142 void ieee80211_assign_tid_tx(struct sta_info *sta, int tid,  in ieee80211_assign_tid_tx()  argument
145 	lockdep_assert_held(&sta->ampdu_mlme.mtx);  in ieee80211_assign_tid_tx()
146 	lockdep_assert_held(&sta->lock);  in ieee80211_assign_tid_tx()
147 	rcu_assign_pointer(sta->ampdu_mlme.tid_tx[tid], tid_tx);  in ieee80211_assign_tid_tx()
190 ieee80211_agg_stop_txq(struct sta_info *sta, int tid)  in ieee80211_agg_stop_txq()  argument
192 	struct ieee80211_txq *txq = sta->sta.txq[tid];  in ieee80211_agg_stop_txq()
211 ieee80211_agg_start_txq(struct sta_info *sta, int tid, bool enable)  in ieee80211_agg_start_txq()  argument
213 	struct ieee80211_txq *txq = sta->sta.txq[tid];  in ieee80211_agg_start_txq()
216 	lockdep_assert_held(&sta->ampdu_mlme.mtx);  in ieee80211_agg_start_txq()
231 	schedule_and_wake_txq(sta->sdata->local, txqi);  in ieee80211_agg_start_txq()
270 static void ieee80211_remove_tid_tx(struct sta_info *sta, int tid)  in ieee80211_remove_tid_tx()  argument
274 	lockdep_assert_held(&sta->ampdu_mlme.mtx);  in ieee80211_remove_tid_tx()
275 	lockdep_assert_held(&sta->lock);  in ieee80211_remove_tid_tx()
277 	tid_tx = rcu_dereference_protected_tid_tx(sta, tid);  in ieee80211_remove_tid_tx()
289 	ieee80211_agg_splice_packets(sta->sdata, tid_tx, tid);  in ieee80211_remove_tid_tx()
292 	ieee80211_assign_tid_tx(sta, tid, NULL);  in ieee80211_remove_tid_tx()
294 	ieee80211_agg_splice_finish(sta->sdata, tid);  in ieee80211_remove_tid_tx()
299 int ___ieee80211_stop_tx_ba_session(struct sta_info *sta, u16 tid,  in ___ieee80211_stop_tx_ba_session()  argument
302 	struct ieee80211_local *local = sta->local;  in ___ieee80211_stop_tx_ba_session()
305 		.sta = &sta->sta,  in ___ieee80211_stop_tx_ba_session()
314 	lockdep_assert_held(&sta->ampdu_mlme.mtx);  in ___ieee80211_stop_tx_ba_session()
330 	spin_lock_bh(&sta->lock);  in ___ieee80211_stop_tx_ba_session()
333 	tid_tx = sta->ampdu_mlme.tid_start_tx[tid];  in ___ieee80211_stop_tx_ba_session()
335 	sta->ampdu_mlme.tid_start_tx[tid] = NULL;  in ___ieee80211_stop_tx_ba_session()
337 	tid_tx = rcu_dereference_protected_tid_tx(sta, tid);  in ___ieee80211_stop_tx_ba_session()
339 		spin_unlock_bh(&sta->lock);  in ___ieee80211_stop_tx_ba_session()
348 		spin_unlock_bh(&sta->lock);  in ___ieee80211_stop_tx_ba_session()
352 		ret = drv_ampdu_action(local, sta->sdata, &params);  in ___ieee80211_stop_tx_ba_session()
359 		ieee80211_assign_tid_tx(sta, tid, NULL);  in ___ieee80211_stop_tx_ba_session()
360 		spin_unlock_bh(&sta->lock);  in ___ieee80211_stop_tx_ba_session()
367 	ieee80211_agg_stop_txq(sta, tid);  in ___ieee80211_stop_tx_ba_session()
369 	spin_unlock_bh(&sta->lock);  in ___ieee80211_stop_tx_ba_session()
371 	ht_dbg(sta->sdata, "Tx BA session stop requested for %pM tid %u\n",  in ___ieee80211_stop_tx_ba_session()
372 	       sta->sta.addr, tid);  in ___ieee80211_stop_tx_ba_session()
404 	ret = drv_ampdu_action(local, sta->sdata, &params);  in ___ieee80211_stop_tx_ba_session()
435 	struct sta_info *sta = tid_tx->sta;  in sta_addba_resp_timer_expired()  local
440 		ht_dbg(sta->sdata,  in sta_addba_resp_timer_expired()
442 		       sta->sta.addr, tid);  in sta_addba_resp_timer_expired()
446 	ht_dbg(sta->sdata, "addBA response timer expired on %pM tid %d\n",  in sta_addba_resp_timer_expired()
