From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-yw1-f180.google.com (mail-yw1-f180.google.com [209.85.128.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id C4AC72C15B5 for ; Mon, 6 Apr 2026 23:43:10 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.180 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1775518991; cv=none; b=NzClze1tpAraPa9OMg57U5JpuOHdCFx1CtgqceRSOVj96CAC4I1CruXGrIfOqrIkOjPQtnJG+cDUbsjg+WPRrDOu27z+ewsjeyeJ27bDuGjqkOvvRGFJkYiOZl0tV10AQIneLiki9R4G/FzjBb9NFKz+wMKwBQ6PvDEbQ3RyTog= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1775518991; c=relaxed/simple; bh=syrgPsBc0vY93JNHaSusXKIRONAgGEayLWtRJL5jSGY=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=d+IuCv89QNhknVCxZuAe4EqXB5xAGSBL8MntI1su38uj3EW9MQ2WIxFKWwlrTcFimjVK21vO5pVHZemBLW1+6DhncLKObZnlKzIhvkwWyKqKIpiG3Lvc+SUxkygd/R8jzl3Cxcj/u6vZS8u8mi1zkRs0Z6/qR9PChHrPdSzvXgw= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=XyCDcUBv; arc=none smtp.client-ip=209.85.128.180 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="XyCDcUBv" Received: by mail-yw1-f180.google.com with SMTP id 00721157ae682-7927261a3acso37135077b3.0 for ; Mon, 06 Apr 2026 16:43:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1775518990; x=1776123790; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=2USkU9Bkqu8e9ylMSWChChEpzoMYh+v9KdOxBg44gGk=; b=XyCDcUBvIJKZSH0Teg1tVY9eMGLHoArtePnHGV/R+cir+eBcI9MxbYaLdzBZaTrpkB aOY9muxBNu4dr+MQ1gda8Mx8ZTKseiDWsVKIgE13WoFT2ulGETZI6pG08g8ta6G38OUC VLR17fZAUkQuheir8CptD3RF1aZYXUz+Lgzcd4QRyaMHUscZTqjfxoScuzXCliBXD20d ZwcR4zahOXezA3OO/9s2wPO0GWq8YKEsw64SIwkFdAjJNPioM3XcCwxa/TLbJxI4bWbB Y9P2N3P2QM64kgTiczQksgRYHzHK0oN5wD0Q97bRBjsmGUtohbl3w6BBBIgfmQ335CXz mchw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1775518990; x=1776123790; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=2USkU9Bkqu8e9ylMSWChChEpzoMYh+v9KdOxBg44gGk=; b=aLFFoVdu/bW31C9TluwErOSEpO7yaSXKeFTuzBJynsJClxEocVTk76gbzr/2oJbxlg d/0fkOmTvOyz/a2JsVkPdYbqTZ6Jg3XppHyVXOf89UkckkRqTjXwNzNvVw3zz0JWOqLf 8BuCXJk3q00knEkv3kfpnGSbhzKtFyA+WRdX++jk3vm5oRsHDoSuorwkOr3M4ZlqRPZO yfO5IRFAcTnEfZvSd43R/bBDbcqbypT23k3eR1jDy4BULLtZ2jh+S/m6sspk5cbGWD7a hP/tYMcEqEvPqKpLhMyD1wXIlApqY/5w3ll+6hUrwAh3BNyVa5NklGjOmi1MjM8R/FV9 csUg== X-Forwarded-Encrypted: i=1; AJvYcCUh0YyggawbBqn2GuEofeEHoyrfWy7pNTbU0yTaSgIAjFSBZKOjVbvtUbp2eAwv87ESJGRmT3NwZdvhmPI=@vger.kernel.org X-Gm-Message-State: AOJu0Yw2aKk8FIYAjOszf8r+tP/Xqarx72Wmb99Qd2ZsKADVKotA8eBE 7mGNUn5ntSIKsC6t9szMDw7K7vY7b1SgHjDjlOGr3qWTwFyr3MDTJNO5 X-Gm-Gg: AeBDievOr6OgnfJzFKha+SVUp+bStg+Y1yt8Tsp9LfsW1EA8XGJZaWpZhc4Dw+9vkp+ Un34Vrrz5SM5fxqSv3CuQeyZYwL2J0w1XBoODA24w2W8YQ+dQ4n5g5g3WWgbK9aim3PetfSdumM PTSDcZereK4xGu/LdkJK5K8hUe3PqMu3m82YNGsd+BLarfHQffKbGEI06RycTQW0ciGS6dBZ2rR 2iziX1fBaqjsmfJBz2WOjpDDru5RpZ7Nj4Vs6YQDX+cp21617pNwq1l1ksE+UXr0yotAH+IdmeY tXFgfcLwrciM2r+jVE9/flMgFiVKnTgAZaDolg1X6BQoPlKYbk42mXquNRN51FpqZpneJqpfZFz XCwbbdFhTFYssb6P9Xa0WTgaM9/bdvjEr9b/aFcAuvxArsiEiAztTn8Lp55Jdo8ximhy8RhBjX3 DIdLRJ88zekL+oty6qHfibR1oZ/GIZAzfLp/BM7tgmtlXerZQcsfCdKxqpqSQ6 X-Received: by 2002:a05:690c:dc9:b0:79e:9cc1:ede7 with SMTP id 00721157ae682-7a4d62545a3mr146138407b3.10.1775518989834; Mon, 06 Apr 2026 16:43:09 -0700 (PDT) Received: from DEV.lan (c-75-74-152-49.hsd1.fl.comcast.net. [75.74.152.49]) by smtp.gmail.com with ESMTPSA id 00721157ae682-7a370df16aasm59144037b3.40.2026.04.06.16.43.09 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 06 Apr 2026 16:43:09 -0700 (PDT) From: Joshua Klinesmith To: linux-wireless@vger.kernel.org Cc: nbd@nbd.name, lorenzo@kernel.org, ryder.lee@mediatek.com, shayne.chen@mediatek.com, sean.wang@mediatek.com, linux-kernel@vger.kernel.org, Joshua Klinesmith Subject: [PATCH wireless 0/2] wifi: mt76: clear cipher state on key removal for WED offload Date: Mon, 6 Apr 2026 19:42:02 -0400 Message-ID: <20260406234205.29857-1-joshuaklinesmith@gmail.com> X-Mailer: git-send-email 2.43.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit When switching WiFi encryption from WPA-PSK/SAE to open/none with WED hardware offload enabled, throughput drops to zero. The BSS cipher state is set when group keys are installed but never cleared when they are removed. The WA firmware retains the stale cipher value and keeps the protection bit set on WED-offloaded packets, causing all plaintext frames to be dropped. Found via reverse engineering of the vendor MediaTek SDK mt_wifi.ko driver. Joshua Klinesmith (2): wifi: mt76: mt7915: clear cipher state on key removal for WED offload wifi: mt76: mt7996: clear cipher state on key removal for WED offload drivers/net/wireless/mediatek/mt76/mt7915/main.c | 14 +++++--------- drivers/net/wireless/mediatek/mt76/mt7996/main.c | 15 +++++++++++++++ 2 files changed, 20 insertions(+), 9 deletions(-) base-commit: 024906a6d4d43554a0b9076dd25d8b35f5eaf0bb -- 2.43.0