]> git.ipfire.org Git - thirdparty/linux.git/blame - drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c
projects / thirdparty / linux.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
iwlwifi: add missing mutex_destroy statements
[thirdparty/linux.git] / drivers / net / wireless / intel / iwlwifi / mvm / mac80211.c
CommitLineData
8ca151b5
JB		 1/******************************************************************************
2 *
3 * This file is provided under a dual BSD/GPLv2 license. When using or
4 * redistributing this file, you may do so under either license.
5 *
6 * GPL LICENSE SUMMARY
7 *
51368bf7 8 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
8b4139dc 9 * Copyright(c) 2013 - 2014 Intel Mobile Communications GmbH
f92659a1 10 * Copyright(c) 2016 Intel Deutschland GmbH
8ca151b5
JB		 11 *
12 * This program is free software; you can redistribute it and/or modify
13 * it under the terms of version 2 of the GNU General Public License as
14 * published by the Free Software Foundation.
15 *
16 * This program is distributed in the hope that it will be useful, but
17 * WITHOUT ANY WARRANTY; without even the implied warranty of
18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
19 * General Public License for more details.
20 *
21 * You should have received a copy of the GNU General Public License
22 * along with this program; if not, write to the Free Software
23 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110,
24 * USA
25 *
26 * The full GNU General Public License is included in this distribution
410dc5aa 27 * in the file called COPYING.
8ca151b5
JB		 28 *
29 * Contact Information:
cb2f8277 30 * Intel Linux Wireless <linuxwifi@intel.com>
8ca151b5
JB		 31 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
32 *
33 * BSD LICENSE
34 *
51368bf7 35 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
8b4139dc 36 * Copyright(c) 2013 - 2014 Intel Mobile Communications GmbH
8ca151b5
JB		 37 * All rights reserved.
38 *
39 * Redistribution and use in source and binary forms, with or without
40 * modification, are permitted provided that the following conditions
41 * are met:
42 *
43 * * Redistributions of source code must retain the above copyright
44 * notice, this list of conditions and the following disclaimer.
45 * * Redistributions in binary form must reproduce the above copyright
46 * notice, this list of conditions and the following disclaimer in
47 * the documentation and/or other materials provided with the
48 * distribution.
49 * * Neither the name Intel Corporation nor the names of its
50 * contributors may be used to endorse or promote products derived
51 * from this software without specific prior written permission.
52 *
53 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
54 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
55 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
56 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
57 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
58 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
59 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
60 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
61 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
62 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
63 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
64 *
65 *****************************************************************************/
66#include <linux/kernel.h>
67#include <linux/slab.h>
68#include <linux/skbuff.h>
69#include <linux/netdevice.h>
70#include <linux/etherdevice.h>
f0c2646a 71#include <linux/ip.h>
2ee8f021 72#include <linux/if_arp.h>
2f89a5d7 73#include <linux/time.h>
8ca151b5 74#include <net/mac80211.h>
7b1dd048 75#include <net/ieee80211_radiotap.h>
f0c2646a 76#include <net/tcp.h>
8ca151b5
JB		 77
78#include "iwl-op-mode.h"
79#include "iwl-io.h"
80#include "mvm.h"
81#include "sta.h"
82#include "time-event.h"
83#include "iwl-eeprom-parse.h"
8ca151b5 84#include "iwl-phy-db.h"
507cadf2 85#include "testmode.h"
655e6d6d
EG		 86#include "iwl-fw-error-dump.h"
87#include "iwl-prph.h"
88931cc9 88#include "iwl-nvm-parse.h"
2f89a5d7 89#include "fw-dbg.h"
8ca151b5
JB		 90
91static const struct ieee80211_iface_limit iwl_mvm_limits[] = {
92 {
93 .max = 1,
8eb38710 94 .types = BIT(NL80211_IFTYPE_STATION),
8ca151b5 95 },
3c15a0fb
JB		 96 {
97 .max = 1,
8eb38710
IP		 98 .types = BIT(NL80211_IFTYPE_AP) |
99 BIT(NL80211_IFTYPE_P2P_CLIENT) |
3c15a0fb
JB		 100 BIT(NL80211_IFTYPE_P2P_GO),
101 },
102 {
103 .max = 1,
104 .types = BIT(NL80211_IFTYPE_P2P_DEVICE),
105 },
8ca151b5
JB		 106};
107
108static const struct ieee80211_iface_combination iwl_mvm_iface_combinations[] = {
109 {
2624a5ca 110 .num_different_channels = 2,
8ca151b5
JB		 111 .max_interfaces = 3,
112 .limits = iwl_mvm_limits,
113 .n_limits = ARRAY_SIZE(iwl_mvm_limits),
114 },
115};
116
f0c2646a
JB		 117#ifdef CONFIG_PM_SLEEP
118static const struct nl80211_wowlan_tcp_data_token_feature
119iwl_mvm_wowlan_tcp_token_feature = {
120 .min_len = 0,
121 .max_len = 255,
122 .bufsize = IWL_WOWLAN_REMOTE_WAKE_MAX_TOKENS,
123};
124
125static const struct wiphy_wowlan_tcp_support iwl_mvm_wowlan_tcp_support = {
126 .tok = &iwl_mvm_wowlan_tcp_token_feature,
127 .data_payload_max = IWL_WOWLAN_TCP_MAX_PACKET_LEN -
128 sizeof(struct ethhdr) -
129 sizeof(struct iphdr) -
130 sizeof(struct tcphdr),
131 .data_interval_max = 65535, /* __le16 in API */
132 .wake_payload_max = IWL_WOWLAN_REMOTE_WAKE_MAX_PACKET_LEN -
133 sizeof(struct ethhdr) -
134 sizeof(struct iphdr) -
135 sizeof(struct tcphdr),
136 .seq = true,
137};
138#endif
139
77736923 140#ifdef CONFIG_IWLWIFI_BCAST_FILTERING
2ee8f021
EP		 141/*
142 * Use the reserved field to indicate magic values.
143 * these values will only be used internally by the driver,
144 * and won't make it to the fw (reserved will be 0).
145 * BC_FILTER_MAGIC_IP - configure the val of this attribute to
146 * be the vif's ip address. in case there is not a single
147 * ip address (0, or more than 1), this attribute will
148 * be skipped.
149 * BC_FILTER_MAGIC_MAC - set the val of this attribute to
150 * the LSB bytes of the vif's mac address
151 */
152enum {
153 BC_FILTER_MAGIC_NONE = 0,
154 BC_FILTER_MAGIC_IP,
155 BC_FILTER_MAGIC_MAC,
156};
157
77736923
EP		 158static const struct iwl_fw_bcast_filter iwl_mvm_default_bcast_filters[] = {
159 {
160 /* arp */
161 .discard = 0,
162 .frame_type = BCAST_FILTER_FRAME_TYPE_ALL,
163 .attrs = {
164 {
165 /* frame type - arp, hw type - ethernet */
166 .offset_type =
167 BCAST_FILTER_OFFSET_PAYLOAD_START,
168 .offset = sizeof(rfc1042_header),
169 .val = cpu_to_be32(0x08060001),
170 .mask = cpu_to_be32(0xffffffff),
171 },
2ee8f021
EP		 172 {
173 /* arp dest ip */
174 .offset_type =
175 BCAST_FILTER_OFFSET_PAYLOAD_START,
176 .offset = sizeof(rfc1042_header) + 2 +
177 sizeof(struct arphdr) +
178 ETH_ALEN + sizeof(__be32) +
179 ETH_ALEN,
180 .mask = cpu_to_be32(0xffffffff),
181 /* mark it as special field */
182 .reserved1 = cpu_to_le16(BC_FILTER_MAGIC_IP),
183 },
184 },
185 },
186 {
187 /* dhcp offer bcast */
188 .discard = 0,
189 .frame_type = BCAST_FILTER_FRAME_TYPE_IPV4,
190 .attrs = {
191 {
192 /* udp dest port - 68 (bootp client)*/
193 .offset_type = BCAST_FILTER_OFFSET_IP_END,
194 .offset = offsetof(struct udphdr, dest),
195 .val = cpu_to_be32(0x00440000),
196 .mask = cpu_to_be32(0xffff0000),
197 },
198 {
199 /* dhcp - lsb bytes of client hw address */
200 .offset_type = BCAST_FILTER_OFFSET_IP_END,
201 .offset = 38,
202 .mask = cpu_to_be32(0xffffffff),
203 /* mark it as special field */
204 .reserved1 = cpu_to_le16(BC_FILTER_MAGIC_MAC),
205 },
77736923
EP		 206 },
207 },
208 /* last filter must be empty */
209 {},
210};
211#endif
212
7498cf4c
EP		 213void iwl_mvm_ref(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type)
214{
7bb426ea 215 if (!iwl_mvm_is_d0i3_supported(mvm))
7498cf4c
EP		 216 return;
217
218 IWL_DEBUG_RPM(mvm, "Take mvm reference - type %d\n", ref_type);
576eeee9
EP		 219 spin_lock_bh(&mvm->refs_lock);
220 mvm->refs[ref_type]++;
221 spin_unlock_bh(&mvm->refs_lock);
7498cf4c
EP		 222 iwl_trans_ref(mvm->trans);
223}
224
225void iwl_mvm_unref(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type)
226{
7bb426ea 227 if (!iwl_mvm_is_d0i3_supported(mvm))
7498cf4c
EP		 228 return;
229
230 IWL_DEBUG_RPM(mvm, "Leave mvm reference - type %d\n", ref_type);
576eeee9
EP		 231 spin_lock_bh(&mvm->refs_lock);
232 WARN_ON(!mvm->refs[ref_type]--);
233 spin_unlock_bh(&mvm->refs_lock);
7498cf4c
EP		 234 iwl_trans_unref(mvm->trans);
235}
236
576eeee9
EP		 237static void iwl_mvm_unref_all_except(struct iwl_mvm *mvm,
238 enum iwl_mvm_ref_type except_ref)
7498cf4c 239{
576eeee9 240 int i, j;
7498cf4c 241
7bb426ea 242 if (!iwl_mvm_is_d0i3_supported(mvm))
7498cf4c
EP		 243 return;
244
576eeee9
EP		 245 spin_lock_bh(&mvm->refs_lock);
246 for (i = 0; i < IWL_MVM_REF_COUNT; i++) {
247 if (except_ref == i || !mvm->refs[i])
7498cf4c
EP		 248 continue;
249
576eeee9
EP		 250 IWL_DEBUG_RPM(mvm, "Cleanup: remove mvm ref type %d (%d)\n",
251 i, mvm->refs[i]);
252 for (j = 0; j < mvm->refs[i]; j++)
253 iwl_trans_unref(mvm->trans);
254 mvm->refs[i] = 0;
7498cf4c 255 }
576eeee9 256 spin_unlock_bh(&mvm->refs_lock);
7498cf4c
EP		 257}
258
f4cf8680
EP		 259bool iwl_mvm_ref_taken(struct iwl_mvm *mvm)
260{
261 int i;
262 bool taken = false;
263
264 if (!iwl_mvm_is_d0i3_supported(mvm))
265 return true;
266
267 spin_lock_bh(&mvm->refs_lock);
268 for (i = 0; i < IWL_MVM_REF_COUNT; i++) {
269 if (mvm->refs[i]) {
270 taken = true;
271 break;
272 }
273 }
274 spin_unlock_bh(&mvm->refs_lock);
275
276 return taken;
277}
278
576eeee9 279int iwl_mvm_ref_sync(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type)
d40fc489
GG		 280{
281 iwl_mvm_ref(mvm, ref_type);
282
283 if (!wait_event_timeout(mvm->d0i3_exit_waitq,
284 !test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status),
285 HZ)) {
286 WARN_ON_ONCE(1);
287 iwl_mvm_unref(mvm, ref_type);
288 return -EIO;
289 }
290
291 return 0;
292}
293
fe0f2de3
IP		 294static void iwl_mvm_reset_phy_ctxts(struct iwl_mvm *mvm)
295{
296 int i;
297
298 memset(mvm->phy_ctxts, 0, sizeof(mvm->phy_ctxts));
299 for (i = 0; i < NUM_PHY_CTX; i++) {
300 mvm->phy_ctxts[i].id = i;
301 mvm->phy_ctxts[i].ref = 0;
302 }
303}
304
88931cc9 305struct ieee80211_regdomain *iwl_mvm_get_regdomain(struct wiphy *wiphy,
8ba2d7a1 306 const char *alpha2,
47c8b154
JD		 307 enum iwl_mcc_source src_id,
308 bool *changed)
88931cc9
AN		 309{
310 struct ieee80211_regdomain *regd = NULL;
311 struct ieee80211_hw *hw = wiphy_to_ieee80211_hw(wiphy);
312 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
313 struct iwl_mcc_update_resp *resp;
314
315 IWL_DEBUG_LAR(mvm, "Getting regdomain data for %s from FW\n", alpha2);
316
8ba2d7a1 317 lockdep_assert_held(&mvm->mutex);
88931cc9 318
8ba2d7a1 319 resp = iwl_mvm_update_mcc(mvm, alpha2, src_id);
88931cc9
AN		 320 if (IS_ERR_OR_NULL(resp)) {
321 IWL_DEBUG_LAR(mvm, "Could not get update from FW %d\n",
b8c474d9 322 PTR_ERR_OR_ZERO(resp));
8ba2d7a1 323 goto out;
88931cc9
AN		 324 }
325
47c8b154
JD		 326 if (changed)
327 *changed = (resp->status == MCC_RESP_NEW_CHAN_PROFILE);
328
162ee3c9 329 regd = iwl_parse_nvm_mcc_info(mvm->trans->dev, mvm->cfg,
88931cc9
AN		 330 __le32_to_cpu(resp->n_channels),
331 resp->channels,
332 __le16_to_cpu(resp->mcc));
8ba2d7a1
EH		 333 /* Store the return source id */
334 src_id = resp->source_id;
88931cc9
AN		 335 kfree(resp);
336 if (IS_ERR_OR_NULL(regd)) {
337 IWL_DEBUG_LAR(mvm, "Could not get parse update from FW %d\n",
b8c474d9 338 PTR_ERR_OR_ZERO(regd));
8ba2d7a1 339 goto out;
88931cc9
AN		 340 }
341
8ba2d7a1
EH		 342 IWL_DEBUG_LAR(mvm, "setting alpha2 from FW to %s (0x%x, 0x%x) src=%d\n",
343 regd->alpha2, regd->alpha2[0], regd->alpha2[1], src_id);
88931cc9 344 mvm->lar_regdom_set = true;
8ba2d7a1 345 mvm->mcc_src = src_id;
88931cc9 346
8ba2d7a1 347out:
88931cc9
AN		 348 return regd;
349}
350
47c8b154
JD		 351void iwl_mvm_update_changed_regdom(struct iwl_mvm *mvm)
352{
353 bool changed;
354 struct ieee80211_regdomain *regd;
355
356 if (!iwl_mvm_is_lar_supported(mvm))
357 return;
358
359 regd = iwl_mvm_get_current_regdomain(mvm, &changed);
360 if (!IS_ERR_OR_NULL(regd)) {
361 /* only update the regulatory core if changed */
362 if (changed)
363 regulatory_set_wiphy_regd(mvm->hw->wiphy, regd);
364
365 kfree(regd);
366 }
367}
368
369struct ieee80211_regdomain *iwl_mvm_get_current_regdomain(struct iwl_mvm *mvm,
370 bool *changed)
8ba2d7a1
EH		 371{
372 return iwl_mvm_get_regdomain(mvm->hw->wiphy, "ZZ",
373 iwl_mvm_is_wifi_mcc_supported(mvm) ?
374 MCC_SOURCE_GET_CURRENT :
47c8b154 375 MCC_SOURCE_OLD_FW, changed);
8ba2d7a1
EH		 376}
377
378int iwl_mvm_init_fw_regd(struct iwl_mvm *mvm)
379{
380 enum iwl_mcc_source used_src;
381 struct ieee80211_regdomain *regd;
b6e160ab
AN		 382 int ret;
383 bool changed;
8ba2d7a1
EH		 384 const struct ieee80211_regdomain *r =
385 rtnl_dereference(mvm->hw->wiphy->regd);
386
387 if (!r)
b6e160ab 388 return -ENOENT;
8ba2d7a1
EH		 389
390 /* save the last source in case we overwrite it below */
391 used_src = mvm->mcc_src;
392 if (iwl_mvm_is_wifi_mcc_supported(mvm)) {
393 /* Notify the firmware we support wifi location updates */
47c8b154 394 regd = iwl_mvm_get_current_regdomain(mvm, NULL);
8ba2d7a1
EH		 395 if (!IS_ERR_OR_NULL(regd))
396 kfree(regd);
397 }
398
399 /* Now set our last stored MCC and source */
b6e160ab
AN		 400 regd = iwl_mvm_get_regdomain(mvm->hw->wiphy, r->alpha2, used_src,
401 &changed);
8ba2d7a1
EH		 402 if (IS_ERR_OR_NULL(regd))
403 return -EIO;
404
b6e160ab
AN		 405 /* update cfg80211 if the regdomain was changed */
406 if (changed)
407 ret = regulatory_set_wiphy_regd_sync_rtnl(mvm->hw->wiphy, regd);
408 else
409 ret = 0;
8ba2d7a1 410
b6e160ab
AN		 411 kfree(regd);
412 return ret;
8ba2d7a1
EH		 413}
414
8ca151b5
JB		 415int iwl_mvm_mac_setup_register(struct iwl_mvm *mvm)
416{
417 struct ieee80211_hw *hw = mvm->hw;
831e85f3 418 int num_mac, ret, i;
5f4c02e2
JB		 419 static const u32 mvm_ciphers[] = {
420 WLAN_CIPHER_SUITE_WEP40,
421 WLAN_CIPHER_SUITE_WEP104,
422 WLAN_CIPHER_SUITE_TKIP,
423 WLAN_CIPHER_SUITE_CCMP,
424 };
8ca151b5
JB		 425
426 /* Tell mac80211 our characteristics */
30686bf7
JB		 427 ieee80211_hw_set(hw, SIGNAL_DBM);
428 ieee80211_hw_set(hw, SPECTRUM_MGMT);
429 ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS);
430 ieee80211_hw_set(hw, QUEUE_CONTROL);
431 ieee80211_hw_set(hw, WANT_MONITOR_VIF);
432 ieee80211_hw_set(hw, SUPPORTS_PS);
433 ieee80211_hw_set(hw, SUPPORTS_DYNAMIC_PS);
434 ieee80211_hw_set(hw, AMPDU_AGGREGATION);
435 ieee80211_hw_set(hw, TIMING_BEACON_ONLY);
436 ieee80211_hw_set(hw, CONNECTION_MONITOR);
437 ieee80211_hw_set(hw, CHANCTX_STA_CSA);
438 ieee80211_hw_set(hw, SUPPORT_FAST_XMIT);
439 ieee80211_hw_set(hw, SUPPORTS_CLONED_SKBS);
909ddf0b 440 ieee80211_hw_set(hw, SUPPORTS_AMSDU_IN_AMPDU);
30433d3b 441 ieee80211_hw_set(hw, NEEDS_UNIQUE_STA_ADDR);
8ca151b5 442
2d7cf549
JB		 443 if (mvm->trans->max_skb_frags)
444 hw->netdev_features = NETIF_F_HIGHDMA | NETIF_F_SG;
445
19e737c9 446 hw->queues = mvm->first_agg_queue;
398e8c6c 447 hw->offchannel_tx_hw_queue = IWL_MVM_OFFCHANNEL_QUEUE;
7b1dd048
EG		 448 hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FEC |
449 IEEE80211_RADIOTAP_MCS_HAVE_STBC;
339b3086
ES		 450 hw->radiotap_vht_details |= IEEE80211_RADIOTAP_VHT_KNOWN_STBC |
451 IEEE80211_RADIOTAP_VHT_KNOWN_BEAMFORMED;
8ca151b5 452 hw->rate_control_algorithm = "iwl-mvm-rs";
848955cc
JB		 453 hw->uapsd_queues = IWL_MVM_UAPSD_QUEUES;
454 hw->uapsd_max_sp_len = IWL_UAPSD_MAX_SP;
8ca151b5 455
5f4c02e2
JB		 456 BUILD_BUG_ON(ARRAY_SIZE(mvm->ciphers) < ARRAY_SIZE(mvm_ciphers) + 2);
457 memcpy(mvm->ciphers, mvm_ciphers, sizeof(mvm_ciphers));
458 hw->wiphy->n_cipher_suites = ARRAY_SIZE(mvm_ciphers);
459 hw->wiphy->cipher_suites = mvm->ciphers;
460
8ca151b5
JB		 461 /*
462 * Enable 11w if advertised by firmware and software crypto
463 * is not enabled (as the firmware will interpret some mgmt
464 * packets, so enabling it with software crypto isn't safe)
465 */
466 if (mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_MFP &&
5f4c02e2 467 !iwlwifi_mod_params.sw_crypto) {
30686bf7 468 ieee80211_hw_set(hw, MFP_CAPABLE);
5f4c02e2
JB		 469 mvm->ciphers[hw->wiphy->n_cipher_suites] =
470 WLAN_CIPHER_SUITE_AES_CMAC;
471 hw->wiphy->n_cipher_suites++;
472 }
473
474 /* currently FW API supports only one optional cipher scheme */
475 if (mvm->fw->cs[0].cipher) {
476 mvm->hw->n_cipher_schemes = 1;
477 mvm->hw->cipher_schemes = &mvm->fw->cs[0];
478 mvm->ciphers[hw->wiphy->n_cipher_suites] =
479 mvm->fw->cs[0].cipher;
480 hw->wiphy->n_cipher_suites++;
481 }
8ca151b5 482
30686bf7 483 ieee80211_hw_set(hw, SINGLE_SCAN_ON_ALL_BANDS);
1f940386
LC		 484 hw->wiphy->features |=
485 NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR |
3db93420
JB		 486 NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR |
487 NL80211_FEATURE_ND_RANDOM_MAC_ADDR;
fb98be5e 488
8ca151b5
JB		 489 hw->sta_data_size = sizeof(struct iwl_mvm_sta);
490 hw->vif_data_size = sizeof(struct iwl_mvm_vif);
fe0f2de3 491 hw->chanctx_data_size = sizeof(u16);
8ca151b5
JB		 492
493 hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
3c15a0fb
JB		 494 BIT(NL80211_IFTYPE_P2P_CLIENT) |
495 BIT(NL80211_IFTYPE_AP) |
496 BIT(NL80211_IFTYPE_P2P_GO) |
c13b1725
EG		 497 BIT(NL80211_IFTYPE_P2P_DEVICE) |
498 BIT(NL80211_IFTYPE_ADHOC);
5023d966 499
a2f73b6c 500 hw->wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
8ba2d7a1
EH		 501 hw->wiphy->regulatory_flags |= REGULATORY_ENABLE_RELAX_NO_IR;
502 if (iwl_mvm_is_lar_supported(mvm))
503 hw->wiphy->regulatory_flags |= REGULATORY_WIPHY_SELF_MANAGED;
504 else
505 hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG |
506 REGULATORY_DISABLE_BEACON_HINTS;
8ca151b5 507
3e56eadf
JB		 508 if (mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_GO_UAPSD)
509 hw->wiphy->flags |= WIPHY_FLAG_AP_UAPSD;
510
94bbed72 511 hw->wiphy->flags |= WIPHY_FLAG_HAS_CHANNEL_SWITCH;
bd3398e2 512
8ca151b5
JB		 513 hw->wiphy->iface_combinations = iwl_mvm_iface_combinations;
514 hw->wiphy->n_iface_combinations =
515 ARRAY_SIZE(iwl_mvm_iface_combinations);
516
c451e6d4 517 hw->wiphy->max_remain_on_channel_duration = 10000;
8ca151b5 518 hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
f1a68542
EG		 519 /* we can compensate an offset of up to 3 channels = 15 MHz */
520 hw->wiphy->max_adj_channel_rssi_comp = 3 * 5;
8ca151b5
JB		 521
522 /* Extract MAC address */
523 memcpy(mvm->addresses[0].addr, mvm->nvm_data->hw_addr, ETH_ALEN);
524 hw->wiphy->addresses = mvm->addresses;
525 hw->wiphy->n_addresses = 1;
831e85f3
IP		 526
527 /* Extract additional MAC addresses if available */
528 num_mac = (mvm->nvm_data->n_hw_addrs > 1) ?
