mirror of
https://github.com/outbackdingo/mt76.git
synced 2026-10-24 13:26:48 +00:00
Use buffer allocated with kmalloc instead of with stack to fix kernel crash due to Unable to handle kernel paging request at virtual address ffffffc0095cbce8. [ 156.977349] Unable to handle kernel paging request at virtual address ffffffc0095cbce8 [ 156.985270] Mem abort info: [ 156.988059] ESR = 0x96000045 [ 156.991104] Exception class = DABT (current EL), IL = 32 bits [ 156.997013] SET = 0, FnV = 0 [ 157.000057] EA = 0, S1PTW = 0 [ 157.003190] Data abort info: [ 157.006061] ISV = 0, ISS = 0x00000045 [ 157.009887] CM = 0, WnR = 1 [ 157.012850] swapper pgtable: 4k pages, 39-bit VAs, pgdp = 0000000042adcba2 [ 157.019715] [ffffffc0095cbce8] pgd=0000000000000000, pud=0000000000000000 [ 157.026499] Internal error: Oops: 96000045 [#1] PREEMPT SMP [ 157.032065] Modules linked in: mt7663s mt7663_usb_sdio_common mt7615_common ... [ 157.073007] Process CompositorTileW (pid: 1625, stack limit = 0x000000003f2389fc) [ 157.080484] CPU: 0 PID: 1625 Comm: CompositorTileW Not tainted 4.19.137 #36 [ 157.092219] pstate: 80000085 (Nzcv daIf -PAN -UAO) [ 157.097012] pc : __memcpy+0xc0/0x180 [ 157.100585] lr : swiotlb_tbl_unmap_single+0x84/0x14c [ 157.105540] sp : ffffff8008003cb0 [ 157.108845] x29: ffffff8008003cb0 x28: ffffff9c1a211f60 [ 157.114149] x27: ffffff9c19ecc018 x26: 0000000000001000 [ 157.119452] x25: ffffff9c1a378000 x24: 0000000000000001 [ 157.124755] x23: ffffff9c1a378000 x22: 00000000000001ff [ 157.130058] x21: 0000000000000000 x20: 00000000fbefe800 [ 157.135360] x19: 0000000000000070 x18: 0000000000000000 [ 157.140663] x17: 0000000000000000 x16: 0000000000000000 [ 157.145965] x15: 0000000000000000 x14: 0000000000000000 [ 157.151267] x13: 0000000000000000 x12: 000000000000000d [ 157.156569] x11: 000000000000000c x10: 0000000a7befe800 [ 157.161873] x9 : fffffff680000000 x8 : 0000000000000000 [ 157.167175] x7 : 0000000100000003 x6 : ffffffc0095cbce8 [ 157.172479] x5 : 0000000000000000 x4 : 0000000000000000 [ 157.177781] x3 : 0000000000000002 x2 : fffffffffffffff0 [ 157.183085] x1 : ffffffca7befe810 x0 : ffffffc0095cbce8 [ 157.188389] Call trace: [ 157.190832] __memcpy+0xc0/0x180 [ 157.194053] swiotlb_unmap_sg_attrs+0xa8/0xb0 [ 157.198406] __swiotlb_unmap_sg_attrs+0x8c/0xa4 [ 157.202931] msdc_unprepare_data+0x6c/0x84 [ 157.207019] msdc_request_done+0x58/0x98 [ 157.210934] msdc_data_xfer_done+0x1a8/0x1d0 [ 157.215195] msdc_irq+0x12c/0x17c [ 157.218505] __handle_irq_event_percpu+0xd8/0x298 [ 157.223202] handle_irq_event+0x60/0xdc [ 157.227031] handle_fasteoi_irq+0xa4/0x1d4 [ 157.231120] __handle_domain_irq+0x84/0xc4 [ 157.235210] gic_handle_irq+0x124/0x1a4 [ 157.239038] el0_irq_naked+0x4c/0x54 [ 157.242608] Code: 14000028 f1020042 5400024a a8c12027 (a88120c7) [ 157.248693] ---[ end trace 28b8090135b0a2e1 ]--- [ 157.265589] Kernel panic - not syncing: Fatal exception in interrupt [ 157.271944] SMP: stopping secondary CPUs [ 157.275865] Kernel Offset: 0x1c10e00000 from 0xffffff8008000000 [ 157.281779] CPU features: 0x0,2188200c [ 157.285519] Memory Limit: none Fixes: a66cbdd6573d ("mt76: mt7615: introduce mt7663s support") Co-developed-by: YN Chen <[email protected]> Signed-off-by: YN Chen <[email protected]> Signed-off-by: Sean Wang <[email protected]> Signed-off-by: Felix Fietkau <[email protected]>
487 lines
11 KiB
C
487 lines
11 KiB
C
// SPDX-License-Identifier: ISC
|
|
/* Copyright (C) 2020 MediaTek Inc.
|
|
*
|
|
* Author: Felix Fietkau <[email protected]>
|
|
* Lorenzo Bianconi <[email protected]>
|
|
* Sean Wang <[email protected]>
|
|
*/
|
|
|
|
#include <linux/kernel.h>
|
|
#include <linux/iopoll.h>
|
|
#include <linux/module.h>
|
|
|
|
#include <linux/mmc/host.h>
|
|
#include <linux/mmc/sdio_ids.h>
|
|
#include <linux/mmc/sdio_func.h>
|
|
|
|
#include "mt7615.h"
|
|
#include "sdio.h"
|
|
#include "mac.h"
|
|
|
|
static const struct sdio_device_id mt7663s_table[] = {
|
|
{ SDIO_DEVICE(SDIO_VENDOR_ID_MEDIATEK, 0x7603) },
|
|
{ } /* Terminating entry */
|
|
};
|
|
|
|
static u32 mt7663s_read_whisr(struct mt76_dev *dev)
|
|
{
|
|
return sdio_readl(dev->sdio.func, MCR_WHISR, NULL);
|
|
}
|
|
|
|
u32 mt7663s_read_pcr(struct mt7615_dev *dev)
|
|
{
|
|
struct mt76_sdio *sdio = &dev->mt76.sdio;
|
|
|
|
return sdio_readl(sdio->func, MCR_WHLPCR, NULL);
|
|
}
|
|
|
|
static u32 mt7663s_read_mailbox(struct mt76_dev *dev, u32 offset)
|
|
{
|
|
struct sdio_func *func = dev->sdio.func;
|
|
u32 val = ~0, status;
|
|
int err;
|
|
|
|
sdio_claim_host(func);
|
|
|
|
sdio_writel(func, offset, MCR_H2DSM0R, &err);
|
|
if (err < 0) {
|
|
dev_err(dev->dev, "failed setting address [err=%d]\n", err);
|
|
goto out;
|
|
}
|
|
|
|
sdio_writel(func, H2D_SW_INT_READ, MCR_WSICR, &err);
|
|
if (err < 0) {
|
|
dev_err(dev->dev, "failed setting read mode [err=%d]\n", err);
|
|
goto out;
|
|
}
|
|
|
|
err = readx_poll_timeout(mt7663s_read_whisr, dev, status,
|
|
status & H2D_SW_INT_READ, 0, 1000000);
|
|
if (err < 0) {
|
|
dev_err(dev->dev, "query whisr timeout\n");
|
|
goto out;
|
|
}
|
|
|
|
sdio_writel(func, H2D_SW_INT_READ, MCR_WHISR, &err);
|
|
if (err < 0) {
|
|
dev_err(dev->dev, "failed setting read mode [err=%d]\n", err);
|
|
goto out;
|
|
}
|
|
|
|
val = sdio_readl(func, MCR_H2DSM0R, &err);
|
|
if (err < 0) {
|
|
dev_err(dev->dev, "failed reading h2dsm0r [err=%d]\n", err);
|
|
goto out;
|
|
}
|
|
|
|
if (val != offset) {
|
|
dev_err(dev->dev, "register mismatch\n");
|
|
val = ~0;
|
|
goto out;
|
|
}
|
|
|
|
val = sdio_readl(func, MCR_D2HRM1R, &err);
|
|
if (err < 0)
|
|
dev_err(dev->dev, "failed reading d2hrm1r [err=%d]\n", err);
|
|
|
|
out:
|
|
sdio_release_host(func);
|
|
|
|
return val;
|
|
}
|
|
|
|
static void mt7663s_write_mailbox(struct mt76_dev *dev, u32 offset, u32 val)
|
|
{
|
|
struct sdio_func *func = dev->sdio.func;
|
|
u32 status;
|
|
int err;
|
|
|
|
sdio_claim_host(func);
|
|
|
|
sdio_writel(func, offset, MCR_H2DSM0R, &err);
|
|
if (err < 0) {
|
|
dev_err(dev->dev, "failed setting address [err=%d]\n", err);
|
|
goto out;
|
|
}
|
|
|
|
sdio_writel(func, val, MCR_H2DSM1R, &err);
|
|
if (err < 0) {
|
|
dev_err(dev->dev,
|
|
"failed setting write value [err=%d]\n", err);
|
|
goto out;
|
|
}
|
|
|
|
sdio_writel(func, H2D_SW_INT_WRITE, MCR_WSICR, &err);
|
|
if (err < 0) {
|
|
dev_err(dev->dev, "failed setting write mode [err=%d]\n", err);
|
|
goto out;
|
|
}
|
|
|
|
err = readx_poll_timeout(mt7663s_read_whisr, dev, status,
|
|
status & H2D_SW_INT_WRITE, 0, 1000000);
|
|
if (err < 0) {
|
|
dev_err(dev->dev, "query whisr timeout\n");
|
|
goto out;
|
|
}
|
|
|
|
sdio_writel(func, H2D_SW_INT_WRITE, MCR_WHISR, &err);
|
|
if (err < 0) {
|
|
dev_err(dev->dev, "failed setting write mode [err=%d]\n", err);
|
|
goto out;
|
|
}
|
|
|
|
val = sdio_readl(func, MCR_H2DSM0R, &err);
|
|
if (err < 0) {
|
|
dev_err(dev->dev, "failed reading h2dsm0r [err=%d]\n", err);
|
|
goto out;
|
|
}
|
|
|
|
if (val != offset)
|
|
dev_err(dev->dev, "register mismatch\n");
|
|
|
|
out:
|
|
sdio_release_host(func);
|
|
}
|
|
|
|
static u32 mt7663s_rr(struct mt76_dev *dev, u32 offset)
|
|
{
|
|
if (test_bit(MT76_STATE_MCU_RUNNING, &dev->phy.state))
|
|
return dev->mcu_ops->mcu_rr(dev, offset);
|
|
else
|
|
return mt7663s_read_mailbox(dev, offset);
|
|
}
|
|
|
|
static void mt7663s_wr(struct mt76_dev *dev, u32 offset, u32 val)
|
|
{
|
|
if (test_bit(MT76_STATE_MCU_RUNNING, &dev->phy.state))
|
|
dev->mcu_ops->mcu_wr(dev, offset, val);
|
|
else
|
|
mt7663s_write_mailbox(dev, offset, val);
|
|
}
|
|
|
|
static u32 mt7663s_rmw(struct mt76_dev *dev, u32 offset, u32 mask, u32 val)
|
|
{
|
|
val |= mt7663s_rr(dev, offset) & ~mask;
|
|
mt7663s_wr(dev, offset, val);
|
|
|
|
return val;
|
|
}
|
|
|
|
static void mt7663s_write_copy(struct mt76_dev *dev, u32 offset,
|
|
const void *data, int len)
|
|
{
|
|
const u32 *val = data;
|
|
int i;
|
|
|
|
for (i = 0; i < len / sizeof(u32); i++) {
|
|
mt7663s_wr(dev, offset, val[i]);
|
|
offset += sizeof(u32);
|
|
}
|
|
}
|
|
|
|
static void mt7663s_read_copy(struct mt76_dev *dev, u32 offset,
|
|
void *data, int len)
|
|
{
|
|
u32 *val = data;
|
|
int i;
|
|
|
|
for (i = 0; i < len / sizeof(u32); i++) {
|
|
val[i] = mt7663s_rr(dev, offset);
|
|
offset += sizeof(u32);
|
|
}
|
|
}
|
|
|
|
static int mt7663s_wr_rp(struct mt76_dev *dev, u32 base,
|
|
const struct mt76_reg_pair *data,
|
|
int len)
|
|
{
|
|
int i;
|
|
|
|
for (i = 0; i < len; i++) {
|
|
mt7663s_wr(dev, data->reg, data->value);
|
|
data++;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int mt7663s_rd_rp(struct mt76_dev *dev, u32 base,
|
|
struct mt76_reg_pair *data,
|
|
int len)
|
|
{
|
|
int i;
|
|
|
|
for (i = 0; i < len; i++) {
|
|
data->value = mt7663s_rr(dev, data->reg);
|
|
data++;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static void mt7663s_init_work(struct work_struct *work)
|
|
{
|
|
struct mt7615_dev *dev;
|
|
|
|
dev = container_of(work, struct mt7615_dev, mcu_work);
|
|
if (mt7663s_mcu_init(dev))
|
|
return;
|
|
|
|
mt7615_mcu_set_eeprom(dev);
|
|
mt7615_mac_init(dev);
|
|
mt7615_phy_init(dev);
|
|
mt7615_mcu_del_wtbl_all(dev);
|
|
mt7615_check_offload_capability(dev);
|
|
}
|
|
|
|
static int mt7663s_hw_init(struct mt7615_dev *dev, struct sdio_func *func)
|
|
{
|
|
u32 status, ctrl;
|
|
int ret;
|
|
|
|
sdio_claim_host(func);
|
|
|
|
ret = sdio_enable_func(func);
|
|
if (ret < 0)
|
|
goto release;
|
|
|
|
/* Get ownership from the device */
|
|
sdio_writel(func, WHLPCR_INT_EN_CLR | WHLPCR_FW_OWN_REQ_CLR,
|
|
MCR_WHLPCR, &ret);
|
|
if (ret < 0)
|
|
goto disable_func;
|
|
|
|
ret = readx_poll_timeout(mt7663s_read_pcr, dev, status,
|
|
status & WHLPCR_IS_DRIVER_OWN, 2000, 1000000);
|
|
if (ret < 0) {
|
|
dev_err(dev->mt76.dev, "Cannot get ownership from device");
|
|
goto disable_func;
|
|
}
|
|
|
|
ret = sdio_set_block_size(func, 512);
|
|
if (ret < 0)
|
|
goto disable_func;
|
|
|
|
/* Enable interrupt */
|
|
sdio_writel(func, WHLPCR_INT_EN_SET, MCR_WHLPCR, &ret);
|
|
if (ret < 0)
|
|
goto disable_func;
|
|
|
|
ctrl = WHIER_RX0_DONE_INT_EN | WHIER_TX_DONE_INT_EN;
|
|
sdio_writel(func, ctrl, MCR_WHIER, &ret);
|
|
if (ret < 0)
|
|
goto disable_func;
|
|
|
|
/* set WHISR as read clear and Rx aggregation number as 16 */
|
|
ctrl = FIELD_PREP(MAX_HIF_RX_LEN_NUM, 16);
|
|
sdio_writel(func, ctrl, MCR_WHCR, &ret);
|
|
if (ret < 0)
|
|
goto disable_func;
|
|
|
|
ret = sdio_claim_irq(func, mt7663s_sdio_irq);
|
|
if (ret < 0)
|
|
goto disable_func;
|
|
|
|
sdio_release_host(func);
|
|
|
|
return 0;
|
|
|
|
disable_func:
|
|
sdio_disable_func(func);
|
|
release:
|
|
sdio_release_host(func);
|
|
|
|
return ret;
|
|
}
|
|
|
|
static int mt7663s_sta_add(struct mt76_dev *mdev, struct ieee80211_vif *vif,
|
|
struct ieee80211_sta *sta)
|
|
{
|
|
struct mt7615_dev *dev = container_of(mdev, struct mt7615_dev, mt76);
|
|
struct mt76_sdio *sdio = &mdev->sdio;
|
|
u32 pse, ple;
|
|
int err;
|
|
|
|
err = mt7615_mac_sta_add(mdev, vif, sta);
|
|
if (err < 0)
|
|
return err;
|
|
|
|
/* init sched data quota */
|
|
pse = mt76_get_field(dev, MT_PSE_PG_HIF0_GROUP, MT_HIF0_MIN_QUOTA);
|
|
ple = mt76_get_field(dev, MT_PLE_PG_HIF0_GROUP, MT_HIF0_MIN_QUOTA);
|
|
|
|
mutex_lock(&sdio->sched.lock);
|
|
sdio->sched.pse_data_quota = pse;
|
|
sdio->sched.ple_data_quota = ple;
|
|
mutex_unlock(&sdio->sched.lock);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int mt7663s_probe(struct sdio_func *func,
|
|
const struct sdio_device_id *id)
|
|
{
|
|
static const struct mt76_driver_ops drv_ops = {
|
|
.txwi_size = MT_USB_TXD_SIZE,
|
|
.drv_flags = MT_DRV_RX_DMA_HDR | MT_DRV_HW_MGMT_TXQ,
|
|
.tx_prepare_skb = mt7663_usb_sdio_tx_prepare_skb,
|
|
.tx_complete_skb = mt7663_usb_sdio_tx_complete_skb,
|
|
.tx_status_data = mt7663_usb_sdio_tx_status_data,
|
|
.rx_skb = mt7615_queue_rx_skb,
|
|
.sta_ps = mt7615_sta_ps,
|
|
.sta_add = mt7663s_sta_add,
|
|
.sta_remove = mt7615_mac_sta_remove,
|
|
.update_survey = mt7615_update_channel,
|
|
};
|
|
static const struct mt76_bus_ops mt7663s_ops = {
|
|
.rr = mt7663s_rr,
|
|
.rmw = mt7663s_rmw,
|
|
.wr = mt7663s_wr,
|
|
.write_copy = mt7663s_write_copy,
|
|
.read_copy = mt7663s_read_copy,
|
|
.wr_rp = mt7663s_wr_rp,
|
|
.rd_rp = mt7663s_rd_rp,
|
|
.type = MT76_BUS_SDIO,
|
|
};
|
|
struct ieee80211_ops *ops;
|
|
struct mt7615_dev *dev;
|
|
struct mt76_dev *mdev;
|
|
int ret;
|
|
|
|
ops = devm_kmemdup(&func->dev, &mt7615_ops, sizeof(mt7615_ops),
|
|
GFP_KERNEL);
|
|
if (!ops)
|
|
return -ENOMEM;
|
|
|
|
mdev = mt76_alloc_device(&func->dev, sizeof(*dev), ops, &drv_ops);
|
|
if (!mdev)
|
|
return -ENOMEM;
|
|
|
|
dev = container_of(mdev, struct mt7615_dev, mt76);
|
|
|
|
INIT_WORK(&dev->mcu_work, mt7663s_init_work);
|
|
dev->reg_map = mt7663_usb_sdio_reg_map;
|
|
dev->ops = ops;
|
|
sdio_set_drvdata(func, dev);
|
|
|
|
ret = mt76s_init(mdev, func, &mt7663s_ops);
|
|
if (ret < 0)
|
|
goto err_free;
|
|
|
|
INIT_WORK(&mdev->sdio.tx.xmit_work, mt7663s_tx_work);
|
|
INIT_WORK(&mdev->sdio.rx.recv_work, mt7663s_rx_work);
|
|
|
|
ret = mt7663s_hw_init(dev, func);
|
|
if (ret)
|
|
goto err_deinit;
|
|
|
|
mdev->rev = (mt76_rr(dev, MT_HW_CHIPID) << 16) |
|
|
(mt76_rr(dev, MT_HW_REV) & 0xff);
|
|
dev_dbg(mdev->dev, "ASIC revision: %04x\n", mdev->rev);
|
|
|
|
mdev->sdio.intr_data = devm_kmalloc(mdev->dev,
|
|
sizeof(struct mt76s_intr),
|
|
GFP_KERNEL);
|
|
if (!mdev->sdio.intr_data) {
