|  | /****************************************************************************** | 
|  | * | 
|  | * This file is provided under a dual BSD/GPLv2 license.  When using or | 
|  | * redistributing this file, you may do so under either license. | 
|  | * | 
|  | * GPL LICENSE SUMMARY | 
|  | * | 
|  | * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. | 
|  | * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH | 
|  | * Copyright(c) 2016 - 2017 Intel Deutschland GmbH | 
|  | * | 
|  | * This program is free software; you can redistribute it and/or modify | 
|  | * it under the terms of version 2 of the GNU General Public License as | 
|  | * published by the Free Software Foundation. | 
|  | * | 
|  | * This program is distributed in the hope that it will be useful, but | 
|  | * WITHOUT ANY WARRANTY; without even the implied warranty of | 
|  | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU | 
|  | * General Public License for more details. | 
|  | * | 
|  | * You should have received a copy of the GNU General Public License | 
|  | * along with this program; if not, write to the Free Software | 
|  | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110, | 
|  | * USA | 
|  | * | 
|  | * The full GNU General Public License is included in this distribution | 
|  | * in the file called COPYING. | 
|  | * | 
|  | * Contact Information: | 
|  | *  Intel Linux Wireless <linuxwifi@intel.com> | 
|  | * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497 | 
|  | * | 
|  | * BSD LICENSE | 
|  | * | 
|  | * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved. | 
|  | * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH | 
|  | * Copyright(c) 2016 - 2017 Intel Deutschland GmbH | 
|  | * All rights reserved. | 
|  | * | 
|  | * Redistribution and use in source and binary forms, with or without | 
|  | * modification, are permitted provided that the following conditions | 
|  | * are met: | 
|  | * | 
|  | *  * Redistributions of source code must retain the above copyright | 
|  | *    notice, this list of conditions and the following disclaimer. | 
|  | *  * Redistributions in binary form must reproduce the above copyright | 
|  | *    notice, this list of conditions and the following disclaimer in | 
|  | *    the documentation and/or other materials provided with the | 
|  | *    distribution. | 
|  | *  * Neither the name Intel Corporation nor the names of its | 
|  | *    contributors may be used to endorse or promote products derived | 
|  | *    from this software without specific prior written permission. | 
|  | * | 
|  | * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS | 
|  | * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT | 
|  | * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR | 
|  | * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | 
|  | * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | 
|  | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT | 
|  | * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, | 
|  | * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY | 
|  | * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | 
|  | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE | 
|  | * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | 
|  | * | 
|  | *****************************************************************************/ | 
|  | #include <linux/module.h> | 
|  | #include <linux/vmalloc.h> | 
|  | #include <net/mac80211.h> | 
|  |  | 
|  | #include "fw/notif-wait.h" | 
|  | #include "iwl-trans.h" | 
|  | #include "iwl-op-mode.h" | 
|  | #include "fw/img.h" | 
|  | #include "iwl-debug.h" | 
|  | #include "iwl-drv.h" | 
|  | #include "iwl-modparams.h" | 
|  | #include "mvm.h" | 
|  | #include "iwl-phy-db.h" | 
|  | #include "iwl-eeprom-parse.h" | 
|  | #include "iwl-csr.h" | 
|  | #include "iwl-io.h" | 
|  | #include "iwl-prph.h" | 
|  | #include "rs.h" | 
|  | #include "fw-api-scan.h" | 
|  | #include "time-event.h" | 
|  | #include "fw-dbg.h" | 
|  | #include "fw-api.h" | 
|  | #include "fw-api-scan.h" | 
|  |  | 
|  | #define DRV_DESCRIPTION	"The new Intel(R) wireless AGN driver for Linux" | 
|  | MODULE_DESCRIPTION(DRV_DESCRIPTION); | 
|  | MODULE_AUTHOR(DRV_COPYRIGHT " " DRV_AUTHOR); | 
|  | MODULE_LICENSE("GPL"); | 
|  |  | 
|  | static const struct iwl_op_mode_ops iwl_mvm_ops; | 
|  | static const struct iwl_op_mode_ops iwl_mvm_ops_mq; | 
|  |  | 
|  | struct iwl_mvm_mod_params iwlmvm_mod_params = { | 
|  | .power_scheme = IWL_POWER_SCHEME_BPS, | 
|  | .tfd_q_hang_detect = true | 
|  | /* rest of fields are 0 by default */ | 
|  | }; | 
|  |  | 
|  | module_param_named(init_dbg, iwlmvm_mod_params.init_dbg, bool, S_IRUGO); | 
|  | MODULE_PARM_DESC(init_dbg, | 
|  | "set to true to debug an ASSERT in INIT fw (default: false"); | 
|  | module_param_named(power_scheme, iwlmvm_mod_params.power_scheme, int, S_IRUGO); | 
|  | MODULE_PARM_DESC(power_scheme, | 
|  | "power management scheme: 1-active, 2-balanced, 3-low power, default: 2"); | 
|  | module_param_named(tfd_q_hang_detect, iwlmvm_mod_params.tfd_q_hang_detect, | 
|  | bool, S_IRUGO); | 
|  | MODULE_PARM_DESC(tfd_q_hang_detect, | 
|  | "TFD queues hang detection (default: true"); | 
|  |  | 
|  | /* | 
|  | * module init and exit functions | 
|  | */ | 
|  | static int __init iwl_mvm_init(void) | 
|  | { | 
|  | int ret; | 
|  |  | 
|  | ret = iwl_mvm_rate_control_register(); | 
|  | if (ret) { | 
|  | pr_err("Unable to register rate control algorithm: %d\n", ret); | 
|  | return ret; | 
|  | } | 
|  |  | 
|  | ret = iwl_opmode_register("iwlmvm", &iwl_mvm_ops); | 
|  |  | 
|  | if (ret) { | 
|  | pr_err("Unable to register MVM op_mode: %d\n", ret); | 
|  | iwl_mvm_rate_control_unregister(); | 
|  | } | 
|  |  | 
|  | return ret; | 
|  | } | 
|  | module_init(iwl_mvm_init); | 
|  |  | 
|  | static void __exit iwl_mvm_exit(void) | 
|  | { | 
|  | iwl_opmode_deregister("iwlmvm"); | 
|  | iwl_mvm_rate_control_unregister(); | 
|  | } | 
|  | module_exit(iwl_mvm_exit); | 
|  |  | 
|  | static void iwl_mvm_nic_config(struct iwl_op_mode *op_mode) | 
|  | { | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  | u8 radio_cfg_type, radio_cfg_step, radio_cfg_dash; | 
|  | u32 reg_val = 0; | 
|  | u32 phy_config = iwl_mvm_get_phy_config(mvm); | 
|  |  | 
|  | radio_cfg_type = (phy_config & FW_PHY_CFG_RADIO_TYPE) >> | 
|  | FW_PHY_CFG_RADIO_TYPE_POS; | 
|  | radio_cfg_step = (phy_config & FW_PHY_CFG_RADIO_STEP) >> | 
|  | FW_PHY_CFG_RADIO_STEP_POS; | 
|  | radio_cfg_dash = (phy_config & FW_PHY_CFG_RADIO_DASH) >> | 
|  | FW_PHY_CFG_RADIO_DASH_POS; | 
|  |  | 
|  | /* SKU control */ | 
|  | reg_val |= CSR_HW_REV_STEP(mvm->trans->hw_rev) << | 
|  | CSR_HW_IF_CONFIG_REG_POS_MAC_STEP; | 
|  | reg_val |= CSR_HW_REV_DASH(mvm->trans->hw_rev) << | 
|  | CSR_HW_IF_CONFIG_REG_POS_MAC_DASH; | 
|  |  | 
|  | /* radio configuration */ | 
|  | reg_val |= radio_cfg_type << CSR_HW_IF_CONFIG_REG_POS_PHY_TYPE; | 
|  | reg_val |= radio_cfg_step << CSR_HW_IF_CONFIG_REG_POS_PHY_STEP; | 
|  | reg_val |= radio_cfg_dash << CSR_HW_IF_CONFIG_REG_POS_PHY_DASH; | 
|  |  | 
|  | WARN_ON((radio_cfg_type << CSR_HW_IF_CONFIG_REG_POS_PHY_TYPE) & | 
|  | ~CSR_HW_IF_CONFIG_REG_MSK_PHY_TYPE); | 
|  |  | 
|  | /* | 
|  | * TODO: Bits 7-8 of CSR in 8000 HW family and higher set the ADC | 
|  | * sampling, and shouldn't be set to any non-zero value. | 
|  | * The same is supposed to be true of the other HW, but unsetting | 
|  | * them (such as the 7260) causes automatic tests to fail on seemingly | 
|  | * unrelated errors. Need to further investigate this, but for now | 
|  | * we'll separate cases. | 
|  | */ | 
|  | if (mvm->trans->cfg->device_family < IWL_DEVICE_FAMILY_8000) | 
|  | reg_val |= CSR_HW_IF_CONFIG_REG_BIT_RADIO_SI; | 
|  |  | 
|  | iwl_trans_set_bits_mask(mvm->trans, CSR_HW_IF_CONFIG_REG, | 
|  | CSR_HW_IF_CONFIG_REG_MSK_MAC_DASH | | 
|  | CSR_HW_IF_CONFIG_REG_MSK_MAC_STEP | | 
|  | CSR_HW_IF_CONFIG_REG_MSK_PHY_TYPE | | 
|  | CSR_HW_IF_CONFIG_REG_MSK_PHY_STEP | | 
|  | CSR_HW_IF_CONFIG_REG_MSK_PHY_DASH | | 
|  | CSR_HW_IF_CONFIG_REG_BIT_RADIO_SI | | 
|  | CSR_HW_IF_CONFIG_REG_BIT_MAC_SI, | 
|  | reg_val); | 
|  |  | 
|  | IWL_DEBUG_INFO(mvm, "Radio type=0x%x-0x%x-0x%x\n", radio_cfg_type, | 
|  | radio_cfg_step, radio_cfg_dash); | 
|  |  | 
|  | /* | 
|  | * W/A : NIC is stuck in a reset state after Early PCIe power off | 
|  | * (PCIe power is lost before PERST# is asserted), causing ME FW | 
|  | * to lose ownership and not being able to obtain it back. | 
|  | */ | 
|  | if (!mvm->trans->cfg->apmg_not_supported) | 
|  | iwl_set_bits_mask_prph(mvm->trans, APMG_PS_CTRL_REG, | 
|  | APMG_PS_CTRL_EARLY_PWR_OFF_RESET_DIS, | 
|  | ~APMG_PS_CTRL_EARLY_PWR_OFF_RESET_DIS); | 
|  | } | 
|  |  | 
|  | /** | 
|  | * enum iwl_rx_handler_context context for Rx handler | 
|  | * @RX_HANDLER_SYNC : this means that it will be called in the Rx path | 
|  | *	which can't acquire mvm->mutex. | 
|  | * @RX_HANDLER_ASYNC_LOCKED : If the handler needs to hold mvm->mutex | 
|  | *	(and only in this case!), it should be set as ASYNC. In that case, | 
|  | *	it will be called from a worker with mvm->mutex held. | 
|  | * @RX_HANDLER_ASYNC_UNLOCKED : in case the handler needs to lock the | 
|  | *	mutex itself, it will be called from a worker without mvm->mutex held. | 
|  | */ | 
|  | enum iwl_rx_handler_context { | 
|  | RX_HANDLER_SYNC, | 
|  | RX_HANDLER_ASYNC_LOCKED, | 
|  | RX_HANDLER_ASYNC_UNLOCKED, | 
|  | }; | 
|  |  | 
|  | /** | 
|  | * struct iwl_rx_handlers handler for FW notification | 
|  | * @cmd_id: command id | 
|  | * @context: see &iwl_rx_handler_context | 
|  | * @fn: the function is called when notification is received | 
|  | */ | 
|  | struct iwl_rx_handlers { | 
|  | u16 cmd_id; | 
|  | enum iwl_rx_handler_context context; | 
|  | void (*fn)(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb); | 
|  | }; | 
|  |  | 
|  | #define RX_HANDLER(_cmd_id, _fn, _context)	\ | 
|  | { .cmd_id = _cmd_id, .fn = _fn, .context = _context } | 
|  | #define RX_HANDLER_GRP(_grp, _cmd, _fn, _context)	\ | 
|  | { .cmd_id = WIDE_ID(_grp, _cmd), .fn = _fn, .context = _context } | 
|  |  | 
|  | /* | 
|  | * Handlers for fw notifications | 
|  | * Convention: RX_HANDLER(CMD_NAME, iwl_mvm_rx_CMD_NAME | 
|  | * This list should be in order of frequency for performance purposes. | 
|  | * | 
|  | * The handler can be one from three contexts, see &iwl_rx_handler_context | 
|  | */ | 
|  | static const struct iwl_rx_handlers iwl_mvm_rx_handlers[] = { | 
|  | RX_HANDLER(TX_CMD, iwl_mvm_rx_tx_cmd, RX_HANDLER_SYNC), | 
|  | RX_HANDLER(BA_NOTIF, iwl_mvm_rx_ba_notif, RX_HANDLER_SYNC), | 
|  |  | 
|  | RX_HANDLER(BT_PROFILE_NOTIFICATION, iwl_mvm_rx_bt_coex_notif, | 
|  | RX_HANDLER_ASYNC_LOCKED), | 
|  | RX_HANDLER(BEACON_NOTIFICATION, iwl_mvm_rx_beacon_notif, | 
|  | RX_HANDLER_ASYNC_LOCKED), | 
|  | RX_HANDLER(STATISTICS_NOTIFICATION, iwl_mvm_rx_statistics, | 
|  | RX_HANDLER_ASYNC_LOCKED), | 
|  | RX_HANDLER(ANTENNA_COUPLING_NOTIFICATION, | 
|  | iwl_mvm_rx_ant_coupling_notif, RX_HANDLER_ASYNC_LOCKED), | 
|  |  | 
|  | RX_HANDLER(BA_WINDOW_STATUS_NOTIFICATION_ID, | 
|  | iwl_mvm_window_status_notif, RX_HANDLER_SYNC), | 
|  |  | 
|  | RX_HANDLER(TIME_EVENT_NOTIFICATION, iwl_mvm_rx_time_event_notif, | 
|  | RX_HANDLER_SYNC), | 
|  | RX_HANDLER(MCC_CHUB_UPDATE_CMD, iwl_mvm_rx_chub_update_mcc, | 
|  | RX_HANDLER_ASYNC_LOCKED), | 
|  |  | 
|  | RX_HANDLER(EOSP_NOTIFICATION, iwl_mvm_rx_eosp_notif, RX_HANDLER_SYNC), | 
|  |  | 
|  | RX_HANDLER(SCAN_ITERATION_COMPLETE, | 
|  | iwl_mvm_rx_lmac_scan_iter_complete_notif, RX_HANDLER_SYNC), | 
|  | RX_HANDLER(SCAN_OFFLOAD_COMPLETE, | 
|  | iwl_mvm_rx_lmac_scan_complete_notif, | 
|  | RX_HANDLER_ASYNC_LOCKED), | 
|  | RX_HANDLER(MATCH_FOUND_NOTIFICATION, iwl_mvm_rx_scan_match_found, | 
|  | RX_HANDLER_SYNC), | 
|  | RX_HANDLER(SCAN_COMPLETE_UMAC, iwl_mvm_rx_umac_scan_complete_notif, | 
|  | RX_HANDLER_ASYNC_LOCKED), | 
|  | RX_HANDLER(SCAN_ITERATION_COMPLETE_UMAC, | 
|  | iwl_mvm_rx_umac_scan_iter_complete_notif, RX_HANDLER_SYNC), | 
|  |  | 
|  | RX_HANDLER(CARD_STATE_NOTIFICATION, iwl_mvm_rx_card_state_notif, | 
|  | RX_HANDLER_SYNC), | 
|  |  | 
|  | RX_HANDLER(MISSED_BEACONS_NOTIFICATION, iwl_mvm_rx_missed_beacons_notif, | 
|  | RX_HANDLER_SYNC), | 
|  |  | 
|  | RX_HANDLER(REPLY_ERROR, iwl_mvm_rx_fw_error, RX_HANDLER_SYNC), | 
|  | RX_HANDLER(PSM_UAPSD_AP_MISBEHAVING_NOTIFICATION, | 
|  | iwl_mvm_power_uapsd_misbehaving_ap_notif, RX_HANDLER_SYNC), | 
|  | RX_HANDLER(DTS_MEASUREMENT_NOTIFICATION, iwl_mvm_temp_notif, | 
|  | RX_HANDLER_ASYNC_LOCKED), | 
|  | RX_HANDLER_GRP(PHY_OPS_GROUP, DTS_MEASUREMENT_NOTIF_WIDE, | 
|  | iwl_mvm_temp_notif, RX_HANDLER_ASYNC_UNLOCKED), | 
|  | RX_HANDLER_GRP(PHY_OPS_GROUP, CT_KILL_NOTIFICATION, | 
|  | iwl_mvm_ct_kill_notif, RX_HANDLER_SYNC), | 
|  |  | 
|  | RX_HANDLER(TDLS_CHANNEL_SWITCH_NOTIFICATION, iwl_mvm_rx_tdls_notif, | 
|  | RX_HANDLER_ASYNC_LOCKED), | 
|  | RX_HANDLER(MFUART_LOAD_NOTIFICATION, iwl_mvm_rx_mfuart_notif, | 
|  | RX_HANDLER_SYNC), | 
|  | RX_HANDLER(TOF_NOTIFICATION, iwl_mvm_tof_resp_handler, | 
|  | RX_HANDLER_ASYNC_LOCKED), | 
|  | RX_HANDLER_GRP(DEBUG_GROUP, MFU_ASSERT_DUMP_NTF, | 
|  | iwl_mvm_mfu_assert_dump_notif, RX_HANDLER_SYNC), | 
|  | RX_HANDLER_GRP(PROT_OFFLOAD_GROUP, STORED_BEACON_NTF, | 
|  | iwl_mvm_rx_stored_beacon_notif, RX_HANDLER_SYNC), | 
|  | RX_HANDLER_GRP(DATA_PATH_GROUP, MU_GROUP_MGMT_NOTIF, | 
|  | iwl_mvm_mu_mimo_grp_notif, RX_HANDLER_SYNC), | 
|  | RX_HANDLER_GRP(DATA_PATH_GROUP, STA_PM_NOTIF, | 
|  | iwl_mvm_sta_pm_notif, RX_HANDLER_SYNC), | 
|  | }; | 
|  | #undef RX_HANDLER | 
|  | #undef RX_HANDLER_GRP | 
|  |  | 
|  | /* Please keep this array *SORTED* by hex value. | 
|  | * Access is done through binary search | 
|  | */ | 
|  | static const struct iwl_hcmd_names iwl_mvm_legacy_names[] = { | 
|  | HCMD_NAME(MVM_ALIVE), | 
|  | HCMD_NAME(REPLY_ERROR), | 
|  | HCMD_NAME(ECHO_CMD), | 
|  | HCMD_NAME(INIT_COMPLETE_NOTIF), | 
|  | HCMD_NAME(PHY_CONTEXT_CMD), | 
|  | HCMD_NAME(DBG_CFG), | 
|  | HCMD_NAME(ANTENNA_COUPLING_NOTIFICATION), | 
|  | HCMD_NAME(SCAN_CFG_CMD), | 
|  | HCMD_NAME(SCAN_REQ_UMAC), | 
|  | HCMD_NAME(SCAN_ABORT_UMAC), | 
|  | HCMD_NAME(SCAN_COMPLETE_UMAC), | 
|  | HCMD_NAME(TOF_CMD), | 
|  | HCMD_NAME(TOF_NOTIFICATION), | 
|  | HCMD_NAME(BA_WINDOW_STATUS_NOTIFICATION_ID), | 
|  | HCMD_NAME(ADD_STA_KEY), | 
|  | HCMD_NAME(ADD_STA), | 
|  | HCMD_NAME(REMOVE_STA), | 
|  | HCMD_NAME(FW_GET_ITEM_CMD), | 
|  | HCMD_NAME(TX_CMD), | 
|  | HCMD_NAME(SCD_QUEUE_CFG), | 
|  | HCMD_NAME(TXPATH_FLUSH), | 
|  | HCMD_NAME(MGMT_MCAST_KEY), | 
|  | HCMD_NAME(WEP_KEY), | 
|  | HCMD_NAME(SHARED_MEM_CFG), | 
|  | HCMD_NAME(TDLS_CHANNEL_SWITCH_CMD), | 
|  | HCMD_NAME(MAC_CONTEXT_CMD), | 
|  | HCMD_NAME(TIME_EVENT_CMD), | 
|  | HCMD_NAME(TIME_EVENT_NOTIFICATION), | 
|  | HCMD_NAME(BINDING_CONTEXT_CMD), | 
|  | HCMD_NAME(TIME_QUOTA_CMD), | 
|  | HCMD_NAME(NON_QOS_TX_COUNTER_CMD), | 
|  | HCMD_NAME(LQ_CMD), | 
|  | HCMD_NAME(FW_PAGING_BLOCK_CMD), | 
|  | HCMD_NAME(SCAN_OFFLOAD_REQUEST_CMD), | 
|  | HCMD_NAME(SCAN_OFFLOAD_ABORT_CMD), | 
|  | HCMD_NAME(HOT_SPOT_CMD), | 
|  | HCMD_NAME(SCAN_OFFLOAD_PROFILES_QUERY_CMD), | 
|  | HCMD_NAME(BT_COEX_UPDATE_CORUN_LUT), | 
|  | HCMD_NAME(BT_COEX_UPDATE_REDUCED_TXP), | 
|  | HCMD_NAME(BT_COEX_CI), | 
|  | HCMD_NAME(PHY_CONFIGURATION_CMD), | 
|  | HCMD_NAME(CALIB_RES_NOTIF_PHY_DB), | 
|  | HCMD_NAME(PHY_DB_CMD), | 
|  | HCMD_NAME(SCAN_OFFLOAD_COMPLETE), | 
|  | HCMD_NAME(SCAN_OFFLOAD_UPDATE_PROFILES_CMD), | 
|  | HCMD_NAME(POWER_TABLE_CMD), | 
|  | HCMD_NAME(PSM_UAPSD_AP_MISBEHAVING_NOTIFICATION), | 
|  | HCMD_NAME(REPLY_THERMAL_MNG_BACKOFF), | 
|  | HCMD_NAME(DC2DC_CONFIG_CMD), | 
|  | HCMD_NAME(NVM_ACCESS_CMD), | 
|  | HCMD_NAME(BEACON_NOTIFICATION), | 
|  | HCMD_NAME(BEACON_TEMPLATE_CMD), | 
|  | HCMD_NAME(TX_ANT_CONFIGURATION_CMD), | 
|  | HCMD_NAME(BT_CONFIG), | 
|  | HCMD_NAME(STATISTICS_CMD), | 
|  | HCMD_NAME(STATISTICS_NOTIFICATION), | 
|  | HCMD_NAME(EOSP_NOTIFICATION), | 
|  | HCMD_NAME(REDUCE_TX_POWER_CMD), | 
|  | HCMD_NAME(CARD_STATE_NOTIFICATION), | 
|  | HCMD_NAME(MISSED_BEACONS_NOTIFICATION), | 
|  | HCMD_NAME(TDLS_CONFIG_CMD), | 
|  | HCMD_NAME(MAC_PM_POWER_TABLE), | 
|  | HCMD_NAME(TDLS_CHANNEL_SWITCH_NOTIFICATION), | 
|  | HCMD_NAME(MFUART_LOAD_NOTIFICATION), | 
|  | HCMD_NAME(RSS_CONFIG_CMD), | 
|  | HCMD_NAME(SCAN_ITERATION_COMPLETE_UMAC), | 
|  | HCMD_NAME(REPLY_RX_PHY_CMD), | 
|  | HCMD_NAME(REPLY_RX_MPDU_CMD), | 
|  | HCMD_NAME(BA_NOTIF), | 
|  | HCMD_NAME(MCC_UPDATE_CMD), | 
|  | HCMD_NAME(MCC_CHUB_UPDATE_CMD), | 
|  | HCMD_NAME(MARKER_CMD), | 
|  | HCMD_NAME(BT_PROFILE_NOTIFICATION), | 
|  | HCMD_NAME(BCAST_FILTER_CMD), | 
|  | HCMD_NAME(MCAST_FILTER_CMD), | 
|  | HCMD_NAME(REPLY_SF_CFG_CMD), | 
|  | HCMD_NAME(REPLY_BEACON_FILTERING_CMD), | 
|  | HCMD_NAME(D3_CONFIG_CMD), | 
|  | HCMD_NAME(PROT_OFFLOAD_CONFIG_CMD), | 
|  | HCMD_NAME(OFFLOADS_QUERY_CMD), | 
|  | HCMD_NAME(REMOTE_WAKE_CONFIG_CMD), | 
|  | HCMD_NAME(MATCH_FOUND_NOTIFICATION), | 
|  | HCMD_NAME(DTS_MEASUREMENT_NOTIFICATION), | 
|  | HCMD_NAME(WOWLAN_PATTERNS), | 
|  | HCMD_NAME(WOWLAN_CONFIGURATION), | 
|  | HCMD_NAME(WOWLAN_TSC_RSC_PARAM), | 
|  | HCMD_NAME(WOWLAN_TKIP_PARAM), | 
|  | HCMD_NAME(WOWLAN_KEK_KCK_MATERIAL), | 
|  | HCMD_NAME(WOWLAN_GET_STATUSES), | 
|  | HCMD_NAME(SCAN_ITERATION_COMPLETE), | 
|  | HCMD_NAME(D0I3_END_CMD), | 
|  | HCMD_NAME(LTR_CONFIG), | 
|  | }; | 
|  |  | 
|  | /* Please keep this array *SORTED* by hex value. | 
|  | * Access is done through binary search | 
|  | */ | 
|  | static const struct iwl_hcmd_names iwl_mvm_system_names[] = { | 
|  | HCMD_NAME(SHARED_MEM_CFG_CMD), | 
|  | HCMD_NAME(INIT_EXTENDED_CFG_CMD), | 
|  | }; | 
|  |  | 
|  | /* Please keep this array *SORTED* by hex value. | 
|  | * Access is done through binary search | 
|  | */ | 
|  | static const struct iwl_hcmd_names iwl_mvm_mac_conf_names[] = { | 
|  | HCMD_NAME(LINK_QUALITY_MEASUREMENT_CMD), | 
|  | HCMD_NAME(LINK_QUALITY_MEASUREMENT_COMPLETE_NOTIF), | 
|  | HCMD_NAME(CHANNEL_SWITCH_NOA_NOTIF), | 
|  | }; | 
|  |  | 
|  | /* Please keep this array *SORTED* by hex value. | 
|  | * Access is done through binary search | 
|  | */ | 
|  | static const struct iwl_hcmd_names iwl_mvm_phy_names[] = { | 
|  | HCMD_NAME(CMD_DTS_MEASUREMENT_TRIGGER_WIDE), | 
|  | HCMD_NAME(CTDP_CONFIG_CMD), | 
|  | HCMD_NAME(TEMP_REPORTING_THRESHOLDS_CMD), | 
|  | HCMD_NAME(GEO_TX_POWER_LIMIT), | 
|  | HCMD_NAME(CT_KILL_NOTIFICATION), | 
|  | HCMD_NAME(DTS_MEASUREMENT_NOTIF_WIDE), | 
|  | }; | 
|  |  | 
|  | /* Please keep this array *SORTED* by hex value. | 
|  | * Access is done through binary search | 
|  | */ | 
|  | static const struct iwl_hcmd_names iwl_mvm_data_path_names[] = { | 
|  | HCMD_NAME(DQA_ENABLE_CMD), | 
|  | HCMD_NAME(UPDATE_MU_GROUPS_CMD), | 
|  | HCMD_NAME(TRIGGER_RX_QUEUES_NOTIF_CMD), | 
|  | HCMD_NAME(STA_PM_NOTIF), | 
|  | HCMD_NAME(MU_GROUP_MGMT_NOTIF), | 
|  | HCMD_NAME(RX_QUEUES_NOTIFICATION), | 
|  | }; | 
|  |  | 
|  | /* Please keep this array *SORTED* by hex value. | 
|  | * Access is done through binary search | 
|  | */ | 
|  | static const struct iwl_hcmd_names iwl_mvm_debug_names[] = { | 
|  | HCMD_NAME(MFU_ASSERT_DUMP_NTF), | 
|  | }; | 
|  |  | 
|  | /* Please keep this array *SORTED* by hex value. | 
|  | * Access is done through binary search | 
|  | */ | 
|  | static const struct iwl_hcmd_names iwl_mvm_prot_offload_names[] = { | 
|  | HCMD_NAME(STORED_BEACON_NTF), | 
|  | }; | 
|  |  | 
|  | /* Please keep this array *SORTED* by hex value. | 
|  | * Access is done through binary search | 
|  | */ | 
|  | static const struct iwl_hcmd_names iwl_mvm_regulatory_and_nvm_names[] = { | 
|  | HCMD_NAME(NVM_ACCESS_COMPLETE), | 
|  | HCMD_NAME(NVM_GET_INFO), | 
|  | }; | 
|  |  | 
|  | static const struct iwl_hcmd_arr iwl_mvm_groups[] = { | 
|  | [LEGACY_GROUP] = HCMD_ARR(iwl_mvm_legacy_names), | 
|  | [LONG_GROUP] = HCMD_ARR(iwl_mvm_legacy_names), | 
|  | [SYSTEM_GROUP] = HCMD_ARR(iwl_mvm_system_names), | 
|  | [MAC_CONF_GROUP] = HCMD_ARR(iwl_mvm_mac_conf_names), | 
|  | [PHY_OPS_GROUP] = HCMD_ARR(iwl_mvm_phy_names), | 
|  | [DATA_PATH_GROUP] = HCMD_ARR(iwl_mvm_data_path_names), | 
|  | [PROT_OFFLOAD_GROUP] = HCMD_ARR(iwl_mvm_prot_offload_names), | 
|  | [REGULATORY_AND_NVM_GROUP] = | 
|  | HCMD_ARR(iwl_mvm_regulatory_and_nvm_names), | 
|  | }; | 
|  |  | 
|  | /* this forward declaration can avoid to export the function */ | 
|  | static void iwl_mvm_async_handlers_wk(struct work_struct *wk); | 
|  | static void iwl_mvm_d0i3_exit_work(struct work_struct *wk); | 
|  |  | 
|  | static u32 calc_min_backoff(struct iwl_trans *trans, const struct iwl_cfg *cfg) | 
|  | { | 
|  | const struct iwl_pwr_tx_backoff *pwr_tx_backoff = cfg->pwr_tx_backoffs; | 
|  |  | 
|  | if (!pwr_tx_backoff) | 
|  | return 0; | 
|  |  | 
|  | while (pwr_tx_backoff->pwr) { | 
|  | if (trans->dflt_pwr_limit >= pwr_tx_backoff->pwr) | 
|  | return pwr_tx_backoff->backoff; | 
|  |  | 
|  | pwr_tx_backoff++; | 
|  | } | 
|  |  | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_fw_error_dump_wk(struct work_struct *work); | 
|  |  | 
|  | static void iwl_mvm_tx_unblock_dwork(struct work_struct *work) | 
|  | { | 
|  | struct iwl_mvm *mvm = | 
|  | container_of(work, struct iwl_mvm, cs_tx_unblock_dwork.work); | 
|  | struct ieee80211_vif *tx_blocked_vif; | 
|  | struct iwl_mvm_vif *mvmvif; | 
|  |  | 
|  | mutex_lock(&mvm->mutex); | 
|  |  | 
|  | tx_blocked_vif = | 
|  | rcu_dereference_protected(mvm->csa_tx_blocked_vif, | 
|  | lockdep_is_held(&mvm->mutex)); | 
|  |  | 
|  | if (!tx_blocked_vif) | 
|  | goto unlock; | 
|  |  | 
|  | mvmvif = iwl_mvm_vif_from_mac80211(tx_blocked_vif); | 
|  | iwl_mvm_modify_all_sta_disable_tx(mvm, mvmvif, false); | 
|  | RCU_INIT_POINTER(mvm->csa_tx_blocked_vif, NULL); | 
|  | unlock: | 
|  | mutex_unlock(&mvm->mutex); | 
|  | } | 
|  |  | 
|  | static struct iwl_op_mode * | 
|  | iwl_op_mode_mvm_start(struct iwl_trans *trans, const struct iwl_cfg *cfg, | 
|  | const struct iwl_fw *fw, struct dentry *dbgfs_dir) | 
|  | { | 
|  | struct ieee80211_hw *hw; | 
|  | struct iwl_op_mode *op_mode; | 
|  | struct iwl_mvm *mvm; | 
|  | struct iwl_trans_config trans_cfg = {}; | 
|  | static const u8 no_reclaim_cmds[] = { | 
|  | TX_CMD, | 
|  | }; | 
|  | int err, scan_size; | 
|  | u32 min_backoff; | 
|  |  | 
|  | /* | 
|  | * We use IWL_MVM_STATION_COUNT to check the validity of the station | 
|  | * index all over the driver - check that its value corresponds to the | 
|  | * array size. | 
|  | */ | 
|  | BUILD_BUG_ON(ARRAY_SIZE(mvm->fw_id_to_mac_id) != IWL_MVM_STATION_COUNT); | 
|  |  | 
|  | /******************************** | 
|  | * 1. Allocating and configuring HW data | 
|  | ********************************/ | 
|  | hw = ieee80211_alloc_hw(sizeof(struct iwl_op_mode) + | 
|  | sizeof(struct iwl_mvm), | 
|  | &iwl_mvm_hw_ops); | 
|  | if (!hw) | 
|  | return NULL; | 
|  |  | 
|  | if (cfg->max_rx_agg_size) | 
|  | hw->max_rx_aggregation_subframes = cfg->max_rx_agg_size; | 
|  |  | 
|  | if (cfg->max_tx_agg_size) | 
|  | hw->max_tx_aggregation_subframes = cfg->max_tx_agg_size; | 
|  |  | 
|  | op_mode = hw->priv; | 
|  |  | 
|  | mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  | mvm->dev = trans->dev; | 
|  | mvm->trans = trans; | 
|  | mvm->cfg = cfg; | 
|  | mvm->fw = fw; | 
|  | mvm->hw = hw; | 
|  |  | 
|  | mvm->init_status = 0; | 
|  |  | 
|  | if (iwl_mvm_has_new_rx_api(mvm)) { | 
|  | op_mode->ops = &iwl_mvm_ops_mq; | 
|  | trans->rx_mpdu_cmd_hdr_size = sizeof(struct iwl_rx_mpdu_desc); | 
|  | } else { | 
|  | op_mode->ops = &iwl_mvm_ops; | 
|  | trans->rx_mpdu_cmd_hdr_size = | 
|  | sizeof(struct iwl_rx_mpdu_res_start); | 
|  |  | 
|  | if (WARN_ON(trans->num_rx_queues > 1)) | 
|  | goto out_free; | 
|  | } | 
|  |  | 
|  | mvm->fw_restart = iwlwifi_mod_params.fw_restart ? -1 : 0; | 
|  |  | 
|  | if (!iwl_mvm_is_dqa_supported(mvm)) { | 
|  | mvm->last_agg_queue = mvm->cfg->base_params->num_of_queues - 1; | 
|  |  | 
|  | if (mvm->cfg->base_params->num_of_queues == 16) { | 
|  | mvm->aux_queue = 11; | 
|  | mvm->first_agg_queue = 12; | 
|  | BUILD_BUG_ON(BITS_PER_BYTE * | 
|  | sizeof(mvm->hw_queue_to_mac80211[0]) < 12); | 
|  | } else { | 
|  | mvm->aux_queue = 15; | 
|  | mvm->first_agg_queue = 16; | 
|  | BUILD_BUG_ON(BITS_PER_BYTE * | 
|  | sizeof(mvm->hw_queue_to_mac80211[0]) < 16); | 
|  | } | 
|  | } else { | 
|  | mvm->aux_queue = IWL_MVM_DQA_AUX_QUEUE; | 
|  | mvm->probe_queue = IWL_MVM_DQA_AP_PROBE_RESP_QUEUE; | 
|  | mvm->p2p_dev_queue = IWL_MVM_DQA_P2P_DEVICE_QUEUE; | 
|  | mvm->first_agg_queue = IWL_MVM_DQA_MIN_DATA_QUEUE; | 
|  | mvm->last_agg_queue = IWL_MVM_DQA_MAX_DATA_QUEUE; | 
|  | } | 
|  | mvm->sf_state = SF_UNINIT; | 
|  | if (iwl_mvm_has_new_tx_api(mvm)) | 
|  | mvm->cur_ucode = IWL_UCODE_REGULAR; | 
|  | else | 
|  | mvm->cur_ucode = IWL_UCODE_INIT; | 
|  | mvm->drop_bcn_ap_mode = true; | 
|  |  | 
|  | mutex_init(&mvm->mutex); | 
|  | mutex_init(&mvm->d0i3_suspend_mutex); | 
|  | spin_lock_init(&mvm->async_handlers_lock); | 
|  | INIT_LIST_HEAD(&mvm->time_event_list); | 
|  | INIT_LIST_HEAD(&mvm->aux_roc_te_list); | 
|  | INIT_LIST_HEAD(&mvm->async_handlers_list); | 
|  | spin_lock_init(&mvm->time_event_lock); | 
|  | spin_lock_init(&mvm->queue_info_lock); | 
|  |  | 
|  | INIT_WORK(&mvm->async_handlers_wk, iwl_mvm_async_handlers_wk); | 
|  | INIT_WORK(&mvm->roc_done_wk, iwl_mvm_roc_done_wk); | 
|  | INIT_WORK(&mvm->sta_drained_wk, iwl_mvm_sta_drained_wk); | 
|  | INIT_WORK(&mvm->d0i3_exit_work, iwl_mvm_d0i3_exit_work); | 
|  | INIT_DELAYED_WORK(&mvm->fw_dump_wk, iwl_mvm_fw_error_dump_wk); | 
|  | INIT_DELAYED_WORK(&mvm->tdls_cs.dwork, iwl_mvm_tdls_ch_switch_work); | 
|  | INIT_DELAYED_WORK(&mvm->scan_timeout_dwork, iwl_mvm_scan_timeout_wk); | 
|  | INIT_WORK(&mvm->add_stream_wk, iwl_mvm_add_new_dqa_stream_wk); | 
|  |  | 
|  | spin_lock_init(&mvm->d0i3_tx_lock); | 
|  | spin_lock_init(&mvm->refs_lock); | 
|  | skb_queue_head_init(&mvm->d0i3_tx); | 
|  | init_waitqueue_head(&mvm->d0i3_exit_waitq); | 
|  | init_waitqueue_head(&mvm->rx_sync_waitq); | 
|  |  | 
|  | atomic_set(&mvm->queue_sync_counter, 0); | 
|  |  | 
|  | SET_IEEE80211_DEV(mvm->hw, mvm->trans->dev); | 
|  |  | 
|  | INIT_DELAYED_WORK(&mvm->cs_tx_unblock_dwork, iwl_mvm_tx_unblock_dwork); | 
|  |  | 
|  | /* | 
|  | * Populate the state variables that the transport layer needs | 
|  | * to know about. | 
|  | */ | 
|  | trans_cfg.op_mode = op_mode; | 
|  | trans_cfg.no_reclaim_cmds = no_reclaim_cmds; | 
|  | trans_cfg.n_no_reclaim_cmds = ARRAY_SIZE(no_reclaim_cmds); | 
|  | switch (iwlwifi_mod_params.amsdu_size) { | 
|  | case IWL_AMSDU_DEF: | 
|  | case IWL_AMSDU_4K: | 
|  | trans_cfg.rx_buf_size = IWL_AMSDU_4K; | 
|  | break; | 
|  | case IWL_AMSDU_8K: | 
|  | trans_cfg.rx_buf_size = IWL_AMSDU_8K; | 
|  | break; | 
|  | case IWL_AMSDU_12K: | 
|  | trans_cfg.rx_buf_size = IWL_AMSDU_12K; | 
|  | break; | 
|  | default: | 
|  | pr_err("%s: Unsupported amsdu_size: %d\n", KBUILD_MODNAME, | 
|  | iwlwifi_mod_params.amsdu_size); | 
|  | trans_cfg.rx_buf_size = IWL_AMSDU_4K; | 
|  | } | 
|  |  | 
|  | /* the hardware splits the A-MSDU */ | 
|  | if (mvm->cfg->mq_rx_supported) | 
|  | trans_cfg.rx_buf_size = IWL_AMSDU_4K; | 
|  |  | 
|  | trans->wide_cmd_header = true; | 
|  | trans_cfg.bc_table_dword = true; | 
|  |  | 
|  | trans_cfg.command_groups = iwl_mvm_groups; | 
|  | trans_cfg.command_groups_size = ARRAY_SIZE(iwl_mvm_groups); | 
|  |  | 
|  | if (iwl_mvm_is_dqa_supported(mvm)) | 
|  | trans_cfg.cmd_queue = IWL_MVM_DQA_CMD_QUEUE; | 
|  | else | 
|  | trans_cfg.cmd_queue = IWL_MVM_CMD_QUEUE; | 
|  | trans_cfg.cmd_fifo = IWL_MVM_TX_FIFO_CMD; | 
|  | trans_cfg.scd_set_active = true; | 
|  |  | 
|  | trans_cfg.cb_data_offs = offsetof(struct ieee80211_tx_info, | 
|  | driver_data[2]); | 
|  |  | 
|  | trans_cfg.sdio_adma_addr = fw->sdio_adma_addr; | 
|  | trans_cfg.sw_csum_tx = IWL_MVM_SW_TX_CSUM_OFFLOAD; | 
|  |  | 
|  | /* Set a short watchdog for the command queue */ | 
|  | trans_cfg.cmd_q_wdg_timeout = | 
|  | iwl_mvm_get_wd_timeout(mvm, NULL, false, true); | 
|  |  | 
|  | snprintf(mvm->hw->wiphy->fw_version, | 
|  | sizeof(mvm->hw->wiphy->fw_version), | 
|  | "%s", fw->fw_version); | 
|  |  | 
|  | /* Configure transport layer */ | 
|  | iwl_trans_configure(mvm->trans, &trans_cfg); | 
|  |  | 
|  | trans->rx_mpdu_cmd = REPLY_RX_MPDU_CMD; | 
|  | trans->dbg_dest_tlv = mvm->fw->dbg_dest_tlv; | 
|  | trans->dbg_dest_reg_num = mvm->fw->dbg_dest_reg_num; | 
|  | memcpy(trans->dbg_conf_tlv, mvm->fw->dbg_conf_tlv, | 
|  | sizeof(trans->dbg_conf_tlv)); | 
|  | trans->dbg_trigger_tlv = mvm->fw->dbg_trigger_tlv; | 
|  |  | 
|  | /* set up notification wait support */ | 
|  | iwl_notification_wait_init(&mvm->notif_wait); | 
|  |  | 
|  | /* Init phy db */ | 
|  | mvm->phy_db = iwl_phy_db_init(trans); | 
|  | if (!mvm->phy_db) { | 
|  | IWL_ERR(mvm, "Cannot init phy_db\n"); | 
|  | goto out_free; | 
|  | } | 
|  |  | 
|  | IWL_INFO(mvm, "Detected %s, REV=0x%X\n", | 
|  | mvm->cfg->name, mvm->trans->hw_rev); | 
|  |  | 
|  | if (iwlwifi_mod_params.nvm_file) | 
|  | mvm->nvm_file_name = iwlwifi_mod_params.nvm_file; | 
|  | else | 
|  | IWL_DEBUG_EEPROM(mvm->trans->dev, | 
|  | "working without external nvm file\n"); | 
|  |  | 
|  | err = iwl_trans_start_hw(mvm->trans); | 
|  | if (err) | 
|  | goto out_free; | 
|  |  | 
|  | mutex_lock(&mvm->mutex); | 
|  | iwl_mvm_ref(mvm, IWL_MVM_REF_INIT_UCODE); | 
|  | err = iwl_run_init_mvm_ucode(mvm, true); | 
|  | if (!iwlmvm_mod_params.init_dbg) | 
|  | iwl_mvm_stop_device(mvm); | 
|  | iwl_mvm_unref(mvm, IWL_MVM_REF_INIT_UCODE); | 
|  | mutex_unlock(&mvm->mutex); | 
|  | /* returns 0 if successful, 1 if success but in rfkill */ | 
|  | if (err < 0) { | 
|  | IWL_ERR(mvm, "Failed to run INIT ucode: %d\n", err); | 
|  | goto out_free; | 
|  | } | 
|  |  | 
|  | scan_size = iwl_mvm_scan_size(mvm); | 
|  |  | 
|  | mvm->scan_cmd = kmalloc(scan_size, GFP_KERNEL); | 
|  | if (!mvm->scan_cmd) | 
|  | goto out_free; | 
|  |  | 
|  | /* Set EBS as successful as long as not stated otherwise by the FW. */ | 
|  | mvm->last_ebs_successful = true; | 
|  |  | 
|  | err = iwl_mvm_mac_setup_register(mvm); | 
|  | if (err) | 
|  | goto out_free; | 
|  | mvm->hw_registered = true; | 
|  |  | 
|  | min_backoff = calc_min_backoff(trans, cfg); | 
|  | iwl_mvm_thermal_initialize(mvm, min_backoff); | 
|  |  | 
|  | err = iwl_mvm_dbgfs_register(mvm, dbgfs_dir); | 
|  | if (err) | 
|  | goto out_unregister; | 
|  |  | 
|  | if (!iwl_mvm_has_new_rx_stats_api(mvm)) | 
|  | memset(&mvm->rx_stats_v3, 0, | 
|  | sizeof(struct mvm_statistics_rx_v3)); | 
|  | else | 
|  | memset(&mvm->rx_stats, 0, sizeof(struct mvm_statistics_rx)); | 
|  |  | 
|  | /* The transport always starts with a taken reference, we can | 
|  | * release it now if d0i3 is supported */ | 
|  | if (iwl_mvm_is_d0i3_supported(mvm)) | 
|  | iwl_trans_unref(mvm->trans); | 
|  |  | 
|  | iwl_mvm_tof_init(mvm); | 
|  |  | 
|  | return op_mode; | 
|  |  | 
|  | out_unregister: | 
|  | if (iwlmvm_mod_params.init_dbg) | 
|  | return op_mode; | 
|  |  | 
|  | ieee80211_unregister_hw(mvm->hw); | 
|  | mvm->hw_registered = false; | 
|  | iwl_mvm_leds_exit(mvm); | 
|  | iwl_mvm_thermal_exit(mvm); | 
|  | out_free: | 
|  | flush_delayed_work(&mvm->fw_dump_wk); | 
|  |  | 
|  | if (iwlmvm_mod_params.init_dbg) | 
|  | return op_mode; | 
|  | iwl_phy_db_free(mvm->phy_db); | 
|  | kfree(mvm->scan_cmd); | 
|  | iwl_trans_op_mode_leave(trans); | 
|  |  | 
|  | ieee80211_free_hw(mvm->hw); | 
|  | return NULL; | 
|  | } | 
|  |  | 
|  | static void iwl_op_mode_mvm_stop(struct iwl_op_mode *op_mode) | 
|  | { | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  | int i; | 
|  |  | 
|  | /* If d0i3 is supported, we have released the reference that | 
|  | * the transport started with, so we should take it back now | 
|  | * that we are leaving. | 
|  | */ | 
|  | if (iwl_mvm_is_d0i3_supported(mvm)) | 
|  | iwl_trans_ref(mvm->trans); | 
|  |  | 
|  | iwl_mvm_leds_exit(mvm); | 
|  |  | 
|  | iwl_mvm_thermal_exit(mvm); | 
|  |  | 
|  | if (mvm->init_status & IWL_MVM_INIT_STATUS_REG_HW_INIT_COMPLETE) { | 
|  | ieee80211_unregister_hw(mvm->hw); | 
|  | mvm->init_status &= ~IWL_MVM_INIT_STATUS_REG_HW_INIT_COMPLETE; | 
|  | } | 
|  |  | 
|  | kfree(mvm->scan_cmd); | 
|  | kfree(mvm->mcast_filter_cmd); | 
|  | mvm->mcast_filter_cmd = NULL; | 
|  |  | 
|  | #if defined(CONFIG_PM_SLEEP) && defined(CONFIG_IWLWIFI_DEBUGFS) | 
|  | kfree(mvm->d3_resume_sram); | 
|  | #endif | 
|  |  | 
|  | iwl_trans_op_mode_leave(mvm->trans); | 
|  |  | 
|  | iwl_phy_db_free(mvm->phy_db); | 
|  | mvm->phy_db = NULL; | 
|  |  | 
|  | kfree(mvm->nvm_data); | 
|  | for (i = 0; i < NVM_MAX_NUM_SECTIONS; i++) | 
|  | kfree(mvm->nvm_sections[i].data); | 
|  |  | 
|  | iwl_mvm_tof_clean(mvm); | 
|  |  | 
|  | mutex_destroy(&mvm->mutex); | 
|  | mutex_destroy(&mvm->d0i3_suspend_mutex); | 
|  |  | 
|  | ieee80211_free_hw(mvm->hw); | 
|  | } | 
|  |  | 
|  | struct iwl_async_handler_entry { | 
|  | struct list_head list; | 
|  | struct iwl_rx_cmd_buffer rxb; | 
|  | enum iwl_rx_handler_context context; | 
|  | void (*fn)(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb); | 
|  | }; | 
|  |  | 
|  | void iwl_mvm_async_handlers_purge(struct iwl_mvm *mvm) | 
|  | { | 
|  | struct iwl_async_handler_entry *entry, *tmp; | 
|  |  | 
|  | spin_lock_bh(&mvm->async_handlers_lock); | 
|  | list_for_each_entry_safe(entry, tmp, &mvm->async_handlers_list, list) { | 
|  | iwl_free_rxb(&entry->rxb); | 
|  | list_del(&entry->list); | 
|  | kfree(entry); | 
|  | } | 
|  | spin_unlock_bh(&mvm->async_handlers_lock); | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_async_handlers_wk(struct work_struct *wk) | 
|  | { | 
|  | struct iwl_mvm *mvm = | 
|  | container_of(wk, struct iwl_mvm, async_handlers_wk); | 
|  | struct iwl_async_handler_entry *entry, *tmp; | 
|  | LIST_HEAD(local_list); | 
|  |  | 
|  | /* Ensure that we are not in stop flow (check iwl_mvm_mac_stop) */ | 
|  |  | 
|  | /* | 
|  | * Sync with Rx path with a lock. Remove all the entries from this list, | 
|  | * add them to a local one (lock free), and then handle them. | 
|  | */ | 
|  | spin_lock_bh(&mvm->async_handlers_lock); | 
|  | list_splice_init(&mvm->async_handlers_list, &local_list); | 
|  | spin_unlock_bh(&mvm->async_handlers_lock); | 
|  |  | 
|  | list_for_each_entry_safe(entry, tmp, &local_list, list) { | 
|  | if (entry->context == RX_HANDLER_ASYNC_LOCKED) | 
|  | mutex_lock(&mvm->mutex); | 
|  | entry->fn(mvm, &entry->rxb); | 
|  | iwl_free_rxb(&entry->rxb); | 
|  | list_del(&entry->list); | 
|  | if (entry->context == RX_HANDLER_ASYNC_LOCKED) | 
|  | mutex_unlock(&mvm->mutex); | 
|  | kfree(entry); | 
|  | } | 
|  | } | 
|  |  | 
|  | static inline void iwl_mvm_rx_check_trigger(struct iwl_mvm *mvm, | 
|  | struct iwl_rx_packet *pkt) | 
|  | { | 
|  | struct iwl_fw_dbg_trigger_tlv *trig; | 
|  | struct iwl_fw_dbg_trigger_cmd *cmds_trig; | 
|  | int i; | 
|  |  | 
|  | if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_FW_NOTIF)) | 
|  | return; | 
|  |  | 
|  | trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_FW_NOTIF); | 
|  | cmds_trig = (void *)trig->data; | 
|  |  | 
|  | if (!iwl_fw_dbg_trigger_check_stop(mvm, NULL, trig)) | 
|  | return; | 
|  |  | 
|  | for (i = 0; i < ARRAY_SIZE(cmds_trig->cmds); i++) { | 
|  | /* don't collect on CMD 0 */ | 
|  | if (!cmds_trig->cmds[i].cmd_id) | 
|  | break; | 
|  |  | 
|  | if (cmds_trig->cmds[i].cmd_id != pkt->hdr.cmd || | 
|  | cmds_trig->cmds[i].group_id != pkt->hdr.group_id) | 
|  | continue; | 
|  |  | 
|  | iwl_mvm_fw_dbg_collect_trig(mvm, trig, | 
|  | "CMD 0x%02x.%02x received", | 
|  | pkt->hdr.group_id, pkt->hdr.cmd); | 
|  | break; | 
|  | } | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_rx_common(struct iwl_mvm *mvm, | 
|  | struct iwl_rx_cmd_buffer *rxb, | 
|  | struct iwl_rx_packet *pkt) | 
|  | { | 
|  | int i; | 
|  |  | 
|  | iwl_mvm_rx_check_trigger(mvm, pkt); | 
|  |  | 
|  | /* | 
|  | * Do the notification wait before RX handlers so | 
|  | * even if the RX handler consumes the RXB we have | 
|  | * access to it in the notification wait entry. | 
|  | */ | 
|  | iwl_notification_wait_notify(&mvm->notif_wait, pkt); | 
|  |  | 
|  | for (i = 0; i < ARRAY_SIZE(iwl_mvm_rx_handlers); i++) { | 
|  | const struct iwl_rx_handlers *rx_h = &iwl_mvm_rx_handlers[i]; | 
|  | struct iwl_async_handler_entry *entry; | 
|  |  | 
|  | if (rx_h->cmd_id != WIDE_ID(pkt->hdr.group_id, pkt->hdr.cmd)) | 
|  | continue; | 
|  |  | 
|  | if (rx_h->context == RX_HANDLER_SYNC) { | 
|  | rx_h->fn(mvm, rxb); | 
|  | return; | 
|  | } | 
|  |  | 
|  | entry = kzalloc(sizeof(*entry), GFP_ATOMIC); | 
|  | /* we can't do much... */ | 
|  | if (!entry) | 
|  | return; | 
|  |  | 
|  | entry->rxb._page = rxb_steal_page(rxb); | 
|  | entry->rxb._offset = rxb->_offset; | 
|  | entry->rxb._rx_page_order = rxb->_rx_page_order; | 
|  | entry->fn = rx_h->fn; | 
|  | entry->context = rx_h->context; | 
|  | spin_lock(&mvm->async_handlers_lock); | 
|  | list_add_tail(&entry->list, &mvm->async_handlers_list); | 
|  | spin_unlock(&mvm->async_handlers_lock); | 
|  | schedule_work(&mvm->async_handlers_wk); | 
|  | break; | 
|  | } | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_rx(struct iwl_op_mode *op_mode, | 
|  | struct napi_struct *napi, | 
|  | struct iwl_rx_cmd_buffer *rxb) | 
|  | { | 
|  | struct iwl_rx_packet *pkt = rxb_addr(rxb); | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  | u16 cmd = WIDE_ID(pkt->hdr.group_id, pkt->hdr.cmd); | 
|  |  | 
|  | if (likely(cmd == WIDE_ID(LEGACY_GROUP, REPLY_RX_MPDU_CMD))) | 
|  | iwl_mvm_rx_rx_mpdu(mvm, napi, rxb); | 
|  | else if (cmd == WIDE_ID(LEGACY_GROUP, REPLY_RX_PHY_CMD)) | 
|  | iwl_mvm_rx_rx_phy_cmd(mvm, rxb); | 
|  | else | 
|  | iwl_mvm_rx_common(mvm, rxb, pkt); | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_rx_mq(struct iwl_op_mode *op_mode, | 
|  | struct napi_struct *napi, | 
|  | struct iwl_rx_cmd_buffer *rxb) | 
|  | { | 
|  | struct iwl_rx_packet *pkt = rxb_addr(rxb); | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  | u16 cmd = WIDE_ID(pkt->hdr.group_id, pkt->hdr.cmd); | 
|  |  | 
|  | if (likely(cmd == WIDE_ID(LEGACY_GROUP, REPLY_RX_MPDU_CMD))) | 
|  | iwl_mvm_rx_mpdu_mq(mvm, napi, rxb, 0); | 
|  | else if (unlikely(cmd == WIDE_ID(DATA_PATH_GROUP, | 
|  | RX_QUEUES_NOTIFICATION))) | 
|  | iwl_mvm_rx_queue_notif(mvm, rxb, 0); | 
|  | else if (cmd == WIDE_ID(LEGACY_GROUP, FRAME_RELEASE)) | 
|  | iwl_mvm_rx_frame_release(mvm, napi, rxb, 0); | 
|  | else | 
|  | iwl_mvm_rx_common(mvm, rxb, pkt); | 
|  | } | 
|  |  | 
|  | void iwl_mvm_stop_mac_queues(struct iwl_mvm *mvm, unsigned long mq) | 
|  | { | 
|  | int q; | 
|  |  | 
|  | if (WARN_ON_ONCE(!mq)) | 
|  | return; | 
|  |  | 
|  | for_each_set_bit(q, &mq, IEEE80211_MAX_QUEUES) { | 
|  | if (atomic_inc_return(&mvm->mac80211_queue_stop_count[q]) > 1) { | 
|  | IWL_DEBUG_TX_QUEUES(mvm, | 
|  | "mac80211 %d already stopped\n", q); | 
|  | continue; | 
|  | } | 
|  |  | 
|  | ieee80211_stop_queue(mvm->hw, q); | 
|  | } | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_async_cb(struct iwl_op_mode *op_mode, | 
|  | const struct iwl_device_cmd *cmd) | 
|  | { | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  |  | 
|  | /* | 
|  | * For now, we only set the CMD_WANT_ASYNC_CALLBACK for ADD_STA | 
|  | * commands that need to block the Tx queues. | 
|  | */ | 
|  | iwl_trans_block_txq_ptrs(mvm->trans, false); | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_stop_sw_queue(struct iwl_op_mode *op_mode, int hw_queue) | 
|  | { | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  | unsigned long mq; | 
|  |  | 
|  | spin_lock_bh(&mvm->queue_info_lock); | 
|  | mq = mvm->hw_queue_to_mac80211[hw_queue]; | 
|  | spin_unlock_bh(&mvm->queue_info_lock); | 
|  |  | 
|  | iwl_mvm_stop_mac_queues(mvm, mq); | 
|  | } | 
|  |  | 
|  | void iwl_mvm_start_mac_queues(struct iwl_mvm *mvm, unsigned long mq) | 
|  | { | 
|  | int q; | 
|  |  | 
|  | if (WARN_ON_ONCE(!mq)) | 
|  | return; | 
|  |  | 
|  | for_each_set_bit(q, &mq, IEEE80211_MAX_QUEUES) { | 
|  | if (atomic_dec_return(&mvm->mac80211_queue_stop_count[q]) > 0) { | 
|  | IWL_DEBUG_TX_QUEUES(mvm, | 
|  | "mac80211 %d still stopped\n", q); | 
|  | continue; | 
|  | } | 
|  |  | 
|  | ieee80211_wake_queue(mvm->hw, q); | 
|  | } | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_wake_sw_queue(struct iwl_op_mode *op_mode, int hw_queue) | 
|  | { | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  | unsigned long mq; | 
|  |  | 
|  | spin_lock_bh(&mvm->queue_info_lock); | 
|  | mq = mvm->hw_queue_to_mac80211[hw_queue]; | 
|  | spin_unlock_bh(&mvm->queue_info_lock); | 
|  |  | 
|  | iwl_mvm_start_mac_queues(mvm, mq); | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_set_rfkill_state(struct iwl_mvm *mvm) | 
|  | { | 
|  | bool state = iwl_mvm_is_radio_killed(mvm); | 
|  |  | 
|  | if (state) | 
|  | wake_up(&mvm->rx_sync_waitq); | 
|  |  | 
|  | wiphy_rfkill_set_hw_state(mvm->hw->wiphy, state); | 
|  | } | 
|  |  | 
|  | void iwl_mvm_set_hw_ctkill_state(struct iwl_mvm *mvm, bool state) | 
|  | { | 
|  | if (state) | 
|  | set_bit(IWL_MVM_STATUS_HW_CTKILL, &mvm->status); | 
|  | else | 
|  | clear_bit(IWL_MVM_STATUS_HW_CTKILL, &mvm->status); | 
|  |  | 
|  | iwl_mvm_set_rfkill_state(mvm); | 
|  | } | 
|  |  | 
|  | static bool iwl_mvm_set_hw_rfkill_state(struct iwl_op_mode *op_mode, bool state) | 
|  | { | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  | bool calibrating = ACCESS_ONCE(mvm->calibrating); | 
|  |  | 
|  | if (state) | 
|  | set_bit(IWL_MVM_STATUS_HW_RFKILL, &mvm->status); | 
|  | else | 
|  | clear_bit(IWL_MVM_STATUS_HW_RFKILL, &mvm->status); | 
|  |  | 
|  | iwl_mvm_set_rfkill_state(mvm); | 
|  |  | 
|  | /* iwl_run_init_mvm_ucode is waiting for results, abort it */ | 
|  | if (calibrating) | 
|  | iwl_abort_notification_waits(&mvm->notif_wait); | 
|  |  | 
|  | /* | 
|  | * Stop the device if we run OPERATIONAL firmware or if we are in the | 
|  | * middle of the calibrations. | 
|  | */ | 
|  | return state && (mvm->cur_ucode != IWL_UCODE_INIT || calibrating); | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_free_skb(struct iwl_op_mode *op_mode, struct sk_buff *skb) | 
|  | { | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  | struct ieee80211_tx_info *info; | 
|  |  | 
|  | info = IEEE80211_SKB_CB(skb); | 
|  | iwl_trans_free_tx_cmd(mvm->trans, info->driver_data[1]); | 
|  | ieee80211_free_txskb(mvm->hw, skb); | 
|  | } | 
|  |  | 
|  | struct iwl_mvm_reprobe { | 
|  | struct device *dev; | 
|  | struct work_struct work; | 
|  | }; | 
|  |  | 
|  | static void iwl_mvm_reprobe_wk(struct work_struct *wk) | 
|  | { | 
|  | struct iwl_mvm_reprobe *reprobe; | 
|  |  | 
|  | reprobe = container_of(wk, struct iwl_mvm_reprobe, work); | 
|  | if (device_reprobe(reprobe->dev)) | 
|  | dev_err(reprobe->dev, "reprobe failed!\n"); | 
|  | kfree(reprobe); | 
|  | module_put(THIS_MODULE); | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_fw_error_dump_wk(struct work_struct *work) | 
|  | { | 
|  | struct iwl_mvm *mvm = | 
|  | container_of(work, struct iwl_mvm, fw_dump_wk.work); | 
|  |  | 
|  | if (iwl_mvm_ref_sync(mvm, IWL_MVM_REF_FW_DBG_COLLECT)) | 
|  | return; | 
|  |  | 
|  | mutex_lock(&mvm->mutex); | 
|  |  | 
|  | if (mvm->cfg->device_family == IWL_DEVICE_FAMILY_7000) { | 
|  | /* stop recording */ | 
|  | iwl_set_bits_prph(mvm->trans, MON_BUFF_SAMPLE_CTL, 0x100); | 
|  |  | 
|  | iwl_mvm_fw_error_dump(mvm); | 
|  |  | 
|  | /* start recording again if the firmware is not crashed */ | 
|  | if (!test_bit(STATUS_FW_ERROR, &mvm->trans->status) && | 
|  | mvm->fw->dbg_dest_tlv) { | 
|  | iwl_clear_bits_prph(mvm->trans, | 
|  | MON_BUFF_SAMPLE_CTL, 0x100); | 
|  | iwl_clear_bits_prph(mvm->trans, | 
|  | MON_BUFF_SAMPLE_CTL, 0x1); | 
|  | iwl_set_bits_prph(mvm->trans, MON_BUFF_SAMPLE_CTL, 0x1); | 
|  | } | 
|  | } else { | 
|  | u32 in_sample = iwl_read_prph(mvm->trans, DBGC_IN_SAMPLE); | 
|  | u32 out_ctrl = iwl_read_prph(mvm->trans, DBGC_OUT_CTRL); | 
|  |  | 
|  | /* stop recording */ | 
|  | iwl_write_prph(mvm->trans, DBGC_IN_SAMPLE, 0); | 
|  | udelay(100); | 
|  | iwl_write_prph(mvm->trans, DBGC_OUT_CTRL, 0); | 
|  | /* wait before we collect the data till the DBGC stop */ | 
|  | udelay(500); | 
|  |  | 
|  | iwl_mvm_fw_error_dump(mvm); | 
|  |  | 
|  | /* start recording again if the firmware is not crashed */ | 
|  | if (!test_bit(STATUS_FW_ERROR, &mvm->trans->status) && | 
|  | mvm->fw->dbg_dest_tlv) { | 
|  | iwl_write_prph(mvm->trans, DBGC_IN_SAMPLE, in_sample); | 
|  | iwl_write_prph(mvm->trans, DBGC_OUT_CTRL, out_ctrl); | 
|  | } | 
|  | } | 
|  |  | 
|  | mutex_unlock(&mvm->mutex); | 
|  |  | 
|  | iwl_mvm_unref(mvm, IWL_MVM_REF_FW_DBG_COLLECT); | 
|  | } | 
|  |  | 
|  | void iwl_mvm_nic_restart(struct iwl_mvm *mvm, bool fw_error) | 
|  | { | 
|  | iwl_abort_notification_waits(&mvm->notif_wait); | 
|  |  | 
|  | /* | 
|  | * This is a bit racy, but worst case we tell mac80211 about | 
|  | * a stopped/aborted scan when that was already done which | 
|  | * is not a problem. It is necessary to abort any os scan | 
|  | * here because mac80211 requires having the scan cleared | 
|  | * before restarting. | 
|  | * We'll reset the scan_status to NONE in restart cleanup in | 
|  | * the next start() call from mac80211. If restart isn't called | 
|  | * (no fw restart) scan status will stay busy. | 
|  | */ | 
|  | iwl_mvm_report_scan_aborted(mvm); | 
|  |  | 
|  | /* | 
|  | * If we're restarting already, don't cycle restarts. | 
|  | * If INIT fw asserted, it will likely fail again. | 
|  | * If WoWLAN fw asserted, don't restart either, mac80211 | 
|  | * can't recover this since we're already half suspended. | 
|  | */ | 
|  | if (!mvm->fw_restart && fw_error) { | 
|  | iwl_mvm_fw_dbg_collect_desc(mvm, &iwl_mvm_dump_desc_assert, | 
|  | NULL); | 
|  | } else if (test_and_set_bit(IWL_MVM_STATUS_IN_HW_RESTART, | 
|  | &mvm->status)) { | 
|  | struct iwl_mvm_reprobe *reprobe; | 
|  |  | 
|  | IWL_ERR(mvm, | 
|  | "Firmware error during reconfiguration - reprobe!\n"); | 
|  |  | 
|  | /* | 
|  | * get a module reference to avoid doing this while unloading | 
|  | * anyway and to avoid scheduling a work with code that's | 
|  | * being removed. | 
|  | */ | 
|  | if (!try_module_get(THIS_MODULE)) { | 
|  | IWL_ERR(mvm, "Module is being unloaded - abort\n"); | 
|  | return; | 
|  | } | 
|  |  | 
|  | reprobe = kzalloc(sizeof(*reprobe), GFP_ATOMIC); | 
|  | if (!reprobe) { | 
|  | module_put(THIS_MODULE); | 
|  | return; | 
|  | } | 
|  | reprobe->dev = mvm->trans->dev; | 
|  | INIT_WORK(&reprobe->work, iwl_mvm_reprobe_wk); | 
|  | schedule_work(&reprobe->work); | 
|  | } else if (mvm->cur_ucode == IWL_UCODE_REGULAR && | 
|  | mvm->hw_registered) { | 
|  | /* don't let the transport/FW power down */ | 
|  | iwl_mvm_ref(mvm, IWL_MVM_REF_UCODE_DOWN); | 
|  |  | 
|  | if (fw_error && mvm->fw_restart > 0) | 
|  | mvm->fw_restart--; | 
|  | ieee80211_restart_hw(mvm->hw); | 
|  | } | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_nic_error(struct iwl_op_mode *op_mode) | 
|  | { | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  |  | 
|  | iwl_mvm_dump_nic_error_log(mvm); | 
|  |  | 
|  | iwl_mvm_nic_restart(mvm, true); | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_cmd_queue_full(struct iwl_op_mode *op_mode) | 
|  | { | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  |  | 
|  | WARN_ON(1); | 
|  | iwl_mvm_nic_restart(mvm, true); | 
|  | } | 
|  |  | 
|  | struct iwl_d0i3_iter_data { | 
|  | struct iwl_mvm *mvm; | 
|  | struct ieee80211_vif *connected_vif; | 
|  | u8 ap_sta_id; | 
|  | u8 vif_count; | 
|  | u8 offloading_tid; | 
|  | bool disable_offloading; | 
|  | }; | 
|  |  | 
|  | static bool iwl_mvm_disallow_offloading(struct iwl_mvm *mvm, | 
|  | struct ieee80211_vif *vif, | 
|  | struct iwl_d0i3_iter_data *iter_data) | 
|  | { | 
|  | struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); | 
|  | struct iwl_mvm_sta *mvmsta; | 
|  | u32 available_tids = 0; | 
|  | u8 tid; | 
|  |  | 
|  | if (WARN_ON(vif->type != NL80211_IFTYPE_STATION || | 
|  | mvmvif->ap_sta_id == IWL_MVM_INVALID_STA)) | 
|  | return false; | 
|  |  | 
|  | mvmsta = iwl_mvm_sta_from_staid_rcu(mvm, mvmvif->ap_sta_id); | 
|  | if (!mvmsta) | 
|  | return false; | 
|  |  | 
|  | spin_lock_bh(&mvmsta->lock); | 
|  | for (tid = 0; tid < IWL_MAX_TID_COUNT; tid++) { | 
|  | struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid]; | 
|  |  | 
|  | /* | 
|  | * in case of pending tx packets, don't use this tid | 
|  | * for offloading in order to prevent reuse of the same | 
|  | * qos seq counters. | 
|  | */ | 
|  | if (iwl_mvm_tid_queued(mvm, tid_data)) | 
|  | continue; | 
|  |  | 
|  | if (tid_data->state != IWL_AGG_OFF) | 
|  | continue; | 
|  |  | 
|  | available_tids |= BIT(tid); | 
|  | } | 
|  | spin_unlock_bh(&mvmsta->lock); | 
|  |  | 
|  | /* | 
|  | * disallow protocol offloading if we have no available tid | 
|  | * (with no pending frames and no active aggregation, | 
|  | * as we don't handle "holes" properly - the scheduler needs the | 
|  | * frame's seq number and TFD index to match) | 
|  | */ | 
|  | if (!available_tids) | 
|  | return true; | 
|  |  | 
|  | /* for simplicity, just use the first available tid */ | 
|  | iter_data->offloading_tid = ffs(available_tids) - 1; | 
|  | return false; | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_enter_d0i3_iterator(void *_data, u8 *mac, | 
|  | struct ieee80211_vif *vif) | 
|  | { | 
|  | struct iwl_d0i3_iter_data *data = _data; | 
|  | struct iwl_mvm *mvm = data->mvm; | 
|  | struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); | 
|  | u32 flags = CMD_ASYNC | CMD_HIGH_PRIO | CMD_SEND_IN_IDLE; | 
|  |  | 
|  | IWL_DEBUG_RPM(mvm, "entering D0i3 - vif %pM\n", vif->addr); | 
|  | if (vif->type != NL80211_IFTYPE_STATION || | 
|  | !vif->bss_conf.assoc) | 
|  | return; | 
|  |  | 
|  | /* | 
|  | * in case of pending tx packets or active aggregations, | 
|  | * avoid offloading features in order to prevent reuse of | 
|  | * the same qos seq counters. | 
|  | */ | 
|  | if (iwl_mvm_disallow_offloading(mvm, vif, data)) | 
|  | data->disable_offloading = true; | 
|  |  | 
|  | iwl_mvm_update_d0i3_power_mode(mvm, vif, true, flags); | 
|  | iwl_mvm_send_proto_offload(mvm, vif, data->disable_offloading, | 
|  | false, flags); | 
|  |  | 
|  | /* | 
|  | * on init/association, mvm already configures POWER_TABLE_CMD | 
|  | * and REPLY_MCAST_FILTER_CMD, so currently don't | 
|  | * reconfigure them (we might want to use different | 
|  | * params later on, though). | 
|  | */ | 
|  | data->ap_sta_id = mvmvif->ap_sta_id; | 
|  | data->vif_count++; | 
|  |  | 
|  | /* | 
|  | * no new commands can be sent at this stage, so it's safe | 
|  | * to save the vif pointer during d0i3 entrance. | 
|  | */ | 
|  | data->connected_vif = vif; | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_set_wowlan_data(struct iwl_mvm *mvm, | 
|  | struct iwl_wowlan_config_cmd *cmd, | 
|  | struct iwl_d0i3_iter_data *iter_data) | 
|  | { | 
|  | struct ieee80211_sta *ap_sta; | 
|  | struct iwl_mvm_sta *mvm_ap_sta; | 
|  |  | 
|  | if (iter_data->ap_sta_id == IWL_MVM_INVALID_STA) | 
|  | return; | 
|  |  | 
|  | rcu_read_lock(); | 
|  |  | 
|  | ap_sta = rcu_dereference(mvm->fw_id_to_mac_id[iter_data->ap_sta_id]); | 
|  | if (IS_ERR_OR_NULL(ap_sta)) | 
|  | goto out; | 
|  |  | 
|  | mvm_ap_sta = iwl_mvm_sta_from_mac80211(ap_sta); | 
|  | cmd->is_11n_connection = ap_sta->ht_cap.ht_supported; | 
|  | cmd->offloading_tid = iter_data->offloading_tid; | 
|  | cmd->flags = ENABLE_L3_FILTERING | ENABLE_NBNS_FILTERING | | 
|  | ENABLE_DHCP_FILTERING | ENABLE_STORE_BEACON; | 
|  | /* | 
|  | * The d0i3 uCode takes care of the nonqos counters, | 
|  | * so configure only the qos seq ones. | 
|  | */ | 
|  | iwl_mvm_set_wowlan_qos_seq(mvm_ap_sta, cmd); | 
|  | out: | 
|  | rcu_read_unlock(); | 
|  | } | 
|  |  | 
|  | int iwl_mvm_enter_d0i3(struct iwl_op_mode *op_mode) | 
|  | { | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  | u32 flags = CMD_ASYNC | CMD_HIGH_PRIO | CMD_SEND_IN_IDLE; | 
|  | int ret; | 
|  | struct iwl_d0i3_iter_data d0i3_iter_data = { | 
|  | .mvm = mvm, | 
|  | }; | 
|  | struct iwl_wowlan_config_cmd wowlan_config_cmd = { | 
|  | .wakeup_filter = cpu_to_le32(IWL_WOWLAN_WAKEUP_RX_FRAME | | 
|  | IWL_WOWLAN_WAKEUP_BEACON_MISS | | 
|  | IWL_WOWLAN_WAKEUP_LINK_CHANGE), | 
|  | }; | 
|  | struct iwl_d3_manager_config d3_cfg_cmd = { | 
|  | .min_sleep_time = cpu_to_le32(1000), | 
|  | .wakeup_flags = cpu_to_le32(IWL_WAKEUP_D3_CONFIG_FW_ERROR), | 
|  | }; | 
|  |  | 
|  | IWL_DEBUG_RPM(mvm, "MVM entering D0i3\n"); | 
|  |  | 
|  | if (WARN_ON_ONCE(mvm->cur_ucode != IWL_UCODE_REGULAR)) | 
|  | return -EINVAL; | 
|  |  | 
|  | set_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status); | 
|  |  | 
|  | /* | 
|  | * iwl_mvm_ref_sync takes a reference before checking the flag. | 
|  | * so by checking there is no held reference we prevent a state | 
|  | * in which iwl_mvm_ref_sync continues successfully while we | 
|  | * configure the firmware to enter d0i3 | 
|  | */ | 
|  | if (iwl_mvm_ref_taken(mvm)) { | 
|  | IWL_DEBUG_RPM(mvm->trans, "abort d0i3 due to taken ref\n"); | 
|  | clear_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status); | 
|  | wake_up(&mvm->d0i3_exit_waitq); | 
|  | return 1; | 
|  | } | 
|  |  | 
|  | ieee80211_iterate_active_interfaces_atomic(mvm->hw, | 
|  | IEEE80211_IFACE_ITER_NORMAL, | 
|  | iwl_mvm_enter_d0i3_iterator, | 
|  | &d0i3_iter_data); | 
|  | if (d0i3_iter_data.vif_count == 1) { | 
|  | mvm->d0i3_ap_sta_id = d0i3_iter_data.ap_sta_id; | 
|  | mvm->d0i3_offloading = !d0i3_iter_data.disable_offloading; | 
|  | } else { | 
|  | WARN_ON_ONCE(d0i3_iter_data.vif_count > 1); | 
|  | mvm->d0i3_ap_sta_id = IWL_MVM_INVALID_STA; | 
|  | mvm->d0i3_offloading = false; | 
|  | } | 
|  |  | 
|  | /* make sure we have no running tx while configuring the seqno */ | 
|  | synchronize_net(); | 
|  |  | 
|  | /* Flush the hw queues, in case something got queued during entry */ | 
|  | /* TODO new tx api */ | 
|  | if (iwl_mvm_has_new_tx_api(mvm)) { | 
|  | WARN_ONCE(1, "d0i3: Need to implement flush TX queue\n"); | 
|  | } else { | 
|  | ret = iwl_mvm_flush_tx_path(mvm, iwl_mvm_flushable_queues(mvm), | 
|  | flags); | 
|  | if (ret) | 
|  | return ret; | 
|  | } | 
|  |  | 
|  | /* configure wowlan configuration only if needed */ | 
|  | if (mvm->d0i3_ap_sta_id != IWL_MVM_INVALID_STA) { | 
|  | /* wake on beacons only if beacon storing isn't supported */ | 
|  | if (!fw_has_capa(&mvm->fw->ucode_capa, | 
|  | IWL_UCODE_TLV_CAPA_BEACON_STORING)) | 
|  | wowlan_config_cmd.wakeup_filter |= | 
|  | cpu_to_le32(IWL_WOWLAN_WAKEUP_BCN_FILTERING); | 
|  |  | 
|  | iwl_mvm_wowlan_config_key_params(mvm, | 
|  | d0i3_iter_data.connected_vif, | 
|  | true, flags); | 
|  |  | 
|  | iwl_mvm_set_wowlan_data(mvm, &wowlan_config_cmd, | 
|  | &d0i3_iter_data); | 
|  |  | 
|  | ret = iwl_mvm_send_cmd_pdu(mvm, WOWLAN_CONFIGURATION, flags, | 
|  | sizeof(wowlan_config_cmd), | 
|  | &wowlan_config_cmd); | 
|  | if (ret) | 
|  | return ret; | 
|  | } | 
|  |  | 
|  | return iwl_mvm_send_cmd_pdu(mvm, D3_CONFIG_CMD, | 
|  | flags | CMD_MAKE_TRANS_IDLE, | 
|  | sizeof(d3_cfg_cmd), &d3_cfg_cmd); | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_exit_d0i3_iterator(void *_data, u8 *mac, | 
|  | struct ieee80211_vif *vif) | 
|  | { | 
|  | struct iwl_mvm *mvm = _data; | 
|  | u32 flags = CMD_ASYNC | CMD_HIGH_PRIO; | 
|  |  | 
|  | IWL_DEBUG_RPM(mvm, "exiting D0i3 - vif %pM\n", vif->addr); | 
|  | if (vif->type != NL80211_IFTYPE_STATION || | 
|  | !vif->bss_conf.assoc) | 
|  | return; | 
|  |  | 
|  | iwl_mvm_update_d0i3_power_mode(mvm, vif, false, flags); | 
|  | } | 
|  |  | 
|  | struct iwl_mvm_d0i3_exit_work_iter_data { | 
|  | struct iwl_mvm *mvm; | 
|  | struct iwl_wowlan_status *status; | 
|  | u32 wakeup_reasons; | 
|  | }; | 
|  |  | 
|  | static void iwl_mvm_d0i3_exit_work_iter(void *_data, u8 *mac, | 
|  | struct ieee80211_vif *vif) | 
|  | { | 
|  | struct iwl_mvm_d0i3_exit_work_iter_data *data = _data; | 
|  | struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif); | 
|  | u32 reasons = data->wakeup_reasons; | 
|  |  | 
|  | /* consider only the relevant station interface */ | 
|  | if (vif->type != NL80211_IFTYPE_STATION || !vif->bss_conf.assoc || | 
|  | data->mvm->d0i3_ap_sta_id != mvmvif->ap_sta_id) | 
|  | return; | 
|  |  | 
|  | if (reasons & IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_DEAUTH) | 
|  | iwl_mvm_connection_loss(data->mvm, vif, "D0i3"); | 
|  | else if (reasons & IWL_WOWLAN_WAKEUP_BY_DISCONNECTION_ON_MISSED_BEACON) | 
|  | ieee80211_beacon_loss(vif); | 
|  | else | 
|  | iwl_mvm_d0i3_update_keys(data->mvm, vif, data->status); | 
|  | } | 
|  |  | 
|  | void iwl_mvm_d0i3_enable_tx(struct iwl_mvm *mvm, __le16 *qos_seq) | 
|  | { | 
|  | struct ieee80211_sta *sta = NULL; | 
|  | struct iwl_mvm_sta *mvm_ap_sta; | 
|  | int i; | 
|  | bool wake_queues = false; | 
|  |  | 
|  | lockdep_assert_held(&mvm->mutex); | 
|  |  | 
|  | spin_lock_bh(&mvm->d0i3_tx_lock); | 
|  |  | 
|  | if (mvm->d0i3_ap_sta_id == IWL_MVM_INVALID_STA) | 
|  | goto out; | 
|  |  | 
|  | IWL_DEBUG_RPM(mvm, "re-enqueue packets\n"); | 
|  |  | 
|  | /* get the sta in order to update seq numbers and re-enqueue skbs */ | 
|  | sta = rcu_dereference_protected( | 
|  | mvm->fw_id_to_mac_id[mvm->d0i3_ap_sta_id], | 
|  | lockdep_is_held(&mvm->mutex)); | 
|  |  | 
|  | if (IS_ERR_OR_NULL(sta)) { | 
|  | sta = NULL; | 
|  | goto out; | 
|  | } | 
|  |  | 
|  | if (mvm->d0i3_offloading && qos_seq) { | 
|  | /* update qos seq numbers if offloading was enabled */ | 
|  | mvm_ap_sta = iwl_mvm_sta_from_mac80211(sta); | 
|  | for (i = 0; i < IWL_MAX_TID_COUNT; i++) { | 
|  | u16 seq = le16_to_cpu(qos_seq[i]); | 
|  | /* firmware stores last-used one, we store next one */ | 
|  | seq += 0x10; | 
|  | mvm_ap_sta->tid_data[i].seq_number = seq; | 
|  | } | 
|  | } | 
|  | out: | 
|  | /* re-enqueue (or drop) all packets */ | 
|  | while (!skb_queue_empty(&mvm->d0i3_tx)) { | 
|  | struct sk_buff *skb = __skb_dequeue(&mvm->d0i3_tx); | 
|  |  | 
|  | if (!sta || iwl_mvm_tx_skb(mvm, skb, sta)) | 
|  | ieee80211_free_txskb(mvm->hw, skb); | 
|  |  | 
|  | /* if the skb_queue is not empty, we need to wake queues */ | 
|  | wake_queues = true; | 
|  | } | 
|  | clear_bit(IWL_MVM_STATUS_IN_D0I3, &mvm->status); | 
|  | wake_up(&mvm->d0i3_exit_waitq); | 
|  | mvm->d0i3_ap_sta_id = IWL_MVM_INVALID_STA; | 
|  | if (wake_queues) | 
|  | ieee80211_wake_queues(mvm->hw); | 
|  |  | 
|  | spin_unlock_bh(&mvm->d0i3_tx_lock); | 
|  | } | 
|  |  | 
|  | static void iwl_mvm_d0i3_exit_work(struct work_struct *wk) | 
|  | { | 
|  | struct iwl_mvm *mvm = container_of(wk, struct iwl_mvm, d0i3_exit_work); | 
|  | struct iwl_host_cmd get_status_cmd = { | 
|  | .id = WOWLAN_GET_STATUSES, | 
|  | .flags = CMD_HIGH_PRIO | CMD_WANT_SKB, | 
|  | }; | 
|  | struct iwl_mvm_d0i3_exit_work_iter_data iter_data = { | 
|  | .mvm = mvm, | 
|  | }; | 
|  |  | 
|  | struct iwl_wowlan_status *status; | 
|  | int ret; | 
|  | u32 wakeup_reasons = 0; | 
|  | __le16 *qos_seq = NULL; | 
|  |  | 
|  | mutex_lock(&mvm->mutex); | 
|  | ret = iwl_mvm_send_cmd(mvm, &get_status_cmd); | 
|  | if (ret) | 
|  | goto out; | 
|  |  | 
|  | status = (void *)get_status_cmd.resp_pkt->data; | 
|  | wakeup_reasons = le32_to_cpu(status->wakeup_reasons); | 
|  | qos_seq = status->qos_seq_ctr; | 
|  |  | 
|  | IWL_DEBUG_RPM(mvm, "wakeup reasons: 0x%x\n", wakeup_reasons); | 
|  |  | 
|  | iter_data.wakeup_reasons = wakeup_reasons; | 
|  | iter_data.status = status; | 
|  | ieee80211_iterate_active_interfaces(mvm->hw, | 
|  | IEEE80211_IFACE_ITER_NORMAL, | 
|  | iwl_mvm_d0i3_exit_work_iter, | 
|  | &iter_data); | 
|  | out: | 
|  | iwl_mvm_d0i3_enable_tx(mvm, qos_seq); | 
|  |  | 
|  | IWL_DEBUG_INFO(mvm, "d0i3 exit completed (wakeup reasons: 0x%x)\n", | 
|  | wakeup_reasons); | 
|  |  | 
|  | /* qos_seq might point inside resp_pkt, so free it only now */ | 
|  | if (get_status_cmd.resp_pkt) | 
|  | iwl_free_resp(&get_status_cmd); | 
|  |  | 
|  | /* the FW might have updated the regdomain */ | 
|  | iwl_mvm_update_changed_regdom(mvm); | 
|  |  | 
|  | iwl_mvm_unref(mvm, IWL_MVM_REF_EXIT_WORK); | 
|  | mutex_unlock(&mvm->mutex); | 
|  | } | 
|  |  | 
|  | int _iwl_mvm_exit_d0i3(struct iwl_mvm *mvm) | 
|  | { | 
|  | u32 flags = CMD_ASYNC | CMD_HIGH_PRIO | CMD_SEND_IN_IDLE | | 
|  | CMD_WAKE_UP_TRANS; | 
|  | int ret; | 
|  |  | 
|  | IWL_DEBUG_RPM(mvm, "MVM exiting D0i3\n"); | 
|  |  | 
|  | if (WARN_ON_ONCE(mvm->cur_ucode != IWL_UCODE_REGULAR)) | 
|  | return -EINVAL; | 
|  |  | 
|  | mutex_lock(&mvm->d0i3_suspend_mutex); | 
|  | if (test_bit(D0I3_DEFER_WAKEUP, &mvm->d0i3_suspend_flags)) { | 
|  | IWL_DEBUG_RPM(mvm, "Deferring d0i3 exit until resume\n"); | 
|  | __set_bit(D0I3_PENDING_WAKEUP, &mvm->d0i3_suspend_flags); | 
|  | mutex_unlock(&mvm->d0i3_suspend_mutex); | 
|  | return 0; | 
|  | } | 
|  | mutex_unlock(&mvm->d0i3_suspend_mutex); | 
|  |  | 
|  | ret = iwl_mvm_send_cmd_pdu(mvm, D0I3_END_CMD, flags, 0, NULL); | 
|  | if (ret) | 
|  | goto out; | 
|  |  | 
|  | ieee80211_iterate_active_interfaces_atomic(mvm->hw, | 
|  | IEEE80211_IFACE_ITER_NORMAL, | 
|  | iwl_mvm_exit_d0i3_iterator, | 
|  | mvm); | 
|  | out: | 
|  | schedule_work(&mvm->d0i3_exit_work); | 
|  | return ret; | 
|  | } | 
|  |  | 
|  | int iwl_mvm_exit_d0i3(struct iwl_op_mode *op_mode) | 
|  | { | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  |  | 
|  | iwl_mvm_ref(mvm, IWL_MVM_REF_EXIT_WORK); | 
|  | return _iwl_mvm_exit_d0i3(mvm); | 
|  | } | 
|  |  | 
|  | #define IWL_MVM_COMMON_OPS					\ | 
|  | /* these could be differentiated */			\ | 
|  | .async_cb = iwl_mvm_async_cb,				\ | 
|  | .queue_full = iwl_mvm_stop_sw_queue,			\ | 
|  | .queue_not_full = iwl_mvm_wake_sw_queue,		\ | 
|  | .hw_rf_kill = iwl_mvm_set_hw_rfkill_state,		\ | 
|  | .free_skb = iwl_mvm_free_skb,				\ | 
|  | .nic_error = iwl_mvm_nic_error,				\ | 
|  | .cmd_queue_full = iwl_mvm_cmd_queue_full,		\ | 
|  | .nic_config = iwl_mvm_nic_config,			\ | 
|  | .enter_d0i3 = iwl_mvm_enter_d0i3,			\ | 
|  | .exit_d0i3 = iwl_mvm_exit_d0i3,				\ | 
|  | /* as we only register one, these MUST be common! */	\ | 
|  | .start = iwl_op_mode_mvm_start,				\ | 
|  | .stop = iwl_op_mode_mvm_stop | 
|  |  | 
|  | static const struct iwl_op_mode_ops iwl_mvm_ops = { | 
|  | IWL_MVM_COMMON_OPS, | 
|  | .rx = iwl_mvm_rx, | 
|  | }; | 
|  |  | 
|  | static void iwl_mvm_rx_mq_rss(struct iwl_op_mode *op_mode, | 
|  | struct napi_struct *napi, | 
|  | struct iwl_rx_cmd_buffer *rxb, | 
|  | unsigned int queue) | 
|  | { | 
|  | struct iwl_mvm *mvm = IWL_OP_MODE_GET_MVM(op_mode); | 
|  | struct iwl_rx_packet *pkt = rxb_addr(rxb); | 
|  | u16 cmd = WIDE_ID(pkt->hdr.group_id, pkt->hdr.cmd); | 
|  |  | 
|  | if (unlikely(cmd == WIDE_ID(LEGACY_GROUP, FRAME_RELEASE))) | 
|  | iwl_mvm_rx_frame_release(mvm, napi, rxb, queue); | 
|  | else if (unlikely(cmd == WIDE_ID(DATA_PATH_GROUP, | 
|  | RX_QUEUES_NOTIFICATION))) | 
|  | iwl_mvm_rx_queue_notif(mvm, rxb, queue); | 
|  | else if (likely(cmd == WIDE_ID(LEGACY_GROUP, REPLY_RX_MPDU_CMD))) | 
|  | iwl_mvm_rx_mpdu_mq(mvm, napi, rxb, queue); | 
|  | } | 
|  |  | 
|  | static const struct iwl_op_mode_ops iwl_mvm_ops_mq = { | 
|  | IWL_MVM_COMMON_OPS, | 
|  | .rx = iwl_mvm_rx_mq, | 
|  | .rx_rss = iwl_mvm_rx_mq_rss, | 
|  | }; |