529 min(IWL_MVM_MAX_ADDRESSES, mvm->nvm_data->n_hw_addrs) : 1;
530
531 for (i = 1; i < num_mac; i++) {
532 memcpy(mvm->addresses[i].addr, mvm->addresses[i-1].addr,
8ca151b5 533 ETH_ALEN);
831e85f3 534 mvm->addresses[i].addr[5]++;
8ca151b5
JB		 535 hw->wiphy->n_addresses++;
536 }
537
fe0f2de3
IP		 538 iwl_mvm_reset_phy_ctxts(mvm);
539
999d2568 540 hw->wiphy->max_scan_ie_len = iwl_mvm_max_scan_ie_len(mvm);
20f1a5de 541
8ca151b5
JB		 542 hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
543
c7d42480 544 BUILD_BUG_ON(IWL_MVM_SCAN_STOPPING_MASK & IWL_MVM_SCAN_MASK);
507e4cda
LC		 545 BUILD_BUG_ON(IWL_MVM_MAX_UMAC_SCANS > HWEIGHT32(IWL_MVM_SCAN_MASK) ||
546 IWL_MVM_MAX_LMAC_SCANS > HWEIGHT32(IWL_MVM_SCAN_MASK));
547
859d914c 548 if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_UMAC_SCAN))
507e4cda
LC		 549 mvm->max_scans = IWL_MVM_MAX_UMAC_SCANS;
550 else
551 mvm->max_scans = IWL_MVM_MAX_LMAC_SCANS;
552
8ca151b5
JB		 553 if (mvm->nvm_data->bands[IEEE80211_BAND_2GHZ].n_channels)
554 hw->wiphy->bands[IEEE80211_BAND_2GHZ] =
555 &mvm->nvm_data->bands[IEEE80211_BAND_2GHZ];
3d44eebf 556 if (mvm->nvm_data->bands[IEEE80211_BAND_5GHZ].n_channels) {
8ca151b5
JB		 557 hw->wiphy->bands[IEEE80211_BAND_5GHZ] =
558 &mvm->nvm_data->bands[IEEE80211_BAND_5GHZ];
559
859d914c
JB		 560 if (fw_has_capa(&mvm->fw->ucode_capa,
561 IWL_UCODE_TLV_CAPA_BEAMFORMER) &&
562 fw_has_api(&mvm->fw->ucode_capa,
563 IWL_UCODE_TLV_API_LQ_SS_PARAMS))
3d44eebf
ES		 564 hw->wiphy->bands[IEEE80211_BAND_5GHZ]->vht_cap.cap |=
565 IEEE80211_VHT_CAP_SU_BEAMFORMER_CAPABLE;
566 }
567
8ca151b5
JB		 568 hw->wiphy->hw_version = mvm->trans->hw_id;
569
ade50652 570 if (iwlmvm_mod_params.power_scheme != IWL_POWER_SCHEME_CAM)
8ca151b5
JB		 571 hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
572 else
573 hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
574
9954b37c
EG		 575 hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_SCHED_SCAN;
576 hw->wiphy->max_sched_scan_ssids = PROBE_OPTION_MAX;
577 hw->wiphy->max_match_sets = IWL_SCAN_MAX_PROFILES;
578 /* we create the 802.11 header and zero length SSID IE. */
579 hw->wiphy->max_sched_scan_ie_len =
580 SCAN_OFFLOAD_PROBE_REQ_SIZE - 24 - 2;
cd55ccea
AS		 581 hw->wiphy->max_sched_scan_plans = IWL_MAX_SCHED_SCAN_PLANS;
582 hw->wiphy->max_sched_scan_plan_interval = U16_MAX;
583
584 /*
585 * the firmware uses u8 for num of iterations, but 0xff is saved for
586 * infinite loop, so the maximum number of iterations is actually 254.
587 */
588 hw->wiphy->max_sched_scan_plan_iterations = 254;
35a000b7 589
8ca151b5 590 hw->wiphy->features |= NL80211_FEATURE_P2P_GO_CTWIN |
ab480030 591 NL80211_FEATURE_LOW_PRIORITY_SCAN |
0d8614b4
EP		 592 NL80211_FEATURE_P2P_GO_OPPPS |
593 NL80211_FEATURE_DYNAMIC_SMPS |
9b5452fd
EG		 594 NL80211_FEATURE_STATIC_SMPS |
595 NL80211_FEATURE_SUPPORTS_WMM_ADMISSION;
8ca151b5 596
859d914c
JB		 597 if (fw_has_capa(&mvm->fw->ucode_capa,
598 IWL_UCODE_TLV_CAPA_TXPOWER_INSERTION_SUPPORT))
f1daa00e 599 hw->wiphy->features |= NL80211_FEATURE_TX_POWER_INSERTION;
859d914c
JB		 600 if (fw_has_capa(&mvm->fw->ucode_capa,
601 IWL_UCODE_TLV_CAPA_QUIET_PERIOD_SUPPORT))
226bcd48 602 hw->wiphy->features |= NL80211_FEATURE_QUIET;
f1daa00e 603
859d914c
JB		 604 if (fw_has_capa(&mvm->fw->ucode_capa,
605 IWL_UCODE_TLV_CAPA_DS_PARAM_SET_IE_SUPPORT))
73897bd1
AO		 606 hw->wiphy->features |=
607 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES;
608
859d914c
JB		 609 if (fw_has_capa(&mvm->fw->ucode_capa,
610 IWL_UCODE_TLV_CAPA_WFA_TPC_REP_IE_SUPPORT))
73897bd1
AO		 611 hw->wiphy->features |= NL80211_FEATURE_WFA_TPC_IE_IN_PROBES;
612
8ca151b5
JB		 613 mvm->rts_threshold = IEEE80211_MAX_RTS_THRESHOLD;
614
615#ifdef CONFIG_PM_SLEEP
d15a747f
EP		 616 if (iwl_mvm_is_d0i3_supported(mvm) &&
617 device_can_wakeup(mvm->trans->dev)) {
618 mvm->wowlan.flags = WIPHY_WOWLAN_ANY;
619 hw->wiphy->wowlan = &mvm->wowlan;
91742449
EP		 620 }
621
622 if (mvm->fw->img[IWL_UCODE_WOWLAN].sec[0].len &&
8ca151b5
JB		 623 mvm->trans->ops->d3_suspend &&
624 mvm->trans->ops->d3_resume &&
625 device_can_wakeup(mvm->trans->dev)) {
91742449
EP		 626 mvm->wowlan.flags |= WIPHY_WOWLAN_MAGIC_PKT |
627 WIPHY_WOWLAN_DISCONNECT |
628 WIPHY_WOWLAN_EAP_IDENTITY_REQ |
629 WIPHY_WOWLAN_RFKILL_RELEASE |
630 WIPHY_WOWLAN_NET_DETECT;
8ca151b5 631 if (!iwlwifi_mod_params.sw_crypto)
964dc9e2
JB		 632 mvm->wowlan.flags |= WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
633 WIPHY_WOWLAN_GTK_REKEY_FAILURE |
634 WIPHY_WOWLAN_4WAY_HANDSHAKE;
635
636 mvm->wowlan.n_patterns = IWL_WOWLAN_MAX_PATTERNS;
637 mvm->wowlan.pattern_min_len = IWL_WOWLAN_MIN_PATTERN_LEN;
638 mvm->wowlan.pattern_max_len = IWL_WOWLAN_MAX_PATTERN_LEN;
c55385f5 639 mvm->wowlan.max_nd_match_sets = IWL_SCAN_MAX_PROFILES;
964dc9e2
JB		 640 mvm->wowlan.tcp = &iwl_mvm_wowlan_tcp_support;
641 hw->wiphy->wowlan = &mvm->wowlan;
8ca151b5
JB		 642 }
643#endif
644
77736923
EP		 645#ifdef CONFIG_IWLWIFI_BCAST_FILTERING
646 /* assign default bcast filtering configuration */
647 mvm->bcast_filters = iwl_mvm_default_bcast_filters;
648#endif
649
8ca151b5
JB		 650 ret = iwl_mvm_leds_init(mvm);
651 if (ret)
652 return ret;
653
859d914c
JB		 654 if (fw_has_capa(&mvm->fw->ucode_capa,
655 IWL_UCODE_TLV_CAPA_TDLS_SUPPORT)) {
d8f1c515
AN		 656 IWL_DEBUG_TDLS(mvm, "TDLS supported\n");
657 hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_TDLS;
7c4f0843 658 ieee80211_hw_set(hw, TDLS_WIDER_BW);
d8f1c515
AN		 659 }
660
859d914c
JB		 661 if (fw_has_capa(&mvm->fw->ucode_capa,
662 IWL_UCODE_TLV_CAPA_TDLS_CHANNEL_SWITCH)) {
1d3c3f63
AN		 663 IWL_DEBUG_TDLS(mvm, "TDLS channel switch supported\n");
664 hw->wiphy->features |= NL80211_FEATURE_TDLS_CHANNEL_SWITCH;
665 }
666
93190fb0
AA		 667 hw->netdev_features |= mvm->cfg->features;
668 if (!iwl_mvm_is_csum_supported(mvm))
669 hw->netdev_features &= ~NETIF_F_RXCSUM;
670
41837ca9 671 if (IWL_MVM_SW_TX_CSUM_OFFLOAD)
a3713f8b
EG		 672 hw->netdev_features |= NETIF_F_IP_CSUM | NETIF_F_IPV6_CSUM |
673 NETIF_F_TSO | NETIF_F_TSO6;
41837ca9 674
b7327d89
EG		 675 ret = ieee80211_register_hw(mvm->hw);
676 if (ret)
677 iwl_mvm_leds_exit(mvm);
678
679 return ret;
8ca151b5
JB		 680}
681
b2492501
AN		 682static bool iwl_mvm_defer_tx(struct iwl_mvm *mvm,
683 struct ieee80211_sta *sta,
684 struct sk_buff *skb)
685{
686 struct iwl_mvm_sta *mvmsta;
687 bool defer = false;
688
689 /*
690 * double check the IN_D0I3 flag both before and after
691 * taking the spinlock, in order to prevent taking
692 * the spinlock when not needed.
693 */
694 if (likely(!test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status)))
695 return false;
696
697 spin_lock(&mvm->d0i3_tx_lock);
698 /*
699 * testing the flag again ensures the skb dequeue
700 * loop (on d0i3 exit) hasn't run yet.
701 */
702 if (!test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status))
703 goto out;
704
705 mvmsta = iwl_mvm_sta_from_mac80211(sta);
706 if (mvmsta->sta_id == IWL_MVM_STATION_COUNT ||
707 mvmsta->sta_id != mvm->d0i3_ap_sta_id)
708 goto out;
709
710 __skb_queue_tail(&mvm->d0i3_tx, skb);
711 ieee80211_stop_queues(mvm->hw);
712
713 /* trigger wakeup */
714 iwl_mvm_ref(mvm, IWL_MVM_REF_TX);
715 iwl_mvm_unref(mvm, IWL_MVM_REF_TX);
716
717 defer = true;
718out:
719 spin_unlock(&mvm->d0i3_tx_lock);
720 return defer;
721}
722
8ca151b5
JB		 723static void iwl_mvm_mac_tx(struct ieee80211_hw *hw,
724 struct ieee80211_tx_control *control,
725 struct sk_buff *skb)
726{
727 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3e56eadf
JB		 728 struct ieee80211_sta *sta = control->sta;
729 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
730 struct ieee80211_hdr *hdr = (void *)skb->data;
8ca151b5 731
9ee718aa
EL		 732 if (iwl_mvm_is_radio_killed(mvm)) {
733 IWL_DEBUG_DROP(mvm, "Dropping - RF/CT KILL\n");
8ca151b5
JB		 734 goto drop;
735 }
736
398e8c6c 737 if (IEEE80211_SKB_CB(skb)->hw_queue == IWL_MVM_OFFCHANNEL_QUEUE &&
a6cc5163
MG		 738 !test_bit(IWL_MVM_STATUS_ROC_RUNNING, &mvm->status) &&
739 !test_bit(IWL_MVM_STATUS_ROC_AUX_RUNNING, &mvm->status))
8ca151b5
JB		 740 goto drop;
741
3e56eadf
JB		 742 /* treat non-bufferable MMPDUs as broadcast if sta is sleeping */
743 if (unlikely(info->flags & IEEE80211_TX_CTL_NO_PS_BUFFER &&
744 ieee80211_is_mgmt(hdr->frame_control) &&
745 !ieee80211_is_deauth(hdr->frame_control) &&
746 !ieee80211_is_disassoc(hdr->frame_control) &&
747 !ieee80211_is_action(hdr->frame_control)))
748 sta = NULL;
749
750 if (sta) {
b2492501
AN		 751 if (iwl_mvm_defer_tx(mvm, sta, skb))
752 return;
3e56eadf 753 if (iwl_mvm_tx_skb(mvm, skb, sta))
8ca151b5
JB		 754 goto drop;
755 return;
756 }
757
758 if (iwl_mvm_tx_skb_non_sta(mvm, skb))
759 goto drop;
760 return;
761 drop:
762 ieee80211_free_txskb(hw, skb);
763}
764
205e2210
EG		 765static inline bool iwl_enable_rx_ampdu(const struct iwl_cfg *cfg)
766{
767 if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_RXAGG)
768 return false;
769 return true;
770}
771
772static inline bool iwl_enable_tx_ampdu(const struct iwl_cfg *cfg)
773{
774 if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_TXAGG)
775 return false;
776 if (iwlwifi_mod_params.disable_11n & IWL_ENABLE_HT_TXAGG)
777 return true;
778
779 /* enabled by default */
780 return true;
781}
782
4203263d
EG		 783#define CHECK_BA_TRIGGER(_mvm, _trig, _tid_bm, _tid, _fmt...) \
784 do { \
785 if (!(le16_to_cpu(_tid_bm) & BIT(_tid))) \
786 break; \
787 iwl_mvm_fw_dbg_collect_trig(_mvm, _trig, _fmt); \
788 } while (0)
789
790static void
791iwl_mvm_ampdu_check_trigger(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
792 struct ieee80211_sta *sta, u16 tid, u16 rx_ba_ssn,
793 enum ieee80211_ampdu_mlme_action action)
794{
795 struct iwl_fw_dbg_trigger_tlv *trig;
796 struct iwl_fw_dbg_trigger_ba *ba_trig;
797
798 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_BA))
799 return;
800
801 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_BA);
802 ba_trig = (void *)trig->data;
803
804 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig))
805 return;
806
807 switch (action) {
808 case IEEE80211_AMPDU_TX_OPERATIONAL: {
809 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
810 struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid];
811
812 CHECK_BA_TRIGGER(mvm, trig, ba_trig->tx_ba_start, tid,
813 "TX AGG START: MAC %pM tid %d ssn %d\n",
814 sta->addr, tid, tid_data->ssn);
815 break;
816 }
817 case IEEE80211_AMPDU_TX_STOP_CONT:
818 CHECK_BA_TRIGGER(mvm, trig, ba_trig->tx_ba_stop, tid,
819 "TX AGG STOP: MAC %pM tid %d\n",
820 sta->addr, tid);
821 break;
822 case IEEE80211_AMPDU_RX_START:
823 CHECK_BA_TRIGGER(mvm, trig, ba_trig->rx_ba_start, tid,
824 "RX AGG START: MAC %pM tid %d ssn %d\n",
825 sta->addr, tid, rx_ba_ssn);
826 break;
827 case IEEE80211_AMPDU_RX_STOP:
828 CHECK_BA_TRIGGER(mvm, trig, ba_trig->rx_ba_stop, tid,
829 "RX AGG STOP: MAC %pM tid %d\n",
830 sta->addr, tid);
831 break;
832 default:
833 break;
834 }
835}
836
8ca151b5
JB		 837static int iwl_mvm_mac_ampdu_action(struct ieee80211_hw *hw,
838 struct ieee80211_vif *vif,
50ea05ef 839 struct ieee80211_ampdu_params *params)
8ca151b5
JB		 840{
841 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
842 int ret;
b2492501 843 bool tx_agg_ref = false;
50ea05ef
SS		 844 struct ieee80211_sta *sta = params->sta;
845 enum ieee80211_ampdu_mlme_action action = params->action;
846 u16 tid = params->tid;
847 u16 *ssn = &params->ssn;
848 u8 buf_size = params->buf_size;
bb81bb68 849 bool amsdu = params->amsdu;
8ca151b5
JB		 850
851 IWL_DEBUG_HT(mvm, "A-MPDU action on addr %pM tid %d: action %d\n",
852 sta->addr, tid, action);
853
854 if (!(mvm->nvm_data->sku_cap_11n_enable))
855 return -EACCES;
856
b2492501 857 /* return from D0i3 before starting a new Tx aggregation */
9256c205
EP		 858 switch (action) {
859 case IEEE80211_AMPDU_TX_START:
860 case IEEE80211_AMPDU_TX_STOP_CONT:
861 case IEEE80211_AMPDU_TX_STOP_FLUSH:
862 case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
863 case IEEE80211_AMPDU_TX_OPERATIONAL:
b2492501 864 /*
9256c205
EP		 865 * for tx start, wait synchronously until D0i3 exit to
866 * get the correct sequence number for the tid.
867 * additionally, some other ampdu actions use direct
868 * target access, which is not handled automatically
869 * by the trans layer (unlike commands), so wait for
870 * d0i3 exit in these cases as well.
b2492501 871 */
d40fc489
GG		 872 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_TX_AGG);
873 if (ret)
874 return ret;
875
876 tx_agg_ref = true;
9256c205
EP		 877 break;
878 default:
879 break;
b2492501
AN		 880 }
881
8ca151b5
JB		 882 mutex_lock(&mvm->mutex);
883
884 switch (action) {
885 case IEEE80211_AMPDU_RX_START:
205e2210 886 if (!iwl_enable_rx_ampdu(mvm->cfg)) {
8ca151b5
JB		 887 ret = -EINVAL;
888 break;
889 }
854c5705 890 ret = iwl_mvm_sta_rx_agg(mvm, sta, tid, *ssn, true, buf_size);
8ca151b5
JB		 891 break;
892 case IEEE80211_AMPDU_RX_STOP:
854c5705 893 ret = iwl_mvm_sta_rx_agg(mvm, sta, tid, 0, false, buf_size);
8ca151b5
JB		 894 break;
895 case IEEE80211_AMPDU_TX_START:
205e2210 896 if (!iwl_enable_tx_ampdu(mvm->cfg)) {
5d158efa
EG		 897 ret = -EINVAL;
898 break;
899 }
8ca151b5
JB		 900 ret = iwl_mvm_sta_tx_agg_start(mvm, vif, sta, tid, ssn);
901 break;
902 case IEEE80211_AMPDU_TX_STOP_CONT:
e3d9e7ce
EG		 903 ret = iwl_mvm_sta_tx_agg_stop(mvm, vif, sta, tid);
904 break;
8ca151b5
JB		 905 case IEEE80211_AMPDU_TX_STOP_FLUSH:
906 case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
e3d9e7ce 907 ret = iwl_mvm_sta_tx_agg_flush(mvm, vif, sta, tid);
8ca151b5
JB		 908 break;
909 case IEEE80211_AMPDU_TX_OPERATIONAL:
bb81bb68
EG		 910 ret = iwl_mvm_sta_tx_agg_oper(mvm, vif, sta, tid,
911 buf_size, amsdu);
8ca151b5
JB		 912 break;
913 default:
914 WARN_ON_ONCE(1);
915 ret = -EINVAL;
916 break;
917 }
4203263d
EG		 918
919 if (!ret) {
920 u16 rx_ba_ssn = 0;
921
922 if (action == IEEE80211_AMPDU_RX_START)
923 rx_ba_ssn = *ssn;
924
925 iwl_mvm_ampdu_check_trigger(mvm, vif, sta, tid,
926 rx_ba_ssn, action);
927 }
8ca151b5
JB		 928 mutex_unlock(&mvm->mutex);
929
b2492501
AN		 930 /*
931 * If the tid is marked as started, we won't use it for offloaded
932 * traffic on the next D0i3 entry. It's safe to unref.
