Hi, I installed OpenWRT successfully on the TL-MR6400 v4, but the LTE module has a problem. I added an interface with QMI Cellular and installed https://github.com/mrhaav/openwrt uqmi replacement.

My log says:

root@OpenWrt:~# logread | grep LTE Mon Nov 21 22:18:37 2022 daemon.notice netifd: Interface 'LTE' is setting up now Mon Nov 21 22:18:50 2022 daemon.notice netifd: LTE (2075): Waiting for modem to initiate Mon Nov 21 22:18:53 2022 daemon.notice netifd: LTE (2075): PINcode disabled Mon Nov 21 22:18:53 2022 daemon.notice netifd: LTE (2075): Data format set to raw-ip Mon Nov 21 22:18:53 2022 daemon.notice netifd: LTE (2075): Default profile: 1 Mon Nov 21 22:18:53 2022 daemon.notice netifd: LTE (2075): Airplane mode off Mon Nov 21 22:20:51 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped) Mon Nov 21 22:20:51 2022 daemon.notice netifd: LTE (2075): Failed to parse message data Mon Nov 21 22:20:51 2022 daemon.notice netifd: LTE (2075): on Mon Nov 21 22:20:53 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped) Mon Nov 21 22:20:53 2022 daemon.notice netifd: LTE (2075): Failed to parse message data Mon Nov 21 22:20:53 2022 daemon.notice netifd: LTE (2075): on Mon Nov 21 22:20:55 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped) Mon Nov 21 22:20:55 2022 daemon.notice netifd: LTE (2075): Failed to parse message data Mon Nov 21 22:20:55 2022 daemon.notice netifd: LTE (2075): on Mon Nov 21 22:20:57 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped) Mon Nov 21 22:20:57 2022 daemon.notice netifd: LTE (2075): Failed to parse message data Mon Nov 21 22:20:57 2022 daemon.notice netifd: LTE (2075): on Mon Nov 21 22:21:01 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped) Mon Nov 21 22:21:01 2022 daemon.notice netifd: LTE (2075): Failed to parse message data Mon Nov 21 22:21:01 2022 daemon.notice netifd: LTE (2075): on Mon Nov 21 22:21:04 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped) Mon Nov 21 22:21:04 2022 daemon.notice netifd: LTE (2075): Failed to parse message data Mon Nov 21 22:21:04 2022 daemon.notice netifd: LTE (2075): on Mon Nov 21 22:21:07 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped) Mon Nov 21 22:21:07 2022 daemon.notice netifd: LTE (2075): Failed to parse message data Mon Nov 21 22:21:07 2022 daemon.notice netifd: LTE (2075): on Mon Nov 21 22:21:10 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped) Mon Nov 21 22:21:10 2022 daemon.notice netifd: LTE (2075): Failed to parse message data Mon Nov 21 22:21:10 2022 daemon.notice netifd: LTE (2075): on Mon Nov 21 22:21:16 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped) Mon Nov 21 22:21:16 2022 daemon.notice netifd: LTE (2075): Failed to parse message data Mon Nov 21 22:21:16 2022 daemon.notice netifd: LTE (2075): on Mon Nov 21 22:21:22 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped) Mon Nov 21 22:21:22 2022 daemon.notice netifd: LTE (2075): Failed to parse message data Mon Nov 21 22:21:22 2022 daemon.notice netifd: LTE (2075): on root@OpenWrt:~# root@OpenWrt:~# uqmi -d /dev/cdc-wdm0 --get-data-status "connected" root@OpenWrt:~# root@OpenWrt:~# uci show network.LTE network.LTE=interface network.LTE.proto='qmi' network.LTE.device='/dev/cdc-wdm0' network.LTE.auth='none' network.LTE.pdptype='ipv4v6' network.LTE.apn='internet' network.LTE.default_profile='1' root@OpenWrt:~#

Any idea?

Thanks, Ingo

Mon Nov 21 22:20:51 2022 daemon.notice netifd: LTE (2075): Segmentation fault (core dumped)
This is the issue, clearly printed.
However, the reason for this is not obvious. I suggest, you first use complete official openwrt, before trying some modified stuff. Which modem are you using ? I have MC7455 and various EC25 up and running using QMI from official openwrt (22.03.02)

Hi, I followed the guideline here: https://openwrt.org/toh/tp-link/tl-mr6400_v4 and first installed the version openwrt-22.03.2-ramips-mt76x8-tplink_tl-mr6400-v4-squashfs-tftp-recovery.bin. After that I installed luci-proto-qmi. After creating the interface "LTE" I recognized that it did not connect, so I had a little search and found your repository, which I installed. How can I check the uqmi version?

