Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

wifi card BCM94360HMB no longer recognized by macos 12.1+ #1929

Closed
Lorys89 opened this issue Jan 17, 2022 · 74 comments
Closed

wifi card BCM94360HMB no longer recognized by macos 12.1+ #1929

Lorys89 opened this issue Jan 17, 2022 · 74 comments

Comments

@Lorys89
Copy link

Lorys89 commented Jan 17, 2022

the wifi card that has the problem is this : BCM94360HMB (AW-CB160H) (14e4 43a0) mini pcie half size 1.3gbps
Schermata 2022-01-17 alle 17 28 16
AzureWave-aw-AW-CB160H-Broadcom-BCM94360HMB-802-11AC-1300Mbps-Wireless-WIFI-WLAN-Bluetooth-4-0-Mini

up to macos 12.0.1 it worked fine, trying to upgrade to 12.1 crashed in verbose.
IMG_20220118_123845

by deactivating the wifi card from the bios, it is possible to update to 12.1 but then reactivating it does not start.
using bootarg lilubetaall and not deactivating the card from the bios you can upgrade to 12.2 beta using lan cable, but the wifi card will not work even on 12.2 beta.
the problem lies in the kext AirportBrcmFixup or plugin?
I await your opinions.

@Core-i99
Copy link

Core-i99 commented Jan 17, 2022

Why lilubetaall? Lilu already supports Monterey pretty much a long time now

@Lorys89
Copy link
Author

Lorys89 commented Jan 17, 2022

Why lilubetaall? Lilu already supports Monterey pretty much a long time now

it was one of the tests carried out.

@abenraj
Copy link

abenraj commented Jan 18, 2022

@Lorys89 Could you please try force-restarting your 12.1 installed system a few times, I'd suggest at least 10-15 counts just to be sure, and confirm if this boot kp is persistent? Make sure wifi module is on and also try without AirportBrcmFixup. Not a solution per se but could help provide some insights regarding AirportBrcmNIC PlugIn

@Lorys89
Copy link
Author

Lorys89 commented Jan 18, 2022

@Lorys89 Could you please try force-restarting your 12.1 installed system a few times, I'd suggest at least 10-15 counts just to be sure, and confirm if this boot kp is persistent? Make sure wifi module is on and also try without AirportBrcmFixup. Not a solution per se but could help provide some insights regarding AirportBrcmNIC PlugIn

i already tried what you say, the kp always comes back. i could not find anything to fix it, just disabling the wifi card fixes the boot. and weird thing using lilubetaall starts but the card doesn't work.

@abenraj
Copy link

abenraj commented Jan 18, 2022

Alright, in that case the only other suggestion I'm able to help provide is to try tinker around with ASPM values, I'd suggest starting with value=0 and working your way up. Recommend to inject using help of AirportBrcmFixup along with boot-arg brcmfx-aspm=value. Good luck!

@Lorys89
Copy link
Author

Lorys89 commented Jan 18, 2022

Alright, in that case the only other suggestion I'm able to help provide is to try tinker around with ASPM values, I'd suggest starting with value=0 and working your way up. Recommend to inject using help of AirportBrcmFixup along with boot-arg brcmfx-aspm=value. Good luck!

aspm is disabled by bios, never had aspm problems.

@Lorys89
Copy link
Author

Lorys89 commented Jan 18, 2022

I update you with new developments, I managed to have wifi working using the kext DebugEnhancer, I had inserted it to log and starting I found that the wifi works, if I remove it the wifi stops working.
removing the kext DebugEnhancer, I can start macos 12.2 beta 2 using bootargs -lilubetaall -brcmfxbeta, but the wifi doesn't work.
i tried the bootarg -brcmfx-alldrv there is no change, if i try to boot without kext DebugEnhancer i get error in verbose and it doesn't start macos and the same if i don't put the 2 bootarg -lilubetaall -brcmfxbeta .

iMac not work wifi.ioreg.zip
iMac wifi work good.ioreg.zip

@andreszerocross
Copy link

Can you upload your config.plist or EFI?? I need to check your configuration

@Lorys89
Copy link
Author

Lorys89 commented Jan 19, 2022

Can you upload your config.plist or EFI?? I need to check your configuration

Dell Optiplex 9020 USFF
EFI.zip

@dMatik02
Copy link

Same issue here, until 12.0.1 all worked flawlessly. Since 12.1 I get stuck in the same place, tried with aspm disabled in bios, tried with aspm enabled in bios and brcmfx-aspm=257 (with that value I get working ASPM in 12.0.1 without any issues), tried brcmfx-aspm=0, brcmfx-aspm 255, same, i get kp in same place. Will post my EFI bellow, ASUS X99 Deluxe (BCM94360HMB built in, pci14e4,43a0). Only way to boot is to disable the card in bios or spoof device id so AirPortBrcmNIC is not initialised.

Have to mention that in 12.0.1 even I can get ASPM working stable by enabling it in bios and using brcmfx-aspm=257. I can replicate same kernel panic in 12.0.1 by using brcmfx-aspm=258 (0x103) and get stuck in same place as now in 12.1 , so I thing Apple changed someting about ASPM in 12.1.

Tried same as above with 12.2b1, same behaviour.

Tried @Lorys89 solution, for me not working on 12.1.

KP without airportbrcmfixup

panic(cpu 2 caller 0xffffff801e7d5c53): Kernel trap at 0xffffff801e501082, type 14=page fault, registers:
CR0: 0x000000008001003b, CR2: 0xffffff954151b000, CR3: 0x0000000024a26000, CR4: 0x00000000001626e0
RAX: 0x0000000000583500, RBX: 0xffffff9541a9e000, RCX: 0x0000000000000300, RDX: 0x0000000000000800
RSP: 0xffffffd086e93888, RBP: 0xffffffd086e938a0, RSI: 0xffffff954151b000, RDI: 0xffffff9541a9e500
R8:  0x0000000000000004, R9:  0x0000000000000008, R10: 0x00000000ffffffff, R11: 0x00000000e0000000
R12: 0xffffff9541a9e000, R13: 0x0000000000000800, R14: 0xffffff954151ab00, R15: 0x0000000000000000
RFL: 0x0000000000010206, RIP: 0xffffff801e501082, CS:  0x0000000000000008, SS:  0x0000000000000000
Fault CR2: 0xffffff954151b000, Error code: 0x0000000000000000, Fault CPU: 0x2, PL: 0, VF: 10

Panicked task 0xffffff8ba868f670: 110 threads: pid 0: kernel_task
Backtrace (CPU 2), panicked thread: 0xffffff8ba87d1540, Frame : Return Address
0xffffffd086e932b0 : 0xffffff801e6860fd 
0xffffffd086e93300 : 0xffffff801e7e6095 
0xffffffd086e93340 : 0xffffff801e7d5863 
0xffffffd086e93390 : 0xffffff801e625a60 
0xffffffd086e933b0 : 0xffffff801e6864cd 
0xffffffd086e934d0 : 0xffffff801e685c86 
0xffffffd086e93530 : 0xffffff801ef16259 
0xffffffd086e935a0 : 0xffffff801e7d5c53 
0xffffffd086e93720 : 0xffffff801e7d5938 
0xffffffd086e93770 : 0xffffff801e625a60 
0xffffffd086e93790 : 0xffffff801e501082 
0xffffffd086e938a0 : 0xffffff802085e11e 
0xffffffd086e938f0 : 0xffffff802085d0f9 
0xffffffd086e939e0 : 0xffffff802083e1d3 
0xffffffd086e93a70 : 0xffffff802083d78c 
0xffffffd086e93ad0 : 0xffffff802066828c 
0xffffffd086e93b90 : 0xffffff802057c3b2 
0xffffffd086e93c60 : 0xffffff802057a938 
0xffffffd086e93cd0 : 0xffffff802057a4e1 
0xffffffd086e93d00 : 0xffffff801ee59ef0 
0xffffffd086e93d60 : 0xffffff802057b620 
0xffffffd086e93dd0 : 0xffffff801ee2e9fa 
0xffffffd086e93e30 : 0xffffff801ee2e565 
0xffffffd086e93ef0 : 0xffffff801ee2d560 
0xffffffd086e93f50 : 0xffffff801ee305c9 
0xffffffd086e93fa0 : 0xffffff801e62518e 
      Kernel Extensions in backtrace:
         com.apple.driver.AirPort.BrcmNIC(1400.1.1)[5836AF20-6464-3BF9-BD50-3312E2C73D90]@0xffffff802054f000->0xffffff8020aa9fff
            dependency: com.apple.driver.corecapture(1.0.4)[1A8E7B0A-B456-30AD-BD9F-7032D1A6E9DF]@0xffffff8021a23000->0xffffff8021a3cfff
            dependency: com.apple.driver.mDNSOffloadUserClient(1.0.1b8)[C294EE9A-A5C7-39F7-8756-A8E66AED42CE]@0xffffff80211e0000->0xffffff80211e4fff
            dependency: com.apple.iokit.IO80211FamilyLegacy(1200.12.2b1)[9E78AAB8-75A1-3070-87E4-C0A1B34ABEF4]@0xffffff80203ee000->0xffffff8020534fff
            dependency: com.apple.iokit.IONetworkingFamily(3.4)[8F50013F-1DAF-3503-8E71-6266FD3B3AD9]@0xffffff8020f4d000->0xffffff8020f63fff
            dependency: com.apple.iokit.IOPCIFamily(2.9)[F0A7BE4E-A81A-34BE-B032-EF7E61FB3C46]@0xffffff80211e7000->0xffffff8021211fff
            dependency: com.apple.iokit.IOSkywalkFamily(1.0)[D504070B-CF5A-36C4-8D49-7E9874EA6FA0]@0xffffff80212c6000->0xffffff802130dfff

Process name corresponding to current thread (0xffffff8ba87d1540): kernel_task
Boot args: npci=0x3000 alcid=7 -hbfx-disable-patch-pci root-dmg=file:///BaseSystem/BaseSystem.dmg chunklist-security-epoch=0 -chunklist-no-rev2-dev

Mac OS version:
Not yet set

Kernel version:
Darwin Kernel Version 21.3.0: Wed Dec  8 00:40:29 PST 2021; root:xnu-8019.80.11.111.1~1/RELEASE_X86_64
Kernel UUID: BF33B3E6-D84E-3D04-845D-DBC6A1CF4E3D
KernelCache slide: 0x000000001e400000
KernelCache base:  0xffffff801e600000
Kernel slide:      0x000000001e410000
Kernel text base:  0xffffff801e610000
__HIB  text base: 0xffffff801e500000
System model name: iMacPro1,1 (Mac-7BA5B2D9E42DDD94)
System shutdown begun: NO
Panic diags file unavailable, panic occurred prior to initialization
Hibernation exit count: 0

System uptime in nanoseconds: 580859175
Last Sleep:           absolute           base_tsc          base_nano
  Uptime  : 0x00000000229f392c
  Sleep   : 0x0000000000000000 0x0000000000000000 0x0000000000000000
  Wake    : 0x0000000000000000 0x0000322198ed4f22 0x0000000000000000
Zone info:
Foreign   : 0xffffff8025d5b000 - 0xffffff8025d68000
Native    : 0xffffff80753ea000 - 0xffffffa0753ea000
Readonly  : 0xffffff85420b6000 - 0xffffff86dba4a000
Metadata  : 0xfffffffddf12f000 - 0xfffffffdff626000
Bitmaps   : 0xfffffffdff626000 - 0xfffffffe11626000

