Crash when Android connects in a busy BLE environment

[JHedgesBartec]

Answers checklist

• I have read the documentation ESP-AT Programming Guide and the issue is not addressed there.
• I have used the latest released firmware or have updated my ESP-AT branch (master or release) to the latest version and checked that the issue is present there.
• I have searched the issue tracker for a similar issue and not found a similar issue.

AT+GMR

AT version:4.0.0.0(3fe3806 - ESP32C6 - Dec 29 2023 11:10:21)
SDK version:v5.1.2-dirty
compile time(89040be):Jan 2 2024 05:53:07
Bin version:v4.0.0.0(ESP32C6-4MB)

ESP-AT Firmware Source

Downloaded from https://docs.espressif.com/projects/esp-at/en/latest/esp32c6/AT_Binary_Lists/esp_at_binaries.html

Hardware Information

ESP32-C6 WROOM

Power Supply used

External 3.3V

What is the expected behavior?

Accept the connection and not crash.

What is the actual behavior?

When an Android client connects to the ESP32 BLE server the module crashes.

This is most repeatable when there are >100 BLE devices advertising as seen in LightBlue on the Android device.

When the crash happens the ESP32 does not recover to the application, instead remaining in BSL mode.

Probability of recurrence

75% when over 100 BLE devices are within scanning range of the Android device.

AT+SYSRAM?

Not available as module crashes.

Steps to reproduce

1. Configure the ESP32 to advertise as a BLE server with paring support
2. Connect an Android device

AT command port output

ESP-AT >> (00003160s) ready
ESP-AT << (00003171s) ATE0
ESP-AT >> (00003184s) ATE0
ESP-AT >> (00003194s) 
ESP-AT >> (00003205s) OK
ESP-AT << (00003217s) AT+UART_CUR=921600,8,1,0,1
ESP-AT >> (00003228s) 
ESP-AT >> (00003236s) OK
ESP-AT << (00003247s) AT+GMR
ESP-AT >> (00003259s) AT version:4.0.0.0(3fe3806 - ESP32C6 - Dec 29 2023 11:10:21)
ESP-AT >> (00003268s) SDK version:v5.1.2-dirty
ESP-AT >> (00003278s) compile time(89040be7):Jan  2 2024 05:53:07
ESP-AT >> (00003289s) Bin version:v4.0.0.0(ESP32C6-4MB)
ESP-AT >> (00003299s) 
ESP-AT >> (00003311s) OK
ESP-AT << (00003321s) AT+CWINIT=0
ESP-AT >> (00003335s) 
ESP-AT >> (00003344s) OK
ESP-AT << (00003355s) AT+BLEINIT=2
ESP-AT >> (00004317s) 
ESP-AT >> (00004327s) OK
ESP-AT << (00004339s) AT+BLEADDR?
ESP-AT >> (00004351s) +BLEADDR:"40:4c:ca:43:ad:66"
ESP-AT >> (00004362s) OK
ESP-AT << (00004373s) AT+BLESECPARAM=13,0,16,3,3
ESP-AT >> (00004384s) 
ESP-AT >> (00004395s) OK
ESP-AT << (00004405s) AT+BLESETKEY=123456
ESP-AT >> (00004413s) 
ESP-AT >> (00004423s) OK
ESP-AT << (00004433s) AT+BLENAME="TPG_6600000523"
ESP-AT >> (00004442s) 
ESP-AT >> (00004451s) OK
ESP-AT << (00004460s) AT+BLEADVPARAM=50,50,0,0,7,0
ESP-AT >> (00004471s) 
ESP-AT >> (00004478s) OK
ESP-AT << (00004487s) AT+BLEADVDATA="02010603031DBA0F095450475F36363030303030353233"
ESP-AT >> (00004499s) 
ESP-AT >> (00004505s) OK
ESP-AT << (00004514s) AT+BLEADVSTART
ESP-AT >> (00004524s) 
ESP-AT >> (00004531s) OK
ESP-AT >> (00006474s) +BLECONN:0,"78:c0:2d:95:13:cb"
ESP-AT >> (00007432s) +BLECONNPARAM:0,6,6,6,0,500