447 	       sta->sta.addr, tid);  in sta_addba_resp_timer_expired()
449 	ieee80211_stop_tx_ba_session(&sta->sta, tid);  in sta_addba_resp_timer_expired()
452 static void ieee80211_send_addba_with_timeout(struct sta_info *sta,  in ieee80211_send_addba_with_timeout()  argument
455 	struct ieee80211_sub_if_data *sdata = sta->sdata;  in ieee80211_send_addba_with_timeout()
456 	struct ieee80211_local *local = sta->local;  in ieee80211_send_addba_with_timeout()
464 	lockdep_assert_held(&sta->ampdu_mlme.mtx);  in ieee80211_send_addba_with_timeout()
469 	       sta->sta.addr, tid);  in ieee80211_send_addba_with_timeout()
471 	spin_lock_bh(&sta->lock);  in ieee80211_send_addba_with_timeout()
472 	sta->ampdu_mlme.last_addba_req_time[tid] = jiffies;  in ieee80211_send_addba_with_timeout()
473 	sta->ampdu_mlme.addba_req_num[tid]++;  in ieee80211_send_addba_with_timeout()
474 	spin_unlock_bh(&sta->lock);  in ieee80211_send_addba_with_timeout()
476 	if (sta->sta.deflink.he_cap.has_he) {  in ieee80211_send_addba_with_timeout()
489 	ieee80211_send_addba_request(sdata, sta->sta.addr, tid,  in ieee80211_send_addba_with_timeout()
496 void ieee80211_tx_ba_session_handle_start(struct sta_info *sta, int tid)  in ieee80211_tx_ba_session_handle_start()  argument
499 	struct ieee80211_local *local = sta->local;  in ieee80211_tx_ba_session_handle_start()
502 		.sta = &sta->sta,  in ieee80211_tx_ba_session_handle_start()
511 	tid_tx = rcu_dereference_protected_tid_tx(sta, tid);  in ieee80211_tx_ba_session_handle_start()
528 	sdata = sta->sdata;  in ieee80211_tx_ba_session_handle_start()
529 	params.ssn = sta->tid_seq[tid] >> 4;  in ieee80211_tx_ba_session_handle_start()
547 		       sta->sta.addr, tid);  in ieee80211_tx_ba_session_handle_start()
548 		spin_lock_bh(&sta->lock);  in ieee80211_tx_ba_session_handle_start()
550 		ieee80211_assign_tid_tx(sta, tid, NULL);  in ieee80211_tx_ba_session_handle_start()
552 		spin_unlock_bh(&sta->lock);  in ieee80211_tx_ba_session_handle_start()
554 		ieee80211_agg_start_txq(sta, tid, false);  in ieee80211_tx_ba_session_handle_start()
560 	ieee80211_send_addba_with_timeout(sta, tid_tx);  in ieee80211_tx_ba_session_handle_start()
566 	struct sta_info *sta = container_of(pubsta, struct sta_info, sta);  in ieee80211_refresh_tx_agg_session_timer()  local
572 	tid_tx = rcu_dereference(sta->ampdu_mlme.tid_tx[tid]);  in ieee80211_refresh_tx_agg_session_timer()
587 	struct sta_info *sta = tid_tx->sta;  in sta_tx_agg_session_timer_expired()  local
601 	ht_dbg(sta->sdata, "tx session timer expired on %pM tid %d\n",  in sta_tx_agg_session_timer_expired()
602 	       sta->sta.addr, tid);  in sta_tx_agg_session_timer_expired()
604 	ieee80211_stop_tx_ba_session(&sta->sta, tid);  in sta_tx_agg_session_timer_expired()
610 	struct sta_info *sta = container_of(pubsta, struct sta_info, sta);  in ieee80211_start_tx_ba_session()  local
611 	struct ieee80211_sub_if_data *sdata = sta->sdata;  in ieee80211_start_tx_ba_session()
618 	if (WARN(sta->reserved_tid == tid,  in ieee80211_start_tx_ba_session()
623 	    sta->sdata->vif.bss_conf.chandef.chan->band != NL80211_BAND_6GHZ)  in ieee80211_start_tx_ba_session()
647 	if (test_sta_flag(sta, WLAN_STA_BLOCK_BA)) {  in ieee80211_start_tx_ba_session()
650 		       sta->sta.addr, tid);  in ieee80211_start_tx_ba_session()
654 	if (test_sta_flag(sta, WLAN_STA_MFP) &&  in ieee80211_start_tx_ba_session()