KP with airportbrcmfixup

panic(cpu 2 caller 0xffffff801e7d5c53): Kernel trap at 0xffffff801e501082, type 14=page fault, registers:
CR0: 0x000000008001003b, CR2: 0xffffff954151b000, CR3: 0x0000000024a26000, CR4: 0x00000000001626e0
RAX: 0x0000000000583500, RBX: 0xffffff9541a9e000, RCX: 0x0000000000000300, RDX: 0x0000000000000800
RSP: 0xffffffd086e93888, RBP: 0xffffffd086e938a0, RSI: 0xffffff954151b000, RDI: 0xffffff9541a9e500
R8:  0x0000000000000004, R9:  0x0000000000000008, R10: 0x00000000ffffffff, R11: 0x00000000e0000000
R12: 0xffffff9541a9e000, R13: 0x0000000000000800, R14: 0xffffff954151ab00, R15: 0x0000000000000000
RFL: 0x0000000000010206, RIP: 0xffffff801e501082, CS:  0x0000000000000008, SS:  0x0000000000000000
Fault CR2: 0xffffff954151b000, Error code: 0x0000000000000000, Fault CPU: 0x2, PL: 0, VF: 10

Panicked task 0xffffff8ba868f670: 110 threads: pid 0: kernel_task
Backtrace (CPU 2), panicked thread: 0xffffff8ba87d1540, Frame : Return Address
0xffffffd086e932b0 : 0xffffff801e6860fd 
0xffffffd086e93300 : 0xffffff801e7e6095 
0xffffffd086e93340 : 0xffffff801e7d5863 
0xffffffd086e93390 : 0xffffff801e625a60 
0xffffffd086e933b0 : 0xffffff801e6864cd 
0xffffffd086e934d0 : 0xffffff801e685c86 
0xffffffd086e93530 : 0xffffff801ef16259 
0xffffffd086e935a0 : 0xffffff801e7d5c53 
0xffffffd086e93720 : 0xffffff801e7d5938 
0xffffffd086e93770 : 0xffffff801e625a60 
0xffffffd086e93790 : 0xffffff801e501082 
0xffffffd086e938a0 : 0xffffff802085e11e 
0xffffffd086e938f0 : 0xffffff802085d0f9 
0xffffffd086e939e0 : 0xffffff802083e1d3 
0xffffffd086e93a70 : 0xffffff802083d78c 
0xffffffd086e93ad0 : 0xffffff802066828c 
0xffffffd086e93b90 : 0xffffff802057c3b2 
0xffffffd086e93c60 : 0xffffff802057a938 
0xffffffd086e93cd0 : 0xffffff802057a4e1 
0xffffffd086e93d00 : 0xffffff801ee59ef0 
0xffffffd086e93d60 : 0xffffff802057b620 
0xffffffd086e93dd0 : 0xffffff801ee2e9fa 
0xffffffd086e93e30 : 0xffffff801ee2e565 
0xffffffd086e93ef0 : 0xffffff801ee2d560 
0xffffffd086e93f50 : 0xffffff801ee305c9 
0xffffffd086e93fa0 : 0xffffff801e62518e 
      Kernel Extensions in backtrace:
         com.apple.driver.AirPort.BrcmNIC(1400.1.1)[5836AF20-6464-3BF9-BD50-3312E2C73D90]@0xffffff802054f000->0xffffff8020aa9fff
            dependency: com.apple.driver.corecapture(1.0.4)[1A8E7B0A-B456-30AD-BD9F-7032D1A6E9DF]@0xffffff8021a23000->0xffffff8021a3cfff
            dependency: com.apple.driver.mDNSOffloadUserClient(1.0.1b8)[C294EE9A-A5C7-39F7-8756-A8E66AED42CE]@0xffffff80211e0000->0xffffff80211e4fff
            dependency: com.apple.iokit.IO80211FamilyLegacy(1200.12.2b1)[9E78AAB8-75A1-3070-87E4-C0A1B34ABEF4]@0xffffff80203ee000->0xffffff8020534fff
            dependency: com.apple.iokit.IONetworkingFamily(3.4)[8F50013F-1DAF-3503-8E71-6266FD3B3AD9]@0xffffff8020f4d000->0xffffff8020f63fff
            dependency: com.apple.iokit.IOPCIFamily(2.9)[F0A7BE4E-A81A-34BE-B032-EF7E61FB3C46]@0xffffff80211e7000->0xffffff8021211fff
            dependency: com.apple.iokit.IOSkywalkFamily(1.0)[D504070B-CF5A-36C4-8D49-7E9874EA6FA0]@0xffffff80212c6000->0xffffff802130dfff

Process name corresponding to current thread (0xffffff8ba87d1540): kernel_task
Boot args: npci=0x3000 alcid=7 -hbfx-disable-patch-pci root-dmg=file:///BaseSystem/BaseSystem.dmg chunklist-security-epoch=0 -chunklist-no-rev2-dev

Mac OS version:
Not yet set

Kernel version:
Darwin Kernel Version 21.3.0: Wed Dec  8 00:40:29 PST 2021; root:xnu-8019.80.11.111.1~1/RELEASE_X86_64
Kernel UUID: BF33B3E6-D84E-3D04-845D-DBC6A1CF4E3D
KernelCache slide: 0x000000001e400000
KernelCache base:  0xffffff801e600000
Kernel slide:      0x000000001e410000
Kernel text base:  0xffffff801e610000
__HIB  text base: 0xffffff801e500000
System model name: iMacPro1,1 (Mac-7BA5B2D9E42DDD94)
System shutdown begun: NO
Panic diags file unavailable, panic occurred prior to initialization
Hibernation exit count: 0

System uptime in nanoseconds: 580859175
Last Sleep:           absolute           base_tsc          base_nano
  Uptime  : 0x00000000229f392c
  Sleep   : 0x0000000000000000 0x0000000000000000 0x0000000000000000
  Wake    : 0x0000000000000000 0x0000322198ed4f22 0x0000000000000000
Zone info:
Foreign   : 0xffffff8025d5b000 - 0xffffff8025d68000
Native    : 0xffffff80753ea000 - 0xffffffa0753ea000
Readonly  : 0xffffff85420b6000 - 0xffffff86dba4a000
Metadata  : 0xfffffffddf12f000 - 0xfffffffdff626000
Bitmaps   : 0xfffffffdff626000 - 0xfffffffe11626000


EFI.zip
imacpro.zip

@Lorys89 Lorys89 changed the title wifi card no longer recognized by macos 12.1 wifi card BCM94360HMB no longer recognized by macos 12.1+ Jan 19, 2022
@davidAlaBer
Copy link

I have the same card and the same issue. Sorry but not an expert in debugging. I use @Lorys89 efi and the same hardware.

@beelzebozox86
Copy link

beelzebozox86 commented Jan 21, 2022

ASUS z170-Deluxe has the same combo card. Can confirm that 12.1 won't boot unless Bluetooth and WIFI are disabled in BIOS with BrcmPatchRAM-2.6.1 BlueToothFixup.kext enabled.

@dMatik02
Copy link

@beelzebozox86 can you post your efi?

@dMatik02
Copy link

dMatik02 commented Jan 22, 2022

I can confirm as per @Lorys89 finding, DebugEnhancer.kext and -v boot argument is mandatory to boot BCM94360HMB on 12.1 if not we get this KP:

panic(cpu 10 caller 0xffffff801ffd78d3): Kernel trap at 0xffffff801fd01082, type 14=page fault, registers:
CR0: 0x000000008001003b, CR2: 0xffffff8bb85a5000, CR3: 0x0000000035d13000, CR4: 0x00000000001626e0
RAX: 0x00000000014c2500, RBX: 0xffffff8bb9a67000, RCX: 0x0000000000000300, RDX: 0x0000000000000800
RSP: 0xffffffd08f87b818, RBP: 0xffffffd08f87b830, RSI: 0xffffff8bb85a5000, RDI: 0xffffff8bb9a67500
R8:  0x0000000000000004, R9:  0x0000000000000008, R10: 0x00000000ffffffff, R11: 0x00000000e0000000
R12: 0xffffff8bb9a67000, R13: 0x0000000000000800, R14: 0xffffff8bb85a4b00, R15: 0x0000000000000000
RFL: 0x0000000000010206, RIP: 0xffffff801fd01082, CS:  0x0000000000000008, SS:  0x0000000000000010
Fault CR2: 0xffffff8bb85a5000, Error code: 0x0000000000000000, Fault CPU: 0xa, PL: 0, VF: 10

Panicked task 0xffffff9086498670: 128 threads: pid 0: kernel_task
Backtrace (CPU 10), panicked thread: 0xffffff86ecc02000, Frame : Return Address
0xffffffd08f87b240 : 0xffffff801fe87ddd mach_kernel : _handle_debugger_trap + 0x41d
0xffffffd08f87b290 : 0xffffff801ffe7d15 mach_kernel : _kdp_i386_trap + 0x145
0xffffffd08f87b2d0 : 0xffffff801ffd74e3 mach_kernel : _kernel_trap + 0x533
0xffffffd08f87b320 : 0xffffff801fe27a60 mach_kernel : _return_from_trap + 0xe0
0xffffffd08f87b340 : 0xffffff801fe881ad mach_kernel : _DebuggerTrapWithState + 0xad
0xffffffd08f87b460 : 0xffffff801fe87966 mach_kernel : _panic_trap_to_debugger + 0x2b6
0xffffffd08f87b4c0 : 0xffffff80207160b9 mach_kernel : _panic + 0x54
0xffffffd08f87b530 : 0xffffff801ffd78d3 mach_kernel : _sync_iss_to_iks + 0x2c3
0xffffffd08f87b6b0 : 0xffffff801ffd75b8 mach_kernel : _kernel_trap + 0x608
0xffffffd08f87b700 : 0xffffff801fe27a60 mach_kernel : _return_from_trap + 0xe0
0xffffffd08f87b720 : 0xffffff801fd01082 
0xffffffd08f87b830 : 0xffffff802205d11e com.apple.driver.AirPort.BrcmNIC : _otp_read_pci + 0xbd
0xffffffd08f87b880 : 0xffffff802205c0f9 com.apple.driver.AirPort.BrcmNIC : _initvars_srom_pci + 0x1bd
0xffffffd08f87b970 : 0xffffff802203d1d3 com.apple.driver.AirPort.BrcmNIC : _si_doattach + 0x9c1
0xffffffd08f87ba00 : 0xffffff802203c78c com.apple.driver.AirPort.BrcmNIC : _si_attach + 0x5c
0xffffffd08f87ba60 : 0xffffff8021e6728c com.apple.driver.AirPort.BrcmNIC : _wlc_attach + 0xaf
0xffffffd08f87bb20 : 0xffffff8021d7b3b2 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC8wlcStartEv + 0x198
0xffffffd08f87bbf0 : 0xffffff8021d79938 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC10startGatedEP9IOService + 0x444
0xffffffd08f87bc60 : 0xffffff8021d794e1 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC10_doCommandEP8OSObjectPvS2_S2_S2_ + 0x4b
0xffffffd08f87bc90 : 0xffffff802065a160 mach_kernel : __ZN13IOCommandGate9runActionEPFiP8OSObjectPvS2_S2_S2_ES2_S2_S2_S2_ + 0xb0
0xffffffd08f87bcf0 : 0xffffff8021d7a620 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC5startEP9IOService + 0x3dc
0xffffffd08f87bd60 : 0xffffff8023e70f3c as.lvs1974.AirportBrcmFixup : __ZN6BRCMFX5startEP9IOServiceS1_ + 0x2dc
0xffffffd08f87bdd0 : 0xffffff802062ec2a mach_kernel : __ZN9IOService14startCandidateEPS_ + 0x11a
0xffffffd08f87be30 : 0xffffff802062e795 mach_kernel : __ZN9IOService15probeCandidatesEP12OSOrderedSet + 0xe75
0xffffffd08f87bef0 : 0xffffff802062d790 mach_kernel : __ZN9IOService14doServiceMatchEj + 0x3d0
0xffffffd08f87bf50 : 0xffffff8020630839 mach_kernel : __ZN15_IOConfigThread4mainEPvi + 0x189
0xffffffd08f87bfa0 : 0xffffff801fe2718e mach_kernel : _call_continuation + 0x2e
      Kernel Extensions in backtrace:
         as.lvs1974.AirportBrcmFixup(2.1.3)[C20D7792-FF2B-39ED-8E8B-8CEE49575869]@0xffffff8023e6d000->0xffffff8023e7ffff
            dependency: as.vit9696.Lilu(1.5.9)[B051298C-0FFC-32A7-B0D6-CB0DE0B793C0]@0xffffff8023da5000->0xffffff8023dcffff
            dependency: com.apple.iokit.IOPCIFamily(2.9)[023CD3FF-4EFC-3455-89C2-FF8BD98013EB]@0xffffff80229e6000->0xffffff8022a10fff
         com.apple.driver.AirPort.BrcmNIC(1400.1.1)[8317BA9A-1DCA-3511-B6A6-422C6DB36026]@0xffffff8021d4e000->0xffffff80222a8fff
            dependency: com.apple.driver.corecapture(1.0.4)[71A27A2B-02AA-398B-9F77-1AC1C44EDF3D]@0xffffff8023223000->0xffffff802323cfff
            dependency: com.apple.driver.mDNSOffloadUserClient(1.0.1b8)[BB22514A-F590-3FAE-B6FC-D7ABD4F7E1B9]@0xffffff80229df000->0xffffff80229e3fff
            dependency: com.apple.iokit.IO80211FamilyLegacy(1200.12.2b1)[D73065D2-A7FE-35CE-A8C4-E0FBFFCCED6B]@0xffffff8021bed000->0xffffff8021d33fff
            dependency: com.apple.iokit.IONetworkingFamily(3.4)[39332FD1-54B0-3F6A-9FF1-2233888F6C5A]@0xffffff802274c000->0xffffff8022762fff
            dependency: com.apple.iokit.IOPCIFamily(2.9)[023CD3FF-4EFC-3455-89C2-FF8BD98013EB]@0xffffff80229e6000->0xffffff8022a10fff
            dependency: com.apple.iokit.IOSkywalkFamily(1.0)[1430AB44-3A66-32B0-B918-E3B0E71D5E83]@0xffffff8022ac5000->0xffffff8022b0cfff