Hi, I also installed openwrt 22.03.2 and tried it only with luci-proto-wmi without success. The hardware is:

  • MediaTek MT7628N SoC, I do not find anything about the modem, but a picture of the mainboard:
    https://openwrt.org/_media/media/tplink/tl-mr6400/tl-mr6400-v4_pcb.png?cache=

    How can I get more infos about the LTE module?

    Thanks a lot for your help and fast responses, guys!

    All the best, Ingo

    root@OpenWrt:~# cat /sys/kernel/debug/usb/devices
    T:  Bus=01 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=480  MxCh= 1
    B:  Alloc=  0/800 us ( 0%), #Int=  0, #Iso=  0
    D:  Ver= 2.00 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
    P:  Vendor=1d6b ProdID=0002 Rev= 5.10
    S:  Manufacturer=Linux 5.10.146 ehci_hcd
    S:  Product=EHCI Host Controller
    S:  SerialNumber=101c0000.ehci
    C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
    I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
    E:  Ad=81(I) Atr=03(Int.) MxPS=   4 Ivl=256ms
    T:  Bus=01 Lev=01 Prnt=01 Port=00 Cnt=01 Dev#=  2 Spd=480  MxCh= 0
    D:  Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
    P:  Vendor=05c6 ProdID=9025 Rev= 3.18
    S:  Manufacturer=Android
    S:  Product=Android
    S:  SerialNumber=484c3a85
    C:* #Ifs= 6 Cfg#= 1 Atr=a0 MxPwr=500mA
    I:* If#= 0 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
    E:  Ad=81(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
    E:  Ad=01(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
    I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=42 Prot=01 Driver=(none)
    E:  Ad=02(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
    E:  Ad=82(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
    I:* If#= 2 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=(none)
    E:  Ad=84(I) Atr=03(Int.) MxPS=  10 Ivl=32ms
    E:  Ad=83(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
    E:  Ad=03(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
    I:* If#= 3 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=00 Prot=00 Driver=(none)
    E:  Ad=86(I) Atr=03(Int.) MxPS=  10 Ivl=32ms
    E:  Ad=85(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
    E:  Ad=04(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
    I:* If#= 4 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=qmi_wwan
    E:  Ad=88(I) Atr=03(Int.) MxPS=   8 Ivl=32ms
    E:  Ad=87(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
    E:  Ad=05(O) Atr=02(Bulk) MxPS= 512 Ivl=0ms
    I:* If#= 5 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=(none)
    E:  Ad=89(I) Atr=02(Bulk) MxPS= 512 Ivl=0ms
    E:  Ad=06(O) Atr=02(Bulk) MxPS= 512 Ivl=125us
    T:  Bus=02 Lev=00 Prnt=00 Port=00 Cnt=00 Dev#=  1 Spd=12   MxCh= 1
    B:  Alloc=  0/900 us ( 0%), #Int=  0, #Iso=  0
    D:  Ver= 1.10 Cls=09(hub  ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
    P:  Vendor=1d6b ProdID=0001 Rev= 5.10
    S:  Manufacturer=Linux 5.10.146 ohci_hcd
    S:  Product=Generic Platform OHCI controller
    S:  SerialNumber=101c1000.ohci
    C:* #Ifs= 1 Cfg#= 1 Atr=e0 MxPwr=  0mA
    I:* If#= 0 Alt= 0 #EPs= 1 Cls=09(hub  ) Sub=00 Prot=00 Driver=hub
    E:  Ad=81(I) Atr=03(Int.) MxPS=   2 Ivl=255ms
    root@OpenWrt:~#
    

    LSUSB shows:

    root@OpenWrt:~# lsusb
    Bus 002 Device 001: ID 1d6b:0001 Linux 5.10.146 ohci_hcd Generic Platform OHCI controller
    Bus 001 Device 002: ID 05c6:9025 Android Android
    Bus 001 Device 001: ID 1d6b:0002 Linux 5.10.146 ehci_hcd EHCI Host Controller
    root@OpenWrt:~# lsusb -v -s 001:002
    Bus 001 Device 002: ID 05c6:9025 Android Android
    Device Descriptor:
      bLength                18
      bDescriptorType         1
      bcdUSB               2.00
      bDeviceClass            0
      bDeviceSubClass         0
      bDeviceProtocol         0
      bMaxPacketSize0        64
      idVendor           0x05c6
      idProduct          0x9025
      bcdDevice            3.18
      iManufacturer           1 Android
      iProduct                2 Android
      iSerial                 3 484c3a85
      bNumConfigurations      1
      Configuration Descriptor:
        bLength                 9
        bDescriptorType         2
        wTotalLength       0x00ce
        bNumInterfaces          6
        bConfigurationValue     1
        iConfiguration          0
        bmAttributes         0xa0
          (Bus Powered)
          Remote Wakeup
        MaxPower              500mA
        Interface Descriptor:
          bLength                 9
          bDescriptorType         4
          bInterfaceNumber        0
          bAlternateSetting       0
          bNumEndpoints           2
          bInterfaceClass       255
          bInterfaceSubClass    255
          bInterfaceProtocol    255
          iInterface              0
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x81  EP 1 IN
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0200  1x 512 bytes
            bInterval               0
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x01  EP 1 OUT
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0200  1x 512 bytes
            bInterval               0
        Interface Descriptor:
          bLength                 9
          bDescriptorType         4
          bInterfaceNumber        1
          bAlternateSetting       0
          bNumEndpoints           2
          bInterfaceClass       255
          bInterfaceSubClass     66
          bInterfaceProtocol      1
          iInterface              6 ADB Interface
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x02  EP 2 OUT
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0200  1x 512 bytes
            bInterval               0
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x82  EP 2 IN
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0200  1x 512 bytes
            bInterval               0
        Interface Descriptor:
          bLength                 9
          bDescriptorType         4
          bInterfaceNumber        2
          bAlternateSetting       0
          bNumEndpoints           3
          bInterfaceClass       255
          bInterfaceSubClass      0
          bInterfaceProtocol      0
          iInterface              0
          ** UNRECOGNIZED:  05 24 00 10 01
          ** UNRECOGNIZED:  05 24 01 00 00
          ** UNRECOGNIZED:  04 24 02 02
          ** UNRECOGNIZED:  05 24 06 00 00
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x84  EP 4 IN
            bmAttributes            3
              Transfer Type            Interrupt
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x000a  1x 10 bytes
            bInterval               9
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x83  EP 3 IN
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0200  1x 512 bytes
            bInterval               0
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x03  EP 3 OUT
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0200  1x 512 bytes
            bInterval               0
        Interface Descriptor:
          bLength                 9
          bDescriptorType         4
          bInterfaceNumber        3
          bAlternateSetting       0
          bNumEndpoints           3
          bInterfaceClass       255
          bInterfaceSubClass      0
          bInterfaceProtocol      0
          iInterface              0
          ** UNRECOGNIZED:  05 24 00 10 01
          ** UNRECOGNIZED:  05 24 01 00 00
          ** UNRECOGNIZED:  04 24 02 02
          ** UNRECOGNIZED:  05 24 06 00 00
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x86  EP 6 IN
            bmAttributes            3
              Transfer Type            Interrupt
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x000a  1x 10 bytes
            bInterval               9
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x85  EP 5 IN
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0200  1x 512 bytes
            bInterval               0
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x04  EP 4 OUT
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0200  1x 512 bytes
            bInterval               0
        Interface Descriptor:
          bLength                 9
          bDescriptorType         4
          bInterfaceNumber        4
          bAlternateSetting       0
          bNumEndpoints           3
          bInterfaceClass       255
          bInterfaceSubClass    255
          bInterfaceProtocol    255
          iInterface              0
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x88  EP 8 IN
            bmAttributes            3
              Transfer Type            Interrupt
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0008  1x 8 bytes
            bInterval               9
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x87  EP 7 IN
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0200  1x 512 bytes
            bInterval               0
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x05  EP 5 OUT
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0200  1x 512 bytes
            bInterval               0
        Interface Descriptor:
          bLength                 9
          bDescriptorType         4
          bInterfaceNumber        5
          bAlternateSetting       0
          bNumEndpoints           2
          bInterfaceClass         8
          bInterfaceSubClass      6
          bInterfaceProtocol     80
          iInterface              4 Mass Storage
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x89  EP 9 IN
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0200  1x 512 bytes
            bInterval               0
          Endpoint Descriptor:
            bLength                 7
            bDescriptorType         5
            bEndpointAddress     0x06  EP 6 OUT
            bmAttributes            2
              Transfer Type            Bulk
              Synch Type               None
              Usage Type               Data
            wMaxPacketSize     0x0200  1x 512 bytes
            bInterval               1
    Device Qualifier (for other device speed):
      bLength                10
      bDescriptorType         6
      bcdUSB               2.00
      bDeviceClass            0
      bDeviceSubClass         0
      bDeviceProtocol         0
      bMaxPacketSize0        64
      bNumConfigurations      1
    Device Status:     0x0000
      (Bus Powered)
    root@OpenWrt:~#
    

