1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67#include <linux/ieee80211.h>
68#include <linux/etherdevice.h>
69#include <linux/tcp.h>
70#include <net/ip.h>
71#include <net/ipv6.h>
72
73#include "iwl-trans.h"
74#include "iwl-eeprom-parse.h"
75#include "mvm.h"
76#include "sta.h"
77
78static void
79iwl_mvm_bar_check_trigger(struct iwl_mvm *mvm, const u8 *addr,
80 u16 tid, u16 ssn)
81{
82 struct iwl_fw_dbg_trigger_tlv *trig;
83 struct iwl_fw_dbg_trigger_ba *ba_trig;
84
85 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_BA))
86 return;
87
88 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_BA);
89 ba_trig = (void *)trig->data;
90
91 if (!iwl_fw_dbg_trigger_check_stop(&mvm->fwrt, NULL, trig))
92 return;
93
94 if (!(le16_to_cpu(ba_trig->tx_bar) & BIT(tid)))
95 return;
96
97 iwl_fw_dbg_collect_trig(&mvm->fwrt, trig,
98 "BAR sent to %pM, tid %d, ssn %d",
99 addr, tid, ssn);
100}
101
102#define OPT_HDR(type, skb, off) \
103 (type *)(skb_network_header(skb) + (off))
104
105static u16 iwl_mvm_tx_csum(struct iwl_mvm *mvm, struct sk_buff *skb,
106 struct ieee80211_hdr *hdr,
107 struct ieee80211_tx_info *info,
108 u16 offload_assist)
109{
110#if IS_ENABLED(CONFIG_INET)
111 u16 mh_len = ieee80211_hdrlen(hdr->frame_control);
112 u8 protocol = 0;
113
114
115
116
117
118 if (skb->ip_summed != CHECKSUM_PARTIAL || IWL_MVM_SW_TX_CSUM_OFFLOAD)
119 goto out;
120
121
122 if (WARN_ONCE(!(mvm->hw->netdev_features & IWL_TX_CSUM_NETIF_FLAGS) ||
123 (skb->protocol != htons(ETH_P_IP) &&
124 skb->protocol != htons(ETH_P_IPV6)),
125 "No support for requested checksum\n")) {
126 skb_checksum_help(skb);
127 goto out;
128 }
129
130 if (skb->protocol == htons(ETH_P_IP)) {
131 protocol = ip_hdr(skb)->protocol;
132 } else {
133#if IS_ENABLED(CONFIG_IPV6)
134 struct ipv6hdr *ipv6h =
135 (struct ipv6hdr *)skb_network_header(skb);
136 unsigned int off = sizeof(*ipv6h);
137
138 protocol = ipv6h->nexthdr;
139 while (protocol != NEXTHDR_NONE && ipv6_ext_hdr(protocol)) {
140 struct ipv6_opt_hdr *hp;
141
142
143 if (protocol != NEXTHDR_ROUTING &&
144 protocol != NEXTHDR_HOP &&
145 protocol != NEXTHDR_DEST) {
146 skb_checksum_help(skb);
147 goto out;
148 }
149
150 hp = OPT_HDR(struct ipv6_opt_hdr, skb, off);
151 protocol = hp->nexthdr;
152 off += ipv6_optlen(hp);
153 }
154
155#endif
156 }
157
158 if (protocol != IPPROTO_TCP && protocol != IPPROTO_UDP) {
159 WARN_ON_ONCE(1);
160 skb_checksum_help(skb);
161 goto out;
162 }
163
164
165 offload_assist |= BIT(TX_CMD_OFFLD_L4_EN);
166
167
168
169
170
171
172 offload_assist |= (4 << TX_CMD_OFFLD_IP_HDR);
173
174
175 if (skb->protocol == htons(ETH_P_IP) &&
176 (offload_assist & BIT(TX_CMD_OFFLD_AMSDU))) {
177 ip_hdr(skb)->check = 0;
178 offload_assist |= BIT(TX_CMD_OFFLD_L3_EN);
179 }
180
181
182 if (protocol == IPPROTO_TCP)
183 tcp_hdr(skb)->check = 0;
184 else
185 udp_hdr(skb)->check = 0;
186
187
188
189
190
191
192 if (!iwl_mvm_has_new_tx_api(mvm) && info->control.hw_key &&
193 info->control.hw_key->cipher != WLAN_CIPHER_SUITE_WEP40 &&
194 info->control.hw_key->cipher != WLAN_CIPHER_SUITE_WEP104)
195 mh_len += info->control.hw_key->iv_len;
196 mh_len /= 2;
197 offload_assist |= mh_len << TX_CMD_OFFLD_MH_SIZE;
198
199out:
200#endif
201 return offload_assist;
202}
203
204
205
206
207void iwl_mvm_set_tx_cmd(struct iwl_mvm *mvm, struct sk_buff *skb,
208 struct iwl_tx_cmd *tx_cmd,
209 struct ieee80211_tx_info *info, u8 sta_id)
210{
211 struct ieee80211_hdr *hdr = (void *)skb->data;
212 __le16 fc = hdr->frame_control;
213 u32 tx_flags = le32_to_cpu(tx_cmd->tx_flags);
214 u32 len = skb->len + FCS_LEN;
215 u16 offload_assist = 0;
216 u8 ac;
217
218 if (!(info->flags & IEEE80211_TX_CTL_NO_ACK))
219 tx_flags |= TX_CMD_FLG_ACK;
220 else
221 tx_flags &= ~TX_CMD_FLG_ACK;
222
223 if (ieee80211_is_probe_resp(fc))
224 tx_flags |= TX_CMD_FLG_TSF;
225
226 if (ieee80211_has_morefrags(fc))
227 tx_flags |= TX_CMD_FLG_MORE_FRAG;
228
229 if (ieee80211_is_data_qos(fc)) {
230 u8 *qc = ieee80211_get_qos_ctl(hdr);
231 tx_cmd->tid_tspec = qc[0] & 0xf;
232 tx_flags &= ~TX_CMD_FLG_SEQ_CTL;
233 if (*qc & IEEE80211_QOS_CTL_A_MSDU_PRESENT)
234 offload_assist |= BIT(TX_CMD_OFFLD_AMSDU);
235 } else if (ieee80211_is_back_req(fc)) {
236 struct ieee80211_bar *bar = (void *)skb->data;
237 u16 control = le16_to_cpu(bar->control);
238 u16 ssn = le16_to_cpu(bar->start_seq_num);
239
240 tx_flags |= TX_CMD_FLG_ACK | TX_CMD_FLG_BAR;
241 tx_cmd->tid_tspec = (control &
242 IEEE80211_BAR_CTRL_TID_INFO_MASK) >>
243 IEEE80211_BAR_CTRL_TID_INFO_SHIFT;
244 WARN_ON_ONCE(tx_cmd->tid_tspec >= IWL_MAX_TID_COUNT);
245 iwl_mvm_bar_check_trigger(mvm, bar->ra, tx_cmd->tid_tspec,
246 ssn);
247 } else {
248 tx_cmd->tid_tspec = IWL_TID_NON_QOS;
249 if (info->flags & IEEE80211_TX_CTL_ASSIGN_SEQ)
250 tx_flags |= TX_CMD_FLG_SEQ_CTL;
251 else
252 tx_flags &= ~TX_CMD_FLG_SEQ_CTL;
253 }
254
255
256 if (tx_cmd->tid_tspec < IWL_MAX_TID_COUNT)
257 ac = tid_to_mac80211_ac[tx_cmd->tid_tspec];
258 else
259 ac = tid_to_mac80211_ac[0];
260
261 tx_flags |= iwl_mvm_bt_coex_tx_prio(mvm, hdr, info, ac) <<
262 TX_CMD_FLG_BT_PRIO_POS;
263
264 if (ieee80211_is_mgmt(fc)) {
265 if (ieee80211_is_assoc_req(fc) || ieee80211_is_reassoc_req(fc))
266 tx_cmd->pm_frame_timeout = cpu_to_le16(PM_FRAME_ASSOC);
267 else if (ieee80211_is_action(fc))
268 tx_cmd->pm_frame_timeout = cpu_to_le16(PM_FRAME_NONE);
269 else
270 tx_cmd->pm_frame_timeout = cpu_to_le16(PM_FRAME_MGMT);
271
272
273
274
275 WARN_ON_ONCE(info->flags & IEEE80211_TX_CTL_AMPDU);
276 } else if (info->control.flags & IEEE80211_TX_CTRL_PORT_CTRL_PROTO) {
277 tx_cmd->pm_frame_timeout = cpu_to_le16(PM_FRAME_MGMT);
278 } else {
279 tx_cmd->pm_frame_timeout = cpu_to_le16(PM_FRAME_NONE);
280 }
281
282 if (ieee80211_is_data(fc) && len > mvm->rts_threshold &&
283 !is_multicast_ether_addr(ieee80211_get_DA(hdr)))
284 tx_flags |= TX_CMD_FLG_PROT_REQUIRE;
285
286 if (fw_has_capa(&mvm->fw->ucode_capa,
287 IWL_UCODE_TLV_CAPA_TXPOWER_INSERTION_SUPPORT) &&
288 ieee80211_action_contains_tpc(skb))
289 tx_flags |= TX_CMD_FLG_WRITE_TX_POWER;
290
291 tx_cmd->tx_flags = cpu_to_le32(tx_flags);
292
293 tx_cmd->len = cpu_to_le16((u16)skb->len);
294 tx_cmd->life_time = cpu_to_le32(TX_CMD_LIFE_TIME_INFINITE);
295 tx_cmd->sta_id = sta_id;
296
297
298 if (ieee80211_hdrlen(fc) % 4 &&
299 !(offload_assist & BIT(TX_CMD_OFFLD_AMSDU)))
300 offload_assist |= BIT(TX_CMD_OFFLD_PAD);
301
302 tx_cmd->offload_assist |=
303 cpu_to_le16(iwl_mvm_tx_csum(mvm, skb, hdr, info,
304 offload_assist));
305}
306
307static u32 iwl_mvm_get_tx_rate(struct iwl_mvm *mvm,
308 struct ieee80211_tx_info *info,
309 struct ieee80211_sta *sta)
310{
311 int rate_idx;
312 u8 rate_plcp;
313 u32 rate_flags;
314
315
316 WARN_ONCE(info->control.rates[0].flags & IEEE80211_TX_RC_MCS,
317 "Got an HT rate (flags:0x%x/mcs:%d) for a non data frame\n",
318 info->control.rates[0].flags,
319 info->control.rates[0].idx);
320
321 rate_idx = info->control.rates[0].idx;
322
323 if (rate_idx < 0 || rate_idx >= IWL_RATE_COUNT_LEGACY)
324 rate_idx = rate_lowest_index(
325 &mvm->nvm_data->bands[info->band], sta);
326
327
328 if (info->band == NL80211_BAND_5GHZ)
329 rate_idx += IWL_FIRST_OFDM_RATE;
330
331
332 BUILD_BUG_ON(IWL_FIRST_CCK_RATE != 0);
333
334
335 rate_plcp = iwl_mvm_mac80211_idx_to_hwrate(rate_idx);
336
337 if (info->band == NL80211_BAND_2GHZ &&
338 !iwl_mvm_bt_coex_is_shared_ant_avail(mvm))
339 rate_flags = mvm->cfg->non_shared_ant << RATE_MCS_ANT_POS;
340 else
341 rate_flags =
342 BIT(mvm->mgmt_last_antenna_idx) << RATE_MCS_ANT_POS;
343
344
345 if ((rate_idx >= IWL_FIRST_CCK_RATE) && (rate_idx <= IWL_LAST_CCK_RATE))
346 rate_flags |= RATE_MCS_CCK_MSK;
347
348 return (u32)rate_plcp | rate_flags;
349}
350
351
352
353
354void iwl_mvm_set_tx_cmd_rate(struct iwl_mvm *mvm, struct iwl_tx_cmd *tx_cmd,
355 struct ieee80211_tx_info *info,
356 struct ieee80211_sta *sta, __le16 fc)
357{
358
359 tx_cmd->rts_retry_limit = IWL_RTS_DFAULT_RETRY_LIMIT;
360
361
362 if (ieee80211_is_probe_resp(fc)) {
363 tx_cmd->data_retry_limit = IWL_MGMT_DFAULT_RETRY_LIMIT;
364 tx_cmd->rts_retry_limit =
365 min(tx_cmd->data_retry_limit, tx_cmd->rts_retry_limit);
366 } else if (ieee80211_is_back_req(fc)) {
367 tx_cmd->data_retry_limit = IWL_BAR_DFAULT_RETRY_LIMIT;
368 } else {
369 tx_cmd->data_retry_limit = IWL_DEFAULT_TX_RETRY;
370 }
371
372
373
374
375
376
377 if (ieee80211_is_data(fc) && sta) {
378 tx_cmd->initial_rate_index = 0;
379 tx_cmd->tx_flags |= cpu_to_le32(TX_CMD_FLG_STA_RATE);
380 return;
381 } else if (ieee80211_is_back_req(fc)) {
382 tx_cmd->tx_flags |=
383 cpu_to_le32(TX_CMD_FLG_ACK | TX_CMD_FLG_BAR);
384 }
385
386 mvm->mgmt_last_antenna_idx =
387 iwl_mvm_next_antenna(mvm, iwl_mvm_get_valid_tx_ant(mvm),
388 mvm->mgmt_last_antenna_idx);
389
390
391 tx_cmd->rate_n_flags = cpu_to_le32(iwl_mvm_get_tx_rate(mvm, info, sta));
392}
393
394static inline void iwl_mvm_set_tx_cmd_pn(struct ieee80211_tx_info *info,
395 u8 *crypto_hdr)
396{
397 struct ieee80211_key_conf *keyconf = info->control.hw_key;
398 u64 pn;
399
400 pn = atomic64_inc_return(&keyconf->tx_pn);
401 crypto_hdr[0] = pn;
402 crypto_hdr[2] = 0;
403 crypto_hdr[3] = 0x20 | (keyconf->keyidx << 6);
404 crypto_hdr[1] = pn >> 8;
405 crypto_hdr[4] = pn >> 16;
406 crypto_hdr[5] = pn >> 24;
407 crypto_hdr[6] = pn >> 32;
408 crypto_hdr[7] = pn >> 40;
409}
410
411
412
413
414static void iwl_mvm_set_tx_cmd_crypto(struct iwl_mvm *mvm,
415 struct ieee80211_tx_info *info,
416 struct iwl_tx_cmd *tx_cmd,
417 struct sk_buff *skb_frag,
418 int hdrlen)
419{
420 struct ieee80211_key_conf *keyconf = info->control.hw_key;
421 u8 *crypto_hdr = skb_frag->data + hdrlen;
422 enum iwl_tx_cmd_sec_ctrl type = TX_CMD_SEC_CCM;
423 u64 pn;
424
425 switch (keyconf->cipher) {
426 case WLAN_CIPHER_SUITE_CCMP:
427 iwl_mvm_set_tx_cmd_ccmp(info, tx_cmd);
428 iwl_mvm_set_tx_cmd_pn(info, crypto_hdr);
429 break;
430
431 case WLAN_CIPHER_SUITE_TKIP:
432 tx_cmd->sec_ctl = TX_CMD_SEC_TKIP;
433 pn = atomic64_inc_return(&keyconf->tx_pn);
434 ieee80211_tkip_add_iv(crypto_hdr, keyconf, pn);
435 ieee80211_get_tkip_p2k(keyconf, skb_frag, tx_cmd->key);
436 break;
437
438 case WLAN_CIPHER_SUITE_WEP104:
439 tx_cmd->sec_ctl |= TX_CMD_SEC_KEY128;
440
441 case WLAN_CIPHER_SUITE_WEP40:
442 tx_cmd->sec_ctl |= TX_CMD_SEC_WEP |
443 ((keyconf->keyidx << TX_CMD_SEC_WEP_KEY_IDX_POS) &
444 TX_CMD_SEC_WEP_KEY_IDX_MSK);
445
446 memcpy(&tx_cmd->key[3], keyconf->key, keyconf->keylen);
447 break;
448 case WLAN_CIPHER_SUITE_GCMP:
449 case WLAN_CIPHER_SUITE_GCMP_256:
450 type = TX_CMD_SEC_GCMP;
451
452 case WLAN_CIPHER_SUITE_CCMP_256:
453
454
455
456
457
458
459 tx_cmd->sec_ctl |= type | TX_CMD_SEC_KEY_FROM_TABLE;
460 tx_cmd->key[0] = keyconf->hw_key_idx;
461 iwl_mvm_set_tx_cmd_pn(info, crypto_hdr);
462 break;
463 default:
464 tx_cmd->sec_ctl |= TX_CMD_SEC_EXT;
465 }
466}
467
468
469
470
471static struct iwl_device_cmd *
472iwl_mvm_set_tx_params(struct iwl_mvm *mvm, struct sk_buff *skb,
473 struct ieee80211_tx_info *info, int hdrlen,
474 struct ieee80211_sta *sta, u8 sta_id)
475{
476 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
477 struct iwl_device_cmd *dev_cmd;
478 struct iwl_tx_cmd *tx_cmd;
479
480 dev_cmd = iwl_trans_alloc_tx_cmd(mvm->trans);
481
482 if (unlikely(!dev_cmd))
483 return NULL;
484
485
486 BUILD_BUG_ON(sizeof(struct iwl_tx_cmd_gen2) > sizeof(*tx_cmd));
487
488 memset(dev_cmd, 0, sizeof(dev_cmd->hdr) + sizeof(*tx_cmd));
489 dev_cmd->hdr.cmd = TX_CMD;
490
491 if (iwl_mvm_has_new_tx_api(mvm)) {
492 struct iwl_tx_cmd_gen2 *cmd = (void *)dev_cmd->payload;
493 u16 offload_assist = 0;
494
495 if (ieee80211_is_data_qos(hdr->frame_control)) {
496 u8 *qc = ieee80211_get_qos_ctl(hdr);
497
498 if (*qc & IEEE80211_QOS_CTL_A_MSDU_PRESENT)
499 offload_assist |= BIT(TX_CMD_OFFLD_AMSDU);
500 }
501
502 offload_assist = iwl_mvm_tx_csum(mvm, skb, hdr, info,
503 offload_assist);
504
505
506 if (ieee80211_hdrlen(hdr->frame_control) % 4 &&
507 !(offload_assist & BIT(TX_CMD_OFFLD_AMSDU)))
508 offload_assist |= BIT(TX_CMD_OFFLD_PAD);
509
510 cmd->offload_assist |= cpu_to_le16(offload_assist);
511
512
513 cmd->len = cpu_to_le16((u16)skb->len);
514
515
516 memcpy(cmd->hdr, hdr, hdrlen);
517
518 if (!info->control.hw_key)
519 cmd->flags |= cpu_to_le32(IWL_TX_FLAGS_ENCRYPT_DIS);
520
521
522 if (ieee80211_is_data(hdr->frame_control) && sta)
523 goto out;
524
525 cmd->flags |= cpu_to_le32(IWL_TX_FLAGS_CMD_RATE);
526 cmd->rate_n_flags =
527 cpu_to_le32(iwl_mvm_get_tx_rate(mvm, info, sta));
528
529 goto out;
530 }
531
532 tx_cmd = (struct iwl_tx_cmd *)dev_cmd->payload;
533
534 if (info->control.hw_key)
535 iwl_mvm_set_tx_cmd_crypto(mvm, info, tx_cmd, skb, hdrlen);
536
537 iwl_mvm_set_tx_cmd(mvm, skb, tx_cmd, info, sta_id);
538
539 iwl_mvm_set_tx_cmd_rate(mvm, tx_cmd, info, sta, hdr->frame_control);
540
541
542 memcpy(tx_cmd->hdr, hdr, hdrlen);
543
544out:
545 return dev_cmd;
546}
547
548static void iwl_mvm_skb_prepare_status(struct sk_buff *skb,
549 struct iwl_device_cmd *cmd)
550{
551 struct ieee80211_tx_info *skb_info = IEEE80211_SKB_CB(skb);
552
553 memset(&skb_info->status, 0, sizeof(skb_info->status));
554 memset(skb_info->driver_data, 0, sizeof(skb_info->driver_data));
555
556 skb_info->driver_data[1] = cmd;
557}
558
559static int iwl_mvm_get_ctrl_vif_queue(struct iwl_mvm *mvm,
560 struct ieee80211_tx_info *info, __le16 fc)
561{
562 struct iwl_mvm_vif *mvmvif;
563
564 mvmvif = iwl_mvm_vif_from_mac80211(info->control.vif);
565
566 switch (info->control.vif->type) {
567 case NL80211_IFTYPE_AP:
568 case NL80211_IFTYPE_ADHOC:
569
570
571
572
573
574
575
576
577
578
579 if (ieee80211_is_mgmt(fc) &&
580 (!ieee80211_is_bufferable_mmpdu(fc) ||
581 ieee80211_is_deauth(fc) || ieee80211_is_disassoc(fc)))
582 return mvm->probe_queue;
583 if (info->hw_queue == info->control.vif->cab_queue)
584 return mvmvif->cab_queue;
585
586 WARN_ONCE(info->control.vif->type != NL80211_IFTYPE_ADHOC,
587 "fc=0x%02x", le16_to_cpu(fc));
588 return mvm->probe_queue;
589 case NL80211_IFTYPE_P2P_DEVICE:
590 if (ieee80211_is_mgmt(fc))
591 return mvm->p2p_dev_queue;
592 if (info->hw_queue == info->control.vif->cab_queue)
593 return mvmvif->cab_queue;
594
595 WARN_ON_ONCE(1);
596 return mvm->p2p_dev_queue;
597 default:
598 WARN_ONCE(1, "Not a ctrl vif, no available queue\n");
599 return -1;
600 }
601}
602
603int iwl_mvm_tx_skb_non_sta(struct iwl_mvm *mvm, struct sk_buff *skb)
604{
605 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
606 struct ieee80211_tx_info *skb_info = IEEE80211_SKB_CB(skb);
607 struct ieee80211_tx_info info;
608 struct iwl_device_cmd *dev_cmd;
609 u8 sta_id;
610 int hdrlen = ieee80211_hdrlen(hdr->frame_control);
611 int queue;
612
613
614
615
616
617
618 if (skb_info->hw_queue == IWL_MVM_OFFCHANNEL_QUEUE &&
619 skb_info->control.vif->type == NL80211_IFTYPE_STATION)
620 skb_info->hw_queue = mvm->aux_queue;
621
622 memcpy(&info, skb->cb, sizeof(info));
623
624 if (WARN_ON_ONCE(info.flags & IEEE80211_TX_CTL_AMPDU))
625 return -1;
626
627 if (WARN_ON_ONCE(info.flags & IEEE80211_TX_CTL_SEND_AFTER_DTIM &&
628 (!info.control.vif ||
629 info.hw_queue != info.control.vif->cab_queue)))
630 return -1;
631
632 queue = info.hw_queue;
633
634
635
636
637
638
639
640
641
642
643 sta_id = mvm->aux_sta.sta_id;
644 if (info.control.vif) {
645 struct iwl_mvm_vif *mvmvif =
646 iwl_mvm_vif_from_mac80211(info.control.vif);
647
648 if (info.control.vif->type == NL80211_IFTYPE_P2P_DEVICE ||
649 info.control.vif->type == NL80211_IFTYPE_AP ||
650 info.control.vif->type == NL80211_IFTYPE_ADHOC) {
651 if (info.control.vif->type == NL80211_IFTYPE_P2P_DEVICE)
652 sta_id = mvmvif->bcast_sta.sta_id;
653 else
654 sta_id = mvmvif->mcast_sta.sta_id;
655
656 queue = iwl_mvm_get_ctrl_vif_queue(mvm, &info,
657 hdr->frame_control);
658 if (queue < 0)
659 return -1;
660 } else if (info.control.vif->type == NL80211_IFTYPE_STATION &&
661 is_multicast_ether_addr(hdr->addr1)) {
662 u8 ap_sta_id = READ_ONCE(mvmvif->ap_sta_id);
663
664 if (ap_sta_id != IWL_MVM_INVALID_STA)
665 sta_id = ap_sta_id;
666 } else if (info.control.vif->type == NL80211_IFTYPE_MONITOR) {
667 queue = mvm->snif_queue;
668 sta_id = mvm->snif_sta.sta_id;
669 }
670 }
671
672 IWL_DEBUG_TX(mvm, "station Id %d, queue=%d\n", sta_id, queue);
673
674 dev_cmd = iwl_mvm_set_tx_params(mvm, skb, &info, hdrlen, NULL, sta_id);
675 if (!dev_cmd)
676 return -1;
677
678
679 iwl_mvm_skb_prepare_status(skb, dev_cmd);
680
681 if (iwl_trans_tx(mvm->trans, skb, dev_cmd, queue)) {
682 iwl_trans_free_tx_cmd(mvm->trans, dev_cmd);
683 return -1;
684 }
685
686 return 0;
687}
688
689#ifdef CONFIG_INET
690
691static int
692iwl_mvm_tx_tso_segment(struct sk_buff *skb, unsigned int num_subframes,
693 netdev_features_t netdev_flags,
694 struct sk_buff_head *mpdus_skb)
695{
696 struct sk_buff *tmp, *next;
697 struct ieee80211_hdr *hdr = (void *)skb->data;
698 char cb[sizeof(skb->cb)];
699 u16 i = 0;
700 unsigned int tcp_payload_len;
701 unsigned int mss = skb_shinfo(skb)->gso_size;
702 bool ipv4 = (skb->protocol == htons(ETH_P_IP));
703 u16 ip_base_id = ipv4 ? ntohs(ip_hdr(skb)->id) : 0;
704
705 skb_shinfo(skb)->gso_size = num_subframes * mss;
706 memcpy(cb, skb->cb, sizeof(cb));
707
708 next = skb_gso_segment(skb, netdev_flags);
709 skb_shinfo(skb)->gso_size = mss;
710 if (WARN_ON_ONCE(IS_ERR(next)))
711 return -EINVAL;
712 else if (next)
713 consume_skb(skb);
714
715 while (next) {
716 tmp = next;
717 next = tmp->next;
718
719 memcpy(tmp->cb, cb, sizeof(tmp->cb));
720
721
722
723
724
725
726 tcp_payload_len = skb_tail_pointer(tmp) -
727 skb_transport_header(tmp) -
728 tcp_hdrlen(tmp) + tmp->data_len;
729
730 if (ipv4)
731 ip_hdr(tmp)->id = htons(ip_base_id + i * num_subframes);
732
733 if (tcp_payload_len > mss) {
734 skb_shinfo(tmp)->gso_size = mss;
735 } else {
736 if (ieee80211_is_data_qos(hdr->frame_control)) {
737 u8 *qc;
738
739 if (ipv4)
740 ip_send_check(ip_hdr(tmp));
741
742 qc = ieee80211_get_qos_ctl((void *)tmp->data);
743 *qc &= ~IEEE80211_QOS_CTL_A_MSDU_PRESENT;
744 }
745 skb_shinfo(tmp)->gso_size = 0;
746 }
747
748 tmp->prev = NULL;
749 tmp->next = NULL;
750
751 __skb_queue_tail(mpdus_skb, tmp);
752 i++;
753 }
754
755 return 0;
756}
757
758static int iwl_mvm_tx_tso(struct iwl_mvm *mvm, struct sk_buff *skb,
759 struct ieee80211_tx_info *info,
760 struct ieee80211_sta *sta,
761 struct sk_buff_head *mpdus_skb)
762{
763 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
764 struct ieee80211_hdr *hdr = (void *)skb->data;
765 unsigned int mss = skb_shinfo(skb)->gso_size;
766 unsigned int num_subframes, tcp_payload_len, subf_len, max_amsdu_len;
767 u16 snap_ip_tcp, pad;
768 unsigned int dbg_max_amsdu_len;
769 netdev_features_t netdev_flags = NETIF_F_CSUM_MASK | NETIF_F_SG;
770 u8 *qc, tid, txf;
771
772 snap_ip_tcp = 8 + skb_transport_header(skb) - skb_network_header(skb) +
773 tcp_hdrlen(skb);
774
775 dbg_max_amsdu_len = READ_ONCE(mvm->max_amsdu_len);
776
777 if (!sta->max_amsdu_len ||
778 !ieee80211_is_data_qos(hdr->frame_control) ||
779 (!mvmsta->tlc_amsdu && !dbg_max_amsdu_len))
780 return iwl_mvm_tx_tso_segment(skb, 1, netdev_flags, mpdus_skb);
781
782
783
784
785
786 if (skb->protocol == htons(ETH_P_IPV6) &&
787 ((struct ipv6hdr *)skb_network_header(skb))->nexthdr !=
788 IPPROTO_TCP) {
789 netdev_flags &= ~NETIF_F_CSUM_MASK;
790 return iwl_mvm_tx_tso_segment(skb, 1, netdev_flags, mpdus_skb);
791 }
792
793 qc = ieee80211_get_qos_ctl(hdr);
794 tid = *qc & IEEE80211_QOS_CTL_TID_MASK;
795 if (WARN_ON_ONCE(tid >= IWL_MAX_TID_COUNT))
796 return -EINVAL;
797
798
799
800
801
802 if (info->flags & IEEE80211_TX_CTL_AMPDU &&
803 !mvmsta->tid_data[tid].amsdu_in_ampdu_allowed)
804 return iwl_mvm_tx_tso_segment(skb, 1, netdev_flags, mpdus_skb);
805
806 max_amsdu_len = sta->max_amsdu_len;
807
808
809 txf = iwl_mvm_mac_ac_to_tx_fifo(mvm, tid_to_mac80211_ac[tid]);
810
811
812
813
814
815
816
817 max_amsdu_len = min_t(unsigned int, max_amsdu_len,
818 mvm->fwrt.smem_cfg.lmac[0].txfifo_size[txf] -
819 256);
820
821 if (unlikely(dbg_max_amsdu_len))
822 max_amsdu_len = min_t(unsigned int, max_amsdu_len,
823 dbg_max_amsdu_len);
824
825
826
827
828
829
830 if (info->flags & IEEE80211_TX_CTL_AMPDU &&
831 !sta->vht_cap.vht_supported)
832 max_amsdu_len = min_t(unsigned int, max_amsdu_len, 4095);
833
834
835 subf_len = sizeof(struct ethhdr) + snap_ip_tcp + mss;
836 pad = (4 - subf_len) & 0x3;
837
838
839
840
841
842 num_subframes = (max_amsdu_len + pad) / (subf_len + pad);
843 if (num_subframes > 1)
844 *qc |= IEEE80211_QOS_CTL_A_MSDU_PRESENT;
845
846 tcp_payload_len = skb_tail_pointer(skb) - skb_transport_header(skb) -
847 tcp_hdrlen(skb) + skb->data_len;
848
849
850
851
852
853
854
855 num_subframes =
856 min_t(unsigned int, num_subframes,
857 (mvm->trans->max_skb_frags - 1 -
858 skb_shinfo(skb)->nr_frags) / 2);
859
860
861 if (num_subframes * mss >= tcp_payload_len) {
862 __skb_queue_tail(mpdus_skb, skb);
863 return 0;
864 }
865
866
867
868
869
870 return iwl_mvm_tx_tso_segment(skb, num_subframes, netdev_flags,
871 mpdus_skb);
872}
873#else
874static int iwl_mvm_tx_tso(struct iwl_mvm *mvm, struct sk_buff *skb,
875 struct ieee80211_tx_info *info,
876 struct ieee80211_sta *sta,
877 struct sk_buff_head *mpdus_skb)
878{
879
880 WARN_ON(1);
881
882 return -1;
883}
884#endif
885
886static void iwl_mvm_tx_add_stream(struct iwl_mvm *mvm,
887 struct iwl_mvm_sta *mvm_sta, u8 tid,
888 struct sk_buff *skb)
889{
890 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
891 u8 mac_queue = info->hw_queue;
892 struct sk_buff_head *deferred_tx_frames;
893
894 lockdep_assert_held(&mvm_sta->lock);
895
896 mvm_sta->deferred_traffic_tid_map |= BIT(tid);
897 set_bit(mvm_sta->sta_id, mvm->sta_deferred_frames);
898
899 deferred_tx_frames = &mvm_sta->tid_data[tid].deferred_tx_frames;
900
901 skb_queue_tail(deferred_tx_frames, skb);
902
903
904
905
906
907
908 if (skb_queue_len(deferred_tx_frames) == 1) {
909 iwl_mvm_stop_mac_queues(mvm, BIT(mac_queue));
910 schedule_work(&mvm->add_stream_wk);
911 }
912}
913
914
915static bool iwl_mvm_txq_should_update(struct iwl_mvm *mvm, int txq_id)
916{
917 unsigned long queue_tid_bitmap = mvm->queue_info[txq_id].tid_bitmap;
918 unsigned long now = jiffies;
919 int tid;
920
921 if (WARN_ON(iwl_mvm_has_new_tx_api(mvm)))
922 return false;
923
924 for_each_set_bit(tid, &queue_tid_bitmap, IWL_MAX_TID_COUNT + 1) {
925 if (time_before(mvm->queue_info[txq_id].last_frame_time[tid] +
926 IWL_MVM_DQA_QUEUE_TIMEOUT, now))
927 return true;
928 }
929
930 return false;
931}
932
933
934
935
936static int iwl_mvm_tx_mpdu(struct iwl_mvm *mvm, struct sk_buff *skb,
937 struct ieee80211_tx_info *info,
938 struct ieee80211_sta *sta)
939{
940 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
941 struct iwl_mvm_sta *mvmsta;
942 struct iwl_device_cmd *dev_cmd;
943 __le16 fc;
944 u16 seq_number = 0;
945 u8 tid = IWL_MAX_TID_COUNT;
946 u16 txq_id = info->hw_queue;
947 bool is_ampdu = false;
948 int hdrlen;
949
950 mvmsta = iwl_mvm_sta_from_mac80211(sta);
951 fc = hdr->frame_control;
952 hdrlen = ieee80211_hdrlen(fc);
953
954 if (WARN_ON_ONCE(!mvmsta))
955 return -1;
956
957 if (WARN_ON_ONCE(mvmsta->sta_id == IWL_MVM_INVALID_STA))
958 return -1;
959
960 dev_cmd = iwl_mvm_set_tx_params(mvm, skb, info, hdrlen,
961 sta, mvmsta->sta_id);
962 if (!dev_cmd)
963 goto drop;
964
965
966
967
968
969
970 info->flags &= ~IEEE80211_TX_STATUS_EOSP;
971
972 spin_lock(&mvmsta->lock);
973
974
975
976
977
978 if (ieee80211_is_data_qos(fc) && !ieee80211_is_qos_nullfunc(fc)) {
979 u8 *qc = NULL;
980 qc = ieee80211_get_qos_ctl(hdr);
981 tid = qc[0] & IEEE80211_QOS_CTL_TID_MASK;
982 if (WARN_ON_ONCE(tid >= IWL_MAX_TID_COUNT))
983 goto drop_unlock_sta;
984
985 is_ampdu = info->flags & IEEE80211_TX_CTL_AMPDU;
986 if (WARN_ON_ONCE(is_ampdu &&
987 mvmsta->tid_data[tid].state != IWL_AGG_ON))
988 goto drop_unlock_sta;
989
990 seq_number = mvmsta->tid_data[tid].seq_number;
991 seq_number &= IEEE80211_SCTL_SEQ;
992
993 if (!iwl_mvm_has_new_tx_api(mvm)) {
994 struct iwl_tx_cmd *tx_cmd = (void *)dev_cmd->payload;
995
996 hdr->seq_ctrl &= cpu_to_le16(IEEE80211_SCTL_FRAG);
997 hdr->seq_ctrl |= cpu_to_le16(seq_number);
998
999 tx_cmd->hdr->seq_ctrl = hdr->seq_ctrl;
1000 }
1001 }
1002
1003 txq_id = mvmsta->tid_data[tid].txq_id;
1004
1005 WARN_ON_ONCE(info->flags & IEEE80211_TX_CTL_SEND_AFTER_DTIM);
1006
1007
1008 if (unlikely(txq_id == IWL_MVM_INVALID_QUEUE ||
1009 !mvmsta->tid_data[tid].is_tid_active)) {
1010
1011 if (txq_id == IWL_MVM_INVALID_QUEUE) {
1012 iwl_mvm_tx_add_stream(mvm, mvmsta, tid, skb);
1013
1014
1015
1016
1017
1018 iwl_trans_free_tx_cmd(mvm->trans, dev_cmd);
1019 spin_unlock(&mvmsta->lock);
1020 return 0;
1021 }
1022
1023
1024 WARN_ON(iwl_mvm_has_new_tx_api(mvm));
1025
1026
1027 spin_lock(&mvm->queue_info_lock);
1028 mvm->queue_info[txq_id].status = IWL_MVM_QUEUE_READY;
1029 mvmsta->tid_data[tid].is_tid_active = true;
1030 spin_unlock(&mvm->queue_info_lock);
1031
1032 IWL_DEBUG_TX_QUEUES(mvm, "Re-activating queue %d for TX\n",
1033 txq_id);
1034 }
1035
1036 if (!iwl_mvm_has_new_tx_api(mvm)) {
1037
1038 mvm->queue_info[txq_id].last_frame_time[tid] = jiffies;
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050 if (unlikely(mvm->queue_info[txq_id].status ==
1051 IWL_MVM_QUEUE_SHARED &&
1052 iwl_mvm_txq_should_update(mvm, txq_id)))
1053 schedule_work(&mvm->add_stream_wk);
1054 }
1055
1056 IWL_DEBUG_TX(mvm, "TX to [%d|%d] Q:%d - seq: 0x%x\n", mvmsta->sta_id,
1057 tid, txq_id, IEEE80211_SEQ_TO_SN(seq_number));
1058
1059
1060 iwl_mvm_skb_prepare_status(skb, dev_cmd);
1061
1062 if (iwl_trans_tx(mvm->trans, skb, dev_cmd, txq_id))
1063 goto drop_unlock_sta;
1064
1065 if (tid < IWL_MAX_TID_COUNT && !ieee80211_has_morefrags(fc))
1066 mvmsta->tid_data[tid].seq_number = seq_number + 0x10;
1067
1068 spin_unlock(&mvmsta->lock);
1069
1070 return 0;
1071
1072drop_unlock_sta:
1073 iwl_trans_free_tx_cmd(mvm->trans, dev_cmd);
1074 spin_unlock(&mvmsta->lock);
1075drop:
1076 return -1;
1077}
1078
1079int iwl_mvm_tx_skb(struct iwl_mvm *mvm, struct sk_buff *skb,
1080 struct ieee80211_sta *sta)
1081{
1082 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
1083 struct ieee80211_tx_info info;
1084 struct sk_buff_head mpdus_skbs;
1085 unsigned int payload_len;
1086 int ret;
1087
1088 if (WARN_ON_ONCE(!mvmsta))
1089 return -1;
1090
1091 if (WARN_ON_ONCE(mvmsta->sta_id == IWL_MVM_INVALID_STA))
1092 return -1;
1093
1094 memcpy(&info, skb->cb, sizeof(info));
1095
1096 if (!skb_is_gso(skb))
1097 return iwl_mvm_tx_mpdu(mvm, skb, &info, sta);
1098
1099 payload_len = skb_tail_pointer(skb) - skb_transport_header(skb) -
1100 tcp_hdrlen(skb) + skb->data_len;
1101
1102 if (payload_len <= skb_shinfo(skb)->gso_size)
1103 return iwl_mvm_tx_mpdu(mvm, skb, &info, sta);
1104
1105 __skb_queue_head_init(&mpdus_skbs);
1106
1107 ret = iwl_mvm_tx_tso(mvm, skb, &info, sta, &mpdus_skbs);
1108 if (ret)
1109 return ret;
1110
1111 if (WARN_ON(skb_queue_empty(&mpdus_skbs)))
1112 return ret;
1113
1114 while (!skb_queue_empty(&mpdus_skbs)) {
1115 skb = __skb_dequeue(&mpdus_skbs);
1116
1117 ret = iwl_mvm_tx_mpdu(mvm, skb, &info, sta);
1118 if (ret) {
1119 __skb_queue_purge(&mpdus_skbs);
1120 return ret;
1121 }
1122 }
1123
1124 return 0;
1125}
1126
1127static void iwl_mvm_check_ratid_empty(struct iwl_mvm *mvm,
1128 struct ieee80211_sta *sta, u8 tid)
1129{
1130 struct iwl_mvm_sta *mvmsta = iwl_mvm_sta_from_mac80211(sta);
1131 struct iwl_mvm_tid_data *tid_data = &mvmsta->tid_data[tid];
1132 struct ieee80211_vif *vif = mvmsta->vif;
1133 u16 normalized_ssn;
1134
1135 lockdep_assert_held(&mvmsta->lock);
1136
1137 if ((tid_data->state == IWL_AGG_ON ||
1138 tid_data->state == IWL_EMPTYING_HW_QUEUE_DELBA) &&
1139 iwl_mvm_tid_queued(mvm, tid_data) == 0) {
1140
1141
1142
1143
1144
1145 ieee80211_sta_set_buffered(sta, tid, false);
1146 }
1147
1148
1149
1150
1151
1152 normalized_ssn = tid_data->ssn;
1153 if (mvm->trans->cfg->gen2)
1154 normalized_ssn &= 0xff;
1155
1156 if (normalized_ssn != tid_data->next_reclaimed)
1157 return;
1158
1159 switch (tid_data->state) {
1160 case IWL_EMPTYING_HW_QUEUE_ADDBA:
1161 IWL_DEBUG_TX_QUEUES(mvm,
1162 "Can continue addBA flow ssn = next_recl = %d\n",
1163 tid_data->next_reclaimed);
1164 tid_data->state = IWL_AGG_STARTING;
1165 ieee80211_start_tx_ba_cb_irqsafe(vif, sta->addr, tid);
1166 break;
1167
1168 case IWL_EMPTYING_HW_QUEUE_DELBA:
1169 IWL_DEBUG_TX_QUEUES(mvm,
1170 "Can continue DELBA flow ssn = next_recl = %d\n",
1171 tid_data->next_reclaimed);
1172 tid_data->state = IWL_AGG_OFF;
1173 ieee80211_stop_tx_ba_cb_irqsafe(vif, sta->addr, tid);
1174 break;
1175
1176 default:
1177 break;
1178 }
1179}
1180
1181#ifdef CONFIG_IWLWIFI_DEBUG
1182const char *iwl_mvm_get_tx_fail_reason(u32 status)
1183{
1184#define TX_STATUS_FAIL(x) case TX_STATUS_FAIL_ ## x: return #x
1185#define TX_STATUS_POSTPONE(x) case TX_STATUS_POSTPONE_ ## x: return #x
1186
1187 switch (status & TX_STATUS_MSK) {
1188 case TX_STATUS_SUCCESS:
1189 return "SUCCESS";
1190 TX_STATUS_POSTPONE(DELAY);
1191 TX_STATUS_POSTPONE(FEW_BYTES);
1192 TX_STATUS_POSTPONE(BT_PRIO);
1193 TX_STATUS_POSTPONE(QUIET_PERIOD);
1194 TX_STATUS_POSTPONE(CALC_TTAK);
1195 TX_STATUS_FAIL(INTERNAL_CROSSED_RETRY);
1196 TX_STATUS_FAIL(SHORT_LIMIT);
1197 TX_STATUS_FAIL(LONG_LIMIT);
1198 TX_STATUS_FAIL(UNDERRUN);
1199 TX_STATUS_FAIL(DRAIN_FLOW);
1200 TX_STATUS_FAIL(RFKILL_FLUSH);
1201 TX_STATUS_FAIL(LIFE_EXPIRE);
1202 TX_STATUS_FAIL(DEST_PS);
1203 TX_STATUS_FAIL(HOST_ABORTED);
1204 TX_STATUS_FAIL(BT_RETRY);
1205 TX_STATUS_FAIL(STA_INVALID);
1206 TX_STATUS_FAIL(FRAG_DROPPED);
1207 TX_STATUS_FAIL(TID_DISABLE);
1208 TX_STATUS_FAIL(FIFO_FLUSHED);
1209 TX_STATUS_FAIL(SMALL_CF_POLL);
1210 TX_STATUS_FAIL(FW_DROP);
1211 TX_STATUS_FAIL(STA_COLOR_MISMATCH);
1212 }
1213
1214 return "UNKNOWN";
1215
1216#undef TX_STATUS_FAIL
1217#undef TX_STATUS_POSTPONE
1218}
1219#endif
1220
1221void iwl_mvm_hwrate_to_tx_rate(u32 rate_n_flags,
1222 enum nl80211_band band,
1223 struct ieee80211_tx_rate *r)
1224{
1225 if (rate_n_flags & RATE_HT_MCS_GF_MSK)
1226 r->flags |= IEEE80211_TX_RC_GREEN_FIELD;
1227 switch (rate_n_flags & RATE_MCS_CHAN_WIDTH_MSK) {
1228 case RATE_MCS_CHAN_WIDTH_20:
1229 break;
1230 case RATE_MCS_CHAN_WIDTH_40:
1231 r->flags |= IEEE80211_TX_RC_40_MHZ_WIDTH;
1232 break;
1233 case RATE_MCS_CHAN_WIDTH_80:
1234 r->flags |= IEEE80211_TX_RC_80_MHZ_WIDTH;
1235 break;
1236 case RATE_MCS_CHAN_WIDTH_160:
1237 r->flags |= IEEE80211_TX_RC_160_MHZ_WIDTH;
1238 break;
1239 }
1240 if (rate_n_flags & RATE_MCS_SGI_MSK)
1241 r->flags |= IEEE80211_TX_RC_SHORT_GI;
1242 if (rate_n_flags & RATE_MCS_HT_MSK) {
1243 r->flags |= IEEE80211_TX_RC_MCS;
1244 r->idx = rate_n_flags & RATE_HT_MCS_INDEX_MSK;
1245 } else if (rate_n_flags & RATE_MCS_VHT_MSK) {
1246 ieee80211_rate_set_vht(
1247 r, rate_n_flags & RATE_VHT_MCS_RATE_CODE_MSK,
1248 ((rate_n_flags & RATE_VHT_MCS_NSS_MSK) >>
1249 RATE_VHT_MCS_NSS_POS) + 1);
1250 r->flags |= IEEE80211_TX_RC_VHT_MCS;
1251 } else {
1252 r->idx = iwl_mvm_legacy_rate_to_mac80211_idx(rate_n_flags,
1253 band);
1254 }
1255}
1256
1257
1258
1259
1260static void iwl_mvm_hwrate_to_tx_status(u32 rate_n_flags,
1261 struct ieee80211_tx_info *info)
1262{
1263 struct ieee80211_tx_rate *r = &info->status.rates[0];
1264
1265 info->status.antenna =
1266 ((rate_n_flags & RATE_MCS_ANT_ABC_MSK) >> RATE_MCS_ANT_POS);
1267 iwl_mvm_hwrate_to_tx_rate(rate_n_flags, info->band, r);
1268}
1269
1270static void iwl_mvm_tx_status_check_trigger(struct iwl_mvm *mvm,
1271 u32 status)
1272{
1273 struct iwl_fw_dbg_trigger_tlv *trig;
1274 struct iwl_fw_dbg_trigger_tx_status *status_trig;
1275 int i;
1276
1277 if (!iwl_fw_dbg_trigger_enabled(mvm->fw, FW_DBG_TRIGGER_TX_STATUS))
1278 return;
1279
1280 trig = iwl_fw_dbg_get_trigger(mvm->fw, FW_DBG_TRIGGER_TX_STATUS);
1281 status_trig = (void *)trig->data;
1282
1283 if (!iwl_fw_dbg_trigger_check_stop(&mvm->fwrt, NULL, trig))
1284 return;
1285
1286 for (i = 0; i < ARRAY_SIZE(status_trig->statuses); i++) {
1287
1288 if (!status_trig->statuses[i].status)
1289 break;
1290
1291 if (status_trig->statuses[i].status != (status & TX_STATUS_MSK))
1292 continue;
1293
1294 iwl_fw_dbg_collect_trig(&mvm->fwrt, trig,
1295 "Tx status %d was received",
1296 status & TX_STATUS_MSK);
1297 break;
1298 }
1299}
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314static inline u32 iwl_mvm_get_scd_ssn(struct iwl_mvm *mvm,
1315 struct iwl_mvm_tx_resp *tx_resp)
1316{
1317 return le32_to_cpup((__le32 *)iwl_mvm_get_agg_status(mvm, tx_resp) +
1318 tx_resp->frame_count) & 0xfff;
1319}
1320
1321static void iwl_mvm_rx_tx_cmd_single(struct iwl_mvm *mvm,
1322 struct iwl_rx_packet *pkt)
1323{
1324 struct ieee80211_sta *sta;
1325 u16 sequence = le16_to_cpu(pkt->hdr.sequence);
1326 int txq_id = SEQ_TO_QUEUE(sequence);
1327
1328 struct iwl_mvm_tx_resp *tx_resp = (void *)pkt->data;
1329 int sta_id = IWL_MVM_TX_RES_GET_RA(tx_resp->ra_tid);
1330 int tid = IWL_MVM_TX_RES_GET_TID(tx_resp->ra_tid);
1331 struct agg_tx_status *agg_status =
1332 iwl_mvm_get_agg_status(mvm, tx_resp);
1333 u32 status = le16_to_cpu(agg_status->status);
1334 u16 ssn = iwl_mvm_get_scd_ssn(mvm, tx_resp);
1335 struct iwl_mvm_sta *mvmsta;
1336 struct sk_buff_head skbs;
1337 u8 skb_freed = 0;
1338 u8 lq_color;
1339 u16 next_reclaimed, seq_ctl;
1340 bool is_ndp = false;
1341
1342 __skb_queue_head_init(&skbs);
1343
1344 if (iwl_mvm_has_new_tx_api(mvm))
1345 txq_id = le16_to_cpu(tx_resp->tx_queue);
1346
1347 seq_ctl = le16_to_cpu(tx_resp->seq_ctl);
1348
1349
1350 iwl_trans_reclaim(mvm->trans, txq_id, ssn, &skbs);
1351
1352 while (!skb_queue_empty(&skbs)) {
1353 struct sk_buff *skb = __skb_dequeue(&skbs);
1354 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
1355 bool flushed = false;
1356
1357 skb_freed++;
1358
1359 iwl_trans_free_tx_cmd(mvm->trans, info->driver_data[1]);
1360
1361 memset(&info->status, 0, sizeof(info->status));
1362
1363
1364 switch (status & TX_STATUS_MSK) {
1365 case TX_STATUS_SUCCESS:
1366 case TX_STATUS_DIRECT_DONE:
1367 info->flags |= IEEE80211_TX_STAT_ACK;
1368 break;
1369 case TX_STATUS_FAIL_FIFO_FLUSHED:
1370 case TX_STATUS_FAIL_DRAIN_FLOW:
1371 flushed = true;
1372 break;
1373 case TX_STATUS_FAIL_DEST_PS:
1374
1375
1376
1377 WARN_ON(1);
1378 info->flags |= IEEE80211_TX_STAT_TX_FILTERED;
1379 break;
1380 default:
1381 break;
1382 }
1383
1384 iwl_mvm_tx_status_check_trigger(mvm, status);
1385
1386 info->status.rates[0].count = tx_resp->failure_frame + 1;
1387 iwl_mvm_hwrate_to_tx_status(le32_to_cpu(tx_resp->initial_rate),
1388 info);
1389 info->status.status_driver_data[1] =
1390 (void *)(uintptr_t)le32_to_cpu(tx_resp->initial_rate);
1391
1392
1393 if (info->flags & IEEE80211_TX_CTL_AMPDU &&
1394 !(info->flags & IEEE80211_TX_STAT_ACK) &&
1395 !(info->flags & IEEE80211_TX_STAT_TX_FILTERED) && !flushed)
1396 info->flags |= IEEE80211_TX_STAT_AMPDU_NO_BACK;
1397 info->flags &= ~IEEE80211_TX_CTL_AMPDU;
1398
1399
1400 if (status != TX_STATUS_SUCCESS) {
1401 struct ieee80211_hdr *hdr = (void *)skb->data;
1402 seq_ctl = le16_to_cpu(hdr->seq_ctrl);
1403 }
1404
1405 if (unlikely(!seq_ctl)) {
1406 struct ieee80211_hdr *hdr = (void *)skb->data;
1407
1408
1409
1410
1411
1412
1413
1414
1415 if (ieee80211_is_qos_nullfunc(hdr->frame_control))
1416 is_ndp = true;
1417 }
1418
1419
1420
1421
1422
1423 info->status.tx_time =
1424 le16_to_cpu(tx_resp->wireless_media_time);
1425 BUILD_BUG_ON(ARRAY_SIZE(info->status.status_driver_data) < 1);
1426 lq_color = TX_RES_RATE_TABLE_COL_GET(tx_resp->tlc_info);
1427 info->status.status_driver_data[0] =
1428 RS_DRV_DATA_PACK(lq_color, tx_resp->reduced_tpc);
1429
1430 ieee80211_tx_status(mvm->hw, skb);
1431 }
1432
1433
1434
1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447 next_reclaimed = ssn;
1448
1449 IWL_DEBUG_TX_REPLY(mvm,
1450 "TXQ %d status %s (0x%08x)\n",
1451 txq_id, iwl_mvm_get_tx_fail_reason(status), status);
1452
1453 IWL_DEBUG_TX_REPLY(mvm,
1454 "\t\t\t\tinitial_rate 0x%x retries %d, idx=%d ssn=%d next_reclaimed=0x%x seq_ctl=0x%x\n",
1455 le32_to_cpu(tx_resp->initial_rate),
1456 tx_resp->failure_frame, SEQ_TO_INDEX(sequence),
1457 ssn, next_reclaimed, seq_ctl);
1458
1459 rcu_read_lock();
1460
1461 sta = rcu_dereference(mvm->fw_id_to_mac_id[sta_id]);
1462
1463
1464
1465
1466 if (WARN_ON_ONCE(!sta))
1467 goto out;
1468
1469 if (!IS_ERR(sta)) {
1470 mvmsta = iwl_mvm_sta_from_mac80211(sta);
1471
1472 if (tid != IWL_TID_NON_QOS && tid != IWL_MGMT_TID) {
1473 struct iwl_mvm_tid_data *tid_data =
1474 &mvmsta->tid_data[tid];
1475 bool send_eosp_ndp = false;
1476
1477 spin_lock_bh(&mvmsta->lock);
1478
1479 if (!is_ndp) {
1480 tid_data->next_reclaimed = next_reclaimed;
1481 IWL_DEBUG_TX_REPLY(mvm,
1482 "Next reclaimed packet:%d\n",
1483 next_reclaimed);
1484 } else {
1485 IWL_DEBUG_TX_REPLY(mvm,
1486 "NDP - don't update next_reclaimed\n");
1487 }
1488
1489 iwl_mvm_check_ratid_empty(mvm, sta, tid);
1490
1491 if (mvmsta->sleep_tx_count) {
1492 mvmsta->sleep_tx_count--;
1493 if (mvmsta->sleep_tx_count &&
1494 !iwl_mvm_tid_queued(mvm, tid_data)) {
1495
1496
1497
1498
1499
1500
1501
1502
1503
1504
1505
1506
1507
1508 send_eosp_ndp = true;
1509 }
1510 }
1511
1512 spin_unlock_bh(&mvmsta->lock);
1513 if (send_eosp_ndp) {
1514 iwl_mvm_sta_modify_sleep_tx_count(mvm, sta,
1515 IEEE80211_FRAME_RELEASE_UAPSD,
1516 1, tid, false, false);
1517 mvmsta->sleep_tx_count = 0;
1518 ieee80211_send_eosp_nullfunc(sta, tid);
1519 }
1520 }
1521
1522 if (mvmsta->next_status_eosp) {
1523 mvmsta->next_status_eosp = false;
1524 ieee80211_sta_eosp(sta);
1525 }
1526 } else {
1527 mvmsta = NULL;
1528 }
1529
1530out:
1531 rcu_read_unlock();
1532}
1533
1534#ifdef CONFIG_IWLWIFI_DEBUG
1535#define AGG_TX_STATE_(x) case AGG_TX_STATE_ ## x: return #x
1536static const char *iwl_get_agg_tx_status(u16 status)
1537{
1538 switch (status & AGG_TX_STATE_STATUS_MSK) {
1539 AGG_TX_STATE_(TRANSMITTED);
1540 AGG_TX_STATE_(UNDERRUN);
1541 AGG_TX_STATE_(BT_PRIO);
1542 AGG_TX_STATE_(FEW_BYTES);
1543 AGG_TX_STATE_(ABORT);
1544 AGG_TX_STATE_(TX_ON_AIR_DROP);
1545 AGG_TX_STATE_(LAST_SENT_TRY_CNT);
1546 AGG_TX_STATE_(LAST_SENT_BT_KILL);
1547 AGG_TX_STATE_(SCD_QUERY);
1548 AGG_TX_STATE_(TEST_BAD_CRC32);
1549 AGG_TX_STATE_(RESPONSE);
1550 AGG_TX_STATE_(DUMP_TX);
1551 AGG_TX_STATE_(DELAY_TX);
1552 }
1553
1554 return "UNKNOWN";
1555}
1556
1557static void iwl_mvm_rx_tx_cmd_agg_dbg(struct iwl_mvm *mvm,
1558 struct iwl_rx_packet *pkt)
1559{
1560 struct iwl_mvm_tx_resp *tx_resp = (void *)pkt->data;
1561 struct agg_tx_status *frame_status =
1562 iwl_mvm_get_agg_status(mvm, tx_resp);
1563 int i;
1564
1565 for (i = 0; i < tx_resp->frame_count; i++) {
1566 u16 fstatus = le16_to_cpu(frame_status[i].status);
1567
1568 IWL_DEBUG_TX_REPLY(mvm,
1569 "status %s (0x%04x), try-count (%d) seq (0x%x)\n",
1570 iwl_get_agg_tx_status(fstatus),
1571 fstatus & AGG_TX_STATE_STATUS_MSK,
1572 (fstatus & AGG_TX_STATE_TRY_CNT_MSK) >>
1573 AGG_TX_STATE_TRY_CNT_POS,
1574 le16_to_cpu(frame_status[i].sequence));
1575 }
1576}
1577#else
1578static void iwl_mvm_rx_tx_cmd_agg_dbg(struct iwl_mvm *mvm,
1579 struct iwl_rx_packet *pkt)
1580{}
1581#endif
1582
1583static void iwl_mvm_rx_tx_cmd_agg(struct iwl_mvm *mvm,
1584 struct iwl_rx_packet *pkt)
1585{
1586 struct iwl_mvm_tx_resp *tx_resp = (void *)pkt->data;
1587 int sta_id = IWL_MVM_TX_RES_GET_RA(tx_resp->ra_tid);
1588 int tid = IWL_MVM_TX_RES_GET_TID(tx_resp->ra_tid);
1589 u16 sequence = le16_to_cpu(pkt->hdr.sequence);
1590 struct iwl_mvm_sta *mvmsta;
1591 int queue = SEQ_TO_QUEUE(sequence);
1592
1593 if (WARN_ON_ONCE(queue < IWL_MVM_DQA_MIN_DATA_QUEUE &&
1594 (queue != IWL_MVM_DQA_BSS_CLIENT_QUEUE)))
1595 return;
1596
1597 if (WARN_ON_ONCE(tid == IWL_TID_NON_QOS))
1598 return;
1599
1600 iwl_mvm_rx_tx_cmd_agg_dbg(mvm, pkt);
1601
1602 rcu_read_lock();
1603
1604 mvmsta = iwl_mvm_sta_from_staid_rcu(mvm, sta_id);
1605
1606 if (!WARN_ON_ONCE(!mvmsta)) {
1607 mvmsta->tid_data[tid].rate_n_flags =
1608 le32_to_cpu(tx_resp->initial_rate);
1609 mvmsta->tid_data[tid].tx_time =
1610 le16_to_cpu(tx_resp->wireless_media_time);
1611 mvmsta->tid_data[tid].lq_color =
1612 TX_RES_RATE_TABLE_COL_GET(tx_resp->tlc_info);
1613 }
1614
1615 rcu_read_unlock();
1616}
1617
1618void iwl_mvm_rx_tx_cmd(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb)
1619{
1620 struct iwl_rx_packet *pkt = rxb_addr(rxb);
1621 struct iwl_mvm_tx_resp *tx_resp = (void *)pkt->data;
1622
1623 if (tx_resp->frame_count == 1)
1624 iwl_mvm_rx_tx_cmd_single(mvm, pkt);
1625 else
1626 iwl_mvm_rx_tx_cmd_agg(mvm, pkt);
1627}
1628
1629static void iwl_mvm_tx_reclaim(struct iwl_mvm *mvm, int sta_id, int tid,
1630 int txq, int index,
1631 struct ieee80211_tx_info *ba_info, u32 rate)
1632{
1633 struct sk_buff_head reclaimed_skbs;
1634 struct iwl_mvm_tid_data *tid_data;
1635 struct ieee80211_sta *sta;
1636 struct iwl_mvm_sta *mvmsta;
1637 struct sk_buff *skb;
1638 int freed;
1639
1640 if (WARN_ONCE(sta_id >= IWL_MVM_STATION_COUNT ||
1641 tid > IWL_MAX_TID_COUNT,
1642 "sta_id %d tid %d", sta_id, tid))
1643 return;
1644
1645 rcu_read_lock();
1646
1647 sta = rcu_dereference(mvm->fw_id_to_mac_id[sta_id]);
1648
1649
1650 if (WARN_ON_ONCE(IS_ERR_OR_NULL(sta))) {
1651 rcu_read_unlock();
1652 return;
1653 }
1654
1655 mvmsta = iwl_mvm_sta_from_mac80211(sta);
1656 tid_data = &mvmsta->tid_data[tid];
1657
1658 if (tid_data->txq_id != txq) {
1659 IWL_ERR(mvm,
1660 "invalid BA notification: Q %d, tid %d\n",
1661 tid_data->txq_id, tid);
1662 rcu_read_unlock();
1663 return;
1664 }
1665
1666 spin_lock_bh(&mvmsta->lock);
1667
1668 __skb_queue_head_init(&reclaimed_skbs);
1669
1670
1671
1672
1673
1674
1675 iwl_trans_reclaim(mvm->trans, txq, index, &reclaimed_skbs);
1676
1677 tid_data->next_reclaimed = index;
1678
1679 iwl_mvm_check_ratid_empty(mvm, sta, tid);
1680
1681 freed = 0;
1682
1683
1684 ba_info->status.status_driver_data[0] =
1685 RS_DRV_DATA_PACK(tid_data->lq_color,
1686 ba_info->status.status_driver_data[0]);
1687 ba_info->status.status_driver_data[1] = (void *)(uintptr_t)rate;
1688
1689 skb_queue_walk(&reclaimed_skbs, skb) {
1690 struct ieee80211_hdr *hdr = (void *)skb->data;
1691 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
1692
1693 if (ieee80211_is_data_qos(hdr->frame_control))
1694 freed++;
1695 else
1696 WARN_ON_ONCE(tid != IWL_MAX_TID_COUNT);
1697
1698 iwl_trans_free_tx_cmd(mvm->trans, info->driver_data[1]);
1699
1700 memset(&info->status, 0, sizeof(info->status));
1701
1702
1703
1704
1705 info->flags |= IEEE80211_TX_STAT_ACK;
1706
1707
1708
1709 if (freed == 1) {
1710 info->flags |= IEEE80211_TX_STAT_AMPDU;
1711 memcpy(&info->status, &ba_info->status,
1712 sizeof(ba_info->status));
1713 iwl_mvm_hwrate_to_tx_status(rate, info);
1714 }
1715 }
1716
1717 spin_unlock_bh(&mvmsta->lock);
1718
1719
1720
1721
1722
1723 if (skb_queue_empty(&reclaimed_skbs)) {
1724 struct ieee80211_chanctx_conf *chanctx_conf = NULL;
1725
1726 if (mvmsta->vif)
1727 chanctx_conf =
1728 rcu_dereference(mvmsta->vif->chanctx_conf);
1729
1730 if (WARN_ON_ONCE(!chanctx_conf))
1731 goto out;
1732
1733 ba_info->band = chanctx_conf->def.chan->band;
1734 iwl_mvm_hwrate_to_tx_status(rate, ba_info);
1735
1736 if (!iwl_mvm_has_tlc_offload(mvm)) {
1737 IWL_DEBUG_TX_REPLY(mvm,
1738 "No reclaim. Update rs directly\n");
1739 iwl_mvm_rs_tx_status(mvm, sta, tid, ba_info, false);
1740 }
1741 }
1742
1743out:
1744 rcu_read_unlock();
1745
1746 while (!skb_queue_empty(&reclaimed_skbs)) {
1747 skb = __skb_dequeue(&reclaimed_skbs);
1748 ieee80211_tx_status(mvm->hw, skb);
1749 }
1750}
1751
1752void iwl_mvm_rx_ba_notif(struct iwl_mvm *mvm, struct iwl_rx_cmd_buffer *rxb)
1753{
1754 struct iwl_rx_packet *pkt = rxb_addr(rxb);
1755 int sta_id, tid, txq, index;
1756 struct ieee80211_tx_info ba_info = {};
1757 struct iwl_mvm_ba_notif *ba_notif;
1758 struct iwl_mvm_tid_data *tid_data;
1759 struct iwl_mvm_sta *mvmsta;
1760
1761 ba_info.flags = IEEE80211_TX_STAT_AMPDU;
1762
1763 if (iwl_mvm_has_new_tx_api(mvm)) {
1764 struct iwl_mvm_compressed_ba_notif *ba_res =
1765 (void *)pkt->data;
1766 u8 lq_color = TX_RES_RATE_TABLE_COL_GET(ba_res->tlc_rate_info);
1767 int i;
1768
1769 sta_id = ba_res->sta_id;
1770 ba_info.status.ampdu_ack_len = (u8)le16_to_cpu(ba_res->done);
1771 ba_info.status.ampdu_len = (u8)le16_to_cpu(ba_res->txed);
1772 ba_info.status.tx_time =
1773 (u16)le32_to_cpu(ba_res->wireless_time);
1774 ba_info.status.status_driver_data[0] =
1775 (void *)(uintptr_t)ba_res->reduced_txp;
1776
1777 if (!le16_to_cpu(ba_res->tfd_cnt))
1778 goto out;
1779
1780 rcu_read_lock();
1781
1782 mvmsta = iwl_mvm_sta_from_staid_rcu(mvm, sta_id);
1783 if (!mvmsta)
1784 goto out_unlock;
1785
1786
1787 for (i = 0; i < le16_to_cpu(ba_res->tfd_cnt); i++) {
1788 struct iwl_mvm_compressed_ba_tfd *ba_tfd =
1789 &ba_res->tfd[i];
1790
1791 tid = ba_tfd->tid;
1792 if (tid == IWL_MGMT_TID)
1793 tid = IWL_MAX_TID_COUNT;
1794
1795 mvmsta->tid_data[i].lq_color = lq_color;
1796 iwl_mvm_tx_reclaim(mvm, sta_id, tid,
1797 (int)(le16_to_cpu(ba_tfd->q_num)),
1798 le16_to_cpu(ba_tfd->tfd_index),
1799 &ba_info,
1800 le32_to_cpu(ba_res->tx_rate));
1801 }
1802
1803out_unlock:
1804 rcu_read_unlock();
1805out:
1806 IWL_DEBUG_TX_REPLY(mvm,
1807 "BA_NOTIFICATION Received from sta_id = %d, flags %x, sent:%d, acked:%d\n",
1808 sta_id, le32_to_cpu(ba_res->flags),
1809 le16_to_cpu(ba_res->txed),
1810 le16_to_cpu(ba_res->done));
1811 return;
1812 }
1813
1814 ba_notif = (void *)pkt->data;
1815 sta_id = ba_notif->sta_id;
1816 tid = ba_notif->tid;
1817
1818 txq = le16_to_cpu(ba_notif->scd_flow);
1819
1820
1821 index = le16_to_cpu(ba_notif->scd_ssn);
1822
1823 rcu_read_lock();
1824 mvmsta = iwl_mvm_sta_from_staid_rcu(mvm, sta_id);
1825 if (WARN_ON_ONCE(!mvmsta)) {
1826 rcu_read_unlock();
1827 return;
1828 }
1829
1830 tid_data = &mvmsta->tid_data[tid];
1831
1832 ba_info.status.ampdu_ack_len = ba_notif->txed_2_done;
1833 ba_info.status.ampdu_len = ba_notif->txed;
1834 ba_info.status.tx_time = tid_data->tx_time;
1835 ba_info.status.status_driver_data[0] =
1836 (void *)(uintptr_t)ba_notif->reduced_txp;
1837
1838 rcu_read_unlock();
1839
1840 iwl_mvm_tx_reclaim(mvm, sta_id, tid, txq, index, &ba_info,
1841 tid_data->rate_n_flags);
1842
1843 IWL_DEBUG_TX_REPLY(mvm,
1844 "BA_NOTIFICATION Received from %pM, sta_id = %d\n",
1845 ba_notif->sta_addr, ba_notif->sta_id);
1846
1847 IWL_DEBUG_TX_REPLY(mvm,
1848 "TID = %d, SeqCtl = %d, bitmap = 0x%llx, scd_flow = %d, scd_ssn = %d sent:%d, acked:%d\n",
1849 ba_notif->tid, le16_to_cpu(ba_notif->seq_ctl),
1850 le64_to_cpu(ba_notif->bitmap), txq, index,
1851 ba_notif->txed, ba_notif->txed_2_done);
1852
1853 IWL_DEBUG_TX_REPLY(mvm, "reduced txp from ba notif %d\n",
1854 ba_notif->reduced_txp);
1855}
1856
1857
1858
1859
1860
1861
1862
1863
1864
1865int iwl_mvm_flush_tx_path(struct iwl_mvm *mvm, u32 tfd_msk, u32 flags)
1866{
1867 int ret;
1868 struct iwl_tx_path_flush_cmd_v1 flush_cmd = {
1869 .queues_ctl = cpu_to_le32(tfd_msk),
1870 .flush_ctl = cpu_to_le16(DUMP_TX_FIFO_FLUSH),
1871 };
1872
1873 WARN_ON(iwl_mvm_has_new_tx_api(mvm));
1874
1875 ret = iwl_mvm_send_cmd_pdu(mvm, TXPATH_FLUSH, flags,
1876 sizeof(flush_cmd), &flush_cmd);
1877 if (ret)
1878 IWL_ERR(mvm, "Failed to send flush command (%d)\n", ret);
1879 return ret;
1880}
1881
1882int iwl_mvm_flush_sta_tids(struct iwl_mvm *mvm, u32 sta_id,
1883 u16 tids, u32 flags)
1884{
1885 int ret;
1886 struct iwl_tx_path_flush_cmd flush_cmd = {
1887 .sta_id = cpu_to_le32(sta_id),
1888 .tid_mask = cpu_to_le16(tids),
1889 };
1890
1891 WARN_ON(!iwl_mvm_has_new_tx_api(mvm));
1892
1893 ret = iwl_mvm_send_cmd_pdu(mvm, TXPATH_FLUSH, flags,
1894 sizeof(flush_cmd), &flush_cmd);
1895 if (ret)
1896 IWL_ERR(mvm, "Failed to send flush command (%d)\n", ret);
1897 return ret;
1898}
1899
1900int iwl_mvm_flush_sta(struct iwl_mvm *mvm, void *sta, bool internal, u32 flags)
1901{
1902 struct iwl_mvm_int_sta *int_sta = sta;
1903 struct iwl_mvm_sta *mvm_sta = sta;
1904
1905 BUILD_BUG_ON(offsetof(struct iwl_mvm_int_sta, sta_id) !=
1906 offsetof(struct iwl_mvm_sta, sta_id));
1907
1908 if (iwl_mvm_has_new_tx_api(mvm))
1909 return iwl_mvm_flush_sta_tids(mvm, mvm_sta->sta_id,
1910 0xff | BIT(IWL_MGMT_TID), flags);
1911
1912 if (internal)
1913 return iwl_mvm_flush_tx_path(mvm, int_sta->tfd_queue_msk,
1914 flags);
1915
1916 return iwl_mvm_flush_tx_path(mvm, mvm_sta->tfd_queue_msk, flags);
1917}
1918