starfive-tech/linux.git/drivers/net/wireless/mediatek, branch visionfiveStarFive Tech Linux Kernel for VisionFive (JH7110) boards (mirror)https://git.radix-linux.su/starfive-tech/linux.git/atom?h=visionfive2025-08-27T09:27:57+00:00wifi: mt76: fix linked list corruption2025-08-27T09:27:57+00:00Felix Fietkaunbd@nbd.name2025-08-27T08:53:52+00:00urn:sha1:49fba87205bec14a0f6bd997635bf3968408161e
Never leave scheduled wcid entries on the temporary on-stack list
Fixes: 0b3be9d1d34e ("wifi: mt76: add separate tx scheduling queue for off-channel tx")
Link: https://patch.msgid.link/20250827085352.51636-6-nbd@nbd.name
Signed-off-by: Felix Fietkau <nbd@nbd.name>
wifi: mt76: free pending offchannel tx frames on wcid cleanup2025-08-27T09:27:57+00:00Felix Fietkaunbd@nbd.name2025-08-27T08:53:51+00:00urn:sha1:bdeac7815629c1a32b8784922368742e183747ea
Avoid leaking them or keeping the wcid on the tx list
Fixes: 0b3be9d1d34e ("wifi: mt76: add separate tx scheduling queue for off-channel tx")
Link: https://patch.msgid.link/20250827085352.51636-5-nbd@nbd.name
Signed-off-by: Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7915: fix list corruption after hardware restart2025-08-27T09:27:57+00:00Felix Fietkaunbd@nbd.name2025-08-27T08:53:50+00:00urn:sha1:065c79df595af21d6d1b27d642860faa1d938774
Since stations are recreated from scratch, all lists that wcids are added
to must be cleared before calling ieee80211_restart_hw.
Set wcid->sta = 0 for each wcid entry in order to ensure that they are
not added again before they are ready.
Fixes: 8a55712d124f ("wifi: mt76: mt7915: enable full system reset support")
Link: https://patch.msgid.link/20250827085352.51636-4-nbd@nbd.name
Signed-off-by: Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7996: add missing check for rx wcid entries2025-08-27T09:27:57+00:00Felix Fietkaunbd@nbd.name2025-08-27T08:53:49+00:00urn:sha1:4a522b01e368eec58d182ecc47d24f49a39e440d
Non-station wcid entries must not be passed to the rx functions.
In case of the global wcid entry, it could even lead to corruption in the wcid
array due to pointer being casted to struct mt7996_sta_link using container_of.
Fixes: 7464b12b7d92 ("wifi: mt76: mt7996: rework mt7996_rx_get_wcid to support MLO")
Link: https://patch.msgid.link/20250827085352.51636-3-nbd@nbd.name
Signed-off-by: Felix Fietkau <nbd@nbd.name>
wifi: mt76: do not add non-sta wcid entries to the poll list2025-08-27T09:27:57+00:00Felix Fietkaunbd@nbd.name2025-08-27T08:53:48+00:00urn:sha1:a3c99ef88a084e1c2b99dd56bbfa7f89c9be3e92
Polling and airtime reporting is valid for station entries only
Link: https://patch.msgid.link/20250827085352.51636-2-nbd@nbd.name
Signed-off-by: Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7996: fix crash on some tx status reports2025-08-27T09:27:57+00:00Felix Fietkaunbd@nbd.name2025-08-27T08:53:47+00:00urn:sha1:0300545b8a113e96ee260a7c142be846d391a620
When a wcid can't be found, link_sta can be stale from a previous batch.
The code currently assumes that if link_sta is set, wcid is also non-zero.
Fix wcid NULL pointer dereference by resetting link_sta when a wcid entry
can't be found.
Fixes: 62da647a2b20 ("wifi: mt76: mt7996: Add MLO support to mt7996_tx_check_aggr()")
Link: https://patch.msgid.link/20250827085352.51636-1-nbd@nbd.name
Signed-off-by: Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7996: use the correct vif link for scanning/roc2025-08-27T09:20:39+00:00Chad Monroechad@monroe.io2025-08-08T13:29:48+00:00urn:sha1:4be3b46ec5190dc79cd38e3750480b2c66a791ad
restore fix which was dropped during MLO rework
Fixes: f0b0b239b8f3 ("wifi: mt76: mt7996: rework mt7996_mac_write_txwi() for MLO support")
Signed-off-by: Chad Monroe <chad@monroe.io>
Acked-by: Lorenzo Bianconi <lorenzo@kernel.org>
Link: https://patch.msgid.link/180fffd409aa57f535a3d2c1951e41ae398ce09e.1754659732.git.chad@monroe.io
Signed-off-by: Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7996: disable beacons when going offchannel2025-08-27T09:20:34+00:00Felix Fietkaunbd@nbd.name2025-08-13T12:11:05+00:00urn:sha1:f30906c55a400a9b7fc677e3f4c614b9069bd4a8
Avoid leaking beacons on unrelated channels during scanning/roc
Fixes: c56d6edebc1f ("wifi: mt76: mt7996: use emulated hardware scan support")
Reported-by: Chad Monroe <chad.monroe@adtran.com>
Link: https://patch.msgid.link/20250813121106.81559-1-nbd@nbd.name
Signed-off-by: Felix Fietkau <nbd@nbd.name>
wifi: mt76: prevent non-offchannel mgmt tx during scan/roc2025-08-27T09:20:25+00:00Felix Fietkaunbd@nbd.name2025-08-13T12:11:06+00:00urn:sha1:4c2334587b0a13b8f4eda1336ae657297fcd743b
Only put probe request packets in the offchannel queue if
IEEE80211_TX_CTRL_DONT_USE_RATE_MASK is set and IEEE80211_TX_CTL_TX_OFFCHAN
is unset.
Fixes: 0b3be9d1d34e ("wifi: mt76: add separate tx scheduling queue for off-channel tx")
Reported-by: Chad Monroe <chad.monroe@adtran.com>
Link: https://patch.msgid.link/20250813121106.81559-2-nbd@nbd.name
Signed-off-by: Felix Fietkau <nbd@nbd.name>
wifi: mt76: mt7925: skip EHT MLD TLV on non-MLD and pass conn_state for sta_cmd2025-08-27T09:03:55+00:00Ming Yen Hsiehmingyen.hsieh@mediatek.com2025-08-18T03:02:01+00:00urn:sha1:dd6e89cad9951acef3723f3f21b2e892a23b371b
Return early in mt7925_mcu_sta_eht_mld_tlv() for non-MLD vifs to avoid bogus
MLD TLVs, and pass the proper connection state to sta_basic TLV.
Cc: stable@vger.kernel.org
Fixes: cb1353ef3473 ("wifi: mt76: mt7925: integrate *mlo_sta_cmd and *sta_cmd")
Reported-by: Tal Inbar <inbartdev@gmail.com>
Tested-by: Tal Inbar <inbartdev@gmail.com>
Signed-off-by: Ming Yen Hsieh <mingyen.hsieh@mediatek.com>
Link: https://patch.msgid.link/20250818030201.997940-1-mingyen.hsieh@mediatek.com
Signed-off-by: Felix Fietkau <nbd@nbd.name>