    But I think the modem is somewhere else?

    root@OpenWrt:~# dmesg [ 0.000000] Linux version 5.10.146 (builder@buildhost) (mipsel-openwrt-linux-musl-gcc (OpenWrt GCC 11.2.0 r19803-9a599fee93) 11.2.0, GNU ld (GNU Binutils) 2.37) #0 Fri Oct 14 22:44:41 2022 [ 0.000000] Board has DDR2 [ 0.000000] Analog PMU set to hw control [ 0.000000] Digital PMU set to hw control [ 0.000000] SoC Type: MediaTek MT7628AN ver:1 eco:2 [ 0.000000] printk: bootconsole [early0] enabled [ 0.000000] CPU0 revision is: 00019655 (MIPS 24KEc) [ 0.000000] MIPS: machine is TP-Link TL-MR6400 v4 [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 bytes [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000003ffffff] [ 0.000000] On node 0 totalpages: 16384 [ 0.000000] Normal zone: 144 pages used for memmap [ 0.000000] Normal zone: 0 pages reserved [ 0.000000] Normal zone: 16384 pages, LIFO batch:3 [ 0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768 [ 0.000000] pcpu-alloc: [0] 0 [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 16240 [ 0.000000] Kernel command line: console=ttyS0,115200 rootfstype=squashfs,jffs2 [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes, linear) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes, linear) [ 0.000000] Writing ErrCtl register=0000cba3 [ 0.000000] Readback ErrCtl register=0000cba3 [ 0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off [ 0.000000] Memory: 56416K/65536K available (5669K kernel code, 616K rwdata, 692K rodata, 1204K init, 209K bss, 9120K reserved, 0K cma-reserved) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS: 256 [ 0.000000] intc: using register map from devicetree [ 0.000000] CPU Clock: 580MHz [ 0.000000] timer_probe: no matching timers found [ 0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 6590553264 ns [ 0.000010] sched_clock: 32 bits at 290MHz, resolution 3ns, wraps every 7405115902ns [ 0.007644] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216) [ 0.073572] pid_max: default: 32768 minimum: 301 [ 0.078207] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.085226] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.095102] dyndbg: Ignore empty _ddebug table in a CONFIG_DYNAMIC_DEBUG_CORE build [ 0.106455] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 0.115976] futex hash table entries: 256 (order: -1, 3072 bytes, linear) [ 0.122620] pinctrl core: initialized pinctrl subsystem [ 0.132659] NET: Registered protocol family 16 [ 0.137792] thermal_sys: Registered thermal governor 'step_wise' [ 0.200236] clocksource: Switched to clocksource MIPS [ 0.212326] NET: Registered protocol family 2 [ 0.216782] IP idents hash table entries: 2048 (order: 2, 16384 bytes, linear) [ 0.224723] tcp_listen_portaddr_hash hash table entries: 512 (order: 0, 4096 bytes, linear) [ 0.232890] TCP established hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.240271] TCP bind hash table entries: 1024 (order: 0, 4096 bytes, linear) [ 0.247050] TCP: Hash tables configured (established 1024 bind 1024) [ 0.253353] UDP hash table entries: 256 (order: 0, 4096 bytes, linear) [ 0.259637] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes, linear) [ 0.266749] NET: Registered protocol family 1 [ 0.270989] PCI: CLS 0 bytes, default 32 [ 0.282329] workingset: timestamp_bits=14 max_order=14 bucket_order=0 [ 0.293865] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.299446] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.311273] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252) [ 0.320971] mt7621_gpio 10000600.gpio: registering 32 gpios [ 0.326556] mt7621_gpio 10000600.gpio: registering 32 gpios [ 0.332261] mt7621_gpio 10000600.gpio: registering 32 gpios [ 0.337894] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled [ 0.346776] printk: console [ttyS0] disabled [ 0.351015] 10000c00.uartlite: ttyS0 at MMIO 0x10000c00 (irq = 28, base_baud = 2500000) is a 16550A [ 0.359729] printk: console [ttyS0] enabled [ 0.368162] printk: bootconsole [early0] disabled [ 0.379139] spi-mt7621 10000b00.spi: sys_freq: 193333333 [ 0.404009] spi-nor spi0.0: s25fl064k (8192 Kbytes) [ 0.409027] 4 fixed-partitions partitions found on MTD device spi0.0 [ 0.415601] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions [ 0.423054] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions [ 0.430881] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions [ 0.438316] OF: Bad cell count for /palmbus@10000000/spi@b00/flash@0/partitions [ 0.446396] Creating 4 MTD partitions on "spi0.0": [ 0.451332] 0x000000000000-0x000000020000 : "boot" [ 0.460123] 0x000000020000-0x0000007c0000 : "firmware" [ 0.467173] 2 tplink-fw partitions found on MTD device firmware [ 0.473285] Creating 2 MTD partitions on "firmware": [ 0.478327] 0x000000000000-0x0000002184f5 : "kernel" [ 0.483371] mtd: partition "kernel" doesn't end on an erase/write block -- force read-only [ 0.494802] 0x0000002184f8-0x0000007a0000 : "rootfs" [ 0.499857] mtd: partition "rootfs" doesn't start on an erase/write block boundary -- force read-only [ 0.510439] mtd: device 3 (rootfs) set to be root filesystem [ 0.517336] 1 squashfs-split partitions found on MTD device rootfs [ 0.523704] 0x0000005c0000-0x0000007a0000 : "rootfs_data" [ 0.530525] 0x0000007c0000-0x0000007d0000 : "config" [ 0.538523] 0x0000007d0000-0x000000800000 : "factory" [ 0.598702] rt3050-esw 10110000.esw: mediatek esw at 0xb0110000, irq 25 initialized [ 0.607383] mtk_soc_eth 10100000.ethernet eth0: mediatek frame engine at 0xb0100000, irq 5 [ 0.617699] NET: Registered protocol family 10 [ 0.627983] Segment Routing with IPv6 [ 0.631924] NET: Registered protocol family 17 [ 0.636526] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. [ 0.649704] 8021q: 802.1Q VLAN Support v1.8 [ 0.671292] VFS: Mounted root (squashfs filesystem) readonly on device 31:3. [ 0.685249] Freeing unused kernel memory: 1204K [ 0.689844] This architecture does not have kernel memory protection. [ 0.696414] Run /sbin/init as init process [ 0.700590] with arguments: [ 0.700596] /sbin/init [ 0.700600] with environment: [ 0.700606] HOME=/ [ 0.700610] TERM=linux [ 1.730784] init: Console is alive [ 1.734843] init: - watchdog - [ 3.428598] kmodloader: loading kernel modules from /etc/modules-boot.d/* [ 3.606587] usbcore: registered new interface driver usbfs [ 3.612341] usbcore: registered new interface driver hub [ 3.617825] usbcore: registered new device driver usb [ 3.631715] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 3.641659] ehci-fsl: Freescale EHCI Host controller driver [ 3.649270] ehci-platform: EHCI generic platform driver [ 3.665105] phy phy-10120000.usbphy.0: remote usb device wakeup disabled [ 3.671921] phy phy-10120000.usbphy.0: UTMI 16bit 30MHz [ 3.677218] ehci-platform 101c0000.ehci: EHCI Host Controller [ 3.683083] ehci-platform 101c0000.ehci: new USB bus registered, assigned bus number 1 [ 3.691272] ehci-platform 101c0000.ehci: irq 26, io mem 0x101c0000 [ 3.720260] ehci-platform 101c0000.ehci: USB 2.0 started, EHCI 1.00 [ 3.727697] hub 1-0:1.0: USB hub found [ 3.732547] hub 1-0:1.0: 1 port detected [ 3.744857] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 3.752914] ohci-platform: OHCI generic platform driver [ 3.758621] ohci-platform 101c1000.ohci: Generic Platform OHCI controller [ 3.765623] ohci-platform 101c1000.ohci: new USB bus registered, assigned bus number 2 [ 3.773815] ohci-platform 101c1000.ohci: irq 26, io mem 0x101c1000 [ 3.845312] hub 2-0:1.0: USB hub found [ 3.850031] hub 2-0:1.0: 1 port detected [ 3.864152] kmodloader: done loading kernel modules from /etc/modules-boot.d/* [ 3.882200] init: - preinit - [ 4.789359] rt3050-esw 10110000.esw: port 1 link up [ 5.370350] usb 1-1: new high-speed USB device number 2 using ehci-platform [ 5.598473] random: procd: uninitialized urandom read (4 bytes read) [ 5.767889] random: jshn: uninitialized urandom read (4 bytes read) [ 5.885462] random: jshn: uninitialized urandom read (4 bytes read) [ 6.788640] rt3050-esw 10110000.esw: port 1 link down [ 11.145255] rt3050-esw 10110000.esw: port 1 link up [ 11.150490] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 11.157446] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.1: link becomes ready [ 11.535410] jffs2: notice: (430) jffs2_build_xattr_subsystem: complete building xattr subsystem, 175 of xdatum (108 unchecked, 6 orphan) and 189 of xref (8 dead, 0 orphan) found. [ 11.556795] mount_root: switching to jffs2 overlay [ 11.575766] overlayfs: upper fs does not support tmpfile. [ 11.591483] urandom-seed: Seeding with /etc/urandom.seed [ 11.828483] procd: - early - [ 11.831986] procd: - watchdog - [ 