search

seemoo-lab / nexmon

The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more
GNU General Public License v3.0
2.36k stars 448 forks source link

BCM43455C0: firmware has halted or crashed #595

Open jayofelony opened 5 months ago

jayofelony commented 5 months ago

Output from journalctl: Feb 01 10:33:10 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed

Device: Raspberry Pi 4

WiFi chip: 43455c0

Firmware: nexmon 7.45.206

[88411.161703] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Jan 24 2024 20:30:46 version 7.45.206 (nexmon.org: 2.2.2-514-gf195c-2) FWID 01-88ee44ea
[88411.280828] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[88411.811377] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[88424.201595] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[88424.249634] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[88424.249665] brcmfmac: brcmf_mon_add_vif: brcmf_mon_add_vif called
[88424.249674] brcmfmac: brcmf_mon_add_vif: Adding vif "wlan0mon"
[90611.957556] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[90614.985828] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[90614.985846] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[90614.985853] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[91535.369455] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[91538.397427] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[91538.397445] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[91538.397452] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[93495.332828] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[93498.360899] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[93498.360916] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[93498.360923] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[94005.518078] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[94008.545083] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[94008.545100] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[94008.545107] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[130885.613184] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[130888.639866] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[130888.639884] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[130888.639891] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[132870.122369] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[132873.156327] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[132873.156345] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[132873.156352] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[135620.017168] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[135623.046750] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[135623.046769] brcmfmac: brcmf_vif_add_validate: ... there is already a monitor interface, returning EOPNOTSUPP
[135623.046776] ieee80211 phy0: brcmf_cfg80211_add_iface: iface validation failed: err=-95
[135798.650335] ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
[135798.750228] ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do.
[135798.750255] ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
[135798.977727] brcmfmac: F1 signature read @0x18000000=0x15264345
[135798.981613] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[135799.310392] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[135799.313703] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Jan 24 2024 20:30:46 version 7.45.206 (nexmon.org: 2.2.2-514-gf195c-2) FWID 01-88ee44ea
[135799.443187] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[135799.960666] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[135801.219002] usbcore: deregistering interface driver brcmfmac
[135802.394468] brcmfmac: F1 signature read @0x18000000=0x15264345
[135802.398679] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[135802.705905] usbcore: registered new interface driver brcmfmac
[135802.708021] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[135802.711525] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Jan 24 2024 20:30:46 version 7.45.206 (nexmon.org: 2.2.2-514-gf195c-2) FWID 01-88ee44ea
[135802.831390] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[135803.352685] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[135804.716690] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[135805.407504] usbcore: deregistering interface driver brcmfmac
[135806.622508] brcmfmac: F1 signature read @0x18000000=0x15264345
[135806.626516] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[135806.716232] usbcore: registered new interface driver brcmfmac
jlinktu commented 5 months ago

All I can see from that log is that a virtual monitor interface was added and then there were 7 more tries to add another one, which is not supported, only a single virtual monitor interface per interface can exist. Then the chip crashes and is restarted.

Can you provide me with the commands that you executed during this? Best would be everything that I need to replicate this behavior. Including OS info, kernel, driver version...

jayofelony commented 5 months ago 
uname -a
Linux jayofelony 6.1.0-rpi7-rpi-v8 #1 SMP PREEMPT Debian 1:6.1.63-1+rpt1 (2023-11-24) aarch64 GNU/Linux

RaspiOS 64bit lite Bookworm, using nexmon 7.45.206 for bcm43455c0 from DrSchottky his repo.

I am running Pwnagotchi, which uses a plugin to check journalctl for erros on the wifi firmware.

self.pattern = re.compile(r'brcmf_cfg80211_nexmon_set_channel.*?Set Channel failed')
self.pattern2 = re.compile(r'wifi error while hopping to channel')
self.pattern3 = re.compile(r'Firmware has halted or crashed')
self.pattern4 = re.compile(r'error 400: could not find interface wlan0mon')

You may not believe it, but when it sees a lot of accesspoints or quick injecting of packets it seems to crash.

The monitor adding and firmware crash are not related, there is about 150 seconds inbetween. That's because of me restarting the services, hence the error about already a monitoring device.

jayofelony commented 5 months ago

The command used to start monitor mode:

start_monitor_interface() {
  rfkill unblock all
  ifconfig wlan0 up
  sleep 3
  iw dev wlan0 set power_save off
  iw phy "$(iw phy | head -1 | cut -d" " -f2)" interface add wlan0mon type monitor
  sleep 2
  rfkill unblock all
  ifconfig wlan0 down
  ifconfig wlan0mon up
  iw dev wlan0mon set power_save off
}

The sleep command is needed, because on the RPi zero2w the firmware will crash immediately if we do not delay start monitor mode.

jlinktu commented 5 months ago

If you are using @DrSchottky's version, you might want to ask there instead.

jayofelony commented 5 months ago

journalctl -k

Feb 01 12:39:11 jayofelony kernel: brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
Feb 01 12:39:11 jayofelony kernel: brcmfmac: brcmf_mon_add_vif: brcmf_mon_add_vif called
Feb 01 12:39:11 jayofelony kernel: brcmfmac: brcmf_mon_add_vif: Adding vif "wlan0mon"
Feb 01 12:39:12 jayofelony kernel: zram: Added device: zram0
Feb 01 12:39:12 jayofelony kernel: zram: Added device: zram1
Feb 01 12:39:12 jayofelony kernel: zram1: detected capacity change from 0 to 204800
Feb 01 12:39:12 jayofelony kernel: EXT4-fs (zram1): mounted filesystem with ordered data mode. Quota mode: none.
Feb 01 12:39:13 jayofelony kernel: zram: Added device: zram2
Feb 01 12:39:13 jayofelony kernel: zram2: detected capacity change from 0 to 40960
Feb 01 12:39:13 jayofelony kernel: EXT4-fs (zram2): mounted filesystem with ordered data mode. Quota mode: none.
Feb 01 12:39:18 jayofelony kernel: device wlan0mon entered promiscuous mode
Feb 01 12:40:08 jayofelony kernel: zram: Added device: zram3
Feb 01 12:40:08 jayofelony kernel: zram3: detected capacity change from 0 to 204800
Feb 01 12:40:08 jayofelony kernel: zram: Added device: zram4
Feb 01 12:40:08 jayofelony kernel: zram4: detected capacity change from 0 to 40960
Feb 01 12:40:11 jayofelony kernel: device wlan0mon left promiscuous mode
Feb 01 12:40:11 jayofelony kernel: device wlan0mon entered promiscuous mode
Feb 01 12:44:57 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
Feb 01 12:44:57 jayofelony kernel: ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do.
Feb 01 12:44:57 jayofelony kernel: ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
Feb 01 12:44:57 jayofelony kernel: device wlan0mon left promiscuous mode
Feb 01 12:44:57 jayofelony kernel: mmc1: card 0001 removed
Feb 01 12:44:57 jayofelony kernel: mmc1: new high speed SDIO card at address 0001
Feb 01 12:44:57 jayofelony kernel: brcmfmac: F1 signature read @0x18000000=0x15264345
Feb 01 12:44:57 jayofelony kernel: brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
Feb 01 12:44:57 jayofelony kernel: brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
Feb 01 12:44:57 jayofelony kernel: brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Jan 24 2024 20:30:46 version 7.45.206 (nexmon.org: 2.2.2-514-gf195c-2) FWID 01-88ee44ea
Feb 01 12:44:57 jayofelony kernel: brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
Feb 01 12:44:58 jayofelony kernel: brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled

journalctl -S today

Feb 01 12:44:51 jayofelony bettercap-launcher[943]: [12:44:51] [sys.log] [dbg] wifi hop changed
Feb 01 12:44:51 jayofelony bettercap-launcher[943]: [12:44:51] [sys.log] [inf] wifi sending association request to AP Ziggo (channel:11 encryption:WPA2)
Feb 01 12:44:52 jayofelony bettercap-launcher[943]: [12:44:52] [sys.log] [inf] wifi sending association request to AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 12:44:52 jayofelony bettercap-launcher[943]: [12:44:52] [sys.log] [inf] wifi deauthing client 70:f1:1c:48:fd:af (Shenzhen Ogemray Technology Co.,Ltd) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 12:44:54 jayofelony bettercap-launcher[943]: [12:44:54] [sys.log] [inf] wifi deauthing client d0:ba:e4:8b:0d:94 (Shanghai MXCHIP Information Technology Co., Ltd.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 12:44:56 jayofelony bettercap-launcher[943]: [12:44:56] [sys.log] [dbg] wifi skipping deauth frame from d0:ba:e4:8b:0d:94
Feb 01 12:44:56 jayofelony bettercap-launcher[943]: [12:44:56] [sys.log] [inf] wifi deauthing client d2:ac:32:45:e5:1b from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 12:44:57 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
Feb 01 12:44:57 jayofelony kernel: ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do.
Feb 01 12:44:57 jayofelony kernel: ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
Feb 01 12:44:57 jayofelony kernel: device wlan0mon left promiscuous mode
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony NetworkManager[683]: <info>  [1706787897.2023] device (wlan0): state change: unavailable -> unmanaged (reason 'removed', sys-iface-state: 'removed')
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony NetworkManager[683]: <info>  [1706787897.2531] radio killswitch /sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1/ieee80211/phy0/rfkill1 disappeared
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony systemd[1]: Starting systemd-rfkill.service - Load/Save RF Kill Switch Status...
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony kernel: mmc1: card 0001 removed
Feb 01 12:44:57 jayofelony systemd[1]: Started systemd-rfkill.service - Load/Save RF Kill Switch Status.
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 12:44:57 jayofelony bettercap-launcher[943]: [12:44:57] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
jayofelony commented 5 months ago

@jlinktu Of course I also tried with your repository. I had to alter the installation a bit to use libmpfr-6.2.0 and libisl-23.2.0.

Feb 01 13:32:51 jayofelony bettercap-launcher[923]: [13:32:51] [sys.log] [inf] wifi deauthing client 70:f1:1c:48:fd:af (Shenzhen Ogemray Technology Co.,Ltd) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:51 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
Feb 01 13:32:52 jayofelony kernel: ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do.
Feb 01 13:32:52 jayofelony kernel: ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
Feb 01 13:32:52 jayofelony kernel: device wlan0mon left promiscuous mode
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony NetworkManager[678]: <info>  [1706790772.0684] device (wlan0): state change: unavailable -> unmanaged (reason 'removed', sys-iface-state: 'removed')
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony NetworkManager[678]: <info>  [1706790772.0934] radio killswitch /sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1/ieee80211/phy0/rfkill1 disappeared
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony systemd[1]: Starting systemd-rfkill.service - Load/Save RF Kill Switch Status...
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony systemd[1]: Started systemd-rfkill.service - Load/Save RF Kill Switch Status.
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony kernel: mmc1: card 0001 removed
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony kernel: mmc1: new high speed SDIO card at address 0001
Feb 01 13:32:52 jayofelony kernel: brcmfmac: F1 signature read @0x18000000=0x15264345
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony kernel: brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony bettercap-launcher[923]: [13:32:52] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 13:32:52 jayofelony kernel: brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
Feb 01 13:32:52 jayofelony kernel: brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Feb  1 2024 13:24:25 version 7.45.206 (nexmon.org: 2.2.2-465-gd2182-3) FWID 01-88ee44ea
Feb 01 13:32:52 jayofelony NetworkManager[678]: <info>  [1706790772.6237] rfkill2: found Wi-Fi radio killswitch (at /sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1/ieee80211/phy1/rfkill2) (driver brcmfmac)
Feb 01 13:32:52 jayofelony NetworkManager[678]: <info>  [1706790772.6501] device (wlan0): driver supports Access Point (AP) mode
Feb 01 13:32:52 jayofelony NetworkManager[678]: <info>  [1706790772.6515] manager: (wlan0): new 802.11 Wi-Fi device (/org/freedesktop/NetworkManager/Devices/5)
Feb 01 13:32:52 jayofelony NetworkManager[678]: <info>  [1706790772.7037] device (wlan0): state change: unmanaged -> unavailable (reason 'managed', sys-iface-state: 'external')
Feb 01 13:32:52 jayofelony systemd[1]: Found device sys-subsystem-net-devices-wlan0.device - /sys/subsystem/net/devices/wlan0.
Feb 01 13:32:52 jayofelony kernel: brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
Feb 01 13:32:52 jayofelony systemd[1]: Started ifup@wlan0.service - ifup for wlan0.
Feb 01 13:32:53 jayofelony NetworkManager[678]: <info>  [1706790773.2636] device (wlan0): set-hw-addr: set MAC address to 76:9E:9B:AE:0A:A9 (scanning)
Feb 01 13:32:53 jayofelony sh[2523]: ifup: missing required variable: address
Feb 01 13:32:53 jayofelony sh[2523]: ifup: missing required configuration variables for interface wlan0/inet
Feb 01 13:32:53 jayofelony sh[2523]: ifup: failed to bring up wlan0
Feb 01 13:32:53 jayofelony kernel: brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
Feb 01 13:32:53 jayofelony systemd[1]: ifup@wlan0.service: Main process exited, code=exited, status=1/FAILURE
Feb 01 13:32:53 jayofelony systemd[1]: ifup@wlan0.service: Failed with result 'exit-code'.
Feb 01 13:32:55 jayofelony ModemManager[694]: <info>  [base-manager] couldn't check support for device '/sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1': not supported by any plugin
Feb 01 13:32:56 jayofelony NetworkManager[678]: <error> [1706790776.2701] device (wlan0): Couldn't initialize supplicant interface: Failed to D-Bus activate wpa_supplicant service
Feb 01 13:32:57 jayofelony systemd[1]: systemd-rfkill.service: Deactivated successfully.
Feb 01 13:33:01 jayofelony bettercap-launcher[923]: [13:33:01] [sys.log] [dbg] wifi station 54:67:51:b9:0b:d0 not seen in 42.116130834s, removing.
Feb 01 13:33:06 jayofelony NetworkManager[678]: <warn>  [1706790786.8674] device (wlan0): re-acquiring supplicant interface (#1).
Feb 01 13:33:09 jayofelony NetworkManager[678]: <error> [1706790789.8702] device (wlan0): Couldn't initialize supplicant interface: Failed to D-Bus activate wpa_supplicant service
jlinktu commented 5 months ago 
--- snip ---
Feb 01 13:32:51 jayofelony bettercap-launcher[923]: [13:32:51] [sys.log] [inf] wifi deauthing client 70:f1:1c:48:fd:af (Shenzhen Ogemray Technology Co.,Ltd) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:51 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
--- snip ---

Leads me to think that the injection of the deauth frame kills the chip.

jayofelony commented 5 months ago

That could surely be, although it had done some deauthing already prior to that part. Here's the rest right before the snip.

