drivers/net/wireless/intel/iwlwifi/mvm/fw.c

   1 // SPDX-License-Identifier: GPL-2.0 OR BSD-3-Clause
   2 /*
   3  * Copyright (C) 2012-2014, 2018-2024 Intel Corporation
   4  * Copyright (C) 2013-2015 Intel Mobile Communications GmbH
   5  * Copyright (C) 2016-2017 Intel Deutschland GmbH
   6  */
   7 #include <net/mac80211.h>
   8 #include <linux/netdevice.h>
   9 #include <linux/dmi.h>
  10
  11 #include "iwl-trans.h"
  12 #include "iwl-op-mode.h"
  13 #include "fw/img.h"
  14 #include "iwl-debug.h"
  15 #include "iwl-prph.h"
  16 #include "fw/acpi.h"
  17 #include "fw/pnvm.h"
  18 #include "fw/uefi.h"
  19 #include "fw/regulatory.h"
  20
  21 #include "mvm.h"
  22 #include "fw/dbg.h"
  23 #include "iwl-phy-db.h"
  24 #include "iwl-modparams.h"
  25 #include "iwl-nvm-parse.h"
  26 #include "time-sync.h"
  27
  28 #define MVM_UCODE_ALIVE_TIMEOUT (2 * HZ)
  29 #define MVM_UCODE_CALIB_TIMEOUT (2 * HZ)
  30
  31 #define IWL_UATS_VLP_AP_SUPPORTED BIT(29)
  32 #define IWL_UATS_AFC_AP_SUPPORTED BIT(30)
  33
  34 struct iwl_mvm_alive_data {
  35         bool valid;
  36         u32 scd_base_addr;
  37 };
  38
  39 static int iwl_send_tx_ant_cfg(struct iwl_mvm *mvm, u8 valid_tx_ant)
  40 {
  41         struct iwl_tx_ant_cfg_cmd tx_ant_cmd = {
  42                 .valid = cpu_to_le32(valid_tx_ant),
  43         };
  44
  45         IWL_DEBUG_FW(mvm, "select valid tx ant: %u\n", valid_tx_ant);
  46         return iwl_mvm_send_cmd_pdu(mvm, TX_ANT_CONFIGURATION_CMD, 0,
  47                                     sizeof(tx_ant_cmd), &tx_ant_cmd);
  48 }
  49
  50 static int iwl_send_rss_cfg_cmd(struct iwl_mvm *mvm)
  51 {
  52         int i;
  53         struct iwl_rss_config_cmd cmd = {
  54                 .flags = cpu_to_le32(IWL_RSS_ENABLE),
  55                 .hash_mask = BIT(IWL_RSS_HASH_TYPE_IPV4_TCP) |
  56                              BIT(IWL_RSS_HASH_TYPE_IPV4_UDP) |
  57                              BIT(IWL_RSS_HASH_TYPE_IPV4_PAYLOAD) |
  58                              BIT(IWL_RSS_HASH_TYPE_IPV6_TCP) |
  59                              BIT(IWL_RSS_HASH_TYPE_IPV6_UDP) |
  60                              BIT(IWL_RSS_HASH_TYPE_IPV6_PAYLOAD),
  61         };
  62
  63         if (mvm->trans->num_rx_queues == 1)
  64                 return 0;
  65
  66         /* Do not direct RSS traffic to Q 0 which is our fallback queue */
  67         for (i = 0; i < ARRAY_SIZE(cmd.indirection_table); i++)
  68                 cmd.indirection_table[i] =
  69                         1 + (i % (mvm->trans->num_rx_queues - 1));
  70         netdev_rss_key_fill(cmd.secret_key, sizeof(cmd.secret_key));
  71
  72         return iwl_mvm_send_cmd_pdu(mvm, RSS_CONFIG_CMD, 0, sizeof(cmd), &cmd);
  73 }
  74
  75 static int iwl_mvm_send_dqa_cmd(struct iwl_mvm *mvm)
  76 {
  77         struct iwl_dqa_enable_cmd dqa_cmd = {
  78                 .cmd_queue = cpu_to_le32(IWL_MVM_DQA_CMD_QUEUE),
  79         };
  80         u32 cmd_id = WIDE_ID(DATA_PATH_GROUP, DQA_ENABLE_CMD);
  81         int ret;
  82
  83         ret = iwl_mvm_send_cmd_pdu(mvm, cmd_id, 0, sizeof(dqa_cmd), &dqa_cmd);
  84         if (ret)
  85                 IWL_ERR(mvm, "Failed to send DQA enabling command: %d\n", ret);
  86         else
  87                 IWL_DEBUG_FW(mvm, "Working in DQA mode\n");
  88
  89         return ret;
  90 }
  91
  92 void iwl_mvm_mfu_assert_dump_notif(struct iwl_mvm *mvm,
  93                                    struct iwl_rx_cmd_buffer *rxb)
  94 {
  95         struct iwl_rx_packet *pkt = rxb_addr(rxb);
  96         struct iwl_mfu_assert_dump_notif *mfu_dump_notif = (void *)pkt->data;
  97         __le32 *dump_data = mfu_dump_notif->data;
  98         int n_words = le32_to_cpu(mfu_dump_notif->data_size) / sizeof(__le32);
  99         int i;
 100
 101         if (mfu_dump_notif->index_num == 0)
 102                 IWL_INFO(mvm, "MFUART assert id 0x%x occurred\n",
 103                          le32_to_cpu(mfu_dump_notif->assert_id));
 104
 105         for (i = 0; i < n_words; i++)
 106                 IWL_DEBUG_INFO(mvm,
 107                                "MFUART assert dump, dword %u: 0x%08x\n",
 108                                le16_to_cpu(mfu_dump_notif->index_num) *
 109                                n_words + i,
 110                                le32_to_cpu(dump_data[i]));
 111 }
 112
 113 static bool iwl_alive_fn(struct iwl_notif_wait_data *notif_wait,
 114                          struct iwl_rx_packet *pkt, void *data)
 115 {
 116         unsigned int pkt_len = iwl_rx_packet_payload_len(pkt);
 117         struct iwl_mvm *mvm =
 118                 container_of(notif_wait, struct iwl_mvm, notif_wait);
 119         struct iwl_mvm_alive_data *alive_data = data;
 120         struct iwl_umac_alive *umac;
 121         struct iwl_lmac_alive *lmac1;
 122         struct iwl_lmac_alive *lmac2 = NULL;
 123         u16 status;
 124         u32 lmac_error_event_table, umac_error_table;
 125         u32 version = iwl_fw_lookup_notif_ver(mvm->fw, LEGACY_GROUP,
 126                                               UCODE_ALIVE_NTFY, 0);
 127         u32 i;
 128
 129
 130         if (version == 6) {
 131                 struct iwl_alive_ntf_v6 *palive;
 132
 133                 if (pkt_len < sizeof(*palive))
 134                         return false;
 135
 136                 palive = (void *)pkt->data;
 137                 mvm->trans->dbg.imr_data.imr_enable =
 138                         le32_to_cpu(palive->imr.enabled);
 139                 mvm->trans->dbg.imr_data.imr_size =
 140                         le32_to_cpu(palive->imr.size);
 141                 mvm->trans->dbg.imr_data.imr2sram_remainbyte =
 142                         mvm->trans->dbg.imr_data.imr_size;
 143                 mvm->trans->dbg.imr_data.imr_base_addr =
 144                         palive->imr.base_addr;
 145                 mvm->trans->dbg.imr_data.imr_curr_addr =
 146                         le64_to_cpu(mvm->trans->dbg.imr_data.imr_base_addr);
 147                 IWL_DEBUG_FW(mvm, "IMR Enabled: 0x0%x  size 0x0%x Address 0x%016llx\n",
 148                              mvm->trans->dbg.imr_data.imr_enable,
 149                              mvm->trans->dbg.imr_data.imr_size,
 150                              le64_to_cpu(mvm->trans->dbg.imr_data.imr_base_addr));
 151
 152                 if (!mvm->trans->dbg.imr_data.imr_enable) {
 153                         for (i = 0; i < ARRAY_SIZE(mvm->trans->dbg.active_regions); i++) {
 154                                 struct iwl_ucode_tlv *reg_tlv;
 155                                 struct iwl_fw_ini_region_tlv *reg;
 156
 157                                 reg_tlv = mvm->trans->dbg.active_regions[i];
 158                                 if (!reg_tlv)
 159                                         continue;
 160
 161                                 reg = (void *)reg_tlv->data;
 162                                 /*
 163                                  * We have only one DRAM IMR region, so we
 164                                  * can break as soon as we find the first
 165                                  * one.
 166                                  */
 167                                 if (reg->type == IWL_FW_INI_REGION_DRAM_IMR) {
 168                                         mvm->trans->dbg.unsupported_region_msk |= BIT(i);
 169                                         break;
 170                                 }
 171                         }
 172                 }
 173         }
 174
 175         if (version >= 5) {
 176                 struct iwl_alive_ntf_v5 *palive;
 177
 178                 if (pkt_len < sizeof(*palive))
 179                         return false;
 180
 181                 palive = (void *)pkt->data;
 182                 umac = &palive->umac_data;
 183                 lmac1 = &palive->lmac_data[0];
 184                 lmac2 = &palive->lmac_data[1];
 185                 status = le16_to_cpu(palive->status);
 186
 187                 mvm->trans->sku_id[0] = le32_to_cpu(palive->sku_id.data[0]);
 188                 mvm->trans->sku_id[1] = le32_to_cpu(palive->sku_id.data[1]);
 189                 mvm->trans->sku_id[2] = le32_to_cpu(palive->sku_id.data[2]);
 190
 191                 IWL_DEBUG_FW(mvm, "Got sku_id: 0x0%x 0x0%x 0x0%x\n",
 192                              mvm->trans->sku_id[0],
 193                              mvm->trans->sku_id[1],
 194                              mvm->trans->sku_id[2]);
 195         } else if (iwl_rx_packet_payload_len(pkt) == sizeof(struct iwl_alive_ntf_v4)) {
 196                 struct iwl_alive_ntf_v4 *palive;
 197
 198                 if (pkt_len < sizeof(*palive))
 199                         return false;
 200
 201                 palive = (void *)pkt->data;
 202                 umac = &palive->umac_data;
 203                 lmac1 = &palive->lmac_data[0];
 204                 lmac2 = &palive->lmac_data[1];
 205                 status = le16_to_cpu(palive->status);
 206         } else if (iwl_rx_packet_payload_len(pkt) ==
 207                    sizeof(struct iwl_alive_ntf_v3)) {
 208                 struct iwl_alive_ntf_v3 *palive3;
 209
 210                 if (pkt_len < sizeof(*palive3))
 211                         return false;
 212
 213                 palive3 = (void *)pkt->data;
 214                 umac = &palive3->umac_data;
 215                 lmac1 = &palive3->lmac_data;
 216                 status = le16_to_cpu(palive3->status);
 217         } else {
 218                 WARN(1, "unsupported alive notification (size %d)\n",
 219                      iwl_rx_packet_payload_len(pkt));
 220                 /* get timeout later */
 221                 return false;
 222         }
 223
 224         lmac_error_event_table =
 225                 le32_to_cpu(lmac1->dbg_ptrs.error_event_table_ptr);
 226         iwl_fw_lmac1_set_alive_err_table(mvm->trans, lmac_error_event_table);
 227
 228         if (lmac2)
 229                 mvm->trans->dbg.lmac_error_event_table[1] =
 230                         le32_to_cpu(lmac2->dbg_ptrs.error_event_table_ptr);
 231
 232         umac_error_table = le32_to_cpu(umac->dbg_ptrs.error_info_addr) &
 233                                                         ~FW_ADDR_CACHE_CONTROL;
 234
 235         if (umac_error_table) {
 236                 if (umac_error_table >=
 237                     mvm->trans->cfg->min_umac_error_event_table) {
 238                         iwl_fw_umac_set_alive_err_table(mvm->trans,
 239                                                         umac_error_table);
 240                 } else {
 241                         IWL_ERR(mvm,
 242                                 "Not valid error log pointer 0x%08X for %s uCode\n",
 243                                 umac_error_table,
 244                                 (mvm->fwrt.cur_fw_img == IWL_UCODE_INIT) ?
 245                                 "Init" : "RT");
 246                 }
 247         }
 248
 249         alive_data->scd_base_addr = le32_to_cpu(lmac1->dbg_ptrs.scd_base_ptr);
 250         alive_data->valid = status == IWL_ALIVE_STATUS_OK;
 251
 252         IWL_DEBUG_FW(mvm,
 253                      "Alive ucode status 0x%04x revision 0x%01X 0x%01X\n",
 254                      status, lmac1->ver_type, lmac1->ver_subtype);
 255
 256         if (lmac2)
 257                 IWL_DEBUG_FW(mvm, "Alive ucode CDB\n");
 258
 259         IWL_DEBUG_FW(mvm,
 260                      "UMAC version: Major - 0x%x, Minor - 0x%x\n",
 261                      le32_to_cpu(umac->umac_major),
 262                      le32_to_cpu(umac->umac_minor));
 263
 264         iwl_fwrt_update_fw_versions(&mvm->fwrt, lmac1, umac);
 265
 266         return true;
 267 }
 268
 269 static bool iwl_wait_init_complete(struct iwl_notif_wait_data *notif_wait,
 270                                    struct iwl_rx_packet *pkt, void *data)
 271 {
 272         WARN_ON(pkt->hdr.cmd != INIT_COMPLETE_NOTIF);
 273
 274         return true;
 275 }
 276
 277 static bool iwl_wait_phy_db_entry(struct iwl_notif_wait_data *notif_wait,
 278                                   struct iwl_rx_packet *pkt, void *data)
 279 {
 280         struct iwl_phy_db *phy_db = data;
 281
 282         if (pkt->hdr.cmd != CALIB_RES_NOTIF_PHY_DB) {
 283                 WARN_ON(pkt->hdr.cmd != INIT_COMPLETE_NOTIF);
 284                 return true;
 285         }
 286
 287         WARN_ON(iwl_phy_db_set_section(phy_db, pkt));
 288
 289         return false;
 290 }
 291
 292 static void iwl_mvm_print_pd_notification(struct iwl_mvm *mvm)
 293 {
 294 #define IWL_FW_PRINT_REG_INFO(reg_name) \
 295         IWL_ERR(mvm, #reg_name ": 0x%x\n", iwl_read_umac_prph(trans, reg_name))
 296
 297         struct iwl_trans *trans = mvm->trans;
 298         enum iwl_device_family device_family = trans->trans_cfg->device_family;
 299
 300         if (device_family < IWL_DEVICE_FAMILY_8000)
 301                 return;
 302
 303         if (device_family <= IWL_DEVICE_FAMILY_9000)
 304                 IWL_FW_PRINT_REG_INFO(WFPM_ARC1_PD_NOTIFICATION);
 305         else
 306                 IWL_FW_PRINT_REG_INFO(WFPM_LMAC1_PD_NOTIFICATION);
 307
 308         IWL_FW_PRINT_REG_INFO(HPM_SECONDARY_DEVICE_STATE);
 309
 310         /* print OPT info */
 311         IWL_FW_PRINT_REG_INFO(WFPM_MAC_OTP_CFG7_ADDR);
 312         IWL_FW_PRINT_REG_INFO(WFPM_MAC_OTP_CFG7_DATA);
 313 }
 314
 315 static int iwl_mvm_load_ucode_wait_alive(struct iwl_mvm *mvm,
 316                                          enum iwl_ucode_type ucode_type)
 317 {
 318         struct iwl_notification_wait alive_wait;
 319         struct iwl_mvm_alive_data alive_data = {};
 320         const struct fw_img *fw;
 321         int ret;
 322         enum iwl_ucode_type old_type = mvm->fwrt.cur_fw_img;
 323         static const u16 alive_cmd[] = { UCODE_ALIVE_NTFY };
 324         bool run_in_rfkill =
 325                 ucode_type == IWL_UCODE_INIT || iwl_mvm_has_unified_ucode(mvm);
 326         u8 count;
 327         struct iwl_pc_data *pc_data;
 328
 329         if (ucode_type == IWL_UCODE_REGULAR &&
 330             iwl_fw_dbg_conf_usniffer(mvm->fw, FW_DBG_START_FROM_ALIVE) &&
 331             !(fw_has_capa(&mvm->fw->ucode_capa,
 332                           IWL_UCODE_TLV_CAPA_USNIFFER_UNIFIED)))
 333                 fw = iwl_get_ucode_image(mvm->fw, IWL_UCODE_REGULAR_USNIFFER);
 334         else
 335                 fw = iwl_get_ucode_image(mvm->fw, ucode_type);
 336         if (WARN_ON(!fw))
 337                 return -EINVAL;
 338         iwl_fw_set_current_image(&mvm->fwrt, ucode_type);
 339         clear_bit(IWL_MVM_STATUS_FIRMWARE_RUNNING, &mvm->status);
 340
 341         iwl_init_notification_wait(&mvm->notif_wait, &alive_wait,
 342                                    alive_cmd, ARRAY_SIZE(alive_cmd),
 343                                    iwl_alive_fn, &alive_data);
 344
 345         /*
 346          * We want to load the INIT firmware even in RFKILL
 347          * For the unified firmware case, the ucode_type is not
 348          * INIT, but we still need to run it.
 349          */
 350         ret = iwl_trans_start_fw(mvm->trans, fw, run_in_rfkill);
 351         if (ret) {
 352                 iwl_fw_set_current_image(&mvm->fwrt, old_type);
 353                 iwl_remove_notification(&mvm->notif_wait, &alive_wait);
 354                 return ret;
 355         }
 356
 357         /*
 358          * Some things may run in the background now, but we
 359          * just wait for the ALIVE notification here.
 360          */
 361         ret = iwl_wait_notification(&mvm->notif_wait, &alive_wait,
 362                                     MVM_UCODE_ALIVE_TIMEOUT);
 363
 364         if (mvm->trans->trans_cfg->device_family ==
 365             IWL_DEVICE_FAMILY_AX210) {
 366                 /* print these registers regardless of alive fail/success */
 367                 IWL_INFO(mvm, "WFPM_UMAC_PD_NOTIFICATION: 0x%x\n",
 368                          iwl_read_umac_prph(mvm->trans, WFPM_ARC1_PD_NOTIFICATION));
 369                 IWL_INFO(mvm, "WFPM_LMAC2_PD_NOTIFICATION: 0x%x\n",
 370                          iwl_read_umac_prph(mvm->trans, WFPM_LMAC2_PD_NOTIFICATION));
 371                 IWL_INFO(mvm, "WFPM_AUTH_KEY_0: 0x%x\n",
 372                          iwl_read_umac_prph(mvm->trans, SB_MODIFY_CFG_FLAG));
 373                 IWL_INFO(mvm, "CNVI_SCU_SEQ_DATA_DW9: 0x%x\n",
 374                          iwl_read_prph(mvm->trans, CNVI_SCU_SEQ_DATA_DW9));
 375         }
 376
 377         if (ret) {
 378                 struct iwl_trans *trans = mvm->trans;
 379
 380                 /* SecBoot info */
 381                 if (trans->trans_cfg->device_family >=
 382                                         IWL_DEVICE_FAMILY_22000) {
 383                         IWL_ERR(mvm,
 384                                 "SecBoot CPU1 Status: 0x%x, CPU2 Status: 0x%x\n",
 385                                 iwl_read_umac_prph(trans, UMAG_SB_CPU_1_STATUS),
 386                                 iwl_read_umac_prph(trans,
 387                                                    UMAG_SB_CPU_2_STATUS));
 388                 } else if (trans->trans_cfg->device_family >=
 389                            IWL_DEVICE_FAMILY_8000) {
 390                         IWL_ERR(mvm,
 391                                 "SecBoot CPU1 Status: 0x%x, CPU2 Status: 0x%x\n",
 392                                 iwl_read_prph(trans, SB_CPU_1_STATUS),
 393                                 iwl_read_prph(trans, SB_CPU_2_STATUS));
 394                 }
 395
 396                 iwl_mvm_print_pd_notification(mvm);
 397
 398                 /* LMAC/UMAC PC info */
 399                 if (trans->trans_cfg->device_family >=
 400                                         IWL_DEVICE_FAMILY_22000) {
 401                         pc_data = trans->dbg.pc_data;
 402                         for (count = 0; count < trans->dbg.num_pc;
 403                              count++, pc_data++)
 404                                 IWL_ERR(mvm, "%s: 0x%x\n",
 405                                         pc_data->pc_name,
 406                                         pc_data->pc_address);
 407                 } else if (trans->trans_cfg->device_family >=
 408                                         IWL_DEVICE_FAMILY_9000) {
 409                         IWL_ERR(mvm, "UMAC PC: 0x%x\n",
 410                                 iwl_read_umac_prph(trans,
 411                                                    UREG_UMAC_CURRENT_PC));
 412                         IWL_ERR(mvm, "LMAC PC: 0x%x\n",
 413                                 iwl_read_umac_prph(trans,
 414                                                    UREG_LMAC1_CURRENT_PC));
 415                         if (iwl_mvm_is_cdb_supported(mvm))
 416                                 IWL_ERR(mvm, "LMAC2 PC: 0x%x\n",
 417                                         iwl_read_umac_prph(trans,
 418                                                 UREG_LMAC2_CURRENT_PC));
 419                 }
 420
 421                 if (ret == -ETIMEDOUT && !mvm->pldr_sync)
 422                         iwl_fw_dbg_error_collect(&mvm->fwrt,
 423                                                  FW_DBG_TRIGGER_ALIVE_TIMEOUT);
 424
 425                 iwl_fw_set_current_image(&mvm->fwrt, old_type);
 426                 return ret;
 427         }
 428
 429         if (!alive_data.valid) {
 430                 IWL_ERR(mvm, "Loaded ucode is not valid!\n");
 431                 iwl_fw_set_current_image(&mvm->fwrt, old_type);
 432                 return -EIO;
 433         }
 434
 435         /* if reached this point, Alive notification was received */
 436         iwl_mei_alive_notif(true);
 437
 438         ret = iwl_pnvm_load(mvm->trans, &mvm->notif_wait,
 439                             &mvm->fw->ucode_capa);
 440         if (ret) {
 441                 IWL_ERR(mvm, "Timeout waiting for PNVM load!\n");
 442                 iwl_fw_set_current_image(&mvm->fwrt, old_type);
 443                 return ret;
 444         }
 445
 446         iwl_trans_fw_alive(mvm->trans, alive_data.scd_base_addr);
 447
 448         /*
 449          * Note: all the queues are enabled as part of the interface
 450          * initialization, but in firmware restart scenarios they
 451          * could be stopped, so wake them up. In firmware restart,
 452          * mac80211 will have the queues stopped as well until the
 453          * reconfiguration completes. During normal startup, they
 454          * will be empty.
 455          */
 456
 457         memset(&mvm->queue_info, 0, sizeof(mvm->queue_info));
 458         /*
 459          * Set a 'fake' TID for the command queue, since we use the
 460          * hweight() of the tid_bitmap as a refcount now. Not that
 461          * we ever even consider the command queue as one we might
 462          * want to reuse, but be safe nevertheless.
 463          */
 464         mvm->queue_info[IWL_MVM_DQA_CMD_QUEUE].tid_bitmap =
 465                 BIT(IWL_MAX_TID_COUNT + 2);
 466
 467         set_bit(IWL_MVM_STATUS_FIRMWARE_RUNNING, &mvm->status);
 468 #ifdef CONFIG_IWLWIFI_DEBUGFS
 469         iwl_fw_set_dbg_rec_on(&mvm->fwrt);
 470 #endif
 471
 472         /*
 473          * All the BSSes in the BSS table include the GP2 in the system
 474          * at the beacon Rx time, this is of course no longer relevant
 475          * since we are resetting the firmware.
 476          * Purge all the BSS table.
 477          */
 478         cfg80211_bss_flush(mvm->hw->wiphy);
 479
 480         return 0;
 481 }
 482
 483 static void iwl_mvm_phy_filter_init(struct iwl_mvm *mvm,
 484                                     struct iwl_phy_specific_cfg *phy_filters)
 485 {
 486 #ifdef CONFIG_ACPI
 487         *phy_filters = mvm->phy_filters;
 488 #endif /* CONFIG_ACPI */
 489 }
 490
 491 static void iwl_mvm_uats_init(struct iwl_mvm *mvm)
 492 {
 493         u8 cmd_ver;
 494         int ret;
 495         struct iwl_host_cmd cmd = {
 496                 .id = WIDE_ID(REGULATORY_AND_NVM_GROUP,
 497                               UATS_TABLE_CMD),
 498                 .flags = 0,
 499                 .data[0] = &mvm->fwrt.uats_table,
 500                 .len[0] =  sizeof(mvm->fwrt.uats_table),
 501                 .dataflags[0] = IWL_HCMD_DFL_NOCOPY,
 502         };
 503
 504         if (!(mvm->trans->trans_cfg->device_family >=
 505               IWL_DEVICE_FAMILY_AX210)) {
 506                 IWL_DEBUG_RADIO(mvm, "UATS feature is not supported\n");
 507                 return;
 508         }
 509
 510         if (!mvm->fwrt.uats_enabled) {
 511                 IWL_DEBUG_RADIO(mvm, "UATS feature is disabled\n");
 512                 return;
 513         }
 514
 515         cmd_ver = iwl_fw_lookup_cmd_ver(mvm->fw, cmd.id,
 516                                         IWL_FW_CMD_VER_UNKNOWN);
 517         if (cmd_ver != 1) {
 518                 IWL_DEBUG_RADIO(mvm,
 519                                 "UATS_TABLE_CMD ver %d not supported\n",
 520                                 cmd_ver);
 521                 return;
 522         }
 523
 524         ret = iwl_uefi_get_uats_table(mvm->trans, &mvm->fwrt);
 525         if (ret < 0) {
 526                 IWL_ERR(mvm, "failed to read UATS table (%d)\n", ret);
 527                 return;
 528         }
 529
 530         ret = iwl_mvm_send_cmd(mvm, &cmd);
 531         if (ret < 0)
 532                 IWL_ERR(mvm, "failed to send UATS_TABLE_CMD (%d)\n", ret);
 533         else
 534                 IWL_DEBUG_RADIO(mvm, "UATS_TABLE_CMD sent to FW\n");
 535 }
 536
 537 static int iwl_mvm_sgom_init(struct iwl_mvm *mvm)
 538 {
 539         u8 cmd_ver;
 540         int ret;
 541         struct iwl_host_cmd cmd = {
 542                 .id = WIDE_ID(REGULATORY_AND_NVM_GROUP,
 543                               SAR_OFFSET_MAPPING_TABLE_CMD),
 544                 .flags = 0,
 545                 .data[0] = &mvm->fwrt.sgom_table,
 546                 .len[0] =  sizeof(mvm->fwrt.sgom_table),
 547                 .dataflags[0] = IWL_HCMD_DFL_NOCOPY,
 548         };
 549
 550         if (!mvm->fwrt.sgom_enabled) {
 551                 IWL_DEBUG_RADIO(mvm, "SGOM table is disabled\n");
 552                 return 0;
 553         }
 554
 555         cmd_ver = iwl_fw_lookup_cmd_ver(mvm->fw, cmd.id,
 556                                         IWL_FW_CMD_VER_UNKNOWN);
 557
 558         if (cmd_ver != 2) {
 559                 IWL_DEBUG_RADIO(mvm, "command version is unsupported. version = %d\n",
 560                                 cmd_ver);
 561                 return 0;
 562         }
 563
 564         ret = iwl_mvm_send_cmd(mvm, &cmd);
 565         if (ret < 0)
 566                 IWL_ERR(mvm, "failed to send SAR_OFFSET_MAPPING_CMD (%d)\n", ret);
 567
 568         return ret;
 569 }
 570
 571 static int iwl_send_phy_cfg_cmd(struct iwl_mvm *mvm)
 572 {
 573         u32 cmd_id = PHY_CONFIGURATION_CMD;
 574         struct iwl_phy_cfg_cmd_v3 phy_cfg_cmd;
 575         enum iwl_ucode_type ucode_type = mvm->fwrt.cur_fw_img;
 576         u8 cmd_ver;
 577         size_t cmd_size;
 578
 579         if (iwl_mvm_has_unified_ucode(mvm) &&
 580             !mvm->trans->cfg->tx_with_siso_diversity)
 581                 return 0;
 582
 583         if (mvm->trans->cfg->tx_with_siso_diversity) {
 584                 /*
 585                  * TODO: currently we don't set the antenna but letting the NIC
 586                  * to decide which antenna to use. This should come from BIOS.
 587                  */
 588                 phy_cfg_cmd.phy_cfg =
 589                         cpu_to_le32(FW_PHY_CFG_CHAIN_SAD_ENABLED);
 590         }
 591
 592         /* Set parameters */
 593         phy_cfg_cmd.phy_cfg = cpu_to_le32(iwl_mvm_get_phy_config(mvm));
 594
 595         /* set flags extra PHY configuration flags from the device's cfg */
 596         phy_cfg_cmd.phy_cfg |=
 597                 cpu_to_le32(mvm->trans->trans_cfg->extra_phy_cfg_flags);
 598
 599         phy_cfg_cmd.calib_control.event_trigger =
 600                 mvm->fw->default_calib[ucode_type].event_trigger;
 601         phy_cfg_cmd.calib_control.flow_trigger =
 602                 mvm->fw->default_calib[ucode_type].flow_trigger;
 603
 604         cmd_ver = iwl_fw_lookup_cmd_ver(mvm->fw, cmd_id,
 605                                         IWL_FW_CMD_VER_UNKNOWN);
 606         if (cmd_ver >= 3)
 607                 iwl_mvm_phy_filter_init(mvm, &phy_cfg_cmd.phy_specific_cfg);
 608
 609         IWL_DEBUG_INFO(mvm, "Sending Phy CFG command: 0x%x\n",
 610                        phy_cfg_cmd.phy_cfg);
 611         cmd_size = (cmd_ver == 3) ? sizeof(struct iwl_phy_cfg_cmd_v3) :
 612                                     sizeof(struct iwl_phy_cfg_cmd_v1);
 613         return iwl_mvm_send_cmd_pdu(mvm, cmd_id, 0, cmd_size, &phy_cfg_cmd);
 614 }
 615
 616 static int iwl_run_unified_mvm_ucode(struct iwl_mvm *mvm)
 617 {
 618         struct iwl_notification_wait init_wait;
 619         struct iwl_nvm_access_complete_cmd nvm_complete = {};
 620         struct iwl_init_extended_cfg_cmd init_cfg = {
 621                 .init_flags = cpu_to_le32(BIT(IWL_INIT_NVM)),
 622         };
 623         static const u16 init_complete[] = {
 624                 INIT_COMPLETE_NOTIF,
 625         };
 626         u32 sb_cfg;
 627         int ret;
 628
 629         if (mvm->trans->cfg->tx_with_siso_diversity)
 630                 init_cfg.init_flags |= cpu_to_le32(BIT(IWL_INIT_PHY));
 631
 632         lockdep_assert_held(&mvm->mutex);
 633
 634         mvm->rfkill_safe_init_done = false;
 635
 636         if (mvm->trans->trans_cfg->device_family == IWL_DEVICE_FAMILY_AX210) {
 637                 sb_cfg = iwl_read_umac_prph(mvm->trans, SB_MODIFY_CFG_FLAG);
 638                 /* if needed, we'll reset this on our way out later */
 639                 mvm->pldr_sync = sb_cfg == SB_CFG_RESIDES_IN_ROM;
 640                 if (mvm->pldr_sync && iwl_mei_pldr_req())
 641                         return -EBUSY;
 642         }
 643
 644         iwl_init_notification_wait(&mvm->notif_wait,
 645                                    &init_wait,
 646                                    init_complete,
 647                                    ARRAY_SIZE(init_complete),
 648                                    iwl_wait_init_complete,
 649                                    NULL);
 650
 651         iwl_dbg_tlv_time_point(&mvm->fwrt, IWL_FW_INI_TIME_POINT_EARLY, NULL);
 652
 653         /* Will also start the device */
 654         ret = iwl_mvm_load_ucode_wait_alive(mvm, IWL_UCODE_REGULAR);
 655         if (ret) {
 656                 IWL_ERR(mvm, "Failed to start RT ucode: %d\n", ret);
 657
 658                 /* if we needed reset then fail here, but notify and remove */
 659                 if (mvm->pldr_sync) {
 660                         iwl_mei_alive_notif(false);
 661                         iwl_trans_pcie_remove(mvm->trans, true);
 662                 }
 663
 664                 goto error;
 665         }
 666         iwl_dbg_tlv_time_point(&mvm->fwrt, IWL_FW_INI_TIME_POINT_AFTER_ALIVE,
 667                                NULL);
 668
 669         if (mvm->trans->trans_cfg->device_family == IWL_DEVICE_FAMILY_BZ)
 670                 mvm->trans->step_urm = !!(iwl_read_umac_prph(mvm->trans,
 671                                                              CNVI_PMU_STEP_FLOW) &
 672                                                 CNVI_PMU_STEP_FLOW_FORCE_URM);
 673
 674         /* Send init config command to mark that we are sending NVM access
 675          * commands
 676          */
 677         ret = iwl_mvm_send_cmd_pdu(mvm, WIDE_ID(SYSTEM_GROUP,
 678                                                 INIT_EXTENDED_CFG_CMD),
 679                                    CMD_SEND_IN_RFKILL,
 680                                    sizeof(init_cfg), &init_cfg);
 681         if (ret) {
 682                 IWL_ERR(mvm, "Failed to run init config command: %d\n",
 683                         ret);
 684                 goto error;
 685         }
 686
 687         /* Load NVM to NIC if needed */
 688         if (mvm->nvm_file_name) {
 689                 ret = iwl_read_external_nvm(mvm->trans, mvm->nvm_file_name,
 690                                             mvm->nvm_sections);
 691                 if (ret)
 692                         goto error;
 693                 ret = iwl_mvm_load_nvm_to_nic(mvm);
 694                 if (ret)
 695                         goto error;
 696         }
 697
 698         if (IWL_MVM_PARSE_NVM && !mvm->nvm_data) {
 699                 ret = iwl_nvm_init(mvm);
 700                 if (ret) {
 701                         IWL_ERR(mvm, "Failed to read NVM: %d\n", ret);
 702                         goto error;
 703                 }
 704         }
 705
 706         ret = iwl_mvm_send_cmd_pdu(mvm, WIDE_ID(REGULATORY_AND_NVM_GROUP,
 707                                                 NVM_ACCESS_COMPLETE),
 708                                    CMD_SEND_IN_RFKILL,
 709                                    sizeof(nvm_complete), &nvm_complete);
 710         if (ret) {
 711                 IWL_ERR(mvm, "Failed to run complete NVM access: %d\n",
 712                         ret);
 713                 goto error;
 714         }
 715
 716         ret = iwl_send_phy_cfg_cmd(mvm);
 717         if (ret) {
 718                 IWL_ERR(mvm, "Failed to run PHY configuration: %d\n",
 719                         ret);
 720                 goto error;
 721         }
 722
 723         /* We wait for the INIT complete notification */
 724         ret = iwl_wait_notification(&mvm->notif_wait, &init_wait,
 725                                     MVM_UCODE_ALIVE_TIMEOUT);
 726         if (ret)
 727                 return ret;
 728
 729         /* Read the NVM only at driver load time, no need to do this twice */
 730         if (!IWL_MVM_PARSE_NVM && !mvm->nvm_data) {
 731                 mvm->nvm_data = iwl_get_nvm(mvm->trans, mvm->fw,
 732                                             mvm->set_tx_ant, mvm->set_rx_ant);
 733                 if (IS_ERR(mvm->nvm_data)) {
 734                         ret = PTR_ERR(mvm->nvm_data);
 735                         mvm->nvm_data = NULL;
 736                         IWL_ERR(mvm, "Failed to read NVM: %d\n", ret);
 737                         return ret;
 738                 }
 739         }
 740
 741         mvm->rfkill_safe_init_done = true;
 742
 743         return 0;
 744
 745 error:
 746         iwl_remove_notification(&mvm->notif_wait, &init_wait);
 747         return ret;
 748 }
 749
 750 int iwl_run_init_mvm_ucode(struct iwl_mvm *mvm)
 751 {
 752         struct iwl_notification_wait calib_wait;
 753         static const u16 init_complete[] = {
 754                 INIT_COMPLETE_NOTIF,
 755                 CALIB_RES_NOTIF_PHY_DB
 756         };
 757         int ret;
 758
 759         if (iwl_mvm_has_unified_ucode(mvm))
 760                 return iwl_run_unified_mvm_ucode(mvm);
 761
 762         lockdep_assert_held(&mvm->mutex);
 763
 764         mvm->rfkill_safe_init_done = false;
 765
 766         iwl_init_notification_wait(&mvm->notif_wait,
 767                                    &calib_wait,
 768                                    init_complete,
 769                                    ARRAY_SIZE(init_complete),
 770                                    iwl_wait_phy_db_entry,
 771                                    mvm->phy_db);
 772
 773         iwl_dbg_tlv_time_point(&mvm->fwrt, IWL_FW_INI_TIME_POINT_EARLY, NULL);
 774
 775         /* Will also start the device */
 776         ret = iwl_mvm_load_ucode_wait_alive(mvm, IWL_UCODE_INIT);
 777         if (ret) {
 778                 IWL_ERR(mvm, "Failed to start INIT ucode: %d\n", ret);
 779                 goto remove_notif;
 780         }
 781
 782         if (mvm->trans->trans_cfg->device_family < IWL_DEVICE_FAMILY_8000) {
 783                 ret = iwl_mvm_send_bt_init_conf(mvm);
 784                 if (ret)
 785                         goto remove_notif;
 786         }
 787
 788         /* Read the NVM only at driver load time, no need to do this twice */
 789         if (!mvm->nvm_data) {
 790                 ret = iwl_nvm_init(mvm);
 791                 if (ret) {
 792                         IWL_ERR(mvm, "Failed to read NVM: %d\n", ret);
 793                         goto remove_notif;
 794                 }
 795         }
 796
 797         /* In case we read the NVM from external file, load it to the NIC */
 798         if (mvm->nvm_file_name) {
 799                 ret = iwl_mvm_load_nvm_to_nic(mvm);
 800                 if (ret)
 801                         goto remove_notif;
 802         }
 803
 804         WARN_ONCE(mvm->nvm_data->nvm_version < mvm->trans->cfg->nvm_ver,
 805                   "Too old NVM version (0x%0x, required = 0x%0x)",
 806                   mvm->nvm_data->nvm_version, mvm->trans->cfg->nvm_ver);
 807
 808         /*
 809          * abort after reading the nvm in case RF Kill is on, we will complete
 810          * the init seq later when RF kill will switch to off
 811          */
 812         if (iwl_mvm_is_radio_hw_killed(mvm)) {
 813                 IWL_DEBUG_RF_KILL(mvm,
 814                                   "jump over all phy activities due to RF kill\n");
 815                 goto remove_notif;
 816         }
 817
 818         mvm->rfkill_safe_init_done = true;
 819
 820         /* Send TX valid antennas before triggering calibrations */
 821         ret = iwl_send_tx_ant_cfg(mvm, iwl_mvm_get_valid_tx_ant(mvm));
 822         if (ret)
 823                 goto remove_notif;
 824
 825         ret = iwl_send_phy_cfg_cmd(mvm);
 826         if (ret) {
 827                 IWL_ERR(mvm, "Failed to run INIT calibrations: %d\n",
 828                         ret);
 829                 goto remove_notif;
 830         }
 831
 832         /*
 833          * Some things may run in the background now, but we
 834          * just wait for the calibration complete notification.
 835          */
 836         ret = iwl_wait_notification(&mvm->notif_wait, &calib_wait,
 837                                     MVM_UCODE_CALIB_TIMEOUT);
 838         if (!ret)
 839                 goto out;
 840
 841         if (iwl_mvm_is_radio_hw_killed(mvm)) {
 842                 IWL_DEBUG_RF_KILL(mvm, "RFKILL while calibrating.\n");
 843                 ret = 0;
 844         } else {
 845                 IWL_ERR(mvm, "Failed to run INIT calibrations: %d\n",
 846                         ret);
 847         }
 848
 849         goto out;
 850
 851 remove_notif:
 852         iwl_remove_notification(&mvm->notif_wait, &calib_wait);
 853 out:
 854         mvm->rfkill_safe_init_done = false;
 855         if (iwlmvm_mod_params.init_dbg && !mvm->nvm_data) {
 856                 /* we want to debug INIT and we have no NVM - fake */
 857                 mvm->nvm_data = kzalloc(sizeof(struct iwl_nvm_data) +
 858                                         sizeof(struct ieee80211_channel) +
 859                                         sizeof(struct ieee80211_rate),
 860                                         GFP_KERNEL);
 861                 if (!mvm->nvm_data)
 862                         return -ENOMEM;
 863                 mvm->nvm_data->bands[0].channels = mvm->nvm_data->channels;
 864                 mvm->nvm_data->bands[0].n_channels = 1;
 865                 mvm->nvm_data->bands[0].n_bitrates = 1;
 866                 mvm->nvm_data->bands[0].bitrates =
 867                         (void *)(mvm->nvm_data->channels + 1);
 868                 mvm->nvm_data->bands[0].bitrates->hw_value = 10;
 869         }
 870
 871         return ret;
 872 }
 873
 874 static int iwl_mvm_config_ltr(struct iwl_mvm *mvm)
 875 {
 876         struct iwl_ltr_config_cmd cmd = {
 877                 .flags = cpu_to_le32(LTR_CFG_FLAG_FEATURE_ENABLE),
 878         };
 879
 880         if (!mvm->trans->ltr_enabled)
 881                 return 0;
 882
 883         return iwl_mvm_send_cmd_pdu(mvm, LTR_CONFIG, 0,
 884                                     sizeof(cmd), &cmd);
 885 }
 886
 887 int iwl_mvm_sar_select_profile(struct iwl_mvm *mvm, int prof_a, int prof_b)
 888 {
 889         u32 cmd_id = REDUCE_TX_POWER_CMD;
 890         struct iwl_dev_tx_power_cmd cmd = {
 891                 .common.set_mode = cpu_to_le32(IWL_TX_POWER_MODE_SET_CHAINS),
 892         };
 893         __le16 *per_chain;
 894         int ret;
 895         u16 len = 0;
 896         u32 n_subbands;
 897         u8 cmd_ver = iwl_fw_lookup_cmd_ver(mvm->fw, cmd_id,
 898                                            IWL_FW_CMD_VER_UNKNOWN);
 899         if (cmd_ver == 7) {
 900                 len = sizeof(cmd.v7);
 901                 n_subbands = IWL_NUM_SUB_BANDS_V2;
 902                 per_chain = cmd.v7.per_chain[0][0];
 903                 cmd.v7.flags = cpu_to_le32(mvm->fwrt.reduced_power_flags);
 904         } else if (cmd_ver == 6) {
 905                 len = sizeof(cmd.v6);
 906                 n_subbands = IWL_NUM_SUB_BANDS_V2;
 907                 per_chain = cmd.v6.per_chain[0][0];
 908         } else if (fw_has_api(&mvm->fw->ucode_capa,
 909                               IWL_UCODE_TLV_API_REDUCE_TX_POWER)) {
 910                 len = sizeof(cmd.v5);
 911                 n_subbands = IWL_NUM_SUB_BANDS_V1;
 912                 per_chain = cmd.v5.per_chain[0][0];
 913         } else if (fw_has_capa(&mvm->fw->ucode_capa,
 914                                IWL_UCODE_TLV_CAPA_TX_POWER_ACK)) {
 915                 len = sizeof(cmd.v4);
 916                 n_subbands = IWL_NUM_SUB_BANDS_V1;
 917                 per_chain = cmd.v4.per_chain[0][0];
 918         } else {
 919                 len = sizeof(cmd.v3);
 920                 n_subbands = IWL_NUM_SUB_BANDS_V1;
 921                 per_chain = cmd.v3.per_chain[0][0];
 922         }
 923
 924         /* all structs have the same common part, add it */
 925         len += sizeof(cmd.common);
 926
 927         ret = iwl_sar_fill_profile(&mvm->fwrt, per_chain,
 928                                    IWL_NUM_CHAIN_TABLES,
 929                                    n_subbands, prof_a, prof_b);
 930
 931         /* return on error or if the profile is disabled (positive number) */
 932         if (ret)
 933                 return ret;
 934
 935         iwl_mei_set_power_limit(per_chain);
 936
 937         IWL_DEBUG_RADIO(mvm, "Sending REDUCE_TX_POWER_CMD per chain\n");
 938         return iwl_mvm_send_cmd_pdu(mvm, cmd_id, 0, len, &cmd);
 939 }
 940
 941 int iwl_mvm_get_sar_geo_profile(struct iwl_mvm *mvm)
 942 {
 943         union iwl_geo_tx_power_profiles_cmd geo_tx_cmd;
 944         struct iwl_geo_tx_power_profiles_resp *resp;
 945         u16 len;
 946         int ret;
 947         struct iwl_host_cmd cmd = {
 948                 .id = WIDE_ID(PHY_OPS_GROUP, PER_CHAIN_LIMIT_OFFSET_CMD),
 949                 .flags = CMD_WANT_SKB,
 950                 .data = { &geo_tx_cmd },
 951         };
 952         u8 cmd_ver = iwl_fw_lookup_cmd_ver(mvm->fw, cmd.id,
 953                                            IWL_FW_CMD_VER_UNKNOWN);
 954
 955         /* the ops field is at the same spot for all versions, so set in v1 */
 956         geo_tx_cmd.v1.ops =
 957                 cpu_to_le32(IWL_PER_CHAIN_OFFSET_GET_CURRENT_TABLE);
 958
 959         if (cmd_ver == 5)
 960                 len = sizeof(geo_tx_cmd.v5);
 961         else if (cmd_ver == 4)
 962                 len = sizeof(geo_tx_cmd.v4);
 963         else if (cmd_ver == 3)
 964                 len = sizeof(geo_tx_cmd.v3);
 965         else if (fw_has_api(&mvm->fwrt.fw->ucode_capa,
 966                             IWL_UCODE_TLV_API_SAR_TABLE_VER))
 967                 len = sizeof(geo_tx_cmd.v2);
 968         else
 969                 len = sizeof(geo_tx_cmd.v1);
 970
 971         if (!iwl_sar_geo_support(&mvm->fwrt))
 972                 return -EOPNOTSUPP;
 973
 974         cmd.len[0] = len;
 975
 976         ret = iwl_mvm_send_cmd(mvm, &cmd);
 977         if (ret) {
 978                 IWL_ERR(mvm, "Failed to get geographic profile info %d\n", ret);
 979                 return ret;
 980         }
 981
 982         resp = (void *)cmd.resp_pkt->data;
 983         ret = le32_to_cpu(resp->profile_idx);
 984
 985         if (WARN_ON(ret > BIOS_GEO_MAX_PROFILE_NUM))
 986                 ret = -EIO;
 987
 988         iwl_free_resp(&cmd);
 989         return ret;
 990 }
 991
 992 static int iwl_mvm_sar_geo_init(struct iwl_mvm *mvm)
 993 {
 994         u32 cmd_id = WIDE_ID(PHY_OPS_GROUP, PER_CHAIN_LIMIT_OFFSET_CMD);
 995         union iwl_geo_tx_power_profiles_cmd cmd;
 996         u16 len;
 997         u32 n_bands;
 998         u32 n_profiles;
 999         __le32 sk = cpu_to_le32(0);
1000         int ret;
1001         u8 cmd_ver = iwl_fw_lookup_cmd_ver(mvm->fw, cmd_id,
1002                                            IWL_FW_CMD_VER_UNKNOWN);
1003
1004         BUILD_BUG_ON(offsetof(struct iwl_geo_tx_power_profiles_cmd_v1, ops) !=
1005                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v2, ops) ||
1006                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v2, ops) !=
1007                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v3, ops) ||
1008                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v3, ops) !=
1009                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v4, ops) ||
1010                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v4, ops) !=
1011                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v5, ops));
1012
1013         /* the ops field is at the same spot for all versions, so set in v1 */
1014         cmd.v1.ops = cpu_to_le32(IWL_PER_CHAIN_OFFSET_SET_TABLES);
1015
1016         /* Only set to South Korea if the table revision is 1 */
1017         if (mvm->fwrt.geo_rev == 1)
1018                 sk = cpu_to_le32(1);
1019
1020         if (cmd_ver == 5) {
1021                 len = sizeof(cmd.v5);
1022                 n_bands = ARRAY_SIZE(cmd.v5.table[0]);
1023                 n_profiles = BIOS_GEO_MAX_PROFILE_NUM;
1024                 cmd.v5.table_revision = sk;
1025         } else if (cmd_ver == 4) {
1026                 len = sizeof(cmd.v4);
1027                 n_bands = ARRAY_SIZE(cmd.v4.table[0]);
1028                 n_profiles = BIOS_GEO_MAX_PROFILE_NUM;
1029                 cmd.v4.table_revision = sk;
1030         } else if (cmd_ver == 3) {
1031                 len = sizeof(cmd.v3);
1032                 n_bands = ARRAY_SIZE(cmd.v3.table[0]);
1033                 n_profiles = BIOS_GEO_MIN_PROFILE_NUM;
1034                 cmd.v3.table_revision = sk;
1035         } else if (fw_has_api(&mvm->fwrt.fw->ucode_capa,
1036                               IWL_UCODE_TLV_API_SAR_TABLE_VER)) {
1037                 len = sizeof(cmd.v2);
1038                 n_bands = ARRAY_SIZE(cmd.v2.table[0]);
1039                 n_profiles = BIOS_GEO_MIN_PROFILE_NUM;
1040                 cmd.v2.table_revision = sk;
1041         } else {
1042                 len = sizeof(cmd.v1);
1043                 n_bands = ARRAY_SIZE(cmd.v1.table[0]);
1044                 n_profiles = BIOS_GEO_MIN_PROFILE_NUM;
1045         }
1046
1047         BUILD_BUG_ON(offsetof(struct iwl_geo_tx_power_profiles_cmd_v1, table) !=
1048                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v2, table) ||
1049                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v2, table) !=
1050                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v3, table) ||
1051                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v3, table) !=
1052                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v4, table) ||
1053                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v4, table) !=
1054                      offsetof(struct iwl_geo_tx_power_profiles_cmd_v5, table));
1055         /* the table is at the same position for all versions, so set use v1 */
1056         ret = iwl_sar_geo_fill_table(&mvm->fwrt, &cmd.v1.table[0][0],
1057                                      n_bands, n_profiles);
1058
1059         /*
1060          * It is a valid scenario to not support SAR, or miss wgds table,
1061          * but in that case there is no need to send the command.
1062          */
1063         if (ret)
1064                 return 0;
1065
1066         return iwl_mvm_send_cmd_pdu(mvm, cmd_id, 0, len, &cmd);
1067 }
1068
1069 int iwl_mvm_ppag_send_cmd(struct iwl_mvm *mvm)
1070 {
1071         union iwl_ppag_table_cmd cmd;
1072         int ret, cmd_size;
1073
1074         ret = iwl_fill_ppag_table(&mvm->fwrt, &cmd, &cmd_size);
1075         /* Not supporting PPAG table is a valid scenario */
1076         if (ret < 0)
1077                 return 0;
1078
1079         IWL_DEBUG_RADIO(mvm, "Sending PER_PLATFORM_ANT_GAIN_CMD\n");
1080         ret = iwl_mvm_send_cmd_pdu(mvm, WIDE_ID(PHY_OPS_GROUP,
1081                                                 PER_PLATFORM_ANT_GAIN_CMD),
1082                                    0, cmd_size, &cmd);
1083         if (ret < 0)
1084                 IWL_ERR(mvm, "failed to send PER_PLATFORM_ANT_GAIN_CMD (%d)\n",
1085                         ret);
1086
1087         return ret;
1088 }
1089
1090 static int iwl_mvm_ppag_init(struct iwl_mvm *mvm)
1091 {
1092         /* no need to read the table, done in INIT stage */
1093         if (!(iwl_is_ppag_approved(&mvm->fwrt)))
1094                 return 0;
1095
1096         return iwl_mvm_ppag_send_cmd(mvm);
1097 }
1098
1099 static bool iwl_mvm_add_to_tas_block_list(__le32 *list, __le32 *le_size, unsigned int mcc)
1100 {
1101         int i;
1102         u32 size = le32_to_cpu(*le_size);
1103
1104         /* Verify that there is room for another country */
1105         if (size >= IWL_WTAS_BLACK_LIST_MAX)
1106                 return false;
1107
1108         for (i = 0; i < size; i++) {
1109                 if (list[i] == cpu_to_le32(mcc))
1110                         return true;
1111         }
1112
1113         list[size++] = cpu_to_le32(mcc);
1114         *le_size = cpu_to_le32(size);
1115         return true;
1116 }
1117
1118 static void iwl_mvm_tas_init(struct iwl_mvm *mvm)
1119 {
1120         u32 cmd_id = WIDE_ID(REGULATORY_AND_NVM_GROUP, TAS_CONFIG);
1121         int ret;
1122         struct iwl_tas_data data = {};
1123         struct iwl_tas_config_cmd cmd = {};
1124         int cmd_size, fw_ver;
1125
1126         BUILD_BUG_ON(ARRAY_SIZE(data.block_list_array) !=
1127                      IWL_WTAS_BLACK_LIST_MAX);
1128         BUILD_BUG_ON(ARRAY_SIZE(cmd.common.block_list_array) !=
1129                      IWL_WTAS_BLACK_LIST_MAX);
1130
1131         if (!fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_TAS_CFG)) {
1132                 IWL_DEBUG_RADIO(mvm, "TAS not enabled in FW\n");
1133                 return;
1134         }
1135
1136         ret = iwl_bios_get_tas_table(&mvm->fwrt, &data);
1137         if (ret < 0) {
1138                 IWL_DEBUG_RADIO(mvm,
1139                                 "TAS table invalid or unavailable. (%d)\n",
1140                                 ret);
1141                 return;
1142         }
1143
1144         if (ret == 0)
1145                 return;
1146
1147         if (!iwl_is_tas_approved()) {
1148                 IWL_DEBUG_RADIO(mvm,
1149                                 "System vendor '%s' is not in the approved list, disabling TAS in US and Canada.\n",
1150                                 dmi_get_system_info(DMI_SYS_VENDOR) ?: "<unknown>");
1151                 if ((!iwl_mvm_add_to_tas_block_list(data.block_list_array,
1152                                                     &data.block_list_size,
1153                                                     IWL_MCC_US)) ||
1154                     (!iwl_mvm_add_to_tas_block_list(data.block_list_array,
1155                                                     &data.block_list_size,
1156                                                     IWL_MCC_CANADA))) {
1157                         IWL_DEBUG_RADIO(mvm,
1158                                         "Unable to add US/Canada to TAS block list, disabling TAS\n");
1159                         return;
1160                 }
1161         } else {
1162                 IWL_DEBUG_RADIO(mvm,
1163                                 "System vendor '%s' is in the approved list.\n",
1164                                 dmi_get_system_info(DMI_SYS_VENDOR) ?: "<unknown>");
1165         }
1166
1167         fw_ver = iwl_fw_lookup_cmd_ver(mvm->fw, cmd_id,
1168                                        IWL_FW_CMD_VER_UNKNOWN);
1169
1170         memcpy(&cmd.common, &data, sizeof(struct iwl_tas_config_cmd_common));
1171
1172         /* Set v3 or v4 specific parts. will be trunctated for fw_ver < 3 */
1173         if (fw_ver == 4) {
1174                 cmd.v4.override_tas_iec = data.override_tas_iec;
1175                 cmd.v4.enable_tas_iec = data.enable_tas_iec;
1176                 cmd.v4.usa_tas_uhb_allowed = data.usa_tas_uhb_allowed;
1177         } else {
1178                 cmd.v3.override_tas_iec = cpu_to_le16(data.override_tas_iec);
1179                 cmd.v3.enable_tas_iec = cpu_to_le16(data.enable_tas_iec);
1180         }
1181
1182         cmd_size = sizeof(struct iwl_tas_config_cmd_common);
1183         if (fw_ver >= 3)
1184                 /* v4 is the same size as v3 */
1185                 cmd_size += sizeof(struct iwl_tas_config_cmd_v3);
1186
1187         ret = iwl_mvm_send_cmd_pdu(mvm, cmd_id, 0, cmd_size, &cmd);
1188         if (ret < 0)
1189                 IWL_DEBUG_RADIO(mvm, "failed to send TAS_CONFIG (%d)\n", ret);
1190 }
1191
1192 static bool iwl_mvm_eval_dsm_rfi(struct iwl_mvm *mvm)
1193 {
1194         u32 value = 0;
1195         /* default behaviour is disabled */
1196         bool bios_enable_rfi = false;
1197         int ret = iwl_bios_get_dsm(&mvm->fwrt, DSM_FUNC_RFI_CONFIG, &value);
1198
1199
1200         if (ret < 0) {
1201                 IWL_DEBUG_RADIO(mvm, "Failed to get DSM RFI, ret=%d\n", ret);
1202                 return bios_enable_rfi;
1203         }
1204
1205         value &= DSM_VALUE_RFI_DISABLE;
1206         /* RFI BIOS CONFIG value can be 0 or 3 only.
1207          * i.e 0 means DDR and DLVR enabled. 3 means DDR and DLVR disabled.
1208          * 1 and 2 are invalid BIOS configurations, So, it's not possible to
1209          * disable ddr/dlvr separately.
1210          */
1211         if (!value) {
1212                 IWL_DEBUG_RADIO(mvm, "DSM RFI is evaluated to enable\n");
1213                 bios_enable_rfi = true;
1214         } else if (value == DSM_VALUE_RFI_DISABLE) {
1215                 IWL_DEBUG_RADIO(mvm, "DSM RFI is evaluated to disable\n");
1216         } else {
1217                 IWL_DEBUG_RADIO(mvm,
1218                                 "DSM RFI got invalid value, value=%d\n", value);
1219         }
1220
1221         return bios_enable_rfi;
1222 }
1223
1224 static void iwl_mvm_lari_cfg(struct iwl_mvm *mvm)
1225 {
1226         int ret;
1227         u32 value;
1228         struct iwl_lari_config_change_cmd_v7 cmd = {};
1229         u8 cmd_ver = iwl_fw_lookup_cmd_ver(mvm->fw,
1230                                            WIDE_ID(REGULATORY_AND_NVM_GROUP,
1231                                                    LARI_CONFIG_CHANGE), 1);
1232
1233         cmd.config_bitmap = iwl_get_lari_config_bitmap(&mvm->fwrt);
1234
1235         ret = iwl_bios_get_dsm(&mvm->fwrt, DSM_FUNC_11AX_ENABLEMENT, &value);
1236         if (!ret)
1237                 cmd.oem_11ax_allow_bitmap = cpu_to_le32(value);
1238
1239         ret = iwl_bios_get_dsm(&mvm->fwrt, DSM_FUNC_ENABLE_UNII4_CHAN, &value);
1240         if (!ret)
1241                 cmd.oem_unii4_allow_bitmap = cpu_to_le32(value);
1242
1243         ret = iwl_bios_get_dsm(&mvm->fwrt, DSM_FUNC_ACTIVATE_CHANNEL, &value);
1244         if (!ret) {
1245                 if (cmd_ver < 8)
1246                         value &= ~ACTIVATE_5G2_IN_WW_MASK;
1247                 cmd.chan_state_active_bitmap = cpu_to_le32(value);
1248         }
1249
1250         ret = iwl_bios_get_dsm(&mvm->fwrt, DSM_FUNC_ENABLE_6E, &value);
1251         if (!ret)
1252                 cmd.oem_uhb_allow_bitmap = cpu_to_le32(value);
1253
1254         ret = iwl_bios_get_dsm(&mvm->fwrt, DSM_FUNC_FORCE_DISABLE_CHANNELS,
1255                                &value);
1256         if (!ret)
1257                 cmd.force_disable_channels_bitmap = cpu_to_le32(value);
1258
1259         ret = iwl_bios_get_dsm(&mvm->fwrt, DSM_FUNC_ENERGY_DETECTION_THRESHOLD,
1260                                &value);
1261         if (!ret)
1262                 cmd.edt_bitmap = cpu_to_le32(value);
1263
1264         if (cmd.config_bitmap ||
1265             cmd.oem_uhb_allow_bitmap ||
1266             cmd.oem_11ax_allow_bitmap ||
1267             cmd.oem_unii4_allow_bitmap ||
1268             cmd.chan_state_active_bitmap ||
1269             cmd.force_disable_channels_bitmap ||
1270             cmd.edt_bitmap) {
1271                 size_t cmd_size;
1272
1273                 switch (cmd_ver) {
1274                 case 8:
1275                 case 7:
1276                         cmd_size = sizeof(struct iwl_lari_config_change_cmd_v7);
1277                         break;
1278                 case 6:
1279                         cmd_size = sizeof(struct iwl_lari_config_change_cmd_v6);
1280                         break;
1281                 case 5:
1282                         cmd_size = sizeof(struct iwl_lari_config_change_cmd_v5);
1283                         break;
1284                 case 4:
1285                         cmd_size = sizeof(struct iwl_lari_config_change_cmd_v4);
1286                         break;
1287                 case 3:
1288                         cmd_size = sizeof(struct iwl_lari_config_change_cmd_v3);
1289                         break;
1290                 case 2:
1291                         cmd_size = sizeof(struct iwl_lari_config_change_cmd_v2);
1292                         break;
1293                 default:
1294                         cmd_size = sizeof(struct iwl_lari_config_change_cmd_v1);
1295                         break;
1296                 }
1297
1298                 IWL_DEBUG_RADIO(mvm,
1299                                 "sending LARI_CONFIG_CHANGE, config_bitmap=0x%x, oem_11ax_allow_bitmap=0x%x\n",
1300                                 le32_to_cpu(cmd.config_bitmap),
1301                                 le32_to_cpu(cmd.oem_11ax_allow_bitmap));
1302                 IWL_DEBUG_RADIO(mvm,
1303                                 "sending LARI_CONFIG_CHANGE, oem_unii4_allow_bitmap=0x%x, chan_state_active_bitmap=0x%x, cmd_ver=%d\n",
1304                                 le32_to_cpu(cmd.oem_unii4_allow_bitmap),
1305                                 le32_to_cpu(cmd.chan_state_active_bitmap),
1306                                 cmd_ver);
1307                 IWL_DEBUG_RADIO(mvm,
1308                                 "sending LARI_CONFIG_CHANGE, oem_uhb_allow_bitmap=0x%x, force_disable_channels_bitmap=0x%x\n",
1309                                 le32_to_cpu(cmd.oem_uhb_allow_bitmap),
1310                                 le32_to_cpu(cmd.force_disable_channels_bitmap));
1311                 IWL_DEBUG_RADIO(mvm,
1312                                 "sending LARI_CONFIG_CHANGE, edt_bitmap=0x%x\n",
1313                                 le32_to_cpu(cmd.edt_bitmap));
1314                 ret = iwl_mvm_send_cmd_pdu(mvm,
1315                                            WIDE_ID(REGULATORY_AND_NVM_GROUP,
1316                                                    LARI_CONFIG_CHANGE),
1317                                            0, cmd_size, &cmd);
1318                 if (ret < 0)
1319                         IWL_DEBUG_RADIO(mvm,
1320                                         "Failed to send LARI_CONFIG_CHANGE (%d)\n",
1321                                         ret);
1322         }
1323
1324         if (le32_to_cpu(cmd.oem_uhb_allow_bitmap) & IWL_UATS_VLP_AP_SUPPORTED ||
1325             le32_to_cpu(cmd.oem_uhb_allow_bitmap) & IWL_UATS_AFC_AP_SUPPORTED)
1326                 mvm->fwrt.uats_enabled = true;
1327 }
1328
1329 void iwl_mvm_get_bios_tables(struct iwl_mvm *mvm)
1330 {
1331         int ret;
1332
1333         iwl_acpi_get_guid_lock_status(&mvm->fwrt);
1334
1335         /* read PPAG table */
1336         ret = iwl_bios_get_ppag_table(&mvm->fwrt);
1337         if (ret < 0) {
1338                 IWL_DEBUG_RADIO(mvm,
1339                                 "PPAG BIOS table invalid or unavailable. (%d)\n",
1340                                 ret);
1341         }
1342
1343         /* read SAR tables */
1344         ret = iwl_bios_get_wrds_table(&mvm->fwrt);
1345         if (ret < 0) {
1346                 IWL_DEBUG_RADIO(mvm,
1347                                 "WRDS SAR BIOS table invalid or unavailable. (%d)\n",
1348                                 ret);
1349                 /*
1350                  * If not available, don't fail and don't bother with EWRD and
1351                  * WGDS */
1352
1353                 if (!iwl_bios_get_wgds_table(&mvm->fwrt)) {
1354                         /*
1355                          * If basic SAR is not available, we check for WGDS,
1356                          * which should *not* be available either.  If it is
1357                          * available, issue an error, because we can't use SAR
1358                          * Geo without basic SAR.
