* [wireless-next:main] BUILD SUCCESS 89e367a90c1a877ca9c5d75d3848582d80fd0e60
From: kernel test robot @ 2026-05-06 22:56 UTC (permalink / raw)
To: Johannes Berg; +Cc: linux-wireless
tree/branch: https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next.git main
branch HEAD: 89e367a90c1a877ca9c5d75d3848582d80fd0e60 wifi: mac80211: explicitly disable FTM responder on AP stop
elapsed time: 729m
configs tested: 271
configs skipped: 19
The following configs have been built successfully.
More configs may be tested in the coming days.
tested configs:
alpha allnoconfig gcc-15.2.0
alpha allyesconfig gcc-15.2.0
alpha defconfig gcc-15.2.0
arc allmodconfig clang-16
arc allnoconfig gcc-15.2.0
arc allyesconfig clang-23
arc defconfig gcc-15.2.0
arc randconfig-001 gcc-8.5.0
arc randconfig-001-20260506 gcc-12.5.0
arc randconfig-001-20260506 gcc-8.5.0
arc randconfig-001-20260507 gcc-14.3.0
arc randconfig-002 gcc-8.5.0
arc randconfig-002-20260506 gcc-12.5.0
arc randconfig-002-20260506 gcc-8.5.0
arc randconfig-002-20260507 gcc-14.3.0
arm allnoconfig gcc-15.2.0
arm allyesconfig clang-16
arm defconfig gcc-15.2.0
arm randconfig-001 gcc-8.5.0
arm randconfig-001-20260506 gcc-12.5.0
arm randconfig-001-20260506 gcc-8.5.0
arm randconfig-002 gcc-8.5.0
arm randconfig-002-20260506 gcc-12.5.0
arm randconfig-002-20260506 gcc-8.5.0
arm randconfig-002-20260507 gcc-14.3.0
arm randconfig-003 gcc-8.5.0
arm randconfig-003-20260506 gcc-12.5.0
arm randconfig-003-20260506 gcc-8.5.0
arm randconfig-004 gcc-8.5.0
arm randconfig-004-20260506 gcc-12.5.0
arm randconfig-004-20260506 gcc-8.5.0
arm randconfig-004-20260507 gcc-14.3.0
arm64 allmodconfig clang-23
arm64 allnoconfig gcc-15.2.0
arm64 defconfig gcc-15.2.0
arm64 randconfig-001 gcc-15.2.0
arm64 randconfig-001-20260506 gcc-15.2.0
arm64 randconfig-001-20260507 gcc-15.2.0
arm64 randconfig-002 gcc-15.2.0
arm64 randconfig-002-20260506 gcc-15.2.0
arm64 randconfig-002-20260507 gcc-15.2.0
arm64 randconfig-003 gcc-15.2.0
arm64 randconfig-003-20260506 gcc-15.2.0
arm64 randconfig-003-20260507 gcc-15.2.0
arm64 randconfig-004 gcc-15.2.0
arm64 randconfig-004-20260506 gcc-15.2.0
arm64 randconfig-004-20260507 gcc-15.2.0
csky alldefconfig gcc-15.2.0
csky allmodconfig gcc-15.2.0
csky allnoconfig gcc-15.2.0
csky defconfig gcc-15.2.0
csky randconfig-001 gcc-15.2.0
csky randconfig-001-20260506 gcc-15.2.0
csky randconfig-001-20260507 gcc-15.2.0
csky randconfig-002 gcc-15.2.0
csky randconfig-002-20260506 gcc-15.2.0
csky randconfig-002-20260507 gcc-15.2.0
hexagon allmodconfig gcc-15.2.0
hexagon allnoconfig gcc-15.2.0
hexagon defconfig gcc-15.2.0
hexagon randconfig-001 gcc-11.5.0
hexagon randconfig-001-20260506 clang-23
hexagon randconfig-001-20260506 gcc-11.5.0
hexagon randconfig-002 gcc-11.5.0
hexagon randconfig-002-20260506 clang-23
hexagon randconfig-002-20260506 gcc-11.5.0
i386 allmodconfig clang-20
i386 allmodconfig gcc-14
i386 allnoconfig gcc-15.2.0
i386 allyesconfig clang-20
i386 allyesconfig gcc-14
i386 buildonly-randconfig-001 clang-20
i386 buildonly-randconfig-001-20260506 clang-20
i386 buildonly-randconfig-001-20260506 gcc-14
i386 buildonly-randconfig-002 clang-20
i386 buildonly-randconfig-002-20260506 clang-20
i386 buildonly-randconfig-002-20260506 gcc-14
i386 buildonly-randconfig-003 clang-20
i386 buildonly-randconfig-003-20260506 clang-20
i386 buildonly-randconfig-004 clang-20
i386 buildonly-randconfig-004-20260506 clang-20
i386 buildonly-randconfig-005 clang-20
i386 buildonly-randconfig-005-20260506 clang-20
i386 buildonly-randconfig-006 clang-20
i386 buildonly-randconfig-006-20260506 clang-20
i386 buildonly-randconfig-006-20260506 gcc-14
i386 defconfig gcc-15.2.0
i386 randconfig-001-20260506 gcc-14
i386 randconfig-002-20260506 gcc-14
i386 randconfig-003-20260506 gcc-14
i386 randconfig-004-20260506 gcc-14
i386 randconfig-005-20260506 gcc-14
i386 randconfig-006-20260506 gcc-14
i386 randconfig-007-20260506 gcc-14
i386 randconfig-011 clang-20
i386 randconfig-011-20260506 clang-20
i386 randconfig-012 clang-20
i386 randconfig-012-20260506 clang-20
i386 randconfig-013 clang-20
i386 randconfig-013-20260506 clang-20
i386 randconfig-014 clang-20
i386 randconfig-014-20260506 clang-20
i386 randconfig-015 clang-20
i386 randconfig-015-20260506 clang-20
i386 randconfig-016 clang-20
i386 randconfig-016-20260506 clang-20
i386 randconfig-017 clang-20
i386 randconfig-017-20260506 clang-20
loongarch allmodconfig clang-23
loongarch allnoconfig gcc-15.2.0
loongarch defconfig clang-19
loongarch randconfig-001 gcc-11.5.0
loongarch randconfig-001-20260506 clang-23
loongarch randconfig-001-20260506 gcc-11.5.0
loongarch randconfig-002 gcc-11.5.0
loongarch randconfig-002-20260506 clang-23
loongarch randconfig-002-20260506 gcc-11.5.0
m68k allmodconfig gcc-15.2.0
m68k allnoconfig gcc-15.2.0
m68k allyesconfig clang-16
m68k apollo_defconfig gcc-15.2.0
m68k defconfig clang-19
microblaze allnoconfig gcc-15.2.0
microblaze allyesconfig gcc-15.2.0
microblaze defconfig clang-19
mips allmodconfig gcc-15.2.0
mips allnoconfig gcc-15.2.0
mips allyesconfig gcc-15.2.0
mips lemote2f_defconfig gcc-15.2.0
nios2 allmodconfig clang-23
nios2 allnoconfig clang-23
nios2 defconfig clang-19
nios2 randconfig-001 gcc-11.5.0
nios2 randconfig-001-20260506 clang-23
nios2 randconfig-001-20260506 gcc-11.5.0
nios2 randconfig-002 gcc-11.5.0
nios2 randconfig-002-20260506 clang-23
nios2 randconfig-002-20260506 gcc-11.5.0
openrisc allmodconfig clang-23
openrisc allnoconfig clang-23
openrisc defconfig gcc-15.2.0
openrisc virt_defconfig gcc-15.2.0
parisc allmodconfig gcc-15.2.0
parisc allnoconfig clang-23
parisc allyesconfig clang-19
parisc defconfig gcc-15.2.0
parisc randconfig-001 gcc-13.4.0
parisc randconfig-001-20260506 gcc-13.4.0
parisc randconfig-001-20260507 gcc-8.5.0
parisc randconfig-002 gcc-13.4.0
parisc randconfig-002-20260506 gcc-13.4.0
parisc randconfig-002-20260507 gcc-8.5.0
parisc64 defconfig clang-19
powerpc allmodconfig gcc-15.2.0
powerpc allnoconfig clang-23
powerpc randconfig-001 gcc-13.4.0
powerpc randconfig-001-20260506 gcc-13.4.0
powerpc randconfig-001-20260507 gcc-8.5.0
powerpc randconfig-002 gcc-13.4.0
powerpc randconfig-002-20260506 gcc-13.4.0
powerpc randconfig-002-20260507 gcc-8.5.0
powerpc64 randconfig-001-20260506 gcc-13.4.0
powerpc64 randconfig-001-20260507 gcc-8.5.0
powerpc64 randconfig-002 gcc-13.4.0
powerpc64 randconfig-002-20260506 gcc-13.4.0
powerpc64 randconfig-002-20260507 gcc-8.5.0
riscv allmodconfig clang-23
riscv allnoconfig clang-23
riscv allyesconfig clang-16
riscv defconfig gcc-15.2.0
riscv randconfig-001-20260506 gcc-8.5.0
riscv randconfig-002-20260506 gcc-8.5.0
s390 allmodconfig clang-19
s390 allnoconfig clang-23
s390 allyesconfig gcc-15.2.0
s390 defconfig gcc-15.2.0
s390 randconfig-001-20260506 gcc-8.5.0
s390 randconfig-002-20260506 gcc-8.5.0
sh allmodconfig gcc-15.2.0
sh allnoconfig clang-23
sh allyesconfig clang-19
sh defconfig gcc-14
sh randconfig-001-20260506 gcc-8.5.0
sh randconfig-002-20260506 gcc-8.5.0
sparc allnoconfig clang-23
sparc defconfig gcc-15.2.0
sparc randconfig-001-20260506 gcc-11.5.0
sparc randconfig-001-20260507 gcc-12.5.0
sparc randconfig-002-20260506 gcc-11.5.0
sparc randconfig-002-20260507 gcc-12.5.0
sparc64 allmodconfig clang-23
sparc64 defconfig gcc-14
sparc64 randconfig-001-20260507 gcc-12.5.0
sparc64 randconfig-002-20260507 gcc-12.5.0
um allmodconfig clang-19
um allnoconfig clang-23
um allyesconfig gcc-15.2.0
um defconfig gcc-14
um i386_defconfig gcc-14
um randconfig-001-20260506 gcc-11.5.0
um randconfig-001-20260507 gcc-12.5.0
um randconfig-002-20260507 gcc-12.5.0
um x86_64_defconfig gcc-14
x86_64 allmodconfig clang-20
x86_64 allnoconfig clang-23
x86_64 allyesconfig clang-20
x86_64 buildonly-randconfig-001-20260506 clang-20
x86_64 buildonly-randconfig-002-20260506 clang-20
x86_64 buildonly-randconfig-003-20260506 clang-20
x86_64 buildonly-randconfig-004-20260506 clang-20
x86_64 buildonly-randconfig-005-20260506 clang-20
x86_64 buildonly-randconfig-006-20260506 clang-20
x86_64 defconfig gcc-14
x86_64 kexec clang-20
x86_64 randconfig-001 clang-20
x86_64 randconfig-001-20260506 clang-20
x86_64 randconfig-001-20260506 gcc-13
x86_64 randconfig-002 clang-20
x86_64 randconfig-002-20260506 clang-20
x86_64 randconfig-003 clang-20
x86_64 randconfig-003-20260506 clang-20
x86_64 randconfig-004 clang-20
x86_64 randconfig-004-20260506 clang-20
x86_64 randconfig-005 clang-20
x86_64 randconfig-005-20260506 clang-20
x86_64 randconfig-005-20260506 gcc-13
x86_64 randconfig-006 clang-20
x86_64 randconfig-006-20260506 clang-20
x86_64 randconfig-011 clang-20
x86_64 randconfig-011-20260506 clang-20
x86_64 randconfig-012 clang-20
x86_64 randconfig-012-20260506 clang-20
x86_64 randconfig-013 clang-20
x86_64 randconfig-013-20260506 clang-20
x86_64 randconfig-014 clang-20
x86_64 randconfig-014-20260506 clang-20
x86_64 randconfig-015 clang-20
x86_64 randconfig-015-20260506 clang-20
x86_64 randconfig-016 clang-20
x86_64 randconfig-016-20260506 clang-20
x86_64 randconfig-071 clang-20
x86_64 randconfig-071-20260506 clang-20
x86_64 randconfig-071-20260507 clang-20
x86_64 randconfig-072 clang-20
x86_64 randconfig-072-20260506 clang-20
x86_64 randconfig-072-20260507 clang-20
x86_64 randconfig-073 clang-20
x86_64 randconfig-073-20260506 clang-20
x86_64 randconfig-073-20260507 clang-20
x86_64 randconfig-074 clang-20
x86_64 randconfig-074-20260506 clang-20
x86_64 randconfig-074-20260507 clang-20
x86_64 randconfig-075 clang-20
x86_64 randconfig-075-20260506 clang-20
x86_64 randconfig-075-20260507 clang-20
x86_64 randconfig-076 clang-20
x86_64 randconfig-076-20260506 clang-20
x86_64 randconfig-076-20260507 clang-20
x86_64 rhel-9.4 clang-20
x86_64 rhel-9.4-bpf gcc-14
x86_64 rhel-9.4-func clang-20
x86_64 rhel-9.4-kselftests clang-20
x86_64 rhel-9.4-kunit gcc-14
x86_64 rhel-9.4-ltp gcc-14
x86_64 rhel-9.4-rust clang-20
xtensa allnoconfig clang-23
xtensa allyesconfig clang-23
xtensa randconfig-001-20260506 gcc-11.5.0
xtensa randconfig-001-20260507 gcc-12.5.0
xtensa randconfig-002-20260506 gcc-11.5.0
xtensa randconfig-002-20260507 gcc-12.5.0
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
^ permalink raw reply
* [wireless:for-next] BUILD SUCCESS 79240f3f6d766b342b57c32397d643e1cfa26b81
From: kernel test robot @ 2026-05-06 21:47 UTC (permalink / raw)
To: Johannes Berg; +Cc: linux-wireless
tree/branch: https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git for-next
branch HEAD: 79240f3f6d766b342b57c32397d643e1cfa26b81 wifi: nl80211: re-check wiphy netns in nl80211_prepare_wdev_dump() continuation
elapsed time: 727m
configs tested: 243
configs skipped: 20
The following configs have been built successfully.
