xref: /linux/net/mac80211/ht.c (revision 5ea5880764cbb164afb17a62e76ca75dc371409d)
1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  * HT handling
4  *
5  * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
6  * Copyright 2002-2005, Instant802 Networks, Inc.
7  * Copyright 2005-2006, Devicescape Software, Inc.
8  * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
9  * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
10  * Copyright 2007-2010, Intel Corporation
11  * Copyright 2017	Intel Deutschland GmbH
12  * Copyright(c) 2020-2026 Intel Corporation
13  */
14 
15 #include <linux/ieee80211.h>
16 #include <linux/export.h>
17 #include <net/mac80211.h>
18 #include "ieee80211_i.h"
19 #include "rate.h"
20 
21 static void __check_htcap_disable(struct ieee80211_ht_cap *ht_capa,
22 				  struct ieee80211_ht_cap *ht_capa_mask,
23 				  struct ieee80211_sta_ht_cap *ht_cap,
24 				  u16 flag)
25 {
26 	__le16 le_flag = cpu_to_le16(flag);
27 	if (ht_capa_mask->cap_info & le_flag) {
28 		if (!(ht_capa->cap_info & le_flag))
29 			ht_cap->cap &= ~flag;
30 	}
31 }
32 
33 static void __check_htcap_enable(struct ieee80211_ht_cap *ht_capa,
34 				  struct ieee80211_ht_cap *ht_capa_mask,
35 				  struct ieee80211_sta_ht_cap *ht_cap,
36 				  u16 flag)
37 {
38 	__le16 le_flag = cpu_to_le16(flag);
39 
40 	if ((ht_capa_mask->cap_info & le_flag) &&
41 	    (ht_capa->cap_info & le_flag))
42 		ht_cap->cap |= flag;
43 }
44 
45 void ieee80211_apply_htcap_overrides(struct ieee80211_sub_if_data *sdata,
46 				     struct ieee80211_sta_ht_cap *ht_cap)
47 {
48 	struct ieee80211_ht_cap *ht_capa, *ht_capa_mask;
49 	u8 *scaps, *smask;
50 	int i;
51 
52 	if (!ht_cap->ht_supported)
53 		return;
54 
55 	switch (sdata->vif.type) {
56 	case NL80211_IFTYPE_STATION:
57 		ht_capa = &sdata->u.mgd.ht_capa;
58 		ht_capa_mask = &sdata->u.mgd.ht_capa_mask;
59 		break;
60 	case NL80211_IFTYPE_ADHOC:
61 		ht_capa = &sdata->u.ibss.ht_capa;
62 		ht_capa_mask = &sdata->u.ibss.ht_capa_mask;
63 		break;
64 	default:
65 		WARN_ON_ONCE(1);
66 		return;
67 	}
68 
69 	scaps = (u8 *)(&ht_capa->mcs.rx_mask);
70 	smask = (u8 *)(&ht_capa_mask->mcs.rx_mask);
71 
72 	/* NOTE:  If you add more over-rides here, update register_hw
73 	 * ht_capa_mod_mask logic in main.c as well.
74 	 * And, if this method can ever change ht_cap.ht_supported, fix
75 	 * the check in ieee80211_add_ht_ie.
76 	 */
77 
78 	/* check for HT over-rides, MCS rates first. */
79 	for (i = 0; i < IEEE80211_HT_MCS_MASK_LEN; i++) {
80 		u8 m = smask[i];
81 		ht_cap->mcs.rx_mask[i] &= ~m; /* turn off all masked bits */
82 		/* Add back rates that are supported */
83 		ht_cap->mcs.rx_mask[i] |= (m & scaps[i]);
84 	}
85 
86 	/* Force removal of HT-40 capabilities? */
87 	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
88 			      IEEE80211_HT_CAP_SUP_WIDTH_20_40);
89 	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
90 			      IEEE80211_HT_CAP_SGI_40);
91 
92 	/* Allow user to disable SGI-20 (SGI-40 is handled above) */
93 	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
94 			      IEEE80211_HT_CAP_SGI_20);
95 
96 	/* Allow user to disable the max-AMSDU bit. */
97 	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
98 			      IEEE80211_HT_CAP_MAX_AMSDU);
99 
100 	/* Allow user to disable LDPC */
101 	__check_htcap_disable(ht_capa, ht_capa_mask, ht_cap,
102 			      IEEE80211_HT_CAP_LDPC_CODING);
103 
104 	/* Allow user to enable 40 MHz intolerant bit. */
105 	__check_htcap_enable(ht_capa, ht_capa_mask, ht_cap,
106 			     IEEE80211_HT_CAP_40MHZ_INTOLERANT);
107 
108 	/* Allow user to enable TX STBC bit  */
109 	__check_htcap_enable(ht_capa, ht_capa_mask, ht_cap,
110 			     IEEE80211_HT_CAP_TX_STBC);
111 
112 	/* Allow user to configure RX STBC bits */
113 	if (ht_capa_mask->cap_info & cpu_to_le16(IEEE80211_HT_CAP_RX_STBC))
114 		ht_cap->cap |= le16_to_cpu(ht_capa->cap_info) &
115 					IEEE80211_HT_CAP_RX_STBC;
116 
117 	/* Allow user to decrease AMPDU factor */
118 	if (ht_capa_mask->ampdu_params_info &
119 	    IEEE80211_HT_AMPDU_PARM_FACTOR) {
120 		u8 n = ht_capa->ampdu_params_info &
121 		       IEEE80211_HT_AMPDU_PARM_FACTOR;
122 		if (n < ht_cap->ampdu_factor)
123 			ht_cap->ampdu_factor = n;
124 	}
125 
126 	/* Allow the user to increase AMPDU density. */
127 	if (ht_capa_mask->ampdu_params_info &
128 	    IEEE80211_HT_AMPDU_PARM_DENSITY) {
129 		u8 n = (ht_capa->ampdu_params_info &
130 			IEEE80211_HT_AMPDU_PARM_DENSITY)
131 			>> IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT;
132 		if (n > ht_cap->ampdu_density)
133 			ht_cap->ampdu_density = n;
134 	}
135 }
136 
137 
138 bool ieee80211_ht_cap_ie_to_sta_ht_cap(struct ieee80211_sub_if_data *sdata,
139 				       const struct ieee80211_sta_ht_cap *own_cap_ptr,
140 				       const struct ieee80211_ht_cap *ht_cap_ie,
141 				       struct link_sta_info *link_sta)
142 {
143 	struct ieee80211_bss_conf *link_conf;
144 	struct sta_info *sta = link_sta->sta;
145 	struct ieee80211_sta_ht_cap ht_cap, own_cap;
146 	u8 ampdu_info, tx_mcs_set_cap;
147 	int i, max_tx_streams;
148 	bool changed;
149 	enum ieee80211_sta_rx_bandwidth bw;
150 	enum nl80211_chan_width width;
151 
152 	memset(&ht_cap, 0, sizeof(ht_cap));
153 
154 	if (!ht_cap_ie || !own_cap_ptr->ht_supported)
155 		goto apply;
156 
157 	/* NDI station are using the capabilities from the NMI station */
158 	if (WARN_ON_ONCE(sdata->vif.type == NL80211_IFTYPE_NAN_DATA))
159 		return 0;
160 
161 	ht_cap.ht_supported = true;
162 
163 	own_cap = *own_cap_ptr;
164 
165 	/*
166 	 * If user has specified capability over-rides, take care
167 	 * of that if the station we're setting up is the AP or TDLS peer that
168 	 * we advertised a restricted capability set to. Override
169 	 * our own capabilities and then use those below.
170 	 */
171 	if (sdata->vif.type == NL80211_IFTYPE_STATION ||
172 	    sdata->vif.type == NL80211_IFTYPE_ADHOC)
173 		ieee80211_apply_htcap_overrides(sdata, &own_cap);
174 
175 	/*
176 	 * The bits listed in this expression should be
177 	 * the same for the peer and us, if the station
178 	 * advertises more then we can't use those thus
179 	 * we mask them out.
