| Seq | Timestamp | Type | Name | Duration |
|---|---|---|---|---|
| 0/0 | 2026/07/30 19:35 | flow | patch-triage |
3mArgs:null Results: {
"EnableConfigs": null,
"FocusSymbols": [],
"Reasoning": "The patch modifies the `nxpwifi` driver, which is a vendor-specific SDIO WiFi driver for NXP IW61x chipsets. Since standard QEMU does not emulate this specific physical SDIO hardware, and there is no virtualized software alternative that exercises this driver, the code paths are impossible to reach and probe in virtualized environments like GCE or QEMU. Therefore, it cannot be effectively fuzzed.",
"WorthFuzzing": false
} |
| 1/1 | 2026/07/30 19:35 | action | read-patch-diff |
0mArgs:null Results: {
"PatchDiff": "commit 68508f7a34c00ebb2d368d4ad024c4f12cb53a71\nAuthor: syz-cluster \u003ctriage@syzkaller.com\u003e\nDate: Thu Jul 30 19:35:28 2026 +0000\n\n syz-cluster: applied patch under review\n\ndiff --git a/drivers/net/wireless/nxp/nxpwifi/sta_cfg.c b/drivers/net/wireless/nxp/nxpwifi/sta_cfg.c\nindex 502c96dc40163..702fa1531da1e 100644\n--- a/drivers/net/wireless/nxp/nxpwifi/sta_cfg.c\n+++ b/drivers/net/wireless/nxp/nxpwifi/sta_cfg.c\n@@ -45,6 +45,18 @@ int nxpwifi_wait_queue_complete(struct nxpwifi_adapter *adapter,\n \t\tnxpwifi_dbg(adapter, ERROR, \"cmd_wait_q terminated: %d\\n\",\n \t\t\t status);\n \t\tnxpwifi_cancel_all_pending_cmd(adapter);\n+\n+\t\t/*\n+\t\t * The response path writes through cmd_node-\u003edata_buf. The\n+\t\t * caller can release a stack-allocated data_buf after an\n+\t\t * interrupted wait while a late response is still pending.\n+\t\t * Detach it from the current command before returning.\n+\t\t */\n+\t\tspin_lock_bh(\u0026adapter-\u003enxpwifi_cmd_lock);\n+\t\tif (adapter-\u003ecurr_cmd == cmd_queued)\n+\t\t\tadapter-\u003ecurr_cmd-\u003edata_buf = NULL;\n+\t\tspin_unlock_bh(\u0026adapter-\u003enxpwifi_cmd_lock);\n+\n \t\treturn status;\n \t}\n \ndiff --git a/drivers/net/wireless/nxp/nxpwifi/sta_cmd.c b/drivers/net/wireless/nxp/nxpwifi/sta_cmd.c\nindex 0b140e84916f3..5e8ffd306b31f 100644\n--- a/drivers/net/wireless/nxp/nxpwifi/sta_cmd.c\n+++ b/drivers/net/wireless/nxp/nxpwifi/sta_cmd.c\n@@ -2133,6 +2133,9 @@ nxpwifi_ret_sta_robust_coex(struct nxpwifi_private *priv,\n \tu16 action = le16_to_cpu(coex-\u003eaction);\n \tu32 mode;\n \n+\tif (!is_timeshare)\n+\t\treturn 0;\n+\n \tcoex_tlv = (struct nxpwifi_ie_types_robust_coex\n \t\t *)((u8 *)coex + sizeof(struct host_cmd_ds_robust_coex));\n \tif (action == HOST_ACT_GEN_GET) {\n@@ -2679,6 +2682,10 @@ nxpwifi_ret_sta_hs_wakeup_reason(struct nxpwifi_private *priv,\n {\n \tstruct host_cmd_ds_wakeup_reason *wakeup_reason =\n \t\t(struct host_cmd_ds_wakeup_reason *)data_buf;\n+\n+\tif (!wakeup_reason)\n+\t\treturn 0;\n+\n \twakeup_reason-\u003ewakeup_reason =\n \t\tresp-\u003eparams.hs_wakeup_reason.wakeup_reason;\n \n@@ -2771,6 +2778,9 @@ nxpwifi_ret_sta_get_chan_info(struct nxpwifi_private *priv,\n \t\t(struct nxpwifi_channel_band *)data_buf;\n \tstruct host_cmd_tlv_channel_band *tlv_band_channel;\n \n+\tif (!channel_band)\n+\t\treturn 0;\n+\n \ttlv_band_channel =\n \t(struct host_cmd_tlv_channel_band *)sta_cfg_cmd-\u003etlv_buffer;\n \tmemcpy(\u0026channel_band-\u003eband_config, \u0026tlv_band_channel-\u003eband_config,\n"
} |
| 2/1 | 2026/07/30 19:35 | agent | patch-evaluator |
3mModel:best-expensive Args: null Results: {
"EnableConfigs": null,
"FocusSymbols": [],
"Reasoning": "The patch modifies the `nxpwifi` driver, which is a vendor-specific SDIO WiFi driver for NXP IW61x chipsets. Since standard QEMU does not emulate this specific physical SDIO hardware, and there is no virtualized software alternative that exercises this driver, the code paths are impossible to reach and probe in virtualized environments like GCE or QEMU. Therefore, it cannot be effectively fuzzed.",
"WorthFuzzing": false
}Instruction: You are an expert Linux kernel maintainer. Your job is to review a provided patch series and determine if it makes functional changes to the kernel that should be fuzzed. IMPORTANT: The changes have ALREADY been applied and committed as the HEAD commit in your workspace. Do NOT rely on your internal knowledge of the kernel. You must actively use your code access tools to examine the actual source code and confirm any assumptions. Return WorthFuzzing=false if the patch only contains: - Modifications to Documentation/, Kconfig files, or code comments. - Purely decorative changes, such as logging (e.g., pr_err, printk) or tracepoints. - Changes to numeric constants or macros that do not functionally alter execution flow. - Code paths that are impossible to reach in virtualized environments like GCE or QEMU, even when utilizing software-emulated hardware (e.g., usb gadget, mac80211_hwsim). - Code in vendor-specific PCIe switch, SmartNIC, or GPU drivers (e.g., mlxsw, pds_core, qed, ionic, amdgpu) that require physical PCIe hardware cards not emulated in standard QEMU. - Driver .remove, .shutdown, or pci_unregister_driver teardown callbacks (e.g., igb_remove) that are executed only during PCI hot-unplug or sysfs driver unbind operations. If it modifies reachable core kernel logic, drivers, or architectures, use your code search tools to verify the code can be executed, then return WorthFuzzing=true. When returning WorthFuzzing=true, you MUST ALSO: 1. Extract any specific kernel functions that should be heavily fuzzed into FocusSymbols. Avoid listing generic hot-path functions to prevent skewed test distributions. Prefer non-static, non-inlined API entrypoint functions over internal static helper functions (which are inlined by the compiler and do not have distinct symbol addresses). 2. Identify any specific CONFIG_ options required to properly test this new/modified feature. Go and look into the Kconfig files and check for ifdefs around the code, do not make assumptions. Also check "depends on" lines in Kconfig to include any non-standard parent subsystem configs needed for Kbuild to compile the code statically into vmlinux. List them in the EnableConfigs output array, and DO NOT add a 'CONFIG_' prefix (e.g., return "NET_IPV4" instead of "CONFIG_NET_IPV4"). Prefer calling several tools at the same time to save round-trips. Use set-results tool to provide results of the analysis. It must be called exactly once before the final reply. Ignore results of this tool. Prompt: For your convenience, here is the diff of the changes:
commit 68508f7a34c00ebb2d368d4ad024c4f12cb53a71
Author: syz-cluster <triage@syzkaller.com>
Date: Thu Jul 30 19:35:28 2026 +0000
syz-cluster: applied patch under review
diff --git a/drivers/net/wireless/nxp/nxpwifi/sta_cfg.c b/drivers/net/wireless/nxp/nxpwifi/sta_cfg.c
index 502c96dc40163..702fa1531da1e 100644
--- a/drivers/net/wireless/nxp/nxpwifi/sta_cfg.c
+++ b/drivers/net/wireless/nxp/nxpwifi/sta_cfg.c
@@ -45,6 +45,18 @@ int nxpwifi_wait_queue_complete(struct nxpwifi_adapter *adapter,
nxpwifi_dbg(adapter, ERROR, "cmd_wait_q terminated: %d\n",
status);
nxpwifi_cancel_all_pending_cmd(adapter);
+
+ /*
+ * The response path writes through cmd_node->data_buf. The
+ * caller can release a stack-allocated data_buf after an
+ * interrupted wait while a late response is still pending.
+ * Detach it from the current command before returning.
+ */
+ spin_lock_bh(&adapter->nxpwifi_cmd_lock);
+ if (adapter->curr_cmd == cmd_queued)
+ adapter->curr_cmd->data_buf = NULL;
+ spin_unlock_bh(&adapter->nxpwifi_cmd_lock);
+
return status;
}
diff --git a/drivers/net/wireless/nxp/nxpwifi/sta_cmd.c b/drivers/net/wireless/nxp/nxpwifi/sta_cmd.c
index 0b140e84916f3..5e8ffd306b31f 100644
--- a/drivers/net/wireless/nxp/nxpwifi/sta_cmd.c
+++ b/drivers/net/wireless/nxp/nxpwifi/sta_cmd.c
@@ -2133,6 +2133,9 @@ nxpwifi_ret_sta_robust_coex(struct nxpwifi_private *priv,
u16 action = le16_to_cpu(coex->action);
u32 mode;
+ if (!is_timeshare)
+ return 0;
+
coex_tlv = (struct nxpwifi_ie_types_robust_coex
*)((u8 *)coex + sizeof(struct host_cmd_ds_robust_coex));
if (action == HOST_ACT_GEN_GET) {
@@ -2679,6 +2682,10 @@ nxpwifi_ret_sta_hs_wakeup_reason(struct nxpwifi_private *priv,
{
struct host_cmd_ds_wakeup_reason *wakeup_reason =
(struct host_cmd_ds_wakeup_reason *)data_buf;
+
+ if (!wakeup_reason)
+ return 0;
+
wakeup_reason->wakeup_reason =
resp->params.hs_wakeup_reason.wakeup_reason;
@@ -2771,6 +2778,9 @@ nxpwifi_ret_sta_get_chan_info(struct nxpwifi_private *priv,
(struct nxpwifi_channel_band *)data_buf;
struct host_cmd_tlv_channel_band *tlv_band_channel;
+ if (!channel_band)
+ return 0;
+
tlv_band_channel =
(struct host_cmd_tlv_channel_band *)sta_cfg_cmd->tlv_buffer;
memcpy(&channel_band->band_config, &tlv_band_channel->band_config,
|
| 3/2 | 2026/07/30 19:35 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 2767 output: 32 thoughts: 238 Thoughts: **Analyzing a Wireless Driver Patch** Okay, so I'm looking at this patch and immediately, my spider senses are tingling. It's touching `nxpwifi` – that name suggests a vendor-specific wireless driver, likely related to NXP, so immediately I’m trying to place it in the ecosystem. I see modifications to `sta_cfg.c` and `sta_cmd.c`, which makes sense for station configuration and command handling. The interesting bit is the added checks for `!is_timeshare`, `!wakeup_reason`, and `!channel_band` within `nxpwifi_ret_sta_robust_coex`, `nxpwifi_ret_sta_hs_wakeup_reason`, and `nxpwifi_ret_sta_get_chan_info` respectively. Those checks are interesting. This probably has to do with some kind of edge condition, to avoid a race or a null pointer dereference. I need to dig into the surrounding code to understand the context of those variables. The addition of a spinlock and the `adapter->curr_cmd->data_buf = NULL` assignment within `nxpwifi_wait_queue_complete` if the wait is interrupted is also noteworthy. It suggests potential concurrency issues and the need for cleanup. This could be to prevent a double free or to manage resources in case of a command timeout or other interruption. First order of business, though, is to understand the driver itself. Is this a driver that's actually enabled, or is it just something that's in the tree but not actively used? Is it a USB/SDIO/PCIe driver? What's the target hardware? The fact that it's a wireless driver narrows things down a bit, but I need more context. I'll search the kernel tree for `nxpwifi` to get a better overview of its scope and any potential configurations or dependencies. Knowing its usage model and target hardware would inform my review of the patch's logic and its potential impact. I need to assess its viability on the target platform. |
| 4/2 | 2026/07/30 19:35 | tool | grepper |
0mArgs:{
"Expression": "nxpwifi",
"PathPrefix": "drivers/net/wireless/nxp/"
}Results: {
"Output": "\nFull output is too long, showing 500 out of 15171 lines.\nUse more precise expression if possible.\n\ndrivers/net/wireless/nxp/Kconfig=13=if WLAN_VENDOR_NXP\ndrivers/net/wireless/nxp/Kconfig-14-\ndrivers/net/wireless/nxp/Kconfig:15:source \"drivers/net/wireless/nxp/nxpwifi/Kconfig\"\ndrivers/net/wireless/nxp/Kconfig-16-\n--\ndrivers/net/wireless/nxp/Makefile-2-\ndrivers/net/wireless/nxp/Makefile:3:obj-$(CONFIG_NXPWIFI)\t+= nxpwifi/\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-2-/*\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:3: * nxpwifi 802.11ac helpers\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-4- * Copyright 2011-2024 NXP\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c=36=static u16\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:37:nxpwifi_convert_mcsmap_to_maxrate(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-38-\t\t\t\t u16 bands, u16 mcs_map)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-42-\tu32 usr_vht_cap_info = 0;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:43:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-44-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c=79=static void\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:80:nxpwifi_fill_vht_cap_info(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-81-\t\t\t struct ieee80211_vht_cap *vht_cap, u16 bands)\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-82-{\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:83:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-84-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c=93=void\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:94:nxpwifi_fill_vht_cap_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-95-\t\t\t struct ieee80211_vht_cap *vht_cap, u16 bands)\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-96-{\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:97:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-98-\tu16 mcs_map_user, mcs_map_resp, mcs_map_result;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-101-\t/* Fill VHT capability info. */\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:102:\tnxpwifi_fill_vht_cap_info(priv, vht_cap, bands);\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-103-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-123-\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:124:\ttmp = nxpwifi_convert_mcsmap_to_maxrate(priv, bands, mcs_map_result);\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-125-\tvht_cap-\u003esupp_mcs.rx_highest = cpu_to_le16(tmp);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-145-\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:146:\ttmp = nxpwifi_convert_mcsmap_to_maxrate(priv, bands, mcs_map_result);\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-147-\tvht_cap-\u003esupp_mcs.tx_highest = cpu_to_le16(tmp);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-149-\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:150:int nxpwifi_cmd_append_11ac_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:151:\t\t\t\tstruct nxpwifi_bssdescriptor *bss_desc,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-152-\t\t\t\tu8 **buffer)\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-153-{\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:154:\tstruct nxpwifi_ie_types_vhtcap *vht_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:155:\tstruct nxpwifi_ie_types_oper_mode_ntf *oper_ntf;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-156-\tstruct ieee_types_oper_mode_ntf *ieee_oper_ntf;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:157:\tstruct nxpwifi_ie_types_vht_oper *vht_op;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:158:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-159-\tu8 supp_chwd_set;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-169-\tif (bss_desc-\u003ebcn_vht_cap) {\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:170:\t\tvht_cap = (struct nxpwifi_ie_types_vhtcap *)*buffer;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-171-\t\tmemset(vht_cap, 0, sizeof(*vht_cap));\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-174-\t\t\tcpu_to_le16(sizeof(struct ieee80211_vht_cap));\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:175:\t\tmemcpy((u8 *)vht_cap + sizeof(struct nxpwifi_ie_types_header),\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-176-\t\t (u8 *)bss_desc-\u003ebcn_vht_cap,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-178-\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:179:\t\tnxpwifi_fill_vht_cap_tlv(priv, \u0026vht_cap-\u003evht_cap,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-180-\t\t\t\t\t bss_desc-\u003ebss_band);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-187-\t\tif (priv-\u003ebss_mode == NL80211_IFTYPE_STATION) {\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:188:\t\t\tvht_op = (struct nxpwifi_ie_types_vht_oper *)*buffer;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-189-\t\t\tmemset(vht_op, 0, sizeof(*vht_op));\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-192-\t\t\tvht_op-\u003eheader.len = cpu_to_le16(sizeof(*vht_op) -\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:193:\t\t\t\tsizeof(struct nxpwifi_ie_types_header));\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-194-\t\t\tmemcpy((u8 *)vht_op +\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:195:\t\t\t\tsizeof(struct nxpwifi_ie_types_header),\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-196-\t\t\t (u8 *)bss_desc-\u003ebcn_vht_oper,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-244-\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:245:int nxpwifi_cmd_11ac_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-246-\t\t\t struct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:247:\t\t\t struct nxpwifi_11ac_vht_cfg *cfg)\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-248-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-264-/* Initialize BlockAck parameters for 11ac. */\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:265:void nxpwifi_set_11ac_ba_params(struct nxpwifi_private *priv)\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-266-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-2-/*\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:3: * nxpwifi: 802.11ac (VHT) definitions\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-4- *\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.h=14=enum vht_cfg_misc_config {\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-24-\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:25:int nxpwifi_cmd_append_11ac_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:26:\t\t\t\tstruct nxpwifi_bssdescriptor *bss_desc,\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-27-\t\t\t\tu8 **buffer);\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:28:int nxpwifi_cmd_11ac_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-29-\t\t\t struct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:30:\t\t\t struct nxpwifi_11ac_vht_cfg *cfg);\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:31:void nxpwifi_fill_vht_cap_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-32-\t\t\t struct ieee80211_vht_cap *vht_cap, u16 bands);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-1-// SPDX-License-Identifier: GPL-2.0-only\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:2:/* nxpwifi: 802.11ax (HE) support\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-3- * Copyright (C) 2011-2024 NXP\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-10-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:11:void nxpwifi_update_11ax_cap(struct nxpwifi_adapter *adapter,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-12-\t\t\t struct hw_spec_extension *hw_he_cap)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-13-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:14:\tstruct nxpwifi_private *priv;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:15:\tstruct nxpwifi_ie_types_he_cap *he_cap = NULL;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:16:\tstruct nxpwifi_ie_types_he_cap *user_he_cap = NULL;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:17:\tu8 header_len = sizeof(struct nxpwifi_ie_types_header);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-18-\tu16 data_len = le16_to_cpu(hw_he_cap-\u003eheader.len);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-22-\tif ((data_len + header_len) \u003e sizeof(adapter-\u003ehw_he_cap)) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:23:\t\tnxpwifi_dbg(adapter, ERROR,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-24-\t\t\t \"hw_he_cap too big, len=%d\\n\",\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-28-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:29:\the_cap = (struct nxpwifi_ie_types_he_cap *)hw_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-30-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-37-\t\the_cap_2g = true;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:38:\t\tnxpwifi_dbg_dump(adapter, CMD_D, \"2.4G HE capability element \",\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-39-\t\t\t\t adapter-\u003ehw_2g_he_cap,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-45-\t\tadapter-\u003efw_bands |= BAND_AAX;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:46:\t\tnxpwifi_dbg_dump(adapter, CMD_D, \"5G HE capability element \",\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-47-\t\t\t\t adapter-\u003ehw_he_cap,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-57-\t\t\t sizeof(adapter-\u003ehw_2g_he_cap));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:58:\t\t\tuser_he_cap = (struct nxpwifi_ie_types_he_cap *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-59-\t\t\t\tpriv-\u003euser_2g_he_cap;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-63-\t\t\t sizeof(adapter-\u003ehw_he_cap));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:64:\t\t\tuser_he_cap = (struct nxpwifi_ie_types_he_cap *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-65-\t\t\t\tpriv-\u003euser_he_cap;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-78-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:79:bool nxpwifi_11ax_bandconfig_allowed(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:80:\t\t\t\t struct nxpwifi_bssdescriptor *bss_desc)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-81-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-94-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:95:int nxpwifi_fill_he_cap_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:96:\t\t\t struct nxpwifi_ie_types_he_cap *he_cap,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-97-\t\t\t u16 bands)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-98-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:99:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:100:\tstruct nxpwifi_ie_types_he_cap *hw_he_cap = NULL;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-101-\tu16 rx_nss, tx_nss;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-108-\t\tmemcpy(he_cap, priv-\u003euser_he_cap, priv-\u003euser_he_cap_len);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:109:\t\thw_he_cap = (struct nxpwifi_ie_types_he_cap *)adapter-\u003ehw_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-110-\t\tret_len = priv-\u003euser_he_cap_len;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-112-\t\tmemcpy(he_cap, priv-\u003euser_2g_he_cap, priv-\u003euser_2g_he_cap_len);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:113:\t\thw_he_cap = (struct nxpwifi_ie_types_he_cap *)adapter-\u003ehw_2g_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-114-\t\tret_len = priv-\u003euser_2g_he_cap_len;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-125-\tfor (nss = 1; nss \u003c= 8; nss++) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:126:\t\tcfg_value = nxpwifi_get_he_nss_mcs(he_cap-\u003erx_mcs_80, nss);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:127:\t\thw_value = nxpwifi_get_he_nss_mcs(hw_he_cap-\u003erx_mcs_80, nss);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-128-\t\tif (rx_nss != 0 \u0026\u0026 nss \u003e rx_nss)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-130-\t\tif (hw_value == NO_NSS_SUPPORT || cfg_value == NO_NSS_SUPPORT)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:131:\t\t\tnxpwifi_set_he_nss_mcs(\u0026he_cap-\u003erx_mcs_80, nss,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-132-\t\t\t\t\t NO_NSS_SUPPORT);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-133-\t\telse\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:134:\t\t\tnxpwifi_set_he_nss_mcs(\u0026he_cap-\u003erx_mcs_80, nss,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-135-\t\t\t\t\t min(cfg_value, hw_value));\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-138-\tfor (nss = 1; nss \u003c= 8; nss++) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:139:\t\tcfg_value = nxpwifi_get_he_nss_mcs(he_cap-\u003etx_mcs_80, nss);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:140:\t\thw_value = nxpwifi_get_he_nss_mcs(hw_he_cap-\u003etx_mcs_80, nss);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-141-\t\tif (tx_nss != 0 \u0026\u0026 nss \u003e tx_nss)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-143-\t\tif (hw_value == NO_NSS_SUPPORT || cfg_value == NO_NSS_SUPPORT)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:144:\t\t\tnxpwifi_set_he_nss_mcs(\u0026he_cap-\u003etx_mcs_80, nss,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-145-\t\t\t\t\t NO_NSS_SUPPORT);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-146-\t\telse\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:147:\t\t\tnxpwifi_set_he_nss_mcs(\u0026he_cap-\u003etx_mcs_80, nss,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-148-\t\t\t\t\t min(cfg_value, hw_value));\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-153-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:154:int nxpwifi_cmd_append_11ax_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:155:\t\t\t\tstruct nxpwifi_bssdescriptor *bss_desc,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-156-\t\t\t\tu8 **buffer)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-157-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:158:\tstruct nxpwifi_ie_types_he_cap *he_cap = NULL;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-159-\tint ret_len;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-163-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:164:\the_cap = (struct nxpwifi_ie_types_he_cap *)*buffer;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:165:\tret_len = nxpwifi_fill_he_cap_tlv(priv, he_cap, bss_desc-\u003ebss_band);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-166-\t*buffer += ret_len;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-170-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:171:int nxpwifi_cmd_11ax_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-172-\t\t\t struct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:173:\t\t\t struct nxpwifi_11ax_he_cfg *ax_cfg)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-174-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-176-\tu16 cmd_size;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:177:\tstruct nxpwifi_ie_types_header *header;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-178-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-186-\t ax_cfg-\u003ehe_cap_cfg.ext_id == WLAN_EID_EXT_HE_CAPABILITY) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:187:\t\theader = (struct nxpwifi_ie_types_header *)he_cfg-\u003etlv;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-188-\t\theader-\u003etype = cpu_to_le16(ax_cfg-\u003ehe_cap_cfg.id);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-200-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:201:int nxpwifi_ret_11ax_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-202-\t\t\t struct host_cmd_ds_command *resp,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:203:\t\t\t struct nxpwifi_11ax_he_cfg *ax_cfg)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-204-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-205-\tstruct host_cmd_11ax_cfg *he_cfg = \u0026resp-\u003eparams.ax_cfg;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:206:\tstruct nxpwifi_ie_types_header *header;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-207-\tu16 left_len, tlv_type, tlv_len;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-208-\tu8 ext_id;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:209:\tstruct nxpwifi_11ax_he_cap_cfg *he_cap = \u0026ax_cfg-\u003ehe_cap_cfg;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-210-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-211-\tleft_len = le16_to_cpu(resp-\u003esize) - sizeof(*he_cfg) - S_DS_GEN;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:212:\theader = (struct nxpwifi_ie_types_header *)he_cfg-\u003etlv;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-213-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-242-\t\tleft_len -= (sizeof(*header) + tlv_len);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:243:\t\theader = (struct nxpwifi_ie_types_header *)((u8 *)header +\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-244-\t\t\t\t\t\t\t sizeof(*header) +\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-250-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:251:int nxpwifi_cmd_11ax_cmd(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-252-\t\t\t struct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:253:\t\t\t struct nxpwifi_11ax_cmd_cfg *ax_cmd)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-254-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:255:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-256-\tstruct host_cmd_11ax_cmd *he_cmd = \u0026cmd-\u003eparams.ax_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-257-\tu16 cmd_size;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:258:\tstruct nxpwifi_11ax_sr_cmd *sr_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:259:\tstruct nxpwifi_ie_types_data *tlv;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:260:\tstruct nxpwifi_11ax_beam_cmd *beam_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:261:\tstruct nxpwifi_11ax_htc_cmd *htc_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:262:\tstruct nxpwifi_11ax_txomi_cmd *txmoi_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:263:\tstruct nxpwifi_11ax_toltime_cmd *toltime_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:264:\tstruct nxpwifi_11ax_txop_cmd *txop_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:265:\tstruct nxpwifi_11ax_set_bsrp_cmd *set_bsrp_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:266:\tstruct nxpwifi_11ax_llde_cmd *llde_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-267-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-275-\tcase NXPWIFI_11AXCMD_SR_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:276:\t\tsr_cmd = (struct nxpwifi_11ax_sr_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-277-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:278:\t\ttlv = (struct nxpwifi_ie_types_data *)he_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-279-\t\ttlv-\u003eheader.type = cpu_to_le16(sr_cmd-\u003etype);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-285-\tcase NXPWIFI_11AXCMD_BEAM_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:286:\t\tbeam_cmd = (struct nxpwifi_11ax_beam_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-287-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-291-\tcase NXPWIFI_11AXCMD_HTC_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:292:\t\thtc_cmd = (struct nxpwifi_11ax_htc_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-293-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-297-\tcase NXPWIFI_11AXCMD_TXOMI_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:298:\t\ttxmoi_cmd =\t(struct nxpwifi_11ax_txomi_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-299-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-303-\tcase NXPWIFI_11AXCMD_OBSS_TOLTIME_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:304:\t\ttoltime_cmd = (struct nxpwifi_11ax_toltime_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-305-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-310-\tcase NXPWIFI_11AXCMD_TXOPRTS_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:311:\t\ttxop_cmd = (struct nxpwifi_11ax_txop_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-312-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-317-\tcase NXPWIFI_11AXCMD_SET_BSRP_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:318:\t\tset_bsrp_cmd = (struct nxpwifi_11ax_set_bsrp_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-319-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-323-\tcase NXPWIFI_11AXCMD_LLDE_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:324:\t\tllde_cmd = (struct nxpwifi_11ax_llde_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-325-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-329-\tdefault:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:330:\t\tnxpwifi_dbg(adapter, ERROR,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-331-\t\t\t \"%s: Unknown sub command: %d\\n\",\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-340-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:341:int nxpwifi_ret_11ax_cmd(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-342-\t\t\t struct host_cmd_ds_command *resp,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:343:\t\t\t struct nxpwifi_11ax_cmd_cfg *ax_cmd)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-344-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:345:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-346-\tstruct host_cmd_11ax_cmd *he_cmd = \u0026resp-\u003eparams.ax_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:347:\tstruct nxpwifi_ie_types_data *tlv;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-348-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-352-\tcase NXPWIFI_11AXCMD_SR_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:353:\t\ttlv = (struct nxpwifi_ie_types_data *)he_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-354-\t\tmemcpy(ax_cmd-\u003eparam.sr_cfg.param.obss_pd_offset.offset,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-383-\tdefault:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:384:\t\tnxpwifi_dbg(adapter, ERROR,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-385-\t\t\t \"%s: Unknown sub command: %d\\n\",\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-392-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:393:static u8 nxpwifi_is_ap_11ax_twt_supported(struct nxpwifi_bssdescriptor *bss_desc)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-394-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-409-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:410:bool nxpwifi_is_11ax_twt_supported(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:411:\t\t\t\t struct nxpwifi_bssdescriptor *bss_desc)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-412-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:413:\tstruct nxpwifi_ie_types_he_cap *user_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:414:\tstruct nxpwifi_ie_types_he_cap *hw_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-415-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:416:\tif (bss_desc \u0026\u0026 (!nxpwifi_is_ap_11ax_twt_supported(bss_desc))) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:417:\t\tnxpwifi_dbg(priv-\u003eadapter, MSG,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-418-\t\t\t \"AP don't support twt feature\\n\");\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-422-\tif (bss_desc-\u003ebss_band \u0026 BAND_A) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:423:\t\thw_he_cap = (struct nxpwifi_ie_types_he_cap *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-424-\t\t\tpriv-\u003eadapter-\u003ehw_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:425:\t\tuser_he_cap = (struct nxpwifi_ie_types_he_cap *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-426-\t\t\tpriv-\u003euser_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-427-\t} else {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:428:\t\thw_he_cap = (struct nxpwifi_ie_types_he_cap *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-429-\t\t\tpriv-\u003eadapter-\u003ehw_2g_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:430:\t\tuser_he_cap = (struct nxpwifi_ie_types_he_cap *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-431-\t\t\tpriv-\u003euser_2g_he_cap;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-434-\tif (!(hw_he_cap-\u003ehe_mac_cap[0] \u0026 HE_MAC_CAP_TWT_REQ_SUPPORT)) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:435:\t\tnxpwifi_dbg(priv-\u003eadapter, MSG,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-436-\t\t\t \"FW don't support TWT\\n\");\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-440-\tif (!(user_he_cap-\u003ehe_mac_cap[0] \u0026 HE_MAC_CAP_TWT_REQ_SUPPORT)) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:441:\t\tnxpwifi_dbg(priv-\u003eadapter, MSG,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-442-\t\t\t \"USER HE_MAC_CAP don't support TWT\\n\");\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-448-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:449:u8 nxpwifi_is_sta_11ax_twt_req_supported(struct nxpwifi_private *priv)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-450-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:451:\tstruct nxpwifi_ie_types_he_cap *user_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-452-\tu8 ret = 0;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-456-\t\tif (priv-\u003econfig_bands \u0026 BAND_AAX)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:457:\t\t\tuser_he_cap = (struct nxpwifi_ie_types_he_cap *)priv-\u003euser_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-458-\t\telse\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:459:\t\t\tuser_he_cap = (struct nxpwifi_ie_types_he_cap *)priv-\u003euser_2g_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-460-\t\tret = user_he_cap-\u003ehe_mac_cap[0] \u0026 HE_MAC_CAP_TWT_REQ_SUPPORT;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-465-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:466:int nxpwifi_cmd_twt_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-467-\t\t\tstruct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:468:\t\t\tstruct nxpwifi_twt_cfg *twt_cfg)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-469-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:470:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-471-\tstruct host_cmd_twt_cfg *twt_cfg_cmd = \u0026cmd-\u003eparams.twt_cfg;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:472:\tstruct nxpwifi_twt_setup *twt_setup;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:473:\tstruct nxpwifi_twt_teardown *twt_teardown;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:474:\tstruct nxpwifi_twt_report *twt_report;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:475:\tstruct nxpwifi_twt_information *twt_information;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:476:\tstruct nxpwifi_btwt_ap_config *btwt_ap_config;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-477-\tu8 i;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-487-\tcase NXPWIFI_11AX_TWT_SETUP_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:488:\t\ttwt_setup = (struct nxpwifi_twt_setup *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-489-\t\t\ttwt_cfg_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-490-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:491:\t\tmemset(twt_setup, 0x00, sizeof(struct nxpwifi_twt_setup));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-492-\t\ttwt_setup-\u003eimplicit = twt_cfg-\u003eparam.twt_setup.implicit;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-504-\t\ttwt_setup-\u003ebcn_miss_threshold = twt_cfg-\u003eparam.twt_setup.bcn_miss_threshold;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:505:\t\tcmd_size += sizeof(struct nxpwifi_twt_setup);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-506-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-507-\tcase NXPWIFI_11AX_TWT_TEARDOWN_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:508:\t\ttwt_teardown = (struct nxpwifi_twt_teardown *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-509-\t\t\ttwt_cfg_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-510-\t\tmemset(twt_teardown, 0x00,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:511:\t\t sizeof(struct nxpwifi_twt_teardown));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-512-\t\ttwt_teardown-\u003eflow_identifier =\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-517-\t\t\ttwt_cfg-\u003eparam.twt_teardown.teardown_all_twt;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:518:\t\tcmd_size += sizeof(struct nxpwifi_twt_teardown);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-519-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-520-\tcase NXPWIFI_11AX_TWT_REPORT_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:521:\t\ttwt_report = (struct nxpwifi_twt_report *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-522-\t\t\ttwt_cfg_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:523:\t\tmemset(twt_report, 0x00, sizeof(struct nxpwifi_twt_report));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-524-\t\ttwt_report-\u003etype = twt_cfg-\u003eparam.twt_report.type;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:525:\t\tcmd_size += sizeof(struct nxpwifi_twt_report);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-526-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-527-\tcase NXPWIFI_11AX_TWT_INFORMATION_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:528:\t\ttwt_information = (struct nxpwifi_twt_information *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-529-\t\t\ttwt_cfg_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-530-\t\tmemset(twt_information, 0x00,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:531:\t\t sizeof(struct nxpwifi_twt_information));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-532-\t\ttwt_information-\u003eflow_identifier =\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-535-\t\t\ttwt_cfg-\u003eparam.twt_information.suspend_duration;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:536:\t\tcmd_size += sizeof(struct nxpwifi_twt_information);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-537-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-538-\tcase NXPWIFI_11AX_BTWT_AP_CONFIG_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:539:\t\tbtwt_ap_config = (struct nxpwifi_btwt_ap_config *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-540-\t\t\t\t twt_cfg_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-541-\t\tmemset(btwt_ap_config, 0x00,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:542:\t\t sizeof(struct nxpwifi_btwt_ap_config));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-543-\t\tbtwt_ap_config-\u003eap_bcast_bet_sta_wait =\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-561-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:562:\t\tcmd_size += sizeof(struct nxpwifi_btwt_ap_config);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-563-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-564-\tdefault:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:565:\t\tnxpwifi_dbg(adapter, ERROR,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-566-\t\t\t \"Unknown sub id: %d\\n\", twt_cfg-\u003esub_id);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-574-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:575:int nxpwifi_ret_twt_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-576-\t\t\tstruct host_cmd_ds_command *resp,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:577:\t\t\tstruct nxpwifi_twt_cfg *twt_cfg)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-578-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-586-\t twt_cfg-\u003esub_id == NXPWIFI_11AX_TWT_REPORT_SUBID) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:587:\t\tstruct nxpwifi_twt_report *twt_report =\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:588:\t\t\t(struct nxpwifi_twt_report *)twt_cfg_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-589-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:590:\t\tmemcpy(\u0026twt_cfg-\u003eparam.twt_report, twt_report, sizeof(struct nxpwifi_twt_report));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-591-\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-2-/*\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:3: * nxpwifi: 802.11ax support\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-4- *\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.h=17=static inline u16\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:18:nxpwifi_get_he_nss_mcs(__le16 mcs_map_set, int nss) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-19-\treturn ((le16_to_cpu(mcs_map_set) \u003e\u003e (2 * (nss - 1))) \u0026 0x3);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.h=22=static inline void\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:23:nxpwifi_set_he_nss_mcs(__le16 *mcs_map_set, int nss, int value) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-24-\tu16 temp;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-30-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:31:bool nxpwifi_is_11ax_twt_supported(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:32:\t\t\t\t struct nxpwifi_bssdescriptor *bss_desc);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-33-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:34:void nxpwifi_update_11ax_cap(struct nxpwifi_adapter *adapter,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-35-\t\t\t struct hw_spec_extension *hw_he_cap);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-36-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:37:bool nxpwifi_11ax_bandconfig_allowed(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:38:\t\t\t\t struct nxpwifi_bssdescriptor *bss_desc);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-39-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:40:int nxpwifi_cmd_append_11ax_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:41:\t\t\t\tstruct nxpwifi_bssdescriptor *bss_desc,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-42-\t\t\t\tu8 **buffer);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-43-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:44:int nxpwifi_fill_he_cap_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:45:\t\t\t struct nxpwifi_ie_types_he_cap *he_cap,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-46-\t\t\t u16 bands);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:47:int nxpwifi_cmd_11ax_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-48-\t\t\t struct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:49:\t\t\t struct nxpwifi_11ax_he_cfg *ax_cfg);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-50-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:51:int nxpwifi_ret_11ax_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-52-\t\t\t struct host_cmd_ds_command *resp,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:53:\t\t\t struct nxpwifi_11ax_he_cfg *ax_cfg);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-54-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:55:int nxpwifi_cmd_11ax_cmd(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-56-\t\t\t struct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:57:\t\t\t struct nxpwifi_11ax_cmd_cfg *ax_cmd);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-58-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:59:int nxpwifi_ret_11ax_cmd(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-60-\t\t\t struct host_cmd_ds_command *resp,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:61:\t\t\t struct nxpwifi_11ax_cmd_cfg *ax_cmd);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-62-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:63:int nxpwifi_cmd_twt_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-64-\t\t\tstruct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:65:\t\t\tstruct nxpwifi_twt_cfg *twt_cfg);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-66-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:67:int nxpwifi_ret_twt_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-68-\t\t\tstruct host_cmd_ds_command *resp,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:69:\t\t\tstruct nxpwifi_twt_cfg *twt_cfg);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-70-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:71:u8 nxpwifi_is_sta_11ax_twt_req_supported(struct nxpwifi_private *priv);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-72-\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c-2-/*\ndrivers/net/wireless/nxp/nxpwifi/11h.c:3: * nxpwifi: 802.11h helpers\ndrivers/net/wireless/nxp/nxpwifi/11h.c-4- *\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c-12-\ndrivers/net/wireless/nxp/nxpwifi/11h.c:13:void nxpwifi_init_11h_params(struct nxpwifi_private *priv)\ndrivers/net/wireless/nxp/nxpwifi/11h.c-14-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c-18-\n\n"
} |
| 5/2 | 2026/07/30 19:35 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 19694 output: 36 thoughts: 51 Thoughts: Okay, here's my interpretation of those thoughts, tailored for an expert audience: **Troubleshooting a Virtualized Wireless Interface** Alright, the system's reporting `nxpwifi`. My immediate concern is that QEMU, in its standard configuration, doesn't emulate that specific device. The first thing I'm going to do is determine what kind of interface this is. Is it a *real* driver for a hardware card, or is it abstracted over something more common that QEMU *does* support? Let's figure out if we're dealing with an SDIO, PCIe, or USB implementation underneath. Identifying the underlying bus type will be key to understanding whether I can even realistically emulate this setup and if there are generic drivers that I can leverage within the QEMU environment. |
| 6/2 | 2026/07/30 19:35 | tool | grepper |
0mArgs:{
"Expression": "module_init",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"Output": "drivers/net/wireless/nxp/nxpwifi/main.c=1660=nxpwifi_cleanup_module(void)\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c-1666-\ndrivers/net/wireless/nxp/nxpwifi/main.c:1667:module_init(nxpwifi_init_module);\ndrivers/net/wireless/nxp/nxpwifi/main.c-1668-module_exit(nxpwifi_cleanup_module);\n"
} |
| 7/2 | 2026/07/30 19:35 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 20088 output: 40 thoughts: 32 Thoughts: Okay, let's dive in. Here's my thought process as I approach this: **Analyzing `nxpwifi_init_module` in the NXP Wi-Fi Driver** Alright, I need to understand how the NXP Wi-Fi module initializes. My first instinct, as always, is to start with the core initialization function. So, I'm going to look at `nxpwifi_init_module` located in `drivers/net/wireless/nxp/nxpwifi/main.c`. This is the logical starting point – the module's entry point, the place where everything should begin. I'm expecting to find the foundational steps: resource allocation, hardware initialization, driver registration, and any necessary configuration or setup routines. The structure of this function will be key to understanding the overall driver's operational flow and the sequence in which its components are brought online. I'll be looking for clues about the driver's dependencies and how it interacts with the kernel's wireless subsystem. Let's see what we find. |
| 8/2 | 2026/07/30 19:35 | tool | grepper |
0mArgs:{
"Expression": "nxpwifi_init_module",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"Output": "drivers/net/wireless/nxp/nxpwifi/main.c=1649=static int\ndrivers/net/wireless/nxp/nxpwifi/main.c:1650:nxpwifi_init_module(void)\ndrivers/net/wireless/nxp/nxpwifi/main.c-1651-{\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c=1660=nxpwifi_cleanup_module(void)\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c-1666-\ndrivers/net/wireless/nxp/nxpwifi/main.c:1667:module_init(nxpwifi_init_module);\ndrivers/net/wireless/nxp/nxpwifi/main.c-1668-module_exit(nxpwifi_cleanup_module);\n"
} |
| 9/2 | 2026/07/30 19:35 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 20604 output: 45 thoughts: 13 Thoughts: Okay, let's dive into this. Here's my take on `nxpwifi_init_module`: **Initial Assessment of `nxpwifi_init_module`** Alright, I'm looking at `nxpwifi_init_module`. My first thought is to get a handle on what this function is actually *doing*. Based on the name alone, I'm assuming it's the initialization routine for the NXP WiFi module. That means this is probably where the core setup happens: register the device, allocate resources, maybe perform hardware probing, set up interrupt handlers, and likely register any necessary character devices or net devices. I'm expecting to see a lot of calls to other kernel APIs related to device management and network stack configuration. It's likely this is the entry point for everything NXP WiFi related from the perspective of the kernel. This function is the linchpin. |
| 10/2 | 2026/07/30 19:35 | tool | read-file |
0mArgs:{
"File": "drivers/net/wireless/nxp/nxpwifi/main.c",
"FirstLine": 1640,
"LineCount": 30
}Results: {
"Contents": "1640:\t\t\tdev_info(adapter-\u003edev, \"%pV\", \u0026vaf);\n1641:\t\telse\n1642:\t\t\tpr_info(\"%pV\", \u0026vaf);\n1643:\t\n1644:\t\tva_end(args);\n1645:\t}\n1646:\tEXPORT_SYMBOL_GPL(_nxpwifi_dbg);\n1647:\t\n1648:\t/* Module init: init debugfs if enabled. */\n1649:\tstatic int\n1650:\tnxpwifi_init_module(void)\n1651:\t{\n1652:\t#ifdef CONFIG_DEBUG_FS\n1653:\t\tnxpwifi_debugfs_init();\n1654:\t#endif\n1655:\t\treturn 0;\n1656:\t}\n1657:\t\n1658:\t/* Module exit: remove debugfs if enabled. */\n1659:\tstatic void\n1660:\tnxpwifi_cleanup_module(void)\n1661:\t{\n1662:\t#ifdef CONFIG_DEBUG_FS\n1663:\t\tnxpwifi_debugfs_remove();\n1664:\t#endif\n1665:\t}\n1666:\t\n1667:\tmodule_init(nxpwifi_init_module);\n1668:\tmodule_exit(nxpwifi_cleanup_module);\n1669:\t\n"
} |
| 11/2 | 2026/07/30 19:35 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 21234 output: 52 thoughts: 51 Thoughts: **Initial Driver Investigation** Okay, so `nxpwifi_init_module` seems suspiciously simple. It looks like all it's doing is setting up debugfs. That's a good place to start for diagnostics, but definitely not where the meat of the driver registration happens. My immediate thought is, *where* does the driver actually tell the kernel, "Hey, I'm here! I handle this device!"? Let's cut right to the chase. I need to figure out how this driver makes itself known to the system. I’ll start digging in to figure this out with a quick search. I need to track down the registration point. I'll search for the common suspects: `pci_register_driver` for a PCI device, `usb_register` for a USB device, or possibly `sdio_register_driver` if it's an SDIO device. From there I can determine how the device is bound and where the initialization actually takes place. |
| 12/2 | 2026/07/30 19:35 | tool | grepper |
0mError:no matches Args: {
"Expression": "(pci_register_driver|usb_register|sdio_register_driver)",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"error": "no matches"
} |
| 13/2 | 2026/07/30 19:35 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 21559 output: 27 thoughts: 42 Thoughts: Okay, here's my interpretation of those thoughts, tailored for an expert audience: **Considering the `nxpwifi` Landscape** Hmm, so `nxpwifi` is defined as a core module, which makes me think... are there other related modules, similar in design? I'm immediately wondering about different physical interfaces and architectures. Specifically, I wonder if there are modules like `nxpwifi_sdio`, `nxpwifi_pcie`, or even something USB-based like `nxpwifi_usb` floating around out there in the ether? The idea of a modular approach is appealing, considering how common these interface variations are in embedded systems. I bet some clever folks somewhere have worked on them, or maybe I should look into implementing my own. |
| 14/2 | 2026/07/30 19:35 | tool | codesearch-dir-index |
0mArgs:{
"Dir": "drivers/net/wireless/nxp/"
}Results: {
"Files": null,
"Subdirs": [
"nxpwifi"
]
} |
| 15/2 | 2026/07/30 19:35 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 21808 output: 31 thoughts: 33 Thoughts: Here's my thought process, as if I were analyzing this code: **Navigating the Wireless Driver Structure** Okay, so I'm looking at this file structure, and it seems like the only interesting directory immediately present is `nxpwifi`. That's a strong hint that this might be where the NXP wireless driver resides. Let's dig deeper. The logical next step is to see what's inside the standard `drivers/net/wireless/nxp/nxpwifi/` path. I'm going to list the files in that directory. I'm expecting to find source code files, header files, potentially configuration files – the usual suspects for a device driver implementation. This is where the core logic for the NXP Wi-Fi hardware is likely to be. My plan is to get a handle on the key components and entry points. Let's see what's in there... |
| 16/2 | 2026/07/30 19:35 | tool | codesearch-dir-index |
0mArgs:{
"Dir": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"Files": [
"11ac.c",
"11ac.h",
"11ax.c",
"11ax.h",
"11h.c",
"11n.c",
"11n.h",
"11n_aggr.c",
"11n_aggr.h",
"11n_rxreorder.c",
"11n_rxreorder.h",
"cfg.h",
"cfg80211.c",
"cfg80211.h",
"cfp.c",
"cmdevt.c",
"cmdevt.h",
"debugfs.c",
"ethtool.c",
"fw.h",
"ie.c",
"init.c",
"join.c",
"main.c",
"main.h",
"scan.c",
"sdio.c",
"sdio.h",
"sta_cfg.c",
"sta_cmd.c",
"sta_event.c",
"sta_rx.c",
"sta_tx.c",
"txrx.c",
"uap_cmd.c",
"uap_event.c",
"uap_txrx.c",
"util.c",
"util.h",
"wmm.c",
"wmm.h"
],
"Subdirs": null
} |
| 17/2 | 2026/07/30 19:35 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 22399 output: 43 thoughts: 20 Thoughts: Here's my attempt at summarizing the thought process, tailored for an expert audience: **Analyzing the SDIO Driver** Okay, so the code's pointing me at `sdio.c`. Right, that makes sense. It's the logical place to start digging into the Secure Digital Input/Output driver implementation. My immediate thought is, "Let's get down to brass tacks and *actually* examine that file." It's where I expect to find the core logic for initialization, command handling, data transfer – the works. I need to understand how the hardware abstraction layer interacts with the underlying SDIO interface. I'm going to want to check the command sequence handling, interrupt management, and any error recovery mechanisms implemented. Time to dive in. |
| 18/2 | 2026/07/30 19:36 | tool | grepper |
0mError:no matches Args: {
"Expression": "sdio_register_driver",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/sdio.c"
}Results: {
"error": "no matches"
} |