AT log port output

ESP-DEBUG >> (00002378s) ESP-ROM:esp32c6-20220919
ESP-DEBUG >> (00002399s) Build:Sep 19 2022
ESP-DEBUG >> (00002406s) rst:0x1 (POWERON),boot:0x6d (SPI_FAST_FLASH_BOOT)
ESP-DEBUG >> (00002413s) SPIWP:0xee
ESP-DEBUG >> (00002423s) mode:DIO, clock div:2
ESP-DEBUG >> (00002430s) load:0x4086c410,len:0xd2c
ESP-DEBUG >> (00002440s) load:0x4086e610,len:0x2df0
ESP-DEBUG >> (00002447s) load:0x40875728,len:0x17d8
ESP-DEBUG >> (00002458s) entry 0x4086c410
ESP-DEBUG >> (00002503s) �[0;32mI (23) boot: ESP-IDF v5.1.2-dirty 2nd stage bootloader�[0m
ESP-DEBUG >> (00002512s) �[0;32mI (24) boot: compile time Jan  2 2024 05:53:08�[0m
ESP-DEBUG >> (00002519s) �[0;32mI (24) boot: chip revision: v0.0�[0m
ESP-DEBUG >> (00002529s) �[0;32mI (27) boot.esp32c6: SPI Speed      : 80MHz�[0m
ESP-DEBUG >> (00002536s) �[0;32mI (32) boot.esp32c6: SPI Mode       : DIO�[0m
ESP-DEBUG >> (00002545s) �[0;32mI (36) boot.esp32c6: SPI Flash Size : 4MB�[0m
ESP-DEBUG >> (00002552s) �[0;32mI (41) boot: Enabling RNG early entropy source...�[0m
ESP-DEBUG >> (00002562s) �[0;32mI (47) boot: Partition Table:�[0m
ESP-DEBUG >> (00002569s) �[0;32mI (50) boot: ## Label            Usage          Type ST Offset   Length�[0m
ESP-DEBUG >> (00002581s) �[0;32mI (57) boot:  0 otadata          OTA data         01 00 0000d000 00002000�[0m
ESP-DEBUG >> (00002589s) �[0;32mI (65) boot:  1 phy_init         RF data          01 01 0000f000 00001000�[0m
ESP-DEBUG >> (00002600s) �[0;32mI (72) boot:  2 nvs              WiFi data        01 02 00010000 0000e000�[0m
ESP-DEBUG >> (00002607s) �[0;32mI (80) boot:  3 at_customize     unknown          40 00 0001e000 00042000�[0m
ESP-DEBUG >> (00002617s) �[0;32mI (87) boot:  4 ota_0            OTA app          00 10 00060000 001d0000�[0m
ESP-DEBUG >> (00002627s) �[0;32mI (95) boot:  5 ota_1            OTA app          00 11 00230000 001d0000�[0m
ESP-DEBUG >> (00002634s) �[0;32mI (102) boot: End of partition table�[0m
ESP-DEBUG >> (00002643s) �[0;32mI (107) esp_image: segment 0: paddr=00060020 vaddr=42150020 size=30740h (198464) map�[0m
ESP-DEBUG >> (00002649s) �[0;32mI (156) esp_image: segment 1: paddr=00090768 vaddr=40800000 size=0f8b0h ( 63664) load�[0m
ESP-DEBUG >> (00002658s) �[0;32mI (172) esp_image: segment 2: paddr=000a0020 vaddr=42000020 size=146000h (1335296) map�[0m
ESP-DEBUG >> (00002832s) �[0;32mI (447) esp_image: segment 3: paddr=001e6028 vaddr=4080f8b0 size=0a17ch ( 41340) load�[0m
ESP-DEBUG >> (00002863s) �[0;32mI (458) esp_image: segment 4: paddr=001f01ac vaddr=40819a30 size=03bf8h ( 15352) load�[0m
ESP-DEBUG >> (00002871s) �[0;32mI (462) esp_image: segment 5: paddr=001f3dac vaddr=50000000 size=00068h (   104) load�[0m
ESP-DEBUG >> (00002879s) �[0;32mI (469) boot: Loaded app from partition at offset 0x60000�[0m
ESP-DEBUG >> (00002890s) �[0;32mI (470) boot: Disabling RNG early entropy source...�[0m
ESP-DEBUG >> (00003374s) controller lib commit: [77d09ce]
ESP-DEBUG >> (00004114s) registered service 0x1800 with handle=1
ESP-DEBUG >> (00004120s) registering characteristic 0x2a00 with def_handle=2 val_handle=3
ESP-DEBUG >> (00004129s) registering characteristic 0x2a01 with def_handle=4 val_handle=5
ESP-DEBUG >> (00004136s) registered service 0x1801 with handle=6
ESP-DEBUG >> (00004145s) registering characteristic 0x2a05 with def_handle=7 val_handle=8
ESP-DEBUG >> (00004152s) registered service 0xa002 with handle=10
ESP-DEBUG >> (00004160s) registering characteristic 0xc300 with def_handle=11 val_handle=12
ESP-DEBUG >> (00004167s) registering descriptor 0x2901 with handle=13
ESP-DEBUG >> (00004175s) registering characteristic 0xc301 with def_handle=14 val_handle=15
ESP-DEBUG >> (00004182s) registering descriptor 0x2901 with handle=16
ESP-DEBUG >> (00004190s) registering characteristic 0xc302 with def_handle=17 val_handle=18
ESP-DEBUG >> (00004198s) registering descriptor 0x2901 with handle=19
ESP-DEBUG >> (00004206s) registering characteristic 0xc303 with def_handle=20 val_handle=21
ESP-DEBUG >> (00004213s) registering descriptor 0x2901 with handle=22
ESP-DEBUG >> (00004222s) registering characteristic 0xc304 with def_handle=23 val_handle=24
ESP-DEBUG >> (00004229s) registering characteristic 0xc305 with def_handle=25 val_handle=26
ESP-DEBUG >> (00004240s) registering characteristic 0xc306 with def_handle=28 val_handle=29
ESP-DEBUG >> (00004247s) registering characteristic 0xc307 with def_handle=31 val_handle=32
ESP-DEBUG >> (00004257s) registering descriptor 0x2901 with handle=33
ESP-DEBUG >> (00004263s) registered service 0xa003 with handle=34
ESP-DEBUG >> (00004273s) registering characteristic 0xc400 with def_handle=35 val_handle=36
ESP-DEBUG >> (00004281s) registering descriptor 0x2901 with handle=37
ESP-DEBUG >> (00004291s) registering characteristic 0xc401 with def_handle=38 val_handle=39
ESP-DEBUG >> (00004299s) registering descriptor 0x2901 with handle=40
ESP-DEBUG >> (00004310s) reset reason=0
ESP-DEBUG >> (00006484s) connection established; status=0 handle=1 our_ota_addr_type=0 our_ota_addr=408374cf:00:15:40828000:00:4217d440
ESP-DEBUG >> (00006494s)  our_id_addr_type=0 our_id_addr=408374c1:00:15:40828000:00:4217d440
ESP-DEBUG >> (00006502s)  peer_ota_addr_type=1 peer_ota_addr=408374d6:00:15:40828000:00:4217d440
ESP-DEBUG >> (00006512s)  peer_id_addr_type=1 peer_id_addr=408374c8:00:15:40828000:00:4217d440
ESP-DEBUG >> (00006521s)  conn_itvl=39 conn_latency=0 supervision_timeout=500 encrypted=0 authenticated=0 bonded=0
ESP-DEBUG >> (00007442s) advertise complete; reason=0connection updated; status=0 handle=1 our_ota_addr_type=0 our_ota_addr=4083747f:00:15:40828000:00:4217d440
ESP-DEBUG >> (00007450s)  our_id_addr_type=0 our_id_addr=40837471:00:15:40828000:00:4217d440
ESP-DEBUG >> (00007457s)  peer_ota_addr_type=1 peer_ota_addr=40837486:00:15:40828000:00:4217d440
ESP-DEBUG >> (00007467s)  peer_id_addr_type=1 peer_id_addr=40837478:00:15:40828000:00:4217d440
ESP-DEBUG >> (00007473s)  conn_itvl=6 conn_latency=0 supervision_timeout=500 encrypted=0 authenticated=0 bonded=0
ESP-DEBUG >> (00007482s) 
ESP-DEBUG >> (00007680s) BLE assert: line 178 in function r_ble_ll_utils_remapped_channel, param: 0x0, 0x0
ESP-DEBUG >> (00007688s) assert failed: osi_assert_wrapper bt.c:263 (0)
ESP-DEBUG >> (00007695s) Core  0 register dump:
ESP-DEBUG >> (00007705s) MEPC    : 0x40800616  RA      : 0x4080e1a8  SP      : 0x40834b80  GP      : 0x4081a234  
ESP-DEBUG >> (00007713s) TP      : 0x40804ea8  T0      : 0x37363534  T1      : 0x7271706f  T2      : 0x33323130  
ESP-DEBUG >> (00007724s) S0/FP   : 0x00000099  S1      : 0x00000001  A0      : 0x40834bbc  A1      : 0x4081c7f1  
ESP-DEBUG >> (00007732s) A2      : 0x00000001  A3      : 0x00000029  A4      : 0x00000001  A5      : 0x40828000  
ESP-DEBUG >> (00007745s) A6      : 0x0000000c  A7      : 0x76757473  S2      : 0x00000009  S3      : 0x40834cbe  
ESP-DEBUG >> (00007753s) S4      : 0x4081c7f0  S5      : 0x20830000  S6      : 0x20040015  S7      : 0x4215c000  
ESP-DEBUG >> (00007764s) S8      : 0x20040000  S9      : 0x40828704  S10     : 0x00000000  S11     : 0x00000000  
ESP-DEBUG >> (00007777s) T3      : 0x6e6d6c6b  T4      : 0x6a696867  T5      : 0x66656463  T6      : 0x62613938  
ESP-DEBUG >> (00007785s) MSTATUS : 0x00001881  MTVEC   : 0x40800001  MCAUSE  : 0x00000007  MTVAL   : 0x00000000  
ESP-DEBUG >> (00007796s) MHARTID : 0x00000000  
ESP-DEBUG >> (00007803s) 
ESP-DEBUG >> (00007813s) Stack memory:
ESP-DEBUG >> (00007820s) 40834b80: 0x40834c00 0x4215bd2f 0x421594dc 0x40811a4c 0x4081cdd0 0x421594dc 0x4081d120 0x42159441
ESP-DEBUG >> (00007832s) 40834ba0: 0x4081cde0 0x40834bb4 0x4081cde4 0x421527ac 0x4081c7f0 0x00333632 0x4082c328 0x65737361
ESP-DEBUG >> (00007839s) 40834bc0: 0x66207472 0x656c6961 0x6f203a64 0x615f6973 0x72657373 0x72775f74 0x65707061 0x74622072
ESP-DEBUG >> (00007851s) 40834be0: 0x323a632e 0x28203336 0xff002930 0x4001924e 0x40840b84 0x0000001b 0x00000000 0x408012da
ESP-DEBUG >> (00007906s) 40834c00: 0x00380030 0x40880000 0x40829f10 0x4080306c 0x408309e0 0x40828000 0x40838c6c 0x40003e08
ESP-DEBUG >> (00007915s) 40834c20: 0x00ff0000 0x40834cf0 0x00000000 0x00000000 0x00000000 0x40828704 0x20040000 0x4215c000
ESP-DEBUG >> (00007923s) 40834c40: 0x20040015 0x20830000 0x40803e14 0x40838ba4 0x00000001 0x40828000 0x40838b6c 0x400193a6
ESP-DEBUG >> (00007935s) 40834c60: 0x40840b84 0x4082c324 0x40828718 0x40022498 0x40880000 0x4082c324 0x40829f10 0x40834c94
ESP-DEBUG >> (00007943s) 40834c80: 0x00000002 0x00000000 0x00000000 0x40000000 0x00000004 0x000000b2 0x40803e14 0x40838ba4
ESP-DEBUG >> (00007954s) 40834ca0: 0x00000001 0x40828000 0x40838b6c 0x408031e6 0x20040015 0x40828000 0x20040000 0x4205a290
ESP-DEBUG >> (00007963s) 40834cc0: 0x20040015 0x40828000 0x40838b6c 0x4204aa7e 0x20040015 0x40828000 0x40839428 0x00000001
ESP-DEBUG >> (00007975s) 40834ce0: 0x4082c060 0x40838078 0x40838b6c 0x42066a04 0x4082c060 0x4082fe4c 0x00001388 0x00000001
ESP-DEBUG >> (00007983s) 40834d00: 0x4082c060 0x40838078 0x40838b6c 0x42066dd0 0x40828584 0x40828000 0xfff00000 0x600a2000
ESP-DEBUG >> (00007995s) 40834d20: 0x000fffff 0x40837c44 0x40838078 0x4205e87a 0x40828584 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00008003s) 40834d40: 0x00000000 0x4215b000 0x40828000 0x40803620 0x40828584 0x40828710 0x40828000 0x4205e9e0
ESP-DEBUG >> (00008015s) 40834d60: 0x40828584 0x40828000 0x40828710 0x408032ac 0x40828584 0x40828000 0x408301b4 0x42045c0c
ESP-DEBUG >> (00008023s) 40834d80: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x4080e536
ESP-DEBUG >> (00008036s) 40834da0: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00008044s) 40834dc0: 0x00000000 0xa5a5a5a5 0xa5a5a5a5 0xa5a5a5a5 0xa5a5a5a5 0x00000154 0x40834b20 0x40829f24
ESP-DEBUG >> (00008055s) 40834de0: 0x4081d9a8 0x4081d9a8 0x40834dd8 0x4081d9a0 0x00000002 0x4083146c 0x4083146c 0x40834dd8
ESP-DEBUG >> (00008061s) 40834e00: 0x00000000 0x00000017 0x40833dd4 0xba006c6c 0xb59d25a1 0x84ae7747 0x008340c0 0x00000000
ESP-DEBUG >> (00008072s) 40834e20: 0x40834dd0 0x00000017 0x00000000 0x00000000 0x00000000 0x00000000 0x4082a894 0x4082a8fc
ESP-DEBUG >> (00008078s) 40834e40: 0x4082a964 0x00000000 0x00000000 0x00000001 0x00000000 0x00000000 0x00000000 0x42133f7c
ESP-DEBUG >> (00008089s) 40834e60: 0x00000000 0x00000000 0x00000000 0x40837b54 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00008095s) 40834e80: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00008106s) 40834ea0: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00008117s) 40834ec0: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00008124s) 40834ee0: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00008135s) 40834f00: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00008142s) 40834f20: 0x00000000 0x00000000 0x40000000 0x00000054 0x00000000 0x40834f30 0x00000000 0x00000000
ESP-DEBUG >> (00008153s) 40834f40: 0x00000000 0x40834f48 0xffffffff 0x40834f48 0x40834f48 0x00000000 0x40834f5c 0xffffffff
ESP-DEBUG >> (00008161s) 40834f60: 0x40834f5c 0x40834f5c 0x00000001 0x00000001 0x00000000 0x0000ffff 0x00000000 0xb33fffff
ESP-DEBUG >> (00008173s) 
ESP-DEBUG >> (00008180s) 
ESP-DEBUG >> (00008191s) 
ESP-DEBUG >> (00008197s) ELF file SHA256: ea477cf2673a8368
ESP-DEBUG >> (00008207s) 
ESP-DEBUG >> (00008213s) Rebooting...
ESP-DEBUG >> (00008223s) ESP-ROM:esp32c6-20220919
ESP-DEBUG >> (00008229s) Build:Sep 19 2022
ESP-DEBUG >> (00008239s) rst:0xc (SW_CPU),boot:0x6d (SPI_FAST_FLASH_BOOT)
ESP-DEBUG >> (00008245s) Saved PC:0x4001975a
ESP-DEBUG >> (00008255s) SPIWP:0xee
ESP-DEBUG >> (00008261s) mode:DIO, clock div:2
ESP-DEBUG >> (00008271s) load:0x4086c410,len:0xd2c
ESP-DEBUG >> (00008278s) load:0x4086e610,len:0x2df0
ESP-DEBUG >> (00008289s) load:0x40875728,len:0x17d8
ESP-DEBUG >> (00008296s) entry 0x4086c410
ESP-DEBUG >> (00008307s) �[0;32mI (27) boot: ESP-IDF v5.1.2-dirty 2nd stage bootloader�[0m
ESP-DEBUG >> (00008315s) �[0;32mI (27) boot: compile time Jan  2 2024 05:53:08�[0m
ESP-DEBUG >> (00008327s) �[0;32mI (28) boot: chip revision: v0.0�[0m
ESP-DEBUG >> (00008334s) �[0;32mI (30) boot.esp32c6: SPI Speed      : 80MHz�[0m
ESP-DEBUG >> (00008344s) �[0;32mI (35) boot.esp32c6: SPI Mode       : DIO�[0m
ESP-DEBUG >> (00008351s) �[0;32mI (40) boot.esp32c6: SPI Flash Size : 4MB�[0m
ESP-DEBUG >> (00008360s) �[0;32mI (44) boot: Enabling RNG early entropy source...�[0m
ESP-DEBUG >> (00008366s) �[0;32mI (50) boot: Partition Table:�[0m
ESP-DEBUG >> (00008375s) �[0;32mI (53) boot: ## Label            Usage          Type ST Offset   Length�[0m
ESP-DEBUG >> (00008381s) �[0;32mI (61) boot:  0 otadata          OTA data         01 00 0000d000 00002000�[0m
ESP-DEBUG >> (00008391s) �[0;32mI (68) boot:  1 phy_init         RF data          01 01 0000f000 00001000�[0m
ESP-DEBUG >> (00008398s) �[0;32mI (76) boot:  2 nvs              WiFi data        01 02 00010000 0000e000�[0m
ESP-DEBUG >> (00008408s) �[0;32mI (83) boot:  3 at_customize     unknown          40 00 0001e000 00042000�[0m
ESP-DEBUG >> (00008415s) �[0;32mI (91) boot:  4 ota_0            OTA app          00 10 00060000 001d0000�[0m
ESP-DEBUG >> (00008425s) �[0;32mI (98) boot:  5 ota_1            OTA app          00 11 00230000 001d0000�[0m
ESP-DEBUG >> (00008432s) �[0;32mI (106) boot: End of partition table�[0m
ESP-DEBUG >> (00008441s) �[0;32mI (110) esp_image: segment 0: paddr=00060020 vaddr=42150020 size=30740h (198464) map�[0m
ESP-DEBUG >> (00008448s) �[0;32mI (199) esp_image: segment 1: paddr=00090768 vaddr=40800000 size=0f8b0h ( 63664) load�[0m
ESP-DEBUG >> (00008461s) �[0;32mI (230) esp_image: segment 2: paddr=000a0020 vaddr=42000020 size=146000h (1335296) map�[0m
ESP-DEBUG >> (00008706s) �[0;32mI (774) esp_image: segment 3: paddr=001e6028 vaddr=4080f8b0 size=0a17ch ( 41340) load�[0m
ESP-DEBUG >> (00008735s) �[0;32mI (795) esp_image: segment 4: paddr=001f01ac vaddr=40819a30 size=03bf8h ( 15352) load�[0m
ESP-DEBUG >> (00008743s) �[0;32mI (803) esp_image: segment 5: paddr=001f3dac vaddr=50000000 size=00068h (   104) load�[0m
ESP-DEBUG >> (00008751s) �[0;32mI (816) boot: Loaded app from partition at offset 0x60000�[0m
ESP-DEBUG >> (00008759s) �[0;32mI (817) boot: Disabling RNG early entropy source...�[0m

More Information.

Timestamps are in milliseconds

[Luxin812]

@JHedgesBartec Please refer to this document to download the latest ESP32C6 AT firmware from esp-at master branch to test if this issue still exists. The master branch has some fixes compared to the released v4.0.0.0 branch. Thank you.

[JHedgesBartec]

@Luxin812 Please see the following combined command (ESP-AT) and and debug (ESP-DEBUG) log below. The issue is still present on master with the same crash reason:

ESP-AT >> (00130211s) +BLECONN:0,"5e:b2:7f:18:25:4e"
ESP-DEBUG >> (00130225s) I (127781) at-ble: connection established, status=0
ESP-DEBUG >> (00130231s) I (127781) at-ble: handle=0 our_ota_addr_type=0 our_ota_addr=66:ad:43:ca:4c:40
ESP-DEBUG >> (00130237s) I (127782) at-ble: our_id_addr_type=0 our_id_addr=66:ad:43:ca:4c:40
ESP-DEBUG >> (00130247s) I (127788) at-ble: peer_ota_addr_type=1 peer_ota_addr=4e:25:18:7f:b2:5e
ESP-DEBUG >> (00130254s) I (127794) at-ble: peer_id_addr_type=1 peer_id_addr=4e:25:18:7f:b2:5e
ESP-DEBUG >> (00130263s) I (127800) at-ble: conn_itvl=39 conn_latency=0 supervision_timeout=500 encrypted=0 authenticated=0 bonded=0
ESP-DEBUG >> (00130269s) I (127810) at-ble: advertise completed, reason=0
ESP-AT >> (00131052s) +BLECONNPARAM:0,6,6,6,0,500
ESP-DEBUG >> (00131062s) I (128622) at-ble: connection updated, status=0
ESP-DEBUG >> (00131069s) I (128622) at-ble: handle=0 our_ota_addr_type=0 our_ota_addr=66:ad:43:ca:4c:40
ESP-DEBUG >> (00131076s) I (128623) at-ble: our_id_addr_type=0 our_id_addr=66:ad:43:ca:4c:40
ESP-DEBUG >> (00131087s) I (128628) at-ble: peer_ota_addr_type=1 peer_ota_addr=4e:25:18:7f:b2:5e
ESP-DEBUG >> (00131094s) I (128635) at-ble: peer_id_addr_type=1 peer_id_addr=4e:25:18:7f:b2:5e
ESP-DEBUG >> (00131105s) I (128641) at-ble: conn_itvl=6 conn_latency=0 supervision_timeout=500 encrypted=0 authenticated=0 bonded=0
ESP-DEBUG >> (00131227s) BLE assert: line 287 in function r_ble_ll_utils_remapped_channel, param: 0x0, 0x0
ESP-DEBUG >> (00131235s) assert failed: osi_assert_wrapper bt.c:434 (0)
ESP-DEBUG >> (00131242s) Core  0 register dump:
ESP-DEBUG >> (00131252s) MEPC    : 0x40800928  RA      : 0x408105e8  SP      : 0x4083f280  GP      : 0x40820684  
ESP-DEBUG >> (00131260s) TP      : 0x4083f4d0  T0      : 0x37363534  T1      : 0x7271706f  T2      : 0x33323130  
ESP-DEBUG >> (00131272s) S0/FP   : 0x00000099  S1      : 0x00000001  A0      : 0x4083f2bc  A1      : 0x40823455  
ESP-DEBUG >> (00131280s) A2      : 0x00000001  A3      : 0x00000029  A4      : 0x00000001  A5      : 0x4082f000  
ESP-DEBUG >> (00131291s) A6      : 0x0000000c  A7      : 0x76757473  S2      : 0x00000009  S3      : 0x4083f3be  
ESP-DEBUG >> (00131299s) S4      : 0x40823454  S5      : 0x408041b2  S6      : 0x00000001  S7      : 0x079bd19d  
ESP-DEBUG >> (00131310s) S8      : 0x00000000  S9      : 0x00000000  S10     : 0x00000000  S11     : 0x00000000  
ESP-DEBUG >> (00131318s) T3      : 0x6e6d6c6b  T4      : 0x6a696867  T5      : 0x66656463  T6      : 0x62613938  
ESP-DEBUG >> (00131330s) MSTATUS : 0x00001881  MTVEC   : 0x40800001  MCAUSE  : 0x00000002  MTVAL   : 0x00000000  
ESP-DEBUG >> (00131338s) MHARTID : 0x00000000  
ESP-DEBUG >> (00131348s) 
ESP-DEBUG >> (00131355s) Stack memory:
ESP-DEBUG >> (00131365s) 4083f280: 0x4083f300 0x42180646 0x4217ee88 0x40815666 0x40823438 0x4217ee88 0x40823448 0x42167a43
ESP-DEBUG >> (00131373s) 4083f2a0: 0x4082344c 0x4083f2b4 0x40823450 0x4216cb8c 0x40823454 0x00343334 0x00000008 0x65737361
ESP-DEBUG >> (00131453s) 4083f2c0: 0x66207472 0x656c6961 0x6f203a64 0x615f6973 0x72657373 0x72775f74 0x65707061 0x74622072
ESP-DEBUG >> (00131461s) 4083f2e0: 0x343a632e 0x28203433 0xff002930 0x4001924e 0x0000080c 0x00000014 0x00000000 0x40800d1c
ESP-DEBUG >> (00131469s) 4083f300: 0x00370030 0x0000080c 0x00000014 0x40801346 0x0000080c 0x00000014 0x00000005 0x40803250
ESP-DEBUG >> (00131480s) 4083f320: 0x00000024 0x00000018 0x00000006 0x00000000 0x00000000 0x00000000 0x00000000 0x079bd19d
ESP-DEBUG >> (00131487s) 4083f340: 0x00000001 0x408041b2 0x00000001 0x00000006 0x40844f10 0x40830000 0x40844ed8 0x400193a6
ESP-DEBUG >> (00131497s) 4083f360: 0x40801346 0x40801346 0x4083f3e0 0x00040020 0x00000000 0x4218063c 0x0000011f 0x4083f394
ESP-DEBUG >> (00131503s) 4083f380: 0x00000001 0x00000000 0x00000000 0x40000000 0x4081095e 0x0000011f 0x00000001 0x00000006
ESP-DEBUG >> (00131513s) 4083f3a0: 0x40844f10 0x40830000 0x40844ed8 0x40803488 0x40844f10 0x40830000 0x40844ed8 0x42068d72
ESP-DEBUG >> (00131520s) 4083f3c0: 0x00000001 0x40830000 0x40844ed8 0x42059a52 0x00000000 0x00000023 0x00000001 0x4084e7e0
ESP-DEBUG >> (00131530s) 4083f3e0: 0x00000001 0x00000000 0x40844ed8 0x420767c6 0x00000001 0x4083a500 0x00001388 0x4084e7e0
ESP-DEBUG >> (00131536s) 4083f400: 0x00000001 0x00000000 0x40844ed8 0x42076c4e 0x40842a84 0x4082fb30 0x42181000 0x00000000
ESP-DEBUG >> (00131546s) 4083f420: 0x00000000 0x00000023 0x42181000 0xfff00000 0x20a40015 0x00000a40 0x40842b2c 0x4206d442
ESP-DEBUG >> (00131552s) 4083f440: 0x00000000 0x42180000 0x40830000 0x40803916 0x4082fb3c 0x40834400 0x40830000 0x4206d5b0
ESP-DEBUG >> (00131563s) 4083f460: 0x4082fb3c 0x40830000 0x40834400 0x408035a0 0x4082fb3c 0x40830000 0x40834400 0x42052808
ESP-DEBUG >> (00131570s) 4083f480: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x40810814
ESP-DEBUG >> (00131580s) 4083f4a0: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00131588s) 4083f4c0: 0x00000000 0xa5a5a5a5 0xa5a5a5a5 0xa5a5a5a5 0xa5a5a5a5 0xa5a5a5a5 0xa5a5a5a5 0x00000150
ESP-DEBUG >> (00131598s) 4083f4e0: 0x4083f220 0x00000000 0x40824670 0x40824670 0x4083f4e0 0x40824668 0x00000002 0x4083ba64
ESP-DEBUG >> (00131606s) 4083f500: 0x4083ba64 0x4083f4e0 0x00000000 0x00000017 0x4083e4dc 0x5f656c62 0x745f6c6c 0x006b7361
ESP-DEBUG >> (00131617s) 4083f520: 0x00000000 0x4083f4d0 0x00000017 0x00000000 0x00000000 0x00000000 0x00000000 0x40832750
ESP-DEBUG >> (00131624s) 4083f540: 0x408327b8 0x40832820 0x00000000 0x00000000 0x00000001 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00131635s) 4083f560: 0x420097c2 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00131642s) 4083f580: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00131653s) 4083f5a0: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00131660s) 4083f5c0: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00131671s) 4083f5e0: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00131678s) 4083f600: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00131689s) 4083f620: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000054 0x00000000 0x4083f634 0x00000000
ESP-DEBUG >> (00131697s) 4083f640: 0x00000000 0x00000000 0x4083f64c 0xffffffff 0x4083f64c 0x4083f64c 0x00000000 0x4083f660
ESP-DEBUG >> (00131709s) 4083f660: 0xffffffff 0x4083f660 0x4083f660 0x00000001 0x00000001 0x00000000 0x9600ffff 0x00000000
ESP-DEBUG >> (00131716s) 
ESP-DEBUG >> (00131727s) 
ESP-DEBUG >> (00131734s) 
ESP-DEBUG >> (00131745s) ELF file SHA256: badb4490e
ESP-DEBUG >> (00131752s) 
ESP-DEBUG >> (00131762s) Rebooting...
ESP-DEBUG >> (00132191s) I (698) esp_image: segment 3: paddr=001ec2c0 vaddr=40804f84 size=1aef8h (110328) load
ESP-DEBUG >> (00132238s) I (745) esp_image: segment 4: paddr=002071c0 vaddr=4081fe80 size=04400h ( 17408) load
ESP-DEBUG >> (00132254s) I (753) esp_image: segment 5: paddr=0020b5c8 vaddr=50000000 size=0005ch (    92) load
ESP-DEBUG >> (00132262s) I (755) esp_image: segment 6: paddr=0020b62c vaddr=5000005c size=00020h (    32) load
ESP-DEBUG >> (00132270s) I (772) boot: Loaded app from partition at offset 0x60000
ESP-DEBUG >> (00132282s) I (773) boot: Disabling RNG early entropy source...
ESP-DEBUG >> (00132473s) I (984) at-init: at param mode: 1
ESP-DEBUG >> (00132558s) I (1052) at-uart: AT cmd port:uart1 tx:7 rx:6 cts:5 rts:4 baudrate:115200
ESP-DEBUG >> (00132565s) I (1053) at-init: module_name: ESP32C6-4MB
ESP-DEBUG >> (00132571s) I (1054) at-init: max tx power=78, ret=0
ESP-DEBUG >> (00132579s) I (1056) at-init: v4.1.0.0-dev (https://github.com/espressif/esp-at)

