mt76: fix use-after-free by removing a non-RCU wcid pointer
[linux-2.6-microblaze.git] / drivers / net / wireless / mediatek / mt76 / mt7615 / main.c
1 // SPDX-License-Identifier: ISC
2 /* Copyright (C) 2019 MediaTek Inc.
3  *
4  * Author: Roy Luo <royluo@google.com>
5  *         Ryder Lee <ryder.lee@mediatek.com>
6  *         Felix Fietkau <nbd@nbd.name>
7  *         Lorenzo Bianconi <lorenzo@kernel.org>
8  */
9
10 #include <linux/etherdevice.h>
11 #include <linux/module.h>
12 #include "mt7615.h"
13 #include "mcu.h"
14
15 static bool mt7615_dev_running(struct mt7615_dev *dev)
16 {
17         struct mt7615_phy *phy;
18
19         if (test_bit(MT76_STATE_RUNNING, &dev->mphy.state))
20                 return true;
21
22         phy = mt7615_ext_phy(dev);
23
24         return phy && test_bit(MT76_STATE_RUNNING, &phy->mt76->state);
25 }
26
27 static int mt7615_start(struct ieee80211_hw *hw)
28 {
29         struct mt7615_dev *dev = mt7615_hw_dev(hw);
30         struct mt7615_phy *phy = mt7615_hw_phy(hw);
31         unsigned long timeout;
32         bool running;
33         int ret;
34
35         if (!mt7615_wait_for_mcu_init(dev))
36                 return -EIO;
37
38         mt7615_mutex_acquire(dev);
39
40         running = mt7615_dev_running(dev);
41
42         if (!running) {
43                 ret = mt7615_mcu_set_pm(dev, 0, 0);
44                 if (ret)
45                         goto out;
46
47                 ret = mt76_connac_mcu_set_mac_enable(&dev->mt76, 0, true, false);
48                 if (ret)
49                         goto out;
50
51                 mt7615_mac_enable_nf(dev, 0);
52         }
53
54         if (phy != &dev->phy) {
55                 ret = mt7615_mcu_set_pm(dev, 1, 0);
56                 if (ret)
57                         goto out;
58
59                 ret = mt76_connac_mcu_set_mac_enable(&dev->mt76, 1, true, false);
60                 if (ret)
61                         goto out;
62
63                 mt7615_mac_enable_nf(dev, 1);
64         }
65
66         if (mt7615_firmware_offload(dev)) {
67                 ret = mt76_connac_mcu_set_channel_domain(phy->mt76);
68                 if (ret)
69                         goto out;
70
71                 ret = mt76_connac_mcu_set_rate_txpower(phy->mt76);
72                 if (ret)
73                         goto out;
74         }
75
76         ret = mt7615_mcu_set_chan_info(phy, MCU_EXT_CMD(SET_RX_PATH));
77         if (ret)
78                 goto out;
79
80         set_bit(MT76_STATE_RUNNING, &phy->mt76->state);
81
82         timeout = mt7615_get_macwork_timeout(dev);
83         ieee80211_queue_delayed_work(hw, &phy->mt76->mac_work, timeout);
84
85         if (!running)
86                 mt7615_mac_reset_counters(dev);
87
88 out:
89         mt7615_mutex_release(dev);
90
91         return ret;
92 }
93
94 static void mt7615_stop(struct ieee80211_hw *hw)
95 {
96         struct mt7615_dev *dev = mt7615_hw_dev(hw);
97         struct mt7615_phy *phy = mt7615_hw_phy(hw);
98
99         cancel_delayed_work_sync(&phy->mt76->mac_work);
100         del_timer_sync(&phy->roc_timer);
101         cancel_work_sync(&phy->roc_work);
102
103         cancel_delayed_work_sync(&dev->pm.ps_work);
104         cancel_work_sync(&dev->pm.wake_work);
105
106         mt76_connac_free_pending_tx_skbs(&dev->pm, NULL);
107
108         mt7615_mutex_acquire(dev);
109
110         mt76_testmode_reset(phy->mt76, true);
111
112         clear_bit(MT76_STATE_RUNNING, &phy->mt76->state);
113         cancel_delayed_work_sync(&phy->scan_work);
114
115         if (phy != &dev->phy) {
116                 mt7615_mcu_set_pm(dev, 1, 1);
117                 mt76_connac_mcu_set_mac_enable(&dev->mt76, 1, false, false);
118         }
119
120         if (!mt7615_dev_running(dev)) {
121                 mt7615_mcu_set_pm(dev, 0, 1);
122                 mt76_connac_mcu_set_mac_enable(&dev->mt76, 0, false, false);
123         }
124
125         mt7615_mutex_release(dev);
126 }
127
128 static inline int get_free_idx(u32 mask, u8 start, u8 end)
129 {
130         return ffs(~mask & GENMASK(end, start));
131 }
132
133 static int get_omac_idx(enum nl80211_iftype type, u64 mask)
134 {
135         int i;
136
137         switch (type) {
138         case NL80211_IFTYPE_STATION:
139                 /* prefer hw bssid slot 1-3 */
140                 i = get_free_idx(mask, HW_BSSID_1, HW_BSSID_3);
141                 if (i)
142                         return i - 1;
143
144                 /* next, try to find a free repeater entry for the sta */
145                 i = get_free_idx(mask >> REPEATER_BSSID_START, 0,
146                                  REPEATER_BSSID_MAX - REPEATER_BSSID_START);
147                 if (i)
148                         return i + 32 - 1;
149
150                 i = get_free_idx(mask, EXT_BSSID_1, EXT_BSSID_MAX);
151                 if (i)
152                         return i - 1;
153
154                 if (~mask & BIT(HW_BSSID_0))
155                         return HW_BSSID_0;
156
157                 break;
158         case NL80211_IFTYPE_ADHOC:
159         case NL80211_IFTYPE_MESH_POINT:
160         case NL80211_IFTYPE_MONITOR:
161         case NL80211_IFTYPE_AP:
162                 /* ap uses hw bssid 0 and ext bssid */
163                 if (~mask & BIT(HW_BSSID_0))
164                         return HW_BSSID_0;
165
166                 i = get_free_idx(mask, EXT_BSSID_1, EXT_BSSID_MAX);
167                 if (i)
168                         return i - 1;
169
170                 break;
171         default:
172                 WARN_ON(1);
173                 break;
174         }
175
176         return -1;
177 }
178
179 static int mt7615_add_interface(struct ieee80211_hw *hw,
180                                 struct ieee80211_vif *vif)
181 {
182         struct mt7615_vif *mvif = (struct mt7615_vif *)vif->drv_priv;
183         struct mt7615_dev *dev = mt7615_hw_dev(hw);
184         struct mt7615_phy *phy = mt7615_hw_phy(hw);
185         struct mt76_txq *mtxq;
186         bool ext_phy = phy != &dev->phy;
187         int idx, ret = 0;
188
189         mt7615_mutex_acquire(dev);
190
191         mt76_testmode_reset(phy->mt76, true);
192
193         if (vif->type == NL80211_IFTYPE_MONITOR &&
194             is_zero_ether_addr(vif->addr))
195                 phy->monitor_vif = vif;
196