Feb 01 13:31:08 jayofelony bettercap-launcher[923]: [13:31:08] [sys.log] [dbg] wifi hop changed
Feb 01 13:31:08 jayofelony bettercap-launcher[923]: [13:31:08] [sys.log] [inf] wifi sending association request to AP Ziggo (channel:11 encryption:WPA2)
Feb 01 13:31:09 jayofelony bettercap-launcher[923]: [13:31:09] [sys.log] [inf] wifi sending association request to AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:31:09 jayofelony bettercap-launcher[923]: [13:31:09] [sys.log] [inf] wifi deauthing client 70:f1:1c:48:fd:af (Shenzhen Ogemray Technology Co.,Ltd) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:31:11 jayofelony bettercap-launcher[923]: [13:31:11] [sys.log] [inf] wifi deauthing client 8c:5a:25:58:1a:cf (ARRIS Group, Inc.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:31:12 jayofelony bettercap-launcher[923]: [13:31:12] [sys.log] [inf] wifi deauthing client 8c:5a:25:58:1a:cf (ARRIS Group, Inc.) from AP Ziggo6611EA8 (channel:44 encryption:WPA2)
Feb 01 13:31:13 jayofelony bettercap-launcher[923]: [13:31:13] [sys.log] [dbg] wifi skipping deauth frame from 8c:5a:25:58:1a:cf
Feb 01 13:31:13 jayofelony bettercap-launcher[923]: [13:31:13] [sys.log] [dbg] wifi skipping deauth frame from 8c:5a:25:58:1a:cf
Feb 01 13:31:13 jayofelony bettercap-launcher[923]: [13:31:13] [sys.log] [inf] wifi deauthing client d0:ba:e4:8b:0d:94 (Shanghai MXCHIP Information Technology Co., Ltd.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:31:14 jayofelony bettercap-launcher[923]: [13:31:14] [sys.log] [dbg] wifi got frame 1/4 of the 54:67:51:b9:0c:a6 <-> 8c:5a:25:58:1a:cf handshake (without PMKID) (anonce:f9bc5e214bef353303190781796c41e388c50d053fa0e7bb9bcf8026fa930348)
Feb 01 13:31:14 jayofelony bettercap-launcher[923]: [13:31:14] [sys.log] [dbg] wifi adding beacon frame to handshake for 54:67:51:b9:0c:a6
Feb 01 13:31:14 jayofelony bettercap-launcher[923]: [13:31:14] [sys.log] [dbg] wifi got frame 1/4 of the 54:67:51:b9:0c:a6 <-> 8c:5a:25:58:1a:cf handshake (without PMKID) (anonce:f9bc5e214bef353303190781796c41e388c50d053fa0e7bb9bcf8026fa930348)
Feb 01 13:31:14 jayofelony bettercap-launcher[923]: [13:31:14] [sys.log] [dbg] wifi adding beacon frame to handshake for 54:67:51:b9:0c:a6
Feb 01 13:31:14 jayofelony bettercap-launcher[923]: [13:31:14] [sys.log] [dbg] wifi got frame 2/4 of the 54:67:51:b9:0c:a6 <-> 8c:5a:25:58:1a:cf handshake (snonce:1a17d4cedb9ad8254e70596a97383b394927b38502d20011318411d1b9bd2a81 mic:2ed305795aeabf818a8edd422320186b)
Feb 01 13:31:14 jayofelony bettercap-launcher[923]: [13:31:14] [sys.log] [dbg] wifi got frame 3/4 of the 54:67:51:b9:0c:a6 <-> 8c:5a:25:58:1a:cf handshake (mic:6e49c2d65394731a6b8d78ba40aab2dc)
Feb 01 13:31:15 jayofelony bettercap-launcher[923]: [13:31:15] [sys.log] [inf] wifi deauthing client d2:ac:32:45:e5:1b from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:31:21 jayofelony bettercap-launcher[923]: [13:31:21] [sys.log] [dbg] wifi got frame 1/4 of the 54:67:51:b9:0c:a6 <-> d0:ba:e4:8b:0d:94 handshake (without PMKID) (anonce:6d0d4810fcb4d1aad757769295f072024c700d0a9fc9d466352030dd8598008d)
Feb 01 13:31:21 jayofelony bettercap-launcher[923]: [13:31:21] [sys.log] [dbg] wifi adding beacon frame to handshake for 54:67:51:b9:0c:a6
Feb 01 13:31:21 jayofelony bettercap-launcher[923]: [13:31:21] [sys.log] [dbg] wifi got frame 2/4 of the 54:67:51:b9:0c:a6 <-> d0:ba:e4:8b:0d:94 handshake (snonce:290902b473e5a2bf672ef0c2afd9cab9ef6c3829b9cad9afc2f02e67c0a2e573 mic:ef1702df3cb907a45f58c2fab4248625)
Feb 01 13:31:21 jayofelony bettercap-launcher[923]: [13:31:21] [sys.log] [dbg] wifi got frame 3/4 of the 54:67:51:b9:0c:a6 <-> d0:ba:e4:8b:0d:94 handshake (mic:07d11b79edb95f9b3d340a0e16b01338)
Feb 01 13:31:22 jayofelony bettercap-launcher[923]: [13:31:22] [sys.log] [dbg] wifi got frame 2/4 of the 54:67:51:b9:0c:a6 <-> d2:ac:32:45:e5:1b handshake (snonce:ecef2e719a7dcf76fbf4d3a7a47e667c488dbf59f72067b1af94e66bb582baef mic:bba318f12d22fb48d01b58ccb2928b85)
Feb 01 13:31:22 jayofelony bettercap-launcher[923]: [13:31:22] [sys.log] [dbg] wifi got frame 1/4 of the 54:67:51:b9:0c:a6 <-> d2:ac:32:45:e5:1b handshake (without PMKID) (anonce:7c8e191dd423ab97a00097a5314fe400970b649f2fe76841613b0157e3b97e27)
Feb 01 13:31:22 jayofelony bettercap-launcher[923]: [13:31:22] [sys.log] [dbg] wifi adding beacon frame to handshake for 54:67:51:b9:0c:a6
Feb 01 13:31:22 jayofelony bettercap-launcher[923]: [13:31:22] [sys.log] [dbg] wifi got frame 3/4 of the 54:67:51:b9:0c:a6 <-> d2:ac:32:45:e5:1b handshake (mic:b129595076216540ef62bebcd027986c)
Feb 01 13:31:37 jayofelony bettercap-launcher[923]: [13:31:37] [sys.log] [dbg] wifi got frame 1/4 of the 54:67:51:b9:0c:a6 <-> d0:ba:e4:8b:0d:94 handshake (without PMKID) (anonce:7e86730435449ca9bc08e979e8efee58b664108ec0dd83f08657002acf3c4366)
Feb 01 13:31:37 jayofelony bettercap-launcher[923]: [13:31:37] [sys.log] [dbg] wifi adding beacon frame to handshake for 54:67:51:b9:0c:a6
Feb 01 13:31:37 jayofelony bettercap-launcher[923]: [13:31:37] [sys.log] [dbg] wifi got frame 2/4 of the 54:67:51:b9:0c:a6 <-> d0:ba:e4:8b:0d:94 handshake (snonce:d66583c137c5a9c34546237382596945e70c8cd64569598273234645c4a9c537 mic:28d11a2fafebe5013584230ed69cbd60)
Feb 01 13:31:37 jayofelony bettercap-launcher[923]: [13:31:37] [sys.log] [dbg] wifi got frame 3/4 of the 54:67:51:b9:0c:a6 <-> d0:ba:e4:8b:0d:94 handshake (mic:8bf3ca3ebf5ac694ae4fe1e89d699d21)
Feb 01 13:31:39 jayofelony bettercap-launcher[923]: [13:31:39] [sys.log] [dbg] wifi station 00:14:3e:68:93:70 not seen in 42.931824336s, removing.
Feb 01 13:31:50 jayofelony bettercap-launcher[923]: [13:31:50] [sys.log] [dbg] wifi station ae:15:a2:2a:c0:a2 not seen in 42.165133415s, removing.
Feb 01 13:31:50 jayofelony bettercap-launcher[923]: [13:31:50] [sys.log] [dbg] wifi station ae:15:a2:4a:d6:3e not seen in 42.165375563s, removing.
Feb 01 13:31:50 jayofelony bettercap-launcher[923]: [13:31:50] [sys.log] [dbg] wifi station ac:15:a2:3a:c0:a2 not seen in 42.165513359s, removing.
Feb 01 13:31:50 jayofelony bettercap-launcher[923]: [13:31:50] [sys.log] [dbg] wifi station ac:15:a2:3a:d6:3e not seen in 42.165584081s, removing.
Feb 01 13:31:50 jayofelony bettercap-launcher[923]: [13:31:50] [sys.log] [dbg] wifi station ae:15:a2:2a:d6:3e not seen in 42.165218711s, removing.
Feb 01 13:31:50 jayofelony bettercap-launcher[923]: [13:31:50] [sys.log] [dbg] wifi station ae:15:a2:4a:c0:a2 not seen in 42.165321045s, removing.
Feb 01 13:31:57 jayofelony bettercap-launcher[923]: [13:31:57] [sys.log] [dbg] wifi client b4:ce:40:1c:54:9f (Samsung Electronics Co.,Ltd) of station ae:15:a2:2a:bd:3a not seen in 2m24.319077224s, removing.
Feb 01 13:31:57 jayofelony bettercap-launcher[923]: [13:31:57] [sys.log] [dbg] wifi station 54:67:51:b9:0b:d0 not seen in 42.560420847s, removing.
Feb 01 13:32:09 jayofelony bettercap-launcher[923]: [13:32:09] [sys.log] [dbg] wifi setting hopping channels to 44
Feb 01 13:32:09 jayofelony bettercap-launcher[923]: [13:32:09] [sys.log] [dbg] wifi new frequencies: [5220]
Feb 01 13:32:09 jayofelony bettercap-launcher[923]: [13:32:09] [sys.log] [dbg] wifi hop changed
Feb 01 13:32:09 jayofelony bettercap-launcher[923]: [13:32:09] [sys.log] [inf] wifi deauthing client 8c:5a:25:58:1a:cf (ARRIS Group, Inc.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:13 jayofelony bettercap-launcher[923]: [13:32:13] [sys.log] [inf] wifi deauthing client bc:30:7d:c8:16:9e (Wistron Neweb Corporation) from AP Ziggo6611EA8 (channel:44 encryption:WPA2)
Feb 01 13:32:16 jayofelony bettercap-launcher[923]: [13:32:16] [sys.log] [dbg] wifi setting hopping channels to 3,11,36,44,48,52,56,60,64,100,108,112,120,128,157
Feb 01 13:32:16 jayofelony bettercap-launcher[923]: [13:32:16] [sys.log] [dbg] wifi new frequencies: [2422 2462 5180 5220 5240 5260 5280 5300 5320 5500 5540 5560 5600 5640 5785]
Feb 01 13:32:16 jayofelony bettercap-launcher[923]: [13:32:16] [sys.log] [dbg] wifi hop changed
Feb 01 13:32:24 jayofelony bettercap-launcher[923]: [13:32:24] [sys.log] [dbg] wifi setting hopping channels to 3
Feb 01 13:32:24 jayofelony bettercap-launcher[923]: [13:32:24] [sys.log] [dbg] wifi new frequencies: [2422]
Feb 01 13:32:24 jayofelony bettercap-launcher[923]: [13:32:24] [sys.log] [dbg] wifi hop changed
Feb 01 13:32:25 jayofelony bettercap-launcher[923]: [13:32:25] [sys.log] [inf] wifi sending association request to AP <hidden> (channel:3 encryption:WPA2)
Feb 01 13:32:25 jayofelony bettercap-launcher[923]: [13:32:25] [sys.log] [inf] wifi sending association request to AP <hidden> (channel:3 encryption:WPA2)
Feb 01 13:32:25 jayofelony bettercap-launcher[923]: [13:32:25] [sys.log] [inf] wifi sending association request to AP <hidden> (channel:3 encryption:WPA2)
Feb 01 13:32:44 jayofelony bettercap-launcher[923]: [13:32:44] [sys.log] [dbg] wifi setting hopping channels to 11
Feb 01 13:32:44 jayofelony bettercap-launcher[923]: [13:32:44] [sys.log] [dbg] wifi new frequencies: [2462]
Feb 01 13:32:44 jayofelony bettercap-launcher[923]: [13:32:44] [sys.log] [dbg] wifi hop changed
Feb 01 13:32:44 jayofelony bettercap-launcher[923]: [13:32:44] [sys.log] [inf] wifi sending association request to AP Ziggo (channel:11 encryption:WPA2)
Feb 01 13:32:44 jayofelony bettercap-launcher[923]: [13:32:44] [sys.log] [inf] wifi sending association request to AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:45 jayofelony bettercap-launcher[923]: [13:32:45] [sys.log] [inf] wifi deauthing client 8c:5a:25:58:1a:cf (ARRIS Group, Inc.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:47 jayofelony bettercap-launcher[923]: [13:32:47] [sys.log] [inf] wifi deauthing client d0:ba:e4:8b:0d:94 (Shanghai MXCHIP Information Technology Co., Ltd.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:49 jayofelony bettercap-launcher[923]: [13:32:49] [sys.log] [inf] wifi deauthing client d2:ac:32:45:e5:1b from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:51 jayofelony bettercap-launcher[923]: [13:32:51] [sys.log] [inf] wifi deauthing client 70:f1:1c:48:fd:af (Shenzhen Ogemray Technology Co.,Ltd) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 13:32:51 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
jlinktu commented 5 months ago

Please load the brcmfmac.ko kernel module with the following parameter debug=0x100006 to create more verbose logging.

jayofelony commented 5 months ago

How do I do that exactly? sudo modprobe brcmfmac debug=0x100006?

jlinktu commented 5 months ago

Add debug=0x100006 at the end of this line and run make install-firmware again.

Or if you want to do it manually (assuming you've already build brcmfmac.ko):

sudo rmmod brcmfmac
sudo modprobe brcmutil
sudo insmod $NEXMON_ROOT/patches/driver/brcmfmac_$(uname -r | cut -d'.' -f1,2).y-nexmon/brcmfmac.ko debug=0x100006
jayofelony commented 5 months ago

I don't know if this is the more verbose debug you expected:

Feb 01 15:24:59 jayofelony bettercap-launcher[942]: [15:24:59] [sys.log] [inf] wifi wifi.ap.ttl set to 384
Feb 01 15:24:59 jayofelony bettercap-launcher[942]: [15:24:59] [sys.log] [inf] wifi wifi.sta.ttl set to 282
Feb 01 15:24:59 jayofelony bettercap-launcher[942]: [15:24:59] [sys.log] [inf] wifi wifi.rssi.min set to -123
Feb 01 15:25:00 jayofelony bettercap-launcher[942]: [15:25:00] [sys.log] [dbg] wifi setting hopping channels to 6,7,8,11,36,40,48,56,60,100,104,116,128,136,140
Feb 01 15:25:00 jayofelony bettercap-launcher[942]: [15:25:00] [sys.log] [dbg] wifi new frequencies: [2437 2442 2447 2462 5180 5200 5240 5280 5300 5500 5520 5580 5640 5680 5700]
Feb 01 15:25:00 jayofelony bettercap-launcher[942]: [15:25:00] [sys.log] [dbg] wifi hop changed
Feb 01 15:25:58 jayofelony bettercap-launcher[942]: [15:25:58] [sys.log] [dbg] wifi setting hopping channels to 11
Feb 01 15:25:58 jayofelony bettercap-launcher[942]: [15:25:58] [sys.log] [dbg] wifi new frequencies: [2462]
Feb 01 15:25:58 jayofelony bettercap-launcher[942]: [15:25:58] [sys.log] [dbg] wifi hop changed
Feb 01 15:25:58 jayofelony bettercap-launcher[942]: [15:25:58] [sys.log] [inf] wifi sending association request to AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 15:25:58 jayofelony bettercap-launcher[942]: [15:25:58] [sys.log] [inf] wifi deauthing client 70:f1:1c:48:fd:af (Shenzhen Ogemray Technology Co.,Ltd) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 15:26:00 jayofelony bettercap-launcher[942]: [15:26:00] [sys.log] [inf] wifi deauthing client d2:ac:32:45:e5:1b from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 15:26:02 jayofelony bettercap-launcher[942]: [15:26:02] [sys.log] [dbg] wifi got frame 1/4 of the 54:67:51:b9:0c:a6 <-> 70:f1:1c:48:fd:af handshake (without PMKID) (anonce:aa936907973b2bc6523844d7f6ca14acb7e2491dcdfccd1ab0e52c9e3ec2e349)
Feb 01 15:26:02 jayofelony bettercap-launcher[942]: [15:26:02] [sys.log] [dbg] wifi adding beacon frame to handshake for 54:67:51:b9:0c:a6
Feb 01 15:26:02 jayofelony bettercap-launcher[942]: [15:26:02] [sys.log] [dbg] wifi got frame 2/4 of the 54:67:51:b9:0c:a6 <-> 70:f1:1c:48:fd:af handshake (snonce:87b8d296e9f6b279fa3212adb79925842bb1ca9f0ee446354f9b10e3a1e924ab mic:ebe63a09ded852714d67c795f3e2251b)
Feb 01 15:26:02 jayofelony bettercap-launcher[942]: [15:26:02] [sys.log] [dbg] wifi got frame 3/4 of the 54:67:51:b9:0c:a6 <-> 70:f1:1c:48:fd:af handshake (mic:dcb0c4daaa701ced9555088c00dc1591)
Feb 01 15:26:02 jayofelony bettercap-launcher[942]: [15:26:02] [sys.log] [inf] wifi deauthing client d0:ba:e4:8b:0d:94 (Shanghai MXCHIP Information Technology Co., Ltd.) from AP Ziggo6611EA8 (channel:11 encryption:WPA2)
Feb 01 15:26:03 jayofelony kernel: ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
Feb 01 15:26:03 jayofelony kernel: ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do.
Feb 01 15:26:03 jayofelony kernel: ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
Feb 01 15:26:03 jayofelony kernel: device wlan0mon left promiscuous mode
Feb 01 15:26:03 jayofelony bettercap-launcher[942]: [15:26:03] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 15:26:03 jayofelony bettercap-launcher[942]: [15:26:03] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 15:26:03 jayofelony bettercap-launcher[942]: [15:26:03] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 15:26:03 jayofelony NetworkManager[670]: <info>  [1706797563.6724] device (wlan0): state change: unavailable -> unmanaged (reason 'removed', sys-iface-state: 'removed')
Feb 01 15:26:03 jayofelony bettercap-launcher[942]: [15:26:03] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 15:26:03 jayofelony systemd[1]: Starting systemd-rfkill.service - Load/Save RF Kill Switch Status...
Feb 01 15:26:03 jayofelony NetworkManager[670]: <info>  [1706797563.7313] radio killswitch /sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1/ieee80211/phy0/rfkill1 disappeared
Feb 01 15:26:03 jayofelony systemd[1]: Started systemd-rfkill.service - Load/Save RF Kill Switch Status.
Feb 01 15:26:03 jayofelony kernel: mmc1: card 0001 removed
Feb 01 15:26:03 jayofelony kernel: mmc1: new high speed SDIO card at address 0001
Feb 01 15:26:03 jayofelony kernel: brcmfmac: F1 signature read @0x18000000=0x15264345
Feb 01 15:26:03 jayofelony kernel: brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
Feb 01 15:26:04 jayofelony kernel: brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
Feb 01 15:26:04 jayofelony kernel: brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Feb  1 2024 15:11:25 version 7.45.206 (nexmon.org: 2.2.2-465-gd2182-dirty-5) FWID 01-88ee44ea
Feb 01 15:26:04 jayofelony NetworkManager[670]: <info>  [1706797564.2022] rfkill2: found Wi-Fi radio killswitch (at /sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1/ieee80211/phy1/rfkill2) (driver brcmfmac)
Feb 01 15:26:04 jayofelony NetworkManager[670]: <info>  [1706797564.2246] device (wlan0): driver supports Access Point (AP) mode
Feb 01 15:26:04 jayofelony NetworkManager[670]: <info>  [1706797564.2258] manager: (wlan0): new 802.11 Wi-Fi device (/org/freedesktop/NetworkManager/Devices/5)
Feb 01 15:26:04 jayofelony NetworkManager[670]: <info>  [1706797564.2809] device (wlan0): state change: unmanaged -> unavailable (reason 'managed', sys-iface-state: 'external')
Feb 01 15:26:04 jayofelony systemd[1]: Found device sys-subsystem-net-devices-wlan0.device - /sys/subsystem/net/devices/wlan0.
Feb 01 15:26:04 jayofelony systemd[1]: Started ifup@wlan0.service - ifup for wlan0.
Feb 01 15:26:04 jayofelony kernel: brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
Feb 01 15:26:04 jayofelony sh[3875]: ifup: missing required variable: address
Feb 01 15:26:04 jayofelony sh[3875]: ifup: missing required configuration variables for interface wlan0/inet
Feb 01 15:26:04 jayofelony sh[3875]: ifup: failed to bring up wlan0
Feb 01 15:26:04 jayofelony systemd[1]: ifup@wlan0.service: Main process exited, code=exited, status=1/FAILURE
Feb 01 15:26:04 jayofelony systemd[1]: ifup@wlan0.service: Failed with result 'exit-code'.
Feb 01 15:26:04 jayofelony NetworkManager[670]: <info>  [1706797564.8549] device (wlan0): set-hw-addr: set MAC address to B2:52:02:E7:9A:86 (scanning)
Feb 01 15:26:04 jayofelony bettercap-launcher[942]: [15:26:04] [sys.log] [inf] wifi sending association request to AP Ziggo (channel:11 encryption:WPA2)
Feb 01 15:26:04 jayofelony bettercap-launcher[942]: [15:26:04] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 15:26:04 jayofelony kernel: brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
Feb 01 15:26:04 jayofelony bettercap-launcher[942]: [15:26:04] [sys.log] [err] wifi could not inject WiFi packet: send: No such device or address
Feb 01 15:26:06 jayofelony bettercap-launcher[942]: [15:26:06] [sys.log] [dbg] wifi setting hopping channels to 6,7,8,11,36,40,48,56,60,100,104,116,128,136,140
Feb 01 15:26:06 jayofelony bettercap-launcher[942]: [15:26:06] [sys.log] [dbg] wifi new frequencies: [2437 2442 2447 2462 5180 5200 5240 5280 5300 5500 5520 5580 5640 5680 5700]
Feb 01 15:26:06 jayofelony bettercap-launcher[942]: [15:26:06] [sys.log] [dbg] wifi hop changed
Feb 01 15:26:06 jayofelony bettercap-launcher[942]: [15:26:06] [sys.log] [war] wifi error while hopping to channel 6: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:06 jayofelony ModemManager[690]: <info>  [base-manager] couldn't check support for device '/sys/devices/platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1': not supported by any plugin
Feb 01 15:26:06 jayofelony bettercap-launcher[942]: [15:26:06] [sys.log] [war] wifi error while hopping to channel 7: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:07 jayofelony bettercap-launcher[942]: [15:26:07] [sys.log] [war] wifi error while hopping to channel 8: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:07 jayofelony NetworkManager[670]: <error> [1706797567.8601] device (wlan0): Couldn't initialize supplicant interface: Failed to D-Bus activate wpa_supplicant service
Feb 01 15:26:08 jayofelony bettercap-launcher[942]: [15:26:08] [sys.log] [war] wifi error while hopping to channel 36: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:08 jayofelony bettercap-launcher[942]: [15:26:08] [sys.log] [war] wifi error while hopping to channel 40: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:09 jayofelony systemd[1]: systemd-rfkill.service: Deactivated successfully.
Feb 01 15:26:09 jayofelony bettercap-launcher[942]: [15:26:09] [sys.log] [war] wifi error while hopping to channel 48: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:09 jayofelony bettercap-launcher[942]: [15:26:09] [sys.log] [war] wifi error while hopping to channel 56: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:10 jayofelony bettercap-launcher[942]: [15:26:10] [sys.log] [war] wifi error while hopping to channel 60: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:11 jayofelony bettercap-launcher[942]: [15:26:11] [sys.log] [war] wifi error while hopping to channel 100: iw: out=command failed: No such device (-19) err=exit status 237
Feb 01 15:26:11 jayofelony bettercap-launcher[942]: [15:26:11] [sys.log] [war] wifi error while hopping to channel 104: iw: out=command failed: No such device (-19) err=exit status 237
jlinktu commented 5 months ago

Please provide the related output of dmesg instead.

jayofelony commented 5 months ago 
sudo dmesg | grep brcm
[    1.213523] irq_brcmstb_l2: registered L2 intc (/soc/interrupt-controller@7ef00100, parent irq: 27)
[    1.223708] brcm-pcie fd500000.pcie: host bridge /scb/pcie@7d500000 ranges:
[    1.223766] brcm-pcie fd500000.pcie:   No bus range found for /scb/pcie@7d500000, using [bus 00-ff]
[    1.223855] brcm-pcie fd500000.pcie:      MEM 0x0600000000..0x063fffffff -> 0x00c0000000
[    1.223946] brcm-pcie fd500000.pcie:   IB MEM 0x0000000000..0x00bfffffff -> 0x0400000000
[    1.224496] brcm-pcie fd500000.pcie: setting SCB_ACCESS_EN, READ_UR_MODE, MAX_BURST_SIZE
[    1.224928] brcm-pcie fd500000.pcie: PCI host bridge to bus 0000:00
[    1.336228] brcm-pcie fd500000.pcie: link up, 5.0 GT/s PCIe x1 (SSC)
[    1.339481] brcm-pcie fd500000.pcie: clkreq control enabled
[    2.512869] brcmstb-i2c fef04500.i2c:  @97500hz registered in polling mode
[    2.529003] brcmstb-i2c fef09500.i2c:  @97500hz registered in polling mode
[    7.683333] brcmfmac: loading out-of-tree module taints kernel.
[    7.952135] brcmfmac: F1 signature read @0x18000000=0x15264345
[    8.070178] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[    8.071027] usbcore: registered new interface driver brcmfmac
[    8.132171] Bluetooth: hci0: BCM4345C0 'brcm/BCM4345C0.raspberrypi,4-model-b.hcd' Patch
[    8.494027] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[    8.504246] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Feb  1 2024 15:11:25 version 7.45.206 (nexmon.org: 2.2.2-465-gd2182-dirty-5) FWID 01-88ee44ea
[   11.276308] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[   12.162607] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[   14.296486] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save disabled
[   14.324592] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface...
[   14.324614] brcmfmac: brcmf_mon_add_vif: brcmf_mon_add_vif called
[   14.324618] brcmfmac: brcmf_mon_add_vif: Adding vif "wlan0mon"
[  724.993874] ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed
[  725.092130] ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do.
[  725.092157] ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
[  725.301499] brcmfmac: F1 signature read @0x18000000=0x15264345
[  725.305485] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[  725.633166] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[  725.636488] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Feb  1 2024 15:11:25 version 7.45.206 (nexmon.org: 2.2.2-465-gd2182-dirty-5) FWID 01-88ee44ea
[  725.758595] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
[  726.303989] brcmfmac: brcmf_cfg80211_set_power_mgmt: power save enabled
jlinktu commented 5 months ago

Check if debug output is set with sudo cat /sys/module/brcmfmac/parameters/debug, I would have expected more output.

jayofelony commented 5 months ago

Doesnt seem like it

sudo cat /sys/module/brcmfmac/parameters/debug 0

jayofelony commented 5 months ago

image

jlinktu commented 5 months ago

Any error or warning when you ran make install-firmware with this modification?

jayofelony commented 5 months ago

None image

jlinktu commented 5 months ago

Let's try to add even more output with: debug=0x120406 And check in a second window the live output with dmesg -w (start before make install-firmware) to see if the output level is increased up to when the firmware crashes the first time.

jayofelony commented 5 months ago

yeah thats working, ill run depmod -a and reboot and let it run until crash okay?

jlinktu commented 5 months ago

When you reboot, the non-nexmon kernel module will be loaded and the debug parameter will also be discarded. Thus, you will need to run make install-firmware again.

jayofelony commented 5 months ago

okay its running, itll be about 5-10 minutes

jlinktu commented 5 months ago

No crash as far as I can see.

jayofelony commented 5 months ago

no, my bad. service for scanning wasnt runing LOL

jayofelony commented 5 months ago 
[ 2434.724141] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2434.724145] brcmfmac: brcmf_sdio_clkctl Enter
[ 2434.724149] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2434.724153] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2434.724158] brcmfmac: brcmf_sdio_readframes Enter
[ 2434.724167] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[ 2434.724201] brcmfmac: brcmf_sdio_read_control Enter
[ 2434.724225] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[ 2434.724235] brcmfmac: brcmf_configure_arp_nd_offload successfully configured (1) ARP offload to 0x9
[ 2434.724243] brcmfmac: brcmf_sdio_bus_txctl Enter
[ 2434.724272] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[ 2434.724311] brcmfmac: brcmf_sdio_dpc Enter
[ 2434.724319] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2434.724320] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[ 2434.724323] brcmfmac: brcmf_sdio_clkctl Enter
[ 2434.724326] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2434.724327] brcmfmac: brcmf_sdio_bus_rxctl Enter
[ 2434.724330] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2434.724528] brcmfmac: brcmf_sdio_isr Enter
[ 2434.724631] brcmfmac: brcmf_sdio_dpc Enter
[ 2434.724642] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2434.724647] brcmfmac: brcmf_sdio_clkctl Enter
[ 2434.724652] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2434.724655] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2434.724662] brcmfmac: brcmf_sdio_readframes Enter
[ 2434.724674] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[ 2434.724713] brcmfmac: brcmf_sdio_read_control Enter
[ 2434.724750] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[ 2434.724772] brcmfmac: brcmf_configure_arp_nd_offload successfully configured (1) ND offload to 0x9
[ 2434.737442] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2434.737457] brcmfmac: brcmf_sdio_clkctl Enter
[ 2434.737462] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2434.737466] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2434.737538] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[ 2434.737583] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x000056b4 in window 0x00258000
[ 2434.737754] brcmfmac: CONSOLE: 000000.890 wl0: unable to find iovar "toe_ol"
[ 2434.737760] brcmfmac: CONSOLE: 000000.890 wl0: wlc_iovar_op: toe_ol BCME -23 (Unsupported)
[ 2434.753434] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2434.753449] brcmfmac: brcmf_sdio_clkctl Enter
[ 2434.753453] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2434.753458] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2434.753467] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[ 2434.753523] brcmfmac: brcmf_sdio_bus_watchdog idle
[ 2434.753531] brcmfmac: brcmf_sdio_bus_sleep Enter: request SLEEP currently WAKE
[ 2434.753535] brcmfmac: brcmf_sdio_clkctl Enter
[ 2434.753539] brcmfmac: brcmf_sdio_htclk Enter
[ 2434.753562] brcmfmac: brcmf_sdio_htclk CLKCTL: turned OFF
[ 2434.753567] brcmfmac: brcmf_sdio_sdclk Enter
[ 2434.753570] brcmfmac: brcmf_sdio_clkctl 3 -> 0
[ 2434.753574] brcmfmac: brcmf_sdio_bus_sleep new state SLEEP
[ 2434.753578] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
jayofelony commented 5 months ago