AT+GMR

ESP-AT << (00003457s) AT+GMR
ESP-AT >> (00003473s) AT version:3.5.0.0-dev(33af283 - ESP32C6 - Mar 13 2025 10:42:43)
ESP-AT >> (00003488s) SDK version:v5.4-dirty
ESP-AT >> (00003502s) compile time(78bfd38):Mar 25 2025 12:34:21
ESP-AT >> (00003517s) Bin version:v4.1.0.0-dev(ESP32C6-4MB)

[Luxin812]

@JHedgesBartec
When convenient for you, please download the attached 4MB AT temporary test firmware to your device at address 0x0, and then retest to confirm whether the crash issue still exists in your usage scenario. Please note that the AT temporary test firmware in this attachment is only for verifying whether the issue has been fixed and is not the official firmware. Do not use it for production. Thank you!

test_crash.zip

[JHedgesBartec]

@Luxin812 Device has crashed with the same assert.

ESP-DEBUG >> (00002391s) ESP-ROM:esp32c6-20220919
ESP-DEBUG >> (00002412s) Build:Sep 19 2022
ESP-DEBUG >> (00002418s) rst:0x1 (POWERON),boot:0x6f (SPI_FAST_FLASH_BOOT)
ESP-DEBUG >> (00002423s) SPIWP:0xee
ESP-DEBUG >> (00002434s) mode:DIO, clock div:2
ESP-DEBUG >> (00002440s) load:0x40875720,len:0x16b8
ESP-DEBUG >> (00002451s) load:0x4086c110,len:0xe64
ESP-DEBUG >> (00002456s) load:0x4086e610,len:0x30e8
ESP-DEBUG >> (00002467s) entry 0x4086c11a
ESP-DEBUG >> (00002504s) I (23) boot: ESP-IDF v5.4.1-1-g2f7dcd862a-dirty 2nd stage bootloader
ESP-DEBUG >> (00002510s) I (24) boot: compile time Mar 28 2025 17:21:00
ESP-DEBUG >> (00002515s) I (24) boot: chip revision: v0.0
ESP-DEBUG >> (00002527s) I (25) boot: efuse block revision: v0.1
ESP-DEBUG >> (00002533s) I (29) boot.esp32c6: SPI Speed      : 80MHz
ESP-DEBUG >> (00002544s) I (33) boot.esp32c6: SPI Mode       : DIO
ESP-DEBUG >> (00002550s) I (36) boot.esp32c6: SPI Flash Size : 4MB
ESP-DEBUG >> (00002561s) I (40) boot: Enabling RNG early entropy source...
ESP-DEBUG >> (00002567s) I (45) boot: Partition Table:
ESP-DEBUG >> (00002579s) I (47) boot: ## Label            Usage          Type ST Offset   Length
ESP-DEBUG >> (00002585s) I (54) boot:  0 otadata          OTA data         01 00 0000d000 00002000
ESP-DEBUG >> (00002598s) I (60) boot:  1 phy_init         RF data          01 01 0000f000 00001000
ESP-DEBUG >> (00002605s) I (67) boot:  2 nvs              WiFi data        01 02 00010000 0000e000
ESP-DEBUG >> (00002618s) I (73) boot:  3 at_customize     unknown          40 00 0001e000 00042000
ESP-DEBUG >> (00002624s) I (80) boot:  4 ota_0            OTA app          00 10 00060000 001d0000
ESP-DEBUG >> (00002637s) I (86) boot:  5 ota_1            OTA app          00 11 00230000 001d0000
ESP-DEBUG >> (00002643s) I (93) boot: End of partition table
ESP-DEBUG >> (00002655s) I (96) esp_image: segment 0: paddr=00060020 vaddr=42170020 size=2b3ech (177132) map
ESP-DEBUG >> (00002661s) I (136) esp_image: segment 1: paddr=0008b414 vaddr=40800000 size=04c04h ( 19460) load
ESP-DEBUG >> (00002674s) I (141) esp_image: segment 2: paddr=00090020 vaddr=42000020 size=1602c8h (1442504) map
ESP-DEBUG >> (00002804s) I (407) esp_image: segment 3: paddr=001f02f0 vaddr=40804c04 size=1b49ch (111772) load
ESP-DEBUG >> (00002853s) I (432) esp_image: segment 4: paddr=0020b794 vaddr=408200a0 size=04524h ( 17700) load
ESP-DEBUG >> (00002860s) I (436) esp_image: segment 5: paddr=0020fcc0 vaddr=50000000 size=0005ch (    92) load
ESP-DEBUG >> (00002866s) I (437) esp_image: segment 6: paddr=0020fd24 vaddr=5000005c size=00020h (    32) load
ESP-DEBUG >> (00002879s) I (451) boot: Loaded app from partition at offset 0x60000
ESP-DEBUG >> (00002884s) I (451) boot: Disabling RNG early entropy source...
ESP-DEBUG >> (00003083s) I (690) at-init: at param mode: 1
ESP-AT >> (00003171s) 
ESP-AT >> (00003178s) ready
ESP-DEBUG >> (00003190s) I (766) at-uart: AT cmd port:uart1 tx:7 rx:6 cts:5 rts:4 baudrate:115200
ESP-DEBUG >> (00003202s) I (767) at-init: module_name: ESP32C6-4MB
ESP-DEBUG >> (00003207s) I (768) at-init: max tx power=78, ret=0
ESP-DEBUG >> (00003220s) I (770) at-init: v4.1.0.0-dev (unknown)
ESP-AT << (00003225s) ATE0
ESP-AT >> (00003239s) ATE0
ESP-AT >> (00003251s) 
ESP-AT >> (00003266s) OK
ESP-AT << (00003280s) AT+UART_CUR=921600,8,1,0,1
ESP-AT >> (00003297s) 
ESP-AT >> (00003306s) OK
ESP-AT << (00003318s) AT+GMR
ESP-AT >> (00003332s) AT version:3.5.0.0-dev(33af283 - ESP32C6 - Mar 13 2025 10:42:43)
ESP-AT >> (00003342s) SDK version:v5.4.1-1-g2f7dcd862a-dirty
ESP-AT >> (00003355s) compile time(78bfd389):Mar 28 2025 17:21:14
ESP-AT >> (00003367s) Bin version:v4.1.0.0-dev(ESP32C6-4MB)
ESP-AT >> (00003379s) 
ESP-AT >> (00003391s) OK
ESP-AT << (00003402s) AT+CWINIT=0
ESP-AT >> (00003420s) 
ESP-AT >> (00003427s) OK
ESP-AT << (00003439s) AT+BLEINIT=2
ESP-DEBUG >> (00003514s) I (1086) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003520s) I (1086) at-ble: ble attribute[3]: 2800
ESP-DEBUG >> (00003525s) I (1086) at-ble: ble attribute[7]: A002
ESP-DEBUG >> (00003537s) I (1087) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003543s) I (1089) at-ble: ble attribute[3]: 2803
ESP-DEBUG >> (00003554s) I (1093) at-ble: ble attribute[7]: 02
ESP-DEBUG >> (00003560s) I (1096) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003571s) I (1099) at-ble: ble attribute[3]: C300
ESP-DEBUG >> (00003577s) I (1103) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003588s) I (1106) at-ble: ble attribute[3]: 2901
ESP-DEBUG >> (00003593s) I (1110) at-ble: ble attribute[4]: 11
ESP-DEBUG >> (00003740s) I (1113) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003746s) I (1117) at-ble: ble attribute[3]: 2803
ESP-DEBUG >> (00003752s) I (1120) at-ble: ble attribute[7]: 02
ESP-DEBUG >> (00003765s) I (1124) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003770s) I (1127) at-ble: ble attribute[3]: C301
ESP-DEBUG >> (00003781s) I (1131) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003787s) I (1134) at-ble: ble attribute[3]: 2901
ESP-DEBUG >> (00003799s) I (1137) at-ble: ble attribute[4]: 11
ESP-DEBUG >> (00003804s) I (1141) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003815s) I (1144) at-ble: ble attribute[3]: 2803
ESP-DEBUG >> (00003820s) I (1148) at-ble: ble attribute[7]: 08
ESP-DEBUG >> (00003831s) I (1151) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003837s) I (1154) at-ble: ble attribute[3]: C302
ESP-DEBUG >> (00003848s) I (1158) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003853s) I (1161) at-ble: ble attribute[3]: 2901
ESP-DEBUG >> (00003864s) I (1165) at-ble: ble attribute[4]: 01
ESP-DEBUG >> (00003870s) I (1169) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003881s) I (1172) at-ble: ble attribute[3]: 2803
ESP-DEBUG >> (00003886s) I (1175) at-ble: ble attribute[7]: 04
ESP-DEBUG >> (00003897s) I (1179) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003903s) I (1182) at-ble: ble attribute[3]: C303
ESP-DEBUG >> (00003913s) I (1186) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003919s) I (1189) at-ble: ble attribute[3]: 2901
ESP-DEBUG >> (00003929s) I (1193) at-ble: ble attribute[4]: 10
