BCM43455C0: firmware has halted or crashed

[jayofelony]

Output from journalctl: Feb 01 10:33:10 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed

Device: Raspberry Pi 4

WiFi chip: 43455c0

Firmware: nexmon 7.45.206

[88411.161703] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Jan 24 2024 20:30:46 version 7.45.206 (nexmon.org: 2.2.2-514-gf195c-2) FWID 01-88ee44ea
[88411.280828] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[88411.811377] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[88424.201595] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[88424.249634] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[88424.249665] brcmfmac: brcmf_mon_add_vif: brcmf_mon_add_vif called
[88424.249674] brcmfmac: brcmf_mon_add_vif: Adding vif "wlan0mon"
[90611.957556] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[90614.985828] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[90614.985846] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[90614.985853] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[91535.369455] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[91538.397427] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[91538.397445] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[91538.397452] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[93495.332828] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[93498.360899] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[93498.360916] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[93498.360923] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[94005.518078] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[94008.545083] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[94008.545100] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[94008.545107] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[130885.613184] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[130888.639866] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[130888.639884] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[130888.639891] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[132870.122369] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[132873.156327] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[132873.156345] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[132873.156352] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[135620.017168] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[135623.046750] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[135623.046769] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[135623.046776] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[135798.650335] ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
[135798.750228] ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do.
[135798.750255] ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
[135798.977727] brcmfmac: F1 signature read @0x18000000=0x15264345
[135798.981613] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[135799.310392] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[135799.313703] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Jan 24 2024 20:30:46 version 7.45.206 (nexmon.org: 2.2.2-514-gf195c-2) FWID 01-88ee44ea
[135799.443187] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[135799.960666] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[135801.219002] usbcore: deregistering interface driver brcmfmac
[135802.394468] brcmfmac: F1 signature read @0x18000000=0x15264345
[135802.398679] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[135802.705905] usbcore: registered new interface driver brcmfmac
[135802.708021] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[135802.711525] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Jan 24 2024 20:30:46 version 7.45.206 (nexmon.org: 2.2.2-514-gf195c-2) FWID 01-88ee44ea
[135802.831390] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[135803.352685] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[135804.716690] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[135805.407504] usbcore: deregistering interface driver brcmfmac
[135806.622508] brcmfmac: F1 signature read @0x18000000=0x15264345
[135806.626516] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[135806.716232] usbcore: registered new interface driver brcmfmac

[jlinktu]

All I can see from that log is that a virtual monitor interface was added and then there were 7 more tries to add another one, which is not supported, only a single virtual monitor interface per interface can exist. Then the chip crashes and is restarted.

Can you provide me with the commands that you executed during this? Best would be everything that I need to replicate this behavior. Including OS info, kernel, driver version...

[jayofelony]

uname -a
Linux jayofelony 6.1.0-rpi7-rpi-v8 #1 SMP PREEMPT Debian 1:6.1.63-1+rpt1 (2023-11-24) aarch64 GNU/Linux

RaspiOS 64bit lite Bookworm, using nexmon 7.45.206 for bcm43455c0 from DrSchottky his repo.

I am running Pwnagotchi, which uses a plugin to check journalctl for erros on the wifi firmware.

self.pattern = re.compile(r'brcmf_cfg80211_nexmon_set_channel.*?Set Channel failed')
self.pattern2 = re.compile(r'wifi error while hopping to channel')
self.pattern3 = re.compile(r'Firmware has halted or crashed')
self.pattern4 = re.compile(r'error 400: could not find interface wlan0mon')

You may not believe it, but when it sees a lot of accesspoints or quick injecting of packets it seems to crash.

The monitor adding and firmware crash are not related, there is about 150 seconds inbetween. That's because of me restarting the services, hence the error about already a monitoring device.

[jayofelony]

The command used to start monitor mode:

start_monitor_interface() {
  rfkill unblock all
  ifconfig wlan0 up
  sleep 3
  iw dev wlan0 set power_save off
  iw phy "$(iw phy | head -1 | cut -d" " -f2)" interface add wlan0mon type monitor
  sleep 2
  rfkill unblock all
  ifconfig wlan0 down
  ifconfig wlan0mon up
  iw dev wlan0mon set power_save off
}

The sleep command is needed, because on the RPi zero2w the firmware will crash immediately if we do not delay start monitor mode.

[jlinktu]

If you are using @DrSchottky's version, you might want to ask there instead.

[jayofelony]

journalctl -k

Feb 01 12:39:11 jayofelony kernel: brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
Feb 01 12:39:11 jayofelony kernel: brcmfmac: brcmf_mon_add_vif: brcmf_mon_add_vif called
Feb 01 12:39:11 jayofelony kernel: brcmfmac: brcmf_mon_add_vif: Adding vif "wlan0mon"
Feb 01 12:39:12 jayofelony kernel: zram: Added device: zram0
Feb 01 12:39:12 jayofelony kernel: zram: Added device: zram1
Feb 01 12:39:12 jayofelony kernel: zram1: detected capacity change from 0 to 204800
Feb 01 12:39:12 jayofelony kernel: EXT4-fs (zram1): mounted filesystem with ordered data mode. Quota mode: none.
Feb 01 12:39:13 jayofelony kernel: zram: Added device: zram2
Feb 01 12:39:13 jayofelony kernel: zram2: detected capacity change from 0 to 40960
Feb 01 12:39:13 jayofelony kernel: EXT4-fs (zram2): mounted filesystem with ordered data mode. Quota mode: none.
Feb 01 12:39:18 jayofelony kernel: device wlan0mon entered promiscuous mode
Feb 01 12:40:08 jayofelony kernel: zram: Added device: zram3
Feb 01 12:40:08 jayofelony kernel: zram3: detected capacity change from 0 to 204800
Feb 01 12:40:08 jayofelony kernel: zram: Added device: zram4
Feb 01 12:40:08 jayofelony kernel: zram4: detected capacity change from 0 to 40960
Feb 01 12:40:11 jayofelony kernel: device wlan0mon left promiscuous mode
Feb 01 12:40:11 jayofelony kernel: device wlan0mon entered promiscuous mode
Feb 01 12:44:57 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
Feb 01 12:44:57 jayofelony kernel: ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do.
Feb 01 12:44:57 jayofelony kernel: ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
Feb 01 12:44:57 jayofelony kernel: device wlan0mon left promiscuous mode
Feb 01 12:44:57 jayofelony kernel: mmc1: card 0001 removed
Feb 01 12:44:57 jayofelony kernel: mmc1: new high speed SDIO card at address 0001
Feb 01 12:44:57 jayofelony kernel: brcmfmac: F1 signature read @0x18000000=0x15264345
Feb 01 12:44:57 jayofelony kernel: brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
Feb 01 12:44:57 jayofelony kernel: brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
Feb 01 12:44:57 jayofelony kernel: brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Jan 24 2024 20:30:46 version 7.45.206 (nexmon.org: 2.2.2-514-gf195c-2) FWID 01-88ee44ea
Feb 01 12:44:57 jayofelony kernel: brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
Feb 01 12:44:58 jayofelony kernel: brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled

journalctl -S today

Feb 01 12:44:51 jayofelony bettercap-launcher[943]: [12:44:51] [sys.log] [dbg] wifi hop changed
Feb 01 12:44:51 jayofelony bettercap-launcher[943]: [12:44:51] [sys.log] [inf] wifi sending association request to AP Ziggo (channel:11 encryption:WPA2)
Feb 01 12:44:52 jayofelony bettercap-launcher[943]: [12:44:52] [sys.log] [inf] wifi sending association request to AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 12:44:52 jayofelony bettercap-launcher[943]: [12:44:52] [sys.log] [inf] wifi deauthing client 70:f1:1c:48:fd:af (Shenzhen Ogemray Technology Co.,Ltd) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 12:44:54 jayofelony bettercap-launcher[943]: [12:44:54] [sys.log] [inf] wifi deauthing client d0:ba:e4:8b:0d:94 (Shanghai MXCHIP Information Technology Co., Ltd.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 12:44:56 jayofelony bettercap-launcher[943]: [12:44:56] [sys.log] [dbg] wifi skipping deauth frame from d0:ba:e4:8b:0d:94
Feb 01 12:44:56 jayofelony bettercap-launcher[943]: [12:44:56] [sys.log] [inf] wifi deauthing client d2:ac:32:45:e5:1b from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 12:44:57 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
Feb 01 12:44:57 jayofelony kernel: ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do.
Feb 01 12:44:57 jayofelony kernel: ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
Feb 01 12:44:57 jayofelony kernel: device wlan0mon left promiscuous mode
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony NetworkManager[683]: <info>  [1706787897.2023] device (wlan0): state change: unavailable -> unmanaged (reason 'removed', sys-iface-state: 'removed')
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony NetworkManager[683]: <info>  [1706787897.2531] radio killswitch /sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1/ieee80211/phy0/rfkill1 disappeared
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony systemd[1]: Starting systemd-rfkill.service - Load/Save RF Kill Switch Status...
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony kernel: mmc1: card 0001 removed
Feb 01 12:44:57 jayofelony systemd[1]: Started systemd-rfkill.service - Load/Save RF Kill Switch Status.
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address

[jayofelony]

@jlinktu Of course I also tried with your repository. I had to alter the installation a bit to use libmpfr-6.2.0 and libisl-23.2.0.