More configs may be tested in the coming days.
tested configs:
alpha allnoconfig gcc-15.2.0
alpha allyesconfig gcc-15.2.0
alpha defconfig gcc-15.2.0
arc allmodconfig clang-16
arc allnoconfig gcc-15.2.0
arc allyesconfig clang-23
arc defconfig gcc-15.2.0
arc randconfig-001-20260506 gcc-12.5.0
arc randconfig-002-20260506 gcc-12.5.0
arm allnoconfig gcc-15.2.0
arm allyesconfig clang-16
arm defconfig gcc-15.2.0
arm randconfig-001-20260506 gcc-12.5.0
arm randconfig-002-20260506 gcc-12.5.0
arm randconfig-003-20260506 gcc-12.5.0
arm randconfig-004-20260506 gcc-12.5.0
arm64 allmodconfig clang-23
arm64 allnoconfig gcc-15.2.0
arm64 defconfig gcc-15.2.0
arm64 randconfig-001 gcc-15.2.0
arm64 randconfig-001-20260506 gcc-15.2.0
arm64 randconfig-001-20260507 gcc-15.2.0
arm64 randconfig-002 gcc-15.2.0
arm64 randconfig-002-20260506 gcc-15.2.0
arm64 randconfig-002-20260507 gcc-15.2.0
arm64 randconfig-003 gcc-15.2.0
arm64 randconfig-003-20260506 gcc-15.2.0
arm64 randconfig-003-20260507 gcc-15.2.0
arm64 randconfig-004 gcc-15.2.0
arm64 randconfig-004-20260506 gcc-15.2.0
arm64 randconfig-004-20260507 gcc-15.2.0
csky allmodconfig gcc-15.2.0
csky allnoconfig gcc-15.2.0
csky defconfig gcc-15.2.0
csky randconfig-001 gcc-15.2.0
csky randconfig-001-20260506 gcc-15.2.0
csky randconfig-001-20260507 gcc-15.2.0
csky randconfig-002 gcc-15.2.0
csky randconfig-002-20260506 gcc-15.2.0
csky randconfig-002-20260507 gcc-15.2.0
hexagon allmodconfig gcc-15.2.0
hexagon allnoconfig gcc-15.2.0
hexagon defconfig gcc-15.2.0
hexagon randconfig-001 gcc-11.5.0
hexagon randconfig-001-20260506 clang-23
hexagon randconfig-001-20260506 gcc-11.5.0
hexagon randconfig-002 gcc-11.5.0
hexagon randconfig-002-20260506 clang-23
hexagon randconfig-002-20260506 gcc-11.5.0
i386 allmodconfig clang-20
i386 allmodconfig gcc-14
i386 allnoconfig gcc-14
i386 allnoconfig gcc-15.2.0
i386 allyesconfig clang-20
i386 allyesconfig gcc-14
i386 buildonly-randconfig-001 clang-20
i386 buildonly-randconfig-001-20260506 clang-20
i386 buildonly-randconfig-001-20260506 gcc-14
i386 buildonly-randconfig-002 clang-20
i386 buildonly-randconfig-002-20260506 clang-20
i386 buildonly-randconfig-002-20260506 gcc-14
i386 buildonly-randconfig-003 clang-20
i386 buildonly-randconfig-003-20260506 clang-20
i386 buildonly-randconfig-004 clang-20
i386 buildonly-randconfig-004-20260506 clang-20
i386 buildonly-randconfig-005 clang-20
i386 buildonly-randconfig-005-20260506 clang-20
i386 buildonly-randconfig-006 clang-20
i386 buildonly-randconfig-006-20260506 clang-20
i386 buildonly-randconfig-006-20260506 gcc-14
i386 defconfig gcc-15.2.0
i386 randconfig-001-20260506 gcc-14
i386 randconfig-002-20260506 gcc-14
i386 randconfig-003-20260506 gcc-14
i386 randconfig-004-20260506 gcc-14
i386 randconfig-005-20260506 gcc-14
i386 randconfig-006-20260506 gcc-14
i386 randconfig-007-20260506 gcc-14
i386 randconfig-011 clang-20
i386 randconfig-011-20260506 clang-20
i386 randconfig-012 clang-20
i386 randconfig-012-20260506 clang-20
i386 randconfig-013 clang-20
i386 randconfig-013-20260506 clang-20
i386 randconfig-014 clang-20
i386 randconfig-014-20260506 clang-20
i386 randconfig-015 clang-20
i386 randconfig-015-20260506 clang-20
i386 randconfig-016 clang-20
i386 randconfig-016-20260506 clang-20
i386 randconfig-017 clang-20
i386 randconfig-017-20260506 clang-20
loongarch allmodconfig clang-23
loongarch allnoconfig gcc-15.2.0
loongarch defconfig clang-19
loongarch randconfig-001 gcc-11.5.0
loongarch randconfig-001-20260506 clang-23
loongarch randconfig-001-20260506 gcc-11.5.0
loongarch randconfig-002 gcc-11.5.0
loongarch randconfig-002-20260506 clang-23
loongarch randconfig-002-20260506 gcc-11.5.0
m68k allmodconfig gcc-15.2.0
m68k allnoconfig gcc-15.2.0
m68k allyesconfig clang-16
m68k apollo_defconfig gcc-15.2.0
m68k defconfig clang-19
microblaze allnoconfig gcc-15.2.0
microblaze allyesconfig gcc-15.2.0
microblaze defconfig clang-19
mips allmodconfig gcc-15.2.0
mips allnoconfig gcc-15.2.0
mips allyesconfig gcc-15.2.0
mips lemote2f_defconfig gcc-15.2.0
nios2 allmodconfig clang-23
nios2 allnoconfig clang-23
nios2 defconfig clang-19
nios2 randconfig-001 gcc-11.5.0
nios2 randconfig-001-20260506 clang-23
nios2 randconfig-001-20260506 gcc-11.5.0
nios2 randconfig-002 gcc-11.5.0
nios2 randconfig-002-20260506 clang-23
nios2 randconfig-002-20260506 gcc-11.5.0
openrisc allmodconfig clang-23
openrisc allnoconfig clang-23
openrisc defconfig gcc-15.2.0
openrisc virt_defconfig gcc-15.2.0
parisc allmodconfig gcc-15.2.0
parisc allnoconfig clang-23
parisc allyesconfig clang-19
parisc defconfig gcc-15.2.0
parisc randconfig-001 gcc-13.4.0
parisc randconfig-001-20260506 gcc-13.4.0
parisc randconfig-001-20260507 gcc-8.5.0
parisc randconfig-002 gcc-13.4.0
parisc randconfig-002-20260506 gcc-13.4.0
parisc randconfig-002-20260507 gcc-8.5.0
parisc64 defconfig clang-19
powerpc allmodconfig gcc-15.2.0
powerpc allnoconfig clang-23
powerpc randconfig-001 gcc-13.4.0
powerpc randconfig-001-20260506 gcc-13.4.0
powerpc randconfig-001-20260507 gcc-8.5.0
powerpc randconfig-002 gcc-13.4.0
powerpc randconfig-002-20260506 gcc-13.4.0
powerpc randconfig-002-20260507 gcc-8.5.0
powerpc64 randconfig-001-20260506 gcc-13.4.0
powerpc64 randconfig-001-20260507 gcc-8.5.0
powerpc64 randconfig-002 gcc-13.4.0
powerpc64 randconfig-002-20260506 gcc-13.4.0
powerpc64 randconfig-002-20260507 gcc-8.5.0
riscv allmodconfig clang-23
riscv allnoconfig clang-23
riscv allyesconfig clang-16
riscv defconfig gcc-15.2.0
riscv randconfig-001-20260506 gcc-8.5.0
riscv randconfig-002-20260506 gcc-8.5.0
s390 allmodconfig clang-19
s390 allnoconfig clang-23
s390 allyesconfig gcc-15.2.0
s390 defconfig gcc-15.2.0
s390 randconfig-001-20260506 gcc-8.5.0
s390 randconfig-002-20260506 gcc-8.5.0
sh allmodconfig gcc-15.2.0
sh allnoconfig clang-23
sh allyesconfig clang-19
sh defconfig gcc-14
sh randconfig-001-20260506 gcc-8.5.0
sh randconfig-002-20260506 gcc-8.5.0
sparc allnoconfig clang-23
sparc defconfig gcc-15.2.0
sparc randconfig-001-20260506 gcc-11.5.0
sparc randconfig-001-20260507 gcc-12.5.0
sparc randconfig-002-20260506 gcc-11.5.0
sparc randconfig-002-20260507 gcc-12.5.0
sparc64 allmodconfig clang-23
sparc64 defconfig gcc-14
sparc64 randconfig-001-20260507 gcc-12.5.0
sparc64 randconfig-002-20260507 gcc-12.5.0
um allmodconfig clang-19
um allnoconfig clang-23
um allyesconfig gcc-15.2.0
um defconfig gcc-14
um i386_defconfig gcc-14
um randconfig-001-20260506 gcc-11.5.0
um randconfig-001-20260507 gcc-12.5.0
um randconfig-002-20260507 gcc-12.5.0
um x86_64_defconfig gcc-14
x86_64 allmodconfig clang-20
x86_64 allnoconfig clang-23
x86_64 allyesconfig clang-20
x86_64 buildonly-randconfig-001-20260506 clang-20
x86_64 buildonly-randconfig-002-20260506 clang-20
x86_64 buildonly-randconfig-003-20260506 clang-20
x86_64 buildonly-randconfig-004-20260506 clang-20
x86_64 buildonly-randconfig-005-20260506 clang-20
x86_64 buildonly-randconfig-006-20260506 clang-20
x86_64 defconfig gcc-14
x86_64 kexec clang-20
x86_64 randconfig-001 clang-20
x86_64 randconfig-001-20260506 clang-20
x86_64 randconfig-001-20260506 gcc-13
x86_64 randconfig-002 clang-20
x86_64 randconfig-002-20260506 clang-20
x86_64 randconfig-003 clang-20
x86_64 randconfig-003-20260506 clang-20
x86_64 randconfig-004 clang-20
x86_64 randconfig-004-20260506 clang-20
x86_64 randconfig-005 clang-20
x86_64 randconfig-005-20260506 clang-20
x86_64 randconfig-005-20260506 gcc-13
x86_64 randconfig-006 clang-20
x86_64 randconfig-006-20260506 clang-20
x86_64 randconfig-011-20260506 clang-20
x86_64 randconfig-012-20260506 clang-20
x86_64 randconfig-013-20260506 clang-20
x86_64 randconfig-014-20260506 clang-20
x86_64 randconfig-015-20260506 clang-20
x86_64 randconfig-016-20260506 clang-20
x86_64 randconfig-071-20260506 clang-20
x86_64 randconfig-071-20260507 clang-20
x86_64 randconfig-072-20260506 clang-20
x86_64 randconfig-072-20260507 clang-20
x86_64 randconfig-073-20260506 clang-20
x86_64 randconfig-073-20260507 clang-20
x86_64 randconfig-074-20260506 clang-20
x86_64 randconfig-074-20260507 clang-20
x86_64 randconfig-075-20260506 clang-20
x86_64 randconfig-075-20260507 clang-20
x86_64 randconfig-076-20260506 clang-20
x86_64 randconfig-076-20260507 clang-20
x86_64 rhel-9.4 clang-20
x86_64 rhel-9.4-bpf gcc-14
x86_64 rhel-9.4-func clang-20
x86_64 rhel-9.4-kselftests clang-20
x86_64 rhel-9.4-kunit gcc-14
x86_64 rhel-9.4-ltp gcc-14
x86_64 rhel-9.4-rust clang-20
xtensa allnoconfig clang-23
xtensa allyesconfig clang-23
xtensa randconfig-001-20260506 gcc-11.5.0
xtensa randconfig-001-20260507 gcc-12.5.0
xtensa randconfig-002-20260506 gcc-11.5.0
xtensa randconfig-002-20260507 gcc-12.5.0
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
^ permalink raw reply
* Re: [PATCH] wifi: ath11k: Add two missing Lenovo IDs to the quirk table
From: Santiago Ruano Rincón @ 2026-05-06 20:30 UTC (permalink / raw)
To: Kyle Farnung
Cc: Kyle Farnung, Jeff Johnson, linux-wireless@vger.kernel.org,
ath11k@lists.infradead.org, linux-kernel@vger.kernel.org,
Mark Pearson, koike@igalia.com, 1132343
In-Reply-To: <CAOPSVF3=BmOUw5+nnk-EYnpP_ff7wXsFAaz6sHbw-brLy-HojA@mail.gmail.com>
El 26/04/26 a las 10:44, Kyle Farnung escribió:
...
> Feel free to just merge yours and I'll withdraw mine. I'm regression
> testing the WiFi disconnect issue I'm encountering, so I'll just focus on
> that. In the meantime this seems righteous.
Thanks, I've just sent an updated version
>
> >
> > >
> > > I have the same "wake on power removed" issue, but I have another issue
> > > that's more annoying where the wifi just dies randomly. I only have the
> > > wake issue when power is disconnected, not when power is connected again.
> > > I mostly leave my device connected, so I only realized the behavior while
> > > doing the regression testing requested in the other patch.
> >
> > I've also been hit by a similar annoying wifi randomly dying issue that
> > you describe [deb#1132343]. With the patch that I attached applied to
> > 7.0.0, my P14s G3 AMD laptop has been running for more that 3 days, with
> > several suspends / weak ups, either with power connected or
> > disconnected. And I haven't encountered that problem since it booted so
> > I concluded that the patch fixed it. But chances are that I am wrong.
> >
> > [deb#1132343] https://bugs.debian.org/1132343
> >
> > The latest bad version I tested where the wifi died was 6.9.11. I plan
> > test the patch on top of it.
>
> 6.9 or 6.19? My issue started between 6.16.10 and 6.17.4.
6.19, sorry. And I confirm it is still present in 7.0.3. But my P14s
Gen3 machine has been running on a 7.0.3 patched with
https://lore.kernel.org/ath11k/20260423211458.458911-1-santiagorr@riseup.net/
for more than two days, with several suspends and no wifi issues.
However, from your comment at
https://lore.kernel.org/all/CAOPSVF04q6uvVdq8GTRLHBrVMdpt9=o9wVcFMc6f-yhmSBcZqQ@mail.gmail.com/,
I read that you are concluding that the culprit for the dying wifi is
rather 79266fd78df1 ("wifi: ath11k: HAL SRNG: don't deinitialize and
re-initialize again").
Could you please confirm that you have been able to reproduce the wifi
randomly dying issue with kernel patched with
https://lore.kernel.org/all/20260330-p14s-pm-quirk-v2-1-ef18ce07996b@gmail.com/?
thanks,
-- S
^ permalink raw reply
* Re: [PATCH v2] iw: Makefile: support out-of-tree builds
From: Maxin John @ 2026-05-06 20:23 UTC (permalink / raw)
To: Johannes Berg; +Cc: linux-wireless
In-Reply-To: <6d1b6079bd0c0318e4311bc41a35fc2169a0b4e8.camel@sipsolutions.net>
Hi,
On Tue, May 05, 2026 at 12:35:16PM +0200, Johannes Berg wrote:
> On Thu, 2026-04-30 at 00:08 +0300, Maxin John wrote:
>
>
> > - Add support for kernel-style out-of-tree builds using:
> > make O=<builddir>
> > - Make SRCDIR computation whitespace-safe by switching to realpath
> > - Remove ambiguous use of "-I." from CPPFLAGS
>
> Thanks for fixing that.
>
> Right now I don't really see _why_ it doesn't work, but it seems
> confusing that if you build in-tree first and then try to build out-of-
> tree, it just says
>
> make[1]: Nothing to be done for 'all'.
>
> Maybe that should abort? Or work?
Thanks for sharing this observation. Yes, this is not ideal. I will update that
part based on your suggestion.
> It seems that removing VPATH and changing the %.o rule
>
> -%.o: %.c iw.h nl80211.h nl80211-commands.inc
> +%.o: $(SRCDIR)/%.c $(SRCDIR)/iw.h $(SRCDIR)/nl80211.h nl80211-commands.inc
>
> makes that work?
>
> I'll leave it to you though.
I will send a v3 to fix it.
> johannes
Best Regards,
Maxin
^ permalink raw reply
* [BUG] EM9293 PCIe (MHI) WWAN RX path broken on kernel 7.0
From: Jorge Mayorga @ 2026-05-06 20:21 UTC (permalink / raw)
To: netdev, linux-arm-msm; +Cc: linux-wireless
Hello, We are observing a data-plane failure with a PCIe-based WWAN
modem (Sierra Wireless EM9293) using the MHI subsystem on Linux kernel
7.0. Environment: Kernel: 7.0.0-15-generic OS: Ubuntu 26.04
ModemManager: 1.25.95 Modem: Sierra Wireless EM9293 Bus: PCIe (MHI)
Driver: mhi_net, mhi-pci-generic Issue summary: Two distinct failure
modes depending on protocol: 1. MBIM mode Interface created: mhi_hwip0
State: UP, LOWER_UP, POINTOPOINT, NOARP IP assigned correctly Traffic:
TX packets increase normally RX packets remain near zero Ping: 100%
packet loss Counters: TX: ~15000 packets RX: ~7 packets This indicates
TX path is functional but RX path is not working. 2. QMI multiplexed
mode Interface qmapmux0.0 is created Traffic works briefly Interface
is removed shortly after connection Interpretation: MBIM: control
plane OK TX OK RX not functional QMI: data path partially works netdev
lifecycle unstable Low-level interpretation: TX path: host -> mhi_net
-> modem OK RX path: modem -> mhi_net -> host FAIL Additional
observations: No routing issues No firewall interference No userspace
misconfiguration Same failure persists regardless of routing setup USB
(cdc_mbim) works correctly on same hardware This appears to be a
kernel-level issue in the MHI WWAN data path. Likely areas: mhi_net RX
handling downlink channel setup rmnet/qmap lifecycle possible race
condition in netdev teardown Request: Any guidance on debugging the RX
path in mhi_net would be appreciated. Also confirming whether current
MHI WWAN support is expected to fully support RX on PCIe devices like
EM9293. Thanks
^ permalink raw reply
* [PATCH v2] wifi: ath11k: Add two missing Lenovo IDs to the quirk table
From: Santiago Ruano Rincón @ 2026-05-06 19:54 UTC (permalink / raw)
To: Jeff Johnson, linux-wireless, ath11k, linux-kernel
Cc: Mark Pearson, kfarnung, koike
Commit 0eb002c93c3b4 ("wifi: ath11k: Add missing platform IDs for quirk
table") added some Lenovo platform IDs to the quirk table to address a
wakeup from suspend issue [1]. However, at least P14s Gen 5 AMD, as
reported by Kyle Farnung [2], and P14s Gen 3 AMD are missing in the
table. This commit adds the two corresponding Lenovo version IDs for
each.
[1] https://bugzilla.kernel.org/show_bug.cgi?id=219196
[2] https://bugzilla.kernel.org/show_bug.cgi?id=219196#c23
Tested-on: P14s G3 AMD running 7.0.3.
Fixes: ce8669a27016 ("wifi: ath11k: determine PM policy based on machine model")
Co-authored-by: Kyle Farnung <kfarnung@gmail.com>
Signed-off-by: Santiago Ruano Rincón <santiagorr@riseup.net>
---
Changes in v2:
- Merged the Lenovo P14s G5 AMD #1 and #2 related changes proposed by
Kyle Farnung in
https://lore.kernel.org/all/20260330-p14s-pm-quirk-v2-1-ef18ce07996b@gmail.com/
- Added Kyle Farnung as Co-author of the commit
- Added the second ID of Lenovo P14s G3 AMD, and adapt the comments
accordingly
- v1: https://lore.kernel.org/ath11k/20260423211458.458911-1-santiagorr@riseup.net/
---
drivers/net/wireless/ath/ath11k/core.c | 28 ++++++++++++++++++++++++++
1 file changed, 28 insertions(+)
diff --git a/drivers/net/wireless/ath/ath11k/core.c b/drivers/net/wireless/ath/ath11k/core.c
index 3f6f4db5b7ee..c1ce0a11af44 100644
--- a/drivers/net/wireless/ath/ath11k/core.c
+++ b/drivers/net/wireless/ath/ath11k/core.c
@@ -957,6 +957,20 @@ static const struct dmi_system_id ath11k_pm_quirk_table[] = {
DMI_MATCH(DMI_PRODUCT_NAME, "21K4"),
},
},
+ {
+ .driver_data = (void *)ATH11K_PM_WOW,
+ .matches = { /* P14s G3 AMD #1 */
+ DMI_MATCH(DMI_BOARD_VENDOR, "LENOVO"),
+ DMI_MATCH(DMI_PRODUCT_NAME, "21J5"),
+ },
+ },
+ {
+ .driver_data = (void *)ATH11K_PM_WOW,
+ .matches = { /* P14s G3 AMD #2 */
+ DMI_MATCH(DMI_BOARD_VENDOR, "LENOVO"),
+ DMI_MATCH(DMI_PRODUCT_NAME, "21J6"),
+ },
+ },
{
.driver_data = (void *)ATH11K_PM_WOW,
.matches = { /* P14s G4 AMD #1 */
@@ -971,6 +985,20 @@ static const struct dmi_system_id ath11k_pm_quirk_table[] = {
DMI_MATCH(DMI_PRODUCT_NAME, "21K6"),
},
},
+ {
+ .driver_data = (void *)ATH11K_PM_WOW,
+ .matches = { /* P14s G5 AMD #1 */
+ DMI_MATCH(DMI_BOARD_VENDOR, "LENOVO"),
+ DMI_MATCH(DMI_PRODUCT_NAME, "21ME"),
+ },
+ },
+ {
+ .driver_data = (void *)ATH11K_PM_WOW,
+ .matches = { /* P14s G5 AMD #2 */
+ DMI_MATCH(DMI_BOARD_VENDOR, "LENOVO"),
+ DMI_MATCH(DMI_PRODUCT_NAME, "21MF"),
+ },
+ },
{
.driver_data = (void *)ATH11K_PM_WOW,
.matches = { /* T16 G2 AMD #1 */
--
2.53.0
^ permalink raw reply related
* Re: [bug report] wifi: mt76: mt7925: iw set txpower fixed accepted but ignored
From: Javier Tia @ 2026-05-06 20:02 UTC (permalink / raw)
To: Bradley Pizzimenti
Cc: linux-wireless, linux-kernel, nbd, lorenzo, ryder.lee,
shayne.chen, sean.wang
In-Reply-To: <CACjnFagN9zeSkwEv3-CSPJDUENPcEcOLjKyQoLQ91Yjn=rq5ww@mail.gmail.com>
On Sun May 4 22:04:48 2026 Bradley Pizzimenti wrote:
> `iw dev <iface> set txpower fixed N` returns success on mt7925 for
> any N tested, but the reported txpower never changes from a stuck
> value of 3.00 dBm.
Hi Bradley,
The 3 dBm display bug is a known issue we have seen when using mt7927
and a tested fix has been working well so far. The root cause is that
mt7925_mcu_set_rate_txpower() programs the per-band SKU tables into
firmware but never assigns phy->txpower_cur. mt76_get_txpower() then
computes:
DIV_ROUND_UP(0 + 6, 2) = 3
regardless of the actual power level. The RF output is unaffected;
it is a display-only bug.
