]> git.ipfire.org Git - thirdparty/linux.git/blame - drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c
projects / thirdparty / linux.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
iwlwifi: Edit the 8265 SDIO ID
[thirdparty/linux.git] / drivers / net / wireless / intel / iwlwifi / mvm / mac80211.c
CommitLineData
8ca151b5
JB		 1/******************************************************************************
2 *
3 * This file is provided under a dual BSD/GPLv2 license. When using or
4 * redistributing this file, you may do so under either license.
5 *
6 * GPL LICENSE SUMMARY
7 *
51368bf7 8 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
8b4139dc 9 * Copyright(c) 2013 - 2014 Intel Mobile Communications GmbH
f92659a1 10 * Copyright(c) 2016 Intel Deutschland GmbH
8ca151b5
JB		 11 *
12 * This program is free software; you can redistribute it and/or modify
13 * it under the terms of version 2 of the GNU General Public License as
14 * published by the Free Software Foundation.
15 *
16 * This program is distributed in the hope that it will be useful, but
17 * WITHOUT ANY WARRANTY; without even the implied warranty of
18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
19 * General Public License for more details.
20 *
21 * You should have received a copy of the GNU General Public License
22 * along with this program; if not, write to the Free Software
23 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110,
24 * USA
25 *
26 * The full GNU General Public License is included in this distribution
410dc5aa 27 * in the file called COPYING.
8ca151b5
JB		 28 *
29 * Contact Information:
cb2f8277 30 * Intel Linux Wireless <linuxwifi@intel.com>
8ca151b5
JB		 31 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
32 *
33 * BSD LICENSE
34 *
51368bf7 35 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
8b4139dc 36 * Copyright(c) 2013 - 2014 Intel Mobile Communications GmbH
8ca151b5
JB		 37 * All rights reserved.
38 *
39 * Redistribution and use in source and binary forms, with or without
40 * modification, are permitted provided that the following conditions
41 * are met:
42 *
43 * * Redistributions of source code must retain the above copyright
44 * notice, this list of conditions and the following disclaimer.
45 * * Redistributions in binary form must reproduce the above copyright
46 * notice, this list of conditions and the following disclaimer in
47 * the documentation and/or other materials provided with the
48 * distribution.
49 * * Neither the name Intel Corporation nor the names of its
50 * contributors may be used to endorse or promote products derived
51 * from this software without specific prior written permission.
52 *
53 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
54 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
55 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
56 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
57 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
58 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
59 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
60 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
61 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
62 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
63 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
64 *
65 *****************************************************************************/
66#include <linux/kernel.h>
67#include <linux/slab.h>
68#include <linux/skbuff.h>
69#include <linux/netdevice.h>
70#include <linux/etherdevice.h>
f0c2646a 71#include <linux/ip.h>
2ee8f021 72#include <linux/if_arp.h>
2f89a5d7 73#include <linux/time.h>
8ca151b5 74#include <net/mac80211.h>
7b1dd048 75#include <net/ieee80211_radiotap.h>
f0c2646a 76#include <net/tcp.h>
8ca151b5
JB		 77
78#include "iwl-op-mode.h"
79#include "iwl-io.h"
80#include "mvm.h"
81#include "sta.h"
82#include "time-event.h"
83#include "iwl-eeprom-parse.h"
8ca151b5 84#include "iwl-phy-db.h"
507cadf2 85#include "testmode.h"
655e6d6d
EG		 86#include "iwl-fw-error-dump.h"
87#include "iwl-prph.h"
88931cc9 88#include "iwl-nvm-parse.h"
2f89a5d7 89#include "fw-dbg.h"
8ca151b5
JB		 90
91static const struct ieee80211_iface_limit iwl_mvm_limits[] = {
92 {
93 .max = 1,
8eb38710 94 .types = BIT(NL80211_IFTYPE_STATION),
8ca151b5 95 },
3c15a0fb
JB		 96 {
97 .max = 1,
8eb38710
IP		 98 .types = BIT(NL80211_IFTYPE_AP) |
99 BIT(NL80211_IFTYPE_P2P_CLIENT) |
3c15a0fb
JB		 100 BIT(NL80211_IFTYPE_P2P_GO),
101 },
102 {
103 .max = 1,
104 .types = BIT(NL80211_IFTYPE_P2P_DEVICE),
105 },
8ca151b5
JB		 106};
107
108static const struct ieee80211_iface_combination iwl_mvm_iface_combinations[] = {
109 {
2624a5ca 110 .num_different_channels = 2,
8ca151b5
JB		 111 .max_interfaces = 3,
112 .limits = iwl_mvm_limits,
113 .n_limits = ARRAY_SIZE(iwl_mvm_limits),
114 },
115};
116
f0c2646a
JB		 117#ifdef CONFIG_PM_SLEEP
118static const struct nl80211_wowlan_tcp_data_token_feature
119iwl_mvm_wowlan_tcp_token_feature = {
120 .min_len = 0,
121 .max_len = 255,
122 .bufsize = IWL_WOWLAN_REMOTE_WAKE_MAX_TOKENS,
123};
124
125static const struct wiphy_wowlan_tcp_support iwl_mvm_wowlan_tcp_support = {
126 .tok = &iwl_mvm_wowlan_tcp_token_feature,
127 .data_payload_max = IWL_WOWLAN_TCP_MAX_PACKET_LEN -
128 sizeof(struct ethhdr) -
129 sizeof(struct iphdr) -
130 sizeof(struct tcphdr),
131 .data_interval_max = 65535, /* __le16 in API */
132 .wake_payload_max = IWL_WOWLAN_REMOTE_WAKE_MAX_PACKET_LEN -
133 sizeof(struct ethhdr) -
134 sizeof(struct iphdr) -
135 sizeof(struct tcphdr),
136 .seq = true,
137};
138#endif
139
77736923 140#ifdef CONFIG_IWLWIFI_BCAST_FILTERING
2ee8f021
EP		 141/*
142 * Use the reserved field to indicate magic values.
143 * these values will only be used internally by the driver,
144 * and won't make it to the fw (reserved will be 0).
145 * BC_FILTER_MAGIC_IP - configure the val of this attribute to
146 * be the vif's ip address. in case there is not a single
147 * ip address (0, or more than 1), this attribute will
148 * be skipped.
149 * BC_FILTER_MAGIC_MAC - set the val of this attribute to
150 * the LSB bytes of the vif's mac address
151 */
152enum {
153 BC_FILTER_MAGIC_NONE = 0,
154 BC_FILTER_MAGIC_IP,
155 BC_FILTER_MAGIC_MAC,
156};
157
77736923
EP		 158static const struct iwl_fw_bcast_filter iwl_mvm_default_bcast_filters[] = {
159 {
160 /* arp */
161 .discard = 0,
162 .frame_type = BCAST_FILTER_FRAME_TYPE_ALL,
163 .attrs = {
164 {
165 /* frame type - arp, hw type - ethernet */
166 .offset_type =
167 BCAST_FILTER_OFFSET_PAYLOAD_START,
168 .offset = sizeof(rfc1042_header),
169 .val = cpu_to_be32(0x08060001),
170 .mask = cpu_to_be32(0xffffffff),
171 },
2ee8f021
EP		 172 {
173 /* arp dest ip */
174 .offset_type =
175 BCAST_FILTER_OFFSET_PAYLOAD_START,
176 .offset = sizeof(rfc1042_header) + 2 +
177 sizeof(struct arphdr) +
178 ETH_ALEN + sizeof(__be32) +
179 ETH_ALEN,
180 .mask = cpu_to_be32(0xffffffff),
181 /* mark it as special field */
182 .reserved1 = cpu_to_le16(BC_FILTER_MAGIC_IP),
183 },
184 },
185 },
186 {
187 /* dhcp offer bcast */
188 .discard = 0,
189 .frame_type = BCAST_FILTER_FRAME_TYPE_IPV4,
190 .attrs = {
191 {
192 /* udp dest port - 68 (bootp client)*/
193 .offset_type = BCAST_FILTER_OFFSET_IP_END,
194 .offset = offsetof(struct udphdr, dest),
195 .val = cpu_to_be32(0x00440000),
196 .mask = cpu_to_be32(0xffff0000),
197 },
198 {
199 /* dhcp - lsb bytes of client hw address */
200 .offset_type = BCAST_FILTER_OFFSET_IP_END,
201 .offset = 38,
202 .mask = cpu_to_be32(0xffffffff),
203 /* mark it as special field */
204 .reserved1 = cpu_to_le16(BC_FILTER_MAGIC_MAC),
205 },
77736923
EP		 206 },
207 },
208 /* last filter must be empty */
209 {},
210};
211#endif
212
7498cf4c
EP		 213void iwl_mvm_ref(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type)
214{
7bb426ea 215 if (!iwl_mvm_is_d0i3_supported(mvm))
7498cf4c
EP		 216 return;
217
218 IWL_DEBUG_RPM(mvm, "Take mvm reference - type %d\n", ref_type);
576eeee9
EP		 219 spin_lock_bh(&mvm->refs_lock);
220 mvm->refs[ref_type]++;
221 spin_unlock_bh(&mvm->refs_lock);
7498cf4c
EP		 222 iwl_trans_ref(mvm->trans);
223}
224
225void iwl_mvm_unref(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type)
226{
7bb426ea 227 if (!iwl_mvm_is_d0i3_supported(mvm))
7498cf4c
EP		 228 return;
229
230 IWL_DEBUG_RPM(mvm, "Leave mvm reference - type %d\n", ref_type);
576eeee9
EP		 231 spin_lock_bh(&mvm->refs_lock);
232 WARN_ON(!mvm->refs[ref_type]--);
233 spin_unlock_bh(&mvm->refs_lock);
7498cf4c
EP		 234 iwl_trans_unref(mvm->trans);
235}
236
576eeee9
EP		 237static void iwl_mvm_unref_all_except(struct iwl_mvm *mvm,
238 enum iwl_mvm_ref_type except_ref)
7498cf4c 239{
576eeee9 240 int i, j;
7498cf4c 241
7bb426ea 242 if (!iwl_mvm_is_d0i3_supported(mvm))
7498cf4c
EP		 243 return;
244
576eeee9
EP		 245 spin_lock_bh(&mvm->refs_lock);
246 for (i = 0; i < IWL_MVM_REF_COUNT; i++) {
247 if (except_ref == i || !mvm->refs[i])
7498cf4c
EP		 248 continue;
249
576eeee9
EP		 250 IWL_DEBUG_RPM(mvm, "Cleanup: remove mvm ref type %d (%d)\n",
251 i, mvm->refs[i]);
252 for (j = 0; j < mvm->refs[i]; j++)
253 iwl_trans_unref(mvm->trans);
254 mvm->refs[i] = 0;
7498cf4c 255 }
576eeee9 256 spin_unlock_bh(&mvm->refs_lock);
7498cf4c
EP		 257}
258
f4cf8680
EP		 259bool iwl_mvm_ref_taken(struct iwl_mvm *mvm)
260{
261 int i;
262 bool taken = false;
263
264 if (!iwl_mvm_is_d0i3_supported(mvm))
265 return true;
266
267 spin_lock_bh(&mvm->refs_lock);
268 for (i = 0; i < IWL_MVM_REF_COUNT; i++) {
269 if (mvm->refs[i]) {
270 taken = true;
271 break;
272 }
273 }
274 spin_unlock_bh(&mvm->refs_lock);
275
276 return taken;
277}
278
576eeee9 279int iwl_mvm_ref_sync(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type)
d40fc489
GG		 280{
281 iwl_mvm_ref(mvm, ref_type);
282
283 if (!wait_event_timeout(mvm->d0i3_exit_waitq,
284 !test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status),
285 HZ)) {
286 WARN_ON_ONCE(1);
287 iwl_mvm_unref(mvm, ref_type);
288 return -EIO;
289 }
290
291 return 0;
292}
293
fe0f2de3
IP		 294static void iwl_mvm_reset_phy_ctxts(struct iwl_mvm *mvm)
295{
296 int i;
297
298 memset(mvm->phy_ctxts, 0, sizeof(mvm->phy_ctxts));
299 for (i = 0; i < NUM_PHY_CTX; i++) {
300 mvm->phy_ctxts[i].id = i;
301 mvm->phy_ctxts[i].ref = 0;
302 }
303}
304
88931cc9 305struct ieee80211_regdomain *iwl_mvm_get_regdomain(struct wiphy *wiphy,
8ba2d7a1 306 const char *alpha2,
47c8b154
JD		 307 enum iwl_mcc_source src_id,
308 bool *changed)
88931cc9
AN		 309{
310 struct ieee80211_regdomain *regd = NULL;
311 struct ieee80211_hw *hw = wiphy_to_ieee80211_hw(wiphy);
312 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
313 struct iwl_mcc_update_resp *resp;
314
315 IWL_DEBUG_LAR(mvm, "Getting regdomain data for %s from FW\n", alpha2);
316
8ba2d7a1 317 lockdep_assert_held(&mvm->mutex);
88931cc9 318
8ba2d7a1 319 resp = iwl_mvm_update_mcc(mvm, alpha2, src_id);
88931cc9
AN		 320 if (IS_ERR_OR_NULL(resp)) {
321 IWL_DEBUG_LAR(mvm, "Could not get update from FW %d\n",
b8c474d9 322 PTR_ERR_OR_ZERO(resp));
8ba2d7a1 323 goto out;
88931cc9
AN		 324 }
325
47c8b154
JD		 326 if (changed)
327 *changed = (resp->status == MCC_RESP_NEW_CHAN_PROFILE);
328
162ee3c9 329 regd = iwl_parse_nvm_mcc_info(mvm->trans->dev, mvm->cfg,
88931cc9
AN		 330 __le32_to_cpu(resp->n_channels),
331 resp->channels,
332 __le16_to_cpu(resp->mcc));
8ba2d7a1
EH		 333 /* Store the return source id */
334 src_id = resp->source_id;
88931cc9
AN		 335 kfree(resp);
336 if (IS_ERR_OR_NULL(regd)) {
337 IWL_DEBUG_LAR(mvm, "Could not get parse update from FW %d\n",
b8c474d9 338 PTR_ERR_OR_ZERO(regd));
8ba2d7a1 339 goto out;
88931cc9
AN		 340 }
341
8ba2d7a1
EH		 342 IWL_DEBUG_LAR(mvm, "setting alpha2 from FW to %s (0x%x, 0x%x) src=%d\n",
343 regd->alpha2, regd->alpha2[0], regd->alpha2[1], src_id);
88931cc9 344 mvm->lar_regdom_set = true;
8ba2d7a1 345 mvm->mcc_src = src_id;
88931cc9 346
8ba2d7a1 347out:
88931cc9
AN		 348 return regd;
349}
350
47c8b154
JD		 351void iwl_mvm_update_changed_regdom(struct iwl_mvm *mvm)
352{
353 bool changed;
354 struct ieee80211_regdomain *regd;
355
356 if (!iwl_mvm_is_lar_supported(mvm))
357 return;
358
359 regd = iwl_mvm_get_current_regdomain(mvm, &changed);
360 if (!IS_ERR_OR_NULL(regd)) {
361 /* only update the regulatory core if changed */
362 if (changed)
363 regulatory_set_wiphy_regd(mvm->hw->wiphy, regd);
364
365 kfree(regd);
366 }
367}
368
369struct ieee80211_regdomain *iwl_mvm_get_current_regdomain(struct iwl_mvm *mvm,
370 bool *changed)
8ba2d7a1
EH		 371{
372 return iwl_mvm_get_regdomain(mvm->hw->wiphy, "ZZ",
373 iwl_mvm_is_wifi_mcc_supported(mvm) ?
374 MCC_SOURCE_GET_CURRENT :
47c8b154 375 MCC_SOURCE_OLD_FW, changed);
8ba2d7a1
EH		 376}
377
378int iwl_mvm_init_fw_regd(struct iwl_mvm *mvm)
379{
380 enum iwl_mcc_source used_src;
381 struct ieee80211_regdomain *regd;
b6e160ab
AN		 382 int ret;
383 bool changed;
8ba2d7a1
EH		 384 const struct ieee80211_regdomain *r =
385 rtnl_dereference(mvm->hw->wiphy->regd);
386
387 if (!r)
b6e160ab 388 return -ENOENT;
8ba2d7a1
EH		 389
390 /* save the last source in case we overwrite it below */
391 used_src = mvm->mcc_src;
392 if (iwl_mvm_is_wifi_mcc_supported(mvm)) {
393 /* Notify the firmware we support wifi location updates */
47c8b154 394 regd = iwl_mvm_get_current_regdomain(mvm, NULL);
8ba2d7a1
EH		 395 if (!IS_ERR_OR_NULL(regd))
396 kfree(regd);
397 }
398
399 /* Now set our last stored MCC and source */
b6e160ab
AN		 400 regd = iwl_mvm_get_regdomain(mvm->hw->wiphy, r->alpha2, used_src,
401 &changed);
8ba2d7a1
EH		 402 if (IS_ERR_OR_NULL(regd))
403 return -EIO;
404
b6e160ab
AN		 405 /* update cfg80211 if the regdomain was changed */
406 if (changed)
407 ret = regulatory_set_wiphy_regd_sync_rtnl(mvm->hw->wiphy, regd);
408 else
409 ret = 0;
8ba2d7a1 410
b6e160ab
AN		 411 kfree(regd);
412 return ret;
8ba2d7a1
EH		 413}
414
8ca151b5
JB		 415int iwl_mvm_mac_setup_register(struct iwl_mvm *mvm)
416{
417 struct ieee80211_hw *hw = mvm->hw;
831e85f3 418 int num_mac, ret, i;
5f4c02e2
JB		 419 static const u32 mvm_ciphers[] = {
420 WLAN_CIPHER_SUITE_WEP40,
421 WLAN_CIPHER_SUITE_WEP104,
422 WLAN_CIPHER_SUITE_TKIP,
423 WLAN_CIPHER_SUITE_CCMP,
424 };
8ca151b5
JB		 425
426 /* Tell mac80211 our characteristics */
30686bf7
JB		 427 ieee80211_hw_set(hw, SIGNAL_DBM);
428 ieee80211_hw_set(hw, SPECTRUM_MGMT);
429 ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS);
430 ieee80211_hw_set(hw, QUEUE_CONTROL);
431 ieee80211_hw_set(hw, WANT_MONITOR_VIF);
432 ieee80211_hw_set(hw, SUPPORTS_PS);
433 ieee80211_hw_set(hw, SUPPORTS_DYNAMIC_PS);
434 ieee80211_hw_set(hw, AMPDU_AGGREGATION);
435 ieee80211_hw_set(hw, TIMING_BEACON_ONLY);
436 ieee80211_hw_set(hw, CONNECTION_MONITOR);
437 ieee80211_hw_set(hw, CHANCTX_STA_CSA);
438 ieee80211_hw_set(hw, SUPPORT_FAST_XMIT);
439 ieee80211_hw_set(hw, SUPPORTS_CLONED_SKBS);
909ddf0b 440 ieee80211_hw_set(hw, SUPPORTS_AMSDU_IN_AMPDU);
30433d3b 441 ieee80211_hw_set(hw, NEEDS_UNIQUE_STA_ADDR);
8ca151b5 442
2d7cf549
JB		 443 if (mvm->trans->max_skb_frags)
444 hw->netdev_features = NETIF_F_HIGHDMA | NETIF_F_SG;
445
19e737c9 446 hw->queues = mvm->first_agg_queue;
398e8c6c 447 hw->offchannel_tx_hw_queue = IWL_MVM_OFFCHANNEL_QUEUE;
7b1dd048
EG		 448 hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FEC |
449 IEEE80211_RADIOTAP_MCS_HAVE_STBC;
339b3086
ES		 450 hw->radiotap_vht_details |= IEEE80211_RADIOTAP_VHT_KNOWN_STBC |
451 IEEE80211_RADIOTAP_VHT_KNOWN_BEAMFORMED;
8ca151b5 452 hw->rate_control_algorithm = "iwl-mvm-rs";
848955cc
JB		 453 hw->uapsd_queues = IWL_MVM_UAPSD_QUEUES;
454 hw->uapsd_max_sp_len = IWL_UAPSD_MAX_SP;
8ca151b5 455
5f4c02e2
JB		 456 BUILD_BUG_ON(ARRAY_SIZE(mvm->ciphers) < ARRAY_SIZE(mvm_ciphers) + 2);
457 memcpy(mvm->ciphers, mvm_ciphers, sizeof(mvm_ciphers));
458 hw->wiphy->n_cipher_suites = ARRAY_SIZE(mvm_ciphers);
459 hw->wiphy->cipher_suites = mvm->ciphers;
460
8ca151b5
JB		 461 /*
462 * Enable 11w if advertised by firmware and software crypto
463 * is not enabled (as the firmware will interpret some mgmt
464 * packets, so enabling it with software crypto isn't safe)
465 */
466 if (mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_MFP &&
5f4c02e2 467 !iwlwifi_mod_params.sw_crypto) {
30686bf7 468 ieee80211_hw_set(hw, MFP_CAPABLE);
5f4c02e2
JB		 469 mvm->ciphers[hw->wiphy->n_cipher_suites] =
470 WLAN_CIPHER_SUITE_AES_CMAC;
471 hw->wiphy->n_cipher_suites++;
472 }
473
474 /* currently FW API supports only one optional cipher scheme */
475 if (mvm->fw->cs[0].cipher) {
476 mvm->hw->n_cipher_schemes = 1;
477 mvm->hw->cipher_schemes = &mvm->fw->cs[0];
478 mvm->ciphers[hw->wiphy->n_cipher_suites] =
479 mvm->fw->cs[0].cipher;
480 hw->wiphy->n_cipher_suites++;
481 }
8ca151b5 482
30686bf7 483 ieee80211_hw_set(hw, SINGLE_SCAN_ON_ALL_BANDS);
1f940386
LC		 484 hw->wiphy->features |=
485 NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR |
3db93420
JB		 486 NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR |
487 NL80211_FEATURE_ND_RANDOM_MAC_ADDR;
fb98be5e 488
8ca151b5
JB		 489 hw->sta_data_size = sizeof(struct iwl_mvm_sta);
490 hw->vif_data_size = sizeof(struct iwl_mvm_vif);
fe0f2de3 491 hw->chanctx_data_size = sizeof(u16);
8ca151b5
JB		 492
493 hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
3c15a0fb
JB		 494 BIT(NL80211_IFTYPE_P2P_CLIENT) |
495 BIT(NL80211_IFTYPE_AP) |
496 BIT(NL80211_IFTYPE_P2P_GO) |
c13b1725
EG		 497 BIT(NL80211_IFTYPE_P2P_DEVICE) |
498 BIT(NL80211_IFTYPE_ADHOC);
5023d966 499
a2f73b6c 500 hw->wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
8ba2d7a1
EH		 501 hw->wiphy->regulatory_flags |= REGULATORY_ENABLE_RELAX_NO_IR;
502 if (iwl_mvm_is_lar_supported(mvm))
503 hw->wiphy->regulatory_flags |= REGULATORY_WIPHY_SELF_MANAGED;
504 else
505 hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG |
506 REGULATORY_DISABLE_BEACON_HINTS;
8ca151b5 507
3e56eadf
JB		 508 if (mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_GO_UAPSD)
509 hw->wiphy->flags |= WIPHY_FLAG_AP_UAPSD;
510
94bbed72 511 hw->wiphy->flags |= WIPHY_FLAG_HAS_CHANNEL_SWITCH;
bd3398e2 512
8ca151b5
JB		 513 hw->wiphy->iface_combinations = iwl_mvm_iface_combinations;
514 hw->wiphy->n_iface_combinations =
515 ARRAY_SIZE(iwl_mvm_iface_combinations);
516
c451e6d4 517 hw->wiphy->max_remain_on_channel_duration = 10000;
8ca151b5 518 hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
f1a68542
EG		 519 /* we can compensate an offset of up to 3 channels = 15 MHz */
520 hw->wiphy->max_adj_channel_rssi_comp = 3 * 5;
8ca151b5
JB		 521
522 /* Extract MAC address */
523 memcpy(mvm->addresses[0].addr, mvm->nvm_data->hw_addr, ETH_ALEN);
524 hw->wiphy->addresses = mvm->addresses;
525 hw->wiphy->n_addresses = 1;
831e85f3
IP		 526
527 /* Extract additional MAC addresses if available */
528 num_mac = (mvm->nvm_data->n_hw_addrs > 1) ?
529 min(IWL_MVM_MAX_ADDRESSES, mvm->nvm_data->n_hw_addrs) : 1;
530
531 for (i = 1; i < num_mac; i++) {
532 memcpy(mvm->addresses[i].addr, mvm->addresses[i-1].addr,
8ca151b5 533 ETH_ALEN);
831e85f3 534 mvm->addresses[i].addr[5]++;
8ca151b5
JB		 535 hw->wiphy->n_addresses++;
536 }
537
fe0f2de3
IP		 538 iwl_mvm_reset_phy_ctxts(mvm);
539
999d2568 540 hw->wiphy->max_scan_ie_len = iwl_mvm_max_scan_ie_len(mvm);
20f1a5de 541
8ca151b5
JB		 542 hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
543
c7d42480 544 BUILD_BUG_ON(IWL_MVM_SCAN_STOPPING_MASK & IWL_MVM_SCAN_MASK);
507e4cda
LC		 545 BUILD_BUG_ON(IWL_MVM_MAX_UMAC_SCANS > HWEIGHT32(IWL_MVM_SCAN_MASK) ||
546 IWL_MVM_MAX_LMAC_SCANS > HWEIGHT32(IWL_MVM_SCAN_MASK));
547
859d914c 548 if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_UMAC_SCAN))
507e4cda
LC		 549 mvm->max_scans = IWL_MVM_MAX_UMAC_SCANS;
550 else
551 mvm->max_scans = IWL_MVM_MAX_LMAC_SCANS;
552
57fbcce3
JB		 553 if (mvm->nvm_data->bands[NL80211_BAND_2GHZ].n_channels)
554 hw->wiphy->bands[NL80211_BAND_2GHZ] =
555 &mvm->nvm_data->bands[NL80211_BAND_2GHZ];
556 if (mvm->nvm_data->bands[NL80211_BAND_5GHZ].n_channels) {
557 hw->wiphy->bands[NL80211_BAND_5GHZ] =
558 &mvm->nvm_data->bands[NL80211_BAND_5GHZ];
8ca151b5 559
859d914c
JB		 560 if (fw_has_capa(&mvm->fw->ucode_capa,
561 IWL_UCODE_TLV_CAPA_BEAMFORMER) &&
562 fw_has_api(&mvm->fw->ucode_capa,
563 IWL_UCODE_TLV_API_LQ_SS_PARAMS))
57fbcce3 564 hw->wiphy->bands[NL80211_BAND_5GHZ]->vht_cap.cap |=
3d44eebf
ES		 565 IEEE80211_VHT_CAP_SU_BEAMFORMER_CAPABLE;
566 }
567
8ca151b5
JB		 568 hw->wiphy->hw_version = mvm->trans->hw_id;
569
ade50652 570 if (iwlmvm_mod_params.power_scheme != IWL_POWER_SCHEME_CAM)
8ca151b5
JB		 571 hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
572 else
573 hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
574
9954b37c
EG		 575 hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_SCHED_SCAN;
576 hw->wiphy->max_sched_scan_ssids = PROBE_OPTION_MAX;
577 hw->wiphy->max_match_sets = IWL_SCAN_MAX_PROFILES;
578 /* we create the 802.11 header and zero length SSID IE. */
579 hw->wiphy->max_sched_scan_ie_len =
580 SCAN_OFFLOAD_PROBE_REQ_SIZE - 24 - 2;
cd55ccea
AS		 581 hw->wiphy->max_sched_scan_plans = IWL_MAX_SCHED_SCAN_PLANS;
582 hw->wiphy->max_sched_scan_plan_interval = U16_MAX;
583
584 /*
585 * the firmware uses u8 for num of iterations, but 0xff is saved for
586 * infinite loop, so the maximum number of iterations is actually 254.
587 */
588 hw->wiphy->max_sched_scan_plan_iterations = 254;
35a000b7 589
8ca151b5 590 hw->wiphy->features |= NL80211_FEATURE_P2P_GO_CTWIN |
ab480030 591 NL80211_FEATURE_LOW_PRIORITY_SCAN |
0d8614b4
EP		 592 NL80211_FEATURE_P2P_GO_OPPPS |
593 NL80211_FEATURE_DYNAMIC_SMPS |
9b5452fd
EG		 594 NL80211_FEATURE_STATIC_SMPS |
595 NL80211_FEATURE_SUPPORTS_WMM_ADMISSION;
8ca151b5 596
859d914c
JB		 597 if (fw_has_capa(&mvm->fw->ucode_capa,
598 IWL_UCODE_TLV_CAPA_TXPOWER_INSERTION_SUPPORT))
f1daa00e 599 hw->wiphy->features |= NL80211_FEATURE_TX_POWER_INSERTION;
859d914c
JB		 600 if (fw_has_capa(&mvm->fw->ucode_capa,
601 IWL_UCODE_TLV_CAPA_QUIET_PERIOD_SUPPORT))
226bcd48 602 hw->wiphy->features |= NL80211_FEATURE_QUIET;
f1daa00e 603
859d914c
JB		 604 if (fw_has_capa(&mvm->fw->ucode_capa,
605 IWL_UCODE_TLV_CAPA_DS_PARAM_SET_IE_SUPPORT))
73897bd1
AO		 606 hw->wiphy->features |=
607 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES;
608
859d914c
JB		 609 if (fw_has_capa(&mvm->fw->ucode_capa,
610 IWL_UCODE_TLV_CAPA_WFA_TPC_REP_IE_SUPPORT))
73897bd1
AO		 611 hw->wiphy->features |= NL80211_FEATURE_WFA_TPC_IE_IN_PROBES;
612
8ca151b5
JB		 613 mvm->rts_threshold = IEEE80211_MAX_RTS_THRESHOLD;
614
615#ifdef CONFIG_PM_SLEEP
d15a747f
EP		 616 if (iwl_mvm_is_d0i3_supported(mvm) &&
617 device_can_wakeup(mvm->trans->dev)) {
618 mvm->wowlan.flags = WIPHY_WOWLAN_ANY;
619 hw->wiphy->wowlan = &mvm->wowlan;
91742449
EP		 620 }
621
622 if (mvm->fw->img[IWL_UCODE_WOWLAN].sec[0].len &&
8ca151b5
JB		 623 mvm->trans->ops->d3_suspend &&
624 mvm->trans->ops->d3_resume &&
625 device_can_wakeup(mvm->trans->dev)) {
91742449
EP		 626 mvm->wowlan.flags |= WIPHY_WOWLAN_MAGIC_PKT |
627 WIPHY_WOWLAN_DISCONNECT |
628 WIPHY_WOWLAN_EAP_IDENTITY_REQ |
629 WIPHY_WOWLAN_RFKILL_RELEASE |
630 WIPHY_WOWLAN_NET_DETECT;
8ca151b5 631 if (!iwlwifi_mod_params.sw_crypto)
964dc9e2
JB		 632 mvm->wowlan.flags |= WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
633 WIPHY_WOWLAN_GTK_REKEY_FAILURE |
634 WIPHY_WOWLAN_4WAY_HANDSHAKE;
635
636 mvm->wowlan.n_patterns = IWL_WOWLAN_MAX_PATTERNS;
637 mvm->wowlan.pattern_min_len = IWL_WOWLAN_MIN_PATTERN_LEN;
638 mvm->wowlan.pattern_max_len = IWL_WOWLAN_MAX_PATTERN_LEN;
c55385f5 639 mvm->wowlan.max_nd_match_sets = IWL_SCAN_MAX_PROFILES;
964dc9e2
JB		 640 mvm->wowlan.tcp = &iwl_mvm_wowlan_tcp_support;
641 hw->wiphy->wowlan = &mvm->wowlan;
8ca151b5
JB		 642 }
643#endif
644
77736923
EP		 645#ifdef CONFIG_IWLWIFI_BCAST_FILTERING
646 /* assign default bcast filtering configuration */
647 mvm->bcast_filters = iwl_mvm_default_bcast_filters;
648#endif
649
8ca151b5
JB		 650 ret = iwl_mvm_leds_init(mvm);
651 if (ret)
652 return ret;
653
859d914c
JB		 654 if (fw_has_capa(&mvm->fw->ucode_capa,
655 IWL_UCODE_TLV_CAPA_TDLS_SUPPORT)) {
d8f1c515
AN		 656 IWL_DEBUG_TDLS(mvm, "TDLS supported\n");
657 hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_TDLS;
7c4f0843 658 ieee80211_hw_set(hw, TDLS_WIDER_BW);
d8f1c515
AN		 659 }
660
859d914c
JB		 661 if (fw_has_capa(&mvm->fw->ucode_capa,
662 IWL_UCODE_TLV_CAPA_TDLS_CHANNEL_SWITCH)) {
1d3c3f63
AN		 663 IWL_DEBUG_TDLS(mvm, "TDLS channel switch supported\n");
664 hw->wiphy->features |= NL80211_FEATURE_TDLS_CHANNEL_SWITCH;
665 }
666
93190fb0 667 hw->netdev_features |= mvm->cfg->features;
5e6a98dc
SS		 668 if (!iwl_mvm_is_csum_supported(mvm)) {
669 hw->netdev_features &= ~(IWL_TX_CSUM_NETIF_FLAGS |
670 NETIF_F_RXCSUM);
671 /* We may support SW TX CSUM */
672 if (IWL_MVM_SW_TX_CSUM_OFFLOAD)
673 hw->netdev_features |= IWL_TX_CSUM_NETIF_FLAGS;
674 }
41837ca9 675
b7327d89
EG		 676 ret = ieee80211_register_hw(mvm->hw);
677 if (ret)
678 iwl_mvm_leds_exit(mvm);
679
680 return ret;
8ca151b5
JB		 681}
682
b2492501
AN		 683static bool iwl_mvm_defer_tx(struct iwl_mvm *mvm,
684 struct ieee80211_sta *sta,
685 struct sk_buff *skb)
686{
687 struct iwl_mvm_sta *mvmsta;
688 bool defer = false;
689
690 /*
691 * double check the IN_D0I3 flag both before and after
692 * taking the spinlock, in order to prevent taking
693 * the spinlock when not needed.
694 */
695 if (likely(!test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status)))
696 return false;
697
698 spin_lock(&mvm->d0i3_tx_lock);
699 /*
700 * testing the flag again ensures the skb dequeue
701 * loop (on d0i3 exit) hasn't run yet.
702 */
703 if (!test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status))
704 goto out;
705
706 mvmsta = iwl_mvm_sta_from_mac80211(sta);
707 if (mvmsta->sta_id == IWL_MVM_STATION_COUNT ||
708 mvmsta->sta_id != mvm->d0i3_ap_sta_id)
709 goto out;
710
711 __skb_queue_tail(&mvm->d0i3_tx, skb);
712 ieee80211_stop_queues(mvm->hw);
713
714 /* trigger wakeup */
715 iwl_mvm_ref(mvm, IWL_MVM_REF_TX);
716 iwl_mvm_unref(mvm, IWL_MVM_REF_TX);
717
718 defer = true;
719out:
720 spin_unlock(&mvm->d0i3_tx_lock);
721 return defer;
722}
723
8ca151b5
JB		 724static void iwl_mvm_mac_tx(struct ieee80211_hw *hw,
725 struct ieee80211_tx_control *control,
726 struct sk_buff *skb)
727{
728 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3e56eadf
JB		 729 struct ieee80211_sta *sta = control->sta;
730 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
731 struct ieee80211_hdr *hdr = (void *)skb->data;
8ca151b5 732
9ee718aa
EL		 733 if (iwl_mvm_is_radio_killed(mvm)) {
734 IWL_DEBUG_DROP(mvm, "Dropping - RF/CT KILL\n");
8ca151b5
JB		 735 goto drop;
736 }
737
398e8c6c 738 if (IEEE80211_SKB_CB(skb)->hw_queue == IWL_MVM_OFFCHANNEL_QUEUE &&
a6cc5163
MG		 739 !test_bit(IWL_MVM_STATUS_ROC_RUNNING, &mvm->status) &&
740 !test_bit(IWL_MVM_STATUS_ROC_AUX_RUNNING, &mvm->status))
8ca151b5
JB		 741 goto drop;
742
3e56eadf
JB		 743 /* treat non-bufferable MMPDUs as broadcast if sta is sleeping */
744 if (unlikely(info->flags & IEEE80211_TX_CTL_NO_PS_BUFFER &&
745 ieee80211_is_mgmt(hdr->frame_control) &&
746 !ieee80211_is_deauth(hdr->frame_control) &&
747 !ieee80211_is_disassoc(hdr->frame_control) &&
748 !ieee80211_is_action(hdr->frame_control)))
749 sta = NULL;
750
751 if (sta) {
b2492501
AN		 752 if (iwl_mvm_defer_tx(mvm, sta, skb))
753 return;
3e56eadf 754 if (iwl_mvm_tx_skb(mvm, skb, sta))
8ca151b5
JB		 755 goto drop;
756 return;
757 }
758
759 if (iwl_mvm_tx_skb_non_sta(mvm, skb))
760 goto drop;
761 return;
762 drop:
763 ieee80211_free_txskb(hw, skb);
764}
765
205e2210
EG		 766static inline bool iwl_enable_rx_ampdu(const struct iwl_cfg *cfg)
767{
768 if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_RXAGG)
769 return false;
770 return true;
771}
772
773static inline bool iwl_enable_tx_ampdu(const struct iwl_cfg *cfg)
774{
775 if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_TXAGG)
776 return false;
777 if (iwlwifi_mod_params.disable_11n & IWL_ENABLE_HT_TXAGG)
778 return true;
779
780 /* enabled by default */
781 return true;
782}
783
4203263d
EG		 784#define CHECK_BA_TRIGGER(_mvm, _trig, _tid_bm, _tid, _fmt...) \
785 do { \
786 if (!(le16_to_cpu(_tid_bm) & BIT(_tid))) \
787 break; \
788 iwl_mvm_fw_dbg_collect_trig(_mvm, _trig, _fmt); \
789 } while (0)
790
791static void
792iwl_mvm_ampdu_check_trigger(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
793 struct ieee80211_sta *sta, u16 tid, u16 rx_ba_ssn,
794 enum ieee80211_ampdu_mlme_action action)
795{
796 struct iwl_fw_dbg_trigger_tlv *trig;
797 struct iwl_fw_dbg_trigger_ba *ba_trig;
798
799 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_BA))
800 return;
801
802 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_BA);
803 ba_trig = (void *)trig->data;
804
805 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig))
806 return;
807
808 switch (action) {
809 case IEEE80211_AMPDU_TX_OPERATIONAL: {
810 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
811 struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid];
812
813 CHECK_BA_TRIGGER(mvm, trig, ba_trig->tx_ba_start, tid,
814 "TX AGG START: MAC %pM tid %d ssn %d\n",
815 sta->addr, tid, tid_data->ssn);
816 break;
817 }
818 case IEEE80211_AMPDU_TX_STOP_CONT:
819 CHECK_BA_TRIGGER(mvm, trig, ba_trig->tx_ba_stop, tid,
820 "TX AGG STOP: MAC %pM tid %d\n",
821 sta->addr, tid);
822 break;
823 case IEEE80211_AMPDU_RX_START:
824 CHECK_BA_TRIGGER(mvm, trig, ba_trig->rx_ba_start, tid,
825 "RX AGG START: MAC %pM tid %d ssn %d\n",
826 sta->addr, tid, rx_ba_ssn);
827 break;
828 case IEEE80211_AMPDU_RX_STOP:
829 CHECK_BA_TRIGGER(mvm, trig, ba_trig->rx_ba_stop, tid,
830 "RX AGG STOP: MAC %pM tid %d\n",
831 sta->addr, tid);
832 break;
833 default:
834 break;
835 }
836}
837
8ca151b5
JB		 838static int iwl_mvm_mac_ampdu_action(struct ieee80211_hw *hw,
839 struct ieee80211_vif *vif,
50ea05ef 840 struct ieee80211_ampdu_params *params)
8ca151b5
JB		 841{
842 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
843 int ret;
b2492501 844 bool tx_agg_ref = false;
50ea05ef
SS		 845 struct ieee80211_sta *sta = params->sta;
846 enum ieee80211_ampdu_mlme_action action = params->action;
847 u16 tid = params->tid;
848 u16 *ssn = &params->ssn;
849 u8 buf_size = params->buf_size;
bb81bb68 850 bool amsdu = params->amsdu;
8ca151b5
JB		 851
852 IWL_DEBUG_HT(mvm, "A-MPDU action on addr %pM tid %d: action %d\n",
853 sta->addr, tid, action);
854
855 if (!(mvm->nvm_data->sku_cap_11n_enable))
856 return -EACCES;
857
b2492501 858 /* return from D0i3 before starting a new Tx aggregation */
9256c205
EP		 859 switch (action) {
860 case IEEE80211_AMPDU_TX_START:
861 case IEEE80211_AMPDU_TX_STOP_CONT:
862 case IEEE80211_AMPDU_TX_STOP_FLUSH:
863 case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
864 case IEEE80211_AMPDU_TX_OPERATIONAL:
b2492501 865 /*
9256c205
EP		 866 * for tx start, wait synchronously until D0i3 exit to
867 * get the correct sequence number for the tid.
868 * additionally, some other ampdu actions use direct
869 * target access, which is not handled automatically
870 * by the trans layer (unlike commands), so wait for
871 * d0i3 exit in these cases as well.
b2492501 872 */
d40fc489
GG		 873 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_TX_AGG);
874 if (ret)
875 return ret;
876
877 tx_agg_ref = true;
9256c205
EP		 878 break;
879 default:
880 break;
b2492501
AN		 881 }
882
8ca151b5
JB		 883 mutex_lock(&mvm->mutex);
884
885 switch (action) {
886 case IEEE80211_AMPDU_RX_START:
205e2210 887 if (!iwl_enable_rx_ampdu(mvm->cfg)) {
8ca151b5
JB		 888 ret = -EINVAL;
889 break;
890 }
854c5705 891 ret = iwl_mvm_sta_rx_agg(mvm, sta, tid, *ssn, true, buf_size);
8ca151b5
JB		 892 break;
893 case IEEE80211_AMPDU_RX_STOP:
854c5705 894 ret = iwl_mvm_sta_rx_agg(mvm, sta, tid, 0, false, buf_size);
8ca151b5
JB		 895 break;
896 case IEEE80211_AMPDU_TX_START:
205e2210 897 if (!iwl_enable_tx_ampdu(mvm->cfg)) {
5d158efa
EG		 898 ret = -EINVAL;
899 break;
900 }
8ca151b5
JB		 901 ret = iwl_mvm_sta_tx_agg_start(mvm, vif, sta, tid, ssn);
902 break;
903 case IEEE80211_AMPDU_TX_STOP_CONT:
e3d9e7ce
EG		 904 ret = iwl_mvm_sta_tx_agg_stop(mvm, vif, sta, tid);
905 break;
8ca151b5
JB		 906 case IEEE80211_AMPDU_TX_STOP_FLUSH:
907 case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
e3d9e7ce 908 ret = iwl_mvm_sta_tx_agg_flush(mvm, vif, sta, tid);
8ca151b5
JB		 909 break;
910 case IEEE80211_AMPDU_TX_OPERATIONAL:
bb81bb68
EG		 911 ret = iwl_mvm_sta_tx_agg_oper(mvm, vif, sta, tid,
912 buf_size, amsdu);
8ca151b5
JB		 913 break;
914 default:
915 WARN_ON_ONCE(1);
916 ret = -EINVAL;
917 break;
918 }
4203263d
EG		 919
920 if (!ret) {
921 u16 rx_ba_ssn = 0;
922
923 if (action == IEEE80211_AMPDU_RX_START)
924 rx_ba_ssn = *ssn;
925
926 iwl_mvm_ampdu_check_trigger(mvm, vif, sta, tid,
927 rx_ba_ssn, action);
928 }
8ca151b5
JB		 929 mutex_unlock(&mvm->mutex);
930
b2492501
AN		 931 /*
932 * If the tid is marked as started, we won't use it for offloaded
933 * traffic on the next D0i3 entry. It's safe to unref.
934 */
935 if (tx_agg_ref)
936 iwl_mvm_unref(mvm, IWL_MVM_REF_TX_AGG);
937
8ca151b5
JB		 938 return ret;
939}
940
941static void iwl_mvm_cleanup_iterator(void *data, u8 *mac,
942 struct ieee80211_vif *vif)
943{
944 struct iwl_mvm *mvm = data;
945 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
946
947 mvmvif->uploaded = false;
948 mvmvif->ap_sta_id = IWL_MVM_STATION_COUNT;
949
8ca151b5
JB		 950 spin_lock_bh(&mvm->time_event_lock);
951 iwl_mvm_te_clear_data(mvm, &mvmvif->time_event_data);
952 spin_unlock_bh(&mvm->time_event_lock);
953
fe0f2de3 954 mvmvif->phy_ctxt = NULL;
8a275bad 955 memset(&mvmvif->bf_data, 0, sizeof(mvmvif->bf_data));
8ca151b5
JB		 956}
957
958static void iwl_mvm_restart_cleanup(struct iwl_mvm *mvm)
959{
58629d9d
JB		 960 /* clear the D3 reconfig, we only need it to avoid dumping a
961 * firmware coredump on reconfiguration, we shouldn't do that
962 * on D3->D0 transition
963 */
b6eaa45a
EG		 964 if (!test_and_clear_bit(IWL_MVM_STATUS_D3_RECONFIG, &mvm->status)) {
965 mvm->fw_dump_desc = &iwl_mvm_dump_desc_assert;
58629d9d 966 iwl_mvm_fw_error_dump(mvm);
b6eaa45a 967 }
1bd3cbc1 968
744cb695
EP		 969 /* cleanup all stale references (scan, roc), but keep the
970 * ucode_down ref until reconfig is complete
971 */
972 iwl_mvm_unref_all_except(mvm, IWL_MVM_REF_UCODE_DOWN);
973
fcb6b92a 974 iwl_mvm_stop_device(mvm);
8ca151b5 975
9af91f46 976 mvm->scan_status = 0;
b1873300 977 mvm->ps_disabled = false;
31b8b343 978 mvm->calibrating = false;
8ca151b5
JB		 979
980 /* just in case one was running */
305d236e 981 iwl_mvm_cleanup_roc_te(mvm);
8ca151b5
JB		 982 ieee80211_remain_on_channel_expired(mvm->hw);
983
737719fe
AN		 984 /*
985 * cleanup all interfaces, even inactive ones, as some might have
986 * gone down during the HW restart
987 */
988 ieee80211_iterate_interfaces(mvm->hw, 0, iwl_mvm_cleanup_iterator, mvm);
8ca151b5 989
fe0f2de3 990 mvm->p2p_device_vif = NULL;
37577fe2 991 mvm->d0i3_ap_sta_id = IWL_MVM_STATION_COUNT;
fe0f2de3
IP		 992
993 iwl_mvm_reset_phy_ctxts(mvm);
9c3deeb5 994 memset(mvm->fw_key_table, 0, sizeof(mvm->fw_key_table));
8ca151b5 995 memset(mvm->sta_drained, 0, sizeof(mvm->sta_drained));
24afba76 996 memset(mvm->sta_deferred_frames, 0, sizeof(mvm->sta_deferred_frames));
a0f6bf2a 997 memset(mvm->tfd_drained, 0, sizeof(mvm->tfd_drained));
8a275bad
EG		 998 memset(&mvm->last_bt_notif, 0, sizeof(mvm->last_bt_notif));
999 memset(&mvm->last_bt_notif_old, 0, sizeof(mvm->last_bt_notif_old));
1000 memset(&mvm->last_bt_ci_cmd, 0, sizeof(mvm->last_bt_ci_cmd));
1001 memset(&mvm->last_bt_ci_cmd_old, 0, sizeof(mvm->last_bt_ci_cmd_old));
1002 memset(&mvm->bt_ack_kill_msk, 0, sizeof(mvm->bt_ack_kill_msk));
1003 memset(&mvm->bt_cts_kill_msk, 0, sizeof(mvm->bt_cts_kill_msk));
8ca151b5
JB		 1004
1005 ieee80211_wake_queues(mvm->hw);
1006
228670b2
EP		 1007 /* clear any stale d0i3 state */
1008 clear_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status);
1009
8ca151b5 1010 mvm->vif_count = 0;
113a0447 1011 mvm->rx_ba_sessions = 0;
d2709ad7 1012 mvm->fw_dbg_conf = FW_DBG_INVALID;
91a8bcde
JB		 1013
1014 /* keep statistics ticking */
1015 iwl_mvm_accu_radio_stats(mvm);
8ca151b5
JB		 1016}
1017
a0a09243 1018int __iwl_mvm_mac_start(struct iwl_mvm *mvm)
8ca151b5 1019{
8ca151b5
JB		 1020 int ret;
1021
a0a09243 1022 lockdep_assert_held(&mvm->mutex);
8ca151b5 1023
a42b2af3
LC		 1024 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) {
1025 /* Clean up some internal and mac80211 state on restart */
8ca151b5 1026 iwl_mvm_restart_cleanup(mvm);
a42b2af3
LC		 1027 } else {
1028 /* Hold the reference to prevent runtime suspend while
1029 * the start procedure runs. It's a bit confusing
1030 * that the UCODE_DOWN reference is taken, but it just
1031 * means "UCODE is not UP yet". ( TODO: rename this
1032 * reference).
1033 */
1034 iwl_mvm_ref(mvm, IWL_MVM_REF_UCODE_DOWN);
1035 }
8ca151b5 1036 ret = iwl_mvm_up(mvm);
c47af22a
JB		 1037
1038 if (ret && test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) {
1039 /* Something went wrong - we need to finish some cleanup
1040 * that normally iwl_mvm_mac_restart_complete() below
1041 * would do.
1042 */
1043 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status);
1044 iwl_mvm_d0i3_enable_tx(mvm, NULL);
1045 }
1046
a0a09243
LC		 1047 return ret;
1048}
1049
1050static int iwl_mvm_mac_start(struct ieee80211_hw *hw)
1051{
1052 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1053 int ret;
1054
37948fcf
EP		 1055 /* Some hw restart cleanups must not hold the mutex */
1056 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) {
1057 /*
1058 * Make sure we are out of d0i3. This is needed
1059 * to make sure the reference accounting is correct
1060 * (and there is no stale d0i3_exit_work).
1061 */
1062 wait_event_timeout(mvm->d0i3_exit_waitq,
1063 !test_bit(IWL_MVM_STATUS_IN_D0I3,
1064 &mvm->status),
1065 HZ);
1066 }
1067
a0a09243
LC		 1068 mutex_lock(&mvm->mutex);
1069 ret = __iwl_mvm_mac_start(mvm);
8ca151b5
JB		 1070 mutex_unlock(&mvm->mutex);
1071
1072 return ret;
1073}
1074
cf2c92d8 1075static void iwl_mvm_restart_complete(struct iwl_mvm *mvm)
8ca151b5 1076{
8ca151b5
JB		 1077 int ret;
1078
1079 mutex_lock(&mvm->mutex);
1080
1081 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status);
b2492501 1082 iwl_mvm_d0i3_enable_tx(mvm, NULL);
e7afe89f 1083 ret = iwl_mvm_update_quotas(mvm, true, NULL);
8ca151b5
JB		 1084 if (ret)
1085 IWL_ERR(mvm, "Failed to update quotas after restart (%d)\n",
1086 ret);
1087
7498cf4c
EP		 1088 /* allow transport/FW low power modes */
1089 iwl_mvm_unref(mvm, IWL_MVM_REF_UCODE_DOWN);
1090
cbd2ae2d
AN		 1091 /*
1092 * If we have TDLS peers, remove them. We don't know the last seqno/PN
1093 * of packets the FW sent out, so we must reconnect.
1094 */
1095 iwl_mvm_teardown_tdls_peers(mvm);
1096
8ca151b5
JB		 1097 mutex_unlock(&mvm->mutex);
1098}
1099
088070a2
EP		 1100static void iwl_mvm_resume_complete(struct iwl_mvm *mvm)
1101{
b7282643
LC		 1102 if (iwl_mvm_is_d0i3_supported(mvm) &&
1103 iwl_mvm_enter_d0i3_on_suspend(mvm))
1104 WARN_ONCE(!wait_event_timeout(mvm->d0i3_exit_waitq,
1105 !test_bit(IWL_MVM_STATUS_IN_D0I3,
1106 &mvm->status),
1107 HZ),
1108 "D0i3 exit on resume timed out\n");
088070a2
EP		 1109}
1110
cf2c92d8
EP		 1111static void
1112iwl_mvm_mac_reconfig_complete(struct ieee80211_hw *hw,
1113 enum ieee80211_reconfig_type reconfig_type)
1114{
1115 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1116
1117 switch (reconfig_type) {
1118 case IEEE80211_RECONFIG_TYPE_RESTART:
1119 iwl_mvm_restart_complete(mvm);
1120 break;
1121 case IEEE80211_RECONFIG_TYPE_SUSPEND:
088070a2 1122 iwl_mvm_resume_complete(mvm);
cf2c92d8
EP		 1123 break;
1124 }
1125}
1126
a0a09243 1127void __iwl_mvm_mac_stop(struct iwl_mvm *mvm)
8ca151b5 1128{
a0a09243 1129 lockdep_assert_held(&mvm->mutex);
7498cf4c 1130
91a8bcde
JB		 1131 /* firmware counters are obviously reset now, but we shouldn't
1132 * partially track so also clear the fw_reset_accu counters.
1133 */
1134 memset(&mvm->accu_radio_stats, 0, sizeof(mvm->accu_radio_stats));
1135
8ca151b5
JB		 1136 /* async_handlers_wk is now blocked */
1137
1138 /*
1139 * The work item could be running or queued if the
1140 * ROC time event stops just as we get here.
1141 */
c779273b 1142 flush_work(&mvm->roc_done_wk);
8ca151b5 1143
fcb6b92a 1144 iwl_mvm_stop_device(mvm);
8ca151b5
JB		 1145
1146 iwl_mvm_async_handlers_purge(mvm);
1147 /* async_handlers_list is empty and will stay empty: HW is stopped */
1148
1149 /* the fw is stopped, the aux sta is dead: clean up driver state */
712b24ad 1150 iwl_mvm_del_aux_sta(mvm);
8ca151b5 1151
7fdf9663
MG		 1152 iwl_free_fw_paging(mvm);
1153
0a79a0c0
EP		 1154 /*
1155 * Clear IN_HW_RESTART flag when stopping the hw (as restart_complete()
1156 * won't be called in this case).
8b2b9fbf
AN		 1157 * But make sure to cleanup interfaces that have gone down before/during
1158 * HW restart was requested.
0a79a0c0 1159 */
8b2b9fbf
AN		 1160 if (test_and_clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status))
1161 ieee80211_iterate_interfaces(mvm->hw, 0,
1162 iwl_mvm_cleanup_iterator, mvm);
0a79a0c0 1163
963221be
AB		 1164 /* We shouldn't have any UIDs still set. Loop over all the UIDs to
1165 * make sure there's nothing left there and warn if any is found.
1166 */
859d914c 1167 if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_UMAC_SCAN)) {
963221be
AB		 1168 int i;
1169
507e4cda 1170 for (i = 0; i < mvm->max_scans; i++) {
6185af2a
LC		 1171 if (WARN_ONCE(mvm->scan_uid_status[i],
1172 "UMAC scan UID %d status was not cleaned\n",
1173 i))
1174 mvm->scan_uid_status[i] = 0;
963221be
AB		 1175 }
1176 }
a0a09243 1177}
bc44886d 1178
a0a09243
LC		 1179static void iwl_mvm_mac_stop(struct ieee80211_hw *hw)
1180{
1181 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1182
1183 flush_work(&mvm->d0i3_exit_work);
1184 flush_work(&mvm->async_handlers_wk);
24afba76 1185 flush_work(&mvm->add_stream_wk);
d2709ad7 1186 cancel_delayed_work_sync(&mvm->fw_dump_wk);
b6eaa45a 1187 iwl_mvm_free_fw_dump_desc(mvm);
a0a09243
LC		 1188
1189 mutex_lock(&mvm->mutex);
1190 __iwl_mvm_mac_stop(mvm);
8ca151b5
JB		 1191 mutex_unlock(&mvm->mutex);
1192
1193 /*
1194 * The worker might have been waiting for the mutex, let it run and
1195 * discover that its list is now empty.
1196 */
1197 cancel_work_sync(&mvm->async_handlers_wk);
1198}
1199
fe0f2de3
IP		 1200static struct iwl_mvm_phy_ctxt *iwl_mvm_get_free_phy_ctxt(struct iwl_mvm *mvm)
1201{
1202 u16 i;
1203
1204 lockdep_assert_held(&mvm->mutex);
1205
1206 for (i = 0; i < NUM_PHY_CTX; i++)
1207 if (!mvm->phy_ctxts[i].ref)
1208 return &mvm->phy_ctxts[i];
1209
1210 IWL_ERR(mvm, "No available PHY context\n");
1211 return NULL;
1212}
1213
d44c3fe6
AA		 1214static int iwl_mvm_set_tx_power(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
1215 s16 tx_power)
1216{
1217 struct iwl_dev_tx_power_cmd cmd = {
da03f029
JB		 1218 .v2.set_mode = cpu_to_le32(IWL_TX_POWER_MODE_SET_MAC),
1219 .v2.mac_context_id =
d44c3fe6 1220 cpu_to_le32(iwl_mvm_vif_from_mac80211(vif)->id),
da03f029 1221 .v2.pwr_restriction = cpu_to_le16(8 * tx_power),
d44c3fe6 1222 };
da03f029 1223 int len = sizeof(cmd);
d44c3fe6 1224
d44c3fe6 1225 if (tx_power == IWL_DEFAULT_MAX_TX_POWER)
da03f029 1226 cmd.v2.pwr_restriction = cpu_to_le16(IWL_DEV_MAX_TX_POWER);
d44c3fe6 1227
da03f029
JB		 1228 if (!fw_has_api(&mvm->fw->ucode_capa, IWL_UCODE_TLV_API_TX_POWER_CHAIN))
1229 len = sizeof(cmd.v2);
1230
1231 return iwl_mvm_send_cmd_pdu(mvm, REDUCE_TX_POWER_CMD, 0, len, &cmd);
d44c3fe6
AA		 1232}
1233
8ca151b5
JB		 1234static int iwl_mvm_mac_add_interface(struct ieee80211_hw *hw,
1235 struct ieee80211_vif *vif)
1236{
1237 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1238 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1239 int ret;
1240
aa5e1832
EG		 1241 mvmvif->mvm = mvm;
1242
d40fc489
GG		 1243 /*
1244 * make sure D0i3 exit is completed, otherwise a target access
1245 * during tx queue configuration could be done when still in
1246 * D0i3 state.
1247 */
1248 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_ADD_IF);
1249 if (ret)
1250 return ret;
1251
8ca151b5
JB		 1252 /*
1253 * Not much to do here. The stack will not allow interface
1254 * types or combinations that we didn't advertise, so we
1255 * don't really have to check the types.
1256 */
1257
1258 mutex_lock(&mvm->mutex);
1259
33cef925
JB		 1260 /* make sure that beacon statistics don't go backwards with FW reset */
1261 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status))
1262 mvmvif->beacon_stats.accu_num_beacons +=
1263 mvmvif->beacon_stats.num_beacons;
1264
e89044d7 1265 /* Allocate resources for the MAC context, and add it to the fw */
8ca151b5
JB		 1266 ret = iwl_mvm_mac_ctxt_init(mvm, vif);
1267 if (ret)
1268 goto out_unlock;
1269
1c2abf72 1270 /* Counting number of interfaces is needed for legacy PM */
ea183d02
IP		 1271 if (vif->type != NL80211_IFTYPE_P2P_DEVICE)
1272 mvm->vif_count++;
ea183d02 1273
8ca151b5
JB		 1274 /*
1275 * The AP binding flow can be done only after the beacon
1276 * template is configured (which happens only in the mac80211
1277 * start_ap() flow), and adding the broadcast station can happen
1278 * only after the binding.
1279 * In addition, since modifying the MAC before adding a bcast
1280 * station is not allowed by the FW, delay the adding of MAC context to
1281 * the point where we can also add the bcast station.
1282 * In short: there's not much we can do at this point, other than
1283 * allocating resources :)
1284 */
5023d966
JB		 1285 if (vif->type == NL80211_IFTYPE_AP ||
1286 vif->type == NL80211_IFTYPE_ADHOC) {
013290aa 1287 ret = iwl_mvm_alloc_bcast_sta(mvm, vif);
8ca151b5
JB		 1288 if (ret) {
1289 IWL_ERR(mvm, "Failed to allocate bcast sta\n");
1290 goto out_release;
1291 }
1292
77740cb4 1293 iwl_mvm_vif_dbgfs_register(mvm, vif);
8ca151b5
JB		 1294 goto out_unlock;
1295 }
1296
93190fb0
AA		 1297 mvmvif->features |= hw->netdev_features;
1298
8ca151b5
JB		 1299 ret = iwl_mvm_mac_ctxt_add(mvm, vif);
1300 if (ret)
1301 goto out_release;
1302
999609f1 1303 ret = iwl_mvm_power_update_mac(mvm);
e5e7aa8e 1304 if (ret)
fd66fc1c 1305 goto out_remove_mac;
8ca151b5 1306
7df15b1e 1307 /* beacon filtering */
a1022927 1308 ret = iwl_mvm_disable_beacon_filter(mvm, vif, 0);
bd3351ba
EP		 1309 if (ret)
1310 goto out_remove_mac;
1311
7df15b1e 1312 if (!mvm->bf_allowed_vif &&
73e5f2c5 1313 vif->type == NL80211_IFTYPE_STATION && !vif->p2p) {
7df15b1e 1314 mvm->bf_allowed_vif = mvmvif;
a20fd398
AO		 1315 vif->driver_flags |= IEEE80211_VIF_BEACON_FILTER |
1316 IEEE80211_VIF_SUPPORTS_CQM_RSSI;
7df15b1e
HG		 1317 }
1318
8ca151b5
JB		 1319 /*
1320 * P2P_DEVICE interface does not have a channel context assigned to it,
1321 * so a dedicated PHY context is allocated to it and the corresponding
1322 * MAC context is bound to it at this stage.
1323 */
1324 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
8ca151b5 1325
fe0f2de3
IP		 1326 mvmvif->phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm);
1327 if (!mvmvif->phy_ctxt) {
1328 ret = -ENOSPC;
bd3351ba 1329 goto out_free_bf;
fe0f2de3 1330 }
8ca151b5 1331
53a9d61e 1332 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt);
8ca151b5
JB		 1333 ret = iwl_mvm_binding_add_vif(mvm, vif);
1334 if (ret)
53a9d61e 1335 goto out_unref_phy;
8ca151b5 1336
013290aa 1337 ret = iwl_mvm_add_bcast_sta(mvm, vif);
8ca151b5
JB		 1338 if (ret)
1339 goto out_unbind;
1340
1341 /* Save a pointer to p2p device vif, so it can later be used to
1342 * update the p2p device MAC when a GO is started/stopped */
1343 mvm->p2p_device_vif = vif;
1344 }
1345
63494374 1346 iwl_mvm_vif_dbgfs_register(mvm, vif);
8ca151b5
JB		 1347 goto out_unlock;
1348
1349 out_unbind:
1350 iwl_mvm_binding_remove_vif(mvm, vif);
53a9d61e 1351 out_unref_phy:
fe0f2de3 1352 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
bd3351ba
EP		 1353 out_free_bf:
1354 if (mvm->bf_allowed_vif == mvmvif) {
1355 mvm->bf_allowed_vif = NULL;
a20fd398
AO		 1356 vif->driver_flags &= ~(IEEE80211_VIF_BEACON_FILTER |
1357 IEEE80211_VIF_SUPPORTS_CQM_RSSI);
bd3351ba 1358 }
8ca151b5
JB		 1359 out_remove_mac:
1360 mvmvif->phy_ctxt = NULL;
1361 iwl_mvm_mac_ctxt_remove(mvm, vif);
1362 out_release:
5ee2b215
AB		 1363 if (vif->type != NL80211_IFTYPE_P2P_DEVICE)
1364 mvm->vif_count--;
1c2abf72 1365
8ca151b5
JB		 1366 iwl_mvm_mac_ctxt_release(mvm, vif);
1367 out_unlock:
1368 mutex_unlock(&mvm->mutex);
1369
d40fc489
GG		 1370 iwl_mvm_unref(mvm, IWL_MVM_REF_ADD_IF);
1371
8ca151b5
JB		 1372 return ret;
1373}
1374
38a12b5b
JB		 1375static void iwl_mvm_prepare_mac_removal(struct iwl_mvm *mvm,
1376 struct ieee80211_vif *vif)
8ca151b5 1377{
d92b732e 1378 u32 tfd_msk = iwl_mvm_mac_get_queues_mask(vif);
8ca151b5
JB		 1379
1380 if (tfd_msk) {
fe92e32a
EG		 1381 /*
1382 * mac80211 first removes all the stations of the vif and
1383 * then removes the vif. When it removes a station it also
1384 * flushes the AMPDU session. So by now, all the AMPDU sessions
1385 * of all the stations of this vif are closed, and the queues
1386 * of these AMPDU sessions are properly closed.
1387 * We still need to take care of the shared queues of the vif.
1388 * Flush them here.
1389 */
8ca151b5 1390 mutex_lock(&mvm->mutex);
5888a40c 1391 iwl_mvm_flush_tx_path(mvm, tfd_msk, 0);
8ca151b5 1392 mutex_unlock(&mvm->mutex);
fe92e32a
EG		 1393
1394 /*
1395 * There are transports that buffer a few frames in the host.
1396 * For these, the flush above isn't enough since while we were
1397 * flushing, the transport might have sent more frames to the
1398 * device. To solve this, wait here until the transport is
1399 * empty. Technically, this could have replaced the flush
1400 * above, but flush is much faster than draining. So flush
1401 * first, and drain to make sure we have no frames in the
1402 * transport anymore.
1403 * If a station still had frames on the shared queues, it is
1404 * already marked as draining, so to complete the draining, we
1405 * just need to wait until the transport is empty.
1406 */
1407 iwl_trans_wait_tx_queue_empty(mvm->trans, tfd_msk);
8ca151b5
JB		 1408 }
1409
1410 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
1411 /*
1412 * Flush the ROC worker which will flush the OFFCHANNEL queue.
1413 * We assume here that all the packets sent to the OFFCHANNEL
1414 * queue are sent in ROC session.
1415 */
1416 flush_work(&mvm->roc_done_wk);
1417 } else {
1418 /*
1419 * By now, all the AC queues are empty. The AGG queues are
1420 * empty too. We already got all the Tx responses for all the
1421 * packets in the queues. The drain work can have been
0742a75a 1422 * triggered. Flush it.
8ca151b5
JB		 1423 */
1424 flush_work(&mvm->sta_drained_wk);
1425 }
38a12b5b
JB		 1426}
1427
1428static void iwl_mvm_mac_remove_interface(struct ieee80211_hw *hw,
1429 struct ieee80211_vif *vif)
1430{
1431 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1432 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1433
1434 iwl_mvm_prepare_mac_removal(mvm, vif);
8ca151b5
JB		 1435
1436 mutex_lock(&mvm->mutex);
1437
7df15b1e
HG		 1438 if (mvm->bf_allowed_vif == mvmvif) {
1439 mvm->bf_allowed_vif = NULL;
a20fd398
AO		 1440 vif->driver_flags &= ~(IEEE80211_VIF_BEACON_FILTER |
1441 IEEE80211_VIF_SUPPORTS_CQM_RSSI);
7df15b1e
HG		 1442 }
1443
63494374
JB		 1444 iwl_mvm_vif_dbgfs_clean(mvm, vif);
1445
8ca151b5
JB		 1446 /*
1447 * For AP/GO interface, the tear down of the resources allocated to the
38a12b5b 1448 * interface is be handled as part of the stop_ap flow.
8ca151b5 1449 */
5023d966
JB		 1450 if (vif->type == NL80211_IFTYPE_AP ||
1451 vif->type == NL80211_IFTYPE_ADHOC) {
507cadf2
DS		 1452#ifdef CONFIG_NL80211_TESTMODE
1453 if (vif == mvm->noa_vif) {
1454 mvm->noa_vif = NULL;
1455 mvm->noa_duration = 0;
1456 }
1457#endif
013290aa 1458 iwl_mvm_dealloc_bcast_sta(mvm, vif);
8ca151b5
JB		 1459 goto out_release;
1460 }
1461
1462 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
1463 mvm->p2p_device_vif = NULL;
013290aa 1464 iwl_mvm_rm_bcast_sta(mvm, vif);
8ca151b5 1465 iwl_mvm_binding_remove_vif(mvm, vif);
fe0f2de3 1466 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
8ca151b5
JB		 1467 mvmvif->phy_ctxt = NULL;
1468 }
1469
5ee2b215 1470 if (mvm->vif_count && vif->type != NL80211_IFTYPE_P2P_DEVICE)
8ca151b5 1471 mvm->vif_count--;
1c2abf72 1472
999609f1 1473 iwl_mvm_power_update_mac(mvm);
8ca151b5
JB		 1474 iwl_mvm_mac_ctxt_remove(mvm, vif);
1475
1476out_release:
1477 iwl_mvm_mac_ctxt_release(mvm, vif);
1478 mutex_unlock(&mvm->mutex);
1479}
1480
1481static int iwl_mvm_mac_config(struct ieee80211_hw *hw, u32 changed)
88f2fd73 1482{
8ca151b5
JB		 1483 return 0;
1484}
1485
e59647ea
EP		 1486struct iwl_mvm_mc_iter_data {
1487 struct iwl_mvm *mvm;
1488 int port_id;
1489};
1490
1491static void iwl_mvm_mc_iface_iterator(void *_data, u8 *mac,
1492 struct ieee80211_vif *vif)
1493{
1494 struct iwl_mvm_mc_iter_data *data = _data;
1495 struct iwl_mvm *mvm = data->mvm;
1496 struct iwl_mcast_filter_cmd *cmd = mvm->mcast_filter_cmd;
1497 int ret, len;
1498
1499 /* if we don't have free ports, mcast frames will be dropped */
1500 if (WARN_ON_ONCE(data->port_id >= MAX_PORT_ID_NUM))
1501 return;
1502
1503 if (vif->type != NL80211_IFTYPE_STATION ||
1504 !vif->bss_conf.assoc)
1505 return;
1506
1507 cmd->port_id = data->port_id++;
1508 memcpy(cmd->bssid, vif->bss_conf.bssid, ETH_ALEN);
1509 len = roundup(sizeof(*cmd) + cmd->count * ETH_ALEN, 4);
1510
1c4abec0 1511 ret = iwl_mvm_send_cmd_pdu(mvm, MCAST_FILTER_CMD, CMD_ASYNC, len, cmd);
e59647ea
EP		 1512 if (ret)
1513 IWL_ERR(mvm, "mcast filter cmd error. ret=%d\n", ret);
1514}
1515
1516static void iwl_mvm_recalc_multicast(struct iwl_mvm *mvm)
1517{
1518 struct iwl_mvm_mc_iter_data iter_data = {
1519 .mvm = mvm,
88f2fd73
MG		 1520 };
1521
e59647ea
EP		 1522 lockdep_assert_held(&mvm->mutex);
1523
1524 if (WARN_ON_ONCE(!mvm->mcast_filter_cmd))
1525 return;
1526
1c4abec0 1527 ieee80211_iterate_active_interfaces_atomic(
e59647ea
EP		 1528 mvm->hw, IEEE80211_IFACE_ITER_NORMAL,
1529 iwl_mvm_mc_iface_iterator, &iter_data);
88f2fd73
MG		 1530}
1531
e59647ea
EP		 1532static u64 iwl_mvm_prepare_multicast(struct ieee80211_hw *hw,
1533 struct netdev_hw_addr_list *mc_list)
8ca151b5 1534{
e59647ea
EP		 1535 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1536 struct iwl_mcast_filter_cmd *cmd;
1537 struct netdev_hw_addr *addr;
f3bd58f4
MS		 1538 int addr_count;
1539 bool pass_all;
e59647ea
EP		 1540 int len;
1541
f3bd58f4
MS		 1542 addr_count = netdev_hw_addr_list_count(mc_list);
1543 pass_all = addr_count > MAX_MCAST_FILTERING_ADDRESSES ||
1544 IWL_MVM_FW_MCAST_FILTER_PASS_ALL;
1545 if (pass_all)
e59647ea 1546 addr_count = 0;
e59647ea
EP		 1547
1548 len = roundup(sizeof(*cmd) + addr_count * ETH_ALEN, 4);
1549 cmd = kzalloc(len, GFP_ATOMIC);
1550 if (!cmd)
1551 return 0;
1552
1553 if (pass_all) {
1554 cmd->pass_all = 1;
1555 return (u64)(unsigned long)cmd;
1556 }
1557
1558 netdev_hw_addr_list_for_each(addr, mc_list) {
1559 IWL_DEBUG_MAC80211(mvm, "mcast addr (%d): %pM\n",
1560 cmd->count, addr->addr);
1561 memcpy(&cmd->addr_list[cmd->count * ETH_ALEN],
1562 addr->addr, ETH_ALEN);
1563 cmd->count++;
1564 }
1565
1566 return (u64)(unsigned long)cmd;
8ca151b5
JB		 1567}
1568
1569static void iwl_mvm_configure_filter(struct ieee80211_hw *hw,
1570 unsigned int changed_flags,
1571 unsigned int *total_flags,
1572 u64 multicast)
1573{
e59647ea
EP		 1574 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1575 struct iwl_mcast_filter_cmd *cmd = (void *)(unsigned long)multicast;
8ca151b5 1576
e59647ea 1577 mutex_lock(&mvm->mutex);
51b6b9e0 1578
e59647ea
EP		 1579 /* replace previous configuration */
1580 kfree(mvm->mcast_filter_cmd);
1581 mvm->mcast_filter_cmd = cmd;
51b6b9e0 1582
e59647ea
EP		 1583 if (!cmd)
1584 goto out;
51b6b9e0 1585
e59647ea
EP		 1586 iwl_mvm_recalc_multicast(mvm);
1587out:
1588 mutex_unlock(&mvm->mutex);
1589 *total_flags = 0;
51b6b9e0
EG		 1590}
1591
effd1929
AO		 1592static void iwl_mvm_config_iface_filter(struct ieee80211_hw *hw,
1593 struct ieee80211_vif *vif,
1594 unsigned int filter_flags,
1595 unsigned int changed_flags)
1596{
1597 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1598
1599 /* We support only filter for probe requests */
1600 if (!(changed_flags & FIF_PROBE_REQ))
1601 return;
1602
1603 /* Supported only for p2p client interfaces */
1604 if (vif->type != NL80211_IFTYPE_STATION || !vif->bss_conf.assoc ||
1605 !vif->p2p)
1606 return;
1607
1608 mutex_lock(&mvm->mutex);
1609 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
1610 mutex_unlock(&mvm->mutex);
1611}
1612
c87163b9
EP		 1613#ifdef CONFIG_IWLWIFI_BCAST_FILTERING
1614struct iwl_bcast_iter_data {
1615 struct iwl_mvm *mvm;
1616 struct iwl_bcast_filter_cmd *cmd;
1617 u8 current_filter;
1618};
1619
1620static void
1621iwl_mvm_set_bcast_filter(struct ieee80211_vif *vif,
1622 const struct iwl_fw_bcast_filter *in_filter,
1623 struct iwl_fw_bcast_filter *out_filter)
1624{
1625 struct iwl_fw_bcast_filter_attr *attr;
1626 int i;
1627
1628 memcpy(out_filter, in_filter, sizeof(*out_filter));
1629
1630 for (i = 0; i < ARRAY_SIZE(out_filter->attrs); i++) {
1631 attr = &out_filter->attrs[i];
1632
1633 if (!attr->mask)
1634 break;
1635
2ee8f021
EP		 1636 switch (attr->reserved1) {
1637 case cpu_to_le16(BC_FILTER_MAGIC_IP):
1638 if (vif->bss_conf.arp_addr_cnt != 1) {
1639 attr->mask = 0;
1640 continue;
1641 }
1642
1643 attr->val = vif->bss_conf.arp_addr_list[0];
1644 break;
1645 case cpu_to_le16(BC_FILTER_MAGIC_MAC):
1646 attr->val = *(__be32 *)&vif->addr[2];
1647 break;
1648 default:
1649 break;
1650 }
1651 attr->reserved1 = 0;
c87163b9
EP		 1652 out_filter->num_attrs++;
1653 }
1654}
1655
1656static void iwl_mvm_bcast_filter_iterator(void *_data, u8 *mac,
1657 struct ieee80211_vif *vif)
1658{
1659 struct iwl_bcast_iter_data *data = _data;
1660 struct iwl_mvm *mvm = data->mvm;
1661 struct iwl_bcast_filter_cmd *cmd = data->cmd;
1662 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1663 struct iwl_fw_bcast_mac *bcast_mac;
1664 int i;
1665
1666 if (WARN_ON(mvmvif->id >= ARRAY_SIZE(cmd->macs)))
1667 return;
1668
1669 bcast_mac = &cmd->macs[mvmvif->id];
1670
e48393e8
IP		 1671 /*
1672 * enable filtering only for associated stations, but not for P2P
1673 * Clients
1674 */
1675 if (vif->type != NL80211_IFTYPE_STATION || vif->p2p ||
1676 !vif->bss_conf.assoc)
c87163b9
EP		 1677 return;
1678
1679 bcast_mac->default_discard = 1;
1680
1681 /* copy all configured filters */
1682 for (i = 0; mvm->bcast_filters[i].attrs[0].mask; i++) {
1683 /*
1684 * Make sure we don't exceed our filters limit.
1685 * if there is still a valid filter to be configured,
1686 * be on the safe side and just allow bcast for this mac.
1687 */
1688 if (WARN_ON_ONCE(data->current_filter >=
1689 ARRAY_SIZE(cmd->filters))) {
1690 bcast_mac->default_discard = 0;
1691 bcast_mac->attached_filters = 0;
1692 break;
1693 }
1694
1695 iwl_mvm_set_bcast_filter(vif,
1696 &mvm->bcast_filters[i],
1697 &cmd->filters[data->current_filter]);
1698
1699 /* skip current filter if it contains no attributes */
1700 if (!cmd->filters[data->current_filter].num_attrs)
1701 continue;
1702
1703 /* attach the filter to current mac */
1704 bcast_mac->attached_filters |=
1705 cpu_to_le16(BIT(data->current_filter));
1706
1707 data->current_filter++;
1708 }
1709}
1710
de06a59e
EP		 1711bool iwl_mvm_bcast_filter_build_cmd(struct iwl_mvm *mvm,
1712 struct iwl_bcast_filter_cmd *cmd)
c87163b9 1713{
c87163b9
EP		 1714 struct iwl_bcast_iter_data iter_data = {
1715 .mvm = mvm,
de06a59e 1716 .cmd = cmd,
c87163b9
EP		 1717 };
1718
3b8983b1
MS		 1719 if (IWL_MVM_FW_BCAST_FILTER_PASS_ALL)
1720 return false;
1721
de06a59e
EP		 1722 memset(cmd, 0, sizeof(*cmd));
1723 cmd->max_bcast_filters = ARRAY_SIZE(cmd->filters);
1724 cmd->max_macs = ARRAY_SIZE(cmd->macs);
1725
1726#ifdef CONFIG_IWLWIFI_DEBUGFS
1727 /* use debugfs filters/macs if override is configured */
1728 if (mvm->dbgfs_bcast_filtering.override) {
1729 memcpy(cmd->filters, &mvm->dbgfs_bcast_filtering.cmd.filters,
1730 sizeof(cmd->filters));
1731 memcpy(cmd->macs, &mvm->dbgfs_bcast_filtering.cmd.macs,
1732 sizeof(cmd->macs));
1733 return true;
1734 }
1735#endif
c87163b9
EP		 1736
1737 /* if no filters are configured, do nothing */
1738 if (!mvm->bcast_filters)
de06a59e 1739 return false;
c87163b9
EP		 1740
1741 /* configure and attach these filters for each associated sta vif */
1742 ieee80211_iterate_active_interfaces(
1743 mvm->hw, IEEE80211_IFACE_ITER_NORMAL,
1744 iwl_mvm_bcast_filter_iterator, &iter_data);
1745
de06a59e
EP		 1746 return true;
1747}
34672bb3
EP		 1748
1749static int iwl_mvm_configure_bcast_filter(struct iwl_mvm *mvm)
de06a59e
EP		 1750{
1751 struct iwl_bcast_filter_cmd cmd;
1752
1753 if (!(mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_BCAST_FILTERING))
1754 return 0;
1755
1756 if (!iwl_mvm_bcast_filter_build_cmd(mvm, &cmd))
1757 return 0;
1758
a1022927 1759 return iwl_mvm_send_cmd_pdu(mvm, BCAST_FILTER_CMD, 0,
c87163b9
EP		 1760 sizeof(cmd), &cmd);
1761}
1762#else
34672bb3 1763static inline int iwl_mvm_configure_bcast_filter(struct iwl_mvm *mvm)
c87163b9
EP		 1764{
1765 return 0;
1766}
1767#endif
1768
a07a8f37
SS		 1769static int iwl_mvm_update_mu_groups(struct iwl_mvm *mvm,
1770 struct ieee80211_vif *vif)
1771{
1772 struct iwl_mu_group_mgmt_cmd cmd = {};
1773
1774 memcpy(cmd.membership_status, vif->bss_conf.mu_group.membership,
1775 WLAN_MEMBERSHIP_LEN);
1776 memcpy(cmd.user_position, vif->bss_conf.mu_group.position,
1777 WLAN_USER_POSITION_LEN);
1778
1779 return iwl_mvm_send_cmd_pdu(mvm,
1780 WIDE_ID(DATA_PATH_GROUP,
1781 UPDATE_MU_GROUPS_CMD),
1782 0, sizeof(cmd), &cmd);
1783}
1784
f92659a1
SS		 1785static void iwl_mvm_mu_mimo_iface_iterator(void *_data, u8 *mac,
1786 struct ieee80211_vif *vif)
1787{
1788 if (vif->mu_mimo_owner) {
1789 struct iwl_mu_group_mgmt_notif *notif = _data;
1790
1791 /*
1792 * MU-MIMO Group Id action frame is little endian. We treat
1793 * the data received from firmware as if it came from the
1794 * action frame, so no conversion is needed.
1795 */
1796 ieee80211_update_mu_groups(vif,
1797 (u8 *)&notif->membership_status,
1798 (u8 *)&notif->user_position);
1799 }
1800}
1801
1802void iwl_mvm_mu_mimo_grp_notif(struct iwl_mvm *mvm,
1803 struct iwl_rx_cmd_buffer *rxb)
1804{
1805 struct iwl_rx_packet *pkt = rxb_addr(rxb);
1806 struct iwl_mu_group_mgmt_notif *notif = (void *)pkt->data;
1807
1808 ieee80211_iterate_active_interfaces_atomic(
1809 mvm->hw, IEEE80211_IFACE_ITER_NORMAL,
1810 iwl_mvm_mu_mimo_iface_iterator, notif);
1811}
1812
8ca151b5
JB		 1813static void iwl_mvm_bss_info_changed_station(struct iwl_mvm *mvm,
1814 struct ieee80211_vif *vif,
1815 struct ieee80211_bss_conf *bss_conf,
1816 u32 changes)
1817{
1818 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1819 int ret;
1820
6e97b0d2
IP		 1821 /*
1822 * Re-calculate the tsf id, as the master-slave relations depend on the
1823 * beacon interval, which was not known when the station interface was
1824 * added.
1825 */
1826 if (changes & BSS_CHANGED_ASSOC && bss_conf->assoc)
1827 iwl_mvm_mac_ctxt_recalc_tsf_id(mvm, vif);
1828
03098268
AE		 1829 if (changes & BSS_CHANGED_ASSOC && !bss_conf->assoc &&
1830 mvmvif->lqm_active)
1831 iwl_mvm_send_lqm_cmd(vif, LQM_CMD_OPERATION_STOP_MEASUREMENT,
1832 0, 0);
1833
3dfd3a97
JB		 1834 /*
1835 * If we're not associated yet, take the (new) BSSID before associating
1836 * so the firmware knows. If we're already associated, then use the old
1837 * BSSID here, and we'll send a cleared one later in the CHANGED_ASSOC
1838 * branch for disassociation below.
1839 */
1840 if (changes & BSS_CHANGED_BSSID && !mvmvif->associated)
1841 memcpy(mvmvif->bssid, bss_conf->bssid, ETH_ALEN);
1842
1843 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, mvmvif->bssid);
8ca151b5
JB		 1844 if (ret)
1845 IWL_ERR(mvm, "failed to update MAC %pM\n", vif->addr);
1846
3dfd3a97
JB		 1847 /* after sending it once, adopt mac80211 data */
1848 memcpy(mvmvif->bssid, bss_conf->bssid, ETH_ALEN);
1849 mvmvif->associated = bss_conf->assoc;
1850
8ca151b5
JB		 1851 if (changes & BSS_CHANGED_ASSOC) {
1852 if (bss_conf->assoc) {
33cef925
JB		 1853 /* clear statistics to get clean beacon counter */
1854 iwl_mvm_request_statistics(mvm, true);
1855 memset(&mvmvif->beacon_stats, 0,
1856 sizeof(mvmvif->beacon_stats));
1857
8ca151b5 1858 /* add quota for this interface */
7754ae79 1859 ret = iwl_mvm_update_quotas(mvm, true, NULL);
8ca151b5
JB		 1860 if (ret) {
1861 IWL_ERR(mvm, "failed to update quotas\n");
1862 return;
1863 }
016d27e1
JB		 1864
1865 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART,
1866 &mvm->status)) {
1867 /*
1868 * If we're restarting then the firmware will
1869 * obviously have lost synchronisation with
1870 * the AP. It will attempt to synchronise by
1871 * itself, but we can make it more reliable by
1872 * scheduling a session protection time event.
1873 *
1874 * The firmware needs to receive a beacon to
1875 * catch up with synchronisation, use 110% of
1876 * the beacon interval.
1877 *
1878 * Set a large maximum delay to allow for more
1879 * than a single interface.
1880 */
1881 u32 dur = (11 * vif->bss_conf.beacon_int) / 10;
1882 iwl_mvm_protect_session(mvm, vif, dur, dur,
d20d37bc 1883 5 * dur, false);
016d27e1 1884 }
1f3b0ff8
LE		 1885
1886 iwl_mvm_sf_update(mvm, vif, false);
175a70b7 1887 iwl_mvm_power_vif_assoc(mvm, vif);
697162a1 1888 if (vif->p2p) {
29a90a49 1889 iwl_mvm_ref(mvm, IWL_MVM_REF_P2P_CLIENT);
697162a1
EG		 1890 iwl_mvm_update_smps(mvm, vif,
1891 IWL_MVM_SMPS_REQ_PROT,
1892 IEEE80211_SMPS_DYNAMIC);
1893 }
8ca151b5 1894 } else if (mvmvif->ap_sta_id != IWL_MVM_STATION_COUNT) {
1f3b0ff8
LE		 1895 /*
1896 * If update fails - SF might be running in associated
1897 * mode while disassociated - which is forbidden.
1898 */
1899 WARN_ONCE(iwl_mvm_sf_update(mvm, vif, false),
1900 "Failed to update SF upon disassociation\n");
1901
8ca151b5
JB		 1902 /* remove AP station now that the MAC is unassoc */
1903 ret = iwl_mvm_rm_sta_id(mvm, vif, mvmvif->ap_sta_id);
1904 if (ret)
1905 IWL_ERR(mvm, "failed to remove AP station\n");
37577fe2
EP		 1906
1907 if (mvm->d0i3_ap_sta_id == mvmvif->ap_sta_id)
1908 mvm->d0i3_ap_sta_id = IWL_MVM_STATION_COUNT;
8ca151b5
JB		 1909 mvmvif->ap_sta_id = IWL_MVM_STATION_COUNT;
1910 /* remove quota for this interface */
7754ae79 1911 ret = iwl_mvm_update_quotas(mvm, false, NULL);
8ca151b5
JB		 1912 if (ret)
1913 IWL_ERR(mvm, "failed to update quotas\n");
29a90a49
EP		 1914
1915 if (vif->p2p)
1916 iwl_mvm_unref(mvm, IWL_MVM_REF_P2P_CLIENT);
3dfd3a97
JB		 1917
1918 /* this will take the cleared BSSID from bss_conf */
1919 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
1920 if (ret)
1921 IWL_ERR(mvm,
1922 "failed to update MAC %pM (clear after unassoc)\n",
1923 vif->addr);
8ca151b5 1924 }
a20fd398 1925
a07a8f37
SS		 1926 /*
1927 * The firmware tracks the MU-MIMO group on its own.
f92659a1 1928 * However, on HW restart we should restore this data.
a07a8f37
SS		 1929 */
1930 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) &&
f92659a1 1931 (changes & BSS_CHANGED_MU_GROUPS) && vif->mu_mimo_owner) {
a07a8f37
SS		 1932 ret = iwl_mvm_update_mu_groups(mvm, vif);
1933 if (ret)
1934 IWL_ERR(mvm,
1935 "failed to update VHT MU_MIMO groups\n");
1936 }
1937
e59647ea 1938 iwl_mvm_recalc_multicast(mvm);
34672bb3 1939 iwl_mvm_configure_bcast_filter(mvm);
e59647ea 1940
a20fd398
AO		 1941 /* reset rssi values */
1942 mvmvif->bf_data.ave_beacon_signal = 0;
1943
8e484f0b 1944 iwl_mvm_bt_coex_vif_change(mvm);
f94045ed
EG		 1945 iwl_mvm_update_smps(mvm, vif, IWL_MVM_SMPS_REQ_TT,
1946 IEEE80211_SMPS_AUTOMATIC);
355346ba
AS		 1947 if (fw_has_capa(&mvm->fw->ucode_capa,
1948 IWL_UCODE_TLV_CAPA_UMAC_SCAN))
1949 iwl_mvm_config_scan(mvm);
989c6505 1950 } else if (changes & BSS_CHANGED_BEACON_INFO) {
210a544e
JB		 1951 /*
1952 * We received a beacon _after_ association so
1953 * remove the session protection.
1954 */
1955 iwl_mvm_remove_time_event(mvm, mvmvif,
1956 &mvmvif->time_event_data);
8ca151b5 1957 }
cc87d322
EH		 1958
1959 if (changes & BSS_CHANGED_BEACON_INFO) {
1960 iwl_mvm_sf_update(mvm, vif, false);
1961 WARN_ON(iwl_mvm_enable_beacon_filter(mvm, vif, 0));
1962 }
1963
283115fb
AA		 1964 if (changes & (BSS_CHANGED_PS | BSS_CHANGED_P2P_PS | BSS_CHANGED_QOS |
1965 /*
1966 * Send power command on every beacon change,
1967 * because we may have not enabled beacon abort yet.
1968 */
1969 BSS_CHANGED_BEACON_INFO)) {
1bc10d3b
JB		 1970 ret = iwl_mvm_power_update_mac(mvm);
1971 if (ret)
1972 IWL_ERR(mvm, "failed to update power mode\n");
1973 }
1974
88f2fd73
MG		 1975 if (changes & BSS_CHANGED_TXPOWER) {
1976 IWL_DEBUG_CALIB(mvm, "Changing TX Power to %d\n",
1977 bss_conf->txpower);
1978 iwl_mvm_set_tx_power(mvm, vif, bss_conf->txpower);
1979 }
a20fd398
AO		 1980
1981 if (changes & BSS_CHANGED_CQM) {
3c6acb61 1982 IWL_DEBUG_MAC80211(mvm, "cqm info_changed\n");
a20fd398
AO		 1983 /* reset cqm events tracking */
1984 mvmvif->bf_data.last_cqm_event = 0;
fa7b2e7f
AA		 1985 if (mvmvif->bf_data.bf_enabled) {
1986 ret = iwl_mvm_enable_beacon_filter(mvm, vif, 0);
1987 if (ret)
1988 IWL_ERR(mvm,
1989 "failed to update CQM thresholds\n");
1990 }
a20fd398 1991 }
2ee8f021
EP		 1992
1993 if (changes & BSS_CHANGED_ARP_FILTER) {
3c6acb61 1994 IWL_DEBUG_MAC80211(mvm, "arp filter changed\n");
34672bb3 1995 iwl_mvm_configure_bcast_filter(mvm);
2ee8f021 1996 }
8ca151b5
JB		 1997}
1998
5023d966
JB		 1999static int iwl_mvm_start_ap_ibss(struct ieee80211_hw *hw,
2000 struct ieee80211_vif *vif)
8ca151b5
JB		 2001{
2002 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2003 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2004 int ret;
2005
576eeee9
EP		 2006 /*
2007 * iwl_mvm_mac_ctxt_add() might read directly from the device
2008 * (the system time), so make sure it is available.
2009 */
2010 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_START_AP);
2011 if (ret)
2012 return ret;
2013
8ca151b5
JB		 2014 mutex_lock(&mvm->mutex);
2015
2016 /* Send the beacon template */
2017 ret = iwl_mvm_mac_ctxt_beacon_changed(mvm, vif);
2018 if (ret)
2019 goto out_unlock;
2020
6e97b0d2
IP		 2021 /*
2022 * Re-calculate the tsf id, as the master-slave relations depend on the
2023 * beacon interval, which was not known when the AP interface was added.
2024 */
2025 if (vif->type == NL80211_IFTYPE_AP)
2026 iwl_mvm_mac_ctxt_recalc_tsf_id(mvm, vif);
2027
94939080
GG		 2028 mvmvif->ap_assoc_sta_count = 0;
2029
8ca151b5
JB		 2030 /* Add the mac context */
2031 ret = iwl_mvm_mac_ctxt_add(mvm, vif);
2032 if (ret)
2033 goto out_unlock;
2034
2035 /* Perform the binding */
2036 ret = iwl_mvm_binding_add_vif(mvm, vif);
2037 if (ret)
2038 goto out_remove;
2039
8ca151b5
JB		 2040 /* Send the bcast station. At this stage the TBTT and DTIM time events
2041 * are added and applied to the scheduler */
013290aa 2042 ret = iwl_mvm_send_add_bcast_sta(mvm, vif);
8ca151b5
JB		 2043 if (ret)
2044 goto out_unbind;
2045
5691e218
IP		 2046 /* must be set before quota calculations */
2047 mvmvif->ap_ibss_active = true;
2048
a11e144e 2049 /* power updated needs to be done before quotas */
999609f1 2050 iwl_mvm_power_update_mac(mvm);
a11e144e 2051
7754ae79 2052 ret = iwl_mvm_update_quotas(mvm, false, NULL);
8ca151b5 2053 if (ret)
a11e144e 2054 goto out_quota_failed;
8ca151b5 2055
5023d966 2056 /* Need to update the P2P Device MAC (only GO, IBSS is single vif) */
8ca151b5 2057 if (vif->p2p && mvm->p2p_device_vif)
3dfd3a97 2058 iwl_mvm_mac_ctxt_changed(mvm, mvm->p2p_device_vif, false, NULL);
8ca151b5 2059
29a90a49
EP		 2060 iwl_mvm_ref(mvm, IWL_MVM_REF_AP_IBSS);
2061
8e484f0b 2062 iwl_mvm_bt_coex_vif_change(mvm);
dac94da8 2063
f697267f
AN		 2064 /* we don't support TDLS during DCM */
2065 if (iwl_mvm_phy_ctx_count(mvm) > 1)
2066 iwl_mvm_teardown_tdls_peers(mvm);
2067
939e4904 2068 goto out_unlock;
8ca151b5 2069
a11e144e 2070out_quota_failed:
999609f1 2071 iwl_mvm_power_update_mac(mvm);
5691e218 2072 mvmvif->ap_ibss_active = false;
013290aa 2073 iwl_mvm_send_rm_bcast_sta(mvm, vif);
8ca151b5
JB		 2074out_unbind:
2075 iwl_mvm_binding_remove_vif(mvm, vif);
2076out_remove:
2077 iwl_mvm_mac_ctxt_remove(mvm, vif);
2078out_unlock:
2079 mutex_unlock(&mvm->mutex);
576eeee9 2080 iwl_mvm_unref(mvm, IWL_MVM_REF_START_AP);
8ca151b5
JB		 2081 return ret;
2082}
2083
5023d966
JB		 2084static void iwl_mvm_stop_ap_ibss(struct ieee80211_hw *hw,
2085 struct ieee80211_vif *vif)
8ca151b5
JB		 2086{
2087 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2088 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2089
38a12b5b
JB		 2090 iwl_mvm_prepare_mac_removal(mvm, vif);
2091
8ca151b5
JB		 2092 mutex_lock(&mvm->mutex);
2093
664322fa 2094 /* Handle AP stop while in CSA */
7f0a7c67
AO		 2095 if (rcu_access_pointer(mvm->csa_vif) == vif) {
2096 iwl_mvm_remove_time_event(mvm, mvmvif,
2097 &mvmvif->time_event_data);
664322fa 2098 RCU_INIT_POINTER(mvm->csa_vif, NULL);
e9cb0327 2099 mvmvif->csa_countdown = false;
7f0a7c67 2100 }
664322fa 2101
003e5236
AO		 2102 if (rcu_access_pointer(mvm->csa_tx_blocked_vif) == vif) {
2103 RCU_INIT_POINTER(mvm->csa_tx_blocked_vif, NULL);
2104 mvm->csa_tx_block_bcn_timeout = 0;
2105 }
2106
5023d966 2107 mvmvif->ap_ibss_active = false;
1c87bbad 2108 mvm->ap_last_beacon_gp2 = 0;
8ca151b5 2109
8e484f0b 2110 iwl_mvm_bt_coex_vif_change(mvm);
dac94da8 2111
29a90a49
EP		 2112 iwl_mvm_unref(mvm, IWL_MVM_REF_AP_IBSS);
2113
5023d966 2114 /* Need to update the P2P Device MAC (only GO, IBSS is single vif) */
8ca151b5 2115 if (vif->p2p && mvm->p2p_device_vif)
3dfd3a97 2116 iwl_mvm_mac_ctxt_changed(mvm, mvm->p2p_device_vif, false, NULL);
8ca151b5 2117
7754ae79 2118 iwl_mvm_update_quotas(mvm, false, NULL);
013290aa 2119 iwl_mvm_send_rm_bcast_sta(mvm, vif);
8ca151b5 2120 iwl_mvm_binding_remove_vif(mvm, vif);
a11e144e 2121
999609f1 2122 iwl_mvm_power_update_mac(mvm);
a11e144e 2123
8ca151b5
JB		 2124 iwl_mvm_mac_ctxt_remove(mvm, vif);
2125
2126 mutex_unlock(&mvm->mutex);
2127}
2128
5023d966
JB		 2129static void
2130iwl_mvm_bss_info_changed_ap_ibss(struct iwl_mvm *mvm,
2131 struct ieee80211_vif *vif,
2132 struct ieee80211_bss_conf *bss_conf,
2133 u32 changes)
8ca151b5 2134{
be2056fc 2135 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
8a5e3660 2136
be2056fc
IP		 2137 /* Changes will be applied when the AP/IBSS is started */
2138 if (!mvmvif->ap_ibss_active)
2139 return;
2140
863230da 2141 if (changes & (BSS_CHANGED_ERP_CTS_PROT | BSS_CHANGED_HT |
f7d8b702 2142 BSS_CHANGED_BANDWIDTH | BSS_CHANGED_QOS) &&
3dfd3a97 2143 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL))
863230da 2144 IWL_ERR(mvm, "failed to update MAC %pM\n", vif->addr);
8a5e3660 2145
8ca151b5 2146 /* Need to send a new beacon template to the FW */
863230da
JB		 2147 if (changes & BSS_CHANGED_BEACON &&
2148 iwl_mvm_mac_ctxt_beacon_changed(mvm, vif))
2149 IWL_WARN(mvm, "Failed updating beacon data\n");
79b7a69d
HD		 2150
2151 if (changes & BSS_CHANGED_TXPOWER) {
2152 IWL_DEBUG_CALIB(mvm, "Changing TX Power to %d\n",
2153 bss_conf->txpower);
2154 iwl_mvm_set_tx_power(mvm, vif, bss_conf->txpower);
2155 }
8ca151b5
JB		 2156}
2157
2158static void iwl_mvm_bss_info_changed(struct ieee80211_hw *hw,
2159 struct ieee80211_vif *vif,
2160 struct ieee80211_bss_conf *bss_conf,
2161 u32 changes)
2162{
2163 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2164
576eeee9
EP		 2165 /*
2166 * iwl_mvm_bss_info_changed_station() might call
2167 * iwl_mvm_protect_session(), which reads directly from
2168 * the device (the system time), so make sure it is available.
2169 */
2170 if (iwl_mvm_ref_sync(mvm, IWL_MVM_REF_BSS_CHANGED))
2171 return;
2172
8ca151b5
JB		 2173 mutex_lock(&mvm->mutex);
2174
723f02ed 2175 if (changes & BSS_CHANGED_IDLE && !bss_conf->idle)
c7d42480 2176 iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_SCHED, true);
723f02ed 2177
8ca151b5
JB		 2178 switch (vif->type) {
2179 case NL80211_IFTYPE_STATION:
2180 iwl_mvm_bss_info_changed_station(mvm, vif, bss_conf, changes);
2181 break;
2182 case NL80211_IFTYPE_AP:
5023d966
JB		 2183 case NL80211_IFTYPE_ADHOC:
2184 iwl_mvm_bss_info_changed_ap_ibss(mvm, vif, bss_conf, changes);
8ca151b5
JB		 2185 break;
2186 default:
2187 /* shouldn't happen */
2188 WARN_ON_ONCE(1);
2189 }
2190
2191 mutex_unlock(&mvm->mutex);
576eeee9 2192 iwl_mvm_unref(mvm, IWL_MVM_REF_BSS_CHANGED);
8ca151b5
JB		 2193}
2194
2195static int iwl_mvm_mac_hw_scan(struct ieee80211_hw *hw,
2196 struct ieee80211_vif *vif,
c56ef672 2197 struct ieee80211_scan_request *hw_req)
8ca151b5
JB		 2198{
2199 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2200 int ret;
2201
6749dd80
LC		 2202 if (hw_req->req.n_channels == 0 ||
2203 hw_req->req.n_channels > mvm->fw->ucode_capa.n_scan_channels)
8ca151b5
JB		 2204 return -EINVAL;
2205
2206 mutex_lock(&mvm->mutex);
6749dd80 2207 ret = iwl_mvm_reg_scan_start(mvm, vif, &hw_req->req, &hw_req->ies);
8ca151b5 2208 mutex_unlock(&mvm->mutex);
6749dd80 2209
8ca151b5
JB		 2210 return ret;
2211}
2212
2213static void iwl_mvm_mac_cancel_hw_scan(struct ieee80211_hw *hw,
2214 struct ieee80211_vif *vif)
2215{
2216 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2217
2218 mutex_lock(&mvm->mutex);
2219
e7d3abab
LC		 2220 /* Due to a race condition, it's possible that mac80211 asks
2221 * us to stop a hw_scan when it's already stopped. This can
2222 * happen, for instance, if we stopped the scan ourselves,
2223 * called ieee80211_scan_completed() and the userspace called
2224 * cancel scan scan before ieee80211_scan_work() could run.
2225 * To handle that, simply return if the scan is not running.
2226 */
262888fc 2227 if (mvm->scan_status & IWL_MVM_SCAN_REGULAR)
c7d42480 2228 iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_REGULAR, true);
8ca151b5
JB		 2229
2230 mutex_unlock(&mvm->mutex);
2231}
2232
2233static void
2234iwl_mvm_mac_allow_buffered_frames(struct ieee80211_hw *hw,
3e56eadf 2235 struct ieee80211_sta *sta, u16 tids,
8ca151b5
JB		 2236 int num_frames,
2237 enum ieee80211_frame_release_type reason,
2238 bool more_data)
2239{
2240 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
8ca151b5 2241
3e56eadf 2242 /* Called when we need to transmit (a) frame(s) from mac80211 */
8ca151b5 2243
3e56eadf
JB		 2244 iwl_mvm_sta_modify_sleep_tx_count(mvm, sta, reason, num_frames,
2245 tids, more_data, false);
2246}
2247
2248static void
2249iwl_mvm_mac_release_buffered_frames(struct ieee80211_hw *hw,
2250 struct ieee80211_sta *sta, u16 tids,
2251 int num_frames,
2252 enum ieee80211_frame_release_type reason,
2253 bool more_data)
2254{
2255 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2256
2257 /* Called when we need to transmit (a) frame(s) from agg queue */
2258
2259 iwl_mvm_sta_modify_sleep_tx_count(mvm, sta, reason, num_frames,
2260 tids, more_data, true);
8ca151b5
JB		 2261}
2262
2263static void iwl_mvm_mac_sta_notify(struct ieee80211_hw *hw,
2264 struct ieee80211_vif *vif,
2265 enum sta_notify_cmd cmd,
2266 struct ieee80211_sta *sta)
2267{
2268 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
5b577a90 2269 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
c22b0ff5 2270 unsigned long txqs = 0, tids = 0;
3e56eadf 2271 int tid;
8ca151b5 2272
c22b0ff5
EG		 2273 spin_lock_bh(&mvmsta->lock);
2274 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) {
2275 struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid];
2276
2277 if (tid_data->state != IWL_AGG_ON &&
2278 tid_data->state != IWL_EMPTYING_HW_QUEUE_DELBA)
2279 continue;
2280
2281 __set_bit(tid_data->txq_id, &txqs);
2282
2283 if (iwl_mvm_tid_queued(tid_data) == 0)
2284 continue;
2285
2286 __set_bit(tid, &tids);
2287 }
2288
8ca151b5
JB		 2289 switch (cmd) {
2290 case STA_NOTIFY_SLEEP:
e3d4bc8c 2291 if (atomic_read(&mvm->pending_frames[mvmsta->sta_id]) > 0)
8ca151b5 2292 ieee80211_sta_block_awake(hw, sta, true);
3e56eadf 2293
c22b0ff5 2294 for_each_set_bit(tid, &tids, IWL_MAX_TID_COUNT)
3e56eadf 2295 ieee80211_sta_set_buffered(sta, tid, true);
c22b0ff5
EG		 2296
2297 if (txqs)
2298 iwl_trans_freeze_txq_timer(mvm->trans, txqs, true);
8ca151b5
JB		 2299 /*
2300 * The fw updates the STA to be asleep. Tx packets on the Tx
2301 * queues to this station will not be transmitted. The fw will
2302 * send a Tx response with TX_STATUS_FAIL_DEST_PS.
2303 */
2304 break;
2305 case STA_NOTIFY_AWAKE:
881acd89 2306 if (WARN_ON(mvmsta->sta_id == IWL_MVM_STATION_COUNT))
8ca151b5 2307 break;
c22b0ff5
EG		 2308
2309 if (txqs)
2310 iwl_trans_freeze_txq_timer(mvm->trans, txqs, false);
9cc40712 2311 iwl_mvm_sta_modify_ps_wake(mvm, sta);
8ca151b5
JB		 2312 break;
2313 default:
2314 break;
2315 }
c22b0ff5 2316 spin_unlock_bh(&mvmsta->lock);
8ca151b5
JB		 2317}
2318
1ddbbb0c
JB		 2319static void iwl_mvm_sta_pre_rcu_remove(struct ieee80211_hw *hw,
2320 struct ieee80211_vif *vif,
2321 struct ieee80211_sta *sta)
2322{
2323 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
9d8ce6af 2324 struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta);
1ddbbb0c
JB		 2325
2326 /*
2327 * This is called before mac80211 does RCU synchronisation,
2328 * so here we already invalidate our internal RCU-protected
2329 * station pointer. The rest of the code will thus no longer
2330 * be able to find the station this way, and we don't rely
2331 * on further RCU synchronisation after the sta_state()
2332 * callback deleted the station.
2333 */
2334 mutex_lock(&mvm->mutex);
2335 if (sta == rcu_access_pointer(mvm->fw_id_to_mac_id[mvm_sta->sta_id]))
2336 rcu_assign_pointer(mvm->fw_id_to_mac_id[mvm_sta->sta_id],
2337 ERR_PTR(-ENOENT));
94939080 2338
1ddbbb0c
JB		 2339 mutex_unlock(&mvm->mutex);
2340}
2341
bd1ba664
JB		 2342static void iwl_mvm_check_uapsd(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
2343 const u8 *bssid)
2344{
2345 if (!(mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_UAPSD_SUPPORT))
2346 return;
2347
cee5a882
AA		 2348 if (vif->p2p && !iwl_mvm_is_p2p_standalone_uapsd_supported(mvm)) {
2349 vif->driver_flags &= ~IEEE80211_VIF_SUPPORTS_UAPSD;
2350 return;
2351 }
2352
11dee0b4
EG		 2353 if (!vif->p2p &&
2354 (iwlwifi_mod_params.uapsd_disable & IWL_DISABLE_UAPSD_BSS)) {
bd1ba664
JB		 2355 vif->driver_flags &= ~IEEE80211_VIF_SUPPORTS_UAPSD;
2356 return;
2357 }
2358
2359 vif->driver_flags |= IEEE80211_VIF_SUPPORTS_UAPSD;
2360}
2361
1e8f1329
GBA		 2362static void
2363iwl_mvm_tdls_check_trigger(struct iwl_mvm *mvm,
2364 struct ieee80211_vif *vif, u8 *peer_addr,
2365 enum nl80211_tdls_operation action)
2366{
2367 struct iwl_fw_dbg_trigger_tlv *trig;
2368 struct iwl_fw_dbg_trigger_tdls *tdls_trig;
2369
2370 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_TDLS))
2371 return;
2372
2373 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_TDLS);
2374 tdls_trig = (void *)trig->data;
2375 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig))
2376 return;
2377
2378 if (!(tdls_trig->action_bitmap & BIT(action)))
2379 return;
2380
2381 if (tdls_trig->peer_mode &&
2382 memcmp(tdls_trig->peer, peer_addr, ETH_ALEN) != 0)
2383 return;
2384
2385 iwl_mvm_fw_dbg_collect_trig(mvm, trig,
2386 "TDLS event occurred, peer %pM, action %d",
2387 peer_addr, action);
2388}
2389
24afba76
LK		 2390static void iwl_mvm_purge_deferred_tx_frames(struct iwl_mvm *mvm,
2391 struct iwl_mvm_sta *mvm_sta)
2392{
2393 struct iwl_mvm_tid_data *tid_data;
2394 struct sk_buff *skb;
2395 int i;
2396
2397 spin_lock_bh(&mvm_sta->lock);
2398 for (i = 0; i <= IWL_MAX_TID_COUNT; i++) {
2399 tid_data = &mvm_sta->tid_data[i];
2400 while ((skb = __skb_dequeue(&tid_data->deferred_tx_frames)))
2401 ieee80211_free_txskb(mvm->hw, skb);
2402 }
2403 spin_unlock_bh(&mvm_sta->lock);
2404}
2405
8ca151b5
JB		 2406static int iwl_mvm_mac_sta_state(struct ieee80211_hw *hw,
2407 struct ieee80211_vif *vif,
2408 struct ieee80211_sta *sta,
2409 enum ieee80211_sta_state old_state,
2410 enum ieee80211_sta_state new_state)
2411{
2412 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2413 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2414 int ret;
2415
2416 IWL_DEBUG_MAC80211(mvm, "station %pM state change %d->%d\n",
2417 sta->addr, old_state, new_state);
2418
2419 /* this would be a mac80211 bug ... but don't crash */
2420 if (WARN_ON_ONCE(!mvmvif->phy_ctxt))
2421 return -EINVAL;
2422
2423 /* if a STA is being removed, reuse its ID */
2424 flush_work(&mvm->sta_drained_wk);
2425
24afba76
LK		 2426 /*
2427 * If we are in a STA removal flow and in DQA mode:
2428 *
2429 * This is after the sync_rcu part, so the queues have already been
2430 * flushed. No more TXs on their way in mac80211's path, and no more in
2431 * the queues.
2432 * Also, we won't be getting any new TX frames for this station.
2433 * What we might have are deferred TX frames that need to be taken care
2434 * of.
2435 *
2436 * Drop any still-queued deferred-frame before removing the STA, and
2437 * make sure the worker is no longer handling frames for this STA.
2438 */
2439 if (old_state == IEEE80211_STA_NONE &&
2440 new_state == IEEE80211_STA_NOTEXIST &&
2441 iwl_mvm_is_dqa_supported(mvm)) {
2442 struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta);
2443
2444 iwl_mvm_purge_deferred_tx_frames(mvm, mvm_sta);
2445 flush_work(&mvm->add_stream_wk);
2446
2447 /*
2448 * No need to make sure deferred TX indication is off since the
2449 * worker will already remove it if it was on
2450 */
2451 }
2452
8ca151b5
JB		 2453 mutex_lock(&mvm->mutex);
2454 if (old_state == IEEE80211_STA_NOTEXIST &&
2455 new_state == IEEE80211_STA_NONE) {
48bc1307
JB		 2456 /*
2457 * Firmware bug - it'll crash if the beacon interval is less
2458 * than 16. We can't avoid connecting at all, so refuse the
2459 * station state change, this will cause mac80211 to abandon
2460 * attempts to connect to this AP, and eventually wpa_s will
2461 * blacklist the AP...
2462 */
2463 if (vif->type == NL80211_IFTYPE_STATION &&
2464 vif->bss_conf.beacon_int < 16) {
2465 IWL_ERR(mvm,
2466 "AP %pM beacon interval is %d, refusing due to firmware bug!\n",
2467 sta->addr, vif->bss_conf.beacon_int);
2468 ret = -EINVAL;
2469 goto out_unlock;
2470 }
cf7b491d
AN		 2471
2472 if (sta->tdls &&
2473 (vif->p2p ||
fa3d07e4
AN		 2474 iwl_mvm_tdls_sta_count(mvm, NULL) ==
2475 IWL_MVM_TDLS_STA_COUNT ||
cf7b491d
AN		 2476 iwl_mvm_phy_ctx_count(mvm) > 1)) {
2477 IWL_DEBUG_MAC80211(mvm, "refusing TDLS sta\n");
2478 ret = -EBUSY;
2479 goto out_unlock;
2480 }
2481
8ca151b5 2482 ret = iwl_mvm_add_sta(mvm, vif, sta);
1e8f1329 2483 if (sta->tdls && ret == 0) {
fa3d07e4 2484 iwl_mvm_recalc_tdls_state(mvm, vif, true);
1e8f1329
GBA		 2485 iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr,
2486 NL80211_TDLS_SETUP);
2487 }
8ca151b5
JB		 2488 } else if (old_state == IEEE80211_STA_NONE &&
2489 new_state == IEEE80211_STA_AUTH) {
e820c2da
HD		 2490 /*
2491 * EBS may be disabled due to previous failures reported by FW.
2492 * Reset EBS status here assuming environment has been changed.
2493 */
2494 mvm->last_ebs_successful = true;
bd1ba664 2495 iwl_mvm_check_uapsd(mvm, vif, sta->addr);
8ca151b5
JB		 2496 ret = 0;
2497 } else if (old_state == IEEE80211_STA_AUTH &&
2498 new_state == IEEE80211_STA_ASSOC) {
8be30c13
AB		 2499 if (vif->type == NL80211_IFTYPE_AP) {
2500 mvmvif->ap_assoc_sta_count++;
2501 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
2502 }
7a453973
JB		 2503 ret = iwl_mvm_update_sta(mvm, vif, sta);
2504 if (ret == 0)
2505 iwl_mvm_rs_rate_init(mvm, sta,
b87c2179
ES		 2506 mvmvif->phy_ctxt->channel->band,
2507 true);
8ca151b5
JB		 2508 } else if (old_state == IEEE80211_STA_ASSOC &&
2509 new_state == IEEE80211_STA_AUTHORIZED) {
f59e0e3c
AN		 2510
2511 /* we don't support TDLS during DCM */
2512 if (iwl_mvm_phy_ctx_count(mvm) > 1)
2513 iwl_mvm_teardown_tdls_peers(mvm);
2514
1e8f1329
GBA		 2515 if (sta->tdls)
2516 iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr,
2517 NL80211_TDLS_ENABLE_LINK);
2518
7df15b1e 2519 /* enable beacon filtering */
fa7b2e7f 2520 WARN_ON(iwl_mvm_enable_beacon_filter(mvm, vif, 0));
8ca151b5
JB		 2521 ret = 0;
2522 } else if (old_state == IEEE80211_STA_AUTHORIZED &&
2523 new_state == IEEE80211_STA_ASSOC) {
7df15b1e 2524 /* disable beacon filtering */
a1022927 2525 WARN_ON(iwl_mvm_disable_beacon_filter(mvm, vif, 0));
8ca151b5
JB		 2526 ret = 0;
2527 } else if (old_state == IEEE80211_STA_ASSOC &&
2528 new_state == IEEE80211_STA_AUTH) {
8be30c13
AB		 2529 if (vif->type == NL80211_IFTYPE_AP) {
2530 mvmvif->ap_assoc_sta_count--;
2531 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
2532 }
8ca151b5
JB		 2533 ret = 0;
2534 } else if (old_state == IEEE80211_STA_AUTH &&
2535 new_state == IEEE80211_STA_NONE) {
2536 ret = 0;
2537 } else if (old_state == IEEE80211_STA_NONE &&
2538 new_state == IEEE80211_STA_NOTEXIST) {
2539 ret = iwl_mvm_rm_sta(mvm, vif, sta);
1e8f1329 2540 if (sta->tdls) {
fa3d07e4 2541 iwl_mvm_recalc_tdls_state(mvm, vif, false);
1e8f1329
GBA		 2542 iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr,
2543 NL80211_TDLS_DISABLE_LINK);
2544 }
8ca151b5
JB		 2545 } else {
2546 ret = -EIO;
2547 }
48bc1307 2548 out_unlock:
8ca151b5
JB		 2549 mutex_unlock(&mvm->mutex);
2550
9c126cd6
LK		 2551 if (sta->tdls && ret == 0) {
2552 if (old_state == IEEE80211_STA_NOTEXIST &&
2553 new_state == IEEE80211_STA_NONE)
2554 ieee80211_reserve_tid(sta, IWL_MVM_TDLS_FW_TID);
2555 else if (old_state == IEEE80211_STA_NONE &&
2556 new_state == IEEE80211_STA_NOTEXIST)
2557 ieee80211_unreserve_tid(sta, IWL_MVM_TDLS_FW_TID);
2558 }
2559
8ca151b5
JB		 2560 return ret;
2561}
2562
2563static int iwl_mvm_mac_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
2564{
2565 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2566
2567 mvm->rts_threshold = value;
2568
2569 return 0;
2570}
2571
1f3b0ff8
LE		 2572static void iwl_mvm_sta_rc_update(struct ieee80211_hw *hw,
2573 struct ieee80211_vif *vif,
2574 struct ieee80211_sta *sta, u32 changed)
2575{
2576 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2577
2578 if (vif->type == NL80211_IFTYPE_STATION &&
2579 changed & IEEE80211_RC_NSS_CHANGED)
2580 iwl_mvm_sf_update(mvm, vif, false);
2581}
2582
8ca151b5
JB		 2583static int iwl_mvm_mac_conf_tx(struct ieee80211_hw *hw,
2584 struct ieee80211_vif *vif, u16 ac,
2585 const struct ieee80211_tx_queue_params *params)
2586{
2587 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2588 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2589
2590 mvmvif->queue_params[ac] = *params;
2591
2592 /*
2593 * No need to update right away, we'll get BSS_CHANGED_QOS
2594 * The exception is P2P_DEVICE interface which needs immediate update.
2595 */
2596 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
2597 int ret;
2598
2599 mutex_lock(&mvm->mutex);
3dfd3a97 2600 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
8ca151b5
JB		 2601 mutex_unlock(&mvm->mutex);
2602 return ret;
2603 }
2604 return 0;
2605}
2606
2607static void iwl_mvm_mac_mgd_prepare_tx(struct ieee80211_hw *hw,
2608 struct ieee80211_vif *vif)
2609{
2610 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
7c70fee5
SS		 2611 u32 duration = IWL_MVM_TE_SESSION_PROTECTION_MAX_TIME_MS;
2612 u32 min_duration = IWL_MVM_TE_SESSION_PROTECTION_MIN_TIME_MS;
8ca151b5
JB		 2613
2614 if (WARN_ON_ONCE(vif->bss_conf.assoc))
2615 return;
2616
576eeee9
EP		 2617 /*
2618 * iwl_mvm_protect_session() reads directly from the device
2619 * (the system time), so make sure it is available.
2620 */
2621 if (iwl_mvm_ref_sync(mvm, IWL_MVM_REF_PREPARE_TX))
2622 return;
2623
8ca151b5
JB		 2624 mutex_lock(&mvm->mutex);
2625 /* Try really hard to protect the session and hear a beacon */
d20d37bc 2626 iwl_mvm_protect_session(mvm, vif, duration, min_duration, 500, false);
8ca151b5 2627 mutex_unlock(&mvm->mutex);
576eeee9
EP		 2628
2629 iwl_mvm_unref(mvm, IWL_MVM_REF_PREPARE_TX);
8ca151b5
JB		 2630}
2631
35a000b7
DS		 2632static int iwl_mvm_mac_sched_scan_start(struct ieee80211_hw *hw,
2633 struct ieee80211_vif *vif,
2634 struct cfg80211_sched_scan_request *req,
633e2713 2635 struct ieee80211_scan_ies *ies)
35a000b7
DS		 2636{
2637 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
35a000b7 2638
35a000b7 2639 int ret;
4660dfbb 2640
35a000b7
DS		 2641 mutex_lock(&mvm->mutex);
2642
1f940386 2643 if (!vif->bss_conf.idle) {
bd5e4744
DS		 2644 ret = -EBUSY;
2645 goto out;
2646 }
2647
19945dfb 2648 ret = iwl_mvm_sched_scan_start(mvm, vif, req, ies, IWL_MVM_SCAN_SCHED);
d2496221 2649
35a000b7
DS		 2650out:
2651 mutex_unlock(&mvm->mutex);
2652 return ret;
2653}
2654
37e3308c
JB		 2655static int iwl_mvm_mac_sched_scan_stop(struct ieee80211_hw *hw,
2656 struct ieee80211_vif *vif)
35a000b7
DS		 2657{
2658 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
33ea27f6 2659 int ret;
35a000b7
DS		 2660
2661 mutex_lock(&mvm->mutex);
e7d3abab
LC		 2662
2663 /* Due to a race condition, it's possible that mac80211 asks
2664 * us to stop a sched_scan when it's already stopped. This
2665 * can happen, for instance, if we stopped the scan ourselves,
2666 * called ieee80211_sched_scan_stopped() and the userspace called
2667 * stop sched scan scan before ieee80211_sched_scan_stopped_work()
2668 * could run. To handle this, simply return if the scan is
2669 * not running.
2670 */
262888fc 2671 if (!(mvm->scan_status & IWL_MVM_SCAN_SCHED)) {
e7d3abab
LC		 2672 mutex_unlock(&mvm->mutex);
2673 return 0;
2674 }
2675
c7d42480 2676 ret = iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_SCHED, false);
35a000b7 2677 mutex_unlock(&mvm->mutex);
33ea27f6 2678 iwl_mvm_wait_for_async_handlers(mvm);
37e3308c 2679
33ea27f6 2680 return ret;
35a000b7
DS		 2681}
2682
8ca151b5
JB		 2683static int iwl_mvm_mac_set_key(struct ieee80211_hw *hw,
2684 enum set_key_cmd cmd,
2685 struct ieee80211_vif *vif,
2686 struct ieee80211_sta *sta,
2687 struct ieee80211_key_conf *key)
2688{
2689 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
f5e28eac
JB		 2690 struct iwl_mvm_sta *mvmsta;
2691 struct iwl_mvm_key_pn *ptk_pn;
2692 int keyidx = key->keyidx;
8ca151b5 2693 int ret;
d6ee54a9 2694 u8 key_offset;
8ca151b5
JB		 2695
2696 if (iwlwifi_mod_params.sw_crypto) {
2697 IWL_DEBUG_MAC80211(mvm, "leave - hwcrypto disabled\n");
2698 return -EOPNOTSUPP;
2699 }
2700
2701 switch (key->cipher) {
2702 case WLAN_CIPHER_SUITE_TKIP:
2703 key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
1ad4f639 2704 key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE;
8ca151b5 2705 break;
ca8c0f4b
JB		 2706 case WLAN_CIPHER_SUITE_CCMP:
2707 key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE;
2708 break;
8ca151b5 2709 case WLAN_CIPHER_SUITE_AES_CMAC:
30686bf7 2710 WARN_ON_ONCE(!ieee80211_hw_check(hw, MFP_CAPABLE));
8ca151b5
JB		 2711 break;
2712 case WLAN_CIPHER_SUITE_WEP40:
2713 case WLAN_CIPHER_SUITE_WEP104:
ba3943b0
JB		 2714 /* For non-client mode, only use WEP keys for TX as we probably
2715 * don't have a station yet anyway and would then have to keep
2716 * track of the keys, linking them to each of the clients/peers
2717 * as they appear. For now, don't do that, for performance WEP
2718 * offload doesn't really matter much, but we need it for some
2719 * other offload features in client mode.
8ca151b5 2720 */
ba3943b0
JB		 2721 if (vif->type != NL80211_IFTYPE_STATION)
2722 return 0;
2723 break;
8ca151b5 2724 default:
e36e5433
MS		 2725 /* currently FW supports only one optional cipher scheme */
2726 if (hw->n_cipher_schemes &&
2727 hw->cipher_schemes->cipher == key->cipher)
2728 key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE;
2729 else
2730 return -EOPNOTSUPP;
8ca151b5
JB		 2731 }
2732
2733 mutex_lock(&mvm->mutex);
2734
2735 switch (cmd) {
2736 case SET_KEY:
5023d966
JB		 2737 if ((vif->type == NL80211_IFTYPE_ADHOC ||
2738 vif->type == NL80211_IFTYPE_AP) && !sta) {
2739 /*
2740 * GTK on AP interface is a TX-only key, return 0;
2741 * on IBSS they're per-station and because we're lazy
2742 * we don't support them for RX, so do the same.
81279c49 2743 * CMAC in AP/IBSS modes must be done in software.
5023d966 2744 */
81279c49
JB		 2745 if (key->cipher == WLAN_CIPHER_SUITE_AES_CMAC)
2746 ret = -EOPNOTSUPP;
2747 else
2748 ret = 0;
6caffd4f
JB		 2749 key->hw_key_idx = STA_KEY_IDX_INVALID;
2750 break;
2751 }
2752
b546dcd6
JB		 2753 /* During FW restart, in order to restore the state as it was,
2754 * don't try to reprogram keys we previously failed for.
2755 */
2756 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) &&
2757 key->hw_key_idx == STA_KEY_IDX_INVALID) {
2758 IWL_DEBUG_MAC80211(mvm,
2759 "skip invalid idx key programming during restart\n");
2760 ret = 0;
2761 break;
2762 }
2763
f5e28eac
JB		 2764 if (!test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) &&
2765 sta && iwl_mvm_has_new_rx_api(mvm) &&
2766 key->flags & IEEE80211_KEY_FLAG_PAIRWISE &&
2767 (key->cipher == WLAN_CIPHER_SUITE_CCMP ||
2768 key->cipher == WLAN_CIPHER_SUITE_GCMP)) {
2769 struct ieee80211_key_seq seq;
2770 int tid, q;
2771
2772 mvmsta = iwl_mvm_sta_from_mac80211(sta);
2773 WARN_ON(rcu_access_pointer(mvmsta->ptk_pn[keyidx]));
2774 ptk_pn = kzalloc(sizeof(*ptk_pn) +
2775 mvm->trans->num_rx_queues *
2776 sizeof(ptk_pn->q[0]),
2777 GFP_KERNEL);
2778 if (!ptk_pn) {
2779 ret = -ENOMEM;
2780 break;
2781 }
2782
2783 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) {
2784 ieee80211_get_key_rx_seq(key, tid, &seq);
2785 for (q = 0; q < mvm->trans->num_rx_queues; q++)
2786 memcpy(ptk_pn->q[q].pn[tid],
2787 seq.ccmp.pn,
2788 IEEE80211_CCMP_PN_LEN);
2789 }
2790
2791 rcu_assign_pointer(mvmsta->ptk_pn[keyidx], ptk_pn);
2792 }
2793
d6ee54a9
LC		 2794 /* in HW restart reuse the index, otherwise request a new one */
2795 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status))
2796 key_offset = key->hw_key_idx;
2797 else
2798 key_offset = STA_KEY_IDX_INVALID;
2799
8ca151b5 2800 IWL_DEBUG_MAC80211(mvm, "set hwcrypto key\n");
d6ee54a9 2801 ret = iwl_mvm_set_sta_key(mvm, vif, sta, key, key_offset);
8ca151b5
JB		 2802 if (ret) {
2803 IWL_WARN(mvm, "set key failed\n");
2804 /*
2805 * can't add key for RX, but we don't need it
2806 * in the device for TX so still return 0
2807 */
6caffd4f 2808 key->hw_key_idx = STA_KEY_IDX_INVALID;
8ca151b5
JB		 2809 ret = 0;
2810 }
2811
2812 break;
2813 case DISABLE_KEY:
6caffd4f
JB		 2814 if (key->hw_key_idx == STA_KEY_IDX_INVALID) {
2815 ret = 0;
2816 break;
2817 }
2818
f5e28eac
JB		 2819 if (sta && iwl_mvm_has_new_rx_api(mvm) &&
2820 key->flags & IEEE80211_KEY_FLAG_PAIRWISE &&
2821 (key->cipher == WLAN_CIPHER_SUITE_CCMP ||
2822 key->cipher == WLAN_CIPHER_SUITE_GCMP)) {
2823 mvmsta = iwl_mvm_sta_from_mac80211(sta);
2824 ptk_pn = rcu_dereference_protected(
2825 mvmsta->ptk_pn[keyidx],
2826 lockdep_is_held(&mvm->mutex));
2827 RCU_INIT_POINTER(mvmsta->ptk_pn[keyidx], NULL);
2828 if (ptk_pn)
2829 kfree_rcu(ptk_pn, rcu_head);
2830 }
2831
8ca151b5
JB		 2832 IWL_DEBUG_MAC80211(mvm, "disable hwcrypto key\n");
2833 ret = iwl_mvm_remove_sta_key(mvm, vif, sta, key);
2834 break;
2835 default:
2836 ret = -EINVAL;
2837 }
2838
2839 mutex_unlock(&mvm->mutex);
2840 return ret;
2841}
2842
2843static void iwl_mvm_mac_update_tkip_key(struct ieee80211_hw *hw,
2844 struct ieee80211_vif *vif,
2845 struct ieee80211_key_conf *keyconf,
2846 struct ieee80211_sta *sta,
2847 u32 iv32, u16 *phase1key)
2848{
2849 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2850
5023d966
JB		 2851 if (keyconf->hw_key_idx == STA_KEY_IDX_INVALID)
2852 return;
2853
8ca151b5
JB		 2854 iwl_mvm_update_tkip_key(mvm, vif, keyconf, sta, iv32, phase1key);
2855}
2856
2857
b112889c
AM		 2858static bool iwl_mvm_rx_aux_roc(struct iwl_notif_wait_data *notif_wait,
2859 struct iwl_rx_packet *pkt, void *data)
2860{
2861 struct iwl_mvm *mvm =
2862 container_of(notif_wait, struct iwl_mvm, notif_wait);
2863 struct iwl_hs20_roc_res *resp;
2864 int resp_len = iwl_rx_packet_payload_len(pkt);
2865 struct iwl_mvm_time_event_data *te_data = data;
2866
2867 if (WARN_ON(pkt->hdr.cmd != HOT_SPOT_CMD))
2868 return true;
2869
2870 if (WARN_ON_ONCE(resp_len != sizeof(*resp))) {
2871 IWL_ERR(mvm, "Invalid HOT_SPOT_CMD response\n");
2872 return true;
2873 }
2874
2875 resp = (void *)pkt->data;
2876
2877 IWL_DEBUG_TE(mvm,
2878 "Aux ROC: Recieved response from ucode: status=%d uid=%d\n",
2879 resp->status, resp->event_unique_id);
2880
2881 te_data->uid = le32_to_cpu(resp->event_unique_id);
2882 IWL_DEBUG_TE(mvm, "TIME_EVENT_CMD response - UID = 0x%x\n",
2883 te_data->uid);
2884
2885 spin_lock_bh(&mvm->time_event_lock);
2886 list_add_tail(&te_data->list, &mvm->aux_roc_te_list);
2887 spin_unlock_bh(&mvm->time_event_lock);
2888
2889 return true;
2890}
2891
dc28e12f
MG		 2892#define AUX_ROC_MIN_DURATION MSEC_TO_TU(100)
2893#define AUX_ROC_MIN_DELAY MSEC_TO_TU(200)
2894#define AUX_ROC_MAX_DELAY MSEC_TO_TU(600)
2895#define AUX_ROC_SAFETY_BUFFER MSEC_TO_TU(20)
2896#define AUX_ROC_MIN_SAFETY_BUFFER MSEC_TO_TU(10)
b112889c
AM		 2897static int iwl_mvm_send_aux_roc_cmd(struct iwl_mvm *mvm,
2898 struct ieee80211_channel *channel,
2899 struct ieee80211_vif *vif,
2900 int duration)
2901{
2902 int res, time_reg = DEVICE_SYSTEM_TIME_REG;
2903 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2904 struct iwl_mvm_time_event_data *te_data = &mvmvif->hs_time_event_data;
6eb031d2 2905 static const u16 time_event_response[] = { HOT_SPOT_CMD };
b112889c 2906 struct iwl_notification_wait wait_time_event;
dc28e12f
MG		 2907 u32 dtim_interval = vif->bss_conf.dtim_period *
2908 vif->bss_conf.beacon_int;
2909 u32 req_dur, delay;
b112889c
AM		 2910 struct iwl_hs20_roc_req aux_roc_req = {
2911 .action = cpu_to_le32(FW_CTXT_ACTION_ADD),
2912 .id_and_color =
2913 cpu_to_le32(FW_CMD_ID_AND_COLOR(MAC_INDEX_AUX, 0)),
2914 .sta_id_and_color = cpu_to_le32(mvm->aux_sta.sta_id),
2915 /* Set the channel info data */
57fbcce3 2916 .channel_info.band = (channel->band == NL80211_BAND_2GHZ) ?
b112889c
AM		 2917 PHY_BAND_24 : PHY_BAND_5,
2918 .channel_info.channel = channel->hw_value,
2919 .channel_info.width = PHY_VHT_CHANNEL_MODE20,
2920 /* Set the time and duration */
2921 .apply_time = cpu_to_le32(iwl_read_prph(mvm->trans, time_reg)),
b112889c
AM		 2922 };
2923
dc28e12f
MG		 2924 delay = AUX_ROC_MIN_DELAY;
2925 req_dur = MSEC_TO_TU(duration);
2926
2927 /*
2928 * If we are associated we want the delay time to be at least one
2929 * dtim interval so that the FW can wait until after the DTIM and
2930 * then start the time event, this will potentially allow us to
2931 * remain off-channel for the max duration.
2932 * Since we want to use almost a whole dtim interval we would also
2933 * like the delay to be for 2-3 dtim intervals, in case there are
2934 * other time events with higher priority.
2935 */
2936 if (vif->bss_conf.assoc) {
2937 delay = min_t(u32, dtim_interval * 3, AUX_ROC_MAX_DELAY);
2938 /* We cannot remain off-channel longer than the DTIM interval */
2939 if (dtim_interval <= req_dur) {
2940 req_dur = dtim_interval - AUX_ROC_SAFETY_BUFFER;
2941 if (req_dur <= AUX_ROC_MIN_DURATION)
2942 req_dur = dtim_interval -
2943 AUX_ROC_MIN_SAFETY_BUFFER;
2944 }
2945 }
2946
2947 aux_roc_req.duration = cpu_to_le32(req_dur);
2948 aux_roc_req.apply_time_max_delay = cpu_to_le32(delay);
2949
2950 IWL_DEBUG_TE(mvm,
2951 "ROC: Requesting to remain on channel %u for %ums (requested = %ums, max_delay = %ums, dtim_interval = %ums)\n",
2952 channel->hw_value, req_dur, duration, delay,
2953 dtim_interval);
b112889c
AM		 2954 /* Set the node address */
2955 memcpy(aux_roc_req.node_addr, vif->addr, ETH_ALEN);
2956
a6cc5163
MG		 2957 lockdep_assert_held(&mvm->mutex);
2958
2959 spin_lock_bh(&mvm->time_event_lock);
2960
2961 if (WARN_ON(te_data->id == HOT_SPOT_CMD)) {
2962 spin_unlock_bh(&mvm->time_event_lock);
2963 return -EIO;
2964 }
2965
b112889c
AM		 2966 te_data->vif = vif;
2967 te_data->duration = duration;
2968 te_data->id = HOT_SPOT_CMD;
2969
b112889c
AM		 2970 spin_unlock_bh(&mvm->time_event_lock);
2971
2972 /*
2973 * Use a notification wait, which really just processes the
2974 * command response and doesn't wait for anything, in order
2975 * to be able to process the response and get the UID inside
2976 * the RX path. Using CMD_WANT_SKB doesn't work because it
2977 * stores the buffer and then wakes up this thread, by which
2978 * time another notification (that the time event started)
2979 * might already be processed unsuccessfully.
2980 */
2981 iwl_init_notification_wait(&mvm->notif_wait, &wait_time_event,
2982 time_event_response,
2983 ARRAY_SIZE(time_event_response),
2984 iwl_mvm_rx_aux_roc, te_data);
2985
2986 res = iwl_mvm_send_cmd_pdu(mvm, HOT_SPOT_CMD, 0, sizeof(aux_roc_req),
2987 &aux_roc_req);
2988
2989 if (res) {
2990 IWL_ERR(mvm, "Couldn't send HOT_SPOT_CMD: %d\n", res);
2991 iwl_remove_notification(&mvm->notif_wait, &wait_time_event);
2992 goto out_clear_te;
2993 }
2994
2995 /* No need to wait for anything, so just pass 1 (0 isn't valid) */
2996 res = iwl_wait_notification(&mvm->notif_wait, &wait_time_event, 1);
2997 /* should never fail */
2998 WARN_ON_ONCE(res);
2999
3000 if (res) {
3001 out_clear_te:
3002 spin_lock_bh(&mvm->time_event_lock);
3003 iwl_mvm_te_clear_data(mvm, te_data);
3004 spin_unlock_bh(&mvm->time_event_lock);
3005 }
3006
3007 return res;
3008}
3009
8ca151b5
JB		 3010static int iwl_mvm_roc(struct ieee80211_hw *hw,
3011 struct ieee80211_vif *vif,
3012 struct ieee80211_channel *channel,
d339d5ca
IP		 3013 int duration,
3014 enum ieee80211_roc_type type)
8ca151b5
JB		 3015{
3016 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
fe0f2de3 3017 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
8ca151b5 3018 struct cfg80211_chan_def chandef;
31d385ae
IP		 3019 struct iwl_mvm_phy_ctxt *phy_ctxt;
3020 int ret, i;
3021
3022 IWL_DEBUG_MAC80211(mvm, "enter (%d, %d, %d)\n", channel->hw_value,
3023 duration, type);
8ca151b5 3024
6ed13164
MG		 3025 flush_work(&mvm->roc_done_wk);
3026
a6cc5163
MG		 3027 mutex_lock(&mvm->mutex);
3028
b112889c
AM		 3029 switch (vif->type) {
3030 case NL80211_IFTYPE_STATION:
859d914c
JB		 3031 if (fw_has_capa(&mvm->fw->ucode_capa,
3032 IWL_UCODE_TLV_CAPA_HOTSPOT_SUPPORT)) {
5ac6c72e
LC		 3033 /* Use aux roc framework (HS20) */
3034 ret = iwl_mvm_send_aux_roc_cmd(mvm, channel,
3035 vif, duration);
3036 goto out_unlock;
3037 }
3038 IWL_ERR(mvm, "hotspot not supported\n");
3039 ret = -EINVAL;
a6cc5163 3040 goto out_unlock;
b112889c
AM		 3041 case NL80211_IFTYPE_P2P_DEVICE:
3042 /* handle below */
3043 break;
3044 default:
3045 IWL_ERR(mvm, "vif isn't P2P_DEVICE: %d\n", vif->type);
a6cc5163
MG		 3046 ret = -EINVAL;
3047 goto out_unlock;
8ca151b5
JB		 3048 }
3049
31d385ae
IP		 3050 for (i = 0; i < NUM_PHY_CTX; i++) {
3051 phy_ctxt = &mvm->phy_ctxts[i];
3052 if (phy_ctxt->ref == 0 || mvmvif->phy_ctxt == phy_ctxt)
3053 continue;
3054
3055 if (phy_ctxt->ref && channel == phy_ctxt->channel) {
3056 /*
3057 * Unbind the P2P_DEVICE from the current PHY context,
3058 * and if the PHY context is not used remove it.
3059 */
3060 ret = iwl_mvm_binding_remove_vif(mvm, vif);
3061 if (WARN(ret, "Failed unbinding P2P_DEVICE\n"))
3062 goto out_unlock;
3063
3064 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
3065
3066 /* Bind the P2P_DEVICE to the current PHY Context */
3067 mvmvif->phy_ctxt = phy_ctxt;
3068
3069 ret = iwl_mvm_binding_add_vif(mvm, vif);
3070 if (WARN(ret, "Failed binding P2P_DEVICE\n"))
3071 goto out_unlock;
3072
3073 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt);
3074 goto schedule_time_event;
3075 }
3076 }
3077
3078 /* Need to update the PHY context only if the ROC channel changed */
3079 if (channel == mvmvif->phy_ctxt->channel)
3080 goto schedule_time_event;
3081
8ca151b5 3082 cfg80211_chandef_create(&chandef, channel, NL80211_CHAN_NO_HT);
8ca151b5 3083
31d385ae
IP		 3084 /*
3085 * Change the PHY context configuration as it is currently referenced
3086 * only by the P2P Device MAC
3087 */
3088 if (mvmvif->phy_ctxt->ref == 1) {
3089 ret = iwl_mvm_phy_ctxt_changed(mvm, mvmvif->phy_ctxt,
3090 &chandef, 1, 1);
3091 if (ret)
3092 goto out_unlock;
3093 } else {
3094 /*
3095 * The PHY context is shared with other MACs. Need to remove the
3096 * P2P Device from the binding, allocate an new PHY context and
3097 * create a new binding
3098 */
3099 phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm);
3100 if (!phy_ctxt) {
3101 ret = -ENOSPC;
3102 goto out_unlock;
3103 }
3104
3105 ret = iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &chandef,
3106 1, 1);
3107 if (ret) {
3108 IWL_ERR(mvm, "Failed to change PHY context\n");
3109 goto out_unlock;
3110 }
3111
3112 /* Unbind the P2P_DEVICE from the current PHY context */
3113 ret = iwl_mvm_binding_remove_vif(mvm, vif);
3114 if (WARN(ret, "Failed unbinding P2P_DEVICE\n"))
3115 goto out_unlock;
3116
3117 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
3118
3119 /* Bind the P2P_DEVICE to the new allocated PHY context */
3120 mvmvif->phy_ctxt = phy_ctxt;
3121
3122 ret = iwl_mvm_binding_add_vif(mvm, vif);
3123 if (WARN(ret, "Failed binding P2P_DEVICE\n"))
3124 goto out_unlock;
3125
3126 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt);
3127 }
3128
3129schedule_time_event:
8ca151b5 3130 /* Schedule the time events */
e635c797 3131 ret = iwl_mvm_start_p2p_roc(mvm, vif, duration, type);
8ca151b5 3132
31d385ae 3133out_unlock:
8ca151b5
JB		 3134 mutex_unlock(&mvm->mutex);
3135 IWL_DEBUG_MAC80211(mvm, "leave\n");
8ca151b5
JB		 3136 return ret;
3137}
3138
3139static int iwl_mvm_cancel_roc(struct ieee80211_hw *hw)
3140{
3141 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3142
3143 IWL_DEBUG_MAC80211(mvm, "enter\n");
3144
3145 mutex_lock(&mvm->mutex);
bf5da87f 3146 iwl_mvm_stop_roc(mvm);
8ca151b5
JB		 3147 mutex_unlock(&mvm->mutex);
3148
3149 IWL_DEBUG_MAC80211(mvm, "leave\n");
3150 return 0;
3151}
3152
b08c1d97
LC		 3153static int __iwl_mvm_add_chanctx(struct iwl_mvm *mvm,
3154 struct ieee80211_chanctx_conf *ctx)
8ca151b5 3155{
fe0f2de3
IP		 3156 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
3157 struct iwl_mvm_phy_ctxt *phy_ctxt;
8ca151b5
JB		 3158 int ret;
3159
b08c1d97
LC		 3160 lockdep_assert_held(&mvm->mutex);
3161
53a9d61e 3162 IWL_DEBUG_MAC80211(mvm, "Add channel context\n");
fe0f2de3 3163
fe0f2de3
IP		 3164 phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm);
3165 if (!phy_ctxt) {
3166 ret = -ENOSPC;
3167 goto out;
3168 }
8ca151b5 3169
dcbc3e1a 3170 ret = iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &ctx->min_def,
53a9d61e
IP		 3171 ctx->rx_chains_static,
3172 ctx->rx_chains_dynamic);
fe0f2de3
IP		 3173 if (ret) {
3174 IWL_ERR(mvm, "Failed to add PHY context\n");
3175 goto out;
3176 }
3177
53a9d61e 3178 iwl_mvm_phy_ctxt_ref(mvm, phy_ctxt);
fe0f2de3
IP		 3179 *phy_ctxt_id = phy_ctxt->id;
3180out:
b08c1d97
LC		 3181 return ret;
3182}
3183
3184static int iwl_mvm_add_chanctx(struct ieee80211_hw *hw,
3185 struct ieee80211_chanctx_conf *ctx)
3186{
3187 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3188 int ret;
3189
3190 mutex_lock(&mvm->mutex);
3191 ret = __iwl_mvm_add_chanctx(mvm, ctx);
8ca151b5 3192 mutex_unlock(&mvm->mutex);
b08c1d97 3193
8ca151b5
JB		 3194 return ret;
3195}
3196
b08c1d97
LC		 3197static void __iwl_mvm_remove_chanctx(struct iwl_mvm *mvm,
3198 struct ieee80211_chanctx_conf *ctx)
3199{
3200 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
3201 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id];
3202
3203 lockdep_assert_held(&mvm->mutex);
3204
3205 iwl_mvm_phy_ctxt_unref(mvm, phy_ctxt);
3206}
3207
8ca151b5
JB		 3208static void iwl_mvm_remove_chanctx(struct ieee80211_hw *hw,
3209 struct ieee80211_chanctx_conf *ctx)
3210{
3211 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
8ca151b5
JB		 3212
3213 mutex_lock(&mvm->mutex);
b08c1d97 3214 __iwl_mvm_remove_chanctx(mvm, ctx);
8ca151b5
JB		 3215 mutex_unlock(&mvm->mutex);
3216}
3217
3218static void iwl_mvm_change_chanctx(struct ieee80211_hw *hw,
3219 struct ieee80211_chanctx_conf *ctx,
3220 u32 changed)
3221{
3222 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
fe0f2de3
IP		 3223 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
3224 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id];
8ca151b5 3225
31d385ae
IP		 3226 if (WARN_ONCE((phy_ctxt->ref > 1) &&
3227 (changed & ~(IEEE80211_CHANCTX_CHANGE_WIDTH |
3228 IEEE80211_CHANCTX_CHANGE_RX_CHAINS |
2dceedae
AN		 3229 IEEE80211_CHANCTX_CHANGE_RADAR |
3230 IEEE80211_CHANCTX_CHANGE_MIN_WIDTH)),
31d385ae
IP		 3231 "Cannot change PHY. Ref=%d, changed=0x%X\n",
3232 phy_ctxt->ref, changed))
3233 return;
3234
8ca151b5 3235 mutex_lock(&mvm->mutex);
4d66449a 3236 iwl_mvm_bt_coex_vif_change(mvm);
dcbc3e1a 3237 iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &ctx->min_def,
8ca151b5
JB		 3238 ctx->rx_chains_static,
3239 ctx->rx_chains_dynamic);
3240 mutex_unlock(&mvm->mutex);
3241}
3242
b08c1d97
LC		 3243static int __iwl_mvm_assign_vif_chanctx(struct iwl_mvm *mvm,
3244 struct ieee80211_vif *vif,
f0c97783
LC		 3245 struct ieee80211_chanctx_conf *ctx,
3246 bool switching_chanctx)
8ca151b5 3247{
fe0f2de3
IP		 3248 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
3249 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id];
8ca151b5
JB		 3250 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3251 int ret;
3252
b08c1d97 3253 lockdep_assert_held(&mvm->mutex);
8ca151b5 3254
fe0f2de3 3255 mvmvif->phy_ctxt = phy_ctxt;
8ca151b5
JB		 3256
3257 switch (vif->type) {
3258 case NL80211_IFTYPE_AP:
4741dd04
LC		 3259 /* only needed if we're switching chanctx (i.e. during CSA) */
3260 if (switching_chanctx) {
bd3398e2
AO		 3261 mvmvif->ap_ibss_active = true;
3262 break;
3263 }
5023d966 3264 case NL80211_IFTYPE_ADHOC:
8ca151b5
JB		 3265 /*
3266 * The AP binding flow is handled as part of the start_ap flow
5023d966 3267 * (in bss_info_changed), similarly for IBSS.
8ca151b5
JB		 3268 */
3269 ret = 0;
b08c1d97 3270 goto out;
8ca151b5 3271 case NL80211_IFTYPE_STATION:
2533edce 3272 break;
8ca151b5 3273 case NL80211_IFTYPE_MONITOR:
2533edce
LC		 3274 /* always disable PS when a monitor interface is active */
3275 mvmvif->ps_disabled = true;
8ca151b5
JB		 3276 break;
3277 default:
3278 ret = -EINVAL;
b08c1d97 3279 goto out;
8ca151b5
JB		 3280 }
3281
3282 ret = iwl_mvm_binding_add_vif(mvm, vif);
3283 if (ret)
b08c1d97 3284 goto out;
8ca151b5
JB		 3285
3286 /*
92d85562
AB		 3287 * Power state must be updated before quotas,
3288 * otherwise fw will complain.
3289 */
999609f1 3290 iwl_mvm_power_update_mac(mvm);
92d85562
AB		 3291
3292 /* Setting the quota at this stage is only required for monitor
8ca151b5
JB		 3293 * interfaces. For the other types, the bss_info changed flow
3294 * will handle quota settings.
3295 */
3296 if (vif->type == NL80211_IFTYPE_MONITOR) {
1e1391ca 3297 mvmvif->monitor_active = true;
7754ae79 3298 ret = iwl_mvm_update_quotas(mvm, false, NULL);
8ca151b5
JB		 3299 if (ret)
3300 goto out_remove_binding;
0e39eb03
CRI		 3301
3302 ret = iwl_mvm_add_snif_sta(mvm, vif);
3303 if (ret)
3304 goto out_remove_binding;
3305
8ca151b5
JB		 3306 }
3307
bd3398e2 3308 /* Handle binding during CSA */
a57c688d 3309 if (vif->type == NL80211_IFTYPE_AP) {
7754ae79 3310 iwl_mvm_update_quotas(mvm, false, NULL);
3dfd3a97 3311 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
bd3398e2
AO		 3312 }
3313
4741dd04 3314 if (switching_chanctx && vif->type == NL80211_IFTYPE_STATION) {
686e7fe1
LC		 3315 u32 duration = 2 * vif->bss_conf.beacon_int;
3316
3317 /* iwl_mvm_protect_session() reads directly from the
3318 * device (the system time), so make sure it is
3319 * available.
3320 */
3321 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_PROTECT_CSA);
3322 if (ret)
3323 goto out_remove_binding;
3324
3325 /* Protect the session to make sure we hear the first
3326 * beacon on the new channel.
3327 */
3328 iwl_mvm_protect_session(mvm, vif, duration, duration,
3329 vif->bss_conf.beacon_int / 2,
3330 true);
3331
3332 iwl_mvm_unref(mvm, IWL_MVM_REF_PROTECT_CSA);
3333
7754ae79 3334 iwl_mvm_update_quotas(mvm, false, NULL);
0ce04ce7
LC		 3335 }
3336
b08c1d97 3337 goto out;
8ca151b5 3338
b08c1d97 3339out_remove_binding:
8ca151b5 3340 iwl_mvm_binding_remove_vif(mvm, vif);
999609f1 3341 iwl_mvm_power_update_mac(mvm);
b08c1d97 3342out:
8ca151b5
JB		 3343 if (ret)
3344 mvmvif->phy_ctxt = NULL;
3345 return ret;
3346}
b08c1d97
LC		 3347static int iwl_mvm_assign_vif_chanctx(struct ieee80211_hw *hw,
3348 struct ieee80211_vif *vif,
3349 struct ieee80211_chanctx_conf *ctx)
8ca151b5
JB		 3350{
3351 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
b08c1d97 3352 int ret;
8ca151b5
JB		 3353
3354 mutex_lock(&mvm->mutex);
f0c97783 3355 ret = __iwl_mvm_assign_vif_chanctx(mvm, vif, ctx, false);
b08c1d97
LC		 3356 mutex_unlock(&mvm->mutex);
3357
3358 return ret;
3359}
3360
3361static void __iwl_mvm_unassign_vif_chanctx(struct iwl_mvm *mvm,
3362 struct ieee80211_vif *vif,
f0c97783
LC		 3363 struct ieee80211_chanctx_conf *ctx,
3364 bool switching_chanctx)
b08c1d97
LC		 3365{
3366 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
f0c97783 3367 struct ieee80211_vif *disabled_vif = NULL;
b08c1d97
LC		 3368
3369 lockdep_assert_held(&mvm->mutex);
8ca151b5
JB		 3370
3371 iwl_mvm_remove_time_event(mvm, mvmvif, &mvmvif->time_event_data);
3372
8ca151b5 3373 switch (vif->type) {
5023d966 3374 case NL80211_IFTYPE_ADHOC:
b08c1d97 3375 goto out;
8ca151b5 3376 case NL80211_IFTYPE_MONITOR:
1e1391ca 3377 mvmvif->monitor_active = false;
2533edce 3378 mvmvif->ps_disabled = false;
0e39eb03 3379 iwl_mvm_rm_snif_sta(mvm, vif);
8ca151b5 3380 break;
bd3398e2
AO		 3381 case NL80211_IFTYPE_AP:
3382 /* This part is triggered only during CSA */
4741dd04 3383 if (!switching_chanctx || !mvmvif->ap_ibss_active)
b08c1d97 3384 goto out;
bd3398e2 3385
7ef0aab6
AO		 3386 mvmvif->csa_countdown = false;
3387
003e5236
AO		 3388 /* Set CS bit on all the stations */
3389 iwl_mvm_modify_all_sta_disable_tx(mvm, mvmvif, true);
3390
3391 /* Save blocked iface, the timeout is set on the next beacon */
3392 rcu_assign_pointer(mvm->csa_tx_blocked_vif, vif);
3393
bd3398e2 3394 mvmvif->ap_ibss_active = false;
f0c97783
LC		 3395 break;
3396 case NL80211_IFTYPE_STATION:
3397 if (!switching_chanctx)
3398 break;
3399
3400 disabled_vif = vif;
3401
3dfd3a97 3402 iwl_mvm_mac_ctxt_changed(mvm, vif, true, NULL);
f0c97783 3403 break;
8ca151b5
JB		 3404 default:
3405 break;
3406 }
3407
7754ae79 3408 iwl_mvm_update_quotas(mvm, false, disabled_vif);
1e1391ca 3409 iwl_mvm_binding_remove_vif(mvm, vif);
1c2abf72 3410
b08c1d97 3411out:
a11e144e 3412 mvmvif->phy_ctxt = NULL;
999609f1 3413 iwl_mvm_power_update_mac(mvm);
b08c1d97
LC		 3414}
3415
3416static void iwl_mvm_unassign_vif_chanctx(struct ieee80211_hw *hw,
3417 struct ieee80211_vif *vif,
3418 struct ieee80211_chanctx_conf *ctx)
3419{
3420 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3421
3422 mutex_lock(&mvm->mutex);
f0c97783 3423 __iwl_mvm_unassign_vif_chanctx(mvm, vif, ctx, false);
8ca151b5
JB		 3424 mutex_unlock(&mvm->mutex);
3425}
3426
50cc9574
LC		 3427static int
3428iwl_mvm_switch_vif_chanctx_swap(struct iwl_mvm *mvm,
3429 struct ieee80211_vif_chanctx_switch *vifs)
b08c1d97 3430{
b08c1d97
LC		 3431 int ret;
3432
b08c1d97 3433 mutex_lock(&mvm->mutex);
f0c97783 3434 __iwl_mvm_unassign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, true);
b08c1d97
LC		 3435 __iwl_mvm_remove_chanctx(mvm, vifs[0].old_ctx);
3436
3437 ret = __iwl_mvm_add_chanctx(mvm, vifs[0].new_ctx);
3438 if (ret) {
3439 IWL_ERR(mvm, "failed to add new_ctx during channel switch\n");
3440 goto out_reassign;
3441 }
3442
f0c97783
LC		 3443 ret = __iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].new_ctx,
3444 true);
b08c1d97
LC		 3445 if (ret) {
3446 IWL_ERR(mvm,
3447 "failed to assign new_ctx during channel switch\n");
3448 goto out_remove;
3449 }
3450
f697267f
AN		 3451 /* we don't support TDLS during DCM - can be caused by channel switch */
3452 if (iwl_mvm_phy_ctx_count(mvm) > 1)
3453 iwl_mvm_teardown_tdls_peers(mvm);
3454
b08c1d97
LC		 3455 goto out;
3456
3457out_remove:
3458 __iwl_mvm_remove_chanctx(mvm, vifs[0].new_ctx);
3459
3460out_reassign:
6fd1fb63 3461 if (__iwl_mvm_add_chanctx(mvm, vifs[0].old_ctx)) {
b08c1d97
LC		 3462 IWL_ERR(mvm, "failed to add old_ctx back after failure.\n");
3463 goto out_restart;
3464 }
3465
6fd1fb63
LC		 3466 if (__iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx,
3467 true)) {
b08c1d97
LC		 3468 IWL_ERR(mvm, "failed to reassign old_ctx after failure.\n");
3469 goto out_restart;
3470 }
3471
3472 goto out;
3473
3474out_restart:
3475 /* things keep failing, better restart the hw */
3476 iwl_mvm_nic_restart(mvm, false);
3477
3478out:
3479 mutex_unlock(&mvm->mutex);
50cc9574
LC		 3480
3481 return ret;
3482}
3483
48a256e8
LC		 3484static int
3485iwl_mvm_switch_vif_chanctx_reassign(struct iwl_mvm *mvm,
3486 struct ieee80211_vif_chanctx_switch *vifs)
3487{
3488 int ret;
3489
3490 mutex_lock(&mvm->mutex);
3491 __iwl_mvm_unassign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, true);
3492
3493 ret = __iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].new_ctx,
3494 true);
3495 if (ret) {
3496 IWL_ERR(mvm,
3497 "failed to assign new_ctx during channel switch\n");
3498 goto out_reassign;
3499 }
3500
3501 goto out;
3502
3503out_reassign:
3504 if (__iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx,
3505 true)) {
3506 IWL_ERR(mvm, "failed to reassign old_ctx after failure.\n");
3507 goto out_restart;
3508 }
3509
3510 goto out;
3511
3512out_restart:
3513 /* things keep failing, better restart the hw */
3514 iwl_mvm_nic_restart(mvm, false);
3515
3516out:
3517 mutex_unlock(&mvm->mutex);
3518
3519 return ret;
3520}
3521
50cc9574
LC		 3522static int iwl_mvm_switch_vif_chanctx(struct ieee80211_hw *hw,
3523 struct ieee80211_vif_chanctx_switch *vifs,
3524 int n_vifs,
3525 enum ieee80211_chanctx_switch_mode mode)
3526{
3527 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3528 int ret;
3529
3530 /* we only support a single-vif right now */
3531 if (n_vifs > 1)
3532 return -EOPNOTSUPP;
3533
3534 switch (mode) {
3535 case CHANCTX_SWMODE_SWAP_CONTEXTS:
3536 ret = iwl_mvm_switch_vif_chanctx_swap(mvm, vifs);
3537 break;
3538 case CHANCTX_SWMODE_REASSIGN_VIF:
48a256e8 3539 ret = iwl_mvm_switch_vif_chanctx_reassign(mvm, vifs);
50cc9574
LC		 3540 break;
3541 default:
3542 ret = -EOPNOTSUPP;
3543 break;
3544 }
3545
b08c1d97
LC		 3546 return ret;
3547}
3548
8ca151b5
JB		 3549static int iwl_mvm_set_tim(struct ieee80211_hw *hw,
3550 struct ieee80211_sta *sta,
3551 bool set)
3552{
3553 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
9d8ce6af 3554 struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta);
8ca151b5
JB		 3555
3556 if (!mvm_sta || !mvm_sta->vif) {
3557 IWL_ERR(mvm, "Station is not associated to a vif\n");
3558 return -EINVAL;
3559 }
3560
3561 return iwl_mvm_mac_ctxt_beacon_changed(mvm, mvm_sta->vif);
3562}
3563
507cadf2
DS		 3564#ifdef CONFIG_NL80211_TESTMODE
3565static const struct nla_policy iwl_mvm_tm_policy[IWL_MVM_TM_ATTR_MAX + 1] = {
3566 [IWL_MVM_TM_ATTR_CMD] = { .type = NLA_U32 },
3567 [IWL_MVM_TM_ATTR_NOA_DURATION] = { .type = NLA_U32 },
f6c6ad42 3568 [IWL_MVM_TM_ATTR_BEACON_FILTER_STATE] = { .type = NLA_U32 },
507cadf2
DS		 3569};
3570
3571static int __iwl_mvm_mac_testmode_cmd(struct iwl_mvm *mvm,
3572 struct ieee80211_vif *vif,
3573 void *data, int len)
3574{
3575 struct nlattr *tb[IWL_MVM_TM_ATTR_MAX + 1];
3576 int err;
3577 u32 noa_duration;
3578
3579 err = nla_parse(tb, IWL_MVM_TM_ATTR_MAX, data, len, iwl_mvm_tm_policy);
3580 if (err)
3581 return err;
3582
3583 if (!tb[IWL_MVM_TM_ATTR_CMD])
3584 return -EINVAL;
3585
3586 switch (nla_get_u32(tb[IWL_MVM_TM_ATTR_CMD])) {
3587 case IWL_MVM_TM_CMD_SET_NOA:
3588 if (!vif || vif->type != NL80211_IFTYPE_AP || !vif->p2p ||
3589 !vif->bss_conf.enable_beacon ||
3590 !tb[IWL_MVM_TM_ATTR_NOA_DURATION])
3591 return -EINVAL;
3592
3593 noa_duration = nla_get_u32(tb[IWL_MVM_TM_ATTR_NOA_DURATION]);
3594 if (noa_duration >= vif->bss_conf.beacon_int)
3595 return -EINVAL;
3596
3597 mvm->noa_duration = noa_duration;
3598 mvm->noa_vif = vif;
3599
7754ae79 3600 return iwl_mvm_update_quotas(mvm, false, NULL);
f6c6ad42
JB		 3601 case IWL_MVM_TM_CMD_SET_BEACON_FILTER:
3602 /* must be associated client vif - ignore authorized */
3603 if (!vif || vif->type != NL80211_IFTYPE_STATION ||
3604 !vif->bss_conf.assoc || !vif->bss_conf.dtim_period ||
3605 !tb[IWL_MVM_TM_ATTR_BEACON_FILTER_STATE])
3606 return -EINVAL;
3607
3608 if (nla_get_u32(tb[IWL_MVM_TM_ATTR_BEACON_FILTER_STATE]))
a1022927
EG		 3609 return iwl_mvm_enable_beacon_filter(mvm, vif, 0);
3610 return iwl_mvm_disable_beacon_filter(mvm, vif, 0);
507cadf2
DS		 3611 }
3612
3613 return -EOPNOTSUPP;
3614}
3615
3616static int iwl_mvm_mac_testmode_cmd(struct ieee80211_hw *hw,
3617 struct ieee80211_vif *vif,
3618 void *data, int len)
3619{
3620 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3621 int err;
3622
3623 mutex_lock(&mvm->mutex);
3624 err = __iwl_mvm_mac_testmode_cmd(mvm, vif, data, len);
3625 mutex_unlock(&mvm->mutex);
3626
3627 return err;
3628}
3629#endif
3630
622e3f9b
LC		 3631static void iwl_mvm_channel_switch(struct ieee80211_hw *hw,
3632 struct ieee80211_vif *vif,
3633 struct ieee80211_channel_switch *chsw)
3634{
3635 /* By implementing this operation, we prevent mac80211 from
3636 * starting its own channel switch timer, so that we can call
3637 * ieee80211_chswitch_done() ourselves at the right time
3638 * (which is when the absence time event starts).
3639 */
3640
3641 IWL_DEBUG_MAC80211(IWL_MAC80211_GET_MVM(hw),
3642 "dummy channel switch op\n");
3643}
3644
f028905c
LC		 3645static int iwl_mvm_pre_channel_switch(struct ieee80211_hw *hw,
3646 struct ieee80211_vif *vif,
3647 struct ieee80211_channel_switch *chsw)
bd3398e2
AO		 3648{
3649 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
664322fa 3650 struct ieee80211_vif *csa_vif;
f6c34820 3651 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
dc88b4ba 3652 u32 apply_time;
f028905c 3653 int ret;
bd3398e2
AO		 3654
3655 mutex_lock(&mvm->mutex);
664322fa 3656
81d62d5a
JB		 3657 mvmvif->csa_failed = false;
3658
6b20d774 3659 IWL_DEBUG_MAC80211(mvm, "pre CSA to freq %d\n",
f028905c 3660 chsw->chandef.center_freq1);
6b20d774 3661
21023b1e 3662 iwl_fw_dbg_trigger_simple_stop(mvm, vif, FW_DBG_TRIGGER_CHANNEL_SWITCH);
f35d9c55 3663
6b20d774
LC		 3664 switch (vif->type) {
3665 case NL80211_IFTYPE_AP:
3666 csa_vif =
3667 rcu_dereference_protected(mvm->csa_vif,
3668 lockdep_is_held(&mvm->mutex));
3669 if (WARN_ONCE(csa_vif && csa_vif->csa_active,
3670 "Another CSA is already in progress")) {
3671 ret = -EBUSY;
3672 goto out_unlock;
3673 }
3674
3675 rcu_assign_pointer(mvm->csa_vif, vif);
7ef0aab6 3676
7ef0aab6
AO		 3677 if (WARN_ONCE(mvmvif->csa_countdown,
3678 "Previous CSA countdown didn't complete")) {
3679 ret = -EBUSY;
3680 goto out_unlock;
3681 }
3682
6b20d774 3683 break;
dc88b4ba 3684 case NL80211_IFTYPE_STATION:
03098268
AE		 3685 if (mvmvif->lqm_active)
3686 iwl_mvm_send_lqm_cmd(vif,
3687 LQM_CMD_OPERATION_STOP_MEASUREMENT,
3688 0, 0);
3689
4500e133
LC		 3690 /* Schedule the time event to a bit before beacon 1,
3691 * to make sure we're in the new channel when the
3692 * GO/AP arrives.
3693 */
3694 apply_time = chsw->device_timestamp +
3695 ((vif->bss_conf.beacon_int * (chsw->count - 1) -
3696 IWL_MVM_CHANNEL_SWITCH_TIME_CLIENT) * 1024);
dc88b4ba
LC		 3697
3698 if (chsw->block_tx)
3699 iwl_mvm_csa_client_absent(mvm, vif);
3700
4500e133 3701 iwl_mvm_schedule_csa_period(mvm, vif, vif->bss_conf.beacon_int,
dc88b4ba 3702 apply_time);
c6e0a3e0
LC		 3703 if (mvmvif->bf_data.bf_enabled) {
3704 ret = iwl_mvm_disable_beacon_filter(mvm, vif, 0);
3705 if (ret)
3706 goto out_unlock;
3707 }
3708
dc88b4ba 3709 break;
6b20d774
LC		 3710 default:
3711 break;
3712 }
bd3398e2 3713
f6c34820
LC		 3714 mvmvif->ps_disabled = true;
3715
3716 ret = iwl_mvm_power_update_ps(mvm);
3717 if (ret)
3718 goto out_unlock;
f028905c 3719
e198f5e7
AN		 3720 /* we won't be on this channel any longer */
3721 iwl_mvm_teardown_tdls_peers(mvm);
3722
bd3398e2
AO		 3723out_unlock:
3724 mutex_unlock(&mvm->mutex);
f028905c
LC		 3725
3726 return ret;
bd3398e2
AO		 3727}
3728
f6c34820
LC		 3729static int iwl_mvm_post_channel_switch(struct ieee80211_hw *hw,
3730 struct ieee80211_vif *vif)
3731{
3732 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3733 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3734 int ret;
3735
3736 mutex_lock(&mvm->mutex);
3737
81d62d5a
JB		 3738 if (mvmvif->csa_failed) {
3739 mvmvif->csa_failed = false;
3740 ret = -EIO;
3741 goto out_unlock;
3742 }
3743
a57c688d
LC		 3744 if (vif->type == NL80211_IFTYPE_STATION) {
3745 struct iwl_mvm_sta *mvmsta;
3746
3747 mvmsta = iwl_mvm_sta_from_staid_protected(mvm,
3748 mvmvif->ap_sta_id);
3749
3750 if (WARN_ON(!mvmsta)) {
3751 ret = -EIO;
3752 goto out_unlock;
3753 }
3754
3755 iwl_mvm_sta_modify_disable_tx(mvm, mvmsta, false);
3756
3757 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
c6e0a3e0
LC		 3758
3759 ret = iwl_mvm_enable_beacon_filter(mvm, vif, 0);
3760 if (ret)
3761 goto out_unlock;
686e7fe1
LC		 3762
3763 iwl_mvm_stop_session_protection(mvm, vif);
a57c688d
LC		 3764 }
3765
f6c34820
LC		 3766 mvmvif->ps_disabled = false;
3767
3768 ret = iwl_mvm_power_update_ps(mvm);
3769
a57c688d 3770out_unlock:
f6c34820
LC		 3771 mutex_unlock(&mvm->mutex);
3772
3773 return ret;
3774}
3775
c5b0e7c0
EG		 3776static void iwl_mvm_mac_flush(struct ieee80211_hw *hw,
3777 struct ieee80211_vif *vif, u32 queues, bool drop)
3778{
3779 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3780 struct iwl_mvm_vif *mvmvif;
3781 struct iwl_mvm_sta *mvmsta;
a0f6bf2a
AN		 3782 struct ieee80211_sta *sta;
3783 int i;
3784 u32 msk = 0;
c5b0e7c0
EG		 3785
3786 if (!vif || vif->type != NL80211_IFTYPE_STATION)
3787 return;
3788
24afba76
LK		 3789 /* Make sure we're done with the deferred traffic before flushing */
3790 if (iwl_mvm_is_dqa_supported(mvm))
3791 flush_work(&mvm->add_stream_wk);
3792
c5b0e7c0
EG		 3793 mutex_lock(&mvm->mutex);
3794 mvmvif = iwl_mvm_vif_from_mac80211(vif);
c5b0e7c0 3795
a0f6bf2a
AN		 3796 /* flush the AP-station and all TDLS peers */
3797 for (i = 0; i < IWL_MVM_STATION_COUNT; i++) {
3798 sta = rcu_dereference_protected(mvm->fw_id_to_mac_id[i],
3799 lockdep_is_held(&mvm->mutex));
3800 if (IS_ERR_OR_NULL(sta))
3801 continue;
3802
3803 mvmsta = iwl_mvm_sta_from_mac80211(sta);
3804 if (mvmsta->vif != vif)
3805 continue;
3806
3807 /* make sure only TDLS peers or the AP are flushed */
3808 WARN_ON(i != mvmvif->ap_sta_id && !sta->tdls);
3809
3810 msk |= mvmsta->tfd_queue_msk;
480acbce 3811 }
c5b0e7c0 3812
6d440b25 3813 if (drop) {
5888a40c 3814 if (iwl_mvm_flush_tx_path(mvm, msk, 0))
6d440b25
EG		 3815 IWL_ERR(mvm, "flush request fail\n");
3816 mutex_unlock(&mvm->mutex);
3817 } else {
3818 mutex_unlock(&mvm->mutex);
4e6c48e0 3819
6d440b25
EG		 3820 /* this can take a while, and we may need/want other operations
3821 * to succeed while doing this, so do it without the mutex held
3822 */
3823 iwl_trans_wait_tx_queue_empty(mvm->trans, msk);
3824 }
c5b0e7c0
EG		 3825}
3826
91a8bcde
JB		 3827static int iwl_mvm_mac_get_survey(struct ieee80211_hw *hw, int idx,
3828 struct survey_info *survey)
3829{
3830 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3831 int ret;
3832
3833 memset(survey, 0, sizeof(*survey));
3834
3835 /* only support global statistics right now */
3836 if (idx != 0)
3837 return -ENOENT;
3838
859d914c 3839 if (fw_has_capa(&mvm->fw->ucode_capa,
91a8bcde
JB		 3840 IWL_UCODE_TLV_CAPA_RADIO_BEACON_STATS))
3841 return -ENOENT;
3842
3843 mutex_lock(&mvm->mutex);
3844
3845 if (mvm->ucode_loaded) {
33cef925 3846 ret = iwl_mvm_request_statistics(mvm, false);
91a8bcde
JB		 3847 if (ret)
3848 goto out;
3849 }
3850
3851 survey->filled = SURVEY_INFO_TIME |
3852 SURVEY_INFO_TIME_RX |
3853 SURVEY_INFO_TIME_TX |
3854 SURVEY_INFO_TIME_SCAN;
3855 survey->time = mvm->accu_radio_stats.on_time_rf +
3856 mvm->radio_stats.on_time_rf;
3857 do_div(survey->time, USEC_PER_MSEC);
3858
3859 survey->time_rx = mvm->accu_radio_stats.rx_time +
3860 mvm->radio_stats.rx_time;
3861 do_div(survey->time_rx, USEC_PER_MSEC);
3862
3863 survey->time_tx = mvm->accu_radio_stats.tx_time +
3864 mvm->radio_stats.tx_time;
3865 do_div(survey->time_tx, USEC_PER_MSEC);
3866
3867 survey->time_scan = mvm->accu_radio_stats.on_time_scan +
3868 mvm->radio_stats.on_time_scan;
3869 do_div(survey->time_scan, USEC_PER_MSEC);
3870
10a7c028 3871 ret = 0;
91a8bcde
JB		 3872 out:
3873 mutex_unlock(&mvm->mutex);
3874 return ret;
3875}
3876
33cef925
JB		 3877static void iwl_mvm_mac_sta_statistics(struct ieee80211_hw *hw,
3878 struct ieee80211_vif *vif,
3879 struct ieee80211_sta *sta,
3880 struct station_info *sinfo)
3881{
3882 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3883 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3884 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
3885
859d914c
JB		 3886 if (fw_has_capa(&mvm->fw->ucode_capa,
3887 IWL_UCODE_TLV_CAPA_RADIO_BEACON_STATS))
33cef925
JB		 3888 return;
3889
3890 /* if beacon filtering isn't on mac80211 does it anyway */
3891 if (!(vif->driver_flags & IEEE80211_VIF_BEACON_FILTER))
3892 return;
3893
3894 if (!vif->bss_conf.assoc)
3895 return;
3896
3897 mutex_lock(&mvm->mutex);
3898
3899 if (mvmvif->ap_sta_id != mvmsta->sta_id)
3900 goto unlock;
3901
3902 if (iwl_mvm_request_statistics(mvm, false))
3903 goto unlock;
3904
3905 sinfo->rx_beacon = mvmvif->beacon_stats.num_beacons +
3906 mvmvif->beacon_stats.accu_num_beacons;
3907 sinfo->filled |= BIT(NL80211_STA_INFO_BEACON_RX);
3908 if (mvmvif->beacon_stats.avg_signal) {
3909 /* firmware only reports a value after RXing a few beacons */
3910 sinfo->rx_beacon_signal_avg = mvmvif->beacon_stats.avg_signal;
3911 sinfo->filled |= BIT(NL80211_STA_INFO_BEACON_SIGNAL_AVG);
3912 }
3913 unlock:
3914 mutex_unlock(&mvm->mutex);
3915}
3916
4203263d
EG		 3917static void iwl_mvm_event_mlme_callback(struct iwl_mvm *mvm,
3918 struct ieee80211_vif *vif,
3919 const struct ieee80211_event *event)
d42f5350 3920{
5d4f929e 3921#define CHECK_MLME_TRIGGER(_mvm, _trig, _buf, _cnt, _fmt...) \
d42f5350
EG		 3922 do { \
3923 if ((_cnt) && --(_cnt)) \
3924 break; \
5d4f929e 3925 iwl_mvm_fw_dbg_collect_trig(_mvm, _trig, _fmt);\
d42f5350
EG		 3926 } while (0)
3927
d42f5350
EG		 3928 struct iwl_fw_dbg_trigger_tlv *trig;
3929 struct iwl_fw_dbg_trigger_mlme *trig_mlme;
d42f5350
EG		 3930
3931 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_MLME))
3932 return;
3933
d42f5350
EG		 3934 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_MLME);
3935 trig_mlme = (void *)trig->data;
3936 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig))
3937 return;
3938
d42f5350
EG		 3939 if (event->u.mlme.data == ASSOC_EVENT) {
3940 if (event->u.mlme.status == MLME_DENIED)
3941 CHECK_MLME_TRIGGER(mvm, trig, buf,
3942 trig_mlme->stop_assoc_denied,
3943 "DENIED ASSOC: reason %d",
3944 event->u.mlme.reason);
3945 else if (event->u.mlme.status == MLME_TIMEOUT)
3946 CHECK_MLME_TRIGGER(mvm, trig, buf,
3947 trig_mlme->stop_assoc_timeout,
3948 "ASSOC TIMEOUT");
3949 } else if (event->u.mlme.data == AUTH_EVENT) {
3950 if (event->u.mlme.status == MLME_DENIED)
3951 CHECK_MLME_TRIGGER(mvm, trig, buf,
3952 trig_mlme->stop_auth_denied,
3953 "DENIED AUTH: reason %d",
3954 event->u.mlme.reason);
3955 else if (event->u.mlme.status == MLME_TIMEOUT)
3956 CHECK_MLME_TRIGGER(mvm, trig, buf,
3957 trig_mlme->stop_auth_timeout,
3958 "AUTH TIMEOUT");
3959 } else if (event->u.mlme.data == DEAUTH_RX_EVENT) {
3960 CHECK_MLME_TRIGGER(mvm, trig, buf,
3961 trig_mlme->stop_rx_deauth,
3962 "DEAUTH RX %d", event->u.mlme.reason);
3963 } else if (event->u.mlme.data == DEAUTH_TX_EVENT) {
3964 CHECK_MLME_TRIGGER(mvm, trig, buf,
3965 trig_mlme->stop_tx_deauth,
3966 "DEAUTH TX %d", event->u.mlme.reason);
3967 }
3968#undef CHECK_MLME_TRIGGER
3969}
3970
4203263d
EG		 3971static void iwl_mvm_event_bar_rx_callback(struct iwl_mvm *mvm,
3972 struct ieee80211_vif *vif,
3973 const struct ieee80211_event *event)
3974{
3975 struct iwl_fw_dbg_trigger_tlv *trig;
3976 struct iwl_fw_dbg_trigger_ba *ba_trig;
3977
3978 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_BA))
3979 return;
3980
3981 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_BA);
3982 ba_trig = (void *)trig->data;
3983 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig))
3984 return;
3985
3986 if (!(le16_to_cpu(ba_trig->rx_bar) & BIT(event->u.ba.tid)))
3987 return;
3988
3989 iwl_mvm_fw_dbg_collect_trig(mvm, trig,
3990 "BAR received from %pM, tid %d, ssn %d",
3991 event->u.ba.sta->addr, event->u.ba.tid,
3992 event->u.ba.ssn);
3993}
3994
3995static void
3996iwl_mvm_event_frame_timeout_callback(struct iwl_mvm *mvm,
3997 struct ieee80211_vif *vif,
3998 const struct ieee80211_event *event)
3999{
4000 struct iwl_fw_dbg_trigger_tlv *trig;
4001 struct iwl_fw_dbg_trigger_ba *ba_trig;
4002
4003 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_BA))
4004 return;
4005
4006 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_BA);
4007 ba_trig = (void *)trig->data;
4008 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig))
4009 return;
4010
4011 if (!(le16_to_cpu(ba_trig->frame_timeout) & BIT(event->u.ba.tid)))
4012 return;
4013
4014 iwl_mvm_fw_dbg_collect_trig(mvm, trig,
4015 "Frame from %pM timed out, tid %d",
4016 event->u.ba.sta->addr, event->u.ba.tid);
4017}
4018
4019static void iwl_mvm_mac_event_callback(struct ieee80211_hw *hw,
4020 struct ieee80211_vif *vif,
4021 const struct ieee80211_event *event)
4022{
4023 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4024
4025 switch (event->type) {
4026 case MLME_EVENT:
4027 iwl_mvm_event_mlme_callback(mvm, vif, event);
4028 break;
4029 case BAR_RX_EVENT:
4030 iwl_mvm_event_bar_rx_callback(mvm, vif, event);
4031 break;
4032 case BA_FRAME_TIMEOUT:
4033 iwl_mvm_event_frame_timeout_callback(mvm, vif, event);
4034 break;
4035 default:
4036 break;
4037 }
4038}
4039
e5209263 4040const struct ieee80211_ops iwl_mvm_hw_ops = {
8ca151b5
JB		 4041 .tx = iwl_mvm_mac_tx,
4042 .ampdu_action = iwl_mvm_mac_ampdu_action,
4043 .start = iwl_mvm_mac_start,
cf2c92d8 4044 .reconfig_complete = iwl_mvm_mac_reconfig_complete,
8ca151b5
JB		 4045 .stop = iwl_mvm_mac_stop,
4046 .add_interface = iwl_mvm_mac_add_interface,
4047 .remove_interface = iwl_mvm_mac_remove_interface,
4048 .config = iwl_mvm_mac_config,
e59647ea 4049 .prepare_multicast = iwl_mvm_prepare_multicast,
8ca151b5 4050 .configure_filter = iwl_mvm_configure_filter,
effd1929 4051 .config_iface_filter = iwl_mvm_config_iface_filter,
8ca151b5
JB		 4052 .bss_info_changed = iwl_mvm_bss_info_changed,
4053 .hw_scan = iwl_mvm_mac_hw_scan,
4054 .cancel_hw_scan = iwl_mvm_mac_cancel_hw_scan,
1ddbbb0c 4055 .sta_pre_rcu_remove = iwl_mvm_sta_pre_rcu_remove,
8ca151b5
JB		 4056 .sta_state = iwl_mvm_mac_sta_state,
4057 .sta_notify = iwl_mvm_mac_sta_notify,
4058 .allow_buffered_frames = iwl_mvm_mac_allow_buffered_frames,
3e56eadf 4059 .release_buffered_frames = iwl_mvm_mac_release_buffered_frames,
8ca151b5 4060 .set_rts_threshold = iwl_mvm_mac_set_rts_threshold,
1f3b0ff8 4061 .sta_rc_update = iwl_mvm_sta_rc_update,
8ca151b5
JB		 4062 .conf_tx = iwl_mvm_mac_conf_tx,
4063 .mgd_prepare_tx = iwl_mvm_mac_mgd_prepare_tx,
07ecd897 4064 .mgd_protect_tdls_discover = iwl_mvm_mac_mgd_protect_tdls_discover,
c5b0e7c0 4065 .flush = iwl_mvm_mac_flush,
35a000b7
DS		 4066 .sched_scan_start = iwl_mvm_mac_sched_scan_start,
4067 .sched_scan_stop = iwl_mvm_mac_sched_scan_stop,
8ca151b5
JB		 4068 .set_key = iwl_mvm_mac_set_key,
4069 .update_tkip_key = iwl_mvm_mac_update_tkip_key,
4070 .remain_on_channel = iwl_mvm_roc,
4071 .cancel_remain_on_channel = iwl_mvm_cancel_roc,
8ca151b5
JB		 4072 .add_chanctx = iwl_mvm_add_chanctx,
4073 .remove_chanctx = iwl_mvm_remove_chanctx,
4074 .change_chanctx = iwl_mvm_change_chanctx,
4075 .assign_vif_chanctx = iwl_mvm_assign_vif_chanctx,
4076 .unassign_vif_chanctx = iwl_mvm_unassign_vif_chanctx,
b08c1d97 4077 .switch_vif_chanctx = iwl_mvm_switch_vif_chanctx,
8ca151b5 4078
5023d966
JB		 4079 .start_ap = iwl_mvm_start_ap_ibss,
4080 .stop_ap = iwl_mvm_stop_ap_ibss,
4081 .join_ibss = iwl_mvm_start_ap_ibss,
4082 .leave_ibss = iwl_mvm_stop_ap_ibss,
8ca151b5
JB		 4083
4084 .set_tim = iwl_mvm_set_tim,
4085
622e3f9b 4086 .channel_switch = iwl_mvm_channel_switch,
f028905c 4087 .pre_channel_switch = iwl_mvm_pre_channel_switch,
f6c34820 4088 .post_channel_switch = iwl_mvm_post_channel_switch,
bd3398e2 4089
1d3c3f63
AN		 4090 .tdls_channel_switch = iwl_mvm_tdls_channel_switch,
4091 .tdls_cancel_channel_switch = iwl_mvm_tdls_cancel_channel_switch,
4092 .tdls_recv_channel_switch = iwl_mvm_tdls_recv_channel_switch,
4093
d42f5350
EG		 4094 .event_callback = iwl_mvm_mac_event_callback,
4095
507cadf2
DS		 4096 CFG80211_TESTMODE_CMD(iwl_mvm_mac_testmode_cmd)
4097
8ca151b5
JB		 4098#ifdef CONFIG_PM_SLEEP
4099 /* look at d3.c */
4100 .suspend = iwl_mvm_suspend,
4101 .resume = iwl_mvm_resume,
4102 .set_wakeup = iwl_mvm_set_wakeup,
4103 .set_rekey_data = iwl_mvm_set_rekey_data,
4104#if IS_ENABLED(CONFIG_IPV6)
4105 .ipv6_addr_change = iwl_mvm_ipv6_addr_change,
4106#endif
4107 .set_default_unicast_key = iwl_mvm_set_default_unicast_key,
4108#endif
91a8bcde 4109 .get_survey = iwl_mvm_mac_get_survey,
33cef925 4110 .sta_statistics = iwl_mvm_mac_sta_statistics,
8ca151b5 4111};
A mirror of Linus' kernel repository