Process name corresponding to current thread (0xffffff86ecc02000): kernel_task
Boot args: npci=0x3000 agdpmod=pikera keepsyms=1 debug=0x100 brcmfx-country=#a chunklist-security-epoch=0 -chunklist-no-rev2-dev

Mac OS version:
21C52

Kernel version:
Darwin Kernel Version 21.2.0: Sun Nov 28 20:28:54 PST 2021; root:xnu-8019.61.5~1/RELEASE_X86_64
Kernel UUID: E32C293C-7D8B-327C-A335-6AAD250A4881
KernelCache slide: 0x000000001fc00000
KernelCache base:  0xffffff801fe00000
Kernel slide:      0x000000001fc10000
Kernel text base:  0xffffff801fe10000
__HIB  text base: 0xffffff801fd00000
System model name: A263,8201
System shutdown begun: NO
Panic diags file available: YES (0x0)
Hibernation exit count: 0

System uptime in nanoseconds: 4805020094
Last Sleep:           absolute           base_tsc          base_nano
  Uptime  : 0x000000011e66cdd5
  Sleep   : 0x0000000000000000 0x0000000000000000 0x0000000000000000
  Wake    : 0x0000000000000000 0x0000022434e9f538 0x0000000000000000
Zone info:
Foreign   : 0xffffff8037048000 - 0xffffff8037055000
Native    : 0xffffff8086318000 - 0xffffffa086318000
Readonly  : 0xffffff8552fe4000 - 0xffffff86ec978000
Metadata  : 0xffffffedf01c1000 - 0xffffffee106b4000
Bitmaps   : 0xffffffee106b4000 - 0xffffffee226b4000

As @Lorys89 said "DebugEnhancer.kext not work from recovery, work on os already installed", can you make debug enhancer.kext to be able to work from recovery to see if we can also boot 12.1 installer and 12.1 recovery.

@beelzebozox86
Copy link

beelzebozox86 commented Jan 22, 2022

@dMatik02 an you post your efi?
EFI.zip
Here you go.

@Andrey1970AppleLife
Copy link
Contributor

CC @lvs1974

@Ur4ela
Copy link

Ur4ela commented Jan 22, 2022

Same problem with this card, doesn't work with 12.1 and 12.2 Monterey.

panic(cpu 2 caller 0xffffff802bdd5c53): Kernel trap at 0xffffff802bb01082, type 14=page fault, registers:
CR0: 0x000000008001003b, CR2: 0xffffff99dade2000, CR3: 0x0000000035bca000, CR4: 0x00000000001626e0
RAX: 0xfffffff19a7f0d00, RBX: 0xffffff8b755d2800, RCX: 0x0000000000000300, RDX: 0x0000000000000800
RSP: 0xffffffd04cf83818, RBP: 0xffffffd04cf83830, RSI: 0xffffff99dade2000, RDI: 0xffffff8b755d2d00
R8: 0x0000000000000004, R9: 0x0000000000000002, R10: 0x00000000ffffffff, R11: 0x00000000f8000000
R12: 0xffffff8b755d2800, R13: 0x0000000000000800, R14: 0xffffff99dade1b00, R15: 0x0000000000000000
RFL: 0x0000000000010286, RIP: 0xffffff802bb01082, CS: 0x0000000000000008, SS: 0x0000000000000000
Fault CR2: 0xffffff99dade2000, Error code: 0x0000000000000000, Fault CPU: 0x2, PL: 0, VF: 10

Panicked task 0xffffff8b750d5670: 106 threads: pid 0: kernel_task
Backtrace (CPU 2), panicked thread: 0xffffff950ebbb000, Frame : Return Address
0xffffffd04cf83240 : 0xffffff802bc860fd mach_kernel : _handle_debugger_trap + 0x41d
0xffffffd04cf83290 : 0xffffff802bde6095 mach_kernel : _kdp_i386_trap + 0x145
0xffffffd04cf832d0 : 0xffffff802bdd5863 mach_kernel : _kernel_trap + 0x533
0xffffffd04cf83320 : 0xffffff802bc25a60 mach_kernel : _return_from_trap + 0xe0
0xffffffd04cf83340 : 0xffffff802bc864cd mach_kernel : _DebuggerTrapWithState + 0xad
0xffffffd04cf83460 : 0xffffff802bc85c86 mach_kernel : _panic_trap_to_debugger + 0x2b6
0xffffffd04cf834c0 : 0xffffff802c516259 mach_kernel : _panic + 0x54
0xffffffd04cf83530 : 0xffffff802bdd5c53 mach_kernel : _sync_iss_to_iks + 0x2c3
0xffffffd04cf836b0 : 0xffffff802bdd5938 mach_kernel : _kernel_trap + 0x608
0xffffffd04cf83700 : 0xffffff802bc25a60 mach_kernel : _return_from_trap + 0xe0
0xffffffd04cf83720 : 0xffffff802bb01082
0xffffffd04cf83830 : 0xffffff802de5e11e com.apple.driver.AirPort.BrcmNIC : _otp_read_pci + 0xbd
0xffffffd04cf83880 : 0xffffff802de5d0f9 com.apple.driver.AirPort.BrcmNIC : _initvars_srom_pci + 0x1bd
0xffffffd04cf83970 : 0xffffff802de3e1d3 com.apple.driver.AirPort.BrcmNIC : _si_doattach + 0x9c1
0xffffffd04cf83a00 : 0xffffff802de3d78c com.apple.driver.AirPort.BrcmNIC : _si_attach + 0x5c
0xffffffd04cf83a60 : 0xffffff802dc6828c com.apple.driver.AirPort.BrcmNIC : _wlc_attach + 0xaf
0xffffffd04cf83b20 : 0xffffff802db7c3b2 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC8wlcStartEv + 0x198
0xffffffd04cf83bf0 : 0xffffff802db7a938 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC10startGatedEP9IOService + 0x444
0xffffffd04cf83c60 : 0xffffff802db7a4e1 com.apple.driver.AirPort.BrcmNIC : _ZN15AirPort_BrcmNIC10_doCommandEP8OSObjectPvS2_S2_S2 + 0x4b
0xffffffd04cf83c90 : 0xffffff802c459ef0 mach_kernel : _ZN13IOCommandGate9runActionEPFiP8OSObjectPvS2_S2_S2_ES2_S2_S2_S2 + 0xb0
0xffffffd04cf83cf0 : 0xffffff802db7b620 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC5startEP9IOService + 0x3dc
0xffffffd04cf83d60 : 0xffffff802fbd6f3c as.lvs1974.AirportBrcmFixup : _ZN6BRCMFX5startEP9IOServiceS1 + 0x2dc
0xffffffd04cf83dd0 : 0xffffff802c42e9fa mach_kernel : _ZN9IOService14startCandidateEPS + 0x11a
0xffffffd04cf83e30 : 0xffffff802c42e565 mach_kernel : __ZN9IOService15probeCandidatesEP12OSOrderedSet + 0xe75
0xffffffd04cf83ef0 : 0xffffff802c42d560 mach_kernel : __ZN9IOService14doServiceMatchEj + 0x3d0
0xffffffd04cf83f50 : 0xffffff802c4305c9 mach_kernel : __ZN15_IOConfigThread4mainEPvi + 0x189
0xffffffd04cf83fa0 : 0xffffff802bc2518e mach_kernel : _call_continuation + 0x2e
Kernel Extensions in backtrace:
as.lvs1974.AirportBrcmFixup(2.1.3)[C20D7792-FF2B-39ED-8E8B-8CEE49575869]com.apple.0xffffff802fbd3000-com.apple.driver.0xffffff802fbe5fff
dependency: as.vit9696.Lilu(1.5.9)[B051298C-0FFC-32A7-B0D6-CB0DE0B793C0]com.apple.0xffffff802fba5000-com.apple.driver.0xffffff802fbcffff
dependency: com.apple.iokit.IOPCIFamily(2.9)[F0A7BE4E-A81A-34BE-B032-EF7E61FB3C46]com.apple.0xffffff802e7e7000-com.apple.driver.0xffffff802e811fff
com.apple.driver.AirPort.BrcmNIC(1400.1.1)[5836AF20-6464-3BF9-BD50-3312E2C73D90]com.apple.0xffffff802db4f000-com.apple.driver.0xffffff802e0a9fff
dependency: com.apple.driver.corecapture(1.0.4)[1A8E7B0A-B456-30AD-BD9F-7032D1A6E9DF]com.apple.0xffffff802f023000-com.apple.driver.0xffffff802f03cfff
dependency: com.apple.driver.mDNSOffloadUserClient(1.0.1b8)[C294EE9A-A5C7-39F7-8756-A8E66AED42CE]com.apple.0xffffff802e7e0000-com.apple.driver.0xffffff802e7e4fff
dependency: com.apple.iokit.IO80211FamilyLegacy(1200.12.2b1)[9E78AAB8-75A1-3070-87E4-C0A1B34ABEF4]com.apple.0xffffff802d9ee000-com.apple.driver.0xffffff802db34fff
dependency: com.apple.iokit.IONetworkingFamily(3.4)[8F50013F-1DAF-3503-8E71-6266FD3B3AD9]com.apple.0xffffff802e54d000-com.apple.driver.0xffffff802e563fff
dependency: com.apple.iokit.IOPCIFamily(2.9)[F0A7BE4E-A81A-34BE-B032-EF7E61FB3C46]com.apple.0xffffff802e7e7000-com.apple.driver.0xffffff802e811fff
dependency: com.apple.iokit.IOSkywalkFamily(1.0)[D504070B-CF5A-36C4-8D49-7E9874EA6FA0]com.apple.0xffffff802e8c6000-com.apple.driver.0xffffff802e90dfff