933 */
934 if (tx_agg_ref)
935 iwl_mvm_unref(mvm, IWL_MVM_REF_TX_AGG);
936
8ca151b5
JB		 937 return ret;
938}
939
940static void iwl_mvm_cleanup_iterator(void *data, u8 *mac,
941 struct ieee80211_vif *vif)
942{
943 struct iwl_mvm *mvm = data;
944 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
945
946 mvmvif->uploaded = false;
947 mvmvif->ap_sta_id = IWL_MVM_STATION_COUNT;
948
8ca151b5
JB		 949 spin_lock_bh(&mvm->time_event_lock);
950 iwl_mvm_te_clear_data(mvm, &mvmvif->time_event_data);
951 spin_unlock_bh(&mvm->time_event_lock);
952
fe0f2de3 953 mvmvif->phy_ctxt = NULL;
8a275bad 954 memset(&mvmvif->bf_data, 0, sizeof(mvmvif->bf_data));
8ca151b5
JB		 955}
956
957static void iwl_mvm_restart_cleanup(struct iwl_mvm *mvm)
958{
58629d9d
JB		 959 /* clear the D3 reconfig, we only need it to avoid dumping a
960 * firmware coredump on reconfiguration, we shouldn't do that
961 * on D3->D0 transition
962 */
b6eaa45a
EG		 963 if (!test_and_clear_bit(IWL_MVM_STATUS_D3_RECONFIG, &mvm->status)) {
964 mvm->fw_dump_desc = &iwl_mvm_dump_desc_assert;
58629d9d 965 iwl_mvm_fw_error_dump(mvm);
b6eaa45a 966 }
1bd3cbc1 967
744cb695
EP		 968 /* cleanup all stale references (scan, roc), but keep the
969 * ucode_down ref until reconfig is complete
970 */
971 iwl_mvm_unref_all_except(mvm, IWL_MVM_REF_UCODE_DOWN);
972
fcb6b92a 973 iwl_mvm_stop_device(mvm);
8ca151b5 974
9af91f46 975 mvm->scan_status = 0;
b1873300 976 mvm->ps_disabled = false;
31b8b343 977 mvm->calibrating = false;
8ca151b5
JB		 978
979 /* just in case one was running */
305d236e 980 iwl_mvm_cleanup_roc_te(mvm);
8ca151b5
JB		 981 ieee80211_remain_on_channel_expired(mvm->hw);
982
737719fe
AN		 983 /*
984 * cleanup all interfaces, even inactive ones, as some might have
985 * gone down during the HW restart
986 */
987 ieee80211_iterate_interfaces(mvm->hw, 0, iwl_mvm_cleanup_iterator, mvm);
8ca151b5 988
fe0f2de3 989 mvm->p2p_device_vif = NULL;
37577fe2 990 mvm->d0i3_ap_sta_id = IWL_MVM_STATION_COUNT;
fe0f2de3
IP		 991
992 iwl_mvm_reset_phy_ctxts(mvm);
9c3deeb5 993 memset(mvm->fw_key_table, 0, sizeof(mvm->fw_key_table));
8ca151b5 994 memset(mvm->sta_drained, 0, sizeof(mvm->sta_drained));
a0f6bf2a 995 memset(mvm->tfd_drained, 0, sizeof(mvm->tfd_drained));
8a275bad
EG		 996 memset(&mvm->last_bt_notif, 0, sizeof(mvm->last_bt_notif));
997 memset(&mvm->last_bt_notif_old, 0, sizeof(mvm->last_bt_notif_old));
998 memset(&mvm->last_bt_ci_cmd, 0, sizeof(mvm->last_bt_ci_cmd));
999 memset(&mvm->last_bt_ci_cmd_old, 0, sizeof(mvm->last_bt_ci_cmd_old));
1000 memset(&mvm->bt_ack_kill_msk, 0, sizeof(mvm->bt_ack_kill_msk));
1001 memset(&mvm->bt_cts_kill_msk, 0, sizeof(mvm->bt_cts_kill_msk));
8ca151b5
JB		 1002
1003 ieee80211_wake_queues(mvm->hw);
1004
228670b2
EP		 1005 /* clear any stale d0i3 state */
1006 clear_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status);
1007
8ca151b5 1008 mvm->vif_count = 0;
113a0447 1009 mvm->rx_ba_sessions = 0;
d2709ad7 1010 mvm->fw_dbg_conf = FW_DBG_INVALID;
91a8bcde
JB		 1011
1012 /* keep statistics ticking */
1013 iwl_mvm_accu_radio_stats(mvm);
8ca151b5
JB		 1014}
1015
a0a09243 1016int __iwl_mvm_mac_start(struct iwl_mvm *mvm)
8ca151b5 1017{
8ca151b5
JB		 1018 int ret;
1019
a0a09243 1020 lockdep_assert_held(&mvm->mutex);
8ca151b5 1021
a42b2af3
LC		 1022 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) {
1023 /* Clean up some internal and mac80211 state on restart */
8ca151b5 1024 iwl_mvm_restart_cleanup(mvm);
a42b2af3
LC		 1025 } else {
1026 /* Hold the reference to prevent runtime suspend while
1027 * the start procedure runs. It's a bit confusing
1028 * that the UCODE_DOWN reference is taken, but it just
1029 * means "UCODE is not UP yet". ( TODO: rename this
1030 * reference).
1031 */
1032 iwl_mvm_ref(mvm, IWL_MVM_REF_UCODE_DOWN);
1033 }
8ca151b5 1034 ret = iwl_mvm_up(mvm);
c47af22a
JB		 1035
1036 if (ret && test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) {
1037 /* Something went wrong - we need to finish some cleanup
1038 * that normally iwl_mvm_mac_restart_complete() below
1039 * would do.
1040 */
1041 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status);
1042 iwl_mvm_d0i3_enable_tx(mvm, NULL);
1043 }
1044
a0a09243
LC		 1045 return ret;
1046}
1047
1048static int iwl_mvm_mac_start(struct ieee80211_hw *hw)
1049{
1050 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1051 int ret;
1052
37948fcf
EP		 1053 /* Some hw restart cleanups must not hold the mutex */
1054 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) {
1055 /*
1056 * Make sure we are out of d0i3. This is needed
1057 * to make sure the reference accounting is correct
1058 * (and there is no stale d0i3_exit_work).
1059 */
1060 wait_event_timeout(mvm->d0i3_exit_waitq,
1061 !test_bit(IWL_MVM_STATUS_IN_D0I3,
1062 &mvm->status),
1063 HZ);
1064 }
1065
a0a09243
LC		 1066 mutex_lock(&mvm->mutex);
1067 ret = __iwl_mvm_mac_start(mvm);
8ca151b5
JB		 1068 mutex_unlock(&mvm->mutex);
1069
1070 return ret;
1071}
1072
cf2c92d8 1073static void iwl_mvm_restart_complete(struct iwl_mvm *mvm)
8ca151b5 1074{
8ca151b5
JB		 1075 int ret;
1076
1077 mutex_lock(&mvm->mutex);
1078
1079 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status);
b2492501 1080 iwl_mvm_d0i3_enable_tx(mvm, NULL);
e7afe89f 1081 ret = iwl_mvm_update_quotas(mvm, true, NULL);
8ca151b5
JB		 1082 if (ret)
1083 IWL_ERR(mvm, "Failed to update quotas after restart (%d)\n",
1084 ret);
1085
7498cf4c
EP		 1086 /* allow transport/FW low power modes */
1087 iwl_mvm_unref(mvm, IWL_MVM_REF_UCODE_DOWN);
1088
cbd2ae2d
AN		 1089 /*
1090 * If we have TDLS peers, remove them. We don't know the last seqno/PN
1091 * of packets the FW sent out, so we must reconnect.
1092 */
1093 iwl_mvm_teardown_tdls_peers(mvm);
1094
8ca151b5
JB		 1095 mutex_unlock(&mvm->mutex);
1096}
1097
088070a2
EP		 1098static void iwl_mvm_resume_complete(struct iwl_mvm *mvm)
1099{
b7282643
LC		 1100 if (iwl_mvm_is_d0i3_supported(mvm) &&
1101 iwl_mvm_enter_d0i3_on_suspend(mvm))
1102 WARN_ONCE(!wait_event_timeout(mvm->d0i3_exit_waitq,
1103 !test_bit(IWL_MVM_STATUS_IN_D0I3,
1104 &mvm->status),
1105 HZ),
1106 "D0i3 exit on resume timed out\n");
088070a2
EP		 1107}
1108
cf2c92d8
EP		 1109static void
1110iwl_mvm_mac_reconfig_complete(struct ieee80211_hw *hw,
1111 enum ieee80211_reconfig_type reconfig_type)
1112{
1113 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1114
1115 switch (reconfig_type) {
1116 case IEEE80211_RECONFIG_TYPE_RESTART:
1117 iwl_mvm_restart_complete(mvm);
1118 break;
1119 case IEEE80211_RECONFIG_TYPE_SUSPEND:
088070a2 1120 iwl_mvm_resume_complete(mvm);
cf2c92d8
EP		 1121 break;
1122 }
1123}
1124
a0a09243 1125void __iwl_mvm_mac_stop(struct iwl_mvm *mvm)
8ca151b5 1126{
a0a09243 1127 lockdep_assert_held(&mvm->mutex);
7498cf4c 1128
91a8bcde
JB		 1129 /* firmware counters are obviously reset now, but we shouldn't
1130 * partially track so also clear the fw_reset_accu counters.
1131 */
1132 memset(&mvm->accu_radio_stats, 0, sizeof(mvm->accu_radio_stats));
1133
8ca151b5
JB		 1134 /* async_handlers_wk is now blocked */
1135
1136 /*
1137 * The work item could be running or queued if the
1138 * ROC time event stops just as we get here.
1139 */
c779273b 1140 flush_work(&mvm->roc_done_wk);
8ca151b5 1141
fcb6b92a 1142 iwl_mvm_stop_device(mvm);
8ca151b5
JB		 1143
1144 iwl_mvm_async_handlers_purge(mvm);
1145 /* async_handlers_list is empty and will stay empty: HW is stopped */
1146
1147 /* the fw is stopped, the aux sta is dead: clean up driver state */
712b24ad 1148 iwl_mvm_del_aux_sta(mvm);
8ca151b5 1149
0a79a0c0
EP		 1150 /*
1151 * Clear IN_HW_RESTART flag when stopping the hw (as restart_complete()
1152 * won't be called in this case).
8b2b9fbf
AN		 1153 * But make sure to cleanup interfaces that have gone down before/during
1154 * HW restart was requested.
0a79a0c0 1155 */
8b2b9fbf
AN		 1156 if (test_and_clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status))
1157 ieee80211_iterate_interfaces(mvm->hw, 0,
1158 iwl_mvm_cleanup_iterator, mvm);
0a79a0c0 1159
963221be
AB		 1160 /* We shouldn't have any UIDs still set. Loop over all the UIDs to
1161 * make sure there's nothing left there and warn if any is found.
1162 */
859d914c 1163 if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_UMAC_SCAN)) {
963221be
AB		 1164 int i;
1165
507e4cda 1166 for (i = 0; i < mvm->max_scans; i++) {
6185af2a
LC		 1167 if (WARN_ONCE(mvm->scan_uid_status[i],
1168 "UMAC scan UID %d status was not cleaned\n",
1169 i))
1170 mvm->scan_uid_status[i] = 0;
963221be
AB		 1171 }
1172 }
a0a09243 1173}
bc44886d 1174
a0a09243
LC		 1175static void iwl_mvm_mac_stop(struct ieee80211_hw *hw)
1176{
1177 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1178
1179 flush_work(&mvm->d0i3_exit_work);
1180 flush_work(&mvm->async_handlers_wk);
d2709ad7 1181 cancel_delayed_work_sync(&mvm->fw_dump_wk);
b6eaa45a 1182 iwl_mvm_free_fw_dump_desc(mvm);
a0a09243
LC		 1183
1184 mutex_lock(&mvm->mutex);
1185 __iwl_mvm_mac_stop(mvm);
8ca151b5
JB		 1186 mutex_unlock(&mvm->mutex);
1187
1188 /*
1189 * The worker might have been waiting for the mutex, let it run and
1190 * discover that its list is now empty.
1191 */
1192 cancel_work_sync(&mvm->async_handlers_wk);
1193}
1194
fe0f2de3
IP		 1195static struct iwl_mvm_phy_ctxt *iwl_mvm_get_free_phy_ctxt(struct iwl_mvm *mvm)
1196{
1197 u16 i;
1198
1199 lockdep_assert_held(&mvm->mutex);
1200
1201 for (i = 0; i < NUM_PHY_CTX; i++)
1202 if (!mvm->phy_ctxts[i].ref)
1203 return &mvm->phy_ctxts[i];
1204
1205 IWL_ERR(mvm, "No available PHY context\n");
1206 return NULL;
1207}
1208
d44c3fe6
AA		 1209static int iwl_mvm_set_tx_power(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
1210 s16 tx_power)
1211{
1212 struct iwl_dev_tx_power_cmd cmd = {
da03f029
JB		 1213 .v2.set_mode = cpu_to_le32(IWL_TX_POWER_MODE_SET_MAC),
1214 .v2.mac_context_id =
d44c3fe6 1215 cpu_to_le32(iwl_mvm_vif_from_mac80211(vif)->id),
da03f029 1216 .v2.pwr_restriction = cpu_to_le16(8 * tx_power),
d44c3fe6 1217 };
da03f029 1218 int len = sizeof(cmd);
d44c3fe6 1219
d44c3fe6 1220 if (tx_power == IWL_DEFAULT_MAX_TX_POWER)
da03f029 1221 cmd.v2.pwr_restriction = cpu_to_le16(IWL_DEV_MAX_TX_POWER);
d44c3fe6 1222
da03f029
JB		 1223 if (!fw_has_api(&mvm->fw->ucode_capa, IWL_UCODE_TLV_API_TX_POWER_CHAIN))
1224 len = sizeof(cmd.v2);
1225
1226 return iwl_mvm_send_cmd_pdu(mvm, REDUCE_TX_POWER_CMD, 0, len, &cmd);
d44c3fe6
AA		 1227}
1228
8ca151b5
JB		 1229static int iwl_mvm_mac_add_interface(struct ieee80211_hw *hw,
1230 struct ieee80211_vif *vif)
1231{
1232 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1233 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1234 int ret;
1235
aa5e1832
EG		 1236 mvmvif->mvm = mvm;
1237
d40fc489
GG		 1238 /*
1239 * make sure D0i3 exit is completed, otherwise a target access
1240 * during tx queue configuration could be done when still in
1241 * D0i3 state.
1242 */
1243 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_ADD_IF);
1244 if (ret)
1245 return ret;
1246
8ca151b5
JB		 1247 /*
1248 * Not much to do here. The stack will not allow interface
1249 * types or combinations that we didn't advertise, so we
1250 * don't really have to check the types.
1251 */
1252
1253 mutex_lock(&mvm->mutex);
1254
33cef925
JB		 1255 /* make sure that beacon statistics don't go backwards with FW reset */
1256 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status))
1257 mvmvif->beacon_stats.accu_num_beacons +=
1258 mvmvif->beacon_stats.num_beacons;
1259
e89044d7 1260 /* Allocate resources for the MAC context, and add it to the fw */
8ca151b5
JB		 1261 ret = iwl_mvm_mac_ctxt_init(mvm, vif);
1262 if (ret)
1263 goto out_unlock;
1264
1c2abf72 1265 /* Counting number of interfaces is needed for legacy PM */
ea183d02
IP		 1266 if (vif->type != NL80211_IFTYPE_P2P_DEVICE)
1267 mvm->vif_count++;
ea183d02 1268
8ca151b5
JB		 1269 /*
1270 * The AP binding flow can be done only after the beacon
1271 * template is configured (which happens only in the mac80211
1272 * start_ap() flow), and adding the broadcast station can happen
1273 * only after the binding.
1274 * In addition, since modifying the MAC before adding a bcast
1275 * station is not allowed by the FW, delay the adding of MAC context to
1276 * the point where we can also add the bcast station.
1277 * In short: there's not much we can do at this point, other than
1278 * allocating resources :)
1279 */
5023d966
JB		 1280 if (vif->type == NL80211_IFTYPE_AP ||
1281 vif->type == NL80211_IFTYPE_ADHOC) {
013290aa 1282 ret = iwl_mvm_alloc_bcast_sta(mvm, vif);
8ca151b5
JB		 1283 if (ret) {
1284 IWL_ERR(mvm, "Failed to allocate bcast sta\n");
1285 goto out_release;
1286 }
1287
77740cb4 1288 iwl_mvm_vif_dbgfs_register(mvm, vif);
8ca151b5
JB		 1289 goto out_unlock;
1290 }
1291
93190fb0
AA		 1292 mvmvif->features |= hw->netdev_features;
1293
8ca151b5
JB		 1294 ret = iwl_mvm_mac_ctxt_add(mvm, vif);
1295 if (ret)
1296 goto out_release;
1297
999609f1 1298 ret = iwl_mvm_power_update_mac(mvm);
e5e7aa8e 1299 if (ret)
fd66fc1c 1300 goto out_remove_mac;
8ca151b5 1301
7df15b1e 1302 /* beacon filtering */
a1022927 1303 ret = iwl_mvm_disable_beacon_filter(mvm, vif, 0);
bd3351ba
EP		 1304 if (ret)
1305 goto out_remove_mac;
1306
7df15b1e 1307 if (!mvm->bf_allowed_vif &&
73e5f2c5 1308 vif->type == NL80211_IFTYPE_STATION && !vif->p2p) {
7df15b1e 1309 mvm->bf_allowed_vif = mvmvif;
a20fd398
AO		 1310 vif->driver_flags |= IEEE80211_VIF_BEACON_FILTER |
1311 IEEE80211_VIF_SUPPORTS_CQM_RSSI;
7df15b1e
HG		 1312 }
1313
8ca151b5
JB		 1314 /*
1315 * P2P_DEVICE interface does not have a channel context assigned to it,
1316 * so a dedicated PHY context is allocated to it and the corresponding
1317 * MAC context is bound to it at this stage.
1318 */
1319 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
8ca151b5 1320
fe0f2de3
IP		 1321 mvmvif->phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm);
1322 if (!mvmvif->phy_ctxt) {
1323 ret = -ENOSPC;
bd3351ba 1324 goto out_free_bf;
fe0f2de3 1325 }
8ca151b5 1326
53a9d61e 1327 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt);
8ca151b5
JB		 1328 ret = iwl_mvm_binding_add_vif(mvm, vif);
1329 if (ret)
53a9d61e 1330 goto out_unref_phy;
8ca151b5 1331
013290aa 1332 ret = iwl_mvm_add_bcast_sta(mvm, vif);
8ca151b5
JB		 1333 if (ret)
1334 goto out_unbind;
1335
1336 /* Save a pointer to p2p device vif, so it can later be used to
1337 * update the p2p device MAC when a GO is started/stopped */
1338 mvm->p2p_device_vif = vif;
1339 }
1340
63494374 1341 iwl_mvm_vif_dbgfs_register(mvm, vif);
8ca151b5
JB		 1342 goto out_unlock;
1343
1344 out_unbind:
1345 iwl_mvm_binding_remove_vif(mvm, vif);
53a9d61e 1346 out_unref_phy:
fe0f2de3 1347 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
bd3351ba
EP		 1348 out_free_bf:
1349 if (mvm->bf_allowed_vif == mvmvif) {
1350 mvm->bf_allowed_vif = NULL;
a20fd398
AO		 1351 vif->driver_flags &= ~(IEEE80211_VIF_BEACON_FILTER |
1352 IEEE80211_VIF_SUPPORTS_CQM_RSSI);
bd3351ba 1353 }
8ca151b5
JB		 1354 out_remove_mac:
1355 mvmvif->phy_ctxt = NULL;
1356 iwl_mvm_mac_ctxt_remove(mvm, vif);
1357 out_release:
5ee2b215
AB		 1358 if (vif->type != NL80211_IFTYPE_P2P_DEVICE)
1359 mvm->vif_count--;
1c2abf72 1360
8ca151b5
JB		 1361 iwl_mvm_mac_ctxt_release(mvm, vif);
1362 out_unlock:
1363 mutex_unlock(&mvm->mutex);
1364
d40fc489
GG		 1365 iwl_mvm_unref(mvm, IWL_MVM_REF_ADD_IF);
1366
8ca151b5
JB		 1367 return ret;
1368}
1369
38a12b5b
JB		 1370static void iwl_mvm_prepare_mac_removal(struct iwl_mvm *mvm,
1371 struct ieee80211_vif *vif)
8ca151b5 1372{
d92b732e 1373 u32 tfd_msk = iwl_mvm_mac_get_queues_mask(vif);
8ca151b5
JB		 1374
1375 if (tfd_msk) {
fe92e32a
EG		 1376 /*
1377 * mac80211 first removes all the stations of the vif and
1378 * then removes the vif. When it removes a station it also
1379 * flushes the AMPDU session. So by now, all the AMPDU sessions
1380 * of all the stations of this vif are closed, and the queues
1381 * of these AMPDU sessions are properly closed.
1382 * We still need to take care of the shared queues of the vif.
1383 * Flush them here.
1384 */
8ca151b5 1385 mutex_lock(&mvm->mutex);
5888a40c 1386 iwl_mvm_flush_tx_path(mvm, tfd_msk, 0);
8ca151b5 1387 mutex_unlock(&mvm->mutex);
fe92e32a
EG		 1388
1389 /*
1390 * There are transports that buffer a few frames in the host.
1391 * For these, the flush above isn't enough since while we were
1392 * flushing, the transport might have sent more frames to the
1393 * device. To solve this, wait here until the transport is
1394 * empty. Technically, this could have replaced the flush
1395 * above, but flush is much faster than draining. So flush
1396 * first, and drain to make sure we have no frames in the
1397 * transport anymore.
1398 * If a station still had frames on the shared queues, it is
1399 * already marked as draining, so to complete the draining, we
1400 * just need to wait until the transport is empty.
1401 */
1402 iwl_trans_wait_tx_queue_empty(mvm->trans, tfd_msk);
8ca151b5
JB		 1403 }
1404
1405 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
1406 /*
1407 * Flush the ROC worker which will flush the OFFCHANNEL queue.
1408 * We assume here that all the packets sent to the OFFCHANNEL
1409 * queue are sent in ROC session.
1410 */
1411 flush_work(&mvm->roc_done_wk);
1412 } else {
1413 /*
1414 * By now, all the AC queues are empty. The AGG queues are
1415 * empty too. We already got all the Tx responses for all the
1416 * packets in the queues. The drain work can have been
0742a75a 1417 * triggered. Flush it.
8ca151b5
JB		 1418 */
1419 flush_work(&mvm->sta_drained_wk);
1420 }
38a12b5b
JB		 1421}
1422
1423static void iwl_mvm_mac_remove_interface(struct ieee80211_hw *hw,
1424 struct ieee80211_vif *vif)
1425{
1426 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1427 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1428
1429 iwl_mvm_prepare_mac_removal(mvm, vif);
8ca151b5
JB		 1430
1431 mutex_lock(&mvm->mutex);
1432
7df15b1e
HG		 1433 if (mvm->bf_allowed_vif == mvmvif) {
1434 mvm->bf_allowed_vif = NULL;
a20fd398
AO		 1435 vif->driver_flags &= ~(IEEE80211_VIF_BEACON_FILTER |
1436 IEEE80211_VIF_SUPPORTS_CQM_RSSI);
7df15b1e
HG		 1437 }
1438
63494374
JB		 1439 iwl_mvm_vif_dbgfs_clean(mvm, vif);
1440
8ca151b5
JB		 1441 /*
1442 * For AP/GO interface, the tear down of the resources allocated to the
38a12b5b 1443 * interface is be handled as part of the stop_ap flow.
8ca151b5 1444 */
5023d966
JB		 1445 if (vif->type == NL80211_IFTYPE_AP ||
1446 vif->type == NL80211_IFTYPE_ADHOC) {
507cadf2
DS		 1447#ifdef CONFIG_NL80211_TESTMODE
1448 if (vif == mvm->noa_vif) {
1449 mvm->noa_vif = NULL;
1450 mvm->noa_duration = 0;
1451 }
1452#endif
013290aa 1453 iwl_mvm_dealloc_bcast_sta(mvm, vif);
8ca151b5
JB		 1454 goto out_release;
1455 }
1456
1457 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
1458 mvm->p2p_device_vif = NULL;
013290aa 1459 iwl_mvm_rm_bcast_sta(mvm, vif);
8ca151b5 1460 iwl_mvm_binding_remove_vif(mvm, vif);
fe0f2de3 1461 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
8ca151b5
JB		 1462 mvmvif->phy_ctxt = NULL;
1463 }
1464
5ee2b215 1465 if (mvm->vif_count && vif->type != NL80211_IFTYPE_P2P_DEVICE)
8ca151b5 1466 mvm->vif_count--;
1c2abf72 1467
999609f1 1468 iwl_mvm_power_update_mac(mvm);
8ca151b5
JB		 1469 iwl_mvm_mac_ctxt_remove(mvm, vif);
1470
1471out_release:
1472 iwl_mvm_mac_ctxt_release(mvm, vif);
1473 mutex_unlock(&mvm->mutex);
1474}
1475
1476static int iwl_mvm_mac_config(struct ieee80211_hw *hw, u32 changed)
88f2fd73 1477{
8ca151b5
JB		 1478 return 0;
1479}
1480
e59647ea
EP		 1481struct iwl_mvm_mc_iter_data {
1482 struct iwl_mvm *mvm;
1483 int port_id;
1484};
1485
1486static void iwl_mvm_mc_iface_iterator(void *_data, u8 *mac,
1487 struct ieee80211_vif *vif)
1488{
1489 struct iwl_mvm_mc_iter_data *data = _data;
1490 struct iwl_mvm *mvm = data->mvm;
1491 struct iwl_mcast_filter_cmd *cmd = mvm->mcast_filter_cmd;
1492 int ret, len;
1493
1494 /* if we don't have free ports, mcast frames will be dropped */
1495 if (WARN_ON_ONCE(data->port_id >= MAX_PORT_ID_NUM))
1496 return;
1497
1498 if (vif->type != NL80211_IFTYPE_STATION ||
1499 !vif->bss_conf.assoc)
1500 return;
1501
1502 cmd->port_id = data->port_id++;
1503 memcpy(cmd->bssid, vif->bss_conf.bssid, ETH_ALEN);
1504 len = roundup(sizeof(*cmd) + cmd->count * ETH_ALEN, 4);
1505
1c4abec0 1506 ret = iwl_mvm_send_cmd_pdu(mvm, MCAST_FILTER_CMD, CMD_ASYNC, len, cmd);
e59647ea
EP		 1507 if (ret)
1508 IWL_ERR(mvm, "mcast filter cmd error. ret=%d\n", ret);
1509}
1510
1511static void iwl_mvm_recalc_multicast(struct iwl_mvm *mvm)
1512{
1513 struct iwl_mvm_mc_iter_data iter_data = {
1514 .mvm = mvm,
88f2fd73
MG		 1515 };
1516
e59647ea
EP		 1517 lockdep_assert_held(&mvm->mutex);
1518
1519 if (WARN_ON_ONCE(!mvm->mcast_filter_cmd))
1520 return;
1521
1c4abec0 1522 ieee80211_iterate_active_interfaces_atomic(
e59647ea
EP		 1523 mvm->hw, IEEE80211_IFACE_ITER_NORMAL,
1524 iwl_mvm_mc_iface_iterator, &iter_data);
88f2fd73
MG		 1525}
1526
e59647ea
EP		 1527static u64 iwl_mvm_prepare_multicast(struct ieee80211_hw *hw,
1528 struct netdev_hw_addr_list *mc_list)
8ca151b5 1529{
e59647ea
EP		 1530 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1531 struct iwl_mcast_filter_cmd *cmd;
1532 struct netdev_hw_addr *addr;
f3bd58f4
MS		 1533 int addr_count;
1534 bool pass_all;
e59647ea
EP		 1535 int len;
1536
f3bd58f4
MS		 1537 addr_count = netdev_hw_addr_list_count(mc_list);
1538 pass_all = addr_count > MAX_MCAST_FILTERING_ADDRESSES ||
1539 IWL_MVM_FW_MCAST_FILTER_PASS_ALL;
1540 if (pass_all)
e59647ea 1541 addr_count = 0;
e59647ea
EP		 1542
1543 len = roundup(sizeof(*cmd) + addr_count * ETH_ALEN, 4);
1544 cmd = kzalloc(len, GFP_ATOMIC);
1545 if (!cmd)
1546 return 0;
1547
1548 if (pass_all) {
1549 cmd->pass_all = 1;
1550 return (u64)(unsigned long)cmd;
1551 }
1552
1553 netdev_hw_addr_list_for_each(addr, mc_list) {
1554 IWL_DEBUG_MAC80211(mvm, "mcast addr (%d): %pM\n",
1555 cmd->count, addr->addr);
1556 memcpy(&cmd->addr_list[cmd->count * ETH_ALEN],
1557 addr->addr, ETH_ALEN);
1558 cmd->count++;
1559 }
1560
1561 return (u64)(unsigned long)cmd;
8ca151b5
JB		 1562}
1563
1564static void iwl_mvm_configure_filter(struct ieee80211_hw *hw,
1565 unsigned int changed_flags,
1566 unsigned int *total_flags,
1567 u64 multicast)
1568{
e59647ea
EP		 1569 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1570 struct iwl_mcast_filter_cmd *cmd = (void *)(unsigned long)multicast;
8ca151b5 1571
e59647ea 1572 mutex_lock(&mvm->mutex);
51b6b9e0 1573
e59647ea
EP		 1574 /* replace previous configuration */
1575 kfree(mvm->mcast_filter_cmd);
1576 mvm->mcast_filter_cmd = cmd;
51b6b9e0 1577
e59647ea
EP		 1578 if (!cmd)
1579 goto out;
51b6b9e0 1580
e59647ea
EP		 1581 iwl_mvm_recalc_multicast(mvm);
1582out:
1583 mutex_unlock(&mvm->mutex);
1584 *total_flags = 0;
51b6b9e0
EG		 1585}
1586
effd1929
AO		 1587static void iwl_mvm_config_iface_filter(struct ieee80211_hw *hw,
1588 struct ieee80211_vif *vif,
1589 unsigned int filter_flags,
1590 unsigned int changed_flags)
1591{
1592 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1593
1594 /* We support only filter for probe requests */
1595 if (!(changed_flags & FIF_PROBE_REQ))
1596 return;
1597
1598 /* Supported only for p2p client interfaces */
1599 if (vif->type != NL80211_IFTYPE_STATION || !vif->bss_conf.assoc ||
1600 !vif->p2p)
1601 return;
1602
1603 mutex_lock(&mvm->mutex);
1604 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
1605 mutex_unlock(&mvm->mutex);
1606}
1607
c87163b9
EP		 1608#ifdef CONFIG_IWLWIFI_BCAST_FILTERING
1609struct iwl_bcast_iter_data {
1610 struct iwl_mvm *mvm;
1611 struct iwl_bcast_filter_cmd *cmd;
1612 u8 current_filter;
1613};
1614
1615static void
1616iwl_mvm_set_bcast_filter(struct ieee80211_vif *vif,
1617 const struct iwl_fw_bcast_filter *in_filter,
1618 struct iwl_fw_bcast_filter *out_filter)
1619{
1620 struct iwl_fw_bcast_filter_attr *attr;
1621 int i;
1622
1623 memcpy(out_filter, in_filter, sizeof(*out_filter));
1624
1625 for (i = 0; i < ARRAY_SIZE(out_filter->attrs); i++) {
1626 attr = &out_filter->attrs[i];
1627
1628 if (!attr->mask)
1629 break;
1630
2ee8f021
EP		 1631 switch (attr->reserved1) {
1632 case cpu_to_le16(BC_FILTER_MAGIC_IP):
1633 if (vif->bss_conf.arp_addr_cnt != 1) {
1634 attr->mask = 0;
1635 continue;
1636 }
1637
1638 attr->val = vif->bss_conf.arp_addr_list[0];
1639 break;
1640 case cpu_to_le16(BC_FILTER_MAGIC_MAC):
1641 attr->val = *(__be32 *)&vif->addr[2];
1642 break;
1643 default:
1644 break;
1645 }
1646 attr->reserved1 = 0;
c87163b9
EP		 1647 out_filter->num_attrs++;
1648 }
1649}
1650
1651static void iwl_mvm_bcast_filter_iterator(void *_data, u8 *mac,
1652 struct ieee80211_vif *vif)
1653{
1654 struct iwl_bcast_iter_data *data = _data;
1655 struct iwl_mvm *mvm = data->mvm;
1656 struct iwl_bcast_filter_cmd *cmd = data->cmd;
1657 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1658 struct iwl_fw_bcast_mac *bcast_mac;
1659 int i;
1660
1661 if (WARN_ON(mvmvif->id >= ARRAY_SIZE(cmd->macs)))
1662 return;
1663
1664 bcast_mac = &cmd->macs[mvmvif->id];
1665
e48393e8
IP		 1666 /*
1667 * enable filtering only for associated stations, but not for P2P
1668 * Clients
1669 */
1670 if (vif->type != NL80211_IFTYPE_STATION || vif->p2p ||
1671 !vif->bss_conf.assoc)
c87163b9
EP		 1672 return;
1673
1674 bcast_mac->default_discard = 1;
1675
1676 /* copy all configured filters */
1677 for (i = 0; mvm->bcast_filters[i].attrs[0].mask; i++) {
1678 /*
1679 * Make sure we don't exceed our filters limit.
1680 * if there is still a valid filter to be configured,
1681 * be on the safe side and just allow bcast for this mac.
1682 */
1683 if (WARN_ON_ONCE(data->current_filter >=
1684 ARRAY_SIZE(cmd->filters))) {
1685 bcast_mac->default_discard = 0;
1686 bcast_mac->attached_filters = 0;
1687 break;
1688 }
1689
1690 iwl_mvm_set_bcast_filter(vif,
1691 &mvm->bcast_filters[i],
1692 &cmd->filters[data->current_filter]);
1693
1694 /* skip current filter if it contains no attributes */
1695 if (!cmd->filters[data->current_filter].num_attrs)
1696 continue;
1697
1698 /* attach the filter to current mac */
1699 bcast_mac->attached_filters |=
1700 cpu_to_le16(BIT(data->current_filter));
1701
1702 data->current_filter++;
1703 }
1704}
1705
de06a59e
EP		 1706bool iwl_mvm_bcast_filter_build_cmd(struct iwl_mvm *mvm,
1707 struct iwl_bcast_filter_cmd *cmd)
c87163b9 1708{
c87163b9
EP		 1709 struct iwl_bcast_iter_data iter_data = {
1710 .mvm = mvm,
de06a59e 1711 .cmd = cmd,
c87163b9
EP		 1712 };
1713
3b8983b1
MS		 1714 if (IWL_MVM_FW_BCAST_FILTER_PASS_ALL)
1715 return false;
1716
de06a59e
EP		 1717 memset(cmd, 0, sizeof(*cmd));
1718 cmd->max_bcast_filters = ARRAY_SIZE(cmd->filters);
1719 cmd->max_macs = ARRAY_SIZE(cmd->macs);
1720
1721#ifdef CONFIG_IWLWIFI_DEBUGFS
1722 /* use debugfs filters/macs if override is configured */
1723 if (mvm->dbgfs_bcast_filtering.override) {
1724 memcpy(cmd->filters, &mvm->dbgfs_bcast_filtering.cmd.filters,
1725 sizeof(cmd->filters));
1726 memcpy(cmd->macs, &mvm->dbgfs_bcast_filtering.cmd.macs,
1727 sizeof(cmd->macs));
1728 return true;
1729 }
1730#endif
c87163b9
EP		 1731
1732 /* if no filters are configured, do nothing */
1733 if (!mvm->bcast_filters)
de06a59e 1734 return false;
c87163b9
EP		 1735
1736 /* configure and attach these filters for each associated sta vif */
1737 ieee80211_iterate_active_interfaces(
1738 mvm->hw, IEEE80211_IFACE_ITER_NORMAL,
1739 iwl_mvm_bcast_filter_iterator, &iter_data);
1740
de06a59e
EP		 1741 return true;
1742}
34672bb3
EP		 1743
1744static int iwl_mvm_configure_bcast_filter(struct iwl_mvm *mvm)
de06a59e
EP		 1745{
1746 struct iwl_bcast_filter_cmd cmd;
1747
1748 if (!(mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_BCAST_FILTERING))
1749 return 0;
1750
1751 if (!iwl_mvm_bcast_filter_build_cmd(mvm, &cmd))
1752 return 0;
1753
a1022927 1754 return iwl_mvm_send_cmd_pdu(mvm, BCAST_FILTER_CMD, 0,
c87163b9
EP		 1755 sizeof(cmd), &cmd);
1756}
1757#else
34672bb3 1758static inline int iwl_mvm_configure_bcast_filter(struct iwl_mvm *mvm)
c87163b9
EP		 1759{
1760 return 0;
1761}
1762#endif
1763
a07a8f37
SS		 1764static int iwl_mvm_update_mu_groups(struct iwl_mvm *mvm,
1765 struct ieee80211_vif *vif)
1766{
1767 struct iwl_mu_group_mgmt_cmd cmd = {};
1768
1769 memcpy(cmd.membership_status, vif->bss_conf.mu_group.membership,
1770 WLAN_MEMBERSHIP_LEN);
1771 memcpy(cmd.user_position, vif->bss_conf.mu_group.position,
1772 WLAN_USER_POSITION_LEN);
1773
1774 return iwl_mvm_send_cmd_pdu(mvm,
1775 WIDE_ID(DATA_PATH_GROUP,
1776 UPDATE_MU_GROUPS_CMD),
1777 0, sizeof(cmd), &cmd);
1778}
1779
f92659a1
SS		 1780static void iwl_mvm_mu_mimo_iface_iterator(void *_data, u8 *mac,
1781 struct ieee80211_vif *vif)
1782{
1783 if (vif->mu_mimo_owner) {
1784 struct iwl_mu_group_mgmt_notif *notif = _data;
1785
1786 /*
1787 * MU-MIMO Group Id action frame is little endian. We treat
1788 * the data received from firmware as if it came from the
1789 * action frame, so no conversion is needed.
1790 */
1791 ieee80211_update_mu_groups(vif,
1792 (u8 *)&notif->membership_status,
1793 (u8 *)&notif->user_position);
1794 }
1795}
1796
1797void iwl_mvm_mu_mimo_grp_notif(struct iwl_mvm *mvm,
1798 struct iwl_rx_cmd_buffer *rxb)
1799{
1800 struct iwl_rx_packet *pkt = rxb_addr(rxb);
1801 struct iwl_mu_group_mgmt_notif *notif = (void *)pkt->data;
1802
1803 ieee80211_iterate_active_interfaces_atomic(
1804 mvm->hw, IEEE80211_IFACE_ITER_NORMAL,
1805 iwl_mvm_mu_mimo_iface_iterator, notif);
1806}
1807
8ca151b5
JB		 1808static void iwl_mvm_bss_info_changed_station(struct iwl_mvm *mvm,
1809 struct ieee80211_vif *vif,
1810 struct ieee80211_bss_conf *bss_conf,
1811 u32 changes)
1812{
1813 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1814 int ret;
1815
6e97b0d2
IP		 1816 /*
1817 * Re-calculate the tsf id, as the master-slave relations depend on the
1818 * beacon interval, which was not known when the station interface was
1819 * added.
1820 */
1821 if (changes & BSS_CHANGED_ASSOC && bss_conf->assoc)
1822 iwl_mvm_mac_ctxt_recalc_tsf_id(mvm, vif);
1823
03098268
AE		 1824 if (changes & BSS_CHANGED_ASSOC && !bss_conf->assoc &&
1825 mvmvif->lqm_active)
1826 iwl_mvm_send_lqm_cmd(vif, LQM_CMD_OPERATION_STOP_MEASUREMENT,
1827 0, 0);
1828
3dfd3a97
JB		 1829 /*
1830 * If we're not associated yet, take the (new) BSSID before associating
1831 * so the firmware knows. If we're already associated, then use the old
1832 * BSSID here, and we'll send a cleared one later in the CHANGED_ASSOC
1833 * branch for disassociation below.
1834 */
1835 if (changes & BSS_CHANGED_BSSID && !mvmvif->associated)
1836 memcpy(mvmvif->bssid, bss_conf->bssid, ETH_ALEN);
1837
1838 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, mvmvif->bssid);
8ca151b5
JB		 1839 if (ret)
1840 IWL_ERR(mvm, "failed to update MAC %pM\n", vif->addr);
1841
3dfd3a97
JB		 1842 /* after sending it once, adopt mac80211 data */
1843 memcpy(mvmvif->bssid, bss_conf->bssid, ETH_ALEN);
1844 mvmvif->associated = bss_conf->assoc;
1845
8ca151b5
JB		 1846 if (changes & BSS_CHANGED_ASSOC) {
1847 if (bss_conf->assoc) {
33cef925
JB		 1848 /* clear statistics to get clean beacon counter */
1849 iwl_mvm_request_statistics(mvm, true);
1850 memset(&mvmvif->beacon_stats, 0,
1851 sizeof(mvmvif->beacon_stats));
1852
8ca151b5 1853 /* add quota for this interface */
7754ae79 1854 ret = iwl_mvm_update_quotas(mvm, true, NULL);
8ca151b5
JB		 1855 if (ret) {
1856 IWL_ERR(mvm, "failed to update quotas\n");
1857 return;
1858 }
016d27e1
JB		 1859
1860 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART,
1861 &mvm->status)) {
1862 /*
1863 * If we're restarting then the firmware will
1864 * obviously have lost synchronisation with
1865 * the AP. It will attempt to synchronise by
1866 * itself, but we can make it more reliable by
1867 * scheduling a session protection time event.
1868 *
1869 * The firmware needs to receive a beacon to
1870 * catch up with synchronisation, use 110% of
1871 * the beacon interval.
1872 *
1873 * Set a large maximum delay to allow for more
1874 * than a single interface.
1875 */
1876 u32 dur = (11 * vif->bss_conf.beacon_int) / 10;
1877 iwl_mvm_protect_session(mvm, vif, dur, dur,
d20d37bc 1878 5 * dur, false);
016d27e1 1879 }
1f3b0ff8
LE		 1880
1881 iwl_mvm_sf_update(mvm, vif, false);
175a70b7 1882 iwl_mvm_power_vif_assoc(mvm, vif);
697162a1 1883 if (vif->p2p) {
29a90a49 1884 iwl_mvm_ref(mvm, IWL_MVM_REF_P2P_CLIENT);
697162a1
EG		 1885 iwl_mvm_update_smps(mvm, vif,
1886 IWL_MVM_SMPS_REQ_PROT,
1887 IEEE80211_SMPS_DYNAMIC);
1888 }
8ca151b5 1889 } else if (mvmvif->ap_sta_id != IWL_MVM_STATION_COUNT) {
1f3b0ff8
LE		 1890 /*
1891 * If update fails - SF might be running in associated
1892 * mode while disassociated - which is forbidden.
1893 */
1894 WARN_ONCE(iwl_mvm_sf_update(mvm, vif, false),
1895 "Failed to update SF upon disassociation\n");
1896
8ca151b5
JB		 1897 /* remove AP station now that the MAC is unassoc */
1898 ret = iwl_mvm_rm_sta_id(mvm, vif, mvmvif->ap_sta_id);
1899 if (ret)
1900 IWL_ERR(mvm, "failed to remove AP station\n");
37577fe2
EP		 1901
1902 if (mvm->d0i3_ap_sta_id == mvmvif->ap_sta_id)
1903 mvm->d0i3_ap_sta_id = IWL_MVM_STATION_COUNT;
8ca151b5
JB		 1904 mvmvif->ap_sta_id = IWL_MVM_STATION_COUNT;
1905 /* remove quota for this interface */
7754ae79 1906 ret = iwl_mvm_update_quotas(mvm, false, NULL);
8ca151b5
JB		 1907 if (ret)
1908 IWL_ERR(mvm, "failed to update quotas\n");
29a90a49
EP		 1909
1910 if (vif->p2p)
1911 iwl_mvm_unref(mvm, IWL_MVM_REF_P2P_CLIENT);
3dfd3a97
JB		 1912
1913 /* this will take the cleared BSSID from bss_conf */
1914 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
1915 if (ret)
1916 IWL_ERR(mvm,
1917 "failed to update MAC %pM (clear after unassoc)\n",
1918 vif->addr);
8ca151b5 1919 }
a20fd398 1920
a07a8f37
SS		 1921 /*
1922 * The firmware tracks the MU-MIMO group on its own.
f92659a1 1923 * However, on HW restart we should restore this data.
a07a8f37
SS		 1924 */
1925 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) &&
f92659a1 1926 (changes & BSS_CHANGED_MU_GROUPS) && vif->mu_mimo_owner) {
a07a8f37
SS		 1927 ret = iwl_mvm_update_mu_groups(mvm, vif);
1928 if (ret)
1929 IWL_ERR(mvm,
1930 "failed to update VHT MU_MIMO groups\n");
1931 }
1932
e59647ea 1933 iwl_mvm_recalc_multicast(mvm);
34672bb3 1934 iwl_mvm_configure_bcast_filter(mvm);
e59647ea 1935
a20fd398
AO		 1936 /* reset rssi values */
1937 mvmvif->bf_data.ave_beacon_signal = 0;
1938
8e484f0b 1939 iwl_mvm_bt_coex_vif_change(mvm);
f94045ed
EG		 1940 iwl_mvm_update_smps(mvm, vif, IWL_MVM_SMPS_REQ_TT,
1941 IEEE80211_SMPS_AUTOMATIC);
355346ba
AS		 1942 if (fw_has_capa(&mvm->fw->ucode_capa,
1943 IWL_UCODE_TLV_CAPA_UMAC_SCAN))
1944 iwl_mvm_config_scan(mvm);
989c6505 1945 } else if (changes & BSS_CHANGED_BEACON_INFO) {
210a544e
JB		 1946 /*
1947 * We received a beacon _after_ association so
1948 * remove the session protection.
1949 */
1950 iwl_mvm_remove_time_event(mvm, mvmvif,
1951 &mvmvif->time_event_data);
8ca151b5 1952 }
cc87d322
EH		 1953
1954 if (changes & BSS_CHANGED_BEACON_INFO) {
1955 iwl_mvm_sf_update(mvm, vif, false);
1956 WARN_ON(iwl_mvm_enable_beacon_filter(mvm, vif, 0));
1957 }
1958
283115fb
AA		 1959 if (changes & (BSS_CHANGED_PS | BSS_CHANGED_P2P_PS | BSS_CHANGED_QOS |
1960 /*
1961 * Send power command on every beacon change,
1962 * because we may have not enabled beacon abort yet.
1963 */
1964 BSS_CHANGED_BEACON_INFO)) {
1bc10d3b
JB		 1965 ret = iwl_mvm_power_update_mac(mvm);
1966 if (ret)
1967 IWL_ERR(mvm, "failed to update power mode\n");
1968 }
1969
88f2fd73
MG		 1970 if (changes & BSS_CHANGED_TXPOWER) {
1971 IWL_DEBUG_CALIB(mvm, "Changing TX Power to %d\n",
1972 bss_conf->txpower);
1973 iwl_mvm_set_tx_power(mvm, vif, bss_conf->txpower);
1974 }
a20fd398
AO		 1975
1976 if (changes & BSS_CHANGED_CQM) {
3c6acb61 1977 IWL_DEBUG_MAC80211(mvm, "cqm info_changed\n");
a20fd398
AO		 1978 /* reset cqm events tracking */
1979 mvmvif->bf_data.last_cqm_event = 0;
fa7b2e7f
AA		 1980 if (mvmvif->bf_data.bf_enabled) {
1981 ret = iwl_mvm_enable_beacon_filter(mvm, vif, 0);
1982 if (ret)
1983 IWL_ERR(mvm,
1984 "failed to update CQM thresholds\n");
1985 }
a20fd398 1986 }
2ee8f021
EP		 1987
1988 if (changes & BSS_CHANGED_ARP_FILTER) {
3c6acb61 1989 IWL_DEBUG_MAC80211(mvm, "arp filter changed\n");
34672bb3 1990 iwl_mvm_configure_bcast_filter(mvm);
2ee8f021 1991 }
8ca151b5
JB		 1992}
1993
5023d966
JB		 1994static int iwl_mvm_start_ap_ibss(struct ieee80211_hw *hw,
1995 struct ieee80211_vif *vif)
8ca151b5
JB		 1996{
1997 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1998 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1999 int ret;
2000
576eeee9
EP		 2001 /*
2002 * iwl_mvm_mac_ctxt_add() might read directly from the device
2003 * (the system time), so make sure it is available.
2004 */
2005 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_START_AP);
2006 if (ret)
2007 return ret;
2008
8ca151b5
JB		 2009 mutex_lock(&mvm->mutex);
2010
2011 /* Send the beacon template */
2012 ret = iwl_mvm_mac_ctxt_beacon_changed(mvm, vif);
2013 if (ret)
2014 goto out_unlock;
2015
6e97b0d2
IP		 2016 /*
2017 * Re-calculate the tsf id, as the master-slave relations depend on the
2018 * beacon interval, which was not known when the AP interface was added.
2019 */
2020 if (vif->type == NL80211_IFTYPE_AP)
2021 iwl_mvm_mac_ctxt_recalc_tsf_id(mvm, vif);
2022
94939080
GG		 2023 mvmvif->ap_assoc_sta_count = 0;
2024
8ca151b5
JB		 2025 /* Add the mac context */
2026 ret = iwl_mvm_mac_ctxt_add(mvm, vif);
2027 if (ret)
2028 goto out_unlock;
2029
2030 /* Perform the binding */
2031 ret = iwl_mvm_binding_add_vif(mvm, vif);
2032 if (ret)
2033 goto out_remove;
2034
8ca151b5
JB		 2035 /* Send the bcast station. At this stage the TBTT and DTIM time events
2036 * are added and applied to the scheduler */
013290aa 2037 ret = iwl_mvm_send_add_bcast_sta(mvm, vif);
8ca151b5
JB		 2038 if (ret)
2039 goto out_unbind;
2040
5691e218
IP		 2041 /* must be set before quota calculations */
2042 mvmvif->ap_ibss_active = true;
2043
a11e144e 2044 /* power updated needs to be done before quotas */
999609f1 2045 iwl_mvm_power_update_mac(mvm);
a11e144e 2046
7754ae79 2047 ret = iwl_mvm_update_quotas(mvm, false, NULL);
8ca151b5 2048 if (ret)
a11e144e 2049 goto out_quota_failed;
8ca151b5 2050
5023d966 2051 /* Need to update the P2P Device MAC (only GO, IBSS is single vif) */
8ca151b5 2052 if (vif->p2p && mvm->p2p_device_vif)
3dfd3a97 2053 iwl_mvm_mac_ctxt_changed(mvm, mvm->p2p_device_vif, false, NULL);
8ca151b5 2054
29a90a49
EP		 2055 iwl_mvm_ref(mvm, IWL_MVM_REF_AP_IBSS);
2056
8e484f0b 2057 iwl_mvm_bt_coex_vif_change(mvm);
dac94da8 2058
f697267f
AN		 2059 /* we don't support TDLS during DCM */
2060 if (iwl_mvm_phy_ctx_count(mvm) > 1)
2061 iwl_mvm_teardown_tdls_peers(mvm);
2062
939e4904 2063 goto out_unlock;
8ca151b5 2064
a11e144e 2065out_quota_failed:
999609f1 2066 iwl_mvm_power_update_mac(mvm);
5691e218 2067 mvmvif->ap_ibss_active = false;
013290aa 2068 iwl_mvm_send_rm_bcast_sta(mvm, vif);
8ca151b5
JB		 2069out_unbind:
2070 iwl_mvm_binding_remove_vif(mvm, vif);
2071out_remove:
2072 iwl_mvm_mac_ctxt_remove(mvm, vif);
2073out_unlock:
2074 mutex_unlock(&mvm->mutex);
576eeee9 2075 iwl_mvm_unref(mvm, IWL_MVM_REF_START_AP);
8ca151b5
JB		 2076 return ret;
2077}
2078
5023d966
JB		 2079static void iwl_mvm_stop_ap_ibss(struct ieee80211_hw *hw,
2080 struct ieee80211_vif *vif)
8ca151b5
JB		 2081{
2082 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2083 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2084
38a12b5b
JB		 2085 iwl_mvm_prepare_mac_removal(mvm, vif);
2086
8ca151b5
JB		 2087 mutex_lock(&mvm->mutex);
2088
664322fa 2089 /* Handle AP stop while in CSA */
7f0a7c67
AO		 2090 if (rcu_access_pointer(mvm->csa_vif) == vif) {
2091 iwl_mvm_remove_time_event(mvm, mvmvif,
2092 &mvmvif->time_event_data);
664322fa 2093 RCU_INIT_POINTER(mvm->csa_vif, NULL);
e9cb0327 2094 mvmvif->csa_countdown = false;
7f0a7c67 2095 }
664322fa 2096
003e5236
AO		 2097 if (rcu_access_pointer(mvm->csa_tx_blocked_vif) == vif) {
2098 RCU_INIT_POINTER(mvm->csa_tx_blocked_vif, NULL);
2099 mvm->csa_tx_block_bcn_timeout = 0;
2100 }
2101
5023d966 2102 mvmvif->ap_ibss_active = false;
1c87bbad 2103 mvm->ap_last_beacon_gp2 = 0;
8ca151b5 2104
8e484f0b 2105 iwl_mvm_bt_coex_vif_change(mvm);
dac94da8 2106
29a90a49
EP		 2107 iwl_mvm_unref(mvm, IWL_MVM_REF_AP_IBSS);
2108
5023d966 2109 /* Need to update the P2P Device MAC (only GO, IBSS is single vif) */
8ca151b5 2110 if (vif->p2p && mvm->p2p_device_vif)
3dfd3a97 2111 iwl_mvm_mac_ctxt_changed(mvm, mvm->p2p_device_vif, false, NULL);
8ca151b5 2112
7754ae79 2113 iwl_mvm_update_quotas(mvm, false, NULL);
013290aa 2114 iwl_mvm_send_rm_bcast_sta(mvm, vif);
8ca151b5 2115 iwl_mvm_binding_remove_vif(mvm, vif);
a11e144e 2116
999609f1 2117 iwl_mvm_power_update_mac(mvm);
a11e144e 2118
8ca151b5
JB		 2119 iwl_mvm_mac_ctxt_remove(mvm, vif);
2120
2121 mutex_unlock(&mvm->mutex);
2122}
2123
5023d966
JB		 2124static void
2125iwl_mvm_bss_info_changed_ap_ibss(struct iwl_mvm *mvm,
2126 struct ieee80211_vif *vif,
2127 struct ieee80211_bss_conf *bss_conf,
2128 u32 changes)
8ca151b5 2129{
be2056fc 2130 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
8a5e3660 2131
be2056fc
IP		 2132 /* Changes will be applied when the AP/IBSS is started */
2133 if (!mvmvif->ap_ibss_active)
2134 return;
2135
863230da 2136 if (changes & (BSS_CHANGED_ERP_CTS_PROT | BSS_CHANGED_HT |
f7d8b702 2137 BSS_CHANGED_BANDWIDTH | BSS_CHANGED_QOS) &&
3dfd3a97 2138 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL))
863230da 2139 IWL_ERR(mvm, "failed to update MAC %pM\n", vif->addr);
8a5e3660 2140
8ca151b5 2141 /* Need to send a new beacon template to the FW */
863230da
JB		 2142 if (changes & BSS_CHANGED_BEACON &&
2143 iwl_mvm_mac_ctxt_beacon_changed(mvm, vif))
2144 IWL_WARN(mvm, "Failed updating beacon data\n");
79b7a69d
HD		 2145
2146 if (changes & BSS_CHANGED_TXPOWER) {
2147 IWL_DEBUG_CALIB(mvm, "Changing TX Power to %d\n",
2148 bss_conf->txpower);
2149 iwl_mvm_set_tx_power(mvm, vif, bss_conf->txpower);
2150 }
8ca151b5
JB		 2151}
2152
2153static void iwl_mvm_bss_info_changed(struct ieee80211_hw *hw,
2154 struct ieee80211_vif *vif,
2155 struct ieee80211_bss_conf *bss_conf,
2156 u32 changes)
2157{
2158 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2159
576eeee9
EP		 2160 /*
2161 * iwl_mvm_bss_info_changed_station() might call
2162 * iwl_mvm_protect_session(), which reads directly from
2163 * the device (the system time), so make sure it is available.
2164 */
2165 if (iwl_mvm_ref_sync(mvm, IWL_MVM_REF_BSS_CHANGED))
2166 return;
2167
8ca151b5
JB		 2168 mutex_lock(&mvm->mutex);
2169
723f02ed 2170 if (changes & BSS_CHANGED_IDLE && !bss_conf->idle)
c7d42480 2171 iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_SCHED, true);
723f02ed 2172
8ca151b5
JB		 2173 switch (vif->type) {
2174 case NL80211_IFTYPE_STATION:
2175 iwl_mvm_bss_info_changed_station(mvm, vif, bss_conf, changes);
2176 break;
2177 case NL80211_IFTYPE_AP:
5023d966
JB		 2178 case NL80211_IFTYPE_ADHOC:
2179 iwl_mvm_bss_info_changed_ap_ibss(mvm, vif, bss_conf, changes);
8ca151b5
JB		 2180 break;
2181 default:
2182 /* shouldn't happen */
2183 WARN_ON_ONCE(1);
2184 }
2185
2186 mutex_unlock(&mvm->mutex);
576eeee9 2187 iwl_mvm_unref(mvm, IWL_MVM_REF_BSS_CHANGED);
8ca151b5
JB		 2188}
2189
2190static int iwl_mvm_mac_hw_scan(struct ieee80211_hw *hw,
2191 struct ieee80211_vif *vif,
c56ef672 2192 struct ieee80211_scan_request *hw_req)
8ca151b5
JB		 2193{
2194 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2195 int ret;
2196
6749dd80
LC		 2197 if (hw_req->req.n_channels == 0 ||
2198 hw_req->req.n_channels > mvm->fw->ucode_capa.n_scan_channels)
8ca151b5
JB		 2199 return -EINVAL;
2200
2201 mutex_lock(&mvm->mutex);
6749dd80 2202 ret = iwl_mvm_reg_scan_start(mvm, vif, &hw_req->req, &hw_req->ies);
8ca151b5 2203 mutex_unlock(&mvm->mutex);
6749dd80 2204
8ca151b5
JB		 2205 return ret;
2206}
2207
2208static void iwl_mvm_mac_cancel_hw_scan(struct ieee80211_hw *hw,
2209 struct ieee80211_vif *vif)
2210{
2211 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2212
2213 mutex_lock(&mvm->mutex);
2214
e7d3abab
LC		 2215 /* Due to a race condition, it's possible that mac80211 asks
2216 * us to stop a hw_scan when it's already stopped. This can
2217 * happen, for instance, if we stopped the scan ourselves,
2218 * called ieee80211_scan_completed() and the userspace called
2219 * cancel scan scan before ieee80211_scan_work() could run.
2220 * To handle that, simply return if the scan is not running.
2221 */
262888fc 2222 if (mvm->scan_status & IWL_MVM_SCAN_REGULAR)
c7d42480 2223 iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_REGULAR, true);
8ca151b5
JB		 2224
2225 mutex_unlock(&mvm->mutex);
2226}
2227
2228static void
2229iwl_mvm_mac_allow_buffered_frames(struct ieee80211_hw *hw,
3e56eadf 2230 struct ieee80211_sta *sta, u16 tids,
8ca151b5
JB		 2231 int num_frames,
2232 enum ieee80211_frame_release_type reason,
2233 bool more_data)
2234{
2235 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
8ca151b5 2236
3e56eadf 2237 /* Called when we need to transmit (a) frame(s) from mac80211 */
8ca151b5 2238
3e56eadf
JB		 2239 iwl_mvm_sta_modify_sleep_tx_count(mvm, sta, reason, num_frames,
2240 tids, more_data, false);
2241}
2242
2243static void
2244iwl_mvm_mac_release_buffered_frames(struct ieee80211_hw *hw,
2245 struct ieee80211_sta *sta, u16 tids,
2246 int num_frames,
2247 enum ieee80211_frame_release_type reason,
2248 bool more_data)
2249{
2250 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2251
2252 /* Called when we need to transmit (a) frame(s) from agg queue */
2253
2254 iwl_mvm_sta_modify_sleep_tx_count(mvm, sta, reason, num_frames,
2255 tids, more_data, true);
8ca151b5
JB		 2256}
2257
2258static void iwl_mvm_mac_sta_notify(struct ieee80211_hw *hw,
2259 struct ieee80211_vif *vif,
2260 enum sta_notify_cmd cmd,
2261 struct ieee80211_sta *sta)
2262{
2263 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
5b577a90 2264 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
c22b0ff5 2265 unsigned long txqs = 0, tids = 0;
3e56eadf 2266 int tid;
8ca151b5 2267
c22b0ff5
EG		 2268 spin_lock_bh(&mvmsta->lock);
2269 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) {
2270 struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid];
2271
2272 if (tid_data->state != IWL_AGG_ON &&
2273 tid_data->state != IWL_EMPTYING_HW_QUEUE_DELBA)
2274 continue;
2275
2276 __set_bit(tid_data->txq_id, &txqs);
2277
2278 if (iwl_mvm_tid_queued(tid_data) == 0)
2279 continue;
2280
2281 __set_bit(tid, &tids);
2282 }
2283
8ca151b5
JB		 2284 switch (cmd) {
2285 case STA_NOTIFY_SLEEP:
e3d4bc8c 2286 if (atomic_read(&mvm->pending_frames[mvmsta->sta_id]) > 0)
8ca151b5 2287 ieee80211_sta_block_awake(hw, sta, true);
3e56eadf 2288
c22b0ff5 2289 for_each_set_bit(tid, &tids, IWL_MAX_TID_COUNT)
3e56eadf 2290 ieee80211_sta_set_buffered(sta, tid, true);
c22b0ff5
EG		 2291
2292 if (txqs)
2293 iwl_trans_freeze_txq_timer(mvm->trans, txqs, true);
8ca151b5
JB		 2294 /*
2295 * The fw updates the STA to be asleep. Tx packets on the Tx
2296 * queues to this station will not be transmitted. The fw will
2297 * send a Tx response with TX_STATUS_FAIL_DEST_PS.
2298 */
2299 break;
2300 case STA_NOTIFY_AWAKE:
881acd89 2301 if (WARN_ON(mvmsta->sta_id == IWL_MVM_STATION_COUNT))
8ca151b5 2302 break;
c22b0ff5
EG		 2303
2304 if (txqs)
2305 iwl_trans_freeze_txq_timer(mvm->trans, txqs, false);
9cc40712 2306 iwl_mvm_sta_modify_ps_wake(mvm, sta);
8ca151b5
JB		 2307 break;
2308 default:
2309 break;
2310 }
c22b0ff5 2311 spin_unlock_bh(&mvmsta->lock);
8ca151b5
JB		 2312}
2313
1ddbbb0c
JB		 2314static void iwl_mvm_sta_pre_rcu_remove(struct ieee80211_hw *hw,
2315 struct ieee80211_vif *vif,
2316 struct ieee80211_sta *sta)
2317{
2318 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
9d8ce6af 2319 struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta);
1ddbbb0c
JB		 2320
2321 /*
2322 * This is called before mac80211 does RCU synchronisation,
2323 * so here we already invalidate our internal RCU-protected
2324 * station pointer. The rest of the code will thus no longer
2325 * be able to find the station this way, and we don't rely
2326 * on further RCU synchronisation after the sta_state()
2327 * callback deleted the station.
2328 */
2329 mutex_lock(&mvm->mutex);
2330 if (sta == rcu_access_pointer(mvm->fw_id_to_mac_id[mvm_sta->sta_id]))
2331 rcu_assign_pointer(mvm->fw_id_to_mac_id[mvm_sta->sta_id],
2332 ERR_PTR(-ENOENT));
94939080 2333
1ddbbb0c
JB		 2334 mutex_unlock(&mvm->mutex);
2335}
2336
bd1ba664
JB		 2337static void iwl_mvm_check_uapsd(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
2338 const u8 *bssid)
2339{
2340 if (!(mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_UAPSD_SUPPORT))
2341 return;
2342
cee5a882
AA		 2343 if (vif->p2p && !iwl_mvm_is_p2p_standalone_uapsd_supported(mvm)) {
2344 vif->driver_flags &= ~IEEE80211_VIF_SUPPORTS_UAPSD;
2345 return;
2346 }
2347
bd1ba664
JB		 2348 if (iwlwifi_mod_params.uapsd_disable) {
2349 vif->driver_flags &= ~IEEE80211_VIF_SUPPORTS_UAPSD;
2350 return;
2351 }
2352
2353 vif->driver_flags |= IEEE80211_VIF_SUPPORTS_UAPSD;
2354}
2355
1e8f1329
GBA		 2356static void
2357iwl_mvm_tdls_check_trigger(struct iwl_mvm *mvm,
2358 struct ieee80211_vif *vif, u8 *peer_addr,
2359 enum nl80211_tdls_operation action)
2360{
2361 struct iwl_fw_dbg_trigger_tlv *trig;
2362 struct iwl_fw_dbg_trigger_tdls *tdls_trig;
2363
2364 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_TDLS))
2365 return;
2366
2367 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_TDLS);
2368 tdls_trig = (void *)trig->data;
2369 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig))
2370 return;
2371
2372 if (!(tdls_trig->action_bitmap & BIT(action)))
2373 return;
2374
2375 if (tdls_trig->peer_mode &&
2376 memcmp(tdls_trig->peer, peer_addr, ETH_ALEN) != 0)
2377 return;
2378
2379 iwl_mvm_fw_dbg_collect_trig(mvm, trig,
2380 "TDLS event occurred, peer %pM, action %d",
2381 peer_addr, action);
2382}
2383
8ca151b5
JB		 2384static int iwl_mvm_mac_sta_state(struct ieee80211_hw *hw,
2385 struct ieee80211_vif *vif,
2386 struct ieee80211_sta *sta,
2387 enum ieee80211_sta_state old_state,
2388 enum ieee80211_sta_state new_state)
2389{
2390 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2391 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2392 int ret;
2393
2394 IWL_DEBUG_MAC80211(mvm, "station %pM state change %d->%d\n",
2395 sta->addr, old_state, new_state);
2396
2397 /* this would be a mac80211 bug ... but don't crash */
2398 if (WARN_ON_ONCE(!mvmvif->phy_ctxt))
2399 return -EINVAL;
2400
2401 /* if a STA is being removed, reuse its ID */
2402 flush_work(&mvm->sta_drained_wk);
2403
2404 mutex_lock(&mvm->mutex);
2405 if (old_state == IEEE80211_STA_NOTEXIST &&
2406 new_state == IEEE80211_STA_NONE) {
48bc1307
JB		 2407 /*
2408 * Firmware bug - it'll crash if the beacon interval is less
2409 * than 16. We can't avoid connecting at all, so refuse the
2410 * station state change, this will cause mac80211 to abandon
2411 * attempts to connect to this AP, and eventually wpa_s will
2412 * blacklist the AP...
2413 */
2414 if (vif->type == NL80211_IFTYPE_STATION &&
2415 vif->bss_conf.beacon_int < 16) {
2416 IWL_ERR(mvm,
2417 "AP %pM beacon interval is %d, refusing due to firmware bug!\n",
2418 sta->addr, vif->bss_conf.beacon_int);
2419 ret = -EINVAL;
2420 goto out_unlock;
2421 }
cf7b491d
AN		 2422
2423 if (sta->tdls &&
2424 (vif->p2p ||
fa3d07e4
AN		 2425 iwl_mvm_tdls_sta_count(mvm, NULL) ==
2426 IWL_MVM_TDLS_STA_COUNT ||
cf7b491d
AN		 2427 iwl_mvm_phy_ctx_count(mvm) > 1)) {
2428 IWL_DEBUG_MAC80211(mvm, "refusing TDLS sta\n");
2429 ret = -EBUSY;
2430 goto out_unlock;
2431 }
2432
8ca151b5 2433 ret = iwl_mvm_add_sta(mvm, vif, sta);
1e8f1329 2434 if (sta->tdls && ret == 0) {
fa3d07e4 2435 iwl_mvm_recalc_tdls_state(mvm, vif, true);
1e8f1329
GBA		 2436 iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr,
2437 NL80211_TDLS_SETUP);
2438 }
8ca151b5
JB		 2439 } else if (old_state == IEEE80211_STA_NONE &&
2440 new_state == IEEE80211_STA_AUTH) {
e820c2da
HD		 2441 /*
2442 * EBS may be disabled due to previous failures reported by FW.
2443 * Reset EBS status here assuming environment has been changed.
2444 */
2445 mvm->last_ebs_successful = true;
bd1ba664 2446 iwl_mvm_check_uapsd(mvm, vif, sta->addr);
8ca151b5
JB		 2447 ret = 0;
2448 } else if (old_state == IEEE80211_STA_AUTH &&
2449 new_state == IEEE80211_STA_ASSOC) {
8be30c13
AB		 2450 if (vif->type == NL80211_IFTYPE_AP) {
2451 mvmvif->ap_assoc_sta_count++;
2452 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
2453 }
7a453973
JB		 2454 ret = iwl_mvm_update_sta(mvm, vif, sta);
2455 if (ret == 0)
2456 iwl_mvm_rs_rate_init(mvm, sta,
b87c2179
ES		 2457 mvmvif->phy_ctxt->channel->band,
2458 true);
8ca151b5
JB		 2459 } else if (old_state == IEEE80211_STA_ASSOC &&
2460 new_state == IEEE80211_STA_AUTHORIZED) {
f59e0e3c
AN		 2461
2462 /* we don't support TDLS during DCM */
2463 if (iwl_mvm_phy_ctx_count(mvm) > 1)
2464 iwl_mvm_teardown_tdls_peers(mvm);
2465
1e8f1329
GBA		 2466 if (sta->tdls)
2467 iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr,
2468 NL80211_TDLS_ENABLE_LINK);
2469
7df15b1e 2470 /* enable beacon filtering */
fa7b2e7f 2471 WARN_ON(iwl_mvm_enable_beacon_filter(mvm, vif, 0));
8ca151b5
JB		 2472 ret = 0;
2473 } else if (old_state == IEEE80211_STA_AUTHORIZED &&
2474 new_state == IEEE80211_STA_ASSOC) {
7df15b1e 2475 /* disable beacon filtering */
a1022927 2476 WARN_ON(iwl_mvm_disable_beacon_filter(mvm, vif, 0));
8ca151b5
JB		 2477 ret = 0;
2478 } else if (old_state == IEEE80211_STA_ASSOC &&
2479 new_state == IEEE80211_STA_AUTH) {
8be30c13
AB		 2480 if (vif->type == NL80211_IFTYPE_AP) {
2481 mvmvif->ap_assoc_sta_count--;
2482 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
2483 }
8ca151b5
JB		 2484 ret = 0;
2485 } else if (old_state == IEEE80211_STA_AUTH &&
2486 new_state == IEEE80211_STA_NONE) {
2487 ret = 0;
2488 } else if (old_state == IEEE80211_STA_NONE &&
2489 new_state == IEEE80211_STA_NOTEXIST) {
2490 ret = iwl_mvm_rm_sta(mvm, vif, sta);
1e8f1329 2491 if (sta->tdls) {
fa3d07e4 2492 iwl_mvm_recalc_tdls_state(mvm, vif, false);
1e8f1329
GBA		 2493 iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr,
2494 NL80211_TDLS_DISABLE_LINK);
2495 }
8ca151b5
JB		 2496 } else {
2497 ret = -EIO;
2498 }
48bc1307 2499 out_unlock:
8ca151b5
JB		 2500 mutex_unlock(&mvm->mutex);
2501
9c126cd6
LK		 2502 if (sta->tdls && ret == 0) {
2503 if (old_state == IEEE80211_STA_NOTEXIST &&
2504 new_state == IEEE80211_STA_NONE)
2505 ieee80211_reserve_tid(sta, IWL_MVM_TDLS_FW_TID);
2506 else if (old_state == IEEE80211_STA_NONE &&
2507 new_state == IEEE80211_STA_NOTEXIST)
2508 ieee80211_unreserve_tid(sta, IWL_MVM_TDLS_FW_TID);
2509 }
2510
8ca151b5
JB		 2511 return ret;
2512}
2513
2514static int iwl_mvm_mac_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
2515{
2516 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2517
2518 mvm->rts_threshold = value;
2519
2520 return 0;
2521}
2522
1f3b0ff8
LE		 2523static void iwl_mvm_sta_rc_update(struct ieee80211_hw *hw,
2524 struct ieee80211_vif *vif,
2525 struct ieee80211_sta *sta, u32 changed)
2526{
2527 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2528
2529 if (vif->type == NL80211_IFTYPE_STATION &&
2530 changed & IEEE80211_RC_NSS_CHANGED)
2531 iwl_mvm_sf_update(mvm, vif, false);
2532}
2533
8ca151b5
JB		 2534static int iwl_mvm_mac_conf_tx(struct ieee80211_hw *hw,
2535 struct ieee80211_vif *vif, u16 ac,
2536 const struct ieee80211_tx_queue_params *params)
2537{
2538 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2539 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2540
2541 mvmvif->queue_params[ac] = *params;
2542
2543 /*
2544 * No need to update right away, we'll get BSS_CHANGED_QOS
2545 * The exception is P2P_DEVICE interface which needs immediate update.
2546 */
2547 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
2548 int ret;
2549
2550 mutex_lock(&mvm->mutex);
3dfd3a97 2551 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
8ca151b5
JB		 2552 mutex_unlock(&mvm->mutex);
2553 return ret;
2554 }
2555 return 0;
2556}
2557
2558static void iwl_mvm_mac_mgd_prepare_tx(struct ieee80211_hw *hw,
2559 struct ieee80211_vif *vif)
2560{
2561 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
7c70fee5
SS		 2562 u32 duration = IWL_MVM_TE_SESSION_PROTECTION_MAX_TIME_MS;
2563 u32 min_duration = IWL_MVM_TE_SESSION_PROTECTION_MIN_TIME_MS;
8ca151b5
JB		 2564
2565 if (WARN_ON_ONCE(vif->bss_conf.assoc))
2566 return;
2567
576eeee9
EP		 2568 /*
2569 * iwl_mvm_protect_session() reads directly from the device
2570 * (the system time), so make sure it is available.
2571 */
2572 if (iwl_mvm_ref_sync(mvm, IWL_MVM_REF_PREPARE_TX))
2573 return;
2574
8ca151b5
JB		 2575 mutex_lock(&mvm->mutex);
2576 /* Try really hard to protect the session and hear a beacon */
d20d37bc 2577 iwl_mvm_protect_session(mvm, vif, duration, min_duration, 500, false);
8ca151b5 2578 mutex_unlock(&mvm->mutex);
576eeee9
EP		 2579
2580 iwl_mvm_unref(mvm, IWL_MVM_REF_PREPARE_TX);
8ca151b5
JB		 2581}
2582
35a000b7
DS		 2583static int iwl_mvm_mac_sched_scan_start(struct ieee80211_hw *hw,
2584 struct ieee80211_vif *vif,
2585 struct cfg80211_sched_scan_request *req,
633e2713 2586 struct ieee80211_scan_ies *ies)
35a000b7
DS		 2587{
2588 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
35a000b7 2589
35a000b7 2590 int ret;
4660dfbb 2591
35a000b7
DS		 2592 mutex_lock(&mvm->mutex);
2593
1f940386 2594 if (!vif->bss_conf.idle) {
bd5e4744
DS		 2595 ret = -EBUSY;
2596 goto out;
2597 }
2598
19945dfb 2599 ret = iwl_mvm_sched_scan_start(mvm, vif, req, ies, IWL_MVM_SCAN_SCHED);
d2496221 2600
35a000b7
DS		 2601out:
2602 mutex_unlock(&mvm->mutex);
2603 return ret;
2604}
2605
37e3308c
JB		 2606static int iwl_mvm_mac_sched_scan_stop(struct ieee80211_hw *hw,
2607 struct ieee80211_vif *vif)
35a000b7
DS		 2608{
2609 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
33ea27f6 2610 int ret;
35a000b7
DS		 2611
2612 mutex_lock(&mvm->mutex);
e7d3abab
LC		 2613
2614 /* Due to a race condition, it's possible that mac80211 asks
2615 * us to stop a sched_scan when it's already stopped. This
2616 * can happen, for instance, if we stopped the scan ourselves,
2617 * called ieee80211_sched_scan_stopped() and the userspace called
2618 * stop sched scan scan before ieee80211_sched_scan_stopped_work()
2619 * could run. To handle this, simply return if the scan is
2620 * not running.
2621 */
262888fc 2622 if (!(mvm->scan_status & IWL_MVM_SCAN_SCHED)) {
e7d3abab
LC		 2623 mutex_unlock(&mvm->mutex);
2624 return 0;
2625 }
2626
c7d42480 2627 ret = iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_SCHED, false);
35a000b7 2628 mutex_unlock(&mvm->mutex);
33ea27f6 2629 iwl_mvm_wait_for_async_handlers(mvm);
37e3308c 2630
33ea27f6 2631 return ret;
35a000b7
DS		 2632}
2633
8ca151b5
JB		 2634static int iwl_mvm_mac_set_key(struct ieee80211_hw *hw,
2635 enum set_key_cmd cmd,
2636 struct ieee80211_vif *vif,
2637 struct ieee80211_sta *sta,
2638 struct ieee80211_key_conf *key)
2639{
2640 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
f5e28eac
JB		 2641 struct iwl_mvm_sta *mvmsta;
2642 struct iwl_mvm_key_pn *ptk_pn;
2643 int keyidx = key->keyidx;
8ca151b5 2644 int ret;
d6ee54a9 2645 u8 key_offset;
8ca151b5
JB		 2646
2647 if (iwlwifi_mod_params.sw_crypto) {
2648 IWL_DEBUG_MAC80211(mvm, "leave - hwcrypto disabled\n");
2649 return -EOPNOTSUPP;
2650 }
2651
2652 switch (key->cipher) {
2653 case WLAN_CIPHER_SUITE_TKIP:
2654 key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
1ad4f639 2655 key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE;
8ca151b5 2656 break;
ca8c0f4b
JB		 2657 case WLAN_CIPHER_SUITE_CCMP:
2658 key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE;
2659 break;
8ca151b5 2660 case WLAN_CIPHER_SUITE_AES_CMAC:
30686bf7 2661 WARN_ON_ONCE(!ieee80211_hw_check(hw, MFP_CAPABLE));
8ca151b5
JB		 2662 break;
2663 case WLAN_CIPHER_SUITE_WEP40:
2664 case WLAN_CIPHER_SUITE_WEP104:
ba3943b0
JB		 2665 /* For non-client mode, only use WEP keys for TX as we probably
2666 * don't have a station yet anyway and would then have to keep
2667 * track of the keys, linking them to each of the clients/peers
2668 * as they appear. For now, don't do that, for performance WEP
2669 * offload doesn't really matter much, but we need it for some
2670 * other offload features in client mode.
8ca151b5 2671 */
ba3943b0
JB		 2672 if (vif->type != NL80211_IFTYPE_STATION)
2673 return 0;
2674 break;
8ca151b5 2675 default:
e36e5433
MS		 2676 /* currently FW supports only one optional cipher scheme */
2677 if (hw->n_cipher_schemes &&
2678 hw->cipher_schemes->cipher == key->cipher)
2679 key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE;
2680 else
2681 return -EOPNOTSUPP;
8ca151b5
JB		 2682 }
2683
2684 mutex_lock(&mvm->mutex);
2685
2686 switch (cmd) {
2687 case SET_KEY:
5023d966
JB		 2688 if ((vif->type == NL80211_IFTYPE_ADHOC ||
2689 vif->type == NL80211_IFTYPE_AP) && !sta) {
2690 /*
2691 * GTK on AP interface is a TX-only key, return 0;
2692 * on IBSS they're per-station and because we're lazy
2693 * we don't support them for RX, so do the same.
81279c49 2694 * CMAC in AP/IBSS modes must be done in software.
5023d966 2695 */
81279c49
JB		 2696 if (key->cipher == WLAN_CIPHER_SUITE_AES_CMAC)
2697 ret = -EOPNOTSUPP;
2698 else
2699 ret = 0;
6caffd4f
JB		 2700 key->hw_key_idx = STA_KEY_IDX_INVALID;
2701 break;
2702 }
2703
b546dcd6
JB		 2704 /* During FW restart, in order to restore the state as it was,
2705 * don't try to reprogram keys we previously failed for.
2706 */
2707 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) &&
2708 key->hw_key_idx == STA_KEY_IDX_INVALID) {
2709 IWL_DEBUG_MAC80211(mvm,
2710 "skip invalid idx key programming during restart\n");
2711 ret = 0;
2712 break;
2713 }
2714
f5e28eac
JB		 2715 if (!test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) &&
2716 sta && iwl_mvm_has_new_rx_api(mvm) &&
2717 key->flags & IEEE80211_KEY_FLAG_PAIRWISE &&
2718 (key->cipher == WLAN_CIPHER_SUITE_CCMP ||
2719 key->cipher == WLAN_CIPHER_SUITE_GCMP)) {
2720 struct ieee80211_key_seq seq;
2721 int tid, q;
2722
2723 mvmsta = iwl_mvm_sta_from_mac80211(sta);
2724 WARN_ON(rcu_access_pointer(mvmsta->ptk_pn[keyidx]));
2725 ptk_pn = kzalloc(sizeof(*ptk_pn) +
2726 mvm->trans->num_rx_queues *
2727 sizeof(ptk_pn->q[0]),
2728 GFP_KERNEL);
2729 if (!ptk_pn) {
2730 ret = -ENOMEM;
2731 break;
2732 }
2733
2734 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) {
2735 ieee80211_get_key_rx_seq(key, tid, &seq);
2736 for (q = 0; q < mvm->trans->num_rx_queues; q++)
2737 memcpy(ptk_pn->q[q].pn[tid],
2738 seq.ccmp.pn,
2739 IEEE80211_CCMP_PN_LEN);
2740 }
2741
2742 rcu_assign_pointer(mvmsta->ptk_pn[keyidx], ptk_pn);
2743 }
2744
d6ee54a9
LC		 2745 /* in HW restart reuse the index, otherwise request a new one */
2746 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status))
2747 key_offset = key->hw_key_idx;
2748 else
2749 key_offset = STA_KEY_IDX_INVALID;
2750
8ca151b5 2751 IWL_DEBUG_MAC80211(mvm, "set hwcrypto key\n");
d6ee54a9 2752 ret = iwl_mvm_set_sta_key(mvm, vif, sta, key, key_offset);
8ca151b5
JB		 2753 if (ret) {
2754 IWL_WARN(mvm, "set key failed\n");
2755 /*
2756 * can't add key for RX, but we don't need it
2757 * in the device for TX so still return 0
2758 */
6caffd4f 2759 key->hw_key_idx = STA_KEY_IDX_INVALID;
8ca151b5
JB		 2760 ret = 0;
2761 }
2762
2763 break;
2764 case DISABLE_KEY:
6caffd4f
JB		 2765 if (key->hw_key_idx == STA_KEY_IDX_INVALID) {
2766 ret = 0;
2767 break;
2768 }
2769
f5e28eac
JB		 2770 if (sta && iwl_mvm_has_new_rx_api(mvm) &&
2771 key->flags & IEEE80211_KEY_FLAG_PAIRWISE &&
2772 (key->cipher == WLAN_CIPHER_SUITE_CCMP ||
2773 key->cipher == WLAN_CIPHER_SUITE_GCMP)) {
2774 mvmsta = iwl_mvm_sta_from_mac80211(sta);
2775 ptk_pn = rcu_dereference_protected(
2776 mvmsta->ptk_pn[keyidx],
2777 lockdep_is_held(&mvm->mutex));
2778 RCU_INIT_POINTER(mvmsta->ptk_pn[keyidx], NULL);
2779 if (ptk_pn)
2780 kfree_rcu(ptk_pn, rcu_head);
2781 }
2782
8ca151b5
JB		 2783 IWL_DEBUG_MAC80211(mvm, "disable hwcrypto key\n");
2784 ret = iwl_mvm_remove_sta_key(mvm, vif, sta, key);
2785 break;
2786 default:
2787 ret = -EINVAL;
2788 }
2789
2790 mutex_unlock(&mvm->mutex);
2791 return ret;
2792}
2793
2794static void iwl_mvm_mac_update_tkip_key(struct ieee80211_hw *hw,
2795 struct ieee80211_vif *vif,
2796 struct ieee80211_key_conf *keyconf,
2797 struct ieee80211_sta *sta,
2798 u32 iv32, u16 *phase1key)
2799{
2800 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2801
5023d966
JB		 2802 if (keyconf->hw_key_idx == STA_KEY_IDX_INVALID)
2803 return;
2804
8ca151b5
JB		 2805 iwl_mvm_update_tkip_key(mvm, vif, keyconf, sta, iv32, phase1key);
2806}
2807
2808
b112889c
AM		 2809static bool iwl_mvm_rx_aux_roc(struct iwl_notif_wait_data *notif_wait,
2810 struct iwl_rx_packet *pkt, void *data)
2811{
2812 struct iwl_mvm *mvm =
2813 container_of(notif_wait, struct iwl_mvm, notif_wait);
2814 struct iwl_hs20_roc_res *resp;
2815 int resp_len = iwl_rx_packet_payload_len(pkt);
2816 struct iwl_mvm_time_event_data *te_data = data;
2817
2818 if (WARN_ON(pkt->hdr.cmd != HOT_SPOT_CMD))
2819 return true;
2820
2821 if (WARN_ON_ONCE(resp_len != sizeof(*resp))) {
2822 IWL_ERR(mvm, "Invalid HOT_SPOT_CMD response\n");
2823 return true;
2824 }
2825
2826 resp = (void *)pkt->data;
2827
2828 IWL_DEBUG_TE(mvm,
2829 "Aux ROC: Recieved response from ucode: status=%d uid=%d\n",
2830 resp->status, resp->event_unique_id);
2831
2832 te_data->uid = le32_to_cpu(resp->event_unique_id);
2833 IWL_DEBUG_TE(mvm, "TIME_EVENT_CMD response - UID = 0x%x\n",
2834 te_data->uid);
2835
2836 spin_lock_bh(&mvm->time_event_lock);
2837 list_add_tail(&te_data->list, &mvm->aux_roc_te_list);
2838 spin_unlock_bh(&mvm->time_event_lock);
2839
2840 return true;
2841}
2842
dc28e12f
MG		 2843#define AUX_ROC_MIN_DURATION MSEC_TO_TU(100)
2844#define AUX_ROC_MIN_DELAY MSEC_TO_TU(200)
2845#define AUX_ROC_MAX_DELAY MSEC_TO_TU(600)
2846#define AUX_ROC_SAFETY_BUFFER MSEC_TO_TU(20)
2847#define AUX_ROC_MIN_SAFETY_BUFFER MSEC_TO_TU(10)
b112889c
AM		 2848static int iwl_mvm_send_aux_roc_cmd(struct iwl_mvm *mvm,
2849 struct ieee80211_channel *channel,
2850 struct ieee80211_vif *vif,
2851 int duration)
2852{
2853 int res, time_reg = DEVICE_SYSTEM_TIME_REG;
2854 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2855 struct iwl_mvm_time_event_data *te_data = &mvmvif->hs_time_event_data;
6eb031d2 2856 static const u16 time_event_response[] = { HOT_SPOT_CMD };
b112889c 2857 struct iwl_notification_wait wait_time_event;
dc28e12f
MG		 2858 u32 dtim_interval = vif->bss_conf.dtim_period *
2859 vif->bss_conf.beacon_int;
2860 u32 req_dur, delay;
b112889c
AM		 2861 struct iwl_hs20_roc_req aux_roc_req = {
2862 .action = cpu_to_le32(FW_CTXT_ACTION_ADD),
2863 .id_and_color =
2864 cpu_to_le32(FW_CMD_ID_AND_COLOR(MAC_INDEX_AUX, 0)),
2865 .sta_id_and_color = cpu_to_le32(mvm->aux_sta.sta_id),
2866 /* Set the channel info data */
2867 .channel_info.band = (channel->band == IEEE80211_BAND_2GHZ) ?
2868 PHY_BAND_24 : PHY_BAND_5,
2869 .channel_info.channel = channel->hw_value,
2870 .channel_info.width = PHY_VHT_CHANNEL_MODE20,
2871 /* Set the time and duration */
2872 .apply_time = cpu_to_le32(iwl_read_prph(mvm->trans, time_reg)),
b112889c
AM		 2873 };
2874
dc28e12f
MG		 2875 delay = AUX_ROC_MIN_DELAY;
2876 req_dur = MSEC_TO_TU(duration);
2877
2878 /*
2879 * If we are associated we want the delay time to be at least one
2880 * dtim interval so that the FW can wait until after the DTIM and
2881 * then start the time event, this will potentially allow us to
2882 * remain off-channel for the max duration.
2883 * Since we want to use almost a whole dtim interval we would also
2884 * like the delay to be for 2-3 dtim intervals, in case there are
2885 * other time events with higher priority.
2886 */
2887 if (vif->bss_conf.assoc) {
2888 delay = min_t(u32, dtim_interval * 3, AUX_ROC_MAX_DELAY);
2889 /* We cannot remain off-channel longer than the DTIM interval */
2890 if (dtim_interval <= req_dur) {
2891 req_dur = dtim_interval - AUX_ROC_SAFETY_BUFFER;
2892 if (req_dur <= AUX_ROC_MIN_DURATION)
2893 req_dur = dtim_interval -
2894 AUX_ROC_MIN_SAFETY_BUFFER;
2895 }
2896 }
2897
2898 aux_roc_req.duration = cpu_to_le32(req_dur);
2899 aux_roc_req.apply_time_max_delay = cpu_to_le32(delay);
2900
2901 IWL_DEBUG_TE(mvm,
2902 "ROC: Requesting to remain on channel %u for %ums (requested = %ums, max_delay = %ums, dtim_interval = %ums)\n",
2903 channel->hw_value, req_dur, duration, delay,
2904 dtim_interval);
b112889c
AM		 2905 /* Set the node address */
2906 memcpy(aux_roc_req.node_addr, vif->addr, ETH_ALEN);
2907
a6cc5163
MG		 2908 lockdep_assert_held(&mvm->mutex);
2909
2910 spin_lock_bh(&mvm->time_event_lock);
2911
2912 if (WARN_ON(te_data->id == HOT_SPOT_CMD)) {
2913 spin_unlock_bh(&mvm->time_event_lock);
2914 return -EIO;
2915 }
2916
b112889c
AM		 2917 te_data->vif = vif;
2918 te_data->duration = duration;
2919 te_data->id = HOT_SPOT_CMD;
2920
b112889c
AM		 2921 spin_unlock_bh(&mvm->time_event_lock);
2922
2923 /*
2924 * Use a notification wait, which really just processes the
2925 * command response and doesn't wait for anything, in order
2926 * to be able to process the response and get the UID inside
2927 * the RX path. Using CMD_WANT_SKB doesn't work because it
2928 * stores the buffer and then wakes up this thread, by which
2929 * time another notification (that the time event started)
2930 * might already be processed unsuccessfully.
2931 */
2932 iwl_init_notification_wait(&mvm->notif_wait, &wait_time_event,
2933 time_event_response,
2934 ARRAY_SIZE(time_event_response),
2935 iwl_mvm_rx_aux_roc, te_data);
2936
2937 res = iwl_mvm_send_cmd_pdu(mvm, HOT_SPOT_CMD, 0, sizeof(aux_roc_req),
2938 &aux_roc_req);
2939
2940 if (res) {
2941 IWL_ERR(mvm, "Couldn't send HOT_SPOT_CMD: %d\n", res);
2942 iwl_remove_notification(&mvm->notif_wait, &wait_time_event);
2943 goto out_clear_te;
2944 }
2945
2946 /* No need to wait for anything, so just pass 1 (0 isn't valid) */
2947 res = iwl_wait_notification(&mvm->notif_wait, &wait_time_event, 1);
2948 /* should never fail */
2949 WARN_ON_ONCE(res);
2950
2951 if (res) {
2952 out_clear_te:
2953 spin_lock_bh(&mvm->time_event_lock);
2954 iwl_mvm_te_clear_data(mvm, te_data);
2955 spin_unlock_bh(&mvm->time_event_lock);
2956 }
2957
2958 return res;
2959}
2960
8ca151b5
JB		 2961static int iwl_mvm_roc(struct ieee80211_hw *hw,
2962 struct ieee80211_vif *vif,
2963 struct ieee80211_channel *channel,
d339d5ca
IP		 2964 int duration,
2965 enum ieee80211_roc_type type)
8ca151b5
JB		 2966{
2967 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
fe0f2de3 2968 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
8ca151b5 2969 struct cfg80211_chan_def chandef;
31d385ae
IP		 2970 struct iwl_mvm_phy_ctxt *phy_ctxt;
2971 int ret, i;
2972
2973 IWL_DEBUG_MAC80211(mvm, "enter (%d, %d, %d)\n", channel->hw_value,
2974 duration, type);
8ca151b5 2975
6ed13164
MG		 2976 flush_work(&mvm->roc_done_wk);
2977
a6cc5163
MG		 2978 mutex_lock(&mvm->mutex);
2979
b112889c
AM		 2980 switch (vif->type) {
2981 case NL80211_IFTYPE_STATION:
859d914c
JB		 2982 if (fw_has_capa(&mvm->fw->ucode_capa,
2983 IWL_UCODE_TLV_CAPA_HOTSPOT_SUPPORT)) {
5ac6c72e
LC		 2984 /* Use aux roc framework (HS20) */
2985 ret = iwl_mvm_send_aux_roc_cmd(mvm, channel,
2986 vif, duration);
2987 goto out_unlock;
2988 }
2989 IWL_ERR(mvm, "hotspot not supported\n");
2990 ret = -EINVAL;
a6cc5163 2991 goto out_unlock;
b112889c
AM		 2992 case NL80211_IFTYPE_P2P_DEVICE:
2993 /* handle below */
2994 break;
2995 default:
2996 IWL_ERR(mvm, "vif isn't P2P_DEVICE: %d\n", vif->type);
a6cc5163
MG		 2997 ret = -EINVAL;
2998 goto out_unlock;
8ca151b5
JB		 2999 }
3000
31d385ae
IP		 3001 for (i = 0; i < NUM_PHY_CTX; i++) {
3002 phy_ctxt = &mvm->phy_ctxts[i];
3003 if (phy_ctxt->ref == 0 || mvmvif->phy_ctxt == phy_ctxt)
3004 continue;
3005
3006 if (phy_ctxt->ref && channel == phy_ctxt->channel) {
3007 /*
3008 * Unbind the P2P_DEVICE from the current PHY context,
3009 * and if the PHY context is not used remove it.
