RE: SDK-NRF-v3.0.2: nRF7002 freeze on transmissions

Simonr — Tue, 29 Jul 2025 11:58:59 GMT

Glad to hear that Sebastian. Closing this case then!

RE: SDK-NRF-v3.0.2: nRF7002 freeze on transmissions

Sebastian Petersen — Mon, 28 Jul 2025 19:51:48 GMT

Hello Simon,

We figured out the source of the error. The output voltage for VBAT was very unstable under an oscillospoce with a PK-PK of 700mV around an RMS of 3.3V. Since the current draw was larger than expected the resulting voltage drop and oscillations would drop the VBAT voltage under 2.9V at some points during transmissions. We experienced a plain old brown out in this case.

Thank you for you time, we have resolved the issue.

RE: SDK-NRF-v3.0.2: nRF7002 freeze on transmissions

Simonr — Thu, 24 Jul 2025 12:19:04 GMT

Are you able to reproduce this on an nRF7002 DK or is it only reproducible on these custom boards? Let's try to narrow down whether it's a HW or SW issue first.

Best regards,

Simon

RE: SDK-NRF-v3.0.2: nRF7002 freeze on transmissions

Sebastian Petersen — Thu, 24 Jul 2025 12:06:24 GMT

Update:

It seems like the nRF7002 doesn't freeze, as we were able to use the nrf70 util to get statistics.
However, some of the values look like a buffer overflow.

Please see the rpu_stats_mem output from before a wifi connect (just after booting up):

uart:~$ nrf70 util rpu_stats_mem 
RPU UMAC - global
======================
tx_cmd: 2324335274
tx_cmds_currently_in_use: 2324335274
tx_done_events_send_to_host: 2324335274
tx_cmd_to_lmac: 2324335274
tx_dones_from_lmac: 21
total_cmds_to_lmac: 21
cmd_processing: 0
lmac_events: 21
rx_events: 0
current_refill_gap: 0
umac_consumed_pkts: 0
host_consumed_pkts: 0
rx_mbox_post: 21
rx_mbox_receive: 21
cmd_trigger_scan: 0
event_scan_done: 0
umac_scan_req: 0
umac_scan_complete: 0
cmd_set_ifflags: 1
cmd_set_ifflags_done: 1
command_cnt: 23
send_rx_buffs_to_host: 13
event_node_alloc_fail: 0
hpqm_event_pop_fail: 0
total_events_to_host: 14
cmd_init: 257
event_init_done: 2150064208
null_skb_pointer_from_lmac: 8409154

RPU LMAC - global
======================
resetCmdCnt: 1
resetCompleteEventCnt: 1
unableGenEvent: 0
chProgCmdCnt: 0
channelProgDone: 0
txPktCnt: 0
txPktDoneCnt: 0
scanPktCnt: 0
internalPktCnt: 0
internalPktDoneCnt: 0
ackRespCnt: 0
txTimeout: 0
deaggIsr: 15425
deaggInptrDescEmpty: 0
deaggCircularBufferFull: 0
lmacRxisrCnt: 15426
rxDecryptcnt: 0
processDecryptFail: 0
prepaRxEventFail: 0
rxDeadlockCnt: 0
rxMpduCrcSuccessCnt: 11293
rxMpduCrcFailCnt: 2544
rxOfdmCrcSuccessCnt: 1249
rxOfdmCrcFailCnt: 321
rxDSSSCrcSuccessCnt: 10047
rxDSSSCrcFailCnt: 2223
rxCryptoStartCnt: 0
rxCryptoDoneCnt: 0
rxEventBufFull: 0
rxExtramBufFull: 0
scanReq: 0
scanComplete: 0
scanAbortReq: 0
scanAbortComplete: 0
internalBufPoolNull: 0

RPU LMAC - soft_recovery
======================
rpusoftLockup: 0
rpusoftLockupRecoverySuccess: 0

RPU LMAC - phy
======================
dsss_crc32_fail_cnt: 2223
dsss_crc32_pass_cnt: 10050
ofdm_crc32_fail_cnt: 321
ofdm_crc32_pass_cnt: 1249

Then after trying to connect to a wifi access point:

RPU UMAC - global
======================
tx_cmd: 2324335274
tx_cmds_currently_in_use: 2324335274
tx_done_events_send_to_host: 2324335274
tx_cmd_to_lmac: 2324335274
tx_dones_from_lmac: 83
total_cmds_to_lmac: 83
cmd_processing: 0
lmac_events: 108
rx_events: 25
current_refill_gap: 0
umac_consumed_pkts: 25
host_consumed_pkts: 0
rx_mbox_post: 108
rx_mbox_receive: 108
cmd_trigger_scan: 5
event_scan_done: 1
umac_scan_req: 2
umac_scan_complete: 1
cmd_set_ifflags: 1
cmd_set_ifflags_done: 1
command_cnt: 134
send_rx_buffs_to_host: 59
event_node_alloc_fail: 0
hpqm_event_pop_fail: 0
total_events_to_host: 60
cmd_init: 257
event_init_done: 2150064208
null_skb_pointer_from_lmac: 8409154

RPU LMAC - global
======================
resetCmdCnt: 1
resetCompleteEventCnt: 1
unableGenEvent: 0
chProgCmdCnt: 1
channelProgDone: 1
txPktCnt: 1
txPktDoneCnt: 0
scanPktCnt: 22
internalPktCnt: 0
internalPktDoneCnt: 22
ackRespCnt: 0
txTimeout: 22
deaggIsr: 31475
deaggInptrDescEmpty: 0
deaggCircularBufferFull: 0
lmacRxisrCnt: 31475
rxDecryptcnt: 29
processDecryptFail: 0
prepaRxEventFail: 0
rxDeadlockCnt: 0
rxMpduCrcSuccessCnt: 22748
rxMpduCrcFailCnt: 5443
rxOfdmCrcSuccessCnt: 2506
rxOfdmCrcFailCnt: 834
rxDSSSCrcSuccessCnt: 20242
rxDSSSCrcFailCnt: 4609
rxCryptoStartCnt: 25
rxCryptoDoneCnt: 25
rxEventBufFull: 0
rxExtramBufFull: 0
scanReq: 1
scanComplete: 1
scanAbortReq: 0
scanAbortComplete: 0
internalBufPoolNull: 0

RPU LMAC - soft_recovery
======================
rpusoftLockup: 0
rpusoftLockupRecoverySuccess: 0

RPU LMAC - phy
======================
dsss_crc32_fail_cnt: 4609
dsss_crc32_pass_cnt: 20242
ofdm_crc32_fail_cnt: 834
ofdm_crc32_pass_cnt: 2506

The tx commands looks very much off.
The firmware version is:

uart:~$ nrf70 util show_vers
Driver version: 1.4.0.99
Firmware version: 1.2.14.1