655 	    !test_sta_flag(sta, WLAN_STA_AUTHORIZED)) {  in ieee80211_start_tx_ba_session()
658 		       sta->sta.addr, tid);  in ieee80211_start_tx_ba_session()
674 	if (sta->sdata->vif.type == NL80211_IFTYPE_ADHOC &&  in ieee80211_start_tx_ba_session()
675 	    !sta->sta.deflink.ht_cap.ht_supported) {  in ieee80211_start_tx_ba_session()
682 	spin_lock_bh(&sta->lock);  in ieee80211_start_tx_ba_session()
685 	if (sta->ampdu_mlme.addba_req_num[tid] > HT_AGG_MAX_RETRIES) {  in ieee80211_start_tx_ba_session()
695 	if (sta->ampdu_mlme.addba_req_num[tid] > HT_AGG_BURST_RETRIES &&  in ieee80211_start_tx_ba_session()
696 	    time_before(jiffies, sta->ampdu_mlme.last_addba_req_time[tid] +  in ieee80211_start_tx_ba_session()
700 		       sta->ampdu_mlme.addba_req_num[tid], sta->sta.addr, tid);  in ieee80211_start_tx_ba_session()
705 	tid_tx = rcu_dereference_protected_tid_tx(sta, tid);  in ieee80211_start_tx_ba_session()
707 	if (tid_tx || sta->ampdu_mlme.tid_start_tx[tid]) {  in ieee80211_start_tx_ba_session()
710 		       sta->sta.addr, tid);  in ieee80211_start_tx_ba_session()
726 	tid_tx->sta = sta;  in ieee80211_start_tx_ba_session()
737 	sta->ampdu_mlme.dialog_token_allocator++;  in ieee80211_start_tx_ba_session()
738 	tid_tx->dialog_token = sta->ampdu_mlme.dialog_token_allocator;  in ieee80211_start_tx_ba_session()
744 	sta->ampdu_mlme.tid_start_tx[tid] = tid_tx;  in ieee80211_start_tx_ba_session()
746 	ieee80211_queue_work(&local->hw, &sta->ampdu_mlme.work);  in ieee80211_start_tx_ba_session()
750 	spin_unlock_bh(&sta->lock);  in ieee80211_start_tx_ba_session()
756 					 struct sta_info *sta, u16 tid)  in ieee80211_agg_tx_operational()  argument
760 		.sta = &sta->sta,  in ieee80211_agg_tx_operational()
767 	lockdep_assert_held(&sta->ampdu_mlme.mtx);  in ieee80211_agg_tx_operational()
769 	tid_tx = rcu_dereference_protected_tid_tx(sta, tid);  in ieee80211_agg_tx_operational()
773 	ht_dbg(sta->sdata, "Aggregation is on for %pM tid %d\n",  in ieee80211_agg_tx_operational()
774 	       sta->sta.addr, tid);  in ieee80211_agg_tx_operational()
776 	drv_ampdu_action(local, sta->sdata, &params);  in ieee80211_agg_tx_operational()
782 	spin_lock_bh(&sta->lock);  in ieee80211_agg_tx_operational()
784 	ieee80211_agg_splice_packets(sta->sdata, tid_tx, tid);  in ieee80211_agg_tx_operational()
791 	ieee80211_agg_splice_finish(sta->sdata, tid);  in ieee80211_agg_tx_operational()
793 	spin_unlock_bh(&sta->lock);  in ieee80211_agg_tx_operational()
795 	ieee80211_agg_start_txq(sta, tid, true);  in ieee80211_agg_tx_operational()
798 void ieee80211_start_tx_ba_cb(struct sta_info *sta, int tid,  in ieee80211_start_tx_ba_cb()  argument
801 	struct ieee80211_sub_if_data *sdata = sta->sdata;  in ieee80211_start_tx_ba_cb()
804 	lockdep_assert_held(&sta->ampdu_mlme.mtx);  in ieee80211_start_tx_ba_cb()
814 		ieee80211_send_addba_with_timeout(sta, tid_tx);  in ieee80211_start_tx_ba_cb()
820 		ieee80211_agg_tx_operational(local, sta, tid);  in ieee80211_start_tx_ba_cb()
825 			const u8 *ra, u16 tid, struct sta_info **sta)  in ieee80211_lookup_tid_tx()  argument
835 	*sta = sta_info_get_bss(sdata, ra);  in ieee80211_lookup_tid_tx()
836 	if (!*sta) {  in ieee80211_lookup_tid_tx()
841 	tid_tx = rcu_dereference((*sta)->ampdu_mlme.tid_tx[tid]);  in ieee80211_lookup_tid_tx()
