On deauth/disassoc we tear down all BA sessions. These DELBA packets are sent on the appropriate TID, while deauth/disassoc is always sent on VO. This sometimes ends with the DELBA being sent after the deauth was already sent. Fix it by flushing all the pending frames before sending deauth/disassoc (in ieee80211_send_deauth_disassoc). Signed-off-by: Eliad Peller <eliad@xxxxxxxxxx> --- i think flushing in ieee80211_send_deauth_disassoc is the easiest thing to do here, as it handles all the (future) cases. however, i don't care moving the flush to a higher function if someone prefers it. net/mac80211/mlme.c | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) diff --git a/net/mac80211/mlme.c b/net/mac80211/mlme.c index 426877d..6a73c65 100644 --- a/net/mac80211/mlme.c +++ b/net/mac80211/mlme.c @@ -580,6 +580,9 @@ static void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata, if (!(ifmgd->flags & IEEE80211_STA_MFP_ENABLED)) IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_INTFL_DONT_ENCRYPT; + + /* flush out any pending frame */ + drv_flush(local, false); ieee80211_tx_skb(sdata, skb); } } -- 1.7.6.401.g6a319 -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html