2 * (c) Copyright 2002-2010, Ralink Technology, Inc.
3 * Copyright (C) 2014 Felix Fietkau <nbd@openwrt.org>
4 * Copyright (C) 2015 Jakub Kicinski <kubakici@wp.pl>
5 * Copyright (C) 2018 Stanislaw Gruszka <stf_xl@wp.pl>
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License version 2
9 * as published by the Free Software Foundation
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
26 mt76x0_set_wlan_state(struct mt76x0_dev *dev, u32 val, bool enable)
30 /* Note: we don't turn off WLAN_CLK because that makes the device
31 * not respond properly on the probe path.
32 * In case anyone (PSM?) wants to use this function we can
33 * bring the clock stuff back and fixup the probe path.
37 val |= (MT_WLAN_FUN_CTRL_WLAN_EN |
38 MT_WLAN_FUN_CTRL_WLAN_CLK_EN);
40 val &= ~(MT_WLAN_FUN_CTRL_WLAN_EN);
42 mt76_wr(dev, MT_WLAN_FUN_CTRL, val);
48 for (i = 200; i; i--) {
49 val = mt76_rr(dev, MT_CMB_CTRL);
51 if (val & MT_CMB_CTRL_XTAL_RDY && val & MT_CMB_CTRL_PLL_LD)
57 /* Note: vendor driver tries to disable/enable wlan here and retry
58 * but the code which does it is so buggy it must have never
59 * triggered, so don't bother.
62 dev_err(dev->mt76.dev, "Error: PLL and XTAL check failed!\n");
65 void mt76x0_chip_onoff(struct mt76x0_dev *dev, bool enable, bool reset)
69 mutex_lock(&dev->hw_atomic_mutex);
71 val = mt76_rr(dev, MT_WLAN_FUN_CTRL);
74 val |= MT_WLAN_FUN_CTRL_GPIO_OUT_EN;
75 val &= ~MT_WLAN_FUN_CTRL_FRC_WL_ANT_SEL;
77 if (val & MT_WLAN_FUN_CTRL_WLAN_EN) {
78 val |= (MT_WLAN_FUN_CTRL_WLAN_RESET |
79 MT_WLAN_FUN_CTRL_WLAN_RESET_RF);
80 mt76_wr(dev, MT_WLAN_FUN_CTRL, val);
83 val &= ~(MT_WLAN_FUN_CTRL_WLAN_RESET |
84 MT_WLAN_FUN_CTRL_WLAN_RESET_RF);
88 mt76_wr(dev, MT_WLAN_FUN_CTRL, val);
91 mt76x0_set_wlan_state(dev, val, enable);
93 mutex_unlock(&dev->hw_atomic_mutex);
96 static void mt76x0_reset_csr_bbp(struct mt76x0_dev *dev)
100 val = mt76_rr(dev, MT_PBF_SYS_CTRL);
102 mt76_wr(dev, MT_PBF_SYS_CTRL, val);
104 mt76_wr(dev, MT_MAC_SYS_CTRL, MT_MAC_SYS_CTRL_RESET_CSR |
105 MT_MAC_SYS_CTRL_RESET_BBP);
110 static void mt76x0_init_usb_dma(struct mt76x0_dev *dev)
114 val = mt76_rr(dev, MT_USB_DMA_CFG);