Process name corresponding to current thread (0xffffff950ebbb000): kernel_task
Boot args: -v -brcmfxdbg keepsyms=1 msgbuf=1048576 debag=0x100 root-dmg=file:///BaseSystem/BaseSystem.dmg

Mac OS version:
Not yet set

Kernel version:
Darwin Kernel Version 21.3.0: Wed Dec 8 00:40:29 PST 2021; root:xnu-8019.80.11.111.1~1/RELEASE_X86_64
Kernel UUID: BF33B3E6-D84E-3D04-845D-DBC6A1CF4E3D
KernelCache slide: 0x000000002ba00000
KernelCache base: 0xffffff802bc00000
Kernel slide: 0x000000002ba10000
Kernel text base: 0xffffff802bc10000
__HIB text base: 0xffffff802bb00000
System model name: MacBookAir7,1 (Mac-9F18E312C5C2BF0B)
System shutdown begun: NO
Panic diags file unavailable, panic occurred prior to initialization
Hibernation exit count: 0

System uptime in nanoseconds: 4978196077
Last Sleep: absolute base_tsc base_nano
Uptime : 0x000000012a5ad237
Sleep : 0x0000000000000000 0x0000000000000000 0x0000000000000000
Wake : 0x0000000000000000 0x0000001115dc4c30 0x0000000000000000
Zone info:
Foreign : 0xffffff8035fe3000 - 0xffffff8035ff0000
Native : 0xffffff8041e5a000 - 0xffffffa041e5a000
Readonly : 0xffffff850eb26000 - 0xffffff86a84ba000
Metadata : 0xffffffed12e37000 - 0xffffffed32ef6000
Bitmaps : 0xffffffed32ef6000 - 0xffffffed35ef6000
last started kext at 2751693452: as.acidanthera.BrcmPatchRAM3 2.6.2 (addr 0xffffff80301de000, size 53248)
loaded kexts:
as.acidanthera.BrcmPatchRAM3 2.6.2
com.insanelymac.RealtekRTL8111 2.4.2
com.sinet3k.Sinetek-rtsx 4
org.emlydinesh.driver.ApplePS2SmartTouchPad 4.6.8
org.emlydinesh.driver.ApplePS2Keyboard 4.6.8
org.emlydinesh.driver.ApplePS2Controller 4.6.8
as.vit9696.RestrictEvents 1.0.5
as.acidanthera.BrcmFirmwareStore 2.6.2
as.acidanthera.BlueToolFixup 2.6.2
ru.usrsse2.SMCBatteryManager 1.2.8
as.vit9696.VirtualSMC 1.2.8
org.vanilla.driver.CPUFriend 1.2.5
as.vit9696.AppleALC 1.6.8
as.vit9696.WhateverGreen 1.5.6
as.lvs1974.AirportBrcmFixup 2.1.3
as.vit9696.Lilu 1.5.9
com.apple.iokit.SCSITaskUserClient 452.60.2
com.apple.driver.AppleFileSystemDriver 3.0.1
com.apple.filesystems.tmpfs 1
com.apple.filesystems.lifs 1
com.apple.filesystems.hfs.kext 582.60.2
com.apple.BootCache 40
com.apple.AppleFSCompression.AppleFSCompressionTypeZlib 1.0.0
com.apple.AppleFSCompression.AppleFSCompressionTypeDataless 1.0.0d1
com.apple.driver.AppleSmartBatteryManager 161.0.0
com.apple.filesystems.apfs 1933.61.1
com.apple.private.KextAudit 1.0
com.apple.driver.AppleAHCIPort 351
com.apple.driver.AirPort.BrcmNIC 1400.1.1
com.apple.driver.AppleIntelCPUPowerManagementClient 222.0.0
com.apple.driver.AppleRTC 2.0.1
com.apple.driver.AppleACPIButtons 6.1
com.apple.driver.AppleHPET 1.8
com.apple.driver.AppleSMBIOS 2.1
com.apple.driver.AppleACPIEC 6.1
com.apple.driver.AppleAPIC 1.7
com.apple.AppleSystemPolicy 2.0.0
com.apple.nke.applicationfirewall 402
com.apple.iokit.IOKitRegistryCompatibility 1
com.apple.iokit.EndpointSecurity 1
com.apple.Dont_Steal_Mac_OS_X 7.0.0
com.apple.driver.AppleIntelCPUPowerManagement 222.0.0
com.apple.kec.AppleEncryptedArchive 1
com.apple.driver.usb.cdc 5.0.0
com.apple.driver.usb.networking 5.0.0
com.apple.driver.usb.AppleUSBHostCompositeDevice 1.2
com.apple.driver.usb.AppleUSBHub 1.2
com.apple.iokit.IOSCSIMultimediaCommandsDevice 452.60.2
com.apple.iokit.IOBDStorageFamily 1.8
com.apple.iokit.IODVDStorageFamily 1.8
com.apple.iokit.IOCDStorageFamily 1.8
com.apple.driver.AppleUSBMergeNub 900.4.2
com.apple.driver.AppleBSDKextStarter 3
com.apple.iokit.IOSurface 302.11.1
com.apple.filesystems.hfs.encodings.kext 1
com.apple.driver.usb.AppleUSBHostPacketFilter 1.0
com.apple.iokit.IOUSBFamily 900.4.2
com.apple.driver.AppleXsanScheme 3
com.apple.iokit.IOAHCISerialATAPI 268
com.apple.iokit.IOAHCIBlockStorage 333
com.apple.iokit.IOAHCIFamily 295
com.apple.iokit.IO80211FamilyLegacy 1200.12.2b1
com.apple.iokit.IOSkywalkFamily 1.0
com.apple.driver.mDNSOffloadUserClient 1.0.1b8
com.apple.driver.corecapture 1.0.4
com.apple.driver.usb.AppleUSBXHCIPCI 1.2
com.apple.driver.usb.AppleUSBXHCI 1.2
com.apple.driver.usb.AppleUSBEHCIPCI 1.2
com.apple.driver.usb.AppleUSBEHCI 1.2
com.apple.driver.AppleEFINVRAM 2.1
com.apple.driver.AppleEFIRuntime 2.1
com.apple.iokit.IOHIDFamily 2.0.0
com.apple.iokit.IOSMBusFamily 1.1
com.apple.iokit.IOTimeSyncFamily 1000.11
com.apple.iokit.IONetworkingFamily 3.4
com.apple.driver.DiskImages 493.0.0
com.apple.iokit.IOBluetoothFamily 9.0.0
com.apple.iokit.IOReportFamily 47
com.apple.security.quarantine 4
com.apple.security.sandbox 300.0
com.apple.kext.AppleMatch 1.0.0d1
com.apple.iokit.CoreAnalyticsFamily 1
com.apple.driver.AppleSSE 1.0
com.apple.driver.AppleKeyStore 2
com.apple.driver.AppleUSBTDM 532.40.7
com.apple.iokit.IOUSBMassStorageDriver 209.40.6
com.apple.iokit.IOSCSIBlockCommandsDevice 452.60.2
com.apple.iokit.IOStorageFamily 2.1
com.apple.iokit.IOSCSIArchitectureModelFamily 452.60.2
com.apple.driver.AppleMobileFileIntegrity 1.0.5
com.apple.security.AppleImage4 4.2.0
com.apple.kext.CoreTrust 1
com.apple.driver.AppleFDEKeyStore 28.30
com.apple.driver.AppleEffaceableStorage 1.0
com.apple.driver.AppleCredentialManager 1.0
com.apple.driver.KernelRelayHost 1
com.apple.iokit.IOUSBHostFamily 1.2
com.apple.driver.AppleUSBHostMergeProperties 1.2
com.apple.driver.usb.AppleUSBCommon 1.0
com.apple.driver.AppleBusPowerController 1.0
com.apple.driver.AppleSEPManager 1.0.1
com.apple.driver.IOSlaveProcessor 1
com.apple.driver.AppleACPIPlatform 6.1
com.apple.driver.AppleSMC 3.1.9
com.apple.iokit.IOPCIFamily 2.9
com.apple.iokit.IOACPIFamily 1.4
com.apple.driver.watchdog 1
com.apple.kec.pthread 1
com.apple.ke

@lvs1974
Copy link

lvs1974 commented Jan 23, 2022

DebugEnhancer adds nothing except boot delay (because of extensive logging).
Please try attached kext with a delay (and there is no country-code fix).
AirportBrcmFixup-2.1.4-DEBUG.zip

@dMatik02
Copy link

Works without debug enhancer & -v bootarg: 12.1, 12.1 Installer, 12.1 Recovery, 12.2 Recovery
Not Working: 12.2 Installer, 12.2

KP 12.2 : Installer&Installed

panic(cpu 4 caller 0xffffff801ebd5c53): Kernel trap at 0xffffff801e901082, type 14=page fault, registers:
CR0: 0x000000008001003b, CR2: 0xffffff8bb8df0000, CR3: 0x0000000034bc1000, CR4: 0x00000000001626e0
RAX: 0x00000009993cbd00, RBX: 0xffffff95521bb800, RCX: 0x0000000000000300, RDX: 0x0000000000000800
RSP: 0xffffffd08e76b818, RBP: 0xffffffd08e76b830, RSI: 0xffffff8bb8df0000, RDI: 0xffffff95521bbd00
R8:  0x0000000000000004, R9:  0x0000000000000008, R10: 0x00000000ffffffff, R11: 0x00000000e0000000
R12: 0xffffff95521bb800, R13: 0x0000000000000800, R14: 0xffffff8bb8defb00, R15: 0x0000000000000000
RFL: 0x0000000000010206, RIP: 0xffffff801e901082, CS:  0x0000000000000008, SS:  0x0000000000000000
Fault CR2: 0xffffff8bb8df0000, Error code: 0x0000000000000000, Fault CPU: 0x4, PL: 0, VF: 10

