"usbmode", "ecm", reset to "modem" without AT commands

While testing BG95-M3 on a prototype board I switched “usbmode” to “ecm”, which seems to work fine, but /dev/ttyUSB1, /dev/ttyUSB2 and /dev/ttyUSB3 are gone.
I want to switch it back to modem, but the main UART port is not wired so I don’t have a way to send AT commands. I tried re-flashing the firmware with QFirehose (BG95M3LAR02A04_01.003.01.003) but that didn’t seem to work.
Is there any way I can reset usbmode to modem and get back all the /dev/ttyUSBX devices without AT commands?

To add to this question, can you confirm usbmode = rmnet is not supported by BG95-M3? Every time I tried to set it with AT+QCFGEXT="usbnet", "rmnet" I got back ERROR.