From: Baochen Qiang <baochen.qiang@oss.qualcomm.com>
To: Jeff Johnson <jeff.johnson@oss.qualcomm.com>,
Pablo Martin-Gomez <pmartin-gomez@freebox.fr>,
ath12k@lists.infradead.org
Cc: linux-wireless@vger.kernel.org
Subject: Re: [PATCH ath-current v2] wifi: ath12k: fix wrong TID passed when stopping AMPDU session
Date: Wed, 28 Jan 2026 10:06:00 +0800 [thread overview]
Message-ID: <14d34890-93de-428e-aa40-e81fc182fb27@oss.qualcomm.com> (raw)
In-Reply-To: <9c418260-b67a-48aa-80c6-6a03c91e4ba3@oss.qualcomm.com>
On 1/28/2026 7:39 AM, Jeff Johnson wrote:
> On 1/26/2026 9:36 AM, Pablo Martin-Gomez wrote:
>> When handling a DELBA request, ath12k_dp_rx_ampdu_stop() calls
>> ath12k_peer_rx_tid_reo_update() to tear down the BA session for the
>> specified TID. However, it currently passes peer->rx_tid instead of the
>> entry corresponding to params->tid.
>>
>> Since peer->rx_tid is an array, this decays to a pointer to the first
>> element, effectively operating on TID 0 regardless of the TID in the
>> DELBA request. As a result, the BA session for TID 0 is stopped while
>> the intended TID remains active.
>>
>> This leads to incorrect BA session state and may significantly reduce
>> RX throughput, as traffic that should use aggregation falls back to a
>> BA window size of 1 on TID 0.
>>
>> Fix this by passing the correct TID entry:
>> &peer->rx_tid[params->tid]
>>
>> Fixes: d889913205cf ("wifi: ath12k: driver for Qualcomm Wi-Fi 7 devices")
>> Signed-off-by: Pablo Martin-Gomez <pmartin-gomez@freebox.fr>
>> ---
>> drivers/net/wireless/ath/ath12k/dp_rx.c | 2 +-
>> 1 file changed, 1 insertion(+), 1 deletion(-)
>>
>> diff --git a/drivers/net/wireless/ath/ath12k/dp_rx.c b/drivers/net/wireless/ath/ath12k/dp_rx.c
>> index d28d8ffec0f8..f2327c82953b 100644
>> --- a/drivers/net/wireless/ath/ath12k/dp_rx.c
>> +++ b/drivers/net/wireless/ath/ath12k/dp_rx.c
>> @@ -1289,7 +1289,7 @@ int ath12k_dp_rx_ampdu_stop(struct ath12k *ar,
>> return 0;
>> }
>>
>> - ret = ath12k_peer_rx_tid_reo_update(ar, peer, peer->rx_tid, 1, 0, false);
>> + ret = ath12k_peer_rx_tid_reo_update(ar, peer, &peer->rx_tid[params->tid], 1, 0, false);
>
> like the ath11k change, this also triggers ath12k-check:
> drivers/net/wireless/ath/ath12k/dp_rx.c:1292: line length of 95 exceeds 90 columns
>
> I'll break this line when I process the patch
>
>> spin_unlock_bh(&ab->base_lock);
>> if (ret) {
>> ath12k_warn(ab, "failed to update reo for rx tid %d: %d\n",
>
>
Reviewed-by: Baochen Qiang <baochen.qiang@oss.qualcomm.com>
next prev parent reply other threads:[~2026-01-28 2:06 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-01-26 17:36 [PATCH ath-current v2] wifi: ath12k: fix wrong TID passed when stopping AMPDU session Pablo Martin-Gomez
2026-01-27 23:39 ` Jeff Johnson
2026-01-28 2:06 ` Baochen Qiang [this message]
2026-01-28 4:40 ` Vasanthakumar Thiagarajan
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=14d34890-93de-428e-aa40-e81fc182fb27@oss.qualcomm.com \
--to=baochen.qiang@oss.qualcomm.com \
--cc=ath12k@lists.infradead.org \
--cc=jeff.johnson@oss.qualcomm.com \
--cc=linux-wireless@vger.kernel.org \
--cc=pmartin-gomez@freebox.fr \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox