linux/drivers/net/wireless/mediatek/mt76/mt7603/mac.c
<<
>>
Prefs
   1// SPDX-License-Identifier: ISC
   2
   3#include <linux/etherdevice.h>
   4#include <linux/timekeeping.h>
   5#include "mt7603.h"
   6#include "mac.h"
   7#include "../trace.h"
   8
   9#define MT_PSE_PAGE_SIZE        128
  10
  11static u32
  12mt7603_ac_queue_mask0(u32 mask)
  13{
  14        u32 ret = 0;
  15
  16        ret |= GENMASK(3, 0) * !!(mask & BIT(0));
  17        ret |= GENMASK(8, 5) * !!(mask & BIT(1));
  18        ret |= GENMASK(13, 10) * !!(mask & BIT(2));
  19        ret |= GENMASK(19, 16) * !!(mask & BIT(3));
  20        return ret;
  21}
  22
  23static void
  24mt76_stop_tx_ac(struct mt7603_dev *dev, u32 mask)
  25{
  26        mt76_set(dev, MT_WF_ARB_TX_STOP_0, mt7603_ac_queue_mask0(mask));
  27}
  28
  29static void
  30mt76_start_tx_ac(struct mt7603_dev *dev, u32 mask)
  31{
  32        mt76_set(dev, MT_WF_ARB_TX_START_0, mt7603_ac_queue_mask0(mask));
  33}
  34
  35void mt7603_mac_reset_counters(struct mt7603_dev *dev)
  36{
  37        int i;
  38
  39        for (i = 0; i < 2; i++)
  40                mt76_rr(dev, MT_TX_AGG_CNT(i));
  41
  42        memset(dev->mt76.aggr_stats, 0, sizeof(dev->mt76.aggr_stats));
  43}
  44
  45void mt7603_mac_set_timing(struct mt7603_dev *dev)
  46{
  47        u32 cck = FIELD_PREP(MT_TIMEOUT_VAL_PLCP, 231) |
  48                  FIELD_PREP(MT_TIMEOUT_VAL_CCA, 48);
  49        u32 ofdm = FIELD_PREP(MT_TIMEOUT_VAL_PLCP, 60) |
  50                   FIELD_PREP(MT_TIMEOUT_VAL_CCA, 24);
  51        int offset = 3 * dev->coverage_class;
  52        u32 reg_offset = FIELD_PREP(MT_TIMEOUT_VAL_PLCP, offset) |
  53                         FIELD_PREP(MT_TIMEOUT_VAL_CCA, offset);
  54        bool is_5ghz = dev->mphy.chandef.chan->band == NL80211_BAND_5GHZ;
  55        int sifs;
  56        u32 val;
  57
  58        if (is_5ghz)
  59                sifs = 16;
  60        else
  61                sifs = 10;
  62
  63        mt76_set(dev, MT_ARB_SCR,
  64                 MT_ARB_SCR_TX_DISABLE | MT_ARB_SCR_RX_DISABLE);
  65        udelay(1);
  66
  67        mt76_wr(dev, MT_TIMEOUT_CCK, cck + reg_offset);
  68        mt76_wr(dev, MT_TIMEOUT_OFDM, ofdm + reg_offset);
  69        mt76_wr(dev, MT_IFS,
  70                FIELD_PREP(MT_IFS_EIFS, 360) |
  71                FIELD_PREP(MT_IFS_RIFS, 2) |
  72                FIELD_PREP(MT_IFS_SIFS, sifs) |
  73                FIELD_PREP(MT_IFS_SLOT, dev->slottime));
  74
  75        if (dev->slottime < 20 || is_5ghz)
  76                val = MT7603_CFEND_RATE_DEFAULT;
  77        else
  78                val = MT7603_CFEND_RATE_11B;
  79
  80        mt76_rmw_field(dev, MT_AGG_CONTROL, MT_AGG_CONTROL_CFEND_RATE, val);
  81
  82        mt76_clear(dev, MT_ARB_SCR,
  83                   MT_ARB_SCR_TX_DISABLE | MT_ARB_SCR_RX_DISABLE);
  84}
  85
  86static void
  87mt7603_wtbl_update(struct mt7603_dev *dev, int idx, u32 mask)
  88{
  89        mt76_rmw(dev, MT_WTBL_UPDATE, MT_WTBL_UPDATE_WLAN_IDX,
  90                 FIELD_PREP(MT_WTBL_UPDATE_WLAN_IDX, idx) | mask);
  91
  92        mt76_poll(dev, MT_WTBL_UPDATE, MT_WTBL_UPDATE_BUSY, 0, 5000);
  93}
  94
  95static u32
  96mt7603_wtbl1_addr(int idx)
  97{
  98        return MT_WTBL1_BASE + idx * MT_WTBL1_SIZE;
  99}
 100
 101static u32
 102mt7603_wtbl2_addr(int idx)
 103{
 104        /* Mapped to WTBL2 */
 105        return MT_PCIE_REMAP_BASE_1 + idx * MT_WTBL2_SIZE;
 106}
 107
 108static u32
 109mt7603_wtbl3_addr(int idx)
 110{
 111        u32 base = mt7603_wtbl2_addr(MT7603_WTBL_SIZE);
 112
 113        return base + idx * MT_WTBL3_SIZE;
 114}
 115
 116static u32
 117mt7603_wtbl4_addr(int idx)
 118{
 119        u32 base = mt7603_wtbl3_addr(MT7603_WTBL_SIZE);
 120
 121        return base + idx * MT_WTBL4_SIZE;
 122}
 123
 124void mt7603_wtbl_init(struct mt7603_dev *dev, int idx, int vif,
 125                      const u8 *mac_addr)
 126{
 127        const void *_mac = mac_addr;
 128        u32 addr = mt7603_wtbl1_addr(idx);
 129        u32 w0 = 0, w1 = 0;
 130        int i;
 131
 132        if (_mac) {
 133                w0 = FIELD_PREP(MT_WTBL1_W0_ADDR_HI,
 134                                get_unaligned_le16(_mac + 4));
 135                w1 = FIELD_PREP(MT_WTBL1_W1_ADDR_LO,
 136                                get_unaligned_le32(_mac));
 137        }
 138
 139        if (vif < 0)
 140                vif = 0;
 141        else
 142                w0 |= MT_WTBL1_W0_RX_CHECK_A1;
 143        w0 |= FIELD_PREP(MT_WTBL1_W0_MUAR_IDX, vif);
 144
 145        mt76_poll(dev, MT_WTBL_UPDATE, MT_WTBL_UPDATE_BUSY, 0, 5000);
 146
 147        mt76_set(dev, addr + 0 * 4, w0);
 148        mt76_set(dev, addr + 1 * 4, w1);
 149        mt76_set(dev, addr + 2 * 4, MT_WTBL1_W2_ADMISSION_CONTROL);
 150
 151        mt76_stop_tx_ac(dev, GENMASK(3, 0));
 152        addr = mt7603_wtbl2_addr(idx);
 153        for (i = 0; i < MT_WTBL2_SIZE; i += 4)
 154                mt76_wr(dev, addr + i, 0);
 155        mt7603_wtbl_update(dev, idx, MT_WTBL_UPDATE_WTBL2);
 156        mt76_start_tx_ac(dev, GENMASK(3, 0));
 157
 158        addr = mt7603_wtbl3_addr(idx);
 159        for (i = 0; i < MT_WTBL3_SIZE; i += 4)
 160                mt76_wr(dev, addr + i, 0);
 161
 162        addr = mt7603_wtbl4_addr(idx);
 163        for (i = 0; i < MT_WTBL4_SIZE; i += 4)
 164                mt76_wr(dev, addr + i, 0);
 165
 166        mt7603_wtbl_update(dev, idx, MT_WTBL_UPDATE_ADM_COUNT_CLEAR);
 167}
 168
 169static void
 170mt7603_wtbl_set_skip_tx(struct mt7603_dev *dev, int idx, bool enabled)
 171{
 172        u32 addr = mt7603_wtbl1_addr(idx);
 173        u32 val = mt76_rr(dev, addr + 3 * 4);
 174
 175        val &= ~MT_WTBL1_W3_SKIP_TX;
 176        val |= enabled * MT_WTBL1_W3_SKIP_TX;
 177
 178        mt76_wr(dev, addr + 3 * 4, val);
 179}
 180
 181void mt7603_filter_tx(struct mt7603_dev *dev, int idx, bool abort)
 182{
 183        int i, port, queue;
 184
 185        if (abort) {
 186                port = 3; /* PSE */
 187                queue = 8; /* free queue */
 188        } else {
 189                port = 0; /* HIF */
 190                queue = 1; /* MCU queue */
 191        }
 192
 193        mt7603_wtbl_set_skip_tx(dev, idx, true);
 194
 195        mt76_wr(dev, MT_TX_ABORT, MT_TX_ABORT_EN |
 196                        FIELD_PREP(MT_TX_ABORT_WCID, idx));
 197
 198        for (i = 0; i < 4; i++) {
 199                mt76_wr(dev, MT_DMA_FQCR0, MT_DMA_FQCR0_BUSY |
 200                        FIELD_PREP(MT_DMA_FQCR0_TARGET_WCID, idx) |
 201                        FIELD_PREP(MT_DMA_FQCR0_TARGET_QID, i) |
 202                        FIELD_PREP(MT_DMA_FQCR0_DEST_PORT_ID, port) |
 203                        FIELD_PREP(MT_DMA_FQCR0_DEST_QUEUE_ID, queue));
 204
 205                WARN_ON_ONCE(!mt76_poll(dev, MT_DMA_FQCR0, MT_DMA_FQCR0_BUSY,
 206                                        0, 5000));
 207        }
 208
 209        mt76_wr(dev, MT_TX_ABORT, 0);
 210
 211        mt7603_wtbl_set_skip_tx(dev, idx, false);
 212}
 213
 214void mt7603_wtbl_set_smps(struct mt7603_dev *dev, struct mt7603_sta *sta,
 215                          bool enabled)
 216{
 217        u32 addr = mt7603_wtbl1_addr(sta->wcid.idx);
 218
 219        if (sta->smps == enabled)
 220                return;
 221
 222        mt76_rmw_field(dev, addr + 2 * 4, MT_WTBL1_W2_SMPS, enabled);
 223        sta->smps = enabled;
 224}
 225
 226void mt7603_wtbl_set_ps(struct mt7603_dev *dev, struct mt7603_sta *sta,
 227                        bool enabled)
 228{
 229        int idx = sta->wcid.idx;
 230        u32 addr;
 231
 232        spin_lock_bh(&dev->ps_lock);
 233
 234        if (sta->ps == enabled)
 235                goto out;
 236
 237        mt76_wr(dev, MT_PSE_RTA,
 238                FIELD_PREP(MT_PSE_RTA_TAG_ID, idx) |
 239                FIELD_PREP(MT_PSE_RTA_PORT_ID, 0) |
 240                FIELD_PREP(MT_PSE_RTA_QUEUE_ID, 1) |
 241                FIELD_PREP(MT_PSE_RTA_REDIRECT_EN, enabled) |
 242                MT_PSE_RTA_WRITE | MT_PSE_RTA_BUSY);
 243
 244        mt76_poll(dev, MT_PSE_RTA, MT_PSE_RTA_BUSY, 0, 5000);
 245
 246        if (enabled)
 247                mt7603_filter_tx(dev, idx, false);
 248
 249        addr = mt7603_wtbl1_addr(idx);
 250        mt76_set(dev, MT_WTBL1_OR, MT_WTBL1_OR_PSM_WRITE);
 251        mt76_rmw(dev, addr + 3 * 4, MT_WTBL1_W3_POWER_SAVE,
 252                 enabled * MT_WTBL1_W3_POWER_SAVE);
 253        mt76_clear(dev, MT_WTBL1_OR, MT_WTBL1_OR_PSM_WRITE);
 254        sta->ps = enabled;
 255
 256out:
 257        spin_unlock_bh(&dev->ps_lock);
 258}
 259
 260void mt7603_wtbl_clear(struct mt7603_dev *dev, int idx)
 261{
 262        int wtbl2_frame_size = MT_PSE_PAGE_SIZE / MT_WTBL2_SIZE;
 263        int wtbl2_frame = idx / wtbl2_frame_size;
 264        int wtbl2_entry = idx % wtbl2_frame_size;
 265
 266        int wtbl3_base_frame = MT_WTBL3_OFFSET / MT_PSE_PAGE_SIZE;
 267        int wtbl3_frame_size = MT_PSE_PAGE_SIZE / MT_WTBL3_SIZE;
 268        int wtbl3_frame = wtbl3_base_frame + idx / wtbl3_frame_size;
 269        int wtbl3_entry = (idx % wtbl3_frame_size) * 2;
 270
 271        int wtbl4_base_frame = MT_WTBL4_OFFSET / MT_PSE_PAGE_SIZE;
