Unless I am doing something wrong, bcm43xx is still not injecting. I put it into monitor mode channel 6 found some APs on channel 6. Power is 0 or -1 (when I know it's en extremely strong signal), injection tests failed on -9. Tried aireplay-ng -1, failed. Oh well. Unless I am doing something wrong like not loading it right or something. My atheros has no problem with injection, unless the Broadcom needs more steps on the loadup.