11c099ab4SSean Wang // SPDX-License-Identifier: ISC 21c099ab4SSean Wang /* Copyright (C) 2020 MediaTek Inc. */ 31c099ab4SSean Wang 41c099ab4SSean Wang #include <linux/firmware.h> 51c099ab4SSean Wang #include <linux/fs.h> 61c099ab4SSean Wang #include "mt7921.h" 72afd17b4SLorenzo Bianconi #include "mt7921_trace.h" 81c099ab4SSean Wang #include "mcu.h" 91c099ab4SSean Wang #include "mac.h" 101c099ab4SSean Wang 111c099ab4SSean Wang struct mt7921_patch_hdr { 121c099ab4SSean Wang char build_date[16]; 131c099ab4SSean Wang char platform[4]; 141c099ab4SSean Wang __be32 hw_sw_ver; 151c099ab4SSean Wang __be32 patch_ver; 161c099ab4SSean Wang __be16 checksum; 171c099ab4SSean Wang u16 reserved; 181c099ab4SSean Wang struct { 191c099ab4SSean Wang __be32 patch_ver; 201c099ab4SSean Wang __be32 subsys; 211c099ab4SSean Wang __be32 feature; 221c099ab4SSean Wang __be32 n_region; 231c099ab4SSean Wang __be32 crc; 241c099ab4SSean Wang u32 reserved[11]; 251c099ab4SSean Wang } desc; 261c099ab4SSean Wang } __packed; 271c099ab4SSean Wang 281c099ab4SSean Wang struct mt7921_patch_sec { 291c099ab4SSean Wang __be32 type; 301c099ab4SSean Wang __be32 offs; 311c099ab4SSean Wang __be32 size; 321c099ab4SSean Wang union { 331c099ab4SSean Wang __be32 spec[13]; 341c099ab4SSean Wang struct { 351c099ab4SSean Wang __be32 addr; 361c099ab4SSean Wang __be32 len; 371c099ab4SSean Wang __be32 sec_key_idx; 381c099ab4SSean Wang __be32 align_len; 391c099ab4SSean Wang u32 reserved[9]; 401c099ab4SSean Wang } info; 411c099ab4SSean Wang }; 421c099ab4SSean Wang } __packed; 431c099ab4SSean Wang 441c099ab4SSean Wang struct mt7921_fw_trailer { 451c099ab4SSean Wang u8 chip_id; 461c099ab4SSean Wang u8 eco_code; 471c099ab4SSean Wang u8 n_region; 481c099ab4SSean Wang u8 format_ver; 491c099ab4SSean Wang u8 format_flag; 501c099ab4SSean Wang u8 reserved[2]; 511c099ab4SSean Wang char fw_ver[10]; 521c099ab4SSean Wang char build_date[15]; 531c099ab4SSean Wang u32 crc; 541c099ab4SSean Wang } __packed; 551c099ab4SSean Wang 561c099ab4SSean Wang struct mt7921_fw_region { 571c099ab4SSean Wang __le32 decomp_crc; 581c099ab4SSean Wang __le32 decomp_len; 591c099ab4SSean Wang __le32 decomp_blk_sz; 601c099ab4SSean Wang u8 reserved[4]; 611c099ab4SSean Wang __le32 addr; 621c099ab4SSean Wang __le32 len; 631c099ab4SSean Wang u8 feature_set; 641c099ab4SSean Wang u8 reserved1[15]; 651c099ab4SSean Wang } __packed; 661c099ab4SSean Wang 671c099ab4SSean Wang #define MT_STA_BFER BIT(0) 681c099ab4SSean Wang #define MT_STA_BFEE BIT(1) 691c099ab4SSean Wang 701c099ab4SSean Wang #define FW_FEATURE_SET_ENCRYPT BIT(0) 711c099ab4SSean Wang #define FW_FEATURE_SET_KEY_IDX GENMASK(2, 1) 721c099ab4SSean Wang #define FW_FEATURE_ENCRY_MODE BIT(4) 731c099ab4SSean Wang #define FW_FEATURE_OVERRIDE_ADDR BIT(5) 741c099ab4SSean Wang 751c099ab4SSean Wang #define DL_MODE_ENCRYPT BIT(0) 761c099ab4SSean Wang #define DL_MODE_KEY_IDX GENMASK(2, 1) 771c099ab4SSean Wang #define DL_MODE_RESET_SEC_IV BIT(3) 781c099ab4SSean Wang #define DL_MODE_WORKING_PDA_CR4 BIT(4) 791c099ab4SSean Wang #define DL_CONFIG_ENCRY_MODE_SEL BIT(6) 801c099ab4SSean Wang #define DL_MODE_NEED_RSP BIT(31) 811c099ab4SSean Wang 821c099ab4SSean Wang #define FW_START_OVERRIDE BIT(0) 831c099ab4SSean Wang #define FW_START_WORKING_PDA_CR4 BIT(2) 841c099ab4SSean Wang 851c099ab4SSean Wang #define PATCH_SEC_TYPE_MASK GENMASK(15, 0) 861c099ab4SSean Wang #define PATCH_SEC_TYPE_INFO 0x2 871c099ab4SSean Wang 881c099ab4SSean Wang #define to_wcid_lo(id) FIELD_GET(GENMASK(7, 0), (u16)id) 891c099ab4SSean Wang #define to_wcid_hi(id) FIELD_GET(GENMASK(9, 8), (u16)id) 901c099ab4SSean Wang 911c099ab4SSean Wang static enum mt7921_cipher_type 921c099ab4SSean Wang mt7921_mcu_get_cipher(int cipher) 931c099ab4SSean Wang { 941c099ab4SSean Wang switch (cipher) { 951c099ab4SSean Wang case WLAN_CIPHER_SUITE_WEP40: 961c099ab4SSean Wang return MT_CIPHER_WEP40; 971c099ab4SSean Wang case WLAN_CIPHER_SUITE_WEP104: 981c099ab4SSean Wang return MT_CIPHER_WEP104; 991c099ab4SSean Wang case WLAN_CIPHER_SUITE_TKIP: 1001c099ab4SSean Wang return MT_CIPHER_TKIP; 1011c099ab4SSean Wang case WLAN_CIPHER_SUITE_AES_CMAC: 1021c099ab4SSean Wang return MT_CIPHER_BIP_CMAC_128; 1031c099ab4SSean Wang case WLAN_CIPHER_SUITE_CCMP: 1041c099ab4SSean Wang return MT_CIPHER_AES_CCMP; 1051c099ab4SSean Wang case WLAN_CIPHER_SUITE_CCMP_256: 1061c099ab4SSean Wang return MT_CIPHER_CCMP_256; 1071c099ab4SSean Wang case WLAN_CIPHER_SUITE_GCMP: 1081c099ab4SSean Wang return MT_CIPHER_GCMP; 1091c099ab4SSean Wang case WLAN_CIPHER_SUITE_GCMP_256: 1101c099ab4SSean Wang return MT_CIPHER_GCMP_256; 1111c099ab4SSean Wang case WLAN_CIPHER_SUITE_SMS4: 1121c099ab4SSean Wang return MT_CIPHER_WAPI; 1131c099ab4SSean Wang default: 1141c099ab4SSean Wang return MT_CIPHER_NONE; 1151c099ab4SSean Wang } 1161c099ab4SSean Wang } 1171c099ab4SSean Wang 1181c099ab4SSean Wang static u8 mt7921_mcu_chan_bw(struct cfg80211_chan_def *chandef) 1191c099ab4SSean Wang { 1201c099ab4SSean Wang static const u8 width_to_bw[] = { 1211c099ab4SSean Wang [NL80211_CHAN_WIDTH_40] = CMD_CBW_40MHZ, 1221c099ab4SSean Wang [NL80211_CHAN_WIDTH_80] = CMD_CBW_80MHZ, 1231c099ab4SSean Wang [NL80211_CHAN_WIDTH_80P80] = CMD_CBW_8080MHZ, 1241c099ab4SSean Wang [NL80211_CHAN_WIDTH_160] = CMD_CBW_160MHZ, 1251c099ab4SSean Wang [NL80211_CHAN_WIDTH_5] = CMD_CBW_5MHZ, 1261c099ab4SSean Wang [NL80211_CHAN_WIDTH_10] = CMD_CBW_10MHZ, 1271c099ab4SSean Wang [NL80211_CHAN_WIDTH_20] = CMD_CBW_20MHZ, 1281c099ab4SSean Wang [NL80211_CHAN_WIDTH_20_NOHT] = CMD_CBW_20MHZ, 1291c099ab4SSean Wang }; 1301c099ab4SSean Wang 1311c099ab4SSean Wang if (chandef->width >= ARRAY_SIZE(width_to_bw)) 1321c099ab4SSean Wang return 0; 1331c099ab4SSean Wang 1341c099ab4SSean Wang return width_to_bw[chandef->width]; 1351c099ab4SSean Wang } 1361c099ab4SSean Wang 1371c099ab4SSean Wang static int 1381c099ab4SSean Wang mt7921_mcu_parse_eeprom(struct mt76_dev *dev, struct sk_buff *skb) 1391c099ab4SSean Wang { 1401c099ab4SSean Wang struct mt7921_mcu_eeprom_info *res; 1411c099ab4SSean Wang u8 *buf; 1421c099ab4SSean Wang 1431c099ab4SSean Wang if (!skb) 1441c099ab4SSean Wang return -EINVAL; 1451c099ab4SSean Wang 1461c099ab4SSean Wang skb_pull(skb, sizeof(struct mt7921_mcu_rxd)); 1471c099ab4SSean Wang 1481c099ab4SSean Wang res = (struct mt7921_mcu_eeprom_info *)skb->data; 1491c099ab4SSean Wang buf = dev->eeprom.data + le32_to_cpu(res->addr); 1501c099ab4SSean Wang memcpy(buf, res->data, 16); 1511c099ab4SSean Wang 1521c099ab4SSean Wang return 0; 1531c099ab4SSean Wang } 1541c099ab4SSean Wang 1551c099ab4SSean Wang static int 1561c099ab4SSean Wang mt7921_mcu_parse_response(struct mt76_dev *mdev, int cmd, 1571c099ab4SSean Wang struct sk_buff *skb, int seq) 1581c099ab4SSean Wang { 1591c099ab4SSean Wang struct mt7921_mcu_rxd *rxd; 1601c099ab4SSean Wang int ret = 0; 1611c099ab4SSean Wang 1621c099ab4SSean Wang if (!skb) { 16353d35b1aSLorenzo Bianconi dev_err(mdev->dev, "Message %08x (seq %d) timeout\n", 1641c099ab4SSean Wang cmd, seq); 165d43b3257SLorenzo Bianconi mt7921_reset(mdev); 166d43b3257SLorenzo Bianconi 1671c099ab4SSean Wang return -ETIMEDOUT; 1681c099ab4SSean Wang } 1691c099ab4SSean Wang 1701c099ab4SSean Wang rxd = (struct mt7921_mcu_rxd *)skb->data; 1711c099ab4SSean Wang if (seq != rxd->seq) 1721c099ab4SSean Wang return -EAGAIN; 1731c099ab4SSean Wang 1741c099ab4SSean Wang switch (cmd) { 1751c099ab4SSean Wang case MCU_CMD_PATCH_SEM_CONTROL: 1761c099ab4SSean Wang skb_pull(skb, sizeof(*rxd) - 4); 1771c099ab4SSean Wang ret = *skb->data; 1781c099ab4SSean Wang break; 17967aa2743SLorenzo Bianconi case MCU_EXT_CMD_GET_TEMP: 1801c099ab4SSean Wang skb_pull(skb, sizeof(*rxd) + 4); 1811c099ab4SSean Wang ret = le32_to_cpu(*(__le32 *)skb->data); 1821c099ab4SSean Wang break; 1831c099ab4SSean Wang case MCU_EXT_CMD_EFUSE_ACCESS: 1841c099ab4SSean Wang ret = mt7921_mcu_parse_eeprom(mdev, skb); 1851c099ab4SSean Wang break; 1861c099ab4SSean Wang case MCU_UNI_CMD_DEV_INFO_UPDATE: 1871c099ab4SSean Wang case MCU_UNI_CMD_BSS_INFO_UPDATE: 1881c099ab4SSean Wang case MCU_UNI_CMD_STA_REC_UPDATE: 1891c099ab4SSean Wang case MCU_UNI_CMD_HIF_CTRL: 1901c099ab4SSean Wang case MCU_UNI_CMD_OFFLOAD: 1911c099ab4SSean Wang case MCU_UNI_CMD_SUSPEND: { 1921c099ab4SSean Wang struct mt7921_mcu_uni_event *event; 1931c099ab4SSean Wang 1941c099ab4SSean Wang skb_pull(skb, sizeof(*rxd)); 1951c099ab4SSean Wang event = (struct mt7921_mcu_uni_event *)skb->data; 1961c099ab4SSean Wang ret = le32_to_cpu(event->status); 1971c099ab4SSean Wang break; 1981c099ab4SSean Wang } 1991c099ab4SSean Wang case MCU_CMD_REG_READ: { 2001c099ab4SSean Wang struct mt7921_mcu_reg_event *event; 2011c099ab4SSean Wang 2021c099ab4SSean Wang skb_pull(skb, sizeof(*rxd)); 2031c099ab4SSean Wang event = (struct mt7921_mcu_reg_event *)skb->data; 2041c099ab4SSean Wang ret = (int)le32_to_cpu(event->val); 2051c099ab4SSean Wang break; 2061c099ab4SSean Wang } 2071c099ab4SSean Wang default: 2081c099ab4SSean Wang skb_pull(skb, sizeof(struct mt7921_mcu_rxd)); 2091c099ab4SSean Wang break; 2101c099ab4SSean Wang } 2111c099ab4SSean Wang 2121c099ab4SSean Wang return ret; 2131c099ab4SSean Wang } 2141c099ab4SSean Wang 2151c099ab4SSean Wang static int 2161c099ab4SSean Wang mt7921_mcu_send_message(struct mt76_dev *mdev, struct sk_buff *skb, 2171c099ab4SSean Wang int cmd, int *wait_seq) 2181c099ab4SSean Wang { 2191c099ab4SSean Wang struct mt7921_dev *dev = container_of(mdev, struct mt7921_dev, mt76); 2201c099ab4SSean Wang int txd_len, mcu_cmd = cmd & MCU_CMD_MASK; 2211c099ab4SSean Wang enum mt76_mcuq_id txq = MT_MCUQ_WM; 2221c099ab4SSean Wang struct mt7921_uni_txd *uni_txd; 2231c099ab4SSean Wang struct mt7921_mcu_txd *mcu_txd; 2241c099ab4SSean Wang __le32 *txd; 2251c099ab4SSean Wang u32 val; 2261c099ab4SSean Wang u8 seq; 2271c099ab4SSean Wang 228a2a6cd54SLorenzo Bianconi switch (cmd) { 229a2a6cd54SLorenzo Bianconi case MCU_UNI_CMD_HIF_CTRL: 230a2a6cd54SLorenzo Bianconi case MCU_UNI_CMD_SUSPEND: 231a2a6cd54SLorenzo Bianconi case MCU_UNI_CMD_OFFLOAD: 232a2a6cd54SLorenzo Bianconi mdev->mcu.timeout = HZ / 3; 233a2a6cd54SLorenzo Bianconi break; 234a2a6cd54SLorenzo Bianconi default: 235a2a6cd54SLorenzo Bianconi mdev->mcu.timeout = 3 * HZ; 236a2a6cd54SLorenzo Bianconi break; 237a2a6cd54SLorenzo Bianconi } 2381c099ab4SSean Wang 2391c099ab4SSean Wang seq = ++dev->mt76.mcu.msg_seq & 0xf; 2401c099ab4SSean Wang if (!seq) 2411c099ab4SSean Wang seq = ++dev->mt76.mcu.msg_seq & 0xf; 2421c099ab4SSean Wang 2431c099ab4SSean Wang if (cmd == MCU_CMD_FW_SCATTER) { 2441c099ab4SSean Wang txq = MT_MCUQ_FWDL; 2451c099ab4SSean Wang goto exit; 2461c099ab4SSean Wang } 2471c099ab4SSean Wang 2481c099ab4SSean Wang txd_len = cmd & MCU_UNI_PREFIX ? sizeof(*uni_txd) : sizeof(*mcu_txd); 2491c099ab4SSean Wang txd = (__le32 *)skb_push(skb, txd_len); 2501c099ab4SSean Wang 2511c099ab4SSean Wang val = FIELD_PREP(MT_TXD0_TX_BYTES, skb->len) | 2521c099ab4SSean Wang FIELD_PREP(MT_TXD0_PKT_FMT, MT_TX_TYPE_CMD) | 2531c099ab4SSean Wang FIELD_PREP(MT_TXD0_Q_IDX, MT_TX_MCU_PORT_RX_Q0); 2541c099ab4SSean Wang txd[0] = cpu_to_le32(val); 2551c099ab4SSean Wang 2561c099ab4SSean Wang val = MT_TXD1_LONG_FORMAT | 2571c099ab4SSean Wang FIELD_PREP(MT_TXD1_HDR_FORMAT, MT_HDR_FORMAT_CMD); 2581c099ab4SSean Wang txd[1] = cpu_to_le32(val); 2591c099ab4SSean Wang 2601c099ab4SSean Wang if (cmd & MCU_UNI_PREFIX) { 2611c099ab4SSean Wang uni_txd = (struct mt7921_uni_txd *)txd; 2621c099ab4SSean Wang uni_txd->len = cpu_to_le16(skb->len - sizeof(uni_txd->txd)); 2631c099ab4SSean Wang uni_txd->option = MCU_CMD_UNI_EXT_ACK; 2641c099ab4SSean Wang uni_txd->cid = cpu_to_le16(mcu_cmd); 2651c099ab4SSean Wang uni_txd->s2d_index = MCU_S2D_H2N; 2661c099ab4SSean Wang uni_txd->pkt_type = MCU_PKT_ID; 2671c099ab4SSean Wang uni_txd->seq = seq; 2681c099ab4SSean Wang 2691c099ab4SSean Wang goto exit; 2701c099ab4SSean Wang } 2711c099ab4SSean Wang 2721c099ab4SSean Wang mcu_txd = (struct mt7921_mcu_txd *)txd; 2731c099ab4SSean Wang mcu_txd->len = cpu_to_le16(skb->len - sizeof(mcu_txd->txd)); 2741c099ab4SSean Wang mcu_txd->pq_id = cpu_to_le16(MCU_PQ_ID(MT_TX_PORT_IDX_MCU, 2751c099ab4SSean Wang MT_TX_MCU_PORT_RX_Q0)); 2761c099ab4SSean Wang mcu_txd->pkt_type = MCU_PKT_ID; 2771c099ab4SSean Wang mcu_txd->seq = seq; 2781c099ab4SSean Wang 2791c099ab4SSean Wang switch (cmd & ~MCU_CMD_MASK) { 2801c099ab4SSean Wang case MCU_FW_PREFIX: 2811c099ab4SSean Wang mcu_txd->set_query = MCU_Q_NA; 2821c099ab4SSean Wang mcu_txd->cid = mcu_cmd; 2831c099ab4SSean Wang break; 2841c099ab4SSean Wang case MCU_CE_PREFIX: 2851c099ab4SSean Wang if (cmd & MCU_QUERY_MASK) 2861c099ab4SSean Wang mcu_txd->set_query = MCU_Q_QUERY; 2871c099ab4SSean Wang else 2881c099ab4SSean Wang mcu_txd->set_query = MCU_Q_SET; 2891c099ab4SSean Wang mcu_txd->cid = mcu_cmd; 2901c099ab4SSean Wang break; 2911c099ab4SSean Wang default: 2921c099ab4SSean Wang mcu_txd->cid = MCU_CMD_EXT_CID; 2931c099ab4SSean Wang if (cmd & MCU_QUERY_PREFIX || cmd == MCU_EXT_CMD_EFUSE_ACCESS) 2941c099ab4SSean Wang mcu_txd->set_query = MCU_Q_QUERY; 2951c099ab4SSean Wang else 2961c099ab4SSean Wang mcu_txd->set_query = MCU_Q_SET; 2971c099ab4SSean Wang mcu_txd->ext_cid = mcu_cmd; 2981c099ab4SSean Wang mcu_txd->ext_cid_ack = 1; 2991c099ab4SSean Wang break; 3001c099ab4SSean Wang } 3011c099ab4SSean Wang 3021c099ab4SSean Wang mcu_txd->s2d_index = MCU_S2D_H2N; 3031c099ab4SSean Wang WARN_ON(cmd == MCU_EXT_CMD_EFUSE_ACCESS && 3041c099ab4SSean Wang mcu_txd->set_query != MCU_Q_QUERY); 3051c099ab4SSean Wang 3061c099ab4SSean Wang exit: 3071c099ab4SSean Wang if (wait_seq) 3081c099ab4SSean Wang *wait_seq = seq; 3091c099ab4SSean Wang 3101c099ab4SSean Wang return mt76_tx_queue_skb_raw(dev, mdev->q_mcu[txq], skb, 0); 3111c099ab4SSean Wang } 3121c099ab4SSean Wang 3131c099ab4SSean Wang static void 3141c099ab4SSean Wang mt7921_mcu_tx_rate_parse(struct mt76_phy *mphy, 3151c099ab4SSean Wang struct mt7921_mcu_peer_cap *peer, 3161c099ab4SSean Wang struct rate_info *rate, u16 r) 3171c099ab4SSean Wang { 3181c099ab4SSean Wang struct ieee80211_supported_band *sband; 3191c099ab4SSean Wang u16 flags = 0; 3201c099ab4SSean Wang u8 txmode = FIELD_GET(MT_WTBL_RATE_TX_MODE, r); 3211c099ab4SSean Wang u8 gi = 0; 3221c099ab4SSean Wang u8 bw = 0; 3231c099ab4SSean Wang 3241c099ab4SSean Wang rate->mcs = FIELD_GET(MT_WTBL_RATE_MCS, r); 3251c099ab4SSean Wang rate->nss = FIELD_GET(MT_WTBL_RATE_NSS, r) + 1; 3261c099ab4SSean Wang 3271c099ab4SSean Wang switch (peer->bw) { 3281c099ab4SSean Wang case IEEE80211_STA_RX_BW_160: 3291c099ab4SSean Wang gi = peer->g16; 3301c099ab4SSean Wang break; 3311c099ab4SSean Wang case IEEE80211_STA_RX_BW_80: 3321c099ab4SSean Wang gi = peer->g8; 3331c099ab4SSean Wang break; 3341c099ab4SSean Wang case IEEE80211_STA_RX_BW_40: 3351c099ab4SSean Wang gi = peer->g4; 3361c099ab4SSean Wang break; 3371c099ab4SSean Wang default: 3381c099ab4SSean Wang gi = peer->g2; 3391c099ab4SSean Wang break; 3401c099ab4SSean Wang } 3411c099ab4SSean Wang 3421c099ab4SSean Wang gi = txmode >= MT_PHY_TYPE_HE_SU ? 3431c099ab4SSean Wang FIELD_GET(MT_WTBL_RATE_HE_GI, gi) : 3441c099ab4SSean Wang FIELD_GET(MT_WTBL_RATE_GI, gi); 3451c099ab4SSean Wang 3461c099ab4SSean Wang switch (txmode) { 3471c099ab4SSean Wang case MT_PHY_TYPE_CCK: 3481c099ab4SSean Wang case MT_PHY_TYPE_OFDM: 3491c099ab4SSean Wang if (mphy->chandef.chan->band == NL80211_BAND_5GHZ) 3501c099ab4SSean Wang sband = &mphy->sband_5g.sband; 3511c099ab4SSean Wang else 3521c099ab4SSean Wang sband = &mphy->sband_2g.sband; 3531c099ab4SSean Wang 3541c099ab4SSean Wang rate->legacy = sband->bitrates[rate->mcs].bitrate; 3551c099ab4SSean Wang break; 3561c099ab4SSean Wang case MT_PHY_TYPE_HT: 3571c099ab4SSean Wang case MT_PHY_TYPE_HT_GF: 3581c099ab4SSean Wang flags |= RATE_INFO_FLAGS_MCS; 3591c099ab4SSean Wang 3601c099ab4SSean Wang if (gi) 3611c099ab4SSean Wang flags |= RATE_INFO_FLAGS_SHORT_GI; 3621c099ab4SSean Wang break; 3631c099ab4SSean Wang case MT_PHY_TYPE_VHT: 3641c099ab4SSean Wang flags |= RATE_INFO_FLAGS_VHT_MCS; 3651c099ab4SSean Wang 3661c099ab4SSean Wang if (gi) 3671c099ab4SSean Wang flags |= RATE_INFO_FLAGS_SHORT_GI; 3681c099ab4SSean Wang break; 3691c099ab4SSean Wang case MT_PHY_TYPE_HE_SU: 3701c099ab4SSean Wang case MT_PHY_TYPE_HE_EXT_SU: 3711c099ab4SSean Wang case MT_PHY_TYPE_HE_TB: 3721c099ab4SSean Wang case MT_PHY_TYPE_HE_MU: 3731c099ab4SSean Wang rate->he_gi = gi; 3741c099ab4SSean Wang rate->he_dcm = FIELD_GET(MT_RA_RATE_DCM_EN, r); 3751c099ab4SSean Wang 3761c099ab4SSean Wang flags |= RATE_INFO_FLAGS_HE_MCS; 3771c099ab4SSean Wang break; 3781c099ab4SSean Wang default: 3791c099ab4SSean Wang break; 3801c099ab4SSean Wang } 3811c099ab4SSean Wang rate->flags = flags; 3821c099ab4SSean Wang 3831c099ab4SSean Wang bw = mt7921_mcu_chan_bw(&mphy->chandef) - FIELD_GET(MT_RA_RATE_BW, r); 3841c099ab4SSean Wang 3851c099ab4SSean Wang switch (bw) { 3861c099ab4SSean Wang case IEEE80211_STA_RX_BW_160: 3871c099ab4SSean Wang rate->bw = RATE_INFO_BW_160; 3881c099ab4SSean Wang break; 3891c099ab4SSean Wang case IEEE80211_STA_RX_BW_80: 3901c099ab4SSean Wang rate->bw = RATE_INFO_BW_80; 3911c099ab4SSean Wang break; 3921c099ab4SSean Wang case IEEE80211_STA_RX_BW_40: 3931c099ab4SSean Wang rate->bw = RATE_INFO_BW_40; 3941c099ab4SSean Wang break; 3951c099ab4SSean Wang default: 3961c099ab4SSean Wang rate->bw = RATE_INFO_BW_20; 3971c099ab4SSean Wang break; 3981c099ab4SSean Wang } 3991c099ab4SSean Wang } 4001c099ab4SSean Wang 4011c099ab4SSean Wang static void 4021c099ab4SSean Wang mt7921_mcu_tx_rate_report(struct mt7921_dev *dev, struct sk_buff *skb, 4031c099ab4SSean Wang u16 wlan_idx) 4041c099ab4SSean Wang { 4051c099ab4SSean Wang struct mt7921_mcu_wlan_info_event *wtbl_info = 4061c099ab4SSean Wang (struct mt7921_mcu_wlan_info_event *)(skb->data); 4071c099ab4SSean Wang struct rate_info rate = {}; 4081c099ab4SSean Wang u8 curr_idx = wtbl_info->rate_info.rate_idx; 4091c099ab4SSean Wang u16 curr = le16_to_cpu(wtbl_info->rate_info.rate[curr_idx]); 4101c099ab4SSean Wang struct mt7921_mcu_peer_cap peer = wtbl_info->peer_cap; 4111c099ab4SSean Wang struct mt76_phy *mphy = &dev->mphy; 4121c099ab4SSean Wang struct mt7921_sta_stats *stats; 4131c099ab4SSean Wang struct mt7921_sta *msta; 4141c099ab4SSean Wang struct mt76_wcid *wcid; 4151c099ab4SSean Wang 4161c099ab4SSean Wang if (wlan_idx >= MT76_N_WCIDS) 4171c099ab4SSean Wang return; 418481fc927SLorenzo Bianconi 419481fc927SLorenzo Bianconi rcu_read_lock(); 420481fc927SLorenzo Bianconi 4211c099ab4SSean Wang wcid = rcu_dereference(dev->mt76.wcid[wlan_idx]); 422fb5fabb1SArnd Bergmann if (!wcid) 423481fc927SLorenzo Bianconi goto out; 4241c099ab4SSean Wang 4251c099ab4SSean Wang msta = container_of(wcid, struct mt7921_sta, wcid); 4261c099ab4SSean Wang stats = &msta->stats; 4271c099ab4SSean Wang 4281c099ab4SSean Wang /* current rate */ 4291c099ab4SSean Wang mt7921_mcu_tx_rate_parse(mphy, &peer, &rate, curr); 4301c099ab4SSean Wang stats->tx_rate = rate; 431481fc927SLorenzo Bianconi out: 432481fc927SLorenzo Bianconi rcu_read_unlock(); 4331c099ab4SSean Wang } 4341c099ab4SSean Wang 4351c099ab4SSean Wang static void 4361c099ab4SSean Wang mt7921_mcu_scan_event(struct mt7921_dev *dev, struct sk_buff *skb) 4371c099ab4SSean Wang { 4381c099ab4SSean Wang struct mt76_phy *mphy = &dev->mt76.phy; 4391c099ab4SSean Wang struct mt7921_phy *phy = (struct mt7921_phy *)mphy->priv; 4401c099ab4SSean Wang 4411c099ab4SSean Wang spin_lock_bh(&dev->mt76.lock); 4421c099ab4SSean Wang __skb_queue_tail(&phy->scan_event_list, skb); 4431c099ab4SSean Wang spin_unlock_bh(&dev->mt76.lock); 4441c099ab4SSean Wang 4451c099ab4SSean Wang ieee80211_queue_delayed_work(mphy->hw, &phy->scan_work, 4461c099ab4SSean Wang MT7921_HW_SCAN_TIMEOUT); 4471c099ab4SSean Wang } 4481c099ab4SSean Wang 4491c099ab4SSean Wang static void 450b88f5c64SSean Wang mt7921_mcu_beacon_loss_event(struct mt7921_dev *dev, struct sk_buff *skb) 451b88f5c64SSean Wang { 45267aa2743SLorenzo Bianconi struct mt76_connac_beacon_loss_event *event; 453b88f5c64SSean Wang struct mt76_phy *mphy; 454b88f5c64SSean Wang u8 band_idx = 0; /* DBDC support */ 455b88f5c64SSean Wang 456b88f5c64SSean Wang skb_pull(skb, sizeof(struct mt7921_mcu_rxd)); 45767aa2743SLorenzo Bianconi event = (struct mt76_connac_beacon_loss_event *)skb->data; 458b88f5c64SSean Wang if (band_idx && dev->mt76.phy2) 459b88f5c64SSean Wang mphy = dev->mt76.phy2; 460b88f5c64SSean Wang else 461b88f5c64SSean Wang mphy = &dev->mt76.phy; 462b88f5c64SSean Wang 463b88f5c64SSean Wang ieee80211_iterate_active_interfaces_atomic(mphy->hw, 464b88f5c64SSean Wang IEEE80211_IFACE_ITER_RESUME_ALL, 46567aa2743SLorenzo Bianconi mt76_connac_mcu_beacon_loss_iter, event); 466b88f5c64SSean Wang } 467b88f5c64SSean Wang 468b88f5c64SSean Wang static void 4691c099ab4SSean Wang mt7921_mcu_bss_event(struct mt7921_dev *dev, struct sk_buff *skb) 4701c099ab4SSean Wang { 4711c099ab4SSean Wang struct mt76_phy *mphy = &dev->mt76.phy; 47267aa2743SLorenzo Bianconi struct mt76_connac_mcu_bss_event *event; 4731c099ab4SSean Wang 47467aa2743SLorenzo Bianconi skb_pull(skb, sizeof(struct mt7921_mcu_rxd)); 47567aa2743SLorenzo Bianconi event = (struct mt76_connac_mcu_bss_event *)skb->data; 4761c099ab4SSean Wang if (event->is_absent) 4771c099ab4SSean Wang ieee80211_stop_queues(mphy->hw); 4781c099ab4SSean Wang else 4791c099ab4SSean Wang ieee80211_wake_queues(mphy->hw); 4801c099ab4SSean Wang } 4811c099ab4SSean Wang 4821c099ab4SSean Wang static void 4831c099ab4SSean Wang mt7921_mcu_debug_msg_event(struct mt7921_dev *dev, struct sk_buff *skb) 4841c099ab4SSean Wang { 485c7cc5ec5SLorenzo Bianconi struct mt7921_debug_msg { 4861c099ab4SSean Wang __le16 id; 4871c099ab4SSean Wang u8 type; 4881c099ab4SSean Wang u8 flag; 4891c099ab4SSean Wang __le32 value; 4901c099ab4SSean Wang __le16 len; 4911c099ab4SSean Wang u8 content[512]; 492c7cc5ec5SLorenzo Bianconi } __packed * msg; 493c7cc5ec5SLorenzo Bianconi 494c7cc5ec5SLorenzo Bianconi skb_pull(skb, sizeof(struct mt7921_mcu_rxd)); 495c7cc5ec5SLorenzo Bianconi msg = (struct mt7921_debug_msg *)skb->data; 496c7cc5ec5SLorenzo Bianconi 497c7cc5ec5SLorenzo Bianconi if (msg->type == 3) { /* fw log */ 498c7cc5ec5SLorenzo Bianconi u16 len = min_t(u16, le16_to_cpu(msg->len), 512); 4991c099ab4SSean Wang int i; 5001c099ab4SSean Wang 501c7cc5ec5SLorenzo Bianconi for (i = 0 ; i < len; i++) { 502c7cc5ec5SLorenzo Bianconi if (!msg->content[i]) 503c7cc5ec5SLorenzo Bianconi msg->content[i] = ' '; 504c7cc5ec5SLorenzo Bianconi } 5052bf301bcSDan Carpenter wiphy_info(mt76_hw(dev)->wiphy, "%.*s", len, msg->content); 5061c099ab4SSean Wang } 5071c099ab4SSean Wang } 5081c099ab4SSean Wang 5091c099ab4SSean Wang static void 5102afd17b4SLorenzo Bianconi mt7921_mcu_low_power_event(struct mt7921_dev *dev, struct sk_buff *skb) 5112afd17b4SLorenzo Bianconi { 5122afd17b4SLorenzo Bianconi struct mt7921_mcu_lp_event { 5132afd17b4SLorenzo Bianconi u8 state; 5142afd17b4SLorenzo Bianconi u8 reserved[3]; 5152afd17b4SLorenzo Bianconi } __packed * event; 5162afd17b4SLorenzo Bianconi 5172afd17b4SLorenzo Bianconi skb_pull(skb, sizeof(struct mt7921_mcu_rxd)); 5182afd17b4SLorenzo Bianconi event = (struct mt7921_mcu_lp_event *)skb->data; 5192afd17b4SLorenzo Bianconi 5202afd17b4SLorenzo Bianconi trace_lp_event(dev, event->state); 5212afd17b4SLorenzo Bianconi } 5222afd17b4SLorenzo Bianconi 5232afd17b4SLorenzo Bianconi static void 5241c099ab4SSean Wang mt7921_mcu_rx_unsolicited_event(struct mt7921_dev *dev, struct sk_buff *skb) 5251c099ab4SSean Wang { 5261c099ab4SSean Wang struct mt7921_mcu_rxd *rxd = (struct mt7921_mcu_rxd *)skb->data; 5271c099ab4SSean Wang 5281c099ab4SSean Wang switch (rxd->eid) { 5291c099ab4SSean Wang case MCU_EVENT_BSS_BEACON_LOSS: 530b88f5c64SSean Wang mt7921_mcu_beacon_loss_event(dev, skb); 5311c099ab4SSean Wang break; 5321c099ab4SSean Wang case MCU_EVENT_SCHED_SCAN_DONE: 5331c099ab4SSean Wang case MCU_EVENT_SCAN_DONE: 5341c099ab4SSean Wang mt7921_mcu_scan_event(dev, skb); 5351c099ab4SSean Wang return; 5361c099ab4SSean Wang case MCU_EVENT_BSS_ABSENCE: 5371c099ab4SSean Wang mt7921_mcu_bss_event(dev, skb); 5381c099ab4SSean Wang break; 5391c099ab4SSean Wang case MCU_EVENT_DBG_MSG: 5401c099ab4SSean Wang mt7921_mcu_debug_msg_event(dev, skb); 5411c099ab4SSean Wang break; 5420da3c795SSean Wang case MCU_EVENT_COREDUMP: 5430da3c795SSean Wang mt76_connac_mcu_coredump_event(&dev->mt76, skb, 5440da3c795SSean Wang &dev->coredump); 5450da3c795SSean Wang return; 5462afd17b4SLorenzo Bianconi case MCU_EVENT_LP_INFO: 5472afd17b4SLorenzo Bianconi mt7921_mcu_low_power_event(dev, skb); 5482afd17b4SLorenzo Bianconi break; 5491c099ab4SSean Wang default: 5501c099ab4SSean Wang break; 5511c099ab4SSean Wang } 5521c099ab4SSean Wang dev_kfree_skb(skb); 5531c099ab4SSean Wang } 5541c099ab4SSean Wang 5551c099ab4SSean Wang void mt7921_mcu_rx_event(struct mt7921_dev *dev, struct sk_buff *skb) 5561c099ab4SSean Wang { 5571c099ab4SSean Wang struct mt7921_mcu_rxd *rxd = (struct mt7921_mcu_rxd *)skb->data; 5581c099ab4SSean Wang 5591c099ab4SSean Wang if (rxd->eid == 0x6) { 5601c099ab4SSean Wang mt76_mcu_rx_event(&dev->mt76, skb); 5611c099ab4SSean Wang return; 5621c099ab4SSean Wang } 5631c099ab4SSean Wang 5641c099ab4SSean Wang if (rxd->ext_eid == MCU_EXT_EVENT_RATE_REPORT || 5651c099ab4SSean Wang rxd->eid == MCU_EVENT_BSS_BEACON_LOSS || 5661c099ab4SSean Wang rxd->eid == MCU_EVENT_SCHED_SCAN_DONE || 5671c099ab4SSean Wang rxd->eid == MCU_EVENT_BSS_ABSENCE || 5681c099ab4SSean Wang rxd->eid == MCU_EVENT_SCAN_DONE || 5691c099ab4SSean Wang rxd->eid == MCU_EVENT_DBG_MSG || 5700da3c795SSean Wang rxd->eid == MCU_EVENT_COREDUMP || 5712afd17b4SLorenzo Bianconi rxd->eid == MCU_EVENT_LP_INFO || 5721c099ab4SSean Wang !rxd->seq) 5731c099ab4SSean Wang mt7921_mcu_rx_unsolicited_event(dev, skb); 5741c099ab4SSean Wang else 5751c099ab4SSean Wang mt76_mcu_rx_event(&dev->mt76, skb); 5761c099ab4SSean Wang } 5771c099ab4SSean Wang 5781c099ab4SSean Wang /** starec & wtbl **/ 5791c099ab4SSean Wang static int 5801c099ab4SSean Wang mt7921_mcu_sta_key_tlv(struct mt7921_sta *msta, struct sk_buff *skb, 5811c099ab4SSean Wang struct ieee80211_key_conf *key, enum set_key_cmd cmd) 5821c099ab4SSean Wang { 5831c099ab4SSean Wang struct mt7921_sta_key_conf *bip = &msta->bip; 5841c099ab4SSean Wang struct sta_rec_sec *sec; 5851c099ab4SSean Wang struct tlv *tlv; 5861c099ab4SSean Wang u32 len = sizeof(*sec); 5871c099ab4SSean Wang 58867aa2743SLorenzo Bianconi tlv = mt76_connac_mcu_add_tlv(skb, STA_REC_KEY_V2, sizeof(*sec)); 5891c099ab4SSean Wang 5901c099ab4SSean Wang sec = (struct sta_rec_sec *)tlv; 5911c099ab4SSean Wang sec->add = cmd; 5921c099ab4SSean Wang 5931c099ab4SSean Wang if (cmd == SET_KEY) { 5941c099ab4SSean Wang struct sec_key *sec_key; 5951c099ab4SSean Wang u8 cipher; 5961c099ab4SSean Wang 5971c099ab4SSean Wang cipher = mt7921_mcu_get_cipher(key->cipher); 5981c099ab4SSean Wang if (cipher == MT_CIPHER_NONE) 5991c099ab4SSean Wang return -EOPNOTSUPP; 6001c099ab4SSean Wang 6011c099ab4SSean Wang sec_key = &sec->key[0]; 6021c099ab4SSean Wang sec_key->cipher_len = sizeof(*sec_key); 6031c099ab4SSean Wang 6041c099ab4SSean Wang if (cipher == MT_CIPHER_BIP_CMAC_128) { 6051c099ab4SSean Wang sec_key->cipher_id = MT_CIPHER_AES_CCMP; 6061c099ab4SSean Wang sec_key->key_id = bip->keyidx; 6071c099ab4SSean Wang sec_key->key_len = 16; 6081c099ab4SSean Wang memcpy(sec_key->key, bip->key, 16); 6091c099ab4SSean Wang 6101c099ab4SSean Wang sec_key = &sec->key[1]; 6111c099ab4SSean Wang sec_key->cipher_id = MT_CIPHER_BIP_CMAC_128; 6121c099ab4SSean Wang sec_key->cipher_len = sizeof(*sec_key); 6131c099ab4SSean Wang sec_key->key_len = 16; 6141c099ab4SSean Wang memcpy(sec_key->key, key->key, 16); 6151c099ab4SSean Wang 6161c099ab4SSean Wang sec->n_cipher = 2; 6171c099ab4SSean Wang } else { 6181c099ab4SSean Wang sec_key->cipher_id = cipher; 6191c099ab4SSean Wang sec_key->key_id = key->keyidx; 6201c099ab4SSean Wang sec_key->key_len = key->keylen; 6211c099ab4SSean Wang memcpy(sec_key->key, key->key, key->keylen); 6221c099ab4SSean Wang 6231c099ab4SSean Wang if (cipher == MT_CIPHER_TKIP) { 6241c099ab4SSean Wang /* Rx/Tx MIC keys are swapped */ 6251c099ab4SSean Wang memcpy(sec_key->key + 16, key->key + 24, 8); 6261c099ab4SSean Wang memcpy(sec_key->key + 24, key->key + 16, 8); 6271c099ab4SSean Wang } 6281c099ab4SSean Wang 6291c099ab4SSean Wang /* store key_conf for BIP batch update */ 6301c099ab4SSean Wang if (cipher == MT_CIPHER_AES_CCMP) { 6311c099ab4SSean Wang memcpy(bip->key, key->key, key->keylen); 6321c099ab4SSean Wang bip->keyidx = key->keyidx; 6331c099ab4SSean Wang } 6341c099ab4SSean Wang 6351c099ab4SSean Wang len -= sizeof(*sec_key); 6361c099ab4SSean Wang sec->n_cipher = 1; 6371c099ab4SSean Wang } 6381c099ab4SSean Wang } else { 6391c099ab4SSean Wang len -= sizeof(sec->key); 6401c099ab4SSean Wang sec->n_cipher = 0; 6411c099ab4SSean Wang } 6421c099ab4SSean Wang sec->len = cpu_to_le16(len); 6431c099ab4SSean Wang 6441c099ab4SSean Wang return 0; 6451c099ab4SSean Wang } 6461c099ab4SSean Wang 6471c099ab4SSean Wang int mt7921_mcu_add_key(struct mt7921_dev *dev, struct ieee80211_vif *vif, 6481c099ab4SSean Wang struct mt7921_sta *msta, struct ieee80211_key_conf *key, 6491c099ab4SSean Wang enum set_key_cmd cmd) 6501c099ab4SSean Wang { 6511c099ab4SSean Wang struct mt7921_vif *mvif = (struct mt7921_vif *)vif->drv_priv; 6521c099ab4SSean Wang struct sk_buff *skb; 6531c099ab4SSean Wang int ret; 6541c099ab4SSean Wang 65567aa2743SLorenzo Bianconi skb = mt76_connac_mcu_alloc_sta_req(&dev->mt76, &mvif->mt76, 65667aa2743SLorenzo Bianconi &msta->wcid); 6571c099ab4SSean Wang if (IS_ERR(skb)) 6581c099ab4SSean Wang return PTR_ERR(skb); 6591c099ab4SSean Wang 6601c099ab4SSean Wang ret = mt7921_mcu_sta_key_tlv(msta, skb, key, cmd); 6611c099ab4SSean Wang if (ret) 6621c099ab4SSean Wang return ret; 6631c099ab4SSean Wang 6641c099ab4SSean Wang return mt76_mcu_skb_send_msg(&dev->mt76, skb, 6651c099ab4SSean Wang MCU_UNI_CMD_STA_REC_UPDATE, true); 6661c099ab4SSean Wang } 6671c099ab4SSean Wang 6681c099ab4SSean Wang int mt7921_mcu_uni_tx_ba(struct mt7921_dev *dev, 6691c099ab4SSean Wang struct ieee80211_ampdu_params *params, 6701c099ab4SSean Wang bool enable) 6711c099ab4SSean Wang { 67267aa2743SLorenzo Bianconi struct mt7921_sta *msta = (struct mt7921_sta *)params->sta->drv_priv; 67367aa2743SLorenzo Bianconi 67467aa2743SLorenzo Bianconi if (enable && !params->amsdu) 67567aa2743SLorenzo Bianconi msta->wcid.amsdu = false; 67667aa2743SLorenzo Bianconi 67767aa2743SLorenzo Bianconi return mt76_connac_mcu_sta_ba(&dev->mt76, &msta->vif->mt76, params, 67867aa2743SLorenzo Bianconi enable, true); 6791c099ab4SSean Wang } 6801c099ab4SSean Wang 6811c099ab4SSean Wang int mt7921_mcu_uni_rx_ba(struct mt7921_dev *dev, 6821c099ab4SSean Wang struct ieee80211_ampdu_params *params, 6831c099ab4SSean Wang bool enable) 6841c099ab4SSean Wang { 68567aa2743SLorenzo Bianconi struct mt7921_sta *msta = (struct mt7921_sta *)params->sta->drv_priv; 6861c099ab4SSean Wang 68767aa2743SLorenzo Bianconi return mt76_connac_mcu_sta_ba(&dev->mt76, &msta->vif->mt76, params, 68867aa2743SLorenzo Bianconi enable, false); 6891c099ab4SSean Wang } 6901c099ab4SSean Wang 6911c099ab4SSean Wang static int mt7921_mcu_restart(struct mt76_dev *dev) 6921c099ab4SSean Wang { 6931c099ab4SSean Wang struct { 6941c099ab4SSean Wang u8 power_mode; 6951c099ab4SSean Wang u8 rsv[3]; 6961c099ab4SSean Wang } req = { 6971c099ab4SSean Wang .power_mode = 1, 6981c099ab4SSean Wang }; 6991c099ab4SSean Wang 7001c099ab4SSean Wang return mt76_mcu_send_msg(dev, MCU_CMD_NIC_POWER_CTRL, &req, 7011c099ab4SSean Wang sizeof(req), false); 7021c099ab4SSean Wang } 7031c099ab4SSean Wang 7041c099ab4SSean Wang static int mt7921_driver_own(struct mt7921_dev *dev) 7051c099ab4SSean Wang { 7061c099ab4SSean Wang u32 reg = mt7921_reg_map_l1(dev, MT_TOP_LPCR_HOST_BAND0); 7071c099ab4SSean Wang 7081c099ab4SSean Wang mt76_wr(dev, reg, MT_TOP_LPCR_HOST_DRV_OWN); 7091c099ab4SSean Wang if (!mt76_poll_msec(dev, reg, MT_TOP_LPCR_HOST_FW_OWN, 7101c099ab4SSean Wang 0, 500)) { 7111c099ab4SSean Wang dev_err(dev->mt76.dev, "Timeout for driver own\n"); 7121c099ab4SSean Wang return -EIO; 7131c099ab4SSean Wang } 7141c099ab4SSean Wang 7151c099ab4SSean Wang return 0; 7161c099ab4SSean Wang } 7171c099ab4SSean Wang 7181c099ab4SSean Wang static int mt7921_load_patch(struct mt7921_dev *dev) 7191c099ab4SSean Wang { 7201c099ab4SSean Wang const struct mt7921_patch_hdr *hdr; 7211c099ab4SSean Wang const struct firmware *fw = NULL; 7221c099ab4SSean Wang int i, ret, sem; 7231c099ab4SSean Wang 72467aa2743SLorenzo Bianconi sem = mt76_connac_mcu_patch_sem_ctrl(&dev->mt76, true); 7251c099ab4SSean Wang switch (sem) { 7261c099ab4SSean Wang case PATCH_IS_DL: 7271c099ab4SSean Wang return 0; 7281c099ab4SSean Wang case PATCH_NOT_DL_SEM_SUCCESS: 7291c099ab4SSean Wang break; 7301c099ab4SSean Wang default: 7311c099ab4SSean Wang dev_err(dev->mt76.dev, "Failed to get patch semaphore\n"); 7321c099ab4SSean Wang return -EAGAIN; 7331c099ab4SSean Wang } 7341c099ab4SSean Wang 7351c099ab4SSean Wang ret = request_firmware(&fw, MT7921_ROM_PATCH, dev->mt76.dev); 7361c099ab4SSean Wang if (ret) 7371c099ab4SSean Wang goto out; 7381c099ab4SSean Wang 7391c099ab4SSean Wang if (!fw || !fw->data || fw->size < sizeof(*hdr)) { 7401c099ab4SSean Wang dev_err(dev->mt76.dev, "Invalid firmware\n"); 7411c099ab4SSean Wang ret = -EINVAL; 7421c099ab4SSean Wang goto out; 7431c099ab4SSean Wang } 7441c099ab4SSean Wang 7451c099ab4SSean Wang hdr = (const struct mt7921_patch_hdr *)(fw->data); 7461c099ab4SSean Wang 7471c099ab4SSean Wang dev_info(dev->mt76.dev, "HW/SW Version: 0x%x, Build Time: %.16s\n", 7481c099ab4SSean Wang be32_to_cpu(hdr->hw_sw_ver), hdr->build_date); 7491c099ab4SSean Wang 7501c099ab4SSean Wang for (i = 0; i < be32_to_cpu(hdr->desc.n_region); i++) { 7511c099ab4SSean Wang struct mt7921_patch_sec *sec; 7521c099ab4SSean Wang const u8 *dl; 7531c099ab4SSean Wang u32 len, addr; 7541c099ab4SSean Wang 7551c099ab4SSean Wang sec = (struct mt7921_patch_sec *)(fw->data + sizeof(*hdr) + 7561c099ab4SSean Wang i * sizeof(*sec)); 7571c099ab4SSean Wang if ((be32_to_cpu(sec->type) & PATCH_SEC_TYPE_MASK) != 7581c099ab4SSean Wang PATCH_SEC_TYPE_INFO) { 7591c099ab4SSean Wang ret = -EINVAL; 7601c099ab4SSean Wang goto out; 7611c099ab4SSean Wang } 7621c099ab4SSean Wang 7631c099ab4SSean Wang addr = be32_to_cpu(sec->info.addr); 7641c099ab4SSean Wang len = be32_to_cpu(sec->info.len); 7651c099ab4SSean Wang dl = fw->data + be32_to_cpu(sec->offs); 7661c099ab4SSean Wang 76767aa2743SLorenzo Bianconi ret = mt76_connac_mcu_init_download(&dev->mt76, addr, len, 7681c099ab4SSean Wang DL_MODE_NEED_RSP); 7691c099ab4SSean Wang if (ret) { 7701c099ab4SSean Wang dev_err(dev->mt76.dev, "Download request failed\n"); 7711c099ab4SSean Wang goto out; 7721c099ab4SSean Wang } 7731c099ab4SSean Wang 7741c099ab4SSean Wang ret = mt76_mcu_send_firmware(&dev->mt76, MCU_CMD_FW_SCATTER, 7751c099ab4SSean Wang dl, len); 7761c099ab4SSean Wang if (ret) { 7771c099ab4SSean Wang dev_err(dev->mt76.dev, "Failed to send patch\n"); 7781c099ab4SSean Wang goto out; 7791c099ab4SSean Wang } 7801c099ab4SSean Wang } 7811c099ab4SSean Wang 78267aa2743SLorenzo Bianconi ret = mt76_connac_mcu_start_patch(&dev->mt76); 7831c099ab4SSean Wang if (ret) 7841c099ab4SSean Wang dev_err(dev->mt76.dev, "Failed to start patch\n"); 7851c099ab4SSean Wang 7861c099ab4SSean Wang out: 78767aa2743SLorenzo Bianconi sem = mt76_connac_mcu_patch_sem_ctrl(&dev->mt76, false); 7881c099ab4SSean Wang switch (sem) { 7891c099ab4SSean Wang case PATCH_REL_SEM_SUCCESS: 7901c099ab4SSean Wang break; 7911c099ab4SSean Wang default: 7921c099ab4SSean Wang ret = -EAGAIN; 7931c099ab4SSean Wang dev_err(dev->mt76.dev, "Failed to release patch semaphore\n"); 7941c099ab4SSean Wang goto out; 7951c099ab4SSean Wang } 7961c099ab4SSean Wang release_firmware(fw); 7971c099ab4SSean Wang 7981c099ab4SSean Wang return ret; 7991c099ab4SSean Wang } 8001c099ab4SSean Wang 8011c099ab4SSean Wang static u32 mt7921_mcu_gen_dl_mode(u8 feature_set, bool is_wa) 8021c099ab4SSean Wang { 8031c099ab4SSean Wang u32 ret = 0; 8041c099ab4SSean Wang 8051c099ab4SSean Wang ret |= (feature_set & FW_FEATURE_SET_ENCRYPT) ? 8061c099ab4SSean Wang (DL_MODE_ENCRYPT | DL_MODE_RESET_SEC_IV) : 0; 8071c099ab4SSean Wang ret |= (feature_set & FW_FEATURE_ENCRY_MODE) ? 8081c099ab4SSean Wang DL_CONFIG_ENCRY_MODE_SEL : 0; 8091c099ab4SSean Wang ret |= FIELD_PREP(DL_MODE_KEY_IDX, 8101c099ab4SSean Wang FIELD_GET(FW_FEATURE_SET_KEY_IDX, feature_set)); 8111c099ab4SSean Wang ret |= DL_MODE_NEED_RSP; 8121c099ab4SSean Wang ret |= is_wa ? DL_MODE_WORKING_PDA_CR4 : 0; 8131c099ab4SSean Wang 8141c099ab4SSean Wang return ret; 8151c099ab4SSean Wang } 8161c099ab4SSean Wang 8171c099ab4SSean Wang static int 8181c099ab4SSean Wang mt7921_mcu_send_ram_firmware(struct mt7921_dev *dev, 8191c099ab4SSean Wang const struct mt7921_fw_trailer *hdr, 8201c099ab4SSean Wang const u8 *data, bool is_wa) 8211c099ab4SSean Wang { 8221c099ab4SSean Wang int i, offset = 0; 8231c099ab4SSean Wang u32 override = 0, option = 0; 8241c099ab4SSean Wang 8251c099ab4SSean Wang for (i = 0; i < hdr->n_region; i++) { 8261c099ab4SSean Wang const struct mt7921_fw_region *region; 8271c099ab4SSean Wang int err; 8281c099ab4SSean Wang u32 len, addr, mode; 8291c099ab4SSean Wang 8301c099ab4SSean Wang region = (const struct mt7921_fw_region *)((const u8 *)hdr - 8311c099ab4SSean Wang (hdr->n_region - i) * sizeof(*region)); 8321c099ab4SSean Wang mode = mt7921_mcu_gen_dl_mode(region->feature_set, is_wa); 8331c099ab4SSean Wang len = le32_to_cpu(region->len); 8341c099ab4SSean Wang addr = le32_to_cpu(region->addr); 8351c099ab4SSean Wang 8361c099ab4SSean Wang if (region->feature_set & FW_FEATURE_OVERRIDE_ADDR) 8371c099ab4SSean Wang override = addr; 8381c099ab4SSean Wang 83967aa2743SLorenzo Bianconi err = mt76_connac_mcu_init_download(&dev->mt76, addr, len, 84067aa2743SLorenzo Bianconi mode); 8411c099ab4SSean Wang if (err) { 8421c099ab4SSean Wang dev_err(dev->mt76.dev, "Download request failed\n"); 8431c099ab4SSean Wang return err; 8441c099ab4SSean Wang } 8451c099ab4SSean Wang 8461c099ab4SSean Wang err = mt76_mcu_send_firmware(&dev->mt76, MCU_CMD_FW_SCATTER, 8471c099ab4SSean Wang data + offset, len); 8481c099ab4SSean Wang if (err) { 8491c099ab4SSean Wang dev_err(dev->mt76.dev, "Failed to send firmware.\n"); 8501c099ab4SSean Wang return err; 8511c099ab4SSean Wang } 8521c099ab4SSean Wang 8531c099ab4SSean Wang offset += len; 8541c099ab4SSean Wang } 8551c099ab4SSean Wang 8561c099ab4SSean Wang if (override) 8571c099ab4SSean Wang option |= FW_START_OVERRIDE; 8581c099ab4SSean Wang 8591c099ab4SSean Wang if (is_wa) 8601c099ab4SSean Wang option |= FW_START_WORKING_PDA_CR4; 8611c099ab4SSean Wang 86267aa2743SLorenzo Bianconi return mt76_connac_mcu_start_firmware(&dev->mt76, override, option); 8631c099ab4SSean Wang } 8641c099ab4SSean Wang 8651c099ab4SSean Wang static int mt7921_load_ram(struct mt7921_dev *dev) 8661c099ab4SSean Wang { 8671c099ab4SSean Wang const struct mt7921_fw_trailer *hdr; 8681c099ab4SSean Wang const struct firmware *fw; 8691c099ab4SSean Wang int ret; 8701c099ab4SSean Wang 8711c099ab4SSean Wang ret = request_firmware(&fw, MT7921_FIRMWARE_WM, dev->mt76.dev); 8721c099ab4SSean Wang if (ret) 8731c099ab4SSean Wang return ret; 8741c099ab4SSean Wang 8751c099ab4SSean Wang if (!fw || !fw->data || fw->size < sizeof(*hdr)) { 8761c099ab4SSean Wang dev_err(dev->mt76.dev, "Invalid firmware\n"); 8771c099ab4SSean Wang ret = -EINVAL; 8781c099ab4SSean Wang goto out; 8791c099ab4SSean Wang } 8801c099ab4SSean Wang 8811c099ab4SSean Wang hdr = (const struct mt7921_fw_trailer *)(fw->data + fw->size - 8821c099ab4SSean Wang sizeof(*hdr)); 8831c099ab4SSean Wang 8841c099ab4SSean Wang dev_info(dev->mt76.dev, "WM Firmware Version: %.10s, Build Time: %.15s\n", 8851c099ab4SSean Wang hdr->fw_ver, hdr->build_date); 8861c099ab4SSean Wang 8871c099ab4SSean Wang ret = mt7921_mcu_send_ram_firmware(dev, hdr, fw->data, false); 8881c099ab4SSean Wang if (ret) { 8891c099ab4SSean Wang dev_err(dev->mt76.dev, "Failed to start WM firmware\n"); 8901c099ab4SSean Wang goto out; 8911c099ab4SSean Wang } 8921c099ab4SSean Wang 8931c099ab4SSean Wang snprintf(dev->mt76.hw->wiphy->fw_version, 8941c099ab4SSean Wang sizeof(dev->mt76.hw->wiphy->fw_version), 8951c099ab4SSean Wang "%.10s-%.15s", hdr->fw_ver, hdr->build_date); 8961c099ab4SSean Wang 8971c099ab4SSean Wang out: 8981c099ab4SSean Wang release_firmware(fw); 8991c099ab4SSean Wang 9001c099ab4SSean Wang return ret; 9011c099ab4SSean Wang } 9021c099ab4SSean Wang 9031c099ab4SSean Wang static int mt7921_load_firmware(struct mt7921_dev *dev) 9041c099ab4SSean Wang { 9051c099ab4SSean Wang int ret; 9061c099ab4SSean Wang 9071c099ab4SSean Wang ret = mt76_get_field(dev, MT_CONN_ON_MISC, MT_TOP_MISC2_FW_N9_RDY); 9081c099ab4SSean Wang if (ret) { 9091c099ab4SSean Wang dev_dbg(dev->mt76.dev, "Firmware is already download\n"); 9101c099ab4SSean Wang return -EIO; 9111c099ab4SSean Wang } 9121c099ab4SSean Wang 9131c099ab4SSean Wang ret = mt7921_load_patch(dev); 9141c099ab4SSean Wang if (ret) 9151c099ab4SSean Wang return ret; 9161c099ab4SSean Wang 9171c099ab4SSean Wang ret = mt7921_load_ram(dev); 9181c099ab4SSean Wang if (ret) 9191c099ab4SSean Wang return ret; 9201c099ab4SSean Wang 9211c099ab4SSean Wang if (!mt76_poll_msec(dev, MT_CONN_ON_MISC, MT_TOP_MISC2_FW_N9_RDY, 9221c099ab4SSean Wang MT_TOP_MISC2_FW_N9_RDY, 1500)) { 9231c099ab4SSean Wang dev_err(dev->mt76.dev, "Timeout for initializing firmware\n"); 9241c099ab4SSean Wang 9251c099ab4SSean Wang return -EIO; 9261c099ab4SSean Wang } 9271c099ab4SSean Wang 9281c099ab4SSean Wang mt76_queue_tx_cleanup(dev, dev->mt76.q_mcu[MT_MCUQ_FWDL], false); 9291c099ab4SSean Wang 930ffa1bf97SSean Wang #ifdef CONFIG_PM 931022159b0SLorenzo Bianconi dev->mt76.hw->wiphy->wowlan = &mt76_connac_wowlan_support; 932ffa1bf97SSean Wang #endif /* CONFIG_PM */ 933ffa1bf97SSean Wang 9341d8efc74SSean Wang clear_bit(MT76_STATE_PM, &dev->mphy.state); 9351d8efc74SSean Wang 9361c099ab4SSean Wang dev_err(dev->mt76.dev, "Firmware init done\n"); 9371c099ab4SSean Wang 9381c099ab4SSean Wang return 0; 9391c099ab4SSean Wang } 9401c099ab4SSean Wang 9411c099ab4SSean Wang int mt7921_mcu_fw_log_2_host(struct mt7921_dev *dev, u8 ctrl) 9421c099ab4SSean Wang { 9431c099ab4SSean Wang struct { 9441c099ab4SSean Wang u8 ctrl_val; 9451c099ab4SSean Wang u8 pad[3]; 9461c099ab4SSean Wang } data = { 9471c099ab4SSean Wang .ctrl_val = ctrl 9481c099ab4SSean Wang }; 9491c099ab4SSean Wang 9501c099ab4SSean Wang return mt76_mcu_send_msg(&dev->mt76, MCU_CMD_FWLOG_2_HOST, &data, 9511c099ab4SSean Wang sizeof(data), false); 9521c099ab4SSean Wang } 9531c099ab4SSean Wang 954d32464e6SLorenzo Bianconi int mt7921_run_firmware(struct mt7921_dev *dev) 955d32464e6SLorenzo Bianconi { 956d32464e6SLorenzo Bianconi int err; 957d32464e6SLorenzo Bianconi 958d32464e6SLorenzo Bianconi err = mt7921_driver_own(dev); 959d32464e6SLorenzo Bianconi if (err) 960d32464e6SLorenzo Bianconi return err; 961d32464e6SLorenzo Bianconi 962d32464e6SLorenzo Bianconi err = mt7921_load_firmware(dev); 963d32464e6SLorenzo Bianconi if (err) 964d32464e6SLorenzo Bianconi return err; 965d32464e6SLorenzo Bianconi 966d32464e6SLorenzo Bianconi set_bit(MT76_STATE_MCU_RUNNING, &dev->mphy.state); 967d32464e6SLorenzo Bianconi mt7921_mcu_fw_log_2_host(dev, 1); 968d32464e6SLorenzo Bianconi 969d32464e6SLorenzo Bianconi return 0; 970d32464e6SLorenzo Bianconi } 971d32464e6SLorenzo Bianconi 9721c099ab4SSean Wang int mt7921_mcu_init(struct mt7921_dev *dev) 9731c099ab4SSean Wang { 9741c099ab4SSean Wang static const struct mt76_mcu_ops mt7921_mcu_ops = { 9751c099ab4SSean Wang .headroom = sizeof(struct mt7921_mcu_txd), 9761c099ab4SSean Wang .mcu_skb_send_msg = mt7921_mcu_send_message, 9771c099ab4SSean Wang .mcu_parse_response = mt7921_mcu_parse_response, 9781c099ab4SSean Wang .mcu_restart = mt7921_mcu_restart, 9791c099ab4SSean Wang }; 9801c099ab4SSean Wang 9811c099ab4SSean Wang dev->mt76.mcu_ops = &mt7921_mcu_ops; 9821c099ab4SSean Wang 983d32464e6SLorenzo Bianconi return mt7921_run_firmware(dev); 9841c099ab4SSean Wang } 9851c099ab4SSean Wang 9861c099ab4SSean Wang void mt7921_mcu_exit(struct mt7921_dev *dev) 9871c099ab4SSean Wang { 98849897c52SSean Wang mt7921_wfsys_reset(dev); 9891c099ab4SSean Wang skb_queue_purge(&dev->mt76.mcu.res_q); 9901c099ab4SSean Wang } 9911c099ab4SSean Wang 9921c099ab4SSean Wang int mt7921_mcu_set_tx(struct mt7921_dev *dev, struct ieee80211_vif *vif) 9931c099ab4SSean Wang { 9941c099ab4SSean Wang #define WMM_AIFS_SET BIT(0) 9951c099ab4SSean Wang #define WMM_CW_MIN_SET BIT(1) 9961c099ab4SSean Wang #define WMM_CW_MAX_SET BIT(2) 9971c099ab4SSean Wang #define WMM_TXOP_SET BIT(3) 9981c099ab4SSean Wang #define WMM_PARAM_SET GENMASK(3, 0) 9991c099ab4SSean Wang #define TX_CMD_MODE 1 10001c099ab4SSean Wang struct edca { 10011c099ab4SSean Wang u8 queue; 10021c099ab4SSean Wang u8 set; 10031c099ab4SSean Wang u8 aifs; 10041c099ab4SSean Wang u8 cw_min; 10051c099ab4SSean Wang __le16 cw_max; 10061c099ab4SSean Wang __le16 txop; 10071c099ab4SSean Wang }; 10081c099ab4SSean Wang struct mt7921_mcu_tx { 10091c099ab4SSean Wang u8 total; 10101c099ab4SSean Wang u8 action; 10111c099ab4SSean Wang u8 valid; 10121c099ab4SSean Wang u8 mode; 10131c099ab4SSean Wang 10141c099ab4SSean Wang struct edca edca[IEEE80211_NUM_ACS]; 10151c099ab4SSean Wang } __packed req = { 10161c099ab4SSean Wang .valid = true, 10171c099ab4SSean Wang .mode = TX_CMD_MODE, 10181c099ab4SSean Wang .total = IEEE80211_NUM_ACS, 10191c099ab4SSean Wang }; 10201c099ab4SSean Wang struct mt7921_vif *mvif = (struct mt7921_vif *)vif->drv_priv; 10211c099ab4SSean Wang int ac; 10221c099ab4SSean Wang 10231c099ab4SSean Wang for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) { 10241c099ab4SSean Wang struct ieee80211_tx_queue_params *q = &mvif->queue_params[ac]; 10251c099ab4SSean Wang struct edca *e = &req.edca[ac]; 10261c099ab4SSean Wang 10271c099ab4SSean Wang e->set = WMM_PARAM_SET; 10281c099ab4SSean Wang e->queue = ac + mvif->mt76.wmm_idx * MT7921_MAX_WMM_SETS; 10291c099ab4SSean Wang e->aifs = q->aifs; 10301c099ab4SSean Wang e->txop = cpu_to_le16(q->txop); 10311c099ab4SSean Wang 10321c099ab4SSean Wang if (q->cw_min) 10331c099ab4SSean Wang e->cw_min = fls(q->cw_min); 10341c099ab4SSean Wang else 10351c099ab4SSean Wang e->cw_min = 5; 10361c099ab4SSean Wang 10371c099ab4SSean Wang if (q->cw_max) 10381c099ab4SSean Wang e->cw_max = cpu_to_le16(fls(q->cw_max)); 10391c099ab4SSean Wang else 10401c099ab4SSean Wang e->cw_max = cpu_to_le16(10); 10411c099ab4SSean Wang } 10421c099ab4SSean Wang return mt76_mcu_send_msg(&dev->mt76, MCU_EXT_CMD_EDCA_UPDATE, &req, 10431c099ab4SSean Wang sizeof(req), true); 10441c099ab4SSean Wang } 10451c099ab4SSean Wang 10461c099ab4SSean Wang int mt7921_mcu_set_chan_info(struct mt7921_phy *phy, int cmd) 10471c099ab4SSean Wang { 10481c099ab4SSean Wang struct mt7921_dev *dev = phy->dev; 10491c099ab4SSean Wang struct cfg80211_chan_def *chandef = &phy->mt76->chandef; 10501c099ab4SSean Wang int freq1 = chandef->center_freq1; 10511c099ab4SSean Wang struct { 10521c099ab4SSean Wang u8 control_ch; 10531c099ab4SSean Wang u8 center_ch; 10541c099ab4SSean Wang u8 bw; 10551c099ab4SSean Wang u8 tx_streams_num; 10561c099ab4SSean Wang u8 rx_streams; /* mask or num */ 10571c099ab4SSean Wang u8 switch_reason; 10581c099ab4SSean Wang u8 band_idx; 10591c099ab4SSean Wang u8 center_ch2; /* for 80+80 only */ 10601c099ab4SSean Wang __le16 cac_case; 10611c099ab4SSean Wang u8 channel_band; 10621c099ab4SSean Wang u8 rsv0; 10631c099ab4SSean Wang __le32 outband_freq; 10641c099ab4SSean Wang u8 txpower_drop; 10651c099ab4SSean Wang u8 ap_bw; 10661c099ab4SSean Wang u8 ap_center_ch; 10671c099ab4SSean Wang u8 rsv1[57]; 10681c099ab4SSean Wang } __packed req = { 10691c099ab4SSean Wang .control_ch = chandef->chan->hw_value, 10701c099ab4SSean Wang .center_ch = ieee80211_frequency_to_channel(freq1), 10711c099ab4SSean Wang .bw = mt7921_mcu_chan_bw(chandef), 10721c099ab4SSean Wang .tx_streams_num = hweight8(phy->mt76->antenna_mask), 10731c099ab4SSean Wang .rx_streams = phy->mt76->antenna_mask, 10741c099ab4SSean Wang .band_idx = phy != &dev->phy, 10751c099ab4SSean Wang .channel_band = chandef->chan->band, 10761c099ab4SSean Wang }; 10771c099ab4SSean Wang 10781c099ab4SSean Wang if (dev->mt76.hw->conf.flags & IEEE80211_CONF_OFFCHANNEL) 10791c099ab4SSean Wang req.switch_reason = CH_SWITCH_SCAN_BYPASS_DPD; 10801c099ab4SSean Wang else if ((chandef->chan->flags & IEEE80211_CHAN_RADAR) && 10811c099ab4SSean Wang chandef->chan->dfs_state != NL80211_DFS_AVAILABLE) 10821c099ab4SSean Wang req.switch_reason = CH_SWITCH_DFS; 10831c099ab4SSean Wang else 10841c099ab4SSean Wang req.switch_reason = CH_SWITCH_NORMAL; 10851c099ab4SSean Wang 10861c099ab4SSean Wang if (cmd == MCU_EXT_CMD_CHANNEL_SWITCH) 10871c099ab4SSean Wang req.rx_streams = hweight8(req.rx_streams); 10881c099ab4SSean Wang 10891c099ab4SSean Wang if (chandef->width == NL80211_CHAN_WIDTH_80P80) { 10901c099ab4SSean Wang int freq2 = chandef->center_freq2; 10911c099ab4SSean Wang 10921c099ab4SSean Wang req.center_ch2 = ieee80211_frequency_to_channel(freq2); 10931c099ab4SSean Wang } 10941c099ab4SSean Wang 10951c099ab4SSean Wang return mt76_mcu_send_msg(&dev->mt76, cmd, &req, sizeof(req), true); 10961c099ab4SSean Wang } 10971c099ab4SSean Wang 10981c099ab4SSean Wang int mt7921_mcu_set_eeprom(struct mt7921_dev *dev) 10991c099ab4SSean Wang { 11001c099ab4SSean Wang struct req_hdr { 11011c099ab4SSean Wang u8 buffer_mode; 11021c099ab4SSean Wang u8 format; 11031c099ab4SSean Wang __le16 len; 11041c099ab4SSean Wang } __packed req = { 11051c099ab4SSean Wang .buffer_mode = EE_MODE_EFUSE, 11061c099ab4SSean Wang .format = EE_FORMAT_WHOLE, 11071c099ab4SSean Wang }; 11081c099ab4SSean Wang 11091c099ab4SSean Wang return mt76_mcu_send_msg(&dev->mt76, MCU_EXT_CMD_EFUSE_BUFFER_MODE, 11101c099ab4SSean Wang &req, sizeof(req), true); 11111c099ab4SSean Wang } 11121c099ab4SSean Wang 11131c099ab4SSean Wang int mt7921_mcu_get_eeprom(struct mt7921_dev *dev, u32 offset) 11141c099ab4SSean Wang { 11151c099ab4SSean Wang struct mt7921_mcu_eeprom_info req = { 11161c099ab4SSean Wang .addr = cpu_to_le32(round_down(offset, 16)), 11171c099ab4SSean Wang }; 11181c099ab4SSean Wang struct mt7921_mcu_eeprom_info *res; 11191c099ab4SSean Wang struct sk_buff *skb; 11201c099ab4SSean Wang int ret; 11211c099ab4SSean Wang u8 *buf; 11221c099ab4SSean Wang 11231c099ab4SSean Wang ret = mt76_mcu_send_and_get_msg(&dev->mt76, MCU_EXT_CMD_EFUSE_ACCESS, &req, 11241c099ab4SSean Wang sizeof(req), true, &skb); 11251c099ab4SSean Wang if (ret) 11261c099ab4SSean Wang return ret; 11271c099ab4SSean Wang 11281c099ab4SSean Wang res = (struct mt7921_mcu_eeprom_info *)skb->data; 11291c099ab4SSean Wang buf = dev->mt76.eeprom.data + le32_to_cpu(res->addr); 11301c099ab4SSean Wang memcpy(buf, res->data, 16); 11311c099ab4SSean Wang dev_kfree_skb(skb); 11321c099ab4SSean Wang 11331c099ab4SSean Wang return 0; 11341c099ab4SSean Wang } 11351c099ab4SSean Wang 113680fc1e37SLorenzo Bianconi u32 mt7921_get_wtbl_info(struct mt7921_dev *dev, u32 wlan_idx) 11371c099ab4SSean Wang { 11381c099ab4SSean Wang struct mt7921_mcu_wlan_info wtbl_info = { 11391c099ab4SSean Wang .wlan_idx = cpu_to_le32(wlan_idx), 11401c099ab4SSean Wang }; 11411c099ab4SSean Wang struct sk_buff *skb; 11421c099ab4SSean Wang int ret; 11431c099ab4SSean Wang 11441c099ab4SSean Wang ret = mt76_mcu_send_and_get_msg(&dev->mt76, MCU_CMD_GET_WTBL, 11451c099ab4SSean Wang &wtbl_info, sizeof(wtbl_info), true, 11461c099ab4SSean Wang &skb); 11471c099ab4SSean Wang if (ret) 11481c099ab4SSean Wang return ret; 11491c099ab4SSean Wang 11501c099ab4SSean Wang mt7921_mcu_tx_rate_report(dev, skb, wlan_idx); 11511c099ab4SSean Wang dev_kfree_skb(skb); 11521c099ab4SSean Wang 11531c099ab4SSean Wang return 0; 11541c099ab4SSean Wang } 115556d965daSSean Wang 115656d965daSSean Wang int mt7921_mcu_uni_bss_ps(struct mt7921_dev *dev, struct ieee80211_vif *vif) 115756d965daSSean Wang { 115856d965daSSean Wang struct mt7921_vif *mvif = (struct mt7921_vif *)vif->drv_priv; 115956d965daSSean Wang struct { 116056d965daSSean Wang struct { 116156d965daSSean Wang u8 bss_idx; 116256d965daSSean Wang u8 pad[3]; 116356d965daSSean Wang } __packed hdr; 116456d965daSSean Wang struct ps_tlv { 116556d965daSSean Wang __le16 tag; 116656d965daSSean Wang __le16 len; 116756d965daSSean Wang u8 ps_state; /* 0: device awake 116856d965daSSean Wang * 1: static power save 116956d965daSSean Wang * 2: dynamic power saving 117056d965daSSean Wang * 3: enter TWT power saving 117156d965daSSean Wang * 4: leave TWT power saving 117256d965daSSean Wang */ 117356d965daSSean Wang u8 pad[3]; 117456d965daSSean Wang } __packed ps; 117556d965daSSean Wang } __packed ps_req = { 117656d965daSSean Wang .hdr = { 117756d965daSSean Wang .bss_idx = mvif->mt76.idx, 117856d965daSSean Wang }, 117956d965daSSean Wang .ps = { 118056d965daSSean Wang .tag = cpu_to_le16(UNI_BSS_INFO_PS), 118156d965daSSean Wang .len = cpu_to_le16(sizeof(struct ps_tlv)), 118256d965daSSean Wang .ps_state = vif->bss_conf.ps ? 2 : 0, 118356d965daSSean Wang }, 118456d965daSSean Wang }; 118556d965daSSean Wang 118656d965daSSean Wang if (vif->type != NL80211_IFTYPE_STATION) 118756d965daSSean Wang return -EOPNOTSUPP; 118856d965daSSean Wang 118956d965daSSean Wang return mt76_mcu_send_msg(&dev->mt76, MCU_UNI_CMD_BSS_INFO_UPDATE, 119056d965daSSean Wang &ps_req, sizeof(ps_req), true); 119156d965daSSean Wang } 11924086ee28SSean Wang 11934086ee28SSean Wang int mt7921_mcu_uni_bss_bcnft(struct mt7921_dev *dev, struct ieee80211_vif *vif, 11944086ee28SSean Wang bool enable) 11954086ee28SSean Wang { 11964086ee28SSean Wang struct mt7921_vif *mvif = (struct mt7921_vif *)vif->drv_priv; 11974086ee28SSean Wang struct { 11984086ee28SSean Wang struct { 11994086ee28SSean Wang u8 bss_idx; 12004086ee28SSean Wang u8 pad[3]; 12014086ee28SSean Wang } __packed hdr; 12024086ee28SSean Wang struct bcnft_tlv { 12034086ee28SSean Wang __le16 tag; 12044086ee28SSean Wang __le16 len; 12054086ee28SSean Wang __le16 bcn_interval; 12064086ee28SSean Wang u8 dtim_period; 12074086ee28SSean Wang u8 pad; 12084086ee28SSean Wang } __packed bcnft; 12094086ee28SSean Wang } __packed bcnft_req = { 12104086ee28SSean Wang .hdr = { 12114086ee28SSean Wang .bss_idx = mvif->mt76.idx, 12124086ee28SSean Wang }, 12134086ee28SSean Wang .bcnft = { 12144086ee28SSean Wang .tag = cpu_to_le16(UNI_BSS_INFO_BCNFT), 12154086ee28SSean Wang .len = cpu_to_le16(sizeof(struct bcnft_tlv)), 12164086ee28SSean Wang .bcn_interval = cpu_to_le16(vif->bss_conf.beacon_int), 12174086ee28SSean Wang .dtim_period = vif->bss_conf.dtim_period, 12184086ee28SSean Wang }, 12194086ee28SSean Wang }; 12204086ee28SSean Wang 12214086ee28SSean Wang if (vif->type != NL80211_IFTYPE_STATION) 12224086ee28SSean Wang return 0; 12234086ee28SSean Wang 12244086ee28SSean Wang return mt76_mcu_send_msg(&dev->mt76, MCU_UNI_CMD_BSS_INFO_UPDATE, 12254086ee28SSean Wang &bcnft_req, sizeof(bcnft_req), true); 12264086ee28SSean Wang } 12274086ee28SSean Wang 12284086ee28SSean Wang int mt7921_mcu_set_bss_pm(struct mt7921_dev *dev, struct ieee80211_vif *vif, 12294086ee28SSean Wang bool enable) 12304086ee28SSean Wang { 12314086ee28SSean Wang struct mt7921_vif *mvif = (struct mt7921_vif *)vif->drv_priv; 12324086ee28SSean Wang struct { 12334086ee28SSean Wang u8 bss_idx; 12344086ee28SSean Wang u8 dtim_period; 12354086ee28SSean Wang __le16 aid; 12364086ee28SSean Wang __le16 bcn_interval; 12374086ee28SSean Wang __le16 atim_window; 12384086ee28SSean Wang u8 uapsd; 12394086ee28SSean Wang u8 bmc_delivered_ac; 12404086ee28SSean Wang u8 bmc_triggered_ac; 12414086ee28SSean Wang u8 pad; 12424086ee28SSean Wang } req = { 12434086ee28SSean Wang .bss_idx = mvif->mt76.idx, 12444086ee28SSean Wang .aid = cpu_to_le16(vif->bss_conf.aid), 12454086ee28SSean Wang .dtim_period = vif->bss_conf.dtim_period, 12464086ee28SSean Wang .bcn_interval = cpu_to_le16(vif->bss_conf.beacon_int), 12474086ee28SSean Wang }; 12484086ee28SSean Wang struct { 12494086ee28SSean Wang u8 bss_idx; 12504086ee28SSean Wang u8 pad[3]; 12514086ee28SSean Wang } req_hdr = { 12524086ee28SSean Wang .bss_idx = mvif->mt76.idx, 12534086ee28SSean Wang }; 12544086ee28SSean Wang int err; 12554086ee28SSean Wang 12564086ee28SSean Wang if (vif->type != NL80211_IFTYPE_STATION) 12574086ee28SSean Wang return 0; 12584086ee28SSean Wang 12594086ee28SSean Wang err = mt76_mcu_send_msg(&dev->mt76, MCU_CMD_SET_BSS_ABORT, &req_hdr, 12604086ee28SSean Wang sizeof(req_hdr), false); 12614086ee28SSean Wang if (err < 0 || !enable) 12624086ee28SSean Wang return err; 12634086ee28SSean Wang 12644086ee28SSean Wang return mt76_mcu_send_msg(&dev->mt76, MCU_CMD_SET_BSS_CONNECTED, &req, 12654086ee28SSean Wang sizeof(req), false); 12664086ee28SSean Wang } 12671d8efc74SSean Wang 126836fcc8cfSLorenzo Bianconi int mt7921_mcu_sta_add(struct mt7921_dev *dev, struct ieee80211_sta *sta, 126936fcc8cfSLorenzo Bianconi struct ieee80211_vif *vif, bool enable) 127036fcc8cfSLorenzo Bianconi { 127136fcc8cfSLorenzo Bianconi struct mt7921_vif *mvif = (struct mt7921_vif *)vif->drv_priv; 127236fcc8cfSLorenzo Bianconi int rssi = -ewma_rssi_read(&mvif->rssi); 127336fcc8cfSLorenzo Bianconi struct mt76_sta_cmd_info info = { 127436fcc8cfSLorenzo Bianconi .sta = sta, 127536fcc8cfSLorenzo Bianconi .vif = vif, 127636fcc8cfSLorenzo Bianconi .enable = enable, 127736fcc8cfSLorenzo Bianconi .cmd = MCU_UNI_CMD_STA_REC_UPDATE, 127836fcc8cfSLorenzo Bianconi .rcpi = to_rcpi(rssi), 127936fcc8cfSLorenzo Bianconi }; 128036fcc8cfSLorenzo Bianconi struct mt7921_sta *msta; 128136fcc8cfSLorenzo Bianconi 128236fcc8cfSLorenzo Bianconi msta = sta ? (struct mt7921_sta *)sta->drv_priv : NULL; 128336fcc8cfSLorenzo Bianconi info.wcid = msta ? &msta->wcid : &mvif->sta.wcid; 128436fcc8cfSLorenzo Bianconi 128536fcc8cfSLorenzo Bianconi return mt76_connac_mcu_add_sta_cmd(&dev->mphy, &info); 128636fcc8cfSLorenzo Bianconi } 128736fcc8cfSLorenzo Bianconi 12881d8efc74SSean Wang int mt7921_mcu_drv_pmctrl(struct mt7921_dev *dev) 12891d8efc74SSean Wang { 12901d8efc74SSean Wang struct mt76_phy *mphy = &dev->mt76.phy; 129136873246SLorenzo Bianconi struct mt76_connac_pm *pm = &dev->pm; 1292fad90e43SLorenzo Bianconi int i, err = 0; 12931d8efc74SSean Wang 129436873246SLorenzo Bianconi mutex_lock(&pm->mutex); 1295fad90e43SLorenzo Bianconi 1296fad90e43SLorenzo Bianconi if (!test_bit(MT76_STATE_PM, &mphy->state)) 12971d8efc74SSean Wang goto out; 12981d8efc74SSean Wang 12991d8efc74SSean Wang for (i = 0; i < MT7921_DRV_OWN_RETRY_COUNT; i++) { 13001d8efc74SSean Wang mt76_wr(dev, MT_CONN_ON_LPCTL, PCIE_LPCR_HOST_CLR_OWN); 13011d8efc74SSean Wang if (mt76_poll_msec(dev, MT_CONN_ON_LPCTL, 13021d8efc74SSean Wang PCIE_LPCR_HOST_OWN_SYNC, 0, 50)) 13031d8efc74SSean Wang break; 13041d8efc74SSean Wang } 13051d8efc74SSean Wang 13061d8efc74SSean Wang if (i == MT7921_DRV_OWN_RETRY_COUNT) { 13071d8efc74SSean Wang dev_err(dev->mt76.dev, "driver own failed\n"); 1308fad90e43SLorenzo Bianconi err = -EIO; 1309fad90e43SLorenzo Bianconi goto out; 13101d8efc74SSean Wang } 1311*3df93214SLorenzo Bianconi 1312*3df93214SLorenzo Bianconi mt7921_wpdma_reinit_cond(dev); 1313fad90e43SLorenzo Bianconi clear_bit(MT76_STATE_PM, &mphy->state); 13141d8efc74SSean Wang 131536873246SLorenzo Bianconi pm->stats.last_wake_event = jiffies; 131636873246SLorenzo Bianconi pm->stats.doze_time += pm->stats.last_wake_event - 131736873246SLorenzo Bianconi pm->stats.last_doze_event; 13181d8efc74SSean Wang out: 131936873246SLorenzo Bianconi mutex_unlock(&pm->mutex); 13201d8efc74SSean Wang 1321fad90e43SLorenzo Bianconi if (err) 1322fad90e43SLorenzo Bianconi mt7921_reset(&dev->mt76); 1323fad90e43SLorenzo Bianconi 1324fad90e43SLorenzo Bianconi return err; 13251d8efc74SSean Wang } 13261d8efc74SSean Wang 13271d8efc74SSean Wang int mt7921_mcu_fw_pmctrl(struct mt7921_dev *dev) 13281d8efc74SSean Wang { 13291d8efc74SSean Wang struct mt76_phy *mphy = &dev->mt76.phy; 133036873246SLorenzo Bianconi struct mt76_connac_pm *pm = &dev->pm; 1331fad90e43SLorenzo Bianconi int i, err = 0; 1332fad90e43SLorenzo Bianconi 133336873246SLorenzo Bianconi mutex_lock(&pm->mutex); 13341d8efc74SSean Wang 133536873246SLorenzo Bianconi if (mt76_connac_skip_fw_pmctrl(mphy, pm)) 1336fad90e43SLorenzo Bianconi goto out; 13371d8efc74SSean Wang 13381d8efc74SSean Wang for (i = 0; i < MT7921_DRV_OWN_RETRY_COUNT; i++) { 13391d8efc74SSean Wang mt76_wr(dev, MT_CONN_ON_LPCTL, PCIE_LPCR_HOST_SET_OWN); 13401d8efc74SSean Wang if (mt76_poll_msec(dev, MT_CONN_ON_LPCTL, 13411d8efc74SSean Wang PCIE_LPCR_HOST_OWN_SYNC, 4, 50)) 13421d8efc74SSean Wang break; 13431d8efc74SSean Wang } 13441d8efc74SSean Wang 13451d8efc74SSean Wang if (i == MT7921_DRV_OWN_RETRY_COUNT) { 13461d8efc74SSean Wang dev_err(dev->mt76.dev, "firmware own failed\n"); 1347fad90e43SLorenzo Bianconi clear_bit(MT76_STATE_PM, &mphy->state); 1348fad90e43SLorenzo Bianconi err = -EIO; 13491d8efc74SSean Wang } 135036873246SLorenzo Bianconi 135136873246SLorenzo Bianconi pm->stats.last_doze_event = jiffies; 135236873246SLorenzo Bianconi pm->stats.awake_time += pm->stats.last_doze_event - 135336873246SLorenzo Bianconi pm->stats.last_wake_event; 1354fad90e43SLorenzo Bianconi out: 135536873246SLorenzo Bianconi mutex_unlock(&pm->mutex); 13561d8efc74SSean Wang 1357fad90e43SLorenzo Bianconi if (err) 1358fad90e43SLorenzo Bianconi mt7921_reset(&dev->mt76); 1359fad90e43SLorenzo Bianconi 1360fad90e43SLorenzo Bianconi return err; 13611d8efc74SSean Wang } 13621d8efc74SSean Wang 13631d8efc74SSean Wang void 13641d8efc74SSean Wang mt7921_pm_interface_iter(void *priv, u8 *mac, struct ieee80211_vif *vif) 13651d8efc74SSean Wang { 13661d8efc74SSean Wang struct mt7921_phy *phy = priv; 13671d8efc74SSean Wang struct mt7921_dev *dev = phy->dev; 1368159f6dd6SSean Wang int ret; 13691d8efc74SSean Wang 1370159f6dd6SSean Wang if (dev->pm.enable) 1371159f6dd6SSean Wang ret = mt7921_mcu_uni_bss_bcnft(dev, vif, true); 1372159f6dd6SSean Wang else 1373159f6dd6SSean Wang ret = mt7921_mcu_set_bss_pm(dev, vif, false); 1374159f6dd6SSean Wang 1375159f6dd6SSean Wang if (ret) 13761d8efc74SSean Wang return; 13771d8efc74SSean Wang 13781d8efc74SSean Wang if (dev->pm.enable) { 13791d8efc74SSean Wang vif->driver_flags |= IEEE80211_VIF_BEACON_FILTER; 13801d8efc74SSean Wang mt76_set(dev, MT_WF_RFCR(0), MT_WF_RFCR_DROP_OTHER_BEACON); 13811d8efc74SSean Wang } else { 13821d8efc74SSean Wang vif->driver_flags &= ~IEEE80211_VIF_BEACON_FILTER; 13831d8efc74SSean Wang mt76_clear(dev, MT_WF_RFCR(0), MT_WF_RFCR_DROP_OTHER_BEACON); 13841d8efc74SSean Wang } 13851d8efc74SSean Wang } 13869c9d8321SSean Wang 1387ea29acc9SSean Wang int mt7921_get_txpwr_info(struct mt7921_dev *dev, struct mt7921_txpwr *txpwr) 1388ea29acc9SSean Wang { 1389ea29acc9SSean Wang struct mt7921_txpwr_event *event; 1390ea29acc9SSean Wang struct mt7921_txpwr_req req = { 1391ea29acc9SSean Wang .dbdc_idx = 0, 1392ea29acc9SSean Wang }; 1393ea29acc9SSean Wang struct sk_buff *skb; 1394ea29acc9SSean Wang int ret; 1395ea29acc9SSean Wang 1396ea29acc9SSean Wang ret = mt76_mcu_send_and_get_msg(&dev->mt76, MCU_CMD_GET_TXPWR, 1397ea29acc9SSean Wang &req, sizeof(req), true, &skb); 1398ea29acc9SSean Wang if (ret) 1399ea29acc9SSean Wang return ret; 1400ea29acc9SSean Wang 1401ea29acc9SSean Wang event = (struct mt7921_txpwr_event *)skb->data; 1402ea29acc9SSean Wang WARN_ON(skb->len != le16_to_cpu(event->len)); 1403ea29acc9SSean Wang memcpy(txpwr, &event->txpwr, sizeof(event->txpwr)); 1404ea29acc9SSean Wang 1405ea29acc9SSean Wang dev_kfree_skb(skb); 1406ea29acc9SSean Wang 1407ea29acc9SSean Wang return 0; 1408ea29acc9SSean Wang } 1409