ESP-DEBUG >> (00003935s) I (1196) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003945s) I (1199) at-ble: ble attribute[3]: 2803
ESP-DEBUG >> (00003951s) I (1203) at-ble: ble attribute[7]: 08
ESP-DEBUG >> (00003961s) I (1207) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003967s) I (1210) at-ble: ble attribute[3]: C304
ESP-DEBUG >> (00003977s) I (1214) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00003983s) I (1217) at-ble: ble attribute[3]: 2803
ESP-DEBUG >> (00003993s) I (1220) at-ble: ble attribute[7]: 10
ESP-DEBUG >> (00003999s) I (1224) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004010s) I (1227) at-ble: ble attribute[3]: C305
ESP-DEBUG >> (00004015s) I (1231) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004026s) I (1234) at-ble: ble attribute[3]: 2902
ESP-DEBUG >> (00004032s) I (1238) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004043s) I (1241) at-ble: ble attribute[3]: 2803
ESP-DEBUG >> (00004049s) I (1244) at-ble: ble attribute[7]: 20
ESP-DEBUG >> (00004060s) I (1248) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004066s) I (1251) at-ble: ble attribute[3]: C306
ESP-DEBUG >> (00004077s) I (1255) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004082s) I (1258) at-ble: ble attribute[3]: 2902
ESP-DEBUG >> (00004093s) I (1262) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004099s) I (1265) at-ble: ble attribute[3]: 2803
ESP-DEBUG >> (00004112s) I (1269) at-ble: ble attribute[7]: 02
ESP-DEBUG >> (00004125s) I (1272) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004130s) I (1275) at-ble: ble attribute[3]: C307
ESP-DEBUG >> (00004141s) I (1279) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004147s) I (1282) at-ble: ble attribute[3]: 2901
ESP-DEBUG >> (00004159s) I (1286) at-ble: ble attribute[4]: 11
ESP-DEBUG >> (00004164s) I (1290) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004176s) I (1293) at-ble: ble attribute[3]: 2800
ESP-DEBUG >> (00004181s) I (1296) at-ble: ble attribute[7]: A003
ESP-DEBUG >> (00004193s) I (1300) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004198s) I (1303) at-ble: ble attribute[3]: 2803
ESP-DEBUG >> (00004210s) I (1307) at-ble: ble attribute[7]: 02
ESP-DEBUG >> (00004216s) I (1310) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004228s) I (1313) at-ble: ble attribute[3]: C400
ESP-DEBUG >> (00004233s) I (1317) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004244s) I (1320) at-ble: ble attribute[3]: 2901
ESP-DEBUG >> (00004250s) I (1324) at-ble: ble attribute[4]: 11
ESP-DEBUG >> (00004262s) I (1328) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004268s) I (1331) at-ble: ble attribute[3]: 2803
ESP-DEBUG >> (00004280s) I (1334) at-ble: ble attribute[7]: 02
ESP-DEBUG >> (00004285s) I (1338) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004297s) I (1341) at-ble: ble attribute[3]: C401
ESP-DEBUG >> (00004302s) I (1345) at-ble: ble attribute[2]: 16
ESP-DEBUG >> (00004313s) I (1348) at-ble: ble attribute[3]: 2901
ESP-DEBUG >> (00004318s) I (1352) at-ble: ble attribute[4]: 11
ESP-DEBUG >> (00004329s) I (1360) at-ble: registered service 0x1800 with handle=1
ESP-DEBUG >> (00004334s) I (1361) at-ble: registering characteristic 0x2a00 with def_handle=2 val_handle=3
ESP-DEBUG >> (00004346s) I (1367) at-ble: registering characteristic 0x2a01 with def_handle=4 val_handle=5
ESP-DEBUG >> (00004352s) I (1374) at-ble: registered service 0x1801 with handle=6
ESP-DEBUG >> (00004365s) I (1379) at-ble: registering characteristic 0x2a05 with def_handle=7 val_handle=8
ESP-DEBUG >> (00004371s) I (1387) at-ble: registering characteristic 0x2b3a with def_handle=10 val_handle=11
ESP-DEBUG >> (00004383s) I (1394) at-ble: registering characteristic 0x2b29 with def_handle=12 val_handle=13
ESP-DEBUG >> (00004390s) I (1401) at-ble: registered service 0xa002 with handle=14
ESP-DEBUG >> (00004400s) I (1407) at-ble: registering characteristic 0xc300 with def_handle=15 val_handle=16
ESP-DEBUG >> (00004407s) I (1414) at-ble: registering descriptor 0x2901 with handle=17
ESP-DEBUG >> (00004418s) I (1419) at-ble: registering characteristic 0xc301 with def_handle=18 val_handle=19
ESP-DEBUG >> (00004425s) I (1427) at-ble: registering descriptor 0x2901 with handle=20
ESP-DEBUG >> (00004437s) I (1432) at-ble: registering characteristic 0xc302 with def_handle=21 val_handle=22
ESP-DEBUG >> (00004443s) I (1440) at-ble: registering descriptor 0x2901 with handle=23
ESP-DEBUG >> (00004456s) I (1445) at-ble: registering characteristic 0xc303 with def_handle=24 val_handle=25
ESP-DEBUG >> (00004462s) I (1453) at-ble: registering descriptor 0x2901 with handle=26
ESP-DEBUG >> (00004475s) I (1458) at-ble: registering characteristic 0xc304 with def_handle=27 val_handle=28
ESP-DEBUG >> (00004482s) I (1465) at-ble: registering characteristic 0xc305 with def_handle=29 val_handle=30
ESP-DEBUG >> (00004495s) I (1473) at-ble: registering characteristic 0xc306 with def_handle=32 val_handle=33
ESP-DEBUG >> (00004502s) I (1480) at-ble: registering characteristic 0xc307 with def_handle=35 val_handle=36
ESP-DEBUG >> (00004514s) I (1487) at-ble: registering descriptor 0x2901 with handle=37
ESP-DEBUG >> (00004520s) I (1493) at-ble: registered service 0xa003 with handle=38
ESP-DEBUG >> (00004531s) I (1498) at-ble: registering characteristic 0xc400 with def_handle=39 val_handle=40
ESP-DEBUG >> (00004537s) I (1505) at-ble: registering descriptor 0x2901 with handle=41
ESP-DEBUG >> (00004549s) I (1511) at-ble: registering characteristic 0xc401 with def_handle=42 val_handle=43
ESP-DEBUG >> (00004556s) I (1518) at-ble: registering descriptor 0x2901 with handle=44
ESP-AT >> (00004568s) 
ESP-AT >> (00004574s) OK
ESP-AT << (00004586s) AT+BLEADDR?
ESP-AT >> (00004599s) +BLEADDR:"40:4c:ca:43:ad:66"
ESP-AT >> (00004612s) OK
ESP-AT << (00004624s) AT+BLESECPARAM=13,0,16,3,3
ESP-AT >> (00004638s) 
ESP-AT >> (00004651s) OK
ESP-AT << (00004664s) AT+BLESETKEY=123456
ESP-AT >> (00004671s) 
ESP-AT >> (00004684s) OK
ESP-AT << (00004698s) AT+BLENAME="TPG_6600000523"
ESP-AT >> (00004713s) 
ESP-AT >> (00004723s) OK
ESP-AT << (00004736s) AT+BLEADVPARAM=50,50,0,0,7,0
ESP-AT >> (00004752s) 
ESP-AT >> (00004760s) OK
ESP-AT << (00004772s) AT+BLEADVDATA="02010603031DBA0F095450475F36363030303030353233"
ESP-AT >> (00004793s) 
ESP-AT >> (00004799s) OK
ESP-AT << (00004812s) AT+BLEADVSTART
ESP-AT >> (00004826s) 
ESP-AT >> (00004835s) OK
Mode Enter 0
ESP-AT << (00021721s) AT+BLEENCDEV?
ESP-AT >> (00021881s) 
ESP-AT >> (00021888s) OK
ESP-AT >> (00032001s) +BLECONN:0,"5a:4f:df:1c:92:3b"
ESP-DEBUG >> (00032013s) I (29581) at-ble: connection established, status=0
ESP-DEBUG >> (00032020s) I (29582) at-ble: handle=0 our_ota_addr_type=0 our_ota_addr=66:ad:43:ca:4c:40
ESP-DEBUG >> (00032026s) I (29582) at-ble: our_id_addr_type=0 our_id_addr=66:ad:43:ca:4c:40
ESP-DEBUG >> (00032038s) I (29588) at-ble: peer_ota_addr_type=1 peer_ota_addr=3b:92:1c:df:4f:5a
ESP-DEBUG >> (00032045s) I (29594) at-ble: peer_id_addr_type=1 peer_id_addr=3b:92:1c:df:4f:5a
ESP-DEBUG >> (00032060s) I (29600) at-ble: conn_itvl=39 conn_latency=0 supervision_timeout=500 encrypted=0 authenticated=0 bonded=0
ESP-DEBUG >> (00032067s) I (29610) at-ble: advertise completed, reason=0
ESP-AT >> (00032944s) +BLECONNPARAM:0,6,6,6,0,500
ESP-DEBUG >> (00032955s) I (30525) at-ble: connection updated, status=0
ESP-DEBUG >> (00032964s) I (30526) at-ble: handle=0 our_ota_addr_type=0 our_ota_addr=66:ad:43:ca:4c:40
ESP-DEBUG >> (00032971s) I (30526) at-ble: our_id_addr_type=0 our_id_addr=66:ad:43:ca:4c:40
ESP-DEBUG >> (00032984s) I (30532) at-ble: peer_ota_addr_type=1 peer_ota_addr=3b:92:1c:df:4f:5a
ESP-DEBUG >> (00032991s) I (30538) at-ble: peer_id_addr_type=1 peer_id_addr=3b:92:1c:df:4f:5a
ESP-DEBUG >> (00033006s) I (30544) at-ble: conn_itvl=6 conn_latency=0 supervision_timeout=500 encrypted=0 authenticated=0 bonded=0
ESP-DEBUG >> (00033196s) BLE assert: line 291 in function r_ble_ll_utils_remapped_channel, param: 0x0, 0x0
ESP-DEBUG >> (00033204s) assert failed: osi_assert_wrapper bt.c:492 (0)
ESP-DEBUG >> (00033211s) Core  0 register dump:
ESP-DEBUG >> (00033224s) MEPC    : 0x4080092c  RA      : 0x408107ca  SP      : 0x4083f350  GP      : 0x408208a4  
ESP-DEBUG >> (00033232s) TP      : 0x4083f5b0  T0      : 0x37363534  T1      : 0x7271706f  T2      : 0x33323130  
ESP-DEBUG >> (00033245s) S0/FP   : 0x00000099  S1      : 0x00000001  A0      : 0x4083f38c  A1      : 0x408238b9  
ESP-DEBUG >> (00033253s) A2      : 0x00000001  A3      : 0x00000029  A4      : 0x00000001  A5      : 0x4082f000  
ESP-DEBUG >> (00033266s) A6      : 0x0000000c  A7      : 0x76757473  S2      : 0x00000009  S3      : 0x4083f48e  
ESP-DEBUG >> (00033274s) S4      : 0x408238b8  S5      : 0x4080416a  S6      : 0x00000001  S7      : 0x01c2221c  
ESP-DEBUG >> (00033287s) S8      : 0x01c22757  S9      : 0x00000002  S10     : 0x00000000  S11     : 0x00000000  
ESP-DEBUG >> (00033295s) T3      : 0x6e6d6c6b  T4      : 0x6a696867  T5      : 0x66656463  T6      : 0x62613938  
ESP-DEBUG >> (00033308s) MSTATUS : 0x00001881  MTVEC   : 0x40800001  MCAUSE  : 0x00000002  MTVAL   : 0x00000000  
ESP-DEBUG >> (00033316s) MHARTID : 0x00000000  
ESP-DEBUG >> (00033328s) 
ESP-DEBUG >> (00033336s) Stack memory:
ESP-DEBUG >> (00033349s) 4083f350: 0x40844730 0x40880000 0x4218f1f8 0x408158d4 0x4082389c 0x4218f1f8 0x408238ac 0x42177aaf
ESP-DEBUG >> (00033358s) 4083f370: 0x408238b0 0x4083f384 0x408238b4 0x4217cd80 0x408238b8 0x00323934 0x00000014 0x65737361
ESP-DEBUG >> (00033371s) 4083f390: 0x66207472 0x656c6961 0x6f203a64 0x615f6973 0x72657373 0x72775f74 0x65707061 0x74622072
ESP-DEBUG >> (00033379s) 4083f3b0: 0x343a632e 0x28203239 0xff002930 0x4001924e 0x0000080c 0x00000014 0x00000000 0x40800d20
ESP-DEBUG >> (00033393s) 4083f3d0: 0x00310030 0x0000080c 0x00000014 0x00000004 0x0000080c 0x00000014 0x00000005 0x4080134a
ESP-DEBUG >> (00033401s) 4083f3f0: 0x4083f5b0 0x0000080c 0x00000014 0x00000000 0x00000000 0x00000002 0x01c22757 0x01c2221c
ESP-DEBUG >> (00033414s) 4083f410: 0x00000001 0x4080416a 0x00000001 0x00000006 0x0000001b 0x00000000 0x408340d4 0x400193a6
ESP-DEBUG >> (00033422s) 4083f430: 0x4084549c 0x40880000 0x408322b0 0x00042574 0x00000000 0x421909d0 0x00000123 0x4083f464
ESP-DEBUG >> (00033436s) 4083f450: 0x00000001 0x00000000 0x00000000 0x40000000 0x00000001 0x00000123 0x00000001 0x00000006
ESP-DEBUG >> (00033444s) 4083f470: 0x0000001b 0x00000000 0x408340d4 0x40803430 0x0000001b 0x00000000 0x408340d4 0x4206ac14
ESP-DEBUG >> (00033458s) 4083f490: 0x00000001 0x00000000 0x408340d4 0x4205b86e 0x00000000 0x00ffffff 0x00000001 0x4084e954
ESP-DEBUG >> (00033466s) 4083f4b0: 0x00000001 0x00000000 0x408340d4 0x42079288 0x00000001 0x40844a2c 0x00000001 0x4084e954
ESP-DEBUG >> (00033480s) 4083f4d0: 0x00000001 0x00000000 0x408340d4 0x4207980a 0x00000003 0x00000009 0x00000000 0x40844704
ESP-DEBUG >> (00033488s) 4083f4f0: 0x40843f04 0x00000000 0x00000000 0x00000000 0x00000000 0x00000023 0x42191000 0xfff00000
ESP-DEBUG >> (00033502s) 4083f510: 0x20a40015 0x00000a40 0x40843ad0 0x4206fa1e 0x00000000 0x42190000 0x40830000 0x408038ce
ESP-DEBUG >> (00033510s) 4083f530: 0x4082fec0 0x4084546c 0x40830000 0x4206fb8c 0x4082fec0 0x40830000 0x4084546c 0x40803558
ESP-DEBUG >> (00033524s) 4083f550: 0x4082fec0 0x40830000 0x4084546c 0x420541ee 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00033532s) 4083f570: 0x00000000 0x00000000 0x00000000 0x408109f6 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00033546s) 4083f590: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0xa5a5a5a5 0xa5a5a5a5 0xa5a5a5a5
ESP-DEBUG >> (00033554s) 4083f5b0: 0xa5a5a5a5 0xa5a5a5a5 0x00000150 0x4083f470 0x00000000 0x408249c0 0x408249c0 0x4083f5bc
ESP-DEBUG >> (00033568s) 4083f5d0: 0x408249b8 0x00000002 0x4083bba4 0x4083bba4 0x4083f5bc 0x00000000 0x00000017 0x4083e5b8
ESP-DEBUG >> (00033576s) 4083f5f0: 0x5f656c62 0x745f6c6c 0x006b7361 0x00000000 0x4083f5b0 0x00000017 0x00000000 0x00000000
ESP-DEBUG >> (00033591s) 4083f610: 0x00000000 0x00000000 0x40832c00 0x40832c68 0x40832cd0 0x00000000 0x00000000 0x00000001
ESP-DEBUG >> (00033599s) 4083f630: 0x00000000 0x00000000 0x00000000 0x4200999a 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00033613s) 4083f650: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00033621s) 4083f670: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00033636s) 4083f690: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00033644s) 4083f6b0: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00033659s) 4083f6d0: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
ESP-DEBUG >> (00033667s) 4083f6f0: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000054
ESP-DEBUG >> (00033682s) 4083f710: 0x00000000 0x4083f710 0x00000000 0x00000000 0x00000000 0x4083f728 0xffffffff 0x4083f728
ESP-DEBUG >> (00033690s) 4083f730: 0x4083f728 0x00000000 0x4083f73c 0xffffffff 0x4083f73c 0x4083f73c 0x00000001 0x00000001
ESP-DEBUG >> (00033707s) 
ESP-DEBUG >> (00033714s) 
ESP-DEBUG >> (00033727s) 
ESP-DEBUG >> (00033734s) ELF file SHA256: cecfd912b
ESP-DEBUG >> (00033748s) 
ESP-DEBUG >> (00033755s) Rebooting...
ESP-DEBUG (CRASH) (00033769s)
ESP-DEBUG >> (00034092s) I (706) esp_image: segment 3: paddr=001f02f0 vaddr=40804c04 size=1b49ch (111772) load
ESP-DEBUG >> (00034140s) I (753) esp_image: segment 4: paddr=0020b794 vaddr=408200a0 size=04524h ( 17700) load
ESP-DEBUG >> (00034156s) I (762) esp_image: segment 5: paddr=0020fcc0 vaddr=50000000 size=0005ch (    92) load
ESP-DEBUG >> (00034163s) I (763) esp_image: segment 6: paddr=0020fd24 vaddr=5000005c size=00020h (    32) load
ESP-DEBUG >> (00034170s) I (781) boot: Loaded app from partition at offset 0x60000
ESP-DEBUG >> (00034181s) I (782) boot: Disabling RNG early entropy source...
ESP-DEBUG >> (00034392s) I (1010) at-init: at param mode: 1
ESP-DEBUG >> (00034470s) I (1073) at-uart: AT cmd port:uart1 tx:7 rx:6 cts:5 rts:4 baudrate:115200
ESP-DEBUG >> (00034478s) I (1074) at-init: module_name: ESP32C6-4MB
ESP-DEBUG >> (00034485s) I (1075) at-init: max tx power=78, ret=0
ESP-DEBUG >> (00034498s) I (1077) at-init: v4.1.0.0-dev (unknown)

