1 /****************************************************************************** 2 * 3 * This file is provided under a dual BSD/GPLv2 license. When using or 4 * redistributing this file, you may do so under either license. 5 * 6 * GPL LICENSE SUMMARY 7 * 8 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. 9 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH 10 * 11 * This program is free software; you can redistribute it and/or modify 12 * it under the terms of version 2 of the GNU General Public License as 13 * published by the Free Software Foundation. 14 * 15 * This program is distributed in the hope that it will be useful, but 16 * WITHOUT ANY WARRANTY; without even the implied warranty of 17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 18 * General Public License for more details. 19 * 20 * You should have received a copy of the GNU General Public License 21 * along with this program; if not, write to the Free Software 22 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, 23 * USA 24 * 25 * The full GNU General Public License is included in this distribution 26 * in the file called COPYING. 27 * 28 * Contact Information: 29 * Intel Linux Wireless <linuxwifi@intel.com> 30 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 31 * 32 * BSD LICENSE 33 * 34 * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. 35 * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH 36 * All rights reserved. 37 * 38 * Redistribution and use in source and binary forms, with or without 39 * modification, are permitted provided that the following conditions 40 * are met: 41 * 42 * * Redistributions of source code must retain the above copyright 43 * notice, this list of conditions and the following disclaimer. 44 * * Redistributions in binary form must reproduce the above copyright 45 * notice, this list of conditions and the following disclaimer in 46 * the documentation and/or other materials provided with the 47 * distribution. 48 * * Neither the name Intel Corporation nor the names of its 49 * contributors may be used to endorse or promote products derived 50 * from this software without specific prior written permission. 51 * 52 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 53 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 54 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 55 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 56 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 57 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 58 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 59 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 60 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 61 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 62 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 63 * 64 *****************************************************************************/ 65 66 #include <linux/jiffies.h> 67 #include <net/mac80211.h> 68 69 #include "iwl-notif-wait.h" 70 #include "iwl-trans.h" 71 #include "fw-api.h" 72 #include "time-event.h" 73 #include "mvm.h" 74 #include "iwl-io.h" 75 #include "iwl-prph.h" 76 #include "fw-dbg.h" 77 78 /* 79 * For the high priority TE use a time event type that has similar priority to 80 * the FW's action scan priority. 81 */ 82 #define IWL_MVM_ROC_TE_TYPE_NORMAL TE_P2P_DEVICE_DISCOVERABLE 83 #define IWL_MVM_ROC_TE_TYPE_MGMT_TX TE_P2P_CLIENT_ASSOC 84 85 void iwl_mvm_te_clear_data(struct iwl_mvm *mvm, 86 struct iwl_mvm_time_event_data *te_data) 87 { 88 lockdep_assert_held(&mvm->time_event_lock); 89 90 if (!te_data->vif) 91 return; 92 93 list_del(&te_data->list); 94 te_data->running = false; 95 te_data->uid = 0; 96 te_data->id = TE_MAX; 97 te_data->vif = NULL; 98 } 99 100 void iwl_mvm_roc_done_wk(struct work_struct *wk) 101 { 102 struct iwl_mvm *mvm = container_of(wk, struct iwl_mvm, roc_done_wk); 103 u32 queues = 0; 104 105 /* 106 * Clear the ROC_RUNNING /ROC_AUX_RUNNING status bit. 107 * This will cause the TX path to drop offchannel transmissions. 108 * That would also be done by mac80211, but it is racy, in particular 109 * in the case that the time event actually completed in the firmware 110 * (which is handled in iwl_mvm_te_handle_notif). 111 */ 112 if (test_and_clear_bit(IWL_MVM_STATUS_ROC_RUNNING, &mvm->status)) { 113 queues |= BIT(IWL_MVM_OFFCHANNEL_QUEUE); 114 iwl_mvm_unref(mvm, IWL_MVM_REF_ROC); 115 } 116 if (test_and_clear_bit(IWL_MVM_STATUS_ROC_AUX_RUNNING, &mvm->status)) { 117 queues |= BIT(mvm->aux_queue); 118 iwl_mvm_unref(mvm, IWL_MVM_REF_ROC_AUX); 119 } 120 121 synchronize_net(); 122 123 /* 124 * Flush the offchannel queue -- this is called when the time 125 * event finishes or is canceled, so that frames queued for it 126 * won't get stuck on the queue and be transmitted in the next 127 * time event. 128 * We have to send the command asynchronously since this cannot 129 * be under the mutex for locking reasons, but that's not an 130 * issue as it will have to complete before the next command is 131 * executed, and a new time event means a new command. 132 */ 133 iwl_mvm_flush_tx_path(mvm, queues, CMD_ASYNC); 134 } 135 136 static void iwl_mvm_roc_finished(struct iwl_mvm *mvm) 137 { 138 /* 139 * Of course, our status bit is just as racy as mac80211, so in 140 * addition, fire off the work struct which will drop all frames 141 * from the hardware queues that made it through the race. First 142 * it will of course synchronize the TX path to make sure that 143 * any *new* TX will be rejected. 144 */ 145 schedule_work(&mvm->roc_done_wk); 146 } 147 148 static void iwl_mvm_csa_noa_start(struct iwl_mvm *mvm) 149 { 150 struct ieee80211_vif *csa_vif; 151 152 rcu_read_lock(); 153 154 csa_vif = rcu_dereference(mvm->csa_vif); 155 if (!csa_vif || !csa_vif->csa_active) 156 goto out_unlock; 157 158 IWL_DEBUG_TE(mvm, "CSA NOA started\n"); 159 160 /* 161 * CSA NoA is started but we still have beacons to 162 * transmit on the current channel. 163 * So we just do nothing here and the switch 164 * will be performed on the last TBTT. 165 */ 166 if (!ieee80211_csa_is_complete(csa_vif)) { 167 IWL_WARN(mvm, "CSA NOA started too early\n"); 168 goto out_unlock; 169 } 170 171 ieee80211_csa_finish(csa_vif); 172 173 rcu_read_unlock(); 174 175 RCU_INIT_POINTER(mvm->csa_vif, NULL); 176 177 return; 178 179 out_unlock: 180 rcu_read_unlock(); 181 } 182 183 static bool iwl_mvm_te_check_disconnect(struct iwl_mvm *mvm, 184 struct ieee80211_vif *vif, 185 const char *errmsg) 186 { 187 if (vif->type != NL80211_IFTYPE_STATION) 188 return false; 189 if (vif->bss_conf.assoc && vif->bss_conf.dtim_period) 190 return false; 191 if (errmsg) 192 IWL_ERR(mvm, "%s\n", errmsg); 193 194 iwl_mvm_connection_loss(mvm, vif, errmsg); 195 return true; 196 } 197 198 static void 199 iwl_mvm_te_handle_notify_csa(struct iwl_mvm *mvm, 200 struct iwl_mvm_time_event_data *te_data, 201 struct iwl_time_event_notif *notif) 202 { 203 struct ieee80211_vif *vif = te_data->vif; 204 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 205 206 if (!notif->status) 207 IWL_DEBUG_TE(mvm, "CSA time event failed to start\n"); 208 209 switch (te_data->vif->type) { 210 case NL80211_IFTYPE_AP: 211 if (!notif->status) 212 mvmvif->csa_failed = true; 213 iwl_mvm_csa_noa_start(mvm); 214 break; 215 case NL80211_IFTYPE_STATION: 216 if (!notif->status) { 217 iwl_mvm_connection_loss(mvm, vif, 218 "CSA TE failed to start"); 219 break; 220 } 221 iwl_mvm_csa_client_absent(mvm, te_data->vif); 222 ieee80211_chswitch_done(te_data->vif, true); 223 break; 224 default: 225 /* should never happen */ 226 WARN_ON_ONCE(1); 227 break; 228 } 229 230 /* we don't need it anymore */ 231 iwl_mvm_te_clear_data(mvm, te_data); 232 } 233 234 static void iwl_mvm_te_check_trigger(struct iwl_mvm *mvm, 235 struct iwl_time_event_notif *notif, 236 struct iwl_mvm_time_event_data *te_data) 237 { 238 struct iwl_fw_dbg_trigger_tlv *trig; 239 struct iwl_fw_dbg_trigger_time_event *te_trig; 240 int i; 241 242 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_TIME_EVENT)) 243 return; 244 245 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_TIME_EVENT); 246 te_trig = (void *)trig->data; 247 248 if (!iwl_fw_dbg_trigger_check_stop(mvm, te_data->vif, trig)) 249 return; 250 251 for (i = 0; i < ARRAY_SIZE(te_trig->time_events); i++) { 252 u32 trig_te_id = le32_to_cpu(te_trig->time_events[i].id); 253 u32 trig_action_bitmap = 254 le32_to_cpu(te_trig->time_events[i].action_bitmap); 255 u32 trig_status_bitmap = 256 le32_to_cpu(te_trig->time_events[i].status_bitmap); 257 258 if (trig_te_id != te_data->id || 259 !(trig_action_bitmap & le32_to_cpu(notif->action)) || 260 !(trig_status_bitmap & BIT(le32_to_cpu(notif->status)))) 261 continue; 262 263 iwl_mvm_fw_dbg_collect_trig(mvm, trig, 264 "Time event %d Action 0x%x received status: %d", 265 te_data->id, 266 le32_to_cpu(notif->action), 267 le32_to_cpu(notif->status)); 268 break; 269 } 270 } 271 272 /* 273 * Handles a FW notification for an event that is known to the driver. 274 * 275 * @mvm: the mvm component 276 * @te_data: the time event data 277 * @notif: the notification data corresponding the time event data. 278 */ 279 static void iwl_mvm_te_handle_notif(struct iwl_mvm *mvm, 280 struct iwl_mvm_time_event_data *te_data, 281 struct iwl_time_event_notif *notif) 282 { 283 lockdep_assert_held(&mvm->time_event_lock); 284 285 IWL_DEBUG_TE(mvm, "Handle time event notif - UID = 0x%x action %d\n", 286 le32_to_cpu(notif->unique_id), 287 le32_to_cpu(notif->action)); 288 289 iwl_mvm_te_check_trigger(mvm, notif, te_data); 290 291 /* 292 * The FW sends the start/end time event notifications even for events 293 * that it fails to schedule. This is indicated in the status field of 294 * the notification. This happens in cases that the scheduler cannot 295 * find a schedule that can handle the event (for example requesting a 296 * P2P Device discoveribility, while there are other higher priority 297 * events in the system). 298 */ 299 if (!le32_to_cpu(notif->status)) { 300 const char *msg; 301 302 if (notif->action & cpu_to_le32(TE_V2_NOTIF_HOST_EVENT_START)) 303 msg = "Time Event start notification failure"; 304 else 305 msg = "Time Event end notification failure"; 306 307 IWL_DEBUG_TE(mvm, "%s\n", msg); 308 309 if (iwl_mvm_te_check_disconnect(mvm, te_data->vif, msg)) { 310 iwl_mvm_te_clear_data(mvm, te_data); 311 return; 312 } 313 } 314 315 if (le32_to_cpu(notif->action) & TE_V2_NOTIF_HOST_EVENT_END) { 316 IWL_DEBUG_TE(mvm, 317 "TE ended - current time %lu, estimated end %lu\n", 318 jiffies, te_data->end_jiffies); 319 320 switch (te_data->vif->type) { 321 case NL80211_IFTYPE_P2P_DEVICE: 322 ieee80211_remain_on_channel_expired(mvm->hw); 323 iwl_mvm_roc_finished(mvm); 324 break; 325 case NL80211_IFTYPE_STATION: 326 /* 327 * By now, we should have finished association 328 * and know the dtim period. 329 */ 330 iwl_mvm_te_check_disconnect(mvm, te_data->vif, 331 "No association and the time event is over already..."); 332 break; 333 default: 334 break; 335 } 336 337 iwl_mvm_te_clear_data(mvm, te_data); 338 } else if (le32_to_cpu(notif->action) & TE_V2_NOTIF_HOST_EVENT_START) { 339 te_data->running = true; 340 te_data->end_jiffies = TU_TO_EXP_TIME(te_data->duration); 341 342 if (te_data->vif->type == NL80211_IFTYPE_P2P_DEVICE) { 343 set_bit(IWL_MVM_STATUS_ROC_RUNNING, &mvm->status); 344 iwl_mvm_ref(mvm, IWL_MVM_REF_ROC); 345 ieee80211_ready_on_channel(mvm->hw); 346 } else if (te_data->id == TE_CHANNEL_SWITCH_PERIOD) { 347 iwl_mvm_te_handle_notify_csa(mvm, te_data, notif); 348 } 349 } else { 350 IWL_WARN(mvm, "Got TE with unknown action\n"); 351 } 352 } 353 354 /* 355 * Handle A Aux ROC time event 356 */ 357 static int iwl_mvm_aux_roc_te_handle_notif(struct iwl_mvm *mvm, 358 struct iwl_time_event_notif *notif) 359 { 360 struct iwl_mvm_time_event_data *te_data, *tmp; 361 bool aux_roc_te = false; 362 363 list_for_each_entry_safe(te_data, tmp, &mvm->aux_roc_te_list, list) { 364 if (le32_to_cpu(notif->unique_id) == te_data->uid) { 365 aux_roc_te = true; 366 break; 367 } 368 } 369 if (!aux_roc_te) /* Not a Aux ROC time event */ 370 return -EINVAL; 371 372 iwl_mvm_te_check_trigger(mvm, notif, te_data); 373 374 IWL_DEBUG_TE(mvm, 375 "Aux ROC time event notification - UID = 0x%x action %d (error = %d)\n", 376 le32_to_cpu(notif->unique_id), 377 le32_to_cpu(notif->action), le32_to_cpu(notif->status)); 378 379 if (!le32_to_cpu(notif->status) || 380 le32_to_cpu(notif->action) == TE_V2_NOTIF_HOST_EVENT_END) { 381 /* End TE, notify mac80211 */ 382 ieee80211_remain_on_channel_expired(mvm->hw); 383 iwl_mvm_roc_finished(mvm); /* flush aux queue */ 384 list_del(&te_data->list); /* remove from list */ 385 te_data->running = false; 386 te_data->vif = NULL; 387 te_data->uid = 0; 388 te_data->id = TE_MAX; 389 } else if (le32_to_cpu(notif->action) == TE_V2_NOTIF_HOST_EVENT_START) { 390 set_bit(IWL_MVM_STATUS_ROC_AUX_RUNNING, &mvm->status); 391 te_data->running = true; 392 iwl_mvm_ref(mvm, IWL_MVM_REF_ROC_AUX); 393 ieee80211_ready_on_channel(mvm->hw); /* Start TE */ 394 } else { 395 IWL_DEBUG_TE(mvm, 396 "ERROR: Unknown Aux ROC Time Event (action = %d)\n", 397 le32_to_cpu(notif->action)); 398 return -EINVAL; 399 } 400 401 return 0; 402 } 403 404 /* 405 * The Rx handler for time event notifications 406 */ 407 void iwl_mvm_rx_time_event_notif(struct iwl_mvm *mvm, 408 struct iwl_rx_cmd_buffer *rxb) 409 { 410 struct iwl_rx_packet *pkt = rxb_addr(rxb); 411 struct iwl_time_event_notif *notif = (void *)pkt->data; 412 struct iwl_mvm_time_event_data *te_data, *tmp; 413 414 IWL_DEBUG_TE(mvm, "Time event notification - UID = 0x%x action %d\n", 415 le32_to_cpu(notif->unique_id), 416 le32_to_cpu(notif->action)); 417 418 spin_lock_bh(&mvm->time_event_lock); 419 /* This time event is triggered for Aux ROC request */ 420 if (!iwl_mvm_aux_roc_te_handle_notif(mvm, notif)) 421 goto unlock; 422 423 list_for_each_entry_safe(te_data, tmp, &mvm->time_event_list, list) { 424 if (le32_to_cpu(notif->unique_id) == te_data->uid) 425 iwl_mvm_te_handle_notif(mvm, te_data, notif); 426 } 427 unlock: 428 spin_unlock_bh(&mvm->time_event_lock); 429 } 430 431 static bool iwl_mvm_te_notif(struct iwl_notif_wait_data *notif_wait, 432 struct iwl_rx_packet *pkt, void *data) 433 { 434 struct iwl_mvm *mvm = 435 container_of(notif_wait, struct iwl_mvm, notif_wait); 436 struct iwl_mvm_time_event_data *te_data = data; 437 struct iwl_time_event_notif *resp; 438 int resp_len = iwl_rx_packet_payload_len(pkt); 439 440 if (WARN_ON(pkt->hdr.cmd != TIME_EVENT_NOTIFICATION)) 441 return true; 442 443 if (WARN_ON_ONCE(resp_len != sizeof(*resp))) { 444 IWL_ERR(mvm, "Invalid TIME_EVENT_NOTIFICATION response\n"); 445 return true; 446 } 447 448 resp = (void *)pkt->data; 449 450 /* te_data->uid is already set in the TIME_EVENT_CMD response */ 451 if (le32_to_cpu(resp->unique_id) != te_data->uid) 452 return false; 453 454 IWL_DEBUG_TE(mvm, "TIME_EVENT_NOTIFICATION response - UID = 0x%x\n", 455 te_data->uid); 456 if (!resp->status) 457 IWL_ERR(mvm, 458 "TIME_EVENT_NOTIFICATION received but not executed\n"); 459 460 return true; 461 } 462 463 static bool iwl_mvm_time_event_response(struct iwl_notif_wait_data *notif_wait, 464 struct iwl_rx_packet *pkt, void *data) 465 { 466 struct iwl_mvm *mvm = 467 container_of(notif_wait, struct iwl_mvm, notif_wait); 468 struct iwl_mvm_time_event_data *te_data = data; 469 struct iwl_time_event_resp *resp; 470 int resp_len = iwl_rx_packet_payload_len(pkt); 471 472 if (WARN_ON(pkt->hdr.cmd != TIME_EVENT_CMD)) 473 return true; 474 475 if (WARN_ON_ONCE(resp_len != sizeof(*resp))) { 476 IWL_ERR(mvm, "Invalid TIME_EVENT_CMD response\n"); 477 return true; 478 } 479 480 resp = (void *)pkt->data; 481 482 /* we should never get a response to another TIME_EVENT_CMD here */ 483 if (WARN_ON_ONCE(le32_to_cpu(resp->id) != te_data->id)) 484 return false; 485 486 te_data->uid = le32_to_cpu(resp->unique_id); 487 IWL_DEBUG_TE(mvm, "TIME_EVENT_CMD response - UID = 0x%x\n", 488 te_data->uid); 489 return true; 490 } 491 492 static int iwl_mvm_time_event_send_add(struct iwl_mvm *mvm, 493 struct ieee80211_vif *vif, 494 struct iwl_mvm_time_event_data *te_data, 495 struct iwl_time_event_cmd *te_cmd) 496 { 497 static const u16 time_event_response[] = { TIME_EVENT_CMD }; 498 struct iwl_notification_wait wait_time_event; 499 int ret; 500 501 lockdep_assert_held(&mvm->mutex); 502 503 IWL_DEBUG_TE(mvm, "Add new TE, duration %d TU\n", 504 le32_to_cpu(te_cmd->duration)); 505 506 spin_lock_bh(&mvm->time_event_lock); 507 if (WARN_ON(te_data->id != TE_MAX)) { 508 spin_unlock_bh(&mvm->time_event_lock); 509 return -EIO; 510 } 511 te_data->vif = vif; 512 te_data->duration = le32_to_cpu(te_cmd->duration); 513 te_data->id = le32_to_cpu(te_cmd->id); 514 list_add_tail(&te_data->list, &mvm->time_event_list); 515 spin_unlock_bh(&mvm->time_event_lock); 516 517 /* 518 * Use a notification wait, which really just processes the 519 * command response and doesn't wait for anything, in order 520 * to be able to process the response and get the UID inside 521 * the RX path. Using CMD_WANT_SKB doesn't work because it 522 * stores the buffer and then wakes up this thread, by which 523 * time another notification (that the time event started) 524 * might already be processed unsuccessfully. 525 */ 526 iwl_init_notification_wait(&mvm->notif_wait, &wait_time_event, 527 time_event_response, 528 ARRAY_SIZE(time_event_response), 529 iwl_mvm_time_event_response, te_data); 530 531 ret = iwl_mvm_send_cmd_pdu(mvm, TIME_EVENT_CMD, 0, 532 sizeof(*te_cmd), te_cmd); 533 if (ret) { 534 IWL_ERR(mvm, "Couldn't send TIME_EVENT_CMD: %d\n", ret); 535 iwl_remove_notification(&mvm->notif_wait, &wait_time_event); 536 goto out_clear_te; 537 } 538 539 /* No need to wait for anything, so just pass 1 (0 isn't valid) */ 540 ret = iwl_wait_notification(&mvm->notif_wait, &wait_time_event, 1); 541 /* should never fail */ 542 WARN_ON_ONCE(ret); 543 544 if (ret) { 545 out_clear_te: 546 spin_lock_bh(&mvm->time_event_lock); 547 iwl_mvm_te_clear_data(mvm, te_data); 548 spin_unlock_bh(&mvm->time_event_lock); 549 } 550 return ret; 551 } 552 553 void iwl_mvm_protect_session(struct iwl_mvm *mvm, 554 struct ieee80211_vif *vif, 555 u32 duration, u32 min_duration, 556 u32 max_delay, bool wait_for_notif) 557 { 558 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 559 struct iwl_mvm_time_event_data *te_data = &mvmvif->time_event_data; 560 const u16 te_notif_response[] = { TIME_EVENT_NOTIFICATION }; 561 struct iwl_notification_wait wait_te_notif; 562 struct iwl_time_event_cmd time_cmd = {}; 563 564 lockdep_assert_held(&mvm->mutex); 565 566 if (te_data->running && 567 time_after(te_data->end_jiffies, TU_TO_EXP_TIME(min_duration))) { 568 IWL_DEBUG_TE(mvm, "We have enough time in the current TE: %u\n", 569 jiffies_to_msecs(te_data->end_jiffies - jiffies)); 570 return; 571 } 572 573 if (te_data->running) { 574 IWL_DEBUG_TE(mvm, "extend 0x%x: only %u ms left\n", 575 te_data->uid, 576 jiffies_to_msecs(te_data->end_jiffies - jiffies)); 577 /* 578 * we don't have enough time 579 * cancel the current TE and issue a new one 580 * Of course it would be better to remove the old one only 581 * when the new one is added, but we don't care if we are off 582 * channel for a bit. All we need to do, is not to return 583 * before we actually begin to be on the channel. 584 */ 585 iwl_mvm_stop_session_protection(mvm, vif); 586 } 587 588 time_cmd.action = cpu_to_le32(FW_CTXT_ACTION_ADD); 589 time_cmd.id_and_color = 590 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color)); 591 time_cmd.id = cpu_to_le32(TE_BSS_STA_AGGRESSIVE_ASSOC); 592 593 time_cmd.apply_time = cpu_to_le32(0); 594 595 time_cmd.max_frags = TE_V2_FRAG_NONE; 596 time_cmd.max_delay = cpu_to_le32(max_delay); 597 /* TODO: why do we need to interval = bi if it is not periodic? */ 598 time_cmd.interval = cpu_to_le32(1); 599 time_cmd.duration = cpu_to_le32(duration); 600 time_cmd.repeat = 1; 601 time_cmd.policy = cpu_to_le16(TE_V2_NOTIF_HOST_EVENT_START | 602 TE_V2_NOTIF_HOST_EVENT_END | 603 T2_V2_START_IMMEDIATELY); 604 605 if (!wait_for_notif) { 606 iwl_mvm_time_event_send_add(mvm, vif, te_data, &time_cmd); 607 return; 608 } 609 610 /* 611 * Create notification_wait for the TIME_EVENT_NOTIFICATION to use 612 * right after we send the time event 613 */ 614 iwl_init_notification_wait(&mvm->notif_wait, &wait_te_notif, 615 te_notif_response, 616 ARRAY_SIZE(te_notif_response), 617 iwl_mvm_te_notif, te_data); 618 619 /* If TE was sent OK - wait for the notification that started */ 620 if (iwl_mvm_time_event_send_add(mvm, vif, te_data, &time_cmd)) { 621 IWL_ERR(mvm, "Failed to add TE to protect session\n"); 622 iwl_remove_notification(&mvm->notif_wait, &wait_te_notif); 623 } else if (iwl_wait_notification(&mvm->notif_wait, &wait_te_notif, 624 TU_TO_JIFFIES(max_delay))) { 625 IWL_ERR(mvm, "Failed to protect session until TE\n"); 626 } 627 } 628 629 static bool __iwl_mvm_remove_time_event(struct iwl_mvm *mvm, 630 struct iwl_mvm_time_event_data *te_data, 631 u32 *uid) 632 { 633 u32 id; 634 635 /* 636 * It is possible that by the time we got to this point the time 637 * event was already removed. 638 */ 639 spin_lock_bh(&mvm->time_event_lock); 640 641 /* Save time event uid before clearing its data */ 642 *uid = te_data->uid; 643 id = te_data->id; 644 645 /* 646 * The clear_data function handles time events that were already removed 647 */ 648 iwl_mvm_te_clear_data(mvm, te_data); 649 spin_unlock_bh(&mvm->time_event_lock); 650 651 /* 652 * It is possible that by the time we try to remove it, the time event 653 * has already ended and removed. In such a case there is no need to 654 * send a removal command. 655 */ 656 if (id == TE_MAX) { 657 IWL_DEBUG_TE(mvm, "TE 0x%x has already ended\n", *uid); 658 return false; 659 } 660 661 return true; 662 } 663 664 /* 665 * Explicit request to remove a aux roc time event. The removal of a time 666 * event needs to be synchronized with the flow of a time event's end 667 * notification, which also removes the time event from the op mode 668 * data structures. 669 */ 670 static void iwl_mvm_remove_aux_roc_te(struct iwl_mvm *mvm, 671 struct iwl_mvm_vif *mvmvif, 672 struct iwl_mvm_time_event_data *te_data) 673 { 674 struct iwl_hs20_roc_req aux_cmd = {}; 675 u32 uid; 676 int ret; 677 678 if (!__iwl_mvm_remove_time_event(mvm, te_data, &uid)) 679 return; 680 681 aux_cmd.event_unique_id = cpu_to_le32(uid); 682 aux_cmd.action = cpu_to_le32(FW_CTXT_ACTION_REMOVE); 683 aux_cmd.id_and_color = 684 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color)); 685 IWL_DEBUG_TE(mvm, "Removing BSS AUX ROC TE 0x%x\n", 686 le32_to_cpu(aux_cmd.event_unique_id)); 687 ret = iwl_mvm_send_cmd_pdu(mvm, HOT_SPOT_CMD, 0, 688 sizeof(aux_cmd), &aux_cmd); 689 690 if (WARN_ON(ret)) 691 return; 692 } 693 694 /* 695 * Explicit request to remove a time event. The removal of a time event needs to 696 * be synchronized with the flow of a time event's end notification, which also 697 * removes the time event from the op mode data structures. 698 */ 699 void iwl_mvm_remove_time_event(struct iwl_mvm *mvm, 700 struct iwl_mvm_vif *mvmvif, 701 struct iwl_mvm_time_event_data *te_data) 702 { 703 struct iwl_time_event_cmd time_cmd = {}; 704 u32 uid; 705 int ret; 706 707 if (!__iwl_mvm_remove_time_event(mvm, te_data, &uid)) 708 return; 709 710 /* When we remove a TE, the UID is to be set in the id field */ 711 time_cmd.id = cpu_to_le32(uid); 712 time_cmd.action = cpu_to_le32(FW_CTXT_ACTION_REMOVE); 713 time_cmd.id_and_color = 714 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color)); 715 716 IWL_DEBUG_TE(mvm, "Removing TE 0x%x\n", le32_to_cpu(time_cmd.id)); 717 ret = iwl_mvm_send_cmd_pdu(mvm, TIME_EVENT_CMD, 0, 718 sizeof(time_cmd), &time_cmd); 719 if (WARN_ON(ret)) 720 return; 721 } 722 723 void iwl_mvm_stop_session_protection(struct iwl_mvm *mvm, 724 struct ieee80211_vif *vif) 725 { 726 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 727 struct iwl_mvm_time_event_data *te_data = &mvmvif->time_event_data; 728 729 lockdep_assert_held(&mvm->mutex); 730 iwl_mvm_remove_time_event(mvm, mvmvif, te_data); 731 } 732 733 int iwl_mvm_start_p2p_roc(struct iwl_mvm *mvm, struct ieee80211_vif *vif, 734 int duration, enum ieee80211_roc_type type) 735 { 736 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 737 struct iwl_mvm_time_event_data *te_data = &mvmvif->time_event_data; 738 struct iwl_time_event_cmd time_cmd = {}; 739 740 lockdep_assert_held(&mvm->mutex); 741 if (te_data->running) { 742 IWL_WARN(mvm, "P2P_DEVICE remain on channel already running\n"); 743 return -EBUSY; 744 } 745 746 /* 747 * Flush the done work, just in case it's still pending, so that 748 * the work it does can complete and we can accept new frames. 749 */ 750 flush_work(&mvm->roc_done_wk); 751 752 time_cmd.action = cpu_to_le32(FW_CTXT_ACTION_ADD); 753 time_cmd.id_and_color = 754 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color)); 755 756 switch (type) { 757 case IEEE80211_ROC_TYPE_NORMAL: 758 time_cmd.id = cpu_to_le32(IWL_MVM_ROC_TE_TYPE_NORMAL); 759 break; 760 case IEEE80211_ROC_TYPE_MGMT_TX: 761 time_cmd.id = cpu_to_le32(IWL_MVM_ROC_TE_TYPE_MGMT_TX); 762 break; 763 default: 764 WARN_ONCE(1, "Got an invalid ROC type\n"); 765 return -EINVAL; 766 } 767 768 time_cmd.apply_time = cpu_to_le32(0); 769 time_cmd.interval = cpu_to_le32(1); 770 771 /* 772 * The P2P Device TEs can have lower priority than other events 773 * that are being scheduled by the driver/fw, and thus it might not be 774 * scheduled. To improve the chances of it being scheduled, allow them 775 * to be fragmented, and in addition allow them to be delayed. 776 */ 777 time_cmd.max_frags = min(MSEC_TO_TU(duration)/50, TE_V2_FRAG_ENDLESS); 778 time_cmd.max_delay = cpu_to_le32(MSEC_TO_TU(duration/2)); 779 time_cmd.duration = cpu_to_le32(MSEC_TO_TU(duration)); 780 time_cmd.repeat = 1; 781 time_cmd.policy = cpu_to_le16(TE_V2_NOTIF_HOST_EVENT_START | 782 TE_V2_NOTIF_HOST_EVENT_END | 783 T2_V2_START_IMMEDIATELY); 784 785 return iwl_mvm_time_event_send_add(mvm, vif, te_data, &time_cmd); 786 } 787 788 static struct iwl_mvm_time_event_data *iwl_mvm_get_roc_te(struct iwl_mvm *mvm) 789 { 790 struct iwl_mvm_time_event_data *te_data; 791 792 lockdep_assert_held(&mvm->mutex); 793 794 spin_lock_bh(&mvm->time_event_lock); 795 796 /* 797 * Iterate over the list of time events and find the time event that is 798 * associated with a P2P_DEVICE interface. 799 * This assumes that a P2P_DEVICE interface can have only a single time 800 * event at any given time and this time event coresponds to a ROC 801 * request 802 */ 803 list_for_each_entry(te_data, &mvm->time_event_list, list) { 804 if (te_data->vif->type == NL80211_IFTYPE_P2P_DEVICE) 805 goto out; 806 } 807 808 /* There can only be at most one AUX ROC time event, we just use the 809 * list to simplify/unify code. Remove it if it exists. 810 */ 811 te_data = list_first_entry_or_null(&mvm->aux_roc_te_list, 812 struct iwl_mvm_time_event_data, 813 list); 814 out: 815 spin_unlock_bh(&mvm->time_event_lock); 816 return te_data; 817 } 818 819 void iwl_mvm_cleanup_roc_te(struct iwl_mvm *mvm) 820 { 821 struct iwl_mvm_time_event_data *te_data; 822 u32 uid; 823 824 te_data = iwl_mvm_get_roc_te(mvm); 825 if (te_data) 826 __iwl_mvm_remove_time_event(mvm, te_data, &uid); 827 } 828 829 void iwl_mvm_stop_roc(struct iwl_mvm *mvm) 830 { 831 struct iwl_mvm_vif *mvmvif; 832 struct iwl_mvm_time_event_data *te_data; 833 834 te_data = iwl_mvm_get_roc_te(mvm); 835 if (!te_data) { 836 IWL_WARN(mvm, "No remain on channel event\n"); 837 return; 838 } 839 840 mvmvif = iwl_mvm_vif_from_mac80211(te_data->vif); 841 842 if (te_data->vif->type == NL80211_IFTYPE_P2P_DEVICE) 843 iwl_mvm_remove_time_event(mvm, mvmvif, te_data); 844 else 845 iwl_mvm_remove_aux_roc_te(mvm, mvmvif, te_data); 846 847 iwl_mvm_roc_finished(mvm); 848 } 849 850 int iwl_mvm_schedule_csa_period(struct iwl_mvm *mvm, 851 struct ieee80211_vif *vif, 852 u32 duration, u32 apply_time) 853 { 854 struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); 855 struct iwl_mvm_time_event_data *te_data = &mvmvif->time_event_data; 856 struct iwl_time_event_cmd time_cmd = {}; 857 858 lockdep_assert_held(&mvm->mutex); 859 860 if (te_data->running) { 861 IWL_DEBUG_TE(mvm, "CS period is already scheduled\n"); 862 return -EBUSY; 863 } 864 865 time_cmd.action = cpu_to_le32(FW_CTXT_ACTION_ADD); 866 time_cmd.id_and_color = 867 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color)); 868 time_cmd.id = cpu_to_le32(TE_CHANNEL_SWITCH_PERIOD); 869 time_cmd.apply_time = cpu_to_le32(apply_time); 870 time_cmd.max_frags = TE_V2_FRAG_NONE; 871 time_cmd.duration = cpu_to_le32(duration); 872 time_cmd.repeat = 1; 873 time_cmd.interval = cpu_to_le32(1); 874 time_cmd.policy = cpu_to_le16(TE_V2_NOTIF_HOST_EVENT_START | 875 TE_V2_ABSENCE); 876 877 return iwl_mvm_time_event_send_add(mvm, vif, te_data, &time_cmd); 878 } 879