// SPDX-License-Identifier: GPL-2.0 OR BSD-3-Clause
/*
 * Copyright (C) 2012-2014, 2018-2026 Intel Corporation
 * Copyright (C) 2013-2014 Intel Mobile Communications GmbH
 * Copyright (C) 2015-2017 Intel Deutschland GmbH
 */
#include <linux/etherdevice.h>
#include <linux/crc32.h>
#include <net/mac80211.h>
#include "iwl-io.h"
#include "iwl-prph.h"
#include "fw-api.h"
#include "mvm.h"
#include "time-event.h"
#include "iwl-utils.h"

const u8 iwl_mvm_ac_to_tx_fifo[] = {
        IWL_MVM_TX_FIFO_VO,
        IWL_MVM_TX_FIFO_VI,
        IWL_MVM_TX_FIFO_BE,
        IWL_MVM_TX_FIFO_BK,
};

const u8 iwl_mvm_ac_to_gen2_tx_fifo[] = {
        IWL_GEN2_EDCA_TX_FIFO_VO,
        IWL_GEN2_EDCA_TX_FIFO_VI,
        IWL_GEN2_EDCA_TX_FIFO_BE,
        IWL_GEN2_EDCA_TX_FIFO_BK,
        IWL_GEN2_TRIG_TX_FIFO_VO,
        IWL_GEN2_TRIG_TX_FIFO_VI,
        IWL_GEN2_TRIG_TX_FIFO_BE,
        IWL_GEN2_TRIG_TX_FIFO_BK,
};

const u8 iwl_mvm_ac_to_bz_tx_fifo[] = {
        IWL_BZ_EDCA_TX_FIFO_VO,
        IWL_BZ_EDCA_TX_FIFO_VI,
        IWL_BZ_EDCA_TX_FIFO_BE,
        IWL_BZ_EDCA_TX_FIFO_BK,
        IWL_BZ_TRIG_TX_FIFO_VO,
        IWL_BZ_TRIG_TX_FIFO_VI,
        IWL_BZ_TRIG_TX_FIFO_BE,
        IWL_BZ_TRIG_TX_FIFO_BK,
};

struct iwl_mvm_mac_iface_iterator_data {
        struct iwl_mvm *mvm;
        struct ieee80211_vif *vif;
        unsigned long available_mac_ids[BITS_TO_LONGS(NUM_MAC_INDEX_DRIVER)];
        unsigned long available_tsf_ids[BITS_TO_LONGS(NUM_TSF_IDS)];
        enum iwl_tsf_id preferred_tsf;
        bool found_vif;
};

static void iwl_mvm_mac_tsf_id_iter(void *_data, u8 *mac,
                                    struct ieee80211_vif *vif)
{
        struct iwl_mvm_mac_iface_iterator_data *data = _data;
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
        u16 min_bi;

        /* Skip the interface for which we are trying to assign a tsf_id  */
        if (vif == data->vif)
                return;

        /*
         * The TSF is a hardware/firmware resource, there are 4 and
         * the driver should assign and free them as needed. However,
         * there are cases where 2 MACs should share the same TSF ID
         * for the purpose of clock sync, an optimization to avoid
         * clock drift causing overlapping TBTTs/DTIMs for a GO and
         * client in the system.
         *
         * The firmware will decide according to the MAC type which
         * will be the leader and follower. Clients that need to sync
         * with a remote station will be the leader, and an AP or GO
         * will be the follower.
         *
         * Depending on the new interface type it can be following
         * or become the leader of an existing interface.
         */
        switch (data->vif->type) {
        case NL80211_IFTYPE_STATION:
                /*
                 * The new interface is a client, so if the one we're iterating
                 * is an AP, and the beacon interval of the AP is a multiple or
                 * divisor of the beacon interval of the client, the same TSF
                 * should be used to avoid drift between the new client and
                 * existing AP. The existing AP will get drift updates from the
                 * new client context in this case.
                 */
                if (vif->type != NL80211_IFTYPE_AP ||
                    data->preferred_tsf != NUM_TSF_IDS ||
                    !test_bit(mvmvif->tsf_id, data->available_tsf_ids))
                        break;

                min_bi = min(data->vif->bss_conf.beacon_int,
                             vif->bss_conf.beacon_int);

                if (!min_bi)
                        break;

                if ((data->vif->bss_conf.beacon_int -
                     vif->bss_conf.beacon_int) % min_bi == 0) {
                        data->preferred_tsf = mvmvif->tsf_id;
                        return;
                }
                break;

        case NL80211_IFTYPE_AP:
                /*
                 * The new interface is AP/GO, so if its beacon interval is a
                 * multiple or a divisor of the beacon interval of an existing
                 * interface, it should get drift updates from an existing
                 * client or use the same TSF as an existing GO. There's no
                 * drift between TSFs internally but if they used different
                 * TSFs then a new client MAC could update one of them and
                 * cause drift that way.
                 */
                if ((vif->type != NL80211_IFTYPE_AP &&
                     vif->type != NL80211_IFTYPE_STATION) ||
                    data->preferred_tsf != NUM_TSF_IDS ||
                    !test_bit(mvmvif->tsf_id, data->available_tsf_ids))
                        break;

                min_bi = min(data->vif->bss_conf.beacon_int,
                             vif->bss_conf.beacon_int);

                if (!min_bi)
                        break;

                if ((data->vif->bss_conf.beacon_int -
                     vif->bss_conf.beacon_int) % min_bi == 0) {
                        data->preferred_tsf = mvmvif->tsf_id;
                        return;
                }
                break;
        default:
                /*
                 * For all other interface types there's no need to
                 * take drift into account. Either they're exclusive
                 * like IBSS and monitor, or we don't care much about
                 * their TSF (like P2P Device), but we won't be able
                 * to share the TSF resource.
                 */
                break;
        }

        /*
         * Unless we exited above, we can't share the TSF resource
         * that the virtual interface we're iterating over is using
         * with the new one, so clear the available bit and if this
         * was the preferred one, reset that as well.
         */
        __clear_bit(mvmvif->tsf_id, data->available_tsf_ids);

        if (data->preferred_tsf == mvmvif->tsf_id)
                data->preferred_tsf = NUM_TSF_IDS;
}

static void iwl_mvm_mac_iface_iterator(void *_data, u8 *mac,
                                       struct ieee80211_vif *vif)
{
        struct iwl_mvm_mac_iface_iterator_data *data = _data;
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);

        /* Iterator may already find the interface being added -- skip it */
        if (vif == data->vif) {
                data->found_vif = true;
                return;
        }

        /* Mark MAC IDs as used by clearing the available bit, and
         * (below) mark TSFs as used if their existing use is not
         * compatible with the new interface type.
         * No locking or atomic bit operations are needed since the
         * data is on the stack of the caller function.
         */
        __clear_bit(mvmvif->id, data->available_mac_ids);

        /* find a suitable tsf_id */
        iwl_mvm_mac_tsf_id_iter(_data, mac, vif);
}

void iwl_mvm_mac_ctxt_recalc_tsf_id(struct iwl_mvm *mvm,
                                    struct ieee80211_vif *vif)
{
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
        struct iwl_mvm_mac_iface_iterator_data data = {
                .mvm = mvm,
                .vif = vif,
                .available_tsf_ids = { (1 << NUM_TSF_IDS) - 1 },
                /* no preference yet */
                .preferred_tsf = NUM_TSF_IDS,
        };

        ieee80211_iterate_active_interfaces_atomic(
                mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
                iwl_mvm_mac_tsf_id_iter, &data);

        if (data.preferred_tsf != NUM_TSF_IDS)
                mvmvif->tsf_id = data.preferred_tsf;
        else if (!test_bit(mvmvif->tsf_id, data.available_tsf_ids))
                mvmvif->tsf_id = find_first_bit(data.available_tsf_ids,
                                                NUM_TSF_IDS);
}

int iwl_mvm_mac_ctxt_init(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
{
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
        struct iwl_mvm_mac_iface_iterator_data data = {
                .mvm = mvm,
                .vif = vif,
                .available_mac_ids = { (1 << NUM_MAC_INDEX_DRIVER) - 1 },
                .available_tsf_ids = { (1 << NUM_TSF_IDS) - 1 },
                /* no preference yet */
                .preferred_tsf = NUM_TSF_IDS,
                .found_vif = false,
        };
        int ret;

        lockdep_assert_held(&mvm->mutex);

        /*
         * Allocate a MAC ID and a TSF for this MAC, along with the queues
         * and other resources.
         */

        /*
         * Before the iterator, we start with all MAC IDs and TSFs available.
         *
         * During iteration, all MAC IDs are cleared that are in use by other
         * virtual interfaces, and all TSF IDs are cleared that can't be used
         * by this new virtual interface because they're used by an interface
         * that can't share it with the new one.
         * At the same time, we check if there's a preferred TSF in the case
         * that we should share it with another interface.
         */

        /* MAC ID 0 should be used only for the managed/IBSS vif with non-MLO
         * FW API
         */
        if (!mvm->mld_api_is_used) {
                switch (vif->type) {
                case NL80211_IFTYPE_ADHOC:
                        break;
                case NL80211_IFTYPE_STATION:
                        if (!vif->p2p)
                                break;
                        fallthrough;
                default:
                        __clear_bit(0, data.available_mac_ids);
                }
        }

        ieee80211_iterate_active_interfaces_atomic(
                mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
                iwl_mvm_mac_iface_iterator, &data);

        /*
         * In the case we're getting here during resume, it's similar to
         * firmware restart, and with RESUME_ALL the iterator will find
         * the vif being added already.
         * We don't want to reassign any IDs in either case since doing
         * so would probably assign different IDs (as interfaces aren't
         * necessarily added in the same order), but the old IDs were
         * preserved anyway, so skip ID assignment for both resume and
         * recovery.
         */
        if (data.found_vif)
                return 0;

        /* Therefore, in recovery, we can't get here */
        if (WARN_ON_ONCE(test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)))
                return -EBUSY;

        mvmvif->id = find_first_bit(data.available_mac_ids,
                                    NUM_MAC_INDEX_DRIVER);
        if (mvmvif->id == NUM_MAC_INDEX_DRIVER) {
                IWL_ERR(mvm, "Failed to init MAC context - no free ID!\n");
                ret = -EIO;
                goto exit_fail;
        }

        if (data.preferred_tsf != NUM_TSF_IDS)
                mvmvif->tsf_id = data.preferred_tsf;
        else
                mvmvif->tsf_id = find_first_bit(data.available_tsf_ids,
                                                NUM_TSF_IDS);
        if (mvmvif->tsf_id == NUM_TSF_IDS) {
                IWL_ERR(mvm, "Failed to init MAC context - no free TSF!\n");
                ret = -EIO;
                goto exit_fail;
        }

        mvmvif->color = 0;

        INIT_LIST_HEAD(&mvmvif->time_event_data.list);
        mvmvif->time_event_data.id = TE_MAX;
        mvmvif->roc_activity = ROC_NUM_ACTIVITIES;

        iwl_mvm_init_link(&mvmvif->deflink);

        /* No need to allocate data queues to P2P Device MAC */
        if (vif->type == NL80211_IFTYPE_P2P_DEVICE)
                return 0;

        /* Allocate the CAB queue for softAP and GO interfaces */
        if (vif->type == NL80211_IFTYPE_AP ||
            vif->type == NL80211_IFTYPE_ADHOC) {
                /*
                 * For TVQM this will be overwritten later with the FW assigned
                 * queue value (when queue is enabled).
                 */
                mvmvif->deflink.cab_queue = IWL_MVM_DQA_GCAST_QUEUE;
        }

        return 0;

exit_fail:
        memset(mvmvif, 0, sizeof(struct iwl_mvm_vif));
        return ret;
}

static void iwl_mvm_ack_rates(struct iwl_mvm *mvm,
                              struct ieee80211_vif *vif,
                              enum nl80211_band band,
                              u8 *cck_rates, u8 *ofdm_rates)
{
        struct ieee80211_supported_band *sband;
        unsigned long basic = vif->bss_conf.basic_rates;
        int lowest_present_ofdm = 100;
        int lowest_present_cck = 100;
        u8 cck = 0;
        u8 ofdm = 0;
        int i;

        sband = mvm->hw->wiphy->bands[band];

        for_each_set_bit(i, &basic, BITS_PER_LONG) {
                int hw = sband->bitrates[i].hw_value;
                if (hw >= IWL_FIRST_OFDM_RATE) {
                        ofdm |= BIT(hw - IWL_FIRST_OFDM_RATE);
                        if (lowest_present_ofdm > hw)
                                lowest_present_ofdm = hw;
                } else {
                        BUILD_BUG_ON(IWL_FIRST_CCK_RATE != 0);

                        cck |= BIT(hw);
                        if (lowest_present_cck > hw)
                                lowest_present_cck = hw;
                }
        }

        /*
         * Now we've got the basic rates as bitmaps in the ofdm and cck
         * variables. This isn't sufficient though, as there might not
         * be all the right rates in the bitmap. E.g. if the only basic
         * rates are 5.5 Mbps and 11 Mbps, we still need to add 1 Mbps
         * and 6 Mbps because the 802.11-2007 standard says in 9.6:
         *
         *    [...] a STA responding to a received frame shall transmit
         *    its Control Response frame [...] at the highest rate in the
         *    BSSBasicRateSet parameter that is less than or equal to the
         *    rate of the immediately previous frame in the frame exchange
         *    sequence ([...]) and that is of the same modulation class
         *    ([...]) as the received frame. If no rate contained in the
         *    BSSBasicRateSet parameter meets these conditions, then the
         *    control frame sent in response to a received frame shall be
         *    transmitted at the highest mandatory rate of the PHY that is
         *    less than or equal to the rate of the received frame, and
         *    that is of the same modulation class as the received frame.
         *
         * As a consequence, we need to add all mandatory rates that are
         * lower than all of the basic rates to these bitmaps.
         */

        if (IWL_RATE_24M_INDEX < lowest_present_ofdm)
                ofdm |= IWL_RATE_BIT_MSK(24) >> IWL_FIRST_OFDM_RATE;
        if (IWL_RATE_12M_INDEX < lowest_present_ofdm)
                ofdm |= IWL_RATE_BIT_MSK(12) >> IWL_FIRST_OFDM_RATE;
        /* 6M already there or needed so always add */
        ofdm |= IWL_RATE_BIT_MSK(6) >> IWL_FIRST_OFDM_RATE;

        /*
         * CCK is a bit more complex with DSSS vs. HR/DSSS vs. ERP.
         * Note, however:
         *  - if no CCK rates are basic, it must be ERP since there must
         *    be some basic rates at all, so they're OFDM => ERP PHY
         *    (or we're in 5 GHz, and the cck bitmap will never be used)
         *  - if 11M is a basic rate, it must be ERP as well, so add 5.5M
         *  - if 5.5M is basic, 1M and 2M are mandatory
         *  - if 2M is basic, 1M is mandatory
         *  - if 1M is basic, that's the only valid ACK rate.
         * As a consequence, it's not as complicated as it sounds, just add
         * any lower rates to the ACK rate bitmap.
         */
        if (IWL_RATE_11M_INDEX < lowest_present_cck)
                cck |= IWL_RATE_BIT_MSK(11) >> IWL_FIRST_CCK_RATE;
        if (IWL_RATE_5M_INDEX < lowest_present_cck)
                cck |= IWL_RATE_BIT_MSK(5) >> IWL_FIRST_CCK_RATE;
        if (IWL_RATE_2M_INDEX < lowest_present_cck)
                cck |= IWL_RATE_BIT_MSK(2) >> IWL_FIRST_CCK_RATE;
        /* 1M already there or needed so always add */
        cck |= IWL_RATE_BIT_MSK(1) >> IWL_FIRST_CCK_RATE;

        *cck_rates = cck;
        *ofdm_rates = ofdm;
}

void iwl_mvm_set_fw_basic_rates(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
                                struct iwl_mvm_vif_link_info *link_info,
                                __le32 *cck_rates, __le32 *ofdm_rates)
{
        struct iwl_mvm_phy_ctxt *phy_ctxt;
        u8 cck_ack_rates = 0, ofdm_ack_rates = 0;
        enum nl80211_band band = NL80211_BAND_2GHZ;

        phy_ctxt = link_info->phy_ctxt;
        if (phy_ctxt && phy_ctxt->channel)
                band = phy_ctxt->channel->band;

        iwl_mvm_ack_rates(mvm, vif, band, &cck_ack_rates, &ofdm_ack_rates);

        *cck_rates = cpu_to_le32((u32)cck_ack_rates);
        *ofdm_rates = cpu_to_le32((u32)ofdm_ack_rates);
}

void iwl_mvm_set_fw_protection_flags(struct iwl_mvm *mvm,
                                     struct ieee80211_vif *vif,
                                     struct ieee80211_bss_conf *link_conf,
                                     __le32 *protection_flags, u32 ht_flag,
                                     u32 tgg_flag)
{
        /* for both sta and ap, ht_operation_mode hold the protection_mode */
        u8 protection_mode = link_conf->ht_operation_mode &
                                 IEEE80211_HT_OP_MODE_PROTECTION;
        bool ht_enabled = !!(link_conf->ht_operation_mode &
                             IEEE80211_HT_OP_MODE_PROTECTION);

        if (link_conf->use_cts_prot)
                *protection_flags |= cpu_to_le32(tgg_flag);

        IWL_DEBUG_RATE(mvm, "use_cts_prot %d, ht_operation_mode %d\n",
                       link_conf->use_cts_prot,
                       link_conf->ht_operation_mode);

        if (!ht_enabled)
                return;

        IWL_DEBUG_RATE(mvm, "protection mode set to %d\n", protection_mode);
        /*
         * See section 9.23.3.1 of IEEE 80211-2012.
         * Nongreenfield HT STAs Present is not supported.
         */
        switch (protection_mode) {
        case IEEE80211_HT_OP_MODE_PROTECTION_NONE:
                break;
        case IEEE80211_HT_OP_MODE_PROTECTION_NONMEMBER:
        case IEEE80211_HT_OP_MODE_PROTECTION_NONHT_MIXED:
                *protection_flags |= cpu_to_le32(ht_flag);
                break;
        case IEEE80211_HT_OP_MODE_PROTECTION_20MHZ:
                /* Protect when channel wider than 20MHz */
                if (link_conf->chanreq.oper.width > NL80211_CHAN_WIDTH_20)
                        *protection_flags |= cpu_to_le32(ht_flag);
                break;
        default:
                IWL_ERR(mvm, "Illegal protection mode %d\n",
                        protection_mode);
                break;
        }
}

void iwl_mvm_set_fw_qos_params(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
                               struct ieee80211_bss_conf *link_conf,
                               struct iwl_ac_qos *ac, __le32 *qos_flags)
{
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
        struct iwl_mvm_vif_link_info *mvm_link =
                mvmvif->link[link_conf->link_id];
        int i;

        if (!mvm_link)
                return;

        for (i = 0; i < IEEE80211_NUM_ACS; i++) {
                u8 txf = iwl_mvm_mac_ac_to_tx_fifo(mvm, i);
                u8 ucode_ac = iwl_mvm_mac80211_ac_to_ucode_ac(i);

                ac[ucode_ac].cw_min =
                        cpu_to_le16(mvm_link->queue_params[i].cw_min);
                ac[ucode_ac].cw_max =
                        cpu_to_le16(mvm_link->queue_params[i].cw_max);
                ac[ucode_ac].edca_txop =
                        cpu_to_le16(mvm_link->queue_params[i].txop * 32);
                ac[ucode_ac].aifsn = mvm_link->queue_params[i].aifs;
                ac[ucode_ac].fifos_mask = BIT(txf);
        }

        if (link_conf->qos)
                *qos_flags |= cpu_to_le32(MAC_QOS_FLG_UPDATE_EDCA);

        if (link_conf->chanreq.oper.width != NL80211_CHAN_WIDTH_20_NOHT)
                *qos_flags |= cpu_to_le32(MAC_QOS_FLG_TGN);
}

int iwl_mvm_get_mac_type(struct ieee80211_vif *vif)
{
        u32 mac_type = FW_MAC_TYPE_BSS_STA;

        switch (vif->type) {
        case NL80211_IFTYPE_STATION:
                if (vif->p2p)
                        mac_type = FW_MAC_TYPE_P2P_STA;
                else
                        mac_type = FW_MAC_TYPE_BSS_STA;
                break;
        case NL80211_IFTYPE_AP:
                mac_type = FW_MAC_TYPE_GO;
                break;
        case NL80211_IFTYPE_MONITOR:
                mac_type = FW_MAC_TYPE_LISTENER;
                break;
        case NL80211_IFTYPE_P2P_DEVICE:
                mac_type = FW_MAC_TYPE_P2P_DEVICE;
                break;
        case NL80211_IFTYPE_ADHOC:
                mac_type = FW_MAC_TYPE_IBSS;
                break;
        default:
                WARN_ON_ONCE(1);
        }
        return mac_type;
}

static void iwl_mvm_mac_ctxt_cmd_common(struct iwl_mvm *mvm,
                                        struct ieee80211_vif *vif,
                                        struct iwl_mac_ctx_cmd *cmd,
                                        const u8 *bssid_override,
                                        u32 action)
{
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
        const u8 *bssid = bssid_override ?: vif->bss_conf.bssid;
        u32 ht_flag;

        cmd->id_and_color = cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id,
                                                            mvmvif->color));
        cmd->action = cpu_to_le32(action);
        cmd->mac_type = cpu_to_le32(iwl_mvm_get_mac_type(vif));

        cmd->tsf_id = cpu_to_le32(mvmvif->tsf_id);

        memcpy(cmd->node_addr, vif->addr, ETH_ALEN);

        if (bssid)
                memcpy(cmd->bssid_addr, bssid, ETH_ALEN);
        else
                eth_broadcast_addr(cmd->bssid_addr);

        iwl_mvm_set_fw_basic_rates(mvm, vif, &mvmvif->deflink, &cmd->cck_rates,
                                   &cmd->ofdm_rates);

        cmd->cck_short_preamble =
                cpu_to_le32(vif->bss_conf.use_short_preamble ?
                            MAC_FLG_SHORT_PREAMBLE : 0);
        cmd->short_slot =
                cpu_to_le32(vif->bss_conf.use_short_slot ?
                            MAC_FLG_SHORT_SLOT : 0);

        cmd->filter_flags = 0;

        iwl_mvm_set_fw_qos_params(mvm, vif, &vif->bss_conf, cmd->ac,
                                  &cmd->qos_flags);

        /* The fw does not distinguish between ht and fat */
        ht_flag = MAC_PROT_FLG_HT_PROT | MAC_PROT_FLG_FAT_PROT;
        iwl_mvm_set_fw_protection_flags(mvm, vif, &vif->bss_conf,
                                        &cmd->protection_flags,
                                        ht_flag, MAC_PROT_FLG_TGG_PROTECT);
}

static int iwl_mvm_mac_ctxt_send_cmd(struct iwl_mvm *mvm,
                                     struct iwl_mac_ctx_cmd *cmd)
{
        int ret = iwl_mvm_send_cmd_pdu(mvm, MAC_CONTEXT_CMD, 0,
                                       sizeof(*cmd), cmd);
        if (ret)
                IWL_ERR(mvm, "Failed to send MAC_CONTEXT_CMD (action:%d): %d\n",
                        le32_to_cpu(cmd->action), ret);
        return ret;
}

void iwl_mvm_set_fw_dtim_tbtt(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
                              struct ieee80211_bss_conf *link_conf,
                              __le64 *dtim_tsf, __le32 *dtim_time,
                              __le32 *assoc_beacon_arrive_time)
{
        u32 dtim_offs;

        /*
         * The DTIM count counts down, so when it is N that means N
         * more beacon intervals happen until the DTIM TBTT. Therefore
         * add this to the current time. If that ends up being in the
         * future, the firmware will handle it.
         *
         * Also note that the system_timestamp (which we get here as
         * "sync_device_ts") and TSF timestamp aren't at exactly the
         * same offset in the frame -- the TSF is at the first symbol
         * of the TSF, the system timestamp is at signal acquisition
         * time. This means there's an offset between them of at most
         * a few hundred microseconds (24 * 8 bits + PLCP time gives
         * 384us in the longest case), this is currently not relevant
         * as the firmware wakes up around 2ms before the TBTT.
         */
        dtim_offs = link_conf->sync_dtim_count *
                        link_conf->beacon_int;
        /* convert TU to usecs */
        dtim_offs *= 1024;

        *dtim_tsf =
                cpu_to_le64(link_conf->sync_tsf + dtim_offs);
        *dtim_time =
                cpu_to_le32(link_conf->sync_device_ts + dtim_offs);
        *assoc_beacon_arrive_time =
                cpu_to_le32(link_conf->sync_device_ts);

        IWL_DEBUG_INFO(mvm, "DTIM TBTT is 0x%llx/0x%x, offset %d\n",
                       le64_to_cpu(*dtim_tsf),
                       le32_to_cpu(*dtim_time),
                       dtim_offs);
}

__le32 iwl_mvm_mac_ctxt_cmd_p2p_sta_get_oppps_ctwin(struct iwl_mvm *mvm,
                                                    struct ieee80211_vif *vif)
{
        struct ieee80211_p2p_noa_attr *noa =
                &vif->bss_conf.p2p_noa_attr;

        return cpu_to_le32(noa->oppps_ctwindow &
                        IEEE80211_P2P_OPPPS_CTWINDOW_MASK);
}

u32 iwl_mvm_mac_ctxt_cmd_sta_get_twt_policy(struct iwl_mvm *mvm,
                                            struct ieee80211_vif *vif)
{
        u32 twt_policy = 0;

        if (vif->bss_conf.twt_requester && IWL_MVM_USE_TWT)
                twt_policy |= TWT_SUPPORTED;
        if (vif->bss_conf.twt_protected)
                twt_policy |= PROTECTED_TWT_SUPPORTED;
        if (vif->bss_conf.twt_broadcast)
                twt_policy |= BROADCAST_TWT_SUPPORTED;

        return twt_policy;
}

static int iwl_mvm_mac_ctxt_cmd_sta(struct iwl_mvm *mvm,
                                    struct ieee80211_vif *vif,
                                    u32 action, bool force_assoc_off,
                                    const u8 *bssid_override)
{
        struct iwl_mac_ctx_cmd cmd = {};
        struct iwl_mac_data_sta *ctxt_sta;

        WARN_ON(vif->type != NL80211_IFTYPE_STATION);

        /* Fill the common data for all mac context types */
        iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, bssid_override, action);

        /*
         * We always want to hear MCAST frames, if we're not authorized yet,
         * we'll drop them.
         */
        cmd.filter_flags |= cpu_to_le32(MAC_FILTER_ACCEPT_GRP);

        if (vif->p2p) {
                cmd.p2p_sta.ctwin =
                        iwl_mvm_mac_ctxt_cmd_p2p_sta_get_oppps_ctwin(mvm, vif);

                ctxt_sta = &cmd.p2p_sta.sta;
        } else {
                ctxt_sta = &cmd.sta;
        }

        /* We need the dtim_period to set the MAC as associated */
        if (vif->cfg.assoc && vif->bss_conf.dtim_period &&
            !force_assoc_off) {
                struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);

                iwl_mvm_set_fw_dtim_tbtt(mvm, vif, &vif->bss_conf,
                                         &ctxt_sta->dtim_tsf,
                                         &ctxt_sta->dtim_time,
                                         &ctxt_sta->assoc_beacon_arrive_time);

                ctxt_sta->is_assoc = cpu_to_le32(1);

                if (!mvmvif->authorized &&
                    fw_has_capa(&mvm->fw->ucode_capa,
                                IWL_UCODE_TLV_CAPA_COEX_HIGH_PRIO))
                        ctxt_sta->data_policy |=
                                cpu_to_le32(COEX_HIGH_PRIORITY_ENABLE);
        } else {
                ctxt_sta->is_assoc = cpu_to_le32(0);

                /* Allow beacons to pass through as long as we are not
                 * associated, or we do not have dtim period information.
                 */
                cmd.filter_flags |= cpu_to_le32(MAC_FILTER_IN_BEACON);
        }

        ctxt_sta->bi = cpu_to_le32(vif->bss_conf.beacon_int);
        ctxt_sta->dtim_interval = cpu_to_le32(vif->bss_conf.beacon_int *
                                              vif->bss_conf.dtim_period);

        ctxt_sta->listen_interval = cpu_to_le32(mvm->hw->conf.listen_interval);
        ctxt_sta->assoc_id = cpu_to_le32(vif->cfg.aid);

        if (vif->probe_req_reg && vif->cfg.assoc && vif->p2p)
                cmd.filter_flags |= cpu_to_le32(MAC_FILTER_IN_PROBE_REQUEST);

        if (vif->bss_conf.he_support && !iwlwifi_mod_params.disable_11ax) {
                cmd.filter_flags |= cpu_to_le32(MAC_FILTER_IN_11AX);
                ctxt_sta->data_policy |=
                        cpu_to_le32(iwl_mvm_mac_ctxt_cmd_sta_get_twt_policy(mvm, vif));
        }


        return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
}

static int iwl_mvm_mac_ctxt_cmd_listener(struct iwl_mvm *mvm,
                                         struct ieee80211_vif *vif,
                                         u32 action)
{
        struct iwl_mac_ctx_cmd cmd = {};
        u32 tfd_queue_msk = 0;
        int ret;

        WARN_ON(vif->type != NL80211_IFTYPE_MONITOR);

        iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);

        cmd.filter_flags = cpu_to_le32(MAC_FILTER_IN_PROMISC |
                                       MAC_FILTER_IN_CONTROL_AND_MGMT |
                                       MAC_FILTER_IN_BEACON |
                                       MAC_FILTER_IN_PROBE_REQUEST |
                                       MAC_FILTER_IN_CRC32 |
                                       MAC_FILTER_ACCEPT_GRP);
        ieee80211_hw_set(mvm->hw, RX_INCLUDES_FCS);

        /*
         * the queue mask is only relevant for old TX API, and
         * mvm->snif_queue isn't set here (it's still set to
         * IWL_MVM_INVALID_QUEUE so the BIT() of it is UB)
         */
        if (!iwl_mvm_has_new_tx_api(mvm))
                tfd_queue_msk = BIT(mvm->snif_queue);

        /* Allocate sniffer station */
        ret = iwl_mvm_allocate_int_sta(mvm, &mvm->snif_sta, tfd_queue_msk,
                                       vif->type, IWL_STA_GENERAL_PURPOSE);
        if (ret)
                return ret;

        return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
}

static int iwl_mvm_mac_ctxt_cmd_ibss(struct iwl_mvm *mvm,
                                     struct ieee80211_vif *vif,
                                     u32 action)
{
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
        struct iwl_mac_ctx_cmd cmd = {};

        WARN_ON(vif->type != NL80211_IFTYPE_ADHOC);

        iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);

        cmd.filter_flags = cpu_to_le32(MAC_FILTER_IN_BEACON |
                                       MAC_FILTER_IN_PROBE_REQUEST |
                                       MAC_FILTER_ACCEPT_GRP);

        /* cmd.ibss.beacon_time/cmd.ibss.beacon_tsf are curently ignored */
        cmd.ibss.bi = cpu_to_le32(vif->bss_conf.beacon_int);

        /* TODO: Assumes that the beacon id == mac context id */
        cmd.ibss.beacon_template = cpu_to_le32(mvmvif->id);

        return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
}

struct iwl_mvm_go_iterator_data {
        bool go_active;
};

static void iwl_mvm_go_iterator(void *_data, u8 *mac, struct ieee80211_vif *vif)
{
        struct iwl_mvm_go_iterator_data *data = _data;
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);

        if (vif->type == NL80211_IFTYPE_AP && vif->p2p &&
            mvmvif->ap_ibss_active)
                data->go_active = true;
}

__le32 iwl_mac_ctxt_p2p_dev_has_extended_disc(struct iwl_mvm *mvm,
                                              struct ieee80211_vif *vif)
{
        struct iwl_mvm_go_iterator_data data = {};

        /*
         * This flag should be set to true when the P2P Device is
         * discoverable and there is at least another active P2P GO. Settings
         * this flag will allow the P2P Device to be discoverable on other
         * channels in addition to its listen channel.
         * Note that this flag should not be set in other cases as it opens the
         * Rx filters on all MAC and increases the number of interrupts.
         */
        ieee80211_iterate_active_interfaces_atomic(
                mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
                iwl_mvm_go_iterator, &data);

        return cpu_to_le32(data.go_active ? 1 : 0);
}

static int iwl_mvm_mac_ctxt_cmd_p2p_device(struct iwl_mvm *mvm,
                                           struct ieee80211_vif *vif,
                                           u32 action)
{
        struct iwl_mac_ctx_cmd cmd = {};

        WARN_ON(vif->type != NL80211_IFTYPE_P2P_DEVICE);

        iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);

        cmd.p2p_dev.is_disc_extended =
                iwl_mac_ctxt_p2p_dev_has_extended_disc(mvm, vif);

        /* Override the filter flags to accept only probe requests */
        cmd.filter_flags = cpu_to_le32(MAC_FILTER_IN_PROBE_REQUEST);

        return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
}

void iwl_mvm_mac_ctxt_set_tim(struct iwl_mvm *mvm,
                              __le32 *tim_index, __le32 *tim_size,
                              u8 *beacon, u32 frame_size)
{
        u32 tim_idx;
        struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)beacon;

        /* The index is relative to frame start but we start looking at the
         * variable-length part of the beacon. */
        tim_idx = mgmt->u.beacon.variable - beacon;

        /* Parse variable-length elements of beacon to find WLAN_EID_TIM */
        while ((tim_idx < (frame_size - 2)) &&
                        (beacon[tim_idx] != WLAN_EID_TIM))
                tim_idx += beacon[tim_idx+1] + 2;

        /* If TIM field was found, set variables */
        if ((tim_idx < (frame_size - 1)) && (beacon[tim_idx] == WLAN_EID_TIM)) {
                *tim_index = cpu_to_le32(tim_idx);
                *tim_size = cpu_to_le32((u32)beacon[tim_idx + 1]);
        } else {
                IWL_WARN(mvm, "Unable to find TIM Element in beacon\n");
        }
}

u8 iwl_mvm_mac_ctxt_get_lowest_rate(struct iwl_mvm *mvm,
                                    struct ieee80211_tx_info *info,
                                    struct ieee80211_vif *vif)
{
        struct ieee80211_supported_band *sband;
        unsigned long basic = vif->bss_conf.basic_rates;
        u16 lowest_cck = IWL_RATE_COUNT, lowest_ofdm = IWL_RATE_COUNT;
        u32 link_id = u32_get_bits(info->control.flags,
                                   IEEE80211_TX_CTRL_MLO_LINK);
        u8 band = info->band;
        u8 rate;
        u32 i;

        if (link_id < IEEE80211_LINK_UNSPECIFIED) {
                struct ieee80211_bss_conf *link_conf;

                rcu_read_lock();
                link_conf = rcu_dereference(vif->link_conf[link_id]);
                if (link_conf) {
                        basic = link_conf->basic_rates;
                        if (link_conf->chanreq.oper.chan)
                                band = link_conf->chanreq.oper.chan->band;
                }
                rcu_read_unlock();
        }

        sband = mvm->hw->wiphy->bands[band];
        for_each_set_bit(i, &basic, BITS_PER_LONG) {
                u16 hw = sband->bitrates[i].hw_value;

                if (hw >= IWL_FIRST_OFDM_RATE) {
                        if (lowest_ofdm > hw)
                                lowest_ofdm = hw;
                } else if (lowest_cck > hw) {
                        lowest_cck = hw;
                }
        }

        if (band == NL80211_BAND_2GHZ && !vif->p2p &&
            vif->type != NL80211_IFTYPE_P2P_DEVICE &&
            !(info->flags & IEEE80211_TX_CTL_NO_CCK_RATE)) {
                if (lowest_cck != IWL_RATE_COUNT)
                        rate = lowest_cck;
                else if (lowest_ofdm != IWL_RATE_COUNT)
                        rate = lowest_ofdm;
                else
                        rate = IWL_RATE_1M_INDEX;
        } else if (lowest_ofdm != IWL_RATE_COUNT) {
                rate = lowest_ofdm;
        } else {
                rate = IWL_RATE_6M_INDEX;
        }

        return rate;
}

u16 iwl_mvm_mac_ctxt_get_beacon_flags(const struct iwl_fw *fw, u8 rate_idx)
{
        bool is_new_rate = iwl_fw_lookup_cmd_ver(fw, BEACON_TEMPLATE_CMD, 0) > 10;
        u16 flags = 0;

        if (rate_idx <= IWL_LAST_CCK_RATE)
                flags |= is_new_rate ? IWL_MAC_BEACON_CCK
                          : IWL_MAC_BEACON_CCK_V1;

        if (iwl_fw_lookup_cmd_ver(fw, TX_CMD, 0) > 8)
                flags |= iwl_mvm_rate_idx_to_fw_idx(fw, rate_idx);
        else
                flags |= iwl_mvm_rate_idx_to_plcp(rate_idx);

        return flags;
}

u8 iwl_mvm_mac_ctxt_get_beacon_rate(struct iwl_mvm *mvm,
                                    struct ieee80211_tx_info *info,
                                    struct ieee80211_vif *vif)
{
        struct ieee80211_supported_band *sband =
                mvm->hw->wiphy->bands[info->band];
        u32 legacy = vif->bss_conf.beacon_tx_rate.control[info->band].legacy;

        /* if beacon rate was configured try using it */
        if (hweight32(legacy) == 1) {
                u32 rate = ffs(legacy) - 1;

                return sband->bitrates[rate].hw_value;
        }

        return iwl_mvm_mac_ctxt_get_lowest_rate(mvm, info, vif);
}

static void iwl_mvm_mac_ctxt_set_tx(struct iwl_mvm *mvm,
                                    struct ieee80211_vif *vif,
                                    struct sk_buff *beacon,
                                    struct iwl_tx_cmd_v6_params *tx_params)
{
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
        struct ieee80211_tx_info *info;
        u32 rate_n_flags = 0;
        u8 rate;
        u32 tx_flags;

        info = IEEE80211_SKB_CB(beacon);

        /* Set up TX command fields */
        tx_params->len = cpu_to_le16((u16)beacon->len);
        tx_params->sta_id = mvmvif->deflink.bcast_sta.sta_id;
        tx_params->life_time = cpu_to_le32(TX_CMD_LIFE_TIME_INFINITE);
        tx_flags = TX_CMD_FLG_SEQ_CTL | TX_CMD_FLG_TSF;
        tx_flags |=
                iwl_mvm_bt_coex_tx_prio(mvm, (void *)beacon->data, info, 0) <<
                                                TX_CMD_FLG_BT_PRIO_POS;
        tx_params->tx_flags = cpu_to_le32(tx_flags);

        if (!fw_has_capa(&mvm->fw->ucode_capa,
                         IWL_UCODE_TLV_CAPA_BEACON_ANT_SELECTION)) {
                iwl_mvm_toggle_tx_ant(mvm, &mvm->mgmt_last_antenna_idx);

                rate_n_flags |= BIT(mvm->mgmt_last_antenna_idx) <<
                                        RATE_MCS_ANT_POS;
        }

        rate = iwl_mvm_mac_ctxt_get_beacon_rate(mvm, info, vif);

        if (rate < IWL_FIRST_OFDM_RATE)
                rate_n_flags |= RATE_MCS_MOD_TYPE_CCK;
        else
                rate_n_flags |= RATE_MCS_MOD_TYPE_LEGACY_OFDM;

        rate_n_flags |= iwl_mvm_rate_idx_to_fw_idx(mvm->fw, rate);

        tx_params->rate_n_flags = iwl_mvm_v3_rate_to_fw(rate_n_flags,
                                                        mvm->fw_rates_ver);
}

int iwl_mvm_mac_ctxt_send_beacon_cmd(struct iwl_mvm *mvm,
                                     struct sk_buff *beacon,
                                     void *data, int len)
{
        struct iwl_host_cmd cmd = {
                .id = BEACON_TEMPLATE_CMD,
                .flags = CMD_ASYNC,
        };

        cmd.len[0] = len;
        cmd.data[0] = data;
        cmd.dataflags[0] = 0;
        cmd.len[1] = beacon->len;
        cmd.data[1] = beacon->data;
        cmd.dataflags[1] = IWL_HCMD_DFL_DUP;

        return iwl_mvm_send_cmd(mvm, &cmd);
}

static int iwl_mvm_mac_ctxt_send_beacon_v6(struct iwl_mvm *mvm,
                                           struct ieee80211_vif *vif,
                                           struct sk_buff *beacon)
{
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
        struct iwl_mac_beacon_cmd_v6 beacon_cmd = {};

        iwl_mvm_mac_ctxt_set_tx(mvm, vif, beacon, &beacon_cmd.tx);

        beacon_cmd.template_id = cpu_to_le32((u32)mvmvif->id);

        if (vif->type == NL80211_IFTYPE_AP)
                iwl_mvm_mac_ctxt_set_tim(mvm, &beacon_cmd.tim_idx,
                                         &beacon_cmd.tim_size,
                                         beacon->data, beacon->len);

        return iwl_mvm_mac_ctxt_send_beacon_cmd(mvm, beacon, &beacon_cmd,
                                                sizeof(beacon_cmd));
}

static int iwl_mvm_mac_ctxt_send_beacon_v7(struct iwl_mvm *mvm,
                                           struct ieee80211_vif *vif,
                                           struct sk_buff *beacon)
{
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
        struct iwl_mac_beacon_cmd_v7 beacon_cmd = {};

        iwl_mvm_mac_ctxt_set_tx(mvm, vif, beacon, &beacon_cmd.tx);

        beacon_cmd.template_id = cpu_to_le32((u32)mvmvif->id);

        if (vif->type == NL80211_IFTYPE_AP)
                iwl_mvm_mac_ctxt_set_tim(mvm, &beacon_cmd.tim_idx,
                                         &beacon_cmd.tim_size,
                                         beacon->data, beacon->len);

        beacon_cmd.csa_offset =
                cpu_to_le32(iwl_find_ie_offset(beacon->data,
                                               WLAN_EID_CHANNEL_SWITCH,
                                               beacon->len));
        beacon_cmd.ecsa_offset =
                cpu_to_le32(iwl_find_ie_offset(beacon->data,
                                               WLAN_EID_EXT_CHANSWITCH_ANN,
                                               beacon->len));

        return iwl_mvm_mac_ctxt_send_beacon_cmd(mvm, beacon, &beacon_cmd,
                                                sizeof(beacon_cmd));
}

bool iwl_mvm_enable_fils(struct iwl_mvm *mvm,
                         struct ieee80211_vif *vif,
                         struct ieee80211_chanctx_conf *ctx)
{
        if (vif->type != NL80211_IFTYPE_AP || IWL_MVM_DISABLE_AP_FILS)
                return false;

        if (cfg80211_channel_is_psc(ctx->def.chan))
                return true;

        return (ctx->def.chan->band == NL80211_BAND_6GHZ &&
                ctx->def.width >= NL80211_CHAN_WIDTH_80);
}

static int iwl_mvm_mac_ctxt_send_beacon_v9(struct iwl_mvm *mvm,
                                           struct ieee80211_vif *vif,
                                           struct sk_buff *beacon,
                                           struct ieee80211_bss_conf *link_conf)
{
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
        struct ieee80211_tx_info *info = IEEE80211_SKB_CB(beacon);
        struct iwl_mac_beacon_cmd beacon_cmd = {};
        u8 rate = iwl_mvm_mac_ctxt_get_beacon_rate(mvm, info, vif);
        u16 flags;
        struct ieee80211_chanctx_conf *ctx;
        int channel;
        flags = iwl_mvm_mac_ctxt_get_beacon_flags(mvm->fw, rate);

        /* Enable FILS on PSC channels only */
        rcu_read_lock();
        ctx = rcu_dereference(link_conf->chanctx_conf);
        channel = ieee80211_frequency_to_channel(ctx->def.chan->center_freq);
        WARN_ON(channel == 0);
        if (iwl_mvm_enable_fils(mvm, vif, ctx)) {
                flags |= iwl_fw_lookup_cmd_ver(mvm->fw, BEACON_TEMPLATE_CMD,
                                               0) > 10 ?
                        IWL_MAC_BEACON_FILS :
                        IWL_MAC_BEACON_FILS_V1;
                beacon_cmd.short_ssid =
                        cpu_to_le32(~crc32_le(~0, vif->cfg.ssid,
                                              vif->cfg.ssid_len));
        }
        rcu_read_unlock();

        beacon_cmd.flags = cpu_to_le16(flags);
        beacon_cmd.byte_cnt = cpu_to_le16((u16)beacon->len);

        if (WARN_ON(!mvmvif->link[link_conf->link_id]))
                return -EINVAL;

        if (iwl_fw_lookup_cmd_ver(mvm->fw, BEACON_TEMPLATE_CMD, 0) > 12)
                beacon_cmd.link_id =
                        cpu_to_le32(mvmvif->link[link_conf->link_id]->fw_link_id);
        else
                beacon_cmd.link_id = cpu_to_le32((u32)mvmvif->id);

        if (vif->type == NL80211_IFTYPE_AP)
                iwl_mvm_mac_ctxt_set_tim(mvm, &beacon_cmd.tim_idx,
                                         &beacon_cmd.tim_size,
                                         beacon->data, beacon->len);

        beacon_cmd.csa_offset =
                cpu_to_le32(iwl_find_ie_offset(beacon->data,
                                               WLAN_EID_CHANNEL_SWITCH,
                                               beacon->len));
        beacon_cmd.ecsa_offset =
                cpu_to_le32(iwl_find_ie_offset(beacon->data,
                                               WLAN_EID_EXT_CHANSWITCH_ANN,
                                               beacon->len));

        if (vif->type == NL80211_IFTYPE_AP &&
            iwl_fw_lookup_cmd_ver(mvm->fw, BEACON_TEMPLATE_CMD, 0) >= 14)
                beacon_cmd.btwt_offset =
                        cpu_to_le32(iwl_find_ie_offset(beacon->data,
                                                       WLAN_EID_S1G_TWT,
                                                       beacon->len));

        return iwl_mvm_mac_ctxt_send_beacon_cmd(mvm, beacon, &beacon_cmd,
                                                sizeof(beacon_cmd));
}

static int iwl_mvm_mac_ctxt_send_beacon(struct iwl_mvm *mvm,
                                        struct ieee80211_vif *vif,
                                        struct sk_buff *beacon,
                                        struct ieee80211_bss_conf *link_conf)
{
        if (WARN_ON(!beacon))
                return -EINVAL;

        if (IWL_MVM_NON_TRANSMITTING_AP)
                return 0;

        if (!fw_has_capa(&mvm->fw->ucode_capa,
                         IWL_UCODE_TLV_CAPA_CSA_AND_TBTT_OFFLOAD))
                return iwl_mvm_mac_ctxt_send_beacon_v6(mvm, vif, beacon);

        if (fw_has_api(&mvm->fw->ucode_capa,
                       IWL_UCODE_TLV_API_NEW_BEACON_TEMPLATE))
                return iwl_mvm_mac_ctxt_send_beacon_v9(mvm, vif, beacon,
                                                       link_conf);

        return iwl_mvm_mac_ctxt_send_beacon_v7(mvm, vif, beacon);
}

/* The beacon template for the AP/GO/IBSS has changed and needs update */
int iwl_mvm_mac_ctxt_beacon_changed(struct iwl_mvm *mvm,
                                    struct ieee80211_vif *vif,
                                    struct ieee80211_bss_conf *link_conf)
{
        struct sk_buff *beacon;
        int ret;

        WARN_ON(vif->type != NL80211_IFTYPE_AP &&
                vif->type != NL80211_IFTYPE_ADHOC);

        beacon = ieee80211_beacon_get_template(mvm->hw, vif, NULL,
                                               link_conf->link_id);
        if (!beacon)
                return -ENOMEM;

#ifdef CONFIG_IWLWIFI_DEBUGFS
        if (mvm->beacon_inject_active) {
                dev_kfree_skb(beacon);
                return -EBUSY;
        }
#endif

        ret = iwl_mvm_mac_ctxt_send_beacon(mvm, vif, beacon, link_conf);
        dev_kfree_skb(beacon);
        return ret;
}

struct iwl_mvm_mac_ap_iterator_data {
        struct iwl_mvm *mvm;
        struct ieee80211_vif *vif;
        u32 beacon_device_ts;
        u16 beacon_int;
};

/* Find the beacon_device_ts and beacon_int for a managed interface */
static void iwl_mvm_mac_ap_iterator(void *_data, u8 *mac,
                                    struct ieee80211_vif *vif)
{
        struct iwl_mvm_mac_ap_iterator_data *data = _data;

        if (vif->type != NL80211_IFTYPE_STATION || !vif->cfg.assoc)
                return;

        /* Station client has higher priority over P2P client*/
        if (vif->p2p && data->beacon_device_ts)
                return;

        data->beacon_device_ts = vif->bss_conf.sync_device_ts;
        data->beacon_int = vif->bss_conf.beacon_int;
}

/*
 * Fill the filter flags for mac context of type AP or P2P GO.
 */
void iwl_mvm_mac_ctxt_cmd_ap_set_filter_flags(struct iwl_mvm *mvm,
                                              struct iwl_mvm_vif *mvmvif,
                                              __le32 *filter_flags,
                                              int accept_probe_req_flag,
                                              int accept_beacon_flag)
{
        /*
         * in AP mode, pass probe requests and beacons from other APs
         * (needed for ht protection); when there're no any associated
         * station don't ask FW to pass beacons to prevent unnecessary
         * wake-ups.
         */
        *filter_flags |= cpu_to_le32(accept_probe_req_flag);
        if (mvmvif->ap_assoc_sta_count || !mvm->drop_bcn_ap_mode) {
                *filter_flags |= cpu_to_le32(accept_beacon_flag);
                IWL_DEBUG_HC(mvm, "Asking FW to pass beacons\n");
        } else {
                IWL_DEBUG_HC(mvm, "No need to receive beacons\n");
        }
}

/*
 * Fill the specific data for mac context of type AP of P2P GO
 */
static void iwl_mvm_mac_ctxt_cmd_fill_ap(struct iwl_mvm *mvm,
                                         struct ieee80211_vif *vif,
                                         struct iwl_mac_ctx_cmd *cmd,
                                         struct iwl_mac_data_ap *ctxt_ap,
                                         bool add)
{
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
        struct iwl_mvm_mac_ap_iterator_data data = {
                .mvm = mvm,
                .vif = vif,
                .beacon_device_ts = 0
        };

        /* in AP mode, the MCAST FIFO takes the EDCA params from VO */
        cmd->ac[IWL_MVM_TX_FIFO_VO].fifos_mask |= BIT(IWL_MVM_TX_FIFO_MCAST);

        iwl_mvm_mac_ctxt_cmd_ap_set_filter_flags(mvm, mvmvif,
                                                 &cmd->filter_flags,
                                                 MAC_FILTER_IN_PROBE_REQUEST,
                                                 MAC_FILTER_IN_BEACON);

        ctxt_ap->bi = cpu_to_le32(vif->bss_conf.beacon_int);
        ctxt_ap->dtim_interval = cpu_to_le32(vif->bss_conf.beacon_int *
                                             vif->bss_conf.dtim_period);

        if (!fw_has_api(&mvm->fw->ucode_capa,
                        IWL_UCODE_TLV_API_STA_TYPE))
                ctxt_ap->mcast_qid = cpu_to_le32(mvmvif->deflink.cab_queue);

        /*
         * Only set the beacon time when the MAC is being added, when we
         * just modify the MAC then we should keep the time -- the firmware
         * can otherwise have a "jumping" TBTT.
         */
        if (add) {
                /*
                 * If there is a station/P2P client interface which is
                 * associated, set the AP's TBTT far enough from the station's
                 * TBTT. Otherwise, set it to the current system time
                 */
                ieee80211_iterate_active_interfaces_atomic(
                        mvm->hw, IEEE80211_IFACE_ITER_RESUME_ALL,
                        iwl_mvm_mac_ap_iterator, &data);

                if (data.beacon_device_ts) {
                        u32 rand = get_random_u32_inclusive(36, 63);
                        mvmvif->ap_beacon_time = data.beacon_device_ts +
                                ieee80211_tu_to_usec(data.beacon_int * rand /
                                                     100);
                } else {
                        mvmvif->ap_beacon_time = iwl_mvm_get_systime(mvm);
                }
        }

        ctxt_ap->beacon_time = cpu_to_le32(mvmvif->ap_beacon_time);
        ctxt_ap->beacon_tsf = 0; /* unused */

        /* TODO: Assume that the beacon id == mac context id */
        ctxt_ap->beacon_template = cpu_to_le32(mvmvif->id);
}

static int iwl_mvm_mac_ctxt_cmd_ap(struct iwl_mvm *mvm,
                                   struct ieee80211_vif *vif,
                                   u32 action)
{
        struct iwl_mac_ctx_cmd cmd = {};

        WARN_ON(vif->type != NL80211_IFTYPE_AP || vif->p2p);

        /* Fill the common data for all mac context types */
        iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);

        /* Fill the data specific for ap mode */
        iwl_mvm_mac_ctxt_cmd_fill_ap(mvm, vif, &cmd, &cmd.ap,
                                     action == FW_CTXT_ACTION_ADD);

        return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
}

static int iwl_mvm_mac_ctxt_cmd_go(struct iwl_mvm *mvm,
                                   struct ieee80211_vif *vif,
                                   u32 action)
{
        struct iwl_mac_ctx_cmd cmd = {};
        struct ieee80211_p2p_noa_attr *noa = &vif->bss_conf.p2p_noa_attr;

        WARN_ON(vif->type != NL80211_IFTYPE_AP || !vif->p2p);

        /* Fill the common data for all mac context types */
        iwl_mvm_mac_ctxt_cmd_common(mvm, vif, &cmd, NULL, action);

        /* Fill the data specific for GO mode */
        iwl_mvm_mac_ctxt_cmd_fill_ap(mvm, vif, &cmd, &cmd.go.ap,
                                     action == FW_CTXT_ACTION_ADD);

        cmd.go.ctwin = cpu_to_le32(noa->oppps_ctwindow &
                                        IEEE80211_P2P_OPPPS_CTWINDOW_MASK);
        cmd.go.opp_ps_enabled =
                        cpu_to_le32(!!(noa->oppps_ctwindow &
                                        IEEE80211_P2P_OPPPS_ENABLE_BIT));

        return iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
}

static int iwl_mvm_mac_ctx_send(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
                                u32 action, bool force_assoc_off,
                                const u8 *bssid_override)
{
        switch (vif->type) {
        case NL80211_IFTYPE_STATION:
                return iwl_mvm_mac_ctxt_cmd_sta(mvm, vif, action,
                                                force_assoc_off,
                                                bssid_override);
        case NL80211_IFTYPE_AP:
                if (!vif->p2p)
                        return iwl_mvm_mac_ctxt_cmd_ap(mvm, vif, action);
                else
                        return iwl_mvm_mac_ctxt_cmd_go(mvm, vif, action);
        case NL80211_IFTYPE_MONITOR:
                return iwl_mvm_mac_ctxt_cmd_listener(mvm, vif, action);
        case NL80211_IFTYPE_P2P_DEVICE:
                return iwl_mvm_mac_ctxt_cmd_p2p_device(mvm, vif, action);
        case NL80211_IFTYPE_ADHOC:
                return iwl_mvm_mac_ctxt_cmd_ibss(mvm, vif, action);
        default:
                break;
        }

        return -EOPNOTSUPP;
}

int iwl_mvm_mac_ctxt_add(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
{
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
        int ret;

        if (WARN_ONCE(mvmvif->uploaded, "Adding active MAC %pM/%d\n",
                      vif->addr, ieee80211_vif_type_p2p(vif)))
                return -EIO;

        ret = iwl_mvm_mac_ctx_send(mvm, vif, FW_CTXT_ACTION_ADD,
                                   true, NULL);
        if (ret)
                return ret;

        /* will only do anything at resume from D3 time */
        iwl_mvm_set_last_nonqos_seq(mvm, vif);

        mvmvif->uploaded = true;
        return 0;
}

int iwl_mvm_mac_ctxt_changed(struct iwl_mvm *mvm, struct ieee80211_vif *vif,
                             bool force_assoc_off, const u8 *bssid_override)
{
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);

        if (WARN_ONCE(!mvmvif->uploaded, "Changing inactive MAC %pM/%d\n",
                      vif->addr, ieee80211_vif_type_p2p(vif)))
                return -EIO;

        return iwl_mvm_mac_ctx_send(mvm, vif, FW_CTXT_ACTION_MODIFY,
                                    force_assoc_off, bssid_override);
}

int iwl_mvm_mac_ctxt_remove(struct iwl_mvm *mvm, struct ieee80211_vif *vif)
{
        struct iwl_mvm_vif *mvmvif = iwl_mvm_vif_from_mac80211(vif);
        struct iwl_mac_ctx_cmd cmd;
        int ret;

        if (WARN_ONCE(!mvmvif->uploaded, "Removing inactive MAC %pM/%d\n",
                      vif->addr, ieee80211_vif_type_p2p(vif)))
                return -EIO;

        memset(&cmd, 0, sizeof(cmd));

        cmd.id_and_color = cpu_to_le32(FW_CMD_ID_AND_COLOR(mvmvif->id,
                                                           mvmvif->color));
        cmd.action = cpu_to_le32(FW_CTXT_ACTION_REMOVE);

        ret = iwl_mvm_mac_ctxt_send_cmd(mvm, &cmd);
        if (ret)
                return ret;

        mvmvif->uploaded = false;

        if (vif->type == NL80211_IFTYPE_MONITOR) {
                __clear_bit(IEEE80211_HW_RX_INCLUDES_FCS, mvm->hw->flags);
                iwl_mvm_dealloc_snif_sta(mvm);
        }

        return 0;
}

static void iwl_mvm_csa_count_down(struct iwl_mvm *mvm,
                                   struct ieee80211_vif *csa_vif, u32 gp2,
                                   bool tx_success)
{
        struct iwl_mvm_vif *mvmvif =
                        iwl_mvm_vif_from_mac80211(csa_vif);

        /* Don't start to countdown from a failed beacon */
        if (!tx_success && !mvmvif->csa_countdown)
                return;

        mvmvif->csa_countdown = true;

        if (!ieee80211_beacon_cntdwn_is_complete(csa_vif, 0)) {
                int c = ieee80211_beacon_update_cntdwn(csa_vif, 0);

                iwl_mvm_mac_ctxt_beacon_changed(mvm, csa_vif,
                                                &csa_vif->bss_conf);
                if (csa_vif->p2p &&
                    !iwl_mvm_te_scheduled(&mvmvif->time_event_data) && gp2 &&
                    tx_success) {
                        u32 rel_time = (c + 1) *
                                       csa_vif->bss_conf.beacon_int -
                                       IWL_MVM_CHANNEL_SWITCH_TIME_GO;
                        u32 apply_time = gp2 + rel_time * 1024;

                        iwl_mvm_schedule_csa_period(mvm, csa_vif,
                                         IWL_MVM_CHANNEL_SWITCH_TIME_GO -
                                         IWL_MVM_CHANNEL_SWITCH_MARGIN,
                                         apply_time);
                }
        } else if (!iwl_mvm_te_scheduled(&mvmvif->time_event_data)) {
                /* we don't have CSA NoA scheduled yet, switch now */
                ieee80211_csa_finish(csa_vif, 0);
                RCU_INIT_POINTER(mvm->csa_vif, NULL);
        }
}

void iwl_mvm_rx_beacon_notif(struct iwl_mvm *mvm,
                             struct iwl_rx_cmd_buffer *rxb)
{
        struct iwl_rx_packet *pkt = rxb_addr(rxb);
        unsigned int pkt_len = iwl_rx_packet_payload_len(pkt);
        struct ieee80211_vif *csa_vif;
        struct ieee80211_vif *tx_blocked_vif;
        struct agg_tx_status *agg_status;
        u32 beacon_gp2;
        u16 status;

        lockdep_assert_held(&mvm->mutex);

        if (!iwl_mvm_is_short_beacon_notif_supported(mvm)) {
                struct iwl_extended_beacon_notif_v5 *beacon = (void *)pkt->data;
                struct iwl_tx_resp *beacon_notify_hdr =
                        &beacon->beacon_notify_hdr;

                if (unlikely(pkt_len < sizeof(*beacon)))
                        return;

                beacon_gp2 = le32_to_cpu(beacon->gp2);

                mvm->ibss_manager = beacon->ibss_mgr_status != 0;
                agg_status = iwl_mvm_get_agg_status(mvm, beacon_notify_hdr);
                status = le16_to_cpu(agg_status->status) & TX_STATUS_MSK;
                IWL_DEBUG_RX(mvm,
                             "beacon status %#x retries:%d tsf:0x%016llX gp2:0x%X rate:%d\n",
                             status, beacon_notify_hdr->failure_frame,
                             le64_to_cpu(beacon->tsf),
                             beacon_gp2,
                             le32_to_cpu(beacon_notify_hdr->initial_rate));
        } else {
                const struct iwl_extended_beacon_notif *beacon =
                        (void *)pkt->data;

                if (unlikely(pkt_len < sizeof(*beacon)))
                        return;

                beacon_gp2 = le32_to_cpu(beacon->gp2);

                mvm->ibss_manager = beacon->ibss_mgr_status != 0;
                status = le32_to_cpu(beacon->status) & TX_STATUS_MSK;
                IWL_DEBUG_RX(mvm,
                             "beacon status %#x tsf:0x%016llX gp2:0x%X\n",
                             status, le64_to_cpu(beacon->tsf),
                             beacon_gp2);
        }

        csa_vif = rcu_dereference_protected(mvm->csa_vif,
                                            lockdep_is_held(&mvm->mutex));
        if (unlikely(csa_vif && csa_vif->bss_conf.csa_active))
                iwl_mvm_csa_count_down(mvm, csa_vif, beacon_gp2,
                                       (status == TX_STATUS_SUCCESS));

        tx_blocked_vif = rcu_dereference_protected(mvm->csa_tx_blocked_vif,
                                                lockdep_is_held(&mvm->mutex));
        if (unlikely(tx_blocked_vif)) {
                struct iwl_mvm_vif *mvmvif =
                        iwl_mvm_vif_from_mac80211(tx_blocked_vif);

                /*
                 * The channel switch is started and we have blocked the
                 * stations. If this is the first beacon (the timeout wasn't
                 * set), set the unblock timeout, otherwise countdown
                 */
                if (!mvm->csa_tx_block_bcn_timeout)
                        mvm->csa_tx_block_bcn_timeout =
                                IWL_MVM_CS_UNBLOCK_TX_TIMEOUT;
                else
                        mvm->csa_tx_block_bcn_timeout--;

                /* Check if the timeout is expired, and unblock tx */
                if (mvm->csa_tx_block_bcn_timeout == 0) {
                        iwl_mvm_modify_all_sta_disable_tx(mvm, mvmvif, false);
                        RCU_INIT_POINTER(mvm->csa_tx_blocked_vif, NULL);
                }
        }
}

static void
iwl_mvm_handle_missed_beacons_notif(struct iwl_mvm *mvm,
                                    const struct iwl_missed_beacons_notif *mb,
                                    struct iwl_rx_packet *pkt)
{
        struct iwl_fw_dbg_trigger_missed_bcon *bcon_trig;
        struct iwl_fw_dbg_trigger_tlv *trigger;
        u32 stop_trig_missed_bcon, stop_trig_missed_bcon_since_rx;
        u32 rx_missed_bcon, rx_missed_bcon_since_rx;
        struct ieee80211_vif *vif;
        /* Id can be mac/link id depending on the notification version */
        u32 id = le32_to_cpu(mb->link_id);
        union iwl_dbg_tlv_tp_data tp_data = { .fw_pkt = pkt };
        u32 mac_type;
        u8 notif_ver = iwl_fw_lookup_notif_ver(mvm->fw, LEGACY_GROUP,
                                               MISSED_BEACONS_NOTIFICATION,
                                               0);
        u8 new_notif_ver = iwl_fw_lookup_notif_ver(mvm->fw, MAC_CONF_GROUP,
                                                   MISSED_BEACONS_NOTIF, 0);

        /* If the firmware uses the new notification (from MAC_CONF_GROUP),
         * refer to that notification's version.
         * Note that the new notification from MAC_CONF_GROUP starts from
         * version 5.
         */
        if (new_notif_ver)
                notif_ver = new_notif_ver;

        IWL_DEBUG_INFO(mvm,
                       "missed bcn %s_id=%u, consecutive=%u (%u)\n",
                       notif_ver < 4 ? "mac" : "link",
                       id,
                       le32_to_cpu(mb->consec_missed_beacons),
                       le32_to_cpu(mb->consec_missed_beacons_since_last_rx));

        /*
         * starting from version 4 the ID is link ID, but driver
         * uses link ID == MAC ID, so always treat as MAC ID
         */
        vif = iwl_mvm_rcu_dereference_vif_id(mvm, id, false);
        if (!vif)
                return;

        mac_type = iwl_mvm_get_mac_type(vif);

        IWL_DEBUG_INFO(mvm, "missed beacon mac_type=%u,\n", mac_type);

        rx_missed_bcon = le32_to_cpu(mb->consec_missed_beacons);
        rx_missed_bcon_since_rx =
                le32_to_cpu(mb->consec_missed_beacons_since_last_rx);
        /*
         * TODO: the threshold should be adjusted based on latency conditions,
         * and/or in case of a CS flow on one of the other AP vifs.
         */
        if (rx_missed_bcon >= IWL_MVM_MISSED_BEACONS_THRESHOLD_LONG) {
                if (rx_missed_bcon_since_rx >= IWL_MVM_MISSED_BEACONS_SINCE_RX_THOLD) {
                        iwl_mvm_connection_loss(mvm, vif, "missed beacons");
                } else {
                        IWL_WARN(mvm,
                                 "missed beacons exceeds threshold, but receiving data. Stay connected, Expect bugs.\n");
                        IWL_WARN(mvm,
                                 "missed_beacons:%d, missed_beacons_since_rx:%d\n",
                                 rx_missed_bcon, rx_missed_bcon_since_rx);
                }
        } else if (rx_missed_bcon_since_rx > IWL_MVM_MISSED_BEACONS_THRESHOLD) {
                if (!iwl_mvm_has_new_tx_api(mvm))
                        ieee80211_beacon_loss(vif);
                else
                        ieee80211_cqm_beacon_loss_notify(vif, GFP_ATOMIC);
        }

        iwl_dbg_tlv_time_point(&mvm->fwrt,
                               IWL_FW_INI_TIME_POINT_MISSED_BEACONS, &tp_data);

        trigger = iwl_fw_dbg_trigger_on(&mvm->fwrt, ieee80211_vif_to_wdev(vif),
                                        FW_DBG_TRIGGER_MISSED_BEACONS);
        if (!trigger)
                return;

        bcon_trig = (void *)trigger->data;
        stop_trig_missed_bcon = le32_to_cpu(bcon_trig->stop_consec_missed_bcon);
        stop_trig_missed_bcon_since_rx =
                le32_to_cpu(bcon_trig->stop_consec_missed_bcon_since_rx);

        /* TODO: implement start trigger */

        if (rx_missed_bcon_since_rx >= stop_trig_missed_bcon_since_rx ||
            rx_missed_bcon >= stop_trig_missed_bcon)
                iwl_fw_dbg_collect_trig(&mvm->fwrt, trigger, NULL);
}

void iwl_mvm_rx_missed_beacons_notif(struct iwl_mvm *mvm,
                                     struct iwl_rx_cmd_buffer *rxb)
{
        struct iwl_rx_packet *pkt = rxb_addr(rxb);

        iwl_mvm_handle_missed_beacons_notif(mvm, (const void *)pkt->data, pkt);
}

void iwl_mvm_rx_missed_beacons_notif_legacy(struct iwl_mvm *mvm,
                                            struct iwl_rx_cmd_buffer *rxb)
{
        struct iwl_rx_packet *pkt = rxb_addr(rxb);
        const struct iwl_missed_beacons_notif_v4 *mb_v4 =
                (const void *)pkt->data;
        struct iwl_missed_beacons_notif mb = {
                .link_id = mb_v4->link_id,
                .consec_missed_beacons = mb_v4->consec_missed_beacons,
                .consec_missed_beacons_since_last_rx =
                        mb_v4->consec_missed_beacons_since_last_rx,
                .other_link_id = cpu_to_le32(IWL_MVM_FW_LINK_ID_INVALID),
        };

        iwl_mvm_handle_missed_beacons_notif(mvm, &mb, pkt);
}

void iwl_mvm_rx_stored_beacon_notif(struct iwl_mvm *mvm,
                                    struct iwl_rx_cmd_buffer *rxb)
{
        struct iwl_rx_packet *pkt = rxb_addr(rxb);
        unsigned int pkt_len = iwl_rx_packet_payload_len(pkt);
        struct iwl_stored_beacon_notif_common *sb = (void *)pkt->data;
        struct ieee80211_rx_status rx_status;
        struct sk_buff *skb;
        u8 *data;
        u32 size = le32_to_cpu(sb->byte_count);
        int ver = iwl_fw_lookup_cmd_ver(mvm->fw,
                                        WIDE_ID(PROT_OFFLOAD_GROUP, STORED_BEACON_NTF),
                                        0);

        if (size == 0)
                return;

        /* handle per-version differences */
        if (ver <= 2) {
                struct iwl_stored_beacon_notif_v2 *sb_v2 = (void *)pkt->data;

                if (pkt_len < struct_size(sb_v2, data, size))
                        return;

                data = sb_v2->data;
        } else {
                struct iwl_stored_beacon_notif *sb_v3 = (void *)pkt->data;

                if (pkt_len < struct_size(sb_v3, data, size))
                        return;

                data = sb_v3->data;
        }

        skb = alloc_skb(size, GFP_ATOMIC);
        if (!skb) {
                IWL_ERR(mvm, "alloc_skb failed\n");
                return;
        }

        /* update rx_status according to the notification's metadata */
        memset(&rx_status, 0, sizeof(rx_status));
        rx_status.mactime = le64_to_cpu(sb->tsf);
        /* TSF as indicated by the firmware  is at INA time */
        rx_status.flag |= RX_FLAG_MACTIME_PLCP_START;
        rx_status.device_timestamp = le32_to_cpu(sb->system_time);
        rx_status.band =
                (sb->band & cpu_to_le16(RX_RES_PHY_FLAGS_BAND_24)) ?
                                NL80211_BAND_2GHZ : NL80211_BAND_5GHZ;
        rx_status.freq =
                ieee80211_channel_to_frequency(le16_to_cpu(sb->channel),
                                               rx_status.band);

        /* copy the data */
        skb_put_data(skb, data, size);
        memcpy(IEEE80211_SKB_RXCB(skb), &rx_status, sizeof(rx_status));

        /* pass it as regular rx to mac80211 */
        ieee80211_rx_napi(mvm->hw, NULL, skb, NULL);
}

void iwl_mvm_probe_resp_data_notif(struct iwl_mvm *mvm,
                                   struct iwl_rx_cmd_buffer *rxb)
{
        struct iwl_rx_packet *pkt = rxb_addr(rxb);
        struct iwl_probe_resp_data_notif *notif = (void *)pkt->data;
        struct iwl_probe_resp_data *old_data, *new_data;
        u32 id = le32_to_cpu(notif->mac_id);
        struct ieee80211_vif *vif;
        struct iwl_mvm_vif *mvmvif;

        IWL_DEBUG_INFO(mvm, "Probe response data notif: noa %d, csa %d\n",
                       notif->noa_active, notif->csa_counter);

        vif = iwl_mvm_rcu_dereference_vif_id(mvm, id, false);
        if (!vif)
                return;

        mvmvif = iwl_mvm_vif_from_mac80211(vif);

        /*
         * len_low should be 2 + n*13 (where n is the number of descriptors.
         * 13 is the size of a NoA descriptor). We can have either one or two
         * descriptors.
         */
        if (IWL_FW_CHECK(mvm, notif->noa_active &&
                         notif->noa_attr.len_low != 2 +
                         sizeof(struct ieee80211_p2p_noa_desc) &&
                         notif->noa_attr.len_low != 2 +
                         sizeof(struct ieee80211_p2p_noa_desc) * 2,
                         "Invalid noa_attr.len_low (%d)\n",
                         notif->noa_attr.len_low))
                return;

        new_data = kzalloc_obj(*new_data);
        if (!new_data)
                return;

        memcpy(&new_data->notif, notif, sizeof(new_data->notif));

        /* noa_attr contains 1 reserved byte, need to substruct it */
        new_data->noa_len = sizeof(struct ieee80211_vendor_ie) +
                            sizeof(new_data->notif.noa_attr) - 1;

        /*
         * If it's a one time NoA, only one descriptor is needed,
         * adjust the length according to len_low.
         */
        if (new_data->notif.noa_attr.len_low ==
            sizeof(struct ieee80211_p2p_noa_desc) + 2)
                new_data->noa_len -= sizeof(struct ieee80211_p2p_noa_desc);

        old_data = rcu_dereference_protected(mvmvif->deflink.probe_resp_data,
                                             lockdep_is_held(&mvmvif->mvm->mutex));
        rcu_assign_pointer(mvmvif->deflink.probe_resp_data, new_data);

        if (old_data)
                kfree_rcu(old_data, rcu_head);

        if (notif->csa_counter != IWL_PROBE_RESP_DATA_NO_CSA &&
            notif->csa_counter >= 1)
                ieee80211_beacon_set_cntdwn(vif, notif->csa_counter);
}

void iwl_mvm_channel_switch_start_notif(struct iwl_mvm *mvm,
                                        struct iwl_rx_cmd_buffer *rxb)
{
        struct iwl_rx_packet *pkt = rxb_addr(rxb);
        struct ieee80211_vif *csa_vif, *vif;
        struct iwl_mvm_vif *mvmvif, *csa_mvmvif;
        u32 id_n_color, csa_id;
        /* save mac_id or link_id to use later to cancel csa if needed */
        u32 id;
        u32 mac_link_id = 0;
        u8 notif_ver = iwl_fw_lookup_notif_ver(mvm->fw, MAC_CONF_GROUP,
                                               CHANNEL_SWITCH_START_NOTIF, 0);
        bool csa_active;

        rcu_read_lock();

        if (notif_ver < 3) {
                struct iwl_channel_switch_start_notif_v1 *notif = (void *)pkt->data;
                u32 mac_id;

                id_n_color = le32_to_cpu(notif->id_and_color);
                mac_id = id_n_color & FW_CTXT_ID_MSK;

                vif = iwl_mvm_rcu_dereference_vif_id(mvm, mac_id, true);
                if (!vif)
                        goto out_unlock;

                id = mac_id;
                csa_active = vif->bss_conf.csa_active;
        } else {
                struct iwl_channel_switch_start_notif *notif = (void *)pkt->data;
                u32 link_id = le32_to_cpu(notif->link_id);

                /* we use link ID == MAC ID */
                vif = iwl_mvm_rcu_dereference_vif_id(mvm, link_id, true);
                if (!vif)
                        goto out_unlock;

                id = link_id;
                mac_link_id = vif->bss_conf.link_id;
                csa_active = vif->bss_conf.csa_active;
        }

        mvmvif = iwl_mvm_vif_from_mac80211(vif);
        if (notif_ver >= 3)
                id_n_color = FW_CMD_ID_AND_COLOR(mvmvif->id, mvmvif->color);

        switch (vif->type) {
        case NL80211_IFTYPE_AP:
                csa_vif = rcu_dereference(mvm->csa_vif);
                if (WARN_ON(!csa_vif || !csa_vif->bss_conf.csa_active ||
                            csa_vif != vif))
                        goto out_unlock;

                csa_mvmvif = iwl_mvm_vif_from_mac80211(csa_vif);
                csa_id = FW_CMD_ID_AND_COLOR(csa_mvmvif->id, csa_mvmvif->color);
                if (WARN(csa_id != id_n_color,
                         "channel switch noa notification on unexpected vif (csa_vif=%d, notif=%d)",
                         csa_id, id_n_color))
                        goto out_unlock;

                IWL_DEBUG_INFO(mvm, "Channel Switch Started Notification\n");

                schedule_delayed_work(&mvm->cs_tx_unblock_dwork,
                                      msecs_to_jiffies(IWL_MVM_CS_UNBLOCK_TX_TIMEOUT *
                                                       csa_vif->bss_conf.beacon_int));

                ieee80211_csa_finish(csa_vif, 0);

                rcu_read_unlock();

                RCU_INIT_POINTER(mvm->csa_vif, NULL);
                return;
        case NL80211_IFTYPE_STATION:
                /*
                 * if we don't know about an ongoing channel switch,
                 * make sure FW cancels it
                 */
                if (iwl_fw_lookup_notif_ver(mvm->fw, MAC_CONF_GROUP,
                                            CHANNEL_SWITCH_ERROR_NOTIF,
                                            0) && !csa_active) {
                        IWL_DEBUG_INFO(mvm, "Channel Switch was canceled\n");
                        iwl_mvm_cancel_channel_switch(mvm, vif, id);
                        break;
                }

                iwl_mvm_csa_client_absent(mvm, vif);
                cancel_delayed_work(&mvmvif->csa_work);
                ieee80211_chswitch_done(vif, true, mac_link_id);
                break;
        default:
                /* should never happen */
                WARN_ON_ONCE(1);
                break;
        }
out_unlock:
        rcu_read_unlock();
}

void iwl_mvm_channel_switch_error_notif(struct iwl_mvm *mvm,
                                        struct iwl_rx_cmd_buffer *rxb)
{
        struct iwl_rx_packet *pkt = rxb_addr(rxb);
        struct iwl_channel_switch_error_notif *notif = (void *)pkt->data;
        struct ieee80211_vif *vif;
        u32 id = le32_to_cpu(notif->link_id);
        u32 csa_err_mask = le32_to_cpu(notif->csa_err_mask);

        rcu_read_lock();
        vif = iwl_mvm_rcu_dereference_vif_id(mvm, id, true);
        if (!vif) {
                rcu_read_unlock();
                return;
        }

        IWL_DEBUG_INFO(mvm, "FW reports CSA error: id=%u, csa_err_mask=%u\n",
                       id, csa_err_mask);
        if (csa_err_mask & (CS_ERR_COUNT_ERROR |
                            CS_ERR_LONG_DELAY_AFTER_CS |
                            CS_ERR_TX_BLOCK_TIMER_EXPIRED))
                ieee80211_channel_switch_disconnect(vif);
        rcu_read_unlock();
}