Modem returns an exception when forcing the operator

Hi,

During PCB production tests, we encountered a strange issue when forcing the operator. The modem throws an exception right after the AT+COPS command! Below is the log:

Additionnal info :

  • Modem firmware : 8.2.1.0
  • This issue has occurred twice in 2 different boards.

Could you please investigate ?

Thanks,

Pascal

Hi Pascal,

Could you download SQN DM light tool and install it on host PC.
Then collect DM log for further analysis.
NOTE: You can get DM light tool and user guide on SQN cloud(URL: Sequans Communications)

Hi Pascal,

1\ I try to reproduce this with your test procedure but issue is not triggered on my setup.

2\ Prior we go with SQN DM light tool as I mentioned on my previous comment. Is that possible you can connect host and modem UART2(console) then reproduce it again. Once the issue is present, please share the console log with me?

Hi,

thanks for your answer ! Yes I can do that. At the moment, the board is still at supplier facilities. When I receive the board, I will get the log with the DM light tool.

Thanks !

Hi Pascal,

Noted with thanks. Please try to reproduce the issue once you have received the board.

And collect following logs for further analysis:

1\ UART2/console log: Please connect the host PC to UART2 before the test. Then try to reproduce the issue and share the UART2 log.

2\Crsahdump: Connect the host PC to the GM02S, then start the DM tool and click File → Download Crashdump from UE.(ref. to following screenshot)

Please let me know if anything is unclear.

Hello !

I manage to reproduce the issue and find below the extract of UART2 (you can see the uart2 report the exception ! ) and the crashdump (note that I had to reboot the modem several times to connect the modem to the DM tool after reproducing the issue, I hope the log will be relevant) :

sendPhyCellIdentifyReq time=21849125
sendPhyCellIdentifyReq time=21849662
sendPhyCellIdentifyReq time=21854758
sendPhyCellIdentifyReq time=21875237
sendPhyCellIdentifyReq time=21879097
sendPhyCellIdentifyReq time=21899546
sendPhyCellIdentifyReq time=21914455
sendPhyCellIdentifyReq time=21929366
sendPhyCellIdentifyReq time=21933198
sendPhyCellIdentifyReq time=21937032
sendPhyCellIdentifyReq time=21957483
sendPhyCellIdentifyReq time=21961316
sendPhyCellIdentifyReq time=21965148
sendPhyCellIdentifyReq time=21974522
sendPhyCellIdentifyReq time=21994971
sendPhyCellIdentifyReq time=22009880
sendPhyCellIdentifyReq time=22019257
sendPhyCellIdentifyReq time=22023131
sendPhyCellIdentifyReq time=22032511
sendPhyCellIdentifyReq time=22036344
sendPhyCellIdentifyReq time=22045717
sendPhyCellIdentifyReq time=22049552
sendPhyCellIdentifyReq time=22053384
sendPhyCellIdentifyReq time=22059709
sendPhyCellIdentifyReq time=22066033
sendPhyCellIdentifyReq time=22069867
sendPhyCellIdentifyReq time=22090317
sendPhyCellIdentifyReq time=22110765
sendPhyCellIdentifyReq time=22117089
sendPhyCellIdentifyReq time=22120923
sendPhyCellIdentifyReq time=22129737
sendPhyCellIdentifyReq time=22149630
sendPhyCellIdentifyReq time=22158444
sendPhyCellIdentifyReq time=22194951
sendPhyCellIdentifyReq time=22198783
sendPhyCellIdentifyReq time=22219232
sendPhyCellIdentifyReq time=22234142
sendPhyCellIdentifyReq time=22237976
sendPhyCellIdentifyReq time=22258425
sendPhyCellIdentifyReq time=22462095
New fatal context 0
exception: 3 ITYPE: 0x30060 PC: 0x1c20f07c EVA: 0xffffffd4
TLB misc: TLB read protection (data) (data memory access)

1C20EBA6

1C1D7418

1C1D765E

1C1BD5EA

1C1DA412

1C1DE476

1C1C9742

.-.
(0.0)
‘=.|m|.=’
.='`"``=.
exception: 3 ITYPE: 0x30060 PC: 0x1c20f07c EVA: 0xffffffd4
TLB misc: TLB read protection (data) (data memory access)

