1 /****************************************************************************** 2 * 3 * This file is provided under a dual BSD/GPLv2 license. When using or 4 * redistributing this file, you may do so under either license. 5 * 6 * GPL LICENSE SUMMARY 7 * 8 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. 9 * Copyright(c) 2013 - 2014 Intel Mobile Communications GmbH 10 * Copyright(c) 2016 Intel Deutschland GmbH 11 * 12 * This program is free software; you can redistribute it and/or modify 13 * it under the terms of version 2 of the GNU General Public License as 14 * published by the Free Software Foundation. 15 * 16 * This program is distributed in the hope that it will be useful, but 17 * WITHOUT ANY WARRANTY; without even the implied warranty of 18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 19 * General Public License for more details. 20 * 21 * You should have received a copy of the GNU General Public License 22 * along with this program; if not, write to the Free Software 23 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, 24 * USA 25 * 26 * The full GNU General Public License is included in this distribution 27 * in the file called COPYING. 28 * 29 * Contact Information: 30 * Intel Linux Wireless <linuxwifi@intel.com> 31 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 32 * 33 * BSD LICENSE 34 * 35 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. 36 * Copyright(c) 2013 - 2014 Intel Mobile Communications GmbH 37 * All rights reserved. 38 * 39 * Redistribution and use in source and binary forms, with or without 40 * modification, are permitted provided that the following conditions 41 * are met: 42 * 43 * * Redistributions of source code must retain the above copyright 44 * notice, this list of conditions and the following disclaimer. 45 * * Redistributions in binary form must reproduce the above copyright 46 * notice, this list of conditions and the following disclaimer in 47 * the documentation and/or other materials provided with the 48 * distribution. 49 * * Neither the name Intel Corporation nor the names of its 50 * contributors may be used to endorse or promote products derived 51 * from this software without specific prior written permission. 52 * 53 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 54 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 55 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 56 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 57 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 58 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 59 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 60 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 61 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 62 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 63 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 64 * 65 *****************************************************************************/ 66 #include <linux/kernel.h> 67 #include <linux/slab.h> 68 #include <linux/skbuff.h> 69 #include <linux/netdevice.h> 70 #include <linux/etherdevice.h> 71 #include <linux/ip.h> 72 #include <linux/if_arp.h> 73 #include <linux/time.h> 74 #include <net/mac80211.h> 75 #include <net/ieee80211_radiotap.h> 76 #include <net/tcp.h> 77 78 #include "iwl-op-mode.h" 79 #include "iwl-io.h" 80 #include "mvm.h" 81 #include "sta.h" 82 #include "time-event.h" 83 #include "iwl-eeprom-parse.h" 84 #include "iwl-phy-db.h" 85 #include "testmode.h" 86 #include "iwl-fw-error-dump.h" 87 #include "iwl-prph.h" 88 #include "iwl-nvm-parse.h" 89 #include "fw-dbg.h" 90 91 static const struct ieee80211_iface_limit iwl_mvm_limits[] = { 92 { 93 .max = 1, 94 .types = BIT(NL80211_IFTYPE_STATION), 95 }, 96 { 97 .max = 1, 98 .types = BIT(NL80211_IFTYPE_AP) | 99 BIT(NL80211_IFTYPE_P2P_CLIENT) | 100 BIT(NL80211_IFTYPE_P2P_GO), 101 }, 102 { 103 .max = 1, 104 .types = BIT(NL80211_IFTYPE_P2P_DEVICE), 105 }, 106 }; 107 108 static const struct ieee80211_iface_combination iwl_mvm_iface_combinations[] = { 109 { 110 .num_different_channels = 2, 111 .max_interfaces = 3, 112 .limits = iwl_mvm_limits, 113 .n_limits = ARRAY_SIZE(iwl_mvm_limits), 114 }, 115 }; 116 117 #ifdef CONFIG_PM_SLEEP 118 static const struct nl80211_wowlan_tcp_data_token_feature 119 iwl_mvm_wowlan_tcp_token_feature = { 120 .min_len = 0, 121 .max_len = 255, 122 .bufsize = IWL_WOWLAN_REMOTE_WAKE_MAX_TOKENS, 123 }; 124 125 static const struct wiphy_wowlan_tcp_support iwl_mvm_wowlan_tcp_support = { 126 .tok = &iwl_mvm_wowlan_tcp_token_feature, 127 .data_payload_max = IWL_WOWLAN_TCP_MAX_PACKET_LEN - 128 sizeof(struct ethhdr) - 129 sizeof(struct iphdr) - 130 sizeof(struct tcphdr), 131 .data_interval_max = 65535, /* __le16 in API */ 132 .wake_payload_max = IWL_WOWLAN_REMOTE_WAKE_MAX_PACKET_LEN - 133 sizeof(struct ethhdr) - 134 sizeof(struct iphdr) - 135 sizeof(struct tcphdr), 136 .seq = true, 137 }; 138 #endif 139 140 #ifdef CONFIG_IWLWIFI_BCAST_FILTERING 141 /* 142 * Use the reserved field to indicate magic values. 143 * these values will only be used internally by the driver, 144 * and won't make it to the fw (reserved will be 0). 145 * BC_FILTER_MAGIC_IP - configure the val of this attribute to 146 * be the vif's ip address. in case there is not a single 147 * ip address (0, or more than 1), this attribute will 148 * be skipped. 149 * BC_FILTER_MAGIC_MAC - set the val of this attribute to 150 * the LSB bytes of the vif's mac address 151 */ 152 enum { 153 BC_FILTER_MAGIC_NONE = 0, 154 BC_FILTER_MAGIC_IP, 155 BC_FILTER_MAGIC_MAC, 156 }; 157 158 static const struct iwl_fw_bcast_filter iwl_mvm_default_bcast_filters[] = { 159 { 160 /* arp */ 161 .discard = 0, 162 .frame_type = BCAST_FILTER_FRAME_TYPE_ALL, 163 .attrs = { 164 { 165 /* frame type - arp, hw type - ethernet */ 166 .offset_type = 167 BCAST_FILTER_OFFSET_PAYLOAD_START, 168 .offset = sizeof(rfc1042_header), 169 .val = cpu_to_be32(0x08060001), 170 .mask = cpu_to_be32(0xffffffff), 171 }, 172 { 173 /* arp dest ip */ 174 .offset_type = 175 BCAST_FILTER_OFFSET_PAYLOAD_START, 176 .offset = sizeof(rfc1042_header) + 2 + 177 sizeof(struct arphdr) + 178 ETH_ALEN + sizeof(__be32) + 179 ETH_ALEN, 180 .mask = cpu_to_be32(0xffffffff), 181 /* mark it as special field */ 182 .reserved1 = cpu_to_le16(BC_FILTER_MAGIC_IP), 183 }, 184 }, 185 }, 186 { 187 /* dhcp offer bcast */ 188 .discard = 0, 189 .frame_type = BCAST_FILTER_FRAME_TYPE_IPV4, 190 .attrs = { 191 { 192 /* udp dest port - 68 (bootp client)*/ 193 .offset_type = BCAST_FILTER_OFFSET_IP_END, 194 .offset = offsetof(struct udphdr, dest), 195 .val = cpu_to_be32(0x00440000), 196 .mask = cpu_to_be32(0xffff0000), 197 }, 198 { 199 /* dhcp - lsb bytes of client hw address */ 200 .offset_type = BCAST_FILTER_OFFSET_IP_END, 201 .offset = 38, 202 .mask = cpu_to_be32(0xffffffff), 203 /* mark it as special field */ 204 .reserved1 = cpu_to_le16(BC_FILTER_MAGIC_MAC), 205 }, 206 }, 207 }, 208 /* last filter must be empty */ 209 {}, 210 }; 211 #endif 212 213 void iwl_mvm_ref(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type) 214 { 215 if (!iwl_mvm_is_d0i3_supported(mvm)) 216 return; 217 218 IWL_DEBUG_RPM(mvm, "Take mvm reference - type %d\n", ref_type); 219 spin_lock_bh(&mvm->refs_lock); 220 mvm->refs[ref_type]++; 221 spin_unlock_bh(&mvm->refs_lock); 222 iwl_trans_ref(mvm->trans); 223 } 224 225 void iwl_mvm_unref(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type) 226 { 227 if (!iwl_mvm_is_d0i3_supported(mvm)) 228 return; 229 230 IWL_DEBUG_RPM(mvm, "Leave mvm reference - type %d\n", ref_type); 231 spin_lock_bh(&mvm->refs_lock); 232 WARN_ON(!mvm->refs[ref_type]--); 233 spin_unlock_bh(&mvm->refs_lock); 234 iwl_trans_unref(mvm->trans); 235 } 236 237 static void iwl_mvm_unref_all_except(struct iwl_mvm *mvm, 238 enum iwl_mvm_ref_type except_ref) 239 { 240 int i, j; 241 242 if (!iwl_mvm_is_d0i3_supported(mvm)) 243 return; 244 245 spin_lock_bh(&mvm->refs_lock); 246 for (i = 0; i < IWL_MVM_REF_COUNT; i++) { 247 if (except_ref == i || !mvm->refs[i]) 248 continue; 249 250 IWL_DEBUG_RPM(mvm, "Cleanup: remove mvm ref type %d (%d)\n", 251 i, mvm->refs[i]); 252 for (j = 0; j < mvm->refs[i]; j++) 253 iwl_trans_unref(mvm->trans); 254 mvm->refs[i] = 0; 255 } 256 spin_unlock_bh(&mvm->refs_lock); 257 } 258 259 bool iwl_mvm_ref_taken(struct iwl_mvm *mvm) 260 { 261 int i; 262 bool taken = false; 263 264 if (!iwl_mvm_is_d0i3_supported(mvm)) 265 return true; 266 267 spin_lock_bh(&mvm->refs_lock); 268 for (i = 0; i < IWL_MVM_REF_COUNT; i++) { 269 if (mvm->refs[i]) { 270 taken = true; 271 break; 272 } 273 } 274 spin_unlock_bh(&mvm->refs_lock); 275 276 return taken; 277 } 278 279 int iwl_mvm_ref_sync(struct iwl_mvm *mvm, enum iwl_mvm_ref_type ref_type) 280 { 281 iwl_mvm_ref(mvm, ref_type); 282 283 if (!wait_event_timeout(mvm->d0i3_exit_waitq, 284 !test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status), 285 HZ)) { 286 WARN_ON_ONCE(1); 287 iwl_mvm_unref(mvm, ref_type); 288 return -EIO; 289 } 290 291 return 0; 292 } 293 294 static void iwl_mvm_reset_phy_ctxts(struct iwl_mvm *mvm) 295 { 296 int i; 297 298 memset(mvm->phy_ctxts, 0, sizeof(mvm->phy_ctxts)); 299 for (i = 0; i < NUM_PHY_CTX; i++) { 300 mvm->phy_ctxts[i].id = i; 301 mvm->phy_ctxts[i].ref = 0; 302 } 303 } 304 305 struct ieee80211_regdomain *iwl_mvm_get_regdomain(struct wiphy *wiphy, 306 const char *alpha2, 307 enum iwl_mcc_source src_id, 308 bool *changed) 309 { 310 struct ieee80211_regdomain *regd = NULL; 311 struct ieee80211_hw *hw = wiphy_to_ieee80211_hw(wiphy); 312 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 313 struct iwl_mcc_update_resp *resp; 314 315 IWL_DEBUG_LAR(mvm, "Getting regdomain data for %s from FW\n", alpha2); 316 317 lockdep_assert_held(&mvm->mutex); 318 319 resp = iwl_mvm_update_mcc(mvm, alpha2, src_id); 320 if (IS_ERR_OR_NULL(resp)) { 321 IWL_DEBUG_LAR(mvm, "Could not get update from FW %d\n", 322 PTR_ERR_OR_ZERO(resp)); 323 goto out; 324 } 325 326 if (changed) 327 *changed = (resp->status == MCC_RESP_NEW_CHAN_PROFILE); 328 329 regd = iwl_parse_nvm_mcc_info(mvm->trans->dev, mvm->cfg, 330 __le32_to_cpu(resp->n_channels), 331 resp->channels, 332 __le16_to_cpu(resp->mcc)); 333 /* Store the return source id */ 334 src_id = resp->source_id; 335 kfree(resp); 336 if (IS_ERR_OR_NULL(regd)) { 337 IWL_DEBUG_LAR(mvm, "Could not get parse update from FW %d\n", 338 PTR_ERR_OR_ZERO(regd)); 339 goto out; 340 } 341 342 IWL_DEBUG_LAR(mvm, "setting alpha2 from FW to %s (0x%x, 0x%x) src=%d\n", 343 regd->alpha2, regd->alpha2[0], regd->alpha2[1], src_id); 344 mvm->lar_regdom_set = true; 345 mvm->mcc_src = src_id; 346 347 out: 348 return regd; 349 } 350 351 void iwl_mvm_update_changed_regdom(struct iwl_mvm *mvm) 352 { 353 bool changed; 354 struct ieee80211_regdomain *regd; 355 356 if (!iwl_mvm_is_lar_supported(mvm)) 357 return; 358 359 regd = iwl_mvm_get_current_regdomain(mvm, &changed); 360 if (!IS_ERR_OR_NULL(regd)) { 361 /* only update the regulatory core if changed */ 362 if (changed) 363 regulatory_set_wiphy_regd(mvm->hw->wiphy, regd); 364 365 kfree(regd); 366 } 367 } 368 369 struct ieee80211_regdomain *iwl_mvm_get_current_regdomain(struct iwl_mvm *mvm, 370 bool *changed) 371 { 372 return iwl_mvm_get_regdomain(mvm->hw->wiphy, "ZZ", 373 iwl_mvm_is_wifi_mcc_supported(mvm) ? 374 MCC_SOURCE_GET_CURRENT : 375 MCC_SOURCE_OLD_FW, changed); 376 } 377 378 int iwl_mvm_init_fw_regd(struct iwl_mvm *mvm) 379 { 380 enum iwl_mcc_source used_src; 381 struct ieee80211_regdomain *regd; 382 int ret; 383 bool changed; 384 const struct ieee80211_regdomain *r = 385 rtnl_dereference(mvm->hw->wiphy->regd); 386 387 if (!r) 388 return -ENOENT; 389 390 /* save the last source in case we overwrite it below */ 391 used_src = mvm->mcc_src; 392 if (iwl_mvm_is_wifi_mcc_supported(mvm)) { 393 /* Notify the firmware we support wifi location updates */ 394 regd = iwl_mvm_get_current_regdomain(mvm, NULL); 395 if (!IS_ERR_OR_NULL(regd)) 396 kfree(regd); 397 } 398 399 /* Now set our last stored MCC and source */ 400 regd = iwl_mvm_get_regdomain(mvm->hw->wiphy, r->alpha2, used_src, 401 &changed); 402 if (IS_ERR_OR_NULL(regd)) 403 return -EIO; 404 405 /* update cfg80211 if the regdomain was changed */ 406 if (changed) 407 ret = regulatory_set_wiphy_regd_sync_rtnl(mvm->hw->wiphy, regd); 408 else 409 ret = 0; 410 411 kfree(regd); 412 return ret; 413 } 414 415 int iwl_mvm_mac_setup_register(struct iwl_mvm *mvm) 416 { 417 struct ieee80211_hw *hw = mvm->hw; 418 int num_mac, ret, i; 419 static const u32 mvm_ciphers[] = { 420 WLAN_CIPHER_SUITE_WEP40, 421 WLAN_CIPHER_SUITE_WEP104, 422 WLAN_CIPHER_SUITE_TKIP, 423 WLAN_CIPHER_SUITE_CCMP, 424 }; 425 426 /* Tell mac80211 our characteristics */ 427 ieee80211_hw_set(hw, SIGNAL_DBM); 428 ieee80211_hw_set(hw, SPECTRUM_MGMT); 429 ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS); 430 ieee80211_hw_set(hw, QUEUE_CONTROL); 431 ieee80211_hw_set(hw, WANT_MONITOR_VIF); 432 ieee80211_hw_set(hw, SUPPORTS_PS); 433 ieee80211_hw_set(hw, SUPPORTS_DYNAMIC_PS); 434 ieee80211_hw_set(hw, AMPDU_AGGREGATION); 435 ieee80211_hw_set(hw, TIMING_BEACON_ONLY); 436 ieee80211_hw_set(hw, CONNECTION_MONITOR); 437 ieee80211_hw_set(hw, CHANCTX_STA_CSA); 438 ieee80211_hw_set(hw, SUPPORT_FAST_XMIT); 439 ieee80211_hw_set(hw, SUPPORTS_CLONED_SKBS); 440 ieee80211_hw_set(hw, SUPPORTS_AMSDU_IN_AMPDU); 441 ieee80211_hw_set(hw, NEEDS_UNIQUE_STA_ADDR); 442 443 if (mvm->trans->max_skb_frags) 444 hw->netdev_features = NETIF_F_HIGHDMA | NETIF_F_SG; 445 446 hw->queues = mvm->first_agg_queue; 447 hw->offchannel_tx_hw_queue = IWL_MVM_OFFCHANNEL_QUEUE; 448 hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FEC | 449 IEEE80211_RADIOTAP_MCS_HAVE_STBC; 450 hw->radiotap_vht_details |= IEEE80211_RADIOTAP_VHT_KNOWN_STBC | 451 IEEE80211_RADIOTAP_VHT_KNOWN_BEAMFORMED; 452 hw->rate_control_algorithm = "iwl-mvm-rs"; 453 hw->uapsd_queues = IWL_MVM_UAPSD_QUEUES; 454 hw->uapsd_max_sp_len = IWL_UAPSD_MAX_SP; 455 456 BUILD_BUG_ON(ARRAY_SIZE(mvm->ciphers) < ARRAY_SIZE(mvm_ciphers) + 2); 457 memcpy(mvm->ciphers, mvm_ciphers, sizeof(mvm_ciphers)); 458 hw->wiphy->n_cipher_suites = ARRAY_SIZE(mvm_ciphers); 459 hw->wiphy->cipher_suites = mvm->ciphers; 460 461 /* 462 * Enable 11w if advertised by firmware and software crypto 463 * is not enabled (as the firmware will interpret some mgmt 464 * packets, so enabling it with software crypto isn't safe) 465 */ 466 if (mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_MFP && 467 !iwlwifi_mod_params.sw_crypto) { 468 ieee80211_hw_set(hw, MFP_CAPABLE); 469 mvm->ciphers[hw->wiphy->n_cipher_suites] = 470 WLAN_CIPHER_SUITE_AES_CMAC; 471 hw->wiphy->n_cipher_suites++; 472 } 473 474 /* currently FW API supports only one optional cipher scheme */ 475 if (mvm->fw->cs[0].cipher) { 476 mvm->hw->n_cipher_schemes = 1; 477 mvm->hw->cipher_schemes = &mvm->fw->cs[0]; 478 mvm->ciphers[hw->wiphy->n_cipher_suites] = 479 mvm->fw->cs[0].cipher; 480 hw->wiphy->n_cipher_suites++; 481 } 482 483 ieee80211_hw_set(hw, SINGLE_SCAN_ON_ALL_BANDS); 484 hw->wiphy->features |= 485 NL80211_FEATURE_SCHED_SCAN_RANDOM_MAC_ADDR | 486 NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR | 487 NL80211_FEATURE_ND_RANDOM_MAC_ADDR; 488 489 hw->sta_data_size = sizeof(struct iwl_mvm_sta); 490 hw->vif_data_size = sizeof(struct iwl_mvm_vif); 491 hw->chanctx_data_size = sizeof(u16); 492 493 hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) | 494 BIT(NL80211_IFTYPE_P2P_CLIENT) | 495 BIT(NL80211_IFTYPE_AP) | 496 BIT(NL80211_IFTYPE_P2P_GO) | 497 BIT(NL80211_IFTYPE_P2P_DEVICE) | 498 BIT(NL80211_IFTYPE_ADHOC); 499 500 hw->wiphy->flags |= WIPHY_FLAG_IBSS_RSN; 501 hw->wiphy->regulatory_flags |= REGULATORY_ENABLE_RELAX_NO_IR; 502 if (iwl_mvm_is_lar_supported(mvm)) 503 hw->wiphy->regulatory_flags |= REGULATORY_WIPHY_SELF_MANAGED; 504 else 505 hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG | 506 REGULATORY_DISABLE_BEACON_HINTS; 507 508 if (mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_GO_UAPSD) 509 hw->wiphy->flags |= WIPHY_FLAG_AP_UAPSD; 510 511 hw->wiphy->flags |= WIPHY_FLAG_HAS_CHANNEL_SWITCH; 512 513 hw->wiphy->iface_combinations = iwl_mvm_iface_combinations; 514 hw->wiphy->n_iface_combinations = 515 ARRAY_SIZE(iwl_mvm_iface_combinations); 516 517 hw->wiphy->max_remain_on_channel_duration = 10000; 518 hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL; 519 /* we can compensate an offset of up to 3 channels = 15 MHz */ 520 hw->wiphy->max_adj_channel_rssi_comp = 3 * 5; 521 522 /* Extract MAC address */ 523 memcpy(mvm->addresses[0].addr, mvm->nvm_data->hw_addr, ETH_ALEN); 524 hw->wiphy->addresses = mvm->addresses; 525 hw->wiphy->n_addresses = 1; 526 527 /* Extract additional MAC addresses if available */ 528 num_mac = (mvm->nvm_data->n_hw_addrs > 1) ? 529 min(IWL_MVM_MAX_ADDRESSES, mvm->nvm_data->n_hw_addrs) : 1; 530 531 for (i = 1; i < num_mac; i++) { 532 memcpy(mvm->addresses[i].addr, mvm->addresses[i-1].addr, 533 ETH_ALEN); 534 mvm->addresses[i].addr[5]++; 535 hw->wiphy->n_addresses++; 536 } 537 538 iwl_mvm_reset_phy_ctxts(mvm); 539 540 hw->wiphy->max_scan_ie_len = iwl_mvm_max_scan_ie_len(mvm); 541 542 hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX; 543 544 BUILD_BUG_ON(IWL_MVM_SCAN_STOPPING_MASK & IWL_MVM_SCAN_MASK); 545 BUILD_BUG_ON(IWL_MVM_MAX_UMAC_SCANS > HWEIGHT32(IWL_MVM_SCAN_MASK) || 546 IWL_MVM_MAX_LMAC_SCANS > HWEIGHT32(IWL_MVM_SCAN_MASK)); 547 548 if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_UMAC_SCAN)) 549 mvm->max_scans = IWL_MVM_MAX_UMAC_SCANS; 550 else 551 mvm->max_scans = IWL_MVM_MAX_LMAC_SCANS; 552 553 if (mvm->nvm_data->bands[IEEE80211_BAND_2GHZ].n_channels) 554 hw->wiphy->bands[IEEE80211_BAND_2GHZ] = 555 &mvm->nvm_data->bands[IEEE80211_BAND_2GHZ]; 556 if (mvm->nvm_data->bands[IEEE80211_BAND_5GHZ].n_channels) { 557 hw->wiphy->bands[IEEE80211_BAND_5GHZ] = 558 &mvm->nvm_data->bands[IEEE80211_BAND_5GHZ]; 559 560 if (fw_has_capa(&mvm->fw->ucode_capa, 561 IWL_UCODE_TLV_CAPA_BEAMFORMER) && 562 fw_has_api(&mvm->fw->ucode_capa, 563 IWL_UCODE_TLV_API_LQ_SS_PARAMS)) 564 hw->wiphy->bands[IEEE80211_BAND_5GHZ]->vht_cap.cap |= 565 IEEE80211_VHT_CAP_SU_BEAMFORMER_CAPABLE; 566 } 567 568 hw->wiphy->hw_version = mvm->trans->hw_id; 569 570 if (iwlmvm_mod_params.power_scheme != IWL_POWER_SCHEME_CAM) 571 hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT; 572 else 573 hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT; 574 575 hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_SCHED_SCAN; 576 hw->wiphy->max_sched_scan_ssids = PROBE_OPTION_MAX; 577 hw->wiphy->max_match_sets = IWL_SCAN_MAX_PROFILES; 578 /* we create the 802.11 header and zero length SSID IE. */ 579 hw->wiphy->max_sched_scan_ie_len = 580 SCAN_OFFLOAD_PROBE_REQ_SIZE - 24 - 2; 581 hw->wiphy->max_sched_scan_plans = IWL_MAX_SCHED_SCAN_PLANS; 582 hw->wiphy->max_sched_scan_plan_interval = U16_MAX; 583 584 /* 585 * the firmware uses u8 for num of iterations, but 0xff is saved for 586 * infinite loop, so the maximum number of iterations is actually 254. 587 */ 588 hw->wiphy->max_sched_scan_plan_iterations = 254; 589 590 hw->wiphy->features |= NL80211_FEATURE_P2P_GO_CTWIN | 591 NL80211_FEATURE_LOW_PRIORITY_SCAN | 592 NL80211_FEATURE_P2P_GO_OPPPS | 593 NL80211_FEATURE_DYNAMIC_SMPS | 594 NL80211_FEATURE_STATIC_SMPS | 595 NL80211_FEATURE_SUPPORTS_WMM_ADMISSION; 596 597 if (fw_has_capa(&mvm->fw->ucode_capa, 598 IWL_UCODE_TLV_CAPA_TXPOWER_INSERTION_SUPPORT)) 599 hw->wiphy->features |= NL80211_FEATURE_TX_POWER_INSERTION; 600 if (fw_has_capa(&mvm->fw->ucode_capa, 601 IWL_UCODE_TLV_CAPA_QUIET_PERIOD_SUPPORT)) 602 hw->wiphy->features |= NL80211_FEATURE_QUIET; 603 604 if (fw_has_capa(&mvm->fw->ucode_capa, 605 IWL_UCODE_TLV_CAPA_DS_PARAM_SET_IE_SUPPORT)) 606 hw->wiphy->features |= 607 NL80211_FEATURE_DS_PARAM_SET_IE_IN_PROBES; 608 609 if (fw_has_capa(&mvm->fw->ucode_capa, 610 IWL_UCODE_TLV_CAPA_WFA_TPC_REP_IE_SUPPORT)) 611 hw->wiphy->features |= NL80211_FEATURE_WFA_TPC_IE_IN_PROBES; 612 613 mvm->rts_threshold = IEEE80211_MAX_RTS_THRESHOLD; 614 615 #ifdef CONFIG_PM_SLEEP 616 if (iwl_mvm_is_d0i3_supported(mvm) && 617 device_can_wakeup(mvm->trans->dev)) { 618 mvm->wowlan.flags = WIPHY_WOWLAN_ANY; 619 hw->wiphy->wowlan = &mvm->wowlan; 620 } 621 622 if (mvm->fw->img[IWL_UCODE_WOWLAN].sec[0].len && 623 mvm->trans->ops->d3_suspend && 624 mvm->trans->ops->d3_resume && 625 device_can_wakeup(mvm->trans->dev)) { 626 mvm->wowlan.flags |= WIPHY_WOWLAN_MAGIC_PKT | 627 WIPHY_WOWLAN_DISCONNECT | 628 WIPHY_WOWLAN_EAP_IDENTITY_REQ | 629 WIPHY_WOWLAN_RFKILL_RELEASE | 630 WIPHY_WOWLAN_NET_DETECT; 631 if (!iwlwifi_mod_params.sw_crypto) 632 mvm->wowlan.flags |= WIPHY_WOWLAN_SUPPORTS_GTK_REKEY | 633 WIPHY_WOWLAN_GTK_REKEY_FAILURE | 634 WIPHY_WOWLAN_4WAY_HANDSHAKE; 635 636 mvm->wowlan.n_patterns = IWL_WOWLAN_MAX_PATTERNS; 637 mvm->wowlan.pattern_min_len = IWL_WOWLAN_MIN_PATTERN_LEN; 638 mvm->wowlan.pattern_max_len = IWL_WOWLAN_MAX_PATTERN_LEN; 639 mvm->wowlan.max_nd_match_sets = IWL_SCAN_MAX_PROFILES; 640 mvm->wowlan.tcp = &iwl_mvm_wowlan_tcp_support; 641 hw->wiphy->wowlan = &mvm->wowlan; 642 } 643 #endif 644 645 #ifdef CONFIG_IWLWIFI_BCAST_FILTERING 646 /* assign default bcast filtering configuration */ 647 mvm->bcast_filters = iwl_mvm_default_bcast_filters; 648 #endif 649 650 ret = iwl_mvm_leds_init(mvm); 651 if (ret) 652 return ret; 653 654 if (fw_has_capa(&mvm->fw->ucode_capa, 655 IWL_UCODE_TLV_CAPA_TDLS_SUPPORT)) { 656 IWL_DEBUG_TDLS(mvm, "TDLS supported\n"); 657 hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_TDLS; 658 ieee80211_hw_set(hw, TDLS_WIDER_BW); 659 } 660 661 if (fw_has_capa(&mvm->fw->ucode_capa, 662 IWL_UCODE_TLV_CAPA_TDLS_CHANNEL_SWITCH)) { 663 IWL_DEBUG_TDLS(mvm, "TDLS channel switch supported\n"); 664 hw->wiphy->features |= NL80211_FEATURE_TDLS_CHANNEL_SWITCH; 665 } 666 667 hw->netdev_features |= mvm->cfg->features; 668 if (!iwl_mvm_is_csum_supported(mvm)) 669 hw->netdev_features &= ~NETIF_F_RXCSUM; 670 671 if (IWL_MVM_SW_TX_CSUM_OFFLOAD) 672 hw->netdev_features |= NETIF_F_IP_CSUM | NETIF_F_IPV6_CSUM | 673 NETIF_F_TSO | NETIF_F_TSO6; 674 675 ret = ieee80211_register_hw(mvm->hw); 676 if (ret) 677 iwl_mvm_leds_exit(mvm); 678 679 return ret; 680 } 681 682 static bool iwl_mvm_defer_tx(struct iwl_mvm *mvm, 683 struct ieee80211_sta *sta, 684 struct sk_buff *skb) 685 { 686 struct iwl_mvm_sta *mvmsta; 687 bool defer = false; 688 689 /* 690 * double check the IN_D0I3 flag both before and after 691 * taking the spinlock, in order to prevent taking 692 * the spinlock when not needed. 693 */ 694 if (likely(!test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status))) 695 return false; 696 697 spin_lock(&mvm->d0i3_tx_lock); 698 /* 699 * testing the flag again ensures the skb dequeue 700 * loop (on d0i3 exit) hasn't run yet. 701 */ 702 if (!test_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status)) 703 goto out; 704 705 mvmsta = iwl_mvm_sta_from_mac80211(sta); 706 if (mvmsta->sta_id == IWL_MVM_STATION_COUNT || 707 mvmsta->sta_id != mvm->d0i3_ap_sta_id) 708 goto out; 709 710 __skb_queue_tail(&mvm->d0i3_tx, skb); 711 ieee80211_stop_queues(mvm->hw); 712 713 /* trigger wakeup */ 714 iwl_mvm_ref(mvm, IWL_MVM_REF_TX); 715 iwl_mvm_unref(mvm, IWL_MVM_REF_TX); 716 717 defer = true; 718 out: 719 spin_unlock(&mvm->d0i3_tx_lock); 720 return defer; 721 } 722 723 static void iwl_mvm_mac_tx(struct ieee80211_hw *hw, 724 struct ieee80211_tx_control *control, 725 struct sk_buff *skb) 726 { 727 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 728 struct ieee80211_sta *sta = control->sta; 729 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); 730 struct ieee80211_hdr *hdr = (void *)skb->data; 731 732 if (iwl_mvm_is_radio_killed(mvm)) { 733 IWL_DEBUG_DROP(mvm, "Dropping - RF/CT KILL\n"); 734 goto drop; 735 } 736 737 if (IEEE80211_SKB_CB(skb)->hw_queue == IWL_MVM_OFFCHANNEL_QUEUE && 738 !test_bit(IWL_MVM_STATUS_ROC_RUNNING, &mvm->status) && 739 !test_bit(IWL_MVM_STATUS_ROC_AUX_RUNNING, &mvm->status)) 740 goto drop; 741 742 /* treat non-bufferable MMPDUs as broadcast if sta is sleeping */ 743 if (unlikely(info->flags & IEEE80211_TX_CTL_NO_PS_BUFFER && 744 ieee80211_is_mgmt(hdr->frame_control) && 745 !ieee80211_is_deauth(hdr->frame_control) && 746 !ieee80211_is_disassoc(hdr->frame_control) && 747 !ieee80211_is_action(hdr->frame_control))) 748 sta = NULL; 749 750 if (sta) { 751 if (iwl_mvm_defer_tx(mvm, sta, skb)) 752 return; 753 if (iwl_mvm_tx_skb(mvm, skb, sta)) 754 goto drop; 755 return; 756 } 757 758 if (iwl_mvm_tx_skb_non_sta(mvm, skb)) 759 goto drop; 760 return; 761 drop: 762 ieee80211_free_txskb(hw, skb); 763 } 764 765 static inline bool iwl_enable_rx_ampdu(const struct iwl_cfg *cfg) 766 { 767 if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_RXAGG) 768 return false; 769 return true; 770 } 771 772 static inline bool iwl_enable_tx_ampdu(const struct iwl_cfg *cfg) 773 { 774 if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_TXAGG) 775 return false; 776 if (iwlwifi_mod_params.disable_11n & IWL_ENABLE_HT_TXAGG) 777 return true; 778 779 /* enabled by default */ 780 return true; 781 } 782 783 #define CHECK_BA_TRIGGER(_mvm, _trig, _tid_bm, _tid, _fmt...) \ 784 do { \ 785 if (!(le16_to_cpu(_tid_bm) & BIT(_tid))) \ 786 break; \ 787 iwl_mvm_fw_dbg_collect_trig(_mvm, _trig, _fmt); \ 788 } while (0) 789 790 static void 791 iwl_mvm_ampdu_check_trigger(struct iwl_mvm *mvm, struct ieee80211_vif *vif, 792 struct ieee80211_sta *sta, u16 tid, u16 rx_ba_ssn, 793 enum ieee80211_ampdu_mlme_action action) 794 { 795 struct iwl_fw_dbg_trigger_tlv *trig; 796 struct iwl_fw_dbg_trigger_ba *ba_trig; 797 798 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_BA)) 799 return; 800 801 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_BA); 802 ba_trig = (void *)trig->data; 803 804 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig)) 805 return; 806 807 switch (action) { 808 case IEEE80211_AMPDU_TX_OPERATIONAL: { 809 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta); 810 struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid]; 811 812 CHECK_BA_TRIGGER(mvm, trig, ba_trig->tx_ba_start, tid, 813 "TX AGG START: MAC %pM tid %d ssn %d\n", 814 sta->addr, tid, tid_data->ssn); 815 break; 816 } 817 case IEEE80211_AMPDU_TX_STOP_CONT: 818 CHECK_BA_TRIGGER(mvm, trig, ba_trig->tx_ba_stop, tid, 819 "TX AGG STOP: MAC %pM tid %d\n", 820 sta->addr, tid); 821 break; 822 case IEEE80211_AMPDU_RX_START: 823 CHECK_BA_TRIGGER(mvm, trig, ba_trig->rx_ba_start, tid, 824 "RX AGG START: MAC %pM tid %d ssn %d\n", 825 sta->addr, tid, rx_ba_ssn); 826 break; 827 case IEEE80211_AMPDU_RX_STOP: 828 CHECK_BA_TRIGGER(mvm, trig, ba_trig->rx_ba_stop, tid, 829 "RX AGG STOP: MAC %pM tid %d\n", 830 sta->addr, tid); 831 break; 832 default: 833 break; 834 } 835 } 836 837 static int iwl_mvm_mac_ampdu_action(struct ieee80211_hw *hw, 838 struct ieee80211_vif *vif, 839 struct ieee80211_ampdu_params *params) 840 { 841 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 842 int ret; 843 bool tx_agg_ref = false; 844 struct ieee80211_sta *sta = params->sta; 845 enum ieee80211_ampdu_mlme_action action = params->action; 846 u16 tid = params->tid; 847 u16 *ssn = ¶ms->ssn; 848 u8 buf_size = params->buf_size; 849 bool amsdu = params->amsdu; 850 851 IWL_DEBUG_HT(mvm, "A-MPDU action on addr %pM tid %d: action %d\n", 852 sta->addr, tid, action); 853 854 if (!(mvm->nvm_data->sku_cap_11n_enable)) 855 return -EACCES; 856 857 /* return from D0i3 before starting a new Tx aggregation */ 858 switch (action) { 859 case IEEE80211_AMPDU_TX_START: 860 case IEEE80211_AMPDU_TX_STOP_CONT: 861 case IEEE80211_AMPDU_TX_STOP_FLUSH: 862 case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT: 863 case IEEE80211_AMPDU_TX_OPERATIONAL: 864 /* 865 * for tx start, wait synchronously until D0i3 exit to 866 * get the correct sequence number for the tid. 867 * additionally, some other ampdu actions use direct 868 * target access, which is not handled automatically 869 * by the trans layer (unlike commands), so wait for 870 * d0i3 exit in these cases as well. 871 */ 872 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_TX_AGG); 873 if (ret) 874 return ret; 875 876 tx_agg_ref = true; 877 break; 878 default: 879 break; 880 } 881 882 mutex_lock(&mvm->mutex); 883 884 switch (action) { 885 case IEEE80211_AMPDU_RX_START: 886 if (!iwl_enable_rx_ampdu(mvm->cfg)) { 887 ret = -EINVAL; 888 break; 889 } 890 ret = iwl_mvm_sta_rx_agg(mvm, sta, tid, *ssn, true, buf_size); 891 break; 892 case IEEE80211_AMPDU_RX_STOP: 893 ret = iwl_mvm_sta_rx_agg(mvm, sta, tid, 0, false, buf_size); 894 break; 895 case IEEE80211_AMPDU_TX_START: 896 if (!iwl_enable_tx_ampdu(mvm->cfg)) { 897 ret = -EINVAL; 898 break; 899 } 900 ret = iwl_mvm_sta_tx_agg_start(mvm, vif, sta, tid, ssn); 901 break; 902 case IEEE80211_AMPDU_TX_STOP_CONT: 903 ret = iwl_mvm_sta_tx_agg_stop(mvm, vif, sta, tid); 904 break; 905 case IEEE80211_AMPDU_TX_STOP_FLUSH: 906 case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT: 907 ret = iwl_mvm_sta_tx_agg_flush(mvm, vif, sta, tid); 908 break; 909 case IEEE80211_AMPDU_TX_OPERATIONAL: 910 ret = iwl_mvm_sta_tx_agg_oper(mvm, vif, sta, tid, 911 buf_size, amsdu); 912 break; 913 default: 914 WARN_ON_ONCE(1); 915 ret = -EINVAL; 916 break; 917 } 918 919 if (!ret) { 920 u16 rx_ba_ssn = 0; 921 922 if (action == IEEE80211_AMPDU_RX_START) 923 rx_ba_ssn = *ssn; 924 925 iwl_mvm_ampdu_check_trigger(mvm, vif, sta, tid, 926 rx_ba_ssn, action); 927 } 928 mutex_unlock(&mvm->mutex); 929 930 /* 931 * If the tid is marked as started, we won't use it for offloaded 932 * traffic on the next D0i3 entry. It's safe to unref. 933 */ 934 if (tx_agg_ref) 935 iwl_mvm_unref(mvm, IWL_MVM_REF_TX_AGG); 936 937 return ret; 938 } 939 940 static void iwl_mvm_cleanup_iterator(void *data, u8 *mac, 941 struct ieee80211_vif *vif) 942 { 943 struct iwl_mvm *mvm = data; 944 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 945 946 mvmvif->uploaded = false; 947 mvmvif->ap_sta_id = IWL_MVM_STATION_COUNT; 948 949 spin_lock_bh(&mvm->time_event_lock); 950 iwl_mvm_te_clear_data(mvm, &mvmvif->time_event_data); 951 spin_unlock_bh(&mvm->time_event_lock); 952 953 mvmvif->phy_ctxt = NULL; 954 memset(&mvmvif->bf_data, 0, sizeof(mvmvif->bf_data)); 955 } 956 957 static void iwl_mvm_restart_cleanup(struct iwl_mvm *mvm) 958 { 959 /* clear the D3 reconfig, we only need it to avoid dumping a 960 * firmware coredump on reconfiguration, we shouldn't do that 961 * on D3->D0 transition 962 */ 963 if (!test_and_clear_bit(IWL_MVM_STATUS_D3_RECONFIG, &mvm->status)) { 964 mvm->fw_dump_desc = &iwl_mvm_dump_desc_assert; 965 iwl_mvm_fw_error_dump(mvm); 966 } 967 968 /* cleanup all stale references (scan, roc), but keep the 969 * ucode_down ref until reconfig is complete 970 */ 971 iwl_mvm_unref_all_except(mvm, IWL_MVM_REF_UCODE_DOWN); 972 973 iwl_mvm_stop_device(mvm); 974 975 mvm->scan_status = 0; 976 mvm->ps_disabled = false; 977 mvm->calibrating = false; 978 979 /* just in case one was running */ 980 iwl_mvm_cleanup_roc_te(mvm); 981 ieee80211_remain_on_channel_expired(mvm->hw); 982 983 /* 984 * cleanup all interfaces, even inactive ones, as some might have 985 * gone down during the HW restart 986 */ 987 ieee80211_iterate_interfaces(mvm->hw, 0, iwl_mvm_cleanup_iterator, mvm); 988 989 mvm->p2p_device_vif = NULL; 990 mvm->d0i3_ap_sta_id = IWL_MVM_STATION_COUNT; 991 992 iwl_mvm_reset_phy_ctxts(mvm); 993 memset(mvm->fw_key_table, 0, sizeof(mvm->fw_key_table)); 994 memset(mvm->sta_drained, 0, sizeof(mvm->sta_drained)); 995 memset(mvm->tfd_drained, 0, sizeof(mvm->tfd_drained)); 996 memset(&mvm->last_bt_notif, 0, sizeof(mvm->last_bt_notif)); 997 memset(&mvm->last_bt_notif_old, 0, sizeof(mvm->last_bt_notif_old)); 998 memset(&mvm->last_bt_ci_cmd, 0, sizeof(mvm->last_bt_ci_cmd)); 999 memset(&mvm->last_bt_ci_cmd_old, 0, sizeof(mvm->last_bt_ci_cmd_old)); 1000 memset(&mvm->bt_ack_kill_msk, 0, sizeof(mvm->bt_ack_kill_msk)); 1001 memset(&mvm->bt_cts_kill_msk, 0, sizeof(mvm->bt_cts_kill_msk)); 1002 1003 ieee80211_wake_queues(mvm->hw); 1004 1005 /* clear any stale d0i3 state */ 1006 clear_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status); 1007 1008 mvm->vif_count = 0; 1009 mvm->rx_ba_sessions = 0; 1010 mvm->fw_dbg_conf = FW_DBG_INVALID; 1011 1012 /* keep statistics ticking */ 1013 iwl_mvm_accu_radio_stats(mvm); 1014 } 1015 1016 int __iwl_mvm_mac_start(struct iwl_mvm *mvm) 1017 { 1018 int ret; 1019 1020 lockdep_assert_held(&mvm->mutex); 1021 1022 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) { 1023 /* Clean up some internal and mac80211 state on restart */ 1024 iwl_mvm_restart_cleanup(mvm); 1025 } else { 1026 /* Hold the reference to prevent runtime suspend while 1027 * the start procedure runs. It's a bit confusing 1028 * that the UCODE_DOWN reference is taken, but it just 1029 * means "UCODE is not UP yet". ( TODO: rename this 1030 * reference). 1031 */ 1032 iwl_mvm_ref(mvm, IWL_MVM_REF_UCODE_DOWN); 1033 } 1034 ret = iwl_mvm_up(mvm); 1035 1036 if (ret && test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) { 1037 /* Something went wrong - we need to finish some cleanup 1038 * that normally iwl_mvm_mac_restart_complete() below 1039 * would do. 1040 */ 1041 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status); 1042 iwl_mvm_d0i3_enable_tx(mvm, NULL); 1043 } 1044 1045 return ret; 1046 } 1047 1048 static int iwl_mvm_mac_start(struct ieee80211_hw *hw) 1049 { 1050 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1051 int ret; 1052 1053 /* Some hw restart cleanups must not hold the mutex */ 1054 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) { 1055 /* 1056 * Make sure we are out of d0i3. This is needed 1057 * to make sure the reference accounting is correct 1058 * (and there is no stale d0i3_exit_work). 1059 */ 1060 wait_event_timeout(mvm->d0i3_exit_waitq, 1061 !test_bit(IWL_MVM_STATUS_IN_D0I3, 1062 &mvm->status), 1063 HZ); 1064 } 1065 1066 mutex_lock(&mvm->mutex); 1067 ret = __iwl_mvm_mac_start(mvm); 1068 mutex_unlock(&mvm->mutex); 1069 1070 return ret; 1071 } 1072 1073 static void iwl_mvm_restart_complete(struct iwl_mvm *mvm) 1074 { 1075 int ret; 1076 1077 mutex_lock(&mvm->mutex); 1078 1079 clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status); 1080 iwl_mvm_d0i3_enable_tx(mvm, NULL); 1081 ret = iwl_mvm_update_quotas(mvm, true, NULL); 1082 if (ret) 1083 IWL_ERR(mvm, "Failed to update quotas after restart (%d)\n", 1084 ret); 1085 1086 /* allow transport/FW low power modes */ 1087 iwl_mvm_unref(mvm, IWL_MVM_REF_UCODE_DOWN); 1088 1089 /* 1090 * If we have TDLS peers, remove them. We don't know the last seqno/PN 1091 * of packets the FW sent out, so we must reconnect. 1092 */ 1093 iwl_mvm_teardown_tdls_peers(mvm); 1094 1095 mutex_unlock(&mvm->mutex); 1096 } 1097 1098 static void iwl_mvm_resume_complete(struct iwl_mvm *mvm) 1099 { 1100 if (iwl_mvm_is_d0i3_supported(mvm) && 1101 iwl_mvm_enter_d0i3_on_suspend(mvm)) 1102 WARN_ONCE(!wait_event_timeout(mvm->d0i3_exit_waitq, 1103 !test_bit(IWL_MVM_STATUS_IN_D0I3, 1104 &mvm->status), 1105 HZ), 1106 "D0i3 exit on resume timed out\n"); 1107 } 1108 1109 static void 1110 iwl_mvm_mac_reconfig_complete(struct ieee80211_hw *hw, 1111 enum ieee80211_reconfig_type reconfig_type) 1112 { 1113 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1114 1115 switch (reconfig_type) { 1116 case IEEE80211_RECONFIG_TYPE_RESTART: 1117 iwl_mvm_restart_complete(mvm); 1118 break; 1119 case IEEE80211_RECONFIG_TYPE_SUSPEND: 1120 iwl_mvm_resume_complete(mvm); 1121 break; 1122 } 1123 } 1124 1125 void __iwl_mvm_mac_stop(struct iwl_mvm *mvm) 1126 { 1127 lockdep_assert_held(&mvm->mutex); 1128 1129 /* firmware counters are obviously reset now, but we shouldn't 1130 * partially track so also clear the fw_reset_accu counters. 1131 */ 1132 memset(&mvm->accu_radio_stats, 0, sizeof(mvm->accu_radio_stats)); 1133 1134 /* async_handlers_wk is now blocked */ 1135 1136 /* 1137 * The work item could be running or queued if the 1138 * ROC time event stops just as we get here. 1139 */ 1140 flush_work(&mvm->roc_done_wk); 1141 1142 iwl_mvm_stop_device(mvm); 1143 1144 iwl_mvm_async_handlers_purge(mvm); 1145 /* async_handlers_list is empty and will stay empty: HW is stopped */ 1146 1147 /* the fw is stopped, the aux sta is dead: clean up driver state */ 1148 iwl_mvm_del_aux_sta(mvm); 1149 1150 iwl_free_fw_paging(mvm); 1151 1152 /* 1153 * Clear IN_HW_RESTART flag when stopping the hw (as restart_complete() 1154 * won't be called in this case). 1155 * But make sure to cleanup interfaces that have gone down before/during 1156 * HW restart was requested. 1157 */ 1158 if (test_and_clear_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) 1159 ieee80211_iterate_interfaces(mvm->hw, 0, 1160 iwl_mvm_cleanup_iterator, mvm); 1161 1162 /* We shouldn't have any UIDs still set. Loop over all the UIDs to 1163 * make sure there's nothing left there and warn if any is found. 1164 */ 1165 if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_UMAC_SCAN)) { 1166 int i; 1167 1168 for (i = 0; i < mvm->max_scans; i++) { 1169 if (WARN_ONCE(mvm->scan_uid_status[i], 1170 "UMAC scan UID %d status was not cleaned\n", 1171 i)) 1172 mvm->scan_uid_status[i] = 0; 1173 } 1174 } 1175 } 1176 1177 static void iwl_mvm_mac_stop(struct ieee80211_hw *hw) 1178 { 1179 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1180 1181 flush_work(&mvm->d0i3_exit_work); 1182 flush_work(&mvm->async_handlers_wk); 1183 cancel_delayed_work_sync(&mvm->fw_dump_wk); 1184 iwl_mvm_free_fw_dump_desc(mvm); 1185 1186 mutex_lock(&mvm->mutex); 1187 __iwl_mvm_mac_stop(mvm); 1188 mutex_unlock(&mvm->mutex); 1189 1190 /* 1191 * The worker might have been waiting for the mutex, let it run and 1192 * discover that its list is now empty. 1193 */ 1194 cancel_work_sync(&mvm->async_handlers_wk); 1195 } 1196 1197 static struct iwl_mvm_phy_ctxt *iwl_mvm_get_free_phy_ctxt(struct iwl_mvm *mvm) 1198 { 1199 u16 i; 1200 1201 lockdep_assert_held(&mvm->mutex); 1202 1203 for (i = 0; i < NUM_PHY_CTX; i++) 1204 if (!mvm->phy_ctxts[i].ref) 1205 return &mvm->phy_ctxts[i]; 1206 1207 IWL_ERR(mvm, "No available PHY context\n"); 1208 return NULL; 1209 } 1210 1211 static int iwl_mvm_set_tx_power(struct iwl_mvm *mvm, struct ieee80211_vif *vif, 1212 s16 tx_power) 1213 { 1214 struct iwl_dev_tx_power_cmd cmd = { 1215 .v2.set_mode = cpu_to_le32(IWL_TX_POWER_MODE_SET_MAC), 1216 .v2.mac_context_id = 1217 cpu_to_le32(iwl_mvm_vif_from_mac80211(vif)->id), 1218 .v2.pwr_restriction = cpu_to_le16(8 * tx_power), 1219 }; 1220 int len = sizeof(cmd); 1221 1222 if (tx_power == IWL_DEFAULT_MAX_TX_POWER) 1223 cmd.v2.pwr_restriction = cpu_to_le16(IWL_DEV_MAX_TX_POWER); 1224 1225 if (!fw_has_api(&mvm->fw->ucode_capa, IWL_UCODE_TLV_API_TX_POWER_CHAIN)) 1226 len = sizeof(cmd.v2); 1227 1228 return iwl_mvm_send_cmd_pdu(mvm, REDUCE_TX_POWER_CMD, 0, len, &cmd); 1229 } 1230 1231 static int iwl_mvm_mac_add_interface(struct ieee80211_hw *hw, 1232 struct ieee80211_vif *vif) 1233 { 1234 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1235 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 1236 int ret; 1237 1238 mvmvif->mvm = mvm; 1239 1240 /* 1241 * make sure D0i3 exit is completed, otherwise a target access 1242 * during tx queue configuration could be done when still in 1243 * D0i3 state. 1244 */ 1245 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_ADD_IF); 1246 if (ret) 1247 return ret; 1248 1249 /* 1250 * Not much to do here. The stack will not allow interface 1251 * types or combinations that we didn't advertise, so we 1252 * don't really have to check the types. 1253 */ 1254 1255 mutex_lock(&mvm->mutex); 1256 1257 /* make sure that beacon statistics don't go backwards with FW reset */ 1258 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) 1259 mvmvif->beacon_stats.accu_num_beacons += 1260 mvmvif->beacon_stats.num_beacons; 1261 1262 /* Allocate resources for the MAC context, and add it to the fw */ 1263 ret = iwl_mvm_mac_ctxt_init(mvm, vif); 1264 if (ret) 1265 goto out_unlock; 1266 1267 /* Counting number of interfaces is needed for legacy PM */ 1268 if (vif->type != NL80211_IFTYPE_P2P_DEVICE) 1269 mvm->vif_count++; 1270 1271 /* 1272 * The AP binding flow can be done only after the beacon 1273 * template is configured (which happens only in the mac80211 1274 * start_ap() flow), and adding the broadcast station can happen 1275 * only after the binding. 1276 * In addition, since modifying the MAC before adding a bcast 1277 * station is not allowed by the FW, delay the adding of MAC context to 1278 * the point where we can also add the bcast station. 1279 * In short: there's not much we can do at this point, other than 1280 * allocating resources :) 1281 */ 1282 if (vif->type == NL80211_IFTYPE_AP || 1283 vif->type == NL80211_IFTYPE_ADHOC) { 1284 ret = iwl_mvm_alloc_bcast_sta(mvm, vif); 1285 if (ret) { 1286 IWL_ERR(mvm, "Failed to allocate bcast sta\n"); 1287 goto out_release; 1288 } 1289 1290 iwl_mvm_vif_dbgfs_register(mvm, vif); 1291 goto out_unlock; 1292 } 1293 1294 mvmvif->features |= hw->netdev_features; 1295 1296 ret = iwl_mvm_mac_ctxt_add(mvm, vif); 1297 if (ret) 1298 goto out_release; 1299 1300 ret = iwl_mvm_power_update_mac(mvm); 1301 if (ret) 1302 goto out_remove_mac; 1303 1304 /* beacon filtering */ 1305 ret = iwl_mvm_disable_beacon_filter(mvm, vif, 0); 1306 if (ret) 1307 goto out_remove_mac; 1308 1309 if (!mvm->bf_allowed_vif && 1310 vif->type == NL80211_IFTYPE_STATION && !vif->p2p) { 1311 mvm->bf_allowed_vif = mvmvif; 1312 vif->driver_flags |= IEEE80211_VIF_BEACON_FILTER | 1313 IEEE80211_VIF_SUPPORTS_CQM_RSSI; 1314 } 1315 1316 /* 1317 * P2P_DEVICE interface does not have a channel context assigned to it, 1318 * so a dedicated PHY context is allocated to it and the corresponding 1319 * MAC context is bound to it at this stage. 1320 */ 1321 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) { 1322 1323 mvmvif->phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm); 1324 if (!mvmvif->phy_ctxt) { 1325 ret = -ENOSPC; 1326 goto out_free_bf; 1327 } 1328 1329 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt); 1330 ret = iwl_mvm_binding_add_vif(mvm, vif); 1331 if (ret) 1332 goto out_unref_phy; 1333 1334 ret = iwl_mvm_add_bcast_sta(mvm, vif); 1335 if (ret) 1336 goto out_unbind; 1337 1338 /* Save a pointer to p2p device vif, so it can later be used to 1339 * update the p2p device MAC when a GO is started/stopped */ 1340 mvm->p2p_device_vif = vif; 1341 } 1342 1343 iwl_mvm_vif_dbgfs_register(mvm, vif); 1344 goto out_unlock; 1345 1346 out_unbind: 1347 iwl_mvm_binding_remove_vif(mvm, vif); 1348 out_unref_phy: 1349 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt); 1350 out_free_bf: 1351 if (mvm->bf_allowed_vif == mvmvif) { 1352 mvm->bf_allowed_vif = NULL; 1353 vif->driver_flags &= ~(IEEE80211_VIF_BEACON_FILTER | 1354 IEEE80211_VIF_SUPPORTS_CQM_RSSI); 1355 } 1356 out_remove_mac: 1357 mvmvif->phy_ctxt = NULL; 1358 iwl_mvm_mac_ctxt_remove(mvm, vif); 1359 out_release: 1360 if (vif->type != NL80211_IFTYPE_P2P_DEVICE) 1361 mvm->vif_count--; 1362 1363 iwl_mvm_mac_ctxt_release(mvm, vif); 1364 out_unlock: 1365 mutex_unlock(&mvm->mutex); 1366 1367 iwl_mvm_unref(mvm, IWL_MVM_REF_ADD_IF); 1368 1369 return ret; 1370 } 1371 1372 static void iwl_mvm_prepare_mac_removal(struct iwl_mvm *mvm, 1373 struct ieee80211_vif *vif) 1374 { 1375 u32 tfd_msk = iwl_mvm_mac_get_queues_mask(vif); 1376 1377 if (tfd_msk) { 1378 /* 1379 * mac80211 first removes all the stations of the vif and 1380 * then removes the vif. When it removes a station it also 1381 * flushes the AMPDU session. So by now, all the AMPDU sessions 1382 * of all the stations of this vif are closed, and the queues 1383 * of these AMPDU sessions are properly closed. 1384 * We still need to take care of the shared queues of the vif. 1385 * Flush them here. 1386 */ 1387 mutex_lock(&mvm->mutex); 1388 iwl_mvm_flush_tx_path(mvm, tfd_msk, 0); 1389 mutex_unlock(&mvm->mutex); 1390 1391 /* 1392 * There are transports that buffer a few frames in the host. 1393 * For these, the flush above isn't enough since while we were 1394 * flushing, the transport might have sent more frames to the 1395 * device. To solve this, wait here until the transport is 1396 * empty. Technically, this could have replaced the flush 1397 * above, but flush is much faster than draining. So flush 1398 * first, and drain to make sure we have no frames in the 1399 * transport anymore. 1400 * If a station still had frames on the shared queues, it is 1401 * already marked as draining, so to complete the draining, we 1402 * just need to wait until the transport is empty. 1403 */ 1404 iwl_trans_wait_tx_queue_empty(mvm->trans, tfd_msk); 1405 } 1406 1407 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) { 1408 /* 1409 * Flush the ROC worker which will flush the OFFCHANNEL queue. 1410 * We assume here that all the packets sent to the OFFCHANNEL 1411 * queue are sent in ROC session. 1412 */ 1413 flush_work(&mvm->roc_done_wk); 1414 } else { 1415 /* 1416 * By now, all the AC queues are empty. The AGG queues are 1417 * empty too. We already got all the Tx responses for all the 1418 * packets in the queues. The drain work can have been 1419 * triggered. Flush it. 1420 */ 1421 flush_work(&mvm->sta_drained_wk); 1422 } 1423 } 1424 1425 static void iwl_mvm_mac_remove_interface(struct ieee80211_hw *hw, 1426 struct ieee80211_vif *vif) 1427 { 1428 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1429 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 1430 1431 iwl_mvm_prepare_mac_removal(mvm, vif); 1432 1433 mutex_lock(&mvm->mutex); 1434 1435 if (mvm->bf_allowed_vif == mvmvif) { 1436 mvm->bf_allowed_vif = NULL; 1437 vif->driver_flags &= ~(IEEE80211_VIF_BEACON_FILTER | 1438 IEEE80211_VIF_SUPPORTS_CQM_RSSI); 1439 } 1440 1441 iwl_mvm_vif_dbgfs_clean(mvm, vif); 1442 1443 /* 1444 * For AP/GO interface, the tear down of the resources allocated to the 1445 * interface is be handled as part of the stop_ap flow. 1446 */ 1447 if (vif->type == NL80211_IFTYPE_AP || 1448 vif->type == NL80211_IFTYPE_ADHOC) { 1449 #ifdef CONFIG_NL80211_TESTMODE 1450 if (vif == mvm->noa_vif) { 1451 mvm->noa_vif = NULL; 1452 mvm->noa_duration = 0; 1453 } 1454 #endif 1455 iwl_mvm_dealloc_bcast_sta(mvm, vif); 1456 goto out_release; 1457 } 1458 1459 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) { 1460 mvm->p2p_device_vif = NULL; 1461 iwl_mvm_rm_bcast_sta(mvm, vif); 1462 iwl_mvm_binding_remove_vif(mvm, vif); 1463 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt); 1464 mvmvif->phy_ctxt = NULL; 1465 } 1466 1467 if (mvm->vif_count && vif->type != NL80211_IFTYPE_P2P_DEVICE) 1468 mvm->vif_count--; 1469 1470 iwl_mvm_power_update_mac(mvm); 1471 iwl_mvm_mac_ctxt_remove(mvm, vif); 1472 1473 out_release: 1474 iwl_mvm_mac_ctxt_release(mvm, vif); 1475 mutex_unlock(&mvm->mutex); 1476 } 1477 1478 static int iwl_mvm_mac_config(struct ieee80211_hw *hw, u32 changed) 1479 { 1480 return 0; 1481 } 1482 1483 struct iwl_mvm_mc_iter_data { 1484 struct iwl_mvm *mvm; 1485 int port_id; 1486 }; 1487 1488 static void iwl_mvm_mc_iface_iterator(void *_data, u8 *mac, 1489 struct ieee80211_vif *vif) 1490 { 1491 struct iwl_mvm_mc_iter_data *data = _data; 1492 struct iwl_mvm *mvm = data->mvm; 1493 struct iwl_mcast_filter_cmd *cmd = mvm->mcast_filter_cmd; 1494 int ret, len; 1495 1496 /* if we don't have free ports, mcast frames will be dropped */ 1497 if (WARN_ON_ONCE(data->port_id >= MAX_PORT_ID_NUM)) 1498 return; 1499 1500 if (vif->type != NL80211_IFTYPE_STATION || 1501 !vif->bss_conf.assoc) 1502 return; 1503 1504 cmd->port_id = data->port_id++; 1505 memcpy(cmd->bssid, vif->bss_conf.bssid, ETH_ALEN); 1506 len = roundup(sizeof(*cmd) + cmd->count * ETH_ALEN, 4); 1507 1508 ret = iwl_mvm_send_cmd_pdu(mvm, MCAST_FILTER_CMD, CMD_ASYNC, len, cmd); 1509 if (ret) 1510 IWL_ERR(mvm, "mcast filter cmd error. ret=%d\n", ret); 1511 } 1512 1513 static void iwl_mvm_recalc_multicast(struct iwl_mvm *mvm) 1514 { 1515 struct iwl_mvm_mc_iter_data iter_data = { 1516 .mvm = mvm, 1517 }; 1518 1519 lockdep_assert_held(&mvm->mutex); 1520 1521 if (WARN_ON_ONCE(!mvm->mcast_filter_cmd)) 1522 return; 1523 1524 ieee80211_iterate_active_interfaces_atomic( 1525 mvm->hw, IEEE80211_IFACE_ITER_NORMAL, 1526 iwl_mvm_mc_iface_iterator, &iter_data); 1527 } 1528 1529 static u64 iwl_mvm_prepare_multicast(struct ieee80211_hw *hw, 1530 struct netdev_hw_addr_list *mc_list) 1531 { 1532 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1533 struct iwl_mcast_filter_cmd *cmd; 1534 struct netdev_hw_addr *addr; 1535 int addr_count; 1536 bool pass_all; 1537 int len; 1538 1539 addr_count = netdev_hw_addr_list_count(mc_list); 1540 pass_all = addr_count > MAX_MCAST_FILTERING_ADDRESSES || 1541 IWL_MVM_FW_MCAST_FILTER_PASS_ALL; 1542 if (pass_all) 1543 addr_count = 0; 1544 1545 len = roundup(sizeof(*cmd) + addr_count * ETH_ALEN, 4); 1546 cmd = kzalloc(len, GFP_ATOMIC); 1547 if (!cmd) 1548 return 0; 1549 1550 if (pass_all) { 1551 cmd->pass_all = 1; 1552 return (u64)(unsigned long)cmd; 1553 } 1554 1555 netdev_hw_addr_list_for_each(addr, mc_list) { 1556 IWL_DEBUG_MAC80211(mvm, "mcast addr (%d): %pM\n", 1557 cmd->count, addr->addr); 1558 memcpy(&cmd->addr_list[cmd->count * ETH_ALEN], 1559 addr->addr, ETH_ALEN); 1560 cmd->count++; 1561 } 1562 1563 return (u64)(unsigned long)cmd; 1564 } 1565 1566 static void iwl_mvm_configure_filter(struct ieee80211_hw *hw, 1567 unsigned int changed_flags, 1568 unsigned int *total_flags, 1569 u64 multicast) 1570 { 1571 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1572 struct iwl_mcast_filter_cmd *cmd = (void *)(unsigned long)multicast; 1573 1574 mutex_lock(&mvm->mutex); 1575 1576 /* replace previous configuration */ 1577 kfree(mvm->mcast_filter_cmd); 1578 mvm->mcast_filter_cmd = cmd; 1579 1580 if (!cmd) 1581 goto out; 1582 1583 iwl_mvm_recalc_multicast(mvm); 1584 out: 1585 mutex_unlock(&mvm->mutex); 1586 *total_flags = 0; 1587 } 1588 1589 static void iwl_mvm_config_iface_filter(struct ieee80211_hw *hw, 1590 struct ieee80211_vif *vif, 1591 unsigned int filter_flags, 1592 unsigned int changed_flags) 1593 { 1594 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1595 1596 /* We support only filter for probe requests */ 1597 if (!(changed_flags & FIF_PROBE_REQ)) 1598 return; 1599 1600 /* Supported only for p2p client interfaces */ 1601 if (vif->type != NL80211_IFTYPE_STATION || !vif->bss_conf.assoc || 1602 !vif->p2p) 1603 return; 1604 1605 mutex_lock(&mvm->mutex); 1606 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 1607 mutex_unlock(&mvm->mutex); 1608 } 1609 1610 #ifdef CONFIG_IWLWIFI_BCAST_FILTERING 1611 struct iwl_bcast_iter_data { 1612 struct iwl_mvm *mvm; 1613 struct iwl_bcast_filter_cmd *cmd; 1614 u8 current_filter; 1615 }; 1616 1617 static void 1618 iwl_mvm_set_bcast_filter(struct ieee80211_vif *vif, 1619 const struct iwl_fw_bcast_filter *in_filter, 1620 struct iwl_fw_bcast_filter *out_filter) 1621 { 1622 struct iwl_fw_bcast_filter_attr *attr; 1623 int i; 1624 1625 memcpy(out_filter, in_filter, sizeof(*out_filter)); 1626 1627 for (i = 0; i < ARRAY_SIZE(out_filter->attrs); i++) { 1628 attr = &out_filter->attrs[i]; 1629 1630 if (!attr->mask) 1631 break; 1632 1633 switch (attr->reserved1) { 1634 case cpu_to_le16(BC_FILTER_MAGIC_IP): 1635 if (vif->bss_conf.arp_addr_cnt != 1) { 1636 attr->mask = 0; 1637 continue; 1638 } 1639 1640 attr->val = vif->bss_conf.arp_addr_list[0]; 1641 break; 1642 case cpu_to_le16(BC_FILTER_MAGIC_MAC): 1643 attr->val = *(__be32 *)&vif->addr[2]; 1644 break; 1645 default: 1646 break; 1647 } 1648 attr->reserved1 = 0; 1649 out_filter->num_attrs++; 1650 } 1651 } 1652 1653 static void iwl_mvm_bcast_filter_iterator(void *_data, u8 *mac, 1654 struct ieee80211_vif *vif) 1655 { 1656 struct iwl_bcast_iter_data *data = _data; 1657 struct iwl_mvm *mvm = data->mvm; 1658 struct iwl_bcast_filter_cmd *cmd = data->cmd; 1659 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 1660 struct iwl_fw_bcast_mac *bcast_mac; 1661 int i; 1662 1663 if (WARN_ON(mvmvif->id >= ARRAY_SIZE(cmd->macs))) 1664 return; 1665 1666 bcast_mac = &cmd->macs[mvmvif->id]; 1667 1668 /* 1669 * enable filtering only for associated stations, but not for P2P 1670 * Clients 1671 */ 1672 if (vif->type != NL80211_IFTYPE_STATION || vif->p2p || 1673 !vif->bss_conf.assoc) 1674 return; 1675 1676 bcast_mac->default_discard = 1; 1677 1678 /* copy all configured filters */ 1679 for (i = 0; mvm->bcast_filters[i].attrs[0].mask; i++) { 1680 /* 1681 * Make sure we don't exceed our filters limit. 1682 * if there is still a valid filter to be configured, 1683 * be on the safe side and just allow bcast for this mac. 1684 */ 1685 if (WARN_ON_ONCE(data->current_filter >= 1686 ARRAY_SIZE(cmd->filters))) { 1687 bcast_mac->default_discard = 0; 1688 bcast_mac->attached_filters = 0; 1689 break; 1690 } 1691 1692 iwl_mvm_set_bcast_filter(vif, 1693 &mvm->bcast_filters[i], 1694 &cmd->filters[data->current_filter]); 1695 1696 /* skip current filter if it contains no attributes */ 1697 if (!cmd->filters[data->current_filter].num_attrs) 1698 continue; 1699 1700 /* attach the filter to current mac */ 1701 bcast_mac->attached_filters |= 1702 cpu_to_le16(BIT(data->current_filter)); 1703 1704 data->current_filter++; 1705 } 1706 } 1707 1708 bool iwl_mvm_bcast_filter_build_cmd(struct iwl_mvm *mvm, 1709 struct iwl_bcast_filter_cmd *cmd) 1710 { 1711 struct iwl_bcast_iter_data iter_data = { 1712 .mvm = mvm, 1713 .cmd = cmd, 1714 }; 1715 1716 if (IWL_MVM_FW_BCAST_FILTER_PASS_ALL) 1717 return false; 1718 1719 memset(cmd, 0, sizeof(*cmd)); 1720 cmd->max_bcast_filters = ARRAY_SIZE(cmd->filters); 1721 cmd->max_macs = ARRAY_SIZE(cmd->macs); 1722 1723 #ifdef CONFIG_IWLWIFI_DEBUGFS 1724 /* use debugfs filters/macs if override is configured */ 1725 if (mvm->dbgfs_bcast_filtering.override) { 1726 memcpy(cmd->filters, &mvm->dbgfs_bcast_filtering.cmd.filters, 1727 sizeof(cmd->filters)); 1728 memcpy(cmd->macs, &mvm->dbgfs_bcast_filtering.cmd.macs, 1729 sizeof(cmd->macs)); 1730 return true; 1731 } 1732 #endif 1733 1734 /* if no filters are configured, do nothing */ 1735 if (!mvm->bcast_filters) 1736 return false; 1737 1738 /* configure and attach these filters for each associated sta vif */ 1739 ieee80211_iterate_active_interfaces( 1740 mvm->hw, IEEE80211_IFACE_ITER_NORMAL, 1741 iwl_mvm_bcast_filter_iterator, &iter_data); 1742 1743 return true; 1744 } 1745 1746 static int iwl_mvm_configure_bcast_filter(struct iwl_mvm *mvm) 1747 { 1748 struct iwl_bcast_filter_cmd cmd; 1749 1750 if (!(mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_BCAST_FILTERING)) 1751 return 0; 1752 1753 if (!iwl_mvm_bcast_filter_build_cmd(mvm, &cmd)) 1754 return 0; 1755 1756 return iwl_mvm_send_cmd_pdu(mvm, BCAST_FILTER_CMD, 0, 1757 sizeof(cmd), &cmd); 1758 } 1759 #else 1760 static inline int iwl_mvm_configure_bcast_filter(struct iwl_mvm *mvm) 1761 { 1762 return 0; 1763 } 1764 #endif 1765 1766 static int iwl_mvm_update_mu_groups(struct iwl_mvm *mvm, 1767 struct ieee80211_vif *vif) 1768 { 1769 struct iwl_mu_group_mgmt_cmd cmd = {}; 1770 1771 memcpy(cmd.membership_status, vif->bss_conf.mu_group.membership, 1772 WLAN_MEMBERSHIP_LEN); 1773 memcpy(cmd.user_position, vif->bss_conf.mu_group.position, 1774 WLAN_USER_POSITION_LEN); 1775 1776 return iwl_mvm_send_cmd_pdu(mvm, 1777 WIDE_ID(DATA_PATH_GROUP, 1778 UPDATE_MU_GROUPS_CMD), 1779 0, sizeof(cmd), &cmd); 1780 } 1781 1782 static void iwl_mvm_mu_mimo_iface_iterator(void *_data, u8 *mac, 1783 struct ieee80211_vif *vif) 1784 { 1785 if (vif->mu_mimo_owner) { 1786 struct iwl_mu_group_mgmt_notif *notif = _data; 1787 1788 /* 1789 * MU-MIMO Group Id action frame is little endian. We treat 1790 * the data received from firmware as if it came from the 1791 * action frame, so no conversion is needed. 1792 */ 1793 ieee80211_update_mu_groups(vif, 1794 (u8 *)¬if->membership_status, 1795 (u8 *)¬if->user_position); 1796 } 1797 } 1798 1799 void iwl_mvm_mu_mimo_grp_notif(struct iwl_mvm *mvm, 1800 struct iwl_rx_cmd_buffer *rxb) 1801 { 1802 struct iwl_rx_packet *pkt = rxb_addr(rxb); 1803 struct iwl_mu_group_mgmt_notif *notif = (void *)pkt->data; 1804 1805 ieee80211_iterate_active_interfaces_atomic( 1806 mvm->hw, IEEE80211_IFACE_ITER_NORMAL, 1807 iwl_mvm_mu_mimo_iface_iterator, notif); 1808 } 1809 1810 static void iwl_mvm_bss_info_changed_station(struct iwl_mvm *mvm, 1811 struct ieee80211_vif *vif, 1812 struct ieee80211_bss_conf *bss_conf, 1813 u32 changes) 1814 { 1815 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 1816 int ret; 1817 1818 /* 1819 * Re-calculate the tsf id, as the master-slave relations depend on the 1820 * beacon interval, which was not known when the station interface was 1821 * added. 1822 */ 1823 if (changes & BSS_CHANGED_ASSOC && bss_conf->assoc) 1824 iwl_mvm_mac_ctxt_recalc_tsf_id(mvm, vif); 1825 1826 /* 1827 * If we're not associated yet, take the (new) BSSID before associating 1828 * so the firmware knows. If we're already associated, then use the old 1829 * BSSID here, and we'll send a cleared one later in the CHANGED_ASSOC 1830 * branch for disassociation below. 1831 */ 1832 if (changes & BSS_CHANGED_BSSID && !mvmvif->associated) 1833 memcpy(mvmvif->bssid, bss_conf->bssid, ETH_ALEN); 1834 1835 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, mvmvif->bssid); 1836 if (ret) 1837 IWL_ERR(mvm, "failed to update MAC %pM\n", vif->addr); 1838 1839 /* after sending it once, adopt mac80211 data */ 1840 memcpy(mvmvif->bssid, bss_conf->bssid, ETH_ALEN); 1841 mvmvif->associated = bss_conf->assoc; 1842 1843 if (changes & BSS_CHANGED_ASSOC) { 1844 if (bss_conf->assoc) { 1845 /* clear statistics to get clean beacon counter */ 1846 iwl_mvm_request_statistics(mvm, true); 1847 memset(&mvmvif->beacon_stats, 0, 1848 sizeof(mvmvif->beacon_stats)); 1849 1850 /* add quota for this interface */ 1851 ret = iwl_mvm_update_quotas(mvm, true, NULL); 1852 if (ret) { 1853 IWL_ERR(mvm, "failed to update quotas\n"); 1854 return; 1855 } 1856 1857 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, 1858 &mvm->status)) { 1859 /* 1860 * If we're restarting then the firmware will 1861 * obviously have lost synchronisation with 1862 * the AP. It will attempt to synchronise by 1863 * itself, but we can make it more reliable by 1864 * scheduling a session protection time event. 1865 * 1866 * The firmware needs to receive a beacon to 1867 * catch up with synchronisation, use 110% of 1868 * the beacon interval. 1869 * 1870 * Set a large maximum delay to allow for more 1871 * than a single interface. 1872 */ 1873 u32 dur = (11 * vif->bss_conf.beacon_int) / 10; 1874 iwl_mvm_protect_session(mvm, vif, dur, dur, 1875 5 * dur, false); 1876 } 1877 1878 iwl_mvm_sf_update(mvm, vif, false); 1879 iwl_mvm_power_vif_assoc(mvm, vif); 1880 if (vif->p2p) { 1881 iwl_mvm_ref(mvm, IWL_MVM_REF_P2P_CLIENT); 1882 iwl_mvm_update_smps(mvm, vif, 1883 IWL_MVM_SMPS_REQ_PROT, 1884 IEEE80211_SMPS_DYNAMIC); 1885 } 1886 } else if (mvmvif->ap_sta_id != IWL_MVM_STATION_COUNT) { 1887 /* 1888 * If update fails - SF might be running in associated 1889 * mode while disassociated - which is forbidden. 1890 */ 1891 WARN_ONCE(iwl_mvm_sf_update(mvm, vif, false), 1892 "Failed to update SF upon disassociation\n"); 1893 1894 /* remove AP station now that the MAC is unassoc */ 1895 ret = iwl_mvm_rm_sta_id(mvm, vif, mvmvif->ap_sta_id); 1896 if (ret) 1897 IWL_ERR(mvm, "failed to remove AP station\n"); 1898 1899 if (mvm->d0i3_ap_sta_id == mvmvif->ap_sta_id) 1900 mvm->d0i3_ap_sta_id = IWL_MVM_STATION_COUNT; 1901 mvmvif->ap_sta_id = IWL_MVM_STATION_COUNT; 1902 /* remove quota for this interface */ 1903 ret = iwl_mvm_update_quotas(mvm, false, NULL); 1904 if (ret) 1905 IWL_ERR(mvm, "failed to update quotas\n"); 1906 1907 if (vif->p2p) 1908 iwl_mvm_unref(mvm, IWL_MVM_REF_P2P_CLIENT); 1909 1910 /* this will take the cleared BSSID from bss_conf */ 1911 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 1912 if (ret) 1913 IWL_ERR(mvm, 1914 "failed to update MAC %pM (clear after unassoc)\n", 1915 vif->addr); 1916 } 1917 1918 /* 1919 * The firmware tracks the MU-MIMO group on its own. 1920 * However, on HW restart we should restore this data. 1921 */ 1922 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) && 1923 (changes & BSS_CHANGED_MU_GROUPS) && vif->mu_mimo_owner) { 1924 ret = iwl_mvm_update_mu_groups(mvm, vif); 1925 if (ret) 1926 IWL_ERR(mvm, 1927 "failed to update VHT MU_MIMO groups\n"); 1928 } 1929 1930 iwl_mvm_recalc_multicast(mvm); 1931 iwl_mvm_configure_bcast_filter(mvm); 1932 1933 /* reset rssi values */ 1934 mvmvif->bf_data.ave_beacon_signal = 0; 1935 1936 iwl_mvm_bt_coex_vif_change(mvm); 1937 iwl_mvm_update_smps(mvm, vif, IWL_MVM_SMPS_REQ_TT, 1938 IEEE80211_SMPS_AUTOMATIC); 1939 if (fw_has_capa(&mvm->fw->ucode_capa, 1940 IWL_UCODE_TLV_CAPA_UMAC_SCAN)) 1941 iwl_mvm_config_scan(mvm); 1942 } else if (changes & BSS_CHANGED_BEACON_INFO) { 1943 /* 1944 * We received a beacon _after_ association so 1945 * remove the session protection. 1946 */ 1947 iwl_mvm_remove_time_event(mvm, mvmvif, 1948 &mvmvif->time_event_data); 1949 } 1950 1951 if (changes & BSS_CHANGED_BEACON_INFO) { 1952 iwl_mvm_sf_update(mvm, vif, false); 1953 WARN_ON(iwl_mvm_enable_beacon_filter(mvm, vif, 0)); 1954 } 1955 1956 if (changes & (BSS_CHANGED_PS | BSS_CHANGED_P2P_PS | BSS_CHANGED_QOS | 1957 /* 1958 * Send power command on every beacon change, 1959 * because we may have not enabled beacon abort yet. 1960 */ 1961 BSS_CHANGED_BEACON_INFO)) { 1962 ret = iwl_mvm_power_update_mac(mvm); 1963 if (ret) 1964 IWL_ERR(mvm, "failed to update power mode\n"); 1965 } 1966 1967 if (changes & BSS_CHANGED_TXPOWER) { 1968 IWL_DEBUG_CALIB(mvm, "Changing TX Power to %d\n", 1969 bss_conf->txpower); 1970 iwl_mvm_set_tx_power(mvm, vif, bss_conf->txpower); 1971 } 1972 1973 if (changes & BSS_CHANGED_CQM) { 1974 IWL_DEBUG_MAC80211(mvm, "cqm info_changed\n"); 1975 /* reset cqm events tracking */ 1976 mvmvif->bf_data.last_cqm_event = 0; 1977 if (mvmvif->bf_data.bf_enabled) { 1978 ret = iwl_mvm_enable_beacon_filter(mvm, vif, 0); 1979 if (ret) 1980 IWL_ERR(mvm, 1981 "failed to update CQM thresholds\n"); 1982 } 1983 } 1984 1985 if (changes & BSS_CHANGED_ARP_FILTER) { 1986 IWL_DEBUG_MAC80211(mvm, "arp filter changed\n"); 1987 iwl_mvm_configure_bcast_filter(mvm); 1988 } 1989 } 1990 1991 static int iwl_mvm_start_ap_ibss(struct ieee80211_hw *hw, 1992 struct ieee80211_vif *vif) 1993 { 1994 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 1995 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 1996 int ret; 1997 1998 /* 1999 * iwl_mvm_mac_ctxt_add() might read directly from the device 2000 * (the system time), so make sure it is available. 2001 */ 2002 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_START_AP); 2003 if (ret) 2004 return ret; 2005 2006 mutex_lock(&mvm->mutex); 2007 2008 /* Send the beacon template */ 2009 ret = iwl_mvm_mac_ctxt_beacon_changed(mvm, vif); 2010 if (ret) 2011 goto out_unlock; 2012 2013 /* 2014 * Re-calculate the tsf id, as the master-slave relations depend on the 2015 * beacon interval, which was not known when the AP interface was added. 2016 */ 2017 if (vif->type == NL80211_IFTYPE_AP) 2018 iwl_mvm_mac_ctxt_recalc_tsf_id(mvm, vif); 2019 2020 mvmvif->ap_assoc_sta_count = 0; 2021 2022 /* Add the mac context */ 2023 ret = iwl_mvm_mac_ctxt_add(mvm, vif); 2024 if (ret) 2025 goto out_unlock; 2026 2027 /* Perform the binding */ 2028 ret = iwl_mvm_binding_add_vif(mvm, vif); 2029 if (ret) 2030 goto out_remove; 2031 2032 /* Send the bcast station. At this stage the TBTT and DTIM time events 2033 * are added and applied to the scheduler */ 2034 ret = iwl_mvm_send_add_bcast_sta(mvm, vif); 2035 if (ret) 2036 goto out_unbind; 2037 2038 /* must be set before quota calculations */ 2039 mvmvif->ap_ibss_active = true; 2040 2041 /* power updated needs to be done before quotas */ 2042 iwl_mvm_power_update_mac(mvm); 2043 2044 ret = iwl_mvm_update_quotas(mvm, false, NULL); 2045 if (ret) 2046 goto out_quota_failed; 2047 2048 /* Need to update the P2P Device MAC (only GO, IBSS is single vif) */ 2049 if (vif->p2p && mvm->p2p_device_vif) 2050 iwl_mvm_mac_ctxt_changed(mvm, mvm->p2p_device_vif, false, NULL); 2051 2052 iwl_mvm_ref(mvm, IWL_MVM_REF_AP_IBSS); 2053 2054 iwl_mvm_bt_coex_vif_change(mvm); 2055 2056 /* we don't support TDLS during DCM */ 2057 if (iwl_mvm_phy_ctx_count(mvm) > 1) 2058 iwl_mvm_teardown_tdls_peers(mvm); 2059 2060 goto out_unlock; 2061 2062 out_quota_failed: 2063 iwl_mvm_power_update_mac(mvm); 2064 mvmvif->ap_ibss_active = false; 2065 iwl_mvm_send_rm_bcast_sta(mvm, vif); 2066 out_unbind: 2067 iwl_mvm_binding_remove_vif(mvm, vif); 2068 out_remove: 2069 iwl_mvm_mac_ctxt_remove(mvm, vif); 2070 out_unlock: 2071 mutex_unlock(&mvm->mutex); 2072 iwl_mvm_unref(mvm, IWL_MVM_REF_START_AP); 2073 return ret; 2074 } 2075 2076 static void iwl_mvm_stop_ap_ibss(struct ieee80211_hw *hw, 2077 struct ieee80211_vif *vif) 2078 { 2079 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2080 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2081 2082 iwl_mvm_prepare_mac_removal(mvm, vif); 2083 2084 mutex_lock(&mvm->mutex); 2085 2086 /* Handle AP stop while in CSA */ 2087 if (rcu_access_pointer(mvm->csa_vif) == vif) { 2088 iwl_mvm_remove_time_event(mvm, mvmvif, 2089 &mvmvif->time_event_data); 2090 RCU_INIT_POINTER(mvm->csa_vif, NULL); 2091 mvmvif->csa_countdown = false; 2092 } 2093 2094 if (rcu_access_pointer(mvm->csa_tx_blocked_vif) == vif) { 2095 RCU_INIT_POINTER(mvm->csa_tx_blocked_vif, NULL); 2096 mvm->csa_tx_block_bcn_timeout = 0; 2097 } 2098 2099 mvmvif->ap_ibss_active = false; 2100 mvm->ap_last_beacon_gp2 = 0; 2101 2102 iwl_mvm_bt_coex_vif_change(mvm); 2103 2104 iwl_mvm_unref(mvm, IWL_MVM_REF_AP_IBSS); 2105 2106 /* Need to update the P2P Device MAC (only GO, IBSS is single vif) */ 2107 if (vif->p2p && mvm->p2p_device_vif) 2108 iwl_mvm_mac_ctxt_changed(mvm, mvm->p2p_device_vif, false, NULL); 2109 2110 iwl_mvm_update_quotas(mvm, false, NULL); 2111 iwl_mvm_send_rm_bcast_sta(mvm, vif); 2112 iwl_mvm_binding_remove_vif(mvm, vif); 2113 2114 iwl_mvm_power_update_mac(mvm); 2115 2116 iwl_mvm_mac_ctxt_remove(mvm, vif); 2117 2118 mutex_unlock(&mvm->mutex); 2119 } 2120 2121 static void 2122 iwl_mvm_bss_info_changed_ap_ibss(struct iwl_mvm *mvm, 2123 struct ieee80211_vif *vif, 2124 struct ieee80211_bss_conf *bss_conf, 2125 u32 changes) 2126 { 2127 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2128 2129 /* Changes will be applied when the AP/IBSS is started */ 2130 if (!mvmvif->ap_ibss_active) 2131 return; 2132 2133 if (changes & (BSS_CHANGED_ERP_CTS_PROT | BSS_CHANGED_HT | 2134 BSS_CHANGED_BANDWIDTH | BSS_CHANGED_QOS) && 2135 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL)) 2136 IWL_ERR(mvm, "failed to update MAC %pM\n", vif->addr); 2137 2138 /* Need to send a new beacon template to the FW */ 2139 if (changes & BSS_CHANGED_BEACON && 2140 iwl_mvm_mac_ctxt_beacon_changed(mvm, vif)) 2141 IWL_WARN(mvm, "Failed updating beacon data\n"); 2142 2143 if (changes & BSS_CHANGED_TXPOWER) { 2144 IWL_DEBUG_CALIB(mvm, "Changing TX Power to %d\n", 2145 bss_conf->txpower); 2146 iwl_mvm_set_tx_power(mvm, vif, bss_conf->txpower); 2147 } 2148 } 2149 2150 static void iwl_mvm_bss_info_changed(struct ieee80211_hw *hw, 2151 struct ieee80211_vif *vif, 2152 struct ieee80211_bss_conf *bss_conf, 2153 u32 changes) 2154 { 2155 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2156 2157 /* 2158 * iwl_mvm_bss_info_changed_station() might call 2159 * iwl_mvm_protect_session(), which reads directly from 2160 * the device (the system time), so make sure it is available. 2161 */ 2162 if (iwl_mvm_ref_sync(mvm, IWL_MVM_REF_BSS_CHANGED)) 2163 return; 2164 2165 mutex_lock(&mvm->mutex); 2166 2167 if (changes & BSS_CHANGED_IDLE && !bss_conf->idle) 2168 iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_SCHED, true); 2169 2170 switch (vif->type) { 2171 case NL80211_IFTYPE_STATION: 2172 iwl_mvm_bss_info_changed_station(mvm, vif, bss_conf, changes); 2173 break; 2174 case NL80211_IFTYPE_AP: 2175 case NL80211_IFTYPE_ADHOC: 2176 iwl_mvm_bss_info_changed_ap_ibss(mvm, vif, bss_conf, changes); 2177 break; 2178 default: 2179 /* shouldn't happen */ 2180 WARN_ON_ONCE(1); 2181 } 2182 2183 mutex_unlock(&mvm->mutex); 2184 iwl_mvm_unref(mvm, IWL_MVM_REF_BSS_CHANGED); 2185 } 2186 2187 static int iwl_mvm_mac_hw_scan(struct ieee80211_hw *hw, 2188 struct ieee80211_vif *vif, 2189 struct ieee80211_scan_request *hw_req) 2190 { 2191 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2192 int ret; 2193 2194 if (hw_req->req.n_channels == 0 || 2195 hw_req->req.n_channels > mvm->fw->ucode_capa.n_scan_channels) 2196 return -EINVAL; 2197 2198 mutex_lock(&mvm->mutex); 2199 ret = iwl_mvm_reg_scan_start(mvm, vif, &hw_req->req, &hw_req->ies); 2200 mutex_unlock(&mvm->mutex); 2201 2202 return ret; 2203 } 2204 2205 static void iwl_mvm_mac_cancel_hw_scan(struct ieee80211_hw *hw, 2206 struct ieee80211_vif *vif) 2207 { 2208 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2209 2210 mutex_lock(&mvm->mutex); 2211 2212 /* Due to a race condition, it's possible that mac80211 asks 2213 * us to stop a hw_scan when it's already stopped. This can 2214 * happen, for instance, if we stopped the scan ourselves, 2215 * called ieee80211_scan_completed() and the userspace called 2216 * cancel scan scan before ieee80211_scan_work() could run. 2217 * To handle that, simply return if the scan is not running. 2218 */ 2219 if (mvm->scan_status & IWL_MVM_SCAN_REGULAR) 2220 iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_REGULAR, true); 2221 2222 mutex_unlock(&mvm->mutex); 2223 } 2224 2225 static void 2226 iwl_mvm_mac_allow_buffered_frames(struct ieee80211_hw *hw, 2227 struct ieee80211_sta *sta, u16 tids, 2228 int num_frames, 2229 enum ieee80211_frame_release_type reason, 2230 bool more_data) 2231 { 2232 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2233 2234 /* Called when we need to transmit (a) frame(s) from mac80211 */ 2235 2236 iwl_mvm_sta_modify_sleep_tx_count(mvm, sta, reason, num_frames, 2237 tids, more_data, false); 2238 } 2239 2240 static void 2241 iwl_mvm_mac_release_buffered_frames(struct ieee80211_hw *hw, 2242 struct ieee80211_sta *sta, u16 tids, 2243 int num_frames, 2244 enum ieee80211_frame_release_type reason, 2245 bool more_data) 2246 { 2247 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2248 2249 /* Called when we need to transmit (a) frame(s) from agg queue */ 2250 2251 iwl_mvm_sta_modify_sleep_tx_count(mvm, sta, reason, num_frames, 2252 tids, more_data, true); 2253 } 2254 2255 static void iwl_mvm_mac_sta_notify(struct ieee80211_hw *hw, 2256 struct ieee80211_vif *vif, 2257 enum sta_notify_cmd cmd, 2258 struct ieee80211_sta *sta) 2259 { 2260 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2261 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta); 2262 unsigned long txqs = 0, tids = 0; 2263 int tid; 2264 2265 spin_lock_bh(&mvmsta->lock); 2266 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) { 2267 struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid]; 2268 2269 if (tid_data->state != IWL_AGG_ON && 2270 tid_data->state != IWL_EMPTYING_HW_QUEUE_DELBA) 2271 continue; 2272 2273 __set_bit(tid_data->txq_id, &txqs); 2274 2275 if (iwl_mvm_tid_queued(tid_data) == 0) 2276 continue; 2277 2278 __set_bit(tid, &tids); 2279 } 2280 2281 switch (cmd) { 2282 case STA_NOTIFY_SLEEP: 2283 if (atomic_read(&mvm->pending_frames[mvmsta->sta_id]) > 0) 2284 ieee80211_sta_block_awake(hw, sta, true); 2285 2286 for_each_set_bit(tid, &tids, IWL_MAX_TID_COUNT) 2287 ieee80211_sta_set_buffered(sta, tid, true); 2288 2289 if (txqs) 2290 iwl_trans_freeze_txq_timer(mvm->trans, txqs, true); 2291 /* 2292 * The fw updates the STA to be asleep. Tx packets on the Tx 2293 * queues to this station will not be transmitted. The fw will 2294 * send a Tx response with TX_STATUS_FAIL_DEST_PS. 2295 */ 2296 break; 2297 case STA_NOTIFY_AWAKE: 2298 if (WARN_ON(mvmsta->sta_id == IWL_MVM_STATION_COUNT)) 2299 break; 2300 2301 if (txqs) 2302 iwl_trans_freeze_txq_timer(mvm->trans, txqs, false); 2303 iwl_mvm_sta_modify_ps_wake(mvm, sta); 2304 break; 2305 default: 2306 break; 2307 } 2308 spin_unlock_bh(&mvmsta->lock); 2309 } 2310 2311 static void iwl_mvm_sta_pre_rcu_remove(struct ieee80211_hw *hw, 2312 struct ieee80211_vif *vif, 2313 struct ieee80211_sta *sta) 2314 { 2315 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2316 struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta); 2317 2318 /* 2319 * This is called before mac80211 does RCU synchronisation, 2320 * so here we already invalidate our internal RCU-protected 2321 * station pointer. The rest of the code will thus no longer 2322 * be able to find the station this way, and we don't rely 2323 * on further RCU synchronisation after the sta_state() 2324 * callback deleted the station. 2325 */ 2326 mutex_lock(&mvm->mutex); 2327 if (sta == rcu_access_pointer(mvm->fw_id_to_mac_id[mvm_sta->sta_id])) 2328 rcu_assign_pointer(mvm->fw_id_to_mac_id[mvm_sta->sta_id], 2329 ERR_PTR(-ENOENT)); 2330 2331 mutex_unlock(&mvm->mutex); 2332 } 2333 2334 static void iwl_mvm_check_uapsd(struct iwl_mvm *mvm, struct ieee80211_vif *vif, 2335 const u8 *bssid) 2336 { 2337 if (!(mvm->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_UAPSD_SUPPORT)) 2338 return; 2339 2340 if (vif->p2p && !iwl_mvm_is_p2p_standalone_uapsd_supported(mvm)) { 2341 vif->driver_flags &= ~IEEE80211_VIF_SUPPORTS_UAPSD; 2342 return; 2343 } 2344 2345 if (iwlwifi_mod_params.uapsd_disable) { 2346 vif->driver_flags &= ~IEEE80211_VIF_SUPPORTS_UAPSD; 2347 return; 2348 } 2349 2350 vif->driver_flags |= IEEE80211_VIF_SUPPORTS_UAPSD; 2351 } 2352 2353 static void 2354 iwl_mvm_tdls_check_trigger(struct iwl_mvm *mvm, 2355 struct ieee80211_vif *vif, u8 *peer_addr, 2356 enum nl80211_tdls_operation action) 2357 { 2358 struct iwl_fw_dbg_trigger_tlv *trig; 2359 struct iwl_fw_dbg_trigger_tdls *tdls_trig; 2360 2361 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_TDLS)) 2362 return; 2363 2364 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_TDLS); 2365 tdls_trig = (void *)trig->data; 2366 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig)) 2367 return; 2368 2369 if (!(tdls_trig->action_bitmap & BIT(action))) 2370 return; 2371 2372 if (tdls_trig->peer_mode && 2373 memcmp(tdls_trig->peer, peer_addr, ETH_ALEN) != 0) 2374 return; 2375 2376 iwl_mvm_fw_dbg_collect_trig(mvm, trig, 2377 "TDLS event occurred, peer %pM, action %d", 2378 peer_addr, action); 2379 } 2380 2381 static int iwl_mvm_mac_sta_state(struct ieee80211_hw *hw, 2382 struct ieee80211_vif *vif, 2383 struct ieee80211_sta *sta, 2384 enum ieee80211_sta_state old_state, 2385 enum ieee80211_sta_state new_state) 2386 { 2387 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2388 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2389 int ret; 2390 2391 IWL_DEBUG_MAC80211(mvm, "station %pM state change %d->%d\n", 2392 sta->addr, old_state, new_state); 2393 2394 /* this would be a mac80211 bug ... but don't crash */ 2395 if (WARN_ON_ONCE(!mvmvif->phy_ctxt)) 2396 return -EINVAL; 2397 2398 /* if a STA is being removed, reuse its ID */ 2399 flush_work(&mvm->sta_drained_wk); 2400 2401 mutex_lock(&mvm->mutex); 2402 if (old_state == IEEE80211_STA_NOTEXIST && 2403 new_state == IEEE80211_STA_NONE) { 2404 /* 2405 * Firmware bug - it'll crash if the beacon interval is less 2406 * than 16. We can't avoid connecting at all, so refuse the 2407 * station state change, this will cause mac80211 to abandon 2408 * attempts to connect to this AP, and eventually wpa_s will 2409 * blacklist the AP... 2410 */ 2411 if (vif->type == NL80211_IFTYPE_STATION && 2412 vif->bss_conf.beacon_int < 16) { 2413 IWL_ERR(mvm, 2414 "AP %pM beacon interval is %d, refusing due to firmware bug!\n", 2415 sta->addr, vif->bss_conf.beacon_int); 2416 ret = -EINVAL; 2417 goto out_unlock; 2418 } 2419 2420 if (sta->tdls && 2421 (vif->p2p || 2422 iwl_mvm_tdls_sta_count(mvm, NULL) == 2423 IWL_MVM_TDLS_STA_COUNT || 2424 iwl_mvm_phy_ctx_count(mvm) > 1)) { 2425 IWL_DEBUG_MAC80211(mvm, "refusing TDLS sta\n"); 2426 ret = -EBUSY; 2427 goto out_unlock; 2428 } 2429 2430 ret = iwl_mvm_add_sta(mvm, vif, sta); 2431 if (sta->tdls && ret == 0) { 2432 iwl_mvm_recalc_tdls_state(mvm, vif, true); 2433 iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr, 2434 NL80211_TDLS_SETUP); 2435 } 2436 } else if (old_state == IEEE80211_STA_NONE && 2437 new_state == IEEE80211_STA_AUTH) { 2438 /* 2439 * EBS may be disabled due to previous failures reported by FW. 2440 * Reset EBS status here assuming environment has been changed. 2441 */ 2442 mvm->last_ebs_successful = true; 2443 iwl_mvm_check_uapsd(mvm, vif, sta->addr); 2444 ret = 0; 2445 } else if (old_state == IEEE80211_STA_AUTH && 2446 new_state == IEEE80211_STA_ASSOC) { 2447 if (vif->type == NL80211_IFTYPE_AP) { 2448 mvmvif->ap_assoc_sta_count++; 2449 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 2450 } 2451 ret = iwl_mvm_update_sta(mvm, vif, sta); 2452 if (ret == 0) 2453 iwl_mvm_rs_rate_init(mvm, sta, 2454 mvmvif->phy_ctxt->channel->band, 2455 true); 2456 } else if (old_state == IEEE80211_STA_ASSOC && 2457 new_state == IEEE80211_STA_AUTHORIZED) { 2458 2459 /* we don't support TDLS during DCM */ 2460 if (iwl_mvm_phy_ctx_count(mvm) > 1) 2461 iwl_mvm_teardown_tdls_peers(mvm); 2462 2463 if (sta->tdls) 2464 iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr, 2465 NL80211_TDLS_ENABLE_LINK); 2466 2467 /* enable beacon filtering */ 2468 WARN_ON(iwl_mvm_enable_beacon_filter(mvm, vif, 0)); 2469 ret = 0; 2470 } else if (old_state == IEEE80211_STA_AUTHORIZED && 2471 new_state == IEEE80211_STA_ASSOC) { 2472 /* disable beacon filtering */ 2473 WARN_ON(iwl_mvm_disable_beacon_filter(mvm, vif, 0)); 2474 ret = 0; 2475 } else if (old_state == IEEE80211_STA_ASSOC && 2476 new_state == IEEE80211_STA_AUTH) { 2477 if (vif->type == NL80211_IFTYPE_AP) { 2478 mvmvif->ap_assoc_sta_count--; 2479 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 2480 } 2481 ret = 0; 2482 } else if (old_state == IEEE80211_STA_AUTH && 2483 new_state == IEEE80211_STA_NONE) { 2484 ret = 0; 2485 } else if (old_state == IEEE80211_STA_NONE && 2486 new_state == IEEE80211_STA_NOTEXIST) { 2487 ret = iwl_mvm_rm_sta(mvm, vif, sta); 2488 if (sta->tdls) { 2489 iwl_mvm_recalc_tdls_state(mvm, vif, false); 2490 iwl_mvm_tdls_check_trigger(mvm, vif, sta->addr, 2491 NL80211_TDLS_DISABLE_LINK); 2492 } 2493 } else { 2494 ret = -EIO; 2495 } 2496 out_unlock: 2497 mutex_unlock(&mvm->mutex); 2498 2499 if (sta->tdls && ret == 0) { 2500 if (old_state == IEEE80211_STA_NOTEXIST && 2501 new_state == IEEE80211_STA_NONE) 2502 ieee80211_reserve_tid(sta, IWL_MVM_TDLS_FW_TID); 2503 else if (old_state == IEEE80211_STA_NONE && 2504 new_state == IEEE80211_STA_NOTEXIST) 2505 ieee80211_unreserve_tid(sta, IWL_MVM_TDLS_FW_TID); 2506 } 2507 2508 return ret; 2509 } 2510 2511 static int iwl_mvm_mac_set_rts_threshold(struct ieee80211_hw *hw, u32 value) 2512 { 2513 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2514 2515 mvm->rts_threshold = value; 2516 2517 return 0; 2518 } 2519 2520 static void iwl_mvm_sta_rc_update(struct ieee80211_hw *hw, 2521 struct ieee80211_vif *vif, 2522 struct ieee80211_sta *sta, u32 changed) 2523 { 2524 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2525 2526 if (vif->type == NL80211_IFTYPE_STATION && 2527 changed & IEEE80211_RC_NSS_CHANGED) 2528 iwl_mvm_sf_update(mvm, vif, false); 2529 } 2530 2531 static int iwl_mvm_mac_conf_tx(struct ieee80211_hw *hw, 2532 struct ieee80211_vif *vif, u16 ac, 2533 const struct ieee80211_tx_queue_params *params) 2534 { 2535 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2536 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2537 2538 mvmvif->queue_params[ac] = *params; 2539 2540 /* 2541 * No need to update right away, we'll get BSS_CHANGED_QOS 2542 * The exception is P2P_DEVICE interface which needs immediate update. 2543 */ 2544 if (vif->type == NL80211_IFTYPE_P2P_DEVICE) { 2545 int ret; 2546 2547 mutex_lock(&mvm->mutex); 2548 ret = iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 2549 mutex_unlock(&mvm->mutex); 2550 return ret; 2551 } 2552 return 0; 2553 } 2554 2555 static void iwl_mvm_mac_mgd_prepare_tx(struct ieee80211_hw *hw, 2556 struct ieee80211_vif *vif) 2557 { 2558 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2559 u32 duration = IWL_MVM_TE_SESSION_PROTECTION_MAX_TIME_MS; 2560 u32 min_duration = IWL_MVM_TE_SESSION_PROTECTION_MIN_TIME_MS; 2561 2562 if (WARN_ON_ONCE(vif->bss_conf.assoc)) 2563 return; 2564 2565 /* 2566 * iwl_mvm_protect_session() reads directly from the device 2567 * (the system time), so make sure it is available. 2568 */ 2569 if (iwl_mvm_ref_sync(mvm, IWL_MVM_REF_PREPARE_TX)) 2570 return; 2571 2572 mutex_lock(&mvm->mutex); 2573 /* Try really hard to protect the session and hear a beacon */ 2574 iwl_mvm_protect_session(mvm, vif, duration, min_duration, 500, false); 2575 mutex_unlock(&mvm->mutex); 2576 2577 iwl_mvm_unref(mvm, IWL_MVM_REF_PREPARE_TX); 2578 } 2579 2580 static int iwl_mvm_mac_sched_scan_start(struct ieee80211_hw *hw, 2581 struct ieee80211_vif *vif, 2582 struct cfg80211_sched_scan_request *req, 2583 struct ieee80211_scan_ies *ies) 2584 { 2585 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2586 2587 int ret; 2588 2589 mutex_lock(&mvm->mutex); 2590 2591 if (!vif->bss_conf.idle) { 2592 ret = -EBUSY; 2593 goto out; 2594 } 2595 2596 ret = iwl_mvm_sched_scan_start(mvm, vif, req, ies, IWL_MVM_SCAN_SCHED); 2597 2598 out: 2599 mutex_unlock(&mvm->mutex); 2600 return ret; 2601 } 2602 2603 static int iwl_mvm_mac_sched_scan_stop(struct ieee80211_hw *hw, 2604 struct ieee80211_vif *vif) 2605 { 2606 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2607 int ret; 2608 2609 mutex_lock(&mvm->mutex); 2610 2611 /* Due to a race condition, it's possible that mac80211 asks 2612 * us to stop a sched_scan when it's already stopped. This 2613 * can happen, for instance, if we stopped the scan ourselves, 2614 * called ieee80211_sched_scan_stopped() and the userspace called 2615 * stop sched scan scan before ieee80211_sched_scan_stopped_work() 2616 * could run. To handle this, simply return if the scan is 2617 * not running. 2618 */ 2619 if (!(mvm->scan_status & IWL_MVM_SCAN_SCHED)) { 2620 mutex_unlock(&mvm->mutex); 2621 return 0; 2622 } 2623 2624 ret = iwl_mvm_scan_stop(mvm, IWL_MVM_SCAN_SCHED, false); 2625 mutex_unlock(&mvm->mutex); 2626 iwl_mvm_wait_for_async_handlers(mvm); 2627 2628 return ret; 2629 } 2630 2631 static int iwl_mvm_mac_set_key(struct ieee80211_hw *hw, 2632 enum set_key_cmd cmd, 2633 struct ieee80211_vif *vif, 2634 struct ieee80211_sta *sta, 2635 struct ieee80211_key_conf *key) 2636 { 2637 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2638 struct iwl_mvm_sta *mvmsta; 2639 struct iwl_mvm_key_pn *ptk_pn; 2640 int keyidx = key->keyidx; 2641 int ret; 2642 u8 key_offset; 2643 2644 if (iwlwifi_mod_params.sw_crypto) { 2645 IWL_DEBUG_MAC80211(mvm, "leave - hwcrypto disabled\n"); 2646 return -EOPNOTSUPP; 2647 } 2648 2649 switch (key->cipher) { 2650 case WLAN_CIPHER_SUITE_TKIP: 2651 key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC; 2652 key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE; 2653 break; 2654 case WLAN_CIPHER_SUITE_CCMP: 2655 key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE; 2656 break; 2657 case WLAN_CIPHER_SUITE_AES_CMAC: 2658 WARN_ON_ONCE(!ieee80211_hw_check(hw, MFP_CAPABLE)); 2659 break; 2660 case WLAN_CIPHER_SUITE_WEP40: 2661 case WLAN_CIPHER_SUITE_WEP104: 2662 /* For non-client mode, only use WEP keys for TX as we probably 2663 * don't have a station yet anyway and would then have to keep 2664 * track of the keys, linking them to each of the clients/peers 2665 * as they appear. For now, don't do that, for performance WEP 2666 * offload doesn't really matter much, but we need it for some 2667 * other offload features in client mode. 2668 */ 2669 if (vif->type != NL80211_IFTYPE_STATION) 2670 return 0; 2671 break; 2672 default: 2673 /* currently FW supports only one optional cipher scheme */ 2674 if (hw->n_cipher_schemes && 2675 hw->cipher_schemes->cipher == key->cipher) 2676 key->flags |= IEEE80211_KEY_FLAG_PUT_IV_SPACE; 2677 else 2678 return -EOPNOTSUPP; 2679 } 2680 2681 mutex_lock(&mvm->mutex); 2682 2683 switch (cmd) { 2684 case SET_KEY: 2685 if ((vif->type == NL80211_IFTYPE_ADHOC || 2686 vif->type == NL80211_IFTYPE_AP) && !sta) { 2687 /* 2688 * GTK on AP interface is a TX-only key, return 0; 2689 * on IBSS they're per-station and because we're lazy 2690 * we don't support them for RX, so do the same. 2691 * CMAC in AP/IBSS modes must be done in software. 2692 */ 2693 if (key->cipher == WLAN_CIPHER_SUITE_AES_CMAC) 2694 ret = -EOPNOTSUPP; 2695 else 2696 ret = 0; 2697 key->hw_key_idx = STA_KEY_IDX_INVALID; 2698 break; 2699 } 2700 2701 /* During FW restart, in order to restore the state as it was, 2702 * don't try to reprogram keys we previously failed for. 2703 */ 2704 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) && 2705 key->hw_key_idx == STA_KEY_IDX_INVALID) { 2706 IWL_DEBUG_MAC80211(mvm, 2707 "skip invalid idx key programming during restart\n"); 2708 ret = 0; 2709 break; 2710 } 2711 2712 if (!test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status) && 2713 sta && iwl_mvm_has_new_rx_api(mvm) && 2714 key->flags & IEEE80211_KEY_FLAG_PAIRWISE && 2715 (key->cipher == WLAN_CIPHER_SUITE_CCMP || 2716 key->cipher == WLAN_CIPHER_SUITE_GCMP)) { 2717 struct ieee80211_key_seq seq; 2718 int tid, q; 2719 2720 mvmsta = iwl_mvm_sta_from_mac80211(sta); 2721 WARN_ON(rcu_access_pointer(mvmsta->ptk_pn[keyidx])); 2722 ptk_pn = kzalloc(sizeof(*ptk_pn) + 2723 mvm->trans->num_rx_queues * 2724 sizeof(ptk_pn->q[0]), 2725 GFP_KERNEL); 2726 if (!ptk_pn) { 2727 ret = -ENOMEM; 2728 break; 2729 } 2730 2731 for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) { 2732 ieee80211_get_key_rx_seq(key, tid, &seq); 2733 for (q = 0; q < mvm->trans->num_rx_queues; q++) 2734 memcpy(ptk_pn->q[q].pn[tid], 2735 seq.ccmp.pn, 2736 IEEE80211_CCMP_PN_LEN); 2737 } 2738 2739 rcu_assign_pointer(mvmsta->ptk_pn[keyidx], ptk_pn); 2740 } 2741 2742 /* in HW restart reuse the index, otherwise request a new one */ 2743 if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) 2744 key_offset = key->hw_key_idx; 2745 else 2746 key_offset = STA_KEY_IDX_INVALID; 2747 2748 IWL_DEBUG_MAC80211(mvm, "set hwcrypto key\n"); 2749 ret = iwl_mvm_set_sta_key(mvm, vif, sta, key, key_offset); 2750 if (ret) { 2751 IWL_WARN(mvm, "set key failed\n"); 2752 /* 2753 * can't add key for RX, but we don't need it 2754 * in the device for TX so still return 0 2755 */ 2756 key->hw_key_idx = STA_KEY_IDX_INVALID; 2757 ret = 0; 2758 } 2759 2760 break; 2761 case DISABLE_KEY: 2762 if (key->hw_key_idx == STA_KEY_IDX_INVALID) { 2763 ret = 0; 2764 break; 2765 } 2766 2767 if (sta && iwl_mvm_has_new_rx_api(mvm) && 2768 key->flags & IEEE80211_KEY_FLAG_PAIRWISE && 2769 (key->cipher == WLAN_CIPHER_SUITE_CCMP || 2770 key->cipher == WLAN_CIPHER_SUITE_GCMP)) { 2771 mvmsta = iwl_mvm_sta_from_mac80211(sta); 2772 ptk_pn = rcu_dereference_protected( 2773 mvmsta->ptk_pn[keyidx], 2774 lockdep_is_held(&mvm->mutex)); 2775 RCU_INIT_POINTER(mvmsta->ptk_pn[keyidx], NULL); 2776 if (ptk_pn) 2777 kfree_rcu(ptk_pn, rcu_head); 2778 } 2779 2780 IWL_DEBUG_MAC80211(mvm, "disable hwcrypto key\n"); 2781 ret = iwl_mvm_remove_sta_key(mvm, vif, sta, key); 2782 break; 2783 default: 2784 ret = -EINVAL; 2785 } 2786 2787 mutex_unlock(&mvm->mutex); 2788 return ret; 2789 } 2790 2791 static void iwl_mvm_mac_update_tkip_key(struct ieee80211_hw *hw, 2792 struct ieee80211_vif *vif, 2793 struct ieee80211_key_conf *keyconf, 2794 struct ieee80211_sta *sta, 2795 u32 iv32, u16 *phase1key) 2796 { 2797 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2798 2799 if (keyconf->hw_key_idx == STA_KEY_IDX_INVALID) 2800 return; 2801 2802 iwl_mvm_update_tkip_key(mvm, vif, keyconf, sta, iv32, phase1key); 2803 } 2804 2805 2806 static bool iwl_mvm_rx_aux_roc(struct iwl_notif_wait_data *notif_wait, 2807 struct iwl_rx_packet *pkt, void *data) 2808 { 2809 struct iwl_mvm *mvm = 2810 container_of(notif_wait, struct iwl_mvm, notif_wait); 2811 struct iwl_hs20_roc_res *resp; 2812 int resp_len = iwl_rx_packet_payload_len(pkt); 2813 struct iwl_mvm_time_event_data *te_data = data; 2814 2815 if (WARN_ON(pkt->hdr.cmd != HOT_SPOT_CMD)) 2816 return true; 2817 2818 if (WARN_ON_ONCE(resp_len != sizeof(*resp))) { 2819 IWL_ERR(mvm, "Invalid HOT_SPOT_CMD response\n"); 2820 return true; 2821 } 2822 2823 resp = (void *)pkt->data; 2824 2825 IWL_DEBUG_TE(mvm, 2826 "Aux ROC: Recieved response from ucode: status=%d uid=%d\n", 2827 resp->status, resp->event_unique_id); 2828 2829 te_data->uid = le32_to_cpu(resp->event_unique_id); 2830 IWL_DEBUG_TE(mvm, "TIME_EVENT_CMD response - UID = 0x%x\n", 2831 te_data->uid); 2832 2833 spin_lock_bh(&mvm->time_event_lock); 2834 list_add_tail(&te_data->list, &mvm->aux_roc_te_list); 2835 spin_unlock_bh(&mvm->time_event_lock); 2836 2837 return true; 2838 } 2839 2840 #define AUX_ROC_MIN_DURATION MSEC_TO_TU(100) 2841 #define AUX_ROC_MIN_DELAY MSEC_TO_TU(200) 2842 #define AUX_ROC_MAX_DELAY MSEC_TO_TU(600) 2843 #define AUX_ROC_SAFETY_BUFFER MSEC_TO_TU(20) 2844 #define AUX_ROC_MIN_SAFETY_BUFFER MSEC_TO_TU(10) 2845 static int iwl_mvm_send_aux_roc_cmd(struct iwl_mvm *mvm, 2846 struct ieee80211_channel *channel, 2847 struct ieee80211_vif *vif, 2848 int duration) 2849 { 2850 int res, time_reg = DEVICE_SYSTEM_TIME_REG; 2851 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2852 struct iwl_mvm_time_event_data *te_data = &mvmvif->hs_time_event_data; 2853 static const u16 time_event_response[] = { HOT_SPOT_CMD }; 2854 struct iwl_notification_wait wait_time_event; 2855 u32 dtim_interval = vif->bss_conf.dtim_period * 2856 vif->bss_conf.beacon_int; 2857 u32 req_dur, delay; 2858 struct iwl_hs20_roc_req aux_roc_req = { 2859 .action = cpu_to_le32(FW_CTXT_ACTION_ADD), 2860 .id_and_color = 2861 cpu_to_le32(FW_CMD_ID_AND_COLOR(MAC_INDEX_AUX, 0)), 2862 .sta_id_and_color = cpu_to_le32(mvm->aux_sta.sta_id), 2863 /* Set the channel info data */ 2864 .channel_info.band = (channel->band == IEEE80211_BAND_2GHZ) ? 2865 PHY_BAND_24 : PHY_BAND_5, 2866 .channel_info.channel = channel->hw_value, 2867 .channel_info.width = PHY_VHT_CHANNEL_MODE20, 2868 /* Set the time and duration */ 2869 .apply_time = cpu_to_le32(iwl_read_prph(mvm->trans, time_reg)), 2870 }; 2871 2872 delay = AUX_ROC_MIN_DELAY; 2873 req_dur = MSEC_TO_TU(duration); 2874 2875 /* 2876 * If we are associated we want the delay time to be at least one 2877 * dtim interval so that the FW can wait until after the DTIM and 2878 * then start the time event, this will potentially allow us to 2879 * remain off-channel for the max duration. 2880 * Since we want to use almost a whole dtim interval we would also 2881 * like the delay to be for 2-3 dtim intervals, in case there are 2882 * other time events with higher priority. 2883 */ 2884 if (vif->bss_conf.assoc) { 2885 delay = min_t(u32, dtim_interval * 3, AUX_ROC_MAX_DELAY); 2886 /* We cannot remain off-channel longer than the DTIM interval */ 2887 if (dtim_interval <= req_dur) { 2888 req_dur = dtim_interval - AUX_ROC_SAFETY_BUFFER; 2889 if (req_dur <= AUX_ROC_MIN_DURATION) 2890 req_dur = dtim_interval - 2891 AUX_ROC_MIN_SAFETY_BUFFER; 2892 } 2893 } 2894 2895 aux_roc_req.duration = cpu_to_le32(req_dur); 2896 aux_roc_req.apply_time_max_delay = cpu_to_le32(delay); 2897 2898 IWL_DEBUG_TE(mvm, 2899 "ROC: Requesting to remain on channel %u for %ums (requested = %ums, max_delay = %ums, dtim_interval = %ums)\n", 2900 channel->hw_value, req_dur, duration, delay, 2901 dtim_interval); 2902 /* Set the node address */ 2903 memcpy(aux_roc_req.node_addr, vif->addr, ETH_ALEN); 2904 2905 lockdep_assert_held(&mvm->mutex); 2906 2907 spin_lock_bh(&mvm->time_event_lock); 2908 2909 if (WARN_ON(te_data->id == HOT_SPOT_CMD)) { 2910 spin_unlock_bh(&mvm->time_event_lock); 2911 return -EIO; 2912 } 2913 2914 te_data->vif = vif; 2915 te_data->duration = duration; 2916 te_data->id = HOT_SPOT_CMD; 2917 2918 spin_unlock_bh(&mvm->time_event_lock); 2919 2920 /* 2921 * Use a notification wait, which really just processes the 2922 * command response and doesn't wait for anything, in order 2923 * to be able to process the response and get the UID inside 2924 * the RX path. Using CMD_WANT_SKB doesn't work because it 2925 * stores the buffer and then wakes up this thread, by which 2926 * time another notification (that the time event started) 2927 * might already be processed unsuccessfully. 2928 */ 2929 iwl_init_notification_wait(&mvm->notif_wait, &wait_time_event, 2930 time_event_response, 2931 ARRAY_SIZE(time_event_response), 2932 iwl_mvm_rx_aux_roc, te_data); 2933 2934 res = iwl_mvm_send_cmd_pdu(mvm, HOT_SPOT_CMD, 0, sizeof(aux_roc_req), 2935 &aux_roc_req); 2936 2937 if (res) { 2938 IWL_ERR(mvm, "Couldn't send HOT_SPOT_CMD: %d\n", res); 2939 iwl_remove_notification(&mvm->notif_wait, &wait_time_event); 2940 goto out_clear_te; 2941 } 2942 2943 /* No need to wait for anything, so just pass 1 (0 isn't valid) */ 2944 res = iwl_wait_notification(&mvm->notif_wait, &wait_time_event, 1); 2945 /* should never fail */ 2946 WARN_ON_ONCE(res); 2947 2948 if (res) { 2949 out_clear_te: 2950 spin_lock_bh(&mvm->time_event_lock); 2951 iwl_mvm_te_clear_data(mvm, te_data); 2952 spin_unlock_bh(&mvm->time_event_lock); 2953 } 2954 2955 return res; 2956 } 2957 2958 static int iwl_mvm_roc(struct ieee80211_hw *hw, 2959 struct ieee80211_vif *vif, 2960 struct ieee80211_channel *channel, 2961 int duration, 2962 enum ieee80211_roc_type type) 2963 { 2964 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 2965 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 2966 struct cfg80211_chan_def chandef; 2967 struct iwl_mvm_phy_ctxt *phy_ctxt; 2968 int ret, i; 2969 2970 IWL_DEBUG_MAC80211(mvm, "enter (%d, %d, %d)\n", channel->hw_value, 2971 duration, type); 2972 2973 flush_work(&mvm->roc_done_wk); 2974 2975 mutex_lock(&mvm->mutex); 2976 2977 switch (vif->type) { 2978 case NL80211_IFTYPE_STATION: 2979 if (fw_has_capa(&mvm->fw->ucode_capa, 2980 IWL_UCODE_TLV_CAPA_HOTSPOT_SUPPORT)) { 2981 /* Use aux roc framework (HS20) */ 2982 ret = iwl_mvm_send_aux_roc_cmd(mvm, channel, 2983 vif, duration); 2984 goto out_unlock; 2985 } 2986 IWL_ERR(mvm, "hotspot not supported\n"); 2987 ret = -EINVAL; 2988 goto out_unlock; 2989 case NL80211_IFTYPE_P2P_DEVICE: 2990 /* handle below */ 2991 break; 2992 default: 2993 IWL_ERR(mvm, "vif isn't P2P_DEVICE: %d\n", vif->type); 2994 ret = -EINVAL; 2995 goto out_unlock; 2996 } 2997 2998 for (i = 0; i < NUM_PHY_CTX; i++) { 2999 phy_ctxt = &mvm->phy_ctxts[i]; 3000 if (phy_ctxt->ref == 0 || mvmvif->phy_ctxt == phy_ctxt) 3001 continue; 3002 3003 if (phy_ctxt->ref && channel == phy_ctxt->channel) { 3004 /* 3005 * Unbind the P2P_DEVICE from the current PHY context, 3006 * and if the PHY context is not used remove it. 3007 */ 3008 ret = iwl_mvm_binding_remove_vif(mvm, vif); 3009 if (WARN(ret, "Failed unbinding P2P_DEVICE\n")) 3010 goto out_unlock; 3011 3012 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt); 3013 3014 /* Bind the P2P_DEVICE to the current PHY Context */ 3015 mvmvif->phy_ctxt = phy_ctxt; 3016 3017 ret = iwl_mvm_binding_add_vif(mvm, vif); 3018 if (WARN(ret, "Failed binding P2P_DEVICE\n")) 3019 goto out_unlock; 3020 3021 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt); 3022 goto schedule_time_event; 3023 } 3024 } 3025 3026 /* Need to update the PHY context only if the ROC channel changed */ 3027 if (channel == mvmvif->phy_ctxt->channel) 3028 goto schedule_time_event; 3029 3030 cfg80211_chandef_create(&chandef, channel, NL80211_CHAN_NO_HT); 3031 3032 /* 3033 * Change the PHY context configuration as it is currently referenced 3034 * only by the P2P Device MAC 3035 */ 3036 if (mvmvif->phy_ctxt->ref == 1) { 3037 ret = iwl_mvm_phy_ctxt_changed(mvm, mvmvif->phy_ctxt, 3038 &chandef, 1, 1); 3039 if (ret) 3040 goto out_unlock; 3041 } else { 3042 /* 3043 * The PHY context is shared with other MACs. Need to remove the 3044 * P2P Device from the binding, allocate an new PHY context and 3045 * create a new binding 3046 */ 3047 phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm); 3048 if (!phy_ctxt) { 3049 ret = -ENOSPC; 3050 goto out_unlock; 3051 } 3052 3053 ret = iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &chandef, 3054 1, 1); 3055 if (ret) { 3056 IWL_ERR(mvm, "Failed to change PHY context\n"); 3057 goto out_unlock; 3058 } 3059 3060 /* Unbind the P2P_DEVICE from the current PHY context */ 3061 ret = iwl_mvm_binding_remove_vif(mvm, vif); 3062 if (WARN(ret, "Failed unbinding P2P_DEVICE\n")) 3063 goto out_unlock; 3064 3065 iwl_mvm_phy_ctxt_unref(mvm, mvmvif->phy_ctxt); 3066 3067 /* Bind the P2P_DEVICE to the new allocated PHY context */ 3068 mvmvif->phy_ctxt = phy_ctxt; 3069 3070 ret = iwl_mvm_binding_add_vif(mvm, vif); 3071 if (WARN(ret, "Failed binding P2P_DEVICE\n")) 3072 goto out_unlock; 3073 3074 iwl_mvm_phy_ctxt_ref(mvm, mvmvif->phy_ctxt); 3075 } 3076 3077 schedule_time_event: 3078 /* Schedule the time events */ 3079 ret = iwl_mvm_start_p2p_roc(mvm, vif, duration, type); 3080 3081 out_unlock: 3082 mutex_unlock(&mvm->mutex); 3083 IWL_DEBUG_MAC80211(mvm, "leave\n"); 3084 return ret; 3085 } 3086 3087 static int iwl_mvm_cancel_roc(struct ieee80211_hw *hw) 3088 { 3089 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3090 3091 IWL_DEBUG_MAC80211(mvm, "enter\n"); 3092 3093 mutex_lock(&mvm->mutex); 3094 iwl_mvm_stop_roc(mvm); 3095 mutex_unlock(&mvm->mutex); 3096 3097 IWL_DEBUG_MAC80211(mvm, "leave\n"); 3098 return 0; 3099 } 3100 3101 static int __iwl_mvm_add_chanctx(struct iwl_mvm *mvm, 3102 struct ieee80211_chanctx_conf *ctx) 3103 { 3104 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv; 3105 struct iwl_mvm_phy_ctxt *phy_ctxt; 3106 int ret; 3107 3108 lockdep_assert_held(&mvm->mutex); 3109 3110 IWL_DEBUG_MAC80211(mvm, "Add channel context\n"); 3111 3112 phy_ctxt = iwl_mvm_get_free_phy_ctxt(mvm); 3113 if (!phy_ctxt) { 3114 ret = -ENOSPC; 3115 goto out; 3116 } 3117 3118 ret = iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &ctx->min_def, 3119 ctx->rx_chains_static, 3120 ctx->rx_chains_dynamic); 3121 if (ret) { 3122 IWL_ERR(mvm, "Failed to add PHY context\n"); 3123 goto out; 3124 } 3125 3126 iwl_mvm_phy_ctxt_ref(mvm, phy_ctxt); 3127 *phy_ctxt_id = phy_ctxt->id; 3128 out: 3129 return ret; 3130 } 3131 3132 static int iwl_mvm_add_chanctx(struct ieee80211_hw *hw, 3133 struct ieee80211_chanctx_conf *ctx) 3134 { 3135 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3136 int ret; 3137 3138 mutex_lock(&mvm->mutex); 3139 ret = __iwl_mvm_add_chanctx(mvm, ctx); 3140 mutex_unlock(&mvm->mutex); 3141 3142 return ret; 3143 } 3144 3145 static void __iwl_mvm_remove_chanctx(struct iwl_mvm *mvm, 3146 struct ieee80211_chanctx_conf *ctx) 3147 { 3148 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv; 3149 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id]; 3150 3151 lockdep_assert_held(&mvm->mutex); 3152 3153 iwl_mvm_phy_ctxt_unref(mvm, phy_ctxt); 3154 } 3155 3156 static void iwl_mvm_remove_chanctx(struct ieee80211_hw *hw, 3157 struct ieee80211_chanctx_conf *ctx) 3158 { 3159 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3160 3161 mutex_lock(&mvm->mutex); 3162 __iwl_mvm_remove_chanctx(mvm, ctx); 3163 mutex_unlock(&mvm->mutex); 3164 } 3165 3166 static void iwl_mvm_change_chanctx(struct ieee80211_hw *hw, 3167 struct ieee80211_chanctx_conf *ctx, 3168 u32 changed) 3169 { 3170 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3171 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv; 3172 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id]; 3173 3174 if (WARN_ONCE((phy_ctxt->ref > 1) && 3175 (changed & ~(IEEE80211_CHANCTX_CHANGE_WIDTH | 3176 IEEE80211_CHANCTX_CHANGE_RX_CHAINS | 3177 IEEE80211_CHANCTX_CHANGE_RADAR | 3178 IEEE80211_CHANCTX_CHANGE_MIN_WIDTH)), 3179 "Cannot change PHY. Ref=%d, changed=0x%X\n", 3180 phy_ctxt->ref, changed)) 3181 return; 3182 3183 mutex_lock(&mvm->mutex); 3184 iwl_mvm_bt_coex_vif_change(mvm); 3185 iwl_mvm_phy_ctxt_changed(mvm, phy_ctxt, &ctx->min_def, 3186 ctx->rx_chains_static, 3187 ctx->rx_chains_dynamic); 3188 mutex_unlock(&mvm->mutex); 3189 } 3190 3191 static int __iwl_mvm_assign_vif_chanctx(struct iwl_mvm *mvm, 3192 struct ieee80211_vif *vif, 3193 struct ieee80211_chanctx_conf *ctx, 3194 bool switching_chanctx) 3195 { 3196 u16 *phy_ctxt_id = (u16 *)ctx->drv_priv; 3197 struct iwl_mvm_phy_ctxt *phy_ctxt = &mvm->phy_ctxts[*phy_ctxt_id]; 3198 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 3199 int ret; 3200 3201 lockdep_assert_held(&mvm->mutex); 3202 3203 mvmvif->phy_ctxt = phy_ctxt; 3204 3205 switch (vif->type) { 3206 case NL80211_IFTYPE_AP: 3207 /* only needed if we're switching chanctx (i.e. during CSA) */ 3208 if (switching_chanctx) { 3209 mvmvif->ap_ibss_active = true; 3210 break; 3211 } 3212 case NL80211_IFTYPE_ADHOC: 3213 /* 3214 * The AP binding flow is handled as part of the start_ap flow 3215 * (in bss_info_changed), similarly for IBSS. 3216 */ 3217 ret = 0; 3218 goto out; 3219 case NL80211_IFTYPE_STATION: 3220 break; 3221 case NL80211_IFTYPE_MONITOR: 3222 /* always disable PS when a monitor interface is active */ 3223 mvmvif->ps_disabled = true; 3224 break; 3225 default: 3226 ret = -EINVAL; 3227 goto out; 3228 } 3229 3230 ret = iwl_mvm_binding_add_vif(mvm, vif); 3231 if (ret) 3232 goto out; 3233 3234 /* 3235 * Power state must be updated before quotas, 3236 * otherwise fw will complain. 3237 */ 3238 iwl_mvm_power_update_mac(mvm); 3239 3240 /* Setting the quota at this stage is only required for monitor 3241 * interfaces. For the other types, the bss_info changed flow 3242 * will handle quota settings. 3243 */ 3244 if (vif->type == NL80211_IFTYPE_MONITOR) { 3245 mvmvif->monitor_active = true; 3246 ret = iwl_mvm_update_quotas(mvm, false, NULL); 3247 if (ret) 3248 goto out_remove_binding; 3249 3250 ret = iwl_mvm_add_snif_sta(mvm, vif); 3251 if (ret) 3252 goto out_remove_binding; 3253 3254 } 3255 3256 /* Handle binding during CSA */ 3257 if (vif->type == NL80211_IFTYPE_AP) { 3258 iwl_mvm_update_quotas(mvm, false, NULL); 3259 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 3260 } 3261 3262 if (switching_chanctx && vif->type == NL80211_IFTYPE_STATION) { 3263 u32 duration = 2 * vif->bss_conf.beacon_int; 3264 3265 /* iwl_mvm_protect_session() reads directly from the 3266 * device (the system time), so make sure it is 3267 * available. 3268 */ 3269 ret = iwl_mvm_ref_sync(mvm, IWL_MVM_REF_PROTECT_CSA); 3270 if (ret) 3271 goto out_remove_binding; 3272 3273 /* Protect the session to make sure we hear the first 3274 * beacon on the new channel. 3275 */ 3276 iwl_mvm_protect_session(mvm, vif, duration, duration, 3277 vif->bss_conf.beacon_int / 2, 3278 true); 3279 3280 iwl_mvm_unref(mvm, IWL_MVM_REF_PROTECT_CSA); 3281 3282 iwl_mvm_update_quotas(mvm, false, NULL); 3283 } 3284 3285 goto out; 3286 3287 out_remove_binding: 3288 iwl_mvm_binding_remove_vif(mvm, vif); 3289 iwl_mvm_power_update_mac(mvm); 3290 out: 3291 if (ret) 3292 mvmvif->phy_ctxt = NULL; 3293 return ret; 3294 } 3295 static int iwl_mvm_assign_vif_chanctx(struct ieee80211_hw *hw, 3296 struct ieee80211_vif *vif, 3297 struct ieee80211_chanctx_conf *ctx) 3298 { 3299 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3300 int ret; 3301 3302 mutex_lock(&mvm->mutex); 3303 ret = __iwl_mvm_assign_vif_chanctx(mvm, vif, ctx, false); 3304 mutex_unlock(&mvm->mutex); 3305 3306 return ret; 3307 } 3308 3309 static void __iwl_mvm_unassign_vif_chanctx(struct iwl_mvm *mvm, 3310 struct ieee80211_vif *vif, 3311 struct ieee80211_chanctx_conf *ctx, 3312 bool switching_chanctx) 3313 { 3314 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 3315 struct ieee80211_vif *disabled_vif = NULL; 3316 3317 lockdep_assert_held(&mvm->mutex); 3318 3319 iwl_mvm_remove_time_event(mvm, mvmvif, &mvmvif->time_event_data); 3320 3321 switch (vif->type) { 3322 case NL80211_IFTYPE_ADHOC: 3323 goto out; 3324 case NL80211_IFTYPE_MONITOR: 3325 mvmvif->monitor_active = false; 3326 mvmvif->ps_disabled = false; 3327 iwl_mvm_rm_snif_sta(mvm, vif); 3328 break; 3329 case NL80211_IFTYPE_AP: 3330 /* This part is triggered only during CSA */ 3331 if (!switching_chanctx || !mvmvif->ap_ibss_active) 3332 goto out; 3333 3334 mvmvif->csa_countdown = false; 3335 3336 /* Set CS bit on all the stations */ 3337 iwl_mvm_modify_all_sta_disable_tx(mvm, mvmvif, true); 3338 3339 /* Save blocked iface, the timeout is set on the next beacon */ 3340 rcu_assign_pointer(mvm->csa_tx_blocked_vif, vif); 3341 3342 mvmvif->ap_ibss_active = false; 3343 break; 3344 case NL80211_IFTYPE_STATION: 3345 if (!switching_chanctx) 3346 break; 3347 3348 disabled_vif = vif; 3349 3350 iwl_mvm_mac_ctxt_changed(mvm, vif, true, NULL); 3351 break; 3352 default: 3353 break; 3354 } 3355 3356 iwl_mvm_update_quotas(mvm, false, disabled_vif); 3357 iwl_mvm_binding_remove_vif(mvm, vif); 3358 3359 out: 3360 mvmvif->phy_ctxt = NULL; 3361 iwl_mvm_power_update_mac(mvm); 3362 } 3363 3364 static void iwl_mvm_unassign_vif_chanctx(struct ieee80211_hw *hw, 3365 struct ieee80211_vif *vif, 3366 struct ieee80211_chanctx_conf *ctx) 3367 { 3368 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3369 3370 mutex_lock(&mvm->mutex); 3371 __iwl_mvm_unassign_vif_chanctx(mvm, vif, ctx, false); 3372 mutex_unlock(&mvm->mutex); 3373 } 3374 3375 static int 3376 iwl_mvm_switch_vif_chanctx_swap(struct iwl_mvm *mvm, 3377 struct ieee80211_vif_chanctx_switch *vifs) 3378 { 3379 int ret; 3380 3381 mutex_lock(&mvm->mutex); 3382 __iwl_mvm_unassign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, true); 3383 __iwl_mvm_remove_chanctx(mvm, vifs[0].old_ctx); 3384 3385 ret = __iwl_mvm_add_chanctx(mvm, vifs[0].new_ctx); 3386 if (ret) { 3387 IWL_ERR(mvm, "failed to add new_ctx during channel switch\n"); 3388 goto out_reassign; 3389 } 3390 3391 ret = __iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].new_ctx, 3392 true); 3393 if (ret) { 3394 IWL_ERR(mvm, 3395 "failed to assign new_ctx during channel switch\n"); 3396 goto out_remove; 3397 } 3398 3399 /* we don't support TDLS during DCM - can be caused by channel switch */ 3400 if (iwl_mvm_phy_ctx_count(mvm) > 1) 3401 iwl_mvm_teardown_tdls_peers(mvm); 3402 3403 goto out; 3404 3405 out_remove: 3406 __iwl_mvm_remove_chanctx(mvm, vifs[0].new_ctx); 3407 3408 out_reassign: 3409 if (__iwl_mvm_add_chanctx(mvm, vifs[0].old_ctx)) { 3410 IWL_ERR(mvm, "failed to add old_ctx back after failure.\n"); 3411 goto out_restart; 3412 } 3413 3414 if (__iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, 3415 true)) { 3416 IWL_ERR(mvm, "failed to reassign old_ctx after failure.\n"); 3417 goto out_restart; 3418 } 3419 3420 goto out; 3421 3422 out_restart: 3423 /* things keep failing, better restart the hw */ 3424 iwl_mvm_nic_restart(mvm, false); 3425 3426 out: 3427 mutex_unlock(&mvm->mutex); 3428 3429 return ret; 3430 } 3431 3432 static int 3433 iwl_mvm_switch_vif_chanctx_reassign(struct iwl_mvm *mvm, 3434 struct ieee80211_vif_chanctx_switch *vifs) 3435 { 3436 int ret; 3437 3438 mutex_lock(&mvm->mutex); 3439 __iwl_mvm_unassign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, true); 3440 3441 ret = __iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].new_ctx, 3442 true); 3443 if (ret) { 3444 IWL_ERR(mvm, 3445 "failed to assign new_ctx during channel switch\n"); 3446 goto out_reassign; 3447 } 3448 3449 goto out; 3450 3451 out_reassign: 3452 if (__iwl_mvm_assign_vif_chanctx(mvm, vifs[0].vif, vifs[0].old_ctx, 3453 true)) { 3454 IWL_ERR(mvm, "failed to reassign old_ctx after failure.\n"); 3455 goto out_restart; 3456 } 3457 3458 goto out; 3459 3460 out_restart: 3461 /* things keep failing, better restart the hw */ 3462 iwl_mvm_nic_restart(mvm, false); 3463 3464 out: 3465 mutex_unlock(&mvm->mutex); 3466 3467 return ret; 3468 } 3469 3470 static int iwl_mvm_switch_vif_chanctx(struct ieee80211_hw *hw, 3471 struct ieee80211_vif_chanctx_switch *vifs, 3472 int n_vifs, 3473 enum ieee80211_chanctx_switch_mode mode) 3474 { 3475 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3476 int ret; 3477 3478 /* we only support a single-vif right now */ 3479 if (n_vifs > 1) 3480 return -EOPNOTSUPP; 3481 3482 switch (mode) { 3483 case CHANCTX_SWMODE_SWAP_CONTEXTS: 3484 ret = iwl_mvm_switch_vif_chanctx_swap(mvm, vifs); 3485 break; 3486 case CHANCTX_SWMODE_REASSIGN_VIF: 3487 ret = iwl_mvm_switch_vif_chanctx_reassign(mvm, vifs); 3488 break; 3489 default: 3490 ret = -EOPNOTSUPP; 3491 break; 3492 } 3493 3494 return ret; 3495 } 3496 3497 static int iwl_mvm_set_tim(struct ieee80211_hw *hw, 3498 struct ieee80211_sta *sta, 3499 bool set) 3500 { 3501 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3502 struct iwl_mvm_sta *mvm_sta = iwl_mvm_sta_from_mac80211(sta); 3503 3504 if (!mvm_sta || !mvm_sta->vif) { 3505 IWL_ERR(mvm, "Station is not associated to a vif\n"); 3506 return -EINVAL; 3507 } 3508 3509 return iwl_mvm_mac_ctxt_beacon_changed(mvm, mvm_sta->vif); 3510 } 3511 3512 #ifdef CONFIG_NL80211_TESTMODE 3513 static const struct nla_policy iwl_mvm_tm_policy[IWL_MVM_TM_ATTR_MAX + 1] = { 3514 [IWL_MVM_TM_ATTR_CMD] = { .type = NLA_U32 }, 3515 [IWL_MVM_TM_ATTR_NOA_DURATION] = { .type = NLA_U32 }, 3516 [IWL_MVM_TM_ATTR_BEACON_FILTER_STATE] = { .type = NLA_U32 }, 3517 }; 3518 3519 static int __iwl_mvm_mac_testmode_cmd(struct iwl_mvm *mvm, 3520 struct ieee80211_vif *vif, 3521 void *data, int len) 3522 { 3523 struct nlattr *tb[IWL_MVM_TM_ATTR_MAX + 1]; 3524 int err; 3525 u32 noa_duration; 3526 3527 err = nla_parse(tb, IWL_MVM_TM_ATTR_MAX, data, len, iwl_mvm_tm_policy); 3528 if (err) 3529 return err; 3530 3531 if (!tb[IWL_MVM_TM_ATTR_CMD]) 3532 return -EINVAL; 3533 3534 switch (nla_get_u32(tb[IWL_MVM_TM_ATTR_CMD])) { 3535 case IWL_MVM_TM_CMD_SET_NOA: 3536 if (!vif || vif->type != NL80211_IFTYPE_AP || !vif->p2p || 3537 !vif->bss_conf.enable_beacon || 3538 !tb[IWL_MVM_TM_ATTR_NOA_DURATION]) 3539 return -EINVAL; 3540 3541 noa_duration = nla_get_u32(tb[IWL_MVM_TM_ATTR_NOA_DURATION]); 3542 if (noa_duration >= vif->bss_conf.beacon_int) 3543 return -EINVAL; 3544 3545 mvm->noa_duration = noa_duration; 3546 mvm->noa_vif = vif; 3547 3548 return iwl_mvm_update_quotas(mvm, false, NULL); 3549 case IWL_MVM_TM_CMD_SET_BEACON_FILTER: 3550 /* must be associated client vif - ignore authorized */ 3551 if (!vif || vif->type != NL80211_IFTYPE_STATION || 3552 !vif->bss_conf.assoc || !vif->bss_conf.dtim_period || 3553 !tb[IWL_MVM_TM_ATTR_BEACON_FILTER_STATE]) 3554 return -EINVAL; 3555 3556 if (nla_get_u32(tb[IWL_MVM_TM_ATTR_BEACON_FILTER_STATE])) 3557 return iwl_mvm_enable_beacon_filter(mvm, vif, 0); 3558 return iwl_mvm_disable_beacon_filter(mvm, vif, 0); 3559 } 3560 3561 return -EOPNOTSUPP; 3562 } 3563 3564 static int iwl_mvm_mac_testmode_cmd(struct ieee80211_hw *hw, 3565 struct ieee80211_vif *vif, 3566 void *data, int len) 3567 { 3568 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3569 int err; 3570 3571 mutex_lock(&mvm->mutex); 3572 err = __iwl_mvm_mac_testmode_cmd(mvm, vif, data, len); 3573 mutex_unlock(&mvm->mutex); 3574 3575 return err; 3576 } 3577 #endif 3578 3579 static void iwl_mvm_channel_switch(struct ieee80211_hw *hw, 3580 struct ieee80211_vif *vif, 3581 struct ieee80211_channel_switch *chsw) 3582 { 3583 /* By implementing this operation, we prevent mac80211 from 3584 * starting its own channel switch timer, so that we can call 3585 * ieee80211_chswitch_done() ourselves at the right time 3586 * (which is when the absence time event starts). 3587 */ 3588 3589 IWL_DEBUG_MAC80211(IWL_MAC80211_GET_MVM(hw), 3590 "dummy channel switch op\n"); 3591 } 3592 3593 static int iwl_mvm_pre_channel_switch(struct ieee80211_hw *hw, 3594 struct ieee80211_vif *vif, 3595 struct ieee80211_channel_switch *chsw) 3596 { 3597 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3598 struct ieee80211_vif *csa_vif; 3599 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 3600 u32 apply_time; 3601 int ret; 3602 3603 mutex_lock(&mvm->mutex); 3604 3605 mvmvif->csa_failed = false; 3606 3607 IWL_DEBUG_MAC80211(mvm, "pre CSA to freq %d\n", 3608 chsw->chandef.center_freq1); 3609 3610 iwl_fw_dbg_trigger_simple_stop(mvm, vif, FW_DBG_TRIGGER_CHANNEL_SWITCH); 3611 3612 switch (vif->type) { 3613 case NL80211_IFTYPE_AP: 3614 csa_vif = 3615 rcu_dereference_protected(mvm->csa_vif, 3616 lockdep_is_held(&mvm->mutex)); 3617 if (WARN_ONCE(csa_vif && csa_vif->csa_active, 3618 "Another CSA is already in progress")) { 3619 ret = -EBUSY; 3620 goto out_unlock; 3621 } 3622 3623 rcu_assign_pointer(mvm->csa_vif, vif); 3624 3625 if (WARN_ONCE(mvmvif->csa_countdown, 3626 "Previous CSA countdown didn't complete")) { 3627 ret = -EBUSY; 3628 goto out_unlock; 3629 } 3630 3631 break; 3632 case NL80211_IFTYPE_STATION: 3633 /* Schedule the time event to a bit before beacon 1, 3634 * to make sure we're in the new channel when the 3635 * GO/AP arrives. 3636 */ 3637 apply_time = chsw->device_timestamp + 3638 ((vif->bss_conf.beacon_int * (chsw->count - 1) - 3639 IWL_MVM_CHANNEL_SWITCH_TIME_CLIENT) * 1024); 3640 3641 if (chsw->block_tx) 3642 iwl_mvm_csa_client_absent(mvm, vif); 3643 3644 iwl_mvm_schedule_csa_period(mvm, vif, vif->bss_conf.beacon_int, 3645 apply_time); 3646 if (mvmvif->bf_data.bf_enabled) { 3647 ret = iwl_mvm_disable_beacon_filter(mvm, vif, 0); 3648 if (ret) 3649 goto out_unlock; 3650 } 3651 3652 break; 3653 default: 3654 break; 3655 } 3656 3657 mvmvif->ps_disabled = true; 3658 3659 ret = iwl_mvm_power_update_ps(mvm); 3660 if (ret) 3661 goto out_unlock; 3662 3663 /* we won't be on this channel any longer */ 3664 iwl_mvm_teardown_tdls_peers(mvm); 3665 3666 out_unlock: 3667 mutex_unlock(&mvm->mutex); 3668 3669 return ret; 3670 } 3671 3672 static int iwl_mvm_post_channel_switch(struct ieee80211_hw *hw, 3673 struct ieee80211_vif *vif) 3674 { 3675 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 3676 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3677 int ret; 3678 3679 mutex_lock(&mvm->mutex); 3680 3681 if (mvmvif->csa_failed) { 3682 mvmvif->csa_failed = false; 3683 ret = -EIO; 3684 goto out_unlock; 3685 } 3686 3687 if (vif->type == NL80211_IFTYPE_STATION) { 3688 struct iwl_mvm_sta *mvmsta; 3689 3690 mvmsta = iwl_mvm_sta_from_staid_protected(mvm, 3691 mvmvif->ap_sta_id); 3692 3693 if (WARN_ON(!mvmsta)) { 3694 ret = -EIO; 3695 goto out_unlock; 3696 } 3697 3698 iwl_mvm_sta_modify_disable_tx(mvm, mvmsta, false); 3699 3700 iwl_mvm_mac_ctxt_changed(mvm, vif, false, NULL); 3701 3702 ret = iwl_mvm_enable_beacon_filter(mvm, vif, 0); 3703 if (ret) 3704 goto out_unlock; 3705 3706 iwl_mvm_stop_session_protection(mvm, vif); 3707 } 3708 3709 mvmvif->ps_disabled = false; 3710 3711 ret = iwl_mvm_power_update_ps(mvm); 3712 3713 out_unlock: 3714 mutex_unlock(&mvm->mutex); 3715 3716 return ret; 3717 } 3718 3719 static void iwl_mvm_mac_flush(struct ieee80211_hw *hw, 3720 struct ieee80211_vif *vif, u32 queues, bool drop) 3721 { 3722 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3723 struct iwl_mvm_vif *mvmvif; 3724 struct iwl_mvm_sta *mvmsta; 3725 struct ieee80211_sta *sta; 3726 int i; 3727 u32 msk = 0; 3728 3729 if (!vif || vif->type != NL80211_IFTYPE_STATION) 3730 return; 3731 3732 mutex_lock(&mvm->mutex); 3733 mvmvif = iwl_mvm_vif_from_mac80211(vif); 3734 3735 /* flush the AP-station and all TDLS peers */ 3736 for (i = 0; i < IWL_MVM_STATION_COUNT; i++) { 3737 sta = rcu_dereference_protected(mvm->fw_id_to_mac_id[i], 3738 lockdep_is_held(&mvm->mutex)); 3739 if (IS_ERR_OR_NULL(sta)) 3740 continue; 3741 3742 mvmsta = iwl_mvm_sta_from_mac80211(sta); 3743 if (mvmsta->vif != vif) 3744 continue; 3745 3746 /* make sure only TDLS peers or the AP are flushed */ 3747 WARN_ON(i != mvmvif->ap_sta_id && !sta->tdls); 3748 3749 msk |= mvmsta->tfd_queue_msk; 3750 } 3751 3752 if (drop) { 3753 if (iwl_mvm_flush_tx_path(mvm, msk, 0)) 3754 IWL_ERR(mvm, "flush request fail\n"); 3755 mutex_unlock(&mvm->mutex); 3756 } else { 3757 mutex_unlock(&mvm->mutex); 3758 3759 /* this can take a while, and we may need/want other operations 3760 * to succeed while doing this, so do it without the mutex held 3761 */ 3762 iwl_trans_wait_tx_queue_empty(mvm->trans, msk); 3763 } 3764 } 3765 3766 static int iwl_mvm_mac_get_survey(struct ieee80211_hw *hw, int idx, 3767 struct survey_info *survey) 3768 { 3769 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3770 int ret; 3771 3772 memset(survey, 0, sizeof(*survey)); 3773 3774 /* only support global statistics right now */ 3775 if (idx != 0) 3776 return -ENOENT; 3777 3778 if (fw_has_capa(&mvm->fw->ucode_capa, 3779 IWL_UCODE_TLV_CAPA_RADIO_BEACON_STATS)) 3780 return -ENOENT; 3781 3782 mutex_lock(&mvm->mutex); 3783 3784 if (mvm->ucode_loaded) { 3785 ret = iwl_mvm_request_statistics(mvm, false); 3786 if (ret) 3787 goto out; 3788 } 3789 3790 survey->filled = SURVEY_INFO_TIME | 3791 SURVEY_INFO_TIME_RX | 3792 SURVEY_INFO_TIME_TX | 3793 SURVEY_INFO_TIME_SCAN; 3794 survey->time = mvm->accu_radio_stats.on_time_rf + 3795 mvm->radio_stats.on_time_rf; 3796 do_div(survey->time, USEC_PER_MSEC); 3797 3798 survey->time_rx = mvm->accu_radio_stats.rx_time + 3799 mvm->radio_stats.rx_time; 3800 do_div(survey->time_rx, USEC_PER_MSEC); 3801 3802 survey->time_tx = mvm->accu_radio_stats.tx_time + 3803 mvm->radio_stats.tx_time; 3804 do_div(survey->time_tx, USEC_PER_MSEC); 3805 3806 survey->time_scan = mvm->accu_radio_stats.on_time_scan + 3807 mvm->radio_stats.on_time_scan; 3808 do_div(survey->time_scan, USEC_PER_MSEC); 3809 3810 ret = 0; 3811 out: 3812 mutex_unlock(&mvm->mutex); 3813 return ret; 3814 } 3815 3816 static void iwl_mvm_mac_sta_statistics(struct ieee80211_hw *hw, 3817 struct ieee80211_vif *vif, 3818 struct ieee80211_sta *sta, 3819 struct station_info *sinfo) 3820 { 3821 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3822 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 3823 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta); 3824 3825 if (fw_has_capa(&mvm->fw->ucode_capa, 3826 IWL_UCODE_TLV_CAPA_RADIO_BEACON_STATS)) 3827 return; 3828 3829 /* if beacon filtering isn't on mac80211 does it anyway */ 3830 if (!(vif->driver_flags & IEEE80211_VIF_BEACON_FILTER)) 3831 return; 3832 3833 if (!vif->bss_conf.assoc) 3834 return; 3835 3836 mutex_lock(&mvm->mutex); 3837 3838 if (mvmvif->ap_sta_id != mvmsta->sta_id) 3839 goto unlock; 3840 3841 if (iwl_mvm_request_statistics(mvm, false)) 3842 goto unlock; 3843 3844 sinfo->rx_beacon = mvmvif->beacon_stats.num_beacons + 3845 mvmvif->beacon_stats.accu_num_beacons; 3846 sinfo->filled |= BIT(NL80211_STA_INFO_BEACON_RX); 3847 if (mvmvif->beacon_stats.avg_signal) { 3848 /* firmware only reports a value after RXing a few beacons */ 3849 sinfo->rx_beacon_signal_avg = mvmvif->beacon_stats.avg_signal; 3850 sinfo->filled |= BIT(NL80211_STA_INFO_BEACON_SIGNAL_AVG); 3851 } 3852 unlock: 3853 mutex_unlock(&mvm->mutex); 3854 } 3855 3856 static void iwl_mvm_event_mlme_callback(struct iwl_mvm *mvm, 3857 struct ieee80211_vif *vif, 3858 const struct ieee80211_event *event) 3859 { 3860 #define CHECK_MLME_TRIGGER(_mvm, _trig, _buf, _cnt, _fmt...) \ 3861 do { \ 3862 if ((_cnt) && --(_cnt)) \ 3863 break; \ 3864 iwl_mvm_fw_dbg_collect_trig(_mvm, _trig, _fmt);\ 3865 } while (0) 3866 3867 struct iwl_fw_dbg_trigger_tlv *trig; 3868 struct iwl_fw_dbg_trigger_mlme *trig_mlme; 3869 3870 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_MLME)) 3871 return; 3872 3873 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_MLME); 3874 trig_mlme = (void *)trig->data; 3875 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig)) 3876 return; 3877 3878 if (event->u.mlme.data == ASSOC_EVENT) { 3879 if (event->u.mlme.status == MLME_DENIED) 3880 CHECK_MLME_TRIGGER(mvm, trig, buf, 3881 trig_mlme->stop_assoc_denied, 3882 "DENIED ASSOC: reason %d", 3883 event->u.mlme.reason); 3884 else if (event->u.mlme.status == MLME_TIMEOUT) 3885 CHECK_MLME_TRIGGER(mvm, trig, buf, 3886 trig_mlme->stop_assoc_timeout, 3887 "ASSOC TIMEOUT"); 3888 } else if (event->u.mlme.data == AUTH_EVENT) { 3889 if (event->u.mlme.status == MLME_DENIED) 3890 CHECK_MLME_TRIGGER(mvm, trig, buf, 3891 trig_mlme->stop_auth_denied, 3892 "DENIED AUTH: reason %d", 3893 event->u.mlme.reason); 3894 else if (event->u.mlme.status == MLME_TIMEOUT) 3895 CHECK_MLME_TRIGGER(mvm, trig, buf, 3896 trig_mlme->stop_auth_timeout, 3897 "AUTH TIMEOUT"); 3898 } else if (event->u.mlme.data == DEAUTH_RX_EVENT) { 3899 CHECK_MLME_TRIGGER(mvm, trig, buf, 3900 trig_mlme->stop_rx_deauth, 3901 "DEAUTH RX %d", event->u.mlme.reason); 3902 } else if (event->u.mlme.data == DEAUTH_TX_EVENT) { 3903 CHECK_MLME_TRIGGER(mvm, trig, buf, 3904 trig_mlme->stop_tx_deauth, 3905 "DEAUTH TX %d", event->u.mlme.reason); 3906 } 3907 #undef CHECK_MLME_TRIGGER 3908 } 3909 3910 static void iwl_mvm_event_bar_rx_callback(struct iwl_mvm *mvm, 3911 struct ieee80211_vif *vif, 3912 const struct ieee80211_event *event) 3913 { 3914 struct iwl_fw_dbg_trigger_tlv *trig; 3915 struct iwl_fw_dbg_trigger_ba *ba_trig; 3916 3917 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_BA)) 3918 return; 3919 3920 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_BA); 3921 ba_trig = (void *)trig->data; 3922 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig)) 3923 return; 3924 3925 if (!(le16_to_cpu(ba_trig->rx_bar) & BIT(event->u.ba.tid))) 3926 return; 3927 3928 iwl_mvm_fw_dbg_collect_trig(mvm, trig, 3929 "BAR received from %pM, tid %d, ssn %d", 3930 event->u.ba.sta->addr, event->u.ba.tid, 3931 event->u.ba.ssn); 3932 } 3933 3934 static void 3935 iwl_mvm_event_frame_timeout_callback(struct iwl_mvm *mvm, 3936 struct ieee80211_vif *vif, 3937 const struct ieee80211_event *event) 3938 { 3939 struct iwl_fw_dbg_trigger_tlv *trig; 3940 struct iwl_fw_dbg_trigger_ba *ba_trig; 3941 3942 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_BA)) 3943 return; 3944 3945 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_BA); 3946 ba_trig = (void *)trig->data; 3947 if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trig)) 3948 return; 3949 3950 if (!(le16_to_cpu(ba_trig->frame_timeout) & BIT(event->u.ba.tid))) 3951 return; 3952 3953 iwl_mvm_fw_dbg_collect_trig(mvm, trig, 3954 "Frame from %pM timed out, tid %d", 3955 event->u.ba.sta->addr, event->u.ba.tid); 3956 } 3957 3958 static void iwl_mvm_mac_event_callback(struct ieee80211_hw *hw, 3959 struct ieee80211_vif *vif, 3960 const struct ieee80211_event *event) 3961 { 3962 struct iwl_mvm *mvm = IWL_MAC80211_GET_MVM(hw); 3963 3964 switch (event->type) { 3965 case MLME_EVENT: 3966 iwl_mvm_event_mlme_callback(mvm, vif, event); 3967 break; 3968 case BAR_RX_EVENT: 3969 iwl_mvm_event_bar_rx_callback(mvm, vif, event); 3970 break; 3971 case BA_FRAME_TIMEOUT: 3972 iwl_mvm_event_frame_timeout_callback(mvm, vif, event); 3973 break; 3974 default: 3975 break; 3976 } 3977 } 3978 3979 const struct ieee80211_ops iwl_mvm_hw_ops = { 3980 .tx = iwl_mvm_mac_tx, 3981 .ampdu_action = iwl_mvm_mac_ampdu_action, 3982 .start = iwl_mvm_mac_start, 3983 .reconfig_complete = iwl_mvm_mac_reconfig_complete, 3984 .stop = iwl_mvm_mac_stop, 3985 .add_interface = iwl_mvm_mac_add_interface, 3986 .remove_interface = iwl_mvm_mac_remove_interface, 3987 .config = iwl_mvm_mac_config, 3988 .prepare_multicast = iwl_mvm_prepare_multicast, 3989 .configure_filter = iwl_mvm_configure_filter, 3990 .config_iface_filter = iwl_mvm_config_iface_filter, 3991 .bss_info_changed = iwl_mvm_bss_info_changed, 3992 .hw_scan = iwl_mvm_mac_hw_scan, 3993 .cancel_hw_scan = iwl_mvm_mac_cancel_hw_scan, 3994 .sta_pre_rcu_remove = iwl_mvm_sta_pre_rcu_remove, 3995 .sta_state = iwl_mvm_mac_sta_state, 3996 .sta_notify = iwl_mvm_mac_sta_notify, 3997 .allow_buffered_frames = iwl_mvm_mac_allow_buffered_frames, 3998 .release_buffered_frames = iwl_mvm_mac_release_buffered_frames, 3999 .set_rts_threshold = iwl_mvm_mac_set_rts_threshold, 4000 .sta_rc_update = iwl_mvm_sta_rc_update, 4001 .conf_tx = iwl_mvm_mac_conf_tx, 4002 .mgd_prepare_tx = iwl_mvm_mac_mgd_prepare_tx, 4003 .mgd_protect_tdls_discover = iwl_mvm_mac_mgd_protect_tdls_discover, 4004 .flush = iwl_mvm_mac_flush, 4005 .sched_scan_start = iwl_mvm_mac_sched_scan_start, 4006 .sched_scan_stop = iwl_mvm_mac_sched_scan_stop, 4007 .set_key = iwl_mvm_mac_set_key, 4008 .update_tkip_key = iwl_mvm_mac_update_tkip_key, 4009 .remain_on_channel = iwl_mvm_roc, 4010 .cancel_remain_on_channel = iwl_mvm_cancel_roc, 4011 .add_chanctx = iwl_mvm_add_chanctx, 4012 .remove_chanctx = iwl_mvm_remove_chanctx, 4013 .change_chanctx = iwl_mvm_change_chanctx, 4014 .assign_vif_chanctx = iwl_mvm_assign_vif_chanctx, 4015 .unassign_vif_chanctx = iwl_mvm_unassign_vif_chanctx, 4016 .switch_vif_chanctx = iwl_mvm_switch_vif_chanctx, 4017 4018 .start_ap = iwl_mvm_start_ap_ibss, 4019 .stop_ap = iwl_mvm_stop_ap_ibss, 4020 .join_ibss = iwl_mvm_start_ap_ibss, 4021 .leave_ibss = iwl_mvm_stop_ap_ibss, 4022 4023 .set_tim = iwl_mvm_set_tim, 4024 4025 .channel_switch = iwl_mvm_channel_switch, 4026 .pre_channel_switch = iwl_mvm_pre_channel_switch, 4027 .post_channel_switch = iwl_mvm_post_channel_switch, 4028 4029 .tdls_channel_switch = iwl_mvm_tdls_channel_switch, 4030 .tdls_cancel_channel_switch = iwl_mvm_tdls_cancel_channel_switch, 4031 .tdls_recv_channel_switch = iwl_mvm_tdls_recv_channel_switch, 4032 4033 .event_callback = iwl_mvm_mac_event_callback, 4034 4035 CFG80211_TESTMODE_CMD(iwl_mvm_mac_testmode_cmd) 4036 4037 #ifdef CONFIG_PM_SLEEP 4038 /* look at d3.c */ 4039 .suspend = iwl_mvm_suspend, 4040 .resume = iwl_mvm_resume, 4041 .set_wakeup = iwl_mvm_set_wakeup, 4042 .set_rekey_data = iwl_mvm_set_rekey_data, 4043 #if IS_ENABLED(CONFIG_IPV6) 4044 .ipv6_addr_change = iwl_mvm_ipv6_addr_change, 4045 #endif 4046 .set_default_unicast_key = iwl_mvm_set_default_unicast_key, 4047 #endif 4048 .get_survey = iwl_mvm_mac_get_survey, 4049 .sta_statistics = iwl_mvm_mac_sta_statistics, 4050 }; 4051