The fix reads the effective TX power back from the rate power limits
after programming the SKU tables and writes it to phy->txpower_cur,
following the same pattern used by mt7996:
https://github.com/jetm/mediatek-mt7927-dkms/blob/master/mt7927-wifi-14-fix-reported-txpower-always-showing-3-db.patch
This is part of a series we are targeting for wireless-next; not
yet upstream.
> What seems potentially distinct here is that the user-issued
> `iw set txpower fixed N` itself is silently no-op'd, separate
> from the reported-value question.
Agreed those are two separate issues. Our patch addresses the
display-only side: after applying it, iw will report the value the
firmware is actually using based on the SKU tables, rather than
always 3 dBm. Whether `set txpower fixed N` propagates to firmware
to change actual output power is orthogonal and not addressed here.
If you can test the patch on your MT7925 and confirm the displayed
value reflects the correct power after association, a Tested-by
would be appreciated.
Best,
Javier
^ permalink raw reply
* Re: [PATCH] wifi: ath11k: fix warning when unbinding
From: Rameshkumar Sundaram @ 2026-05-06 18:19 UTC (permalink / raw)
To: Jose Ignacio Tornos Martinez, jjohnson
Cc: linux-wireless, ath11k, linux-kernel, stable
In-Reply-To: <20260420110130.509670-1-jtornosm@redhat.com>
On 4/20/2026 4:31 PM, Jose Ignacio Tornos Martinez wrote:
> If there is an error during some initialization related to firmware,
> the buffers dp->tx_ring[i].tx_status are released.
> However this is released again when the device is unbinded (ath11k_pci),
> and we get:
> WARNING: CPU: 0 PID: 6231 at mm/slub.c:4368 free_large_kmalloc+0x57/0x90
> Call Trace:
> free_large_kmalloc
> ath11k_dp_free
> ath11k_core_deinit
> ath11k_pci_remove
> ...
>
> The issue is always reproducible from a VM because the MSI addressing
> initialization is failing.
>
> In order to fix the issue, just set the buffers to NULL after releasing in
> order to avoid the double free.
>
> Fixes: d5c65159f289 ("ath11k: driver for Qualcomm IEEE 802.11ax devices")
> Cc: stable@vger.kernel.org
> Signed-off-by: Jose Ignacio Tornos Martinez <jtornosm@redhat.com>
> ---
> drivers/net/wireless/ath/ath11k/dp.c | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/drivers/net/wireless/ath/ath11k/dp.c b/drivers/net/wireless/ath/ath11k/dp.c
> index bbb86f165141..5a50b623bd07 100644
> --- a/drivers/net/wireless/ath/ath11k/dp.c
> +++ b/drivers/net/wireless/ath/ath11k/dp.c
> @@ -1040,6 +1040,7 @@ void ath11k_dp_free(struct ath11k_base *ab)
> idr_destroy(&dp->tx_ring[i].txbuf_idr);
> spin_unlock_bh(&dp->tx_ring[i].tx_idr_lock);
> kfree(dp->tx_ring[i].tx_status);
> + dp->tx_ring[i].tx_status = NULL;
> }
>
> /* Deinit any SOC level resource */
On which hardware did you observe this issue? is it QCA6390, WCN6855,
QCA2066 or QCA6698AQ ? Also, where do you see the initial failure ? Is
it somewhere in ath11k_core_qmi_firmware_ready() ?
I am asking because this looks like it may be exposed by commit
6fe62a8cec51 ("wifi: ath11k: Add cold boot calibration support on
WCN6750") [1]. That commit added the ATH11K_QMI_EVENT_FW_READY path, but
the return value from ath11k_core_qmi_firmware_ready() is not handled
there. If that call fails after ath11k_dp_free() has already run on the
error path, ATH11K_FLAG_QMI_FAIL is not set. Later, ath11k_pci_remove()
does not take the QMI-fail cleanup path and calls ath11k_core_deinit(),
which calls ath11k_dp_free() and other cleanup functions again.
This is similar to the failure case fixed earlier by a19c0e104db9
("ath11k: Handle failure in qmi firmware ready") [2], where failure from
ath11k_core_qmi_firmware_ready() needed to be handled.
[1]
https://lore.kernel.org/r/20220720134909.15626-3-quic_mpubbise@quicinc.com
[2]
https://lore.kernel.org/r/1645079195-13564-1-git-send-email-quic_seevalam@quicinc.com
--
Ramesh
^ permalink raw reply
* Re: [PATCH v2 0/3] fix leaks in some WMI error path
From: Rameshkumar Sundaram @ 2026-05-06 18:16 UTC (permalink / raw)
To: Nicolas Escande, ath11k; +Cc: linux-wireless
In-Reply-To: <20260506134240.2284016-1-nico.escande@gmail.com>
On 5/6/2026 7:12 PM, Nicolas Escande wrote:
> So this is similar work to what has been posted here [0] for ath12k.
>
> When we use the pattern 'return ath11k_wmi_cmd_send(...)' without
> explicitly checking the return value we fail to free the allocated skb.
>
> This has been split into 2 patches per Jeff's guidance to hopefully
> ease the backporting process.
>
> [0] https://lore.kernel.org/linux-wireless/20260422163258.3013872-1-nico.escande@gmail.com/
>
> ---
> Changes from v1:
> - Added patch to also fix ath11k_tm_cmd_wmi_ftm() as per Rameshkumar's remark
>
> Nicolas Escande (3):
> wifi: ath11k: fix leak in error path of some WOW related WMI commands
> wifi: ath11k: fix error path leaks in some WMI calls
> wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()
>
> drivers/net/wireless/ath/ath11k/testmode.c | 1 +
> drivers/net/wireless/ath/ath11k/wmi.c | 131 ++++++++++++++++++---
> 2 files changed, 113 insertions(+), 19 deletions(-)
>
Reviewed-by: Rameshkumar Sundaram <rameshkumar.sundaram@oss.qualcomm.com>
^ permalink raw reply
* Re: [PATCH v2 3/3] wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()
From: Rameshkumar Sundaram @ 2026-05-06 18:15 UTC (permalink / raw)
To: Nicolas Escande, ath11k; +Cc: linux-wireless
In-Reply-To: <20260506134240.2284016-4-nico.escande@gmail.com>
On 5/6/2026 7:12 PM, Nicolas Escande wrote:
> This is similar to what was fixed by previous patches. We have a to
s/We have a to ../We have a call to .. ?
But no need to resend for this, I think Jeff can fix in pending ?
> ath11k_wmi_cmd_send() which does check the return value, but forgot to
> free the related skb.
>
> Fixes: b43310e44edc ("wifi: ath11k: factory test mode support")
> Signed-off-by: Nicolas Escande <nico.escande@gmail.com>
> ---
> drivers/net/wireless/ath/ath11k/testmode.c | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/drivers/net/wireless/ath/ath11k/testmode.c b/drivers/net/wireless/ath/ath11k/testmode.c
> index a9751ea2a0b7..c72eed358f6d 100644
> --- a/drivers/net/wireless/ath/ath11k/testmode.c
> +++ b/drivers/net/wireless/ath/ath11k/testmode.c
> @@ -457,6 +457,7 @@ static int ath11k_tm_cmd_wmi_ftm(struct ath11k *ar, struct nlattr *tb[])
> ret = ath11k_wmi_cmd_send(wmi, skb, cmd_id);
> if (ret) {
> ath11k_warn(ar->ab, "failed to send wmi ftm command: %d\n", ret);
> + dev_kfree_skb(skb);
> goto out;
> }
>
--
Ramesh
^ permalink raw reply
* [PATCH] wireless-regdb: Update regulatory rules for Sri Lanka (LK)
From: Mohamed Aashif @ 2026-05-06 15:41 UTC (permalink / raw)
To: linux-wireless; +Cc: wireless-regdb, Mohamed Aashif
Update Sri Lanka regulatory domain based on the RTTE Type Approval
Rules 2020 from the Telecommunications Regulatory Commission of
Sri Lanka (TRC).
Source: https://www.trc.gov.lk/content/files/licensing/RTTE_GAZETTE-English.pdf
Key changes:
- Change DFS region from FCC to ETSI (document references ETSI
standards EN 300 328 and EN 301 893 as the applicable radio
interface standards)
- 2.4 GHz: expand to 2400-2483.5 MHz at 200 mW (was 2402-2482 at 20 dBm)
- 5150-5350 MHz: 200 mW with DFS
- 5470-5725 MHz: 1000 mW with DFS
- 5725-5875 MHz: 1000 mW with DFS
Signed-off-by: Mohamed Aashif <maashif011@gmail.com>
---
db.txt | 14 ++++++++------
1 file changed, 8 insertions(+), 6 deletions(-)
diff --git a/db.txt b/db.txt
index fdc2c13..d265176 100644
--- a/db.txt
+++ b/db.txt
@@ -1058,12 +1058,14 @@ country LI: DFS-ETSI
# 60 GHz band channels 1-4 (ETSI EN 302 567)
(57000 - 66000 @ 2160), (40)
-country LK: DFS-FCC
- (2402 - 2482 @ 40), (20)
- (5170 - 5250 @ 20), (17)
- (5250 - 5330 @ 20), (24), DFS
- (5490 - 5730 @ 20), (24), DFS
- (5735 - 5835 @ 20), (30)
+# Source:
+# https://www.trc.gov.lk/content/files/licensing/RTTE_GAZETTE-English.pdf
+# Sri Lanka RTTE Type Approval Rules 2020, Table 6 - Wideband Data Transmission
+country LK: DFS-ETSI
+ (2400 - 2483.5 @ 40), (200 mW)
+ (5150 - 5350 @ 160), (200 mW), DFS
+ (5470 - 5725 @ 160), (1000 mW), DFS
+ (5725 - 5875 @ 80), (1000 mW), DFS
# Source:
# http://lca.org.ls/images/documents/lesotho_national_frequency_allocation_plan.pdf
--
2.54.0
^ permalink raw reply related
* [PATCH] iw: channels: show CAC ongoing time
From: Janusz Dziedzic @ 2026-05-06 15:41 UTC (permalink / raw)
To: linux-wireless; +Cc: johannes, Janusz Dziedzic
Signed-off-by: Janusz Dziedzic <janusz.dziedzic@gmail.com>
---
phy.c | 15 +++++++++++++++
1 file changed, 15 insertions(+)
diff --git a/phy.c b/phy.c
index 03a7822..ab629c6 100644
--- a/phy.c
+++ b/phy.c
@@ -5,6 +5,7 @@
#include <sys/param.h>
#include <sys/stat.h>
#include <fcntl.h>
+#include <time.h>
#include <netlink/genl/genl.h>
#include <netlink/genl/family.h>
@@ -143,6 +144,20 @@ static int print_channels_handler(struct nl_msg *msg, void *arg)
printf("\t DFS CAC time: %u ms\n",
nla_get_u32(tb_freq[NL80211_FREQUENCY_ATTR_DFS_CAC_TIME]));
}
+
+ if (tb_freq[NL80211_FREQUENCY_ATTR_CAC_START_TIME]) {
+ struct timespec now_ts;
+ unsigned long long now_ns, cac_start_ns, elapsed_ms;
+
+ clock_gettime(CLOCK_BOOTTIME, &now_ts);
+ now_ns = now_ts.tv_sec * 1000000000ULL;
+ now_ns += now_ts.tv_nsec;
+
+ cac_start_ns = nla_get_u64(tb_freq[NL80211_FREQUENCY_ATTR_CAC_START_TIME]);
+ elapsed_ms = (now_ns - cac_start_ns) / 1000000;
+
+ printf("\t CAC ongoing (elapsed time: %llu ms)\n", elapsed_ms);
+ }
}
}
}
--
2.43.0
^ permalink raw reply related
* Re: [GIT PULL] wireless-next-2026-05-06
From: patchwork-bot+netdevbpf @ 2026-05-06 14:41 UTC (permalink / raw)
To: Johannes Berg; +Cc: netdev, linux-wireless
In-Reply-To: <20260506111147.224296-3-johannes@sipsolutions.net>
Hello:
This pull request was applied to netdev/net-next.git (main)
by Jakub Kicinski <kuba@kernel.org>:
On Wed, 6 May 2026 13:10:53 +0200 you wrote:
> Hi,
>
> More content for next, as below. I'm sending this now
> in hopes that we'll get net merged into net-next after
> it all lands, because I'm annoyed by the use-after-free
> issue that somehow we never noticed and now hits all
> the time.
>
> [...]
