1 /******************************************************************************
2  *
3  * This file is provided under a dual BSD/GPLv2 license.  When using or
4  * redistributing this file, you may do so under either license.
5  *
6  * GPL LICENSE SUMMARY
7  *
8  * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
9  * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
10  * Copyright(c) 2016 - 2017 Intel Deutschland GmbH
11  * Copyright(c) 2018        Intel Corporation
12  *
13  * This program is free software; you can redistribute it and/or modify
14  * it under the terms of version 2 of the GNU General Public License as
15  * published by the Free Software Foundation.
16  *
17  * This program is distributed in the hope that it will be useful, but
18  * WITHOUT ANY WARRANTY; without even the implied warranty of
19  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
20  * General Public License for more details.
21  *
22  * The full GNU General Public License is included in this distribution
23  * in the file called COPYING.
24  *
25  * Contact Information:
26  *  Intel Linux Wireless <linuxwifi@intel.com>
27  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
28  *
29  * BSD LICENSE
30  *
31  * Copyright(c) 2012 - 2014 Intel Corporation. All rights reserved.
32  * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
33  * Copyright(c) 2016 - 2017 Intel Deutschland GmbH
34  * Copyright(c) 2018        Intel Corporation
35  * All rights reserved.
36  *
37  * Redistribution and use in source and binary forms, with or without
38  * modification, are permitted provided that the following conditions
39  * are met:
40  *
41  *  * Redistributions of source code must retain the above copyright
42  *    notice, this list of conditions and the following disclaimer.
43  *  * Redistributions in binary form must reproduce the above copyright
44  *    notice, this list of conditions and the following disclaimer in
45  *    the documentation and/or other materials provided with the
46  *    distribution.
47  *  * Neither the name Intel Corporation nor the names of its
48  *    contributors may be used to endorse or promote products derived
49  *    from this software without specific prior written permission.
50  *
51  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
52  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
53  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
54  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
55  * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
56  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
57  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
58  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
59  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
60  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
61  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
62  *
63  *****************************************************************************/
64 #include <net/mac80211.h>
65 #include <linux/netdevice.h>
66 
67 #include "iwl-trans.h"
68 #include "iwl-op-mode.h"
69 #include "fw/img.h"
70 #include "iwl-debug.h"
71 #include "iwl-csr.h" /* for iwl_mvm_rx_card_state_notif */
72 #include "iwl-io.h" /* for iwl_mvm_rx_card_state_notif */
73 #include "iwl-prph.h"
74 #include "fw/acpi.h"
75 
76 #include "mvm.h"
77 #include "fw/dbg.h"
78 #include "iwl-phy-db.h"
79 #include "iwl-modparams.h"
80 #include "iwl-nvm-parse.h"
81 
82 #define MVM_UCODE_ALIVE_TIMEOUT	HZ
83 #define MVM_UCODE_CALIB_TIMEOUT	(2*HZ)
84 
85 #define UCODE_VALID_OK	cpu_to_le32(0x1)
86 
87 struct iwl_mvm_alive_data {
88 	bool valid;
89 	u32 scd_base_addr;
90 };
91 
92 static int iwl_send_tx_ant_cfg(struct iwl_mvm *mvm, u8 valid_tx_ant)
93 {
94 	struct iwl_tx_ant_cfg_cmd tx_ant_cmd = {
95 		.valid = cpu_to_le32(valid_tx_ant),
96 	};
97 
98 	IWL_DEBUG_FW(mvm, "select valid tx ant: %u\n", valid_tx_ant);
99 	return iwl_mvm_send_cmd_pdu(mvm, TX_ANT_CONFIGURATION_CMD, 0,
100 				    sizeof(tx_ant_cmd), &tx_ant_cmd);
101 }
102 
103 static int iwl_send_rss_cfg_cmd(struct iwl_mvm *mvm)
104 {
105 	int i;
106 	struct iwl_rss_config_cmd cmd = {
107 		.flags = cpu_to_le32(IWL_RSS_ENABLE),
108 		.hash_mask = IWL_RSS_HASH_TYPE_IPV4_TCP |
109 			     IWL_RSS_HASH_TYPE_IPV4_UDP |
110 			     IWL_RSS_HASH_TYPE_IPV4_PAYLOAD |
111 			     IWL_RSS_HASH_TYPE_IPV6_TCP |
112 			     IWL_RSS_HASH_TYPE_IPV6_UDP |
113 			     IWL_RSS_HASH_TYPE_IPV6_PAYLOAD,
114 	};
115 
116 	if (mvm->trans->num_rx_queues == 1)
117 		return 0;
118 
119 	/* Do not direct RSS traffic to Q 0 which is our fallback queue */
120 	for (i = 0; i < ARRAY_SIZE(cmd.indirection_table); i++)
121 		cmd.indirection_table[i] =
122 			1 + (i % (mvm->trans->num_rx_queues - 1));
123 	netdev_rss_key_fill(cmd.secret_key, sizeof(cmd.secret_key));
124 
125 	return iwl_mvm_send_cmd_pdu(mvm, RSS_CONFIG_CMD, 0, sizeof(cmd), &cmd);
126 }
127 
128 static int iwl_configure_rxq(struct iwl_mvm *mvm)
129 {
130 	int i, num_queues, size;
131 	struct iwl_rfh_queue_config *cmd;
132 
133 	/* Do not configure default queue, it is configured via context info */
134 	num_queues = mvm->trans->num_rx_queues - 1;
135 
136 	size = sizeof(*cmd) + num_queues * sizeof(struct iwl_rfh_queue_data);
137 
138 	cmd = kzalloc(size, GFP_KERNEL);
139 	if (!cmd)
140 		return -ENOMEM;
141 
142 	cmd->num_queues = num_queues;
143 
144 	for (i = 0; i < num_queues; i++) {
145 		struct iwl_trans_rxq_dma_data data;
146 
147 		cmd->data[i].q_num = i + 1;
148 		iwl_trans_get_rxq_dma_data(mvm->trans, i + 1, &data);
149 
150 		cmd->data[i].fr_bd_cb = cpu_to_le64(data.fr_bd_cb);
151 		cmd->data[i].urbd_stts_wrptr =
152 			cpu_to_le64(data.urbd_stts_wrptr);
153 		cmd->data[i].ur_bd_cb = cpu_to_le64(data.ur_bd_cb);
154 		cmd->data[i].fr_bd_wid = cpu_to_le32(data.fr_bd_wid);
155 	}
156 
157 	return iwl_mvm_send_cmd_pdu(mvm,
158 				    WIDE_ID(DATA_PATH_GROUP,
159 					    RFH_QUEUE_CONFIG_CMD),
160 				    0, size, cmd);
161 }
162 
163 static int iwl_mvm_send_dqa_cmd(struct iwl_mvm *mvm)
164 {
165 	struct iwl_dqa_enable_cmd dqa_cmd = {
166 		.cmd_queue = cpu_to_le32(IWL_MVM_DQA_CMD_QUEUE),
167 	};
168 	u32 cmd_id = iwl_cmd_id(DQA_ENABLE_CMD, DATA_PATH_GROUP, 0);
169 	int ret;
170 
171 	ret = iwl_mvm_send_cmd_pdu(mvm, cmd_id, 0, sizeof(dqa_cmd), &dqa_cmd);
172 	if (ret)
173 		IWL_ERR(mvm, "Failed to send DQA enabling command: %d\n", ret);
174 	else
175 		IWL_DEBUG_FW(mvm, "Working in DQA mode\n");
176 
177 	return ret;
178 }
179 
180 void iwl_mvm_mfu_assert_dump_notif(struct iwl_mvm *mvm,
181 				   struct iwl_rx_cmd_buffer *rxb)
182 {
183 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
184 	struct iwl_mfu_assert_dump_notif *mfu_dump_notif = (void *)pkt->data;
185 	__le32 *dump_data = mfu_dump_notif->data;
186 	int n_words = le32_to_cpu(mfu_dump_notif->data_size) / sizeof(__le32);
187 	int i;
188 
189 	if (mfu_dump_notif->index_num == 0)
190 		IWL_INFO(mvm, "MFUART assert id 0x%x occurred\n",
191 			 le32_to_cpu(mfu_dump_notif->assert_id));
192 
193 	for (i = 0; i < n_words; i++)
194 		IWL_DEBUG_INFO(mvm,
195 			       "MFUART assert dump, dword %u: 0x%08x\n",
196 			       le16_to_cpu(mfu_dump_notif->index_num) *
197 			       n_words + i,
198 			       le32_to_cpu(dump_data[i]));
199 }
200 
201 static bool iwl_alive_fn(struct iwl_notif_wait_data *notif_wait,
202 			 struct iwl_rx_packet *pkt, void *data)
203 {
204 	struct iwl_mvm *mvm =
205 		container_of(notif_wait, struct iwl_mvm, notif_wait);
206 	struct iwl_mvm_alive_data *alive_data = data;
207 	struct mvm_alive_resp_v3 *palive3;
208 	struct mvm_alive_resp *palive;
209 	struct iwl_umac_alive *umac;
210 	struct iwl_lmac_alive *lmac1;
211 	struct iwl_lmac_alive *lmac2 = NULL;
212 	u16 status;
213 	u32 umac_error_event_table;
214 
215 	if (iwl_rx_packet_payload_len(pkt) == sizeof(*palive)) {
216 		palive = (void *)pkt->data;
217 		umac = &palive->umac_data;
218 		lmac1 = &palive->lmac_data[0];
219 		lmac2 = &palive->lmac_data[1];
220 		status = le16_to_cpu(palive->status);
221 	} else {
222 		palive3 = (void *)pkt->data;
223 		umac = &palive3->umac_data;
224 		lmac1 = &palive3->lmac_data;
225 		status = le16_to_cpu(palive3->status);
226 	}
227 
228 	mvm->error_event_table[0] = le32_to_cpu(lmac1->error_event_table_ptr);
229 	if (lmac2)
230 		mvm->error_event_table[1] =
231 			le32_to_cpu(lmac2->error_event_table_ptr);
232 	mvm->log_event_table = le32_to_cpu(lmac1->log_event_table_ptr);
233 
234 	umac_error_event_table = le32_to_cpu(umac->error_info_addr);
235 
236 	if (!umac_error_event_table) {
237 		mvm->support_umac_log = false;
238 	} else if (umac_error_event_table >=
239 		   mvm->trans->cfg->min_umac_error_event_table) {
240 		mvm->support_umac_log = true;
241 		mvm->umac_error_event_table = umac_error_event_table;
242 	} else {
243 		IWL_ERR(mvm,
244 			"Not valid error log pointer 0x%08X for %s uCode\n",
245 			mvm->umac_error_event_table,
246 			(mvm->fwrt.cur_fw_img == IWL_UCODE_INIT) ?
247 			"Init" : "RT");
248 		mvm->support_umac_log = false;
249 	}
250 
251 	alive_data->scd_base_addr = le32_to_cpu(lmac1->scd_base_ptr);
252 	alive_data->valid = status == IWL_ALIVE_STATUS_OK;
253 
254 	IWL_DEBUG_FW(mvm,
255 		     "Alive ucode status 0x%04x revision 0x%01X 0x%01X\n",
256 		     status, lmac1->ver_type, lmac1->ver_subtype);
257 
258 	if (lmac2)
259 		IWL_DEBUG_FW(mvm, "Alive ucode CDB\n");
260 
261 	IWL_DEBUG_FW(mvm,
262 		     "UMAC version: Major - 0x%x, Minor - 0x%x\n",
263 		     le32_to_cpu(umac->umac_major),
264 		     le32_to_cpu(umac->umac_minor));
265 
266 	return true;
267 }
268 
269 static bool iwl_wait_init_complete(struct iwl_notif_wait_data *notif_wait,
270 				   struct iwl_rx_packet *pkt, void *data)
271 {
272 	WARN_ON(pkt->hdr.cmd != INIT_COMPLETE_NOTIF);
273 
274 	return true;
275 }
276 
277 static bool iwl_wait_phy_db_entry(struct iwl_notif_wait_data *notif_wait,
278 				  struct iwl_rx_packet *pkt, void *data)
279 {
280 	struct iwl_phy_db *phy_db = data;
281 
282 	if (pkt->hdr.cmd != CALIB_RES_NOTIF_PHY_DB) {
283 		WARN_ON(pkt->hdr.cmd != INIT_COMPLETE_NOTIF);
284 		return true;
285 	}
286 
287 	WARN_ON(iwl_phy_db_set_section(phy_db, pkt));
288 
289 	return false;
290 }
291 
292 static int iwl_mvm_load_ucode_wait_alive(struct iwl_mvm *mvm,
293 					 enum iwl_ucode_type ucode_type)
294 {
295 	struct iwl_notification_wait alive_wait;
296 	struct iwl_mvm_alive_data alive_data;
297 	const struct fw_img *fw;
298 	int ret, i;
299 	enum iwl_ucode_type old_type = mvm->fwrt.cur_fw_img;
300 	static const u16 alive_cmd[] = { MVM_ALIVE };
301 
302 	set_bit(IWL_FWRT_STATUS_WAIT_ALIVE, &mvm->fwrt.status);
303 	if (ucode_type == IWL_UCODE_REGULAR &&
304 	    iwl_fw_dbg_conf_usniffer(mvm->fw, FW_DBG_START_FROM_ALIVE) &&
305 	    !(fw_has_capa(&mvm->fw->ucode_capa,
306 			  IWL_UCODE_TLV_CAPA_USNIFFER_UNIFIED)))
307 		fw = iwl_get_ucode_image(mvm->fw, IWL_UCODE_REGULAR_USNIFFER);
308 	else
309 		fw = iwl_get_ucode_image(mvm->fw, ucode_type);
310 	if (WARN_ON(!fw))
311 		return -EINVAL;
312 	iwl_fw_set_current_image(&mvm->fwrt, ucode_type);
313 	clear_bit(IWL_MVM_STATUS_FIRMWARE_RUNNING, &mvm->status);
314 
315 	iwl_init_notification_wait(&mvm->notif_wait, &alive_wait,
316 				   alive_cmd, ARRAY_SIZE(alive_cmd),
317 				   iwl_alive_fn, &alive_data);
318 
319 	ret = iwl_trans_start_fw(mvm->trans, fw, ucode_type == IWL_UCODE_INIT);
320 	if (ret) {
321 		iwl_fw_set_current_image(&mvm->fwrt, old_type);
322 		iwl_remove_notification(&mvm->notif_wait, &alive_wait);
323 		return ret;
324 	}
325 
326 	/*
327 	 * Some things may run in the background now, but we
328 	 * just wait for the ALIVE notification here.
329 	 */
330 	ret = iwl_wait_notification(&mvm->notif_wait, &alive_wait,
331 				    MVM_UCODE_ALIVE_TIMEOUT);
332 	if (ret) {
333 		struct iwl_trans *trans = mvm->trans;
334 
335 		if (trans->cfg->device_family >= IWL_DEVICE_FAMILY_22000)
336 			IWL_ERR(mvm,
337 				"SecBoot CPU1 Status: 0x%x, CPU2 Status: 0x%x\n",
338 				iwl_read_prph(trans, UMAG_SB_CPU_1_STATUS),
339 				iwl_read_prph(trans, UMAG_SB_CPU_2_STATUS));
340 		else if (trans->cfg->device_family >= IWL_DEVICE_FAMILY_8000)
341 			IWL_ERR(mvm,
342 				"SecBoot CPU1 Status: 0x%x, CPU2 Status: 0x%x\n",
343 				iwl_read_prph(trans, SB_CPU_1_STATUS),
344 				iwl_read_prph(trans, SB_CPU_2_STATUS));
345 		iwl_fw_set_current_image(&mvm->fwrt, old_type);
346 		return ret;
347 	}
348 
349 	if (!alive_data.valid) {
350 		IWL_ERR(mvm, "Loaded ucode is not valid!\n");
351 		iwl_fw_set_current_image(&mvm->fwrt, old_type);
352 		return -EIO;
353 	}
354 
355 	iwl_trans_fw_alive(mvm->trans, alive_data.scd_base_addr);
356 
357 	/*
358 	 * Note: all the queues are enabled as part of the interface
359 	 * initialization, but in firmware restart scenarios they
360 	 * could be stopped, so wake them up. In firmware restart,
361 	 * mac80211 will have the queues stopped as well until the
362 	 * reconfiguration completes. During normal startup, they
363 	 * will be empty.
364 	 */
365 
366 	memset(&mvm->queue_info, 0, sizeof(mvm->queue_info));
367 	/*
368 	 * Set a 'fake' TID for the command queue, since we use the
369 	 * hweight() of the tid_bitmap as a refcount now. Not that
370 	 * we ever even consider the command queue as one we might
371 	 * want to reuse, but be safe nevertheless.
372 	 */
373 	mvm->queue_info[IWL_MVM_DQA_CMD_QUEUE].tid_bitmap =
374 		BIT(IWL_MAX_TID_COUNT + 2);
375 
376 	for (i = 0; i < IEEE80211_MAX_QUEUES; i++)
377 		atomic_set(&mvm->mac80211_queue_stop_count[i], 0);
378 
379 	set_bit(IWL_MVM_STATUS_FIRMWARE_RUNNING, &mvm->status);
380 #ifdef CONFIG_IWLWIFI_DEBUGFS
381 	iwl_fw_set_dbg_rec_on(&mvm->fwrt);
382 #endif
383 	clear_bit(IWL_FWRT_STATUS_WAIT_ALIVE, &mvm->fwrt.status);
384 
385 	return 0;
386 }
387 
388 static int iwl_run_unified_mvm_ucode(struct iwl_mvm *mvm, bool read_nvm)
389 {
390 	struct iwl_notification_wait init_wait;
391 	struct iwl_nvm_access_complete_cmd nvm_complete = {};
392 	struct iwl_init_extended_cfg_cmd init_cfg = {
393 		.init_flags = cpu_to_le32(BIT(IWL_INIT_NVM)),
394 	};
395 	static const u16 init_complete[] = {
396 		INIT_COMPLETE_NOTIF,
397 	};
398 	int ret;
399 
400 	lockdep_assert_held(&mvm->mutex);
401 
402 	iwl_init_notification_wait(&mvm->notif_wait,
403 				   &init_wait,
404 				   init_complete,
405 				   ARRAY_SIZE(init_complete),
406 				   iwl_wait_init_complete,
407 				   NULL);
408 
409 	/* Will also start the device */
410 	ret = iwl_mvm_load_ucode_wait_alive(mvm, IWL_UCODE_REGULAR);
411 	if (ret) {
412 		IWL_ERR(mvm, "Failed to start RT ucode: %d\n", ret);
413 		iwl_fw_assert_error_dump(&mvm->fwrt);
414 		goto error;
415 	}
416 
417 	/* Send init config command to mark that we are sending NVM access
418 	 * commands
419 	 */
420 	ret = iwl_mvm_send_cmd_pdu(mvm, WIDE_ID(SYSTEM_GROUP,
421 						INIT_EXTENDED_CFG_CMD), 0,
422 				   sizeof(init_cfg), &init_cfg);
423 	if (ret) {
424 		IWL_ERR(mvm, "Failed to run init config command: %d\n",
425 			ret);
426 		goto error;
427 	}
428 
429 	/* Load NVM to NIC if needed */
430 	if (mvm->nvm_file_name) {
431 		iwl_read_external_nvm(mvm->trans, mvm->nvm_file_name,
432 				      mvm->nvm_sections);
433 		iwl_mvm_load_nvm_to_nic(mvm);
434 	}
435 
436 	if (IWL_MVM_PARSE_NVM && read_nvm) {
437 		ret = iwl_nvm_init(mvm);
438 		if (ret) {
439 			IWL_ERR(mvm, "Failed to read NVM: %d\n", ret);
440 			goto error;
441 		}
442 	}
443 
444 	ret = iwl_mvm_send_cmd_pdu(mvm, WIDE_ID(REGULATORY_AND_NVM_GROUP,
445 						NVM_ACCESS_COMPLETE), 0,
446 				   sizeof(nvm_complete), &nvm_complete);
447 	if (ret) {
448 		IWL_ERR(mvm, "Failed to run complete NVM access: %d\n",
449 			ret);
450 		goto error;
451 	}
452 
453 	/* We wait for the INIT complete notification */
454 	ret = iwl_wait_notification(&mvm->notif_wait, &init_wait,
455 				    MVM_UCODE_ALIVE_TIMEOUT);
456 	if (ret)
457 		return ret;
458 
459 	/* Read the NVM only at driver load time, no need to do this twice */
460 	if (!IWL_MVM_PARSE_NVM && read_nvm) {
461 		mvm->nvm_data = iwl_get_nvm(mvm->trans, mvm->fw);
462 		if (IS_ERR(mvm->nvm_data)) {
463 			ret = PTR_ERR(mvm->nvm_data);
464 			mvm->nvm_data = NULL;
465 			IWL_ERR(mvm, "Failed to read NVM: %d\n", ret);
466 			return ret;
467 		}
468 	}
469 
470 	return 0;
471 
472 error:
473 	iwl_remove_notification(&mvm->notif_wait, &init_wait);
474 	return ret;
475 }
476 
477 static int iwl_send_phy_cfg_cmd(struct iwl_mvm *mvm)
478 {
479 	struct iwl_phy_cfg_cmd phy_cfg_cmd;
480 	enum iwl_ucode_type ucode_type = mvm->fwrt.cur_fw_img;
481 
482 	/* Set parameters */
483 	phy_cfg_cmd.phy_cfg = cpu_to_le32(iwl_mvm_get_phy_config(mvm));
484 
485 	/* set flags extra PHY configuration flags from the device's cfg */
486 	phy_cfg_cmd.phy_cfg |= cpu_to_le32(mvm->cfg->extra_phy_cfg_flags);
487 
488 	phy_cfg_cmd.calib_control.event_trigger =
489 		mvm->fw->default_calib[ucode_type].event_trigger;
490 	phy_cfg_cmd.calib_control.flow_trigger =
491 		mvm->fw->default_calib[ucode_type].flow_trigger;
492 
493 	IWL_DEBUG_INFO(mvm, "Sending Phy CFG command: 0x%x\n",
494 		       phy_cfg_cmd.phy_cfg);
495 
496 	return iwl_mvm_send_cmd_pdu(mvm, PHY_CONFIGURATION_CMD, 0,
497 				    sizeof(phy_cfg_cmd), &phy_cfg_cmd);
498 }
499 
500 int iwl_run_init_mvm_ucode(struct iwl_mvm *mvm, bool read_nvm)
501 {
502 	struct iwl_notification_wait calib_wait;
503 	static const u16 init_complete[] = {
504 		INIT_COMPLETE_NOTIF,
505 		CALIB_RES_NOTIF_PHY_DB
506 	};
507 	int ret;
508 
509 	if (iwl_mvm_has_unified_ucode(mvm))
510 		return iwl_run_unified_mvm_ucode(mvm, true);
511 
512 	lockdep_assert_held(&mvm->mutex);
513 
514 	if (WARN_ON_ONCE(mvm->calibrating))
515 		return 0;
516 
517 	iwl_init_notification_wait(&mvm->notif_wait,
518 				   &calib_wait,
519 				   init_complete,
520 				   ARRAY_SIZE(init_complete),
521 				   iwl_wait_phy_db_entry,
522 				   mvm->phy_db);
523 
524 	/* Will also start the device */
525 	ret = iwl_mvm_load_ucode_wait_alive(mvm, IWL_UCODE_INIT);
526 	if (ret) {
527 		IWL_ERR(mvm, "Failed to start INIT ucode: %d\n", ret);
528 		goto remove_notif;
529 	}
530 
531 	if (mvm->cfg->device_family < IWL_DEVICE_FAMILY_8000) {
532 		ret = iwl_mvm_send_bt_init_conf(mvm);
533 		if (ret)
534 			goto remove_notif;
535 	}
536 
537 	/* Read the NVM only at driver load time, no need to do this twice */
538 	if (read_nvm) {
539 		ret = iwl_nvm_init(mvm);
540 		if (ret) {
541 			IWL_ERR(mvm, "Failed to read NVM: %d\n", ret);
542 			goto remove_notif;
543 		}
544 	}
545 
546 	/* In case we read the NVM from external file, load it to the NIC */
547 	if (mvm->nvm_file_name)
548 		iwl_mvm_load_nvm_to_nic(mvm);
549 
550 	WARN_ONCE(mvm->nvm_data->nvm_version < mvm->trans->cfg->nvm_ver,
551 		  "Too old NVM version (0x%0x, required = 0x%0x)",
552 		  mvm->nvm_data->nvm_version, mvm->trans->cfg->nvm_ver);
553 
554 	/*
555 	 * abort after reading the nvm in case RF Kill is on, we will complete
556 	 * the init seq later when RF kill will switch to off
557 	 */
558 	if (iwl_mvm_is_radio_hw_killed(mvm)) {
559 		IWL_DEBUG_RF_KILL(mvm,
560 				  "jump over all phy activities due to RF kill\n");
561 		goto remove_notif;
562 	}
563 
564 	mvm->calibrating = true;
565 
566 	/* Send TX valid antennas before triggering calibrations */
567 	ret = iwl_send_tx_ant_cfg(mvm, iwl_mvm_get_valid_tx_ant(mvm));
568 	if (ret)
569 		goto remove_notif;
570 
571 	ret = iwl_send_phy_cfg_cmd(mvm);
572 	if (ret) {
573 		IWL_ERR(mvm, "Failed to run INIT calibrations: %d\n",
574 			ret);
575 		goto remove_notif;
576 	}
577 
578 	/*
579 	 * Some things may run in the background now, but we
580 	 * just wait for the calibration complete notification.
581 	 */
582 	ret = iwl_wait_notification(&mvm->notif_wait, &calib_wait,
583 				    MVM_UCODE_CALIB_TIMEOUT);
584 	if (!ret)
585 		goto out;
586 
587 	if (iwl_mvm_is_radio_hw_killed(mvm)) {
588 		IWL_DEBUG_RF_KILL(mvm, "RFKILL while calibrating.\n");
589 		ret = 0;
590 	} else {
591 		IWL_ERR(mvm, "Failed to run INIT calibrations: %d\n",
592 			ret);
593 	}
594 
595 	goto out;
596 
597 remove_notif:
598 	iwl_remove_notification(&mvm->notif_wait, &calib_wait);
599 out:
600 	mvm->calibrating = false;
601 	if (iwlmvm_mod_params.init_dbg && !mvm->nvm_data) {
602 		/* we want to debug INIT and we have no NVM - fake */
603 		mvm->nvm_data = kzalloc(sizeof(struct iwl_nvm_data) +
604 					sizeof(struct ieee80211_channel) +
605 					sizeof(struct ieee80211_rate),
606 					GFP_KERNEL);
607 		if (!mvm->nvm_data)
608 			return -ENOMEM;
609 		mvm->nvm_data->bands[0].channels = mvm->nvm_data->channels;
610 		mvm->nvm_data->bands[0].n_channels = 1;
611 		mvm->nvm_data->bands[0].n_bitrates = 1;
612 		mvm->nvm_data->bands[0].bitrates =
613 			(void *)mvm->nvm_data->channels + 1;
614 		mvm->nvm_data->bands[0].bitrates->hw_value = 10;
615 	}
616 
617 	return ret;
618 }
619 
620 static int iwl_mvm_config_ltr(struct iwl_mvm *mvm)
621 {
622 	struct iwl_ltr_config_cmd cmd = {
623 		.flags = cpu_to_le32(LTR_CFG_FLAG_FEATURE_ENABLE),
624 	};
625 
626 	if (!mvm->trans->ltr_enabled)
627 		return 0;
628 
629 	return iwl_mvm_send_cmd_pdu(mvm, LTR_CONFIG, 0,
630 				    sizeof(cmd), &cmd);
631 }
632 
633 #ifdef CONFIG_ACPI
634 static int iwl_mvm_sar_set_profile(struct iwl_mvm *mvm,
635 				   union acpi_object *table,
636 				   struct iwl_mvm_sar_profile *profile,
637 				   bool enabled)
638 {
639 	int i;
640 
641 	profile->enabled = enabled;
642 
643 	for (i = 0; i < ACPI_SAR_TABLE_SIZE; i++) {
644 		if ((table[i].type != ACPI_TYPE_INTEGER) ||
645 		    (table[i].integer.value > U8_MAX))
646 			return -EINVAL;
647 
648 		profile->table[i] = table[i].integer.value;
649 	}
650 
651 	return 0;
652 }
653 
654 static int iwl_mvm_sar_get_wrds_table(struct iwl_mvm *mvm)
655 {
656 	union acpi_object *wifi_pkg, *table, *data;
657 	bool enabled;
658 	int ret;
659 
660 	data = iwl_acpi_get_object(mvm->dev, ACPI_WRDS_METHOD);
661 	if (IS_ERR(data))
662 		return PTR_ERR(data);
663 
664 	wifi_pkg = iwl_acpi_get_wifi_pkg(mvm->dev, data,
665 					 ACPI_WRDS_WIFI_DATA_SIZE);
666 	if (IS_ERR(wifi_pkg)) {
667 		ret = PTR_ERR(wifi_pkg);
668 		goto out_free;
669 	}
670 
671 	if (wifi_pkg->package.elements[1].type != ACPI_TYPE_INTEGER) {
672 		ret = -EINVAL;
673 		goto out_free;
674 	}
675 
676 	enabled = !!(wifi_pkg->package.elements[1].integer.value);
677 
678 	/* position of the actual table */
679 	table = &wifi_pkg->package.elements[2];
680 
681 	/* The profile from WRDS is officially profile 1, but goes
682 	 * into sar_profiles[0] (because we don't have a profile 0).
683 	 */
684 	ret = iwl_mvm_sar_set_profile(mvm, table, &mvm->sar_profiles[0],
685 				      enabled);
686 out_free:
687 	kfree(data);
688 	return ret;
689 }
690 
691 static int iwl_mvm_sar_get_ewrd_table(struct iwl_mvm *mvm)
692 {
693 	union acpi_object *wifi_pkg, *data;
694 	bool enabled;
695 	int i, n_profiles, ret;
696 
697 	data = iwl_acpi_get_object(mvm->dev, ACPI_EWRD_METHOD);
698 	if (IS_ERR(data))
699 		return PTR_ERR(data);
700 
701 	wifi_pkg = iwl_acpi_get_wifi_pkg(mvm->dev, data,
702 					 ACPI_EWRD_WIFI_DATA_SIZE);
703 	if (IS_ERR(wifi_pkg)) {
704 		ret = PTR_ERR(wifi_pkg);
705 		goto out_free;
706 	}
707 
708 	if ((wifi_pkg->package.elements[1].type != ACPI_TYPE_INTEGER) ||
709 	    (wifi_pkg->package.elements[2].type != ACPI_TYPE_INTEGER)) {
710 		ret = -EINVAL;
711 		goto out_free;
712 	}
713 
714 	enabled = !!(wifi_pkg->package.elements[1].integer.value);
715 	n_profiles = wifi_pkg->package.elements[2].integer.value;
716 
717 	/*
718 	 * Check the validity of n_profiles.  The EWRD profiles start
719 	 * from index 1, so the maximum value allowed here is
720 	 * ACPI_SAR_PROFILES_NUM - 1.
721 	 */
722 	if (n_profiles <= 0 || n_profiles >= ACPI_SAR_PROFILE_NUM) {
723 		ret = -EINVAL;
724 		goto out_free;
725 	}
726 
727 	for (i = 0; i < n_profiles; i++) {
728 		/* the tables start at element 3 */
729 		static int pos = 3;
730 
731 		/* The EWRD profiles officially go from 2 to 4, but we
732 		 * save them in sar_profiles[1-3] (because we don't
733 		 * have profile 0).  So in the array we start from 1.
734 		 */
735 		ret = iwl_mvm_sar_set_profile(mvm,
736 					      &wifi_pkg->package.elements[pos],
737 					      &mvm->sar_profiles[i + 1],
738 					      enabled);
739 		if (ret < 0)
740 			break;
741 
742 		/* go to the next table */
743 		pos += ACPI_SAR_TABLE_SIZE;
744 	}
745 
746 out_free:
747 	kfree(data);
748 	return ret;
749 }
750 
751 static int iwl_mvm_sar_get_wgds_table(struct iwl_mvm *mvm)
752 {
753 	union acpi_object *wifi_pkg, *data;
754 	int i, j, ret;
755 	int idx = 1;
756 
757 	data = iwl_acpi_get_object(mvm->dev, ACPI_WGDS_METHOD);
758 	if (IS_ERR(data))
759 		return PTR_ERR(data);
760 
761 	wifi_pkg = iwl_acpi_get_wifi_pkg(mvm->dev, data,
762 					 ACPI_WGDS_WIFI_DATA_SIZE);
763 	if (IS_ERR(wifi_pkg)) {
764 		ret = PTR_ERR(wifi_pkg);
765 		goto out_free;
766 	}
767 
768 	for (i = 0; i < ACPI_NUM_GEO_PROFILES; i++) {
769 		for (j = 0; j < ACPI_GEO_TABLE_SIZE; j++) {
770 			union acpi_object *entry;
771 
772 			entry = &wifi_pkg->package.elements[idx++];
773 			if ((entry->type != ACPI_TYPE_INTEGER) ||
774 			    (entry->integer.value > U8_MAX)) {
775 				ret = -EINVAL;
776 				goto out_free;
777 			}
778 
779 			mvm->geo_profiles[i].values[j] = entry->integer.value;
780 		}
781 	}
782 	ret = 0;
783 out_free:
784 	kfree(data);
785 	return ret;
786 }
787 
788 int iwl_mvm_sar_select_profile(struct iwl_mvm *mvm, int prof_a, int prof_b)
789 {
790 	union {
791 		struct iwl_dev_tx_power_cmd v5;
792 		struct iwl_dev_tx_power_cmd_v4 v4;
793 	} cmd;
794 	int i, j, idx;
795 	int profs[ACPI_SAR_NUM_CHAIN_LIMITS] = { prof_a, prof_b };
796 	int len;
797 
798 	BUILD_BUG_ON(ACPI_SAR_NUM_CHAIN_LIMITS < 2);
799 	BUILD_BUG_ON(ACPI_SAR_NUM_CHAIN_LIMITS * ACPI_SAR_NUM_SUB_BANDS !=
800 		     ACPI_SAR_TABLE_SIZE);
801 
802 	cmd.v5.v3.set_mode = cpu_to_le32(IWL_TX_POWER_MODE_SET_CHAINS);
803 
804 	if (fw_has_api(&mvm->fw->ucode_capa,
805 		       IWL_UCODE_TLV_API_REDUCE_TX_POWER))
806 		len = sizeof(cmd.v5);
807 	else if (fw_has_capa(&mvm->fw->ucode_capa,
808 			     IWL_UCODE_TLV_CAPA_TX_POWER_ACK))
809 		len = sizeof(cmd.v4);
810 	else
811 		len = sizeof(cmd.v4.v3);
812 
813 	for (i = 0; i < ACPI_SAR_NUM_CHAIN_LIMITS; i++) {
814 		struct iwl_mvm_sar_profile *prof;
815 
816 		/* don't allow SAR to be disabled (profile 0 means disable) */
817 		if (profs[i] == 0)
818 			return -EPERM;
819 
820 		/* we are off by one, so allow up to ACPI_SAR_PROFILE_NUM */
821 		if (profs[i] > ACPI_SAR_PROFILE_NUM)
822 			return -EINVAL;
823 
824 		/* profiles go from 1 to 4, so decrement to access the array */
825 		prof = &mvm->sar_profiles[profs[i] - 1];
826 
827 		/* if the profile is disabled, do nothing */
828 		if (!prof->enabled) {
829 			IWL_DEBUG_RADIO(mvm, "SAR profile %d is disabled.\n",
830 					profs[i]);
831 			/* if one of the profiles is disabled, we fail all */
832 			return -ENOENT;
833 		}
834 
835 		IWL_DEBUG_RADIO(mvm, "  Chain[%d]:\n", i);
836 		for (j = 0; j < ACPI_SAR_NUM_SUB_BANDS; j++) {
837 			idx = (i * ACPI_SAR_NUM_SUB_BANDS) + j;
838 			cmd.v5.v3.per_chain_restriction[i][j] =
839 				cpu_to_le16(prof->table[idx]);
840 			IWL_DEBUG_RADIO(mvm, "    Band[%d] = %d * .125dBm\n",
841 					j, prof->table[idx]);
842 		}
843 	}
844 
845 	IWL_DEBUG_RADIO(mvm, "Sending REDUCE_TX_POWER_CMD per chain\n");
846 
847 	return iwl_mvm_send_cmd_pdu(mvm, REDUCE_TX_POWER_CMD, 0, len, &cmd);
848 }
849 
850 int iwl_mvm_get_sar_geo_profile(struct iwl_mvm *mvm)
851 {
852 	struct iwl_geo_tx_power_profiles_resp *resp;
853 	int ret;
854 
855 	struct iwl_geo_tx_power_profiles_cmd geo_cmd = {
856 		.ops = cpu_to_le32(IWL_PER_CHAIN_OFFSET_GET_CURRENT_TABLE),
857 	};
858 	struct iwl_host_cmd cmd = {
859 		.id =  WIDE_ID(PHY_OPS_GROUP, GEO_TX_POWER_LIMIT),
860 		.len = { sizeof(geo_cmd), },
861 		.flags = CMD_WANT_SKB,
862 		.data = { &geo_cmd },
863 	};
864 
865 	ret = iwl_mvm_send_cmd(mvm, &cmd);
866 	if (ret) {
867 		IWL_ERR(mvm, "Failed to get geographic profile info %d\n", ret);
868 		return ret;
869 	}
870 
871 	resp = (void *)cmd.resp_pkt->data;
872 	ret = le32_to_cpu(resp->profile_idx);
873 	if (WARN_ON(ret > ACPI_NUM_GEO_PROFILES)) {
874 		ret = -EIO;
875 		IWL_WARN(mvm, "Invalid geographic profile idx (%d)\n", ret);
876 	}
877 
878 	iwl_free_resp(&cmd);
879 	return ret;
880 }
881 
882 static int iwl_mvm_sar_geo_init(struct iwl_mvm *mvm)
883 {
884 	struct iwl_geo_tx_power_profiles_cmd cmd = {
885 		.ops = cpu_to_le32(IWL_PER_CHAIN_OFFSET_SET_TABLES),
886 	};
887 	int ret, i, j;
888 	u16 cmd_wide_id =  WIDE_ID(PHY_OPS_GROUP, GEO_TX_POWER_LIMIT);
889 
890 	/*
891 	 * This command is not supported on earlier firmware versions.
892 	 * Unfortunately, we don't have a TLV API flag to rely on, so
893 	 * rely on the major version which is in the first byte of
894 	 * ucode_ver.
895 	 */
896 	if (IWL_UCODE_SERIAL(mvm->fw->ucode_ver) < 41)
897 		return 0;
898 
899 	ret = iwl_mvm_sar_get_wgds_table(mvm);
900 	if (ret < 0) {
901 		IWL_DEBUG_RADIO(mvm,
902 				"Geo SAR BIOS table invalid or unavailable. (%d)\n",
903 				ret);
904 		/* we don't fail if the table is not available */
905 		return 0;
906 	}
907 
908 	IWL_DEBUG_RADIO(mvm, "Sending GEO_TX_POWER_LIMIT\n");
909 
910 	BUILD_BUG_ON(ACPI_NUM_GEO_PROFILES * ACPI_WGDS_NUM_BANDS *
911 		     ACPI_WGDS_TABLE_SIZE + 1 !=  ACPI_WGDS_WIFI_DATA_SIZE);
912 
913 	BUILD_BUG_ON(ACPI_NUM_GEO_PROFILES > IWL_NUM_GEO_PROFILES);
914 
915 	for (i = 0; i < ACPI_NUM_GEO_PROFILES; i++) {
916 		struct iwl_per_chain_offset *chain =
917 			(struct iwl_per_chain_offset *)&cmd.table[i];
918 
919 		for (j = 0; j < ACPI_WGDS_NUM_BANDS; j++) {
920 			u8 *value;
921 
922 			value = &mvm->geo_profiles[i].values[j *
923 				ACPI_GEO_PER_CHAIN_SIZE];
924 			chain[j].max_tx_power = cpu_to_le16(value[0]);
925 			chain[j].chain_a = value[1];
926 			chain[j].chain_b = value[2];
927 			IWL_DEBUG_RADIO(mvm,
928 					"SAR geographic profile[%d] Band[%d]: chain A = %d chain B = %d max_tx_power = %d\n",
929 					i, j, value[1], value[2], value[0]);
930 		}
931 	}
932 	return iwl_mvm_send_cmd_pdu(mvm, cmd_wide_id, 0, sizeof(cmd), &cmd);
933 }
934 
935 #else /* CONFIG_ACPI */
936 static int iwl_mvm_sar_get_wrds_table(struct iwl_mvm *mvm)
937 {
938 	return -ENOENT;
939 }
940 
941 static int iwl_mvm_sar_get_ewrd_table(struct iwl_mvm *mvm)
942 {
943 	return -ENOENT;
944 }
945 
946 static int iwl_mvm_sar_get_wgds_table(struct iwl_mvm *mvm)
947 {
948 	return -ENOENT;
949 }
950 
951 static int iwl_mvm_sar_geo_init(struct iwl_mvm *mvm)
952 {
953 	return 0;
954 }
955 
956 int iwl_mvm_sar_select_profile(struct iwl_mvm *mvm, int prof_a,
957 			       int prof_b)
958 {
959 	return -ENOENT;
960 }
961 
962 int iwl_mvm_get_sar_geo_profile(struct iwl_mvm *mvm)
963 {
964 	return -ENOENT;
965 }
966 #endif /* CONFIG_ACPI */
967 
968 static int iwl_mvm_sar_init(struct iwl_mvm *mvm)
969 {
970 	int ret;
971 
972 	ret = iwl_mvm_sar_get_wrds_table(mvm);
973 	if (ret < 0) {
974 		IWL_DEBUG_RADIO(mvm,
975 				"WRDS SAR BIOS table invalid or unavailable. (%d)\n",
976 				ret);
977 		/*
978 		 * If not available, don't fail and don't bother with EWRD.
979 		 * Return 1 to tell that we can't use WGDS either.
980 		 */
981 		return 1;
982 	}
983 
984 	ret = iwl_mvm_sar_get_ewrd_table(mvm);
985 	/* if EWRD is not available, we can still use WRDS, so don't fail */
986 	if (ret < 0)
987 		IWL_DEBUG_RADIO(mvm,
988 				"EWRD SAR BIOS table invalid or unavailable. (%d)\n",
989 				ret);
990 
991 	/* choose profile 1 (WRDS) as default for both chains */
992 	ret = iwl_mvm_sar_select_profile(mvm, 1, 1);
993 
994 	/*
995 	 * If we don't have profile 0 from BIOS, just skip it.  This
996 	 * means that SAR Geo will not be enabled either, even if we
997 	 * have other valid profiles.
998 	 */
999 	if (ret == -ENOENT)
1000 		return 1;
1001 
1002 	return ret;
1003 }
1004 
1005 static int iwl_mvm_load_rt_fw(struct iwl_mvm *mvm)
1006 {
1007 	int ret;
1008 
1009 	if (iwl_mvm_has_unified_ucode(mvm))
1010 		return iwl_run_unified_mvm_ucode(mvm, false);
1011 
1012 	ret = iwl_run_init_mvm_ucode(mvm, false);
1013 
1014 	if (ret) {
1015 		IWL_ERR(mvm, "Failed to run INIT ucode: %d\n", ret);
1016 
1017 		if (iwlmvm_mod_params.init_dbg)
1018 			return 0;
1019 		return ret;
1020 	}
1021 
1022 	/*
1023 	 * Stop and start the transport without entering low power
1024 	 * mode. This will save the state of other components on the
1025 	 * device that are triggered by the INIT firwmare (MFUART).
1026 	 */
1027 	_iwl_trans_stop_device(mvm->trans, false);
1028 	ret = _iwl_trans_start_hw(mvm->trans, false);
1029 	if (ret)
1030 		return ret;
1031 
1032 	iwl_fw_dbg_apply_point(&mvm->fwrt, IWL_FW_INI_APPLY_EARLY);
1033 
1034 	ret = iwl_mvm_load_ucode_wait_alive(mvm, IWL_UCODE_REGULAR);
1035 	if (ret)
1036 		return ret;
1037 
1038 	iwl_fw_dbg_apply_point(&mvm->fwrt, IWL_FW_INI_APPLY_AFTER_ALIVE);
1039 
1040 	return iwl_init_paging(&mvm->fwrt, mvm->fwrt.cur_fw_img);
1041 }
1042 
1043 int iwl_mvm_up(struct iwl_mvm *mvm)
1044 {
1045 	int ret, i;
1046 	struct ieee80211_channel *chan;
1047 	struct cfg80211_chan_def chandef;
1048 
1049 	lockdep_assert_held(&mvm->mutex);
1050 
1051 	ret = iwl_trans_start_hw(mvm->trans);
1052 	if (ret)
1053 		return ret;
1054 
1055 	ret = iwl_mvm_load_rt_fw(mvm);
1056 	if (ret) {
1057 		IWL_ERR(mvm, "Failed to start RT ucode: %d\n", ret);
1058 		iwl_fw_assert_error_dump(&mvm->fwrt);
1059 		goto error;
1060 	}
1061 
1062 	iwl_get_shared_mem_conf(&mvm->fwrt);
1063 
1064 	ret = iwl_mvm_sf_update(mvm, NULL, false);
1065 	if (ret)
1066 		IWL_ERR(mvm, "Failed to initialize Smart Fifo\n");
1067 
1068 	if (!mvm->trans->ini_valid) {
1069 		mvm->fwrt.dump.conf = FW_DBG_INVALID;
1070 		/* if we have a destination, assume EARLY START */
1071 		if (mvm->fw->dbg.dest_tlv)
1072 			mvm->fwrt.dump.conf = FW_DBG_START_FROM_ALIVE;
1073 		iwl_fw_start_dbg_conf(&mvm->fwrt, FW_DBG_START_FROM_ALIVE);
1074 	}
1075 
1076 	ret = iwl_send_tx_ant_cfg(mvm, iwl_mvm_get_valid_tx_ant(mvm));
1077 	if (ret)
1078 		goto error;
1079 
1080 	if (!iwl_mvm_has_unified_ucode(mvm)) {
1081 		/* Send phy db control command and then phy db calibration */
1082 		ret = iwl_send_phy_db_data(mvm->phy_db);
1083 		if (ret)
1084 			goto error;
1085 
1086 		ret = iwl_send_phy_cfg_cmd(mvm);
1087 		if (ret)
1088 			goto error;
1089 	}
1090 
1091 	ret = iwl_mvm_send_bt_init_conf(mvm);
1092 	if (ret)
1093 		goto error;
1094 
1095 	/* Init RSS configuration */
1096 	if (mvm->trans->cfg->device_family >= IWL_DEVICE_FAMILY_22000) {
1097 		ret = iwl_configure_rxq(mvm);
1098 		if (ret) {
1099 			IWL_ERR(mvm, "Failed to configure RX queues: %d\n",
1100 				ret);
1101 			goto error;
1102 		}
1103 	}
1104 
1105 	if (iwl_mvm_has_new_rx_api(mvm)) {
1106 		ret = iwl_send_rss_cfg_cmd(mvm);
1107 		if (ret) {
1108 			IWL_ERR(mvm, "Failed to configure RSS queues: %d\n",
1109 				ret);
1110 			goto error;
1111 		}
1112 	}
1113 
1114 	/* init the fw <-> mac80211 STA mapping */
1115 	for (i = 0; i < ARRAY_SIZE(mvm->fw_id_to_mac_id); i++)
1116 		RCU_INIT_POINTER(mvm->fw_id_to_mac_id[i], NULL);
1117 
1118 	mvm->tdls_cs.peer.sta_id = IWL_MVM_INVALID_STA;
1119 
1120 	/* reset quota debouncing buffer - 0xff will yield invalid data */
1121 	memset(&mvm->last_quota_cmd, 0xff, sizeof(mvm->last_quota_cmd));
1122 
1123 	ret = iwl_mvm_send_dqa_cmd(mvm);
1124 	if (ret)
1125 		goto error;
1126 
1127 	/* Add auxiliary station for scanning */
1128 	ret = iwl_mvm_add_aux_sta(mvm);
1129 	if (ret)
1130 		goto error;
1131 
1132 	/* Add all the PHY contexts */
1133 	chan = &mvm->hw->wiphy->bands[NL80211_BAND_2GHZ]->channels[0];
1134 	cfg80211_chandef_create(&chandef, chan, NL80211_CHAN_NO_HT);
1135 	for (i = 0; i < NUM_PHY_CTX; i++) {
1136 		/*
1137 		 * The channel used here isn't relevant as it's
1138 		 * going to be overwritten in the other flows.
1139 		 * For now use the first channel we have.
1140 		 */
1141 		ret = iwl_mvm_phy_ctxt_add(mvm, &mvm->phy_ctxts[i],
1142 					   &chandef, 1, 1);
1143 		if (ret)
1144 			goto error;
1145 	}
1146 
1147 #ifdef CONFIG_THERMAL
1148 	if (iwl_mvm_is_tt_in_fw(mvm)) {
1149 		/* in order to give the responsibility of ct-kill and
1150 		 * TX backoff to FW we need to send empty temperature reporting
1151 		 * cmd during init time
1152 		 */
1153 		iwl_mvm_send_temp_report_ths_cmd(mvm);
1154 	} else {
1155 		/* Initialize tx backoffs to the minimal possible */
1156 		iwl_mvm_tt_tx_backoff(mvm, 0);
1157 	}
1158 
1159 	/* TODO: read the budget from BIOS / Platform NVM */
1160 
1161 	/*
1162 	 * In case there is no budget from BIOS / Platform NVM the default
1163 	 * budget should be 2000mW (cooling state 0).
1164 	 */
1165 	if (iwl_mvm_is_ctdp_supported(mvm)) {
1166 		ret = iwl_mvm_ctdp_command(mvm, CTDP_CMD_OPERATION_START,
1167 					   mvm->cooling_dev.cur_state);
1168 		if (ret)
1169 			goto error;
1170 	}
1171 #else
1172 	/* Initialize tx backoffs to the minimal possible */
1173 	iwl_mvm_tt_tx_backoff(mvm, 0);
1174 #endif
1175 
1176 	WARN_ON(iwl_mvm_config_ltr(mvm));
1177 
1178 	ret = iwl_mvm_power_update_device(mvm);
1179 	if (ret)
1180 		goto error;
1181 
1182 	/*
1183 	 * RTNL is not taken during Ct-kill, but we don't need to scan/Tx
1184 	 * anyway, so don't init MCC.
1185 	 */
1186 	if (!test_bit(IWL_MVM_STATUS_HW_CTKILL, &mvm->status)) {
1187 		ret = iwl_mvm_init_mcc(mvm);
1188 		if (ret)
1189 			goto error;
1190 	}
1191 
1192 	if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_UMAC_SCAN)) {
1193 		mvm->scan_type = IWL_SCAN_TYPE_NOT_SET;
1194 		mvm->hb_scan_type = IWL_SCAN_TYPE_NOT_SET;
1195 		ret = iwl_mvm_config_scan(mvm);
1196 		if (ret)
1197 			goto error;
1198 	}
1199 
1200 	/* allow FW/transport low power modes if not during restart */
1201 	if (!test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status))
1202 		iwl_mvm_unref(mvm, IWL_MVM_REF_UCODE_DOWN);
1203 
1204 	ret = iwl_mvm_sar_init(mvm);
1205 	if (ret == 0) {
1206 		ret = iwl_mvm_sar_geo_init(mvm);
1207 	} else if (ret > 0 && !iwl_mvm_sar_get_wgds_table(mvm)) {
1208 		/*
1209 		 * If basic SAR is not available, we check for WGDS,
1210 		 * which should *not* be available either.  If it is
1211 		 * available, issue an error, because we can't use SAR
1212 		 * Geo without basic SAR.
1213 		 */
1214 		IWL_ERR(mvm, "BIOS contains WGDS but no WRDS\n");
1215 	}
1216 
1217 	if (ret < 0)
1218 		goto error;
1219 
1220 	iwl_mvm_leds_sync(mvm);
1221 
1222 	IWL_DEBUG_INFO(mvm, "RT uCode started.\n");
1223 	return 0;
1224  error:
1225 	if (!iwlmvm_mod_params.init_dbg || !ret)
1226 		iwl_mvm_stop_device(mvm);
1227 	return ret;
1228 }
1229 
1230 int iwl_mvm_load_d3_fw(struct iwl_mvm *mvm)
1231 {
1232 	int ret, i;
1233 
1234 	lockdep_assert_held(&mvm->mutex);
1235 
1236 	ret = iwl_trans_start_hw(mvm->trans);
1237 	if (ret)
1238 		return ret;
1239 
1240 	ret = iwl_mvm_load_ucode_wait_alive(mvm, IWL_UCODE_WOWLAN);
1241 	if (ret) {
1242 		IWL_ERR(mvm, "Failed to start WoWLAN firmware: %d\n", ret);
1243 		goto error;
1244 	}
1245 
1246 	ret = iwl_send_tx_ant_cfg(mvm, iwl_mvm_get_valid_tx_ant(mvm));
1247 	if (ret)
1248 		goto error;
1249 
1250 	/* Send phy db control command and then phy db calibration*/
1251 	ret = iwl_send_phy_db_data(mvm->phy_db);
1252 	if (ret)
1253 		goto error;
1254 
1255 	ret = iwl_send_phy_cfg_cmd(mvm);
1256 	if (ret)
1257 		goto error;
1258 
1259 	/* init the fw <-> mac80211 STA mapping */
1260 	for (i = 0; i < ARRAY_SIZE(mvm->fw_id_to_mac_id); i++)
1261 		RCU_INIT_POINTER(mvm->fw_id_to_mac_id[i], NULL);
1262 
1263 	/* Add auxiliary station for scanning */
1264 	ret = iwl_mvm_add_aux_sta(mvm);
1265 	if (ret)
1266 		goto error;
1267 
1268 	return 0;
1269  error:
1270 	iwl_mvm_stop_device(mvm);
1271 	return ret;
1272 }
1273 
1274 void iwl_mvm_rx_card_state_notif(struct iwl_mvm *mvm,
1275 				 struct iwl_rx_cmd_buffer *rxb)
1276 {
1277 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
1278 	struct iwl_card_state_notif *card_state_notif = (void *)pkt->data;
1279 	u32 flags = le32_to_cpu(card_state_notif->flags);
1280 
1281 	IWL_DEBUG_RF_KILL(mvm, "Card state received: HW:%s SW:%s CT:%s\n",
1282 			  (flags & HW_CARD_DISABLED) ? "Kill" : "On",
1283 			  (flags & SW_CARD_DISABLED) ? "Kill" : "On",
1284 			  (flags & CT_KILL_CARD_DISABLED) ?
1285 			  "Reached" : "Not reached");
1286 }
1287 
1288 void iwl_mvm_rx_mfuart_notif(struct iwl_mvm *mvm,
1289 			     struct iwl_rx_cmd_buffer *rxb)
1290 {
1291 	struct iwl_rx_packet *pkt = rxb_addr(rxb);
1292 	struct iwl_mfuart_load_notif *mfuart_notif = (void *)pkt->data;
1293 
1294 	IWL_DEBUG_INFO(mvm,
1295 		       "MFUART: installed ver: 0x%08x, external ver: 0x%08x, status: 0x%08x, duration: 0x%08x\n",
1296 		       le32_to_cpu(mfuart_notif->installed_ver),
1297 		       le32_to_cpu(mfuart_notif->external_ver),
1298 		       le32_to_cpu(mfuart_notif->status),
1299 		       le32_to_cpu(mfuart_notif->duration));
1300 
1301 	if (iwl_rx_packet_payload_len(pkt) == sizeof(*mfuart_notif))
1302 		IWL_DEBUG_INFO(mvm,
1303 			       "MFUART: image size: 0x%08x\n",
1304 			       le32_to_cpu(mfuart_notif->image_size));
1305 }
1306