xref: /linux/drivers/net/wireless/ath/ath12k/wifi7/dp_rx.c (revision fab183d632628381b466a41479489541ac0e29a0)
1 // SPDX-License-Identifier: BSD-3-Clause-Clear
2 /*
3  * Copyright (c) 2018-2021 The Linux Foundation. All rights reserved.
4  * Copyright (c) Qualcomm Technologies, Inc. and/or its subsidiaries.
5  */
6 
7 #include "dp_rx.h"
8 #include "../dp_peer.h"
9 #include "../dp_tx.h"
10 #include "../peer.h"
11 #include "hal_qcn9274.h"
12 #include "hal_wcn7850.h"
13 #include "hal_qcc2072.h"
14 
ath12k_wifi7_dp_rx_get_peer_id(struct ath12k_dp * dp,enum ath12k_peer_metadata_version ver,__le32 peer_metadata)15 static u16 ath12k_wifi7_dp_rx_get_peer_id(struct ath12k_dp *dp,
16 					  enum ath12k_peer_metadata_version ver,
17 					  __le32 peer_metadata)
18 {
19 	switch (ver) {
20 	default:
21 		ath12k_warn(dp->ab, "Unknown peer metadata version: %d", ver);
22 		fallthrough;
23 	case ATH12K_PEER_METADATA_V0:
24 		return le32_get_bits(peer_metadata,
25 				     RX_MPDU_DESC_META_DATA_V0_PEER_ID);
26 	case ATH12K_PEER_METADATA_V1:
27 		return le32_get_bits(peer_metadata,
28 				     RX_MPDU_DESC_META_DATA_V1_PEER_ID);
29 	case ATH12K_PEER_METADATA_V1A:
30 		return le32_get_bits(peer_metadata,
31 				     RX_MPDU_DESC_META_DATA_V1A_PEER_ID);
32 	case ATH12K_PEER_METADATA_V1B:
33 		return le32_get_bits(peer_metadata,
34 				     RX_MPDU_DESC_META_DATA_V1B_PEER_ID);
35 	}
36 }
37 
ath12k_wifi7_peer_rx_tid_qref_setup(struct ath12k_base * ab,u16 peer_id,u16 tid,dma_addr_t paddr)38 void ath12k_wifi7_peer_rx_tid_qref_setup(struct ath12k_base *ab, u16 peer_id, u16 tid,
39 					 dma_addr_t paddr)
40 {
41 	struct ath12k_reo_queue_ref *qref;
42 	struct ath12k_dp *dp = ath12k_ab_to_dp(ab);
43 	bool ml_peer = false;
44 
45 	if (!ab->hw_params->reoq_lut_support)
46 		return;
47 
48 	if (peer_id & ATH12K_PEER_ML_ID_VALID) {
49 		peer_id &= ~ATH12K_PEER_ML_ID_VALID;
50 		ml_peer = true;
51 	}
52 
53 	if (ml_peer)
54 		qref = (struct ath12k_reo_queue_ref *)dp->ml_reoq_lut.vaddr +
55 				(peer_id * (IEEE80211_NUM_TIDS + 1) + tid);
56 	else
57 		qref = (struct ath12k_reo_queue_ref *)dp->reoq_lut.vaddr +
58 				(peer_id * (IEEE80211_NUM_TIDS + 1) + tid);
59 
60 	qref->info0 = u32_encode_bits(lower_32_bits(paddr),
61 				      BUFFER_ADDR_INFO0_ADDR);
62 	qref->info1 = u32_encode_bits(upper_32_bits(paddr),
63 				      BUFFER_ADDR_INFO1_ADDR) |
64 		      u32_encode_bits(tid, DP_REO_QREF_NUM);
65 
66 	ath12k_hal_reo_shared_qaddr_cache_clear(ab);
67 }
68 
ath12k_wifi7_peer_rx_tid_qref_reset(struct ath12k_base * ab,u16 peer_id,u16 tid)69 void ath12k_wifi7_peer_rx_tid_qref_reset(struct ath12k_base *ab,
70 					 u16 peer_id, u16 tid)
71 {
72 	struct ath12k_reo_queue_ref *qref;
73 	struct ath12k_dp *dp = ath12k_ab_to_dp(ab);
74 	bool ml_peer = false;
75 
76 	if (!ab->hw_params->reoq_lut_support)
77 		return;
78 
79 	if (peer_id & ATH12K_PEER_ML_ID_VALID) {
80 		peer_id &= ~ATH12K_PEER_ML_ID_VALID;
81 		ml_peer = true;
82 	}
83 
84 	if (ml_peer)
85 		qref = (struct ath12k_reo_queue_ref *)dp->ml_reoq_lut.vaddr +
86 				(peer_id * (IEEE80211_NUM_TIDS + 1) + tid);
87 	else
88 		qref = (struct ath12k_reo_queue_ref *)dp->reoq_lut.vaddr +
89 				(peer_id * (IEEE80211_NUM_TIDS + 1) + tid);
90 
91 	qref->info0 = u32_encode_bits(0, BUFFER_ADDR_INFO0_ADDR);
92 	qref->info1 = u32_encode_bits(0, BUFFER_ADDR_INFO1_ADDR) |
93 		      u32_encode_bits(tid, DP_REO_QREF_NUM);
94 }
95 
ath12k_wifi7_dp_rx_peer_tid_delete(struct ath12k_base * ab,struct ath12k_dp_link_peer * peer,u8 tid)96 void ath12k_wifi7_dp_rx_peer_tid_delete(struct ath12k_base *ab,
97 					struct ath12k_dp_link_peer *peer, u8 tid)
98 {
99 	struct ath12k_dp *dp = ath12k_ab_to_dp(ab);
100 
101 	if (!(peer->rx_tid_active_bitmask & (1 << tid)))
102 		return;
103 
104 	ath12k_dp_mark_tid_as_inactive(dp, peer->peer_id, tid);
105 	ath12k_dp_rx_process_reo_cmd_update_rx_queue_list(dp);
106 }
107 
ath12k_wifi7_dp_rx_link_desc_return(struct ath12k_dp * dp,struct ath12k_buffer_addr * buf_addr_info,enum hal_wbm_rel_bm_act action)108 int ath12k_wifi7_dp_rx_link_desc_return(struct ath12k_dp *dp,
109 					struct ath12k_buffer_addr *buf_addr_info,
110 					enum hal_wbm_rel_bm_act action)
111 {
112 	struct ath12k_base *ab = dp->ab;
113 	struct hal_wbm_release_ring *desc;
114 	struct hal_srng *srng;
115 	int ret = 0;
116 
117 	srng = &dp->hal->srng_list[dp->wbm_desc_rel_ring.ring_id];
118 
119 	spin_lock_bh(&srng->lock);
120 
121 	ath12k_hal_srng_access_begin(ab, srng);
122 
123 	desc = ath12k_hal_srng_src_get_next_entry(ab, srng);
124 	if (!desc) {
125 		ret = -ENOBUFS;
126 		goto exit;
127 	}
128 
129 	ath12k_wifi7_hal_rx_msdu_link_desc_set(ab, desc, buf_addr_info, action);
130 
131 exit:
132 	ath12k_hal_srng_access_end(ab, srng);
133 
134 	spin_unlock_bh(&srng->lock);
135 
136 	return ret;
137 }
138 
ath12k_wifi7_dp_reo_cmd_send(struct ath12k_base * ab,struct ath12k_dp_rx_tid_rxq * rx_tid,enum hal_reo_cmd_type type,struct ath12k_hal_reo_cmd * cmd,void (* cb)(struct ath12k_dp * dp,void * ctx,enum hal_reo_cmd_status status))139 int ath12k_wifi7_dp_reo_cmd_send(struct ath12k_base *ab,
140 				 struct ath12k_dp_rx_tid_rxq *rx_tid,
141 				 enum hal_reo_cmd_type type,
142 				 struct ath12k_hal_reo_cmd *cmd,
143 				 void (*cb)(struct ath12k_dp *dp, void *ctx,
144 					    enum hal_reo_cmd_status status))
145 {
146 	struct ath12k_dp *dp = ath12k_ab_to_dp(ab);
147 	struct ath12k_dp_rx_reo_cmd *dp_cmd;
148 	struct hal_srng *cmd_ring;
149 	int cmd_num;
150 
151 	cmd_ring = &ab->hal.srng_list[dp->reo_cmd_ring.ring_id];
152 	cmd_num = ath12k_wifi7_hal_reo_cmd_send(ab, cmd_ring, type, cmd);
153 
154 	/* cmd_num should start from 1, during failure return the error code */
155 	if (cmd_num < 0)
156 		return cmd_num;
157 
158 	/* reo cmd ring descriptors has cmd_num starting from 1 */
159 	if (cmd_num == 0)
160 		return -EINVAL;
161 
162 	if (!cb)
163 		return 0;
164 
165 	/* Can this be optimized so that we keep the pending command list only
166 	 * for tid delete command to free up the resource on the command status
167 	 * indication?
168 	 */
169 	dp_cmd = kzalloc_obj(*dp_cmd, GFP_ATOMIC);
170 
171 	if (!dp_cmd)
172 		return -ENOMEM;
173 
174 	memcpy(&dp_cmd->data, rx_tid, sizeof(*rx_tid));
175 	dp_cmd->cmd_num = cmd_num;
176 	dp_cmd->handler = cb;
177 
178 	spin_lock_bh(&dp->reo_cmd_lock);
179 	list_add_tail(&dp_cmd->list, &dp->reo_cmd_list);
180 	spin_unlock_bh(&dp->reo_cmd_lock);
181 
182 	return 0;
183 }
184 
ath12k_wifi7_peer_rx_tid_reo_update(struct ath12k_dp * dp,struct ath12k_dp_link_peer * peer,struct ath12k_dp_rx_tid * rx_tid,u32 ba_win_sz,u16 ssn,bool update_ssn)185 int ath12k_wifi7_peer_rx_tid_reo_update(struct ath12k_dp *dp,
186 					struct ath12k_dp_link_peer *peer,
187 					struct ath12k_dp_rx_tid *rx_tid,
188 					u32 ba_win_sz, u16 ssn,
189 					bool update_ssn)
190 {
191 	struct ath12k_hal_reo_cmd cmd = {};
192 	struct ath12k_base *ab = dp->ab;
193 	int ret;
194 	struct ath12k_dp_rx_tid_rxq rx_tid_rxq;
195 
196 	ath12k_dp_init_rx_tid_rxq(&rx_tid_rxq, rx_tid,
197 				  (peer->rx_tid_active_bitmask & (1 << rx_tid->tid)));
198 
199 	cmd.addr_lo = lower_32_bits(rx_tid_rxq.qbuf.paddr_aligned);
200 	cmd.addr_hi = upper_32_bits(rx_tid_rxq.qbuf.paddr_aligned);
201 	cmd.flag = HAL_REO_CMD_FLG_NEED_STATUS;
202 	cmd.upd0 = HAL_REO_CMD_UPD0_BA_WINDOW_SIZE;
203 	cmd.ba_window_size = ba_win_sz;
204 
205 	if (update_ssn) {
206 		cmd.upd0 |= HAL_REO_CMD_UPD0_SSN;
207 		cmd.upd2 = u32_encode_bits(ssn, HAL_REO_CMD_UPD2_SSN);
208 	}
209 
210 	ret = ath12k_wifi7_dp_reo_cmd_send(ab, &rx_tid_rxq,
211 					   HAL_REO_CMD_UPDATE_RX_QUEUE, &cmd,
212 					   NULL);
213 	if (ret) {
214 		ath12k_warn(ab, "failed to update rx tid queue, tid %d (%d)\n",
215 			    rx_tid_rxq.tid, ret);
216 		return ret;
217 	}
218 
219 	rx_tid->ba_win_sz = ba_win_sz;
220 
221 	return 0;
222 }
223 
ath12k_wifi7_dp_reo_cache_flush(struct ath12k_base * ab,struct ath12k_dp_rx_tid_rxq * rx_tid)224 int ath12k_wifi7_dp_reo_cache_flush(struct ath12k_base *ab,
225 				    struct ath12k_dp_rx_tid_rxq *rx_tid)
226 {
227 	struct ath12k_hal_reo_cmd cmd = {};
228 	int ret;
229 
230 	cmd.addr_lo = lower_32_bits(rx_tid->qbuf.paddr_aligned);
231 	cmd.addr_hi = upper_32_bits(rx_tid->qbuf.paddr_aligned);
232 	/* HAL_REO_CMD_FLG_FLUSH_FWD_ALL_MPDUS - all pending MPDUs
233 	 *in the bitmap will be forwarded/flushed to REO output rings
234 	 */
235 	cmd.flag = HAL_REO_CMD_FLG_NEED_STATUS |
236 		   HAL_REO_CMD_FLG_FLUSH_FWD_ALL_MPDUS;
237 
238 	/* For all QoS TIDs (except NON_QOS), the driver allocates a maximum
239 	 * window size of 1024. In such cases, the driver can issue a single
240 	 * 1KB descriptor flush command instead of sending multiple 128-byte
241 	 * flush commands for each QoS TID, improving efficiency.
