0009357: Nexmon firmware crashing on Raspberry Pi CM5 - Kali Linux Bug Tracker

ID	Project	Category	View Status	Date Submitted	Last Update

0009357	Kali Linux	Kali Package Bug	public	2025-10-13 18:52	2025-10-14 18:58

Reporter	keriati	Assigned To
Priority	normal	Severity	minor	Reproducibility	have not tried
Status	new	Resolution	open

Summary	0009357: Nexmon firmware crashing on Raspberry Pi CM5
Description	Based on this post: https://www.kali.org/blog/raspberry-pi-wi-fi-glow-up/ Issue: Using the Nexmon packages provided by Kali linux, the firmware crashes and the wlan0mon interface disappears after a few seconds. Before it disappears it seems to work fine using aireplay-ng --test wlan0mon. Reproduce: Get a fresh up-to-date Kali linux on a Raspberry Pi Comput Module 5 and installed packages brcmfmac-nexmon-dkms firmware-nexmon stop NetworkManager run airmon-ng start wlan0 run sudo aireplay-ng check kill run sudo aireplay-ng --test wlan0mon Observe it working correctly, then failing after a few seconds. dmesg output [ 1.435548] irq_brcmstb_l2: registered L2 intc (/soc@107c000000 /interrupt-controller@7d510600, parent irq: 27) [ 1.445639] irq_brcmstb_l2: registered L2 intc (/soc@107c000000 /interrupt-controller@7c502000, parent irq: 28) [ 1.455718] irq_brcmstb_l2: registered L2 intc (/soc@107c000000 /intc@7d508380, parent irq: 29) [ 1.464401] irq_brcmstb_l2: registered L2 intc (/soc@107c000000 /intc@7d508400, parent irq: 30) [ 1.473081] irq_brcmstb_l2: registered L2 intc (/soc@107c000000 /intc@7d503000, parent irq: 31) [ 1.894861] brcm-pcie 1000120000.pcie: host bridge /axi/pcie@1000120000 ranges: [ 1.902209] brcm-pcie 1000120000.pcie: No bus range found for /axi/pcie@1000120000, using [bus 00-ff] [ 1.911825] brcm-pcie 1000120000.pcie: MEM 0x1f00000000..0x1ffffffffb -> 0x0000000000 [ 1.920130] brcm-pcie 1000120000.pcie: MEM 0x1c00000000..0x1effffffff -> 0x0400000000 [ 1.928435] brcm-pcie 1000120000.pcie: IB MEM 0x1f00000000..0x1f003fffff -> 0x0000000000 [ 1.936737] brcm-pcie 1000120000.pcie: IB MEM 0x0000000000..0x0fffffffff -> 0x1000000000 [ 1.945037] brcm-pcie 1000120000.pcie: IB MEM 0x1000130000..0x1000130fff -> 0xfffffff000 [ 1.954655] brcm-pcie 1000120000.pcie: PCI host bridge to bus 0002:00 [ 2.130364] brcm-pcie 1000120000.pcie: clkreq-mode set to default [ 2.136481] brcm-pcie 1000120000.pcie: link up, 5.0 GT/s PCIe x4 (!SSC) [ 6.423174] brcmstb-i2c 107d508200.i2c: @97500hz registered in interrupt mode [ 6.433384] brcmstb-i2c 107d508280.i2c: @97500hz registered in interrupt mode [ 6.829913] brcmfmac: loading out-of-tree module taints kernel. [ 6.867863] brcmfmac: F1 signature read @0x18000000=0x15264345 [ 6.869214] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6 [ 6.890684] usbcore: registered new interface driver brcmfmac [ 7.216487] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6 [ 7.248553] Bluetooth: hci0: BCM4345C0 'brcm/BCM4345C0.hcd' Patch [ 7.279474] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Jan 12 2025 20:03:13 version 7.45.206 (nexmon.org: 2.2.2-552-gb8c6-2) FWID 01-88ee44ea [ 69.972664] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface... [ 69.980457] brcmfmac: brcmf_mon_add_vif: brcmf_mon_add_vif called [ 69.986611] brcmfmac: brcmf_mon_add_vif: Adding vif "wlan0mon" [ 146.441400] brcmfmac mmc1:0001:1 wlan0mon: entered promiscuous mode [ 146.447768] brcmfmac mmc1:0001:1 wlan0mon: entered allmulticast mode [ 157.522846] ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed [ 157.578422] ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do. [ 157.586138] ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5) [ 157.913547] brcmfmac: F1 signature read @0x18000000=0x15264345 [ 157.915074] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6 [ 158.203549] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6 [ 158.214818] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Jan 12 2025 20:03:13 version 7.45.206 (nexmon.org: 2.2.2-552-gb8c6-2) FWID 01-88ee44ea [ 182.583978] brcmfmac: brcmf_vif_add_validate: Attempt to add a MONITOR interface... [ 182.591718] brcmfmac: brcmf_mon_add_vif: brcmf_mon_add_vif called [ 182.597969] brcmfmac: brcmf_mon_add_vif: Adding vif "wlan0mon" [ 199.295351] brcmfmac mmc1:0001:1 wlan0mon: entered promiscuous mode [ 199.301762] brcmfmac mmc1:0001:1 wlan0mon: entered allmulticast mode [ 251.061683] ieee80211 phy1: brcmf_cfg80211_change_iface: iface validation failed: err=-16 [ 251.070110] ieee80211 phy1: brcmf_cfg80211_change_iface: iface validation failed: err=-16