image some more errors/warnings

jayofelony commented 5 months ago

The actual message of the crash found

[ 2433.353690] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2433.353701] brcmfmac: brcmf_sdio_clkctl Enter
[ 2433.353712] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2433.353723] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2433.364211] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.364237] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000bfcf0a34 len 38
[ 2433.364249] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 65
[ 2433.364284] brcmfmac: brcmf_sdio_dpc Enter
[ 2433.364313] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2433.364324] brcmfmac: brcmf_sdio_clkctl Enter
[ 2433.364336] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2433.364345] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2433.369988] brcmfmac: brcmf_sdio_isr Enter
[ 2433.370111] brcmfmac: brcmf_sdio_dpc Enter
[ 2433.370133] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2433.370145] brcmfmac: brcmf_sdio_clkctl Enter
[ 2433.370158] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2433.370167] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2433.370178] brcmfmac: brcmf_sdio_hostmail Enter
[ 2433.370278] brcmfmac: brcmf_sdio_hostmail mailbox indicates firmware halted
[ 2433.370294] ieee80211 phy1: brcmf_fw_crashed: Firmware has halted or crashed
[ 2433.370887] brcmfmac: brcmf_sdio_bus_get_memdump dump at 0x00198000: size=819200
[ 2433.371016] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00198000
[ 2433.371252] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00198000
[ 2433.371459] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00198000
[ 2433.371665] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00198000
[ 2433.371870] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00198000
[ 2433.372076] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00198000
[ 2433.372280] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00198000
[ 2433.372485] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00198000
[ 2433.372690] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00198000
[ 2433.372894] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00198000
[ 2433.373099] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00198000
[ 2433.373304] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00198000
[ 2433.373524] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00198000
[ 2433.373748] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00198000
[ 2433.373971] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00198000
[ 2433.374190] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00198000
[ 2433.374548] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001a0000
[ 2433.374780] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001a0000
[ 2433.375019] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001a0000
[ 2433.375234] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001a0000
[ 2433.375370] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.375405] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000e6e66245 len 38
[ 2433.375420] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 66
[ 2433.375471] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001a0000
[ 2433.375690] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001a0000
[ 2433.375915] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001a0000
[ 2433.376142] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001a0000
[ 2433.376364] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001a0000
[ 2433.376583] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001a0000
[ 2433.376821] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001a0000
[ 2433.377046] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001a0000
[ 2433.377270] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001a0000
[ 2433.377463] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001a0000
[ 2433.377629] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001a0000
[ 2433.377791] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001a0000
[ 2433.377995] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001a8000
[ 2433.378154] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001a8000
[ 2433.378313] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001a8000
[ 2433.378469] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001a8000
[ 2433.378629] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001a8000
[ 2433.378788] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001a8000
[ 2433.378946] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001a8000
[ 2433.379103] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001a8000
[ 2433.379261] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001a8000
[ 2433.379418] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001a8000
[ 2433.379575] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001a8000
[ 2433.379732] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001a8000
[ 2433.379889] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001a8000
[ 2433.380046] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001a8000
[ 2433.380203] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001a8000
[ 2433.380360] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001a8000
[ 2433.380561] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001b0000
[ 2433.380717] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001b0000
[ 2433.380874] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001b0000
[ 2433.381030] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001b0000
[ 2433.381186] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001b0000
[ 2433.381349] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001b0000
[ 2433.381511] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001b0000
[ 2433.381671] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001b0000
[ 2433.381829] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001b0000
[ 2433.381987] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001b0000
[ 2433.382145] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001b0000
[ 2433.382301] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001b0000
[ 2433.382461] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001b0000
[ 2433.382617] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001b0000
[ 2433.382771] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001b0000
[ 2433.382925] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001b0000
[ 2433.383123] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001b8000
[ 2433.383277] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001b8000
[ 2433.383434] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001b8000
[ 2433.383594] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001b8000
[ 2433.383755] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001b8000
[ 2433.383909] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001b8000
[ 2433.384063] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001b8000
[ 2433.384218] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001b8000
[ 2433.384373] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001b8000
[ 2433.384526] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001b8000
[ 2433.384680] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001b8000
[ 2433.384833] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001b8000
[ 2433.384987] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001b8000
[ 2433.385140] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001b8000
[ 2433.385293] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001b8000
[ 2433.385454] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001b8000
[ 2433.385672] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001c0000
[ 2433.385839] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001c0000
[ 2433.386012] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001c0000
[ 2433.386182] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001c0000
[ 2433.386351] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001c0000
[ 2433.386387] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.386401] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000005a4e5ac9 len 38
[ 2433.386407] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 67
[ 2433.386519] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001c0000
[ 2433.386681] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001c0000
[ 2433.386840] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001c0000
[ 2433.386998] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001c0000
[ 2433.387159] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001c0000
[ 2433.387318] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001c0000
[ 2433.387475] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001c0000
[ 2433.387633] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001c0000
[ 2433.387790] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001c0000
[ 2433.387948] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001c0000
[ 2433.388104] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001c0000
[ 2433.388308] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001c8000
[ 2433.388466] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001c8000
[ 2433.388623] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001c8000
[ 2433.388780] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001c8000
[ 2433.388937] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001c8000
[ 2433.389095] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001c8000
[ 2433.389251] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001c8000
[ 2433.389426] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001c8000
[ 2433.389589] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001c8000
[ 2433.389751] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001c8000
[ 2433.389912] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001c8000
[ 2433.390068] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001c8000
[ 2433.390225] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001c8000
[ 2433.390386] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001c8000
[ 2433.390542] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001c8000
[ 2433.390695] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001c8000
[ 2433.390898] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001d0000
[ 2433.391057] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001d0000
[ 2433.391214] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001d0000
[ 2433.391368] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001d0000
[ 2433.391521] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001d0000
[ 2433.391687] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001d0000
[ 2433.391840] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001d0000
[ 2433.391993] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001d0000
[ 2433.392146] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001d0000
[ 2433.392299] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001d0000
[ 2433.392452] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001d0000
[ 2433.392605] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001d0000
[ 2433.392757] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001d0000
[ 2433.392910] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001d0000
[ 2433.393063] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001d0000
[ 2433.393216] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001d0000
[ 2433.393427] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001d8000
[ 2433.393588] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001d8000
[ 2433.393747] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001d8000
[ 2433.393909] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001d8000
[ 2433.394067] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001d8000
[ 2433.394230] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001d8000
[ 2433.394390] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001d8000
[ 2433.394545] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001d8000
[ 2433.394699] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001d8000
[ 2433.394854] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001d8000
[ 2433.395010] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001d8000
[ 2433.395163] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001d8000
[ 2433.395317] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001d8000
[ 2433.395470] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001d8000
[ 2433.395626] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001d8000
[ 2433.395783] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001d8000
[ 2433.395989] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001e0000
[ 2433.396146] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001e0000
[ 2433.396300] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001e0000
[ 2433.396454] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001e0000
[ 2433.396616] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001e0000
[ 2433.396712] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.396723] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000005788696a len 38
[ 2433.396730] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 68
[ 2433.396775] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001e0000
[ 2433.396931] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001e0000
[ 2433.397087] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001e0000
[ 2433.397240] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001e0000
[ 2433.397416] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001e0000
[ 2433.397579] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001e0000
[ 2433.397739] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001e0000
[ 2433.397904] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001e0000
[ 2433.398069] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001e0000
[ 2433.398228] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001e0000
[ 2433.398394] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001e0000
[ 2433.398602] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001e8000
[ 2433.398759] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001e8000
[ 2433.398913] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001e8000
[ 2433.399068] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001e8000
[ 2433.399222] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001e8000
[ 2433.399375] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001e8000
[ 2433.399530] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001e8000
[ 2433.399686] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001e8000
[ 2433.399840] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001e8000
[ 2433.399994] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001e8000
[ 2433.400148] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001e8000
[ 2433.400302] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001e8000
[ 2433.400456] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001e8000
[ 2433.400610] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001e8000
[ 2433.400763] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001e8000
[ 2433.400917] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001e8000
[ 2433.401113] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001f0000
[ 2433.401267] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001f0000
[ 2433.401450] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001f0000
[ 2433.401704] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001f0000
[ 2433.401873] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001f0000
[ 2433.402037] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001f0000
[ 2433.402204] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001f0000
[ 2433.402377] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001f0000
[ 2433.402538] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001f0000
[ 2433.402692] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001f0000
[ 2433.402847] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001f0000
[ 2433.403001] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001f0000
[ 2433.403156] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001f0000
[ 2433.403312] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001f0000
[ 2433.403466] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001f0000
[ 2433.403620] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001f0000
[ 2433.403819] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001f8000
[ 2433.403973] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001f8000
[ 2433.404126] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001f8000
[ 2433.404280] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001f8000
[ 2433.404435] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001f8000
[ 2433.404588] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001f8000
[ 2433.404742] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001f8000
[ 2433.404895] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001f8000
[ 2433.405048] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001f8000
[ 2433.405201] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001f8000
[ 2433.405354] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001f8000
[ 2433.405513] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001f8000
[ 2433.405689] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001f8000
[ 2433.405856] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001f8000
[ 2433.406022] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001f8000
[ 2433.406185] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001f8000
[ 2433.406398] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00200000
[ 2433.406561] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00200000
[ 2433.406719] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00200000
[ 2433.406877] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00200000
[ 2433.407010] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.407023] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000000f818827 len 38
[ 2433.407029] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 69
[ 2433.407043] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00200000
[ 2433.407203] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00200000
[ 2433.407358] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00200000
[ 2433.407513] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00200000
[ 2433.407669] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00200000
[ 2433.407823] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00200000
[ 2433.407976] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00200000
[ 2433.408130] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00200000
[ 2433.408284] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00200000
[ 2433.408438] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00200000
[ 2433.408592] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00200000
[ 2433.408745] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00200000
[ 2433.408943] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00208000
[ 2433.409096] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00208000
[ 2433.409250] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00208000
[ 2433.409414] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00208000
[ 2433.409576] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00208000
[ 2433.409738] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00208000
[ 2433.409903] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00208000
[ 2433.410066] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00208000
[ 2433.410229] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00208000
[ 2433.410393] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00208000
[ 2433.410555] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00208000
[ 2433.410718] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00208000
[ 2433.410874] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00208000
[ 2433.411027] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00208000
[ 2433.411187] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00208000
[ 2433.411340] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00208000
[ 2433.411536] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00210000
[ 2433.411690] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00210000
[ 2433.411844] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00210000
[ 2433.411997] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00210000
[ 2433.412151] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00210000
[ 2433.412304] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00210000
[ 2433.412458] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00210000
[ 2433.412611] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00210000
[ 2433.412765] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00210000
[ 2433.412918] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00210000
[ 2433.413071] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00210000
[ 2433.413224] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00210000
[ 2433.413377] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00210000
[ 2433.413560] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00210000
[ 2433.413722] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00210000
[ 2433.413886] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00210000
[ 2433.414095] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00218000
[ 2433.414259] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00218000
[ 2433.414423] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00218000
[ 2433.414586] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00218000
[ 2433.414743] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00218000
[ 2433.414897] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00218000
[ 2433.415050] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00218000
[ 2433.415204] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00218000
[ 2433.415357] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00218000
[ 2433.415514] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00218000
[ 2433.415667] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00218000
[ 2433.415820] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00218000
[ 2433.415973] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00218000
[ 2433.416126] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00218000
[ 2433.416281] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00218000
[ 2433.416438] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00218000
[ 2433.416635] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00220000
[ 2433.416788] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00220000
[ 2433.416941] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00220000
[ 2433.417099] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00220000
[ 2433.417255] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00220000
[ 2433.417339] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.417350] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000003675261d len 38
[ 2433.417356] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 70
[ 2433.417423] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00220000
[ 2433.417584] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00220000
[ 2433.417748] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00220000
[ 2433.417910] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00220000
[ 2433.418081] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00220000
[ 2433.418241] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00220000
[ 2433.418401] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00220000
[ 2433.418567] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00220000
[ 2433.418732] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00220000
[ 2433.418892] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00220000
[ 2433.419049] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00220000
[ 2433.419247] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00228000
[ 2433.419401] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00228000
[ 2433.419570] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00228000
[ 2433.419726] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00228000
[ 2433.419881] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00228000
[ 2433.420034] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00228000
[ 2433.420189] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00228000
[ 2433.420342] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00228000
[ 2433.420495] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00228000
[ 2433.420648] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00228000
[ 2433.420801] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00228000
[ 2433.420954] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00228000
[ 2433.421109] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00228000
[ 2433.421262] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00228000
[ 2433.421423] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00228000
[ 2433.421583] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00228000
[ 2433.421787] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00230000
[ 2433.421949] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00230000
[ 2433.422111] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00230000
[ 2433.422286] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00230000
[ 2433.422451] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00230000
[ 2433.422614] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00230000
[ 2433.422776] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00230000
[ 2433.422936] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00230000
[ 2433.423091] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00230000
[ 2433.423246] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00230000
[ 2433.423401] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00230000
[ 2433.423555] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00230000
[ 2433.423709] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00230000
[ 2433.423863] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00230000
[ 2433.424021] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00230000
[ 2433.424174] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00230000
[ 2433.424373] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00238000
[ 2433.424526] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00238000
[ 2433.424680] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00238000
[ 2433.424833] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00238000
[ 2433.424986] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00238000
[ 2433.425140] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00238000
[ 2433.425294] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00238000
[ 2433.425454] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00238000
[ 2433.425612] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00238000
[ 2433.425773] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00238000
[ 2433.425943] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00238000
[ 2433.426105] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00238000
[ 2433.426269] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00238000
[ 2433.426429] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00238000
[ 2433.426589] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00238000
[ 2433.426752] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00238000
[ 2433.426955] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00240000
[ 2433.427110] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00240000
[ 2433.427264] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00240000
[ 2433.427419] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00240000
[ 2433.427576] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00240000
[ 2433.427676] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.427689] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000fffb4408 len 38
[ 2433.427696] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 71
[ 2433.427734] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00240000
[ 2433.427893] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00240000
[ 2433.428048] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00240000
[ 2433.428203] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00240000
[ 2433.428358] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00240000
[ 2433.428512] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00240000
[ 2433.428666] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00240000
[ 2433.428820] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00240000
[ 2433.428974] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00240000
[ 2433.429127] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00240000
[ 2433.429281] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00240000
[ 2433.429483] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00248000
[ 2433.429645] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00248000
[ 2433.429806] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00248000
[ 2433.429970] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00248000
[ 2433.430130] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00248000
[ 2433.430292] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00248000
[ 2433.430451] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00248000
[ 2433.430614] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00248000
[ 2433.430775] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00248000
[ 2433.430931] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00248000
[ 2433.431084] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00248000
[ 2433.431237] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00248000
[ 2433.431390] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00248000
[ 2433.431544] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00248000
[ 2433.431715] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00248000
[ 2433.431869] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00248000
[ 2433.432066] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00250000
[ 2433.432219] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00250000
[ 2433.432372] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00250000
[ 2433.432525] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00250000
[ 2433.432679] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00250000
[ 2433.432832] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00250000
[ 2433.432985] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00250000
[ 2433.433138] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00250000
[ 2433.433291] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00250000
[ 2433.433449] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00250000
[ 2433.433608] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00250000
[ 2433.433768] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00250000
[ 2433.433933] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00250000
[ 2433.434094] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00250000
[ 2433.434254] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00250000
[ 2433.434416] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00250000
[ 2433.434622] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00258000
[ 2433.434778] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00258000
[ 2433.434933] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00258000
[ 2433.435086] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00258000
[ 2433.435239] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00258000
[ 2433.435394] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00258000
[ 2433.435547] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00258000
[ 2433.435701] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00258000
[ 2433.435854] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00258000
[ 2433.436007] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00258000
[ 2433.436160] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00258000
[ 2433.436313] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00258000
[ 2433.436467] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00258000
[ 2433.436621] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00258000
[ 2433.436774] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00258000
[ 2433.436930] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00258000
[ 2433.437167] brcmfmac: brcmf_sdio_hostmail Dongle ready, protocol version 4
[ 2433.437176] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2433.437181] brcmfmac: brcmf_sdio_clkctl Enter
[ 2433.437185] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2433.437189] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2433.437196] brcmfmac: brcmf_sdiod_ramrw read 4 bytes at offset 0x00007ffc in window 0x00258000
[ 2433.437218] brcmfmac: brcmf_sdio_bus_reset Enter
[ 2433.437222] brcmfmac: brcmf_sdiod_intr_unregister Entering oob=0 sd=1
[ 2433.437236] brcmfmac: brcmf_sdio_readshared sdpcm_shared address 0x00204660
[ 2433.437289] brcmfmac: brcmf_sdiod_ramrw read 64 bytes at offset 0x00004660 in window 0x00200000
[ 2433.437336] brcmfmac: brcmf_sdio_dpc Enter
[ 2433.437345] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2433.437349] brcmfmac: brcmf_sdio_clkctl Enter
[ 2433.437353] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2433.437356] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2433.437707] brcmfmac: brcmf_sdio_remove Enter
[ 2433.438871] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[ 2433.438885] brcmfmac: brcmf_sdio_clkctl Enter
[ 2433.438890] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[ 2433.438894] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[ 2433.438932] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.438946] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000005186a438 len 38
[ 2433.439010] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[ 2433.439055] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x000056b4 in window 0x00258000
[ 2433.439225] brcmfmac: CONSOLE: 002199.065 
[ 2433.439230] brcmfmac: CONSOLE: FWID 01-88ee44ea
[ 2433.439233] brcmfmac: CONSOLE: flags 1
[ 2433.439237] brcmfmac: CONSOLE: 002199.065 
[ 2433.439240] brcmfmac: CONSOLE: TRAP 4(25fd60): pc 1aabb0, lr 1aad23, sp 25fdb8, cpsr 2000019f, spsr 200001bf
[ 2433.439244] brcmfmac: CONSOLE: 002199.065   dfsr 1, dfar be23f281
[ 2433.439248] brcmfmac: CONSOLE: 002199.065   r0 2355ac, r1 2355ac, r2 25fe34, r3 0, r4 22bbbc, r5 ffff, r6 0
[ 2433.439252] brcmfmac: CONSOLE: 002199.065   r7 be23f199, r8 25089c, r9 1, r10 25a63c, r11 2508a0, r12 48
[ 2433.439256] brcmfmac: CONSOLE: 002199.066 
[ 2433.439259] brcmfmac: CONSOLE:    sp+0 00000001 00000001 002355ac 00242968
[ 2433.439263] brcmfmac: CONSOLE: 002199.066   sp+10 00000001 0025d4bc 00000002 0019b3b3
[ 2433.439267] brcmfmac: CONSOLE: 
[ 2433.439270] brcmfmac: CONSOLE: 002199.066 sp+1c 0019b3b3
[ 2433.439273] brcmfmac: CONSOLE: 002199.066 sp+34 0019b59d
[ 2433.439277] brcmfmac: CONSOLE: 002199.066 sp+58 001a0003
[ 2433.439280] brcmfmac: CONSOLE: 002199.066 sp+74 001a44c3
[ 2433.439284] brcmfmac: CONSOLE: 002199.066 sp+ac 00031d93
[ 2433.439287] brcmfmac: CONSOLE: 002199.066 sp+144 0019c9f5
[ 2433.439290] brcmfmac: CONSOLE: 002199.066 sp+174 0019ba61
[ 2433.439294] brcmfmac: CONSOLE: 002199.066 sp+18c 0019bc69
[ 2433.439297] brcmfmac: CONSOLE: 002199.066 sp+1a4 0019be91
[ 2433.439300] brcmfmac: CONSOLE: 002199.066 sp+1b4 0019c035
[ 2433.439304] brcmfmac: CONSOLE: 002199.066 sp+1bc 0019a5b9
[ 2433.439307] brcmfmac: CONSOLE: 002199.066 sp+1c4 0019ac89
[ 2433.439310] brcmfmac: CONSOLE: 002199.066 sp+1d4 00199d27
[ 2433.439314] brcmfmac: CONSOLE: 002199.066 sp+1e0 000001df
[ 2433.439317] brcmfmac: CONSOLE: 002199.066 sp+220 00008221
[ 2433.439321] brcmfmac: CONSOLE: 002199.066 sp+230 0019caf7
[ 2433.439349] brcmfmac: brcmf_sdiod_intr_unregister Entering oob=0 sd=0
[ 2433.439357] brcmfmac: brcmf_detach Enter
[ 2433.449128] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34)
[ 2433.449155] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000d1d8a41e len 38
[ 2433.457414] brcmfmac: brcmf_bus_change_state 1 -> 0
[ 2433.457431] brcmfmac: brcmf_remove_interface Enter, bsscfgidx=2, ifidx=1
[ 2433.457436] brcmfmac: brcmf_del_if Enter, bsscfgidx=2, ifidx=1
[ 2433.457635] brcmfmac: brcmf_net_mon_stop Enter
[ 2433.457645] ieee80211 phy1: brcmf_fil_cmd_data: bus is down. we have nothing to do.
[ 2433.457651] ieee80211 phy1: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
[ 2433.458038] device wlan0mon left promiscuous mode
[ 2433.458289] brcmfmac: brcmf_cfg80211_get_tx_power Enter
[ 2433.458295] brcmfmac: check_vif_up device is not ready : status (0)
[ 2433.497431] brcmfmac: brcmf_remove_interface Enter, bsscfgidx=0, ifidx=0
[ 2433.497452] brcmfmac: brcmf_del_if Enter, bsscfgidx=0, ifidx=0
DrSchottky commented 5 months ago

For what I've seen it fails here https://github.com/FlUxIuS/rt-ac86u_et/blob/master/release/src-rt-5.02hnd/bcmdrivers/broadcom/net/wl/impl51/4365/src/wl/sys/wlc_tx.c#L2892

jayofelony commented 5 months ago

I trust you experts in this know what you are talking about, I don't even know if it's a nexmon bug or something that my software is doing wrong. Heck, for all I know it's an issue in the original part of the firmware.

jlinktu commented 5 months ago

@DrSchottky already pointed out the correct location of where the crash occurs. Together with the error log, I can tell the following: The method in question fetches packets from a queue and tries to forward them to the transmit chain. Each of these packets have a station control block associated with them, and these station control blocks in turn have a BSS config associated. At the point of failure, register r7 is supposed to hold a pointer to such a BSS config of the packet that is currently processed. However, for some reason r7 holds a value that is a faulty address, and when it is accessed, the core crashes. The faulty address is be23f199, which is simply the four bytes located at address 0x10. That is because the value in r7 is taken from an offset of 0x10 from the pointer (station control block) in r6, but r6 holds the value 0. This value is taken from an offset of the pointer in r1, which is 2355ac. Thus, the problem seems to lie in an empty station control block pointer. I remember discussing that problem before and we had a patch that made the firmware to crash less likely, but couldn't fully fix it. Let me check tomorrow if I can find it.

jayofelony commented 5 months ago

@DrSchottky already pointed out the correct location of where the crash occurs. Together with the error log, I can tell the following: The method in question fetches packets from a queue and tries to forward them to the transmit chain. Each of these packets have a station control block associated with them, and these station control blocks in turn have a BSS config associated. At the point of failure, register r7 is supposed to hold a pointer to such a BSS config of the packet that is currently processed. However, for some reason r7 holds a value that is a faulty address, and when it is accessed, the core crashes. The faulty address is be23f199, which is simply the four bytes located at address 0x10. That is because the value in r7 is taken from an offset of 0x10 from the pointer (station control block) in r6, but r6 holds the value 0. This value is taken from an offset of the pointer in r1, which is 2355ac. Thus, the problem seems to lie in an empty station control block pointer. I remember discussing that problem before and we had a patch that made the firmware to crash less likely, but couldn't fully fix it. Let me check tomorrow if I can find it.

I am happy to test any patches you can think of!

jlinktu commented 5 months ago

Can you please replace src/sendframe.c in the nexmon patch directory with sendframe-patch-v1.zip (unzip it first), rerun make install-firmware. Then go ahead as usual and after some time, or even better, when you see that bettercap tried to transmit several deauth frames in a short time period, get the console output like this:

sudo -s cat /sys/kernel/debug/ieee80211/`iw dev wlan0 info | gawk '/wiphy/ {printf "phy" $2}'`/forensics; echo

Same if you experience a crash + then the dmesg output could be helpful again.

jayofelony commented 5 months ago

sudo -s cat /sys/kernel/debug/ieee80211/iw dev wlan0 info | gawk '/wiphy/ {printf "phy" $2}'/forensics; echo

000000.002 nvram_init: called again without calling nvram_exit()
000000.002 Decompressing ucode at 00222ed8 (len: 27927) at 0025a4d8
000000.141 Decompression res:0
000000.142 reclaim section 0: Returned 39392 bytes to the heap
000000.143 wlc_bmac_info_init: host_enab 0
000000.143 Overriding vendor id = 0x14e4
000000.143 Overriding device id = 0x43ab
000000.144 wlc_bmac_attach, deviceid 0x43ab nbands 2
000000.167 wl0: wlc_bmac_attach: chiprev 6 corerev 54 cccap 0x18680009 maccap 0xa0018305 band 2.4G, phy_type 11 phy_rev 20
000000.168 wl0: wlc_bmac_attach: chiprev 6 corerev 54 cccap 0x18680009 maccap 0xa0018305 band 5G, phy_type 11 phy_rev 20
000000.194 wl0: wlc_stf_txcore_shmem_write: No clock
000000.196 wl0: wlc_ampdu_tx_set: AGG Mode = MAC+AQM txmaxpkts 0 txmaxpkts_agg 1024
000000.201 wl0: wlc_channels_commit: no valid channel for "#n" nbands 2 bandlocked 0
000000.202 wl0: Broadcom BCM4345 802.11 Wireless Controller 7.45.206 (r725000 CY)
000000.202 TCAM: 256 used: 255 exceed:0
000000.203 reclaim section 1: Returned 122844 bytes to the heap
000000.203 reclaim section 4: Returned 44 bytes to the heap
000000.204 sdpcmd_dpc: Enable
000000.213 wl0: wlc_iovar_op: txbf BCME -23 (Unsupported)
000000.215 wl0: unable to find iovar "rsdb_mode"
000000.215 wl0: wlc_iovar_op: rsdb_mode BCME -23 (Unsupported)
000000.333 wl0: unable to find iovar "toe_ol"
000000.333 wl0: wlc_iovar_op: toe_ol BCME -23 (Unsupported)
000000.333 wl0: wl_open
000000.342 wl0: wlc_phy_set_regtbl_on_femctrl: FIXME bt_coex
000000.889 wl0: unable to find iovar "toe_ol"
000000.889 wl0: wlc_iovar_op: toe_ol BCME -23 (Unsupported)
000252.418 wl0: wlc_phy_set_regtbl_on_femctrl: FIXME bt_coex
000267.428 cca_stats_watchdog: Bad chanspec!!
000267.428 wl0: cca_stats watchdog handler error
000290.429 cca_stats_watchdog: Bad chanspec!!
000290.429 wl0: cca_stats watchdog handler error
000306.582 wl0: dma_rx: bad frame length (1678)
000380.438 cca_stats_watchdog: Bad chanspec!!
000380.438 wl0: cca_stats watchdog handler error

This is the log from right after these deauth frames on channel 11

14:07:32 [INFO] CHANNEL 11
14:07:32 [INFO] 2 access points on channel 11
14:07:32 [INFO] sending association frame to Ziggo6611EA8 (54:67:51:b9:0c:a6 Compal Broadband Networks, Inc.) on channel 11 [3 clients], -54 dBm...
14:07:33 [INFO] deauthing d0:ba:e4:8b:0d:94 (Shanghai MXCHIP Information Technology Co., Ltd.) from Ziggo6611EA8 (54:67:51:b9:0c:a6 Compal Broadband Networks, Inc.) on channel 11, -54 dBm ...
14:07:35 [INFO] deauthing d2:ac:32:45:e5:1b () from Ziggo6611EA8 (54:67:51:b9:0c:a6 Compal Broadband Networks, Inc.) on channel 11, -54 dBm ...
14:07:36 [INFO] deauthing 56:6b:b0:ee:97:e8 () from Ziggo6611EA8 (54:67:51:b9:0c:a6 Compal Broadband Networks, Inc.) on channel 11, -54 dBm ...
14:07:38 [INFO] sending association frame to Ziggo (56:67:11:b9:0c:a6 ) on channel 11 [0 clients], -54 dBm...
14:07:39 [INFO] waiting for 11s on channel 11 ...

No crash yet, I am waiting for that to happen. I will post with an extra log if that happens.

jayofelony commented 5 months ago

Crashlog:

[79828.576091] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.576096] brcmfmac: brcmf_sdio_clkctl Enter
[79828.576099] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.576103] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.576109] brcmfmac: brcmf_sdio_readframes Enter
[79828.576116] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.576148] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.576164] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.576204] brcmfmac: brcmf_sdio_dpc Enter
[79828.576225] brcmfmac: brcmf_sdio_isr Enter
[79828.576290] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.576295] brcmfmac: brcmf_sdio_clkctl Enter
[79828.576298] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.576302] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.576307] brcmfmac: brcmf_sdio_readframes Enter
[79828.576314] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.576346] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.576362] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.576395] brcmfmac: brcmf_sdio_dpc Enter
[79828.576402] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.576406] brcmfmac: brcmf_sdio_clkctl Enter
[79828.576409] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.576413] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.589248] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.589268] brcmfmac: brcmf_sdio_clkctl Enter
[79828.589273] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.589277] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.589352] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[79828.595611] brcmfmac: brcmf_sdio_isr Enter
[79828.595749] brcmfmac: brcmf_sdio_dpc Enter
[79828.595759] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.595764] brcmfmac: brcmf_sdio_clkctl Enter
[79828.595769] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.595773] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.595780] brcmfmac: brcmf_sdio_readframes Enter
[79828.595791] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.595832] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.595859] brcmfmac: brcmf_sdio_isr Enter
[79828.595927] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.595961] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.595971] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.596005] brcmfmac: brcmf_sdio_sendfromq Enter
[79828.596014] brcmfmac: brcmf_sdio_txpkt Enter
[79828.596023] brcmfmac: brcmf_sdiod_send_pkt addr = 0x18000000, size = 2
[79828.596101] brcmfmac: brcmf_sdio_dpc Enter
[79828.596110] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.596114] brcmfmac: brcmf_sdio_clkctl Enter
[79828.596117] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.596121] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.596126] brcmfmac: brcmf_sdio_readframes Enter
[79828.596133] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.609242] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.609263] brcmfmac: brcmf_sdio_clkctl Enter
[79828.609267] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.609271] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.609344] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[79828.620955] brcmfmac: brcmf_sdio_isr Enter
[79828.621085] brcmfmac: brcmf_sdio_dpc Enter
[79828.621095] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.621101] brcmfmac: brcmf_sdio_clkctl Enter
[79828.621106] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.621110] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.621118] brcmfmac: brcmf_sdio_readframes Enter
[79828.621128] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.621166] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.621195] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.621244] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.621272] brcmfmac: brcmf_sdio_isr Enter
[79828.621344] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.621383] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.621402] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.621443] brcmfmac: brcmf_sdio_dpc Enter
[79828.621466] brcmfmac: brcmf_sdio_isr Enter
[79828.621540] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.621548] brcmfmac: brcmf_sdio_clkctl Enter
[79828.621554] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.621557] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.621563] brcmfmac: brcmf_sdio_readframes Enter
[79828.621570] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.621605] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.621624] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.621658] brcmfmac: brcmf_sdio_dpc Enter
[79828.621668] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.621672] brcmfmac: brcmf_sdio_clkctl Enter
[79828.621676] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.621680] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.636062] brcmfmac: brcmf_sdio_isr Enter
[79828.636134] brcmfmac: brcmf_sdio_dpc Enter
[79828.636144] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.636149] brcmfmac: brcmf_sdio_clkctl Enter
[79828.636154] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.636158] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.636164] brcmfmac: brcmf_sdio_readframes Enter
[79828.636173] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.636209] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.636231] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.636264] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.636292] brcmfmac: brcmf_sdio_isr Enter
[79828.636359] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.636392] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.636402] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.636435] brcmfmac: brcmf_sdio_sendfromq Enter
[79828.636444] brcmfmac: brcmf_sdio_txpkt Enter
[79828.636452] brcmfmac: brcmf_sdiod_send_pkt addr = 0x18000000, size = 2
[79828.636526] brcmfmac: brcmf_sdio_dpc Enter
[79828.636533] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.636537] brcmfmac: brcmf_sdio_clkctl Enter
[79828.636541] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.636545] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.636550] brcmfmac: brcmf_sdio_readframes Enter
[79828.636557] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.649237] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.649257] brcmfmac: brcmf_sdio_clkctl Enter
[79828.649261] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.649266] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.649336] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[79828.656129] brcmfmac: brcmf_sdio_isr Enter
[79828.656244] brcmfmac: brcmf_sdio_dpc Enter
[79828.656253] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.656258] brcmfmac: brcmf_sdio_clkctl Enter
[79828.656263] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.656266] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.656272] brcmfmac: brcmf_sdio_readframes Enter
[79828.656281] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.656316] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.656344] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.656377] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.656406] brcmfmac: brcmf_sdio_isr Enter
[79828.656473] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.656506] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.656521] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.656562] brcmfmac: brcmf_sdio_dpc Enter
[79828.656581] brcmfmac: brcmf_sdio_isr Enter
[79828.656646] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.656650] brcmfmac: brcmf_sdio_clkctl Enter
[79828.656654] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.656658] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.656663] brcmfmac: brcmf_sdio_readframes Enter
[79828.656670] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.656702] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.656717] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.656750] brcmfmac: brcmf_sdio_dpc Enter
[79828.656757] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.656761] brcmfmac: brcmf_sdio_clkctl Enter
[79828.656765] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.656768] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.669231] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.669241] brcmfmac: brcmf_sdio_clkctl Enter
[79828.669246] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.669250] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.669311] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[79828.669964] brcmfmac: brcmf_sdio_isr Enter
[79828.670072] brcmfmac: brcmf_sdio_dpc Enter
[79828.670081] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.670085] brcmfmac: brcmf_sdio_clkctl Enter
[79828.670089] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.670093] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.670099] brcmfmac: brcmf_sdio_readframes Enter
[79828.670107] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.670142] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.670171] brcmfmac: brcmf_sdio_isr Enter
[79828.670238] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.670271] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79828.670281] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.670314] brcmfmac: brcmf_sdio_sendfromq Enter
[79828.670322] brcmfmac: brcmf_sdio_txpkt Enter
[79828.670331] brcmfmac: brcmf_sdiod_send_pkt addr = 0x18000000, size = 2
[79828.670405] brcmfmac: brcmf_sdio_dpc Enter
[79828.670413] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.670417] brcmfmac: brcmf_sdio_clkctl Enter
[79828.670420] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.670424] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.670429] brcmfmac: brcmf_sdio_readframes Enter
[79828.670436] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79828.685234] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.685244] brcmfmac: brcmf_sdio_clkctl Enter
[79828.685248] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.685252] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.685312] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[79828.685350] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x000056b4 in window 0x00258000
[79828.685521] brcmfmac: CONSOLE: 000926.501 
[79828.685525] brcmfmac: CONSOLE: FWID 01-88ee44ea
[79828.685529] brcmfmac: CONSOLE: flags 1
[79828.685532] brcmfmac: CONSOLE: 000926.502 
[79828.685536] brcmfmac: CONSOLE: TRAP 4(25fd58): pc 1aabb0, lr 1aad23, sp 25fdb0, cpsr 2000019f, spsr 200001bf
[79828.685540] brcmfmac: CONSOLE: 000926.502   dfsr 1, dfar be23f281
[79828.685543] brcmfmac: CONSOLE: 000926.502   r0 215518, r1 215518, r2 25fe2c, r3 0, r4 22bbbc, r5 ffff, r6 0
[79828.685548] brcmfmac: CONSOLE: 000926.502   r7 be23f199, r8 25089c, r9 1, r10 25a63c, r11 2508a0, r12 0
[79828.685551] brcmfmac: CONSOLE: 000926.502 
[79828.685555] brcmfmac: CONSOLE:    sp+0 00000000 0019b285 00215518 0025c094
[79828.685558] brcmfmac: CONSOLE: 000926.502   sp+10 00000008 00213618 00000001 0025d4bc
[79828.685562] brcmfmac: CONSOLE: 
[79828.685565] brcmfmac: CONSOLE: 000926.502 sp+4 0019b285
[79828.685569] brcmfmac: CONSOLE: 000926.502 sp+24 0019b3b3
[79828.685572] brcmfmac: CONSOLE: 000926.502 sp+34 0019aeb1
[79828.685576] brcmfmac: CONSOLE: 000926.502 sp+3c 0019b59d
[79828.685579] brcmfmac: CONSOLE: 000926.502 sp+50 001bda45
[79828.685583] brcmfmac: CONSOLE: 000926.502 sp+74 001a44c3
[79828.685586] brcmfmac: CONSOLE: 000926.502 sp+ac 00031d93
[79828.685589] brcmfmac: CONSOLE: 000926.502 sp+14c 0019c9f5
[79828.685593] brcmfmac: CONSOLE: 000926.502 sp+17c 0019ba61
[79828.685596] brcmfmac: CONSOLE: 000926.502 sp+194 0019bc69
[79828.685600] brcmfmac: CONSOLE: 000926.502 sp+1ac 0019be91
[79828.685603] brcmfmac: CONSOLE: 000926.502 sp+1bc 0019c035
[79828.685607] brcmfmac: CONSOLE: 000926.502 sp+1c4 0019a5b9
[79828.685610] brcmfmac: CONSOLE: 000926.502 sp+1cc 0019ac89
[79828.685613] brcmfmac: CONSOLE: 000926.502 sp+1dc 00199d27
[79828.685617] brcmfmac: CONSOLE: 000926.502 sp+1e8 000001df
[79828.701232] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.701244] brcmfmac: brcmf_sdio_clkctl Enter
[79828.701248] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.701252] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.701264] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[79828.701311] brcmfmac: brcmf_sdio_bus_watchdog idle
[79828.701318] brcmfmac: brcmf_sdio_bus_sleep Enter: request SLEEP currently WAKE
[79828.701322] brcmfmac: brcmf_sdio_clkctl Enter
[79828.701327] brcmfmac: brcmf_sdio_htclk Enter
[79828.701348] brcmfmac: brcmf_sdio_htclk CLKCTL: turned OFF
[79828.701352] brcmfmac: brcmf_sdio_sdclk Enter
[79828.701356] brcmfmac: brcmf_sdio_clkctl 3 -> 0
[79828.701360] brcmfmac: brcmf_sdio_bus_sleep new state SLEEP
[79828.701364] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.717236] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently SLEEP
[79828.717250] brcmfmac: brcmf_sdio_clkctl Enter
[79828.717254] brcmfmac: brcmf_sdio_sdclk Enter
[79828.717258] brcmfmac: brcmf_sdio_htclk Enter
[79828.717303] brcmfmac: brcmf_sdio_htclk CLKCTL: turned ON
[79828.717308] brcmfmac: brcmf_sdio_clkctl 0 -> 3
[79828.717313] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.717317] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.717327] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[79828.733235] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.733245] brcmfmac: brcmf_sdio_clkctl Enter
[79828.733249] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.733253] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.733261] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[79828.733303] brcmfmac: brcmf_sdio_bus_watchdog idle
[79828.733310] brcmfmac: brcmf_sdio_bus_sleep Enter: request SLEEP currently WAKE
[79828.733314] brcmfmac: brcmf_sdio_clkctl Enter
[79828.733318] brcmfmac: brcmf_sdio_htclk Enter
[79828.733338] brcmfmac: brcmf_sdio_htclk CLKCTL: turned OFF
[79828.733342] brcmfmac: brcmf_sdio_sdclk Enter
[79828.733346] brcmfmac: brcmf_sdio_clkctl 3 -> 0
[79828.733351] brcmfmac: brcmf_sdio_bus_sleep new state SLEEP
[79828.733354] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.739754] brcmfmac: brcmf_sdio_isr Enter
[79828.739871] brcmfmac: brcmf_sdio_dpc Enter
[79828.739880] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently SLEEP
[79828.739885] brcmfmac: brcmf_sdio_clkctl Enter
[79828.739889] brcmfmac: brcmf_sdio_sdclk Enter
[79828.739893] brcmfmac: brcmf_sdio_htclk Enter
[79828.739928] brcmfmac: brcmf_sdio_htclk CLKCTL: turned ON
[79828.739933] brcmfmac: brcmf_sdio_clkctl 0 -> 3
[79828.739938] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.739942] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.739946] brcmfmac: brcmf_sdio_hostmail Enter
[79828.739998] brcmfmac: brcmf_sdio_hostmail mailbox indicates firmware halted
[79828.740005] ieee80211 phy5: brcmf_fw_crashed: Firmware has halted or crashed
[79828.740331] brcmfmac: brcmf_sdio_bus_get_memdump dump at 0x00198000: size=819200
[79828.740392] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00198000
[79828.740566] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00198000
[79828.740724] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00198000
[79828.740880] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00198000
[79828.741036] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00198000
[79828.741191] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00198000
[79828.741378] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00198000
[79828.741543] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00198000
[79828.741711] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00198000
[79828.741877] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00198000
[79828.742046] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00198000
[79828.742206] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00198000
[79828.742363] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00198000
[79828.742520] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00198000
[79828.742675] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00198000
[79828.742833] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00198000
[79828.743033] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001a0000
[79828.743190] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001a0000
[79828.743351] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001a0000
[79828.743507] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001a0000
[79828.743662] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001a0000
[79828.743816] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001a0000
[79828.743971] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001a0000
[79828.744126] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001a0000
[79828.744281] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001a0000
[79828.744435] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001a0000
[79828.744590] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001a0000
[79828.744744] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001a0000
[79828.744898] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001a0000
[79828.745052] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001a0000
[79828.745206] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001a0000
[79828.745392] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001a0000
[79828.745601] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001a8000
[79828.745770] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001a8000
[79828.745936] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001a8000
[79828.746098] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001a8000
[79828.746258] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001a8000
[79828.746413] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001a8000
[79828.746569] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001a8000
[79828.746731] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001a8000
[79828.746885] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001a8000
[79828.747039] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001a8000
[79828.747193] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001a8000
[79828.747347] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001a8000
[79828.747513] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001a8000
[79828.747668] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001a8000
[79828.747821] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001a8000
[79828.747975] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001a8000
[79828.748172] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001b0000
[79828.748325] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001b0000
[79828.748479] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001b0000
[79828.748632] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001b0000
[79828.748785] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001b0000
[79828.748939] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001b0000
[79828.749092] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001b0000
[79828.749248] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001b0000
[79828.749407] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001b0000
[79828.749570] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001b0000
[79828.749734] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001b0000
[79828.749896] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001b0000
[79828.750066] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001b0000
[79828.750225] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001b0000
[79828.750382] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001b0000
[79828.750537] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001b0000
[79828.750734] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001b8000
[79828.750888] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001b8000
[79828.751044] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001b8000
[79828.751197] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001b8000
[79828.751351] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001b8000
[79828.751505] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001b8000
[79828.751659] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001b8000
[79828.751812] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001b8000
[79828.751967] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001b8000
[79828.752121] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001b8000
[79828.752274] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001b8000
[79828.752427] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001b8000
[79828.752581] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001b8000
[79828.752734] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001b8000
[79828.752888] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001b8000
[79828.753042] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001b8000
[79828.753270] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001c0000
[79828.753434] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001c0000
[79828.753598] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001c0000
[79828.753763] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001c0000
[79828.753934] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001c0000
[79828.754096] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001c0000
[79828.754256] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001c0000
[79828.754413] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001c0000
[79828.754568] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001c0000
[79828.754721] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001c0000
[79828.754876] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001c0000
[79828.755051] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001c0000
[79828.755206] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001c0000
[79828.755361] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001c0000
[79828.755515] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001c0000
[79828.755669] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001c0000
[79828.755869] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001c8000
[79828.756023] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001c8000
[79828.756177] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001c8000
[79828.756331] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001c8000
[79828.756484] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001c8000
[79828.756638] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001c8000
[79828.756791] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001c8000
[79828.756946] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001c8000
[79828.757100] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001c8000
[79828.757258] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001c8000
[79828.757419] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001c8000
[79828.757589] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001c8000
[79828.757758] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001c8000
[79828.757921] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001c8000
[79828.758083] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001c8000
[79828.758242] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001c8000
[79828.758442] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001d0000
[79828.758599] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001d0000
[79828.758754] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001d0000
[79828.758908] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001d0000
[79828.759062] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001d0000
[79828.759218] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001d0000
[79828.759373] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001d0000
[79828.759528] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001d0000
[79828.759682] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001d0000
[79828.759837] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001d0000
[79828.759991] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001d0000
[79828.760145] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001d0000
[79828.760299] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001d0000
[79828.760453] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001d0000
[79828.760607] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001d0000
[79828.760761] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001d0000
[79828.760958] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001d8000
[79828.761113] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001d8000
[79828.761271] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001d8000
[79828.761433] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001d8000
[79828.761601] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001d8000
[79828.761765] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001d8000
[79828.761926] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001d8000
[79828.762091] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001d8000
[79828.762251] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001d8000
[79828.762408] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001d8000
[79828.762563] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001d8000
[79828.762717] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001d8000
[79828.762872] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001d8000
[79828.763042] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001d8000
[79828.763198] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001d8000
[79828.763352] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001d8000
[79828.763551] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001e0000
[79828.763706] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001e0000
[79828.763860] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001e0000
[79828.764014] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001e0000
[79828.764169] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001e0000
[79828.764323] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001e0000
[79828.764477] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001e0000
[79828.764631] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001e0000
[79828.764785] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001e0000
[79828.764940] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001e0000
[79828.765094] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001e0000
[79828.765250] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001e0000
[79828.765411] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001e0000
[79828.765574] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001e0000
[79828.765735] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001e0000
[79828.765899] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001e0000
[79828.766119] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001e8000
[79828.766283] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001e8000
[79828.766442] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001e8000
[79828.766598] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001e8000
[79828.766753] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001e8000
[79828.766907] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001e8000
[79828.767062] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001e8000
[79828.767217] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001e8000
[79828.767370] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001e8000
[79828.767552] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001e8000
[79828.767707] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001e8000
[79828.767861] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001e8000
[79828.768015] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001e8000
[79828.768168] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001e8000
[79828.768321] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001e8000
[79828.768474] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001e8000
[79828.768671] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001f0000
[79828.768825] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001f0000
[79828.768978] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001f0000
[79828.769131] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001f0000
[79828.769293] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001f0000
[79828.769453] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001f0000
[79828.769617] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001f0000
[79828.769775] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001f0000
[79828.769941] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001f0000
[79828.770106] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001f0000
[79828.770265] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001f0000
[79828.770420] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001f0000
[79828.770574] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001f0000
[79828.770728] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001f0000
[79828.770882] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001f0000
[79828.771036] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001f0000
[79828.771255] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001f8000
[79828.771409] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001f8000
[79828.771563] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001f8000
[79828.771718] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001f8000
[79828.771871] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001f8000
[79828.772025] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001f8000
[79828.772178] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001f8000
[79828.772332] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001f8000
[79828.772486] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001f8000
[79828.772639] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001f8000
[79828.772793] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001f8000
[79828.772946] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001f8000
[79828.773099] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001f8000
[79828.773257] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001f8000
[79828.773421] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001f8000
[79828.773581] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001f8000
[79828.773789] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00200000
[79828.773950] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00200000
[79828.774112] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00200000
[79828.774276] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00200000
[79828.774434] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00200000
[79828.774591] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00200000
[79828.774745] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00200000
[79828.774899] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00200000
[79828.775053] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00200000
[79828.775207] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00200000
[79828.775362] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00200000
[79828.775515] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00200000
[79828.775670] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00200000
[79828.775825] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00200000
[79828.775979] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00200000
[79828.776134] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00200000
[79828.776330] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00208000
[79828.776484] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00208000
[79828.776639] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00208000
[79828.776792] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00208000
[79828.776946] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00208000
[79828.777100] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00208000
[79828.777258] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00208000
[79828.777418] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00208000
[79828.777581] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00208000
[79828.777742] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00208000
[79828.777903] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00208000
[79828.778068] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00208000
[79828.778230] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00208000
[79828.778388] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00208000
[79828.778543] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00208000
[79828.778698] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00208000
[79828.778909] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00210000
[79828.779068] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00210000
[79828.779223] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00210000
[79828.779380] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00210000
[79828.779535] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00210000
[79828.779689] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00210000
[79828.779845] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00210000
[79828.780002] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00210000
[79828.780164] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00210000
[79828.780322] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00210000
[79828.780478] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00210000
[79828.780633] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00210000
[79828.780787] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00210000
[79828.780941] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00210000
[79828.781096] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00210000
[79828.781254] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00210000
[79828.781471] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00218000
[79828.781649] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00218000
[79828.781813] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00218000
[79828.781976] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00218000
[79828.782142] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00218000
[79828.782305] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00218000
[79828.782464] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00218000
[79828.782619] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00218000
[79828.782774] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00218000
[79828.782929] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00218000
[79828.783083] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00218000
[79828.783237] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00218000
[79828.783392] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00218000
[79828.783564] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00218000
[79828.783719] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00218000
[79828.783873] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00218000
[79828.784071] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00220000
[79828.784226] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00220000
[79828.784380] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00220000
[79828.784535] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00220000
[79828.784688] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00220000
[79828.784843] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00220000
[79828.784997] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00220000
[79828.785151] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00220000
[79828.785313] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00220000
[79828.785475] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00220000
[79828.785638] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00220000
[79828.785798] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00220000
[79828.785961] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00220000
[79828.786123] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00220000