1359                          */
1360                         IWL_ERR(mvm, "BIOS contains WGDS but no WRDS\n");
1361                 }
1362
1363         } else {
1364                 ret = iwl_bios_get_ewrd_table(&mvm->fwrt);
1365                 /* if EWRD is not available, we can still use
1366                 * WRDS, so don't fail */
1367                 if (ret < 0)
1368                         IWL_DEBUG_RADIO(mvm,
1369                                         "EWRD SAR BIOS table invalid or unavailable. (%d)\n",
1370                                         ret);
1371
1372                 /* read geo SAR table */
1373                 if (iwl_sar_geo_support(&mvm->fwrt)) {
1374                         ret = iwl_bios_get_wgds_table(&mvm->fwrt);
1375                         if (ret < 0)
1376                                 IWL_DEBUG_RADIO(mvm,
1377                                                 "Geo SAR BIOS table invalid or unavailable. (%d)\n",
1378                                                 ret);
1379                                 /* we don't fail if the table is not available */
1380                 }
1381         }
1382
1383         iwl_acpi_get_phy_filters(&mvm->fwrt, &mvm->phy_filters);
1384
1385         if (iwl_bios_get_eckv(&mvm->fwrt, &mvm->ext_clock_valid))
1386                 IWL_DEBUG_RADIO(mvm, "ECKV table doesn't exist in BIOS\n");
1387 }
1388
1389 static void iwl_mvm_disconnect_iterator(void *data, u8 *mac,
1390                                         struct ieee80211_vif *vif)
1391 {
1392         if (vif->type == NL80211_IFTYPE_STATION)
1393                 ieee80211_hw_restart_disconnect(vif);
1394 }
1395
1396 void iwl_mvm_send_recovery_cmd(struct iwl_mvm *mvm, u32 flags)
1397 {
1398         u32 error_log_size = mvm->fw->ucode_capa.error_log_size;
1399         int ret;
1400         u32 resp;
1401
1402         struct iwl_fw_error_recovery_cmd recovery_cmd = {
1403                 .flags = cpu_to_le32(flags),
1404                 .buf_size = 0,
1405         };
1406         struct iwl_host_cmd host_cmd = {
1407                 .id = WIDE_ID(SYSTEM_GROUP, FW_ERROR_RECOVERY_CMD),
1408                 .flags = CMD_WANT_SKB,
1409                 .data = {&recovery_cmd, },
1410                 .len = {sizeof(recovery_cmd), },
1411         };
1412
1413         /* no error log was defined in TLV */
1414         if (!error_log_size)
1415                 return;
1416
1417         if (flags & ERROR_RECOVERY_UPDATE_DB) {
1418                 /* no buf was allocated while HW reset */
1419                 if (!mvm->error_recovery_buf)
1420                         return;
1421
1422                 host_cmd.data[1] = mvm->error_recovery_buf;
1423                 host_cmd.len[1] =  error_log_size;
1424                 host_cmd.dataflags[1] = IWL_HCMD_DFL_NOCOPY;
1425                 recovery_cmd.buf_size = cpu_to_le32(error_log_size);
1426         }
1427
1428         ret = iwl_mvm_send_cmd(mvm, &host_cmd);
1429         kfree(mvm->error_recovery_buf);
1430         mvm->error_recovery_buf = NULL;
1431
1432         if (ret) {
1433                 IWL_ERR(mvm, "Failed to send recovery cmd %d\n", ret);
1434                 return;
1435         }
1436
1437         /* skb respond is only relevant in ERROR_RECOVERY_UPDATE_DB */
1438         if (flags & ERROR_RECOVERY_UPDATE_DB) {
1439                 resp = le32_to_cpu(*(__le32 *)host_cmd.resp_pkt->data);
1440                 if (resp) {
1441                         IWL_ERR(mvm,
1442                                 "Failed to send recovery cmd blob was invalid %d\n",
1443                                 resp);
1444
1445                         ieee80211_iterate_interfaces(mvm->hw, 0,
1446                                                      iwl_mvm_disconnect_iterator,
1447                                                      mvm);
1448                 }
1449         }
1450 }
1451
1452 static int iwl_mvm_sar_init(struct iwl_mvm *mvm)
1453 {
1454         return iwl_mvm_sar_select_profile(mvm, 1, 1);
1455 }
1456
1457 static int iwl_mvm_load_rt_fw(struct iwl_mvm *mvm)
1458 {
1459         int ret;
1460
1461         if (iwl_mvm_has_unified_ucode(mvm))
1462                 return iwl_run_unified_mvm_ucode(mvm);
1463
1464         ret = iwl_run_init_mvm_ucode(mvm);
1465
1466         if (ret) {
1467                 IWL_ERR(mvm, "Failed to run INIT ucode: %d\n", ret);
1468
1469                 if (iwlmvm_mod_params.init_dbg)
1470                         return 0;
1471                 return ret;
1472         }
1473
1474         iwl_fw_dbg_stop_sync(&mvm->fwrt);
1475         iwl_trans_stop_device(mvm->trans);
1476         ret = iwl_trans_start_hw(mvm->trans);
1477         if (ret)
1478                 return ret;
1479
1480         mvm->rfkill_safe_init_done = false;
1481         ret = iwl_mvm_load_ucode_wait_alive(mvm, IWL_UCODE_REGULAR);
1482         if (ret)
1483                 return ret;
1484
1485         mvm->rfkill_safe_init_done = true;
1486
1487         iwl_dbg_tlv_time_point(&mvm->fwrt, IWL_FW_INI_TIME_POINT_AFTER_ALIVE,
1488                                NULL);
1489
1490         return iwl_init_paging(&mvm->fwrt, mvm->fwrt.cur_fw_img);
1491 }
1492
1493 int iwl_mvm_up(struct iwl_mvm *mvm)
1494 {
1495         int ret, i;
1496         struct ieee80211_supported_band *sband = NULL;
1497
1498         lockdep_assert_held(&mvm->mutex);
1499
1500         ret = iwl_trans_start_hw(mvm->trans);
1501         if (ret)
1502                 return ret;
1503
1504         ret = iwl_mvm_load_rt_fw(mvm);
1505         if (ret) {
1506                 IWL_ERR(mvm, "Failed to start RT ucode: %d\n", ret);
1507                 if (ret != -ERFKILL && !mvm->pldr_sync)
1508                         iwl_fw_dbg_error_collect(&mvm->fwrt,
1509                                                  FW_DBG_TRIGGER_DRIVER);
1510                 goto error;
1511         }
1512
1513         /* FW loaded successfully */
1514         mvm->pldr_sync = false;
1515
1516         iwl_fw_disable_dbg_asserts(&mvm->fwrt);
1517         iwl_get_shared_mem_conf(&mvm->fwrt);
1518
1519         ret = iwl_mvm_sf_update(mvm, NULL, false);
1520         if (ret)
1521                 IWL_ERR(mvm, "Failed to initialize Smart Fifo\n");
1522
1523         if (!iwl_trans_dbg_ini_valid(mvm->trans)) {
1524                 mvm->fwrt.dump.conf = FW_DBG_INVALID;
1525                 /* if we have a destination, assume EARLY START */
1526                 if (mvm->fw->dbg.dest_tlv)
1527                         mvm->fwrt.dump.conf = FW_DBG_START_FROM_ALIVE;
1528                 iwl_fw_start_dbg_conf(&mvm->fwrt, FW_DBG_START_FROM_ALIVE);
1529         }
1530
1531         ret = iwl_send_tx_ant_cfg(mvm, iwl_mvm_get_valid_tx_ant(mvm));
1532         if (ret)
1533                 goto error;
1534
1535         if (!iwl_mvm_has_unified_ucode(mvm)) {
1536                 /* Send phy db control command and then phy db calibration */
1537                 ret = iwl_send_phy_db_data(mvm->phy_db);
1538                 if (ret)
1539                         goto error;
1540                 ret = iwl_send_phy_cfg_cmd(mvm);
1541                 if (ret)
1542                         goto error;
1543         }
1544
1545         ret = iwl_mvm_send_bt_init_conf(mvm);
1546         if (ret)
1547                 goto error;
1548
1549         if (fw_has_capa(&mvm->fw->ucode_capa,
1550                         IWL_UCODE_TLV_CAPA_SOC_LATENCY_SUPPORT)) {
1551                 ret = iwl_set_soc_latency(&mvm->fwrt);
1552                 if (ret)
1553                         goto error;
1554         }
1555
1556         iwl_mvm_lari_cfg(mvm);
1557
1558         /* Init RSS configuration */
1559         ret = iwl_configure_rxq(&mvm->fwrt);
1560         if (ret)
1561                 goto error;
1562
1563         if (iwl_mvm_has_new_rx_api(mvm)) {
1564                 ret = iwl_send_rss_cfg_cmd(mvm);
1565                 if (ret) {
1566                         IWL_ERR(mvm, "Failed to configure RSS queues: %d\n",
1567                                 ret);
1568                         goto error;
1569                 }
1570         }
1571
1572         /* init the fw <-> mac80211 STA mapping */
1573         for (i = 0; i < mvm->fw->ucode_capa.num_stations; i++) {
1574                 RCU_INIT_POINTER(mvm->fw_id_to_mac_id[i], NULL);
1575                 RCU_INIT_POINTER(mvm->fw_id_to_link_sta[i], NULL);
1576         }
1577
1578         for (i = 0; i < IWL_MVM_FW_MAX_LINK_ID + 1; i++)
1579                 RCU_INIT_POINTER(mvm->link_id_to_link_conf[i], NULL);
1580
1581         memset(&mvm->fw_link_ids_map, 0, sizeof(mvm->fw_link_ids_map));
1582
1583         mvm->tdls_cs.peer.sta_id = IWL_MVM_INVALID_STA;
1584
1585         /* reset quota debouncing buffer - 0xff will yield invalid data */
1586         memset(&mvm->last_quota_cmd, 0xff, sizeof(mvm->last_quota_cmd));
1587
1588         if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_DQA_SUPPORT)) {
1589                 ret = iwl_mvm_send_dqa_cmd(mvm);
1590                 if (ret)
1591                         goto error;
1592         }
1593
1594         /*
1595          * Add auxiliary station for scanning.
1596          * Newer versions of this command implies that the fw uses
1597          * internal aux station for all aux activities that don't
1598          * requires a dedicated data queue.
1599          */
1600         if (!iwl_mvm_has_new_station_api(mvm->fw)) {
1601                  /*
1602                   * In old version the aux station uses mac id like other
1603                   * station and not lmac id
1604                   */
1605                 ret = iwl_mvm_add_aux_sta(mvm, MAC_INDEX_AUX);
1606                 if (ret)
1607                         goto error;
1608         }
1609
1610         /* Add all the PHY contexts */
1611         i = 0;
1612         while (!sband && i < NUM_NL80211_BANDS)
1613                 sband = mvm->hw->wiphy->bands[i++];
1614
1615         if (WARN_ON_ONCE(!sband)) {
1616                 ret = -ENODEV;
1617                 goto error;
1618         }
1619
1620         if (iwl_mvm_is_tt_in_fw(mvm)) {
1621                 /* in order to give the responsibility of ct-kill and
1622                  * TX backoff to FW we need to send empty temperature reporting
1623                  * cmd during init time
1624                  */
1625                 iwl_mvm_send_temp_report_ths_cmd(mvm);
1626         } else {
1627                 /* Initialize tx backoffs to the minimal possible */
1628                 iwl_mvm_tt_tx_backoff(mvm, 0);
1629         }
1630
1631 #ifdef CONFIG_THERMAL
1632         /* TODO: read the budget from BIOS / Platform NVM */
1633
1634         /*
1635          * In case there is no budget from BIOS / Platform NVM the default
1636          * budget should be 2000mW (cooling state 0).
1637          */
1638         if (iwl_mvm_is_ctdp_supported(mvm)) {
1639                 ret = iwl_mvm_ctdp_command(mvm, CTDP_CMD_OPERATION_START,
1640                                            mvm->cooling_dev.cur_state);
1641                 if (ret)
1642                         goto error;
1643         }
1644 #endif
1645
1646         if (!fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_SET_LTR_GEN2))
1647                 WARN_ON(iwl_mvm_config_ltr(mvm));
1648
1649         ret = iwl_mvm_power_update_device(mvm);
1650         if (ret)
1651                 goto error;
1652
1653         /*
1654          * RTNL is not taken during Ct-kill, but we don't need to scan/Tx
1655          * anyway, so don't init MCC.
1656          */
1657         if (!test_bit(IWL_MVM_STATUS_HW_CTKILL, &mvm->status)) {
1658                 ret = iwl_mvm_init_mcc(mvm);
1659                 if (ret)
1660                         goto error;
1661         }
1662
1663         if (fw_has_capa(&mvm->fw->ucode_capa, IWL_UCODE_TLV_CAPA_UMAC_SCAN)) {
1664                 mvm->scan_type = IWL_SCAN_TYPE_NOT_SET;
1665                 mvm->hb_scan_type = IWL_SCAN_TYPE_NOT_SET;
1666                 ret = iwl_mvm_config_scan(mvm);
1667                 if (ret)
1668                         goto error;
1669         }
1670
1671         if (test_bit(IWL_MVM_STATUS_IN_HW_RESTART, &mvm->status)) {
1672                 iwl_mvm_send_recovery_cmd(mvm, ERROR_RECOVERY_UPDATE_DB);
1673
1674                 if (mvm->time_sync.active)
1675                         iwl_mvm_time_sync_config(mvm, mvm->time_sync.peer_addr,
1676                                                  IWL_TIME_SYNC_PROTOCOL_TM |
1677                                                  IWL_TIME_SYNC_PROTOCOL_FTM);
1678         }
1679
1680         if (!mvm->ptp_data.ptp_clock)
1681                 iwl_mvm_ptp_init(mvm);
1682
1683         ret = iwl_mvm_ppag_init(mvm);
1684         if (ret)
1685                 goto error;
1686
1687         ret = iwl_mvm_sar_init(mvm);
1688         if (ret == 0)
1689                 ret = iwl_mvm_sar_geo_init(mvm);
1690         if (ret < 0)
1691                 goto error;
1692
1693         ret = iwl_mvm_sgom_init(mvm);
1694         if (ret)
1695                 goto error;
1696
1697         iwl_mvm_tas_init(mvm);
1698         iwl_mvm_leds_sync(mvm);
1699         iwl_mvm_uats_init(mvm);
1700
1701         if (iwl_rfi_supported(mvm)) {
1702                 if (iwl_mvm_eval_dsm_rfi(mvm))
1703                         iwl_rfi_send_config_cmd(mvm, NULL);
1704         }
1705
1706         iwl_mvm_mei_device_state(mvm, true);
1707
1708         IWL_DEBUG_INFO(mvm, "RT uCode started.\n");
1709         return 0;
1710  error:
1711         if (!iwlmvm_mod_params.init_dbg || !ret)
1712                 iwl_mvm_stop_device(mvm);
1713         return ret;
1714 }
1715
1716 int iwl_mvm_load_d3_fw(struct iwl_mvm *mvm)
1717 {
1718         int ret, i;
1719
1720         lockdep_assert_held(&mvm->mutex);
1721
1722         ret = iwl_trans_start_hw(mvm->trans);
1723         if (ret)
1724                 return ret;
1725
1726         ret = iwl_mvm_load_ucode_wait_alive(mvm, IWL_UCODE_WOWLAN);
1727         if (ret) {
1728                 IWL_ERR(mvm, "Failed to start WoWLAN firmware: %d\n", ret);
1729                 goto error;
1730         }
1731
1732         ret = iwl_send_tx_ant_cfg(mvm, iwl_mvm_get_valid_tx_ant(mvm));
1733         if (ret)
1734                 goto error;
1735
1736         /* Send phy db control command and then phy db calibration*/
1737         ret = iwl_send_phy_db_data(mvm->phy_db);
1738         if (ret)
1739                 goto error;
1740
1741         ret = iwl_send_phy_cfg_cmd(mvm);
1742         if (ret)
1743                 goto error;
1744
1745         /* init the fw <-> mac80211 STA mapping */
1746         for (i = 0; i < mvm->fw->ucode_capa.num_stations; i++) {
1747                 RCU_INIT_POINTER(mvm->fw_id_to_mac_id[i], NULL);
1748                 RCU_INIT_POINTER(mvm->fw_id_to_link_sta[i], NULL);
1749         }
1750
1751         if (!iwl_mvm_has_new_station_api(mvm->fw)) {
1752                 /*
1753                  * Add auxiliary station for scanning.
1754                  * Newer versions of this command implies that the fw uses
1755                  * internal aux station for all aux activities that don't
1756                  * requires a dedicated data queue.
1757                  * In old version the aux station uses mac id like other
1758                  * station and not lmac id
1759                  */
1760                 ret = iwl_mvm_add_aux_sta(mvm, MAC_INDEX_AUX);
1761                 if (ret)
1762                         goto error;
1763         }
1764
1765         return 0;
1766  error:
1767         iwl_mvm_stop_device(mvm);
1768         return ret;
1769 }
1770
1771 void iwl_mvm_rx_mfuart_notif(struct iwl_mvm *mvm,
1772                              struct iwl_rx_cmd_buffer *rxb)
1773 {
1774         struct iwl_rx_packet *pkt = rxb_addr(rxb);
1775         struct iwl_mfuart_load_notif *mfuart_notif = (void *)pkt->data;
1776
1777         IWL_DEBUG_INFO(mvm,
1778                        "MFUART: installed ver: 0x%08x, external ver: 0x%08x, status: 0x%08x, duration: 0x%08x\n",
1779                        le32_to_cpu(mfuart_notif->installed_ver),
1780                        le32_to_cpu(mfuart_notif->external_ver),
1781                        le32_to_cpu(mfuart_notif->status),
1782                        le32_to_cpu(mfuart_notif->duration));
1783
1784         if (iwl_rx_packet_payload_len(pkt) == sizeof(*mfuart_notif))
1785                 IWL_DEBUG_INFO(mvm,
1786                                "MFUART: image size: 0x%08x\n",
1787                                le32_to_cpu(mfuart_notif->image_size));
1788 }