[OnePlus 11] shootind5nukes:
I think the real problem we have is our regulatory domain. It isn't changed or modified very easily either on android. If you open terminal and run

iw reg get

You will see

OP594DL1:/ # iw reg get
global
country 00: DFS-UNSET
(2402 - 2472 @ 40), (6, 20), (N/A)
(2457 - 2482 @ 20), (6, 20), (N/A), AUTO-BW, PASSIVE-SCAN
(2474 - 2494 @ 20), (6, 20), (N/A), NO-OFDM, PASSIVE-SCAN
(5170 - 5250 @ 80), (6, 20), (N/A), AUTO-BW, PASSIVE-SCAN
(5250 - 5330 @ 80), (6, 20), (0 ms), DFS, AUTO-BW, PASSIVE-SCAN
(5490 - 5730 @ 160), (6, 20), (0 ms), DFS, PASSIVE-SCAN
(5735 - 5835 @ 80), (6, 20), (N/A), PASSIVE-SCAN
(57240 - 63720 @ 2160), (N/A, 0), (N/A)

phy#0 (self-managed)
country US: DFS-FCC
(2402 - 2472 @ 40), (6, 20), (N/A), AUTO-BW
(5170 - 5250 @ 80), (N/A, 20), (N/A), AUTO-BW
(5250 - 5330 @ 80), (N/A, 20), (0 ms), DFS, AUTO-BW
(5490 - 5710 @ 160), (N/A, 20), (0 ms), DFS, AUTO-BW
(5735 - 5835 @ 80), (N/A, 20), (N/A), AUTO-BW
(5925 - 7125 @ 320), (N/A, 24), (N/A), NO-OUTDOOR, AUTO-BW

You'll notice that the wifi driver(phy0) has it's own restrictions set. So now let's run

iw phy0 info

Now let's look for these lines under Band 4. Band 4 is 6Ghz.

Band 4

Frequencies:
* 5935 MHz [2] (disabled)
* 5955 MHz [1] (24.0 dBm) (no IR)
* 5975 MHz [5] (24.0 dBm) (no IR)
* 5995 MHz [9] (24.0 dBm) (no IR)
* 6015 MHz [13] (24.0 dBm) (no IR)
* 6035 MHz [17] (24.0 dBm) (no IR)
* 6055 MHz [21] (24.0 dBm) (no IR)
* 6075 MHz [25] (24.0 dBm) (no IR)
* 6095 MHz [29] (24.0 dBm) (no IR)
* 6115 MHz [33] (24.0 dBm) (no IR)
* 6135 MHz [37] (24.0 dBm) (no IR)
* 6155 MHz [41] (24.0 dBm) (no IR)
* 6175 MHz [45] (24.0 dBm) (no IR)
* 6195 MHz [49] (24.0 dBm) (no IR)
* 6215 MHz [53] (24.0 dBm) (no IR)
* 6235 MHz [57] (24.0 dBm) (no IR)
* 6255 MHz [61] (24.0 dBm) (no IR)
* 6275 MHz [65] (24.0 dBm) (no IR)
* 6295 MHz [69] (24.0 dBm) (no IR)
* 6315 MHz [73] (24.0 dBm) (no IR)
* 6335 MHz [77] (24.0 dBm) (no IR)
* 6355 MHz [81] (24.0 dBm) (no IR)
* 6375 MHz [85] (24.0 dBm) (no IR)
* 6395 MHz [89] (24.0 dBm) (no IR)
* 6415 MHz [93] (24.0 dBm) (no IR)
* 6435 MHz [97] (24.0 dBm) (no IR)
* 6455 MHz [101] (24.0 dBm) (no IR)
* 6475 MHz [105] (24.0 dBm) (no IR)
* 6495 MHz [109] (24.0 dBm) (no IR)
* 6515 MHz [113] (24.0 dBm) (no IR)
* 6535 MHz [117] (24.0 dBm) (no IR)
* 6555 MHz [121] (24.0 dBm) (no IR)
* 6575 MHz [125] (24.0 dBm) (no IR)
* 6595 MHz [129] (24.0 dBm) (no IR)
* 6615 MHz [133] (24.0 dBm) (no IR)
* 6635 MHz [137] (24.0 dBm) (no IR)
* 6655 MHz [141] (24.0 dBm) (no IR)
* 6675 MHz [145] (24.0 dBm) (no IR)
* 6695 MHz [149] (24.0 dBm) (no IR)
* 6715 MHz [153] (24.0 dBm) (no IR)
* 6735 MHz [157] (24.0 dBm) (no IR)
* 6755 MHz [161] (24.0 dBm) (no IR)
* 6775 MHz [165] (24.0 dBm) (no IR)
* 6795 MHz [169] (24.0 dBm) (no IR)
* 6815 MHz [173] (24.0 dBm) (no IR)
* 6835 MHz [177] (24.0 dBm) (no IR)
* 6855 MHz [181] (24.0 dBm) (no IR)
* 6875 MHz [185] (24.0 dBm) (no IR)
* 6895 MHz [189] (24.0 dBm) (no IR)
* 6915 MHz [193] (24.0 dBm) (no IR)
* 6935 MHz [197] (24.0 dBm) (no IR)
* 6955 MHz [201] (24.0 dBm) (no IR)
* 6975 MHz [205] (24.0 dBm) (no IR)
* 6995 MHz [209] (24.0 dBm) (no IR)
* 7015 MHz [213] (24.0 dBm) (no IR)
* 7035 MHz [217] (24.0 dBm) (no IR)
* 7055 MHz [221] (24.0 dBm) (no IR)
* 7075 MHz [225] (24.0 dBm) (no IR)
* 7095 MHz [229] (24.0 dBm) (no IR)
* 7115 MHz [233] (24.0 dBm) (no IR)

