wifi: ath11k: ipq6018 monitor mode is not working properly

[Legale Legage]

Hello.
I'm trying to use wifi monitor mode on ipq6018. Captured frames are
malformed. Tested with 2 diff kernels (4.4.60, 5.14) and two diff wifi
fw (2.6, 2.7) with the same result.

This is the same frame captured with ipq6018 device and other device
where monitor mode is good.
a.pcap - good frame
b.pcap - ipq6018 bad frame

capture log:

uname -a
Linux AP_44D1FABC0E5D 4.4.60 #0 SMP PREEMPT Sun Oct 30 18:03:10 2022
armv7l GNU/Linux

root at AP_44D1FABC0E5D:~# lspci -mnn
EMPTY

root at AP_44D1FABC0E5D:~# find /lib/firmware/ath11k/ -type f | xargs md5sum
4da75061213f0feebfffb08012a5c042  /lib/firmware/ath11k/IPQ6018/hw1.0/board-2.bin
105e71aab77b4329f7f238b6107d0981  /lib/firmware/ath11k/IPQ6018/hw1.0/board.bin
d7d615b13a2f6290588823061c111b7c
/lib/firmware/ath11k/IPQ6018/hw1.0/qdss_trace_config.bin
e5fd4f90ddbaec15464d405b2b397ef6  /lib/firmware/ath11k/IPQ6018/hw1.0/caldata.bin


root at AP_44D1FABC0E5D:~# dmesg | grep ath11k
[   13.355395] ath11k c000000.wifi: Not multipd architecture
[   13.355726] ath11k c000000.wifi: ipq6018 hw1.0
[   14.324779] ath11k c000000.wifi: chip_id 0x0 chip_family 0x4
board_id 0xff soc_id 0xffffffff
[   14.324806] ath11k c000000.wifi: fw_version 0x270206d0
fw_build_timestamp 2022-08-04 13:11 fw_build_id
QC_IMAGE_VERSION_STRING=WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
[   14.355336] ath11k c000000.wifi: qmi caldata downloaded: type: 2
[   17.564797] ath11k c000000.wifi: chip_id 0x0 chip_family 0x4
board_id 0xff soc_id 0xffffffff
[   17.564831] ath11k c000000.wifi: fw_version 0x270206d0
fw_build_timestamp 2022-08-04 13:11 fw_build_id
QC_IMAGE_VERSION_STRING=WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
[   17.578868] ath11k c000000.wifi: qmi caldata downloaded: type: 2
[   17.705747] applying ath11k-macs


root at AP_44D1FABC0E5D:~# iw phy phy1 interface add mon1 type monitor
root at AP_44D1FABC0E5D:~# ip link set mon1 up
root at AP_44D1FABC0E5D:~#
root at AP_44D1FABC0E5D:~# tcpdump -i mon1 -s 100 -c 20 -w /tmp/dump.cap
tcpdump: listening on mon1, link-type IEEE802_11_RADIO (802.11 plus
radiotap header), capture size 100 bytes
20 packets captured
92 packets received by filter
0 packets dropped by kernel
root at AP_44D1FABC0E5D:~# hexdump -C /tmp/dump.cap
00000000  d4 c3 b2 a1 02 00 04 00  00 00 00 00 00 00 00 00  |................|
00000010  64 00 00 00 7f 00 00 00  3a 50 8c 63 18 2b 03 00  |d.......:P.c.+..|
00000020  64 00 00 00 36 01 00 00  00 00 24 00 2f 48 10 00  |d...6.....$./H..|
00000030  96 2d fd 30 0e 00 00 00  40 16 6c 09 a0 00 a4 00  |.-.0.... at .l.....|
00000040  00 00 00 00 b5 a7 00 00  00 00 00 00 ac 11 02 00  |................|
00000050  00 00 b5 a7 80 00 00 00  ff ff ff ff ff ff f4 b7  |................|
00000060  8d 35 42 78 f4 b7 8d 35  42 78 40 7c 9f 31 ca a5  |.5Bx...5Bx@|.1..|
00000070  00 00 00 00 64 00 31 14  00 17 45 6e 67 69 4e 65  |....d.1...EngiNe|
00000080  74 2e 2e 2e 42 69 72 4c  69 6e 6b 2e 3a 50 8c 63  |t...BirLink.:P.c|
00000090  38 2c 03 00 64 00 00 00  ff 00 00 00 00 00 24 00  |8,..d.........$.|
000000a0  2f 48 10 00 96 5b fd 30  0e 00 00 00 00 16 6c 09  |/H...[.0......l.|
000000b0  a0 00 b7 00 00 00 00 00  c1 a7 00 00 00 00 00 00  |................|
000000c0  ac 11 02 00 00 00 c1 a7  80 00 00 00 ff ff ff ff  |................|
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 122070 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/ath11k/attachments/20221205/fd7c57ed/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: a.pcap
Type: application/octet-stream
Size: 297 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/ath11k/attachments/20221205/fd7c57ed/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: b.pcap
Type: application/octet-stream
Size: 259 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/ath11k/attachments/20221205/fd7c57ed/attachment-0003.obj>