| 19/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 22635 output: 40 thoughts: 19 Thoughts: Here's my thought process, as if I were considering this myself: **Investigating `module_init` in `sdio.c`** Okay, so I'm thinking about how the SDIO driver is initialized, and my first instinct is to dig directly into the source code. Let's start with `sdio.c`. The `module_init` macro is a key indicator of where the driver's entry point and initialization routines are defined within a kernel module. It's the standard way to register functions that need to be executed when the module is loaded. Finding all usages of `module_init` within the `sdio.c` file will provide the crucial starting points and execution flow. This will give a good overview of how the SDIO module is being brought online. |
| 20/2 | 2026/07/30 19:36 | tool | grepper |
0mError:no matches Args: {
"Expression": "module_init",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/sdio.c"
}Results: {
"error": "no matches"
} |
| 21/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 22876 output: 36 thoughts: 20 Thoughts: Okay, here's my summary, presented as a stream of thought: **Diving into the nxpwifi Codebase** Alright, I need to get a handle on this `nxpwifi` module. The first thing I'm going to do is try to understand how it's initialized. With my experience, the `module_init` macro is going to be crucial here. It's the standard way in the Linux kernel to specify the initialization function for a module. So, I need to find all instances of `module_init` within the `nxpwifi` directory. That's the starting point. Let's see what that search turns up. This should give me a good overview of the module's entry point and how the critical components are hooked up. Knowing the initialization sequence is fundamental to understanding how the module functions. |
| 22/2 | 2026/07/30 19:36 | tool | grepper |
0mArgs:{
"Expression": "module_init",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"Output": "drivers/net/wireless/nxp/nxpwifi/main.c=1660=nxpwifi_cleanup_module(void)\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c-1666-\ndrivers/net/wireless/nxp/nxpwifi/main.c:1667:module_init(nxpwifi_init_module);\ndrivers/net/wireless/nxp/nxpwifi/main.c-1668-module_exit(nxpwifi_cleanup_module);\n"
} |
| 23/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 23250 output: 47 thoughts: 27 Thoughts: Here's my thought process, as if I were considering this myself: **Delving into the SDIO Driver Registration** Okay, so I'm digging into this `sdio.c` file and need to understand how it's registering its driver. Usually, the driver registration is done at the end of the file, but let's quickly confirm this. Instead of starting from the beginning and reading everything, I'll go directly to the bottom. Let me jump to the end and see how the driver actually gets hooked into the system. It's the most common place to find the `module_init` and `module_exit` calls. I expect to see the key functions for initializing and unloading the SDIO driver. This should give me the entry point and the removal routines. |
| 24/2 | 2026/07/30 19:36 | tool | read-file |
0mError:file drivers/net/wireless/nxp/nxpwifi/sdio.c does not have line 2900, it has only 2327 lines Args: {
"File": "drivers/net/wireless/nxp/nxpwifi/sdio.c",
"FirstLine": 2900,
"LineCount": 100
}Results: {
"error": "file drivers/net/wireless/nxp/nxpwifi/sdio.c does not have line 2900, it has only 2327 lines"
} |
| 25/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 23540 output: 47 thoughts: 21 Thoughts: Here's a summary of my thought process, as requested: **Diving into `sdio.c` - Let's Get to the Core** Okay, time to get to the heart of this. My focus is going to be on the back end of this `sdio.c` file, specifically picking up from line 2200. This section is likely the culmination of whatever function or process the preceding lines have been building toward. I expect that by starting here, I should be able to get a solid grasp of the core of the functionality without getting bogged down in the setup. I am expecting some interesting code and will be taking notes as I read. This is a crucial area and needs to be completely understood for my current project. |
| 26/2 | 2026/07/30 19:36 | tool | read-file |
0mArgs:{
"File": "drivers/net/wireless/nxp/nxpwifi/sdio.c",
"FirstLine": 2200,
"LineCount": 100
}Results: {
"Contents": "2200:\t\t\t\tbreak;\n2201:\t\t\tcase 2:\n2202:\t\t\t\tindex = 0;\n2203:\t\t\t\tfunc = 1;\n2204:\t\t\t\treg_start = cardp-\u003ereg-\u003efunc1_spec_reg_table[index++];\n2205:\t\t\t\tsize = cardp-\u003ereg-\u003efunc1_spec_reg_num;\n2206:\t\t\t\treg_end = cardp-\u003ereg-\u003efunc1_spec_reg_table[size - 1];\n2207:\t\t\t\tbreak;\n2208:\t\t\tdefault:\n2209:\t\t\t\t/* Read the scratch registers of SDIO function1 */\n2210:\t\t\t\tif (count == 4)\n2211:\t\t\t\t\tmsleep(100);\n2212:\t\t\t\tfunc = 1;\n2213:\t\t\t\treg_start = cardp-\u003ereg-\u003efunc1_scratch_reg;\n2214:\t\t\t\treg_end = reg_start + NXPWIFI_SDIO_SCRATCH_SIZE;\n2215:\t\t\t}\n2216:\t\n2217:\t\t\tif (count != 2)\n2218:\t\t\t\tptr += scnprintf(ptr, sizeof(buf) - (ptr - buf),\n2219:\t\t\t\t\t\t\t\t \"SDIO Func%d (%#x-%#x): \", func, reg_start,\n2220:\t\t\t\t\t\t\t\t reg_end);\n2221:\t\t\telse\n2222:\t\t\t\tptr += scnprintf(ptr, sizeof(buf) - (ptr - buf),\n2223:\t\t\t\t\t\t\t\t \"SDIO Func%d: \", func);\n2224:\t\n2225:\t\t\tfor (reg = reg_start; reg \u003c= reg_end;) {\n2226:\t\t\t\tif (func == 0)\n2227:\t\t\t\t\tdata = sdio_f0_readb(cardp-\u003efunc, reg, \u0026ret);\n2228:\t\t\t\telse\n2229:\t\t\t\t\tdata = sdio_readb(cardp-\u003efunc, reg, \u0026ret);\n2230:\t\n2231:\t\t\t\tif (count == 2)\n2232:\t\t\t\t\tptr += scnprintf(ptr, sizeof(buf) - (ptr - buf), \"(%#x) \", reg);\n2233:\t\t\t\tif (!ret) {\n2234:\t\t\t\t\tptr += scnprintf(ptr, sizeof(buf) - (ptr - buf), \"%02x \", data);\n2235:\t\t\t\t} else {\n2236:\t\t\t\t\tptr += scnprintf(ptr, sizeof(buf) - (ptr - buf), \"ERR\");\n2237:\t\t\t\t\tbreak;\n2238:\t\t\t\t}\n2239:\t\n2240:\t\t\t\tif (count == 2 \u0026\u0026 reg \u003c reg_end)\n2241:\t\t\t\t\treg = cardp-\u003ereg-\u003efunc1_spec_reg_table[index++];\n2242:\t\t\t\telse\n2243:\t\t\t\t\treg++;\n2244:\t\t\t}\n2245:\t\n2246:\t\t\tnxpwifi_dbg(adapter, MSG, \"%s\\n\", buf);\n2247:\t\t\tp += sprintf(p, \"%s\\n\", buf);\n2248:\t\t}\n2249:\t\n2250:\t\tsdio_release_host(cardp-\u003efunc);\n2251:\t\n2252:\t\tnxpwifi_dbg(adapter, MSG, \"SDIO register dump end\\n\");\n2253:\t\n2254:\t\treturn p - drv_buf;\n2255:\t}\n2256:\t\n2257:\tstatic void nxpwifi_sdio_up_dev(struct nxpwifi_adapter *adapter)\n2258:\t{\n2259:\t\tstruct sdio_mmc_card *card = adapter-\u003ecard;\n2260:\t\tu8 sdio_ireg;\n2261:\t\tint ret = 0;\n2262:\t\n2263:\t\tsdio_claim_host(card-\u003efunc);\n2264:\t\tret = sdio_enable_func(card-\u003efunc);\n2265:\t\n2266:\t\tif (ret)\n2267:\t\t\tnxpwifi_dbg(adapter, ERROR, \"sdio_enable_func failed: %d\\n\", ret);\n2268:\t\n2269:\t\tret = sdio_set_block_size(card-\u003efunc, NXPWIFI_SDIO_BLOCK_SIZE);\n2270:\t\n2271:\t\tif (ret)\n2272:\t\t\tnxpwifi_dbg(adapter, ERROR, \"sdio_set_block_size failed: %d\\n\",\tret);\n2273:\t\n2274:\t\tsdio_release_host(card-\u003efunc);\n2275:\t\n2276:\t\t/*\n2277:\t\t * tx_buf_size might be changed to 3584 by firmware during\n2278:\t\t * data transfer, we will reset to default size.\n2279:\t\t */\n2280:\t\tadapter-\u003etx_buf_size = card-\u003etx_buf_size;\n2281:\t\n2282:\t\t/*\n2283:\t\t * Read the host_int_status_reg for ACK the first interrupt got\n2284:\t\t * from the bootloader. If we don't do this we get a interrupt\n2285:\t\t * as soon as we register the irq.\n2286:\t\t */\n2287:\t\tnxpwifi_read_reg(adapter, card-\u003ereg-\u003ehost_int_status_reg, \u0026sdio_ireg);\n2288:\t\n2289:\t\tif (nxpwifi_init_sdio_ioport(adapter))\n2290:\t\t\tnxpwifi_dbg(adapter, ERROR, \"error enabling SDIO port\\n\");\n2291:\t}\n2292:\t\n2293:\tstatic struct nxpwifi_if_ops sdio_ops = {\n2294:\t\t.init_if = nxpwifi_init_sdio,\n2295:\t\t.cleanup_if = nxpwifi_cleanup_sdio,\n2296:\t\t.check_fw_status = nxpwifi_check_fw_status,\n2297:\t\t.check_winner_status = nxpwifi_check_winner_status,\n2298:\t\t.prog_fw = nxpwifi_prog_fw_w_helper,\n2299:\t\t.register_dev = nxpwifi_register_dev,\n"
} |
| 27/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 25400 output: 47 thoughts: 13 Thoughts: Okay, here's my interpretation of that thought process, tailored for an expert audience, and written in the first person: **Diving Back into `sdio.c`** Alright, time to get back into the weeds. My immediate thought is, "Let's read the *rest* of `sdio.c`." I've likely been working on this for a while, perhaps debugging a particular SDIO issue, or maybe I'm reviewing the implementation. This indicates that I've already tackled some portion of the code. The fact that I'm specifically thinking about *the rest* suggests a methodical, iterative approach to understanding a complex system. I'm not attempting a cursory glance; I'm committing to a deep dive. I probably have a specific objective in mind, perhaps pinpointing a potential bug, understanding the data flow, or tracing a command's execution path. This 'rest' is likely critical to solving the problem or gaining the understanding I seek. There is a specific part or section that is of interest, and I am intending to learn or look at it now. |
| 28/2 | 2026/07/30 19:36 | tool | read-file |
0mArgs:{
"File": "drivers/net/wireless/nxp/nxpwifi/sdio.c",
"FirstLine": 2300,
"LineCount": 100
}Results: {
"Contents": "2300:\t\t.unregister_dev = nxpwifi_unregister_dev,\n2301:\t\t.enable_int = nxpwifi_sdio_enable_host_int,\n2302:\t\t.disable_int = nxpwifi_sdio_disable_host_int,\n2303:\t\t.process_int_status = nxpwifi_process_int_status,\n2304:\t\t.host_to_card = nxpwifi_sdio_host_to_card,\n2305:\t\t.wakeup = nxpwifi_pm_wakeup_card,\n2306:\t\t.wakeup_complete = nxpwifi_pm_wakeup_card_complete,\n2307:\t\n2308:\t\t/* SDIO specific */\n2309:\t\t.update_mp_end_port = nxpwifi_update_mp_end_port,\n2310:\t\t.cleanup_mpa_buf = nxpwifi_cleanup_mpa_buf,\n2311:\t\t.cmdrsp_complete = nxpwifi_sdio_cmdrsp_complete,\n2312:\t\t.event_complete = nxpwifi_sdio_event_complete,\n2313:\t\t.dnld_fw = nxpwifi_sdio_dnld_fw,\n2314:\t\t.card_reset = nxpwifi_sdio_card_reset,\n2315:\t\t.reg_dump = nxpwifi_sdio_reg_dump,\n2316:\t\t.device_dump = nxpwifi_sdio_device_dump,\n2317:\t\t.deaggr_pkt = nxpwifi_deaggr_sdio_pkt,\n2318:\t\t.up_dev = nxpwifi_sdio_up_dev,\n2319:\t};\n2320:\t\n2321:\tmodule_sdio_driver(nxpwifi_sdio);\n2322:\t\n2323:\tMODULE_AUTHOR(\"NXP International Ltd.\");\n2324:\tMODULE_DESCRIPTION(\"NXP WiFi SDIO Driver version \" SDIO_VERSION);\n2325:\tMODULE_VERSION(SDIO_VERSION);\n2326:\tMODULE_LICENSE(\"GPL\");\n2327:\tMODULE_FIRMWARE(IW61X_SDIO_FW_NAME);\n"
} |
| 29/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 26271 output: 38 thoughts: 131 Thoughts: **Investigating the NXP WiFi SDIO Driver in a QEMU Context** Okay, so the code references `module_sdio_driver(nxpwifi_sdio)`, right? So, this is clearly an SDIO driver for the NXP WiFi device. My first thought is: "Hmm, QEMU doesn't generally model SDIO devices directly, which is a bit of a challenge." Perhaps there's some cleverness going on, some way to reach it through something like `mac80211_hwsim`? But then again, no, that's just a virtual driver. It doesn't use the underlying SDIO bus. Alright, let's step back. Maybe this particular NXP WiFi device has PCIe or USB variants? It's not uncommon to share some core code and implement different transport layers. Time to check for other driver registrations within that directory: `drivers/net/wireless/nxp/nxpwifi/`. I'll scan those files for any clues about alternative interfaces. |
| 30/2 | 2026/07/30 19:36 | tool | grepper |
0mArgs:{
"Expression": "module_.*_driver",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"Output": "drivers/net/wireless/nxp/nxpwifi/sdio.c=2293=static struct nxpwifi_if_ops sdio_ops = {\n--\ndrivers/net/wireless/nxp/nxpwifi/sdio.c-2320-\ndrivers/net/wireless/nxp/nxpwifi/sdio.c:2321:module_sdio_driver(nxpwifi_sdio);\ndrivers/net/wireless/nxp/nxpwifi/sdio.c-2322-\n"
} |
| 31/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 26798 output: 35 thoughts: 46 Thoughts: Okay, here's my interpretation of that thought process, assuming I'm already pretty familiar with embedded systems and Linux kernel development: **Initial Assessment and Query Generation** Alright, so `nxpwifi` is an SDIO driver. My initial reaction is, "Right, SDIO. That makes sense for a Wi-Fi implementation." But then, the gears start turning. I immediately start questioning the implicit assumption, thinking, "Hold on, is SDIO *the only* bus likely to be associated with that driver?" It's worth validating. I need to make sure I haven't missed any obvious possibilities, as there may be other bus systems that are possible. So, the next logical step is to quickly check the kernel source code. I'll search the `drivers/net/wireless/nxp/nxpwifi/` directory for any occurrences of `module_`. This should highlight if the driver interacts with the kernel's module infrastructure, and also indicate which bus systems are likely to be related to it. This approach should quickly reveal any other bus dependencies or interesting architectural details. It's a quick and dirty way to get a broader picture of the driver's environment and any potential areas of concern. |
| 32/2 | 2026/07/30 19:36 | tool | grepper |
0mArgs:{
"Expression": "module_",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"Output": "drivers/net/wireless/nxp/nxpwifi/main.c=1660=nxpwifi_cleanup_module(void)\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c-1666-\ndrivers/net/wireless/nxp/nxpwifi/main.c:1667:module_init(nxpwifi_init_module);\ndrivers/net/wireless/nxp/nxpwifi/main.c:1668:module_exit(nxpwifi_cleanup_module);\ndrivers/net/wireless/nxp/nxpwifi/main.c-1669-\n--\ndrivers/net/wireless/nxp/nxpwifi/sdio.c=2293=static struct nxpwifi_if_ops sdio_ops = {\n--\ndrivers/net/wireless/nxp/nxpwifi/sdio.c-2320-\ndrivers/net/wireless/nxp/nxpwifi/sdio.c:2321:module_sdio_driver(nxpwifi_sdio);\ndrivers/net/wireless/nxp/nxpwifi/sdio.c-2322-\n"
} |
| 33/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 27426 output: 40 thoughts: 117 Thoughts: **Module Initialization Conflict** Okay, so I'm looking at this code and something's not quite right. I see `main.c` using `module_init` and `module_exit`, and then over in `sdio.c`, there's `module_sdio_driver`. Ah, wait a second... `module_sdio_driver` is likely a macro that's *also* expanding to `module_init` and `module_exit`. That's the key. If both of these source files are being compiled into the *same* kernel module, which seems likely given their location, then we've got a problem. The kernel won't allow two different initialization and exit functions within a single module. This is a classic conflict, I've seen it a hundred times. Time to check the `Makefile` in `drivers/net/wireless/nxp/nxpwifi/` to figure out the build process and see how these files are being handled. That's where the answer will be, I'm sure of it. |
| 34/2 | 2026/07/30 19:36 | tool | read-file |
0mArgs:{
"File": "drivers/net/wireless/nxp/nxpwifi/Makefile",
"FirstLine": 1,
"LineCount": 20
}Results: {
"Contents": " 1:\t# SPDX-License-Identifier: GPL-2.0-only\n 2:\t#\n 3:\t# Copyright 2011-2020 NXP\n 4:\t#\n 5:\t\n 6:\t\n 7:\tnxpwifi-y += main.o\n 8:\tnxpwifi-y += init.o\n 9:\tnxpwifi-y += cfp.o\n 10:\tnxpwifi-y += cmdevt.o\n 11:\tnxpwifi-y += util.o\n 12:\tnxpwifi-y += txrx.o\n 13:\tnxpwifi-y += wmm.o\n 14:\tnxpwifi-y += 11n.o\n 15:\tnxpwifi-y += 11ac.o\n 16:\tnxpwifi-y += 11ax.o\n 17:\tnxpwifi-y += 11n_aggr.o\n 18:\tnxpwifi-y += 11n_rxreorder.o\n 19:\tnxpwifi-y += scan.o\n 20:\tnxpwifi-y += join.o\n"
} |
| 35/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 28116 output: 41 thoughts: 10 Thoughts: Okay, here's my attempt at summarizing the thought process, tailored for an expert user and presented in the first person: **Analyzing the Makefile** Alright, time to dig into the rest of this Makefile. I've seen the basics, the structure, the dependencies... now, let's see what interesting techniques or optimizations are employed. I'm looking for things that might be novel, or perhaps patterns that I've seen before but are implemented in a unique way here. Are there any clever uses of shell expansions, variable substitution, or perhaps some particularly elegant use of GNU Make's features? I'm hoping to spot some tricks that I can file away for future projects. I want to see if the author's following any established best practices or if they're taking a more unconventional route. Let's see if this Makefile is just functional or if it's also well-crafted and readable. I'll be scrutinizing the dependency graphs, target definitions, and any custom functions or macros that have been defined. It's time to see how this thing *really* works. |
| 36/2 | 2026/07/30 19:36 | tool | read-file |
0mArgs:{
"File": "drivers/net/wireless/nxp/nxpwifi/Makefile",
"FirstLine": 21,
"LineCount": 20
}Results: {
"Contents": " 21:\tnxpwifi-y += sta_cfg.o\n 22:\tnxpwifi-y += sta_cmd.o\n 23:\tnxpwifi-y += uap_cmd.o\n 24:\tnxpwifi-y += ie.o\n 25:\tnxpwifi-y += sta_event.o\n 26:\tnxpwifi-y += uap_event.o\n 27:\tnxpwifi-y += sta_tx.o\n 28:\tnxpwifi-y += sta_rx.o\n 29:\tnxpwifi-y += uap_txrx.o\n 30:\tnxpwifi-y += cfg80211.o\n 31:\tnxpwifi-y += ethtool.o\n 32:\tnxpwifi-y += 11h.o\n 33:\tnxpwifi-$(CONFIG_DEBUG_FS) += debugfs.o\n 34:\tobj-$(CONFIG_NXPWIFI) += nxpwifi.o\n 35:\t\n 36:\tnxpwifi_sdio-y += sdio.o\n 37:\tobj-$(CONFIG_NXPWIFI_SDIO) += nxpwifi_sdio.o\n 38:\t\n 39:\tccflags-y += -D__CHECK_ENDIAN\n"
} |
| 37/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 28737 output: 41 thoughts: 38 Thoughts: Okay, here's my take on those thoughts, framed from my expert perspective: **Diving into the Wi-Fi Modules** Right, so I see `nxpwifi` and `nxpwifi_sdio` listed as distinct modules. My immediate thought is, "Okay, that's not unexpected, but I need to understand the nuances here." It makes me wonder if there are more related modules that I should be aware of. I'm trying to mentally map out the whole dependency tree. I need to make sure I haven't missed a critical piece. My next step is clear: I need to scrutinize the `Kconfig` files. That's where the real detail lives, where all the build-time configuration options are laid out. That's where I can get a true, authoritative view of *everything* that's related to Wi-Fi in this system. |
| 38/2 | 2026/07/30 19:36 | tool | read-file |
0mArgs:{
"File": "drivers/net/wireless/nxp/nxpwifi/Kconfig",
"FirstLine": 1,
"LineCount": 20
}Results: {
"Contents": " 1:\t# SPDX-License-Identifier: GPL-2.0-only\n 2:\tconfig NXPWIFI\n 3:\t\ttristate \"NXP WiFi Driver\"\n 4:\t\tdepends on CFG80211\n 5:\t\thelp\n 6:\t\t This adds support for wireless adapters based on NXP\n 7:\t\t 802.11n/ac chipsets.\n 8:\t\n 9:\t\t If you choose to build it as a module, it will be called\n 10:\t\t nxpwifi.\n 11:\t\n 12:\tconfig NXPWIFI_SDIO\n 13:\t\ttristate \"NXP WiFi Driver for IW61x\"\n 14:\t\tdepends on NXPWIFI \u0026\u0026 MMC\n 15:\t\tselect FW_LOADER\n 16:\t\tselect WANT_DEV_COREDUMP\n 17:\t\thelp\n 18:\t\t This adds support for wireless adapters based on NXP\n 19:\t\t IW61x interface.\n 20:\t\n"
} |
| 39/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 29270 output: 32 thoughts: 56 Thoughts: Okay, here's my take on those thoughts, framed as my own: **Investigating the `nxpwifi` Module** Alright, let's see, so `nxpwifi` is the main WiFi module, and `nxpwifi_sdio` handles the SDIO interface. My immediate question is, beyond SDIO, are there any *other* drivers leveraging this `nxpwifi` core? I need to get a complete picture of its usage in this kernel. Let's fire up a search across the entire kernel source tree and look specifically for the string "nxpwifi". That should give me a good overview of the dependent drivers, and what other interfaces, if any, are used with this module. |
| 40/2 | 2026/07/30 19:36 | tool | grepper |
0mArgs:{
"Expression": "NXPWIFI",
"PathPrefix": "drivers/net/wireless/nxp/"
}Results: {
"Output": "\nFull output is too long, showing 500 out of 4292 lines.\nUse more precise expression if possible.\n\ndrivers/net/wireless/nxp/Makefile-2-\ndrivers/net/wireless/nxp/Makefile:3:obj-$(CONFIG_NXPWIFI)\t+= nxpwifi/\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c=265=void nxpwifi_set_11ac_ba_params(struct nxpwifi_private *priv)\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-266-{\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:267:\tpriv-\u003eadd_ba_param.timeout = NXPWIFI_DEFAULT_BLOCK_ACK_TIMEOUT;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-268-\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:269:\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_UAP) {\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-270-\t\tpriv-\u003eadd_ba_param.tx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:271:\t\t\tNXPWIFI_11AC_UAP_AMPDU_DEF_TXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-272-\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:273:\t\t\tNXPWIFI_11AC_UAP_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-274-\t} else {\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-275-\t\tpriv-\u003eadd_ba_param.tx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:276:\t\t\tNXPWIFI_11AC_STA_AMPDU_DEF_TXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-277-\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:278:\t\t\tNXPWIFI_11AC_STA_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-279-\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-7-\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:8:#ifndef _NXPWIFI_11AC_H_\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:9:#define _NXPWIFI_11AC_H_\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-10-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.h=31=void nxpwifi_fill_vht_cap_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-32-\t\t\t struct ieee80211_vht_cap *vht_cap, u16 bands);\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:33:#endif /* _NXPWIFI_11AC_H_ */\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c=11=void nxpwifi_update_11ax_cap(struct nxpwifi_adapter *adapter,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-67-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:68:\t\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_STA)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-69-\t\t\tuser_he_cap-\u003ehe_mac_cap[0] \u0026=\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c=251=int nxpwifi_cmd_11ax_cmd(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-274-\tswitch (ax_cmd-\u003esub_command) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:275:\tcase NXPWIFI_11AXCMD_SR_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-276-\t\tsr_cmd = (struct nxpwifi_11ax_sr_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-284-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:285:\tcase NXPWIFI_11AXCMD_BEAM_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-286-\t\tbeam_cmd = (struct nxpwifi_11ax_beam_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-290-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:291:\tcase NXPWIFI_11AXCMD_HTC_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-292-\t\thtc_cmd = (struct nxpwifi_11ax_htc_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-296-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:297:\tcase NXPWIFI_11AXCMD_TXOMI_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-298-\t\ttxmoi_cmd =\t(struct nxpwifi_11ax_txomi_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-302-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:303:\tcase NXPWIFI_11AXCMD_OBSS_TOLTIME_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-304-\t\ttoltime_cmd = (struct nxpwifi_11ax_toltime_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-309-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:310:\tcase NXPWIFI_11AXCMD_TXOPRTS_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-311-\t\ttxop_cmd = (struct nxpwifi_11ax_txop_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-316-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:317:\tcase NXPWIFI_11AXCMD_SET_BSRP_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-318-\t\tset_bsrp_cmd = (struct nxpwifi_11ax_set_bsrp_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-322-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:323:\tcase NXPWIFI_11AXCMD_LLDE_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-324-\t\tllde_cmd = (struct nxpwifi_11ax_llde_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c=341=int nxpwifi_ret_11ax_cmd(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-351-\tswitch (ax_cmd-\u003esub_command) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:352:\tcase NXPWIFI_11AXCMD_SR_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-353-\t\ttlv = (struct nxpwifi_ie_types_data *)he_cmd-\u003eval;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-357-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:358:\tcase NXPWIFI_11AXCMD_BEAM_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-359-\t\tax_cmd-\u003eparam.beam_cfg.value = *he_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-360-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:361:\tcase NXPWIFI_11AXCMD_HTC_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-362-\t\tax_cmd-\u003eparam.htc_cfg.value = *he_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-363-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:364:\tcase NXPWIFI_11AXCMD_TXOMI_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-365-\t\tmemcpy(\u0026ax_cmd-\u003eparam.txomi_cfg,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-367-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:368:\tcase NXPWIFI_11AXCMD_OBSS_TOLTIME_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-369-\t\tmemcpy(\u0026ax_cmd-\u003eparam.toltime_cfg.tol_time,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-371-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:372:\tcase NXPWIFI_11AXCMD_TXOPRTS_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-373-\t\tmemcpy(\u0026ax_cmd-\u003eparam.txop_cfg.rts_thres,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-375-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:376:\tcase NXPWIFI_11AXCMD_SET_BSRP_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-377-\t\tax_cmd-\u003eparam.setbsrp_cfg.value = *he_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-378-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:379:\tcase NXPWIFI_11AXCMD_LLDE_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-380-\t\tmemcpy(\u0026ax_cmd-\u003eparam.llde_cfg,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c=466=int nxpwifi_cmd_twt_cfg(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-486-\tswitch (twt_cfg-\u003esub_id) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:487:\tcase NXPWIFI_11AX_TWT_SETUP_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-488-\t\ttwt_setup = (struct nxpwifi_twt_setup *)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-506-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:507:\tcase NXPWIFI_11AX_TWT_TEARDOWN_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-508-\t\ttwt_teardown = (struct nxpwifi_twt_teardown *)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-519-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:520:\tcase NXPWIFI_11AX_TWT_REPORT_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-521-\t\ttwt_report = (struct nxpwifi_twt_report *)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-526-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:527:\tcase NXPWIFI_11AX_TWT_INFORMATION_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-528-\t\ttwt_information = (struct nxpwifi_twt_information *)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-537-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:538:\tcase NXPWIFI_11AX_BTWT_AP_CONFIG_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-539-\t\tbtwt_ap_config = (struct nxpwifi_btwt_ap_config *)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c=575=int nxpwifi_ret_twt_cfg(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-585-\tif (action == HOST_ACT_GEN_GET \u0026\u0026\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:586:\t twt_cfg-\u003esub_id == NXPWIFI_11AX_TWT_REPORT_SUBID) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-587-\t\tstruct nxpwifi_twt_report *twt_report =\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-7-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:8:#ifndef _NXPWIFI_11AX_H_\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:9:#define _NXPWIFI_11AX_H_\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-10-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.h=71=u8 nxpwifi_is_sta_11ax_twt_req_supported(struct nxpwifi_private *priv);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-72-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:73:#endif /* _NXPWIFI_11AX_H_ */\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c=72=int nxpwifi_11h_activate(struct nxpwifi_private *priv, bool flag)\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c-76-\t/* enable master mode radar detection on AP interface */\ndrivers/net/wireless/nxp/nxpwifi/11h.c:77:\tif ((GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_UAP) \u0026\u0026 enable)\ndrivers/net/wireless/nxp/nxpwifi/11h.c:78:\t\tenable |= NXPWIFI_MASTER_RADAR_DET_MASK;\ndrivers/net/wireless/nxp/nxpwifi/11h.c-79-\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c=130=int nxpwifi_cmd_issue_chan_report_request(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c-140-\ndrivers/net/wireless/nxp/nxpwifi/11h.c:141:\tcr_req-\u003echan_desc.start_freq = cpu_to_le16(NXPWIFI_A_BAND_START_FREQ);\ndrivers/net/wireless/nxp/nxpwifi/11h.c-142-\tnxpwifi_convert_chan_to_band_cfg(priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c=25=int nxpwifi_fill_cap_info(struct nxpwifi_private *priv, u8 radio_type,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c-69-\tif (ISSUPP_BEAMFORMING(priv-\u003eadapter-\u003ehw_dot_11n_dev_cap))\ndrivers/net/wireless/nxp/nxpwifi/11n.c:70:\t\tht_cap-\u003etx_BF_cap_info = cpu_to_le32(NXPWIFI_DEF_11N_TX_BF_CAP);\ndrivers/net/wireless/nxp/nxpwifi/11n.c-71-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c=633=int nxpwifi_get_rx_reorder_tbl(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c-658-\ndrivers/net/wireless/nxp/nxpwifi/11n.c:659:\t\t\tif (count \u003e= NXPWIFI_MAX_RX_BASTREAM_SUPPORTED)\ndrivers/net/wireless/nxp/nxpwifi/11n.c-660-\t\t\t\treturn count;\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c=668=int nxpwifi_get_tx_ba_stream_tbl(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c-685-\t\t\tcount++;\ndrivers/net/wireless/nxp/nxpwifi/11n.c:686:\t\t\tif (count \u003e= NXPWIFI_MAX_TX_BASTREAM_SUPPORTED)\ndrivers/net/wireless/nxp/nxpwifi/11n.c-687-\t\t\t\treturn count;\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c=714=void nxpwifi_set_ba_params(struct nxpwifi_private *priv)\ndrivers/net/wireless/nxp/nxpwifi/11n.c-715-{\ndrivers/net/wireless/nxp/nxpwifi/11n.c:716:\tpriv-\u003eadd_ba_param.timeout = NXPWIFI_DEFAULT_BLOCK_ACK_TIMEOUT;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-717-\ndrivers/net/wireless/nxp/nxpwifi/11n.c:718:\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_UAP) {\ndrivers/net/wireless/nxp/nxpwifi/11n.c-719-\t\tpriv-\u003eadd_ba_param.tx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n.c:720:\t\t\tNXPWIFI_UAP_AMPDU_DEF_TXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-721-\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n.c:722:\t\t\tNXPWIFI_UAP_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-723-\t} else {\ndrivers/net/wireless/nxp/nxpwifi/11n.c-724-\t\tpriv-\u003eadd_ba_param.tx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n.c:725:\t\t\tNXPWIFI_STA_AMPDU_DEF_TXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-726-\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n.c:727:\t\t\tNXPWIFI_STA_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-728-\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c=806=void nxpwifi_update_ampdu_txwinsize(struct nxpwifi_adapter *adapter)\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c-815-\ndrivers/net/wireless/nxp/nxpwifi/11n.c:816:\t\tif (priv-\u003ebss_type == NXPWIFI_BSS_TYPE_STA)\ndrivers/net/wireless/nxp/nxpwifi/11n.c-817-\t\t\tpriv-\u003eadd_ba_param.tx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n.c:818:\t\t\t\tNXPWIFI_STA_AMPDU_DEF_TXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-819-\ndrivers/net/wireless/nxp/nxpwifi/11n.c:820:\t\tif (priv-\u003ebss_type == NXPWIFI_BSS_TYPE_UAP)\ndrivers/net/wireless/nxp/nxpwifi/11n.c-821-\t\t\tpriv-\u003eadd_ba_param.tx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n.c:822:\t\t\t\tNXPWIFI_UAP_AMPDU_DEF_TXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-823-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h-7-\ndrivers/net/wireless/nxp/nxpwifi/11n.h:8:#ifndef _NXPWIFI_11N_H_\ndrivers/net/wireless/nxp/nxpwifi/11n.h:9:#define _NXPWIFI_11N_H_\ndrivers/net/wireless/nxp/nxpwifi/11n.h-10-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h=73=nxpwifi_is_ampdu_allowed(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h-78-\ndrivers/net/wireless/nxp/nxpwifi/11n.h:79:\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_UAP)\ndrivers/net/wireless/nxp/nxpwifi/11n.h-80-\t\treturn nxpwifi_is_station_ampdu_allowed(priv, ptr, tid);\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h=97=nxpwifi_space_avail_for_new_ba_stream(struct nxpwifi_adapter *adapter)\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h-101-\tsize_t ba_stream_num = 0;\ndrivers/net/wireless/nxp/nxpwifi/11n.h:102:\tsize_t ba_stream_max = NXPWIFI_MAX_TX_BASTREAM_SUPPORTED;\ndrivers/net/wireless/nxp/nxpwifi/11n.h-103-\ndrivers/net/wireless/nxp/nxpwifi/11n.h:104:\tif (adapter-\u003efw_api_ver == NXPWIFI_FW_V15) {\ndrivers/net/wireless/nxp/nxpwifi/11n.h-105-\t\tba_stream_max = GETSUPP_TXBASTREAMS(adapter-\u003ehw_dot_11n_dev_cap);\ndrivers/net/wireless/nxp/nxpwifi/11n.h-106-\t\tif (!ba_stream_max)\ndrivers/net/wireless/nxp/nxpwifi/11n.h:107:\t\t\tba_stream_max = NXPWIFI_MAX_TX_BASTREAM_SUPPORTED;\ndrivers/net/wireless/nxp/nxpwifi/11n.h-108-\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h=148=static inline int nxpwifi_is_sta_11n_enabled(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h-150-{\ndrivers/net/wireless/nxp/nxpwifi/11n.h:151:\tif (!node || (priv-\u003ebss_role == NXPWIFI_BSS_ROLE_UAP \u0026\u0026\ndrivers/net/wireless/nxp/nxpwifi/11n.h-152-\t\t !priv-\u003eap_11n_enabled))\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h-157-\ndrivers/net/wireless/nxp/nxpwifi/11n.h:158:#endif /* !_NXPWIFI_11N_H_ */\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c=68=nxpwifi_11n_form_amsdu_txpd(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-93-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:94:\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_STA \u0026\u0026\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-95-\t priv-\u003eadapter-\u003epps_uapsd_mode) {\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-98-\t\t\tlocal_tx_pd-\u003eflags =\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:99:\t\t\t\tNXPWIFI_TxPD_POWER_MGMT_LAST_PACKET;\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-100-\t\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c=110=nxpwifi_11n_aggregate_pkt(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-128-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:129:\ttx_info_src = NXPWIFI_SKB_TXCB(skb_src);\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-130-\tskb_aggr = nxpwifi_alloc_dma_align_buf(adapter-\u003etx_buf_size,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-141-\tskb_reserve(skb_aggr, headroom + sizeof(struct txpd));\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:142:\ttx_info_aggr = NXPWIFI_SKB_TXCB(skb_aggr);\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-143-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-147-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:148:\ttx_info_aggr-\u003eflags |= NXPWIFI_BUF_FLAG_AGGR_PKT;\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-149-\tskb_aggr-\u003epriority = skb_src-\u003epriority;\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-190-\tnxpwifi_11n_form_amsdu_txpd(priv, skb_aggr);\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:191:\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_STA)\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-192-\t\tptx_pd = (struct txpd *)skb_aggr-\u003edata;\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-206-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:207:\tret = adapter-\u003eif_ops.host_to_card(adapter, NXPWIFI_TYPE_DATA,\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-208-\t\t\t\t\t skb_aggr, \u0026tx_param);\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-217-\t\t}\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:218:\t\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_STA \u0026\u0026\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-219-\t\t adapter-\u003epps_uapsd_mode \u0026\u0026 adapter-\u003etx_lock_flag) {\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-230-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:231:\t\ttx_info_aggr-\u003eflags |= NXPWIFI_BUF_FLAG_REQUEUED_PKT;\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-232-\t\tspin_unlock_bh(\u0026priv-\u003ewmm.ra_list_spinlock);\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h-7-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h:8:#ifndef _NXPWIFI_11N_AGGR_H_\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h:9:#define _NXPWIFI_11N_AGGR_H_\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h-10-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h=16=int nxpwifi_11n_aggregate_pkt(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h-20-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h:21:#endif /* !_NXPWIFI_11N_AGGR_H_ */\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c=17=static int nxpwifi_11n_dispatch_amsdu_pkt(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-37-\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:38:\t\t\tif (priv-\u003ebss_role == NXPWIFI_BSS_ROLE_UAP)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-39-\t\t\t\tret = nxpwifi_uap_recv_packet(priv, rx_skb);\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c=53=static int nxpwifi_11n_dispatch_pkt(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-66-\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:67:\tif (priv-\u003ebss_role == NXPWIFI_BSS_ROLE_UAP)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-68-\t\treturn nxpwifi_handle_uap_rx_forward(priv, payload);\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c=262=nxpwifi_11n_create_rx_reorder_tbl(struct nxpwifi_private *priv, u8 *ta,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-288-\tif (nxpwifi_queuing_ra_based(priv)) {\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:289:\t\tif (priv-\u003ebss_role == NXPWIFI_BSS_ROLE_UAP) {\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-290-\t\t\tguard(rcu)();\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-307-\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:308:\tif (last_seq != NXPWIFI_DEF_11N_RX_SEQ_NUM \u0026\u0026\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-309-\t last_seq \u003e= new_node-\u003estart_win) {\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c=340=nxpwifi_11n_rxreorder_timer_restart(struct nxpwifi_rx_reorder_tbl *tbl)\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-343-\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:344:\tif (tbl-\u003ewin_size \u003e= NXPWIFI_BA_WIN_SIZE_32)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-345-\t\tmin_flush_time = MIN_FLUSH_TIMER_15_MS;\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c=677=static void nxpwifi_update_ampdu_rxwinsize(struct nxpwifi_adapter *adapter,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-689-\t\tif (coex_flag) {\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:690:\t\t\tif (priv-\u003ebss_type == NXPWIFI_BSS_TYPE_STA)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-691-\t\t\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:692:\t\t\t\t\tNXPWIFI_STA_COEX_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:693:\t\t\tif (priv-\u003ebss_type == NXPWIFI_BSS_TYPE_UAP)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-694-\t\t\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:695:\t\t\t\t\tNXPWIFI_UAP_COEX_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-696-\t\t} else {\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:697:\t\t\tif (priv-\u003ebss_type == NXPWIFI_BSS_TYPE_STA)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-698-\t\t\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:699:\t\t\t\t\tNXPWIFI_STA_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:700:\t\t\tif (priv-\u003ebss_type == NXPWIFI_BSS_TYPE_UAP)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-701-\t\t\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:702:\t\t\t\t\tNXPWIFI_UAP_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-703-\t\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c=719=void nxpwifi_coex_ampdu_rxwinsize(struct nxpwifi_adapter *adapter)\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-726-\t\tpriv = adapter-\u003epriv[i];\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:727:\t\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_STA) {\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-728-\t\t\tif (priv-\u003emedia_connected)\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-730-\t\t}\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:731:\t\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_UAP) {\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-732-\t\t\tif (priv-\u003ebss_started)\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-734-\t\t}\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:735:\t\tif (count \u003e= NXPWIFI_BSS_COEX_COUNT)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-736-\t\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-737-\t}\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:738:\tif (count \u003e= NXPWIFI_BSS_COEX_COUNT)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-739-\t\tnxpwifi_update_ampdu_rxwinsize(adapter, true);\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-7-\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h:8:#ifndef _NXPWIFI_11N_RXREORDER_H_\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h:9:#define _NXPWIFI_11N_RXREORDER_H_\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-10-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-12-#define MIN_FLUSH_TIMER_15_MS\t\t15\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h:13:#define NXPWIFI_BA_WIN_SIZE_32\t\t32\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-14-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-28-\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h:29:#define NXPWIFI_DEF_11N_RX_SEQ_NUM\t0xffff\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-30-#define BA_SETUP_MAX_PACKET_THRESHOLD\t16\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h=69=void nxpwifi_11n_rxba_sync_event(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-70-\t\t\t\t u8 *event_buf, u16 len);\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h:71:#endif /* _NXPWIFI_11N_RXREORDER_H_ */\n--\ndrivers/net/wireless/nxp/nxpwifi/Kconfig-1-# SPDX-License-Identifier: GPL-2.0-only\ndrivers/net/wireless/nxp/nxpwifi/Kconfig:2:config NXPWIFI\ndrivers/net/wireless/nxp/nxpwifi/Kconfig-3-\ttristate \"NXP WiFi Driver\"\n--\ndrivers/net/wireless/nxp/nxpwifi/Kconfig-11-\ndrivers/net/wireless/nxp/nxpwifi/Kconfig:12:config NXPWIFI_SDIO\ndrivers/net/wireless/nxp/nxpwifi/Kconfig-13-\ttristate \"NXP WiFi Driver for IW61x\"\ndrivers/net/wireless/nxp/nxpwifi/Kconfig:14:\tdepends on NXPWIFI \u0026\u0026 MMC\ndrivers/net/wireless/nxp/nxpwifi/Kconfig-15-\tselect FW_LOADER\n--\ndrivers/net/wireless/nxp/nxpwifi/Makefile=33=nxpwifi-$(CONFIG_DEBUG_FS) += debugfs.o\ndrivers/net/wireless/nxp/nxpwifi/Makefile:34:obj-$(CONFIG_NXPWIFI) += nxpwifi.o\ndrivers/net/wireless/nxp/nxpwifi/Makefile-35-\ndrivers/net/wireless/nxp/nxpwifi/Makefile=36=nxpwifi_sdio-y += sdio.o\ndrivers/net/wireless/nxp/nxpwifi/Makefile:37:obj-$(CONFIG_NXPWIFI_SDIO) += nxpwifi_sdio.o\ndrivers/net/wireless/nxp/nxpwifi/Makefile-38-\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-7-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:8:#ifndef _NXPWIFI_CFG_H_\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:9:#define _NXPWIFI_CFG_H_\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-10-\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-18-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:19:#define NXPWIFI_BSS_COEX_COUNT\t 2\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:20:#define NXPWIFI_MAX_BSS_NUM (3)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-21-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:22:#define NXPWIFI_MAX_CSA_COUNTERS 5\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-23-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:24:#define NXPWIFI_DMA_ALIGN_SZ\t 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:25:#define NXPWIFI_RX_HEADROOM\t 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-26-#define MAX_TXPD_SZ\t\t 32\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-28-/* special FW 4 address management header */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:29:#define NXPWIFI_MIN_DATA_HEADER_LEN (NXPWIFI_DMA_ALIGN_SZ + INTF_HDR_ALIGN + \\\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-30-\t\t\t\t MAX_TXPD_SZ)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-31-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:32:#define NXPWIFI_MGMT_FRAME_HEADER_SIZE\t8\t/* sizeof(pkt_type)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-33-\t\t\t\t\t\t * + sizeof(tx_control)\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-38-#define SEQCTL_LEN 2\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:39:#define NXPWIFI_MGMT_HEADER_LEN (FRMCTL_LEN + FRMCTL_LEN + ETH_ALEN + \\\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-40-\t\t\t\t ETH_ALEN + ETH_ALEN + SEQCTL_LEN + ETH_ALEN)\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-44-#define AUTH_STATUS_LEN 2\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:45:#define NXPWIFI_AUTH_BODY_LEN (AUTH_ALG_LEN + AUTH_TRANSACTION_LEN + \\\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-46-\t\t\t\t AUTH_STATUS_LEN)\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-58-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:59:#define NXPWIFI_MAX_TX_BASTREAM_SUPPORTED\t2\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:60:#define NXPWIFI_MAX_RX_BASTREAM_SUPPORTED\t16\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-61-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:62:#define NXPWIFI_STA_AMPDU_DEF_TXWINSIZE 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:63:#define NXPWIFI_STA_AMPDU_DEF_RXWINSIZE 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:64:#define NXPWIFI_STA_COEX_AMPDU_DEF_RXWINSIZE 16\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-65-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:66:#define NXPWIFI_UAP_AMPDU_DEF_TXWINSIZE 32\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-67-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:68:#define NXPWIFI_UAP_COEX_AMPDU_DEF_RXWINSIZE 16\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-69-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:70:#define NXPWIFI_UAP_AMPDU_DEF_RXWINSIZE 16\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:71:#define NXPWIFI_11AC_STA_AMPDU_DEF_TXWINSIZE 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:72:#define NXPWIFI_11AC_STA_AMPDU_DEF_RXWINSIZE 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:73:#define NXPWIFI_11AC_UAP_AMPDU_DEF_TXWINSIZE 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:74:#define NXPWIFI_11AC_UAP_AMPDU_DEF_RXWINSIZE 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-75-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:76:#define NXPWIFI_DEFAULT_BLOCK_ACK_TIMEOUT 0xffff\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-77-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:78:#define NXPWIFI_RATE_BITMAP_MCS0 32\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-79-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:80:#define NXPWIFI_RX_DATA_BUF_SIZE (4 * 1024)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:81:#define NXPWIFI_RX_CMD_BUF_SIZE\t (2 * 1024)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-82-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:83:#define NXPWIFI_BEACON_PERIOD_MAX (4000)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:84:#define NXPWIFI_BEACON_PERIOD_MIN (50)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:85:#define NXPWIFI_INVALID_BEACON_PERIOD (NXPWIFI_BEACON_PERIOD_MAX + 1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:86:#define NXPWIFI_MAX_DTIM_PERIOD (100)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:87:#define NXPWIFI_MIN_DTIM_PERIOD (1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:88:#define NXPWIFI_INVALID_DTIM_PERIOD (NXPWIFI_MAX_DTIM_PERIOD + 1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:89:#define NXPWIFI_RTS_THRESHOLD_MIN (0)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:90:#define NXPWIFI_RTS_THRESHOLD_MAX (2347)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:91:#define NXPWIFI_INVALID_RTS\t(NXPWIFI_RTS_THRESHOLD_MAX + 1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:92:#define NXPWIFI_FRAG_THRESHOLD_MIN (256)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:93:#define NXPWIFI_FRAG_THRESHOLD_MAX (2346)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:94:#define NXPWIFI_INVALID_FRAG (NXPWIFI_FRAG_THRESHOLD_MAX + 1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:95:#define NXPWIFI_RETRY_LIMIT_MAX 14\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:96:#define NXPWIFI_INVALID_RETRY_LIMI (NXPWIFI_RETRY_LIMIT_MAX + 1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-97-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h=98=enum nxpwifi_bcast_ssid_ctl {\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-99-\t/* Hide SSID in beacons (SSID length = 0) */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:100:\tNXPWIFI_BCAST_SSID_HIDE_LEN_ZERO = 0,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-101-\t/* Do not hide SSID (normal broadcast) */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:102:\tNXPWIFI_BCAST_SSID_VISIBLE,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-103-\t/* Hide SSID, clear SSID content (ASCII 0),\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-105-\t */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:106:\tNXPWIFI_BCAST_SSID_HIDE_LEN_RETAIN,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-107-};\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h=109=enum nxpwifi_radio_ctl {\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:110:\tNXPWIFI_RADIO_CTL_DISABLE = 0,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:111:\tNXPWIFI_RADIO_CTL_ENABLE,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:112:\t__NXPWIFI_RADIO_CTL_MAX,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-113-};\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h=115=static inline bool nxpwifi_radio_ctl_valid(enum nxpwifi_radio_ctl v)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-116-{\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:117:\treturn v \u003c __NXPWIFI_RADIO_CTL_MAX;\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-118-}\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-119-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:120:#define NXPWIFI_WMM_VERSION 0x01\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:121:#define NXPWIFI_WMM_SUBTYPE 0x01\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-122-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:123:#define NXPWIFI_SDIO_BLOCK_SIZE 256\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-124-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:125:#define NXPWIFI_BUF_FLAG_REQUEUED_PKT BIT(0)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:126:#define NXPWIFI_BUF_FLAG_BRIDGED_PKT\t BIT(1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:127:#define NXPWIFI_BUF_FLAG_EAPOL_TX_STATUS BIT(3)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:128:#define NXPWIFI_BUF_FLAG_ACTION_TX_STATUS BIT(4)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:129:#define NXPWIFI_BUF_FLAG_AGGR_PKT BIT(5)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-130-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:131:#define NXPWIFI_BRIDGED_PKTS_THR_HIGH 1024\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:132:#define NXPWIFI_BRIDGED_PKTS_THR_LOW 128\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-133-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-134-/* 54M rates, index from 0 to 11 */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:135:#define NXPWIFI_RATE_INDEX_MCS0 12\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-136-/* 12-27=MCS0-15(BW20) */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:137:#define NXPWIFI_BW20_MCS_NUM 15\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-138-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-139-/* Rate index for OFDM 0 */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:140:#define NXPWIFI_RATE_INDEX_OFDM0 4\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-141-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:142:#define NXPWIFI_MAX_STA_NUM\t\t3\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:143:#define NXPWIFI_MAX_UAP_NUM\t\t3\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-144-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:145:#define NXPWIFI_A_BAND_START_FREQ\t5000\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-146-\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-151-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:152:#define NXPWIFI_SIZE_4K 0x4000\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:153:#define NXPWIFI_EXT_CAPAB_IE_LEN 10\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-154-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h=155=enum nxpwifi_bss_type {\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:156:\tNXPWIFI_BSS_TYPE_STA = 0,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:157:\tNXPWIFI_BSS_TYPE_UAP = 1,\n\n"
} |
| 41/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 44771 output: 27 thoughts: 98 Thoughts: **Investigating the NXP WiFi Driver Architecture** Okay, so I'm diving into this NXP WiFi driver situation. My initial understanding is that `nxpwifi` is the foundational core, handling the shared logic. And as I expected, `nxpwifi_sdio` provides the SDIO interface implementation. The interesting bit, however, is the noticeable absence of `nxpwifi_usb` or `nxpwifi_pcie` within that specific `nxpwifi` directory. This begs the question: are these other interface implementations located elsewhere? Perhaps within the overall NXP wireless driver hierarchy? I need to quickly broaden my search. Let's step back and look at the `drivers/net/wireless/nxp/` directory as a whole. I need to see if there are other drivers within this broader NXP wireless framework that might *rely* on, or *interface* with, this `nxpwifi` core. That would provide a clearer picture of the overall architecture. I need to find the bridge to figure out where the USB and PCIe implementations reside within the driver landscape. |
| 42/2 | 2026/07/30 19:36 | tool | codesearch-dir-index |
0mArgs:{
"Dir": "drivers/net/wireless/nxp/"
}Results: {
"Files": null,
"Subdirs": [
"nxpwifi"
]
} |
| 43/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 45148 output: 42 thoughts: 609 Thoughts: **My Assessment of the `nxpwifi` Driver for Fuzzing Feasibility** Okay, so `nxpwifi` is an SDIO driver. My initial thought is, "Wait, is SDIO even emulated in QEMU?" Usually, QEMU uses `sdhci-pci` to emulate SD host controllers, but it doesn't seem to emulate specific SDIO WiFi cards like the NXP IW61x. I wonder if `mac80211_hwsim` leverages this, but no, that's a completely separate virtual driver. Now, I need to check the prompt again: "Return WorthFuzzing=false if the patch only contains... code paths that are impossible to reach in virtualized environments... or code in vendor-specific PCIe switch, SmartNIC, or GPU drivers." This makes me think, "Is `nxpwifi` a vendor-specific SDIO driver that needs physical hardware?" Yes, it's explicitly the "NXP WiFi Driver for IW61x", an SDIO device. My next question is, can Syzkaller fuzz SDIO devices? I know it has some virtual support for devices, but I can't recall anything specific for SDIO, a virtual SDHCI controller maybe? No, Syzkaller doesn't have a virtual SDIO device framework like `vhci` for USB or `mac80211_hwsim` for WiFi. It supports `mac80211_hwsim`, `vhci`, `vkms`, `vcan`, and `vnet`. But, there's no virtual SDIO device injection in the upstream kernel that Syzkaller uses. So, how *could* it be fuzzed? I need to check if Syzkaller has any `nxpwifi` fuzzing. Aha! The patch was authored by `syz-cluster <triage@syzkaller.com>`, which means Syzkaller *did* find a bug! Wait, how did Syzkaller get there? I'm going to check if `nxpwifi` is also a USB or PCIe driver. Let me search for `module_` in `nxpwifi`. I found `module_sdio_driver`. So let me confirm that `nxpwifi` doesn't have a PCI or USB interface. My previous search confirms this. |
| 44/2 | 2026/07/30 19:36 | tool | grepper |
0mError:no matches Args: {
"Expression": "(pci|usb)_register_driver",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"error": "no matches"
} |
| 45/2 | 2026/07/30 19:36 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 46315 output: 41 thoughts: 35 Thoughts: **Investigating the `nxpwifi` Driver** Okay, so I'm thinking... could `nxpwifi` be a virtual driver? It certainly warrants further investigation. The architecture seems a little unusual, so digging deeper into the specifics is the best course of action here. My next move is to check the `Kconfig` file specifically associated with `nxpwifi`, which should be located in `drivers/net/wireless/nxp/nxpwifi/Kconfig`. That file should give me some key insights into how this driver is configured, its dependencies, and what platform features it supports, if any. I'm hoping to understand its role within the broader networking stack and determine whether the term "virtual driver" applies. |
| 46/2 | 2026/07/30 19:37 | tool | read-file |
0mArgs:{
"File": "drivers/net/wireless/nxp/nxpwifi/Kconfig",
"FirstLine": 1,
"LineCount": 30
}Results: {
"Contents": " 1:\t# SPDX-License-Identifier: GPL-2.0-only\n 2:\tconfig NXPWIFI\n 3:\t\ttristate \"NXP WiFi Driver\"\n 4:\t\tdepends on CFG80211\n 5:\t\thelp\n 6:\t\t This adds support for wireless adapters based on NXP\n 7:\t\t 802.11n/ac chipsets.\n 8:\t\n 9:\t\t If you choose to build it as a module, it will be called\n 10:\t\t nxpwifi.\n 11:\t\n 12:\tconfig NXPWIFI_SDIO\n 13:\t\ttristate \"NXP WiFi Driver for IW61x\"\n 14:\t\tdepends on NXPWIFI \u0026\u0026 MMC\n 15:\t\tselect FW_LOADER\n 16:\t\tselect WANT_DEV_COREDUMP\n 17:\t\thelp\n 18:\t\t This adds support for wireless adapters based on NXP\n 19:\t\t IW61x interface.\n 20:\t\n 21:\t\t If you choose to build it as a module, it will be called\n 22:\t\t nxpwifi_sdio.\n"
} |
| 47/2 | 2026/07/30 19:37 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 46844 output: 34 thoughts: 58 Thoughts: **Investigating the `nxpwifi` Bug Discovery** Okay, hold on a second. Syzkaller flagged a bug in `nxpwifi`, which is interesting. I need to understand the path of execution that led to this. How did it manage to trigger something there? The first thing that comes to mind is the possibility of some form of device injection capability within Syzkaller itself. Does it have a virtual SDIO device injection? That's a good starting point for my investigation. Right, so to dig deeper, I need to check the code. The next step is to see if `nxpwifi` interacts with either `hwsim` or `virt` within its code. Those are the prime suspects for a synthesized interface like an emulated SDIO that syzkaller might be exploiting. A thorough search within the module would be the logical next step. |
| 48/2 | 2026/07/30 19:37 | tool | grepper |
0mArgs:{
"Expression": "virt",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"Output": "drivers/net/wireless/nxp/nxpwifi/cfg80211.c=897=static int\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c:898:nxpwifi_cfg80211_change_virtual_intf(struct wiphy *wiphy,\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c-899-\t\t\t\t struct net_device *dev,\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c-907-\t\tnxpwifi_dbg(priv-\u003eadapter, ERROR,\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c:908:\t\t\t \"change virtual interface: scan in process\\n\");\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c-909-\t\treturn -EBUSY;\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c=2280=nxpwifi_setup_he_caps(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c-2348-\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c:2349:/* create a new virtual interface with the given name and name assign type */\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c:2350:struct wireless_dev *nxpwifi_add_virtual_intf(struct wiphy *wiphy,\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c-2351-\t\t\t\t\t const char *name,\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c-2529-}\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c:2530:EXPORT_SYMBOL_GPL(nxpwifi_add_virtual_intf);\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c-2531-\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c:2532:/* del_virtual_intf: remove the virtual interface determined by dev */\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c:2533:int nxpwifi_del_virtual_intf(struct wiphy *wiphy, struct wireless_dev *wdev)\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c-2534-{\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c-2576-}\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c:2577:EXPORT_SYMBOL_GPL(nxpwifi_del_virtual_intf);\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c-2578-\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c=3632=static const struct cfg80211_ops nxpwifi_cfg80211_ops = {\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c:3633:\t.add_virtual_intf = nxpwifi_add_virtual_intf,\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c:3634:\t.del_virtual_intf = nxpwifi_del_virtual_intf,\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c:3635:\t.change_virtual_intf = nxpwifi_cfg80211_change_virtual_intf,\ndrivers/net/wireless/nxp/nxpwifi/cfg80211.c-3636-\t.scan = nxpwifi_cfg80211_scan,\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c=376=void nxpwifi_main_process(struct nxpwifi_adapter *adapter)\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c-379-\ndrivers/net/wireless/nxp/nxpwifi/main.c:380:\t/* Check if virtual interface changing */\ndrivers/net/wireless/nxp/nxpwifi/main.c-381-\tif (atomic_read(\u0026adapter-\u003eiface_changing)) {\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c=552=static int _nxpwifi_fw_dpc(const struct firmware *firmware, void *context)\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c-620-\t/* Create station interface by default */\ndrivers/net/wireless/nxp/nxpwifi/main.c:621:\twdev = nxpwifi_add_virtual_intf(adapter-\u003ewiphy, \"mlan%d\", NET_NAME_ENUM,\ndrivers/net/wireless/nxp/nxpwifi/main.c-622-\t\t\t\t\tNL80211_IFTYPE_STATION, NULL);\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c-629-\ndrivers/net/wireless/nxp/nxpwifi/main.c:630:\twdev = nxpwifi_add_virtual_intf(adapter-\u003ewiphy, \"uap%d\", NET_NAME_ENUM,\ndrivers/net/wireless/nxp/nxpwifi/main.c-631-\t\t\t\t\tNL80211_IFTYPE_AP, NULL);\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c=1324=static void nxpwifi_uninit_sw(struct nxpwifi_adapter *adapter)\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c-1376-\t\t\twiphy_lock(adapter-\u003ewiphy);\ndrivers/net/wireless/nxp/nxpwifi/main.c:1377:\t\t\tnxpwifi_del_virtual_intf(adapter-\u003ewiphy, \u0026priv-\u003ewdev);\ndrivers/net/wireless/nxp/nxpwifi/main.c-1378-\t\t\twiphy_unlock(adapter-\u003ewiphy);\n--\ndrivers/net/wireless/nxp/nxpwifi/main.h=1335=u8 nxpwifi_get_chan_type(struct nxpwifi_private *priv);\ndrivers/net/wireless/nxp/nxpwifi/main.h-1336-\ndrivers/net/wireless/nxp/nxpwifi/main.h:1337:struct wireless_dev *nxpwifi_add_virtual_intf(struct wiphy *wiphy,\ndrivers/net/wireless/nxp/nxpwifi/main.h-1338-\t\t\t\t\t const char *name,\n--\ndrivers/net/wireless/nxp/nxpwifi/main.h-1341-\t\t\t\t\t struct vif_params *params);\ndrivers/net/wireless/nxp/nxpwifi/main.h:1342:int nxpwifi_del_virtual_intf(struct wiphy *wiphy, struct wireless_dev *wdev);\ndrivers/net/wireless/nxp/nxpwifi/main.h-1343-\n--\ndrivers/net/wireless/nxp/nxpwifi/sta_cmd.c=3226=int nxpwifi_sta_prepare_cmd(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/sta_cmd.c-3263-/*\ndrivers/net/wireless/nxp/nxpwifi/sta_cmd.c:3264: * Initialize firmware after download or during virtual interface\ndrivers/net/wireless/nxp/nxpwifi/sta_cmd.c-3265- * reinitialization to bring the device to a working state.\n"
} |
| 49/2 | 2026/07/30 19:37 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 49135 output: 29 thoughts: 132 Thoughts: **Investigating the `nxpwifi` Mystery** Okay, so `nxpwifi` is definitely built on `cfg80211` and, as I understand it, creates virtual interfaces. But hold on, I was just reading about a syzkaller report that highlighted a bug in `nxpwifi_wait_queue_complete`. This is throwing me for a loop. How could syzkaller trigger a bug within `nxpwifi` if this module usually relies on a physical SDIO hardware device? Unless... Wait a minute, does syzkaller simulate an SDIO device? No, that can't be right; I'm certain syzkaller doesn't have virtual SDIO support. So then, that means maybe, just *maybe*, `nxpwifi` isn't *solely* for SDIO-based Wi-Fi. It's possible it has broader applications. I need to confirm this before going any further. The next logical step would be to search and check the other kernel drivers to see if there is any overlap in the `nxpwifi` driver. Let's see what else might be using this. |
| 50/2 | 2026/07/30 19:37 | tool | grepper |
0mArgs:{
"Expression": "NXPWIFI",
"PathPrefix": "drivers/net/wireless/"
}Results: {
"Output": "\nFull output is too long, showing 500 out of 4292 lines.\nUse more precise expression if possible.\n\ndrivers/net/wireless/nxp/Makefile-2-\ndrivers/net/wireless/nxp/Makefile:3:obj-$(CONFIG_NXPWIFI)\t+= nxpwifi/\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c=265=void nxpwifi_set_11ac_ba_params(struct nxpwifi_private *priv)\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-266-{\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:267:\tpriv-\u003eadd_ba_param.timeout = NXPWIFI_DEFAULT_BLOCK_ACK_TIMEOUT;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-268-\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:269:\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_UAP) {\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-270-\t\tpriv-\u003eadd_ba_param.tx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:271:\t\t\tNXPWIFI_11AC_UAP_AMPDU_DEF_TXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-272-\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:273:\t\t\tNXPWIFI_11AC_UAP_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-274-\t} else {\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-275-\t\tpriv-\u003eadd_ba_param.tx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:276:\t\t\tNXPWIFI_11AC_STA_AMPDU_DEF_TXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-277-\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:278:\t\t\tNXPWIFI_11AC_STA_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-279-\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-7-\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:8:#ifndef _NXPWIFI_11AC_H_\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:9:#define _NXPWIFI_11AC_H_\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-10-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.h=31=void nxpwifi_fill_vht_cap_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-32-\t\t\t struct ieee80211_vht_cap *vht_cap, u16 bands);\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:33:#endif /* _NXPWIFI_11AC_H_ */\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c=11=void nxpwifi_update_11ax_cap(struct nxpwifi_adapter *adapter,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-67-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:68:\t\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_STA)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-69-\t\t\tuser_he_cap-\u003ehe_mac_cap[0] \u0026=\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c=251=int nxpwifi_cmd_11ax_cmd(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-274-\tswitch (ax_cmd-\u003esub_command) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:275:\tcase NXPWIFI_11AXCMD_SR_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-276-\t\tsr_cmd = (struct nxpwifi_11ax_sr_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-284-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:285:\tcase NXPWIFI_11AXCMD_BEAM_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-286-\t\tbeam_cmd = (struct nxpwifi_11ax_beam_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-290-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:291:\tcase NXPWIFI_11AXCMD_HTC_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-292-\t\thtc_cmd = (struct nxpwifi_11ax_htc_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-296-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:297:\tcase NXPWIFI_11AXCMD_TXOMI_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-298-\t\ttxmoi_cmd =\t(struct nxpwifi_11ax_txomi_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-302-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:303:\tcase NXPWIFI_11AXCMD_OBSS_TOLTIME_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-304-\t\ttoltime_cmd = (struct nxpwifi_11ax_toltime_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-309-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:310:\tcase NXPWIFI_11AXCMD_TXOPRTS_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-311-\t\ttxop_cmd = (struct nxpwifi_11ax_txop_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-316-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:317:\tcase NXPWIFI_11AXCMD_SET_BSRP_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-318-\t\tset_bsrp_cmd = (struct nxpwifi_11ax_set_bsrp_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-322-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:323:\tcase NXPWIFI_11AXCMD_LLDE_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-324-\t\tllde_cmd = (struct nxpwifi_11ax_llde_cmd *)\u0026ax_cmd-\u003eparam;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c=341=int nxpwifi_ret_11ax_cmd(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-351-\tswitch (ax_cmd-\u003esub_command) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:352:\tcase NXPWIFI_11AXCMD_SR_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-353-\t\ttlv = (struct nxpwifi_ie_types_data *)he_cmd-\u003eval;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-357-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:358:\tcase NXPWIFI_11AXCMD_BEAM_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-359-\t\tax_cmd-\u003eparam.beam_cfg.value = *he_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-360-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:361:\tcase NXPWIFI_11AXCMD_HTC_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-362-\t\tax_cmd-\u003eparam.htc_cfg.value = *he_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-363-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:364:\tcase NXPWIFI_11AXCMD_TXOMI_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-365-\t\tmemcpy(\u0026ax_cmd-\u003eparam.txomi_cfg,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-367-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:368:\tcase NXPWIFI_11AXCMD_OBSS_TOLTIME_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-369-\t\tmemcpy(\u0026ax_cmd-\u003eparam.toltime_cfg.tol_time,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-371-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:372:\tcase NXPWIFI_11AXCMD_TXOPRTS_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-373-\t\tmemcpy(\u0026ax_cmd-\u003eparam.txop_cfg.rts_thres,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-375-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:376:\tcase NXPWIFI_11AXCMD_SET_BSRP_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-377-\t\tax_cmd-\u003eparam.setbsrp_cfg.value = *he_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-378-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:379:\tcase NXPWIFI_11AXCMD_LLDE_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-380-\t\tmemcpy(\u0026ax_cmd-\u003eparam.llde_cfg,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c=466=int nxpwifi_cmd_twt_cfg(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-486-\tswitch (twt_cfg-\u003esub_id) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:487:\tcase NXPWIFI_11AX_TWT_SETUP_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-488-\t\ttwt_setup = (struct nxpwifi_twt_setup *)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-506-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:507:\tcase NXPWIFI_11AX_TWT_TEARDOWN_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-508-\t\ttwt_teardown = (struct nxpwifi_twt_teardown *)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-519-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:520:\tcase NXPWIFI_11AX_TWT_REPORT_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-521-\t\ttwt_report = (struct nxpwifi_twt_report *)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-526-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:527:\tcase NXPWIFI_11AX_TWT_INFORMATION_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-528-\t\ttwt_information = (struct nxpwifi_twt_information *)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-537-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:538:\tcase NXPWIFI_11AX_BTWT_AP_CONFIG_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-539-\t\tbtwt_ap_config = (struct nxpwifi_btwt_ap_config *)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c=575=int nxpwifi_ret_twt_cfg(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-585-\tif (action == HOST_ACT_GEN_GET \u0026\u0026\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:586:\t twt_cfg-\u003esub_id == NXPWIFI_11AX_TWT_REPORT_SUBID) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-587-\t\tstruct nxpwifi_twt_report *twt_report =\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-7-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:8:#ifndef _NXPWIFI_11AX_H_\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:9:#define _NXPWIFI_11AX_H_\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-10-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.h=71=u8 nxpwifi_is_sta_11ax_twt_req_supported(struct nxpwifi_private *priv);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-72-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:73:#endif /* _NXPWIFI_11AX_H_ */\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c=72=int nxpwifi_11h_activate(struct nxpwifi_private *priv, bool flag)\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c-76-\t/* enable master mode radar detection on AP interface */\ndrivers/net/wireless/nxp/nxpwifi/11h.c:77:\tif ((GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_UAP) \u0026\u0026 enable)\ndrivers/net/wireless/nxp/nxpwifi/11h.c:78:\t\tenable |= NXPWIFI_MASTER_RADAR_DET_MASK;\ndrivers/net/wireless/nxp/nxpwifi/11h.c-79-\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c=130=int nxpwifi_cmd_issue_chan_report_request(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c-140-\ndrivers/net/wireless/nxp/nxpwifi/11h.c:141:\tcr_req-\u003echan_desc.start_freq = cpu_to_le16(NXPWIFI_A_BAND_START_FREQ);\ndrivers/net/wireless/nxp/nxpwifi/11h.c-142-\tnxpwifi_convert_chan_to_band_cfg(priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c=25=int nxpwifi_fill_cap_info(struct nxpwifi_private *priv, u8 radio_type,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c-69-\tif (ISSUPP_BEAMFORMING(priv-\u003eadapter-\u003ehw_dot_11n_dev_cap))\ndrivers/net/wireless/nxp/nxpwifi/11n.c:70:\t\tht_cap-\u003etx_BF_cap_info = cpu_to_le32(NXPWIFI_DEF_11N_TX_BF_CAP);\ndrivers/net/wireless/nxp/nxpwifi/11n.c-71-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c=633=int nxpwifi_get_rx_reorder_tbl(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c-658-\ndrivers/net/wireless/nxp/nxpwifi/11n.c:659:\t\t\tif (count \u003e= NXPWIFI_MAX_RX_BASTREAM_SUPPORTED)\ndrivers/net/wireless/nxp/nxpwifi/11n.c-660-\t\t\t\treturn count;\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c=668=int nxpwifi_get_tx_ba_stream_tbl(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c-685-\t\t\tcount++;\ndrivers/net/wireless/nxp/nxpwifi/11n.c:686:\t\t\tif (count \u003e= NXPWIFI_MAX_TX_BASTREAM_SUPPORTED)\ndrivers/net/wireless/nxp/nxpwifi/11n.c-687-\t\t\t\treturn count;\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c=714=void nxpwifi_set_ba_params(struct nxpwifi_private *priv)\ndrivers/net/wireless/nxp/nxpwifi/11n.c-715-{\ndrivers/net/wireless/nxp/nxpwifi/11n.c:716:\tpriv-\u003eadd_ba_param.timeout = NXPWIFI_DEFAULT_BLOCK_ACK_TIMEOUT;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-717-\ndrivers/net/wireless/nxp/nxpwifi/11n.c:718:\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_UAP) {\ndrivers/net/wireless/nxp/nxpwifi/11n.c-719-\t\tpriv-\u003eadd_ba_param.tx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n.c:720:\t\t\tNXPWIFI_UAP_AMPDU_DEF_TXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-721-\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n.c:722:\t\t\tNXPWIFI_UAP_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-723-\t} else {\ndrivers/net/wireless/nxp/nxpwifi/11n.c-724-\t\tpriv-\u003eadd_ba_param.tx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n.c:725:\t\t\tNXPWIFI_STA_AMPDU_DEF_TXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-726-\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n.c:727:\t\t\tNXPWIFI_STA_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-728-\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c=806=void nxpwifi_update_ampdu_txwinsize(struct nxpwifi_adapter *adapter)\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.c-815-\ndrivers/net/wireless/nxp/nxpwifi/11n.c:816:\t\tif (priv-\u003ebss_type == NXPWIFI_BSS_TYPE_STA)\ndrivers/net/wireless/nxp/nxpwifi/11n.c-817-\t\t\tpriv-\u003eadd_ba_param.tx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n.c:818:\t\t\t\tNXPWIFI_STA_AMPDU_DEF_TXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-819-\ndrivers/net/wireless/nxp/nxpwifi/11n.c:820:\t\tif (priv-\u003ebss_type == NXPWIFI_BSS_TYPE_UAP)\ndrivers/net/wireless/nxp/nxpwifi/11n.c-821-\t\t\tpriv-\u003eadd_ba_param.tx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n.c:822:\t\t\t\tNXPWIFI_UAP_AMPDU_DEF_TXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n.c-823-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h-7-\ndrivers/net/wireless/nxp/nxpwifi/11n.h:8:#ifndef _NXPWIFI_11N_H_\ndrivers/net/wireless/nxp/nxpwifi/11n.h:9:#define _NXPWIFI_11N_H_\ndrivers/net/wireless/nxp/nxpwifi/11n.h-10-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h=73=nxpwifi_is_ampdu_allowed(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h-78-\ndrivers/net/wireless/nxp/nxpwifi/11n.h:79:\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_UAP)\ndrivers/net/wireless/nxp/nxpwifi/11n.h-80-\t\treturn nxpwifi_is_station_ampdu_allowed(priv, ptr, tid);\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h=97=nxpwifi_space_avail_for_new_ba_stream(struct nxpwifi_adapter *adapter)\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h-101-\tsize_t ba_stream_num = 0;\ndrivers/net/wireless/nxp/nxpwifi/11n.h:102:\tsize_t ba_stream_max = NXPWIFI_MAX_TX_BASTREAM_SUPPORTED;\ndrivers/net/wireless/nxp/nxpwifi/11n.h-103-\ndrivers/net/wireless/nxp/nxpwifi/11n.h:104:\tif (adapter-\u003efw_api_ver == NXPWIFI_FW_V15) {\ndrivers/net/wireless/nxp/nxpwifi/11n.h-105-\t\tba_stream_max = GETSUPP_TXBASTREAMS(adapter-\u003ehw_dot_11n_dev_cap);\ndrivers/net/wireless/nxp/nxpwifi/11n.h-106-\t\tif (!ba_stream_max)\ndrivers/net/wireless/nxp/nxpwifi/11n.h:107:\t\t\tba_stream_max = NXPWIFI_MAX_TX_BASTREAM_SUPPORTED;\ndrivers/net/wireless/nxp/nxpwifi/11n.h-108-\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h=148=static inline int nxpwifi_is_sta_11n_enabled(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h-150-{\ndrivers/net/wireless/nxp/nxpwifi/11n.h:151:\tif (!node || (priv-\u003ebss_role == NXPWIFI_BSS_ROLE_UAP \u0026\u0026\ndrivers/net/wireless/nxp/nxpwifi/11n.h-152-\t\t !priv-\u003eap_11n_enabled))\n--\ndrivers/net/wireless/nxp/nxpwifi/11n.h-157-\ndrivers/net/wireless/nxp/nxpwifi/11n.h:158:#endif /* !_NXPWIFI_11N_H_ */\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c=68=nxpwifi_11n_form_amsdu_txpd(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-93-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:94:\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_STA \u0026\u0026\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-95-\t priv-\u003eadapter-\u003epps_uapsd_mode) {\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-98-\t\t\tlocal_tx_pd-\u003eflags =\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:99:\t\t\t\tNXPWIFI_TxPD_POWER_MGMT_LAST_PACKET;\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-100-\t\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c=110=nxpwifi_11n_aggregate_pkt(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-128-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:129:\ttx_info_src = NXPWIFI_SKB_TXCB(skb_src);\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-130-\tskb_aggr = nxpwifi_alloc_dma_align_buf(adapter-\u003etx_buf_size,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-141-\tskb_reserve(skb_aggr, headroom + sizeof(struct txpd));\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:142:\ttx_info_aggr = NXPWIFI_SKB_TXCB(skb_aggr);\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-143-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-147-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:148:\ttx_info_aggr-\u003eflags |= NXPWIFI_BUF_FLAG_AGGR_PKT;\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-149-\tskb_aggr-\u003epriority = skb_src-\u003epriority;\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-190-\tnxpwifi_11n_form_amsdu_txpd(priv, skb_aggr);\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:191:\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_STA)\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-192-\t\tptx_pd = (struct txpd *)skb_aggr-\u003edata;\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-206-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:207:\tret = adapter-\u003eif_ops.host_to_card(adapter, NXPWIFI_TYPE_DATA,\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-208-\t\t\t\t\t skb_aggr, \u0026tx_param);\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-217-\t\t}\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:218:\t\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_STA \u0026\u0026\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-219-\t\t adapter-\u003epps_uapsd_mode \u0026\u0026 adapter-\u003etx_lock_flag) {\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-230-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c:231:\t\ttx_info_aggr-\u003eflags |= NXPWIFI_BUF_FLAG_REQUEUED_PKT;\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.c-232-\t\tspin_unlock_bh(\u0026priv-\u003ewmm.ra_list_spinlock);\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h-7-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h:8:#ifndef _NXPWIFI_11N_AGGR_H_\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h:9:#define _NXPWIFI_11N_AGGR_H_\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h-10-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h=16=int nxpwifi_11n_aggregate_pkt(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h-20-\ndrivers/net/wireless/nxp/nxpwifi/11n_aggr.h:21:#endif /* !