[79828.786284] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00220000
[79828.786440] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00220000
[79828.786640] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00228000
[79828.786796] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00228000
[79828.786951] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00228000
[79828.787106] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00228000
[79828.787263] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00228000
[79828.787416] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00228000
[79828.787569] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00228000
[79828.787723] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00228000
[79828.787876] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00228000
[79828.788029] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00228000
[79828.788182] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00228000
[79828.788336] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00228000
[79828.788489] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00228000
[79828.788642] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00228000
[79828.788795] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00228000
[79828.788948] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00228000
[79828.789144] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00230000
[79828.789305] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00230000
[79828.789466] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00230000
[79828.789624] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00230000
[79828.789783] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00230000
[79828.789939] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00230000
[79828.790098] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00230000
[79828.790256] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00230000
[79828.790412] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00230000
[79828.790567] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00230000
[79828.790721] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00230000
[79828.790874] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00230000
[79828.791028] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00230000
[79828.791184] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00230000
[79828.791338] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00230000
[79828.791492] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00230000
[79828.791689] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00238000
[79828.791843] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00238000
[79828.791996] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00238000
[79828.792150] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00238000
[79828.792303] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00238000
[79828.792457] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00238000
[79828.792610] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00238000
[79828.792763] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00238000
[79828.792917] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00238000
[79828.793070] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00238000
[79828.793240] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00238000
[79828.793406] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00238000
[79828.793570] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00238000
[79828.793735] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00238000
[79828.793910] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00238000
[79828.794087] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00238000
[79828.794306] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00240000
[79828.794480] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00240000
[79828.794647] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00240000
[79828.794812] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00240000
[79828.794978] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00240000
[79828.795146] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00240000
[79828.795314] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00240000
[79828.795478] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00240000
[79828.795641] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00240000
[79828.795801] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00240000
[79828.795960] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00240000
[79828.796121] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00240000
[79828.796280] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00240000
[79828.796447] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00240000
[79828.796619] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00240000
[79828.796796] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00240000
[79828.797004] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00248000
[79828.797168] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00248000
[79828.797348] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00248000
[79828.797531] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00248000
[79828.797703] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00248000
[79828.797876] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00248000
[79828.798049] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00248000
[79828.798233] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00248000
[79828.798410] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00248000
[79828.798588] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00248000
[79828.798756] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00248000
[79828.798927] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00248000
[79828.799094] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00248000
[79828.799251] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00248000
[79828.799410] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00248000
[79828.799565] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00248000
[79828.799764] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00250000
[79828.799918] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00250000
[79828.800073] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00250000
[79828.800227] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00250000
[79828.800382] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00250000
[79828.800536] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00250000
[79828.800690] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00250000
[79828.800843] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00250000
[79828.800998] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00250000
[79828.801151] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00250000
[79828.801327] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00250000
[79828.801488] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00250000
[79828.801647] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00250000
[79828.801806] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00250000
[79828.801964] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00250000
[79828.802127] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00250000
[79828.802337] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00258000
[79828.802502] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00258000
[79828.802658] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00258000
[79828.802814] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00258000
[79828.802971] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00258000
[79828.803125] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00258000
[79828.803284] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00258000
[79828.803440] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00258000
[79828.803594] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00258000
[79828.803749] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00258000
[79828.803903] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00258000
[79828.804057] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00258000
[79828.804211] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00258000
[79828.804367] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00258000
[79828.804521] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00258000
[79828.804675] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00258000
[79828.804910] brcmfmac: brcmf_sdio_hostmail Dongle ready, protocol version 4
[79828.804919] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.804924] brcmfmac: brcmf_sdio_clkctl Enter
[79828.804929] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.804932] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.804939] brcmfmac: brcmf_sdiod_ramrw read 4 bytes at offset 0x00007ffc in window 0x00258000
[79828.804961] brcmfmac: brcmf_sdio_bus_reset Enter
[79828.804968] brcmfmac: brcmf_sdiod_intr_unregister Entering oob=0 sd=1
[79828.804979] brcmfmac: brcmf_sdio_readshared sdpcm_shared address 0x00204660
[79828.805035] brcmfmac: brcmf_sdiod_ramrw read 64 bytes at offset 0x00004660 in window 0x00200000
[79828.805158] brcmfmac: brcmf_sdio_remove Enter
[79828.805164] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.805173] brcmfmac: brcmf_sdio_clkctl Enter
[79828.805177] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.805181] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.805295] brcmfmac: brcmf_sdiod_ramrw read 24 bytes at offset 0x00005ec4 in window 0x00258000
[79828.805518] brcmfmac: brcmf_sdiod_intr_unregister Entering oob=0 sd=0
[79828.805527] brcmfmac: brcmf_detach Enter
[79828.825246] brcmfmac: brcmf_bus_change_state 1 -> 0
[79828.825268] brcmfmac: brcmf_remove_interface Enter, bsscfgidx=2, ifidx=1
[79828.825275] brcmfmac: brcmf_del_if Enter, bsscfgidx=2, ifidx=1
[79828.825580] brcmfmac: brcmf_net_mon_stop Enter
[79828.825590] ieee80211 phy5: brcmf_fil_cmd_data: bus is down. we have nothing to do.
[79828.825595] ieee80211 phy5: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5)
[79828.825982] device wlan0mon left promiscuous mode
[79828.826272] brcmfmac: brcmf_cfg80211_get_tx_power Enter
[79828.826279] brcmfmac: check_vif_up device is not ready : status (0)
[79828.861277] brcmfmac: brcmf_remove_interface Enter, bsscfgidx=0, ifidx=0
[79828.861300] brcmfmac: brcmf_del_if Enter, bsscfgidx=0, ifidx=0
[79828.861306] brcmfmac: brcmf_netdev_stop Enter, bsscfgidx=0
[79828.861311] brcmfmac: check_vif_up device is not ready : status (0)
[79828.861317] brcmfmac: brcmf_net_setcarrier Enter, bsscfgidx=0 carrier=0
[79828.861322] brcmfmac: brcmf_txflowblock_if enter: bsscfgidx=0 stop=0x4 reason=4 state=1
[79828.861771] brcmfmac: brcmf_cfg80211_get_tx_power Enter
[79828.861784] brcmfmac: check_vif_up device is not ready : status (0)
[79828.885347] brcmfmac: brcmf_sdio_bus_stop Enter
[79828.885374] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79828.885386] brcmfmac: brcmf_sdio_clkctl Enter
[79828.885391] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79828.885395] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79828.885608] brcmfmac: brcmf_proto_detach Enter
[79828.885649] brcmfmac: brcmf_pno_detach enter
[79828.885658] brcmfmac: brcmf_btcoex_detach enter
[79828.885664] brcmfmac: brcmf_btcoex_boost_wifi attempted to restore not saved BTCOEX params
[79828.907022] brcmfmac: brcmf_sdio_clkctl Enter
[79828.933241] brcmfmac: brcmf_chip_set_passive Enter
[79828.934085] brcmfmac: brcmf_sdio_clkctl Enter
[79828.934091] brcmfmac: brcmf_sdio_htclk Enter
[79828.934110] brcmfmac: brcmf_sdio_htclk CLKCTL: turned OFF
[79828.934114] brcmfmac: brcmf_sdio_sdclk Enter
[79828.934118] brcmfmac: brcmf_sdio_clkctl 3 -> 0
[79828.934134] brcmfmac: brcmf_sdio_remove Disconnected
[79828.934216] brcmfmac: brcmf_bus_change_state 0 -> 0
[79828.934221] brcmfmac: brcmf_bus_change_state ignoring transition, bus not attached yet
[79828.934283] brcmfmac: brcmf_ops_sdio_remove Enter
[79828.934288] brcmfmac: brcmf_ops_sdio_remove sdio vendor ID: 0x02d0
[79828.934293] brcmfmac: brcmf_ops_sdio_remove sdio device ID: 0xa9a6
[79828.934297] brcmfmac: brcmf_ops_sdio_remove Function: 1
[79828.934301] brcmfmac: brcmf_sdiod_intr_unregister Entering oob=0 sd=0
[79828.934319] brcmfmac: brcmf_ops_sdio_remove Exit
[79828.934409] brcmfmac: brcmf_ops_sdio_remove Enter
[79828.934413] brcmfmac: brcmf_ops_sdio_remove sdio vendor ID: 0x02d0
[79828.934418] brcmfmac: brcmf_ops_sdio_remove sdio device ID: 0xa9a6
[79828.934422] brcmfmac: brcmf_ops_sdio_remove Function: 2
[79828.934426] brcmfmac: brcmf_ops_sdio_remove Exit
[79828.934507] mmc1: card 0001 removed
[79829.037675] mmc1: new high speed SDIO card at address 0001
[79829.037931] brcmfmac: brcmf_ops_sdio_probe Enter
[79829.037938] brcmfmac: brcmf_ops_sdio_probe Class=0
[79829.037943] brcmfmac: brcmf_ops_sdio_probe sdio vendor ID: 0x02d0
[79829.037947] brcmfmac: brcmf_ops_sdio_probe sdio device ID: 0xa9a6
[79829.037951] brcmfmac: brcmf_ops_sdio_probe Function#: 1
[79829.038064] brcmfmac: brcmf_ops_sdio_probe Enter
[79829.038069] brcmfmac: brcmf_ops_sdio_probe Class=0
[79829.038074] brcmfmac: brcmf_ops_sdio_probe sdio vendor ID: 0x02d0
[79829.038078] brcmfmac: brcmf_ops_sdio_probe sdio device ID: 0xa9a6
[79829.038082] brcmfmac: brcmf_ops_sdio_probe Function#: 2
[79829.038089] brcmfmac: brcmf_ops_sdio_probe F2 found, calling brcmf_sdiod_probe...
[79829.038154] brcmfmac: brcmf_sdiod_probe set F2 blocksize to 512
[79829.038206] brcmfmac: brcmf_sdio_probe Enter
[79829.038425] brcmfmac: F1 signature read @0x18000000=0x15264345
[79829.038623] brcmfmac: brcmf_chip_recognition found AXI chip: BCM4345/6
[79829.040786] brcmfmac: brcmf_chip_cores_check  [1 ] core 0x800:51  base 0x18000000 wrap 0x18100000
[79829.040807] brcmfmac: brcmf_chip_cores_check  [2 ] core 0x812:54  base 0x18001000 wrap 0x18101000
[79829.040814] brcmfmac: brcmf_chip_cores_check  [3 ] core 0x83e:9   base 0x18002000 wrap 0x18102000
[79829.040819] brcmfmac: brcmf_chip_cores_check  [4 ] core 0x83c:14  base 0x18003000 wrap 0x18103000
[79829.040825] brcmfmac: brcmf_chip_cores_check  [5 ] core 0x829:21  base 0x18004000 wrap 0x18104000
[79829.040830] brcmfmac: brcmf_chip_cores_check  [6 ] core 0x135:0   base 0x00000000 wrap 0x18107000
[79829.040836] brcmfmac: brcmf_chip_cores_check  [7 ] core 0x240:0   base 0x00000000 wrap 0x00000000
[79829.040842] brcmfmac: brcmf_chip_set_passive Enter
[79829.044116] brcmfmac: brcmf_chip_get_raminfo RAM: base=0x198000 size=819200 (0xc8000) sr=0 (0x0)
[79829.044201] brcmfmac: brcmf_chip_setup ccrev=51, pmurev=27, pmucaps=0x39d05f1b
[79829.044207] brcmfmac: brcmf_get_module_param Enter, bus=0, chip=17221, rev=6
[79829.044224] brcmfmac: brcmf_sdiod_sgtable_alloc nents=35
[79829.044230] brcmfmac: brcmf_sdio_kso_init Enter
[79829.044250] brcmfmac: brcmf_sdio_drivestrengthinit No SDIO driver strength init needed for chip BCM4345/6 rev 6 pmurev 27
[79829.044490] brcmfmac: brcmf_sdio_probe completed!!
[79829.044500] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[79829.044507] brcmfmac: brcmf_fw_get_firmwares enter: dev=mmc1:0001:1
[79829.044521] brcmfmac: brcmf_ops_sdio_probe F2 init completed...
[79829.045568] brcmfmac: brcmf_fw_complete_request firmware brcm/brcmfmac43455-sdio.bin found
[79829.045665] brcmfmac: brcmf_fw_complete_request firmware brcm/brcmfmac43455-sdio.txt found
[79829.045671] brcmfmac: brcmf_fw_request_nvram_done enter: dev=mmc1:0001:1
[79829.045734] brcmfmac: brcmf_fw_request_nvram_done nvram 00000000fd21d88e len 1748
[79829.045742] brcmfmac: brcmf_sdio_firmware_callback Enter: dev=mmc1:0001:1, err=0
[79829.046125] brcmfmac: brcmf_ops_sdio_probe Enter
[79829.046137] brcmfmac: brcmf_ops_sdio_probe Class=2
[79829.046141] brcmfmac: brcmf_ops_sdio_probe sdio vendor ID: 0x02d0
[79829.046145] brcmfmac: brcmf_ops_sdio_probe sdio device ID: 0xa9a6
[79829.046149] brcmfmac: brcmf_ops_sdio_probe Function#: 3
[79829.046192] brcmfmac: brcmf_sdio_clkctl Enter
[79829.046197] brcmfmac: brcmf_sdio_htclk Enter
[79829.046268] brcmfmac: brcmf_sdio_htclk CLKCTL: turned ON
[79829.046273] brcmfmac: brcmf_sdio_clkctl 1 -> 3
[79829.046278] brcmfmac: brcmf_sdio_download_firmware firmware rstvec: b83ef198
[79829.046283] brcmfmac: brcmf_sdio_download_code_file Enter
[79829.046348] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x00198000
[79829.048583] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x001a0000
[79829.050807] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x001a8000
[79829.052996] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x001b0000
[79829.055146] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x001b8000
[79829.057331] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x001c0000
[79829.059479] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x001c8000
[79829.061623] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x001d0000
[79829.063765] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x001d8000
[79829.065904] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x001e0000
[79829.068042] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x001e8000
[79829.070186] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x001f0000
[79829.072329] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x001f8000
[79829.074470] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x00200000
[79829.076613] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x00208000
[79829.078752] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x00210000
[79829.080908] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x00218000
[79829.083060] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x00220000
[79829.085206] brcmfmac: brcmf_sdiod_ramrw write 32768 bytes at offset 0x00000000 in window 0x00228000
[79829.087386] brcmfmac: brcmf_sdiod_ramrw write 2351 bytes at offset 0x00000000 in window 0x00230000
[79829.087606] brcmfmac: brcmf_sdio_verifymemory Compare RAM dl & ul at 0x00198000; size=624943
[79829.087661] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00198000
[79829.087822] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00198000
[79829.087978] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00198000
[79829.088133] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00198000
[79829.088289] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00198000
[79829.088444] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00198000
[79829.088601] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00198000
[79829.088756] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00198000
[79829.088911] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00198000
[79829.089066] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00198000
[79829.089253] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00198000
[79829.090087] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00198000
[79829.090270] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00198000
[79829.090426] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00198000
[79829.090582] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00198000
[79829.090738] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00198000
[79829.090951] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001a0000
[79829.091107] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001a0000
[79829.091262] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001a0000
[79829.091417] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001a0000
[79829.091573] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001a0000
[79829.091729] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001a0000
[79829.091884] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001a0000
[79829.092039] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001a0000
[79829.092193] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001a0000
[79829.092347] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001a0000
[79829.092503] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001a0000
[79829.092658] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001a0000
[79829.092812] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001a0000
[79829.092967] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001a0000
[79829.093121] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001a0000
[79829.094193] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001a0000
[79829.094416] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001a8000
[79829.094572] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001a8000
[79829.094804] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001a8000
[79829.094967] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001a8000
[79829.095150] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001a8000
[79829.095306] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001a8000
[79829.095461] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001a8000
[79829.095617] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001a8000
[79829.095772] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001a8000
[79829.095927] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001a8000
[79829.096083] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001a8000
[79829.096238] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001a8000
[79829.096392] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001a8000
[79829.096547] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001a8000
[79829.096701] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001a8000
[79829.096857] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001a8000
[79829.097055] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001b0000
[79829.097211] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001b0000
[79829.097417] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001b0000
[79829.097579] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001b0000
[79829.097740] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001b0000
[79829.097901] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001b0000
[79829.098061] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001b0000
[79829.098222] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001b0000
[79829.098378] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001b0000
[79829.098535] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001b0000
[79829.098690] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001b0000
[79829.098845] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001b0000
[79829.099006] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001b0000
[79829.099163] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001b0000
[79829.099319] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001b0000
[79829.099474] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001b0000
[79829.099673] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001b8000
[79829.099828] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001b8000
[79829.099985] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001b8000
[79829.100147] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001b8000
[79829.100305] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001b8000
[79829.100461] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001b8000
[79829.100616] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001b8000
[79829.100771] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001b8000
[79829.100927] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001b8000
[79829.101082] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001b8000
[79829.101832] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001b8000
[79829.102008] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001b8000
[79829.102168] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001b8000
[79829.102325] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001b8000
[79829.102481] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001b8000
[79829.102637] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001b8000
[79829.102865] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001c0000
[79829.103022] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001c0000
[79829.103177] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001c0000
[79829.103333] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001c0000
[79829.103489] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001c0000
[79829.103644] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001c0000
[79829.103799] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001c0000
[79829.103954] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001c0000
[79829.104109] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001c0000
[79829.104275] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001c0000
[79829.104434] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001c0000
[79829.104589] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001c0000
[79829.104747] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001c0000
[79829.104902] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001c0000
[79829.105058] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001c0000
[79829.105268] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001c0000
[79829.105498] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001c8000
[79829.105684] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001c8000
[79829.105877] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001c8000
[79829.106059] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001c8000
[79829.106222] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001c8000
[79829.106380] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001c8000
[79829.106536] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001c8000
[79829.106690] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001c8000
[79829.106845] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001c8000
[79829.106999] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001c8000
[79829.107155] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001c8000
[79829.107311] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001c8000
[79829.107466] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001c8000
[79829.107620] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001c8000
[79829.107774] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001c8000
[79829.107929] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001c8000
[79829.108126] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001d0000
[79829.108281] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001d0000
[79829.108435] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001d0000
[79829.108588] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001d0000
[79829.108743] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001d0000
[79829.108897] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001d0000
[79829.109051] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001d0000
[79829.109205] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001d0000
[79829.110171] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001d0000
[79829.110350] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001d0000
[79829.110507] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001d0000
[79829.110675] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001d0000
[79829.110836] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001d0000
[79829.110992] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001d0000
[79829.111148] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001d0000
[79829.111303] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001d0000
[79829.111501] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001d8000
[79829.111656] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001d8000
[79829.111810] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001d8000
[79829.111965] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001d8000
[79829.112120] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001d8000
[79829.112274] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001d8000
[79829.112428] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001d8000
[79829.112583] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001d8000
[79829.112737] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001d8000
[79829.112891] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001d8000
[79829.113045] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001d8000
[79829.113200] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001d8000
[79829.114332] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001d8000
[79829.114511] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001d8000
[79829.114667] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001d8000
[79829.114826] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001d8000
[79829.115026] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001e0000
[79829.115188] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001e0000
[79829.115344] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001e0000
[79829.115499] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001e0000
[79829.115653] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001e0000
[79829.115809] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001e0000
[79829.115970] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001e0000
[79829.116130] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001e0000
[79829.116285] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001e0000
[79829.116439] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001e0000
[79829.116594] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001e0000
[79829.116748] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001e0000
[79829.116903] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001e0000
[79829.117058] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001e0000
[79829.117237] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001e0000
[79829.118353] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001e0000
[79829.118573] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001e8000
[79829.118729] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001e8000
[79829.118886] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001e8000
[79829.119041] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001e8000
[79829.119196] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001e8000
[79829.119351] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001e8000
[79829.119505] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001e8000
[79829.119660] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001e8000
[79829.119814] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001e8000
[79829.119969] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001e8000
[79829.120133] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001e8000
[79829.120292] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001e8000
[79829.120447] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001e8000
[79829.120602] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001e8000
[79829.120757] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001e8000
[79829.120912] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001e8000
[79829.121208] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001f0000
[79829.122151] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001f0000
[79829.122329] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001f0000
[79829.122486] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001f0000
[79829.122641] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001f0000
[79829.122815] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001f0000
[79829.122970] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001f0000
[79829.123127] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001f0000
[79829.123282] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001f0000
[79829.123438] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001f0000
[79829.123593] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001f0000
[79829.123748] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001f0000
[79829.123904] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001f0000
[79829.124060] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001f0000
[79829.124215] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001f0000
[79829.124369] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001f0000
[79829.124568] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x001f8000
[79829.124723] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x001f8000
[79829.124877] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x001f8000
[79829.125033] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x001f8000
[79829.125187] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x001f8000
[79829.126528] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x001f8000
[79829.126707] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x001f8000
[79829.126881] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x001f8000
[79829.127038] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x001f8000
[79829.127193] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x001f8000
[79829.127349] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x001f8000
[79829.127504] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x001f8000
[79829.127659] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x001f8000
[79829.127814] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x001f8000
[79829.127969] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x001f8000
[79829.128124] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x001f8000
[79829.128323] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00200000
[79829.128479] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00200000
[79829.128634] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00200000
[79829.128789] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00200000
[79829.128945] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00200000
[79829.129100] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00200000
[79829.130248] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00200000
[79829.130423] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00200000
[79829.130582] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00200000
[79829.130758] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00200000
[79829.130915] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00200000
[79829.131071] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00200000
[79829.131226] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00200000
[79829.131382] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00200000
[79829.131537] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00200000
[79829.131697] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00200000
[79829.131898] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00208000
[79829.132054] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00208000
[79829.132208] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00208000
[79829.132362] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00208000
[79829.132516] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00208000
[79829.132670] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00208000
[79829.132824] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00208000
[79829.132978] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00208000
[79829.133132] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00208000
[79829.134281] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00208000
[79829.134458] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00208000
[79829.134615] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00208000
[79829.134770] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00208000
[79829.134927] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00208000
[79829.135082] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00208000
[79829.135237] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00208000
[79829.135436] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00210000
[79829.135591] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00210000
[79829.135749] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00210000
[79829.135907] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00210000
[79829.136065] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00210000
[79829.136223] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00210000
[79829.136381] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00210000
[79829.136536] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00210000
[79829.136690] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00210000
[79829.136895] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00210000
[79829.137054] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00210000
[79829.137209] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00210000
[79829.137764] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00210000
[79829.138375] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00210000
[79829.138539] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00210000
[79829.138694] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00210000
[79829.138895] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00218000
[79829.139051] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00218000
[79829.139206] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00218000
[79829.139361] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00218000
[79829.139515] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00218000
[79829.139670] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00218000
[79829.139826] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00218000
[79829.139981] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00218000
[79829.140136] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00218000
[79829.140292] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00218000
[79829.140450] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00218000
[79829.140605] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00218000
[79829.140760] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00218000
[79829.140914] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00218000
[79829.141077] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00218000
[79829.141353] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00218000
[79829.141702] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00220000
[79829.142869] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00220000
[79829.143046] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00220000
[79829.143203] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00220000
[79829.143368] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00220000
[79829.143526] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00220000
[79829.143682] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00220000
[79829.143837] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00220000
[79829.143992] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00220000
[79829.144147] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00220000
[79829.144302] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00220000
[79829.144463] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00220000
[79829.144621] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00220000
[79829.144776] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00220000
[79829.144931] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00220000
[79829.145086] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00220000
[79829.145361] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00228000
[79829.146106] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000800 in window 0x00228000
[79829.146279] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001000 in window 0x00228000
[79829.146434] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00001800 in window 0x00228000
[79829.146589] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002000 in window 0x00228000
[79829.146774] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00002800 in window 0x00228000
[79829.146929] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003000 in window 0x00228000
[79829.147086] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00003800 in window 0x00228000
[79829.147243] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004000 in window 0x00228000
[79829.147398] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00004800 in window 0x00228000
[79829.147555] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005000 in window 0x00228000
[79829.147713] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00005800 in window 0x00228000
[79829.147873] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006000 in window 0x00228000
[79829.148029] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00006800 in window 0x00228000
[79829.148184] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007000 in window 0x00228000
[79829.148339] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00007800 in window 0x00228000
[79829.148538] brcmfmac: brcmf_sdiod_ramrw read 2048 bytes at offset 0x00000000 in window 0x00230000
[79829.148694] brcmfmac: brcmf_sdiod_ramrw read 303 bytes at offset 0x00000800 in window 0x00230000
[79829.148829] brcmfmac: brcmf_sdio_download_nvram Enter
[79829.148881] brcmfmac: brcmf_sdiod_ramrw write 1748 bytes at offset 0x0000792c in window 0x00258000
[79829.149053] brcmfmac: brcmf_sdio_verifymemory Compare RAM dl & ul at 0x0025f92c; size=1748
[79829.149062] brcmfmac: brcmf_sdiod_ramrw read 1748 bytes at offset 0x0000792c in window 0x00258000
[79829.149242] brcmfmac: brcmf_chip_set_active Enter
[79829.149381] brcmfmac: brcmf_sdiod_ramrw write 4 bytes at offset 0x00000000 in window 0x00000000
[79829.149864] brcmfmac: brcmf_sdio_clkctl Enter
[79829.149876] brcmfmac: brcmf_sdio_htclk Enter
[79829.149896] brcmfmac: brcmf_sdio_htclk CLKCTL: turned OFF
[79829.149901] brcmfmac: brcmf_sdio_clkctl 3 -> 1
[79829.149926] brcmfmac: brcmf_sdio_clkctl Enter
[79829.149930] brcmfmac: brcmf_sdio_htclk Enter
[79829.195298] brcmfmac: brcmf_sdio_htclk CLKCTL: turned ON
[79829.195313] brcmfmac: brcmf_sdio_clkctl 1 -> 3
[79829.386091] brcmfmac: brcmf_sdio_firmware_callback enable F2: err=0
[79829.386154] brcmfmac: brcmf_chip_sr_capable Enter
[79829.386222] brcmfmac: brcmf_sdiod_change_state 0 -> 1
[79829.386228] brcmfmac: brcmf_bus_change_state 0 -> 1
[79829.386232] brcmfmac: brcmf_bus_change_state ignoring transition, bus not attached yet
[79829.386237] brcmfmac: brcmf_sdiod_intr_register Entering
[79829.386318] brcmfmac: brcmf_alloc Enter
[79829.386340] brcmfmac: brcmf_sdio_isr Enter
[79829.386345] brcmfmac: brcmf_attach Enter
[79829.386349] brcmfmac: brcmf_proto_attach Enter
[79829.386362] brcmfmac: brcmf_fweh_register event handler registered for PSM_WATCHDOG
[79829.386367] brcmfmac: brcmf_bus_started 
[79829.386371] brcmfmac: brcmf_add_if Enter, bsscfgidx=0, ifidx=0
[79829.386376] brcmfmac: brcmf_add_if allocate netdev interface
[79829.386395] brcmfmac: brcmf_add_if  ==== pid:46f5d, if:wlan%d (00:00:00:00:00:00) created ===
[79829.386409] brcmfmac: brcmf_sdio_dpc Enter
[79829.386416] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.386421] brcmfmac: brcmf_sdio_clkctl Enter
[79829.386426] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.386430] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.386434] brcmfmac: brcmf_sdio_hostmail Enter
[79829.386451] brcmfmac: brcmf_bus_change_state 0 -> 1
[79829.386477] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.386493] brcmfmac: brcmf_sdio_hostmail Dongle ready, protocol version 4
[79829.386500] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.386505] brcmfmac: brcmf_sdio_clkctl Enter
[79829.386508] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.386512] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.386564] brcmfmac: brcmf_sdiod_ramrw read 4 bytes at offset 0x00007ffc in window 0x00258000
[79829.386597] brcmfmac: brcmf_sdio_readshared sdpcm_shared address 0x00204660
[79829.386648] brcmfmac: brcmf_sdiod_ramrw read 64 bytes at offset 0x00004660 in window 0x00200000
[79829.386685] brcmfmac: brcmf_sdio_dpc Dongle reports CHIPACTIVE
[79829.386690] brcmfmac: brcmf_sdio_readframes Enter
[79829.386706] brcmfmac: brcmf_sdio_isr Enter
[79829.386815] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.386849] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 0
[79829.386860] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.386896] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.386933] brcmfmac: brcmf_sdio_dpc Enter
[79829.386940] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.386944] brcmfmac: brcmf_sdio_clkctl Enter
[79829.386948] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.386952] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.386956] brcmfmac: brcmf_sdio_hostmail Enter
[79829.386974] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.386995] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.387007] brcmfmac: brcmf_sdio_hostmail Dongle ready, protocol version 4
[79829.387014] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.387018] brcmfmac: brcmf_sdio_clkctl Enter
[79829.387022] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.387025] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.387075] brcmfmac: brcmf_sdiod_ramrw read 4 bytes at offset 0x00007ffc in window 0x00258000
[79829.387105] brcmfmac: brcmf_sdio_readshared sdpcm_shared address 0x00204660
[79829.387156] brcmfmac: brcmf_sdiod_ramrw read 64 bytes at offset 0x00004660 in window 0x00200000
[79829.387215] brcmfmac: brcmf_sdio_isr Enter
[79829.387317] brcmfmac: brcmf_sdio_dpc Enter
[79829.387325] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.387329] brcmfmac: brcmf_sdio_clkctl Enter
[79829.387332] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.387336] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.387341] brcmfmac: brcmf_sdio_readframes Enter
[79829.387348] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.387380] brcmfmac: brcmf_sdio_read_control Enter
[79829.387415] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.387454] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.387464] brcmfmac: brcmf_sdio_dpc Enter
[79829.387471] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.387475] brcmfmac: brcmf_sdio_clkctl Enter
[79829.387478] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.387482] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.387490] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.387530] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.387535] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.387572] brcmfmac: brcmf_sdio_isr Enter
[79829.387631] brcmfmac: brcmf_sdio_dpc Enter
[79829.387638] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.387642] brcmfmac: brcmf_sdio_clkctl Enter
[79829.387645] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.387649] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.387654] brcmfmac: brcmf_sdio_readframes Enter
[79829.387661] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.387692] brcmfmac: brcmf_sdio_read_control Enter
[79829.387711] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.387735] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.387754] brcmfmac: brcmf_sdio_dpc Enter
[79829.387761] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.387765] brcmfmac: brcmf_sdio_clkctl Enter
[79829.387769] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.387773] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.387781] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.387821] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.387826] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.388017] brcmfmac: brcmf_sdio_isr Enter
[79829.388076] brcmfmac: brcmf_sdio_dpc Enter
[79829.388083] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.388088] brcmfmac: brcmf_sdio_clkctl Enter
[79829.388091] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.388095] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.388101] brcmfmac: brcmf_sdio_readframes Enter
[79829.388107] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.388139] brcmfmac: brcmf_sdio_read_control Enter
[79829.388155] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.388178] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.388197] brcmfmac: brcmf_sdio_dpc Enter
[79829.388203] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.388208] brcmfmac: brcmf_sdio_clkctl Enter
[79829.388211] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.388215] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.388222] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.388266] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.388271] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.388310] brcmfmac: brcmf_sdio_isr Enter
[79829.388369] brcmfmac: brcmf_sdio_dpc Enter
[79829.388376] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.388380] brcmfmac: brcmf_sdio_clkctl Enter
[79829.388383] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.388387] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.388392] brcmfmac: brcmf_sdio_readframes Enter
[79829.388399] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.388430] brcmfmac: brcmf_sdio_read_control Enter
[79829.388440] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 32
[79829.388477] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.388500] brcmfmac: brcmf_c_process_clm_blob Enter
[79829.388517] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6
[79829.388591] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.388602] brcmfmac: brcmf_sdio_dpc Enter
[79829.388609] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.388613] brcmfmac: brcmf_sdio_clkctl Enter
[79829.388617] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.388621] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.388628] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.388778] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.388784] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.389033] brcmfmac: brcmf_sdio_isr Enter
[79829.389092] brcmfmac: brcmf_sdio_dpc Enter
[79829.389099] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.389103] brcmfmac: brcmf_sdio_clkctl Enter
[79829.389107] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.389111] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.389116] brcmfmac: brcmf_sdio_readframes Enter
[79829.389123] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.389154] brcmfmac: brcmf_sdio_read_control Enter
[79829.389166] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 1536
[79829.389292] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.389321] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.389348] brcmfmac: brcmf_sdio_dpc Enter
[79829.389356] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.389360] brcmfmac: brcmf_sdio_clkctl Enter
[79829.389364] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.389368] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.389376] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.389523] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.389801] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.391346] brcmfmac: brcmf_sdio_isr Enter
[79829.391431] brcmfmac: brcmf_sdio_dpc Enter
[79829.391441] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.391445] brcmfmac: brcmf_sdio_clkctl Enter
[79829.391449] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.391453] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.391460] brcmfmac: brcmf_sdio_readframes Enter
[79829.391469] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.391506] brcmfmac: brcmf_sdio_read_control Enter
[79829.391537] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 1536
[79829.391684] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.392011] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.392025] brcmfmac: brcmf_sdio_dpc Enter
[79829.392033] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.392042] brcmfmac: brcmf_sdio_clkctl Enter
[79829.392046] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.392050] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.392059] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.392309] brcmfmac: brcmf_sdio_isr Enter
[79829.392322] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.392329] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.392370] brcmfmac: brcmf_sdio_dpc Enter
[79829.392380] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.392385] brcmfmac: brcmf_sdio_clkctl Enter
[79829.392388] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.392392] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.392397] brcmfmac: brcmf_sdio_readframes Enter
[79829.392405] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.392444] brcmfmac: brcmf_sdio_read_control Enter
[79829.392465] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 224
[79829.392522] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.392842] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Feb  2 2024 13:44:15 version 7.45.206 (nexmon.org: 2.2.2-465-gd2182-dirty-11) FWID 01-88ee44ea
[79829.392850] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.392973] brcmfmac: brcmf_sdio_dpc Enter
[79829.392982] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.392986] brcmfmac: brcmf_sdio_clkctl Enter
[79829.392990] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.392994] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.393003] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.393141] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.393148] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.393296] brcmfmac: brcmf_sdio_isr Enter
[79829.393359] brcmfmac: brcmf_sdio_dpc Enter
[79829.393367] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.393372] brcmfmac: brcmf_sdio_clkctl Enter
[79829.393377] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.393381] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.393387] brcmfmac: brcmf_sdio_readframes Enter
[79829.393395] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.393429] brcmfmac: brcmf_sdio_read_control Enter
[79829.393448] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 232
[79829.393502] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.393636] brcmfmac: brcmf_c_preinit_dcmds CLM version = API: 12.2 Data: RPi.4 Compiler: 1.29.4 ClmImport: 1.39.1 Customization: v2 21/11/15 Creation: 2021-11-15 01:32:40 
[79829.393645] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.393656] brcmfmac: brcmf_sdio_dpc Enter
[79829.393663] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.393667] brcmfmac: brcmf_sdio_clkctl Enter
[79829.393671] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.393674] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.393683] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.393726] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.393731] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.393896] brcmfmac: brcmf_sdio_isr Enter
[79829.393957] brcmfmac: brcmf_sdio_dpc Enter
[79829.393964] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.393968] brcmfmac: brcmf_sdio_clkctl Enter
[79829.393971] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.393975] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.393980] brcmfmac: brcmf_sdio_readframes Enter
[79829.393987] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.394019] brcmfmac: brcmf_sdio_read_control Enter
[79829.394038] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.394061] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.394080] brcmfmac: brcmf_sdio_dpc Enter
[79829.394086] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.394091] brcmfmac: brcmf_sdio_clkctl Enter
[79829.394094] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.394098] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.394106] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.394147] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.394152] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.394325] brcmfmac: brcmf_sdio_isr Enter
[79829.394384] brcmfmac: brcmf_sdio_dpc Enter
[79829.394392] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.394396] brcmfmac: brcmf_sdio_clkctl Enter
[79829.394399] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.394403] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.394409] brcmfmac: brcmf_sdio_readframes Enter
[79829.394416] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.394448] brcmfmac: brcmf_sdio_read_control Enter
[79829.394464] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.394486] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.394505] brcmfmac: brcmf_sdio_dpc Enter
[79829.394512] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.394516] brcmfmac: brcmf_sdio_clkctl Enter
[79829.394520] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.394523] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.394531] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.394573] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.394578] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.394662] brcmfmac: brcmf_sdio_isr Enter
[79829.394721] brcmfmac: brcmf_sdio_dpc Enter
[79829.394728] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.394732] brcmfmac: brcmf_sdio_clkctl Enter
[79829.394735] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.394739] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.394744] brcmfmac: brcmf_sdio_readframes Enter
[79829.394751] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.394782] brcmfmac: brcmf_sdio_read_control Enter
[79829.394799] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.394821] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.394840] brcmfmac: brcmf_sdio_dpc Enter
[79829.394847] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.394851] brcmfmac: brcmf_sdio_clkctl Enter
[79829.394854] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.394858] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.394866] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.394907] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.394913] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.394995] brcmfmac: brcmf_sdio_isr Enter
[79829.395055] brcmfmac: brcmf_sdio_dpc Enter
[79829.395062] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.395066] brcmfmac: brcmf_sdio_clkctl Enter
[79829.395069] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.395073] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.395078] brcmfmac: brcmf_sdio_readframes Enter
[79829.395086] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.395116] brcmfmac: brcmf_sdio_read_control Enter
[79829.395133] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.395155] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.395174] brcmfmac: brcmf_sdio_dpc Enter
[79829.395181] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.395185] brcmfmac: brcmf_sdio_clkctl Enter
[79829.395188] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.395192] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.395200] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.395239] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.395244] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.395418] brcmfmac: brcmf_sdio_isr Enter
[79829.395482] brcmfmac: brcmf_sdio_dpc Enter
[79829.395490] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.395493] brcmfmac: brcmf_sdio_clkctl Enter
[79829.395497] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.395501] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.395506] brcmfmac: brcmf_sdio_readframes Enter
[79829.395513] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.395545] brcmfmac: brcmf_sdio_read_control Enter
[79829.395563] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.395586] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.395604] brcmfmac: brcmf_sdio_dpc Enter
[79829.395611] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.395615] brcmfmac: brcmf_sdio_clkctl Enter
[79829.395619] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.395622] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.395630] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.395670] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.395675] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.395856] brcmfmac: brcmf_sdio_isr Enter
[79829.395916] brcmfmac: brcmf_sdio_dpc Enter
[79829.395923] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.395927] brcmfmac: brcmf_sdio_clkctl Enter
[79829.395930] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.395934] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.395939] brcmfmac: brcmf_sdio_readframes Enter
[79829.395946] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.395977] brcmfmac: brcmf_sdio_read_control Enter
[79829.395994] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.396016] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.396035] brcmfmac: brcmf_sdio_dpc Enter
[79829.396042] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.396046] brcmfmac: brcmf_sdio_clkctl Enter
[79829.396049] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.396053] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.396061] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.396105] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.396111] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.396417] brcmfmac: brcmf_sdio_isr Enter
[79829.396482] brcmfmac: brcmf_sdio_dpc Enter
[79829.396491] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.396495] brcmfmac: brcmf_sdio_clkctl Enter
[79829.396499] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.396503] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.396508] brcmfmac: brcmf_sdio_readframes Enter
[79829.396517] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.396551] brcmfmac: brcmf_sdio_read_control Enter
[79829.396575] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.396613] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.396624] brcmfmac: brcmf_sdio_dpc Enter
[79829.396631] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.396635] brcmfmac: brcmf_sdio_clkctl Enter
[79829.396639] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.396642] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.396650] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.396748] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.396753] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.396942] brcmfmac: brcmf_sdio_isr Enter
[79829.397001] brcmfmac: brcmf_sdio_dpc Enter
[79829.397008] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.397013] brcmfmac: brcmf_sdio_clkctl Enter
[79829.397016] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.397020] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.397025] brcmfmac: brcmf_sdio_readframes Enter
[79829.397032] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.397064] brcmfmac: brcmf_sdio_read_control Enter
[79829.397075] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 1024
[79829.397171] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.397193] brcmfmac: brcmf_feat_firmware_capabilities [ ap sta wme 802.11d 802.11h rm cqa cac dualband ampdu ampdu_tx ampdu_rx amsdurx tdls radio_pwrsave btamp p2p proptxstatus mchan p2po anqpo vht-prop-rates dfrts txpwrcache stbc-tx stbc-rx-1ss epno pfnx wnm bsstrans mfp idauth ]
[79829.397254] brcmfmac: brcmf_feat_firmware_capabilities enabling feature: MCHAN
[79829.397261] brcmfmac: brcmf_feat_firmware_capabilities enabling feature: P2P
[79829.397280] brcmfmac: brcmf_feat_firmware_capabilities enabling feature: DOT11H
[79829.397291] brcmfmac: brcmf_feat_firmware_capabilities enabling feature: FWAUTH
[79829.397296] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.397306] brcmfmac: brcmf_sdio_dpc Enter
[79829.397313] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.397317] brcmfmac: brcmf_sdio_clkctl Enter
[79829.397322] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.397325] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.397333] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.397386] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.397392] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.397656] brcmfmac: brcmf_sdio_isr Enter
[79829.397723] brcmfmac: brcmf_sdio_dpc Enter
[79829.397735] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.397740] brcmfmac: brcmf_sdio_clkctl Enter
[79829.397744] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.397747] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.397753] brcmfmac: brcmf_sdio_readframes Enter
[79829.397762] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.397803] brcmfmac: brcmf_sdio_read_control Enter
[79829.397829] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.398088] brcmfmac: brcmf_feat_iovar_int_get enabling feature: PNO
[79829.398096] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.398107] brcmfmac: brcmf_sdio_dpc Enter
[79829.398115] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.398119] brcmfmac: brcmf_sdio_clkctl Enter
[79829.398123] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.398127] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.398135] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.398273] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.398280] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.398567] brcmfmac: brcmf_sdio_isr Enter
[79829.398633] brcmfmac: brcmf_sdio_dpc Enter
[79829.398641] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.398648] brcmfmac: brcmf_sdio_clkctl Enter
[79829.398652] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.398656] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.398662] brcmfmac: brcmf_sdio_readframes Enter
[79829.398670] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.398707] brcmfmac: brcmf_sdio_read_control Enter
[79829.398729] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.398962] brcmfmac: brcmf_feat_iovar_int_get RSDB feature check failed: -23
[79829.398970] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.399096] brcmfmac: brcmf_sdio_dpc Enter
[79829.399104] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.399109] brcmfmac: brcmf_sdio_clkctl Enter
[79829.399112] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.399116] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.399125] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.399268] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.399275] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.399436] brcmfmac: brcmf_sdio_isr Enter
[79829.399501] brcmfmac: brcmf_sdio_dpc Enter
[79829.399509] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.399514] brcmfmac: brcmf_sdio_clkctl Enter
[79829.399517] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.399521] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.399527] brcmfmac: brcmf_sdio_readframes Enter
[79829.399534] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.399573] brcmfmac: brcmf_sdio_read_control Enter
[79829.399594] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.399834] brcmfmac: brcmf_feat_iovar_int_get enabling feature: TDLS
[79829.399841] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.399968] brcmfmac: brcmf_sdio_dpc Enter
[79829.399977] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.399981] brcmfmac: brcmf_sdio_clkctl Enter
[79829.399985] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.399989] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.399997] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.400133] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.400139] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.400157] brcmfmac: brcmf_sdio_isr Enter
[79829.400225] brcmfmac: brcmf_sdio_dpc Enter
[79829.400232] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.400244] brcmfmac: brcmf_sdio_clkctl Enter
[79829.400248] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.400252] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.400258] brcmfmac: brcmf_sdio_readframes Enter
[79829.400265] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.400333] brcmfmac: brcmf_sdio_read_control Enter
[79829.400360] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.400788] brcmfmac: brcmf_feat_iovar_int_get enabling feature: MFP
[79829.400797] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.400808] brcmfmac: brcmf_sdio_dpc Enter
[79829.400816] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.400821] brcmfmac: brcmf_sdio_clkctl Enter
[79829.400825] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.400829] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.400838] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.400977] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.400984] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.401208] brcmfmac: brcmf_sdio_isr Enter
[79829.401301] brcmfmac: brcmf_sdio_dpc Enter
[79829.401312] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.401317] brcmfmac: brcmf_sdio_clkctl Enter
[79829.401321] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.401325] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.401331] brcmfmac: brcmf_sdio_readframes Enter
[79829.401339] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.401379] brcmfmac: brcmf_sdio_read_control Enter
[79829.401404] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.402124] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.402140] brcmfmac: brcmf_sdio_dpc Enter
[79829.402148] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.402152] brcmfmac: brcmf_sdio_clkctl Enter
[79829.402156] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.402160] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.402172] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.402358] brcmfmac: brcmf_sdio_isr Enter
[79829.402423] brcmfmac: brcmf_sdio_dpc Enter
[79829.402431] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.402435] brcmfmac: brcmf_sdio_clkctl Enter
[79829.402439] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.402443] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.402448] brcmfmac: brcmf_sdio_readframes Enter
[79829.402456] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.402499] brcmfmac: brcmf_sdio_read_control Enter
[79829.402524] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64
[79829.402738] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.402745] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.402757] brcmfmac: brcmf_feat_iovar_int_get enabling feature: FWSUP
[79829.402911] brcmfmac: brcmf_fws_attach FWS queueing will be avoided
[79829.402919] brcmfmac: brcmf_alloc_vif allocating virtual interface (size=5472)
[79829.403158] brcmfmac: brcmf_fweh_register event handler registered for LINK
[79829.403165] brcmfmac: brcmf_fweh_register event handler registered for DEAUTH_IND
[79829.403169] brcmfmac: brcmf_fweh_register event handler registered for DEAUTH
[79829.403378] brcmfmac: brcmf_fweh_register event handler registered for DISASSOC_IND
[79829.403383] brcmfmac: brcmf_fweh_register event handler registered for ASSOC_IND
[79829.403387] brcmfmac: brcmf_fweh_register event handler registered for REASSOC_IND
[79829.403545] brcmfmac: brcmf_fweh_register event handler registered for ROAM
[79829.403550] brcmfmac: brcmf_fweh_register event handler registered for MIC_ERROR
[79829.403554] brcmfmac: brcmf_fweh_register event handler registered for SET_SSID
[79829.403559] brcmfmac: brcmf_fweh_register event handler registered for PFN_NET_FOUND
[79829.403563] brcmfmac: brcmf_fweh_register event handler registered for IF
[79829.403567] brcmfmac: brcmf_fweh_register event handler registered for P2P_PROBEREQ_MSG
[79829.403572] brcmfmac: brcmf_fweh_register event handler registered for P2P_DISC_LISTEN_COMPLETE
[79829.403576] brcmfmac: brcmf_fweh_register event handler registered for ACTION_FRAME_RX
[79829.403580] brcmfmac: brcmf_fweh_register event handler registered for ACTION_FRAME_COMPLETE
[79829.403584] brcmfmac: brcmf_fweh_register event handler registered for ACTION_FRAME_OFF_CHAN_COMPLETE
[79829.403588] brcmfmac: brcmf_fweh_register event handler registered for PSK_SUP
[79829.403592] brcmfmac: brcmf_fweh_register event handler registered for RSSI
[79829.403597] brcmfmac: brcmf_fweh_register event handler registered for ESCAN_RESULT
[79829.403603] brcmfmac: brcmf_sdio_bus_txctl Enter
[79829.403615] brcmfmac: brcmf_sdio_dpc Enter
[79829.403623] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.403627] brcmfmac: brcmf_sdio_clkctl Enter
[79829.403631] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.403635] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.403643] brcmfmac: brcmf_sdio_tx_ctrlframe Enter
[79829.403694] brcmfmac: brcmf_sdio_bus_txctl ctrl_frame complete, err=0
[79829.403699] brcmfmac: brcmf_sdio_bus_rxctl Enter
[79829.403741] brcmfmac: brcmf_sdio_isr Enter
[79829.403803] brcmfmac: brcmf_sdio_dpc Enter
[79829.403809] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[79829.403814] brcmfmac: brcmf_sdio_clkctl Enter
[79829.403817] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[79829.403821] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[79829.403827] brcmfmac: brcmf_sdio_readframes Enter
[79829.403834] brcmfmac: brcmf_sdiod_recv_pkt addr = 0x18000000, size = 64

