xref: /freebsd/sys/contrib/dev/iwlwifi/mvm/mac80211.c (revision 8f06a2b550c6288b48996036c325a1999780cb6a)
1bfcc09ddSBjoern A. Zeeb // SPDX-License-Identifier: GPL-2.0 OR BSD-3-Clause
2bfcc09ddSBjoern A. Zeeb /*
3bfcc09ddSBjoern A. Zeeb  * Copyright (C) 2012-2014, 2018-2020 Intel Corporation
4bfcc09ddSBjoern A. Zeeb  * Copyright (C) 2013-2015 Intel Mobile Communications GmbH
5bfcc09ddSBjoern A. Zeeb  * Copyright (C) 2016-2017 Intel Deutschland GmbH
6bfcc09ddSBjoern A. Zeeb  */
7bfcc09ddSBjoern A. Zeeb #include <linux/kernel.h>
8bfcc09ddSBjoern A. Zeeb #include <linux/slab.h>
9bfcc09ddSBjoern A. Zeeb #include <linux/skbuff.h>
10bfcc09ddSBjoern A. Zeeb #include <linux/netdevice.h>
11bfcc09ddSBjoern A. Zeeb #include <linux/etherdevice.h>
12bfcc09ddSBjoern A. Zeeb #include <linux/ip.h>
13bfcc09ddSBjoern A. Zeeb #include <linux/if_arp.h>
14bfcc09ddSBjoern A. Zeeb #include <linux/time.h>
15bfcc09ddSBjoern A. Zeeb #if defined(__FreeBSD__)
16bfcc09ddSBjoern A. Zeeb #include <linux/math64.h>
17bfcc09ddSBjoern A. Zeeb #endif
18bfcc09ddSBjoern A. Zeeb #include <net/mac80211.h>
19bfcc09ddSBjoern A. Zeeb #include <net/ieee80211_radiotap.h>
20bfcc09ddSBjoern A. Zeeb #include <net/tcp.h>
21bfcc09ddSBjoern A. Zeeb #if defined(__FreeBSD__)
22bfcc09ddSBjoern A. Zeeb #include <linux/udp.h>
23bfcc09ddSBjoern A. Zeeb #endif
24bfcc09ddSBjoern A. Zeeb 
25bfcc09ddSBjoern A. Zeeb #include "iwl-op-mode.h"
26bfcc09ddSBjoern A. Zeeb #include "iwl-io.h"
27bfcc09ddSBjoern A. Zeeb #include "mvm.h"
28bfcc09ddSBjoern A. Zeeb #include "sta.h"
29bfcc09ddSBjoern A. Zeeb #include "time-event.h"
30bfcc09ddSBjoern A. Zeeb #include "iwl-eeprom-parse.h"
31bfcc09ddSBjoern A. Zeeb #include "iwl-phy-db.h"
32bfcc09ddSBjoern A. Zeeb #ifdef CONFIG_NL80211_TESTMODE
33bfcc09ddSBjoern A. Zeeb #include "testmode.h"
34bfcc09ddSBjoern A. Zeeb #endif
35bfcc09ddSBjoern A. Zeeb #include "fw/error-dump.h"
36bfcc09ddSBjoern A. Zeeb #include "iwl-prph.h"
37bfcc09ddSBjoern A. Zeeb #include "iwl-nvm-parse.h"
38bfcc09ddSBjoern A. Zeeb 
39bfcc09ddSBjoern A. Zeeb static const struct ieee80211_iface_limit iwl_mvm_limits[] = {
40bfcc09ddSBjoern A. Zeeb 	{
41bfcc09ddSBjoern A. Zeeb 		.max = 1,
42bfcc09ddSBjoern A. Zeeb 		.types = BIT(NL80211_IFTYPE_STATION),
43bfcc09ddSBjoern A. Zeeb 	},
44bfcc09ddSBjoern A. Zeeb 	{
45bfcc09ddSBjoern A. Zeeb 		.max = 1,
46bfcc09ddSBjoern A. Zeeb 		.types = BIT(NL80211_IFTYPE_AP) |
47bfcc09ddSBjoern A. Zeeb 			BIT(NL80211_IFTYPE_P2P_CLIENT) |
48bfcc09ddSBjoern A. Zeeb 			BIT(NL80211_IFTYPE_P2P_GO),
49bfcc09ddSBjoern A. Zeeb 	},
50bfcc09ddSBjoern A. Zeeb 	{
51bfcc09ddSBjoern A. Zeeb 		.max = 1,
52bfcc09ddSBjoern A. Zeeb 		.types = BIT(NL80211_IFTYPE_P2P_DEVICE),
53bfcc09ddSBjoern A. Zeeb 	},
54bfcc09ddSBjoern A. Zeeb };
55bfcc09ddSBjoern A. Zeeb 
56bfcc09ddSBjoern A. Zeeb static const struct ieee80211_iface_combination iwl_mvm_iface_combinations[] = {
57bfcc09ddSBjoern A. Zeeb 	{
58bfcc09ddSBjoern A. Zeeb 		.num_different_channels = 2,
59bfcc09ddSBjoern A. Zeeb 		.max_interfaces = 3,
60bfcc09ddSBjoern A. Zeeb 		.limits = iwl_mvm_limits,
61bfcc09ddSBjoern A. Zeeb 		.n_limits = ARRAY_SIZE(iwl_mvm_limits),
62bfcc09ddSBjoern A. Zeeb 	},
63bfcc09ddSBjoern A. Zeeb };
64bfcc09ddSBjoern A. Zeeb 
65bfcc09ddSBjoern A. Zeeb #ifdef CONFIG_IWLWIFI_BCAST_FILTERING
66bfcc09ddSBjoern A. Zeeb /*
67bfcc09ddSBjoern A. Zeeb  * Use the reserved field to indicate magic values.
68bfcc09ddSBjoern A. Zeeb  * these values will only be used internally by the driver,
69bfcc09ddSBjoern A. Zeeb  * and won't make it to the fw (reserved will be 0).
70bfcc09ddSBjoern A. Zeeb  * BC_FILTER_MAGIC_IP - configure the val of this attribute to
71bfcc09ddSBjoern A. Zeeb  *	be the vif's ip address. in case there is not a single
72bfcc09ddSBjoern A. Zeeb  *	ip address (0, or more than 1), this attribute will
73bfcc09ddSBjoern A. Zeeb  *	be skipped.
74bfcc09ddSBjoern A. Zeeb  * BC_FILTER_MAGIC_MAC - set the val of this attribute to
75bfcc09ddSBjoern A. Zeeb  *	the LSB bytes of the vif's mac address
76bfcc09ddSBjoern A. Zeeb  */
77bfcc09ddSBjoern A. Zeeb enum {
78bfcc09ddSBjoern A. Zeeb 	BC_FILTER_MAGIC_NONE = 0,
79bfcc09ddSBjoern A. Zeeb 	BC_FILTER_MAGIC_IP,
80bfcc09ddSBjoern A. Zeeb 	BC_FILTER_MAGIC_MAC,
81bfcc09ddSBjoern A. Zeeb };
82bfcc09ddSBjoern A. Zeeb 
83bfcc09ddSBjoern A. Zeeb static const struct iwl_fw_bcast_filter iwl_mvm_default_bcast_filters[] = {
84bfcc09ddSBjoern A. Zeeb 	{
85bfcc09ddSBjoern A. Zeeb 		/* arp */
86bfcc09ddSBjoern A. Zeeb 		.discard = 0,
87bfcc09ddSBjoern A. Zeeb 		.frame_type = BCAST_FILTER_FRAME_TYPE_ALL,
88bfcc09ddSBjoern A. Zeeb 		.attrs = {
89bfcc09ddSBjoern A. Zeeb 			{
90bfcc09ddSBjoern A. Zeeb 				/* frame type - arp, hw type - ethernet */
91bfcc09ddSBjoern A. Zeeb 				.offset_type =
92bfcc09ddSBjoern A. Zeeb 					BCAST_FILTER_OFFSET_PAYLOAD_START,
93bfcc09ddSBjoern A. Zeeb 				.offset = sizeof(rfc1042_header),
94bfcc09ddSBjoern A. Zeeb 				.val = cpu_to_be32(0x08060001),
95bfcc09ddSBjoern A. Zeeb 				.mask = cpu_to_be32(0xffffffff),
96bfcc09ddSBjoern A. Zeeb 			},
97bfcc09ddSBjoern A. Zeeb 			{
98bfcc09ddSBjoern A. Zeeb 				/* arp dest ip */
99bfcc09ddSBjoern A. Zeeb 				.offset_type =
100bfcc09ddSBjoern A. Zeeb 					BCAST_FILTER_OFFSET_PAYLOAD_START,
101bfcc09ddSBjoern A. Zeeb 				.offset = sizeof(rfc1042_header) + 2 +
102bfcc09ddSBjoern A. Zeeb 					  sizeof(struct arphdr) +
103bfcc09ddSBjoern A. Zeeb 					  ETH_ALEN + sizeof(__be32) +
104bfcc09ddSBjoern A. Zeeb 					  ETH_ALEN,
105bfcc09ddSBjoern A. Zeeb 				.mask = cpu_to_be32(0xffffffff),
106bfcc09ddSBjoern A. Zeeb 				/* mark it as special field */
107bfcc09ddSBjoern A. Zeeb 				.reserved1 = cpu_to_le16(BC_FILTER_MAGIC_IP),
108bfcc09ddSBjoern A. Zeeb 			},
109bfcc09ddSBjoern A. Zeeb 		},
110bfcc09ddSBjoern A. Zeeb 	},
111bfcc09ddSBjoern A. Zeeb 	{
112bfcc09ddSBjoern A. Zeeb 		/* dhcp offer bcast */
113bfcc09ddSBjoern A. Zeeb 		.discard = 0,
114bfcc09ddSBjoern A. Zeeb 		.frame_type = BCAST_FILTER_FRAME_TYPE_IPV4,
115bfcc09ddSBjoern A. Zeeb 		.attrs = {
116bfcc09ddSBjoern A. Zeeb 			{
117bfcc09ddSBjoern A. Zeeb 				/* udp dest port - 68 (bootp client)*/
118bfcc09ddSBjoern A. Zeeb 				.offset_type = BCAST_FILTER_OFFSET_IP_END,
119bfcc09ddSBjoern A. Zeeb 				.offset = offsetof(struct udphdr, dest),
120bfcc09ddSBjoern A. Zeeb 				.val = cpu_to_be32(0x00440000),
121bfcc09ddSBjoern A. Zeeb 				.mask = cpu_to_be32(0xffff0000),
122bfcc09ddSBjoern A. Zeeb 			},
123bfcc09ddSBjoern A. Zeeb 			{
124bfcc09ddSBjoern A. Zeeb 				/* dhcp - lsb bytes of client hw address */
125bfcc09ddSBjoern A. Zeeb 				.offset_type = BCAST_FILTER_OFFSET_IP_END,
126bfcc09ddSBjoern A. Zeeb 				.offset = 38,
127bfcc09ddSBjoern A. Zeeb 				.mask = cpu_to_be32(0xffffffff),
128bfcc09ddSBjoern A. Zeeb 				/* mark it as special field */
129bfcc09ddSBjoern A. Zeeb 				.reserved1 = cpu_to_le16(BC_FILTER_MAGIC_MAC),
130bfcc09ddSBjoern A. Zeeb 			},
131bfcc09ddSBjoern A. Zeeb 		},
132bfcc09ddSBjoern A. Zeeb 	},
133bfcc09ddSBjoern A. Zeeb 	/* last filter must be empty */
134bfcc09ddSBjoern A. Zeeb 	{},
135bfcc09ddSBjoern A. Zeeb };
136bfcc09ddSBjoern A. Zeeb #endif
137bfcc09ddSBjoern A. Zeeb 
138bfcc09ddSBjoern A. Zeeb static const struct cfg80211_pmsr_capabilities iwl_mvm_pmsr_capa = {
139bfcc09ddSBjoern A. Zeeb 	.max_peers = IWL_MVM_TOF_MAX_APS,
140bfcc09ddSBjoern A. Zeeb 	.report_ap_tsf = 1,
141bfcc09ddSBjoern A. Zeeb 	.randomize_mac_addr = 1,
142bfcc09ddSBjoern A. Zeeb 
143bfcc09ddSBjoern A. Zeeb 	.ftm = {
144bfcc09ddSBjoern A. Zeeb 		.supported = 1,
145bfcc09ddSBjoern A. Zeeb 		.asap = 1,
146bfcc09ddSBjoern A. Zeeb 		.non_asap = 1,
147bfcc09ddSBjoern A. Zeeb 		.request_lci = 1,
148bfcc09ddSBjoern A. Zeeb 		.request_civicloc = 1,
149bfcc09ddSBjoern A. Zeeb 		.trigger_based = 1,
150bfcc09ddSBjoern A. Zeeb 		.non_trigger_based = 1,
151bfcc09ddSBjoern A. Zeeb 		.max_bursts_exponent = -1, /* all supported */
152bfcc09ddSBjoern A. Zeeb 		.max_ftms_per_burst = 0, /* no limits */
153bfcc09ddSBjoern A. Zeeb 		.bandwidths = BIT(NL80211_CHAN_WIDTH_20_NOHT) |
154bfcc09ddSBjoern A. Zeeb 			      BIT(NL80211_CHAN_WIDTH_20) |
155bfcc09ddSBjoern A. Zeeb 			      BIT(NL80211_CHAN_WIDTH_40) |
156bfcc09ddSBjoern A. Zeeb 			      BIT(NL80211_CHAN_WIDTH_80) |
157bfcc09ddSBjoern A. Zeeb 			      BIT(NL80211_CHAN_WIDTH_160),
158bfcc09ddSBjoern A. Zeeb 		.preambles = BIT(NL80211_PREAMBLE_LEGACY) |
159bfcc09ddSBjoern A. Zeeb 			     BIT(NL80211_PREAMBLE_HT) |
160bfcc09ddSBjoern A. Zeeb 			     BIT(NL80211_PREAMBLE_VHT) |
161bfcc09ddSBjoern A. Zeeb 			     BIT(NL80211_PREAMBLE_HE),
162bfcc09ddSBjoern A. Zeeb 	},
163bfcc09ddSBjoern A. Zeeb };
164bfcc09ddSBjoern A. Zeeb 
165bfcc09ddSBjoern A. Zeeb static int __iwl_mvm_mac_set_key(struct ieee80211_hw *hw,
166bfcc09ddSBjoern A. Zeeb 				 enum set_key_cmd cmd,
167bfcc09ddSBjoern A. Zeeb 				 struct ieee80211_vif *vif,
168bfcc09ddSBjoern A. Zeeb 				 struct ieee80211_sta *sta,
169bfcc09ddSBjoern A. Zeeb 				 struct ieee80211_key_conf *key);
170bfcc09ddSBjoern A. Zeeb 
171bfcc09ddSBjoern A. Zeeb static void iwl_mvm_reset_phy_ctxts(struct iwl_mvm *mvm)
172bfcc09ddSBjoern A. Zeeb {
173bfcc09ddSBjoern A. Zeeb 	int i;
174bfcc09ddSBjoern A. Zeeb 
175bfcc09ddSBjoern A. Zeeb 	memset(mvm->phy_ctxts, 0, sizeof(mvm->phy_ctxts));
176bfcc09ddSBjoern A. Zeeb 	for (i = 0; i < NUM_PHY_CTX; i++) {
177bfcc09ddSBjoern A. Zeeb 		mvm->phy_ctxts[i].id = i;
178bfcc09ddSBjoern A. Zeeb 		mvm->phy_ctxts[i].ref = 0;
179bfcc09ddSBjoern A. Zeeb 	}
180bfcc09ddSBjoern A. Zeeb }
181bfcc09ddSBjoern A. Zeeb 
182bfcc09ddSBjoern A. Zeeb struct ieee80211_regdomain *iwl_mvm_get_regdomain(struct wiphy *wiphy,
183bfcc09ddSBjoern A. Zeeb 						  const char *alpha2,
184bfcc09ddSBjoern A. Zeeb 						  enum iwl_mcc_source src_id,
185bfcc09ddSBjoern A. Zeeb 						  bool *changed)
186bfcc09ddSBjoern A. Zeeb {
187bfcc09ddSBjoern A. Zeeb 	struct ieee80211_regdomain *regd = NULL;
188bfcc09ddSBjoern A. Zeeb 	struct ieee80211_hw *hw = wiphy_to_ieee80211_hw(wiphy);
189bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
190bfcc09ddSBjoern A. Zeeb 	struct iwl_mcc_update_resp *resp;
191bfcc09ddSBjoern A. Zeeb 	u8 resp_ver;
192bfcc09ddSBjoern A. Zeeb 
193bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_LAR(mvm, "Getting regdomain data for %s from FW\n", alpha2);
194bfcc09ddSBjoern A. Zeeb 
195bfcc09ddSBjoern A. Zeeb 	lockdep_assert_held(&mvm->mutex);
196bfcc09ddSBjoern A. Zeeb 
197bfcc09ddSBjoern A. Zeeb 	resp = iwl_mvm_update_mcc(mvm, alpha2, src_id);
198bfcc09ddSBjoern A. Zeeb 	if (IS_ERR_OR_NULL(resp)) {
199bfcc09ddSBjoern A. Zeeb 		IWL_DEBUG_LAR(mvm, "Could not get update from FW %d\n",
200bfcc09ddSBjoern A. Zeeb 			      PTR_ERR_OR_ZERO(resp));
201bfcc09ddSBjoern A. Zeeb 		goto out;
202bfcc09ddSBjoern A. Zeeb 	}
203bfcc09ddSBjoern A. Zeeb 
204bfcc09ddSBjoern A. Zeeb 	if (changed) {
205bfcc09ddSBjoern A. Zeeb 		u32 status = le32_to_cpu(resp->status);
206bfcc09ddSBjoern A. Zeeb 
207bfcc09ddSBjoern A. Zeeb 		*changed = (status == MCC_RESP_NEW_CHAN_PROFILE ||
208bfcc09ddSBjoern A. Zeeb 			    status == MCC_RESP_ILLEGAL);
209bfcc09ddSBjoern A. Zeeb 	}
210bfcc09ddSBjoern A. Zeeb 	resp_ver = iwl_fw_lookup_notif_ver(mvm->fw, IWL_ALWAYS_LONG_GROUP,
211bfcc09ddSBjoern A. Zeeb 					   MCC_UPDATE_CMD, 0);
212bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_LAR(mvm, "MCC update response version: %d\n", resp_ver);
213bfcc09ddSBjoern A. Zeeb 
214bfcc09ddSBjoern A. Zeeb 	regd = iwl_parse_nvm_mcc_info(mvm->trans->dev, mvm->cfg,
215bfcc09ddSBjoern A. Zeeb 				      __le32_to_cpu(resp->n_channels),
216bfcc09ddSBjoern A. Zeeb 				      resp->channels,
217bfcc09ddSBjoern A. Zeeb 				      __le16_to_cpu(resp->mcc),
218bfcc09ddSBjoern A. Zeeb 				      __le16_to_cpu(resp->geo_info),
219bfcc09ddSBjoern A. Zeeb 				      __le16_to_cpu(resp->cap), resp_ver);
220bfcc09ddSBjoern A. Zeeb 	/* Store the return source id */
221bfcc09ddSBjoern A. Zeeb 	src_id = resp->source_id;
222bfcc09ddSBjoern A. Zeeb 	kfree(resp);
223bfcc09ddSBjoern A. Zeeb 	if (IS_ERR_OR_NULL(regd)) {
224bfcc09ddSBjoern A. Zeeb 		IWL_DEBUG_LAR(mvm, "Could not get parse update from FW %d\n",
225bfcc09ddSBjoern A. Zeeb 			      PTR_ERR_OR_ZERO(regd));
226bfcc09ddSBjoern A. Zeeb 		goto out;
227bfcc09ddSBjoern A. Zeeb 	}
228bfcc09ddSBjoern A. Zeeb 
229bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_LAR(mvm, "setting alpha2 from FW to %s (0x%x, 0x%x) src=%d\n",
230bfcc09ddSBjoern A. Zeeb 		      regd->alpha2, regd->alpha2[0], regd->alpha2[1], src_id);
231bfcc09ddSBjoern A. Zeeb 	mvm->lar_regdom_set = true;
232bfcc09ddSBjoern A. Zeeb 	mvm->mcc_src = src_id;
233bfcc09ddSBjoern A. Zeeb 
234bfcc09ddSBjoern A. Zeeb out:
235bfcc09ddSBjoern A. Zeeb 	return regd;
236bfcc09ddSBjoern A. Zeeb }
237bfcc09ddSBjoern A. Zeeb 
238bfcc09ddSBjoern A. Zeeb void iwl_mvm_update_changed_regdom(struct iwl_mvm *mvm)
239bfcc09ddSBjoern A. Zeeb {
240bfcc09ddSBjoern A. Zeeb 	bool changed;
241bfcc09ddSBjoern A. Zeeb 	struct ieee80211_regdomain *regd;
242bfcc09ddSBjoern A. Zeeb 
243bfcc09ddSBjoern A. Zeeb 	if (!iwl_mvm_is_lar_supported(mvm))
244bfcc09ddSBjoern A. Zeeb 		return;
245bfcc09ddSBjoern A. Zeeb 
246bfcc09ddSBjoern A. Zeeb 	regd = iwl_mvm_get_current_regdomain(mvm, &changed);
247bfcc09ddSBjoern A. Zeeb 	if (!IS_ERR_OR_NULL(regd)) {
248bfcc09ddSBjoern A. Zeeb 		/* only update the regulatory core if changed */
249bfcc09ddSBjoern A. Zeeb 		if (changed)
250bfcc09ddSBjoern A. Zeeb 			regulatory_set_wiphy_regd(mvm->hw->wiphy, regd);
251bfcc09ddSBjoern A. Zeeb 
252bfcc09ddSBjoern A. Zeeb 		kfree(regd);
253bfcc09ddSBjoern A. Zeeb 	}
254bfcc09ddSBjoern A. Zeeb }
255bfcc09ddSBjoern A. Zeeb 
256bfcc09ddSBjoern A. Zeeb struct ieee80211_regdomain *iwl_mvm_get_current_regdomain(struct iwl_mvm *mvm,
257bfcc09ddSBjoern A. Zeeb 							  bool *changed)
258bfcc09ddSBjoern A. Zeeb {
259bfcc09ddSBjoern A. Zeeb 	return iwl_mvm_get_regdomain(mvm->hw->wiphy, "ZZ",
260bfcc09ddSBjoern A. Zeeb 				     iwl_mvm_is_wifi_mcc_supported(mvm) ?
261bfcc09ddSBjoern A. Zeeb 				     MCC_SOURCE_GET_CURRENT :
262bfcc09ddSBjoern A. Zeeb 				     MCC_SOURCE_OLD_FW, changed);
263bfcc09ddSBjoern A. Zeeb }
264bfcc09ddSBjoern A. Zeeb 
265bfcc09ddSBjoern A. Zeeb int iwl_mvm_init_fw_regd(struct iwl_mvm *mvm)
266bfcc09ddSBjoern A. Zeeb {
267bfcc09ddSBjoern A. Zeeb 	enum iwl_mcc_source used_src;
268bfcc09ddSBjoern A. Zeeb 	struct ieee80211_regdomain *regd;
269bfcc09ddSBjoern A. Zeeb 	int ret;
270bfcc09ddSBjoern A. Zeeb 	bool changed;
271bfcc09ddSBjoern A. Zeeb 	const struct ieee80211_regdomain *r =
272bfcc09ddSBjoern A. Zeeb 			wiphy_dereference(mvm->hw->wiphy, mvm->hw->wiphy->regd);
273bfcc09ddSBjoern A. Zeeb 
274bfcc09ddSBjoern A. Zeeb 	if (!r)
275bfcc09ddSBjoern A. Zeeb 		return -ENOENT;
276bfcc09ddSBjoern A. Zeeb 
277bfcc09ddSBjoern A. Zeeb 	/* save the last source in case we overwrite it below */
278bfcc09ddSBjoern A. Zeeb 	used_src = mvm->mcc_src;
279bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_is_wifi_mcc_supported(mvm)) {
280bfcc09ddSBjoern A. Zeeb 		/* Notify the firmware we support wifi location updates */
281bfcc09ddSBjoern A. Zeeb 		regd = iwl_mvm_get_current_regdomain(mvm, NULL);
282bfcc09ddSBjoern A. Zeeb 		if (!IS_ERR_OR_NULL(regd))
283bfcc09ddSBjoern A. Zeeb 			kfree(regd);
284bfcc09ddSBjoern A. Zeeb 	}
285bfcc09ddSBjoern A. Zeeb 
286bfcc09ddSBjoern A. Zeeb 	/* Now set our last stored MCC and source */
287bfcc09ddSBjoern A. Zeeb 	regd = iwl_mvm_get_regdomain(mvm->hw->wiphy, r->alpha2, used_src,
288bfcc09ddSBjoern A. Zeeb 				     &changed);
289bfcc09ddSBjoern A. Zeeb 	if (IS_ERR_OR_NULL(regd))
290bfcc09ddSBjoern A. Zeeb 		return -EIO;
291bfcc09ddSBjoern A. Zeeb 
292bfcc09ddSBjoern A. Zeeb 	/* update cfg80211 if the regdomain was changed */
293bfcc09ddSBjoern A. Zeeb 	if (changed)
294bfcc09ddSBjoern A. Zeeb 		ret = regulatory_set_wiphy_regd_sync(mvm->hw->wiphy, regd);
295bfcc09ddSBjoern A. Zeeb 	else
296bfcc09ddSBjoern A. Zeeb 		ret = 0;
297bfcc09ddSBjoern A. Zeeb 
298bfcc09ddSBjoern A. Zeeb 	kfree(regd);
299bfcc09ddSBjoern A. Zeeb 	return ret;
300bfcc09ddSBjoern A. Zeeb }
301bfcc09ddSBjoern A. Zeeb 
302bfcc09ddSBjoern A. Zeeb static const u8 he_if_types_ext_capa_sta[] = {
303bfcc09ddSBjoern A. Zeeb 	 [0] = WLAN_EXT_CAPA1_EXT_CHANNEL_SWITCHING,
304bfcc09ddSBjoern A. Zeeb 	 [2] = WLAN_EXT_CAPA3_MULTI_BSSID_SUPPORT,
305bfcc09ddSBjoern A. Zeeb 	 [7] = WLAN_EXT_CAPA8_OPMODE_NOTIF,
306bfcc09ddSBjoern A. Zeeb 	 [9] = WLAN_EXT_CAPA10_TWT_REQUESTER_SUPPORT,
307bfcc09ddSBjoern A. Zeeb };
308bfcc09ddSBjoern A. Zeeb 
309bfcc09ddSBjoern A. Zeeb static const struct wiphy_iftype_ext_capab he_iftypes_ext_capa[] = {
310bfcc09ddSBjoern A. Zeeb 	{
311bfcc09ddSBjoern A. Zeeb 		.iftype = NL80211_IFTYPE_STATION,
312bfcc09ddSBjoern A. Zeeb 		.extended_capabilities = he_if_types_ext_capa_sta,
313bfcc09ddSBjoern A. Zeeb 		.extended_capabilities_mask = he_if_types_ext_capa_sta,
314bfcc09ddSBjoern A. Zeeb 		.extended_capabilities_len = sizeof(he_if_types_ext_capa_sta),
315bfcc09ddSBjoern A. Zeeb 	},
316bfcc09ddSBjoern A. Zeeb };
317bfcc09ddSBjoern A. Zeeb 
318bfcc09ddSBjoern A. Zeeb static int
319bfcc09ddSBjoern A. Zeeb iwl_mvm_op_get_antenna(struct ieee80211_hw *hw, u32 *tx_ant, u32 *rx_ant)
320bfcc09ddSBjoern A. Zeeb {
321bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
322bfcc09ddSBjoern A. Zeeb 	*tx_ant = iwl_mvm_get_valid_tx_ant(mvm);
323bfcc09ddSBjoern A. Zeeb 	*rx_ant = iwl_mvm_get_valid_rx_ant(mvm);
324bfcc09ddSBjoern A. Zeeb 	return 0;
325bfcc09ddSBjoern A. Zeeb }
326bfcc09ddSBjoern A. Zeeb 
327bfcc09ddSBjoern A. Zeeb int iwl_mvm_mac_setup_register(struct iwl_mvm *mvm)
328bfcc09ddSBjoern A. Zeeb {
329bfcc09ddSBjoern A. Zeeb 	struct ieee80211_hw *hw = mvm->hw;
330bfcc09ddSBjoern A. Zeeb 	int num_mac, ret, i;
331bfcc09ddSBjoern A. Zeeb 	static const u32 mvm_ciphers[] = {
332bfcc09ddSBjoern A. Zeeb 		WLAN_CIPHER_SUITE_WEP40,
333bfcc09ddSBjoern A. Zeeb 		WLAN_CIPHER_SUITE_WEP104,
334bfcc09ddSBjoern A. Zeeb 		WLAN_CIPHER_SUITE_TKIP,
335bfcc09ddSBjoern A. Zeeb 		WLAN_CIPHER_SUITE_CCMP,
336bfcc09ddSBjoern A. Zeeb 	};
337bfcc09ddSBjoern A. Zeeb #ifdef CONFIG_PM_SLEEP
338bfcc09ddSBjoern A. Zeeb 	bool unified = fw_has_capa(&mvm->fw->ucode_capa,
339bfcc09ddSBjoern A. Zeeb 				   IWL_UCODE_TLV_CAPA_CNSLDTD_D3_D0_IMG);
340bfcc09ddSBjoern A. Zeeb #endif
341bfcc09ddSBjoern A. Zeeb 
342bfcc09ddSBjoern A. Zeeb 	/* Tell mac80211 our characteristics */
343bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, SIGNAL_DBM);
344bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, SPECTRUM_MGMT);
345bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS);
346bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, WANT_MONITOR_VIF);
347bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, SUPPORTS_PS);
348bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, SUPPORTS_DYNAMIC_PS);
349bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, AMPDU_AGGREGATION);
350bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, TIMING_BEACON_ONLY);
351bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, CONNECTION_MONITOR);
352bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, CHANCTX_STA_CSA);
353bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, SUPPORT_FAST_XMIT);
354bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, SUPPORTS_CLONED_SKBS);
355bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, SUPPORTS_AMSDU_IN_AMPDU);
356bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, NEEDS_UNIQUE_STA_ADDR);
357bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, DEAUTH_NEED_MGD_TX_PREP);
358bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, SUPPORTS_VHT_EXT_NSS_BW);
359bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, BUFF_MMPDU_TXQ);
360bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, STA_MMPDU_TXQ);
361bfcc09ddSBjoern A. Zeeb 	/*
362bfcc09ddSBjoern A. Zeeb 	 * On older devices, enabling TX A-MSDU occasionally leads to
363bfcc09ddSBjoern A. Zeeb 	 * something getting messed up, the command read from the FIFO
364bfcc09ddSBjoern A. Zeeb 	 * gets out of sync and isn't a TX command, so that we have an
365bfcc09ddSBjoern A. Zeeb 	 * assert EDC.
366bfcc09ddSBjoern A. Zeeb 	 *
367bfcc09ddSBjoern A. Zeeb 	 * It's not clear where the bug is, but since we didn't used to
368bfcc09ddSBjoern A. Zeeb 	 * support A-MSDU until moving the mac80211 iTXQs, just leave it
369bfcc09ddSBjoern A. Zeeb 	 * for older devices. We also don't see this issue on any newer
370bfcc09ddSBjoern A. Zeeb 	 * devices.
371bfcc09ddSBjoern A. Zeeb 	 */
372bfcc09ddSBjoern A. Zeeb 	if (mvm->trans->trans_cfg->device_family >= IWL_DEVICE_FAMILY_9000)
373bfcc09ddSBjoern A. Zeeb 		ieee80211_hw_set(hw, TX_AMSDU);
374bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, TX_FRAG_LIST);
375bfcc09ddSBjoern A. Zeeb 
376bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_has_tlc_offload(mvm)) {
377bfcc09ddSBjoern A. Zeeb 		ieee80211_hw_set(hw, TX_AMPDU_SETUP_IN_HW);
378bfcc09ddSBjoern A. Zeeb 		ieee80211_hw_set(hw, HAS_RATE_CONTROL);
379bfcc09ddSBjoern A. Zeeb 	}
380bfcc09ddSBjoern A. Zeeb 
381bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_has_new_rx_api(mvm))
382bfcc09ddSBjoern A. Zeeb 		ieee80211_hw_set(hw, SUPPORTS_REORDERING_BUFFER);
383bfcc09ddSBjoern A. Zeeb 
384bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa,
385bfcc09ddSBjoern A. Zeeb 			IWL_UCODE_TLV_CAPA_STA_PM_NOTIF)) {
386bfcc09ddSBjoern A. Zeeb 		ieee80211_hw_set(hw, AP_LINK_PS);
387bfcc09ddSBjoern A. Zeeb 	} else if (WARN_ON(iwl_mvm_has_new_tx_api(mvm))) {
388bfcc09ddSBjoern A. Zeeb 		/*
389bfcc09ddSBjoern A. Zeeb 		 * we absolutely need this for the new TX API since that comes
390bfcc09ddSBjoern A. Zeeb 		 * with many more queues than the current code can deal with
391bfcc09ddSBjoern A. Zeeb 		 * for station powersave
392bfcc09ddSBjoern A. Zeeb 		 */
393bfcc09ddSBjoern A. Zeeb 		return -EINVAL;
394bfcc09ddSBjoern A. Zeeb 	}
395bfcc09ddSBjoern A. Zeeb 
396bfcc09ddSBjoern A. Zeeb 	if (mvm->trans->num_rx_queues > 1)
397bfcc09ddSBjoern A. Zeeb 		ieee80211_hw_set(hw, USES_RSS);
398bfcc09ddSBjoern A. Zeeb 
399bfcc09ddSBjoern A. Zeeb 	if (mvm->trans->max_skb_frags)
400bfcc09ddSBjoern A. Zeeb 		hw->netdev_features = NETIF_F_HIGHDMA | NETIF_F_SG;
401bfcc09ddSBjoern A. Zeeb 
402bfcc09ddSBjoern A. Zeeb 	hw->queues = IEEE80211_NUM_ACS;
403bfcc09ddSBjoern A. Zeeb 	hw->offchannel_tx_hw_queue = IWL_MVM_OFFCHANNEL_QUEUE;
404bfcc09ddSBjoern A. Zeeb 	hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FEC |
405bfcc09ddSBjoern A. Zeeb 				    IEEE80211_RADIOTAP_MCS_HAVE_STBC;
406bfcc09ddSBjoern A. Zeeb 	hw->radiotap_vht_details |= IEEE80211_RADIOTAP_VHT_KNOWN_STBC |
407bfcc09ddSBjoern A. Zeeb 		IEEE80211_RADIOTAP_VHT_KNOWN_BEAMFORMED;
408bfcc09ddSBjoern A. Zeeb 
409bfcc09ddSBjoern A. Zeeb 	hw->radiotap_timestamp.units_pos =
410bfcc09ddSBjoern A. Zeeb 		IEEE80211_RADIOTAP_TIMESTAMP_UNIT_US |
411bfcc09ddSBjoern A. Zeeb 		IEEE80211_RADIOTAP_TIMESTAMP_SPOS_PLCP_SIG_ACQ;
412bfcc09ddSBjoern A. Zeeb 	/* this is the case for CCK frames, it's better (only 8) for OFDM */
413bfcc09ddSBjoern A. Zeeb 	hw->radiotap_timestamp.accuracy = 22;
414bfcc09ddSBjoern A. Zeeb 
415bfcc09ddSBjoern A. Zeeb 	if (!iwl_mvm_has_tlc_offload(mvm))
416bfcc09ddSBjoern A. Zeeb 		hw->rate_control_algorithm = RS_NAME;
417bfcc09ddSBjoern A. Zeeb 
418bfcc09ddSBjoern A. Zeeb 	hw->uapsd_queues = IWL_MVM_UAPSD_QUEUES;
419bfcc09ddSBjoern A. Zeeb 	hw->uapsd_max_sp_len = IWL_UAPSD_MAX_SP;
420bfcc09ddSBjoern A. Zeeb 	hw->max_tx_fragments = mvm->trans->max_skb_frags;
421bfcc09ddSBjoern A. Zeeb 
422bfcc09ddSBjoern A. Zeeb 	BUILD_BUG_ON(ARRAY_SIZE(mvm->ciphers) < ARRAY_SIZE(mvm_ciphers) + 6);
423bfcc09ddSBjoern A. Zeeb 	memcpy(mvm->ciphers, mvm_ciphers, sizeof(mvm_ciphers));
424bfcc09ddSBjoern A. Zeeb 	hw->wiphy->n_cipher_suites = ARRAY_SIZE(mvm_ciphers);
425bfcc09ddSBjoern A. Zeeb 	hw->wiphy->cipher_suites = mvm->ciphers;
426bfcc09ddSBjoern A. Zeeb 
427bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_has_new_rx_api(mvm)) {
428bfcc09ddSBjoern A. Zeeb 		mvm->ciphers[hw->wiphy->n_cipher_suites] =
429bfcc09ddSBjoern A. Zeeb 			WLAN_CIPHER_SUITE_GCMP;
430bfcc09ddSBjoern A. Zeeb 		hw->wiphy->n_cipher_suites++;
431bfcc09ddSBjoern A. Zeeb 		mvm->ciphers[hw->wiphy->n_cipher_suites] =
432bfcc09ddSBjoern A. Zeeb 			WLAN_CIPHER_SUITE_GCMP_256;
433bfcc09ddSBjoern A. Zeeb 		hw->wiphy->n_cipher_suites++;
434bfcc09ddSBjoern A. Zeeb 	}
435bfcc09ddSBjoern A. Zeeb 
436bfcc09ddSBjoern A. Zeeb 	if (iwlwifi_mod_params.swcrypto)
437bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm,
438bfcc09ddSBjoern A. Zeeb 			"iwlmvm doesn't allow to disable HW crypto, check swcrypto module parameter\n");
439bfcc09ddSBjoern A. Zeeb 	if (!iwlwifi_mod_params.bt_coex_active)
440bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm,
441bfcc09ddSBjoern A. Zeeb 			"iwlmvm doesn't allow to disable BT Coex, check bt_coex_active module parameter\n");
442bfcc09ddSBjoern A. Zeeb 
443bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, MFP_CAPABLE);
444bfcc09ddSBjoern A. Zeeb 	mvm->ciphers[hw->wiphy->n_cipher_suites] = WLAN_CIPHER_SUITE_AES_CMAC;
445bfcc09ddSBjoern A. Zeeb 	hw->wiphy->n_cipher_suites++;
446bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_has_new_rx_api(mvm)) {
447bfcc09ddSBjoern A. Zeeb 		mvm->ciphers[hw->wiphy->n_cipher_suites] =
448bfcc09ddSBjoern A. Zeeb 			WLAN_CIPHER_SUITE_BIP_GMAC_128;
449bfcc09ddSBjoern A. Zeeb 		hw->wiphy->n_cipher_suites++;
450bfcc09ddSBjoern A. Zeeb 		mvm->ciphers[hw->wiphy->n_cipher_suites] =
451bfcc09ddSBjoern A. Zeeb 			WLAN_CIPHER_SUITE_BIP_GMAC_256;
452bfcc09ddSBjoern A. Zeeb 		hw->wiphy->n_cipher_suites++;
453bfcc09ddSBjoern A. Zeeb 	}
454bfcc09ddSBjoern A. Zeeb 
455bfcc09ddSBjoern A. Zeeb 	/* currently FW API supports only one optional cipher scheme */
456bfcc09ddSBjoern A. Zeeb 	if (mvm->fw->cs[0].cipher) {
457bfcc09ddSBjoern A. Zeeb 		const struct iwl_fw_cipher_scheme *fwcs = &mvm->fw->cs[0];
458bfcc09ddSBjoern A. Zeeb 		struct ieee80211_cipher_scheme *cs = &mvm->cs[0];
459bfcc09ddSBjoern A. Zeeb 
460bfcc09ddSBjoern A. Zeeb 		mvm->hw->n_cipher_schemes = 1;
461bfcc09ddSBjoern A. Zeeb 
462bfcc09ddSBjoern A. Zeeb 		cs->cipher = le32_to_cpu(fwcs->cipher);
463bfcc09ddSBjoern A. Zeeb 		cs->iftype = BIT(NL80211_IFTYPE_STATION);
464bfcc09ddSBjoern A. Zeeb 		cs->hdr_len = fwcs->hdr_len;
465bfcc09ddSBjoern A. Zeeb 		cs->pn_len = fwcs->pn_len;
466bfcc09ddSBjoern A. Zeeb 		cs->pn_off = fwcs->pn_off;
467bfcc09ddSBjoern A. Zeeb 		cs->key_idx_off = fwcs->key_idx_off;
468bfcc09ddSBjoern A. Zeeb 		cs->key_idx_mask = fwcs->key_idx_mask;
469bfcc09ddSBjoern A. Zeeb 		cs->key_idx_shift = fwcs->key_idx_shift;
470bfcc09ddSBjoern A. Zeeb 		cs->mic_len = fwcs->mic_len;
471bfcc09ddSBjoern A. Zeeb 
472bfcc09ddSBjoern A. Zeeb 		mvm->hw->cipher_schemes = mvm->cs;
473bfcc09ddSBjoern A. Zeeb 		mvm->ciphers[hw->wiphy->n_cipher_suites] = cs->cipher;
474bfcc09ddSBjoern A. Zeeb 		hw->wiphy->n_cipher_suites++;
475bfcc09ddSBjoern A. Zeeb 	}
476bfcc09ddSBjoern A. Zeeb 
477bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa,
478bfcc09ddSBjoern A. Zeeb 			IWL_UCODE_TLV_CAPA_FTM_CALIBRATED)) {
479bfcc09ddSBjoern A. Zeeb 		wiphy_ext_feature_set(hw->wiphy,
480bfcc09ddSBjoern A. Zeeb 				      NL80211_EXT_FEATURE_ENABLE_FTM_RESPONDER);
481bfcc09ddSBjoern A. Zeeb 		hw->wiphy->pmsr_capa = &iwl_mvm_pmsr_capa;
482bfcc09ddSBjoern A. Zeeb 	}
483bfcc09ddSBjoern A. Zeeb 
484bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa,
485bfcc09ddSBjoern A. Zeeb 			IWL_UCODE_TLV_CAPA_BIGTK_SUPPORT))
486bfcc09ddSBjoern A. Zeeb 		wiphy_ext_feature_set(hw->wiphy,
487bfcc09ddSBjoern A. Zeeb 				      NL80211_EXT_FEATURE_BEACON_PROTECTION_CLIENT);
488bfcc09ddSBjoern A. Zeeb 
489bfcc09ddSBjoern A. Zeeb 	ieee80211_hw_set(hw, SINGLE_SCAN_ON_ALL_BANDS);
490bfcc09ddSBjoern A. Zeeb 	hw->wiphy->features |=
491bfcc09ddSBjoern A. Zeeb 		NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR |
492bfcc09ddSBjoern A. Zeeb 		NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR |
493bfcc09ddSBjoern A. Zeeb 		NL80211_FEATURE_ND_RANDOM_MAC_ADDR;
494bfcc09ddSBjoern A. Zeeb 
495bfcc09ddSBjoern A. Zeeb 	hw->sta_data_size = sizeof(struct iwl_mvm_sta);
496bfcc09ddSBjoern A. Zeeb 	hw->vif_data_size = sizeof(struct iwl_mvm_vif);
497bfcc09ddSBjoern A. Zeeb 	hw->chanctx_data_size = sizeof(u16);
498bfcc09ddSBjoern A. Zeeb 	hw->txq_data_size = sizeof(struct iwl_mvm_txq);
499bfcc09ddSBjoern A. Zeeb 
500bfcc09ddSBjoern A. Zeeb 	hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
501bfcc09ddSBjoern A. Zeeb 		BIT(NL80211_IFTYPE_P2P_CLIENT) |
502bfcc09ddSBjoern A. Zeeb 		BIT(NL80211_IFTYPE_AP) |
503bfcc09ddSBjoern A. Zeeb 		BIT(NL80211_IFTYPE_P2P_GO) |
504bfcc09ddSBjoern A. Zeeb 		BIT(NL80211_IFTYPE_P2P_DEVICE) |
505bfcc09ddSBjoern A. Zeeb 		BIT(NL80211_IFTYPE_ADHOC);
506bfcc09ddSBjoern A. Zeeb 
507bfcc09ddSBjoern A. Zeeb 	hw->wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
508bfcc09ddSBjoern A. Zeeb 	wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_VHT_IBSS);
509bfcc09ddSBjoern A. Zeeb 
510bfcc09ddSBjoern A. Zeeb 	/* The new Tx API does not allow to pass the key or keyid of a MPDU to
511bfcc09ddSBjoern A. Zeeb 	 * the hw, preventing us to control which key(id) to use per MPDU.
512bfcc09ddSBjoern A. Zeeb 	 * Till that's fixed we can't use Extended Key ID for the newer cards.
513bfcc09ddSBjoern A. Zeeb 	 */
514bfcc09ddSBjoern A. Zeeb 	if (!iwl_mvm_has_new_tx_api(mvm))
515bfcc09ddSBjoern A. Zeeb 		wiphy_ext_feature_set(hw->wiphy,
516bfcc09ddSBjoern A. Zeeb 				      NL80211_EXT_FEATURE_EXT_KEY_ID);
517bfcc09ddSBjoern A. Zeeb 	hw->wiphy->features |= NL80211_FEATURE_HT_IBSS;
518bfcc09ddSBjoern A. Zeeb 
519bfcc09ddSBjoern A. Zeeb 	hw->wiphy->regulatory_flags |= REGULATORY_ENABLE_RELAX_NO_IR;
520bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_is_lar_supported(mvm))
521bfcc09ddSBjoern A. Zeeb 		hw->wiphy->regulatory_flags |= REGULATORY_WIPHY_SELF_MANAGED;
522bfcc09ddSBjoern A. Zeeb 	else
523bfcc09ddSBjoern A. Zeeb 		hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG |
524bfcc09ddSBjoern A. Zeeb 					       REGULATORY_DISABLE_BEACON_HINTS;
525bfcc09ddSBjoern A. Zeeb 
526bfcc09ddSBjoern A. Zeeb 	hw->wiphy->flags |= WIPHY_FLAG_AP_UAPSD;
527bfcc09ddSBjoern A. Zeeb 	hw->wiphy->flags |= WIPHY_FLAG_HAS_CHANNEL_SWITCH;
528bfcc09ddSBjoern A. Zeeb 	hw->wiphy->flags |= WIPHY_FLAG_SPLIT_SCAN_6GHZ;
529bfcc09ddSBjoern A. Zeeb 
530bfcc09ddSBjoern A. Zeeb 	hw->wiphy->iface_combinations = iwl_mvm_iface_combinations;
531bfcc09ddSBjoern A. Zeeb 	hw->wiphy->n_iface_combinations =
532bfcc09ddSBjoern A. Zeeb 		ARRAY_SIZE(iwl_mvm_iface_combinations);
533bfcc09ddSBjoern A. Zeeb 
534bfcc09ddSBjoern A. Zeeb 	hw->wiphy->max_remain_on_channel_duration = 10000;
535bfcc09ddSBjoern A. Zeeb 	hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
536bfcc09ddSBjoern A. Zeeb 
537bfcc09ddSBjoern A. Zeeb 	/* Extract MAC address */
538bfcc09ddSBjoern A. Zeeb 	memcpy(mvm->addresses[0].addr, mvm->nvm_data->hw_addr, ETH_ALEN);
539bfcc09ddSBjoern A. Zeeb 	hw->wiphy->addresses = mvm->addresses;
540bfcc09ddSBjoern A. Zeeb 	hw->wiphy->n_addresses = 1;
541bfcc09ddSBjoern A. Zeeb 
542bfcc09ddSBjoern A. Zeeb 	/* Extract additional MAC addresses if available */
543bfcc09ddSBjoern A. Zeeb 	num_mac = (mvm->nvm_data->n_hw_addrs > 1) ?
544bfcc09ddSBjoern A. Zeeb 		min(IWL_MVM_MAX_ADDRESSES, mvm->nvm_data->n_hw_addrs) : 1;
545bfcc09ddSBjoern A. Zeeb 
546bfcc09ddSBjoern A. Zeeb 	for (i = 1; i < num_mac; i++) {
547bfcc09ddSBjoern A. Zeeb 		memcpy(mvm->addresses[i].addr, mvm->addresses[i-1].addr,
548bfcc09ddSBjoern A. Zeeb 		       ETH_ALEN);
549bfcc09ddSBjoern A. Zeeb 		mvm->addresses[i].addr[5]++;
550bfcc09ddSBjoern A. Zeeb 		hw->wiphy->n_addresses++;
551bfcc09ddSBjoern A. Zeeb 	}
552bfcc09ddSBjoern A. Zeeb 
553bfcc09ddSBjoern A. Zeeb 	iwl_mvm_reset_phy_ctxts(mvm);
554bfcc09ddSBjoern A. Zeeb 
555bfcc09ddSBjoern A. Zeeb 	hw->wiphy->max_scan_ie_len = iwl_mvm_max_scan_ie_len(mvm);
556bfcc09ddSBjoern A. Zeeb 
557bfcc09ddSBjoern A. Zeeb 	hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
558bfcc09ddSBjoern A. Zeeb 
559bfcc09ddSBjoern A. Zeeb 	BUILD_BUG_ON(IWL_MVM_SCAN_STOPPING_MASK & IWL_MVM_SCAN_MASK);
560bfcc09ddSBjoern A. Zeeb 	BUILD_BUG_ON(IWL_MVM_MAX_UMAC_SCANS > HWEIGHT32(IWL_MVM_SCAN_MASK) ||
561bfcc09ddSBjoern A. Zeeb 		     IWL_MVM_MAX_LMAC_SCANS > HWEIGHT32(IWL_MVM_SCAN_MASK));
562bfcc09ddSBjoern A. Zeeb 
563bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_UMAC_SCAN))
564bfcc09ddSBjoern A. Zeeb 		mvm->max_scans = IWL_MVM_MAX_UMAC_SCANS;
565bfcc09ddSBjoern A. Zeeb 	else
566bfcc09ddSBjoern A. Zeeb 		mvm->max_scans = IWL_MVM_MAX_LMAC_SCANS;
567bfcc09ddSBjoern A. Zeeb 
568bfcc09ddSBjoern A. Zeeb 	if (mvm->nvm_data->bands[NL80211_BAND_2GHZ].n_channels)
569bfcc09ddSBjoern A. Zeeb 		hw->wiphy->bands[NL80211_BAND_2GHZ] =
570bfcc09ddSBjoern A. Zeeb 			&mvm->nvm_data->bands[NL80211_BAND_2GHZ];
571bfcc09ddSBjoern A. Zeeb 	if (mvm->nvm_data->bands[NL80211_BAND_5GHZ].n_channels) {
572bfcc09ddSBjoern A. Zeeb 		hw->wiphy->bands[NL80211_BAND_5GHZ] =
573bfcc09ddSBjoern A. Zeeb 			&mvm->nvm_data->bands[NL80211_BAND_5GHZ];
574bfcc09ddSBjoern A. Zeeb 
575bfcc09ddSBjoern A. Zeeb 		if (fw_has_capa(&mvm->fw->ucode_capa,
576bfcc09ddSBjoern A. Zeeb 				IWL_UCODE_TLV_CAPA_BEAMFORMER) &&
577bfcc09ddSBjoern A. Zeeb 		    fw_has_api(&mvm->fw->ucode_capa,
578bfcc09ddSBjoern A. Zeeb 			       IWL_UCODE_TLV_API_LQ_SS_PARAMS))
579bfcc09ddSBjoern A. Zeeb 			hw->wiphy->bands[NL80211_BAND_5GHZ]->vht_cap.cap |=
580bfcc09ddSBjoern A. Zeeb 				IEEE80211_VHT_CAP_SU_BEAMFORMER_CAPABLE;
581bfcc09ddSBjoern A. Zeeb 	}
582bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa,
583bfcc09ddSBjoern A. Zeeb 			IWL_UCODE_TLV_CAPA_PSC_CHAN_SUPPORT) &&
584bfcc09ddSBjoern A. Zeeb 	    mvm->nvm_data->bands[NL80211_BAND_6GHZ].n_channels)
585bfcc09ddSBjoern A. Zeeb 		hw->wiphy->bands[NL80211_BAND_6GHZ] =
586bfcc09ddSBjoern A. Zeeb 			&mvm->nvm_data->bands[NL80211_BAND_6GHZ];
587bfcc09ddSBjoern A. Zeeb 
588bfcc09ddSBjoern A. Zeeb 	hw->wiphy->hw_version = mvm->trans->hw_id;
589bfcc09ddSBjoern A. Zeeb 
590bfcc09ddSBjoern A. Zeeb 	if (iwlmvm_mod_params.power_scheme != IWL_POWER_SCHEME_CAM)
591bfcc09ddSBjoern A. Zeeb 		hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
592bfcc09ddSBjoern A. Zeeb 	else
593bfcc09ddSBjoern A. Zeeb 		hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
594bfcc09ddSBjoern A. Zeeb 
595bfcc09ddSBjoern A. Zeeb 	hw->wiphy->max_sched_scan_reqs = 1;
596bfcc09ddSBjoern A. Zeeb 	hw->wiphy->max_sched_scan_ssids = PROBE_OPTION_MAX;
597bfcc09ddSBjoern A. Zeeb 	hw->wiphy->max_match_sets = iwl_umac_scan_get_max_profiles(mvm->fw);
598bfcc09ddSBjoern A. Zeeb 	/* we create the 802.11 header and zero length SSID IE. */
599bfcc09ddSBjoern A. Zeeb 	hw->wiphy->max_sched_scan_ie_len =
600bfcc09ddSBjoern A. Zeeb 		SCAN_OFFLOAD_PROBE_REQ_SIZE - 24 - 2;
601bfcc09ddSBjoern A. Zeeb 	hw->wiphy->max_sched_scan_plans = IWL_MAX_SCHED_SCAN_PLANS;
602bfcc09ddSBjoern A. Zeeb 	hw->wiphy->max_sched_scan_plan_interval = U16_MAX;
603bfcc09ddSBjoern A. Zeeb 
604bfcc09ddSBjoern A. Zeeb 	/*
605bfcc09ddSBjoern A. Zeeb 	 * the firmware uses u8 for num of iterations, but 0xff is saved for
606bfcc09ddSBjoern A. Zeeb 	 * infinite loop, so the maximum number of iterations is actually 254.
607bfcc09ddSBjoern A. Zeeb 	 */
608bfcc09ddSBjoern A. Zeeb 	hw->wiphy->max_sched_scan_plan_iterations = 254;
609bfcc09ddSBjoern A. Zeeb 
610bfcc09ddSBjoern A. Zeeb 	hw->wiphy->features |= NL80211_FEATURE_P2P_GO_CTWIN |
611bfcc09ddSBjoern A. Zeeb 			       NL80211_FEATURE_LOW_PRIORITY_SCAN |
612bfcc09ddSBjoern A. Zeeb 			       NL80211_FEATURE_P2P_GO_OPPPS |
613bfcc09ddSBjoern A. Zeeb 			       NL80211_FEATURE_AP_MODE_CHAN_WIDTH_CHANGE |
614bfcc09ddSBjoern A. Zeeb 			       NL80211_FEATURE_DYNAMIC_SMPS |
615bfcc09ddSBjoern A. Zeeb 			       NL80211_FEATURE_STATIC_SMPS |
616bfcc09ddSBjoern A. Zeeb 			       NL80211_FEATURE_SUPPORTS_WMM_ADMISSION;
617bfcc09ddSBjoern A. Zeeb 
618bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa,
619bfcc09ddSBjoern A. Zeeb 			IWL_UCODE_TLV_CAPA_TXPOWER_INSERTION_SUPPORT))
620bfcc09ddSBjoern A. Zeeb 		hw->wiphy->features |= NL80211_FEATURE_TX_POWER_INSERTION;
621bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa,
622bfcc09ddSBjoern A. Zeeb 			IWL_UCODE_TLV_CAPA_QUIET_PERIOD_SUPPORT))
623bfcc09ddSBjoern A. Zeeb 		hw->wiphy->features |= NL80211_FEATURE_QUIET;
624bfcc09ddSBjoern A. Zeeb 
625bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa,
626bfcc09ddSBjoern A. Zeeb 			IWL_UCODE_TLV_CAPA_DS_PARAM_SET_IE_SUPPORT))
627bfcc09ddSBjoern A. Zeeb 		hw->wiphy->features |=
628bfcc09ddSBjoern A. Zeeb 			NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES;
629bfcc09ddSBjoern A. Zeeb 
630bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa,
631bfcc09ddSBjoern A. Zeeb 			IWL_UCODE_TLV_CAPA_WFA_TPC_REP_IE_SUPPORT))
632bfcc09ddSBjoern A. Zeeb 		hw->wiphy->features |= NL80211_FEATURE_WFA_TPC_IE_IN_PROBES;
633bfcc09ddSBjoern A. Zeeb 
634bfcc09ddSBjoern A. Zeeb 	if (iwl_fw_lookup_cmd_ver(mvm->fw, IWL_ALWAYS_LONG_GROUP,
635bfcc09ddSBjoern A. Zeeb 				  WOWLAN_KEK_KCK_MATERIAL,
636bfcc09ddSBjoern A. Zeeb 				  IWL_FW_CMD_VER_UNKNOWN) == 3)
637bfcc09ddSBjoern A. Zeeb 		hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK;
638bfcc09ddSBjoern A. Zeeb 
639bfcc09ddSBjoern A. Zeeb 	if (fw_has_api(&mvm->fw->ucode_capa,
640bfcc09ddSBjoern A. Zeeb 		       IWL_UCODE_TLV_API_SCAN_TSF_REPORT)) {
641bfcc09ddSBjoern A. Zeeb 		wiphy_ext_feature_set(hw->wiphy,
642bfcc09ddSBjoern A. Zeeb 				      NL80211_EXT_FEATURE_SCAN_START_TIME);
643bfcc09ddSBjoern A. Zeeb 		wiphy_ext_feature_set(hw->wiphy,
644bfcc09ddSBjoern A. Zeeb 				      NL80211_EXT_FEATURE_BSS_PARENT_TSF);
645bfcc09ddSBjoern A. Zeeb 	}
646bfcc09ddSBjoern A. Zeeb 
647bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_is_oce_supported(mvm)) {
648bfcc09ddSBjoern A. Zeeb 		wiphy_ext_feature_set(hw->wiphy,
649bfcc09ddSBjoern A. Zeeb 			NL80211_EXT_FEATURE_ACCEPT_BCAST_PROBE_RESP);
650bfcc09ddSBjoern A. Zeeb 		wiphy_ext_feature_set(hw->wiphy,
651bfcc09ddSBjoern A. Zeeb 			NL80211_EXT_FEATURE_FILS_MAX_CHANNEL_TIME);
652bfcc09ddSBjoern A. Zeeb 		wiphy_ext_feature_set(hw->wiphy,
653bfcc09ddSBjoern A. Zeeb 			NL80211_EXT_FEATURE_OCE_PROBE_REQ_DEFERRAL_SUPPRESSION);
654bfcc09ddSBjoern A. Zeeb 		wiphy_ext_feature_set(hw->wiphy,
655bfcc09ddSBjoern A. Zeeb 			NL80211_EXT_FEATURE_OCE_PROBE_REQ_HIGH_TX_RATE);
656bfcc09ddSBjoern A. Zeeb 	}
657bfcc09ddSBjoern A. Zeeb 
658bfcc09ddSBjoern A. Zeeb 	if (mvm->nvm_data->sku_cap_11ax_enable &&
659bfcc09ddSBjoern A. Zeeb 	    !iwlwifi_mod_params.disable_11ax) {
660bfcc09ddSBjoern A. Zeeb 		hw->wiphy->iftype_ext_capab = he_iftypes_ext_capa;
661bfcc09ddSBjoern A. Zeeb 		hw->wiphy->num_iftype_ext_capab =
662bfcc09ddSBjoern A. Zeeb 			ARRAY_SIZE(he_iftypes_ext_capa);
663bfcc09ddSBjoern A. Zeeb 
664bfcc09ddSBjoern A. Zeeb 		ieee80211_hw_set(hw, SUPPORTS_MULTI_BSSID);
665bfcc09ddSBjoern A. Zeeb 		ieee80211_hw_set(hw, SUPPORTS_ONLY_HE_MULTI_BSSID);
666bfcc09ddSBjoern A. Zeeb 	}
667bfcc09ddSBjoern A. Zeeb 
668bfcc09ddSBjoern A. Zeeb 	mvm->rts_threshold = IEEE80211_MAX_RTS_THRESHOLD;
669bfcc09ddSBjoern A. Zeeb 
670bfcc09ddSBjoern A. Zeeb #ifdef CONFIG_PM_SLEEP
671bfcc09ddSBjoern A. Zeeb 	if ((unified || mvm->fw->img[IWL_UCODE_WOWLAN].num_sec) &&
672bfcc09ddSBjoern A. Zeeb 	    mvm->trans->ops->d3_suspend &&
673bfcc09ddSBjoern A. Zeeb 	    mvm->trans->ops->d3_resume &&
674bfcc09ddSBjoern A. Zeeb 	    device_can_wakeup(mvm->trans->dev)) {
675bfcc09ddSBjoern A. Zeeb 		mvm->wowlan.flags |= WIPHY_WOWLAN_MAGIC_PKT |
676bfcc09ddSBjoern A. Zeeb 				     WIPHY_WOWLAN_DISCONNECT |
677bfcc09ddSBjoern A. Zeeb 				     WIPHY_WOWLAN_EAP_IDENTITY_REQ |
678bfcc09ddSBjoern A. Zeeb 				     WIPHY_WOWLAN_RFKILL_RELEASE |
679bfcc09ddSBjoern A. Zeeb 				     WIPHY_WOWLAN_NET_DETECT;
680bfcc09ddSBjoern A. Zeeb 		mvm->wowlan.flags |= WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
681bfcc09ddSBjoern A. Zeeb 				     WIPHY_WOWLAN_GTK_REKEY_FAILURE |
682bfcc09ddSBjoern A. Zeeb 				     WIPHY_WOWLAN_4WAY_HANDSHAKE;
683bfcc09ddSBjoern A. Zeeb 
684bfcc09ddSBjoern A. Zeeb 		mvm->wowlan.n_patterns = IWL_WOWLAN_MAX_PATTERNS;
685bfcc09ddSBjoern A. Zeeb 		mvm->wowlan.pattern_min_len = IWL_WOWLAN_MIN_PATTERN_LEN;
686bfcc09ddSBjoern A. Zeeb 		mvm->wowlan.pattern_max_len = IWL_WOWLAN_MAX_PATTERN_LEN;
687bfcc09ddSBjoern A. Zeeb 		mvm->wowlan.max_nd_match_sets =
688bfcc09ddSBjoern A. Zeeb 			iwl_umac_scan_get_max_profiles(mvm->fw);
689bfcc09ddSBjoern A. Zeeb 		hw->wiphy->wowlan = &mvm->wowlan;
690bfcc09ddSBjoern A. Zeeb 	}
691bfcc09ddSBjoern A. Zeeb #endif
692bfcc09ddSBjoern A. Zeeb 
693bfcc09ddSBjoern A. Zeeb #ifdef CONFIG_IWLWIFI_BCAST_FILTERING
694bfcc09ddSBjoern A. Zeeb 	/* assign default bcast filtering configuration */
695bfcc09ddSBjoern A. Zeeb 	mvm->bcast_filters = iwl_mvm_default_bcast_filters;
696bfcc09ddSBjoern A. Zeeb #endif
697bfcc09ddSBjoern A. Zeeb 
698bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_leds_init(mvm);
699bfcc09ddSBjoern A. Zeeb 	if (ret)
700bfcc09ddSBjoern A. Zeeb 		return ret;
701bfcc09ddSBjoern A. Zeeb 
702bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa,
703bfcc09ddSBjoern A. Zeeb 			IWL_UCODE_TLV_CAPA_TDLS_SUPPORT)) {
704bfcc09ddSBjoern A. Zeeb 		IWL_DEBUG_TDLS(mvm, "TDLS supported\n");
705bfcc09ddSBjoern A. Zeeb 		hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_TDLS;
706bfcc09ddSBjoern A. Zeeb 		ieee80211_hw_set(hw, TDLS_WIDER_BW);
707bfcc09ddSBjoern A. Zeeb 	}
708bfcc09ddSBjoern A. Zeeb 
709bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa,
710bfcc09ddSBjoern A. Zeeb 			IWL_UCODE_TLV_CAPA_TDLS_CHANNEL_SWITCH)) {
711bfcc09ddSBjoern A. Zeeb 		IWL_DEBUG_TDLS(mvm, "TDLS channel switch supported\n");
712bfcc09ddSBjoern A. Zeeb 		hw->wiphy->features |= NL80211_FEATURE_TDLS_CHANNEL_SWITCH;
713bfcc09ddSBjoern A. Zeeb 	}
714bfcc09ddSBjoern A. Zeeb 
715bfcc09ddSBjoern A. Zeeb 	hw->netdev_features |= mvm->cfg->features;
716bfcc09ddSBjoern A. Zeeb 	if (!iwl_mvm_is_csum_supported(mvm))
717bfcc09ddSBjoern A. Zeeb 		hw->netdev_features &= ~(IWL_TX_CSUM_NETIF_FLAGS |
718bfcc09ddSBjoern A. Zeeb 					 NETIF_F_RXCSUM);
719bfcc09ddSBjoern A. Zeeb 
720bfcc09ddSBjoern A. Zeeb 	if (mvm->cfg->vht_mu_mimo_supported)
721bfcc09ddSBjoern A. Zeeb 		wiphy_ext_feature_set(hw->wiphy,
722bfcc09ddSBjoern A. Zeeb 				      NL80211_EXT_FEATURE_MU_MIMO_AIR_SNIFFER);
723bfcc09ddSBjoern A. Zeeb 
724bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_PROTECTED_TWT))
725bfcc09ddSBjoern A. Zeeb 		wiphy_ext_feature_set(hw->wiphy,
726bfcc09ddSBjoern A. Zeeb 				      NL80211_EXT_FEATURE_PROTECTED_TWT);
727bfcc09ddSBjoern A. Zeeb 
728bfcc09ddSBjoern A. Zeeb 	hw->wiphy->available_antennas_tx = iwl_mvm_get_valid_tx_ant(mvm);
729bfcc09ddSBjoern A. Zeeb 	hw->wiphy->available_antennas_rx = iwl_mvm_get_valid_rx_ant(mvm);
730bfcc09ddSBjoern A. Zeeb 
731bfcc09ddSBjoern A. Zeeb 	ret = ieee80211_register_hw(mvm->hw);
732bfcc09ddSBjoern A. Zeeb 	if (ret) {
733bfcc09ddSBjoern A. Zeeb 		iwl_mvm_leds_exit(mvm);
734bfcc09ddSBjoern A. Zeeb 	}
735bfcc09ddSBjoern A. Zeeb 
736bfcc09ddSBjoern A. Zeeb 	return ret;
737bfcc09ddSBjoern A. Zeeb }
738bfcc09ddSBjoern A. Zeeb 
739bfcc09ddSBjoern A. Zeeb static void iwl_mvm_tx_skb(struct iwl_mvm *mvm, struct sk_buff *skb,
740bfcc09ddSBjoern A. Zeeb 			   struct ieee80211_sta *sta)
741bfcc09ddSBjoern A. Zeeb {
742bfcc09ddSBjoern A. Zeeb 	if (likely(sta)) {
743bfcc09ddSBjoern A. Zeeb 		if (likely(iwl_mvm_tx_skb_sta(mvm, skb, sta) == 0))
744bfcc09ddSBjoern A. Zeeb 			return;
745bfcc09ddSBjoern A. Zeeb 	} else {
746bfcc09ddSBjoern A. Zeeb 		if (likely(iwl_mvm_tx_skb_non_sta(mvm, skb) == 0))
747bfcc09ddSBjoern A. Zeeb 			return;
748bfcc09ddSBjoern A. Zeeb 	}
749bfcc09ddSBjoern A. Zeeb 
750bfcc09ddSBjoern A. Zeeb 	ieee80211_free_txskb(mvm->hw, skb);
751bfcc09ddSBjoern A. Zeeb }
752bfcc09ddSBjoern A. Zeeb 
753bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mac_tx(struct ieee80211_hw *hw,
754bfcc09ddSBjoern A. Zeeb 			   struct ieee80211_tx_control *control,
755bfcc09ddSBjoern A. Zeeb 			   struct sk_buff *skb)
756bfcc09ddSBjoern A. Zeeb {
757bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
758bfcc09ddSBjoern A. Zeeb 	struct ieee80211_sta *sta = control->sta;
759bfcc09ddSBjoern A. Zeeb 	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
760bfcc09ddSBjoern A. Zeeb 	struct ieee80211_hdr *hdr = (void *)skb->data;
761bfcc09ddSBjoern A. Zeeb 	bool offchannel = IEEE80211_SKB_CB(skb)->flags &
762bfcc09ddSBjoern A. Zeeb 		IEEE80211_TX_CTL_TX_OFFCHAN;
763bfcc09ddSBjoern A. Zeeb 
764bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_is_radio_killed(mvm)) {
765bfcc09ddSBjoern A. Zeeb 		IWL_DEBUG_DROP(mvm, "Dropping - RF/CT KILL\n");
766bfcc09ddSBjoern A. Zeeb 		goto drop;
767bfcc09ddSBjoern A. Zeeb 	}
768bfcc09ddSBjoern A. Zeeb 
769bfcc09ddSBjoern A. Zeeb 	if (offchannel &&
770bfcc09ddSBjoern A. Zeeb 	    !test_bit(IWL_MVM_STATUS_ROC_RUNNING, &mvm->status) &&
771bfcc09ddSBjoern A. Zeeb 	    !test_bit(IWL_MVM_STATUS_ROC_AUX_RUNNING, &mvm->status))
772bfcc09ddSBjoern A. Zeeb 		goto drop;
773bfcc09ddSBjoern A. Zeeb 
774bfcc09ddSBjoern A. Zeeb 	/*
775bfcc09ddSBjoern A. Zeeb 	 * bufferable MMPDUs or MMPDUs on STA interfaces come via TXQs
776bfcc09ddSBjoern A. Zeeb 	 * so we treat the others as broadcast
777bfcc09ddSBjoern A. Zeeb 	 */
778bfcc09ddSBjoern A. Zeeb 	if (ieee80211_is_mgmt(hdr->frame_control))
779bfcc09ddSBjoern A. Zeeb 		sta = NULL;
780bfcc09ddSBjoern A. Zeeb 
781bfcc09ddSBjoern A. Zeeb 	/* If there is no sta, and it's not offchannel - send through AP */
782bfcc09ddSBjoern A. Zeeb 	if (!sta && info->control.vif->type == NL80211_IFTYPE_STATION &&
783bfcc09ddSBjoern A. Zeeb 	    !offchannel) {
784bfcc09ddSBjoern A. Zeeb 		struct iwl_mvm_vif *mvmvif =
785bfcc09ddSBjoern A. Zeeb 			iwl_mvm_vif_from_mac80211(info->control.vif);
786bfcc09ddSBjoern A. Zeeb 		u8 ap_sta_id = READ_ONCE(mvmvif->ap_sta_id);
787bfcc09ddSBjoern A. Zeeb 
788bfcc09ddSBjoern A. Zeeb 		if (ap_sta_id < mvm->fw->ucode_capa.num_stations) {
789bfcc09ddSBjoern A. Zeeb 			/* mac80211 holds rcu read lock */
790bfcc09ddSBjoern A. Zeeb 			sta = rcu_dereference(mvm->fw_id_to_mac_id[ap_sta_id]);
791bfcc09ddSBjoern A. Zeeb 			if (IS_ERR_OR_NULL(sta))
792bfcc09ddSBjoern A. Zeeb 				goto drop;
793bfcc09ddSBjoern A. Zeeb 		}
794bfcc09ddSBjoern A. Zeeb 	}
795bfcc09ddSBjoern A. Zeeb 
796bfcc09ddSBjoern A. Zeeb 	iwl_mvm_tx_skb(mvm, skb, sta);
797bfcc09ddSBjoern A. Zeeb 	return;
798bfcc09ddSBjoern A. Zeeb  drop:
799bfcc09ddSBjoern A. Zeeb 	ieee80211_free_txskb(hw, skb);
800bfcc09ddSBjoern A. Zeeb }
801bfcc09ddSBjoern A. Zeeb 
802bfcc09ddSBjoern A. Zeeb void iwl_mvm_mac_itxq_xmit(struct ieee80211_hw *hw, struct ieee80211_txq *txq)
803bfcc09ddSBjoern A. Zeeb {
804bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
805bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_txq *mvmtxq = iwl_mvm_txq_from_mac80211(txq);
806bfcc09ddSBjoern A. Zeeb 	struct sk_buff *skb = NULL;
807bfcc09ddSBjoern A. Zeeb 
808bfcc09ddSBjoern A. Zeeb 	/*
809bfcc09ddSBjoern A. Zeeb 	 * No need for threads to be pending here, they can leave the first
810bfcc09ddSBjoern A. Zeeb 	 * taker all the work.
811bfcc09ddSBjoern A. Zeeb 	 *
812bfcc09ddSBjoern A. Zeeb 	 * mvmtxq->tx_request logic:
813bfcc09ddSBjoern A. Zeeb 	 *
814bfcc09ddSBjoern A. Zeeb 	 * If 0, no one is currently TXing, set to 1 to indicate current thread
815bfcc09ddSBjoern A. Zeeb 	 * will now start TX and other threads should quit.
816bfcc09ddSBjoern A. Zeeb 	 *
817bfcc09ddSBjoern A. Zeeb 	 * If 1, another thread is currently TXing, set to 2 to indicate to
818bfcc09ddSBjoern A. Zeeb 	 * that thread that there was another request. Since that request may
819bfcc09ddSBjoern A. Zeeb 	 * have raced with the check whether the queue is empty, the TXing
820bfcc09ddSBjoern A. Zeeb 	 * thread should check the queue's status one more time before leaving.
821bfcc09ddSBjoern A. Zeeb 	 * This check is done in order to not leave any TX hanging in the queue
822bfcc09ddSBjoern A. Zeeb 	 * until the next TX invocation (which may not even happen).
823bfcc09ddSBjoern A. Zeeb 	 *
824bfcc09ddSBjoern A. Zeeb 	 * If 2, another thread is currently TXing, and it will already double
825bfcc09ddSBjoern A. Zeeb 	 * check the queue, so do nothing.
826bfcc09ddSBjoern A. Zeeb 	 */
827bfcc09ddSBjoern A. Zeeb 	if (atomic_fetch_add_unless(&mvmtxq->tx_request, 1, 2))
828bfcc09ddSBjoern A. Zeeb 		return;
829bfcc09ddSBjoern A. Zeeb 
830bfcc09ddSBjoern A. Zeeb 	rcu_read_lock();
831bfcc09ddSBjoern A. Zeeb 	do {
832bfcc09ddSBjoern A. Zeeb 		while (likely(!mvmtxq->stopped &&
833bfcc09ddSBjoern A. Zeeb 			      !test_bit(IWL_MVM_STATUS_IN_D3, &mvm->status))) {
834bfcc09ddSBjoern A. Zeeb 			skb = ieee80211_tx_dequeue(hw, txq);
835bfcc09ddSBjoern A. Zeeb 
836bfcc09ddSBjoern A. Zeeb 			if (!skb) {
837bfcc09ddSBjoern A. Zeeb 				if (txq->sta)
838bfcc09ddSBjoern A. Zeeb 					IWL_DEBUG_TX(mvm,
839bfcc09ddSBjoern A. Zeeb 						     "TXQ of sta %pM tid %d is now empty\n",
840bfcc09ddSBjoern A. Zeeb 						     txq->sta->addr,
841bfcc09ddSBjoern A. Zeeb 						     txq->tid);
842bfcc09ddSBjoern A. Zeeb 				break;
843bfcc09ddSBjoern A. Zeeb 			}
844bfcc09ddSBjoern A. Zeeb 
845bfcc09ddSBjoern A. Zeeb 			iwl_mvm_tx_skb(mvm, skb, txq->sta);
846bfcc09ddSBjoern A. Zeeb 		}
847bfcc09ddSBjoern A. Zeeb 	} while (atomic_dec_return(&mvmtxq->tx_request));
848bfcc09ddSBjoern A. Zeeb 	rcu_read_unlock();
849bfcc09ddSBjoern A. Zeeb }
850bfcc09ddSBjoern A. Zeeb 
851bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mac_wake_tx_queue(struct ieee80211_hw *hw,
852bfcc09ddSBjoern A. Zeeb 				      struct ieee80211_txq *txq)
853bfcc09ddSBjoern A. Zeeb {
854bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
855bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_txq *mvmtxq = iwl_mvm_txq_from_mac80211(txq);
856bfcc09ddSBjoern A. Zeeb 
857bfcc09ddSBjoern A. Zeeb 	/*
858bfcc09ddSBjoern A. Zeeb 	 * Please note that racing is handled very carefully here:
859bfcc09ddSBjoern A. Zeeb 	 * mvmtxq->txq_id is updated during allocation, and mvmtxq->list is
860bfcc09ddSBjoern A. Zeeb 	 * deleted afterwards.
861bfcc09ddSBjoern A. Zeeb 	 * This means that if:
862bfcc09ddSBjoern A. Zeeb 	 * mvmtxq->txq_id != INVALID_QUEUE && list_empty(&mvmtxq->list):
863bfcc09ddSBjoern A. Zeeb 	 *	queue is allocated and we can TX.
864bfcc09ddSBjoern A. Zeeb 	 * mvmtxq->txq_id != INVALID_QUEUE && !list_empty(&mvmtxq->list):
865bfcc09ddSBjoern A. Zeeb 	 *	a race, should defer the frame.
866bfcc09ddSBjoern A. Zeeb 	 * mvmtxq->txq_id == INVALID_QUEUE && list_empty(&mvmtxq->list):
867bfcc09ddSBjoern A. Zeeb 	 *	need to allocate the queue and defer the frame.
868bfcc09ddSBjoern A. Zeeb 	 * mvmtxq->txq_id == INVALID_QUEUE && !list_empty(&mvmtxq->list):
869bfcc09ddSBjoern A. Zeeb 	 *	queue is already scheduled for allocation, no need to allocate,
870bfcc09ddSBjoern A. Zeeb 	 *	should defer the frame.
871bfcc09ddSBjoern A. Zeeb 	 */
872bfcc09ddSBjoern A. Zeeb 
873bfcc09ddSBjoern A. Zeeb 	/* If the queue is allocated TX and return. */
874bfcc09ddSBjoern A. Zeeb 	if (!txq->sta || mvmtxq->txq_id != IWL_MVM_INVALID_QUEUE) {
875bfcc09ddSBjoern A. Zeeb 		/*
876bfcc09ddSBjoern A. Zeeb 		 * Check that list is empty to avoid a race where txq_id is
877bfcc09ddSBjoern A. Zeeb 		 * already updated, but the queue allocation work wasn't
878bfcc09ddSBjoern A. Zeeb 		 * finished
879bfcc09ddSBjoern A. Zeeb 		 */
880bfcc09ddSBjoern A. Zeeb 		if (unlikely(txq->sta && !list_empty(&mvmtxq->list)))
881bfcc09ddSBjoern A. Zeeb 			return;
882bfcc09ddSBjoern A. Zeeb 
883bfcc09ddSBjoern A. Zeeb 		iwl_mvm_mac_itxq_xmit(hw, txq);
884bfcc09ddSBjoern A. Zeeb 		return;
885bfcc09ddSBjoern A. Zeeb 	}
886bfcc09ddSBjoern A. Zeeb 
887bfcc09ddSBjoern A. Zeeb 	/* The list is being deleted only after the queue is fully allocated. */
888bfcc09ddSBjoern A. Zeeb 	if (!list_empty(&mvmtxq->list))
889bfcc09ddSBjoern A. Zeeb 		return;
890bfcc09ddSBjoern A. Zeeb 
891bfcc09ddSBjoern A. Zeeb 	list_add_tail(&mvmtxq->list, &mvm->add_stream_txqs);
892bfcc09ddSBjoern A. Zeeb 	schedule_work(&mvm->add_stream_wk);
893bfcc09ddSBjoern A. Zeeb }
894bfcc09ddSBjoern A. Zeeb 
895bfcc09ddSBjoern A. Zeeb #define CHECK_BA_TRIGGER(_mvm, _trig, _tid_bm, _tid, _fmt...)		\
896bfcc09ddSBjoern A. Zeeb 	do {								\
897bfcc09ddSBjoern A. Zeeb 		if (!(le16_to_cpu(_tid_bm) & BIT(_tid)))		\
898bfcc09ddSBjoern A. Zeeb 			break;						\
899bfcc09ddSBjoern A. Zeeb 		iwl_fw_dbg_collect_trig(&(_mvm)->fwrt, _trig, _fmt);	\
900bfcc09ddSBjoern A. Zeeb 	} while (0)
901bfcc09ddSBjoern A. Zeeb 
902bfcc09ddSBjoern A. Zeeb static void
903bfcc09ddSBjoern A. Zeeb iwl_mvm_ampdu_check_trigger(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
904bfcc09ddSBjoern A. Zeeb 			    struct ieee80211_sta *sta, u16 tid, u16 rx_ba_ssn,
905bfcc09ddSBjoern A. Zeeb 			    enum ieee80211_ampdu_mlme_action action)
906bfcc09ddSBjoern A. Zeeb {
907bfcc09ddSBjoern A. Zeeb 	struct iwl_fw_dbg_trigger_tlv *trig;
908bfcc09ddSBjoern A. Zeeb 	struct iwl_fw_dbg_trigger_ba *ba_trig;
909bfcc09ddSBjoern A. Zeeb 
910bfcc09ddSBjoern A. Zeeb 	trig = iwl_fw_dbg_trigger_on(&mvm->fwrt, ieee80211_vif_to_wdev(vif),
911bfcc09ddSBjoern A. Zeeb 				     FW_DBG_TRIGGER_BA);
912bfcc09ddSBjoern A. Zeeb 	if (!trig)
913bfcc09ddSBjoern A. Zeeb 		return;
914bfcc09ddSBjoern A. Zeeb 
915bfcc09ddSBjoern A. Zeeb 	ba_trig = (void *)trig->data;
916bfcc09ddSBjoern A. Zeeb 
917bfcc09ddSBjoern A. Zeeb 	switch (action) {
918bfcc09ddSBjoern A. Zeeb 	case IEEE80211_AMPDU_TX_OPERATIONAL: {
919bfcc09ddSBjoern A. Zeeb 		struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
920bfcc09ddSBjoern A. Zeeb 		struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid];
921bfcc09ddSBjoern A. Zeeb 
922bfcc09ddSBjoern A. Zeeb 		CHECK_BA_TRIGGER(mvm, trig, ba_trig->tx_ba_start, tid,
923bfcc09ddSBjoern A. Zeeb 				 "TX AGG START: MAC %pM tid %d ssn %d\n",
924bfcc09ddSBjoern A. Zeeb 				 sta->addr, tid, tid_data->ssn);
925bfcc09ddSBjoern A. Zeeb 		break;
926bfcc09ddSBjoern A. Zeeb 		}
927bfcc09ddSBjoern A. Zeeb 	case IEEE80211_AMPDU_TX_STOP_CONT:
928bfcc09ddSBjoern A. Zeeb 		CHECK_BA_TRIGGER(mvm, trig, ba_trig->tx_ba_stop, tid,
929bfcc09ddSBjoern A. Zeeb 				 "TX AGG STOP: MAC %pM tid %d\n",
930bfcc09ddSBjoern A. Zeeb 				 sta->addr, tid);
931bfcc09ddSBjoern A. Zeeb 		break;
932bfcc09ddSBjoern A. Zeeb 	case IEEE80211_AMPDU_RX_START:
933bfcc09ddSBjoern A. Zeeb 		CHECK_BA_TRIGGER(mvm, trig, ba_trig->rx_ba_start, tid,
934bfcc09ddSBjoern A. Zeeb 				 "RX AGG START: MAC %pM tid %d ssn %d\n",
935bfcc09ddSBjoern A. Zeeb 				 sta->addr, tid, rx_ba_ssn);
936bfcc09ddSBjoern A. Zeeb 		break;
937bfcc09ddSBjoern A. Zeeb 	case IEEE80211_AMPDU_RX_STOP:
938bfcc09ddSBjoern A. Zeeb 		CHECK_BA_TRIGGER(mvm, trig, ba_trig->rx_ba_stop, tid,
939bfcc09ddSBjoern A. Zeeb 				 "RX AGG STOP: MAC %pM tid %d\n",
940bfcc09ddSBjoern A. Zeeb 				 sta->addr, tid);
941bfcc09ddSBjoern A. Zeeb 		break;
942bfcc09ddSBjoern A. Zeeb 	default:
943bfcc09ddSBjoern A. Zeeb 		break;
944bfcc09ddSBjoern A. Zeeb 	}
945bfcc09ddSBjoern A. Zeeb }
946bfcc09ddSBjoern A. Zeeb 
947bfcc09ddSBjoern A. Zeeb static int iwl_mvm_mac_ampdu_action(struct ieee80211_hw *hw,
948bfcc09ddSBjoern A. Zeeb 				    struct ieee80211_vif *vif,
949bfcc09ddSBjoern A. Zeeb 				    struct ieee80211_ampdu_params *params)
950bfcc09ddSBjoern A. Zeeb {
951bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
952bfcc09ddSBjoern A. Zeeb 	int ret;
953bfcc09ddSBjoern A. Zeeb 	struct ieee80211_sta *sta = params->sta;
954bfcc09ddSBjoern A. Zeeb 	enum ieee80211_ampdu_mlme_action action = params->action;
955bfcc09ddSBjoern A. Zeeb 	u16 tid = params->tid;
956bfcc09ddSBjoern A. Zeeb 	u16 *ssn = &params->ssn;
957bfcc09ddSBjoern A. Zeeb 	u16 buf_size = params->buf_size;
958bfcc09ddSBjoern A. Zeeb 	bool amsdu = params->amsdu;
959bfcc09ddSBjoern A. Zeeb 	u16 timeout = params->timeout;
960bfcc09ddSBjoern A. Zeeb 
961bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_HT(mvm, "A-MPDU action on addr %pM tid %d: action %d\n",
962bfcc09ddSBjoern A. Zeeb 		     sta->addr, tid, action);
963bfcc09ddSBjoern A. Zeeb 
964bfcc09ddSBjoern A. Zeeb 	if (!(mvm->nvm_data->sku_cap_11n_enable))
965bfcc09ddSBjoern A. Zeeb 		return -EACCES;
966bfcc09ddSBjoern A. Zeeb 
967bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
968bfcc09ddSBjoern A. Zeeb 
969bfcc09ddSBjoern A. Zeeb 	switch (action) {
970bfcc09ddSBjoern A. Zeeb 	case IEEE80211_AMPDU_RX_START:
971bfcc09ddSBjoern A. Zeeb 		if (iwl_mvm_vif_from_mac80211(vif)->ap_sta_id ==
972bfcc09ddSBjoern A. Zeeb 				iwl_mvm_sta_from_mac80211(sta)->sta_id) {
973bfcc09ddSBjoern A. Zeeb 			struct iwl_mvm_vif *mvmvif;
974bfcc09ddSBjoern A. Zeeb 			u16 macid = iwl_mvm_vif_from_mac80211(vif)->id;
975bfcc09ddSBjoern A. Zeeb 			struct iwl_mvm_tcm_mac *mdata = &mvm->tcm.data[macid];
976bfcc09ddSBjoern A. Zeeb 
977bfcc09ddSBjoern A. Zeeb 			mdata->opened_rx_ba_sessions = true;
978bfcc09ddSBjoern A. Zeeb 			mvmvif = iwl_mvm_vif_from_mac80211(vif);
979bfcc09ddSBjoern A. Zeeb 			cancel_delayed_work(&mvmvif->uapsd_nonagg_detected_wk);
980bfcc09ddSBjoern A. Zeeb 		}
981bfcc09ddSBjoern A. Zeeb 		if (!iwl_enable_rx_ampdu()) {
982bfcc09ddSBjoern A. Zeeb 			ret = -EINVAL;
983bfcc09ddSBjoern A. Zeeb 			break;
984bfcc09ddSBjoern A. Zeeb 		}
985bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_sta_rx_agg(mvm, sta, tid, *ssn, true, buf_size,
986bfcc09ddSBjoern A. Zeeb 					 timeout);
987bfcc09ddSBjoern A. Zeeb 		break;
988bfcc09ddSBjoern A. Zeeb 	case IEEE80211_AMPDU_RX_STOP:
989bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_sta_rx_agg(mvm, sta, tid, 0, false, buf_size,
990bfcc09ddSBjoern A. Zeeb 					 timeout);
991bfcc09ddSBjoern A. Zeeb 		break;
992bfcc09ddSBjoern A. Zeeb 	case IEEE80211_AMPDU_TX_START:
993bfcc09ddSBjoern A. Zeeb 		if (!iwl_enable_tx_ampdu()) {
994bfcc09ddSBjoern A. Zeeb 			ret = -EINVAL;
995bfcc09ddSBjoern A. Zeeb 			break;
996bfcc09ddSBjoern A. Zeeb 		}
997bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_sta_tx_agg_start(mvm, vif, sta, tid, ssn);
998bfcc09ddSBjoern A. Zeeb 		break;
999bfcc09ddSBjoern A. Zeeb 	case IEEE80211_AMPDU_TX_STOP_CONT:
1000bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_sta_tx_agg_stop(mvm, vif, sta, tid);
1001bfcc09ddSBjoern A. Zeeb 		break;
1002bfcc09ddSBjoern A. Zeeb 	case IEEE80211_AMPDU_TX_STOP_FLUSH:
1003bfcc09ddSBjoern A. Zeeb 	case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
1004bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_sta_tx_agg_flush(mvm, vif, sta, tid);
1005bfcc09ddSBjoern A. Zeeb 		break;
1006bfcc09ddSBjoern A. Zeeb 	case IEEE80211_AMPDU_TX_OPERATIONAL:
1007bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_sta_tx_agg_oper(mvm, vif, sta, tid,
1008bfcc09ddSBjoern A. Zeeb 					      buf_size, amsdu);
1009bfcc09ddSBjoern A. Zeeb 		break;
1010bfcc09ddSBjoern A. Zeeb 	default:
1011bfcc09ddSBjoern A. Zeeb 		WARN_ON_ONCE(1);
1012bfcc09ddSBjoern A. Zeeb 		ret = -EINVAL;
1013bfcc09ddSBjoern A. Zeeb 		break;
1014bfcc09ddSBjoern A. Zeeb 	}
1015bfcc09ddSBjoern A. Zeeb 
1016bfcc09ddSBjoern A. Zeeb 	if (!ret) {
1017bfcc09ddSBjoern A. Zeeb 		u16 rx_ba_ssn = 0;
1018bfcc09ddSBjoern A. Zeeb 
1019bfcc09ddSBjoern A. Zeeb 		if (action == IEEE80211_AMPDU_RX_START)
1020bfcc09ddSBjoern A. Zeeb 			rx_ba_ssn = *ssn;
1021bfcc09ddSBjoern A. Zeeb 
1022bfcc09ddSBjoern A. Zeeb 		iwl_mvm_ampdu_check_trigger(mvm, vif, sta, tid,
1023bfcc09ddSBjoern A. Zeeb 					    rx_ba_ssn, action);
1024bfcc09ddSBjoern A. Zeeb 	}
1025bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
1026bfcc09ddSBjoern A. Zeeb 
1027bfcc09ddSBjoern A. Zeeb 	return ret;
1028bfcc09ddSBjoern A. Zeeb }
1029bfcc09ddSBjoern A. Zeeb 
1030bfcc09ddSBjoern A. Zeeb static void iwl_mvm_cleanup_iterator(void *data, u8 *mac,
1031bfcc09ddSBjoern A. Zeeb 				     struct ieee80211_vif *vif)
1032bfcc09ddSBjoern A. Zeeb {
1033bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = data;
1034bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1035bfcc09ddSBjoern A. Zeeb 
1036bfcc09ddSBjoern A. Zeeb 	mvmvif->uploaded = false;
1037bfcc09ddSBjoern A. Zeeb 	mvmvif->ap_sta_id = IWL_MVM_INVALID_STA;
1038bfcc09ddSBjoern A. Zeeb 
1039bfcc09ddSBjoern A. Zeeb 	spin_lock_bh(&mvm->time_event_lock);
1040bfcc09ddSBjoern A. Zeeb 	iwl_mvm_te_clear_data(mvm, &mvmvif->time_event_data);
1041bfcc09ddSBjoern A. Zeeb 	spin_unlock_bh(&mvm->time_event_lock);
1042bfcc09ddSBjoern A. Zeeb 
1043bfcc09ddSBjoern A. Zeeb 	mvmvif->phy_ctxt = NULL;
1044bfcc09ddSBjoern A. Zeeb 	memset(&mvmvif->bf_data, 0, sizeof(mvmvif->bf_data));
1045bfcc09ddSBjoern A. Zeeb 	memset(&mvmvif->probe_resp_data, 0, sizeof(mvmvif->probe_resp_data));
1046bfcc09ddSBjoern A. Zeeb }
1047bfcc09ddSBjoern A. Zeeb 
1048bfcc09ddSBjoern A. Zeeb static void iwl_mvm_restart_cleanup(struct iwl_mvm *mvm)
1049bfcc09ddSBjoern A. Zeeb {
1050bfcc09ddSBjoern A. Zeeb 	iwl_mvm_stop_device(mvm);
1051bfcc09ddSBjoern A. Zeeb 
1052bfcc09ddSBjoern A. Zeeb 	mvm->cur_aid = 0;
1053bfcc09ddSBjoern A. Zeeb 
1054bfcc09ddSBjoern A. Zeeb 	mvm->scan_status = 0;
1055bfcc09ddSBjoern A. Zeeb 	mvm->ps_disabled = false;
1056bfcc09ddSBjoern A. Zeeb 	mvm->rfkill_safe_init_done = false;
1057bfcc09ddSBjoern A. Zeeb 
1058bfcc09ddSBjoern A. Zeeb 	/* just in case one was running */
1059bfcc09ddSBjoern A. Zeeb 	iwl_mvm_cleanup_roc_te(mvm);
1060bfcc09ddSBjoern A. Zeeb 	ieee80211_remain_on_channel_expired(mvm->hw);
1061bfcc09ddSBjoern A. Zeeb 
1062bfcc09ddSBjoern A. Zeeb 	iwl_mvm_ftm_restart(mvm);
1063bfcc09ddSBjoern A. Zeeb 
1064bfcc09ddSBjoern A. Zeeb 	/*
1065bfcc09ddSBjoern A. Zeeb 	 * cleanup all interfaces, even inactive ones, as some might have
1066bfcc09ddSBjoern A. Zeeb 	 * gone down during the HW restart
1067bfcc09ddSBjoern A. Zeeb 	 */
1068bfcc09ddSBjoern A. Zeeb 	ieee80211_iterate_interfaces(mvm->hw, 0, iwl_mvm_cleanup_iterator, mvm);
1069bfcc09ddSBjoern A. Zeeb 
1070bfcc09ddSBjoern A. Zeeb 	mvm->p2p_device_vif = NULL;
1071bfcc09ddSBjoern A. Zeeb 
1072bfcc09ddSBjoern A. Zeeb 	iwl_mvm_reset_phy_ctxts(mvm);
1073bfcc09ddSBjoern A. Zeeb 	memset(mvm->fw_key_table, 0, sizeof(mvm->fw_key_table));
1074bfcc09ddSBjoern A. Zeeb 	memset(&mvm->last_bt_notif, 0, sizeof(mvm->last_bt_notif));
1075bfcc09ddSBjoern A. Zeeb 	memset(&mvm->last_bt_ci_cmd, 0, sizeof(mvm->last_bt_ci_cmd));
1076bfcc09ddSBjoern A. Zeeb 
1077bfcc09ddSBjoern A. Zeeb 	ieee80211_wake_queues(mvm->hw);
1078bfcc09ddSBjoern A. Zeeb 
1079bfcc09ddSBjoern A. Zeeb 	mvm->vif_count = 0;
1080bfcc09ddSBjoern A. Zeeb 	mvm->rx_ba_sessions = 0;
1081bfcc09ddSBjoern A. Zeeb 	mvm->fwrt.dump.conf = FW_DBG_INVALID;
1082bfcc09ddSBjoern A. Zeeb 	mvm->monitor_on = false;
1083bfcc09ddSBjoern A. Zeeb 
1084bfcc09ddSBjoern A. Zeeb 	/* keep statistics ticking */
1085bfcc09ddSBjoern A. Zeeb 	iwl_mvm_accu_radio_stats(mvm);
1086bfcc09ddSBjoern A. Zeeb }
1087bfcc09ddSBjoern A. Zeeb 
1088bfcc09ddSBjoern A. Zeeb int __iwl_mvm_mac_start(struct iwl_mvm *mvm)
1089bfcc09ddSBjoern A. Zeeb {
1090bfcc09ddSBjoern A. Zeeb 	int ret;
1091bfcc09ddSBjoern A. Zeeb 
1092bfcc09ddSBjoern A. Zeeb 	lockdep_assert_held(&mvm->mutex);
1093bfcc09ddSBjoern A. Zeeb 
1094bfcc09ddSBjoern A. Zeeb 	if (test_bit(IWL_MVM_STATUS_HW_RESTART_REQUESTED, &mvm->status)) {
1095bfcc09ddSBjoern A. Zeeb 		/*
1096bfcc09ddSBjoern A. Zeeb 		 * Now convert the HW_RESTART_REQUESTED flag to IN_HW_RESTART
1097bfcc09ddSBjoern A. Zeeb 		 * so later code will - from now on - see that we're doing it.
1098bfcc09ddSBjoern A. Zeeb 		 */
1099bfcc09ddSBjoern A. Zeeb 		set_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status);
1100bfcc09ddSBjoern A. Zeeb 		clear_bit(IWL_MVM_STATUS_HW_RESTART_REQUESTED, &mvm->status);
1101bfcc09ddSBjoern A. Zeeb 		/* Clean up some internal and mac80211 state on restart */
1102bfcc09ddSBjoern A. Zeeb 		iwl_mvm_restart_cleanup(mvm);
1103bfcc09ddSBjoern A. Zeeb 	}
1104bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_up(mvm);
1105bfcc09ddSBjoern A. Zeeb 
1106bfcc09ddSBjoern A. Zeeb 	iwl_dbg_tlv_time_point(&mvm->fwrt, IWL_FW_INI_TIME_POINT_POST_INIT,
1107bfcc09ddSBjoern A. Zeeb 			       NULL);
1108bfcc09ddSBjoern A. Zeeb 	iwl_dbg_tlv_time_point(&mvm->fwrt, IWL_FW_INI_TIME_POINT_PERIODIC,
1109bfcc09ddSBjoern A. Zeeb 			       NULL);
1110bfcc09ddSBjoern A. Zeeb 
1111bfcc09ddSBjoern A. Zeeb 	mvm->last_reset_or_resume_time_jiffies = jiffies;
1112bfcc09ddSBjoern A. Zeeb 
1113bfcc09ddSBjoern A. Zeeb 	if (ret && test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) {
1114bfcc09ddSBjoern A. Zeeb 		/* Something went wrong - we need to finish some cleanup
1115bfcc09ddSBjoern A. Zeeb 		 * that normally iwl_mvm_mac_restart_complete() below
1116bfcc09ddSBjoern A. Zeeb 		 * would do.
1117bfcc09ddSBjoern A. Zeeb 		 */
1118bfcc09ddSBjoern A. Zeeb 		clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status);
1119bfcc09ddSBjoern A. Zeeb 	}
1120bfcc09ddSBjoern A. Zeeb 
1121bfcc09ddSBjoern A. Zeeb 	return ret;
1122bfcc09ddSBjoern A. Zeeb }
1123bfcc09ddSBjoern A. Zeeb 
1124bfcc09ddSBjoern A. Zeeb static int iwl_mvm_mac_start(struct ieee80211_hw *hw)
1125bfcc09ddSBjoern A. Zeeb {
1126bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1127bfcc09ddSBjoern A. Zeeb 	int ret;
1128bfcc09ddSBjoern A. Zeeb 
1129bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
1130bfcc09ddSBjoern A. Zeeb 	ret = __iwl_mvm_mac_start(mvm);
1131bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
1132bfcc09ddSBjoern A. Zeeb 
1133bfcc09ddSBjoern A. Zeeb 	return ret;
1134bfcc09ddSBjoern A. Zeeb }
1135bfcc09ddSBjoern A. Zeeb 
1136bfcc09ddSBjoern A. Zeeb static void iwl_mvm_restart_complete(struct iwl_mvm *mvm)
1137bfcc09ddSBjoern A. Zeeb {
1138bfcc09ddSBjoern A. Zeeb 	int ret;
1139bfcc09ddSBjoern A. Zeeb 
1140bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
1141bfcc09ddSBjoern A. Zeeb 
1142bfcc09ddSBjoern A. Zeeb 	clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status);
1143bfcc09ddSBjoern A. Zeeb 
1144bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_update_quotas(mvm, true, NULL);
1145bfcc09ddSBjoern A. Zeeb 	if (ret)
1146bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "Failed to update quotas after restart (%d)\n",
1147bfcc09ddSBjoern A. Zeeb 			ret);
1148bfcc09ddSBjoern A. Zeeb 
1149bfcc09ddSBjoern A. Zeeb 	iwl_mvm_send_recovery_cmd(mvm, ERROR_RECOVERY_END_OF_RECOVERY);
1150bfcc09ddSBjoern A. Zeeb 
1151bfcc09ddSBjoern A. Zeeb 	/*
1152bfcc09ddSBjoern A. Zeeb 	 * If we have TDLS peers, remove them. We don't know the last seqno/PN
1153bfcc09ddSBjoern A. Zeeb 	 * of packets the FW sent out, so we must reconnect.
1154bfcc09ddSBjoern A. Zeeb 	 */
1155bfcc09ddSBjoern A. Zeeb 	iwl_mvm_teardown_tdls_peers(mvm);
1156bfcc09ddSBjoern A. Zeeb 
1157bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
1158bfcc09ddSBjoern A. Zeeb }
1159bfcc09ddSBjoern A. Zeeb 
1160bfcc09ddSBjoern A. Zeeb static void
1161bfcc09ddSBjoern A. Zeeb iwl_mvm_mac_reconfig_complete(struct ieee80211_hw *hw,
1162bfcc09ddSBjoern A. Zeeb 			      enum ieee80211_reconfig_type reconfig_type)
1163bfcc09ddSBjoern A. Zeeb {
1164bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1165bfcc09ddSBjoern A. Zeeb 
1166bfcc09ddSBjoern A. Zeeb 	switch (reconfig_type) {
1167bfcc09ddSBjoern A. Zeeb 	case IEEE80211_RECONFIG_TYPE_RESTART:
1168bfcc09ddSBjoern A. Zeeb 		iwl_mvm_restart_complete(mvm);
1169bfcc09ddSBjoern A. Zeeb 		break;
1170bfcc09ddSBjoern A. Zeeb 	case IEEE80211_RECONFIG_TYPE_SUSPEND:
1171bfcc09ddSBjoern A. Zeeb 		break;
1172bfcc09ddSBjoern A. Zeeb 	}
1173bfcc09ddSBjoern A. Zeeb }
1174bfcc09ddSBjoern A. Zeeb 
1175bfcc09ddSBjoern A. Zeeb void __iwl_mvm_mac_stop(struct iwl_mvm *mvm)
1176bfcc09ddSBjoern A. Zeeb {
1177bfcc09ddSBjoern A. Zeeb 	lockdep_assert_held(&mvm->mutex);
1178bfcc09ddSBjoern A. Zeeb 
1179bfcc09ddSBjoern A. Zeeb 	iwl_mvm_ftm_initiator_smooth_stop(mvm);
1180bfcc09ddSBjoern A. Zeeb 
1181bfcc09ddSBjoern A. Zeeb 	/* firmware counters are obviously reset now, but we shouldn't
1182bfcc09ddSBjoern A. Zeeb 	 * partially track so also clear the fw_reset_accu counters.
1183bfcc09ddSBjoern A. Zeeb 	 */
1184bfcc09ddSBjoern A. Zeeb 	memset(&mvm->accu_radio_stats, 0, sizeof(mvm->accu_radio_stats));
1185bfcc09ddSBjoern A. Zeeb 
1186bfcc09ddSBjoern A. Zeeb 	/* async_handlers_wk is now blocked */
1187bfcc09ddSBjoern A. Zeeb 
1188bfcc09ddSBjoern A. Zeeb 	if (iwl_fw_lookup_cmd_ver(mvm->fw, LONG_GROUP, ADD_STA, 0) < 12)
1189bfcc09ddSBjoern A. Zeeb 		iwl_mvm_rm_aux_sta(mvm);
1190bfcc09ddSBjoern A. Zeeb 
1191bfcc09ddSBjoern A. Zeeb 	iwl_mvm_stop_device(mvm);
1192bfcc09ddSBjoern A. Zeeb 
1193bfcc09ddSBjoern A. Zeeb 	iwl_mvm_async_handlers_purge(mvm);
1194bfcc09ddSBjoern A. Zeeb 	/* async_handlers_list is empty and will stay empty: HW is stopped */
1195bfcc09ddSBjoern A. Zeeb 
1196bfcc09ddSBjoern A. Zeeb 	/*
1197bfcc09ddSBjoern A. Zeeb 	 * Clear IN_HW_RESTART and HW_RESTART_REQUESTED flag when stopping the
1198bfcc09ddSBjoern A. Zeeb 	 * hw (as restart_complete() won't be called in this case) and mac80211
1199bfcc09ddSBjoern A. Zeeb 	 * won't execute the restart.
1200bfcc09ddSBjoern A. Zeeb 	 * But make sure to cleanup interfaces that have gone down before/during
1201bfcc09ddSBjoern A. Zeeb 	 * HW restart was requested.
1202bfcc09ddSBjoern A. Zeeb 	 */
1203bfcc09ddSBjoern A. Zeeb 	if (test_and_clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) ||
1204bfcc09ddSBjoern A. Zeeb 	    test_and_clear_bit(IWL_MVM_STATUS_HW_RESTART_REQUESTED,
1205bfcc09ddSBjoern A. Zeeb 			       &mvm->status))
1206bfcc09ddSBjoern A. Zeeb 		ieee80211_iterate_interfaces(mvm->hw, 0,
1207bfcc09ddSBjoern A. Zeeb 					     iwl_mvm_cleanup_iterator, mvm);
1208bfcc09ddSBjoern A. Zeeb 
1209bfcc09ddSBjoern A. Zeeb 	/* We shouldn't have any UIDs still set.  Loop over all the UIDs to
1210bfcc09ddSBjoern A. Zeeb 	 * make sure there's nothing left there and warn if any is found.
1211bfcc09ddSBjoern A. Zeeb 	 */
1212bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_UMAC_SCAN)) {
1213bfcc09ddSBjoern A. Zeeb 		int i;
1214bfcc09ddSBjoern A. Zeeb 
1215bfcc09ddSBjoern A. Zeeb 		for (i = 0; i < mvm->max_scans; i++) {
1216bfcc09ddSBjoern A. Zeeb 			if (WARN_ONCE(mvm->scan_uid_status[i],
1217bfcc09ddSBjoern A. Zeeb 				      "UMAC scan UID %d status was not cleaned\n",
1218bfcc09ddSBjoern A. Zeeb 				      i))
1219bfcc09ddSBjoern A. Zeeb 				mvm->scan_uid_status[i] = 0;
1220bfcc09ddSBjoern A. Zeeb 		}
1221bfcc09ddSBjoern A. Zeeb 	}
1222bfcc09ddSBjoern A. Zeeb }
1223bfcc09ddSBjoern A. Zeeb 
1224bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mac_stop(struct ieee80211_hw *hw)
1225bfcc09ddSBjoern A. Zeeb {
1226bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1227bfcc09ddSBjoern A. Zeeb 
1228bfcc09ddSBjoern A. Zeeb 	flush_work(&mvm->async_handlers_wk);
1229bfcc09ddSBjoern A. Zeeb 	flush_work(&mvm->add_stream_wk);
1230bfcc09ddSBjoern A. Zeeb 
1231bfcc09ddSBjoern A. Zeeb 	/*
1232bfcc09ddSBjoern A. Zeeb 	 * Lock and clear the firmware running bit here already, so that
1233bfcc09ddSBjoern A. Zeeb 	 * new commands coming in elsewhere, e.g. from debugfs, will not
1234bfcc09ddSBjoern A. Zeeb 	 * be able to proceed. This is important here because one of those
1235bfcc09ddSBjoern A. Zeeb 	 * debugfs files causes the firmware dump to be triggered, and if we
1236bfcc09ddSBjoern A. Zeeb 	 * don't stop debugfs accesses before canceling that it could be
1237bfcc09ddSBjoern A. Zeeb 	 * retriggered after we flush it but before we've cleared the bit.
1238bfcc09ddSBjoern A. Zeeb 	 */
1239bfcc09ddSBjoern A. Zeeb 	clear_bit(IWL_MVM_STATUS_FIRMWARE_RUNNING, &mvm->status);
1240bfcc09ddSBjoern A. Zeeb 
1241bfcc09ddSBjoern A. Zeeb 	cancel_delayed_work_sync(&mvm->cs_tx_unblock_dwork);
1242bfcc09ddSBjoern A. Zeeb 	cancel_delayed_work_sync(&mvm->scan_timeout_dwork);
1243bfcc09ddSBjoern A. Zeeb 
1244bfcc09ddSBjoern A. Zeeb 	/*
1245bfcc09ddSBjoern A. Zeeb 	 * The work item could be running or queued if the
1246bfcc09ddSBjoern A. Zeeb 	 * ROC time event stops just as we get here.
1247bfcc09ddSBjoern A. Zeeb 	 */
1248bfcc09ddSBjoern A. Zeeb 	flush_work(&mvm->roc_done_wk);
1249bfcc09ddSBjoern A. Zeeb 
1250bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
1251bfcc09ddSBjoern A. Zeeb 	__iwl_mvm_mac_stop(mvm);
1252bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
1253bfcc09ddSBjoern A. Zeeb 
1254bfcc09ddSBjoern A. Zeeb 	/*
1255bfcc09ddSBjoern A. Zeeb 	 * The worker might have been waiting for the mutex, let it run and
1256bfcc09ddSBjoern A. Zeeb 	 * discover that its list is now empty.
1257bfcc09ddSBjoern A. Zeeb 	 */
1258bfcc09ddSBjoern A. Zeeb 	cancel_work_sync(&mvm->async_handlers_wk);
1259bfcc09ddSBjoern A. Zeeb }
1260bfcc09ddSBjoern A. Zeeb 
1261bfcc09ddSBjoern A. Zeeb static struct iwl_mvm_phy_ctxt *iwl_mvm_get_free_phy_ctxt(struct iwl_mvm *mvm)
1262bfcc09ddSBjoern A. Zeeb {
1263bfcc09ddSBjoern A. Zeeb 	u16 i;
1264bfcc09ddSBjoern A. Zeeb 
1265bfcc09ddSBjoern A. Zeeb 	lockdep_assert_held(&mvm->mutex);
1266bfcc09ddSBjoern A. Zeeb 
1267bfcc09ddSBjoern A. Zeeb 	for (i = 0; i < NUM_PHY_CTX; i++)
1268bfcc09ddSBjoern A. Zeeb 		if (!mvm->phy_ctxts[i].ref)
1269bfcc09ddSBjoern A. Zeeb 			return &mvm->phy_ctxts[i];
1270bfcc09ddSBjoern A. Zeeb 
1271bfcc09ddSBjoern A. Zeeb 	IWL_ERR(mvm, "No available PHY context\n");
1272bfcc09ddSBjoern A. Zeeb 	return NULL;
1273bfcc09ddSBjoern A. Zeeb }
1274bfcc09ddSBjoern A. Zeeb 
1275bfcc09ddSBjoern A. Zeeb static int iwl_mvm_set_tx_power(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
1276bfcc09ddSBjoern A. Zeeb 				s16 tx_power)
1277bfcc09ddSBjoern A. Zeeb {
1278bfcc09ddSBjoern A. Zeeb 	int len;
1279bfcc09ddSBjoern A. Zeeb 	struct iwl_dev_tx_power_cmd cmd = {
1280bfcc09ddSBjoern A. Zeeb 		.common.set_mode = cpu_to_le32(IWL_TX_POWER_MODE_SET_MAC),
1281bfcc09ddSBjoern A. Zeeb 		.common.mac_context_id =
1282bfcc09ddSBjoern A. Zeeb 			cpu_to_le32(iwl_mvm_vif_from_mac80211(vif)->id),
1283bfcc09ddSBjoern A. Zeeb 		.common.pwr_restriction = cpu_to_le16(8 * tx_power),
1284bfcc09ddSBjoern A. Zeeb 	};
1285bfcc09ddSBjoern A. Zeeb 	u8 cmd_ver = iwl_fw_lookup_cmd_ver(mvm->fw, LONG_GROUP,
1286bfcc09ddSBjoern A. Zeeb 					   REDUCE_TX_POWER_CMD,
1287bfcc09ddSBjoern A. Zeeb 					   IWL_FW_CMD_VER_UNKNOWN);
1288bfcc09ddSBjoern A. Zeeb 
1289bfcc09ddSBjoern A. Zeeb 	if (tx_power == IWL_DEFAULT_MAX_TX_POWER)
1290bfcc09ddSBjoern A. Zeeb 		cmd.common.pwr_restriction = cpu_to_le16(IWL_DEV_MAX_TX_POWER);
1291bfcc09ddSBjoern A. Zeeb 
1292bfcc09ddSBjoern A. Zeeb 	if (cmd_ver == 6)
1293bfcc09ddSBjoern A. Zeeb 		len = sizeof(cmd.v6);
1294bfcc09ddSBjoern A. Zeeb 	else if (fw_has_api(&mvm->fw->ucode_capa,
1295bfcc09ddSBjoern A. Zeeb 			    IWL_UCODE_TLV_API_REDUCE_TX_POWER))
1296bfcc09ddSBjoern A. Zeeb 		len = sizeof(cmd.v5);
1297bfcc09ddSBjoern A. Zeeb 	else if (fw_has_capa(&mvm->fw->ucode_capa,
1298bfcc09ddSBjoern A. Zeeb 			     IWL_UCODE_TLV_CAPA_TX_POWER_ACK))
1299bfcc09ddSBjoern A. Zeeb 		len = sizeof(cmd.v4);
1300bfcc09ddSBjoern A. Zeeb 	else
1301bfcc09ddSBjoern A. Zeeb 		len = sizeof(cmd.v3);
1302bfcc09ddSBjoern A. Zeeb 
1303bfcc09ddSBjoern A. Zeeb 	/* all structs have the same common part, add it */
1304bfcc09ddSBjoern A. Zeeb 	len += sizeof(cmd.common);
1305bfcc09ddSBjoern A. Zeeb 
1306bfcc09ddSBjoern A. Zeeb 	return iwl_mvm_send_cmd_pdu(mvm, REDUCE_TX_POWER_CMD, 0, len, &cmd);
1307bfcc09ddSBjoern A. Zeeb }
1308bfcc09ddSBjoern A. Zeeb 
1309bfcc09ddSBjoern A. Zeeb static int iwl_mvm_post_channel_switch(struct ieee80211_hw *hw,
1310bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_vif *vif)
1311bfcc09ddSBjoern A. Zeeb {
1312bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1313bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1314bfcc09ddSBjoern A. Zeeb 	int ret;
1315bfcc09ddSBjoern A. Zeeb 
1316bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
1317bfcc09ddSBjoern A. Zeeb 
1318bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_STATION) {
1319bfcc09ddSBjoern A. Zeeb 		struct iwl_mvm_sta *mvmsta;
1320bfcc09ddSBjoern A. Zeeb 
1321bfcc09ddSBjoern A. Zeeb 		mvmvif->csa_bcn_pending = false;
1322bfcc09ddSBjoern A. Zeeb 		mvmsta = iwl_mvm_sta_from_staid_protected(mvm,
1323bfcc09ddSBjoern A. Zeeb 							  mvmvif->ap_sta_id);
1324bfcc09ddSBjoern A. Zeeb 
1325bfcc09ddSBjoern A. Zeeb 		if (WARN_ON(!mvmsta)) {
1326bfcc09ddSBjoern A. Zeeb 			ret = -EIO;
1327bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
1328bfcc09ddSBjoern A. Zeeb 		}
1329bfcc09ddSBjoern A. Zeeb 
1330bfcc09ddSBjoern A. Zeeb 		iwl_mvm_sta_modify_disable_tx(mvm, mvmsta, false);
1331bfcc09ddSBjoern A. Zeeb 
1332bfcc09ddSBjoern A. Zeeb 		iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
1333bfcc09ddSBjoern A. Zeeb 
1334bfcc09ddSBjoern A. Zeeb 		if (!fw_has_capa(&mvm->fw->ucode_capa,
1335bfcc09ddSBjoern A. Zeeb 				 IWL_UCODE_TLV_CAPA_CHANNEL_SWITCH_CMD)) {
1336bfcc09ddSBjoern A. Zeeb 			ret = iwl_mvm_enable_beacon_filter(mvm, vif, 0);
1337bfcc09ddSBjoern A. Zeeb 			if (ret)
1338bfcc09ddSBjoern A. Zeeb 				goto out_unlock;
1339bfcc09ddSBjoern A. Zeeb 
1340bfcc09ddSBjoern A. Zeeb 			iwl_mvm_stop_session_protection(mvm, vif);
1341bfcc09ddSBjoern A. Zeeb 		}
1342bfcc09ddSBjoern A. Zeeb 	}
1343bfcc09ddSBjoern A. Zeeb 
1344bfcc09ddSBjoern A. Zeeb 	mvmvif->ps_disabled = false;
1345bfcc09ddSBjoern A. Zeeb 
1346bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_power_update_ps(mvm);
1347bfcc09ddSBjoern A. Zeeb 
1348bfcc09ddSBjoern A. Zeeb out_unlock:
1349bfcc09ddSBjoern A. Zeeb 	if (mvmvif->csa_failed)
1350bfcc09ddSBjoern A. Zeeb 		ret = -EIO;
1351bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
1352bfcc09ddSBjoern A. Zeeb 
1353bfcc09ddSBjoern A. Zeeb 	return ret;
1354bfcc09ddSBjoern A. Zeeb }
1355bfcc09ddSBjoern A. Zeeb 
1356bfcc09ddSBjoern A. Zeeb static void iwl_mvm_abort_channel_switch(struct ieee80211_hw *hw,
1357bfcc09ddSBjoern A. Zeeb 					 struct ieee80211_vif *vif)
1358bfcc09ddSBjoern A. Zeeb {
1359bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1360bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1361bfcc09ddSBjoern A. Zeeb 	struct iwl_chan_switch_te_cmd cmd = {
1362bfcc09ddSBjoern A. Zeeb 		.mac_id = cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id,
1363bfcc09ddSBjoern A. Zeeb 							  mvmvif->color)),
1364bfcc09ddSBjoern A. Zeeb 		.action = cpu_to_le32(FW_CTXT_ACTION_REMOVE),
1365bfcc09ddSBjoern A. Zeeb 	};
1366bfcc09ddSBjoern A. Zeeb 
1367bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_MAC80211(mvm, "Abort CSA on mac %d\n", mvmvif->id);
1368bfcc09ddSBjoern A. Zeeb 
1369bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
1370bfcc09ddSBjoern A. Zeeb 	if (!fw_has_capa(&mvm->fw->ucode_capa,
1371bfcc09ddSBjoern A. Zeeb 			 IWL_UCODE_TLV_CAPA_CHANNEL_SWITCH_CMD))
1372bfcc09ddSBjoern A. Zeeb 		iwl_mvm_remove_csa_period(mvm, vif);
1373bfcc09ddSBjoern A. Zeeb 	else
1374bfcc09ddSBjoern A. Zeeb 		WARN_ON(iwl_mvm_send_cmd_pdu(mvm,
1375bfcc09ddSBjoern A. Zeeb 					     WIDE_ID(MAC_CONF_GROUP,
1376bfcc09ddSBjoern A. Zeeb 						     CHANNEL_SWITCH_TIME_EVENT_CMD),
1377bfcc09ddSBjoern A. Zeeb 					     0, sizeof(cmd), &cmd));
1378bfcc09ddSBjoern A. Zeeb 	mvmvif->csa_failed = true;
1379bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
1380bfcc09ddSBjoern A. Zeeb 
1381bfcc09ddSBjoern A. Zeeb 	iwl_mvm_post_channel_switch(hw, vif);
1382bfcc09ddSBjoern A. Zeeb }
1383bfcc09ddSBjoern A. Zeeb 
1384bfcc09ddSBjoern A. Zeeb static void iwl_mvm_channel_switch_disconnect_wk(struct work_struct *wk)
1385bfcc09ddSBjoern A. Zeeb {
1386bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif;
1387bfcc09ddSBjoern A. Zeeb 	struct ieee80211_vif *vif;
1388bfcc09ddSBjoern A. Zeeb 
1389bfcc09ddSBjoern A. Zeeb 	mvmvif = container_of(wk, struct iwl_mvm_vif, csa_work.work);
1390bfcc09ddSBjoern A. Zeeb 	vif = container_of((void *)mvmvif, struct ieee80211_vif, drv_priv);
1391bfcc09ddSBjoern A. Zeeb 
1392bfcc09ddSBjoern A. Zeeb 	/* Trigger disconnect (should clear the CSA state) */
1393bfcc09ddSBjoern A. Zeeb 	ieee80211_chswitch_done(vif, false);
1394bfcc09ddSBjoern A. Zeeb }
1395bfcc09ddSBjoern A. Zeeb 
1396bfcc09ddSBjoern A. Zeeb static int iwl_mvm_mac_add_interface(struct ieee80211_hw *hw,
1397bfcc09ddSBjoern A. Zeeb 				     struct ieee80211_vif *vif)
1398bfcc09ddSBjoern A. Zeeb {
1399bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1400bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1401bfcc09ddSBjoern A. Zeeb 	int ret;
1402bfcc09ddSBjoern A. Zeeb 
1403bfcc09ddSBjoern A. Zeeb 	mvmvif->mvm = mvm;
1404bfcc09ddSBjoern A. Zeeb 	RCU_INIT_POINTER(mvmvif->probe_resp_data, NULL);
1405bfcc09ddSBjoern A. Zeeb 
1406bfcc09ddSBjoern A. Zeeb 	/*
1407bfcc09ddSBjoern A. Zeeb 	 * Not much to do here. The stack will not allow interface
1408bfcc09ddSBjoern A. Zeeb 	 * types or combinations that we didn't advertise, so we
1409bfcc09ddSBjoern A. Zeeb 	 * don't really have to check the types.
1410bfcc09ddSBjoern A. Zeeb 	 */
1411bfcc09ddSBjoern A. Zeeb 
1412bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
1413bfcc09ddSBjoern A. Zeeb 
1414bfcc09ddSBjoern A. Zeeb 	/* make sure that beacon statistics don't go backwards with FW reset */
1415bfcc09ddSBjoern A. Zeeb 	if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status))
1416bfcc09ddSBjoern A. Zeeb 		mvmvif->beacon_stats.accu_num_beacons +=
1417bfcc09ddSBjoern A. Zeeb 			mvmvif->beacon_stats.num_beacons;
1418bfcc09ddSBjoern A. Zeeb 
1419bfcc09ddSBjoern A. Zeeb 	/* Allocate resources for the MAC context, and add it to the fw  */
1420bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_mac_ctxt_init(mvm, vif);
1421bfcc09ddSBjoern A. Zeeb 	if (ret)
1422bfcc09ddSBjoern A. Zeeb 		goto out_unlock;
1423bfcc09ddSBjoern A. Zeeb 
1424bfcc09ddSBjoern A. Zeeb 	rcu_assign_pointer(mvm->vif_id_to_mac[mvmvif->id], vif);
1425bfcc09ddSBjoern A. Zeeb 
1426bfcc09ddSBjoern A. Zeeb 	/* Counting number of interfaces is needed for legacy PM */
1427bfcc09ddSBjoern A. Zeeb 	if (vif->type != NL80211_IFTYPE_P2P_DEVICE)
1428bfcc09ddSBjoern A. Zeeb 		mvm->vif_count++;
1429bfcc09ddSBjoern A. Zeeb 
1430bfcc09ddSBjoern A. Zeeb 	/*
1431bfcc09ddSBjoern A. Zeeb 	 * The AP binding flow can be done only after the beacon
1432bfcc09ddSBjoern A. Zeeb 	 * template is configured (which happens only in the mac80211
1433bfcc09ddSBjoern A. Zeeb 	 * start_ap() flow), and adding the broadcast station can happen
1434bfcc09ddSBjoern A. Zeeb 	 * only after the binding.
1435bfcc09ddSBjoern A. Zeeb 	 * In addition, since modifying the MAC before adding a bcast
1436bfcc09ddSBjoern A. Zeeb 	 * station is not allowed by the FW, delay the adding of MAC context to
1437bfcc09ddSBjoern A. Zeeb 	 * the point where we can also add the bcast station.
1438bfcc09ddSBjoern A. Zeeb 	 * In short: there's not much we can do at this point, other than
1439bfcc09ddSBjoern A. Zeeb 	 * allocating resources :)
1440bfcc09ddSBjoern A. Zeeb 	 */
1441bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_AP ||
1442bfcc09ddSBjoern A. Zeeb 	    vif->type == NL80211_IFTYPE_ADHOC) {
1443bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_alloc_bcast_sta(mvm, vif);
1444bfcc09ddSBjoern A. Zeeb 		if (ret) {
1445bfcc09ddSBjoern A. Zeeb 			IWL_ERR(mvm, "Failed to allocate bcast sta\n");
1446bfcc09ddSBjoern A. Zeeb 			goto out_release;
1447bfcc09ddSBjoern A. Zeeb 		}
1448bfcc09ddSBjoern A. Zeeb 
1449bfcc09ddSBjoern A. Zeeb 		/*
1450bfcc09ddSBjoern A. Zeeb 		 * Only queue for this station is the mcast queue,
1451bfcc09ddSBjoern A. Zeeb 		 * which shouldn't be in TFD mask anyway
1452bfcc09ddSBjoern A. Zeeb 		 */
1453bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_allocate_int_sta(mvm, &mvmvif->mcast_sta,
1454bfcc09ddSBjoern A. Zeeb 					       0, vif->type,
1455bfcc09ddSBjoern A. Zeeb 					       IWL_STA_MULTICAST);
1456bfcc09ddSBjoern A. Zeeb 		if (ret)
1457bfcc09ddSBjoern A. Zeeb 			goto out_release;
1458bfcc09ddSBjoern A. Zeeb 
1459bfcc09ddSBjoern A. Zeeb 		iwl_mvm_vif_dbgfs_register(mvm, vif);
1460bfcc09ddSBjoern A. Zeeb 		goto out_unlock;
1461bfcc09ddSBjoern A. Zeeb 	}
1462bfcc09ddSBjoern A. Zeeb 
1463bfcc09ddSBjoern A. Zeeb 	mvmvif->features |= hw->netdev_features;
1464bfcc09ddSBjoern A. Zeeb 
1465bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_mac_ctxt_add(mvm, vif);
1466bfcc09ddSBjoern A. Zeeb 	if (ret)
1467bfcc09ddSBjoern A. Zeeb 		goto out_release;
1468bfcc09ddSBjoern A. Zeeb 
1469bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_power_update_mac(mvm);
1470bfcc09ddSBjoern A. Zeeb 	if (ret)
1471bfcc09ddSBjoern A. Zeeb 		goto out_remove_mac;
1472bfcc09ddSBjoern A. Zeeb 
1473bfcc09ddSBjoern A. Zeeb 	/* beacon filtering */
1474bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_disable_beacon_filter(mvm, vif, 0);
1475bfcc09ddSBjoern A. Zeeb 	if (ret)
1476bfcc09ddSBjoern A. Zeeb 		goto out_remove_mac;
1477bfcc09ddSBjoern A. Zeeb 
1478bfcc09ddSBjoern A. Zeeb 	if (!mvm->bf_allowed_vif &&
1479bfcc09ddSBjoern A. Zeeb 	    vif->type == NL80211_IFTYPE_STATION && !vif->p2p) {
1480bfcc09ddSBjoern A. Zeeb 		mvm->bf_allowed_vif = mvmvif;
1481bfcc09ddSBjoern A. Zeeb 		vif->driver_flags |= IEEE80211_VIF_BEACON_FILTER |
1482bfcc09ddSBjoern A. Zeeb 				     IEEE80211_VIF_SUPPORTS_CQM_RSSI;
1483bfcc09ddSBjoern A. Zeeb 	}
1484bfcc09ddSBjoern A. Zeeb 
1485bfcc09ddSBjoern A. Zeeb 	/*
1486bfcc09ddSBjoern A. Zeeb 	 * P2P_DEVICE interface does not have a channel context assigned to it,
1487bfcc09ddSBjoern A. Zeeb 	 * so a dedicated PHY context is allocated to it and the corresponding
1488bfcc09ddSBjoern A. Zeeb 	 * MAC context is bound to it at this stage.
1489bfcc09ddSBjoern A. Zeeb 	 */
1490bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
1491bfcc09ddSBjoern A. Zeeb 
1492bfcc09ddSBjoern A. Zeeb 		mvmvif->phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm);
1493bfcc09ddSBjoern A. Zeeb 		if (!mvmvif->phy_ctxt) {
1494bfcc09ddSBjoern A. Zeeb 			ret = -ENOSPC;
1495bfcc09ddSBjoern A. Zeeb 			goto out_free_bf;
1496bfcc09ddSBjoern A. Zeeb 		}
1497bfcc09ddSBjoern A. Zeeb 
1498bfcc09ddSBjoern A. Zeeb 		iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt);
1499bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_binding_add_vif(mvm, vif);
1500bfcc09ddSBjoern A. Zeeb 		if (ret)
1501bfcc09ddSBjoern A. Zeeb 			goto out_unref_phy;
1502bfcc09ddSBjoern A. Zeeb 
1503bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_add_p2p_bcast_sta(mvm, vif);
1504bfcc09ddSBjoern A. Zeeb 		if (ret)
1505bfcc09ddSBjoern A. Zeeb 			goto out_unbind;
1506bfcc09ddSBjoern A. Zeeb 
1507bfcc09ddSBjoern A. Zeeb 		/* Save a pointer to p2p device vif, so it can later be used to
1508bfcc09ddSBjoern A. Zeeb 		 * update the p2p device MAC when a GO is started/stopped */
1509bfcc09ddSBjoern A. Zeeb 		mvm->p2p_device_vif = vif;
1510bfcc09ddSBjoern A. Zeeb 	}
1511bfcc09ddSBjoern A. Zeeb 
1512bfcc09ddSBjoern A. Zeeb 	iwl_mvm_tcm_add_vif(mvm, vif);
1513bfcc09ddSBjoern A. Zeeb 	INIT_DELAYED_WORK(&mvmvif->csa_work,
1514bfcc09ddSBjoern A. Zeeb 			  iwl_mvm_channel_switch_disconnect_wk);
1515bfcc09ddSBjoern A. Zeeb 
1516bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_MONITOR)
1517bfcc09ddSBjoern A. Zeeb 		mvm->monitor_on = true;
1518bfcc09ddSBjoern A. Zeeb 
1519bfcc09ddSBjoern A. Zeeb 	iwl_mvm_vif_dbgfs_register(mvm, vif);
1520bfcc09ddSBjoern A. Zeeb 	goto out_unlock;
1521bfcc09ddSBjoern A. Zeeb 
1522bfcc09ddSBjoern A. Zeeb  out_unbind:
1523bfcc09ddSBjoern A. Zeeb 	iwl_mvm_binding_remove_vif(mvm, vif);
1524bfcc09ddSBjoern A. Zeeb  out_unref_phy:
1525bfcc09ddSBjoern A. Zeeb 	iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
1526bfcc09ddSBjoern A. Zeeb  out_free_bf:
1527bfcc09ddSBjoern A. Zeeb 	if (mvm->bf_allowed_vif == mvmvif) {
1528bfcc09ddSBjoern A. Zeeb 		mvm->bf_allowed_vif = NULL;
1529bfcc09ddSBjoern A. Zeeb 		vif->driver_flags &= ~(IEEE80211_VIF_BEACON_FILTER |
1530bfcc09ddSBjoern A. Zeeb 				       IEEE80211_VIF_SUPPORTS_CQM_RSSI);
1531bfcc09ddSBjoern A. Zeeb 	}
1532bfcc09ddSBjoern A. Zeeb  out_remove_mac:
1533bfcc09ddSBjoern A. Zeeb 	mvmvif->phy_ctxt = NULL;
1534bfcc09ddSBjoern A. Zeeb 	iwl_mvm_mac_ctxt_remove(mvm, vif);
1535bfcc09ddSBjoern A. Zeeb  out_release:
1536bfcc09ddSBjoern A. Zeeb 	if (vif->type != NL80211_IFTYPE_P2P_DEVICE)
1537bfcc09ddSBjoern A. Zeeb 		mvm->vif_count--;
1538bfcc09ddSBjoern A. Zeeb  out_unlock:
1539bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
1540bfcc09ddSBjoern A. Zeeb 
1541bfcc09ddSBjoern A. Zeeb 	return ret;
1542bfcc09ddSBjoern A. Zeeb }
1543bfcc09ddSBjoern A. Zeeb 
1544bfcc09ddSBjoern A. Zeeb static void iwl_mvm_prepare_mac_removal(struct iwl_mvm *mvm,
1545bfcc09ddSBjoern A. Zeeb 					struct ieee80211_vif *vif)
1546bfcc09ddSBjoern A. Zeeb {
1547bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
1548bfcc09ddSBjoern A. Zeeb 		/*
1549bfcc09ddSBjoern A. Zeeb 		 * Flush the ROC worker which will flush the OFFCHANNEL queue.
1550bfcc09ddSBjoern A. Zeeb 		 * We assume here that all the packets sent to the OFFCHANNEL
1551bfcc09ddSBjoern A. Zeeb 		 * queue are sent in ROC session.
1552bfcc09ddSBjoern A. Zeeb 		 */
1553bfcc09ddSBjoern A. Zeeb 		flush_work(&mvm->roc_done_wk);
1554bfcc09ddSBjoern A. Zeeb 	}
1555bfcc09ddSBjoern A. Zeeb }
1556bfcc09ddSBjoern A. Zeeb 
1557bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mac_remove_interface(struct ieee80211_hw *hw,
1558bfcc09ddSBjoern A. Zeeb 					 struct ieee80211_vif *vif)
1559bfcc09ddSBjoern A. Zeeb {
1560bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1561bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1562bfcc09ddSBjoern A. Zeeb 	struct iwl_probe_resp_data *probe_data;
1563bfcc09ddSBjoern A. Zeeb 
1564bfcc09ddSBjoern A. Zeeb 	iwl_mvm_prepare_mac_removal(mvm, vif);
1565bfcc09ddSBjoern A. Zeeb 
1566bfcc09ddSBjoern A. Zeeb 	if (!(vif->type == NL80211_IFTYPE_AP ||
1567bfcc09ddSBjoern A. Zeeb 	      vif->type == NL80211_IFTYPE_ADHOC))
1568bfcc09ddSBjoern A. Zeeb 		iwl_mvm_tcm_rm_vif(mvm, vif);
1569bfcc09ddSBjoern A. Zeeb 
1570bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
1571bfcc09ddSBjoern A. Zeeb 
1572bfcc09ddSBjoern A. Zeeb 	probe_data = rcu_dereference_protected(mvmvif->probe_resp_data,
1573bfcc09ddSBjoern A. Zeeb 					       lockdep_is_held(&mvm->mutex));
1574bfcc09ddSBjoern A. Zeeb 	RCU_INIT_POINTER(mvmvif->probe_resp_data, NULL);
1575bfcc09ddSBjoern A. Zeeb 	if (probe_data)
1576bfcc09ddSBjoern A. Zeeb 		kfree_rcu(probe_data, rcu_head);
1577bfcc09ddSBjoern A. Zeeb 
1578bfcc09ddSBjoern A. Zeeb 	if (mvm->bf_allowed_vif == mvmvif) {
1579bfcc09ddSBjoern A. Zeeb 		mvm->bf_allowed_vif = NULL;
1580bfcc09ddSBjoern A. Zeeb 		vif->driver_flags &= ~(IEEE80211_VIF_BEACON_FILTER |
1581bfcc09ddSBjoern A. Zeeb 				       IEEE80211_VIF_SUPPORTS_CQM_RSSI);
1582bfcc09ddSBjoern A. Zeeb 	}
1583bfcc09ddSBjoern A. Zeeb 
1584bfcc09ddSBjoern A. Zeeb 	if (vif->bss_conf.ftm_responder)
1585bfcc09ddSBjoern A. Zeeb 		memset(&mvm->ftm_resp_stats, 0, sizeof(mvm->ftm_resp_stats));
1586bfcc09ddSBjoern A. Zeeb 
1587bfcc09ddSBjoern A. Zeeb 	iwl_mvm_vif_dbgfs_clean(mvm, vif);
1588bfcc09ddSBjoern A. Zeeb 
1589bfcc09ddSBjoern A. Zeeb 	/*
1590bfcc09ddSBjoern A. Zeeb 	 * For AP/GO interface, the tear down of the resources allocated to the
1591bfcc09ddSBjoern A. Zeeb 	 * interface is be handled as part of the stop_ap flow.
1592bfcc09ddSBjoern A. Zeeb 	 */
1593bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_AP ||
1594bfcc09ddSBjoern A. Zeeb 	    vif->type == NL80211_IFTYPE_ADHOC) {
1595bfcc09ddSBjoern A. Zeeb #ifdef CONFIG_NL80211_TESTMODE
1596bfcc09ddSBjoern A. Zeeb 		if (vif == mvm->noa_vif) {
1597bfcc09ddSBjoern A. Zeeb 			mvm->noa_vif = NULL;
1598bfcc09ddSBjoern A. Zeeb 			mvm->noa_duration = 0;
1599bfcc09ddSBjoern A. Zeeb 		}
1600bfcc09ddSBjoern A. Zeeb #endif
1601bfcc09ddSBjoern A. Zeeb 		iwl_mvm_dealloc_int_sta(mvm, &mvmvif->mcast_sta);
1602bfcc09ddSBjoern A. Zeeb 		iwl_mvm_dealloc_bcast_sta(mvm, vif);
1603bfcc09ddSBjoern A. Zeeb 		goto out_release;
1604bfcc09ddSBjoern A. Zeeb 	}
1605bfcc09ddSBjoern A. Zeeb 
1606bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
1607bfcc09ddSBjoern A. Zeeb 		mvm->p2p_device_vif = NULL;
1608bfcc09ddSBjoern A. Zeeb 		iwl_mvm_rm_p2p_bcast_sta(mvm, vif);
1609bfcc09ddSBjoern A. Zeeb 		iwl_mvm_binding_remove_vif(mvm, vif);
1610bfcc09ddSBjoern A. Zeeb 		iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
1611bfcc09ddSBjoern A. Zeeb 		mvmvif->phy_ctxt = NULL;
1612bfcc09ddSBjoern A. Zeeb 	}
1613bfcc09ddSBjoern A. Zeeb 
1614bfcc09ddSBjoern A. Zeeb 	if (mvm->vif_count && vif->type != NL80211_IFTYPE_P2P_DEVICE)
1615bfcc09ddSBjoern A. Zeeb 		mvm->vif_count--;
1616bfcc09ddSBjoern A. Zeeb 
1617bfcc09ddSBjoern A. Zeeb 	iwl_mvm_power_update_mac(mvm);
1618bfcc09ddSBjoern A. Zeeb 	iwl_mvm_mac_ctxt_remove(mvm, vif);
1619bfcc09ddSBjoern A. Zeeb 
1620bfcc09ddSBjoern A. Zeeb 	RCU_INIT_POINTER(mvm->vif_id_to_mac[mvmvif->id], NULL);
1621bfcc09ddSBjoern A. Zeeb 
1622bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_MONITOR)
1623bfcc09ddSBjoern A. Zeeb 		mvm->monitor_on = false;
1624bfcc09ddSBjoern A. Zeeb 
1625bfcc09ddSBjoern A. Zeeb out_release:
1626bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
1627bfcc09ddSBjoern A. Zeeb }
1628bfcc09ddSBjoern A. Zeeb 
1629bfcc09ddSBjoern A. Zeeb static int iwl_mvm_mac_config(struct ieee80211_hw *hw, u32 changed)
1630bfcc09ddSBjoern A. Zeeb {
1631bfcc09ddSBjoern A. Zeeb 	return 0;
1632bfcc09ddSBjoern A. Zeeb }
1633bfcc09ddSBjoern A. Zeeb 
1634bfcc09ddSBjoern A. Zeeb struct iwl_mvm_mc_iter_data {
1635bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm;
1636bfcc09ddSBjoern A. Zeeb 	int port_id;
1637bfcc09ddSBjoern A. Zeeb };
1638bfcc09ddSBjoern A. Zeeb 
1639bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mc_iface_iterator(void *_data, u8 *mac,
1640bfcc09ddSBjoern A. Zeeb 				      struct ieee80211_vif *vif)
1641bfcc09ddSBjoern A. Zeeb {
1642bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_mc_iter_data *data = _data;
1643bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = data->mvm;
1644bfcc09ddSBjoern A. Zeeb 	struct iwl_mcast_filter_cmd *cmd = mvm->mcast_filter_cmd;
1645bfcc09ddSBjoern A. Zeeb 	struct iwl_host_cmd hcmd = {
1646bfcc09ddSBjoern A. Zeeb 		.id = MCAST_FILTER_CMD,
1647bfcc09ddSBjoern A. Zeeb 		.flags = CMD_ASYNC,
1648bfcc09ddSBjoern A. Zeeb 		.dataflags[0] = IWL_HCMD_DFL_NOCOPY,
1649bfcc09ddSBjoern A. Zeeb 	};
1650bfcc09ddSBjoern A. Zeeb 	int ret, len;
1651bfcc09ddSBjoern A. Zeeb 
1652bfcc09ddSBjoern A. Zeeb 	/* if we don't have free ports, mcast frames will be dropped */
1653bfcc09ddSBjoern A. Zeeb 	if (WARN_ON_ONCE(data->port_id >= MAX_PORT_ID_NUM))
1654bfcc09ddSBjoern A. Zeeb 		return;
1655bfcc09ddSBjoern A. Zeeb 
1656bfcc09ddSBjoern A. Zeeb 	if (vif->type != NL80211_IFTYPE_STATION ||
1657bfcc09ddSBjoern A. Zeeb 	    !vif->bss_conf.assoc)
1658bfcc09ddSBjoern A. Zeeb 		return;
1659bfcc09ddSBjoern A. Zeeb 
1660bfcc09ddSBjoern A. Zeeb 	cmd->port_id = data->port_id++;
1661bfcc09ddSBjoern A. Zeeb 	memcpy(cmd->bssid, vif->bss_conf.bssid, ETH_ALEN);
1662bfcc09ddSBjoern A. Zeeb 	len = roundup(sizeof(*cmd) + cmd->count * ETH_ALEN, 4);
1663bfcc09ddSBjoern A. Zeeb 
1664bfcc09ddSBjoern A. Zeeb 	hcmd.len[0] = len;
1665bfcc09ddSBjoern A. Zeeb 	hcmd.data[0] = cmd;
1666bfcc09ddSBjoern A. Zeeb 
1667bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_send_cmd(mvm, &hcmd);
1668bfcc09ddSBjoern A. Zeeb 	if (ret)
1669bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "mcast filter cmd error. ret=%d\n", ret);
1670bfcc09ddSBjoern A. Zeeb }
1671bfcc09ddSBjoern A. Zeeb 
1672bfcc09ddSBjoern A. Zeeb static void iwl_mvm_recalc_multicast(struct iwl_mvm *mvm)
1673bfcc09ddSBjoern A. Zeeb {
1674bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_mc_iter_data iter_data = {
1675bfcc09ddSBjoern A. Zeeb 		.mvm = mvm,
1676bfcc09ddSBjoern A. Zeeb 	};
1677*8f06a2b5SBjoern A. Zeeb 	int ret;
1678bfcc09ddSBjoern A. Zeeb 
1679bfcc09ddSBjoern A. Zeeb 	lockdep_assert_held(&mvm->mutex);
1680bfcc09ddSBjoern A. Zeeb 
1681bfcc09ddSBjoern A. Zeeb 	if (WARN_ON_ONCE(!mvm->mcast_filter_cmd))
1682bfcc09ddSBjoern A. Zeeb 		return;
1683bfcc09ddSBjoern A. Zeeb 
1684bfcc09ddSBjoern A. Zeeb 	ieee80211_iterate_active_interfaces_atomic(
1685bfcc09ddSBjoern A. Zeeb 		mvm->hw, IEEE80211_IFACE_ITER_NORMAL,
1686bfcc09ddSBjoern A. Zeeb 		iwl_mvm_mc_iface_iterator, &iter_data);
1687*8f06a2b5SBjoern A. Zeeb 
1688*8f06a2b5SBjoern A. Zeeb 	/*
1689*8f06a2b5SBjoern A. Zeeb 	 * Send a (synchronous) ech command so that we wait for the
1690*8f06a2b5SBjoern A. Zeeb 	 * multiple asynchronous MCAST_FILTER_CMD commands sent by
1691*8f06a2b5SBjoern A. Zeeb 	 * the interface iterator. Otherwise, we might get here over
1692*8f06a2b5SBjoern A. Zeeb 	 * and over again (by userspace just sending a lot of these)
1693*8f06a2b5SBjoern A. Zeeb 	 * and the CPU can send them faster than the firmware can
1694*8f06a2b5SBjoern A. Zeeb 	 * process them.
1695*8f06a2b5SBjoern A. Zeeb 	 * Note that the CPU is still faster - but with this we'll
1696*8f06a2b5SBjoern A. Zeeb 	 * actually send fewer commands overall because the CPU will
1697*8f06a2b5SBjoern A. Zeeb 	 * not schedule the work in mac80211 as frequently if it's
1698*8f06a2b5SBjoern A. Zeeb 	 * still running when rescheduled (possibly multiple times).
1699*8f06a2b5SBjoern A. Zeeb 	 */
1700*8f06a2b5SBjoern A. Zeeb 	ret = iwl_mvm_send_cmd_pdu(mvm, ECHO_CMD, 0, 0, NULL);
1701*8f06a2b5SBjoern A. Zeeb 	if (ret)
1702*8f06a2b5SBjoern A. Zeeb 		IWL_ERR(mvm, "Failed to synchronize multicast groups update\n");
1703bfcc09ddSBjoern A. Zeeb }
1704bfcc09ddSBjoern A. Zeeb 
1705bfcc09ddSBjoern A. Zeeb static u64 iwl_mvm_prepare_multicast(struct ieee80211_hw *hw,
1706bfcc09ddSBjoern A. Zeeb 				     struct netdev_hw_addr_list *mc_list)
1707bfcc09ddSBjoern A. Zeeb {
1708bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1709bfcc09ddSBjoern A. Zeeb 	struct iwl_mcast_filter_cmd *cmd;
1710bfcc09ddSBjoern A. Zeeb 	struct netdev_hw_addr *addr;
1711bfcc09ddSBjoern A. Zeeb 	int addr_count;
1712bfcc09ddSBjoern A. Zeeb 	bool pass_all;
1713bfcc09ddSBjoern A. Zeeb 	int len;
1714bfcc09ddSBjoern A. Zeeb 
1715bfcc09ddSBjoern A. Zeeb 	addr_count = netdev_hw_addr_list_count(mc_list);
1716bfcc09ddSBjoern A. Zeeb 	pass_all = addr_count > MAX_MCAST_FILTERING_ADDRESSES ||
1717bfcc09ddSBjoern A. Zeeb 		   IWL_MVM_FW_MCAST_FILTER_PASS_ALL;
1718bfcc09ddSBjoern A. Zeeb 	if (pass_all)
1719bfcc09ddSBjoern A. Zeeb 		addr_count = 0;
1720bfcc09ddSBjoern A. Zeeb 
1721bfcc09ddSBjoern A. Zeeb 	len = roundup(sizeof(*cmd) + addr_count * ETH_ALEN, 4);
1722bfcc09ddSBjoern A. Zeeb 	cmd = kzalloc(len, GFP_ATOMIC);
1723bfcc09ddSBjoern A. Zeeb 	if (!cmd)
1724bfcc09ddSBjoern A. Zeeb 		return 0;
1725bfcc09ddSBjoern A. Zeeb 
1726bfcc09ddSBjoern A. Zeeb 	if (pass_all) {
1727bfcc09ddSBjoern A. Zeeb 		cmd->pass_all = 1;
1728bfcc09ddSBjoern A. Zeeb 		return (u64)(uintptr_t)cmd;
1729bfcc09ddSBjoern A. Zeeb 	}
1730bfcc09ddSBjoern A. Zeeb 
1731bfcc09ddSBjoern A. Zeeb 	netdev_hw_addr_list_for_each(addr, mc_list) {
1732bfcc09ddSBjoern A. Zeeb #if defined(__linux__)
1733bfcc09ddSBjoern A. Zeeb 		IWL_DEBUG_MAC80211(mvm, "mcast addr (%d): %pM\n",
1734bfcc09ddSBjoern A. Zeeb 				   cmd->count, addr->addr);
1735bfcc09ddSBjoern A. Zeeb #elif defined(__FreeBSD__)
1736bfcc09ddSBjoern A. Zeeb 		IWL_DEBUG_MAC80211(mvm, "mcast addr (%d): %6D\n",
1737bfcc09ddSBjoern A. Zeeb 				   cmd->count, addr->addr, ":");
1738bfcc09ddSBjoern A. Zeeb #endif
1739bfcc09ddSBjoern A. Zeeb 		memcpy(&cmd->addr_list[cmd->count * ETH_ALEN],
1740bfcc09ddSBjoern A. Zeeb 		       addr->addr, ETH_ALEN);
1741bfcc09ddSBjoern A. Zeeb 		cmd->count++;
1742bfcc09ddSBjoern A. Zeeb 	}
1743bfcc09ddSBjoern A. Zeeb 
1744bfcc09ddSBjoern A. Zeeb 	return (u64)(uintptr_t)cmd;
1745bfcc09ddSBjoern A. Zeeb }
1746bfcc09ddSBjoern A. Zeeb 
1747bfcc09ddSBjoern A. Zeeb static void iwl_mvm_configure_filter(struct ieee80211_hw *hw,
1748bfcc09ddSBjoern A. Zeeb 				     unsigned int changed_flags,
1749bfcc09ddSBjoern A. Zeeb 				     unsigned int *total_flags,
1750bfcc09ddSBjoern A. Zeeb 				     u64 multicast)
1751bfcc09ddSBjoern A. Zeeb {
1752bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1753bfcc09ddSBjoern A. Zeeb 	struct iwl_mcast_filter_cmd *cmd = (void *)(uintptr_t)multicast;
1754bfcc09ddSBjoern A. Zeeb 
1755bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
1756bfcc09ddSBjoern A. Zeeb 
1757bfcc09ddSBjoern A. Zeeb 	/* replace previous configuration */
1758bfcc09ddSBjoern A. Zeeb 	kfree(mvm->mcast_filter_cmd);
1759bfcc09ddSBjoern A. Zeeb 	mvm->mcast_filter_cmd = cmd;
1760bfcc09ddSBjoern A. Zeeb 
1761bfcc09ddSBjoern A. Zeeb 	if (!cmd)
1762bfcc09ddSBjoern A. Zeeb 		goto out;
1763bfcc09ddSBjoern A. Zeeb 
1764bfcc09ddSBjoern A. Zeeb 	if (changed_flags & FIF_ALLMULTI)
1765bfcc09ddSBjoern A. Zeeb 		cmd->pass_all = !!(*total_flags & FIF_ALLMULTI);
1766bfcc09ddSBjoern A. Zeeb 
1767bfcc09ddSBjoern A. Zeeb 	if (cmd->pass_all)
1768bfcc09ddSBjoern A. Zeeb 		cmd->count = 0;
1769bfcc09ddSBjoern A. Zeeb 
1770bfcc09ddSBjoern A. Zeeb 	iwl_mvm_recalc_multicast(mvm);
1771bfcc09ddSBjoern A. Zeeb out:
1772bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
1773bfcc09ddSBjoern A. Zeeb 	*total_flags = 0;
1774bfcc09ddSBjoern A. Zeeb }
1775bfcc09ddSBjoern A. Zeeb 
1776bfcc09ddSBjoern A. Zeeb static void iwl_mvm_config_iface_filter(struct ieee80211_hw *hw,
1777bfcc09ddSBjoern A. Zeeb 					struct ieee80211_vif *vif,
1778bfcc09ddSBjoern A. Zeeb 					unsigned int filter_flags,
1779bfcc09ddSBjoern A. Zeeb 					unsigned int changed_flags)
1780bfcc09ddSBjoern A. Zeeb {
1781bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
1782bfcc09ddSBjoern A. Zeeb 
1783bfcc09ddSBjoern A. Zeeb 	/* We support only filter for probe requests */
1784bfcc09ddSBjoern A. Zeeb 	if (!(changed_flags & FIF_PROBE_REQ))
1785bfcc09ddSBjoern A. Zeeb 		return;
1786bfcc09ddSBjoern A. Zeeb 
1787bfcc09ddSBjoern A. Zeeb 	/* Supported only for p2p client interfaces */
1788bfcc09ddSBjoern A. Zeeb 	if (vif->type != NL80211_IFTYPE_STATION || !vif->bss_conf.assoc ||
1789bfcc09ddSBjoern A. Zeeb 	    !vif->p2p)
1790bfcc09ddSBjoern A. Zeeb 		return;
1791bfcc09ddSBjoern A. Zeeb 
1792bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
1793bfcc09ddSBjoern A. Zeeb 	iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
1794bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
1795bfcc09ddSBjoern A. Zeeb }
1796bfcc09ddSBjoern A. Zeeb 
1797bfcc09ddSBjoern A. Zeeb #ifdef CONFIG_IWLWIFI_BCAST_FILTERING
1798bfcc09ddSBjoern A. Zeeb struct iwl_bcast_iter_data {
1799bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm;
1800bfcc09ddSBjoern A. Zeeb 	struct iwl_bcast_filter_cmd *cmd;
1801bfcc09ddSBjoern A. Zeeb 	u8 current_filter;
1802bfcc09ddSBjoern A. Zeeb };
1803bfcc09ddSBjoern A. Zeeb 
1804bfcc09ddSBjoern A. Zeeb static void
1805bfcc09ddSBjoern A. Zeeb iwl_mvm_set_bcast_filter(struct ieee80211_vif *vif,
1806bfcc09ddSBjoern A. Zeeb 			 const struct iwl_fw_bcast_filter *in_filter,
1807bfcc09ddSBjoern A. Zeeb 			 struct iwl_fw_bcast_filter *out_filter)
1808bfcc09ddSBjoern A. Zeeb {
1809bfcc09ddSBjoern A. Zeeb 	struct iwl_fw_bcast_filter_attr *attr;
1810bfcc09ddSBjoern A. Zeeb 	int i;
1811bfcc09ddSBjoern A. Zeeb 
1812bfcc09ddSBjoern A. Zeeb 	memcpy(out_filter, in_filter, sizeof(*out_filter));
1813bfcc09ddSBjoern A. Zeeb 
1814bfcc09ddSBjoern A. Zeeb 	for (i = 0; i < ARRAY_SIZE(out_filter->attrs); i++) {
1815bfcc09ddSBjoern A. Zeeb 		attr = &out_filter->attrs[i];
1816bfcc09ddSBjoern A. Zeeb 
1817bfcc09ddSBjoern A. Zeeb 		if (!attr->mask)
1818bfcc09ddSBjoern A. Zeeb 			break;
1819bfcc09ddSBjoern A. Zeeb 
1820bfcc09ddSBjoern A. Zeeb 		switch (attr->reserved1) {
1821bfcc09ddSBjoern A. Zeeb 		case cpu_to_le16(BC_FILTER_MAGIC_IP):
1822bfcc09ddSBjoern A. Zeeb 			if (vif->bss_conf.arp_addr_cnt != 1) {
1823bfcc09ddSBjoern A. Zeeb 				attr->mask = 0;
1824bfcc09ddSBjoern A. Zeeb 				continue;
1825bfcc09ddSBjoern A. Zeeb 			}
1826bfcc09ddSBjoern A. Zeeb 
1827bfcc09ddSBjoern A. Zeeb 			attr->val = vif->bss_conf.arp_addr_list[0];
1828bfcc09ddSBjoern A. Zeeb 			break;
1829bfcc09ddSBjoern A. Zeeb 		case cpu_to_le16(BC_FILTER_MAGIC_MAC):
1830bfcc09ddSBjoern A. Zeeb 			attr->val = *(__be32 *)&vif->addr[2];
1831bfcc09ddSBjoern A. Zeeb 			break;
1832bfcc09ddSBjoern A. Zeeb 		default:
1833bfcc09ddSBjoern A. Zeeb 			break;
1834bfcc09ddSBjoern A. Zeeb 		}
1835bfcc09ddSBjoern A. Zeeb 		attr->reserved1 = 0;
1836bfcc09ddSBjoern A. Zeeb 		out_filter->num_attrs++;
1837bfcc09ddSBjoern A. Zeeb 	}
1838bfcc09ddSBjoern A. Zeeb }
1839bfcc09ddSBjoern A. Zeeb 
1840bfcc09ddSBjoern A. Zeeb static void iwl_mvm_bcast_filter_iterator(void *_data, u8 *mac,
1841bfcc09ddSBjoern A. Zeeb 					  struct ieee80211_vif *vif)
1842bfcc09ddSBjoern A. Zeeb {
1843bfcc09ddSBjoern A. Zeeb 	struct iwl_bcast_iter_data *data = _data;
1844bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = data->mvm;
1845bfcc09ddSBjoern A. Zeeb 	struct iwl_bcast_filter_cmd *cmd = data->cmd;
1846bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1847bfcc09ddSBjoern A. Zeeb 	struct iwl_fw_bcast_mac *bcast_mac;
1848bfcc09ddSBjoern A. Zeeb 	int i;
1849bfcc09ddSBjoern A. Zeeb 
1850bfcc09ddSBjoern A. Zeeb 	if (WARN_ON(mvmvif->id >= ARRAY_SIZE(cmd->macs)))
1851bfcc09ddSBjoern A. Zeeb 		return;
1852bfcc09ddSBjoern A. Zeeb 
1853bfcc09ddSBjoern A. Zeeb 	bcast_mac = &cmd->macs[mvmvif->id];
1854bfcc09ddSBjoern A. Zeeb 
1855bfcc09ddSBjoern A. Zeeb 	/*
1856bfcc09ddSBjoern A. Zeeb 	 * enable filtering only for associated stations, but not for P2P
1857bfcc09ddSBjoern A. Zeeb 	 * Clients
1858bfcc09ddSBjoern A. Zeeb 	 */
1859bfcc09ddSBjoern A. Zeeb 	if (vif->type != NL80211_IFTYPE_STATION || vif->p2p ||
1860bfcc09ddSBjoern A. Zeeb 	    !vif->bss_conf.assoc)
1861bfcc09ddSBjoern A. Zeeb 		return;
1862bfcc09ddSBjoern A. Zeeb 
1863bfcc09ddSBjoern A. Zeeb 	bcast_mac->default_discard = 1;
1864bfcc09ddSBjoern A. Zeeb 
1865bfcc09ddSBjoern A. Zeeb 	/* copy all configured filters */
1866bfcc09ddSBjoern A. Zeeb 	for (i = 0; mvm->bcast_filters[i].attrs[0].mask; i++) {
1867bfcc09ddSBjoern A. Zeeb 		/*
1868bfcc09ddSBjoern A. Zeeb 		 * Make sure we don't exceed our filters limit.
1869bfcc09ddSBjoern A. Zeeb 		 * if there is still a valid filter to be configured,
1870bfcc09ddSBjoern A. Zeeb 		 * be on the safe side and just allow bcast for this mac.
1871bfcc09ddSBjoern A. Zeeb 		 */
1872bfcc09ddSBjoern A. Zeeb 		if (WARN_ON_ONCE(data->current_filter >=
1873bfcc09ddSBjoern A. Zeeb 				 ARRAY_SIZE(cmd->filters))) {
1874bfcc09ddSBjoern A. Zeeb 			bcast_mac->default_discard = 0;
1875bfcc09ddSBjoern A. Zeeb 			bcast_mac->attached_filters = 0;
1876bfcc09ddSBjoern A. Zeeb 			break;
1877bfcc09ddSBjoern A. Zeeb 		}
1878bfcc09ddSBjoern A. Zeeb 
1879bfcc09ddSBjoern A. Zeeb 		iwl_mvm_set_bcast_filter(vif,
1880bfcc09ddSBjoern A. Zeeb 					 &mvm->bcast_filters[i],
1881bfcc09ddSBjoern A. Zeeb 					 &cmd->filters[data->current_filter]);
1882bfcc09ddSBjoern A. Zeeb 
1883bfcc09ddSBjoern A. Zeeb 		/* skip current filter if it contains no attributes */
1884bfcc09ddSBjoern A. Zeeb 		if (!cmd->filters[data->current_filter].num_attrs)
1885bfcc09ddSBjoern A. Zeeb 			continue;
1886bfcc09ddSBjoern A. Zeeb 
1887bfcc09ddSBjoern A. Zeeb 		/* attach the filter to current mac */
1888bfcc09ddSBjoern A. Zeeb 		bcast_mac->attached_filters |=
1889bfcc09ddSBjoern A. Zeeb 				cpu_to_le16(BIT(data->current_filter));
1890bfcc09ddSBjoern A. Zeeb 
1891bfcc09ddSBjoern A. Zeeb 		data->current_filter++;
1892bfcc09ddSBjoern A. Zeeb 	}
1893bfcc09ddSBjoern A. Zeeb }
1894bfcc09ddSBjoern A. Zeeb 
1895bfcc09ddSBjoern A. Zeeb bool iwl_mvm_bcast_filter_build_cmd(struct iwl_mvm *mvm,
1896bfcc09ddSBjoern A. Zeeb 				    struct iwl_bcast_filter_cmd *cmd)
1897bfcc09ddSBjoern A. Zeeb {
1898bfcc09ddSBjoern A. Zeeb 	struct iwl_bcast_iter_data iter_data = {
1899bfcc09ddSBjoern A. Zeeb 		.mvm = mvm,
1900bfcc09ddSBjoern A. Zeeb 		.cmd = cmd,
1901bfcc09ddSBjoern A. Zeeb 	};
1902bfcc09ddSBjoern A. Zeeb 
1903bfcc09ddSBjoern A. Zeeb 	if (IWL_MVM_FW_BCAST_FILTER_PASS_ALL)
1904bfcc09ddSBjoern A. Zeeb 		return false;
1905bfcc09ddSBjoern A. Zeeb 
1906bfcc09ddSBjoern A. Zeeb 	memset(cmd, 0, sizeof(*cmd));
1907bfcc09ddSBjoern A. Zeeb 	cmd->max_bcast_filters = ARRAY_SIZE(cmd->filters);
1908bfcc09ddSBjoern A. Zeeb 	cmd->max_macs = ARRAY_SIZE(cmd->macs);
1909bfcc09ddSBjoern A. Zeeb 
1910bfcc09ddSBjoern A. Zeeb #ifdef CONFIG_IWLWIFI_DEBUGFS
1911bfcc09ddSBjoern A. Zeeb 	/* use debugfs filters/macs if override is configured */
1912bfcc09ddSBjoern A. Zeeb 	if (mvm->dbgfs_bcast_filtering.override) {
1913bfcc09ddSBjoern A. Zeeb 		memcpy(cmd->filters, &mvm->dbgfs_bcast_filtering.cmd.filters,
1914bfcc09ddSBjoern A. Zeeb 		       sizeof(cmd->filters));
1915bfcc09ddSBjoern A. Zeeb 		memcpy(cmd->macs, &mvm->dbgfs_bcast_filtering.cmd.macs,
1916bfcc09ddSBjoern A. Zeeb 		       sizeof(cmd->macs));
1917bfcc09ddSBjoern A. Zeeb 		return true;
1918bfcc09ddSBjoern A. Zeeb 	}
1919bfcc09ddSBjoern A. Zeeb #endif
1920bfcc09ddSBjoern A. Zeeb 
1921bfcc09ddSBjoern A. Zeeb 	/* if no filters are configured, do nothing */
1922bfcc09ddSBjoern A. Zeeb 	if (!mvm->bcast_filters)
1923bfcc09ddSBjoern A. Zeeb 		return false;
1924bfcc09ddSBjoern A. Zeeb 
1925bfcc09ddSBjoern A. Zeeb 	/* configure and attach these filters for each associated sta vif */
1926bfcc09ddSBjoern A. Zeeb 	ieee80211_iterate_active_interfaces(
1927bfcc09ddSBjoern A. Zeeb 		mvm->hw, IEEE80211_IFACE_ITER_NORMAL,
1928bfcc09ddSBjoern A. Zeeb 		iwl_mvm_bcast_filter_iterator, &iter_data);
1929bfcc09ddSBjoern A. Zeeb 
1930bfcc09ddSBjoern A. Zeeb 	return true;
1931bfcc09ddSBjoern A. Zeeb }
1932bfcc09ddSBjoern A. Zeeb 
1933bfcc09ddSBjoern A. Zeeb static int iwl_mvm_configure_bcast_filter(struct iwl_mvm *mvm)
1934bfcc09ddSBjoern A. Zeeb {
1935bfcc09ddSBjoern A. Zeeb 	struct iwl_bcast_filter_cmd cmd;
1936bfcc09ddSBjoern A. Zeeb 
1937bfcc09ddSBjoern A. Zeeb 	if (!(mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_BCAST_FILTERING))
1938bfcc09ddSBjoern A. Zeeb 		return 0;
1939bfcc09ddSBjoern A. Zeeb 
1940bfcc09ddSBjoern A. Zeeb 	if (!iwl_mvm_bcast_filter_build_cmd(mvm, &cmd))
1941bfcc09ddSBjoern A. Zeeb 		return 0;
1942bfcc09ddSBjoern A. Zeeb 
1943bfcc09ddSBjoern A. Zeeb 	return iwl_mvm_send_cmd_pdu(mvm, BCAST_FILTER_CMD, 0,
1944bfcc09ddSBjoern A. Zeeb 				    sizeof(cmd), &cmd);
1945bfcc09ddSBjoern A. Zeeb }
1946bfcc09ddSBjoern A. Zeeb #else
1947bfcc09ddSBjoern A. Zeeb static inline int iwl_mvm_configure_bcast_filter(struct iwl_mvm *mvm)
1948bfcc09ddSBjoern A. Zeeb {
1949bfcc09ddSBjoern A. Zeeb 	return 0;
1950bfcc09ddSBjoern A. Zeeb }
1951bfcc09ddSBjoern A. Zeeb #endif
1952bfcc09ddSBjoern A. Zeeb 
1953bfcc09ddSBjoern A. Zeeb static int iwl_mvm_update_mu_groups(struct iwl_mvm *mvm,
1954bfcc09ddSBjoern A. Zeeb 				    struct ieee80211_vif *vif)
1955bfcc09ddSBjoern A. Zeeb {
1956bfcc09ddSBjoern A. Zeeb 	struct iwl_mu_group_mgmt_cmd cmd = {};
1957bfcc09ddSBjoern A. Zeeb 
1958bfcc09ddSBjoern A. Zeeb 	memcpy(cmd.membership_status, vif->bss_conf.mu_group.membership,
1959bfcc09ddSBjoern A. Zeeb 	       WLAN_MEMBERSHIP_LEN);
1960bfcc09ddSBjoern A. Zeeb 	memcpy(cmd.user_position, vif->bss_conf.mu_group.position,
1961bfcc09ddSBjoern A. Zeeb 	       WLAN_USER_POSITION_LEN);
1962bfcc09ddSBjoern A. Zeeb 
1963bfcc09ddSBjoern A. Zeeb 	return iwl_mvm_send_cmd_pdu(mvm,
1964bfcc09ddSBjoern A. Zeeb 				    WIDE_ID(DATA_PATH_GROUP,
1965bfcc09ddSBjoern A. Zeeb 					    UPDATE_MU_GROUPS_CMD),
1966bfcc09ddSBjoern A. Zeeb 				    0, sizeof(cmd), &cmd);
1967bfcc09ddSBjoern A. Zeeb }
1968bfcc09ddSBjoern A. Zeeb 
1969bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mu_mimo_iface_iterator(void *_data, u8 *mac,
1970bfcc09ddSBjoern A. Zeeb 					   struct ieee80211_vif *vif)
1971bfcc09ddSBjoern A. Zeeb {
1972bfcc09ddSBjoern A. Zeeb 	if (vif->mu_mimo_owner) {
1973bfcc09ddSBjoern A. Zeeb 		struct iwl_mu_group_mgmt_notif *notif = _data;
1974bfcc09ddSBjoern A. Zeeb 
1975bfcc09ddSBjoern A. Zeeb 		/*
1976bfcc09ddSBjoern A. Zeeb 		 * MU-MIMO Group Id action frame is little endian. We treat
1977bfcc09ddSBjoern A. Zeeb 		 * the data received from firmware as if it came from the
1978bfcc09ddSBjoern A. Zeeb 		 * action frame, so no conversion is needed.
1979bfcc09ddSBjoern A. Zeeb 		 */
1980bfcc09ddSBjoern A. Zeeb 		ieee80211_update_mu_groups(vif,
1981bfcc09ddSBjoern A. Zeeb 					   (u8 *)&notif->membership_status,
1982bfcc09ddSBjoern A. Zeeb 					   (u8 *)&notif->user_position);
1983bfcc09ddSBjoern A. Zeeb 	}
1984bfcc09ddSBjoern A. Zeeb }
1985bfcc09ddSBjoern A. Zeeb 
1986bfcc09ddSBjoern A. Zeeb void iwl_mvm_mu_mimo_grp_notif(struct iwl_mvm *mvm,
1987bfcc09ddSBjoern A. Zeeb 			       struct iwl_rx_cmd_buffer *rxb)
1988bfcc09ddSBjoern A. Zeeb {
1989bfcc09ddSBjoern A. Zeeb 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
1990bfcc09ddSBjoern A. Zeeb 	struct iwl_mu_group_mgmt_notif *notif = (void *)pkt->data;
1991bfcc09ddSBjoern A. Zeeb 
1992bfcc09ddSBjoern A. Zeeb 	ieee80211_iterate_active_interfaces_atomic(
1993bfcc09ddSBjoern A. Zeeb 			mvm->hw, IEEE80211_IFACE_ITER_NORMAL,
1994bfcc09ddSBjoern A. Zeeb 			iwl_mvm_mu_mimo_iface_iterator, notif);
1995bfcc09ddSBjoern A. Zeeb }
1996bfcc09ddSBjoern A. Zeeb 
1997bfcc09ddSBjoern A. Zeeb static u8 iwl_mvm_he_get_ppe_val(u8 *ppe, u8 ppe_pos_bit)
1998bfcc09ddSBjoern A. Zeeb {
1999bfcc09ddSBjoern A. Zeeb 	u8 byte_num = ppe_pos_bit / 8;
2000bfcc09ddSBjoern A. Zeeb 	u8 bit_num = ppe_pos_bit % 8;
2001bfcc09ddSBjoern A. Zeeb 	u8 residue_bits;
2002bfcc09ddSBjoern A. Zeeb 	u8 res;
2003bfcc09ddSBjoern A. Zeeb 
2004bfcc09ddSBjoern A. Zeeb 	if (bit_num <= 5)
2005bfcc09ddSBjoern A. Zeeb 		return (ppe[byte_num] >> bit_num) &
2006bfcc09ddSBjoern A. Zeeb 		       (BIT(IEEE80211_PPE_THRES_INFO_PPET_SIZE) - 1);
2007bfcc09ddSBjoern A. Zeeb 
2008bfcc09ddSBjoern A. Zeeb 	/*
2009bfcc09ddSBjoern A. Zeeb 	 * If bit_num > 5, we have to combine bits with next byte.
2010bfcc09ddSBjoern A. Zeeb 	 * Calculate how many bits we need to take from current byte (called
2011bfcc09ddSBjoern A. Zeeb 	 * here "residue_bits"), and add them to bits from next byte.
2012bfcc09ddSBjoern A. Zeeb 	 */
2013bfcc09ddSBjoern A. Zeeb 
2014bfcc09ddSBjoern A. Zeeb 	residue_bits = 8 - bit_num;
2015bfcc09ddSBjoern A. Zeeb 
2016bfcc09ddSBjoern A. Zeeb 	res = (ppe[byte_num + 1] &
2017bfcc09ddSBjoern A. Zeeb 	       (BIT(IEEE80211_PPE_THRES_INFO_PPET_SIZE - residue_bits) - 1)) <<
2018bfcc09ddSBjoern A. Zeeb 	      residue_bits;
2019bfcc09ddSBjoern A. Zeeb 	res += (ppe[byte_num] >> bit_num) & (BIT(residue_bits) - 1);
2020bfcc09ddSBjoern A. Zeeb 
2021bfcc09ddSBjoern A. Zeeb 	return res;
2022bfcc09ddSBjoern A. Zeeb }
2023bfcc09ddSBjoern A. Zeeb 
2024bfcc09ddSBjoern A. Zeeb static void iwl_mvm_cfg_he_sta(struct iwl_mvm *mvm,
2025bfcc09ddSBjoern A. Zeeb 			       struct ieee80211_vif *vif, u8 sta_id)
2026bfcc09ddSBjoern A. Zeeb {
2027bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2028bfcc09ddSBjoern A. Zeeb 	struct iwl_he_sta_context_cmd sta_ctxt_cmd = {
2029bfcc09ddSBjoern A. Zeeb 		.sta_id = sta_id,
2030bfcc09ddSBjoern A. Zeeb 		.tid_limit = IWL_MAX_TID_COUNT,
2031bfcc09ddSBjoern A. Zeeb 		.bss_color = vif->bss_conf.he_bss_color.color,
2032bfcc09ddSBjoern A. Zeeb 		.htc_trig_based_pkt_ext = vif->bss_conf.htc_trig_based_pkt_ext,
2033bfcc09ddSBjoern A. Zeeb 		.frame_time_rts_th =
2034bfcc09ddSBjoern A. Zeeb 			cpu_to_le16(vif->bss_conf.frame_time_rts_th),
2035bfcc09ddSBjoern A. Zeeb 	};
2036bfcc09ddSBjoern A. Zeeb 	int size = fw_has_api(&mvm->fw->ucode_capa,
2037bfcc09ddSBjoern A. Zeeb 			      IWL_UCODE_TLV_API_MBSSID_HE) ?
2038bfcc09ddSBjoern A. Zeeb 		   sizeof(sta_ctxt_cmd) :
2039bfcc09ddSBjoern A. Zeeb 		   sizeof(struct iwl_he_sta_context_cmd_v1);
2040bfcc09ddSBjoern A. Zeeb 	struct ieee80211_sta *sta;
2041bfcc09ddSBjoern A. Zeeb 	u32 flags;
2042bfcc09ddSBjoern A. Zeeb 	int i;
2043bfcc09ddSBjoern A. Zeeb 	const struct ieee80211_sta_he_cap *own_he_cap = NULL;
2044bfcc09ddSBjoern A. Zeeb 	struct ieee80211_chanctx_conf *chanctx_conf;
2045bfcc09ddSBjoern A. Zeeb 	const struct ieee80211_supported_band *sband;
2046bfcc09ddSBjoern A. Zeeb 
2047bfcc09ddSBjoern A. Zeeb 	rcu_read_lock();
2048bfcc09ddSBjoern A. Zeeb 
2049bfcc09ddSBjoern A. Zeeb 	chanctx_conf = rcu_dereference(vif->chanctx_conf);
2050bfcc09ddSBjoern A. Zeeb 	if (WARN_ON(!chanctx_conf)) {
2051bfcc09ddSBjoern A. Zeeb 		rcu_read_unlock();
2052bfcc09ddSBjoern A. Zeeb 		return;
2053bfcc09ddSBjoern A. Zeeb 	}
2054bfcc09ddSBjoern A. Zeeb 
2055bfcc09ddSBjoern A. Zeeb 	sband = mvm->hw->wiphy->bands[chanctx_conf->def.chan->band];
2056bfcc09ddSBjoern A. Zeeb 	own_he_cap = ieee80211_get_he_iftype_cap(sband,
2057bfcc09ddSBjoern A. Zeeb 						 ieee80211_vif_type_p2p(vif));
2058bfcc09ddSBjoern A. Zeeb 
2059bfcc09ddSBjoern A. Zeeb 	sta = rcu_dereference(mvm->fw_id_to_mac_id[sta_ctxt_cmd.sta_id]);
2060bfcc09ddSBjoern A. Zeeb 	if (IS_ERR_OR_NULL(sta)) {
2061bfcc09ddSBjoern A. Zeeb 		rcu_read_unlock();
2062bfcc09ddSBjoern A. Zeeb 		WARN(1, "Can't find STA to configure HE\n");
2063bfcc09ddSBjoern A. Zeeb 		return;
2064bfcc09ddSBjoern A. Zeeb 	}
2065bfcc09ddSBjoern A. Zeeb 
2066bfcc09ddSBjoern A. Zeeb 	if (!sta->he_cap.has_he) {
2067bfcc09ddSBjoern A. Zeeb 		rcu_read_unlock();
2068bfcc09ddSBjoern A. Zeeb 		return;
2069bfcc09ddSBjoern A. Zeeb 	}
2070bfcc09ddSBjoern A. Zeeb 
2071bfcc09ddSBjoern A. Zeeb 	flags = 0;
2072bfcc09ddSBjoern A. Zeeb 
2073bfcc09ddSBjoern A. Zeeb 	/* Block 26-tone RU OFDMA transmissions */
2074bfcc09ddSBjoern A. Zeeb 	if (mvmvif->he_ru_2mhz_block)
2075bfcc09ddSBjoern A. Zeeb 		flags |= STA_CTXT_HE_RU_2MHZ_BLOCK;
2076bfcc09ddSBjoern A. Zeeb 
2077bfcc09ddSBjoern A. Zeeb 	/* HTC flags */
2078bfcc09ddSBjoern A. Zeeb 	if (sta->he_cap.he_cap_elem.mac_cap_info[0] &
2079bfcc09ddSBjoern A. Zeeb 	    IEEE80211_HE_MAC_CAP0_HTC_HE)
2080bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.htc_flags |= cpu_to_le32(IWL_HE_HTC_SUPPORT);
2081bfcc09ddSBjoern A. Zeeb 	if ((sta->he_cap.he_cap_elem.mac_cap_info[1] &
2082bfcc09ddSBjoern A. Zeeb 	      IEEE80211_HE_MAC_CAP1_LINK_ADAPTATION) ||
2083bfcc09ddSBjoern A. Zeeb 	    (sta->he_cap.he_cap_elem.mac_cap_info[2] &
2084bfcc09ddSBjoern A. Zeeb 	      IEEE80211_HE_MAC_CAP2_LINK_ADAPTATION)) {
2085bfcc09ddSBjoern A. Zeeb 		u8 link_adap =
2086bfcc09ddSBjoern A. Zeeb 			((sta->he_cap.he_cap_elem.mac_cap_info[2] &
2087bfcc09ddSBjoern A. Zeeb 			  IEEE80211_HE_MAC_CAP2_LINK_ADAPTATION) << 1) +
2088bfcc09ddSBjoern A. Zeeb 			 (sta->he_cap.he_cap_elem.mac_cap_info[1] &
2089bfcc09ddSBjoern A. Zeeb 			  IEEE80211_HE_MAC_CAP1_LINK_ADAPTATION);
2090bfcc09ddSBjoern A. Zeeb 
2091bfcc09ddSBjoern A. Zeeb 		if (link_adap == 2)
2092bfcc09ddSBjoern A. Zeeb 			sta_ctxt_cmd.htc_flags |=
2093bfcc09ddSBjoern A. Zeeb 				cpu_to_le32(IWL_HE_HTC_LINK_ADAP_UNSOLICITED);
2094bfcc09ddSBjoern A. Zeeb 		else if (link_adap == 3)
2095bfcc09ddSBjoern A. Zeeb 			sta_ctxt_cmd.htc_flags |=
2096bfcc09ddSBjoern A. Zeeb 				cpu_to_le32(IWL_HE_HTC_LINK_ADAP_BOTH);
2097bfcc09ddSBjoern A. Zeeb 	}
2098bfcc09ddSBjoern A. Zeeb 	if (sta->he_cap.he_cap_elem.mac_cap_info[2] & IEEE80211_HE_MAC_CAP2_BSR)
2099bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.htc_flags |= cpu_to_le32(IWL_HE_HTC_BSR_SUPP);
2100bfcc09ddSBjoern A. Zeeb 	if (sta->he_cap.he_cap_elem.mac_cap_info[3] &
2101bfcc09ddSBjoern A. Zeeb 	    IEEE80211_HE_MAC_CAP3_OMI_CONTROL)
2102bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.htc_flags |= cpu_to_le32(IWL_HE_HTC_OMI_SUPP);
2103bfcc09ddSBjoern A. Zeeb 	if (sta->he_cap.he_cap_elem.mac_cap_info[4] & IEEE80211_HE_MAC_CAP4_BQR)
2104bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.htc_flags |= cpu_to_le32(IWL_HE_HTC_BQR_SUPP);
2105bfcc09ddSBjoern A. Zeeb 
2106bfcc09ddSBjoern A. Zeeb 	/*
2107bfcc09ddSBjoern A. Zeeb 	 * Initialize the PPE thresholds to "None" (7), as described in Table
2108bfcc09ddSBjoern A. Zeeb 	 * 9-262ac of 80211.ax/D3.0.
2109bfcc09ddSBjoern A. Zeeb 	 */
2110bfcc09ddSBjoern A. Zeeb 	memset(&sta_ctxt_cmd.pkt_ext, 7, sizeof(sta_ctxt_cmd.pkt_ext));
2111bfcc09ddSBjoern A. Zeeb 
2112bfcc09ddSBjoern A. Zeeb 	/* If PPE Thresholds exist, parse them into a FW-familiar format. */
2113bfcc09ddSBjoern A. Zeeb 	if (sta->he_cap.he_cap_elem.phy_cap_info[6] &
2114bfcc09ddSBjoern A. Zeeb 	    IEEE80211_HE_PHY_CAP6_PPE_THRESHOLD_PRESENT) {
2115bfcc09ddSBjoern A. Zeeb 		u8 nss = (sta->he_cap.ppe_thres[0] &
2116bfcc09ddSBjoern A. Zeeb 			  IEEE80211_PPE_THRES_NSS_MASK) + 1;
2117bfcc09ddSBjoern A. Zeeb 		u8 ru_index_bitmap =
2118bfcc09ddSBjoern A. Zeeb 			(sta->he_cap.ppe_thres[0] &
2119bfcc09ddSBjoern A. Zeeb 			 IEEE80211_PPE_THRES_RU_INDEX_BITMASK_MASK) >>
2120bfcc09ddSBjoern A. Zeeb 			IEEE80211_PPE_THRES_RU_INDEX_BITMASK_POS;
2121bfcc09ddSBjoern A. Zeeb 		u8 *ppe = &sta->he_cap.ppe_thres[0];
2122bfcc09ddSBjoern A. Zeeb 		u8 ppe_pos_bit = 7; /* Starting after PPE header */
2123bfcc09ddSBjoern A. Zeeb 
2124bfcc09ddSBjoern A. Zeeb 		/*
2125bfcc09ddSBjoern A. Zeeb 		 * FW currently supports only nss == MAX_HE_SUPP_NSS
2126bfcc09ddSBjoern A. Zeeb 		 *
2127bfcc09ddSBjoern A. Zeeb 		 * If nss > MAX: we can ignore values we don't support
2128bfcc09ddSBjoern A. Zeeb 		 * If nss < MAX: we can set zeros in other streams
2129bfcc09ddSBjoern A. Zeeb 		 */
2130bfcc09ddSBjoern A. Zeeb 		if (nss > MAX_HE_SUPP_NSS) {
2131bfcc09ddSBjoern A. Zeeb 			IWL_INFO(mvm, "Got NSS = %d - trimming to %d\n", nss,
2132bfcc09ddSBjoern A. Zeeb 				 MAX_HE_SUPP_NSS);
2133bfcc09ddSBjoern A. Zeeb 			nss = MAX_HE_SUPP_NSS;
2134bfcc09ddSBjoern A. Zeeb 		}
2135bfcc09ddSBjoern A. Zeeb 
2136bfcc09ddSBjoern A. Zeeb 		for (i = 0; i < nss; i++) {
2137bfcc09ddSBjoern A. Zeeb 			u8 ru_index_tmp = ru_index_bitmap << 1;
2138bfcc09ddSBjoern A. Zeeb 			u8 bw;
2139bfcc09ddSBjoern A. Zeeb 
2140bfcc09ddSBjoern A. Zeeb 			for (bw = 0; bw < MAX_HE_CHANNEL_BW_INDX; bw++) {
2141bfcc09ddSBjoern A. Zeeb 				ru_index_tmp >>= 1;
2142bfcc09ddSBjoern A. Zeeb 				if (!(ru_index_tmp & 1))
2143bfcc09ddSBjoern A. Zeeb 					continue;
2144bfcc09ddSBjoern A. Zeeb 
2145bfcc09ddSBjoern A. Zeeb 				sta_ctxt_cmd.pkt_ext.pkt_ext_qam_th[i][bw][1] =
2146bfcc09ddSBjoern A. Zeeb 					iwl_mvm_he_get_ppe_val(ppe,
2147bfcc09ddSBjoern A. Zeeb 							       ppe_pos_bit);
2148bfcc09ddSBjoern A. Zeeb 				ppe_pos_bit +=
2149bfcc09ddSBjoern A. Zeeb 					IEEE80211_PPE_THRES_INFO_PPET_SIZE;
2150bfcc09ddSBjoern A. Zeeb 				sta_ctxt_cmd.pkt_ext.pkt_ext_qam_th[i][bw][0] =
2151bfcc09ddSBjoern A. Zeeb 					iwl_mvm_he_get_ppe_val(ppe,
2152bfcc09ddSBjoern A. Zeeb 							       ppe_pos_bit);
2153bfcc09ddSBjoern A. Zeeb 				ppe_pos_bit +=
2154bfcc09ddSBjoern A. Zeeb 					IEEE80211_PPE_THRES_INFO_PPET_SIZE;
2155bfcc09ddSBjoern A. Zeeb 			}
2156bfcc09ddSBjoern A. Zeeb 		}
2157bfcc09ddSBjoern A. Zeeb 
2158bfcc09ddSBjoern A. Zeeb 		flags |= STA_CTXT_HE_PACKET_EXT;
2159bfcc09ddSBjoern A. Zeeb 	} else if ((sta->he_cap.he_cap_elem.phy_cap_info[9] &
2160bfcc09ddSBjoern A. Zeeb 		    IEEE80211_HE_PHY_CAP9_NOMIMAL_PKT_PADDING_MASK) !=
2161bfcc09ddSBjoern A. Zeeb 		  IEEE80211_HE_PHY_CAP9_NOMIMAL_PKT_PADDING_RESERVED) {
2162bfcc09ddSBjoern A. Zeeb 		int low_th = -1;
2163bfcc09ddSBjoern A. Zeeb 		int high_th = -1;
2164bfcc09ddSBjoern A. Zeeb 
2165bfcc09ddSBjoern A. Zeeb 		/* Take the PPE thresholds from the nominal padding info */
2166bfcc09ddSBjoern A. Zeeb 		switch (sta->he_cap.he_cap_elem.phy_cap_info[9] &
2167bfcc09ddSBjoern A. Zeeb 			IEEE80211_HE_PHY_CAP9_NOMIMAL_PKT_PADDING_MASK) {
2168bfcc09ddSBjoern A. Zeeb 		case IEEE80211_HE_PHY_CAP9_NOMIMAL_PKT_PADDING_0US:
2169bfcc09ddSBjoern A. Zeeb 			low_th = IWL_HE_PKT_EXT_NONE;
2170bfcc09ddSBjoern A. Zeeb 			high_th = IWL_HE_PKT_EXT_NONE;
2171bfcc09ddSBjoern A. Zeeb 			break;
2172bfcc09ddSBjoern A. Zeeb 		case IEEE80211_HE_PHY_CAP9_NOMIMAL_PKT_PADDING_8US:
2173bfcc09ddSBjoern A. Zeeb 			low_th = IWL_HE_PKT_EXT_BPSK;
2174bfcc09ddSBjoern A. Zeeb 			high_th = IWL_HE_PKT_EXT_NONE;
2175bfcc09ddSBjoern A. Zeeb 			break;
2176bfcc09ddSBjoern A. Zeeb 		case IEEE80211_HE_PHY_CAP9_NOMIMAL_PKT_PADDING_16US:
2177bfcc09ddSBjoern A. Zeeb 			low_th = IWL_HE_PKT_EXT_NONE;
2178bfcc09ddSBjoern A. Zeeb 			high_th = IWL_HE_PKT_EXT_BPSK;
2179bfcc09ddSBjoern A. Zeeb 			break;
2180bfcc09ddSBjoern A. Zeeb 		}
2181bfcc09ddSBjoern A. Zeeb 
2182bfcc09ddSBjoern A. Zeeb 		/* Set the PPE thresholds accordingly */
2183bfcc09ddSBjoern A. Zeeb 		if (low_th >= 0 && high_th >= 0) {
2184bfcc09ddSBjoern A. Zeeb 			struct iwl_he_pkt_ext *pkt_ext =
2185bfcc09ddSBjoern A. Zeeb 				(struct iwl_he_pkt_ext *)&sta_ctxt_cmd.pkt_ext;
2186bfcc09ddSBjoern A. Zeeb 
2187bfcc09ddSBjoern A. Zeeb 			for (i = 0; i < MAX_HE_SUPP_NSS; i++) {
2188bfcc09ddSBjoern A. Zeeb 				u8 bw;
2189bfcc09ddSBjoern A. Zeeb 
2190bfcc09ddSBjoern A. Zeeb 				for (bw = 0; bw < MAX_HE_CHANNEL_BW_INDX;
2191bfcc09ddSBjoern A. Zeeb 				     bw++) {
2192bfcc09ddSBjoern A. Zeeb 					pkt_ext->pkt_ext_qam_th[i][bw][0] =
2193bfcc09ddSBjoern A. Zeeb 						low_th;
2194bfcc09ddSBjoern A. Zeeb 					pkt_ext->pkt_ext_qam_th[i][bw][1] =
2195bfcc09ddSBjoern A. Zeeb 						high_th;
2196bfcc09ddSBjoern A. Zeeb 				}
2197bfcc09ddSBjoern A. Zeeb 			}
2198bfcc09ddSBjoern A. Zeeb 
2199bfcc09ddSBjoern A. Zeeb 			flags |= STA_CTXT_HE_PACKET_EXT;
2200bfcc09ddSBjoern A. Zeeb 		}
2201bfcc09ddSBjoern A. Zeeb 	}
2202bfcc09ddSBjoern A. Zeeb 
2203bfcc09ddSBjoern A. Zeeb 	if (sta->he_cap.he_cap_elem.mac_cap_info[2] &
2204bfcc09ddSBjoern A. Zeeb 	    IEEE80211_HE_MAC_CAP2_32BIT_BA_BITMAP)
2205bfcc09ddSBjoern A. Zeeb 		flags |= STA_CTXT_HE_32BIT_BA_BITMAP;
2206bfcc09ddSBjoern A. Zeeb 
2207bfcc09ddSBjoern A. Zeeb 	if (sta->he_cap.he_cap_elem.mac_cap_info[2] &
2208bfcc09ddSBjoern A. Zeeb 	    IEEE80211_HE_MAC_CAP2_ACK_EN)
2209bfcc09ddSBjoern A. Zeeb 		flags |= STA_CTXT_HE_ACK_ENABLED;
2210bfcc09ddSBjoern A. Zeeb 
2211bfcc09ddSBjoern A. Zeeb 	rcu_read_unlock();
2212bfcc09ddSBjoern A. Zeeb 
2213bfcc09ddSBjoern A. Zeeb 	/* Mark MU EDCA as enabled, unless none detected on some AC */
2214bfcc09ddSBjoern A. Zeeb 	flags |= STA_CTXT_HE_MU_EDCA_CW;
2215bfcc09ddSBjoern A. Zeeb 	for (i = 0; i < IEEE80211_NUM_ACS; i++) {
2216bfcc09ddSBjoern A. Zeeb 		struct ieee80211_he_mu_edca_param_ac_rec *mu_edca =
2217bfcc09ddSBjoern A. Zeeb 			&mvmvif->queue_params[i].mu_edca_param_rec;
2218bfcc09ddSBjoern A. Zeeb 		u8 ac = iwl_mvm_mac80211_ac_to_ucode_ac(i);
2219bfcc09ddSBjoern A. Zeeb 
2220bfcc09ddSBjoern A. Zeeb 		if (!mvmvif->queue_params[i].mu_edca) {
2221bfcc09ddSBjoern A. Zeeb 			flags &= ~STA_CTXT_HE_MU_EDCA_CW;
2222bfcc09ddSBjoern A. Zeeb 			break;
2223bfcc09ddSBjoern A. Zeeb 		}
2224bfcc09ddSBjoern A. Zeeb 
2225bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.trig_based_txf[ac].cwmin =
2226bfcc09ddSBjoern A. Zeeb 			cpu_to_le16(mu_edca->ecw_min_max & 0xf);
2227bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.trig_based_txf[ac].cwmax =
2228bfcc09ddSBjoern A. Zeeb 			cpu_to_le16((mu_edca->ecw_min_max & 0xf0) >> 4);
2229bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.trig_based_txf[ac].aifsn =
2230bfcc09ddSBjoern A. Zeeb 			cpu_to_le16(mu_edca->aifsn);
2231bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.trig_based_txf[ac].mu_time =
2232bfcc09ddSBjoern A. Zeeb 			cpu_to_le16(mu_edca->mu_edca_timer);
2233bfcc09ddSBjoern A. Zeeb 	}
2234bfcc09ddSBjoern A. Zeeb 
2235bfcc09ddSBjoern A. Zeeb 
2236bfcc09ddSBjoern A. Zeeb 	if (vif->bss_conf.uora_exists) {
2237bfcc09ddSBjoern A. Zeeb 		flags |= STA_CTXT_HE_TRIG_RND_ALLOC;
2238bfcc09ddSBjoern A. Zeeb 
2239bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.rand_alloc_ecwmin =
2240bfcc09ddSBjoern A. Zeeb 			vif->bss_conf.uora_ocw_range & 0x7;
2241bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.rand_alloc_ecwmax =
2242bfcc09ddSBjoern A. Zeeb 			(vif->bss_conf.uora_ocw_range >> 3) & 0x7;
2243bfcc09ddSBjoern A. Zeeb 	}
2244bfcc09ddSBjoern A. Zeeb 
2245bfcc09ddSBjoern A. Zeeb 	if (own_he_cap && !(own_he_cap->he_cap_elem.mac_cap_info[2] &
2246bfcc09ddSBjoern A. Zeeb 			    IEEE80211_HE_MAC_CAP2_ACK_EN))
2247bfcc09ddSBjoern A. Zeeb 		flags |= STA_CTXT_HE_NIC_NOT_ACK_ENABLED;
2248bfcc09ddSBjoern A. Zeeb 
2249bfcc09ddSBjoern A. Zeeb 	if (vif->bss_conf.nontransmitted) {
2250bfcc09ddSBjoern A. Zeeb 		flags |= STA_CTXT_HE_REF_BSSID_VALID;
2251bfcc09ddSBjoern A. Zeeb 		ether_addr_copy(sta_ctxt_cmd.ref_bssid_addr,
2252bfcc09ddSBjoern A. Zeeb 				vif->bss_conf.transmitter_bssid);
2253bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.max_bssid_indicator =
2254bfcc09ddSBjoern A. Zeeb 			vif->bss_conf.bssid_indicator;
2255bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.bssid_index = vif->bss_conf.bssid_index;
2256bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.ema_ap = vif->bss_conf.ema_ap;
2257bfcc09ddSBjoern A. Zeeb 		sta_ctxt_cmd.profile_periodicity =
2258bfcc09ddSBjoern A. Zeeb 			vif->bss_conf.profile_periodicity;
2259bfcc09ddSBjoern A. Zeeb 	}
2260bfcc09ddSBjoern A. Zeeb 
2261bfcc09ddSBjoern A. Zeeb 	sta_ctxt_cmd.flags = cpu_to_le32(flags);
2262bfcc09ddSBjoern A. Zeeb 
2263bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_send_cmd_pdu(mvm, iwl_cmd_id(STA_HE_CTXT_CMD,
2264bfcc09ddSBjoern A. Zeeb 						 DATA_PATH_GROUP, 0),
2265bfcc09ddSBjoern A. Zeeb 				 0, size, &sta_ctxt_cmd))
2266bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "Failed to config FW to work HE!\n");
2267bfcc09ddSBjoern A. Zeeb }
2268bfcc09ddSBjoern A. Zeeb 
2269bfcc09ddSBjoern A. Zeeb static void iwl_mvm_protect_assoc(struct iwl_mvm *mvm,
2270bfcc09ddSBjoern A. Zeeb 				  struct ieee80211_vif *vif,
2271bfcc09ddSBjoern A. Zeeb 				  u32 duration_override)
2272bfcc09ddSBjoern A. Zeeb {
2273bfcc09ddSBjoern A. Zeeb 	u32 duration = IWL_MVM_TE_SESSION_PROTECTION_MAX_TIME_MS;
2274bfcc09ddSBjoern A. Zeeb 	u32 min_duration = IWL_MVM_TE_SESSION_PROTECTION_MIN_TIME_MS;
2275bfcc09ddSBjoern A. Zeeb 
2276bfcc09ddSBjoern A. Zeeb 	if (duration_override > duration)
2277bfcc09ddSBjoern A. Zeeb 		duration = duration_override;
2278bfcc09ddSBjoern A. Zeeb 
2279bfcc09ddSBjoern A. Zeeb 	/* Try really hard to protect the session and hear a beacon
2280bfcc09ddSBjoern A. Zeeb 	 * The new session protection command allows us to protect the
2281bfcc09ddSBjoern A. Zeeb 	 * session for a much longer time since the firmware will internally
2282bfcc09ddSBjoern A. Zeeb 	 * create two events: a 300TU one with a very high priority that
2283bfcc09ddSBjoern A. Zeeb 	 * won't be fragmented which should be enough for 99% of the cases,
2284bfcc09ddSBjoern A. Zeeb 	 * and another one (which we configure here to be 900TU long) which
2285bfcc09ddSBjoern A. Zeeb 	 * will have a slightly lower priority, but more importantly, can be
2286bfcc09ddSBjoern A. Zeeb 	 * fragmented so that it'll allow other activities to run.
2287bfcc09ddSBjoern A. Zeeb 	 */
2288bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa,
2289bfcc09ddSBjoern A. Zeeb 			IWL_UCODE_TLV_CAPA_SESSION_PROT_CMD))
2290bfcc09ddSBjoern A. Zeeb 		iwl_mvm_schedule_session_protection(mvm, vif, 900,
2291bfcc09ddSBjoern A. Zeeb 						    min_duration, false);
2292bfcc09ddSBjoern A. Zeeb 	else
2293bfcc09ddSBjoern A. Zeeb 		iwl_mvm_protect_session(mvm, vif, duration,
2294bfcc09ddSBjoern A. Zeeb 					min_duration, 500, false);
2295bfcc09ddSBjoern A. Zeeb }
2296bfcc09ddSBjoern A. Zeeb 
2297bfcc09ddSBjoern A. Zeeb static void iwl_mvm_bss_info_changed_station(struct iwl_mvm *mvm,
2298bfcc09ddSBjoern A. Zeeb 					     struct ieee80211_vif *vif,
2299bfcc09ddSBjoern A. Zeeb 					     struct ieee80211_bss_conf *bss_conf,
2300bfcc09ddSBjoern A. Zeeb 					     u32 changes)
2301bfcc09ddSBjoern A. Zeeb {
2302bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2303bfcc09ddSBjoern A. Zeeb 	int ret;
2304bfcc09ddSBjoern A. Zeeb 
2305bfcc09ddSBjoern A. Zeeb 	/*
2306bfcc09ddSBjoern A. Zeeb 	 * Re-calculate the tsf id, as the leader-follower relations depend
2307bfcc09ddSBjoern A. Zeeb 	 * on the beacon interval, which was not known when the station
2308bfcc09ddSBjoern A. Zeeb 	 * interface was added.
2309bfcc09ddSBjoern A. Zeeb 	 */
2310bfcc09ddSBjoern A. Zeeb 	if (changes & BSS_CHANGED_ASSOC && bss_conf->assoc) {
2311bfcc09ddSBjoern A. Zeeb 		if (vif->bss_conf.he_support &&
2312bfcc09ddSBjoern A. Zeeb 		    !iwlwifi_mod_params.disable_11ax)
2313bfcc09ddSBjoern A. Zeeb 			iwl_mvm_cfg_he_sta(mvm, vif, mvmvif->ap_sta_id);
2314bfcc09ddSBjoern A. Zeeb 
2315bfcc09ddSBjoern A. Zeeb 		iwl_mvm_mac_ctxt_recalc_tsf_id(mvm, vif);
2316bfcc09ddSBjoern A. Zeeb 	}
2317bfcc09ddSBjoern A. Zeeb 
2318bfcc09ddSBjoern A. Zeeb 	/* Update MU EDCA params */
2319bfcc09ddSBjoern A. Zeeb 	if (changes & BSS_CHANGED_QOS && mvmvif->associated &&
2320bfcc09ddSBjoern A. Zeeb 	    bss_conf->assoc && vif->bss_conf.he_support &&
2321bfcc09ddSBjoern A. Zeeb 	    !iwlwifi_mod_params.disable_11ax)
2322bfcc09ddSBjoern A. Zeeb 		iwl_mvm_cfg_he_sta(mvm, vif, mvmvif->ap_sta_id);
2323bfcc09ddSBjoern A. Zeeb 
2324bfcc09ddSBjoern A. Zeeb 	/*
2325bfcc09ddSBjoern A. Zeeb 	 * If we're not associated yet, take the (new) BSSID before associating
2326bfcc09ddSBjoern A. Zeeb 	 * so the firmware knows. If we're already associated, then use the old
2327bfcc09ddSBjoern A. Zeeb 	 * BSSID here, and we'll send a cleared one later in the CHANGED_ASSOC
2328bfcc09ddSBjoern A. Zeeb 	 * branch for disassociation below.
2329bfcc09ddSBjoern A. Zeeb 	 */
2330bfcc09ddSBjoern A. Zeeb 	if (changes & BSS_CHANGED_BSSID && !mvmvif->associated)
2331bfcc09ddSBjoern A. Zeeb 		memcpy(mvmvif->bssid, bss_conf->bssid, ETH_ALEN);
2332bfcc09ddSBjoern A. Zeeb 
2333bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, mvmvif->bssid);
2334bfcc09ddSBjoern A. Zeeb 	if (ret)
2335bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "failed to update MAC %pM\n", vif->addr);
2336bfcc09ddSBjoern A. Zeeb 
2337bfcc09ddSBjoern A. Zeeb 	/* after sending it once, adopt mac80211 data */
2338bfcc09ddSBjoern A. Zeeb 	memcpy(mvmvif->bssid, bss_conf->bssid, ETH_ALEN);
2339bfcc09ddSBjoern A. Zeeb 	mvmvif->associated = bss_conf->assoc;
2340bfcc09ddSBjoern A. Zeeb 
2341bfcc09ddSBjoern A. Zeeb 	if (changes & BSS_CHANGED_ASSOC) {
2342bfcc09ddSBjoern A. Zeeb 		if (bss_conf->assoc) {
2343bfcc09ddSBjoern A. Zeeb 			/* clear statistics to get clean beacon counter */
2344bfcc09ddSBjoern A. Zeeb 			iwl_mvm_request_statistics(mvm, true);
2345bfcc09ddSBjoern A. Zeeb 			memset(&mvmvif->beacon_stats, 0,
2346bfcc09ddSBjoern A. Zeeb 			       sizeof(mvmvif->beacon_stats));
2347bfcc09ddSBjoern A. Zeeb 
2348bfcc09ddSBjoern A. Zeeb 			/* add quota for this interface */
2349bfcc09ddSBjoern A. Zeeb 			ret = iwl_mvm_update_quotas(mvm, true, NULL);
2350bfcc09ddSBjoern A. Zeeb 			if (ret) {
2351bfcc09ddSBjoern A. Zeeb 				IWL_ERR(mvm, "failed to update quotas\n");
2352bfcc09ddSBjoern A. Zeeb 				return;
2353bfcc09ddSBjoern A. Zeeb 			}
2354bfcc09ddSBjoern A. Zeeb 
2355bfcc09ddSBjoern A. Zeeb 			if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART,
2356bfcc09ddSBjoern A. Zeeb 				     &mvm->status) &&
2357bfcc09ddSBjoern A. Zeeb 			    !fw_has_capa(&mvm->fw->ucode_capa,
2358bfcc09ddSBjoern A. Zeeb 					 IWL_UCODE_TLV_CAPA_SESSION_PROT_CMD)) {
2359bfcc09ddSBjoern A. Zeeb 				/*
2360bfcc09ddSBjoern A. Zeeb 				 * If we're restarting then the firmware will
2361bfcc09ddSBjoern A. Zeeb 				 * obviously have lost synchronisation with
2362bfcc09ddSBjoern A. Zeeb 				 * the AP. It will attempt to synchronise by
2363bfcc09ddSBjoern A. Zeeb 				 * itself, but we can make it more reliable by
2364bfcc09ddSBjoern A. Zeeb 				 * scheduling a session protection time event.
2365bfcc09ddSBjoern A. Zeeb 				 *
2366bfcc09ddSBjoern A. Zeeb 				 * The firmware needs to receive a beacon to
2367bfcc09ddSBjoern A. Zeeb 				 * catch up with synchronisation, use 110% of
2368bfcc09ddSBjoern A. Zeeb 				 * the beacon interval.
2369bfcc09ddSBjoern A. Zeeb 				 *
2370bfcc09ddSBjoern A. Zeeb 				 * Set a large maximum delay to allow for more
2371bfcc09ddSBjoern A. Zeeb 				 * than a single interface.
2372bfcc09ddSBjoern A. Zeeb 				 *
2373bfcc09ddSBjoern A. Zeeb 				 * For new firmware versions, rely on the
2374bfcc09ddSBjoern A. Zeeb 				 * firmware. This is relevant for DCM scenarios
2375bfcc09ddSBjoern A. Zeeb 				 * only anyway.
2376bfcc09ddSBjoern A. Zeeb 				 */
2377bfcc09ddSBjoern A. Zeeb 				u32 dur = (11 * vif->bss_conf.beacon_int) / 10;
2378bfcc09ddSBjoern A. Zeeb 				iwl_mvm_protect_session(mvm, vif, dur, dur,
2379bfcc09ddSBjoern A. Zeeb 							5 * dur, false);
2380bfcc09ddSBjoern A. Zeeb 			} else if (!test_bit(IWL_MVM_STATUS_IN_HW_RESTART,
2381bfcc09ddSBjoern A. Zeeb 					     &mvm->status) &&
2382bfcc09ddSBjoern A. Zeeb 				   !vif->bss_conf.dtim_period) {
2383bfcc09ddSBjoern A. Zeeb 				/*
2384bfcc09ddSBjoern A. Zeeb 				 * If we're not restarting and still haven't
2385bfcc09ddSBjoern A. Zeeb 				 * heard a beacon (dtim period unknown) then
2386bfcc09ddSBjoern A. Zeeb 				 * make sure we still have enough minimum time
2387bfcc09ddSBjoern A. Zeeb 				 * remaining in the time event, since the auth
2388bfcc09ddSBjoern A. Zeeb 				 * might actually have taken quite a while
2389bfcc09ddSBjoern A. Zeeb 				 * (especially for SAE) and so the remaining
2390bfcc09ddSBjoern A. Zeeb 				 * time could be small without us having heard
2391bfcc09ddSBjoern A. Zeeb 				 * a beacon yet.
2392bfcc09ddSBjoern A. Zeeb 				 */
2393bfcc09ddSBjoern A. Zeeb 				iwl_mvm_protect_assoc(mvm, vif, 0);
2394bfcc09ddSBjoern A. Zeeb 			}
2395bfcc09ddSBjoern A. Zeeb 
2396bfcc09ddSBjoern A. Zeeb 			iwl_mvm_sf_update(mvm, vif, false);
2397bfcc09ddSBjoern A. Zeeb 			iwl_mvm_power_vif_assoc(mvm, vif);
2398bfcc09ddSBjoern A. Zeeb 			if (vif->p2p) {
2399bfcc09ddSBjoern A. Zeeb 				iwl_mvm_update_smps(mvm, vif,
2400bfcc09ddSBjoern A. Zeeb 						    IWL_MVM_SMPS_REQ_PROT,
2401bfcc09ddSBjoern A. Zeeb 						    IEEE80211_SMPS_DYNAMIC);
2402bfcc09ddSBjoern A. Zeeb 			}
2403bfcc09ddSBjoern A. Zeeb 		} else if (mvmvif->ap_sta_id != IWL_MVM_INVALID_STA) {
2404bfcc09ddSBjoern A. Zeeb 			/*
2405bfcc09ddSBjoern A. Zeeb 			 * If update fails - SF might be running in associated
2406bfcc09ddSBjoern A. Zeeb 			 * mode while disassociated - which is forbidden.
2407bfcc09ddSBjoern A. Zeeb 			 */
2408bfcc09ddSBjoern A. Zeeb 			ret = iwl_mvm_sf_update(mvm, vif, false);
2409bfcc09ddSBjoern A. Zeeb 			WARN_ONCE(ret &&
2410bfcc09ddSBjoern A. Zeeb 				  !test_bit(IWL_MVM_STATUS_HW_RESTART_REQUESTED,
2411bfcc09ddSBjoern A. Zeeb 					    &mvm->status),
2412bfcc09ddSBjoern A. Zeeb 				  "Failed to update SF upon disassociation\n");
2413bfcc09ddSBjoern A. Zeeb 
2414bfcc09ddSBjoern A. Zeeb 			/*
2415bfcc09ddSBjoern A. Zeeb 			 * If we get an assert during the connection (after the
2416bfcc09ddSBjoern A. Zeeb 			 * station has been added, but before the vif is set
2417bfcc09ddSBjoern A. Zeeb 			 * to associated), mac80211 will re-add the station and
2418bfcc09ddSBjoern A. Zeeb 			 * then configure the vif. Since the vif is not
2419bfcc09ddSBjoern A. Zeeb 			 * associated, we would remove the station here and
2420bfcc09ddSBjoern A. Zeeb 			 * this would fail the recovery.
2421bfcc09ddSBjoern A. Zeeb 			 */
2422bfcc09ddSBjoern A. Zeeb 			if (!test_bit(IWL_MVM_STATUS_IN_HW_RESTART,
2423bfcc09ddSBjoern A. Zeeb 				      &mvm->status)) {
2424bfcc09ddSBjoern A. Zeeb 				/*
2425bfcc09ddSBjoern A. Zeeb 				 * Remove AP station now that
2426bfcc09ddSBjoern A. Zeeb 				 * the MAC is unassoc
2427bfcc09ddSBjoern A. Zeeb 				 */
2428bfcc09ddSBjoern A. Zeeb 				ret = iwl_mvm_rm_sta_id(mvm, vif,
2429bfcc09ddSBjoern A. Zeeb 							mvmvif->ap_sta_id);
2430bfcc09ddSBjoern A. Zeeb 				if (ret)
2431bfcc09ddSBjoern A. Zeeb 					IWL_ERR(mvm,
2432bfcc09ddSBjoern A. Zeeb 						"failed to remove AP station\n");
2433bfcc09ddSBjoern A. Zeeb 
2434bfcc09ddSBjoern A. Zeeb 				mvmvif->ap_sta_id = IWL_MVM_INVALID_STA;
2435bfcc09ddSBjoern A. Zeeb 			}
2436bfcc09ddSBjoern A. Zeeb 
2437bfcc09ddSBjoern A. Zeeb 			/* remove quota for this interface */
2438bfcc09ddSBjoern A. Zeeb 			ret = iwl_mvm_update_quotas(mvm, false, NULL);
2439bfcc09ddSBjoern A. Zeeb 			if (ret)
2440bfcc09ddSBjoern A. Zeeb 				IWL_ERR(mvm, "failed to update quotas\n");
2441bfcc09ddSBjoern A. Zeeb 
2442bfcc09ddSBjoern A. Zeeb 			/* this will take the cleared BSSID from bss_conf */
2443bfcc09ddSBjoern A. Zeeb 			ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
2444bfcc09ddSBjoern A. Zeeb 			if (ret)
2445bfcc09ddSBjoern A. Zeeb 				IWL_ERR(mvm,
2446bfcc09ddSBjoern A. Zeeb 					"failed to update MAC %pM (clear after unassoc)\n",
2447bfcc09ddSBjoern A. Zeeb 					vif->addr);
2448bfcc09ddSBjoern A. Zeeb 		}
2449bfcc09ddSBjoern A. Zeeb 
2450bfcc09ddSBjoern A. Zeeb 		/*
2451bfcc09ddSBjoern A. Zeeb 		 * The firmware tracks the MU-MIMO group on its own.
2452bfcc09ddSBjoern A. Zeeb 		 * However, on HW restart we should restore this data.
2453bfcc09ddSBjoern A. Zeeb 		 */
2454bfcc09ddSBjoern A. Zeeb 		if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) &&
2455bfcc09ddSBjoern A. Zeeb 		    (changes & BSS_CHANGED_MU_GROUPS) && vif->mu_mimo_owner) {
2456bfcc09ddSBjoern A. Zeeb 			ret = iwl_mvm_update_mu_groups(mvm, vif);
2457bfcc09ddSBjoern A. Zeeb 			if (ret)
2458bfcc09ddSBjoern A. Zeeb 				IWL_ERR(mvm,
2459bfcc09ddSBjoern A. Zeeb 					"failed to update VHT MU_MIMO groups\n");
2460bfcc09ddSBjoern A. Zeeb 		}
2461bfcc09ddSBjoern A. Zeeb 
2462bfcc09ddSBjoern A. Zeeb 		iwl_mvm_recalc_multicast(mvm);
2463bfcc09ddSBjoern A. Zeeb 		iwl_mvm_configure_bcast_filter(mvm);
2464bfcc09ddSBjoern A. Zeeb 
2465bfcc09ddSBjoern A. Zeeb 		/* reset rssi values */
2466bfcc09ddSBjoern A. Zeeb 		mvmvif->bf_data.ave_beacon_signal = 0;
2467bfcc09ddSBjoern A. Zeeb 
2468bfcc09ddSBjoern A. Zeeb 		iwl_mvm_bt_coex_vif_change(mvm);
2469bfcc09ddSBjoern A. Zeeb 		iwl_mvm_update_smps(mvm, vif, IWL_MVM_SMPS_REQ_TT,
2470bfcc09ddSBjoern A. Zeeb 				    IEEE80211_SMPS_AUTOMATIC);
2471bfcc09ddSBjoern A. Zeeb 		if (fw_has_capa(&mvm->fw->ucode_capa,
2472bfcc09ddSBjoern A. Zeeb 				IWL_UCODE_TLV_CAPA_UMAC_SCAN))
2473bfcc09ddSBjoern A. Zeeb 			iwl_mvm_config_scan(mvm);
2474bfcc09ddSBjoern A. Zeeb 	}
2475bfcc09ddSBjoern A. Zeeb 
2476bfcc09ddSBjoern A. Zeeb 	if (changes & BSS_CHANGED_BEACON_INFO) {
2477bfcc09ddSBjoern A. Zeeb 		/*
2478bfcc09ddSBjoern A. Zeeb 		 * We received a beacon from the associated AP so
2479bfcc09ddSBjoern A. Zeeb 		 * remove the session protection.
2480bfcc09ddSBjoern A. Zeeb 		 * A firmware with the new API will remove it automatically.
2481bfcc09ddSBjoern A. Zeeb 		 */
2482bfcc09ddSBjoern A. Zeeb 		if (!fw_has_capa(&mvm->fw->ucode_capa,
2483bfcc09ddSBjoern A. Zeeb 				 IWL_UCODE_TLV_CAPA_SESSION_PROT_CMD))
2484bfcc09ddSBjoern A. Zeeb 			iwl_mvm_stop_session_protection(mvm, vif);
2485bfcc09ddSBjoern A. Zeeb 
2486bfcc09ddSBjoern A. Zeeb 		iwl_mvm_sf_update(mvm, vif, false);
2487bfcc09ddSBjoern A. Zeeb 		WARN_ON(iwl_mvm_enable_beacon_filter(mvm, vif, 0));
2488bfcc09ddSBjoern A. Zeeb 	}
2489bfcc09ddSBjoern A. Zeeb 
2490bfcc09ddSBjoern A. Zeeb 	if (changes & (BSS_CHANGED_PS | BSS_CHANGED_P2P_PS | BSS_CHANGED_QOS |
2491bfcc09ddSBjoern A. Zeeb 		       /*
2492bfcc09ddSBjoern A. Zeeb 			* Send power command on every beacon change,
2493bfcc09ddSBjoern A. Zeeb 			* because we may have not enabled beacon abort yet.
2494bfcc09ddSBjoern A. Zeeb 			*/
2495bfcc09ddSBjoern A. Zeeb 		       BSS_CHANGED_BEACON_INFO)) {
2496bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_power_update_mac(mvm);
2497bfcc09ddSBjoern A. Zeeb 		if (ret)
2498bfcc09ddSBjoern A. Zeeb 			IWL_ERR(mvm, "failed to update power mode\n");
2499bfcc09ddSBjoern A. Zeeb 	}
2500bfcc09ddSBjoern A. Zeeb 
2501bfcc09ddSBjoern A. Zeeb 	if (changes & BSS_CHANGED_CQM) {
2502bfcc09ddSBjoern A. Zeeb 		IWL_DEBUG_MAC80211(mvm, "cqm info_changed\n");
2503bfcc09ddSBjoern A. Zeeb 		/* reset cqm events tracking */
2504bfcc09ddSBjoern A. Zeeb 		mvmvif->bf_data.last_cqm_event = 0;
2505bfcc09ddSBjoern A. Zeeb 		if (mvmvif->bf_data.bf_enabled) {
2506bfcc09ddSBjoern A. Zeeb 			ret = iwl_mvm_enable_beacon_filter(mvm, vif, 0);
2507bfcc09ddSBjoern A. Zeeb 			if (ret)
2508bfcc09ddSBjoern A. Zeeb 				IWL_ERR(mvm,
2509bfcc09ddSBjoern A. Zeeb 					"failed to update CQM thresholds\n");
2510bfcc09ddSBjoern A. Zeeb 		}
2511bfcc09ddSBjoern A. Zeeb 	}
2512bfcc09ddSBjoern A. Zeeb 
2513bfcc09ddSBjoern A. Zeeb 	if (changes & BSS_CHANGED_ARP_FILTER) {
2514bfcc09ddSBjoern A. Zeeb 		IWL_DEBUG_MAC80211(mvm, "arp filter changed\n");
2515bfcc09ddSBjoern A. Zeeb 		iwl_mvm_configure_bcast_filter(mvm);
2516bfcc09ddSBjoern A. Zeeb 	}
2517bfcc09ddSBjoern A. Zeeb 
2518bfcc09ddSBjoern A. Zeeb 	if (changes & BSS_CHANGED_BANDWIDTH)
2519bfcc09ddSBjoern A. Zeeb 		iwl_mvm_apply_fw_smps_request(vif);
2520bfcc09ddSBjoern A. Zeeb }
2521bfcc09ddSBjoern A. Zeeb 
2522bfcc09ddSBjoern A. Zeeb static int iwl_mvm_start_ap_ibss(struct ieee80211_hw *hw,
2523bfcc09ddSBjoern A. Zeeb 				 struct ieee80211_vif *vif)
2524bfcc09ddSBjoern A. Zeeb {
2525bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2526bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2527bfcc09ddSBjoern A. Zeeb 	int ret, i;
2528bfcc09ddSBjoern A. Zeeb 
2529bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
2530bfcc09ddSBjoern A. Zeeb 
2531bfcc09ddSBjoern A. Zeeb 	/* Send the beacon template */
2532bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_mac_ctxt_beacon_changed(mvm, vif);
2533bfcc09ddSBjoern A. Zeeb 	if (ret)
2534bfcc09ddSBjoern A. Zeeb 		goto out_unlock;
2535bfcc09ddSBjoern A. Zeeb 
2536bfcc09ddSBjoern A. Zeeb 	/*
2537bfcc09ddSBjoern A. Zeeb 	 * Re-calculate the tsf id, as the leader-follower relations depend on
2538bfcc09ddSBjoern A. Zeeb 	 * the beacon interval, which was not known when the AP interface
2539bfcc09ddSBjoern A. Zeeb 	 * was added.
2540bfcc09ddSBjoern A. Zeeb 	 */
2541bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_AP)
2542bfcc09ddSBjoern A. Zeeb 		iwl_mvm_mac_ctxt_recalc_tsf_id(mvm, vif);
2543bfcc09ddSBjoern A. Zeeb 
2544bfcc09ddSBjoern A. Zeeb 	mvmvif->ap_assoc_sta_count = 0;
2545bfcc09ddSBjoern A. Zeeb 
2546bfcc09ddSBjoern A. Zeeb 	/* Add the mac context */
2547bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_mac_ctxt_add(mvm, vif);
2548bfcc09ddSBjoern A. Zeeb 	if (ret)
2549bfcc09ddSBjoern A. Zeeb 		goto out_unlock;
2550bfcc09ddSBjoern A. Zeeb 
2551bfcc09ddSBjoern A. Zeeb 	/* Perform the binding */
2552bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_binding_add_vif(mvm, vif);
2553bfcc09ddSBjoern A. Zeeb 	if (ret)
2554bfcc09ddSBjoern A. Zeeb 		goto out_remove;
2555bfcc09ddSBjoern A. Zeeb 
2556bfcc09ddSBjoern A. Zeeb 	/*
2557bfcc09ddSBjoern A. Zeeb 	 * This is not very nice, but the simplest:
2558bfcc09ddSBjoern A. Zeeb 	 * For older FWs adding the mcast sta before the bcast station may
2559bfcc09ddSBjoern A. Zeeb 	 * cause assert 0x2b00.
2560bfcc09ddSBjoern A. Zeeb 	 * This is fixed in later FW so make the order of removal depend on
2561bfcc09ddSBjoern A. Zeeb 	 * the TLV
2562bfcc09ddSBjoern A. Zeeb 	 */
2563bfcc09ddSBjoern A. Zeeb 	if (fw_has_api(&mvm->fw->ucode_capa, IWL_UCODE_TLV_API_STA_TYPE)) {
2564bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_add_mcast_sta(mvm, vif);
2565bfcc09ddSBjoern A. Zeeb 		if (ret)
2566bfcc09ddSBjoern A. Zeeb 			goto out_unbind;
2567bfcc09ddSBjoern A. Zeeb 		/*
2568bfcc09ddSBjoern A. Zeeb 		 * Send the bcast station. At this stage the TBTT and DTIM time
2569bfcc09ddSBjoern A. Zeeb 		 * events are added and applied to the scheduler
2570bfcc09ddSBjoern A. Zeeb 		 */
2571bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_send_add_bcast_sta(mvm, vif);
2572bfcc09ddSBjoern A. Zeeb 		if (ret) {
2573bfcc09ddSBjoern A. Zeeb 			iwl_mvm_rm_mcast_sta(mvm, vif);
2574bfcc09ddSBjoern A. Zeeb 			goto out_unbind;
2575bfcc09ddSBjoern A. Zeeb 		}
2576bfcc09ddSBjoern A. Zeeb 	} else {
2577bfcc09ddSBjoern A. Zeeb 		/*
2578bfcc09ddSBjoern A. Zeeb 		 * Send the bcast station. At this stage the TBTT and DTIM time
2579bfcc09ddSBjoern A. Zeeb 		 * events are added and applied to the scheduler
2580bfcc09ddSBjoern A. Zeeb 		 */
2581bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_send_add_bcast_sta(mvm, vif);
2582bfcc09ddSBjoern A. Zeeb 		if (ret)
2583bfcc09ddSBjoern A. Zeeb 			goto out_unbind;
2584bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_add_mcast_sta(mvm, vif);
2585bfcc09ddSBjoern A. Zeeb 		if (ret) {
2586bfcc09ddSBjoern A. Zeeb 			iwl_mvm_send_rm_bcast_sta(mvm, vif);
2587bfcc09ddSBjoern A. Zeeb 			goto out_unbind;
2588bfcc09ddSBjoern A. Zeeb 		}
2589bfcc09ddSBjoern A. Zeeb 	}
2590bfcc09ddSBjoern A. Zeeb 
2591bfcc09ddSBjoern A. Zeeb 	/* must be set before quota calculations */
2592bfcc09ddSBjoern A. Zeeb 	mvmvif->ap_ibss_active = true;
2593bfcc09ddSBjoern A. Zeeb 
2594bfcc09ddSBjoern A. Zeeb 	/* send all the early keys to the device now */
2595bfcc09ddSBjoern A. Zeeb 	for (i = 0; i < ARRAY_SIZE(mvmvif->ap_early_keys); i++) {
2596bfcc09ddSBjoern A. Zeeb 		struct ieee80211_key_conf *key = mvmvif->ap_early_keys[i];
2597bfcc09ddSBjoern A. Zeeb 
2598bfcc09ddSBjoern A. Zeeb 		if (!key)
2599bfcc09ddSBjoern A. Zeeb 			continue;
2600bfcc09ddSBjoern A. Zeeb 
2601bfcc09ddSBjoern A. Zeeb 		mvmvif->ap_early_keys[i] = NULL;
2602bfcc09ddSBjoern A. Zeeb 
2603bfcc09ddSBjoern A. Zeeb 		ret = __iwl_mvm_mac_set_key(hw, SET_KEY, vif, NULL, key);
2604bfcc09ddSBjoern A. Zeeb 		if (ret)
2605bfcc09ddSBjoern A. Zeeb 			goto out_quota_failed;
2606bfcc09ddSBjoern A. Zeeb 	}
2607bfcc09ddSBjoern A. Zeeb 
2608bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_AP && !vif->p2p) {
2609bfcc09ddSBjoern A. Zeeb 		iwl_mvm_vif_set_low_latency(mvmvif, true,
2610bfcc09ddSBjoern A. Zeeb 					    LOW_LATENCY_VIF_TYPE);
2611bfcc09ddSBjoern A. Zeeb 		iwl_mvm_send_low_latency_cmd(mvm, true, mvmvif->id);
2612bfcc09ddSBjoern A. Zeeb 	}
2613bfcc09ddSBjoern A. Zeeb 
2614bfcc09ddSBjoern A. Zeeb 	/* power updated needs to be done before quotas */
2615bfcc09ddSBjoern A. Zeeb 	iwl_mvm_power_update_mac(mvm);
2616bfcc09ddSBjoern A. Zeeb 
2617bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_update_quotas(mvm, false, NULL);
2618bfcc09ddSBjoern A. Zeeb 	if (ret)
2619bfcc09ddSBjoern A. Zeeb 		goto out_quota_failed;
2620bfcc09ddSBjoern A. Zeeb 
2621bfcc09ddSBjoern A. Zeeb 	/* Need to update the P2P Device MAC (only GO, IBSS is single vif) */
2622bfcc09ddSBjoern A. Zeeb 	if (vif->p2p && mvm->p2p_device_vif)
2623bfcc09ddSBjoern A. Zeeb 		iwl_mvm_mac_ctxt_changed(mvm, mvm->p2p_device_vif, false, NULL);
2624bfcc09ddSBjoern A. Zeeb 
2625bfcc09ddSBjoern A. Zeeb 	iwl_mvm_bt_coex_vif_change(mvm);
2626bfcc09ddSBjoern A. Zeeb 
2627bfcc09ddSBjoern A. Zeeb 	/* we don't support TDLS during DCM */
2628bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_phy_ctx_count(mvm) > 1)
2629bfcc09ddSBjoern A. Zeeb 		iwl_mvm_teardown_tdls_peers(mvm);
2630bfcc09ddSBjoern A. Zeeb 
2631bfcc09ddSBjoern A. Zeeb 	iwl_mvm_ftm_restart_responder(mvm, vif);
2632bfcc09ddSBjoern A. Zeeb 
2633bfcc09ddSBjoern A. Zeeb 	goto out_unlock;
2634bfcc09ddSBjoern A. Zeeb 
2635bfcc09ddSBjoern A. Zeeb out_quota_failed:
2636bfcc09ddSBjoern A. Zeeb 	iwl_mvm_power_update_mac(mvm);
2637bfcc09ddSBjoern A. Zeeb 	mvmvif->ap_ibss_active = false;
2638bfcc09ddSBjoern A. Zeeb 	iwl_mvm_send_rm_bcast_sta(mvm, vif);
2639bfcc09ddSBjoern A. Zeeb 	iwl_mvm_rm_mcast_sta(mvm, vif);
2640bfcc09ddSBjoern A. Zeeb out_unbind:
2641bfcc09ddSBjoern A. Zeeb 	iwl_mvm_binding_remove_vif(mvm, vif);
2642bfcc09ddSBjoern A. Zeeb out_remove:
2643bfcc09ddSBjoern A. Zeeb 	iwl_mvm_mac_ctxt_remove(mvm, vif);
2644bfcc09ddSBjoern A. Zeeb out_unlock:
2645bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
2646bfcc09ddSBjoern A. Zeeb 	return ret;
2647bfcc09ddSBjoern A. Zeeb }
2648bfcc09ddSBjoern A. Zeeb 
2649bfcc09ddSBjoern A. Zeeb static void iwl_mvm_stop_ap_ibss(struct ieee80211_hw *hw,
2650bfcc09ddSBjoern A. Zeeb 				 struct ieee80211_vif *vif)
2651bfcc09ddSBjoern A. Zeeb {
2652bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2653bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2654bfcc09ddSBjoern A. Zeeb 
2655bfcc09ddSBjoern A. Zeeb 	iwl_mvm_prepare_mac_removal(mvm, vif);
2656bfcc09ddSBjoern A. Zeeb 
2657bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
2658bfcc09ddSBjoern A. Zeeb 
2659bfcc09ddSBjoern A. Zeeb 	/* Handle AP stop while in CSA */
2660bfcc09ddSBjoern A. Zeeb 	if (rcu_access_pointer(mvm->csa_vif) == vif) {
2661bfcc09ddSBjoern A. Zeeb 		iwl_mvm_remove_time_event(mvm, mvmvif,
2662bfcc09ddSBjoern A. Zeeb 					  &mvmvif->time_event_data);
2663bfcc09ddSBjoern A. Zeeb 		RCU_INIT_POINTER(mvm->csa_vif, NULL);
2664bfcc09ddSBjoern A. Zeeb 		mvmvif->csa_countdown = false;
2665bfcc09ddSBjoern A. Zeeb 	}
2666bfcc09ddSBjoern A. Zeeb 
2667bfcc09ddSBjoern A. Zeeb 	if (rcu_access_pointer(mvm->csa_tx_blocked_vif) == vif) {
2668bfcc09ddSBjoern A. Zeeb 		RCU_INIT_POINTER(mvm->csa_tx_blocked_vif, NULL);
2669bfcc09ddSBjoern A. Zeeb 		mvm->csa_tx_block_bcn_timeout = 0;
2670bfcc09ddSBjoern A. Zeeb 	}
2671bfcc09ddSBjoern A. Zeeb 
2672bfcc09ddSBjoern A. Zeeb 	mvmvif->ap_ibss_active = false;
2673bfcc09ddSBjoern A. Zeeb 	mvm->ap_last_beacon_gp2 = 0;
2674bfcc09ddSBjoern A. Zeeb 
2675bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_AP && !vif->p2p) {
2676bfcc09ddSBjoern A. Zeeb 		iwl_mvm_vif_set_low_latency(mvmvif, false,
2677bfcc09ddSBjoern A. Zeeb 					    LOW_LATENCY_VIF_TYPE);
2678bfcc09ddSBjoern A. Zeeb 		iwl_mvm_send_low_latency_cmd(mvm, false,  mvmvif->id);
2679bfcc09ddSBjoern A. Zeeb 	}
2680bfcc09ddSBjoern A. Zeeb 
2681bfcc09ddSBjoern A. Zeeb 	iwl_mvm_bt_coex_vif_change(mvm);
2682bfcc09ddSBjoern A. Zeeb 
2683bfcc09ddSBjoern A. Zeeb 	/* Need to update the P2P Device MAC (only GO, IBSS is single vif) */
2684bfcc09ddSBjoern A. Zeeb 	if (vif->p2p && mvm->p2p_device_vif)
2685bfcc09ddSBjoern A. Zeeb 		iwl_mvm_mac_ctxt_changed(mvm, mvm->p2p_device_vif, false, NULL);
2686bfcc09ddSBjoern A. Zeeb 
2687bfcc09ddSBjoern A. Zeeb 	iwl_mvm_update_quotas(mvm, false, NULL);
2688bfcc09ddSBjoern A. Zeeb 
2689bfcc09ddSBjoern A. Zeeb 	iwl_mvm_ftm_responder_clear(mvm, vif);
2690bfcc09ddSBjoern A. Zeeb 
2691bfcc09ddSBjoern A. Zeeb 	/*
2692bfcc09ddSBjoern A. Zeeb 	 * This is not very nice, but the simplest:
2693bfcc09ddSBjoern A. Zeeb 	 * For older FWs removing the mcast sta before the bcast station may
2694bfcc09ddSBjoern A. Zeeb 	 * cause assert 0x2b00.
2695bfcc09ddSBjoern A. Zeeb 	 * This is fixed in later FW (which will stop beaconing when removing
2696bfcc09ddSBjoern A. Zeeb 	 * bcast station).
2697bfcc09ddSBjoern A. Zeeb 	 * So make the order of removal depend on the TLV
2698bfcc09ddSBjoern A. Zeeb 	 */
2699bfcc09ddSBjoern A. Zeeb 	if (!fw_has_api(&mvm->fw->ucode_capa, IWL_UCODE_TLV_API_STA_TYPE))
2700bfcc09ddSBjoern A. Zeeb 		iwl_mvm_rm_mcast_sta(mvm, vif);
2701bfcc09ddSBjoern A. Zeeb 	iwl_mvm_send_rm_bcast_sta(mvm, vif);
2702bfcc09ddSBjoern A. Zeeb 	if (fw_has_api(&mvm->fw->ucode_capa, IWL_UCODE_TLV_API_STA_TYPE))
2703bfcc09ddSBjoern A. Zeeb 		iwl_mvm_rm_mcast_sta(mvm, vif);
2704bfcc09ddSBjoern A. Zeeb 	iwl_mvm_binding_remove_vif(mvm, vif);
2705bfcc09ddSBjoern A. Zeeb 
2706bfcc09ddSBjoern A. Zeeb 	iwl_mvm_power_update_mac(mvm);
2707bfcc09ddSBjoern A. Zeeb 
2708bfcc09ddSBjoern A. Zeeb 	iwl_mvm_mac_ctxt_remove(mvm, vif);
2709bfcc09ddSBjoern A. Zeeb 
2710bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
2711bfcc09ddSBjoern A. Zeeb }
2712bfcc09ddSBjoern A. Zeeb 
2713bfcc09ddSBjoern A. Zeeb static void
2714bfcc09ddSBjoern A. Zeeb iwl_mvm_bss_info_changed_ap_ibss(struct iwl_mvm *mvm,
2715bfcc09ddSBjoern A. Zeeb 				 struct ieee80211_vif *vif,
2716bfcc09ddSBjoern A. Zeeb 				 struct ieee80211_bss_conf *bss_conf,
2717bfcc09ddSBjoern A. Zeeb 				 u32 changes)
2718bfcc09ddSBjoern A. Zeeb {
2719bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
2720bfcc09ddSBjoern A. Zeeb 
2721bfcc09ddSBjoern A. Zeeb 	/* Changes will be applied when the AP/IBSS is started */
2722bfcc09ddSBjoern A. Zeeb 	if (!mvmvif->ap_ibss_active)
2723bfcc09ddSBjoern A. Zeeb 		return;
2724bfcc09ddSBjoern A. Zeeb 
2725bfcc09ddSBjoern A. Zeeb 	if (changes & (BSS_CHANGED_ERP_CTS_PROT | BSS_CHANGED_HT |
2726bfcc09ddSBjoern A. Zeeb 		       BSS_CHANGED_BANDWIDTH | BSS_CHANGED_QOS) &&
2727bfcc09ddSBjoern A. Zeeb 	    iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL))
2728bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "failed to update MAC %pM\n", vif->addr);
2729bfcc09ddSBjoern A. Zeeb 
2730bfcc09ddSBjoern A. Zeeb 	/* Need to send a new beacon template to the FW */
2731bfcc09ddSBjoern A. Zeeb 	if (changes & BSS_CHANGED_BEACON &&
2732bfcc09ddSBjoern A. Zeeb 	    iwl_mvm_mac_ctxt_beacon_changed(mvm, vif))
2733bfcc09ddSBjoern A. Zeeb 		IWL_WARN(mvm, "Failed updating beacon data\n");
2734bfcc09ddSBjoern A. Zeeb 
2735bfcc09ddSBjoern A. Zeeb 	if (changes & BSS_CHANGED_FTM_RESPONDER) {
2736bfcc09ddSBjoern A. Zeeb 		int ret = iwl_mvm_ftm_start_responder(mvm, vif);
2737bfcc09ddSBjoern A. Zeeb 
2738bfcc09ddSBjoern A. Zeeb 		if (ret)
2739bfcc09ddSBjoern A. Zeeb 			IWL_WARN(mvm, "Failed to enable FTM responder (%d)\n",
2740bfcc09ddSBjoern A. Zeeb 				 ret);
2741bfcc09ddSBjoern A. Zeeb 	}
2742bfcc09ddSBjoern A. Zeeb 
2743bfcc09ddSBjoern A. Zeeb }
2744bfcc09ddSBjoern A. Zeeb 
2745bfcc09ddSBjoern A. Zeeb static void iwl_mvm_bss_info_changed(struct ieee80211_hw *hw,
2746bfcc09ddSBjoern A. Zeeb 				     struct ieee80211_vif *vif,
2747bfcc09ddSBjoern A. Zeeb 				     struct ieee80211_bss_conf *bss_conf,
2748bfcc09ddSBjoern A. Zeeb 				     u32 changes)
2749bfcc09ddSBjoern A. Zeeb {
2750bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2751bfcc09ddSBjoern A. Zeeb 
2752bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
2753bfcc09ddSBjoern A. Zeeb 
2754bfcc09ddSBjoern A. Zeeb 	if (changes & BSS_CHANGED_IDLE && !bss_conf->idle)
2755bfcc09ddSBjoern A. Zeeb 		iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_SCHED, true);
2756bfcc09ddSBjoern A. Zeeb 
2757bfcc09ddSBjoern A. Zeeb 	switch (vif->type) {
2758bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_STATION:
2759bfcc09ddSBjoern A. Zeeb 		iwl_mvm_bss_info_changed_station(mvm, vif, bss_conf, changes);
2760bfcc09ddSBjoern A. Zeeb 		break;
2761bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_AP:
2762bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_ADHOC:
2763bfcc09ddSBjoern A. Zeeb 		iwl_mvm_bss_info_changed_ap_ibss(mvm, vif, bss_conf, changes);
2764bfcc09ddSBjoern A. Zeeb 		break;
2765bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_MONITOR:
2766bfcc09ddSBjoern A. Zeeb 		if (changes & BSS_CHANGED_MU_GROUPS)
2767bfcc09ddSBjoern A. Zeeb 			iwl_mvm_update_mu_groups(mvm, vif);
2768bfcc09ddSBjoern A. Zeeb 		break;
2769bfcc09ddSBjoern A. Zeeb 	default:
2770bfcc09ddSBjoern A. Zeeb 		/* shouldn't happen */
2771bfcc09ddSBjoern A. Zeeb 		WARN_ON_ONCE(1);
2772bfcc09ddSBjoern A. Zeeb 	}
2773bfcc09ddSBjoern A. Zeeb 
2774bfcc09ddSBjoern A. Zeeb 	if (changes & BSS_CHANGED_TXPOWER) {
2775bfcc09ddSBjoern A. Zeeb 		IWL_DEBUG_CALIB(mvm, "Changing TX Power to %d dBm\n",
2776bfcc09ddSBjoern A. Zeeb 				bss_conf->txpower);
2777bfcc09ddSBjoern A. Zeeb 		iwl_mvm_set_tx_power(mvm, vif, bss_conf->txpower);
2778bfcc09ddSBjoern A. Zeeb 	}
2779bfcc09ddSBjoern A. Zeeb 
2780bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
2781bfcc09ddSBjoern A. Zeeb }
2782bfcc09ddSBjoern A. Zeeb 
2783bfcc09ddSBjoern A. Zeeb static int iwl_mvm_mac_hw_scan(struct ieee80211_hw *hw,
2784bfcc09ddSBjoern A. Zeeb 			       struct ieee80211_vif *vif,
2785bfcc09ddSBjoern A. Zeeb 			       struct ieee80211_scan_request *hw_req)
2786bfcc09ddSBjoern A. Zeeb {
2787bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2788bfcc09ddSBjoern A. Zeeb 	int ret;
2789bfcc09ddSBjoern A. Zeeb 
2790bfcc09ddSBjoern A. Zeeb 	if (hw_req->req.n_channels == 0 ||
2791bfcc09ddSBjoern A. Zeeb 	    hw_req->req.n_channels > mvm->fw->ucode_capa.n_scan_channels)
2792bfcc09ddSBjoern A. Zeeb 		return -EINVAL;
2793bfcc09ddSBjoern A. Zeeb 
2794bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
2795bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_reg_scan_start(mvm, vif, &hw_req->req, &hw_req->ies);
2796bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
2797bfcc09ddSBjoern A. Zeeb 
2798bfcc09ddSBjoern A. Zeeb 	return ret;
2799bfcc09ddSBjoern A. Zeeb }
2800bfcc09ddSBjoern A. Zeeb 
2801bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mac_cancel_hw_scan(struct ieee80211_hw *hw,
2802bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_vif *vif)
2803bfcc09ddSBjoern A. Zeeb {
2804bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2805bfcc09ddSBjoern A. Zeeb 
2806bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
2807bfcc09ddSBjoern A. Zeeb 
2808bfcc09ddSBjoern A. Zeeb 	/* Due to a race condition, it's possible that mac80211 asks
2809bfcc09ddSBjoern A. Zeeb 	 * us to stop a hw_scan when it's already stopped.  This can
2810bfcc09ddSBjoern A. Zeeb 	 * happen, for instance, if we stopped the scan ourselves,
2811bfcc09ddSBjoern A. Zeeb 	 * called ieee80211_scan_completed() and the userspace called
2812bfcc09ddSBjoern A. Zeeb 	 * cancel scan scan before ieee80211_scan_work() could run.
2813bfcc09ddSBjoern A. Zeeb 	 * To handle that, simply return if the scan is not running.
2814bfcc09ddSBjoern A. Zeeb 	*/
2815bfcc09ddSBjoern A. Zeeb 	if (mvm->scan_status & IWL_MVM_SCAN_REGULAR)
2816bfcc09ddSBjoern A. Zeeb 		iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_REGULAR, true);
2817bfcc09ddSBjoern A. Zeeb 
2818bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
2819bfcc09ddSBjoern A. Zeeb }
2820bfcc09ddSBjoern A. Zeeb 
2821bfcc09ddSBjoern A. Zeeb static void
2822bfcc09ddSBjoern A. Zeeb iwl_mvm_mac_allow_buffered_frames(struct ieee80211_hw *hw,
2823bfcc09ddSBjoern A. Zeeb 				  struct ieee80211_sta *sta, u16 tids,
2824bfcc09ddSBjoern A. Zeeb 				  int num_frames,
2825bfcc09ddSBjoern A. Zeeb 				  enum ieee80211_frame_release_type reason,
2826bfcc09ddSBjoern A. Zeeb 				  bool more_data)
2827bfcc09ddSBjoern A. Zeeb {
2828bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2829bfcc09ddSBjoern A. Zeeb 
2830bfcc09ddSBjoern A. Zeeb 	/* Called when we need to transmit (a) frame(s) from mac80211 */
2831bfcc09ddSBjoern A. Zeeb 
2832bfcc09ddSBjoern A. Zeeb 	iwl_mvm_sta_modify_sleep_tx_count(mvm, sta, reason, num_frames,
2833bfcc09ddSBjoern A. Zeeb 					  tids, more_data, false);
2834bfcc09ddSBjoern A. Zeeb }
2835bfcc09ddSBjoern A. Zeeb 
2836bfcc09ddSBjoern A. Zeeb static void
2837bfcc09ddSBjoern A. Zeeb iwl_mvm_mac_release_buffered_frames(struct ieee80211_hw *hw,
2838bfcc09ddSBjoern A. Zeeb 				    struct ieee80211_sta *sta, u16 tids,
2839bfcc09ddSBjoern A. Zeeb 				    int num_frames,
2840bfcc09ddSBjoern A. Zeeb 				    enum ieee80211_frame_release_type reason,
2841bfcc09ddSBjoern A. Zeeb 				    bool more_data)
2842bfcc09ddSBjoern A. Zeeb {
2843bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2844bfcc09ddSBjoern A. Zeeb 
2845bfcc09ddSBjoern A. Zeeb 	/* Called when we need to transmit (a) frame(s) from agg or dqa queue */
2846bfcc09ddSBjoern A. Zeeb 
2847bfcc09ddSBjoern A. Zeeb 	iwl_mvm_sta_modify_sleep_tx_count(mvm, sta, reason, num_frames,
2848bfcc09ddSBjoern A. Zeeb 					  tids, more_data, true);
2849bfcc09ddSBjoern A. Zeeb }
2850bfcc09ddSBjoern A. Zeeb 
2851bfcc09ddSBjoern A. Zeeb static void __iwl_mvm_mac_sta_notify(struct ieee80211_hw *hw,
2852bfcc09ddSBjoern A. Zeeb 				     enum sta_notify_cmd cmd,
2853bfcc09ddSBjoern A. Zeeb 				     struct ieee80211_sta *sta)
2854bfcc09ddSBjoern A. Zeeb {
2855bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2856bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
2857bfcc09ddSBjoern A. Zeeb 	unsigned long txqs = 0, tids = 0;
2858bfcc09ddSBjoern A. Zeeb 	int tid;
2859bfcc09ddSBjoern A. Zeeb 
2860bfcc09ddSBjoern A. Zeeb 	/*
2861bfcc09ddSBjoern A. Zeeb 	 * If we have TVQM then we get too high queue numbers - luckily
2862bfcc09ddSBjoern A. Zeeb 	 * we really shouldn't get here with that because such hardware
2863bfcc09ddSBjoern A. Zeeb 	 * should have firmware supporting buffer station offload.
2864bfcc09ddSBjoern A. Zeeb 	 */
2865bfcc09ddSBjoern A. Zeeb 	if (WARN_ON(iwl_mvm_has_new_tx_api(mvm)))
2866bfcc09ddSBjoern A. Zeeb 		return;
2867bfcc09ddSBjoern A. Zeeb 
2868bfcc09ddSBjoern A. Zeeb 	spin_lock_bh(&mvmsta->lock);
2869bfcc09ddSBjoern A. Zeeb 	for (tid = 0; tid < ARRAY_SIZE(mvmsta->tid_data); tid++) {
2870bfcc09ddSBjoern A. Zeeb 		struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid];
2871bfcc09ddSBjoern A. Zeeb 
2872bfcc09ddSBjoern A. Zeeb 		if (tid_data->txq_id == IWL_MVM_INVALID_QUEUE)
2873bfcc09ddSBjoern A. Zeeb 			continue;
2874bfcc09ddSBjoern A. Zeeb 
2875bfcc09ddSBjoern A. Zeeb 		__set_bit(tid_data->txq_id, &txqs);
2876bfcc09ddSBjoern A. Zeeb 
2877bfcc09ddSBjoern A. Zeeb 		if (iwl_mvm_tid_queued(mvm, tid_data) == 0)
2878bfcc09ddSBjoern A. Zeeb 			continue;
2879bfcc09ddSBjoern A. Zeeb 
2880bfcc09ddSBjoern A. Zeeb 		__set_bit(tid, &tids);
2881bfcc09ddSBjoern A. Zeeb 	}
2882bfcc09ddSBjoern A. Zeeb 
2883bfcc09ddSBjoern A. Zeeb 	switch (cmd) {
2884bfcc09ddSBjoern A. Zeeb 	case STA_NOTIFY_SLEEP:
2885bfcc09ddSBjoern A. Zeeb 		for_each_set_bit(tid, &tids, IWL_MAX_TID_COUNT)
2886bfcc09ddSBjoern A. Zeeb 			ieee80211_sta_set_buffered(sta, tid, true);
2887bfcc09ddSBjoern A. Zeeb 
2888bfcc09ddSBjoern A. Zeeb 		if (txqs)
2889bfcc09ddSBjoern A. Zeeb 			iwl_trans_freeze_txq_timer(mvm->trans, txqs, true);
2890bfcc09ddSBjoern A. Zeeb 		/*
2891bfcc09ddSBjoern A. Zeeb 		 * The fw updates the STA to be asleep. Tx packets on the Tx
2892bfcc09ddSBjoern A. Zeeb 		 * queues to this station will not be transmitted. The fw will
2893bfcc09ddSBjoern A. Zeeb 		 * send a Tx response with TX_STATUS_FAIL_DEST_PS.
2894bfcc09ddSBjoern A. Zeeb 		 */
2895bfcc09ddSBjoern A. Zeeb 		break;
2896bfcc09ddSBjoern A. Zeeb 	case STA_NOTIFY_AWAKE:
2897bfcc09ddSBjoern A. Zeeb 		if (WARN_ON(mvmsta->sta_id == IWL_MVM_INVALID_STA))
2898bfcc09ddSBjoern A. Zeeb 			break;
2899bfcc09ddSBjoern A. Zeeb 
2900bfcc09ddSBjoern A. Zeeb 		if (txqs)
2901bfcc09ddSBjoern A. Zeeb 			iwl_trans_freeze_txq_timer(mvm->trans, txqs, false);
2902bfcc09ddSBjoern A. Zeeb 		iwl_mvm_sta_modify_ps_wake(mvm, sta);
2903bfcc09ddSBjoern A. Zeeb 		break;
2904bfcc09ddSBjoern A. Zeeb 	default:
2905bfcc09ddSBjoern A. Zeeb 		break;
2906bfcc09ddSBjoern A. Zeeb 	}
2907bfcc09ddSBjoern A. Zeeb 	spin_unlock_bh(&mvmsta->lock);
2908bfcc09ddSBjoern A. Zeeb }
2909bfcc09ddSBjoern A. Zeeb 
2910bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mac_sta_notify(struct ieee80211_hw *hw,
2911bfcc09ddSBjoern A. Zeeb 				   struct ieee80211_vif *vif,
2912bfcc09ddSBjoern A. Zeeb 				   enum sta_notify_cmd cmd,
2913bfcc09ddSBjoern A. Zeeb 				   struct ieee80211_sta *sta)
2914bfcc09ddSBjoern A. Zeeb {
2915bfcc09ddSBjoern A. Zeeb 	__iwl_mvm_mac_sta_notify(hw, cmd, sta);
2916bfcc09ddSBjoern A. Zeeb }
2917bfcc09ddSBjoern A. Zeeb 
2918bfcc09ddSBjoern A. Zeeb void iwl_mvm_sta_pm_notif(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb)
2919bfcc09ddSBjoern A. Zeeb {
2920bfcc09ddSBjoern A. Zeeb 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
2921bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_pm_state_notification *notif = (void *)pkt->data;
2922bfcc09ddSBjoern A. Zeeb 	struct ieee80211_sta *sta;
2923bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_sta *mvmsta;
2924bfcc09ddSBjoern A. Zeeb 	bool sleeping = (notif->type != IWL_MVM_PM_EVENT_AWAKE);
2925bfcc09ddSBjoern A. Zeeb 
2926bfcc09ddSBjoern A. Zeeb 	if (WARN_ON(notif->sta_id >= mvm->fw->ucode_capa.num_stations))
2927bfcc09ddSBjoern A. Zeeb 		return;
2928bfcc09ddSBjoern A. Zeeb 
2929bfcc09ddSBjoern A. Zeeb 	rcu_read_lock();
2930bfcc09ddSBjoern A. Zeeb 	sta = rcu_dereference(mvm->fw_id_to_mac_id[notif->sta_id]);
2931bfcc09ddSBjoern A. Zeeb 	if (WARN_ON(IS_ERR_OR_NULL(sta))) {
2932bfcc09ddSBjoern A. Zeeb 		rcu_read_unlock();
2933bfcc09ddSBjoern A. Zeeb 		return;
2934bfcc09ddSBjoern A. Zeeb 	}
2935bfcc09ddSBjoern A. Zeeb 
2936bfcc09ddSBjoern A. Zeeb 	mvmsta = iwl_mvm_sta_from_mac80211(sta);
2937bfcc09ddSBjoern A. Zeeb 
2938bfcc09ddSBjoern A. Zeeb 	if (!mvmsta->vif ||
2939bfcc09ddSBjoern A. Zeeb 	    mvmsta->vif->type != NL80211_IFTYPE_AP) {
2940bfcc09ddSBjoern A. Zeeb 		rcu_read_unlock();
2941bfcc09ddSBjoern A. Zeeb 		return;
2942bfcc09ddSBjoern A. Zeeb 	}
2943bfcc09ddSBjoern A. Zeeb 
2944bfcc09ddSBjoern A. Zeeb 	if (mvmsta->sleeping != sleeping) {
2945bfcc09ddSBjoern A. Zeeb 		mvmsta->sleeping = sleeping;
2946bfcc09ddSBjoern A. Zeeb 		__iwl_mvm_mac_sta_notify(mvm->hw,
2947bfcc09ddSBjoern A. Zeeb 			sleeping ? STA_NOTIFY_SLEEP : STA_NOTIFY_AWAKE,
2948bfcc09ddSBjoern A. Zeeb 			sta);
2949bfcc09ddSBjoern A. Zeeb 		ieee80211_sta_ps_transition(sta, sleeping);
2950bfcc09ddSBjoern A. Zeeb 	}
2951bfcc09ddSBjoern A. Zeeb 
2952bfcc09ddSBjoern A. Zeeb 	if (sleeping) {
2953bfcc09ddSBjoern A. Zeeb 		switch (notif->type) {
2954bfcc09ddSBjoern A. Zeeb 		case IWL_MVM_PM_EVENT_AWAKE:
2955bfcc09ddSBjoern A. Zeeb 		case IWL_MVM_PM_EVENT_ASLEEP:
2956bfcc09ddSBjoern A. Zeeb 			break;
2957bfcc09ddSBjoern A. Zeeb 		case IWL_MVM_PM_EVENT_UAPSD:
2958bfcc09ddSBjoern A. Zeeb 			ieee80211_sta_uapsd_trigger(sta, IEEE80211_NUM_TIDS);
2959bfcc09ddSBjoern A. Zeeb 			break;
2960bfcc09ddSBjoern A. Zeeb 		case IWL_MVM_PM_EVENT_PS_POLL:
2961bfcc09ddSBjoern A. Zeeb 			ieee80211_sta_pspoll(sta);
2962bfcc09ddSBjoern A. Zeeb 			break;
2963bfcc09ddSBjoern A. Zeeb 		default:
2964bfcc09ddSBjoern A. Zeeb 			break;
2965bfcc09ddSBjoern A. Zeeb 		}
2966bfcc09ddSBjoern A. Zeeb 	}
2967bfcc09ddSBjoern A. Zeeb 
2968bfcc09ddSBjoern A. Zeeb 	rcu_read_unlock();
2969bfcc09ddSBjoern A. Zeeb }
2970bfcc09ddSBjoern A. Zeeb 
2971bfcc09ddSBjoern A. Zeeb static void iwl_mvm_sta_pre_rcu_remove(struct ieee80211_hw *hw,
2972bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_vif *vif,
2973bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_sta *sta)
2974bfcc09ddSBjoern A. Zeeb {
2975bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
2976bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta);
2977bfcc09ddSBjoern A. Zeeb 
2978bfcc09ddSBjoern A. Zeeb 	/*
2979bfcc09ddSBjoern A. Zeeb 	 * This is called before mac80211 does RCU synchronisation,
2980bfcc09ddSBjoern A. Zeeb 	 * so here we already invalidate our internal RCU-protected
2981bfcc09ddSBjoern A. Zeeb 	 * station pointer. The rest of the code will thus no longer
2982bfcc09ddSBjoern A. Zeeb 	 * be able to find the station this way, and we don't rely
2983bfcc09ddSBjoern A. Zeeb 	 * on further RCU synchronisation after the sta_state()
2984bfcc09ddSBjoern A. Zeeb 	 * callback deleted the station.
2985bfcc09ddSBjoern A. Zeeb 	 */
2986bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
2987bfcc09ddSBjoern A. Zeeb 	if (sta == rcu_access_pointer(mvm->fw_id_to_mac_id[mvm_sta->sta_id]))
2988bfcc09ddSBjoern A. Zeeb 		rcu_assign_pointer(mvm->fw_id_to_mac_id[mvm_sta->sta_id],
2989bfcc09ddSBjoern A. Zeeb 				   ERR_PTR(-ENOENT));
2990bfcc09ddSBjoern A. Zeeb 
2991bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
2992bfcc09ddSBjoern A. Zeeb }
2993bfcc09ddSBjoern A. Zeeb 
2994bfcc09ddSBjoern A. Zeeb static void iwl_mvm_check_uapsd(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
2995bfcc09ddSBjoern A. Zeeb 				const u8 *bssid)
2996bfcc09ddSBjoern A. Zeeb {
2997bfcc09ddSBjoern A. Zeeb 	int i;
2998bfcc09ddSBjoern A. Zeeb 
2999bfcc09ddSBjoern A. Zeeb 	if (!test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) {
3000bfcc09ddSBjoern A. Zeeb 		struct iwl_mvm_tcm_mac *mdata;
3001bfcc09ddSBjoern A. Zeeb 
3002bfcc09ddSBjoern A. Zeeb 		mdata = &mvm->tcm.data[iwl_mvm_vif_from_mac80211(vif)->id];
3003bfcc09ddSBjoern A. Zeeb 		ewma_rate_init(&mdata->uapsd_nonagg_detect.rate);
3004bfcc09ddSBjoern A. Zeeb 		mdata->opened_rx_ba_sessions = false;
3005bfcc09ddSBjoern A. Zeeb 	}
3006bfcc09ddSBjoern A. Zeeb 
3007bfcc09ddSBjoern A. Zeeb 	if (!(mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_UAPSD_SUPPORT))
3008bfcc09ddSBjoern A. Zeeb 		return;
3009bfcc09ddSBjoern A. Zeeb 
3010bfcc09ddSBjoern A. Zeeb 	if (vif->p2p && !iwl_mvm_is_p2p_scm_uapsd_supported(mvm)) {
3011bfcc09ddSBjoern A. Zeeb 		vif->driver_flags &= ~IEEE80211_VIF_SUPPORTS_UAPSD;
3012bfcc09ddSBjoern A. Zeeb 		return;
3013bfcc09ddSBjoern A. Zeeb 	}
3014bfcc09ddSBjoern A. Zeeb 
3015bfcc09ddSBjoern A. Zeeb 	if (!vif->p2p &&
3016bfcc09ddSBjoern A. Zeeb 	    (iwlwifi_mod_params.uapsd_disable & IWL_DISABLE_UAPSD_BSS)) {
3017bfcc09ddSBjoern A. Zeeb 		vif->driver_flags &= ~IEEE80211_VIF_SUPPORTS_UAPSD;
3018bfcc09ddSBjoern A. Zeeb 		return;
3019bfcc09ddSBjoern A. Zeeb 	}
3020bfcc09ddSBjoern A. Zeeb 
3021bfcc09ddSBjoern A. Zeeb 	for (i = 0; i < IWL_MVM_UAPSD_NOAGG_LIST_LEN; i++) {
3022bfcc09ddSBjoern A. Zeeb 		if (ether_addr_equal(mvm->uapsd_noagg_bssids[i].addr, bssid)) {
3023bfcc09ddSBjoern A. Zeeb 			vif->driver_flags &= ~IEEE80211_VIF_SUPPORTS_UAPSD;
3024bfcc09ddSBjoern A. Zeeb 			return;
3025bfcc09ddSBjoern A. Zeeb 		}
3026bfcc09ddSBjoern A. Zeeb 	}
3027bfcc09ddSBjoern A. Zeeb 
3028bfcc09ddSBjoern A. Zeeb 	vif->driver_flags |= IEEE80211_VIF_SUPPORTS_UAPSD;
3029bfcc09ddSBjoern A. Zeeb }
3030bfcc09ddSBjoern A. Zeeb 
3031bfcc09ddSBjoern A. Zeeb static void
3032bfcc09ddSBjoern A. Zeeb iwl_mvm_tdls_check_trigger(struct iwl_mvm *mvm,
3033bfcc09ddSBjoern A. Zeeb 			   struct ieee80211_vif *vif, u8 *peer_addr,
3034bfcc09ddSBjoern A. Zeeb 			   enum nl80211_tdls_operation action)
3035bfcc09ddSBjoern A. Zeeb {
3036bfcc09ddSBjoern A. Zeeb 	struct iwl_fw_dbg_trigger_tlv *trig;
3037bfcc09ddSBjoern A. Zeeb 	struct iwl_fw_dbg_trigger_tdls *tdls_trig;
3038bfcc09ddSBjoern A. Zeeb 
3039bfcc09ddSBjoern A. Zeeb 	trig = iwl_fw_dbg_trigger_on(&mvm->fwrt, ieee80211_vif_to_wdev(vif),
3040bfcc09ddSBjoern A. Zeeb 				     FW_DBG_TRIGGER_TDLS);
3041bfcc09ddSBjoern A. Zeeb 	if (!trig)
3042bfcc09ddSBjoern A. Zeeb 		return;
3043bfcc09ddSBjoern A. Zeeb 
3044bfcc09ddSBjoern A. Zeeb 	tdls_trig = (void *)trig->data;
3045bfcc09ddSBjoern A. Zeeb 
3046bfcc09ddSBjoern A. Zeeb 	if (!(tdls_trig->action_bitmap & BIT(action)))
3047bfcc09ddSBjoern A. Zeeb 		return;
3048bfcc09ddSBjoern A. Zeeb 
3049bfcc09ddSBjoern A. Zeeb 	if (tdls_trig->peer_mode &&
3050bfcc09ddSBjoern A. Zeeb 	    memcmp(tdls_trig->peer, peer_addr, ETH_ALEN) != 0)
3051bfcc09ddSBjoern A. Zeeb 		return;
3052bfcc09ddSBjoern A. Zeeb 
3053bfcc09ddSBjoern A. Zeeb 	iwl_fw_dbg_collect_trig(&mvm->fwrt, trig,
3054bfcc09ddSBjoern A. Zeeb 				"TDLS event occurred, peer %pM, action %d",
3055bfcc09ddSBjoern A. Zeeb 				peer_addr, action);
3056bfcc09ddSBjoern A. Zeeb }
3057bfcc09ddSBjoern A. Zeeb 
3058bfcc09ddSBjoern A. Zeeb struct iwl_mvm_he_obss_narrow_bw_ru_data {
3059bfcc09ddSBjoern A. Zeeb 	bool tolerated;
3060bfcc09ddSBjoern A. Zeeb };
3061bfcc09ddSBjoern A. Zeeb 
3062bfcc09ddSBjoern A. Zeeb static void iwl_mvm_check_he_obss_narrow_bw_ru_iter(struct wiphy *wiphy,
3063bfcc09ddSBjoern A. Zeeb 						    struct cfg80211_bss *bss,
3064bfcc09ddSBjoern A. Zeeb 						    void *_data)
3065bfcc09ddSBjoern A. Zeeb {
3066bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_he_obss_narrow_bw_ru_data *data = _data;
3067bfcc09ddSBjoern A. Zeeb 	const struct cfg80211_bss_ies *ies;
3068bfcc09ddSBjoern A. Zeeb 	const struct element *elem;
3069bfcc09ddSBjoern A. Zeeb 
3070bfcc09ddSBjoern A. Zeeb 	rcu_read_lock();
3071bfcc09ddSBjoern A. Zeeb 	ies = rcu_dereference(bss->ies);
3072bfcc09ddSBjoern A. Zeeb 	elem = cfg80211_find_elem(WLAN_EID_EXT_CAPABILITY, ies->data,
3073bfcc09ddSBjoern A. Zeeb 				  ies->len);
3074bfcc09ddSBjoern A. Zeeb 
3075bfcc09ddSBjoern A. Zeeb 	if (!elem || elem->datalen < 10 ||
3076bfcc09ddSBjoern A. Zeeb 	    !(elem->data[10] &
3077bfcc09ddSBjoern A. Zeeb 	      WLAN_EXT_CAPA10_OBSS_NARROW_BW_RU_TOLERANCE_SUPPORT)) {
3078bfcc09ddSBjoern A. Zeeb 		data->tolerated = false;
3079bfcc09ddSBjoern A. Zeeb 	}
3080bfcc09ddSBjoern A. Zeeb 	rcu_read_unlock();
3081bfcc09ddSBjoern A. Zeeb }
3082bfcc09ddSBjoern A. Zeeb 
3083bfcc09ddSBjoern A. Zeeb static void iwl_mvm_check_he_obss_narrow_bw_ru(struct ieee80211_hw *hw,
3084bfcc09ddSBjoern A. Zeeb 					       struct ieee80211_vif *vif)
3085bfcc09ddSBjoern A. Zeeb {
3086bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3087bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_he_obss_narrow_bw_ru_data iter_data = {
3088bfcc09ddSBjoern A. Zeeb 		.tolerated = true,
3089bfcc09ddSBjoern A. Zeeb 	};
3090bfcc09ddSBjoern A. Zeeb 
3091bfcc09ddSBjoern A. Zeeb 	if (!(vif->bss_conf.chandef.chan->flags & IEEE80211_CHAN_RADAR)) {
3092bfcc09ddSBjoern A. Zeeb 		mvmvif->he_ru_2mhz_block = false;
3093bfcc09ddSBjoern A. Zeeb 		return;
3094bfcc09ddSBjoern A. Zeeb 	}
3095bfcc09ddSBjoern A. Zeeb 
3096bfcc09ddSBjoern A. Zeeb 	cfg80211_bss_iter(hw->wiphy, &vif->bss_conf.chandef,
3097bfcc09ddSBjoern A. Zeeb 			  iwl_mvm_check_he_obss_narrow_bw_ru_iter,
3098bfcc09ddSBjoern A. Zeeb 			  &iter_data);
3099bfcc09ddSBjoern A. Zeeb 
3100bfcc09ddSBjoern A. Zeeb 	/*
3101bfcc09ddSBjoern A. Zeeb 	 * If there is at least one AP on radar channel that cannot
3102bfcc09ddSBjoern A. Zeeb 	 * tolerate 26-tone RU UL OFDMA transmissions using HE TB PPDU.
3103bfcc09ddSBjoern A. Zeeb 	 */
3104bfcc09ddSBjoern A. Zeeb 	mvmvif->he_ru_2mhz_block = !iter_data.tolerated;
3105bfcc09ddSBjoern A. Zeeb }
3106bfcc09ddSBjoern A. Zeeb 
3107bfcc09ddSBjoern A. Zeeb static void iwl_mvm_reset_cca_40mhz_workaround(struct iwl_mvm *mvm,
3108bfcc09ddSBjoern A. Zeeb 					       struct ieee80211_vif *vif)
3109bfcc09ddSBjoern A. Zeeb {
3110bfcc09ddSBjoern A. Zeeb 	struct ieee80211_supported_band *sband;
3111bfcc09ddSBjoern A. Zeeb 	const struct ieee80211_sta_he_cap *he_cap;
3112bfcc09ddSBjoern A. Zeeb 
3113bfcc09ddSBjoern A. Zeeb 	if (vif->type != NL80211_IFTYPE_STATION)
3114bfcc09ddSBjoern A. Zeeb 		return;
3115bfcc09ddSBjoern A. Zeeb 
3116bfcc09ddSBjoern A. Zeeb 	if (!mvm->cca_40mhz_workaround)
3117bfcc09ddSBjoern A. Zeeb 		return;
3118bfcc09ddSBjoern A. Zeeb 
3119bfcc09ddSBjoern A. Zeeb 	/* decrement and check that we reached zero */
3120bfcc09ddSBjoern A. Zeeb 	mvm->cca_40mhz_workaround--;
3121bfcc09ddSBjoern A. Zeeb 	if (mvm->cca_40mhz_workaround)
3122bfcc09ddSBjoern A. Zeeb 		return;
3123bfcc09ddSBjoern A. Zeeb 
3124bfcc09ddSBjoern A. Zeeb 	sband = mvm->hw->wiphy->bands[NL80211_BAND_2GHZ];
3125bfcc09ddSBjoern A. Zeeb 
3126bfcc09ddSBjoern A. Zeeb 	sband->ht_cap.cap |= IEEE80211_HT_CAP_SUP_WIDTH_20_40;
3127bfcc09ddSBjoern A. Zeeb 
3128bfcc09ddSBjoern A. Zeeb 	he_cap = ieee80211_get_he_iftype_cap(sband,
3129bfcc09ddSBjoern A. Zeeb 					     ieee80211_vif_type_p2p(vif));
3130bfcc09ddSBjoern A. Zeeb 
3131bfcc09ddSBjoern A. Zeeb 	if (he_cap) {
3132bfcc09ddSBjoern A. Zeeb 		/* we know that ours is writable */
3133bfcc09ddSBjoern A. Zeeb 		struct ieee80211_sta_he_cap *he = (void *)(uintptr_t)he_cap;
3134bfcc09ddSBjoern A. Zeeb 
3135bfcc09ddSBjoern A. Zeeb 		he->he_cap_elem.phy_cap_info[0] |=
3136bfcc09ddSBjoern A. Zeeb 			IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_IN_2G;
3137bfcc09ddSBjoern A. Zeeb 	}
3138bfcc09ddSBjoern A. Zeeb }
3139bfcc09ddSBjoern A. Zeeb 
3140bfcc09ddSBjoern A. Zeeb static int iwl_mvm_mac_sta_state(struct ieee80211_hw *hw,
3141bfcc09ddSBjoern A. Zeeb 				 struct ieee80211_vif *vif,
3142bfcc09ddSBjoern A. Zeeb 				 struct ieee80211_sta *sta,
3143bfcc09ddSBjoern A. Zeeb 				 enum ieee80211_sta_state old_state,
3144bfcc09ddSBjoern A. Zeeb 				 enum ieee80211_sta_state new_state)
3145bfcc09ddSBjoern A. Zeeb {
3146bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3147bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3148bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta);
3149bfcc09ddSBjoern A. Zeeb 	int ret;
3150bfcc09ddSBjoern A. Zeeb 
3151bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_MAC80211(mvm, "station %pM state change %d->%d\n",
3152bfcc09ddSBjoern A. Zeeb 			   sta->addr, old_state, new_state);
3153bfcc09ddSBjoern A. Zeeb 
3154bfcc09ddSBjoern A. Zeeb 	/* this would be a mac80211 bug ... but don't crash */
3155bfcc09ddSBjoern A. Zeeb 	if (WARN_ON_ONCE(!mvmvif->phy_ctxt))
3156bfcc09ddSBjoern A. Zeeb 		return test_bit(IWL_MVM_STATUS_HW_RESTART_REQUESTED, &mvm->status) ? 0 : -EINVAL;
3157bfcc09ddSBjoern A. Zeeb 
3158bfcc09ddSBjoern A. Zeeb 	/*
3159bfcc09ddSBjoern A. Zeeb 	 * If we are in a STA removal flow and in DQA mode:
3160bfcc09ddSBjoern A. Zeeb 	 *
3161bfcc09ddSBjoern A. Zeeb 	 * This is after the sync_rcu part, so the queues have already been
3162bfcc09ddSBjoern A. Zeeb 	 * flushed. No more TXs on their way in mac80211's path, and no more in
3163bfcc09ddSBjoern A. Zeeb 	 * the queues.
3164bfcc09ddSBjoern A. Zeeb 	 * Also, we won't be getting any new TX frames for this station.
3165bfcc09ddSBjoern A. Zeeb 	 * What we might have are deferred TX frames that need to be taken care
3166bfcc09ddSBjoern A. Zeeb 	 * of.
3167bfcc09ddSBjoern A. Zeeb 	 *
3168bfcc09ddSBjoern A. Zeeb 	 * Drop any still-queued deferred-frame before removing the STA, and
3169bfcc09ddSBjoern A. Zeeb 	 * make sure the worker is no longer handling frames for this STA.
3170bfcc09ddSBjoern A. Zeeb 	 */
3171bfcc09ddSBjoern A. Zeeb 	if (old_state == IEEE80211_STA_NONE &&
3172bfcc09ddSBjoern A. Zeeb 	    new_state == IEEE80211_STA_NOTEXIST) {
3173bfcc09ddSBjoern A. Zeeb 		flush_work(&mvm->add_stream_wk);
3174bfcc09ddSBjoern A. Zeeb 
3175bfcc09ddSBjoern A. Zeeb 		/*
3176bfcc09ddSBjoern A. Zeeb 		 * No need to make sure deferred TX indication is off since the
3177bfcc09ddSBjoern A. Zeeb 		 * worker will already remove it if it was on
3178bfcc09ddSBjoern A. Zeeb 		 */
3179bfcc09ddSBjoern A. Zeeb 
3180bfcc09ddSBjoern A. Zeeb 		/*
3181bfcc09ddSBjoern A. Zeeb 		 * Additionally, reset the 40 MHz capability if we disconnected
3182bfcc09ddSBjoern A. Zeeb 		 * from the AP now.
3183bfcc09ddSBjoern A. Zeeb 		 */
3184bfcc09ddSBjoern A. Zeeb 		iwl_mvm_reset_cca_40mhz_workaround(mvm, vif);
3185bfcc09ddSBjoern A. Zeeb 	}
3186bfcc09ddSBjoern A. Zeeb 
3187bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
3188bfcc09ddSBjoern A. Zeeb 	/* track whether or not the station is associated */
3189bfcc09ddSBjoern A. Zeeb 	mvm_sta->sta_state = new_state;
3190bfcc09ddSBjoern A. Zeeb 
3191bfcc09ddSBjoern A. Zeeb 	if (old_state == IEEE80211_STA_NOTEXIST &&
3192bfcc09ddSBjoern A. Zeeb 	    new_state == IEEE80211_STA_NONE) {
3193bfcc09ddSBjoern A. Zeeb 		/*
3194bfcc09ddSBjoern A. Zeeb 		 * Firmware bug - it'll crash if the beacon interval is less
3195bfcc09ddSBjoern A. Zeeb 		 * than 16. We can't avoid connecting at all, so refuse the
3196bfcc09ddSBjoern A. Zeeb 		 * station state change, this will cause mac80211 to abandon
3197bfcc09ddSBjoern A. Zeeb 		 * attempts to connect to this AP, and eventually wpa_s will
3198bfcc09ddSBjoern A. Zeeb 		 * blocklist the AP...
3199bfcc09ddSBjoern A. Zeeb 		 */
3200bfcc09ddSBjoern A. Zeeb 		if (vif->type == NL80211_IFTYPE_STATION &&
3201bfcc09ddSBjoern A. Zeeb 		    vif->bss_conf.beacon_int < 16) {
3202bfcc09ddSBjoern A. Zeeb 			IWL_ERR(mvm,
3203bfcc09ddSBjoern A. Zeeb 				"AP %pM beacon interval is %d, refusing due to firmware bug!\n",
3204bfcc09ddSBjoern A. Zeeb 				sta->addr, vif->bss_conf.beacon_int);
3205bfcc09ddSBjoern A. Zeeb 			ret = -EINVAL;
3206bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
3207bfcc09ddSBjoern A. Zeeb 		}
3208bfcc09ddSBjoern A. Zeeb 
3209bfcc09ddSBjoern A. Zeeb 		if (vif->type == NL80211_IFTYPE_STATION)
3210bfcc09ddSBjoern A. Zeeb 			vif->bss_conf.he_support = sta->he_cap.has_he;
3211bfcc09ddSBjoern A. Zeeb 
3212bfcc09ddSBjoern A. Zeeb 		if (sta->tdls &&
3213bfcc09ddSBjoern A. Zeeb 		    (vif->p2p ||
3214bfcc09ddSBjoern A. Zeeb 		     iwl_mvm_tdls_sta_count(mvm, NULL) ==
3215bfcc09ddSBjoern A. Zeeb 						IWL_MVM_TDLS_STA_COUNT ||
3216bfcc09ddSBjoern A. Zeeb 		     iwl_mvm_phy_ctx_count(mvm) > 1)) {
3217bfcc09ddSBjoern A. Zeeb 			IWL_DEBUG_MAC80211(mvm, "refusing TDLS sta\n");
3218bfcc09ddSBjoern A. Zeeb 			ret = -EBUSY;
3219bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
3220bfcc09ddSBjoern A. Zeeb 		}
3221bfcc09ddSBjoern A. Zeeb 
3222bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_add_sta(mvm, vif, sta);
3223bfcc09ddSBjoern A. Zeeb 		if (sta->tdls && ret == 0) {
3224bfcc09ddSBjoern A. Zeeb 			iwl_mvm_recalc_tdls_state(mvm, vif, true);
3225bfcc09ddSBjoern A. Zeeb 			iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr,
3226bfcc09ddSBjoern A. Zeeb 						   NL80211_TDLS_SETUP);
3227bfcc09ddSBjoern A. Zeeb 		}
3228bfcc09ddSBjoern A. Zeeb 
3229bfcc09ddSBjoern A. Zeeb 		sta->max_rc_amsdu_len = 1;
3230bfcc09ddSBjoern A. Zeeb 	} else if (old_state == IEEE80211_STA_NONE &&
3231bfcc09ddSBjoern A. Zeeb 		   new_state == IEEE80211_STA_AUTH) {
3232bfcc09ddSBjoern A. Zeeb 		/*
3233bfcc09ddSBjoern A. Zeeb 		 * EBS may be disabled due to previous failures reported by FW.
3234bfcc09ddSBjoern A. Zeeb 		 * Reset EBS status here assuming environment has been changed.
3235bfcc09ddSBjoern A. Zeeb 		 */
3236bfcc09ddSBjoern A. Zeeb 		mvm->last_ebs_successful = true;
3237bfcc09ddSBjoern A. Zeeb 		iwl_mvm_check_uapsd(mvm, vif, sta->addr);
3238bfcc09ddSBjoern A. Zeeb 		ret = 0;
3239bfcc09ddSBjoern A. Zeeb 	} else if (old_state == IEEE80211_STA_AUTH &&
3240bfcc09ddSBjoern A. Zeeb 		   new_state == IEEE80211_STA_ASSOC) {
3241bfcc09ddSBjoern A. Zeeb 		if (vif->type == NL80211_IFTYPE_AP) {
3242bfcc09ddSBjoern A. Zeeb 			vif->bss_conf.he_support = sta->he_cap.has_he;
3243bfcc09ddSBjoern A. Zeeb 			mvmvif->ap_assoc_sta_count++;
3244bfcc09ddSBjoern A. Zeeb 			iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
3245bfcc09ddSBjoern A. Zeeb 			if (vif->bss_conf.he_support &&
3246bfcc09ddSBjoern A. Zeeb 			    !iwlwifi_mod_params.disable_11ax)
3247bfcc09ddSBjoern A. Zeeb 				iwl_mvm_cfg_he_sta(mvm, vif, mvm_sta->sta_id);
3248bfcc09ddSBjoern A. Zeeb 		} else if (vif->type == NL80211_IFTYPE_STATION) {
3249bfcc09ddSBjoern A. Zeeb 			vif->bss_conf.he_support = sta->he_cap.has_he;
3250bfcc09ddSBjoern A. Zeeb 
3251bfcc09ddSBjoern A. Zeeb 			mvmvif->he_ru_2mhz_block = false;
3252bfcc09ddSBjoern A. Zeeb 			if (sta->he_cap.has_he)
3253bfcc09ddSBjoern A. Zeeb 				iwl_mvm_check_he_obss_narrow_bw_ru(hw, vif);
3254bfcc09ddSBjoern A. Zeeb 
3255bfcc09ddSBjoern A. Zeeb 			iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
3256bfcc09ddSBjoern A. Zeeb 		}
3257bfcc09ddSBjoern A. Zeeb 
3258bfcc09ddSBjoern A. Zeeb 		iwl_mvm_rs_rate_init(mvm, sta, mvmvif->phy_ctxt->channel->band,
3259bfcc09ddSBjoern A. Zeeb 				     false);
3260bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_update_sta(mvm, vif, sta);
3261bfcc09ddSBjoern A. Zeeb 	} else if (old_state == IEEE80211_STA_ASSOC &&
3262bfcc09ddSBjoern A. Zeeb 		   new_state == IEEE80211_STA_AUTHORIZED) {
3263bfcc09ddSBjoern A. Zeeb 		ret = 0;
3264bfcc09ddSBjoern A. Zeeb 
3265bfcc09ddSBjoern A. Zeeb 		/* we don't support TDLS during DCM */
3266bfcc09ddSBjoern A. Zeeb 		if (iwl_mvm_phy_ctx_count(mvm) > 1)
3267bfcc09ddSBjoern A. Zeeb 			iwl_mvm_teardown_tdls_peers(mvm);
3268bfcc09ddSBjoern A. Zeeb 
3269bfcc09ddSBjoern A. Zeeb 		if (sta->tdls) {
3270bfcc09ddSBjoern A. Zeeb 			iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr,
3271bfcc09ddSBjoern A. Zeeb 						   NL80211_TDLS_ENABLE_LINK);
3272bfcc09ddSBjoern A. Zeeb 		} else {
3273bfcc09ddSBjoern A. Zeeb 			/* enable beacon filtering */
3274bfcc09ddSBjoern A. Zeeb 			WARN_ON(iwl_mvm_enable_beacon_filter(mvm, vif, 0));
3275bfcc09ddSBjoern A. Zeeb 
3276bfcc09ddSBjoern A. Zeeb 			mvmvif->authorized = 1;
3277bfcc09ddSBjoern A. Zeeb 
3278bfcc09ddSBjoern A. Zeeb 			/*
3279bfcc09ddSBjoern A. Zeeb 			 * Now that the station is authorized, i.e., keys were already
3280bfcc09ddSBjoern A. Zeeb 			 * installed, need to indicate to the FW that
3281bfcc09ddSBjoern A. Zeeb 			 * multicast data frames can be forwarded to the driver
3282bfcc09ddSBjoern A. Zeeb 			 */
3283bfcc09ddSBjoern A. Zeeb 			iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
3284bfcc09ddSBjoern A. Zeeb 		}
3285bfcc09ddSBjoern A. Zeeb 
3286bfcc09ddSBjoern A. Zeeb 		iwl_mvm_rs_rate_init(mvm, sta, mvmvif->phy_ctxt->channel->band,
3287bfcc09ddSBjoern A. Zeeb 				     true);
3288bfcc09ddSBjoern A. Zeeb 	} else if (old_state == IEEE80211_STA_AUTHORIZED &&
3289bfcc09ddSBjoern A. Zeeb 		   new_state == IEEE80211_STA_ASSOC) {
3290bfcc09ddSBjoern A. Zeeb 		if (!sta->tdls) {
3291bfcc09ddSBjoern A. Zeeb 			/* Multicast data frames are no longer allowed */
3292bfcc09ddSBjoern A. Zeeb 			iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
3293bfcc09ddSBjoern A. Zeeb 
3294bfcc09ddSBjoern A. Zeeb 			/*
3295bfcc09ddSBjoern A. Zeeb 			 * Set this after the above iwl_mvm_mac_ctxt_changed()
3296bfcc09ddSBjoern A. Zeeb 			 * to avoid sending high prio again for a little time.
3297bfcc09ddSBjoern A. Zeeb 			 */
3298bfcc09ddSBjoern A. Zeeb 			mvmvif->authorized = 0;
3299bfcc09ddSBjoern A. Zeeb 
3300bfcc09ddSBjoern A. Zeeb 			/* disable beacon filtering */
3301bfcc09ddSBjoern A. Zeeb 			ret = iwl_mvm_disable_beacon_filter(mvm, vif, 0);
3302bfcc09ddSBjoern A. Zeeb 			WARN_ON(ret &&
3303bfcc09ddSBjoern A. Zeeb 				!test_bit(IWL_MVM_STATUS_HW_RESTART_REQUESTED,
3304bfcc09ddSBjoern A. Zeeb 					  &mvm->status));
3305bfcc09ddSBjoern A. Zeeb 		}
3306bfcc09ddSBjoern A. Zeeb 		ret = 0;
3307bfcc09ddSBjoern A. Zeeb 	} else if (old_state == IEEE80211_STA_ASSOC &&
3308bfcc09ddSBjoern A. Zeeb 		   new_state == IEEE80211_STA_AUTH) {
3309bfcc09ddSBjoern A. Zeeb 		if (vif->type == NL80211_IFTYPE_AP) {
3310bfcc09ddSBjoern A. Zeeb 			mvmvif->ap_assoc_sta_count--;
3311bfcc09ddSBjoern A. Zeeb 			iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
3312*8f06a2b5SBjoern A. Zeeb 		} else if (vif->type == NL80211_IFTYPE_STATION && !sta->tdls)
3313bfcc09ddSBjoern A. Zeeb 			iwl_mvm_stop_session_protection(mvm, vif);
3314bfcc09ddSBjoern A. Zeeb 		ret = 0;
3315bfcc09ddSBjoern A. Zeeb 	} else if (old_state == IEEE80211_STA_AUTH &&
3316bfcc09ddSBjoern A. Zeeb 		   new_state == IEEE80211_STA_NONE) {
3317bfcc09ddSBjoern A. Zeeb 		ret = 0;
3318bfcc09ddSBjoern A. Zeeb 	} else if (old_state == IEEE80211_STA_NONE &&
3319bfcc09ddSBjoern A. Zeeb 		   new_state == IEEE80211_STA_NOTEXIST) {
3320*8f06a2b5SBjoern A. Zeeb 		if (vif->type == NL80211_IFTYPE_STATION && !sta->tdls)
3321*8f06a2b5SBjoern A. Zeeb 			iwl_mvm_stop_session_protection(mvm, vif);
3322bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_rm_sta(mvm, vif, sta);
3323bfcc09ddSBjoern A. Zeeb 		if (sta->tdls) {
3324bfcc09ddSBjoern A. Zeeb 			iwl_mvm_recalc_tdls_state(mvm, vif, false);
3325bfcc09ddSBjoern A. Zeeb 			iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr,
3326bfcc09ddSBjoern A. Zeeb 						   NL80211_TDLS_DISABLE_LINK);
3327bfcc09ddSBjoern A. Zeeb 		}
3328bfcc09ddSBjoern A. Zeeb 
3329bfcc09ddSBjoern A. Zeeb 		if (unlikely(ret &&
3330bfcc09ddSBjoern A. Zeeb 			     test_bit(IWL_MVM_STATUS_HW_RESTART_REQUESTED,
3331bfcc09ddSBjoern A. Zeeb 				      &mvm->status)))
3332bfcc09ddSBjoern A. Zeeb 			ret = 0;
3333bfcc09ddSBjoern A. Zeeb 	} else {
3334bfcc09ddSBjoern A. Zeeb 		ret = -EIO;
3335bfcc09ddSBjoern A. Zeeb 	}
3336bfcc09ddSBjoern A. Zeeb  out_unlock:
3337bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
3338bfcc09ddSBjoern A. Zeeb 
3339bfcc09ddSBjoern A. Zeeb 	if (sta->tdls && ret == 0) {
3340bfcc09ddSBjoern A. Zeeb 		if (old_state == IEEE80211_STA_NOTEXIST &&
3341bfcc09ddSBjoern A. Zeeb 		    new_state == IEEE80211_STA_NONE)
3342bfcc09ddSBjoern A. Zeeb 			ieee80211_reserve_tid(sta, IWL_MVM_TDLS_FW_TID);
3343bfcc09ddSBjoern A. Zeeb 		else if (old_state == IEEE80211_STA_NONE &&
3344bfcc09ddSBjoern A. Zeeb 			 new_state == IEEE80211_STA_NOTEXIST)
3345bfcc09ddSBjoern A. Zeeb 			ieee80211_unreserve_tid(sta, IWL_MVM_TDLS_FW_TID);
3346bfcc09ddSBjoern A. Zeeb 	}
3347bfcc09ddSBjoern A. Zeeb 
3348bfcc09ddSBjoern A. Zeeb 	return ret;
3349bfcc09ddSBjoern A. Zeeb }
3350bfcc09ddSBjoern A. Zeeb 
3351bfcc09ddSBjoern A. Zeeb static int iwl_mvm_mac_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
3352bfcc09ddSBjoern A. Zeeb {
3353bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3354bfcc09ddSBjoern A. Zeeb 
3355bfcc09ddSBjoern A. Zeeb 	mvm->rts_threshold = value;
3356bfcc09ddSBjoern A. Zeeb 
3357bfcc09ddSBjoern A. Zeeb 	return 0;
3358bfcc09ddSBjoern A. Zeeb }
3359bfcc09ddSBjoern A. Zeeb 
3360bfcc09ddSBjoern A. Zeeb static void iwl_mvm_sta_rc_update(struct ieee80211_hw *hw,
3361bfcc09ddSBjoern A. Zeeb 				  struct ieee80211_vif *vif,
3362bfcc09ddSBjoern A. Zeeb 				  struct ieee80211_sta *sta, u32 changed)
3363bfcc09ddSBjoern A. Zeeb {
3364bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3365bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3366bfcc09ddSBjoern A. Zeeb 
3367bfcc09ddSBjoern A. Zeeb 	if (changed & (IEEE80211_RC_BW_CHANGED |
3368bfcc09ddSBjoern A. Zeeb 		       IEEE80211_RC_SUPP_RATES_CHANGED |
3369bfcc09ddSBjoern A. Zeeb 		       IEEE80211_RC_NSS_CHANGED))
3370bfcc09ddSBjoern A. Zeeb 		iwl_mvm_rs_rate_init(mvm, sta, mvmvif->phy_ctxt->channel->band,
3371bfcc09ddSBjoern A. Zeeb 				     true);
3372bfcc09ddSBjoern A. Zeeb 
3373bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_STATION &&
3374bfcc09ddSBjoern A. Zeeb 	    changed & IEEE80211_RC_NSS_CHANGED)
3375bfcc09ddSBjoern A. Zeeb 		iwl_mvm_sf_update(mvm, vif, false);
3376bfcc09ddSBjoern A. Zeeb }
3377bfcc09ddSBjoern A. Zeeb 
3378bfcc09ddSBjoern A. Zeeb static int iwl_mvm_mac_conf_tx(struct ieee80211_hw *hw,
3379bfcc09ddSBjoern A. Zeeb 			       struct ieee80211_vif *vif, u16 ac,
3380bfcc09ddSBjoern A. Zeeb 			       const struct ieee80211_tx_queue_params *params)
3381bfcc09ddSBjoern A. Zeeb {
3382bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3383bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3384bfcc09ddSBjoern A. Zeeb 
3385bfcc09ddSBjoern A. Zeeb 	mvmvif->queue_params[ac] = *params;
3386bfcc09ddSBjoern A. Zeeb 
3387bfcc09ddSBjoern A. Zeeb 	/*
3388bfcc09ddSBjoern A. Zeeb 	 * No need to update right away, we'll get BSS_CHANGED_QOS
3389bfcc09ddSBjoern A. Zeeb 	 * The exception is P2P_DEVICE interface which needs immediate update.
