1 // SPDX-License-Identifier: ISC
2 /* Copyright (C) 2020 MediaTek Inc. */
3
4 #include <linux/firmware.h>
5 #include <linux/fs.h>
6 #include "mt7921.h"
7 #include "mt7921_trace.h"
8 #include "mcu.h"
9 #include "mac.h"
10
11 struct mt7921_patch_hdr {
12 char build_date[16];
13 char platform[4];
14 __be32 hw_sw_ver;
15 __be32 patch_ver;
16 __be16 checksum;
17 u16 reserved;
18 struct {
19 __be32 patch_ver;
20 __be32 subsys;
21 __be32 feature;
22 __be32 n_region;
23 __be32 crc;
24 u32 reserved[11];
25 } desc;
26 } __packed;
27
28 struct mt7921_patch_sec {
29 __be32 type;
30 __be32 offs;
31 __be32 size;
32 union {
33 __be32 spec[13];
34 struct {
35 __be32 addr;
36 __be32 len;
37 __be32 sec_key_idx;
38 __be32 align_len;
39 u32 reserved[9];
40 } info;
41 };
42 } __packed;
43
44 struct mt7921_fw_trailer {
45 u8 chip_id;
46 u8 eco_code;
47 u8 n_region;
48 u8 format_ver;
49 u8 format_flag;
50 u8 reserved[2];
51 char fw_ver[10];
52 char build_date[15];
53 u32 crc;
54 } __packed;
55
56 struct mt7921_fw_region {
57 __le32 decomp_crc;
58 __le32 decomp_len;
59 __le32 decomp_blk_sz;
60 u8 reserved[4];
61 __le32 addr;
62 __le32 len;
63 u8 feature_set;
64 u8 reserved1[15];
65 } __packed;
66
67 #define MT_STA_BFER BIT(0)
68 #define MT_STA_BFEE BIT(1)
69
70 #define FW_FEATURE_SET_ENCRYPT BIT(0)
71 #define FW_FEATURE_SET_KEY_IDX GENMASK(2, 1)
72 #define FW_FEATURE_ENCRY_MODE BIT(4)
73 #define FW_FEATURE_OVERRIDE_ADDR BIT(5)
74
75 #define DL_MODE_ENCRYPT BIT(0)
76 #define DL_MODE_KEY_IDX GENMASK(2, 1)
77 #define DL_MODE_RESET_SEC_IV BIT(3)
78 #define DL_MODE_WORKING_PDA_CR4 BIT(4)
79 #define DL_CONFIG_ENCRY_MODE_SEL BIT(6)
80 #define DL_MODE_NEED_RSP BIT(31)
81
82 #define FW_START_OVERRIDE BIT(0)
83 #define FW_START_WORKING_PDA_CR4 BIT(2)
84
85 #define PATCH_SEC_TYPE_MASK GENMASK(15, 0)
86 #define PATCH_SEC_TYPE_INFO 0x2
87
88 #define to_wcid_lo(id) FIELD_GET(GENMASK(7, 0), (u16)id)
89 #define to_wcid_hi(id) FIELD_GET(GENMASK(9, 8), (u16)id)
90
91 static enum mcu_cipher_type
mt7921_mcu_get_cipher(int cipher)92 mt7921_mcu_get_cipher(int cipher)
93 {
94 switch (cipher) {
95 case WLAN_CIPHER_SUITE_WEP40:
96 return MCU_CIPHER_WEP40;
97 case WLAN_CIPHER_SUITE_WEP104:
98 return MCU_CIPHER_WEP104;
99 case WLAN_CIPHER_SUITE_TKIP:
100 return MCU_CIPHER_TKIP;
101 case WLAN_CIPHER_SUITE_AES_CMAC:
102 return MCU_CIPHER_BIP_CMAC_128;
103 case WLAN_CIPHER_SUITE_CCMP:
104 return MCU_CIPHER_AES_CCMP;
105 case WLAN_CIPHER_SUITE_CCMP_256:
106 return MCU_CIPHER_CCMP_256;
107 case WLAN_CIPHER_SUITE_GCMP:
108 return MCU_CIPHER_GCMP;
109 case WLAN_CIPHER_SUITE_GCMP_256:
110 return MCU_CIPHER_GCMP_256;
111 case WLAN_CIPHER_SUITE_SMS4:
112 return MCU_CIPHER_WAPI;
113 default:
114 return MCU_CIPHER_NONE;
115 }
116 }
117
mt7921_mcu_chan_bw(struct cfg80211_chan_def * chandef)118 static u8 mt7921_mcu_chan_bw(struct cfg80211_chan_def *chandef)
119 {
120 static const u8 width_to_bw[] = {
121 [NL80211_CHAN_WIDTH_40] = CMD_CBW_40MHZ,
122 [NL80211_CHAN_WIDTH_80] = CMD_CBW_80MHZ,
123 [NL80211_CHAN_WIDTH_80P80] = CMD_CBW_8080MHZ,
124 [NL80211_CHAN_WIDTH_160] = CMD_CBW_160MHZ,
125 [NL80211_CHAN_WIDTH_5] = CMD_CBW_5MHZ,
126 [NL80211_CHAN_WIDTH_10] = CMD_CBW_10MHZ,
127 [NL80211_CHAN_WIDTH_20] = CMD_CBW_20MHZ,
128 [NL80211_CHAN_WIDTH_20_NOHT] = CMD_CBW_20MHZ,
129 };
130
131 if (chandef->width >= ARRAY_SIZE(width_to_bw))
132 return 0;
133
134 return width_to_bw[chandef->width];
135 }
136
137 static int
mt7921_mcu_parse_eeprom(struct mt76_dev * dev,struct sk_buff * skb)138 mt7921_mcu_parse_eeprom(struct mt76_dev *dev, struct sk_buff *skb)
139 {
140 struct mt7921_mcu_eeprom_info *res;
141 u8 *buf;
142
143 if (!skb)
144 return -EINVAL;
145
146 skb_pull(skb, sizeof(struct mt7921_mcu_rxd));
147
148 res = (struct mt7921_mcu_eeprom_info *)skb->data;
149 buf = dev->eeprom.data + le32_to_cpu(res->addr);
150 memcpy(buf, res->data, 16);
151
152 return 0;
153 }
154
155 static int
mt7921_mcu_parse_response(struct mt76_dev * mdev,int cmd,struct sk_buff * skb,int seq)156 mt7921_mcu_parse_response(struct mt76_dev *mdev, int cmd,
157 struct sk_buff *skb, int seq)
158 {
159 struct mt7921_mcu_rxd *rxd;
160 int mcu_cmd = cmd & MCU_CMD_MASK;
161 int ret = 0;
162
163 if (!skb) {
164 dev_err(mdev->dev, "Message %08x (seq %d) timeout\n",
165 cmd, seq);
166 mt7921_reset(mdev);
167
168 return -ETIMEDOUT;
169 }
170
171 rxd = (struct mt7921_mcu_rxd *)skb->data;
172 if (seq != rxd->seq)
173 return -EAGAIN;
174
175 switch (cmd) {
176 case MCU_CMD_PATCH_SEM_CONTROL:
177 skb_pull(skb, sizeof(*rxd) - 4);
178 ret = *skb->data;
179 break;
180 case MCU_EXT_CMD_GET_TEMP:
181 skb_pull(skb, sizeof(*rxd) + 4);
182 ret = le32_to_cpu(*(__le32 *)skb->data);
183 break;
184 case MCU_EXT_CMD_EFUSE_ACCESS:
185 ret = mt7921_mcu_parse_eeprom(mdev, skb);
186 break;
187 case MCU_UNI_CMD_DEV_INFO_UPDATE:
188 case MCU_UNI_CMD_BSS_INFO_UPDATE:
189 case MCU_UNI_CMD_STA_REC_UPDATE:
190 case MCU_UNI_CMD_HIF_CTRL:
191 case MCU_UNI_CMD_OFFLOAD:
192 case MCU_UNI_CMD_SUSPEND: {
193 struct mt7921_mcu_uni_event *event;
194
195 skb_pull(skb, sizeof(*rxd));
196 event = (struct mt7921_mcu_uni_event *)skb->data;
197 ret = le32_to_cpu(event->status);
198 /* skip invalid event */
199 if (mcu_cmd != event->cid)
200 ret = -EAGAIN;
201 break;
202 }
203 case MCU_CMD_REG_READ: {
204 struct mt7921_mcu_reg_event *event;
205
206 skb_pull(skb, sizeof(*rxd));
207 event = (struct mt7921_mcu_reg_event *)skb->data;
208 ret = (int)le32_to_cpu(event->val);
209 break;
210 }
211 default:
212 skb_pull(skb, sizeof(struct mt7921_mcu_rxd));
213 break;
214 }
215
216 return ret;
217 }
218
219 static int
mt7921_mcu_send_message(struct mt76_dev * mdev,struct sk_buff * skb,int cmd,int * wait_seq)220 mt7921_mcu_send_message(struct mt76_dev *mdev, struct sk_buff *skb,
221 int cmd, int *wait_seq)
222 {
223 struct mt7921_dev *dev = container_of(mdev, struct mt7921_dev, mt76);
224 int txd_len, mcu_cmd = cmd & MCU_CMD_MASK;
225 enum mt76_mcuq_id txq = MT_MCUQ_WM;
226 struct mt7921_uni_txd *uni_txd;
227 struct mt7921_mcu_txd *mcu_txd;
228 __le32 *txd;
229 u32 val;
230 u8 seq;
231
232 switch (cmd) {
233 case MCU_UNI_CMD_HIF_CTRL:
234 case MCU_UNI_CMD_SUSPEND:
235 case MCU_UNI_CMD_OFFLOAD:
236 mdev->mcu.timeout = HZ / 3;
237 break;
238 default:
239 mdev->mcu.timeout = 3 * HZ;
240 break;
241 }
242
243 seq = ++dev->mt76.mcu.msg_seq & 0xf;
244 if (!seq)
245 seq = ++dev->mt76.mcu.msg_seq & 0xf;
246
247 if (cmd == MCU_CMD_FW_SCATTER) {
248 txq = MT_MCUQ_FWDL;
249 goto exit;
250 }
251
252 txd_len = cmd & MCU_UNI_PREFIX ? sizeof(*uni_txd) : sizeof(*mcu_txd);
253 txd = (__le32 *)skb_push(skb, txd_len);
254
255 val = FIELD_PREP(MT_TXD0_TX_BYTES, skb->len) |
256 FIELD_PREP(MT_TXD0_PKT_FMT, MT_TX_TYPE_CMD) |
257 FIELD_PREP(MT_TXD0_Q_IDX, MT_TX_MCU_PORT_RX_Q0);
258 txd[0] = cpu_to_le32(val);
259
260 val = MT_TXD1_LONG_FORMAT |
261 FIELD_PREP(MT_TXD1_HDR_FORMAT, MT_HDR_FORMAT_CMD);
262 txd[1] = cpu_to_le32(val);
263
264 if (cmd & MCU_UNI_PREFIX) {
265 uni_txd = (struct mt7921_uni_txd *)txd;
266 uni_txd->len = cpu_to_le16(skb->len - sizeof(uni_txd->txd));
267 uni_txd->option = MCU_CMD_UNI_EXT_ACK;
268 uni_txd->cid = cpu_to_le16(mcu_cmd);
269 uni_txd->s2d_index = MCU_S2D_H2N;
270 uni_txd->pkt_type = MCU_PKT_ID;
271 uni_txd->seq = seq;
272
273 goto exit;
274 }
275
276 mcu_txd = (struct mt7921_mcu_txd *)txd;
277 mcu_txd->len = cpu_to_le16(skb->len - sizeof(mcu_txd->txd));
278 mcu_txd->pq_id = cpu_to_le16(MCU_PQ_ID(MT_TX_PORT_IDX_MCU,
279 MT_TX_MCU_PORT_RX_Q0));
280 mcu_txd->pkt_type = MCU_PKT_ID;
281 mcu_txd->seq = seq;
282
283 switch (cmd & ~MCU_CMD_MASK) {
284 case MCU_FW_PREFIX:
285 mcu_txd->set_query = MCU_Q_NA;
286 mcu_txd->cid = mcu_cmd;
287 break;
288 case MCU_CE_PREFIX:
289 if (cmd & MCU_QUERY_MASK)
290 mcu_txd->set_query = MCU_Q_QUERY;
291 else
292 mcu_txd->set_query = MCU_Q_SET;
293 mcu_txd->cid = mcu_cmd;
294 break;
295 default:
296 mcu_txd->cid = MCU_CMD_EXT_CID;
297 if (cmd & MCU_QUERY_PREFIX || cmd == MCU_EXT_CMD_EFUSE_ACCESS)
298 mcu_txd->set_query = MCU_Q_QUERY;
299 else
300 mcu_txd->set_query = MCU_Q_SET;
301 mcu_txd->ext_cid = mcu_cmd;
302 mcu_txd->ext_cid_ack = 1;
303 break;
304 }
305
306 mcu_txd->s2d_index = MCU_S2D_H2N;
307 WARN_ON(cmd == MCU_EXT_CMD_EFUSE_ACCESS &&
308 mcu_txd->set_query != MCU_Q_QUERY);
309
310 exit:
311 if (wait_seq)
312 *wait_seq = seq;
313
314 return mt76_tx_queue_skb_raw(dev, mdev->q_mcu[txq], skb, 0);
315 }
316
317 static void
mt7921_mcu_tx_rate_parse(struct mt76_phy * mphy,struct mt7921_mcu_peer_cap * peer,struct rate_info * rate,u16 r)318 mt7921_mcu_tx_rate_parse(struct mt76_phy *mphy,
319 struct mt7921_mcu_peer_cap *peer,
320 struct rate_info *rate, u16 r)
321 {
322 struct ieee80211_supported_band *sband;
323 u16 flags = 0, rate_idx;
324 u8 txmode = FIELD_GET(MT_WTBL_RATE_TX_MODE, r);
325 u8 gi = 0;
326 u8 bw = 0;
327 bool cck = false;
328
329 memset(rate, 0, sizeof(*rate));
330 rate->mcs = FIELD_GET(MT_WTBL_RATE_MCS, r);
331 rate->nss = FIELD_GET(MT_WTBL_RATE_NSS, r) + 1;
332
333 switch (peer->bw) {
334 case IEEE80211_STA_RX_BW_160:
335 gi = peer->g16;
336 break;
337 case IEEE80211_STA_RX_BW_80:
338 gi = peer->g8;
339 break;
340 case IEEE80211_STA_RX_BW_40:
341 gi = peer->g4;
342 break;
343 default:
344 gi = peer->g2;
345 break;
346 }
347
348 gi = txmode >= MT_PHY_TYPE_HE_SU ?
349 FIELD_GET(MT_WTBL_RATE_HE_GI, gi) :
350 FIELD_GET(MT_WTBL_RATE_GI, gi);
351
352 switch (txmode) {
353 case MT_PHY_TYPE_CCK:
354 cck = true;
355 fallthrough;
356 case MT_PHY_TYPE_OFDM:
357 if (mphy->chandef.chan->band == NL80211_BAND_5GHZ)
358 sband = &mphy->sband_5g.sband;
359 else
360 sband = &mphy->sband_2g.sband;
361
362 rate_idx = FIELD_GET(MT_TX_RATE_IDX, r);
363 rate_idx = mt76_get_rate(mphy->dev, sband, rate_idx,
364 cck);
365 rate->legacy = sband->bitrates[rate_idx].bitrate;
366 break;
367 case MT_PHY_TYPE_HT:
368 case MT_PHY_TYPE_HT_GF:
369 flags |= RATE_INFO_FLAGS_MCS;
370
371 if (gi)
372 flags |= RATE_INFO_FLAGS_SHORT_GI;
373 break;
374 case MT_PHY_TYPE_VHT:
375 flags |= RATE_INFO_FLAGS_VHT_MCS;
376
377 if (gi)
378 flags |= RATE_INFO_FLAGS_SHORT_GI;
379 break;
380 case MT_PHY_TYPE_HE_SU:
381 case MT_PHY_TYPE_HE_EXT_SU:
382 case MT_PHY_TYPE_HE_TB:
383 case MT_PHY_TYPE_HE_MU:
384 rate->he_gi = gi;
385 rate->he_dcm = FIELD_GET(MT_RA_RATE_DCM_EN, r);
386
387 flags |= RATE_INFO_FLAGS_HE_MCS;
388 break;
389 default:
390 break;
391 }
392 rate->flags = flags;
393
394 bw = mt7921_mcu_chan_bw(&mphy->chandef) - FIELD_GET(MT_RA_RATE_BW, r);
395
396 switch (bw) {
397 case IEEE80211_STA_RX_BW_160:
398 rate->bw = RATE_INFO_BW_160;
399 break;
400 case IEEE80211_STA_RX_BW_80:
401 rate->bw = RATE_INFO_BW_80;
402 break;
403 case IEEE80211_STA_RX_BW_40:
404 rate->bw = RATE_INFO_BW_40;
405 break;
406 default:
407 rate->bw = RATE_INFO_BW_20;
408 break;
409 }
410 }
411
412 static void
mt7921_mcu_scan_event(struct mt7921_dev * dev,struct sk_buff * skb)413 mt7921_mcu_scan_event(struct mt7921_dev *dev, struct sk_buff *skb)
414 {
415 struct mt76_phy *mphy = &dev->mt76.phy;
416 struct mt7921_phy *phy = (struct mt7921_phy *)mphy->priv;
417
418 spin_lock_bh(&dev->mt76.lock);
419 __skb_queue_tail(&phy->scan_event_list, skb);
420 spin_unlock_bh(&dev->mt76.lock);
421
422 ieee80211_queue_delayed_work(mphy->hw, &phy->scan_work,
423 MT7921_HW_SCAN_TIMEOUT);
424 }
425
426 static void
mt7921_mcu_connection_loss_iter(void * priv,u8 * mac,struct ieee80211_vif * vif)427 mt7921_mcu_connection_loss_iter(void *priv, u8 *mac,
428 struct ieee80211_vif *vif)
429 {
430 struct mt76_vif *mvif = (struct mt76_vif *)vif->drv_priv;
431 struct mt76_connac_beacon_loss_event *event = priv;
432
433 if (mvif->idx != event->bss_idx)
434 return;
435
436 if (!(vif->driver_flags & IEEE80211_VIF_BEACON_FILTER))
437 return;
438
439 ieee80211_connection_loss(vif);
440 }
441
442 static void
mt7921_mcu_connection_loss_event(struct mt7921_dev * dev,struct sk_buff * skb)443 mt7921_mcu_connection_loss_event(struct mt7921_dev *dev, struct sk_buff *skb)
444 {
445 struct mt76_connac_beacon_loss_event *event;
446 struct mt76_phy *mphy = &dev->mt76.phy;
447
448 skb_pull(skb, sizeof(struct mt7921_mcu_rxd));
449 event = (struct mt76_connac_beacon_loss_event *)skb->data;
450
451 ieee80211_iterate_active_interfaces_atomic(mphy->hw,
452 IEEE80211_IFACE_ITER_RESUME_ALL,
453 mt7921_mcu_connection_loss_iter, event);
454 }
455
456 static void
mt7921_mcu_bss_event(struct mt7921_dev * dev,struct sk_buff * skb)457 mt7921_mcu_bss_event(struct mt7921_dev *dev, struct sk_buff *skb)
458 {
459 struct mt76_phy *mphy = &dev->mt76.phy;
460 struct mt76_connac_mcu_bss_event *event;
461
462 skb_pull(skb, sizeof(struct mt7921_mcu_rxd));
463 event = (struct mt76_connac_mcu_bss_event *)skb->data;
464 if (event->is_absent)
465 ieee80211_stop_queues(mphy->hw);
466 else
467 ieee80211_wake_queues(mphy->hw);
468 }
469
470 static void
mt7921_mcu_debug_msg_event(struct mt7921_dev * dev,struct sk_buff * skb)471 mt7921_mcu_debug_msg_event(struct mt7921_dev *dev, struct sk_buff *skb)
472 {
473 struct mt7921_debug_msg {
474 __le16 id;
475 u8 type;
476 u8 flag;
477 __le32 value;
478 __le16 len;
479 u8 content[512];
480 } __packed * msg;
481
482 skb_pull(skb, sizeof(struct mt7921_mcu_rxd));
483 msg = (struct mt7921_debug_msg *)skb->data;
484
485 if (msg->type == 3) { /* fw log */
486 u16 len = min_t(u16, le16_to_cpu(msg->len), 512);
487 int i;
488
489 for (i = 0 ; i < len; i++) {
490 if (!msg->content[i])
491 msg->content[i] = ' ';
492 }
493 wiphy_info(mt76_hw(dev)->wiphy, "%.*s", len, msg->content);
494 }
495 }
496
497 static void
mt7921_mcu_low_power_event(struct mt7921_dev * dev,struct sk_buff * skb)498 mt7921_mcu_low_power_event(struct mt7921_dev *dev, struct sk_buff *skb)
499 {
500 struct mt7921_mcu_lp_event {
501 u8 state;
502 u8 reserved[3];
503 } __packed * event;
504
505 skb_pull(skb, sizeof(struct mt7921_mcu_rxd));
506 event = (struct mt7921_mcu_lp_event *)skb->data;
507
508 trace_lp_event(dev, event->state);
509 }
510
511 static void
mt7921_mcu_tx_done_event(struct mt7921_dev * dev,struct sk_buff * skb)512 mt7921_mcu_tx_done_event(struct mt7921_dev *dev, struct sk_buff *skb)
513 {
514 struct mt7921_mcu_tx_done_event *event;
515 struct mt7921_sta *msta;
516 struct mt7921_phy *mphy = &dev->phy;
517 struct mt7921_mcu_peer_cap peer;
518 struct ieee80211_sta *sta;
519 LIST_HEAD(list);
520
521 skb_pull(skb, sizeof(struct mt7921_mcu_rxd));
522 event = (struct mt7921_mcu_tx_done_event *)skb->data;
523
524 spin_lock_bh(&dev->sta_poll_lock);
525 list_splice_init(&mphy->stats_list, &list);
526
527 while (!list_empty(&list)) {
528 msta = list_first_entry(&list, struct mt7921_sta, stats_list);
529 list_del_init(&msta->stats_list);
530
531 if (msta->wcid.idx != event->wlan_idx)
532 continue;
533
534 spin_unlock_bh(&dev->sta_poll_lock);
535
536 sta = wcid_to_sta(&msta->wcid);
537
538 /* peer config based on IEEE SPEC */
539 memset(&peer, 0x0, sizeof(peer));
540 peer.bw = event->bw;
541 peer.g2 = !!(sta->deflink.ht_cap.cap & IEEE80211_HT_CAP_SGI_20);
542 peer.g4 = !!(sta->deflink.ht_cap.cap & IEEE80211_HT_CAP_SGI_40);
543 peer.g8 = !!(sta->deflink.vht_cap.cap & IEEE80211_VHT_CAP_SHORT_GI_80);
544 peer.g16 = !!(sta->deflink.vht_cap.cap & IEEE80211_VHT_CAP_SHORT_GI_160);
545 mt7921_mcu_tx_rate_parse(mphy->mt76, &peer,
546 &msta->stats.tx_rate,
547 le16_to_cpu(event->tx_rate));
548
549 spin_lock_bh(&dev->sta_poll_lock);
550 break;
551 }
552 spin_unlock_bh(&dev->sta_poll_lock);
553 }
554
555 static void
mt7921_mcu_rx_unsolicited_event(struct mt7921_dev * dev,struct sk_buff * skb)556 mt7921_mcu_rx_unsolicited_event(struct mt7921_dev *dev, struct sk_buff *skb)
557 {
558 struct mt7921_mcu_rxd *rxd = (struct mt7921_mcu_rxd *)skb->data;
559
560 switch (rxd->eid) {
561 case MCU_EVENT_BSS_BEACON_LOSS:
562 mt7921_mcu_connection_loss_event(dev, skb);
563 break;
564 case MCU_EVENT_SCHED_SCAN_DONE:
565 case MCU_EVENT_SCAN_DONE:
566 mt7921_mcu_scan_event(dev, skb);
567 return;
568 case MCU_EVENT_BSS_ABSENCE:
569 mt7921_mcu_bss_event(dev, skb);
570 break;
571 case MCU_EVENT_DBG_MSG:
572 mt7921_mcu_debug_msg_event(dev, skb);
573 break;
574 case MCU_EVENT_COREDUMP:
575 mt76_connac_mcu_coredump_event(&dev->mt76, skb,
576 &dev->coredump);
577 return;
578 case MCU_EVENT_LP_INFO:
579 mt7921_mcu_low_power_event(dev, skb);
580 break;
581 case MCU_EVENT_TX_DONE:
582 mt7921_mcu_tx_done_event(dev, skb);
583 break;
584 default:
585 break;
586 }
587 dev_kfree_skb(skb);
588 }
589
mt7921_mcu_rx_event(struct mt7921_dev * dev,struct sk_buff * skb)590 void mt7921_mcu_rx_event(struct mt7921_dev *dev, struct sk_buff *skb)
591 {
592 struct mt7921_mcu_rxd *rxd = (struct mt7921_mcu_rxd *)skb->data;
593
594 if (rxd->eid == 0x6) {
595 mt76_mcu_rx_event(&dev->mt76, skb);
596 return;
597 }
598
599 if (rxd->ext_eid == MCU_EXT_EVENT_RATE_REPORT ||
600 rxd->eid == MCU_EVENT_BSS_BEACON_LOSS ||
601 rxd->eid == MCU_EVENT_SCHED_SCAN_DONE ||
602 rxd->eid == MCU_EVENT_BSS_ABSENCE ||
603 rxd->eid == MCU_EVENT_SCAN_DONE ||
604 rxd->eid == MCU_EVENT_TX_DONE ||
605 rxd->eid == MCU_EVENT_DBG_MSG ||
606 rxd->eid == MCU_EVENT_COREDUMP ||
607 rxd->eid == MCU_EVENT_LP_INFO ||
608 !rxd->seq)
609 mt7921_mcu_rx_unsolicited_event(dev, skb);
610 else
611 mt76_mcu_rx_event(&dev->mt76, skb);
612 }
613
614 /** starec & wtbl **/
615 static int
mt7921_mcu_sta_key_tlv(struct mt7921_sta * msta,struct sk_buff * skb,struct ieee80211_key_conf * key,enum set_key_cmd cmd)616 mt7921_mcu_sta_key_tlv(struct mt7921_sta *msta, struct sk_buff *skb,
617 struct ieee80211_key_conf *key, enum set_key_cmd cmd)
618 {
619 struct mt7921_sta_key_conf *bip = &msta->bip;
620 struct sta_rec_sec *sec;
621 struct tlv *tlv;
622 u32 len = sizeof(*sec);
623
624 tlv = mt76_connac_mcu_add_tlv(skb, STA_REC_KEY_V2, sizeof(*sec));
625
626 sec = (struct sta_rec_sec *)tlv;
627 sec->add = cmd;
628
629 if (cmd == SET_KEY) {
630 struct sec_key *sec_key;
631 u8 cipher;
632
633 cipher = mt7921_mcu_get_cipher(key->cipher);
634 if (cipher == MCU_CIPHER_NONE)
635 return -EOPNOTSUPP;
636
637 sec_key = &sec->key[0];
638 sec_key->cipher_len = sizeof(*sec_key);
639
640 if (cipher == MCU_CIPHER_BIP_CMAC_128) {
641 sec_key->cipher_id = MCU_CIPHER_AES_CCMP;
642 sec_key->key_id = bip->keyidx;
643 sec_key->key_len = 16;
644 memcpy(sec_key->key, bip->key, 16);
645
646 sec_key = &sec->key[1];
647 sec_key->cipher_id = MCU_CIPHER_BIP_CMAC_128;
648 sec_key->cipher_len = sizeof(*sec_key);
649 sec_key->key_len = 16;
650 memcpy(sec_key->key, key->key, 16);
651
652 sec->n_cipher = 2;
653 } else {
654 sec_key->cipher_id = cipher;
655 sec_key->key_id = key->keyidx;
656 sec_key->key_len = key->keylen;
657 memcpy(sec_key->key, key->key, key->keylen);
658
659 if (cipher == MCU_CIPHER_TKIP) {
660 /* Rx/Tx MIC keys are swapped */
661 memcpy(sec_key->key + 16, key->key + 24, 8);
662 memcpy(sec_key->key + 24, key->key + 16, 8);
663 }
664
665 /* store key_conf for BIP batch update */
666 if (cipher == MCU_CIPHER_AES_CCMP) {
667 memcpy(bip->key, key->key, key->keylen);
668 bip->keyidx = key->keyidx;
669 }
670
671 len -= sizeof(*sec_key);
672 sec->n_cipher = 1;
673 }
674 } else {
675 len -= sizeof(sec->key);
676 sec->n_cipher = 0;
677 }
678 sec->len = cpu_to_le16(len);
679
680 return 0;
681 }
682
mt7921_mcu_add_key(struct mt7921_dev * dev,struct ieee80211_vif * vif,struct mt7921_sta * msta,struct ieee80211_key_conf * key,enum set_key_cmd cmd)683 int mt7921_mcu_add_key(struct mt7921_dev *dev, struct ieee80211_vif *vif,
684 struct mt7921_sta *msta, struct ieee80211_key_conf *key,
685 enum set_key_cmd cmd)
686 {
687 struct mt7921_vif *mvif = (struct mt7921_vif *)vif->drv_priv;
688 struct sk_buff *skb;
689 int ret;
690
691 skb = mt76_connac_mcu_alloc_sta_req(&dev->mt76, &mvif->mt76,
692 &msta->wcid);
693 if (IS_ERR(skb))
694 return PTR_ERR(skb);
695
696 ret = mt7921_mcu_sta_key_tlv(msta, skb, key, cmd);
697 if (ret)
698 return ret;
699
700 return mt76_mcu_skb_send_msg(&dev->mt76, skb,
701 MCU_UNI_CMD_STA_REC_UPDATE, true);
702 }
703
mt7921_mcu_uni_tx_ba(struct mt7921_dev * dev,struct ieee80211_ampdu_params * params,bool enable)704 int mt7921_mcu_uni_tx_ba(struct mt7921_dev *dev,
705 struct ieee80211_ampdu_params *params,
706 bool enable)
707 {
708 struct mt7921_sta *msta = (struct mt7921_sta *)params->sta->drv_priv;
709
710 if (enable && !params->amsdu)
711 msta->wcid.amsdu = false;
712
713 return mt76_connac_mcu_sta_ba(&dev->mt76, &msta->vif->mt76, params,
714 enable, true);
715 }
716
mt7921_mcu_uni_rx_ba(struct mt7921_dev * dev,struct ieee80211_ampdu_params * params,bool enable)717 int mt7921_mcu_uni_rx_ba(struct mt7921_dev *dev,
718 struct ieee80211_ampdu_params *params,
719 bool enable)
720 {
721 struct mt7921_sta *msta = (struct mt7921_sta *)params->sta->drv_priv;
722
723 return mt76_connac_mcu_sta_ba(&dev->mt76, &msta->vif->mt76, params,
724 enable, false);
725 }
726
mt7921_mcu_restart(struct mt76_dev * dev)727 static int mt7921_mcu_restart(struct mt76_dev *dev)
728 {
729 struct {
730 u8 power_mode;
731 u8 rsv[3];
732 } req = {
733 .power_mode = 1,
734 };
735
736 return mt76_mcu_send_msg(dev, MCU_CMD_NIC_POWER_CTRL, &req,
737 sizeof(req), false);
738 }
739
mt7921_driver_own(struct mt7921_dev * dev)740 static int mt7921_driver_own(struct mt7921_dev *dev)
741 {
742 u32 reg = mt7921_reg_map_l1(dev, MT_TOP_LPCR_HOST_BAND0);
743
744 mt76_wr(dev, reg, MT_TOP_LPCR_HOST_DRV_OWN);
745 if (!mt76_poll_msec(dev, reg, MT_TOP_LPCR_HOST_FW_OWN,
746 0, 500)) {
747 dev_err(dev->mt76.dev, "Timeout for driver own\n");
748 return -EIO;
749 }
750
751 return 0;
752 }
753
mt7921_load_patch(struct mt7921_dev * dev)754 static int mt7921_load_patch(struct mt7921_dev *dev)
755 {
756 const struct mt7921_patch_hdr *hdr;
757 const struct firmware *fw = NULL;
758 int i, ret, sem;
759
760 sem = mt76_connac_mcu_patch_sem_ctrl(&dev->mt76, true);
761 switch (sem) {
762 case PATCH_IS_DL:
763 return 0;
764 case PATCH_NOT_DL_SEM_SUCCESS:
765 break;
766 default:
767 dev_err(dev->mt76.dev, "Failed to get patch semaphore\n");
768 return -EAGAIN;
769 }
770
771 ret = request_firmware(&fw, MT7921_ROM_PATCH, dev->mt76.dev);
772 if (ret)
773 goto out;
774
775 if (!fw || !fw->data || fw->size < sizeof(*hdr)) {
776 dev_err(dev->mt76.dev, "Invalid firmware\n");
777 ret = -EINVAL;
778 goto out;
779 }
780
781 hdr = (const struct mt7921_patch_hdr *)(fw->data);
782
783 dev_info(dev->mt76.dev, "HW/SW Version: 0x%x, Build Time: %.16s\n",
784 be32_to_cpu(hdr->hw_sw_ver), hdr->build_date);
785
786 for (i = 0; i < be32_to_cpu(hdr->desc.n_region); i++) {
787 struct mt7921_patch_sec *sec;
788 const u8 *dl;
789 u32 len, addr;
790
791 sec = (struct mt7921_patch_sec *)(fw->data + sizeof(*hdr) +
792 i * sizeof(*sec));
793 if ((be32_to_cpu(sec->type) & PATCH_SEC_TYPE_MASK) !=
794 PATCH_SEC_TYPE_INFO) {
795 ret = -EINVAL;
796 goto out;
797 }
798
799 addr = be32_to_cpu(sec->info.addr);
800 len = be32_to_cpu(sec->info.len);
801 dl = fw->data + be32_to_cpu(sec->offs);
802
803 ret = mt76_connac_mcu_init_download(&dev->mt76, addr, len,
804 DL_MODE_NEED_RSP);
805 if (ret) {
806 dev_err(dev->mt76.dev, "Download request failed\n");
807 goto out;
808 }
809
810 ret = mt76_mcu_send_firmware(&dev->mt76, MCU_CMD_FW_SCATTER,
811 dl, len);
812 if (ret) {
813 dev_err(dev->mt76.dev, "Failed to send patch\n");
814 goto out;
815 }
816 }
817
818 ret = mt76_connac_mcu_start_patch(&dev->mt76);
819 if (ret)
820 dev_err(dev->mt76.dev, "Failed to start patch\n");
821
822 out:
823 sem = mt76_connac_mcu_patch_sem_ctrl(&dev->mt76, false);
824 switch (sem) {
825 case PATCH_REL_SEM_SUCCESS:
826 break;
827 default:
828 ret = -EAGAIN;
829 dev_err(dev->mt76.dev, "Failed to release patch semaphore\n");
830 break;
831 }
832 release_firmware(fw);
833
834 return ret;
835 }
836
mt7921_mcu_gen_dl_mode(u8 feature_set,bool is_wa)837 static u32 mt7921_mcu_gen_dl_mode(u8 feature_set, bool is_wa)
838 {
839 u32 ret = 0;
840
841 ret |= (feature_set & FW_FEATURE_SET_ENCRYPT) ?
842 (DL_MODE_ENCRYPT | DL_MODE_RESET_SEC_IV) : 0;
843 ret |= (feature_set & FW_FEATURE_ENCRY_MODE) ?
844 DL_CONFIG_ENCRY_MODE_SEL : 0;
845 ret |= FIELD_PREP(DL_MODE_KEY_IDX,
846 FIELD_GET(FW_FEATURE_SET_KEY_IDX, feature_set));
847 ret |= DL_MODE_NEED_RSP;
848 ret |= is_wa ? DL_MODE_WORKING_PDA_CR4 : 0;
849
850 return ret;
851 }
852
853 static int
mt7921_mcu_send_ram_firmware(struct mt7921_dev * dev,const struct mt7921_fw_trailer * hdr,const u8 * data,bool is_wa)854 mt7921_mcu_send_ram_firmware(struct mt7921_dev *dev,
855 const struct mt7921_fw_trailer *hdr,
856 const u8 *data, bool is_wa)
857 {
858 int i, offset = 0;
859 u32 override = 0, option = 0;
860
861 for (i = 0; i < hdr->n_region; i++) {
862 const struct mt7921_fw_region *region;
863 int err;
864 u32 len, addr, mode;
865
866 region = (const struct mt7921_fw_region *)((const u8 *)hdr -
867 (hdr->n_region - i) * sizeof(*region));
868 mode = mt7921_mcu_gen_dl_mode(region->feature_set, is_wa);
869 len = le32_to_cpu(region->len);
870 addr = le32_to_cpu(region->addr);
871
872 if (region->feature_set & FW_FEATURE_OVERRIDE_ADDR)
873 override = addr;
874
875 err = mt76_connac_mcu_init_download(&dev->mt76, addr, len,
876 mode);
877 if (err) {
878 dev_err(dev->mt76.dev, "Download request failed\n");
879 return err;
880 }
881
882 err = mt76_mcu_send_firmware(&dev->mt76, MCU_CMD_FW_SCATTER,
883 data + offset, len);
884 if (err) {
885 dev_err(dev->mt76.dev, "Failed to send firmware.\n");
886 return err;
887 }
888
889 offset += len;
890 }
891
892 if (override)
893 option |= FW_START_OVERRIDE;
894
895 if (is_wa)
896 option |= FW_START_WORKING_PDA_CR4;
897
898 return mt76_connac_mcu_start_firmware(&dev->mt76, override, option);
899 }
900
mt7921_load_ram(struct mt7921_dev * dev)901 static int mt7921_load_ram(struct mt7921_dev *dev)
902 {
903 const struct mt7921_fw_trailer *hdr;
904 const struct firmware *fw;
905 int ret;
906
907 ret = request_firmware(&fw, MT7921_FIRMWARE_WM, dev->mt76.dev);
908 if (ret)
909 return ret;
910
911 if (!fw || !fw->data || fw->size < sizeof(*hdr)) {
912 dev_err(dev->mt76.dev, "Invalid firmware\n");
913 ret = -EINVAL;
914 goto out;
915 }
916
917 hdr = (const struct mt7921_fw_trailer *)(fw->data + fw->size -
918 sizeof(*hdr));
919
920 dev_info(dev->mt76.dev, "WM Firmware Version: %.10s, Build Time: %.15s\n",
921 hdr->fw_ver, hdr->build_date);
922
923 ret = mt7921_mcu_send_ram_firmware(dev, hdr, fw->data, false);
924 if (ret) {
925 dev_err(dev->mt76.dev, "Failed to start WM firmware\n");
926 goto out;
927 }
928
929 snprintf(dev->mt76.hw->wiphy->fw_version,
930 sizeof(dev->mt76.hw->wiphy->fw_version),
931 "%.10s-%.15s", hdr->fw_ver, hdr->build_date);
932
933 out:
934 release_firmware(fw);
935
936 return ret;
937 }
938
mt7921_load_firmware(struct mt7921_dev * dev)939 static int mt7921_load_firmware(struct mt7921_dev *dev)
940 {
941 int ret;
942
943 ret = mt76_get_field(dev, MT_CONN_ON_MISC, MT_TOP_MISC2_FW_N9_RDY);
944 if (ret) {
945 dev_dbg(dev->mt76.dev, "Firmware is already download\n");
946 goto fw_loaded;
947 }
948
949 ret = mt7921_load_patch(dev);
950 if (ret)
951 return ret;
952
953 ret = mt7921_load_ram(dev);
954 if (ret)
955 return ret;
956
957 if (!mt76_poll_msec(dev, MT_CONN_ON_MISC, MT_TOP_MISC2_FW_N9_RDY,
958 MT_TOP_MISC2_FW_N9_RDY, 1500)) {
959 dev_err(dev->mt76.dev, "Timeout for initializing firmware\n");
960
961 return -EIO;
962 }
963
964 fw_loaded:
965 mt76_queue_tx_cleanup(dev, dev->mt76.q_mcu[MT_MCUQ_FWDL], false);
966
967 #ifdef CONFIG_PM
968 dev->mt76.hw->wiphy->wowlan = &mt76_connac_wowlan_support;
969 #endif /* CONFIG_PM */
970
971 dev_err(dev->mt76.dev, "Firmware init done\n");
972
973 return 0;
974 }
975
mt7921_mcu_fw_log_2_host(struct mt7921_dev * dev,u8 ctrl)976 int mt7921_mcu_fw_log_2_host(struct mt7921_dev *dev, u8 ctrl)
977 {
978 struct {
979 u8 ctrl_val;
980 u8 pad[3];
981 } data = {
982 .ctrl_val = ctrl
983 };
984
985 return mt76_mcu_send_msg(&dev->mt76, MCU_CMD_FWLOG_2_HOST, &data,
986 sizeof(data), false);
987 }
988
mt7921_run_firmware(struct mt7921_dev * dev)989 int mt7921_run_firmware(struct mt7921_dev *dev)
990 {
991 int err;
992
993 err = mt7921_driver_own(dev);
994 if (err)
995 return err;
996
997 err = mt7921_load_firmware(dev);
998 if (err)
999 return err;
1000
1001 set_bit(MT76_STATE_MCU_RUNNING, &dev->mphy.state);
1002 mt7921_mcu_fw_log_2_host(dev, 1);
1003
1004 return mt76_connac_mcu_get_nic_capability(&dev->mphy);
1005 }
1006
mt7921_mcu_init(struct mt7921_dev * dev)1007 int mt7921_mcu_init(struct mt7921_dev *dev)
1008 {
1009 static const struct mt76_mcu_ops mt7921_mcu_ops = {
1010 .headroom = sizeof(struct mt7921_mcu_txd),
1011 .mcu_skb_send_msg = mt7921_mcu_send_message,
1012 .mcu_parse_response = mt7921_mcu_parse_response,
1013 .mcu_restart = mt7921_mcu_restart,
1014 };
1015
1016 dev->mt76.mcu_ops = &mt7921_mcu_ops;
1017
1018 return mt7921_run_firmware(dev);
1019 }
1020
mt7921_mcu_exit(struct mt7921_dev * dev)1021 void mt7921_mcu_exit(struct mt7921_dev *dev)
1022 {
1023 mt7921_wfsys_reset(dev);
1024 skb_queue_purge(&dev->mt76.mcu.res_q);
1025 }
1026
mt7921_mcu_set_tx(struct mt7921_dev * dev,struct ieee80211_vif * vif)1027 int mt7921_mcu_set_tx(struct mt7921_dev *dev, struct ieee80211_vif *vif)
1028 {
1029 #define WMM_AIFS_SET BIT(0)
1030 #define WMM_CW_MIN_SET BIT(1)
1031 #define WMM_CW_MAX_SET BIT(2)
1032 #define WMM_TXOP_SET BIT(3)
1033 #define WMM_PARAM_SET GENMASK(3, 0)
1034 #define TX_CMD_MODE 1
1035 struct edca {
1036 u8 queue;
1037 u8 set;
1038 u8 aifs;
1039 u8 cw_min;
1040 __le16 cw_max;
1041 __le16 txop;
1042 };
1043 struct mt7921_mcu_tx {
1044 u8 total;
1045 u8 action;
1046 u8 valid;
1047 u8 mode;
1048
1049 struct edca edca[IEEE80211_NUM_ACS];
1050 } __packed req = {
1051 .valid = true,
1052 .mode = TX_CMD_MODE,
1053 .total = IEEE80211_NUM_ACS,
1054 };
1055 struct mt7921_vif *mvif = (struct mt7921_vif *)vif->drv_priv;
1056 int ac;
1057
1058 for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
1059 struct ieee80211_tx_queue_params *q = &mvif->queue_params[ac];
1060 struct edca *e = &req.edca[ac];
1061
1062 e->set = WMM_PARAM_SET;
1063 e->queue = ac + mvif->mt76.wmm_idx * MT7921_MAX_WMM_SETS;
1064 e->aifs = q->aifs;
1065 e->txop = cpu_to_le16(q->txop);
1066
1067 if (q->cw_min)
1068 e->cw_min = fls(q->cw_min);
1069 else
1070 e->cw_min = 5;
1071
1072 if (q->cw_max)
1073 e->cw_max = cpu_to_le16(fls(q->cw_max));
1074 else
1075 e->cw_max = cpu_to_le16(10);
1076 }
1077 return mt76_mcu_send_msg(&dev->mt76, MCU_EXT_CMD_EDCA_UPDATE, &req,
1078 sizeof(req), true);
1079 }
1080
mt7921_mcu_set_chan_info(struct mt7921_phy * phy,int cmd)1081 int mt7921_mcu_set_chan_info(struct mt7921_phy *phy, int cmd)
1082 {
1083 struct mt7921_dev *dev = phy->dev;
1084 struct cfg80211_chan_def *chandef = &phy->mt76->chandef;
1085 int freq1 = chandef->center_freq1;
1086 struct {
1087 u8 control_ch;
1088 u8 center_ch;
1089 u8 bw;
1090 u8 tx_streams_num;
1091 u8 rx_streams; /* mask or num */
1092 u8 switch_reason;
1093 u8 band_idx;
1094 u8 center_ch2; /* for 80+80 only */
1095 __le16 cac_case;
1096 u8 channel_band;
1097 u8 rsv0;
1098 __le32 outband_freq;
1099 u8 txpower_drop;
1100 u8 ap_bw;
1101 u8 ap_center_ch;
1102 u8 rsv1[57];
1103 } __packed req = {
1104 .control_ch = chandef->chan->hw_value,
1105 .center_ch = ieee80211_frequency_to_channel(freq1),
1106 .bw = mt7921_mcu_chan_bw(chandef),
1107 .tx_streams_num = hweight8(phy->mt76->antenna_mask),
1108 .rx_streams = phy->mt76->antenna_mask,
1109 .band_idx = phy != &dev->phy,
1110 .channel_band = chandef->chan->band,
1111 };
1112
1113 if (dev->mt76.hw->conf.flags & IEEE80211_CONF_OFFCHANNEL)
1114 req.switch_reason = CH_SWITCH_SCAN_BYPASS_DPD;
1115 else if ((chandef->chan->flags & IEEE80211_CHAN_RADAR) &&
1116 chandef->chan->dfs_state != NL80211_DFS_AVAILABLE)
1117 req.switch_reason = CH_SWITCH_DFS;
1118 else
1119 req.switch_reason = CH_SWITCH_NORMAL;
1120
1121 if (cmd == MCU_EXT_CMD_CHANNEL_SWITCH)
1122 req.rx_streams = hweight8(req.rx_streams);
1123
1124 if (chandef->width == NL80211_CHAN_WIDTH_80P80) {
1125 int freq2 = chandef->center_freq2;
1126
1127 req.center_ch2 = ieee80211_frequency_to_channel(freq2);
1128 }
1129
1130 return mt76_mcu_send_msg(&dev->mt76, cmd, &req, sizeof(req), true);
1131 }
1132
mt7921_mcu_set_eeprom(struct mt7921_dev * dev)1133 int mt7921_mcu_set_eeprom(struct mt7921_dev *dev)
1134 {
1135 struct req_hdr {
1136 u8 buffer_mode;
1137 u8 format;
1138 __le16 len;
1139 } __packed req = {
1140 .buffer_mode = EE_MODE_EFUSE,
1141 .format = EE_FORMAT_WHOLE,
1142 };
1143
1144 return mt76_mcu_send_msg(&dev->mt76, MCU_EXT_CMD_EFUSE_BUFFER_MODE,
1145 &req, sizeof(req), true);
1146 }
1147
mt7921_mcu_get_eeprom(struct mt7921_dev * dev,u32 offset)1148 int mt7921_mcu_get_eeprom(struct mt7921_dev *dev, u32 offset)
1149 {
1150 struct mt7921_mcu_eeprom_info req = {
1151 .addr = cpu_to_le32(round_down(offset, 16)),
1152 };
1153 struct mt7921_mcu_eeprom_info *res;
1154 struct sk_buff *skb;
1155 int ret;
1156 u8 *buf;
1157
1158 ret = mt76_mcu_send_and_get_msg(&dev->mt76, MCU_EXT_CMD_EFUSE_ACCESS, &req,
1159 sizeof(req), true, &skb);
1160 if (ret)
1161 return ret;
1162
1163 res = (struct mt7921_mcu_eeprom_info *)skb->data;
1164 buf = dev->mt76.eeprom.data + le32_to_cpu(res->addr);
1165 memcpy(buf, res->data, 16);
1166 dev_kfree_skb(skb);
1167
1168 return 0;
1169 }
1170
mt7921_mcu_uni_bss_ps(struct mt7921_dev * dev,struct ieee80211_vif * vif)1171 int mt7921_mcu_uni_bss_ps(struct mt7921_dev *dev, struct ieee80211_vif *vif)
1172 {
1173 struct mt7921_vif *mvif = (struct mt7921_vif *)vif->drv_priv;
1174 struct {
1175 struct {
1176 u8 bss_idx;
1177 u8 pad[3];
1178 } __packed hdr;
1179 struct ps_tlv {
1180 __le16 tag;
1181 __le16 len;
1182 u8 ps_state; /* 0: device awake
1183 * 1: static power save
1184 * 2: dynamic power saving
1185 * 3: enter TWT power saving
1186 * 4: leave TWT power saving
1187 */
1188 u8 pad[3];
1189 } __packed ps;
1190 } __packed ps_req = {
1191 .hdr = {
1192 .bss_idx = mvif->mt76.idx,
1193 },
1194 .ps = {
1195 .tag = cpu_to_le16(UNI_BSS_INFO_PS),
1196 .len = cpu_to_le16(sizeof(struct ps_tlv)),
1197 .ps_state = vif->bss_conf.ps ? 2 : 0,
1198 },
1199 };
1200
1201 if (vif->type != NL80211_IFTYPE_STATION)
1202 return -EOPNOTSUPP;
1203
1204 return mt76_mcu_send_msg(&dev->mt76, MCU_UNI_CMD_BSS_INFO_UPDATE,
1205 &ps_req, sizeof(ps_req), true);
1206 }
1207
1208 static int
mt7921_mcu_uni_bss_bcnft(struct mt7921_dev * dev,struct ieee80211_vif * vif,bool enable)1209 mt7921_mcu_uni_bss_bcnft(struct mt7921_dev *dev, struct ieee80211_vif *vif,
1210 bool enable)
1211 {
1212 struct mt7921_vif *mvif = (struct mt7921_vif *)vif->drv_priv;
1213 struct {
1214 struct {
1215 u8 bss_idx;
1216 u8 pad[3];
1217 } __packed hdr;
1218 struct bcnft_tlv {
1219 __le16 tag;
1220 __le16 len;
1221 __le16 bcn_interval;
1222 u8 dtim_period;
1223 u8 pad;
1224 } __packed bcnft;
1225 } __packed bcnft_req = {
1226 .hdr = {
1227 .bss_idx = mvif->mt76.idx,
1228 },
1229 .bcnft = {
1230 .tag = cpu_to_le16(UNI_BSS_INFO_BCNFT),
1231 .len = cpu_to_le16(sizeof(struct bcnft_tlv)),
1232 .bcn_interval = cpu_to_le16(vif->bss_conf.beacon_int),
1233 .dtim_period = vif->bss_conf.dtim_period,
1234 },
1235 };
1236
1237 if (vif->type != NL80211_IFTYPE_STATION)
1238 return 0;
1239
1240 return mt76_mcu_send_msg(&dev->mt76, MCU_UNI_CMD_BSS_INFO_UPDATE,
1241 &bcnft_req, sizeof(bcnft_req), true);
1242 }
1243
1244 static int
mt7921_mcu_set_bss_pm(struct mt7921_dev * dev,struct ieee80211_vif * vif,bool enable)1245 mt7921_mcu_set_bss_pm(struct mt7921_dev *dev, struct ieee80211_vif *vif,
1246 bool enable)
1247 {
1248 struct mt7921_vif *mvif = (struct mt7921_vif *)vif->drv_priv;
1249 struct {
1250 u8 bss_idx;
1251 u8 dtim_period;
1252 __le16 aid;
1253 __le16 bcn_interval;
1254 __le16 atim_window;
1255 u8 uapsd;
1256 u8 bmc_delivered_ac;
1257 u8 bmc_triggered_ac;
1258 u8 pad;
1259 } req = {
1260 .bss_idx = mvif->mt76.idx,
1261 .aid = cpu_to_le16(vif->bss_conf.aid),
1262 .dtim_period = vif->bss_conf.dtim_period,
1263 .bcn_interval = cpu_to_le16(vif->bss_conf.beacon_int),
1264 };
1265 struct {
1266 u8 bss_idx;
1267 u8 pad[3];
1268 } req_hdr = {
1269 .bss_idx = mvif->mt76.idx,
1270 };
1271 int err;
1272
1273 if (vif->type != NL80211_IFTYPE_STATION)
1274 return 0;
1275
1276 err = mt76_mcu_send_msg(&dev->mt76, MCU_CMD_SET_BSS_ABORT, &req_hdr,
1277 sizeof(req_hdr), false);
1278 if (err < 0 || !enable)
1279 return err;
1280
1281 return mt76_mcu_send_msg(&dev->mt76, MCU_CMD_SET_BSS_CONNECTED, &req,
1282 sizeof(req), false);
1283 }
1284
mt7921_mcu_sta_update(struct mt7921_dev * dev,struct ieee80211_sta * sta,struct ieee80211_vif * vif,bool enable,enum mt76_sta_info_state state)1285 int mt7921_mcu_sta_update(struct mt7921_dev *dev, struct ieee80211_sta *sta,
1286 struct ieee80211_vif *vif, bool enable,
1287 enum mt76_sta_info_state state)
1288 {
1289 struct mt7921_vif *mvif = (struct mt7921_vif *)vif->drv_priv;
1290 int rssi = -ewma_rssi_read(&mvif->rssi);
1291 struct mt76_sta_cmd_info info = {
1292 .sta = sta,
1293 .vif = vif,
1294 .enable = enable,
1295 .cmd = MCU_UNI_CMD_STA_REC_UPDATE,
1296 .state = state,
1297 .offload_fw = true,
1298 .rcpi = to_rcpi(rssi),
1299 };
1300 struct mt7921_sta *msta;
1301
1302 msta = sta ? (struct mt7921_sta *)sta->drv_priv : NULL;
1303 info.wcid = msta ? &msta->wcid : &mvif->sta.wcid;
1304 info.newly = msta ? state != MT76_STA_INFO_STATE_ASSOC : true;
1305
1306 return mt76_connac_mcu_sta_cmd(&dev->mphy, &info);
1307 }
1308
__mt7921e_mcu_drv_pmctrl(struct mt7921_dev * dev)1309 int __mt7921e_mcu_drv_pmctrl(struct mt7921_dev *dev)
1310 {
1311 int i, err = 0;
1312
1313 for (i = 0; i < MT7921_DRV_OWN_RETRY_COUNT; i++) {
1314 mt76_wr(dev, MT_CONN_ON_LPCTL, PCIE_LPCR_HOST_CLR_OWN);
1315 if (mt76_poll_msec(dev, MT_CONN_ON_LPCTL,
1316 PCIE_LPCR_HOST_OWN_SYNC, 0, 50))
1317 break;
1318 }
1319
1320 if (i == MT7921_DRV_OWN_RETRY_COUNT) {
1321 dev_err(dev->mt76.dev, "driver own failed\n");
1322 err = -EIO;
1323 }
1324
1325 return err;
1326 }
1327
__mt7921_mcu_drv_pmctrl(struct mt7921_dev * dev)1328 int __mt7921_mcu_drv_pmctrl(struct mt7921_dev *dev)
1329 {
1330 struct mt76_phy *mphy = &dev->mt76.phy;
1331 struct mt76_connac_pm *pm = &dev->pm;
1332 int err;
1333
1334 err = __mt7921e_mcu_drv_pmctrl(dev);
1335 if (err < 0)
1336 goto out;
1337
1338 mt7921_wpdma_reinit_cond(dev);
1339 clear_bit(MT76_STATE_PM, &mphy->state);
1340
1341 pm->stats.last_wake_event = jiffies;
1342 pm->stats.doze_time += pm->stats.last_wake_event -
1343 pm->stats.last_doze_event;
1344 out:
1345 return err;
1346 }
1347
mt7921_mcu_drv_pmctrl(struct mt7921_dev * dev)1348 int mt7921_mcu_drv_pmctrl(struct mt7921_dev *dev)
1349 {
1350 struct mt76_phy *mphy = &dev->mt76.phy;
1351 struct mt76_connac_pm *pm = &dev->pm;
1352 int err = 0;
1353
1354 mutex_lock(&pm->mutex);
1355
1356 if (!test_bit(MT76_STATE_PM, &mphy->state))
1357 goto out;
1358
1359 err = __mt7921_mcu_drv_pmctrl(dev);
1360 out:
1361 mutex_unlock(&pm->mutex);
1362
1363 if (err)
1364 mt7921_reset(&dev->mt76);
1365
1366 return err;
1367 }
1368
mt7921_mcu_fw_pmctrl(struct mt7921_dev * dev)1369 int mt7921_mcu_fw_pmctrl(struct mt7921_dev *dev)
1370 {
1371 struct mt76_phy *mphy = &dev->mt76.phy;
1372 struct mt76_connac_pm *pm = &dev->pm;
1373 int i, err = 0;
1374
1375 mutex_lock(&pm->mutex);
1376
1377 if (mt76_connac_skip_fw_pmctrl(mphy, pm))
1378 goto out;
1379
1380 for (i = 0; i < MT7921_DRV_OWN_RETRY_COUNT; i++) {
1381 mt76_wr(dev, MT_CONN_ON_LPCTL, PCIE_LPCR_HOST_SET_OWN);
1382 if (mt76_poll_msec(dev, MT_CONN_ON_LPCTL,
1383 PCIE_LPCR_HOST_OWN_SYNC, 4, 50))
1384 break;
1385 }
1386
1387 if (i == MT7921_DRV_OWN_RETRY_COUNT) {
1388 dev_err(dev->mt76.dev, "firmware own failed\n");
1389 clear_bit(MT76_STATE_PM, &mphy->state);
1390 err = -EIO;
1391 }
1392
1393 pm->stats.last_doze_event = jiffies;
1394 pm->stats.awake_time += pm->stats.last_doze_event -
1395 pm->stats.last_wake_event;
1396 out:
1397 mutex_unlock(&pm->mutex);
1398
1399 if (err)
1400 mt7921_reset(&dev->mt76);
1401
1402 return err;
1403 }
1404
mt7921_mcu_set_beacon_filter(struct mt7921_dev * dev,struct ieee80211_vif * vif,bool enable)1405 int mt7921_mcu_set_beacon_filter(struct mt7921_dev *dev,
1406 struct ieee80211_vif *vif,
1407 bool enable)
1408 {
1409 struct ieee80211_hw *hw = mt76_hw(dev);
1410 int err;
1411
1412 if (enable) {
1413 err = mt7921_mcu_uni_bss_bcnft(dev, vif, true);
1414 if (err)
1415 return err;
1416
1417 vif->driver_flags |= IEEE80211_VIF_BEACON_FILTER;
1418 ieee80211_hw_set(hw, CONNECTION_MONITOR);
1419 mt76_set(dev, MT_WF_RFCR(0), MT_WF_RFCR_DROP_OTHER_BEACON);
1420
1421 return 0;
1422 }
1423
1424 err = mt7921_mcu_set_bss_pm(dev, vif, false);
1425 if (err)
1426 return err;
1427
1428 vif->driver_flags &= ~IEEE80211_VIF_BEACON_FILTER;
1429 __clear_bit(IEEE80211_HW_CONNECTION_MONITOR, hw->flags);
1430 mt76_clear(dev, MT_WF_RFCR(0), MT_WF_RFCR_DROP_OTHER_BEACON);
1431
1432 return 0;
1433 }
1434
mt7921_get_txpwr_info(struct mt7921_dev * dev,struct mt7921_txpwr * txpwr)1435 int mt7921_get_txpwr_info(struct mt7921_dev *dev, struct mt7921_txpwr *txpwr)
1436 {
1437 struct mt7921_txpwr_event *event;
1438 struct mt7921_txpwr_req req = {
1439 .dbdc_idx = 0,
1440 };
1441 struct sk_buff *skb;
1442 int ret;
1443
1444 ret = mt76_mcu_send_and_get_msg(&dev->mt76, MCU_CMD_GET_TXPWR,
1445 &req, sizeof(req), true, &skb);
1446 if (ret)
1447 return ret;
1448
1449 event = (struct mt7921_txpwr_event *)skb->data;
1450 WARN_ON(skb->len != le16_to_cpu(event->len));
1451 memcpy(txpwr, &event->txpwr, sizeof(event->txpwr));
1452
1453 dev_kfree_skb(skb);
1454
1455 return 0;
1456 }
1457