Took well over 10 minutes, instead of about 3 minutes yesterday.

DrSchottky commented 5 months ago

@jlinktu isn't there an UaF in your patch?

jlinktu commented 5 months ago

What is an UaF?

DrSchottky commented 5 months ago

If scb is null p memory is being freed, but it's still passed to wlc_sendctl. Shouldn't sendframe immediately return after calling pkt_buf_free_skb?

jlinktu commented 5 months ago

Ah sorry, brainlag, use after free.. Yes, you are right, was meant to be a return. But it seems that this actually never happened anyway.. I was hoping for an easy way to find the root of that null pointer.

jlinktu commented 5 months ago

@jayofelony please try again with sendframe-patch-v2.zip I need again the forensics file output and if you get a crash the dmesg output (but the part containing CONSOLE is enough).

jayofelony commented 5 months ago 
[85773.086903] brcmfmac: brcmf_sdio_bus_sleep Enter: request WAKE currently WAKE
[85773.086909] brcmfmac: brcmf_sdio_clkctl Enter
[85773.086913] brcmfmac: brcmf_sdio_bus_sleep new state WAKE
[85773.086917] brcmfmac: brcmf_sdio_bus_sleep Exit: err=0
[85773.086968] brcmfmac: brcmf_sdiod_ramrw read 4 bytes at offset 0x00007ffc in window 0x00258000
[85773.087005] brcmfmac: brcmf_sdio_readshared: invalid sdpcm_shared address 0xFE4B01B4
[85773.087010] brcmfmac: brcmf_sdio_readshared: unable to obtain sdpcm_shared info: rv=-22 (addr=0xfe4b01b4)
[85773.087056] brcmfmac: brcmf_sdio_firmware_callback failed: dev=mmc1:0001:1, err=-62
[85773.087068] brcmfmac: brcmf_ops_sdio_probe Enter
[85773.087073] brcmfmac: brcmf_ops_sdio_probe Class=2
[85773.087077] brcmfmac: brcmf_ops_sdio_probe sdio vendor ID: 0x02d0
[85773.087081] brcmfmac: brcmf_ops_sdio_probe sdio device ID: 0xa9a6

get this error straight away after running make install-firmware, wlan0 won't even come up.

jlinktu commented 5 months ago

I will try to replicate your setup tomorrow to debug that, otherwise this creates too much overhead. Will let you know if I need you to do something.

jayofelony commented 5 months ago

https://github.com/jayofelony/pwnagotchi-bookworm/releases/download/v2.7.9/pwnagotchi-rpi-bookworm-2.7.9-arm64.img.xz

You can use this image. It's exactly what I use.

pwnlog for deauth/assoc etc logging

DrSchottky commented 5 months ago

This can be used to reproduce the issue, I run it for 30s and got the crash

from scapy.all import *

dot11 = Dot11(addr1="00:ae:fa:81:e2:5e", addr2="e8:94:f6:c4:97:3f", addr3="e8:94:f6:c4:97:3f")
packet = RadioTap()/dot11/Dot11Deauth(reason=7)
sendp(packet,iface="mon0", loop=1)
jayofelony commented 4 months ago

Any update on this, need me to test something?

jlinktu commented 4 months ago

No, just didn't find time to check yet.

jayofelony commented 3 months ago

Checking back on this. Now that kernel 6.6 is out, is there much difference between the workings of a 64bit firmware vs 32bit? I suspect there will also be new version for the bcm43455c0, bcm434340/bcm43436 chipsets. Would it be an idea to update nexmon to the latest version now that many new version have been released in the meantime?

jlinktu commented 3 months ago

The firmware blob is loaded onto the WiFi chip's ARM Cortex processor and is therefore independent of the hosts architecture, and also mostly independent of the kernel version (neglecting that driver and firmware need some sort of compatibility). I am already in the process of adding the firmware that is currently used by Raspberry Pi OS. @jayofelony As your question has absolutely no relation with this issue, please consider opening a dedicated issue if you have further question in the future.

jayofelony commented 3 months ago

@jlinktu I noticed today my RPi02w with the bcm43430 also showed firmware halted or crashed with the following output in journalctl: image

jlinktu commented 3 months ago

Again.. please open a new issue for things not directly related to this issue.