Panicked task 0xffffff9551bf0670: 129 threads: pid 0: kernel_task
Backtrace (CPU 4), panicked thread: 0xffffff9084bdcaa0, Frame : Return Address
0xffffffd08e76b240 : 0xffffff801ea860fd mach_kernel : _handle_debugger_trap + 0x41d
0xffffffd08e76b290 : 0xffffff801ebe6095 mach_kernel : _kdp_i386_trap + 0x145
0xffffffd08e76b2d0 : 0xffffff801ebd5863 mach_kernel : _kernel_trap + 0x533
0xffffffd08e76b320 : 0xffffff801ea25a60 mach_kernel : _return_from_trap + 0xe0
0xffffffd08e76b340 : 0xffffff801ea864cd mach_kernel : _DebuggerTrapWithState + 0xad
0xffffffd08e76b460 : 0xffffff801ea85c86 mach_kernel : _panic_trap_to_debugger + 0x2b6
0xffffffd08e76b4c0 : 0xffffff801f316259 mach_kernel : _panic + 0x54
0xffffffd08e76b530 : 0xffffff801ebd5c53 mach_kernel : _sync_iss_to_iks + 0x2c3
0xffffffd08e76b6b0 : 0xffffff801ebd5938 mach_kernel : _kernel_trap + 0x608
0xffffffd08e76b700 : 0xffffff801ea25a60 mach_kernel : _return_from_trap + 0xe0
0xffffffd08e76b720 : 0xffffff801e901082 
0xffffffd08e76b830 : 0xffffff8020c5e11e com.apple.driver.AirPort.BrcmNIC : _otp_read_pci + 0xbd
0xffffffd08e76b880 : 0xffffff8020c5d0f9 com.apple.driver.AirPort.BrcmNIC : _initvars_srom_pci + 0x1bd
0xffffffd08e76b970 : 0xffffff8020c3e1d3 com.apple.driver.AirPort.BrcmNIC : _si_doattach + 0x9c1
0xffffffd08e76ba00 : 0xffffff8020c3d78c com.apple.driver.AirPort.BrcmNIC : _si_attach + 0x5c
0xffffffd08e76ba60 : 0xffffff8020a6828c com.apple.driver.AirPort.BrcmNIC : _wlc_attach + 0xaf
0xffffffd08e76bb20 : 0xffffff802097c3b2 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC8wlcStartEv + 0x198
0xffffffd08e76bbf0 : 0xffffff802097a938 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC10startGatedEP9IOService + 0x444
0xffffffd08e76bc60 : 0xffffff802097a4e1 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC10_doCommandEP8OSObjectPvS2_S2_S2_ + 0x4b
0xffffffd08e76bc90 : 0xffffff801f259ef0 mach_kernel : __ZN13IOCommandGate9runActionEPFiP8OSObjectPvS2_S2_S2_ES2_S2_S2_S2_ + 0xb0
0xffffffd08e76bcf0 : 0xffffff802097b620 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC5startEP9IOService + 0x3dc
0xffffffd08e76bd60 : 0xffffff8022a4d089 as.lvs1974.AirportBrcmFixup : __ZN6BRCMFX5startEP9IOServiceS1_ + 0x269
0xffffffd08e76bdd0 : 0xffffff801f22e9fa mach_kernel : __ZN9IOService14startCandidateEPS_ + 0x11a
0xffffffd08e76be30 : 0xffffff801f22e565 mach_kernel : __ZN9IOService15probeCandidatesEP12OSOrderedSet + 0xe75
0xffffffd08e76bef0 : 0xffffff801f22d560 mach_kernel : __ZN9IOService14doServiceMatchEj + 0x3d0
0xffffffd08e76bf50 : 0xffffff801f2305c9 mach_kernel : __ZN15_IOConfigThread4mainEPvi + 0x189
0xffffffd08e76bfa0 : 0xffffff801ea2518e mach_kernel : _call_continuation + 0x2e
      Kernel Extensions in backtrace:
         as.lvs1974.AirportBrcmFixup(2.1.4)[46640E57-6156-37A6-8596-D8DEABEAE35F]@0xffffff8022a49000->0xffffff8022a5bfff
            dependency: as.vit9696.Lilu(1.5.9)[8561D0E0-E51D-3555-A780-915710EEEEE4]@0xffffff80229a5000->0xffffff8022a2cfff
            dependency: com.apple.iokit.IOPCIFamily(2.9)[F0A7BE4E-A81A-34BE-B032-EF7E61FB3C46]@0xffffff80215e7000->0xffffff8021611fff
         com.apple.driver.AirPort.BrcmNIC(1400.1.1)[5836AF20-6464-3BF9-BD50-3312E2C73D90]@0xffffff802094f000->0xffffff8020ea9fff
            dependency: com.apple.driver.corecapture(1.0.4)[1A8E7B0A-B456-30AD-BD9F-7032D1A6E9DF]@0xffffff8021e23000->0xffffff8021e3cfff
            dependency: com.apple.driver.mDNSOffloadUserClient(1.0.1b8)[C294EE9A-A5C7-39F7-8756-A8E66AED42CE]@0xffffff80215e0000->0xffffff80215e4fff
            dependency: com.apple.iokit.IO80211FamilyLegacy(1200.12.2b1)[9E78AAB8-75A1-3070-87E4-C0A1B34ABEF4]@0xffffff80207ee000->0xffffff8020934fff
            dependency: com.apple.iokit.IONetworkingFamily(3.4)[8F50013F-1DAF-3503-8E71-6266FD3B3AD9]@0xffffff802134d000->0xffffff8021363fff
            dependency: com.apple.iokit.IOPCIFamily(2.9)[F0A7BE4E-A81A-34BE-B032-EF7E61FB3C46]@0xffffff80215e7000->0xffffff8021611fff
            dependency: com.apple.iokit.IOSkywalkFamily(1.0)[D504070B-CF5A-36C4-8D49-7E9874EA6FA0]@0xffffff80216c6000->0xffffff802170dfff

Process name corresponding to current thread (0xffffff9084bdcaa0): kernel_task
Boot args: npci=0x3000 keepsyms=1 alcid=7 -brcmfxdbg -liludbgall -bsdmgroot chunklist-security-epoch=0 -chunklist-no-rev2-dev

Mac OS version:
Not yet set

Kernel version:
Darwin Kernel Version 21.3.0: Wed Dec  8 00:40:29 PST 2021; root:xnu-8019.80.11.111.1~1/RELEASE_X86_64
Kernel UUID: BF33B3E6-D84E-3D04-845D-DBC6A1CF4E3D
KernelCache slide: 0x000000001e800000
KernelCache base:  0xffffff801ea00000
Kernel slide:      0x000000001e810000
Kernel text base:  0xffffff801ea10000
__HIB  text base: 0xffffff801e900000
System model name: iMacPro1,1 (Mac-7BA5B2D9E42DDD94)
System shutdown begun: NO
Panic diags file unavailable, panic occurred prior to initialization
Hibernation exit count: 0

System uptime in nanoseconds: 4285880509
Last Sleep:           absolute           base_tsc          base_nano
  Uptime  : 0x00000000ff755d3d
  Sleep   : 0x0000000000000000 0x0000000000000000 0x0000000000000000
  Wake    : 0x0000000000000000 0x000000ffbb12dff1 0x0000000000000000
Zone info:
Foreign   : 0xffffff8035ef6000 - 0xffffff8035f03000
Native    : 0xffffff8085133000 - 0xffffffa085133000
Readonly  : 0xffffff8551dff000 - 0xffffff86eb793000
Metadata  : 0xfffffff7daf19000 - 0xfffffff7fb40c000
Bitmaps   : 0xfffffff7fb40c000 - 0xfffffff80d40c000

EFI.zip

@Lorys89
Copy link
Author

Lorys89 commented Jan 23, 2022

DebugEnhancer adds nothing except boot delay (because of extensive logging). Please try attached kext with a delay (and there is no country-code fix). AirportBrcmFixup-2.1.4-DEBUG.zip

first of all thanks for your effort, I tried the kext without using DebugEnhancer, and start os 12.2 b2 already installed, does not start revovery nor installation, and obviously does not work the fix country #a

in the previous method with DebugEnhancer worked the fix country #a

@lvs1974
Copy link

lvs1974 commented Jan 23, 2022

@Lorys89 : you are welcome.
Could you try another attached version - it has all patches, only delays are increased, and ASPM=0 by default (if it is not overridden in boot-args or dev properties).
AirportBrcmFixup-2.1.4-DEBUG.zip

@dMatik02
Copy link

@lvs1974 even this has here same behaviour, work: 12.1 (installer, installed, recovery), 12.2 recovery. Not working :12.2 (installer, installed)

After some log comparing to 12.0.1 (where this particular card works even without AirportBrcmFixup), i can see that the kernel panic occurs when mac os (12.1+) tries to initialize the card.

12.0.1

(IOPCIFamily) <IOPCIFamily`IOPCIConfigurator::configure(unsigned int)> [ PCI configuration end, bridges 1, devices 56 ]

(IOPCIFamily) <IOPCIFamily`IOPCIConfigurator::configure(unsigned int)> [ PCI configuration begin ]

kPEDisableScreen 1

initialize_screen: b=C0000000, w=00000D70, h=000005A0, r=00003600, d=00000001

kPEEnableScreen 1

(IOPCIFamily) <IOPCIFamily`IOPCIConfigurator::configure(unsigned int)> console relocated to 0xc0000000

(IOPCIFamily) <IOPCIFamily`IOPCIConfigurator::configure(unsigned int)> [ PCI configuration end, bridges 12, devices 73 ]

(IOAHCIFamily) <IOAHCIFamily`IOAHCIPortMultiplierGlobals::IOAHCIPortMultiplierGlobals()> [AHCI][PML][00000000]+IOAHCIPortMultiplierGlobals::IOAHCIPortMultiplierGlobals

(IOAHCIFamily) <IOAHCIFamily`IOAHCIPortMultiplierGlobals::IOAHCIPortMultiplierGlobals()> [AHCI][PML][00000000]-IOAHCIPortMultiplierGlobals::IOAHCIPortMultiplierGlobals

(IO80211FamilyLegacy) <IO80211FamilyLegacy`IO80211Controller::init(OSDictionary*)> AirPort_BrcmNIC::init IO80211Legacy_kexts-25.6 "IO80211Legacy_kexts-25.6" Oct 14 2021 00:38:10

(AirPortBrcmNIC) <AirPortBrcmNIC`osl_iolog_withtimestamp> ARPT: 4.307652: AirPort_Brcm43XX:probe:, this[0xc424de1761563e3f]  score[1400]

12.1

(IOPCIFamily) <IOPCIFamily`IOPCIConfigurator::configure(unsigned int)> [ PCI configuration end, bridges 1, devices 56 ]

IOPCIFamily) <IOPCIFamily`IOPCIConfigurator::configure(unsigned int)> [ PCI configuration begin ]

kPEDisableScreen 1

initialize_screen: b=C0000000, w=00000D70, h=000005A0, r=00003600, d=00000001

kPEEnableScreen 1

(IOPCIFamily) <IOPCIFamily`IOPCIConfigurator::configure(unsigned int)> console relocated to 0xc0000000

(IOPCIFamily) <IOPCIFamily`IOPCIConfigurator::configure(unsigned int)> [ PCI configuration end, bridges 12, devices 73 ]

(IOAHCIFamily) <IOAHCIFamily`IOAHCIPortMultiplierGlobals::IOAHCIPortMultiplierGlobals()> [AHCI][PML][00000000]+IOAHCIPortMultiplierGlobals::IOAHCIPortMultiplierGlobals

(IOAHCIFamily) <IOAHCIFamily`IOAHCIPortMultiplierGlobals::IOAHCIPortMultiplierGlobals()> [AHCI][PML][00000000]-IOAHCIPortMultiplierGlobals::IOAHCIPortMultiplierGlobals

(IO80211FamilyLegacy) <IO80211FamilyLegacy`IO80211Controller::init(OSDictionary*)> AirPort_BrcmNIC::init IO80211Legacy_kexts-30.1 "IO80211Legacy_kexts-30.1" Nov 30 2021 21:31:36

2022-01-24 00:48:41.199609+0200  localhost kernel[0]: (AirPortBrcmNIC) <AirPortBrcmNIC`osl_iolog_withtimestamp> ARPT: 2.199608: AirPort_Brcm43XX:probe:, this[0xd513a1a21ce6c57]  score[1400]

The kp (12.1 without time delay) occurs here:

(IO80211FamilyLegacy) <IO80211FamilyLegacy IO80211Controller::init(OSDictionary*)> AirPort_BrcmNIC::init IO80211Legacy_kexts-30.1 "IO80211Legacy_kexts-30.1" Nov 30 2021 21:31:36

It seems that at least for me adding time delay to "AirportBrcmFixup-2.1.4-DEBUG" made a difference and I can boot 12.1.

I think there were some changes made between "IO80211Legacy_kexts-25.6" (12.0.1) and "IO80211Legacy_kexts-30.1" (12.1+) witch somehow fail to init this cards.

I don't think this is releated to us but I leave it here > https://gitmemory.cn/repo/OpenIntelWireless/itlwm/issues/738 <

@lvs1974
Copy link

lvs1974 commented Jan 24, 2022

Hello everybody!
AirportBrcmFixup-2.1.4-DEBUG_7.zip
Could you test attached version in recovery/installer/regular boot please?
And would be great if you could test it in Big Sur also!

Thank you for testing!

@lvs1974
Copy link

lvs1974 commented Jan 24, 2022

And one more version for testing (try to fix panic in installer):
AirportBrcmFixup-2.1.4-DEBUG_8.zip

@abenraj
Copy link

abenraj commented Jan 24, 2022

@lvs1974 Massive thank you for your time and effort!