12.769859] procd: - watchdog - [ 12.777636] procd: - ubus - [ 13.195708] random: ubusd: uninitialized urandom read (4 bytes read) [ 13.215961] random: ubusd: uninitialized urandom read (4 bytes read) [ 13.233415] random: ubusd: uninitialized urandom read (4 bytes read) [ 13.252724] procd: - init - [ 14.324020] random: ubusd: uninitialized urandom read (4 bytes read) [ 14.331765] random: ubus: uninitialized urandom read (4 bytes read) [ 14.509455] random: jsonfilter: uninitialized urandom read (4 bytes read) [ 15.352378] random: jshn: uninitialized urandom read (4 bytes read) [ 15.766524] kmodloader: loading kernel modules from /etc/modules.d/* [ 16.684636] urngd: v1.0.2 started. [ 16.729497] usbcore: registered new interface driver cdc_wdm [ 16.751190] Loading modules backported from Linux version v5.15.58-0-g7d8048d4e064 [ 16.758887] Backport generated by backports.git v5.15.58-1-0-g42a95ce7 [ 16.833525] usbcore: registered new interface driver usbserial_generic [ 16.840321] usbserial: USB Serial support registered for generic [ 17.113802] mt76_wmac 10300000.wmac: ASIC revision: 76280001 [ 17.247031] random: crng init done [ 17.250560] random: 46 urandom warning(s) missed due to ratelimiting [ 18.153567] mt76_wmac 10300000.wmac: Firmware Version: 20151201 [ 18.159596] mt76_wmac 10300000.wmac: Build Time: 20151201183641 [ 18.180241] mt76_wmac 10300000.wmac: firmware init done [ 18.349049] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht' [ 18.628194] PPP generic driver version 2.4.2 [ 18.637847] NET: Registered protocol family 24 [ 18.647310] qmi_wwan 1-1:1.4: cdc-wdm0: USB WDM device [ 18.661389] qmi_wwan 1-1:1.4 wwan0: register 'qmi_wwan' at usb-101c0000.ehci-1, WWAN/QMI device, 2e:07:2a:d1:eb:9c [ 18.672278] usbcore: registered new interface driver qmi_wwan [ 18.714733] usbcore: registered new interface driver option [ 18.720588] usbserial: USB Serial support registered for GSM modem (1-port) [ 18.756555] kmodloader: done loading kernel modules from /etc/modules.d/* [ 32.748642] rt3050-esw 10110000.esw: port 1 link down [ 36.889201] rt3050-esw 10110000.esw: port 1 link up [ 42.858618] br-lan: port 1(eth0.1) entered blocking state [ 42.864366] br-lan: port 1(eth0.1) entered disabled state [ 42.870303] device eth0.1 entered promiscuous mode [ 42.875174] device eth0 entered promiscuous mode [ 42.907028] br-lan: port 1(eth0.1) entered blocking state [ 42.912594] br-lan: port 1(eth0.1) entered forwarding state [ 43.860907] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready [ 51.497823] wlan0: authenticate with 2c:91:ab:4c:8c:86 [ 51.511150] wlan0: send auth to 2c:91:ab:4c:8c:86 (try 1/3) [ 52.111097] wlan0: authenticate with 2c:91:ab:4c:8c:86 [ 52.116368] wlan0: send auth to 2c:91:ab:4c:8c:86 (try 1/3) [ 52.126995] wlan0: authenticated [ 52.140328] wlan0: associate with 2c:91:ab:4c:8c:86 (try 1/3) [ 52.162123] wlan0: RX AssocResp from 2c:91:ab:4c:8c:86 (capab=0x1431 status=0 aid=10) [ 52.170386] wlan0: associated [ 52.190845] wlan0: Limiting TX power to 20 (20 - 0) dBm as advertised by 2c:91:ab:4c:8c:86 [ 53.087410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.429248] do_page_fault(): sending SIGSEGV to uqmi for invalid write access to 00000000 [ 69.437629] epc = 77d82ef4 in libc.so[77d5e000+a9000] [ 69.442827] ra = 004036c9 in uqmi[400000+14000] [ 72.532711] do_page_fault(): sending SIGSEGV to uqmi for invalid write access to 00000000 [ 72.541076] epc = 77e16ef4 in libc.so[77df2000+a9000] [ 72.546237] ra = 004036c9 in uqmi[400000+14000] [ 75.636879] do_page_fault(): sending SIGSEGV to uqmi for invalid write access to 00000000 [ 75.645267] epc = 77e34ef4 in libc.so[77e10000+a9000] [ 75.650435] ra = 004036c9 in uqmi[400000+14000] [ 78.772462] do_page_fault(): sending SIGSEGV to uqmi for invalid write access to 00000000 [ 78.780823] epc = 77d87ef4 in libc.so[77d63000+a9000] [ 78.785983] ra = 004036c9 in uqmi[400000+14000] [ 84.885213] do_page_fault(): sending SIGSEGV to uqmi for invalid write access to 00000000 [ 84.893598] epc = 77db0ef4 in libc.so[77d8c000+a9000] [ 84.898761] ra = 004036c9 in uqmi[400000+14000] [ 90.996737] do_page_fault(): sending SIGSEGV to uqmi for invalid write access to 00000000 [ 91.005115] epc = 77e5cef4 in libc.so[77e38000+a9000] [ 91.010277] ra = 004036c9 in uqmi[400000+14000] root@OpenWrt:~#

