size: 64
[    0.956927] 12 fixed-partitions partitions found on MTD device qcom_nand.0
[    0.964323] Creating 12 MTD partitions on "qcom_nand.0":
[    0.971170] 0x000000000000-0x0000000a0000 : "fota-flag"
[    0.978396] 0x0000000a0000-0x000000120000 : "ART"
[    0.983144] OF: Bad cell count for /soc/nand-controller@79b0000/nand@0/partitions
[    0.986702] 0x000000120000-0x0000001a0000 : "mac"
[    0.995449] OF: Bad cell count for /soc/nand-controller@79b0000/nand@0/partitions
[    0.998801] 0x0000001a0000-0x000000260000 : "reserved2"
[    1.007919] 0x000000260000-0x000000660000 : "cfg-param"
[    1.017647] 0x000000660000-0x000000a60000 : "log"
[    1.024250] 0x000000a60000-0x000000b00000 : "oops"
[    1.025869] 0x000000b00000-0x000001000000 : "reserved3"
[    1.035975] 0x000001000000-0x000001800000 : "web"
[    1.048404] 0x000001800000-0x000003500000 : "rootfs"
[    1.091289] mtd: setting mtd9 (rootfs) as root device
[    1.091954] mtdsplit: no squashfs found in "rootfs"
[    1.095353] 0x000003500000-0x000004e00000 : "data"
[    1.137238] 0x000004e00000-0x000008000000 : "fota"
[    1.218145] spi_qup 78b5000.spi: IN:block:16, fifo:64, OUT:block:16, fifo:64
[    1.218313] flash@0 enforce active low on GPIO handle
[    1.226176] spi-nor spi0.0: gd25q16 (2048 Kbytes)
[    1.229342] 8 fixed-partitions partitions found on MTD device spi0.0
[    1.233986] Creating 8 MTD partitions on "spi0.0":
[    1.240371] 0x000000000000-0x000000040000 : "0:SBL1"
[    1.245710] 0x000000040000-0x000000060000 : "0:MIBIB"
[    1.250782] 0x000000060000-0x0000000c0000 : "0:QSEE"
[    1.255720] 0x0000000c0000-0x0000000d0000 : "0:CDT"
[    1.260783] 0x0000000d0000-0x0000000e0000 : "0:DDRPARAMS"
[    1.265306] 0x0000000e0000-0x0000000f0000 : "0:APPSBLENV"
[    1.270852] 0x0000000f0000-0x0000001b0000 : "0:APPSBL"
[    1.276217] 0x0000001b0000-0x000000200000 : "0:reserved1"
[    1.337299] i2c_dev: i2c /dev entries driver
[    1.339734] sdhci: Secure Digital Host Controller Interface driver
[    1.340723] sdhci: Copyright(c) Pierre Ossman
[    1.346638] sdhci-pltfm: SDHCI platform and OF driver helper
[    1.354744] NET: Registered PF_INET6 protocol family
[    1.358919] Segment Routing with IPv6
[    1.361880] In-situ OAM (IOAM) with IPv6
[    1.365418] NET: Registered PF_PACKET protocol family
[    1.369330] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.374778] 8021q: 802.1Q VLAN Support v1.8
[    1.387550] Registering SWP/SWPB emulation handler
[    1.417351] qca8k-ipq4019 c000000.switch: configuring for fixed/internal link mode
[    1.417731] qca8k-ipq4019 c000000.switch: Link is Up - 1Gbps/Full - flow control rx/tx
[    1.621822] qca8k-ipq4019 c000000.switch lan4 (uninitialized): PHY [90000.mdio-1:01] driver [Qualcomm QCA8075] (irq=POLL)
[    1.700725] qca8k-ipq4019 c000000.switch lan3 (uninitialized): PHY [90000.mdio-1:02] driver [Qualcomm QCA8075] (irq=POLL)
[    1.780723] qca8k-ipq4019 c000000.switch lan2 (uninitialized): PHY [90000.mdio-1:03] driver [Qualcomm QCA8075] (irq=POLL)
[    1.860758] qca8k-ipq4019 c000000.switch wan (uninitialized): PHY [90000.mdio-1:04] driver [Qualcomm QCA8075] (irq=POLL)
[    1.862022] ipqess-edma c080000.ethernet eth0: entered promiscuous mode
[    1.870863] DSA: tree 0 setup
[    1.877343] ubi0: attaching mtd9
[    2.182928] ubi0: scanning is finished
[    2.196889] ubi0: attached mtd9 (name "rootfs", size 29 MiB)
[    2.196942] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[    2.201691] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[    2.208321] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[    2.215201] ubi0: good PEBs: 232, bad PEBs: 0, corrupted PEBs: 0
[    2.221966] ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
[    2.228200] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1832080710
[    2.235250] ubi0: available PEBs: 0, total reserved PEBs: 232, PEBs reserved for bad PEB handling: 20
[    2.244555] ubi0: background thread "ubi_bgt0d" started, PID 88
[    2.246083] block ubiblock0_1: created from ubi0:1(rootfs)
[    2.259744] clk: Disabling unused clocks
[    2.272002] VFS: Mounted root (squashfs filesystem) readonly on device 254:0.
[    2.274051] Freeing unused kernel image (initmem) memory: 1024K
[    2.278385] Run /sbin/init as init process
[    2.283913]   with arguments:
[    2.283921]     /sbin/init
[    2.283928]   with environment:
[    2.283933]     HOME=/
[    2.283940]     TERM=linux
[    2.790112] init: Console is alive
[    2.790479] init: - watchdog -
[    3.745739] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    3.769002] gpio_button_hotplug: loading out-of-tree module taints kernel.
[    4.010493] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    4.010600] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 1
[    4.015101] xhci-hcd xhci-hcd.0.auto: hcc params 0x0228f665 hci version 0x100 quirks 0x0000008002000010
[    4.022596] xhci-hcd xhci-hcd.0.auto: irq 61, io mem 0x08a00000
[    4.032063] xhci-hcd xhci-hcd.0.auto: xHCI Host Controller
[    4.037740] xhci-hcd xhci-hcd.0.auto: new USB bus registered, assigned bus number 2
[    4.043323] xhci-hcd xhci-hcd.0.auto: Host supports USB 3.0 SuperSpeed
[    4.051613] hub 1-0:1.0: USB hub found
[    4.057482] hub 1-0:1.0: 1 port detected
[    4.061733] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    4.065857] hub 2-0:1.0: USB hub found
[    4.077177] hub 2-0:1.0: 1 port detected
[    4.077792] xhci-hcd xhci-hcd.1.auto: xHCI Host Controller
[    4.081027] xhci-hcd xhci-hcd.1.auto: new USB bus registered, assigned bus number 3
[    4.086471] xhci-hcd xhci-hcd.1.auto: USB3 root hub has no ports
[    4.093847] xhci-hcd xhci-hcd.1.auto: hcc params 0x0220f665 hci version 0x100 quirks 0x0000008002000010
[    4.100136] xhci-hcd xhci-hcd.1.auto: irq 62, io mem 0x06000000
[    4.110204] hub 3-0:1.0: USB hub found
[    4.115117] hub 3-0:1.0: 1 port detected
[    4.122335] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    4.125668] init: - preinit -
[    5.210004] usb 2-1: new SuperSpeed USB device number 2 using xhci-hcd
[    5.679923] random: crng init done
[    6.365991] ipqess-edma c080000.ethernet eth0: configuring for fixed/internal link mode
[    6.366761] qca8k-ipq4019 c000000.switch lan2: configuring for phy/psgmii link mode
[    6.372894] qca8k-ipq4019 c000000.switch: PSGMII calibration!
[    6.380560] ipqess-edma c080000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[   10.490283] qca8k-ipq4019 c000000.switch lan2: Link is Up - 1Gbps/Full - flow control rx/tx
[   11.876296] UBIFS (ubi0:2): Mounting in unauthenticated mode
[   11.876556] UBIFS (ubi0:2): background thread "ubifs_bgt0_2" started, PID 208
[   11.947024] UBIFS (ubi0:2): recovery needed
[   12.278633] UBIFS (ubi0:2): recovery completed
[   12.278827] UBIFS (ubi0:2): UBIFS: mounted UBI device 0, volume 2, name "rootfs_data"
[   12.282036] UBIFS (ubi0:2): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   12.289914] UBIFS (ubi0:2): FS size: 17395712 bytes (16 MiB, 137 LEBs), max 147 LEBs, journal size 1015809 bytes (0 MiB, 7 LEBs)
[   12.299798] UBIFS (ubi0:2): reserved for root: 821641 bytes (802 KiB)
[   12.311436] UBIFS (ubi0:2): media format: w5/r0 (latest is w5/r0), UUID 1D85F6F2-01DB-4ED8-B2FB-DB7F6D7654EB, small LPT model
[   12.322201] mount_root: overlay filesystem has not been fully initialized yet
[   12.332219] mount_root: switching to ubifs overlay
[   12.348302] urandom-seed: Seed file not found (/etc/urandom.seed)
[   12.510187] qca8k-ipq4019 c000000.switch lan2: Link is Down
[   12.518488] procd: - early -
[   12.518711] procd: - watchdog -
[   13.158222] procd: - watchdog -
[   13.178810] procd: - ubus -
[   13.352567] procd: - init -
[   14.009044] kmodloader: loading kernel modules from /etc/modules.d/*
[   14.054651] usbcore: registered new interface driver cdc_wdm
[   14.055916] Loading modules backported from Linux version v6.12.6-0-ge9d65b48ce1a
[   14.059397] Backport generated by backports.git v6.1.110-1-35-g410656ef04d2
[   14.084103] usbcore: registered new interface driver usbserial_generic
[   14.084219] usbserial: USB Serial support registered for generic
[   14.375243] PPP generic driver version 2.4.2
[   14.376523] NET: Registered PF_PPPOX protocol family
[   14.380289] usbcore: registered new interface driver qmi_wwan
[   14.864279] urngd: v1.0.2 started.
[   15.697361] ath10k_ahb a000000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[   15.697433] ath10k_ahb a000000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   15.709264] ath10k_ahb a000000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b
[   15.858865] ath10k_ahb a000000.wifi: board_file api 2 bmi_id 0:20 crc32 2d972a4b
[   17.150582] ath10k_ahb a000000.wifi: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   17.150658] ath10k_ahb a000000.wifi: msdu-desc: 2500  skid: 32
[   17.199781] ath10k_ahb a000000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   17.200764] ath10k_ahb a000000.wifi: wmi print 'free: 53252 iram: 13432 sram: 35752'
[   17.347028] ath10k_ahb a000000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-nvmem max-sta 32 raw 0 hwcrypto 1
[   17.461848] ath: EEPROM regdomain: 0x0
[   17.461879] ath: EEPROM indicates default country code should be used
[   17.461886] ath: doing EEPROM country->regdmn map search
[   17.461897] ath: country maps to regdmn code: 0x3a
[   17.461906] ath: Country alpha2 being used: US
[   17.461914] ath: Regpair used: 0x3a
[   18.396541] ath10k_ahb a800000.wifi: qca4019 hw1.0 target 0x01000000 chip_id 0x003b00ff sub 0000:0000
[   18.396631] ath10k_ahb a800000.wifi: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 0
[   18.408559] ath10k_ahb a800000.wifi: firmware ver 10.4b-ct-4019-fW-13-5ae337bb1 api 5 features mfp,peer-flow-ctrl,txstatus-noack,wmi-10.x-CT,ratemask-CT,regdump-CT,txrate-CT,flush-all-CT,pingpong-CT,ch-regs-CT,nop-CT,set-special-CT,tx-rc-CT,cust-stats-CT,txrate2-CT,beacon-cb-CT,wmi-block-ack-CT,wmi-bcn-rc-CT crc32 6b2b5c5b
[   18.475807] ath10k_ahb a800000.wifi: board_file api 2 bmi_id 0:21 crc32 2d972a4b
[   19.767465] ath10k_ahb a800000.wifi: 10.4 wmi init: vdevs: 16  peers: 48  tid: 96
[   19.767542] ath10k_ahb a800000.wifi: msdu-desc: 2500  skid: 32
[   19.814539] ath10k_ahb a800000.wifi: wmi print 'P 48/48 V 16 K 144 PH 176 T 186  msdu-desc: 2500  sw-crypt: 0 ct-sta: 0'
[   19.815483] ath10k_ahb a800000.wifi: wmi print 'free: 53252 iram: 13432 sram: 35752'
[   19.952065] ath10k_ahb a800000.wifi: htt-ver 2.2 wmi-op 6 htt-op 4 cal pre-cal-nvmem max-sta 32 raw 0 hwcrypto 1
[   20.064842] ath: EEPROM regdomain: 0x0
[   20.064873] ath: EEPROM indicates default country code should be used
[   20.064881] ath: doing EEPROM country->regdmn map search
[   20.064891] ath: country maps to regdmn code: 0x3a
[   20.064900] ath: Country alpha2 being used: US
[   20.064909] ath: Regpair used: 0x3a
[   20.071592] usbcore: registered new interface driver option
[   20.071733] usbserial: USB Serial support registered for GSM modem (1-port)
[   20.076371] option 2-1:1.0: GSM modem (1-port) converter detected
[   20.083382] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0
[   20.093004] kmodloader: done loading kernel modules from /etc/modules.d/*
[   36.380904] ipqess-edma c080000.ethernet eth0: Link is Down
[   36.392327] ipqess-edma c080000.ethernet eth0: configuring for fixed/internal link mode
[   36.393403] ipqess-edma c080000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[   36.404883] qca8k-ipq4019 c000000.switch lan2: configuring for phy/psgmii link mode
[   36.409243] br-lan: port 1(lan2) entered blocking state
[   36.415287] br-lan: port 1(lan2) entered disabled state
[   36.420561] qca8k-ipq4019 c000000.switch lan2: entered allmulticast mode
[   36.425629] ipqess-edma c080000.ethernet eth0: entered allmulticast mode
[   36.433375] qca8k-ipq4019 c000000.switch lan2: entered promiscuous mode
[   36.457596] qca8k-ipq4019 c000000.switch lan3: configuring for phy/psgmii link mode
[   36.459469] br-lan: port 2(lan3) entered blocking state
[   36.464253] br-lan: port 2(lan3) entered disabled state
[   36.469401] qca8k-ipq4019 c000000.switch lan3: entered allmulticast mode
[   36.475396] qca8k-ipq4019 c000000.switch lan3: entered promiscuous mode
[   36.492639] qca8k-ipq4019 c000000.switch lan4: configuring for phy/psgmii link mode
[   36.494496] br-lan: port 3(lan4) entered blocking state
[   36.499175] br-lan: port 3(lan4) entered disabled state
[   36.504541] qca8k-ipq4019 c000000.switch lan4: entered allmulticast mode
[   36.510342] qca8k-ipq4019 c000000.switch lan4: entered promiscuous mode
[   36.528580] qca8k-ipq4019 c000000.switch wan: configuring for phy/psgmii link mode
[   39.530277] qca8k-ipq4019 c000000.switch lan2: Link is Up - 1Gbps/Full - flow control rx/tx
[   39.530403] br-lan: port 1(lan2) entered blocking state
[   39.537471] br-lan: port 1(lan2) entered forwarding state
[   39.610839] qca8k-ipq4019 c000000.switch wan: Link is Up - 1Gbps/Full - flow control rx/tx
[   40.570265] qca8k-ipq4019 c000000.switch lan2: Link is Down
[   40.570452] br-lan: port 1(lan2) entered disabled state
[   42.650310] qca8k-ipq4019 c000000.switch lan2: Link is Up - 1Gbps/Full - flow control rx/tx
[   42.650434] br-lan: port 1(lan2) entered blocking state
[   42.657524] br-lan: port 1(lan2) entered forwarding state
root@OpenWrt:~# 

Please show the output of cat /sys/kernel/debug/usb/devices

2 Likes

FWIW - consider ModemManager...

You're IMEI isn't lost on the modem, it's not being read correctly...

EDIT - see comment below - the modem may have crashed, and is waiting on a crashdump download via QC (or vendor supplied) tools...

root@OpenWrt:~# cat /sys/kernel/debug/usb/devices

T:  Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480  MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=01 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0002 Rev= 6.06
S:  Manufacturer=Linux 6.6.73 xhci-hcd
S:  Product=xHCI Host Controller
S:  SerialNumber=xhci-hcd.0.auto
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T:  Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=5000 MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 3.00 Cls=09(hub  ) Sub=00 Prot=03 MxPS= 9 #Cfgs=  1
P:  Vendor=1d6b ProdID=0003 Rev= 6.06
S:  Manufacturer=Linux 6.6.73 xhci-hcd
S:  Product=xHCI Host Controller
S:  SerialNumber=xhci-hcd.0.auto
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

T:  Bus=02 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#=  2 Spd=5000 MxCh= 0
D:  Ver= 3.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS= 9 #Cfgs=  1
P:  Vendor=19d2 ProdID=0076 Rev= 0.00
S:  Manufacturer=Qualcomm CDMA Technologies MSM
S:  Product=QUSB__BULK
C:* #Ifs= 1 Cfg#= 1 Atr=a0 MxPwr=  8mA
I:* If#= 0 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=option
E:  Ad=81(I) Atr=02(Bulk) MxPS=1024 Ivl=0ms
E:  Ad=01(O) Atr=02(Bulk) MxPS=1024 Ivl=0ms

T:  Bus=03 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480  MxCh= 1
B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=01 MxPS=64 #Cfgs=  1
P:  Vendor=1d6b ProdID=0002 Rev= 6.06
S:  Manufacturer=Linux 6.6.73 xhci-hcd
S:  Product=xHCI Host Controller
S:  SerialNumber=xhci-hcd.1.auto
C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms

root@OpenWrt:~# modemmanager --debug
-ash: modemmanager: not found
root@OpenWrt:~# ModemManager --debug
[3341]: <msg> [1746882769.292789] ModemManager (version 1.22.0) starting in system bus...
[3341]: <dbg> [1746882769.293043] [charsets] detecting platform iconv() support...
[3341]: <dbg> [1746882769.293200] [charsets]   UTF-8: iconv conversion to/from charset is supported
[3341]: <dbg> [1746882769.293335] [charsets]   UCS-2BE: iconv conversion to/from charset is supported
[3341]: <dbg> [1746882769.293457] [charsets]   ASCII: iconv conversion to/from charset is supported
[3341]: <dbg> [1746882769.293557] [charsets]   ISO8859-1: iconv conversion to/from charset is supported
[3341]: <dbg> [1746882769.293664] [charsets]   CP437: iconv conversion to/from charset is supported
[3341]: <dbg> [1746882769.293775] [charsets]   CP850: iconv conversion to/from charset is supported
[3341]: <dbg> [1746882769.293877] [charsets]   UTF-16BE: iconv conversion to/from charset is supported
[3341]: <dbg> [1746882769.306539] bus acquired, creating manager...
[3341]: <dbg> [1746882769.307716] [auth-provider] singleton created
[3341]: <dbg> [1746882769.308984] [filter] created
[3341]: <dbg> [1746882769.309195] [filter]   explicit allowlist:         yes
[3341]: <dbg> [1746882769.309339] [filter]   explicit blocklist:         yes
[3341]: <dbg> [1746882769.309469] [filter]   plugin allowlist:           yes
[3341]: <dbg> [1746882769.309608] [filter]   qrtr devices allowed:       yes
[3341]: <dbg> [1746882769.309743] [filter]   virtual devices forbidden:  yes
[3341]: <dbg> [1746882769.309870] [filter]   net devices allowed:        yes
[3341]: <dbg> [1746882769.310002] [filter]   usbmisc devices allowed:    yes
[3341]: <dbg> [1746882769.310133] [filter]   rpmsg devices allowed:      yes
[3341]: <dbg> [1746882769.310233] [filter]   wwan devices allowed:       yes
[3341]: <dbg> [1746882769.310319] [filter]   tty devices:
[3341]: <dbg> [1746882769.310750] [filter]       platform driver check:    yes
[3341]: <dbg> [1746882769.310856] [filter]       driver check:             yes
[3341]: <dbg> [1746882769.310962] [filter]       cdc-acm interface check:  yes
[3341]: <dbg> [1746882769.311054] [filter]       with net check:           yes
[3341]: <dbg> [1746882769.311144] [filter]       default:                  forbidden
[3341]: <dbg> [1746882769.317168] [plugin-manager] loaded builtin plugin 'zte'
[3341]: <dbg> [1746882769.317434] [filter] registered plugin allowlist vendor id: 19d2
[3341]: <dbg> [1746882769.317603] [plugin-manager] loaded builtin plugin 'x22x'
[3341]: <dbg> [1746882769.317758] [filter] registered plugin allowlist tag: ID_MM_X22X_TAGGED
[3341]: <dbg> [1746882769.317912] [filter] registered plugin allowlist vendor id: 1bbb
[3341]: <dbg> [1746882769.318036] [filter] registered plugin allowlist vendor id: 0b3c
[3341]: <dbg> [1746882769.318136] [plugin-manager] loaded builtin plugin 'wavecom'
[3341]: <dbg> [1746882769.318517] [filter] registered plugin allowlist vendor id: 114f
[3341]: <dbg> [1746882769.318615] [plugin-manager] loaded builtin plugin 'via'
[3341]: <dbg> [1746882769.318708] [plugin-manager] loaded builtin plugin 'u-blox'
[3341]: <dbg> [1746882769.318799] [filter] registered plugin allowlist vendor id: 1546
[3341]: <dbg> [1746882769.318889] [plugin-manager] loaded builtin plugin 'tp-link'
[3341]: <dbg> [1746882769.319006] [filter] registered plugin allowlist vendor id: 2357
[3341]: <dbg> [1746882769.319105] [plugin-manager] loaded builtin plugin 'thuraya'
[3341]: <dbg> [1746882769.319214] [filter] registered plugin allowlist vendor id: 1a26
[3341]: <dbg> [1746882769.319322] [plugin-manager] loaded builtin plugin 'telit'
[3341]: <dbg> [1746882769.319423] [filter] registered plugin allowlist vendor id: 1bc7
[3341]: <dbg> [1746882769.319523] [filter] registered plugin allowlist subsystem vendor id: 17cb:1c5d
[3341]: <dbg> [1746882769.319829] [plugin-manager] loaded builtin plugin 'simtech'
[3341]: <dbg> [1746882769.319989] [filter] registered plugin allowlist vendor id: 1e0e
[3341]: <dbg> [1746882769.320131] [plugin-manager] loaded builtin plugin 'sierra-legacy'
[3341]: <dbg> [1746882769.320275] [plugin-manager] loaded builtin plugin 'sierra'
[3341]: <dbg> [1746882769.320423] [filter] registered plugin allowlist vendor id: 1199
[3341]: <dbg> [1746882769.320540] [plugin-manager] loaded builtin plugin 'samsung'
[3341]: <dbg> [1746882769.320645] [filter] registered plugin allowlist product id: 04e8:6872
[3341]: <dbg> [1746882769.321097] [filter] registered plugin allowlist product id: 04e8:6906
[3341]: <dbg> [1746882769.321225] [plugin-manager] loaded builtin plugin 'quectel'
[3341]: <dbg> [1746882769.321328] [filter] registered plugin allowlist vendor id: 2c7c
[3341]: <dbg> [1746882769.321419] [filter] registered plugin allowlist vendor id: 1eac
[3341]: <dbg> [1746882769.321506] [plugin-manager] loaded builtin plugin 'qcom-soc'
[3341]: <dbg> [1746882769.321613] [filter] registered plugin allowlist tag: ID_MM_QCOM_SOC
[3341]: <dbg> [1746882769.321705] [plugin-manager] loaded builtin plugin 'pantech'
[3341]: <dbg> [1746882769.321793] [filter] registered plugin allowlist vendor id: 106c
[3341]: <dbg> [1746882769.321877] [plugin-manager] loaded builtin plugin 'option-hso'
[3341]: <dbg> [1746882769.321970] [plugin-manager] loaded builtin plugin 'option'
[3341]: <dbg> [1746882769.322058] [filter] registered plugin allowlist vendor id: 0af0
[3341]: <dbg> [1746882769.322148] [filter] registered plugin allowlist vendor id: 1931
[3341]: <dbg> [1746882769.322257] [plugin-manager] loaded builtin plugin 'novatel-lte'
[3341]: <dbg> [1746882769.322361] [filter] registered plugin allowlist product id: 1410:9010
[3341]: <dbg> [1746882769.322461] [plugin-manager] loaded builtin plugin 'novatel'
[3341]: <dbg> [1746882769.322584] [filter] registered plugin allowlist vendor id: 1410
[3341]: <dbg> [1746882769.322690] [plugin-manager] loaded builtin plugin 'nokia-icera'
[3341]: <dbg> [1746882769.322789] [filter] registered plugin allowlist vendor id: 0421
[3341]: <dbg> [1746882769.323169] [plugin-manager] loaded builtin plugin 'nokia'
[3341]: <dbg> [1746882769.323317] [plugin-manager] loaded builtin plugin 'motorola'
[3341]: <dbg> [1746882769.323427] [filter] registered plugin allowlist tag: ID_MM_MTK_TAGGED
[3341]: <dbg> [1746882769.323753] [plugin-manager] loaded builtin plugin 'motorola'
[3341]: <dbg> [1746882769.323853] [filter] registered plugin allowlist product id: 22b8:3802
[3341]: <dbg> [1746882769.323947] [filter] registered plugin allowlist product id: 22b8:4902
[3341]: <dbg> [1746882769.324188] [plugin-manager] loaded builtin plugin 'ericsson-mbm'
[3341]: <dbg> [1746882769.324309] [filter] registered plugin allowlist tag: ID_MM_ERICSSON_MBM
[3341]: <dbg> [1746882769.324427] [plugin-manager] loaded builtin plugin 'longcheer'
[3341]: <dbg> [1746882769.324533] [filter] registered plugin allowlist tag: ID_MM_LONGCHEER_TAGGED
[3341]: <dbg> [1746882769.324638] [filter] registered plugin allowlist vendor id: 1c9e
[3341]: <dbg> [1746882769.324957] [plugin-manager] loaded builtin plugin 'linktop'
[3341]: <dbg> [1746882769.325120] [filter] registered plugin allowlist vendor id: 230d
[3341]: <dbg> [1746882769.325265] [plugin-manager] loaded builtin plugin 'iridium'
[3341]: <dbg> [1746882769.325414] [filter] registered plugin allowlist vendor id: 1edd
[3341]: <dbg> [1746882769.325558] [plugin-manager] loaded builtin plugin 'Intel'
[3341]: <dbg> [1746882769.325680] [filter] registered plugin allowlist vendor id: 8086
[3341]: <dbg> [1746882769.325784] [plugin-manager] loaded builtin plugin 'huawei'
[3341]: <dbg> [1746882769.326253] [filter] registered plugin allowlist vendor id: 12d1
[3341]: <dbg> [1746882769.326372] [plugin-manager] loaded builtin plugin 'haier'
[3341]: <dbg> [1746882769.326498] [filter] registered plugin allowlist vendor id: 201e
[3341]: <dbg> [1746882769.326604] [plugin-manager] loaded builtin plugin 'gosuncn'
[3341]: <dbg> [1746882769.326707] [filter] registered plugin allowlist vendor id: 305a
[3341]: <dbg> [1746882769.326812] [plugin-manager] loaded builtin plugin 'generic'
[3341]: <dbg> [1746882769.327119] [plugin-manager] loaded builtin plugin 'foxconn'
[3341]: <dbg> [1746882769.327466] [filter] registered plugin allowlist vendor id: 0489
[3341]: <dbg> [1746882769.327654] [filter] registered plugin allowlist vendor id: 105b
[3341]: <dbg> [1746882769.327775] [plugin-manager] loaded builtin plugin 'fibocom'
[3341]: <dbg> [1746882769.327886] [filter] registered plugin allowlist vendor id: 2cb7
[3341]: <dbg> [1746882769.328192] [filter] registered plugin allowlist vendor id: 1782
[3341]: <dbg> [1746882769.328284] [plugin-manager] loaded builtin plugin 'd-link'
[3341]: <dbg> [1746882769.328385] [filter] registered plugin allowlist vendor id: 2001
[3341]: <dbg> [1746882769.328471] [plugin-manager] loaded builtin plugin 'dell'
[3341]: <dbg> [1746882769.328562] [filter] registered plugin allowlist vendor id: 413c
[3341]: <dbg> [1746882769.328647] [plugin-manager] loaded builtin plugin 'cinterion'
[3341]: <dbg> [1746882769.328740] [filter] registered plugin allowlist vendor id: 1e2d
[3341]: <dbg> [1746882769.328849] [filter] registered plugin allowlist vendor id: 0681
[3341]: <dbg> [1746882769.328942] [filter] registered plugin allowlist vendor id: 1269
[3341]: <dbg> [1746882769.329042] [plugin-manager] loaded builtin plugin 'broadmobi'
[3341]: <dbg> [1746882769.329158] [filter] registered plugin allowlist vendor id: 2020
[3341]: <dbg> [1746882769.329260] [plugin-manager] loaded builtin plugin 'anydata'
[3341]: <dbg> [1746882769.329549] [filter] registered plugin allowlist vendor id: 16d5
[3341]: <dbg> [1746882769.329680] [plugin-manager] loaded builtin plugin 'altair-lte'
[3341]: <dbg> [1746882769.329792] [filter] registered plugin allowlist product id: 216f:0047
[3341]: <dbg> [1746882769.330243] [plugin-manager] successfully loaded 40 plugins registering 6 subsystems: tty, net, usbmisc, wwan, rpmsg, qrtr
[3341]: <wrn> [1746882769.401463] could not acquire the 'org.freedesktop.ModemManager1' service name
[3341]: <dbg> [1746882769.401663] [base-manager] stopping connection in object manager server
[3341]: <msg> [1746882769.405269] ModemManager is shut down
[3341]: <dbg> [1746882769.405491] [auth-provider] singleton disposed