Can confirm, the last attached version finally fixes the intermittent boot-kp issue which is also present with legacy card DW1820a 14e4:43a3 since 12.0 b4+. On 12.2 (21D48) the loading bar now moves farther than before (this does potentially look like the delay workaround is indeed helpful here with the successful driver init) but again, another similar KP is still lurking, now at a later stage, which to be noted, is once again intermittent, not persistent, similar to the initial boot-kp scenario, which seems to have been fixed with the delay. Not sure if AirportBrcmNIC is causing the same kp, now later than boot init?


panic(cpu 1 caller 0xffffff80187d5bf3): Kernel trap at 0xffffff8018501082, type 14=page fault, registers:
CR0: 0x000000008001003b, CR2: 0xffffff99daaee000, CR3: 0x000000002e82a000, CR4: 0x00000000003626e0
RAX: 0x0000000000055500, RBX: 0xffffff99dab43000, RCX: 0x0000000000000300, RDX: 0x0000000000000800
RSP: 0xffffffd04fefb7d8, RBP: 0xffffffd04fefb7f0, RSI: 0xffffff99daaee000, RDI: 0xffffff99dab43500
R8:  0x0000000000000004, R9:  0x0000000000000001, R10: 0x00000000ffffffff, R11: 0x00000000e0000000
R12: 0xffffff99dab43000, R13: 0x0000000000000800, R14: 0xffffff99daaedb00, R15: 0x0000000000000000
RFL: 0x0000000000010206, RIP: 0xffffff8018501082, CS:  0x0000000000000008, SS:  0x0000000000000000
Fault CR2: 0xffffff99daaee000, Error code: 0x0000000000000000, Fault CPU: 0x1, PL: 0, VF: 10

Panicked task 0xffffff99db061670: 119 threads: pid 0: kernel_task
Backtrace (CPU 1), panicked thread: 0xffffff90419e8000, Frame : Return Address
0xffffffd04fefb200 : 0xffffff8018685ffd 
0xffffffd04fefb250 : 0xffffff80187e6035 
0xffffffd04fefb290 : 0xffffff80187d5803 
0xffffffd04fefb2e0 : 0xffffff8018625a60 
0xffffffd04fefb300 : 0xffffff80186863cd 
0xffffffd04fefb420 : 0xffffff8018685b86 
0xffffffd04fefb480 : 0xffffff8018f16409 
0xffffffd04fefb4f0 : 0xffffff80187d5bf3 
0xffffffd04fefb670 : 0xffffff80187d58d8 
0xffffffd04fefb6c0 : 0xffffff8018625a60 
0xffffffd04fefb6e0 : 0xffffff8018501082 
0xffffffd04fefb7f0 : 0xffffff801a85e11e 
0xffffffd04fefb840 : 0xffffff801c950952 
0xffffffd04fefb880 : 0xffffff801a85d0f9 
0xffffffd04fefb970 : 0xffffff801a83e1d3 
0xffffffd04fefba00 : 0xffffff801a83d78c 
0xffffffd04fefba60 : 0xffffff801a66828c 
0xffffffd04fefbb20 : 0xffffff801a57c3b2 
0xffffffd04fefbbf0 : 0xffffff801a57a938 
0xffffffd04fefbc60 : 0xffffff801a57a4e1 
0xffffffd04fefbc90 : 0xffffff8018e5a0a0 
0xffffffd04fefbcf0 : 0xffffff801a57b620 
0xffffffd04fefbd60 : 0xffffff801c94ecb9 
0xffffffd04fefbdd0 : 0xffffff8018e2ebaa 
0xffffffd04fefbe30 : 0xffffff8018e2e715 
0xffffffd04fefbef0 : 0xffffff8018e2d710 
0xffffffd04fefbf50 : 0xffffff8018e30779 
0xffffffd04fefbfa0 : 0xffffff801862518e 
      Kernel Extensions in backtrace:
         as.lvs1974.AirportBrcmFixup(2.1.4)[D72C0F46-3F9C-3339-93E5-747ECF8B6C28]@0xffffff801c94b000->0xffffff801c95efff
            dependency: as.vit9696.Lilu(1.5.9)[B051298C-0FFC-32A7-B0D6-CB0DE0B793C0]@0xffffff801c5a9000->0xffffff801c5d3fff
            dependency: com.apple.iokit.IOPCIFamily(2.9)[897B72E0-B98F-30BA-8CB2-4E5E469CE4B6]@0xffffff801b1e7000->0xffffff801b211fff
         com.apple.driver.AirPort.BrcmNIC(1400.1.1)[DF790A78-11AE-336D-91B9-598FA83DB34B]@0xffffff801a54f000->0xffffff801aaa9fff
            dependency: com.apple.driver.corecapture(1.0.4)[F86FE48A-AF97-3FA9-965C-BC40CE3E28CA]@0xffffff801ba25000->0xffffff801ba3efff
            dependency: com.apple.driver.mDNSOffloadUserClient(1.0.1b8)[9B70EE1B-9CAB-3C79-BFDA-B70DC66A8450]@0xffffff801b1e0000->0xffffff801b1e4fff
            dependency: com.apple.iokit.IO80211FamilyLegacy(1200.12.2b1)[210E54A5-E336-3882-B54C-16D88FD128FB]@0xffffff801a3ee000->0xffffff801a534fff
            dependency: com.apple.iokit.IONetworkingFamily(3.4)[58A9BF44-6CDC-3A24-A588-5D72E2378E2A]@0xffffff801af4d000->0xffffff801af63fff
            dependency: com.apple.iokit.IOPCIFamily(2.9)[897B72E0-B98F-30BA-8CB2-4E5E469CE4B6]@0xffffff801b1e7000->0xffffff801b211fff
            dependency: com.apple.iokit.IOSkywalkFamily(1.0)[F2724203-8AF4-39E2-841E-92B08446E426]@0xffffff801b2c6000->0xffffff801b30dfff

Process name corresponding to current thread (0xffffff90419e8000): kernel_task
Boot args: igfxrpsc=1 -igfxbls alcid=21 brcmfx-aspm=67 chunklist-security-epoch=0 -chunklist-no-rev2-dev chunklist-security-epoch=0 -chunklist-no-rev2-dev

Mac OS version:
21D48

Kernel version:
Darwin Kernel Version 21.3.0: Wed Jan  5 21:37:58 PST 2022; root:xnu-8019.80.24~20/RELEASE_X86_64
Kernel UUID: 93729D02-FE6F-355B-BA76-BA930AA7103F
KernelCache slide: 0x0000000018400000
KernelCache base:  0xffffff8018600000
Kernel slide:      0x0000000018410000
Kernel text base:  0xffffff8018610000
__HIB  text base: 0xffffff8018500000
System model name: MacBookPro13,1 (Mac-473D31EABEB93F9B)
System shutdown begun: NO
Panic diags file available: YES (0x0)
Hibernation exit count: 0

System uptime in nanoseconds: 4119670952
Last Sleep:           absolute           base_tsc          base_nano
  Uptime  : 0x00000000f58d3865
  Sleep   : 0x0000000000000000 0x0000000000000000 0x0000000000000000
  Wake    : 0x0000000000000000 0x00000007e7a89e0d 0x0000000000000000
Zone info:
Foreign   : 0xffffff802f028000 - 0xffffff802f035000
Native    : 0xffffff804183b000 - 0xffffffa04183b000
Readonly  : 0xffffff850e507000 - 0xffffff86a7e9b000
Metadata  : 0xfffffff01c3bc000 - 0xfffffff03c4e5000
Bitmaps   : 0xfffffff03c4e5000 - 0xfffffff040ce5000
last started kext at 2848721144: as.acidanthera.BrcmPatchRAM3	2.6.1 (addr 0xffffff801cc0e000, size 53248)

@lvs1974
Copy link

lvs1974 commented Jan 24, 2022

@aben-ab: your panic report is useless for me, it does not contain any symbols. You have to use boot-arg keepsyms=1.

@abenraj
Copy link

abenraj commented Jan 24, 2022

@lvs1974 Sorry about that! Here is the log with the symbols:

panic(cpu 1 caller 0xffffff8013bd5bf3): Kernel trap at 0xffffff8013901082, type 14=page fault, registers:
CR0: 0x000000008001003b, CR2: 0xffffff9509dee000, CR3: 0x0000000029c2a000, CR4: 0x00000000003626e0
RAX: 0xffffffffffed3d00, RBX: 0xffffff9509cc1800, RCX: 0x0000000000000300, RDX: 0x0000000000000800
RSP: 0xffffffd04d94b7d8, RBP: 0xffffffd04d94b7f0, RSI: 0xffffff9509dee000, RDI: 0xffffff9509cc1d00
R8:  0x0000000000000004, R9:  0x0000000000000001, R10: 0x00000000ffffffff, R11: 0x00000000e0000000
R12: 0xffffff9509cc1800, R13: 0x0000000000000800, R14: 0xffffff9509dedb00, R15: 0x0000000000000000
RFL: 0x0000000000010286, RIP: 0xffffff8013901082, CS:  0x0000000000000008, SS:  0x0000000000000010
Fault CR2: 0xffffff9509dee000, Error code: 0x0000000000000000, Fault CPU: 0x1, PL: 0, VF: 10