242 	 */
243 
244 	if (rx_tid->tid != HAL_DESC_REO_NON_QOS_TID)
245 		cmd.flag |= HAL_REO_CMD_FLG_FLUSH_QUEUE_1K_DESC;
246 
247 	ret = ath12k_wifi7_dp_reo_cmd_send(ab, rx_tid,
248 					   HAL_REO_CMD_FLUSH_CACHE,
249 					   &cmd, ath12k_dp_reo_cmd_free);
250 	return ret;
251 }
252 
ath12k_wifi7_dp_rx_assign_reoq(struct ath12k_base * ab,struct ath12k_dp_peer * dp_peer,struct ath12k_dp_rx_tid * rx_tid,u16 ssn,enum hal_pn_type pn_type)253 int ath12k_wifi7_dp_rx_assign_reoq(struct ath12k_base *ab, struct ath12k_dp_peer *dp_peer,
254 				   struct ath12k_dp_rx_tid *rx_tid,
255 				   u16 ssn, enum hal_pn_type pn_type)
256 {
257 	u32 ba_win_sz = rx_tid->ba_win_sz;
258 	struct ath12k_reoq_buf *buf;
259 	void *vaddr, *vaddr_aligned;
260 	dma_addr_t paddr_aligned;
261 	u8 tid = rx_tid->tid;
262 	u32 hw_desc_sz;
263 	int ret;
264 
265 	buf = &dp_peer->reoq_bufs[tid];
266 	if (!buf->vaddr) {
267 		/* TODO: Optimize the memory allocation for qos tid based on
268 		 * the actual BA window size in REO tid update path.
269 		 */
270 		if (tid == HAL_DESC_REO_NON_QOS_TID)
271 			hw_desc_sz = ath12k_wifi7_hal_reo_qdesc_size(ba_win_sz, tid);
272 		else
273 			hw_desc_sz = ath12k_wifi7_hal_reo_qdesc_size(DP_BA_WIN_SZ_MAX,
274 								     tid);
275 
276 		vaddr = kzalloc(hw_desc_sz + HAL_LINK_DESC_ALIGN - 1, GFP_ATOMIC);
277 		if (!vaddr)
278 			return -ENOMEM;
279 
280 		vaddr_aligned = PTR_ALIGN(vaddr, HAL_LINK_DESC_ALIGN);
281 
282 		ath12k_wifi7_hal_reo_qdesc_setup(vaddr_aligned, tid, ba_win_sz,
283 						 ssn, pn_type);
284 
285 		paddr_aligned = dma_map_single(ab->dev, vaddr_aligned, hw_desc_sz,
286 					       DMA_BIDIRECTIONAL);
287 		ret = dma_mapping_error(ab->dev, paddr_aligned);
288 		if (ret) {
289 			kfree(vaddr);
290 			return ret;
291 		}
292 
293 		buf->vaddr = vaddr;
294 		buf->paddr_aligned = paddr_aligned;
295 		buf->size = hw_desc_sz;
296 	}
297 
298 	rx_tid->qbuf = *buf;
299 
300 	return 0;
301 }
302 
ath12k_wifi7_dp_rx_tid_delete_handler(struct ath12k_base * ab,struct ath12k_dp_rx_tid_rxq * rx_tid)303 int ath12k_wifi7_dp_rx_tid_delete_handler(struct ath12k_base *ab,
304 					  struct ath12k_dp_rx_tid_rxq *rx_tid)
305 {
306 	struct ath12k_hal_reo_cmd cmd = {};
307 
308 	cmd.flag = HAL_REO_CMD_FLG_NEED_STATUS;
309 	cmd.addr_lo = lower_32_bits(rx_tid->qbuf.paddr_aligned);
310 	cmd.addr_hi = upper_32_bits(rx_tid->qbuf.paddr_aligned);
311 	cmd.upd0 |= HAL_REO_CMD_UPD0_VLD;
312 	/* Observed flush cache failure, to avoid that set vld bit during delete */
313 	cmd.upd1 |= HAL_REO_CMD_UPD1_VLD;
314 
315 	return ath12k_wifi7_dp_reo_cmd_send(ab, rx_tid,
316 					    HAL_REO_CMD_UPDATE_RX_QUEUE, &cmd,
317 					    ath12k_dp_rx_tid_del_func);
318 }
319 
ath12k_wifi7_dp_rx_h_csum_offload(struct sk_buff * msdu,struct hal_rx_desc_data * rx_info)320 static void ath12k_wifi7_dp_rx_h_csum_offload(struct sk_buff *msdu,
321 					      struct hal_rx_desc_data *rx_info)
322 {
323 	msdu->ip_summed = (rx_info->ip_csum_fail || rx_info->l4_csum_fail) ?
324 			   CHECKSUM_NONE : CHECKSUM_UNNECESSARY;
325 }
326 
ath12k_wifi7_dp_rx_h_mpdu(struct ath12k_pdev_dp * dp_pdev,struct sk_buff * msdu,struct hal_rx_desc_data * rx_info)327 static int ath12k_wifi7_dp_rx_h_mpdu(struct ath12k_pdev_dp *dp_pdev,
328 				     struct sk_buff *msdu,
329 				     struct hal_rx_desc_data *rx_info)
330 {
331 	struct ath12k_skb_rxcb *rxcb;
332 	enum hal_encrypt_type enctype;
333 	bool is_decrypted = false;
334 	struct ieee80211_hdr *hdr;
335 	struct ath12k_dp_peer *peer;
336 	struct ieee80211_rx_status *rx_status = rx_info->rx_status;
337 	u32 err_bitmap = rx_info->err_bitmap;
338 
339 	RCU_LOCKDEP_WARN(!rcu_read_lock_held(),
340 			 "dp_rx_h_mpdu called without rcu lock");
341 
342 	/* PN for multicast packets will be checked in mac80211 */
343 	rxcb = ATH12K_SKB_RXCB(msdu);
344 	rxcb->is_mcbc = rx_info->is_mcbc;
345 
346 	if (rxcb->is_mcbc)
347 		rxcb->peer_id = rx_info->peer_id;
348 
349 	peer = ath12k_dp_peer_find_by_peerid(dp_pdev, rxcb->peer_id);
350 	if (peer) {
351 		/*
352 		 * Drop the 3-address multicast packet from 4-address
353 		 * peer To avoid receiving the duplicate multicast packet
354 		 * Specifically from AP interface in 3-address format
355 		 */
356 		if (rxcb->is_mcbc &&
357 		    rx_info->decap_type == DP_RX_DECAP_TYPE_ETHERNET2_DIX) {
358 			if (peer->use_4addr &&
359 			    !(rx_info->is_from_ds && rx_info->is_to_ds))
360 				return -EINVAL;
361 		}
362 
363 		/* resetting mcbc bit because mcbc packets are unicast
364 		 * packets only for AP as STA sends unicast packets.
365 		 */
366 		rxcb->is_mcbc = rxcb->is_mcbc && !peer->ucast_ra_only;
367 
368 		if (rxcb->is_mcbc)
369 			enctype = peer->sec_type_grp;
370 		else
371 			enctype = peer->sec_type;
372 	} else {
373 		enctype = HAL_ENCRYPT_TYPE_OPEN;
374 	}
375 
376 	if (enctype != HAL_ENCRYPT_TYPE_OPEN && !err_bitmap)
377 		is_decrypted = rx_info->is_decrypted;
378 
379 	/* Clear per-MPDU flags while leaving per-PPDU flags intact */
380 	rx_status->flag &= ~(RX_FLAG_FAILED_FCS_CRC |
381 			     RX_FLAG_MMIC_ERROR |
382 			     RX_FLAG_DECRYPTED |
383 			     RX_FLAG_IV_STRIPPED |
384 			     RX_FLAG_MMIC_STRIPPED);
385 
386 	if (err_bitmap & HAL_RX_MPDU_ERR_FCS)
387 		rx_status->flag |= RX_FLAG_FAILED_FCS_CRC;
388 	if (err_bitmap & HAL_RX_MPDU_ERR_TKIP_MIC)
389 		rx_status->flag |= RX_FLAG_MMIC_ERROR;
390 
391 	if (is_decrypted) {
392 		rx_status->flag |= RX_FLAG_DECRYPTED | RX_FLAG_MMIC_STRIPPED;
393 
394 		if (rx_info->is_mcbc)
395 			rx_status->flag |= RX_FLAG_MIC_STRIPPED |
396 					   RX_FLAG_ICV_STRIPPED;
397 		else
398 			rx_status->flag |= RX_FLAG_IV_STRIPPED |
399 					   RX_FLAG_PN_VALIDATED;
400 	}
401 
402 	ath12k_wifi7_dp_rx_h_csum_offload(msdu, rx_info);
403 	ath12k_dp_rx_h_undecap(dp_pdev, msdu, enctype, is_decrypted, rx_info,
404 			       peer);
405 
406 	if (!is_decrypted || rx_info->is_mcbc)
407 		return 0;
408 
409 	if (rx_info->decap_type != DP_RX_DECAP_TYPE_ETHERNET2_DIX) {
410 		hdr = (void *)msdu->data;
411 		hdr->frame_control &= ~__cpu_to_le16(IEEE80211_FCTL_PROTECTED);
412 	}
413 
414 	return 0;
415 }
416 
ath12k_wifi7_dp_rx_msdu_coalesce(struct ath12k_hal * hal,struct sk_buff_head * msdu_list,struct sk_buff * first,struct sk_buff * last,u8 l3pad_bytes,int msdu_len,struct hal_rx_desc_data * rx_info)417 static int ath12k_wifi7_dp_rx_msdu_coalesce(struct ath12k_hal *hal,
418 					    struct sk_buff_head *msdu_list,
419 					    struct sk_buff *first, struct sk_buff *last,
420 					    u8 l3pad_bytes, int msdu_len,
421 					    struct hal_rx_desc_data *rx_info)
422 {
423 	struct sk_buff *skb;
424 	struct ath12k_skb_rxcb *rxcb = ATH12K_SKB_RXCB(first);
425 	int buf_first_hdr_len, buf_first_len;
426 	struct hal_rx_desc *ldesc;
427 	int space_extra, rem_len, buf_len;
428 	u32 hal_rx_desc_sz = hal->hal_desc_sz;
429 	bool is_continuation;
430 
431 	/* As the msdu is spread across multiple rx buffers,
432 	 * find the offset to the start of msdu for computing
433 	 * the length of the msdu in the first buffer.
434 	 */
435 	buf_first_hdr_len = hal_rx_desc_sz + l3pad_bytes;
436 	buf_first_len = DP_RX_BUFFER_SIZE - buf_first_hdr_len;
437 
438 	if (WARN_ON_ONCE(msdu_len <= buf_first_len)) {
439 		skb_put(first, buf_first_hdr_len + msdu_len);
440 		skb_pull(first, buf_first_hdr_len);
441 		return 0;
442 	}
443 
444 	ldesc = (struct hal_rx_desc *)last->data;
445 	rxcb->is_first_msdu = rx_info->is_first_msdu;
446 	rxcb->is_last_msdu = rx_info->is_last_msdu;
447 
448 	/* MSDU spans over multiple buffers because the length of the MSDU
449 	 * exceeds DP_RX_BUFFER_SIZE - HAL_RX_DESC_SIZE. So assume the data
450 	 * in the first buf is of length DP_RX_BUFFER_SIZE - HAL_RX_DESC_SIZE.
451 	 */
452 	skb_put(first, DP_RX_BUFFER_SIZE);
453 	skb_pull(first, buf_first_hdr_len);
454 
455 	/* When an MSDU spread over multiple buffers MSDU_END
456 	 * tlvs are valid only in the last buffer. Copy those tlvs.
457 	 */
458 	ath12k_dp_rx_desc_end_tlv_copy(hal, rxcb->rx_desc, ldesc);
459 
460 	space_extra = msdu_len - (buf_first_len + skb_tailroom(first));
461 	if (space_extra > 0 &&
462 	    (pskb_expand_head(first, 0, space_extra, GFP_ATOMIC) < 0)) {
463 		/* Free up all buffers of the MSDU */
464 		while ((skb = __skb_dequeue(msdu_list)) != NULL) {
465 			rxcb = ATH12K_SKB_RXCB(skb);
466 			if (!rxcb->is_continuation) {
467 				dev_kfree_skb_any(skb);
468 				break;
469 			}
470 			dev_kfree_skb_any(skb);
471 		}
472 		return -ENOMEM;
473 	}
474 
475 	rem_len = msdu_len - buf_first_len;
476 	while ((skb = __skb_dequeue(msdu_list)) != NULL && rem_len > 0) {
477 		rxcb = ATH12K_SKB_RXCB(skb);
478 		is_continuation = rxcb->is_continuation;
479 		if (is_continuation)
480 			buf_len = DP_RX_BUFFER_SIZE - hal_rx_desc_sz;
481 		else
482 			buf_len = rem_len;
483 
484 		if (buf_len > (DP_RX_BUFFER_SIZE - hal_rx_desc_sz)) {
485 			WARN_ON_ONCE(1);
486 			dev_kfree_skb_any(skb);
487 			return -EINVAL;
488 		}
489 
490 		skb_put(skb, buf_len + hal_rx_desc_sz);
491 		skb_pull(skb, hal_rx_desc_sz);
492 		skb_copy_from_linear_data(skb, skb_put(first, buf_len),
493 					  buf_len);
494 		dev_kfree_skb_any(skb);
495 
496 		rem_len -= buf_len;
497 		if (!is_continuation)
498 			break;
499 	}
500 
501 	return 0;
502 }
503 
ath12k_wifi7_dp_rx_process_msdu(struct ath12k_pdev_dp * dp_pdev,struct sk_buff * msdu,struct sk_buff_head * msdu_list,struct hal_rx_desc_data * rx_info)504 static int ath12k_wifi7_dp_rx_process_msdu(struct ath12k_pdev_dp *dp_pdev,
505 					   struct sk_buff *msdu,
506 					   struct sk_buff_head *msdu_list,
507 					   struct hal_rx_desc_data *rx_info)
508 {
509 	struct ath12k_dp *dp = dp_pdev->dp;
510 	struct hal_rx_desc *rx_desc, *lrx_desc;
511 	struct ath12k_skb_rxcb *rxcb;
512 	struct sk_buff *last_buf;
513 	struct ath12k_hal *hal = dp->hal;
514 	u8 l3_pad_bytes;
515 	u16 msdu_len;
516 	int ret;
517 	u32 hal_rx_desc_sz = hal->hal_desc_sz;
518 
519 	last_buf = ath12k_dp_rx_get_msdu_last_buf(msdu_list, msdu);
520 	if (!last_buf) {
521 		ath12k_warn(dp->ab,
522 			    "No valid Rx buffer to access MSDU_END tlv\n");
523 		ret = -EIO;
524 		goto free_out;
525 	}
526 
527 	rx_desc = (struct hal_rx_desc *)msdu->data;
528 	lrx_desc = (struct hal_rx_desc *)last_buf->data;
529 
530 	ath12k_dp_extract_rx_desc_data(hal, rx_info, rx_desc, lrx_desc);
531 	if (!rx_info->msdu_done) {
532 		ath12k_warn(dp->ab, "msdu_done bit in msdu_end is not set\n");
533 		ret = -EIO;
534 		goto free_out;
535 	}
536 
537 	rxcb = ATH12K_SKB_RXCB(msdu);
538 	rxcb->rx_desc = rx_desc;
539 	msdu_len = rx_info->msdu_len;
540 	l3_pad_bytes = rx_info->l3_pad_bytes;
541 
542 	if (rxcb->is_frag) {
543 		skb_pull(msdu, hal_rx_desc_sz);
544 	} else if (!rxcb->is_continuation) {
545 		if ((msdu_len + hal_rx_desc_sz) > DP_RX_BUFFER_SIZE) {
546 			ret = -EINVAL;
547 			ath12k_warn(dp->ab, "invalid msdu len %u\n", msdu_len);
548 			ath12k_dbg_dump(dp->ab, ATH12K_DBG_DATA, NULL, "", rx_desc,
549 					sizeof(*rx_desc));
550 			goto free_out;
551 		}
552 		skb_put(msdu, hal_rx_desc_sz + l3_pad_bytes + msdu_len);
553 		skb_pull(msdu, hal_rx_desc_sz + l3_pad_bytes);
554 	} else {
555 		ret = ath12k_wifi7_dp_rx_msdu_coalesce(hal, msdu_list,
556 						       msdu, last_buf,
557 						       l3_pad_bytes, msdu_len,
558 						       rx_info);
559 		if (ret) {
560 			ath12k_warn(dp->ab,
561 				    "failed to coalesce msdu rx buffer%d\n", ret);
562 			goto free_out;
563 		}
564 	}
565 
566 	if (unlikely(!ath12k_dp_rx_check_nwifi_hdr_len_valid(dp, msdu,
567 							     rx_info))) {
568 		ret = -EINVAL;
569 		goto free_out;
570 	}
571 
572 	ath12k_dp_rx_h_ppdu(dp_pdev, rx_info);
573 	ret = ath12k_wifi7_dp_rx_h_mpdu(dp_pdev, msdu, rx_info);
574 	if (ret)
575 		goto free_out;
576 
577 	rx_info->rx_status->flag |= RX_FLAG_SKIP_MONITOR | RX_FLAG_DUP_VALIDATED;
578 
579 	return 0;
580 
581 free_out:
582 	return ret;
583 }
584 
585 static void
ath12k_wifi7_dp_rx_process_received_packets(struct ath12k_dp * dp,struct napi_struct * napi,struct sk_buff_head * msdu_list,int ring_id)586 ath12k_wifi7_dp_rx_process_received_packets(struct ath12k_dp *dp,
587 					    struct napi_struct *napi,
588 					    struct sk_buff_head *msdu_list,
589 					    int ring_id)
590 {
591 	struct ath12k_hw_group *ag = dp->ag;
592 	struct ath12k_dp_hw_group *dp_hw_grp = &ag->dp_hw_grp;
593 	struct ieee80211_rx_status rx_status = {};
594 	struct ath12k_skb_rxcb *rxcb;
595 	struct sk_buff *msdu;
596 	struct ath12k *ar;
597 	struct ath12k_pdev_dp *dp_pdev;
598 	struct ath12k_hw_link *hw_links = ag->hw_links;
599 	struct ath12k_base *partner_ab;
600 	struct hal_rx_desc_data rx_info;
601 	struct ath12k_dp *partner_dp;
602 	u8 hw_link_id, pdev_idx;
603 	int ret;
604 
605 	if (skb_queue_empty(msdu_list))
606 		return;
607 
608 	rx_info.addr2_present = false;
609 	rx_info.rx_status = &rx_status;
610 
611 	rcu_read_lock();
612 
613 	while ((msdu = __skb_dequeue(msdu_list))) {
614 		rxcb = ATH12K_SKB_RXCB(msdu);
615 		hw_link_id = rxcb->hw_link_id;
616 		partner_dp = ath12k_dp_hw_grp_to_dp(dp_hw_grp,
617 						    hw_links[hw_link_id].device_id);
618 		pdev_idx = ath12k_hw_mac_id_to_pdev_id(partner_dp->hw_params,
619 						       hw_links[hw_link_id].pdev_idx);
620 		partner_ab = partner_dp->ab;
621 		ar = partner_ab->pdevs[pdev_idx].ar;
622 		if (!rcu_dereference(partner_ab->pdevs_active[pdev_idx])) {
623 			dev_kfree_skb_any(msdu);
624 			continue;
625 		}
626 
627 		if (test_bit(ATH12K_FLAG_CAC_RUNNING, &ar->dev_flags)) {
628 			dev_kfree_skb_any(msdu);
629 			continue;
630 		}
631 
632 		dp_pdev = ath12k_dp_to_pdev_dp(partner_dp, pdev_idx);
633 		if (!dp_pdev) {
634 			dev_kfree_skb_any(msdu);
635 			continue;
636 		}
637 
638 		ret = ath12k_wifi7_dp_rx_process_msdu(dp_pdev, msdu, msdu_list, &rx_info);
639 		if (ret) {
640 			ath12k_dbg(dp->ab, ATH12K_DBG_DATA,
641 				   "Unable to process msdu %d", ret);
642 			dev_kfree_skb_any(msdu);
643 			continue;
644 		}
645 
646 		ath12k_dp_rx_deliver_msdu(dp_pdev, napi, msdu, &rx_info);
647 	}
648 
649 	rcu_read_unlock();
650 }
651 
ath12k_wifi7_dp_rx_process(struct ath12k_dp * dp,int ring_id,struct napi_struct * napi,int budget)652 int ath12k_wifi7_dp_rx_process(struct ath12k_dp *dp, int ring_id,
653 			       struct napi_struct *napi, int budget)
654 {
655 	struct ath12k_hw_group *ag = dp->ag;
656 	struct ath12k_base *ab = dp->ab;
657 	struct ath12k_hal *hal = dp->hal;
658 	struct ath12k_dp_hw_group *dp_hw_grp = &ag->dp_hw_grp;
659 	struct list_head rx_desc_used_list[ATH12K_MAX_DEVICES];
660 	struct ath12k_hw_link *hw_links = ag->hw_links;
661 	int num_buffs_reaped[ATH12K_MAX_DEVICES] = {};
662 	struct ath12k_rx_desc_info *desc_info;
663 	struct dp_rxdma_ring *rx_ring = &dp->rx_refill_buf_ring;
664 	struct hal_reo_dest_ring *desc;
665 	struct ath12k_dp *partner_dp;
666 	struct sk_buff_head msdu_list;
667 	struct ath12k_skb_rxcb *rxcb;
668 	int total_msdu_reaped = 0;
669 	u8 hw_link_id, device_id;
670 	struct hal_srng *srng;
671 	struct sk_buff *msdu;
672 	bool done = false;
673 	u64 desc_va;
674 
675 	__skb_queue_head_init(&msdu_list);
676 
677 	for (device_id = 0; device_id < ATH12K_MAX_DEVICES; device_id++)
678 		INIT_LIST_HEAD(&rx_desc_used_list[device_id]);
679 
680 	srng = &hal->srng_list[dp->reo_dst_ring[ring_id].ring_id];
681 
682 	spin_lock_bh(&srng->lock);
683 
684 try_again:
685 	ath12k_hal_srng_access_begin(ab, srng);
686 
687 	while ((desc = ath12k_hal_srng_dst_get_next_entry(ab, srng))) {
688 		struct rx_mpdu_desc *mpdu_info;
689 		struct rx_msdu_desc *msdu_info;
690 		enum hal_reo_dest_ring_push_reason push_reason;
691 		u32 cookie;
692 
693 		cookie = le32_get_bits(desc->buf_addr_info.info1,
694 				       BUFFER_ADDR_INFO1_SW_COOKIE);
695 
696 		hw_link_id = le32_get_bits(desc->info0,
697 					   HAL_REO_DEST_RING_INFO0_SRC_LINK_ID);
698 
699 		desc_va = ((u64)le32_to_cpu(desc->buf_va_hi) << 32 |
700 			   le32_to_cpu(desc->buf_va_lo));
701 		desc_info = (struct ath12k_rx_desc_info *)((unsigned long)desc_va);
702 
703 		device_id = hw_links[hw_link_id].device_id;
704 		partner_dp = ath12k_dp_hw_grp_to_dp(dp_hw_grp, device_id);
705 		if (unlikely(!partner_dp)) {
706 			if (desc_info->skb) {
707 				dev_kfree_skb_any(desc_info->skb);
708 				desc_info->skb = NULL;
709 			}
710 
711 			continue;
712 		}
713 
714 		/* retry manual desc retrieval */
715 		if (!desc_info) {
716 			desc_info = ath12k_dp_get_rx_desc(partner_dp, cookie);
717 			if (!desc_info) {
718 				ath12k_warn(partner_dp->ab, "Invalid cookie in manual descriptor retrieval: 0x%x\n",
719 					    cookie);
720 				continue;
721 			}
722 		}
723 
724 		if (desc_info->magic != ATH12K_DP_RX_DESC_MAGIC)
725 			ath12k_warn(ab, "Check HW CC implementation");
726 
727 		msdu = desc_info->skb;
728 		desc_info->skb = NULL;
729 
730 		list_add_tail(&desc_info->list, &rx_desc_used_list[device_id]);
731 
732 		rxcb = ATH12K_SKB_RXCB(msdu);
733 		dma_unmap_single(partner_dp->dev, rxcb->paddr,
734 				 msdu->len + skb_tailroom(msdu),
735 				 DMA_FROM_DEVICE);
736 
737 		num_buffs_reaped[device_id]++;
738 		dp->device_stats.reo_rx[ring_id][dp->device_id]++;
739 
740 		push_reason = le32_get_bits(desc->info0,
741 					    HAL_REO_DEST_RING_INFO0_PUSH_REASON);
742 		if (push_reason !=
743 		    HAL_REO_DEST_RING_PUSH_REASON_ROUTING_INSTRUCTION) {
744 			dev_kfree_skb_any(msdu);
745 			dp->device_stats.hal_reo_error[ring_id]++;
746 			continue;
747 		}
748 
749 		msdu_info = &desc->rx_msdu_info;
750 		mpdu_info = &desc->rx_mpdu_info;
751 
752 		rxcb->is_first_msdu = !!(le32_to_cpu(msdu_info->info0) &
753 					 RX_MSDU_DESC_INFO0_FIRST_MSDU_IN_MPDU);
754 		rxcb->is_last_msdu = !!(le32_to_cpu(msdu_info->info0) &
755 					RX_MSDU_DESC_INFO0_LAST_MSDU_IN_MPDU);
756 		rxcb->is_continuation = !!(le32_to_cpu(msdu_info->info0) &
757 					   RX_MSDU_DESC_INFO0_MSDU_CONTINUATION);
758 		rxcb->hw_link_id = hw_link_id;
759 		rxcb->peer_id = ath12k_wifi7_dp_rx_get_peer_id(dp, dp->peer_metadata_ver,
760 							       mpdu_info->peer_meta_data);
761 		rxcb->tid = le32_get_bits(mpdu_info->info0,
762 					  RX_MPDU_DESC_INFO0_TID);
763 
764 		__skb_queue_tail(&msdu_list, msdu);
765 
766 		if (!rxcb->is_continuation) {
767 			total_msdu_reaped++;
768 			done = true;
769 		} else {
770 			done = false;
771 		}
772 
773 		if (total_msdu_reaped >= budget)
774 			break;
775 	}
776 
777 	/* Hw might have updated the head pointer after we cached it.
778 	 * In this case, even though there are entries in the ring we'll
779 	 * get rx_desc NULL. Give the read another try with updated cached
780 	 * head pointer so that we can reap complete MPDU in the current
781 	 * rx processing.
782 	 */
783 	if (!done && ath12k_hal_srng_dst_num_free(ab, srng, true)) {
784 		ath12k_hal_srng_access_end(ab, srng);
785 		goto try_again;
786 	}
787 
788 	ath12k_hal_srng_access_end(ab, srng);
789 
790 	spin_unlock_bh(&srng->lock);
791 
792 	if (!total_msdu_reaped)
793 		goto exit;
794 
795 	for (device_id = 0; device_id < ATH12K_MAX_DEVICES; device_id++) {
796 		if (!num_buffs_reaped[device_id])
797 			continue;
798 
799 		partner_dp = ath12k_dp_hw_grp_to_dp(dp_hw_grp, device_id);
800 		rx_ring = &partner_dp->rx_refill_buf_ring;
801 
802 		ath12k_dp_rx_bufs_replenish(partner_dp, rx_ring,
803 					    &rx_desc_used_list[device_id],
804 					    num_buffs_reaped[device_id]);
805 	}
806 
807 	ath12k_wifi7_dp_rx_process_received_packets(dp, napi, &msdu_list,
808 						    ring_id);
809 
810 exit:
811 	return total_msdu_reaped;
812 }
813 
814 static bool
ath12k_wifi7_dp_rx_h_defrag_validate_incr_pn(struct ath12k_pdev_dp * dp_pdev,struct ath12k_dp_rx_tid * rx_tid,enum hal_encrypt_type encrypt_type)815 ath12k_wifi7_dp_rx_h_defrag_validate_incr_pn(struct ath12k_pdev_dp *dp_pdev,
816 					     struct ath12k_dp_rx_tid *rx_tid,
817 					     enum hal_encrypt_type encrypt_type)
818 {
819 	struct ath12k_dp *dp = dp_pdev->dp;
820 	struct sk_buff *first_frag, *skb;
821 	u64 last_pn;
822 	u64 cur_pn;
823 
824 	first_frag = skb_peek(&rx_tid->rx_frags);
825 
826 	if (encrypt_type != HAL_ENCRYPT_TYPE_CCMP_128 &&
827 	    encrypt_type != HAL_ENCRYPT_TYPE_CCMP_256 &&
828 	    encrypt_type != HAL_ENCRYPT_TYPE_GCMP_128 &&
829 	    encrypt_type != HAL_ENCRYPT_TYPE_AES_GCMP_256)
830 		return true;
831 
832 	last_pn = ath12k_dp_rx_h_get_pn(dp, first_frag);
833 	skb_queue_walk(&rx_tid->rx_frags, skb) {
834 		if (skb == first_frag)
835 			continue;
836 
837 		cur_pn = ath12k_dp_rx_h_get_pn(dp, skb);
838 		if (cur_pn != last_pn + 1)
839 			return false;
840 		last_pn = cur_pn;
841 	}
842 	return true;
843 }
844 
ath12k_wifi7_dp_rx_h_defrag_reo_reinject(struct ath12k_dp * dp,struct ath12k_dp_rx_tid * rx_tid,struct sk_buff * defrag_skb)845 static int ath12k_wifi7_dp_rx_h_defrag_reo_reinject(struct ath12k_dp *dp,
846 						    struct ath12k_dp_rx_tid *rx_tid,
847 						    struct sk_buff *defrag_skb)
848 {
849 	struct ath12k_base *ab = dp->ab;
850 	struct ath12k_hal *hal = dp->hal;
851 	struct hal_rx_desc *rx_desc = (struct hal_rx_desc *)defrag_skb->data;
852 	struct hal_reo_entrance_ring *reo_ent_ring;
853 	struct hal_reo_dest_ring *reo_dest_ring;
854 	struct dp_link_desc_bank *link_desc_banks;
855 	struct hal_rx_msdu_link *msdu_link;
856 	struct hal_rx_msdu_details *msdu0;
857 	struct hal_srng *srng;
858 	dma_addr_t link_paddr, buf_paddr;
859 	u32 desc_bank, msdu_info, msdu_ext_info, mpdu_info;
860 	u32 cookie, hal_rx_desc_sz, dest_ring_info0, queue_addr_hi;
861 	int ret;
862 	struct ath12k_rx_desc_info *desc_info;
863 	enum hal_rx_buf_return_buf_manager idle_link_rbm = dp->idle_link_rbm;
864 	u8 dst_ind;
865 
866 	hal_rx_desc_sz = hal->hal_desc_sz;
867 	link_desc_banks = dp->link_desc_banks;
868 	reo_dest_ring = rx_tid->dst_ring_desc;
869 
870 	ath12k_wifi7_hal_rx_reo_ent_paddr_get(&reo_dest_ring->buf_addr_info,
871 					      &link_paddr, &cookie);
872 	desc_bank = u32_get_bits(cookie, DP_LINK_DESC_BANK_MASK);
873 
874 	msdu_link = (struct hal_rx_msdu_link *)(link_desc_banks[desc_bank].vaddr +
875 			(link_paddr - link_desc_banks[desc_bank].paddr));
876 	msdu0 = &msdu_link->msdu_link[0];
877 	msdu_ext_info = le32_to_cpu(msdu0->rx_msdu_ext_info.info0);
878 	dst_ind = u32_get_bits(msdu_ext_info, RX_MSDU_EXT_DESC_INFO0_REO_DEST_IND);
879 
880 	memset(msdu0, 0, sizeof(*msdu0));
881 
882 	msdu_info = u32_encode_bits(1, RX_MSDU_DESC_INFO0_FIRST_MSDU_IN_MPDU) |
883 		    u32_encode_bits(1, RX_MSDU_DESC_INFO0_LAST_MSDU_IN_MPDU) |
884 		    u32_encode_bits(0, RX_MSDU_DESC_INFO0_MSDU_CONTINUATION) |
885 		    u32_encode_bits(defrag_skb->len - hal_rx_desc_sz,
886 				    RX_MSDU_DESC_INFO0_MSDU_LENGTH) |
887 		    u32_encode_bits(1, RX_MSDU_DESC_INFO0_VALID_SA) |
888 		    u32_encode_bits(1, RX_MSDU_DESC_INFO0_VALID_DA);
889 	msdu0->rx_msdu_info.info0 = cpu_to_le32(msdu_info);
890 	msdu0->rx_msdu_ext_info.info0 = cpu_to_le32(msdu_ext_info);
891 
892 	/* change msdu len in hal rx desc */
893 	ath12k_dp_rxdesc_set_msdu_len(hal, rx_desc, defrag_skb->len - hal_rx_desc_sz);
894 
895 	buf_paddr = dma_map_single(dp->dev, defrag_skb->data,
896 				   defrag_skb->len + skb_tailroom(defrag_skb),
897 				   DMA_TO_DEVICE);
898 	if (dma_mapping_error(dp->dev, buf_paddr))
899 		return -ENOMEM;
900 
901 	spin_lock_bh(&dp->rx_desc_lock);
902 	desc_info = list_first_entry_or_null(&dp->rx_desc_free_list,
903 					     struct ath12k_rx_desc_info,
904 					     list);
905 	if (!desc_info) {
906 		spin_unlock_bh(&dp->rx_desc_lock);
907 		ath12k_warn(ab, "failed to find rx desc for reinject\n");
908 		ret = -ENOMEM;
909 		goto err_unmap_dma;
910 	}
911 
912 	desc_info->skb = defrag_skb;
913 	desc_info->in_use = true;
914 
915 	list_del(&desc_info->list);
916 	spin_unlock_bh(&dp->rx_desc_lock);
917 
918 	ATH12K_SKB_RXCB(defrag_skb)->paddr = buf_paddr;
919 
920 	ath12k_wifi7_hal_rx_buf_addr_info_set(&msdu0->buf_addr_info, buf_paddr,
921 					      desc_info->cookie,
922 					      HAL_RX_BUF_RBM_SW3_BM);
923 
924 	/* Fill mpdu details into reo entrance ring */
925 	srng = &hal->srng_list[dp->reo_reinject_ring.ring_id];
926 
927 	spin_lock_bh(&srng->lock);
928 	ath12k_hal_srng_access_begin(ab, srng);
929 
930 	reo_ent_ring = ath12k_hal_srng_src_get_next_entry(ab, srng);
931 	if (!reo_ent_ring) {
932 		ath12k_hal_srng_access_end(ab, srng);
933 		spin_unlock_bh(&srng->lock);
934 		ret = -ENOSPC;
935 		goto err_free_desc;
936 	}
937 	memset(reo_ent_ring, 0, sizeof(*reo_ent_ring));
938 
939 	ath12k_wifi7_hal_rx_buf_addr_info_set(&reo_ent_ring->buf_addr_info, link_paddr,
940 					      cookie, idle_link_rbm);
941 
942 	mpdu_info = u32_encode_bits(1, RX_MPDU_DESC_INFO0_MSDU_COUNT) |
943 		    u32_encode_bits(0, RX_MPDU_DESC_INFO0_FRAG_FLAG) |
944 		    u32_encode_bits(1, RX_MPDU_DESC_INFO0_RAW_MPDU) |
945 		    u32_encode_bits(1, RX_MPDU_DESC_INFO0_VALID_PN) |
946 		    u32_encode_bits(rx_tid->tid, RX_MPDU_DESC_INFO0_TID);
947 
948 	reo_ent_ring->rx_mpdu_info.info0 = cpu_to_le32(mpdu_info);
949 	reo_ent_ring->rx_mpdu_info.peer_meta_data =
950 		reo_dest_ring->rx_mpdu_info.peer_meta_data;
951 
952 	if (dp->hw_params->reoq_lut_support) {
953 		reo_ent_ring->queue_addr_lo = reo_dest_ring->rx_mpdu_info.peer_meta_data;
954 		queue_addr_hi = 0;
955 	} else {
956 		reo_ent_ring->queue_addr_lo =
957 				cpu_to_le32(lower_32_bits(rx_tid->qbuf.paddr_aligned));
958 		queue_addr_hi = upper_32_bits(rx_tid->qbuf.paddr_aligned);
959 	}
960 
961 	reo_ent_ring->info0 = le32_encode_bits(queue_addr_hi,
962 					       HAL_REO_ENTR_RING_INFO0_QUEUE_ADDR_HI) |
963 			      le32_encode_bits(dst_ind,
964 					       HAL_REO_ENTR_RING_INFO0_DEST_IND);
965 
966 	reo_ent_ring->info1 = le32_encode_bits(rx_tid->cur_sn,
967 					       HAL_REO_ENTR_RING_INFO1_MPDU_SEQ_NUM);
968 	dest_ring_info0 = le32_get_bits(reo_dest_ring->info0,
969 					HAL_REO_DEST_RING_INFO0_SRC_LINK_ID);
970 	reo_ent_ring->info2 =
971 		cpu_to_le32(u32_get_bits(dest_ring_info0,
972 					 HAL_REO_ENTR_RING_INFO2_SRC_LINK_ID));
973 
974 	ath12k_hal_srng_access_end(ab, srng);
975 	spin_unlock_bh(&srng->lock);
976 
977 	return 0;
978 
979 err_free_desc:
980 	spin_lock_bh(&dp->rx_desc_lock);
981 	desc_info->in_use = false;
982 	desc_info->skb = NULL;
983 	list_add_tail(&desc_info->list, &dp->rx_desc_free_list);
984 	spin_unlock_bh(&dp->rx_desc_lock);
985 err_unmap_dma:
986 	dma_unmap_single(dp->dev, buf_paddr, defrag_skb->len + skb_tailroom(defrag_skb),
987 			 DMA_TO_DEVICE);
988 	return ret;
989 }
990 
ath12k_wifi7_dp_rx_h_verify_tkip_mic(struct ath12k_pdev_dp * dp_pdev,struct ath12k_dp_peer * peer,enum hal_encrypt_type enctype,struct sk_buff * msdu,struct hal_rx_desc_data * rx_info)991 static int ath12k_wifi7_dp_rx_h_verify_tkip_mic(struct ath12k_pdev_dp *dp_pdev,
992 						struct ath12k_dp_peer *peer,
993 						enum hal_encrypt_type enctype,
994 						struct sk_buff *msdu,
995 						struct hal_rx_desc_data *rx_info)
996 {
997 	struct ath12k_dp *dp = dp_pdev->dp;
998 	struct ath12k_hal *hal = dp->hal;
999 	struct hal_rx_desc *rx_desc = (struct hal_rx_desc *)msdu->data;
1000 	struct ieee80211_rx_status *rxs = IEEE80211_SKB_RXCB(msdu);
1001 	struct ieee80211_key_conf *key_conf;
1002 	struct ieee80211_hdr *hdr;
1003 	u8 mic[IEEE80211_CCMP_MIC_LEN];
1004 	int head_len, tail_len;
1005 	size_t data_len;
1006 	u32 hdr_len, hal_rx_desc_sz = hal->hal_desc_sz;
1007 	u8 *key, *data;
1008 	u8 key_idx;
1009 
1010 	if (enctype != HAL_ENCRYPT_TYPE_TKIP_MIC)
1011 		return 0;
1012 
1013 	rx_info->addr2_present = false;
1014 	rx_info->rx_status = rxs;
1015 
1016 	hdr = (struct ieee80211_hdr *)(msdu->data + hal_rx_desc_sz);
1017 	hdr_len = ieee80211_hdrlen(hdr->frame_control);
1018 	head_len = hdr_len + hal_rx_desc_sz + IEEE80211_TKIP_IV_LEN;
1019 	tail_len = IEEE80211_CCMP_MIC_LEN + IEEE80211_TKIP_ICV_LEN + FCS_LEN;
1020 
1021 	if (!is_multicast_ether_addr(hdr->addr1))
1022 		key_idx = peer->ucast_keyidx;
1023 	else
1024 		key_idx = peer->mcast_keyidx;
1025 
1026 	key_conf = peer->keys[key_idx];
1027 
1028 	data = msdu->data + head_len;
1029 	data_len = msdu->len - head_len - tail_len;
1030 	key = &key_conf->key[NL80211_TKIP_DATA_OFFSET_RX_MIC_KEY];
1031 
1032 	michael_mic(key, hdr, data, data_len, mic);
1033 	if (memcmp(mic, data + data_len, IEEE80211_CCMP_MIC_LEN))
1034 		goto mic_fail;
1035 
1036 	return 0;
1037 
1038 mic_fail:
1039 	(ATH12K_SKB_RXCB(msdu))->is_first_msdu = true;
1040 	(ATH12K_SKB_RXCB(msdu))->is_last_msdu = true;
1041 
1042 	ath12k_dp_extract_rx_desc_data(hal, rx_info, rx_desc, rx_desc);
1043 
1044 	rxs->flag |= RX_FLAG_MMIC_ERROR | RX_FLAG_MMIC_STRIPPED |
1045 		    RX_FLAG_IV_STRIPPED | RX_FLAG_DECRYPTED;
1046 	skb_pull(msdu, hal_rx_desc_sz);
1047 
1048 	if (unlikely(!ath12k_dp_rx_check_nwifi_hdr_len_valid(dp, msdu,
1049 							     rx_info))) {
1050 		dev_kfree_skb_any(msdu);
1051 		return -EINVAL;
1052 	}
1053 
1054 	ath12k_dp_rx_h_ppdu(dp_pdev, rx_info);
1055 	ath12k_dp_rx_h_undecap(dp_pdev, msdu, HAL_ENCRYPT_TYPE_TKIP_MIC, true,
1056 			       rx_info, NULL);
1057 	ieee80211_rx(ath12k_pdev_dp_to_hw(dp_pdev), msdu);
1058 	return -EINVAL;
1059 }
1060 
ath12k_wifi7_dp_rx_h_defrag(struct ath12k_pdev_dp * dp_pdev,struct ath12k_dp_peer * peer,struct ath12k_dp_rx_tid * rx_tid,struct sk_buff ** defrag_skb,enum hal_encrypt_type enctype,struct hal_rx_desc_data * rx_info)1061 static int ath12k_wifi7_dp_rx_h_defrag(struct ath12k_pdev_dp *dp_pdev,
1062 				       struct ath12k_dp_peer *peer,
1063 				       struct ath12k_dp_rx_tid *rx_tid,
1064 				       struct sk_buff **defrag_skb,
1065 				       enum hal_encrypt_type enctype,
1066 				       struct hal_rx_desc_data *rx_info)
1067 {
1068 	struct ath12k_dp *dp = dp_pdev->dp;
1069 	struct ath12k_base *ab = dp->ab;
1070 	struct sk_buff *skb, *first_frag, *last_frag;
1071 	struct ieee80211_hdr *hdr;
1072 	bool is_decrypted = false;
1073 	int msdu_len = 0;
1074 	int extra_space;
1075 	u32 flags, hal_rx_desc_sz = ab->hal.hal_desc_sz;
1076 
1077 	first_frag = skb_peek(&rx_tid->rx_frags);
1078 	last_frag = skb_peek_tail(&rx_tid->rx_frags);
1079 
1080 	skb_queue_walk(&rx_tid->rx_frags, skb) {
1081 		flags = 0;
1082 		hdr = (struct ieee80211_hdr *)(skb->data + hal_rx_desc_sz);
1083 
1084 		if (enctype != HAL_ENCRYPT_TYPE_OPEN)
1085 			is_decrypted = rx_info->is_decrypted;
1086 
1087 		if (is_decrypted) {
1088 			if (skb != first_frag)
1089 				flags |= RX_FLAG_IV_STRIPPED;
1090 			if (skb != last_frag)
1091 				flags |= RX_FLAG_ICV_STRIPPED |
1092 					RX_FLAG_MIC_STRIPPED;
1093 		}
1094 
1095 		/* RX fragments are always raw packets */
1096 		if (skb != last_frag)
1097 			skb_trim(skb, skb->len - FCS_LEN);
1098 		ath12k_dp_rx_h_undecap_frag(dp_pdev, skb, enctype, flags);
1099 
1100 		if (skb != first_frag)
1101 			skb_pull(skb, hal_rx_desc_sz +
1102 				      ieee80211_hdrlen(hdr->frame_control));
1103 		msdu_len += skb->len;
1104 	}
1105 
1106 	extra_space = msdu_len - (DP_RX_BUFFER_SIZE + skb_tailroom(first_frag));
1107 	if (extra_space > 0 &&
1108 	    (pskb_expand_head(first_frag, 0, extra_space, GFP_ATOMIC) < 0))
1109 		return -ENOMEM;
1110 
1111 	__skb_unlink(first_frag, &rx_tid->rx_frags);
1112 	while ((skb = __skb_dequeue(&rx_tid->rx_frags))) {
1113 		skb_put_data(first_frag, skb->data, skb->len);
1114 		dev_kfree_skb_any(skb);
1115 	}
1116 
1117 	hdr = (struct ieee80211_hdr *)(first_frag->data + hal_rx_desc_sz);
1118 	hdr->frame_control &= ~__cpu_to_le16(IEEE80211_FCTL_MOREFRAGS);
1119 	ATH12K_SKB_RXCB(first_frag)->is_frag = 1;
1120 
1121 	if (ath12k_wifi7_dp_rx_h_verify_tkip_mic(dp_pdev, peer, enctype, first_frag,
1122 						 rx_info))
1123 		first_frag = NULL;
1124 
1125 	*defrag_skb = first_frag;
1126 	return 0;
1127 }
1128 
ath12k_wifi7_dp_rx_frags_cleanup(struct ath12k_dp_rx_tid * rx_tid,bool rel_link_desc)1129 void ath12k_wifi7_dp_rx_frags_cleanup(struct ath12k_dp_rx_tid *rx_tid,
1130 				      bool rel_link_desc)
1131 {
1132 	enum hal_wbm_rel_bm_act act = HAL_WBM_REL_BM_ACT_PUT_IN_IDLE;
1133 	struct ath12k_buffer_addr *buf_addr_info;
1134 	struct ath12k_dp *dp = rx_tid->dp;
1135 
1136 	lockdep_assert_held(&dp->dp_lock);
1137 
1138 	if (rx_tid->dst_ring_desc) {
1139 		if (rel_link_desc) {
1140 			buf_addr_info = &rx_tid->dst_ring_desc->buf_addr_info;
1141 			ath12k_wifi7_dp_rx_link_desc_return(dp, buf_addr_info, act);
1142 		}
1143 		kfree(rx_tid->dst_ring_desc);
1144 		rx_tid->dst_ring_desc = NULL;
1145 	}
1146 
1147 	rx_tid->cur_sn = 0;
1148 	rx_tid->last_frag_no = 0;
1149 	rx_tid->rx_frag_bitmap = 0;
1150 	__skb_queue_purge(&rx_tid->rx_frags);
1151 }
1152 
ath12k_wifi7_dp_rx_frag_h_mpdu(struct ath12k_pdev_dp * dp_pdev,struct sk_buff * msdu,struct hal_reo_dest_ring * ring_desc,struct hal_rx_desc_data * rx_info)1153 static int ath12k_wifi7_dp_rx_frag_h_mpdu(struct ath12k_pdev_dp *dp_pdev,
1154 					  struct sk_buff *msdu,
1155 					  struct hal_reo_dest_ring *ring_desc,
1156 					  struct hal_rx_desc_data *rx_info)
1157 {
1158 	struct ath12k_dp *dp = dp_pdev->dp;
1159 	struct ath12k_hal *hal = dp->hal;
1160 	struct ath12k_base *ab = dp->ab;
1161 	struct ath12k_dp_peer *peer;
1162 	struct ath12k_dp_rx_tid *rx_tid;
1163 	struct sk_buff *defrag_skb = NULL;
1164 	u32 peer_id = rx_info->peer_id;
1165 	u16 seqno, frag_no;
1166 	u8 tid = rx_info->tid;
1167 	int ret = 0;
1168 	bool more_frags;
1169 	enum hal_encrypt_type enctype = rx_info->enctype;
1170 
1171 	frag_no = ath12k_dp_rx_h_frag_no(hal, msdu);
1172 	more_frags = ath12k_dp_rx_h_more_frags(hal, msdu);
1173 	seqno = rx_info->seq_no;
1174 
1175 	if (!rx_info->seq_ctl_valid || !rx_info->fc_valid ||
1176 	    tid > IEEE80211_NUM_TIDS)
1177 		return -EINVAL;
1178 
1179 	/* received unfragmented packet in reo
1180 	 * exception ring, this shouldn't happen
1181 	 * as these packets typically come from
1182 	 * reo2sw srngs.
1183 	 */
1184 	if (WARN_ON_ONCE(!frag_no && !more_frags))
1185 		return -EINVAL;
1186 
1187 	spin_lock_bh(&dp->dp_lock);
1188 	peer = ath12k_dp_peer_find_by_peerid(dp_pdev, peer_id);
1189 	if (!peer) {
1190 		ath12k_warn(ab, "failed to find the peer to de-fragment received fragment peer_id %d\n",
1191 			    peer_id);
1192 		ret = -ENOENT;
1193 		goto out_unlock;
1194 	}
1195 
1196 	if (!peer->dp_setup_done) {
1197 		ath12k_warn(ab, "The peer %pM [%d] has uninitialized datapath\n",
1198 			    peer->addr, peer_id);
1199 		ret = -ENOENT;
1200 		goto out_unlock;
1201 	}
1202 
1203 	rx_tid = &peer->rx_tid[tid];
1204 
1205 	if ((!skb_queue_empty(&rx_tid->rx_frags) && seqno != rx_tid->cur_sn) ||
1206 	    skb_queue_empty(&rx_tid->rx_frags)) {
1207 		/* Flush stored fragments and start a new sequence */
1208 		ath12k_wifi7_dp_rx_frags_cleanup(rx_tid, true);
1209 		rx_tid->cur_sn = seqno;
1210 	}
1211 
1212 	if (rx_tid->rx_frag_bitmap & BIT(frag_no)) {
1213 		/* Fragment already present */
1214 		ret = -EINVAL;
1215 		goto out_unlock;
1216 	}
1217 
1218 	if ((!rx_tid->rx_frag_bitmap || frag_no > __fls(rx_tid->rx_frag_bitmap)))
1219 		__skb_queue_tail(&rx_tid->rx_frags, msdu);
1220 	else
1221 		ath12k_dp_rx_h_sort_frags(hal, &rx_tid->rx_frags, msdu);
1222 
1223 	rx_tid->rx_frag_bitmap |= BIT(frag_no);
1224 	if (!more_frags)
1225 		rx_tid->last_frag_no = frag_no;
1226 
1227 	if (frag_no == 0) {
1228 		rx_tid->dst_ring_desc = kmemdup(ring_desc,
1229 						sizeof(*rx_tid->dst_ring_desc),
1230 						GFP_ATOMIC);
1231 		if (!rx_tid->dst_ring_desc) {
1232 			ret = -ENOMEM;
1233 			goto out_unlock;
1234 		}
1235 	} else {
1236 		ath12k_wifi7_dp_rx_link_desc_return(dp, &ring_desc->buf_addr_info,
1237 						    HAL_WBM_REL_BM_ACT_PUT_IN_IDLE);
1238 	}
1239 
1240 	if (!rx_tid->last_frag_no ||
1241 	    rx_tid->rx_frag_bitmap != GENMASK(rx_tid->last_frag_no, 0)) {
1242 		mod_timer(&rx_tid->frag_timer, jiffies +
1243 					       ATH12K_DP_RX_FRAGMENT_TIMEOUT_MS);
1244 		goto out_unlock;
1245 	}
1246 
1247 	spin_unlock_bh(&dp->dp_lock);
1248 	timer_delete_sync(&rx_tid->frag_timer);
1249 	spin_lock_bh(&dp->dp_lock);
1250 
1251 	peer = ath12k_dp_peer_find_by_peerid(dp_pdev, peer_id);
1252 	if (!peer)
1253 		goto err_frags_cleanup;
1254 
1255 	if (!ath12k_wifi7_dp_rx_h_defrag_validate_incr_pn(dp_pdev, rx_tid, enctype))
1256 		goto err_frags_cleanup;
1257 
1258 	if (ath12k_wifi7_dp_rx_h_defrag(dp_pdev, peer, rx_tid, &defrag_skb,
1259 					enctype, rx_info))
1260 		goto err_frags_cleanup;
1261 
1262 	if (!defrag_skb)
1263 		goto err_frags_cleanup;
1264 
1265 	if (ath12k_wifi7_dp_rx_h_defrag_reo_reinject(dp, rx_tid, defrag_skb))
1266 		goto err_frags_cleanup;
1267 
1268 	ath12k_wifi7_dp_rx_frags_cleanup(rx_tid, false);
1269 	goto out_unlock;
1270 
1271 err_frags_cleanup:
1272 	dev_kfree_skb_any(defrag_skb);
1273 	ath12k_wifi7_dp_rx_frags_cleanup(rx_tid, true);
1274 out_unlock:
1275 	spin_unlock_bh(&dp->dp_lock);
1276 	return ret;
1277 }
1278 
1279 static int
ath12k_wifi7_dp_process_rx_err_buf(struct ath12k_pdev_dp * dp_pdev,struct hal_reo_dest_ring * desc,struct list_head * used_list,bool drop,u32 cookie)1280 ath12k_wifi7_dp_process_rx_err_buf(struct ath12k_pdev_dp *dp_pdev,
1281 				   struct hal_reo_dest_ring *desc,
1282 				   struct list_head *used_list,
1283 				   bool drop, u32 cookie)
1284 {
1285 	struct ath12k *ar = ath12k_pdev_dp_to_ar(dp_pdev);
1286 	struct ath12k_dp *dp = dp_pdev->dp;
1287 	struct ath12k_hal *hal = dp->hal;
1288 	struct sk_buff *msdu;
1289 	struct ath12k_skb_rxcb *rxcb;
1290 	struct hal_rx_desc_data rx_info;
1291 	struct hal_rx_desc *rx_desc;
1292 	u16 msdu_len;
1293 	u32 hal_rx_desc_sz = hal->hal_desc_sz;
1294 	struct ath12k_rx_desc_info *desc_info;
1295 	u64 desc_va;
1296 
1297 	desc_va = ((u64)le32_to_cpu(desc->buf_va_hi) << 32 |
1298 		   le32_to_cpu(desc->buf_va_lo));
1299 	desc_info = (struct ath12k_rx_desc_info *)((unsigned long)desc_va);
1300 
1301 	/* retry manual desc retrieval */
1302 	if (!desc_info) {
1303 		desc_info = ath12k_dp_get_rx_desc(dp, cookie);
1304 		if (!desc_info) {
1305 			ath12k_warn(dp->ab,
1306 				    "Invalid cookie in DP rx error descriptor retrieval: 0x%x\n",
1307 				    cookie);
1308 			return -EINVAL;
1309 		}
1310 	}
1311 
1312 	if (desc_info->magic != ATH12K_DP_RX_DESC_MAGIC)
1313 		ath12k_warn(dp->ab, "RX Exception, Check HW CC implementation");
1314 
1315 	msdu = desc_info->skb;
1316 	desc_info->skb = NULL;
1317 
1318 	list_add_tail(&desc_info->list, used_list);
1319 
1320 	rxcb = ATH12K_SKB_RXCB(msdu);
1321 	dma_unmap_single(dp->dev, rxcb->paddr,
1322 			 msdu->len + skb_tailroom(msdu),
1323 			 DMA_FROM_DEVICE);
1324 
1325 	if (drop) {
1326 		dev_kfree_skb_any(msdu);
1327 		return 0;
1328 	}
1329 
1330 	rcu_read_lock();
1331 	if (!rcu_dereference(ar->ab->pdevs_active[ar->pdev_idx])) {
1332 		dev_kfree_skb_any(msdu);
1333 		goto exit;
1334 	}
1335 
1336 	if (test_bit(ATH12K_FLAG_CAC_RUNNING, &ar->dev_flags)) {
1337 		dev_kfree_skb_any(msdu);
1338 		goto exit;
1339 	}
1340 
1341 	rx_desc = (struct hal_rx_desc *)msdu->data;
1342 	ath12k_dp_extract_rx_desc_data(hal, &rx_info, rx_desc, rx_desc);
1343 
1344 	msdu_len = rx_info.msdu_len;
1345 	if ((msdu_len + hal_rx_desc_sz) > DP_RX_BUFFER_SIZE) {
1346 		ath12k_warn(dp->ab, "invalid msdu leng %u", msdu_len);
1347 		ath12k_dbg_dump(dp->ab, ATH12K_DBG_DATA, NULL, "", rx_desc,
1348 				sizeof(*rx_desc));
1349 		dev_kfree_skb_any(msdu);
1350 		goto exit;
1351 	}
1352 
1353 	skb_put(msdu, hal_rx_desc_sz + msdu_len);
1354 
1355 	if (ath12k_wifi7_dp_rx_frag_h_mpdu(dp_pdev, msdu, desc, &rx_info)) {
1356 		dev_kfree_skb_any(msdu);
1357 		ath12k_wifi7_dp_rx_link_desc_return(dp, &desc->buf_addr_info,
1358 						    HAL_WBM_REL_BM_ACT_PUT_IN_IDLE);
1359 	}
1360 exit:
1361 	rcu_read_unlock();
1362 	return 0;
1363 }
1364 
ath12k_dp_h_msdu_buffer_type(struct ath12k_dp * dp,struct list_head * list,struct hal_reo_dest_ring * desc)1365 static int ath12k_dp_h_msdu_buffer_type(struct ath12k_dp *dp,
1366 					struct list_head *list,
1367 					struct hal_reo_dest_ring *desc)
1368 {
1369 	struct ath12k_rx_desc_info *desc_info;
1370 	struct ath12k_skb_rxcb *rxcb;
1371 	struct sk_buff *msdu;
1372 	u64 desc_va;
1373 
1374 	dp->device_stats.reo_excep_msdu_buf_type++;
1375 
1376 	desc_va = (u64)le32_to_cpu(desc->buf_va_hi) << 32 |
1377 		  le32_to_cpu(desc->buf_va_lo);
1378 	desc_info = (struct ath12k_rx_desc_info *)(uintptr_t)desc_va;
1379 	if (!desc_info) {
1380 		u32 cookie;
1381 
1382 		cookie = le32_get_bits(desc->buf_addr_info.info1,
1383 				       BUFFER_ADDR_INFO1_SW_COOKIE);
1384 		desc_info = ath12k_dp_get_rx_desc(dp, cookie);
1385 		if (!desc_info) {
1386 			ath12k_warn(dp->ab, "Invalid cookie in manual descriptor retrieval: 0x%x\n",
1387 				    cookie);
1388 			return -EINVAL;
1389 		}
1390 	}
1391 
1392 	if (desc_info->magic != ATH12K_DP_RX_DESC_MAGIC) {
1393 		ath12k_warn(dp->ab, "rx exception, magic check failed with value: %u\n",
1394 			    desc_info->magic);
1395 		return -EINVAL;
1396 	}
1397 
1398 	msdu = desc_info->skb;
1399 	desc_info->skb = NULL;
1400 	list_add_tail(&desc_info->list, list);
1401 	rxcb = ATH12K_SKB_RXCB(msdu);
1402 	dma_unmap_single(dp->dev, rxcb->paddr, msdu->len + skb_tailroom(msdu),
1403 			 DMA_FROM_DEVICE);
1404 	dev_kfree_skb_any(msdu);
1405 
1406 	return 0;
1407 }
1408 
ath12k_wifi7_dp_rx_process_err(struct ath12k_dp * dp,struct napi_struct * napi,int budget)1409 int ath12k_wifi7_dp_rx_process_err(struct ath12k_dp *dp, struct napi_struct *napi,
1410 				   int budget)
1411 {
1412 	struct ath12k_base *ab = dp->ab;
1413 	struct ath12k_hal *hal = dp->hal;
1414 	struct ath12k_hw_group *ag = dp->ag;
1415 	struct ath12k_dp_hw_group *dp_hw_grp = &ag->dp_hw_grp;
1416 	struct ath12k_dp *partner_dp;
1417 	struct list_head rx_desc_used_list[ATH12K_MAX_DEVICES];
1418 	u32 msdu_cookies[HAL_NUM_RX_MSDUS_PER_LINK_DESC];
1419 	int num_buffs_reaped[ATH12K_MAX_DEVICES] = {};
1420 	struct dp_link_desc_bank *link_desc_banks;
1421 	enum hal_rx_buf_return_buf_manager rbm;
1422 	struct hal_rx_msdu_link *link_desc_va;
1423 	int tot_n_bufs_reaped, quota, ret, i;
1424 	struct hal_reo_dest_ring *reo_desc;
1425 	struct dp_rxdma_ring *rx_ring;
1426 	struct dp_srng *reo_except;
1427 	struct ath12k_hw_link *hw_links = ag->hw_links;
1428 	struct ath12k_pdev_dp *dp_pdev;
1429 	u8 hw_link_id, device_id;
1430 	u32 desc_bank, num_msdus;
1431 	struct hal_srng *srng;
1432 	dma_addr_t paddr;
1433 	bool is_frag;
1434 	bool drop;
1435 	int pdev_idx;
1436 	struct list_head *used_list;
1437 	enum hal_wbm_rel_bm_act act;
1438 
1439 	tot_n_bufs_reaped = 0;
1440 	quota = budget;
1441 
1442 	for (device_id = 0; device_id < ATH12K_MAX_DEVICES; device_id++)
1443 		INIT_LIST_HEAD(&rx_desc_used_list[device_id]);
1444 
1445 	reo_except = &dp->reo_except_ring;
1446 
1447 	srng = &hal->srng_list[reo_except->ring_id];
1448 
1449 	spin_lock_bh(&srng->lock);
1450 
1451 	ath12k_hal_srng_access_begin(ab, srng);
1452 
1453 	while (budget &&
1454 	       (reo_desc = ath12k_hal_srng_dst_get_next_entry(ab, srng))) {
1455 		drop = false;
1456 		dp->device_stats.err_ring_pkts++;
1457 
1458 		hw_link_id = le32_get_bits(reo_desc->info0,
1459 					   HAL_REO_DEST_RING_INFO0_SRC_LINK_ID);
1460 		device_id = hw_links[hw_link_id].device_id;
1461 		partner_dp = ath12k_dp_hw_grp_to_dp(dp_hw_grp, device_id);
1462 
1463 		/* Below case is added to handle data packet from un-associated clients.
1464 		 * As it is expected that AST lookup will fail for
1465 		 * un-associated station's data packets.
1466 		 */
1467 		if (le32_get_bits(reo_desc->info0, HAL_REO_DEST_RING_INFO0_BUFFER_TYPE) ==
1468 		    HAL_REO_DEST_RING_BUFFER_TYPE_MSDU) {
1469 			if (!ath12k_dp_h_msdu_buffer_type(partner_dp,
1470 							  &rx_desc_used_list[device_id],
1471 							  reo_desc)) {
1472 				num_buffs_reaped[device_id]++;
1473 				tot_n_bufs_reaped++;
1474 			}
1475 			goto next_desc;
1476 		}
1477 
1478 		ret = ath12k_wifi7_hal_desc_reo_parse_err(dp, reo_desc, &paddr,
1479 							  &desc_bank);
1480 		if (ret) {
1481 			ath12k_warn(ab, "failed to parse error reo desc %d\n",
1482 				    ret);
1483 			continue;
1484 		}
1485 
1486 		pdev_idx = ath12k_hw_mac_id_to_pdev_id(partner_dp->hw_params,
1487 						       hw_links[hw_link_id].pdev_idx);
1488 
1489 		link_desc_banks = partner_dp->link_desc_banks;
1490 		link_desc_va = link_desc_banks[desc_bank].vaddr +
1491 			       (paddr - link_desc_banks[desc_bank].paddr);
1492 		ath12k_wifi7_hal_rx_msdu_link_info_get(link_desc_va, &num_msdus,
1493 						       msdu_cookies, &rbm);
1494 		if (rbm != partner_dp->idle_link_rbm &&
1495 		    rbm != HAL_RX_BUF_RBM_SW3_BM &&
1496 		    rbm != partner_dp->hal->hal_params->rx_buf_rbm) {
1497 			act = HAL_WBM_REL_BM_ACT_REL_MSDU;
1498 			dp->device_stats.invalid_rbm++;
1499 			ath12k_warn(ab, "invalid return buffer manager %d\n", rbm);
1500 			ath12k_wifi7_dp_rx_link_desc_return(partner_dp,
1501 							    &reo_desc->buf_addr_info,
1502 							    act);
1503 			continue;
1504 		}
1505 
1506 		is_frag = !!(le32_to_cpu(reo_desc->rx_mpdu_info.info0) &
1507 			     RX_MPDU_DESC_INFO0_FRAG_FLAG);
1508 
1509 		/* Process only rx fragments with one msdu per link desc below, and drop
1510 		 * msdu's indicated due to error reasons.
1511 		 * Dynamic fragmentation not supported in Multi-link client, so drop the
1512 		 * partner device buffers.
1513 		 */
1514 		if (!is_frag || num_msdus > 1 ||
1515 		    partner_dp->device_id != dp->device_id) {
1516 			drop = true;
1517 			act = HAL_WBM_REL_BM_ACT_PUT_IN_IDLE;
1518 
1519 			/* Return the link desc back to wbm idle list */
1520 			ath12k_wifi7_dp_rx_link_desc_return(partner_dp,
1521 							    &reo_desc->buf_addr_info,
1522 							    act);
1523 		}
1524 
1525 		rcu_read_lock();
1526 
1527 		dp_pdev = ath12k_dp_to_pdev_dp(dp, pdev_idx);
1528 		if (!dp_pdev) {
1529 			rcu_read_unlock();
1530 			continue;
1531 		}
1532 
1533 		for (i = 0; i < num_msdus; i++) {
1534 			used_list = &rx_desc_used_list[device_id];
1535 
1536 			if (!ath12k_wifi7_dp_process_rx_err_buf(dp_pdev, reo_desc,
1537 								used_list,
1538 								drop,
1539 								msdu_cookies[i])) {
1540 				num_buffs_reaped[device_id]++;
1541 				tot_n_bufs_reaped++;
1542 			}
1543 		}
1544 
1545 		rcu_read_unlock();
1546 
1547 next_desc:
1548 		if (tot_n_bufs_reaped >= quota) {
1549 			tot_n_bufs_reaped = quota;
1550 			goto exit;
1551 		}
1552 
1553 		budget = quota - tot_n_bufs_reaped;
1554 	}
1555 
1556 exit:
1557 	ath12k_hal_srng_access_end(ab, srng);
1558 
1559 	spin_unlock_bh(&srng->lock);
1560 
1561 	for (device_id = 0; device_id < ATH12K_MAX_DEVICES; device_id++) {
1562 		if (!num_buffs_reaped[device_id])
1563 			continue;
1564 
1565 		partner_dp = ath12k_dp_hw_grp_to_dp(dp_hw_grp, device_id);
1566 		rx_ring = &partner_dp->rx_refill_buf_ring;
1567 
1568 		ath12k_dp_rx_bufs_replenish(partner_dp, rx_ring,
1569 					    &rx_desc_used_list[device_id],
1570 					    num_buffs_reaped[device_id]);
1571 	}
1572 
1573 	return tot_n_bufs_reaped;
1574 }
1575 
1576 static void
ath12k_wifi7_dp_rx_null_q_desc_sg_drop(struct ath12k_dp * dp,int msdu_len,struct sk_buff_head * msdu_list)1577 ath12k_wifi7_dp_rx_null_q_desc_sg_drop(struct ath12k_dp *dp, int msdu_len,
1578 				       struct sk_buff_head *msdu_list)
1579 {
1580 	struct sk_buff *skb, *tmp;
1581 	struct ath12k_skb_rxcb *rxcb;
1582 	int n_buffs;
1583 
1584 	n_buffs = DIV_ROUND_UP(msdu_len,
1585 			       (DP_RX_BUFFER_SIZE - dp->ab->hal.hal_desc_sz));
1586 
1587 	skb_queue_walk_safe(msdu_list, skb, tmp) {
1588 		rxcb = ATH12K_SKB_RXCB(skb);
1589 		if (rxcb->err_rel_src == HAL_WBM_REL_SRC_MODULE_REO &&
1590 		    rxcb->err_code == HAL_REO_DEST_RING_ERROR_CODE_DESC_ADDR_ZERO) {
1591 			if (!n_buffs)
1592 				break;
1593 			__skb_unlink(skb, msdu_list);
1594 			dev_kfree_skb_any(skb);
1595 			n_buffs--;
1596 		}
1597 	}
1598 }
1599 
ath12k_wifi7_dp_rx_h_null_q_desc(struct ath12k_pdev_dp * dp_pdev,struct sk_buff * msdu,struct hal_rx_desc_data * rx_info,struct sk_buff_head * msdu_list)1600 static int ath12k_wifi7_dp_rx_h_null_q_desc(struct ath12k_pdev_dp *dp_pdev,
1601 					    struct sk_buff *msdu,
1602 					    struct hal_rx_desc_data *rx_info,
1603 					    struct sk_buff_head *msdu_list)
1604 {
1605 	struct ath12k_dp *dp = dp_pdev->dp;
1606 	struct ath12k_base *ab = dp->ab;
1607 	u16 msdu_len = rx_info->msdu_len;
1608 	u8 l3pad_bytes = rx_info->l3_pad_bytes;
1609 	struct ath12k_skb_rxcb *rxcb = ATH12K_SKB_RXCB(msdu);
1610 	u32 hal_rx_desc_sz = dp->ab->hal.hal_desc_sz;
1611 	int ret;
1612 
1613 	if (!rxcb->is_frag && ((msdu_len + hal_rx_desc_sz) > DP_RX_BUFFER_SIZE)) {
1614 		/* First buffer will be freed by the caller, so deduct it's length */
1615 		msdu_len = msdu_len - (DP_RX_BUFFER_SIZE - hal_rx_desc_sz);
1616 		ath12k_wifi7_dp_rx_null_q_desc_sg_drop(dp, msdu_len, msdu_list);
1617 		return -EINVAL;
1618 	}
1619 
1620 	/* Even after cleaning up the sg buffers in the msdu list with above check
1621 	 * any msdu received with continuation flag needs to be dropped as invalid.
1622 	 * This protects against some random err frame with continuation flag.
1623 	 */
1624 	if (rxcb->is_continuation)
1625 		return -EINVAL;
1626 
1627 	if (!rx_info->msdu_done) {
1628 		ath12k_warn(ab,
1629 			    "msdu_done bit not set in null_q_des processing\n");
1630 		__skb_queue_purge(msdu_list);
1631 		return -EIO;
1632 	}
1633 
1634 	/* Handle NULL queue descriptor violations arising out a missing
1635 	 * REO queue for a given peer or a given TID. This typically
1636 	 * may happen if a packet is received on a QOS enabled TID before the
1637 	 * ADDBA negotiation for that TID, when the TID queue is setup. Or
1638 	 * it may also happen for MC/BC frames if they are not routed to the
1639 	 * non-QOS TID queue, in the absence of any other default TID queue.
1640 	 * This error can show up both in a REO destination or WBM release ring.
1641 	 */
1642 
1643 	if (rxcb->is_frag) {
1644 		skb_pull(msdu, hal_rx_desc_sz);
1645 	} else {
1646 		if ((hal_rx_desc_sz + l3pad_bytes + msdu_len) > DP_RX_BUFFER_SIZE)
1647 			return -EINVAL;
1648 
1649 		skb_put(msdu, hal_rx_desc_sz + l3pad_bytes + msdu_len);
1650 		skb_pull(msdu, hal_rx_desc_sz + l3pad_bytes);
1651 	}
1652 	if (unlikely(!ath12k_dp_rx_check_nwifi_hdr_len_valid(dp, msdu, rx_info)))
1653 		return -EINVAL;
1654 
1655 	ath12k_dp_rx_h_ppdu(dp_pdev, rx_info);
1656 	ret = ath12k_wifi7_dp_rx_h_mpdu(dp_pdev, msdu, rx_info);
1657 	if (ret)
1658 		return ret;
1659 
1660 	rxcb->tid = rx_info->tid;
1661 
1662 	/* Please note that caller will having the access to msdu and completing
1663 	 * rx with mac80211. Need not worry about cleaning up amsdu_list.
