pull request: mt76-fixes 2026-10-05

pull request: mt76-fixes 2026-10-05

[Felix Fietkau]

Hi,

Here's my mt76-fixes pull request for 7.3

- Felix

The following changes since commit d24e8ac715de2e16a53c144005b1863660a5fbea:

   Merge tag 'net-7.3-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net (2026-10-01 06:41:59 -0700)

are available in the Git repository at:

   https://github.com/nbd168/wireless tags/mt76-fixes-2026-10-05

for you to fetch changes up to 26aaf96f4a40af38318447c9592b983841f85628:

   wifi: mt76: move the channel survey when the channel changes (2026-10-05 10:48:07 +0200)

----------------------------------------------------------------
mt76 fixes for 7.3

- fix mt792x locking issues
- fix race conditions
- mt7996 offchannel fixes
- other minor fixes

----------------------------------------------------------------
Aaron Ma (1):
       wifi: mt76: mt7925: restore the legacy BSS after MLO teardown

Charlie-cy Wu (1):
       wifi: mt76: connac2: fill TXD spe_idx for connac2 fixed-rate frames

Cristian Papa (1):
       wifi: mt76: mt7603: initialize global station WCID

Devin Wittmayer (12):
       wifi: mt76: mt7921: fix lock inversion between dev->mutex and iflist_mtx
       wifi: mt76: mt7925: fix lock inversion between dev->mutex and iflist_mtx
       wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path
       wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path
       wifi: mt76: mt7921: fix the lock inversion in suspend and resume
       wifi: mt76: mt7925: fix the lock inversion in suspend and resume
       wifi: mt76: mt7921: honour FIF_FCSFAIL instead of hardcoding drop_err
       wifi: mt76: mt7925: don't put the band auto marker in TGID
       wifi: mt76: mt792x: pick the SAR table layout from the table itself
       wifi: mt76: take rcu_read_lock in the USB/SDIO tx completion path
       wifi: mt76: mt7925: cancel mlo_pm_work on the USB stop path
       wifi: mt76: move the channel survey when the channel changes

Eason Lai (2):
       wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory
       wifi: mt76: fix memory leak in USB TX path

Felix Fietkau (7):
       wifi: mt76: mt7996: program a link again if the driver holds it
       wifi: mt76: check the owner of a remain-on-channel request
       wifi: mt76: mt7996: take over connection monitoring
       wifi: mt76: clear offchannel state if a scan has no channel to restore
       wifi: mt76: account non-AQL frames per peer rather than per link
       wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails
       wifi: mt76: use ALTX queue for packets to disassociated stations

Junjie Cao (1):
       wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit

Mark Anthony Agarro (3):
       wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff
       wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err
       wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs

Myeonghun Pak (1):
       wifi: mt76: mt7615: restore DBDC state after ext PHY failure

Nicolas Cavallari (1):
       wifi: mt76: mt7915: disable rx napi when removing device

Ryan Leung (3):
       wifi: mt76: mt7915: publish wcid before MCU add commands
       wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add()
       wifi: mt76: fix wcid teardown ordering in mt76_reset_device()

Tao Gong (1):
       wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout

Zhao Li (1):
       wifi: mt76: mt7996: unlink TWT flow if the MCU rejects the agreement

  drivers/net/wireless/mediatek/mt76/channel.c         |   4 +++-
  drivers/net/wireless/mediatek/mt76/mac80211.c        |  18 ++++++++++++++--
  drivers/net/wireless/mediatek/mt76/mt76.h            |   9 ++++++++
  drivers/net/wireless/mediatek/mt76/mt7603/init.c     |   1 +
  drivers/net/wireless/mediatek/mt76/mt7615/init.c     |  17 +++++++++++----
  drivers/net/wireless/mediatek/mt76/mt7615/main.c     |   6 ++++--
  drivers/net/wireless/mediatek/mt76/mt76_connac_mac.c |  20 ++++++++++++------
  drivers/net/wireless/mediatek/mt76/mt76x02_mac.c     |  19 +++++++++++------
  drivers/net/wireless/mediatek/mt76/mt76x02_usb_mcu.c |   2 +-
  drivers/net/wireless/mediatek/mt76/mt7915/init.c     |   6 ++++++
  drivers/net/wireless/mediatek/mt76/mt7915/main.c     |   4 +++-
  drivers/net/wireless/mediatek/mt76/mt7921/mac.c      |   3 +++
  drivers/net/wireless/mediatek/mt76/mt7921/main.c     |  31 +++++++++++++--------------
  drivers/net/wireless/mediatek/mt76/mt7921/mcu.c      |   2 +-
  drivers/net/wireless/mediatek/mt76/mt7921/mt7921.h   |   5 +++++
  drivers/net/wireless/mediatek/mt76/mt7921/pci_mac.c  |   4 +++-
  drivers/net/wireless/mediatek/mt76/mt7925/mac.c      |   6 +++++-
  drivers/net/wireless/mediatek/mt76/mt7925/main.c     |  43 ++++++++++++++++++++++++-------------
  drivers/net/wireless/mediatek/mt76/mt7925/mcu.c      |   2 +-
  drivers/net/wireless/mediatek/mt76/mt7925/mt7925.h   |   5 +++++
  drivers/net/wireless/mediatek/mt76/mt7925/pci_mac.c  |   6 ++++--
  drivers/net/wireless/mediatek/mt76/mt7925/usb.c      |  11 +++++++++-
  drivers/net/wireless/mediatek/mt76/mt792x.h          |   1 +
  drivers/net/wireless/mediatek/mt76/mt792x_acpi_sar.c | 134 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++----------------------------------------
  drivers/net/wireless/mediatek/mt76/mt792x_acpi_sar.h |   2 ++
  drivers/net/wireless/mediatek/mt76/mt792x_core.c     |   1 +
  drivers/net/wireless/mediatek/mt76/mt7996/init.c     |   1 +
  drivers/net/wireless/mediatek/mt76/mt7996/mac.c      |   4 +++-
  drivers/net/wireless/mediatek/mt76/mt7996/main.c     |  10 ++++++++-
  drivers/net/wireless/mediatek/mt76/mt7996/mcu.h      |   3 +++
  drivers/net/wireless/mediatek/mt76/scan.c            |   7 ++++++
  drivers/net/wireless/mediatek/mt76/tx.c              |  23 ++++++++++++++------
  drivers/net/wireless/mediatek/mt76/usb.c             |  31 ++++++++++++++++++++++-----
  33 files changed, 320 insertions(+), 121 deletions(-)