_NXPWIFI_11N_AGGR_H_ */\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c=17=static int nxpwifi_11n_dispatch_amsdu_pkt(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-37-\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:38:\t\t\tif (priv-\u003ebss_role == NXPWIFI_BSS_ROLE_UAP)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-39-\t\t\t\tret = nxpwifi_uap_recv_packet(priv, rx_skb);\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c=53=static int nxpwifi_11n_dispatch_pkt(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-66-\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:67:\tif (priv-\u003ebss_role == NXPWIFI_BSS_ROLE_UAP)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-68-\t\treturn nxpwifi_handle_uap_rx_forward(priv, payload);\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c=262=nxpwifi_11n_create_rx_reorder_tbl(struct nxpwifi_private *priv, u8 *ta,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-288-\tif (nxpwifi_queuing_ra_based(priv)) {\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:289:\t\tif (priv-\u003ebss_role == NXPWIFI_BSS_ROLE_UAP) {\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-290-\t\t\tguard(rcu)();\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-307-\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:308:\tif (last_seq != NXPWIFI_DEF_11N_RX_SEQ_NUM \u0026\u0026\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-309-\t last_seq \u003e= new_node-\u003estart_win) {\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c=340=nxpwifi_11n_rxreorder_timer_restart(struct nxpwifi_rx_reorder_tbl *tbl)\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-343-\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:344:\tif (tbl-\u003ewin_size \u003e= NXPWIFI_BA_WIN_SIZE_32)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-345-\t\tmin_flush_time = MIN_FLUSH_TIMER_15_MS;\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c=677=static void nxpwifi_update_ampdu_rxwinsize(struct nxpwifi_adapter *adapter,\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-689-\t\tif (coex_flag) {\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:690:\t\t\tif (priv-\u003ebss_type == NXPWIFI_BSS_TYPE_STA)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-691-\t\t\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:692:\t\t\t\t\tNXPWIFI_STA_COEX_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:693:\t\t\tif (priv-\u003ebss_type == NXPWIFI_BSS_TYPE_UAP)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-694-\t\t\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:695:\t\t\t\t\tNXPWIFI_UAP_COEX_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-696-\t\t} else {\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:697:\t\t\tif (priv-\u003ebss_type == NXPWIFI_BSS_TYPE_STA)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-698-\t\t\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:699:\t\t\t\t\tNXPWIFI_STA_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:700:\t\t\tif (priv-\u003ebss_type == NXPWIFI_BSS_TYPE_UAP)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-701-\t\t\t\tpriv-\u003eadd_ba_param.rx_win_size =\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:702:\t\t\t\t\tNXPWIFI_UAP_AMPDU_DEF_RXWINSIZE;\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-703-\t\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c=719=void nxpwifi_coex_ampdu_rxwinsize(struct nxpwifi_adapter *adapter)\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-726-\t\tpriv = adapter-\u003epriv[i];\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:727:\t\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_STA) {\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-728-\t\t\tif (priv-\u003emedia_connected)\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-730-\t\t}\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:731:\t\tif (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_UAP) {\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-732-\t\t\tif (priv-\u003ebss_started)\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-734-\t\t}\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:735:\t\tif (count \u003e= NXPWIFI_BSS_COEX_COUNT)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-736-\t\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-737-\t}\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c:738:\tif (count \u003e= NXPWIFI_BSS_COEX_COUNT)\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c-739-\t\tnxpwifi_update_ampdu_rxwinsize(adapter, true);\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-7-\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h:8:#ifndef _NXPWIFI_11N_RXREORDER_H_\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h:9:#define _NXPWIFI_11N_RXREORDER_H_\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-10-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-12-#define MIN_FLUSH_TIMER_15_MS\t\t15\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h:13:#define NXPWIFI_BA_WIN_SIZE_32\t\t32\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-14-\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-28-\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h:29:#define NXPWIFI_DEF_11N_RX_SEQ_NUM\t0xffff\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-30-#define BA_SETUP_MAX_PACKET_THRESHOLD\t16\n--\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h=69=void nxpwifi_11n_rxba_sync_event(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h-70-\t\t\t\t u8 *event_buf, u16 len);\ndrivers/net/wireless/nxp/nxpwifi/11n_rxreorder.h:71:#endif /* _NXPWIFI_11N_RXREORDER_H_ */\n--\ndrivers/net/wireless/nxp/nxpwifi/Kconfig-1-# SPDX-License-Identifier: GPL-2.0-only\ndrivers/net/wireless/nxp/nxpwifi/Kconfig:2:config NXPWIFI\ndrivers/net/wireless/nxp/nxpwifi/Kconfig-3-\ttristate \"NXP WiFi Driver\"\n--\ndrivers/net/wireless/nxp/nxpwifi/Kconfig-11-\ndrivers/net/wireless/nxp/nxpwifi/Kconfig:12:config NXPWIFI_SDIO\ndrivers/net/wireless/nxp/nxpwifi/Kconfig-13-\ttristate \"NXP WiFi Driver for IW61x\"\ndrivers/net/wireless/nxp/nxpwifi/Kconfig:14:\tdepends on NXPWIFI \u0026\u0026 MMC\ndrivers/net/wireless/nxp/nxpwifi/Kconfig-15-\tselect FW_LOADER\n--\ndrivers/net/wireless/nxp/nxpwifi/Makefile=33=nxpwifi-$(CONFIG_DEBUG_FS) += debugfs.o\ndrivers/net/wireless/nxp/nxpwifi/Makefile:34:obj-$(CONFIG_NXPWIFI) += nxpwifi.o\ndrivers/net/wireless/nxp/nxpwifi/Makefile-35-\ndrivers/net/wireless/nxp/nxpwifi/Makefile=36=nxpwifi_sdio-y += sdio.o\ndrivers/net/wireless/nxp/nxpwifi/Makefile:37:obj-$(CONFIG_NXPWIFI_SDIO) += nxpwifi_sdio.o\ndrivers/net/wireless/nxp/nxpwifi/Makefile-38-\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-7-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:8:#ifndef _NXPWIFI_CFG_H_\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:9:#define _NXPWIFI_CFG_H_\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-10-\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-18-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:19:#define NXPWIFI_BSS_COEX_COUNT\t 2\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:20:#define NXPWIFI_MAX_BSS_NUM (3)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-21-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:22:#define NXPWIFI_MAX_CSA_COUNTERS 5\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-23-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:24:#define NXPWIFI_DMA_ALIGN_SZ\t 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:25:#define NXPWIFI_RX_HEADROOM\t 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-26-#define MAX_TXPD_SZ\t\t 32\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-28-/* special FW 4 address management header */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:29:#define NXPWIFI_MIN_DATA_HEADER_LEN (NXPWIFI_DMA_ALIGN_SZ + INTF_HDR_ALIGN + \\\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-30-\t\t\t\t MAX_TXPD_SZ)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-31-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:32:#define NXPWIFI_MGMT_FRAME_HEADER_SIZE\t8\t/* sizeof(pkt_type)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-33-\t\t\t\t\t\t * + sizeof(tx_control)\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-38-#define SEQCTL_LEN 2\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:39:#define NXPWIFI_MGMT_HEADER_LEN (FRMCTL_LEN + FRMCTL_LEN + ETH_ALEN + \\\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-40-\t\t\t\t ETH_ALEN + ETH_ALEN + SEQCTL_LEN + ETH_ALEN)\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-44-#define AUTH_STATUS_LEN 2\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:45:#define NXPWIFI_AUTH_BODY_LEN (AUTH_ALG_LEN + AUTH_TRANSACTION_LEN + \\\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-46-\t\t\t\t AUTH_STATUS_LEN)\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-58-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:59:#define NXPWIFI_MAX_TX_BASTREAM_SUPPORTED\t2\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:60:#define NXPWIFI_MAX_RX_BASTREAM_SUPPORTED\t16\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-61-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:62:#define NXPWIFI_STA_AMPDU_DEF_TXWINSIZE 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:63:#define NXPWIFI_STA_AMPDU_DEF_RXWINSIZE 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:64:#define NXPWIFI_STA_COEX_AMPDU_DEF_RXWINSIZE 16\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-65-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:66:#define NXPWIFI_UAP_AMPDU_DEF_TXWINSIZE 32\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-67-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:68:#define NXPWIFI_UAP_COEX_AMPDU_DEF_RXWINSIZE 16\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-69-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:70:#define NXPWIFI_UAP_AMPDU_DEF_RXWINSIZE 16\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:71:#define NXPWIFI_11AC_STA_AMPDU_DEF_TXWINSIZE 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:72:#define NXPWIFI_11AC_STA_AMPDU_DEF_RXWINSIZE 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:73:#define NXPWIFI_11AC_UAP_AMPDU_DEF_TXWINSIZE 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:74:#define NXPWIFI_11AC_UAP_AMPDU_DEF_RXWINSIZE 64\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-75-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:76:#define NXPWIFI_DEFAULT_BLOCK_ACK_TIMEOUT 0xffff\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-77-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:78:#define NXPWIFI_RATE_BITMAP_MCS0 32\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-79-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:80:#define NXPWIFI_RX_DATA_BUF_SIZE (4 * 1024)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:81:#define NXPWIFI_RX_CMD_BUF_SIZE\t (2 * 1024)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-82-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:83:#define NXPWIFI_BEACON_PERIOD_MAX (4000)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:84:#define NXPWIFI_BEACON_PERIOD_MIN (50)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:85:#define NXPWIFI_INVALID_BEACON_PERIOD (NXPWIFI_BEACON_PERIOD_MAX + 1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:86:#define NXPWIFI_MAX_DTIM_PERIOD (100)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:87:#define NXPWIFI_MIN_DTIM_PERIOD (1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:88:#define NXPWIFI_INVALID_DTIM_PERIOD (NXPWIFI_MAX_DTIM_PERIOD + 1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:89:#define NXPWIFI_RTS_THRESHOLD_MIN (0)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:90:#define NXPWIFI_RTS_THRESHOLD_MAX (2347)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:91:#define NXPWIFI_INVALID_RTS\t(NXPWIFI_RTS_THRESHOLD_MAX + 1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:92:#define NXPWIFI_FRAG_THRESHOLD_MIN (256)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:93:#define NXPWIFI_FRAG_THRESHOLD_MAX (2346)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:94:#define NXPWIFI_INVALID_FRAG (NXPWIFI_FRAG_THRESHOLD_MAX + 1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:95:#define NXPWIFI_RETRY_LIMIT_MAX 14\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:96:#define NXPWIFI_INVALID_RETRY_LIMI (NXPWIFI_RETRY_LIMIT_MAX + 1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-97-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h=98=enum nxpwifi_bcast_ssid_ctl {\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-99-\t/* Hide SSID in beacons (SSID length = 0) */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:100:\tNXPWIFI_BCAST_SSID_HIDE_LEN_ZERO = 0,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-101-\t/* Do not hide SSID (normal broadcast) */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:102:\tNXPWIFI_BCAST_SSID_VISIBLE,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-103-\t/* Hide SSID, clear SSID content (ASCII 0),\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-105-\t */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:106:\tNXPWIFI_BCAST_SSID_HIDE_LEN_RETAIN,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-107-};\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h=109=enum nxpwifi_radio_ctl {\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:110:\tNXPWIFI_RADIO_CTL_DISABLE = 0,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:111:\tNXPWIFI_RADIO_CTL_ENABLE,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:112:\t__NXPWIFI_RADIO_CTL_MAX,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-113-};\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h=115=static inline bool nxpwifi_radio_ctl_valid(enum nxpwifi_radio_ctl v)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-116-{\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:117:\treturn v \u003c __NXPWIFI_RADIO_CTL_MAX;\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-118-}\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-119-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:120:#define NXPWIFI_WMM_VERSION 0x01\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:121:#define NXPWIFI_WMM_SUBTYPE 0x01\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-122-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:123:#define NXPWIFI_SDIO_BLOCK_SIZE 256\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-124-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:125:#define NXPWIFI_BUF_FLAG_REQUEUED_PKT BIT(0)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:126:#define NXPWIFI_BUF_FLAG_BRIDGED_PKT\t BIT(1)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:127:#define NXPWIFI_BUF_FLAG_EAPOL_TX_STATUS BIT(3)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:128:#define NXPWIFI_BUF_FLAG_ACTION_TX_STATUS BIT(4)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:129:#define NXPWIFI_BUF_FLAG_AGGR_PKT BIT(5)\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-130-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:131:#define NXPWIFI_BRIDGED_PKTS_THR_HIGH 1024\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:132:#define NXPWIFI_BRIDGED_PKTS_THR_LOW 128\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-133-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-134-/* 54M rates, index from 0 to 11 */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:135:#define NXPWIFI_RATE_INDEX_MCS0 12\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-136-/* 12-27=MCS0-15(BW20) */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:137:#define NXPWIFI_BW20_MCS_NUM 15\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-138-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-139-/* Rate index for OFDM 0 */\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:140:#define NXPWIFI_RATE_INDEX_OFDM0 4\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-141-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:142:#define NXPWIFI_MAX_STA_NUM\t\t3\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:143:#define NXPWIFI_MAX_UAP_NUM\t\t3\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-144-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:145:#define NXPWIFI_A_BAND_START_FREQ\t5000\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-146-\n--\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-151-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:152:#define NXPWIFI_SIZE_4K 0x4000\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:153:#define NXPWIFI_EXT_CAPAB_IE_LEN 10\ndrivers/net/wireless/nxp/nxpwifi/cfg.h-154-\ndrivers/net/wireless/nxp/nxpwifi/cfg.h=155=enum nxpwifi_bss_type {\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:156:\tNXPWIFI_BSS_TYPE_STA = 0,\ndrivers/net/wireless/nxp/nxpwifi/cfg.h:157:\tNXPWIFI_BSS_TYPE_UAP = 1,\n\n"
} |
| 51/2 | 2026/07/30 19:37 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 64801 output: 41 thoughts: 577 Thoughts: **Analyzing the Reachability of the `nxpwifi` SDIO Driver** Okay, so I'm looking at `nxpwifi`. I see it's an SDIO driver. My first thought is, are there any other drivers related to this? I should check if there's a USB or PCIe variant in the `drivers/net/wireless/nxp/` directory, maybe using `nxpwifi` as a common element. Ah, I see `mwifiex` in the Marvell directory, which is relevant, as NXP (formerly Marvell) wrote `nxpwifi`, a new driver. The next question is, can I even *reach* `nxpwifi` in QEMU? Since it's SDIO, QEMU doesn't directly emulate the IW61x SDIO hardware. I should check syzkaller. Does syzkaller have any pseudo-syscalls or support for SDIO emulation, maybe something like a `syz_sdio_host`? I know I can't directly query syzkaller's syzlang descriptions, so a direct search using `default_api:grepper` won't work. But I can look for `sdio` in the kernel's `drivers/mmc/core/` directory to see if there is any virtual SDIO host. I remember syzkaller has `vhci` for USB and `mac80211_hwsim` for Wi-Fi. But what about SDIO? I should have known this! Ah, wait! `drivers/mmc/host/sdhci-pci.c` -- QEMU *does* emulate `sdhci-pci`! But QEMU emulates the *host controller*, not the SDIO card itself, the IW61x. So, unless syzkaller can inject SDIO card responses, I'm stuck. It's not in the upstream kernel. Wait, could syzkaller be fuzzing the `cfg80211` interface of `nxpwifi`? But if the driver isn't loaded because there's no hardware, `cfg80211` can't even touch it. Can the driver be loaded without the hardware? I need to check `nxpwifi_init_module`. It only initializes debugfs, which won't trigger the driver load. The driver is registered via `module_sdio_driver(nxpwifi_sdio)`. That means if there's no SDIO card with the specific vendor/device ID, the `probe` function of the SDIO driver will never get called. Now, I need to look at `nxpwifi_sdio_probe` in `sdio.c`. |
| 52/2 | 2026/07/30 19:37 | tool | grepper |
0mArgs:{
"Expression": "nxpwifi_sdio_probe",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"Output": "drivers/net/wireless/nxp/nxpwifi/sdio.c=122=static int\ndrivers/net/wireless/nxp/nxpwifi/sdio.c:123:nxpwifi_sdio_probe(struct sdio_func *func, const struct sdio_device_id *id)\ndrivers/net/wireless/nxp/nxpwifi/sdio.c-124-{\n--\ndrivers/net/wireless/nxp/nxpwifi/sdio.c=471=static struct sdio_driver nxpwifi_sdio = {\n--\ndrivers/net/wireless/nxp/nxpwifi/sdio.c-473-\t.id_table = nxpwifi_ids,\ndrivers/net/wireless/nxp/nxpwifi/sdio.c:474:\t.probe = nxpwifi_sdio_probe,\ndrivers/net/wireless/nxp/nxpwifi/sdio.c-475-\t.remove = nxpwifi_sdio_remove,\n"
} |
| 53/2 | 2026/07/30 19:37 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 66266 output: 32 thoughts: 255 Thoughts: **Debugging a Bizarre Kernel Bug** Okay, so I'm looking at this crash report, and it's hitting `nxpwifi_wait_queue_complete`. That's weird. Logically, if the hardware isn't present, `nxpwifi_sdio_probe` shouldn't even be called. And if that probe function isn't called, the `nxpwifi` adapter is never allocated, and consequently, the `cfg80211` wiphy isn't registered. So how on earth did Syzkaller get into this function? It's like trying to run code that's never been initialized. Wait a second, does Syzkaller have a `syz_80211_inject_frame` function or something similar? No, that can't be right; that requires a wiphy. Maybe it's faking an SDIO host controller and injecting SDIO devices somehow? Hang on... no, the Linux kernel doesn't have a virtual SDIO host controller explicitly designed for fuzzing, not like the `vhci` for USB. Hold on, could Syzkaller be leveraging `mac80211_hwsim`? But `mac80211_hwsim` is a completely separate driver, it doesn't utilize `nxpwifi` in any way, so that's a dead end. Okay, I need to zoom out. Could `nxpwifi` be fuzzed through a different bus? It's not limited to SDIO, right? Let me quickly check the driver tree for alternate bus implementations like `nxpwifi_usb` or `nxpwifi_pcie`. Time to see if there's a back door I'm missing. |
| 54/2 | 2026/07/30 19:37 | tool | grepper |
0mArgs:{
"Expression": "nxpwifi",
"PathPrefix": "drivers/net/wireless/nxp/"
}Results: {
"Output": "\nFull output is too long, showing 500 out of 15171 lines.\nUse more precise expression if possible.\n\ndrivers/net/wireless/nxp/Kconfig=13=if WLAN_VENDOR_NXP\ndrivers/net/wireless/nxp/Kconfig-14-\ndrivers/net/wireless/nxp/Kconfig:15:source \"drivers/net/wireless/nxp/nxpwifi/Kconfig\"\ndrivers/net/wireless/nxp/Kconfig-16-\n--\ndrivers/net/wireless/nxp/Makefile-2-\ndrivers/net/wireless/nxp/Makefile:3:obj-$(CONFIG_NXPWIFI)\t+= nxpwifi/\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-2-/*\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:3: * nxpwifi 802.11ac helpers\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-4- * Copyright 2011-2024 NXP\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c=36=static u16\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:37:nxpwifi_convert_mcsmap_to_maxrate(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-38-\t\t\t\t u16 bands, u16 mcs_map)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-42-\tu32 usr_vht_cap_info = 0;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:43:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-44-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c=79=static void\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:80:nxpwifi_fill_vht_cap_info(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-81-\t\t\t struct ieee80211_vht_cap *vht_cap, u16 bands)\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-82-{\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:83:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-84-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c=93=void\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:94:nxpwifi_fill_vht_cap_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-95-\t\t\t struct ieee80211_vht_cap *vht_cap, u16 bands)\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-96-{\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:97:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-98-\tu16 mcs_map_user, mcs_map_resp, mcs_map_result;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-101-\t/* Fill VHT capability info. */\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:102:\tnxpwifi_fill_vht_cap_info(priv, vht_cap, bands);\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-103-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-123-\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:124:\ttmp = nxpwifi_convert_mcsmap_to_maxrate(priv, bands, mcs_map_result);\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-125-\tvht_cap-\u003esupp_mcs.rx_highest = cpu_to_le16(tmp);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-145-\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:146:\ttmp = nxpwifi_convert_mcsmap_to_maxrate(priv, bands, mcs_map_result);\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-147-\tvht_cap-\u003esupp_mcs.tx_highest = cpu_to_le16(tmp);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-149-\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:150:int nxpwifi_cmd_append_11ac_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:151:\t\t\t\tstruct nxpwifi_bssdescriptor *bss_desc,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-152-\t\t\t\tu8 **buffer)\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-153-{\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:154:\tstruct nxpwifi_ie_types_vhtcap *vht_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:155:\tstruct nxpwifi_ie_types_oper_mode_ntf *oper_ntf;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-156-\tstruct ieee_types_oper_mode_ntf *ieee_oper_ntf;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:157:\tstruct nxpwifi_ie_types_vht_oper *vht_op;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:158:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-159-\tu8 supp_chwd_set;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-169-\tif (bss_desc-\u003ebcn_vht_cap) {\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:170:\t\tvht_cap = (struct nxpwifi_ie_types_vhtcap *)*buffer;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-171-\t\tmemset(vht_cap, 0, sizeof(*vht_cap));\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-174-\t\t\tcpu_to_le16(sizeof(struct ieee80211_vht_cap));\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:175:\t\tmemcpy((u8 *)vht_cap + sizeof(struct nxpwifi_ie_types_header),\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-176-\t\t (u8 *)bss_desc-\u003ebcn_vht_cap,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-178-\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:179:\t\tnxpwifi_fill_vht_cap_tlv(priv, \u0026vht_cap-\u003evht_cap,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-180-\t\t\t\t\t bss_desc-\u003ebss_band);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-187-\t\tif (priv-\u003ebss_mode == NL80211_IFTYPE_STATION) {\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:188:\t\t\tvht_op = (struct nxpwifi_ie_types_vht_oper *)*buffer;\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-189-\t\t\tmemset(vht_op, 0, sizeof(*vht_op));\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-192-\t\t\tvht_op-\u003eheader.len = cpu_to_le16(sizeof(*vht_op) -\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:193:\t\t\t\tsizeof(struct nxpwifi_ie_types_header));\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-194-\t\t\tmemcpy((u8 *)vht_op +\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:195:\t\t\t\tsizeof(struct nxpwifi_ie_types_header),\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-196-\t\t\t (u8 *)bss_desc-\u003ebcn_vht_oper,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-244-\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:245:int nxpwifi_cmd_11ac_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-246-\t\t\t struct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:247:\t\t\t struct nxpwifi_11ac_vht_cfg *cfg)\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-248-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-264-/* Initialize BlockAck parameters for 11ac. */\ndrivers/net/wireless/nxp/nxpwifi/11ac.c:265:void nxpwifi_set_11ac_ba_params(struct nxpwifi_private *priv)\ndrivers/net/wireless/nxp/nxpwifi/11ac.c-266-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-2-/*\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:3: * nxpwifi: 802.11ac (VHT) definitions\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-4- *\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.h=14=enum vht_cfg_misc_config {\n--\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-24-\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:25:int nxpwifi_cmd_append_11ac_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:26:\t\t\t\tstruct nxpwifi_bssdescriptor *bss_desc,\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-27-\t\t\t\tu8 **buffer);\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:28:int nxpwifi_cmd_11ac_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-29-\t\t\t struct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:30:\t\t\t struct nxpwifi_11ac_vht_cfg *cfg);\ndrivers/net/wireless/nxp/nxpwifi/11ac.h:31:void nxpwifi_fill_vht_cap_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ac.h-32-\t\t\t struct ieee80211_vht_cap *vht_cap, u16 bands);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-1-// SPDX-License-Identifier: GPL-2.0-only\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:2:/* nxpwifi: 802.11ax (HE) support\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-3- * Copyright (C) 2011-2024 NXP\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-10-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:11:void nxpwifi_update_11ax_cap(struct nxpwifi_adapter *adapter,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-12-\t\t\t struct hw_spec_extension *hw_he_cap)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-13-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:14:\tstruct nxpwifi_private *priv;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:15:\tstruct nxpwifi_ie_types_he_cap *he_cap = NULL;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:16:\tstruct nxpwifi_ie_types_he_cap *user_he_cap = NULL;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:17:\tu8 header_len = sizeof(struct nxpwifi_ie_types_header);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-18-\tu16 data_len = le16_to_cpu(hw_he_cap-\u003eheader.len);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-22-\tif ((data_len + header_len) \u003e sizeof(adapter-\u003ehw_he_cap)) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:23:\t\tnxpwifi_dbg(adapter, ERROR,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-24-\t\t\t \"hw_he_cap too big, len=%d\\n\",\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-28-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:29:\the_cap = (struct nxpwifi_ie_types_he_cap *)hw_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-30-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-37-\t\the_cap_2g = true;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:38:\t\tnxpwifi_dbg_dump(adapter, CMD_D, \"2.4G HE capability element \",\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-39-\t\t\t\t adapter-\u003ehw_2g_he_cap,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-45-\t\tadapter-\u003efw_bands |= BAND_AAX;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:46:\t\tnxpwifi_dbg_dump(adapter, CMD_D, \"5G HE capability element \",\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-47-\t\t\t\t adapter-\u003ehw_he_cap,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-57-\t\t\t sizeof(adapter-\u003ehw_2g_he_cap));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:58:\t\t\tuser_he_cap = (struct nxpwifi_ie_types_he_cap *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-59-\t\t\t\tpriv-\u003euser_2g_he_cap;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-63-\t\t\t sizeof(adapter-\u003ehw_he_cap));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:64:\t\t\tuser_he_cap = (struct nxpwifi_ie_types_he_cap *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-65-\t\t\t\tpriv-\u003euser_he_cap;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-78-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:79:bool nxpwifi_11ax_bandconfig_allowed(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:80:\t\t\t\t struct nxpwifi_bssdescriptor *bss_desc)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-81-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-94-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:95:int nxpwifi_fill_he_cap_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:96:\t\t\t struct nxpwifi_ie_types_he_cap *he_cap,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-97-\t\t\t u16 bands)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-98-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:99:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:100:\tstruct nxpwifi_ie_types_he_cap *hw_he_cap = NULL;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-101-\tu16 rx_nss, tx_nss;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-108-\t\tmemcpy(he_cap, priv-\u003euser_he_cap, priv-\u003euser_he_cap_len);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:109:\t\thw_he_cap = (struct nxpwifi_ie_types_he_cap *)adapter-\u003ehw_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-110-\t\tret_len = priv-\u003euser_he_cap_len;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-112-\t\tmemcpy(he_cap, priv-\u003euser_2g_he_cap, priv-\u003euser_2g_he_cap_len);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:113:\t\thw_he_cap = (struct nxpwifi_ie_types_he_cap *)adapter-\u003ehw_2g_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-114-\t\tret_len = priv-\u003euser_2g_he_cap_len;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-125-\tfor (nss = 1; nss \u003c= 8; nss++) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:126:\t\tcfg_value = nxpwifi_get_he_nss_mcs(he_cap-\u003erx_mcs_80, nss);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:127:\t\thw_value = nxpwifi_get_he_nss_mcs(hw_he_cap-\u003erx_mcs_80, nss);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-128-\t\tif (rx_nss != 0 \u0026\u0026 nss \u003e rx_nss)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-130-\t\tif (hw_value == NO_NSS_SUPPORT || cfg_value == NO_NSS_SUPPORT)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:131:\t\t\tnxpwifi_set_he_nss_mcs(\u0026he_cap-\u003erx_mcs_80, nss,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-132-\t\t\t\t\t NO_NSS_SUPPORT);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-133-\t\telse\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:134:\t\t\tnxpwifi_set_he_nss_mcs(\u0026he_cap-\u003erx_mcs_80, nss,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-135-\t\t\t\t\t min(cfg_value, hw_value));\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-138-\tfor (nss = 1; nss \u003c= 8; nss++) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:139:\t\tcfg_value = nxpwifi_get_he_nss_mcs(he_cap-\u003etx_mcs_80, nss);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:140:\t\thw_value = nxpwifi_get_he_nss_mcs(hw_he_cap-\u003etx_mcs_80, nss);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-141-\t\tif (tx_nss != 0 \u0026\u0026 nss \u003e tx_nss)\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-143-\t\tif (hw_value == NO_NSS_SUPPORT || cfg_value == NO_NSS_SUPPORT)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:144:\t\t\tnxpwifi_set_he_nss_mcs(\u0026he_cap-\u003etx_mcs_80, nss,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-145-\t\t\t\t\t NO_NSS_SUPPORT);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-146-\t\telse\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:147:\t\t\tnxpwifi_set_he_nss_mcs(\u0026he_cap-\u003etx_mcs_80, nss,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-148-\t\t\t\t\t min(cfg_value, hw_value));\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-153-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:154:int nxpwifi_cmd_append_11ax_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:155:\t\t\t\tstruct nxpwifi_bssdescriptor *bss_desc,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-156-\t\t\t\tu8 **buffer)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-157-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:158:\tstruct nxpwifi_ie_types_he_cap *he_cap = NULL;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-159-\tint ret_len;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-163-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:164:\the_cap = (struct nxpwifi_ie_types_he_cap *)*buffer;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:165:\tret_len = nxpwifi_fill_he_cap_tlv(priv, he_cap, bss_desc-\u003ebss_band);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-166-\t*buffer += ret_len;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-170-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:171:int nxpwifi_cmd_11ax_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-172-\t\t\t struct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:173:\t\t\t struct nxpwifi_11ax_he_cfg *ax_cfg)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-174-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-176-\tu16 cmd_size;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:177:\tstruct nxpwifi_ie_types_header *header;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-178-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-186-\t ax_cfg-\u003ehe_cap_cfg.ext_id == WLAN_EID_EXT_HE_CAPABILITY) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:187:\t\theader = (struct nxpwifi_ie_types_header *)he_cfg-\u003etlv;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-188-\t\theader-\u003etype = cpu_to_le16(ax_cfg-\u003ehe_cap_cfg.id);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-200-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:201:int nxpwifi_ret_11ax_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-202-\t\t\t struct host_cmd_ds_command *resp,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:203:\t\t\t struct nxpwifi_11ax_he_cfg *ax_cfg)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-204-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-205-\tstruct host_cmd_11ax_cfg *he_cfg = \u0026resp-\u003eparams.ax_cfg;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:206:\tstruct nxpwifi_ie_types_header *header;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-207-\tu16 left_len, tlv_type, tlv_len;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-208-\tu8 ext_id;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:209:\tstruct nxpwifi_11ax_he_cap_cfg *he_cap = \u0026ax_cfg-\u003ehe_cap_cfg;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-210-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-211-\tleft_len = le16_to_cpu(resp-\u003esize) - sizeof(*he_cfg) - S_DS_GEN;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:212:\theader = (struct nxpwifi_ie_types_header *)he_cfg-\u003etlv;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-213-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-242-\t\tleft_len -= (sizeof(*header) + tlv_len);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:243:\t\theader = (struct nxpwifi_ie_types_header *)((u8 *)header +\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-244-\t\t\t\t\t\t\t sizeof(*header) +\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-250-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:251:int nxpwifi_cmd_11ax_cmd(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-252-\t\t\t struct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:253:\t\t\t struct nxpwifi_11ax_cmd_cfg *ax_cmd)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-254-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:255:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-256-\tstruct host_cmd_11ax_cmd *he_cmd = \u0026cmd-\u003eparams.ax_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-257-\tu16 cmd_size;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:258:\tstruct nxpwifi_11ax_sr_cmd *sr_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:259:\tstruct nxpwifi_ie_types_data *tlv;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:260:\tstruct nxpwifi_11ax_beam_cmd *beam_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:261:\tstruct nxpwifi_11ax_htc_cmd *htc_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:262:\tstruct nxpwifi_11ax_txomi_cmd *txmoi_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:263:\tstruct nxpwifi_11ax_toltime_cmd *toltime_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:264:\tstruct nxpwifi_11ax_txop_cmd *txop_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:265:\tstruct nxpwifi_11ax_set_bsrp_cmd *set_bsrp_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:266:\tstruct nxpwifi_11ax_llde_cmd *llde_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-267-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-275-\tcase NXPWIFI_11AXCMD_SR_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:276:\t\tsr_cmd = (struct nxpwifi_11ax_sr_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-277-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:278:\t\ttlv = (struct nxpwifi_ie_types_data *)he_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-279-\t\ttlv-\u003eheader.type = cpu_to_le16(sr_cmd-\u003etype);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-285-\tcase NXPWIFI_11AXCMD_BEAM_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:286:\t\tbeam_cmd = (struct nxpwifi_11ax_beam_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-287-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-291-\tcase NXPWIFI_11AXCMD_HTC_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:292:\t\thtc_cmd = (struct nxpwifi_11ax_htc_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-293-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-297-\tcase NXPWIFI_11AXCMD_TXOMI_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:298:\t\ttxmoi_cmd =\t(struct nxpwifi_11ax_txomi_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-299-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-303-\tcase NXPWIFI_11AXCMD_OBSS_TOLTIME_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:304:\t\ttoltime_cmd = (struct nxpwifi_11ax_toltime_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-305-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-310-\tcase NXPWIFI_11AXCMD_TXOPRTS_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:311:\t\ttxop_cmd = (struct nxpwifi_11ax_txop_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-312-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-317-\tcase NXPWIFI_11AXCMD_SET_BSRP_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:318:\t\tset_bsrp_cmd = (struct nxpwifi_11ax_set_bsrp_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-319-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-323-\tcase NXPWIFI_11AXCMD_LLDE_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:324:\t\tllde_cmd = (struct nxpwifi_11ax_llde_cmd *)\u0026ax_cmd-\u003eparam;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-325-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-329-\tdefault:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:330:\t\tnxpwifi_dbg(adapter, ERROR,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-331-\t\t\t \"%s: Unknown sub command: %d\\n\",\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-340-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:341:int nxpwifi_ret_11ax_cmd(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-342-\t\t\t struct host_cmd_ds_command *resp,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:343:\t\t\t struct nxpwifi_11ax_cmd_cfg *ax_cmd)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-344-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:345:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-346-\tstruct host_cmd_11ax_cmd *he_cmd = \u0026resp-\u003eparams.ax_cmd;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:347:\tstruct nxpwifi_ie_types_data *tlv;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-348-\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-352-\tcase NXPWIFI_11AXCMD_SR_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:353:\t\ttlv = (struct nxpwifi_ie_types_data *)he_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-354-\t\tmemcpy(ax_cmd-\u003eparam.sr_cfg.param.obss_pd_offset.offset,\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-383-\tdefault:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:384:\t\tnxpwifi_dbg(adapter, ERROR,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-385-\t\t\t \"%s: Unknown sub command: %d\\n\",\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-392-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:393:static u8 nxpwifi_is_ap_11ax_twt_supported(struct nxpwifi_bssdescriptor *bss_desc)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-394-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-409-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:410:bool nxpwifi_is_11ax_twt_supported(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:411:\t\t\t\t struct nxpwifi_bssdescriptor *bss_desc)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-412-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:413:\tstruct nxpwifi_ie_types_he_cap *user_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:414:\tstruct nxpwifi_ie_types_he_cap *hw_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-415-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:416:\tif (bss_desc \u0026\u0026 (!nxpwifi_is_ap_11ax_twt_supported(bss_desc))) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:417:\t\tnxpwifi_dbg(priv-\u003eadapter, MSG,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-418-\t\t\t \"AP don't support twt feature\\n\");\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-422-\tif (bss_desc-\u003ebss_band \u0026 BAND_A) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:423:\t\thw_he_cap = (struct nxpwifi_ie_types_he_cap *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-424-\t\t\tpriv-\u003eadapter-\u003ehw_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:425:\t\tuser_he_cap = (struct nxpwifi_ie_types_he_cap *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-426-\t\t\tpriv-\u003euser_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-427-\t} else {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:428:\t\thw_he_cap = (struct nxpwifi_ie_types_he_cap *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-429-\t\t\tpriv-\u003eadapter-\u003ehw_2g_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:430:\t\tuser_he_cap = (struct nxpwifi_ie_types_he_cap *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-431-\t\t\tpriv-\u003euser_2g_he_cap;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-434-\tif (!(hw_he_cap-\u003ehe_mac_cap[0] \u0026 HE_MAC_CAP_TWT_REQ_SUPPORT)) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:435:\t\tnxpwifi_dbg(priv-\u003eadapter, MSG,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-436-\t\t\t \"FW don't support TWT\\n\");\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-440-\tif (!(user_he_cap-\u003ehe_mac_cap[0] \u0026 HE_MAC_CAP_TWT_REQ_SUPPORT)) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:441:\t\tnxpwifi_dbg(priv-\u003eadapter, MSG,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-442-\t\t\t \"USER HE_MAC_CAP don't support TWT\\n\");\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-448-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:449:u8 nxpwifi_is_sta_11ax_twt_req_supported(struct nxpwifi_private *priv)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-450-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:451:\tstruct nxpwifi_ie_types_he_cap *user_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-452-\tu8 ret = 0;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-456-\t\tif (priv-\u003econfig_bands \u0026 BAND_AAX)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:457:\t\t\tuser_he_cap = (struct nxpwifi_ie_types_he_cap *)priv-\u003euser_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-458-\t\telse\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:459:\t\t\tuser_he_cap = (struct nxpwifi_ie_types_he_cap *)priv-\u003euser_2g_he_cap;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-460-\t\tret = user_he_cap-\u003ehe_mac_cap[0] \u0026 HE_MAC_CAP_TWT_REQ_SUPPORT;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-465-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:466:int nxpwifi_cmd_twt_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-467-\t\t\tstruct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:468:\t\t\tstruct nxpwifi_twt_cfg *twt_cfg)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-469-{\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:470:\tstruct nxpwifi_adapter *adapter = priv-\u003eadapter;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-471-\tstruct host_cmd_twt_cfg *twt_cfg_cmd = \u0026cmd-\u003eparams.twt_cfg;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:472:\tstruct nxpwifi_twt_setup *twt_setup;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:473:\tstruct nxpwifi_twt_teardown *twt_teardown;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:474:\tstruct nxpwifi_twt_report *twt_report;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:475:\tstruct nxpwifi_twt_information *twt_information;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:476:\tstruct nxpwifi_btwt_ap_config *btwt_ap_config;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-477-\tu8 i;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-487-\tcase NXPWIFI_11AX_TWT_SETUP_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:488:\t\ttwt_setup = (struct nxpwifi_twt_setup *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-489-\t\t\ttwt_cfg_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-490-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:491:\t\tmemset(twt_setup, 0x00, sizeof(struct nxpwifi_twt_setup));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-492-\t\ttwt_setup-\u003eimplicit = twt_cfg-\u003eparam.twt_setup.implicit;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-504-\t\ttwt_setup-\u003ebcn_miss_threshold = twt_cfg-\u003eparam.twt_setup.bcn_miss_threshold;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:505:\t\tcmd_size += sizeof(struct nxpwifi_twt_setup);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-506-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-507-\tcase NXPWIFI_11AX_TWT_TEARDOWN_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:508:\t\ttwt_teardown = (struct nxpwifi_twt_teardown *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-509-\t\t\ttwt_cfg_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-510-\t\tmemset(twt_teardown, 0x00,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:511:\t\t sizeof(struct nxpwifi_twt_teardown));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-512-\t\ttwt_teardown-\u003eflow_identifier =\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-517-\t\t\ttwt_cfg-\u003eparam.twt_teardown.teardown_all_twt;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:518:\t\tcmd_size += sizeof(struct nxpwifi_twt_teardown);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-519-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-520-\tcase NXPWIFI_11AX_TWT_REPORT_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:521:\t\ttwt_report = (struct nxpwifi_twt_report *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-522-\t\t\ttwt_cfg_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:523:\t\tmemset(twt_report, 0x00, sizeof(struct nxpwifi_twt_report));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-524-\t\ttwt_report-\u003etype = twt_cfg-\u003eparam.twt_report.type;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:525:\t\tcmd_size += sizeof(struct nxpwifi_twt_report);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-526-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-527-\tcase NXPWIFI_11AX_TWT_INFORMATION_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:528:\t\ttwt_information = (struct nxpwifi_twt_information *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-529-\t\t\ttwt_cfg_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-530-\t\tmemset(twt_information, 0x00,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:531:\t\t sizeof(struct nxpwifi_twt_information));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-532-\t\ttwt_information-\u003eflow_identifier =\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-535-\t\t\ttwt_cfg-\u003eparam.twt_information.suspend_duration;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:536:\t\tcmd_size += sizeof(struct nxpwifi_twt_information);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-537-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-538-\tcase NXPWIFI_11AX_BTWT_AP_CONFIG_SUBID:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:539:\t\tbtwt_ap_config = (struct nxpwifi_btwt_ap_config *)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-540-\t\t\t\t twt_cfg_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-541-\t\tmemset(btwt_ap_config, 0x00,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:542:\t\t sizeof(struct nxpwifi_btwt_ap_config));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-543-\t\tbtwt_ap_config-\u003eap_bcast_bet_sta_wait =\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-561-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:562:\t\tcmd_size += sizeof(struct nxpwifi_btwt_ap_config);\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-563-\t\tbreak;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-564-\tdefault:\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:565:\t\tnxpwifi_dbg(adapter, ERROR,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-566-\t\t\t \"Unknown sub id: %d\\n\", twt_cfg-\u003esub_id);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-574-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:575:int nxpwifi_ret_twt_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-576-\t\t\tstruct host_cmd_ds_command *resp,\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:577:\t\t\tstruct nxpwifi_twt_cfg *twt_cfg)\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-578-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-586-\t twt_cfg-\u003esub_id == NXPWIFI_11AX_TWT_REPORT_SUBID) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:587:\t\tstruct nxpwifi_twt_report *twt_report =\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:588:\t\t\t(struct nxpwifi_twt_report *)twt_cfg_cmd-\u003eval;\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-589-\ndrivers/net/wireless/nxp/nxpwifi/11ax.c:590:\t\tmemcpy(\u0026twt_cfg-\u003eparam.twt_report, twt_report, sizeof(struct nxpwifi_twt_report));\ndrivers/net/wireless/nxp/nxpwifi/11ax.c-591-\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-2-/*\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:3: * nxpwifi: 802.11ax support\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-4- *\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.h=17=static inline u16\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:18:nxpwifi_get_he_nss_mcs(__le16 mcs_map_set, int nss) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-19-\treturn ((le16_to_cpu(mcs_map_set) \u003e\u003e (2 * (nss - 1))) \u0026 0x3);\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.h=22=static inline void\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:23:nxpwifi_set_he_nss_mcs(__le16 *mcs_map_set, int nss, int value) {\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-24-\tu16 temp;\n--\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-30-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:31:bool nxpwifi_is_11ax_twt_supported(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:32:\t\t\t\t struct nxpwifi_bssdescriptor *bss_desc);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-33-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:34:void nxpwifi_update_11ax_cap(struct nxpwifi_adapter *adapter,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-35-\t\t\t struct hw_spec_extension *hw_he_cap);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-36-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:37:bool nxpwifi_11ax_bandconfig_allowed(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:38:\t\t\t\t struct nxpwifi_bssdescriptor *bss_desc);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-39-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:40:int nxpwifi_cmd_append_11ax_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:41:\t\t\t\tstruct nxpwifi_bssdescriptor *bss_desc,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-42-\t\t\t\tu8 **buffer);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-43-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:44:int nxpwifi_fill_he_cap_tlv(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:45:\t\t\t struct nxpwifi_ie_types_he_cap *he_cap,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-46-\t\t\t u16 bands);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:47:int nxpwifi_cmd_11ax_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-48-\t\t\t struct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:49:\t\t\t struct nxpwifi_11ax_he_cfg *ax_cfg);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-50-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:51:int nxpwifi_ret_11ax_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-52-\t\t\t struct host_cmd_ds_command *resp,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:53:\t\t\t struct nxpwifi_11ax_he_cfg *ax_cfg);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-54-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:55:int nxpwifi_cmd_11ax_cmd(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-56-\t\t\t struct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:57:\t\t\t struct nxpwifi_11ax_cmd_cfg *ax_cmd);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-58-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:59:int nxpwifi_ret_11ax_cmd(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-60-\t\t\t struct host_cmd_ds_command *resp,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:61:\t\t\t struct nxpwifi_11ax_cmd_cfg *ax_cmd);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-62-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:63:int nxpwifi_cmd_twt_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-64-\t\t\tstruct host_cmd_ds_command *cmd, u16 cmd_action,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:65:\t\t\tstruct nxpwifi_twt_cfg *twt_cfg);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-66-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:67:int nxpwifi_ret_twt_cfg(struct nxpwifi_private *priv,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-68-\t\t\tstruct host_cmd_ds_command *resp,\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:69:\t\t\tstruct nxpwifi_twt_cfg *twt_cfg);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-70-\ndrivers/net/wireless/nxp/nxpwifi/11ax.h:71:u8 nxpwifi_is_sta_11ax_twt_req_supported(struct nxpwifi_private *priv);\ndrivers/net/wireless/nxp/nxpwifi/11ax.h-72-\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c-2-/*\ndrivers/net/wireless/nxp/nxpwifi/11h.c:3: * nxpwifi: 802.11h helpers\ndrivers/net/wireless/nxp/nxpwifi/11h.c-4- *\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c-12-\ndrivers/net/wireless/nxp/nxpwifi/11h.c:13:void nxpwifi_init_11h_params(struct nxpwifi_private *priv)\ndrivers/net/wireless/nxp/nxpwifi/11h.c-14-{\n--\ndrivers/net/wireless/nxp/nxpwifi/11h.c-18-\n\n"
} |
| 55/2 | 2026/07/30 19:37 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 83151 output: 31 thoughts: 62 Thoughts: **Initial Assessment of NXP WiFi Driver Structure** Okay, I've got `drivers/net/wireless/nxp/nxpwifi/sdio.c` in front of me. Immediately, my mind jumps to the likely architecture. The SDIO interface is represented here, naturally. But, before I get too deep into this specific file, I need to understand the complete picture. Is this part of a monolithic driver, or are there separate files for other interfaces? My first thought is whether they've implemented `usb.c` or `pcie.c`. Let's quickly confirm. I need to re-examine the `drivers/net/wireless/nxp/nxpwifi/` directory structure. That'll be the best way to determine if there's modularity or a more integrated approach. That's the first step for understanding how this driver has been designed. |
| 56/2 | 2026/07/30 19:37 | tool | codesearch-dir-index |
0mArgs:{
"Dir": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"Files": [
"11ac.c",
"11ac.h",
"11ax.c",
"11ax.h",
"11h.c",
"11n.c",
"11n.h",
"11n_aggr.c",
"11n_aggr.h",
"11n_rxreorder.c",
"11n_rxreorder.h",
"cfg.h",
"cfg80211.c",
"cfg80211.h",
"cfp.c",
"cmdevt.c",
"cmdevt.h",
"debugfs.c",
"ethtool.c",
"fw.h",
"ie.c",
"init.c",
"join.c",
"main.c",
"main.h",
"scan.c",
"sdio.c",
"sdio.h",
"sta_cfg.c",
"sta_cmd.c",
"sta_event.c",
"sta_rx.c",
"sta_tx.c",
"txrx.c",
"uap_cmd.c",
"uap_event.c",
"uap_txrx.c",
"util.c",
"util.h",
"wmm.c",
"wmm.h"
],
"Subdirs": null
} |
| 57/2 | 2026/07/30 19:37 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 83769 output: 28 thoughts: 159 Thoughts: **Investigating the NXP Wi-Fi SDIO Driver Bug** Okay, so I'm focusing on `sdio.c` specifically, which means the `nxpwifi` driver is *solely* for SDIO. That's a key observation. Now, the real puzzle is how syzkaller uncovered a bug in this SDIO driver when QEMU, as far as I know, doesn't emulate the IW61x SDIO hardware it seems to be designed for. This doesn't add up. Could syzkaller be using `mac80211_hwsim` to fuzz the SDIO interface somehow? No, that's not right. `mac80211_hwsim` is a completely virtual driver; it registers its own `wiphy` and `netdev` and wouldn't be touching the `nxpwifi` driver. That's a dead end. Alright, what about a virtual SDIO host controller? Is syzkaller fuzzing SDIO by simulating an SDIO controller in software? That's a plausible theory. Time to check the kernel source – I need to determine if there's any evidence of a virtual SDIO host controller present. That might be the missing link. |