Here is the summary with links:
- [GIT,PULL] wireless-next-2026-05-06
https://git.kernel.org/netdev/net-next/c/2281958e6007
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
^ permalink raw reply
* Re: [GIT PULL] wireless-2026-05-06
From: patchwork-bot+netdevbpf @ 2026-05-06 14:40 UTC (permalink / raw)
To: Johannes Berg; +Cc: netdev, linux-wireless
In-Reply-To: <20260506110325.219675-3-johannes@sipsolutions.net>
Hello:
This pull request was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@kernel.org>:
On Wed, 6 May 2026 13:01:56 +0200 you wrote:
> Hi,
>
> More content given last week's kunit failure, but I've fixed
> that now, sorry about that. Things are all over really.
>
> Please pull and let us know if there's any problem.
>
> [...]
Here is the summary with links:
- [GIT,PULL] wireless-2026-05-06
https://git.kernel.org/netdev/net/c/b89e0100a5f6
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
^ permalink raw reply
* [PATCH v2 2/3] wifi: ath11k: fix error path leaks in some WMI calls
From: Nicolas Escande @ 2026-05-06 13:42 UTC (permalink / raw)
To: ath11k; +Cc: linux-wireless
In-Reply-To: <20260506134240.2284016-1-nico.escande@gmail.com>
This is the same pattern that was previously identified as problematic:
direct 'return ath11k_wmi_cmd_send(...)' will leak the skb in the error
path if it is not explicitly handled.
Fixes: c417b247ba04 ("ath11k: implement hardware data filter")
Fixes: 9cbd7fc9be82 ("ath11k: support MAC address randomization in scan")
Fixes: ba9177fcef21 ("ath11k: Add basic WoW functionalities")
Fixes: fec4b898f369 ("ath11k: Add WoW net-detect functionality")
Fixes: c3c36bfe998b ("ath11k: support ARP and NS offload")
Fixes: a16d9b50cfba ("ath11k: support GTK rekey offload")
Fixes: 652f69ed9c1b ("ath11k: Add support for SAR")
Fixes: 0f84a156aa3b ("ath11k: Handle keepalive during WoWLAN suspend and resume")
Signed-off-by: Nicolas Escande <nico.escande@gmail.com>
---
drivers/net/wireless/ath/ath11k/wmi.c | 112 ++++++++++++++++++++++----
1 file changed, 96 insertions(+), 16 deletions(-)
diff --git a/drivers/net/wireless/ath/ath11k/wmi.c b/drivers/net/wireless/ath/ath11k/wmi.c
index 024c2aad9fb4..dca6e011cc40 100644
--- a/drivers/net/wireless/ath/ath11k/wmi.c
+++ b/drivers/net/wireless/ath/ath11k/wmi.c
@@ -9299,7 +9299,7 @@ int ath11k_wmi_hw_data_filter_cmd(struct ath11k *ar, u32 vdev_id,
{
struct wmi_hw_data_filter_cmd *cmd;
struct sk_buff *skb;
- int len;
+ int ret, len;
len = sizeof(*cmd);
skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
@@ -9324,7 +9324,13 @@ int ath11k_wmi_hw_data_filter_cmd(struct ath11k *ar, u32 vdev_id,
"hw data filter enable %d filter_bitmap 0x%x\n",
enable, filter_bitmap);
- return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_HW_DATA_FILTER_CMDID);
+ ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_HW_DATA_FILTER_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_HW_DATA_FILTER_CMDID\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
int ath11k_wmi_wow_host_wakeup_ind(struct ath11k *ar)
@@ -9389,7 +9395,7 @@ int ath11k_wmi_scan_prob_req_oui(struct ath11k *ar,
struct sk_buff *skb;
struct wmi_scan_prob_req_oui_cmd *cmd;
u32 prob_req_oui;
- int len;
+ int ret, len;
prob_req_oui = (((u32)mac_addr[0]) << 16) |
(((u32)mac_addr[1]) << 8) | mac_addr[2];
@@ -9408,7 +9414,13 @@ int ath11k_wmi_scan_prob_req_oui(struct ath11k *ar,
ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "scan prob req oui %d\n",
prob_req_oui);
- return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_SCAN_PROB_REQ_OUI_CMDID);
+ ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_SCAN_PROB_REQ_OUI_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_SCAN_PROB_REQ_OUI_CMDID\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
int ath11k_wmi_wow_add_wakeup_event(struct ath11k *ar, u32 vdev_id,
@@ -9418,6 +9430,7 @@ int ath11k_wmi_wow_add_wakeup_event(struct ath11k *ar, u32 vdev_id,
struct wmi_wow_add_del_event_cmd *cmd;
struct sk_buff *skb;
size_t len;
+ int ret;
len = sizeof(*cmd);
skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
@@ -9435,7 +9448,13 @@ int ath11k_wmi_wow_add_wakeup_event(struct ath11k *ar, u32 vdev_id,
ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "tlv wow add wakeup event %s enable %d vdev_id %d\n",
wow_wakeup_event(event), enable, vdev_id);
- return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_ENABLE_DISABLE_WAKE_EVENT_CMDID);
+ ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_ENABLE_DISABLE_WAKE_EVENT_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_WOW_ENABLE_DISABLE_WAKE_EVENT_CMDID\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
int ath11k_wmi_wow_add_pattern(struct ath11k *ar, u32 vdev_id, u32 pattern_id,
@@ -9448,6 +9467,7 @@ int ath11k_wmi_wow_add_pattern(struct ath11k *ar, u32 vdev_id, u32 pattern_id,
struct sk_buff *skb;
u8 *ptr;
size_t len;
+ int ret;
len = sizeof(*cmd) +
sizeof(*tlv) + /* array struct */
@@ -9540,7 +9560,13 @@ int ath11k_wmi_wow_add_pattern(struct ath11k *ar, u32 vdev_id, u32 pattern_id,
ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "tlv wow add pattern vdev_id %d pattern_id %d pattern_offset %d\n",
vdev_id, pattern_id, pattern_offset);
- return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_ADD_WAKE_PATTERN_CMDID);
+ ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_ADD_WAKE_PATTERN_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_WOW_ADD_WAKE_PATTERN_CMDID\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
int ath11k_wmi_wow_del_pattern(struct ath11k *ar, u32 vdev_id, u32 pattern_id)
@@ -9548,6 +9574,7 @@ int ath11k_wmi_wow_del_pattern(struct ath11k *ar, u32 vdev_id, u32 pattern_id)
struct wmi_wow_del_pattern_cmd *cmd;
struct sk_buff *skb;
size_t len;
+ int ret;
len = sizeof(*cmd);
skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
@@ -9566,7 +9593,13 @@ int ath11k_wmi_wow_del_pattern(struct ath11k *ar, u32 vdev_id, u32 pattern_id)
ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "tlv wow del pattern vdev_id %d pattern_id %d\n",
vdev_id, pattern_id);
- return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_DEL_WAKE_PATTERN_CMDID);
+ ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_DEL_WAKE_PATTERN_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_WOW_DEL_WAKE_PATTERN_CMDID\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
static struct sk_buff *
@@ -9710,6 +9743,7 @@ int ath11k_wmi_wow_config_pno(struct ath11k *ar, u32 vdev_id,
struct wmi_pno_scan_req *pno_scan)
{
struct sk_buff *skb;
+ int ret;
if (pno_scan->enable)
skb = ath11k_wmi_op_gen_config_pno_start(ar, vdev_id, pno_scan);
@@ -9719,7 +9753,13 @@ int ath11k_wmi_wow_config_pno(struct ath11k *ar, u32 vdev_id,
if (IS_ERR_OR_NULL(skb))
return -ENOMEM;
- return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_NETWORK_LIST_OFFLOAD_CONFIG_CMDID);
+ ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_NETWORK_LIST_OFFLOAD_CONFIG_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_NETWORK_LIST_OFFLOAD_CONFIG_CMDID\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
static void ath11k_wmi_fill_ns_offload(struct ath11k *ar,
@@ -9837,6 +9877,7 @@ int ath11k_wmi_arp_ns_offload(struct ath11k *ar,
u8 *buf_ptr;
size_t len;
u8 ns_cnt, ns_ext_tuples = 0;
+ int ret;
offload = &arvif->arp_ns_offload;
ns_cnt = offload->ipv6_count;
@@ -9875,7 +9916,13 @@ int ath11k_wmi_arp_ns_offload(struct ath11k *ar,
if (ns_ext_tuples)
ath11k_wmi_fill_ns_offload(ar, offload, &buf_ptr, enable, 1);
- return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_SET_ARP_NS_OFFLOAD_CMDID);
+ ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_SET_ARP_NS_OFFLOAD_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_SET_ARP_NS_OFFLOAD_CMDID\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
int ath11k_wmi_gtk_rekey_offload(struct ath11k *ar,
@@ -9883,7 +9930,7 @@ int ath11k_wmi_gtk_rekey_offload(struct ath11k *ar,
{
struct wmi_gtk_rekey_offload_cmd *cmd;
struct ath11k_rekey_data *rekey_data = &arvif->rekey_data;
- int len;
+ int ret, len;
struct sk_buff *skb;
__le64 replay_ctr;
@@ -9917,14 +9964,20 @@ int ath11k_wmi_gtk_rekey_offload(struct ath11k *ar,
ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "offload gtk rekey vdev: %d %d\n",
arvif->vdev_id, enable);
- return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_GTK_OFFLOAD_CMDID);
+ ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_GTK_OFFLOAD_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_GTK_OFFLOAD_CMDID offload\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
int ath11k_wmi_gtk_rekey_getinfo(struct ath11k *ar,
struct ath11k_vif *arvif)
{
struct wmi_gtk_rekey_offload_cmd *cmd;
- int len;
+ int ret, len;
struct sk_buff *skb;
len = sizeof(*cmd);
@@ -9941,7 +9994,13 @@ int ath11k_wmi_gtk_rekey_getinfo(struct ath11k *ar,
ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "get gtk rekey vdev_id: %d\n",
arvif->vdev_id);
- return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_GTK_OFFLOAD_CMDID);
+ ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_GTK_OFFLOAD_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_GTK_OFFLOAD_CMDID getinfo\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
int ath11k_wmi_pdev_set_bios_sar_table_param(struct ath11k *ar, const u8 *sar_val)
@@ -9951,6 +10010,7 @@ int ath11k_wmi_pdev_set_bios_sar_table_param(struct ath11k *ar, const u8 *sar_va
struct sk_buff *skb;
u8 *buf_ptr;
u32 len, sar_len_aligned, rsvd_len_aligned;
+ int ret;
sar_len_aligned = roundup(BIOS_SAR_TABLE_LEN, sizeof(u32));
rsvd_len_aligned = roundup(BIOS_SAR_RSVD1_LEN, sizeof(u32));
@@ -9981,7 +10041,13 @@ int ath11k_wmi_pdev_set_bios_sar_table_param(struct ath11k *ar, const u8 *sar_va
tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
FIELD_PREP(WMI_TLV_LEN, rsvd_len_aligned);
- return ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_BIOS_SAR_TABLE_CMDID);
+ ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_BIOS_SAR_TABLE_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_PDEV_SET_BIOS_SAR_TABLE_CMDID\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
int ath11k_wmi_pdev_set_bios_geo_table_param(struct ath11k *ar)
@@ -9992,6 +10058,7 @@ int ath11k_wmi_pdev_set_bios_geo_table_param(struct ath11k *ar)
struct sk_buff *skb;
u8 *buf_ptr;
u32 len, rsvd_len_aligned;
+ int ret;
rsvd_len_aligned = roundup(BIOS_SAR_RSVD2_LEN, sizeof(u32));
len = sizeof(*cmd) + TLV_HDR_SIZE + rsvd_len_aligned;
@@ -10011,7 +10078,13 @@ int ath11k_wmi_pdev_set_bios_geo_table_param(struct ath11k *ar)
tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
FIELD_PREP(WMI_TLV_LEN, rsvd_len_aligned);
- return ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_BIOS_GEO_TABLE_CMDID);
+ ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_BIOS_GEO_TABLE_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_PDEV_SET_BIOS_GEO_TABLE_CMDID\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
int ath11k_wmi_sta_keepalive(struct ath11k *ar,
@@ -10022,6 +10095,7 @@ int ath11k_wmi_sta_keepalive(struct ath11k *ar,
struct wmi_sta_keepalive_arp_resp *arp;
struct sk_buff *skb;
size_t len;
+ int ret;
len = sizeof(*cmd) + sizeof(*arp);
skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
@@ -10053,7 +10127,13 @@ int ath11k_wmi_sta_keepalive(struct ath11k *ar,
"sta keepalive vdev %d enabled %d method %d interval %d\n",
arg->vdev_id, arg->enabled, arg->method, arg->interval);
- return ath11k_wmi_cmd_send(wmi, skb, WMI_STA_KEEPALIVE_CMDID);
+ ret = ath11k_wmi_cmd_send(wmi, skb, WMI_STA_KEEPALIVE_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_STA_KEEPALIVE_CMDID\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
bool ath11k_wmi_supports_6ghz_cc_ext(struct ath11k *ar)
--
2.54.0
^ permalink raw reply related
* [PATCH v2 3/3] wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()
From: Nicolas Escande @ 2026-05-06 13:42 UTC (permalink / raw)
To: ath11k; +Cc: linux-wireless
In-Reply-To: <20260506134240.2284016-1-nico.escande@gmail.com>
This is similar to what was fixed by previous patches. We have a to
ath11k_wmi_cmd_send() which does check the return value, but forgot to
free the related skb.
Fixes: b43310e44edc ("wifi: ath11k: factory test mode support")
Signed-off-by: Nicolas Escande <nico.escande@gmail.com>
---
drivers/net/wireless/ath/ath11k/testmode.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/drivers/net/wireless/ath/ath11k/testmode.c b/drivers/net/wireless/ath/ath11k/testmode.c
index a9751ea2a0b7..c72eed358f6d 100644
--- a/drivers/net/wireless/ath/ath11k/testmode.c
+++ b/drivers/net/wireless/ath/ath11k/testmode.c
@@ -457,6 +457,7 @@ static int ath11k_tm_cmd_wmi_ftm(struct ath11k *ar, struct nlattr *tb[])
ret = ath11k_wmi_cmd_send(wmi, skb, cmd_id);
if (ret) {
ath11k_warn(ar->ab, "failed to send wmi ftm command: %d\n", ret);
+ dev_kfree_skb(skb);
goto out;
}
--
2.54.0
^ permalink raw reply related
* [PATCH v2 1/3] wifi: ath11k: fix error path leaks in some WMI WOW calls
From: Nicolas Escande @ 2026-05-06 13:42 UTC (permalink / raw)
To: ath11k; +Cc: linux-wireless
In-Reply-To: <20260506134240.2284016-1-nico.escande@gmail.com>
Fix two instances where we used to directly return the result of
ath11k_wmi_cmd_send(...). Because we did not check the return value, we
also did not free the skb in the error path.
Fixes: 79802b13a492 ("ath11k: implement WoW enable and wakeup commands")
Signed-off-by: Nicolas Escande <nico.escande@gmail.com>
---
drivers/net/wireless/ath/ath11k/wmi.c | 19 ++++++++++++++++---
1 file changed, 16 insertions(+), 3 deletions(-)
diff --git a/drivers/net/wireless/ath/ath11k/wmi.c b/drivers/net/wireless/ath/ath11k/wmi.c
index 40747fba3b0c..024c2aad9fb4 100644
--- a/drivers/net/wireless/ath/ath11k/wmi.c
+++ b/drivers/net/wireless/ath/ath11k/wmi.c
@@ -9332,6 +9332,7 @@ int ath11k_wmi_wow_host_wakeup_ind(struct ath11k *ar)
struct wmi_wow_host_wakeup_ind *cmd;
struct sk_buff *skb;
size_t len;
+ int ret;
len = sizeof(*cmd);
skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
@@ -9345,14 +9346,20 @@ int ath11k_wmi_wow_host_wakeup_ind(struct ath11k *ar)
ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "tlv wow host wakeup ind\n");
- return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_HOSTWAKEUP_FROM_SLEEP_CMDID);
+ ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_HOSTWAKEUP_FROM_SLEEP_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_WOW_HOSTWAKEUP_FROM_SLEEP_CMDID\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
int ath11k_wmi_wow_enable(struct ath11k *ar)
{
struct wmi_wow_enable_cmd *cmd;
struct sk_buff *skb;
- int len;
+ int ret, len;
len = sizeof(*cmd);
skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
@@ -9367,7 +9374,13 @@ int ath11k_wmi_wow_enable(struct ath11k *ar)
cmd->pause_iface_config = WOW_IFACE_PAUSE_ENABLED;
ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "tlv wow enable\n");
- return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_ENABLE_CMDID);
+ ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_ENABLE_CMDID);
+ if (ret) {
+ ath11k_warn(ar->ab, "failed to send WMI_WOW_ENABLE_CMDID\n");
+ dev_kfree_skb(skb);
+ }
+
+ return ret;
}
int ath11k_wmi_scan_prob_req_oui(struct ath11k *ar,
--
2.54.0
^ permalink raw reply related
* [PATCH v2 0/3] fix leaks in some WMI error path
From: Nicolas Escande @ 2026-05-06 13:42 UTC (permalink / raw)
To: ath11k; +Cc: linux-wireless
So this is similar work to what has been posted here [0] for ath12k.
When we use the pattern 'return ath11k_wmi_cmd_send(...)' without
explicitly checking the return value we fail to free the allocated skb.
This has been split into 2 patches per Jeff's guidance to hopefully
ease the backporting process.
[0] https://lore.kernel.org/linux-wireless/20260422163258.3013872-1-nico.escande@gmail.com/
---
Changes from v1:
- Added patch to also fix ath11k_tm_cmd_wmi_ftm() as per Rameshkumar's remark
Nicolas Escande (3):
wifi: ath11k: fix leak in error path of some WOW related WMI commands
wifi: ath11k: fix error path leaks in some WMI calls
wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()
drivers/net/wireless/ath/ath11k/testmode.c | 1 +
drivers/net/wireless/ath/ath11k/wmi.c | 131 ++++++++++++++++++---
2 files changed, 113 insertions(+), 19 deletions(-)
--
2.54.0
^ permalink raw reply
* [PATCH wireless-next v2 2/2] wifi: mac80211: don't recalc min def for S1G chan ctx
From: Lachlan Hodges @ 2026-05-06 13:19 UTC (permalink / raw)
To: johannes; +Cc: linux-wireless, arien.judge, Lachlan Hodges
In-Reply-To: <20260506131925.2088353-1-lachlan.hodges@morsemicro.com>
__ieee80211_recalc_chanctx_min_def() currently does not attempt
to find the min def for S1G widths, meaning the BW will never change.
However, the following call into ieee80211_chan_bw_change() will
lead to a WARN within ieee80211_chan_width_to_rx_bw(). Not only that,
this entire path is geared towards 20MHz based channels, so it doesn't
make sense anyway. For now, return early when calculating the mindef
for S1G channels.
Fixes: d879d4da4579 ("wifi: mac80211: clean up initial STA NSS/bandwidth handling")
Signed-off-by: Lachlan Hodges <lachlan.hodges@morsemicro.com>
---
net/mac80211/chan.c | 10 ++++++++--
1 file changed, 8 insertions(+), 2 deletions(-)
diff --git a/net/mac80211/chan.c b/net/mac80211/chan.c
index b9d563f927da..c64a99131954 100644
--- a/net/mac80211/chan.c
+++ b/net/mac80211/chan.c
@@ -751,8 +751,14 @@ _ieee80211_recalc_chanctx_min_def(struct ieee80211_local *local,
struct ieee80211_link_data *rsvd_for,
bool check_reserved)
{
- u32 changed = __ieee80211_recalc_chanctx_min_def(local, ctx, rsvd_for,
- check_reserved);
+ u32 changed;
+
+ /* No recalc for S1G chan ctx's */
+ if (cfg80211_chandef_is_s1g(&ctx->conf.def))
+ return;
+
+ changed = __ieee80211_recalc_chanctx_min_def(local, ctx, rsvd_for,
+ check_reserved);
/* check is BW narrowed */
ieee80211_chan_bw_change(local, ctx, false, true);
--
2.43.0
^ permalink raw reply related
* [PATCH wireless-next v2 1/2] wifi: mac80211: skip NSS and BW init for S1G sta
From: Lachlan Hodges @ 2026-05-06 13:19 UTC (permalink / raw)
To: johannes; +Cc: linux-wireless, arien.judge, Lachlan Hodges
In-Reply-To: <20260506131925.2088353-1-lachlan.hodges@morsemicro.com>
Currently there is no S1G STA bandwidth support throughout mac80211
as existing support is all based on 20MHz widths. With the recent
STA NSS/BW handling rework, S1G associations now hit the new WARN within
ieee80211_chan_width_to_rx_bw() as the chandef is not a 20MHz based
width. For now, skip initialisating link_sta->pub->bandwidth for
S1G chandefs to avoid the WARN though this should at some point be
properly implemented since there are vendors that offer differing
maximum bandwidths.
Additionally, currently all S1G hardware out there is 1SS so rather
then introducing new parsing code which wouldn't be used anyway, just
initialise the NSS related fields to 1 and skip initialising the STA
bandwidth for S1G chandefs within ieee80211_sta_init_nss_bw_capa().
Fixes: d879d4da4579 ("wifi: mac80211: clean up initial STA NSS/bandwidth handling")
Signed-off-by: Lachlan Hodges <lachlan.hodges@morsemicro.com>
---
net/mac80211/sta_info.c | 17 +++++++++++++++++
1 file changed, 17 insertions(+)
diff --git a/net/mac80211/sta_info.c b/net/mac80211/sta_info.c
index aba2fabfe0db..0ea37016cd4f 100644
--- a/net/mac80211/sta_info.c
+++ b/net/mac80211/sta_info.c
@@ -3516,6 +3516,23 @@ static u8 ieee80211_sta_nss_capability(struct link_sta_info *link_sta)
void ieee80211_sta_init_nss_bw_capa(struct link_sta_info *link_sta,
struct cfg80211_chan_def *chandef)
{
+ /*
+ * TODO: The entirety of the STA Tx/Rx bandwidth handling
+ * assumes 20MHz based widths, so for now don't initialise
+ * pubsta->bandwidth for S1G bands. Since enum
+ * ieee80211_sta_rx_bandwidth is ordered, we will probably
+ * need to introduce ieee80211_s1g_sta_rx_bandwidth with
+ * S1G widths and associated S1G specific code. Additionally,
+ * existing S1G hardware is all 1SS, in the future if hardware
+ * starts supporting >1SS this should be implemented in
+ * ieee80211_sta_nss_capability().
+ */
+ if (cfg80211_chandef_is_s1g(chandef)) {
+ link_sta->capa_nss = 1;
+ link_sta->pub->rx_nss = 1;
+ return;
+ }
+
link_sta->capa_nss = ieee80211_sta_nss_capability(link_sta);
link_sta->pub->rx_nss = link_sta->capa_nss;
--
2.43.0
^ permalink raw reply related
* [PATCH wireless-next v2 0/2] S1G channel fixes
From: Lachlan Hodges @ 2026-05-06 13:19 UTC (permalink / raw)
To: johannes; +Cc: linux-wireless, arien.judge, Lachlan Hodges
Some recent changes to the STA BW handling now lead to WARNs during
S1G association. These are more or less bandaids that will need to
be fixed in the future hence the TODO.
This will definitely need to be sorted out in the future, even if it's
just a rudimentary implementation especially if we ever want channel
switching and "proper" interop with other vendors such as Newracomm
who have different maximum bandwidths. I've sent these two atleast
while the driver is under review, though I know TODOs can very easily
remain as TODOs 10 years from now...
v1->v2: retarget to wireless-next since the changes aren't even in
wireless :)
[1] https://lore.kernel.org/linux-wireless/20251008014006.219605-1-lachlan.hodges@morsemicro.com/
Lachlan Hodges (2):
wifi: mac80211: skip NSS and BW init for S1G sta
wifi: mac80211: don't recalc min def for S1G chan ctx
net/mac80211/chan.c | 10 ++++++++--
net/mac80211/sta_info.c | 17 +++++++++++++++++
2 files changed, 25 insertions(+), 2 deletions(-)
--
2.43.0
^ permalink raw reply
* [PATCH rtw-next 14/14] wifi: rtw89: check skb headroom before adding radiotap
From: Ping-Ke Shih @ 2026-05-06 13:10 UTC (permalink / raw)
To: linux-wireless
In-Reply-To: <20260506131000.1706298-1-pkshih@realtek.com>
The radiotap headroom is allocated only if IEEE80211_CONF_MONITOR is set.
However, it is potentially racing that SKB allocation without radiotap
headroom but adding radiotap from matched PPDU status of another SKB.
Add a check to avoid the case.
Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
---
drivers/net/wireless/realtek/rtw89/core.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/drivers/net/wireless/realtek/rtw89/core.c b/drivers/net/wireless/realtek/rtw89/core.c
index c21737981b61..432d46dfd26a 100644
--- a/drivers/net/wireless/realtek/rtw89/core.c
+++ b/drivers/net/wireless/realtek/rtw89/core.c
@@ -3758,6 +3758,13 @@ static void rtw89_core_update_radiotap(struct rtw89_dev *rtwdev,
if (!(rtwdev->hw->conf.flags & IEEE80211_CONF_MONITOR))
return;
+ /*
+ * At transient adding a monitor vif from a station vif, the headroom
+ * might not include radiotap.
+ */
+ if (unlikely(skb_headroom(skb) < RTW89_RADIOTAP_ROOM + NET_SKB_PAD))
+ return;
+
if (rx_status->encoding == RX_ENC_VHT)
rtw89_core_update_radiotap_vht(rtwdev, skb, rx_status, phy_ppdu);
else if (rx_status->encoding == RX_ENC_HE)
--
2.25.1
^ permalink raw reply related
* [PATCH rtw-next 13/14] wifi: rtw89: phy: support PHY status IE-09 GEN2 for RTL8922D
From: Ping-Ke Shih @ 2026-05-06 13:09 UTC (permalink / raw)
To: linux-wireless
In-Reply-To: <20260506131000.1706298-1-pkshih@realtek.com>
The format of PHY status IE-10 for RTL8922D is different from earlier
chips. Fortunately only starting bit is different, but the layout is the
same. Get the VHT/HE SIG-A value by corresponding mask accordingly.
The IE-09 format of generation 0 and 1 are totally the same.
Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
---
drivers/net/wireless/realtek/rtw89/core.c | 72 +++++++++++++++++++----
drivers/net/wireless/realtek/rtw89/core.h | 4 +-
drivers/net/wireless/realtek/rtw89/txrx.h | 23 +++++++-
3 files changed, 82 insertions(+), 17 deletions(-)
diff --git a/drivers/net/wireless/realtek/rtw89/core.c b/drivers/net/wireless/realtek/rtw89/core.c
index fddb0c822c28..c21737981b61 100644
--- a/drivers/net/wireless/realtek/rtw89/core.c
+++ b/drivers/net/wireless/realtek/rtw89/core.c
@@ -2156,7 +2156,19 @@ static void rtw89_core_parse_phy_status_ie09(struct rtw89_dev *rtwdev,
const struct rtw89_phy_sts_iehdr *iehdr,
struct rtw89_rx_phy_ppdu *phy_ppdu)
{
- phy_ppdu->ie09 = (const void *)iehdr;
+ const struct rtw89_phy_gen_def *phy = rtwdev->chip->phy_def;
+ const union rtw89_phy_sts_ie09 *ie09;
+ u16 ie_len;
+
+ ie09 = (const void *)iehdr;
+
+ if (phy->physt_gen >= 2) {
+ ie_len = rtw89_core_get_phy_status_ie_len(rtwdev, (const void *)iehdr);
+ if (ie_len < sizeof(ie09->gen2))
+ return;
+ }
+
+ phy_ppdu->ie09 = ie09;
}
static void rtw89_core_parse_phy_status_ie10(struct rtw89_dev *rtwdev,
@@ -3190,7 +3202,8 @@ static void rtw89_core_update_radiotap_vht(struct rtw89_dev *rtwdev,
struct ieee80211_rx_status *rx_status,
struct rtw89_rx_phy_ppdu *phy_ppdu)
{
- const struct rtw89_phy_sts_ie09 *ie09;
+ const struct rtw89_phy_gen_def *phy = rtwdev->chip->phy_def;
+ const union rtw89_phy_sts_ie09 *ie09;
struct ieee80211_radiotap_vht *vht;
u8 group_id;
u32 sig_a1;
@@ -3208,7 +3221,10 @@ static void rtw89_core_update_radiotap_vht(struct rtw89_dev *rtwdev,
memset(vht, 0, sizeof(*vht));
rx_status->flag |= RX_FLAG_RADIOTAP_VHT;
- sig_a1 = le64_get_bits(ie09->qw0, RTW89_PHY_STS_IE09_VHT_SIG_A1_MASK);
+ if (phy->physt_gen >= 2)
+ sig_a1 = le64_get_bits(ie09->gen2.qw0, RTW89_PHY_STS_IE09_VHT_SIG_A1_MASK_GEN2);
+ else
+ sig_a1 = le64_get_bits(ie09->gen0.qw0, RTW89_PHY_STS_IE09_VHT_SIG_A1_MASK);
group_id = u32_get_bits(sig_a1, RTW89_PHY_STS_IE09_VHT_SIG_A1_GRP_ID);
vht->group_id = group_id;
@@ -3233,16 +3249,26 @@ static void rtw89_core_update_radiotap_he_su(struct rtw89_dev *rtwdev,
struct sk_buff *skb,
struct ieee80211_rx_status *rx_status,
struct ieee80211_radiotap_he *he,
- const struct rtw89_phy_sts_ie09 *ie09)
+ const union rtw89_phy_sts_ie09 *ie09)
{
+ const struct rtw89_phy_gen_def *phy = rtwdev->chip->phy_def;
u32 sig_a1, sig_a2;
u16 t;
if (!ie09)
return;
- sig_a1 = le64_get_bits(ie09->qw0, RTW89_PHY_STS_IE09_HE_SU_SIG_A1_MASK);
- sig_a2 = le64_get_bits(ie09->qw0, RTW89_PHY_STS_IE09_HE_SU_SIG_A2_MASK);
+ if (phy->physt_gen >= 2) {
+ sig_a1 = le64_get_bits(ie09->gen2.qw0,
+ RTW89_PHY_STS_IE09_HE_SU_SIG_A1_MASK_GEN2);
+ sig_a2 = le64_get_bits(ie09->gen2.qw0,
+ RTW89_PHY_STS_IE09_HE_SU_SIG_A2_MASK_GEN2_L0);
+ sig_a2 |= le64_get_bits(ie09->gen2.qw1,
+ RTW89_PHY_STS_IE09_HE_SU_SIG_A2_MASK_GEN2_H6) << 6;
+ } else {
+ sig_a1 = le64_get_bits(ie09->gen0.qw0, RTW89_PHY_STS_IE09_HE_SU_SIG_A1_MASK);
+ sig_a2 = le64_get_bits(ie09->gen0.qw0, RTW89_PHY_STS_IE09_HE_SU_SIG_A2_MASK);
+ }
he->data1 |= cpu_to_le16(IEEE80211_RADIOTAP_HE_DATA1_BEAM_CHANGE_KNOWN |
IEEE80211_RADIOTAP_HE_DATA1_UL_DL_KNOWN |
@@ -3295,16 +3321,26 @@ static void rtw89_core_update_radiotap_he_tb(struct rtw89_dev *rtwdev,
struct sk_buff *skb,
struct ieee80211_rx_status *rx_status,
struct ieee80211_radiotap_he *he,
- const struct rtw89_phy_sts_ie09 *sig)
+ const union rtw89_phy_sts_ie09 *sig)
{
+ const struct rtw89_phy_gen_def *phy = rtwdev->chip->phy_def;
u32 sig_a1, sig_a2;
u16 t;
if (!sig)
return;
- sig_a1 = le64_get_bits(sig->qw0, RTW89_PHY_STS_IE09_HE_TB_SIG_A1_MASK);
- sig_a2 = le64_get_bits(sig->qw0, RTW89_PHY_STS_IE09_HE_TB_SIG_A2_MASK);
+ if (phy->physt_gen >= 2) {
+ sig_a1 = le64_get_bits(sig->gen2.qw0,
+ RTW89_PHY_STS_IE09_HE_TB_SIG_A1_MASK_GEN2);
+ sig_a2 = le64_get_bits(sig->gen2.qw0,
+ RTW89_PHY_STS_IE09_HE_TB_SIG_A2_MASK_GEN2_L0);
+ sig_a2 |= le64_get_bits(sig->gen2.qw1,
+ RTW89_PHY_STS_IE09_HE_TB_SIG_A2_MASK_GEN2_H6);
+ } else {
+ sig_a1 = le64_get_bits(sig->gen0.qw0, RTW89_PHY_STS_IE09_HE_TB_SIG_A1_MASK);
+ sig_a2 = le64_get_bits(sig->gen0.qw0, RTW89_PHY_STS_IE09_HE_TB_SIG_A2_MASK);
+ }
he->data1 |= cpu_to_le16(IEEE80211_RADIOTAP_HE_DATA1_BSS_COLOR_KNOWN |
IEEE80211_RADIOTAP_HE_DATA1_SPTL_REUSE_KNOWN |
@@ -3445,9 +3481,10 @@ static void rtw89_core_update_radiotap_he_mu(struct rtw89_dev *rtwdev,
struct ieee80211_rx_status *rx_status,
struct ieee80211_radiotap_he *he,
struct ieee80211_radiotap_he_mu *he_mu,
- const struct rtw89_phy_sts_ie09 *ie09,
+ const union rtw89_phy_sts_ie09 *ie09,
const struct rtw89_phy_sts_ie10 *ie10)
{
+ const struct rtw89_phy_gen_def *phy = rtwdev->chip->phy_def;
const u8 *c1 = NULL, *c2 = NULL;
int n_center_26tone, n_ru, i;
bool doppler, comp;
@@ -3468,8 +3505,17 @@ static void rtw89_core_update_radiotap_he_mu(struct rtw89_dev *rtwdev,
IEEE80211_RADIOTAP_HE_DATA2_PRE_FEC_PAD_KNOWN |
IEEE80211_RADIOTAP_HE_DATA2_PE_DISAMBIG_KNOWN);
- sig_a1 = le64_get_bits(ie09->qw0, RTW89_PHY_STS_IE09_HE_MU_SIG_A1_MASK);
- sig_a2 = le64_get_bits(ie09->qw0, RTW89_PHY_STS_IE09_HE_MU_SIG_A2_MASK);
+ if (phy->physt_gen >= 2) {
+ sig_a1 = le64_get_bits(ie09->gen2.qw0,
+ RTW89_PHY_STS_IE09_HE_MU_SIG_A1_MASK_GEN2);
+ sig_a2 = le64_get_bits(ie09->gen2.qw0,
+ RTW89_PHY_STS_IE09_HE_MU_SIG_A2_MASK_GEN2_L0);
+ sig_a2 |= le64_get_bits(ie09->gen2.qw1,
+ RTW89_PHY_STS_IE09_HE_MU_SIG_A2_MASK_GEN2_H6) << 6;
+ } else {
+ sig_a1 = le64_get_bits(ie09->gen0.qw0, RTW89_PHY_STS_IE09_HE_MU_SIG_A1_MASK);
+ sig_a2 = le64_get_bits(ie09->gen0.qw0, RTW89_PHY_STS_IE09_HE_MU_SIG_A2_MASK);
+ }
t = u32_get_bits(sig_a1, RTW89_PHY_STS_IE09_HE_MU_SIG_A1_ULDL);
he->data3 |= le16_encode_bits(t, IEEE80211_RADIOTAP_HE_DATA3_UL_DL);
@@ -3593,7 +3639,7 @@ static void rtw89_core_update_radiotap_he(struct rtw89_dev *rtwdev,
.data2 = cpu_to_le16(IEEE80211_RADIOTAP_HE_DATA2_GI_KNOWN),
};
struct ieee80211_radiotap_he_mu *he_mu = NULL;
- const struct rtw89_phy_sts_ie09 *ie09;
+ const union rtw89_phy_sts_ie09 *ie09;
const struct rtw89_phy_sts_ie10 *ie10;
struct ieee80211_radiotap_he *he;
u16 he_format;
diff --git a/drivers/net/wireless/realtek/rtw89/core.h b/drivers/net/wireless/realtek/rtw89/core.h
index b85d7fa4296a..a6dee97d99f2 100644
--- a/drivers/net/wireless/realtek/rtw89/core.h
+++ b/drivers/net/wireless/realtek/rtw89/core.h
@@ -24,7 +24,7 @@ struct rtw89_h2c_rf_tssi;
struct rtw89_fw_txpwr_track_cfg;
struct rtw89_phy_rfk_log_fmt;
struct rtw89_phy_calc_efuse_gain;
-struct rtw89_phy_sts_ie09;
+union rtw89_phy_sts_ie09;
struct rtw89_phy_sts_ie10;
struct rtw89_debugfs;
struct rtw89_regd_data;
@@ -867,7 +867,7 @@ struct rtw89_rx_phy_ppdu {
bool to_self;
bool valid;
bool hdr_2_en;
- const struct rtw89_phy_sts_ie09 *ie09; /* SIG-A */
+ const union rtw89_phy_sts_ie09 *ie09; /* SIG-A */
const struct rtw89_phy_sts_ie10 *ie10; /* SIG-B */
};
diff --git a/drivers/net/wireless/realtek/rtw89/txrx.h b/drivers/net/wireless/realtek/rtw89/txrx.h
index 4a567d3fe3f7..4e7109fbe7c9 100644
--- a/drivers/net/wireless/realtek/rtw89/txrx.h
+++ b/drivers/net/wireless/realtek/rtw89/txrx.h