116 val |= FIELD_PREP(MT_USB_DMA_CFG_RX_BULK_AGG_TOUT, MT_USB_AGGR_TIMEOUT) |
117 FIELD_PREP(MT_USB_DMA_CFG_RX_BULK_AGG_LMT, MT_USB_AGGR_SIZE_LIMIT) |
118 MT_USB_DMA_CFG_RX_BULK_EN |
119 MT_USB_DMA_CFG_TX_BULK_EN;
120 if (dev->in_max_packet == 512)
121 val |= MT_USB_DMA_CFG_RX_BULK_AGG_EN;
122 mt76_wr(dev, MT_USB_DMA_CFG, val);
124 val = mt76_rr(dev, MT_COM_REG0);
126 dev_dbg(dev->mt76.dev, "MCU not ready\n");
128 val = mt76_rr(dev, MT_USB_DMA_CFG);
130 val |= MT_USB_DMA_CFG_RX_DROP_OR_PADDING;
131 mt76_wr(dev, MT_USB_DMA_CFG, val);
132 val &= ~MT_USB_DMA_CFG_RX_DROP_OR_PADDING;
133 mt76_wr(dev, MT_USB_DMA_CFG, val);
136 #define RANDOM_WRITE(dev, tab) \
137 mt76x0_write_reg_pairs(dev, MT_MCU_MEMMAP_WLAN, tab, ARRAY_SIZE(tab));
139 static int mt76x0_init_bbp(struct mt76x0_dev *dev)
143 ret = mt76x0_wait_bbp_ready(dev);
147 RANDOM_WRITE(dev, mt76x0_bbp_init_tab);
149 for (i = 0; i < ARRAY_SIZE(mt76x0_bbp_switch_tab); i++) {
150 const struct mt76x0_bbp_switch_item *item = &mt76x0_bbp_switch_tab[i];
151 const struct mt76_reg_pair *pair = &item->reg_pair;
153 if (((RF_G_BAND | RF_BW_20) & item->bw_band) == (RF_G_BAND | RF_BW_20))
154 mt76_wr(dev, pair->reg, pair->value);
157 RANDOM_WRITE(dev, mt76x0_dcoc_tab);
163 mt76_init_beacon_offsets(struct mt76x0_dev *dev)
165 u16 base = MT_BEACON_BASE;
169 for (i = 0; i < 16; i++) {
170 u16 addr = dev->beacon_offsets[i];
172 regs[i / 4] |= ((addr - base) / 64) << (8 * (i % 4));
175 for (i = 0; i < 4; i++)
176 mt76_wr(dev, MT_BCN_OFFSET(i), regs[i]);
179 static void mt76x0_init_mac_registers(struct mt76x0_dev *dev)
183 RANDOM_WRITE(dev, common_mac_reg_table);
185 mt76_init_beacon_offsets(dev);
187 /* Enable PBF and MAC clock SYS_CTRL[11:10] = 0x3 */
188 RANDOM_WRITE(dev, mt76x0_mac_reg_table);
190 /* Release BBP and MAC reset MAC_SYS_CTRL[1:0] = 0x0 */
191 reg = mt76_rr(dev, MT_MAC_SYS_CTRL);
193 mt76_wr(dev, MT_MAC_SYS_CTRL, reg);
195 if (is_mt7610e(dev)) {
196 /* Disable COEX_EN */
197 reg = mt76_rr(dev, MT_COEXCFG0);
199 mt76_wr(dev, MT_COEXCFG0, reg);
202 /* Set 0x141C[15:12]=0xF */
203 reg = mt76_rr(dev, MT_EXT_CCA_CFG);
205 mt76_wr(dev, MT_EXT_CCA_CFG, reg);
207 mt76_clear(dev, MT_FCE_L2_STUFF, MT_FCE_L2_STUFF_WR_MPDU_LEN_EN);
210 TxRing 9 is for Mgmt frame.
211 TxRing 8 is for In-band command frame.
212 WMM_RG0_TXQMA: This register setting is for FCE to define the rule of TxRing 9.
213 WMM_RG1_TXQMA: This register setting is for FCE to define the rule of TxRing 8.
215 reg = mt76_rr(dev, MT_WMM_CTRL);
218 mt76_wr(dev, MT_WMM_CTRL, reg);
220 /* TODO: Probably not needed */
221 mt76_wr(dev, 0x7028, 0);
222 mt76_wr(dev, 0x7010, 0);
223 mt76_wr(dev, 0x7024, 0);
227 static int mt76x0_init_wcid_mem(struct mt76x0_dev *dev)
232 vals = kmalloc(sizeof(*vals) * N_WCIDS * 2, GFP_KERNEL);
236 for (i = 0; i < N_WCIDS; i++) {
237 vals[i * 2] = 0xffffffff;
238 vals[i * 2 + 1] = 0x00ffffff;
241 ret = mt76x0_burst_write_regs(dev, MT_WCID_ADDR_BASE,
248 static int mt76x0_init_key_mem(struct mt76x0_dev *dev)
252 return mt76x0_burst_write_regs(dev, MT_SKEY_MODE_BASE_0,
253 vals, ARRAY_SIZE(vals));
256 static int mt76x0_init_wcid_attr_mem(struct mt76x0_dev *dev)
261 vals = kmalloc(sizeof(*vals) * N_WCIDS * 2, GFP_KERNEL);
265 for (i = 0; i < N_WCIDS * 2; i++)
268 ret = mt76x0_burst_write_regs(dev, MT_WCID_ATTR_BASE,
275 static void mt76x0_reset_counters(struct mt76x0_dev *dev)
277 mt76_rr(dev, MT_RX_STA_CNT0);
278 mt76_rr(dev, MT_RX_STA_CNT1);
279 mt76_rr(dev, MT_RX_STA_CNT2);
280 mt76_rr(dev, MT_TX_STA_CNT0);
281 mt76_rr(dev, MT_TX_STA_CNT1);
282 mt76_rr(dev, MT_TX_STA_CNT2);
285 int mt76x0_mac_start(struct mt76x0_dev *dev)
287 mt76_wr(dev, MT_MAC_SYS_CTRL, MT_MAC_SYS_CTRL_ENABLE_TX);
289 if (!mt76_poll(dev, MT_WPDMA_GLO_CFG, MT_WPDMA_GLO_CFG_TX_DMA_BUSY |
290 MT_WPDMA_GLO_CFG_RX_DMA_BUSY, 0, 200000))
293 dev->rxfilter = MT_RX_FILTR_CFG_CRC_ERR |
294 MT_RX_FILTR_CFG_PHY_ERR | MT_RX_FILTR_CFG_PROMISC |
295 MT_RX_FILTR_CFG_VER_ERR | MT_RX_FILTR_CFG_DUP |
296 MT_RX_FILTR_CFG_CFACK | MT_RX_FILTR_CFG_CFEND |
297 MT_RX_FILTR_CFG_ACK | MT_RX_FILTR_CFG_CTS |
298 MT_RX_FILTR_CFG_RTS | MT_RX_FILTR_CFG_PSPOLL |
299 MT_RX_FILTR_CFG_BA | MT_RX_FILTR_CFG_CTRL_RSV;
300 mt76_wr(dev, MT_RX_FILTR_CFG, dev->rxfilter);
302 mt76_wr(dev, MT_MAC_SYS_CTRL,
303 MT_MAC_SYS_CTRL_ENABLE_TX | MT_MAC_SYS_CTRL_ENABLE_RX);
305 if (!mt76_poll(dev, MT_WPDMA_GLO_CFG, MT_WPDMA_GLO_CFG_TX_DMA_BUSY |
306 MT_WPDMA_GLO_CFG_RX_DMA_BUSY, 0, 50))
312 static void mt76x0_mac_stop_hw(struct mt76x0_dev *dev)
316 if (test_bit(MT76_REMOVED, &dev->mt76.state))
319 mt76_clear(dev, MT_BEACON_TIME_CFG, MT_BEACON_TIME_CFG_TIMER_EN |
320 MT_BEACON_TIME_CFG_SYNC_MODE | MT_BEACON_TIME_CFG_TBTT_EN |
321 MT_BEACON_TIME_CFG_BEACON_TX);
323 if (!mt76_poll(dev, MT_USB_DMA_CFG, MT_USB_DMA_CFG_TX_BUSY, 0, 1000))