180 	 */
181 	ht_cap.cap = le16_to_cpu(ht_cap_ie->cap_info) &
182 		(own_cap.cap | ~(IEEE80211_HT_CAP_LDPC_CODING |
183 				 IEEE80211_HT_CAP_SUP_WIDTH_20_40 |
184 				 IEEE80211_HT_CAP_GRN_FLD |
185 				 IEEE80211_HT_CAP_SGI_20 |
186 				 IEEE80211_HT_CAP_SGI_40 |
187 				 IEEE80211_HT_CAP_DSSSCCK40));
188 
189 	/*
190 	 * The STBC bits are asymmetric -- if we don't have
191 	 * TX then mask out the peer's RX and vice versa.
192 	 */
193 	if (!(own_cap.cap & IEEE80211_HT_CAP_TX_STBC))
194 		ht_cap.cap &= ~IEEE80211_HT_CAP_RX_STBC;
195 	if (!(own_cap.cap & IEEE80211_HT_CAP_RX_STBC))
196 		ht_cap.cap &= ~IEEE80211_HT_CAP_TX_STBC;
197 
198 	ampdu_info = ht_cap_ie->ampdu_params_info;
199 	ht_cap.ampdu_factor =
200 		ampdu_info & IEEE80211_HT_AMPDU_PARM_FACTOR;
201 	ht_cap.ampdu_density =
202 		(ampdu_info & IEEE80211_HT_AMPDU_PARM_DENSITY) >> 2;
203 
204 	/* own MCS TX capabilities */
205 	tx_mcs_set_cap = own_cap.mcs.tx_params;
206 
207 	/* Copy peer MCS TX capabilities, the driver might need them. */
208 	ht_cap.mcs.tx_params = ht_cap_ie->mcs.tx_params;
209 
210 	/* can we TX with MCS rates? */
211 	if (!(tx_mcs_set_cap & IEEE80211_HT_MCS_TX_DEFINED))
212 		goto apply;
213 
214 	/* Counting from 0, therefore +1 */
215 	if (tx_mcs_set_cap & IEEE80211_HT_MCS_TX_RX_DIFF)
216 		max_tx_streams =
217 			((tx_mcs_set_cap & IEEE80211_HT_MCS_TX_MAX_STREAMS_MASK)
218 				>> IEEE80211_HT_MCS_TX_MAX_STREAMS_SHIFT) + 1;
219 	else
220 		max_tx_streams = IEEE80211_HT_MCS_TX_MAX_STREAMS;
221 
222 	/*
223 	 * 802.11n-2009 20.3.5 / 20.6 says:
224 	 * - indices 0 to 7 and 32 are single spatial stream
225 	 * - 8 to 31 are multiple spatial streams using equal modulation
226 	 *   [8..15 for two streams, 16..23 for three and 24..31 for four]
227 	 * - remainder are multiple spatial streams using unequal modulation
228 	 */
229 	for (i = 0; i < max_tx_streams; i++)
230 		ht_cap.mcs.rx_mask[i] =
231 			own_cap.mcs.rx_mask[i] & ht_cap_ie->mcs.rx_mask[i];
232 
233 	if (tx_mcs_set_cap & IEEE80211_HT_MCS_TX_UNEQUAL_MODULATION)
234 		for (i = IEEE80211_HT_MCS_UNEQUAL_MODULATION_START_BYTE;
235 		     i < IEEE80211_HT_MCS_MASK_LEN; i++)
236 			ht_cap.mcs.rx_mask[i] =
237 				own_cap.mcs.rx_mask[i] &
238 					ht_cap_ie->mcs.rx_mask[i];
239 
240 	/* handle MCS rate 32 too */
241 	if (own_cap.mcs.rx_mask[32/8] & ht_cap_ie->mcs.rx_mask[32/8] & 1)
242 		ht_cap.mcs.rx_mask[32/8] |= 1;
243 
244 	/* set Rx highest rate */
245 	ht_cap.mcs.rx_highest = ht_cap_ie->mcs.rx_highest;
246 
247 	if (ht_cap.cap & IEEE80211_HT_CAP_MAX_AMSDU)
248 		link_sta->pub->agg.max_amsdu_len = IEEE80211_MAX_MPDU_LEN_HT_7935;
249 	else
250 		link_sta->pub->agg.max_amsdu_len = IEEE80211_MAX_MPDU_LEN_HT_3839;
251 
252 	ieee80211_sta_recalc_aggregates(&sta->sta);
253 
254  apply:
255 	changed = memcmp(&link_sta->pub->ht_cap, &ht_cap, sizeof(ht_cap));
256 
257 	memcpy(&link_sta->pub->ht_cap, &ht_cap, sizeof(ht_cap));
258 
259 	rcu_read_lock();
260 	link_conf = rcu_dereference(sdata->vif.link_conf[link_sta->link_id]);
261 	if (WARN_ON(!link_conf)) {
262 		width = NL80211_CHAN_WIDTH_20_NOHT;
263 	} else if (sdata->vif.type == NL80211_IFTYPE_NAN ||
264 		   sdata->vif.type == NL80211_IFTYPE_NAN_DATA) {
265 		/* In NAN, link_sta->bandwidth is invalid since NAN operates on
266 		 * multiple channels. Just take the maximum.
267 		 */
268 		width = NL80211_CHAN_WIDTH_320;
269 	} else {
270 		width = link_conf->chanreq.oper.width;
271 	}
272 
273 	switch (width) {
274 	default:
275 		WARN_ON_ONCE(1);
276 		fallthrough;
277 	case NL80211_CHAN_WIDTH_20_NOHT:
278 	case NL80211_CHAN_WIDTH_20:
279 		bw = IEEE80211_STA_RX_BW_20;
280 		break;
281 	case NL80211_CHAN_WIDTH_40:
282 	case NL80211_CHAN_WIDTH_80:
283 	case NL80211_CHAN_WIDTH_80P80:
284 	case NL80211_CHAN_WIDTH_160:
285 	case NL80211_CHAN_WIDTH_320:
286 		bw = ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 ?
287 				IEEE80211_STA_RX_BW_40 : IEEE80211_STA_RX_BW_20;
288 		break;
289 	}
290 	rcu_read_unlock();
291 
292 	link_sta->pub->bandwidth = bw;
293 
294 	link_sta->cur_max_bandwidth =
295 		ht_cap.cap & IEEE80211_HT_CAP_SUP_WIDTH_20_40 ?
296 				IEEE80211_STA_RX_BW_40 : IEEE80211_STA_RX_BW_20;
297 
298 	if (sta->sdata->vif.type == NL80211_IFTYPE_AP ||
299 	    sta->sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
300 	    sta->sdata->vif.type == NL80211_IFTYPE_NAN ||
301 	    sta->sdata->vif.type == NL80211_IFTYPE_NAN_DATA) {
302 		enum ieee80211_smps_mode smps_mode;
303 
304 		switch ((ht_cap.cap & IEEE80211_HT_CAP_SM_PS)
305 				>> IEEE80211_HT_CAP_SM_PS_SHIFT) {
306 		case WLAN_HT_CAP_SM_PS_INVALID:
307 		case WLAN_HT_CAP_SM_PS_STATIC:
308 			smps_mode = IEEE80211_SMPS_STATIC;
309 			break;
310 		case WLAN_HT_CAP_SM_PS_DYNAMIC:
311 			smps_mode = IEEE80211_SMPS_DYNAMIC;
312 			break;
313 		case WLAN_HT_CAP_SM_PS_DISABLED:
314 			smps_mode = IEEE80211_SMPS_OFF;
315 			break;
316 		}
317 
318 		if (smps_mode != link_sta->pub->smps_mode)
319 			changed = true;
320 		link_sta->pub->smps_mode = smps_mode;
321 	} else {
322 		link_sta->pub->smps_mode = IEEE80211_SMPS_OFF;
323 	}
324 
325 	return changed;
326 }
327 
328 void ieee80211_sta_tear_down_BA_sessions(struct sta_info *sta,
329 					 enum ieee80211_agg_stop_reason reason)
330 {
331 	int i;
332 
333 	lockdep_assert_wiphy(sta->local->hw.wiphy);
334 
335 	for (i = 0; i <  IEEE80211_NUM_TIDS; i++)
336 		__ieee80211_stop_rx_ba_session(sta, i, WLAN_BACK_RECIPIENT,
337 					       WLAN_REASON_QSTA_LEAVE_QBSS,
338 					       reason != AGG_STOP_DESTROY_STA &&
