1 /*
2  * Copyright (c) 2004-2011 Atheros Communications Inc.
3  * Copyright (c) 2011-2012 Qualcomm Atheros, Inc.
4  *
5  * Permission to use, copy, modify, and/or distribute this software for any
6  * purpose with or without fee is hereby granted, provided that the above
7  * copyright notice and this permission notice appear in all copies.
8  *
9  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16  */
17 
18 #include "core.h"
19 
20 #include <linux/skbuff.h>
21 #include <linux/fs.h>
22 #include <linux/vmalloc.h>
23 #include <linux/export.h>
24 
25 #include "debug.h"
26 #include "target.h"
27 
28 struct ath6kl_fwlog_slot {
29 	__le32 timestamp;
30 	__le32 length;
31 
32 	/* max ATH6KL_FWLOG_PAYLOAD_SIZE bytes */
33 	u8 payload[0];
34 };
35 
36 #define ATH6KL_FWLOG_MAX_ENTRIES 20
37 
38 #define ATH6KL_FWLOG_VALID_MASK 0x1ffff
39 
40 int ath6kl_printk(const char *level, const char *fmt, ...)
41 {
42 	struct va_format vaf;
43 	va_list args;
44 	int rtn;
45 
46 	va_start(args, fmt);
47 
48 	vaf.fmt = fmt;
49 	vaf.va = &args;
50 
51 	rtn = printk("%sath6kl: %pV", level, &vaf);
52 
53 	va_end(args);
54 
55 	return rtn;
56 }
57 EXPORT_SYMBOL(ath6kl_printk);
58 
59 #ifdef CONFIG_ATH6KL_DEBUG
60 
61 void ath6kl_dbg(enum ATH6K_DEBUG_MASK mask, const char *fmt, ...)
62 {
63 	struct va_format vaf;
64 	va_list args;
65 
66 	if (!(debug_mask & mask))
67 		return;
68 
69 	va_start(args, fmt);
70 
71 	vaf.fmt = fmt;
72 	vaf.va = &args;
73 
74 	ath6kl_printk(KERN_DEBUG, "%pV", &vaf);
75 
76 	va_end(args);
77 }
78 EXPORT_SYMBOL(ath6kl_dbg);
79 
80 void ath6kl_dbg_dump(enum ATH6K_DEBUG_MASK mask,
81 		     const char *msg, const char *prefix,
82 		     const void *buf, size_t len)
83 {
84 	if (debug_mask & mask) {
85 		if (msg)
86 			ath6kl_dbg(mask, "%s\n", msg);
87 
88 		print_hex_dump_bytes(prefix, DUMP_PREFIX_OFFSET, buf, len);
89 	}
90 }
91 EXPORT_SYMBOL(ath6kl_dbg_dump);
92 
93 #define REG_OUTPUT_LEN_PER_LINE	25
94 #define REGTYPE_STR_LEN		100
95 
96 struct ath6kl_diag_reg_info {
97 	u32 reg_start;
98 	u32 reg_end;
99 	const char *reg_info;
100 };
101 
102 static const struct ath6kl_diag_reg_info diag_reg[] = {
103 	{ 0x20000, 0x200fc, "General DMA and Rx registers" },
104 	{ 0x28000, 0x28900, "MAC PCU register & keycache" },
105 	{ 0x20800, 0x20a40, "QCU" },
106 	{ 0x21000, 0x212f0, "DCU" },
107 	{ 0x4000,  0x42e4, "RTC" },
108 	{ 0x540000, 0x540000 + (256 * 1024), "RAM" },
109 	{ 0x29800, 0x2B210, "Base Band" },
110 	{ 0x1C000, 0x1C748, "Analog" },
111 };
112 
113 void ath6kl_dump_registers(struct ath6kl_device *dev,
114 			   struct ath6kl_irq_proc_registers *irq_proc_reg,
115 			   struct ath6kl_irq_enable_reg *irq_enable_reg)
116 {
117 
118 	ath6kl_dbg(ATH6KL_DBG_IRQ, ("<------- Register Table -------->\n"));
119 
120 	if (irq_proc_reg != NULL) {
121 		ath6kl_dbg(ATH6KL_DBG_IRQ,
122 			   "Host Int status:           0x%x\n",
123 			   irq_proc_reg->host_int_status);
124 		ath6kl_dbg(ATH6KL_DBG_IRQ,
125 			   "CPU Int status:            0x%x\n",
126 			   irq_proc_reg->cpu_int_status);
127 		ath6kl_dbg(ATH6KL_DBG_IRQ,
128 			   "Error Int status:          0x%x\n",
129 			   irq_proc_reg->error_int_status);
130 		ath6kl_dbg(ATH6KL_DBG_IRQ,
131 			   "Counter Int status:        0x%x\n",
132 			   irq_proc_reg->counter_int_status);
133 		ath6kl_dbg(ATH6KL_DBG_IRQ,
134 			   "Mbox Frame:                0x%x\n",
135 			   irq_proc_reg->mbox_frame);
136 		ath6kl_dbg(ATH6KL_DBG_IRQ,
137 			   "Rx Lookahead Valid:        0x%x\n",
138 			   irq_proc_reg->rx_lkahd_valid);
139 		ath6kl_dbg(ATH6KL_DBG_IRQ,
140 			   "Rx Lookahead 0:            0x%x\n",
141 			   irq_proc_reg->rx_lkahd[0]);
142 		ath6kl_dbg(ATH6KL_DBG_IRQ,
143 			   "Rx Lookahead 1:            0x%x\n",
144 			   irq_proc_reg->rx_lkahd[1]);
145 
146 		if (dev->ar->mbox_info.gmbox_addr != 0) {
147 			/*
148 			 * If the target supports GMBOX hardware, dump some
149 			 * additional state.
150 			 */
151 			ath6kl_dbg(ATH6KL_DBG_IRQ,
152 				   "GMBOX Host Int status 2:   0x%x\n",
153 				   irq_proc_reg->host_int_status2);
154 			ath6kl_dbg(ATH6KL_DBG_IRQ,
155 				   "GMBOX RX Avail:            0x%x\n",
156 				   irq_proc_reg->gmbox_rx_avail);
157 			ath6kl_dbg(ATH6KL_DBG_IRQ,
158 				   "GMBOX lookahead alias 0:   0x%x\n",
159 				   irq_proc_reg->rx_gmbox_lkahd_alias[0]);
160 			ath6kl_dbg(ATH6KL_DBG_IRQ,
161 				   "GMBOX lookahead alias 1:   0x%x\n",
162 				   irq_proc_reg->rx_gmbox_lkahd_alias[1]);
163 		}
164 
165 	}
166 
167 	if (irq_enable_reg != NULL) {
168 		ath6kl_dbg(ATH6KL_DBG_IRQ,
169 			   "Int status Enable:         0x%x\n",
170 			   irq_enable_reg->int_status_en);
171 		ath6kl_dbg(ATH6KL_DBG_IRQ, "Counter Int status Enable: 0x%x\n",
172 			   irq_enable_reg->cntr_int_status_en);
173 	}
174 	ath6kl_dbg(ATH6KL_DBG_IRQ, "<------------------------------->\n");
175 }
176 
177 static void dump_cred_dist(struct htc_endpoint_credit_dist *ep_dist)
178 {
179 	ath6kl_dbg(ATH6KL_DBG_CREDIT,
180 		   "--- endpoint: %d  svc_id: 0x%X ---\n",
181 		   ep_dist->endpoint, ep_dist->svc_id);
182 	ath6kl_dbg(ATH6KL_DBG_CREDIT, " dist_flags     : 0x%X\n",
183 		   ep_dist->dist_flags);
184 	ath6kl_dbg(ATH6KL_DBG_CREDIT, " cred_norm      : %d\n",
185 		   ep_dist->cred_norm);
186 	ath6kl_dbg(ATH6KL_DBG_CREDIT, " cred_min       : %d\n",
187 		   ep_dist->cred_min);
188 	ath6kl_dbg(ATH6KL_DBG_CREDIT, " credits        : %d\n",
189 		   ep_dist->credits);
190 	ath6kl_dbg(ATH6KL_DBG_CREDIT, " cred_assngd    : %d\n",
191 		   ep_dist->cred_assngd);
192 	ath6kl_dbg(ATH6KL_DBG_CREDIT, " seek_cred      : %d\n",
193 		   ep_dist->seek_cred);
194 	ath6kl_dbg(ATH6KL_DBG_CREDIT, " cred_sz        : %d\n",
195 		   ep_dist->cred_sz);
196 	ath6kl_dbg(ATH6KL_DBG_CREDIT, " cred_per_msg   : %d\n",
197 		   ep_dist->cred_per_msg);
198 	ath6kl_dbg(ATH6KL_DBG_CREDIT, " cred_to_dist   : %d\n",
199 		   ep_dist->cred_to_dist);
200 	ath6kl_dbg(ATH6KL_DBG_CREDIT, " txq_depth      : %d\n",
201 		   get_queue_depth(&ep_dist->htc_ep->txq));
202 	ath6kl_dbg(ATH6KL_DBG_CREDIT,
203 		   "----------------------------------\n");
204 }
205 
206 /* FIXME: move to htc.c */
207 void dump_cred_dist_stats(struct htc_target *target)
208 {
209 	struct htc_endpoint_credit_dist *ep_list;
210 
211 	list_for_each_entry(ep_list, &target->cred_dist_list, list)
212 		dump_cred_dist(ep_list);
213 
214 	ath6kl_dbg(ATH6KL_DBG_CREDIT,
215 		   "credit distribution total %d free %d\n",
216 		   target->credit_info->total_avail_credits,
217 		   target->credit_info->cur_free_credits);
218 }
219 
220 static int ath6kl_debugfs_open(struct inode *inode, struct file *file)
221 {
222 	file->private_data = inode->i_private;
223 	return 0;
224 }
225 
226 void ath6kl_debug_war(struct ath6kl *ar, enum ath6kl_war war)
227 {
228 	switch (war) {
229 	case ATH6KL_WAR_INVALID_RATE:
230 		ar->debug.war_stats.invalid_rate++;
231 		break;
232 	}
233 }
234 
235 static ssize_t read_file_war_stats(struct file *file, char __user *user_buf,
236 				   size_t count, loff_t *ppos)
237 {
238 	struct ath6kl *ar = file->private_data;
239 	char *buf;
240 	unsigned int len = 0, buf_len = 1500;
241 	ssize_t ret_cnt;
242 
243 	buf = kzalloc(buf_len, GFP_KERNEL);
244 	if (!buf)
245 		return -ENOMEM;
246 
247 	len += scnprintf(buf + len, buf_len - len, "\n");
248 	len += scnprintf(buf + len, buf_len - len, "%25s\n",
249 			 "Workaround stats");
250 	len += scnprintf(buf + len, buf_len - len, "%25s\n\n",
251 			 "=================");
252 	len += scnprintf(buf + len, buf_len - len, "%20s %10u\n",
253 			 "Invalid rates", ar->debug.war_stats.invalid_rate);
254 
255 	if (WARN_ON(len > buf_len))
256 		len = buf_len;
257 
258 	ret_cnt = simple_read_from_buffer(user_buf, count, ppos, buf, len);
259 
260 	kfree(buf);
261 	return ret_cnt;
262 }
263 
264 static const struct file_operations fops_war_stats = {
265 	.read = read_file_war_stats,
266 	.open = ath6kl_debugfs_open,
267 	.owner = THIS_MODULE,
268 	.llseek = default_llseek,
269 };
270 
271 void ath6kl_debug_fwlog_event(struct ath6kl *ar, const void *buf, size_t len)
272 {
273 	struct ath6kl_fwlog_slot *slot;
274 	struct sk_buff *skb;
275 	size_t slot_len;
276 
277 	if (WARN_ON(len > ATH6KL_FWLOG_PAYLOAD_SIZE))
278 		return;
279 
280 	slot_len = sizeof(*slot) + ATH6KL_FWLOG_PAYLOAD_SIZE;
281 
282 	skb = alloc_skb(slot_len, GFP_KERNEL);
283 	if (!skb)
284 		return;
285 
286 	slot = (struct ath6kl_fwlog_slot *) skb_put(skb, slot_len);
287 	slot->timestamp = cpu_to_le32(jiffies);
288 	slot->length = cpu_to_le32(len);
289 	memcpy(slot->payload, buf, len);
290 
291 	/* Need to pad each record to fixed length ATH6KL_FWLOG_PAYLOAD_SIZE */
292 	memset(slot->payload + len, 0, ATH6KL_FWLOG_PAYLOAD_SIZE - len);
293 
294 	spin_lock(&ar->debug.fwlog_queue.lock);
295 
296 	__skb_queue_tail(&ar->debug.fwlog_queue, skb);
297 	complete(&ar->debug.fwlog_completion);
298 
299 	/* drop oldest entries */
300 	while (skb_queue_len(&ar->debug.fwlog_queue) >
301 	       ATH6KL_FWLOG_MAX_ENTRIES) {
302 		skb = __skb_dequeue(&ar->debug.fwlog_queue);
303 		kfree_skb(skb);
304 	}
305 
306 	spin_unlock(&ar->debug.fwlog_queue.lock);
307 
308 	return;
309 }
310 
311 static int ath6kl_fwlog_open(struct inode *inode, struct file *file)
312 {
313 	struct ath6kl *ar = inode->i_private;
314 
315 	if (ar->debug.fwlog_open)
316 		return -EBUSY;
317 
318 	ar->debug.fwlog_open = true;
319 
320 	file->private_data = inode->i_private;
321 	return 0;
322 }
323 
324 static int ath6kl_fwlog_release(struct inode *inode, struct file *file)
325 {
326 	struct ath6kl *ar = inode->i_private;
327 
328 	ar->debug.fwlog_open = false;
329 
330 	return 0;
331 }
332 
333 static ssize_t ath6kl_fwlog_read(struct file *file, char __user *user_buf,
334 				 size_t count, loff_t *ppos)
335 {
336 	struct ath6kl *ar = file->private_data;
337 	struct sk_buff *skb;
338 	ssize_t ret_cnt;
339 	size_t len = 0;
340 	char *buf;
341 
342 	buf = vmalloc(count);
343 	if (!buf)
344 		return -ENOMEM;
345 
346 	/* read undelivered logs from firmware */
347 	ath6kl_read_fwlogs(ar);
348 
349 	spin_lock(&ar->debug.fwlog_queue.lock);
350 
351 	while ((skb = __skb_dequeue(&ar->debug.fwlog_queue))) {
352 		if (skb->len > count - len) {
353 			/* not enough space, put skb back and leave */
354 			__skb_queue_head(&ar->debug.fwlog_queue, skb);
355 			break;
356 		}
357 
358 
359 		memcpy(buf + len, skb->data, skb->len);
360 		len += skb->len;
361 
362 		kfree_skb(skb);
363 	}
364 
365 	spin_unlock(&ar->debug.fwlog_queue.lock);
366 
367 	/* FIXME: what to do if len == 0? */
368 
369 	ret_cnt = simple_read_from_buffer(user_buf, count, ppos, buf, len);
370 
371 	vfree(buf);
372 
373 	return ret_cnt;
374 }
375 
376 static const struct file_operations fops_fwlog = {
377 	.open = ath6kl_fwlog_open,
378 	.release = ath6kl_fwlog_release,
379 	.read = ath6kl_fwlog_read,
380 	.owner = THIS_MODULE,
381 	.llseek = default_llseek,
382 };
383 
384 static ssize_t ath6kl_fwlog_block_read(struct file *file,
385 				       char __user *user_buf,
386 				       size_t count,
387 				       loff_t *ppos)
388 {
389 	struct ath6kl *ar = file->private_data;
390 	struct sk_buff *skb;
391 	ssize_t ret_cnt;
392 	size_t len = 0, not_copied;
393 	char *buf;
394 	int ret;
395 
396 	buf = vmalloc(count);
397 	if (!buf)
398 		return -ENOMEM;
399 
400 	spin_lock(&ar->debug.fwlog_queue.lock);
401 
402 	if (skb_queue_len(&ar->debug.fwlog_queue) == 0) {
403 		/* we must init under queue lock */
404 		init_completion(&ar->debug.fwlog_completion);
405 
406 		spin_unlock(&ar->debug.fwlog_queue.lock);
407 
408 		ret = wait_for_completion_interruptible(
409 			&ar->debug.fwlog_completion);
410 		if (ret == -ERESTARTSYS) {
411 			vfree(buf);
412 			return ret;
413 		}
414 
415 		spin_lock(&ar->debug.fwlog_queue.lock);
416 	}
417 
418 	while ((skb = __skb_dequeue(&ar->debug.fwlog_queue))) {
419 		if (skb->len > count - len) {
420 			/* not enough space, put skb back and leave */
421 			__skb_queue_head(&ar->debug.fwlog_queue, skb);
422 			break;
423 		}
424 
425 
426 		memcpy(buf + len, skb->data, skb->len);
427 		len += skb->len;
428 
429 		kfree_skb(skb);
430 	}
431 
432 	spin_unlock(&ar->debug.fwlog_queue.lock);
433 
434 	/* FIXME: what to do if len == 0? */
435 
436 	not_copied = copy_to_user(user_buf, buf, len);
437 	if (not_copied != 0) {
438 		ret_cnt = -EFAULT;
439 		goto out;
440 	}
441 
442 	*ppos = *ppos + len;
443 
444 	ret_cnt = len;
445 
446 out:
447 	vfree(buf);
448 
449 	return ret_cnt;
450 }
451 
452 static const struct file_operations fops_fwlog_block = {
453 	.open = ath6kl_fwlog_open,
454 	.release = ath6kl_fwlog_release,
455 	.read = ath6kl_fwlog_block_read,
456 	.owner = THIS_MODULE,
457 	.llseek = default_llseek,
458 };
459 
460 static ssize_t ath6kl_fwlog_mask_read(struct file *file, char __user *user_buf,
461 				      size_t count, loff_t *ppos)
462 {
463 	struct ath6kl *ar = file->private_data;
464 	char buf[16];
465 	int len;
466 
467 	len = snprintf(buf, sizeof(buf), "0x%x\n", ar->debug.fwlog_mask);
468 
469 	return simple_read_from_buffer(user_buf, count, ppos, buf, len);
470 }
471 
472 static ssize_t ath6kl_fwlog_mask_write(struct file *file,
473 				       const char __user *user_buf,
474 				       size_t count, loff_t *ppos)
475 {
476 	struct ath6kl *ar = file->private_data;
477 	int ret;
478 
479 	ret = kstrtou32_from_user(user_buf, count, 0, &ar->debug.fwlog_mask);
480 	if (ret)
481 		return ret;
482 
483 	ret = ath6kl_wmi_config_debug_module_cmd(ar->wmi,
484 						 ATH6KL_FWLOG_VALID_MASK,
485 						 ar->debug.fwlog_mask);
486 	if (ret)
487 		return ret;
488 
489 	return count;
490 }
491 
492 static const struct file_operations fops_fwlog_mask = {
493 	.open = ath6kl_debugfs_open,
494 	.read = ath6kl_fwlog_mask_read,
495 	.write = ath6kl_fwlog_mask_write,
496 	.owner = THIS_MODULE,
497 	.llseek = default_llseek,
498 };
499 
500 static ssize_t read_file_tgt_stats(struct file *file, char __user *user_buf,
501 				   size_t count, loff_t *ppos)
502 {
503 	struct ath6kl *ar = file->private_data;
504 	struct ath6kl_vif *vif;
505 	struct target_stats *tgt_stats;
506 	char *buf;
507 	unsigned int len = 0, buf_len = 1500;
508 	int i;
509 	long left;
510 	ssize_t ret_cnt;
511 
512 	vif = ath6kl_vif_first(ar);
513 	if (!vif)
514 		return -EIO;
515 
516 	tgt_stats = &vif->target_stats;
517 
518 	buf = kzalloc(buf_len, GFP_KERNEL);
519 	if (!buf)
520 		return -ENOMEM;
521 
522 	if (down_interruptible(&ar->sem)) {
523 		kfree(buf);
524 		return -EBUSY;
525 	}
526 
527 	set_bit(STATS_UPDATE_PEND, &vif->flags);
528 
529 	if (ath6kl_wmi_get_stats_cmd(ar->wmi, 0)) {
530 		up(&ar->sem);
531 		kfree(buf);
532 		return -EIO;
533 	}
534 
535 	left = wait_event_interruptible_timeout(ar->event_wq,
536 						!test_bit(STATS_UPDATE_PEND,
537 						&vif->flags), WMI_TIMEOUT);
538 
539 	up(&ar->sem);
540 
541 	if (left <= 0) {
542 		kfree(buf);
543 		return -ETIMEDOUT;
544 	}
545 
546 	len += scnprintf(buf + len, buf_len - len, "\n");
547 	len += scnprintf(buf + len, buf_len - len, "%25s\n",
548 			 "Target Tx stats");
549 	len += scnprintf(buf + len, buf_len - len, "%25s\n\n",
550 			 "=================");
551 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
552 			 "Ucast packets", tgt_stats->tx_ucast_pkt);
553 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
554 			 "Bcast packets", tgt_stats->tx_bcast_pkt);
555 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
556 			 "Ucast byte", tgt_stats->tx_ucast_byte);
557 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
558 			 "Bcast byte", tgt_stats->tx_bcast_byte);
559 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
560 			 "Rts success cnt", tgt_stats->tx_rts_success_cnt);
561 	for (i = 0; i < 4; i++)
562 		len += scnprintf(buf + len, buf_len - len,
563 				 "%18s %d %10llu\n", "PER on ac",
564 				 i, tgt_stats->tx_pkt_per_ac[i]);
565 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
566 			 "Error", tgt_stats->tx_err);
567 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
568 			 "Fail count", tgt_stats->tx_fail_cnt);
569 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
570 			 "Retry count", tgt_stats->tx_retry_cnt);
571 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
572 			 "Multi retry cnt", tgt_stats->tx_mult_retry_cnt);
573 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
574 			 "Rts fail cnt", tgt_stats->tx_rts_fail_cnt);
575 	len += scnprintf(buf + len, buf_len - len, "%25s %10llu\n\n",
576 			 "TKIP counter measure used",
577 			 tgt_stats->tkip_cnter_measures_invoked);
578 
579 	len += scnprintf(buf + len, buf_len - len, "%25s\n",
580 			 "Target Rx stats");
581 	len += scnprintf(buf + len, buf_len - len, "%25s\n",
582 			 "=================");
583 
584 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
585 			 "Ucast packets", tgt_stats->rx_ucast_pkt);
586 	len += scnprintf(buf + len, buf_len - len, "%20s %10d\n",
587 			 "Ucast Rate", tgt_stats->rx_ucast_rate);
588 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
589 			 "Bcast packets", tgt_stats->rx_bcast_pkt);
590 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
591 			 "Ucast byte", tgt_stats->rx_ucast_byte);
592 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
593 			 "Bcast byte", tgt_stats->rx_bcast_byte);
594 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
595 			 "Fragmented pkt", tgt_stats->rx_frgment_pkt);
596 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
597 			 "Error", tgt_stats->rx_err);
598 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
599 			 "CRC Err", tgt_stats->rx_crc_err);
600 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
601 			 "Key chache miss", tgt_stats->rx_key_cache_miss);
602 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
603 			 "Decrypt Err", tgt_stats->rx_decrypt_err);
604 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
605 			 "Duplicate frame", tgt_stats->rx_dupl_frame);
606 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
607 			 "Tkip Mic failure", tgt_stats->tkip_local_mic_fail);
608 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
609 			 "TKIP format err", tgt_stats->tkip_fmt_err);
610 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
611 			 "CCMP format Err", tgt_stats->ccmp_fmt_err);
612 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n\n",
613 			 "CCMP Replay Err", tgt_stats->ccmp_replays);
614 
615 	len += scnprintf(buf + len, buf_len - len, "%25s\n",
616 			 "Misc Target stats");
617 	len += scnprintf(buf + len, buf_len - len, "%25s\n",
618 			 "=================");
619 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
620 			 "Beacon Miss count", tgt_stats->cs_bmiss_cnt);
621 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
622 			 "Num Connects", tgt_stats->cs_connect_cnt);
623 	len += scnprintf(buf + len, buf_len - len, "%20s %10llu\n",
624 			 "Num disconnects", tgt_stats->cs_discon_cnt);
625 	len += scnprintf(buf + len, buf_len - len, "%20s %10d\n",
626 			 "Beacon avg rssi", tgt_stats->cs_ave_beacon_rssi);
627 	len += scnprintf(buf + len, buf_len - len, "%20s %10d\n",
628 			 "ARP pkt received", tgt_stats->arp_received);
629 	len += scnprintf(buf + len, buf_len - len, "%20s %10d\n",
630 			 "ARP pkt matched", tgt_stats->arp_matched);
631 	len += scnprintf(buf + len, buf_len - len, "%20s %10d\n",
632 			 "ARP pkt replied", tgt_stats->arp_replied);
633 
634 	if (len > buf_len)
635 		len = buf_len;
636 
637 	ret_cnt = simple_read_from_buffer(user_buf, count, ppos, buf, len);
638 
639 	kfree(buf);
640 	return ret_cnt;
641 }
642 
643 static const struct file_operations fops_tgt_stats = {
644 	.read = read_file_tgt_stats,
645 	.open = ath6kl_debugfs_open,
646 	.owner = THIS_MODULE,
647 	.llseek = default_llseek,
648 };
649 
650 #define print_credit_info(fmt_str, ep_list_field)		\
651 	(len += scnprintf(buf + len, buf_len - len, fmt_str,	\
652 			 ep_list->ep_list_field))
653 #define CREDIT_INFO_DISPLAY_STRING_LEN	200
654 #define CREDIT_INFO_LEN	128
655 
656 static ssize_t read_file_credit_dist_stats(struct file *file,
657 					   char __user *user_buf,
658 					   size_t count, loff_t *ppos)
659 {
660 	struct ath6kl *ar = file->private_data;
661 	struct htc_target *target = ar->htc_target;
662 	struct htc_endpoint_credit_dist *ep_list;
663 	char *buf;
664 	unsigned int buf_len, len = 0;
665 	ssize_t ret_cnt;
666 
667 	buf_len = CREDIT_INFO_DISPLAY_STRING_LEN +
668 		  get_queue_depth(&target->cred_dist_list) * CREDIT_INFO_LEN;
669 	buf = kzalloc(buf_len, GFP_KERNEL);
670 	if (!buf)
671 		return -ENOMEM;
672 
673 	len += scnprintf(buf + len, buf_len - len, "%25s%5d\n",
674 			 "Total Avail Credits: ",
675 			 target->credit_info->total_avail_credits);
676 	len += scnprintf(buf + len, buf_len - len, "%25s%5d\n",
677 			 "Free credits :",
678 			 target->credit_info->cur_free_credits);
679 
680 	len += scnprintf(buf + len, buf_len - len,
681 			 " Epid  Flags    Cred_norm  Cred_min  Credits  Cred_assngd"
682 			 "  Seek_cred  Cred_sz  Cred_per_msg  Cred_to_dist"
683 			 "  qdepth\n");
684 
685 	list_for_each_entry(ep_list, &target->cred_dist_list, list) {
686 		print_credit_info("  %2d", endpoint);
687 		print_credit_info("%10x", dist_flags);
688 		print_credit_info("%8d", cred_norm);
689 		print_credit_info("%9d", cred_min);
690 		print_credit_info("%9d", credits);
691 		print_credit_info("%10d", cred_assngd);
692 		print_credit_info("%13d", seek_cred);
693 		print_credit_info("%12d", cred_sz);
694 		print_credit_info("%9d", cred_per_msg);
695 		print_credit_info("%14d", cred_to_dist);
696 		len += scnprintf(buf + len, buf_len - len, "%12d\n",
697 				 get_queue_depth(&ep_list->htc_ep->txq));
698 	}
699 
700 	if (len > buf_len)
701 		len = buf_len;
702 
703 	ret_cnt = simple_read_from_buffer(user_buf, count, ppos, buf, len);
704 	kfree(buf);
705 	return ret_cnt;
706 }
707 
708 static const struct file_operations fops_credit_dist_stats = {
709 	.read = read_file_credit_dist_stats,
710 	.open = ath6kl_debugfs_open,
711 	.owner = THIS_MODULE,
712 	.llseek = default_llseek,
713 };
714 
715 static unsigned int print_endpoint_stat(struct htc_target *target, char *buf,
716 					unsigned int buf_len, unsigned int len,
717 					int offset, const char *name)
718 {
719 	int i;
720 	struct htc_endpoint_stats *ep_st;
721 	u32 *counter;
722 
723 	len += scnprintf(buf + len, buf_len - len, "%s:", name);
724 	for (i = 0; i < ENDPOINT_MAX; i++) {
725 		ep_st = &target->endpoint[i].ep_st;
726 		counter = ((u32 *) ep_st) + (offset / 4);
727 		len += scnprintf(buf + len, buf_len - len, " %u", *counter);
728 	}
729 	len += scnprintf(buf + len, buf_len - len, "\n");
730 
731 	return len;
732 }
733 
734 static ssize_t ath6kl_endpoint_stats_read(struct file *file,
735 					  char __user *user_buf,
736 					  size_t count, loff_t *ppos)
737 {
738 	struct ath6kl *ar = file->private_data;
739 	struct htc_target *target = ar->htc_target;
740 	char *buf;
741 	unsigned int buf_len, len = 0;
742 	ssize_t ret_cnt;
743 
744 	buf_len = sizeof(struct htc_endpoint_stats) / sizeof(u32) *
745 		(25 + ENDPOINT_MAX * 11);
746 	buf = kmalloc(buf_len, GFP_KERNEL);
747 	if (!buf)
748 		return -ENOMEM;
749 
750 #define EPSTAT(name)							\
751 	do {								\
752 		len = print_endpoint_stat(target, buf, buf_len, len,	\
753 					  offsetof(struct htc_endpoint_stats, \
754 						   name),		\
755 					  #name);			\
756 	} while (0)
757 
758 	EPSTAT(cred_low_indicate);
759 	EPSTAT(tx_issued);
760 	EPSTAT(tx_pkt_bundled);
761 	EPSTAT(tx_bundles);
762 	EPSTAT(tx_dropped);
763 	EPSTAT(tx_cred_rpt);
764 	EPSTAT(cred_rpt_from_rx);
765 	EPSTAT(cred_rpt_from_other);
766 	EPSTAT(cred_rpt_ep0);
767 	EPSTAT(cred_from_rx);
768 	EPSTAT(cred_from_other);
769 	EPSTAT(cred_from_ep0);
770 	EPSTAT(cred_cosumd);
771 	EPSTAT(cred_retnd);
772 	EPSTAT(rx_pkts);
773 	EPSTAT(rx_lkahds);
774 	EPSTAT(rx_bundl);
775 	EPSTAT(rx_bundle_lkahd);
776 	EPSTAT(rx_bundle_from_hdr);
777 	EPSTAT(rx_alloc_thresh_hit);
778 	EPSTAT(rxalloc_thresh_byte);
779 #undef EPSTAT
780 
781 	if (len > buf_len)
782 		len = buf_len;
783 
784 	ret_cnt = simple_read_from_buffer(user_buf, count, ppos, buf, len);
785 	kfree(buf);
786 	return ret_cnt;
787 }
788 
789 static ssize_t ath6kl_endpoint_stats_write(struct file *file,
790 					   const char __user *user_buf,
791 					   size_t count, loff_t *ppos)
792 {
793 	struct ath6kl *ar = file->private_data;
794 	struct htc_target *target = ar->htc_target;
795 	int ret, i;
796 	u32 val;
797 	struct htc_endpoint_stats *ep_st;
798 
799 	ret = kstrtou32_from_user(user_buf, count, 0, &val);
800 	if (ret)
801 		return ret;
802 	if (val == 0) {
803 		for (i = 0; i < ENDPOINT_MAX; i++) {
804 			ep_st = &target->endpoint[i].ep_st;
805 			memset(ep_st, 0, sizeof(*ep_st));
806 		}
807 	}
808 
809 	return count;
810 }
811 
812 static const struct file_operations fops_endpoint_stats = {
813 	.open = ath6kl_debugfs_open,
814 	.read = ath6kl_endpoint_stats_read,
815 	.write = ath6kl_endpoint_stats_write,
816 	.owner = THIS_MODULE,
817 	.llseek = default_llseek,
818 };
819 
820 static unsigned long ath6kl_get_num_reg(void)
821 {
822 	int i;
823 	unsigned long n_reg = 0;
824 
825 	for (i = 0; i < ARRAY_SIZE(diag_reg); i++)
826 		n_reg = n_reg +
827 		     (diag_reg[i].reg_end - diag_reg[i].reg_start) / 4 + 1;
828 
829 	return n_reg;
830 }
831 
832 static bool ath6kl_dbg_is_diag_reg_valid(u32 reg_addr)
833 {
834 	int i;
835 
836 	for (i = 0; i < ARRAY_SIZE(diag_reg); i++) {
837 		if (reg_addr >= diag_reg[i].reg_start &&
838 		    reg_addr <= diag_reg[i].reg_end)
839 			return true;
840 	}
841 
842 	return false;
843 }
844 
845 static ssize_t ath6kl_regread_read(struct file *file, char __user *user_buf,
846 				    size_t count, loff_t *ppos)
847 {
848 	struct ath6kl *ar = file->private_data;
849 	u8 buf[50];
850 	unsigned int len = 0;
851 
852 	if (ar->debug.dbgfs_diag_reg)
853 		len += scnprintf(buf + len, sizeof(buf) - len, "0x%x\n",
854 				ar->debug.dbgfs_diag_reg);
855 	else
856 		len += scnprintf(buf + len, sizeof(buf) - len,
857 				 "All diag registers\n");
858 
859 	return simple_read_from_buffer(user_buf, count, ppos, buf, len);
860 }
861 
862 static ssize_t ath6kl_regread_write(struct file *file,
863 				    const char __user *user_buf,
864 				    size_t count, loff_t *ppos)
865 {
866 	struct ath6kl *ar = file->private_data;
867 	unsigned long reg_addr;
868 
869 	if (kstrtoul_from_user(user_buf, count, 0, &reg_addr))
870 		return -EINVAL;
871 
872 	if ((reg_addr % 4) != 0)
873 		return -EINVAL;
874 
875 	if (reg_addr && !ath6kl_dbg_is_diag_reg_valid(reg_addr))
876 		return -EINVAL;
877 
878 	ar->debug.dbgfs_diag_reg = reg_addr;
879 
880 	return count;
881 }
882 
883 static const struct file_operations fops_diag_reg_read = {
884 	.read = ath6kl_regread_read,
885 	.write = ath6kl_regread_write,
886 	.open = ath6kl_debugfs_open,
887 	.owner = THIS_MODULE,
888 	.llseek = default_llseek,
889 };
890 
891 static int ath6kl_regdump_open(struct inode *inode, struct file *file)
892 {
893 	struct ath6kl *ar = inode->i_private;
894 	u8 *buf;
895 	unsigned long int reg_len;
896 	unsigned int len = 0, n_reg;
897 	u32 addr;
898 	__le32 reg_val;
899 	int i, status;
900 
901 	/* Dump all the registers if no register is specified */
902 	if (!ar->debug.dbgfs_diag_reg)
903 		n_reg = ath6kl_get_num_reg();
904 	else
905 		n_reg = 1;
906 
907 	reg_len = n_reg * REG_OUTPUT_LEN_PER_LINE;
908 	if (n_reg > 1)
909 		reg_len += REGTYPE_STR_LEN;
910 
911 	buf = vmalloc(reg_len);
912 	if (!buf)
913 		return -ENOMEM;
914 
915 	if (n_reg == 1) {
916 		addr = ar->debug.dbgfs_diag_reg;
917 
918 		status = ath6kl_diag_read32(ar,
919 				TARG_VTOP(ar->target_type, addr),
920 				(u32 *)&reg_val);
921 		if (status)
922 			goto fail_reg_read;
923 
924 		len += scnprintf(buf + len, reg_len - len,
925 				 "0x%06x 0x%08x\n", addr, le32_to_cpu(reg_val));
926 		goto done;
927 	}
928 
929 	for (i = 0; i < ARRAY_SIZE(diag_reg); i++) {
930 		len += scnprintf(buf + len, reg_len - len,
931 				"%s\n", diag_reg[i].reg_info);
932 		for (addr = diag_reg[i].reg_start;
933 		     addr <= diag_reg[i].reg_end; addr += 4) {
934 			status = ath6kl_diag_read32(ar,
935 					TARG_VTOP(ar->target_type, addr),
936 					(u32 *)&reg_val);
937 			if (status)
938 				goto fail_reg_read;
939 
940 			len += scnprintf(buf + len, reg_len - len,
941 					"0x%06x 0x%08x\n",
942 					addr, le32_to_cpu(reg_val));
943 		}
944 	}
945 
946 done:
947 	file->private_data = buf;
948 	return 0;
949 
950 fail_reg_read:
951 	ath6kl_warn("Unable to read memory:%u\n", addr);
952 	vfree(buf);
953 	return -EIO;
954 }
955 
956 static ssize_t ath6kl_regdump_read(struct file *file, char __user *user_buf,
957 				  size_t count, loff_t *ppos)
958 {
959 	u8 *buf = file->private_data;
960 	return simple_read_from_buffer(user_buf, count, ppos, buf, strlen(buf));
961 }
962 
963 static int ath6kl_regdump_release(struct inode *inode, struct file *file)
964 {
965 	vfree(file->private_data);
966 	return 0;
967 }
968 
969 static const struct file_operations fops_reg_dump = {
970 	.open = ath6kl_regdump_open,
971 	.read = ath6kl_regdump_read,
972 	.release = ath6kl_regdump_release,
973 	.owner = THIS_MODULE,
974 	.llseek = default_llseek,
975 };
976 
977 static ssize_t ath6kl_lrssi_roam_write(struct file *file,
978 				       const char __user *user_buf,
979 				       size_t count, loff_t *ppos)
980 {
981 	struct ath6kl *ar = file->private_data;
982 	unsigned long lrssi_roam_threshold;
983 
984 	if (kstrtoul_from_user(user_buf, count, 0, &lrssi_roam_threshold))
985 		return -EINVAL;
986 
987 	ar->lrssi_roam_threshold = lrssi_roam_threshold;
988 
989 	ath6kl_wmi_set_roam_lrssi_cmd(ar->wmi, ar->lrssi_roam_threshold);
990 
991 	return count;
992 }
993 
994 static ssize_t ath6kl_lrssi_roam_read(struct file *file,
995 				      char __user *user_buf,
996 				      size_t count, loff_t *ppos)
997 {
998 	struct ath6kl *ar = file->private_data;
999 	char buf[32];
1000 	unsigned int len;
1001 
1002 	len = snprintf(buf, sizeof(buf), "%u\n", ar->lrssi_roam_threshold);
1003 
1004 	return simple_read_from_buffer(user_buf, count, ppos, buf, len);
1005 }
1006 
1007 static const struct file_operations fops_lrssi_roam_threshold = {
1008 	.read = ath6kl_lrssi_roam_read,
1009 	.write = ath6kl_lrssi_roam_write,
1010 	.open = ath6kl_debugfs_open,
1011 	.owner = THIS_MODULE,
1012 	.llseek = default_llseek,
1013 };
1014 
1015 static ssize_t ath6kl_regwrite_read(struct file *file,
1016 				    char __user *user_buf,
1017 				    size_t count, loff_t *ppos)
1018 {
1019 	struct ath6kl *ar = file->private_data;
1020 	u8 buf[32];
1021 	unsigned int len = 0;
1022 
1023 	len = scnprintf(buf, sizeof(buf), "Addr: 0x%x Val: 0x%x\n",
1024 			ar->debug.diag_reg_addr_wr, ar->debug.diag_reg_val_wr);
1025 
1026 	return simple_read_from_buffer(user_buf, count, ppos, buf, len);
1027 }
1028 
1029 static ssize_t ath6kl_regwrite_write(struct file *file,
1030 				     const char __user *user_buf,
1031 				     size_t count, loff_t *ppos)
1032 {
1033 	struct ath6kl *ar = file->private_data;
1034 	char buf[32];
1035 	char *sptr, *token;
1036 	unsigned int len = 0;
1037 	u32 reg_addr, reg_val;
1038 
1039 	len = min(count, sizeof(buf) - 1);
1040 	if (copy_from_user(buf, user_buf, len))
1041 		return -EFAULT;
1042 
1043 	buf[len] = '\0';
1044 	sptr = buf;
1045 
1046 	token = strsep(&sptr, "=");
1047 	if (!token)
1048 		return -EINVAL;
1049 
1050 	if (kstrtou32(token, 0, &reg_addr))
1051 		return -EINVAL;
1052 
1053 	if (!ath6kl_dbg_is_diag_reg_valid(reg_addr))
1054 		return -EINVAL;
1055 
1056 	if (kstrtou32(sptr, 0, &reg_val))
1057 		return -EINVAL;
1058 
1059 	ar->debug.diag_reg_addr_wr = reg_addr;
1060 	ar->debug.diag_reg_val_wr = reg_val;
1061 
1062 	if (ath6kl_diag_write32(ar, ar->debug.diag_reg_addr_wr,
1063 				cpu_to_le32(ar->debug.diag_reg_val_wr)))
1064 		return -EIO;
1065 
1066 	return count;
1067 }
1068 
1069 static const struct file_operations fops_diag_reg_write = {
1070 	.read = ath6kl_regwrite_read,
1071 	.write = ath6kl_regwrite_write,
1072 	.open = ath6kl_debugfs_open,
1073 	.owner = THIS_MODULE,
1074 	.llseek = default_llseek,
1075 };
1076 
1077 int ath6kl_debug_roam_tbl_event(struct ath6kl *ar, const void *buf,
1078 				size_t len)
1079 {
1080 	const struct wmi_target_roam_tbl *tbl;
1081 	u16 num_entries;
1082 
1083 	if (len < sizeof(*tbl))
1084 		return -EINVAL;
1085 
1086 	tbl = (const struct wmi_target_roam_tbl *) buf;
1087 	num_entries = le16_to_cpu(tbl->num_entries);
1088 	if (sizeof(*tbl) + num_entries * sizeof(struct wmi_bss_roam_info) >
1089 	    len)
1090 		return -EINVAL;
1091 
1092 	if (ar->debug.roam_tbl == NULL ||
1093 	    ar->debug.roam_tbl_len < (unsigned int) len) {
1094 		kfree(ar->debug.roam_tbl);
1095 		ar->debug.roam_tbl = kmalloc(len, GFP_ATOMIC);
1096 		if (ar->debug.roam_tbl == NULL)
1097 			return -ENOMEM;
1098 	}
1099 
1100 	memcpy(ar->debug.roam_tbl, buf, len);
1101 	ar->debug.roam_tbl_len = len;
1102 
1103 	if (test_bit(ROAM_TBL_PEND, &ar->flag)) {
1104 		clear_bit(ROAM_TBL_PEND, &ar->flag);
1105 		wake_up(&ar->event_wq);
1106 	}
1107 
1108 	return 0;
1109 }
1110 
1111 static ssize_t ath6kl_roam_table_read(struct file *file, char __user *user_buf,
1112 				      size_t count, loff_t *ppos)
1113 {
1114 	struct ath6kl *ar = file->private_data;
1115 	int ret;
1116 	long left;
1117 	struct wmi_target_roam_tbl *tbl;
1118 	u16 num_entries, i;
1119 	char *buf;
1120 	unsigned int len, buf_len;
1121 	ssize_t ret_cnt;
1122 
1123 	if (down_interruptible(&ar->sem))
1124 		return -EBUSY;
1125 
1126 	set_bit(ROAM_TBL_PEND, &ar->flag);
1127 
1128 	ret = ath6kl_wmi_get_roam_tbl_cmd(ar->wmi);
1129 	if (ret) {
1130 		up(&ar->sem);
1131 		return ret;
1132 	}
1133 
1134 	left = wait_event_interruptible_timeout(
1135 		ar->event_wq, !test_bit(ROAM_TBL_PEND, &ar->flag), WMI_TIMEOUT);
1136 	up(&ar->sem);
1137 
1138 	if (left <= 0)
1139 		return -ETIMEDOUT;
1140 
1141 	if (ar->debug.roam_tbl == NULL)
1142 		return -ENOMEM;
1143 
1144 	tbl = (struct wmi_target_roam_tbl *) ar->debug.roam_tbl;
1145 	num_entries = le16_to_cpu(tbl->num_entries);
1146 
1147 	buf_len = 100 + num_entries * 100;
1148 	buf = kzalloc(buf_len, GFP_KERNEL);
1149 	if (buf == NULL)
1150 		return -ENOMEM;
1151 	len = 0;
1152 	len += scnprintf(buf + len, buf_len - len,
1153 			 "roam_mode=%u\n\n"
1154 			 "# roam_util bssid rssi rssidt last_rssi util bias\n",
1155 			 le16_to_cpu(tbl->roam_mode));
1156 
1157 	for (i = 0; i < num_entries; i++) {
1158 		struct wmi_bss_roam_info *info = &tbl->info[i];
1159 		len += scnprintf(buf + len, buf_len - len,
1160 				 "%d %pM %d %d %d %d %d\n",
1161 				 a_sle32_to_cpu(info->roam_util), info->bssid,
1162 				 info->rssi, info->rssidt, info->last_rssi,
1163 				 info->util, info->bias);
1164 	}
1165 
1166 	if (len > buf_len)
1167 		len = buf_len;
1168 
1169 	ret_cnt = simple_read_from_buffer(user_buf, count, ppos, buf, len);
1170 
1171 	kfree(buf);
1172 	return ret_cnt;
1173 }
1174 
1175 static const struct file_operations fops_roam_table = {
1176 	.read = ath6kl_roam_table_read,
1177 	.open = ath6kl_debugfs_open,
1178 	.owner = THIS_MODULE,
1179 	.llseek = default_llseek,
1180 };
1181 
1182 static ssize_t ath6kl_force_roam_write(struct file *file,
1183 				       const char __user *user_buf,
1184 				       size_t count, loff_t *ppos)
1185 {
1186 	struct ath6kl *ar = file->private_data;
1187 	int ret;
1188 	char buf[20];
1189 	size_t len;
1190 	u8 bssid[ETH_ALEN];
1191 	int i;
1192 	int addr[ETH_ALEN];
1193 
1194 	len = min(count, sizeof(buf) - 1);
1195 	if (copy_from_user(buf, user_buf, len))
1196 		return -EFAULT;
1197 	buf[len] = '\0';
1198 
1199 	if (sscanf(buf, "%02x:%02x:%02x:%02x:%02x:%02x",
1200 		   &addr[0], &addr[1], &addr[2], &addr[3], &addr[4], &addr[5])
1201 	    != ETH_ALEN)
1202 		return -EINVAL;
1203 	for (i = 0; i < ETH_ALEN; i++)
1204 		bssid[i] = addr[i];
1205 
1206 	ret = ath6kl_wmi_force_roam_cmd(ar->wmi, bssid);
1207 	if (ret)
1208 		return ret;
1209 
1210 	return count;
1211 }
1212 
1213 static const struct file_operations fops_force_roam = {
1214 	.write = ath6kl_force_roam_write,
1215 	.open = ath6kl_debugfs_open,
1216 	.owner = THIS_MODULE,
1217 	.llseek = default_llseek,
1218 };
1219 
1220 static ssize_t ath6kl_roam_mode_write(struct file *file,
1221 				      const char __user *user_buf,
1222 				      size_t count, loff_t *ppos)
1223 {
1224 	struct ath6kl *ar = file->private_data;
1225 	int ret;
1226 	char buf[20];
1227 	size_t len;
1228 	enum wmi_roam_mode mode;
1229 
1230 	len = min(count, sizeof(buf) - 1);
1231 	if (copy_from_user(buf, user_buf, len))
1232 		return -EFAULT;
1233 	buf[len] = '\0';
1234 	if (len > 0 && buf[len - 1] == '\n')
1235 		buf[len - 1] = '\0';
1236 
1237 	if (strcasecmp(buf, "default") == 0)
1238 		mode = WMI_DEFAULT_ROAM_MODE;
1239 	else if (strcasecmp(buf, "bssbias") == 0)
1240 		mode = WMI_HOST_BIAS_ROAM_MODE;
1241 	else if (strcasecmp(buf, "lock") == 0)
1242 		mode = WMI_LOCK_BSS_MODE;
1243 	else
1244 		return -EINVAL;
1245 
1246 	ret = ath6kl_wmi_set_roam_mode_cmd(ar->wmi, mode);
1247 	if (ret)
1248 		return ret;
1249 
1250 	return count;
1251 }
1252 
1253 static const struct file_operations fops_roam_mode = {
1254 	.write = ath6kl_roam_mode_write,
1255 	.open = ath6kl_debugfs_open,
1256 	.owner = THIS_MODULE,
1257 	.llseek = default_llseek,
1258 };
1259 
1260 void ath6kl_debug_set_keepalive(struct ath6kl *ar, u8 keepalive)
1261 {
1262 	ar->debug.keepalive = keepalive;
1263 }
1264 
1265 static ssize_t ath6kl_keepalive_read(struct file *file, char __user *user_buf,
1266 				     size_t count, loff_t *ppos)
1267 {
1268 	struct ath6kl *ar = file->private_data;
1269 	char buf[16];
1270 	int len;
1271 
1272 	len = snprintf(buf, sizeof(buf), "%u\n", ar->debug.keepalive);
1273 
1274 	return simple_read_from_buffer(user_buf, count, ppos, buf, len);
1275 }
1276 
1277 static ssize_t ath6kl_keepalive_write(struct file *file,
1278 				      const char __user *user_buf,
1279 				      size_t count, loff_t *ppos)
1280 {
1281 	struct ath6kl *ar = file->private_data;
1282 	int ret;
1283 	u8 val;
1284 
1285 	ret = kstrtou8_from_user(user_buf, count, 0, &val);
1286 	if (ret)
1287 		return ret;
1288 
1289 	ret = ath6kl_wmi_set_keepalive_cmd(ar->wmi, 0, val);
1290 	if (ret)
1291 		return ret;
1292 
1293 	return count;
1294 }
1295 
1296 static const struct file_operations fops_keepalive = {
1297 	.open = ath6kl_debugfs_open,
1298 	.read = ath6kl_keepalive_read,
1299 	.write = ath6kl_keepalive_write,
1300 	.owner = THIS_MODULE,
1301 	.llseek = default_llseek,
1302 };
1303 
1304 void ath6kl_debug_set_disconnect_timeout(struct ath6kl *ar, u8 timeout)
1305 {
1306 	ar->debug.disc_timeout = timeout;
1307 }
1308 
1309 static ssize_t ath6kl_disconnect_timeout_read(struct file *file,
1310 					      char __user *user_buf,
1311 					      size_t count, loff_t *ppos)
1312 {
1313 	struct ath6kl *ar = file->private_data;
1314 	char buf[16];
1315 	int len;
1316 
1317 	len = snprintf(buf, sizeof(buf), "%u\n", ar->debug.disc_timeout);
1318 
1319 	return simple_read_from_buffer(user_buf, count, ppos, buf, len);
1320 }
1321 
1322 static ssize_t ath6kl_disconnect_timeout_write(struct file *file,
1323 					       const char __user *user_buf,
1324 					       size_t count, loff_t *ppos)
1325 {
1326 	struct ath6kl *ar = file->private_data;
1327 	int ret;
1328 	u8 val;
1329 
1330 	ret = kstrtou8_from_user(user_buf, count, 0, &val);
1331 	if (ret)
1332 		return ret;
1333 
1334 	ret = ath6kl_wmi_disctimeout_cmd(ar->wmi, 0, val);
1335 	if (ret)
1336 		return ret;
1337 
1338 	return count;
1339 }
1340 
1341 static const struct file_operations fops_disconnect_timeout = {
1342 	.open = ath6kl_debugfs_open,
1343 	.read = ath6kl_disconnect_timeout_read,
1344 	.write = ath6kl_disconnect_timeout_write,
1345 	.owner = THIS_MODULE,
1346 	.llseek = default_llseek,
1347 };
1348 
1349 static ssize_t ath6kl_create_qos_write(struct file *file,
1350 						const char __user *user_buf,
1351 						size_t count, loff_t *ppos)
1352 {
1353 
1354 	struct ath6kl *ar = file->private_data;
1355 	struct ath6kl_vif *vif;
1356 	char buf[200];
1357 	ssize_t len;
1358 	char *sptr, *token;
1359 	struct wmi_create_pstream_cmd pstream;
1360 	u32 val32;
1361 	u16 val16;
1362 
1363 	vif = ath6kl_vif_first(ar);
1364 	if (!vif)
1365 		return -EIO;
1366 
1367 	len = min(count, sizeof(buf) - 1);
1368 	if (copy_from_user(buf, user_buf, len))
1369 		return -EFAULT;
1370 	buf[len] = '\0';
1371 	sptr = buf;
1372 
1373 	token = strsep(&sptr, " ");
1374 	if (!token)
1375 		return -EINVAL;
1376 	if (kstrtou8(token, 0, &pstream.user_pri))
1377 		return -EINVAL;
1378 
1379 	token = strsep(&sptr, " ");
1380 	if (!token)
1381 		return -EINVAL;
1382 	if (kstrtou8(token, 0, &pstream.traffic_direc))
1383 		return -EINVAL;
1384 
1385 	token = strsep(&sptr, " ");
1386 	if (!token)
1387 		return -EINVAL;
1388 	if (kstrtou8(token, 0, &pstream.traffic_class))
1389 		return -EINVAL;
1390 
1391 	token = strsep(&sptr, " ");
1392 	if (!token)
1393 		return -EINVAL;
1394 	if (kstrtou8(token, 0, &pstream.traffic_type))
1395 		return -EINVAL;
1396 
1397 	token = strsep(&sptr, " ");
1398 	if (!token)
1399 		return -EINVAL;
1400 	if (kstrtou8(token, 0, &pstream.voice_psc_cap))
1401 		return -EINVAL;
1402 
1403 	token = strsep(&sptr, " ");
1404 	if (!token)
1405 		return -EINVAL;
1406 	if (kstrtou32(token, 0, &val32))
1407 		return -EINVAL;
1408 	pstream.min_service_int = cpu_to_le32(val32);
1409 
1410 	token = strsep(&sptr, " ");
1411 	if (!token)
1412 		return -EINVAL;
1413 	if (kstrtou32(token, 0, &val32))
1414 		return -EINVAL;
1415 	pstream.max_service_int = cpu_to_le32(val32);
1416 
1417 	token = strsep(&sptr, " ");
1418 	if (!token)
1419 		return -EINVAL;
1420 	if (kstrtou32(token, 0, &val32))
1421 		return -EINVAL;
1422 	pstream.inactivity_int = cpu_to_le32(val32);
1423 
1424 	token = strsep(&sptr, " ");
1425 	if (!token)
1426 		return -EINVAL;
1427 	if (kstrtou32(token, 0, &val32))
1428 		return -EINVAL;
1429 	pstream.suspension_int = cpu_to_le32(val32);
1430 
1431 	token = strsep(&sptr, " ");
1432 	if (!token)
1433 		return -EINVAL;
1434 	if (kstrtou32(token, 0, &val32))
1435 		return -EINVAL;
1436 	pstream.service_start_time = cpu_to_le32(val32);
1437 
1438 	token = strsep(&sptr, " ");
1439 	if (!token)
1440 		return -EINVAL;
1441 	if (kstrtou8(token, 0, &pstream.tsid))
1442 		return -EINVAL;
1443 
1444 	token = strsep(&sptr, " ");
1445 	if (!token)
1446 		return -EINVAL;
1447 	if (kstrtou16(token, 0, &val16))
1448 		return -EINVAL;
1449 	pstream.nominal_msdu = cpu_to_le16(val16);
1450 
1451 	token = strsep(&sptr, " ");
1452 	if (!token)
1453 		return -EINVAL;
1454 	if (kstrtou16(token, 0, &val16))
1455 		return -EINVAL;
1456 	pstream.max_msdu = cpu_to_le16(val16);
1457 
1458 	token = strsep(&sptr, " ");
1459 	if (!token)
1460 		return -EINVAL;
1461 	if (kstrtou32(token, 0, &val32))
1462 		return -EINVAL;
1463 	pstream.min_data_rate = cpu_to_le32(val32);
1464 
1465 	token = strsep(&sptr, " ");
1466 	if (!token)
1467 		return -EINVAL;
1468 	if (kstrtou32(token, 0, &val32))
1469 		return -EINVAL;
1470 	pstream.mean_data_rate = cpu_to_le32(val32);
1471 
1472 	token = strsep(&sptr, " ");
1473 	if (!token)
1474 		return -EINVAL;
1475 	if (kstrtou32(token, 0, &val32))
1476 		return -EINVAL;
1477 	pstream.peak_data_rate = cpu_to_le32(val32);
1478 
1479 	token = strsep(&sptr, " ");
1480 	if (!token)
1481 		return -EINVAL;
1482 	if (kstrtou32(token, 0, &val32))
1483 		return -EINVAL;
1484 	pstream.max_burst_size = cpu_to_le32(val32);
1485 
1486 	token = strsep(&sptr, " ");
1487 	if (!token)
1488 		return -EINVAL;
1489 	if (kstrtou32(token, 0, &val32))
1490 		return -EINVAL;
1491 	pstream.delay_bound = cpu_to_le32(val32);
1492 
1493 	token = strsep(&sptr, " ");
1494 	if (!token)
1495 		return -EINVAL;
1496 	if (kstrtou32(token, 0, &val32))
1497 		return -EINVAL;
1498 	pstream.min_phy_rate = cpu_to_le32(val32);
1499 
1500 	token = strsep(&sptr, " ");
1501 	if (!token)
1502 		return -EINVAL;
1503 	if (kstrtou32(token, 0, &val32))
1504 		return -EINVAL;
1505 	pstream.sba = cpu_to_le32(val32);
1506 
1507 	token = strsep(&sptr, " ");
1508 	if (!token)
1509 		return -EINVAL;
1510 	if (kstrtou32(token, 0, &val32))
1511 		return -EINVAL;
1512 	pstream.medium_time = cpu_to_le32(val32);
1513 
1514 	pstream.nominal_phy = le32_to_cpu(pstream.min_phy_rate) / 1000000;
1515 
1516 	ath6kl_wmi_create_pstream_cmd(ar->wmi, vif->fw_vif_idx, &pstream);
1517 
1518 	return count;
1519 }
1520 
1521 static const struct file_operations fops_create_qos = {
1522 	.write = ath6kl_create_qos_write,
1523 	.open = ath6kl_debugfs_open,
1524 	.owner = THIS_MODULE,
1525 	.llseek = default_llseek,
1526 };
1527 
1528 static ssize_t ath6kl_delete_qos_write(struct file *file,
1529 				const char __user *user_buf,
1530 				size_t count, loff_t *ppos)
1531 {
1532 
1533 	struct ath6kl *ar = file->private_data;
1534 	struct ath6kl_vif *vif;
1535 	char buf[100];
1536 	ssize_t len;
1537 	char *sptr, *token;
1538 	u8 traffic_class;
1539 	u8 tsid;
1540 
1541 	vif = ath6kl_vif_first(ar);
1542 	if (!vif)
1543 		return -EIO;
1544 
1545 	len = min(count, sizeof(buf) - 1);
1546 	if (copy_from_user(buf, user_buf, len))
1547 		return -EFAULT;
1548 	buf[len] = '\0';
1549 	sptr = buf;
1550 
1551 	token = strsep(&sptr, " ");
1552 	if (!token)
1553 		return -EINVAL;
1554 	if (kstrtou8(token, 0, &traffic_class))
1555 		return -EINVAL;
1556 
1557 	token = strsep(&sptr, " ");
1558 	if (!token)
1559 		return -EINVAL;
1560 	if (kstrtou8(token, 0, &tsid))
1561 		return -EINVAL;
1562 
1563 	ath6kl_wmi_delete_pstream_cmd(ar->wmi, vif->fw_vif_idx,
1564 				      traffic_class, tsid);
1565 
1566 	return count;
1567 }
1568 
1569 static const struct file_operations fops_delete_qos = {
1570 	.write = ath6kl_delete_qos_write,
1571 	.open = ath6kl_debugfs_open,
1572 	.owner = THIS_MODULE,
1573 	.llseek = default_llseek,
1574 };
1575 
1576 static ssize_t ath6kl_bgscan_int_write(struct file *file,
1577 				const char __user *user_buf,
1578 				size_t count, loff_t *ppos)
1579 {
1580 	struct ath6kl *ar = file->private_data;
1581 	struct ath6kl_vif *vif;
1582 	u16 bgscan_int;
1583 	char buf[32];
1584 	ssize_t len;
1585 
1586 	vif = ath6kl_vif_first(ar);
1587 	if (!vif)
1588 		return -EIO;
1589 
1590 	len = min(count, sizeof(buf) - 1);
1591 	if (copy_from_user(buf, user_buf, len))
1592 		return -EFAULT;
1593 
1594 	buf[len] = '\0';
1595 	if (kstrtou16(buf, 0, &bgscan_int))
1596 		return -EINVAL;
1597 
1598 	if (bgscan_int == 0)
1599 		bgscan_int = 0xffff;
1600 
1601 	vif->bg_scan_period = bgscan_int;
1602 
1603 	ath6kl_wmi_scanparams_cmd(ar->wmi, 0, 0, 0, bgscan_int, 0, 0, 0, 3,
1604 				  0, 0, 0);
1605 
1606 	return count;
1607 }
1608 
1609 static const struct file_operations fops_bgscan_int = {
1610 	.write = ath6kl_bgscan_int_write,
1611 	.open = ath6kl_debugfs_open,
1612 	.owner = THIS_MODULE,
1613 	.llseek = default_llseek,
1614 };
1615 
1616 static ssize_t ath6kl_listen_int_write(struct file *file,
1617 				       const char __user *user_buf,
1618 				       size_t count, loff_t *ppos)
1619 {
1620 	struct ath6kl *ar = file->private_data;
1621 	struct ath6kl_vif *vif;
1622 	u16 listen_interval;
1623 	char buf[32];
1624 	ssize_t len;
1625 
1626 	vif = ath6kl_vif_first(ar);
1627 	if (!vif)
1628 		return -EIO;
1629 
1630 	len = min(count, sizeof(buf) - 1);
1631 	if (copy_from_user(buf, user_buf, len))
1632 		return -EFAULT;
1633 
1634 	buf[len] = '\0';
1635 	if (kstrtou16(buf, 0, &listen_interval))
1636 		return -EINVAL;
1637 
1638 	if ((listen_interval < 15) || (listen_interval > 3000))
1639 		return -EINVAL;
1640 
1641 	vif->listen_intvl_t = listen_interval;
1642 	ath6kl_wmi_listeninterval_cmd(ar->wmi, vif->fw_vif_idx,
1643 				      vif->listen_intvl_t, 0);
1644 
1645 	return count;
1646 }
1647 
1648 static ssize_t ath6kl_listen_int_read(struct file *file,
1649 				      char __user *user_buf,
1650 				      size_t count, loff_t *ppos)
1651 {
1652 	struct ath6kl *ar = file->private_data;
1653 	struct ath6kl_vif *vif;
1654 	char buf[32];
1655 	int len;
1656 
1657 	vif = ath6kl_vif_first(ar);
1658 	if (!vif)
1659 		return -EIO;
1660 
1661 	len = scnprintf(buf, sizeof(buf), "%u\n", vif->listen_intvl_t);
1662 
1663 	return simple_read_from_buffer(user_buf, count, ppos, buf, len);
1664 }
1665 
1666 static const struct file_operations fops_listen_int = {
1667 	.read = ath6kl_listen_int_read,
1668 	.write = ath6kl_listen_int_write,
1669 	.open = ath6kl_debugfs_open,
1670 	.owner = THIS_MODULE,
1671 	.llseek = default_llseek,
1672 };
1673 
1674 static ssize_t ath6kl_power_params_write(struct file *file,
1675 						const char __user *user_buf,
1676 						size_t count, loff_t *ppos)
1677 {
1678 	struct ath6kl *ar = file->private_data;
1679 	u8 buf[100];
1680 	unsigned int len = 0;
1681 	char *sptr, *token;
1682 	u16 idle_period, ps_poll_num, dtim,
1683 		tx_wakeup, num_tx;
1684 
1685 	len = min(count, sizeof(buf) - 1);
1686 	if (copy_from_user(buf, user_buf, len))
1687 		return -EFAULT;
1688 	buf[len] = '\0';
1689 	sptr = buf;
1690 
1691 	token = strsep(&sptr, " ");
1692 	if (!token)
1693 		return -EINVAL;
1694 	if (kstrtou16(token, 0, &idle_period))
1695 		return -EINVAL;
1696 
1697 	token = strsep(&sptr, " ");
1698 	if (!token)
1699 		return -EINVAL;
1700 	if (kstrtou16(token, 0, &ps_poll_num))
1701 		return -EINVAL;
1702 
1703 	token = strsep(&sptr, " ");
1704 	if (!token)
1705 		return -EINVAL;
1706 	if (kstrtou16(token, 0, &dtim))
1707 		return -EINVAL;
1708 
1709 	token = strsep(&sptr, " ");
1710 	if (!token)
1711 		return -EINVAL;
1712 	if (kstrtou16(token, 0, &tx_wakeup))
1713 		return -EINVAL;
1714 
1715 	token = strsep(&sptr, " ");
1716 	if (!token)
1717 		return -EINVAL;
1718 	if (kstrtou16(token, 0, &num_tx))
1719 		return -EINVAL;
1720 
1721 	ath6kl_wmi_pmparams_cmd(ar->wmi, 0, idle_period, ps_poll_num,
1722 				dtim, tx_wakeup, num_tx, 0);
1723 
1724 	return count;
1725 }
1726 
1727 static const struct file_operations fops_power_params = {
1728 	.write = ath6kl_power_params_write,
1729 	.open = ath6kl_debugfs_open,
1730 	.owner = THIS_MODULE,
1731 	.llseek = default_llseek,
1732 };
1733 
1734 void ath6kl_debug_init(struct ath6kl *ar)
1735 {
1736 	skb_queue_head_init(&ar->debug.fwlog_queue);
1737 	init_completion(&ar->debug.fwlog_completion);
1738 
1739 	/*
1740 	 * Actually we are lying here but don't know how to read the mask
1741 	 * value from the firmware.
1742 	 */
1743 	ar->debug.fwlog_mask = 0;
1744 }
1745 
1746 /*
1747  * Initialisation needs to happen in two stages as fwlog events can come
1748  * before cfg80211 is initialised, and debugfs depends on cfg80211
1749  * initialisation.
1750  */
1751 int ath6kl_debug_init_fs(struct ath6kl *ar)
1752 {
1753 	ar->debugfs_phy = debugfs_create_dir("ath6kl",
1754 					     ar->wiphy->debugfsdir);
1755 	if (!ar->debugfs_phy)
1756 		return -ENOMEM;
1757 
1758 	debugfs_create_file("tgt_stats", S_IRUSR, ar->debugfs_phy, ar,
1759 			    &fops_tgt_stats);
1760 
1761 	debugfs_create_file("credit_dist_stats", S_IRUSR, ar->debugfs_phy, ar,
1762 			    &fops_credit_dist_stats);
1763 
1764 	debugfs_create_file("endpoint_stats", S_IRUSR | S_IWUSR,
1765 			    ar->debugfs_phy, ar, &fops_endpoint_stats);
1766 
1767 	debugfs_create_file("fwlog", S_IRUSR, ar->debugfs_phy, ar,
1768 			    &fops_fwlog);
1769 
1770 	debugfs_create_file("fwlog_block", S_IRUSR, ar->debugfs_phy, ar,
1771 			    &fops_fwlog_block);
1772 
1773 	debugfs_create_file("fwlog_mask", S_IRUSR | S_IWUSR, ar->debugfs_phy,
1774 			    ar, &fops_fwlog_mask);
1775 
1776 	debugfs_create_file("reg_addr", S_IRUSR | S_IWUSR, ar->debugfs_phy, ar,
1777 			    &fops_diag_reg_read);
1778 
1779 	debugfs_create_file("reg_dump", S_IRUSR, ar->debugfs_phy, ar,
1780 			    &fops_reg_dump);
1781 
1782 	debugfs_create_file("lrssi_roam_threshold", S_IRUSR | S_IWUSR,
1783 			    ar->debugfs_phy, ar, &fops_lrssi_roam_threshold);
1784 
1785 	debugfs_create_file("reg_write", S_IRUSR | S_IWUSR,
1786 			    ar->debugfs_phy, ar, &fops_diag_reg_write);
1787 
1788 	debugfs_create_file("war_stats", S_IRUSR, ar->debugfs_phy, ar,
1789 			    &fops_war_stats);
1790 
1791 	debugfs_create_file("roam_table", S_IRUSR, ar->debugfs_phy, ar,
1792 			    &fops_roam_table);
1793 
1794 	debugfs_create_file("force_roam", S_IWUSR, ar->debugfs_phy, ar,
1795 			    &fops_force_roam);
1796 
1797 	debugfs_create_file("roam_mode", S_IWUSR, ar->debugfs_phy, ar,
1798 			    &fops_roam_mode);
1799 
1800 	debugfs_create_file("keepalive", S_IRUSR | S_IWUSR, ar->debugfs_phy, ar,
1801 			    &fops_keepalive);
1802 
1803 	debugfs_create_file("disconnect_timeout", S_IRUSR | S_IWUSR,
1804 			    ar->debugfs_phy, ar, &fops_disconnect_timeout);
1805 
1806 	debugfs_create_file("create_qos", S_IWUSR, ar->debugfs_phy, ar,
1807 			    &fops_create_qos);
1808 
1809 	debugfs_create_file("delete_qos", S_IWUSR, ar->debugfs_phy, ar,
1810 			    &fops_delete_qos);
1811 
1812 	debugfs_create_file("bgscan_interval", S_IWUSR,
1813 			    ar->debugfs_phy, ar, &fops_bgscan_int);
1814 
1815 	debugfs_create_file("listen_interval", S_IRUSR | S_IWUSR,
1816 			    ar->debugfs_phy, ar, &fops_listen_int);
1817 
1818 	debugfs_create_file("power_params", S_IWUSR, ar->debugfs_phy, ar,
1819 			    &fops_power_params);
1820 
1821 	return 0;
1822 }
1823 
1824 void ath6kl_debug_cleanup(struct ath6kl *ar)
1825 {
1826 	skb_queue_purge(&ar->debug.fwlog_queue);
1827 	complete(&ar->debug.fwlog_completion);
1828 	kfree(ar->debug.roam_tbl);
1829 }
1830 
1831 #endif
1832