Just noticed this in termux using shizuku :

rish -c ip a

68: wondertap0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
    link/ieee802.11/radiotap {some MAC address}brd ff:ff:ff:ff:ff:ff

i searched for wondertap0 ans found this:

https://android.googlesource.com/kernel/common-modules/wonder/+/refs/heads/android14-6.1/wondertap.c

Which is mosltly gibberish to me.

Wonder apparently is a driver for Protocol-X which enables virtual WiFi devices !!!

And i had a bit of a time finding anything else about it. Actually, i found a total of 1 thing. The source code.

https://android.googlesource.com/kernel/common-modules/wonder/+/refs/heads/android17-6.18

noticing it is meant to contact another device, and is acting maybe as a server and tunnel. But it isn’t just a link. It creates its own 80211x device and broadcast frequency.

But, what the hell is it? What does it do, what’s it for, what triggers it, who owns the device created, and what is it sending, how is it broadcasting?