339 					       reason != AGG_STOP_PEER_REQUEST);
340 
341 	for (i = 0; i <  IEEE80211_NUM_TIDS; i++)
342 		__ieee80211_stop_tx_ba_session(sta, i, reason);
343 
344 	/*
345 	 * In case the tear down is part of a reconfigure due to HW restart
346 	 * request, it is possible that the low level driver requested to stop
347 	 * the BA session, so handle it to properly clean tid_tx data.
348 	 */
349 	if(reason == AGG_STOP_DESTROY_STA) {
350 		wiphy_work_cancel(sta->local->hw.wiphy, &sta->ampdu_mlme.work);
351 
352 		for (i = 0; i < IEEE80211_NUM_TIDS; i++) {
353 			struct tid_ampdu_tx *tid_tx =
354 				rcu_dereference_protected_tid_tx(sta, i);
355 
356 			if (!tid_tx)
357 				continue;
358 
359 			if (test_and_clear_bit(HT_AGG_STATE_STOP_CB, &tid_tx->state))
360 				ieee80211_stop_tx_ba_cb(sta, i, tid_tx);
361 		}
362 	}
363 }
364 
365 void ieee80211_ba_session_work(struct wiphy *wiphy, struct wiphy_work *work)
366 {
367 	struct sta_info *sta =
368 		container_of(work, struct sta_info, ampdu_mlme.work);
369 	struct tid_ampdu_tx *tid_tx;
370 	bool blocked;
371 	int tid;
372 
373 	lockdep_assert_wiphy(sta->local->hw.wiphy);
374 
375 	/* When this flag is set, new sessions should be blocked. */
376 	blocked = test_sta_flag(sta, WLAN_STA_BLOCK_BA);
377 
378 	for (tid = 0; tid < IEEE80211_NUM_TIDS; tid++) {
379 		if (test_and_clear_bit(tid, sta->ampdu_mlme.tid_rx_timer_expired))
380 			__ieee80211_stop_rx_ba_session(
381 				sta, tid, WLAN_BACK_RECIPIENT,
382 				WLAN_REASON_QSTA_TIMEOUT, true);
383 
384 		if (test_and_clear_bit(tid,
385 				       sta->ampdu_mlme.tid_rx_stop_requested))
386 			__ieee80211_stop_rx_ba_session(
387 				sta, tid, WLAN_BACK_RECIPIENT,
388 				WLAN_REASON_UNSPECIFIED, true);
389 
390 		if (!blocked &&
391 		    test_and_clear_bit(tid,
392 				       sta->ampdu_mlme.tid_rx_manage_offl))
393 			__ieee80211_start_rx_ba_session(sta, 0, 0, 0, 1, tid,
394 							IEEE80211_MAX_AMPDU_BUF_HT,
395 							false, true, false, 0);
396 
397 		if (test_and_clear_bit(tid + IEEE80211_NUM_TIDS,
398 				       sta->ampdu_mlme.tid_rx_manage_offl))
399 			__ieee80211_stop_rx_ba_session(
400 				sta, tid, WLAN_BACK_RECIPIENT,
401 				0, false);
402 
403 		spin_lock_bh(&sta->lock);
404 
405 		tid_tx = sta->ampdu_mlme.tid_start_tx[tid];
406 		if (!blocked && tid_tx) {
407 			struct txq_info *txqi = to_txq_info(sta->sta.txq[tid]);
408 			struct ieee80211_sub_if_data *sdata =
409 				vif_to_sdata(txqi->txq.vif);
410 			struct fq *fq = &sdata->local->fq;
411 
412 			spin_lock_bh(&fq->lock);
413 
414 			/* Allow only frags to be dequeued */
415 			set_bit(IEEE80211_TXQ_STOP, &txqi->flags);
416 
417 			if (!skb_queue_empty(&txqi->frags)) {
418 				/* Fragmented Tx is ongoing, wait for it to
419 				 * finish. Reschedule worker to retry later.
420 				 */
421 
422 				spin_unlock_bh(&fq->lock);
423 				spin_unlock_bh(&sta->lock);
424 
425 				/* Give the task working on the txq a chance
426 				 * to send out the queued frags
427 				 */
428 				synchronize_net();
429 
430 				wiphy_work_queue(sdata->local->hw.wiphy, work);
431 				return;
432 			}
433 
434 			spin_unlock_bh(&fq->lock);
435 
436 			/*
437 			 * Assign it over to the normal tid_tx array
438 			 * where it "goes live".
439 			 */
440 
441 			sta->ampdu_mlme.tid_start_tx[tid] = NULL;
442 			/* could there be a race? */
443 			if (sta->ampdu_mlme.tid_tx[tid])
444 				kfree(tid_tx);
445 			else
446 				ieee80211_assign_tid_tx(sta, tid, tid_tx);
447 			spin_unlock_bh(&sta->lock);
448 
449 			ieee80211_tx_ba_session_handle_start(sta, tid);
450 			continue;
451 		}
452 		spin_unlock_bh(&sta->lock);
453 
454 		tid_tx = rcu_dereference_protected_tid_tx(sta, tid);
455 		if (!tid_tx)
456 			continue;
457 
458 		if (!blocked &&
459 		    test_and_clear_bit(HT_AGG_STATE_START_CB, &tid_tx->state))
460 			ieee80211_start_tx_ba_cb(sta, tid, tid_tx);
461 		if (test_and_clear_bit(HT_AGG_STATE_WANT_STOP, &tid_tx->state))
462 			__ieee80211_stop_tx_ba_session(sta, tid,
463 						       AGG_STOP_LOCAL_REQUEST);
464 		if (test_and_clear_bit(HT_AGG_STATE_STOP_CB, &tid_tx->state))
465 			ieee80211_stop_tx_ba_cb(sta, tid, tid_tx);
466 	}
467 }
468 
469 void ieee80211_send_delba(struct ieee80211_sub_if_data *sdata,
470 			  const u8 *da, u16 tid,
471 			  u16 initiator, u16 reason_code,
472 			  bool use_ndp)
473 {
474 	struct ieee80211_local *local = sdata->local;
475 	struct sk_buff *skb;
476 	struct ieee80211_mgmt *mgmt;
477 	u16 params;
478 
479 	skb = dev_alloc_skb(IEEE80211_MIN_ACTION_SIZE(delba) +
480 			    local->hw.extra_tx_headroom);
481 	if (!skb)
482 		return;
483 
484 	skb_reserve(skb, local->hw.extra_tx_headroom);
485 	mgmt = ieee80211_mgmt_ba(skb, da, sdata);
486 
487 	skb_put(skb, 2 + sizeof(mgmt->u.action.delba));
488 
489 	mgmt->u.action.category = WLAN_CATEGORY_BACK;
490 	mgmt->u.action.action_code = use_ndp ?
491 		WLAN_ACTION_NDP_DELBA : WLAN_ACTION_DELBA;
492 	params = (u16)(initiator << 11); 	/* bit 11 initiator */
493 	params |= (u16)(tid << 12); 		/* bit 15:12 TID number */
494 
495 	mgmt->u.action.delba.params = cpu_to_le16(params);
496 	mgmt->u.action.delba.reason_code = cpu_to_le16(reason_code);
497 
498 	ieee80211_tx_skb(sdata, skb);
499 }
500 
501 void ieee80211_process_delba(struct ieee80211_sub_if_data *sdata,
502 			     struct sta_info *sta,
503 			     struct ieee80211_mgmt *mgmt, size_t len)
504 {
505 	u16 tid, params;
506 	u16 initiator;
507 
508 	params = le16_to_cpu(mgmt->u.action.delba.params);
509 	tid = (params & IEEE80211_DELBA_PARAM_TID_MASK) >> 12;
510 	initiator = (params & IEEE80211_DELBA_PARAM_INITIATOR_MASK) >> 11;
511 
512 	ht_dbg_ratelimited(sdata, "delba from %pM (%s) tid %d reason code %d\n",
513 			   mgmt->sa, initiator ? "initiator" : "recipient",
514 			   tid,
515 			   le16_to_cpu(mgmt->u.action.delba.reason_code));
516 
517 	if (initiator == WLAN_BACK_INITIATOR)
518 		__ieee80211_stop_rx_ba_session(sta, tid, WLAN_BACK_INITIATOR, 0,
519 					       true);
520 	else
521 		__ieee80211_stop_tx_ba_session(sta, tid, AGG_STOP_PEER_REQUEST);
522 }
523 
524 enum nl80211_smps_mode
525 ieee80211_smps_mode_to_smps_mode(enum ieee80211_smps_mode smps)
526 {
527 	switch (smps) {
528 	case IEEE80211_SMPS_OFF:
529 		return NL80211_SMPS_OFF;
530 	case IEEE80211_SMPS_STATIC:
531 		return NL80211_SMPS_STATIC;
532 	case IEEE80211_SMPS_DYNAMIC:
533 		return NL80211_SMPS_DYNAMIC;
534 	default:
535 		return NL80211_SMPS_OFF;
536 	}
537 }
538 
539 int ieee80211_send_smps_action(struct ieee80211_sub_if_data *sdata,
540 			       enum ieee80211_smps_mode smps, const u8 *da,
541 			       const u8 *bssid, int link_id)
542 {
543 	struct ieee80211_local *local = sdata->local;
544 	struct sk_buff *skb;
545 	struct ieee80211_mgmt *action_frame;
546 	struct ieee80211_tx_info *info;
547 	u8 status_link_id = link_id < 0 ? 0 : link_id;
548 
549 	skb = dev_alloc_skb(IEEE80211_MIN_ACTION_SIZE(ht_smps) +
550 			    local->hw.extra_tx_headroom);
551 	if (!skb)
552 		return -ENOMEM;
553 
554 	skb_reserve(skb, local->hw.extra_tx_headroom);
555 	action_frame = skb_put_zero(skb, IEEE80211_MIN_ACTION_SIZE(ht_smps));
556 	memcpy(action_frame->da, da, ETH_ALEN);
557 	memcpy(action_frame->sa, sdata->dev->dev_addr, ETH_ALEN);
558 	memcpy(action_frame->bssid, bssid, ETH_ALEN);
559 	action_frame->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
560 						  IEEE80211_STYPE_ACTION);
561 	action_frame->u.action.category = WLAN_CATEGORY_HT;
562 	action_frame->u.action.action_code = WLAN_HT_ACTION_SMPS;
563 	switch (smps) {
564 	case IEEE80211_SMPS_AUTOMATIC:
565 	case IEEE80211_SMPS_NUM_MODES:
566 		WARN_ON(1);
567 		smps = IEEE80211_SMPS_OFF;
568 		fallthrough;
569 	case IEEE80211_SMPS_OFF:
570 		action_frame->u.action.ht_smps.smps_control =
571 				WLAN_HT_SMPS_CONTROL_DISABLED;
572 		break;
573 	case IEEE80211_SMPS_STATIC:
574 		action_frame->u.action.ht_smps.smps_control =
575 				WLAN_HT_SMPS_CONTROL_STATIC;
576 		break;
577 	case IEEE80211_SMPS_DYNAMIC:
578 		action_frame->u.action.ht_smps.smps_control =
579 				WLAN_HT_SMPS_CONTROL_DYNAMIC;
580 		break;
581 	}
582 
583 	/* we'll do more on status of this frame */
584 	info = IEEE80211_SKB_CB(skb);
585 	info->flags |= IEEE80211_TX_CTL_REQ_TX_STATUS;
586 	/* we have 13 bits, and need 6: link_id 4, smps 2 */
587 	info->status_data = IEEE80211_STATUS_TYPE_SMPS |
588 			    u16_encode_bits(status_link_id << 2 | smps,
589 					    IEEE80211_STATUS_SUBDATA_MASK);
590 	ieee80211_tx_skb_tid(sdata, skb, 7, link_id);
591 
592 	return 0;
593 }
594 
595 void ieee80211_request_smps(struct ieee80211_vif *vif, unsigned int link_id,
596 			    enum ieee80211_smps_mode smps_mode)
597 {
598 	struct ieee80211_sub_if_data *sdata = vif_to_sdata(vif);
599 	struct ieee80211_link_data *link;
600 
601 	if (WARN_ON_ONCE(vif->type != NL80211_IFTYPE_STATION))
602 		return;
603 
604 	rcu_read_lock();
605 	link = rcu_dereference(sdata->link[link_id]);
606 	if (WARN_ON(!link))
607 		goto out;
608 
609 	trace_api_request_smps(sdata->local, sdata, link, smps_mode);
610 
611 	if (link->u.mgd.driver_smps_mode == smps_mode)
612 		goto out;
613 
614 	link->u.mgd.driver_smps_mode = smps_mode;
615 	wiphy_work_queue(sdata->local->hw.wiphy,
616 			 &link->u.mgd.request_smps_work);
617 out:
618 	rcu_read_unlock();
619 }
620 /* this might change ... don't want non-open drivers using it */
621 EXPORT_SYMBOL_GPL(ieee80211_request_smps);
622 
623 void ieee80211_ht_handle_chanwidth_notif(struct ieee80211_local *local,
624 					 struct ieee80211_sub_if_data *sdata,
625 					 struct sta_info *sta,
626 					 struct link_sta_info *link_sta,
627 					 u8 chanwidth, enum nl80211_band band)
628 {
629 	enum ieee80211_sta_rx_bandwidth max_bw, new_bw;
630 	struct ieee80211_supported_band *sband;
631 	struct sta_opmode_info sta_opmode = {};
632 
633 	lockdep_assert_wiphy(local->hw.wiphy);
634 
635 	if (chanwidth == IEEE80211_HT_CHANWIDTH_20MHZ)
636 		max_bw = IEEE80211_STA_RX_BW_20;
637 	else
638 		max_bw = ieee80211_sta_cap_rx_bw(link_sta);
639 
640 	/* set cur_max_bandwidth and recalc sta bw */
641 	link_sta->cur_max_bandwidth = max_bw;
642 	new_bw = ieee80211_sta_cur_vht_bw(link_sta);
643 
644 	if (link_sta->pub->bandwidth == new_bw)
645 		return;
646 
647 	link_sta->pub->bandwidth = new_bw;
648 	sband = local->hw.wiphy->bands[band];
649 	sta_opmode.bw =
650 		ieee80211_sta_rx_bw_to_chan_width(link_sta);
651 	sta_opmode.changed = STA_OPMODE_MAX_BW_CHANGED;
652 
653 	rate_control_rate_update(local, sband, link_sta,
654 				 IEEE80211_RC_BW_CHANGED);
655 	cfg80211_sta_opmode_change_notify(sdata->dev,
656 					  sta->addr,
657 					  &sta_opmode,
658 					  GFP_KERNEL);
659 }
660