3390bfcc09ddSBjoern A. Zeeb 	 */
3391bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
3392bfcc09ddSBjoern A. Zeeb 		int ret;
3393bfcc09ddSBjoern A. Zeeb 
3394bfcc09ddSBjoern A. Zeeb 		mutex_lock(&mvm->mutex);
3395bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
3396bfcc09ddSBjoern A. Zeeb 		mutex_unlock(&mvm->mutex);
3397bfcc09ddSBjoern A. Zeeb 		return ret;
3398bfcc09ddSBjoern A. Zeeb 	}
3399bfcc09ddSBjoern A. Zeeb 	return 0;
3400bfcc09ddSBjoern A. Zeeb }
3401bfcc09ddSBjoern A. Zeeb 
3402bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mac_mgd_prepare_tx(struct ieee80211_hw *hw,
3403bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_vif *vif,
3404bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_prep_tx_info *info)
3405bfcc09ddSBjoern A. Zeeb {
3406bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3407bfcc09ddSBjoern A. Zeeb 
3408bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
3409bfcc09ddSBjoern A. Zeeb 	iwl_mvm_protect_assoc(mvm, vif, info->duration);
3410bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
3411bfcc09ddSBjoern A. Zeeb }
3412bfcc09ddSBjoern A. Zeeb 
3413bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mac_mgd_complete_tx(struct ieee80211_hw *hw,
3414bfcc09ddSBjoern A. Zeeb 					struct ieee80211_vif *vif,
3415bfcc09ddSBjoern A. Zeeb 					struct ieee80211_prep_tx_info *info)
3416bfcc09ddSBjoern A. Zeeb {
3417bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3418bfcc09ddSBjoern A. Zeeb 
3419bfcc09ddSBjoern A. Zeeb 	/* for successful cases (auth/assoc), don't cancel session protection */
3420bfcc09ddSBjoern A. Zeeb 	if (info->success)
3421bfcc09ddSBjoern A. Zeeb 		return;
3422bfcc09ddSBjoern A. Zeeb 
3423bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
3424bfcc09ddSBjoern A. Zeeb 	iwl_mvm_stop_session_protection(mvm, vif);
3425bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
3426bfcc09ddSBjoern A. Zeeb }
3427bfcc09ddSBjoern A. Zeeb 
3428bfcc09ddSBjoern A. Zeeb static int iwl_mvm_mac_sched_scan_start(struct ieee80211_hw *hw,
3429bfcc09ddSBjoern A. Zeeb 					struct ieee80211_vif *vif,
3430bfcc09ddSBjoern A. Zeeb 					struct cfg80211_sched_scan_request *req,
3431bfcc09ddSBjoern A. Zeeb 					struct ieee80211_scan_ies *ies)
3432bfcc09ddSBjoern A. Zeeb {
3433bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3434bfcc09ddSBjoern A. Zeeb 
3435bfcc09ddSBjoern A. Zeeb 	int ret;
3436bfcc09ddSBjoern A. Zeeb 
3437bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
3438bfcc09ddSBjoern A. Zeeb 
3439bfcc09ddSBjoern A. Zeeb 	if (!vif->bss_conf.idle) {
3440bfcc09ddSBjoern A. Zeeb 		ret = -EBUSY;
3441bfcc09ddSBjoern A. Zeeb 		goto out;
3442bfcc09ddSBjoern A. Zeeb 	}
3443bfcc09ddSBjoern A. Zeeb 
3444bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_sched_scan_start(mvm, vif, req, ies, IWL_MVM_SCAN_SCHED);
3445bfcc09ddSBjoern A. Zeeb 
3446bfcc09ddSBjoern A. Zeeb out:
3447bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
3448bfcc09ddSBjoern A. Zeeb 	return ret;
3449bfcc09ddSBjoern A. Zeeb }
3450bfcc09ddSBjoern A. Zeeb 
3451bfcc09ddSBjoern A. Zeeb static int iwl_mvm_mac_sched_scan_stop(struct ieee80211_hw *hw,
3452bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_vif *vif)
3453bfcc09ddSBjoern A. Zeeb {
3454bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3455bfcc09ddSBjoern A. Zeeb 	int ret;
3456bfcc09ddSBjoern A. Zeeb 
3457bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
3458bfcc09ddSBjoern A. Zeeb 
3459bfcc09ddSBjoern A. Zeeb 	/* Due to a race condition, it's possible that mac80211 asks
3460bfcc09ddSBjoern A. Zeeb 	 * us to stop a sched_scan when it's already stopped.  This
3461bfcc09ddSBjoern A. Zeeb 	 * can happen, for instance, if we stopped the scan ourselves,
3462bfcc09ddSBjoern A. Zeeb 	 * called ieee80211_sched_scan_stopped() and the userspace called
3463bfcc09ddSBjoern A. Zeeb 	 * stop sched scan scan before ieee80211_sched_scan_stopped_work()
3464bfcc09ddSBjoern A. Zeeb 	 * could run.  To handle this, simply return if the scan is
3465bfcc09ddSBjoern A. Zeeb 	 * not running.
3466bfcc09ddSBjoern A. Zeeb 	*/
3467bfcc09ddSBjoern A. Zeeb 	if (!(mvm->scan_status & IWL_MVM_SCAN_SCHED)) {
3468bfcc09ddSBjoern A. Zeeb 		mutex_unlock(&mvm->mutex);
3469bfcc09ddSBjoern A. Zeeb 		return 0;
3470bfcc09ddSBjoern A. Zeeb 	}
3471bfcc09ddSBjoern A. Zeeb 
3472bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_SCHED, false);
3473bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
3474bfcc09ddSBjoern A. Zeeb 	iwl_mvm_wait_for_async_handlers(mvm);
3475bfcc09ddSBjoern A. Zeeb 
3476bfcc09ddSBjoern A. Zeeb 	return ret;
3477bfcc09ddSBjoern A. Zeeb }
3478bfcc09ddSBjoern A. Zeeb 
3479bfcc09ddSBjoern A. Zeeb static int __iwl_mvm_mac_set_key(struct ieee80211_hw *hw,
3480bfcc09ddSBjoern A. Zeeb 				 enum set_key_cmd cmd,
3481bfcc09ddSBjoern A. Zeeb 				 struct ieee80211_vif *vif,
3482bfcc09ddSBjoern A. Zeeb 				 struct ieee80211_sta *sta,
3483bfcc09ddSBjoern A. Zeeb 				 struct ieee80211_key_conf *key)
3484bfcc09ddSBjoern A. Zeeb {
3485bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3486bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3487bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_sta *mvmsta;
3488bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_key_pn *ptk_pn;
3489bfcc09ddSBjoern A. Zeeb 	int keyidx = key->keyidx;
3490bfcc09ddSBjoern A. Zeeb 	int ret, i;
3491bfcc09ddSBjoern A. Zeeb 	u8 key_offset;
3492bfcc09ddSBjoern A. Zeeb 
3493bfcc09ddSBjoern A. Zeeb 	switch (key->cipher) {
3494bfcc09ddSBjoern A. Zeeb 	case WLAN_CIPHER_SUITE_TKIP:
3495bfcc09ddSBjoern A. Zeeb 		if (!mvm->trans->trans_cfg->gen2) {
3496bfcc09ddSBjoern A. Zeeb 			key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
3497bfcc09ddSBjoern A. Zeeb 			key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE;
3498bfcc09ddSBjoern A. Zeeb 		} else if (vif->type == NL80211_IFTYPE_STATION) {
3499bfcc09ddSBjoern A. Zeeb 			key->flags |= IEEE80211_KEY_FLAG_PUT_MIC_SPACE;
3500bfcc09ddSBjoern A. Zeeb 		} else {
3501bfcc09ddSBjoern A. Zeeb 			IWL_DEBUG_MAC80211(mvm, "Use SW encryption for TKIP\n");
3502bfcc09ddSBjoern A. Zeeb 			return -EOPNOTSUPP;
3503bfcc09ddSBjoern A. Zeeb 		}
3504bfcc09ddSBjoern A. Zeeb 		break;
3505bfcc09ddSBjoern A. Zeeb 	case WLAN_CIPHER_SUITE_CCMP:
3506bfcc09ddSBjoern A. Zeeb 	case WLAN_CIPHER_SUITE_GCMP:
3507bfcc09ddSBjoern A. Zeeb 	case WLAN_CIPHER_SUITE_GCMP_256:
3508bfcc09ddSBjoern A. Zeeb 		if (!iwl_mvm_has_new_tx_api(mvm))
3509bfcc09ddSBjoern A. Zeeb 			key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE;
3510bfcc09ddSBjoern A. Zeeb 		break;
3511bfcc09ddSBjoern A. Zeeb 	case WLAN_CIPHER_SUITE_AES_CMAC:
3512bfcc09ddSBjoern A. Zeeb 	case WLAN_CIPHER_SUITE_BIP_GMAC_128:
3513bfcc09ddSBjoern A. Zeeb 	case WLAN_CIPHER_SUITE_BIP_GMAC_256:
3514bfcc09ddSBjoern A. Zeeb 		WARN_ON_ONCE(!ieee80211_hw_check(hw, MFP_CAPABLE));
3515bfcc09ddSBjoern A. Zeeb 		break;
3516bfcc09ddSBjoern A. Zeeb 	case WLAN_CIPHER_SUITE_WEP40:
3517bfcc09ddSBjoern A. Zeeb 	case WLAN_CIPHER_SUITE_WEP104:
3518bfcc09ddSBjoern A. Zeeb 		if (vif->type == NL80211_IFTYPE_STATION)
3519bfcc09ddSBjoern A. Zeeb 			break;
3520bfcc09ddSBjoern A. Zeeb 		if (iwl_mvm_has_new_tx_api(mvm))
3521bfcc09ddSBjoern A. Zeeb 			return -EOPNOTSUPP;
3522bfcc09ddSBjoern A. Zeeb 		/* support HW crypto on TX */
3523bfcc09ddSBjoern A. Zeeb 		return 0;
3524bfcc09ddSBjoern A. Zeeb 	default:
3525bfcc09ddSBjoern A. Zeeb 		/* currently FW supports only one optional cipher scheme */
3526bfcc09ddSBjoern A. Zeeb 		if (hw->n_cipher_schemes &&
3527bfcc09ddSBjoern A. Zeeb 		    hw->cipher_schemes->cipher == key->cipher)
3528bfcc09ddSBjoern A. Zeeb 			key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE;
3529bfcc09ddSBjoern A. Zeeb 		else
3530bfcc09ddSBjoern A. Zeeb 			return -EOPNOTSUPP;
3531bfcc09ddSBjoern A. Zeeb 	}
3532bfcc09ddSBjoern A. Zeeb 
3533bfcc09ddSBjoern A. Zeeb 	switch (cmd) {
3534bfcc09ddSBjoern A. Zeeb 	case SET_KEY:
3535bfcc09ddSBjoern A. Zeeb 		if (keyidx == 6 || keyidx == 7)
3536bfcc09ddSBjoern A. Zeeb 			rcu_assign_pointer(mvmvif->bcn_prot.keys[keyidx - 6],
3537bfcc09ddSBjoern A. Zeeb 					   key);
3538bfcc09ddSBjoern A. Zeeb 
3539bfcc09ddSBjoern A. Zeeb 		if ((vif->type == NL80211_IFTYPE_ADHOC ||
3540bfcc09ddSBjoern A. Zeeb 		     vif->type == NL80211_IFTYPE_AP) && !sta) {
3541bfcc09ddSBjoern A. Zeeb 			/*
3542bfcc09ddSBjoern A. Zeeb 			 * GTK on AP interface is a TX-only key, return 0;
3543bfcc09ddSBjoern A. Zeeb 			 * on IBSS they're per-station and because we're lazy
3544bfcc09ddSBjoern A. Zeeb 			 * we don't support them for RX, so do the same.
3545bfcc09ddSBjoern A. Zeeb 			 * CMAC/GMAC in AP/IBSS modes must be done in software.
3546bfcc09ddSBjoern A. Zeeb 			 */
3547bfcc09ddSBjoern A. Zeeb 			if (key->cipher == WLAN_CIPHER_SUITE_AES_CMAC ||
3548bfcc09ddSBjoern A. Zeeb 			    key->cipher == WLAN_CIPHER_SUITE_BIP_GMAC_128 ||
3549bfcc09ddSBjoern A. Zeeb 			    key->cipher == WLAN_CIPHER_SUITE_BIP_GMAC_256) {
3550bfcc09ddSBjoern A. Zeeb 				ret = -EOPNOTSUPP;
3551bfcc09ddSBjoern A. Zeeb 				break;
3552bfcc09ddSBjoern A. Zeeb 			}
3553bfcc09ddSBjoern A. Zeeb 
3554bfcc09ddSBjoern A. Zeeb 			if (key->cipher != WLAN_CIPHER_SUITE_GCMP &&
3555bfcc09ddSBjoern A. Zeeb 			    key->cipher != WLAN_CIPHER_SUITE_GCMP_256 &&
3556bfcc09ddSBjoern A. Zeeb 			    !iwl_mvm_has_new_tx_api(mvm)) {
3557bfcc09ddSBjoern A. Zeeb 				key->hw_key_idx = STA_KEY_IDX_INVALID;
3558bfcc09ddSBjoern A. Zeeb 				ret = 0;
3559bfcc09ddSBjoern A. Zeeb 				break;
3560bfcc09ddSBjoern A. Zeeb 			}
3561bfcc09ddSBjoern A. Zeeb 
3562bfcc09ddSBjoern A. Zeeb 			if (!mvmvif->ap_ibss_active) {
3563bfcc09ddSBjoern A. Zeeb 				for (i = 0;
3564bfcc09ddSBjoern A. Zeeb 				     i < ARRAY_SIZE(mvmvif->ap_early_keys);
3565bfcc09ddSBjoern A. Zeeb 				     i++) {
3566bfcc09ddSBjoern A. Zeeb 					if (!mvmvif->ap_early_keys[i]) {
3567bfcc09ddSBjoern A. Zeeb 						mvmvif->ap_early_keys[i] = key;
3568bfcc09ddSBjoern A. Zeeb 						break;
3569bfcc09ddSBjoern A. Zeeb 					}
3570bfcc09ddSBjoern A. Zeeb 				}
3571bfcc09ddSBjoern A. Zeeb 
3572bfcc09ddSBjoern A. Zeeb 				if (i >= ARRAY_SIZE(mvmvif->ap_early_keys))
3573bfcc09ddSBjoern A. Zeeb 					ret = -ENOSPC;
3574bfcc09ddSBjoern A. Zeeb 				else
3575bfcc09ddSBjoern A. Zeeb 					ret = 0;
3576bfcc09ddSBjoern A. Zeeb 
3577bfcc09ddSBjoern A. Zeeb 				break;
3578bfcc09ddSBjoern A. Zeeb 			}
3579bfcc09ddSBjoern A. Zeeb 		}
3580bfcc09ddSBjoern A. Zeeb 
3581bfcc09ddSBjoern A. Zeeb 		/* During FW restart, in order to restore the state as it was,
3582bfcc09ddSBjoern A. Zeeb 		 * don't try to reprogram keys we previously failed for.
3583bfcc09ddSBjoern A. Zeeb 		 */
3584bfcc09ddSBjoern A. Zeeb 		if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) &&
3585bfcc09ddSBjoern A. Zeeb 		    key->hw_key_idx == STA_KEY_IDX_INVALID) {
3586bfcc09ddSBjoern A. Zeeb 			IWL_DEBUG_MAC80211(mvm,
3587bfcc09ddSBjoern A. Zeeb 					   "skip invalid idx key programming during restart\n");
3588bfcc09ddSBjoern A. Zeeb 			ret = 0;
3589bfcc09ddSBjoern A. Zeeb 			break;
3590bfcc09ddSBjoern A. Zeeb 		}
3591bfcc09ddSBjoern A. Zeeb 
3592bfcc09ddSBjoern A. Zeeb 		if (!test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) &&
3593bfcc09ddSBjoern A. Zeeb 		    sta && iwl_mvm_has_new_rx_api(mvm) &&
3594bfcc09ddSBjoern A. Zeeb 		    key->flags & IEEE80211_KEY_FLAG_PAIRWISE &&
3595bfcc09ddSBjoern A. Zeeb 		    (key->cipher == WLAN_CIPHER_SUITE_CCMP ||
3596bfcc09ddSBjoern A. Zeeb 		     key->cipher == WLAN_CIPHER_SUITE_GCMP ||
3597bfcc09ddSBjoern A. Zeeb 		     key->cipher == WLAN_CIPHER_SUITE_GCMP_256)) {
3598bfcc09ddSBjoern A. Zeeb 			struct ieee80211_key_seq seq;
3599bfcc09ddSBjoern A. Zeeb 			int tid, q;
3600bfcc09ddSBjoern A. Zeeb 
3601bfcc09ddSBjoern A. Zeeb 			mvmsta = iwl_mvm_sta_from_mac80211(sta);
3602bfcc09ddSBjoern A. Zeeb 			WARN_ON(rcu_access_pointer(mvmsta->ptk_pn[keyidx]));
3603bfcc09ddSBjoern A. Zeeb 			ptk_pn = kzalloc(struct_size(ptk_pn, q,
3604bfcc09ddSBjoern A. Zeeb 						     mvm->trans->num_rx_queues),
3605bfcc09ddSBjoern A. Zeeb 					 GFP_KERNEL);
3606bfcc09ddSBjoern A. Zeeb 			if (!ptk_pn) {
3607bfcc09ddSBjoern A. Zeeb 				ret = -ENOMEM;
3608bfcc09ddSBjoern A. Zeeb 				break;
3609bfcc09ddSBjoern A. Zeeb 			}
3610bfcc09ddSBjoern A. Zeeb 
3611bfcc09ddSBjoern A. Zeeb 			for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) {
3612bfcc09ddSBjoern A. Zeeb 				ieee80211_get_key_rx_seq(key, tid, &seq);
3613bfcc09ddSBjoern A. Zeeb 				for (q = 0; q < mvm->trans->num_rx_queues; q++)
3614bfcc09ddSBjoern A. Zeeb 					memcpy(ptk_pn->q[q].pn[tid],
3615bfcc09ddSBjoern A. Zeeb 					       seq.ccmp.pn,
3616bfcc09ddSBjoern A. Zeeb 					       IEEE80211_CCMP_PN_LEN);
3617bfcc09ddSBjoern A. Zeeb 			}
3618bfcc09ddSBjoern A. Zeeb 
3619bfcc09ddSBjoern A. Zeeb 			rcu_assign_pointer(mvmsta->ptk_pn[keyidx], ptk_pn);
3620bfcc09ddSBjoern A. Zeeb 		}
3621bfcc09ddSBjoern A. Zeeb 
3622bfcc09ddSBjoern A. Zeeb 		/* in HW restart reuse the index, otherwise request a new one */
3623bfcc09ddSBjoern A. Zeeb 		if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status))
3624bfcc09ddSBjoern A. Zeeb 			key_offset = key->hw_key_idx;
3625bfcc09ddSBjoern A. Zeeb 		else
3626bfcc09ddSBjoern A. Zeeb 			key_offset = STA_KEY_IDX_INVALID;
3627bfcc09ddSBjoern A. Zeeb 
3628bfcc09ddSBjoern A. Zeeb 		IWL_DEBUG_MAC80211(mvm, "set hwcrypto key\n");
3629bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_set_sta_key(mvm, vif, sta, key, key_offset);
3630bfcc09ddSBjoern A. Zeeb 		if (ret) {
3631bfcc09ddSBjoern A. Zeeb 			IWL_WARN(mvm, "set key failed\n");
3632bfcc09ddSBjoern A. Zeeb 			key->hw_key_idx = STA_KEY_IDX_INVALID;
3633bfcc09ddSBjoern A. Zeeb 			/*
3634bfcc09ddSBjoern A. Zeeb 			 * can't add key for RX, but we don't need it
3635bfcc09ddSBjoern A. Zeeb 			 * in the device for TX so still return 0,
3636bfcc09ddSBjoern A. Zeeb 			 * unless we have new TX API where we cannot
3637bfcc09ddSBjoern A. Zeeb 			 * put key material into the TX_CMD
3638bfcc09ddSBjoern A. Zeeb 			 */
3639bfcc09ddSBjoern A. Zeeb 			if (iwl_mvm_has_new_tx_api(mvm))
3640bfcc09ddSBjoern A. Zeeb 				ret = -EOPNOTSUPP;
3641bfcc09ddSBjoern A. Zeeb 			else
3642bfcc09ddSBjoern A. Zeeb 				ret = 0;
3643bfcc09ddSBjoern A. Zeeb 		}
3644bfcc09ddSBjoern A. Zeeb 
3645bfcc09ddSBjoern A. Zeeb 		break;
3646bfcc09ddSBjoern A. Zeeb 	case DISABLE_KEY:
3647bfcc09ddSBjoern A. Zeeb 		if (keyidx == 6 || keyidx == 7)
3648bfcc09ddSBjoern A. Zeeb 			RCU_INIT_POINTER(mvmvif->bcn_prot.keys[keyidx - 6],
3649bfcc09ddSBjoern A. Zeeb 					 NULL);
3650bfcc09ddSBjoern A. Zeeb 
3651bfcc09ddSBjoern A. Zeeb 		ret = -ENOENT;
3652bfcc09ddSBjoern A. Zeeb 		for (i = 0; i < ARRAY_SIZE(mvmvif->ap_early_keys); i++) {
3653bfcc09ddSBjoern A. Zeeb 			if (mvmvif->ap_early_keys[i] == key) {
3654bfcc09ddSBjoern A. Zeeb 				mvmvif->ap_early_keys[i] = NULL;
3655bfcc09ddSBjoern A. Zeeb 				ret = 0;
3656bfcc09ddSBjoern A. Zeeb 			}
3657bfcc09ddSBjoern A. Zeeb 		}
3658bfcc09ddSBjoern A. Zeeb 
3659bfcc09ddSBjoern A. Zeeb 		/* found in pending list - don't do anything else */
3660bfcc09ddSBjoern A. Zeeb 		if (ret == 0)
3661bfcc09ddSBjoern A. Zeeb 			break;
3662bfcc09ddSBjoern A. Zeeb 
3663bfcc09ddSBjoern A. Zeeb 		if (key->hw_key_idx == STA_KEY_IDX_INVALID) {
3664bfcc09ddSBjoern A. Zeeb 			ret = 0;
3665bfcc09ddSBjoern A. Zeeb 			break;
3666bfcc09ddSBjoern A. Zeeb 		}
3667bfcc09ddSBjoern A. Zeeb 
3668bfcc09ddSBjoern A. Zeeb 		if (sta && iwl_mvm_has_new_rx_api(mvm) &&
3669bfcc09ddSBjoern A. Zeeb 		    key->flags & IEEE80211_KEY_FLAG_PAIRWISE &&
3670bfcc09ddSBjoern A. Zeeb 		    (key->cipher == WLAN_CIPHER_SUITE_CCMP ||
3671bfcc09ddSBjoern A. Zeeb 		     key->cipher == WLAN_CIPHER_SUITE_GCMP ||
3672bfcc09ddSBjoern A. Zeeb 		     key->cipher == WLAN_CIPHER_SUITE_GCMP_256)) {
3673bfcc09ddSBjoern A. Zeeb 			mvmsta = iwl_mvm_sta_from_mac80211(sta);
3674bfcc09ddSBjoern A. Zeeb 			ptk_pn = rcu_dereference_protected(
3675bfcc09ddSBjoern A. Zeeb 						mvmsta->ptk_pn[keyidx],
3676bfcc09ddSBjoern A. Zeeb 						lockdep_is_held(&mvm->mutex));
3677bfcc09ddSBjoern A. Zeeb 			RCU_INIT_POINTER(mvmsta->ptk_pn[keyidx], NULL);
3678bfcc09ddSBjoern A. Zeeb 			if (ptk_pn)
3679bfcc09ddSBjoern A. Zeeb 				kfree_rcu(ptk_pn, rcu_head);
3680bfcc09ddSBjoern A. Zeeb 		}
3681bfcc09ddSBjoern A. Zeeb 
3682bfcc09ddSBjoern A. Zeeb 		IWL_DEBUG_MAC80211(mvm, "disable hwcrypto key\n");
3683bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_remove_sta_key(mvm, vif, sta, key);
3684bfcc09ddSBjoern A. Zeeb 		break;
3685bfcc09ddSBjoern A. Zeeb 	default:
3686bfcc09ddSBjoern A. Zeeb 		ret = -EINVAL;
3687bfcc09ddSBjoern A. Zeeb 	}
3688bfcc09ddSBjoern A. Zeeb 
3689bfcc09ddSBjoern A. Zeeb 	return ret;
3690bfcc09ddSBjoern A. Zeeb }
3691bfcc09ddSBjoern A. Zeeb 
3692bfcc09ddSBjoern A. Zeeb static int iwl_mvm_mac_set_key(struct ieee80211_hw *hw,
3693bfcc09ddSBjoern A. Zeeb 			       enum set_key_cmd cmd,
3694bfcc09ddSBjoern A. Zeeb 			       struct ieee80211_vif *vif,
3695bfcc09ddSBjoern A. Zeeb 			       struct ieee80211_sta *sta,
3696bfcc09ddSBjoern A. Zeeb 			       struct ieee80211_key_conf *key)
3697bfcc09ddSBjoern A. Zeeb {
3698bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3699bfcc09ddSBjoern A. Zeeb 	int ret;
3700bfcc09ddSBjoern A. Zeeb 
3701bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
3702bfcc09ddSBjoern A. Zeeb 	ret = __iwl_mvm_mac_set_key(hw, cmd, vif, sta, key);
3703bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
3704bfcc09ddSBjoern A. Zeeb 
3705bfcc09ddSBjoern A. Zeeb 	return ret;
3706bfcc09ddSBjoern A. Zeeb }
3707bfcc09ddSBjoern A. Zeeb 
3708bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mac_update_tkip_key(struct ieee80211_hw *hw,
3709bfcc09ddSBjoern A. Zeeb 					struct ieee80211_vif *vif,
3710bfcc09ddSBjoern A. Zeeb 					struct ieee80211_key_conf *keyconf,
3711bfcc09ddSBjoern A. Zeeb 					struct ieee80211_sta *sta,
3712bfcc09ddSBjoern A. Zeeb 					u32 iv32, u16 *phase1key)
3713bfcc09ddSBjoern A. Zeeb {
3714bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3715bfcc09ddSBjoern A. Zeeb 
3716bfcc09ddSBjoern A. Zeeb 	if (keyconf->hw_key_idx == STA_KEY_IDX_INVALID)
3717bfcc09ddSBjoern A. Zeeb 		return;
3718bfcc09ddSBjoern A. Zeeb 
3719bfcc09ddSBjoern A. Zeeb 	iwl_mvm_update_tkip_key(mvm, vif, keyconf, sta, iv32, phase1key);
3720bfcc09ddSBjoern A. Zeeb }
3721bfcc09ddSBjoern A. Zeeb 
3722bfcc09ddSBjoern A. Zeeb 
3723bfcc09ddSBjoern A. Zeeb static bool iwl_mvm_rx_aux_roc(struct iwl_notif_wait_data *notif_wait,
3724bfcc09ddSBjoern A. Zeeb 			       struct iwl_rx_packet *pkt, void *data)
3725bfcc09ddSBjoern A. Zeeb {
3726bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm =
3727bfcc09ddSBjoern A. Zeeb 		container_of(notif_wait, struct iwl_mvm, notif_wait);
3728bfcc09ddSBjoern A. Zeeb 	struct iwl_hs20_roc_res *resp;
3729bfcc09ddSBjoern A. Zeeb 	int resp_len = iwl_rx_packet_payload_len(pkt);
3730bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_time_event_data *te_data = data;
3731bfcc09ddSBjoern A. Zeeb 
3732bfcc09ddSBjoern A. Zeeb 	if (WARN_ON(pkt->hdr.cmd != HOT_SPOT_CMD))
3733bfcc09ddSBjoern A. Zeeb 		return true;
3734bfcc09ddSBjoern A. Zeeb 
3735bfcc09ddSBjoern A. Zeeb 	if (WARN_ON_ONCE(resp_len != sizeof(*resp))) {
3736bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "Invalid HOT_SPOT_CMD response\n");
3737bfcc09ddSBjoern A. Zeeb 		return true;
3738bfcc09ddSBjoern A. Zeeb 	}
3739bfcc09ddSBjoern A. Zeeb 
3740bfcc09ddSBjoern A. Zeeb 	resp = (void *)pkt->data;
3741bfcc09ddSBjoern A. Zeeb 
3742bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_TE(mvm,
3743bfcc09ddSBjoern A. Zeeb 		     "Aux ROC: Received response from ucode: status=%d uid=%d\n",
3744bfcc09ddSBjoern A. Zeeb 		     resp->status, resp->event_unique_id);
3745bfcc09ddSBjoern A. Zeeb 
3746bfcc09ddSBjoern A. Zeeb 	te_data->uid = le32_to_cpu(resp->event_unique_id);
3747bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_TE(mvm, "TIME_EVENT_CMD response - UID = 0x%x\n",
3748bfcc09ddSBjoern A. Zeeb 		     te_data->uid);
3749bfcc09ddSBjoern A. Zeeb 
3750bfcc09ddSBjoern A. Zeeb 	spin_lock_bh(&mvm->time_event_lock);
3751bfcc09ddSBjoern A. Zeeb 	list_add_tail(&te_data->list, &mvm->aux_roc_te_list);
3752bfcc09ddSBjoern A. Zeeb 	spin_unlock_bh(&mvm->time_event_lock);
3753bfcc09ddSBjoern A. Zeeb 
3754bfcc09ddSBjoern A. Zeeb 	return true;
3755bfcc09ddSBjoern A. Zeeb }
3756bfcc09ddSBjoern A. Zeeb 
3757bfcc09ddSBjoern A. Zeeb #define AUX_ROC_MIN_DURATION MSEC_TO_TU(100)
3758bfcc09ddSBjoern A. Zeeb #define AUX_ROC_MIN_DELAY MSEC_TO_TU(200)
3759bfcc09ddSBjoern A. Zeeb #define AUX_ROC_MAX_DELAY MSEC_TO_TU(600)
3760bfcc09ddSBjoern A. Zeeb #define AUX_ROC_SAFETY_BUFFER MSEC_TO_TU(20)
3761bfcc09ddSBjoern A. Zeeb #define AUX_ROC_MIN_SAFETY_BUFFER MSEC_TO_TU(10)
3762bfcc09ddSBjoern A. Zeeb static int iwl_mvm_send_aux_roc_cmd(struct iwl_mvm *mvm,
3763bfcc09ddSBjoern A. Zeeb 				    struct ieee80211_channel *channel,
3764bfcc09ddSBjoern A. Zeeb 				    struct ieee80211_vif *vif,
3765bfcc09ddSBjoern A. Zeeb 				    int duration)
3766bfcc09ddSBjoern A. Zeeb {
3767bfcc09ddSBjoern A. Zeeb 	int res;
3768bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3769bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_time_event_data *te_data = &mvmvif->hs_time_event_data;
3770bfcc09ddSBjoern A. Zeeb 	static const u16 time_event_response[] = { HOT_SPOT_CMD };
3771bfcc09ddSBjoern A. Zeeb 	struct iwl_notification_wait wait_time_event;
3772bfcc09ddSBjoern A. Zeeb 	u32 dtim_interval = vif->bss_conf.dtim_period *
3773bfcc09ddSBjoern A. Zeeb 		vif->bss_conf.beacon_int;
3774bfcc09ddSBjoern A. Zeeb 	u32 req_dur, delay;
3775bfcc09ddSBjoern A. Zeeb 	struct iwl_hs20_roc_req aux_roc_req = {
3776bfcc09ddSBjoern A. Zeeb 		.action = cpu_to_le32(FW_CTXT_ACTION_ADD),
3777bfcc09ddSBjoern A. Zeeb 		.id_and_color =
3778bfcc09ddSBjoern A. Zeeb 			cpu_to_le32(FW_CMD_ID_AND_COLOR(MAC_INDEX_AUX, 0)),
3779bfcc09ddSBjoern A. Zeeb 		.sta_id_and_color = cpu_to_le32(mvm->aux_sta.sta_id),
3780bfcc09ddSBjoern A. Zeeb 	};
3781bfcc09ddSBjoern A. Zeeb 	struct iwl_hs20_roc_req_tail *tail = iwl_mvm_chan_info_cmd_tail(mvm,
3782bfcc09ddSBjoern A. Zeeb 		&aux_roc_req.channel_info);
3783bfcc09ddSBjoern A. Zeeb 	u16 len = sizeof(aux_roc_req) - iwl_mvm_chan_info_padding(mvm);
3784bfcc09ddSBjoern A. Zeeb 
3785bfcc09ddSBjoern A. Zeeb 	/* Set the channel info data */
3786bfcc09ddSBjoern A. Zeeb 	iwl_mvm_set_chan_info(mvm, &aux_roc_req.channel_info, channel->hw_value,
3787bfcc09ddSBjoern A. Zeeb 			      iwl_mvm_phy_band_from_nl80211(channel->band),
3788bfcc09ddSBjoern A. Zeeb 			      PHY_VHT_CHANNEL_MODE20,
3789bfcc09ddSBjoern A. Zeeb 			      0);
3790bfcc09ddSBjoern A. Zeeb 
3791bfcc09ddSBjoern A. Zeeb 	/* Set the time and duration */
3792bfcc09ddSBjoern A. Zeeb 	tail->apply_time = cpu_to_le32(iwl_mvm_get_systime(mvm));
3793bfcc09ddSBjoern A. Zeeb 
3794bfcc09ddSBjoern A. Zeeb 	delay = AUX_ROC_MIN_DELAY;
3795bfcc09ddSBjoern A. Zeeb 	req_dur = MSEC_TO_TU(duration);
3796bfcc09ddSBjoern A. Zeeb 
3797bfcc09ddSBjoern A. Zeeb 	/*
3798bfcc09ddSBjoern A. Zeeb 	 * If we are associated we want the delay time to be at least one
3799bfcc09ddSBjoern A. Zeeb 	 * dtim interval so that the FW can wait until after the DTIM and
3800bfcc09ddSBjoern A. Zeeb 	 * then start the time event, this will potentially allow us to
3801bfcc09ddSBjoern A. Zeeb 	 * remain off-channel for the max duration.
3802bfcc09ddSBjoern A. Zeeb 	 * Since we want to use almost a whole dtim interval we would also
3803bfcc09ddSBjoern A. Zeeb 	 * like the delay to be for 2-3 dtim intervals, in case there are
3804bfcc09ddSBjoern A. Zeeb 	 * other time events with higher priority.
3805bfcc09ddSBjoern A. Zeeb 	 */
3806bfcc09ddSBjoern A. Zeeb 	if (vif->bss_conf.assoc) {
3807bfcc09ddSBjoern A. Zeeb 		delay = min_t(u32, dtim_interval * 3, AUX_ROC_MAX_DELAY);
3808bfcc09ddSBjoern A. Zeeb 		/* We cannot remain off-channel longer than the DTIM interval */
3809bfcc09ddSBjoern A. Zeeb 		if (dtim_interval <= req_dur) {
3810bfcc09ddSBjoern A. Zeeb 			req_dur = dtim_interval - AUX_ROC_SAFETY_BUFFER;
3811bfcc09ddSBjoern A. Zeeb 			if (req_dur <= AUX_ROC_MIN_DURATION)
3812bfcc09ddSBjoern A. Zeeb 				req_dur = dtim_interval -
3813bfcc09ddSBjoern A. Zeeb 					AUX_ROC_MIN_SAFETY_BUFFER;
3814bfcc09ddSBjoern A. Zeeb 		}
3815bfcc09ddSBjoern A. Zeeb 	}
3816bfcc09ddSBjoern A. Zeeb 
3817bfcc09ddSBjoern A. Zeeb 	tail->duration = cpu_to_le32(req_dur);
3818bfcc09ddSBjoern A. Zeeb 	tail->apply_time_max_delay = cpu_to_le32(delay);
3819bfcc09ddSBjoern A. Zeeb 
3820bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_TE(mvm,
3821bfcc09ddSBjoern A. Zeeb 		     "ROC: Requesting to remain on channel %u for %ums\n",
3822bfcc09ddSBjoern A. Zeeb 		     channel->hw_value, req_dur);
3823bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_TE(mvm,
3824bfcc09ddSBjoern A. Zeeb 		     "\t(requested = %ums, max_delay = %ums, dtim_interval = %ums)\n",
3825bfcc09ddSBjoern A. Zeeb 		     duration, delay, dtim_interval);
3826bfcc09ddSBjoern A. Zeeb 
3827bfcc09ddSBjoern A. Zeeb 	/* Set the node address */
3828bfcc09ddSBjoern A. Zeeb 	memcpy(tail->node_addr, vif->addr, ETH_ALEN);
3829bfcc09ddSBjoern A. Zeeb 
3830bfcc09ddSBjoern A. Zeeb 	lockdep_assert_held(&mvm->mutex);
3831bfcc09ddSBjoern A. Zeeb 
3832bfcc09ddSBjoern A. Zeeb 	spin_lock_bh(&mvm->time_event_lock);
3833bfcc09ddSBjoern A. Zeeb 
3834bfcc09ddSBjoern A. Zeeb 	if (WARN_ON(te_data->id == HOT_SPOT_CMD)) {
3835bfcc09ddSBjoern A. Zeeb 		spin_unlock_bh(&mvm->time_event_lock);
3836bfcc09ddSBjoern A. Zeeb 		return -EIO;
3837bfcc09ddSBjoern A. Zeeb 	}
3838bfcc09ddSBjoern A. Zeeb 
3839bfcc09ddSBjoern A. Zeeb 	te_data->vif = vif;
3840bfcc09ddSBjoern A. Zeeb 	te_data->duration = duration;
3841bfcc09ddSBjoern A. Zeeb 	te_data->id = HOT_SPOT_CMD;
3842bfcc09ddSBjoern A. Zeeb 
3843bfcc09ddSBjoern A. Zeeb 	spin_unlock_bh(&mvm->time_event_lock);
3844bfcc09ddSBjoern A. Zeeb 
3845bfcc09ddSBjoern A. Zeeb 	/*
3846bfcc09ddSBjoern A. Zeeb 	 * Use a notification wait, which really just processes the
3847bfcc09ddSBjoern A. Zeeb 	 * command response and doesn't wait for anything, in order
3848bfcc09ddSBjoern A. Zeeb 	 * to be able to process the response and get the UID inside
3849bfcc09ddSBjoern A. Zeeb 	 * the RX path. Using CMD_WANT_SKB doesn't work because it
3850bfcc09ddSBjoern A. Zeeb 	 * stores the buffer and then wakes up this thread, by which
3851bfcc09ddSBjoern A. Zeeb 	 * time another notification (that the time event started)
3852bfcc09ddSBjoern A. Zeeb 	 * might already be processed unsuccessfully.
3853bfcc09ddSBjoern A. Zeeb 	 */
3854bfcc09ddSBjoern A. Zeeb 	iwl_init_notification_wait(&mvm->notif_wait, &wait_time_event,
3855bfcc09ddSBjoern A. Zeeb 				   time_event_response,
3856bfcc09ddSBjoern A. Zeeb 				   ARRAY_SIZE(time_event_response),
3857bfcc09ddSBjoern A. Zeeb 				   iwl_mvm_rx_aux_roc, te_data);
3858bfcc09ddSBjoern A. Zeeb 
3859bfcc09ddSBjoern A. Zeeb 	res = iwl_mvm_send_cmd_pdu(mvm, HOT_SPOT_CMD, 0, len,
3860bfcc09ddSBjoern A. Zeeb 				   &aux_roc_req);
3861bfcc09ddSBjoern A. Zeeb 
3862bfcc09ddSBjoern A. Zeeb 	if (res) {
3863bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "Couldn't send HOT_SPOT_CMD: %d\n", res);
3864bfcc09ddSBjoern A. Zeeb 		iwl_remove_notification(&mvm->notif_wait, &wait_time_event);
3865bfcc09ddSBjoern A. Zeeb 		goto out_clear_te;
3866bfcc09ddSBjoern A. Zeeb 	}
3867bfcc09ddSBjoern A. Zeeb 
3868bfcc09ddSBjoern A. Zeeb 	/* No need to wait for anything, so just pass 1 (0 isn't valid) */
3869bfcc09ddSBjoern A. Zeeb 	res = iwl_wait_notification(&mvm->notif_wait, &wait_time_event, 1);
3870bfcc09ddSBjoern A. Zeeb 	/* should never fail */
3871bfcc09ddSBjoern A. Zeeb 	WARN_ON_ONCE(res);
3872bfcc09ddSBjoern A. Zeeb 
3873bfcc09ddSBjoern A. Zeeb 	if (res) {
3874bfcc09ddSBjoern A. Zeeb  out_clear_te:
3875bfcc09ddSBjoern A. Zeeb 		spin_lock_bh(&mvm->time_event_lock);
3876bfcc09ddSBjoern A. Zeeb 		iwl_mvm_te_clear_data(mvm, te_data);
3877bfcc09ddSBjoern A. Zeeb 		spin_unlock_bh(&mvm->time_event_lock);
3878bfcc09ddSBjoern A. Zeeb 	}
3879bfcc09ddSBjoern A. Zeeb 
3880bfcc09ddSBjoern A. Zeeb 	return res;
3881bfcc09ddSBjoern A. Zeeb }
3882bfcc09ddSBjoern A. Zeeb 
3883bfcc09ddSBjoern A. Zeeb static int iwl_mvm_roc(struct ieee80211_hw *hw,
3884bfcc09ddSBjoern A. Zeeb 		       struct ieee80211_vif *vif,
3885bfcc09ddSBjoern A. Zeeb 		       struct ieee80211_channel *channel,
3886bfcc09ddSBjoern A. Zeeb 		       int duration,
3887bfcc09ddSBjoern A. Zeeb 		       enum ieee80211_roc_type type)
3888bfcc09ddSBjoern A. Zeeb {
3889bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
3890bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
3891bfcc09ddSBjoern A. Zeeb 	struct cfg80211_chan_def chandef;
3892bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_phy_ctxt *phy_ctxt;
3893bfcc09ddSBjoern A. Zeeb 	bool band_change_removal;
3894bfcc09ddSBjoern A. Zeeb 	int ret, i;
3895bfcc09ddSBjoern A. Zeeb 
3896bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_MAC80211(mvm, "enter (%d, %d, %d)\n", channel->hw_value,
3897bfcc09ddSBjoern A. Zeeb 			   duration, type);
3898bfcc09ddSBjoern A. Zeeb 
3899bfcc09ddSBjoern A. Zeeb 	/*
3900bfcc09ddSBjoern A. Zeeb 	 * Flush the done work, just in case it's still pending, so that
3901bfcc09ddSBjoern A. Zeeb 	 * the work it does can complete and we can accept new frames.
3902bfcc09ddSBjoern A. Zeeb 	 */
3903bfcc09ddSBjoern A. Zeeb 	flush_work(&mvm->roc_done_wk);
3904bfcc09ddSBjoern A. Zeeb 
3905bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
3906bfcc09ddSBjoern A. Zeeb 
3907bfcc09ddSBjoern A. Zeeb 	switch (vif->type) {
3908bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_STATION:
3909bfcc09ddSBjoern A. Zeeb 		if (fw_has_capa(&mvm->fw->ucode_capa,
3910bfcc09ddSBjoern A. Zeeb 				IWL_UCODE_TLV_CAPA_HOTSPOT_SUPPORT)) {
3911bfcc09ddSBjoern A. Zeeb 			/* Use aux roc framework (HS20) */
3912bfcc09ddSBjoern A. Zeeb 			if (iwl_fw_lookup_cmd_ver(mvm->fw, LONG_GROUP,
3913bfcc09ddSBjoern A. Zeeb 						  ADD_STA, 0) >= 12) {
3914bfcc09ddSBjoern A. Zeeb 				u32 lmac_id;
3915bfcc09ddSBjoern A. Zeeb 
3916bfcc09ddSBjoern A. Zeeb 				lmac_id = iwl_mvm_get_lmac_id(mvm->fw,
3917bfcc09ddSBjoern A. Zeeb 							      channel->band);
3918bfcc09ddSBjoern A. Zeeb 				ret = iwl_mvm_add_aux_sta(mvm, lmac_id);
3919bfcc09ddSBjoern A. Zeeb 				if (WARN(ret,
3920bfcc09ddSBjoern A. Zeeb 					 "Failed to allocate aux station"))
3921bfcc09ddSBjoern A. Zeeb 					goto out_unlock;
3922bfcc09ddSBjoern A. Zeeb 			}
3923bfcc09ddSBjoern A. Zeeb 			ret = iwl_mvm_send_aux_roc_cmd(mvm, channel,
3924bfcc09ddSBjoern A. Zeeb 						       vif, duration);
3925bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
3926bfcc09ddSBjoern A. Zeeb 		}
3927bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "hotspot not supported\n");
3928bfcc09ddSBjoern A. Zeeb 		ret = -EINVAL;
3929bfcc09ddSBjoern A. Zeeb 		goto out_unlock;
3930bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_P2P_DEVICE:
3931bfcc09ddSBjoern A. Zeeb 		/* handle below */
3932bfcc09ddSBjoern A. Zeeb 		break;
3933bfcc09ddSBjoern A. Zeeb 	default:
3934bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "vif isn't P2P_DEVICE: %d\n", vif->type);
3935bfcc09ddSBjoern A. Zeeb 		ret = -EINVAL;
3936bfcc09ddSBjoern A. Zeeb 		goto out_unlock;
3937bfcc09ddSBjoern A. Zeeb 	}
3938bfcc09ddSBjoern A. Zeeb 
3939bfcc09ddSBjoern A. Zeeb 	for (i = 0; i < NUM_PHY_CTX; i++) {
3940bfcc09ddSBjoern A. Zeeb 		phy_ctxt = &mvm->phy_ctxts[i];
3941bfcc09ddSBjoern A. Zeeb 		if (phy_ctxt->ref == 0 || mvmvif->phy_ctxt == phy_ctxt)
3942bfcc09ddSBjoern A. Zeeb 			continue;
3943bfcc09ddSBjoern A. Zeeb 
3944bfcc09ddSBjoern A. Zeeb 		if (phy_ctxt->ref && channel == phy_ctxt->channel) {
3945bfcc09ddSBjoern A. Zeeb 			/*
3946bfcc09ddSBjoern A. Zeeb 			 * Unbind the P2P_DEVICE from the current PHY context,
3947bfcc09ddSBjoern A. Zeeb 			 * and if the PHY context is not used remove it.
3948bfcc09ddSBjoern A. Zeeb 			 */
3949bfcc09ddSBjoern A. Zeeb 			ret = iwl_mvm_binding_remove_vif(mvm, vif);
3950bfcc09ddSBjoern A. Zeeb 			if (WARN(ret, "Failed unbinding P2P_DEVICE\n"))
3951bfcc09ddSBjoern A. Zeeb 				goto out_unlock;
3952bfcc09ddSBjoern A. Zeeb 
3953bfcc09ddSBjoern A. Zeeb 			iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
3954bfcc09ddSBjoern A. Zeeb 
3955bfcc09ddSBjoern A. Zeeb 			/* Bind the P2P_DEVICE to the current PHY Context */
3956bfcc09ddSBjoern A. Zeeb 			mvmvif->phy_ctxt = phy_ctxt;
3957bfcc09ddSBjoern A. Zeeb 
3958bfcc09ddSBjoern A. Zeeb 			ret = iwl_mvm_binding_add_vif(mvm, vif);
3959bfcc09ddSBjoern A. Zeeb 			if (WARN(ret, "Failed binding P2P_DEVICE\n"))
3960bfcc09ddSBjoern A. Zeeb 				goto out_unlock;
3961bfcc09ddSBjoern A. Zeeb 
3962bfcc09ddSBjoern A. Zeeb 			iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt);
3963bfcc09ddSBjoern A. Zeeb 			goto schedule_time_event;
3964bfcc09ddSBjoern A. Zeeb 		}
3965bfcc09ddSBjoern A. Zeeb 	}
3966bfcc09ddSBjoern A. Zeeb 
3967bfcc09ddSBjoern A. Zeeb 	/* Need to update the PHY context only if the ROC channel changed */
3968bfcc09ddSBjoern A. Zeeb 	if (channel == mvmvif->phy_ctxt->channel)
3969bfcc09ddSBjoern A. Zeeb 		goto schedule_time_event;
3970bfcc09ddSBjoern A. Zeeb 
3971bfcc09ddSBjoern A. Zeeb 	cfg80211_chandef_create(&chandef, channel, NL80211_CHAN_NO_HT);
3972bfcc09ddSBjoern A. Zeeb 
3973bfcc09ddSBjoern A. Zeeb 	/*
3974bfcc09ddSBjoern A. Zeeb 	 * Check if the remain-on-channel is on a different band and that
3975bfcc09ddSBjoern A. Zeeb 	 * requires context removal, see iwl_mvm_phy_ctxt_changed(). If
3976bfcc09ddSBjoern A. Zeeb 	 * so, we'll need to release and then re-configure here, since we
3977bfcc09ddSBjoern A. Zeeb 	 * must not remove a PHY context that's part of a binding.
3978bfcc09ddSBjoern A. Zeeb 	 */
3979bfcc09ddSBjoern A. Zeeb 	band_change_removal =
3980bfcc09ddSBjoern A. Zeeb 		fw_has_capa(&mvm->fw->ucode_capa,
3981bfcc09ddSBjoern A. Zeeb 			    IWL_UCODE_TLV_CAPA_BINDING_CDB_SUPPORT) &&
3982bfcc09ddSBjoern A. Zeeb 		mvmvif->phy_ctxt->channel->band != chandef.chan->band;
3983bfcc09ddSBjoern A. Zeeb 
3984bfcc09ddSBjoern A. Zeeb 	if (mvmvif->phy_ctxt->ref == 1 && !band_change_removal) {
3985bfcc09ddSBjoern A. Zeeb 		/*
3986bfcc09ddSBjoern A. Zeeb 		 * Change the PHY context configuration as it is currently
3987bfcc09ddSBjoern A. Zeeb 		 * referenced only by the P2P Device MAC (and we can modify it)
3988bfcc09ddSBjoern A. Zeeb 		 */
3989bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_phy_ctxt_changed(mvm, mvmvif->phy_ctxt,
3990bfcc09ddSBjoern A. Zeeb 					       &chandef, 1, 1);
3991bfcc09ddSBjoern A. Zeeb 		if (ret)
3992bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
3993bfcc09ddSBjoern A. Zeeb 	} else {
3994bfcc09ddSBjoern A. Zeeb 		/*
3995bfcc09ddSBjoern A. Zeeb 		 * The PHY context is shared with other MACs (or we're trying to
3996bfcc09ddSBjoern A. Zeeb 		 * switch bands), so remove the P2P Device from the binding,
3997bfcc09ddSBjoern A. Zeeb 		 * allocate an new PHY context and create a new binding.
3998bfcc09ddSBjoern A. Zeeb 		 */
3999bfcc09ddSBjoern A. Zeeb 		phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm);
4000bfcc09ddSBjoern A. Zeeb 		if (!phy_ctxt) {
4001bfcc09ddSBjoern A. Zeeb 			ret = -ENOSPC;
4002bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
4003bfcc09ddSBjoern A. Zeeb 		}
4004bfcc09ddSBjoern A. Zeeb 
4005bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &chandef,
4006bfcc09ddSBjoern A. Zeeb 					       1, 1);
4007bfcc09ddSBjoern A. Zeeb 		if (ret) {
4008bfcc09ddSBjoern A. Zeeb 			IWL_ERR(mvm, "Failed to change PHY context\n");
4009bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
4010bfcc09ddSBjoern A. Zeeb 		}
4011bfcc09ddSBjoern A. Zeeb 
4012bfcc09ddSBjoern A. Zeeb 		/* Unbind the P2P_DEVICE from the current PHY context */
4013bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_binding_remove_vif(mvm, vif);
4014bfcc09ddSBjoern A. Zeeb 		if (WARN(ret, "Failed unbinding P2P_DEVICE\n"))
4015bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
4016bfcc09ddSBjoern A. Zeeb 
4017bfcc09ddSBjoern A. Zeeb 		iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt);
4018bfcc09ddSBjoern A. Zeeb 
4019bfcc09ddSBjoern A. Zeeb 		/* Bind the P2P_DEVICE to the new allocated PHY context */
4020bfcc09ddSBjoern A. Zeeb 		mvmvif->phy_ctxt = phy_ctxt;
4021bfcc09ddSBjoern A. Zeeb 
4022bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_binding_add_vif(mvm, vif);
4023bfcc09ddSBjoern A. Zeeb 		if (WARN(ret, "Failed binding P2P_DEVICE\n"))
4024bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
4025bfcc09ddSBjoern A. Zeeb 
4026bfcc09ddSBjoern A. Zeeb 		iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt);
4027bfcc09ddSBjoern A. Zeeb 	}
4028bfcc09ddSBjoern A. Zeeb 
4029bfcc09ddSBjoern A. Zeeb schedule_time_event:
4030bfcc09ddSBjoern A. Zeeb 	/* Schedule the time events */
4031bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_start_p2p_roc(mvm, vif, duration, type);
4032bfcc09ddSBjoern A. Zeeb 
4033bfcc09ddSBjoern A. Zeeb out_unlock:
4034bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4035bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_MAC80211(mvm, "leave\n");
4036bfcc09ddSBjoern A. Zeeb 	return ret;
4037bfcc09ddSBjoern A. Zeeb }
4038bfcc09ddSBjoern A. Zeeb 
4039bfcc09ddSBjoern A. Zeeb static int iwl_mvm_cancel_roc(struct ieee80211_hw *hw,
4040bfcc09ddSBjoern A. Zeeb 			      struct ieee80211_vif *vif)
4041bfcc09ddSBjoern A. Zeeb {
4042bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4043bfcc09ddSBjoern A. Zeeb 
4044bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_MAC80211(mvm, "enter\n");
4045bfcc09ddSBjoern A. Zeeb 
4046bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4047bfcc09ddSBjoern A. Zeeb 	iwl_mvm_stop_roc(mvm, vif);
4048bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4049bfcc09ddSBjoern A. Zeeb 
4050bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_MAC80211(mvm, "leave\n");
4051bfcc09ddSBjoern A. Zeeb 	return 0;
4052bfcc09ddSBjoern A. Zeeb }
4053bfcc09ddSBjoern A. Zeeb 
4054bfcc09ddSBjoern A. Zeeb struct iwl_mvm_ftm_responder_iter_data {
4055bfcc09ddSBjoern A. Zeeb 	bool responder;
4056bfcc09ddSBjoern A. Zeeb 	struct ieee80211_chanctx_conf *ctx;
4057bfcc09ddSBjoern A. Zeeb };
4058bfcc09ddSBjoern A. Zeeb 
4059bfcc09ddSBjoern A. Zeeb static void iwl_mvm_ftm_responder_chanctx_iter(void *_data, u8 *mac,
4060bfcc09ddSBjoern A. Zeeb 					       struct ieee80211_vif *vif)
4061bfcc09ddSBjoern A. Zeeb {
4062bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_ftm_responder_iter_data *data = _data;
4063bfcc09ddSBjoern A. Zeeb 
4064bfcc09ddSBjoern A. Zeeb 	if (rcu_access_pointer(vif->chanctx_conf) == data->ctx &&
4065bfcc09ddSBjoern A. Zeeb 	    vif->type == NL80211_IFTYPE_AP && vif->bss_conf.ftmr_params)
4066bfcc09ddSBjoern A. Zeeb 		data->responder = true;
4067bfcc09ddSBjoern A. Zeeb }
4068bfcc09ddSBjoern A. Zeeb 
4069bfcc09ddSBjoern A. Zeeb static bool iwl_mvm_is_ftm_responder_chanctx(struct iwl_mvm *mvm,
4070bfcc09ddSBjoern A. Zeeb 					     struct ieee80211_chanctx_conf *ctx)
4071bfcc09ddSBjoern A. Zeeb {
4072bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_ftm_responder_iter_data data = {
4073bfcc09ddSBjoern A. Zeeb 		.responder = false,
4074bfcc09ddSBjoern A. Zeeb 		.ctx = ctx,
4075bfcc09ddSBjoern A. Zeeb 	};
4076bfcc09ddSBjoern A. Zeeb 
4077bfcc09ddSBjoern A. Zeeb 	ieee80211_iterate_active_interfaces_atomic(mvm->hw,
4078bfcc09ddSBjoern A. Zeeb 					IEEE80211_IFACE_ITER_NORMAL,
4079bfcc09ddSBjoern A. Zeeb 					iwl_mvm_ftm_responder_chanctx_iter,
4080bfcc09ddSBjoern A. Zeeb 					&data);
4081bfcc09ddSBjoern A. Zeeb 	return data.responder;
4082bfcc09ddSBjoern A. Zeeb }
4083bfcc09ddSBjoern A. Zeeb 
4084bfcc09ddSBjoern A. Zeeb static int __iwl_mvm_add_chanctx(struct iwl_mvm *mvm,
4085bfcc09ddSBjoern A. Zeeb 				 struct ieee80211_chanctx_conf *ctx)
4086bfcc09ddSBjoern A. Zeeb {
4087bfcc09ddSBjoern A. Zeeb 	u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
4088bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_phy_ctxt *phy_ctxt;
4089bfcc09ddSBjoern A. Zeeb 	bool responder = iwl_mvm_is_ftm_responder_chanctx(mvm, ctx);
4090bfcc09ddSBjoern A. Zeeb 	struct cfg80211_chan_def *def = responder ? &ctx->def : &ctx->min_def;
4091bfcc09ddSBjoern A. Zeeb 	int ret;
4092bfcc09ddSBjoern A. Zeeb 
4093bfcc09ddSBjoern A. Zeeb 	lockdep_assert_held(&mvm->mutex);
4094bfcc09ddSBjoern A. Zeeb 
4095bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_MAC80211(mvm, "Add channel context\n");
4096bfcc09ddSBjoern A. Zeeb 
4097bfcc09ddSBjoern A. Zeeb 	phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm);
4098bfcc09ddSBjoern A. Zeeb 	if (!phy_ctxt) {
4099bfcc09ddSBjoern A. Zeeb 		ret = -ENOSPC;
4100bfcc09ddSBjoern A. Zeeb 		goto out;
4101bfcc09ddSBjoern A. Zeeb 	}
4102bfcc09ddSBjoern A. Zeeb 
4103bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, def,
4104bfcc09ddSBjoern A. Zeeb 				       ctx->rx_chains_static,
4105bfcc09ddSBjoern A. Zeeb 				       ctx->rx_chains_dynamic);
4106bfcc09ddSBjoern A. Zeeb 	if (ret) {
4107bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "Failed to add PHY context\n");
4108bfcc09ddSBjoern A. Zeeb 		goto out;
4109bfcc09ddSBjoern A. Zeeb 	}
4110bfcc09ddSBjoern A. Zeeb 
4111bfcc09ddSBjoern A. Zeeb 	iwl_mvm_phy_ctxt_ref(mvm, phy_ctxt);
4112bfcc09ddSBjoern A. Zeeb 	*phy_ctxt_id = phy_ctxt->id;
4113bfcc09ddSBjoern A. Zeeb out:
4114bfcc09ddSBjoern A. Zeeb 	return ret;
4115bfcc09ddSBjoern A. Zeeb }
4116bfcc09ddSBjoern A. Zeeb 
4117bfcc09ddSBjoern A. Zeeb static int iwl_mvm_add_chanctx(struct ieee80211_hw *hw,
4118bfcc09ddSBjoern A. Zeeb 			       struct ieee80211_chanctx_conf *ctx)
4119bfcc09ddSBjoern A. Zeeb {
4120bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4121bfcc09ddSBjoern A. Zeeb 	int ret;
4122bfcc09ddSBjoern A. Zeeb 
4123bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4124bfcc09ddSBjoern A. Zeeb 	ret = __iwl_mvm_add_chanctx(mvm, ctx);
4125bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4126bfcc09ddSBjoern A. Zeeb 
4127bfcc09ddSBjoern A. Zeeb 	return ret;
4128bfcc09ddSBjoern A. Zeeb }
4129bfcc09ddSBjoern A. Zeeb 
4130bfcc09ddSBjoern A. Zeeb static void __iwl_mvm_remove_chanctx(struct iwl_mvm *mvm,
4131bfcc09ddSBjoern A. Zeeb 				     struct ieee80211_chanctx_conf *ctx)
4132bfcc09ddSBjoern A. Zeeb {
4133bfcc09ddSBjoern A. Zeeb 	u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
4134bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id];
4135bfcc09ddSBjoern A. Zeeb 
4136bfcc09ddSBjoern A. Zeeb 	lockdep_assert_held(&mvm->mutex);
4137bfcc09ddSBjoern A. Zeeb 
4138bfcc09ddSBjoern A. Zeeb 	iwl_mvm_phy_ctxt_unref(mvm, phy_ctxt);
4139bfcc09ddSBjoern A. Zeeb }
4140bfcc09ddSBjoern A. Zeeb 
4141bfcc09ddSBjoern A. Zeeb static void iwl_mvm_remove_chanctx(struct ieee80211_hw *hw,
4142bfcc09ddSBjoern A. Zeeb 				   struct ieee80211_chanctx_conf *ctx)
4143bfcc09ddSBjoern A. Zeeb {
4144bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4145bfcc09ddSBjoern A. Zeeb 
4146bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4147bfcc09ddSBjoern A. Zeeb 	__iwl_mvm_remove_chanctx(mvm, ctx);
4148bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4149bfcc09ddSBjoern A. Zeeb }
4150bfcc09ddSBjoern A. Zeeb 
4151bfcc09ddSBjoern A. Zeeb static void iwl_mvm_change_chanctx(struct ieee80211_hw *hw,
4152bfcc09ddSBjoern A. Zeeb 				   struct ieee80211_chanctx_conf *ctx,
4153bfcc09ddSBjoern A. Zeeb 				   u32 changed)
4154bfcc09ddSBjoern A. Zeeb {
4155bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4156bfcc09ddSBjoern A. Zeeb 	u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
4157bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id];
4158bfcc09ddSBjoern A. Zeeb 	bool responder = iwl_mvm_is_ftm_responder_chanctx(mvm, ctx);
4159bfcc09ddSBjoern A. Zeeb 	struct cfg80211_chan_def *def = responder ? &ctx->def : &ctx->min_def;
4160bfcc09ddSBjoern A. Zeeb 
4161bfcc09ddSBjoern A. Zeeb 	if (WARN_ONCE((phy_ctxt->ref > 1) &&
4162bfcc09ddSBjoern A. Zeeb 		      (changed & ~(IEEE80211_CHANCTX_CHANGE_WIDTH |
4163bfcc09ddSBjoern A. Zeeb 				   IEEE80211_CHANCTX_CHANGE_RX_CHAINS |
4164bfcc09ddSBjoern A. Zeeb 				   IEEE80211_CHANCTX_CHANGE_RADAR |
4165bfcc09ddSBjoern A. Zeeb 				   IEEE80211_CHANCTX_CHANGE_MIN_WIDTH)),
4166bfcc09ddSBjoern A. Zeeb 		      "Cannot change PHY. Ref=%d, changed=0x%X\n",
4167bfcc09ddSBjoern A. Zeeb 		      phy_ctxt->ref, changed))
4168bfcc09ddSBjoern A. Zeeb 		return;
4169bfcc09ddSBjoern A. Zeeb 
4170bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4171bfcc09ddSBjoern A. Zeeb 
4172bfcc09ddSBjoern A. Zeeb 	/* we are only changing the min_width, may be a noop */
4173bfcc09ddSBjoern A. Zeeb 	if (changed == IEEE80211_CHANCTX_CHANGE_MIN_WIDTH) {
4174bfcc09ddSBjoern A. Zeeb 		if (phy_ctxt->width == def->width)
4175bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
4176bfcc09ddSBjoern A. Zeeb 
4177bfcc09ddSBjoern A. Zeeb 		/* we are just toggling between 20_NOHT and 20 */
4178bfcc09ddSBjoern A. Zeeb 		if (phy_ctxt->width <= NL80211_CHAN_WIDTH_20 &&
4179bfcc09ddSBjoern A. Zeeb 		    def->width <= NL80211_CHAN_WIDTH_20)
4180bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
4181bfcc09ddSBjoern A. Zeeb 	}
4182bfcc09ddSBjoern A. Zeeb 
4183bfcc09ddSBjoern A. Zeeb 	iwl_mvm_bt_coex_vif_change(mvm);
4184bfcc09ddSBjoern A. Zeeb 	iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, def,
4185bfcc09ddSBjoern A. Zeeb 				 ctx->rx_chains_static,
4186bfcc09ddSBjoern A. Zeeb 				 ctx->rx_chains_dynamic);
4187bfcc09ddSBjoern A. Zeeb 
4188bfcc09ddSBjoern A. Zeeb out_unlock:
4189bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4190bfcc09ddSBjoern A. Zeeb }
4191bfcc09ddSBjoern A. Zeeb 
4192bfcc09ddSBjoern A. Zeeb static int __iwl_mvm_assign_vif_chanctx(struct iwl_mvm *mvm,
4193bfcc09ddSBjoern A. Zeeb 					struct ieee80211_vif *vif,
4194bfcc09ddSBjoern A. Zeeb 					struct ieee80211_chanctx_conf *ctx,
4195bfcc09ddSBjoern A. Zeeb 					bool switching_chanctx)
4196bfcc09ddSBjoern A. Zeeb {
4197bfcc09ddSBjoern A. Zeeb 	u16 *phy_ctxt_id = (u16 *)ctx->drv_priv;
4198bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id];
4199bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
4200bfcc09ddSBjoern A. Zeeb 	int ret;
4201bfcc09ddSBjoern A. Zeeb 
4202bfcc09ddSBjoern A. Zeeb 	lockdep_assert_held(&mvm->mutex);
4203bfcc09ddSBjoern A. Zeeb 
4204bfcc09ddSBjoern A. Zeeb 	mvmvif->phy_ctxt = phy_ctxt;
4205bfcc09ddSBjoern A. Zeeb 
4206bfcc09ddSBjoern A. Zeeb 	switch (vif->type) {
4207bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_AP:
4208bfcc09ddSBjoern A. Zeeb 		/* only needed if we're switching chanctx (i.e. during CSA) */
4209bfcc09ddSBjoern A. Zeeb 		if (switching_chanctx) {
4210bfcc09ddSBjoern A. Zeeb 			mvmvif->ap_ibss_active = true;
4211bfcc09ddSBjoern A. Zeeb 			break;
4212bfcc09ddSBjoern A. Zeeb 		}
4213bfcc09ddSBjoern A. Zeeb 		fallthrough;
4214bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_ADHOC:
4215bfcc09ddSBjoern A. Zeeb 		/*
4216bfcc09ddSBjoern A. Zeeb 		 * The AP binding flow is handled as part of the start_ap flow
4217bfcc09ddSBjoern A. Zeeb 		 * (in bss_info_changed), similarly for IBSS.
4218bfcc09ddSBjoern A. Zeeb 		 */
4219bfcc09ddSBjoern A. Zeeb 		ret = 0;
4220bfcc09ddSBjoern A. Zeeb 		goto out;
4221bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_STATION:
4222bfcc09ddSBjoern A. Zeeb 		mvmvif->csa_bcn_pending = false;
4223bfcc09ddSBjoern A. Zeeb 		break;
4224bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_MONITOR:
4225bfcc09ddSBjoern A. Zeeb 		/* always disable PS when a monitor interface is active */
4226bfcc09ddSBjoern A. Zeeb 		mvmvif->ps_disabled = true;
4227bfcc09ddSBjoern A. Zeeb 		break;
4228bfcc09ddSBjoern A. Zeeb 	default:
4229bfcc09ddSBjoern A. Zeeb 		ret = -EINVAL;
4230bfcc09ddSBjoern A. Zeeb 		goto out;
4231bfcc09ddSBjoern A. Zeeb 	}
4232bfcc09ddSBjoern A. Zeeb 
4233bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_binding_add_vif(mvm, vif);
4234bfcc09ddSBjoern A. Zeeb 	if (ret)
4235bfcc09ddSBjoern A. Zeeb 		goto out;
4236bfcc09ddSBjoern A. Zeeb 
4237bfcc09ddSBjoern A. Zeeb 	/*
4238bfcc09ddSBjoern A. Zeeb 	 * Power state must be updated before quotas,
4239bfcc09ddSBjoern A. Zeeb 	 * otherwise fw will complain.
4240bfcc09ddSBjoern A. Zeeb 	 */
4241bfcc09ddSBjoern A. Zeeb 	iwl_mvm_power_update_mac(mvm);
4242bfcc09ddSBjoern A. Zeeb 
4243bfcc09ddSBjoern A. Zeeb 	/* Setting the quota at this stage is only required for monitor
4244bfcc09ddSBjoern A. Zeeb 	 * interfaces. For the other types, the bss_info changed flow
4245bfcc09ddSBjoern A. Zeeb 	 * will handle quota settings.
4246bfcc09ddSBjoern A. Zeeb 	 */
4247bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_MONITOR) {
4248bfcc09ddSBjoern A. Zeeb 		mvmvif->monitor_active = true;
4249bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_update_quotas(mvm, false, NULL);
4250bfcc09ddSBjoern A. Zeeb 		if (ret)
4251bfcc09ddSBjoern A. Zeeb 			goto out_remove_binding;
4252bfcc09ddSBjoern A. Zeeb 
4253bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_add_snif_sta(mvm, vif);
4254bfcc09ddSBjoern A. Zeeb 		if (ret)
4255bfcc09ddSBjoern A. Zeeb 			goto out_remove_binding;
4256bfcc09ddSBjoern A. Zeeb 
4257bfcc09ddSBjoern A. Zeeb 	}
4258bfcc09ddSBjoern A. Zeeb 
4259bfcc09ddSBjoern A. Zeeb 	/* Handle binding during CSA */
4260bfcc09ddSBjoern A. Zeeb 	if (vif->type == NL80211_IFTYPE_AP) {
4261bfcc09ddSBjoern A. Zeeb 		iwl_mvm_update_quotas(mvm, false, NULL);
4262bfcc09ddSBjoern A. Zeeb 		iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL);
4263bfcc09ddSBjoern A. Zeeb 	}
4264bfcc09ddSBjoern A. Zeeb 
4265bfcc09ddSBjoern A. Zeeb 	if (switching_chanctx && vif->type == NL80211_IFTYPE_STATION) {
4266bfcc09ddSBjoern A. Zeeb 		mvmvif->csa_bcn_pending = true;
4267bfcc09ddSBjoern A. Zeeb 
4268bfcc09ddSBjoern A. Zeeb 		if (!fw_has_capa(&mvm->fw->ucode_capa,
4269bfcc09ddSBjoern A. Zeeb 				 IWL_UCODE_TLV_CAPA_CHANNEL_SWITCH_CMD)) {
4270bfcc09ddSBjoern A. Zeeb 			u32 duration = 3 * vif->bss_conf.beacon_int;
4271bfcc09ddSBjoern A. Zeeb 
4272bfcc09ddSBjoern A. Zeeb 			/* Protect the session to make sure we hear the first
4273bfcc09ddSBjoern A. Zeeb 			 * beacon on the new channel.
4274bfcc09ddSBjoern A. Zeeb 			 */
4275bfcc09ddSBjoern A. Zeeb 			iwl_mvm_protect_session(mvm, vif, duration, duration,
4276bfcc09ddSBjoern A. Zeeb 						vif->bss_conf.beacon_int / 2,
4277bfcc09ddSBjoern A. Zeeb 						true);
4278bfcc09ddSBjoern A. Zeeb 		}
4279bfcc09ddSBjoern A. Zeeb 
4280bfcc09ddSBjoern A. Zeeb 		iwl_mvm_update_quotas(mvm, false, NULL);
4281bfcc09ddSBjoern A. Zeeb 	}
4282bfcc09ddSBjoern A. Zeeb 
4283bfcc09ddSBjoern A. Zeeb 	goto out;
4284bfcc09ddSBjoern A. Zeeb 
4285bfcc09ddSBjoern A. Zeeb out_remove_binding:
4286bfcc09ddSBjoern A. Zeeb 	iwl_mvm_binding_remove_vif(mvm, vif);
4287bfcc09ddSBjoern A. Zeeb 	iwl_mvm_power_update_mac(mvm);
4288bfcc09ddSBjoern A. Zeeb out:
4289bfcc09ddSBjoern A. Zeeb 	if (ret)
4290bfcc09ddSBjoern A. Zeeb 		mvmvif->phy_ctxt = NULL;
4291bfcc09ddSBjoern A. Zeeb 	return ret;
4292bfcc09ddSBjoern A. Zeeb }
4293bfcc09ddSBjoern A. Zeeb static int iwl_mvm_assign_vif_chanctx(struct ieee80211_hw *hw,
4294bfcc09ddSBjoern A. Zeeb 				      struct ieee80211_vif *vif,
4295bfcc09ddSBjoern A. Zeeb 				      struct ieee80211_chanctx_conf *ctx)
4296bfcc09ddSBjoern A. Zeeb {
4297bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4298bfcc09ddSBjoern A. Zeeb 	int ret;
4299bfcc09ddSBjoern A. Zeeb 
4300bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4301bfcc09ddSBjoern A. Zeeb 	ret = __iwl_mvm_assign_vif_chanctx(mvm, vif, ctx, false);
4302bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4303bfcc09ddSBjoern A. Zeeb 
4304bfcc09ddSBjoern A. Zeeb 	return ret;
4305bfcc09ddSBjoern A. Zeeb }
4306bfcc09ddSBjoern A. Zeeb 
4307bfcc09ddSBjoern A. Zeeb static void __iwl_mvm_unassign_vif_chanctx(struct iwl_mvm *mvm,
4308bfcc09ddSBjoern A. Zeeb 					   struct ieee80211_vif *vif,
4309bfcc09ddSBjoern A. Zeeb 					   struct ieee80211_chanctx_conf *ctx,
4310bfcc09ddSBjoern A. Zeeb 					   bool switching_chanctx)
4311bfcc09ddSBjoern A. Zeeb {
4312bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
4313bfcc09ddSBjoern A. Zeeb 	struct ieee80211_vif *disabled_vif = NULL;
4314bfcc09ddSBjoern A. Zeeb 
4315bfcc09ddSBjoern A. Zeeb 	lockdep_assert_held(&mvm->mutex);
4316bfcc09ddSBjoern A. Zeeb 	iwl_mvm_remove_time_event(mvm, mvmvif, &mvmvif->time_event_data);
4317bfcc09ddSBjoern A. Zeeb 
4318bfcc09ddSBjoern A. Zeeb 	switch (vif->type) {
4319bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_ADHOC:
4320bfcc09ddSBjoern A. Zeeb 		goto out;
4321bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_MONITOR:
4322bfcc09ddSBjoern A. Zeeb 		mvmvif->monitor_active = false;
4323bfcc09ddSBjoern A. Zeeb 		mvmvif->ps_disabled = false;
4324bfcc09ddSBjoern A. Zeeb 		iwl_mvm_rm_snif_sta(mvm, vif);
4325bfcc09ddSBjoern A. Zeeb 		break;
4326bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_AP:
4327bfcc09ddSBjoern A. Zeeb 		/* This part is triggered only during CSA */
4328bfcc09ddSBjoern A. Zeeb 		if (!switching_chanctx || !mvmvif->ap_ibss_active)
4329bfcc09ddSBjoern A. Zeeb 			goto out;
4330bfcc09ddSBjoern A. Zeeb 
4331bfcc09ddSBjoern A. Zeeb 		mvmvif->csa_countdown = false;
4332bfcc09ddSBjoern A. Zeeb 
4333bfcc09ddSBjoern A. Zeeb 		/* Set CS bit on all the stations */
4334bfcc09ddSBjoern A. Zeeb 		iwl_mvm_modify_all_sta_disable_tx(mvm, mvmvif, true);
4335bfcc09ddSBjoern A. Zeeb 
4336bfcc09ddSBjoern A. Zeeb 		/* Save blocked iface, the timeout is set on the next beacon */
4337bfcc09ddSBjoern A. Zeeb 		rcu_assign_pointer(mvm->csa_tx_blocked_vif, vif);
4338bfcc09ddSBjoern A. Zeeb 
4339bfcc09ddSBjoern A. Zeeb 		mvmvif->ap_ibss_active = false;
4340bfcc09ddSBjoern A. Zeeb 		break;
4341bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_STATION:
4342bfcc09ddSBjoern A. Zeeb 		if (!switching_chanctx)
4343bfcc09ddSBjoern A. Zeeb 			break;
4344bfcc09ddSBjoern A. Zeeb 
4345bfcc09ddSBjoern A. Zeeb 		disabled_vif = vif;
4346bfcc09ddSBjoern A. Zeeb 
4347bfcc09ddSBjoern A. Zeeb 		if (!fw_has_capa(&mvm->fw->ucode_capa,
4348bfcc09ddSBjoern A. Zeeb 				 IWL_UCODE_TLV_CAPA_CHANNEL_SWITCH_CMD))
4349bfcc09ddSBjoern A. Zeeb 			iwl_mvm_mac_ctxt_changed(mvm, vif, true, NULL);
4350bfcc09ddSBjoern A. Zeeb 		break;
4351bfcc09ddSBjoern A. Zeeb 	default:
4352bfcc09ddSBjoern A. Zeeb 		break;
4353bfcc09ddSBjoern A. Zeeb 	}
4354bfcc09ddSBjoern A. Zeeb 
4355bfcc09ddSBjoern A. Zeeb 	iwl_mvm_update_quotas(mvm, false, disabled_vif);
4356bfcc09ddSBjoern A. Zeeb 	iwl_mvm_binding_remove_vif(mvm, vif);
4357bfcc09ddSBjoern A. Zeeb 
4358bfcc09ddSBjoern A. Zeeb out:
4359bfcc09ddSBjoern A. Zeeb 	if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_CHANNEL_SWITCH_CMD) &&
4360bfcc09ddSBjoern A. Zeeb 	    switching_chanctx)
4361bfcc09ddSBjoern A. Zeeb 		return;
4362bfcc09ddSBjoern A. Zeeb 	mvmvif->phy_ctxt = NULL;
4363bfcc09ddSBjoern A. Zeeb 	iwl_mvm_power_update_mac(mvm);
4364bfcc09ddSBjoern A. Zeeb }
4365bfcc09ddSBjoern A. Zeeb 
4366bfcc09ddSBjoern A. Zeeb static void iwl_mvm_unassign_vif_chanctx(struct ieee80211_hw *hw,
4367bfcc09ddSBjoern A. Zeeb 					 struct ieee80211_vif *vif,
4368bfcc09ddSBjoern A. Zeeb 					 struct ieee80211_chanctx_conf *ctx)
4369bfcc09ddSBjoern A. Zeeb {
4370bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4371bfcc09ddSBjoern A. Zeeb 
4372bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4373bfcc09ddSBjoern A. Zeeb 	__iwl_mvm_unassign_vif_chanctx(mvm, vif, ctx, false);
4374bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4375bfcc09ddSBjoern A. Zeeb }
4376bfcc09ddSBjoern A. Zeeb 
4377bfcc09ddSBjoern A. Zeeb static int
4378bfcc09ddSBjoern A. Zeeb iwl_mvm_switch_vif_chanctx_swap(struct iwl_mvm *mvm,
4379bfcc09ddSBjoern A. Zeeb 				struct ieee80211_vif_chanctx_switch *vifs)
4380bfcc09ddSBjoern A. Zeeb {
4381bfcc09ddSBjoern A. Zeeb 	int ret;
4382bfcc09ddSBjoern A. Zeeb 
4383bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4384bfcc09ddSBjoern A. Zeeb 	__iwl_mvm_unassign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, true);
4385bfcc09ddSBjoern A. Zeeb 	__iwl_mvm_remove_chanctx(mvm, vifs[0].old_ctx);
4386bfcc09ddSBjoern A. Zeeb 
4387bfcc09ddSBjoern A. Zeeb 	ret = __iwl_mvm_add_chanctx(mvm, vifs[0].new_ctx);
4388bfcc09ddSBjoern A. Zeeb 	if (ret) {
4389bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "failed to add new_ctx during channel switch\n");
4390bfcc09ddSBjoern A. Zeeb 		goto out_reassign;
4391bfcc09ddSBjoern A. Zeeb 	}
4392bfcc09ddSBjoern A. Zeeb 
4393bfcc09ddSBjoern A. Zeeb 	ret = __iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].new_ctx,
4394bfcc09ddSBjoern A. Zeeb 					   true);
4395bfcc09ddSBjoern A. Zeeb 	if (ret) {
4396bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm,
4397bfcc09ddSBjoern A. Zeeb 			"failed to assign new_ctx during channel switch\n");
4398bfcc09ddSBjoern A. Zeeb 		goto out_remove;
4399bfcc09ddSBjoern A. Zeeb 	}
4400bfcc09ddSBjoern A. Zeeb 
4401bfcc09ddSBjoern A. Zeeb 	/* we don't support TDLS during DCM - can be caused by channel switch */
4402bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_phy_ctx_count(mvm) > 1)
4403bfcc09ddSBjoern A. Zeeb 		iwl_mvm_teardown_tdls_peers(mvm);
4404bfcc09ddSBjoern A. Zeeb 
4405bfcc09ddSBjoern A. Zeeb 	goto out;
4406bfcc09ddSBjoern A. Zeeb 
4407bfcc09ddSBjoern A. Zeeb out_remove:
4408bfcc09ddSBjoern A. Zeeb 	__iwl_mvm_remove_chanctx(mvm, vifs[0].new_ctx);
4409bfcc09ddSBjoern A. Zeeb 
4410bfcc09ddSBjoern A. Zeeb out_reassign:
4411bfcc09ddSBjoern A. Zeeb 	if (__iwl_mvm_add_chanctx(mvm, vifs[0].old_ctx)) {
4412bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "failed to add old_ctx back after failure.\n");
4413bfcc09ddSBjoern A. Zeeb 		goto out_restart;
4414bfcc09ddSBjoern A. Zeeb 	}
4415bfcc09ddSBjoern A. Zeeb 
4416bfcc09ddSBjoern A. Zeeb 	if (__iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx,
4417bfcc09ddSBjoern A. Zeeb 					 true)) {
4418bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "failed to reassign old_ctx after failure.\n");
4419bfcc09ddSBjoern A. Zeeb 		goto out_restart;
4420bfcc09ddSBjoern A. Zeeb 	}
4421bfcc09ddSBjoern A. Zeeb 
4422bfcc09ddSBjoern A. Zeeb 	goto out;
4423bfcc09ddSBjoern A. Zeeb 
4424bfcc09ddSBjoern A. Zeeb out_restart:
4425bfcc09ddSBjoern A. Zeeb 	/* things keep failing, better restart the hw */
4426bfcc09ddSBjoern A. Zeeb 	iwl_mvm_nic_restart(mvm, false);
4427bfcc09ddSBjoern A. Zeeb 
4428bfcc09ddSBjoern A. Zeeb out:
4429bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4430bfcc09ddSBjoern A. Zeeb 
4431bfcc09ddSBjoern A. Zeeb 	return ret;
4432bfcc09ddSBjoern A. Zeeb }
4433bfcc09ddSBjoern A. Zeeb 
4434bfcc09ddSBjoern A. Zeeb static int
4435bfcc09ddSBjoern A. Zeeb iwl_mvm_switch_vif_chanctx_reassign(struct iwl_mvm *mvm,
4436bfcc09ddSBjoern A. Zeeb 				    struct ieee80211_vif_chanctx_switch *vifs)
4437bfcc09ddSBjoern A. Zeeb {
4438bfcc09ddSBjoern A. Zeeb 	int ret;
4439bfcc09ddSBjoern A. Zeeb 
4440bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4441bfcc09ddSBjoern A. Zeeb 	__iwl_mvm_unassign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, true);
4442bfcc09ddSBjoern A. Zeeb 
4443bfcc09ddSBjoern A. Zeeb 	ret = __iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].new_ctx,
4444bfcc09ddSBjoern A. Zeeb 					   true);
4445bfcc09ddSBjoern A. Zeeb 	if (ret) {
4446bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm,
4447bfcc09ddSBjoern A. Zeeb 			"failed to assign new_ctx during channel switch\n");
4448bfcc09ddSBjoern A. Zeeb 		goto out_reassign;
4449bfcc09ddSBjoern A. Zeeb 	}
4450bfcc09ddSBjoern A. Zeeb 
4451bfcc09ddSBjoern A. Zeeb 	goto out;
4452bfcc09ddSBjoern A. Zeeb 
4453bfcc09ddSBjoern A. Zeeb out_reassign:
4454bfcc09ddSBjoern A. Zeeb 	if (__iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx,
4455bfcc09ddSBjoern A. Zeeb 					 true)) {
4456bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "failed to reassign old_ctx after failure.\n");
4457bfcc09ddSBjoern A. Zeeb 		goto out_restart;
4458bfcc09ddSBjoern A. Zeeb 	}
4459bfcc09ddSBjoern A. Zeeb 
4460bfcc09ddSBjoern A. Zeeb 	goto out;
4461bfcc09ddSBjoern A. Zeeb 
4462bfcc09ddSBjoern A. Zeeb out_restart:
4463bfcc09ddSBjoern A. Zeeb 	/* things keep failing, better restart the hw */
4464bfcc09ddSBjoern A. Zeeb 	iwl_mvm_nic_restart(mvm, false);
4465bfcc09ddSBjoern A. Zeeb 
4466bfcc09ddSBjoern A. Zeeb out:
4467bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4468bfcc09ddSBjoern A. Zeeb 
4469bfcc09ddSBjoern A. Zeeb 	return ret;
4470bfcc09ddSBjoern A. Zeeb }
4471bfcc09ddSBjoern A. Zeeb 
4472bfcc09ddSBjoern A. Zeeb static int iwl_mvm_switch_vif_chanctx(struct ieee80211_hw *hw,
4473bfcc09ddSBjoern A. Zeeb 				      struct ieee80211_vif_chanctx_switch *vifs,
4474bfcc09ddSBjoern A. Zeeb 				      int n_vifs,
4475bfcc09ddSBjoern A. Zeeb 				      enum ieee80211_chanctx_switch_mode mode)
4476bfcc09ddSBjoern A. Zeeb {
4477bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4478bfcc09ddSBjoern A. Zeeb 	int ret;
4479bfcc09ddSBjoern A. Zeeb 
4480bfcc09ddSBjoern A. Zeeb 	/* we only support a single-vif right now */
4481bfcc09ddSBjoern A. Zeeb 	if (n_vifs > 1)
4482bfcc09ddSBjoern A. Zeeb 		return -EOPNOTSUPP;
4483bfcc09ddSBjoern A. Zeeb 
4484bfcc09ddSBjoern A. Zeeb 	switch (mode) {
4485bfcc09ddSBjoern A. Zeeb 	case CHANCTX_SWMODE_SWAP_CONTEXTS:
4486bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_switch_vif_chanctx_swap(mvm, vifs);
4487bfcc09ddSBjoern A. Zeeb 		break;
4488bfcc09ddSBjoern A. Zeeb 	case CHANCTX_SWMODE_REASSIGN_VIF:
4489bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_switch_vif_chanctx_reassign(mvm, vifs);
4490bfcc09ddSBjoern A. Zeeb 		break;
4491bfcc09ddSBjoern A. Zeeb 	default:
4492bfcc09ddSBjoern A. Zeeb 		ret = -EOPNOTSUPP;
4493bfcc09ddSBjoern A. Zeeb 		break;
4494bfcc09ddSBjoern A. Zeeb 	}
4495bfcc09ddSBjoern A. Zeeb 
4496bfcc09ddSBjoern A. Zeeb 	return ret;
4497bfcc09ddSBjoern A. Zeeb }
4498bfcc09ddSBjoern A. Zeeb 
4499bfcc09ddSBjoern A. Zeeb static int iwl_mvm_tx_last_beacon(struct ieee80211_hw *hw)
4500bfcc09ddSBjoern A. Zeeb {
4501bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4502bfcc09ddSBjoern A. Zeeb 
4503bfcc09ddSBjoern A. Zeeb 	return mvm->ibss_manager;
4504bfcc09ddSBjoern A. Zeeb }
4505bfcc09ddSBjoern A. Zeeb 
4506bfcc09ddSBjoern A. Zeeb static int iwl_mvm_set_tim(struct ieee80211_hw *hw,
4507bfcc09ddSBjoern A. Zeeb 			   struct ieee80211_sta *sta,
4508bfcc09ddSBjoern A. Zeeb 			   bool set)
4509bfcc09ddSBjoern A. Zeeb {
4510bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4511bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta);
4512bfcc09ddSBjoern A. Zeeb 
4513bfcc09ddSBjoern A. Zeeb 	if (!mvm_sta || !mvm_sta->vif) {
4514bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "Station is not associated to a vif\n");
4515bfcc09ddSBjoern A. Zeeb 		return -EINVAL;
4516bfcc09ddSBjoern A. Zeeb 	}
4517bfcc09ddSBjoern A. Zeeb 
4518bfcc09ddSBjoern A. Zeeb 	return iwl_mvm_mac_ctxt_beacon_changed(mvm, mvm_sta->vif);
4519bfcc09ddSBjoern A. Zeeb }
4520bfcc09ddSBjoern A. Zeeb 
4521bfcc09ddSBjoern A. Zeeb #ifdef CONFIG_NL80211_TESTMODE
4522bfcc09ddSBjoern A. Zeeb static const struct nla_policy iwl_mvm_tm_policy[IWL_MVM_TM_ATTR_MAX + 1] = {
4523bfcc09ddSBjoern A. Zeeb 	[IWL_MVM_TM_ATTR_CMD] = { .type = NLA_U32 },
4524bfcc09ddSBjoern A. Zeeb 	[IWL_MVM_TM_ATTR_NOA_DURATION] = { .type = NLA_U32 },
4525bfcc09ddSBjoern A. Zeeb 	[IWL_MVM_TM_ATTR_BEACON_FILTER_STATE] = { .type = NLA_U32 },
4526bfcc09ddSBjoern A. Zeeb };
4527bfcc09ddSBjoern A. Zeeb 
4528bfcc09ddSBjoern A. Zeeb static int __iwl_mvm_mac_testmode_cmd(struct iwl_mvm *mvm,
4529bfcc09ddSBjoern A. Zeeb 				      struct ieee80211_vif *vif,
4530bfcc09ddSBjoern A. Zeeb 				      void *data, int len)
4531bfcc09ddSBjoern A. Zeeb {
4532bfcc09ddSBjoern A. Zeeb 	struct nlattr *tb[IWL_MVM_TM_ATTR_MAX + 1];
4533bfcc09ddSBjoern A. Zeeb 	int err;
4534bfcc09ddSBjoern A. Zeeb 	u32 noa_duration;
4535bfcc09ddSBjoern A. Zeeb 
4536bfcc09ddSBjoern A. Zeeb 	err = nla_parse_deprecated(tb, IWL_MVM_TM_ATTR_MAX, data, len,
4537bfcc09ddSBjoern A. Zeeb 				   iwl_mvm_tm_policy, NULL);
4538bfcc09ddSBjoern A. Zeeb 	if (err)
4539bfcc09ddSBjoern A. Zeeb 		return err;
4540bfcc09ddSBjoern A. Zeeb 
4541bfcc09ddSBjoern A. Zeeb 	if (!tb[IWL_MVM_TM_ATTR_CMD])
4542bfcc09ddSBjoern A. Zeeb 		return -EINVAL;
4543bfcc09ddSBjoern A. Zeeb 
4544bfcc09ddSBjoern A. Zeeb 	switch (nla_get_u32(tb[IWL_MVM_TM_ATTR_CMD])) {
4545bfcc09ddSBjoern A. Zeeb 	case IWL_MVM_TM_CMD_SET_NOA:
4546bfcc09ddSBjoern A. Zeeb 		if (!vif || vif->type != NL80211_IFTYPE_AP || !vif->p2p ||
4547bfcc09ddSBjoern A. Zeeb 		    !vif->bss_conf.enable_beacon ||
4548bfcc09ddSBjoern A. Zeeb 		    !tb[IWL_MVM_TM_ATTR_NOA_DURATION])
4549bfcc09ddSBjoern A. Zeeb 			return -EINVAL;
4550bfcc09ddSBjoern A. Zeeb 
4551bfcc09ddSBjoern A. Zeeb 		noa_duration = nla_get_u32(tb[IWL_MVM_TM_ATTR_NOA_DURATION]);
4552bfcc09ddSBjoern A. Zeeb 		if (noa_duration >= vif->bss_conf.beacon_int)
4553bfcc09ddSBjoern A. Zeeb 			return -EINVAL;
4554bfcc09ddSBjoern A. Zeeb 
4555bfcc09ddSBjoern A. Zeeb 		mvm->noa_duration = noa_duration;
4556bfcc09ddSBjoern A. Zeeb 		mvm->noa_vif = vif;
4557bfcc09ddSBjoern A. Zeeb 
4558bfcc09ddSBjoern A. Zeeb 		return iwl_mvm_update_quotas(mvm, true, NULL);
4559bfcc09ddSBjoern A. Zeeb 	case IWL_MVM_TM_CMD_SET_BEACON_FILTER:
4560bfcc09ddSBjoern A. Zeeb 		/* must be associated client vif - ignore authorized */
4561bfcc09ddSBjoern A. Zeeb 		if (!vif || vif->type != NL80211_IFTYPE_STATION ||
4562bfcc09ddSBjoern A. Zeeb 		    !vif->bss_conf.assoc || !vif->bss_conf.dtim_period ||
4563bfcc09ddSBjoern A. Zeeb 		    !tb[IWL_MVM_TM_ATTR_BEACON_FILTER_STATE])
4564bfcc09ddSBjoern A. Zeeb 			return -EINVAL;
4565bfcc09ddSBjoern A. Zeeb 
4566bfcc09ddSBjoern A. Zeeb 		if (nla_get_u32(tb[IWL_MVM_TM_ATTR_BEACON_FILTER_STATE]))
4567bfcc09ddSBjoern A. Zeeb 			return iwl_mvm_enable_beacon_filter(mvm, vif, 0);
4568bfcc09ddSBjoern A. Zeeb 		return iwl_mvm_disable_beacon_filter(mvm, vif, 0);
4569bfcc09ddSBjoern A. Zeeb 	}
4570bfcc09ddSBjoern A. Zeeb 
4571bfcc09ddSBjoern A. Zeeb 	return -EOPNOTSUPP;
4572bfcc09ddSBjoern A. Zeeb }
4573bfcc09ddSBjoern A. Zeeb 
4574bfcc09ddSBjoern A. Zeeb static int iwl_mvm_mac_testmode_cmd(struct ieee80211_hw *hw,
4575bfcc09ddSBjoern A. Zeeb 				    struct ieee80211_vif *vif,
4576bfcc09ddSBjoern A. Zeeb 				    void *data, int len)
4577bfcc09ddSBjoern A. Zeeb {
4578bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4579bfcc09ddSBjoern A. Zeeb 	int err;
4580bfcc09ddSBjoern A. Zeeb 
4581bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4582bfcc09ddSBjoern A. Zeeb 	err = __iwl_mvm_mac_testmode_cmd(mvm, vif, data, len);
4583bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4584bfcc09ddSBjoern A. Zeeb 
4585bfcc09ddSBjoern A. Zeeb 	return err;
4586bfcc09ddSBjoern A. Zeeb }
4587bfcc09ddSBjoern A. Zeeb #endif
4588bfcc09ddSBjoern A. Zeeb 
4589bfcc09ddSBjoern A. Zeeb static void iwl_mvm_channel_switch(struct ieee80211_hw *hw,
4590bfcc09ddSBjoern A. Zeeb 				   struct ieee80211_vif *vif,
4591bfcc09ddSBjoern A. Zeeb 				   struct ieee80211_channel_switch *chsw)
4592bfcc09ddSBjoern A. Zeeb {
4593bfcc09ddSBjoern A. Zeeb 	/* By implementing this operation, we prevent mac80211 from
4594bfcc09ddSBjoern A. Zeeb 	 * starting its own channel switch timer, so that we can call
4595bfcc09ddSBjoern A. Zeeb 	 * ieee80211_chswitch_done() ourselves at the right time
4596bfcc09ddSBjoern A. Zeeb 	 * (which is when the absence time event starts).
4597bfcc09ddSBjoern A. Zeeb 	 */
4598bfcc09ddSBjoern A. Zeeb 
4599bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_MAC80211(IWL_MAC80211_GET_MVM(hw),
4600bfcc09ddSBjoern A. Zeeb 			   "dummy channel switch op\n");
4601bfcc09ddSBjoern A. Zeeb }
4602bfcc09ddSBjoern A. Zeeb 
4603bfcc09ddSBjoern A. Zeeb static int iwl_mvm_schedule_client_csa(struct iwl_mvm *mvm,
4604bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_vif *vif,
4605bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_channel_switch *chsw)
4606bfcc09ddSBjoern A. Zeeb {
4607bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
4608bfcc09ddSBjoern A. Zeeb 	struct iwl_chan_switch_te_cmd cmd = {
4609bfcc09ddSBjoern A. Zeeb 		.mac_id = cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id,
4610bfcc09ddSBjoern A. Zeeb 							  mvmvif->color)),
4611bfcc09ddSBjoern A. Zeeb 		.action = cpu_to_le32(FW_CTXT_ACTION_ADD),
4612bfcc09ddSBjoern A. Zeeb 		.tsf = cpu_to_le32(chsw->timestamp),
4613bfcc09ddSBjoern A. Zeeb 		.cs_count = chsw->count,
4614bfcc09ddSBjoern A. Zeeb 		.cs_mode = chsw->block_tx,
4615bfcc09ddSBjoern A. Zeeb 	};
4616bfcc09ddSBjoern A. Zeeb 
4617bfcc09ddSBjoern A. Zeeb 	lockdep_assert_held(&mvm->mutex);
4618bfcc09ddSBjoern A. Zeeb 
4619bfcc09ddSBjoern A. Zeeb 	if (chsw->delay)
4620bfcc09ddSBjoern A. Zeeb 		cmd.cs_delayed_bcn_count =
4621bfcc09ddSBjoern A. Zeeb 			DIV_ROUND_UP(chsw->delay, vif->bss_conf.beacon_int);
4622bfcc09ddSBjoern A. Zeeb 
4623bfcc09ddSBjoern A. Zeeb 	return iwl_mvm_send_cmd_pdu(mvm,
4624bfcc09ddSBjoern A. Zeeb 				    WIDE_ID(MAC_CONF_GROUP,
4625bfcc09ddSBjoern A. Zeeb 					    CHANNEL_SWITCH_TIME_EVENT_CMD),
4626bfcc09ddSBjoern A. Zeeb 				    0, sizeof(cmd), &cmd);
4627bfcc09ddSBjoern A. Zeeb }
4628bfcc09ddSBjoern A. Zeeb 
4629bfcc09ddSBjoern A. Zeeb static int iwl_mvm_old_pre_chan_sw_sta(struct iwl_mvm *mvm,
4630bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_vif *vif,
4631bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_channel_switch *chsw)
4632bfcc09ddSBjoern A. Zeeb {
4633bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
4634bfcc09ddSBjoern A. Zeeb 	u32 apply_time;
4635bfcc09ddSBjoern A. Zeeb 
4636bfcc09ddSBjoern A. Zeeb 	/* Schedule the time event to a bit before beacon 1,
4637bfcc09ddSBjoern A. Zeeb 	 * to make sure we're in the new channel when the
4638bfcc09ddSBjoern A. Zeeb 	 * GO/AP arrives. In case count <= 1 immediately schedule the
4639bfcc09ddSBjoern A. Zeeb 	 * TE (this might result with some packet loss or connection
4640bfcc09ddSBjoern A. Zeeb 	 * loss).
4641bfcc09ddSBjoern A. Zeeb 	 */
4642bfcc09ddSBjoern A. Zeeb 	if (chsw->count <= 1)
4643bfcc09ddSBjoern A. Zeeb 		apply_time = 0;
4644bfcc09ddSBjoern A. Zeeb 	else
4645bfcc09ddSBjoern A. Zeeb 		apply_time = chsw->device_timestamp +
4646bfcc09ddSBjoern A. Zeeb 			((vif->bss_conf.beacon_int * (chsw->count - 1) -
4647bfcc09ddSBjoern A. Zeeb 			  IWL_MVM_CHANNEL_SWITCH_TIME_CLIENT) * 1024);
4648bfcc09ddSBjoern A. Zeeb 
4649bfcc09ddSBjoern A. Zeeb 	if (chsw->block_tx)
4650bfcc09ddSBjoern A. Zeeb 		iwl_mvm_csa_client_absent(mvm, vif);
4651bfcc09ddSBjoern A. Zeeb 
4652bfcc09ddSBjoern A. Zeeb 	if (mvmvif->bf_data.bf_enabled) {
4653bfcc09ddSBjoern A. Zeeb 		int ret = iwl_mvm_disable_beacon_filter(mvm, vif, 0);
4654bfcc09ddSBjoern A. Zeeb 
4655bfcc09ddSBjoern A. Zeeb 		if (ret)
4656bfcc09ddSBjoern A. Zeeb 			return ret;
4657bfcc09ddSBjoern A. Zeeb 	}
4658bfcc09ddSBjoern A. Zeeb 
4659bfcc09ddSBjoern A. Zeeb 	iwl_mvm_schedule_csa_period(mvm, vif, vif->bss_conf.beacon_int,
4660bfcc09ddSBjoern A. Zeeb 				    apply_time);
4661bfcc09ddSBjoern A. Zeeb 
4662bfcc09ddSBjoern A. Zeeb 	return 0;
4663bfcc09ddSBjoern A. Zeeb }
4664bfcc09ddSBjoern A. Zeeb 
4665bfcc09ddSBjoern A. Zeeb #define IWL_MAX_CSA_BLOCK_TX 1500
4666bfcc09ddSBjoern A. Zeeb static int iwl_mvm_pre_channel_switch(struct ieee80211_hw *hw,
4667bfcc09ddSBjoern A. Zeeb 				      struct ieee80211_vif *vif,
4668bfcc09ddSBjoern A. Zeeb 				      struct ieee80211_channel_switch *chsw)
4669bfcc09ddSBjoern A. Zeeb {
4670bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4671bfcc09ddSBjoern A. Zeeb 	struct ieee80211_vif *csa_vif;
4672bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
4673bfcc09ddSBjoern A. Zeeb 	int ret;
4674bfcc09ddSBjoern A. Zeeb 
4675bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4676bfcc09ddSBjoern A. Zeeb 
4677bfcc09ddSBjoern A. Zeeb 	mvmvif->csa_failed = false;
4678bfcc09ddSBjoern A. Zeeb 
4679bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_MAC80211(mvm, "pre CSA to freq %d\n",
4680bfcc09ddSBjoern A. Zeeb 			   chsw->chandef.center_freq1);
4681bfcc09ddSBjoern A. Zeeb 
4682bfcc09ddSBjoern A. Zeeb 	iwl_fw_dbg_trigger_simple_stop(&mvm->fwrt,
4683bfcc09ddSBjoern A. Zeeb 				       ieee80211_vif_to_wdev(vif),
4684bfcc09ddSBjoern A. Zeeb 				       FW_DBG_TRIGGER_CHANNEL_SWITCH);
4685bfcc09ddSBjoern A. Zeeb 
4686bfcc09ddSBjoern A. Zeeb 	switch (vif->type) {
4687bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_AP:
4688bfcc09ddSBjoern A. Zeeb 		csa_vif =
4689bfcc09ddSBjoern A. Zeeb 			rcu_dereference_protected(mvm->csa_vif,
4690bfcc09ddSBjoern A. Zeeb 						  lockdep_is_held(&mvm->mutex));
4691bfcc09ddSBjoern A. Zeeb 		if (WARN_ONCE(csa_vif && csa_vif->csa_active,
4692bfcc09ddSBjoern A. Zeeb 			      "Another CSA is already in progress")) {
4693bfcc09ddSBjoern A. Zeeb 			ret = -EBUSY;
4694bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
4695bfcc09ddSBjoern A. Zeeb 		}
4696bfcc09ddSBjoern A. Zeeb 
4697bfcc09ddSBjoern A. Zeeb 		/* we still didn't unblock tx. prevent new CS meanwhile */
4698bfcc09ddSBjoern A. Zeeb 		if (rcu_dereference_protected(mvm->csa_tx_blocked_vif,
4699bfcc09ddSBjoern A. Zeeb 					      lockdep_is_held(&mvm->mutex))) {
4700bfcc09ddSBjoern A. Zeeb 			ret = -EBUSY;
4701bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
4702bfcc09ddSBjoern A. Zeeb 		}
4703bfcc09ddSBjoern A. Zeeb 
4704bfcc09ddSBjoern A. Zeeb 		rcu_assign_pointer(mvm->csa_vif, vif);
4705bfcc09ddSBjoern A. Zeeb 
4706bfcc09ddSBjoern A. Zeeb 		if (WARN_ONCE(mvmvif->csa_countdown,
4707bfcc09ddSBjoern A. Zeeb 			      "Previous CSA countdown didn't complete")) {
4708bfcc09ddSBjoern A. Zeeb 			ret = -EBUSY;
4709bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
4710bfcc09ddSBjoern A. Zeeb 		}
4711bfcc09ddSBjoern A. Zeeb 
4712bfcc09ddSBjoern A. Zeeb 		mvmvif->csa_target_freq = chsw->chandef.chan->center_freq;
4713bfcc09ddSBjoern A. Zeeb 
4714bfcc09ddSBjoern A. Zeeb 		break;
4715bfcc09ddSBjoern A. Zeeb 	case NL80211_IFTYPE_STATION:
4716bfcc09ddSBjoern A. Zeeb 		/*
4717bfcc09ddSBjoern A. Zeeb 		 * We haven't configured the firmware to be associated yet since
4718bfcc09ddSBjoern A. Zeeb 		 * we don't know the dtim period. In this case, the firmware can't
4719bfcc09ddSBjoern A. Zeeb 		 * track the beacons.
4720bfcc09ddSBjoern A. Zeeb 		 */
4721bfcc09ddSBjoern A. Zeeb 		if (!vif->bss_conf.assoc || !vif->bss_conf.dtim_period) {
4722bfcc09ddSBjoern A. Zeeb 			ret = -EBUSY;
4723bfcc09ddSBjoern A. Zeeb 			goto out_unlock;
4724bfcc09ddSBjoern A. Zeeb 		}
4725bfcc09ddSBjoern A. Zeeb 
4726bfcc09ddSBjoern A. Zeeb 		if (chsw->delay > IWL_MAX_CSA_BLOCK_TX)
4727bfcc09ddSBjoern A. Zeeb 			schedule_delayed_work(&mvmvif->csa_work, 0);
4728bfcc09ddSBjoern A. Zeeb 
4729bfcc09ddSBjoern A. Zeeb 		if (chsw->block_tx) {
4730bfcc09ddSBjoern A. Zeeb 			/*
4731bfcc09ddSBjoern A. Zeeb 			 * In case of undetermined / long time with immediate
4732bfcc09ddSBjoern A. Zeeb 			 * quiet monitor status to gracefully disconnect
4733bfcc09ddSBjoern A. Zeeb 			 */
4734bfcc09ddSBjoern A. Zeeb 			if (!chsw->count ||
4735bfcc09ddSBjoern A. Zeeb 			    chsw->count * vif->bss_conf.beacon_int >
4736bfcc09ddSBjoern A. Zeeb 			    IWL_MAX_CSA_BLOCK_TX)
4737bfcc09ddSBjoern A. Zeeb 				schedule_delayed_work(&mvmvif->csa_work,
4738bfcc09ddSBjoern A. Zeeb 						      msecs_to_jiffies(IWL_MAX_CSA_BLOCK_TX));
4739bfcc09ddSBjoern A. Zeeb 		}
4740bfcc09ddSBjoern A. Zeeb 
4741bfcc09ddSBjoern A. Zeeb 		if (!fw_has_capa(&mvm->fw->ucode_capa,
4742bfcc09ddSBjoern A. Zeeb 				 IWL_UCODE_TLV_CAPA_CHANNEL_SWITCH_CMD)) {
4743bfcc09ddSBjoern A. Zeeb 			ret = iwl_mvm_old_pre_chan_sw_sta(mvm, vif, chsw);
4744bfcc09ddSBjoern A. Zeeb 			if (ret)
4745bfcc09ddSBjoern A. Zeeb 				goto out_unlock;
4746bfcc09ddSBjoern A. Zeeb 		} else {
4747bfcc09ddSBjoern A. Zeeb 			iwl_mvm_schedule_client_csa(mvm, vif, chsw);
4748bfcc09ddSBjoern A. Zeeb 		}
4749bfcc09ddSBjoern A. Zeeb 
4750bfcc09ddSBjoern A. Zeeb 		mvmvif->csa_count = chsw->count;
4751bfcc09ddSBjoern A. Zeeb 		mvmvif->csa_misbehave = false;
4752bfcc09ddSBjoern A. Zeeb 		break;
4753bfcc09ddSBjoern A. Zeeb 	default:
4754bfcc09ddSBjoern A. Zeeb 		break;
4755bfcc09ddSBjoern A. Zeeb 	}
4756bfcc09ddSBjoern A. Zeeb 
4757bfcc09ddSBjoern A. Zeeb 	mvmvif->ps_disabled = true;
4758bfcc09ddSBjoern A. Zeeb 
4759bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_power_update_ps(mvm);
4760bfcc09ddSBjoern A. Zeeb 	if (ret)
4761bfcc09ddSBjoern A. Zeeb 		goto out_unlock;
4762bfcc09ddSBjoern A. Zeeb 
4763bfcc09ddSBjoern A. Zeeb 	/* we won't be on this channel any longer */
4764bfcc09ddSBjoern A. Zeeb 	iwl_mvm_teardown_tdls_peers(mvm);
4765bfcc09ddSBjoern A. Zeeb 
4766bfcc09ddSBjoern A. Zeeb out_unlock:
4767bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4768bfcc09ddSBjoern A. Zeeb 
4769bfcc09ddSBjoern A. Zeeb 	return ret;
4770bfcc09ddSBjoern A. Zeeb }
4771bfcc09ddSBjoern A. Zeeb 
4772bfcc09ddSBjoern A. Zeeb static void iwl_mvm_channel_switch_rx_beacon(struct ieee80211_hw *hw,
4773bfcc09ddSBjoern A. Zeeb 					     struct ieee80211_vif *vif,
4774bfcc09ddSBjoern A. Zeeb 					     struct ieee80211_channel_switch *chsw)
4775bfcc09ddSBjoern A. Zeeb {
4776bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4777bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
4778bfcc09ddSBjoern A. Zeeb 	struct iwl_chan_switch_te_cmd cmd = {
4779bfcc09ddSBjoern A. Zeeb 		.mac_id = cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id,
4780bfcc09ddSBjoern A. Zeeb 							  mvmvif->color)),
4781bfcc09ddSBjoern A. Zeeb 		.action = cpu_to_le32(FW_CTXT_ACTION_MODIFY),
4782bfcc09ddSBjoern A. Zeeb 		.tsf = cpu_to_le32(chsw->timestamp),
4783bfcc09ddSBjoern A. Zeeb 		.cs_count = chsw->count,
4784bfcc09ddSBjoern A. Zeeb 		.cs_mode = chsw->block_tx,
4785bfcc09ddSBjoern A. Zeeb 	};
4786bfcc09ddSBjoern A. Zeeb 
4787bfcc09ddSBjoern A. Zeeb 	if (!fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_CS_MODIFY))
4788bfcc09ddSBjoern A. Zeeb 		return;
4789bfcc09ddSBjoern A. Zeeb 
4790bfcc09ddSBjoern A. Zeeb 	IWL_DEBUG_MAC80211(mvm, "Modify CSA on mac %d count = %d (old %d) mode = %d\n",
4791bfcc09ddSBjoern A. Zeeb 			   mvmvif->id, chsw->count, mvmvif->csa_count, chsw->block_tx);
4792bfcc09ddSBjoern A. Zeeb 
4793bfcc09ddSBjoern A. Zeeb 	if (chsw->count >= mvmvif->csa_count && chsw->block_tx) {
4794bfcc09ddSBjoern A. Zeeb 		if (mvmvif->csa_misbehave) {
4795bfcc09ddSBjoern A. Zeeb 			/* Second time, give up on this AP*/
4796bfcc09ddSBjoern A. Zeeb 			iwl_mvm_abort_channel_switch(hw, vif);
4797bfcc09ddSBjoern A. Zeeb 			ieee80211_chswitch_done(vif, false);
4798bfcc09ddSBjoern A. Zeeb 			mvmvif->csa_misbehave = false;
4799bfcc09ddSBjoern A. Zeeb 			return;
4800bfcc09ddSBjoern A. Zeeb 		}
4801bfcc09ddSBjoern A. Zeeb 		mvmvif->csa_misbehave = true;
4802bfcc09ddSBjoern A. Zeeb 	}
4803bfcc09ddSBjoern A. Zeeb 	mvmvif->csa_count = chsw->count;
4804bfcc09ddSBjoern A. Zeeb 
4805bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4806bfcc09ddSBjoern A. Zeeb 	if (mvmvif->csa_failed)
4807bfcc09ddSBjoern A. Zeeb 		goto out_unlock;
4808bfcc09ddSBjoern A. Zeeb 
4809bfcc09ddSBjoern A. Zeeb 	WARN_ON(iwl_mvm_send_cmd_pdu(mvm,
4810bfcc09ddSBjoern A. Zeeb 				     WIDE_ID(MAC_CONF_GROUP,
4811bfcc09ddSBjoern A. Zeeb 					     CHANNEL_SWITCH_TIME_EVENT_CMD),
4812bfcc09ddSBjoern A. Zeeb 				     0, sizeof(cmd), &cmd));
4813bfcc09ddSBjoern A. Zeeb out_unlock:
4814bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4815bfcc09ddSBjoern A. Zeeb }
4816bfcc09ddSBjoern A. Zeeb 
4817bfcc09ddSBjoern A. Zeeb static void iwl_mvm_flush_no_vif(struct iwl_mvm *mvm, u32 queues, bool drop)
4818bfcc09ddSBjoern A. Zeeb {
4819bfcc09ddSBjoern A. Zeeb 	int i;
4820bfcc09ddSBjoern A. Zeeb 
4821bfcc09ddSBjoern A. Zeeb 	if (!iwl_mvm_has_new_tx_api(mvm)) {
4822bfcc09ddSBjoern A. Zeeb 		if (drop) {
4823bfcc09ddSBjoern A. Zeeb 			mutex_lock(&mvm->mutex);
4824bfcc09ddSBjoern A. Zeeb 			iwl_mvm_flush_tx_path(mvm,
4825bfcc09ddSBjoern A. Zeeb 				iwl_mvm_flushable_queues(mvm) & queues);
4826bfcc09ddSBjoern A. Zeeb 			mutex_unlock(&mvm->mutex);
4827bfcc09ddSBjoern A. Zeeb 		} else {
4828bfcc09ddSBjoern A. Zeeb 			iwl_trans_wait_tx_queues_empty(mvm->trans, queues);
4829bfcc09ddSBjoern A. Zeeb 		}
4830bfcc09ddSBjoern A. Zeeb 		return;
4831bfcc09ddSBjoern A. Zeeb 	}
4832bfcc09ddSBjoern A. Zeeb 
4833bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4834bfcc09ddSBjoern A. Zeeb 	for (i = 0; i < mvm->fw->ucode_capa.num_stations; i++) {
4835bfcc09ddSBjoern A. Zeeb 		struct ieee80211_sta *sta;
4836bfcc09ddSBjoern A. Zeeb 
4837bfcc09ddSBjoern A. Zeeb 		sta = rcu_dereference_protected(mvm->fw_id_to_mac_id[i],
4838bfcc09ddSBjoern A. Zeeb 						lockdep_is_held(&mvm->mutex));
4839bfcc09ddSBjoern A. Zeeb 		if (IS_ERR_OR_NULL(sta))
4840bfcc09ddSBjoern A. Zeeb 			continue;
4841bfcc09ddSBjoern A. Zeeb 
4842bfcc09ddSBjoern A. Zeeb 		if (drop)
4843bfcc09ddSBjoern A. Zeeb 			iwl_mvm_flush_sta_tids(mvm, i, 0xFFFF);
4844bfcc09ddSBjoern A. Zeeb 		else
4845bfcc09ddSBjoern A. Zeeb 			iwl_mvm_wait_sta_queues_empty(mvm,
4846bfcc09ddSBjoern A. Zeeb 					iwl_mvm_sta_from_mac80211(sta));
4847bfcc09ddSBjoern A. Zeeb 	}
4848bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4849bfcc09ddSBjoern A. Zeeb }
4850bfcc09ddSBjoern A. Zeeb 
4851bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mac_flush(struct ieee80211_hw *hw,
4852bfcc09ddSBjoern A. Zeeb 			      struct ieee80211_vif *vif, u32 queues, bool drop)
4853bfcc09ddSBjoern A. Zeeb {
4854bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4855bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif;
4856bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_sta *mvmsta;
4857bfcc09ddSBjoern A. Zeeb 	struct ieee80211_sta *sta;
4858bfcc09ddSBjoern A. Zeeb 	int i;
4859bfcc09ddSBjoern A. Zeeb 	u32 msk = 0;
4860bfcc09ddSBjoern A. Zeeb 
4861bfcc09ddSBjoern A. Zeeb 	if (!vif) {
4862bfcc09ddSBjoern A. Zeeb 		iwl_mvm_flush_no_vif(mvm, queues, drop);
4863bfcc09ddSBjoern A. Zeeb 		return;
4864bfcc09ddSBjoern A. Zeeb 	}
4865bfcc09ddSBjoern A. Zeeb 
4866bfcc09ddSBjoern A. Zeeb 	if (vif->type != NL80211_IFTYPE_STATION)
4867bfcc09ddSBjoern A. Zeeb 		return;
4868bfcc09ddSBjoern A. Zeeb 
4869bfcc09ddSBjoern A. Zeeb 	/* Make sure we're done with the deferred traffic before flushing */
4870bfcc09ddSBjoern A. Zeeb 	flush_work(&mvm->add_stream_wk);
4871bfcc09ddSBjoern A. Zeeb 
4872bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4873bfcc09ddSBjoern A. Zeeb 	mvmvif = iwl_mvm_vif_from_mac80211(vif);
4874bfcc09ddSBjoern A. Zeeb 
4875bfcc09ddSBjoern A. Zeeb 	/* flush the AP-station and all TDLS peers */
4876bfcc09ddSBjoern A. Zeeb 	for (i = 0; i < mvm->fw->ucode_capa.num_stations; i++) {
4877bfcc09ddSBjoern A. Zeeb 		sta = rcu_dereference_protected(mvm->fw_id_to_mac_id[i],
4878bfcc09ddSBjoern A. Zeeb 						lockdep_is_held(&mvm->mutex));
4879bfcc09ddSBjoern A. Zeeb 		if (IS_ERR_OR_NULL(sta))
4880bfcc09ddSBjoern A. Zeeb 			continue;
4881bfcc09ddSBjoern A. Zeeb 
4882bfcc09ddSBjoern A. Zeeb 		mvmsta = iwl_mvm_sta_from_mac80211(sta);
4883bfcc09ddSBjoern A. Zeeb 		if (mvmsta->vif != vif)
4884bfcc09ddSBjoern A. Zeeb 			continue;
4885bfcc09ddSBjoern A. Zeeb 
4886bfcc09ddSBjoern A. Zeeb 		/* make sure only TDLS peers or the AP are flushed */
4887bfcc09ddSBjoern A. Zeeb 		WARN_ON(i != mvmvif->ap_sta_id && !sta->tdls);
4888bfcc09ddSBjoern A. Zeeb 
4889bfcc09ddSBjoern A. Zeeb 		if (drop) {
4890bfcc09ddSBjoern A. Zeeb 			if (iwl_mvm_flush_sta(mvm, mvmsta, false))
4891bfcc09ddSBjoern A. Zeeb 				IWL_ERR(mvm, "flush request fail\n");
4892bfcc09ddSBjoern A. Zeeb 		} else {
4893bfcc09ddSBjoern A. Zeeb 			msk |= mvmsta->tfd_queue_msk;
4894bfcc09ddSBjoern A. Zeeb 			if (iwl_mvm_has_new_tx_api(mvm))
4895bfcc09ddSBjoern A. Zeeb 				iwl_mvm_wait_sta_queues_empty(mvm, mvmsta);
4896bfcc09ddSBjoern A. Zeeb 		}
4897bfcc09ddSBjoern A. Zeeb 	}
4898bfcc09ddSBjoern A. Zeeb 
4899bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4900bfcc09ddSBjoern A. Zeeb 
4901bfcc09ddSBjoern A. Zeeb 	/* this can take a while, and we may need/want other operations
4902bfcc09ddSBjoern A. Zeeb 	 * to succeed while doing this, so do it without the mutex held
4903bfcc09ddSBjoern A. Zeeb 	 */
4904bfcc09ddSBjoern A. Zeeb 	if (!drop && !iwl_mvm_has_new_tx_api(mvm))
4905bfcc09ddSBjoern A. Zeeb 		iwl_trans_wait_tx_queues_empty(mvm->trans, msk);
4906bfcc09ddSBjoern A. Zeeb }
4907bfcc09ddSBjoern A. Zeeb 
4908bfcc09ddSBjoern A. Zeeb static int iwl_mvm_mac_get_survey(struct ieee80211_hw *hw, int idx,
4909bfcc09ddSBjoern A. Zeeb 				  struct survey_info *survey)
4910bfcc09ddSBjoern A. Zeeb {
4911bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
4912bfcc09ddSBjoern A. Zeeb 	int ret;
4913bfcc09ddSBjoern A. Zeeb 
4914bfcc09ddSBjoern A. Zeeb 	memset(survey, 0, sizeof(*survey));
4915bfcc09ddSBjoern A. Zeeb 
4916bfcc09ddSBjoern A. Zeeb 	/* only support global statistics right now */
4917bfcc09ddSBjoern A. Zeeb 	if (idx != 0)
4918bfcc09ddSBjoern A. Zeeb 		return -ENOENT;
4919bfcc09ddSBjoern A. Zeeb 
4920bfcc09ddSBjoern A. Zeeb 	if (!fw_has_capa(&mvm->fw->ucode_capa,
4921bfcc09ddSBjoern A. Zeeb 			 IWL_UCODE_TLV_CAPA_RADIO_BEACON_STATS))
4922bfcc09ddSBjoern A. Zeeb 		return -ENOENT;
4923bfcc09ddSBjoern A. Zeeb 
4924bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
4925bfcc09ddSBjoern A. Zeeb 
4926bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_firmware_running(mvm)) {
4927bfcc09ddSBjoern A. Zeeb 		ret = iwl_mvm_request_statistics(mvm, false);
4928bfcc09ddSBjoern A. Zeeb 		if (ret)
4929bfcc09ddSBjoern A. Zeeb 			goto out;
4930bfcc09ddSBjoern A. Zeeb 	}
4931bfcc09ddSBjoern A. Zeeb 
4932bfcc09ddSBjoern A. Zeeb 	survey->filled = SURVEY_INFO_TIME |
4933bfcc09ddSBjoern A. Zeeb 			 SURVEY_INFO_TIME_RX |
4934bfcc09ddSBjoern A. Zeeb 			 SURVEY_INFO_TIME_TX |
4935bfcc09ddSBjoern A. Zeeb 			 SURVEY_INFO_TIME_SCAN;
4936bfcc09ddSBjoern A. Zeeb 	survey->time = mvm->accu_radio_stats.on_time_rf +
4937bfcc09ddSBjoern A. Zeeb 		       mvm->radio_stats.on_time_rf;
4938bfcc09ddSBjoern A. Zeeb 	do_div(survey->time, USEC_PER_MSEC);
4939bfcc09ddSBjoern A. Zeeb 
4940bfcc09ddSBjoern A. Zeeb 	survey->time_rx = mvm->accu_radio_stats.rx_time +
4941bfcc09ddSBjoern A. Zeeb 			  mvm->radio_stats.rx_time;
4942bfcc09ddSBjoern A. Zeeb 	do_div(survey->time_rx, USEC_PER_MSEC);
4943bfcc09ddSBjoern A. Zeeb 
4944bfcc09ddSBjoern A. Zeeb 	survey->time_tx = mvm->accu_radio_stats.tx_time +
4945bfcc09ddSBjoern A. Zeeb 			  mvm->radio_stats.tx_time;
4946bfcc09ddSBjoern A. Zeeb 	do_div(survey->time_tx, USEC_PER_MSEC);
4947bfcc09ddSBjoern A. Zeeb 
4948bfcc09ddSBjoern A. Zeeb 	survey->time_scan = mvm->accu_radio_stats.on_time_scan +
4949bfcc09ddSBjoern A. Zeeb 			    mvm->radio_stats.on_time_scan;
4950bfcc09ddSBjoern A. Zeeb 	do_div(survey->time_scan, USEC_PER_MSEC);
4951bfcc09ddSBjoern A. Zeeb 
4952bfcc09ddSBjoern A. Zeeb 	ret = 0;
4953bfcc09ddSBjoern A. Zeeb  out:
4954bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
4955bfcc09ddSBjoern A. Zeeb 	return ret;
4956bfcc09ddSBjoern A. Zeeb }
4957bfcc09ddSBjoern A. Zeeb 
4958bfcc09ddSBjoern A. Zeeb static void iwl_mvm_set_sta_rate(u32 rate_n_flags, struct rate_info *rinfo)
4959bfcc09ddSBjoern A. Zeeb {
4960bfcc09ddSBjoern A. Zeeb 	u32 format = rate_n_flags & RATE_MCS_MOD_TYPE_MSK;
4961bfcc09ddSBjoern A. Zeeb 
4962bfcc09ddSBjoern A. Zeeb 	switch (rate_n_flags & RATE_MCS_CHAN_WIDTH_MSK) {
4963bfcc09ddSBjoern A. Zeeb 	case RATE_MCS_CHAN_WIDTH_20:
4964bfcc09ddSBjoern A. Zeeb 		rinfo->bw = RATE_INFO_BW_20;
4965bfcc09ddSBjoern A. Zeeb 		break;
4966bfcc09ddSBjoern A. Zeeb 	case RATE_MCS_CHAN_WIDTH_40:
4967bfcc09ddSBjoern A. Zeeb 		rinfo->bw = RATE_INFO_BW_40;
4968bfcc09ddSBjoern A. Zeeb 		break;
4969bfcc09ddSBjoern A. Zeeb 	case RATE_MCS_CHAN_WIDTH_80:
4970bfcc09ddSBjoern A. Zeeb 		rinfo->bw = RATE_INFO_BW_80;
4971bfcc09ddSBjoern A. Zeeb 		break;
4972bfcc09ddSBjoern A. Zeeb 	case RATE_MCS_CHAN_WIDTH_160:
4973bfcc09ddSBjoern A. Zeeb 		rinfo->bw = RATE_INFO_BW_160;
4974bfcc09ddSBjoern A. Zeeb 		break;
4975bfcc09ddSBjoern A. Zeeb 	}
4976bfcc09ddSBjoern A. Zeeb 
4977bfcc09ddSBjoern A. Zeeb 	if (format == RATE_MCS_CCK_MSK ||
4978bfcc09ddSBjoern A. Zeeb 	    format == RATE_MCS_LEGACY_OFDM_MSK) {
4979bfcc09ddSBjoern A. Zeeb 		int rate = u32_get_bits(rate_n_flags, RATE_LEGACY_RATE_MSK);
4980bfcc09ddSBjoern A. Zeeb 
4981bfcc09ddSBjoern A. Zeeb 		/* add the offset needed to get to the legacy ofdm indices */
4982bfcc09ddSBjoern A. Zeeb 		if (format == RATE_MCS_LEGACY_OFDM_MSK)
4983bfcc09ddSBjoern A. Zeeb 			rate += IWL_FIRST_OFDM_RATE;
4984bfcc09ddSBjoern A. Zeeb 
4985bfcc09ddSBjoern A. Zeeb 		switch (rate) {
4986bfcc09ddSBjoern A. Zeeb 		case IWL_RATE_1M_INDEX:
4987bfcc09ddSBjoern A. Zeeb 			rinfo->legacy = 10;
4988bfcc09ddSBjoern A. Zeeb 			break;
4989bfcc09ddSBjoern A. Zeeb 		case IWL_RATE_2M_INDEX:
4990bfcc09ddSBjoern A. Zeeb 			rinfo->legacy = 20;
4991bfcc09ddSBjoern A. Zeeb 			break;
4992bfcc09ddSBjoern A. Zeeb 		case IWL_RATE_5M_INDEX:
4993bfcc09ddSBjoern A. Zeeb 			rinfo->legacy = 55;
4994bfcc09ddSBjoern A. Zeeb 			break;
4995bfcc09ddSBjoern A. Zeeb 		case IWL_RATE_11M_INDEX:
4996bfcc09ddSBjoern A. Zeeb 			rinfo->legacy = 110;
4997bfcc09ddSBjoern A. Zeeb 			break;
4998bfcc09ddSBjoern A. Zeeb 		case IWL_RATE_6M_INDEX:
4999bfcc09ddSBjoern A. Zeeb 			rinfo->legacy = 60;
5000bfcc09ddSBjoern A. Zeeb 			break;
5001bfcc09ddSBjoern A. Zeeb 		case IWL_RATE_9M_INDEX:
5002bfcc09ddSBjoern A. Zeeb 			rinfo->legacy = 90;
5003bfcc09ddSBjoern A. Zeeb 			break;
5004bfcc09ddSBjoern A. Zeeb 		case IWL_RATE_12M_INDEX:
5005bfcc09ddSBjoern A. Zeeb 			rinfo->legacy = 120;
5006bfcc09ddSBjoern A. Zeeb 			break;
5007bfcc09ddSBjoern A. Zeeb 		case IWL_RATE_18M_INDEX:
5008bfcc09ddSBjoern A. Zeeb 			rinfo->legacy = 180;
5009bfcc09ddSBjoern A. Zeeb 			break;
5010bfcc09ddSBjoern A. Zeeb 		case IWL_RATE_24M_INDEX:
5011bfcc09ddSBjoern A. Zeeb 			rinfo->legacy = 240;
5012bfcc09ddSBjoern A. Zeeb 			break;
5013bfcc09ddSBjoern A. Zeeb 		case IWL_RATE_36M_INDEX:
5014bfcc09ddSBjoern A. Zeeb 			rinfo->legacy = 360;
5015bfcc09ddSBjoern A. Zeeb 			break;
5016bfcc09ddSBjoern A. Zeeb 		case IWL_RATE_48M_INDEX:
5017bfcc09ddSBjoern A. Zeeb 			rinfo->legacy = 480;
5018bfcc09ddSBjoern A. Zeeb 			break;
5019bfcc09ddSBjoern A. Zeeb 		case IWL_RATE_54M_INDEX:
5020bfcc09ddSBjoern A. Zeeb 			rinfo->legacy = 540;
5021bfcc09ddSBjoern A. Zeeb 		}
5022bfcc09ddSBjoern A. Zeeb 		return;
5023bfcc09ddSBjoern A. Zeeb 	}
5024bfcc09ddSBjoern A. Zeeb 
5025bfcc09ddSBjoern A. Zeeb 	rinfo->nss = u32_get_bits(rate_n_flags,
5026bfcc09ddSBjoern A. Zeeb 				  RATE_MCS_NSS_MSK) + 1;
5027bfcc09ddSBjoern A. Zeeb 	rinfo->mcs = format == RATE_MCS_HT_MSK ?
5028bfcc09ddSBjoern A. Zeeb 		RATE_HT_MCS_INDEX(rate_n_flags) :
5029bfcc09ddSBjoern A. Zeeb 		u32_get_bits(rate_n_flags, RATE_MCS_CODE_MSK);
5030bfcc09ddSBjoern A. Zeeb 
5031bfcc09ddSBjoern A. Zeeb 	if (format == RATE_MCS_HE_MSK) {
5032bfcc09ddSBjoern A. Zeeb 		u32 gi_ltf = u32_get_bits(rate_n_flags,
5033bfcc09ddSBjoern A. Zeeb 					  RATE_MCS_HE_GI_LTF_MSK);
5034bfcc09ddSBjoern A. Zeeb 
5035bfcc09ddSBjoern A. Zeeb 		rinfo->flags |= RATE_INFO_FLAGS_HE_MCS;
5036bfcc09ddSBjoern A. Zeeb 
5037bfcc09ddSBjoern A. Zeeb 		if (rate_n_flags & RATE_MCS_HE_106T_MSK) {
5038bfcc09ddSBjoern A. Zeeb 			rinfo->bw = RATE_INFO_BW_HE_RU;
5039bfcc09ddSBjoern A. Zeeb 			rinfo->he_ru_alloc = NL80211_RATE_INFO_HE_RU_ALLOC_106;
5040bfcc09ddSBjoern A. Zeeb 		}
5041bfcc09ddSBjoern A. Zeeb 
5042bfcc09ddSBjoern A. Zeeb 		switch (rate_n_flags & RATE_MCS_HE_TYPE_MSK) {
5043bfcc09ddSBjoern A. Zeeb 		case RATE_MCS_HE_TYPE_SU:
5044bfcc09ddSBjoern A. Zeeb 		case RATE_MCS_HE_TYPE_EXT_SU:
5045bfcc09ddSBjoern A. Zeeb 			if (gi_ltf == 0 || gi_ltf == 1)
5046bfcc09ddSBjoern A. Zeeb 				rinfo->he_gi = NL80211_RATE_INFO_HE_GI_0_8;
5047bfcc09ddSBjoern A. Zeeb 			else if (gi_ltf == 2)
5048bfcc09ddSBjoern A. Zeeb 				rinfo->he_gi = NL80211_RATE_INFO_HE_GI_1_6;
5049bfcc09ddSBjoern A. Zeeb 			else if (gi_ltf == 3)
5050bfcc09ddSBjoern A. Zeeb 				rinfo->he_gi = NL80211_RATE_INFO_HE_GI_3_2;
5051bfcc09ddSBjoern A. Zeeb 			else
5052bfcc09ddSBjoern A. Zeeb 				rinfo->he_gi = NL80211_RATE_INFO_HE_GI_0_8;
5053bfcc09ddSBjoern A. Zeeb 			break;
5054bfcc09ddSBjoern A. Zeeb 		case RATE_MCS_HE_TYPE_MU:
5055bfcc09ddSBjoern A. Zeeb 			if (gi_ltf == 0 || gi_ltf == 1)
5056bfcc09ddSBjoern A. Zeeb 				rinfo->he_gi = NL80211_RATE_INFO_HE_GI_0_8;
5057bfcc09ddSBjoern A. Zeeb 			else if (gi_ltf == 2)
5058bfcc09ddSBjoern A. Zeeb 				rinfo->he_gi = NL80211_RATE_INFO_HE_GI_1_6;
5059bfcc09ddSBjoern A. Zeeb 			else
5060bfcc09ddSBjoern A. Zeeb 				rinfo->he_gi = NL80211_RATE_INFO_HE_GI_3_2;
5061bfcc09ddSBjoern A. Zeeb 			break;
5062bfcc09ddSBjoern A. Zeeb 		case RATE_MCS_HE_TYPE_TRIG:
5063bfcc09ddSBjoern A. Zeeb 			if (gi_ltf == 0 || gi_ltf == 1)
5064bfcc09ddSBjoern A. Zeeb 				rinfo->he_gi = NL80211_RATE_INFO_HE_GI_1_6;
5065bfcc09ddSBjoern A. Zeeb 			else
5066bfcc09ddSBjoern A. Zeeb 				rinfo->he_gi = NL80211_RATE_INFO_HE_GI_3_2;
5067bfcc09ddSBjoern A. Zeeb 			break;
5068bfcc09ddSBjoern A. Zeeb 		}
5069bfcc09ddSBjoern A. Zeeb 
5070bfcc09ddSBjoern A. Zeeb 		if (rate_n_flags & RATE_HE_DUAL_CARRIER_MODE_MSK)
5071bfcc09ddSBjoern A. Zeeb 			rinfo->he_dcm = 1;
5072bfcc09ddSBjoern A. Zeeb 		return;
5073bfcc09ddSBjoern A. Zeeb 	}
5074bfcc09ddSBjoern A. Zeeb 
5075bfcc09ddSBjoern A. Zeeb 	if (rate_n_flags & RATE_MCS_SGI_MSK)
5076bfcc09ddSBjoern A. Zeeb 		rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI;
5077bfcc09ddSBjoern A. Zeeb 
5078bfcc09ddSBjoern A. Zeeb 	if (format == RATE_MCS_HT_MSK) {
5079bfcc09ddSBjoern A. Zeeb 		rinfo->flags |= RATE_INFO_FLAGS_MCS;
5080bfcc09ddSBjoern A. Zeeb 
5081bfcc09ddSBjoern A. Zeeb 	} else if (format == RATE_MCS_VHT_MSK) {
5082bfcc09ddSBjoern A. Zeeb 		rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS;
5083bfcc09ddSBjoern A. Zeeb 	}
5084bfcc09ddSBjoern A. Zeeb 
5085bfcc09ddSBjoern A. Zeeb }
5086bfcc09ddSBjoern A. Zeeb 
5087bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mac_sta_statistics(struct ieee80211_hw *hw,
5088bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_vif *vif,
5089bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_sta *sta,
5090bfcc09ddSBjoern A. Zeeb 				       struct station_info *sinfo)
5091bfcc09ddSBjoern A. Zeeb {
5092bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
5093bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
5094bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
5095bfcc09ddSBjoern A. Zeeb 
5096bfcc09ddSBjoern A. Zeeb 	if (mvmsta->avg_energy) {
5097bfcc09ddSBjoern A. Zeeb 		sinfo->signal_avg = -(s8)mvmsta->avg_energy;
5098bfcc09ddSBjoern A. Zeeb 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_SIGNAL_AVG);
5099bfcc09ddSBjoern A. Zeeb 	}
5100bfcc09ddSBjoern A. Zeeb 
5101bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_has_tlc_offload(mvm)) {
5102bfcc09ddSBjoern A. Zeeb 		struct iwl_lq_sta_rs_fw *lq_sta = &mvmsta->lq_sta.rs_fw;
5103bfcc09ddSBjoern A. Zeeb 
5104bfcc09ddSBjoern A. Zeeb 		iwl_mvm_set_sta_rate(lq_sta->last_rate_n_flags, &sinfo->txrate);
5105bfcc09ddSBjoern A. Zeeb 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_BITRATE);
5106bfcc09ddSBjoern A. Zeeb 	}
5107bfcc09ddSBjoern A. Zeeb 
5108bfcc09ddSBjoern A. Zeeb 	/* if beacon filtering isn't on mac80211 does it anyway */
5109bfcc09ddSBjoern A. Zeeb 	if (!(vif->driver_flags & IEEE80211_VIF_BEACON_FILTER))
5110bfcc09ddSBjoern A. Zeeb 		return;
5111bfcc09ddSBjoern A. Zeeb 
5112bfcc09ddSBjoern A. Zeeb 	if (!vif->bss_conf.assoc)
5113bfcc09ddSBjoern A. Zeeb 		return;
5114bfcc09ddSBjoern A. Zeeb 
5115bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
5116bfcc09ddSBjoern A. Zeeb 
5117bfcc09ddSBjoern A. Zeeb 	if (mvmvif->ap_sta_id != mvmsta->sta_id)
5118bfcc09ddSBjoern A. Zeeb 		goto unlock;
5119bfcc09ddSBjoern A. Zeeb 
5120bfcc09ddSBjoern A. Zeeb 	if (iwl_mvm_request_statistics(mvm, false))
5121bfcc09ddSBjoern A. Zeeb 		goto unlock;
5122bfcc09ddSBjoern A. Zeeb 
5123bfcc09ddSBjoern A. Zeeb 	sinfo->rx_beacon = mvmvif->beacon_stats.num_beacons +
5124bfcc09ddSBjoern A. Zeeb 			   mvmvif->beacon_stats.accu_num_beacons;
5125bfcc09ddSBjoern A. Zeeb 	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_BEACON_RX);
5126bfcc09ddSBjoern A. Zeeb 	if (mvmvif->beacon_stats.avg_signal) {
5127bfcc09ddSBjoern A. Zeeb 		/* firmware only reports a value after RXing a few beacons */
5128bfcc09ddSBjoern A. Zeeb 		sinfo->rx_beacon_signal_avg = mvmvif->beacon_stats.avg_signal;
5129bfcc09ddSBjoern A. Zeeb 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_BEACON_SIGNAL_AVG);
5130bfcc09ddSBjoern A. Zeeb 	}
5131bfcc09ddSBjoern A. Zeeb  unlock:
5132bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
5133bfcc09ddSBjoern A. Zeeb }
5134bfcc09ddSBjoern A. Zeeb 
5135bfcc09ddSBjoern A. Zeeb static void iwl_mvm_event_mlme_callback_ini(struct iwl_mvm *mvm,
5136bfcc09ddSBjoern A. Zeeb 					    struct ieee80211_vif *vif,
5137bfcc09ddSBjoern A. Zeeb 					    const  struct ieee80211_mlme_event *mlme)
5138bfcc09ddSBjoern A. Zeeb {
5139bfcc09ddSBjoern A. Zeeb 	if ((mlme->data == ASSOC_EVENT || mlme->data == AUTH_EVENT) &&
5140bfcc09ddSBjoern A. Zeeb 	    (mlme->status == MLME_DENIED || mlme->status == MLME_TIMEOUT)) {
5141bfcc09ddSBjoern A. Zeeb 		iwl_dbg_tlv_time_point(&mvm->fwrt,
5142bfcc09ddSBjoern A. Zeeb 				       IWL_FW_INI_TIME_POINT_ASSOC_FAILED,
5143bfcc09ddSBjoern A. Zeeb 				       NULL);
5144bfcc09ddSBjoern A. Zeeb 		return;
5145bfcc09ddSBjoern A. Zeeb 	}
5146bfcc09ddSBjoern A. Zeeb 
5147bfcc09ddSBjoern A. Zeeb 	if (mlme->data == DEAUTH_RX_EVENT || mlme->data == DEAUTH_TX_EVENT) {
5148bfcc09ddSBjoern A. Zeeb 		iwl_dbg_tlv_time_point(&mvm->fwrt,
5149bfcc09ddSBjoern A. Zeeb 				       IWL_FW_INI_TIME_POINT_DEASSOC,
5150bfcc09ddSBjoern A. Zeeb 				       NULL);
5151bfcc09ddSBjoern A. Zeeb 		return;
5152bfcc09ddSBjoern A. Zeeb 	}
5153bfcc09ddSBjoern A. Zeeb }
5154bfcc09ddSBjoern A. Zeeb 
5155bfcc09ddSBjoern A. Zeeb static void iwl_mvm_event_mlme_callback(struct iwl_mvm *mvm,
5156bfcc09ddSBjoern A. Zeeb 					struct ieee80211_vif *vif,
5157bfcc09ddSBjoern A. Zeeb 					const struct ieee80211_event *event)
5158bfcc09ddSBjoern A. Zeeb {
5159bfcc09ddSBjoern A. Zeeb #define CHECK_MLME_TRIGGER(_cnt, _fmt...)				\
5160bfcc09ddSBjoern A. Zeeb 	do {								\
5161bfcc09ddSBjoern A. Zeeb 		if ((trig_mlme->_cnt) && --(trig_mlme->_cnt))		\
5162bfcc09ddSBjoern A. Zeeb 			break;						\
5163bfcc09ddSBjoern A. Zeeb 		iwl_fw_dbg_collect_trig(&(mvm)->fwrt, trig, _fmt);	\
5164bfcc09ddSBjoern A. Zeeb 	} while (0)
5165bfcc09ddSBjoern A. Zeeb 
5166bfcc09ddSBjoern A. Zeeb 	struct iwl_fw_dbg_trigger_tlv *trig;
5167bfcc09ddSBjoern A. Zeeb 	struct iwl_fw_dbg_trigger_mlme *trig_mlme;
5168bfcc09ddSBjoern A. Zeeb 
5169bfcc09ddSBjoern A. Zeeb 	if (iwl_trans_dbg_ini_valid(mvm->trans)) {
5170bfcc09ddSBjoern A. Zeeb 		iwl_mvm_event_mlme_callback_ini(mvm, vif, &event->u.mlme);
5171bfcc09ddSBjoern A. Zeeb 		return;
5172bfcc09ddSBjoern A. Zeeb 	}
5173bfcc09ddSBjoern A. Zeeb 
5174bfcc09ddSBjoern A. Zeeb 	trig = iwl_fw_dbg_trigger_on(&mvm->fwrt, ieee80211_vif_to_wdev(vif),
5175bfcc09ddSBjoern A. Zeeb 				     FW_DBG_TRIGGER_MLME);
5176bfcc09ddSBjoern A. Zeeb 	if (!trig)
5177bfcc09ddSBjoern A. Zeeb 		return;
5178bfcc09ddSBjoern A. Zeeb 
5179bfcc09ddSBjoern A. Zeeb 	trig_mlme = (void *)trig->data;
5180bfcc09ddSBjoern A. Zeeb 
5181bfcc09ddSBjoern A. Zeeb 	if (event->u.mlme.data == ASSOC_EVENT) {
5182bfcc09ddSBjoern A. Zeeb 		if (event->u.mlme.status == MLME_DENIED)
5183bfcc09ddSBjoern A. Zeeb 			CHECK_MLME_TRIGGER(stop_assoc_denied,
5184bfcc09ddSBjoern A. Zeeb 					   "DENIED ASSOC: reason %d",
5185bfcc09ddSBjoern A. Zeeb 					    event->u.mlme.reason);
5186bfcc09ddSBjoern A. Zeeb 		else if (event->u.mlme.status == MLME_TIMEOUT)
5187bfcc09ddSBjoern A. Zeeb 			CHECK_MLME_TRIGGER(stop_assoc_timeout,
5188bfcc09ddSBjoern A. Zeeb 					   "ASSOC TIMEOUT");
5189bfcc09ddSBjoern A. Zeeb 	} else if (event->u.mlme.data == AUTH_EVENT) {
5190bfcc09ddSBjoern A. Zeeb 		if (event->u.mlme.status == MLME_DENIED)
5191bfcc09ddSBjoern A. Zeeb 			CHECK_MLME_TRIGGER(stop_auth_denied,
5192bfcc09ddSBjoern A. Zeeb 					   "DENIED AUTH: reason %d",
5193bfcc09ddSBjoern A. Zeeb 					   event->u.mlme.reason);
5194bfcc09ddSBjoern A. Zeeb 		else if (event->u.mlme.status == MLME_TIMEOUT)
5195bfcc09ddSBjoern A. Zeeb 			CHECK_MLME_TRIGGER(stop_auth_timeout,
5196bfcc09ddSBjoern A. Zeeb 					   "AUTH TIMEOUT");
5197bfcc09ddSBjoern A. Zeeb 	} else if (event->u.mlme.data == DEAUTH_RX_EVENT) {
5198bfcc09ddSBjoern A. Zeeb 		CHECK_MLME_TRIGGER(stop_rx_deauth,
5199bfcc09ddSBjoern A. Zeeb 				   "DEAUTH RX %d", event->u.mlme.reason);
5200bfcc09ddSBjoern A. Zeeb 	} else if (event->u.mlme.data == DEAUTH_TX_EVENT) {
5201bfcc09ddSBjoern A. Zeeb 		CHECK_MLME_TRIGGER(stop_tx_deauth,
5202bfcc09ddSBjoern A. Zeeb 				   "DEAUTH TX %d", event->u.mlme.reason);
5203bfcc09ddSBjoern A. Zeeb 	}
5204bfcc09ddSBjoern A. Zeeb #undef CHECK_MLME_TRIGGER
5205bfcc09ddSBjoern A. Zeeb }
5206bfcc09ddSBjoern A. Zeeb 
5207bfcc09ddSBjoern A. Zeeb static void iwl_mvm_event_bar_rx_callback(struct iwl_mvm *mvm,
5208bfcc09ddSBjoern A. Zeeb 					  struct ieee80211_vif *vif,
5209bfcc09ddSBjoern A. Zeeb 					  const struct ieee80211_event *event)
5210bfcc09ddSBjoern A. Zeeb {
5211bfcc09ddSBjoern A. Zeeb 	struct iwl_fw_dbg_trigger_tlv *trig;
5212bfcc09ddSBjoern A. Zeeb 	struct iwl_fw_dbg_trigger_ba *ba_trig;
5213bfcc09ddSBjoern A. Zeeb 
5214bfcc09ddSBjoern A. Zeeb 	trig = iwl_fw_dbg_trigger_on(&mvm->fwrt, ieee80211_vif_to_wdev(vif),
5215bfcc09ddSBjoern A. Zeeb 				     FW_DBG_TRIGGER_BA);
5216bfcc09ddSBjoern A. Zeeb 	if (!trig)
5217bfcc09ddSBjoern A. Zeeb 		return;
5218bfcc09ddSBjoern A. Zeeb 
5219bfcc09ddSBjoern A. Zeeb 	ba_trig = (void *)trig->data;
5220bfcc09ddSBjoern A. Zeeb 
5221bfcc09ddSBjoern A. Zeeb 	if (!(le16_to_cpu(ba_trig->rx_bar) & BIT(event->u.ba.tid)))
5222bfcc09ddSBjoern A. Zeeb 		return;
5223bfcc09ddSBjoern A. Zeeb 
5224bfcc09ddSBjoern A. Zeeb 	iwl_fw_dbg_collect_trig(&mvm->fwrt, trig,
5225bfcc09ddSBjoern A. Zeeb 				"BAR received from %pM, tid %d, ssn %d",
5226bfcc09ddSBjoern A. Zeeb 				event->u.ba.sta->addr, event->u.ba.tid,
5227bfcc09ddSBjoern A. Zeeb 				event->u.ba.ssn);
5228bfcc09ddSBjoern A. Zeeb }
5229bfcc09ddSBjoern A. Zeeb 
5230bfcc09ddSBjoern A. Zeeb static void iwl_mvm_mac_event_callback(struct ieee80211_hw *hw,
5231bfcc09ddSBjoern A. Zeeb 				       struct ieee80211_vif *vif,
5232bfcc09ddSBjoern A. Zeeb 				       const struct ieee80211_event *event)
5233bfcc09ddSBjoern A. Zeeb {
5234bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
5235bfcc09ddSBjoern A. Zeeb 
5236bfcc09ddSBjoern A. Zeeb 	switch (event->type) {
5237bfcc09ddSBjoern A. Zeeb 	case MLME_EVENT:
5238bfcc09ddSBjoern A. Zeeb 		iwl_mvm_event_mlme_callback(mvm, vif, event);
5239bfcc09ddSBjoern A. Zeeb 		break;
5240bfcc09ddSBjoern A. Zeeb 	case BAR_RX_EVENT:
5241bfcc09ddSBjoern A. Zeeb 		iwl_mvm_event_bar_rx_callback(mvm, vif, event);
5242bfcc09ddSBjoern A. Zeeb 		break;
5243bfcc09ddSBjoern A. Zeeb 	case BA_FRAME_TIMEOUT:
5244bfcc09ddSBjoern A. Zeeb 		iwl_mvm_event_frame_timeout_callback(mvm, vif, event->u.ba.sta,
5245bfcc09ddSBjoern A. Zeeb 						     event->u.ba.tid);
5246bfcc09ddSBjoern A. Zeeb 		break;
5247bfcc09ddSBjoern A. Zeeb 	default:
5248bfcc09ddSBjoern A. Zeeb 		break;
5249bfcc09ddSBjoern A. Zeeb 	}
5250bfcc09ddSBjoern A. Zeeb }
5251bfcc09ddSBjoern A. Zeeb 
5252bfcc09ddSBjoern A. Zeeb void iwl_mvm_sync_rx_queues_internal(struct iwl_mvm *mvm,
5253bfcc09ddSBjoern A. Zeeb 				     enum iwl_mvm_rxq_notif_type type,
5254bfcc09ddSBjoern A. Zeeb 				     bool sync,
5255bfcc09ddSBjoern A. Zeeb 				     const void *data, u32 size)
5256bfcc09ddSBjoern A. Zeeb {
5257bfcc09ddSBjoern A. Zeeb 	struct {
5258bfcc09ddSBjoern A. Zeeb 		struct iwl_rxq_sync_cmd cmd;
5259bfcc09ddSBjoern A. Zeeb 		struct iwl_mvm_internal_rxq_notif notif;
5260bfcc09ddSBjoern A. Zeeb 	} __packed cmd = {
5261bfcc09ddSBjoern A. Zeeb 		.cmd.rxq_mask = cpu_to_le32(BIT(mvm->trans->num_rx_queues) - 1),
5262bfcc09ddSBjoern A. Zeeb 		.cmd.count =
5263bfcc09ddSBjoern A. Zeeb 			cpu_to_le32(sizeof(struct iwl_mvm_internal_rxq_notif) +
5264bfcc09ddSBjoern A. Zeeb 				    size),
5265bfcc09ddSBjoern A. Zeeb 		.notif.type = type,
5266bfcc09ddSBjoern A. Zeeb 		.notif.sync = sync,
5267bfcc09ddSBjoern A. Zeeb 	};
5268bfcc09ddSBjoern A. Zeeb 	struct iwl_host_cmd hcmd = {
5269bfcc09ddSBjoern A. Zeeb 		.id = WIDE_ID(DATA_PATH_GROUP, TRIGGER_RX_QUEUES_NOTIF_CMD),
5270bfcc09ddSBjoern A. Zeeb 		.data[0] = &cmd,
5271bfcc09ddSBjoern A. Zeeb 		.len[0] = sizeof(cmd),
5272bfcc09ddSBjoern A. Zeeb 		.data[1] = data,
5273bfcc09ddSBjoern A. Zeeb 		.len[1] = size,
5274bfcc09ddSBjoern A. Zeeb 		.flags = sync ? 0 : CMD_ASYNC,
5275bfcc09ddSBjoern A. Zeeb 	};
5276bfcc09ddSBjoern A. Zeeb 	int ret;
5277bfcc09ddSBjoern A. Zeeb 
5278bfcc09ddSBjoern A. Zeeb 	/* size must be a multiple of DWORD */
5279bfcc09ddSBjoern A. Zeeb 	if (WARN_ON(cmd.cmd.count & cpu_to_le32(3)))
5280bfcc09ddSBjoern A. Zeeb 		return;
5281bfcc09ddSBjoern A. Zeeb 
5282bfcc09ddSBjoern A. Zeeb 	if (!iwl_mvm_has_new_rx_api(mvm))
5283bfcc09ddSBjoern A. Zeeb 		return;
5284bfcc09ddSBjoern A. Zeeb 
5285bfcc09ddSBjoern A. Zeeb 	if (sync) {
5286bfcc09ddSBjoern A. Zeeb 		cmd.notif.cookie = mvm->queue_sync_cookie;
5287bfcc09ddSBjoern A. Zeeb 		mvm->queue_sync_state = (1 << mvm->trans->num_rx_queues) - 1;
5288bfcc09ddSBjoern A. Zeeb 	}
5289bfcc09ddSBjoern A. Zeeb 
5290bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_send_cmd(mvm, &hcmd);
5291bfcc09ddSBjoern A. Zeeb 	if (ret) {
5292bfcc09ddSBjoern A. Zeeb 		IWL_ERR(mvm, "Failed to trigger RX queues sync (%d)\n", ret);
5293bfcc09ddSBjoern A. Zeeb 		goto out;
5294bfcc09ddSBjoern A. Zeeb 	}
5295bfcc09ddSBjoern A. Zeeb 
5296bfcc09ddSBjoern A. Zeeb 	if (sync) {
5297bfcc09ddSBjoern A. Zeeb 		lockdep_assert_held(&mvm->mutex);
5298bfcc09ddSBjoern A. Zeeb 		ret = wait_event_timeout(mvm->rx_sync_waitq,
5299bfcc09ddSBjoern A. Zeeb 					 READ_ONCE(mvm->queue_sync_state) == 0 ||
5300bfcc09ddSBjoern A. Zeeb 					 iwl_mvm_is_radio_killed(mvm),
5301bfcc09ddSBjoern A. Zeeb 					 HZ);
5302bfcc09ddSBjoern A. Zeeb 		WARN_ONCE(!ret && !iwl_mvm_is_radio_killed(mvm),
5303bfcc09ddSBjoern A. Zeeb 			  "queue sync: failed to sync, state is 0x%lx\n",
5304bfcc09ddSBjoern A. Zeeb 			  mvm->queue_sync_state);
5305bfcc09ddSBjoern A. Zeeb 	}
5306bfcc09ddSBjoern A. Zeeb 
5307bfcc09ddSBjoern A. Zeeb out:
5308bfcc09ddSBjoern A. Zeeb 	if (sync) {
5309bfcc09ddSBjoern A. Zeeb 		mvm->queue_sync_state = 0;
5310bfcc09ddSBjoern A. Zeeb 		mvm->queue_sync_cookie++;
5311bfcc09ddSBjoern A. Zeeb 	}
5312bfcc09ddSBjoern A. Zeeb }
5313bfcc09ddSBjoern A. Zeeb 
5314bfcc09ddSBjoern A. Zeeb static void iwl_mvm_sync_rx_queues(struct ieee80211_hw *hw)
5315bfcc09ddSBjoern A. Zeeb {
5316bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
5317bfcc09ddSBjoern A. Zeeb 
5318bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
5319bfcc09ddSBjoern A. Zeeb 	iwl_mvm_sync_rx_queues_internal(mvm, IWL_MVM_RXQ_EMPTY, true, NULL, 0);
5320bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
5321bfcc09ddSBjoern A. Zeeb }
5322bfcc09ddSBjoern A. Zeeb 
5323bfcc09ddSBjoern A. Zeeb static int
5324bfcc09ddSBjoern A. Zeeb iwl_mvm_mac_get_ftm_responder_stats(struct ieee80211_hw *hw,
5325bfcc09ddSBjoern A. Zeeb 				    struct ieee80211_vif *vif,
5326bfcc09ddSBjoern A. Zeeb 				    struct cfg80211_ftm_responder_stats *stats)
5327bfcc09ddSBjoern A. Zeeb {
5328bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
5329bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
5330bfcc09ddSBjoern A. Zeeb 
5331bfcc09ddSBjoern A. Zeeb 	if (vif->p2p || vif->type != NL80211_IFTYPE_AP ||
5332bfcc09ddSBjoern A. Zeeb 	    !mvmvif->ap_ibss_active || !vif->bss_conf.ftm_responder)
5333bfcc09ddSBjoern A. Zeeb 		return -EINVAL;
5334bfcc09ddSBjoern A. Zeeb 
5335bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
5336bfcc09ddSBjoern A. Zeeb 	*stats = mvm->ftm_resp_stats;
5337bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
5338bfcc09ddSBjoern A. Zeeb 
5339bfcc09ddSBjoern A. Zeeb 	stats->filled = BIT(NL80211_FTM_STATS_SUCCESS_NUM) |
5340bfcc09ddSBjoern A. Zeeb 			BIT(NL80211_FTM_STATS_PARTIAL_NUM) |
5341bfcc09ddSBjoern A. Zeeb 			BIT(NL80211_FTM_STATS_FAILED_NUM) |
5342bfcc09ddSBjoern A. Zeeb 			BIT(NL80211_FTM_STATS_ASAP_NUM) |
5343bfcc09ddSBjoern A. Zeeb 			BIT(NL80211_FTM_STATS_NON_ASAP_NUM) |
5344bfcc09ddSBjoern A. Zeeb 			BIT(NL80211_FTM_STATS_TOTAL_DURATION_MSEC) |
5345bfcc09ddSBjoern A. Zeeb 			BIT(NL80211_FTM_STATS_UNKNOWN_TRIGGERS_NUM) |
5346bfcc09ddSBjoern A. Zeeb 			BIT(NL80211_FTM_STATS_RESCHEDULE_REQUESTS_NUM) |
5347bfcc09ddSBjoern A. Zeeb 			BIT(NL80211_FTM_STATS_OUT_OF_WINDOW_TRIGGERS_NUM);
5348bfcc09ddSBjoern A. Zeeb 
5349bfcc09ddSBjoern A. Zeeb 	return 0;
5350bfcc09ddSBjoern A. Zeeb }
5351bfcc09ddSBjoern A. Zeeb 
5352bfcc09ddSBjoern A. Zeeb static int iwl_mvm_start_pmsr(struct ieee80211_hw *hw,
5353bfcc09ddSBjoern A. Zeeb 			      struct ieee80211_vif *vif,
5354bfcc09ddSBjoern A. Zeeb 			      struct cfg80211_pmsr_request *request)
5355bfcc09ddSBjoern A. Zeeb {
5356bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
5357bfcc09ddSBjoern A. Zeeb 	int ret;
5358bfcc09ddSBjoern A. Zeeb 
5359bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
5360bfcc09ddSBjoern A. Zeeb 	ret = iwl_mvm_ftm_start(mvm, vif, request);
5361bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
5362bfcc09ddSBjoern A. Zeeb 
5363bfcc09ddSBjoern A. Zeeb 	return ret;
5364bfcc09ddSBjoern A. Zeeb }
5365bfcc09ddSBjoern A. Zeeb 
5366bfcc09ddSBjoern A. Zeeb static void iwl_mvm_abort_pmsr(struct ieee80211_hw *hw,
5367bfcc09ddSBjoern A. Zeeb 			       struct ieee80211_vif *vif,
5368bfcc09ddSBjoern A. Zeeb 			       struct cfg80211_pmsr_request *request)
5369bfcc09ddSBjoern A. Zeeb {
5370bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
5371bfcc09ddSBjoern A. Zeeb 
5372bfcc09ddSBjoern A. Zeeb 	mutex_lock(&mvm->mutex);
5373bfcc09ddSBjoern A. Zeeb 	iwl_mvm_ftm_abort(mvm, request);
5374bfcc09ddSBjoern A. Zeeb 	mutex_unlock(&mvm->mutex);
5375bfcc09ddSBjoern A. Zeeb }
5376bfcc09ddSBjoern A. Zeeb 
5377bfcc09ddSBjoern A. Zeeb static bool iwl_mvm_can_hw_csum(struct sk_buff *skb)
5378bfcc09ddSBjoern A. Zeeb {
5379bfcc09ddSBjoern A. Zeeb 	u8 protocol = ip_hdr(skb)->protocol;
5380bfcc09ddSBjoern A. Zeeb 
5381bfcc09ddSBjoern A. Zeeb 	if (!IS_ENABLED(CONFIG_INET))
5382bfcc09ddSBjoern A. Zeeb 		return false;
5383bfcc09ddSBjoern A. Zeeb 
5384bfcc09ddSBjoern A. Zeeb 	return protocol == IPPROTO_TCP || protocol == IPPROTO_UDP;
5385bfcc09ddSBjoern A. Zeeb }
5386bfcc09ddSBjoern A. Zeeb 
5387bfcc09ddSBjoern A. Zeeb static bool iwl_mvm_mac_can_aggregate(struct ieee80211_hw *hw,
5388bfcc09ddSBjoern A. Zeeb 				      struct sk_buff *head,
5389bfcc09ddSBjoern A. Zeeb 				      struct sk_buff *skb)
5390bfcc09ddSBjoern A. Zeeb {
5391bfcc09ddSBjoern A. Zeeb 	struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw);
5392bfcc09ddSBjoern A. Zeeb 
5393bfcc09ddSBjoern A. Zeeb 	/* For now don't aggregate IPv6 in AMSDU */
5394bfcc09ddSBjoern A. Zeeb 	if (skb->protocol != htons(ETH_P_IP))
5395bfcc09ddSBjoern A. Zeeb 		return false;
5396bfcc09ddSBjoern A. Zeeb 
5397bfcc09ddSBjoern A. Zeeb 	if (!iwl_mvm_is_csum_supported(mvm))
5398bfcc09ddSBjoern A. Zeeb 		return true;
5399bfcc09ddSBjoern A. Zeeb 
5400bfcc09ddSBjoern A. Zeeb 	return iwl_mvm_can_hw_csum(skb) == iwl_mvm_can_hw_csum(head);
5401bfcc09ddSBjoern A. Zeeb }
5402bfcc09ddSBjoern A. Zeeb 
5403bfcc09ddSBjoern A. Zeeb const struct ieee80211_ops iwl_mvm_hw_ops = {
5404bfcc09ddSBjoern A. Zeeb 	.tx = iwl_mvm_mac_tx,
5405bfcc09ddSBjoern A. Zeeb 	.wake_tx_queue = iwl_mvm_mac_wake_tx_queue,
5406bfcc09ddSBjoern A. Zeeb 	.ampdu_action = iwl_mvm_mac_ampdu_action,
5407bfcc09ddSBjoern A. Zeeb 	.get_antenna = iwl_mvm_op_get_antenna,
5408bfcc09ddSBjoern A. Zeeb 	.start = iwl_mvm_mac_start,
5409bfcc09ddSBjoern A. Zeeb 	.reconfig_complete = iwl_mvm_mac_reconfig_complete,
5410bfcc09ddSBjoern A. Zeeb 	.stop = iwl_mvm_mac_stop,
5411bfcc09ddSBjoern A. Zeeb 	.add_interface = iwl_mvm_mac_add_interface,
5412bfcc09ddSBjoern A. Zeeb 	.remove_interface = iwl_mvm_mac_remove_interface,
5413bfcc09ddSBjoern A. Zeeb 	.config = iwl_mvm_mac_config,
5414bfcc09ddSBjoern A. Zeeb 	.prepare_multicast = iwl_mvm_prepare_multicast,
5415bfcc09ddSBjoern A. Zeeb 	.configure_filter = iwl_mvm_configure_filter,
5416bfcc09ddSBjoern A. Zeeb 	.config_iface_filter = iwl_mvm_config_iface_filter,
5417bfcc09ddSBjoern A. Zeeb 	.bss_info_changed = iwl_mvm_bss_info_changed,
5418bfcc09ddSBjoern A. Zeeb 	.hw_scan = iwl_mvm_mac_hw_scan,
5419bfcc09ddSBjoern A. Zeeb 	.cancel_hw_scan = iwl_mvm_mac_cancel_hw_scan,
5420bfcc09ddSBjoern A. Zeeb 	.sta_pre_rcu_remove = iwl_mvm_sta_pre_rcu_remove,
5421bfcc09ddSBjoern A. Zeeb 	.sta_state = iwl_mvm_mac_sta_state,
5422bfcc09ddSBjoern A. Zeeb 	.sta_notify = iwl_mvm_mac_sta_notify,
5423bfcc09ddSBjoern A. Zeeb 	.allow_buffered_frames = iwl_mvm_mac_allow_buffered_frames,
5424bfcc09ddSBjoern A. Zeeb 	.release_buffered_frames = iwl_mvm_mac_release_buffered_frames,
5425bfcc09ddSBjoern A. Zeeb 	.set_rts_threshold = iwl_mvm_mac_set_rts_threshold,
5426bfcc09ddSBjoern A. Zeeb 	.sta_rc_update = iwl_mvm_sta_rc_update,
5427bfcc09ddSBjoern A. Zeeb 	.conf_tx = iwl_mvm_mac_conf_tx,
5428bfcc09ddSBjoern A. Zeeb 	.mgd_prepare_tx = iwl_mvm_mac_mgd_prepare_tx,
5429bfcc09ddSBjoern A. Zeeb 	.mgd_complete_tx = iwl_mvm_mac_mgd_complete_tx,
5430bfcc09ddSBjoern A. Zeeb 	.mgd_protect_tdls_discover = iwl_mvm_mac_mgd_protect_tdls_discover,
5431bfcc09ddSBjoern A. Zeeb 	.flush = iwl_mvm_mac_flush,
5432bfcc09ddSBjoern A. Zeeb 	.sched_scan_start = iwl_mvm_mac_sched_scan_start,
5433bfcc09ddSBjoern A. Zeeb 	.sched_scan_stop = iwl_mvm_mac_sched_scan_stop,
5434bfcc09ddSBjoern A. Zeeb 	.set_key = iwl_mvm_mac_set_key,
5435bfcc09ddSBjoern A. Zeeb 	.update_tkip_key = iwl_mvm_mac_update_tkip_key,
5436bfcc09ddSBjoern A. Zeeb 	.remain_on_channel = iwl_mvm_roc,
5437bfcc09ddSBjoern A. Zeeb 	.cancel_remain_on_channel = iwl_mvm_cancel_roc,
5438bfcc09ddSBjoern A. Zeeb 	.add_chanctx = iwl_mvm_add_chanctx,
5439bfcc09ddSBjoern A. Zeeb 	.remove_chanctx = iwl_mvm_remove_chanctx,
5440bfcc09ddSBjoern A. Zeeb 	.change_chanctx = iwl_mvm_change_chanctx,
5441bfcc09ddSBjoern A. Zeeb 	.assign_vif_chanctx = iwl_mvm_assign_vif_chanctx,
5442bfcc09ddSBjoern A. Zeeb 	.unassign_vif_chanctx = iwl_mvm_unassign_vif_chanctx,
5443bfcc09ddSBjoern A. Zeeb 	.switch_vif_chanctx = iwl_mvm_switch_vif_chanctx,
5444bfcc09ddSBjoern A. Zeeb 
5445bfcc09ddSBjoern A. Zeeb 	.start_ap = iwl_mvm_start_ap_ibss,
5446bfcc09ddSBjoern A. Zeeb 	.stop_ap = iwl_mvm_stop_ap_ibss,
5447bfcc09ddSBjoern A. Zeeb 	.join_ibss = iwl_mvm_start_ap_ibss,
5448bfcc09ddSBjoern A. Zeeb 	.leave_ibss = iwl_mvm_stop_ap_ibss,
5449bfcc09ddSBjoern A. Zeeb 
5450bfcc09ddSBjoern A. Zeeb 	.tx_last_beacon = iwl_mvm_tx_last_beacon,
5451bfcc09ddSBjoern A. Zeeb 
5452bfcc09ddSBjoern A. Zeeb 	.set_tim = iwl_mvm_set_tim,
5453bfcc09ddSBjoern A. Zeeb 
5454bfcc09ddSBjoern A. Zeeb 	.channel_switch = iwl_mvm_channel_switch,
5455bfcc09ddSBjoern A. Zeeb 	.pre_channel_switch = iwl_mvm_pre_channel_switch,
5456bfcc09ddSBjoern A. Zeeb 	.post_channel_switch = iwl_mvm_post_channel_switch,
5457bfcc09ddSBjoern A. Zeeb 	.abort_channel_switch = iwl_mvm_abort_channel_switch,
5458bfcc09ddSBjoern A. Zeeb 	.channel_switch_rx_beacon = iwl_mvm_channel_switch_rx_beacon,
5459bfcc09ddSBjoern A. Zeeb 
5460bfcc09ddSBjoern A. Zeeb 	.tdls_channel_switch = iwl_mvm_tdls_channel_switch,
5461bfcc09ddSBjoern A. Zeeb 	.tdls_cancel_channel_switch = iwl_mvm_tdls_cancel_channel_switch,
5462bfcc09ddSBjoern A. Zeeb 	.tdls_recv_channel_switch = iwl_mvm_tdls_recv_channel_switch,
5463bfcc09ddSBjoern A. Zeeb 
5464bfcc09ddSBjoern A. Zeeb 	.event_callback = iwl_mvm_mac_event_callback,
5465bfcc09ddSBjoern A. Zeeb 
5466bfcc09ddSBjoern A. Zeeb 	.sync_rx_queues = iwl_mvm_sync_rx_queues,
5467bfcc09ddSBjoern A. Zeeb 
5468bfcc09ddSBjoern A. Zeeb 	CFG80211_TESTMODE_CMD(iwl_mvm_mac_testmode_cmd)
5469bfcc09ddSBjoern A. Zeeb 
5470bfcc09ddSBjoern A. Zeeb #ifdef CONFIG_PM_SLEEP
5471bfcc09ddSBjoern A. Zeeb 	/* look at d3.c */
5472bfcc09ddSBjoern A. Zeeb 	.suspend = iwl_mvm_suspend,
5473bfcc09ddSBjoern A. Zeeb 	.resume = iwl_mvm_resume,
5474bfcc09ddSBjoern A. Zeeb 	.set_wakeup = iwl_mvm_set_wakeup,
5475bfcc09ddSBjoern A. Zeeb 	.set_rekey_data = iwl_mvm_set_rekey_data,
5476bfcc09ddSBjoern A. Zeeb #if IS_ENABLED(CONFIG_IPV6)
5477bfcc09ddSBjoern A. Zeeb 	.ipv6_addr_change = iwl_mvm_ipv6_addr_change,
5478bfcc09ddSBjoern A. Zeeb #endif
5479bfcc09ddSBjoern A. Zeeb 	.set_default_unicast_key = iwl_mvm_set_default_unicast_key,
5480bfcc09ddSBjoern A. Zeeb #endif
5481bfcc09ddSBjoern A. Zeeb 	.get_survey = iwl_mvm_mac_get_survey,
5482bfcc09ddSBjoern A. Zeeb 	.sta_statistics = iwl_mvm_mac_sta_statistics,
5483bfcc09ddSBjoern A. Zeeb 	.get_ftm_responder_stats = iwl_mvm_mac_get_ftm_responder_stats,
5484bfcc09ddSBjoern A. Zeeb 	.start_pmsr = iwl_mvm_start_pmsr,
5485bfcc09ddSBjoern A. Zeeb 	.abort_pmsr = iwl_mvm_abort_pmsr,
5486bfcc09ddSBjoern A. Zeeb 
5487bfcc09ddSBjoern A. Zeeb 	.can_aggregate_in_amsdu = iwl_mvm_mac_can_aggregate,
5488bfcc09ddSBjoern A. Zeeb #ifdef CONFIG_IWLWIFI_DEBUGFS
5489bfcc09ddSBjoern A. Zeeb 	.sta_add_debugfs = iwl_mvm_sta_add_debugfs,
5490bfcc09ddSBjoern A. Zeeb #endif
5491bfcc09ddSBjoern A. Zeeb };
5492