Feb 01 13:32:51 jayofelony bettercap-launcher[923]: [13:32:51] [sys.log] [inf] wifi deauthing client 70:f1:1c:48:fd:af (Shenzhen Ogemray Technology Co.,Ltd) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:51 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
Feb 01 13:32:52 jayofelony kernel: ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do.
Feb 01 13:32:52 jayofelony kernel: ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
Feb 01 13:32:52 jayofelony kernel: device wlan0mon left promiscuous mode
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony NetworkManager[678]: <info>  [1706790772.0684] device (wlan0): state change: unavailable -> unmanaged (reason 'removed', sys-iface-state: 'removed')
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony NetworkManager[678]: <info>  [1706790772.0934] radio killswitch /sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1/ieee80211/phy0/rfkill1 disappeared
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony systemd[1]: Starting systemd-rfkill.service - Load/Save RF Kill Switch Status...
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony systemd[1]: Started systemd-rfkill.service - Load/Save RF Kill Switch Status.
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony kernel: mmc1: card 0001 removed
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony kernel: mmc1: new high speed SDIO card at address 0001
Feb 01 13:32:52 jayofelony kernel: brcmfmac: F1 signature read @0x18000000=0x15264345
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony kernel: brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony kernel: brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
Feb 01 13:32:52 jayofelony kernel: brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Feb  1 2024 13:24:25 version 7.45.206 (nexmon.org: 2.2.2-465-gd2182-3) FWID 01-88ee44ea
Feb 01 13:32:52 jayofelony NetworkManager[678]: <info>  [1706790772.6237] rfkill2: found Wi-Fi radio killswitch (at /sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1/ieee80211/phy1/rfkill2) (driver brcmfmac)
Feb 01 13:32:52 jayofelony NetworkManager[678]: <info>  [1706790772.6501] device (wlan0): driver supports Access Point (AP) mode
Feb 01 13:32:52 jayofelony NetworkManager[678]: <info>  [1706790772.6515] manager: (wlan0): new 802.11 Wi-Fi device (/org/freedesktop/NetworkManager/Devices/5)
Feb 01 13:32:52 jayofelony NetworkManager[678]: <info>  [1706790772.7037] device (wlan0): state change: unmanaged -> unavailable (reason 'managed', sys-iface-state: 'external')
Feb 01 13:32:52 jayofelony systemd[1]: Found device sys-subsystem-net-devices-wlan0.device - /sys/subsystem/net/devices/wlan0.
Feb 01 13:32:52 jayofelony kernel: brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
Feb 01 13:32:52 jayofelony systemd[1]: Started [email protected] - ifup for wlan0.
Feb 01 13:32:53 jayofelony NetworkManager[678]: <info>  [1706790773.2636] device (wlan0): set-hw-addr: set MAC address to 76:9E:9B:AE:0A:A9 (scanning)
Feb 01 13:32:53 jayofelony sh[2523]: ifup: missing required variable: address
Feb 01 13:32:53 jayofelony sh[2523]: ifup: missing required configuration variables for interface wlan0/inet
Feb 01 13:32:53 jayofelony sh[2523]: ifup: failed to bring up wlan0
Feb 01 13:32:53 jayofelony kernel: brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
Feb 01 13:32:53 jayofelony systemd[1]: [email protected]: Main process exited, code=exited, status=1/FAILURE
Feb 01 13:32:53 jayofelony systemd[1]: [email protected]: Failed with result 'exit-code'.
Feb 01 13:32:55 jayofelony ModemManager[694]: <info>  [base-manager] couldn't check support for device '/sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1': not supported by any plugin
Feb 01 13:32:56 jayofelony NetworkManager[678]: <error> [1706790776.2701] device (wlan0): Couldn't initialize supplicant interface: Failed to D-Bus activate wpa_supplicant service
Feb 01 13:32:57 jayofelony systemd[1]: systemd-rfkill.service: Deactivated successfully.
Feb 01 13:33:01 jayofelony bettercap-launcher[923]: [13:33:01] [sys.log] [dbg] wifi station 54:67:51:b9:0b:d0 not seen in 42.116130834s, removing.
Feb 01 13:33:06 jayofelony NetworkManager[678]: <warn>  [1706790786.8674] device (wlan0): re-acquiring supplicant interface (#1).
Feb 01 13:33:09 jayofelony NetworkManager[678]: <error> [1706790789.8702] device (wlan0): Couldn't initialize supplicant interface: Failed to D-Bus activate wpa_supplicant service

[jlinktu]

--- snip ---
Feb 01 13:32:51 jayofelony bettercap-launcher[923]: [13:32:51] [sys.log] [inf] wifi deauthing client 70:f1:1c:48:fd:af (Shenzhen Ogemray Technology Co.,Ltd) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:51 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
--- snip ---

Leads me to think that the injection of the deauth frame kills the chip.

[jayofelony]

That could surely be, although it had done some deauthing already prior to that part. Here's the rest right before the snip.

Feb 01 13:31:08 jayofelony bettercap-launcher[923]: [13:31:08] [sys.log] [dbg] wifi hop changed
Feb 01 13:31:08 jayofelony bettercap-launcher[923]: [13:31:08] [sys.log] [inf] wifi sending association request to AP Ziggo (channel:11 encryption:WPA2)
Feb 01 13:31:09 jayofelony bettercap-launcher[923]: [13:31:09] [sys.log] [inf] wifi sending association request to AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:31:09 jayofelony bettercap-launcher[923]: [13:31:09] [sys.log] [inf] wifi deauthing client 70:f1:1c:48:fd:af (Shenzhen Ogemray Technology Co.,Ltd) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:31:11 jayofelony bettercap-launcher[923]: [13:31:11] [sys.log] [inf] wifi deauthing client 8c:5a:25:58:1a:cf (ARRIS Group, Inc.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:31:12 jayofelony bettercap-launcher[923]: [13:31:12] [sys.log] [inf] wifi deauthing client 8c:5a:25:58:1a:cf (ARRIS Group, Inc.) from AP Ziggo6611EA8 (channel:44 encryption:WPA2)
Feb 01 13:31:13 jayofelony bettercap-launcher[923]: [13:31:13] [sys.log] [dbg] wifi skipping deauth frame from 8c:5a:25:58:1a:cf
Feb 01 13:31:13 jayofelony bettercap-launcher[923]: [13:31:13] [sys.log] [dbg] wifi skipping deauth frame from 8c:5a:25:58:1a:cf
Feb 01 13:31:13 jayofelony bettercap-launcher[923]: [13:31:13] [sys.log] [inf] wifi deauthing client d0:ba:e4:8b:0d:94 (Shanghai MXCHIP Information Technology Co., Ltd.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:31:14 jayofelony bettercap-launcher[923]: [13:31:14] [sys.log] [dbg] wifi got frame 1/4 of the 54:67:51:b9:0c:a6 <-> 8c:5a:25:58:1a:cf handshake (without PMKID) (anonce:f9bc5e214bef353303190781796c41e388c50d053fa0e7bb9bcf8026fa930348)
Feb 01 13:31:14 jayofelony bettercap-launcher[923]: [13:31:14] [sys.log] [dbg] wifi adding beacon frame to handshake for 54:67:51:b9:0c:a6
Feb 01 13:31:14 jayofelony bettercap-launcher[923]: [13:31:14] [sys.log] [dbg] wifi got frame 1/4 of the 54:67:51:b9:0c:a6 <-> 8c:5a:25:58:1a:cf handshake (without PMKID) (anonce:f9bc5e214bef353303190781796c41e388c50d053fa0e7bb9bcf8026fa930348)
Feb 01 13:31:14 jayofelony bettercap-launcher[923]: [13:31:14] [sys.log] [dbg] wifi adding beacon frame to handshake for 54:67:51:b9:0c:a6
Feb 01 13:31:14 jayofelony bettercap-launcher[923]: [13:31:14] [sys.log] [dbg] wifi got frame 2/4 of the 54:67:51:b9:0c:a6 <-> 8c:5a:25:58:1a:cf handshake (snonce:1a17d4cedb9ad8254e70596a97383b394927b38502d20011318411d1b9bd2a81 mic:2ed305795aeabf818a8edd422320186b)
Feb 01 13:31:14 jayofelony bettercap-launcher[923]: [13:31:14] [sys.log] [dbg] wifi got frame 3/4 of the 54:67:51:b9:0c:a6 <-> 8c:5a:25:58:1a:cf handshake (mic:6e49c2d65394731a6b8d78ba40aab2dc)
Feb 01 13:31:15 jayofelony bettercap-launcher[923]: [13:31:15] [sys.log] [inf] wifi deauthing client d2:ac:32:45:e5:1b from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:31:21 jayofelony bettercap-launcher[923]: [13:31:21] [sys.log] [dbg] wifi got frame 1/4 of the 54:67:51:b9:0c:a6 <-> d0:ba:e4:8b:0d:94 handshake (without PMKID) (anonce:6d0d4810fcb4d1aad757769295f072024c700d0a9fc9d466352030dd8598008d)
Feb 01 13:31:21 jayofelony bettercap-launcher[923]: [13:31:21] [sys.log] [dbg] wifi adding beacon frame to handshake for 54:67:51:b9:0c:a6
Feb 01 13:31:21 jayofelony bettercap-launcher[923]: [13:31:21] [sys.log] [dbg] wifi got frame 2/4 of the 54:67:51:b9:0c:a6 <-> d0:ba:e4:8b:0d:94 handshake (snonce:290902b473e5a2bf672ef0c2afd9cab9ef6c3829b9cad9afc2f02e67c0a2e573 mic:ef1702df3cb907a45f58c2fab4248625)
Feb 01 13:31:21 jayofelony bettercap-launcher[923]: [13:31:21] [sys.log] [dbg] wifi got frame 3/4 of the 54:67:51:b9:0c:a6 <-> d0:ba:e4:8b:0d:94 handshake (mic:07d11b79edb95f9b3d340a0e16b01338)
Feb 01 13:31:22 jayofelony bettercap-launcher[923]: [13:31:22] [sys.log] [dbg] wifi got frame 2/4 of the 54:67:51:b9:0c:a6 <-> d2:ac:32:45:e5:1b handshake (snonce:ecef2e719a7dcf76fbf4d3a7a47e667c488dbf59f72067b1af94e66bb582baef mic:bba318f12d22fb48d01b58ccb2928b85)
Feb 01 13:31:22 jayofelony bettercap-launcher[923]: [13:31:22] [sys.log] [dbg] wifi got frame 1/4 of the 54:67:51:b9:0c:a6 <-> d2:ac:32:45:e5:1b handshake (without PMKID) (anonce:7c8e191dd423ab97a00097a5314fe400970b649f2fe76841613b0157e3b97e27)
Feb 01 13:31:22 jayofelony bettercap-launcher[923]: [13:31:22] [sys.log] [dbg] wifi adding beacon frame to handshake for 54:67:51:b9:0c:a6
Feb 01 13:31:22 jayofelony bettercap-launcher[923]: [13:31:22] [sys.log] [dbg] wifi got frame 3/4 of the 54:67:51:b9:0c:a6 <-> d2:ac:32:45:e5:1b handshake (mic:b129595076216540ef62bebcd027986c)
Feb 01 13:31:37 jayofelony bettercap-launcher[923]: [13:31:37] [sys.log] [dbg] wifi got frame 1/4 of the 54:67:51:b9:0c:a6 <-> d0:ba:e4:8b:0d:94 handshake (without PMKID) (anonce:7e86730435449ca9bc08e979e8efee58b664108ec0dd83f08657002acf3c4366)
Feb 01 13:31:37 jayofelony bettercap-launcher[923]: [13:31:37] [sys.log] [dbg] wifi adding beacon frame to handshake for 54:67:51:b9:0c:a6
Feb 01 13:31:37 jayofelony bettercap-launcher[923]: [13:31:37] [sys.log] [dbg] wifi got frame 2/4 of the 54:67:51:b9:0c:a6 <-> d0:ba:e4:8b:0d:94 handshake (snonce:d66583c137c5a9c34546237382596945e70c8cd64569598273234645c4a9c537 mic:28d11a2fafebe5013584230ed69cbd60)
Feb 01 13:31:37 jayofelony bettercap-launcher[923]: [13:31:37] [sys.log] [dbg] wifi got frame 3/4 of the 54:67:51:b9:0c:a6 <-> d0:ba:e4:8b:0d:94 handshake (mic:8bf3ca3ebf5ac694ae4fe1e89d699d21)
Feb 01 13:31:39 jayofelony bettercap-launcher[923]: [13:31:39] [sys.log] [dbg] wifi station 00:14:3e:68:93:70 not seen in 42.931824336s, removing.
Feb 01 13:31:50 jayofelony bettercap-launcher[923]: [13:31:50] [sys.log] [dbg] wifi station ae:15:a2:2a:c0:a2 not seen in 42.165133415s, removing.
Feb 01 13:31:50 jayofelony bettercap-launcher[923]: [13:31:50] [sys.log] [dbg] wifi station ae:15:a2:4a:d6:3e not seen in 42.165375563s, removing.
Feb 01 13:31:50 jayofelony bettercap-launcher[923]: [13:31:50] [sys.log] [dbg] wifi station ac:15:a2:3a:c0:a2 not seen in 42.165513359s, removing.
Feb 01 13:31:50 jayofelony bettercap-launcher[923]: [13:31:50] [sys.log] [dbg] wifi station ac:15:a2:3a:d6:3e not seen in 42.165584081s, removing.
Feb 01 13:31:50 jayofelony bettercap-launcher[923]: [13:31:50] [sys.log] [dbg] wifi station ae:15:a2:2a:d6:3e not seen in 42.165218711s, removing.
Feb 01 13:31:50 jayofelony bettercap-launcher[923]: [13:31:50] [sys.log] [dbg] wifi station ae:15:a2:4a:c0:a2 not seen in 42.165321045s, removing.
Feb 01 13:31:57 jayofelony bettercap-launcher[923]: [13:31:57] [sys.log] [dbg] wifi client b4:ce:40:1c:54:9f (Samsung Electronics Co.,Ltd) of station ae:15:a2:2a:bd:3a not seen in 2m24.319077224s, removing.
Feb 01 13:31:57 jayofelony bettercap-launcher[923]: [13:31:57] [sys.log] [dbg] wifi station 54:67:51:b9:0b:d0 not seen in 42.560420847s, removing.
Feb 01 13:32:09 jayofelony bettercap-launcher[923]: [13:32:09] [sys.log] [dbg] wifi setting hopping channels to 44
Feb 01 13:32:09 jayofelony bettercap-launcher[923]: [13:32:09] [sys.log] [dbg] wifi new frequencies: [5220]
Feb 01 13:32:09 jayofelony bettercap-launcher[923]: [13:32:09] [sys.log] [dbg] wifi hop changed
Feb 01 13:32:09 jayofelony bettercap-launcher[923]: [13:32:09] [sys.log] [inf] wifi deauthing client 8c:5a:25:58:1a:cf (ARRIS Group, Inc.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:13 jayofelony bettercap-launcher[923]: [13:32:13] [sys.log] [inf] wifi deauthing client bc:30:7d:c8:16:9e (Wistron Neweb Corporation) from AP Ziggo6611EA8 (channel:44 encryption:WPA2)
Feb 01 13:32:16 jayofelony bettercap-launcher[923]: [13:32:16] [sys.log] [dbg] wifi setting hopping channels to 3,11,36,44,48,52,56,60,64,100,108,112,120,128,157
Feb 01 13:32:16 jayofelony bettercap-launcher[923]: [13:32:16] [sys.log] [dbg] wifi new frequencies: [2422 2462 5180 5220 5240 5260 5280 5300 5320 5500 5540 5560 5600 5640 5785]
Feb 01 13:32:16 jayofelony bettercap-launcher[923]: [13:32:16] [sys.log] [dbg] wifi hop changed
Feb 01 13:32:24 jayofelony bettercap-launcher[923]: [13:32:24] [sys.log] [dbg] wifi setting hopping channels to 3
Feb 01 13:32:24 jayofelony bettercap-launcher[923]: [13:32:24] [sys.log] [dbg] wifi new frequencies: [2422]
Feb 01 13:32:24 jayofelony bettercap-launcher[923]: [13:32:24] [sys.log] [dbg] wifi hop changed
Feb 01 13:32:25 jayofelony bettercap-launcher[923]: [13:32:25] [sys.log] [inf] wifi sending association request to AP <hidden> (channel:3 encryption:WPA2)
Feb 01 13:32:25 jayofelony bettercap-launcher[923]: [13:32:25] [sys.log] [inf] wifi sending association request to AP <hidden> (channel:3 encryption:WPA2)
Feb 01 13:32:25 jayofelony bettercap-launcher[923]: [13:32:25] [sys.log] [inf] wifi sending association request to AP <hidden> (channel:3 encryption:WPA2)
Feb 01 13:32:44 jayofelony bettercap-launcher[923]: [13:32:44] [sys.log] [dbg] wifi setting hopping channels to 11
Feb 01 13:32:44 jayofelony bettercap-launcher[923]: [13:32:44] [sys.log] [dbg] wifi new frequencies: [2462]
Feb 01 13:32:44 jayofelony bettercap-launcher[923]: [13:32:44] [sys.log] [dbg] wifi hop changed
Feb 01 13:32:44 jayofelony bettercap-launcher[923]: [13:32:44] [sys.log] [inf] wifi sending association request to AP Ziggo (channel:11 encryption:WPA2)
Feb 01 13:32:44 jayofelony bettercap-launcher[923]: [13:32:44] [sys.log] [inf] wifi sending association request to AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:45 jayofelony bettercap-launcher[923]: [13:32:45] [sys.log] [inf] wifi deauthing client 8c:5a:25:58:1a:cf (ARRIS Group, Inc.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:47 jayofelony bettercap-launcher[923]: [13:32:47] [sys.log] [inf] wifi deauthing client d0:ba:e4:8b:0d:94 (Shanghai MXCHIP Information Technology Co., Ltd.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:49 jayofelony bettercap-launcher[923]: [13:32:49] [sys.log] [inf] wifi deauthing client d2:ac:32:45:e5:1b from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:51 jayofelony bettercap-launcher[923]: [13:32:51] [sys.log] [inf] wifi deauthing client 70:f1:1c:48:fd:af (Shenzhen Ogemray Technology Co.,Ltd) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:51 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed

[jlinktu]

Please load the brcmfmac.ko kernel module with the following parameter debug=0x100006 to create more verbose logging.

[jayofelony]

How do I do that exactly? sudo modprobe brcmfmac debug=0x100006?

[jlinktu]

Add debug=0x100006 at the end of this line and run make install-firmware again.

Or if you want to do it manually (assuming you've already build brcmfmac.ko):

sudo rmmod brcmfmac
sudo modprobe brcmutil
sudo insmod $NEXMON_ROOT/patches/driver/brcmfmac_$(uname -r | cut -d'.' -f1,2).y-nexmon/brcmfmac.ko debug=0x100006

[jayofelony]

I don't know if this is the more verbose debug you expected:

Feb 01 15:24:59 jayofelony bettercap-launcher[942]: [15:24:59] [sys.log] [inf] wifi wifi.ap.ttl set to 384
Feb 01 15:24:59 jayofelony bettercap-launcher[942]: [15:24:59] [sys.log] [inf] wifi wifi.sta.ttl set to 282
Feb 01 15:24:59 jayofelony bettercap-launcher[942]: [15:24:59] [sys.log] [inf] wifi wifi.rssi.min set to -123
Feb 01 15:25:00 jayofelony bettercap-launcher[942]: [15:25:00] [sys.log] [dbg] wifi setting hopping channels to 6,7,8,11,36,40,48,56,60,100,104,116,128,136,140
Feb 01 15:25:00 jayofelony bettercap-launcher[942]: [15:25:00] [sys.log] [dbg] wifi new frequencies: [2437 2442 2447 2462 5180 5200 5240 5280 5300 5500 5520 5580 5640 5680 5700]
Feb 01 15:25:00 jayofelony bettercap-launcher[942]: [15:25:00] [sys.log] [dbg] wifi hop changed
Feb 01 15:25:58 jayofelony bettercap-launcher[942]: [15:25:58] [sys.log] [dbg] wifi setting hopping channels to 11
Feb 01 15:25:58 jayofelony bettercap-launcher[942]: [15:25:58] [sys.log] [dbg] wifi new frequencies: [2462]
Feb 01 15:25:58 jayofelony bettercap-launcher[942]: [15:25:58] [sys.log] [dbg] wifi hop changed
Feb 01 15:25:58 jayofelony bettercap-launcher[942]: [15:25:58] [sys.log] [inf] wifi sending association request to AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 15:25:58 jayofelony bettercap-launcher[942]: [15:25:58] [sys.log] [inf] wifi deauthing client 70:f1:1c:48:fd:af (Shenzhen Ogemray Technology Co.,Ltd) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 15:26:00 jayofelony bettercap-launcher[942]: [15:26:00] [sys.log] [inf] wifi deauthing client d2:ac:32:45:e5:1b from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 15:26:02 jayofelony bettercap-launcher[942]: [15:26:02] [sys.log] [dbg] wifi got frame 1/4 of the 54:67:51:b9:0c:a6 <-> 70:f1:1c:48:fd:af handshake (without PMKID) (anonce:aa936907973b2bc6523844d7f6ca14acb7e2491dcdfccd1ab0e52c9e3ec2e349)
Feb 01 15:26:02 jayofelony bettercap-launcher[942]: [15:26:02] [sys.log] [dbg] wifi adding beacon frame to handshake for 54:67:51:b9:0c:a6
Feb 01 15:26:02 jayofelony bettercap-launcher[942]: [15:26:02] [sys.log] [dbg] wifi got frame 2/4 of the 54:67:51:b9:0c:a6 <-> 70:f1:1c:48:fd:af handshake (snonce:87b8d296e9f6b279fa3212adb79925842bb1ca9f0ee446354f9b10e3a1e924ab mic:ebe63a09ded852714d67c795f3e2251b)
Feb 01 15:26:02 jayofelony bettercap-launcher[942]: [15:26:02] [sys.log] [dbg] wifi got frame 3/4 of the 54:67:51:b9:0c:a6 <-> 70:f1:1c:48:fd:af handshake (mic:dcb0c4daaa701ced9555088c00dc1591)
Feb 01 15:26:02 jayofelony bettercap-launcher[942]: [15:26:02] [sys.log] [inf] wifi deauthing client d0:ba:e4:8b:0d:94 (Shanghai MXCHIP Information Technology Co., Ltd.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 15:26:03 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
Feb 01 15:26:03 jayofelony kernel: ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do.
Feb 01 15:26:03 jayofelony kernel: ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
Feb 01 15:26:03 jayofelony kernel: device wlan0mon left promiscuous mode
Feb 01 15:26:03 jayofelony bettercap-launcher[942]: [15:26:03] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 15:26:03 jayofelony bettercap-launcher[942]: [15:26:03] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 15:26:03 jayofelony bettercap-launcher[942]: [15:26:03] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 15:26:03 jayofelony NetworkManager[670]: <info>  [1706797563.6724] device (wlan0): state change: unavailable -> unmanaged (reason 'removed', sys-iface-state: 'removed')
Feb 01 15:26:03 jayofelony bettercap-launcher[942]: [15:26:03] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 15:26:03 jayofelony systemd[1]: Starting systemd-rfkill.service - Load/Save RF Kill Switch Status...
Feb 01 15:26:03 jayofelony NetworkManager[670]: <info>  [1706797563.7313] radio killswitch /sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1/ieee80211/phy0/rfkill1 disappeared
Feb 01 15:26:03 jayofelony systemd[1]: Started systemd-rfkill.service - Load/Save RF Kill Switch Status.
Feb 01 15:26:03 jayofelony kernel: mmc1: card 0001 removed
Feb 01 15:26:03 jayofelony kernel: mmc1: new high speed SDIO card at address 0001
Feb 01 15:26:03 jayofelony kernel: brcmfmac: F1 signature read @0x18000000=0x15264345
Feb 01 15:26:03 jayofelony kernel: brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
Feb 01 15:26:04 jayofelony kernel: brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
Feb 01 15:26:04 jayofelony kernel: brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Feb  1 2024 15:11:25 version 7.45.206 (nexmon.org: 2.2.2-465-gd2182-dirty-5) FWID 01-88ee44ea
Feb 01 15:26:04 jayofelony NetworkManager[670]: <info>  [1706797564.2022] rfkill2: found Wi-Fi radio killswitch (at /sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1/ieee80211/phy1/rfkill2) (driver brcmfmac)
Feb 01 15:26:04 jayofelony NetworkManager[670]: <info>  [1706797564.2246] device (wlan0): driver supports Access Point (AP) mode
Feb 01 15:26:04 jayofelony NetworkManager[670]: <info>  [1706797564.2258] manager: (wlan0): new 802.11 Wi-Fi device (/org/freedesktop/NetworkManager/Devices/5)
Feb 01 15:26:04 jayofelony NetworkManager[670]: <info>  [1706797564.2809] device (wlan0): state change: unmanaged -> unavailable (reason 'managed', sys-iface-state: 'external')
Feb 01 15:26:04 jayofelony systemd[1]: Found device sys-subsystem-net-devices-wlan0.device - /sys/subsystem/net/devices/wlan0.
Feb 01 15:26:04 jayofelony systemd[1]: Started [email protected] - ifup for wlan0.
Feb 01 15:26:04 jayofelony kernel: brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
Feb 01 15:26:04 jayofelony sh[3875]: ifup: missing required variable: address
Feb 01 15:26:04 jayofelony sh[3875]: ifup: missing required configuration variables for interface wlan0/inet
Feb 01 15:26:04 jayofelony sh[3875]: ifup: failed to bring up wlan0
Feb 01 15:26:04 jayofelony systemd[1]: [email protected]: Main process exited, code=exited, status=1/FAILURE
Feb 01 15:26:04 jayofelony systemd[1]: [email protected]: Failed with result 'exit-code'.
Feb 01 15:26:04 jayofelony NetworkManager[670]: <info>  [1706797564.8549] device (wlan0): set-hw-addr: set MAC address to B2:52:02:E7:9A:86 (scanning)
Feb 01 15:26:04 jayofelony bettercap-launcher[942]: [15:26:04] [sys.log] [inf] wifi sending association request to AP Ziggo (channel:11 encryption:WPA2)
Feb 01 15:26:04 jayofelony bettercap-launcher[942]: [15:26:04] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 15:26:04 jayofelony kernel: brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
Feb 01 15:26:04 jayofelony bettercap-launcher[942]: [15:26:04] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 15:26:06 jayofelony bettercap-launcher[942]: [15:26:06] [sys.log] [dbg] wifi setting hopping channels to 6,7,8,11,36,40,48,56,60,100,104,116,128,136,140
Feb 01 15:26:06 jayofelony bettercap-launcher[942]: [15:26:06] [sys.log] [dbg] wifi new frequencies: [2437 2442 2447 2462 5180 5200 5240 5280 5300 5500 5520 5580 5640 5680 5700]
Feb 01 15:26:06 jayofelony bettercap-launcher[942]: [15:26:06] [sys.log] [dbg] wifi hop changed
Feb 01 15:26:06 jayofelony bettercap-launcher[942]: [15:26:06] [sys.log] [war] wifi error while hopping to channel 6: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:06 jayofelony ModemManager[690]: <info>  [base-manager] couldn't check support for device '/sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1': not supported by any plugin
Feb 01 15:26:06 jayofelony bettercap-launcher[942]: [15:26:06] [sys.log] [war] wifi error while hopping to channel 7: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:07 jayofelony bettercap-launcher[942]: [15:26:07] [sys.log] [war] wifi error while hopping to channel 8: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:07 jayofelony NetworkManager[670]: <error> [1706797567.8601] device (wlan0): Couldn't initialize supplicant interface: Failed to D-Bus activate wpa_supplicant service
Feb 01 15:26:08 jayofelony bettercap-launcher[942]: [15:26:08] [sys.log] [war] wifi error while hopping to channel 36: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:08 jayofelony bettercap-launcher[942]: [15:26:08] [sys.log] [war] wifi error while hopping to channel 40: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:09 jayofelony systemd[1]: systemd-rfkill.service: Deactivated successfully.
Feb 01 15:26:09 jayofelony bettercap-launcher[942]: [15:26:09] [sys.log] [war] wifi error while hopping to channel 48: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:09 jayofelony bettercap-launcher[942]: [15:26:09] [sys.log] [war] wifi error while hopping to channel 56: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:10 jayofelony bettercap-launcher[942]: [15:26:10] [sys.log] [war] wifi error while hopping to channel 60: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:11 jayofelony bettercap-launcher[942]: [15:26:11] [sys.log] [war] wifi error while hopping to channel 100: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:11 jayofelony bettercap-launcher[942]: [15:26:11] [sys.log] [war] wifi error while hopping to channel 104: iw: out=command failed: No such device (-19) err=exit status 237

[jlinktu]

Please provide the related output of dmesg instead.

[jayofelony]

sudo dmesg | grep brcm
[    1.213523] irq_brcmstb_l2: registered L2 intc (/soc/interrupt-controller@7ef00100, parent irq: 27)
[    1.223708] brcm-pcie fd500000.pcie: host bridge /scb/pcie@7d500000 ranges:
[    1.223766] brcm-pcie fd500000.pcie:   No bus range found for /scb/pcie@7d500000, using [bus 00-ff]
[    1.223855] brcm-pcie fd500000.pcie:      MEM 0x0600000000..0x063fffffff -> 0x00c0000000
[    1.223946] brcm-pcie fd500000.pcie:   IB MEM 0x0000000000..0x00bfffffff -> 0x0400000000
[    1.224496] brcm-pcie fd500000.pcie: setting SCB_ACCESS_EN, READ_UR_MODE, MAX_BURST_SIZE
[    1.224928] brcm-pcie fd500000.pcie: PCI host bridge to bus 0000:00
[    1.336228] brcm-pcie fd500000.pcie: link up, 5.0 GT/s PCIe x1 (SSC)
[    1.339481] brcm-pcie fd500000.pcie: clkreq control enabled
[    2.512869] brcmstb-i2c fef04500.i2c:  @97500hz registered in polling mode
[    2.529003] brcmstb-i2c fef09500.i2c:  @97500hz registered in polling mode
[    7.683333] brcmfmac: loading out-of-tree module taints kernel.
[    7.952135] brcmfmac: F1 signature read @0x18000000=0x15264345
[    8.070178] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[    8.071027] usbcore: registered new interface driver brcmfmac
[    8.132171] Bluetooth: hci0: BCM4345C0 'brcm/BCM4345C0.raspberrypi,4-model-b.hcd' Patch
[    8.494027] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[    8.504246] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Feb  1 2024 15:11:25 version 7.45.206 (nexmon.org: 2.2.2-465-gd2182-dirty-5) FWID 01-88ee44ea
[   11.276308] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[   12.162607] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[   14.296486] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[   14.324592] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[   14.324614] brcmfmac: brcmf_mon_add_vif: brcmf_mon_add_vif called
[   14.324618] brcmfmac: brcmf_mon_add_vif: Adding vif "wlan0mon"
[  724.993874] ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
[  725.092130] ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do.
[  725.092157] ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
[  725.301499] brcmfmac: F1 signature read @0x18000000=0x15264345
[  725.305485] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[  725.633166] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[  725.636488] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Feb  1 2024 15:11:25 version 7.45.206 (nexmon.org: 2.2.2-465-gd2182-dirty-5) FWID 01-88ee44ea
[  725.758595] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[  726.303989] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled

[jlinktu]

Check if debug output is set with sudo cat /sys/module/brcmfmac/parameters/debug, I would have expected more output.

[jayofelony]

Doesnt seem like it

sudo cat /sys/module/brcmfmac/parameters/debug 0

[jayofelony]

[jlinktu]

Any error or warning when you ran make install-firmware with this modification?

[jayofelony]

None

[jlinktu]

Let's try to add even more output with: debug=0x120406 And check in a second window the live output with dmesg -w (start before make install-firmware) to see if the output level is increased up to when the firmware crashes the first time.

[jayofelony]

yeah thats working, ill run depmod -a and reboot and let it run until crash okay?

[jlinktu]

When you reboot, the non-nexmon kernel module will be loaded and the debug parameter will also be discarded. Thus, you will need to run make install-firmware again.

[jayofelony]

okay its running, itll be about 5-10 minutes

[jlinktu]

No crash as far as I can see.

[jayofelony]

no, my bad. service for scanning wasnt runing LOL

[jayofelony]

[ 2434.724141] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2434.724145] brcmfmac: brcmf_sdio_clkctl Enter
[ 2434.724149] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2434.724153] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2434.724158] brcmfmac: brcmf_sdio_readframes Enter
[ 2434.724167] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[ 2434.724201] brcmfmac: brcmf_sdio_read_control Enter
[ 2434.724225] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[ 2434.724235] brcmfmac: brcmf_configure_arp_nd_offload successfully configured (1) ARP offload to 0x9
[ 2434.724243] brcmfmac: brcmf_sdio_bus_txctl Enter
[ 2434.724272] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[ 2434.724311] brcmfmac: brcmf_sdio_dpc Enter
[ 2434.724319] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2434.724320] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[ 2434.724323] brcmfmac: brcmf_sdio_clkctl Enter
[ 2434.724326] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2434.724327] brcmfmac: brcmf_sdio_bus_rxctl Enter
[ 2434.724330] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2434.724528] brcmfmac: brcmf_sdio_isr Enter
[ 2434.724631] brcmfmac: brcmf_sdio_dpc Enter
[ 2434.724642] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2434.724647] brcmfmac: brcmf_sdio_clkctl Enter
[ 2434.724652] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2434.724655] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2434.724662] brcmfmac: brcmf_sdio_readframes Enter
[ 2434.724674] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[ 2434.724713] brcmfmac: brcmf_sdio_read_control Enter
[ 2434.724750] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[ 2434.724772] brcmfmac: brcmf_configure_arp_nd_offload successfully configured (1) ND offload to 0x9
[ 2434.737442] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2434.737457] brcmfmac: brcmf_sdio_clkctl Enter
[ 2434.737462] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2434.737466] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2434.737538] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[ 2434.737583] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x000056b4 in window 0x00258000
[ 2434.737754] brcmfmac: CONSOLE: 000000.890 wl0: unable to find iovar "toe_ol"
[ 2434.737760] brcmfmac: CONSOLE: 000000.890 wl0: wlc_iovar_op: toe_ol BCME -23 (Unsupported)
[ 2434.753434] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2434.753449] brcmfmac: brcmf_sdio_clkctl Enter
[ 2434.753453] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2434.753458] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2434.753467] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[ 2434.753523] brcmfmac: brcmf_sdio_bus_watchdog idle
[ 2434.753531] brcmfmac: brcmf_sdio_bus_sleep Enter: request SLEEP currently WAKE
[ 2434.753535] brcmfmac: brcmf_sdio_clkctl Enter
[ 2434.753539] brcmfmac: brcmf_sdio_htclk Enter
[ 2434.753562] brcmfmac: brcmf_sdio_htclk CLKCTL: turned OFF
[ 2434.753567] brcmfmac: brcmf_sdio_sdclk Enter
[ 2434.753570] brcmfmac: brcmf_sdio_clkctl 3 -> 0
[ 2434.753574] brcmfmac: brcmf_sdio_bus_sleep new state SLEEP
[ 2434.753578] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0

[jayofelony]

some more errors/warnings

[jayofelony]

The actual message of the crash found

[ 2433.353690] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2433.353701] brcmfmac: brcmf_sdio_clkctl Enter
[ 2433.353712] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2433.353723] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2433.364211] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.364237] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000bfcf0a34 len 38
[ 2433.364249] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 65
[ 2433.364284] brcmfmac: brcmf_sdio_dpc Enter
[ 2433.364313] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2433.364324] brcmfmac: brcmf_sdio_clkctl Enter
[ 2433.364336] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2433.364345] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2433.369988] brcmfmac: brcmf_sdio_isr Enter
[ 2433.370111] brcmfmac: brcmf_sdio_dpc Enter
[ 2433.370133] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2433.370145] brcmfmac: brcmf_sdio_clkctl Enter
[ 2433.370158] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2433.370167] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2433.370178] brcmfmac: brcmf_sdio_hostmail Enter
[ 2433.370278] brcmfmac: brcmf_sdio_hostmail mailbox indicates firmware halted
[ 2433.370294] ieee80211 phy1: brcmf_fw_crashed: Firmware has halted or crashed
[ 2433.370887] brcmfmac: brcmf_sdio_bus_get_memdump dump at 0x00198000: size=819200
[ 2433.371016] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00198000
[ 2433.371252] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00198000
[ 2433.371459] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00198000
[ 2433.371665] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00198000
[ 2433.371870] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00198000
[ 2433.372076] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00198000
[ 2433.372280] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00198000
[ 2433.372485] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00198000
[ 2433.372690] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00198000
[ 2433.372894] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00198000
[ 2433.373099] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00198000
[ 2433.373304] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00198000
[ 2433.373524] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00198000
[ 2433.373748] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00198000
[ 2433.373971] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00198000
[ 2433.374190] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00198000
[ 2433.374548] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001a0000
[ 2433.374780] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001a0000
[ 2433.375019] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001a0000
[ 2433.375234] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001a0000
[ 2433.375370] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.375405] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000e6e66245 len 38
[ 2433.375420] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 66
[ 2433.375471] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001a0000
[ 2433.375690] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001a0000
[ 2433.375915] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001a0000
[ 2433.376142] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001a0000
[ 2433.376364] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001a0000
[ 2433.376583] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001a0000
[ 2433.376821] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001a0000
[ 2433.377046] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001a0000
[ 2433.377270] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001a0000
[ 2433.377463] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001a0000
[ 2433.377629] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001a0000
[ 2433.377791] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001a0000
[ 2433.377995] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001a8000
[ 2433.378154] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001a8000
[ 2433.378313] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001a8000
[ 2433.378469] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001a8000
[ 2433.378629] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001a8000
[ 2433.378788] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001a8000
[ 2433.378946] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001a8000
[ 2433.379103] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001a8000
[ 2433.379261] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001a8000
[ 2433.379418] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001a8000
[ 2433.379575] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001a8000
[ 2433.379732] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001a8000
[ 2433.379889] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001a8000
[ 2433.380046] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001a8000
[ 2433.380203] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001a8000
[ 2433.380360] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001a8000
[ 2433.380561] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001b0000
[ 2433.380717] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001b0000
[ 2433.380874] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001b0000
[ 2433.381030] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001b0000
[ 2433.381186] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001b0000
[ 2433.381349] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001b0000
[ 2433.381511] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001b0000
[ 2433.381671] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001b0000
[ 2433.381829] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001b0000
[ 2433.381987] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001b0000
[ 2433.382145] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001b0000
[ 2433.382301] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001b0000
[ 2433.382461] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001b0000
[ 2433.382617] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001b0000
[ 2433.382771] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001b0000
[ 2433.382925] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001b0000
[ 2433.383123] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001b8000
[ 2433.383277] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001b8000
[ 2433.383434] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001b8000
[ 2433.383594] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001b8000
[ 2433.383755] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001b8000
[ 2433.383909] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001b8000
[ 2433.384063] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001b8000
[ 2433.384218] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001b8000
[ 2433.384373] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001b8000
[ 2433.384526] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001b8000
[ 2433.384680] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001b8000
[ 2433.384833] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001b8000
[ 2433.384987] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001b8000
[ 2433.385140] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001b8000
[ 2433.385293] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001b8000
[ 2433.385454] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001b8000
[ 2433.385672] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001c0000
[ 2433.385839] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001c0000
[ 2433.386012] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001c0000
[ 2433.386182] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001c0000
[ 2433.386351] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001c0000
[ 2433.386387] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.386401] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000005a4e5ac9 len 38
[ 2433.386407] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 67
[ 2433.386519] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001c0000
[ 2433.386681] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001c0000
[ 2433.386840] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001c0000
[ 2433.386998] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001c0000
[ 2433.387159] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001c0000
[ 2433.387318] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001c0000
[ 2433.387475] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001c0000
[ 2433.387633] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001c0000
[ 2433.387790] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001c0000
[ 2433.387948] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001c0000
[ 2433.388104] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001c0000
[ 2433.388308] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001c8000
[ 2433.388466] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001c8000
[ 2433.388623] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001c8000
[ 2433.388780] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001c8000
[ 2433.388937] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001c8000
[ 2433.389095] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001c8000
[ 2433.389251] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001c8000
[ 2433.389426] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001c8000
[ 2433.389589] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001c8000
[ 2433.389751] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001c8000
[ 2433.389912] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001c8000
[ 2433.390068] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001c8000
[ 2433.390225] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001c8000
[ 2433.390386] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001c8000
[ 2433.390542] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001c8000
[ 2433.390695] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001c8000
[ 2433.390898] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001d0000
[ 2433.391057] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001d0000
[ 2433.391214] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001d0000
[ 2433.391368] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001d0000
[ 2433.391521] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001d0000
[ 2433.391687] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001d0000
[ 2433.391840] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001d0000
[ 2433.391993] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001d0000
[ 2433.392146] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001d0000
[ 2433.392299] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001d0000
[ 2433.392452] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001d0000
[ 2433.392605] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001d0000
[ 2433.392757] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001d0000
[ 2433.392910] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001d0000
[ 2433.393063] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001d0000
[ 2433.393216] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001d0000
[ 2433.393427] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001d8000
[ 2433.393588] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001d8000
[ 2433.393747] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001d8000
[ 2433.393909] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001d8000
[ 2433.394067] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001d8000
[ 2433.394230] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001d8000
[ 2433.394390] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001d8000
[ 2433.394545] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001d8000
[ 2433.394699] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001d8000
[ 2433.394854] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001d8000
[ 2433.395010] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001d8000
[ 2433.395163] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001d8000
[ 2433.395317] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001d8000
[ 2433.395470] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001d8000
[ 2433.395626] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001d8000
[ 2433.395783] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001d8000
[ 2433.395989] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001e0000
[ 2433.396146] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001e0000
[ 2433.396300] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001e0000
[ 2433.396454] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001e0000
[ 2433.396616] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001e0000
[ 2433.396712] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.396723] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000005788696a len 38
[ 2433.396730] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 68
[ 2433.396775] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001e0000
[ 2433.396931] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001e0000
[ 2433.397087] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001e0000
[ 2433.397240] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001e0000
[ 2433.397416] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001e0000
[ 2433.397579] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001e0000
[ 2433.397739] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001e0000
[ 2433.397904] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001e0000
[ 2433.398069] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001e0000
[ 2433.398228] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001e0000
[ 2433.398394] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001e0000
[ 2433.398602] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001e8000
[ 2433.398759] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001e8000
[ 2433.398913] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001e8000
[ 2433.399068] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001e8000
[ 2433.399222] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001e8000
[ 2433.399375] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001e8000
[ 2433.399530] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001e8000
[ 2433.399686] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001e8000
[ 2433.399840] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001e8000
[ 2433.399994] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001e8000
[ 2433.400148] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001e8000
[ 2433.400302] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001e8000
[ 2433.400456] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001e8000
[ 2433.400610] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001e8000
[ 2433.400763] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001e8000
[ 2433.400917] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001e8000
[ 2433.401113] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001f0000
[ 2433.401267] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001f0000
[ 2433.401450] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001f0000
[ 2433.401704] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001f0000
[ 2433.401873] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001f0000
[ 2433.402037] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001f0000
[ 2433.402204] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001f0000
[ 2433.402377] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001f0000
[ 2433.402538] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001f0000
[ 2433.402692] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001f0000
[ 2433.402847] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001f0000
[ 2433.403001] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001f0000
[ 2433.403156] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001f0000
[ 2433.403312] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001f0000
[ 2433.403466] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001f0000
[ 2433.403620] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001f0000
[ 2433.403819] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001f8000
[ 2433.403973] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001f8000
[ 2433.404126] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001f8000
[ 2433.404280] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001f8000
[ 2433.404435] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001f8000
[ 2433.404588] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001f8000
[ 2433.404742] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001f8000
[ 2433.404895] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001f8000
[ 2433.405048] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001f8000
[ 2433.405201] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001f8000
[ 2433.405354] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001f8000
[ 2433.405513] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001f8000
[ 2433.405689] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001f8000
[ 2433.405856] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001f8000
[ 2433.406022] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001f8000
[ 2433.406185] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001f8000
[ 2433.406398] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00200000
[ 2433.406561] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00200000
[ 2433.406719] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00200000
[ 2433.406877] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00200000
[ 2433.407010] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.407023] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000000f818827 len 38
[ 2433.407029] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 69
[ 2433.407043] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00200000
[ 2433.407203] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00200000
[ 2433.407358] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00200000
[ 2433.407513] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00200000
[ 2433.407669] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00200000
[ 2433.407823] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00200000
[ 2433.407976] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00200000
[ 2433.408130] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00200000
[ 2433.408284] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00200000
[ 2433.408438] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00200000
[ 2433.408592] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00200000
[ 2433.408745] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00200000
[ 2433.408943] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00208000
[ 2433.409096] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00208000
[ 2433.409250] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00208000
[ 2433.409414] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00208000
[ 2433.409576] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00208000
[ 2433.409738] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00208000
[ 2433.409903] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00208000
[ 2433.410066] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00208000
[ 2433.410229] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00208000
[ 2433.410393] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00208000
[ 2433.410555] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00208000
[ 2433.410718] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00208000
[ 2433.410874] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00208000
[ 2433.411027] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00208000
[ 2433.411187] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00208000
[ 2433.411340] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00208000
[ 2433.411536] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00210000
[ 2433.411690] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00210000
[ 2433.411844] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00210000
[ 2433.411997] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00210000
[ 2433.412151] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00210000
[ 2433.412304] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00210000
[ 2433.412458] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00210000
[ 2433.412611] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00210000
[ 2433.412765] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00210000
[ 2433.412918] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00210000
[ 2433.413071] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00210000
[ 2433.413224] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00210000
[ 2433.413377] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00210000
[ 2433.413560] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00210000
[ 2433.413722] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00210000
[ 2433.413886] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00210000
[ 2433.414095] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00218000
[ 2433.414259] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00218000
[ 2433.414423] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00218000
[ 2433.414586] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00218000
[ 2433.414743] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00218000
[ 2433.414897] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00218000
[ 2433.415050] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00218000
[ 2433.415204] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00218000
[ 2433.415357] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00218000
[ 2433.415514] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00218000
[ 2433.415667] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00218000
[ 2433.415820] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00218000
[ 2433.415973] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00218000
[ 2433.416126] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00218000
[ 2433.416281] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00218000
[ 2433.416438] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00218000
[ 2433.416635] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00220000
[ 2433.416788] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00220000
[ 2433.416941] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00220000
[ 2433.417099] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00220000
[ 2433.417255] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00220000
[ 2433.417339] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.417350] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000003675261d len 38
[ 2433.417356] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 70
[ 2433.417423] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00220000
[ 2433.417584] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00220000
[ 2433.417748] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00220000
[ 2433.417910] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00220000
[ 2433.418081] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00220000
[ 2433.418241] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00220000
[ 2433.418401] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00220000
[ 2433.418567] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00220000
[ 2433.418732] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00220000
[ 2433.418892] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00220000
[ 2433.419049] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00220000
[ 2433.419247] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00228000
[ 2433.419401] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00228000
[ 2433.419570] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00228000
[ 2433.419726] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00228000
[ 2433.419881] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00228000
[ 2433.420034] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00228000
[ 2433.420189] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00228000
[ 2433.420342] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00228000
[ 2433.420495] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00228000
[ 2433.420648] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00228000
[ 2433.420801] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00228000
[ 2433.420954] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00228000
[ 2433.421109] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00228000
[ 2433.421262] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00228000
[ 2433.421423] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00228000
[ 2433.421583] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00228000
[ 2433.421787] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00230000
[ 2433.421949] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00230000
[ 2433.422111] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00230000
[ 2433.422286] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00230000
[ 2433.422451] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00230000
[ 2433.422614] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00230000
[ 2433.422776] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00230000
[ 2433.422936] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00230000
[ 2433.423091] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00230000
[ 2433.423246] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00230000
[ 2433.423401] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00230000
[ 2433.423555] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00230000
[ 2433.423709] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00230000
[ 2433.423863] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00230000
[ 2433.424021] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00230000
[ 2433.424174] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00230000
[ 2433.424373] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00238000
[ 2433.424526] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00238000
[ 2433.424680] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00238000
[ 2433.424833] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00238000
[ 2433.424986] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00238000
[ 2433.425140] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00238000
[ 2433.425294] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00238000
[ 2433.425454] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00238000
[ 2433.425612] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00238000
[ 2433.425773] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00238000
[ 2433.425943] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00238000
[ 2433.426105] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00238000
[ 2433.426269] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00238000
[ 2433.426429] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00238000
[ 2433.426589] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00238000
[ 2433.426752] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00238000
[ 2433.426955] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00240000
[ 2433.427110] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00240000
[ 2433.427264] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00240000
[ 2433.427419] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00240000
[ 2433.427576] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00240000
[ 2433.427676] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.427689] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000fffb4408 len 38
[ 2433.427696] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 71
[ 2433.427734] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00240000
[ 2433.427893] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00240000
[ 2433.428048] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00240000
[ 2433.428203] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00240000
[ 2433.428358] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00240000
[ 2433.428512] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00240000
[ 2433.428666] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00240000
[ 2433.428820] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00240000
[ 2433.428974] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00240000
[ 2433.429127] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00240000
[ 2433.429281] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00240000
[ 2433.429483] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00248000
[ 2433.429645] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00248000
[ 2433.429806] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00248000
[ 2433.429970] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00248000
[ 2433.430130] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00248000
[ 2433.430292] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00248000
[ 2433.430451] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00248000
[ 2433.430614] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00248000
[ 2433.430775] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00248000
[ 2433.430931] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00248000
[ 2433.431084] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00248000
[ 2433.431237] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00248000
[ 2433.431390] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00248000
[ 2433.431544] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00248000
[ 2433.431715] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00248000
[ 2433.431869] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00248000
[ 2433.432066] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00250000
[ 2433.432219] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00250000
[ 2433.432372] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00250000
[ 2433.432525] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00250000
[ 2433.432679] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00250000
[ 2433.432832] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00250000
[ 2433.432985] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00250000
[ 2433.433138] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00250000
[ 2433.433291] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00250000
[ 2433.433449] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00250000
[ 2433.433608] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00250000
[ 2433.433768] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00250000
[ 2433.433933] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00250000
[ 2433.434094] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00250000
[ 2433.434254] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00250000
[ 2433.434416] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00250000
[ 2433.434622] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00258000
[ 2433.434778] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00258000
[ 2433.434933] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00258000
[ 2433.435086] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00258000
[ 2433.435239] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00258000
[ 2433.435394] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00258000
[ 2433.435547] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00258000
[ 2433.435701] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00258000
[ 2433.435854] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00258000
[ 2433.436007] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00258000
[ 2433.436160] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00258000
[ 2433.436313] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00258000
[ 2433.436467] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00258000
[ 2433.436621] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00258000
[ 2433.436774] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00258000
[ 2433.436930] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00258000
[ 2433.437167] brcmfmac: brcmf_sdio_hostmail Dongle ready, protocol version 4
[ 2433.437176] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2433.437181] brcmfmac: brcmf_sdio_clkctl Enter
[ 2433.437185] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2433.437189] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2433.437196] brcmfmac: brcmf_sdiod_ramrw read 4 bytes at offset 0x00007ffc in window 0x00258000
[ 2433.437218] brcmfmac: brcmf_sdio_bus_reset Enter
[ 2433.437222] brcmfmac: brcmf_sdiod_intr_unregister Entering oob=0 sd=1
[ 2433.437236] brcmfmac: brcmf_sdio_readshared sdpcm_shared address 0x00204660
[ 2433.437289] brcmfmac: brcmf_sdiod_ramrw read 64 bytes at offset 0x00004660 in window 0x00200000
[ 2433.437336] brcmfmac: brcmf_sdio_dpc Enter
[ 2433.437345] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2433.437349] brcmfmac: brcmf_sdio_clkctl Enter
[ 2433.437353] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2433.437356] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2433.437707] brcmfmac: brcmf_sdio_remove Enter
[ 2433.438871] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2433.438885] brcmfmac: brcmf_sdio_clkctl Enter
[ 2433.438890] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2433.438894] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2433.438932] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.438946] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000005186a438 len 38
[ 2433.439010] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[ 2433.439055] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x000056b4 in window 0x00258000
[ 2433.439225] brcmfmac: CONSOLE: 002199.065 
[ 2433.439230] brcmfmac: CONSOLE: FWID 01-88ee44ea
[ 2433.439233] brcmfmac: CONSOLE: flags 1
[ 2433.439237] brcmfmac: CONSOLE: 002199.065 
[ 2433.439240] brcmfmac: CONSOLE: TRAP 4(25fd60): pc 1aabb0, lr 1aad23, sp 25fdb8, cpsr 2000019f, spsr 200001bf
[ 2433.439244] brcmfmac: CONSOLE: 002199.065   dfsr 1, dfar be23f281
[ 2433.439248] brcmfmac: CONSOLE: 002199.065   r0 2355ac, r1 2355ac, r2 25fe34, r3 0, r4 22bbbc, r5 ffff, r6 0
[ 2433.439252] brcmfmac: CONSOLE: 002199.065   r7 be23f199, r8 25089c, r9 1, r10 25a63c, r11 2508a0, r12 48
[ 2433.439256] brcmfmac: CONSOLE: 002199.066 
[ 2433.439259] brcmfmac: CONSOLE:    sp+0 00000001 00000001 002355ac 00242968
[ 2433.439263] brcmfmac: CONSOLE: 002199.066   sp+10 00000001 0025d4bc 00000002 0019b3b3
[ 2433.439267] brcmfmac: CONSOLE: 
[ 2433.439270] brcmfmac: CONSOLE: 002199.066 sp+1c 0019b3b3
[ 2433.439273] brcmfmac: CONSOLE: 002199.066 sp+34 0019b59d
[ 2433.439277] brcmfmac: CONSOLE: 002199.066 sp+58 001a0003
[ 2433.439280] brcmfmac: CONSOLE: 002199.066 sp+74 001a44c3
[ 2433.439284] brcmfmac: CONSOLE: 002199.066 sp+ac 00031d93
[ 2433.439287] brcmfmac: CONSOLE: 002199.066 sp+144 0019c9f5
[ 2433.439290] brcmfmac: CONSOLE: 002199.066 sp+174 0019ba61
[ 2433.439294] brcmfmac: CONSOLE: 002199.066 sp+18c 0019bc69
[ 2433.439297] brcmfmac: CONSOLE: 002199.066 sp+1a4 0019be91
[ 2433.439300] brcmfmac: CONSOLE: 002199.066 sp+1b4 0019c035
[ 2433.439304] brcmfmac: CONSOLE: 002199.066 sp+1bc 0019a5b9
[ 2433.439307] brcmfmac: CONSOLE: 002199.066 sp+1c4 0019ac89
[ 2433.439310] brcmfmac: CONSOLE: 002199.066 sp+1d4 00199d27
[ 2433.439314] brcmfmac: CONSOLE: 002199.066 sp+1e0 000001df
[ 2433.439317] brcmfmac: CONSOLE: 002199.066 sp+220 00008221
[ 2433.439321] brcmfmac: CONSOLE: 002199.066 sp+230 0019caf7
[ 2433.439349] brcmfmac: brcmf_sdiod_intr_unregister Entering oob=0 sd=0
[ 2433.439357] brcmfmac: brcmf_detach Enter
[ 2433.449128] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.449155] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000d1d8a41e len 38
[ 2433.457414] brcmfmac: brcmf_bus_change_state 1 -> 0
[ 2433.457431] brcmfmac: brcmf_remove_interface Enter, bsscfgidx=2, ifidx=1
[ 2433.457436] brcmfmac: brcmf_del_if Enter, bsscfgidx=2, ifidx=1
[ 2433.457635] brcmfmac: brcmf_net_mon_stop Enter
[ 2433.457645] ieee80211 phy1: brcmf_fil_cmd_data: bus is down. we have nothing to do.
[ 2433.457651] ieee80211 phy1: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
[ 2433.458038] device wlan0mon left promiscuous mode
[ 2433.458289] brcmfmac: brcmf_cfg80211_get_tx_power Enter
[ 2433.458295] brcmfmac: check_vif_up device is not ready : status (0)
[ 2433.497431] brcmfmac: brcmf_remove_interface Enter, bsscfgidx=0, ifidx=0
[ 2433.497452] brcmfmac: brcmf_del_if Enter, bsscfgidx=0, ifidx=0

[DrSchottky]

For what I've seen it fails here https://github.com/FlUxIuS/rt-ac86u_et/blob/master/release/src-rt-5.02hnd/bcmdrivers/broadcom/net/wl/impl51/4365/src/wl/sys/wlc_tx.c#L2892

[jayofelony]

I trust you experts in this know what you are talking about, I don't even know if it's a nexmon bug or something that my software is doing wrong. Heck, for all I know it's an issue in the original part of the firmware.