Panicked task 0xffffff8b6fe19670: 119 threads: pid 0: kernel_task
Backtrace (CPU 1), panicked thread: 0xffffff8b6ffda540, Frame : Return Address
0xffffffd04d94b200 : 0xffffff8013a85ffd mach_kernel : _handle_debugger_trap + 0x41d
0xffffffd04d94b250 : 0xffffff8013be6035 mach_kernel : _kdp_i386_trap + 0x145
0xffffffd04d94b290 : 0xffffff8013bd5803 mach_kernel : _kernel_trap + 0x533
0xffffffd04d94b2e0 : 0xffffff8013a25a60 mach_kernel : _return_from_trap + 0xe0
0xffffffd04d94b300 : 0xffffff8013a863cd mach_kernel : _DebuggerTrapWithState + 0xad
0xffffffd04d94b420 : 0xffffff8013a85b86 mach_kernel : _panic_trap_to_debugger + 0x2b6
0xffffffd04d94b480 : 0xffffff8014316409 mach_kernel : _panic + 0x54
0xffffffd04d94b4f0 : 0xffffff8013bd5bf3 mach_kernel : _sync_iss_to_iks + 0x2c3
0xffffffd04d94b670 : 0xffffff8013bd58d8 mach_kernel : _kernel_trap + 0x608
0xffffffd04d94b6c0 : 0xffffff8013a25a60 mach_kernel : _return_from_trap + 0xe0
0xffffffd04d94b6e0 : 0xffffff8013901082 
0xffffffd04d94b7f0 : 0xffffff8015c5e11e com.apple.driver.AirPort.BrcmNIC : _otp_read_pci + 0xbd
0xffffffd04d94b840 : 0xffffff8017d50952 as.lvs1974.AirportBrcmFixup : __ZN6BRCMFX12otp_read_pciILm2EEExxxPvj + 0x72
0xffffffd04d94b880 : 0xffffff8015c5d0f9 com.apple.driver.AirPort.BrcmNIC : _initvars_srom_pci + 0x1bd
0xffffffd04d94b970 : 0xffffff8015c3e1d3 com.apple.driver.AirPort.BrcmNIC : _si_doattach + 0x9c1
0xffffffd04d94ba00 : 0xffffff8015c3d78c com.apple.driver.AirPort.BrcmNIC : _si_attach + 0x5c
0xffffffd04d94ba60 : 0xffffff8015a6828c com.apple.driver.AirPort.BrcmNIC : _wlc_attach + 0xaf
0xffffffd04d94bb20 : 0xffffff801597c3b2 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC8wlcStartEv + 0x198
0xffffffd04d94bbf0 : 0xffffff801597a938 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC10startGatedEP9IOService + 0x444
0xffffffd04d94bc60 : 0xffffff801597a4e1 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC10_doCommandEP8OSObjectPvS2_S2_S2_ + 0x4b
0xffffffd04d94bc90 : 0xffffff801425a0a0 mach_kernel : __ZN13IOCommandGate9runActionEPFiP8OSObjectPvS2_S2_S2_ES2_S2_S2_S2_ + 0xb0
0xffffffd04d94bcf0 : 0xffffff801597b620 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC5startEP9IOService + 0x3dc
0xffffffd04d94bd60 : 0xffffff8017d4ecb9 as.lvs1974.AirportBrcmFixup : __ZN6BRCMFX5startEP9IOServiceS1_ + 0x309
0xffffffd04d94bdd0 : 0xffffff801422ebaa mach_kernel : __ZN9IOService14startCandidateEPS_ + 0x11a
0xffffffd04d94be30 : 0xffffff801422e715 mach_kernel : __ZN9IOService15probeCandidatesEP12OSOrderedSet + 0xe75
0xffffffd04d94bef0 : 0xffffff801422d710 mach_kernel : __ZN9IOService14doServiceMatchEj + 0x3d0
0xffffffd04d94bf50 : 0xffffff8014230779 mach_kernel : __ZN15_IOConfigThread4mainEPvi + 0x189
0xffffffd04d94bfa0 : 0xffffff8013a2518e mach_kernel : _call_continuation + 0x2e
      Kernel Extensions in backtrace:
         as.lvs1974.AirportBrcmFixup(2.1.4)[D72C0F46-3F9C-3339-93E5-747ECF8B6C28]@0xffffff8017d4b000->0xffffff8017d5efff
            dependency: as.vit9696.Lilu(1.5.9)[B051298C-0FFC-32A7-B0D6-CB0DE0B793C0]@0xffffff80179a9000->0xffffff80179d3fff
            dependency: com.apple.iokit.IOPCIFamily(2.9)[897B72E0-B98F-30BA-8CB2-4E5E469CE4B6]@0xffffff80165e7000->0xffffff8016611fff
         com.apple.driver.AirPort.BrcmNIC(1400.1.1)[DF790A78-11AE-336D-91B9-598FA83DB34B]@0xffffff801594f000->0xffffff8015ea9fff
            dependency: com.apple.driver.corecapture(1.0.4)[F86FE48A-AF97-3FA9-965C-BC40CE3E28CA]@0xffffff8016e25000->0xffffff8016e3efff
            dependency: com.apple.driver.mDNSOffloadUserClient(1.0.1b8)[9B70EE1B-9CAB-3C79-BFDA-B70DC66A8450]@0xffffff80165e0000->0xffffff80165e4fff
            dependency: com.apple.iokit.IO80211FamilyLegacy(1200.12.2b1)[210E54A5-E336-3882-B54C-16D88FD128FB]@0xffffff80157ee000->0xffffff8015934fff
            dependency: com.apple.iokit.IONetworkingFamily(3.4)[58A9BF44-6CDC-3A24-A588-5D72E2378E2A]@0xffffff801634d000->0xffffff8016363fff
            dependency: com.apple.iokit.IOPCIFamily(2.9)[897B72E0-B98F-30BA-8CB2-4E5E469CE4B6]@0xffffff80165e7000->0xffffff8016611fff
            dependency: com.apple.iokit.IOSkywalkFamily(1.0)[F2724203-8AF4-39E2-841E-92B08446E426]@0xffffff80166c6000->0xffffff801670dfff

Process name corresponding to current thread (0xffffff8b6ffda540): kernel_task
Boot args: igfxrpsc=1 -igfxbls alcid=21 brcmfx-aspm=67 keepsyms=1 chunklist-security-epoch=0 -chunklist-no-rev2-dev chunklist-security-epoch=0 -chunklist-no-rev2-dev

Mac OS version:
21D48

Kernel version:
Darwin Kernel Version 21.3.0: Wed Jan  5 21:37:58 PST 2022; root:xnu-8019.80.24~20/RELEASE_X86_64
Kernel UUID: 93729D02-FE6F-355B-BA76-BA930AA7103F
KernelCache slide: 0x0000000013800000
KernelCache base:  0xffffff8013a00000
Kernel slide:      0x0000000013810000
Kernel text base:  0xffffff8013a10000
__HIB  text base: 0xffffff8013900000
System model name: MacBookPro13,1 (Mac-473D31EABEB93F9B)
System shutdown begun: NO
Panic diags file available: YES (0x0)
Hibernation exit count: 0

System uptime in nanoseconds: 4102053184
Last Sleep:           absolute           base_tsc          base_nano
  Uptime  : 0x00000000f4806549
  Sleep   : 0x0000000000000000 0x0000000000000000 0x0000000000000000
  Wake    : 0x0000000000000000 0x0000000792879835 0x0000000000000000
Zone info:
Foreign   : 0xffffff802a428000 - 0xffffff802a435000
Native    : 0xffffff803cbd7000 - 0xffffffa03cbd7000
Readonly  : 0xffffff85098a3000 - 0xffffff86a3237000
Metadata  : 0xffffffe3e583c000 - 0xffffffe405964000
Bitmaps   : 0xffffffe405964000 - 0xffffffe40a164000
last started kext at 2805037488: as.acidanthera.BrcmPatchRAM3	2.6.1 (addr 0xffffff801800e000, size 53248)

@lvs1974
Copy link

lvs1974 commented Jan 24, 2022

@aben-ab: is it a regular boot, or recovery / installation / update boot?
Can you remove brcmfx-aspm=67 from boot-args and try again?

@Lorys89
Copy link
Author

Lorys89 commented Jan 25, 2022

@aben-ab: thank you for the report and testing. I increased delays, could you test on more version, please? AirportBrcmFixup-2.1.4-DEBUG_11.zip

this version work good for me
I just used this version to re install from 0 monterey 12.2 and then it starts well and works recovery, between this version of kext and the subsequent ones that changes?

@Lorys89
Copy link
Author

Lorys89 commented Jan 25, 2022

for users running tests :
you do not have to use bootarg for aspm or fix country or patch in dev-propieties concerned the wifi, disable them and try the debug11 version.

@Lorys89
Copy link
Author

Lorys89 commented Jan 25, 2022

@lvs1974 I confirm that with debug11 I upgraded from 12.2 just installed to version 12.2 RC. obviously it worked well! so I say that debug11 is the version that works best!
(obviously starts everything)

for those who want to see my config
config.plist.zip

@abenraj
Copy link

abenraj commented Jan 25, 2022

@Lorys89 If I'm not mistaken, 2.1.4 final with configurable brcmfx-delay boot-arg already pushed to master. The debug_11 version uses around 10000ms I think.

At this point, this fix, should most certainly be considered a workaround till Apple hopefully patches the instabilities with IO80211Legacy_kexts-xxx . I say this coz other native legacy Broadcom chips are also affected by this weird bug since macOS 12.0b4+. I'm guessing final version of macOS 12 will most probably have these legacy card issues ironed out, even that I feel is too much asking from Apple. Totally wouldn't be surprised at all if macOS 13 drops support for some of these legacy cards too. Guess it'll be time soon to switch to original Apple modules.

@Lorys89
Copy link
Author

Lorys89 commented Jan 25, 2022

in the final version injecting 15000 everything works except installation from usb, in the debug11 version everything works.
I asked what changed. since I didn't inject any value.

@abenraj
Copy link

abenraj commented Jan 25, 2022

@Lorys89 Test with boot-arg 10000ms first and see if that works, if not increment down 1000ms till 5000ms. Debug_11 should have values between 10000ms to 5000ms I believe. I'm pretty certain the delay time initially started off with 1000ms all the way till 150000ms with debug_12 so you have an idea now.

@Lorys89
Copy link
Author

Lorys89 commented Jan 25, 2022

for the most exact value of that version I I wait @lvs1974, so as to apply it to the final version and try.

@davidAlaBer
Copy link

Hi! I just want to report I was in 12.0.1 and I updated to 12.1 (disabling wifi pcie card) and boot.
Then I add AirportBrcmFixup-2.1.4-DEBUG_11.zip and change delay to 150000.
Enable WIfi card in Bios and ResetNVRam and WIFI works again in my 9020 USFF.
Thanks a million for your efforts @lvs1974 @Lorys89 and all the people in this thread.

@Lorys89
Copy link
Author

Lorys89 commented Jan 26, 2022

Hi! I just want to report I was in 12.0.1 and I updated to 12.1 (disabling wifi pcie card) and boot. Then I add AirportBrcmFixup-2.1.4-DEBUG_11.zip and change delay to 150000. Enable WIfi card in Bios and ResetNVRam and WIFI works again in my 9020 USFF. Thanks a million for your efforts @lvs1974 @Lorys89 and all the people in this thread.

the debug11 version does not need to set delay, try without setting delay.

@davidAlaBer
Copy link

Hi! I just want to report I was in 12.0.1 and I updated to 12.1 (disabling wifi pcie card) and boot. Then I add AirportBrcmFixup-2.1.4-DEBUG_11.zip and change delay to 150000. Enable WIfi card in Bios and ResetNVRam and WIFI works again in my 9020 USFF. Thanks a million for your efforts @lvs1974 @Lorys89 and all the people in this thread.

the debug11 version does not need to set delay, try without setting delay.

Done!. Do I need to update OC or copy your config.plist for any other fine tuning? Remember we have exactly the same hardware.
Btw Airdrop works as well!

@Lorys89
Copy link
Author

Lorys89 commented Feb 23, 2022

update : with brcmfx-delay=27000 I am trying to boot successfully:

  • macOS 12.3 b4
  • recovery macOS 12.3 b4
  • usb full installer macOS 12.3 beta
    With values ​​less than 27000 start everything except usb installer.

@taga2013
Copy link

taga2013 commented Feb 23, 2022

Trying to install monterey 12.1/12.2/12.2.1 continues kernel panic wifi BCM94360. monterey 12.0.1 100%

Video = https://drive.google.com/file/d/16JIbojb2dXmkphsBIlKXTIp-Qj12A_Rd/view?usp=sharing

brcmfx-delay=27000
brcmfx-delay=30000

@usr-sse2
Copy link
Contributor

For me, adding delay allowed to boot, but it's not stable with any value. Got either freeze (delay too low) or stall (delay too high) too often, reverted to Intel module.

@lvs1974
Copy link

lvs1974 commented May 3, 2022

Hi guys,
could somebody try debug version from https://github.com/dortania/build-repo/releases/download/AirportBrcmFixup-bbcf9ff/AirportBrcmFixup-2.1.5-DEBUG.zip?
I fixed a path to AirPortBrcmNIC.kext in Monterey (it is located in IO80211FamilyLegacy.kext/Contents/PlugIns).
Probably Installer / Recovery scenario will work with a delay.