@@ -658,15 +658,23 @@ struct rtw89_phy_sts_ie01_v2 {
#define RTW89_PHY_STS_IE01_V2_W9_RPL_FD_C GENMASK(11, 4)
#define RTW89_PHY_STS_IE01_V2_W9_RPL_FD_D GENMASK(23, 16)
-struct rtw89_phy_sts_ie09 {
- __le64 qw0;
+union rtw89_phy_sts_ie09 {
+ struct {
+ __le64 qw0;
+ } gen0;
+ struct {
+ __le64 qw0;
+ __le64 qw1;
+ } gen2;
} __packed;
#define RTW89_PHY_STS_IE09_L_SIG_MASK GENMASK(21, 5) /* Legacy/VHT/HE L-SIG */
+#define RTW89_PHY_STS_IE09_L_SIG_MASK_GEN2 GENMASK(31, 15) /* Legacy/VHT/HE L-SIG for GEN2 */
#define RTW89_PHY_STS_IE09_L_SIG_RATE GENMASK(3, 0)
#define RTW89_PHY_STS_IE09_L_SIG_RSVD BIT(4)
#define RTW89_PHY_STS_IE09_L_SIG_LENGTH GENMASK(16, 5)
#define RTW89_PHY_STS_IE09_VHT_SIG_A1_MASK GENMASK_ULL(45, 22) /* VHT SIG-A1 */
+#define RTW89_PHY_STS_IE09_VHT_SIG_A1_MASK_GEN2 GENMASK_ULL(55, 32) /* VHT SIG-A1 for GEN2 */
#define RTW89_PHY_STS_IE09_VHT_SIG_A1_BW GENMASK(1, 0)
#define RTW89_PHY_STS_IE09_VHT_SIG_A1_RSVD1 BIT(2)
#define RTW89_PHY_STS_IE09_VHT_SIG_A1_STBC BIT(3)
@@ -680,6 +688,8 @@ struct rtw89_phy_sts_ie09 {
#define RTW89_PHY_STS_IE09_VHT_SIG_A1_TXOP_NOPS BIT(22)
#define RTW89_PHY_STS_IE09_VHT_SIG_A1_RSVD2 BIT(23)
#define RTW89_PHY_STS_IE09_VHT_SIG_A2_MASK GENMASK_ULL(55, 46) /* VHT SIG-A2 */
+#define RTW89_PHY_STS_IE09_VHT_SIG_A2_MASK_GEN2_L0 GENMASK_ULL(63, 56) /* VHT SIG-A2 for GEN2 */
+#define RTW89_PHY_STS_IE09_VHT_SIG_A2_MASK_GEN2_H8 GENMASK_ULL(1, 0) /* VHT SIG-A2 for GEN2 */
#define RTW89_PHY_STS_IE09_VHT_SIG_A2_SGI BIT(0)
#define RTW89_PHY_STS_IE09_VHT_SIG_A2_SGI_DISA BIT(1)
#define RTW89_PHY_STS_IE09_VHT_SIG_A2_SUMU_CODE0 BIT(2)
@@ -688,6 +698,7 @@ struct rtw89_phy_sts_ie09 {
#define RTW89_PHY_STS_IE09_VHT_SIG_A2_BF BIT(8)
#define RTW89_PHY_STS_IE09_VHT_SIG_A2_RSVD3 BIT(9)
#define RTW89_PHY_STS_IE09_HE_SU_SIG_A1_MASK GENMASK_ULL(47, 22) /* HE SU SIG-A1 */
+#define RTW89_PHY_STS_IE09_HE_SU_SIG_A1_MASK_GEN2 GENMASK_ULL(57, 32) /* HE SU SIG-A1 for GEN2 */
#define RTW89_PHY_STS_IE09_HE_SU_SIG_A1_FORMAT BIT(0)
#define RTW89_PHY_STS_IE09_HE_SU_SIG_A1_BEAM_CHANGE BIT(1)
#define RTW89_PHY_STS_IE09_HE_SU_SIG_A1_ULDL BIT(2)
@@ -700,6 +711,8 @@ struct rtw89_phy_sts_ie09 {
#define RTW89_PHY_STS_IE09_HE_SU_SIG_A1_GILTF GENMASK(22, 21)
#define RTW89_PHY_STS_IE09_HE_SU_SIG_A1_NSTS GENMASK(25, 23)
#define RTW89_PHY_STS_IE09_HE_SU_SIG_A2_MASK GENMASK_ULL(63, 48) /* HE SU SIG-A2 */
+#define RTW89_PHY_STS_IE09_HE_SU_SIG_A2_MASK_GEN2_L0 GENMASK_ULL(63, 58) /* HE SU SIG-A2 for GEN2 */
+#define RTW89_PHY_STS_IE09_HE_SU_SIG_A2_MASK_GEN2_H6 GENMASK_ULL(9, 0) /* HE SU SIG-A2 for GEN2 */
#define RTW89_PHY_STS_IE09_HE_SU_SIG_A2_TXOP GENMASK(6, 0)
#define RTW89_PHY_STS_IE09_HE_SU_SIG_A2_CODING BIT(7)
#define RTW89_PHY_STS_IE09_HE_SU_SIG_A2_LDPC_XSYMSEG BIT(8)
@@ -710,6 +723,7 @@ struct rtw89_phy_sts_ie09 {
#define RTW89_PHY_STS_IE09_HE_SU_SIG_A2_RSVD2 BIT(14)
#define RTW89_PHY_STS_IE09_HE_SU_SIG_A2_DOPPLER BIT(15)
#define RTW89_PHY_STS_IE09_HE_TB_SIG_A1_MASK GENMASK_ULL(47, 22) /* HE TB SIG-A1 */
+#define RTW89_PHY_STS_IE09_HE_TB_SIG_A1_MASK_GEN2 GENMASK_ULL(57, 32) /* HE TB SIG-A1 for GEN2 */
#define RTW89_PHY_STS_IE09_HE_TB_SIG_A1_FORMAT BIT(0)
#define RTW89_PHY_STS_IE09_HE_TB_SIG_A1_BSS_COLOR GENMASK(6, 1)
#define RTW89_PHY_STS_IE09_HE_TB_SIG_A1_SB1 GENMASK(10, 7)
@@ -719,9 +733,12 @@ struct rtw89_phy_sts_ie09 {
#define RTW89_PHY_STS_IE09_HE_TB_SIG_A1_RSVD1 BIT(23)
#define RTW89_PHY_STS_IE09_HE_TB_SIG_A1_BW GENMASK(25, 24)
#define RTW89_PHY_STS_IE09_HE_TB_SIG_A2_MASK GENMASK_ULL(63, 48) /* HE TB SIG-A2 */
+#define RTW89_PHY_STS_IE09_HE_TB_SIG_A2_MASK_GEN2_L0 GENMASK_ULL(63, 58) /* HE TB SIG-A2 for GEN2 */
+#define RTW89_PHY_STS_IE09_HE_TB_SIG_A2_MASK_GEN2_H6 GENMASK_ULL(9, 0) /* HE TB SIG-A2 for GEN2 */
#define RTW89_PHY_STS_IE09_HE_TB_SIG_A2_TXOP GENMASK(6, 0)
#define RTW89_PHY_STS_IE09_HE_TB_SIG_A2_RSVD1 GENMASK(15, 7)
#define RTW89_PHY_STS_IE09_HE_MU_SIG_A1_MASK GENMASK_ULL(47, 22) /* HE MU SIG-A1 */
+#define RTW89_PHY_STS_IE09_HE_MU_SIG_A1_MASK_GEN2 GENMASK_ULL(57, 32) /* HE MU SIG-A1 for GEN2 */
#define RTW89_PHY_STS_IE09_HE_MU_SIG_A1_ULDL BIT(0)
#define RTW89_PHY_STS_IE09_HE_MU_SIG_A1_SIGB_MCS GENMASK(3, 1)
#define RTW89_PHY_STS_IE09_HE_MU_SIG_A1_SIGB_DCM BIT(4)
@@ -733,6 +750,8 @@ struct rtw89_phy_sts_ie09 {
#define RTW89_PHY_STS_IE09_HE_MU_SIG_A1_GI_LTF GENMASK(24, 23)
#define RTW89_PHY_STS_IE09_HE_MU_SIG_A1_DOPPLER BIT(25)
#define RTW89_PHY_STS_IE09_HE_MU_SIG_A2_MASK GENMASK_ULL(63, 48) /* HE MU SIG-A2 */
+#define RTW89_PHY_STS_IE09_HE_MU_SIG_A2_MASK_GEN2_L0 GENMASK_ULL(63, 58) /* HE MU SIG-A2 for GEN2 */
+#define RTW89_PHY_STS_IE09_HE_MU_SIG_A2_MASK_GEN2_H6 GENMASK_ULL(9, 0) /* HE MU SIG-A2 for GEN2 */
#define RTW89_PHY_STS_IE09_HE_MU_SIG_A2_TXOP GENMASK(6, 0)
#define RTW89_PHY_STS_IE09_HE_MU_SIG_A2_RSVD BIT(7)
#define RTW89_PHY_STS_IE09_HE_MU_SIG_A2_LTF_MID GENMASK(10, 8)
--
2.25.1
^ permalink raw reply related
* [PATCH rtw-next 12/14] wifi: rtw89: phy: skip trailing 8-byte zeros of PHY status IE for RTL8922D
From: Ping-Ke Shih @ 2026-05-06 13:09 UTC (permalink / raw)
To: linux-wireless
In-Reply-To: <20260506131000.1706298-1-pkshih@realtek.com>
Hardware reports a list of PHY status IE. In monitor mode, IE-09 of
PHY status is enabled, and the report contains trailing 8-byte zeros,
causing failed to parse and drop all IE information.
The 8 zeros are recognize as IE type 0, but length of type 0 must be
not 8 (reference to rtw89_phy_gen_def::physt_ie_len[0]).
Check and skip them.
Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
---
drivers/net/wireless/realtek/rtw89/core.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/drivers/net/wireless/realtek/rtw89/core.c b/drivers/net/wireless/realtek/rtw89/core.c
index 7e1182a49942..fddb0c822c28 100644
--- a/drivers/net/wireless/realtek/rtw89/core.c
+++ b/drivers/net/wireless/realtek/rtw89/core.c
@@ -2275,6 +2275,13 @@ static int rtw89_core_rx_parse_phy_sts(struct rtw89_dev *rtwdev,
while (pos < end) {
const struct rtw89_phy_sts_iehdr *iehdr = pos;
+ /*
+ * RTL8922D might reports 8 bytes zeros at end if IE09 presents.
+ * Check and ignore the zeros.
+ */
+ if (unlikely(phy_ppdu->ie09 && end - pos == 8 && iehdr->w0 == 0))
+ break;
+
ie_len = rtw89_core_get_phy_status_ie_len(rtwdev, iehdr);
pos += ie_len;
if (pos > end || ie_len == 0) {
--
2.25.1
^ permalink raw reply related
* [PATCH rtw-next 11/14] wifi: rtw89: phy: check length before parsing PHY status IE
From: Ping-Ke Shih @ 2026-05-06 13:09 UTC (permalink / raw)
To: linux-wireless
In-Reply-To: <20260506131000.1706298-1-pkshih@realtek.com>
Hardware might report PHY status IE with unexpected length, and parser
might access out of range. Check the length ahead.
Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
---
drivers/net/wireless/realtek/rtw89/core.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/drivers/net/wireless/realtek/rtw89/core.c b/drivers/net/wireless/realtek/rtw89/core.c
index 7fa479ce52e2..7e1182a49942 100644
--- a/drivers/net/wireless/realtek/rtw89/core.c
+++ b/drivers/net/wireless/realtek/rtw89/core.c
@@ -2276,7 +2276,6 @@ static int rtw89_core_rx_parse_phy_sts(struct rtw89_dev *rtwdev,
const struct rtw89_phy_sts_iehdr *iehdr = pos;
ie_len = rtw89_core_get_phy_status_ie_len(rtwdev, iehdr);
- rtw89_core_process_phy_status_ie(rtwdev, iehdr, phy_ppdu);
pos += ie_len;
if (pos > end || ie_len == 0) {
/* clear pointers to prevent accessing out of IE */
@@ -2285,8 +2284,11 @@ static int rtw89_core_rx_parse_phy_sts(struct rtw89_dev *rtwdev,
rtw89_debug(rtwdev, RTW89_DBG_TXRX,
"phy status parse failed\n");
+
return -EINVAL;
}
+
+ rtw89_core_process_phy_status_ie(rtwdev, iehdr, phy_ppdu);
}
rtw89_chip_convert_rpl_to_rssi(rtwdev, phy_ppdu);
--
2.25.1
^ permalink raw reply related
page: next (older) | prev (newer) | latest
- recent:[subjects (threaded)|topics (new)|topics (active)]
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox