xref: /freebsd/sys/contrib/dev/iwlwifi/mvm/rx.c (revision a4128aad8503277614f2d214011ef60a19447b83)
1 // SPDX-License-Identifier: GPL-2.0 OR BSD-3-Clause
2 /*
3  * Copyright (C) 2012-2014, 2018-2024 Intel Corporation
4  * Copyright (C) 2013-2015 Intel Mobile Communications GmbH
5  * Copyright (C) 2016-2017 Intel Deutschland GmbH
6  */
7 #include <asm/unaligned.h>
8 #include <linux/etherdevice.h>
9 #include <linux/skbuff.h>
10 #include "iwl-trans.h"
11 #include "mvm.h"
12 #include "fw-api.h"
13 
14 /*
15  * iwl_mvm_rx_rx_phy_cmd - REPLY_RX_PHY_CMD handler
16  *
17  * Copies the phy information in mvm->last_phy_info, it will be used when the
18  * actual data will come from the fw in the next packet.
19  */
20 void iwl_mvm_rx_rx_phy_cmd(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb)
21 {
22 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
23 	unsigned int pkt_len = iwl_rx_packet_payload_len(pkt);
24 
25 	if (unlikely(pkt_len < sizeof(mvm->last_phy_info)))
26 		return;
27 
28 	memcpy(&mvm->last_phy_info, pkt->data, sizeof(mvm->last_phy_info));
29 	mvm->ampdu_ref++;
30 
31 #ifdef CONFIG_IWLWIFI_DEBUGFS
32 	if (mvm->last_phy_info.phy_flags & cpu_to_le16(RX_RES_PHY_FLAGS_AGG)) {
33 		spin_lock(&mvm->drv_stats_lock);
34 		mvm->drv_rx_stats.ampdu_count++;
35 		spin_unlock(&mvm->drv_stats_lock);
36 	}
37 #endif
38 }
39 
40 /*
41  * iwl_mvm_pass_packet_to_mac80211 - builds the packet for mac80211
42  *
43  * Adds the rxb to a new skb and give it to mac80211
44  */
45 static void iwl_mvm_pass_packet_to_mac80211(struct iwl_mvm *mvm,
46 					    struct ieee80211_sta *sta,
47 					    struct napi_struct *napi,
48 					    struct sk_buff *skb,
49 					    struct ieee80211_hdr *hdr, u16 len,
50 					    u8 crypt_len,
51 					    struct iwl_rx_cmd_buffer *rxb)
52 {
53 	unsigned int hdrlen = ieee80211_hdrlen(hdr->frame_control);
54 	unsigned int fraglen;
55 
56 	/*
57 	 * The 'hdrlen' (plus the 8 bytes for the SNAP and the crypt_len,
58 	 * but those are all multiples of 4 long) all goes away, but we
59 	 * want the *end* of it, which is going to be the start of the IP
60 	 * header, to be aligned when it gets pulled in.
61 	 * The beginning of the skb->data is aligned on at least a 4-byte
62 	 * boundary after allocation. Everything here is aligned at least
63 	 * on a 2-byte boundary so we can just take hdrlen & 3 and pad by
64 	 * the result.
65 	 */
66 	skb_reserve(skb, hdrlen & 3);
67 
68 	/* If frame is small enough to fit in skb->head, pull it completely.
69 	 * If not, only pull ieee80211_hdr (including crypto if present, and
70 	 * an additional 8 bytes for SNAP/ethertype, see below) so that
71 	 * splice() or TCP coalesce are more efficient.
72 	 *
73 	 * Since, in addition, ieee80211_data_to_8023() always pull in at
74 	 * least 8 bytes (possibly more for mesh) we can do the same here
75 	 * to save the cost of doing it later. That still doesn't pull in
76 	 * the actual IP header since the typical case has a SNAP header.
77 	 * If the latter changes (there are efforts in the standards group
78 	 * to do so) we should revisit this and ieee80211_data_to_8023().
79 	 */
80 	hdrlen = (len <= skb_tailroom(skb)) ? len : hdrlen + crypt_len + 8;
81 
82 	skb_put_data(skb, hdr, hdrlen);
83 	fraglen = len - hdrlen;
84 
85 	if (fraglen) {
86 		int offset = (u8 *)hdr + hdrlen -
87 			     (u8 *)rxb_addr(rxb) + rxb_offset(rxb);
88 
89 		skb_add_rx_frag(skb, 0, rxb_steal_page(rxb), offset,
90 				fraglen, rxb->truesize);
91 	}
92 
93 	ieee80211_rx_napi(mvm->hw, sta, skb, napi);
94 }
95 
96 /*
97  * iwl_mvm_get_signal_strength - use new rx PHY INFO API
98  * values are reported by the fw as positive values - need to negate
99  * to obtain their dBM.  Account for missing antennas by replacing 0
100  * values by -256dBm: practically 0 power and a non-feasible 8 bit value.
101  */
102 static void iwl_mvm_get_signal_strength(struct iwl_mvm *mvm,
103 					struct iwl_rx_phy_info *phy_info,
104 					struct ieee80211_rx_status *rx_status)
105 {
106 	int energy_a, energy_b, max_energy;
107 	u32 val;
108 
109 	val =
110 	    le32_to_cpu(phy_info->non_cfg_phy[IWL_RX_INFO_ENERGY_ANT_ABC_IDX]);
111 	energy_a = (val & IWL_RX_INFO_ENERGY_ANT_A_MSK) >>
112 						IWL_RX_INFO_ENERGY_ANT_A_POS;
113 	energy_a = energy_a ? -energy_a : S8_MIN;
114 	energy_b = (val & IWL_RX_INFO_ENERGY_ANT_B_MSK) >>
115 						IWL_RX_INFO_ENERGY_ANT_B_POS;
116 	energy_b = energy_b ? -energy_b : S8_MIN;
117 	max_energy = max(energy_a, energy_b);
118 
119 	IWL_DEBUG_STATS(mvm, "energy In A %d B %d  , and max %d\n",
120 			energy_a, energy_b, max_energy);
121 
122 	rx_status->signal = max_energy;
123 	rx_status->chains = (le16_to_cpu(phy_info->phy_flags) &
124 				RX_RES_PHY_FLAGS_ANTENNA)
125 					>> RX_RES_PHY_FLAGS_ANTENNA_POS;
126 	rx_status->chain_signal[0] = energy_a;
127 	rx_status->chain_signal[1] = energy_b;
128 }
129 
130 /*
131  * iwl_mvm_set_mac80211_rx_flag - translate fw status to mac80211 format
132  * @mvm: the mvm object
133  * @hdr: 80211 header
134  * @stats: status in mac80211's format
135  * @rx_pkt_status: status coming from fw
136  *
137  * returns non 0 value if the packet should be dropped
138  */
139 static u32 iwl_mvm_set_mac80211_rx_flag(struct iwl_mvm *mvm,
140 					struct ieee80211_hdr *hdr,
141 					struct ieee80211_rx_status *stats,
142 					u32 rx_pkt_status,
143 					u8 *crypt_len)
144 {
145 	if (!ieee80211_has_protected(hdr->frame_control) ||
146 	    (rx_pkt_status & RX_MPDU_RES_STATUS_SEC_ENC_MSK) ==
147 			     RX_MPDU_RES_STATUS_SEC_NO_ENC)
148 		return 0;
149 
150 	/* packet was encrypted with unknown alg */
151 	if ((rx_pkt_status & RX_MPDU_RES_STATUS_SEC_ENC_MSK) ==
152 					RX_MPDU_RES_STATUS_SEC_ENC_ERR)
153 		return 0;
154 
155 	switch (rx_pkt_status & RX_MPDU_RES_STATUS_SEC_ENC_MSK) {
156 	case RX_MPDU_RES_STATUS_SEC_CCM_ENC:
157 		/* alg is CCM: check MIC only */
158 		if (!(rx_pkt_status & RX_MPDU_RES_STATUS_MIC_OK))
159 			return -1;
160 
161 		stats->flag |= RX_FLAG_DECRYPTED;
162 		*crypt_len = IEEE80211_CCMP_HDR_LEN;
163 		return 0;
164 
165 	case RX_MPDU_RES_STATUS_SEC_TKIP_ENC:
166 		/* Don't drop the frame and decrypt it in SW */
167 		if (!fw_has_api(&mvm->fw->ucode_capa,
168 				IWL_UCODE_TLV_API_DEPRECATE_TTAK) &&
169 		    !(rx_pkt_status & RX_MPDU_RES_STATUS_TTAK_OK))
170 			return 0;
171 		*crypt_len = IEEE80211_TKIP_IV_LEN;
172 		fallthrough;
173 
174 	case RX_MPDU_RES_STATUS_SEC_WEP_ENC:
175 		if (!(rx_pkt_status & RX_MPDU_RES_STATUS_ICV_OK))
176 			return -1;
177 
178 		stats->flag |= RX_FLAG_DECRYPTED;
179 		if ((rx_pkt_status & RX_MPDU_RES_STATUS_SEC_ENC_MSK) ==
180 				RX_MPDU_RES_STATUS_SEC_WEP_ENC)
181 			*crypt_len = IEEE80211_WEP_IV_LEN;
182 		return 0;
183 
184 	case RX_MPDU_RES_STATUS_SEC_EXT_ENC:
185 		if (!(rx_pkt_status & RX_MPDU_RES_STATUS_MIC_OK))
186 			return -1;
187 		stats->flag |= RX_FLAG_DECRYPTED;
188 		return 0;
189 
190 	default:
191 		/* Expected in monitor (not having the keys) */
192 #if defined(__linux__)
193 		if (!mvm->monitor_on)
194 			IWL_WARN(mvm, "Unhandled alg: 0x%x\n", rx_pkt_status);
195 #elif defined(__FreeBSD__)
196 		if (!mvm->monitor_on && net_ratelimit())
197 			IWL_WARN(mvm, "%s: Unhandled alg: 0x%x\n", __func__, rx_pkt_status);
198 #endif
199 	}
200 
201 	return 0;
202 }
203 
204 static void iwl_mvm_rx_handle_tcm(struct iwl_mvm *mvm,
205 				  struct ieee80211_sta *sta,
206 				  struct ieee80211_hdr *hdr, u32 len,
207 				  struct iwl_rx_phy_info *phy_info,
208 				  u32 rate_n_flags)
209 {
210 	struct iwl_mvm_sta *mvmsta;
211 	struct iwl_mvm_tcm_mac *mdata;
212 	int mac;
213 	int ac = IEEE80211_AC_BE; /* treat non-QoS as BE */
214 	struct iwl_mvm_vif *mvmvif;
215 	/* expected throughput in 100Kbps, single stream, 20 MHz */
216 	static const u8 thresh_tpt[] = {
217 		9, 18, 30, 42, 60, 78, 90, 96, 120, 135,
218 	};
219 	u16 thr;
220 
221 	if (ieee80211_is_data_qos(hdr->frame_control)) {
222 		u8 tid = ieee80211_get_tid(hdr);
223 
224 		if (tid < IWL_MAX_TID_COUNT)
225 			ac = tid_to_mac80211_ac[tid];
226 	}
227 
228 	mvmsta = iwl_mvm_sta_from_mac80211(sta);
229 	mac = mvmsta->mac_id_n_color & FW_CTXT_ID_MSK;
230 
231 	if (time_after(jiffies, mvm->tcm.ts + MVM_TCM_PERIOD))
232 		schedule_delayed_work(&mvm->tcm.work, 0);
233 	mdata = &mvm->tcm.data[mac];
234 	mdata->rx.pkts[ac]++;
235 
236 	/* count the airtime only once for each ampdu */
237 	if (mdata->rx.last_ampdu_ref != mvm->ampdu_ref) {
238 		mdata->rx.last_ampdu_ref = mvm->ampdu_ref;
239 		mdata->rx.airtime += le16_to_cpu(phy_info->frame_time);
240 	}
241 
242 	if (!(rate_n_flags & (RATE_MCS_HT_MSK_V1 | RATE_MCS_VHT_MSK_V1)))
243 		return;
244 
245 	mvmvif = iwl_mvm_vif_from_mac80211(mvmsta->vif);
246 
247 	if (mdata->opened_rx_ba_sessions ||
248 	    mdata->uapsd_nonagg_detect.detected ||
249 	    (!mvmvif->deflink.queue_params[IEEE80211_AC_VO].uapsd &&
250 	     !mvmvif->deflink.queue_params[IEEE80211_AC_VI].uapsd &&
251 	     !mvmvif->deflink.queue_params[IEEE80211_AC_BE].uapsd &&
252 	     !mvmvif->deflink.queue_params[IEEE80211_AC_BK].uapsd) ||
253 	    mvmsta->deflink.sta_id != mvmvif->deflink.ap_sta_id)
254 		return;
255 
256 	if (rate_n_flags & RATE_MCS_HT_MSK_V1) {
257 		thr = thresh_tpt[rate_n_flags & RATE_HT_MCS_RATE_CODE_MSK_V1];
258 		thr *= 1 + ((rate_n_flags & RATE_HT_MCS_NSS_MSK_V1) >>
259 					RATE_HT_MCS_NSS_POS_V1);
260 	} else {
261 		if (WARN_ON((rate_n_flags & RATE_VHT_MCS_RATE_CODE_MSK) >=
262 				ARRAY_SIZE(thresh_tpt)))
263 			return;
264 		thr = thresh_tpt[rate_n_flags & RATE_VHT_MCS_RATE_CODE_MSK];
265 		thr *= 1 + FIELD_GET(RATE_MCS_NSS_MSK, rate_n_flags);
266 	}
267 
268 	thr <<= ((rate_n_flags & RATE_MCS_CHAN_WIDTH_MSK_V1) >>
269 				RATE_MCS_CHAN_WIDTH_POS);
270 
271 	mdata->uapsd_nonagg_detect.rx_bytes += len;
272 	ewma_rate_add(&mdata->uapsd_nonagg_detect.rate, thr);
273 }
274 
275 static void iwl_mvm_rx_csum(struct ieee80211_sta *sta,
276 			    struct sk_buff *skb,
277 			    u32 status)
278 {
279 	struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
280 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(mvmsta->vif);
281 
282 	if (mvmvif->features & NETIF_F_RXCSUM &&
283 	    status & RX_MPDU_RES_STATUS_CSUM_DONE &&
284 	    status & RX_MPDU_RES_STATUS_CSUM_OK)
285 		skb->ip_summed = CHECKSUM_UNNECESSARY;
286 }
287 
288 /*
289  * iwl_mvm_rx_rx_mpdu - REPLY_RX_MPDU_CMD handler
290  *
291  * Handles the actual data of the Rx packet from the fw
292  */
293 void iwl_mvm_rx_rx_mpdu(struct iwl_mvm *mvm, struct napi_struct *napi,
294 			struct iwl_rx_cmd_buffer *rxb)
295 {
296 	struct ieee80211_hdr *hdr;
297 	struct ieee80211_rx_status *rx_status;
298 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
299 	struct iwl_rx_phy_info *phy_info;
300 	struct iwl_rx_mpdu_res_start *rx_res;
301 	struct ieee80211_sta *sta = NULL;
302 	struct sk_buff *skb;
303 	u32 len, pkt_len = iwl_rx_packet_payload_len(pkt);
304 	u32 rate_n_flags;
305 	u32 rx_pkt_status;
306 	u8 crypt_len = 0;
307 
308 	if (unlikely(pkt_len < sizeof(*rx_res))) {
309 		IWL_DEBUG_DROP(mvm, "Bad REPLY_RX_MPDU_CMD size\n");
310 		return;
311 	}
312 
313 	phy_info = &mvm->last_phy_info;
314 	rx_res = (struct iwl_rx_mpdu_res_start *)pkt->data;
315 	hdr = (struct ieee80211_hdr *)(pkt->data + sizeof(*rx_res));
316 	len = le16_to_cpu(rx_res->byte_count);
317 
318 	if (unlikely(len + sizeof(*rx_res) + sizeof(__le32) > pkt_len)) {
319 		IWL_DEBUG_DROP(mvm, "FW lied about packet len\n");
320 		return;
321 	}
322 
323 	rx_pkt_status = get_unaligned_le32((__le32 *)
324 		(pkt->data + sizeof(*rx_res) + len));
325 
326 	/* Dont use dev_alloc_skb(), we'll have enough headroom once
327 	 * ieee80211_hdr pulled.
328 	 */
329 	skb = alloc_skb(128, GFP_ATOMIC);
330 	if (!skb) {
331 		IWL_ERR(mvm, "alloc_skb failed\n");
332 		return;
333 	}
334 
335 	rx_status = IEEE80211_SKB_RXCB(skb);
336 
337 	/*
338 	 * Keep packets with CRC errors (and with overrun) for monitor mode
339 	 * (otherwise the firmware discards them) but mark them as bad.
340 	 */
341 	if (!(rx_pkt_status & RX_MPDU_RES_STATUS_CRC_OK) ||
342 	    !(rx_pkt_status & RX_MPDU_RES_STATUS_OVERRUN_OK)) {
343 		IWL_DEBUG_RX(mvm, "Bad CRC or FIFO: 0x%08X.\n", rx_pkt_status);
344 		rx_status->flag |= RX_FLAG_FAILED_FCS_CRC;
345 	}
346 
347 	/* This will be used in several places later */
348 	rate_n_flags = le32_to_cpu(phy_info->rate_n_flags);
349 
350 	/* rx_status carries information about the packet to mac80211 */
351 	rx_status->mactime = le64_to_cpu(phy_info->timestamp);
352 	rx_status->device_timestamp = le32_to_cpu(phy_info->system_timestamp);
353 	rx_status->band =
354 		(phy_info->phy_flags & cpu_to_le16(RX_RES_PHY_FLAGS_BAND_24)) ?
355 				NL80211_BAND_2GHZ : NL80211_BAND_5GHZ;
356 	rx_status->freq =
357 		ieee80211_channel_to_frequency(le16_to_cpu(phy_info->channel),
358 					       rx_status->band);
359 
360 	/* TSF as indicated by the firmware  is at INA time */
361 	rx_status->flag |= RX_FLAG_MACTIME_PLCP_START;
362 
363 	iwl_mvm_get_signal_strength(mvm, phy_info, rx_status);
364 
365 	IWL_DEBUG_STATS_LIMIT(mvm, "Rssi %d, TSF %llu\n", rx_status->signal,
366 			      (unsigned long long)rx_status->mactime);
367 
368 	rcu_read_lock();
369 	if (rx_pkt_status & RX_MPDU_RES_STATUS_SRC_STA_FOUND) {
370 		u32 id = rx_pkt_status & RX_MPDU_RES_STATUS_STA_ID_MSK;
371 
372 		id >>= RX_MDPU_RES_STATUS_STA_ID_SHIFT;
373 
374 		if (!WARN_ON_ONCE(id >= mvm->fw->ucode_capa.num_stations)) {
375 			sta = rcu_dereference(mvm->fw_id_to_mac_id[id]);
376 			if (IS_ERR(sta))
377 				sta = NULL;
378 		}
379 	} else if (!is_multicast_ether_addr(hdr->addr2)) {
380 		/* This is fine since we prevent two stations with the same
381 		 * address from being added.
382 		 */
383 		sta = ieee80211_find_sta_by_ifaddr(mvm->hw, hdr->addr2, NULL);
384 	}
385 
386 	if (sta) {
387 		struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
388 		struct ieee80211_vif *vif = mvmsta->vif;
389 		struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
390 
391 		/*
392 		 * Don't even try to decrypt a MCAST frame that was received
393 		 * before the managed vif is authorized, we'd fail anyway.
394 		 */
395 		if (is_multicast_ether_addr(hdr->addr1) &&
396 		    vif->type == NL80211_IFTYPE_STATION &&
397 		    !mvmvif->authorized &&
398 		    ieee80211_has_protected(hdr->frame_control)) {
399 			IWL_DEBUG_DROP(mvm, "MCAST before the vif is authorized\n");
400 			kfree_skb(skb);
401 			rcu_read_unlock();
402 			return;
403 		}
404 	}
405 
406 	/*
407 	 * drop the packet if it has failed being decrypted by HW
408 	 */
409 	if (iwl_mvm_set_mac80211_rx_flag(mvm, hdr, rx_status, rx_pkt_status,
410 					 &crypt_len)) {
411 		IWL_DEBUG_DROP(mvm, "Bad decryption results 0x%08x\n",
412 			       rx_pkt_status);
413 		kfree_skb(skb);
414 		rcu_read_unlock();
415 		return;
416 	}
417 
418 	if (sta) {
419 		struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
420 		struct ieee80211_vif *tx_blocked_vif =
421 			rcu_dereference(mvm->csa_tx_blocked_vif);
422 		struct iwl_fw_dbg_trigger_tlv *trig;
423 		struct ieee80211_vif *vif = mvmsta->vif;
424 
425 		/* We have tx blocked stations (with CS bit). If we heard
426 		 * frames from a blocked station on a new channel we can
427 		 * TX to it again.
428 		 */
429 		if (unlikely(tx_blocked_vif) && vif == tx_blocked_vif) {
430 			struct iwl_mvm_vif *mvmvif =
431 				iwl_mvm_vif_from_mac80211(tx_blocked_vif);
432 
433 			if (mvmvif->csa_target_freq == rx_status->freq)
434 				iwl_mvm_sta_modify_disable_tx_ap(mvm, sta,
435 								 false);
436 		}
437 
438 		rs_update_last_rssi(mvm, mvmsta, rx_status);
439 
440 		trig = iwl_fw_dbg_trigger_on(&mvm->fwrt,
441 					     ieee80211_vif_to_wdev(vif),
442 					     FW_DBG_TRIGGER_RSSI);
443 
444 		if (trig && ieee80211_is_beacon(hdr->frame_control)) {
445 			struct iwl_fw_dbg_trigger_low_rssi *rssi_trig;
446 			s32 rssi;
447 
448 			rssi_trig = (void *)trig->data;
449 			rssi = le32_to_cpu(rssi_trig->rssi);
450 
451 			if (rx_status->signal < rssi)
452 				iwl_fw_dbg_collect_trig(&mvm->fwrt, trig,
453 #if defined(__linux__)
454 							NULL);
455 #elif defined(__FreeBSD__)
456 							"");
457 #endif
458 		}
459 
460 		if (!mvm->tcm.paused && len >= sizeof(*hdr) &&
461 		    !is_multicast_ether_addr(hdr->addr1) &&
462 		    ieee80211_is_data(hdr->frame_control))
463 			iwl_mvm_rx_handle_tcm(mvm, sta, hdr, len, phy_info,
464 					      rate_n_flags);
465 
466 		if (ieee80211_is_data(hdr->frame_control))
467 			iwl_mvm_rx_csum(sta, skb, rx_pkt_status);
468 	}
469 	rcu_read_unlock();
470 
471 	/* set the preamble flag if appropriate */
472 	if (phy_info->phy_flags & cpu_to_le16(RX_RES_PHY_FLAGS_SHORT_PREAMBLE))
473 		rx_status->enc_flags |= RX_ENC_FLAG_SHORTPRE;
474 
475 	if (phy_info->phy_flags & cpu_to_le16(RX_RES_PHY_FLAGS_AGG)) {
476 		/*
477 		 * We know which subframes of an A-MPDU belong
478 		 * together since we get a single PHY response
479 		 * from the firmware for all of them
480 		 */
481 		rx_status->flag |= RX_FLAG_AMPDU_DETAILS;
482 		rx_status->ampdu_reference = mvm->ampdu_ref;
483 	}
484 
485 	/* Set up the HT phy flags */
486 	switch (rate_n_flags & RATE_MCS_CHAN_WIDTH_MSK_V1) {
487 	case RATE_MCS_CHAN_WIDTH_20:
488 		break;
489 	case RATE_MCS_CHAN_WIDTH_40:
490 		rx_status->bw = RATE_INFO_BW_40;
491 		break;
492 	case RATE_MCS_CHAN_WIDTH_80:
493 		rx_status->bw = RATE_INFO_BW_80;
494 		break;
495 	case RATE_MCS_CHAN_WIDTH_160:
496 		rx_status->bw = RATE_INFO_BW_160;
497 		break;
498 	}
499 	if (!(rate_n_flags & RATE_MCS_CCK_MSK_V1) &&
500 	    rate_n_flags & RATE_MCS_SGI_MSK_V1)
501 		rx_status->enc_flags |= RX_ENC_FLAG_SHORT_GI;
502 	if (rate_n_flags & RATE_HT_MCS_GF_MSK)
503 		rx_status->enc_flags |= RX_ENC_FLAG_HT_GF;
504 	if (rate_n_flags & RATE_MCS_LDPC_MSK_V1)
505 		rx_status->enc_flags |= RX_ENC_FLAG_LDPC;
506 	if (rate_n_flags & RATE_MCS_HT_MSK_V1) {
507 		u8 stbc = (rate_n_flags & RATE_MCS_STBC_MSK) >>
508 				RATE_MCS_STBC_POS;
509 		rx_status->encoding = RX_ENC_HT;
510 		rx_status->rate_idx = rate_n_flags & RATE_HT_MCS_INDEX_MSK_V1;
511 		rx_status->enc_flags |= stbc << RX_ENC_FLAG_STBC_SHIFT;
512 	} else if (rate_n_flags & RATE_MCS_VHT_MSK_V1) {
513 		u8 stbc = (rate_n_flags & RATE_MCS_STBC_MSK) >>
514 				RATE_MCS_STBC_POS;
515 		rx_status->nss =
516 			FIELD_GET(RATE_MCS_NSS_MSK, rate_n_flags) + 1;
517 		rx_status->rate_idx = rate_n_flags & RATE_VHT_MCS_RATE_CODE_MSK;
518 		rx_status->encoding = RX_ENC_VHT;
519 		rx_status->enc_flags |= stbc << RX_ENC_FLAG_STBC_SHIFT;
520 		if (rate_n_flags & RATE_MCS_BF_MSK)
521 			rx_status->enc_flags |= RX_ENC_FLAG_BF;
522 	} else {
523 		int rate = iwl_mvm_legacy_rate_to_mac80211_idx(rate_n_flags,
524 							       rx_status->band);
525 
526 		if (WARN(rate < 0 || rate > 0xFF,
527 			 "Invalid rate flags 0x%x, band %d,\n",
528 			 rate_n_flags, rx_status->band)) {
529 			kfree_skb(skb);
530 			return;
531 		}
532 		rx_status->rate_idx = rate;
533 	}
534 
535 #ifdef CONFIG_IWLWIFI_DEBUGFS
536 	iwl_mvm_update_frame_stats(mvm, rate_n_flags,
537 				   rx_status->flag & RX_FLAG_AMPDU_DETAILS);
538 #endif
539 
540 	if (unlikely((ieee80211_is_beacon(hdr->frame_control) ||
541 		      ieee80211_is_probe_resp(hdr->frame_control)) &&
542 		     mvm->sched_scan_pass_all == SCHED_SCAN_PASS_ALL_ENABLED))
543 		mvm->sched_scan_pass_all = SCHED_SCAN_PASS_ALL_FOUND;
544 
545 	if (unlikely(ieee80211_is_beacon(hdr->frame_control) ||
546 		     ieee80211_is_probe_resp(hdr->frame_control)))
547 		rx_status->boottime_ns = ktime_get_boottime_ns();
548 
549 	iwl_mvm_pass_packet_to_mac80211(mvm, sta, napi, skb, hdr, len,
550 					crypt_len, rxb);
551 }
552 
553 struct iwl_mvm_stat_data {
554 	struct iwl_mvm *mvm;
555 	__le32 flags;
556 	__le32 mac_id;
557 	u8 beacon_filter_average_energy;
558 	__le32 *beacon_counter;
559 	u8 *beacon_average_energy;
560 };
561 
562 struct iwl_mvm_stat_data_all_macs {
563 	struct iwl_mvm *mvm;
564 	__le32 flags;
565 	struct iwl_stats_ntfy_per_mac *per_mac;
566 };
567 
568 static void iwl_mvm_update_link_sig(struct ieee80211_vif *vif, int sig,
569 				    struct iwl_mvm_vif_link_info *link_info,
570 				    struct ieee80211_bss_conf *bss_conf)
571 {
572 	struct iwl_mvm *mvm = iwl_mvm_vif_from_mac80211(vif)->mvm;
573 	int thold = bss_conf->cqm_rssi_thold;
574 	int hyst = bss_conf->cqm_rssi_hyst;
575 	int last_event;
576 	s8 exit_esr_thresh;
577 
578 	if (sig == 0) {
579 		IWL_DEBUG_RX(mvm, "RSSI is 0 - skip signal based decision\n");
580 		return;
581 	}
582 
583 	link_info->bf_data.ave_beacon_signal = sig;
584 
585 	/* BT Coex */
586 	if (link_info->bf_data.bt_coex_min_thold !=
587 	    link_info->bf_data.bt_coex_max_thold) {
588 		last_event = link_info->bf_data.last_bt_coex_event;
589 		if (sig > link_info->bf_data.bt_coex_max_thold &&
590 		    (last_event <= link_info->bf_data.bt_coex_min_thold ||
591 		     last_event == 0)) {
592 			link_info->bf_data.last_bt_coex_event = sig;
593 			IWL_DEBUG_RX(mvm, "cqm_iterator bt coex high %d\n",
594 				     sig);
595 			iwl_mvm_bt_rssi_event(mvm, vif, RSSI_EVENT_HIGH);
596 		} else if (sig < link_info->bf_data.bt_coex_min_thold &&
597 			   (last_event >= link_info->bf_data.bt_coex_max_thold ||
598 			    last_event == 0)) {
599 			link_info->bf_data.last_bt_coex_event = sig;
600 			IWL_DEBUG_RX(mvm, "cqm_iterator bt coex low %d\n",
601 				     sig);
602 			iwl_mvm_bt_rssi_event(mvm, vif, RSSI_EVENT_LOW);
603 		}
604 	}
605 
606 	if (!(vif->driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI))
607 		return;
608 
609 	/* CQM Notification */
610 	last_event = link_info->bf_data.last_cqm_event;
611 	if (thold && sig < thold && (last_event == 0 ||
612 				     sig < last_event - hyst)) {
613 		link_info->bf_data.last_cqm_event = sig;
614 		IWL_DEBUG_RX(mvm, "cqm_iterator cqm low %d\n",
615 			     sig);
616 		ieee80211_cqm_rssi_notify(
617 			vif,
618 			NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW,
619 			sig,
620 			GFP_KERNEL);
621 	} else if (sig > thold &&
622 		   (last_event == 0 || sig > last_event + hyst)) {
623 		link_info->bf_data.last_cqm_event = sig;
624 		IWL_DEBUG_RX(mvm, "cqm_iterator cqm high %d\n",
625 			     sig);
626 		ieee80211_cqm_rssi_notify(
627 			vif,
628 			NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH,
629 			sig,
630 			GFP_KERNEL);
631 	}
632 
633 	/* ESR recalculation */
634 	if (!vif->cfg.assoc || !ieee80211_vif_is_mld(vif))
635 		return;
636 
637 	exit_esr_thresh =
638 		iwl_mvm_get_esr_rssi_thresh(mvm,
639 					    &bss_conf->chanreq.oper,
640 					    true);
641 
642 	if (sig < exit_esr_thresh)
643 		iwl_mvm_exit_esr(mvm, vif, IWL_MVM_ESR_EXIT_LOW_RSSI,
644 				 iwl_mvm_get_other_link(vif,
645 							bss_conf->link_id));
646 }
647 
648 static void iwl_mvm_stat_iterator(void *_data, u8 *mac,
649 				  struct ieee80211_vif *vif)
650 {
651 	struct iwl_mvm_stat_data *data = _data;
652 	int sig = -data->beacon_filter_average_energy;
653 	u16 id = le32_to_cpu(data->mac_id);
654 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
655 	u16 vif_id = mvmvif->id;
656 
657 	/* This doesn't need the MAC ID check since it's not taking the
658 	 * data copied into the "data" struct, but rather the data from
659 	 * the notification directly.
660 	 */
661 	mvmvif->deflink.beacon_stats.num_beacons =
662 		le32_to_cpu(data->beacon_counter[vif_id]);
663 	mvmvif->deflink.beacon_stats.avg_signal =
664 		-data->beacon_average_energy[vif_id];
665 
666 	if (mvmvif->id != id)
667 		return;
668 
669 	if (vif->type != NL80211_IFTYPE_STATION)
670 		return;
671 
672 	/* make sure that beacon statistics don't go backwards with TCM
673 	 * request to clear statistics
674 	 */
675 	if (le32_to_cpu(data->flags) & IWL_STATISTICS_REPLY_FLG_CLEAR)
676 		mvmvif->deflink.beacon_stats.accu_num_beacons +=
677 			mvmvif->deflink.beacon_stats.num_beacons;
678 
679 	/* This is used in pre-MLO API so use deflink */
680 	iwl_mvm_update_link_sig(vif, sig, &mvmvif->deflink, &vif->bss_conf);
681 }
682 
683 static void iwl_mvm_stat_iterator_all_macs(void *_data, u8 *mac,
684 					   struct ieee80211_vif *vif)
685 {
686 	struct iwl_mvm_stat_data_all_macs *data = _data;
687 	struct iwl_stats_ntfy_per_mac *mac_stats;
688 	int sig;
689 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
690 	u16 vif_id = mvmvif->id;
691 
692 	if (WARN_ONCE(vif_id >= MAC_INDEX_AUX, "invalid vif id: %d", vif_id))
693 		return;
694 
695 	if (vif->type != NL80211_IFTYPE_STATION)
696 		return;
697 
698 	mac_stats = &data->per_mac[vif_id];
699 
700 	mvmvif->deflink.beacon_stats.num_beacons =
701 		le32_to_cpu(mac_stats->beacon_counter);
702 	mvmvif->deflink.beacon_stats.avg_signal =
703 		-le32_to_cpu(mac_stats->beacon_average_energy);
704 
705 	/* make sure that beacon statistics don't go backwards with TCM
706 	 * request to clear statistics
707 	 */
708 	if (le32_to_cpu(data->flags) & IWL_STATISTICS_REPLY_FLG_CLEAR)
709 		mvmvif->deflink.beacon_stats.accu_num_beacons +=
710 			mvmvif->deflink.beacon_stats.num_beacons;
711 
712 	sig = -le32_to_cpu(mac_stats->beacon_filter_average_energy);
713 
714 	/* This is used in pre-MLO API so use deflink */
715 	iwl_mvm_update_link_sig(vif, sig, &mvmvif->deflink, &vif->bss_conf);
716 }
717 
718 static inline void
719 iwl_mvm_rx_stats_check_trigger(struct iwl_mvm *mvm, struct iwl_rx_packet *pkt)
720 {
721 	struct iwl_fw_dbg_trigger_tlv *trig;
722 	struct iwl_fw_dbg_trigger_stats *trig_stats;
723 	u32 trig_offset, trig_thold;
724 
725 	trig = iwl_fw_dbg_trigger_on(&mvm->fwrt, NULL, FW_DBG_TRIGGER_STATS);
726 	if (!trig)
727 		return;
728 
729 	trig_stats = (void *)trig->data;
730 
731 	trig_offset = le32_to_cpu(trig_stats->stop_offset);
732 	trig_thold = le32_to_cpu(trig_stats->stop_threshold);
733 
734 	if (WARN_ON_ONCE(trig_offset >= iwl_rx_packet_payload_len(pkt)))
735 		return;
736 
737 	if (le32_to_cpup((__le32 *) (pkt->data + trig_offset)) < trig_thold)
738 		return;
739 
740 #if defined(__linux__)
741 	iwl_fw_dbg_collect_trig(&mvm->fwrt, trig, NULL);
742 #elif defined(__FreeBSD__)
743 	iwl_fw_dbg_collect_trig(&mvm->fwrt, trig, "");
744 #endif
745 }
746 
747 static void iwl_mvm_stats_energy_iter(void *_data,
748 				      struct ieee80211_sta *sta)
749 {
750 	struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
751 	u8 *energy = _data;
752 	u32 sta_id = mvmsta->deflink.sta_id;
753 
754 	if (WARN_ONCE(sta_id >= IWL_MVM_STATION_COUNT_MAX, "sta_id %d >= %d",
755 		      sta_id, IWL_MVM_STATION_COUNT_MAX))
756 		return;
757 
758 	if (energy[sta_id])
759 		mvmsta->deflink.avg_energy = energy[sta_id];
760 
761 }
762 
763 static void
764 iwl_mvm_update_tcm_from_stats(struct iwl_mvm *mvm, __le32 *air_time_le,
765 			      __le32 *rx_bytes_le)
766 {
767 	int i;
768 
769 	spin_lock(&mvm->tcm.lock);
770 	for (i = 0; i < NUM_MAC_INDEX_DRIVER; i++) {
771 		struct iwl_mvm_tcm_mac *mdata = &mvm->tcm.data[i];
772 		u32 rx_bytes = le32_to_cpu(rx_bytes_le[i]);
773 		u32 airtime = le32_to_cpu(air_time_le[i]);
774 
775 		mdata->rx.airtime += airtime;
776 		mdata->uapsd_nonagg_detect.rx_bytes += rx_bytes;
777 		if (airtime) {
778 			/* re-init every time to store rate from FW */
779 			ewma_rate_init(&mdata->uapsd_nonagg_detect.rate);
780 			ewma_rate_add(&mdata->uapsd_nonagg_detect.rate,
781 				      rx_bytes * 8 / airtime);
782 		}
783 	}
784 	spin_unlock(&mvm->tcm.lock);
785 }
786 
787 static void iwl_mvm_handle_per_phy_stats(struct iwl_mvm *mvm,
788 					 struct iwl_stats_ntfy_per_phy *per_phy)
789 {
790 	int i;
791 
792 	for (i = 0; i < NUM_PHY_CTX; i++) {
793 		if (!mvm->phy_ctxts[i].ref)
794 			continue;
795 		mvm->phy_ctxts[i].channel_load_by_us =
796 			le32_to_cpu(per_phy[i].channel_load_by_us);
797 	}
798 }
799 
800 static void
801 iwl_mvm_stats_ver_15(struct iwl_mvm *mvm,
802 		     struct iwl_statistics_operational_ntfy *stats)
803 {
804 	struct iwl_mvm_stat_data_all_macs data = {
805 		.mvm = mvm,
806 		.flags = stats->flags,
807 		.per_mac = stats->per_mac,
808 	};
809 
810 	ieee80211_iterate_active_interfaces(mvm->hw,
811 					    IEEE80211_IFACE_ITER_NORMAL,
812 					    iwl_mvm_stat_iterator_all_macs,
813 					    &data);
814 	iwl_mvm_handle_per_phy_stats(mvm, stats->per_phy);
815 }
816 
817 static void
818 iwl_mvm_stats_ver_14(struct iwl_mvm *mvm,
819 		     struct iwl_statistics_operational_ntfy_ver_14 *stats)
820 {
821 	struct iwl_mvm_stat_data data = {
822 		.mvm = mvm,
823 	};
824 
825 	u8 beacon_average_energy[MAC_INDEX_AUX];
826 	__le32 flags;
827 	int i;
828 
829 	flags = stats->flags;
830 
831 	data.mac_id = stats->mac_id;
832 	data.beacon_filter_average_energy =
833 		le32_to_cpu(stats->beacon_filter_average_energy);
834 	data.flags = flags;
835 	data.beacon_counter = stats->beacon_counter;
836 
837 	for (i = 0; i < ARRAY_SIZE(beacon_average_energy); i++)
838 		beacon_average_energy[i] =
839 			le32_to_cpu(stats->beacon_average_energy[i]);
840 
841 	data.beacon_average_energy = beacon_average_energy;
842 
843 	ieee80211_iterate_active_interfaces(mvm->hw,
844 					    IEEE80211_IFACE_ITER_NORMAL,
845 					    iwl_mvm_stat_iterator,
846 					    &data);
847 }
848 
849 static bool iwl_mvm_verify_stats_len(struct iwl_mvm *mvm,
850 				     struct iwl_rx_packet *pkt,
851 				     u32 expected_size)
852 {
853 	struct iwl_statistics_ntfy_hdr *hdr;
854 
855 	if (WARN_ONCE(iwl_rx_packet_payload_len(pkt) < expected_size,
856 		      "received invalid statistics size (%d)!, expected_size: %d\n",
857 		      iwl_rx_packet_payload_len(pkt), expected_size))
858 		return false;
859 
860 	hdr = (void *)&pkt->data;
861 
862 	if (WARN_ONCE((hdr->type & IWL_STATISTICS_TYPE_MSK) != FW_STATISTICS_OPERATIONAL ||
863 		      hdr->version !=
864 		      iwl_fw_lookup_notif_ver(mvm->fw, LEGACY_GROUP, STATISTICS_NOTIFICATION, 0),
865 		      "received unsupported hdr type %d, version %d\n",
866 		      hdr->type, hdr->version))
867 		return false;
868 
869 	if (WARN_ONCE(le16_to_cpu(hdr->size) != expected_size,
870 		      "received invalid statistics size in header (%d)!, expected_size: %d\n",
871 		      le16_to_cpu(hdr->size), expected_size))
872 		return false;
873 
874 	return true;
875 }
876 
877 static void
878 iwl_mvm_stat_iterator_all_links(struct iwl_mvm *mvm,
879 				struct iwl_stats_ntfy_per_link *per_link)
880 {
881 	u32 air_time[MAC_INDEX_AUX] = {};
882 	u32 rx_bytes[MAC_INDEX_AUX] = {};
883 	int fw_link_id;
884 
885 	for (fw_link_id = 0; fw_link_id < ARRAY_SIZE(mvm->link_id_to_link_conf);
886 	     fw_link_id++) {
887 		struct iwl_stats_ntfy_per_link *link_stats;
888 		struct ieee80211_bss_conf *bss_conf;
889 		struct iwl_mvm_vif *mvmvif;
890 		struct iwl_mvm_vif_link_info *link_info;
891 		int link_id;
892 		int sig;
893 
894 		bss_conf = iwl_mvm_rcu_fw_link_id_to_link_conf(mvm, fw_link_id,
895 							       false);
896 		if (!bss_conf)
897 			continue;
898 
899 		if (bss_conf->vif->type != NL80211_IFTYPE_STATION)
900 			continue;
901 
902 		link_id = bss_conf->link_id;
903 		if (link_id >= ARRAY_SIZE(mvmvif->link))
904 			continue;
905 
906 		mvmvif = iwl_mvm_vif_from_mac80211(bss_conf->vif);
907 		link_info = mvmvif->link[link_id];
908 		if (!link_info)
909 			continue;
910 
911 		link_stats = &per_link[fw_link_id];
912 
913 		link_info->beacon_stats.num_beacons =
914 			le32_to_cpu(link_stats->beacon_counter);
915 
916 		/* we basically just use the u8 to store 8 bits and then treat
917 		 * it as a s8 whenever we take it out to a different type.
918 		 */
919 		link_info->beacon_stats.avg_signal =
920 			-le32_to_cpu(link_stats->beacon_average_energy);
921 
922 		if (link_info->phy_ctxt &&
923 		    link_info->phy_ctxt->channel->band == NL80211_BAND_2GHZ)
924 			iwl_mvm_bt_coex_update_link_esr(mvm, bss_conf->vif,
925 							link_id);
926 
927 		/* make sure that beacon statistics don't go backwards with TCM
928 		 * request to clear statistics
929 		 */
930 		if (mvm->statistics_clear)
931 			mvmvif->link[link_id]->beacon_stats.accu_num_beacons +=
932 				mvmvif->link[link_id]->beacon_stats.num_beacons;
933 
934 		sig = -le32_to_cpu(link_stats->beacon_filter_average_energy);
935 		iwl_mvm_update_link_sig(bss_conf->vif, sig, link_info,
936 					bss_conf);
937 
938 		if (WARN_ONCE(mvmvif->id >= MAC_INDEX_AUX,
939 			      "invalid mvmvif id: %d", mvmvif->id))
940 			continue;
941 
942 		air_time[mvmvif->id] +=
943 			le32_to_cpu(per_link[fw_link_id].air_time);
944 		rx_bytes[mvmvif->id] +=
945 			le32_to_cpu(per_link[fw_link_id].rx_bytes);
946 	}
947 
948 	/* Don't update in case the statistics are not cleared, since
949 	 * we will end up counting twice the same airtime, once in TCM
950 	 * request and once in statistics notification.
951 	 */
952 	if (mvm->statistics_clear) {
953 		__le32 air_time_le[MAC_INDEX_AUX];
954 		__le32 rx_bytes_le[MAC_INDEX_AUX];
955 		int vif_id;
956 
957 		for (vif_id = 0; vif_id < ARRAY_SIZE(air_time_le); vif_id++) {
958 			air_time_le[vif_id] = cpu_to_le32(air_time[vif_id]);
959 			rx_bytes_le[vif_id] = cpu_to_le32(rx_bytes[vif_id]);
960 		}
961 
962 		iwl_mvm_update_tcm_from_stats(mvm, air_time_le, rx_bytes_le);
963 	}
964 }
965 
966 #define SEC_LINK_MIN_PERC 10
967 #define SEC_LINK_MIN_TX 3000
968 #define SEC_LINK_MIN_RX 400
969 
970 static void iwl_mvm_update_esr_mode_tpt(struct iwl_mvm *mvm)
971 {
972 	struct ieee80211_vif *bss_vif = iwl_mvm_get_bss_vif(mvm);
973 	struct iwl_mvm_vif *mvmvif;
974 	struct iwl_mvm_sta *mvmsta;
975 	unsigned long total_tx = 0, total_rx = 0;
976 	unsigned long sec_link_tx = 0, sec_link_rx = 0;
977 	u8 sec_link_tx_perc, sec_link_rx_perc;
978 	u8 sec_link;
979 
980 	lockdep_assert_held(&mvm->mutex);
981 
982 	if (IS_ERR_OR_NULL(bss_vif))
983 		return;
984 
985 	mvmvif = iwl_mvm_vif_from_mac80211(bss_vif);
986 
987 	if (!mvmvif->esr_active || !mvmvif->ap_sta)
988 		return;
989 
990 	mvmsta = iwl_mvm_sta_from_mac80211(mvmvif->ap_sta);
991 	/* We only count for the AP sta in a MLO connection */
992 	if (!mvmsta->mpdu_counters)
993 		return;
994 
995 	/* Get the FW ID of the secondary link */
996 	sec_link = iwl_mvm_get_other_link(bss_vif,
997 					  iwl_mvm_get_primary_link(bss_vif));
998 	if (WARN_ON(!mvmvif->link[sec_link]))
999 		return;
1000 	sec_link = mvmvif->link[sec_link]->fw_link_id;
1001 
1002 	/* Sum up RX and TX MPDUs from the different queues/links */
1003 	for (int q = 0; q < mvm->trans->num_rx_queues; q++) {
1004 		spin_lock_bh(&mvmsta->mpdu_counters[q].lock);
1005 
1006 		/* The link IDs that doesn't exist will contain 0 */
1007 		for (int link = 0; link < IWL_MVM_FW_MAX_LINK_ID; link++) {
1008 			total_tx += mvmsta->mpdu_counters[q].per_link[link].tx;
1009 			total_rx += mvmsta->mpdu_counters[q].per_link[link].rx;
1010 		}
1011 
1012 		sec_link_tx += mvmsta->mpdu_counters[q].per_link[sec_link].tx;
1013 		sec_link_rx += mvmsta->mpdu_counters[q].per_link[sec_link].rx;
1014 
1015 		/*
1016 		 * In EMLSR we have statistics every 5 seconds, so we can reset
1017 		 * the counters upon every statistics notification.
1018 		 */
1019 		memset(mvmsta->mpdu_counters[q].per_link, 0,
1020 		       sizeof(mvmsta->mpdu_counters[q].per_link));
1021 
1022 		spin_unlock_bh(&mvmsta->mpdu_counters[q].lock);
1023 	}
1024 
1025 	IWL_DEBUG_STATS(mvm, "total Tx MPDUs: %ld. total Rx MPDUs: %ld\n",
1026 			total_tx, total_rx);
1027 
1028 	/* If we don't have enough MPDUs - exit EMLSR */
1029 	if (total_tx < IWL_MVM_ENTER_ESR_TPT_THRESH &&
1030 	    total_rx < IWL_MVM_ENTER_ESR_TPT_THRESH) {
1031 		iwl_mvm_block_esr(mvm, bss_vif, IWL_MVM_ESR_BLOCKED_TPT,
1032 				  iwl_mvm_get_primary_link(bss_vif));
1033 		return;
1034 	}
1035 
1036 	/* Calculate the percentage of the secondary link TX/RX */
1037 	sec_link_tx_perc = total_tx ? sec_link_tx * 100 / total_tx : 0;
1038 	sec_link_rx_perc = total_rx ? sec_link_rx * 100 / total_rx : 0;
1039 
1040 	/*
1041 	 * The TX/RX percentage is checked only if it exceeds the required
1042 	 * minimum. In addition, RX is checked only if the TX check failed.
1043 	 */
1044 	if ((total_tx > SEC_LINK_MIN_TX &&
1045 	     sec_link_tx_perc < SEC_LINK_MIN_PERC) ||
1046 	    (total_rx > SEC_LINK_MIN_RX &&
1047 	     sec_link_rx_perc < SEC_LINK_MIN_PERC))
1048 		iwl_mvm_exit_esr(mvm, bss_vif, IWL_MVM_ESR_EXIT_LINK_USAGE,
1049 				 iwl_mvm_get_primary_link(bss_vif));
1050 }
1051 
1052 void iwl_mvm_handle_rx_system_oper_stats(struct iwl_mvm *mvm,
1053 					 struct iwl_rx_cmd_buffer *rxb)
1054 {
1055 	u8 average_energy[IWL_MVM_STATION_COUNT_MAX];
1056 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
1057 	struct iwl_system_statistics_notif_oper *stats;
1058 	int i;
1059 	u32 notif_ver = iwl_fw_lookup_notif_ver(mvm->fw, STATISTICS_GROUP,
1060 						STATISTICS_OPER_NOTIF, 0);
1061 
1062 	if (notif_ver != 3) {
1063 		IWL_FW_CHECK_FAILED(mvm,
1064 				    "Oper stats notif ver %d is not supported\n",
1065 				    notif_ver);
1066 		return;
1067 	}
1068 
1069 	stats = (void *)&pkt->data;
1070 	iwl_mvm_stat_iterator_all_links(mvm, stats->per_link);
1071 
1072 	for (i = 0; i < ARRAY_SIZE(average_energy); i++)
1073 		average_energy[i] =
1074 			le32_to_cpu(stats->per_sta[i].average_energy);
1075 
1076 	ieee80211_iterate_stations_atomic(mvm->hw, iwl_mvm_stats_energy_iter,
1077 					  average_energy);
1078 	iwl_mvm_handle_per_phy_stats(mvm, stats->per_phy);
1079 
1080 	iwl_mvm_update_esr_mode_tpt(mvm);
1081 }
1082 
1083 void iwl_mvm_handle_rx_system_oper_part1_stats(struct iwl_mvm *mvm,
1084 					       struct iwl_rx_cmd_buffer *rxb)
1085 {
1086 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
1087 	struct iwl_system_statistics_part1_notif_oper *part1_stats;
1088 	int i;
1089 	u32 notif_ver = iwl_fw_lookup_notif_ver(mvm->fw, STATISTICS_GROUP,
1090 						STATISTICS_OPER_PART1_NOTIF, 0);
1091 
1092 	if (notif_ver != 4) {
1093 		IWL_FW_CHECK_FAILED(mvm,
1094 				    "Part1 stats notif ver %d is not supported\n",
1095 				    notif_ver);
1096 		return;
1097 	}
1098 
1099 	part1_stats = (void *)&pkt->data;
1100 	mvm->radio_stats.rx_time = 0;
1101 	mvm->radio_stats.tx_time = 0;
1102 	for (i = 0; i < ARRAY_SIZE(part1_stats->per_link); i++) {
1103 		mvm->radio_stats.rx_time +=
1104 			le64_to_cpu(part1_stats->per_link[i].rx_time);
1105 		mvm->radio_stats.tx_time +=
1106 			le64_to_cpu(part1_stats->per_link[i].tx_time);
1107 	}
1108 }
1109 
1110 static void
1111 iwl_mvm_handle_rx_statistics_tlv(struct iwl_mvm *mvm,
1112 				 struct iwl_rx_packet *pkt)
1113 {
1114 	u8 average_energy[IWL_MVM_STATION_COUNT_MAX];
1115 	__le32 air_time[MAC_INDEX_AUX];
1116 	__le32 rx_bytes[MAC_INDEX_AUX];
1117 	__le32 flags = 0;
1118 	int i;
1119 	u32 notif_ver = iwl_fw_lookup_notif_ver(mvm->fw, LEGACY_GROUP,
1120 					      STATISTICS_NOTIFICATION, 0);
1121 
1122 	if (WARN_ONCE(notif_ver > 15,
1123 		      "invalid statistics version id: %d\n", notif_ver))
1124 		return;
1125 
1126 	if (notif_ver == 14) {
1127 		struct iwl_statistics_operational_ntfy_ver_14 *stats =
1128 			(void *)pkt->data;
1129 
1130 		if (!iwl_mvm_verify_stats_len(mvm, pkt, sizeof(*stats)))
1131 			return;
1132 
1133 		iwl_mvm_stats_ver_14(mvm, stats);
1134 
1135 		flags = stats->flags;
1136 		mvm->radio_stats.rx_time = le64_to_cpu(stats->rx_time);
1137 		mvm->radio_stats.tx_time = le64_to_cpu(stats->tx_time);
1138 		mvm->radio_stats.on_time_rf = le64_to_cpu(stats->on_time_rf);
1139 		mvm->radio_stats.on_time_scan =
1140 			le64_to_cpu(stats->on_time_scan);
1141 
1142 		for (i = 0; i < ARRAY_SIZE(average_energy); i++)
1143 			average_energy[i] = le32_to_cpu(stats->average_energy[i]);
1144 
1145 		for (i = 0; i < ARRAY_SIZE(air_time); i++) {
1146 			air_time[i] = stats->air_time[i];
1147 			rx_bytes[i] = stats->rx_bytes[i];
1148 		}
1149 	}
1150 
1151 	if (notif_ver == 15) {
1152 		struct iwl_statistics_operational_ntfy *stats =
1153 			(void *)pkt->data;
1154 
1155 		if (!iwl_mvm_verify_stats_len(mvm, pkt, sizeof(*stats)))
1156 			return;
1157 
1158 		iwl_mvm_stats_ver_15(mvm, stats);
1159 
1160 		flags = stats->flags;
1161 		mvm->radio_stats.rx_time = le64_to_cpu(stats->rx_time);
1162 		mvm->radio_stats.tx_time = le64_to_cpu(stats->tx_time);
1163 		mvm->radio_stats.on_time_rf = le64_to_cpu(stats->on_time_rf);
1164 		mvm->radio_stats.on_time_scan =
1165 			le64_to_cpu(stats->on_time_scan);
1166 
1167 		for (i = 0; i < ARRAY_SIZE(average_energy); i++)
1168 			average_energy[i] =
1169 				le32_to_cpu(stats->per_sta[i].average_energy);
1170 
1171 		for (i = 0; i < ARRAY_SIZE(air_time); i++) {
1172 			air_time[i] = stats->per_mac[i].air_time;
1173 			rx_bytes[i] = stats->per_mac[i].rx_bytes;
1174 		}
1175 	}
1176 
1177 	iwl_mvm_rx_stats_check_trigger(mvm, pkt);
1178 
1179 	ieee80211_iterate_stations_atomic(mvm->hw, iwl_mvm_stats_energy_iter,
1180 					  average_energy);
1181 	/*
1182 	 * Don't update in case the statistics are not cleared, since
1183 	 * we will end up counting twice the same airtime, once in TCM
1184 	 * request and once in statistics notification.
1185 	 */
1186 	if (le32_to_cpu(flags) & IWL_STATISTICS_REPLY_FLG_CLEAR)
1187 		iwl_mvm_update_tcm_from_stats(mvm, air_time, rx_bytes);
1188 }
1189 
1190 void iwl_mvm_handle_rx_statistics(struct iwl_mvm *mvm,
1191 				  struct iwl_rx_packet *pkt)
1192 {
1193 	struct iwl_mvm_stat_data data = {
1194 		.mvm = mvm,
1195 	};
1196 	__le32 *bytes, *air_time, flags;
1197 	int expected_size;
1198 	u8 *energy;
1199 	u8 cmd_ver = iwl_fw_lookup_cmd_ver(mvm->fw,
1200 					   WIDE_ID(SYSTEM_GROUP,
1201 						   SYSTEM_STATISTICS_CMD),
1202 					   IWL_FW_CMD_VER_UNKNOWN);
1203 
1204 	if (cmd_ver != IWL_FW_CMD_VER_UNKNOWN)
1205 		return;
1206 
1207 	/* From ver 14 and up we use TLV statistics format */
1208 	if (iwl_fw_lookup_notif_ver(mvm->fw, LEGACY_GROUP,
1209 				    STATISTICS_NOTIFICATION, 0) >= 14)
1210 		return iwl_mvm_handle_rx_statistics_tlv(mvm, pkt);
1211 
1212 	if (!iwl_mvm_has_new_rx_stats_api(mvm)) {
1213 		if (iwl_mvm_has_new_rx_api(mvm))
1214 			expected_size = sizeof(struct iwl_notif_statistics_v11);
1215 		else
1216 			expected_size = sizeof(struct iwl_notif_statistics_v10);
1217 	} else {
1218 		expected_size = sizeof(struct iwl_notif_statistics);
1219 	}
1220 
1221 	if (WARN_ONCE(iwl_rx_packet_payload_len(pkt) != expected_size,
1222 		      "received invalid statistics size (%d)!\n",
1223 		      iwl_rx_packet_payload_len(pkt)))
1224 		return;
1225 
1226 	if (!iwl_mvm_has_new_rx_stats_api(mvm)) {
1227 		struct iwl_notif_statistics_v11 *stats = (void *)&pkt->data;
1228 
1229 		data.mac_id = stats->rx.general.mac_id;
1230 		data.beacon_filter_average_energy =
1231 			stats->general.common.beacon_filter_average_energy;
1232 
1233 		mvm->rx_stats_v3 = stats->rx;
1234 
1235 		mvm->radio_stats.rx_time =
1236 			le64_to_cpu(stats->general.common.rx_time);
1237 		mvm->radio_stats.tx_time =
1238 			le64_to_cpu(stats->general.common.tx_time);
1239 		mvm->radio_stats.on_time_rf =
1240 			le64_to_cpu(stats->general.common.on_time_rf);
1241 		mvm->radio_stats.on_time_scan =
1242 			le64_to_cpu(stats->general.common.on_time_scan);
1243 
1244 		data.beacon_counter = stats->general.beacon_counter;
1245 		data.beacon_average_energy =
1246 			stats->general.beacon_average_energy;
1247 		flags = stats->flag;
1248 	} else {
1249 		struct iwl_notif_statistics *stats = (void *)&pkt->data;
1250 
1251 		data.mac_id = stats->rx.general.mac_id;
1252 		data.beacon_filter_average_energy =
1253 			stats->general.common.beacon_filter_average_energy;
1254 
1255 		mvm->rx_stats = stats->rx;
1256 
1257 		mvm->radio_stats.rx_time =
1258 			le64_to_cpu(stats->general.common.rx_time);
1259 		mvm->radio_stats.tx_time =
1260 			le64_to_cpu(stats->general.common.tx_time);
1261 		mvm->radio_stats.on_time_rf =
1262 			le64_to_cpu(stats->general.common.on_time_rf);
1263 		mvm->radio_stats.on_time_scan =
1264 			le64_to_cpu(stats->general.common.on_time_scan);
1265 
1266 		data.beacon_counter = stats->general.beacon_counter;
1267 		data.beacon_average_energy =
1268 			stats->general.beacon_average_energy;
1269 		flags = stats->flag;
1270 	}
1271 	data.flags = flags;
1272 
1273 	iwl_mvm_rx_stats_check_trigger(mvm, pkt);
1274 
1275 	ieee80211_iterate_active_interfaces(mvm->hw,
1276 					    IEEE80211_IFACE_ITER_NORMAL,
1277 					    iwl_mvm_stat_iterator,
1278 					    &data);
1279 
1280 	if (!iwl_mvm_has_new_rx_api(mvm))
1281 		return;
1282 
1283 	if (!iwl_mvm_has_new_rx_stats_api(mvm)) {
1284 		struct iwl_notif_statistics_v11 *v11 = (void *)&pkt->data;
1285 
1286 		energy = (void *)&v11->load_stats.avg_energy;
1287 		bytes = (void *)&v11->load_stats.byte_count;
1288 		air_time = (void *)&v11->load_stats.air_time;
1289 	} else {
1290 		struct iwl_notif_statistics *stats = (void *)&pkt->data;
1291 
1292 		energy = (void *)&stats->load_stats.avg_energy;
1293 		bytes = (void *)&stats->load_stats.byte_count;
1294 		air_time = (void *)&stats->load_stats.air_time;
1295 	}
1296 	ieee80211_iterate_stations_atomic(mvm->hw, iwl_mvm_stats_energy_iter,
1297 					  energy);
1298 
1299 	/*
1300 	 * Don't update in case the statistics are not cleared, since
1301 	 * we will end up counting twice the same airtime, once in TCM
1302 	 * request and once in statistics notification.
1303 	 */
1304 	if (le32_to_cpu(flags) & IWL_STATISTICS_REPLY_FLG_CLEAR)
1305 		iwl_mvm_update_tcm_from_stats(mvm, air_time, bytes);
1306 
1307 }
1308 
1309 void iwl_mvm_rx_statistics(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb)
1310 {
1311 	iwl_mvm_handle_rx_statistics(mvm, rxb_addr(rxb));
1312 }
1313 
1314 void iwl_mvm_window_status_notif(struct iwl_mvm *mvm,
1315 				 struct iwl_rx_cmd_buffer *rxb)
1316 {
1317 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
1318 	struct iwl_ba_window_status_notif *notif = (void *)pkt->data;
1319 	int i;
1320 
1321 	BUILD_BUG_ON(ARRAY_SIZE(notif->ra_tid) != BA_WINDOW_STREAMS_MAX);
1322 	BUILD_BUG_ON(ARRAY_SIZE(notif->mpdu_rx_count) != BA_WINDOW_STREAMS_MAX);
1323 	BUILD_BUG_ON(ARRAY_SIZE(notif->bitmap) != BA_WINDOW_STREAMS_MAX);
1324 	BUILD_BUG_ON(ARRAY_SIZE(notif->start_seq_num) != BA_WINDOW_STREAMS_MAX);
1325 
1326 	rcu_read_lock();
1327 	for (i = 0; i < BA_WINDOW_STREAMS_MAX; i++) {
1328 		struct ieee80211_sta *sta;
1329 		u8 sta_id, tid;
1330 		u64 bitmap;
1331 		u32 ssn;
1332 		u16 ratid;
1333 		u16 received_mpdu;
1334 
1335 		ratid = le16_to_cpu(notif->ra_tid[i]);
1336 		/* check that this TID is valid */
1337 		if (!(ratid & BA_WINDOW_STATUS_VALID_MSK))
1338 			continue;
1339 
1340 		received_mpdu = le16_to_cpu(notif->mpdu_rx_count[i]);
1341 		if (received_mpdu == 0)
1342 			continue;
1343 
1344 		tid = ratid & BA_WINDOW_STATUS_TID_MSK;
1345 		/* get the station */
1346 		sta_id = (ratid & BA_WINDOW_STATUS_STA_ID_MSK)
1347 			 >> BA_WINDOW_STATUS_STA_ID_POS;
1348 		sta = rcu_dereference(mvm->fw_id_to_mac_id[sta_id]);
1349 		if (IS_ERR_OR_NULL(sta))
1350 			continue;
1351 		bitmap = le64_to_cpu(notif->bitmap[i]);
1352 		ssn = le32_to_cpu(notif->start_seq_num[i]);
1353 
1354 		/* update mac80211 with the bitmap for the reordering buffer */
1355 		ieee80211_mark_rx_ba_filtered_frames(sta, tid, ssn, bitmap,
1356 						     received_mpdu);
1357 	}
1358 	rcu_read_unlock();
1359 }
1360