197         mvif->mt76.idx = ffs(~dev->mt76.vif_mask) - 1;
198         if (mvif->mt76.idx >= MT7615_MAX_INTERFACES) {
199                 ret = -ENOSPC;
200                 goto out;
201         }
202
203         idx = get_omac_idx(vif->type, dev->omac_mask);
204         if (idx < 0) {
205                 ret = -ENOSPC;
206                 goto out;
207         }
208         mvif->mt76.omac_idx = idx;
209
210         mvif->mt76.band_idx = ext_phy;
211         mvif->mt76.wmm_idx = vif->type != NL80211_IFTYPE_AP;
212         if (ext_phy)
213                 mvif->mt76.wmm_idx += 2;
214
215         dev->mt76.vif_mask |= BIT(mvif->mt76.idx);
216         dev->omac_mask |= BIT_ULL(mvif->mt76.omac_idx);
217         phy->omac_mask |= BIT_ULL(mvif->mt76.omac_idx);
218
219         ret = mt7615_mcu_set_dbdc(dev);
220         if (ret)
221                 goto out;
222
223         idx = MT7615_WTBL_RESERVED - mvif->mt76.idx;
224
225         INIT_LIST_HEAD(&mvif->sta.poll_list);
226         mvif->sta.wcid.idx = idx;
227         mvif->sta.wcid.ext_phy = mvif->mt76.band_idx;
228         mvif->sta.wcid.hw_key_idx = -1;
229         mt76_packet_id_init(&mvif->sta.wcid);
230
231         mt7615_mac_wtbl_update(dev, idx,
232                                MT_WTBL_UPDATE_ADM_COUNT_CLEAR);
233
234         rcu_assign_pointer(dev->mt76.wcid[idx], &mvif->sta.wcid);
235         if (vif->txq) {
236                 mtxq = (struct mt76_txq *)vif->txq->drv_priv;
237                 mtxq->wcid = idx;
238         }
239
240         ret = mt7615_mcu_add_dev_info(phy, vif, true);
241 out:
242         mt7615_mutex_release(dev);
243
244         return ret;
245 }
246
247 static void mt7615_remove_interface(struct ieee80211_hw *hw,
248                                     struct ieee80211_vif *vif)
249 {
250         struct mt7615_vif *mvif = (struct mt7615_vif *)vif->drv_priv;
251         struct mt7615_sta *msta = &mvif->sta;
252         struct mt7615_dev *dev = mt7615_hw_dev(hw);
253         struct mt7615_phy *phy = mt7615_hw_phy(hw);
254         int idx = msta->wcid.idx;
255
256         mt7615_mutex_acquire(dev);
257
258         mt7615_mcu_add_bss_info(phy, vif, NULL, false);
259         mt7615_mcu_sta_add(phy, vif, NULL, false);
260
261         mt76_testmode_reset(phy->mt76, true);
262         if (vif == phy->monitor_vif)
263             phy->monitor_vif = NULL;
264
265         mt76_connac_free_pending_tx_skbs(&dev->pm, &msta->wcid);
266
267         mt7615_mcu_add_dev_info(phy, vif, false);
268
269         rcu_assign_pointer(dev->mt76.wcid[idx], NULL);
270
271         dev->mt76.vif_mask &= ~BIT(mvif->mt76.idx);
272         dev->omac_mask &= ~BIT_ULL(mvif->mt76.omac_idx);
273         phy->omac_mask &= ~BIT_ULL(mvif->mt76.omac_idx);
274
275         mt7615_mutex_release(dev);
276
277         spin_lock_bh(&dev->sta_poll_lock);
278         if (!list_empty(&msta->poll_list))
279                 list_del_init(&msta->poll_list);
280         spin_unlock_bh(&dev->sta_poll_lock);
281
282         mt76_packet_id_flush(&dev->mt76, &mvif->sta.wcid);
283 }
284
285 static void mt7615_init_dfs_state(struct mt7615_phy *phy)
286 {
287         struct mt76_phy *mphy = phy->mt76;
288         struct ieee80211_hw *hw = mphy->hw;
289         struct cfg80211_chan_def *chandef = &hw->conf.chandef;
290
291         if (hw->conf.flags & IEEE80211_CONF_OFFCHANNEL)
292                 return;
293
294         if (!(chandef->chan->flags & IEEE80211_CHAN_RADAR) &&
295             !(mphy->chandef.chan->flags & IEEE80211_CHAN_RADAR))
296                 return;
297
298         if (mphy->chandef.chan->center_freq == chandef->chan->center_freq &&
299             mphy->chandef.width == chandef->width)
300                 return;
301
302         phy->dfs_state = -1;
303 }
304
305 int mt7615_set_channel(struct mt7615_phy *phy)
306 {
307         struct mt7615_dev *dev = phy->dev;
308         bool ext_phy = phy != &dev->phy;
309         int ret;
310
311         cancel_delayed_work_sync(&phy->mt76->mac_work);
312
313         mt7615_mutex_acquire(dev);
314
315         set_bit(MT76_RESET, &phy->mt76->state);
316
317         mt7615_init_dfs_state(phy);
318         mt76_set_channel(phy->mt76);
319
320         if (is_mt7615(&dev->mt76) && dev->flash_eeprom) {
321                 ret = mt7615_mcu_apply_rx_dcoc(phy);
322                 if (ret)
323                         goto out;
324
325                 ret = mt7615_mcu_apply_tx_dpd(phy);
326                 if (ret)
327                         goto out;
328         }
329
330         ret = mt7615_mcu_set_chan_info(phy, MCU_EXT_CMD(CHANNEL_SWITCH));
331         if (ret)
332                 goto out;
333
334         mt7615_mac_set_timing(phy);
335         ret = mt7615_dfs_init_radar_detector(phy);
336         if (ret)
337                 goto out;
338
339         mt7615_mac_cca_stats_reset(phy);
340         ret = mt7615_mcu_set_sku_en(phy, true);
341         if (ret)
342                 goto out;
343
344         mt7615_mac_reset_counters(dev);
345         phy->noise = 0;
346         phy->chfreq = mt76_rr(dev, MT_CHFREQ(ext_phy));
347
348 out:
349         clear_bit(MT76_RESET, &phy->mt76->state);
350
351         mt7615_mutex_release(dev);
352
353         mt76_worker_schedule(&dev->mt76.tx_worker);
354         if (!mt76_testmode_enabled(phy->mt76)) {
355                 unsigned long timeout = mt7615_get_macwork_timeout(dev);
356
357                 ieee80211_queue_delayed_work(phy->mt76->hw,
358                                              &phy->mt76->mac_work, timeout);
359         }
360
361         return ret;
362 }
363
364 static int mt7615_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
365                           struct ieee80211_vif *vif, struct ieee80211_sta *sta,
366                           struct ieee80211_key_conf *key)
367 {
368         struct mt7615_dev *dev = mt7615_hw_dev(hw);
369         struct mt7615_phy *phy = mt7615_hw_phy(hw);
370         struct mt7615_vif *mvif = (struct mt7615_vif *)vif->drv_priv;
371         struct mt7615_sta *msta = sta ? (struct mt7615_sta *)sta->drv_priv :
372                                   &mvif->sta;
373         struct mt76_wcid *wcid = &msta->wcid;
374         int idx = key->keyidx, err = 0;
375         u8 *wcid_keyidx = &wcid->hw_key_idx;
376
377         /* The hardware does not support per-STA RX GTK, fallback
378          * to software mode for these.
379          */
380         if ((vif->type == NL80211_IFTYPE_ADHOC ||
381              vif->type == NL80211_IFTYPE_MESH_POINT) &&
382             (key->cipher == WLAN_CIPHER_SUITE_TKIP ||
383              key->cipher == WLAN_CIPHER_SUITE_CCMP) &&
384             !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE))
385                 return -EOPNOTSUPP;
386
387         /* fall back to sw encryption for unsupported ciphers */
388         switch (key->cipher) {
389         case WLAN_CIPHER_SUITE_AES_CMAC:
390                 wcid_keyidx = &wcid->hw_key_idx2;
391                 key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIE;
392                 break;
393         case WLAN_CIPHER_SUITE_TKIP:
394         case WLAN_CIPHER_SUITE_CCMP:
395         case WLAN_CIPHER_SUITE_CCMP_256:
396         case WLAN_CIPHER_SUITE_GCMP:
397         case WLAN_CIPHER_SUITE_GCMP_256:
398         case WLAN_CIPHER_SUITE_SMS4:
399                 break;
400         case WLAN_CIPHER_SUITE_WEP40:
401         case WLAN_CIPHER_SUITE_WEP104:
402         default:
403                 return -EOPNOTSUPP;
404         }
405
406         mt7615_mutex_acquire(dev);
407
408         if (cmd == SET_KEY && !sta && !mvif->mt76.cipher) {
409                 mvif->mt76.cipher = mt76_connac_mcu_get_cipher(key->cipher);
410                 mt7615_mcu_add_bss_info(phy, vif, NULL, true);
411         }
412
413         if (cmd == SET_KEY)
414                 *wcid_keyidx = idx;
415         else if (idx == *wcid_keyidx)
416                 *wcid_keyidx = -1;
417         else
418                 goto out;
419
420         mt76_wcid_key_setup(&dev->mt76, wcid,
421                             cmd == SET_KEY ? key : NULL);
422
423         if (mt76_is_mmio(&dev->mt76))
424                 err = mt7615_mac_wtbl_set_key(dev, wcid, key, cmd);
425         else
426                 err = __mt7615_mac_wtbl_set_key(dev, wcid, key, cmd);
427
428 out:
429         mt7615_mutex_release(dev);
430
431         return err;
432 }
433
434 static int mt7615_set_sar_specs(struct ieee80211_hw *hw,
435                                 const struct cfg80211_sar_specs *sar)
436 {
437         struct mt7615_phy *phy = mt7615_hw_phy(hw);
438         int err;
439
440         if (!cfg80211_chandef_valid(&phy->mt76->chandef))
441                 return -EINVAL;
442
443         err = mt76_init_sar_power(hw, sar);
444         if (err)
445                 return err;
446
447         if (mt7615_firmware_offload(phy->dev))
448                 return mt76_connac_mcu_set_rate_txpower(phy->mt76);
449
450         ieee80211_stop_queues(hw);
451         err = mt7615_set_channel(phy);
452         ieee80211_wake_queues(hw);
453
454         return err;
455 }
456
457 static int mt7615_config(struct ieee80211_hw *hw, u32 changed)
458 {
459         struct mt7615_dev *dev = mt7615_hw_dev(hw);
460         struct mt7615_phy *phy = mt7615_hw_phy(hw);
461         bool band = phy != &dev->phy;
462         int ret = 0;
463
464         if (changed & (IEEE80211_CONF_CHANGE_CHANNEL |
465                        IEEE80211_CONF_CHANGE_POWER)) {
466 #ifdef CONFIG_NL80211_TESTMODE
467                 if (phy->mt76->test.state != MT76_TM_STATE_OFF) {
468                         mt7615_mutex_acquire(dev);
469                         mt76_testmode_reset(phy->mt76, false);
470                         mt7615_mutex_release(dev);
471                 }
472 #endif
473                 ieee80211_stop_queues(hw);
474                 ret = mt7615_set_channel(phy);
475                 ieee80211_wake_queues(hw);
476         }
477
478         mt7615_mutex_acquire(dev);
479
480         if (changed & IEEE80211_CONF_CHANGE_MONITOR) {
481                 mt76_testmode_reset(phy->mt76, true);
482
483                 if (!(hw->conf.flags & IEEE80211_CONF_MONITOR))
484                         phy->rxfilter |= MT_WF_RFCR_DROP_OTHER_UC;
485                 else
486                         phy->rxfilter &= ~MT_WF_RFCR_DROP_OTHER_UC;
487
488                 mt76_wr(dev, MT_WF_RFCR(band), phy->rxfilter);
489         }
490
491         mt7615_mutex_release(dev);
492
493         return ret;
494 }
495
496 static int
497 mt7615_conf_tx(struct ieee80211_hw *hw, struct ieee80211_vif *vif, u16 queue,
498                const struct ieee80211_tx_queue_params *params)
499 {
500         struct mt76_vif *mvif = (struct mt76_vif *)vif->drv_priv;
501         struct mt7615_dev *dev = mt7615_hw_dev(hw);
502         int err;
503
504         mt7615_mutex_acquire(dev);
505
506         queue = mt7615_lmac_mapping(dev, queue);
507         queue += mvif->wmm_idx * MT7615_MAX_WMM_SETS;
508         err = mt7615_mcu_set_wmm(dev, queue, params);
509
510         mt7615_mutex_release(dev);
511
512         return err;
513 }
514
515 static void mt7615_configure_filter(struct ieee80211_hw *hw,
516                                     unsigned int changed_flags,
517                                     unsigned int *total_flags,
518                                     u64 multicast)
519 {
520         struct mt7615_dev *dev = mt7615_hw_dev(hw);
521         struct mt7615_phy *phy = mt7615_hw_phy(hw);
522         bool band = phy != &dev->phy;
523
524         u32 ctl_flags = MT_WF_RFCR1_DROP_ACK |
525                         MT_WF_RFCR1_DROP_BF_POLL |
526                         MT_WF_RFCR1_DROP_BA |
527                         MT_WF_RFCR1_DROP_CFEND |
528                         MT_WF_RFCR1_DROP_CFACK;
529         u32 flags = 0;
530
531         mt7615_mutex_acquire(dev);
532
533 #define MT76_FILTER(_flag, _hw) do { \
534                 flags |= *total_flags & FIF_##_flag;                    \
535                 phy->rxfilter &= ~(_hw);                                \
536                 if (!mt76_testmode_enabled(phy->mt76))                  \
537                         phy->rxfilter |= !(flags & FIF_##_flag) * (_hw);\
538         } while (0)
539
540         phy->rxfilter &= ~(MT_WF_RFCR_DROP_OTHER_BSS |
541                            MT_WF_RFCR_DROP_FRAME_REPORT |
542                            MT_WF_RFCR_DROP_PROBEREQ |
543                            MT_WF_RFCR_DROP_MCAST_FILTERED |
544                            MT_WF_RFCR_DROP_MCAST |
545                            MT_WF_RFCR_DROP_BCAST |
546                            MT_WF_RFCR_DROP_DUPLICATE |
547                            MT_WF_RFCR_DROP_A2_BSSID |
548                            MT_WF_RFCR_DROP_UNWANTED_CTL |
549                            MT_WF_RFCR_DROP_STBC_MULTI);
550
551         if (phy->n_beacon_vif || !mt7615_firmware_offload(dev))
552                 phy->rxfilter &= ~MT_WF_RFCR_DROP_OTHER_BEACON;
553
554         MT76_FILTER(OTHER_BSS, MT_WF_RFCR_DROP_OTHER_TIM |
555                                MT_WF_RFCR_DROP_A3_MAC |
556                                MT_WF_RFCR_DROP_A3_BSSID);
557
558         MT76_FILTER(FCSFAIL, MT_WF_RFCR_DROP_FCSFAIL);
559
560         MT76_FILTER(CONTROL, MT_WF_RFCR_DROP_CTS |
561                              MT_WF_RFCR_DROP_RTS |
562                              MT_WF_RFCR_DROP_CTL_RSV |
563                              MT_WF_RFCR_DROP_NDPA);
564
565         *total_flags = flags;
566         mt76_wr(dev, MT_WF_RFCR(band), phy->rxfilter);
567
568         if (*total_flags & FIF_CONTROL)
569                 mt76_clear(dev, MT_WF_RFCR1(band), ctl_flags);
570         else
571                 mt76_set(dev, MT_WF_RFCR1(band), ctl_flags);
572
573         mt7615_mutex_release(dev);
574 }
575
576 static void mt7615_bss_info_changed(struct ieee80211_hw *hw,
577                                     struct ieee80211_vif *vif,
578                                     struct ieee80211_bss_conf *info,
579                                     u32 changed)
580 {
581         struct mt7615_dev *dev = mt7615_hw_dev(hw);
582         struct mt7615_phy *phy = mt7615_hw_phy(hw);
583
584         mt7615_mutex_acquire(dev);
585
586         if (changed & BSS_CHANGED_ERP_SLOT) {
587                 int slottime = info->use_short_slot ? 9 : 20;
588
589                 if (slottime != phy->slottime) {
590                         phy->slottime = slottime;
591                         mt7615_mac_set_timing(phy);
592                 }
593         }
594
595         if (changed & BSS_CHANGED_BEACON_ENABLED && info->enable_beacon) {
596                 mt7615_mcu_add_bss_info(phy, vif, NULL, true);
597                 mt7615_mcu_sta_add(phy, vif, NULL, true);
598
599                 if (mt7615_firmware_offload(dev) && vif->p2p)
600                         mt76_connac_mcu_set_p2p_oppps(hw, vif);
601         }
602
603         if (changed & (BSS_CHANGED_BEACON |
604                        BSS_CHANGED_BEACON_ENABLED))
605                 mt7615_mcu_add_beacon(dev, hw, vif, info->enable_beacon);
606
607         if (changed & BSS_CHANGED_PS)
608                 mt76_connac_mcu_set_vif_ps(&dev->mt76, vif);
609
610         if ((changed & BSS_CHANGED_ARP_FILTER) &&
611             mt7615_firmware_offload(dev)) {
612                 struct mt7615_vif *mvif = (struct mt7615_vif *)vif->drv_priv;
613
614                 mt76_connac_mcu_update_arp_filter(&dev->mt76, &mvif->mt76,
615                                                   info);
616         }
617
618         if (changed & BSS_CHANGED_ASSOC)
619                 mt7615_mac_set_beacon_filter(phy, vif, info->assoc);
620
621         mt7615_mutex_release(dev);
622 }
623
624 static void
625 mt7615_channel_switch_beacon(struct ieee80211_hw *hw,
626                              struct ieee80211_vif *vif,
627                              struct cfg80211_chan_def *chandef)
628 {
629         struct mt7615_dev *dev = mt7615_hw_dev(hw);
630
631         mt7615_mutex_acquire(dev);
632         mt7615_mcu_add_beacon(dev, hw, vif, true);
633         mt7615_mutex_release(dev);
634 }
635
636 int mt7615_mac_sta_add(struct mt76_dev *mdev, struct ieee80211_vif *vif,
637                        struct ieee80211_sta *sta)
638 {
639         struct mt7615_dev *dev = container_of(mdev, struct mt7615_dev, mt76);
640         struct mt7615_sta *msta = (struct mt7615_sta *)sta->drv_priv;
641         struct mt7615_vif *mvif = (struct mt7615_vif *)vif->drv_priv;
642         struct mt7615_phy *phy;
643         int idx, err;
644
645         idx = mt76_wcid_alloc(dev->mt76.wcid_mask, MT7615_WTBL_STA - 1);
646         if (idx < 0)
647                 return -ENOSPC;
648
649         INIT_LIST_HEAD(&msta->poll_list);
650         msta->vif = mvif;
651         msta->wcid.sta = 1;
652         msta->wcid.idx = idx;
653         msta->wcid.ext_phy = mvif->mt76.band_idx;
654
655         phy = mvif->mt76.band_idx ? mt7615_ext_phy(dev) : &dev->phy;
656         err = mt76_connac_pm_wake(phy->mt76, &dev->pm);
657         if (err)
658                 return err;
659
660         if (vif->type == NL80211_IFTYPE_STATION && !sta->tdls) {
661                 err = mt7615_mcu_add_bss_info(phy, vif, sta, true);
662                 if (err)
663                         return err;
664         }
665
666         mt7615_mac_wtbl_update(dev, idx,
667                                MT_WTBL_UPDATE_ADM_COUNT_CLEAR);
668         err = mt7615_mcu_sta_add(&dev->phy, vif, sta, true);
669         if (err)
670                 return err;
671
672         mt76_connac_power_save_sched(phy->mt76, &dev->pm);
673
674         return err;
675 }
676 EXPORT_SYMBOL_GPL(mt7615_mac_sta_add);
677
678 void mt7615_mac_sta_remove(struct mt76_dev *mdev, struct ieee80211_vif *vif,
679                            struct ieee80211_sta *sta)
680 {
681         struct mt7615_dev *dev = container_of(mdev, struct mt7615_dev, mt76);
682         struct mt7615_sta *msta = (struct mt7615_sta *)sta->drv_priv;
683         struct mt7615_vif *mvif = (struct mt7615_vif *)vif->drv_priv;
684         struct mt7615_phy *phy;
685
686         mt76_connac_free_pending_tx_skbs(&dev->pm, &msta->wcid);
687
688         phy = mvif->mt76.band_idx ? mt7615_ext_phy(dev) : &dev->phy;
689         mt76_connac_pm_wake(phy->mt76, &dev->pm);
690
691         mt7615_mcu_sta_add(&dev->phy, vif, sta, false);
692         mt7615_mac_wtbl_update(dev, msta->wcid.idx,
693                                MT_WTBL_UPDATE_ADM_COUNT_CLEAR);
694         if (vif->type == NL80211_IFTYPE_STATION && !sta->tdls)
695                 mt7615_mcu_add_bss_info(phy, vif, sta, false);
696
697         spin_lock_bh(&dev->sta_poll_lock);
698         if (!list_empty(&msta->poll_list))
699                 list_del_init(&msta->poll_list);
700         spin_unlock_bh(&dev->sta_poll_lock);
701
702         mt76_connac_power_save_sched(phy->mt76, &dev->pm);
703 }
704 EXPORT_SYMBOL_GPL(mt7615_mac_sta_remove);
705
706 static void mt7615_sta_rate_tbl_update(struct ieee80211_hw *hw,
707                                        struct ieee80211_vif *vif,
708                                        struct ieee80211_sta *sta)
709 {
710         struct mt7615_dev *dev = mt7615_hw_dev(hw);
711         struct mt7615_phy *phy = mt7615_hw_phy(hw);
712         struct mt7615_sta *msta = (struct mt7615_sta *)sta->drv_priv;
713         struct ieee80211_sta_rates *sta_rates = rcu_dereference(sta->rates);
714         int i;
715
716         if (!sta_rates)
717                 return;
718
719         spin_lock_bh(&dev->mt76.lock);
720         for (i = 0; i < ARRAY_SIZE(msta->rates); i++) {
721                 msta->rates[i].idx = sta_rates->rate[i].idx;
722                 msta->rates[i].count = sta_rates->rate[i].count;
723                 msta->rates[i].flags = sta_rates->rate[i].flags;
724
725                 if (msta->rates[i].idx < 0 || !msta->rates[i].count)
726                         break;
727         }
728         msta->n_rates = i;
729         if (mt76_connac_pm_ref(phy->mt76, &dev->pm)) {
730                 mt7615_mac_set_rates(phy, msta, NULL, msta->rates);
731                 mt76_connac_pm_unref(phy->mt76, &dev->pm);
732         }
733         spin_unlock_bh(&dev->mt76.lock);
734 }
735
736 void mt7615_tx_worker(struct mt76_worker *w)
737 {
738         struct mt7615_dev *dev = container_of(w, struct mt7615_dev,
739                                               mt76.tx_worker);
740
741         if (!mt76_connac_pm_ref(&dev->mphy, &dev->pm)) {
742                 queue_work(dev->mt76.wq, &dev->pm.wake_work);
743                 return;
744         }
745
746         mt76_tx_worker_run(&dev->mt76);
747         mt76_connac_pm_unref(&dev->mphy, &dev->pm);
748 }
749
750 static void mt7615_tx(struct ieee80211_hw *hw,
751                       struct ieee80211_tx_control *control,
752                       struct sk_buff *skb)
753 {
754         struct mt7615_dev *dev = mt7615_hw_dev(hw);
755         struct mt76_phy *mphy = hw->priv;
756         struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
757         struct ieee80211_vif *vif = info->control.vif;
758         struct mt76_wcid *wcid = &dev->mt76.global_wcid;
759         struct mt7615_sta *msta = NULL;
760         int qid;
761
762         if (control->sta) {
763                 msta = (struct mt7615_sta *)control->sta->drv_priv;
764                 wcid = &msta->wcid;
765         }
766
767         if (vif && !control->sta) {
768                 struct mt7615_vif *mvif;
769
770                 mvif = (struct mt7615_vif *)vif->drv_priv;
771                 msta = &mvif->sta;
772                 wcid = &msta->wcid;
773         }
774
775         if (mt76_connac_pm_ref(mphy, &dev->pm)) {
776                 mt76_tx(mphy, control->sta, wcid, skb);
777                 mt76_connac_pm_unref(mphy, &dev->pm);
778                 return;
779         }
780
781         qid = skb_get_queue_mapping(skb);
782         if (qid >= MT_TXQ_PSD) {
783                 qid = IEEE80211_AC_BE;
784                 skb_set_queue_mapping(skb, qid);
785         }
786
787         mt76_connac_pm_queue_skb(hw, &dev->pm, wcid, skb);
788 }
789
790 static int mt7615_set_rts_threshold(struct ieee80211_hw *hw, u32 val)
791 {
792         struct mt7615_dev *dev = mt7615_hw_dev(hw);
793         struct mt7615_phy *phy = mt7615_hw_phy(hw);
794         int err, band = phy != &dev->phy;
795
796         mt7615_mutex_acquire(dev);
797         err = mt76_connac_mcu_set_rts_thresh(&dev->mt76, val, band);
798         mt7615_mutex_release(dev);
799
800         return err;
801 }
802
803 static int
804 mt7615_ampdu_action(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
805                     struct ieee80211_ampdu_params *params)
806 {
807         enum ieee80211_ampdu_mlme_action action = params->action;
808         struct mt7615_dev *dev = mt7615_hw_dev(hw);
809         struct ieee80211_sta *sta = params->sta;
810         struct ieee80211_txq *txq = sta->txq[params->tid];
811         struct mt7615_sta *msta = (struct mt7615_sta *)sta->drv_priv;
812         u16 tid = params->tid;
813         u16 ssn = params->ssn;
814         struct mt76_txq *mtxq;
815         int ret = 0;
816
817         if (!txq)
818                 return -EINVAL;
819
820         mtxq = (struct mt76_txq *)txq->drv_priv;
821
822         mt7615_mutex_acquire(dev);
823
824         switch (action) {
825         case IEEE80211_AMPDU_RX_START:
826                 mt76_rx_aggr_start(&dev->mt76, &msta->wcid, tid, ssn,
827                                    params->buf_size);
828                 ret = mt7615_mcu_add_rx_ba(dev, params, true);
829                 break;
830         case IEEE80211_AMPDU_RX_STOP:
831                 mt76_rx_aggr_stop(&dev->mt76, &msta->wcid, tid);
832                 ret = mt7615_mcu_add_rx_ba(dev, params, false);
833                 break;
834         case IEEE80211_AMPDU_TX_OPERATIONAL:
835                 mtxq->aggr = true;
836                 mtxq->send_bar = false;
837                 ret = mt7615_mcu_add_tx_ba(dev, params, true);
838                 ssn = mt7615_mac_get_sta_tid_sn(dev, msta->wcid.idx, tid);
839                 ieee80211_send_bar(vif, sta->addr, tid,
840                                    IEEE80211_SN_TO_SEQ(ssn));
841                 break;
842         case IEEE80211_AMPDU_TX_STOP_FLUSH:
843         case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
844                 mtxq->aggr = false;
845                 ret = mt7615_mcu_add_tx_ba(dev, params, false);
846                 break;
847         case IEEE80211_AMPDU_TX_START:
848                 ssn = mt7615_mac_get_sta_tid_sn(dev, msta->wcid.idx, tid);
849                 params->ssn = ssn;
850                 ret = IEEE80211_AMPDU_TX_START_IMMEDIATE;
851                 break;
852         case IEEE80211_AMPDU_TX_STOP_CONT:
853                 mtxq->aggr = false;
854                 ret = mt7615_mcu_add_tx_ba(dev, params, false);
855                 ieee80211_stop_tx_ba_cb_irqsafe(vif, sta->addr, tid);
856                 break;
857         }
858         mt7615_mutex_release(dev);
859
860         return ret;
861 }
862
863 static int
864 mt7615_sta_add(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
865                struct ieee80211_sta *sta)
866 {
867     return mt76_sta_state(hw, vif, sta, IEEE80211_STA_NOTEXIST,
868                           IEEE80211_STA_NONE);
869 }
870
871 static int
872 mt7615_sta_remove(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
873                   struct ieee80211_sta *sta)
874 {
875     return mt76_sta_state(hw, vif, sta, IEEE80211_STA_NONE,
876                           IEEE80211_STA_NOTEXIST);
877 }
878
879 static int
880 mt7615_get_stats(struct ieee80211_hw *hw,
881                  struct ieee80211_low_level_stats *stats)
882 {
883         struct mt7615_phy *phy = mt7615_hw_phy(hw);
884         struct mib_stats *mib = &phy->mib;
885
886         mt7615_mutex_acquire(phy->dev);
887
888         stats->dot11RTSSuccessCount = mib->rts_cnt;
889         stats->dot11RTSFailureCount = mib->rts_retries_cnt;
890         stats->dot11FCSErrorCount = mib->fcs_err_cnt;
891         stats->dot11ACKFailureCount = mib->ack_fail_cnt;
892
893         mt7615_mutex_release(phy->dev);
894
895         return 0;
896 }
897
898 static u64
899 mt7615_get_tsf(struct ieee80211_hw *hw, struct ieee80211_vif *vif)
900 {
901         struct mt7615_vif *mvif = (struct mt7615_vif *)vif->drv_priv;
902         struct mt7615_dev *dev = mt7615_hw_dev(hw);
903         union {
904                 u64 t64;
905                 u32 t32[2];
906         } tsf;
907         u16 idx = mvif->mt76.omac_idx;
908         u32 reg;
909
910         idx = idx > HW_BSSID_MAX ? HW_BSSID_0 : idx;
911         reg = idx > 1 ? MT_LPON_TCR2(idx): MT_LPON_TCR0(idx);
912
913         mt7615_mutex_acquire(dev);
914
915         /* TSF read */
916         mt76_rmw(dev, reg, MT_LPON_TCR_MODE, MT_LPON_TCR_READ);
917         tsf.t32[0] = mt76_rr(dev, MT_LPON_UTTR0);
918         tsf.t32[1] = mt76_rr(dev, MT_LPON_UTTR1);
919
920         mt7615_mutex_release(dev);
921
922         return tsf.t64;
923 }
924
925 static void
926 mt7615_set_tsf(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
927                u64 timestamp)
928 {
929         struct mt7615_vif *mvif = (struct mt7615_vif *)vif->drv_priv;
930         struct mt7615_dev *dev = mt7615_hw_dev(hw);
931         union {
932                 u64 t64;
933                 u32 t32[2];
934         } tsf = { .t64 = timestamp, };
935         u16 idx = mvif->mt76.omac_idx;
936         u32 reg;
937
938         idx = idx > HW_BSSID_MAX ? HW_BSSID_0 : idx;
939         reg = idx > 1 ? MT_LPON_TCR2(idx): MT_LPON_TCR0(idx);
940
941         mt7615_mutex_acquire(dev);
942
943         mt76_wr(dev, MT_LPON_UTTR0, tsf.t32[0]);
944         mt76_wr(dev, MT_LPON_UTTR1, tsf.t32[1]);
945         /* TSF software overwrite */
946         mt76_rmw(dev, reg, MT_LPON_TCR_MODE, MT_LPON_TCR_WRITE);
947
948         mt7615_mutex_release(dev);
949 }
950
951 static void
952 mt7615_offset_tsf(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
953                   s64 timestamp)
954 {
955         struct mt7615_vif *mvif = (struct mt7615_vif *)vif->drv_priv;
956         struct mt7615_dev *dev = mt7615_hw_dev(hw);
957         union {
958                 u64 t64;
959                 u32 t32[2];
960         } tsf = { .t64 = timestamp, };
961         u16 idx = mvif->mt76.omac_idx;
962         u32 reg;
963
964         idx = idx > HW_BSSID_MAX ? HW_BSSID_0 : idx;
965         reg = idx > 1 ? MT_LPON_TCR2(idx): MT_LPON_TCR0(idx);
966
967         mt7615_mutex_acquire(dev);
968
969         mt76_wr(dev, MT_LPON_UTTR0, tsf.t32[0]);
970         mt76_wr(dev, MT_LPON_UTTR1, tsf.t32[1]);
971         /* TSF software adjust*/
972         mt76_rmw(dev, reg, MT_LPON_TCR_MODE, MT_LPON_TCR_ADJUST);
973
974         mt7615_mutex_release(dev);
975 }
976
977 static void
978 mt7615_set_coverage_class(struct ieee80211_hw *hw, s16 coverage_class)
979 {
980         struct mt7615_phy *phy = mt7615_hw_phy(hw);
981         struct mt7615_dev *dev = phy->dev;
982
983         mt7615_mutex_acquire(dev);
984         phy->coverage_class = max_t(s16, coverage_class, 0);
985         mt7615_mac_set_timing(phy);
986         mt7615_mutex_release(dev);
987 }
988
989 static int
990 mt7615_set_antenna(struct ieee80211_hw *hw, u32 tx_ant, u32 rx_ant)
991 {
992         struct mt7615_dev *dev = mt7615_hw_dev(hw);
993         struct mt7615_phy *phy = mt7615_hw_phy(hw);
994         int max_nss = hweight8(hw->wiphy->available_antennas_tx);
995         bool ext_phy = phy != &dev->phy;
996
997         if (!tx_ant || tx_ant != rx_ant || ffs(tx_ant) > max_nss)
998                 return -EINVAL;
999
1000         if ((BIT(hweight8(tx_ant)) - 1) != tx_ant)
1001                 tx_ant = BIT(ffs(tx_ant) - 1) - 1;
1002
1003         mt7615_mutex_acquire(dev);
1004
1005         phy->mt76->antenna_mask = tx_ant;
1006         if (ext_phy) {
1007                 if (dev->chainmask == 0xf)
1008                         tx_ant <<= 2;
1009                 else
1010                         tx_ant <<= 1;
1011         }
1012         phy->mt76->chainmask = tx_ant;
1013
1014         mt76_set_stream_caps(phy->mt76, true);
1015
1016         mt7615_mutex_release(dev);
1017
1018         return 0;
1019 }
1020
1021 static void mt7615_roc_iter(void *priv, u8 *mac,
1022                             struct ieee80211_vif *vif)
1023 {
1024         struct mt7615_phy *phy = priv;
1025
1026         mt7615_mcu_set_roc(phy, vif, NULL, 0);
1027 }
1028
1029 void mt7615_roc_work(struct work_struct *work)
1030 {
1031         struct mt7615_phy *phy;
1032
1033         phy = (struct mt7615_phy *)container_of(work, struct mt7615_phy,
1034                                                 roc_work);
1035
1036         if (!test_and_clear_bit(MT76_STATE_ROC, &phy->mt76->state))
1037                 return;
1038
1039         mt7615_mutex_acquire(phy->dev);
1040         ieee80211_iterate_active_interfaces(phy->mt76->hw,
1041                                             IEEE80211_IFACE_ITER_RESUME_ALL,
1042                                             mt7615_roc_iter, phy);
1043         mt7615_mutex_release(phy->dev);
1044         ieee80211_remain_on_channel_expired(phy->mt76->hw);
1045 }
1046
1047 void mt7615_roc_timer(struct timer_list *timer)
1048 {
1049         struct mt7615_phy *phy = from_timer(phy, timer, roc_timer);
1050
1051         ieee80211_queue_work(phy->mt76->hw, &phy->roc_work);
1052 }
1053
1054 void mt7615_scan_work(struct work_struct *work)
1055 {
1056         struct mt7615_phy *phy;
1057
1058         phy = (struct mt7615_phy *)container_of(work, struct mt7615_phy,
1059                                                 scan_work.work);
1060
1061         while (true) {
1062                 struct mt7615_mcu_rxd *rxd;
1063                 struct sk_buff *skb;
1064
1065                 spin_lock_bh(&phy->dev->mt76.lock);
1066                 skb = __skb_dequeue(&phy->scan_event_list);
1067                 spin_unlock_bh(&phy->dev->mt76.lock);
1068
1069                 if (!skb)
1070                         break;
1071
1072                 rxd = (struct mt7615_mcu_rxd *)skb->data;
1073                 if (rxd->eid == MCU_EVENT_SCHED_SCAN_DONE) {
1074                         ieee80211_sched_scan_results(phy->mt76->hw);
1075                 } else if (test_and_clear_bit(MT76_HW_SCANNING,
1076                                               &phy->mt76->state)) {
1077                         struct cfg80211_scan_info info = {
1078                                 .aborted = false,
1079                         };
1080
1081                         ieee80211_scan_completed(phy->mt76->hw, &info);
1082                 }
1083                 dev_kfree_skb(skb);
1084         }
1085 }
1086
1087 static int
1088 mt7615_hw_scan(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1089                struct ieee80211_scan_request *req)
1090 {
1091         struct mt7615_dev *dev = mt7615_hw_dev(hw);
1092         struct mt76_phy *mphy = hw->priv;
1093         int err;
1094
1095         /* fall-back to sw-scan */
1096         if (!mt7615_firmware_offload(dev))
1097                 return 1;
1098
1099         mt7615_mutex_acquire(dev);
1100         err = mt76_connac_mcu_hw_scan(mphy, vif, req);
1101         mt7615_mutex_release(dev);
1102
1103         return err;
1104 }
1105
1106 static void
1107 mt7615_cancel_hw_scan(struct ieee80211_hw *hw, struct ieee80211_vif *vif)
1108 {
1109         struct mt7615_dev *dev = mt7615_hw_dev(hw);
1110         struct mt76_phy *mphy = hw->priv;
1111
1112         mt7615_mutex_acquire(dev);
1113         mt76_connac_mcu_cancel_hw_scan(mphy, vif);
1114         mt7615_mutex_release(dev);
1115 }
1116
1117 static int
1118 mt7615_start_sched_scan(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1119                         struct cfg80211_sched_scan_request *req,
1120                         struct ieee80211_scan_ies *ies)
1121 {
1122         struct mt7615_dev *dev = mt7615_hw_dev(hw);
1123         struct mt76_phy *mphy = hw->priv;
1124         int err;
1125
1126         if (!mt7615_firmware_offload(dev))
1127                 return -EOPNOTSUPP;
1128
1129         mt7615_mutex_acquire(dev);
1130
1131         err = mt76_connac_mcu_sched_scan_req(mphy, vif, req);
1132         if (err < 0)
1133                 goto out;
1134
1135         err = mt76_connac_mcu_sched_scan_enable(mphy, vif, true);
1136 out:
1137         mt7615_mutex_release(dev);
1138
1139         return err;
1140 }
1141
1142 static int
1143 mt7615_stop_sched_scan(struct ieee80211_hw *hw, struct ieee80211_vif *vif)
1144 {
1145         struct mt7615_dev *dev = mt7615_hw_dev(hw);
1146         struct mt76_phy *mphy = hw->priv;
1147         int err;
1148
1149         if (!mt7615_firmware_offload(dev))
1150                 return -EOPNOTSUPP;
1151
1152         mt7615_mutex_acquire(dev);
1153         err = mt76_connac_mcu_sched_scan_enable(mphy, vif, false);
1154         mt7615_mutex_release(dev);
1155
1156         return err;
1157 }
1158
1159 static int mt7615_remain_on_channel(struct ieee80211_hw *hw,
1160                                     struct ieee80211_vif *vif,
1161                                     struct ieee80211_channel *chan,
1162                                     int duration,
1163                                     enum ieee80211_roc_type type)
1164 {
1165         struct mt7615_phy *phy = mt7615_hw_phy(hw);
1166         int err;
1167
1168         if (test_and_set_bit(MT76_STATE_ROC, &phy->mt76->state))
1169                 return 0;
1170
1171         mt7615_mutex_acquire(phy->dev);
1172
1173         err = mt7615_mcu_set_roc(phy, vif, chan, duration);
1174         if (err < 0) {
1175                 clear_bit(MT76_STATE_ROC, &phy->mt76->state);
1176                 goto out;
1177         }
1178
1179         if (!wait_event_timeout(phy->roc_wait, phy->roc_grant, HZ)) {
1180                 mt7615_mcu_set_roc(phy, vif, NULL, 0);
1181                 clear_bit(MT76_STATE_ROC, &phy->mt76->state);
1182                 err = -ETIMEDOUT;
1183         }
1184
1185 out:
1186         mt7615_mutex_release(phy->dev);
1187
1188         return err;
1189 }
1190
1191 static int mt7615_cancel_remain_on_channel(struct ieee80211_hw *hw,
1192                                            struct ieee80211_vif *vif)
1193 {
1194         struct mt7615_phy *phy = mt7615_hw_phy(hw);
1195         int err;
1196
1197         if (!test_and_clear_bit(MT76_STATE_ROC, &phy->mt76->state))
1198                 return 0;
1199
1200         del_timer_sync(&phy->roc_timer);
1201         cancel_work_sync(&phy->roc_work);
1202
1203         mt7615_mutex_acquire(phy->dev);
1204         err = mt7615_mcu_set_roc(phy, vif, NULL, 0);
1205         mt7615_mutex_release(phy->dev);
1206
1207         return err;
1208 }
1209
1210 static void mt7615_sta_set_decap_offload(struct ieee80211_hw *hw,
1211                                  struct ieee80211_vif *vif,
1212                                  struct ieee80211_sta *sta,
1213                                  bool enabled)
1214 {
1215         struct mt7615_dev *dev = mt7615_hw_dev(hw);
1216         struct mt7615_sta *msta = (struct mt7615_sta *)sta->drv_priv;
1217
1218         if (enabled)
1219                 set_bit(MT_WCID_FLAG_HDR_TRANS, &msta->wcid.flags);
1220         else
1221                 clear_bit(MT_WCID_FLAG_HDR_TRANS, &msta->wcid.flags);
1222
1223         mt7615_mcu_set_sta_decap_offload(dev, vif, sta);
1224 }
1225
1226 #ifdef CONFIG_PM
1227 static int mt7615_suspend(struct ieee80211_hw *hw,
1228                           struct cfg80211_wowlan *wowlan)
1229 {
1230         struct mt7615_phy *phy = mt7615_hw_phy(hw);
1231         struct mt7615_dev *dev = mt7615_hw_dev(hw);
1232         int err = 0;
1233
1234         cancel_delayed_work_sync(&dev->pm.ps_work);
1235         mt76_connac_free_pending_tx_skbs(&dev->pm, NULL);
1236
1237         mt7615_mutex_acquire(dev);
1238
1239         clear_bit(MT76_STATE_RUNNING, &phy->mt76->state);
1240         cancel_delayed_work_sync(&phy->scan_work);
1241         cancel_delayed_work_sync(&phy->mt76->mac_work);
1242
1243         set_bit(MT76_STATE_SUSPEND, &phy->mt76->state);
1244         ieee80211_iterate_active_interfaces(hw,
1245                                             IEEE80211_IFACE_ITER_RESUME_ALL,
1246                                             mt76_connac_mcu_set_suspend_iter,
1247                                             phy->mt76);
1248
1249         if (!mt7615_dev_running(dev))
1250                 err = mt76_connac_mcu_set_hif_suspend(&dev->mt76, true);
1251
1252         mt7615_mutex_release(dev);
1253
1254         return err;
1255 }
1256
1257 static int mt7615_resume(struct ieee80211_hw *hw)
1258 {
1259         struct mt7615_phy *phy = mt7615_hw_phy(hw);
1260         struct mt7615_dev *dev = mt7615_hw_dev(hw);
1261         unsigned long timeout;
1262         bool running;
1263
1264         mt7615_mutex_acquire(dev);
1265
1266         running = mt7615_dev_running(dev);
1267         set_bit(MT76_STATE_RUNNING, &phy->mt76->state);
1268
1269         if (!running) {
1270                 int err;
1271
1272                 err = mt76_connac_mcu_set_hif_suspend(&dev->mt76, false);
1273                 if (err < 0) {
1274                         mt7615_mutex_release(dev);
1275                         return err;
1276                 }
1277         }
1278
1279         clear_bit(MT76_STATE_SUSPEND, &phy->mt76->state);
1280         ieee80211_iterate_active_interfaces(hw,
1281                                             IEEE80211_IFACE_ITER_RESUME_ALL,
1282                                             mt76_connac_mcu_set_suspend_iter,
1283                                             phy->mt76);
1284
1285         timeout = mt7615_get_macwork_timeout(dev);
1286         ieee80211_queue_delayed_work(hw, &phy->mt76->mac_work, timeout);
1287
1288         mt7615_mutex_release(dev);
1289
1290         return 0;
1291 }
1292
1293 static void mt7615_set_wakeup(struct ieee80211_hw *hw, bool enabled)
1294 {
1295         struct mt7615_dev *dev = mt7615_hw_dev(hw);
1296         struct mt76_dev *mdev = &dev->mt76;
1297
1298         device_set_wakeup_enable(mdev->dev, enabled);
1299 }
1300
1301 static void mt7615_set_rekey_data(struct ieee80211_hw *hw,
1302                                   struct ieee80211_vif *vif,
1303                                   struct cfg80211_gtk_rekey_data *data)
1304 {
1305         struct mt7615_dev *dev = mt7615_hw_dev(hw);
1306
1307         mt7615_mutex_acquire(dev);
1308         mt76_connac_mcu_update_gtk_rekey(hw, vif, data);
1309         mt7615_mutex_release(dev);
1310 }
1311 #endif /* CONFIG_PM */
1312
1313 const struct ieee80211_ops mt7615_ops = {
1314         .tx = mt7615_tx,
1315         .start = mt7615_start,
1316         .stop = mt7615_stop,
1317         .add_interface = mt7615_add_interface,
1318         .remove_interface = mt7615_remove_interface,
1319         .config = mt7615_config,
1320         .conf_tx = mt7615_conf_tx,
1321         .configure_filter = mt7615_configure_filter,
1322         .bss_info_changed = mt7615_bss_info_changed,
1323         .sta_add = mt7615_sta_add,
1324         .sta_remove = mt7615_sta_remove,
1325         .sta_pre_rcu_remove = mt76_sta_pre_rcu_remove,
1326         .set_key = mt7615_set_key,
1327         .sta_set_decap_offload = mt7615_sta_set_decap_offload,
1328         .ampdu_action = mt7615_ampdu_action,
1329         .set_rts_threshold = mt7615_set_rts_threshold,
1330         .wake_tx_queue = mt76_wake_tx_queue,
1331         .sta_rate_tbl_update = mt7615_sta_rate_tbl_update,
1332         .sw_scan_start = mt76_sw_scan,
1333         .sw_scan_complete = mt76_sw_scan_complete,
1334         .release_buffered_frames = mt76_release_buffered_frames,
1335         .get_txpower = mt76_get_txpower,
1336         .channel_switch_beacon = mt7615_channel_switch_beacon,
1337         .get_stats = mt7615_get_stats,
1338         .get_tsf = mt7615_get_tsf,
1339         .set_tsf = mt7615_set_tsf,
1340         .offset_tsf = mt7615_offset_tsf,
1341         .get_survey = mt76_get_survey,
1342         .get_antenna = mt76_get_antenna,
1343         .set_antenna = mt7615_set_antenna,
1344         .set_coverage_class = mt7615_set_coverage_class,
1345         .hw_scan = mt7615_hw_scan,
1346         .cancel_hw_scan = mt7615_cancel_hw_scan,
1347         .sched_scan_start = mt7615_start_sched_scan,
1348         .sched_scan_stop = mt7615_stop_sched_scan,
1349         .remain_on_channel = mt7615_remain_on_channel,
1350         .cancel_remain_on_channel = mt7615_cancel_remain_on_channel,
1351         CFG80211_TESTMODE_CMD(mt76_testmode_cmd)
1352         CFG80211_TESTMODE_DUMP(mt76_testmode_dump)
1353 #ifdef CONFIG_PM
1354         .suspend = mt7615_suspend,
1355         .resume = mt7615_resume,
1356         .set_wakeup = mt7615_set_wakeup,
1357         .set_rekey_data = mt7615_set_rekey_data,
1358 #endif /* CONFIG_PM */
1359         .set_sar_specs = mt7615_set_sar_specs,
1360 };
1361 EXPORT_SYMBOL_GPL(mt7615_ops);
1362
1363 MODULE_LICENSE("Dual BSD/GPL");