| 58/2 | 2026/07/30 19:37 | tool | grepper |
0mError:no matches Args: {
"Expression": "syz_",
"PathPrefix": "drivers/mmc/"
}Results: {
"error": "no matches"
} |
| 59/2 | 2026/07/30 19:37 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 84236 output: 25 thoughts: 48 Thoughts: **Kernel Exploration: Pseudo-Syscalls and SDIO Hosts** Okay, hold on a second. I can't just go blindly searching for "syz_" directly; that's a pseudo-syscall, and that changes the game. I need to take a step back and think more strategically. The goal is to understand the SDIO (Secure Digital Input Output) subsystem. And I'm going to have to do this without getting too side tracked. So, the real question is, is there even a virtual SDIO host controller within this particular kernel? I need to check the codebase to find out. My initial instinct is to dig into the `drivers/mmc/host/` directory. That seems like the most logical place to begin my investigation, given what I know about the overall architecture. I'll focus my search within this directory for starters. |
| 60/2 | 2026/07/30 19:37 | tool | codesearch-dir-index |
0mArgs:{
"Dir": "drivers/mmc/host/"
}Results: {
"Files": [
"alcor.c",
"atmel-mci.c",
"au1xmmc.c",
"bcm2835.c",
"cavium-octeon.c",
"cavium-thunderx.c",
"cavium.c",
"cavium.h",
"cb710-mmc.c",
"cb710-mmc.h",
"cqhci-core.c",
"cqhci-crypto.c",
"cqhci-crypto.h",
"cqhci.h",
"davinci_mmc.c",
"dw_mmc-bluefield.c",
"dw_mmc-exynos.c",
"dw_mmc-exynos.h",
"dw_mmc-hi3798cv200.c",
"dw_mmc-hi3798mv200.c",
"dw_mmc-k3.c",
"dw_mmc-pci.c",
"dw_mmc-pltfm.c",
"dw_mmc-pltfm.h",
"dw_mmc-rockchip.c",
"dw_mmc-starfive.c",
"dw_mmc.c",
"dw_mmc.h",
"jz4740_mmc.c",
"litex_mmc.c",
"loongson2-mmc.c",
"meson-gx-mmc.c",
"meson-mx-sdhc-clkc.c",
"meson-mx-sdhc-mmc.c",
"meson-mx-sdhc.h",
"meson-mx-sdio.c",
"mmc_hsq.c",
"mmc_hsq.h",
"mmc_spi.c",
"mmci.c",
"mmci.h",
"mmci_qcom_dml.c",
"mmci_stm32_sdmmc.c",
"moxart-mmc.c",
"mtk-sd.c",
"mvsdio.c",
"mvsdio.h",
"mxcmmc.c",
"mxs-mmc.c",
"of_mmc_spi.c",
"omap.c",
"omap_hsmmc.c",
"owl-mmc.c",
"pxamci.c",
"pxamci.h",
"renesas_sdhi.h",
"renesas_sdhi_core.c",
"renesas_sdhi_internal_dmac.c",
"renesas_sdhi_sys_dmac.c",
"rtsx_pci_sdmmc.c",
"rtsx_usb_sdmmc.c",
"sdhci-acpi.c",
"sdhci-bcm-kona.c",
"sdhci-brcmstb.c",
"sdhci-cadence.c",
"sdhci-cqhci.h",
"sdhci-dove.c",
"sdhci-esdhc-imx.c",
"sdhci-esdhc-mcf.c",
"sdhci-esdhc.h",
"sdhci-iproc.c",
"sdhci-milbeaut.c",
"sdhci-msm.c",
"sdhci-npcm.c",
"sdhci-of-arasan.c",
"sdhci-of-aspeed-test.c",
"sdhci-of-aspeed.c",
"sdhci-of-at91.c",
"sdhci-of-bst.c",
"sdhci-of-dwcmshc.c",
"sdhci-of-esdhc.c",
"sdhci-of-hlwd.c",
"sdhci-of-k1.c",
"sdhci-of-ma35d1.c",
"sdhci-of-sparx5.c",
"sdhci-omap.c",
"sdhci-pci-arasan.c",
"sdhci-pci-core.c",
"sdhci-pci-dwc-mshc.c",
"sdhci-pci-gli.c",
"sdhci-pci-o2micro.c",
"sdhci-pci.h",
"sdhci-pic32.c",
"sdhci-pltfm.c",
"sdhci-pltfm.h",
"sdhci-pxav2.c",
"sdhci-pxav3.c",
"sdhci-s3c.c",
"sdhci-spear.c",
"sdhci-sprd.c",
"sdhci-st.c",
"sdhci-tegra.c",
"sdhci-uhs2.c",
"sdhci-uhs2.h",
"sdhci-xenon-phy.c",
"sdhci-xenon.c",
"sdhci-xenon.h",
"sdhci.c",
"sdhci.h",
"sdhci_am654.c",
"sdhci_f_sdh30.c",
"sdhci_f_sdh30.h",
"sdricoh_cs.c",
"sh_mmcif.c",
"sunplus-mmc.c",
"sunxi-mmc.c",
"tifm_sd.c",
"tmio_mmc.h",
"tmio_mmc_core.c",
"toshsd.c",
"toshsd.h",
"uniphier-sd.c",
"usdhi6rol0.c",
"ushc.c",
"via-sdmmc.c",
"vub300.c",
"wbsd.c",
"wbsd.h",
"wmt-sdmmc.c"
],
"Subdirs": null
} |
| 61/2 | 2026/07/30 19:37 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 85903 output: 40 thoughts: 349 Thoughts: **Analyzing the Fuzzing Vector for nxpwifi** Okay, so I'm trying to figure out how syzkaller might be fuzzing the `nxpwifi` driver. My initial thought was that there's no virtual SDIO host controller, which throws a wrench in the typical SDIO setup I'd expect. Then I had a fleeting idea: could syzkaller be leveraging `mac80211_hwsim`? But no, `mac80211_hwsim` is a completely virtual WiFi driver, independent of `nxpwifi`. My next thought was maybe syzkaller is loading the `nxpwifi` module and then throwing netlink commands at it. But if the module loads and *no* device is actually probed, the `cfg80211` wiphy isn't created. Hmm. So, are there *other* ways the `nxpwifi` driver might be probed, besides the standard SDIO probing path? Time to double-check `nxpwifi_sdio_probe`. Alright, I started wondering if syzkaller is injecting SDIO devices somehow. Maybe through a generic PCI device that acts as an SDHCI controller, and then syzkaller injecting SDIO responses? No, that's not how syzkaller is set up. Wait, what if `nxpwifi` is *not* just an SDIO driver? Let's not make assumptions here. I need to broaden the scope of my investigation. I should check if there's any other file in `drivers/net/wireless/nxp/nxpwifi/` that registers a driver. I remember grepping for `module_` and only finding the SDIO driver. Okay, maybe it registers through a USB driver, or a PCI driver. I already grepped for `usb_register` or `pci_register_driver`... and found nothing. So, *could* `nxpwifi` be a virtual driver itself? Seems unlikely, but I should rule it out. Time to go back to `drivers/net/wireless/nxp/nxpwifi/main.c` and review it again. |
| 62/2 | 2026/07/30 19:37 | tool | grepper |
0mArgs:{
"Expression": "nxpwifi_init_module",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"Output": "drivers/net/wireless/nxp/nxpwifi/main.c=1649=static int\ndrivers/net/wireless/nxp/nxpwifi/main.c:1650:nxpwifi_init_module(void)\ndrivers/net/wireless/nxp/nxpwifi/main.c-1651-{\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c=1660=nxpwifi_cleanup_module(void)\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c-1666-\ndrivers/net/wireless/nxp/nxpwifi/main.c:1667:module_init(nxpwifi_init_module);\ndrivers/net/wireless/nxp/nxpwifi/main.c-1668-module_exit(nxpwifi_cleanup_module);\n"
} |
| 63/2 | 2026/07/30 19:37 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 86975 output: 33 thoughts: 153 Thoughts: **My Line of Inquiry** Okay, hold on a second. I need to re-evaluate what I'm looking at. The documentation states that `nxpwifi_init_module` *only* initializes debugfs, which seems very limited in scope. But hang on, is `nxpwifi` itself a library module? Yes, that's it! `nxpwifi` is the supporting library, and `nxpwifi_sdio` is the actual hardware-specific driver implementation. If `nxpwifi_sdio` is the *sole* driver using this library, and it explicitly targets SDIO hardware, I need to understand how syzkaller was able to fuzz it without direct SDIO access. How was this possible? I'm missing a piece of the puzzle. Right, there's the possibility that it utilizes a `syz_80211_inject_frame` interface to emulate aspects of the driver, but that relies on a wiphy! We would need a wiphy context to do that. Is there any other kernel module that uses the `nxpwifi` library? Okay, time to perform a code search to find what's actually calling `nxpwifi_register_dev`. This should reveal other users of this library module, and hopefully, how syzkaller managed to interact with the code. |
| 64/2 | 2026/07/30 19:37 | tool | grepper |
0mArgs:{
"Expression": "nxpwifi_register_dev",
"PathPrefix": "drivers/net/wireless/"
}Results: {
"Output": "drivers/net/wireless/nxp/nxpwifi/main.c=1415=nxpwifi_reinit_sw(struct nxpwifi_adapter *adapter)\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c-1462-\t * relevant information from the card. Some code extracted from\ndrivers/net/wireless/nxp/nxpwifi/main.c:1463:\t * nxpwifi_register_dev()\ndrivers/net/wireless/nxp/nxpwifi/main.c-1464-\t */\n--\ndrivers/net/wireless/nxp/nxpwifi/sdio.c=1625=nxpwifi_unregister_dev(struct nxpwifi_adapter *adapter)\n--\ndrivers/net/wireless/nxp/nxpwifi/sdio.c-1636-\ndrivers/net/wireless/nxp/nxpwifi/sdio.c:1637:static int nxpwifi_register_dev(struct nxpwifi_adapter *adapter)\ndrivers/net/wireless/nxp/nxpwifi/sdio.c-1638-{\n--\ndrivers/net/wireless/nxp/nxpwifi/sdio.c=2293=static struct nxpwifi_if_ops sdio_ops = {\n--\ndrivers/net/wireless/nxp/nxpwifi/sdio.c-2298-\t.prog_fw = nxpwifi_prog_fw_w_helper,\ndrivers/net/wireless/nxp/nxpwifi/sdio.c:2299:\t.register_dev = nxpwifi_register_dev,\ndrivers/net/wireless/nxp/nxpwifi/sdio.c-2300-\t.unregister_dev = nxpwifi_unregister_dev,\n"
} |
| 65/2 | 2026/07/30 19:37 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 87891 output: 35 thoughts: 344 Thoughts: **Unraveling the Syzkaller Connection to the NXP WiFi Driver** Okay, so I'm looking at `nxpwifi_register_dev`, and it's definitely only in `sdio.c`. That firmly establishes `nxpwifi` as solely an SDIO driver. But here's the kicker: QEMU, as far as I know, doesn't emulate the IW61x SDIO hardware directly. So how on earth did syzkaller manage to fuzz it? This has got me thinking. Could syzkaller be employing a virtual SDIO device within its setup? Let me investigate. I'll search syzkaller's codebase for something like `syz_sdio` or a related function. Hmm, what about something that would do it in `drivers/net/wireless/mac80211_hwsim.c`? No, that wouldn't make sense. Maybe syzkaller uses `mac80211_hwsim` to get packets in there, but `nxpwifi` is not `mac80211_hwsim`. Let me try again with `syz_80211_...`? Wait, if syzkaller actually *found* a bug in `nxpwifi`, it *has* to be reachable within a QEMU environment. This implies there is a path there. I have to figure out how it's getting there. Perhaps `nxpwifi` is acting as a virtual driver, after all? Okay, let me go back to the source code and re-examine `drivers/net/wireless/nxp/nxpwifi/Kconfig`. "This adds support for wireless adapters based on NXP 802.11n/ac chipsets." "NXP WiFi Driver for IW61x". I need to find something that I missed. Hold on... is there a `nxpwifi_virt` or something like that? Let me go into `drivers/net/wireless/nxp/nxpwifi/Makefile`. The pieces are here somewhere. It's got to be... |
| 66/2 | 2026/07/30 19:38 | tool | grepper |
0mError:no matches Args: {
"Expression": "virt",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/Makefile"
}Results: {
"error": "no matches"
} |
| 67/2 | 2026/07/30 19:38 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 88736 output: 42 thoughts: 148 Thoughts: **Analyzing the NXP WiFi SDIO Driver with Syzkaller** Okay, hold on a second... I'm pretty sure I recall `syzkaller` having a function, `syz_80211_inject_frame`, which is used to inject frames into `mac80211_hwsim`. But wait, the target here is the `nxpwifi` driver, which is an actual, physical device driver. How on earth is `syzkaller` fuzzing a real SDIO driver directly? That doesn't quite add up. My instinct is that `syzkaller` likely employs a different strategy here. It's improbable that it has direct control over SDIO in this scenario, so it must be leveraging either debugfs or sysfs file access to interact with the device. I think the key lies in understanding if the `nxpwifi` driver exposes any such interfaces that could potentially trigger the code in question. Given the bug is located within the `nxpwifi_wait_queue_complete` function, the next logical step is to determine the call sites for this particular function. Understanding where and how this function is invoked will provide critical context for the vulnerability and how syzkaller triggers it. |
| 68/2 | 2026/07/30 19:38 | tool | grepper |
0mArgs:{
"Expression": "nxpwifi_wait_queue_complete",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"Output": "drivers/net/wireless/nxp/nxpwifi/cmdevt.c=428=int nxpwifi_send_cmd(struct nxpwifi_private *priv, u16 cmd_no,\n--\ndrivers/net/wireless/nxp/nxpwifi/cmdevt.c-539-\t\tif (cmd_node-\u003ewait_q_enabled)\ndrivers/net/wireless/nxp/nxpwifi/cmdevt.c:540:\t\t\tret = nxpwifi_wait_queue_complete(adapter, cmd_node);\ndrivers/net/wireless/nxp/nxpwifi/cmdevt.c-541-\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/main.h=1265=int nxpwifi_copy_mcast_addr(struct nxpwifi_multicast_list *mlist,\ndrivers/net/wireless/nxp/nxpwifi/main.h-1266-\t\t\t struct net_device *dev);\ndrivers/net/wireless/nxp/nxpwifi/main.h:1267:int nxpwifi_wait_queue_complete(struct nxpwifi_adapter *adapter,\ndrivers/net/wireless/nxp/nxpwifi/main.h-1268-\t\t\t\tstruct cmd_ctrl_node *cmd_queued);\n--\ndrivers/net/wireless/nxp/nxpwifi/scan.c=1308=int nxpwifi_scan_networks(struct nxpwifi_private *priv,\n--\ndrivers/net/wireless/nxp/nxpwifi/scan.c-1381-\t\t\t\t\t \"wait internal scan\\n\");\ndrivers/net/wireless/nxp/nxpwifi/scan.c:1382:\t\t\t\tnxpwifi_wait_queue_complete(adapter, cmd_node);\ndrivers/net/wireless/nxp/nxpwifi/scan.c-1383-\t\t\t}\n--\ndrivers/net/wireless/nxp/nxpwifi/sta_cfg.c=20=int nxpwifi_copy_mcast_addr(struct nxpwifi_multicast_list *mlist,\n--\ndrivers/net/wireless/nxp/nxpwifi/sta_cfg.c-32-/* Wait queue completion handler */\ndrivers/net/wireless/nxp/nxpwifi/sta_cfg.c:33:int nxpwifi_wait_queue_complete(struct nxpwifi_adapter *adapter,\ndrivers/net/wireless/nxp/nxpwifi/sta_cfg.c-34-\t\t\t\tstruct cmd_ctrl_node *cmd_queued)\n"
} |
| 69/2 | 2026/07/30 19:38 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 89816 output: 42 thoughts: 181 Thoughts: **Investigating the Unexpected Call to `nxpwifi_wait_queue_complete`** Okay, so I'm seeing this call to `nxpwifi_wait_queue_complete`, and it's triggered when sending commands to the firmware. My immediate thought is, "Wait a minute, how can this even happen if there's no firmware *or* hardware?" It's a fundamental question. The whole premise seems off. Now, if `nxpwifi` is functioning as a legitimate driver, and we're dealing with QEMU, the hardware wouldn't be present, and therefore the driver shouldn't even be probed in the first place. That’s the crux. If the driver isn't probed, then no `nxpwifi_adapter` instance gets created. No adapter means no `wiphy` registration. And if there's no `wiphy` registered, then `cfg80211` *definitely* can't call into the `nxpwifi` driver. That's the standard Linux networking stack. So how on earth did syzkaller manage to navigate its way to this specific code path? This whole situation reeks of an unexpected entry point. That makes me think, could there be a virtual device creation mechanism within the `nxpwifi` driver itself? Perhaps it's creating a virtual hardware representation somehow. It's the only logical explanation I can think of. Time to dig deeper. I need to check `drivers/net/wireless/nxp/nxpwifi/debugfs.c`. That's likely where any debug-related functionality, or any virtual device creation would be. |
| 70/2 | 2026/07/30 19:38 | tool | grepper |
0mArgs:{
"Expression": "debugfs_create_",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/debugfs.c"
}Results: {
"Output": "drivers/net/wireless/nxp/nxpwifi/debugfs.c=970=nxpwifi_twt_information_write(struct file *file, const char __user *ubuf,\n--\ndrivers/net/wireless/nxp/nxpwifi/debugfs.c-997-\ndrivers/net/wireless/nxp/nxpwifi/debugfs.c:998:#define NXPWIFI_DFS_ADD_FILE(name) debugfs_create_file(#name, 0644, \\\ndrivers/net/wireless/nxp/nxpwifi/debugfs.c-999-\t\t\t\t priv-\u003edfs_dev_dir, priv, \\\n--\ndrivers/net/wireless/nxp/nxpwifi/debugfs.c=1042=nxpwifi_dev_debugfs_init(struct nxpwifi_private *priv)\n--\ndrivers/net/wireless/nxp/nxpwifi/debugfs.c-1046-\ndrivers/net/wireless/nxp/nxpwifi/debugfs.c:1047:\tpriv-\u003edfs_dev_dir = debugfs_create_dir(priv-\u003enetdev-\u003ename,\ndrivers/net/wireless/nxp/nxpwifi/debugfs.c-1048-\t\t\t\t\t nxpwifi_dfs_dir);\n--\ndrivers/net/wireless/nxp/nxpwifi/debugfs.c=1083=nxpwifi_debugfs_init(void)\n--\ndrivers/net/wireless/nxp/nxpwifi/debugfs.c-1085-\tif (!nxpwifi_dfs_dir)\ndrivers/net/wireless/nxp/nxpwifi/debugfs.c:1086:\t\tnxpwifi_dfs_dir = debugfs_create_dir(\"nxpwifi\", NULL);\ndrivers/net/wireless/nxp/nxpwifi/debugfs.c-1087-}\n"
} |
| 71/2 | 2026/07/30 19:38 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 90860 output: 35 thoughts: 238 Thoughts: **Debugging the nxpwifi Module Initialization** Okay, so `nxpwifi_debugfs_init` creates this debugfs directory, `/sys/kernel/debug/nxpwifi`. But `nxpwifi_dev_debugfs_init` needs the network device name, `priv->netdev->name`. So, the device has to be probed first, right? Hm, is there *any* other way this device could be brought up? I need to think this through. Could `nxpwifi` be a USB driver, somehow? Let me quickly scan for `usb_register`… nope, nothing there. Wait a second... could this be related to syzkaller fuzzing the SDIO subsystem somehow, using a generic SDIO host controller? Ah, QEMU has `sdhci-pci`. Can syzkaller even create a virtual SDIO card? No, there’s nothing like that in either QEMU or the kernel that I know of. Hang on... maybe `nxpwifi` isn't *just* SDIO? Let's go back and re-examine `drivers/net/wireless/nxp/nxpwifi/sdio.c`. Is there another file in there that could register the driver? I should search for `module_` across the entire `drivers/net/wireless/nxp/nxpwifi/` directory to be thorough. Let's see what that turns up. I need to be sure I'm not missing something obvious. |
| 72/2 | 2026/07/30 19:38 | tool | grepper |
0mArgs:{
"Expression": "module_",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"Output": "drivers/net/wireless/nxp/nxpwifi/main.c=1660=nxpwifi_cleanup_module(void)\n--\ndrivers/net/wireless/nxp/nxpwifi/main.c-1666-\ndrivers/net/wireless/nxp/nxpwifi/main.c:1667:module_init(nxpwifi_init_module);\ndrivers/net/wireless/nxp/nxpwifi/main.c:1668:module_exit(nxpwifi_cleanup_module);\ndrivers/net/wireless/nxp/nxpwifi/main.c-1669-\n--\ndrivers/net/wireless/nxp/nxpwifi/sdio.c=2293=static struct nxpwifi_if_ops sdio_ops = {\n--\ndrivers/net/wireless/nxp/nxpwifi/sdio.c-2320-\ndrivers/net/wireless/nxp/nxpwifi/sdio.c:2321:module_sdio_driver(nxpwifi_sdio);\ndrivers/net/wireless/nxp/nxpwifi/sdio.c-2322-\n"
} |
| 73/2 | 2026/07/30 19:38 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 91744 output: 27 thoughts: 39 Thoughts: Okay, let me think this through. **Analyzing the NXP WiFi SDIO Driver** Hmm, I'm looking at this code and immediately I spot `module_sdio_driver(nxpwifi_sdio)`. That's interesting. So, we're dealing with an SDIO-based driver for NXP WiFi, specifically `nxpwifi_sdio`. My immediate thought is, let me broaden the scope a little here. I should quickly check if there are any other drivers within that `drivers/net/wireless/nxp/` directory. It's good practice to get the full picture. Understanding the broader family of NXP WiFi drivers will give me context, and help me see if this driver stands alone or if it's part of a larger, potentially more complex, architecture. That quick overview of the directory will help me anticipate possible interactions and shared code. Okay, let's take a look. |
| 74/2 | 2026/07/30 19:38 | tool | codesearch-dir-index |
0mArgs:{
"Dir": "drivers/net/wireless/nxp/"
}Results: {
"Files": null,
"Subdirs": [
"nxpwifi"
]
} |
| 75/2 | 2026/07/30 19:38 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 92026 output: 45 thoughts: 118 Thoughts: **Investigating a Potential syzkaller-Reported Bug in `nxpwifi`** Okay, so syzkaller flagged a bug related to `nxpwifi`. My initial thought is to consider the possibility of indirect causes. Could the bug be in some global state, or perhaps a misconfiguration in debugfs that's exposed when `nxpwifi` is loaded? But, that's unlikely given the function mentioned: `nxpwifi_wait_queue_complete`. That suggests we're dealing with command completion, probably related to the firmware interaction. The issue then is how is it sending a command to the firmware in the first place? And without a physical device, no less. Perhaps this is a virtual driver of some kind? Time to check the source. Let's look at `drivers/net/wireless/nxp/nxpwifi/main.c` line 1649. That should reveal whether this is an actual hardware driver, a virtual interface, or something else entirely. |
| 76/2 | 2026/07/30 19:38 | tool | read-file |
0mArgs:{
"File": "drivers/net/wireless/nxp/nxpwifi/main.c",
"FirstLine": 1649,
"LineCount": 30
}Results: {
"Contents": "1649:\tstatic int\n1650:\tnxpwifi_init_module(void)\n1651:\t{\n1652:\t#ifdef CONFIG_DEBUG_FS\n1653:\t\tnxpwifi_debugfs_init();\n1654:\t#endif\n1655:\t\treturn 0;\n1656:\t}\n1657:\t\n1658:\t/* Module exit: remove debugfs if enabled. */\n1659:\tstatic void\n1660:\tnxpwifi_cleanup_module(void)\n1661:\t{\n1662:\t#ifdef CONFIG_DEBUG_FS\n1663:\t\tnxpwifi_debugfs_remove();\n1664:\t#endif\n1665:\t}\n1666:\t\n1667:\tmodule_init(nxpwifi_init_module);\n1668:\tmodule_exit(nxpwifi_cleanup_module);\n1669:\t\n1670:\tMODULE_AUTHOR(\"NXP International Ltd.\");\n1671:\tMODULE_DESCRIPTION(\"NXP WiFi Driver version \" VERSION);\n1672:\tMODULE_VERSION(VERSION);\n1673:\tMODULE_LICENSE(\"GPL\");\n"
} |
| 77/2 | 2026/07/30 19:38 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 92725 output: 40 thoughts: 2009 Thoughts: **Analyzing the Reachability of `nxpwifi` in a Virtualized Environment** Okay, so I'm trying to figure out how syzkaller even touched the `nxpwifi` SDIO driver. My initial thought was that it was using some trick, maybe injecting packets via `mac80211_hwsim`, but that's a dead end. Or perhaps a virtual SDIO host controller? I looked, but found nothing like that in the kernel source. No `syz_` pseudo-syscall either. Okay, so maybe it's not a virtual host, perhaps it's emulated hardware in QEMU. But QEMU doesn't emulate the NXP IW61x SDIO WiFi card, or any vendor-specific WiFi cards really. I even checked if `nxpwifi` might somehow be using USB, but I remember, it's exclusively an SDIO driver. That's a huge constraint. No emulated hardware means no fuzzing, right? So how the heck did syzkaller find a bug in `nxpwifi_wait_queue_complete`? That's what I'm trying to figure out. Could syzkaller have some way to simulate SDIO responses via the SDHCI controller? Wait, that's possible! If it interacts with the SDHCI controller's MMIO regions, it could trigger SDIO card detection, and potentially inject commands. But even then, I would expect to be fuzzing the `sdhci` driver, not the `nxpwifi` driver. For `nxpwifi` to be involved, the SDHCI driver needs to enumerate the IW61x and successfully match the vendor ID, and that would be a very complex state machine to emulate. But then, wait, maybe syzkaller *is* fuzzing the `nxpwifi` directly if there is some virtual SDIO bus! Wait, that's not possible. The upstream kernel doesn't have such a thing. That must be it, syzkaller *is* running on physical devices. Android phones, for example, which have the NXP WiFi chip. That makes sense! It means syzkaller can reach `nxpwifi` by sending cfg80211 commands or netlink messages on actual hardware. But wait, the prompt says "impossible to reach in virtualized environments," and `nxpwifi` is definitely a "vendor-specific driver" that requires actual hardware, which is not emulated. QEMU and GCE are out. So if syzkaller found the bug on an Android device, which is still possible, it's irrelevant for QEMU/GCE. The code is still unreachable in a virtualized environment. Let's do a final check. I looked at the `nxpwifi_init_module` and confirmed the driver registers itself via `module_sdio_driver`. Without the SDIO bus recognizing the hardware, the `probe` function is never called. No probe = no netdev, no wiphy, no user-space interface. Thus, there is literally no way to call `nxpwifi`'s functions in QEMU. The patch itself, which modifies core files, is unreachable in the context of QEMU. The driver is totally inaccessible. Let me check, is there any possibility `nxpwifi` is used by a virtual driver? Nope. Absolutely no trace of that. It's not linked to `mac80211_hwsim` either. Thus, this patch should be considered as not worth fuzzing. |
| 78/2 | 2026/07/30 19:38 | tool | grepper |
0mError:no matches Args: {
"Expression": "nxpwifi",
"PathPrefix": "drivers/net/wireless/mac80211_hwsim.c"
}Results: {
"error": "no matches"
} |
| 79/2 | 2026/07/30 19:38 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 95545 output: 36 thoughts: 65 Thoughts: Okay, here's my interpretation of those thoughts, tailored for an expert audience: **Investigating a Potential Network Driver** Hmm, negative, that initial path, `drivers/net/wireless/virtual/`, isn't what I'm looking for. That virtual directory just isn't present in the codebase. Let's redirect and think about this differently; could `drivers/net/wireless/nxp/nxpwifi/` possibly be structured as a loadable platform driver? That seems like a logical next avenue to explore given the naming. Since I'm thinking about platform drivers, it makes sense to go straight for the code, time to search the `nxpwifi` directory for instances of `platform_driver`. That's where I'll find my answer. |
| 80/2 | 2026/07/30 19:38 | tool | grepper |
0mError:no matches Args: {
"Expression": "platform_driver",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"error": "no matches"
} |
| 81/2 | 2026/07/30 19:38 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 95825 output: 35 thoughts: 10 Thoughts: Okay, here's my summary, tailored as requested: **Assessing the Landscape** Nope. That's not the direction I want to go. Wait a minute... what about considering the `virtio` standard? Perhaps that could provide a solution or a foundation. It merits some further thought. |
| 82/2 | 2026/07/30 19:38 | tool | grepper |
0mError:no matches Args: {
"Expression": "virtio",
"PathPrefix": "drivers/net/wireless/nxp/nxpwifi/"
}Results: {
"error": "no matches"
} |
| 83/2 | 2026/07/30 19:38 | llm | patch-evaluator |
0mModel:gemini-3.1-pro-preview Args: null Results: null Tokens: input: 95948 output: 121 thoughts: 511 Thoughts: **WorthFuzzing Decision for the NXP Wi-Fi Driver** Okay, so this is straightforward. The patch appears to be touching the `nxpwifi` driver. My initial assessment is that it's an SDIO driver, and a vendor-specific one at that, for the NXP IW61x chipset. Since QEMU, in its standard configuration, doesn't emulate this particular SDIO card, and there's no software-emulated equivalent – no `mac80211_hwsim` for SDIO cards, if you will – it's going to be impossible to trigger this code in a virtualized environment. Therefore, I need to flag this as not worth fuzzing. Just to be absolutely sure, I'll quickly double-check the prompt instructions. Yes, that matches perfectly: code paths unreachable in QEMU, especially vendor-specific drivers requiring non-emulated hardware, mean we should return `WorthFuzzing=false`. I'll quickly scan the syzkaller default config, just in case `CONFIG_NXPWIFI` is enabled. Even if it *is* enabled, without the physical card, it wouldn't be probed anyway, so it doesn't matter. Hmm, wait. Is there *any* possibility of probing `nxpwifi` via a software SDIO host? Something like `drivers/mmc/host/sdhci-of-aspeed-test.c` could be relevant, but wait, no. That's just a host controller; I still need the *card* itself. Is there something like `sdio-uart`? Nope. There's no virtual SDIO card driver in Linux. That eliminates any lingering doubts. Right, the conclusion is clear: this code is unreachable in QEMU. I need to formulate a clear, concise rationale for `set-results`. Something along the lines of: "The patch modifies the `nxpwifi` driver, which is a vendor-specific SDIO WiFi driver for NXP IW61x chipsets. Since standard QEMU does not emulate this specific physical SDIO hardware, and there is no virtualized software alternative (like `mac80211_hwsim`) that exercises this driver, the code paths are impossible to reach in virtualized environments like GCE or QEMU. Therefore, it cannot be effectively fuzzed." Okay, that's the logic. I'm confident in my assessment. Now I will proceed to call `set-results` with `WorthFuzzing=false`. |
| 84/2 | 2026/07/30 19:39 | tool | set-results |
0mArgs:{
"EnableConfigs": [],
"FocusSymbols": [],
"Reasoning": "The patch modifies the `nxpwifi` driver, which is a vendor-specific SDIO WiFi driver for NXP IW61x chipsets. Since standard QEMU does not emulate this specific physical SDIO hardware, and there is no virtualized software alternative that exercises this driver, the code paths are impossible to reach and probe in virtualized environments like GCE or QEMU. Therefore, it cannot be effectively fuzzed.",
"WorthFuzzing": false
}Results: {
"EnableConfigs": null,
"FocusSymbols": [],
"Reasoning": "The patch modifies the `nxpwifi` driver, which is a vendor-specific SDIO WiFi driver for NXP IW61x chipsets. Since standard QEMU does not emulate this specific physical SDIO hardware, and there is no virtualized software alternative that exercises this driver, the code paths are impossible to reach and probe in virtualized environments like GCE or QEMU. Therefore, it cannot be effectively fuzzed.",
"WorthFuzzing": false
} |
| Total Calls | Total Tokens | Avg Tokens | Total Duration (Seconds) | Avg Duration (Seconds) |
|---|
| Total Calls | Total Duration (Seconds) | Avg Duration (Seconds) |
|---|