[GitHub/mt8127/android_kernel_alcatel_ttab.git] / net / mac80211 / offchannel.c

/*
 * Off-channel operation helpers
 *
 * Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
 * Copyright 2004, Instant802 Networks, Inc.
 * Copyright 2005, Devicescape Software, Inc.
 * Copyright 2006-2007	Jiri Benc <jbenc@suse.cz>
 * Copyright 2007, Michael Wu <flamingice@sourmilk.net>
 * Copyright 2009	Johannes Berg <johannes@sipsolutions.net>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */
#include <linux/export.h>
#include <net/mac80211.h>
#include "ieee80211_i.h"
#include "driver-ops.h"

/*
 * Tell our hardware to disable PS.
 * Optionally inform AP that we will go to sleep so that it will buffer
 * the frames while we are doing off-channel work.  This is optional
 * because we *may* be doing work on-operating channel, and want our
 * hardware unconditionally awake, but still let the AP send us normal frames.
 */
static void ieee80211_offchannel_ps_enable(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_local *local = sdata->local;
	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;

	local->offchannel_ps_enabled = false;

	/* FIXME: what to do when local->pspolling is true? */

	del_timer_sync(&local->dynamic_ps_timer);
	del_timer_sync(&ifmgd->bcn_mon_timer);
	del_timer_sync(&ifmgd->conn_mon_timer);

	cancel_work_sync(&local->dynamic_ps_enable_work);

	if (local->hw.conf.flags & IEEE80211_CONF_PS) {
		local->offchannel_ps_enabled = true;
		local->hw.conf.flags &= ~IEEE80211_CONF_PS;
		ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
	}

	if (!local->offchannel_ps_enabled ||
	    !(local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK))
		/*
		 * If power save was enabled, no need to send a nullfunc
		 * frame because AP knows that we are sleeping. But if the
		 * hardware is creating the nullfunc frame for power save
		 * status (ie. IEEE80211_HW_PS_NULLFUNC_STACK is not
		 * enabled) and power save was enabled, the firmware just
		 * sent a null frame with power save disabled. So we need
		 * to send a new nullfunc frame to inform the AP that we
		 * are again sleeping.
		 */
		ieee80211_send_nullfunc(local, sdata, 1);
}

/* inform AP that we are awake again, unless power save is enabled */
static void ieee80211_offchannel_ps_disable(struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_local *local = sdata->local;

	if (!local->ps_sdata)
		ieee80211_send_nullfunc(local, sdata, 0);
	else if (local->offchannel_ps_enabled) {
		/*
		 * In !IEEE80211_HW_PS_NULLFUNC_STACK case the hardware
		 * will send a nullfunc frame with the powersave bit set
		 * even though the AP already knows that we are sleeping.
		 * This could be avoided by sending a null frame with power
		 * save bit disabled before enabling the power save, but
		 * this doesn't gain anything.
		 *
		 * When IEEE80211_HW_PS_NULLFUNC_STACK is enabled, no need
		 * to send a nullfunc frame because AP already knows that
		 * we are sleeping, let's just enable power save mode in
		 * hardware.
		 */
		/* TODO:  Only set hardware if CONF_PS changed?
		 * TODO:  Should we set offchannel_ps_enabled to false?
		 */
		local->hw.conf.flags |= IEEE80211_CONF_PS;
		ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
	} else if (local->hw.conf.dynamic_ps_timeout > 0) {
		/*
		 * If IEEE80211_CONF_PS was not set and the dynamic_ps_timer
		 * had been running before leaving the operating channel,
		 * restart the timer now and send a nullfunc frame to inform
		 * the AP that we are awake.
		 */
		ieee80211_send_nullfunc(local, sdata, 0);
		mod_timer(&local->dynamic_ps_timer, jiffies +
			  msecs_to_jiffies(local->hw.conf.dynamic_ps_timeout));
	}

	ieee80211_sta_reset_beacon_monitor(sdata);
	ieee80211_sta_reset_conn_monitor(sdata);
}

void ieee80211_offchannel_stop_vifs(struct ieee80211_local *local)
{
	struct ieee80211_sub_if_data *sdata;

	if (WARN_ON(local->use_chanctx))
		return;

	/*
	 * notify the AP about us leaving the channel and stop all
	 * STA interfaces.
	 */

	/*
	 * Stop queues and transmit all frames queued by the driver
	 * before sending nullfunc to enable powersave at the AP.
	 */
	ieee80211_stop_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP,
					IEEE80211_QUEUE_STOP_REASON_OFFCHANNEL);
	ieee80211_flush_queues(local, NULL);

	mutex_lock(&local->iflist_mtx);
	list_for_each_entry(sdata, &local->interfaces, list) {
		if (!ieee80211_sdata_running(sdata))
			continue;

		if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE)
			continue;

		if (sdata->vif.type != NL80211_IFTYPE_MONITOR)
			set_bit(SDATA_STATE_OFFCHANNEL, &sdata->state);

		/* Check to see if we should disable beaconing. */
		if (sdata->vif.bss_conf.enable_beacon) {
			set_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED,
				&sdata->state);
			sdata->vif.bss_conf.enable_beacon = false;
			ieee80211_bss_info_change_notify(
				sdata, BSS_CHANGED_BEACON_ENABLED);
		}

		if (sdata->vif.type == NL80211_IFTYPE_STATION &&
		    sdata->u.mgd.associated)
			ieee80211_offchannel_ps_enable(sdata);
	}
	mutex_unlock(&local->iflist_mtx);
}

void ieee80211_offchannel_return(struct ieee80211_local *local)
{
	struct ieee80211_sub_if_data *sdata;

	if (WARN_ON(local->use_chanctx))
		return;

	mutex_lock(&local->iflist_mtx);
	list_for_each_entry(sdata, &local->interfaces, list) {
		if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE)
			continue;

		if (sdata->vif.type != NL80211_IFTYPE_MONITOR)
			clear_bit(SDATA_STATE_OFFCHANNEL, &sdata->state);

		if (!ieee80211_sdata_running(sdata))
			continue;

		/* Tell AP we're back */
		if (sdata->vif.type == NL80211_IFTYPE_STATION &&
		    sdata->u.mgd.associated)
			ieee80211_offchannel_ps_disable(sdata);

		if (test_and_clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED,
				       &sdata->state)) {
			sdata->vif.bss_conf.enable_beacon = true;
			ieee80211_bss_info_change_notify(
				sdata, BSS_CHANGED_BEACON_ENABLED);
		}
	}
	mutex_unlock(&local->iflist_mtx);

	ieee80211_wake_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP,
					IEEE80211_QUEUE_STOP_REASON_OFFCHANNEL);
}

void ieee80211_handle_roc_started(struct ieee80211_roc_work *roc)
{
	if (roc->notified)
		return;

	if (roc->mgmt_tx_cookie) {
		if (!WARN_ON(!roc->frame)) {
			ieee80211_tx_skb_tid_band(roc->sdata, roc->frame, 7,
						  roc->chan->band);
			roc->frame = NULL;
		}
	} else {
		cfg80211_ready_on_channel(&roc->sdata->wdev, roc->cookie,
					  roc->chan, roc->req_duration,
					  GFP_KERNEL);
	}

	roc->notified = true;
}

static void ieee80211_hw_roc_start(struct work_struct *work)
{
	struct ieee80211_local *local =
		container_of(work, struct ieee80211_local, hw_roc_start);
	struct ieee80211_roc_work *roc, *dep, *tmp;

	mutex_lock(&local->mtx);

	if (list_empty(&local->roc_list))
		goto out_unlock;

	roc = list_first_entry(&local->roc_list, struct ieee80211_roc_work,
			       list);

	if (!roc->started)
		goto out_unlock;

	roc->hw_begun = true;
	roc->hw_start_time = local->hw_roc_start_time;

	ieee80211_handle_roc_started(roc);
	list_for_each_entry_safe(dep, tmp, &roc->dependents, list) {
		ieee80211_handle_roc_started(dep);

		if (dep->duration > roc->duration) {
			u32 dur = dep->duration;
			dep->duration = dur - roc->duration;
			roc->duration = dur;
			list_move(&dep->list, &roc->list);
		}
	}
 out_unlock:
	mutex_unlock(&local->mtx);
}

void ieee80211_ready_on_channel(struct ieee80211_hw *hw)
{
	struct ieee80211_local *local = hw_to_local(hw);

	local->hw_roc_start_time = jiffies;

	trace_api_ready_on_channel(local);

	ieee80211_queue_work(hw, &local->hw_roc_start);
}
EXPORT_SYMBOL_GPL(ieee80211_ready_on_channel);

void ieee80211_start_next_roc(struct ieee80211_local *local)
{
	struct ieee80211_roc_work *roc;

	lockdep_assert_held(&local->mtx);

	if (list_empty(&local->roc_list)) {
		ieee80211_run_deferred_scan(local);
		return;
	}

	roc = list_first_entry(&local->roc_list, struct ieee80211_roc_work,
			       list);

	if (WARN_ON_ONCE(roc->started))
		return;

	if (local->ops->remain_on_channel) {
		int ret, duration = roc->duration;

		/* XXX: duplicated, see ieee80211_start_roc_work() */
		if (!duration)
			duration = 10;

		ret = drv_remain_on_channel(local, roc->sdata, roc->chan,
					    duration, roc->type);

		roc->started = true;

		if (ret) {
			wiphy_warn(local->hw.wiphy,
				   "failed to start next HW ROC (%d)\n", ret);
			/*
			 * queue the work struct again to avoid recursion
			 * when multiple failures occur
			 */
			ieee80211_remain_on_channel_expired(&local->hw);
		}
	} else {
		/* delay it a bit */
		ieee80211_queue_delayed_work(&local->hw, &roc->work,
					     round_jiffies_relative(HZ/2));
	}
}

void ieee80211_roc_notify_destroy(struct ieee80211_roc_work *roc, bool free)
{
	struct ieee80211_roc_work *dep, *tmp;

	if (WARN_ON(roc->to_be_freed))
		return;

	/* was never transmitted */
	if (roc->frame) {
		cfg80211_mgmt_tx_status(&roc->sdata->wdev,
					(unsigned long)roc->frame,
					roc->frame->data, roc->frame->len,
					false, GFP_KERNEL);
		kfree_skb(roc->frame);
	}

	if (!roc->mgmt_tx_cookie)
		cfg80211_remain_on_channel_expired(&roc->sdata->wdev,
						   roc->cookie, roc->chan,
						   GFP_KERNEL);

	list_for_each_entry_safe(dep, tmp, &roc->dependents, list)
		ieee80211_roc_notify_destroy(dep, true);

	if (free)
		kfree(roc);
	else
		roc->to_be_freed = true;
}

void ieee80211_sw_roc_work(struct work_struct *work)
{
	struct ieee80211_roc_work *roc =
		container_of(work, struct ieee80211_roc_work, work.work);
	struct ieee80211_sub_if_data *sdata = roc->sdata;
	struct ieee80211_local *local = sdata->local;
	bool started, on_channel;

	mutex_lock(&local->mtx);

	if (roc->to_be_freed)
		goto out_unlock;

	if (roc->abort)
		goto finish;

	if (WARN_ON(list_empty(&local->roc_list)))
		goto out_unlock;

	if (WARN_ON(roc != list_first_entry(&local->roc_list,
					    struct ieee80211_roc_work,
					    list)))
		goto out_unlock;

	if (!roc->started) {
		struct ieee80211_roc_work *dep;

		WARN_ON(local->use_chanctx);

		/* If actually operating on the desired channel (with at least
		 * 20 MHz channel width) don't stop all the operations but still
		 * treat it as though the ROC operation started properly, so
		 * other ROC operations won't interfere with this one.
		 */
		roc->on_channel = roc->chan == local->_oper_chandef.chan;

		/* start this ROC */
		ieee80211_recalc_idle(local);

		if (!roc->on_channel) {
			ieee80211_offchannel_stop_vifs(local);

			local->tmp_channel = roc->chan;
			ieee80211_hw_config(local, 0);
		}

		/* tell userspace or send frame */
		ieee80211_handle_roc_started(roc);
		list_for_each_entry(dep, &roc->dependents, list)
			ieee80211_handle_roc_started(dep);

		/* if it was pure TX, just finish right away */
		if (!roc->duration)
			goto finish;

		roc->started = true;
		ieee80211_queue_delayed_work(&local->hw, &roc->work,
					     msecs_to_jiffies(roc->duration));
	} else {
		/* finish this ROC */
 finish:
		list_del(&roc->list);
		started = roc->started;
		on_channel = roc->on_channel;
		ieee80211_roc_notify_destroy(roc, !roc->abort);

		if (started && !on_channel) {
			ieee80211_flush_queues(local, NULL);

			local->tmp_channel = NULL;
			ieee80211_hw_config(local, 0);

			ieee80211_offchannel_return(local);
		}

		ieee80211_recalc_idle(local);

		if (started)
			ieee80211_start_next_roc(local);
	}

 out_unlock:
	mutex_unlock(&local->mtx);
}

static void ieee80211_hw_roc_done(struct work_struct *work)
{
	struct ieee80211_local *local =
		container_of(work, struct ieee80211_local, hw_roc_done);
	struct ieee80211_roc_work *roc;

	mutex_lock(&local->mtx);

	if (list_empty(&local->roc_list))
		goto out_unlock;

	roc = list_first_entry(&local->roc_list, struct ieee80211_roc_work,
			       list);

	if (!roc->started)
		goto out_unlock;

	list_del(&roc->list);

	ieee80211_roc_notify_destroy(roc, true);

	/* if there's another roc, start it now */
	ieee80211_start_next_roc(local);

 out_unlock:
	mutex_unlock(&local->mtx);
}

void ieee80211_remain_on_channel_expired(struct ieee80211_hw *hw)
{
	struct ieee80211_local *local = hw_to_local(hw);

	trace_api_remain_on_channel_expired(local);

	ieee80211_queue_work(hw, &local->hw_roc_done);
}
EXPORT_SYMBOL_GPL(ieee80211_remain_on_channel_expired);

void ieee80211_roc_setup(struct ieee80211_local *local)
{
	INIT_WORK(&local->hw_roc_start, ieee80211_hw_roc_start);
	INIT_WORK(&local->hw_roc_done, ieee80211_hw_roc_done);
	INIT_LIST_HEAD(&local->roc_list);
}

void ieee80211_roc_purge(struct ieee80211_local *local,
			 struct ieee80211_sub_if_data *sdata)
{
	struct ieee80211_roc_work *roc, *tmp;
	LIST_HEAD(tmp_list);

	mutex_lock(&local->mtx);
	list_for_each_entry_safe(roc, tmp, &local->roc_list, list) {
		if (sdata && roc->sdata != sdata)
			continue;

		if (roc->started && local->ops->remain_on_channel) {
			/* can race, so ignore return value */
			drv_cancel_remain_on_channel(local);
		}

		list_move_tail(&roc->list, &tmp_list);
		roc->abort = true;
	}
	mutex_unlock(&local->mtx);

	list_for_each_entry_safe(roc, tmp, &tmp_list, list) {
		if (local->ops->remain_on_channel) {
			list_del(&roc->list);
			ieee80211_roc_notify_destroy(roc, true);
		} else {
			ieee80211_queue_delayed_work(&local->hw, &roc->work, 0);

			/* work will clean up etc */
			flush_delayed_work(&roc->work);
			WARN_ON(!roc->to_be_freed);
			kfree(roc);
		}
	}

	WARN_ON_ONCE(!list_empty(&tmp_list));
}
Commit	Line	Data
b203ffc3 JM	1	/*
	2	* Off-channel operation helpers
	3	*
	4	* Copyright 2003, Jouni Malinen <jkmaline@cc.hut.fi>
	5	* Copyright 2004, Instant802 Networks, Inc.
	6	* Copyright 2005, Devicescape Software, Inc.
	7	* Copyright 2006-2007 Jiri Benc <jbenc@suse.cz>
	8	* Copyright 2007, Michael Wu <flamingice@sourmilk.net>
	9	* Copyright 2009 Johannes Berg <johannes@sipsolutions.net>
	10	*
	11	* This program is free software; you can redistribute it and/or modify
	12	* it under the terms of the GNU General Public License version 2 as
	13	* published by the Free Software Foundation.
	14	*/
bc3b2d7f	15	#include <linux/export.h>
b203ffc3 JM	16	#include <net/mac80211.h>
b203ffc3 JM	17	#include "ieee80211_i.h"
2eb278e0	18	#include "driver-ops.h"
b203ffc3 JM	19
b203ffc3 JM	20	/*
b23b025f BG	21	* Tell our hardware to disable PS.
	22	* Optionally inform AP that we will go to sleep so that it will buffer
	23	* the frames while we are doing off-channel work. This is optional
	24	* because we may be doing work on-operating channel, and want our
	25	* hardware unconditionally awake, but still let the AP send us normal frames.
b203ffc3	26	*/
559cef99	27	static void ieee80211_offchannel_ps_enable(struct ieee80211_sub_if_data *sdata)
b203ffc3 JM	28	{
b203ffc3 JM	29	struct ieee80211_local *local = sdata->local;
4730d597	30	struct ieee80211_if_managed *ifmgd = &sdata->u.mgd;
b203ffc3 JM	31
	32	local->offchannel_ps_enabled = false;
	33
	34	/* FIXME: what to do when local->pspolling is true? */
	35
	36	del_timer_sync(&local->dynamic_ps_timer);
3bc3c0d7	37	del_timer_sync(&ifmgd->bcn_mon_timer);
4730d597 LR	38	del_timer_sync(&ifmgd->conn_mon_timer);
4730d597 LR	39
b203ffc3 JM	40	cancel_work_sync(&local->dynamic_ps_enable_work);
	41
	42	if (local->hw.conf.flags & IEEE80211_CONF_PS) {
	43	local->offchannel_ps_enabled = true;
	44	local->hw.conf.flags &= ~IEEE80211_CONF_PS;
	45	ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
	46	}
	47
559cef99 RM	48	if (!local->offchannel_ps_enabled \|\|
559cef99 RM	49	!(local->hw.flags & IEEE80211_HW_PS_NULLFUNC_STACK))
b203ffc3 JM	50	/*
	51	* If power save was enabled, no need to send a nullfunc
	52	* frame because AP knows that we are sleeping. But if the
	53	* hardware is creating the nullfunc frame for power save
	54	* status (ie. IEEE80211_HW_PS_NULLFUNC_STACK is not
	55	* enabled) and power save was enabled, the firmware just
	56	* sent a null frame with power save disabled. So we need
	57	* to send a new nullfunc frame to inform the AP that we
	58	* are again sleeping.
	59	*/
	60	ieee80211_send_nullfunc(local, sdata, 1);
	61	}
	62
	63	/* inform AP that we are awake again, unless power save is enabled */
	64	static void ieee80211_offchannel_ps_disable(struct ieee80211_sub_if_data *sdata)
	65	{
	66	struct ieee80211_local *local = sdata->local;
	67
	68	if (!local->ps_sdata)
	69	ieee80211_send_nullfunc(local, sdata, 0);
	70	else if (local->offchannel_ps_enabled) {
	71	/*
	72	* In !IEEE80211_HW_PS_NULLFUNC_STACK case the hardware
	73	* will send a nullfunc frame with the powersave bit set
	74	* even though the AP already knows that we are sleeping.
	75	* This could be avoided by sending a null frame with power
	76	* save bit disabled before enabling the power save, but
	77	* this doesn't gain anything.
	78	*
	79	* When IEEE80211_HW_PS_NULLFUNC_STACK is enabled, no need
	80	* to send a nullfunc frame because AP already knows that
	81	* we are sleeping, let's just enable power save mode in
	82	* hardware.
	83	*/
b23b025f BG	84	/* TODO: Only set hardware if CONF_PS changed?
	85	* TODO: Should we set offchannel_ps_enabled to false?
	86	*/
b203ffc3 JM	87	local->hw.conf.flags \|= IEEE80211_CONF_PS;
	88	ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
	89	} else if (local->hw.conf.dynamic_ps_timeout > 0) {
	90	/*
	91	* If IEEE80211_CONF_PS was not set and the dynamic_ps_timer
	92	* had been running before leaving the operating channel,
	93	* restart the timer now and send a nullfunc frame to inform
	94	* the AP that we are awake.
	95	*/
	96	ieee80211_send_nullfunc(local, sdata, 0);
	97	mod_timer(&local->dynamic_ps_timer, jiffies +
	98	msecs_to_jiffies(local->hw.conf.dynamic_ps_timeout));
	99	}
4730d597	100
3bc3c0d7	101	ieee80211_sta_reset_beacon_monitor(sdata);
4730d597	102	ieee80211_sta_reset_conn_monitor(sdata);
b203ffc3 JM	103	}
b203ffc3 JM	104
aacde9ee	105	void ieee80211_offchannel_stop_vifs(struct ieee80211_local *local)
b203ffc3 JM	106	{
	107	struct ieee80211_sub_if_data *sdata;
	108
fe57d9f5 JB	109	if (WARN_ON(local->use_chanctx))
	110	return;
	111
b23b025f BG	112	/*
	113	* notify the AP about us leaving the channel and stop all
	114	* STA interfaces.
	115	*/
6c17b77b	116
9c35d7d2 SF	117	/*
	118	* Stop queues and transmit all frames queued by the driver
	119	* before sending nullfunc to enable powersave at the AP.
	120	*/
445ea4e8	121	ieee80211_stop_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP,
6c17b77b	122	IEEE80211_QUEUE_STOP_REASON_OFFCHANNEL);
39ecc01d	123	ieee80211_flush_queues(local, NULL);
6c17b77b	124
b203ffc3 JM	125	mutex_lock(&local->iflist_mtx);
	126	list_for_each_entry(sdata, &local->interfaces, list) {
	127	if (!ieee80211_sdata_running(sdata))
	128	continue;
	129
f142c6b9 JB	130	if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE)
	131	continue;
	132
b23b025f BG	133	if (sdata->vif.type != NL80211_IFTYPE_MONITOR)
	134	set_bit(SDATA_STATE_OFFCHANNEL, &sdata->state);
	135
	136	/* Check to see if we should disable beaconing. */
d6a83228 JB	137	if (sdata->vif.bss_conf.enable_beacon) {
	138	set_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED,
	139	&sdata->state);
	140	sdata->vif.bss_conf.enable_beacon = false;
b203ffc3 JM	141	ieee80211_bss_info_change_notify(
b203ffc3 JM	142	sdata, BSS_CHANGED_BEACON_ENABLED);
d6a83228	143	}
b203ffc3	144
6c17b77b SF	145	if (sdata->vif.type == NL80211_IFTYPE_STATION &&
	146	sdata->u.mgd.associated)
	147	ieee80211_offchannel_ps_enable(sdata);
b203ffc3 JM	148	}
	149	mutex_unlock(&local->iflist_mtx);
	150	}
	151
aacde9ee	152	void ieee80211_offchannel_return(struct ieee80211_local *local)
b203ffc3 JM	153	{
	154	struct ieee80211_sub_if_data *sdata;
	155
fe57d9f5 JB	156	if (WARN_ON(local->use_chanctx))
	157	return;
	158
b203ffc3 JM	159	mutex_lock(&local->iflist_mtx);
b203ffc3 JM	160	list_for_each_entry(sdata, &local->interfaces, list) {
f142c6b9 JB	161	if (sdata->vif.type == NL80211_IFTYPE_P2P_DEVICE)
	162	continue;
	163
f6e8cb72 EP	164	if (sdata->vif.type != NL80211_IFTYPE_MONITOR)
	165	clear_bit(SDATA_STATE_OFFCHANNEL, &sdata->state);
	166
b203ffc3 JM	167	if (!ieee80211_sdata_running(sdata))
	168	continue;
	169
	170	/* Tell AP we're back */
aacde9ee SG	171	if (sdata->vif.type == NL80211_IFTYPE_STATION &&
	172	sdata->u.mgd.associated)
	173	ieee80211_offchannel_ps_disable(sdata);
b203ffc3	174
d6a83228 JB	175	if (test_and_clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED,
	176	&sdata->state)) {
	177	sdata->vif.bss_conf.enable_beacon = true;
b203ffc3 JM	178	ieee80211_bss_info_change_notify(
b203ffc3 JM	179	sdata, BSS_CHANGED_BEACON_ENABLED);
d6a83228	180	}
b203ffc3 JM	181	}
b203ffc3 JM	182	mutex_unlock(&local->iflist_mtx);
6c17b77b	183
445ea4e8	184	ieee80211_wake_queues_by_reason(&local->hw, IEEE80211_MAX_QUEUE_MAP,
6c17b77b	185	IEEE80211_QUEUE_STOP_REASON_OFFCHANNEL);
b203ffc3	186	}
21f83589	187
2eb278e0 JB	188	void ieee80211_handle_roc_started(struct ieee80211_roc_work *roc)
	189	{
	190	if (roc->notified)
	191	return;
	192
	193	if (roc->mgmt_tx_cookie) {
	194	if (!WARN_ON(!roc->frame)) {
55de908a JB	195	ieee80211_tx_skb_tid_band(roc->sdata, roc->frame, 7,
55de908a JB	196	roc->chan->band);
2eb278e0 JB	197	roc->frame = NULL;
	198	}
	199	} else {
50febf6a	200	cfg80211_ready_on_channel(&roc->sdata->wdev, roc->cookie,
42d97a59 JB	201	roc->chan, roc->req_duration,
42d97a59 JB	202	GFP_KERNEL);
2eb278e0 JB	203	}
	204
	205	roc->notified = true;
	206	}
	207
21f83589 JB	208	static void ieee80211_hw_roc_start(struct work_struct *work)
	209	{
	210	struct ieee80211_local *local =
	211	container_of(work, struct ieee80211_local, hw_roc_start);
2eb278e0	212	struct ieee80211_roc_work roc, dep, *tmp;
21f83589 JB	213
	214	mutex_lock(&local->mtx);
	215
2eb278e0 JB	216	if (list_empty(&local->roc_list))
2eb278e0 JB	217	goto out_unlock;
21f83589	218
2eb278e0 JB	219	roc = list_first_entry(&local->roc_list, struct ieee80211_roc_work,
	220	list);
	221
	222	if (!roc->started)
	223	goto out_unlock;
	224
	225	roc->hw_begun = true;
	226	roc->hw_start_time = local->hw_roc_start_time;
90fc4b3a	227
2eb278e0 JB	228	ieee80211_handle_roc_started(roc);
	229	list_for_each_entry_safe(dep, tmp, &roc->dependents, list) {
	230	ieee80211_handle_roc_started(dep);
	231
	232	if (dep->duration > roc->duration) {
	233	u32 dur = dep->duration;
	234	dep->duration = dur - roc->duration;
	235	roc->duration = dur;
a4ed5346	236	list_move(&dep->list, &roc->list);
2eb278e0 JB	237	}
	238	}
	239	out_unlock:
21f83589 JB	240	mutex_unlock(&local->mtx);
	241	}
	242
	243	void ieee80211_ready_on_channel(struct ieee80211_hw *hw)
	244	{
	245	struct ieee80211_local *local = hw_to_local(hw);
	246
2eb278e0 JB	247	local->hw_roc_start_time = jiffies;
2eb278e0 JB	248
21f83589 JB	249	trace_api_ready_on_channel(local);
	250
	251	ieee80211_queue_work(hw, &local->hw_roc_start);
	252	}
	253	EXPORT_SYMBOL_GPL(ieee80211_ready_on_channel);
	254
2eb278e0	255	void ieee80211_start_next_roc(struct ieee80211_local *local)
21f83589	256	{
2eb278e0	257	struct ieee80211_roc_work *roc;
21f83589	258
2eb278e0	259	lockdep_assert_held(&local->mtx);
21f83589	260
2eb278e0 JB	261	if (list_empty(&local->roc_list)) {
2eb278e0 JB	262	ieee80211_run_deferred_scan(local);
21f83589 JB	263	return;
	264	}
	265
2eb278e0 JB	266	roc = list_first_entry(&local->roc_list, struct ieee80211_roc_work,
2eb278e0 JB	267	list);
71ecfa18	268
0f6b3f59 JB	269	if (WARN_ON_ONCE(roc->started))
	270	return;
	271
2eb278e0 JB	272	if (local->ops->remain_on_channel) {
2eb278e0 JB	273	int ret, duration = roc->duration;
71ecfa18	274
2eb278e0 JB	275	/* XXX: duplicated, see ieee80211_start_roc_work() */
	276	if (!duration)
	277	duration = 10;
71ecfa18	278
49884568	279	ret = drv_remain_on_channel(local, roc->sdata, roc->chan,
d339d5ca	280	duration, roc->type);
2eb278e0 JB	281
	282	roc->started = true;
	283
	284	if (ret) {
	285	wiphy_warn(local->hw.wiphy,
	286	"failed to start next HW ROC (%d)\n", ret);
	287	/*
	288	* queue the work struct again to avoid recursion
	289	* when multiple failures occur
	290	*/
	291	ieee80211_remain_on_channel_expired(&local->hw);
	292	}
	293	} else {
	294	/* delay it a bit */
	295	ieee80211_queue_delayed_work(&local->hw, &roc->work,
	296	round_jiffies_relative(HZ/2));
	297	}
	298	}
	299
3fbd45ca	300	void ieee80211_roc_notify_destroy(struct ieee80211_roc_work *roc, bool free)
2eb278e0 JB	301	{
	302	struct ieee80211_roc_work dep, tmp;
	303
3fbd45ca JB	304	if (WARN_ON(roc->to_be_freed))
	305	return;
	306
2eb278e0 JB	307	/* was never transmitted */
2eb278e0 JB	308	if (roc->frame) {
71bbc994	309	cfg80211_mgmt_tx_status(&roc->sdata->wdev,
2eb278e0 JB	310	(unsigned long)roc->frame,
	311	roc->frame->data, roc->frame->len,
	312	false, GFP_KERNEL);
	313	kfree_skb(roc->frame);
71ecfa18 JB	314	}
71ecfa18 JB	315
2eb278e0	316	if (!roc->mgmt_tx_cookie)
71bbc994	317	cfg80211_remain_on_channel_expired(&roc->sdata->wdev,
50febf6a	318	roc->cookie, roc->chan,
42d97a59	319	GFP_KERNEL);
21f83589	320
2eb278e0	321	list_for_each_entry_safe(dep, tmp, &roc->dependents, list)
3fbd45ca	322	ieee80211_roc_notify_destroy(dep, true);
2eb278e0	323
3fbd45ca JB	324	if (free)
	325	kfree(roc);
	326	else
	327	roc->to_be_freed = true;
2eb278e0 JB	328	}
	329
	330	void ieee80211_sw_roc_work(struct work_struct *work)
	331	{
	332	struct ieee80211_roc_work *roc =
	333	container_of(work, struct ieee80211_roc_work, work.work);
	334	struct ieee80211_sub_if_data *sdata = roc->sdata;
	335	struct ieee80211_local *local = sdata->local;
d13ab64e	336	bool started, on_channel;
2eb278e0 JB	337
	338	mutex_lock(&local->mtx);
	339
3fbd45ca JB	340	if (roc->to_be_freed)
	341	goto out_unlock;
	342
2eb278e0 JB	343	if (roc->abort)
	344	goto finish;
	345
	346	if (WARN_ON(list_empty(&local->roc_list)))
	347	goto out_unlock;
	348
	349	if (WARN_ON(roc != list_first_entry(&local->roc_list,
	350	struct ieee80211_roc_work,
	351	list)))
	352	goto out_unlock;
	353
	354	if (!roc->started) {
	355	struct ieee80211_roc_work *dep;
	356
d13ab64e JB	357	WARN_ON(local->use_chanctx);
	358
	359	/* If actually operating on the desired channel (with at least
	360	* 20 MHz channel width) don't stop all the operations but still
	361	* treat it as though the ROC operation started properly, so
	362	* other ROC operations won't interfere with this one.
	363	*/
	364	roc->on_channel = roc->chan == local->_oper_chandef.chan;
21f83589	365
d13ab64e	366	/* start this ROC */
2eb278e0 JB	367	ieee80211_recalc_idle(local);
2eb278e0 JB	368
d13ab64e JB	369	if (!roc->on_channel) {
	370	ieee80211_offchannel_stop_vifs(local);
	371
	372	local->tmp_channel = roc->chan;
	373	ieee80211_hw_config(local, 0);
	374	}
2eb278e0 JB	375
	376	/* tell userspace or send frame */
	377	ieee80211_handle_roc_started(roc);
	378	list_for_each_entry(dep, &roc->dependents, list)
	379	ieee80211_handle_roc_started(dep);
	380
	381	/* if it was pure TX, just finish right away */
	382	if (!roc->duration)
	383	goto finish;
	384
	385	roc->started = true;
	386	ieee80211_queue_delayed_work(&local->hw, &roc->work,
	387	msecs_to_jiffies(roc->duration));
	388	} else {
	389	/* finish this ROC */
	390	finish:
	391	list_del(&roc->list);
4b4b8229	392	started = roc->started;
d13ab64e	393	on_channel = roc->on_channel;
3fbd45ca	394	ieee80211_roc_notify_destroy(roc, !roc->abort);
2eb278e0	395
d13ab64e	396	if (started && !on_channel) {
39ecc01d	397	ieee80211_flush_queues(local, NULL);
2eb278e0 JB	398
	399	local->tmp_channel = NULL;
	400	ieee80211_hw_config(local, 0);
	401
aacde9ee	402	ieee80211_offchannel_return(local);
2eb278e0 JB	403	}
	404
	405	ieee80211_recalc_idle(local);
	406
4b4b8229	407	if (started)
0f6b3f59	408	ieee80211_start_next_roc(local);
2eb278e0 JB	409	}
	410
	411	out_unlock:
	412	mutex_unlock(&local->mtx);
	413	}
	414
	415	static void ieee80211_hw_roc_done(struct work_struct *work)
	416	{
	417	struct ieee80211_local *local =
	418	container_of(work, struct ieee80211_local, hw_roc_done);
	419	struct ieee80211_roc_work *roc;
	420
	421	mutex_lock(&local->mtx);
	422
	423	if (list_empty(&local->roc_list))
	424	goto out_unlock;
	425
	426	roc = list_first_entry(&local->roc_list, struct ieee80211_roc_work,
	427	list);
	428
	429	if (!roc->started)
	430	goto out_unlock;
	431
	432	list_del(&roc->list);
	433
3fbd45ca	434	ieee80211_roc_notify_destroy(roc, true);
2eb278e0 JB	435
	436	/* if there's another roc, start it now */
	437	ieee80211_start_next_roc(local);
	438
2eb278e0	439	out_unlock:
21f83589 JB	440	mutex_unlock(&local->mtx);
	441	}
	442
	443	void ieee80211_remain_on_channel_expired(struct ieee80211_hw *hw)
	444	{
	445	struct ieee80211_local *local = hw_to_local(hw);
	446
	447	trace_api_remain_on_channel_expired(local);
	448
	449	ieee80211_queue_work(hw, &local->hw_roc_done);
	450	}
	451	EXPORT_SYMBOL_GPL(ieee80211_remain_on_channel_expired);
	452
2eb278e0	453	void ieee80211_roc_setup(struct ieee80211_local *local)
21f83589 JB	454	{
	455	INIT_WORK(&local->hw_roc_start, ieee80211_hw_roc_start);
	456	INIT_WORK(&local->hw_roc_done, ieee80211_hw_roc_done);
2eb278e0 JB	457	INIT_LIST_HEAD(&local->roc_list);
	458	}
	459
c8f994ee JB	460	void ieee80211_roc_purge(struct ieee80211_local *local,
c8f994ee JB	461	struct ieee80211_sub_if_data *sdata)
2eb278e0	462	{
2eb278e0 JB	463	struct ieee80211_roc_work roc, tmp;
	464	LIST_HEAD(tmp_list);
	465
	466	mutex_lock(&local->mtx);
	467	list_for_each_entry_safe(roc, tmp, &local->roc_list, list) {
c8f994ee	468	if (sdata && roc->sdata != sdata)
2eb278e0 JB	469	continue;
	470
	471	if (roc->started && local->ops->remain_on_channel) {
	472	/* can race, so ignore return value */
	473	drv_cancel_remain_on_channel(local);
	474	}
	475
	476	list_move_tail(&roc->list, &tmp_list);
	477	roc->abort = true;
	478	}
2eb278e0 JB	479	mutex_unlock(&local->mtx);
	480
	481	list_for_each_entry_safe(roc, tmp, &tmp_list, list) {
	482	if (local->ops->remain_on_channel) {
	483	list_del(&roc->list);
3fbd45ca	484	ieee80211_roc_notify_destroy(roc, true);
2eb278e0 JB	485	} else {
	486	ieee80211_queue_delayed_work(&local->hw, &roc->work, 0);
	487
	488	/* work will clean up etc */
	489	flush_delayed_work(&roc->work);
3fbd45ca JB	490	WARN_ON(!roc->to_be_freed);
3fbd45ca JB	491	kfree(roc);
2eb278e0 JB	492	}
	493	}
	494
	495	WARN_ON_ONCE(!list_empty(&tmp_list));
21f83589	496	}