Hi, Back from vacation, and a bunch of things accumulated for everyone. Nothing really stands out much though, except perhaps the various iwlwifi regressions for old devices, which were all my fault... Please pull and let us know if there's any problem. Thanks, johannes The following changes since commit 6439a0e64c355d2e375bd094f365d56ce81faba3: Merge tag 'net-6.17-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net (2025-08-21 13:51:15 -0400) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git tags/wireless-2025-08-28 for you to fetch changes up to 2c72c8d356db40178be558bbbd43a1d0b5bd0c27: Merge tag 'iwlwifi-fixes-2025-08-28' of https://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next (2025-08-28 14:03:32 +0200) ---------------------------------------------------------------- Some fixes for the current cycle: - mt76: MLO regressions, offchannel handling, list corruption - mac80211: scan allocation size, no 40 MHz EHT, signed type - rt2x00: (randconfig) build - cfg80211: use-after-free - iwlwifi: config/old devices, BIOS compatibility - mwifiex: vmalloc content leak ---------------------------------------------------------------- Arnd Bergmann (2): wifi: rt2800: select CONFIG_RT2X00_LIB as needed wifi: rt2x00: fix CRC_CCITT dependency Benjamin Berg (1): wifi: mac80211: do not permit 40 MHz EHT operation on 5/6 GHz Chad Monroe (1): wifi: mt76: mt7996: use the correct vif link for scanning/roc Dmitry Antipov (1): wifi: cfg80211: fix use-after-free in cmp_bss() Duoming Zhou (1): wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work Emmanuel Grumbach (1): wifi: iwlwifi: if scratch is ~0U, consider it a failure Felix Fietkau (8): wifi: mt76: prevent non-offchannel mgmt tx during scan/roc wifi: mt76: mt7996: disable beacons when going offchannel wifi: mt76: mt7996: fix crash on some tx status reports wifi: mt76: do not add non-sta wcid entries to the poll list wifi: mt76: mt7996: add missing check for rx wcid entries wifi: mt76: mt7915: fix list corruption after hardware restart wifi: mt76: free pending offchannel tx frames on wcid cleanup wifi: mt76: fix linked list corruption Harshit Mogalapalli (1): wifi: mt76: mt7925: fix locking in mt7925_change_vif_links() Janusz Dziedzic (1): wifi: mt76: mt7921: don't disconnect when CSA to DFS chan Johannes Berg (7): wifi: iwlwifi: acpi: check DSM func validity wifi: iwlwifi: uefi: check DSM item validity Merge tag 'mt76-fixes-2025-08-27' of https://github.com/nbd168/wireless wifi: iwlwifi: cfg: restore some 1000 series configs wifi: iwlwifi: fix byte count table for old devices wifi: iwlwifi: cfg: add back more lost PCI IDs Merge tag 'iwlwifi-fixes-2025-08-28' of https://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next Lachlan Hodges (1): wifi: mac80211: increase scan_ies_len for S1G Liao Yuanhong (1): wifi: mac80211: fix incorrect type for ret Ming Yen Hsieh (3): wifi: mt76: mt7925: fix the wrong bss cleanup for SAP wifi: mt76: mt7925u: use connac3 tx aggr check in tx complete wifi: mt76: mt7925: skip EHT MLD TLV on non-MLD and pass conn_state for sta_cmd Nathan Chancellor (1): wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data() Qianfeng Rong (1): wifi: mwifiex: Initialize the chan_stats array to zero .../wireless/broadcom/brcm80211/brcmfmac/btcoex.c | 6 +-- drivers/net/wireless/intel/iwlwifi/fw/acpi.c | 25 ++++++++- drivers/net/wireless/intel/iwlwifi/fw/runtime.h | 8 +++ drivers/net/wireless/intel/iwlwifi/fw/uefi.c | 6 +++ drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 22 ++++++-- .../net/wireless/intel/iwlwifi/pcie/gen1_2/tx.c | 3 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 5 +- drivers/net/wireless/marvell/mwifiex/main.c | 4 +- drivers/net/wireless/mediatek/mt76/mac80211.c | 43 +++++++++++++++- drivers/net/wireless/mediatek/mt76/mt76.h | 1 + drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 12 ++--- drivers/net/wireless/mediatek/mt76/mt7921/main.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 7 ++- drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 12 +++-- drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 60 ++++++++++++++-------- drivers/net/wireless/mediatek/mt76/mt7996/main.c | 5 ++ drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 15 ++++-- drivers/net/wireless/mediatek/mt76/mt7996/mt7996.h | 1 + drivers/net/wireless/mediatek/mt76/tx.c | 12 ++--- drivers/net/wireless/ralink/rt2x00/Kconfig | 4 +- net/mac80211/driver-ops.h | 2 +- net/mac80211/main.c | 7 ++- net/mac80211/mlme.c | 8 +++ net/mac80211/tests/chan-mode.c | 30 +++++++++-- net/wireless/scan.c | 3 +- 26 files changed, 232 insertions(+), 76 deletions(-)