    Try the latest version:

    wget https://github.com/mrhaav/openwrt/raw/master/22.03.2/uqmi_2022-09-13-0.9_mipsel_24kc.ipk
    opkg install uqmi_2022-09-13-0.9_mipsel_24kc.ipk
                  

    Now it states: uqmi 2022-09-13-0.9

    But still the same segmentation fault:

    Tue Nov 22 10:31:36 2022 daemon.notice netifd: Interface 'LTE' is now down
    Tue Nov 22 11:38:57 2022 daemon.notice netifd: Interface 'LTE' is setting up now
    Tue Nov 22 11:39:07 2022 daemon.notice netifd: LTE (4097): PINcode disabled
    Tue Nov 22 11:39:08 2022 daemon.notice netifd: LTE (4097): Data format set to raw-ip
    Tue Nov 22 11:39:08 2022 daemon.notice netifd: LTE (4097): Default profile: 1
    Tue Nov 22 11:39:08 2022 daemon.notice netifd: LTE (4097): Segmentation fault (core dumped)
    Tue Nov 22 11:39:08 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
    Tue Nov 22 11:39:08 2022 daemon.notice netifd: LTE (4097):   on
    Tue Nov 22 11:39:10 2022 daemon.notice netifd: LTE (4097): Segmentation fault (core dumped)
    Tue Nov 22 11:39:10 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
    Tue Nov 22 11:39:10 2022 daemon.notice netifd: LTE (4097):   on
    Tue Nov 22 11:39:12 2022 daemon.notice netifd: LTE (4097): Segmentation fault (core dumped)
    Tue Nov 22 11:39:12 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
    Tue Nov 22 11:39:13 2022 daemon.notice netifd: LTE (4097):   on
    Tue Nov 22 11:39:15 2022 daemon.notice netifd: LTE (4097): Segmentation fault (core dumped)
    Tue Nov 22 11:39:15 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
    Tue Nov 22 11:39:15 2022 daemon.notice netifd: LTE (4097):   on
    Tue Nov 22 11:39:18 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
    Tue Nov 22 11:39:18 2022 daemon.notice netifd: LTE (4097):   on
    Tue Nov 22 11:39:21 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
    Tue Nov 22 11:39:21 2022 daemon.notice netifd: LTE (4097):   on
    Tue Nov 22 11:39:24 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
    Tue Nov 22 11:39:24 2022 daemon.notice netifd: LTE (4097):   on
    Tue Nov 22 11:39:27 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
    Tue Nov 22 11:39:27 2022 daemon.notice netifd: LTE (4097):   on
    Tue Nov 22 11:39:33 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
    Tue Nov 22 11:39:33 2022 daemon.notice netifd: LTE (4097):   on
    Tue Nov 22 11:39:39 2022 daemon.notice netifd: LTE (4097): Failed to parse message data
    Tue Nov 22 11:39:39 2022 daemon.notice netifd: LTE (4097):   on
                  

    Strange
    Can you run following uqmi commands to see which cause the segmentfault?

    uqmi -d /dev/cdc-wdm0 --get-profile-settings 3gpp,1
    uqmi -d /dev/cdc-wdm0 --get-device-operating-mode
    uqmi -d /dev/cdc-wdm0 --get-serving-system
    root@OpenWrt:~# uqmi -d /dev/cdc-wdm0 --get-device-operating-mode
    "online"
    root@OpenWrt:~# uqmi -d /dev/cdc-wdm0 --get-serving-system
    "Failed to connect to service"
    root@OpenWrt:~#
                  

    Thank you very much. When I insert the sim card into my ipad, it works out of the box without a pincode. I have a multicard from this provider: https://service.handyvertrag.de/public/impressum Drillisch GmbH, but on the ipad it states the provider behind: O2

    I have another sim card from the Telekom, I will try this card as well.

    In the Q&A of the provider they say:

    Alternatively, you can conveniently request the configuration data via SMS to your end device.

  • Use your device to send an SMS with the content handy to the free short code 80100
  • The configuration data will then be sent to you via SMS.
  • Save the configuration data on your end device
  • Make sure that data roaming is activated on your end device and EU roaming (applies only to Apple end devices with the iOS 8 operating system) is inactive.
  • Turn on your device.
  • With the telekom card I get:

    Tue Nov 22 13:55:35 2022 daemon.notice netifd: Interface 'wwan' is now down
    Tue Nov 22 13:55:36 2022 daemon.notice netifd: Interface 'wwan' has link connectivity
    Tue Nov 22 13:55:36 2022 daemon.notice netifd: Interface 'wwan' is setting up now
    Tue Nov 22 14:02:00 2022 daemon.notice netifd: wwan (3204): PINcode verified
    Tue Nov 22 14:02:00 2022 daemon.notice netifd: wwan (3204): Data format set to raw-ip
    Tue Nov 22 14:02:00 2022 daemon.notice netifd: wwan (3204): Default profile: 1
    Tue Nov 22 14:02:00 2022 daemon.notice netifd: wwan (3204): Airplane mode off
    Tue Nov 22 14:02:02 2022 daemon.notice netifd: wwan (3204):  searching on 26201
    Tue Nov 22 14:02:04 2022 daemon.notice netifd: wwan (3204):  registered on 26201
    Tue Nov 22 14:02:06 2022 daemon.notice netifd: wwan (3204): Registered to Telekom.de on LTE
    Tue Nov 22 14:02:07 2022 daemon.notice netifd: wwan (3204): Unable to connect with ipv4, check APN settnings
    Tue Nov 22 14:02:08 2022 daemon.notice netifd: wwan (3604): Stopping network wwan
    Tue Nov 22 14:02:08 2022 daemon.notice netifd: wwan (3604): Command failed: ubus call network.interface notify_proto { "action": 0, "link-up": false, "keep": false, "interface": "wwan" } (Permission denied)
    Tue Nov 22 14:02:08 2022 daemon.notice netifd: Interface 'wwan' is now down
                  

    I tried to correct the --get-serving-system command. Can you try:

    wget https://github.com/mrhaav/openwrt/raw/master/uqmi_test/uqmi_2022-11-22-0.9_mipsel_24kc.ipk
    opkg install uqmi_2022-11-22-0.9_mipsel_24kc.ipk
    

    and then run

    uqmi -d /dev/cdc-wdm0 --get-serving-system
    

    Command failed: Not found

    root@OpenWrt:~# wget https://github.com/mrhaav/openwrt/raw/master/uqmi_test/uqmi_2022-11-22-0.9_mipsel_24kc.ipk
    Downloading 'https://github.com/mrhaav/openwrt/raw/master/uqmi_test/uqmi_2022-11-22-0.9_mipsel_24kc.ipk'
    Connecting to 140.82.121.4:443
    Redirected to /mrhaav/openwrt/master/uqmi_test/uqmi_2022-11-22-0.9_mipsel_24kc.ipk on raw.githubusercontent.com
    Writing to 'uqmi_2022-11-22-0.9_mipsel_24kc.ipk'
    uqmi_2022-11-22-0.9_ 100% |*******************************| 42212   0:00:00 ETA
    Download completed (42212 bytes)
    root@OpenWrt:~# opkg install uqmi_2022-11-22-0.9_mipsel_24kc.ipk
    Upgrading uqmi on root from 2022-09-13-0.9 to 2022-11-22-0.9...
    Command failed: Not found
    Configuring uqmi.
    

    But the last command did work:

    root@OpenWrt:~# uqmi -d /dev/cdc-wdm0 --get-serving-system
            "registration": "registered",
            "plmn_description": "handyvertrag.de",
            "lenght": 15,
            "plmn_mcc": 262,
            "plmn_mnc": 3,
            "mnc_length": 2,
            "roaming": false
    
  •