1 /******************************************************************************
2  *
3  * This file is provided under a dual BSD/GPLv2 license.  When using or
4  * redistributing this file, you may do so under either license.
5  *
6  * GPL LICENSE SUMMARY
7  *
8  * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
9  * Copyright(c) 2013 - 2014 Intel Mobile Communications GmbH
10  * Copyright(c) 2015 - 2017 Intel Deutschland GmbH
11  *
12  * This program is free software; you can redistribute it and/or modify
13  * it under the terms of version 2 of the GNU General Public License as
14  * published by the Free Software Foundation.
15  *
16  * This program is distributed in the hope that it will be useful, but
17  * WITHOUT ANY WARRANTY; without even the implied warranty of
18  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
19  * General Public License for more details.
20  *
21  * You should have received a copy of the GNU General Public License
22  * along with this program; if not, write to the Free Software
23  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110,
24  * USA
25  *
26  * The full GNU General Public License is included in this distribution
27  * in the file called COPYING.
28  *
29  * Contact Information:
30  *  Intel Linux Wireless <linuxwifi@intel.com>
31  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
32  *
33  * BSD LICENSE
34  *
35  * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
36  * Copyright(c) 2013 - 2014 Intel Mobile Communications GmbH
37  * Copyright(c) 2015 - 2017 Intel Deutschland GmbH
38  * All rights reserved.
39  *
40  * Redistribution and use in source and binary forms, with or without
41  * modification, are permitted provided that the following conditions
42  * are met:
43  *
44  *  * Redistributions of source code must retain the above copyright
45  *    notice, this list of conditions and the following disclaimer.
46  *  * Redistributions in binary form must reproduce the above copyright
47  *    notice, this list of conditions and the following disclaimer in
48  *    the documentation and/or other materials provided with the
49  *    distribution.
50  *  * Neither the name Intel Corporation nor the names of its
51  *    contributors may be used to endorse or promote products derived
52  *    from this software without specific prior written permission.
53  *
54  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
55  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
56  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
57  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
58  * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
59  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
60  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
61  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
62  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
63  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
64  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
65  *
66  *****************************************************************************/
67 
68 #include <linux/etherdevice.h>
69 #include <net/mac80211.h>
70 #include "iwl-io.h"
71 #include "iwl-prph.h"
72 #include "fw-api.h"
73 #include "mvm.h"
74 #include "time-event.h"
75 
76 const u8 iwl_mvm_ac_to_tx_fifo[] = {
77 	IWL_MVM_TX_FIFO_VO,
78 	IWL_MVM_TX_FIFO_VI,
79 	IWL_MVM_TX_FIFO_BE,
80 	IWL_MVM_TX_FIFO_BK,
81 };
82 
83 const u8 iwl_mvm_ac_to_gen2_tx_fifo[] = {
84 	IWL_GEN2_EDCA_TX_FIFO_VO,
85 	IWL_GEN2_EDCA_TX_FIFO_VI,
86 	IWL_GEN2_EDCA_TX_FIFO_BE,
87 	IWL_GEN2_EDCA_TX_FIFO_BK,
88 };
89 
90 struct iwl_mvm_mac_iface_iterator_data {
91 	struct iwl_mvm *mvm;
92 	struct ieee80211_vif *vif;
93 	unsigned long available_mac_ids[BITS_TO_LONGS(NUM_MAC_INDEX_DRIVER)];
94 	unsigned long available_tsf_ids[BITS_TO_LONGS(NUM_TSF_IDS)];
95 	enum iwl_tsf_id preferred_tsf;
96 	bool found_vif;
97 };
98 
99 struct iwl_mvm_hw_queues_iface_iterator_data {
100 	struct ieee80211_vif *exclude_vif;
101 	unsigned long used_hw_queues;
102 };
103 
104 static void iwl_mvm_mac_tsf_id_iter(void *_data, u8 *mac,
105 				    struct ieee80211_vif *vif)
106 {
107 	struct iwl_mvm_mac_iface_iterator_data *data = _data;
108 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
109 	u16 min_bi;
110 
111 	/* Skip the interface for which we are trying to assign a tsf_id  */
112 	if (vif == data->vif)
113 		return;
114 
115 	/*
116 	 * The TSF is a hardware/firmware resource, there are 4 and
117 	 * the driver should assign and free them as needed. However,
118 	 * there are cases where 2 MACs should share the same TSF ID
119 	 * for the purpose of clock sync, an optimization to avoid
120 	 * clock drift causing overlapping TBTTs/DTIMs for a GO and
121 	 * client in the system.
122 	 *
123 	 * The firmware will decide according to the MAC type which
124 	 * will be the master and slave. Clients that need to sync
125 	 * with a remote station will be the master, and an AP or GO
126 	 * will be the slave.
127 	 *
128 	 * Depending on the new interface type it can be slaved to
129 	 * or become the master of an existing interface.
130 	 */
131 	switch (data->vif->type) {
132 	case NL80211_IFTYPE_STATION:
133 		/*
134 		 * The new interface is a client, so if the one we're iterating
135 		 * is an AP, and the beacon interval of the AP is a multiple or
136 		 * divisor of the beacon interval of the client, the same TSF
137 		 * should be used to avoid drift between the new client and
138 		 * existing AP. The existing AP will get drift updates from the
139 		 * new client context in this case.
140 		 */
141 		if (vif->type != NL80211_IFTYPE_AP ||
142 		    data->preferred_tsf != NUM_TSF_IDS ||
143 		    !test_bit(mvmvif->tsf_id, data->available_tsf_ids))
144 			break;
145 
146 		min_bi = min(data->vif->bss_conf.beacon_int,
147 			     vif->bss_conf.beacon_int);
148 
149 		if (!min_bi)
150 			break;
151 
152 		if ((data->vif->bss_conf.beacon_int -
153 		     vif->bss_conf.beacon_int) % min_bi == 0) {
154 			data->preferred_tsf = mvmvif->tsf_id;
155 			return;
156 		}
157 		break;
158 
159 	case NL80211_IFTYPE_AP:
160 		/*
161 		 * The new interface is AP/GO, so if its beacon interval is a
162 		 * multiple or a divisor of the beacon interval of an existing
163 		 * interface, it should get drift updates from an existing
164 		 * client or use the same TSF as an existing GO. There's no
165 		 * drift between TSFs internally but if they used different
166 		 * TSFs then a new client MAC could update one of them and
167 		 * cause drift that way.
168 		 */
169 		if ((vif->type != NL80211_IFTYPE_AP &&
170 		     vif->type != NL80211_IFTYPE_STATION) ||
171 		    data->preferred_tsf != NUM_TSF_IDS ||
172 		    !test_bit(mvmvif->tsf_id, data->available_tsf_ids))
173 			break;
174 
175 		min_bi = min(data->vif->bss_conf.beacon_int,
176 			     vif->bss_conf.beacon_int);
177 
178 		if (!min_bi)
179 			break;
180 
181 		if ((data->vif->bss_conf.beacon_int -
182 		     vif->bss_conf.beacon_int) % min_bi == 0) {
183 			data->preferred_tsf = mvmvif->tsf_id;
184 			return;
185 		}
186 		break;
187 	default:
188 		/*
189 		 * For all other interface types there's no need to
190 		 * take drift into account. Either they're exclusive
191 		 * like IBSS and monitor, or we don't care much about
192 		 * their TSF (like P2P Device), but we won't be able
193 		 * to share the TSF resource.
194 		 */
195 		break;
196 	}
197 
198 	/*
199 	 * Unless we exited above, we can't share the TSF resource
200 	 * that the virtual interface we're iterating over is using
201 	 * with the new one, so clear the available bit and if this
202 	 * was the preferred one, reset that as well.
203 	 */
204 	__clear_bit(mvmvif->tsf_id, data->available_tsf_ids);
205 
206 	if (data->preferred_tsf == mvmvif->tsf_id)
207 		data->preferred_tsf = NUM_TSF_IDS;
208 }
209 
210 /*
211  * Get the mask of the queues used by the vif
212  */
213 u32 iwl_mvm_mac_get_queues_mask(struct ieee80211_vif *vif)
214 {
215 	u32 qmask = 0, ac;
216 
217 	if (vif->type == NL80211_IFTYPE_P2P_DEVICE)
218 		return BIT(IWL_MVM_OFFCHANNEL_QUEUE);
219 
220 	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
221 		if (vif->hw_queue[ac] != IEEE80211_INVAL_HW_QUEUE)
222 			qmask |= BIT(vif->hw_queue[ac]);
223 	}
224 
225 	if (vif->type == NL80211_IFTYPE_AP ||
226 	    vif->type == NL80211_IFTYPE_ADHOC)
227 		qmask |= BIT(vif->cab_queue);
228 
229 	return qmask;
230 }
231 
232 static void iwl_mvm_iface_hw_queues_iter(void *_data, u8 *mac,
233 					 struct ieee80211_vif *vif)
234 {
235 	struct iwl_mvm_hw_queues_iface_iterator_data *data = _data;
236 
237 	/* exclude the given vif */
238 	if (vif == data->exclude_vif)
239 		return;
240 
241 	data->used_hw_queues |= iwl_mvm_mac_get_queues_mask(vif);
242 }
243 
244 unsigned long iwl_mvm_get_used_hw_queues(struct iwl_mvm *mvm,
245 					 struct ieee80211_vif *exclude_vif)
246 {
247 	struct iwl_mvm_hw_queues_iface_iterator_data data = {
248 		.exclude_vif = exclude_vif,
249 		.used_hw_queues =
250 			BIT(IWL_MVM_OFFCHANNEL_QUEUE) |
251 			BIT(mvm->aux_queue) |
252 			BIT(IWL_MVM_DQA_GCAST_QUEUE),
253 	};
254 
255 	lockdep_assert_held(&mvm->mutex);
256 
257 	/* mark all VIF used hw queues */
258 	ieee80211_iterate_active_interfaces_atomic(
259 		mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
260 		iwl_mvm_iface_hw_queues_iter, &data);
261 
262 	return data.used_hw_queues;
263 }
264 
265 static void iwl_mvm_mac_iface_iterator(void *_data, u8 *mac,
266 				       struct ieee80211_vif *vif)
267 {
268 	struct iwl_mvm_mac_iface_iterator_data *data = _data;
269 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
270 
271 	/* Iterator may already find the interface being added -- skip it */
272 	if (vif == data->vif) {
273 		data->found_vif = true;
274 		return;
275 	}
276 
277 	/* Mark MAC IDs as used by clearing the available bit, and
278 	 * (below) mark TSFs as used if their existing use is not
279 	 * compatible with the new interface type.
280 	 * No locking or atomic bit operations are needed since the
281 	 * data is on the stack of the caller function.
282 	 */
283 	__clear_bit(mvmvif->id, data->available_mac_ids);
284 
285 	/* find a suitable tsf_id */
286 	iwl_mvm_mac_tsf_id_iter(_data, mac, vif);
287 }
288 
289 void iwl_mvm_mac_ctxt_recalc_tsf_id(struct iwl_mvm *mvm,
290 				    struct ieee80211_vif *vif)
291 {
292 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
293 	struct iwl_mvm_mac_iface_iterator_data data = {
294 		.mvm = mvm,
295 		.vif = vif,
296 		.available_tsf_ids = { (1 << NUM_TSF_IDS) - 1 },
297 		/* no preference yet */
298 		.preferred_tsf = NUM_TSF_IDS,
299 	};
300 
301 	ieee80211_iterate_active_interfaces_atomic(
302 		mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
303 		iwl_mvm_mac_tsf_id_iter, &data);
304 
305 	if (data.preferred_tsf != NUM_TSF_IDS)
306 		mvmvif->tsf_id = data.preferred_tsf;
307 	else if (!test_bit(mvmvif->tsf_id, data.available_tsf_ids))
308 		mvmvif->tsf_id = find_first_bit(data.available_tsf_ids,
309 						NUM_TSF_IDS);
310 }
311 
312 int iwl_mvm_mac_ctxt_init(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
313 {
314 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
315 	struct iwl_mvm_mac_iface_iterator_data data = {
316 		.mvm = mvm,
317 		.vif = vif,
318 		.available_mac_ids = { (1 << NUM_MAC_INDEX_DRIVER) - 1 },
319 		.available_tsf_ids = { (1 << NUM_TSF_IDS) - 1 },
320 		/* no preference yet */
321 		.preferred_tsf = NUM_TSF_IDS,
322 		.found_vif = false,
323 	};
324 	u32 ac;
325 	int ret, i, queue_limit;
326 	unsigned long used_hw_queues;
327 
328 	lockdep_assert_held(&mvm->mutex);
329 
330 	/*
331 	 * Allocate a MAC ID and a TSF for this MAC, along with the queues
332 	 * and other resources.
333 	 */
334 
335 	/*
336 	 * Before the iterator, we start with all MAC IDs and TSFs available.
337 	 *
338 	 * During iteration, all MAC IDs are cleared that are in use by other
339 	 * virtual interfaces, and all TSF IDs are cleared that can't be used
340 	 * by this new virtual interface because they're used by an interface
341 	 * that can't share it with the new one.
342 	 * At the same time, we check if there's a preferred TSF in the case
343 	 * that we should share it with another interface.
344 	 */
345 
346 	/* Currently, MAC ID 0 should be used only for the managed/IBSS vif */
347 	switch (vif->type) {
348 	case NL80211_IFTYPE_ADHOC:
349 		break;
350 	case NL80211_IFTYPE_STATION:
351 		if (!vif->p2p)
352 			break;
353 		/* fall through */
354 	default:
355 		__clear_bit(0, data.available_mac_ids);
356 	}
357 
358 	ieee80211_iterate_active_interfaces_atomic(
359 		mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
360 		iwl_mvm_mac_iface_iterator, &data);
361 
362 	used_hw_queues = iwl_mvm_get_used_hw_queues(mvm, vif);
363 
364 	/*
365 	 * In the case we're getting here during resume, it's similar to
366 	 * firmware restart, and with RESUME_ALL the iterator will find
367 	 * the vif being added already.
368 	 * We don't want to reassign any IDs in either case since doing
369 	 * so would probably assign different IDs (as interfaces aren't
370 	 * necessarily added in the same order), but the old IDs were
371 	 * preserved anyway, so skip ID assignment for both resume and
372 	 * recovery.
373 	 */
374 	if (data.found_vif)
375 		return 0;
376 
377 	/* Therefore, in recovery, we can't get here */
378 	if (WARN_ON_ONCE(test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)))
379 		return -EBUSY;
380 
381 	mvmvif->id = find_first_bit(data.available_mac_ids,
382 				    NUM_MAC_INDEX_DRIVER);
383 	if (mvmvif->id == NUM_MAC_INDEX_DRIVER) {
384 		IWL_ERR(mvm, "Failed to init MAC context - no free ID!\n");
385 		ret = -EIO;
386 		goto exit_fail;
387 	}
388 
389 	if (data.preferred_tsf != NUM_TSF_IDS)
390 		mvmvif->tsf_id = data.preferred_tsf;
391 	else
392 		mvmvif->tsf_id = find_first_bit(data.available_tsf_ids,
393 						NUM_TSF_IDS);
394 	if (mvmvif->tsf_id == NUM_TSF_IDS) {
395 		IWL_ERR(mvm, "Failed to init MAC context - no free TSF!\n");
396 		ret = -EIO;
397 		goto exit_fail;
398 	}
399 
400 	mvmvif->color = 0;
401 
402 	INIT_LIST_HEAD(&mvmvif->time_event_data.list);
403 	mvmvif->time_event_data.id = TE_MAX;
404 
405 	/* No need to allocate data queues to P2P Device MAC.*/
406 	if (vif->type == NL80211_IFTYPE_P2P_DEVICE) {
407 		for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
408 			vif->hw_queue[ac] = IEEE80211_INVAL_HW_QUEUE;
409 
410 		return 0;
411 	}
412 
413 	/*
414 	 * queues in mac80211 almost entirely independent of
415 	 * the ones here - no real limit
416 	 */
417 	queue_limit = IEEE80211_MAX_QUEUES;
418 	BUILD_BUG_ON(IEEE80211_MAX_QUEUES >
419 		     BITS_PER_BYTE *
420 		     sizeof(mvm->hw_queue_to_mac80211[0]));
421 
422 	/*
423 	 * Find available queues, and allocate them to the ACs. When in
424 	 * DQA-mode they aren't really used, and this is done only so the
425 	 * mac80211 ieee80211_check_queues() function won't fail
426 	 */
427 	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
428 		u8 queue = find_first_zero_bit(&used_hw_queues, queue_limit);
429 
430 		if (queue >= queue_limit) {
431 			IWL_ERR(mvm, "Failed to allocate queue\n");
432 			ret = -EIO;
433 			goto exit_fail;
434 		}
435 
436 		__set_bit(queue, &used_hw_queues);
437 		vif->hw_queue[ac] = queue;
438 	}
439 
440 	/* Allocate the CAB queue for softAP and GO interfaces */
441 	if (vif->type == NL80211_IFTYPE_AP) {
442 		/*
443 		 * For TVQM this will be overwritten later with the FW assigned
444 		 * queue value (when queue is enabled).
445 		 */
446 		mvmvif->cab_queue = IWL_MVM_DQA_GCAST_QUEUE;
447 		vif->cab_queue = IWL_MVM_DQA_GCAST_QUEUE;
448 	} else {
449 		vif->cab_queue = IEEE80211_INVAL_HW_QUEUE;
450 	}
451 
452 	mvmvif->bcast_sta.sta_id = IWL_MVM_INVALID_STA;
453 	mvmvif->mcast_sta.sta_id = IWL_MVM_INVALID_STA;
454 	mvmvif->ap_sta_id = IWL_MVM_INVALID_STA;
455 
456 	for (i = 0; i < NUM_IWL_MVM_SMPS_REQ; i++)
457 		mvmvif->smps_requests[i] = IEEE80211_SMPS_AUTOMATIC;
458 
459 	return 0;
460 
461 exit_fail:
462 	memset(mvmvif, 0, sizeof(struct iwl_mvm_vif));
463 	memset(vif->hw_queue, IEEE80211_INVAL_HW_QUEUE, sizeof(vif->hw_queue));
464 	vif->cab_queue = IEEE80211_INVAL_HW_QUEUE;
465 	return ret;
466 }
467 
468 static void iwl_mvm_ack_rates(struct iwl_mvm *mvm,
469 			      struct ieee80211_vif *vif,
470 			      enum nl80211_band band,
471 			      u8 *cck_rates, u8 *ofdm_rates)
472 {
473 	struct ieee80211_supported_band *sband;
474 	unsigned long basic = vif->bss_conf.basic_rates;
475 	int lowest_present_ofdm = 100;
476 	int lowest_present_cck = 100;
477 	u8 cck = 0;
478 	u8 ofdm = 0;
479 	int i;
480 
481 	sband = mvm->hw->wiphy->bands[band];
482 
483 	for_each_set_bit(i, &basic, BITS_PER_LONG) {
484 		int hw = sband->bitrates[i].hw_value;
485 		if (hw >= IWL_FIRST_OFDM_RATE) {
486 			ofdm |= BIT(hw - IWL_FIRST_OFDM_RATE);
487 			if (lowest_present_ofdm > hw)
488 				lowest_present_ofdm = hw;
489 		} else {
490 			BUILD_BUG_ON(IWL_FIRST_CCK_RATE != 0);
491 
492 			cck |= BIT(hw);
493 			if (lowest_present_cck > hw)
494 				lowest_present_cck = hw;
495 		}
496 	}
497 
498 	/*
499 	 * Now we've got the basic rates as bitmaps in the ofdm and cck
500 	 * variables. This isn't sufficient though, as there might not
501 	 * be all the right rates in the bitmap. E.g. if the only basic
502 	 * rates are 5.5 Mbps and 11 Mbps, we still need to add 1 Mbps
503 	 * and 6 Mbps because the 802.11-2007 standard says in 9.6:
504 	 *
505 	 *    [...] a STA responding to a received frame shall transmit
506 	 *    its Control Response frame [...] at the highest rate in the
507 	 *    BSSBasicRateSet parameter that is less than or equal to the
508 	 *    rate of the immediately previous frame in the frame exchange
509 	 *    sequence ([...]) and that is of the same modulation class
510 	 *    ([...]) as the received frame. If no rate contained in the
511 	 *    BSSBasicRateSet parameter meets these conditions, then the
512 	 *    control frame sent in response to a received frame shall be
513 	 *    transmitted at the highest mandatory rate of the PHY that is
514 	 *    less than or equal to the rate of the received frame, and
515 	 *    that is of the same modulation class as the received frame.
516 	 *
517 	 * As a consequence, we need to add all mandatory rates that are
518 	 * lower than all of the basic rates to these bitmaps.
519 	 */
520 
521 	if (IWL_RATE_24M_INDEX < lowest_present_ofdm)
522 		ofdm |= IWL_RATE_BIT_MSK(24) >> IWL_FIRST_OFDM_RATE;
523 	if (IWL_RATE_12M_INDEX < lowest_present_ofdm)
524 		ofdm |= IWL_RATE_BIT_MSK(12) >> IWL_FIRST_OFDM_RATE;
525 	/* 6M already there or needed so always add */
526 	ofdm |= IWL_RATE_BIT_MSK(6) >> IWL_FIRST_OFDM_RATE;
527 
528 	/*
529 	 * CCK is a bit more complex with DSSS vs. HR/DSSS vs. ERP.
530 	 * Note, however:
531 	 *  - if no CCK rates are basic, it must be ERP since there must
532 	 *    be some basic rates at all, so they're OFDM => ERP PHY
533 	 *    (or we're in 5 GHz, and the cck bitmap will never be used)
534 	 *  - if 11M is a basic rate, it must be ERP as well, so add 5.5M
535 	 *  - if 5.5M is basic, 1M and 2M are mandatory
536 	 *  - if 2M is basic, 1M is mandatory
537 	 *  - if 1M is basic, that's the only valid ACK rate.
538 	 * As a consequence, it's not as complicated as it sounds, just add
539 	 * any lower rates to the ACK rate bitmap.
540 	 */
541 	if (IWL_RATE_11M_INDEX < lowest_present_cck)
542 		cck |= IWL_RATE_BIT_MSK(11) >> IWL_FIRST_CCK_RATE;
543 	if (IWL_RATE_5M_INDEX < lowest_present_cck)
544 		cck |= IWL_RATE_BIT_MSK(5) >> IWL_FIRST_CCK_RATE;
545 	if (IWL_RATE_2M_INDEX < lowest_present_cck)
546 		cck |= IWL_RATE_BIT_MSK(2) >> IWL_FIRST_CCK_RATE;
547 	/* 1M already there or needed so always add */
548 	cck |= IWL_RATE_BIT_MSK(1) >> IWL_FIRST_CCK_RATE;
549 
550 	*cck_rates = cck;
551 	*ofdm_rates = ofdm;
552 }
553 
554 static void iwl_mvm_mac_ctxt_set_ht_flags(struct iwl_mvm *mvm,
555 					 struct ieee80211_vif *vif,
556 					 struct iwl_mac_ctx_cmd *cmd)
557 {
558 	/* for both sta and ap, ht_operation_mode hold the protection_mode */
559 	u8 protection_mode = vif->bss_conf.ht_operation_mode &
560 				 IEEE80211_HT_OP_MODE_PROTECTION;
561 	/* The fw does not distinguish between ht and fat */
562 	u32 ht_flag = MAC_PROT_FLG_HT_PROT | MAC_PROT_FLG_FAT_PROT;
563 
564 	IWL_DEBUG_RATE(mvm, "protection mode set to %d\n", protection_mode);
565 	/*
566 	 * See section 9.23.3.1 of IEEE 80211-2012.
567 	 * Nongreenfield HT STAs Present is not supported.
568 	 */
569 	switch (protection_mode) {
570 	case IEEE80211_HT_OP_MODE_PROTECTION_NONE:
571 		break;
572 	case IEEE80211_HT_OP_MODE_PROTECTION_NONMEMBER:
573 	case IEEE80211_HT_OP_MODE_PROTECTION_NONHT_MIXED:
574 		cmd->protection_flags |= cpu_to_le32(ht_flag);
575 		break;
576 	case IEEE80211_HT_OP_MODE_PROTECTION_20MHZ:
577 		/* Protect when channel wider than 20MHz */
578 		if (vif->bss_conf.chandef.width > NL80211_CHAN_WIDTH_20)
579 			cmd->protection_flags |= cpu_to_le32(ht_flag);
580 		break;
581 	default:
582 		IWL_ERR(mvm, "Illegal protection mode %d\n",
583 			protection_mode);
584 		break;
585 	}
586 }
587 
588 static void iwl_mvm_mac_ctxt_cmd_common(struct iwl_mvm *mvm,
589 					struct ieee80211_vif *vif,
590 					struct iwl_mac_ctx_cmd *cmd,
591 					const u8 *bssid_override,
592 					u32 action)
593 {
594 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
595 	struct ieee80211_chanctx_conf *chanctx;
596 	bool ht_enabled = !!(vif->bss_conf.ht_operation_mode &
597 			     IEEE80211_HT_OP_MODE_PROTECTION);
598 	u8 cck_ack_rates, ofdm_ack_rates;
599 	const u8 *bssid = bssid_override ?: vif->bss_conf.bssid;
600 	int i;
601 
602 	cmd->id_and_color = cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id,
603 							    mvmvif->color));
604 	cmd->action = cpu_to_le32(action);
605 
606 	switch (vif->type) {
607 	case NL80211_IFTYPE_STATION:
608 		if (vif->p2p)
609 			cmd->mac_type = cpu_to_le32(FW_MAC_TYPE_P2P_STA);
610 		else
611 			cmd->mac_type = cpu_to_le32(FW_MAC_TYPE_BSS_STA);
612 		break;
613 	case NL80211_IFTYPE_AP:
614 		cmd->mac_type = cpu_to_le32(FW_MAC_TYPE_GO);
615 		break;
616 	case NL80211_IFTYPE_MONITOR:
617 		cmd->mac_type = cpu_to_le32(FW_MAC_TYPE_LISTENER);
618 		break;
619 	case NL80211_IFTYPE_P2P_DEVICE:
620 		cmd->mac_type = cpu_to_le32(FW_MAC_TYPE_P2P_DEVICE);
621 		break;
622 	case NL80211_IFTYPE_ADHOC:
623 		cmd->mac_type = cpu_to_le32(FW_MAC_TYPE_IBSS);
624 		break;
625 	default:
626 		WARN_ON_ONCE(1);
627 	}
628 
629 	cmd->tsf_id = cpu_to_le32(mvmvif->tsf_id);
630 
631 	memcpy(cmd->node_addr, vif->addr, ETH_ALEN);
632 
633 	if (bssid)
634 		memcpy(cmd->bssid_addr, bssid, ETH_ALEN);
635 	else
636 		eth_broadcast_addr(cmd->bssid_addr);
637 
638 	rcu_read_lock();
639 	chanctx = rcu_dereference(vif->chanctx_conf);
640 	iwl_mvm_ack_rates(mvm, vif, chanctx ? chanctx->def.chan->band
641 					    : NL80211_BAND_2GHZ,
642 			  &cck_ack_rates, &ofdm_ack_rates);
643 	rcu_read_unlock();
644 
645 	cmd->cck_rates = cpu_to_le32((u32)cck_ack_rates);
646 	cmd->ofdm_rates = cpu_to_le32((u32)ofdm_ack_rates);
647 
648 	cmd->cck_short_preamble =
649 		cpu_to_le32(vif->bss_conf.use_short_preamble ?
650 			    MAC_FLG_SHORT_PREAMBLE : 0);
651 	cmd->short_slot =
652 		cpu_to_le32(vif->bss_conf.use_short_slot ?
653 			    MAC_FLG_SHORT_SLOT : 0);
654 
655 	cmd->filter_flags = cpu_to_le32(MAC_FILTER_ACCEPT_GRP);
656 
657 	for (i = 0; i < IEEE80211_NUM_ACS; i++) {
658 		u8 txf = iwl_mvm_mac_ac_to_tx_fifo(mvm, i);
659 
660 		cmd->ac[txf].cw_min =
661 			cpu_to_le16(mvmvif->queue_params[i].cw_min);
662 		cmd->ac[txf].cw_max =
663 			cpu_to_le16(mvmvif->queue_params[i].cw_max);
664 		cmd->ac[txf].edca_txop =
665 			cpu_to_le16(mvmvif->queue_params[i].txop * 32);
666 		cmd->ac[txf].aifsn = mvmvif->queue_params[i].aifs;
667 		cmd->ac[txf].fifos_mask = BIT(txf);
668 	}
669 
670 	if (vif->bss_conf.qos)
671 		cmd->qos_flags |= cpu_to_le32(MAC_QOS_FLG_UPDATE_EDCA);
672 
673 	if (vif->bss_conf.use_cts_prot)
674 		cmd->protection_flags |= cpu_to_le32(MAC_PROT_FLG_TGG_PROTECT);
675 
676 	IWL_DEBUG_RATE(mvm, "use_cts_prot %d, ht_operation_mode %d\n",
677 		       vif->bss_conf.use_cts_prot,
678 		       vif->bss_conf.ht_operation_mode);
679 	if (vif->bss_conf.chandef.width != NL80211_CHAN_WIDTH_20_NOHT)
680 		cmd->qos_flags |= cpu_to_le32(MAC_QOS_FLG_TGN);
681 	if (ht_enabled)
682 		iwl_mvm_mac_ctxt_set_ht_flags(mvm, vif, cmd);
683 }
684 
685 static int iwl_mvm_mac_ctxt_send_cmd(struct iwl_mvm *mvm,
686 				     struct iwl_mac_ctx_cmd *cmd)
687 {
688 	int ret = iwl_mvm_send_cmd_pdu(mvm, MAC_CONTEXT_CMD, 0,
689 				       sizeof(*cmd), cmd);
690 	if (ret)
691 		IWL_ERR(mvm, "Failed to send MAC context (action:%d): %d\n",
692 			le32_to_cpu(cmd->action), ret);
693 	return ret;
694 }
695 
696 static int iwl_mvm_mac_ctxt_cmd_sta(struct iwl_mvm *mvm,
697 				    struct ieee80211_vif *vif,
698 				    u32 action, bool force_assoc_off,
699 				    const u8 *bssid_override)
700 {
701 	struct iwl_mac_ctx_cmd cmd = {};
702 	struct iwl_mac_data_sta *ctxt_sta;
703 
704 	WARN_ON(vif->type != NL80211_IFTYPE_STATION);
705 
706 	/* Fill the common data for all mac context types */
707 	iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, bssid_override, action);
708 
709 	if (vif->p2p) {
710 		struct ieee80211_p2p_noa_attr *noa =
711 			&vif->bss_conf.p2p_noa_attr;
712 
713 		cmd.p2p_sta.ctwin = cpu_to_le32(noa->oppps_ctwindow &
714 					IEEE80211_P2P_OPPPS_CTWINDOW_MASK);
715 		ctxt_sta = &cmd.p2p_sta.sta;
716 	} else {
717 		ctxt_sta = &cmd.sta;
718 	}
719 
720 	/* We need the dtim_period to set the MAC as associated */
721 	if (vif->bss_conf.assoc && vif->bss_conf.dtim_period &&
722 	    !force_assoc_off) {
723 		u32 dtim_offs;
724 
725 		/*
726 		 * The DTIM count counts down, so when it is N that means N
727 		 * more beacon intervals happen until the DTIM TBTT. Therefore
728 		 * add this to the current time. If that ends up being in the
729 		 * future, the firmware will handle it.
730 		 *
731 		 * Also note that the system_timestamp (which we get here as
732 		 * "sync_device_ts") and TSF timestamp aren't at exactly the
733 		 * same offset in the frame -- the TSF is at the first symbol
734 		 * of the TSF, the system timestamp is at signal acquisition
735 		 * time. This means there's an offset between them of at most
736 		 * a few hundred microseconds (24 * 8 bits + PLCP time gives
737 		 * 384us in the longest case), this is currently not relevant
738 		 * as the firmware wakes up around 2ms before the TBTT.
739 		 */
740 		dtim_offs = vif->bss_conf.sync_dtim_count *
741 				vif->bss_conf.beacon_int;
742 		/* convert TU to usecs */
743 		dtim_offs *= 1024;
744 
745 		ctxt_sta->dtim_tsf =
746 			cpu_to_le64(vif->bss_conf.sync_tsf + dtim_offs);
747 		ctxt_sta->dtim_time =
748 			cpu_to_le32(vif->bss_conf.sync_device_ts + dtim_offs);
749 		ctxt_sta->assoc_beacon_arrive_time =
750 			cpu_to_le32(vif->bss_conf.sync_device_ts);
751 
752 		IWL_DEBUG_INFO(mvm, "DTIM TBTT is 0x%llx/0x%x, offset %d\n",
753 			       le64_to_cpu(ctxt_sta->dtim_tsf),
754 			       le32_to_cpu(ctxt_sta->dtim_time),
755 			       dtim_offs);
756 
757 		ctxt_sta->is_assoc = cpu_to_le32(1);
758 	} else {
759 		ctxt_sta->is_assoc = cpu_to_le32(0);
760 
761 		/* Allow beacons to pass through as long as we are not
762 		 * associated, or we do not have dtim period information.
763 		 */
764 		cmd.filter_flags |= cpu_to_le32(MAC_FILTER_IN_BEACON);
765 	}
766 
767 	ctxt_sta->bi = cpu_to_le32(vif->bss_conf.beacon_int);
768 	ctxt_sta->bi_reciprocal =
769 		cpu_to_le32(iwl_mvm_reciprocal(vif->bss_conf.beacon_int));
770 	ctxt_sta->dtim_interval = cpu_to_le32(vif->bss_conf.beacon_int *
771 					      vif->bss_conf.dtim_period);
772 	ctxt_sta->dtim_reciprocal =
773 		cpu_to_le32(iwl_mvm_reciprocal(vif->bss_conf.beacon_int *
774 					       vif->bss_conf.dtim_period));
775 
776 	ctxt_sta->listen_interval = cpu_to_le32(mvm->hw->conf.listen_interval);
777 	ctxt_sta->assoc_id = cpu_to_le32(vif->bss_conf.aid);
778 
779 	if (vif->probe_req_reg && vif->bss_conf.assoc && vif->p2p)
780 		cmd.filter_flags |= cpu_to_le32(MAC_FILTER_IN_PROBE_REQUEST);
781 
782 	return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
783 }
784 
785 static int iwl_mvm_mac_ctxt_cmd_listener(struct iwl_mvm *mvm,
786 					 struct ieee80211_vif *vif,
787 					 u32 action)
788 {
789 	struct iwl_mac_ctx_cmd cmd = {};
790 	u32 tfd_queue_msk = 0;
791 	int ret;
792 
793 	WARN_ON(vif->type != NL80211_IFTYPE_MONITOR);
794 
795 	iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);
796 
797 	cmd.filter_flags = cpu_to_le32(MAC_FILTER_IN_PROMISC |
798 				       MAC_FILTER_IN_CONTROL_AND_MGMT |
799 				       MAC_FILTER_IN_BEACON |
800 				       MAC_FILTER_IN_PROBE_REQUEST |
801 				       MAC_FILTER_IN_CRC32);
802 	ieee80211_hw_set(mvm->hw, RX_INCLUDES_FCS);
803 
804 	/* Allocate sniffer station */
805 	ret = iwl_mvm_allocate_int_sta(mvm, &mvm->snif_sta, tfd_queue_msk,
806 				       vif->type, IWL_STA_GENERAL_PURPOSE);
807 	if (ret)
808 		return ret;
809 
810 	return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
811 }
812 
813 static int iwl_mvm_mac_ctxt_cmd_ibss(struct iwl_mvm *mvm,
814 				     struct ieee80211_vif *vif,
815 				     u32 action)
816 {
817 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
818 	struct iwl_mac_ctx_cmd cmd = {};
819 
820 	WARN_ON(vif->type != NL80211_IFTYPE_ADHOC);
821 
822 	iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);
823 
824 	cmd.filter_flags = cpu_to_le32(MAC_FILTER_IN_BEACON |
825 				       MAC_FILTER_IN_PROBE_REQUEST);
826 
827 	/* cmd.ibss.beacon_time/cmd.ibss.beacon_tsf are curently ignored */
828 	cmd.ibss.bi = cpu_to_le32(vif->bss_conf.beacon_int);
829 	cmd.ibss.bi_reciprocal =
830 		cpu_to_le32(iwl_mvm_reciprocal(vif->bss_conf.beacon_int));
831 
832 	/* TODO: Assumes that the beacon id == mac context id */
833 	cmd.ibss.beacon_template = cpu_to_le32(mvmvif->id);
834 
835 	return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
836 }
837 
838 struct iwl_mvm_go_iterator_data {
839 	bool go_active;
840 };
841 
842 static void iwl_mvm_go_iterator(void *_data, u8 *mac, struct ieee80211_vif *vif)
843 {
844 	struct iwl_mvm_go_iterator_data *data = _data;
845 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
846 
847 	if (vif->type == NL80211_IFTYPE_AP && vif->p2p &&
848 	    mvmvif->ap_ibss_active)
849 		data->go_active = true;
850 }
851 
852 static int iwl_mvm_mac_ctxt_cmd_p2p_device(struct iwl_mvm *mvm,
853 					   struct ieee80211_vif *vif,
854 					   u32 action)
855 {
856 	struct iwl_mac_ctx_cmd cmd = {};
857 	struct iwl_mvm_go_iterator_data data = {};
858 
859 	WARN_ON(vif->type != NL80211_IFTYPE_P2P_DEVICE);
860 
861 	iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);
862 
863 	cmd.protection_flags |= cpu_to_le32(MAC_PROT_FLG_TGG_PROTECT);
864 
865 	/* Override the filter flags to accept only probe requests */
866 	cmd.filter_flags = cpu_to_le32(MAC_FILTER_IN_PROBE_REQUEST);
867 
868 	/*
869 	 * This flag should be set to true when the P2P Device is
870 	 * discoverable and there is at least another active P2P GO. Settings
871 	 * this flag will allow the P2P Device to be discoverable on other
872 	 * channels in addition to its listen channel.
873 	 * Note that this flag should not be set in other cases as it opens the
874 	 * Rx filters on all MAC and increases the number of interrupts.
875 	 */
876 	ieee80211_iterate_active_interfaces_atomic(
877 		mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
878 		iwl_mvm_go_iterator, &data);
879 
880 	cmd.p2p_dev.is_disc_extended = cpu_to_le32(data.go_active ? 1 : 0);
881 	return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
882 }
883 
884 static void iwl_mvm_mac_ctxt_set_tim(struct iwl_mvm *mvm,
885 				     __le32 *tim_index, __le32 *tim_size,
886 				     u8 *beacon, u32 frame_size)
887 {
888 	u32 tim_idx;
889 	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)beacon;
890 
891 	/* The index is relative to frame start but we start looking at the
892 	 * variable-length part of the beacon. */
893 	tim_idx = mgmt->u.beacon.variable - beacon;
894 
895 	/* Parse variable-length elements of beacon to find WLAN_EID_TIM */
896 	while ((tim_idx < (frame_size - 2)) &&
897 			(beacon[tim_idx] != WLAN_EID_TIM))
898 		tim_idx += beacon[tim_idx+1] + 2;
899 
900 	/* If TIM field was found, set variables */
901 	if ((tim_idx < (frame_size - 1)) && (beacon[tim_idx] == WLAN_EID_TIM)) {
902 		*tim_index = cpu_to_le32(tim_idx);
903 		*tim_size = cpu_to_le32((u32)beacon[tim_idx + 1]);
904 	} else {
905 		IWL_WARN(mvm, "Unable to find TIM Element in beacon\n");
906 	}
907 }
908 
909 static u32 iwl_mvm_find_ie_offset(u8 *beacon, u8 eid, u32 frame_size)
910 {
911 	struct ieee80211_mgmt *mgmt = (void *)beacon;
912 	const u8 *ie;
913 
914 	if (WARN_ON_ONCE(frame_size <= (mgmt->u.beacon.variable - beacon)))
915 		return 0;
916 
917 	frame_size -= mgmt->u.beacon.variable - beacon;
918 
919 	ie = cfg80211_find_ie(eid, mgmt->u.beacon.variable, frame_size);
920 	if (!ie)
921 		return 0;
922 
923 	return ie - beacon;
924 }
925 
926 static u8 iwl_mvm_mac_ctxt_get_lowest_rate(struct ieee80211_tx_info *info,
927 					   struct ieee80211_vif *vif)
928 {
929 	u8 rate;
930 
931 	if (info->band == NL80211_BAND_5GHZ || vif->p2p)
932 		rate = IWL_FIRST_OFDM_RATE;
933 	else
934 		rate = IWL_FIRST_CCK_RATE;
935 
936 	return rate;
937 }
938 
939 static void iwl_mvm_mac_ctxt_set_tx(struct iwl_mvm *mvm,
940 				    struct ieee80211_vif *vif,
941 				    struct sk_buff *beacon,
942 				    struct iwl_tx_cmd *tx)
943 {
944 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
945 	struct ieee80211_tx_info *info;
946 	u8 rate;
947 	u32 tx_flags;
948 
949 	info = IEEE80211_SKB_CB(beacon);
950 
951 	/* Set up TX command fields */
952 	tx->len = cpu_to_le16((u16)beacon->len);
953 	tx->sta_id = mvmvif->bcast_sta.sta_id;
954 	tx->life_time = cpu_to_le32(TX_CMD_LIFE_TIME_INFINITE);
955 	tx_flags = TX_CMD_FLG_SEQ_CTL | TX_CMD_FLG_TSF;
956 	tx_flags |=
957 		iwl_mvm_bt_coex_tx_prio(mvm, (void *)beacon->data, info, 0) <<
958 						TX_CMD_FLG_BT_PRIO_POS;
959 	tx->tx_flags = cpu_to_le32(tx_flags);
960 
961 	if (!fw_has_capa(&mvm->fw->ucode_capa,
962 			 IWL_UCODE_TLV_CAPA_BEACON_ANT_SELECTION)) {
963 		mvm->mgmt_last_antenna_idx =
964 			iwl_mvm_next_antenna(mvm, iwl_mvm_get_valid_tx_ant(mvm),
965 					     mvm->mgmt_last_antenna_idx);
966 	}
967 
968 	tx->rate_n_flags =
969 		cpu_to_le32(BIT(mvm->mgmt_last_antenna_idx) <<
970 			    RATE_MCS_ANT_POS);
971 
972 	rate = iwl_mvm_mac_ctxt_get_lowest_rate(info, vif);
973 
974 	tx->rate_n_flags |= cpu_to_le32(iwl_mvm_mac80211_idx_to_hwrate(rate));
975 	if (rate == IWL_FIRST_CCK_RATE)
976 		tx->rate_n_flags |= cpu_to_le32(RATE_MCS_CCK_MSK);
977 
978 }
979 
980 static int iwl_mvm_mac_ctxt_send_beacon_cmd(struct iwl_mvm *mvm,
981 					    struct sk_buff *beacon,
982 					    void *data, int len)
983 {
984 	struct iwl_host_cmd cmd = {
985 		.id = BEACON_TEMPLATE_CMD,
986 		.flags = CMD_ASYNC,
987 	};
988 
989 	cmd.len[0] = len;
990 	cmd.data[0] = data;
991 	cmd.dataflags[0] = 0;
992 	cmd.len[1] = beacon->len;
993 	cmd.data[1] = beacon->data;
994 	cmd.dataflags[1] = IWL_HCMD_DFL_DUP;
995 
996 	return iwl_mvm_send_cmd(mvm, &cmd);
997 }
998 
999 static int iwl_mvm_mac_ctxt_send_beacon_v6(struct iwl_mvm *mvm,
1000 					   struct ieee80211_vif *vif,
1001 					   struct sk_buff *beacon)
1002 {
1003 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1004 	struct iwl_mac_beacon_cmd_v6 beacon_cmd = {};
1005 
1006 	iwl_mvm_mac_ctxt_set_tx(mvm, vif, beacon, &beacon_cmd.tx);
1007 
1008 	beacon_cmd.template_id = cpu_to_le32((u32)mvmvif->id);
1009 
1010 	if (vif->type == NL80211_IFTYPE_AP)
1011 		iwl_mvm_mac_ctxt_set_tim(mvm, &beacon_cmd.tim_idx,
1012 					 &beacon_cmd.tim_size,
1013 					 beacon->data, beacon->len);
1014 
1015 	return iwl_mvm_mac_ctxt_send_beacon_cmd(mvm, beacon, &beacon_cmd,
1016 						sizeof(beacon_cmd));
1017 }
1018 
1019 static int iwl_mvm_mac_ctxt_send_beacon_v7(struct iwl_mvm *mvm,
1020 					   struct ieee80211_vif *vif,
1021 					   struct sk_buff *beacon)
1022 {
1023 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1024 	struct iwl_mac_beacon_cmd_v7 beacon_cmd = {};
1025 
1026 	iwl_mvm_mac_ctxt_set_tx(mvm, vif, beacon, &beacon_cmd.tx);
1027 
1028 	beacon_cmd.template_id = cpu_to_le32((u32)mvmvif->id);
1029 
1030 	if (vif->type == NL80211_IFTYPE_AP)
1031 		iwl_mvm_mac_ctxt_set_tim(mvm, &beacon_cmd.tim_idx,
1032 					 &beacon_cmd.tim_size,
1033 					 beacon->data, beacon->len);
1034 
1035 	beacon_cmd.csa_offset =
1036 		cpu_to_le32(iwl_mvm_find_ie_offset(beacon->data,
1037 						   WLAN_EID_CHANNEL_SWITCH,
1038 						   beacon->len));
1039 	beacon_cmd.ecsa_offset =
1040 		cpu_to_le32(iwl_mvm_find_ie_offset(beacon->data,
1041 						   WLAN_EID_EXT_CHANSWITCH_ANN,
1042 						   beacon->len));
1043 
1044 	return iwl_mvm_mac_ctxt_send_beacon_cmd(mvm, beacon, &beacon_cmd,
1045 						sizeof(beacon_cmd));
1046 }
1047 
1048 static int iwl_mvm_mac_ctxt_send_beacon_v9(struct iwl_mvm *mvm,
1049 					   struct ieee80211_vif *vif,
1050 					   struct sk_buff *beacon)
1051 {
1052 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1053 	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(beacon);
1054 	struct iwl_mac_beacon_cmd beacon_cmd = {};
1055 	u8 rate = iwl_mvm_mac_ctxt_get_lowest_rate(info, vif);
1056 	u16 flags;
1057 
1058 	flags = iwl_mvm_mac80211_idx_to_hwrate(rate);
1059 
1060 	if (rate == IWL_FIRST_CCK_RATE)
1061 		flags |= IWL_MAC_BEACON_CCK;
1062 
1063 	beacon_cmd.flags = cpu_to_le16(flags);
1064 	beacon_cmd.byte_cnt = cpu_to_le16((u16)beacon->len);
1065 	beacon_cmd.template_id = cpu_to_le32((u32)mvmvif->id);
1066 
1067 	if (vif->type == NL80211_IFTYPE_AP)
1068 		iwl_mvm_mac_ctxt_set_tim(mvm, &beacon_cmd.tim_idx,
1069 					 &beacon_cmd.tim_size,
1070 					 beacon->data, beacon->len);
1071 
1072 	beacon_cmd.csa_offset =
1073 		cpu_to_le32(iwl_mvm_find_ie_offset(beacon->data,
1074 						   WLAN_EID_CHANNEL_SWITCH,
1075 						   beacon->len));
1076 	beacon_cmd.ecsa_offset =
1077 		cpu_to_le32(iwl_mvm_find_ie_offset(beacon->data,
1078 						   WLAN_EID_EXT_CHANSWITCH_ANN,
1079 						   beacon->len));
1080 
1081 	return iwl_mvm_mac_ctxt_send_beacon_cmd(mvm, beacon, &beacon_cmd,
1082 						sizeof(beacon_cmd));
1083 }
1084 
1085 static int iwl_mvm_mac_ctxt_send_beacon(struct iwl_mvm *mvm,
1086 					struct ieee80211_vif *vif,
1087 					struct sk_buff *beacon)
1088 {
1089 	if (WARN_ON(!beacon))
1090 		return -EINVAL;
1091 
1092 	if (!fw_has_capa(&mvm->fw->ucode_capa,
1093 			 IWL_UCODE_TLV_CAPA_CSA_AND_TBTT_OFFLOAD))
1094 		return iwl_mvm_mac_ctxt_send_beacon_v6(mvm, vif, beacon);
1095 
1096 	if (fw_has_api(&mvm->fw->ucode_capa,
1097 		       IWL_UCODE_TLV_API_NEW_BEACON_TEMPLATE))
1098 		return iwl_mvm_mac_ctxt_send_beacon_v9(mvm, vif, beacon);
1099 
1100 	return iwl_mvm_mac_ctxt_send_beacon_v7(mvm, vif, beacon);
1101 }
1102 
1103 /* The beacon template for the AP/GO/IBSS has changed and needs update */
1104 int iwl_mvm_mac_ctxt_beacon_changed(struct iwl_mvm *mvm,
1105 				    struct ieee80211_vif *vif)
1106 {
1107 	struct sk_buff *beacon;
1108 	int ret;
1109 
1110 	WARN_ON(vif->type != NL80211_IFTYPE_AP &&
1111 		vif->type != NL80211_IFTYPE_ADHOC);
1112 
1113 	beacon = ieee80211_beacon_get_template(mvm->hw, vif, NULL);
1114 	if (!beacon)
1115 		return -ENOMEM;
1116 
1117 	ret = iwl_mvm_mac_ctxt_send_beacon(mvm, vif, beacon);
1118 	dev_kfree_skb(beacon);
1119 	return ret;
1120 }
1121 
1122 struct iwl_mvm_mac_ap_iterator_data {
1123 	struct iwl_mvm *mvm;
1124 	struct ieee80211_vif *vif;
1125 	u32 beacon_device_ts;
1126 	u16 beacon_int;
1127 };
1128 
1129 /* Find the beacon_device_ts and beacon_int for a managed interface */
1130 static void iwl_mvm_mac_ap_iterator(void *_data, u8 *mac,
1131 				    struct ieee80211_vif *vif)
1132 {
1133 	struct iwl_mvm_mac_ap_iterator_data *data = _data;
1134 
1135 	if (vif->type != NL80211_IFTYPE_STATION || !vif->bss_conf.assoc)
1136 		return;
1137 
1138 	/* Station client has higher priority over P2P client*/
1139 	if (vif->p2p && data->beacon_device_ts)
1140 		return;
1141 
1142 	data->beacon_device_ts = vif->bss_conf.sync_device_ts;
1143 	data->beacon_int = vif->bss_conf.beacon_int;
1144 }
1145 
1146 /*
1147  * Fill the specific data for mac context of type AP of P2P GO
1148  */
1149 static void iwl_mvm_mac_ctxt_cmd_fill_ap(struct iwl_mvm *mvm,
1150 					 struct ieee80211_vif *vif,
1151 					 struct iwl_mac_ctx_cmd *cmd,
1152 					 struct iwl_mac_data_ap *ctxt_ap,
1153 					 bool add)
1154 {
1155 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1156 	struct iwl_mvm_mac_ap_iterator_data data = {
1157 		.mvm = mvm,
1158 		.vif = vif,
1159 		.beacon_device_ts = 0
1160 	};
1161 
1162 	/* in AP mode, the MCAST FIFO takes the EDCA params from VO */
1163 	cmd->ac[IWL_MVM_TX_FIFO_VO].fifos_mask |= BIT(IWL_MVM_TX_FIFO_MCAST);
1164 
1165 	/*
1166 	 * in AP mode, pass probe requests and beacons from other APs
1167 	 * (needed for ht protection); when there're no any associated
1168 	 * station don't ask FW to pass beacons to prevent unnecessary
1169 	 * wake-ups.
1170 	 */
1171 	cmd->filter_flags |= cpu_to_le32(MAC_FILTER_IN_PROBE_REQUEST);
1172 	if (mvmvif->ap_assoc_sta_count || !mvm->drop_bcn_ap_mode) {
1173 		cmd->filter_flags |= cpu_to_le32(MAC_FILTER_IN_BEACON);
1174 		IWL_DEBUG_HC(mvm, "Asking FW to pass beacons\n");
1175 	} else {
1176 		IWL_DEBUG_HC(mvm, "No need to receive beacons\n");
1177 	}
1178 
1179 	ctxt_ap->bi = cpu_to_le32(vif->bss_conf.beacon_int);
1180 	ctxt_ap->bi_reciprocal =
1181 		cpu_to_le32(iwl_mvm_reciprocal(vif->bss_conf.beacon_int));
1182 	ctxt_ap->dtim_interval = cpu_to_le32(vif->bss_conf.beacon_int *
1183 					     vif->bss_conf.dtim_period);
1184 	ctxt_ap->dtim_reciprocal =
1185 		cpu_to_le32(iwl_mvm_reciprocal(vif->bss_conf.beacon_int *
1186 					       vif->bss_conf.dtim_period));
1187 
1188 	if (!fw_has_api(&mvm->fw->ucode_capa,
1189 			IWL_UCODE_TLV_API_STA_TYPE))
1190 		ctxt_ap->mcast_qid = cpu_to_le32(vif->cab_queue);
1191 
1192 	/*
1193 	 * Only set the beacon time when the MAC is being added, when we
1194 	 * just modify the MAC then we should keep the time -- the firmware
1195 	 * can otherwise have a "jumping" TBTT.
1196 	 */
1197 	if (add) {
1198 		/*
1199 		 * If there is a station/P2P client interface which is
1200 		 * associated, set the AP's TBTT far enough from the station's
1201 		 * TBTT. Otherwise, set it to the current system time
1202 		 */
1203 		ieee80211_iterate_active_interfaces_atomic(
1204 			mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
1205 			iwl_mvm_mac_ap_iterator, &data);
1206 
1207 		if (data.beacon_device_ts) {
1208 			u32 rand = (prandom_u32() % (64 - 36)) + 36;
1209 			mvmvif->ap_beacon_time = data.beacon_device_ts +
1210 				ieee80211_tu_to_usec(data.beacon_int * rand /
1211 						     100);
1212 		} else {
1213 			mvmvif->ap_beacon_time =
1214 				iwl_read_prph(mvm->trans,
1215 					      DEVICE_SYSTEM_TIME_REG);
1216 		}
1217 	}
1218 
1219 	ctxt_ap->beacon_time = cpu_to_le32(mvmvif->ap_beacon_time);
1220 	ctxt_ap->beacon_tsf = 0; /* unused */
1221 
1222 	/* TODO: Assume that the beacon id == mac context id */
1223 	ctxt_ap->beacon_template = cpu_to_le32(mvmvif->id);
1224 }
1225 
1226 static int iwl_mvm_mac_ctxt_cmd_ap(struct iwl_mvm *mvm,
1227 				   struct ieee80211_vif *vif,
1228 				   u32 action)
1229 {
1230 	struct iwl_mac_ctx_cmd cmd = {};
1231 
1232 	WARN_ON(vif->type != NL80211_IFTYPE_AP || vif->p2p);
1233 
1234 	/* Fill the common data for all mac context types */
1235 	iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);
1236 
1237 	/* Fill the data specific for ap mode */
1238 	iwl_mvm_mac_ctxt_cmd_fill_ap(mvm, vif, &cmd, &cmd.ap,
1239 				     action == FW_CTXT_ACTION_ADD);
1240 
1241 	return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
1242 }
1243 
1244 static int iwl_mvm_mac_ctxt_cmd_go(struct iwl_mvm *mvm,
1245 				   struct ieee80211_vif *vif,
1246 				   u32 action)
1247 {
1248 	struct iwl_mac_ctx_cmd cmd = {};
1249 	struct ieee80211_p2p_noa_attr *noa = &vif->bss_conf.p2p_noa_attr;
1250 
1251 	WARN_ON(vif->type != NL80211_IFTYPE_AP || !vif->p2p);
1252 
1253 	/* Fill the common data for all mac context types */
1254 	iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);
1255 
1256 	/* Fill the data specific for GO mode */
1257 	iwl_mvm_mac_ctxt_cmd_fill_ap(mvm, vif, &cmd, &cmd.go.ap,
1258 				     action == FW_CTXT_ACTION_ADD);
1259 
1260 	cmd.go.ctwin = cpu_to_le32(noa->oppps_ctwindow &
1261 					IEEE80211_P2P_OPPPS_CTWINDOW_MASK);
1262 	cmd.go.opp_ps_enabled =
1263 			cpu_to_le32(!!(noa->oppps_ctwindow &
1264 					IEEE80211_P2P_OPPPS_ENABLE_BIT));
1265 
1266 	return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
1267 }
1268 
1269 static int iwl_mvm_mac_ctx_send(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
1270 				u32 action, bool force_assoc_off,
1271 				const u8 *bssid_override)
1272 {
1273 	switch (vif->type) {
1274 	case NL80211_IFTYPE_STATION:
1275 		return iwl_mvm_mac_ctxt_cmd_sta(mvm, vif, action,
1276 						force_assoc_off,
1277 						bssid_override);
1278 		break;
1279 	case NL80211_IFTYPE_AP:
1280 		if (!vif->p2p)
1281 			return iwl_mvm_mac_ctxt_cmd_ap(mvm, vif, action);
1282 		else
1283 			return iwl_mvm_mac_ctxt_cmd_go(mvm, vif, action);
1284 		break;
1285 	case NL80211_IFTYPE_MONITOR:
1286 		return iwl_mvm_mac_ctxt_cmd_listener(mvm, vif, action);
1287 	case NL80211_IFTYPE_P2P_DEVICE:
1288 		return iwl_mvm_mac_ctxt_cmd_p2p_device(mvm, vif, action);
1289 	case NL80211_IFTYPE_ADHOC:
1290 		return iwl_mvm_mac_ctxt_cmd_ibss(mvm, vif, action);
1291 	default:
1292 		break;
1293 	}
1294 
1295 	return -EOPNOTSUPP;
1296 }
1297 
1298 int iwl_mvm_mac_ctxt_add(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
1299 {
1300 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1301 	int ret;
1302 
1303 	if (WARN_ONCE(mvmvif->uploaded, "Adding active MAC %pM/%d\n",
1304 		      vif->addr, ieee80211_vif_type_p2p(vif)))
1305 		return -EIO;
1306 
1307 	ret = iwl_mvm_mac_ctx_send(mvm, vif, FW_CTXT_ACTION_ADD,
1308 				   true, NULL);
1309 	if (ret)
1310 		return ret;
1311 
1312 	/* will only do anything at resume from D3 time */
1313 	iwl_mvm_set_last_nonqos_seq(mvm, vif);
1314 
1315 	mvmvif->uploaded = true;
1316 	return 0;
1317 }
1318 
1319 int iwl_mvm_mac_ctxt_changed(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
1320 			     bool force_assoc_off, const u8 *bssid_override)
1321 {
1322 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1323 
1324 	if (WARN_ONCE(!mvmvif->uploaded, "Changing inactive MAC %pM/%d\n",
1325 		      vif->addr, ieee80211_vif_type_p2p(vif)))
1326 		return -EIO;
1327 
1328 	return iwl_mvm_mac_ctx_send(mvm, vif, FW_CTXT_ACTION_MODIFY,
1329 				    force_assoc_off, bssid_override);
1330 }
1331 
1332 int iwl_mvm_mac_ctxt_remove(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
1333 {
1334 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1335 	struct iwl_mac_ctx_cmd cmd;
1336 	int ret;
1337 
1338 	if (WARN_ONCE(!mvmvif->uploaded, "Removing inactive MAC %pM/%d\n",
1339 		      vif->addr, ieee80211_vif_type_p2p(vif)))
1340 		return -EIO;
1341 
1342 	memset(&cmd, 0, sizeof(cmd));
1343 
1344 	cmd.id_and_color = cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id,
1345 							   mvmvif->color));
1346 	cmd.action = cpu_to_le32(FW_CTXT_ACTION_REMOVE);
1347 
1348 	ret = iwl_mvm_send_cmd_pdu(mvm, MAC_CONTEXT_CMD, 0,
1349 				   sizeof(cmd), &cmd);
1350 	if (ret) {
1351 		IWL_ERR(mvm, "Failed to remove MAC context: %d\n", ret);
1352 		return ret;
1353 	}
1354 
1355 	mvmvif->uploaded = false;
1356 
1357 	if (vif->type == NL80211_IFTYPE_MONITOR) {
1358 		__clear_bit(IEEE80211_HW_RX_INCLUDES_FCS, mvm->hw->flags);
1359 		iwl_mvm_dealloc_snif_sta(mvm);
1360 	}
1361 
1362 	return 0;
1363 }
1364 
1365 static void iwl_mvm_csa_count_down(struct iwl_mvm *mvm,
1366 				   struct ieee80211_vif *csa_vif, u32 gp2,
1367 				   bool tx_success)
1368 {
1369 	struct iwl_mvm_vif *mvmvif =
1370 			iwl_mvm_vif_from_mac80211(csa_vif);
1371 
1372 	/* Don't start to countdown from a failed beacon */
1373 	if (!tx_success && !mvmvif->csa_countdown)
1374 		return;
1375 
1376 	mvmvif->csa_countdown = true;
1377 
1378 	if (!ieee80211_csa_is_complete(csa_vif)) {
1379 		int c = ieee80211_csa_update_counter(csa_vif);
1380 
1381 		iwl_mvm_mac_ctxt_beacon_changed(mvm, csa_vif);
1382 		if (csa_vif->p2p &&
1383 		    !iwl_mvm_te_scheduled(&mvmvif->time_event_data) && gp2 &&
1384 		    tx_success) {
1385 			u32 rel_time = (c + 1) *
1386 				       csa_vif->bss_conf.beacon_int -
1387 				       IWL_MVM_CHANNEL_SWITCH_TIME_GO;
1388 			u32 apply_time = gp2 + rel_time * 1024;
1389 
1390 			iwl_mvm_schedule_csa_period(mvm, csa_vif,
1391 					 IWL_MVM_CHANNEL_SWITCH_TIME_GO -
1392 					 IWL_MVM_CHANNEL_SWITCH_MARGIN,
1393 					 apply_time);
1394 		}
1395 	} else if (!iwl_mvm_te_scheduled(&mvmvif->time_event_data)) {
1396 		/* we don't have CSA NoA scheduled yet, switch now */
1397 		ieee80211_csa_finish(csa_vif);
1398 		RCU_INIT_POINTER(mvm->csa_vif, NULL);
1399 	}
1400 }
1401 
1402 void iwl_mvm_rx_beacon_notif(struct iwl_mvm *mvm,
1403 			     struct iwl_rx_cmd_buffer *rxb)
1404 {
1405 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
1406 	struct iwl_extended_beacon_notif *beacon = (void *)pkt->data;
1407 	struct iwl_mvm_tx_resp *beacon_notify_hdr;
1408 	struct ieee80211_vif *csa_vif;
1409 	struct ieee80211_vif *tx_blocked_vif;
1410 	struct agg_tx_status *agg_status;
1411 	u16 status;
1412 
1413 	lockdep_assert_held(&mvm->mutex);
1414 
1415 	beacon_notify_hdr = &beacon->beacon_notify_hdr;
1416 	mvm->ap_last_beacon_gp2 = le32_to_cpu(beacon->gp2);
1417 	mvm->ibss_manager = beacon->ibss_mgr_status != 0;
1418 
1419 	agg_status = iwl_mvm_get_agg_status(mvm, beacon_notify_hdr);
1420 	status = le16_to_cpu(agg_status->status) & TX_STATUS_MSK;
1421 	IWL_DEBUG_RX(mvm,
1422 		     "beacon status %#x retries:%d tsf:0x%16llX gp2:0x%X rate:%d\n",
1423 		     status, beacon_notify_hdr->failure_frame,
1424 		     le64_to_cpu(beacon->tsf),
1425 		     mvm->ap_last_beacon_gp2,
1426 		     le32_to_cpu(beacon_notify_hdr->initial_rate));
1427 
1428 	csa_vif = rcu_dereference_protected(mvm->csa_vif,
1429 					    lockdep_is_held(&mvm->mutex));
1430 	if (unlikely(csa_vif && csa_vif->csa_active))
1431 		iwl_mvm_csa_count_down(mvm, csa_vif, mvm->ap_last_beacon_gp2,
1432 				       (status == TX_STATUS_SUCCESS));
1433 
1434 	tx_blocked_vif = rcu_dereference_protected(mvm->csa_tx_blocked_vif,
1435 						lockdep_is_held(&mvm->mutex));
1436 	if (unlikely(tx_blocked_vif)) {
1437 		struct iwl_mvm_vif *mvmvif =
1438 			iwl_mvm_vif_from_mac80211(tx_blocked_vif);
1439 
1440 		/*
1441 		 * The channel switch is started and we have blocked the
1442 		 * stations. If this is the first beacon (the timeout wasn't
1443 		 * set), set the unblock timeout, otherwise countdown
1444 		 */
1445 		if (!mvm->csa_tx_block_bcn_timeout)
1446 			mvm->csa_tx_block_bcn_timeout =
1447 				IWL_MVM_CS_UNBLOCK_TX_TIMEOUT;
1448 		else
1449 			mvm->csa_tx_block_bcn_timeout--;
1450 
1451 		/* Check if the timeout is expired, and unblock tx */
1452 		if (mvm->csa_tx_block_bcn_timeout == 0) {
1453 			iwl_mvm_modify_all_sta_disable_tx(mvm, mvmvif, false);
1454 			RCU_INIT_POINTER(mvm->csa_tx_blocked_vif, NULL);
1455 		}
1456 	}
1457 }
1458 
1459 static void iwl_mvm_beacon_loss_iterator(void *_data, u8 *mac,
1460 					 struct ieee80211_vif *vif)
1461 {
1462 	struct iwl_missed_beacons_notif *missed_beacons = _data;
1463 	struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
1464 	struct iwl_mvm *mvm = mvmvif->mvm;
1465 	struct iwl_fw_dbg_trigger_missed_bcon *bcon_trig;
1466 	struct iwl_fw_dbg_trigger_tlv *trigger;
1467 	u32 stop_trig_missed_bcon, stop_trig_missed_bcon_since_rx;
1468 	u32 rx_missed_bcon, rx_missed_bcon_since_rx;
1469 
1470 	if (mvmvif->id != (u16)le32_to_cpu(missed_beacons->mac_id))
1471 		return;
1472 
1473 	rx_missed_bcon = le32_to_cpu(missed_beacons->consec_missed_beacons);
1474 	rx_missed_bcon_since_rx =
1475 		le32_to_cpu(missed_beacons->consec_missed_beacons_since_last_rx);
1476 	/*
1477 	 * TODO: the threshold should be adjusted based on latency conditions,
1478 	 * and/or in case of a CS flow on one of the other AP vifs.
1479 	 */
1480 	if (le32_to_cpu(missed_beacons->consec_missed_beacons_since_last_rx) >
1481 	     IWL_MVM_MISSED_BEACONS_THRESHOLD)
1482 		ieee80211_beacon_loss(vif);
1483 
1484 	if (!iwl_fw_dbg_trigger_enabled(mvm->fw,
1485 					FW_DBG_TRIGGER_MISSED_BEACONS))
1486 		return;
1487 
1488 	trigger = iwl_fw_dbg_get_trigger(mvm->fw,
1489 					 FW_DBG_TRIGGER_MISSED_BEACONS);
1490 	bcon_trig = (void *)trigger->data;
1491 	stop_trig_missed_bcon = le32_to_cpu(bcon_trig->stop_consec_missed_bcon);
1492 	stop_trig_missed_bcon_since_rx =
1493 		le32_to_cpu(bcon_trig->stop_consec_missed_bcon_since_rx);
1494 
1495 	/* TODO: implement start trigger */
1496 
1497 	if (!iwl_fw_dbg_trigger_check_stop(&mvm->fwrt,
1498 					   ieee80211_vif_to_wdev(vif),
1499 					   trigger))
1500 		return;
1501 
1502 	if (rx_missed_bcon_since_rx >= stop_trig_missed_bcon_since_rx ||
1503 	    rx_missed_bcon >= stop_trig_missed_bcon)
1504 		iwl_fw_dbg_collect_trig(&mvm->fwrt, trigger, NULL);
1505 }
1506 
1507 void iwl_mvm_rx_missed_beacons_notif(struct iwl_mvm *mvm,
1508 				     struct iwl_rx_cmd_buffer *rxb)
1509 {
1510 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
1511 	struct iwl_missed_beacons_notif *mb = (void *)pkt->data;
1512 
1513 	IWL_DEBUG_INFO(mvm,
1514 		       "missed bcn mac_id=%u, consecutive=%u (%u, %u, %u)\n",
1515 		       le32_to_cpu(mb->mac_id),
1516 		       le32_to_cpu(mb->consec_missed_beacons),
1517 		       le32_to_cpu(mb->consec_missed_beacons_since_last_rx),
1518 		       le32_to_cpu(mb->num_recvd_beacons),
1519 		       le32_to_cpu(mb->num_expected_beacons));
1520 
1521 	ieee80211_iterate_active_interfaces_atomic(mvm->hw,
1522 						   IEEE80211_IFACE_ITER_NORMAL,
1523 						   iwl_mvm_beacon_loss_iterator,
1524 						   mb);
1525 }
1526 
1527 void iwl_mvm_rx_stored_beacon_notif(struct iwl_mvm *mvm,
1528 				    struct iwl_rx_cmd_buffer *rxb)
1529 {
1530 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
1531 	struct iwl_stored_beacon_notif *sb = (void *)pkt->data;
1532 	struct ieee80211_rx_status rx_status;
1533 	struct sk_buff *skb;
1534 	u32 size = le32_to_cpu(sb->byte_count);
1535 
1536 	if (size == 0)
1537 		return;
1538 
1539 	skb = alloc_skb(size, GFP_ATOMIC);
1540 	if (!skb) {
1541 		IWL_ERR(mvm, "alloc_skb failed\n");
1542 		return;
1543 	}
1544 
1545 	/* update rx_status according to the notification's metadata */
1546 	memset(&rx_status, 0, sizeof(rx_status));
1547 	rx_status.mactime = le64_to_cpu(sb->tsf);
1548 	/* TSF as indicated by the firmware  is at INA time */
1549 	rx_status.flag |= RX_FLAG_MACTIME_PLCP_START;
1550 	rx_status.device_timestamp = le32_to_cpu(sb->system_time);
1551 	rx_status.band =
1552 		(sb->band & cpu_to_le16(RX_RES_PHY_FLAGS_BAND_24)) ?
1553 				NL80211_BAND_2GHZ : NL80211_BAND_5GHZ;
1554 	rx_status.freq =
1555 		ieee80211_channel_to_frequency(le16_to_cpu(sb->channel),
1556 					       rx_status.band);
1557 
1558 	/* copy the data */
1559 	skb_put_data(skb, sb->data, size);
1560 	memcpy(IEEE80211_SKB_RXCB(skb), &rx_status, sizeof(rx_status));
1561 
1562 	/* pass it as regular rx to mac80211 */
1563 	ieee80211_rx_napi(mvm->hw, NULL, skb, NULL);
1564 }
1565 
1566 void iwl_mvm_channel_switch_noa_notif(struct iwl_mvm *mvm,
1567 				      struct iwl_rx_cmd_buffer *rxb)
1568 {
1569 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
1570 	struct iwl_channel_switch_noa_notif *notif = (void *)pkt->data;
1571 	struct ieee80211_vif *csa_vif;
1572 	struct iwl_mvm_vif *mvmvif;
1573 	int len = iwl_rx_packet_payload_len(pkt);
1574 	u32 id_n_color;
1575 
1576 	if (WARN_ON_ONCE(len < sizeof(*notif)))
1577 		return;
1578 
1579 	rcu_read_lock();
1580 
1581 	csa_vif = rcu_dereference(mvm->csa_vif);
1582 	if (WARN_ON(!csa_vif || !csa_vif->csa_active))
1583 		goto out_unlock;
1584 
1585 	id_n_color = le32_to_cpu(notif->id_and_color);
1586 
1587 	mvmvif = iwl_mvm_vif_from_mac80211(csa_vif);
1588 	if (WARN(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color) != id_n_color,
1589 		 "channel switch noa notification on unexpected vif (csa_vif=%d, notif=%d)",
1590 		 FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color), id_n_color))
1591 		goto out_unlock;
1592 
1593 	IWL_DEBUG_INFO(mvm, "Channel Switch Started Notification\n");
1594 
1595 	schedule_delayed_work(&mvm->cs_tx_unblock_dwork,
1596 			      msecs_to_jiffies(IWL_MVM_CS_UNBLOCK_TX_TIMEOUT *
1597 					       csa_vif->bss_conf.beacon_int));
1598 
1599 	ieee80211_csa_finish(csa_vif);
1600 
1601 	rcu_read_unlock();
1602 
1603 	RCU_INIT_POINTER(mvm->csa_vif, NULL);
1604 
1605 	return;
1606 
1607 out_unlock:
1608 	rcu_read_unlock();
1609 }
1610