[GIT PULL] wireless-2026-04-30

[GIT PULL] wireless-2026-04-30

[Johannes Berg]

Hi,

So the LLM floodgates are starting to open ;-) But I'm somewhat
happy that so far we haven't gotten any really critical reports.
Here's a couple of first fixes though.

Please pull and let us know if there's any problem.

Thanks,
johannes



The following changes since commit 254f49634ee16a731174d2ae34bc50bd5f45e731:

  Linux 7.1-rc1 (2026-04-26 14:19:00 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git tags/wireless-2026-04-30

for you to fetch changes up to d997c32157d2ca06e9f3f00ba6c4bf06593b49e7:

  Merge tag 'ath-current-20260427' of git://git.kernel.org/pub/scm/linux/kernel/git/ath/ath (2026-04-28 10:41:51 +0200)

----------------------------------------------------------------
Couple of initial fixes:
 - mac80211
   - remove HT NSS validation to work with broken APs
   - remove 'static' that could cause races
   - check station link lookup before further processing
 - ath12k
   - fix OF node refcount imbalance
   - fix queue flush ("REO update") in MLO
   - fix RCU assert
 - ath12k: fix Kconfig with POWER_SEQUENCING
 - rsi: fix thread lifetime race
 - brcmfmac: fix potential UAF
 - nl80211: require admin permissions for PMK management
 - various fixes to not trust values from firmware

----------------------------------------------------------------
Aaradhana Sahu (1):
      wifi: ath12k: fix OF node refcount imbalance in WSI graph traversal

Amir Mohammad Jahangirzad (1):
      wifi: libertas: fix integer underflow in process_cmdrequest()

Baochen Qiang (1):
      wifi: ath12k: prepare REO update element only for primary link

Catherine (1):
      wifi: mac80211: drop stray 'static' from fast-RX rx_result

Dmitry Baryshkov (1):
      wifi: ath10k: snoc: select POWER_SEQUENCING

Jeongjun Park (1):
      wifi: rsi: fix kthread lifetime race between self-exit and external-stop

Johannes Berg (1):
      Merge tag 'ath-current-20260427' of git://git.kernel.org/pub/scm/linux/kernel/git/ath/ath

Marek Szyprowski (1):
      wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task

Michael Bommarito (2):
      wifi: nl80211: require admin perm on SET_PMK / DEL_PMK
      wifi: mac80211: check ieee80211_rx_data_set_link return in pubsta MLO path

Rio Liu (1):
      wifi: mac80211: skip ieee80211_verify_sta_ht_mcs_support check in non-strict mode

Tristan Madani (2):
      wifi: b43: enforce bounds check on firmware key index in b43_rx()
      wifi: b43legacy: enforce bounds check on firmware key index in RX path

Yu-Hsiang Tseng (1):
      wifi: ath12k: use lockdep_assert_in_rcu_read_lock() for RCU assertions

 drivers/net/wireless/ath/ath10k/Kconfig            |  1 +
 drivers/net/wireless/ath/ath12k/core.c             | 77 ++++++++++++++--------
 drivers/net/wireless/ath/ath12k/dp_rx.c            |  3 +
 drivers/net/wireless/ath/ath12k/mac.c              |  2 +-
 drivers/net/wireless/ath/ath12k/p2p.c              |  2 +-
 drivers/net/wireless/broadcom/b43/xmit.c           |  3 +-
 drivers/net/wireless/broadcom/b43legacy/xmit.c     |  3 +-
 .../wireless/broadcom/brcm80211/brcmfmac/sdio.c    |  6 +-
 drivers/net/wireless/marvell/libertas/if_usb.c     |  5 +-
 drivers/net/wireless/rsi/rsi_common.h              |  5 +-
 net/mac80211/mlme.c                                |  9 +++
 net/mac80211/rx.c                                  |  6 +-
 net/wireless/nl80211.c                             |  2 +
 13 files changed, 82 insertions(+), 42 deletions(-)

Re: [GIT PULL] wireless-2026-04-30

[Jakub Kicinski]

On Thu, 30 Apr 2026 13:17:52 +0200 Johannes Berg wrote:
> So the LLM floodgates are starting to open ;-) But I'm somewhat
> happy that so far we haven't gotten any really critical reports.
> Here's a couple of first fixes though.
> 
> Please pull and let us know if there's any problem.

Looks like this breaks kunit:

ok 70 mac80211-tpe
    KTAP version 1
    # Subtest: mac80211-mlme-chan-mode
    # module: mac80211_tests
    1..1
        KTAP version 1
        # Subtest: test_determine_chan_mode
        ok 1 Normal case, EHT is working
        ok 2 Requiring EHT support is fine
        ok 3 Lowering the mode limits us
kunit: required basic rate or BSS membership selectors not supported or disabled, rejecting connection
        ok 4 Requesting a basic rate/selector that we do not support
        ok 5 As before, but userspace says it is taking care of it
    # test_determine_chan_mode: ASSERTION FAILED at net/mac80211/tests/chan-mode.c:258
    Expected conn.mode == params->expected_mode, but
        conn.mode == 5 (0x5)
        params->expected_mode == 1 (0x1)
        not ok 6 Masking out a supported rate in HT capabilities
kunit: Missing mandatory rates for 4 Nss, rx 0, tx 2 oper 2, disable VHT
kunit: required MCSes not supported, disabling VHT
        ok 7 Masking out a RX rate in VHT capabilities
kunit: Missing mandatory rates for 4 Nss, rx 2, tx 0 oper 2, disable VHT
kunit: required MCSes not supported, disabling VHT
        ok 8 Masking out a TX rate in VHT capabilities
kunit: Missing mandatory rates for 5 Nss, rx 0, tx 0 oper 2, disable VHT
kunit: required MCSes not supported, disabling VHT
        ok 9 AP has higher VHT requirement than client
        ok 10 all zero VHT basic rates are ignored (many APs broken)
kunit: Invalid rates for 3 Nss, rx 3, tx 3 oper 0, disable HE
kunit: required MCSes not supported, disabling HE
        ok 11 AP requires 3 HE streams but client only has two
        ok 12 all zero HE basic rates are ignored (iPhone workaround)
kunit: required MCSes not supported, disabling EHT
        ok 13 AP requires too many RX streams with EHT MCS 7
kunit: required MCSes not supported, disabling EHT
        ok 14 AP requires too many TX streams with EHT MCS 7
kunit: required MCSes not supported, disabling EHT
kunit: required basic rate or BSS membership selectors not supported or disabled, rejecting connection
        ok 15 AP requires too many RX streams with EHT MCS 7 and EHT is required
kunit: regulatory prevented using AP config, downgraded
kunit: required bandwidth not supported, disabling EHT
        ok 16 80 MHz EHT is downgraded to 40 MHz HE due to puncturing
    # test_determine_chan_mode: pass:15 fail:1 skip:0 total:16
    not ok 1 test_determine_chan_mode
# Totals: pass:15 fail:1 skip:0 total:16

Re: [GIT PULL] wireless-2026-04-30

[Johannes Berg]

On Thu, 2026-04-30 at 07:12 -0700, Jakub Kicinski wrote:
> On Thu, 30 Apr 2026 13:17:52 +0200 Johannes Berg wrote:
> > So the LLM floodgates are starting to open ;-) But I'm somewhat
> > happy that so far we haven't gotten any really critical reports.
> > Here's a couple of first fixes though.
> > 
> > Please pull and let us know if there's any problem.
> 
> Looks like this breaks kunit:
> 
> ok 70 mac80211-tpe
>     KTAP version 1
>     # Subtest: mac80211-mlme-chan-mode
>     # module: mac80211_tests
>     1..1
>         KTAP version 1
>         # Subtest: test_determine_chan_mode
>         ok 1 Normal case, EHT is working
>         ok 2 Requiring EHT support is fine
>         ok 3 Lowering the mode limits us
> kunit: required basic rate or BSS membership selectors not supported or disabled, rejecting connection
>         ok 4 Requesting a basic rate/selector that we do not support
>         ok 5 As before, but userspace says it is taking care of it
>     # test_determine_chan_mode: ASSERTION FAILED at net/mac80211/tests/chan-mode.c:258
>     Expected conn.mode == params->expected_mode, but
>         conn.mode == 5 (0x5)
>         params->expected_mode == 1 (0x1)
>         not ok 6 Masking out a supported rate in HT capabilities
> 

D'oh. Yeah, that's the AP workaround, we'll need to adjust the test. I'm
on my way out right now, so I guess that'll have to wait for next week.

johannes

Re: [GIT PULL] wireless-2026-04-30

[Jakub Kicinski]

On Thu, 30 Apr 2026 17:51:15 +0200 Johannes Berg wrote:
> On Thu, 2026-04-30 at 07:12 -0700, Jakub Kicinski wrote:
> > On Thu, 30 Apr 2026 13:17:52 +0200 Johannes Berg wrote:  
> > > So the LLM floodgates are starting to open ;-) But I'm somewhat
> > > happy that so far we haven't gotten any really critical reports.
> > > Here's a couple of first fixes though.
> > > 
> > > Please pull and let us know if there's any problem.  
> > 
> > Looks like this breaks kunit:
> > 
> > ok 70 mac80211-tpe
> >     KTAP version 1
> >     # Subtest: mac80211-mlme-chan-mode
> >     # module: mac80211_tests
> >     1..1
> >         KTAP version 1
> >         # Subtest: test_determine_chan_mode
> >         ok 1 Normal case, EHT is working
> >         ok 2 Requiring EHT support is fine
> >         ok 3 Lowering the mode limits us
> > kunit: required basic rate or BSS membership selectors not supported or disabled, rejecting connection
> >         ok 4 Requesting a basic rate/selector that we do not support
> >         ok 5 As before, but userspace says it is taking care of it
> >     # test_determine_chan_mode: ASSERTION FAILED at net/mac80211/tests/chan-mode.c:258
> >     Expected conn.mode == params->expected_mode, but
> >         conn.mode == 5 (0x5)
> >         params->expected_mode == 1 (0x1)
> >         not ok 6 Masking out a supported rate in HT capabilities
> >   
> 
> D'oh. Yeah, that's the AP workaround, we'll need to adjust the test. I'm
> on my way out right now, so I guess that'll have to wait for next week.

SG, Paolo already submitted our PR so from Linus tree's perspective
later today or early next week doesn't matter..