nrf70 RPU never sends results back

Question

My Setup and Environment We have built a custom PCB with an nRF5340 and an nRF7002Q Wi-Fi module. I have attached the relevant schematics for the PCB. We are using the nRF SDK v3.1.1 and are experiencing Wi-Fi issues on approximately half of our devices. On devices that exhibit the problem, the system is able to initialize the Wi-Fi module and perform a Wi-Fi scan, but when a second Wi-Fi scan is initiated, the Wi-Fi module stops responding. To isolate the problem, I have built Nordic's Wi-Fi shell sample with three additional Kconfig options: CONFIG_NFCT_PINS_AS_GPIOS=y CONFIG_WIFI_NRF70_BUSLIB_LOG_LEVEL_DBG=y CONFIG_SPI_LOG_LEVEL_WRN=y On our custom board, VBAT to the Wi-Fi module is controlled by a load switch, which is configured with: supply-gpios = <&gpio0 21 (GPIO_ACTIVE_HIGH)>; According to the documentation for the nRF7002 device driver, setting this in the device tree should be sufficient: https://docs.zephyrproject.org/4.2.0/build/dts/api/bindings/wifi/nordic%2Cnrf7002-spi.html However, when reading the driver source, the driver does not actually handle this pin. I have therefore added support for it myself in `rpu_hw_if.c`. I have attached the file in which I made the patch. With this patch, the device is able to initialize the Wi-Fi module. I then created a test where I flash the Wi-Fi shell and send the shell command `wifi scan` twice. WiFi Scan Failure Analysis - Second Scan Never Completes The first `wifi scan` command works perfectly. The second `wifi scan` is accepted by the RPU (nRF70 radio) but the RPU never sends scan results or a scan-done event. The host times out after 30 seconds with error `-116` (`ETIMEDOUT`). You can find the logs in attached file Logs.txt but here is my analysis of the logs. Event/Command Reference | ID | Type | Name | |----|------|------| | Command 0 | Command | `NRF_WIFI_UMAC_CMD_TRIGGER_SCAN` | | Command 1 | Command | `NRF_WIFI_UMAC_CMD_GET_SCAN_RESULTS` | | Event 257 | Event | `NRF_WIFI_UMAC_EVENT_TRIGGER_SCAN_START` | | Event 259 | Event | `NRF_WIFI_UMAC_EVENT_SCAN_DONE` | | Event 288 | Event | `NRF_WIFI_UMAC_EVENT_SCAN_RESULT` (raw) | | Event 291 | Event | `NRF_WIFI_UMAC_EVENT_SCAN_DISPLAY_RESULT` | | Event 292 | Event | `NRF_WIFI_UMAC_EVENT_CMD_STATUS` | Scan 1 — Full Event Flow (works) Time Direction What ───────────────────────────────────────────────────────────────────────── 16.729s Host → RPU Command 0 (TRIGGER_SCAN) sent 16.731s RPU → Host Event 257 (TRIGGER_SCAN_START) — scan has begun 16.732s RPU → Host Event 292 (CMD_STATUS) — Command 0 status 0 (success) 17.863s RPU → Host Event 288 (SCAN_RESULT) — raw results arriving 17.980s RPU → Host Event 288 (SCAN_RESULT) — more results 21.343s RPU → Host Event 259 (SCAN_DONE) — scan complete 21.343s Host → RPU Command 1 (GET_SCAN_RESULTS) sent 21.349s RPU → Host Event 291 (SCAN_DISPLAY_RESULT) x4 — formatted results Results printed, "Scan request done" Every step fires correctly: trigger → ack → results stream in → scan done → get results → display results delivered. Scan 2 — Event Flow Stops Dead (fails) Time Direction What ───────────────────────────────────────────────────────────────────────── 45.023s Host → RPU Command 0 (TRIGGER_SCAN) sent 45.026s RPU → Host Event 257 (TRIGGER_SCAN_START) — scan has begun 45.026s RPU → Host Event 292 (CMD_STATUS) — Command 0 status 0 (success) *** SILENCE — no further events from RPU *** ~75s Host timeout fires → "Scan request failed (-116)" The RPU accepted the scan (status 0) and confirmed it started (Event 257), but then **never sends any further events** — no scan results (288), no scan done (259). The host waits 30 seconds and times out. Why This Points to RPU Firmware The host driver did everything correctly on both scans — identical command sequence, identical setup. The RPU **acknowledged** scan 2 with success, meaning: 1. **The command was well-formed** — the RPU parsed and accepted it 2. **The RPU's command interface is alive** — it delivered Event 257 and 292 3. **The interrupt path works** — GPIO IRQs fire, work gets queued and executed (verified with IRQ_FLOW debug instrumentation) 4. **Buffer sizes are not the issue** — increasing `NRF70_RX_NUM_BUFS` from 16 to 48 (default), `NET_BUF_RX_COUNT` from 16 to 48, and `HEAP_MEM_POOL_SIZE` to 65536 did not change the behavior The host has no further role after sending Command 0 — it is purely waiting for the RPU to generate scan events. The RPU accepts the scan but never executes it. Something in the RPU firmware's scan state machine gets stuck after the first scan completes. What Was Ruled Out | Hypothesis | Result | |------------|--------| | IRQ not firing on second scan | Ruled out — IRQ_FLOW instrumentation showed GPIO ISR, work scheduling, and callbacks all working correctly | | IRQ callback not registered | Ruled out — no UNREG message between scans, `intr_priv` pointer stable | | Work item stuck/pending | Ruled out — `k_work_schedule_for_queue` returned 1 (newly queued) on scan 2 | | RX buffer exhaustion | Ruled out — increased `NRF70_RX_NUM_BUFS` from 16→48, no change | | Host-side buffer/heap exhaustion | Ruled out — increased heap, net bufs, queue sizes, no change | | `scan_in_progress` flag stuck | Ruled out — error is -116 (ETIMEDOUT), not -EBUSY; scan command was sent | | Host stack overflow | Ruled out — increased IRQ WQ, BH WQ, and system WQ stacks to 4096, no change | | Brownout | I have verified the power supply with an oscilloscope on both VBAT and IOVDD. The voltage is stable at 3.6V on VBAT and 2.5V on IOVDD.| I also found this similar DevZone issue: devzone.nordicsemi.com/.../wm02c-nrf7002-scan-example-failed-after-a-one-attempt I tried increasing the heap size as suggested, but that did not help either. Firmware Version UMAC Firmware (v1.2.14.2) nRF Connect SDK v3.1.1 Zephyr OS v4.1.99 I also tested with the following nRF Connect SDK versions and observed the same results: - nRF Connect SDK v3.2.0, which uses UMAC Firmware (v1.2.14.6) - nRF Connect SDK v3.3.0-preview2, which uses UMAC Firmware (v1.2.14.7) Request for Help It appears that the issue lies within the UMAC firmware, but since it is provided as a compiled binary, I have no way to debug it further. I am therefore hoping that one of your developers can help me move forward. I have also attached logic analyzer captures from both a device that fails on the second Wi-Fi scan and a device that does not exhibit the problem, these may provide useful insight. I have also attached the full device tree in C7.zip wifi_capture_faulty_device.sal wifi_capture_working_device.sal Fullscreen 2330.Logs.txt Download Logs [00:00:00.260,009] wifi_nrf_bus: rpu_gpio_config: GPIO configuration done... [00:00:00.290,344] wifi_nrf_bus: rpu_pwron: Bucken = 0, IOVDD = 0, Supply = 0 [00:00:00.290,374] wifi_nrf_bus: SPIM spi@a000: freq = 8 MHz [00:00:00.290,405] wifi_nrf_bus: SPIM spi@a000: latency = 0 [00:00:00.290,496] wifi_nrf_bus: rpu_wrsr2: Written 0x1 to WRSR2 [00:00:00.290,618] wifi_nrf_bus: spim_read_reg: err: 0 -> 0 1 1 1 1 1 [00:00:00.290,618] wifi_nrf_bus: spim_wait_while_rpu_wake_write: RDSR2 = 0x1 [00:00:00.290,740] wifi_nrf_bus: spim_read_reg: err: 0 -> 0 0 0 0 0 0 [00:00:00.290,771] wifi_nrf_bus: _spim_wait_while_rpu_awake: RDSR1 = 0x0 [00:00:00.291,961] wifi_nrf_bus: spim_read_reg: err: 0 -> 0 0 0 0 0 0 [00:00:00.291,961] wifi_nrf_bus: _spim_wait_while_rpu_awake: RDSR1 = 0x0 [00:00:00.293,243] wifi_nrf_bus: spim_read_reg: err: 0 -> 0 0 0 0 0 0 [00:00:00.293,273] wifi_nrf_bus: _spim_wait_while_rpu_awake: RDSR1 = 0x0 [00:00:00.294,494] wifi_nrf_bus: spim_read_reg: err: 0 -> 0 0 0 0 0 0 [00:00:00.294,494] wifi_nrf_bus: _spim_wait_while_rpu_awake: RDSR1 = 0x0 [00:00:00.295,715] wifi_nrf_bus: spim_read_reg: err: 0 -> 0 2 2 2 2 2 [00:00:00.295,715] wifi_nrf_bus: _spim_wait_while_rpu_awake: RDSR1 = 0x2 [00:00:00.295,867] wifi_nrf_bus: rpu_clks_on: RPU Clocks ON... [00:00:00.296,051] wifi_nrf_bus: rpu_validate_comms: RPU comms test passed [00:00:00.296,844] wifi_nrf: zep_shim_pr_dbg: Signature: 0xdead1eaf [00:00:00.296,905] wifi_nrf: zep_shim_pr_dbg: num_images: 4 [00:00:00.296,997] wifi_nrf: zep_shim_pr_dbg: version: 0x1020e02 [00:00:00.297,058] wifi_nrf: zep_shim_pr_dbg: feature_flags: 1 [00:00:00.297,119] wifi_nrf: zep_shim_pr_dbg: ==== [00:00:00.297,180] wifi_nrf: zep_shim_pr_dbg: image[0] type: 0 [00:00:00.297,241] wifi_nrf: zep_shim_pr_dbg: image[0] len: 1372 [00:00:00.297,302] wifi_nrf: zep_shim_pr_dbg: ==== [00:00:00.297,363] wifi_nrf: zep_shim_pr_dbg: image[1] type: 1 [00:00:00.297,454] wifi_nrf: zep_shim_pr_dbg: image[1] len: 51324 [00:00:00.297,485] wifi_nrf: zep_shim_pr_dbg: ==== [00:00:00.297,546] wifi_nrf: zep_shim_pr_dbg: image[2] type: 2 [00:00:00.297,637] wifi_nrf: zep_shim_pr_dbg: image[2] len: 988 [00:00:00.297,668] wifi_nrf: zep_shim_pr_dbg: ==== [00:00:00.297,729] wifi_nrf: zep_shim_pr_dbg: image[3] type: 3 [00:00:00.297,821] wifi_nrf: zep_shim_pr_dbg: image[3] len: 32076 [00:00:00.297,851] wifi_nrf: zep_shim_pr_dbg: ==== [00:00:00.299,133] wifi_nrf: zep_shim_pr_dbg: hal_fw_patch_load: Copying patch UMAC-bimg: chunk 1/1, size: 1372 [00:00:00.301,757] wifi_nrf: zep_shim_pr_dbg: hal_fw_patch_load: Copying patch UMAC-bin: chunk 1/7, size: 8192 [00:00:00.311,187] wifi_nrf: zep_shim_pr_dbg: hal_fw_patch_load: Copying patch UMAC-bin: chunk 2/7, size: 8192 [00:00:00.320,617] wifi_nrf: zep_shim_pr_dbg: hal_fw_patch_load: Copying patch UMAC-bin: chunk 3/7, size: 8192 [00:00:00.330,078] wifi_nrf: zep_shim_pr_dbg: hal_fw_patch_load: Copying patch UMAC-bin: chunk 4/7, size: 8192 [00:00:00.339,508] wifi_nrf: zep_shim_pr_dbg: hal_fw_patch_load: Copying patch UMAC-bin: chunk 5/7, size: 8192 [00:00:00.348,937] wifi_nrf: zep_shim_pr_dbg: hal_fw_patch_load: Copying patch UMAC-bin: chunk 6/7, size: 8192 [00:00:00.357,696] wifi_nrf: zep_shim_pr_dbg: hal_fw_patch_load: Copying patch UMAC-bin: chunk 7/7, size: 2172 [00:00:00.360,076] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_fmac_fw_load: UMAC patches loaded [00:00:00.360,321] wifi_nrf: zep_shim_pr_dbg: hal_fw_patch_load: Copying patch LMAC-bimg: chunk 1/1, size: 988 [00:00:00.362,579] wifi_nrf: zep_shim_pr_dbg: hal_fw_patch_load: Copying patch LMAC-bin: chunk 1/4, size: 8192 [00:00:00.372,009] wifi_nrf: zep_shim_pr_dbg: hal_fw_patch_load: Copying patch LMAC-bin: chunk 2/4, size: 8192 [00:00:00.381,439] wifi_nrf: zep_shim_pr_dbg: hal_fw_patch_load: Copying patch LMAC-bin: chunk 3/4, size: 8192 [00:00:00.390,777] wifi_nrf: zep_shim_pr_dbg: hal_fw_patch_load: Copying patch LMAC-bin: chunk 4/4, size: 7500 [00:00:00.398,529] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_fmac_fw_load: LMAC patches loaded [00:00:00.421,203] wifi_nrf: nrf_wifi_fmac_dev_add_zep: Firmware (v1.2.14.2) booted successfully [00:00:00.421,325] wifi_nrf_bus: rpu_irq_config: Finished Interrupt config [00:00:00.457,672] wifi_nrf: zep_shim_pr_dbg: RPU LPM type: DISABLED [00:00:00.457,733] wifi_nrf: zep_shim_pr_dbg: Management buffer offload enabled [00:00:00.457,824] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5c88b [00:00:00.461,456] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 0 recd [00:00:00.461,700] wifi_nrf: nrf_wifi_if_start_zep: nrf_wifi_if_start_zep: FMAC device added [00:00:00.462,341] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.464,630] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 52 sent to RPU [00:00:00.464,813] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.465,179] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:00.465,270] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 received from UMAC [00:00:00.465,362] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Command 52 -> status 0 [00:00:00.465,454] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 processed [00:00:00.466,369] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 18 sent to RPU [00:00:00.484,283] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 2 recd [00:00:00.484,375] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_fmac_data_event_process: Event 5 received from UMAC [00:00:00.484,405] wifi_nrf: nrf_wifi_if_carr_state_chg: nrf_wifi_if_carr_state_chg: Carrier state: 0 [00:00:00.484,588] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:00.484,680] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 275 received from UMAC [00:00:00.484,771] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 275 processed [00:00:00.485,412] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.486,419] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 51 sent to RPU [00:00:00.494,567] fs_nvs: 2 Sectors of 4096 bytes [00:00:00.494,567] fs_nvs: alloc wra: 0, fe8 [00:00:00.494,598] fs_nvs: data wra: 0, 0 *** Booting nRF Connect SDK v3.1.1-e2a97fe2578a *** *** Using Zephyr OS v4.1.99-ff8f0c579eeb *** Starting C7 with CPU frequency: 128 MHz [00:00:00.496,063] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:00.496,124] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 received from UMAC [00:00:00.496,154] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Command 51 -> status 0 [00:00:00.496,215] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 processed [00:00:00.496,582] wifi_supplicant: wpa_supplicant initialized [00:00:00.497,558] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.498,199] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 29 sent to RPU [00:00:00.498,260] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.498,901] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 29 sent to RPU [00:00:00.498,962] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.499,572] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 29 sent to RPU [00:00:00.500,061] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.500,671] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 41 sent to RPU [00:00:00.503,967] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:00.504,028] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 282 received from UMAC [00:00:00.505,126] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 282 processed [00:00:00.506,103] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.508,148] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 7 sent to RPU [00:00:00.508,789] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.509,033] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:00.509,094] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 received from UMAC [00:00:00.509,124] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Command 7 -> status -67 [00:00:00.509,185] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 processed [00:00:00.511,016] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 7 sent to RPU [00:00:00.511,657] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.511,901] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:00.511,962] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 received from UMAC [00:00:00.512,023] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Command 7 -> status -67 [00:00:00.512,054] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 processed [00:00:00.513,885] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 7 sent to RPU [00:00:00.514,526] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.514,770] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:00.514,831] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 received from UMAC [00:00:00.514,892] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Command 7 -> status -67 [00:00:00.514,923] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 processed [00:00:00.516,754] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 7 sent to RPU [00:00:00.517,395] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.517,639] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:00.517,700] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 received from UMAC [00:00:00.517,761] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Command 7 -> status -67 [00:00:00.517,791] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 processed [00:00:00.519,622] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 7 sent to RPU [00:00:00.520,263] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.520,507] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:00.520,568] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 received from UMAC [00:00:00.520,629] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Command 7 -> status -67 [00:00:00.520,660] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 processed [00:00:00.522,430] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 7 sent to RPU [00:00:00.523,254] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:00.523,559] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:00.523,590] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 received from UMAC [00:00:00.523,651] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Command 7 -> status -67 [00:00:00.523,681] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 processed [00:00:00.526,245] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 21 sent to RPU [00:00:00.526,855] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:00.526,885] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 received from UMAC [00:00:00.526,947] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Command 21 -> status -2 [00:00:00.526,977] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 processed uart:~$ wifi scan Scan requested [00:00:16.727,844] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:16.729,522] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 0 sent to RPU [00:00:16.731,933] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:16.731,964] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 257 received from UMAC [00:00:16.732,025] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 257 processed [00:00:16.732,086] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:16.732,147] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 received from UMAC [00:00:16.732,177] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Command 0 -> status 0 [00:00:16.732,238] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 processed [00:00:17.863,189] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:17.863,220] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 288 received from UMAC [00:00:17.863,281] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 288 processed [00:00:17.980,834] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:17.980,865] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 288 received from UMAC [00:00:17.980,926] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 288 processed Num | SSID (len) | Chan (Band) | RSSI | Security | BSSID | MFP [00:00:21.343,017] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:21.343,048] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 259 received from UMAC [00:00:21.343,139] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:21.343,505] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 259 processed [00:00:21.343,750] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 1 sent to RPU [00:00:21.349,273] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:21.349,304] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 291 received from UMAC [00:00:21.349,639] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 291 processed [00:00:21.349,731] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:21.349,792] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 291 received from UMAC [00:00:21.350,097] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 291 processed [00:00:21.350,158] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:21.350,219] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 291 received from UMAC [00:00:21.350,463] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 291 processed [00:00:21.350,555] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:21.350,616] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 291 received from UMAC [00:00:21.350,860] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 291 processed 5 | 0 | 6 (2.4GHz) | -42 | WPA2-PSK | A6:2A:6F:A6:16:A0 | Disable 6 | 0 | 44 (5GHz ) | -46 | WPA2-PSK | AA:2A:6F:A6:16:9F | Disable 7 | 0 | 44 (5GHz ) | -46 | WPA2-PSK | A6:2A:6F:A6:16:9F | Disable 8 | Cleverplant 11 | 44 (5GHz ) | -46 | WPA2-PSK | A2:2A:6F:A6:16:9F | Disable 9 | MoveDevices 11 | 44 (5GHz ) | -46 | WPA2-PSK | 9E:2A:6F:A6:16:9F | Disable 10 | Move 4 | 44 (5GHz ) | -46 | WPA2 Enterprise | 9A:2A:6F:A6:16:9F | Disable 11 | MoveGuest 9 | 44 (5GHz ) | -46 | WPA2-PSK | 94:2A:6F:A6:16:9F | Disable 12 | 0 | 11 (2.4GHz) | -53 | WPA2-PSK-SHA256 | 52:EF:BD:CB:D2:46 | Disable 13 | MoveDevices 11 | 6 (2.4GHz) | -53 | WPA2-PSK | 9E:2A:6F:A6:14:43 | Disable 14 | 0 | 6 (2.4GHz) | -55 | WPA2-PSK | A6:2A:6F:A6:14:43 | Disable 15 | Cleverplant 11 | 6 (2.4GHz) | -55 | WPA2-PSK | A2:2A:6F:A6:14:43 | Disable 16 | MoveGuest 9 | 6 (2.4GHz) | -55 | WPA2-PSK | 94:2A:6F:A6:14:43 | Disable 17 | Move 4 | 6 (2.4GHz) | -56 | WPA2 Enterprise | 9A:2A:6F:A6:14:43 | Disable 18 | AskalonGuest 12 | 11 (2.4GHz) | -58 | OPEN | 6A:EF:BD:CB:D2:46 | Disable 19 | AskalonWifi 11 | 11 (2.4GHz) | -58 | WPA3-SAE-HNP | 6C:EF:BD:CB:D2:46 | Optional 20 | 0 | 40 (5GHz ) | -61 | WPA2-PSK | AA:2A:6F:A6:14:42 | Disable 21 | 0 | 40 (5GHz ) | -61 | WPA2-PSK | A6:2A:6F:A6:14:42 | Disable 22 | Cleverplant 11 | 40 (5GHz ) | -61 | WPA2-PSK | A2:2A:6F:A6:14:42 | Disable 23 | Move 4 | 40 (5GHz ) | -61 | WPA2 Enterprise | 9A:2A:6F:A6:14:42 | Disable 24 | MoveGuest 9 | 40 (5GHz ) | -61 | WPA2-PSK | 94:2A:6F:A6:14:42 | Disable 25 | MoveDevices 11 | 40 (5GHz ) | -62 | WPA2-PSK | 9E:2A:6F:A6:14:42 | Disable 26 | DIRECT-00-HP DesignJet Studio 29 | 6 (2.4GHz) | -62 | WPA2-PSK | 7E:57:58:46:37:00 | Disable 27 | AskalonWifi 11 | 1 (2.4GHz) | -81 | WPA3-SAE-HNP | 6C:EF:BD:CB:D1:48 | Optional 28 | AskalonGuest 12 | 1 (2.4GHz) | -82 | OPEN | 6A:EF:BD:CB:D1:48 | Disable 29 | AskalonWifi 11 | 64 (5GHz ) | -84 | WPA3-SAE-HNP | 6E:EF:AD:CB:D2:46 | Optional 30 | AskalonGuest 12 | 64 (5GHz ) | -84 | OPEN | 6A:EF:AD:CB:D2:46 | Disable 31 | 0 | 64 (5GHz ) | -84 | WPA2-PSK-SHA256 | 52:EF:AD:CB:D2:46 | Disable Scan request done uart:~$ wifi scan Scan requested [00:00:45.022,155] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_hal_ctrl_cmd_send: caller 0x5ed89 [00:00:45.023,864] wifi_nrf: zep_shim_pr_dbg: umac_cmd_cfg: Command 0 sent to RPU [00:00:45.026,275] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:45.026,336] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 257 received from UMAC [00:00:45.026,367] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 257 processed [00:00:45.026,458] wifi_nrf: zep_shim_pr_dbg: nrf_wifi_sys_fmac_event_callback: Event type 3 recd [00:00:45.026,489] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 received from UMAC [00:00:45.026,550] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Command 0 -> status 0 [00:00:45.026,580] wifi_nrf: zep_shim_pr_dbg: umac_event_ctrl_process: Event 292 processed Scan request failed (-116) uart:~$ C7.zip rpu_hw_if.c.zip