3010 */
3011 ret = iwl_mvm_binding_remove_vif(mvm, vif);
3012 if (WARN(ret, "Failed unbinding P2P_DEVICE\n"))
3013 goto out_unlock;
3014
3015 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
3016
3017 /* Bind the P2P_DEVICE to the current PHY Context */
3018 mvmvif->phy_ctxt = phy_ctxt;
3019
3020 ret = iwl_mvm_binding_add_vif(mvm, vif);
3021 if (WARN(ret, "Failed binding P2P_DEVICE\n"))
3022 goto out_unlock;
3023
3024 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt);
3025 goto schedule_time_event;
3026 }
3027 }
3028
3029 /* Need to update the PHY context only if the ROC channel changed */
3030 if (channel == mvmvif->phy_ctxt->channel)
3031 goto schedule_time_event;
3032
8ca151b5 3033 cfg80211_chandef_create(&chandef, channel, NL80211_CHAN_NO_HT);
8ca151b5 3034
31d385ae
IP		 3035 /*
3036 * Change the PHY context configuration as it is currently referenced
3037 * only by the P2P Device MAC
3038 */
3039 if (mvmvif->phy_ctxt->ref == 1) {
3040 ret = iwl_mvm_phy_ctxt_changed(mvm, mvmvif->phy_ctxt,
3041 &chandef, 1, 1);
3042 if (ret)
3043 goto out_unlock;
3044 } else {
3045 /*
3046 * The PHY context is shared with other MACs. Need to remove the
3047 * P2P Device from the binding, allocate an new PHY context and
3048 * create a new binding
3049 */
3050 phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm);
3051 if (!phy_ctxt) {
3052 ret = -ENOSPC;
3053 goto out_unlock;
3054 }
3055
3056 ret = iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &chandef,
3057 1, 1);
3058 if (ret) {
3059 IWL_ERR(mvm, "Failed to change PHY context\n");
3060 goto out_unlock;
3061 }
3062
3063 /* Unbind the P2P_DEVICE from the current PHY context */
3064 ret = iwl_mvm_binding_remove_vif(mvm, vif);
3065 if (WARN(ret, "Failed unbinding P2P_DEVICE\n"))
3066 goto out_unlock;
3067
3068 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
3069
3070 /* Bind the P2P_DEVICE to the new allocated PHY context */
3071 mvmvif->phy_ctxt = phy_ctxt;
3072
3073 ret = iwl_mvm_binding_add_vif(mvm, vif);
3074 if (WARN(ret, "Failed binding P2P_DEVICE\n"))
3075 goto out_unlock;
3076
3077 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt);
3078 }
3079
3080schedule_time_event:
8ca151b5 3081 /* Schedule the time events */
e635c797 3082 ret = iwl_mvm_start_p2p_roc(mvm, vif, duration, type);
8ca151b5 3083
31d385ae 3084out_unlock:
8ca151b5
JB		 3085 mutex_unlock(&mvm->mutex);
3086 IWL_DEBUG_MAC80211(mvm, "leave\n");
8ca151b5
JB		 3087 return ret;
3088}
3089
3090static int iwl_mvm_cancel_roc(struct ieee80211_hw *hw)
3091{
3092 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3093
3094 IWL_DEBUG_MAC80211(mvm, "enter\n");
3095
3096 mutex_lock(&mvm->mutex);
bf5da87f 3097 iwl_mvm_stop_roc(mvm);
8ca151b5
JB		 3098 mutex_unlock(&mvm->mutex);
3099
3100 IWL_DEBUG_MAC80211(mvm, "leave\n");
3101 return 0;
3102}
3103
b08c1d97
LC		 3104static int __iwl_mvm_add_chanctx(struct iwl_mvm *mvm,
3105 struct ieee80211_chanctx_conf *ctx)
8ca151b5 3106{
fe0f2de3
IP		 3107 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
3108 struct iwl_mvm_phy_ctxt *phy_ctxt;
8ca151b5
JB		 3109 int ret;
3110
b08c1d97
LC		 3111 lockdep_assert_held(&mvm->mutex);
3112
53a9d61e 3113 IWL_DEBUG_MAC80211(mvm, "Add channel context\n");
fe0f2de3 3114
fe0f2de3
IP		 3115 phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm);
3116 if (!phy_ctxt) {
3117 ret = -ENOSPC;
3118 goto out;
3119 }
8ca151b5 3120
dcbc3e1a 3121 ret = iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &ctx->min_def,
53a9d61e
IP		 3122 ctx->rx_chains_static,
3123 ctx->rx_chains_dynamic);
fe0f2de3
IP		 3124 if (ret) {
3125 IWL_ERR(mvm, "Failed to add PHY context\n");
3126 goto out;
3127 }
3128
53a9d61e 3129 iwl_mvm_phy_ctxt_ref(mvm, phy_ctxt);
fe0f2de3
IP		 3130 *phy_ctxt_id = phy_ctxt->id;
3131out:
b08c1d97
LC		 3132 return ret;
3133}
3134
3135static int iwl_mvm_add_chanctx(struct ieee80211_hw *hw,
3136 struct ieee80211_chanctx_conf *ctx)
3137{
3138 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3139 int ret;
3140
3141 mutex_lock(&mvm->mutex);
3142 ret = __iwl_mvm_add_chanctx(mvm, ctx);
8ca151b5 3143 mutex_unlock(&mvm->mutex);
b08c1d97 3144
8ca151b5
JB		 3145 return ret;
3146}
3147
b08c1d97
LC		 3148static void __iwl_mvm_remove_chanctx(struct iwl_mvm *mvm,
3149 struct ieee80211_chanctx_conf *ctx)
3150{
3151 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
3152 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id];
3153
3154 lockdep_assert_held(&mvm->mutex);
3155
3156 iwl_mvm_phy_ctxt_unref(mvm, phy_ctxt);
3157}
3158
8ca151b5
JB		 3159static void iwl_mvm_remove_chanctx(struct ieee80211_hw *hw,
3160 struct ieee80211_chanctx_conf *ctx)
3161{
3162 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
8ca151b5
JB		 3163
3164 mutex_lock(&mvm->mutex);
b08c1d97 3165 __iwl_mvm_remove_chanctx(mvm, ctx);
8ca151b5
JB		 3166 mutex_unlock(&mvm->mutex);
3167}
3168
3169static void iwl_mvm_change_chanctx(struct ieee80211_hw *hw,
3170 struct ieee80211_chanctx_conf *ctx,
3171 u32 changed)
3172{
3173 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
fe0f2de3
IP		 3174 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
3175 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id];
8ca151b5 3176
31d385ae
IP		 3177 if (WARN_ONCE((phy_ctxt->ref > 1) &&
3178 (changed & ~(IEEE80211_CHANCTX_CHANGE_WIDTH |
3179 IEEE80211_CHANCTX_CHANGE_RX_CHAINS |
2dceedae
AN		 3180 IEEE80211_CHANCTX_CHANGE_RADAR |
3181 IEEE80211_CHANCTX_CHANGE_MIN_WIDTH)),
31d385ae
IP		 3182 "Cannot change PHY. Ref=%d, changed=0x%X\n",
3183 phy_ctxt->ref, changed))
3184 return;
3185
8ca151b5 3186 mutex_lock(&mvm->mutex);
4d66449a 3187 iwl_mvm_bt_coex_vif_change(mvm);
dcbc3e1a 3188 iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &ctx->min_def,
8ca151b5
JB		 3189 ctx->rx_chains_static,
3190 ctx->rx_chains_dynamic);
3191 mutex_unlock(&mvm->mutex);
3192}
3193
b08c1d97
LC		 3194static int __iwl_mvm_assign_vif_chanctx(struct iwl_mvm *mvm,
3195 struct ieee80211_vif *vif,
f0c97783
LC		 3196 struct ieee80211_chanctx_conf *ctx,
3197 bool switching_chanctx)
8ca151b5 3198{
fe0f2de3
IP		 3199 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
3200 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id];
8ca151b5
JB		 3201 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3202 int ret;
3203
b08c1d97 3204 lockdep_assert_held(&mvm->mutex);
8ca151b5 3205
fe0f2de3 3206 mvmvif->phy_ctxt = phy_ctxt;
8ca151b5
JB		 3207
3208 switch (vif->type) {
3209 case NL80211_IFTYPE_AP:
4741dd04
LC		 3210 /* only needed if we're switching chanctx (i.e. during CSA) */
3211 if (switching_chanctx) {
bd3398e2
AO		 3212 mvmvif->ap_ibss_active = true;
3213 break;
3214 }
5023d966 3215 case NL80211_IFTYPE_ADHOC:
8ca151b5
JB		 3216 /*
3217 * The AP binding flow is handled as part of the start_ap flow
5023d966 3218 * (in bss_info_changed), similarly for IBSS.
8ca151b5
JB		 3219 */
3220 ret = 0;
b08c1d97 3221 goto out;
8ca151b5 3222 case NL80211_IFTYPE_STATION:
2533edce 3223 break;
8ca151b5 3224 case NL80211_IFTYPE_MONITOR:
2533edce
LC		 3225 /* always disable PS when a monitor interface is active */
3226 mvmvif->ps_disabled = true;
8ca151b5
JB		 3227 break;
3228 default:
3229 ret = -EINVAL;
b08c1d97 3230 goto out;
8ca151b5
JB		 3231 }
3232
3233 ret = iwl_mvm_binding_add_vif(mvm, vif);
3234 if (ret)
b08c1d97 3235 goto out;
8ca151b5
JB		 3236
3237 /*
92d85562
AB		 3238 * Power state must be updated before quotas,
3239 * otherwise fw will complain.
3240 */
999609f1 3241 iwl_mvm_power_update_mac(mvm);
92d85562
AB		 3242
3243 /* Setting the quota at this stage is only required for monitor
8ca151b5
JB		 3244 * interfaces. For the other types, the bss_info changed flow
3245 * will handle quota settings.
3246 */
3247 if (vif->type == NL80211_IFTYPE_MONITOR) {
1e1391ca 3248 mvmvif->monitor_active = true;
7754ae79 3249 ret = iwl_mvm_update_quotas(mvm, false, NULL);
8ca151b5
JB		 3250 if (ret)
3251 goto out_remove_binding;
0e39eb03
CRI		 3252
3253 ret = iwl_mvm_add_snif_sta(mvm, vif);
3254 if (ret)
3255 goto out_remove_binding;
3256
8ca151b5
JB		 3257 }
3258
bd3398e2 3259 /* Handle binding during CSA */
a57c688d 3260 if (vif->type == NL80211_IFTYPE_AP) {
7754ae79 3261 iwl_mvm_update_quotas(mvm, false, NULL);
3dfd3a97 3262 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
bd3398e2
AO		 3263 }
3264
4741dd04 3265 if (switching_chanctx && vif->type == NL80211_IFTYPE_STATION) {
686e7fe1
LC		 3266 u32 duration = 2 * vif->bss_conf.beacon_int;
3267
3268 /* iwl_mvm_protect_session() reads directly from the
3269 * device (the system time), so make sure it is
3270 * available.
3271 */
3272 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_PROTECT_CSA);
3273 if (ret)
3274 goto out_remove_binding;
3275
3276 /* Protect the session to make sure we hear the first
3277 * beacon on the new channel.
3278 */
3279 iwl_mvm_protect_session(mvm, vif, duration, duration,
3280 vif->bss_conf.beacon_int / 2,
3281 true);
3282
3283 iwl_mvm_unref(mvm, IWL_MVM_REF_PROTECT_CSA);
3284
7754ae79 3285 iwl_mvm_update_quotas(mvm, false, NULL);
0ce04ce7
LC		 3286 }
3287
b08c1d97 3288 goto out;
8ca151b5 3289
b08c1d97 3290out_remove_binding:
8ca151b5 3291 iwl_mvm_binding_remove_vif(mvm, vif);
999609f1 3292 iwl_mvm_power_update_mac(mvm);
b08c1d97 3293out:
8ca151b5
JB		 3294 if (ret)
3295 mvmvif->phy_ctxt = NULL;
3296 return ret;
3297}
b08c1d97
LC		 3298static int iwl_mvm_assign_vif_chanctx(struct ieee80211_hw *hw,
3299 struct ieee80211_vif *vif,
3300 struct ieee80211_chanctx_conf *ctx)
8ca151b5
JB		 3301{
3302 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
b08c1d97 3303 int ret;
8ca151b5
JB		 3304
3305 mutex_lock(&mvm->mutex);
f0c97783 3306 ret = __iwl_mvm_assign_vif_chanctx(mvm, vif, ctx, false);
b08c1d97
LC		 3307 mutex_unlock(&mvm->mutex);
3308
3309 return ret;
3310}
3311
3312static void __iwl_mvm_unassign_vif_chanctx(struct iwl_mvm *mvm,
3313 struct ieee80211_vif *vif,
f0c97783
LC		 3314 struct ieee80211_chanctx_conf *ctx,
3315 bool switching_chanctx)
b08c1d97
LC		 3316{
3317 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
f0c97783 3318 struct ieee80211_vif *disabled_vif = NULL;
b08c1d97
LC		 3319
3320 lockdep_assert_held(&mvm->mutex);
8ca151b5
JB		 3321
3322 iwl_mvm_remove_time_event(mvm, mvmvif, &mvmvif->time_event_data);
3323
8ca151b5 3324 switch (vif->type) {
5023d966 3325 case NL80211_IFTYPE_ADHOC:
b08c1d97 3326 goto out;
8ca151b5 3327 case NL80211_IFTYPE_MONITOR:
1e1391ca 3328 mvmvif->monitor_active = false;
2533edce 3329 mvmvif->ps_disabled = false;
0e39eb03 3330 iwl_mvm_rm_snif_sta(mvm, vif);
8ca151b5 3331 break;
bd3398e2
AO		 3332 case NL80211_IFTYPE_AP:
3333 /* This part is triggered only during CSA */
4741dd04 3334 if (!switching_chanctx || !mvmvif->ap_ibss_active)
b08c1d97 3335 goto out;
bd3398e2 3336
7ef0aab6
AO		 3337 mvmvif->csa_countdown = false;
3338
003e5236
AO		 3339 /* Set CS bit on all the stations */
3340 iwl_mvm_modify_all_sta_disable_tx(mvm, mvmvif, true);
3341
3342 /* Save blocked iface, the timeout is set on the next beacon */
3343 rcu_assign_pointer(mvm->csa_tx_blocked_vif, vif);
3344
bd3398e2 3345 mvmvif->ap_ibss_active = false;
f0c97783
LC		 3346 break;
3347 case NL80211_IFTYPE_STATION:
3348 if (!switching_chanctx)
3349 break;
3350
3351 disabled_vif = vif;
3352
3dfd3a97 3353 iwl_mvm_mac_ctxt_changed(mvm, vif, true, NULL);
f0c97783 3354 break;
8ca151b5
JB		 3355 default:
3356 break;
3357 }
3358
7754ae79 3359 iwl_mvm_update_quotas(mvm, false, disabled_vif);
1e1391ca 3360 iwl_mvm_binding_remove_vif(mvm, vif);
1c2abf72 3361
b08c1d97 3362out:
a11e144e 3363 mvmvif->phy_ctxt = NULL;
999609f1 3364 iwl_mvm_power_update_mac(mvm);
b08c1d97
LC		 3365}
3366
3367static void iwl_mvm_unassign_vif_chanctx(struct ieee80211_hw *hw,
3368 struct ieee80211_vif *vif,
3369 struct ieee80211_chanctx_conf *ctx)
3370{
3371 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3372
3373 mutex_lock(&mvm->mutex);
f0c97783 3374 __iwl_mvm_unassign_vif_chanctx(mvm, vif, ctx, false);
8ca151b5
JB		 3375 mutex_unlock(&mvm->mutex);
3376}
3377
50cc9574
LC		 3378static int
3379iwl_mvm_switch_vif_chanctx_swap(struct iwl_mvm *mvm,
3380 struct ieee80211_vif_chanctx_switch *vifs)
b08c1d97 3381{
b08c1d97
LC		 3382 int ret;
3383
b08c1d97 3384 mutex_lock(&mvm->mutex);
f0c97783 3385 __iwl_mvm_unassign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, true);
b08c1d97
LC		 3386 __iwl_mvm_remove_chanctx(mvm, vifs[0].old_ctx);
3387
3388 ret = __iwl_mvm_add_chanctx(mvm, vifs[0].new_ctx);
3389 if (ret) {
3390 IWL_ERR(mvm, "failed to add new_ctx during channel switch\n");
3391 goto out_reassign;
3392 }
3393
f0c97783
LC		 3394 ret = __iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].new_ctx,
3395 true);
b08c1d97
LC		 3396 if (ret) {
3397 IWL_ERR(mvm,
3398 "failed to assign new_ctx during channel switch\n");
3399 goto out_remove;
3400 }
3401
f697267f
AN		 3402 /* we don't support TDLS during DCM - can be caused by channel switch */
3403 if (iwl_mvm_phy_ctx_count(mvm) > 1)
3404 iwl_mvm_teardown_tdls_peers(mvm);
3405
b08c1d97
LC		 3406 goto out;
3407
3408out_remove:
3409 __iwl_mvm_remove_chanctx(mvm, vifs[0].new_ctx);
3410
3411out_reassign:
6fd1fb63 3412 if (__iwl_mvm_add_chanctx(mvm, vifs[0].old_ctx)) {
b08c1d97
LC		 3413 IWL_ERR(mvm, "failed to add old_ctx back after failure.\n");
3414 goto out_restart;
3415 }
3416
6fd1fb63
LC		 3417 if (__iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx,
3418 true)) {
b08c1d97
LC		 3419 IWL_ERR(mvm, "failed to reassign old_ctx after failure.\n");
3420 goto out_restart;
3421 }
3422
3423 goto out;
3424
3425out_restart:
3426 /* things keep failing, better restart the hw */
3427 iwl_mvm_nic_restart(mvm, false);
3428
3429out:
3430 mutex_unlock(&mvm->mutex);
50cc9574
LC		 3431
3432 return ret;
3433}
3434
48a256e8
LC		 3435static int
3436iwl_mvm_switch_vif_chanctx_reassign(struct iwl_mvm *mvm,
3437 struct ieee80211_vif_chanctx_switch *vifs)
3438{
3439 int ret;
3440
3441 mutex_lock(&mvm->mutex);
3442 __iwl_mvm_unassign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, true);
3443
3444 ret = __iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].new_ctx,
3445 true);
3446 if (ret) {
3447 IWL_ERR(mvm,
3448 "failed to assign new_ctx during channel switch\n");
3449 goto out_reassign;
3450 }
3451
3452 goto out;
3453
3454out_reassign:
3455 if (__iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx,
3456 true)) {
3457 IWL_ERR(mvm, "failed to reassign old_ctx after failure.\n");
3458 goto out_restart;
3459 }
3460
3461 goto out;
3462
3463out_restart:
3464 /* things keep failing, better restart the hw */
3465 iwl_mvm_nic_restart(mvm, false);
3466
3467out:
3468 mutex_unlock(&mvm->mutex);
3469
3470 return ret;
3471}
3472
50cc9574
LC		 3473static int iwl_mvm_switch_vif_chanctx(struct ieee80211_hw *hw,
3474 struct ieee80211_vif_chanctx_switch *vifs,
3475 int n_vifs,
3476 enum ieee80211_chanctx_switch_mode mode)
3477{
3478 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3479 int ret;
3480
3481 /* we only support a single-vif right now */
3482 if (n_vifs > 1)
3483 return -EOPNOTSUPP;
3484
3485 switch (mode) {
3486 case CHANCTX_SWMODE_SWAP_CONTEXTS:
3487 ret = iwl_mvm_switch_vif_chanctx_swap(mvm, vifs);
3488 break;
3489 case CHANCTX_SWMODE_REASSIGN_VIF:
48a256e8 3490 ret = iwl_mvm_switch_vif_chanctx_reassign(mvm, vifs);
50cc9574
LC		 3491 break;
3492 default:
3493 ret = -EOPNOTSUPP;
3494 break;
3495 }
3496
b08c1d97
LC		 3497 return ret;
3498}
3499
8ca151b5
JB		 3500static int iwl_mvm_set_tim(struct ieee80211_hw *hw,
3501 struct ieee80211_sta *sta,
3502 bool set)
3503{
3504 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
9d8ce6af 3505 struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta);
8ca151b5
JB		 3506
3507 if (!mvm_sta || !mvm_sta->vif) {
3508 IWL_ERR(mvm, "Station is not associated to a vif\n");
3509 return -EINVAL;
3510 }
3511
3512 return iwl_mvm_mac_ctxt_beacon_changed(mvm, mvm_sta->vif);
3513}
3514
507cadf2
DS		 3515#ifdef CONFIG_NL80211_TESTMODE
3516static const struct nla_policy iwl_mvm_tm_policy[IWL_MVM_TM_ATTR_MAX + 1] = {
3517 [IWL_MVM_TM_ATTR_CMD] = { .type = NLA_U32 },
3518 [IWL_MVM_TM_ATTR_NOA_DURATION] = { .type = NLA_U32 },
f6c6ad42 3519 [IWL_MVM_TM_ATTR_BEACON_FILTER_STATE] = { .type = NLA_U32 },
507cadf2
DS		 3520};
3521
3522static int __iwl_mvm_mac_testmode_cmd(struct iwl_mvm *mvm,
3523 struct ieee80211_vif *vif,
3524 void *data, int len)
3525{
3526 struct nlattr *tb[IWL_MVM_TM_ATTR_MAX + 1];
3527 int err;
3528 u32 noa_duration;
3529
3530 err = nla_parse(tb, IWL_MVM_TM_ATTR_MAX, data, len, iwl_mvm_tm_policy);
3531 if (err)
3532 return err;
3533
3534 if (!tb[IWL_MVM_TM_ATTR_CMD])
3535 return -EINVAL;
3536
3537 switch (nla_get_u32(tb[IWL_MVM_TM_ATTR_CMD])) {
3538 case IWL_MVM_TM_CMD_SET_NOA:
3539 if (!vif || vif->type != NL80211_IFTYPE_AP || !vif->p2p ||
3540 !vif->bss_conf.enable_beacon ||
3541 !tb[IWL_MVM_TM_ATTR_NOA_DURATION])
3542 return -EINVAL;
3543
3544 noa_duration = nla_get_u32(tb[IWL_MVM_TM_ATTR_NOA_DURATION]);
3545 if (noa_duration >= vif->bss_conf.beacon_int)
3546 return -EINVAL;
3547
3548 mvm->noa_duration = noa_duration;
3549 mvm->noa_vif = vif;
3550
7754ae79 3551 return iwl_mvm_update_quotas(mvm, false, NULL);
f6c6ad42
JB		 3552 case IWL_MVM_TM_CMD_SET_BEACON_FILTER:
3553 /* must be associated client vif - ignore authorized */
3554 if (!vif || vif->type != NL80211_IFTYPE_STATION ||
3555 !vif->bss_conf.assoc || !vif->bss_conf.dtim_period ||
3556 !tb[IWL_MVM_TM_ATTR_BEACON_FILTER_STATE])
3557 return -EINVAL;
3558
3559 if (nla_get_u32(tb[IWL_MVM_TM_ATTR_BEACON_FILTER_STATE]))
a1022927
EG		 3560 return iwl_mvm_enable_beacon_filter(mvm, vif, 0);
3561 return iwl_mvm_disable_beacon_filter(mvm, vif, 0);
507cadf2
DS		 3562 }
3563
3564 return -EOPNOTSUPP;
3565}
3566
3567static int iwl_mvm_mac_testmode_cmd(struct ieee80211_hw *hw,
3568 struct ieee80211_vif *vif,
3569 void *data, int len)
3570{
3571 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3572 int err;
3573
3574 mutex_lock(&mvm->mutex);
3575 err = __iwl_mvm_mac_testmode_cmd(mvm, vif, data, len);
3576 mutex_unlock(&mvm->mutex);
3577
3578 return err;
3579}
3580#endif
3581
622e3f9b
LC		 3582static void iwl_mvm_channel_switch(struct ieee80211_hw *hw,
3583 struct ieee80211_vif *vif,
3584 struct ieee80211_channel_switch *chsw)
3585{
3586 /* By implementing this operation, we prevent mac80211 from
3587 * starting its own channel switch timer, so that we can call
3588 * ieee80211_chswitch_done() ourselves at the right time
3589 * (which is when the absence time event starts).
