1 /****************************************************************************** 2 * 3 * This file is provided under a dual BSD/GPLv2 license. When using or 4 * redistributing this file, you may do so under either license. 5 * 6 * GPL LICENSE SUMMARY 7 * 8 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. 9 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH 10 * Copyright(c) 2017 Intel Deutschland GmbH 11 * 12 * This program is free software; you can redistribute it and/or modify 13 * it under the terms of version 2 of the GNU General Public License as 14 * published by the Free Software Foundation. 15 * 16 * This program is distributed in the hope that it will be useful, but 17 * WITHOUT ANY WARRANTY; without even the implied warranty of 18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 19 * General Public License for more details. 20 * 21 * You should have received a copy of the GNU General Public License 22 * along with this program; if not, write to the Free Software 23 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, 24 * USA 25 * 26 * The full GNU General Public License is included in this distribution 27 * in the file called COPYING. 28 * 29 * Contact Information: 30 * Intel Linux Wireless <linuxwifi@intel.com> 31 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 32 * 33 * BSD LICENSE 34 * 35 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. 36 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH 37 * Copyright(c) 2017 Intel Deutschland GmbH 38 * All rights reserved. 39 * 40 * Redistribution and use in source and binary forms, with or without 41 * modification, are permitted provided that the following conditions 42 * are met: 43 * 44 * * Redistributions of source code must retain the above copyright 45 * notice, this list of conditions and the following disclaimer. 46 * * Redistributions in binary form must reproduce the above copyright 47 * notice, this list of conditions and the following disclaimer in 48 * the documentation and/or other materials provided with the 49 * distribution. 50 * * Neither the name Intel Corporation nor the names of its 51 * contributors may be used to endorse or promote products derived 52 * from this software without specific prior written permission. 53 * 54 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 55 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 56 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 57 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 58 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 59 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 60 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 61 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 62 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 63 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 64 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 65 * 66 *****************************************************************************/ 67 68 #include <linux/jiffies.h> 69 #include <net/mac80211.h> 70 71 #include "fw/notif-wait.h" 72 #include "iwl-trans.h" 73 #include "fw-api.h" 74 #include "time-event.h" 75 #include "mvm.h" 76 #include "iwl-io.h" 77 #include "iwl-prph.h" 78 79 /* 80 * For the high priority TE use a time event type that has similar priority to 81 * the FW's action scan priority. 82 */ 83 #define IWL_MVM_ROC_TE_TYPE_NORMAL TE_P2P_DEVICE_DISCOVERABLE 84 #define IWL_MVM_ROC_TE_TYPE_MGMT_TX TE_P2P_CLIENT_ASSOC 85 86 void iwl_mvm_te_clear_data(struct iwl_mvm *mvm, 87 struct iwl_mvm_time_event_data *te_data) 88 { 89 lockdep_assert_held(&mvm->time_event_lock); 90 91 if (!te_data->vif) 92 return; 93 94 list_del(&te_data->list); 95 te_data->running = false; 96 te_data->uid = 0; 97 te_data->id = TE_MAX; 98 te_data->vif = NULL; 99 } 100 101 void iwl_mvm_roc_done_wk(struct work_struct *wk) 102 { 103 struct iwl_mvm *mvm = container_of(wk, struct iwl_mvm, roc_done_wk); 104 105 /* 106 * Clear the ROC_RUNNING /ROC_AUX_RUNNING status bit. 107 * This will cause the TX path to drop offchannel transmissions. 108 * That would also be done by mac80211, but it is racy, in particular 109 * in the case that the time event actually completed in the firmware 110 * (which is handled in iwl_mvm_te_handle_notif). 111 */ 112 if (test_and_clear_bit(IWL_MVM_STATUS_ROC_RUNNING, &mvm->status)) 113 iwl_mvm_unref(mvm, IWL_MVM_REF_ROC); 114 if (test_and_clear_bit(IWL_MVM_STATUS_ROC_AUX_RUNNING, &mvm->status)) 115 iwl_mvm_unref(mvm, IWL_MVM_REF_ROC_AUX); 116 117 synchronize_net(); 118 119 /* 120 * Flush the offchannel queue -- this is called when the time 121 * event finishes or is canceled, so that frames queued for it 122 * won't get stuck on the queue and be transmitted in the next 123 * time event. 124 * We have to send the command asynchronously since this cannot 125 * be under the mutex for locking reasons, but that's not an 126 * issue as it will have to complete before the next command is 127 * executed, and a new time event means a new command. 128 */ 129 iwl_mvm_flush_sta(mvm, &mvm->aux_sta, true, CMD_ASYNC); 130 131 /* Do the same for the P2P device queue (STA) */ 132 if (test_and_clear_bit(IWL_MVM_STATUS_NEED_FLUSH_P2P, &mvm->status)) { 133 struct iwl_mvm_vif *mvmvif; 134 135 /* 136 * NB: access to this pointer would be racy, but the flush bit 137 * can only be set when we had a P2P-Device VIF, and we have a 138 * flush of this work in iwl_mvm_prepare_mac_removal() so it's 139 * not really racy. 140 */ 141 142 if (!WARN_ON(!mvm->p2p_device_vif)) { 143 mvmvif = iwl_mvm_vif_from_mac80211(mvm->p2p_device_vif); 144 iwl_mvm_flush_sta(mvm, &mvmvif->bcast_sta, true, 145 CMD_ASYNC); 146 } 147 } 148 } 149 150 static void iwl_mvm_roc_finished(struct iwl_mvm *mvm) 151 { 152 /* 153 * Of course, our status bit is just as racy as mac80211, so in 154 * addition, fire off the work struct which will drop all frames 155 * from the hardware queues that made it through the race. First 156 * it will of course synchronize the TX path to make sure that 157 * any *new* TX will be rejected. 158 */ 159 schedule_work(&mvm->roc_done_wk); 160 } 161 162 static void iwl_mvm_csa_noa_start(struct iwl_mvm *mvm) 163 { 164 struct ieee80211_vif *csa_vif; 165 166 rcu_read_lock(); 167 168 csa_vif = rcu_dereference(mvm->csa_vif); 169 if (!csa_vif || !csa_vif->csa_active) 170 goto out_unlock; 171 172 IWL_DEBUG_TE(mvm, "CSA NOA started\n"); 173 174 /* 175 * CSA NoA is started but we still have beacons to 176 * transmit on the current channel. 177 * So we just do nothing here and the switch 178 * will be performed on the last TBTT. 179 */ 180 if (!ieee80211_csa_is_complete(csa_vif)) { 181 IWL_WARN(mvm, "CSA NOA started too early\n"); 182 goto out_unlock; 183 } 184 185 ieee80211_csa_finish(csa_vif); 186 187 rcu_read_unlock(); 188 189 RCU_INIT_POINTER(mvm->csa_vif, NULL); 190 191 return; 192 193 out_unlock: 194 rcu_read_unlock(); 195 } 196 197 static bool iwl_mvm_te_check_disconnect(struct iwl_mvm *mvm, 198 struct ieee80211_vif *vif, 199 const char *errmsg) 200 { 201 if (vif->type != NL80211_IFTYPE_STATION) 202 return false; 203 if (vif->bss_conf.assoc && vif->bss_conf.dtim_period) 204 return false; 205 if (errmsg) 206 IWL_ERR(mvm, "%s\n", errmsg); 207 208 iwl_mvm_connection_loss(mvm, vif, errmsg); 209 return true; 210 } 211 212 static void 213 iwl_mvm_te_handle_notify_csa(struct iwl_mvm *mvm, 214 struct iwl_mvm_time_event_data *te_data, 215 struct iwl_time_event_notif *notif) 216 { 217 struct ieee80211_vif *vif = te_data->vif; 218 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 219 220 if (!notif->status) 221 IWL_DEBUG_TE(mvm, "CSA time event failed to start\n"); 222 223 switch (te_data->vif->type) { 224 case NL80211_IFTYPE_AP: 225 if (!notif->status) 226 mvmvif->csa_failed = true; 227 iwl_mvm_csa_noa_start(mvm); 228 break; 229 case NL80211_IFTYPE_STATION: 230 if (!notif->status) { 231 iwl_mvm_connection_loss(mvm, vif, 232 "CSA TE failed to start"); 233 break; 234 } 235 iwl_mvm_csa_client_absent(mvm, te_data->vif); 236 ieee80211_chswitch_done(te_data->vif, true); 237 break; 238 default: 239 /* should never happen */ 240 WARN_ON_ONCE(1); 241 break; 242 } 243 244 /* we don't need it anymore */ 245 iwl_mvm_te_clear_data(mvm, te_data); 246 } 247 248 static void iwl_mvm_te_check_trigger(struct iwl_mvm *mvm, 249 struct iwl_time_event_notif *notif, 250 struct iwl_mvm_time_event_data *te_data) 251 { 252 struct iwl_fw_dbg_trigger_tlv *trig; 253 struct iwl_fw_dbg_trigger_time_event *te_trig; 254 int i; 255 256 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_TIME_EVENT)) 257 return; 258 259 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_TIME_EVENT); 260 te_trig = (void *)trig->data; 261 262 if (!iwl_fw_dbg_trigger_check_stop(&mvm->fwrt, 263 ieee80211_vif_to_wdev(te_data->vif), 264 trig)) 265 return; 266 267 for (i = 0; i < ARRAY_SIZE(te_trig->time_events); i++) { 268 u32 trig_te_id = le32_to_cpu(te_trig->time_events[i].id); 269 u32 trig_action_bitmap = 270 le32_to_cpu(te_trig->time_events[i].action_bitmap); 271 u32 trig_status_bitmap = 272 le32_to_cpu(te_trig->time_events[i].status_bitmap); 273 274 if (trig_te_id != te_data->id || 275 !(trig_action_bitmap & le32_to_cpu(notif->action)) || 276 !(trig_status_bitmap & BIT(le32_to_cpu(notif->status)))) 277 continue; 278 279 iwl_fw_dbg_collect_trig(&mvm->fwrt, trig, 280 "Time event %d Action 0x%x received status: %d", 281 te_data->id, 282 le32_to_cpu(notif->action), 283 le32_to_cpu(notif->status)); 284 break; 285 } 286 } 287 288 /* 289 * Handles a FW notification for an event that is known to the driver. 290 * 291 * @mvm: the mvm component 292 * @te_data: the time event data 293 * @notif: the notification data corresponding the time event data. 294 */ 295 static void iwl_mvm_te_handle_notif(struct iwl_mvm *mvm, 296 struct iwl_mvm_time_event_data *te_data, 297 struct iwl_time_event_notif *notif) 298 { 299 lockdep_assert_held(&mvm->time_event_lock); 300 301 IWL_DEBUG_TE(mvm, "Handle time event notif - UID = 0x%x action %d\n", 302 le32_to_cpu(notif->unique_id), 303 le32_to_cpu(notif->action)); 304 305 iwl_mvm_te_check_trigger(mvm, notif, te_data); 306 307 /* 308 * The FW sends the start/end time event notifications even for events 309 * that it fails to schedule. This is indicated in the status field of 310 * the notification. This happens in cases that the scheduler cannot 311 * find a schedule that can handle the event (for example requesting a 312 * P2P Device discoveribility, while there are other higher priority 313 * events in the system). 314 */ 315 if (!le32_to_cpu(notif->status)) { 316 const char *msg; 317 318 if (notif->action & cpu_to_le32(TE_V2_NOTIF_HOST_EVENT_START)) 319 msg = "Time Event start notification failure"; 320 else 321 msg = "Time Event end notification failure"; 322 323 IWL_DEBUG_TE(mvm, "%s\n", msg); 324 325 if (iwl_mvm_te_check_disconnect(mvm, te_data->vif, msg)) { 326 iwl_mvm_te_clear_data(mvm, te_data); 327 return; 328 } 329 } 330 331 if (le32_to_cpu(notif->action) & TE_V2_NOTIF_HOST_EVENT_END) { 332 IWL_DEBUG_TE(mvm, 333 "TE ended - current time %lu, estimated end %lu\n", 334 jiffies, te_data->end_jiffies); 335 336 switch (te_data->vif->type) { 337 case NL80211_IFTYPE_P2P_DEVICE: 338 ieee80211_remain_on_channel_expired(mvm->hw); 339 iwl_mvm_roc_finished(mvm); 340 break; 341 case NL80211_IFTYPE_STATION: 342 /* 343 * By now, we should have finished association 344 * and know the dtim period. 345 */ 346 iwl_mvm_te_check_disconnect(mvm, te_data->vif, 347 "No association and the time event is over already..."); 348 break; 349 default: 350 break; 351 } 352 353 iwl_mvm_te_clear_data(mvm, te_data); 354 } else if (le32_to_cpu(notif->action) & TE_V2_NOTIF_HOST_EVENT_START) { 355 te_data->running = true; 356 te_data->end_jiffies = TU_TO_EXP_TIME(te_data->duration); 357 358 if (te_data->vif->type == NL80211_IFTYPE_P2P_DEVICE) { 359 set_bit(IWL_MVM_STATUS_ROC_RUNNING, &mvm->status); 360 iwl_mvm_ref(mvm, IWL_MVM_REF_ROC); 361 ieee80211_ready_on_channel(mvm->hw); 362 } else if (te_data->id == TE_CHANNEL_SWITCH_PERIOD) { 363 iwl_mvm_te_handle_notify_csa(mvm, te_data, notif); 364 } 365 } else { 366 IWL_WARN(mvm, "Got TE with unknown action\n"); 367 } 368 } 369 370 /* 371 * Handle A Aux ROC time event 372 */ 373 static int iwl_mvm_aux_roc_te_handle_notif(struct iwl_mvm *mvm, 374 struct iwl_time_event_notif *notif) 375 { 376 struct iwl_mvm_time_event_data *te_data, *tmp; 377 bool aux_roc_te = false; 378 379 list_for_each_entry_safe(te_data, tmp, &mvm->aux_roc_te_list, list) { 380 if (le32_to_cpu(notif->unique_id) == te_data->uid) { 381 aux_roc_te = true; 382 break; 383 } 384 } 385 if (!aux_roc_te) /* Not a Aux ROC time event */ 386 return -EINVAL; 387 388 iwl_mvm_te_check_trigger(mvm, notif, te_data); 389 390 IWL_DEBUG_TE(mvm, 391 "Aux ROC time event notification - UID = 0x%x action %d (error = %d)\n", 392 le32_to_cpu(notif->unique_id), 393 le32_to_cpu(notif->action), le32_to_cpu(notif->status)); 394 395 if (!le32_to_cpu(notif->status) || 396 le32_to_cpu(notif->action) == TE_V2_NOTIF_HOST_EVENT_END) { 397 /* End TE, notify mac80211 */ 398 ieee80211_remain_on_channel_expired(mvm->hw); 399 iwl_mvm_roc_finished(mvm); /* flush aux queue */ 400 list_del(&te_data->list); /* remove from list */ 401 te_data->running = false; 402 te_data->vif = NULL; 403 te_data->uid = 0; 404 te_data->id = TE_MAX; 405 } else if (le32_to_cpu(notif->action) == TE_V2_NOTIF_HOST_EVENT_START) { 406 set_bit(IWL_MVM_STATUS_ROC_AUX_RUNNING, &mvm->status); 407 te_data->running = true; 408 iwl_mvm_ref(mvm, IWL_MVM_REF_ROC_AUX); 409 ieee80211_ready_on_channel(mvm->hw); /* Start TE */ 410 } else { 411 IWL_DEBUG_TE(mvm, 412 "ERROR: Unknown Aux ROC Time Event (action = %d)\n", 413 le32_to_cpu(notif->action)); 414 return -EINVAL; 415 } 416 417 return 0; 418 } 419 420 /* 421 * The Rx handler for time event notifications 422 */ 423 void iwl_mvm_rx_time_event_notif(struct iwl_mvm *mvm, 424 struct iwl_rx_cmd_buffer *rxb) 425 { 426 struct iwl_rx_packet *pkt = rxb_addr(rxb); 427 struct iwl_time_event_notif *notif = (void *)pkt->data; 428 struct iwl_mvm_time_event_data *te_data, *tmp; 429 430 IWL_DEBUG_TE(mvm, "Time event notification - UID = 0x%x action %d\n", 431 le32_to_cpu(notif->unique_id), 432 le32_to_cpu(notif->action)); 433 434 spin_lock_bh(&mvm->time_event_lock); 435 /* This time event is triggered for Aux ROC request */ 436 if (!iwl_mvm_aux_roc_te_handle_notif(mvm, notif)) 437 goto unlock; 438 439 list_for_each_entry_safe(te_data, tmp, &mvm->time_event_list, list) { 440 if (le32_to_cpu(notif->unique_id) == te_data->uid) 441 iwl_mvm_te_handle_notif(mvm, te_data, notif); 442 } 443 unlock: 444 spin_unlock_bh(&mvm->time_event_lock); 445 } 446 447 static bool iwl_mvm_te_notif(struct iwl_notif_wait_data *notif_wait, 448 struct iwl_rx_packet *pkt, void *data) 449 { 450 struct iwl_mvm *mvm = 451 container_of(notif_wait, struct iwl_mvm, notif_wait); 452 struct iwl_mvm_time_event_data *te_data = data; 453 struct iwl_time_event_notif *resp; 454 int resp_len = iwl_rx_packet_payload_len(pkt); 455 456 if (WARN_ON(pkt->hdr.cmd != TIME_EVENT_NOTIFICATION)) 457 return true; 458 459 if (WARN_ON_ONCE(resp_len != sizeof(*resp))) { 460 IWL_ERR(mvm, "Invalid TIME_EVENT_NOTIFICATION response\n"); 461 return true; 462 } 463 464 resp = (void *)pkt->data; 465 466 /* te_data->uid is already set in the TIME_EVENT_CMD response */ 467 if (le32_to_cpu(resp->unique_id) != te_data->uid) 468 return false; 469 470 IWL_DEBUG_TE(mvm, "TIME_EVENT_NOTIFICATION response - UID = 0x%x\n", 471 te_data->uid); 472 if (!resp->status) 473 IWL_ERR(mvm, 474 "TIME_EVENT_NOTIFICATION received but not executed\n"); 475 476 return true; 477 } 478 479 static bool iwl_mvm_time_event_response(struct iwl_notif_wait_data *notif_wait, 480 struct iwl_rx_packet *pkt, void *data) 481 { 482 struct iwl_mvm *mvm = 483 container_of(notif_wait, struct iwl_mvm, notif_wait); 484 struct iwl_mvm_time_event_data *te_data = data; 485 struct iwl_time_event_resp *resp; 486 int resp_len = iwl_rx_packet_payload_len(pkt); 487 488 if (WARN_ON(pkt->hdr.cmd != TIME_EVENT_CMD)) 489 return true; 490 491 if (WARN_ON_ONCE(resp_len != sizeof(*resp))) { 492 IWL_ERR(mvm, "Invalid TIME_EVENT_CMD response\n"); 493 return true; 494 } 495 496 resp = (void *)pkt->data; 497 498 /* we should never get a response to another TIME_EVENT_CMD here */ 499 if (WARN_ON_ONCE(le32_to_cpu(resp->id) != te_data->id)) 500 return false; 501 502 te_data->uid = le32_to_cpu(resp->unique_id); 503 IWL_DEBUG_TE(mvm, "TIME_EVENT_CMD response - UID = 0x%x\n", 504 te_data->uid); 505 return true; 506 } 507 508 static int iwl_mvm_time_event_send_add(struct iwl_mvm *mvm, 509 struct ieee80211_vif *vif, 510 struct iwl_mvm_time_event_data *te_data, 511 struct iwl_time_event_cmd *te_cmd) 512 { 513 static const u16 time_event_response[] = { TIME_EVENT_CMD }; 514 struct iwl_notification_wait wait_time_event; 515 int ret; 516 517 lockdep_assert_held(&mvm->mutex); 518 519 IWL_DEBUG_TE(mvm, "Add new TE, duration %d TU\n", 520 le32_to_cpu(te_cmd->duration)); 521 522 spin_lock_bh(&mvm->time_event_lock); 523 if (WARN_ON(te_data->id != TE_MAX)) { 524 spin_unlock_bh(&mvm->time_event_lock); 525 return -EIO; 526 } 527 te_data->vif = vif; 528 te_data->duration = le32_to_cpu(te_cmd->duration); 529 te_data->id = le32_to_cpu(te_cmd->id); 530 list_add_tail(&te_data->list, &mvm->time_event_list); 531 spin_unlock_bh(&mvm->time_event_lock); 532 533 /* 534 * Use a notification wait, which really just processes the 535 * command response and doesn't wait for anything, in order 536 * to be able to process the response and get the UID inside 537 * the RX path. Using CMD_WANT_SKB doesn't work because it 538 * stores the buffer and then wakes up this thread, by which 539 * time another notification (that the time event started) 540 * might already be processed unsuccessfully. 541 */ 542 iwl_init_notification_wait(&mvm->notif_wait, &wait_time_event, 543 time_event_response, 544 ARRAY_SIZE(time_event_response), 545 iwl_mvm_time_event_response, te_data); 546 547 ret = iwl_mvm_send_cmd_pdu(mvm, TIME_EVENT_CMD, 0, 548 sizeof(*te_cmd), te_cmd); 549 if (ret) { 550 IWL_ERR(mvm, "Couldn't send TIME_EVENT_CMD: %d\n", ret); 551 iwl_remove_notification(&mvm->notif_wait, &wait_time_event); 552 goto out_clear_te; 553 } 554 555 /* No need to wait for anything, so just pass 1 (0 isn't valid) */ 556 ret = iwl_wait_notification(&mvm->notif_wait, &wait_time_event, 1); 557 /* should never fail */ 558 WARN_ON_ONCE(ret); 559 560 if (ret) { 561 out_clear_te: 562 spin_lock_bh(&mvm->time_event_lock); 563 iwl_mvm_te_clear_data(mvm, te_data); 564 spin_unlock_bh(&mvm->time_event_lock); 565 } 566 return ret; 567 } 568 569 void iwl_mvm_protect_session(struct iwl_mvm *mvm, 570 struct ieee80211_vif *vif, 571 u32 duration, u32 min_duration, 572 u32 max_delay, bool wait_for_notif) 573 { 574 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 575 struct iwl_mvm_time_event_data *te_data = &mvmvif->time_event_data; 576 const u16 te_notif_response[] = { TIME_EVENT_NOTIFICATION }; 577 struct iwl_notification_wait wait_te_notif; 578 struct iwl_time_event_cmd time_cmd = {}; 579 580 lockdep_assert_held(&mvm->mutex); 581 582 if (te_data->running && 583 time_after(te_data->end_jiffies, TU_TO_EXP_TIME(min_duration))) { 584 IWL_DEBUG_TE(mvm, "We have enough time in the current TE: %u\n", 585 jiffies_to_msecs(te_data->end_jiffies - jiffies)); 586 return; 587 } 588 589 if (te_data->running) { 590 IWL_DEBUG_TE(mvm, "extend 0x%x: only %u ms left\n", 591 te_data->uid, 592 jiffies_to_msecs(te_data->end_jiffies - jiffies)); 593 /* 594 * we don't have enough time 595 * cancel the current TE and issue a new one 596 * Of course it would be better to remove the old one only 597 * when the new one is added, but we don't care if we are off 598 * channel for a bit. All we need to do, is not to return 599 * before we actually begin to be on the channel. 600 */ 601 iwl_mvm_stop_session_protection(mvm, vif); 602 } 603 604 time_cmd.action = cpu_to_le32(FW_CTXT_ACTION_ADD); 605 time_cmd.id_and_color = 606 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color)); 607 time_cmd.id = cpu_to_le32(TE_BSS_STA_AGGRESSIVE_ASSOC); 608 609 time_cmd.apply_time = cpu_to_le32(0); 610 611 time_cmd.max_frags = TE_V2_FRAG_NONE; 612 time_cmd.max_delay = cpu_to_le32(max_delay); 613 /* TODO: why do we need to interval = bi if it is not periodic? */ 614 time_cmd.interval = cpu_to_le32(1); 615 time_cmd.duration = cpu_to_le32(duration); 616 time_cmd.repeat = 1; 617 time_cmd.policy = cpu_to_le16(TE_V2_NOTIF_HOST_EVENT_START | 618 TE_V2_NOTIF_HOST_EVENT_END | 619 T2_V2_START_IMMEDIATELY); 620 621 if (!wait_for_notif) { 622 iwl_mvm_time_event_send_add(mvm, vif, te_data, &time_cmd); 623 return; 624 } 625 626 /* 627 * Create notification_wait for the TIME_EVENT_NOTIFICATION to use 628 * right after we send the time event 629 */ 630 iwl_init_notification_wait(&mvm->notif_wait, &wait_te_notif, 631 te_notif_response, 632 ARRAY_SIZE(te_notif_response), 633 iwl_mvm_te_notif, te_data); 634 635 /* If TE was sent OK - wait for the notification that started */ 636 if (iwl_mvm_time_event_send_add(mvm, vif, te_data, &time_cmd)) { 637 IWL_ERR(mvm, "Failed to add TE to protect session\n"); 638 iwl_remove_notification(&mvm->notif_wait, &wait_te_notif); 639 } else if (iwl_wait_notification(&mvm->notif_wait, &wait_te_notif, 640 TU_TO_JIFFIES(max_delay))) { 641 IWL_ERR(mvm, "Failed to protect session until TE\n"); 642 } 643 } 644 645 static bool __iwl_mvm_remove_time_event(struct iwl_mvm *mvm, 646 struct iwl_mvm_time_event_data *te_data, 647 u32 *uid) 648 { 649 u32 id; 650 651 /* 652 * It is possible that by the time we got to this point the time 653 * event was already removed. 654 */ 655 spin_lock_bh(&mvm->time_event_lock); 656 657 /* Save time event uid before clearing its data */ 658 *uid = te_data->uid; 659 id = te_data->id; 660 661 /* 662 * The clear_data function handles time events that were already removed 663 */ 664 iwl_mvm_te_clear_data(mvm, te_data); 665 spin_unlock_bh(&mvm->time_event_lock); 666 667 /* 668 * It is possible that by the time we try to remove it, the time event 669 * has already ended and removed. In such a case there is no need to 670 * send a removal command. 671 */ 672 if (id == TE_MAX) { 673 IWL_DEBUG_TE(mvm, "TE 0x%x has already ended\n", *uid); 674 return false; 675 } 676 677 return true; 678 } 679 680 /* 681 * Explicit request to remove a aux roc time event. The removal of a time 682 * event needs to be synchronized with the flow of a time event's end 683 * notification, which also removes the time event from the op mode 684 * data structures. 685 */ 686 static void iwl_mvm_remove_aux_roc_te(struct iwl_mvm *mvm, 687 struct iwl_mvm_vif *mvmvif, 688 struct iwl_mvm_time_event_data *te_data) 689 { 690 struct iwl_hs20_roc_req aux_cmd = {}; 691 u32 uid; 692 int ret; 693 694 if (!__iwl_mvm_remove_time_event(mvm, te_data, &uid)) 695 return; 696 697 aux_cmd.event_unique_id = cpu_to_le32(uid); 698 aux_cmd.action = cpu_to_le32(FW_CTXT_ACTION_REMOVE); 699 aux_cmd.id_and_color = 700 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color)); 701 IWL_DEBUG_TE(mvm, "Removing BSS AUX ROC TE 0x%x\n", 702 le32_to_cpu(aux_cmd.event_unique_id)); 703 ret = iwl_mvm_send_cmd_pdu(mvm, HOT_SPOT_CMD, 0, 704 sizeof(aux_cmd), &aux_cmd); 705 706 if (WARN_ON(ret)) 707 return; 708 } 709 710 /* 711 * Explicit request to remove a time event. The removal of a time event needs to 712 * be synchronized with the flow of a time event's end notification, which also 713 * removes the time event from the op mode data structures. 714 */ 715 void iwl_mvm_remove_time_event(struct iwl_mvm *mvm, 716 struct iwl_mvm_vif *mvmvif, 717 struct iwl_mvm_time_event_data *te_data) 718 { 719 struct iwl_time_event_cmd time_cmd = {}; 720 u32 uid; 721 int ret; 722 723 if (!__iwl_mvm_remove_time_event(mvm, te_data, &uid)) 724 return; 725 726 /* When we remove a TE, the UID is to be set in the id field */ 727 time_cmd.id = cpu_to_le32(uid); 728 time_cmd.action = cpu_to_le32(FW_CTXT_ACTION_REMOVE); 729 time_cmd.id_and_color = 730 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color)); 731 732 IWL_DEBUG_TE(mvm, "Removing TE 0x%x\n", le32_to_cpu(time_cmd.id)); 733 ret = iwl_mvm_send_cmd_pdu(mvm, TIME_EVENT_CMD, 0, 734 sizeof(time_cmd), &time_cmd); 735 if (WARN_ON(ret)) 736 return; 737 } 738 739 void iwl_mvm_stop_session_protection(struct iwl_mvm *mvm, 740 struct ieee80211_vif *vif) 741 { 742 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 743 struct iwl_mvm_time_event_data *te_data = &mvmvif->time_event_data; 744 u32 id; 745 746 lockdep_assert_held(&mvm->mutex); 747 748 spin_lock_bh(&mvm->time_event_lock); 749 id = te_data->id; 750 spin_unlock_bh(&mvm->time_event_lock); 751 752 if (id != TE_BSS_STA_AGGRESSIVE_ASSOC) { 753 IWL_DEBUG_TE(mvm, 754 "don't remove TE with id=%u (not session protection)\n", 755 id); 756 return; 757 } 758 759 iwl_mvm_remove_time_event(mvm, mvmvif, te_data); 760 } 761 762 int iwl_mvm_start_p2p_roc(struct iwl_mvm *mvm, struct ieee80211_vif *vif, 763 int duration, enum ieee80211_roc_type type) 764 { 765 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 766 struct iwl_mvm_time_event_data *te_data = &mvmvif->time_event_data; 767 struct iwl_time_event_cmd time_cmd = {}; 768 769 lockdep_assert_held(&mvm->mutex); 770 if (te_data->running) { 771 IWL_WARN(mvm, "P2P_DEVICE remain on channel already running\n"); 772 return -EBUSY; 773 } 774 775 time_cmd.action = cpu_to_le32(FW_CTXT_ACTION_ADD); 776 time_cmd.id_and_color = 777 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color)); 778 779 switch (type) { 780 case IEEE80211_ROC_TYPE_NORMAL: 781 time_cmd.id = cpu_to_le32(IWL_MVM_ROC_TE_TYPE_NORMAL); 782 break; 783 case IEEE80211_ROC_TYPE_MGMT_TX: 784 time_cmd.id = cpu_to_le32(IWL_MVM_ROC_TE_TYPE_MGMT_TX); 785 break; 786 default: 787 WARN_ONCE(1, "Got an invalid ROC type\n"); 788 return -EINVAL; 789 } 790 791 time_cmd.apply_time = cpu_to_le32(0); 792 time_cmd.interval = cpu_to_le32(1); 793 794 /* 795 * The P2P Device TEs can have lower priority than other events 796 * that are being scheduled by the driver/fw, and thus it might not be 797 * scheduled. To improve the chances of it being scheduled, allow them 798 * to be fragmented, and in addition allow them to be delayed. 799 */ 800 time_cmd.max_frags = min(MSEC_TO_TU(duration)/50, TE_V2_FRAG_ENDLESS); 801 time_cmd.max_delay = cpu_to_le32(MSEC_TO_TU(duration/2)); 802 time_cmd.duration = cpu_to_le32(MSEC_TO_TU(duration)); 803 time_cmd.repeat = 1; 804 time_cmd.policy = cpu_to_le16(TE_V2_NOTIF_HOST_EVENT_START | 805 TE_V2_NOTIF_HOST_EVENT_END | 806 T2_V2_START_IMMEDIATELY); 807 808 return iwl_mvm_time_event_send_add(mvm, vif, te_data, &time_cmd); 809 } 810 811 static struct iwl_mvm_time_event_data *iwl_mvm_get_roc_te(struct iwl_mvm *mvm) 812 { 813 struct iwl_mvm_time_event_data *te_data; 814 815 lockdep_assert_held(&mvm->mutex); 816 817 spin_lock_bh(&mvm->time_event_lock); 818 819 /* 820 * Iterate over the list of time events and find the time event that is 821 * associated with a P2P_DEVICE interface. 822 * This assumes that a P2P_DEVICE interface can have only a single time 823 * event at any given time and this time event coresponds to a ROC 824 * request 825 */ 826 list_for_each_entry(te_data, &mvm->time_event_list, list) { 827 if (te_data->vif->type == NL80211_IFTYPE_P2P_DEVICE) 828 goto out; 829 } 830 831 /* There can only be at most one AUX ROC time event, we just use the 832 * list to simplify/unify code. Remove it if it exists. 833 */ 834 te_data = list_first_entry_or_null(&mvm->aux_roc_te_list, 835 struct iwl_mvm_time_event_data, 836 list); 837 out: 838 spin_unlock_bh(&mvm->time_event_lock); 839 return te_data; 840 } 841 842 void iwl_mvm_cleanup_roc_te(struct iwl_mvm *mvm) 843 { 844 struct iwl_mvm_time_event_data *te_data; 845 u32 uid; 846 847 te_data = iwl_mvm_get_roc_te(mvm); 848 if (te_data) 849 __iwl_mvm_remove_time_event(mvm, te_data, &uid); 850 } 851 852 void iwl_mvm_stop_roc(struct iwl_mvm *mvm) 853 { 854 struct iwl_mvm_vif *mvmvif; 855 struct iwl_mvm_time_event_data *te_data; 856 857 te_data = iwl_mvm_get_roc_te(mvm); 858 if (!te_data) { 859 IWL_WARN(mvm, "No remain on channel event\n"); 860 return; 861 } 862 863 mvmvif = iwl_mvm_vif_from_mac80211(te_data->vif); 864 865 if (te_data->vif->type == NL80211_IFTYPE_P2P_DEVICE) { 866 iwl_mvm_remove_time_event(mvm, mvmvif, te_data); 867 set_bit(IWL_MVM_STATUS_NEED_FLUSH_P2P, &mvm->status); 868 } else { 869 iwl_mvm_remove_aux_roc_te(mvm, mvmvif, te_data); 870 } 871 872 iwl_mvm_roc_finished(mvm); 873 } 874 875 int iwl_mvm_schedule_csa_period(struct iwl_mvm *mvm, 876 struct ieee80211_vif *vif, 877 u32 duration, u32 apply_time) 878 { 879 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 880 struct iwl_mvm_time_event_data *te_data = &mvmvif->time_event_data; 881 struct iwl_time_event_cmd time_cmd = {}; 882 883 lockdep_assert_held(&mvm->mutex); 884 885 if (te_data->running) { 886 u32 id; 887 888 spin_lock_bh(&mvm->time_event_lock); 889 id = te_data->id; 890 spin_unlock_bh(&mvm->time_event_lock); 891 892 if (id == TE_CHANNEL_SWITCH_PERIOD) { 893 IWL_DEBUG_TE(mvm, "CS period is already scheduled\n"); 894 return -EBUSY; 895 } 896 897 /* 898 * Remove the session protection time event to allow the 899 * channel switch. If we got here, we just heard a beacon so 900 * the session protection is not needed anymore anyway. 901 */ 902 iwl_mvm_remove_time_event(mvm, mvmvif, te_data); 903 } 904 905 time_cmd.action = cpu_to_le32(FW_CTXT_ACTION_ADD); 906 time_cmd.id_and_color = 907 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color)); 908 time_cmd.id = cpu_to_le32(TE_CHANNEL_SWITCH_PERIOD); 909 time_cmd.apply_time = cpu_to_le32(apply_time); 910 time_cmd.max_frags = TE_V2_FRAG_NONE; 911 time_cmd.duration = cpu_to_le32(duration); 912 time_cmd.repeat = 1; 913 time_cmd.interval = cpu_to_le32(1); 914 time_cmd.policy = cpu_to_le16(TE_V2_NOTIF_HOST_EVENT_START | 915 TE_V2_ABSENCE); 916 917 return iwl_mvm_time_event_send_add(mvm, vif, te_data, &time_cmd); 918 } 919