324 dev_warn(dev->mt76.dev, "Warning: TX DMA did not stop!\n");
326 /* Page count on TxQ */
328 while (i-- && ((mt76_rr(dev, 0x0438) & 0xffffffff) ||
329 (mt76_rr(dev, 0x0a30) & 0x000000ff) ||
330 (mt76_rr(dev, 0x0a34) & 0x00ff00ff)))
333 if (!mt76_poll(dev, MT_MAC_STATUS, MT_MAC_STATUS_TX, 0, 1000))
334 dev_warn(dev->mt76.dev, "Warning: MAC TX did not stop!\n");
336 mt76_clear(dev, MT_MAC_SYS_CTRL, MT_MAC_SYS_CTRL_ENABLE_RX |
337 MT_MAC_SYS_CTRL_ENABLE_TX);
339 /* Page count on RxQ */
343 if (!(mt76_rr(dev, MT_RXQ_STA) & 0x00ff0000) &&
344 !mt76_rr(dev, 0x0a30) &&
345 !mt76_rr(dev, 0x0a34)) {
353 if (!mt76_poll(dev, MT_MAC_STATUS, MT_MAC_STATUS_RX, 0, 1000))
354 dev_warn(dev->mt76.dev, "Warning: MAC RX did not stop!\n");
356 if (!mt76_poll(dev, MT_USB_DMA_CFG, MT_USB_DMA_CFG_RX_BUSY, 0, 1000))
357 dev_warn(dev->mt76.dev, "Warning: RX DMA did not stop!\n");
360 void mt76x0_mac_stop(struct mt76x0_dev *dev)
362 mt76x0_mac_stop_hw(dev);
363 flush_delayed_work(&dev->stat_work);
364 cancel_delayed_work_sync(&dev->stat_work);
367 static void mt76x0_stop_hardware(struct mt76x0_dev *dev)
369 mt76x0_chip_onoff(dev, false, false);
372 int mt76x0_init_hardware(struct mt76x0_dev *dev, bool reset)
374 static const u16 beacon_offsets[16] = {
375 /* 512 byte per beacon */
376 0xc000, 0xc200, 0xc400, 0xc600,
377 0xc800, 0xca00, 0xcc00, 0xce00,
378 0xd000, 0xd200, 0xd400, 0xd600,
379 0xd800, 0xda00, 0xdc00, 0xde00
383 dev->beacon_offsets = beacon_offsets;
385 mt76x0_chip_onoff(dev, true, reset);
387 ret = mt76x0_wait_asic_ready(dev);
390 ret = mt76x0_mcu_init(dev);
394 if (!mt76_poll_msec(dev, MT_WPDMA_GLO_CFG,
395 MT_WPDMA_GLO_CFG_TX_DMA_BUSY |
396 MT_WPDMA_GLO_CFG_RX_DMA_BUSY, 0, 100)) {
401 /* Wait for ASIC ready after FW load. */
402 ret = mt76x0_wait_asic_ready(dev);
406 mt76x0_reset_csr_bbp(dev);
407 mt76x0_init_usb_dma(dev);
409 mt76_wr(dev, MT_HEADER_TRANS_CTRL_REG, 0x0);
410 mt76_wr(dev, MT_TSO_CTRL, 0x0);
412 ret = mt76x0_mcu_cmd_init(dev);
415 ret = mt76x0_dma_init(dev);
419 mt76x0_init_mac_registers(dev);
421 if (!mt76_poll_msec(dev, MT_MAC_STATUS,
422 MT_MAC_STATUS_TX | MT_MAC_STATUS_RX, 0, 1000)) {
427 ret = mt76x0_init_bbp(dev);
431 ret = mt76x0_init_wcid_mem(dev);
434 ret = mt76x0_init_key_mem(dev);
437 ret = mt76x0_init_wcid_attr_mem(dev);
441 mt76_clear(dev, MT_BEACON_TIME_CFG, (MT_BEACON_TIME_CFG_TIMER_EN |
442 MT_BEACON_TIME_CFG_SYNC_MODE |
443 MT_BEACON_TIME_CFG_TBTT_EN |
444 MT_BEACON_TIME_CFG_BEACON_TX));
446 mt76x0_reset_counters(dev);
448 mt76_rmw(dev, MT_US_CYC_CFG, MT_US_CYC_CNT, 0x1e);
450 mt76_wr(dev, MT_TXOP_CTRL_CFG,
451 FIELD_PREP(MT_TXOP_TRUN_EN, 0x3f) |
452 FIELD_PREP(MT_TXOP_EXT_CCA_DLY, 0x58));
454 ret = mt76x0_eeprom_init(dev);
458 mt76x0_phy_init(dev);
462 mt76x0_dma_cleanup(dev);
464 mt76x0_mcu_cmd_deinit(dev);
466 mt76x0_chip_onoff(dev, false, false);
470 void mt76x0_cleanup(struct mt76x0_dev *dev)
472 if (!test_and_clear_bit(MT76_STATE_INITIALIZED, &dev->mt76.state))
475 mt76x0_stop_hardware(dev);
476 mt76x0_dma_cleanup(dev);
477 mt76x0_mcu_cmd_deinit(dev);
480 struct mt76x0_dev *mt76x0_alloc_device(struct device *pdev)
482 struct ieee80211_hw *hw;
483 struct mt76x0_dev *dev;
485 hw = ieee80211_alloc_hw(sizeof(*dev), &mt76x0_ops);
490 dev->mt76.dev = pdev;
492 mutex_init(&dev->usb_ctrl_mtx);
493 mutex_init(&dev->reg_atomic_mutex);
494 mutex_init(&dev->hw_atomic_mutex);
495 mutex_init(&dev->mutex);
496 spin_lock_init(&dev->tx_lock);
497 spin_lock_init(&dev->rx_lock);
498 spin_lock_init(&dev->mt76.lock);
499 spin_lock_init(&dev->mac_lock);
500 spin_lock_init(&dev->con_mon_lock);
501 atomic_set(&dev->avg_ampdu_len, 1);
502 skb_queue_head_init(&dev->tx_skb_done);
504 dev->stat_wq = alloc_workqueue("mt76x0", WQ_UNBOUND, 0);
506 ieee80211_free_hw(hw);
513 #define CHAN2G(_idx, _freq) { \
514 .band = NL80211_BAND_2GHZ, \
515 .center_freq = (_freq), \
516 .hw_value = (_idx), \
520 static const struct ieee80211_channel mt76_channels_2ghz[] = {
537 #define CHAN5G(_idx, _freq) { \
538 .band = NL80211_BAND_5GHZ, \
539 .center_freq = (_freq), \
540 .hw_value = (_idx), \
544 static const struct ieee80211_channel mt76_channels_5ghz[] = {
568 #define CCK_RATE(_idx, _rate) { \
570 .flags = IEEE80211_RATE_SHORT_PREAMBLE, \
571 .hw_value = (MT_PHY_TYPE_CCK << 8) | _idx, \
572 .hw_value_short = (MT_PHY_TYPE_CCK << 8) | (8 + _idx), \
575 #define OFDM_RATE(_idx, _rate) { \
577 .hw_value = (MT_PHY_TYPE_OFDM << 8) | _idx, \
578 .hw_value_short = (MT_PHY_TYPE_OFDM << 8) | _idx, \
581 static struct ieee80211_rate mt76_rates[] = {
597 mt76_init_sband(struct mt76x0_dev *dev, struct ieee80211_supported_band *sband,
598 const struct ieee80211_channel *chan, int n_chan,
599 struct ieee80211_rate *rates, int n_rates)
601 struct ieee80211_sta_ht_cap *ht_cap;
605 size = n_chan * sizeof(*chan);
606 chanlist = devm_kmemdup(dev->mt76.dev, chan, size, GFP_KERNEL);
610 sband->channels = chanlist;
611 sband->n_channels = n_chan;
612 sband->bitrates = rates;
613 sband->n_bitrates = n_rates;
615 ht_cap = &sband->ht_cap;
616 ht_cap->ht_supported = true;
617 ht_cap->cap = IEEE80211_HT_CAP_SUP_WIDTH_20_40 |
618 IEEE80211_HT_CAP_GRN_FLD |
619 IEEE80211_HT_CAP_SGI_20 |
620 IEEE80211_HT_CAP_SGI_40 |
621 (1 << IEEE80211_HT_CAP_RX_STBC_SHIFT);
623 ht_cap->mcs.rx_mask[0] = 0xff;
624 ht_cap->mcs.rx_mask[4] = 0x1;
625 ht_cap->mcs.tx_params = IEEE80211_HT_MCS_TX_DEFINED;
626 ht_cap->ampdu_factor = IEEE80211_HT_MAX_AMPDU_64K;
627 ht_cap->ampdu_density = IEEE80211_HT_MPDU_DENSITY_2;
633 mt76_init_sband_2g(struct mt76x0_dev *dev)
635 dev->mt76.hw->wiphy->bands[NL80211_BAND_2GHZ] = &dev->mt76.sband_2g.sband;
637 WARN_ON(dev->ee->reg.start - 1 + dev->ee->reg.num >
638 ARRAY_SIZE(mt76_channels_2ghz));
641 return mt76_init_sband(dev, &dev->mt76.sband_2g.sband,
642 mt76_channels_2ghz, ARRAY_SIZE(mt76_channels_2ghz),
643 mt76_rates, ARRAY_SIZE(mt76_rates));
647 mt76_init_sband_5g(struct mt76x0_dev *dev)
649 dev->mt76.hw->wiphy->bands[NL80211_BAND_5GHZ] = &dev->mt76.sband_5g.sband;
651 return mt76_init_sband(dev, &dev->mt76.sband_5g.sband,
652 mt76_channels_5ghz, ARRAY_SIZE(mt76_channels_5ghz),
653 mt76_rates + 4, ARRAY_SIZE(mt76_rates) - 4);
657 int mt76x0_register_device(struct mt76x0_dev *dev)
659 struct ieee80211_hw *hw = dev->mt76.hw;
660 struct wiphy *wiphy = hw->wiphy;
663 /* Reserve WCID 0 for mcast - thanks to this APs WCID will go to
664 * entry no. 1 like it does in the vendor driver.
666 dev->wcid_mask[0] |= 1;
668 /* init fake wcid for monitor interfaces */
669 dev->mon_wcid = devm_kmalloc(dev->mt76.dev, sizeof(*dev->mon_wcid),
673 dev->mon_wcid->idx = 0xff;
674 dev->mon_wcid->hw_key_idx = -1;
676 SET_IEEE80211_DEV(hw, dev->mt76.dev);
679 ieee80211_hw_set(hw, SIGNAL_DBM);
680 ieee80211_hw_set(hw, PS_NULLFUNC_STACK);
681 ieee80211_hw_set(hw, SUPPORTS_HT_CCK_RATES);
682 ieee80211_hw_set(hw, AMPDU_AGGREGATION);
683 ieee80211_hw_set(hw, SUPPORTS_RC_TABLE);
684 ieee80211_hw_set(hw, MFP_CAPABLE);
686 hw->max_report_rates = 7;
687 hw->max_rate_tries = 1;
689 hw->sta_data_size = sizeof(struct mt76_sta);
690 hw->vif_data_size = sizeof(struct mt76_vif);
692 SET_IEEE80211_PERM_ADDR(hw, dev->macaddr);
694 wiphy->features |= NL80211_FEATURE_ACTIVE_MONITOR;
695 wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION);
697 if (dev->ee->has_2ghz) {
698 ret = mt76_init_sband_2g(dev);
703 if (dev->ee->has_5ghz) {
704 ret = mt76_init_sband_5g(dev);
709 dev->mt76.chandef.chan = &dev->mt76.sband_2g.sband.channels[0];
711 INIT_DELAYED_WORK(&dev->mac_work, mt76x0_mac_work);
712 INIT_DELAYED_WORK(&dev->stat_work, mt76x0_tx_stat);
714 ret = ieee80211_register_hw(hw);
718 mt76x0_init_debugfs(dev);