 272        int wtbl4_frame_size = MT_PSE_PAGE_SIZE / MT_WTBL4_SIZE;
 273        int wtbl4_frame = wtbl4_base_frame + idx / wtbl4_frame_size;
 274        int wtbl4_entry = idx % wtbl4_frame_size;
 275
 276        u32 addr = MT_WTBL1_BASE + idx * MT_WTBL1_SIZE;
 277        int i;
 278
 279        mt76_poll(dev, MT_WTBL_UPDATE, MT_WTBL_UPDATE_BUSY, 0, 5000);
 280
 281        mt76_wr(dev, addr + 0 * 4,
 282                MT_WTBL1_W0_RX_CHECK_A1 |
 283                MT_WTBL1_W0_RX_CHECK_A2 |
 284                MT_WTBL1_W0_RX_VALID);
 285        mt76_wr(dev, addr + 1 * 4, 0);
 286        mt76_wr(dev, addr + 2 * 4, 0);
 287
 288        mt76_set(dev, MT_WTBL1_OR, MT_WTBL1_OR_PSM_WRITE);
 289
 290        mt76_wr(dev, addr + 3 * 4,
 291                FIELD_PREP(MT_WTBL1_W3_WTBL2_FRAME_ID, wtbl2_frame) |
 292                FIELD_PREP(MT_WTBL1_W3_WTBL2_ENTRY_ID, wtbl2_entry) |
 293                FIELD_PREP(MT_WTBL1_W3_WTBL4_FRAME_ID, wtbl4_frame) |
 294                MT_WTBL1_W3_I_PSM | MT_WTBL1_W3_KEEP_I_PSM);
 295        mt76_wr(dev, addr + 4 * 4,
 296                FIELD_PREP(MT_WTBL1_W4_WTBL3_FRAME_ID, wtbl3_frame) |
 297                FIELD_PREP(MT_WTBL1_W4_WTBL3_ENTRY_ID, wtbl3_entry) |
 298                FIELD_PREP(MT_WTBL1_W4_WTBL4_ENTRY_ID, wtbl4_entry));
 299
 300        mt76_clear(dev, MT_WTBL1_OR, MT_WTBL1_OR_PSM_WRITE);
 301
 302        addr = mt7603_wtbl2_addr(idx);
 303
 304        /* Clear BA information */
 305        mt76_wr(dev, addr + (15 * 4), 0);
 306
 307        mt76_stop_tx_ac(dev, GENMASK(3, 0));
 308        for (i = 2; i <= 4; i++)
 309                mt76_wr(dev, addr + (i * 4), 0);
 310        mt7603_wtbl_update(dev, idx, MT_WTBL_UPDATE_WTBL2);
 311        mt76_start_tx_ac(dev, GENMASK(3, 0));
 312
 313        mt7603_wtbl_update(dev, idx, MT_WTBL_UPDATE_RX_COUNT_CLEAR);
 314        mt7603_wtbl_update(dev, idx, MT_WTBL_UPDATE_TX_COUNT_CLEAR);
 315        mt7603_wtbl_update(dev, idx, MT_WTBL_UPDATE_ADM_COUNT_CLEAR);
 316}
 317
 318void mt7603_wtbl_update_cap(struct mt7603_dev *dev, struct ieee80211_sta *sta)
 319{
 320        struct mt7603_sta *msta = (struct mt7603_sta *)sta->drv_priv;
 321        int idx = msta->wcid.idx;
 322        u8 ampdu_density;
 323        u32 addr;
 324        u32 val;
 325
 326        addr = mt7603_wtbl1_addr(idx);
 327
 328        ampdu_density = sta->ht_cap.ampdu_density;
 329        if (ampdu_density < IEEE80211_HT_MPDU_DENSITY_4)
 330                ampdu_density = IEEE80211_HT_MPDU_DENSITY_4;
 331
 332        val = mt76_rr(dev, addr + 2 * 4);
 333        val &= MT_WTBL1_W2_KEY_TYPE | MT_WTBL1_W2_ADMISSION_CONTROL;
 334        val |= FIELD_PREP(MT_WTBL1_W2_AMPDU_FACTOR, sta->ht_cap.ampdu_factor) |
 335               FIELD_PREP(MT_WTBL1_W2_MPDU_DENSITY, sta->ht_cap.ampdu_density) |
 336               MT_WTBL1_W2_TXS_BAF_REPORT;
 337
 338        if (sta->ht_cap.cap)
 339                val |= MT_WTBL1_W2_HT;
 340        if (sta->vht_cap.cap)
 341                val |= MT_WTBL1_W2_VHT;
 342
 343        mt76_wr(dev, addr + 2 * 4, val);
 344
 345        addr = mt7603_wtbl2_addr(idx);
 346        val = mt76_rr(dev, addr + 9 * 4);
 347        val &= ~(MT_WTBL2_W9_SHORT_GI_20 | MT_WTBL2_W9_SHORT_GI_40 |
 348                 MT_WTBL2_W9_SHORT_GI_80);
 349        if (sta->ht_cap.cap & IEEE80211_HT_CAP_SGI_20)
 350                val |= MT_WTBL2_W9_SHORT_GI_20;
 351        if (sta->ht_cap.cap & IEEE80211_HT_CAP_SGI_40)
 352                val |= MT_WTBL2_W9_SHORT_GI_40;
 353        mt76_wr(dev, addr + 9 * 4, val);
 354}
 355
 356void mt7603_mac_rx_ba_reset(struct mt7603_dev *dev, void *addr, u8 tid)
 357{
 358        mt76_wr(dev, MT_BA_CONTROL_0, get_unaligned_le32(addr));
 359        mt76_wr(dev, MT_BA_CONTROL_1,
 360                (get_unaligned_le16(addr + 4) |
 361                 FIELD_PREP(MT_BA_CONTROL_1_TID, tid) |
 362                 MT_BA_CONTROL_1_RESET));
 363}
 364
 365void mt7603_mac_tx_ba_reset(struct mt7603_dev *dev, int wcid, int tid,
 366                            int ba_size)
 367{
 368        u32 addr = mt7603_wtbl2_addr(wcid);
 369        u32 tid_mask = FIELD_PREP(MT_WTBL2_W15_BA_EN_TIDS, BIT(tid)) |
 370                       (MT_WTBL2_W15_BA_WIN_SIZE <<
 371                        (tid * MT_WTBL2_W15_BA_WIN_SIZE_SHIFT));
 372        u32 tid_val;
 373        int i;
 374
 375        if (ba_size < 0) {
 376                /* disable */
 377                mt76_clear(dev, addr + (15 * 4), tid_mask);
 378                return;
 379        }
 380
 381        for (i = 7; i > 0; i--) {
 382                if (ba_size >= MT_AGG_SIZE_LIMIT(i))
 383                        break;
 384        }
 385
 386        tid_val = FIELD_PREP(MT_WTBL2_W15_BA_EN_TIDS, BIT(tid)) |
 387                  i << (tid * MT_WTBL2_W15_BA_WIN_SIZE_SHIFT);
 388
 389        mt76_rmw(dev, addr + (15 * 4), tid_mask, tid_val);
 390}
 391
 392void mt7603_mac_sta_poll(struct mt7603_dev *dev)
 393{
 394        static const u8 ac_to_tid[4] = {
 395                [IEEE80211_AC_BE] = 0,
 396                [IEEE80211_AC_BK] = 1,
 397                [IEEE80211_AC_VI] = 4,
 398                [IEEE80211_AC_VO] = 6
 399        };
 400        struct ieee80211_sta *sta;
 401        struct mt7603_sta *msta;
 402        u32 total_airtime = 0;
 403        u32 airtime[4];
 404        u32 addr;
 405        int i;
 406
 407        rcu_read_lock();
 408
 409        while (1) {
 410                bool clear = false;
 411
 412                spin_lock_bh(&dev->sta_poll_lock);
 413                if (list_empty(&dev->sta_poll_list)) {
 414                        spin_unlock_bh(&dev->sta_poll_lock);
 415                        break;
 416                }
 417
 418                msta = list_first_entry(&dev->sta_poll_list, struct mt7603_sta,
 419                                        poll_list);
 420                list_del_init(&msta->poll_list);
 421                spin_unlock_bh(&dev->sta_poll_lock);
 422
 423                addr = mt7603_wtbl4_addr(msta->wcid.idx);
 424                for (i = 0; i < 4; i++) {
 425                        u32 airtime_last = msta->tx_airtime_ac[i];
 426
 427                        msta->tx_airtime_ac[i] = mt76_rr(dev, addr + i * 8);
 428                        airtime[i] = msta->tx_airtime_ac[i] - airtime_last;
 429                        airtime[i] *= 32;
 430                        total_airtime += airtime[i];
 431
 432                        if (msta->tx_airtime_ac[i] & BIT(22))
 433                                clear = true;
 434                }
 435
 436                if (clear) {
 437                        mt7603_wtbl_update(dev, msta->wcid.idx,
 438                                           MT_WTBL_UPDATE_ADM_COUNT_CLEAR);
 439                        memset(msta->tx_airtime_ac, 0,
 440                               sizeof(msta->tx_airtime_ac));
 441                }
 442
 443                if (!msta->wcid.sta)
 444                        continue;
 445
 446                sta = container_of((void *)msta, struct ieee80211_sta, drv_priv);
 447                for (i = 0; i < 4; i++) {
 448                        struct mt76_queue *q = dev->mt76.q_tx[i].q;
 449                        u8 qidx = q->hw_idx;
 450                        u8 tid = ac_to_tid[i];
 451                        u32 txtime = airtime[qidx];
 452
 453                        if (!txtime)
 454                                continue;
 455
 456                        ieee80211_sta_register_airtime(sta, tid, txtime, 0);
 457                }
 458        }
 459
 460        rcu_read_unlock();
 461
 462        if (!total_airtime)
 463                return;
 464
 465        spin_lock_bh(&dev->mt76.cc_lock);
 466        dev->mphy.chan_state->cc_tx += total_airtime;
 467        spin_unlock_bh(&dev->mt76.cc_lock);
 468}
 469
 470static struct mt76_wcid *
 471mt7603_rx_get_wcid(struct mt7603_dev *dev, u8 idx, bool unicast)
 472{
 473        struct mt7603_sta *sta;
 474        struct mt76_wcid *wcid;
 475
 476        if (idx >= MT7603_WTBL_SIZE)
 477                return NULL;
 478
 479        wcid = rcu_dereference(dev->mt76.wcid[idx]);
 480        if (unicast || !wcid)
 481                return wcid;
 482
 483        if (!wcid->sta)
 484                return NULL;
 485
 486        sta = container_of(wcid, struct mt7603_sta, wcid);
 487        if (!sta->vif)
 488                return NULL;
 489
 490        return &sta->vif->sta.wcid;
 491}
 492
 493int
 494mt7603_mac_fill_rx(struct mt7603_dev *dev, struct sk_buff *skb)
 495{
 496        struct mt76_rx_status *status = (struct mt76_rx_status *)skb->cb;
 497        struct ieee80211_supported_band *sband;
 498        struct ieee80211_hdr *hdr;
 499        __le32 *rxd = (__le32 *)skb->data;
 500        u32 rxd0 = le32_to_cpu(rxd[0]);
 501        u32 rxd1 = le32_to_cpu(rxd[1]);
 502        u32 rxd2 = le32_to_cpu(rxd[2]);
 503        bool unicast = rxd1 & MT_RXD1_NORMAL_U2M;
 504        bool insert_ccmp_hdr = false;
 505        bool remove_pad;
 506        int idx;
 507        int i;
 508
 509        memset(status, 0, sizeof(*status));
 510
 511        i = FIELD_GET(MT_RXD1_NORMAL_CH_FREQ, rxd1);
 512        sband = (i & 1) ? &dev->mphy.sband_5g.sband : &dev->mphy.sband_2g.sband;
 513        i >>= 1;
 514
 515        idx = FIELD_GET(MT_RXD2_NORMAL_WLAN_IDX, rxd2);
 516        status->wcid = mt7603_rx_get_wcid(dev, idx, unicast);
 517
 518        status->band = sband->band;
 519        if (i < sband->n_channels)
 520                status->freq = sband->channels[i].center_freq;
 521
 522        if (rxd2 & MT_RXD2_NORMAL_FCS_ERR)
 523                status->flag |= RX_FLAG_FAILED_FCS_CRC;
 524
 525        if (rxd2 & MT_RXD2_NORMAL_TKIP_MIC_ERR)
 526                status->flag |= RX_FLAG_MMIC_ERROR;
 527
 528        if (FIELD_GET(MT_RXD2_NORMAL_SEC_MODE, rxd2) != 0 &&
 529            !(rxd2 & (MT_RXD2_NORMAL_CLM | MT_RXD2_NORMAL_CM))) {
 530                status->flag |= RX_FLAG_DECRYPTED;
 531                status->flag |= RX_FLAG_IV_STRIPPED;
 532                status->flag |= RX_FLAG_MMIC_STRIPPED | RX_FLAG_MIC_STRIPPED;
 533        }
 534
 535        if (!(rxd2 & (MT_RXD2_NORMAL_NON_AMPDU_SUB |
 536                      MT_RXD2_NORMAL_NON_AMPDU))) {
 537                status->flag |= RX_FLAG_AMPDU_DETAILS;
 538
 539                /* all subframes of an A-MPDU have the same timestamp */
 540                if (dev->rx_ampdu_ts != rxd[12]) {
 541                        if (!++dev->ampdu_ref)
 542                                dev->ampdu_ref++;
 543                }
 544                dev->rx_ampdu_ts = rxd[12];
 545
 546                status->ampdu_ref = dev->ampdu_ref;
 547        }
 548
 549        remove_pad = rxd1 & MT_RXD1_NORMAL_HDR_OFFSET;
 550
 551        if (rxd2 & MT_RXD2_NORMAL_MAX_LEN_ERROR)
 552                return -EINVAL;
 553
 554        if (!sband->channels)
 555                return -EINVAL;
 556
 557        rxd += 4;
 558        if (rxd0 & MT_RXD0_NORMAL_GROUP_4) {
 559                rxd += 4;
 560                if ((u8 *)rxd - skb->data >= skb->len)
 561                        return -EINVAL;
 562        }
 563        if (rxd0 & MT_RXD0_NORMAL_GROUP_1) {
 564                u8 *data = (u8 *)rxd;
 565
 566                if (status->flag & RX_FLAG_DECRYPTED) {
 567                        status->iv[0] = data[5];
 568                        status->iv[1] = data[4];
 569                        status->iv[2] = data[3];
 570                        status->iv[3] = data[2];
 571                        status->iv[4] = data[1];
 572                        status->iv[5] = data[0];
 573
 574                        insert_ccmp_hdr = FIELD_GET(MT_RXD2_NORMAL_FRAG, rxd2);
 575                }
 576
 577                rxd += 4;
 578                if ((u8 *)rxd - skb->data >= skb->len)
 579                        return -EINVAL;
 580        }
 581        if (rxd0 & MT_RXD0_NORMAL_GROUP_2) {
 582                rxd += 2;
 583                if ((u8 *)rxd - skb->data >= skb->len)
 584                        return -EINVAL;
 585        }
 586        if (rxd0 & MT_RXD0_NORMAL_GROUP_3) {
 587                u32 rxdg0 = le32_to_cpu(rxd[0]);
 588                u32 rxdg3 = le32_to_cpu(rxd[3]);
 589                bool cck = false;
 590
 591                i = FIELD_GET(MT_RXV1_TX_RATE, rxdg0);
 592                switch (FIELD_GET(MT_RXV1_TX_MODE, rxdg0)) {
 593                case MT_PHY_TYPE_CCK:
 594                        cck = true;
 595                        /* fall through */
 596                case MT_PHY_TYPE_OFDM:
 597                        i = mt76_get_rate(&dev->mt76, sband, i, cck);
 598                        break;
 599                case MT_PHY_TYPE_HT_GF:
 600                case MT_PHY_TYPE_HT:
 601                        status->encoding = RX_ENC_HT;
 602                        if (i > 15)
 603                                return -EINVAL;
 604                        break;
 605                default:
 606                        return -EINVAL;
 607                }
 608
 609                if (rxdg0 & MT_RXV1_HT_SHORT_GI)
 610                        status->enc_flags |= RX_ENC_FLAG_SHORT_GI;
 611                if (rxdg0 & MT_RXV1_HT_AD_CODE)
 612                        status->enc_flags |= RX_ENC_FLAG_LDPC;
 613
 614                status->enc_flags |= RX_ENC_FLAG_STBC_MASK *
 615                                    FIELD_GET(MT_RXV1_HT_STBC, rxdg0);
 616
 617                status->rate_idx = i;
 618
 619                status->chains = dev->mphy.antenna_mask;
 620                status->chain_signal[0] = FIELD_GET(MT_RXV4_IB_RSSI0, rxdg3) +
 621                                          dev->rssi_offset[0];
 622                status->chain_signal[1] = FIELD_GET(MT_RXV4_IB_RSSI1, rxdg3) +
 623                                          dev->rssi_offset[1];
 624
 625                status->signal = status->chain_signal[0];
 626                if (status->chains & BIT(1))
 627                        status->signal = max(status->signal,
 628                                             status->chain_signal[1]);
 629
 630                if (FIELD_GET(MT_RXV1_FRAME_MODE, rxdg0) == 1)
 631                        status->bw = RATE_INFO_BW_40;
 632
 633                rxd += 6;
 634                if ((u8 *)rxd - skb->data >= skb->len)
 635                        return -EINVAL;
 636        } else {
 637                return -EINVAL;
 638        }
 639
 640        skb_pull(skb, (u8 *)rxd - skb->data + 2 * remove_pad);
 641
 642        if (insert_ccmp_hdr) {
 643                u8 key_id = FIELD_GET(MT_RXD1_NORMAL_KEY_ID, rxd1);
 644
 645                mt76_insert_ccmp_hdr(skb, key_id);
 646        }
 647
 648        hdr = (struct ieee80211_hdr *)skb->data;
 649        if (!status->wcid || !ieee80211_is_data_qos(hdr->frame_control))
 650                return 0;
 651
 652        status->aggr = unicast &&
 653                       !ieee80211_is_qos_nullfunc(hdr->frame_control);
 654        status->tid = *ieee80211_get_qos_ctl(hdr) & IEEE80211_QOS_CTL_TID_MASK;
 655        status->seqno = IEEE80211_SEQ_TO_SN(le16_to_cpu(hdr->seq_ctrl));
 656
 657        return 0;
 658}
 659
 660static u16
 661mt7603_mac_tx_rate_val(struct mt7603_dev *dev,
 662                       const struct ieee80211_tx_rate *rate, bool stbc, u8 *bw)
 663{
 664        u8 phy, nss, rate_idx;
 665        u16 rateval;
 666
 667        *bw = 0;
 668        if (rate->flags & IEEE80211_TX_RC_MCS) {
 669                rate_idx = rate->idx;
 670                nss = 1 + (rate->idx >> 3);
 671                phy = MT_PHY_TYPE_HT;
 672                if (rate->flags & IEEE80211_TX_RC_GREEN_FIELD)
 673                        phy = MT_PHY_TYPE_HT_GF;
 674                if (rate->flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
 675                        *bw = 1;
 676        } else {
 677                const struct ieee80211_rate *r;
 678                int band = dev->mphy.chandef.chan->band;
 679                u16 val;
 680
 681                nss = 1;
 682                r = &mt76_hw(dev)->wiphy->bands[band]->bitrates[rate->idx];
 683                if (rate->flags & IEEE80211_TX_RC_USE_SHORT_PREAMBLE)
 684                        val = r->hw_value_short;
 685                else
 686                        val = r->hw_value;
 687
 688                phy = val >> 8;
 689                rate_idx = val & 0xff;
 690        }
 691
 692        rateval = (FIELD_PREP(MT_TX_RATE_IDX, rate_idx) |
 693                   FIELD_PREP(MT_TX_RATE_MODE, phy));
 694
 695        if (stbc && nss == 1)
 696                rateval |= MT_TX_RATE_STBC;
 697
 698        return rateval;
 699}
 700
 701void mt7603_wtbl_set_rates(struct mt7603_dev *dev, struct mt7603_sta *sta,
 702                           struct ieee80211_tx_rate *probe_rate,
 703                           struct ieee80211_tx_rate *rates)
 704{
 705        struct ieee80211_tx_rate *ref;
 706        int wcid = sta->wcid.idx;
 707        u32 addr = mt7603_wtbl2_addr(wcid);
 708        bool stbc = false;
 709        int n_rates = sta->n_rates;
 710        u8 bw, bw_prev, bw_idx = 0;
 711        u16 val[4];
 712        u16 probe_val;
 713        u32 w9 = mt76_rr(dev, addr + 9 * 4);
 714        bool rateset;
 715        int i, k;
 716
 717        if (!mt76_poll(dev, MT_WTBL_UPDATE, MT_WTBL_UPDATE_BUSY, 0, 5000))
 718                return;
 719
 720        for (i = n_rates; i < 4; i++)
 721                rates[i] = rates[n_rates - 1];
 722
 723        rateset = !(sta->rate_set_tsf & BIT(0));
 724        memcpy(sta->rateset[rateset].rates, rates,
 725               sizeof(sta->rateset[rateset].rates));
 726        if (probe_rate) {
 727                sta->rateset[rateset].probe_rate = *probe_rate;
 728                ref = &sta->rateset[rateset].probe_rate;
 729        } else {
 730                sta->rateset[rateset].probe_rate.idx = -1;
 731                ref = &sta->rateset[rateset].rates[0];
 732        }
 733
 734        rates = sta->rateset[rateset].rates;
 735        for (i = 0; i < ARRAY_SIZE(sta->rateset[rateset].rates); i++) {
 736                /*
 737                 * We don't support switching between short and long GI
 738                 * within the rate set. For accurate tx status reporting, we
 739                 * need to make sure that flags match.