@growtopiajaw
Copy link

growtopiajaw commented May 12, 2022

macOS seems to still kernel panic occasionally even with the new AirportBrcmFixup-2.1.5-DEBUG.zip. With only brcmfx-delay=15000, macOS doesn't boot and is stuck on the console screen. (currently set to brcmfx-delay=30000)

log:

panic(cpu 0 caller 0xffffff80271d38f3): Kernel trap at 0xffffff8026f01082, type 14=page fault, registers:
CR0: 0x000000008001003b, CR2: 0xffffff903c825000, CR3: 0x0000000031017000, CR4: 0x00000000001626e0
RAX: 0x0000000000e8d500, RBX: 0xffffff903d6b2000, RCX: 0x0000000000000300, RDX: 0x0000000000000800
RSP: 0xffffffd04a49b7f8, RBP: 0xffffffd04a49b810, RSI: 0xffffff903c825000, RDI: 0xffffff903d6b2500
R8:  0x0000000000000004, R9:  0x0000000000000003, R10: 0x0000000018103000, R11: 0x0000000000000000
R12: 0xffffff903d6b2000, R13: 0x0000000000000800, R14: 0xffffff903c824b00, R15: 0x0000000000000000
RFL: 0x0000000000010206, RIP: 0xffffff8026f01082, CS:  0x0000000000000008, SS:  0x0000000000000000
Fault CR2: 0xffffff903c825000, Error code: 0x0000000000000000, Fault CPU: 0x0, PL: 0, VF: 10

Panicked task 0xffffff9509e41670: 171 threads: pid 0: kernel_task
Backtrace (CPU 0), panicked thread: 0xffffff99d6ac1550, Frame : Return Address
0xffffffd04a49b1a0 : 0xffffff8027083e2d mach_kernel : _handle_debugger_trap + 0x41d
0xffffffd04a49b1f0 : 0xffffff80271e3cb6 mach_kernel : _kdp_i386_trap + 0x116
0xffffffd04a49b230 : 0xffffff80271d350d mach_kernel : _kernel_trap + 0x51d
0xffffffd04a49b280 : 0xffffff8027023a60 mach_kernel : _return_from_trap + 0xe0
0xffffffd04a49b2a0 : 0xffffff80270841fd mach_kernel : _DebuggerTrapWithState + 0xad
0xffffffd04a49b3c0 : 0xffffff80270839b6 mach_kernel : _panic_trap_to_debugger + 0x2b6
0xffffffd04a49b420 : 0xffffff80279164bf mach_kernel : _panic + 0x84
0xffffffd04a49b510 : 0xffffff80271d38f3 mach_kernel : _sync_iss_to_iks + 0x2c3
0xffffffd04a49b690 : 0xffffff80271d35e2 mach_kernel : _kernel_trap + 0x5f2
0xffffffd04a49b6e0 : 0xffffff8027023a60 mach_kernel : _return_from_trap + 0xe0
0xffffffd04a49b700 : 0xffffff8026f01082 
0xffffffd04a49b810 : 0xffffff8029268ff6 com.apple.driver.AirPort.BrcmNIC : _otp_read_pci + 0xbd
0xffffffd04a49b860 : 0xffffff8029267fcb com.apple.driver.AirPort.BrcmNIC : _initvars_srom_pci + 0x1af
0xffffffd04a49b950 : 0xffffff8029248dd2 com.apple.driver.AirPort.BrcmNIC : _si_doattach + 0x9c0
0xffffffd04a49b9f0 : 0xffffff802924838c com.apple.driver.AirPort.BrcmNIC : _si_attach + 0x5c
0xffffffd04a49ba50 : 0xffffff802907323a com.apple.driver.AirPort.BrcmNIC : _wlc_attach + 0xaf
0xffffffd04a49bb00 : 0xffffff8028f8836a com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC8wlcStartEv + 0x198
0xffffffd04a49bbd0 : 0xffffff8028f868f0 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC10startGatedEP9IOService + 0x444
0xffffffd04a49bc40 : 0xffffff8028f86499 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC10_doCommandEP8OSObjectPvS2_S2_S2_ + 0x4d
0xffffffd04a49bc70 : 0xffffff8027848a64 mach_kernel : __ZN13IOCommandGate9runActionEPFiP8OSObjectPvS2_S2_S2_ES2_S2_S2_S2_ + 0xb4
0xffffffd04a49bcd0 : 0xffffff8028f875d8 com.apple.driver.AirPort.BrcmNIC : __ZN15AirPort_BrcmNIC5startEP9IOService + 0x3dc
0xffffffd04a49bd40 : 0xffffff802b0838c9 as.lvs1974.AirportBrcmFixup : __ZN6BRCMFX5startEP9IOServiceS1_ + 0x329
0xffffffd04a49bdc0 : 0xffffff802781c05e mach_kernel : __ZN9IOService14startCandidateEPS_ + 0x10e
0xffffffd04a49be20 : 0xffffff802781bb1e mach_kernel : __ZN9IOService15probeCandidatesEP12OSOrderedSet + 0xdde
0xffffffd04a49bef0 : 0xffffff802781abb0 mach_kernel : __ZN9IOService14doServiceMatchEj + 0x3e0
0xffffffd04a49bf50 : 0xffffff802781dbe7 mach_kernel : __ZN15_IOConfigThread4mainEPvi + 0x157
0xffffffd04a49bfa0 : 0xffffff802702318e mach_kernel : _call_continuation + 0x2e
      Kernel Extensions in backtrace:
         as.lvs1974.AirportBrcmFixup(2.1.5)[C346D36A-601E-3409-9A32-E41EF721BA27]@0xffffff802b080000->0xffffff802b093fff
            dependency: as.vit9696.Lilu(1.6.0)[E5BEEE8E-E840-3224-BF88-B0A191D0F0A6]@0xffffff802afdd000->0xffffff802b063fff
            dependency: com.apple.iokit.IOPCIFamily(2.9)[A436E92C-DE10-3718-AEF4-ED2A788A466A]@0xffffff8029bee000->0xffffff8029c19fff
         com.apple.driver.AirPort.BrcmNIC(1400.1.1)[472C435B-6435-3F79-B70F-5D37D9FCA900]@0xffffff8028f5b000->0xffffff80294b4fff
            dependency: com.apple.driver.corecapture(1.0.4)[DBEB1C47-C51E-36D8-911F-B1C50A3A5A88]@0xffffff802a443000->0xffffff802a45cfff
            dependency: com.apple.driver.mDNSOffloadUserClient(1.0.1b8)[4FBA2427-9C02-3A92-B50D-9477FED500C7]@0xffffff8029be7000->0xffffff8029bebfff
            dependency: com.apple.iokit.IO80211FamilyLegacy(1200.12.2b1)[3D7E24FF-CEF0-3208-91F9-7FF6B620FCB5]@0xffffff8028dfb000->0xffffff8028f3ffff
            dependency: com.apple.iokit.IONetworkingFamily(3.4)[62888EF4-277C-35B5-B9FA-DF8008BC5D28]@0xffffff8029956000->0xffffff802996cfff
            dependency: com.apple.iokit.IOPCIFamily(2.9)[A436E92C-DE10-3718-AEF4-ED2A788A466A]@0xffffff8029bee000->0xffffff8029c19fff
            dependency: com.apple.iokit.IOSkywalkFamily(1.0)[704F7BA6-0A24-3F85-9BEE-5932BA094DDD]@0xffffff8029ccd000->0xffffff8029d15fff

Process name corresponding to current thread (0xffffff99d6ac1550): kernel_task
Boot args: -v debug=0x100 brcmfx-delay=30000 keepsyms=1 alcid=28 -wegnoegpu -no_compat_check 

Mac OS version:
21E258

Kernel version:
Darwin Kernel Version 21.4.0: Fri Mar 18 00:45:05 PDT 2022; root:xnu-8020.101.4~15/RELEASE_X86_64
Kernel UUID: B6F8637B-0844-355F-8C82-60FA06149384
KernelCache slide: 0x0000000026e00000
KernelCache base:  0xffffff8027000000
Kernel slide:      0x0000000026e10000
Kernel text base:  0xffffff8027010000
__HIB  text base: 0xffffff8026f00000
System model name: MacBookPro12,1 (Mac-E43C1C25D4880AD6)
System shutdown begun: NO
Panic diags file available: YES (0x0)
Hibernation exit count: 0

System uptime in nanoseconds: 32854044211
Last Sleep:           absolute           base_tsc          base_nano
  Uptime  : 0x00000007a79da881
  Sleep   : 0x0000000000000000 0x0000000000000000 0x0000000000000000
  Wake    : 0x0000000000000000 0x000000075775a0cf 0x0000000000000000
Compressor Info: 0% of compressed pages limit (OK) and 0% of segments limit (OK) with 0 swapfiles and OK swap space
Zone info:
  Foreign : 0xffffff8031328000 - 0xffffff8031336000
  Native  : 0xffffff803d28b000 - 0xffffffa03d28b000
  Readonly: 0xffffff8509f57000 - 0xffffff86a38f0000
  Metadata: 0xfffffffe718b4000 - 0xfffffffe91974000
  Bitmaps : 0xfffffffe91974000 - 0xfffffffe94974000

@lvs1974
Copy link

lvs1974 commented May 12, 2022

@growtopiajaw: and what happens if increase delay (to 40000 for example)?

@growtopiajaw
Copy link

growtopiajaw commented May 12, 2022 via email

@chris1111
Copy link

chris1111 commented May 24, 2022

Thanks @lvs1974 for the release update I compile my self 2.1.5
Broadcom BCM943224HMS now working properly on Monterey 12.4 (21F79) HP Probook 650 G1
I use brcmfx-delay=15000 but AirPortBrcm4360_Injector.kext is disable I use DSDT patching for the Wifi

Multi reboot without issue

Screen Shot 2022-05-24 at 4 51 13 PM

@Lorys89
Copy link
Author

Lorys89 commented Sep 14, 2022

@lvs1974 Hello I did some tests in my various hacks, I bought Adapter from mini pcie to m2 ngff and m2 ngff to mini pcie and I tried a dw1820a and I have the same problem but with the Dw1560 works without bootarg delay, these tests done on a Dell 4 generation.
Then on a Dell 8 generation I mounted the bcm94360hmb via Adapter to m2 ngff and It works without delay bootarg, on this Dell all compatible cards work. My thought is that it depends on hardware, from 5 generation down you have this problem. It is not related to smbios since I have tried them all
What do you think?

@Lorys89
Copy link
Author

Lorys89 commented Sep 14, 2022

The strange thing is that the Dw1560 works without bootarg delay on 4 gen, the pci id of the card is 14e4 43b1

@usr-sse2
Copy link
Contributor

Probably older laptop is just slower so that the additional delay is not needed because it happens naturally.

@myconnekt
Copy link

On Thu, 12 May 2022 at 2:31 PM lvs1974 @.***> wrote:

@growtopiajaw https://github.com/growtopiajaw: and what happens if
increase delay (to 40000 for example)?


Reply to this email directly, view it on GitHub
#1929 (comment),
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AGDQTFSXY4BPOTLWY2LSLRTVJSQTLANCNFSM5MFDPACA
.
You are receiving this because you were mentioned.Message ID:
@.***>

It’ll just work sometimes, e.g on a fine day it’ll boot straight into the
desktop and some days it’ll kernel panic or it’ll get stuck in the console.
Very random to be honest. One theory I have is somehow the wifi card is
interfering with my usb devices.

Usually, it'll get stuck in console when I do cold boot of macOS in the morning with my usb devices plugged in. I'll try with my usb devices unplugged for the next few days and try to isolate the problem from other things.

I’ll update if I get anything.

I experience the same issue, and I also think that is USB related!
Usually if I have plugged usb devices , I get stuck at boot logo. Even without anything connected it gets stuck , and usually if get in bios and change usb settings from smart auto to auto, or vice versa I usually get macos to star

@Lorys89
Copy link
Author

Lorys89 commented Oct 18, 2022

In my gigabyte b450i build aorus pro wifi, I also have this problem with the dw1820a BCM94350ZAE, Big sur is fine but monterey and ventura only with delay, I decided to mount the dw1560 BCM94352Z and without delay starts all os

@Lorys89
Copy link
Author

Lorys89 commented Oct 18, 2022

The b450i gigabyte is not old hardware and I do not explain this problem.

@vit9696
Copy link
Contributor

vit9696 commented Jan 2, 2023

It might be best to avoid this piece of hardware for optimal stability. This is an Apple driver problem, not much we can do on our side.

@vit9696 vit9696 closed this as completed Jan 2, 2023
@USAJosh
Copy link

USAJosh commented Jun 18, 2023


Dell Vostro 3460
Intel Core i5-3210M @ 2.50GHz
NVIDIA GeForce GT 630M
HD4000
SanDisk Ultra 3D 500GB
BCM94360HMB

macOS Monterey 12.6.6
Using BCM94352HMB can boot normally, but after replacing BCM94360HMB, it cannot boot.
please help me.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests