GNU Linux-libre 4.9.282-gnu1
[releases.git] / drivers / net / wireless / intel / iwlwifi / mvm / time-event.c
1 /******************************************************************************
2  *
3  * This file is provided under a dual BSD/GPLv2 license.  When using or
4  * redistributing this file, you may do so under either license.
5  *
6  * GPL LICENSE SUMMARY
7  *
8  * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
9  * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
10  *
11  * This program is free software; you can redistribute it and/or modify
12  * it under the terms of version 2 of the GNU General Public License as
13  * published by the Free Software Foundation.
14  *
15  * This program is distributed in the hope that it will be useful, but
16  * WITHOUT ANY WARRANTY; without even the implied warranty of
17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
18  * General Public License for more details.
19  *
20  * You should have received a copy of the GNU General Public License
21  * along with this program; if not, write to the Free Software
22  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110,
23  * USA
24  *
25  * The full GNU General Public License is included in this distribution
26  * in the file called COPYING.
27  *
28  * Contact Information:
29  *  Intel Linux Wireless <linuxwifi@intel.com>
30  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
31  *
32  * BSD LICENSE
33  *
34  * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
35  * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
36  * All rights reserved.
37  *
38  * Redistribution and use in source and binary forms, with or without
39  * modification, are permitted provided that the following conditions
40  * are met:
41  *
42  *  * Redistributions of source code must retain the above copyright
43  *    notice, this list of conditions and the following disclaimer.
44  *  * Redistributions in binary form must reproduce the above copyright
45  *    notice, this list of conditions and the following disclaimer in
46  *    the documentation and/or other materials provided with the
47  *    distribution.
48  *  * Neither the name Intel Corporation nor the names of its
49  *    contributors may be used to endorse or promote products derived
50  *    from this software without specific prior written permission.
51  *
52  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
53  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
54  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
55  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
56  * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
57  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
58  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
59  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
60  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
61  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
62  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
63  *
64  *****************************************************************************/
65
66 #include <linux/jiffies.h>
67 #include <net/mac80211.h>
68
69 #include "iwl-notif-wait.h"
70 #include "iwl-trans.h"
71 #include "fw-api.h"
72 #include "time-event.h"
73 #include "mvm.h"
74 #include "iwl-io.h"
75 #include "iwl-prph.h"
76 #include "fw-dbg.h"
77
78 /*
79  * For the high priority TE use a time event type that has similar priority to
80  * the FW's action scan priority.
81  */
82 #define IWL_MVM_ROC_TE_TYPE_NORMAL TE_P2P_DEVICE_DISCOVERABLE
83 #define IWL_MVM_ROC_TE_TYPE_MGMT_TX TE_P2P_CLIENT_ASSOC
84
85 void iwl_mvm_te_clear_data(struct iwl_mvm *mvm,
86                            struct iwl_mvm_time_event_data *te_data)
87 {
88         lockdep_assert_held(&mvm->time_event_lock);
89
90         if (!te_data->vif)
91                 return;
92
93         list_del(&te_data->list);
94         te_data->running = false;
95         te_data->uid = 0;
96         te_data->id = TE_MAX;
97         te_data->vif = NULL;
98 }
99
100 void iwl_mvm_roc_done_wk(struct work_struct *wk)
101 {
102         struct iwl_mvm *mvm = container_of(wk, struct iwl_mvm, roc_done_wk);
103         u32 queues = 0;
104
105         /*
106          * Clear the ROC_RUNNING /ROC_AUX_RUNNING status bit.
107          * This will cause the TX path to drop offchannel transmissions.
108          * That would also be done by mac80211, but it is racy, in particular
109          * in the case that the time event actually completed in the firmware
110          * (which is handled in iwl_mvm_te_handle_notif).
111          */
112         if (test_and_clear_bit(IWL_MVM_STATUS_ROC_RUNNING, &mvm->status)) {
113                 queues |= BIT(IWL_MVM_OFFCHANNEL_QUEUE);
114                 iwl_mvm_unref(mvm, IWL_MVM_REF_ROC);
115         }
116         if (test_and_clear_bit(IWL_MVM_STATUS_ROC_AUX_RUNNING, &mvm->status)) {
117                 queues |= BIT(mvm->aux_queue);
118                 iwl_mvm_unref(mvm, IWL_MVM_REF_ROC_AUX);
119         }
120
121         synchronize_net();
122
123         /*
124          * Flush the offchannel queue -- this is called when the time
125          * event finishes or is canceled, so that frames queued for it
126          * won't get stuck on the queue and be transmitted in the next
127          * time event.
128          * We have to send the command asynchronously since this cannot
129          * be under the mutex for locking reasons, but that's not an
130          * issue as it will have to complete before the next command is
131          * executed, and a new time event means a new command.
132          */
133         iwl_mvm_flush_tx_path(mvm, queues, CMD_ASYNC);
134 }
135
136 static void iwl_mvm_roc_finished(struct iwl_mvm *mvm)
137 {
138         /*
139          * Of course, our status bit is just as racy as mac80211, so in
140          * addition, fire off the work struct which will drop all frames
141          * from the hardware queues that made it through the race. First
142          * it will of course synchronize the TX path to make sure that
143          * any *new* TX will be rejected.
144          */
145         schedule_work(&mvm->roc_done_wk);
146 }
147
148 static void iwl_mvm_csa_noa_start(struct iwl_mvm *mvm)
149 {
150         struct ieee80211_vif *csa_vif;
151
152         rcu_read_lock();
153
154         csa_vif = rcu_dereference(mvm->csa_vif);
155         if (!csa_vif || !csa_vif->csa_active)
156                 goto out_unlock;
157
158         IWL_DEBUG_TE(mvm, "CSA NOA started\n");
159
160         /*
161          * CSA NoA is started but we still have beacons to
162          * transmit on the current channel.
163          * So we just do nothing here and the switch
164          * will be performed on the last TBTT.
165          */
166         if (!ieee80211_csa_is_complete(csa_vif)) {
167                 IWL_WARN(mvm, "CSA NOA started too early\n");
168                 goto out_unlock;
169         }
170
171         ieee80211_csa_finish(csa_vif);
172
173         rcu_read_unlock();
174
175         RCU_INIT_POINTER(mvm->csa_vif, NULL);
176
177         return;
178
179 out_unlock:
180         rcu_read_unlock();
181 }
182
183 static bool iwl_mvm_te_check_disconnect(struct iwl_mvm *mvm,
184                                         struct ieee80211_vif *vif,
185                                         const char *errmsg)
186 {
187         if (vif->type != NL80211_IFTYPE_STATION)
188                 return false;
189         if (vif->bss_conf.assoc && vif->bss_conf.dtim_period)
190                 return false;
191         if (errmsg)
192                 IWL_ERR(mvm, "%s\n", errmsg);
193
194         iwl_mvm_connection_loss(mvm, vif, errmsg);
195         return true;
196 }
197
198 static void
199 iwl_mvm_te_handle_notify_csa(struct iwl_mvm *mvm,
200                              struct iwl_mvm_time_event_data *te_data,
201                              struct iwl_time_event_notif *notif)
202 {
203         struct ieee80211_vif *vif = te_data->vif;
204         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
205
206         if (!notif->status)
207                 IWL_DEBUG_TE(mvm, "CSA time event failed to start\n");
208
209         switch (te_data->vif->type) {
210         case NL80211_IFTYPE_AP:
211                 if (!notif->status)
212                         mvmvif->csa_failed = true;
213                 iwl_mvm_csa_noa_start(mvm);
214                 break;
215         case NL80211_IFTYPE_STATION:
216                 if (!notif->status) {
217                         iwl_mvm_connection_loss(mvm, vif,
218                                                 "CSA TE failed to start");
219                         break;
220                 }
221                 iwl_mvm_csa_client_absent(mvm, te_data->vif);
222                 ieee80211_chswitch_done(te_data->vif, true);
223                 break;
224         default:
225                 /* should never happen */
226                 WARN_ON_ONCE(1);
227                 break;
228         }
229
230         /* we don't need it anymore */
231         iwl_mvm_te_clear_data(mvm, te_data);
232 }
233
234 static void iwl_mvm_te_check_trigger(struct iwl_mvm *mvm,
235                                      struct iwl_time_event_notif *notif,
236                                      struct iwl_mvm_time_event_data *te_data)
237 {
238         struct iwl_fw_dbg_trigger_tlv *trig;
239         struct iwl_fw_dbg_trigger_time_event *te_trig;
240         int i;
241
242         if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_TIME_EVENT))
243                 return;
244
245         trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_TIME_EVENT);
246         te_trig = (void *)trig->data;
247
248         if (!iwl_fw_dbg_trigger_check_stop(mvm, te_data->vif, trig))
249                 return;
250
251         for (i = 0; i < ARRAY_SIZE(te_trig->time_events); i++) {
252                 u32 trig_te_id = le32_to_cpu(te_trig->time_events[i].id);
253                 u32 trig_action_bitmap =
254                         le32_to_cpu(te_trig->time_events[i].action_bitmap);
255                 u32 trig_status_bitmap =
256                         le32_to_cpu(te_trig->time_events[i].status_bitmap);
257
258                 if (trig_te_id != te_data->id ||
259                     !(trig_action_bitmap & le32_to_cpu(notif->action)) ||
260                     !(trig_status_bitmap & BIT(le32_to_cpu(notif->status))))
261                         continue;
262
263                 iwl_mvm_fw_dbg_collect_trig(mvm, trig,
264                                             "Time event %d Action 0x%x received status: %d",
265                                             te_data->id,
266                                             le32_to_cpu(notif->action),
267                                             le32_to_cpu(notif->status));
268                 break;
269         }
270 }
271
272 /*
273  * Handles a FW notification for an event that is known to the driver.
274  *
275  * @mvm: the mvm component
276  * @te_data: the time event data
277  * @notif: the notification data corresponding the time event data.
278  */
279 static void iwl_mvm_te_handle_notif(struct iwl_mvm *mvm,
280                                     struct iwl_mvm_time_event_data *te_data,
281                                     struct iwl_time_event_notif *notif)
282 {
283         lockdep_assert_held(&mvm->time_event_lock);
284
285         IWL_DEBUG_TE(mvm, "Handle time event notif - UID = 0x%x action %d\n",
286                      le32_to_cpu(notif->unique_id),
287                      le32_to_cpu(notif->action));
288
289         iwl_mvm_te_check_trigger(mvm, notif, te_data);
290
291         /*
292          * The FW sends the start/end time event notifications even for events
293          * that it fails to schedule. This is indicated in the status field of
294          * the notification. This happens in cases that the scheduler cannot
295          * find a schedule that can handle the event (for example requesting a
296          * P2P Device discoveribility, while there are other higher priority
297          * events in the system).
298          */
299         if (!le32_to_cpu(notif->status)) {
300                 const char *msg;
301
302                 if (notif->action & cpu_to_le32(TE_V2_NOTIF_HOST_EVENT_START))
303                         msg = "Time Event start notification failure";
304                 else
305                         msg = "Time Event end notification failure";
306
307                 IWL_DEBUG_TE(mvm, "%s\n", msg);
308
309                 if (iwl_mvm_te_check_disconnect(mvm, te_data->vif, msg)) {
310                         iwl_mvm_te_clear_data(mvm, te_data);
311                         return;
312                 }
313         }
314
315         if (le32_to_cpu(notif->action) & TE_V2_NOTIF_HOST_EVENT_END) {
316                 IWL_DEBUG_TE(mvm,
317                              "TE ended - current time %lu, estimated end %lu\n",
318                              jiffies, te_data->end_jiffies);
319
320                 switch (te_data->vif->type) {
321                 case NL80211_IFTYPE_P2P_DEVICE:
322                         ieee80211_remain_on_channel_expired(mvm->hw);
323                         iwl_mvm_roc_finished(mvm);
324                         break;
325                 case NL80211_IFTYPE_STATION:
326                         /*
327                          * By now, we should have finished association
328                          * and know the dtim period.
329                          */
330                         iwl_mvm_te_check_disconnect(mvm, te_data->vif,
331                                 "No association and the time event is over already...");
332                         break;
333                 default:
334                         break;
335                 }
336
337                 iwl_mvm_te_clear_data(mvm, te_data);
338         } else if (le32_to_cpu(notif->action) & TE_V2_NOTIF_HOST_EVENT_START) {
339                 te_data->running = true;
340                 te_data->end_jiffies = TU_TO_EXP_TIME(te_data->duration);
341
342                 if (te_data->vif->type == NL80211_IFTYPE_P2P_DEVICE) {
343                         set_bit(IWL_MVM_STATUS_ROC_RUNNING, &mvm->status);
344                         iwl_mvm_ref(mvm, IWL_MVM_REF_ROC);
345                         ieee80211_ready_on_channel(mvm->hw);
346                 } else if (te_data->id == TE_CHANNEL_SWITCH_PERIOD) {
347                         iwl_mvm_te_handle_notify_csa(mvm, te_data, notif);
348                 }
349         } else {
350                 IWL_WARN(mvm, "Got TE with unknown action\n");
351         }
352 }
353
354 /*
355  * Handle A Aux ROC time event
356  */
357 static int iwl_mvm_aux_roc_te_handle_notif(struct iwl_mvm *mvm,
358                                            struct iwl_time_event_notif *notif)
359 {
360         struct iwl_mvm_time_event_data *te_data, *tmp;
361         bool aux_roc_te = false;
362
363         list_for_each_entry_safe(te_data, tmp, &mvm->aux_roc_te_list, list) {
364                 if (le32_to_cpu(notif->unique_id) == te_data->uid) {
365                         aux_roc_te = true;
366                         break;
367                 }
368         }
369         if (!aux_roc_te) /* Not a Aux ROC time event */
370                 return -EINVAL;
371
372         iwl_mvm_te_check_trigger(mvm, notif, te_data);
373
374         IWL_DEBUG_TE(mvm,
375                      "Aux ROC time event notification  - UID = 0x%x action %d (error = %d)\n",
376                      le32_to_cpu(notif->unique_id),
377                      le32_to_cpu(notif->action), le32_to_cpu(notif->status));
378
379         if (!le32_to_cpu(notif->status) ||
380             le32_to_cpu(notif->action) == TE_V2_NOTIF_HOST_EVENT_END) {
381                 /* End TE, notify mac80211 */
382                 ieee80211_remain_on_channel_expired(mvm->hw);
383                 iwl_mvm_roc_finished(mvm); /* flush aux queue */
384                 list_del(&te_data->list); /* remove from list */
385                 te_data->running = false;
386                 te_data->vif = NULL;
387                 te_data->uid = 0;
388                 te_data->id = TE_MAX;
389         } else if (le32_to_cpu(notif->action) == TE_V2_NOTIF_HOST_EVENT_START) {
390                 set_bit(IWL_MVM_STATUS_ROC_AUX_RUNNING, &mvm->status);
391                 te_data->running = true;
392                 iwl_mvm_ref(mvm, IWL_MVM_REF_ROC_AUX);
393                 ieee80211_ready_on_channel(mvm->hw); /* Start TE */
394         } else {
395                 IWL_DEBUG_TE(mvm,
396                              "ERROR: Unknown Aux ROC Time Event (action = %d)\n",
397                              le32_to_cpu(notif->action));
398                 return -EINVAL;
399         }
400
401         return 0;
402 }
403
404 /*
405  * The Rx handler for time event notifications
406  */
407 void iwl_mvm_rx_time_event_notif(struct iwl_mvm *mvm,
408                                  struct iwl_rx_cmd_buffer *rxb)
409 {
410         struct iwl_rx_packet *pkt = rxb_addr(rxb);
411         struct iwl_time_event_notif *notif = (void *)pkt->data;
412         struct iwl_mvm_time_event_data *te_data, *tmp;
413
414         IWL_DEBUG_TE(mvm, "Time event notification - UID = 0x%x action %d\n",
415                      le32_to_cpu(notif->unique_id),
416                      le32_to_cpu(notif->action));
417
418         spin_lock_bh(&mvm->time_event_lock);
419         /* This time event is triggered for Aux ROC request */
420         if (!iwl_mvm_aux_roc_te_handle_notif(mvm, notif))
421                 goto unlock;
422
423         list_for_each_entry_safe(te_data, tmp, &mvm->time_event_list, list) {
424                 if (le32_to_cpu(notif->unique_id) == te_data->uid)
425                         iwl_mvm_te_handle_notif(mvm, te_data, notif);
426         }
427 unlock:
428         spin_unlock_bh(&mvm->time_event_lock);
429 }
430
431 static bool iwl_mvm_te_notif(struct iwl_notif_wait_data *notif_wait,
432                              struct iwl_rx_packet *pkt, void *data)
433 {
434         struct iwl_mvm *mvm =
435                 container_of(notif_wait, struct iwl_mvm, notif_wait);
436         struct iwl_mvm_time_event_data *te_data = data;
437         struct iwl_time_event_notif *resp;
438         int resp_len = iwl_rx_packet_payload_len(pkt);
439
440         if (WARN_ON(pkt->hdr.cmd != TIME_EVENT_NOTIFICATION))
441                 return true;
442
443         if (WARN_ON_ONCE(resp_len != sizeof(*resp))) {
444                 IWL_ERR(mvm, "Invalid TIME_EVENT_NOTIFICATION response\n");
445                 return true;
446         }
447
448         resp = (void *)pkt->data;
449
450         /* te_data->uid is already set in the TIME_EVENT_CMD response */
451         if (le32_to_cpu(resp->unique_id) != te_data->uid)
452                 return false;
453
454         IWL_DEBUG_TE(mvm, "TIME_EVENT_NOTIFICATION response - UID = 0x%x\n",
455                      te_data->uid);
456         if (!resp->status)
457                 IWL_ERR(mvm,
458                         "TIME_EVENT_NOTIFICATION received but not executed\n");
459
460         return true;
461 }
462
463 static bool iwl_mvm_time_event_response(struct iwl_notif_wait_data *notif_wait,
464                                         struct iwl_rx_packet *pkt, void *data)
465 {
466         struct iwl_mvm *mvm =
467                 container_of(notif_wait, struct iwl_mvm, notif_wait);
468         struct iwl_mvm_time_event_data *te_data = data;
469         struct iwl_time_event_resp *resp;
470         int resp_len = iwl_rx_packet_payload_len(pkt);
471
472         if (WARN_ON(pkt->hdr.cmd != TIME_EVENT_CMD))
473                 return true;
474
475         if (WARN_ON_ONCE(resp_len != sizeof(*resp))) {
476                 IWL_ERR(mvm, "Invalid TIME_EVENT_CMD response\n");
477                 return true;
478         }
479
480         resp = (void *)pkt->data;
481
482         /* we should never get a response to another TIME_EVENT_CMD here */
483         if (WARN_ON_ONCE(le32_to_cpu(resp->id) != te_data->id))
484                 return false;
485
486         te_data->uid = le32_to_cpu(resp->unique_id);
487         IWL_DEBUG_TE(mvm, "TIME_EVENT_CMD response - UID = 0x%x\n",
488                      te_data->uid);
489         return true;
490 }
491
492 static int iwl_mvm_time_event_send_add(struct iwl_mvm *mvm,
493                                        struct ieee80211_vif *vif,
494                                        struct iwl_mvm_time_event_data *te_data,
495                                        struct iwl_time_event_cmd *te_cmd)
496 {
497         static const u16 time_event_response[] = { TIME_EVENT_CMD };
498         struct iwl_notification_wait wait_time_event;
499         int ret;
500
501         lockdep_assert_held(&mvm->mutex);
502
503         IWL_DEBUG_TE(mvm, "Add new TE, duration %d TU\n",
504                      le32_to_cpu(te_cmd->duration));
505
506         spin_lock_bh(&mvm->time_event_lock);
507         if (WARN_ON(te_data->id != TE_MAX)) {
508                 spin_unlock_bh(&mvm->time_event_lock);
509                 return -EIO;
510         }
511         te_data->vif = vif;
512         te_data->duration = le32_to_cpu(te_cmd->duration);
513         te_data->id = le32_to_cpu(te_cmd->id);
514         list_add_tail(&te_data->list, &mvm->time_event_list);
515         spin_unlock_bh(&mvm->time_event_lock);
516
517         /*
518          * Use a notification wait, which really just processes the
519          * command response and doesn't wait for anything, in order
520          * to be able to process the response and get the UID inside
521          * the RX path. Using CMD_WANT_SKB doesn't work because it
522          * stores the buffer and then wakes up this thread, by which
523          * time another notification (that the time event started)
524          * might already be processed unsuccessfully.
525          */
526         iwl_init_notification_wait(&mvm->notif_wait, &wait_time_event,
527                                    time_event_response,
528                                    ARRAY_SIZE(time_event_response),
529                                    iwl_mvm_time_event_response, te_data);
530
531         ret = iwl_mvm_send_cmd_pdu(mvm, TIME_EVENT_CMD, 0,
532                                             sizeof(*te_cmd), te_cmd);
533         if (ret) {
534                 IWL_ERR(mvm, "Couldn't send TIME_EVENT_CMD: %d\n", ret);
535                 iwl_remove_notification(&mvm->notif_wait, &wait_time_event);
536                 goto out_clear_te;
537         }
538
539         /* No need to wait for anything, so just pass 1 (0 isn't valid) */
540         ret = iwl_wait_notification(&mvm->notif_wait, &wait_time_event, 1);
541         /* should never fail */
542         WARN_ON_ONCE(ret);
543
544         if (ret) {
545  out_clear_te:
546                 spin_lock_bh(&mvm->time_event_lock);
547                 iwl_mvm_te_clear_data(mvm, te_data);
548                 spin_unlock_bh(&mvm->time_event_lock);
549         }
550         return ret;
551 }
552
553 void iwl_mvm_protect_session(struct iwl_mvm *mvm,
554                              struct ieee80211_vif *vif,
555                              u32 duration, u32 min_duration,
556                              u32 max_delay, bool wait_for_notif)
557 {
558         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
559         struct iwl_mvm_time_event_data *te_data = &mvmvif->time_event_data;
560         const u16 te_notif_response[] = { TIME_EVENT_NOTIFICATION };
561         struct iwl_notification_wait wait_te_notif;
562         struct iwl_time_event_cmd time_cmd = {};
563
564         lockdep_assert_held(&mvm->mutex);
565
566         if (te_data->running &&
567             time_after(te_data->end_jiffies, TU_TO_EXP_TIME(min_duration))) {
568                 IWL_DEBUG_TE(mvm, "We have enough time in the current TE: %u\n",
569                              jiffies_to_msecs(te_data->end_jiffies - jiffies));
570                 return;
571         }
572
573         if (te_data->running) {
574                 IWL_DEBUG_TE(mvm, "extend 0x%x: only %u ms left\n",
575                              te_data->uid,
576                              jiffies_to_msecs(te_data->end_jiffies - jiffies));
577                 /*
578                  * we don't have enough time
579                  * cancel the current TE and issue a new one
580                  * Of course it would be better to remove the old one only
581                  * when the new one is added, but we don't care if we are off
582                  * channel for a bit. All we need to do, is not to return
583                  * before we actually begin to be on the channel.
584                  */
585                 iwl_mvm_stop_session_protection(mvm, vif);
586         }
587
588         time_cmd.action = cpu_to_le32(FW_CTXT_ACTION_ADD);
589         time_cmd.id_and_color =
590                 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color));
591         time_cmd.id = cpu_to_le32(TE_BSS_STA_AGGRESSIVE_ASSOC);
592
593         time_cmd.apply_time = cpu_to_le32(0);
594
595         time_cmd.max_frags = TE_V2_FRAG_NONE;
596         time_cmd.max_delay = cpu_to_le32(max_delay);
597         /* TODO: why do we need to interval = bi if it is not periodic? */
598         time_cmd.interval = cpu_to_le32(1);
599         time_cmd.duration = cpu_to_le32(duration);
600         time_cmd.repeat = 1;
601         time_cmd.policy = cpu_to_le16(TE_V2_NOTIF_HOST_EVENT_START |
602                                       TE_V2_NOTIF_HOST_EVENT_END |
603                                       T2_V2_START_IMMEDIATELY);
604
605         if (!wait_for_notif) {
606                 iwl_mvm_time_event_send_add(mvm, vif, te_data, &time_cmd);
607                 return;
608         }
609
610         /*
611          * Create notification_wait for the TIME_EVENT_NOTIFICATION to use
612          * right after we send the time event
613          */
614         iwl_init_notification_wait(&mvm->notif_wait, &wait_te_notif,
615                                    te_notif_response,
616                                    ARRAY_SIZE(te_notif_response),
617                                    iwl_mvm_te_notif, te_data);
618
619         /* If TE was sent OK - wait for the notification that started */
620         if (iwl_mvm_time_event_send_add(mvm, vif, te_data, &time_cmd)) {
621                 IWL_ERR(mvm, "Failed to add TE to protect session\n");
622                 iwl_remove_notification(&mvm->notif_wait, &wait_te_notif);
623         } else if (iwl_wait_notification(&mvm->notif_wait, &wait_te_notif,
624                                          TU_TO_JIFFIES(max_delay))) {
625                 IWL_ERR(mvm, "Failed to protect session until TE\n");
626         }
627 }
628
629 static bool __iwl_mvm_remove_time_event(struct iwl_mvm *mvm,
630                                         struct iwl_mvm_time_event_data *te_data,
631                                         u32 *uid)
632 {
633         u32 id;
634
635         /*
636          * It is possible that by the time we got to this point the time
637          * event was already removed.
638          */
639         spin_lock_bh(&mvm->time_event_lock);
640
641         /* Save time event uid before clearing its data */
642         *uid = te_data->uid;
643         id = te_data->id;
644
645         /*
646          * The clear_data function handles time events that were already removed
647          */
648         iwl_mvm_te_clear_data(mvm, te_data);
649         spin_unlock_bh(&mvm->time_event_lock);
650
651         /*
652          * It is possible that by the time we try to remove it, the time event
653          * has already ended and removed. In such a case there is no need to
654          * send a removal command.
655          */
656         if (id == TE_MAX) {
657                 IWL_DEBUG_TE(mvm, "TE 0x%x has already ended\n", *uid);
658                 return false;
659         }
660
661         return true;
662 }
663
664 /*
665  * Explicit request to remove a aux roc time event. The removal of a time
666  * event needs to be synchronized with the flow of a time event's end
667  * notification, which also removes the time event from the op mode
668  * data structures.
669  */
670 static void iwl_mvm_remove_aux_roc_te(struct iwl_mvm *mvm,
671                                       struct iwl_mvm_vif *mvmvif,
672                                       struct iwl_mvm_time_event_data *te_data)
673 {
674         struct iwl_hs20_roc_req aux_cmd = {};
675         u32 uid;
676         int ret;
677
678         if (!__iwl_mvm_remove_time_event(mvm, te_data, &uid))
679                 return;
680
681         aux_cmd.event_unique_id = cpu_to_le32(uid);
682         aux_cmd.action = cpu_to_le32(FW_CTXT_ACTION_REMOVE);
683         aux_cmd.id_and_color =
684                 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color));
685         IWL_DEBUG_TE(mvm, "Removing BSS AUX ROC TE 0x%x\n",
686                      le32_to_cpu(aux_cmd.event_unique_id));
687         ret = iwl_mvm_send_cmd_pdu(mvm, HOT_SPOT_CMD, 0,
688                                    sizeof(aux_cmd), &aux_cmd);
689
690         if (WARN_ON(ret))
691                 return;
692 }
693
694 /*
695  * Explicit request to remove a time event. The removal of a time event needs to
696  * be synchronized with the flow of a time event's end notification, which also
697  * removes the time event from the op mode data structures.
698  */
699 void iwl_mvm_remove_time_event(struct iwl_mvm *mvm,
700                                struct iwl_mvm_vif *mvmvif,
701                                struct iwl_mvm_time_event_data *te_data)
702 {
703         struct iwl_time_event_cmd time_cmd = {};
704         u32 uid;
705         int ret;
706
707         if (!__iwl_mvm_remove_time_event(mvm, te_data, &uid))
708                 return;
709
710         /* When we remove a TE, the UID is to be set in the id field */
711         time_cmd.id = cpu_to_le32(uid);
712         time_cmd.action = cpu_to_le32(FW_CTXT_ACTION_REMOVE);
713         time_cmd.id_and_color =
714                 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color));
715
716         IWL_DEBUG_TE(mvm, "Removing TE 0x%x\n", le32_to_cpu(time_cmd.id));
717         ret = iwl_mvm_send_cmd_pdu(mvm, TIME_EVENT_CMD, 0,
718                                    sizeof(time_cmd), &time_cmd);
719         if (WARN_ON(ret))
720                 return;
721 }
722
723 void iwl_mvm_stop_session_protection(struct iwl_mvm *mvm,
724                                      struct ieee80211_vif *vif)
725 {
726         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
727         struct iwl_mvm_time_event_data *te_data = &mvmvif->time_event_data;
728
729         lockdep_assert_held(&mvm->mutex);
730         iwl_mvm_remove_time_event(mvm, mvmvif, te_data);
731 }
732
733 int iwl_mvm_start_p2p_roc(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
734                           int duration, enum ieee80211_roc_type type)
735 {
736         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
737         struct iwl_mvm_time_event_data *te_data = &mvmvif->time_event_data;
738         struct iwl_time_event_cmd time_cmd = {};
739
740         lockdep_assert_held(&mvm->mutex);
741         if (te_data->running) {
742                 IWL_WARN(mvm, "P2P_DEVICE remain on channel already running\n");
743                 return -EBUSY;
744         }
745
746         /*
747          * Flush the done work, just in case it's still pending, so that
748          * the work it does can complete and we can accept new frames.
749          */
750         flush_work(&mvm->roc_done_wk);
751
752         time_cmd.action = cpu_to_le32(FW_CTXT_ACTION_ADD);
753         time_cmd.id_and_color =
754                 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color));
755
756         switch (type) {
757         case IEEE80211_ROC_TYPE_NORMAL:
758                 time_cmd.id = cpu_to_le32(IWL_MVM_ROC_TE_TYPE_NORMAL);
759                 break;
760         case IEEE80211_ROC_TYPE_MGMT_TX:
761                 time_cmd.id = cpu_to_le32(IWL_MVM_ROC_TE_TYPE_MGMT_TX);
762                 break;
763         default:
764                 WARN_ONCE(1, "Got an invalid ROC type\n");
765                 return -EINVAL;
766         }
767
768         time_cmd.apply_time = cpu_to_le32(0);
769         time_cmd.interval = cpu_to_le32(1);
770
771         /*
772          * The P2P Device TEs can have lower priority than other events
773          * that are being scheduled by the driver/fw, and thus it might not be
774          * scheduled. To improve the chances of it being scheduled, allow them
775          * to be fragmented, and in addition allow them to be delayed.
776          */
777         time_cmd.max_frags = min(MSEC_TO_TU(duration)/50, TE_V2_FRAG_ENDLESS);
778         time_cmd.max_delay = cpu_to_le32(MSEC_TO_TU(duration/2));
779         time_cmd.duration = cpu_to_le32(MSEC_TO_TU(duration));
780         time_cmd.repeat = 1;
781         time_cmd.policy = cpu_to_le16(TE_V2_NOTIF_HOST_EVENT_START |
782                                       TE_V2_NOTIF_HOST_EVENT_END |
783                                       T2_V2_START_IMMEDIATELY);
784
785         return iwl_mvm_time_event_send_add(mvm, vif, te_data, &time_cmd);
786 }
787
788 static struct iwl_mvm_time_event_data *iwl_mvm_get_roc_te(struct iwl_mvm *mvm)
789 {
790         struct iwl_mvm_time_event_data *te_data;
791
792         lockdep_assert_held(&mvm->mutex);
793
794         spin_lock_bh(&mvm->time_event_lock);
795
796         /*
797          * Iterate over the list of time events and find the time event that is
798          * associated with a P2P_DEVICE interface.
799          * This assumes that a P2P_DEVICE interface can have only a single time
800          * event at any given time and this time event coresponds to a ROC
801          * request
802          */
803         list_for_each_entry(te_data, &mvm->time_event_list, list) {
804                 if (te_data->vif->type == NL80211_IFTYPE_P2P_DEVICE)
805                         goto out;
806         }
807
808         /* There can only be at most one AUX ROC time event, we just use the
809          * list to simplify/unify code. Remove it if it exists.
810          */
811         te_data = list_first_entry_or_null(&mvm->aux_roc_te_list,
812                                            struct iwl_mvm_time_event_data,
813                                            list);
814 out:
815         spin_unlock_bh(&mvm->time_event_lock);
816         return te_data;
817 }
818
819 void iwl_mvm_cleanup_roc_te(struct iwl_mvm *mvm)
820 {
821         struct iwl_mvm_time_event_data *te_data;
822         u32 uid;
823
824         te_data = iwl_mvm_get_roc_te(mvm);
825         if (te_data)
826                 __iwl_mvm_remove_time_event(mvm, te_data, &uid);
827 }
828
829 void iwl_mvm_stop_roc(struct iwl_mvm *mvm)
830 {
831         struct iwl_mvm_vif *mvmvif;
832         struct iwl_mvm_time_event_data *te_data;
833
834         te_data = iwl_mvm_get_roc_te(mvm);
835         if (!te_data) {
836                 IWL_WARN(mvm, "No remain on channel event\n");
837                 return;
838         }
839
840         mvmvif = iwl_mvm_vif_from_mac80211(te_data->vif);
841
842         if (te_data->vif->type == NL80211_IFTYPE_P2P_DEVICE)
843                 iwl_mvm_remove_time_event(mvm, mvmvif, te_data);
844         else
845                 iwl_mvm_remove_aux_roc_te(mvm, mvmvif, te_data);
846
847         iwl_mvm_roc_finished(mvm);
848 }
849
850 int iwl_mvm_schedule_csa_period(struct iwl_mvm *mvm,
851                                 struct ieee80211_vif *vif,
852                                 u32 duration, u32 apply_time)
853 {
854         struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
855         struct iwl_mvm_time_event_data *te_data = &mvmvif->time_event_data;
856         struct iwl_time_event_cmd time_cmd = {};
857
858         lockdep_assert_held(&mvm->mutex);
859
860         if (te_data->running) {
861                 IWL_DEBUG_TE(mvm, "CS period is already scheduled\n");
862                 return -EBUSY;
863         }
864
865         time_cmd.action = cpu_to_le32(FW_CTXT_ACTION_ADD);
866         time_cmd.id_and_color =
867                 cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color));
868         time_cmd.id = cpu_to_le32(TE_CHANNEL_SWITCH_PERIOD);
869         time_cmd.apply_time = cpu_to_le32(apply_time);
870         time_cmd.max_frags = TE_V2_FRAG_NONE;
871         time_cmd.duration = cpu_to_le32(duration);
872         time_cmd.repeat = 1;
873         time_cmd.interval = cpu_to_le32(1);
874         time_cmd.policy = cpu_to_le16(TE_V2_NOTIF_HOST_EVENT_START |
875                                       TE_V2_ABSENCE);
876
877         return iwl_mvm_time_event_send_add(mvm, vif, te_data, &time_cmd);
878 }