|
|
ret = -ENOMEM;
|
|
goto err_deinit;
|
|
}
|
|
|
|
ret = mt76s_alloc_queues(&dev->mt76);
|
|
if (ret)
|
|
goto err_deinit;
|
|
|
|
ret = mt7663_usb_sdio_register_device(dev);
|
|
if (ret)
|
|
goto err_deinit;
|
|
|
|
return 0;
|
|
|
|
err_deinit:
|
|
mt76s_deinit(&dev->mt76);
|
|
err_free:
|
|
mt76_free_device(&dev->mt76);
|
|
|
|
return ret;
|
|
}
|
|
|
|
static void mt7663s_remove(struct sdio_func *func)
|
|
{
|
|
struct mt7615_dev *dev = sdio_get_drvdata(func);
|
|
|
|
if (!test_and_clear_bit(MT76_STATE_INITIALIZED, &dev->mphy.state))
|
|
return;
|
|
|
|
ieee80211_unregister_hw(dev->mt76.hw);
|
|
mt76s_deinit(&dev->mt76);
|
|
mt76_free_device(&dev->mt76);
|
|
}
|
|
|
|
#ifdef CONFIG_PM
|
|
static int mt7663s_suspend(struct device *dev)
|
|
{
|
|
struct sdio_func *func = dev_to_sdio_func(dev);
|
|
struct mt7615_dev *mdev = sdio_get_drvdata(func);
|
|
|
|
if (!test_bit(MT76_STATE_SUSPEND, &mdev->mphy.state) &&
|
|
mt7615_firmware_offload(mdev)) {
|
|
int err;
|
|
|
|
err = mt7615_mcu_set_hif_suspend(mdev, true);
|
|
if (err < 0)
|
|
return err;
|
|
}
|
|
|
|
sdio_set_host_pm_flags(func, MMC_PM_KEEP_POWER);
|
|
|
|
mt76s_stop_txrx(&mdev->mt76);
|
|
|
|
return mt7615_mcu_set_fw_ctrl(mdev);
|
|
}
|
|
|
|
static int mt7663s_resume(struct device *dev)
|
|
{
|
|
struct sdio_func *func = dev_to_sdio_func(dev);
|
|
struct mt7615_dev *mdev = sdio_get_drvdata(func);
|
|
int err;
|
|
|
|
err = mt7615_mcu_set_drv_ctrl(mdev);
|
|
if (err)
|
|
return err;
|
|
|
|
if (!test_bit(MT76_STATE_SUSPEND, &mdev->mphy.state) &&
|
|
mt7615_firmware_offload(mdev))
|
|
err = mt7615_mcu_set_hif_suspend(mdev, false);
|
|
|
|
return err;
|
|
}
|
|
|
|
static const struct dev_pm_ops mt7663s_pm_ops = {
|
|
.suspend = mt7663s_suspend,
|
|
.resume = mt7663s_resume,
|
|
};
|
|
#endif
|
|
|
|
MODULE_DEVICE_TABLE(sdio, mt7663s_table);
|
|
MODULE_FIRMWARE(MT7663_OFFLOAD_FIRMWARE_N9);
|
|
MODULE_FIRMWARE(MT7663_OFFLOAD_ROM_PATCH);
|
|
MODULE_FIRMWARE(MT7663_FIRMWARE_N9);
|
|
MODULE_FIRMWARE(MT7663_ROM_PATCH);
|
|
|
|
static struct sdio_driver mt7663s_driver = {
|
|
.name = KBUILD_MODNAME,
|
|
.probe = mt7663s_probe,
|
|
.remove = mt7663s_remove,
|
|
.id_table = mt7663s_table,
|
|
#ifdef CONFIG_PM
|
|
.drv = {
|
|
.pm = &mt7663s_pm_ops,
|
|
}
|
|
#endif
|
|
};
|
|
module_sdio_driver(mt7663s_driver);
|
|
|
|
MODULE_AUTHOR("Sean Wang <[email protected]>");
|
|
MODULE_AUTHOR("Lorenzo Bianconi <[email protected]>");
|
|
MODULE_LICENSE("Dual BSD/GPL");
|