kali-bugreport 2025-10-13 21:09 reporter ~0020885	Sounds more like something you should report to the development team of the driver/firmware rather then to the team packaging this software (Kali).

keriati 2025-10-13 22:04 reporter ~0020886	Thank you for looking at it. The linked post on kali.org states that (quoting) Reporting and Feedback: "It doesn’t work, report the issue with logs and hardware details!" with a link to this site.

kali-bugreport 2025-10-13 22:29 reporter ~0020887 Last edited: 2025-10-14 11:49	I'm not looking into this, just giving pointers from user to user :-p Not sure if the blog post is too generic written but Kali team members are constantly posting things like e.g. this here: We're sorry but we don't have the manpower to deal with hardware support problems. Those problems need to be fixed in the upstream Linux kernel. We regularly import new kernel releases. Some hardware suppliers don't care about their Linux support, and there's nothing we can do about that. Avoid buying hardware from those suppliers if you're going to run Linux with it. and similar.

keriati 2025-10-14 08:37 reporter ~0020892	Sent a bug report also to nexmon: https://github.com/seemoo-lab/nexmon/issues/668#issuecomment-3400669380 I got this reply: That is something Kali has to work out, we don't provide any pre-patched firmwares. If you want to investigate this further yourself you can activate debugging outputs for the brcmfmac driver with the debug parameter. E.g. the following should provide you with enough prints to the kernel ring buffer to trace this down: debug=0x100006.

kali-bugreport 2025-10-14 11:55 reporter ~0020894 Last edited: 2025-10-14 18:11	I guess they (Kali team) can only sort out something if it/was proofed that this is originatig from their packaging. But if this is a bug of that firmware the developer of it (bug tracker above) would need to sort it out / fix it.

keriati 2025-10-14 18:58 reporter ~0020895	Here are the debug logs that I think happen around when the firmware crashes: [ 1792.447233] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 70 [ 1792.449305] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.449310] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000001e9ea16f len 42 [ 1792.449312] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 71 [ 1792.452439] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.452447] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000005b2217c9 len 42 [ 1792.452449] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 72 [ 1792.454519] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.454524] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000004cc1de64 len 42 [ 1792.454526] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 73 [ 1792.457403] brcmfmac: brcmf_sdio_isr Enter [ 1792.457459] ieee80211 phy0: brcmf_fw_crashed: Firmware has halted or crashed [ 1792.464579] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.464589] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 0000000014477784 len 42 [ 1792.464594] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 74 [ 1792.464664] brcmfmac: brcmf_sdio_bus_get_memdump dump at 0x00198000: size=819200 [ 1792.466666] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.466671] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000b5212bd6 len 42 [ 1792.466674] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 75 [ 1792.469801] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.469807] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000943b4e16 len 42 [ 1792.469809] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 76 [ 1792.471884] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.471892] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000e5046905 len 42 [ 1792.471895] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 77 [ 1792.475026] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.475033] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 0000000064dc7e11 len 42 [ 1792.475035] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 78 [ 1792.477105] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.477112] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000912a14f8 len 42 [ 1792.477115] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 79 [ 1792.480256] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.480268] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000001417498d len 42 [ 1792.480271] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 80 [ 1792.482353] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.482363] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000ab977ddb len 42 [ 1792.482369] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 81 [ 1792.485497] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.485506] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 0000000013b0c41f len 42 [ 1792.485508] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 82 [ 1792.487578] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.487583] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000001ac5ca1c len 42 [ 1792.487586] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 83 [ 1792.490717] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.490728] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 00000000f2c781e6 len 42 [ 1792.490731] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 84 [ 1792.492793] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.492797] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 000000007a86aa09 len 42 [ 1792.492800] brcmfmac: brcmf_sdio_bus_txdata deferring pktq len 85 [ 1792.493823] brcmfmac: brcmf_sdio_readshared sdpcm_shared address 0x00204660 [ 1792.493899] brcmfmac: brcmf_sdio_remove Enter [ 1792.493928] brcmfmac: brcmf_detach Enter [ 1792.495934] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.495940] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 0000000064b66d55 len 42 [ 1792.498012] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.498017] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 0000000064b66d55 len 42 [ 1792.501865] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.501875] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 0000000064b66d55 len 42 [ 1792.503941] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.503944] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 0000000064b66d55 len 42 [ 1792.507070] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.507075] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 0000000064b66d55 len 42 [ 1792.509136] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.509139] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 0000000064b66d55 len 42 [ 1792.512262] brcmfmac: brcmf_netdev_start_xmit wlan0mon: insufficient headroom (34) [ 1792.512267] brcmfmac: brcmf_sdio_bus_txdata Enter: pkt: data 0000000064b66d55 len 42 [ 1792.513159] brcmfmac: brcmf_bus_change_state 1 -> 0 [ 1792.513165] brcmfmac: brcmf_remove_interface Enter, bsscfgidx=2, ifidx=1 [ 1792.513168] brcmfmac: brcmf_del_if Enter, bsscfgidx=2, ifidx=1 [ 1795.033163] ieee80211 phy0: brcmf_proto_bcdc_query_dcmd: brcmf_proto_bcdc_msg failed w/status -110 [ 1795.042178] ieee80211 phy0: brcmf_cfg80211_get_channel: chanspec failed (-110) [ 1795.049762] brcmfmac: brcmf_net_mon_stop Enter [ 1795.049769] ieee80211 phy0: brcmf_fil_cmd_data: bus is down. we have nothing to do. [ 1795.057473] ieee80211 phy0: brcmf_net_mon_stop: BRCMF_C_SET_MONITOR error (-5) [ 1795.064877] brcmfmac: brcmf_cfg80211_get_tx_power Enter [ 1795.064881] brcmfmac: check_vif_up device is not ready : status (0) [ 1795.077213] brcmfmac: brcmf_remove_interface Enter, bsscfgidx=0, ifidx=0 [ 1795.077222] brcmfmac: brcmf_del_if Enter, bsscfgidx=0, ifidx=0 [ 1795.077224] brcmfmac: brcmf_netdev_stop Enter, bsscfgidx=0 [ 1795.077227] brcmfmac: check_vif_up device is not ready : status (0) [ 1795.077230] brcmfmac: brcmf_net_setcarrier Enter, bsscfgidx=0 carrier=0 [ 1795.077233] brcmfmac: brcmf_txflowblock_if enter: bsscfgidx=0 stop=0x4 reason=4 state=1 [ 1795.077383] brcmfmac: brcmf_cfg80211_get_tx_power Enter [ 1795.077387] brcmfmac: check_vif_up device is not ready : status (0) [ 1795.113280] brcmfmac: brcmf_sdio_bus_stop Enter [ 1795.113473] brcmfmac: brcmf_proto_detach Enter [ 1795.113489] brcmfmac: brcmf_pno_detach enter [ 1795.113492] brcmfmac: brcmf_btcoex_detach enter [ 1795.113495] brcmfmac: brcmf_btcoex_boost_wifi attempted to restore not saved BTCOEX params [ 1795.165155] brcmfmac: brcmf_chip_set_passive Enter [ 1795.165594] brcmfmac: brcmf_sdio_remove Disconnected [ 1795.165628] brcmfmac: brcmf_bus_change_state 0 -> 0 [ 1795.165632] brcmfmac: brcmf_bus_change_state ignoring transition, bus not attached yet [ 1795.165778] mmc1: card 0001 removed [ 1795.385630] mmc1: new ultra high speed DDR50 SDIO card at address 0001 [ 1795.392452] brcmfmac: brcmf_sdio_probe Enter [ 1795.392611] brcmfmac: F1 signature read @0x18000000=0x15264345 [ 1795.392737] brcmfmac: brcmf_chip_recognition found AXI chip: BCM4345/6 [ 1795.393548] brcmfmac: brcmf_chip_cores_check [1 ] core 0x800:51 base 0x18000000 wrap 0x18100000 [ 1795.393553] brcmfmac: brcmf_chip_cores_check [2 ] core 0x812:54 base 0x18001000 wrap 0x18101000 [ 1795.393556] brcmfmac: brcmf_chip_cores_check [3 ] core 0x83e:9 base 0x18002000 wrap 0x18102000 [ 1795.393559] brcmfmac: brcmf_chip_cores_check [4 ] core 0x83c:14 base 0x18003000 wrap 0x18103000 [ 1795.393562] brcmfmac: brcmf_chip_cores_check [5 ] core 0x829:21 base 0x18004000 wrap 0x18104000 [ 1795.393565] brcmfmac: brcmf_chip_cores_check [6 ] core 0x135:0 base 0x00000000 wrap 0x18107000 [ 1795.393568] brcmfmac: brcmf_chip_cores_check [7 ] core 0x240:0 base 0x00000000 wrap 0x00000000 [ 1795.393571] brcmfmac: brcmf_chip_set_passive Enter [ 1795.394097] brcmfmac: brcmf_chip_get_raminfo RAM: base=0x198000 size=819200 (0xc8000) sr=0 (0x0) [ 1795.394125] brcmfmac: brcmf_chip_setup ccrev=51, pmurev=27, pmucaps=0x39d05f1b [ 1795.394129] brcmfmac: brcmf_get_module_param Enter, bus=0, chip=17221, rev=6 [ 1795.394137] brcmfmac: brcmf_sdiod_sgtable_alloc nents=35 [ 1795.394140] brcmfmac: brcmf_sdio_kso_init Enter [ 1795.394149] brcmfmac: brcmf_sdio_drivestrengthinit No SDIO driver strength init needed for chip BCM4345/6 rev 6 pmurev 27 [ 1795.394252] brcmfmac: brcmf_sdio_probe completed!! [ 1795.394256] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6 [ 1795.402971] brcmfmac: brcmf_fw_get_firmwares enter: dev=mmc1:0001:1 [ 1795.403292] brcmfmac: brcmf_fw_complete_request firmware brcm/brcmfmac43455-sdio.bin found [ 1795.403324] brcmfmac: brcmf_fw_complete_request firmware brcm/brcmfmac43455-sdio.txt found [ 1795.403327] brcmfmac: brcmf_fw_request_nvram_done enter: dev=mmc1:0001:1 [ 1795.403369] brcmfmac: brcmf_fw_request_nvram_done nvram 00000000ae8a78dc len 1748 [ 1795.403373] brcmfmac: brcmf_sdio_firmware_callback Enter: dev=mmc1:0001:1, err=0 [ 1795.403442] brcmfmac: brcmf_sdio_download_code_file Enter [ 1795.427199] brcmfmac: brcmf_sdio_verifymemory Compare RAM dl & ul at 0x00198000; size=624943 [ 1795.449237] brcmfmac: brcmf_sdio_download_nvram Enter [ 1795.449354] brcmfmac: brcmf_sdio_verifymemory Compare RAM dl & ul at 0x0025f92c; size=1748 [ 1795.449432] brcmfmac: brcmf_chip_set_active Enter [ 1795.683159] brcmfmac: brcmf_sdio_firmware_callback enable F2: err=0 [ 1795.683197] brcmfmac: brcmf_chip_sr_capable Enter [ 1795.683225] brcmfmac: brcmf_sdiod_change_state 0 -> 1 [ 1795.683228] brcmfmac: brcmf_bus_change_state 0 -> 1 [ 1795.683231] brcmfmac: brcmf_bus_change_state ignoring transition, bus not attached yet [ 1795.683281] brcmfmac: brcmf_alloc Enter [ 1795.683294] brcmfmac: brcmf_attach Enter [ 1795.683295] brcmfmac: brcmf_proto_attach Enter [ 1795.683301] brcmfmac: brcmf_fweh_register event handler registered for PSM_WATCHDOG [ 1795.683304] brcmfmac: brcmf_bus_started [ 1795.683306] brcmfmac: brcmf_add_if Enter, bsscfgidx=0, ifidx=0 [ 1795.683308] brcmfmac: brcmf_add_if allocate netdev interface [ 1795.683321] brcmfmac: brcmf_add_if ==== pid:3338, if:wlan%d (00:00:00:00:00:00) created === [ 1795.683325] brcmfmac: brcmf_bus_change_state 0 -> 1 [ 1795.683329] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.683362] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.689186] brcmfmac: brcmf_sdio_isr Enter [ 1795.689287] brcmfmac: brcmf_sdio_readshared sdpcm_shared address 0x00204660 [ 1795.689404] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.689404] brcmfmac: brcmf_sdio_isr Enter [ 1795.689474] brcmfmac: brcmf_sdio_readshared sdpcm_shared address 0x00204660 [ 1795.689543] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.689579] brcmfmac: brcmf_sdio_isr Enter [ 1795.689623] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.689644] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.689837] brcmfmac: brcmf_sdio_isr Enter [ 1795.689878] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.689897] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.689935] brcmfmac: brcmf_sdio_isr Enter [ 1795.689985] brcmfmac: brcmf_c_process_clm_blob Enter [ 1795.689993] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac43455-sdio for chip BCM4345/6 [ 1795.699072] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.699149] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.699409] brcmfmac: brcmf_sdio_isr Enter [ 1795.699504] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.699564] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.701359] brcmfmac: brcmf_sdio_isr Enter [ 1795.701460] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.701494] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.701671] brcmfmac: brcmf_sdio_isr Enter [ 1795.701726] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4345/6 wl0: Jan 12 2025 20:03:13 version 7.45.206 (nexmon.org: 2.2.2-552-gb8c6-2) FWID 01-88ee44ea [ 1795.715981] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.716044] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.716263] brcmfmac: brcmf_sdio_isr Enter [ 1795.716330] brcmfmac: brcmf_c_preinit_dcmds CLM version = API: 12.2 Data: RPi.4 Compiler: 1.29.4 ClmImport: 1.39.1 Customization: v2 21/11/15 Creation: 2021-11-15 01:32:40 [ 1795.716334] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.716361] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.716523] brcmfmac: brcmf_sdio_isr Enter [ 1795.716563] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.716591] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.716765] brcmfmac: brcmf_sdio_isr Enter [ 1795.716847] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.716873] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.716966] brcmfmac: brcmf_sdio_isr Enter [ 1795.717028] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.717055] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.717174] brcmfmac: brcmf_sdio_isr Enter [ 1795.717809] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.717843] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.718017] brcmfmac: brcmf_sdio_isr Enter [ 1795.718064] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.718085] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.718265] brcmfmac: brcmf_sdio_isr Enter [ 1795.718305] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.718326] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.718619] brcmfmac: brcmf_sdio_isr Enter [ 1795.718663] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.718704] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.718891] brcmfmac: brcmf_sdio_isr Enter [ 1795.718963] brcmfmac: brcmf_feat_firmware_capabilities [ ap sta wme 802.11d 802.11h rm cqa cac dualband ampdu ampdu_tx ampdu_rx amsdurx tdls radio_pwrsave btamp p2p proptxstatus mchan p2po anqpo vht-prop-rates dfrts txpwrcache stbc-tx stbc-rx-1ss epno pfnx wnm bsstrans mfp idauth ] [ 1795.718973] brcmfmac: brcmf_feat_firmware_capabilities enabling feature: MCHAN [ 1795.718976] brcmfmac: brcmf_feat_firmware_capabilities enabling feature: P2P [ 1795.718990] brcmfmac: brcmf_feat_firmware_capabilities enabling feature: DOT11H [ 1795.718998] brcmfmac: brcmf_feat_firmware_capabilities enabling feature: FWAUTH [ 1795.719000] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.719021] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.719279] brcmfmac: brcmf_sdio_isr Enter [ 1795.719319] brcmfmac: brcmf_feat_iovar_int_get enabling feature: PNO [ 1795.719322] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.719340] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.719705] brcmfmac: brcmf_sdio_isr Enter [ 1795.719749] brcmfmac: brcmf_feat_iovar_int_get RSDB feature check failed: -23 [ 1795.719753] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.719769] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.720023] brcmfmac: brcmf_sdio_isr Enter [ 1795.720063] brcmfmac: brcmf_feat_iovar_int_get enabling feature: TDLS [ 1795.720066] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.720085] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.720195] brcmfmac: brcmf_sdio_isr Enter [ 1795.720236] brcmfmac: brcmf_feat_iovar_int_get enabling feature: MFP [ 1795.720239] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.720257] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.720552] brcmfmac: brcmf_sdio_isr Enter [ 1795.720592] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.720612] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.720736] brcmfmac: brcmf_sdio_isr Enter [ 1795.720774] brcmfmac: brcmf_feat_iovar_int_get enabling feature: FWSUP [ 1795.720777] brcmfmac: brcmf_feat_attach Features: 0x1428d6, disable: 0x282000 [ 1795.720806] brcmfmac: brcmf_fws_attach FWS queueing will be avoided [ 1795.720810] brcmfmac: brcmf_alloc_vif allocating virtual interface (size=5760) [ 1795.720825] brcmfmac: brcmf_fweh_register event handler registered for LINK [ 1795.720827] brcmfmac: brcmf_fweh_register event handler registered for DEAUTH_IND [ 1795.720830] brcmfmac: brcmf_fweh_register event handler registered for DEAUTH [ 1795.720831] brcmfmac: brcmf_fweh_register event handler registered for DISASSOC_IND [ 1795.720834] brcmfmac: brcmf_fweh_register event handler registered for ASSOC_IND [ 1795.720835] brcmfmac: brcmf_fweh_register event handler registered for REASSOC_IND [ 1795.720837] brcmfmac: brcmf_fweh_register event handler registered for ROAM [ 1795.720839] brcmfmac: brcmf_fweh_register event handler registered for MIC_ERROR [ 1795.720841] brcmfmac: brcmf_fweh_register event handler registered for SET_SSID [ 1795.720844] brcmfmac: brcmf_fweh_register event handler registered for PFN_NET_FOUND [ 1795.720846] brcmfmac: brcmf_fweh_register event handler registered for IF [ 1795.720848] brcmfmac: brcmf_fweh_register event handler registered for P2P_PROBEREQ_MSG [ 1795.720850] brcmfmac: brcmf_fweh_register event handler registered for P2P_DISC_LISTEN_COMPLETE [ 1795.720852] brcmfmac: brcmf_fweh_register event handler registered for ACTION_FRAME_RX [ 1795.720854] brcmfmac: brcmf_fweh_register event handler registered for ACTION_FRAME_COMPLETE [ 1795.720856] brcmfmac: brcmf_fweh_register event handler registered for ACTION_FRAME_OFF_CHAN_COMPLETE [ 1795.720859] brcmfmac: brcmf_fweh_register event handler registered for PSK_SUP [ 1795.720861] brcmfmac: brcmf_fweh_register event handler registered for RSSI [ 1795.720863] brcmfmac: brcmf_fweh_register event handler registered for ESCAN_RESULT [ 1795.720866] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.720886] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.720923] brcmfmac: brcmf_sdio_isr Enter [ 1795.720969] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.721023] brcmfmac: brcmf_sdio_isr Enter [ 1795.721106] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.721126] brcmfmac: brcmf_cfg80211_attach Registering custom regulatory [ 1795.721314] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.722810] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.722898] brcmfmac: brcmf_sdio_isr Enter [ 1795.723054] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.723225] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.723234] brcmfmac: brcmf_sdio_isr Enter [ 1795.723297] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.723319] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.723497] brcmfmac: brcmf_sdio_isr Enter [ 1795.723559] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.723596] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.723772] brcmfmac: brcmf_sdio_isr Enter [ 1795.723833] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.723865] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.724043] brcmfmac: brcmf_sdio_isr Enter [ 1795.724104] brcmfmac: brcmf_setup_wiphybands nmode=1, vhtmode=1, bw_cap=(1, 7) [ 1795.724111] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.724142] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.724242] brcmfmac: brcmf_sdio_isr Enter [ 1795.724305] brcmfmac: brcmf_setup_wiphybands nchain=1 [ 1795.724311] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.724393] brcmfmac: brcmf_sdio_bus_rxctl Enter [ 1795.727710] brcmfmac: brcmf_sdio_isr Enter [ 1795.727840] brcmfmac: brcmf_sdio_bus_txctl Enter [ 1795.727877] brcmfmac: brcmf_sdio_bus_rxctl Enter

Date Modified	Username	Field	Change
2025-10-13 18:52	keriati	New Issue
2025-10-13 21:09	kali-bugreport	Note Added: 0020885
2025-10-13 22:04	keriati	Note Added: 0020886
2025-10-13 22:29	kali-bugreport	Note Added: 0020887
2025-10-14 08:37	keriati	Note Added: 0020892
2025-10-14 11:49	kali-bugreport	Note Edited: 0020887
2025-10-14 11:55	kali-bugreport	Note Added: 0020894
2025-10-14 18:11	kali-bugreport	Note Edited: 0020894
2025-10-14 18:58	keriati	Note Added: 0020895