5G-NSA operation quite broken in EM9191 FW 03.06.01.00

I have just tried to force 5G-NSA by disabling SA (AT!RATCA=1,1,0), and the result is very broken:

  • the context only receives/reports an IPv6 address (+CGCONTRDP), although the context is IPv4v6 (same PDP-Type and APN works with FW 03.04.03.00)
  • no response to any DHCPv6 or ICMPv6 request (again, works on 03.04)
  • +COPS? always reports “0”, i.e. no operator/AcT.
  • +CEREG? reports “15” as AcT, which is just an invalid value (not listed in TS 127.007).