The (no IR) means that our device cannot use them. It really means it can't use them for hotspot but I think the driver itself has been programed to not use them at all. This stops our wifi from being as good as it can. Now on most linux platforms I can modify this. I have been unsuccessful in doing so on this device. I think we would need to be able to build a kernel and make the needed modifications there. It may also not be in the kernel at all, and could be in the modem part of our phone. I may look at that code later.

It could also be the fact that global has it's own settings and it's blocked the 6ghz bands.

OP594DL1:/ # iw reg get
global
country 00: DFS-UNSET
(2402 - 2472 @ 40), (6, 20), (N/A)
(2457 - 2482 @ 20), (6, 20), (N/A), AUTO-BW, PASSIVE-SCAN
(2474 - 2494 @ 20), (6, 20), (N/A), NO-OFDM, PASSIVE-SCAN
(5170 - 5250 @ 80), (6, 20), (N/A), AUTO-BW, PASSIVE-SCAN
(5250 - 5330 @ 80), (6, 20), (0 ms), DFS, AUTO-BW, PASSIVE-SCAN
(5490 - 5730 @ 160), (6, 20), (0 ms), DFS, PASSIVE-SCAN
(5735 - 5835 @ 80), (6, 20), (N/A), PASSIVE-SCAN
(57240 - 63720 @ 2160), (N/A, 0), (N/A)

I'm not sure but maybe global settings take priority over the wifi drivers settings. Maybe this is how Oneplus is blocking us from using them. Really looking at the phy0 settings we should be able to use wifi 7 and 6e on those bands just not use them for hotspot. The phy0 settings say the phone can work just fine on 320mhz and 160mhz. For this reason I don't beleive the wifi files have any impact at all on what we can do. As you have said our phones don't list 160Mhz in those files, but as you see I'm using 160mhz just fine.

The phy0 info says on Band 2 160Mhz will work(and we know it does)

Band 2

HE PHY Capabilities: (0x0c00000000000000000000):
HE40/HE80/5GHz
HE160/5GHz

And for band 4(6ghz). Note: Band 3 doesn't exist. Band 1,2,4

Band 4

EHT PHY Capabilities: (0x4200000000000000):
320MHz in 6GHz Supported
SU Beamformee
EHT MCS/NSS: (0x00000000000000000000000000):
EHT bw <= 80 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw <= 80 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw=160 MHz, max NSS for MCS 12-13: Rx=0, Tx=0
EHT bw=320 MHz, max NSS for MCS 8-9: Rx=0, Tx=0
EHT bw=320 MHz, max NSS for MCS 10-11: Rx=0, Tx=0
EHT bw=320 MHz, max NSS for MCS 12-13: Rx=0, Tx=0

Like I said, this makes me think that the global settings(regulatory domain world:00) under "iw reg get" only allow settings from phy0 to work that aren't in disagreement with the 00 regulatory domain. I'm assuming we'd need to change the global regulatory domain to let's say US for it to work. Running iw reg set US doesn't change anything though, which is odd. On linux that would change your domain to whichever country you set it, which needs to be set to the country you are operating your router/device in.