3590 */
3591
3592 IWL_DEBUG_MAC80211(IWL_MAC80211_GET_MVM(hw),
3593 "dummy channel switch op\n");
3594}
3595
f028905c
LC		 3596static int iwl_mvm_pre_channel_switch(struct ieee80211_hw *hw,
3597 struct ieee80211_vif *vif,
3598 struct ieee80211_channel_switch *chsw)
bd3398e2
AO		 3599{
3600 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
664322fa 3601 struct ieee80211_vif *csa_vif;
f6c34820 3602 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
dc88b4ba 3603 u32 apply_time;
f028905c 3604 int ret;
bd3398e2
AO		 3605
3606 mutex_lock(&mvm->mutex);
664322fa 3607
81d62d5a
JB		 3608 mvmvif->csa_failed = false;
3609
6b20d774 3610 IWL_DEBUG_MAC80211(mvm, "pre CSA to freq %d\n",
f028905c 3611 chsw->chandef.center_freq1);
6b20d774 3612
21023b1e 3613 iwl_fw_dbg_trigger_simple_stop(mvm, vif, FW_DBG_TRIGGER_CHANNEL_SWITCH);
f35d9c55 3614
6b20d774
LC		 3615 switch (vif->type) {
3616 case NL80211_IFTYPE_AP:
3617 csa_vif =
3618 rcu_dereference_protected(mvm->csa_vif,
3619 lockdep_is_held(&mvm->mutex));
3620 if (WARN_ONCE(csa_vif && csa_vif->csa_active,
3621 "Another CSA is already in progress")) {
3622 ret = -EBUSY;
3623 goto out_unlock;
3624 }
3625
3626 rcu_assign_pointer(mvm->csa_vif, vif);
7ef0aab6 3627
7ef0aab6
AO		 3628 if (WARN_ONCE(mvmvif->csa_countdown,
3629 "Previous CSA countdown didn't complete")) {
3630 ret = -EBUSY;
3631 goto out_unlock;
3632 }
3633
6b20d774 3634 break;
dc88b4ba 3635 case NL80211_IFTYPE_STATION:
03098268
AE		 3636 if (mvmvif->lqm_active)
3637 iwl_mvm_send_lqm_cmd(vif,
3638 LQM_CMD_OPERATION_STOP_MEASUREMENT,
3639 0, 0);
3640
4500e133
LC		 3641 /* Schedule the time event to a bit before beacon 1,
3642 * to make sure we're in the new channel when the
3643 * GO/AP arrives.
3644 */
3645 apply_time = chsw->device_timestamp +
3646 ((vif->bss_conf.beacon_int * (chsw->count - 1) -
3647 IWL_MVM_CHANNEL_SWITCH_TIME_CLIENT) * 1024);
dc88b4ba
LC		 3648
3649 if (chsw->block_tx)
3650 iwl_mvm_csa_client_absent(mvm, vif);
3651
4500e133 3652 iwl_mvm_schedule_csa_period(mvm, vif, vif->bss_conf.beacon_int,
dc88b4ba 3653 apply_time);
c6e0a3e0
LC		 3654 if (mvmvif->bf_data.bf_enabled) {
3655 ret = iwl_mvm_disable_beacon_filter(mvm, vif, 0);
3656 if (ret)
3657 goto out_unlock;
3658 }
3659
dc88b4ba 3660 break;
6b20d774
LC		 3661 default:
3662 break;
3663 }
bd3398e2 3664
f6c34820
LC		 3665 mvmvif->ps_disabled = true;
3666
3667 ret = iwl_mvm_power_update_ps(mvm);
3668 if (ret)
3669 goto out_unlock;
f028905c 3670
e198f5e7
AN		 3671 /* we won't be on this channel any longer */
3672 iwl_mvm_teardown_tdls_peers(mvm);
3673
bd3398e2
AO		 3674out_unlock:
3675 mutex_unlock(&mvm->mutex);
f028905c
LC		 3676
3677 return ret;
bd3398e2
AO		 3678}
3679
f6c34820
LC		 3680static int iwl_mvm_post_channel_switch(struct ieee80211_hw *hw,
3681 struct ieee80211_vif *vif)
3682{
3683 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3684 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3685 int ret;
3686
3687 mutex_lock(&mvm->mutex);
3688
81d62d5a
JB		 3689 if (mvmvif->csa_failed) {
3690 mvmvif->csa_failed = false;
3691 ret = -EIO;
3692 goto out_unlock;
3693 }
3694
a57c688d
LC		 3695 if (vif->type == NL80211_IFTYPE_STATION) {
3696 struct iwl_mvm_sta *mvmsta;
3697
3698 mvmsta = iwl_mvm_sta_from_staid_protected(mvm,
3699 mvmvif->ap_sta_id);
3700
3701 if (WARN_ON(!mvmsta)) {
3702 ret = -EIO;
3703 goto out_unlock;
3704 }
3705
3706 iwl_mvm_sta_modify_disable_tx(mvm, mvmsta, false);
3707
3708 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
c6e0a3e0
LC		 3709
3710 ret = iwl_mvm_enable_beacon_filter(mvm, vif, 0);
3711 if (ret)
3712 goto out_unlock;
686e7fe1
LC		 3713
3714 iwl_mvm_stop_session_protection(mvm, vif);
a57c688d
LC		 3715 }
3716
f6c34820
LC		 3717 mvmvif->ps_disabled = false;
3718
3719 ret = iwl_mvm_power_update_ps(mvm);
3720
a57c688d 3721out_unlock:
f6c34820
LC		 3722 mutex_unlock(&mvm->mutex);
3723
3724 return ret;
3725}
3726
c5b0e7c0
EG		 3727static void iwl_mvm_mac_flush(struct ieee80211_hw *hw,
3728 struct ieee80211_vif *vif, u32 queues, bool drop)
3729{
3730 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3731 struct iwl_mvm_vif *mvmvif;
3732 struct iwl_mvm_sta *mvmsta;
a0f6bf2a
AN		 3733 struct ieee80211_sta *sta;
3734 int i;
3735 u32 msk = 0;
c5b0e7c0
EG		 3736
3737 if (!vif || vif->type != NL80211_IFTYPE_STATION)
3738 return;
3739
3740 mutex_lock(&mvm->mutex);
3741 mvmvif = iwl_mvm_vif_from_mac80211(vif);
c5b0e7c0 3742
a0f6bf2a
AN		 3743 /* flush the AP-station and all TDLS peers */
3744 for (i = 0; i < IWL_MVM_STATION_COUNT; i++) {
3745 sta = rcu_dereference_protected(mvm->fw_id_to_mac_id[i],
3746 lockdep_is_held(&mvm->mutex));
3747 if (IS_ERR_OR_NULL(sta))
3748 continue;
3749
3750 mvmsta = iwl_mvm_sta_from_mac80211(sta);
3751 if (mvmsta->vif != vif)
3752 continue;
3753
3754 /* make sure only TDLS peers or the AP are flushed */
3755 WARN_ON(i != mvmvif->ap_sta_id && !sta->tdls);
3756
3757 msk |= mvmsta->tfd_queue_msk;
480acbce 3758 }
c5b0e7c0 3759
6d440b25 3760 if (drop) {
5888a40c 3761 if (iwl_mvm_flush_tx_path(mvm, msk, 0))
6d440b25
EG		 3762 IWL_ERR(mvm, "flush request fail\n");
3763 mutex_unlock(&mvm->mutex);
3764 } else {
3765 mutex_unlock(&mvm->mutex);
4e6c48e0 3766
6d440b25
EG		 3767 /* this can take a while, and we may need/want other operations
3768 * to succeed while doing this, so do it without the mutex held
3769 */
3770 iwl_trans_wait_tx_queue_empty(mvm->trans, msk);
3771 }
c5b0e7c0
EG		 3772}
3773
91a8bcde
JB		 3774static int iwl_mvm_mac_get_survey(struct ieee80211_hw *hw, int idx,
3775 struct survey_info *survey)
3776{
3777 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3778 int ret;
3779
3780 memset(survey, 0, sizeof(*survey));
3781
3782 /* only support global statistics right now */
3783 if (idx != 0)
3784 return -ENOENT;
3785
859d914c 3786 if (fw_has_capa(&mvm->fw->ucode_capa,
91a8bcde
JB		 3787 IWL_UCODE_TLV_CAPA_RADIO_BEACON_STATS))
3788 return -ENOENT;
3789
3790 mutex_lock(&mvm->mutex);
3791
3792 if (mvm->ucode_loaded) {
33cef925 3793 ret = iwl_mvm_request_statistics(mvm, false);
91a8bcde
JB		 3794 if (ret)
3795 goto out;
3796 }
3797
3798 survey->filled = SURVEY_INFO_TIME |
3799 SURVEY_INFO_TIME_RX |
3800 SURVEY_INFO_TIME_TX |
3801 SURVEY_INFO_TIME_SCAN;
3802 survey->time = mvm->accu_radio_stats.on_time_rf +
3803 mvm->radio_stats.on_time_rf;
3804 do_div(survey->time, USEC_PER_MSEC);
3805
3806 survey->time_rx = mvm->accu_radio_stats.rx_time +
3807 mvm->radio_stats.rx_time;
3808 do_div(survey->time_rx, USEC_PER_MSEC);
3809
3810 survey->time_tx = mvm->accu_radio_stats.tx_time +
3811 mvm->radio_stats.tx_time;
3812 do_div(survey->time_tx, USEC_PER_MSEC);
3813
3814 survey->time_scan = mvm->accu_radio_stats.on_time_scan +
3815 mvm->radio_stats.on_time_scan;
3816 do_div(survey->time_scan, USEC_PER_MSEC);
3817
10a7c028 3818 ret = 0;
91a8bcde
JB		 3819 out:
3820 mutex_unlock(&mvm->mutex);
3821 return ret;
3822}
3823
33cef925
JB		 3824static void iwl_mvm_mac_sta_statistics(struct ieee80211_hw *hw,
3825 struct ieee80211_vif *vif,
3826 struct ieee80211_sta *sta,
3827 struct station_info *sinfo)
3828{
3829 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3830 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3831 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
3832
859d914c
JB		 3833 if (fw_has_capa(&mvm->fw->ucode_capa,
3834 IWL_UCODE_TLV_CAPA_RADIO_BEACON_STATS))
33cef925
JB		 3835 return;
3836
3837 /* if beacon filtering isn't on mac80211 does it anyway */
3838 if (!(vif->driver_flags & IEEE80211_VIF_BEACON_FILTER))
3839 return;
3840
3841 if (!vif->bss_conf.assoc)
3842 return;
3843
3844 mutex_lock(&mvm->mutex);
3845
3846 if (mvmvif->ap_sta_id != mvmsta->sta_id)
3847 goto unlock;
3848
3849 if (iwl_mvm_request_statistics(mvm, false))
3850 goto unlock;
3851
3852 sinfo->rx_beacon = mvmvif->beacon_stats.num_beacons +
3853 mvmvif->beacon_stats.accu_num_beacons;
3854 sinfo->filled |= BIT(NL80211_STA_INFO_BEACON_RX);
3855 if (mvmvif->beacon_stats.avg_signal) {
3856 /* firmware only reports a value after RXing a few beacons */
3857 sinfo->rx_beacon_signal_avg = mvmvif->beacon_stats.avg_signal;
3858 sinfo->filled |= BIT(NL80211_STA_INFO_BEACON_SIGNAL_AVG);
3859 }
3860 unlock:
3861 mutex_unlock(&mvm->mutex);
3862}
3863
4203263d
EG		 3864static void iwl_mvm_event_mlme_callback(struct iwl_mvm *mvm,
3865 struct ieee80211_vif *vif,
3866 const struct ieee80211_event *event)
d42f5350 3867{
5d4f929e 3868#define CHECK_MLME_TRIGGER(_mvm, _trig, _buf, _cnt, _fmt...) \
d42f5350
EG		 3869 do { \
3870 if ((_cnt) && --(_cnt)) \
3871 break; \
5d4f929e 3872 iwl_mvm_fw_dbg_collect_trig(_mvm, _trig, _fmt);\
d42f5350
EG		 3873 } while (0)
3874
d42f5350
EG		 3875 struct iwl_fw_dbg_trigger_tlv *trig;
3876 struct iwl_fw_dbg_trigger_mlme *trig_mlme;
d42f5350
EG		 3877
3878 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_MLME))
3879 return;
3880
d42f5350
EG		 3881 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_MLME);
3882 trig_mlme = (void *)trig->data;
3883 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig))
3884 return;
3885
d42f5350
EG		 3886 if (event->u.mlme.data == ASSOC_EVENT) {
3887 if (event->u.mlme.status == MLME_DENIED)
3888 CHECK_MLME_TRIGGER(mvm, trig, buf,
3889 trig_mlme->stop_assoc_denied,
3890 "DENIED ASSOC: reason %d",
3891 event->u.mlme.reason);
3892 else if (event->u.mlme.status == MLME_TIMEOUT)
3893 CHECK_MLME_TRIGGER(mvm, trig, buf,
3894 trig_mlme->stop_assoc_timeout,
3895 "ASSOC TIMEOUT");
3896 } else if (event->u.mlme.data == AUTH_EVENT) {
3897 if (event->u.mlme.status == MLME_DENIED)
3898 CHECK_MLME_TRIGGER(mvm, trig, buf,
3899 trig_mlme->stop_auth_denied,
3900 "DENIED AUTH: reason %d",
3901 event->u.mlme.reason);
3902 else if (event->u.mlme.status == MLME_TIMEOUT)
3903 CHECK_MLME_TRIGGER(mvm, trig, buf,
3904 trig_mlme->stop_auth_timeout,
3905 "AUTH TIMEOUT");
3906 } else if (event->u.mlme.data == DEAUTH_RX_EVENT) {
3907 CHECK_MLME_TRIGGER(mvm, trig, buf,
3908 trig_mlme->stop_rx_deauth,
3909 "DEAUTH RX %d", event->u.mlme.reason);
3910 } else if (event->u.mlme.data == DEAUTH_TX_EVENT) {
3911 CHECK_MLME_TRIGGER(mvm, trig, buf,
3912 trig_mlme->stop_tx_deauth,
3913 "DEAUTH TX %d", event->u.mlme.reason);
3914 }
3915#undef CHECK_MLME_TRIGGER
3916}
3917
4203263d
EG		 3918static void iwl_mvm_event_bar_rx_callback(struct iwl_mvm *mvm,
3919 struct ieee80211_vif *vif,
3920 const struct ieee80211_event *event)
3921{
3922 struct iwl_fw_dbg_trigger_tlv *trig;
3923 struct iwl_fw_dbg_trigger_ba *ba_trig;
3924
3925 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_BA))
3926 return;
3927
3928 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_BA);
3929 ba_trig = (void *)trig->data;
3930 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig))
3931 return;
3932
3933 if (!(le16_to_cpu(ba_trig->rx_bar) & BIT(event->u.ba.tid)))
3934 return;
3935
3936 iwl_mvm_fw_dbg_collect_trig(mvm, trig,
3937 "BAR received from %pM, tid %d, ssn %d",
3938 event->u.ba.sta->addr, event->u.ba.tid,
3939 event->u.ba.ssn);
3940}
3941
3942static void
3943iwl_mvm_event_frame_timeout_callback(struct iwl_mvm *mvm,
3944 struct ieee80211_vif *vif,
3945 const struct ieee80211_event *event)
3946{
3947 struct iwl_fw_dbg_trigger_tlv *trig;
3948 struct iwl_fw_dbg_trigger_ba *ba_trig;
3949
3950 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_BA))
3951 return;
3952
3953 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_BA);
3954 ba_trig = (void *)trig->data;
3955 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig))
3956 return;
3957
3958 if (!(le16_to_cpu(ba_trig->frame_timeout) & BIT(event->u.ba.tid)))
3959 return;
3960
3961 iwl_mvm_fw_dbg_collect_trig(mvm, trig,
3962 "Frame from %pM timed out, tid %d",
3963 event->u.ba.sta->addr, event->u.ba.tid);
3964}
3965
3966static void iwl_mvm_mac_event_callback(struct ieee80211_hw *hw,
3967 struct ieee80211_vif *vif,
3968 const struct ieee80211_event *event)
3969{
3970 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3971
3972 switch (event->type) {
3973 case MLME_EVENT:
3974 iwl_mvm_event_mlme_callback(mvm, vif, event);
3975 break;
3976 case BAR_RX_EVENT:
3977 iwl_mvm_event_bar_rx_callback(mvm, vif, event);
3978 break;
3979 case BA_FRAME_TIMEOUT:
3980 iwl_mvm_event_frame_timeout_callback(mvm, vif, event);
3981 break;
3982 default:
3983 break;
3984 }
3985}
3986
e5209263 3987const struct ieee80211_ops iwl_mvm_hw_ops = {
8ca151b5
JB		 3988 .tx = iwl_mvm_mac_tx,
3989 .ampdu_action = iwl_mvm_mac_ampdu_action,
3990 .start = iwl_mvm_mac_start,
cf2c92d8 3991 .reconfig_complete = iwl_mvm_mac_reconfig_complete,
8ca151b5
JB		 3992 .stop = iwl_mvm_mac_stop,
3993 .add_interface = iwl_mvm_mac_add_interface,
3994 .remove_interface = iwl_mvm_mac_remove_interface,
3995 .config = iwl_mvm_mac_config,
e59647ea 3996 .prepare_multicast = iwl_mvm_prepare_multicast,
8ca151b5 3997 .configure_filter = iwl_mvm_configure_filter,
effd1929 3998 .config_iface_filter = iwl_mvm_config_iface_filter,
8ca151b5
JB		 3999 .bss_info_changed = iwl_mvm_bss_info_changed,
4000 .hw_scan = iwl_mvm_mac_hw_scan,
4001 .cancel_hw_scan = iwl_mvm_mac_cancel_hw_scan,
1ddbbb0c 4002 .sta_pre_rcu_remove = iwl_mvm_sta_pre_rcu_remove,
8ca151b5
JB		 4003 .sta_state = iwl_mvm_mac_sta_state,
4004 .sta_notify = iwl_mvm_mac_sta_notify,
4005 .allow_buffered_frames = iwl_mvm_mac_allow_buffered_frames,
3e56eadf 4006 .release_buffered_frames = iwl_mvm_mac_release_buffered_frames,
8ca151b5 4007 .set_rts_threshold = iwl_mvm_mac_set_rts_threshold,
1f3b0ff8 4008 .sta_rc_update = iwl_mvm_sta_rc_update,
8ca151b5
JB		 4009 .conf_tx = iwl_mvm_mac_conf_tx,
4010 .mgd_prepare_tx = iwl_mvm_mac_mgd_prepare_tx,
07ecd897 4011 .mgd_protect_tdls_discover = iwl_mvm_mac_mgd_protect_tdls_discover,
c5b0e7c0 4012 .flush = iwl_mvm_mac_flush,
35a000b7
DS		 4013 .sched_scan_start = iwl_mvm_mac_sched_scan_start,
4014 .sched_scan_stop = iwl_mvm_mac_sched_scan_stop,
8ca151b5
JB		 4015 .set_key = iwl_mvm_mac_set_key,
4016 .update_tkip_key = iwl_mvm_mac_update_tkip_key,
4017 .remain_on_channel = iwl_mvm_roc,
4018 .cancel_remain_on_channel = iwl_mvm_cancel_roc,
8ca151b5
JB		 4019 .add_chanctx = iwl_mvm_add_chanctx,
4020 .remove_chanctx = iwl_mvm_remove_chanctx,
4021 .change_chanctx = iwl_mvm_change_chanctx,
4022 .assign_vif_chanctx = iwl_mvm_assign_vif_chanctx,
4023 .unassign_vif_chanctx = iwl_mvm_unassign_vif_chanctx,
b08c1d97 4024 .switch_vif_chanctx = iwl_mvm_switch_vif_chanctx,
8ca151b5 4025
5023d966
JB		 4026 .start_ap = iwl_mvm_start_ap_ibss,
4027 .stop_ap = iwl_mvm_stop_ap_ibss,
4028 .join_ibss = iwl_mvm_start_ap_ibss,
4029 .leave_ibss = iwl_mvm_stop_ap_ibss,
8ca151b5
JB		 4030
4031 .set_tim = iwl_mvm_set_tim,
4032
622e3f9b 4033 .channel_switch = iwl_mvm_channel_switch,
f028905c 4034 .pre_channel_switch = iwl_mvm_pre_channel_switch,
f6c34820 4035 .post_channel_switch = iwl_mvm_post_channel_switch,
bd3398e2 4036
1d3c3f63
AN		 4037 .tdls_channel_switch = iwl_mvm_tdls_channel_switch,
4038 .tdls_cancel_channel_switch = iwl_mvm_tdls_cancel_channel_switch,
4039 .tdls_recv_channel_switch = iwl_mvm_tdls_recv_channel_switch,
4040
d42f5350
EG		 4041 .event_callback = iwl_mvm_mac_event_callback,
4042
507cadf2
DS		 4043 CFG80211_TESTMODE_CMD(iwl_mvm_mac_testmode_cmd)
4044
8ca151b5
JB		 4045#ifdef CONFIG_PM_SLEEP
4046 /* look at d3.c */
4047 .suspend = iwl_mvm_suspend,
4048 .resume = iwl_mvm_resume,
4049 .set_wakeup = iwl_mvm_set_wakeup,
4050 .set_rekey_data = iwl_mvm_set_rekey_data,
4051#if IS_ENABLED(CONFIG_IPV6)
4052 .ipv6_addr_change = iwl_mvm_ipv6_addr_change,
4053#endif
4054 .set_default_unicast_key = iwl_mvm_set_default_unicast_key,
4055#endif
91a8bcde 4056 .get_survey = iwl_mvm_mac_get_survey,
33cef925 4057 .sta_statistics = iwl_mvm_mac_sta_statistics,
8ca151b5 4058};
A mirror of Linus' kernel repository