1C20EBA6

1C1D7418

1C1D765E

1C1BD5EA

1C1DA412

1C1DE476

1C1C9742
8.2.1.0 [61488] by robot-soft at 2024-07-22 16:27:48
Uptime: 25s
exception: 3 ITYPE: 0x30060 PC: 0x1c20f07c EVA: 0xffffffd4
TLB misc: TLB read protection (data) (data memory access)
Task: SQN_ESM(003D852C)
crashdump: Crashdump started
fs: Mounting /flash0…done
fs: Overlay filesystem mounted on /fs
fs: Mounting upgrade filesystem …
fs: Mounting done
crashdump: Clear Persistency files :
crashdump: remove file  /fs/rat/01_catM/BootFile.sav
crashdump: remove file  /fs/rat/01_catM/hpFs2B0.dat
crashdump: remove file  /fs/rat/01_catM/hpFs1.dat
crashdump: remove file  /fs/rat/02_nbiot/BootFile.sav
crashdump: remove file  /fs/rat/02_nbiot/hpFs2B0.dat
crashdump: remove file  /fs/rat/02_nbiot/hpFs1.dat
crashdump: remove file  /fs/crashdump
crashdump: Dumping crash version
crashdump: Dumping version string
crashdump: Dumping fatal string
crashdump: Dumping MCPU fatal context 0
crashdump: Dumping MCPU callstack
crashdump: Callstack:
crashdump:  1) 0x1C20EBA6
crashdump:  2) 0x1C1D7418
crashdump:  3) 0x1C1D765E
crashdump:  4) 0x1C1BD5EA
crashdump:  5) 0x1C1DA412
crashdump:  6) 0x1C1DE476
crashdump:  7) 0x1C1C9742
crashdump: Dumping MCPU stack
crashdump: Dumping around MCPU PC
crashdump: Dumping around MCPU LP
crashdump: Dumping FS stats
crashdump: Dumping threads
crashdump: Dumping threads stacks
crashdump: Dumping memory stats
crashdump: Dumping MCPU XPC info
crashdump:  Local:
crashdump:   Tx:
crashdump:   Rx:
crashdump:  Remote:
crashdump:   Tx: 197 229 185 201 129 123 189 117 195 183 187
crashdump:   Rx: 228 202 230 230 230 200
crashdump:  Allocated memory:
crashdump:     |     @      |    caller
crashdump: Dumping MPU configuration
crashdump: Dumping QKI pools
nb reg=4crashdump: Dumped 0x1262b qki
crashdump: Dumping ZSP0 debug
crashdump: Dumping ZSP1 debug
crashdump: Dumping NOC_ERROR info
crashdump: Dumping Low Power info
crashdump: Dumping LPU debug
crashdump: Dumping RFIC FSM
crashdump: Dumping PMODE
crashdump: Waiting LCPU dump
crashdump: Dumping LCPU callstack
crashdump: Callstack:
crashdump:  1) 0x007A0774
crashdump:  2) 0x007A07F6
crashdump:  3) 0x007CB8F4
crashdump:  4) 0x007CDF4E
crashdump:  5) 0x82002400
crashdump: Dumping around LCPU PC
crashdump: Dumping around LCPU LP
crashdump: Dumping LCPU fatal context
crashdump: Dumping LCPU stack
crashdump: Dumping LCPU XPC info
crashdump:  Local:
crashdump:   Tx:
crashdump:   Rx:
crashdump:  Remote:
crashdump:   Tx: 228 202 230 230 230 200
crashdump:   Rx: 197 229 185 201 129 123 189 117 195 183 187
crashdump:  Allocated memory:
crashdump:     |     @      |    caller
crashdump: Dumping events
crashdump: Reset
[0000000000] boot: Switched to flash, timeout 10000, proto thp
[0000000000] Running on Windbond flash sector 0x1C018000
[0000000000] RBBombyx 11.11@61488 ‘8.2.1.0 [61488]’
[0000000004] Reset cause ‘EXT’(real ‘EXT’ )[fw panic] (bootWDG : ‘0’) [rawRst ‘0x00000001’]
[0000000012] regConfig 0xC0BDDC28@1
[0000000015] boot: Current flash, timeout 10000, proto thp
[0000000021] boot: FFF mode
[0000000243] elf: ELF format selected
[0000000246] elf: Header finished
[0000000249] elf: Waiting for 448 bytes
[0000000253] elf: PH 0x00000000, 28 bytes
[0000000257] elf: Note 0x63727A04
[0000000260] elf: PH 0x00000000, 20 bytes
[0000000263] elf: Note 0x4D415000
[0000000266] elf: PH 0x00001000, 86 bytes
[0000000270] elf: PH 0x00001060, 1696 bytes
[0000000274] elf: PH 0x00001700, 144104 bytes
[0000000282] elf: PH 0x000249E8, 8 bytes
[0000000285] elf: PH 0x000249F0, 56 bytes
[0000000289] elf: PH 0x00024A28, 100 bytes
[0000000293] elf: PH 0x00024A8C, 748 bytes
[0000000297] elf: PH 0x00024D78, 2736 bytes
[0000000301] elf: PH 0x0034A000, 5696 bytes
[0000000305] elf: PH 0x00710000, 16 bytes
[0000000308] elf: PH 0x007A0000, 363808 bytes
[0000000322] elf: PH 0x00348000, 8192 bytes
[0000000326] elf: Program Header finished
[0000000330] sbp: no ACPU found
[0000000333] sbp: MCPU Booting at 0x1C0E02F0…
user: Loading application
TESIC PSRAM: 0x002b6c40 → 0x002bac40
fs: Mounting /flash0…done
fs: Overlay filesystem mounted on /fs
fs: /fs/rat/01_catM mounted on /fs/rat/current
fs: Mounting upgrade filesystem …
fs: Mounting done
[USIM] PSI USIM rev = 2
[USIM] Default slot=0 itf=0 OK
[USIM] ITF(0) slot(0) enabled(1) polling(0)
[USIM] ITF(1) slot(1) enabled(1) polling(1)
[USIM] ITF(2) slot(4) enabled(0) polling(0)
[USIM] ITF(3) slot(4) enabled(0) polling(0)
Could not restore wolfSSL tickets(err=0)

INFO> DCP : Init over=‘serial’
eem: Memory initialized
[PSP] initializing
fs: Mounting upgrade filesystem …
fs: Mounting done
QKI pools init…done
feeds: 790  Configure enter EAPPS
Command ::setHPrioBands unknown
feeds: 810  Configure leave EAPPS
feeds: 810  Configure enter MQTT
feeds: 810  Configure leave MQTT
feeds: 820  Init enter EAPPS
feeds: 900  Init leave EAPPS
feeds: 900  Init enter LWM2M
feeds: 910  Init leave LWM2M
feeds: 910  Init enter MQTT
feeds: 920  Init leave MQTT
feeds: 920  Init enter SQNSMS
feeds: 930  Init leave SQNSMS
[PSP] initialized
[PSP] starting
reserved room 7/150
evtStart
::hell terminal::
 → [ZSP0] started after 1 ms, version 262.3
[ZSP1] started after 1 ms, version 263.0
ue: Waiting for LCPU IRQ…done
xpc (mcpu): Initalized
xpc (lcpu): Initalized
done
ue: Waiting for LCPU DLP to start…dLPU boot confirmation
one
ue: Waiting for LCPU to run…[L1P] started
hp: Started
feeds: 1390  Start enter EAPPS
Cannot find a valid ‘mod::command’ string.
Cannot find a valid ‘mod::command’ string.
feeds: 1780  Start leave EAPPS
feeds: 1780  Start enter LWM2M
feeds: 1800  Start leave LWM2M
feeds: 1800  Start enter MQTT
feeds: 1800  Start leave MQTT
feeds: 1800  Start enter SQNSMS
feeds: 1810  Start leave SQNSMS
user: Calling app @0xa000013a …reliable 0
[APP] Starting application
[APP] Run thread 0x4810 created
[APP] PXL thread started
[APP] PXL version: 8.2.1.0-61488
[PSP] started
AT=1 time=23589518
Notify Sim state simState=1 cfun=4
sqnhwcfg: Toggle gpio25 disable
sqnhwcfg: Already in the required state
sqnhwcfg: Toggle gpio26 disable
sqnhwcfg: Already in the required state
sqnhwcfg: Toggle gpio27 disable
sqnhwcfg: Already in the required state
[0000000000] boot: Switched to flash, timeo

crashdump-2026-05-18-15h57m01.dmcd (373.1 KB)

Thanks !

Hi Pascal,

Thank you for the log and crashdump. I will communicate this with our team then back to you.