USAGE FAULT Stack Overflow when using NCS 3.1.1

RE: USAGE FAULT Stack Overflow when using NCS 3.1.1

Vidar Berg — Wed, 01 Oct 2025 14:59:06 GMT

Excellent! Thank you for reporting back on what the issue was.

RE: USAGE FAULT Stack Overflow when using NCS 3.1.1

Yun531 — Wed, 01 Oct 2025 14:55:31 GMT

Thank you so much! I looked into the zephyr.map and zephyr_final.map and the PSP address falls into the range for the work_q_stack.

.noinit."WEST_TOPDIR/nrf/lib/lte_link_control/common/work_q.c".0
                0x0000000020013d10      0x400 modules/nrf/lib/lte_link_control/lib..__nrf__lib__lte_link_control.a(work_q.c.obj)
                0x0000000020013d10                work_q_stack

I increase the stack size to CONFIG_LTE_LC_WORKQUEUE_STACK_SIZE=2048

Still not sure why the crash log and addr2line didn't print out this info but everything works now! Thanks again!

RE: USAGE FAULT Stack Overflow when using NCS 3.1.1

Vidar Berg — Wed, 01 Oct 2025 12:18:53 GMT

I'm surprised that addr2line failed to return a valid file and line number. I'm not sure what the reason for that could be. But since the crash log reports a stack overflow, it would be good to first determine which stack it occurred in. I would also try doubling the main thread stack to see if it make any difference (CONFIG_MAIN_STACK_SIZE=8192)

The crash log should end with a line that tells which thread the fault occurred in, for example:

E: Current thread: 0x200026a8 (unknown)

If you compile with CONFIG_THREAD_INFO=y, the thread name will also be included. If this line is not printed for some reason, you can look up the PSP address in your zephyr.map file to see which address range the process stack pointer was in when the stack guard got triggered.

RE: USAGE FAULT Stack Overflow when using NCS 3.1.1

Yun531 — Tue, 30 Sep 2025 17:43:15 GMT

Thank you for your response.

Using 0x00029b3b to addr2line also return ??:?

I tried other addresses in the fault message and it either returns ??:? or ??:0.

I have the CONFIG_FPU=y because I need it for handle GNSS latitude and longitude. I checked the .config file in the build folder and it has both CONFIG_FPU=y and CONFIG_FPU_SHARING=y

I decided to enable Memfault shell to manually export the coredump. Here is what I found:

The stack trace is essentially:

__ssvfscanf_r

_vsscanf_r

nrf_modem_at_scanf

modem_info_get_rsrp (nrf/lib/modem_info/modem_info.c:882)

modem_params_get (nrf/modules/memfault-firmware-sdk/memfault_lte_metrics.c:76)

lte_handler (nrf/modules/memfault-firmware-sdk/memfault_lte_metrics.c:119)

event_handler_list_dispatch (nrf/lib/lte_link_control/common/event_handler_list.c:113)

and this is the log before the crash:

<inf> mflt: Reset Reason, RESETREAS=0x10001
<inf> mflt: Reset Causes:I<inf> mflt:  Pin Reset
<inf> mflt: GNU Build ID: b370b80ce32a5558123521aba7473e7ee940a544
<inf> mflt: Periodic background upload scheduled - initial delay=63s period=120s
<inf> nRF9151_LTE: Initializing modem library
<inf> nRF9151_LTE: Comparing credentials: Match
<inf> nRF9151_LTE: Connecting to LTE network
<inf> nRF9151_LTE: LTE cell changed: Cell ID: <id>, Tracking area: <area-id>
<inf> nRF9151_LTE: RRC mode: Connected
<inf> nRF9151_LTE: Network registration status: Connected - roaming
<inf> nRF9151_LTE: Connected to LTE network

After connecting to LTE, I follow the similar behavior in my loop to disable it to switch to GNSS. Reference from this sample code. I'm just wondering if it would be the cause? For example, if memfault is collecting lte metrics, and the modem_info.c:882 calls AT command, would it cause the modem to crash/hang?

RE: USAGE FAULT Stack Overflow when using NCS 3.1.1

Vidar Berg — Tue, 30 Sep 2025 13:48:07 GMT

Hello,

It is possible that the tread analyzer is not showing the thread that had the stack overflow. Are you able to see where the call was made from if you look up the LR address instead (0x00029b3b - 1 thumb bit)?

$ arm-zephyr-eabi-addr2line -e build/nRF9151_lte/zephyr/zephyr.elf 0x00029b3a

I also see that the crashlog is including the FPU registers. Did you enable CONFIG_FPU_SHARING in your project?

Thanks,

Vidar