 740                 * For improved performance, avoid duplicate entries by
 741                 * decrementing the MCS index if necessary
 742                 */
 743                if ((ref->flags ^ rates[i].flags) & IEEE80211_TX_RC_SHORT_GI)
 744                        rates[i].flags ^= IEEE80211_TX_RC_SHORT_GI;
 745
 746                for (k = 0; k < i; k++) {
 747                        if (rates[i].idx != rates[k].idx)
 748                                continue;
 749                        if ((rates[i].flags ^ rates[k].flags) &
 750                            IEEE80211_TX_RC_40_MHZ_WIDTH)
 751                                continue;
 752
 753                        if (!rates[i].idx)
 754                                continue;
 755
 756                        rates[i].idx--;
 757                }
 758        }
 759
 760        w9 &= MT_WTBL2_W9_SHORT_GI_20 | MT_WTBL2_W9_SHORT_GI_40 |
 761              MT_WTBL2_W9_SHORT_GI_80;
 762
 763        val[0] = mt7603_mac_tx_rate_val(dev, &rates[0], stbc, &bw);
 764        bw_prev = bw;
 765
 766        if (probe_rate) {
 767                probe_val = mt7603_mac_tx_rate_val(dev, probe_rate, stbc, &bw);
 768                if (bw)
 769                        bw_idx = 1;
 770                else
 771                        bw_prev = 0;
 772        } else {
 773                probe_val = val[0];
 774        }
 775
 776        w9 |= FIELD_PREP(MT_WTBL2_W9_CC_BW_SEL, bw);
 777        w9 |= FIELD_PREP(MT_WTBL2_W9_BW_CAP, bw);
 778
 779        val[1] = mt7603_mac_tx_rate_val(dev, &rates[1], stbc, &bw);
 780        if (bw_prev) {
 781                bw_idx = 3;
 782                bw_prev = bw;
 783        }
 784
 785        val[2] = mt7603_mac_tx_rate_val(dev, &rates[2], stbc, &bw);
 786        if (bw_prev) {
 787                bw_idx = 5;
 788                bw_prev = bw;
 789        }
 790
 791        val[3] = mt7603_mac_tx_rate_val(dev, &rates[3], stbc, &bw);
 792        if (bw_prev)
 793                bw_idx = 7;
 794
 795        w9 |= FIELD_PREP(MT_WTBL2_W9_CHANGE_BW_RATE,
 796                       bw_idx ? bw_idx - 1 : 7);
 797
 798        mt76_wr(dev, MT_WTBL_RIUCR0, w9);
 799
 800        mt76_wr(dev, MT_WTBL_RIUCR1,
 801                FIELD_PREP(MT_WTBL_RIUCR1_RATE0, probe_val) |
 802                FIELD_PREP(MT_WTBL_RIUCR1_RATE1, val[0]) |
 803                FIELD_PREP(MT_WTBL_RIUCR1_RATE2_LO, val[1]));
 804
 805        mt76_wr(dev, MT_WTBL_RIUCR2,
 806                FIELD_PREP(MT_WTBL_RIUCR2_RATE2_HI, val[1] >> 8) |
 807                FIELD_PREP(MT_WTBL_RIUCR2_RATE3, val[1]) |
 808                FIELD_PREP(MT_WTBL_RIUCR2_RATE4, val[2]) |
 809                FIELD_PREP(MT_WTBL_RIUCR2_RATE5_LO, val[2]));
 810
 811        mt76_wr(dev, MT_WTBL_RIUCR3,
 812                FIELD_PREP(MT_WTBL_RIUCR3_RATE5_HI, val[2] >> 4) |
 813                FIELD_PREP(MT_WTBL_RIUCR3_RATE6, val[3]) |
 814                FIELD_PREP(MT_WTBL_RIUCR3_RATE7, val[3]));
 815
 816        mt76_set(dev, MT_LPON_T0CR, MT_LPON_T0CR_MODE); /* TSF read */
 817        sta->rate_set_tsf = (mt76_rr(dev, MT_LPON_UTTR0) & ~BIT(0)) | rateset;
 818
 819        mt76_wr(dev, MT_WTBL_UPDATE,
 820                FIELD_PREP(MT_WTBL_UPDATE_WLAN_IDX, wcid) |
 821                MT_WTBL_UPDATE_RATE_UPDATE |
 822                MT_WTBL_UPDATE_TX_COUNT_CLEAR);
 823
 824        if (!(sta->wcid.tx_info & MT_WCID_TX_INFO_SET))
 825                mt76_poll(dev, MT_WTBL_UPDATE, MT_WTBL_UPDATE_BUSY, 0, 5000);
 826
 827        sta->rate_count = 2 * MT7603_RATE_RETRY * n_rates;
 828        sta->wcid.tx_info |= MT_WCID_TX_INFO_SET;
 829}
 830
 831static enum mt7603_cipher_type
 832mt7603_mac_get_key_info(struct ieee80211_key_conf *key, u8 *key_data)
 833{
 834        memset(key_data, 0, 32);
 835        if (!key)
 836                return MT_CIPHER_NONE;
 837
 838        if (key->keylen > 32)
 839                return MT_CIPHER_NONE;
 840
 841        memcpy(key_data, key->key, key->keylen);
 842
 843        switch (key->cipher) {
 844        case WLAN_CIPHER_SUITE_WEP40:
 845                return MT_CIPHER_WEP40;
 846        case WLAN_CIPHER_SUITE_WEP104:
 847                return MT_CIPHER_WEP104;
 848        case WLAN_CIPHER_SUITE_TKIP:
 849                /* Rx/Tx MIC keys are swapped */
 850                memcpy(key_data + 16, key->key + 24, 8);
 851                memcpy(key_data + 24, key->key + 16, 8);
 852                return MT_CIPHER_TKIP;
 853        case WLAN_CIPHER_SUITE_CCMP:
 854                return MT_CIPHER_AES_CCMP;
 855        default:
 856                return MT_CIPHER_NONE;
 857        }
 858}
 859
 860int mt7603_wtbl_set_key(struct mt7603_dev *dev, int wcid,
 861                        struct ieee80211_key_conf *key)
 862{
 863        enum mt7603_cipher_type cipher;
 864        u32 addr = mt7603_wtbl3_addr(wcid);
 865        u8 key_data[32];
 866        int key_len = sizeof(key_data);
 867
 868        cipher = mt7603_mac_get_key_info(key, key_data);
 869        if (cipher == MT_CIPHER_NONE && key)
 870                return -EOPNOTSUPP;
 871
 872        if (key && (cipher == MT_CIPHER_WEP40 || cipher == MT_CIPHER_WEP104)) {
 873                addr += key->keyidx * 16;
 874                key_len = 16;
 875        }
 876
 877        mt76_wr_copy(dev, addr, key_data, key_len);
 878
 879        addr = mt7603_wtbl1_addr(wcid);
 880        mt76_rmw_field(dev, addr + 2 * 4, MT_WTBL1_W2_KEY_TYPE, cipher);
 881        if (key)
 882                mt76_rmw_field(dev, addr, MT_WTBL1_W0_KEY_IDX, key->keyidx);
 883        mt76_rmw_field(dev, addr, MT_WTBL1_W0_RX_KEY_VALID, !!key);
 884
 885        return 0;
 886}
 887
 888static int
 889mt7603_mac_write_txwi(struct mt7603_dev *dev, __le32 *txwi,
 890                      struct sk_buff *skb, enum mt76_txq_id qid,
 891                      struct mt76_wcid *wcid, struct ieee80211_sta *sta,
 892                      int pid, struct ieee80211_key_conf *key)
 893{
 894        struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
 895        struct ieee80211_tx_rate *rate = &info->control.rates[0];
 896        struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
 897        struct ieee80211_bar *bar = (struct ieee80211_bar *)skb->data;
 898        struct ieee80211_vif *vif = info->control.vif;
 899        struct mt76_queue *q = dev->mt76.q_tx[qid].q;
 900        struct mt7603_vif *mvif;
 901        int wlan_idx;
 902        int hdr_len = ieee80211_get_hdrlen_from_skb(skb);
 903        int tx_count = 8;
 904        u8 frame_type, frame_subtype;
 905        u16 fc = le16_to_cpu(hdr->frame_control);
 906        u16 seqno = 0;
 907        u8 vif_idx = 0;
 908        u32 val;
 909        u8 bw;
 910
 911        if (vif) {
 912                mvif = (struct mt7603_vif *)vif->drv_priv;
 913                vif_idx = mvif->idx;
 914                if (vif_idx && qid >= MT_TXQ_BEACON)
 915                        vif_idx += 0x10;
 916        }
 917
 918        if (sta) {
 919                struct mt7603_sta *msta = (struct mt7603_sta *)sta->drv_priv;
 920
 921                tx_count = msta->rate_count;
 922        }
 923
 924        if (wcid)
 925                wlan_idx = wcid->idx;
 926        else
 927                wlan_idx = MT7603_WTBL_RESERVED;
 928
 929        frame_type = (fc & IEEE80211_FCTL_FTYPE) >> 2;
 930        frame_subtype = (fc & IEEE80211_FCTL_STYPE) >> 4;
 931
 932        val = FIELD_PREP(MT_TXD0_TX_BYTES, skb->len + MT_TXD_SIZE) |
 933              FIELD_PREP(MT_TXD0_Q_IDX, q->hw_idx);
 934        txwi[0] = cpu_to_le32(val);
 935
 936        val = MT_TXD1_LONG_FORMAT |
 937              FIELD_PREP(MT_TXD1_OWN_MAC, vif_idx) |
 938              FIELD_PREP(MT_TXD1_TID,
 939                         skb->priority & IEEE80211_QOS_CTL_TID_MASK) |
 940              FIELD_PREP(MT_TXD1_HDR_FORMAT, MT_HDR_FORMAT_802_11) |
 941              FIELD_PREP(MT_TXD1_HDR_INFO, hdr_len / 2) |
 942              FIELD_PREP(MT_TXD1_WLAN_IDX, wlan_idx) |
 943              FIELD_PREP(MT_TXD1_PROTECTED, !!key);
 944        txwi[1] = cpu_to_le32(val);
 945
 946        if (info->flags & IEEE80211_TX_CTL_NO_ACK)
 947                txwi[1] |= cpu_to_le32(MT_TXD1_NO_ACK);
 948
 949        val = FIELD_PREP(MT_TXD2_FRAME_TYPE, frame_type) |
 950              FIELD_PREP(MT_TXD2_SUB_TYPE, frame_subtype) |
 951              FIELD_PREP(MT_TXD2_MULTICAST,
 952                         is_multicast_ether_addr(hdr->addr1));
 953        txwi[2] = cpu_to_le32(val);
 954
 955        if (!(info->flags & IEEE80211_TX_CTL_AMPDU))
 956                txwi[2] |= cpu_to_le32(MT_TXD2_BA_DISABLE);
 957
 958        txwi[4] = 0;
 959
 960        val = MT_TXD5_TX_STATUS_HOST | MT_TXD5_SW_POWER_MGMT |
 961              FIELD_PREP(MT_TXD5_PID, pid);
 962        txwi[5] = cpu_to_le32(val);
 963
 964        txwi[6] = 0;
 965
 966        if (rate->idx >= 0 && rate->count &&
 967            !(info->flags & IEEE80211_TX_CTL_RATE_CTRL_PROBE)) {
 968                bool stbc = info->flags & IEEE80211_TX_CTL_STBC;
 969                u16 rateval = mt7603_mac_tx_rate_val(dev, rate, stbc, &bw);
 970
 971                txwi[2] |= cpu_to_le32(MT_TXD2_FIX_RATE);
 972
 973                val = MT_TXD6_FIXED_BW |
 974                      FIELD_PREP(MT_TXD6_BW, bw) |
 975                      FIELD_PREP(MT_TXD6_TX_RATE, rateval);
 976                txwi[6] |= cpu_to_le32(val);
 977
 978                if (rate->flags & IEEE80211_TX_RC_SHORT_GI)
 979                        txwi[6] |= cpu_to_le32(MT_TXD6_SGI);
 980
 981                if (!(rate->flags & IEEE80211_TX_RC_MCS))
 982                        txwi[2] |= cpu_to_le32(MT_TXD2_BA_DISABLE);
 983
 984                tx_count = rate->count;
 985        }
 986
 987        /* use maximum tx count for beacons and buffered multicast */
 988        if (qid >= MT_TXQ_BEACON)
 989                tx_count = 0x1f;
 990
 991        val = FIELD_PREP(MT_TXD3_REM_TX_COUNT, tx_count) |
 992                  MT_TXD3_SN_VALID;
 993
 994        if (ieee80211_is_data_qos(hdr->frame_control))
 995                seqno = le16_to_cpu(hdr->seq_ctrl);
 996        else if (ieee80211_is_back_req(hdr->frame_control))
 997                seqno = le16_to_cpu(bar->start_seq_num);
 998        else
 999                val &= ~MT_TXD3_SN_VALID;
1000
1001        val |= FIELD_PREP(MT_TXD3_SEQ, seqno >> 4);
1002
1003        txwi[3] = cpu_to_le32(val);
1004
1005        if (key) {
1006                u64 pn = atomic64_inc_return(&key->tx_pn);
1007
1008                txwi[3] |= cpu_to_le32(MT_TXD3_PN_VALID);
1009                txwi[4] = cpu_to_le32(pn & GENMASK(31, 0));
1010                txwi[5] |= cpu_to_le32(FIELD_PREP(MT_TXD5_PN_HIGH, pn >> 32));
1011        }
1012
1013        txwi[7] = 0;
1014
1015        return 0;
1016}
1017
1018int mt7603_tx_prepare_skb(struct mt76_dev *mdev, void *txwi_ptr,
1019                          enum mt76_txq_id qid, struct mt76_wcid *wcid,
1020                          struct ieee80211_sta *sta,
1021                          struct mt76_tx_info *tx_info)
1022{
1023        struct mt7603_dev *dev = container_of(mdev, struct mt7603_dev, mt76);
1024        struct mt7603_sta *msta = container_of(wcid, struct mt7603_sta, wcid);
1025        struct ieee80211_tx_info *info = IEEE80211_SKB_CB(tx_info->skb);
1026        struct ieee80211_key_conf *key = info->control.hw_key;
1027        int pid;
1028
1029        if (!wcid)
1030                wcid = &dev->global_sta.wcid;
1031
1032        if (sta) {
1033                msta = (struct mt7603_sta *)sta->drv_priv;
1034
1035                if ((info->flags & (IEEE80211_TX_CTL_NO_PS_BUFFER |
1036                                    IEEE80211_TX_CTL_CLEAR_PS_FILT)) ||
1037                    (info->control.flags & IEEE80211_TX_CTRL_PS_RESPONSE))
1038                        mt7603_wtbl_set_ps(dev, msta, false);
1039        }
1040
1041        pid = mt76_tx_status_skb_add(mdev, wcid, tx_info->skb);
1042
1043        if (info->flags & IEEE80211_TX_CTL_RATE_CTRL_PROBE) {
1044                spin_lock_bh(&dev->mt76.lock);
1045                mt7603_wtbl_set_rates(dev, msta, &info->control.rates[0],
1046                                      msta->rates);
1047                msta->rate_probe = true;
1048                spin_unlock_bh(&dev->mt76.lock);
1049        }
1050
1051        mt7603_mac_write_txwi(dev, txwi_ptr, tx_info->skb, qid, wcid,
1052                              sta, pid, key);
1053
1054        return 0;
1055}
1056
1057static bool
1058mt7603_fill_txs(struct mt7603_dev *dev, struct mt7603_sta *sta,
1059                struct ieee80211_tx_info *info, __le32 *txs_data)
1060{
1061        struct ieee80211_supported_band *sband;
1062        struct mt7603_rate_set *rs;
1063        int first_idx = 0, last_idx;
1064        u32 rate_set_tsf;
1065        u32 final_rate;
1066        u32 final_rate_flags;
1067        bool rs_idx;
1068        bool ack_timeout;
1069        bool fixed_rate;
1070        bool probe;
1071        bool ampdu;
1072        bool cck = false;
1073        int count;
1074        u32 txs;
1075        int idx;
1076        int i;
1077
1078        fixed_rate = info->status.rates[0].count;
1079        probe = !!(info->flags & IEEE80211_TX_CTL_RATE_CTRL_PROBE);
1080
1081        txs = le32_to_cpu(txs_data[4]);
1082        ampdu = !fixed_rate && (txs & MT_TXS4_AMPDU);
1083        count = FIELD_GET(MT_TXS4_TX_COUNT, txs);
1084        last_idx = FIELD_GET(MT_TXS4_LAST_TX_RATE, txs);
1085
1086        txs = le32_to_cpu(txs_data[0]);
1087        final_rate = FIELD_GET(MT_TXS0_TX_RATE, txs);
1088        ack_timeout = txs & MT_TXS0_ACK_TIMEOUT;
1089
1090        if (!ampdu && (txs & MT_TXS0_RTS_TIMEOUT))
1091                return false;
1092
1093        if (txs & MT_TXS0_QUEUE_TIMEOUT)
1094                return false;
1095
1096        if (!ack_timeout)
1097                info->flags |= IEEE80211_TX_STAT_ACK;
1098
1099        info->status.ampdu_len = 1;
1100        info->status.ampdu_ack_len = !!(info->flags &
1101                                        IEEE80211_TX_STAT_ACK);
1102
1103        if (ampdu || (info->flags & IEEE80211_TX_CTL_AMPDU))
1104                info->flags |= IEEE80211_TX_STAT_AMPDU | IEEE80211_TX_CTL_AMPDU;
1105
1106        first_idx = max_t(int, 0, last_idx - (count - 1) / MT7603_RATE_RETRY);
1107
1108        if (fixed_rate && !probe) {
1109                info->status.rates[0].count = count;
1110                i = 0;
1111                goto out;
1112        }
1113
1114        rate_set_tsf = READ_ONCE(sta->rate_set_tsf);
1115        rs_idx = !((u32)(FIELD_GET(MT_TXS1_F0_TIMESTAMP, le32_to_cpu(txs_data[1])) -
1116                         rate_set_tsf) < 1000000);
1117        rs_idx ^= rate_set_tsf & BIT(0);
1118        rs = &sta->rateset[rs_idx];
1119
1120        if (!first_idx && rs->probe_rate.idx >= 0) {
1121                info->status.rates[0] = rs->probe_rate;
1122
1123                spin_lock_bh(&dev->mt76.lock);
1124                if (sta->rate_probe) {
1125                        mt7603_wtbl_set_rates(dev, sta, NULL,
1126                                              sta->rates);
1127                        sta->rate_probe = false;
1128                }
1129                spin_unlock_bh(&dev->mt76.lock);
1130        } else {
1131                info->status.rates[0] = rs->rates[first_idx / 2];
1132        }
1133        info->status.rates[0].count = 0;
1134
1135        for (i = 0, idx = first_idx; count && idx <= last_idx; idx++) {
1136                struct ieee80211_tx_rate *cur_rate;
1137                int cur_count;
1138
1139                cur_rate = &rs->rates[idx / 2];
1140                cur_count = min_t(int, MT7603_RATE_RETRY, count);
1141                count -= cur_count;
1142
1143                if (idx && (cur_rate->idx != info->status.rates[i].idx ||
1144                            cur_rate->flags != info->status.rates[i].flags)) {
1145                        i++;
1146                        if (i == ARRAY_SIZE(info->status.rates)) {
1147                                i--;
1148                                break;
1149                        }
1150
1151                        info->status.rates[i] = *cur_rate;
1152                        info->status.rates[i].count = 0;
1153                }
1154
1155                info->status.rates[i].count += cur_count;
1156        }
1157
1158out:
1159        final_rate_flags = info->status.rates[i].flags;
1160
1161        switch (FIELD_GET(MT_TX_RATE_MODE, final_rate)) {
1162        case MT_PHY_TYPE_CCK:
1163                cck = true;
1164                /* fall through */
1165        case MT_PHY_TYPE_OFDM:
1166                if (dev->mphy.chandef.chan->band == NL80211_BAND_5GHZ)
1167                        sband = &dev->mphy.sband_5g.sband;
1168                else
1169                        sband = &dev->mphy.sband_2g.sband;
1170                final_rate &= GENMASK(5, 0);
1171                final_rate = mt76_get_rate(&dev->mt76, sband, final_rate,
1172                                           cck);
1173                final_rate_flags = 0;
1174                break;
1175        case MT_PHY_TYPE_HT_GF:
1176        case MT_PHY_TYPE_HT:
1177                final_rate_flags |= IEEE80211_TX_RC_MCS;
1178                final_rate &= GENMASK(5, 0);
1179                if (final_rate > 15)
1180                        return false;
1181                break;
1182        default:
1183                return false;
1184        }
1185
1186        info->status.rates[i].idx = final_rate;
1187        info->status.rates[i].flags = final_rate_flags;
1188
1189        return true;
1190}
1191
1192static bool
1193mt7603_mac_add_txs_skb(struct mt7603_dev *dev, struct mt7603_sta *sta, int pid,
1194                       __le32 *txs_data)
1195{
1196        struct mt76_dev *mdev = &dev->mt76;
1197        struct sk_buff_head list;
1198        struct sk_buff *skb;
1199
1200        if (pid < MT_PACKET_ID_FIRST)
1201                return false;
1202
1203        trace_mac_txdone(mdev, sta->wcid.idx, pid);
1204
1205        mt76_tx_status_lock(mdev, &list);
1206        skb = mt76_tx_status_skb_get(mdev, &sta->wcid, pid, &list);
1207        if (skb) {
1208                struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
1209
1210                if (!mt7603_fill_txs(dev, sta, info, txs_data)) {
1211                        ieee80211_tx_info_clear_status(info);
1212                        info->status.rates[0].idx = -1;
1213                }
1214
1215                mt76_tx_status_skb_done(mdev, skb, &list);
1216        }
1217        mt76_tx_status_unlock(mdev, &list);
1218
1219        return !!skb;
1220}
1221
1222void mt7603_mac_add_txs(struct mt7603_dev *dev, void *data)
1223{
1224        struct ieee80211_tx_info info = {};
1225        struct ieee80211_sta *sta = NULL;
1226        struct mt7603_sta *msta = NULL;
1227        struct mt76_wcid *wcid;
1228        __le32 *txs_data = data;
1229        u32 txs;
1230        u8 wcidx;
1231        u8 pid;
1232
1233        txs = le32_to_cpu(txs_data[4]);
1234        pid = FIELD_GET(MT_TXS4_PID, txs);
1235        txs = le32_to_cpu(txs_data[3]);
1236        wcidx = FIELD_GET(MT_TXS3_WCID, txs);
1237
1238        if (pid == MT_PACKET_ID_NO_ACK)
1239                return;
1240
1241        if (wcidx >= MT7603_WTBL_SIZE)
1242                return;
1243
1244        rcu_read_lock();
1245
1246        wcid = rcu_dereference(dev->mt76.wcid[wcidx]);
1247        if (!wcid)
1248                goto out;
1249
1250        msta = container_of(wcid, struct mt7603_sta, wcid);
1251        sta = wcid_to_sta(wcid);
1252
1253        if (list_empty(&msta->poll_list)) {
1254                spin_lock_bh(&dev->sta_poll_lock);
1255                list_add_tail(&msta->poll_list, &dev->sta_poll_list);
1256                spin_unlock_bh(&dev->sta_poll_lock);
1257        }
1258
1259        if (mt7603_mac_add_txs_skb(dev, msta, pid, txs_data))
1260                goto out;
1261
1262        if (wcidx >= MT7603_WTBL_STA || !sta)
1263                goto out;
1264
1265        if (mt7603_fill_txs(dev, msta, &info, txs_data))
1266                ieee80211_tx_status_noskb(mt76_hw(dev), sta, &info);
1267
1268out:
1269        rcu_read_unlock();
1270}
1271
1272void mt7603_tx_complete_skb(struct mt76_dev *mdev, enum mt76_txq_id qid,
1273                            struct mt76_queue_entry *e)
1274{
1275        struct mt7603_dev *dev = container_of(mdev, struct mt7603_dev, mt76);
1276        struct sk_buff *skb = e->skb;
1277
1278        if (!e->txwi) {
1279                dev_kfree_skb_any(skb);
1280                return;
1281        }
1282
1283        if (qid < 4)
1284                dev->tx_hang_check = 0;
1285
1286        mt76_tx_complete_skb(mdev, skb);
1287}
1288
1289static bool
1290wait_for_wpdma(struct mt7603_dev *dev)
1291{
1292        return mt76_poll(dev, MT_WPDMA_GLO_CFG,
1293                         MT_WPDMA_GLO_CFG_TX_DMA_BUSY |
1294                         MT_WPDMA_GLO_CFG_RX_DMA_BUSY,
1295                         0, 1000);
1296}
1297
1298static void mt7603_pse_reset(struct mt7603_dev *dev)
1299{
1300        /* Clear previous reset result */
1301        if (!dev->reset_cause[RESET_CAUSE_RESET_FAILED])
1302                mt76_clear(dev, MT_MCU_DEBUG_RESET, MT_MCU_DEBUG_RESET_PSE_S);
1303
1304        /* Reset PSE */
1305        mt76_set(dev, MT_MCU_DEBUG_RESET, MT_MCU_DEBUG_RESET_PSE);
1306
1307        if (!mt76_poll_msec(dev, MT_MCU_DEBUG_RESET,
1308                            MT_MCU_DEBUG_RESET_PSE_S,
1309                            MT_MCU_DEBUG_RESET_PSE_S, 500)) {
1310                dev->reset_cause[RESET_CAUSE_RESET_FAILED]++;
1311                mt76_clear(dev, MT_MCU_DEBUG_RESET, MT_MCU_DEBUG_RESET_PSE);
1312        } else {
1313                dev->reset_cause[RESET_CAUSE_RESET_FAILED] = 0;
1314                mt76_clear(dev, MT_MCU_DEBUG_RESET, MT_MCU_DEBUG_RESET_QUEUES);
1315        }
1316
1317        if (dev->reset_cause[RESET_CAUSE_RESET_FAILED] >= 3)
1318                dev->reset_cause[RESET_CAUSE_RESET_FAILED] = 0;
1319}
1320
1321void mt7603_mac_dma_start(struct mt7603_dev *dev)
1322{
1323        mt7603_mac_start(dev);
1324
1325        wait_for_wpdma(dev);
1326        usleep_range(50, 100);
1327
1328        mt76_set(dev, MT_WPDMA_GLO_CFG,
1329                 (MT_WPDMA_GLO_CFG_TX_DMA_EN |
1330                  MT_WPDMA_GLO_CFG_RX_DMA_EN |
1331                  FIELD_PREP(MT_WPDMA_GLO_CFG_DMA_BURST_SIZE, 3) |
1332                  MT_WPDMA_GLO_CFG_TX_WRITEBACK_DONE));
1333
1334        mt7603_irq_enable(dev, MT_INT_RX_DONE_ALL | MT_INT_TX_DONE_ALL);
1335}
1336
1337void mt7603_mac_start(struct mt7603_dev *dev)
1338{
1339        mt76_clear(dev, MT_ARB_SCR,
1340                   MT_ARB_SCR_TX_DISABLE | MT_ARB_SCR_RX_DISABLE);
1341        mt76_wr(dev, MT_WF_ARB_TX_START_0, ~0);
1342        mt76_set(dev, MT_WF_ARB_RQCR, MT_WF_ARB_RQCR_RX_START);
1343}
1344
1345void mt7603_mac_stop(struct mt7603_dev *dev)
1346{
1347        mt76_set(dev, MT_ARB_SCR,
1348                 MT_ARB_SCR_TX_DISABLE | MT_ARB_SCR_RX_DISABLE);
1349        mt76_wr(dev, MT_WF_ARB_TX_START_0, 0);
1350        mt76_clear(dev, MT_WF_ARB_RQCR, MT_WF_ARB_RQCR_RX_START);
1351}
1352
1353void mt7603_pse_client_reset(struct mt7603_dev *dev)
1354{
1355        u32 addr;
1356
1357        addr = mt7603_reg_map(dev, MT_CLIENT_BASE_PHYS_ADDR +
1358                                   MT_CLIENT_RESET_TX);
1359
1360        /* Clear previous reset state */
1361        mt76_clear(dev, addr,
1362                   MT_CLIENT_RESET_TX_R_E_1 |
1363                   MT_CLIENT_RESET_TX_R_E_2 |
1364                   MT_CLIENT_RESET_TX_R_E_1_S |
1365                   MT_CLIENT_RESET_TX_R_E_2_S);
1366
1367        /* Start PSE client TX abort */
1368        mt76_set(dev, addr, MT_CLIENT_RESET_TX_R_E_1);
1369        mt76_poll_msec(dev, addr, MT_CLIENT_RESET_TX_R_E_1_S,
1370                       MT_CLIENT_RESET_TX_R_E_1_S, 500);
1371
1372        mt76_set(dev, addr, MT_CLIENT_RESET_TX_R_E_2);
1373        mt76_set(dev, MT_WPDMA_GLO_CFG, MT_WPDMA_GLO_CFG_SW_RESET);
1374
1375        /* Wait for PSE client to clear TX FIFO */
1376        mt76_poll_msec(dev, addr, MT_CLIENT_RESET_TX_R_E_2_S,
1377                       MT_CLIENT_RESET_TX_R_E_2_S, 500);
1378
1379        /* Clear PSE client TX abort state */
1380        mt76_clear(dev, addr,
1381                   MT_CLIENT_RESET_TX_R_E_1 |
1382                   MT_CLIENT_RESET_TX_R_E_2);
1383}
1384
1385static void mt7603_dma_sched_reset(struct mt7603_dev *dev)
1386{
1387        if (!is_mt7628(dev))
1388                return;
1389
1390        mt76_set(dev, MT_SCH_4, MT_SCH_4_RESET);
1391        mt76_clear(dev, MT_SCH_4, MT_SCH_4_RESET);
1392}
1393
1394static void mt7603_mac_watchdog_reset(struct mt7603_dev *dev)
1395{
1396        int beacon_int = dev->mt76.beacon_int;
1397        u32 mask = dev->mt76.mmio.irqmask;
1398        int i;
1399
1400        ieee80211_stop_queues(dev->mt76.hw);
1401        set_bit(MT76_RESET, &dev->mphy.state);
1402
1403        /* lock/unlock all queues to ensure that no tx is pending */
1404        mt76_txq_schedule_all(&dev->mphy);
1405
1406        tasklet_disable(&dev->mt76.tx_tasklet);
1407        tasklet_disable(&dev->mt76.pre_tbtt_tasklet);
1408        napi_disable(&dev->mt76.napi[0]);
1409        napi_disable(&dev->mt76.napi[1]);
1410        napi_disable(&dev->mt76.tx_napi);
1411
1412        mutex_lock(&dev->mt76.mutex);
1413
1414        mt7603_beacon_set_timer(dev, -1, 0);
1415
1416        if (dev->reset_cause[RESET_CAUSE_RESET_FAILED] ||
1417            dev->cur_reset_cause == RESET_CAUSE_RX_PSE_BUSY ||
1418            dev->cur_reset_cause == RESET_CAUSE_BEACON_STUCK ||
1419            dev->cur_reset_cause == RESET_CAUSE_TX_HANG)
1420                mt7603_pse_reset(dev);
1421
1422        if (dev->reset_cause[RESET_CAUSE_RESET_FAILED])
1423                goto skip_dma_reset;
1424
1425        mt7603_mac_stop(dev);
1426
1427        mt76_clear(dev, MT_WPDMA_GLO_CFG,
1428                   MT_WPDMA_GLO_CFG_RX_DMA_EN | MT_WPDMA_GLO_CFG_TX_DMA_EN |
1429                   MT_WPDMA_GLO_CFG_TX_WRITEBACK_DONE);
1430        usleep_range(1000, 2000);
1431
1432        mt7603_irq_disable(dev, mask);
1433
1434        mt76_set(dev, MT_WPDMA_GLO_CFG, MT_WPDMA_GLO_CFG_FORCE_TX_EOF);
1435
1436        mt7603_pse_client_reset(dev);
1437
1438        for (i = 0; i < __MT_TXQ_MAX; i++)
1439                mt76_queue_tx_cleanup(dev, i, true);
1440
1441        mt76_for_each_q_rx(&dev->mt76, i) {
1442                mt76_queue_rx_reset(dev, i);
1443        }
1444
1445        mt7603_dma_sched_reset(dev);
1446
1447        mt7603_mac_dma_start(dev);
1448
1449        mt7603_irq_enable(dev, mask);
1450
1451skip_dma_reset:
1452        clear_bit(MT76_RESET, &dev->mphy.state);
1453        mutex_unlock(&dev->mt76.mutex);
1454
1455        tasklet_enable(&dev->mt76.tx_tasklet);
1456        napi_enable(&dev->mt76.tx_napi);
1457        napi_schedule(&dev->mt76.tx_napi);
1458
1459        tasklet_enable(&dev->mt76.pre_tbtt_tasklet);
1460        mt7603_beacon_set_timer(dev, -1, beacon_int);
1461
1462        napi_enable(&dev->mt76.napi[0]);
1463        napi_schedule(&dev->mt76.napi[0]);
1464
1465        napi_enable(&dev->mt76.napi[1]);
1466        napi_schedule(&dev->mt76.napi[1]);
1467
1468        ieee80211_wake_queues(dev->mt76.hw);
1469        mt76_txq_schedule_all(&dev->mphy);
1470}
1471
1472static u32 mt7603_dma_debug(struct mt7603_dev *dev, u8 index)
1473{
1474        u32 val;
1475
1476        mt76_wr(dev, MT_WPDMA_DEBUG,
1477                FIELD_PREP(MT_WPDMA_DEBUG_IDX, index) |
1478                MT_WPDMA_DEBUG_SEL);
1479
1480        val = mt76_rr(dev, MT_WPDMA_DEBUG);
1481        return FIELD_GET(MT_WPDMA_DEBUG_VALUE, val);
1482}
1483
1484static bool mt7603_rx_fifo_busy(struct mt7603_dev *dev)
1485{
1486        if (is_mt7628(dev))
1487                return mt7603_dma_debug(dev, 9) & BIT(9);
1488
1489        return mt7603_dma_debug(dev, 2) & BIT(8);
1490}
1491
1492static bool mt7603_rx_dma_busy(struct mt7603_dev *dev)
1493{
1494        if (!(mt76_rr(dev, MT_WPDMA_GLO_CFG) & MT_WPDMA_GLO_CFG_RX_DMA_BUSY))
1495                return false;
1496
1497        return mt7603_rx_fifo_busy(dev);
1498}
1499
1500static bool mt7603_tx_dma_busy(struct mt7603_dev *dev)
1501{
1502        u32 val;
1503
1504        if (!(mt76_rr(dev, MT_WPDMA_GLO_CFG) & MT_WPDMA_GLO_CFG_TX_DMA_BUSY))
1505                return false;
1506
1507        val = mt7603_dma_debug(dev, 9);
1508        return (val & BIT(8)) && (val & 0xf) != 0xf;
1509}
1510
1511static bool mt7603_tx_hang(struct mt7603_dev *dev)
1512{
1513        struct mt76_queue *q;
1514        u32 dma_idx, prev_dma_idx;
1515        int i;
1516
1517        for (i = 0; i < 4; i++) {
1518                q = dev->mt76.q_tx[i].q;
1519
1520                if (!q->queued)
1521                        continue;
1522
1523                prev_dma_idx = dev->tx_dma_idx[i];
1524                dma_idx = readl(&q->regs->dma_idx);
1525                dev->tx_dma_idx[i] = dma_idx;
1526
1527                if (dma_idx == prev_dma_idx &&
1528                    dma_idx != readl(&q->regs->cpu_idx))
1529                        break;
1530        }
1531
1532        return i < 4;
1533}
1534
1535static bool mt7603_rx_pse_busy(struct mt7603_dev *dev)
1536{
1537        u32 addr, val;
1538
1539        if (mt76_rr(dev, MT_MCU_DEBUG_RESET) & MT_MCU_DEBUG_RESET_QUEUES)
1540                return true;
1541
1542        if (mt7603_rx_fifo_busy(dev))
1543                return false;
1544
1545        addr = mt7603_reg_map(dev, MT_CLIENT_BASE_PHYS_ADDR + MT_CLIENT_STATUS);
1546        mt76_wr(dev, addr, 3);
1547        val = mt76_rr(dev, addr) >> 16;
1548
1549        if (is_mt7628(dev) && (val & 0x4001) == 0x4001)
1550                return true;
1551
1552        return (val & 0x8001) == 0x8001 || (val & 0xe001) == 0xe001;
1553}
1554
1555static bool
1556mt7603_watchdog_check(struct mt7603_dev *dev, u8 *counter,
1557                      enum mt7603_reset_cause cause,
1558                      bool (*check)(struct mt7603_dev *dev))
1559{
1560        if (dev->reset_test == cause + 1) {
1561                dev->reset_test = 0;
1562                goto trigger;
1563        }
1564
1565        if (check) {
1566                if (!check(dev) && *counter < MT7603_WATCHDOG_TIMEOUT) {
1567                        *counter = 0;
1568                        return false;
1569                }
1570
1571                (*counter)++;
1572        }
1573
1574        if (*counter < MT7603_WATCHDOG_TIMEOUT)
1575                return false;
1576trigger:
1577        dev->cur_reset_cause = cause;
1578        dev->reset_cause[cause]++;
1579        return true;
1580}
1581
1582void mt7603_update_channel(struct mt76_dev *mdev)
1583{
1584        struct mt7603_dev *dev = container_of(mdev, struct mt7603_dev, mt76);
1585        struct mt76_channel_state *state;
1586
1587        state = mdev->phy.chan_state;
1588        state->cc_busy += mt76_rr(dev, MT_MIB_STAT_CCA);
1589}
1590
1591void
1592mt7603_edcca_set_strict(struct mt7603_dev *dev, bool val)
1593{
1594        u32 rxtd_6 = 0xd7c80000;
1595
1596        if (val == dev->ed_strict_mode)
1597                return;
1598
1599        dev->ed_strict_mode = val;
1600
1601        /* Ensure that ED/CCA does not trigger if disabled */
1602        if (!dev->ed_monitor)
1603                rxtd_6 |= FIELD_PREP(MT_RXTD_6_CCAED_TH, 0x34);
1604        else
1605                rxtd_6 |= FIELD_PREP(MT_RXTD_6_CCAED_TH, 0x7d);
1606
1607        if (dev->ed_monitor && !dev->ed_strict_mode)
1608                rxtd_6 |= FIELD_PREP(MT_RXTD_6_ACI_TH, 0x0f);
1609        else
1610                rxtd_6 |= FIELD_PREP(MT_RXTD_6_ACI_TH, 0x10);
1611
1612        mt76_wr(dev, MT_RXTD(6), rxtd_6);
1613
1614        mt76_rmw_field(dev, MT_RXTD(13), MT_RXTD_13_ACI_TH_EN,
1615                       dev->ed_monitor && !dev->ed_strict_mode);
1616}
1617
1618static void
1619mt7603_edcca_check(struct mt7603_dev *dev)
1620{
1621        u32 val = mt76_rr(dev, MT_AGC(41));
1622        ktime_t cur_time;
1623        int rssi0, rssi1;
1624        u32 active;
1625        u32 ed_busy;
1626
1627        if (!dev->ed_monitor)
1628                return;
1629
1630        rssi0 = FIELD_GET(MT_AGC_41_RSSI_0, val);
1631        if (rssi0 > 128)
1632                rssi0 -= 256;
1633
1634        rssi1 = FIELD_GET(MT_AGC_41_RSSI_1, val);
1635        if (rssi1 > 128)
1636                rssi1 -= 256;
1637
1638        if (max(rssi0, rssi1) >= -40 &&
1639            dev->ed_strong_signal < MT7603_EDCCA_BLOCK_TH)
1640                dev->ed_strong_signal++;
1641        else if (dev->ed_strong_signal > 0)
1642                dev->ed_strong_signal--;
1643
1644        cur_time = ktime_get_boottime();
1645        ed_busy = mt76_rr(dev, MT_MIB_STAT_ED) & MT_MIB_STAT_ED_MASK;
1646
1647        active = ktime_to_us(ktime_sub(cur_time, dev->ed_time));
1648        dev->ed_time = cur_time;
1649
1650        if (!active)
1651                return;
1652
1653        if (100 * ed_busy / active > 90) {
1654                if (dev->ed_trigger < 0)
1655                        dev->ed_trigger = 0;
1656                dev->ed_trigger++;
1657        } else {
1658                if (dev->ed_trigger > 0)
1659                        dev->ed_trigger = 0;
1660                dev->ed_trigger--;
1661        }
1662
1663        if (dev->ed_trigger > MT7603_EDCCA_BLOCK_TH ||
1664            dev->ed_strong_signal < MT7603_EDCCA_BLOCK_TH / 2) {
1665                mt7603_edcca_set_strict(dev, true);
1666        } else if (dev->ed_trigger < -MT7603_EDCCA_BLOCK_TH) {
1667                mt7603_edcca_set_strict(dev, false);
1668        }
1669
1670        if (dev->ed_trigger > MT7603_EDCCA_BLOCK_TH)
1671                dev->ed_trigger = MT7603_EDCCA_BLOCK_TH;
1672        else if (dev->ed_trigger < -MT7603_EDCCA_BLOCK_TH)
1673                dev->ed_trigger = -MT7603_EDCCA_BLOCK_TH;
1674}
1675
1676void mt7603_cca_stats_reset(struct mt7603_dev *dev)
1677{
1678        mt76_set(dev, MT_PHYCTRL(2), MT_PHYCTRL_2_STATUS_RESET);
1679        mt76_clear(dev, MT_PHYCTRL(2), MT_PHYCTRL_2_STATUS_RESET);
1680        mt76_set(dev, MT_PHYCTRL(2), MT_PHYCTRL_2_STATUS_EN);
1681}
1682
1683static void
1684mt7603_adjust_sensitivity(struct mt7603_dev *dev)
1685{
1686        u32 agc0 = dev->agc0, agc3 = dev->agc3;
1687        u32 adj;
1688
1689        if (!dev->sensitivity || dev->sensitivity < -100) {
1690                dev->sensitivity = 0;
1691        } else if (dev->sensitivity <= -84) {
1692                adj = 7 + (dev->sensitivity + 92) / 2;
1693
1694                agc0 = 0x56f0076f;
1695                agc0 |= adj << 12;
1696                agc0 |= adj << 16;
1697                agc3 = 0x81d0d5e3;
1698        } else if (dev->sensitivity <= -72) {
1699                adj = 7 + (dev->sensitivity + 80) / 2;
1700
1701                agc0 = 0x6af0006f;
1702                agc0 |= adj << 8;
1703                agc0 |= adj << 12;
1704                agc0 |= adj << 16;
1705
1706                agc3 = 0x8181d5e3;
1707        } else {
1708                if (dev->sensitivity > -54)
1709                        dev->sensitivity = -54;
1710
1711                adj = 7 + (dev->sensitivity + 80) / 2;
1712
1713                agc0 = 0x7ff0000f;
1714                agc0 |= adj << 4;
1715                agc0 |= adj << 8;
1716                agc0 |= adj << 12;
1717                agc0 |= adj << 16;
1718
1719                agc3 = 0x818181e3;
1720        }
1721
1722        mt76_wr(dev, MT_AGC(0), agc0);
1723        mt76_wr(dev, MT_AGC1(0), agc0);
1724
1725        mt76_wr(dev, MT_AGC(3), agc3);
1726        mt76_wr(dev, MT_AGC1(3), agc3);
1727}
1728
1729static void
1730mt7603_false_cca_check(struct mt7603_dev *dev)
1731{
1732        int pd_cck, pd_ofdm, mdrdy_cck, mdrdy_ofdm;
1733        int false_cca;
1734        int min_signal;
1735        u32 val;
1736
1737        if (!dev->dynamic_sensitivity)
1738                return;
1739
1740        val = mt76_rr(dev, MT_PHYCTRL_STAT_PD);
1741        pd_cck = FIELD_GET(MT_PHYCTRL_STAT_PD_CCK, val);
1742        pd_ofdm = FIELD_GET(MT_PHYCTRL_STAT_PD_OFDM, val);
1743
1744        val = mt76_rr(dev, MT_PHYCTRL_STAT_MDRDY);
1745        mdrdy_cck = FIELD_GET(MT_PHYCTRL_STAT_MDRDY_CCK, val);
1746        mdrdy_ofdm = FIELD_GET(MT_PHYCTRL_STAT_MDRDY_OFDM, val);
1747
1748        dev->false_cca_ofdm = pd_ofdm - mdrdy_ofdm;
1749        dev->false_cca_cck = pd_cck - mdrdy_cck;
1750
1751        mt7603_cca_stats_reset(dev);
1752
1753        min_signal = mt76_get_min_avg_rssi(&dev->mt76, false);
1754        if (!min_signal) {
1755                dev->sensitivity = 0;
1756                dev->last_cca_adj = jiffies;
1757                goto out;
1758        }
1759
1760        min_signal -= 15;
1761
1762        false_cca = dev->false_cca_ofdm + dev->false_cca_cck;
1763        if (false_cca > 600 &&
1764            dev->sensitivity < -100 + dev->sensitivity_limit) {
1765                if (!dev->sensitivity)
1766                        dev->sensitivity = -92;
1767                else
1768                        dev->sensitivity += 2;
1769                dev->last_cca_adj = jiffies;
1770        } else if (false_cca < 100 ||
1771                   time_after(jiffies, dev->last_cca_adj + 10 * HZ)) {
1772                dev->last_cca_adj = jiffies;
1773                if (!dev->sensitivity)
1774                        goto out;
1775
1776                dev->sensitivity -= 2;
1777        }
1778
1779        if (dev->sensitivity && dev->sensitivity > min_signal) {
1780                dev->sensitivity = min_signal;
1781                dev->last_cca_adj = jiffies;
1782        }
1783
1784out:
1785        mt7603_adjust_sensitivity(dev);
1786}
1787
1788void mt7603_mac_work(struct work_struct *work)
1789{
1790        struct mt7603_dev *dev = container_of(work, struct mt7603_dev,
1791                                              mt76.mac_work.work);
1792        bool reset = false;
1793        int i, idx;
1794
1795        mt76_tx_status_check(&dev->mt76, NULL, false);
1796
1797        mutex_lock(&dev->mt76.mutex);
1798
1799        dev->mac_work_count++;
1800        mt76_update_survey(&dev->mt76);
1801        mt7603_edcca_check(dev);
1802
1803        for (i = 0, idx = 0; i < 2; i++) {
1804                u32 val = mt76_rr(dev, MT_TX_AGG_CNT(i));
1805
1806                dev->mt76.aggr_stats[idx++] += val & 0xffff;
1807                dev->mt76.aggr_stats[idx++] += val >> 16;
1808        }
1809
1810        if (dev->mac_work_count == 10)
1811                mt7603_false_cca_check(dev);
1812
1813        if (mt7603_watchdog_check(dev, &dev->rx_pse_check,
1814                                  RESET_CAUSE_RX_PSE_BUSY,
1815                                  mt7603_rx_pse_busy) ||
1816            mt7603_watchdog_check(dev, &dev->beacon_check,
1817                                  RESET_CAUSE_BEACON_STUCK,
1818                                  NULL) ||
1819            mt7603_watchdog_check(dev, &dev->tx_hang_check,
1820                                  RESET_CAUSE_TX_HANG,
1821                                  mt7603_tx_hang) ||
1822            mt7603_watchdog_check(dev, &dev->tx_dma_check,
1823                                  RESET_CAUSE_TX_BUSY,
1824                                  mt7603_tx_dma_busy) ||
1825            mt7603_watchdog_check(dev, &dev->rx_dma_check,
1826                                  RESET_CAUSE_RX_BUSY,
1827                                  mt7603_rx_dma_busy) ||
1828            mt7603_watchdog_check(dev, &dev->mcu_hang,
1829                                  RESET_CAUSE_MCU_HANG,
1830                                  NULL) ||
1831            dev->reset_cause[RESET_CAUSE_RESET_FAILED]) {
1832                dev->beacon_check = 0;
1833                dev->tx_dma_check = 0;
1834                dev->tx_hang_check = 0;
1835                dev->rx_dma_check = 0;
1836                dev->rx_pse_check = 0;
1837                dev->mcu_hang = 0;
1838                dev->rx_dma_idx = ~0;
1839                memset(dev->tx_dma_idx, 0xff, sizeof(dev->tx_dma_idx));
1840                reset = true;
1841                dev->mac_work_count = 0;
1842        }
1843
1844        if (dev->mac_work_count >= 10)
1845                dev->mac_work_count = 0;
1846
1847        mutex_unlock(&dev->mt76.mutex);
1848
1849        if (reset)
1850                mt7603_mac_watchdog_reset(dev);
1851
1852        ieee80211_queue_delayed_work(mt76_hw(dev), &dev->mt76.mac_work,
1853                                     msecs_to_jiffies(MT7603_WATCHDOG_TIME));
1854}
1855