1 /******************************************************************************
2  *
3  * This file is provided under a dual BSD/GPLv2 license.  When using or
4  * redistributing this file, you may do so under either license.
5  *
6  * GPL LICENSE SUMMARY
7  *
8  * Copyright(c) 2007 - 2015 Intel Corporation. All rights reserved.
9  * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
10  * Copyright(c) 2016 - 2017 Intel Deutschland GmbH
11  * Copyright(c) 2018 - 2019 Intel Corporation
12  *
13  * This program is free software; you can redistribute it and/or modify
14  * it under the terms of version 2 of the GNU General Public License as
15  * published by the Free Software Foundation.
16  *
17  * This program is distributed in the hope that it will be useful, but
18  * WITHOUT ANY WARRANTY; without even the implied warranty of
19  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
20  * General Public License for more details.
21  *
22  * The full GNU General Public License is included in this distribution
23  * in the file called COPYING.
24  *
25  * Contact Information:
26  *  Intel Linux Wireless <linuxwifi@intel.com>
27  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
28  *
29  * BSD LICENSE
30  *
31  * Copyright(c) 2005 - 2015 Intel Corporation. All rights reserved.
32  * Copyright(c) 2013 - 2015 Intel Mobile Communications GmbH
33  * Copyright(c) 2016 - 2017 Intel Deutschland GmbH
34  * Copyright(c) 2018 - 2019 Intel Corporation
35  * All rights reserved.
36  *
37  * Redistribution and use in source and binary forms, with or without
38  * modification, are permitted provided that the following conditions
39  * are met:
40  *
41  *  * Redistributions of source code must retain the above copyright
42  *    notice, this list of conditions and the following disclaimer.
43  *  * Redistributions in binary form must reproduce the above copyright
44  *    notice, this list of conditions and the following disclaimer in
45  *    the documentation and/or other materials provided with the
46  *    distribution.
47  *  * Neither the name Intel Corporation nor the names of its
48  *    contributors may be used to endorse or promote products derived
49  *    from this software without specific prior written permission.
50  *
51  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
52  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
53  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
54  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
55  * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
56  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
57  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
58  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
59  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
60  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
61  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
62  *
63  *****************************************************************************/
64 #include <linux/pci.h>
65 #include <linux/interrupt.h>
66 #include <linux/debugfs.h>
67 #include <linux/sched.h>
68 #include <linux/bitops.h>
69 #include <linux/gfp.h>
70 #include <linux/vmalloc.h>
71 #include <linux/module.h>
72 #include <linux/wait.h>
73 
74 #include "iwl-drv.h"
75 #include "iwl-trans.h"
76 #include "iwl-csr.h"
77 #include "iwl-prph.h"
78 #include "iwl-scd.h"
79 #include "iwl-agn-hw.h"
80 #include "fw/error-dump.h"
81 #include "fw/dbg.h"
82 #include "fw/api/tx.h"
83 #include "internal.h"
84 #include "iwl-fh.h"
85 
86 /* extended range in FW SRAM */
87 #define IWL_FW_MEM_EXTENDED_START	0x40000
88 #define IWL_FW_MEM_EXTENDED_END		0x57FFF
89 
90 void iwl_trans_pcie_dump_regs(struct iwl_trans *trans)
91 {
92 #define PCI_DUMP_SIZE		352
93 #define PCI_MEM_DUMP_SIZE	64
94 #define PCI_PARENT_DUMP_SIZE	524
95 #define PREFIX_LEN		32
96 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
97 	struct pci_dev *pdev = trans_pcie->pci_dev;
98 	u32 i, pos, alloc_size, *ptr, *buf;
99 	char *prefix;
100 
101 	if (trans_pcie->pcie_dbg_dumped_once)
102 		return;
103 
104 	/* Should be a multiple of 4 */
105 	BUILD_BUG_ON(PCI_DUMP_SIZE > 4096 || PCI_DUMP_SIZE & 0x3);
106 	BUILD_BUG_ON(PCI_MEM_DUMP_SIZE > 4096 || PCI_MEM_DUMP_SIZE & 0x3);
107 	BUILD_BUG_ON(PCI_PARENT_DUMP_SIZE > 4096 || PCI_PARENT_DUMP_SIZE & 0x3);
108 
109 	/* Alloc a max size buffer */
110 	alloc_size = PCI_ERR_ROOT_ERR_SRC +  4 + PREFIX_LEN;
111 	alloc_size = max_t(u32, alloc_size, PCI_DUMP_SIZE + PREFIX_LEN);
112 	alloc_size = max_t(u32, alloc_size, PCI_MEM_DUMP_SIZE + PREFIX_LEN);
113 	alloc_size = max_t(u32, alloc_size, PCI_PARENT_DUMP_SIZE + PREFIX_LEN);
114 
115 	buf = kmalloc(alloc_size, GFP_ATOMIC);
116 	if (!buf)
117 		return;
118 	prefix = (char *)buf + alloc_size - PREFIX_LEN;
119 
120 	IWL_ERR(trans, "iwlwifi transaction failed, dumping registers\n");
121 
122 	/* Print wifi device registers */
123 	sprintf(prefix, "iwlwifi %s: ", pci_name(pdev));
124 	IWL_ERR(trans, "iwlwifi device config registers:\n");
125 	for (i = 0, ptr = buf; i < PCI_DUMP_SIZE; i += 4, ptr++)
126 		if (pci_read_config_dword(pdev, i, ptr))
127 			goto err_read;
128 	print_hex_dump(KERN_ERR, prefix, DUMP_PREFIX_OFFSET, 32, 4, buf, i, 0);
129 
130 	IWL_ERR(trans, "iwlwifi device memory mapped registers:\n");
131 	for (i = 0, ptr = buf; i < PCI_MEM_DUMP_SIZE; i += 4, ptr++)
132 		*ptr = iwl_read32(trans, i);
133 	print_hex_dump(KERN_ERR, prefix, DUMP_PREFIX_OFFSET, 32, 4, buf, i, 0);
134 
135 	pos = pci_find_ext_capability(pdev, PCI_EXT_CAP_ID_ERR);
136 	if (pos) {
137 		IWL_ERR(trans, "iwlwifi device AER capability structure:\n");
138 		for (i = 0, ptr = buf; i < PCI_ERR_ROOT_COMMAND; i += 4, ptr++)
139 			if (pci_read_config_dword(pdev, pos + i, ptr))
140 				goto err_read;
141 		print_hex_dump(KERN_ERR, prefix, DUMP_PREFIX_OFFSET,
142 			       32, 4, buf, i, 0);
143 	}
144 
145 	/* Print parent device registers next */
146 	if (!pdev->bus->self)
147 		goto out;
148 
149 	pdev = pdev->bus->self;
150 	sprintf(prefix, "iwlwifi %s: ", pci_name(pdev));
151 
152 	IWL_ERR(trans, "iwlwifi parent port (%s) config registers:\n",
153 		pci_name(pdev));
154 	for (i = 0, ptr = buf; i < PCI_PARENT_DUMP_SIZE; i += 4, ptr++)
155 		if (pci_read_config_dword(pdev, i, ptr))
156 			goto err_read;
157 	print_hex_dump(KERN_ERR, prefix, DUMP_PREFIX_OFFSET, 32, 4, buf, i, 0);
158 
159 	/* Print root port AER registers */
160 	pos = 0;
161 	pdev = pcie_find_root_port(pdev);
162 	if (pdev)
163 		pos = pci_find_ext_capability(pdev, PCI_EXT_CAP_ID_ERR);
164 	if (pos) {
165 		IWL_ERR(trans, "iwlwifi root port (%s) AER cap structure:\n",
166 			pci_name(pdev));
167 		sprintf(prefix, "iwlwifi %s: ", pci_name(pdev));
168 		for (i = 0, ptr = buf; i <= PCI_ERR_ROOT_ERR_SRC; i += 4, ptr++)
169 			if (pci_read_config_dword(pdev, pos + i, ptr))
170 				goto err_read;
171 		print_hex_dump(KERN_ERR, prefix, DUMP_PREFIX_OFFSET, 32,
172 			       4, buf, i, 0);
173 	}
174 	goto out;
175 
176 err_read:
177 	print_hex_dump(KERN_ERR, prefix, DUMP_PREFIX_OFFSET, 32, 4, buf, i, 0);
178 	IWL_ERR(trans, "Read failed at 0x%X\n", i);
179 out:
180 	trans_pcie->pcie_dbg_dumped_once = 1;
181 	kfree(buf);
182 }
183 
184 static void iwl_trans_pcie_sw_reset(struct iwl_trans *trans)
185 {
186 	/* Reset entire device - do controller reset (results in SHRD_HW_RST) */
187 	iwl_set_bit(trans, trans->trans_cfg->csr->addr_sw_reset,
188 		    BIT(trans->trans_cfg->csr->flag_sw_reset));
189 	usleep_range(5000, 6000);
190 }
191 
192 static void iwl_pcie_free_fw_monitor(struct iwl_trans *trans)
193 {
194 	struct iwl_dram_data *fw_mon = &trans->dbg.fw_mon;
195 
196 	if (!fw_mon->size)
197 		return;
198 
199 	dma_free_coherent(trans->dev, fw_mon->size, fw_mon->block,
200 			  fw_mon->physical);
201 
202 	fw_mon->block = NULL;
203 	fw_mon->physical = 0;
204 	fw_mon->size = 0;
205 }
206 
207 static void iwl_pcie_alloc_fw_monitor_block(struct iwl_trans *trans,
208 					    u8 max_power, u8 min_power)
209 {
210 	struct iwl_dram_data *fw_mon = &trans->dbg.fw_mon;
211 	void *block = NULL;
212 	dma_addr_t physical = 0;
213 	u32 size = 0;
214 	u8 power;
215 
216 	if (fw_mon->size)
217 		return;
218 
219 	for (power = max_power; power >= min_power; power--) {
220 		size = BIT(power);
221 		block = dma_alloc_coherent(trans->dev, size, &physical,
222 					   GFP_KERNEL | __GFP_NOWARN);
223 		if (!block)
224 			continue;
225 
226 		IWL_INFO(trans,
227 			 "Allocated 0x%08x bytes for firmware monitor.\n",
228 			 size);
229 		break;
230 	}
231 
232 	if (WARN_ON_ONCE(!block))
233 		return;
234 
235 	if (power != max_power)
236 		IWL_ERR(trans,
237 			"Sorry - debug buffer is only %luK while you requested %luK\n",
238 			(unsigned long)BIT(power - 10),
239 			(unsigned long)BIT(max_power - 10));
240 
241 	fw_mon->block = block;
242 	fw_mon->physical = physical;
243 	fw_mon->size = size;
244 }
245 
246 void iwl_pcie_alloc_fw_monitor(struct iwl_trans *trans, u8 max_power)
247 {
248 	if (!max_power) {
249 		/* default max_power is maximum */
250 		max_power = 26;
251 	} else {
252 		max_power += 11;
253 	}
254 
255 	if (WARN(max_power > 26,
256 		 "External buffer size for monitor is too big %d, check the FW TLV\n",
257 		 max_power))
258 		return;
259 
260 	if (trans->dbg.fw_mon.size)
261 		return;
262 
263 	iwl_pcie_alloc_fw_monitor_block(trans, max_power, 11);
264 }
265 
266 static u32 iwl_trans_pcie_read_shr(struct iwl_trans *trans, u32 reg)
267 {
268 	iwl_write32(trans, HEEP_CTRL_WRD_PCIEX_CTRL_REG,
269 		    ((reg & 0x0000ffff) | (2 << 28)));
270 	return iwl_read32(trans, HEEP_CTRL_WRD_PCIEX_DATA_REG);
271 }
272 
273 static void iwl_trans_pcie_write_shr(struct iwl_trans *trans, u32 reg, u32 val)
274 {
275 	iwl_write32(trans, HEEP_CTRL_WRD_PCIEX_DATA_REG, val);
276 	iwl_write32(trans, HEEP_CTRL_WRD_PCIEX_CTRL_REG,
277 		    ((reg & 0x0000ffff) | (3 << 28)));
278 }
279 
280 static void iwl_pcie_set_pwr(struct iwl_trans *trans, bool vaux)
281 {
282 	if (trans->cfg->apmg_not_supported)
283 		return;
284 
285 	if (vaux && pci_pme_capable(to_pci_dev(trans->dev), PCI_D3cold))
286 		iwl_set_bits_mask_prph(trans, APMG_PS_CTRL_REG,
287 				       APMG_PS_CTRL_VAL_PWR_SRC_VAUX,
288 				       ~APMG_PS_CTRL_MSK_PWR_SRC);
289 	else
290 		iwl_set_bits_mask_prph(trans, APMG_PS_CTRL_REG,
291 				       APMG_PS_CTRL_VAL_PWR_SRC_VMAIN,
292 				       ~APMG_PS_CTRL_MSK_PWR_SRC);
293 }
294 
295 /* PCI registers */
296 #define PCI_CFG_RETRY_TIMEOUT	0x041
297 
298 void iwl_pcie_apm_config(struct iwl_trans *trans)
299 {
300 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
301 	u16 lctl;
302 	u16 cap;
303 
304 	/*
305 	 * L0S states have been found to be unstable with our devices
306 	 * and in newer hardware they are not officially supported at
307 	 * all, so we must always set the L0S_DISABLED bit.
308 	 */
309 	iwl_set_bit(trans, CSR_GIO_REG, CSR_GIO_REG_VAL_L0S_DISABLED);
310 
311 	pcie_capability_read_word(trans_pcie->pci_dev, PCI_EXP_LNKCTL, &lctl);
312 	trans->pm_support = !(lctl & PCI_EXP_LNKCTL_ASPM_L0S);
313 
314 	pcie_capability_read_word(trans_pcie->pci_dev, PCI_EXP_DEVCTL2, &cap);
315 	trans->ltr_enabled = cap & PCI_EXP_DEVCTL2_LTR_EN;
316 	IWL_DEBUG_POWER(trans, "L1 %sabled - LTR %sabled\n",
317 			(lctl & PCI_EXP_LNKCTL_ASPM_L1) ? "En" : "Dis",
318 			trans->ltr_enabled ? "En" : "Dis");
319 }
320 
321 /*
322  * Start up NIC's basic functionality after it has been reset
323  * (e.g. after platform boot, or shutdown via iwl_pcie_apm_stop())
324  * NOTE:  This does not load uCode nor start the embedded processor
325  */
326 static int iwl_pcie_apm_init(struct iwl_trans *trans)
327 {
328 	int ret;
329 
330 	IWL_DEBUG_INFO(trans, "Init card's basic functions\n");
331 
332 	/*
333 	 * Use "set_bit" below rather than "write", to preserve any hardware
334 	 * bits already set by default after reset.
335 	 */
336 
337 	/* Disable L0S exit timer (platform NMI Work/Around) */
338 	if (trans->trans_cfg->device_family < IWL_DEVICE_FAMILY_8000)
339 		iwl_set_bit(trans, CSR_GIO_CHICKEN_BITS,
340 			    CSR_GIO_CHICKEN_BITS_REG_BIT_DIS_L0S_EXIT_TIMER);
341 
342 	/*
343 	 * Disable L0s without affecting L1;
344 	 *  don't wait for ICH L0s (ICH bug W/A)
345 	 */
346 	iwl_set_bit(trans, CSR_GIO_CHICKEN_BITS,
347 		    CSR_GIO_CHICKEN_BITS_REG_BIT_L1A_NO_L0S_RX);
348 
349 	/* Set FH wait threshold to maximum (HW error during stress W/A) */
350 	iwl_set_bit(trans, CSR_DBG_HPET_MEM_REG, CSR_DBG_HPET_MEM_REG_VAL);
351 
352 	/*
353 	 * Enable HAP INTA (interrupt from management bus) to
354 	 * wake device's PCI Express link L1a -> L0s
355 	 */
356 	iwl_set_bit(trans, CSR_HW_IF_CONFIG_REG,
357 		    CSR_HW_IF_CONFIG_REG_BIT_HAP_WAKE_L1A);
358 
359 	iwl_pcie_apm_config(trans);
360 
361 	/* Configure analog phase-lock-loop before activating to D0A */
362 	if (trans->trans_cfg->base_params->pll_cfg)
363 		iwl_set_bit(trans, CSR_ANA_PLL_CFG, CSR50_ANA_PLL_CFG_VAL);
364 
365 	ret = iwl_finish_nic_init(trans, trans->trans_cfg);
366 	if (ret)
367 		return ret;
368 
369 	if (trans->cfg->host_interrupt_operation_mode) {
370 		/*
371 		 * This is a bit of an abuse - This is needed for 7260 / 3160
372 		 * only check host_interrupt_operation_mode even if this is
373 		 * not related to host_interrupt_operation_mode.
374 		 *
375 		 * Enable the oscillator to count wake up time for L1 exit. This
376 		 * consumes slightly more power (100uA) - but allows to be sure
377 		 * that we wake up from L1 on time.
378 		 *
379 		 * This looks weird: read twice the same register, discard the
380 		 * value, set a bit, and yet again, read that same register
381 		 * just to discard the value. But that's the way the hardware
382 		 * seems to like it.
383 		 */
384 		iwl_read_prph(trans, OSC_CLK);
385 		iwl_read_prph(trans, OSC_CLK);
386 		iwl_set_bits_prph(trans, OSC_CLK, OSC_CLK_FORCE_CONTROL);
387 		iwl_read_prph(trans, OSC_CLK);
388 		iwl_read_prph(trans, OSC_CLK);
389 	}
390 
391 	/*
392 	 * Enable DMA clock and wait for it to stabilize.
393 	 *
394 	 * Write to "CLK_EN_REG"; "1" bits enable clocks, while "0"
395 	 * bits do not disable clocks.  This preserves any hardware
396 	 * bits already set by default in "CLK_CTRL_REG" after reset.
397 	 */
398 	if (!trans->cfg->apmg_not_supported) {
399 		iwl_write_prph(trans, APMG_CLK_EN_REG,
400 			       APMG_CLK_VAL_DMA_CLK_RQT);
401 		udelay(20);
402 
403 		/* Disable L1-Active */
404 		iwl_set_bits_prph(trans, APMG_PCIDEV_STT_REG,
405 				  APMG_PCIDEV_STT_VAL_L1_ACT_DIS);
406 
407 		/* Clear the interrupt in APMG if the NIC is in RFKILL */
408 		iwl_write_prph(trans, APMG_RTC_INT_STT_REG,
409 			       APMG_RTC_INT_STT_RFKILL);
410 	}
411 
412 	set_bit(STATUS_DEVICE_ENABLED, &trans->status);
413 
414 	return 0;
415 }
416 
417 /*
418  * Enable LP XTAL to avoid HW bug where device may consume much power if
419  * FW is not loaded after device reset. LP XTAL is disabled by default
420  * after device HW reset. Do it only if XTAL is fed by internal source.
421  * Configure device's "persistence" mode to avoid resetting XTAL again when
422  * SHRD_HW_RST occurs in S3.
423  */
424 static void iwl_pcie_apm_lp_xtal_enable(struct iwl_trans *trans)
425 {
426 	int ret;
427 	u32 apmg_gp1_reg;
428 	u32 apmg_xtal_cfg_reg;
429 	u32 dl_cfg_reg;
430 
431 	/* Force XTAL ON */
432 	__iwl_trans_pcie_set_bit(trans, CSR_GP_CNTRL,
433 				 CSR_GP_CNTRL_REG_FLAG_XTAL_ON);
434 
435 	iwl_trans_pcie_sw_reset(trans);
436 
437 	ret = iwl_finish_nic_init(trans, trans->trans_cfg);
438 	if (WARN_ON(ret)) {
439 		/* Release XTAL ON request */
440 		__iwl_trans_pcie_clear_bit(trans, CSR_GP_CNTRL,
441 					   CSR_GP_CNTRL_REG_FLAG_XTAL_ON);
442 		return;
443 	}
444 
445 	/*
446 	 * Clear "disable persistence" to avoid LP XTAL resetting when
447 	 * SHRD_HW_RST is applied in S3.
448 	 */
449 	iwl_clear_bits_prph(trans, APMG_PCIDEV_STT_REG,
450 				    APMG_PCIDEV_STT_VAL_PERSIST_DIS);
451 
452 	/*
453 	 * Force APMG XTAL to be active to prevent its disabling by HW
454 	 * caused by APMG idle state.
455 	 */
456 	apmg_xtal_cfg_reg = iwl_trans_pcie_read_shr(trans,
457 						    SHR_APMG_XTAL_CFG_REG);
458 	iwl_trans_pcie_write_shr(trans, SHR_APMG_XTAL_CFG_REG,
459 				 apmg_xtal_cfg_reg |
460 				 SHR_APMG_XTAL_CFG_XTAL_ON_REQ);
461 
462 	iwl_trans_pcie_sw_reset(trans);
463 
464 	/* Enable LP XTAL by indirect access through CSR */
465 	apmg_gp1_reg = iwl_trans_pcie_read_shr(trans, SHR_APMG_GP1_REG);
466 	iwl_trans_pcie_write_shr(trans, SHR_APMG_GP1_REG, apmg_gp1_reg |
467 				 SHR_APMG_GP1_WF_XTAL_LP_EN |
468 				 SHR_APMG_GP1_CHICKEN_BIT_SELECT);
469 
470 	/* Clear delay line clock power up */
471 	dl_cfg_reg = iwl_trans_pcie_read_shr(trans, SHR_APMG_DL_CFG_REG);
472 	iwl_trans_pcie_write_shr(trans, SHR_APMG_DL_CFG_REG, dl_cfg_reg &
473 				 ~SHR_APMG_DL_CFG_DL_CLOCK_POWER_UP);
474 
475 	/*
476 	 * Enable persistence mode to avoid LP XTAL resetting when
477 	 * SHRD_HW_RST is applied in S3.
478 	 */
479 	iwl_set_bit(trans, CSR_HW_IF_CONFIG_REG,
480 		    CSR_HW_IF_CONFIG_REG_PERSIST_MODE);
481 
482 	/*
483 	 * Clear "initialization complete" bit to move adapter from
484 	 * D0A* (powered-up Active) --> D0U* (Uninitialized) state.
485 	 */
486 	iwl_clear_bit(trans, CSR_GP_CNTRL,
487 		      BIT(trans->trans_cfg->csr->flag_init_done));
488 
489 	/* Activates XTAL resources monitor */
490 	__iwl_trans_pcie_set_bit(trans, CSR_MONITOR_CFG_REG,
491 				 CSR_MONITOR_XTAL_RESOURCES);
492 
493 	/* Release XTAL ON request */
494 	__iwl_trans_pcie_clear_bit(trans, CSR_GP_CNTRL,
495 				   CSR_GP_CNTRL_REG_FLAG_XTAL_ON);
496 	udelay(10);
497 
498 	/* Release APMG XTAL */
499 	iwl_trans_pcie_write_shr(trans, SHR_APMG_XTAL_CFG_REG,
500 				 apmg_xtal_cfg_reg &
501 				 ~SHR_APMG_XTAL_CFG_XTAL_ON_REQ);
502 }
503 
504 void iwl_pcie_apm_stop_master(struct iwl_trans *trans)
505 {
506 	int ret;
507 
508 	/* stop device's busmaster DMA activity */
509 	iwl_set_bit(trans, trans->trans_cfg->csr->addr_sw_reset,
510 		    BIT(trans->trans_cfg->csr->flag_stop_master));
511 
512 	ret = iwl_poll_bit(trans, trans->trans_cfg->csr->addr_sw_reset,
513 			   BIT(trans->trans_cfg->csr->flag_master_dis),
514 			   BIT(trans->trans_cfg->csr->flag_master_dis), 100);
515 	if (ret < 0)
516 		IWL_WARN(trans, "Master Disable Timed Out, 100 usec\n");
517 
518 	IWL_DEBUG_INFO(trans, "stop master\n");
519 }
520 
521 static void iwl_pcie_apm_stop(struct iwl_trans *trans, bool op_mode_leave)
522 {
523 	IWL_DEBUG_INFO(trans, "Stop card, put in low power state\n");
524 
525 	if (op_mode_leave) {
526 		if (!test_bit(STATUS_DEVICE_ENABLED, &trans->status))
527 			iwl_pcie_apm_init(trans);
528 
529 		/* inform ME that we are leaving */
530 		if (trans->trans_cfg->device_family == IWL_DEVICE_FAMILY_7000)
531 			iwl_set_bits_prph(trans, APMG_PCIDEV_STT_REG,
532 					  APMG_PCIDEV_STT_VAL_WAKE_ME);
533 		else if (trans->trans_cfg->device_family >=
534 			 IWL_DEVICE_FAMILY_8000) {
535 			iwl_set_bit(trans, CSR_DBG_LINK_PWR_MGMT_REG,
536 				    CSR_RESET_LINK_PWR_MGMT_DISABLED);
537 			iwl_set_bit(trans, CSR_HW_IF_CONFIG_REG,
538 				    CSR_HW_IF_CONFIG_REG_PREPARE |
539 				    CSR_HW_IF_CONFIG_REG_ENABLE_PME);
540 			mdelay(1);
541 			iwl_clear_bit(trans, CSR_DBG_LINK_PWR_MGMT_REG,
542 				      CSR_RESET_LINK_PWR_MGMT_DISABLED);
543 		}
544 		mdelay(5);
545 	}
546 
547 	clear_bit(STATUS_DEVICE_ENABLED, &trans->status);
548 
549 	/* Stop device's DMA activity */
550 	iwl_pcie_apm_stop_master(trans);
551 
552 	if (trans->cfg->lp_xtal_workaround) {
553 		iwl_pcie_apm_lp_xtal_enable(trans);
554 		return;
555 	}
556 
557 	iwl_trans_pcie_sw_reset(trans);
558 
559 	/*
560 	 * Clear "initialization complete" bit to move adapter from
561 	 * D0A* (powered-up Active) --> D0U* (Uninitialized) state.
562 	 */
563 	iwl_clear_bit(trans, CSR_GP_CNTRL,
564 		      BIT(trans->trans_cfg->csr->flag_init_done));
565 }
566 
567 static int iwl_pcie_nic_init(struct iwl_trans *trans)
568 {
569 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
570 	int ret;
571 
572 	/* nic_init */
573 	spin_lock(&trans_pcie->irq_lock);
574 	ret = iwl_pcie_apm_init(trans);
575 	spin_unlock(&trans_pcie->irq_lock);
576 
577 	if (ret)
578 		return ret;
579 
580 	iwl_pcie_set_pwr(trans, false);
581 
582 	iwl_op_mode_nic_config(trans->op_mode);
583 
584 	/* Allocate the RX queue, or reset if it is already allocated */
585 	iwl_pcie_rx_init(trans);
586 
587 	/* Allocate or reset and init all Tx and Command queues */
588 	if (iwl_pcie_tx_init(trans))
589 		return -ENOMEM;
590 
591 	if (trans->trans_cfg->base_params->shadow_reg_enable) {
592 		/* enable shadow regs in HW */
593 		iwl_set_bit(trans, CSR_MAC_SHADOW_REG_CTRL, 0x800FFFFF);
594 		IWL_DEBUG_INFO(trans, "Enabling shadow registers in device\n");
595 	}
596 
597 	return 0;
598 }
599 
600 #define HW_READY_TIMEOUT (50)
601 
602 /* Note: returns poll_bit return value, which is >= 0 if success */
603 static int iwl_pcie_set_hw_ready(struct iwl_trans *trans)
604 {
605 	int ret;
606 
607 	iwl_set_bit(trans, CSR_HW_IF_CONFIG_REG,
608 		    CSR_HW_IF_CONFIG_REG_BIT_NIC_READY);
609 
610 	/* See if we got it */
611 	ret = iwl_poll_bit(trans, CSR_HW_IF_CONFIG_REG,
612 			   CSR_HW_IF_CONFIG_REG_BIT_NIC_READY,
613 			   CSR_HW_IF_CONFIG_REG_BIT_NIC_READY,
614 			   HW_READY_TIMEOUT);
615 
616 	if (ret >= 0)
617 		iwl_set_bit(trans, CSR_MBOX_SET_REG, CSR_MBOX_SET_REG_OS_ALIVE);
618 
619 	IWL_DEBUG_INFO(trans, "hardware%s ready\n", ret < 0 ? " not" : "");
620 	return ret;
621 }
622 
623 /* Note: returns standard 0/-ERROR code */
624 int iwl_pcie_prepare_card_hw(struct iwl_trans *trans)
625 {
626 	int ret;
627 	int t = 0;
628 	int iter;
629 
630 	IWL_DEBUG_INFO(trans, "iwl_trans_prepare_card_hw enter\n");
631 
632 	ret = iwl_pcie_set_hw_ready(trans);
633 	/* If the card is ready, exit 0 */
634 	if (ret >= 0)
635 		return 0;
636 
637 	iwl_set_bit(trans, CSR_DBG_LINK_PWR_MGMT_REG,
638 		    CSR_RESET_LINK_PWR_MGMT_DISABLED);
639 	usleep_range(1000, 2000);
640 
641 	for (iter = 0; iter < 10; iter++) {
642 		/* If HW is not ready, prepare the conditions to check again */
643 		iwl_set_bit(trans, CSR_HW_IF_CONFIG_REG,
644 			    CSR_HW_IF_CONFIG_REG_PREPARE);
645 
646 		do {
647 			ret = iwl_pcie_set_hw_ready(trans);
648 			if (ret >= 0)
649 				return 0;
650 
651 			usleep_range(200, 1000);
652 			t += 200;
653 		} while (t < 150000);
654 		msleep(25);
655 	}
656 
657 	IWL_ERR(trans, "Couldn't prepare the card\n");
658 
659 	return ret;
660 }
661 
662 /*
663  * ucode
664  */
665 static void iwl_pcie_load_firmware_chunk_fh(struct iwl_trans *trans,
666 					    u32 dst_addr, dma_addr_t phy_addr,
667 					    u32 byte_cnt)
668 {
669 	iwl_write32(trans, FH_TCSR_CHNL_TX_CONFIG_REG(FH_SRVC_CHNL),
670 		    FH_TCSR_TX_CONFIG_REG_VAL_DMA_CHNL_PAUSE);
671 
672 	iwl_write32(trans, FH_SRVC_CHNL_SRAM_ADDR_REG(FH_SRVC_CHNL),
673 		    dst_addr);
674 
675 	iwl_write32(trans, FH_TFDIB_CTRL0_REG(FH_SRVC_CHNL),
676 		    phy_addr & FH_MEM_TFDIB_DRAM_ADDR_LSB_MSK);
677 
678 	iwl_write32(trans, FH_TFDIB_CTRL1_REG(FH_SRVC_CHNL),
679 		    (iwl_get_dma_hi_addr(phy_addr)
680 			<< FH_MEM_TFDIB_REG1_ADDR_BITSHIFT) | byte_cnt);
681 
682 	iwl_write32(trans, FH_TCSR_CHNL_TX_BUF_STS_REG(FH_SRVC_CHNL),
683 		    BIT(FH_TCSR_CHNL_TX_BUF_STS_REG_POS_TB_NUM) |
684 		    BIT(FH_TCSR_CHNL_TX_BUF_STS_REG_POS_TB_IDX) |
685 		    FH_TCSR_CHNL_TX_BUF_STS_REG_VAL_TFDB_VALID);
686 
687 	iwl_write32(trans, FH_TCSR_CHNL_TX_CONFIG_REG(FH_SRVC_CHNL),
688 		    FH_TCSR_TX_CONFIG_REG_VAL_DMA_CHNL_ENABLE |
689 		    FH_TCSR_TX_CONFIG_REG_VAL_DMA_CREDIT_DISABLE |
690 		    FH_TCSR_TX_CONFIG_REG_VAL_CIRQ_HOST_ENDTFD);
691 }
692 
693 static int iwl_pcie_load_firmware_chunk(struct iwl_trans *trans,
694 					u32 dst_addr, dma_addr_t phy_addr,
695 					u32 byte_cnt)
696 {
697 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
698 	unsigned long flags;
699 	int ret;
700 
701 	trans_pcie->ucode_write_complete = false;
702 
703 	if (!iwl_trans_grab_nic_access(trans, &flags))
704 		return -EIO;
705 
706 	iwl_pcie_load_firmware_chunk_fh(trans, dst_addr, phy_addr,
707 					byte_cnt);
708 	iwl_trans_release_nic_access(trans, &flags);
709 
710 	ret = wait_event_timeout(trans_pcie->ucode_write_waitq,
711 				 trans_pcie->ucode_write_complete, 5 * HZ);
712 	if (!ret) {
713 		IWL_ERR(trans, "Failed to load firmware chunk!\n");
714 		iwl_trans_pcie_dump_regs(trans);
715 		return -ETIMEDOUT;
716 	}
717 
718 	return 0;
719 }
720 
721 static int iwl_pcie_load_section(struct iwl_trans *trans, u8 section_num,
722 			    const struct fw_desc *section)
723 {
724 	u8 *v_addr;
725 	dma_addr_t p_addr;
726 	u32 offset, chunk_sz = min_t(u32, FH_MEM_TB_MAX_LENGTH, section->len);
727 	int ret = 0;
728 
729 	IWL_DEBUG_FW(trans, "[%d] uCode section being loaded...\n",
730 		     section_num);
731 
732 	v_addr = dma_alloc_coherent(trans->dev, chunk_sz, &p_addr,
733 				    GFP_KERNEL | __GFP_NOWARN);
734 	if (!v_addr) {
735 		IWL_DEBUG_INFO(trans, "Falling back to small chunks of DMA\n");
736 		chunk_sz = PAGE_SIZE;
737 		v_addr = dma_alloc_coherent(trans->dev, chunk_sz,
738 					    &p_addr, GFP_KERNEL);
739 		if (!v_addr)
740 			return -ENOMEM;
741 	}
742 
743 	for (offset = 0; offset < section->len; offset += chunk_sz) {
744 		u32 copy_size, dst_addr;
745 		bool extended_addr = false;
746 
747 		copy_size = min_t(u32, chunk_sz, section->len - offset);
748 		dst_addr = section->offset + offset;
749 
750 		if (dst_addr >= IWL_FW_MEM_EXTENDED_START &&
751 		    dst_addr <= IWL_FW_MEM_EXTENDED_END)
752 			extended_addr = true;
753 
754 		if (extended_addr)
755 			iwl_set_bits_prph(trans, LMPM_CHICK,
756 					  LMPM_CHICK_EXTENDED_ADDR_SPACE);
757 
758 		memcpy(v_addr, (u8 *)section->data + offset, copy_size);
759 		ret = iwl_pcie_load_firmware_chunk(trans, dst_addr, p_addr,
760 						   copy_size);
761 
762 		if (extended_addr)
763 			iwl_clear_bits_prph(trans, LMPM_CHICK,
764 					    LMPM_CHICK_EXTENDED_ADDR_SPACE);
765 
766 		if (ret) {
767 			IWL_ERR(trans,
768 				"Could not load the [%d] uCode section\n",
769 				section_num);
770 			break;
771 		}
772 	}
773 
774 	dma_free_coherent(trans->dev, chunk_sz, v_addr, p_addr);
775 	return ret;
776 }
777 
778 static int iwl_pcie_load_cpu_sections_8000(struct iwl_trans *trans,
779 					   const struct fw_img *image,
780 					   int cpu,
781 					   int *first_ucode_section)
782 {
783 	int shift_param;
784 	int i, ret = 0, sec_num = 0x1;
785 	u32 val, last_read_idx = 0;
786 
787 	if (cpu == 1) {
788 		shift_param = 0;
789 		*first_ucode_section = 0;
790 	} else {
791 		shift_param = 16;
792 		(*first_ucode_section)++;
793 	}
794 
795 	for (i = *first_ucode_section; i < image->num_sec; i++) {
796 		last_read_idx = i;
797 
798 		/*
799 		 * CPU1_CPU2_SEPARATOR_SECTION delimiter - separate between
800 		 * CPU1 to CPU2.
801 		 * PAGING_SEPARATOR_SECTION delimiter - separate between
802 		 * CPU2 non paged to CPU2 paging sec.
803 		 */
804 		if (!image->sec[i].data ||
805 		    image->sec[i].offset == CPU1_CPU2_SEPARATOR_SECTION ||
806 		    image->sec[i].offset == PAGING_SEPARATOR_SECTION) {
807 			IWL_DEBUG_FW(trans,
808 				     "Break since Data not valid or Empty section, sec = %d\n",
809 				     i);
810 			break;
811 		}
812 
813 		ret = iwl_pcie_load_section(trans, i, &image->sec[i]);
814 		if (ret)
815 			return ret;
816 
817 		/* Notify ucode of loaded section number and status */
818 		val = iwl_read_direct32(trans, FH_UCODE_LOAD_STATUS);
819 		val = val | (sec_num << shift_param);
820 		iwl_write_direct32(trans, FH_UCODE_LOAD_STATUS, val);
821 
822 		sec_num = (sec_num << 1) | 0x1;
823 	}
824 
825 	*first_ucode_section = last_read_idx;
826 
827 	iwl_enable_interrupts(trans);
828 
829 	if (trans->trans_cfg->use_tfh) {
830 		if (cpu == 1)
831 			iwl_write_prph(trans, UREG_UCODE_LOAD_STATUS,
832 				       0xFFFF);
833 		else
834 			iwl_write_prph(trans, UREG_UCODE_LOAD_STATUS,
835 				       0xFFFFFFFF);
836 	} else {
837 		if (cpu == 1)
838 			iwl_write_direct32(trans, FH_UCODE_LOAD_STATUS,
839 					   0xFFFF);
840 		else
841 			iwl_write_direct32(trans, FH_UCODE_LOAD_STATUS,
842 					   0xFFFFFFFF);
843 	}
844 
845 	return 0;
846 }
847 
848 static int iwl_pcie_load_cpu_sections(struct iwl_trans *trans,
849 				      const struct fw_img *image,
850 				      int cpu,
851 				      int *first_ucode_section)
852 {
853 	int i, ret = 0;
854 	u32 last_read_idx = 0;
855 
856 	if (cpu == 1)
857 		*first_ucode_section = 0;
858 	else
859 		(*first_ucode_section)++;
860 
861 	for (i = *first_ucode_section; i < image->num_sec; i++) {
862 		last_read_idx = i;
863 
864 		/*
865 		 * CPU1_CPU2_SEPARATOR_SECTION delimiter - separate between
866 		 * CPU1 to CPU2.
867 		 * PAGING_SEPARATOR_SECTION delimiter - separate between
868 		 * CPU2 non paged to CPU2 paging sec.
869 		 */
870 		if (!image->sec[i].data ||
871 		    image->sec[i].offset == CPU1_CPU2_SEPARATOR_SECTION ||
872 		    image->sec[i].offset == PAGING_SEPARATOR_SECTION) {
873 			IWL_DEBUG_FW(trans,
874 				     "Break since Data not valid or Empty section, sec = %d\n",
875 				     i);
876 			break;
877 		}
878 
879 		ret = iwl_pcie_load_section(trans, i, &image->sec[i]);
880 		if (ret)
881 			return ret;
882 	}
883 
884 	*first_ucode_section = last_read_idx;
885 
886 	return 0;
887 }
888 
889 static void iwl_pcie_apply_destination_ini(struct iwl_trans *trans)
890 {
891 	enum iwl_fw_ini_allocation_id alloc_id = IWL_FW_INI_ALLOCATION_ID_DBGC1;
892 	struct iwl_fw_ini_allocation_tlv *fw_mon_cfg =
893 		&trans->dbg.fw_mon_cfg[alloc_id];
894 	struct iwl_dram_data *frag;
895 
896 	if (!iwl_trans_dbg_ini_valid(trans))
897 		return;
898 
899 	if (le32_to_cpu(fw_mon_cfg->buf_location) ==
900 	    IWL_FW_INI_LOCATION_SRAM_PATH) {
901 		IWL_DEBUG_FW(trans, "WRT: Applying SMEM buffer destination\n");
902 		/* set sram monitor by enabling bit 7 */
903 		iwl_set_bit(trans, CSR_HW_IF_CONFIG_REG,
904 			    CSR_HW_IF_CONFIG_REG_BIT_MONITOR_SRAM);
905 
906 		return;
907 	}
908 
909 	if (le32_to_cpu(fw_mon_cfg->buf_location) !=
910 	    IWL_FW_INI_LOCATION_DRAM_PATH ||
911 	    !trans->dbg.fw_mon_ini[alloc_id].num_frags)
912 		return;
913 
914 	frag = &trans->dbg.fw_mon_ini[alloc_id].frags[0];
915 
916 	IWL_DEBUG_FW(trans, "WRT: Applying DRAM destination (alloc_id=%u)\n",
917 		     alloc_id);
918 
919 	iwl_write_umac_prph(trans, MON_BUFF_BASE_ADDR_VER2,
920 			    frag->physical >> MON_BUFF_SHIFT_VER2);
921 	iwl_write_umac_prph(trans, MON_BUFF_END_ADDR_VER2,
922 			    (frag->physical + frag->size - 256) >>
923 			    MON_BUFF_SHIFT_VER2);
924 }
925 
926 void iwl_pcie_apply_destination(struct iwl_trans *trans)
927 {
928 	const struct iwl_fw_dbg_dest_tlv_v1 *dest = trans->dbg.dest_tlv;
929 	const struct iwl_dram_data *fw_mon = &trans->dbg.fw_mon;
930 	int i;
931 
932 	if (iwl_trans_dbg_ini_valid(trans)) {
933 		iwl_pcie_apply_destination_ini(trans);
934 		return;
935 	}
936 
937 	IWL_INFO(trans, "Applying debug destination %s\n",
938 		 get_fw_dbg_mode_string(dest->monitor_mode));
939 
940 	if (dest->monitor_mode == EXTERNAL_MODE)
941 		iwl_pcie_alloc_fw_monitor(trans, dest->size_power);
942 	else
943 		IWL_WARN(trans, "PCI should have external buffer debug\n");
944 
945 	for (i = 0; i < trans->dbg.n_dest_reg; i++) {
946 		u32 addr = le32_to_cpu(dest->reg_ops[i].addr);
947 		u32 val = le32_to_cpu(dest->reg_ops[i].val);
948 
949 		switch (dest->reg_ops[i].op) {
950 		case CSR_ASSIGN:
951 			iwl_write32(trans, addr, val);
952 			break;
953 		case CSR_SETBIT:
954 			iwl_set_bit(trans, addr, BIT(val));
955 			break;
956 		case CSR_CLEARBIT:
957 			iwl_clear_bit(trans, addr, BIT(val));
958 			break;
959 		case PRPH_ASSIGN:
960 			iwl_write_prph(trans, addr, val);
961 			break;
962 		case PRPH_SETBIT:
963 			iwl_set_bits_prph(trans, addr, BIT(val));
964 			break;
965 		case PRPH_CLEARBIT:
966 			iwl_clear_bits_prph(trans, addr, BIT(val));
967 			break;
968 		case PRPH_BLOCKBIT:
969 			if (iwl_read_prph(trans, addr) & BIT(val)) {
970 				IWL_ERR(trans,
971 					"BIT(%u) in address 0x%x is 1, stopping FW configuration\n",
972 					val, addr);
973 				goto monitor;
974 			}
975 			break;
976 		default:
977 			IWL_ERR(trans, "FW debug - unknown OP %d\n",
978 				dest->reg_ops[i].op);
979 			break;
980 		}
981 	}
982 
983 monitor:
984 	if (dest->monitor_mode == EXTERNAL_MODE && fw_mon->size) {
985 		iwl_write_prph(trans, le32_to_cpu(dest->base_reg),
986 			       fw_mon->physical >> dest->base_shift);
987 		if (trans->trans_cfg->device_family >= IWL_DEVICE_FAMILY_8000)
988 			iwl_write_prph(trans, le32_to_cpu(dest->end_reg),
989 				       (fw_mon->physical + fw_mon->size -
990 					256) >> dest->end_shift);
991 		else
992 			iwl_write_prph(trans, le32_to_cpu(dest->end_reg),
993 				       (fw_mon->physical + fw_mon->size) >>
994 				       dest->end_shift);
995 	}
996 }
997 
998 static int iwl_pcie_load_given_ucode(struct iwl_trans *trans,
999 				const struct fw_img *image)
1000 {
1001 	int ret = 0;
1002 	int first_ucode_section;
1003 
1004 	IWL_DEBUG_FW(trans, "working with %s CPU\n",
1005 		     image->is_dual_cpus ? "Dual" : "Single");
1006 
1007 	/* load to FW the binary non secured sections of CPU1 */
1008 	ret = iwl_pcie_load_cpu_sections(trans, image, 1, &first_ucode_section);
1009 	if (ret)
1010 		return ret;
1011 
1012 	if (image->is_dual_cpus) {
1013 		/* set CPU2 header address */
1014 		iwl_write_prph(trans,
1015 			       LMPM_SECURE_UCODE_LOAD_CPU2_HDR_ADDR,
1016 			       LMPM_SECURE_CPU2_HDR_MEM_SPACE);
1017 
1018 		/* load to FW the binary sections of CPU2 */
1019 		ret = iwl_pcie_load_cpu_sections(trans, image, 2,
1020 						 &first_ucode_section);
1021 		if (ret)
1022 			return ret;
1023 	}
1024 
1025 	/* supported for 7000 only for the moment */
1026 	if (iwlwifi_mod_params.fw_monitor &&
1027 	    trans->trans_cfg->device_family == IWL_DEVICE_FAMILY_7000) {
1028 		struct iwl_dram_data *fw_mon = &trans->dbg.fw_mon;
1029 
1030 		iwl_pcie_alloc_fw_monitor(trans, 0);
1031 		if (fw_mon->size) {
1032 			iwl_write_prph(trans, MON_BUFF_BASE_ADDR,
1033 				       fw_mon->physical >> 4);
1034 			iwl_write_prph(trans, MON_BUFF_END_ADDR,
1035 				       (fw_mon->physical + fw_mon->size) >> 4);
1036 		}
1037 	} else if (iwl_pcie_dbg_on(trans)) {
1038 		iwl_pcie_apply_destination(trans);
1039 	}
1040 
1041 	iwl_enable_interrupts(trans);
1042 
1043 	/* release CPU reset */
1044 	iwl_write32(trans, CSR_RESET, 0);
1045 
1046 	return 0;
1047 }
1048 
1049 static int iwl_pcie_load_given_ucode_8000(struct iwl_trans *trans,
1050 					  const struct fw_img *image)
1051 {
1052 	int ret = 0;
1053 	int first_ucode_section;
1054 
1055 	IWL_DEBUG_FW(trans, "working with %s CPU\n",
1056 		     image->is_dual_cpus ? "Dual" : "Single");
1057 
1058 	if (iwl_pcie_dbg_on(trans))
1059 		iwl_pcie_apply_destination(trans);
1060 
1061 	IWL_DEBUG_POWER(trans, "Original WFPM value = 0x%08X\n",
1062 			iwl_read_prph(trans, WFPM_GP2));
1063 
1064 	/*
1065 	 * Set default value. On resume reading the values that were
1066 	 * zeored can provide debug data on the resume flow.
1067 	 * This is for debugging only and has no functional impact.
1068 	 */
1069 	iwl_write_prph(trans, WFPM_GP2, 0x01010101);
1070 
1071 	/* configure the ucode to be ready to get the secured image */
1072 	/* release CPU reset */
1073 	iwl_write_prph(trans, RELEASE_CPU_RESET, RELEASE_CPU_RESET_BIT);
1074 
1075 	/* load to FW the binary Secured sections of CPU1 */
1076 	ret = iwl_pcie_load_cpu_sections_8000(trans, image, 1,
1077 					      &first_ucode_section);
1078 	if (ret)
1079 		return ret;
1080 
1081 	/* load to FW the binary sections of CPU2 */
1082 	return iwl_pcie_load_cpu_sections_8000(trans, image, 2,
1083 					       &first_ucode_section);
1084 }
1085 
1086 bool iwl_pcie_check_hw_rf_kill(struct iwl_trans *trans)
1087 {
1088 	struct iwl_trans_pcie *trans_pcie =  IWL_TRANS_GET_PCIE_TRANS(trans);
1089 	bool hw_rfkill = iwl_is_rfkill_set(trans);
1090 	bool prev = test_bit(STATUS_RFKILL_OPMODE, &trans->status);
1091 	bool report;
1092 
1093 	if (hw_rfkill) {
1094 		set_bit(STATUS_RFKILL_HW, &trans->status);
1095 		set_bit(STATUS_RFKILL_OPMODE, &trans->status);
1096 	} else {
1097 		clear_bit(STATUS_RFKILL_HW, &trans->status);
1098 		if (trans_pcie->opmode_down)
1099 			clear_bit(STATUS_RFKILL_OPMODE, &trans->status);
1100 	}
1101 
1102 	report = test_bit(STATUS_RFKILL_OPMODE, &trans->status);
1103 
1104 	if (prev != report)
1105 		iwl_trans_pcie_rf_kill(trans, report);
1106 
1107 	return hw_rfkill;
1108 }
1109 
1110 struct iwl_causes_list {
1111 	u32 cause_num;
1112 	u32 mask_reg;
1113 	u8 addr;
1114 };
1115 
1116 static struct iwl_causes_list causes_list[] = {
1117 	{MSIX_FH_INT_CAUSES_D2S_CH0_NUM,	CSR_MSIX_FH_INT_MASK_AD, 0},
1118 	{MSIX_FH_INT_CAUSES_D2S_CH1_NUM,	CSR_MSIX_FH_INT_MASK_AD, 0x1},
1119 	{MSIX_FH_INT_CAUSES_S2D,		CSR_MSIX_FH_INT_MASK_AD, 0x3},
1120 	{MSIX_FH_INT_CAUSES_FH_ERR,		CSR_MSIX_FH_INT_MASK_AD, 0x5},
1121 	{MSIX_HW_INT_CAUSES_REG_ALIVE,		CSR_MSIX_HW_INT_MASK_AD, 0x10},
1122 	{MSIX_HW_INT_CAUSES_REG_WAKEUP,		CSR_MSIX_HW_INT_MASK_AD, 0x11},
1123 	{MSIX_HW_INT_CAUSES_REG_IML,            CSR_MSIX_HW_INT_MASK_AD, 0x12},
1124 	{MSIX_HW_INT_CAUSES_REG_CT_KILL,	CSR_MSIX_HW_INT_MASK_AD, 0x16},
1125 	{MSIX_HW_INT_CAUSES_REG_RF_KILL,	CSR_MSIX_HW_INT_MASK_AD, 0x17},
1126 	{MSIX_HW_INT_CAUSES_REG_PERIODIC,	CSR_MSIX_HW_INT_MASK_AD, 0x18},
1127 	{MSIX_HW_INT_CAUSES_REG_SW_ERR,		CSR_MSIX_HW_INT_MASK_AD, 0x29},
1128 	{MSIX_HW_INT_CAUSES_REG_SCD,		CSR_MSIX_HW_INT_MASK_AD, 0x2A},
1129 	{MSIX_HW_INT_CAUSES_REG_FH_TX,		CSR_MSIX_HW_INT_MASK_AD, 0x2B},
1130 	{MSIX_HW_INT_CAUSES_REG_HW_ERR,		CSR_MSIX_HW_INT_MASK_AD, 0x2D},
1131 	{MSIX_HW_INT_CAUSES_REG_HAP,		CSR_MSIX_HW_INT_MASK_AD, 0x2E},
1132 };
1133 
1134 static void iwl_pcie_map_non_rx_causes(struct iwl_trans *trans)
1135 {
1136 	struct iwl_trans_pcie *trans_pcie =  IWL_TRANS_GET_PCIE_TRANS(trans);
1137 	int val = trans_pcie->def_irq | MSIX_NON_AUTO_CLEAR_CAUSE;
1138 	int i, arr_size = ARRAY_SIZE(causes_list);
1139 	struct iwl_causes_list *causes = causes_list;
1140 
1141 	/*
1142 	 * Access all non RX causes and map them to the default irq.
1143 	 * In case we are missing at least one interrupt vector,
1144 	 * the first interrupt vector will serve non-RX and FBQ causes.
1145 	 */
1146 	for (i = 0; i < arr_size; i++) {
1147 		iwl_write8(trans, CSR_MSIX_IVAR(causes[i].addr), val);
1148 		iwl_clear_bit(trans, causes[i].mask_reg,
1149 			      causes[i].cause_num);
1150 	}
1151 }
1152 
1153 static void iwl_pcie_map_rx_causes(struct iwl_trans *trans)
1154 {
1155 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
1156 	u32 offset =
1157 		trans_pcie->shared_vec_mask & IWL_SHARED_IRQ_FIRST_RSS ? 1 : 0;
1158 	u32 val, idx;
1159 
1160 	/*
1161 	 * The first RX queue - fallback queue, which is designated for
1162 	 * management frame, command responses etc, is always mapped to the
1163 	 * first interrupt vector. The other RX queues are mapped to
1164 	 * the other (N - 2) interrupt vectors.
1165 	 */
1166 	val = BIT(MSIX_FH_INT_CAUSES_Q(0));
1167 	for (idx = 1; idx < trans->num_rx_queues; idx++) {
1168 		iwl_write8(trans, CSR_MSIX_RX_IVAR(idx),
1169 			   MSIX_FH_INT_CAUSES_Q(idx - offset));
1170 		val |= BIT(MSIX_FH_INT_CAUSES_Q(idx));
1171 	}
1172 	iwl_write32(trans, CSR_MSIX_FH_INT_MASK_AD, ~val);
1173 
1174 	val = MSIX_FH_INT_CAUSES_Q(0);
1175 	if (trans_pcie->shared_vec_mask & IWL_SHARED_IRQ_NON_RX)
1176 		val |= MSIX_NON_AUTO_CLEAR_CAUSE;
1177 	iwl_write8(trans, CSR_MSIX_RX_IVAR(0), val);
1178 
1179 	if (trans_pcie->shared_vec_mask & IWL_SHARED_IRQ_FIRST_RSS)
1180 		iwl_write8(trans, CSR_MSIX_RX_IVAR(1), val);
1181 }
1182 
1183 void iwl_pcie_conf_msix_hw(struct iwl_trans_pcie *trans_pcie)
1184 {
1185 	struct iwl_trans *trans = trans_pcie->trans;
1186 
1187 	if (!trans_pcie->msix_enabled) {
1188 		if (trans->trans_cfg->mq_rx_supported &&
1189 		    test_bit(STATUS_DEVICE_ENABLED, &trans->status))
1190 			iwl_write_umac_prph(trans, UREG_CHICK,
1191 					    UREG_CHICK_MSI_ENABLE);
1192 		return;
1193 	}
1194 	/*
1195 	 * The IVAR table needs to be configured again after reset,
1196 	 * but if the device is disabled, we can't write to
1197 	 * prph.
1198 	 */
1199 	if (test_bit(STATUS_DEVICE_ENABLED, &trans->status))
1200 		iwl_write_umac_prph(trans, UREG_CHICK, UREG_CHICK_MSIX_ENABLE);
1201 
1202 	/*
1203 	 * Each cause from the causes list above and the RX causes is
1204 	 * represented as a byte in the IVAR table. The first nibble
1205 	 * represents the bound interrupt vector of the cause, the second
1206 	 * represents no auto clear for this cause. This will be set if its
1207 	 * interrupt vector is bound to serve other causes.
1208 	 */
1209 	iwl_pcie_map_rx_causes(trans);
1210 
1211 	iwl_pcie_map_non_rx_causes(trans);
1212 }
1213 
1214 static void iwl_pcie_init_msix(struct iwl_trans_pcie *trans_pcie)
1215 {
1216 	struct iwl_trans *trans = trans_pcie->trans;
1217 
1218 	iwl_pcie_conf_msix_hw(trans_pcie);
1219 
1220 	if (!trans_pcie->msix_enabled)
1221 		return;
1222 
1223 	trans_pcie->fh_init_mask = ~iwl_read32(trans, CSR_MSIX_FH_INT_MASK_AD);
1224 	trans_pcie->fh_mask = trans_pcie->fh_init_mask;
1225 	trans_pcie->hw_init_mask = ~iwl_read32(trans, CSR_MSIX_HW_INT_MASK_AD);
1226 	trans_pcie->hw_mask = trans_pcie->hw_init_mask;
1227 }
1228 
1229 static void _iwl_trans_pcie_stop_device(struct iwl_trans *trans)
1230 {
1231 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
1232 
1233 	lockdep_assert_held(&trans_pcie->mutex);
1234 
1235 	if (trans_pcie->is_down)
1236 		return;
1237 
1238 	trans_pcie->is_down = true;
1239 
1240 	/* tell the device to stop sending interrupts */
1241 	iwl_disable_interrupts(trans);
1242 
1243 	/* device going down, Stop using ICT table */
1244 	iwl_pcie_disable_ict(trans);
1245 
1246 	/*
1247 	 * If a HW restart happens during firmware loading,
1248 	 * then the firmware loading might call this function
1249 	 * and later it might be called again due to the
1250 	 * restart. So don't process again if the device is
1251 	 * already dead.
1252 	 */
1253 	if (test_and_clear_bit(STATUS_DEVICE_ENABLED, &trans->status)) {
1254 		IWL_DEBUG_INFO(trans,
1255 			       "DEVICE_ENABLED bit was set and is now cleared\n");
1256 		iwl_pcie_tx_stop(trans);
1257 		iwl_pcie_rx_stop(trans);
1258 
1259 		/* Power-down device's busmaster DMA clocks */
1260 		if (!trans->cfg->apmg_not_supported) {
1261 			iwl_write_prph(trans, APMG_CLK_DIS_REG,
1262 				       APMG_CLK_VAL_DMA_CLK_RQT);
1263 			udelay(5);
1264 		}
1265 	}
1266 
1267 	/* Make sure (redundant) we've released our request to stay awake */
1268 	iwl_clear_bit(trans, CSR_GP_CNTRL,
1269 		      BIT(trans->trans_cfg->csr->flag_mac_access_req));
1270 
1271 	/* Stop the device, and put it in low power state */
1272 	iwl_pcie_apm_stop(trans, false);
1273 
1274 	iwl_trans_pcie_sw_reset(trans);
1275 
1276 	/*
1277 	 * Upon stop, the IVAR table gets erased, so msi-x won't
1278 	 * work. This causes a bug in RF-KILL flows, since the interrupt
1279 	 * that enables radio won't fire on the correct irq, and the
1280 	 * driver won't be able to handle the interrupt.
1281 	 * Configure the IVAR table again after reset.
1282 	 */
1283 	iwl_pcie_conf_msix_hw(trans_pcie);
1284 
1285 	/*
1286 	 * Upon stop, the APM issues an interrupt if HW RF kill is set.
1287 	 * This is a bug in certain verions of the hardware.
1288 	 * Certain devices also keep sending HW RF kill interrupt all
1289 	 * the time, unless the interrupt is ACKed even if the interrupt
1290 	 * should be masked. Re-ACK all the interrupts here.
1291 	 */
1292 	iwl_disable_interrupts(trans);
1293 
1294 	/* clear all status bits */
1295 	clear_bit(STATUS_SYNC_HCMD_ACTIVE, &trans->status);
1296 	clear_bit(STATUS_INT_ENABLED, &trans->status);
1297 	clear_bit(STATUS_TPOWER_PMI, &trans->status);
1298 
1299 	/*
1300 	 * Even if we stop the HW, we still want the RF kill
1301 	 * interrupt
1302 	 */
1303 	iwl_enable_rfkill_int(trans);
1304 
1305 	/* re-take ownership to prevent other users from stealing the device */
1306 	iwl_pcie_prepare_card_hw(trans);
1307 }
1308 
1309 void iwl_pcie_synchronize_irqs(struct iwl_trans *trans)
1310 {
1311 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
1312 
1313 	if (trans_pcie->msix_enabled) {
1314 		int i;
1315 
1316 		for (i = 0; i < trans_pcie->alloc_vecs; i++)
1317 			synchronize_irq(trans_pcie->msix_entries[i].vector);
1318 	} else {
1319 		synchronize_irq(trans_pcie->pci_dev->irq);
1320 	}
1321 }
1322 
1323 static int iwl_trans_pcie_start_fw(struct iwl_trans *trans,
1324 				   const struct fw_img *fw, bool run_in_rfkill)
1325 {
1326 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
1327 	bool hw_rfkill;
1328 	int ret;
1329 
1330 	/* This may fail if AMT took ownership of the device */
1331 	if (iwl_pcie_prepare_card_hw(trans)) {
1332 		IWL_WARN(trans, "Exit HW not ready\n");
1333 		ret = -EIO;
1334 		goto out;
1335 	}
1336 
1337 	iwl_enable_rfkill_int(trans);
1338 
1339 	iwl_write32(trans, CSR_INT, 0xFFFFFFFF);
1340 
1341 	/*
1342 	 * We enabled the RF-Kill interrupt and the handler may very
1343 	 * well be running. Disable the interrupts to make sure no other
1344 	 * interrupt can be fired.
1345 	 */
1346 	iwl_disable_interrupts(trans);
1347 
1348 	/* Make sure it finished running */
1349 	iwl_pcie_synchronize_irqs(trans);
1350 
1351 	mutex_lock(&trans_pcie->mutex);
1352 
1353 	/* If platform's RF_KILL switch is NOT set to KILL */
1354 	hw_rfkill = iwl_pcie_check_hw_rf_kill(trans);
1355 	if (hw_rfkill && !run_in_rfkill) {
1356 		ret = -ERFKILL;
1357 		goto out;
1358 	}
1359 
1360 	/* Someone called stop_device, don't try to start_fw */
1361 	if (trans_pcie->is_down) {
1362 		IWL_WARN(trans,
1363 			 "Can't start_fw since the HW hasn't been started\n");
1364 		ret = -EIO;
1365 		goto out;
1366 	}
1367 
1368 	/* make sure rfkill handshake bits are cleared */
1369 	iwl_write32(trans, CSR_UCODE_DRV_GP1_CLR, CSR_UCODE_SW_BIT_RFKILL);
1370 	iwl_write32(trans, CSR_UCODE_DRV_GP1_CLR,
1371 		    CSR_UCODE_DRV_GP1_BIT_CMD_BLOCKED);
1372 
1373 	/* clear (again), then enable host interrupts */
1374 	iwl_write32(trans, CSR_INT, 0xFFFFFFFF);
1375 
1376 	ret = iwl_pcie_nic_init(trans);
1377 	if (ret) {
1378 		IWL_ERR(trans, "Unable to init nic\n");
1379 		goto out;
1380 	}
1381 
1382 	/*
1383 	 * Now, we load the firmware and don't want to be interrupted, even
1384 	 * by the RF-Kill interrupt (hence mask all the interrupt besides the
1385 	 * FH_TX interrupt which is needed to load the firmware). If the
1386 	 * RF-Kill switch is toggled, we will find out after having loaded
1387 	 * the firmware and return the proper value to the caller.
1388 	 */
1389 	iwl_enable_fw_load_int(trans);
1390 
1391 	/* really make sure rfkill handshake bits are cleared */
1392 	iwl_write32(trans, CSR_UCODE_DRV_GP1_CLR, CSR_UCODE_SW_BIT_RFKILL);
1393 	iwl_write32(trans, CSR_UCODE_DRV_GP1_CLR, CSR_UCODE_SW_BIT_RFKILL);
1394 
1395 	/* Load the given image to the HW */
1396 	if (trans->trans_cfg->device_family >= IWL_DEVICE_FAMILY_8000)
1397 		ret = iwl_pcie_load_given_ucode_8000(trans, fw);
1398 	else
1399 		ret = iwl_pcie_load_given_ucode(trans, fw);
1400 
1401 	/* re-check RF-Kill state since we may have missed the interrupt */
1402 	hw_rfkill = iwl_pcie_check_hw_rf_kill(trans);
1403 	if (hw_rfkill && !run_in_rfkill)
1404 		ret = -ERFKILL;
1405 
1406 out:
1407 	mutex_unlock(&trans_pcie->mutex);
1408 	return ret;
1409 }
1410 
1411 static void iwl_trans_pcie_fw_alive(struct iwl_trans *trans, u32 scd_addr)
1412 {
1413 	iwl_pcie_reset_ict(trans);
1414 	iwl_pcie_tx_start(trans, scd_addr);
1415 }
1416 
1417 void iwl_trans_pcie_handle_stop_rfkill(struct iwl_trans *trans,
1418 				       bool was_in_rfkill)
1419 {
1420 	bool hw_rfkill;
1421 
1422 	/*
1423 	 * Check again since the RF kill state may have changed while
1424 	 * all the interrupts were disabled, in this case we couldn't
1425 	 * receive the RF kill interrupt and update the state in the
1426 	 * op_mode.
1427 	 * Don't call the op_mode if the rkfill state hasn't changed.
1428 	 * This allows the op_mode to call stop_device from the rfkill
1429 	 * notification without endless recursion. Under very rare
1430 	 * circumstances, we might have a small recursion if the rfkill
1431 	 * state changed exactly now while we were called from stop_device.
1432 	 * This is very unlikely but can happen and is supported.
1433 	 */
1434 	hw_rfkill = iwl_is_rfkill_set(trans);
1435 	if (hw_rfkill) {
1436 		set_bit(STATUS_RFKILL_HW, &trans->status);
1437 		set_bit(STATUS_RFKILL_OPMODE, &trans->status);
1438 	} else {
1439 		clear_bit(STATUS_RFKILL_HW, &trans->status);
1440 		clear_bit(STATUS_RFKILL_OPMODE, &trans->status);
1441 	}
1442 	if (hw_rfkill != was_in_rfkill)
1443 		iwl_trans_pcie_rf_kill(trans, hw_rfkill);
1444 }
1445 
1446 static void iwl_trans_pcie_stop_device(struct iwl_trans *trans)
1447 {
1448 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
1449 	bool was_in_rfkill;
1450 
1451 	mutex_lock(&trans_pcie->mutex);
1452 	trans_pcie->opmode_down = true;
1453 	was_in_rfkill = test_bit(STATUS_RFKILL_OPMODE, &trans->status);
1454 	_iwl_trans_pcie_stop_device(trans);
1455 	iwl_trans_pcie_handle_stop_rfkill(trans, was_in_rfkill);
1456 	mutex_unlock(&trans_pcie->mutex);
1457 }
1458 
1459 void iwl_trans_pcie_rf_kill(struct iwl_trans *trans, bool state)
1460 {
1461 	struct iwl_trans_pcie __maybe_unused *trans_pcie =
1462 		IWL_TRANS_GET_PCIE_TRANS(trans);
1463 
1464 	lockdep_assert_held(&trans_pcie->mutex);
1465 
1466 	IWL_WARN(trans, "reporting RF_KILL (radio %s)\n",
1467 		 state ? "disabled" : "enabled");
1468 	if (iwl_op_mode_hw_rf_kill(trans->op_mode, state)) {
1469 		if (trans->trans_cfg->gen2)
1470 			_iwl_trans_pcie_gen2_stop_device(trans);
1471 		else
1472 			_iwl_trans_pcie_stop_device(trans);
1473 	}
1474 }
1475 
1476 void iwl_pcie_d3_complete_suspend(struct iwl_trans *trans,
1477 				  bool test, bool reset)
1478 {
1479 	iwl_disable_interrupts(trans);
1480 
1481 	/*
1482 	 * in testing mode, the host stays awake and the
1483 	 * hardware won't be reset (not even partially)
1484 	 */
1485 	if (test)
1486 		return;
1487 
1488 	iwl_pcie_disable_ict(trans);
1489 
1490 	iwl_pcie_synchronize_irqs(trans);
1491 
1492 	iwl_clear_bit(trans, CSR_GP_CNTRL,
1493 		      BIT(trans->trans_cfg->csr->flag_mac_access_req));
1494 	iwl_clear_bit(trans, CSR_GP_CNTRL,
1495 		      BIT(trans->trans_cfg->csr->flag_init_done));
1496 
1497 	if (reset) {
1498 		/*
1499 		 * reset TX queues -- some of their registers reset during S3
1500 		 * so if we don't reset everything here the D3 image would try
1501 		 * to execute some invalid memory upon resume
1502 		 */
1503 		iwl_trans_pcie_tx_reset(trans);
1504 	}
1505 
1506 	iwl_pcie_set_pwr(trans, true);
1507 }
1508 
1509 static int iwl_trans_pcie_d3_suspend(struct iwl_trans *trans, bool test,
1510 				     bool reset)
1511 {
1512 	int ret;
1513 	struct iwl_trans_pcie *trans_pcie =  IWL_TRANS_GET_PCIE_TRANS(trans);
1514 
1515 	/*
1516 	 * Family IWL_DEVICE_FAMILY_AX210 and above persist mode is set by FW.
1517 	 */
1518 	if (!reset && trans->trans_cfg->device_family < IWL_DEVICE_FAMILY_AX210) {
1519 		/* Enable persistence mode to avoid reset */
1520 		iwl_set_bit(trans, CSR_HW_IF_CONFIG_REG,
1521 			    CSR_HW_IF_CONFIG_REG_PERSIST_MODE);
1522 	}
1523 
1524 	if (trans->trans_cfg->device_family >= IWL_DEVICE_FAMILY_AX210) {
1525 		iwl_write_umac_prph(trans, UREG_DOORBELL_TO_ISR6,
1526 				    UREG_DOORBELL_TO_ISR6_SUSPEND);
1527 
1528 		ret = wait_event_timeout(trans_pcie->sx_waitq,
1529 					 trans_pcie->sx_complete, 2 * HZ);
1530 		/*
1531 		 * Invalidate it toward resume.
1532 		 */
1533 		trans_pcie->sx_complete = false;
1534 
1535 		if (!ret) {
1536 			IWL_ERR(trans, "Timeout entering D3\n");
1537 			return -ETIMEDOUT;
1538 		}
1539 	}
1540 	iwl_pcie_d3_complete_suspend(trans, test, reset);
1541 
1542 	return 0;
1543 }
1544 
1545 static int iwl_trans_pcie_d3_resume(struct iwl_trans *trans,
1546 				    enum iwl_d3_status *status,
1547 				    bool test,  bool reset)
1548 {
1549 	struct iwl_trans_pcie *trans_pcie =  IWL_TRANS_GET_PCIE_TRANS(trans);
1550 	u32 val;
1551 	int ret;
1552 
1553 	if (test) {
1554 		iwl_enable_interrupts(trans);
1555 		*status = IWL_D3_STATUS_ALIVE;
1556 		goto out;
1557 	}
1558 
1559 	iwl_set_bit(trans, CSR_GP_CNTRL,
1560 		    BIT(trans->trans_cfg->csr->flag_mac_access_req));
1561 
1562 	ret = iwl_finish_nic_init(trans, trans->trans_cfg);
1563 	if (ret)
1564 		return ret;
1565 
1566 	/*
1567 	 * Reconfigure IVAR table in case of MSIX or reset ict table in
1568 	 * MSI mode since HW reset erased it.
1569 	 * Also enables interrupts - none will happen as
1570 	 * the device doesn't know we're waking it up, only when
1571 	 * the opmode actually tells it after this call.
1572 	 */
1573 	iwl_pcie_conf_msix_hw(trans_pcie);
1574 	if (!trans_pcie->msix_enabled)
1575 		iwl_pcie_reset_ict(trans);
1576 	iwl_enable_interrupts(trans);
1577 
1578 	iwl_pcie_set_pwr(trans, false);
1579 
1580 	if (!reset) {
1581 		iwl_clear_bit(trans, CSR_GP_CNTRL,
1582 			      BIT(trans->trans_cfg->csr->flag_mac_access_req));
1583 	} else {
1584 		iwl_trans_pcie_tx_reset(trans);
1585 
1586 		ret = iwl_pcie_rx_init(trans);
1587 		if (ret) {
1588 			IWL_ERR(trans,
1589 				"Failed to resume the device (RX reset)\n");
1590 			return ret;
1591 		}
1592 	}
1593 
1594 	IWL_DEBUG_POWER(trans, "WFPM value upon resume = 0x%08X\n",
1595 			iwl_read_umac_prph(trans, WFPM_GP2));
1596 
1597 	val = iwl_read32(trans, CSR_RESET);
1598 	if (val & CSR_RESET_REG_FLAG_NEVO_RESET)
1599 		*status = IWL_D3_STATUS_RESET;
1600 	else
1601 		*status = IWL_D3_STATUS_ALIVE;
1602 
1603 out:
1604 	if (*status == IWL_D3_STATUS_ALIVE &&
1605 	    trans->trans_cfg->device_family >= IWL_DEVICE_FAMILY_AX210) {
1606 		trans_pcie->sx_complete = false;
1607 		iwl_write_umac_prph(trans, UREG_DOORBELL_TO_ISR6,
1608 				    UREG_DOORBELL_TO_ISR6_RESUME);
1609 
1610 		ret = wait_event_timeout(trans_pcie->sx_waitq,
1611 					 trans_pcie->sx_complete, 2 * HZ);
1612 		/*
1613 		 * Invalidate it toward next suspend.
1614 		 */
1615 		trans_pcie->sx_complete = false;
1616 
1617 		if (!ret) {
1618 			IWL_ERR(trans, "Timeout exiting D3\n");
1619 			return -ETIMEDOUT;
1620 		}
1621 	}
1622 	return 0;
1623 }
1624 
1625 static void
1626 iwl_pcie_set_interrupt_capa(struct pci_dev *pdev,
1627 			    struct iwl_trans *trans,
1628 			    const struct iwl_cfg_trans_params *cfg_trans)
1629 {
1630 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
1631 	int max_irqs, num_irqs, i, ret;
1632 	u16 pci_cmd;
1633 
1634 	if (!cfg_trans->mq_rx_supported)
1635 		goto enable_msi;
1636 
1637 	max_irqs = min_t(u32, num_online_cpus() + 2, IWL_MAX_RX_HW_QUEUES);
1638 	for (i = 0; i < max_irqs; i++)
1639 		trans_pcie->msix_entries[i].entry = i;
1640 
1641 	num_irqs = pci_enable_msix_range(pdev, trans_pcie->msix_entries,
1642 					 MSIX_MIN_INTERRUPT_VECTORS,
1643 					 max_irqs);
1644 	if (num_irqs < 0) {
1645 		IWL_DEBUG_INFO(trans,
1646 			       "Failed to enable msi-x mode (ret %d). Moving to msi mode.\n",
1647 			       num_irqs);
1648 		goto enable_msi;
1649 	}
1650 	trans_pcie->def_irq = (num_irqs == max_irqs) ? num_irqs - 1 : 0;
1651 
1652 	IWL_DEBUG_INFO(trans,
1653 		       "MSI-X enabled. %d interrupt vectors were allocated\n",
1654 		       num_irqs);
1655 
1656 	/*
1657 	 * In case the OS provides fewer interrupts than requested, different
1658 	 * causes will share the same interrupt vector as follows:
1659 	 * One interrupt less: non rx causes shared with FBQ.
1660 	 * Two interrupts less: non rx causes shared with FBQ and RSS.
1661 	 * More than two interrupts: we will use fewer RSS queues.
1662 	 */
1663 	if (num_irqs <= max_irqs - 2) {
1664 		trans_pcie->trans->num_rx_queues = num_irqs + 1;
1665 		trans_pcie->shared_vec_mask = IWL_SHARED_IRQ_NON_RX |
1666 			IWL_SHARED_IRQ_FIRST_RSS;
1667 	} else if (num_irqs == max_irqs - 1) {
1668 		trans_pcie->trans->num_rx_queues = num_irqs;
1669 		trans_pcie->shared_vec_mask = IWL_SHARED_IRQ_NON_RX;
1670 	} else {
1671 		trans_pcie->trans->num_rx_queues = num_irqs - 1;
1672 	}
1673 	WARN_ON(trans_pcie->trans->num_rx_queues > IWL_MAX_RX_HW_QUEUES);
1674 
1675 	trans_pcie->alloc_vecs = num_irqs;
1676 	trans_pcie->msix_enabled = true;
1677 	return;
1678 
1679 enable_msi:
1680 	ret = pci_enable_msi(pdev);
1681 	if (ret) {
1682 		dev_err(&pdev->dev, "pci_enable_msi failed - %d\n", ret);
1683 		/* enable rfkill interrupt: hw bug w/a */
1684 		pci_read_config_word(pdev, PCI_COMMAND, &pci_cmd);
1685 		if (pci_cmd & PCI_COMMAND_INTX_DISABLE) {
1686 			pci_cmd &= ~PCI_COMMAND_INTX_DISABLE;
1687 			pci_write_config_word(pdev, PCI_COMMAND, pci_cmd);
1688 		}
1689 	}
1690 }
1691 
1692 static void iwl_pcie_irq_set_affinity(struct iwl_trans *trans)
1693 {
1694 	int iter_rx_q, i, ret, cpu, offset;
1695 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
1696 
1697 	i = trans_pcie->shared_vec_mask & IWL_SHARED_IRQ_FIRST_RSS ? 0 : 1;
1698 	iter_rx_q = trans_pcie->trans->num_rx_queues - 1 + i;
1699 	offset = 1 + i;
1700 	for (; i < iter_rx_q ; i++) {
1701 		/*
1702 		 * Get the cpu prior to the place to search
1703 		 * (i.e. return will be > i - 1).
1704 		 */
1705 		cpu = cpumask_next(i - offset, cpu_online_mask);
1706 		cpumask_set_cpu(cpu, &trans_pcie->affinity_mask[i]);
1707 		ret = irq_set_affinity_hint(trans_pcie->msix_entries[i].vector,
1708 					    &trans_pcie->affinity_mask[i]);
1709 		if (ret)
1710 			IWL_ERR(trans_pcie->trans,
1711 				"Failed to set affinity mask for IRQ %d\n",
1712 				i);
1713 	}
1714 }
1715 
1716 static int iwl_pcie_init_msix_handler(struct pci_dev *pdev,
1717 				      struct iwl_trans_pcie *trans_pcie)
1718 {
1719 	int i;
1720 
1721 	for (i = 0; i < trans_pcie->alloc_vecs; i++) {
1722 		int ret;
1723 		struct msix_entry *msix_entry;
1724 		const char *qname = queue_name(&pdev->dev, trans_pcie, i);
1725 
1726 		if (!qname)
1727 			return -ENOMEM;
1728 
1729 		msix_entry = &trans_pcie->msix_entries[i];
1730 		ret = devm_request_threaded_irq(&pdev->dev,
1731 						msix_entry->vector,
1732 						iwl_pcie_msix_isr,
1733 						(i == trans_pcie->def_irq) ?
1734 						iwl_pcie_irq_msix_handler :
1735 						iwl_pcie_irq_rx_msix_handler,
1736 						IRQF_SHARED,
1737 						qname,
1738 						msix_entry);
1739 		if (ret) {
1740 			IWL_ERR(trans_pcie->trans,
1741 				"Error allocating IRQ %d\n", i);
1742 
1743 			return ret;
1744 		}
1745 	}
1746 	iwl_pcie_irq_set_affinity(trans_pcie->trans);
1747 
1748 	return 0;
1749 }
1750 
1751 static int iwl_trans_pcie_clear_persistence_bit(struct iwl_trans *trans)
1752 {
1753 	u32 hpm, wprot;
1754 
1755 	switch (trans->trans_cfg->device_family) {
1756 	case IWL_DEVICE_FAMILY_9000:
1757 		wprot = PREG_PRPH_WPROT_9000;
1758 		break;
1759 	case IWL_DEVICE_FAMILY_22000:
1760 		wprot = PREG_PRPH_WPROT_22000;
1761 		break;
1762 	default:
1763 		return 0;
1764 	}
1765 
1766 	hpm = iwl_read_umac_prph_no_grab(trans, HPM_DEBUG);
1767 	if (hpm != 0xa5a5a5a0 && (hpm & PERSISTENCE_BIT)) {
1768 		u32 wprot_val = iwl_read_umac_prph_no_grab(trans, wprot);
1769 
1770 		if (wprot_val & PREG_WFPM_ACCESS) {
1771 			IWL_ERR(trans,
1772 				"Error, can not clear persistence bit\n");
1773 			return -EPERM;
1774 		}
1775 		iwl_write_umac_prph_no_grab(trans, HPM_DEBUG,
1776 					    hpm & ~PERSISTENCE_BIT);
1777 	}
1778 
1779 	return 0;
1780 }
1781 
1782 static int iwl_pcie_gen2_force_power_gating(struct iwl_trans *trans)
1783 {
1784 	int ret;
1785 
1786 	ret = iwl_finish_nic_init(trans, trans->trans_cfg);
1787 	if (ret < 0)
1788 		return ret;
1789 
1790 	iwl_set_bits_prph(trans, HPM_HIPM_GEN_CFG,
1791 			  HPM_HIPM_GEN_CFG_CR_FORCE_ACTIVE);
1792 	udelay(20);
1793 	iwl_set_bits_prph(trans, HPM_HIPM_GEN_CFG,
1794 			  HPM_HIPM_GEN_CFG_CR_PG_EN |
1795 			  HPM_HIPM_GEN_CFG_CR_SLP_EN);
1796 	udelay(20);
1797 	iwl_clear_bits_prph(trans, HPM_HIPM_GEN_CFG,
1798 			    HPM_HIPM_GEN_CFG_CR_FORCE_ACTIVE);
1799 
1800 	iwl_trans_pcie_sw_reset(trans);
1801 
1802 	return 0;
1803 }
1804 
1805 static int _iwl_trans_pcie_start_hw(struct iwl_trans *trans)
1806 {
1807 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
1808 	int err;
1809 
1810 	lockdep_assert_held(&trans_pcie->mutex);
1811 
1812 	err = iwl_pcie_prepare_card_hw(trans);
1813 	if (err) {
1814 		IWL_ERR(trans, "Error while preparing HW: %d\n", err);
1815 		return err;
1816 	}
1817 
1818 	err = iwl_trans_pcie_clear_persistence_bit(trans);
1819 	if (err)
1820 		return err;
1821 
1822 	iwl_trans_pcie_sw_reset(trans);
1823 
1824 	if (trans->trans_cfg->device_family == IWL_DEVICE_FAMILY_22000 &&
1825 	    trans->cfg->integrated) {
1826 		err = iwl_pcie_gen2_force_power_gating(trans);
1827 		if (err)
1828 			return err;
1829 	}
1830 
1831 	err = iwl_pcie_apm_init(trans);
1832 	if (err)
1833 		return err;
1834 
1835 	iwl_pcie_init_msix(trans_pcie);
1836 
1837 	/* From now on, the op_mode will be kept updated about RF kill state */
1838 	iwl_enable_rfkill_int(trans);
1839 
1840 	trans_pcie->opmode_down = false;
1841 
1842 	/* Set is_down to false here so that...*/
1843 	trans_pcie->is_down = false;
1844 
1845 	/* ...rfkill can call stop_device and set it false if needed */
1846 	iwl_pcie_check_hw_rf_kill(trans);
1847 
1848 	return 0;
1849 }
1850 
1851 static int iwl_trans_pcie_start_hw(struct iwl_trans *trans)
1852 {
1853 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
1854 	int ret;
1855 
1856 	mutex_lock(&trans_pcie->mutex);
1857 	ret = _iwl_trans_pcie_start_hw(trans);
1858 	mutex_unlock(&trans_pcie->mutex);
1859 
1860 	return ret;
1861 }
1862 
1863 static void iwl_trans_pcie_op_mode_leave(struct iwl_trans *trans)
1864 {
1865 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
1866 
1867 	mutex_lock(&trans_pcie->mutex);
1868 
1869 	/* disable interrupts - don't enable HW RF kill interrupt */
1870 	iwl_disable_interrupts(trans);
1871 
1872 	iwl_pcie_apm_stop(trans, true);
1873 
1874 	iwl_disable_interrupts(trans);
1875 
1876 	iwl_pcie_disable_ict(trans);
1877 
1878 	mutex_unlock(&trans_pcie->mutex);
1879 
1880 	iwl_pcie_synchronize_irqs(trans);
1881 }
1882 
1883 static void iwl_trans_pcie_write8(struct iwl_trans *trans, u32 ofs, u8 val)
1884 {
1885 	writeb(val, IWL_TRANS_GET_PCIE_TRANS(trans)->hw_base + ofs);
1886 }
1887 
1888 static void iwl_trans_pcie_write32(struct iwl_trans *trans, u32 ofs, u32 val)
1889 {
1890 	writel(val, IWL_TRANS_GET_PCIE_TRANS(trans)->hw_base + ofs);
1891 }
1892 
1893 static u32 iwl_trans_pcie_read32(struct iwl_trans *trans, u32 ofs)
1894 {
1895 	return readl(IWL_TRANS_GET_PCIE_TRANS(trans)->hw_base + ofs);
1896 }
1897 
1898 static u32 iwl_trans_pcie_prph_msk(struct iwl_trans *trans)
1899 {
1900 	if (trans->trans_cfg->device_family >= IWL_DEVICE_FAMILY_AX210)
1901 		return 0x00FFFFFF;
1902 	else
1903 		return 0x000FFFFF;
1904 }
1905 
1906 static u32 iwl_trans_pcie_read_prph(struct iwl_trans *trans, u32 reg)
1907 {
1908 	u32 mask = iwl_trans_pcie_prph_msk(trans);
1909 
1910 	iwl_trans_pcie_write32(trans, HBUS_TARG_PRPH_RADDR,
1911 			       ((reg & mask) | (3 << 24)));
1912 	return iwl_trans_pcie_read32(trans, HBUS_TARG_PRPH_RDAT);
1913 }
1914 
1915 static void iwl_trans_pcie_write_prph(struct iwl_trans *trans, u32 addr,
1916 				      u32 val)
1917 {
1918 	u32 mask = iwl_trans_pcie_prph_msk(trans);
1919 
1920 	iwl_trans_pcie_write32(trans, HBUS_TARG_PRPH_WADDR,
1921 			       ((addr & mask) | (3 << 24)));
1922 	iwl_trans_pcie_write32(trans, HBUS_TARG_PRPH_WDAT, val);
1923 }
1924 
1925 static void iwl_trans_pcie_configure(struct iwl_trans *trans,
1926 				     const struct iwl_trans_config *trans_cfg)
1927 {
1928 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
1929 
1930 	trans_pcie->cmd_queue = trans_cfg->cmd_queue;
1931 	trans_pcie->cmd_fifo = trans_cfg->cmd_fifo;
1932 	trans_pcie->cmd_q_wdg_timeout = trans_cfg->cmd_q_wdg_timeout;
1933 	if (WARN_ON(trans_cfg->n_no_reclaim_cmds > MAX_NO_RECLAIM_CMDS))
1934 		trans_pcie->n_no_reclaim_cmds = 0;
1935 	else
1936 		trans_pcie->n_no_reclaim_cmds = trans_cfg->n_no_reclaim_cmds;
1937 	if (trans_pcie->n_no_reclaim_cmds)
1938 		memcpy(trans_pcie->no_reclaim_cmds, trans_cfg->no_reclaim_cmds,
1939 		       trans_pcie->n_no_reclaim_cmds * sizeof(u8));
1940 
1941 	trans_pcie->rx_buf_size = trans_cfg->rx_buf_size;
1942 	trans_pcie->rx_page_order =
1943 		iwl_trans_get_rb_size_order(trans_pcie->rx_buf_size);
1944 
1945 	trans_pcie->bc_table_dword = trans_cfg->bc_table_dword;
1946 	trans_pcie->scd_set_active = trans_cfg->scd_set_active;
1947 	trans_pcie->sw_csum_tx = trans_cfg->sw_csum_tx;
1948 
1949 	trans_pcie->page_offs = trans_cfg->cb_data_offs;
1950 	trans_pcie->dev_cmd_offs = trans_cfg->cb_data_offs + sizeof(void *);
1951 
1952 	trans->command_groups = trans_cfg->command_groups;
1953 	trans->command_groups_size = trans_cfg->command_groups_size;
1954 
1955 	/* Initialize NAPI here - it should be before registering to mac80211
1956 	 * in the opmode but after the HW struct is allocated.
1957 	 * As this function may be called again in some corner cases don't
1958 	 * do anything if NAPI was already initialized.
1959 	 */
1960 	if (trans_pcie->napi_dev.reg_state != NETREG_DUMMY)
1961 		init_dummy_netdev(&trans_pcie->napi_dev);
1962 }
1963 
1964 void iwl_trans_pcie_free(struct iwl_trans *trans)
1965 {
1966 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
1967 	int i;
1968 
1969 	iwl_pcie_synchronize_irqs(trans);
1970 
1971 	if (trans->trans_cfg->gen2)
1972 		iwl_pcie_gen2_tx_free(trans);
1973 	else
1974 		iwl_pcie_tx_free(trans);
1975 	iwl_pcie_rx_free(trans);
1976 
1977 	if (trans_pcie->rba.alloc_wq) {
1978 		destroy_workqueue(trans_pcie->rba.alloc_wq);
1979 		trans_pcie->rba.alloc_wq = NULL;
1980 	}
1981 
1982 	if (trans_pcie->msix_enabled) {
1983 		for (i = 0; i < trans_pcie->alloc_vecs; i++) {
1984 			irq_set_affinity_hint(
1985 				trans_pcie->msix_entries[i].vector,
1986 				NULL);
1987 		}
1988 
1989 		trans_pcie->msix_enabled = false;
1990 	} else {
1991 		iwl_pcie_free_ict(trans);
1992 	}
1993 
1994 	iwl_pcie_free_fw_monitor(trans);
1995 
1996 	for_each_possible_cpu(i) {
1997 		struct iwl_tso_hdr_page *p =
1998 			per_cpu_ptr(trans_pcie->tso_hdr_page, i);
1999 
2000 		if (p->page)
2001 			__free_page(p->page);
2002 	}
2003 
2004 	free_percpu(trans_pcie->tso_hdr_page);
2005 	mutex_destroy(&trans_pcie->mutex);
2006 	iwl_trans_free(trans);
2007 }
2008 
2009 static void iwl_trans_pcie_set_pmi(struct iwl_trans *trans, bool state)
2010 {
2011 	if (state)
2012 		set_bit(STATUS_TPOWER_PMI, &trans->status);
2013 	else
2014 		clear_bit(STATUS_TPOWER_PMI, &trans->status);
2015 }
2016 
2017 struct iwl_trans_pcie_removal {
2018 	struct pci_dev *pdev;
2019 	struct work_struct work;
2020 };
2021 
2022 static void iwl_trans_pcie_removal_wk(struct work_struct *wk)
2023 {
2024 	struct iwl_trans_pcie_removal *removal =
2025 		container_of(wk, struct iwl_trans_pcie_removal, work);
2026 	struct pci_dev *pdev = removal->pdev;
2027 	static char *prop[] = {"EVENT=INACCESSIBLE", NULL};
2028 
2029 	dev_err(&pdev->dev, "Device gone - attempting removal\n");
2030 	kobject_uevent_env(&pdev->dev.kobj, KOBJ_CHANGE, prop);
2031 	pci_lock_rescan_remove();
2032 	pci_dev_put(pdev);
2033 	pci_stop_and_remove_bus_device(pdev);
2034 	pci_unlock_rescan_remove();
2035 
2036 	kfree(removal);
2037 	module_put(THIS_MODULE);
2038 }
2039 
2040 static bool iwl_trans_pcie_grab_nic_access(struct iwl_trans *trans,
2041 					   unsigned long *flags)
2042 {
2043 	int ret;
2044 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2045 
2046 	spin_lock_irqsave(&trans_pcie->reg_lock, *flags);
2047 
2048 	if (trans_pcie->cmd_hold_nic_awake)
2049 		goto out;
2050 
2051 	/* this bit wakes up the NIC */
2052 	__iwl_trans_pcie_set_bit(trans, CSR_GP_CNTRL,
2053 				 BIT(trans->trans_cfg->csr->flag_mac_access_req));
2054 	if (trans->trans_cfg->device_family >= IWL_DEVICE_FAMILY_8000)
2055 		udelay(2);
2056 
2057 	/*
2058 	 * These bits say the device is running, and should keep running for
2059 	 * at least a short while (at least as long as MAC_ACCESS_REQ stays 1),
2060 	 * but they do not indicate that embedded SRAM is restored yet;
2061 	 * HW with volatile SRAM must save/restore contents to/from
2062 	 * host DRAM when sleeping/waking for power-saving.
2063 	 * Each direction takes approximately 1/4 millisecond; with this
2064 	 * overhead, it's a good idea to grab and hold MAC_ACCESS_REQUEST if a
2065 	 * series of register accesses are expected (e.g. reading Event Log),
2066 	 * to keep device from sleeping.
2067 	 *
2068 	 * CSR_UCODE_DRV_GP1 register bit MAC_SLEEP == 0 indicates that
2069 	 * SRAM is okay/restored.  We don't check that here because this call
2070 	 * is just for hardware register access; but GP1 MAC_SLEEP
2071 	 * check is a good idea before accessing the SRAM of HW with
2072 	 * volatile SRAM (e.g. reading Event Log).
2073 	 *
2074 	 * 5000 series and later (including 1000 series) have non-volatile SRAM,
2075 	 * and do not save/restore SRAM when power cycling.
2076 	 */
2077 	ret = iwl_poll_bit(trans, CSR_GP_CNTRL,
2078 			   BIT(trans->trans_cfg->csr->flag_val_mac_access_en),
2079 			   (BIT(trans->trans_cfg->csr->flag_mac_clock_ready) |
2080 			    CSR_GP_CNTRL_REG_FLAG_GOING_TO_SLEEP), 15000);
2081 	if (unlikely(ret < 0)) {
2082 		u32 cntrl = iwl_read32(trans, CSR_GP_CNTRL);
2083 
2084 		WARN_ONCE(1,
2085 			  "Timeout waiting for hardware access (CSR_GP_CNTRL 0x%08x)\n",
2086 			  cntrl);
2087 
2088 		iwl_trans_pcie_dump_regs(trans);
2089 
2090 		if (iwlwifi_mod_params.remove_when_gone && cntrl == ~0U) {
2091 			struct iwl_trans_pcie_removal *removal;
2092 
2093 			if (test_bit(STATUS_TRANS_DEAD, &trans->status))
2094 				goto err;
2095 
2096 			IWL_ERR(trans, "Device gone - scheduling removal!\n");
2097 
2098 			/*
2099 			 * get a module reference to avoid doing this
2100 			 * while unloading anyway and to avoid
2101 			 * scheduling a work with code that's being
2102 			 * removed.
2103 			 */
2104 			if (!try_module_get(THIS_MODULE)) {
2105 				IWL_ERR(trans,
2106 					"Module is being unloaded - abort\n");
2107 				goto err;
2108 			}
2109 
2110 			removal = kzalloc(sizeof(*removal), GFP_ATOMIC);
2111 			if (!removal) {
2112 				module_put(THIS_MODULE);
2113 				goto err;
2114 			}
2115 			/*
2116 			 * we don't need to clear this flag, because
2117 			 * the trans will be freed and reallocated.
2118 			*/
2119 			set_bit(STATUS_TRANS_DEAD, &trans->status);
2120 
2121 			removal->pdev = to_pci_dev(trans->dev);
2122 			INIT_WORK(&removal->work, iwl_trans_pcie_removal_wk);
2123 			pci_dev_get(removal->pdev);
2124 			schedule_work(&removal->work);
2125 		} else {
2126 			iwl_write32(trans, CSR_RESET,
2127 				    CSR_RESET_REG_FLAG_FORCE_NMI);
2128 		}
2129 
2130 err:
2131 		spin_unlock_irqrestore(&trans_pcie->reg_lock, *flags);
2132 		return false;
2133 	}
2134 
2135 out:
2136 	/*
2137 	 * Fool sparse by faking we release the lock - sparse will
2138 	 * track nic_access anyway.
2139 	 */
2140 	__release(&trans_pcie->reg_lock);
2141 	return true;
2142 }
2143 
2144 static void iwl_trans_pcie_release_nic_access(struct iwl_trans *trans,
2145 					      unsigned long *flags)
2146 {
2147 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2148 
2149 	lockdep_assert_held(&trans_pcie->reg_lock);
2150 
2151 	/*
2152 	 * Fool sparse by faking we acquiring the lock - sparse will
2153 	 * track nic_access anyway.
2154 	 */
2155 	__acquire(&trans_pcie->reg_lock);
2156 
2157 	if (trans_pcie->cmd_hold_nic_awake)
2158 		goto out;
2159 
2160 	__iwl_trans_pcie_clear_bit(trans, CSR_GP_CNTRL,
2161 				   BIT(trans->trans_cfg->csr->flag_mac_access_req));
2162 	/*
2163 	 * Above we read the CSR_GP_CNTRL register, which will flush
2164 	 * any previous writes, but we need the write that clears the
2165 	 * MAC_ACCESS_REQ bit to be performed before any other writes
2166 	 * scheduled on different CPUs (after we drop reg_lock).
2167 	 */
2168 out:
2169 	spin_unlock_irqrestore(&trans_pcie->reg_lock, *flags);
2170 }
2171 
2172 static int iwl_trans_pcie_read_mem(struct iwl_trans *trans, u32 addr,
2173 				   void *buf, int dwords)
2174 {
2175 	unsigned long flags;
2176 	int offs, ret = 0;
2177 	u32 *vals = buf;
2178 
2179 	if (iwl_trans_grab_nic_access(trans, &flags)) {
2180 		iwl_write32(trans, HBUS_TARG_MEM_RADDR, addr);
2181 		for (offs = 0; offs < dwords; offs++)
2182 			vals[offs] = iwl_read32(trans, HBUS_TARG_MEM_RDAT);
2183 		iwl_trans_release_nic_access(trans, &flags);
2184 	} else {
2185 		ret = -EBUSY;
2186 	}
2187 	return ret;
2188 }
2189 
2190 static int iwl_trans_pcie_write_mem(struct iwl_trans *trans, u32 addr,
2191 				    const void *buf, int dwords)
2192 {
2193 	unsigned long flags;
2194 	int offs, ret = 0;
2195 	const u32 *vals = buf;
2196 
2197 	if (iwl_trans_grab_nic_access(trans, &flags)) {
2198 		iwl_write32(trans, HBUS_TARG_MEM_WADDR, addr);
2199 		for (offs = 0; offs < dwords; offs++)
2200 			iwl_write32(trans, HBUS_TARG_MEM_WDAT,
2201 				    vals ? vals[offs] : 0);
2202 		iwl_trans_release_nic_access(trans, &flags);
2203 	} else {
2204 		ret = -EBUSY;
2205 	}
2206 	return ret;
2207 }
2208 
2209 static void iwl_trans_pcie_freeze_txq_timer(struct iwl_trans *trans,
2210 					    unsigned long txqs,
2211 					    bool freeze)
2212 {
2213 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2214 	int queue;
2215 
2216 	for_each_set_bit(queue, &txqs, BITS_PER_LONG) {
2217 		struct iwl_txq *txq = trans_pcie->txq[queue];
2218 		unsigned long now;
2219 
2220 		spin_lock_bh(&txq->lock);
2221 
2222 		now = jiffies;
2223 
2224 		if (txq->frozen == freeze)
2225 			goto next_queue;
2226 
2227 		IWL_DEBUG_TX_QUEUES(trans, "%s TXQ %d\n",
2228 				    freeze ? "Freezing" : "Waking", queue);
2229 
2230 		txq->frozen = freeze;
2231 
2232 		if (txq->read_ptr == txq->write_ptr)
2233 			goto next_queue;
2234 
2235 		if (freeze) {
2236 			if (unlikely(time_after(now,
2237 						txq->stuck_timer.expires))) {
2238 				/*
2239 				 * The timer should have fired, maybe it is
2240 				 * spinning right now on the lock.
2241 				 */
2242 				goto next_queue;
2243 			}
2244 			/* remember how long until the timer fires */
2245 			txq->frozen_expiry_remainder =
2246 				txq->stuck_timer.expires - now;
2247 			del_timer(&txq->stuck_timer);
2248 			goto next_queue;
2249 		}
2250 
2251 		/*
2252 		 * Wake a non-empty queue -> arm timer with the
2253 		 * remainder before it froze
2254 		 */
2255 		mod_timer(&txq->stuck_timer,
2256 			  now + txq->frozen_expiry_remainder);
2257 
2258 next_queue:
2259 		spin_unlock_bh(&txq->lock);
2260 	}
2261 }
2262 
2263 static void iwl_trans_pcie_block_txq_ptrs(struct iwl_trans *trans, bool block)
2264 {
2265 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2266 	int i;
2267 
2268 	for (i = 0; i < trans->trans_cfg->base_params->num_of_queues; i++) {
2269 		struct iwl_txq *txq = trans_pcie->txq[i];
2270 
2271 		if (i == trans_pcie->cmd_queue)
2272 			continue;
2273 
2274 		spin_lock_bh(&txq->lock);
2275 
2276 		if (!block && !(WARN_ON_ONCE(!txq->block))) {
2277 			txq->block--;
2278 			if (!txq->block) {
2279 				iwl_write32(trans, HBUS_TARG_WRPTR,
2280 					    txq->write_ptr | (i << 8));
2281 			}
2282 		} else if (block) {
2283 			txq->block++;
2284 		}
2285 
2286 		spin_unlock_bh(&txq->lock);
2287 	}
2288 }
2289 
2290 #define IWL_FLUSH_WAIT_MS	2000
2291 
2292 void iwl_trans_pcie_log_scd_error(struct iwl_trans *trans, struct iwl_txq *txq)
2293 {
2294 	u32 txq_id = txq->id;
2295 	u32 status;
2296 	bool active;
2297 	u8 fifo;
2298 
2299 	if (trans->trans_cfg->use_tfh) {
2300 		IWL_ERR(trans, "Queue %d is stuck %d %d\n", txq_id,
2301 			txq->read_ptr, txq->write_ptr);
2302 		/* TODO: access new SCD registers and dump them */
2303 		return;
2304 	}
2305 
2306 	status = iwl_read_prph(trans, SCD_QUEUE_STATUS_BITS(txq_id));
2307 	fifo = (status >> SCD_QUEUE_STTS_REG_POS_TXF) & 0x7;
2308 	active = !!(status & BIT(SCD_QUEUE_STTS_REG_POS_ACTIVE));
2309 
2310 	IWL_ERR(trans,
2311 		"Queue %d is %sactive on fifo %d and stuck for %u ms. SW [%d, %d] HW [%d, %d] FH TRB=0x0%x\n",
2312 		txq_id, active ? "" : "in", fifo,
2313 		jiffies_to_msecs(txq->wd_timeout),
2314 		txq->read_ptr, txq->write_ptr,
2315 		iwl_read_prph(trans, SCD_QUEUE_RDPTR(txq_id)) &
2316 			(trans->trans_cfg->base_params->max_tfd_queue_size - 1),
2317 			iwl_read_prph(trans, SCD_QUEUE_WRPTR(txq_id)) &
2318 			(trans->trans_cfg->base_params->max_tfd_queue_size - 1),
2319 			iwl_read_direct32(trans, FH_TX_TRB_REG(fifo)));
2320 }
2321 
2322 static int iwl_trans_pcie_rxq_dma_data(struct iwl_trans *trans, int queue,
2323 				       struct iwl_trans_rxq_dma_data *data)
2324 {
2325 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2326 
2327 	if (queue >= trans->num_rx_queues || !trans_pcie->rxq)
2328 		return -EINVAL;
2329 
2330 	data->fr_bd_cb = trans_pcie->rxq[queue].bd_dma;
2331 	data->urbd_stts_wrptr = trans_pcie->rxq[queue].rb_stts_dma;
2332 	data->ur_bd_cb = trans_pcie->rxq[queue].used_bd_dma;
2333 	data->fr_bd_wid = 0;
2334 
2335 	return 0;
2336 }
2337 
2338 static int iwl_trans_pcie_wait_txq_empty(struct iwl_trans *trans, int txq_idx)
2339 {
2340 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2341 	struct iwl_txq *txq;
2342 	unsigned long now = jiffies;
2343 	bool overflow_tx;
2344 	u8 wr_ptr;
2345 
2346 	/* Make sure the NIC is still alive in the bus */
2347 	if (test_bit(STATUS_TRANS_DEAD, &trans->status))
2348 		return -ENODEV;
2349 
2350 	if (!test_bit(txq_idx, trans_pcie->queue_used))
2351 		return -EINVAL;
2352 
2353 	IWL_DEBUG_TX_QUEUES(trans, "Emptying queue %d...\n", txq_idx);
2354 	txq = trans_pcie->txq[txq_idx];
2355 
2356 	spin_lock_bh(&txq->lock);
2357 	overflow_tx = txq->overflow_tx ||
2358 		      !skb_queue_empty(&txq->overflow_q);
2359 	spin_unlock_bh(&txq->lock);
2360 
2361 	wr_ptr = READ_ONCE(txq->write_ptr);
2362 
2363 	while ((txq->read_ptr != READ_ONCE(txq->write_ptr) ||
2364 		overflow_tx) &&
2365 	       !time_after(jiffies,
2366 			   now + msecs_to_jiffies(IWL_FLUSH_WAIT_MS))) {
2367 		u8 write_ptr = READ_ONCE(txq->write_ptr);
2368 
2369 		/*
2370 		 * If write pointer moved during the wait, warn only
2371 		 * if the TX came from op mode. In case TX came from
2372 		 * trans layer (overflow TX) don't warn.
2373 		 */
2374 		if (WARN_ONCE(wr_ptr != write_ptr && !overflow_tx,
2375 			      "WR pointer moved while flushing %d -> %d\n",
2376 			      wr_ptr, write_ptr))
2377 			return -ETIMEDOUT;
2378 		wr_ptr = write_ptr;
2379 
2380 		usleep_range(1000, 2000);
2381 
2382 		spin_lock_bh(&txq->lock);
2383 		overflow_tx = txq->overflow_tx ||
2384 			      !skb_queue_empty(&txq->overflow_q);
2385 		spin_unlock_bh(&txq->lock);
2386 	}
2387 
2388 	if (txq->read_ptr != txq->write_ptr) {
2389 		IWL_ERR(trans,
2390 			"fail to flush all tx fifo queues Q %d\n", txq_idx);
2391 		iwl_trans_pcie_log_scd_error(trans, txq);
2392 		return -ETIMEDOUT;
2393 	}
2394 
2395 	IWL_DEBUG_TX_QUEUES(trans, "Queue %d is now empty.\n", txq_idx);
2396 
2397 	return 0;
2398 }
2399 
2400 static int iwl_trans_pcie_wait_txqs_empty(struct iwl_trans *trans, u32 txq_bm)
2401 {
2402 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2403 	int cnt;
2404 	int ret = 0;
2405 
2406 	/* waiting for all the tx frames complete might take a while */
2407 	for (cnt = 0;
2408 	     cnt < trans->trans_cfg->base_params->num_of_queues;
2409 	     cnt++) {
2410 
2411 		if (cnt == trans_pcie->cmd_queue)
2412 			continue;
2413 		if (!test_bit(cnt, trans_pcie->queue_used))
2414 			continue;
2415 		if (!(BIT(cnt) & txq_bm))
2416 			continue;
2417 
2418 		ret = iwl_trans_pcie_wait_txq_empty(trans, cnt);
2419 		if (ret)
2420 			break;
2421 	}
2422 
2423 	return ret;
2424 }
2425 
2426 static void iwl_trans_pcie_set_bits_mask(struct iwl_trans *trans, u32 reg,
2427 					 u32 mask, u32 value)
2428 {
2429 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2430 	unsigned long flags;
2431 
2432 	spin_lock_irqsave(&trans_pcie->reg_lock, flags);
2433 	__iwl_trans_pcie_set_bits_mask(trans, reg, mask, value);
2434 	spin_unlock_irqrestore(&trans_pcie->reg_lock, flags);
2435 }
2436 
2437 static const char *get_csr_string(int cmd)
2438 {
2439 #define IWL_CMD(x) case x: return #x
2440 	switch (cmd) {
2441 	IWL_CMD(CSR_HW_IF_CONFIG_REG);
2442 	IWL_CMD(CSR_INT_COALESCING);
2443 	IWL_CMD(CSR_INT);
2444 	IWL_CMD(CSR_INT_MASK);
2445 	IWL_CMD(CSR_FH_INT_STATUS);
2446 	IWL_CMD(CSR_GPIO_IN);
2447 	IWL_CMD(CSR_RESET);
2448 	IWL_CMD(CSR_GP_CNTRL);
2449 	IWL_CMD(CSR_HW_REV);
2450 	IWL_CMD(CSR_EEPROM_REG);
2451 	IWL_CMD(CSR_EEPROM_GP);
2452 	IWL_CMD(CSR_OTP_GP_REG);
2453 	IWL_CMD(CSR_GIO_REG);
2454 	IWL_CMD(CSR_GP_UCODE_REG);
2455 	IWL_CMD(CSR_GP_DRIVER_REG);
2456 	IWL_CMD(CSR_UCODE_DRV_GP1);
2457 	IWL_CMD(CSR_UCODE_DRV_GP2);
2458 	IWL_CMD(CSR_LED_REG);
2459 	IWL_CMD(CSR_DRAM_INT_TBL_REG);
2460 	IWL_CMD(CSR_GIO_CHICKEN_BITS);
2461 	IWL_CMD(CSR_ANA_PLL_CFG);
2462 	IWL_CMD(CSR_HW_REV_WA_REG);
2463 	IWL_CMD(CSR_MONITOR_STATUS_REG);
2464 	IWL_CMD(CSR_DBG_HPET_MEM_REG);
2465 	default:
2466 		return "UNKNOWN";
2467 	}
2468 #undef IWL_CMD
2469 }
2470 
2471 void iwl_pcie_dump_csr(struct iwl_trans *trans)
2472 {
2473 	int i;
2474 	static const u32 csr_tbl[] = {
2475 		CSR_HW_IF_CONFIG_REG,
2476 		CSR_INT_COALESCING,
2477 		CSR_INT,
2478 		CSR_INT_MASK,
2479 		CSR_FH_INT_STATUS,
2480 		CSR_GPIO_IN,
2481 		CSR_RESET,
2482 		CSR_GP_CNTRL,
2483 		CSR_HW_REV,
2484 		CSR_EEPROM_REG,
2485 		CSR_EEPROM_GP,
2486 		CSR_OTP_GP_REG,
2487 		CSR_GIO_REG,
2488 		CSR_GP_UCODE_REG,
2489 		CSR_GP_DRIVER_REG,
2490 		CSR_UCODE_DRV_GP1,
2491 		CSR_UCODE_DRV_GP2,
2492 		CSR_LED_REG,
2493 		CSR_DRAM_INT_TBL_REG,
2494 		CSR_GIO_CHICKEN_BITS,
2495 		CSR_ANA_PLL_CFG,
2496 		CSR_MONITOR_STATUS_REG,
2497 		CSR_HW_REV_WA_REG,
2498 		CSR_DBG_HPET_MEM_REG
2499 	};
2500 	IWL_ERR(trans, "CSR values:\n");
2501 	IWL_ERR(trans, "(2nd byte of CSR_INT_COALESCING is "
2502 		"CSR_INT_PERIODIC_REG)\n");
2503 	for (i = 0; i <  ARRAY_SIZE(csr_tbl); i++) {
2504 		IWL_ERR(trans, "  %25s: 0X%08x\n",
2505 			get_csr_string(csr_tbl[i]),
2506 			iwl_read32(trans, csr_tbl[i]));
2507 	}
2508 }
2509 
2510 #ifdef CONFIG_IWLWIFI_DEBUGFS
2511 /* create and remove of files */
2512 #define DEBUGFS_ADD_FILE(name, parent, mode) do {			\
2513 	debugfs_create_file(#name, mode, parent, trans,			\
2514 			    &iwl_dbgfs_##name##_ops);			\
2515 } while (0)
2516 
2517 /* file operation */
2518 #define DEBUGFS_READ_FILE_OPS(name)					\
2519 static const struct file_operations iwl_dbgfs_##name##_ops = {		\
2520 	.read = iwl_dbgfs_##name##_read,				\
2521 	.open = simple_open,						\
2522 	.llseek = generic_file_llseek,					\
2523 };
2524 
2525 #define DEBUGFS_WRITE_FILE_OPS(name)                                    \
2526 static const struct file_operations iwl_dbgfs_##name##_ops = {          \
2527 	.write = iwl_dbgfs_##name##_write,                              \
2528 	.open = simple_open,						\
2529 	.llseek = generic_file_llseek,					\
2530 };
2531 
2532 #define DEBUGFS_READ_WRITE_FILE_OPS(name)				\
2533 static const struct file_operations iwl_dbgfs_##name##_ops = {		\
2534 	.write = iwl_dbgfs_##name##_write,				\
2535 	.read = iwl_dbgfs_##name##_read,				\
2536 	.open = simple_open,						\
2537 	.llseek = generic_file_llseek,					\
2538 };
2539 
2540 static ssize_t iwl_dbgfs_tx_queue_read(struct file *file,
2541 				       char __user *user_buf,
2542 				       size_t count, loff_t *ppos)
2543 {
2544 	struct iwl_trans *trans = file->private_data;
2545 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2546 	struct iwl_txq *txq;
2547 	char *buf;
2548 	int pos = 0;
2549 	int cnt;
2550 	int ret;
2551 	size_t bufsz;
2552 
2553 	bufsz = sizeof(char) * 75 *
2554 		trans->trans_cfg->base_params->num_of_queues;
2555 
2556 	if (!trans_pcie->txq_memory)
2557 		return -EAGAIN;
2558 
2559 	buf = kzalloc(bufsz, GFP_KERNEL);
2560 	if (!buf)
2561 		return -ENOMEM;
2562 
2563 	for (cnt = 0;
2564 	     cnt < trans->trans_cfg->base_params->num_of_queues;
2565 	     cnt++) {
2566 		txq = trans_pcie->txq[cnt];
2567 		pos += scnprintf(buf + pos, bufsz - pos,
2568 				"hwq %.2d: read=%u write=%u use=%d stop=%d need_update=%d frozen=%d%s\n",
2569 				cnt, txq->read_ptr, txq->write_ptr,
2570 				!!test_bit(cnt, trans_pcie->queue_used),
2571 				 !!test_bit(cnt, trans_pcie->queue_stopped),
2572 				 txq->need_update, txq->frozen,
2573 				 (cnt == trans_pcie->cmd_queue ? " HCMD" : ""));
2574 	}
2575 	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos);
2576 	kfree(buf);
2577 	return ret;
2578 }
2579 
2580 static ssize_t iwl_dbgfs_rx_queue_read(struct file *file,
2581 				       char __user *user_buf,
2582 				       size_t count, loff_t *ppos)
2583 {
2584 	struct iwl_trans *trans = file->private_data;
2585 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2586 	char *buf;
2587 	int pos = 0, i, ret;
2588 	size_t bufsz;
2589 
2590 	bufsz = sizeof(char) * 121 * trans->num_rx_queues;
2591 
2592 	if (!trans_pcie->rxq)
2593 		return -EAGAIN;
2594 
2595 	buf = kzalloc(bufsz, GFP_KERNEL);
2596 	if (!buf)
2597 		return -ENOMEM;
2598 
2599 	for (i = 0; i < trans->num_rx_queues && pos < bufsz; i++) {
2600 		struct iwl_rxq *rxq = &trans_pcie->rxq[i];
2601 
2602 		pos += scnprintf(buf + pos, bufsz - pos, "queue#: %2d\n",
2603 				 i);
2604 		pos += scnprintf(buf + pos, bufsz - pos, "\tread: %u\n",
2605 				 rxq->read);
2606 		pos += scnprintf(buf + pos, bufsz - pos, "\twrite: %u\n",
2607 				 rxq->write);
2608 		pos += scnprintf(buf + pos, bufsz - pos, "\twrite_actual: %u\n",
2609 				 rxq->write_actual);
2610 		pos += scnprintf(buf + pos, bufsz - pos, "\tneed_update: %2d\n",
2611 				 rxq->need_update);
2612 		pos += scnprintf(buf + pos, bufsz - pos, "\tfree_count: %u\n",
2613 				 rxq->free_count);
2614 		if (rxq->rb_stts) {
2615 			u32 r =	__le16_to_cpu(iwl_get_closed_rb_stts(trans,
2616 								     rxq));
2617 			pos += scnprintf(buf + pos, bufsz - pos,
2618 					 "\tclosed_rb_num: %u\n",
2619 					 r & 0x0FFF);
2620 		} else {
2621 			pos += scnprintf(buf + pos, bufsz - pos,
2622 					 "\tclosed_rb_num: Not Allocated\n");
2623 		}
2624 	}
2625 	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos);
2626 	kfree(buf);
2627 
2628 	return ret;
2629 }
2630 
2631 static ssize_t iwl_dbgfs_interrupt_read(struct file *file,
2632 					char __user *user_buf,
2633 					size_t count, loff_t *ppos)
2634 {
2635 	struct iwl_trans *trans = file->private_data;
2636 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2637 	struct isr_statistics *isr_stats = &trans_pcie->isr_stats;
2638 
2639 	int pos = 0;
2640 	char *buf;
2641 	int bufsz = 24 * 64; /* 24 items * 64 char per item */
2642 	ssize_t ret;
2643 
2644 	buf = kzalloc(bufsz, GFP_KERNEL);
2645 	if (!buf)
2646 		return -ENOMEM;
2647 
2648 	pos += scnprintf(buf + pos, bufsz - pos,
2649 			"Interrupt Statistics Report:\n");
2650 
2651 	pos += scnprintf(buf + pos, bufsz - pos, "HW Error:\t\t\t %u\n",
2652 		isr_stats->hw);
2653 	pos += scnprintf(buf + pos, bufsz - pos, "SW Error:\t\t\t %u\n",
2654 		isr_stats->sw);
2655 	if (isr_stats->sw || isr_stats->hw) {
2656 		pos += scnprintf(buf + pos, bufsz - pos,
2657 			"\tLast Restarting Code:  0x%X\n",
2658 			isr_stats->err_code);
2659 	}
2660 #ifdef CONFIG_IWLWIFI_DEBUG
2661 	pos += scnprintf(buf + pos, bufsz - pos, "Frame transmitted:\t\t %u\n",
2662 		isr_stats->sch);
2663 	pos += scnprintf(buf + pos, bufsz - pos, "Alive interrupt:\t\t %u\n",
2664 		isr_stats->alive);
2665 #endif
2666 	pos += scnprintf(buf + pos, bufsz - pos,
2667 		"HW RF KILL switch toggled:\t %u\n", isr_stats->rfkill);
2668 
2669 	pos += scnprintf(buf + pos, bufsz - pos, "CT KILL:\t\t\t %u\n",
2670 		isr_stats->ctkill);
2671 
2672 	pos += scnprintf(buf + pos, bufsz - pos, "Wakeup Interrupt:\t\t %u\n",
2673 		isr_stats->wakeup);
2674 
2675 	pos += scnprintf(buf + pos, bufsz - pos,
2676 		"Rx command responses:\t\t %u\n", isr_stats->rx);
2677 
2678 	pos += scnprintf(buf + pos, bufsz - pos, "Tx/FH interrupt:\t\t %u\n",
2679 		isr_stats->tx);
2680 
2681 	pos += scnprintf(buf + pos, bufsz - pos, "Unexpected INTA:\t\t %u\n",
2682 		isr_stats->unhandled);
2683 
2684 	ret = simple_read_from_buffer(user_buf, count, ppos, buf, pos);
2685 	kfree(buf);
2686 	return ret;
2687 }
2688 
2689 static ssize_t iwl_dbgfs_interrupt_write(struct file *file,
2690 					 const char __user *user_buf,
2691 					 size_t count, loff_t *ppos)
2692 {
2693 	struct iwl_trans *trans = file->private_data;
2694 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2695 	struct isr_statistics *isr_stats = &trans_pcie->isr_stats;
2696 	u32 reset_flag;
2697 	int ret;
2698 
2699 	ret = kstrtou32_from_user(user_buf, count, 16, &reset_flag);
2700 	if (ret)
2701 		return ret;
2702 	if (reset_flag == 0)
2703 		memset(isr_stats, 0, sizeof(*isr_stats));
2704 
2705 	return count;
2706 }
2707 
2708 static ssize_t iwl_dbgfs_csr_write(struct file *file,
2709 				   const char __user *user_buf,
2710 				   size_t count, loff_t *ppos)
2711 {
2712 	struct iwl_trans *trans = file->private_data;
2713 
2714 	iwl_pcie_dump_csr(trans);
2715 
2716 	return count;
2717 }
2718 
2719 static ssize_t iwl_dbgfs_fh_reg_read(struct file *file,
2720 				     char __user *user_buf,
2721 				     size_t count, loff_t *ppos)
2722 {
2723 	struct iwl_trans *trans = file->private_data;
2724 	char *buf = NULL;
2725 	ssize_t ret;
2726 
2727 	ret = iwl_dump_fh(trans, &buf);
2728 	if (ret < 0)
2729 		return ret;
2730 	if (!buf)
2731 		return -EINVAL;
2732 	ret = simple_read_from_buffer(user_buf, count, ppos, buf, ret);
2733 	kfree(buf);
2734 	return ret;
2735 }
2736 
2737 static ssize_t iwl_dbgfs_rfkill_read(struct file *file,
2738 				     char __user *user_buf,
2739 				     size_t count, loff_t *ppos)
2740 {
2741 	struct iwl_trans *trans = file->private_data;
2742 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2743 	char buf[100];
2744 	int pos;
2745 
2746 	pos = scnprintf(buf, sizeof(buf), "debug: %d\nhw: %d\n",
2747 			trans_pcie->debug_rfkill,
2748 			!(iwl_read32(trans, CSR_GP_CNTRL) &
2749 				CSR_GP_CNTRL_REG_FLAG_HW_RF_KILL_SW));
2750 
2751 	return simple_read_from_buffer(user_buf, count, ppos, buf, pos);
2752 }
2753 
2754 static ssize_t iwl_dbgfs_rfkill_write(struct file *file,
2755 				      const char __user *user_buf,
2756 				      size_t count, loff_t *ppos)
2757 {
2758 	struct iwl_trans *trans = file->private_data;
2759 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2760 	bool new_value;
2761 	int ret;
2762 
2763 	ret = kstrtobool_from_user(user_buf, count, &new_value);
2764 	if (ret)
2765 		return ret;
2766 	if (new_value == trans_pcie->debug_rfkill)
2767 		return count;
2768 	IWL_WARN(trans, "changing debug rfkill %d->%d\n",
2769 		 trans_pcie->debug_rfkill, new_value);
2770 	trans_pcie->debug_rfkill = new_value;
2771 	iwl_pcie_handle_rfkill_irq(trans);
2772 
2773 	return count;
2774 }
2775 
2776 static int iwl_dbgfs_monitor_data_open(struct inode *inode,
2777 				       struct file *file)
2778 {
2779 	struct iwl_trans *trans = inode->i_private;
2780 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2781 
2782 	if (!trans->dbg.dest_tlv ||
2783 	    trans->dbg.dest_tlv->monitor_mode != EXTERNAL_MODE) {
2784 		IWL_ERR(trans, "Debug destination is not set to DRAM\n");
2785 		return -ENOENT;
2786 	}
2787 
2788 	if (trans_pcie->fw_mon_data.state != IWL_FW_MON_DBGFS_STATE_CLOSED)
2789 		return -EBUSY;
2790 
2791 	trans_pcie->fw_mon_data.state = IWL_FW_MON_DBGFS_STATE_OPEN;
2792 	return simple_open(inode, file);
2793 }
2794 
2795 static int iwl_dbgfs_monitor_data_release(struct inode *inode,
2796 					  struct file *file)
2797 {
2798 	struct iwl_trans_pcie *trans_pcie =
2799 		IWL_TRANS_GET_PCIE_TRANS(inode->i_private);
2800 
2801 	if (trans_pcie->fw_mon_data.state == IWL_FW_MON_DBGFS_STATE_OPEN)
2802 		trans_pcie->fw_mon_data.state = IWL_FW_MON_DBGFS_STATE_CLOSED;
2803 	return 0;
2804 }
2805 
2806 static bool iwl_write_to_user_buf(char __user *user_buf, ssize_t count,
2807 				  void *buf, ssize_t *size,
2808 				  ssize_t *bytes_copied)
2809 {
2810 	int buf_size_left = count - *bytes_copied;
2811 
2812 	buf_size_left = buf_size_left - (buf_size_left % sizeof(u32));
2813 	if (*size > buf_size_left)
2814 		*size = buf_size_left;
2815 
2816 	*size -= copy_to_user(user_buf, buf, *size);
2817 	*bytes_copied += *size;
2818 
2819 	if (buf_size_left == *size)
2820 		return true;
2821 	return false;
2822 }
2823 
2824 static ssize_t iwl_dbgfs_monitor_data_read(struct file *file,
2825 					   char __user *user_buf,
2826 					   size_t count, loff_t *ppos)
2827 {
2828 	struct iwl_trans *trans = file->private_data;
2829 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2830 	void *cpu_addr = (void *)trans->dbg.fw_mon.block, *curr_buf;
2831 	struct cont_rec *data = &trans_pcie->fw_mon_data;
2832 	u32 write_ptr_addr, wrap_cnt_addr, write_ptr, wrap_cnt;
2833 	ssize_t size, bytes_copied = 0;
2834 	bool b_full;
2835 
2836 	if (trans->dbg.dest_tlv) {
2837 		write_ptr_addr =
2838 			le32_to_cpu(trans->dbg.dest_tlv->write_ptr_reg);
2839 		wrap_cnt_addr = le32_to_cpu(trans->dbg.dest_tlv->wrap_count);
2840 	} else {
2841 		write_ptr_addr = MON_BUFF_WRPTR;
2842 		wrap_cnt_addr = MON_BUFF_CYCLE_CNT;
2843 	}
2844 
2845 	if (unlikely(!trans->dbg.rec_on))
2846 		return 0;
2847 
2848 	mutex_lock(&data->mutex);
2849 	if (data->state ==
2850 	    IWL_FW_MON_DBGFS_STATE_DISABLED) {
2851 		mutex_unlock(&data->mutex);
2852 		return 0;
2853 	}
2854 
2855 	/* write_ptr position in bytes rather then DW */
2856 	write_ptr = iwl_read_prph(trans, write_ptr_addr) * sizeof(u32);
2857 	wrap_cnt = iwl_read_prph(trans, wrap_cnt_addr);
2858 
2859 	if (data->prev_wrap_cnt == wrap_cnt) {
2860 		size = write_ptr - data->prev_wr_ptr;
2861 		curr_buf = cpu_addr + data->prev_wr_ptr;
2862 		b_full = iwl_write_to_user_buf(user_buf, count,
2863 					       curr_buf, &size,
2864 					       &bytes_copied);
2865 		data->prev_wr_ptr += size;
2866 
2867 	} else if (data->prev_wrap_cnt == wrap_cnt - 1 &&
2868 		   write_ptr < data->prev_wr_ptr) {
2869 		size = trans->dbg.fw_mon.size - data->prev_wr_ptr;
2870 		curr_buf = cpu_addr + data->prev_wr_ptr;
2871 		b_full = iwl_write_to_user_buf(user_buf, count,
2872 					       curr_buf, &size,
2873 					       &bytes_copied);
2874 		data->prev_wr_ptr += size;
2875 
2876 		if (!b_full) {
2877 			size = write_ptr;
2878 			b_full = iwl_write_to_user_buf(user_buf, count,
2879 						       cpu_addr, &size,
2880 						       &bytes_copied);
2881 			data->prev_wr_ptr = size;
2882 			data->prev_wrap_cnt++;
2883 		}
2884 	} else {
2885 		if (data->prev_wrap_cnt == wrap_cnt - 1 &&
2886 		    write_ptr > data->prev_wr_ptr)
2887 			IWL_WARN(trans,
2888 				 "write pointer passed previous write pointer, start copying from the beginning\n");
2889 		else if (!unlikely(data->prev_wrap_cnt == 0 &&
2890 				   data->prev_wr_ptr == 0))
2891 			IWL_WARN(trans,
2892 				 "monitor data is out of sync, start copying from the beginning\n");
2893 
2894 		size = write_ptr;
2895 		b_full = iwl_write_to_user_buf(user_buf, count,
2896 					       cpu_addr, &size,
2897 					       &bytes_copied);
2898 		data->prev_wr_ptr = size;
2899 		data->prev_wrap_cnt = wrap_cnt;
2900 	}
2901 
2902 	mutex_unlock(&data->mutex);
2903 
2904 	return bytes_copied;
2905 }
2906 
2907 DEBUGFS_READ_WRITE_FILE_OPS(interrupt);
2908 DEBUGFS_READ_FILE_OPS(fh_reg);
2909 DEBUGFS_READ_FILE_OPS(rx_queue);
2910 DEBUGFS_READ_FILE_OPS(tx_queue);
2911 DEBUGFS_WRITE_FILE_OPS(csr);
2912 DEBUGFS_READ_WRITE_FILE_OPS(rfkill);
2913 
2914 static const struct file_operations iwl_dbgfs_monitor_data_ops = {
2915 	.read = iwl_dbgfs_monitor_data_read,
2916 	.open = iwl_dbgfs_monitor_data_open,
2917 	.release = iwl_dbgfs_monitor_data_release,
2918 };
2919 
2920 /* Create the debugfs files and directories */
2921 void iwl_trans_pcie_dbgfs_register(struct iwl_trans *trans)
2922 {
2923 	struct dentry *dir = trans->dbgfs_dir;
2924 
2925 	DEBUGFS_ADD_FILE(rx_queue, dir, 0400);
2926 	DEBUGFS_ADD_FILE(tx_queue, dir, 0400);
2927 	DEBUGFS_ADD_FILE(interrupt, dir, 0600);
2928 	DEBUGFS_ADD_FILE(csr, dir, 0200);
2929 	DEBUGFS_ADD_FILE(fh_reg, dir, 0400);
2930 	DEBUGFS_ADD_FILE(rfkill, dir, 0600);
2931 	DEBUGFS_ADD_FILE(monitor_data, dir, 0400);
2932 }
2933 
2934 static void iwl_trans_pcie_debugfs_cleanup(struct iwl_trans *trans)
2935 {
2936 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2937 	struct cont_rec *data = &trans_pcie->fw_mon_data;
2938 
2939 	mutex_lock(&data->mutex);
2940 	data->state = IWL_FW_MON_DBGFS_STATE_DISABLED;
2941 	mutex_unlock(&data->mutex);
2942 }
2943 #endif /*CONFIG_IWLWIFI_DEBUGFS */
2944 
2945 static u32 iwl_trans_pcie_get_cmdlen(struct iwl_trans *trans, void *tfd)
2946 {
2947 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2948 	u32 cmdlen = 0;
2949 	int i;
2950 
2951 	for (i = 0; i < trans_pcie->max_tbs; i++)
2952 		cmdlen += iwl_pcie_tfd_tb_get_len(trans, tfd, i);
2953 
2954 	return cmdlen;
2955 }
2956 
2957 static u32 iwl_trans_pcie_dump_rbs(struct iwl_trans *trans,
2958 				   struct iwl_fw_error_dump_data **data,
2959 				   int allocated_rb_nums)
2960 {
2961 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
2962 	int max_len = PAGE_SIZE << trans_pcie->rx_page_order;
2963 	/* Dump RBs is supported only for pre-9000 devices (1 queue) */
2964 	struct iwl_rxq *rxq = &trans_pcie->rxq[0];
2965 	u32 i, r, j, rb_len = 0;
2966 
2967 	spin_lock(&rxq->lock);
2968 
2969 	r = le16_to_cpu(iwl_get_closed_rb_stts(trans, rxq)) & 0x0FFF;
2970 
2971 	for (i = rxq->read, j = 0;
2972 	     i != r && j < allocated_rb_nums;
2973 	     i = (i + 1) & RX_QUEUE_MASK, j++) {
2974 		struct iwl_rx_mem_buffer *rxb = rxq->queue[i];
2975 		struct iwl_fw_error_dump_rb *rb;
2976 
2977 		dma_unmap_page(trans->dev, rxb->page_dma, max_len,
2978 			       DMA_FROM_DEVICE);
2979 
2980 		rb_len += sizeof(**data) + sizeof(*rb) + max_len;
2981 
2982 		(*data)->type = cpu_to_le32(IWL_FW_ERROR_DUMP_RB);
2983 		(*data)->len = cpu_to_le32(sizeof(*rb) + max_len);
2984 		rb = (void *)(*data)->data;
2985 		rb->index = cpu_to_le32(i);
2986 		memcpy(rb->data, page_address(rxb->page), max_len);
2987 		/* remap the page for the free benefit */
2988 		rxb->page_dma = dma_map_page(trans->dev, rxb->page, 0,
2989 						     max_len,
2990 						     DMA_FROM_DEVICE);
2991 
2992 		*data = iwl_fw_error_next_data(*data);
2993 	}
2994 
2995 	spin_unlock(&rxq->lock);
2996 
2997 	return rb_len;
2998 }
2999 #define IWL_CSR_TO_DUMP (0x250)
3000 
3001 static u32 iwl_trans_pcie_dump_csr(struct iwl_trans *trans,
3002 				   struct iwl_fw_error_dump_data **data)
3003 {
3004 	u32 csr_len = sizeof(**data) + IWL_CSR_TO_DUMP;
3005 	__le32 *val;
3006 	int i;
3007 
3008 	(*data)->type = cpu_to_le32(IWL_FW_ERROR_DUMP_CSR);
3009 	(*data)->len = cpu_to_le32(IWL_CSR_TO_DUMP);
3010 	val = (void *)(*data)->data;
3011 
3012 	for (i = 0; i < IWL_CSR_TO_DUMP; i += 4)
3013 		*val++ = cpu_to_le32(iwl_trans_pcie_read32(trans, i));
3014 
3015 	*data = iwl_fw_error_next_data(*data);
3016 
3017 	return csr_len;
3018 }
3019 
3020 static u32 iwl_trans_pcie_fh_regs_dump(struct iwl_trans *trans,
3021 				       struct iwl_fw_error_dump_data **data)
3022 {
3023 	u32 fh_regs_len = FH_MEM_UPPER_BOUND - FH_MEM_LOWER_BOUND;
3024 	unsigned long flags;
3025 	__le32 *val;
3026 	int i;
3027 
3028 	if (!iwl_trans_grab_nic_access(trans, &flags))
3029 		return 0;
3030 
3031 	(*data)->type = cpu_to_le32(IWL_FW_ERROR_DUMP_FH_REGS);
3032 	(*data)->len = cpu_to_le32(fh_regs_len);
3033 	val = (void *)(*data)->data;
3034 
3035 	if (!trans->trans_cfg->gen2)
3036 		for (i = FH_MEM_LOWER_BOUND; i < FH_MEM_UPPER_BOUND;
3037 		     i += sizeof(u32))
3038 			*val++ = cpu_to_le32(iwl_trans_pcie_read32(trans, i));
3039 	else
3040 		for (i = iwl_umac_prph(trans, FH_MEM_LOWER_BOUND_GEN2);
3041 		     i < iwl_umac_prph(trans, FH_MEM_UPPER_BOUND_GEN2);
3042 		     i += sizeof(u32))
3043 			*val++ = cpu_to_le32(iwl_trans_pcie_read_prph(trans,
3044 								      i));
3045 
3046 	iwl_trans_release_nic_access(trans, &flags);
3047 
3048 	*data = iwl_fw_error_next_data(*data);
3049 
3050 	return sizeof(**data) + fh_regs_len;
3051 }
3052 
3053 static u32
3054 iwl_trans_pci_dump_marbh_monitor(struct iwl_trans *trans,
3055 				 struct iwl_fw_error_dump_fw_mon *fw_mon_data,
3056 				 u32 monitor_len)
3057 {
3058 	u32 buf_size_in_dwords = (monitor_len >> 2);
3059 	u32 *buffer = (u32 *)fw_mon_data->data;
3060 	unsigned long flags;
3061 	u32 i;
3062 
3063 	if (!iwl_trans_grab_nic_access(trans, &flags))
3064 		return 0;
3065 
3066 	iwl_write_umac_prph_no_grab(trans, MON_DMARB_RD_CTL_ADDR, 0x1);
3067 	for (i = 0; i < buf_size_in_dwords; i++)
3068 		buffer[i] = iwl_read_umac_prph_no_grab(trans,
3069 						       MON_DMARB_RD_DATA_ADDR);
3070 	iwl_write_umac_prph_no_grab(trans, MON_DMARB_RD_CTL_ADDR, 0x0);
3071 
3072 	iwl_trans_release_nic_access(trans, &flags);
3073 
3074 	return monitor_len;
3075 }
3076 
3077 static void
3078 iwl_trans_pcie_dump_pointers(struct iwl_trans *trans,
3079 			     struct iwl_fw_error_dump_fw_mon *fw_mon_data)
3080 {
3081 	u32 base, base_high, write_ptr, write_ptr_val, wrap_cnt;
3082 
3083 	if (trans->trans_cfg->device_family >= IWL_DEVICE_FAMILY_AX210) {
3084 		base = DBGC_CUR_DBGBUF_BASE_ADDR_LSB;
3085 		base_high = DBGC_CUR_DBGBUF_BASE_ADDR_MSB;
3086 		write_ptr = DBGC_CUR_DBGBUF_STATUS;
3087 		wrap_cnt = DBGC_DBGBUF_WRAP_AROUND;
3088 	} else if (trans->dbg.dest_tlv) {
3089 		write_ptr = le32_to_cpu(trans->dbg.dest_tlv->write_ptr_reg);
3090 		wrap_cnt = le32_to_cpu(trans->dbg.dest_tlv->wrap_count);
3091 		base = le32_to_cpu(trans->dbg.dest_tlv->base_reg);
3092 	} else {
3093 		base = MON_BUFF_BASE_ADDR;
3094 		write_ptr = MON_BUFF_WRPTR;
3095 		wrap_cnt = MON_BUFF_CYCLE_CNT;
3096 	}
3097 
3098 	write_ptr_val = iwl_read_prph(trans, write_ptr);
3099 	fw_mon_data->fw_mon_cycle_cnt =
3100 		cpu_to_le32(iwl_read_prph(trans, wrap_cnt));
3101 	fw_mon_data->fw_mon_base_ptr =
3102 		cpu_to_le32(iwl_read_prph(trans, base));
3103 	if (trans->trans_cfg->device_family >= IWL_DEVICE_FAMILY_AX210) {
3104 		fw_mon_data->fw_mon_base_high_ptr =
3105 			cpu_to_le32(iwl_read_prph(trans, base_high));
3106 		write_ptr_val &= DBGC_CUR_DBGBUF_STATUS_OFFSET_MSK;
3107 	}
3108 	fw_mon_data->fw_mon_wr_ptr = cpu_to_le32(write_ptr_val);
3109 }
3110 
3111 static u32
3112 iwl_trans_pcie_dump_monitor(struct iwl_trans *trans,
3113 			    struct iwl_fw_error_dump_data **data,
3114 			    u32 monitor_len)
3115 {
3116 	struct iwl_dram_data *fw_mon = &trans->dbg.fw_mon;
3117 	u32 len = 0;
3118 
3119 	if (trans->dbg.dest_tlv ||
3120 	    (fw_mon->size &&
3121 	     (trans->trans_cfg->device_family == IWL_DEVICE_FAMILY_7000 ||
3122 	      trans->trans_cfg->device_family >= IWL_DEVICE_FAMILY_AX210))) {
3123 		struct iwl_fw_error_dump_fw_mon *fw_mon_data;
3124 
3125 		(*data)->type = cpu_to_le32(IWL_FW_ERROR_DUMP_FW_MONITOR);
3126 		fw_mon_data = (void *)(*data)->data;
3127 
3128 		iwl_trans_pcie_dump_pointers(trans, fw_mon_data);
3129 
3130 		len += sizeof(**data) + sizeof(*fw_mon_data);
3131 		if (fw_mon->size) {
3132 			memcpy(fw_mon_data->data, fw_mon->block, fw_mon->size);
3133 			monitor_len = fw_mon->size;
3134 		} else if (trans->dbg.dest_tlv->monitor_mode == SMEM_MODE) {
3135 			u32 base = le32_to_cpu(fw_mon_data->fw_mon_base_ptr);
3136 			/*
3137 			 * Update pointers to reflect actual values after
3138 			 * shifting
3139 			 */
3140 			if (trans->dbg.dest_tlv->version) {
3141 				base = (iwl_read_prph(trans, base) &
3142 					IWL_LDBG_M2S_BUF_BA_MSK) <<
3143 				       trans->dbg.dest_tlv->base_shift;
3144 				base *= IWL_M2S_UNIT_SIZE;
3145 				base += trans->cfg->smem_offset;
3146 			} else {
3147 				base = iwl_read_prph(trans, base) <<
3148 				       trans->dbg.dest_tlv->base_shift;
3149 			}
3150 
3151 			iwl_trans_read_mem(trans, base, fw_mon_data->data,
3152 					   monitor_len / sizeof(u32));
3153 		} else if (trans->dbg.dest_tlv->monitor_mode == MARBH_MODE) {
3154 			monitor_len =
3155 				iwl_trans_pci_dump_marbh_monitor(trans,
3156 								 fw_mon_data,
3157 								 monitor_len);
3158 		} else {
3159 			/* Didn't match anything - output no monitor data */
3160 			monitor_len = 0;
3161 		}
3162 
3163 		len += monitor_len;
3164 		(*data)->len = cpu_to_le32(monitor_len + sizeof(*fw_mon_data));
3165 	}
3166 
3167 	return len;
3168 }
3169 
3170 static int iwl_trans_get_fw_monitor_len(struct iwl_trans *trans, u32 *len)
3171 {
3172 	if (trans->dbg.fw_mon.size) {
3173 		*len += sizeof(struct iwl_fw_error_dump_data) +
3174 			sizeof(struct iwl_fw_error_dump_fw_mon) +
3175 			trans->dbg.fw_mon.size;
3176 		return trans->dbg.fw_mon.size;
3177 	} else if (trans->dbg.dest_tlv) {
3178 		u32 base, end, cfg_reg, monitor_len;
3179 
3180 		if (trans->dbg.dest_tlv->version == 1) {
3181 			cfg_reg = le32_to_cpu(trans->dbg.dest_tlv->base_reg);
3182 			cfg_reg = iwl_read_prph(trans, cfg_reg);
3183 			base = (cfg_reg & IWL_LDBG_M2S_BUF_BA_MSK) <<
3184 				trans->dbg.dest_tlv->base_shift;
3185 			base *= IWL_M2S_UNIT_SIZE;
3186 			base += trans->cfg->smem_offset;
3187 
3188 			monitor_len =
3189 				(cfg_reg & IWL_LDBG_M2S_BUF_SIZE_MSK) >>
3190 				trans->dbg.dest_tlv->end_shift;
3191 			monitor_len *= IWL_M2S_UNIT_SIZE;
3192 		} else {
3193 			base = le32_to_cpu(trans->dbg.dest_tlv->base_reg);
3194 			end = le32_to_cpu(trans->dbg.dest_tlv->end_reg);
3195 
3196 			base = iwl_read_prph(trans, base) <<
3197 			       trans->dbg.dest_tlv->base_shift;
3198 			end = iwl_read_prph(trans, end) <<
3199 			      trans->dbg.dest_tlv->end_shift;
3200 
3201 			/* Make "end" point to the actual end */
3202 			if (trans->trans_cfg->device_family >=
3203 			    IWL_DEVICE_FAMILY_8000 ||
3204 			    trans->dbg.dest_tlv->monitor_mode == MARBH_MODE)
3205 				end += (1 << trans->dbg.dest_tlv->end_shift);
3206 			monitor_len = end - base;
3207 		}
3208 		*len += sizeof(struct iwl_fw_error_dump_data) +
3209 			sizeof(struct iwl_fw_error_dump_fw_mon) +
3210 			monitor_len;
3211 		return monitor_len;
3212 	}
3213 	return 0;
3214 }
3215 
3216 static struct iwl_trans_dump_data
3217 *iwl_trans_pcie_dump_data(struct iwl_trans *trans,
3218 			  u32 dump_mask)
3219 {
3220 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
3221 	struct iwl_fw_error_dump_data *data;
3222 	struct iwl_txq *cmdq = trans_pcie->txq[trans_pcie->cmd_queue];
3223 	struct iwl_fw_error_dump_txcmd *txcmd;
3224 	struct iwl_trans_dump_data *dump_data;
3225 	u32 len, num_rbs = 0, monitor_len = 0;
3226 	int i, ptr;
3227 	bool dump_rbs = test_bit(STATUS_FW_ERROR, &trans->status) &&
3228 			!trans->trans_cfg->mq_rx_supported &&
3229 			dump_mask & BIT(IWL_FW_ERROR_DUMP_RB);
3230 
3231 	if (!dump_mask)
3232 		return NULL;
3233 
3234 	/* transport dump header */
3235 	len = sizeof(*dump_data);
3236 
3237 	/* host commands */
3238 	if (dump_mask & BIT(IWL_FW_ERROR_DUMP_TXCMD) && cmdq)
3239 		len += sizeof(*data) +
3240 			cmdq->n_window * (sizeof(*txcmd) +
3241 					  TFD_MAX_PAYLOAD_SIZE);
3242 
3243 	/* FW monitor */
3244 	if (dump_mask & BIT(IWL_FW_ERROR_DUMP_FW_MONITOR))
3245 		monitor_len = iwl_trans_get_fw_monitor_len(trans, &len);
3246 
3247 	/* CSR registers */
3248 	if (dump_mask & BIT(IWL_FW_ERROR_DUMP_CSR))
3249 		len += sizeof(*data) + IWL_CSR_TO_DUMP;
3250 
3251 	/* FH registers */
3252 	if (dump_mask & BIT(IWL_FW_ERROR_DUMP_FH_REGS)) {
3253 		if (trans->trans_cfg->gen2)
3254 			len += sizeof(*data) +
3255 			       (iwl_umac_prph(trans, FH_MEM_UPPER_BOUND_GEN2) -
3256 				iwl_umac_prph(trans, FH_MEM_LOWER_BOUND_GEN2));
3257 		else
3258 			len += sizeof(*data) +
3259 			       (FH_MEM_UPPER_BOUND -
3260 				FH_MEM_LOWER_BOUND);
3261 	}
3262 
3263 	if (dump_rbs) {
3264 		/* Dump RBs is supported only for pre-9000 devices (1 queue) */
3265 		struct iwl_rxq *rxq = &trans_pcie->rxq[0];
3266 		/* RBs */
3267 		num_rbs =
3268 			le16_to_cpu(iwl_get_closed_rb_stts(trans, rxq))
3269 			& 0x0FFF;
3270 		num_rbs = (num_rbs - rxq->read) & RX_QUEUE_MASK;
3271 		len += num_rbs * (sizeof(*data) +
3272 				  sizeof(struct iwl_fw_error_dump_rb) +
3273 				  (PAGE_SIZE << trans_pcie->rx_page_order));
3274 	}
3275 
3276 	/* Paged memory for gen2 HW */
3277 	if (trans->trans_cfg->gen2 && dump_mask & BIT(IWL_FW_ERROR_DUMP_PAGING))
3278 		for (i = 0; i < trans->init_dram.paging_cnt; i++)
3279 			len += sizeof(*data) +
3280 			       sizeof(struct iwl_fw_error_dump_paging) +
3281 			       trans->init_dram.paging[i].size;
3282 
3283 	dump_data = vzalloc(len);
3284 	if (!dump_data)
3285 		return NULL;
3286 
3287 	len = 0;
3288 	data = (void *)dump_data->data;
3289 
3290 	if (dump_mask & BIT(IWL_FW_ERROR_DUMP_TXCMD) && cmdq) {
3291 		u16 tfd_size = trans_pcie->tfd_size;
3292 
3293 		data->type = cpu_to_le32(IWL_FW_ERROR_DUMP_TXCMD);
3294 		txcmd = (void *)data->data;
3295 		spin_lock_bh(&cmdq->lock);
3296 		ptr = cmdq->write_ptr;
3297 		for (i = 0; i < cmdq->n_window; i++) {
3298 			u8 idx = iwl_pcie_get_cmd_index(cmdq, ptr);
3299 			u8 tfdidx;
3300 			u32 caplen, cmdlen;
3301 
3302 			if (trans->trans_cfg->use_tfh)
3303 				tfdidx = idx;
3304 			else
3305 				tfdidx = ptr;
3306 
3307 			cmdlen = iwl_trans_pcie_get_cmdlen(trans,
3308 							   (u8 *)cmdq->tfds +
3309 							   tfd_size * tfdidx);
3310 			caplen = min_t(u32, TFD_MAX_PAYLOAD_SIZE, cmdlen);
3311 
3312 			if (cmdlen) {
3313 				len += sizeof(*txcmd) + caplen;
3314 				txcmd->cmdlen = cpu_to_le32(cmdlen);
3315 				txcmd->caplen = cpu_to_le32(caplen);
3316 				memcpy(txcmd->data, cmdq->entries[idx].cmd,
3317 				       caplen);
3318 				txcmd = (void *)((u8 *)txcmd->data + caplen);
3319 			}
3320 
3321 			ptr = iwl_queue_dec_wrap(trans, ptr);
3322 		}
3323 		spin_unlock_bh(&cmdq->lock);
3324 
3325 		data->len = cpu_to_le32(len);
3326 		len += sizeof(*data);
3327 		data = iwl_fw_error_next_data(data);
3328 	}
3329 
3330 	if (dump_mask & BIT(IWL_FW_ERROR_DUMP_CSR))
3331 		len += iwl_trans_pcie_dump_csr(trans, &data);
3332 	if (dump_mask & BIT(IWL_FW_ERROR_DUMP_FH_REGS))
3333 		len += iwl_trans_pcie_fh_regs_dump(trans, &data);
3334 	if (dump_rbs)
3335 		len += iwl_trans_pcie_dump_rbs(trans, &data, num_rbs);
3336 
3337 	/* Paged memory for gen2 HW */
3338 	if (trans->trans_cfg->gen2 &&
3339 	    dump_mask & BIT(IWL_FW_ERROR_DUMP_PAGING)) {
3340 		for (i = 0; i < trans->init_dram.paging_cnt; i++) {
3341 			struct iwl_fw_error_dump_paging *paging;
3342 			u32 page_len = trans->init_dram.paging[i].size;
3343 
3344 			data->type = cpu_to_le32(IWL_FW_ERROR_DUMP_PAGING);
3345 			data->len = cpu_to_le32(sizeof(*paging) + page_len);
3346 			paging = (void *)data->data;
3347 			paging->index = cpu_to_le32(i);
3348 			memcpy(paging->data,
3349 			       trans->init_dram.paging[i].block, page_len);
3350 			data = iwl_fw_error_next_data(data);
3351 
3352 			len += sizeof(*data) + sizeof(*paging) + page_len;
3353 		}
3354 	}
3355 	if (dump_mask & BIT(IWL_FW_ERROR_DUMP_FW_MONITOR))
3356 		len += iwl_trans_pcie_dump_monitor(trans, &data, monitor_len);
3357 
3358 	dump_data->len = len;
3359 
3360 	return dump_data;
3361 }
3362 
3363 #ifdef CONFIG_PM_SLEEP
3364 static int iwl_trans_pcie_suspend(struct iwl_trans *trans)
3365 {
3366 	return 0;
3367 }
3368 
3369 static void iwl_trans_pcie_resume(struct iwl_trans *trans)
3370 {
3371 }
3372 #endif /* CONFIG_PM_SLEEP */
3373 
3374 #define IWL_TRANS_COMMON_OPS						\
3375 	.op_mode_leave = iwl_trans_pcie_op_mode_leave,			\
3376 	.write8 = iwl_trans_pcie_write8,				\
3377 	.write32 = iwl_trans_pcie_write32,				\
3378 	.read32 = iwl_trans_pcie_read32,				\
3379 	.read_prph = iwl_trans_pcie_read_prph,				\
3380 	.write_prph = iwl_trans_pcie_write_prph,			\
3381 	.read_mem = iwl_trans_pcie_read_mem,				\
3382 	.write_mem = iwl_trans_pcie_write_mem,				\
3383 	.configure = iwl_trans_pcie_configure,				\
3384 	.set_pmi = iwl_trans_pcie_set_pmi,				\
3385 	.sw_reset = iwl_trans_pcie_sw_reset,				\
3386 	.grab_nic_access = iwl_trans_pcie_grab_nic_access,		\
3387 	.release_nic_access = iwl_trans_pcie_release_nic_access,	\
3388 	.set_bits_mask = iwl_trans_pcie_set_bits_mask,			\
3389 	.dump_data = iwl_trans_pcie_dump_data,				\
3390 	.d3_suspend = iwl_trans_pcie_d3_suspend,			\
3391 	.d3_resume = iwl_trans_pcie_d3_resume,				\
3392 	.sync_nmi = iwl_trans_pcie_sync_nmi
3393 
3394 #ifdef CONFIG_PM_SLEEP
3395 #define IWL_TRANS_PM_OPS						\
3396 	.suspend = iwl_trans_pcie_suspend,				\
3397 	.resume = iwl_trans_pcie_resume,
3398 #else
3399 #define IWL_TRANS_PM_OPS
3400 #endif /* CONFIG_PM_SLEEP */
3401 
3402 static const struct iwl_trans_ops trans_ops_pcie = {
3403 	IWL_TRANS_COMMON_OPS,
3404 	IWL_TRANS_PM_OPS
3405 	.start_hw = iwl_trans_pcie_start_hw,
3406 	.fw_alive = iwl_trans_pcie_fw_alive,
3407 	.start_fw = iwl_trans_pcie_start_fw,
3408 	.stop_device = iwl_trans_pcie_stop_device,
3409 
3410 	.send_cmd = iwl_trans_pcie_send_hcmd,
3411 
3412 	.tx = iwl_trans_pcie_tx,
3413 	.reclaim = iwl_trans_pcie_reclaim,
3414 
3415 	.txq_disable = iwl_trans_pcie_txq_disable,
3416 	.txq_enable = iwl_trans_pcie_txq_enable,
3417 
3418 	.txq_set_shared_mode = iwl_trans_pcie_txq_set_shared_mode,
3419 
3420 	.wait_tx_queues_empty = iwl_trans_pcie_wait_txqs_empty,
3421 
3422 	.freeze_txq_timer = iwl_trans_pcie_freeze_txq_timer,
3423 	.block_txq_ptrs = iwl_trans_pcie_block_txq_ptrs,
3424 #ifdef CONFIG_IWLWIFI_DEBUGFS
3425 	.debugfs_cleanup = iwl_trans_pcie_debugfs_cleanup,
3426 #endif
3427 };
3428 
3429 static const struct iwl_trans_ops trans_ops_pcie_gen2 = {
3430 	IWL_TRANS_COMMON_OPS,
3431 	IWL_TRANS_PM_OPS
3432 	.start_hw = iwl_trans_pcie_start_hw,
3433 	.fw_alive = iwl_trans_pcie_gen2_fw_alive,
3434 	.start_fw = iwl_trans_pcie_gen2_start_fw,
3435 	.stop_device = iwl_trans_pcie_gen2_stop_device,
3436 
3437 	.send_cmd = iwl_trans_pcie_gen2_send_hcmd,
3438 
3439 	.tx = iwl_trans_pcie_gen2_tx,
3440 	.reclaim = iwl_trans_pcie_reclaim,
3441 
3442 	.set_q_ptrs = iwl_trans_pcie_set_q_ptrs,
3443 
3444 	.txq_alloc = iwl_trans_pcie_dyn_txq_alloc,
3445 	.txq_free = iwl_trans_pcie_dyn_txq_free,
3446 	.wait_txq_empty = iwl_trans_pcie_wait_txq_empty,
3447 	.rxq_dma_data = iwl_trans_pcie_rxq_dma_data,
3448 #ifdef CONFIG_IWLWIFI_DEBUGFS
3449 	.debugfs_cleanup = iwl_trans_pcie_debugfs_cleanup,
3450 #endif
3451 };
3452 
3453 struct iwl_trans *iwl_trans_pcie_alloc(struct pci_dev *pdev,
3454 			       const struct pci_device_id *ent,
3455 			       const struct iwl_cfg_trans_params *cfg_trans)
3456 {
3457 	struct iwl_trans_pcie *trans_pcie;
3458 	struct iwl_trans *trans;
3459 	int ret, addr_size, txcmd_size, txcmd_align;
3460 	const struct iwl_trans_ops *ops = &trans_ops_pcie_gen2;
3461 
3462 	if (!cfg_trans->gen2) {
3463 		ops = &trans_ops_pcie;
3464 		txcmd_size = sizeof(struct iwl_tx_cmd);
3465 		txcmd_align = sizeof(void *);
3466 	} else if (cfg_trans->device_family < IWL_DEVICE_FAMILY_AX210) {
3467 		txcmd_size = sizeof(struct iwl_tx_cmd_gen2);
3468 		txcmd_align = 64;
3469 	} else {
3470 		txcmd_size = sizeof(struct iwl_tx_cmd_gen3);
3471 		txcmd_align = 128;
3472 	}
3473 
3474 	txcmd_size += sizeof(struct iwl_cmd_header);
3475 	txcmd_size += 36; /* biggest possible 802.11 header */
3476 
3477 	/* Ensure device TX cmd cannot reach/cross a page boundary in gen2 */
3478 	if (WARN_ON(cfg_trans->gen2 && txcmd_size >= txcmd_align))
3479 		return ERR_PTR(-EINVAL);
3480 
3481 	ret = pcim_enable_device(pdev);
3482 	if (ret)
3483 		return ERR_PTR(ret);
3484 
3485 	trans = iwl_trans_alloc(sizeof(struct iwl_trans_pcie), &pdev->dev, ops,
3486 				txcmd_size, txcmd_align);
3487 	if (!trans)
3488 		return ERR_PTR(-ENOMEM);
3489 
3490 	trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
3491 
3492 	trans_pcie->trans = trans;
3493 	trans_pcie->opmode_down = true;
3494 	spin_lock_init(&trans_pcie->irq_lock);
3495 	spin_lock_init(&trans_pcie->reg_lock);
3496 	mutex_init(&trans_pcie->mutex);
3497 	init_waitqueue_head(&trans_pcie->ucode_write_waitq);
3498 
3499 	trans_pcie->rba.alloc_wq = alloc_workqueue("rb_allocator",
3500 						   WQ_HIGHPRI | WQ_UNBOUND, 1);
3501 	if (!trans_pcie->rba.alloc_wq) {
3502 		ret = -ENOMEM;
3503 		goto out_free_trans;
3504 	}
3505 	INIT_WORK(&trans_pcie->rba.rx_alloc, iwl_pcie_rx_allocator_work);
3506 
3507 	trans_pcie->tso_hdr_page = alloc_percpu(struct iwl_tso_hdr_page);
3508 	if (!trans_pcie->tso_hdr_page) {
3509 		ret = -ENOMEM;
3510 		goto out_no_pci;
3511 	}
3512 	trans_pcie->debug_rfkill = -1;
3513 
3514 	if (!cfg_trans->base_params->pcie_l1_allowed) {
3515 		/*
3516 		 * W/A - seems to solve weird behavior. We need to remove this
3517 		 * if we don't want to stay in L1 all the time. This wastes a
3518 		 * lot of power.
3519 		 */
3520 		pci_disable_link_state(pdev, PCIE_LINK_STATE_L0S |
3521 				       PCIE_LINK_STATE_L1 |
3522 				       PCIE_LINK_STATE_CLKPM);
3523 	}
3524 
3525 	trans_pcie->def_rx_queue = 0;
3526 
3527 	if (cfg_trans->use_tfh) {
3528 		addr_size = 64;
3529 		trans_pcie->max_tbs = IWL_TFH_NUM_TBS;
3530 		trans_pcie->tfd_size = sizeof(struct iwl_tfh_tfd);
3531 	} else {
3532 		addr_size = 36;
3533 		trans_pcie->max_tbs = IWL_NUM_OF_TBS;
3534 		trans_pcie->tfd_size = sizeof(struct iwl_tfd);
3535 	}
3536 	trans->max_skb_frags = IWL_PCIE_MAX_FRAGS(trans_pcie);
3537 
3538 	pci_set_master(pdev);
3539 
3540 	ret = pci_set_dma_mask(pdev, DMA_BIT_MASK(addr_size));
3541 	if (!ret)
3542 		ret = pci_set_consistent_dma_mask(pdev,
3543 						  DMA_BIT_MASK(addr_size));
3544 	if (ret) {
3545 		ret = pci_set_dma_mask(pdev, DMA_BIT_MASK(32));
3546 		if (!ret)
3547 			ret = pci_set_consistent_dma_mask(pdev,
3548 							  DMA_BIT_MASK(32));
3549 		/* both attempts failed: */
3550 		if (ret) {
3551 			dev_err(&pdev->dev, "No suitable DMA available\n");
3552 			goto out_no_pci;
3553 		}
3554 	}
3555 
3556 	ret = pcim_iomap_regions_request_all(pdev, BIT(0), DRV_NAME);
3557 	if (ret) {
3558 		dev_err(&pdev->dev, "pcim_iomap_regions_request_all failed\n");
3559 		goto out_no_pci;
3560 	}
3561 
3562 	trans_pcie->hw_base = pcim_iomap_table(pdev)[0];
3563 	if (!trans_pcie->hw_base) {
3564 		dev_err(&pdev->dev, "pcim_iomap_table failed\n");
3565 		ret = -ENODEV;
3566 		goto out_no_pci;
3567 	}
3568 
3569 	/* We disable the RETRY_TIMEOUT register (0x41) to keep
3570 	 * PCI Tx retries from interfering with C3 CPU state */
3571 	pci_write_config_byte(pdev, PCI_CFG_RETRY_TIMEOUT, 0x00);
3572 
3573 	trans_pcie->pci_dev = pdev;
3574 	iwl_disable_interrupts(trans);
3575 
3576 	trans->hw_rev = iwl_read32(trans, CSR_HW_REV);
3577 	if (trans->hw_rev == 0xffffffff) {
3578 		dev_err(&pdev->dev, "HW_REV=0xFFFFFFFF, PCI issues?\n");
3579 		ret = -EIO;
3580 		goto out_no_pci;
3581 	}
3582 
3583 	/*
3584 	 * In the 8000 HW family the format of the 4 bytes of CSR_HW_REV have
3585 	 * changed, and now the revision step also includes bit 0-1 (no more
3586 	 * "dash" value). To keep hw_rev backwards compatible - we'll store it
3587 	 * in the old format.
3588 	 */
3589 	if (cfg_trans->device_family >= IWL_DEVICE_FAMILY_8000) {
3590 		trans->hw_rev = (trans->hw_rev & 0xfff0) |
3591 				(CSR_HW_REV_STEP(trans->hw_rev << 2) << 2);
3592 
3593 		ret = iwl_pcie_prepare_card_hw(trans);
3594 		if (ret) {
3595 			IWL_WARN(trans, "Exit HW not ready\n");
3596 			goto out_no_pci;
3597 		}
3598 
3599 		/*
3600 		 * in-order to recognize C step driver should read chip version
3601 		 * id located at the AUX bus MISC address space.
3602 		 */
3603 		ret = iwl_finish_nic_init(trans, cfg_trans);
3604 		if (ret)
3605 			goto out_no_pci;
3606 
3607 	}
3608 
3609 	IWL_DEBUG_INFO(trans, "HW REV: 0x%0x\n", trans->hw_rev);
3610 
3611 	iwl_pcie_set_interrupt_capa(pdev, trans, cfg_trans);
3612 	trans->hw_id = (pdev->device << 16) + pdev->subsystem_device;
3613 	snprintf(trans->hw_id_str, sizeof(trans->hw_id_str),
3614 		 "PCI ID: 0x%04X:0x%04X", pdev->device, pdev->subsystem_device);
3615 
3616 	/* Initialize the wait queue for commands */
3617 	init_waitqueue_head(&trans_pcie->wait_command_queue);
3618 
3619 	init_waitqueue_head(&trans_pcie->sx_waitq);
3620 
3621 	if (trans_pcie->msix_enabled) {
3622 		ret = iwl_pcie_init_msix_handler(pdev, trans_pcie);
3623 		if (ret)
3624 			goto out_no_pci;
3625 	 } else {
3626 		ret = iwl_pcie_alloc_ict(trans);
3627 		if (ret)
3628 			goto out_no_pci;
3629 
3630 		ret = devm_request_threaded_irq(&pdev->dev, pdev->irq,
3631 						iwl_pcie_isr,
3632 						iwl_pcie_irq_handler,
3633 						IRQF_SHARED, DRV_NAME, trans);
3634 		if (ret) {
3635 			IWL_ERR(trans, "Error allocating IRQ %d\n", pdev->irq);
3636 			goto out_free_ict;
3637 		}
3638 		trans_pcie->inta_mask = CSR_INI_SET_MASK;
3639 	 }
3640 
3641 #ifdef CONFIG_IWLWIFI_DEBUGFS
3642 	trans_pcie->fw_mon_data.state = IWL_FW_MON_DBGFS_STATE_CLOSED;
3643 	mutex_init(&trans_pcie->fw_mon_data.mutex);
3644 #endif
3645 
3646 	iwl_dbg_tlv_init(trans);
3647 
3648 	return trans;
3649 
3650 out_free_ict:
3651 	iwl_pcie_free_ict(trans);
3652 out_no_pci:
3653 	free_percpu(trans_pcie->tso_hdr_page);
3654 	destroy_workqueue(trans_pcie->rba.alloc_wq);
3655 out_free_trans:
3656 	iwl_trans_free(trans);
3657 	return ERR_PTR(ret);
3658 }
3659 
3660 void iwl_trans_pcie_sync_nmi(struct iwl_trans *trans)
3661 {
3662 	struct iwl_trans_pcie *trans_pcie = IWL_TRANS_GET_PCIE_TRANS(trans);
3663 	unsigned long timeout = jiffies + IWL_TRANS_NMI_TIMEOUT;
3664 	bool interrupts_enabled = test_bit(STATUS_INT_ENABLED, &trans->status);
3665 	u32 inta_addr, sw_err_bit;
3666 
3667 	if (trans_pcie->msix_enabled) {
3668 		inta_addr = CSR_MSIX_HW_INT_CAUSES_AD;
3669 		sw_err_bit = MSIX_HW_INT_CAUSES_REG_SW_ERR;
3670 	} else {
3671 		inta_addr = CSR_INT;
3672 		sw_err_bit = CSR_INT_BIT_SW_ERR;
3673 	}
3674 
3675 	/* if the interrupts were already disabled, there is no point in
3676 	 * calling iwl_disable_interrupts
3677 	 */
3678 	if (interrupts_enabled)
3679 		iwl_disable_interrupts(trans);
3680 
3681 	iwl_force_nmi(trans);
3682 	while (time_after(timeout, jiffies)) {
3683 		u32 inta_hw = iwl_read32(trans, inta_addr);
3684 
3685 		/* Error detected by uCode */
3686 		if (inta_hw & sw_err_bit) {
3687 			/* Clear causes register */
3688 			iwl_write32(trans, inta_addr, inta_hw & sw_err_bit);
3689 			break;
3690 		}
3691 
3692 		mdelay(1);
3693 	}
3694 
3695 	/* enable interrupts only if there were already enabled before this
3696 	 * function to avoid a case were the driver enable interrupts before
3697 	 * proper configurations were made
3698 	 */
3699 	if (interrupts_enabled)
3700 		iwl_enable_interrupts(trans);
3701 
3702 	iwl_trans_fw_error(trans);
3703 }
3704