xref: /linux/drivers/net/wireless/intel/iwlwifi/dvm/mac80211.c (revision ccde82e909467abdf098a8ee6f63e1ecf9a47ce5)
1 // SPDX-License-Identifier: GPL-2.0-only
2 /******************************************************************************
3  *
4  * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved.
5  * Copyright(C) 2018 - 2019, 2022 - 2025 Intel Corporation
6  *
7  * Portions of this file are derived from the ipw3945 project, as well
8  * as portions of the ieee80211 subsystem header files.
9  *****************************************************************************/
10 #include <linux/kernel.h>
11 #include <linux/module.h>
12 #include <linux/slab.h>
13 #include <linux/dma-mapping.h>
14 #include <linux/delay.h>
15 #include <linux/sched.h>
16 #include <linux/skbuff.h>
17 #include <linux/netdevice.h>
18 #include <linux/etherdevice.h>
19 #include <linux/if_arp.h>
20 
21 #include <net/ieee80211_radiotap.h>
22 #include <net/mac80211.h>
23 
24 #include <asm/div64.h>
25 
26 #include "iwl-io.h"
27 #include "iwl-trans.h"
28 #include "iwl-op-mode.h"
29 #include "iwl-modparams.h"
30 
31 #include "dev.h"
32 #include "calib.h"
33 #include "agn.h"
34 
35 /*****************************************************************************
36  *
37  * mac80211 entry point functions
38  *
39  *****************************************************************************/
40 
41 static const struct ieee80211_iface_limit iwlagn_sta_ap_limits[] = {
42 	{
43 		.max = 1,
44 		.types = BIT(NL80211_IFTYPE_STATION),
45 	},
46 	{
47 		.max = 1,
48 		.types = BIT(NL80211_IFTYPE_AP),
49 	},
50 };
51 
52 static const struct ieee80211_iface_limit iwlagn_2sta_limits[] = {
53 	{
54 		.max = 2,
55 		.types = BIT(NL80211_IFTYPE_STATION),
56 	},
57 };
58 
59 static const struct ieee80211_iface_combination
60 iwlagn_iface_combinations_dualmode[] = {
61 	{ .num_different_channels = 1,
62 	  .max_interfaces = 2,
63 	  .beacon_int_infra_match = true,
64 	  .limits = iwlagn_sta_ap_limits,
65 	  .n_limits = ARRAY_SIZE(iwlagn_sta_ap_limits),
66 	},
67 	{ .num_different_channels = 1,
68 	  .max_interfaces = 2,
69 	  .limits = iwlagn_2sta_limits,
70 	  .n_limits = ARRAY_SIZE(iwlagn_2sta_limits),
71 	},
72 };
73 
74 /*
75  * Not a mac80211 entry point function, but it fits in with all the
76  * other mac80211 functions grouped here.
77  */
78 int iwlagn_mac_setup_register(struct iwl_priv *priv,
79 			      const struct iwl_ucode_capabilities *capa)
80 {
81 	int ret;
82 	struct ieee80211_hw *hw = priv->hw;
83 	struct iwl_rxon_context *ctx;
84 
85 	hw->rate_control_algorithm = "iwl-agn-rs";
86 
87 	/* Tell mac80211 our characteristics */
88 	ieee80211_hw_set(hw, SIGNAL_DBM);
89 	ieee80211_hw_set(hw, AMPDU_AGGREGATION);
90 	ieee80211_hw_set(hw, NEED_DTIM_BEFORE_ASSOC);
91 	ieee80211_hw_set(hw, SPECTRUM_MGMT);
92 	ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS);
93 	ieee80211_hw_set(hw, QUEUE_CONTROL);
94 	ieee80211_hw_set(hw, SUPPORTS_PS);
95 	ieee80211_hw_set(hw, SUPPORTS_DYNAMIC_PS);
96 	ieee80211_hw_set(hw, SUPPORT_FAST_XMIT);
97 	ieee80211_hw_set(hw, WANT_MONITOR_VIF);
98 
99 	if (priv->trans->info.max_skb_frags)
100 		hw->netdev_features = NETIF_F_HIGHDMA | NETIF_F_SG;
101 
102 	hw->offchannel_tx_hw_queue = IWL_AUX_QUEUE;
103 	hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FMT;
104 
105 	/*
106 	 * Including the following line will crash some AP's.  This
107 	 * workaround removes the stimulus which causes the crash until
108 	 * the AP software can be fixed.
109 	hw->max_tx_aggregation_subframes = LINK_QUAL_AGG_FRAME_LIMIT_DEF;
110 	 */
111 
112 	if (priv->nvm_data->sku_cap_11n_enable)
113 		hw->wiphy->features |= NL80211_FEATURE_DYNAMIC_SMPS |
114 				       NL80211_FEATURE_STATIC_SMPS;
115 
116 	/*
117 	 * Enable 11w if advertised by firmware and software crypto
118 	 * is not enabled (as the firmware will interpret some mgmt
119 	 * packets, so enabling it with software crypto isn't safe)
120 	 */
121 	if (priv->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_MFP &&
122 	    !iwlwifi_mod_params.swcrypto)
123 		ieee80211_hw_set(hw, MFP_CAPABLE);
124 
125 	hw->sta_data_size = sizeof(struct iwl_station_priv);
126 	hw->vif_data_size = sizeof(struct iwl_vif_priv);
127 
128 	for_each_context(priv, ctx) {
129 		hw->wiphy->interface_modes |= ctx->interface_modes;
130 		hw->wiphy->interface_modes |= ctx->exclusive_interface_modes;
131 	}
132 
133 	BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2);
134 
135 	if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_AP)) {
136 		hw->wiphy->iface_combinations =
137 			iwlagn_iface_combinations_dualmode;
138 		hw->wiphy->n_iface_combinations =
139 			ARRAY_SIZE(iwlagn_iface_combinations_dualmode);
140 	}
141 
142 	hw->wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
143 	hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG |
144 				       REGULATORY_DISABLE_BEACON_HINTS;
145 
146 #ifdef CONFIG_PM_SLEEP
147 	if (priv->fw->img[IWL_UCODE_WOWLAN].num_sec &&
148 	    device_can_wakeup(priv->trans->dev)) {
149 		priv->wowlan_support.flags = WIPHY_WOWLAN_MAGIC_PKT |
150 					     WIPHY_WOWLAN_DISCONNECT |
151 					     WIPHY_WOWLAN_EAP_IDENTITY_REQ |
152 					     WIPHY_WOWLAN_RFKILL_RELEASE;
153 		if (!iwlwifi_mod_params.swcrypto)
154 			priv->wowlan_support.flags |=
155 				WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
156 				WIPHY_WOWLAN_GTK_REKEY_FAILURE;
157 
158 		priv->wowlan_support.n_patterns = IWLAGN_WOWLAN_MAX_PATTERNS;
159 		priv->wowlan_support.pattern_min_len =
160 					IWLAGN_WOWLAN_MIN_PATTERN_LEN;
161 		priv->wowlan_support.pattern_max_len =
162 					IWLAGN_WOWLAN_MAX_PATTERN_LEN;
163 		hw->wiphy->wowlan = &priv->wowlan_support;
164 	}
165 #endif
166 
167 	if (iwlwifi_mod_params.power_save)
168 		hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
169 	else
170 		hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
171 
172 	hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
173 	/* we create the 802.11 header and a max-length SSID element */
174 	hw->wiphy->max_scan_ie_len = capa->max_probe_length - 24 - 34;
175 
176 	/*
177 	 * We don't use all queues: 4 and 9 are unused and any
178 	 * aggregation queue gets mapped down to the AC queue.
179 	 */
180 	hw->queues = IWLAGN_FIRST_AMPDU_QUEUE;
181 
182 	hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
183 
184 	if (priv->nvm_data->bands[NL80211_BAND_2GHZ].n_channels)
185 		priv->hw->wiphy->bands[NL80211_BAND_2GHZ] =
186 			&priv->nvm_data->bands[NL80211_BAND_2GHZ];
187 	if (priv->nvm_data->bands[NL80211_BAND_5GHZ].n_channels)
188 		priv->hw->wiphy->bands[NL80211_BAND_5GHZ] =
189 			&priv->nvm_data->bands[NL80211_BAND_5GHZ];
190 
191 	hw->wiphy->hw_version = priv->trans->info.hw_id;
192 
193 	iwl_leds_init(priv);
194 
195 	wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_CQM_RSSI_LIST);
196 	wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_EXT_KEY_ID);
197 
198 	ret = ieee80211_register_hw(priv->hw);
199 	if (ret) {
200 		IWL_ERR(priv, "Failed to register hw (error %d)\n", ret);
201 		iwl_leds_exit(priv);
202 		return ret;
203 	}
204 	priv->mac80211_registered = 1;
205 
206 	return 0;
207 }
208 
209 void iwlagn_mac_unregister(struct iwl_priv *priv)
210 {
211 	if (!priv->mac80211_registered)
212 		return;
213 	iwl_leds_exit(priv);
214 	ieee80211_unregister_hw(priv->hw);
215 	priv->mac80211_registered = 0;
216 }
217 
218 static int __iwl_up(struct iwl_priv *priv)
219 {
220 	struct iwl_rxon_context *ctx;
221 	int ret;
222 
223 	lockdep_assert_held(&priv->mutex);
224 
225 	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
226 		IWL_WARN(priv, "Exit pending; will not bring the NIC up\n");
227 		return -EIO;
228 	}
229 
230 	for_each_context(priv, ctx) {
231 		ret = iwlagn_alloc_bcast_station(priv, ctx);
232 		if (ret) {
233 			iwl_dealloc_bcast_stations(priv);
234 			return ret;
235 		}
236 	}
237 
238 	ret = iwl_trans_start_hw(priv->trans);
239 	if (ret) {
240 		IWL_ERR(priv, "Failed to start HW: %d\n", ret);
241 		goto error;
242 	}
243 
244 	ret = iwl_run_init_ucode(priv);
245 	if (ret) {
246 		IWL_ERR(priv, "Failed to run INIT ucode: %d\n", ret);
247 		goto error;
248 	}
249 
250 	ret = iwl_trans_start_hw(priv->trans);
251 	if (ret) {
252 		IWL_ERR(priv, "Failed to start HW: %d\n", ret);
253 		goto error;
254 	}
255 
256 	ret = iwl_load_ucode_wait_alive(priv, IWL_UCODE_REGULAR);
257 	if (ret) {
258 		IWL_ERR(priv, "Failed to start RT ucode: %d\n", ret);
259 		goto error;
260 	}
261 
262 	ret = iwl_alive_start(priv);
263 	if (ret)
264 		goto error;
265 	return 0;
266 
267  error:
268 	set_bit(STATUS_EXIT_PENDING, &priv->status);
269 	iwl_down(priv);
270 	clear_bit(STATUS_EXIT_PENDING, &priv->status);
271 
272 	IWL_ERR(priv, "Unable to initialize device.\n");
273 	return ret;
274 }
275 
276 static int iwlagn_mac_start(struct ieee80211_hw *hw)
277 {
278 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
279 	int ret;
280 
281 	IWL_DEBUG_MAC80211(priv, "enter\n");
282 
283 	/* we should be verifying the device is ready to be opened */
284 	mutex_lock(&priv->mutex);
285 	ret = __iwl_up(priv);
286 	mutex_unlock(&priv->mutex);
287 	if (ret)
288 		return ret;
289 
290 	IWL_DEBUG_INFO(priv, "Start UP work done.\n");
291 
292 	/* Now we should be done, and the READY bit should be set. */
293 	if (WARN_ON(!test_bit(STATUS_READY, &priv->status)))
294 		ret = -EIO;
295 
296 	iwlagn_led_enable(priv);
297 
298 	priv->is_open = 1;
299 	IWL_DEBUG_MAC80211(priv, "leave\n");
300 	return ret;
301 }
302 
303 static void iwlagn_mac_stop(struct ieee80211_hw *hw, bool suspend)
304 {
305 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
306 
307 	IWL_DEBUG_MAC80211(priv, "enter\n");
308 
309 	if (!priv->is_open)
310 		return;
311 
312 	priv->is_open = 0;
313 
314 	mutex_lock(&priv->mutex);
315 	iwl_down(priv);
316 	mutex_unlock(&priv->mutex);
317 
318 	iwl_cancel_deferred_work(priv);
319 
320 	flush_workqueue(priv->workqueue);
321 
322 	IWL_DEBUG_MAC80211(priv, "leave\n");
323 }
324 
325 static void iwlagn_mac_set_rekey_data(struct ieee80211_hw *hw,
326 				      struct ieee80211_vif *vif,
327 				      struct cfg80211_gtk_rekey_data *data)
328 {
329 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
330 
331 	if (iwlwifi_mod_params.swcrypto)
332 		return;
333 
334 	IWL_DEBUG_MAC80211(priv, "enter\n");
335 	mutex_lock(&priv->mutex);
336 
337 	if (priv->contexts[IWL_RXON_CTX_BSS].vif != vif)
338 		goto out;
339 
340 	memcpy(priv->kek, data->kek, NL80211_KEK_LEN);
341 	memcpy(priv->kck, data->kck, NL80211_KCK_LEN);
342 	priv->replay_ctr =
343 		cpu_to_le64(be64_to_cpup((__be64 *)&data->replay_ctr));
344 	priv->have_rekey_data = true;
345 
346  out:
347 	mutex_unlock(&priv->mutex);
348 	IWL_DEBUG_MAC80211(priv, "leave\n");
349 }
350 
351 #ifdef CONFIG_PM_SLEEP
352 
353 static int iwlagn_mac_suspend(struct ieee80211_hw *hw,
354 			      struct cfg80211_wowlan *wowlan)
355 {
356 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
357 	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
358 	int ret;
359 
360 	if (WARN_ON(!wowlan))
361 		return -EINVAL;
362 
363 	IWL_DEBUG_MAC80211(priv, "enter\n");
364 	mutex_lock(&priv->mutex);
365 
366 	/* Don't attempt WoWLAN when not associated, tear down instead. */
367 	if (!ctx->vif || ctx->vif->type != NL80211_IFTYPE_STATION ||
368 	    !iwl_is_associated_ctx(ctx)) {
369 		ret = 1;
370 		goto out;
371 	}
372 
373 	ret = iwlagn_suspend(priv, wowlan);
374 	if (ret)
375 		goto error;
376 
377 	/* let the ucode operate on its own */
378 	iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_SET,
379 		    CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
380 
381 	iwl_trans_d3_suspend(priv->trans, true);
382 
383 	goto out;
384 
385  error:
386 	priv->wowlan = false;
387 	iwlagn_prepare_restart(priv);
388 	ieee80211_restart_hw(priv->hw);
389  out:
390 	mutex_unlock(&priv->mutex);
391 	IWL_DEBUG_MAC80211(priv, "leave\n");
392 
393 	return ret;
394 }
395 
396 struct iwl_resume_data {
397 	struct iwl_priv *priv;
398 	struct iwlagn_wowlan_status *cmd;
399 	bool valid;
400 };
401 
402 static bool iwl_resume_status_fn(struct iwl_notif_wait_data *notif_wait,
403 				 struct iwl_rx_packet *pkt, void *data)
404 {
405 	struct iwl_resume_data *resume_data = data;
406 	struct iwl_priv *priv = resume_data->priv;
407 
408 	if (iwl_rx_packet_payload_len(pkt) != sizeof(*resume_data->cmd)) {
409 		IWL_ERR(priv, "rx wrong size data\n");
410 		return true;
411 	}
412 	memcpy(resume_data->cmd, pkt->data, sizeof(*resume_data->cmd));
413 	resume_data->valid = true;
414 
415 	return true;
416 }
417 
418 static int iwlagn_mac_resume(struct ieee80211_hw *hw)
419 {
420 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
421 	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
422 	struct ieee80211_vif *vif;
423 	u32 base;
424 	int ret;
425 	struct error_table_start {
426 		/* cf. struct iwl_error_event_table */
427 		u32 valid;
428 		u32 error_id;
429 	} err_info;
430 	struct iwl_notification_wait status_wait;
431 	static const u16 status_cmd[] = {
432 		REPLY_WOWLAN_GET_STATUS,
433 	};
434 	struct iwlagn_wowlan_status status_data = {};
435 	struct iwl_resume_data resume_data = {
436 		.priv = priv,
437 		.cmd = &status_data,
438 		.valid = false,
439 	};
440 	struct cfg80211_wowlan_wakeup wakeup = {
441 		.pattern_idx = -1,
442 	};
443 #ifdef CONFIG_IWLWIFI_DEBUGFS
444 	const struct fw_img *img;
445 #endif
446 
447 	IWL_DEBUG_MAC80211(priv, "enter\n");
448 	mutex_lock(&priv->mutex);
449 
450 	/* we'll clear ctx->vif during iwlagn_prepare_restart() */
451 	vif = ctx->vif;
452 
453 	ret = iwl_trans_d3_resume(priv->trans, true);
454 	if (ret)
455 		goto out_unlock;
456 
457 	/* uCode is no longer operating by itself */
458 	iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_CLR,
459 		    CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
460 
461 	base = priv->device_pointers.error_event_table;
462 	if (!iwlagn_hw_valid_rtc_data_addr(base)) {
463 		IWL_WARN(priv, "Invalid error table during resume!\n");
464 		goto out_unlock;
465 	}
466 
467 	iwl_trans_read_mem_bytes(priv->trans, base,
468 				 &err_info, sizeof(err_info));
469 
470 	if (err_info.valid) {
471 		IWL_INFO(priv, "error table is valid (%d, 0x%x)\n",
472 			 err_info.valid, err_info.error_id);
473 		if (err_info.error_id == RF_KILL_INDICATOR_FOR_WOWLAN) {
474 			wakeup.rfkill_release = true;
475 			ieee80211_report_wowlan_wakeup(vif, &wakeup,
476 						       GFP_KERNEL);
477 		}
478 		goto out_unlock;
479 	}
480 
481 #ifdef CONFIG_IWLWIFI_DEBUGFS
482 	img = &priv->fw->img[IWL_UCODE_WOWLAN];
483 	if (!priv->wowlan_sram)
484 		priv->wowlan_sram =
485 			kzalloc(img->sec[IWL_UCODE_SECTION_DATA].len,
486 				GFP_KERNEL);
487 
488 	if (priv->wowlan_sram)
489 		iwl_trans_read_mem(priv->trans, 0x800000,
490 				   priv->wowlan_sram,
491 				   img->sec[IWL_UCODE_SECTION_DATA].len / 4);
492 #endif
493 
494 	/*
495 	 * This is very strange. The GET_STATUS command is sent but the device
496 	 * doesn't reply properly, it seems it doesn't close the RBD so one is
497 	 * always left open ... As a result, we need to send another command
498 	 * and have to reset the driver afterwards. As we need to switch to
499 	 * runtime firmware again that'll happen.
500 	 */
501 
502 	iwl_init_notification_wait(&priv->notif_wait, &status_wait, status_cmd,
503 				   ARRAY_SIZE(status_cmd), iwl_resume_status_fn,
504 				   &resume_data);
505 
506 	iwl_dvm_send_cmd_pdu(priv, REPLY_WOWLAN_GET_STATUS, CMD_ASYNC, 0, NULL);
507 	iwl_dvm_send_cmd_pdu(priv, REPLY_ECHO, CMD_ASYNC, 0, NULL);
508 	/* an RBD is left open in the firmware now! */
509 
510 	ret = iwl_wait_notification(&priv->notif_wait, &status_wait, HZ/5);
511 	if (ret)
512 		goto out_unlock;
513 
514 	if (resume_data.valid && priv->contexts[IWL_RXON_CTX_BSS].vif) {
515 		u32 reasons = le32_to_cpu(status_data.wakeup_reason);
516 		struct cfg80211_wowlan_wakeup *wakeup_report;
517 
518 		IWL_INFO(priv, "WoWLAN wakeup reason(s): 0x%.8x\n", reasons);
519 
520 		if (reasons) {
521 			if (reasons & IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET)
522 				wakeup.magic_pkt = true;
523 			if (reasons & IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH)
524 				wakeup.pattern_idx = status_data.pattern_number;
525 			if (reasons & (IWLAGN_WOWLAN_WAKEUP_BEACON_MISS |
526 				       IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE))
527 				wakeup.disconnect = true;
528 			if (reasons & IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL)
529 				wakeup.gtk_rekey_failure = true;
530 			if (reasons & IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ)
531 				wakeup.eap_identity_req = true;
532 			if (reasons & IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE)
533 				wakeup.four_way_handshake = true;
534 			wakeup_report = &wakeup;
535 		} else {
536 			wakeup_report = NULL;
537 		}
538 
539 		ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL);
540 	}
541 
542 	priv->wowlan = false;
543 
544 	iwlagn_prepare_restart(priv);
545 
546 	memset((void *)(uintptr_t)&ctx->active, 0, sizeof(ctx->active));
547 	iwl_connection_init_rx_config(priv, ctx);
548 	iwlagn_set_rxon_chain(priv, ctx);
549 
550  out_unlock:
551 	mutex_unlock(&priv->mutex);
552 	IWL_DEBUG_MAC80211(priv, "leave\n");
553 
554 	ieee80211_resume_disconnect(vif);
555 
556 	return 1;
557 }
558 
559 static void iwlagn_mac_set_wakeup(struct ieee80211_hw *hw, bool enabled)
560 {
561 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
562 
563 	device_set_wakeup_enable(priv->trans->dev, enabled);
564 }
565 #endif
566 
567 static void iwlagn_mac_tx(struct ieee80211_hw *hw,
568 			  struct ieee80211_tx_control *control,
569 			  struct sk_buff *skb)
570 {
571 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
572 
573 	if (iwlagn_tx_skb(priv, control->sta, skb))
574 		ieee80211_free_txskb(hw, skb);
575 }
576 
577 static void iwlagn_mac_update_tkip_key(struct ieee80211_hw *hw,
578 				       struct ieee80211_vif *vif,
579 				       struct ieee80211_key_conf *keyconf,
580 				       struct ieee80211_sta *sta,
581 				       u32 iv32, u16 *phase1key)
582 {
583 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
584 
585 	iwl_update_tkip_key(priv, vif, keyconf, sta, iv32, phase1key);
586 }
587 
588 static int iwlagn_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
589 			      struct ieee80211_vif *vif,
590 			      struct ieee80211_sta *sta,
591 			      struct ieee80211_key_conf *key)
592 {
593 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
594 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
595 	struct iwl_rxon_context *ctx = vif_priv->ctx;
596 	int ret;
597 	bool is_default_wep_key = false;
598 
599 	IWL_DEBUG_MAC80211(priv, "enter\n");
600 
601 	if (iwlwifi_mod_params.swcrypto) {
602 		IWL_DEBUG_MAC80211(priv, "leave - hwcrypto disabled\n");
603 		return -EOPNOTSUPP;
604 	}
605 
606 	switch (key->cipher) {
607 	case WLAN_CIPHER_SUITE_TKIP:
608 		key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
609 		fallthrough;
610 	case WLAN_CIPHER_SUITE_CCMP:
611 		key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
612 		break;
613 	default:
614 		break;
615 	}
616 
617 	/*
618 	 * We could program these keys into the hardware as well, but we
619 	 * don't expect much multicast traffic in IBSS and having keys
620 	 * for more stations is probably more useful.
621 	 *
622 	 * Mark key TX-only and return 0.
623 	 */
624 	if (vif->type == NL80211_IFTYPE_ADHOC &&
625 	    !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE)) {
626 		key->hw_key_idx = WEP_INVALID_OFFSET;
627 		return 0;
628 	}
629 
630 	/* If they key was TX-only, accept deletion */
631 	if (cmd == DISABLE_KEY && key->hw_key_idx == WEP_INVALID_OFFSET)
632 		return 0;
633 
634 	mutex_lock(&priv->mutex);
635 	iwl_scan_cancel_timeout(priv, 100);
636 
637 	BUILD_BUG_ON(WEP_INVALID_OFFSET == IWLAGN_HW_KEY_DEFAULT);
638 
639 	/*
640 	 * If we are getting WEP group key and we didn't receive any key mapping
641 	 * so far, we are in legacy wep mode (group key only), otherwise we are
642 	 * in 1X mode.
643 	 * In legacy wep mode, we use another host command to the uCode.
644 	 */
645 	if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
646 	     key->cipher == WLAN_CIPHER_SUITE_WEP104) && !sta) {
647 		if (cmd == SET_KEY)
648 			is_default_wep_key = !ctx->key_mapping_keys;
649 		else
650 			is_default_wep_key =
651 				key->hw_key_idx == IWLAGN_HW_KEY_DEFAULT;
652 	}
653 
654 
655 	switch (cmd) {
656 	case SET_KEY:
657 		if (is_default_wep_key) {
658 			ret = iwl_set_default_wep_key(priv, vif_priv->ctx, key);
659 			break;
660 		}
661 		ret = iwl_set_dynamic_key(priv, vif_priv->ctx, key, sta);
662 		if (ret) {
663 			/*
664 			 * can't add key for RX, but we don't need it
665 			 * in the device for TX so still return 0
666 			 */
667 			ret = 0;
668 			key->hw_key_idx = WEP_INVALID_OFFSET;
669 		}
670 
671 		IWL_DEBUG_MAC80211(priv, "enable hwcrypto key\n");
672 		break;
673 	case DISABLE_KEY:
674 		if (is_default_wep_key)
675 			ret = iwl_remove_default_wep_key(priv, ctx, key);
676 		else
677 			ret = iwl_remove_dynamic_key(priv, ctx, key, sta);
678 
679 		IWL_DEBUG_MAC80211(priv, "disable hwcrypto key\n");
680 		break;
681 	default:
682 		ret = -EINVAL;
683 	}
684 
685 	mutex_unlock(&priv->mutex);
686 	IWL_DEBUG_MAC80211(priv, "leave\n");
687 
688 	return ret;
689 }
690 
691 static int iwlagn_mac_ampdu_action(struct ieee80211_hw *hw,
692 				   struct ieee80211_vif *vif,
693 				   struct ieee80211_ampdu_params *params)
694 {
695 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
696 	int ret = -EINVAL;
697 	struct ieee80211_sta *sta = params->sta;
698 	enum ieee80211_ampdu_mlme_action action = params->action;
699 	u16 tid = params->tid;
700 	u16 *ssn = &params->ssn;
701 	u8 buf_size = params->buf_size;
702 	struct iwl_station_priv *sta_priv = (void *) sta->drv_priv;
703 
704 	IWL_DEBUG_HT(priv, "A-MPDU action on addr %pM tid %d\n",
705 		     sta->addr, tid);
706 
707 	if (!(priv->nvm_data->sku_cap_11n_enable))
708 		return -EACCES;
709 
710 	IWL_DEBUG_MAC80211(priv, "enter\n");
711 	mutex_lock(&priv->mutex);
712 
713 	switch (action) {
714 	case IEEE80211_AMPDU_RX_START:
715 		if (!iwl_enable_rx_ampdu())
716 			break;
717 		IWL_DEBUG_HT(priv, "start Rx\n");
718 		ret = iwl_sta_rx_agg_start(priv, sta, tid, *ssn);
719 		break;
720 	case IEEE80211_AMPDU_RX_STOP:
721 		IWL_DEBUG_HT(priv, "stop Rx\n");
722 		ret = iwl_sta_rx_agg_stop(priv, sta, tid);
723 		break;
724 	case IEEE80211_AMPDU_TX_START:
725 		if (!iwl_enable_tx_ampdu())
726 			break;
727 		IWL_DEBUG_HT(priv, "start Tx\n");
728 		ret = iwlagn_tx_agg_start(priv, vif, sta, tid, ssn);
729 		break;
730 	case IEEE80211_AMPDU_TX_STOP_FLUSH:
731 	case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
732 		IWL_DEBUG_HT(priv, "Flush Tx\n");
733 		ret = iwlagn_tx_agg_flush(priv, vif, sta, tid);
734 		break;
735 	case IEEE80211_AMPDU_TX_STOP_CONT:
736 		IWL_DEBUG_HT(priv, "stop Tx\n");
737 		ret = iwlagn_tx_agg_stop(priv, vif, sta, tid);
738 		if ((ret == 0) && (priv->agg_tids_count > 0)) {
739 			priv->agg_tids_count--;
740 			IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n",
741 				     priv->agg_tids_count);
742 		}
743 		if (!priv->agg_tids_count &&
744 		    priv->hw_params.use_rts_for_aggregation) {
745 			/*
746 			 * switch off RTS/CTS if it was previously enabled
747 			 */
748 			sta_priv->lq_sta.lq.general_params.flags &=
749 				~LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK;
750 			iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif),
751 					&sta_priv->lq_sta.lq, CMD_ASYNC, false);
752 		}
753 		break;
754 	case IEEE80211_AMPDU_TX_OPERATIONAL:
755 		ret = iwlagn_tx_agg_oper(priv, vif, sta, tid, buf_size);
756 		break;
757 	}
758 	mutex_unlock(&priv->mutex);
759 	IWL_DEBUG_MAC80211(priv, "leave\n");
760 	return ret;
761 }
762 
763 static int iwlagn_mac_sta_add(struct ieee80211_hw *hw,
764 			      struct ieee80211_vif *vif,
765 			      struct ieee80211_sta *sta)
766 {
767 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
768 	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
769 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
770 	bool is_ap = vif->type == NL80211_IFTYPE_STATION;
771 	int ret;
772 	u8 sta_id;
773 
774 	IWL_DEBUG_INFO(priv, "proceeding to add station %pM\n",
775 			sta->addr);
776 	sta_priv->sta_id = IWL_INVALID_STATION;
777 
778 	atomic_set(&sta_priv->pending_frames, 0);
779 	if (vif->type == NL80211_IFTYPE_AP)
780 		sta_priv->client = true;
781 
782 	ret = iwl_add_station_common(priv, vif_priv->ctx, sta->addr,
783 				     is_ap, sta, &sta_id);
784 	if (ret) {
785 		IWL_ERR(priv, "Unable to add station %pM (%d)\n",
786 			sta->addr, ret);
787 		/* Should we return success if return code is EEXIST ? */
788 		return ret;
789 	}
790 
791 	sta_priv->sta_id = sta_id;
792 
793 	return 0;
794 }
795 
796 static int iwlagn_mac_sta_remove(struct ieee80211_hw *hw,
797 				 struct ieee80211_vif *vif,
798 				 struct ieee80211_sta *sta)
799 {
800 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
801 	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
802 	int ret;
803 
804 	IWL_DEBUG_INFO(priv, "proceeding to remove station %pM\n", sta->addr);
805 
806 	if (vif->type == NL80211_IFTYPE_STATION) {
807 		/*
808 		 * Station will be removed from device when the RXON
809 		 * is set to unassociated -- just deactivate it here
810 		 * to avoid re-programming it.
811 		 */
812 		ret = 0;
813 		iwl_deactivate_station(priv, sta_priv->sta_id, sta->addr);
814 	} else {
815 		ret = iwl_remove_station(priv, sta_priv->sta_id, sta->addr);
816 		if (ret)
817 			IWL_DEBUG_QUIET_RFKILL(priv,
818 				"Error removing station %pM\n", sta->addr);
819 	}
820 	return ret;
821 }
822 
823 static int iwlagn_mac_sta_state(struct ieee80211_hw *hw,
824 				struct ieee80211_vif *vif,
825 				struct ieee80211_sta *sta,
826 				enum ieee80211_sta_state old_state,
827 				enum ieee80211_sta_state new_state)
828 {
829 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
830 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
831 	enum {
832 		NONE, ADD, REMOVE, HT_RATE_INIT, ADD_RATE_INIT,
833 	} op = NONE;
834 	int ret;
835 
836 	IWL_DEBUG_MAC80211(priv, "station %pM state change %d->%d\n",
837 			   sta->addr, old_state, new_state);
838 
839 	mutex_lock(&priv->mutex);
840 	if (vif->type == NL80211_IFTYPE_STATION) {
841 		if (old_state == IEEE80211_STA_NOTEXIST &&
842 		    new_state == IEEE80211_STA_NONE)
843 			op = ADD;
844 		else if (old_state == IEEE80211_STA_NONE &&
845 			 new_state == IEEE80211_STA_NOTEXIST)
846 			op = REMOVE;
847 		else if (old_state == IEEE80211_STA_AUTH &&
848 			 new_state == IEEE80211_STA_ASSOC)
849 			op = HT_RATE_INIT;
850 	} else {
851 		if (old_state == IEEE80211_STA_AUTH &&
852 		    new_state == IEEE80211_STA_ASSOC)
853 			op = ADD_RATE_INIT;
854 		else if (old_state == IEEE80211_STA_ASSOC &&
855 			 new_state == IEEE80211_STA_AUTH)
856 			op = REMOVE;
857 	}
858 
859 	switch (op) {
860 	case ADD:
861 		ret = iwlagn_mac_sta_add(hw, vif, sta);
862 		if (ret)
863 			break;
864 		/*
865 		 * Clear the in-progress flag, the AP station entry was added
866 		 * but we'll initialize LQ only when we've associated (which
867 		 * would also clear the in-progress flag). This is necessary
868 		 * in case we never initialize LQ because association fails.
869 		 */
870 		spin_lock_bh(&priv->sta_lock);
871 		priv->stations[iwl_sta_id(sta)].used &=
872 			~IWL_STA_UCODE_INPROGRESS;
873 		spin_unlock_bh(&priv->sta_lock);
874 		break;
875 	case REMOVE:
876 		ret = iwlagn_mac_sta_remove(hw, vif, sta);
877 		break;
878 	case ADD_RATE_INIT:
879 		ret = iwlagn_mac_sta_add(hw, vif, sta);
880 		if (ret)
881 			break;
882 		/* Initialize rate scaling */
883 		IWL_DEBUG_INFO(priv,
884 			       "Initializing rate scaling for station %pM\n",
885 			       sta->addr);
886 		iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
887 		ret = 0;
888 		break;
889 	case HT_RATE_INIT:
890 		/* Initialize rate scaling */
891 		ret = iwl_sta_update_ht(priv, vif_priv->ctx, sta);
892 		if (ret)
893 			break;
894 		IWL_DEBUG_INFO(priv,
895 			       "Initializing rate scaling for station %pM\n",
896 			       sta->addr);
897 		iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
898 		ret = 0;
899 		break;
900 	default:
901 		ret = 0;
902 		break;
903 	}
904 
905 	/*
906 	 * mac80211 might WARN if we fail, but due the way we
907 	 * (badly) handle hard rfkill, we might fail here
908 	 */
909 	if (iwl_is_rfkill(priv))
910 		ret = 0;
911 
912 	mutex_unlock(&priv->mutex);
913 	IWL_DEBUG_MAC80211(priv, "leave\n");
914 
915 	return ret;
916 }
917 
918 static void iwlagn_mac_channel_switch(struct ieee80211_hw *hw,
919 				      struct ieee80211_vif *vif,
920 				      struct ieee80211_channel_switch *ch_switch)
921 {
922 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
923 	struct ieee80211_conf *conf = &hw->conf;
924 	struct ieee80211_channel *channel = ch_switch->chandef.chan;
925 	struct iwl_ht_config *ht_conf = &priv->current_ht_config;
926 	/*
927 	 * MULTI-FIXME
928 	 * When we add support for multiple interfaces, we need to
929 	 * revisit this. The channel switch command in the device
930 	 * only affects the BSS context, but what does that really
931 	 * mean? And what if we get a CSA on the second interface?
932 	 * This needs a lot of work.
933 	 */
934 	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
935 	u16 ch;
936 
937 	IWL_DEBUG_MAC80211(priv, "enter\n");
938 
939 	mutex_lock(&priv->mutex);
940 
941 	if (iwl_is_rfkill(priv))
942 		goto out;
943 
944 	if (test_bit(STATUS_EXIT_PENDING, &priv->status) ||
945 	    test_bit(STATUS_SCANNING, &priv->status) ||
946 	    test_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
947 		goto out;
948 
949 	if (!iwl_is_associated_ctx(ctx))
950 		goto out;
951 
952 	if (!priv->lib->set_channel_switch)
953 		goto out;
954 
955 	ch = channel->hw_value;
956 	if (le16_to_cpu(ctx->active.channel) == ch)
957 		goto out;
958 
959 	priv->current_ht_config.smps = conf->smps_mode;
960 
961 	/* Configure HT40 channels */
962 	switch (cfg80211_get_chandef_type(&ch_switch->chandef)) {
963 	case NL80211_CHAN_NO_HT:
964 	case NL80211_CHAN_HT20:
965 		ctx->ht.is_40mhz = false;
966 		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_NONE;
967 		break;
968 	case NL80211_CHAN_HT40MINUS:
969 		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
970 		ctx->ht.is_40mhz = true;
971 		break;
972 	case NL80211_CHAN_HT40PLUS:
973 		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
974 		ctx->ht.is_40mhz = true;
975 		break;
976 	}
977 
978 	if ((le16_to_cpu(ctx->staging.channel) != ch))
979 		ctx->staging.flags = 0;
980 
981 	iwl_set_rxon_channel(priv, channel, ctx);
982 	iwl_set_rxon_ht(priv, ht_conf);
983 	iwl_set_flags_for_band(priv, ctx, channel->band, ctx->vif);
984 
985 	/*
986 	 * at this point, staging_rxon has the
987 	 * configuration for channel switch
988 	 */
989 	set_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
990 	priv->switch_channel = cpu_to_le16(ch);
991 	if (priv->lib->set_channel_switch(priv, ch_switch)) {
992 		clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
993 		priv->switch_channel = 0;
994 		ieee80211_chswitch_done(ctx->vif, false, 0);
995 	}
996 
997 out:
998 	mutex_unlock(&priv->mutex);
999 	IWL_DEBUG_MAC80211(priv, "leave\n");
1000 }
1001 
1002 void iwl_chswitch_done(struct iwl_priv *priv, bool is_success)
1003 {
1004 	/*
1005 	 * MULTI-FIXME
1006 	 * See iwlagn_mac_channel_switch.
1007 	 */
1008 	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
1009 
1010 	if (test_bit(STATUS_EXIT_PENDING, &priv->status))
1011 		return;
1012 
1013 	if (!test_and_clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
1014 		return;
1015 
1016 	if (ctx->vif)
1017 		ieee80211_chswitch_done(ctx->vif, is_success, 0);
1018 }
1019 
1020 static void iwlagn_configure_filter(struct ieee80211_hw *hw,
1021 				    unsigned int changed_flags,
1022 				    unsigned int *total_flags,
1023 				    u64 multicast)
1024 {
1025 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1026 	__le32 filter_or = 0, filter_nand = 0;
1027 	struct iwl_rxon_context *ctx;
1028 
1029 #define CHK(test, flag)	do { \
1030 	if (*total_flags & (test))		\
1031 		filter_or |= (flag);		\
1032 	else					\
1033 		filter_nand |= (flag);		\
1034 	} while (0)
1035 
1036 	IWL_DEBUG_MAC80211(priv, "Enter: changed: 0x%x, total: 0x%x\n",
1037 			changed_flags, *total_flags);
1038 
1039 	CHK(FIF_OTHER_BSS, RXON_FILTER_PROMISC_MSK);
1040 	/* Setting _just_ RXON_FILTER_CTL2HOST_MSK causes FH errors */
1041 	CHK(FIF_CONTROL, RXON_FILTER_CTL2HOST_MSK | RXON_FILTER_PROMISC_MSK);
1042 	CHK(FIF_BCN_PRBRESP_PROMISC, RXON_FILTER_BCON_AWARE_MSK);
1043 
1044 #undef CHK
1045 
1046 	mutex_lock(&priv->mutex);
1047 
1048 	for_each_context(priv, ctx) {
1049 		ctx->staging.filter_flags &= ~filter_nand;
1050 		ctx->staging.filter_flags |= filter_or;
1051 
1052 		/*
1053 		 * Not committing directly because hardware can perform a scan,
1054 		 * but we'll eventually commit the filter flags change anyway.
1055 		 */
1056 	}
1057 
1058 	mutex_unlock(&priv->mutex);
1059 
1060 	/*
1061 	 * Receiving all multicast frames is always enabled by the
1062 	 * default flags setup in iwl_connection_init_rx_config()
1063 	 * since we currently do not support programming multicast
1064 	 * filters into the device.
1065 	 */
1066 	*total_flags &= FIF_OTHER_BSS | FIF_ALLMULTI |
1067 			FIF_BCN_PRBRESP_PROMISC | FIF_CONTROL;
1068 }
1069 
1070 static void iwlagn_mac_flush(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1071 			     u32 queues, bool drop)
1072 {
1073 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1074 	u32 scd_queues;
1075 
1076 	mutex_lock(&priv->mutex);
1077 	IWL_DEBUG_MAC80211(priv, "enter\n");
1078 
1079 	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
1080 		IWL_DEBUG_TX(priv, "Aborting flush due to device shutdown\n");
1081 		goto done;
1082 	}
1083 	if (iwl_is_rfkill(priv)) {
1084 		IWL_DEBUG_TX(priv, "Aborting flush due to RF Kill\n");
1085 		goto done;
1086 	}
1087 
1088 	scd_queues = BIT(priv->trans->mac_cfg->base->num_of_queues) - 1;
1089 	scd_queues &= ~(BIT(IWL_IPAN_CMD_QUEUE_NUM) |
1090 			BIT(IWL_DEFAULT_CMD_QUEUE_NUM));
1091 
1092 	if (drop) {
1093 		IWL_DEBUG_TX_QUEUES(priv, "Flushing SCD queues: 0x%x\n",
1094 				    scd_queues);
1095 		if (iwlagn_txfifo_flush(priv, scd_queues)) {
1096 			IWL_ERR(priv, "flush request fail\n");
1097 			goto done;
1098 		}
1099 	}
1100 
1101 	IWL_DEBUG_TX_QUEUES(priv, "wait transmit/flush all frames\n");
1102 	iwl_trans_wait_tx_queues_empty(priv->trans, scd_queues);
1103 done:
1104 	mutex_unlock(&priv->mutex);
1105 	IWL_DEBUG_MAC80211(priv, "leave\n");
1106 }
1107 
1108 static void iwlagn_mac_event_callback(struct ieee80211_hw *hw,
1109 				      struct ieee80211_vif *vif,
1110 				      const struct ieee80211_event *event)
1111 {
1112 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1113 
1114 	if (event->type != RSSI_EVENT)
1115 		return;
1116 
1117 	IWL_DEBUG_MAC80211(priv, "enter\n");
1118 
1119 	if (priv->lib->bt_params &&
1120 	    priv->lib->bt_params->advanced_bt_coexist) {
1121 		if (event->u.rssi.data == RSSI_EVENT_LOW)
1122 			priv->bt_enable_pspoll = true;
1123 		else if (event->u.rssi.data == RSSI_EVENT_HIGH)
1124 			priv->bt_enable_pspoll = false;
1125 
1126 		queue_work(priv->workqueue, &priv->bt_runtime_config);
1127 	} else {
1128 		IWL_DEBUG_MAC80211(priv, "Advanced BT coex disabled,"
1129 				"ignoring RSSI callback\n");
1130 	}
1131 
1132 	IWL_DEBUG_MAC80211(priv, "leave\n");
1133 }
1134 
1135 static int iwlagn_mac_set_tim(struct ieee80211_hw *hw,
1136 			      struct ieee80211_sta *sta, bool set)
1137 {
1138 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1139 
1140 	queue_work(priv->workqueue, &priv->beacon_update);
1141 
1142 	return 0;
1143 }
1144 
1145 static int iwlagn_mac_conf_tx(struct ieee80211_hw *hw,
1146 			      struct ieee80211_vif *vif,
1147 			      unsigned int link_id, u16 queue,
1148 			      const struct ieee80211_tx_queue_params *params)
1149 {
1150 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1151 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1152 	struct iwl_rxon_context *ctx = vif_priv->ctx;
1153 	int q;
1154 
1155 	if (WARN_ON(!ctx))
1156 		return -EINVAL;
1157 
1158 	IWL_DEBUG_MAC80211(priv, "enter\n");
1159 
1160 	if (!iwl_is_ready_rf(priv)) {
1161 		IWL_DEBUG_MAC80211(priv, "leave - RF not ready\n");
1162 		return -EIO;
1163 	}
1164 
1165 	if (queue >= AC_NUM) {
1166 		IWL_DEBUG_MAC80211(priv, "leave - queue >= AC_NUM %d\n", queue);
1167 		return 0;
1168 	}
1169 
1170 	q = AC_NUM - 1 - queue;
1171 
1172 	mutex_lock(&priv->mutex);
1173 
1174 	ctx->qos_data.def_qos_parm.ac[q].cw_min =
1175 		cpu_to_le16(params->cw_min);
1176 	ctx->qos_data.def_qos_parm.ac[q].cw_max =
1177 		cpu_to_le16(params->cw_max);
1178 	ctx->qos_data.def_qos_parm.ac[q].aifsn = params->aifs;
1179 	ctx->qos_data.def_qos_parm.ac[q].edca_txop =
1180 			cpu_to_le16((params->txop * 32));
1181 
1182 	ctx->qos_data.def_qos_parm.ac[q].reserved1 = 0;
1183 
1184 	mutex_unlock(&priv->mutex);
1185 
1186 	IWL_DEBUG_MAC80211(priv, "leave\n");
1187 	return 0;
1188 }
1189 
1190 static int iwlagn_mac_tx_last_beacon(struct ieee80211_hw *hw)
1191 {
1192 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1193 
1194 	return priv->ibss_manager == IWL_IBSS_MANAGER;
1195 }
1196 
1197 static int iwl_set_mode(struct iwl_priv *priv, struct iwl_rxon_context *ctx)
1198 {
1199 	iwl_connection_init_rx_config(priv, ctx);
1200 
1201 	iwlagn_set_rxon_chain(priv, ctx);
1202 
1203 	return iwlagn_commit_rxon(priv, ctx);
1204 }
1205 
1206 static int iwl_setup_interface(struct iwl_priv *priv,
1207 			       struct iwl_rxon_context *ctx)
1208 {
1209 	struct ieee80211_vif *vif = ctx->vif;
1210 	int err, ac;
1211 
1212 	lockdep_assert_held(&priv->mutex);
1213 
1214 	/*
1215 	 * This variable will be correct only when there's just
1216 	 * a single context, but all code using it is for hardware
1217 	 * that supports only one context.
1218 	 */
1219 	priv->iw_mode = vif->type;
1220 
1221 	ctx->is_active = true;
1222 
1223 	err = iwl_set_mode(priv, ctx);
1224 	if (err) {
1225 		if (!ctx->always_active)
1226 			ctx->is_active = false;
1227 		return err;
1228 	}
1229 
1230 	if (priv->lib->bt_params && priv->lib->bt_params->advanced_bt_coexist &&
1231 	    vif->type == NL80211_IFTYPE_ADHOC) {
1232 		/*
1233 		 * pretend to have high BT traffic as long as we
1234 		 * are operating in IBSS mode, as this will cause
1235 		 * the rate scaling etc. to behave as intended.
1236 		 */
1237 		priv->bt_traffic_load = IWL_BT_COEX_TRAFFIC_LOAD_HIGH;
1238 	}
1239 
1240 	/* set up queue mappings */
1241 	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
1242 		vif->hw_queue[ac] = ctx->ac_to_queue[ac];
1243 
1244 	if (vif->type == NL80211_IFTYPE_AP)
1245 		vif->cab_queue = ctx->mcast_queue;
1246 	else
1247 		vif->cab_queue = IEEE80211_INVAL_HW_QUEUE;
1248 
1249 	return 0;
1250 }
1251 
1252 static int iwlagn_mac_add_interface(struct ieee80211_hw *hw,
1253 				    struct ieee80211_vif *vif)
1254 {
1255 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1256 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1257 	struct iwl_rxon_context *tmp, *ctx = NULL;
1258 	int err;
1259 	enum nl80211_iftype viftype = ieee80211_vif_type_p2p(vif);
1260 	bool reset = false;
1261 
1262 	IWL_DEBUG_MAC80211(priv, "enter: type %d, addr %pM\n",
1263 			   viftype, vif->addr);
1264 
1265 	mutex_lock(&priv->mutex);
1266 
1267 	if (!iwl_is_ready_rf(priv)) {
1268 		IWL_WARN(priv, "Try to add interface when device not ready\n");
1269 		err = -EINVAL;
1270 		goto out;
1271 	}
1272 
1273 	for_each_context(priv, tmp) {
1274 		u32 possible_modes =
1275 			tmp->interface_modes | tmp->exclusive_interface_modes;
1276 
1277 		if (tmp->vif) {
1278 			/* On reset we need to add the same interface again */
1279 			if (tmp->vif == vif) {
1280 				reset = true;
1281 				ctx = tmp;
1282 				break;
1283 			}
1284 
1285 			/* check if this busy context is exclusive */
1286 			if (tmp->exclusive_interface_modes &
1287 						BIT(tmp->vif->type)) {
1288 				err = -EINVAL;
1289 				goto out;
1290 			}
1291 			continue;
1292 		}
1293 
1294 		if (!(possible_modes & BIT(viftype)))
1295 			continue;
1296 
1297 		/* have maybe usable context w/o interface */
1298 		ctx = tmp;
1299 		break;
1300 	}
1301 
1302 	if (!ctx) {
1303 		err = -EOPNOTSUPP;
1304 		goto out;
1305 	}
1306 
1307 	vif_priv->ctx = ctx;
1308 	ctx->vif = vif;
1309 
1310 	/*
1311 	 * In SNIFFER device type, the firmware reports the FCS to
1312 	 * the host, rather than snipping it off. Unfortunately,
1313 	 * mac80211 doesn't (yet) provide a per-packet flag for
1314 	 * this, so that we have to set the hardware flag based
1315 	 * on the interfaces added. As the monitor interface can
1316 	 * only be present by itself, and will be removed before
1317 	 * other interfaces are added, this is safe.
1318 	 */
1319 	if (vif->type == NL80211_IFTYPE_MONITOR)
1320 		ieee80211_hw_set(priv->hw, RX_INCLUDES_FCS);
1321 	else
1322 		__clear_bit(IEEE80211_HW_RX_INCLUDES_FCS, priv->hw->flags);
1323 
1324 	err = iwl_setup_interface(priv, ctx);
1325 	if (!err || reset)
1326 		goto out;
1327 
1328 	ctx->vif = NULL;
1329 	priv->iw_mode = NL80211_IFTYPE_STATION;
1330  out:
1331 	mutex_unlock(&priv->mutex);
1332 
1333 	IWL_DEBUG_MAC80211(priv, "leave\n");
1334 	return err;
1335 }
1336 
1337 static void iwl_teardown_interface(struct iwl_priv *priv,
1338 				   struct ieee80211_vif *vif,
1339 				   bool mode_change)
1340 {
1341 	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1342 
1343 	lockdep_assert_held(&priv->mutex);
1344 
1345 	if (priv->scan_vif == vif) {
1346 		iwl_scan_cancel_timeout(priv, 200);
1347 		iwl_force_scan_end(priv);
1348 	}
1349 
1350 	if (!mode_change) {
1351 		iwl_set_mode(priv, ctx);
1352 		if (!ctx->always_active)
1353 			ctx->is_active = false;
1354 	}
1355 
1356 	/*
1357 	 * When removing the IBSS interface, overwrite the
1358 	 * BT traffic load with the stored one from the last
1359 	 * notification, if any. If this is a device that
1360 	 * doesn't implement this, this has no effect since
1361 	 * both values are the same and zero.
1362 	 */
1363 	if (vif->type == NL80211_IFTYPE_ADHOC)
1364 		priv->bt_traffic_load = priv->last_bt_traffic_load;
1365 }
1366 
1367 static void iwlagn_mac_remove_interface(struct ieee80211_hw *hw,
1368 			      struct ieee80211_vif *vif)
1369 {
1370 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1371 	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1372 
1373 	IWL_DEBUG_MAC80211(priv, "enter\n");
1374 
1375 	mutex_lock(&priv->mutex);
1376 
1377 	WARN_ON(ctx->vif != vif);
1378 	ctx->vif = NULL;
1379 
1380 	iwl_teardown_interface(priv, vif, false);
1381 
1382 	mutex_unlock(&priv->mutex);
1383 
1384 	IWL_DEBUG_MAC80211(priv, "leave\n");
1385 
1386 }
1387 
1388 static int iwlagn_mac_change_interface(struct ieee80211_hw *hw,
1389 				       struct ieee80211_vif *vif,
1390 				       enum nl80211_iftype newtype, bool newp2p)
1391 {
1392 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1393 	struct iwl_rxon_context *ctx, *tmp;
1394 	enum nl80211_iftype newviftype = newtype;
1395 	u32 interface_modes;
1396 	int err;
1397 
1398 	IWL_DEBUG_MAC80211(priv, "enter\n");
1399 
1400 	newtype = ieee80211_iftype_p2p(newtype, newp2p);
1401 
1402 	mutex_lock(&priv->mutex);
1403 
1404 	ctx = iwl_rxon_ctx_from_vif(vif);
1405 
1406 	/*
1407 	 * To simplify this code, only support changes on the
1408 	 * BSS context. The PAN context is usually reassigned
1409 	 * by creating/removing P2P interfaces anyway.
1410 	 */
1411 	if (ctx->ctxid != IWL_RXON_CTX_BSS) {
1412 		err = -EBUSY;
1413 		goto out;
1414 	}
1415 
1416 	if (!ctx->vif || !iwl_is_ready_rf(priv)) {
1417 		/*
1418 		 * Huh? But wait ... this can maybe happen when
1419 		 * we're in the middle of a firmware restart!
1420 		 */
1421 		err = -EBUSY;
1422 		goto out;
1423 	}
1424 
1425 	/* Check if the switch is supported in the same context */
1426 	interface_modes = ctx->interface_modes | ctx->exclusive_interface_modes;
1427 	if (!(interface_modes & BIT(newtype))) {
1428 		err = -EBUSY;
1429 		goto out;
1430 	}
1431 
1432 	if (ctx->exclusive_interface_modes & BIT(newtype)) {
1433 		for_each_context(priv, tmp) {
1434 			if (ctx == tmp)
1435 				continue;
1436 
1437 			if (!tmp->is_active)
1438 				continue;
1439 
1440 			/*
1441 			 * The current mode switch would be exclusive, but
1442 			 * another context is active ... refuse the switch.
1443 			 */
1444 			err = -EBUSY;
1445 			goto out;
1446 		}
1447 	}
1448 
1449 	/* success */
1450 	iwl_teardown_interface(priv, vif, true);
1451 	vif->type = newviftype;
1452 	vif->p2p = newp2p;
1453 	err = iwl_setup_interface(priv, ctx);
1454 	WARN_ON(err);
1455 	/*
1456 	 * We've switched internally, but submitting to the
1457 	 * device may have failed for some reason. Mask this
1458 	 * error, because otherwise mac80211 will not switch
1459 	 * (and set the interface type back) and we'll be
1460 	 * out of sync with it.
1461 	 */
1462 	err = 0;
1463 
1464  out:
1465 	mutex_unlock(&priv->mutex);
1466 	IWL_DEBUG_MAC80211(priv, "leave\n");
1467 
1468 	return err;
1469 }
1470 
1471 static int iwlagn_mac_hw_scan(struct ieee80211_hw *hw,
1472 			      struct ieee80211_vif *vif,
1473 			      struct ieee80211_scan_request *hw_req)
1474 {
1475 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1476 	struct cfg80211_scan_request *req = &hw_req->req;
1477 	int ret;
1478 
1479 	IWL_DEBUG_MAC80211(priv, "enter\n");
1480 
1481 	if (req->n_channels == 0)
1482 		return -EINVAL;
1483 
1484 	mutex_lock(&priv->mutex);
1485 
1486 	/*
1487 	 * If an internal scan is in progress, just set
1488 	 * up the scan_request as per above.
1489 	 */
1490 	if (priv->scan_type != IWL_SCAN_NORMAL) {
1491 		IWL_DEBUG_SCAN(priv,
1492 			       "SCAN request during internal scan - defer\n");
1493 		priv->scan_request = req;
1494 		priv->scan_vif = vif;
1495 		ret = 0;
1496 	} else {
1497 		priv->scan_request = req;
1498 		priv->scan_vif = vif;
1499 		/*
1500 		 * mac80211 will only ask for one band at a time
1501 		 * so using channels[0] here is ok
1502 		 */
1503 		ret = iwl_scan_initiate(priv, vif, IWL_SCAN_NORMAL,
1504 					req->channels[0]->band);
1505 		if (ret) {
1506 			priv->scan_request = NULL;
1507 			priv->scan_vif = NULL;
1508 		}
1509 	}
1510 
1511 	IWL_DEBUG_MAC80211(priv, "leave\n");
1512 
1513 	mutex_unlock(&priv->mutex);
1514 
1515 	return ret;
1516 }
1517 
1518 static void iwl_sta_modify_ps_wake(struct iwl_priv *priv, int sta_id)
1519 {
1520 	struct iwl_addsta_cmd cmd = {
1521 		.mode = STA_CONTROL_MODIFY_MSK,
1522 		.station_flags_msk = STA_FLG_PWR_SAVE_MSK,
1523 		.sta.sta_id = sta_id,
1524 	};
1525 
1526 	iwl_send_add_sta(priv, &cmd, CMD_ASYNC);
1527 }
1528 
1529 static void iwlagn_mac_sta_notify(struct ieee80211_hw *hw,
1530 				  struct ieee80211_vif *vif,
1531 				  enum sta_notify_cmd cmd,
1532 				  struct ieee80211_sta *sta)
1533 {
1534 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1535 	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
1536 	int sta_id;
1537 
1538 	IWL_DEBUG_MAC80211(priv, "enter\n");
1539 
1540 	switch (cmd) {
1541 	case STA_NOTIFY_SLEEP:
1542 		WARN_ON(!sta_priv->client);
1543 		sta_priv->asleep = true;
1544 		if (atomic_read(&sta_priv->pending_frames) > 0)
1545 			ieee80211_sta_block_awake(hw, sta, true);
1546 		break;
1547 	case STA_NOTIFY_AWAKE:
1548 		WARN_ON(!sta_priv->client);
1549 		if (!sta_priv->asleep)
1550 			break;
1551 		sta_priv->asleep = false;
1552 		sta_id = iwl_sta_id(sta);
1553 		if (sta_id != IWL_INVALID_STATION)
1554 			iwl_sta_modify_ps_wake(priv, sta_id);
1555 		break;
1556 	default:
1557 		break;
1558 	}
1559 	IWL_DEBUG_MAC80211(priv, "leave\n");
1560 }
1561 
1562 static void
1563 iwlagn_mac_reconfig_complete(struct ieee80211_hw *hw,
1564 			     enum ieee80211_reconfig_type reconfig_type)
1565 {
1566 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1567 
1568 	if (reconfig_type == IEEE80211_RECONFIG_TYPE_RESTART)
1569 		iwl_trans_finish_sw_reset(priv->trans);
1570 }
1571 
1572 const struct ieee80211_ops iwlagn_hw_ops = {
1573 	.add_chanctx = ieee80211_emulate_add_chanctx,
1574 	.remove_chanctx = ieee80211_emulate_remove_chanctx,
1575 	.change_chanctx = ieee80211_emulate_change_chanctx,
1576 	.switch_vif_chanctx = ieee80211_emulate_switch_vif_chanctx,
1577 	.tx = iwlagn_mac_tx,
1578 	.wake_tx_queue = ieee80211_handle_wake_tx_queue,
1579 	.start = iwlagn_mac_start,
1580 	.stop = iwlagn_mac_stop,
1581 #ifdef CONFIG_PM_SLEEP
1582 	.suspend = iwlagn_mac_suspend,
1583 	.resume = iwlagn_mac_resume,
1584 	.set_wakeup = iwlagn_mac_set_wakeup,
1585 #endif
1586 	.add_interface = iwlagn_mac_add_interface,
1587 	.remove_interface = iwlagn_mac_remove_interface,
1588 	.change_interface = iwlagn_mac_change_interface,
1589 	.config = iwlagn_mac_config,
1590 	.configure_filter = iwlagn_configure_filter,
1591 	.set_key = iwlagn_mac_set_key,
1592 	.update_tkip_key = iwlagn_mac_update_tkip_key,
1593 	.set_rekey_data = iwlagn_mac_set_rekey_data,
1594 	.conf_tx = iwlagn_mac_conf_tx,
1595 	.bss_info_changed = iwlagn_bss_info_changed,
1596 	.ampdu_action = iwlagn_mac_ampdu_action,
1597 	.hw_scan = iwlagn_mac_hw_scan,
1598 	.sta_notify = iwlagn_mac_sta_notify,
1599 	.sta_state = iwlagn_mac_sta_state,
1600 	.channel_switch = iwlagn_mac_channel_switch,
1601 	.flush = iwlagn_mac_flush,
1602 	.tx_last_beacon = iwlagn_mac_tx_last_beacon,
1603 	.event_callback = iwlagn_mac_event_callback,
1604 	.set_tim = iwlagn_mac_set_tim,
1605 	.reconfig_complete = iwlagn_mac_reconfig_complete,
1606 };
1607 
1608 /* This function both allocates and initializes hw and priv. */
1609 struct ieee80211_hw *iwl_alloc_all(void)
1610 {
1611 	struct iwl_priv *priv;
1612 	struct iwl_op_mode *op_mode;
1613 	/* mac80211 allocates memory for this device instance, including
1614 	 *   space for this driver's private structure */
1615 	struct ieee80211_hw *hw;
1616 
1617 	hw = ieee80211_alloc_hw(sizeof(struct iwl_priv) +
1618 				sizeof(struct iwl_op_mode), &iwlagn_hw_ops);
1619 	if (!hw)
1620 		goto out;
1621 
1622 	op_mode = hw->priv;
1623 	priv = IWL_OP_MODE_GET_DVM(op_mode);
1624 	priv->hw = hw;
1625 
1626 out:
1627 	return hw;
1628 }
1629