[JHedgesBartec]

If it helps, I am testing with a 2023 Google Pixel tablet running Android 14, however the issue is present with older Android hardware and OS versions.

[XionHsieh]

@JHedgesBartec

Do you enable this configuration 'BT_LE_CTRL_CHAN_ASS_EN'? If so, please turn off the configuration item and test again.

[JHedgesBartec]

@XionHsieh I have tested this issue in the v4.0.0.0 release of ESP-AT

I cannot find BT_LE_CTRL_CHAN_ASS_EN in menuconfig, please could you indicate where it is?

[JHedgesBartec]

@XionHsieh I do not have that configuration option, this is what I see.

The git issue I am using is currently on 5302cdc7

ESP32-C6 using Nimble

[XionHsieh]

@JHedgesBartec

Could you please update the IDF version and test it again?

Use the esp-at master branch
commit: 9076ddc

Then manually modify the IDF version
The modified location is:

esp-at/module_config/module_esp32c6_default/IDF_VERSION

Line 2 in 9076ddc

commit:67c1de1eebe095d554d281952fde63c16ee2dca0

Change the IDF commit to： 2f7dcd862a62ec7380abe3e64c952d8038661463

Check this configuration item, it needs to be closed：

[JHedgesBartec]

@XionHsieh ESP-AT master does not build with this IDF version, from idf_py_stderr_output:

esp-at branch: master
esp-at docs version: latest
no extra component dirs
silence:0, ld core:/home/bartec/Development/esp32_c6_at/esp-at/components/at/lib/libesp32c6_at_core.a
Parsing CSV input...
Verifying table...
CMake Error at esp-idf/tools/cmake/gdbinit.cmake:40 (file):
  file FILE([TO_CMAKE_PATH|TO_NATIVE_PATH] path result) must be called with
  exactly three arguments.
Call Stack (most recent call first):
  esp-idf/tools/cmake/project.cmake:356 (__generate_gdbinit)
  esp-idf/tools/cmake/project.cmake:923 (__project_info)
  CMakeLists.txt:130 (project)

Steps taken:

1. Cloned master with commit id 9076ddc
2. Modified IDF version tag as described above
3. Run build.py install and select:
   a. PLATFORM_ESP32C6 (5)
   b. ESP32C6-4MB (1)
   c. No (0)
4. Run build.py build

[XionHsieh]

@JHedgesBartec
I have tested that it can be compiled and run, can you post the failure log?

log.txt

[JHedgesBartec]

See files below:
log.txt

Referenced in log.txt:
CMakeOutput.log
idf_py_stderr_output_663616.txt
idf_py_stdout_output_663616.txt

[JHedgesBartec]

Using the same steps without modifying the IDF_VERSION builds OK for the same commit id

[JHedgesBartec]

@XionHsieh Any suggestions on how to build this?