854 	struct sta_info *sta;  in ieee80211_start_tx_ba_cb_irqsafe()  local
860 	tid_tx = ieee80211_lookup_tid_tx(sdata, ra, tid, &sta);  in ieee80211_start_tx_ba_cb_irqsafe()
865 	ieee80211_queue_work(&local->hw, &sta->ampdu_mlme.work);  in ieee80211_start_tx_ba_cb_irqsafe()
871 int __ieee80211_stop_tx_ba_session(struct sta_info *sta, u16 tid,  in __ieee80211_stop_tx_ba_session()  argument
876 	mutex_lock(&sta->ampdu_mlme.mtx);  in __ieee80211_stop_tx_ba_session()
878 	ret = ___ieee80211_stop_tx_ba_session(sta, tid, reason);  in __ieee80211_stop_tx_ba_session()
880 	mutex_unlock(&sta->ampdu_mlme.mtx);  in __ieee80211_stop_tx_ba_session()
887 	struct sta_info *sta = container_of(pubsta, struct sta_info, sta);  in ieee80211_stop_tx_ba_session()  local
888 	struct ieee80211_sub_if_data *sdata = sta->sdata;  in ieee80211_stop_tx_ba_session()
901 	spin_lock_bh(&sta->lock);  in ieee80211_stop_tx_ba_session()
902 	tid_tx = rcu_dereference_protected_tid_tx(sta, tid);  in ieee80211_stop_tx_ba_session()
909 	WARN(sta->reserved_tid == tid,  in ieee80211_stop_tx_ba_session()
919 	ieee80211_queue_work(&local->hw, &sta->ampdu_mlme.work);  in ieee80211_stop_tx_ba_session()
922 	spin_unlock_bh(&sta->lock);  in ieee80211_stop_tx_ba_session()
927 void ieee80211_stop_tx_ba_cb(struct sta_info *sta, int tid,  in ieee80211_stop_tx_ba_cb()  argument
930 	struct ieee80211_sub_if_data *sdata = sta->sdata;  in ieee80211_stop_tx_ba_cb()
935 	       sta->sta.addr, tid);  in ieee80211_stop_tx_ba_cb()
937 	spin_lock_bh(&sta->lock);  in ieee80211_stop_tx_ba_cb()
942 		       sta->sta.addr, tid);  in ieee80211_stop_tx_ba_cb()
949 	ieee80211_remove_tid_tx(sta, tid);  in ieee80211_stop_tx_ba_cb()
953 	spin_unlock_bh(&sta->lock);  in ieee80211_stop_tx_ba_cb()
956 		ieee80211_agg_start_txq(sta, tid, false);  in ieee80211_stop_tx_ba_cb()
959 		ieee80211_send_delba(sdata, sta->sta.addr, tid,  in ieee80211_stop_tx_ba_cb()
968 	struct sta_info *sta;  in ieee80211_stop_tx_ba_cb_irqsafe()  local
974 	tid_tx = ieee80211_lookup_tid_tx(sdata, ra, tid, &sta);  in ieee80211_stop_tx_ba_cb_irqsafe()
979 	ieee80211_queue_work(&local->hw, &sta->ampdu_mlme.work);  in ieee80211_stop_tx_ba_cb_irqsafe()
987 				  struct sta_info *sta,  in ieee80211_process_addba_resp()  argument
1002 	txq = sta->sta.txq[tid];  in ieee80211_process_addba_resp()
1006 	mutex_lock(&sta->ampdu_mlme.mtx);  in ieee80211_process_addba_resp()
1008 	tid_tx = rcu_dereference_protected_tid_tx(sta, tid);  in ieee80211_process_addba_resp()
1013 		ht_dbg(sta->sdata, "wrong addBA response token, %pM tid %d\n",  in ieee80211_process_addba_resp()
1014 		       sta->sta.addr, tid);  in ieee80211_process_addba_resp()
1020 	ht_dbg(sta->sdata, "switched off addBA timer for %pM tid %d\n",  in ieee80211_process_addba_resp()
1021 	       sta->sta.addr, tid);  in ieee80211_process_addba_resp()
1030 		ht_dbg(sta->sdata,  in ieee80211_process_addba_resp()
1032 		       sta->sta.addr, tid);  in ieee80211_process_addba_resp()
1054 			ieee80211_agg_tx_operational(local, sta, tid);  in ieee80211_process_addba_resp()
1056 		sta->ampdu_mlme.addba_req_num[tid] = 0;  in ieee80211_process_addba_resp()
1068 		___ieee80211_stop_tx_ba_session(sta, tid, AGG_STOP_DECLINED);  in ieee80211_process_addba_resp()
1072 	mutex_unlock(&sta->ampdu_mlme.mtx);  in ieee80211_process_addba_resp()