Regarding the IMEI, it only showed 0000.. in the framework after the flash of the new firmware. now the framework does not recognize the unit anymore, as the ZTE partitions were deleted.

Feeling a little lost as to how to get the modem up and running, to try upgrading it to B12. the FOTA instructions fails as i don't have ttyUSB1 to adb transfer the delta file and signatures, and issue the at fota commands.
I rsynced the files to openwrt in the tmp folder, but cant adb it furter from openwrt to the modems /cache/.

Something bad has happened to the firmware of this modem. Did this just happen by itself? Or did you try to do something to the modem firmware?

Anyway, it is dead as it is now. The missing IMEI is simply a symptom. You might be able to save the modem using the instructions at

but you'll also need the tools from there and some way to run them on a host connected to that modem.

2 Likes

It might be just crashed - it's been a while since I've worked on QC MSM's, but one characteristic is that if there is something that has caused the firmware to halt, it's waiting to connect to one of their tools (QXDM for example) to collect a crash dump.

1 Like

Had a go at QXDM5, got it installed in a VM, and tried to get it to connect to my serial interface, however it would not let me connect. Serial is connected to X8 on the main board, don't have a reader to plug the modem directly to computer..
A step by step would be useful to see if i have done something wrong.

The 5G modem usually will have at least two ports mapped out to UART's - this is for the regular data connection, and a third end-point for UARTDM - that's the port that QXDM has to be connected to.

(there's likely also a USB NDIS endpoint that QMI/MBIM connect as ethernet, but that is not relevant right now)

The qualcomm tools package should also include the Windows drivers for all of these endpoints, the installer for QXDM may not directly install them, so there is usually a driver installer as a supplemental package.

Here's where it gets good - you have to be connected to the UARTDM before the device is powered up - and once the modem powers up, it'll see the QXDM, and start doing it's thing (e.g. configure the interface inside the modem, set the approproate logmask, etc).

Do you think those 3 points are the UARTDM? (alt="Picture from the wiki for MF286D, mPCIe board, arrow pointing to the 3 testpoints inside the RF shield")


Do I connect my serial interface here?
Second problem is, the QXDM won't let me connect to my serial interface, maybe they have a proprietary interface? Mine is a FTDI 1412-G chip.. else, there is a problem with the software or licenses, preventing me to connect to it.

Those test points could be anything...

Again in my experience, all of the endpoints are over USB, but enumerated as ttyMSM*...