drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c

   1 /******************************************************************************
   2  *
   3  * This file is provided under a dual BSD/GPLv2 license.  When using or
   4  * redistributing this file, you may do so under either license.
   5  *
   6  * GPL LICENSE SUMMARY
   7  *
   8  * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
   9  * Copyright(c) 2013 - 2014 Intel Mobile Communications GmbH
  10  * Copyright(c) 2015 - 2016 Intel Deutschland GmbH
  11  *
  12  * This program is free software; you can redistribute it and/or modify
  13  * it under the terms of version 2 of the GNU General Public License as
  14  * published by the Free Software Foundation.
  15  *
  16  * This program is distributed in the hope that it will be useful, but
  17  * WITHOUT ANY WARRANTY; without even the implied warranty of
  18  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  19  * General Public License for more details.
  20  *
  21  * You should have received a copy of the GNU General Public License
  22  * along with this program; if not, write to the Free Software
  23  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110,
  24  * USA
  25  *
  26  * The full GNU General Public License is included in this distribution
  27  * in the file called COPYING.
  28  *
  29  * Contact Information:
  30  *  Intel Linux Wireless <linuxwifi@intel.com>
  31  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
  32  *
  33  * BSD LICENSE
  34  *
  35  * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
  36  * Copyright(c) 2013 - 2014 Intel Mobile Communications GmbH
  37  * Copyright(c) 2015 - 2016 Intel Deutschland GmbH
  38  * All rights reserved.
  39  *
  40  * Redistribution and use in source and binary forms, with or without
  41  * modification, are permitted provided that the following conditions
  42  * are met:
  43  *
  44  *  * Redistributions of source code must retain the above copyright
  45  *    notice, this list of conditions and the following disclaimer.
  46  *  * Redistributions in binary form must reproduce the above copyright
  47  *    notice, this list of conditions and the following disclaimer in
  48  *    the documentation and/or other materials provided with the
  49  *    distribution.
  50  *  * Neither the name Intel Corporation nor the names of its
  51  *    contributors may be used to endorse or promote products derived
  52  *    from this software without specific prior written permission.
  53  *
  54  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  55  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  56  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
  57  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
  58  * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  59  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
  60  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  61  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  62  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  63  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  64  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  65  *
  66  *****************************************************************************/
  67
  68 #include <linux/etherdevice.h>
  69 #include <net/mac80211.h>
  70 #include "iwl-io.h"
  71 #include "iwl-prph.h"
  72 #include "fw-api.h"
  73 #include "mvm.h"
  74 #include "time-event.h"
  75 #include "fw-dbg.h"
  76
  77 const u8 iwl_mvm_ac_to_tx_fifo[] = {
  78         IWL_MVM_TX_FIFO_VO,
  79         IWL_MVM_TX_FIFO_VI,
  80         IWL_MVM_TX_FIFO_BE,
  81         IWL_MVM_TX_FIFO_BK,
  82 };
  83
  84 struct iwl_mvm_mac_iface_iterator_data {
  85         struct iwl_mvm *mvm;
  86         struct ieee80211_vif *vif;
  87         unsigned long available_mac_ids[BITS_TO_LONGS(NUM_MAC_INDEX_DRIVER)];
  88         unsigned long available_tsf_ids[BITS_TO_LONGS(NUM_TSF_IDS)];
  89         enum iwl_tsf_id preferred_tsf;
  90         bool found_vif;
  91 };
  92
  93 struct iwl_mvm_hw_queues_iface_iterator_data {
  94         struct ieee80211_vif *exclude_vif;
  95         unsigned long used_hw_queues;
  96 };
  97
  98 static void iwl_mvm_mac_tsf_id_iter(void *_data, u8 *mac,
  99                                     struct ieee80211_vif *vif)
 100 {
 101         struct iwl_mvm_mac_iface_iterator_data *data = _data;
 102         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
 103         u16 min_bi;
 104
 105         /* Skip the interface for which we are trying to assign a tsf_id  */
 106         if (vif == data->vif)
 107                 return;
 108
 109         /*
 110          * The TSF is a hardware/firmware resource, there are 4 and
 111          * the driver should assign and free them as needed. However,
 112          * there are cases where 2 MACs should share the same TSF ID
 113          * for the purpose of clock sync, an optimization to avoid
 114          * clock drift causing overlapping TBTTs/DTIMs for a GO and
 115          * client in the system.
 116          *
 117          * The firmware will decide according to the MAC type which
 118          * will be the master and slave. Clients that need to sync
 119          * with a remote station will be the master, and an AP or GO
 120          * will be the slave.
 121          *
 122          * Depending on the new interface type it can be slaved to
 123          * or become the master of an existing interface.
 124          */
 125         switch (data->vif->type) {
 126         case NL80211_IFTYPE_STATION:
 127                 /*
 128                  * The new interface is a client, so if the one we're iterating
 129                  * is an AP, and the beacon interval of the AP is a multiple or
 130                  * divisor of the beacon interval of the client, the same TSF
 131                  * should be used to avoid drift between the new client and
 132                  * existing AP. The existing AP will get drift updates from the
 133                  * new client context in this case.
 134                  */
 135                 if (vif->type != NL80211_IFTYPE_AP ||
 136                     data->preferred_tsf != NUM_TSF_IDS ||
 137                     !test_bit(mvmvif->tsf_id, data->available_tsf_ids))
 138                         break;
 139
 140                 min_bi = min(data->vif->bss_conf.beacon_int,
 141                              vif->bss_conf.beacon_int);
 142
 143                 if (!min_bi)
 144                         break;
 145
 146                 if ((data->vif->bss_conf.beacon_int -
 147                      vif->bss_conf.beacon_int) % min_bi == 0) {
 148                         data->preferred_tsf = mvmvif->tsf_id;
 149                         return;
 150                 }
 151                 break;
 152
 153         case NL80211_IFTYPE_AP:
 154                 /*
 155                  * The new interface is AP/GO, so if its beacon interval is a
 156                  * multiple or a divisor of the beacon interval of an existing
 157                  * interface, it should get drift updates from an existing
 158                  * client or use the same TSF as an existing GO. There's no
 159                  * drift between TSFs internally but if they used different
 160                  * TSFs then a new client MAC could update one of them and
 161                  * cause drift that way.
 162                  */
 163                 if ((vif->type != NL80211_IFTYPE_AP &&
 164                      vif->type != NL80211_IFTYPE_STATION) ||
 165                     data->preferred_tsf != NUM_TSF_IDS ||
 166                     !test_bit(mvmvif->tsf_id, data->available_tsf_ids))
 167                         break;
 168
 169                 min_bi = min(data->vif->bss_conf.beacon_int,
 170                              vif->bss_conf.beacon_int);
 171
 172                 if (!min_bi)
 173                         break;
 174
 175                 if ((data->vif->bss_conf.beacon_int -
 176                      vif->bss_conf.beacon_int) % min_bi == 0) {
 177                         data->preferred_tsf = mvmvif->tsf_id;
 178                         return;
 179                 }
 180                 break;
 181         default:
 182                 /*
 183                  * For all other interface types there's no need to
 184                  * take drift into account. Either they're exclusive
 185                  * like IBSS and monitor, or we don't care much about
 186                  * their TSF (like P2P Device), but we won't be able
 187                  * to share the TSF resource.
 188                  */
 189                 break;
 190         }
 191
 192         /*
 193          * Unless we exited above, we can't share the TSF resource
 194          * that the virtual interface we're iterating over is using
 195          * with the new one, so clear the available bit and if this
 196          * was the preferred one, reset that as well.
 197          */
 198         __clear_bit(mvmvif->tsf_id, data->available_tsf_ids);
 199
 200         if (data->preferred_tsf == mvmvif->tsf_id)
 201                 data->preferred_tsf = NUM_TSF_IDS;
 202 }
 203
 204 /*
 205  * Get the mask of the queues used by the vif
 206  */
 207 u32 iwl_mvm_mac_get_queues_mask(struct ieee80211_vif *vif)
 208 {
 209         u32 qmask = 0, ac;
 210
 211         if (vif->type == NL80211_IFTYPE_P2P_DEVICE)
 212                 return BIT(IWL_MVM_OFFCHANNEL_QUEUE);
 213
 214         for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
 215                 if (vif->hw_queue[ac] != IEEE80211_INVAL_HW_QUEUE)
 216                         qmask |= BIT(vif->hw_queue[ac]);
 217         }
 218
 219         if (vif->type == NL80211_IFTYPE_AP)
 220                 qmask |= BIT(vif->cab_queue);
 221
 222         return qmask;
 223 }
 224
 225 static void iwl_mvm_iface_hw_queues_iter(void *_data, u8 *mac,
 226                                          struct ieee80211_vif *vif)
 227 {
 228         struct iwl_mvm_hw_queues_iface_iterator_data *data = _data;
 229
 230         /* exclude the given vif */
 231         if (vif == data->exclude_vif)
 232                 return;
 233
 234         data->used_hw_queues |= iwl_mvm_mac_get_queues_mask(vif);
 235 }
 236
 237 static void iwl_mvm_mac_sta_hw_queues_iter(void *_data,
 238                                            struct ieee80211_sta *sta)
 239 {
 240         struct iwl_mvm_hw_queues_iface_iterator_data *data = _data;
 241         struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
 242
 243         /* Mark the queues used by the sta */
 244         data->used_hw_queues |= mvmsta->tfd_queue_msk;
 245 }
 246
 247 unsigned long iwl_mvm_get_used_hw_queues(struct iwl_mvm *mvm,
 248                                          struct ieee80211_vif *exclude_vif)
 249 {
 250         u8 sta_id;
 251         struct iwl_mvm_hw_queues_iface_iterator_data data = {
 252                 .exclude_vif = exclude_vif,
 253                 .used_hw_queues =
 254                         BIT(IWL_MVM_OFFCHANNEL_QUEUE) |
 255                         BIT(mvm->aux_queue),
 256         };
 257
 258         if (iwl_mvm_is_dqa_supported(mvm))
 259                 data.used_hw_queues |= BIT(IWL_MVM_DQA_CMD_QUEUE);
 260         else
 261                 data.used_hw_queues |= BIT(IWL_MVM_CMD_QUEUE);
 262
 263         lockdep_assert_held(&mvm->mutex);
 264
 265         /* mark all VIF used hw queues */
 266         ieee80211_iterate_active_interfaces_atomic(
 267                 mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
 268                 iwl_mvm_iface_hw_queues_iter, &data);
 269
 270         /* don't assign the same hw queues as TDLS stations */
 271         ieee80211_iterate_stations_atomic(mvm->hw,
 272                                           iwl_mvm_mac_sta_hw_queues_iter,
 273                                           &data);
 274
 275         /*
 276          * Some TDLS stations may be removed but are in the process of being
 277          * drained. Don't touch their queues.
 278          */
 279         for_each_set_bit(sta_id, mvm->sta_drained, IWL_MVM_STATION_COUNT)
 280                 data.used_hw_queues |= mvm->tfd_drained[sta_id];
 281
 282         return data.used_hw_queues;
 283 }
 284
 285 static void iwl_mvm_mac_iface_iterator(void *_data, u8 *mac,
 286                                        struct ieee80211_vif *vif)
 287 {
 288         struct iwl_mvm_mac_iface_iterator_data *data = _data;
 289         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
 290
 291         /* Iterator may already find the interface being added -- skip it */
 292         if (vif == data->vif) {
 293                 data->found_vif = true;
 294                 return;
 295         }
 296
 297         /* Mark MAC IDs as used by clearing the available bit, and
 298          * (below) mark TSFs as used if their existing use is not
 299          * compatible with the new interface type.
 300          * No locking or atomic bit operations are needed since the
 301          * data is on the stack of the caller function.
 302          */
 303         __clear_bit(mvmvif->id, data->available_mac_ids);
 304
 305         /* find a suitable tsf_id */
 306         iwl_mvm_mac_tsf_id_iter(_data, mac, vif);
 307 }
 308
 309 void iwl_mvm_mac_ctxt_recalc_tsf_id(struct iwl_mvm *mvm,
 310                                     struct ieee80211_vif *vif)
 311 {
 312         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
 313         struct iwl_mvm_mac_iface_iterator_data data = {
 314                 .mvm = mvm,
 315                 .vif = vif,
 316                 .available_tsf_ids = { (1 << NUM_TSF_IDS) - 1 },
 317                 /* no preference yet */
 318                 .preferred_tsf = NUM_TSF_IDS,
 319         };
 320
 321         ieee80211_iterate_active_interfaces_atomic(
 322                 mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
 323                 iwl_mvm_mac_tsf_id_iter, &data);
 324
 325         if (data.preferred_tsf != NUM_TSF_IDS)
 326                 mvmvif->tsf_id = data.preferred_tsf;
 327         else if (!test_bit(mvmvif->tsf_id, data.available_tsf_ids))
 328                 mvmvif->tsf_id = find_first_bit(data.available_tsf_ids,
 329                                                 NUM_TSF_IDS);
 330 }
 331
 332 static int iwl_mvm_mac_ctxt_allocate_resources(struct iwl_mvm *mvm,
 333                                                struct ieee80211_vif *vif)
 334 {
 335         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
 336         struct iwl_mvm_mac_iface_iterator_data data = {
 337                 .mvm = mvm,
 338                 .vif = vif,
 339                 .available_mac_ids = { (1 << NUM_MAC_INDEX_DRIVER) - 1 },
 340                 .available_tsf_ids = { (1 << NUM_TSF_IDS) - 1 },
 341                 /* no preference yet */
 342                 .preferred_tsf = NUM_TSF_IDS,
 343                 .found_vif = false,
 344         };
 345         u32 ac;
 346         int ret, i;
 347         unsigned long used_hw_queues;
 348
 349         /*
 350          * Allocate a MAC ID and a TSF for this MAC, along with the queues
 351          * and other resources.
 352          */
 353
 354         /*
 355          * Before the iterator, we start with all MAC IDs and TSFs available.
 356          *
 357          * During iteration, all MAC IDs are cleared that are in use by other
 358          * virtual interfaces, and all TSF IDs are cleared that can't be used
 359          * by this new virtual interface because they're used by an interface
 360          * that can't share it with the new one.
 361          * At the same time, we check if there's a preferred TSF in the case
 362          * that we should share it with another interface.
 363          */
 364
 365         /* Currently, MAC ID 0 should be used only for the managed/IBSS vif */
 366         switch (vif->type) {
 367         case NL80211_IFTYPE_ADHOC:
 368                 break;
 369         case NL80211_IFTYPE_STATION:
 370                 if (!vif->p2p)
 371                         break;
 372                 /* fall through */
 373         default:
 374                 __clear_bit(0, data.available_mac_ids);
 375         }
 376
 377         ieee80211_iterate_active_interfaces_atomic(
 378                 mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
 379                 iwl_mvm_mac_iface_iterator, &data);
 380
 381         used_hw_queues = iwl_mvm_get_used_hw_queues(mvm, vif);
 382
 383         /*
 384          * In the case we're getting here during resume, it's similar to
 385          * firmware restart, and with RESUME_ALL the iterator will find
 386          * the vif being added already.
 387          * We don't want to reassign any IDs in either case since doing
 388          * so would probably assign different IDs (as interfaces aren't
 389          * necessarily added in the same order), but the old IDs were
 390          * preserved anyway, so skip ID assignment for both resume and
 391          * recovery.
 392          */
 393         if (data.found_vif)
 394                 return 0;
 395
 396         /* Therefore, in recovery, we can't get here */
 397         if (WARN_ON_ONCE(test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)))
 398                 return -EBUSY;
 399
 400         mvmvif->id = find_first_bit(data.available_mac_ids,
 401                                     NUM_MAC_INDEX_DRIVER);
 402         if (mvmvif->id == NUM_MAC_INDEX_DRIVER) {
 403                 IWL_ERR(mvm, "Failed to init MAC context - no free ID!\n");
 404                 ret = -EIO;
 405                 goto exit_fail;
 406         }
 407
 408         if (data.preferred_tsf != NUM_TSF_IDS)
 409                 mvmvif->tsf_id = data.preferred_tsf;
 410         else
 411                 mvmvif->tsf_id = find_first_bit(data.available_tsf_ids,
 412                                                 NUM_TSF_IDS);
 413         if (mvmvif->tsf_id == NUM_TSF_IDS) {
 414                 IWL_ERR(mvm, "Failed to init MAC context - no free TSF!\n");
 415                 ret = -EIO;
 416                 goto exit_fail;
 417         }
 418
 419         mvmvif->color = 0;
 420
 421         INIT_LIST_HEAD(&mvmvif->time_event_data.list);
 422         mvmvif->time_event_data.id = TE_MAX;
 423
 424         /* No need to allocate data queues to P2P Device MAC.*/
 425         if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
 426                 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
 427                         vif->hw_queue[ac] = IEEE80211_INVAL_HW_QUEUE;
 428
 429                 return 0;
 430         }
 431
 432         /*
 433          * Find available queues, and allocate them to the ACs. When in
 434          * DQA-mode they aren't really used, and this is done only so the
 435          * mac80211 ieee80211_check_queues() function won't fail
 436          */
 437         for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
 438                 u8 queue = find_first_zero_bit(&used_hw_queues,
 439                                                mvm->first_agg_queue);
 440
 441                 if (!iwl_mvm_is_dqa_supported(mvm) &&
 442                     queue >= mvm->first_agg_queue) {
 443                         IWL_ERR(mvm, "Failed to allocate queue\n");
 444                         ret = -EIO;
 445                         goto exit_fail;
 446                 }
 447
 448                 __set_bit(queue, &used_hw_queues);
 449                 vif->hw_queue[ac] = queue;
 450         }
 451
 452         /* Allocate the CAB queue for softAP and GO interfaces */
 453         if (vif->type == NL80211_IFTYPE_AP) {
 454                 u8 queue;
 455
 456                 if (!iwl_mvm_is_dqa_supported(mvm)) {
 457                         queue = find_first_zero_bit(&used_hw_queues,
 458                                                     mvm->first_agg_queue);
 459
 460                         if (queue >= mvm->first_agg_queue) {
 461                                 IWL_ERR(mvm, "Failed to allocate cab queue\n");
 462                                 ret = -EIO;
 463                                 goto exit_fail;
 464                         }
 465                 } else {
 466                         queue = IWL_MVM_DQA_GCAST_QUEUE;
 467                 }
 468
 469                 vif->cab_queue = queue;
 470         } else {
 471                 vif->cab_queue = IEEE80211_INVAL_HW_QUEUE;
 472         }
 473
 474         mvmvif->bcast_sta.sta_id = IWL_MVM_STATION_COUNT;
 475         mvmvif->ap_sta_id = IWL_MVM_STATION_COUNT;
 476
 477         for (i = 0; i < NUM_IWL_MVM_SMPS_REQ; i++)
 478                 mvmvif->smps_requests[i] = IEEE80211_SMPS_AUTOMATIC;
 479
 480         return 0;
 481
 482 exit_fail:
 483         memset(mvmvif, 0, sizeof(struct iwl_mvm_vif));
 484         memset(vif->hw_queue, IEEE80211_INVAL_HW_QUEUE, sizeof(vif->hw_queue));
 485         vif->cab_queue = IEEE80211_INVAL_HW_QUEUE;
 486         return ret;
 487 }
 488
 489 int iwl_mvm_mac_ctxt_init(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
 490 {
 491         unsigned int wdg_timeout =
 492                 iwl_mvm_get_wd_timeout(mvm, vif, false, false);
 493         u32 ac;
 494         int ret;
 495
 496         lockdep_assert_held(&mvm->mutex);
 497
 498         ret = iwl_mvm_mac_ctxt_allocate_resources(mvm, vif);
 499         if (ret)
 500                 return ret;
 501
 502         switch (vif->type) {
 503         case NL80211_IFTYPE_P2P_DEVICE:
 504                 if (!iwl_mvm_is_dqa_supported(mvm))
 505                         iwl_mvm_enable_ac_txq(mvm, IWL_MVM_OFFCHANNEL_QUEUE,
 506                                               IWL_MVM_OFFCHANNEL_QUEUE,
 507                                               IWL_MVM_TX_FIFO_VO, 0,
 508                                               wdg_timeout);
 509                 break;
 510         case NL80211_IFTYPE_AP:
 511                 iwl_mvm_enable_ac_txq(mvm, vif->cab_queue, vif->cab_queue,
 512                                       IWL_MVM_TX_FIFO_MCAST, 0, wdg_timeout);
 513                 /* fall through */
 514         default:
 515                 /* If DQA is supported - queues will be enabled when needed */
 516                 if (iwl_mvm_is_dqa_supported(mvm))
 517                         break;
 518
 519                 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
 520                         iwl_mvm_enable_ac_txq(mvm, vif->hw_queue[ac],
 521                                               vif->hw_queue[ac],
 522                                               iwl_mvm_ac_to_tx_fifo[ac], 0,
 523                                               wdg_timeout);
 524                 break;
 525         }
 526
 527         return 0;
 528 }
 529
 530 void iwl_mvm_mac_ctxt_release(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
 531 {
 532         int ac;
 533
 534         lockdep_assert_held(&mvm->mutex);
 535
 536         switch (vif->type) {
 537         case NL80211_IFTYPE_P2P_DEVICE:
 538                 if (!iwl_mvm_is_dqa_supported(mvm))
 539                         iwl_mvm_disable_txq(mvm, IWL_MVM_OFFCHANNEL_QUEUE,
 540                                             IWL_MVM_OFFCHANNEL_QUEUE,
 541                                             IWL_MAX_TID_COUNT, 0);
 542
 543                 break;
 544         case NL80211_IFTYPE_AP:
 545                 iwl_mvm_disable_txq(mvm, vif->cab_queue, vif->cab_queue,
 546                                     IWL_MAX_TID_COUNT, 0);
 547
 548                 if (iwl_mvm_is_dqa_supported(mvm))
 549                         iwl_mvm_disable_txq(mvm,
 550                                             IWL_MVM_DQA_AP_PROBE_RESP_QUEUE,
 551                                             vif->hw_queue[0], IWL_MAX_TID_COUNT,
 552                                             0);
 553                 /* fall through */
 554         default:
 555                 /*
 556                  * If DQA is supported - queues were already disabled, since in
 557                  * DQA-mode the queues are a property of the STA and not of the
 558                  * vif, and at this point the STA was already deleted
 559                  */
 560                 if (iwl_mvm_is_dqa_supported(mvm))
 561                         break;
 562
 563                 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
 564                         iwl_mvm_disable_txq(mvm, vif->hw_queue[ac],
 565                                             vif->hw_queue[ac],
 566                                             IWL_MAX_TID_COUNT, 0);
 567         }
 568 }
 569
 570 static void iwl_mvm_ack_rates(struct iwl_mvm *mvm,
 571                               struct ieee80211_vif *vif,
 572                               enum nl80211_band band,
 573                               u8 *cck_rates, u8 *ofdm_rates)
 574 {
 575         struct ieee80211_supported_band *sband;
 576         unsigned long basic = vif->bss_conf.basic_rates;
 577         int lowest_present_ofdm = 100;
 578         int lowest_present_cck = 100;
 579         u8 cck = 0;
 580         u8 ofdm = 0;
 581         int i;
 582
 583         sband = mvm->hw->wiphy->bands[band];
 584
 585         for_each_set_bit(i, &basic, BITS_PER_LONG) {
 586                 int hw = sband->bitrates[i].hw_value;
 587                 if (hw >= IWL_FIRST_OFDM_RATE) {
 588                         ofdm |= BIT(hw - IWL_FIRST_OFDM_RATE);
 589                         if (lowest_present_ofdm > hw)
 590                                 lowest_present_ofdm = hw;
 591                 } else {
 592                         BUILD_BUG_ON(IWL_FIRST_CCK_RATE != 0);
 593
 594                         cck |= BIT(hw);
 595                         if (lowest_present_cck > hw)
 596                                 lowest_present_cck = hw;
 597                 }
 598         }
 599
 600         /*
 601          * Now we've got the basic rates as bitmaps in the ofdm and cck
 602          * variables. This isn't sufficient though, as there might not
 603          * be all the right rates in the bitmap. E.g. if the only basic
 604          * rates are 5.5 Mbps and 11 Mbps, we still need to add 1 Mbps
 605          * and 6 Mbps because the 802.11-2007 standard says in 9.6:
 606          *
 607          *    [...] a STA responding to a received frame shall transmit
 608          *    its Control Response frame [...] at the highest rate in the
 609          *    BSSBasicRateSet parameter that is less than or equal to the
 610          *    rate of the immediately previous frame in the frame exchange
 611          *    sequence ([...]) and that is of the same modulation class
 612          *    ([...]) as the received frame. If no rate contained in the
 613          *    BSSBasicRateSet parameter meets these conditions, then the
 614          *    control frame sent in response to a received frame shall be
 615          *    transmitted at the highest mandatory rate of the PHY that is
 616          *    less than or equal to the rate of the received frame, and
 617          *    that is of the same modulation class as the received frame.
 618          *
 619          * As a consequence, we need to add all mandatory rates that are
 620          * lower than all of the basic rates to these bitmaps.
 621          */
 622
 623         if (IWL_RATE_24M_INDEX < lowest_present_ofdm)
 624                 ofdm |= IWL_RATE_BIT_MSK(24) >> IWL_FIRST_OFDM_RATE;
 625         if (IWL_RATE_12M_INDEX < lowest_present_ofdm)
 626                 ofdm |= IWL_RATE_BIT_MSK(12) >> IWL_FIRST_OFDM_RATE;
 627         /* 6M already there or needed so always add */
 628         ofdm |= IWL_RATE_BIT_MSK(6) >> IWL_FIRST_OFDM_RATE;
 629
 630         /*
 631          * CCK is a bit more complex with DSSS vs. HR/DSSS vs. ERP.
 632          * Note, however:
 633          *  - if no CCK rates are basic, it must be ERP since there must
 634          *    be some basic rates at all, so they're OFDM => ERP PHY
 635          *    (or we're in 5 GHz, and the cck bitmap will never be used)
 636          *  - if 11M is a basic rate, it must be ERP as well, so add 5.5M
 637          *  - if 5.5M is basic, 1M and 2M are mandatory
 638          *  - if 2M is basic, 1M is mandatory
 639          *  - if 1M is basic, that's the only valid ACK rate.
 640          * As a consequence, it's not as complicated as it sounds, just add
 641          * any lower rates to the ACK rate bitmap.
 642          */
 643         if (IWL_RATE_11M_INDEX < lowest_present_cck)
 644                 cck |= IWL_RATE_BIT_MSK(11) >> IWL_FIRST_CCK_RATE;
 645         if (IWL_RATE_5M_INDEX < lowest_present_cck)
 646                 cck |= IWL_RATE_BIT_MSK(5) >> IWL_FIRST_CCK_RATE;
 647         if (IWL_RATE_2M_INDEX < lowest_present_cck)
 648                 cck |= IWL_RATE_BIT_MSK(2) >> IWL_FIRST_CCK_RATE;
 649         /* 1M already there or needed so always add */
 650         cck |= IWL_RATE_BIT_MSK(1) >> IWL_FIRST_CCK_RATE;
 651
 652         *cck_rates = cck;
 653         *ofdm_rates = ofdm;
 654 }
 655
 656 static void iwl_mvm_mac_ctxt_set_ht_flags(struct iwl_mvm *mvm,
 657                                          struct ieee80211_vif *vif,
 658                                          struct iwl_mac_ctx_cmd *cmd)
 659 {
 660         /* for both sta and ap, ht_operation_mode hold the protection_mode */
 661         u8 protection_mode = vif->bss_conf.ht_operation_mode &
 662                                  IEEE80211_HT_OP_MODE_PROTECTION;
 663         /* The fw does not distinguish between ht and fat */
 664         u32 ht_flag = MAC_PROT_FLG_HT_PROT | MAC_PROT_FLG_FAT_PROT;
 665
 666         IWL_DEBUG_RATE(mvm, "protection mode set to %d\n", protection_mode);
 667         /*
 668          * See section 9.23.3.1 of IEEE 80211-2012.
 669          * Nongreenfield HT STAs Present is not supported.
 670          */
 671         switch (protection_mode) {
 672         case IEEE80211_HT_OP_MODE_PROTECTION_NONE:
 673                 break;
 674         case IEEE80211_HT_OP_MODE_PROTECTION_NONMEMBER:
 675         case IEEE80211_HT_OP_MODE_PROTECTION_NONHT_MIXED:
 676                 cmd->protection_flags |= cpu_to_le32(ht_flag);
 677                 break;
 678         case IEEE80211_HT_OP_MODE_PROTECTION_20MHZ:
 679                 /* Protect when channel wider than 20MHz */
 680                 if (vif->bss_conf.chandef.width > NL80211_CHAN_WIDTH_20)
 681                         cmd->protection_flags |= cpu_to_le32(ht_flag);
 682                 break;
 683         default:
 684                 IWL_ERR(mvm, "Illegal protection mode %d\n",
 685                         protection_mode);
 686                 break;
 687         }
 688 }
 689
 690 static void iwl_mvm_mac_ctxt_cmd_common(struct iwl_mvm *mvm,
 691                                         struct ieee80211_vif *vif,
 692                                         struct iwl_mac_ctx_cmd *cmd,
 693                                         const u8 *bssid_override,
 694                                         u32 action)
 695 {
 696         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
 697         struct ieee80211_chanctx_conf *chanctx;
 698         bool ht_enabled = !!(vif->bss_conf.ht_operation_mode &
 699                              IEEE80211_HT_OP_MODE_PROTECTION);
 700         u8 cck_ack_rates, ofdm_ack_rates;
 701         const u8 *bssid = bssid_override ?: vif->bss_conf.bssid;
 702         int i;
 703
 704         cmd->id_and_color = cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id,
 705                                                             mvmvif->color));
 706         cmd->action = cpu_to_le32(action);
 707
 708         switch (vif->type) {
 709         case NL80211_IFTYPE_STATION:
 710                 if (vif->p2p)
 711                         cmd->mac_type = cpu_to_le32(FW_MAC_TYPE_P2P_STA);
 712                 else
 713                         cmd->mac_type = cpu_to_le32(FW_MAC_TYPE_BSS_STA);
 714                 break;
 715         case NL80211_IFTYPE_AP:
 716                 cmd->mac_type = cpu_to_le32(FW_MAC_TYPE_GO);
 717                 break;
 718         case NL80211_IFTYPE_MONITOR:
 719                 cmd->mac_type = cpu_to_le32(FW_MAC_TYPE_LISTENER);
 720                 break;
 721         case NL80211_IFTYPE_P2P_DEVICE:
 722                 cmd->mac_type = cpu_to_le32(FW_MAC_TYPE_P2P_DEVICE);
 723                 break;
 724         case NL80211_IFTYPE_ADHOC:
 725                 cmd->mac_type = cpu_to_le32(FW_MAC_TYPE_IBSS);
 726                 break;
 727         default:
 728                 WARN_ON_ONCE(1);
 729         }
 730
 731         cmd->tsf_id = cpu_to_le32(mvmvif->tsf_id);
 732
 733         memcpy(cmd->node_addr, vif->addr, ETH_ALEN);
 734
 735         if (bssid)
 736                 memcpy(cmd->bssid_addr, bssid, ETH_ALEN);
 737         else
 738                 eth_broadcast_addr(cmd->bssid_addr);
 739
 740         rcu_read_lock();
 741         chanctx = rcu_dereference(vif->chanctx_conf);
 742         iwl_mvm_ack_rates(mvm, vif, chanctx ? chanctx->def.chan->band
 743                                             : NL80211_BAND_2GHZ,
 744                           &cck_ack_rates, &ofdm_ack_rates);
 745         rcu_read_unlock();
 746
 747         cmd->cck_rates = cpu_to_le32((u32)cck_ack_rates);
 748         cmd->ofdm_rates = cpu_to_le32((u32)ofdm_ack_rates);
 749
 750         cmd->cck_short_preamble =
 751                 cpu_to_le32(vif->bss_conf.use_short_preamble ?
 752                             MAC_FLG_SHORT_PREAMBLE : 0);
 753         cmd->short_slot =
 754                 cpu_to_le32(vif->bss_conf.use_short_slot ?
 755                             MAC_FLG_SHORT_SLOT : 0);
 756
 757         cmd->filter_flags = cpu_to_le32(MAC_FILTER_ACCEPT_GRP);
 758
 759         for (i = 0; i < IEEE80211_NUM_ACS; i++) {
 760                 u8 txf = iwl_mvm_ac_to_tx_fifo[i];
 761
 762                 cmd->ac[txf].cw_min =
 763                         cpu_to_le16(mvmvif->queue_params[i].cw_min);
 764                 cmd->ac[txf].cw_max =
 765                         cpu_to_le16(mvmvif->queue_params[i].cw_max);
 766                 cmd->ac[txf].edca_txop =
 767                         cpu_to_le16(mvmvif->queue_params[i].txop * 32);
 768                 cmd->ac[txf].aifsn = mvmvif->queue_params[i].aifs;
 769                 cmd->ac[txf].fifos_mask = BIT(txf);
 770         }
 771
 772         if (vif->type == NL80211_IFTYPE_AP) {
 773                 /* in AP mode, the MCAST FIFO takes the EDCA params from VO */
 774                 cmd->ac[IWL_MVM_TX_FIFO_VO].fifos_mask |=
 775                         BIT(IWL_MVM_TX_FIFO_MCAST);
 776
 777                 /*
 778                  * in AP mode, pass probe requests and beacons from other APs
 779                  * (needed for ht protection); when there're no any associated
 780                  * station don't ask FW to pass beacons to prevent unnecessary
 781                  * wake-ups.
 782                  */
 783                 cmd->filter_flags |= cpu_to_le32(MAC_FILTER_IN_PROBE_REQUEST);
 784                 if (mvmvif->ap_assoc_sta_count || !mvm->drop_bcn_ap_mode) {
 785                         cmd->filter_flags |= cpu_to_le32(MAC_FILTER_IN_BEACON);
 786                         IWL_DEBUG_HC(mvm, "Asking FW to pass beacons\n");
 787                 } else {
 788                         IWL_DEBUG_HC(mvm, "No need to receive beacons\n");
 789                 }
 790         }
 791
 792         if (vif->bss_conf.qos)
 793                 cmd->qos_flags |= cpu_to_le32(MAC_QOS_FLG_UPDATE_EDCA);
 794
 795         if (vif->bss_conf.use_cts_prot)
 796                 cmd->protection_flags |= cpu_to_le32(MAC_PROT_FLG_TGG_PROTECT);
 797
 798         IWL_DEBUG_RATE(mvm, "use_cts_prot %d, ht_operation_mode %d\n",
 799                        vif->bss_conf.use_cts_prot,
 800                        vif->bss_conf.ht_operation_mode);
 801         if (vif->bss_conf.chandef.width != NL80211_CHAN_WIDTH_20_NOHT)
 802                 cmd->qos_flags |= cpu_to_le32(MAC_QOS_FLG_TGN);
 803         if (ht_enabled)
 804                 iwl_mvm_mac_ctxt_set_ht_flags(mvm, vif, cmd);
 805 }
 806
 807 static int iwl_mvm_mac_ctxt_send_cmd(struct iwl_mvm *mvm,
 808                                      struct iwl_mac_ctx_cmd *cmd)
 809 {
 810         int ret = iwl_mvm_send_cmd_pdu(mvm, MAC_CONTEXT_CMD, 0,
 811                                        sizeof(*cmd), cmd);
 812         if (ret)
 813                 IWL_ERR(mvm, "Failed to send MAC context (action:%d): %d\n",
 814                         le32_to_cpu(cmd->action), ret);
 815         return ret;
 816 }
 817
 818 static int iwl_mvm_mac_ctxt_cmd_sta(struct iwl_mvm *mvm,
 819                                     struct ieee80211_vif *vif,
 820                                     u32 action, bool force_assoc_off,
 821                                     const u8 *bssid_override)
 822 {
 823         struct iwl_mac_ctx_cmd cmd = {};
 824         struct iwl_mac_data_sta *ctxt_sta;
 825
 826         WARN_ON(vif->type != NL80211_IFTYPE_STATION);
 827
 828         /* Fill the common data for all mac context types */
 829         iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, bssid_override, action);
 830
 831         if (vif->p2p) {
 832                 struct ieee80211_p2p_noa_attr *noa =
 833                         &vif->bss_conf.p2p_noa_attr;
 834
 835                 cmd.p2p_sta.ctwin = cpu_to_le32(noa->oppps_ctwindow &
 836                                         IEEE80211_P2P_OPPPS_CTWINDOW_MASK);
 837                 ctxt_sta = &cmd.p2p_sta.sta;
 838         } else {
 839                 ctxt_sta = &cmd.sta;
 840         }
 841
 842         /* We need the dtim_period to set the MAC as associated */
 843         if (vif->bss_conf.assoc && vif->bss_conf.dtim_period &&
 844             !force_assoc_off) {
 845                 u32 dtim_offs;
 846
 847                 /*
 848                  * The DTIM count counts down, so when it is N that means N
 849                  * more beacon intervals happen until the DTIM TBTT. Therefore
 850                  * add this to the current time. If that ends up being in the
 851                  * future, the firmware will handle it.
 852                  *
 853                  * Also note that the system_timestamp (which we get here as
 854                  * "sync_device_ts") and TSF timestamp aren't at exactly the
 855                  * same offset in the frame -- the TSF is at the first symbol
 856                  * of the TSF, the system timestamp is at signal acquisition
 857                  * time. This means there's an offset between them of at most
 858                  * a few hundred microseconds (24 * 8 bits + PLCP time gives
 859                  * 384us in the longest case), this is currently not relevant
 860                  * as the firmware wakes up around 2ms before the TBTT.
 861                  */
 862                 dtim_offs = vif->bss_conf.sync_dtim_count *
 863                                 vif->bss_conf.beacon_int;
 864                 /* convert TU to usecs */
 865                 dtim_offs *= 1024;
 866
 867                 ctxt_sta->dtim_tsf =
 868                         cpu_to_le64(vif->bss_conf.sync_tsf + dtim_offs);
 869                 ctxt_sta->dtim_time =
 870                         cpu_to_le32(vif->bss_conf.sync_device_ts + dtim_offs);
 871
 872                 IWL_DEBUG_INFO(mvm, "DTIM TBTT is 0x%llx/0x%x, offset %d\n",
 873                                le64_to_cpu(ctxt_sta->dtim_tsf),
 874                                le32_to_cpu(ctxt_sta->dtim_time),
 875                                dtim_offs);
 876
 877                 ctxt_sta->is_assoc = cpu_to_le32(1);
 878         } else {
 879                 ctxt_sta->is_assoc = cpu_to_le32(0);
 880
 881                 /* Allow beacons to pass through as long as we are not
 882                  * associated, or we do not have dtim period information.
 883                  */
 884                 cmd.filter_flags |= cpu_to_le32(MAC_FILTER_IN_BEACON);
 885         }
 886
 887         ctxt_sta->bi = cpu_to_le32(vif->bss_conf.beacon_int);
 888         ctxt_sta->bi_reciprocal =
 889                 cpu_to_le32(iwl_mvm_reciprocal(vif->bss_conf.beacon_int));
 890         ctxt_sta->dtim_interval = cpu_to_le32(vif->bss_conf.beacon_int *
 891                                               vif->bss_conf.dtim_period);
 892         ctxt_sta->dtim_reciprocal =
 893                 cpu_to_le32(iwl_mvm_reciprocal(vif->bss_conf.beacon_int *
 894                                                vif->bss_conf.dtim_period));
 895
 896         ctxt_sta->listen_interval = cpu_to_le32(mvm->hw->conf.listen_interval);
 897         ctxt_sta->assoc_id = cpu_to_le32(vif->bss_conf.aid);
 898
 899         if (vif->probe_req_reg && vif->bss_conf.assoc && vif->p2p)
 900                 cmd.filter_flags |= cpu_to_le32(MAC_FILTER_IN_PROBE_REQUEST);
 901
 902         return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
 903 }
 904
 905 static int iwl_mvm_mac_ctxt_cmd_listener(struct iwl_mvm *mvm,
 906                                          struct ieee80211_vif *vif,
 907                                          u32 action)
 908 {
 909         struct iwl_mac_ctx_cmd cmd = {};
 910         u32 tfd_queue_msk = 0;
 911         int ret, i;
 912
 913         WARN_ON(vif->type != NL80211_IFTYPE_MONITOR);
 914
 915         iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);
 916
 917         for (i = 0; i < IEEE80211_NUM_ACS; i++)
 918                 if (vif->hw_queue[i] != IEEE80211_INVAL_HW_QUEUE)
 919                         tfd_queue_msk |= BIT(vif->hw_queue[i]);
 920
 921         cmd.filter_flags = cpu_to_le32(MAC_FILTER_IN_PROMISC |
 922                                        MAC_FILTER_IN_CONTROL_AND_MGMT |
 923                                        MAC_FILTER_IN_BEACON |
 924                                        MAC_FILTER_IN_PROBE_REQUEST |
 925                                        MAC_FILTER_IN_CRC32);
 926         ieee80211_hw_set(mvm->hw, RX_INCLUDES_FCS);
 927
 928         /* Allocate sniffer station */
 929         ret = iwl_mvm_allocate_int_sta(mvm, &mvm->snif_sta, tfd_queue_msk,
 930                                        vif->type);
 931         if (ret)
 932                 return ret;
 933
 934         return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
 935 }
 936
 937 static int iwl_mvm_mac_ctxt_cmd_ibss(struct iwl_mvm *mvm,
 938                                      struct ieee80211_vif *vif,
 939                                      u32 action)
 940 {
 941         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
 942         struct iwl_mac_ctx_cmd cmd = {};
 943
 944         WARN_ON(vif->type != NL80211_IFTYPE_ADHOC);
 945
 946         iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);
 947
 948         cmd.filter_flags = cpu_to_le32(MAC_FILTER_IN_BEACON |
 949                                        MAC_FILTER_IN_PROBE_REQUEST);
 950
 951         /* cmd.ibss.beacon_time/cmd.ibss.beacon_tsf are curently ignored */
 952         cmd.ibss.bi = cpu_to_le32(vif->bss_conf.beacon_int);
 953         cmd.ibss.bi_reciprocal =
 954                 cpu_to_le32(iwl_mvm_reciprocal(vif->bss_conf.beacon_int));
 955
 956         /* TODO: Assumes that the beacon id == mac context id */
 957         cmd.ibss.beacon_template = cpu_to_le32(mvmvif->id);
 958
 959         return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
 960 }
 961
 962 struct iwl_mvm_go_iterator_data {
 963         bool go_active;
 964 };
 965
 966 static void iwl_mvm_go_iterator(void *_data, u8 *mac, struct ieee80211_vif *vif)
 967 {
 968         struct iwl_mvm_go_iterator_data *data = _data;
 969         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
 970
 971         if (vif->type == NL80211_IFTYPE_AP && vif->p2p &&
 972             mvmvif->ap_ibss_active)
 973                 data->go_active = true;
 974 }
 975
 976 static int iwl_mvm_mac_ctxt_cmd_p2p_device(struct iwl_mvm *mvm,
 977                                            struct ieee80211_vif *vif,
 978                                            u32 action)
 979 {
 980         struct iwl_mac_ctx_cmd cmd = {};
 981         struct iwl_mvm_go_iterator_data data = {};
 982
 983         WARN_ON(vif->type != NL80211_IFTYPE_P2P_DEVICE);
 984
 985         iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);
 986
 987         cmd.protection_flags |= cpu_to_le32(MAC_PROT_FLG_TGG_PROTECT);
 988
 989         /* Override the filter flags to accept only probe requests */
 990         cmd.filter_flags = cpu_to_le32(MAC_FILTER_IN_PROBE_REQUEST);
 991
 992         /*
 993          * This flag should be set to true when the P2P Device is
 994          * discoverable and there is at least another active P2P GO. Settings
 995          * this flag will allow the P2P Device to be discoverable on other
 996          * channels in addition to its listen channel.
 997          * Note that this flag should not be set in other cases as it opens the
 998          * Rx filters on all MAC and increases the number of interrupts.
 999          */
1000         ieee80211_iterate_active_interfaces_atomic(
1001                 mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
1002                 iwl_mvm_go_iterator, &data);
1003
1004         cmd.p2p_dev.is_disc_extended = cpu_to_le32(data.go_active ? 1 : 0);
1005         return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
1006 }
1007
1008 static void iwl_mvm_mac_ctxt_set_tim(struct iwl_mvm *mvm,
1009                                      struct iwl_mac_beacon_cmd_v6 *beacon_cmd,
1010                                      u8 *beacon, u32 frame_size)
1011 {
1012         u32 tim_idx;
1013         struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)beacon;
1014
1015         /* The index is relative to frame start but we start looking at the
1016          * variable-length part of the beacon. */
1017         tim_idx = mgmt->u.beacon.variable - beacon;
1018
1019         /* Parse variable-length elements of beacon to find WLAN_EID_TIM */
1020         while ((tim_idx < (frame_size - 2)) &&
1021                         (beacon[tim_idx] != WLAN_EID_TIM))
1022                 tim_idx += beacon[tim_idx+1] + 2;
1023
1024         /* If TIM field was found, set variables */
1025         if ((tim_idx < (frame_size - 1)) && (beacon[tim_idx] == WLAN_EID_TIM)) {
1026                 beacon_cmd->tim_idx = cpu_to_le32(tim_idx);
1027                 beacon_cmd->tim_size = cpu_to_le32((u32)beacon[tim_idx+1]);
1028         } else {
1029                 IWL_WARN(mvm, "Unable to find TIM Element in beacon\n");
1030         }
1031 }
1032
1033 static u32 iwl_mvm_find_ie_offset(u8 *beacon, u8 eid, u32 frame_size)
1034 {
1035         struct ieee80211_mgmt *mgmt = (void *)beacon;
1036         const u8 *ie;
1037
1038         if (WARN_ON_ONCE(frame_size <= (mgmt->u.beacon.variable - beacon)))
1039                 return 0;
1040
1041         frame_size -= mgmt->u.beacon.variable - beacon;
1042
1043         ie = cfg80211_find_ie(eid, mgmt->u.beacon.variable, frame_size);
1044         if (!ie)
1045                 return 0;
1046
1047         return ie - beacon;
1048 }
1049
1050 static int iwl_mvm_mac_ctxt_send_beacon(struct iwl_mvm *mvm,
1051                                         struct ieee80211_vif *vif,
1052                                         struct sk_buff *beacon)
1053 {
1054         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1055         struct iwl_host_cmd cmd = {
1056                 .id = BEACON_TEMPLATE_CMD,
1057                 .flags = CMD_ASYNC,
1058         };
1059         union {
1060                 struct iwl_mac_beacon_cmd_v6 beacon_cmd_v6;
1061                 struct iwl_mac_beacon_cmd beacon_cmd;
1062         } u = {};
1063         struct ieee80211_tx_info *info;
1064         u32 beacon_skb_len;
1065         u32 rate, tx_flags;
1066
1067         if (WARN_ON(!beacon))
1068                 return -EINVAL;
1069
1070         beacon_skb_len = beacon->len;
1071
1072         /* TODO: for now the beacon template id is set to be the mac context id.
1073          * Might be better to handle it as another resource ... */
1074         u.beacon_cmd_v6.template_id = cpu_to_le32((u32)mvmvif->id);
1075         info = IEEE80211_SKB_CB(beacon);
1076
1077         /* Set up TX command fields */
1078         u.beacon_cmd_v6.tx.len = cpu_to_le16((u16)beacon_skb_len);
1079         u.beacon_cmd_v6.tx.sta_id = mvmvif->bcast_sta.sta_id;
1080         u.beacon_cmd_v6.tx.life_time = cpu_to_le32(TX_CMD_LIFE_TIME_INFINITE);
1081         tx_flags = TX_CMD_FLG_SEQ_CTL | TX_CMD_FLG_TSF;
1082         tx_flags |=
1083                 iwl_mvm_bt_coex_tx_prio(mvm, (void *)beacon->data, info, 0) <<
1084                                                 TX_CMD_FLG_BT_PRIO_POS;
1085         u.beacon_cmd_v6.tx.tx_flags = cpu_to_le32(tx_flags);
1086
1087         if (!fw_has_capa(&mvm->fw->ucode_capa,
1088                          IWL_UCODE_TLV_CAPA_BEACON_ANT_SELECTION)) {
1089                 mvm->mgmt_last_antenna_idx =
1090                         iwl_mvm_next_antenna(mvm, iwl_mvm_get_valid_tx_ant(mvm),
1091                                              mvm->mgmt_last_antenna_idx);
1092         }
1093
1094         u.beacon_cmd_v6.tx.rate_n_flags =
1095                 cpu_to_le32(BIT(mvm->mgmt_last_antenna_idx) <<
1096                             RATE_MCS_ANT_POS);
1097
1098         if (info->band == NL80211_BAND_5GHZ || vif->p2p) {
1099                 rate = IWL_FIRST_OFDM_RATE;
1100         } else {
1101                 rate = IWL_FIRST_CCK_RATE;
1102                 u.beacon_cmd_v6.tx.rate_n_flags |=
1103                                         cpu_to_le32(RATE_MCS_CCK_MSK);
1104         }
1105         u.beacon_cmd_v6.tx.rate_n_flags |=
1106                 cpu_to_le32(iwl_mvm_mac80211_idx_to_hwrate(rate));
1107
1108         /* Set up TX beacon command fields */
1109         if (vif->type == NL80211_IFTYPE_AP)
1110                 iwl_mvm_mac_ctxt_set_tim(mvm, &u.beacon_cmd_v6,
1111                                          beacon->data,
1112                                          beacon_skb_len);
1113
1114         /* Submit command */
1115
1116         if (fw_has_capa(&mvm->fw->ucode_capa,
1117                         IWL_UCODE_TLV_CAPA_CSA_AND_TBTT_OFFLOAD)) {
1118                 u.beacon_cmd.csa_offset =
1119                         cpu_to_le32(iwl_mvm_find_ie_offset(beacon->data,
1120                                                     WLAN_EID_CHANNEL_SWITCH,
1121                                                     beacon_skb_len));
1122                 u.beacon_cmd.ecsa_offset =
1123                         cpu_to_le32(iwl_mvm_find_ie_offset(beacon->data,
1124                                                     WLAN_EID_EXT_CHANSWITCH_ANN,
1125                                                     beacon_skb_len));
1126
1127                 cmd.len[0] = sizeof(u.beacon_cmd);
1128         } else {
1129                 cmd.len[0] = sizeof(u.beacon_cmd_v6);
1130         }
1131
1132         cmd.data[0] = &u;
1133         cmd.dataflags[0] = 0;
1134         cmd.len[1] = beacon_skb_len;
1135         cmd.data[1] = beacon->data;
1136         cmd.dataflags[1] = IWL_HCMD_DFL_DUP;
1137
1138         return iwl_mvm_send_cmd(mvm, &cmd);
1139 }
1140
1141 /* The beacon template for the AP/GO/IBSS has changed and needs update */
1142 int iwl_mvm_mac_ctxt_beacon_changed(struct iwl_mvm *mvm,
1143                                     struct ieee80211_vif *vif)
1144 {
1145         struct sk_buff *beacon;
1146         int ret;
1147
1148         WARN_ON(vif->type != NL80211_IFTYPE_AP &&
1149                 vif->type != NL80211_IFTYPE_ADHOC);
1150
1151         beacon = ieee80211_beacon_get_template(mvm->hw, vif, NULL);
1152         if (!beacon)
1153                 return -ENOMEM;
1154
1155         ret = iwl_mvm_mac_ctxt_send_beacon(mvm, vif, beacon);
1156         dev_kfree_skb(beacon);
1157         return ret;
1158 }
1159
1160 struct iwl_mvm_mac_ap_iterator_data {
1161         struct iwl_mvm *mvm;
1162         struct ieee80211_vif *vif;
1163         u32 beacon_device_ts;
1164         u16 beacon_int;
1165 };
1166
1167 /* Find the beacon_device_ts and beacon_int for a managed interface */
1168 static void iwl_mvm_mac_ap_iterator(void *_data, u8 *mac,
1169                                     struct ieee80211_vif *vif)
1170 {
1171         struct iwl_mvm_mac_ap_iterator_data *data = _data;
1172
1173         if (vif->type != NL80211_IFTYPE_STATION || !vif->bss_conf.assoc)
1174                 return;
1175
1176         /* Station client has higher priority over P2P client*/
1177         if (vif->p2p && data->beacon_device_ts)
1178                 return;
1179
1180         data->beacon_device_ts = vif->bss_conf.sync_device_ts;
1181         data->beacon_int = vif->bss_conf.beacon_int;
1182 }
1183
1184 /*
1185  * Fill the specific data for mac context of type AP of P2P GO
1186  */
1187 static void iwl_mvm_mac_ctxt_cmd_fill_ap(struct iwl_mvm *mvm,
1188                                          struct ieee80211_vif *vif,
1189                                          struct iwl_mac_data_ap *ctxt_ap,
1190                                          bool add)
1191 {
1192         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1193         struct iwl_mvm_mac_ap_iterator_data data = {
1194                 .mvm = mvm,
1195                 .vif = vif,
1196                 .beacon_device_ts = 0
1197         };
1198
1199         ctxt_ap->bi = cpu_to_le32(vif->bss_conf.beacon_int);
1200         ctxt_ap->bi_reciprocal =
1201                 cpu_to_le32(iwl_mvm_reciprocal(vif->bss_conf.beacon_int));
1202         ctxt_ap->dtim_interval = cpu_to_le32(vif->bss_conf.beacon_int *
1203                                              vif->bss_conf.dtim_period);
1204         ctxt_ap->dtim_reciprocal =
1205                 cpu_to_le32(iwl_mvm_reciprocal(vif->bss_conf.beacon_int *
1206                                                vif->bss_conf.dtim_period));
1207
1208         ctxt_ap->mcast_qid = cpu_to_le32(vif->cab_queue);
1209
1210         /*
1211          * Only set the beacon time when the MAC is being added, when we
1212          * just modify the MAC then we should keep the time -- the firmware
1213          * can otherwise have a "jumping" TBTT.
1214          */
1215         if (add) {
1216                 /*
1217                  * If there is a station/P2P client interface which is
1218                  * associated, set the AP's TBTT far enough from the station's
1219                  * TBTT. Otherwise, set it to the current system time
1220                  */
1221                 ieee80211_iterate_active_interfaces_atomic(
1222                         mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
1223                         iwl_mvm_mac_ap_iterator, &data);
1224
1225                 if (data.beacon_device_ts) {
1226                         u32 rand = (prandom_u32() % (64 - 36)) + 36;
1227                         mvmvif->ap_beacon_time = data.beacon_device_ts +
1228                                 ieee80211_tu_to_usec(data.beacon_int * rand /
1229                                                      100);
1230                 } else {
1231                         mvmvif->ap_beacon_time =
1232                                 iwl_read_prph(mvm->trans,
1233                                               DEVICE_SYSTEM_TIME_REG);
1234                 }
1235         }
1236
1237         ctxt_ap->beacon_time = cpu_to_le32(mvmvif->ap_beacon_time);
1238         ctxt_ap->beacon_tsf = 0; /* unused */
1239
1240         /* TODO: Assume that the beacon id == mac context id */
1241         ctxt_ap->beacon_template = cpu_to_le32(mvmvif->id);
1242 }
1243
1244 static int iwl_mvm_mac_ctxt_cmd_ap(struct iwl_mvm *mvm,
1245                                    struct ieee80211_vif *vif,
1246                                    u32 action)
1247 {
1248         struct iwl_mac_ctx_cmd cmd = {};
1249
1250         WARN_ON(vif->type != NL80211_IFTYPE_AP || vif->p2p);
1251
1252         /* Fill the common data for all mac context types */
1253         iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);
1254
1255         /* Fill the data specific for ap mode */
1256         iwl_mvm_mac_ctxt_cmd_fill_ap(mvm, vif, &cmd.ap,
1257                                      action == FW_CTXT_ACTION_ADD);
1258
1259         return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
1260 }
1261
1262 static int iwl_mvm_mac_ctxt_cmd_go(struct iwl_mvm *mvm,
1263                                    struct ieee80211_vif *vif,
1264                                    u32 action)
1265 {
1266         struct iwl_mac_ctx_cmd cmd = {};
1267         struct ieee80211_p2p_noa_attr *noa = &vif->bss_conf.p2p_noa_attr;
1268
1269         WARN_ON(vif->type != NL80211_IFTYPE_AP || !vif->p2p);
1270
1271         /* Fill the common data for all mac context types */
1272         iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);
1273
1274         /* Fill the data specific for GO mode */
1275         iwl_mvm_mac_ctxt_cmd_fill_ap(mvm, vif, &cmd.go.ap,
1276                                      action == FW_CTXT_ACTION_ADD);
1277
1278         cmd.go.ctwin = cpu_to_le32(noa->oppps_ctwindow &
1279                                         IEEE80211_P2P_OPPPS_CTWINDOW_MASK);
1280         cmd.go.opp_ps_enabled =
1281                         cpu_to_le32(!!(noa->oppps_ctwindow &
1282                                         IEEE80211_P2P_OPPPS_ENABLE_BIT));
1283
1284         return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
1285 }
1286
1287 static int iwl_mvm_mac_ctx_send(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
1288                                 u32 action, bool force_assoc_off,
1289                                 const u8 *bssid_override)
1290 {
1291         switch (vif->type) {
1292         case NL80211_IFTYPE_STATION:
1293                 return iwl_mvm_mac_ctxt_cmd_sta(mvm, vif, action,
1294                                                 force_assoc_off,
1295                                                 bssid_override);
1296                 break;
1297         case NL80211_IFTYPE_AP:
1298                 if (!vif->p2p)
1299                         return iwl_mvm_mac_ctxt_cmd_ap(mvm, vif, action);
1300                 else
1301                         return iwl_mvm_mac_ctxt_cmd_go(mvm, vif, action);
1302                 break;
1303         case NL80211_IFTYPE_MONITOR:
1304                 return iwl_mvm_mac_ctxt_cmd_listener(mvm, vif, action);
1305         case NL80211_IFTYPE_P2P_DEVICE:
1306                 return iwl_mvm_mac_ctxt_cmd_p2p_device(mvm, vif, action);
1307         case NL80211_IFTYPE_ADHOC:
1308                 return iwl_mvm_mac_ctxt_cmd_ibss(mvm, vif, action);
1309         default:
1310                 break;
1311         }
1312
1313         return -EOPNOTSUPP;
1314 }
1315
1316 int iwl_mvm_mac_ctxt_add(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
1317 {
1318         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1319         int ret;
1320
1321         if (WARN_ONCE(mvmvif->uploaded, "Adding active MAC %pM/%d\n",
1322                       vif->addr, ieee80211_vif_type_p2p(vif)))
1323                 return -EIO;
1324
1325         ret = iwl_mvm_mac_ctx_send(mvm, vif, FW_CTXT_ACTION_ADD,
1326                                    true, NULL);
1327         if (ret)
1328                 return ret;
1329
1330         /* will only do anything at resume from D3 time */
1331         iwl_mvm_set_last_nonqos_seq(mvm, vif);
1332
1333         mvmvif->uploaded = true;
1334         return 0;
1335 }
1336
1337 int iwl_mvm_mac_ctxt_changed(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
1338                              bool force_assoc_off, const u8 *bssid_override)
1339 {
1340         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1341
1342         if (WARN_ONCE(!mvmvif->uploaded, "Changing inactive MAC %pM/%d\n",
1343                       vif->addr, ieee80211_vif_type_p2p(vif)))
1344                 return -EIO;
1345
1346         return iwl_mvm_mac_ctx_send(mvm, vif, FW_CTXT_ACTION_MODIFY,
1347                                     force_assoc_off, bssid_override);
1348 }
1349
1350 int iwl_mvm_mac_ctxt_remove(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
1351 {
1352         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1353         struct iwl_mac_ctx_cmd cmd;
1354         int ret;
1355
1356         if (WARN_ONCE(!mvmvif->uploaded, "Removing inactive MAC %pM/%d\n",
1357                       vif->addr, ieee80211_vif_type_p2p(vif)))
1358                 return -EIO;
1359
1360         memset(&cmd, 0, sizeof(cmd));
1361
1362         cmd.id_and_color = cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id,
1363                                                            mvmvif->color));
1364         cmd.action = cpu_to_le32(FW_CTXT_ACTION_REMOVE);
1365
1366         ret = iwl_mvm_send_cmd_pdu(mvm, MAC_CONTEXT_CMD, 0,
1367                                    sizeof(cmd), &cmd);
1368         if (ret) {
1369                 IWL_ERR(mvm, "Failed to remove MAC context: %d\n", ret);
1370                 return ret;
1371         }
1372
1373         mvmvif->uploaded = false;
1374
1375         if (vif->type == NL80211_IFTYPE_MONITOR) {
1376                 __clear_bit(IEEE80211_HW_RX_INCLUDES_FCS, mvm->hw->flags);
1377                 iwl_mvm_dealloc_snif_sta(mvm);
1378         }
1379
1380         return 0;
1381 }
1382
1383 static void iwl_mvm_csa_count_down(struct iwl_mvm *mvm,
1384                                    struct ieee80211_vif *csa_vif, u32 gp2,
1385                                    bool tx_success)
1386 {
1387         struct iwl_mvm_vif *mvmvif =
1388                         iwl_mvm_vif_from_mac80211(csa_vif);
1389
1390         /* Don't start to countdown from a failed beacon */
1391         if (!tx_success && !mvmvif->csa_countdown)
1392                 return;
1393
1394         mvmvif->csa_countdown = true;
1395
1396         if (!ieee80211_csa_is_complete(csa_vif)) {
1397                 int c = ieee80211_csa_update_counter(csa_vif);
1398
1399                 iwl_mvm_mac_ctxt_beacon_changed(mvm, csa_vif);
1400                 if (csa_vif->p2p &&
1401                     !iwl_mvm_te_scheduled(&mvmvif->time_event_data) && gp2 &&
1402                     tx_success) {
1403                         u32 rel_time = (c + 1) *
1404                                        csa_vif->bss_conf.beacon_int -
1405                                        IWL_MVM_CHANNEL_SWITCH_TIME_GO;
1406                         u32 apply_time = gp2 + rel_time * 1024;
1407
1408                         iwl_mvm_schedule_csa_period(mvm, csa_vif,
1409                                          IWL_MVM_CHANNEL_SWITCH_TIME_GO -
1410                                          IWL_MVM_CHANNEL_SWITCH_MARGIN,
1411                                          apply_time);
1412                 }
1413         } else if (!iwl_mvm_te_scheduled(&mvmvif->time_event_data)) {
1414                 /* we don't have CSA NoA scheduled yet, switch now */
1415                 ieee80211_csa_finish(csa_vif);
1416                 RCU_INIT_POINTER(mvm->csa_vif, NULL);
1417         }
1418 }
1419
1420 void iwl_mvm_rx_beacon_notif(struct iwl_mvm *mvm,
1421                              struct iwl_rx_cmd_buffer *rxb)
1422 {
1423         struct iwl_rx_packet *pkt = rxb_addr(rxb);
1424         struct iwl_extended_beacon_notif *beacon = (void *)pkt->data;
1425         struct iwl_mvm_tx_resp *beacon_notify_hdr;
1426         struct ieee80211_vif *csa_vif;
1427         struct ieee80211_vif *tx_blocked_vif;
1428         u16 status;
1429
1430         lockdep_assert_held(&mvm->mutex);
1431
1432         beacon_notify_hdr = &beacon->beacon_notify_hdr;
1433         mvm->ap_last_beacon_gp2 = le32_to_cpu(beacon->gp2);
1434
1435         status = le16_to_cpu(beacon_notify_hdr->status.status) & TX_STATUS_MSK;
1436         IWL_DEBUG_RX(mvm,
1437                      "beacon status %#x retries:%d tsf:0x%16llX gp2:0x%X rate:%d\n",
1438                      status, beacon_notify_hdr->failure_frame,
1439                      le64_to_cpu(beacon->tsf),
1440                      mvm->ap_last_beacon_gp2,
1441                      le32_to_cpu(beacon_notify_hdr->initial_rate));
1442
1443         csa_vif = rcu_dereference_protected(mvm->csa_vif,
1444                                             lockdep_is_held(&mvm->mutex));
1445         if (unlikely(csa_vif && csa_vif->csa_active))
1446                 iwl_mvm_csa_count_down(mvm, csa_vif, mvm->ap_last_beacon_gp2,
1447                                        (status == TX_STATUS_SUCCESS));
1448
1449         tx_blocked_vif = rcu_dereference_protected(mvm->csa_tx_blocked_vif,
1450                                                 lockdep_is_held(&mvm->mutex));
1451         if (unlikely(tx_blocked_vif)) {
1452                 struct iwl_mvm_vif *mvmvif =
1453                         iwl_mvm_vif_from_mac80211(tx_blocked_vif);
1454
1455                 /*
1456                  * The channel switch is started and we have blocked the
1457                  * stations. If this is the first beacon (the timeout wasn't
1458                  * set), set the unblock timeout, otherwise countdown
1459                  */
1460                 if (!mvm->csa_tx_block_bcn_timeout)
1461                         mvm->csa_tx_block_bcn_timeout =
1462                                 IWL_MVM_CS_UNBLOCK_TX_TIMEOUT;
1463                 else
1464                         mvm->csa_tx_block_bcn_timeout--;
1465
1466                 /* Check if the timeout is expired, and unblock tx */
1467                 if (mvm->csa_tx_block_bcn_timeout == 0) {
1468                         iwl_mvm_modify_all_sta_disable_tx(mvm, mvmvif, false);
1469                         RCU_INIT_POINTER(mvm->csa_tx_blocked_vif, NULL);
1470                 }
1471         }
1472 }
1473
1474 static void iwl_mvm_beacon_loss_iterator(void *_data, u8 *mac,
1475                                          struct ieee80211_vif *vif)
1476 {
1477         struct iwl_missed_beacons_notif *missed_beacons = _data;
1478         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1479         struct iwl_mvm *mvm = mvmvif->mvm;
1480         struct iwl_fw_dbg_trigger_missed_bcon *bcon_trig;
1481         struct iwl_fw_dbg_trigger_tlv *trigger;
1482         u32 stop_trig_missed_bcon, stop_trig_missed_bcon_since_rx;
1483         u32 rx_missed_bcon, rx_missed_bcon_since_rx;
1484
1485         if (mvmvif->id != (u16)le32_to_cpu(missed_beacons->mac_id))
1486                 return;
1487
1488         rx_missed_bcon = le32_to_cpu(missed_beacons->consec_missed_beacons);
1489         rx_missed_bcon_since_rx =
1490                 le32_to_cpu(missed_beacons->consec_missed_beacons_since_last_rx);
1491         /*
1492          * TODO: the threshold should be adjusted based on latency conditions,
1493          * and/or in case of a CS flow on one of the other AP vifs.
1494          */
1495         if (le32_to_cpu(missed_beacons->consec_missed_beacons_since_last_rx) >
1496              IWL_MVM_MISSED_BEACONS_THRESHOLD)
1497                 ieee80211_beacon_loss(vif);
1498
1499         if (!iwl_fw_dbg_trigger_enabled(mvm->fw,
1500                                         FW_DBG_TRIGGER_MISSED_BEACONS))
1501                 return;
1502
1503         trigger = iwl_fw_dbg_get_trigger(mvm->fw,
1504                                          FW_DBG_TRIGGER_MISSED_BEACONS);
1505         bcon_trig = (void *)trigger->data;
1506         stop_trig_missed_bcon = le32_to_cpu(bcon_trig->stop_consec_missed_bcon);
1507         stop_trig_missed_bcon_since_rx =
1508                 le32_to_cpu(bcon_trig->stop_consec_missed_bcon_since_rx);
1509
1510         /* TODO: implement start trigger */
1511
1512         if (!iwl_fw_dbg_trigger_check_stop(mvm, vif, trigger))
1513                 return;
1514
1515         if (rx_missed_bcon_since_rx >= stop_trig_missed_bcon_since_rx ||
1516             rx_missed_bcon >= stop_trig_missed_bcon)
1517                 iwl_mvm_fw_dbg_collect_trig(mvm, trigger, NULL);
1518 }
1519
1520 void iwl_mvm_rx_missed_beacons_notif(struct iwl_mvm *mvm,
1521                                      struct iwl_rx_cmd_buffer *rxb)
1522 {
1523         struct iwl_rx_packet *pkt = rxb_addr(rxb);
1524         struct iwl_missed_beacons_notif *mb = (void *)pkt->data;
1525
1526         IWL_DEBUG_INFO(mvm,
1527                        "missed bcn mac_id=%u, consecutive=%u (%u, %u, %u)\n",
1528                        le32_to_cpu(mb->mac_id),
1529                        le32_to_cpu(mb->consec_missed_beacons),
1530                        le32_to_cpu(mb->consec_missed_beacons_since_last_rx),
1531                        le32_to_cpu(mb->num_recvd_beacons),
1532                        le32_to_cpu(mb->num_expected_beacons));
1533
1534         ieee80211_iterate_active_interfaces_atomic(mvm->hw,
1535                                                    IEEE80211_IFACE_ITER_NORMAL,
1536                                                    iwl_mvm_beacon_loss_iterator,
1537                                                    mb);
1538 }
1539
1540 void iwl_mvm_rx_stored_beacon_notif(struct iwl_mvm *mvm,
1541                                     struct iwl_rx_cmd_buffer *rxb)
1542 {
1543         struct iwl_rx_packet *pkt = rxb_addr(rxb);
1544         struct iwl_stored_beacon_notif *sb = (void *)pkt->data;
1545         struct ieee80211_rx_status rx_status;
1546         struct sk_buff *skb;
1547         u32 size = le32_to_cpu(sb->byte_count);
1548
1549         if (size == 0)
1550                 return;
1551
1552         skb = alloc_skb(size, GFP_ATOMIC);
1553         if (!skb) {
1554                 IWL_ERR(mvm, "alloc_skb failed\n");
1555                 return;
1556         }
1557
1558         /* update rx_status according to the notification's metadata */
1559         memset(&rx_status, 0, sizeof(rx_status));
1560         rx_status.mactime = le64_to_cpu(sb->tsf);
1561         /* TSF as indicated by the firmware  is at INA time */
1562         rx_status.flag |= RX_FLAG_MACTIME_PLCP_START;
1563         rx_status.device_timestamp = le32_to_cpu(sb->system_time);
1564         rx_status.band =
1565                 (sb->phy_flags & cpu_to_le16(RX_RES_PHY_FLAGS_BAND_24)) ?
1566                                 NL80211_BAND_2GHZ : NL80211_BAND_5GHZ;
1567         rx_status.freq =
1568                 ieee80211_channel_to_frequency(le16_to_cpu(sb->channel),
1569                                                rx_status.band);
1570
1571         /* copy the data */
1572         memcpy(skb_put(skb, size), sb->data, size);
1573         memcpy(IEEE80211_SKB_RXCB(skb), &rx_status, sizeof(rx_status));
1574
1575         /* pass it as regular rx to mac80211 */
1576         ieee80211_rx_napi(mvm->hw, NULL, skb, NULL);
1577 }
1578
1579 void iwl_mvm_channel_switch_noa_notif(struct iwl_mvm *mvm,
1580                                       struct iwl_rx_cmd_buffer *rxb)
1581 {
1582         struct iwl_rx_packet *pkt = rxb_addr(rxb);
1583         struct iwl_channel_switch_noa_notif *notif = (void *)pkt->data;
1584         struct ieee80211_vif *csa_vif;
1585         struct iwl_mvm_vif *mvmvif;
1586         int len = iwl_rx_packet_payload_len(pkt);
1587         u32 id_n_color;
1588
1589         if (WARN_ON_ONCE(len < sizeof(*notif)))
1590                 return;
1591
1592         rcu_read_lock();
1593
1594         csa_vif = rcu_dereference(mvm->csa_vif);
1595         if (WARN_ON(!csa_vif || !csa_vif->csa_active))
1596                 goto out_unlock;
1597
1598         id_n_color = le32_to_cpu(notif->id_and_color);
1599
1600         mvmvif = iwl_mvm_vif_from_mac80211(csa_vif);
1601         if (WARN(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color) != id_n_color,
1602                  "channel switch noa notification on unexpected vif (csa_vif=%d, notif=%d)",
1603                  FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color), id_n_color))
1604                 goto out_unlock;
1605
1606         IWL_DEBUG_INFO(mvm, "Channel Switch Started Notification\n");
1607
1608         queue_delayed_work(system_wq, &mvm->cs_tx_unblock_dwork,
1609                            msecs_to_jiffies(IWL_MVM_CS_UNBLOCK_TX_TIMEOUT *
1610                                             csa_vif->bss_conf.beacon_int));
1611
1612         ieee80211_csa_finish(csa_vif);
1613
1614         rcu_read_unlock();
1615
1616         RCU_INIT_POINTER(mvm->csa_vif, NULL);
1617
1618         return;
1619
1620 out_unlock:
1621         rcu_read_unlock();
1622 }