1664 	 */
1665 
1666 	return 0;
1667 }
1668 
ath12k_wifi7_dp_rx_h_tkip_mic_err(struct ath12k_pdev_dp * dp_pdev,struct sk_buff * msdu,struct hal_rx_desc_data * rx_info)1669 static bool ath12k_wifi7_dp_rx_h_tkip_mic_err(struct ath12k_pdev_dp *dp_pdev,
1670 					      struct sk_buff *msdu,
1671 					      struct hal_rx_desc_data *rx_info)
1672 {
1673 	struct ath12k_dp *dp = dp_pdev->dp;
1674 	struct ath12k_base *ab = dp->ab;
1675 	u16 msdu_len = rx_info->msdu_len;
1676 	struct hal_rx_desc *desc = (struct hal_rx_desc *)msdu->data;
1677 	u8 l3pad_bytes = rx_info->l3_pad_bytes;
1678 	struct ath12k_skb_rxcb *rxcb = ATH12K_SKB_RXCB(msdu);
1679 	u32 hal_rx_desc_sz = ab->hal.hal_desc_sz;
1680 
1681 	rxcb->is_first_msdu = rx_info->is_first_msdu;
1682 	rxcb->is_last_msdu = rx_info->is_last_msdu;
1683 
1684 	if ((hal_rx_desc_sz + l3pad_bytes + msdu_len) > DP_RX_BUFFER_SIZE) {
1685 		ath12k_dbg(ab, ATH12K_DBG_DATA,
1686 			   "invalid msdu len in tkip mic err %u\n", msdu_len);
1687 		ath12k_dbg_dump(ab, ATH12K_DBG_DATA, NULL, "", desc,
1688 				sizeof(*desc));
1689 		return true;
1690 	}
1691 
1692 	skb_put(msdu, hal_rx_desc_sz + l3pad_bytes + msdu_len);
1693 	skb_pull(msdu, hal_rx_desc_sz + l3pad_bytes);
1694 
1695 	if (unlikely(!ath12k_dp_rx_check_nwifi_hdr_len_valid(dp, msdu, rx_info)))
1696 		return true;
1697 
1698 	ath12k_dp_rx_h_ppdu(dp_pdev, rx_info);
1699 
1700 	rx_info->rx_status->flag |= (RX_FLAG_MMIC_STRIPPED | RX_FLAG_MMIC_ERROR |
1701 				     RX_FLAG_DECRYPTED);
1702 
1703 	ath12k_dp_rx_h_undecap(dp_pdev, msdu, HAL_ENCRYPT_TYPE_TKIP_MIC, false,
1704 			       rx_info, NULL);
1705 	return false;
1706 }
1707 
ath12k_wifi7_dp_rx_h_unauth_wds_err(struct ath12k_pdev_dp * dp_pdev,struct sk_buff * msdu,struct hal_rx_desc_data * rx_info)1708 static bool ath12k_wifi7_dp_rx_h_unauth_wds_err(struct ath12k_pdev_dp *dp_pdev,
1709 						struct sk_buff *msdu,
1710 						struct hal_rx_desc_data *rx_info)
1711 {
1712 	struct ath12k_skb_rxcb *rxcb = ATH12K_SKB_RXCB(msdu);
1713 	struct ath12k_dp *dp = dp_pdev->dp;
1714 	u32 hdr_len, hal_rx_desc_sz = dp->ab->hal.hal_desc_sz;
1715 	u8 l3pad_bytes = rx_info->l3_pad_bytes;
1716 	struct ath12k_dp_rx_rfc1042_hdr *llc;
1717 	u16 msdu_len = rx_info->msdu_len;
1718 	struct ath12k_dp_peer *peer;
1719 	struct ieee80211_hdr *hdr;
1720 	int ret;
1721 
1722 	guard(rcu)();
1723 	peer = ath12k_dp_peer_find_by_peerid(dp_pdev, rxcb->peer_id);
1724 	if (!peer) {
1725 		ath12k_dbg(dp->ab, ATH12K_DBG_DATA,
1726 			   "failed to find the peer to process unauth wds err handling peer_id %d\n",
1727 			   rxcb->peer_id);
1728 		return true;
1729 	}
1730 
1731 	if ((hal_rx_desc_sz + l3pad_bytes + msdu_len) > DP_RX_BUFFER_SIZE)
1732 		return true;
1733 
1734 	skb_put(msdu, hal_rx_desc_sz + l3pad_bytes + msdu_len);
1735 	skb_pull(msdu, hal_rx_desc_sz + l3pad_bytes);
1736 
1737 	if (unlikely(!ath12k_dp_rx_check_nwifi_hdr_len_valid(dp, msdu,
1738 							     rx_info)))
1739 		return true;
1740 
1741 	ath12k_dp_rx_h_ppdu(dp_pdev, rx_info);
1742 
1743 	ret = ath12k_wifi7_dp_rx_h_mpdu(dp_pdev, msdu, rx_info);
1744 	if (ret)
1745 		return true;
1746 
1747 	rxcb->tid = rx_info->tid;
1748 
1749 	hdr = (struct ieee80211_hdr *)msdu->data;
1750 	hdr_len = ieee80211_hdrlen(hdr->frame_control);
1751 	llc = (struct ath12k_dp_rx_rfc1042_hdr *)(msdu->data + hdr_len);
1752 	if (llc->snap_type != cpu_to_be16(ETH_P_PAE))
1753 		return true;
1754 
1755 	return false;
1756 }
1757 
ath12k_wifi7_dp_rx_h_rxdma_err(struct ath12k_pdev_dp * dp_pdev,struct sk_buff * msdu,struct hal_rx_desc_data * rx_info)1758 static bool ath12k_wifi7_dp_rx_h_rxdma_err(struct ath12k_pdev_dp *dp_pdev,
1759 					   struct sk_buff *msdu,
1760 					   struct hal_rx_desc_data *rx_info)
1761 {
1762 	struct ath12k_dp *dp = dp_pdev->dp;
1763 	struct ath12k_skb_rxcb *rxcb = ATH12K_SKB_RXCB(msdu);
1764 	bool drop = false;
1765 
1766 	dp->device_stats.rxdma_error[rxcb->err_code]++;
1767 
1768 	switch (rxcb->err_code) {
1769 	case HAL_REO_ENTR_RING_RXDMA_ECODE_UNAUTH_WDS_ERR:
1770 		drop = ath12k_wifi7_dp_rx_h_unauth_wds_err(dp_pdev, msdu, rx_info);
1771 		break;
1772 	case HAL_REO_ENTR_RING_RXDMA_ECODE_DECRYPT_ERR:
1773 	case HAL_REO_ENTR_RING_RXDMA_ECODE_TKIP_MIC_ERR:
1774 		if (rx_info->err_bitmap & HAL_RX_MPDU_ERR_TKIP_MIC) {
1775 			drop = ath12k_wifi7_dp_rx_h_tkip_mic_err(dp_pdev, msdu, rx_info);
1776 			break;
1777 		}
1778 		fallthrough;
1779 	default:
1780 		/* TODO: Review other rxdma error code to check if anything is
1781 		 * worth reporting to mac80211
1782 		 */
1783 		drop = true;
1784 		break;
1785 	}
1786 
1787 	return drop;
1788 }
1789 
ath12k_wifi7_dp_rx_h_reo_err(struct ath12k_pdev_dp * dp_pdev,struct sk_buff * msdu,struct hal_rx_desc_data * rx_info,struct sk_buff_head * msdu_list)1790 static bool ath12k_wifi7_dp_rx_h_reo_err(struct ath12k_pdev_dp *dp_pdev,
1791 					 struct sk_buff *msdu,
1792 					 struct hal_rx_desc_data *rx_info,
1793 					 struct sk_buff_head *msdu_list)
1794 {
1795 	struct ath12k_dp *dp = dp_pdev->dp;
1796 	struct ath12k_skb_rxcb *rxcb = ATH12K_SKB_RXCB(msdu);
1797 	bool drop = false;
1798 
1799 	dp->device_stats.reo_error[rxcb->err_code]++;
1800 
1801 	switch (rxcb->err_code) {
1802 	case HAL_REO_DEST_RING_ERROR_CODE_DESC_ADDR_ZERO:
1803 		if (ath12k_wifi7_dp_rx_h_null_q_desc(dp_pdev, msdu, rx_info, msdu_list))
1804 			drop = true;
1805 		break;
1806 	case HAL_REO_DEST_RING_ERROR_CODE_PN_CHECK_FAILED:
1807 		/* TODO: Do not drop PN failed packets in the driver;
1808 		 * instead, it is good to drop such packets in mac80211
1809 		 * after incrementing the replay counters.
1810 		 */
1811 		fallthrough;
1812 	default:
1813 		/* TODO: Review other errors and process them to mac80211
1814 		 * as appropriate.
1815 		 */
1816 		drop = true;
1817 		break;
1818 	}
1819 
1820 	return drop;
1821 }
1822 
ath12k_wifi7_dp_rx_wbm_err(struct ath12k_pdev_dp * dp_pdev,struct napi_struct * napi,struct sk_buff * msdu,struct sk_buff_head * msdu_list)1823 static void ath12k_wifi7_dp_rx_wbm_err(struct ath12k_pdev_dp *dp_pdev,
1824 				       struct napi_struct *napi,
1825 				       struct sk_buff *msdu,
1826 				       struct sk_buff_head *msdu_list)
1827 {
1828 	struct ath12k_dp *dp = dp_pdev->dp;
1829 	struct hal_rx_desc *rx_desc = (struct hal_rx_desc *)msdu->data;
1830 	struct ath12k_skb_rxcb *rxcb = ATH12K_SKB_RXCB(msdu);
1831 	struct ieee80211_rx_status rxs = {};
1832 	struct hal_rx_desc_data rx_info;
1833 	bool drop = true;
1834 
1835 	rx_info.addr2_present = false;
1836 	rx_info.rx_status = &rxs;
1837 
1838 	ath12k_dp_extract_rx_desc_data(dp->hal, &rx_info, rx_desc, rx_desc);
1839 
1840 	switch (rxcb->err_rel_src) {
1841 	case HAL_WBM_REL_SRC_MODULE_REO:
1842 		drop = ath12k_wifi7_dp_rx_h_reo_err(dp_pdev, msdu, &rx_info, msdu_list);
1843 		break;
1844 	case HAL_WBM_REL_SRC_MODULE_RXDMA:
1845 		drop = ath12k_wifi7_dp_rx_h_rxdma_err(dp_pdev, msdu, &rx_info);
1846 		break;
1847 	default:
1848 		/* msdu will get freed */
1849 		break;
1850 	}
1851 
1852 	if (drop) {
1853 		dev_kfree_skb_any(msdu);
1854 		return;
1855 	}
1856 
1857 	rx_info.rx_status->flag |= RX_FLAG_SKIP_MONITOR;
1858 
1859 	ath12k_dp_rx_deliver_msdu(dp_pdev, napi, msdu, &rx_info);
1860 }
1861 
ath12k_wifi7_dp_setup_pn_check_reo_cmd(struct ath12k_hal_reo_cmd * cmd,struct ath12k_dp_rx_tid * rx_tid,u32 cipher,enum set_key_cmd key_cmd)1862 void ath12k_wifi7_dp_setup_pn_check_reo_cmd(struct ath12k_hal_reo_cmd *cmd,
1863 					    struct ath12k_dp_rx_tid *rx_tid,
1864 					    u32 cipher, enum set_key_cmd key_cmd)
1865 {
1866 	cmd->flag = HAL_REO_CMD_FLG_NEED_STATUS;
1867 	cmd->upd0 = HAL_REO_CMD_UPD0_PN |
1868 			HAL_REO_CMD_UPD0_PN_SIZE |
1869 			HAL_REO_CMD_UPD0_PN_VALID |
1870 			HAL_REO_CMD_UPD0_PN_CHECK |
1871 			HAL_REO_CMD_UPD0_SVLD;
1872 
1873 	switch (cipher) {
1874 	case WLAN_CIPHER_SUITE_TKIP:
1875 	case WLAN_CIPHER_SUITE_CCMP:
1876 	case WLAN_CIPHER_SUITE_CCMP_256:
1877 	case WLAN_CIPHER_SUITE_GCMP:
1878 	case WLAN_CIPHER_SUITE_GCMP_256:
1879 		if (key_cmd == SET_KEY) {
1880 			cmd->upd1 |= HAL_REO_CMD_UPD1_PN_CHECK;
1881 			cmd->pn_size = 48;
1882 		}
1883 		break;
1884 	default:
1885 		break;
1886 	}
1887 
1888 	cmd->addr_lo = lower_32_bits(rx_tid->qbuf.paddr_aligned);
1889 	cmd->addr_hi = upper_32_bits(rx_tid->qbuf.paddr_aligned);
1890 }
1891 
ath12k_wifi7_dp_rx_process_wbm_err(struct ath12k_dp * dp,struct napi_struct * napi,int budget)1892 int ath12k_wifi7_dp_rx_process_wbm_err(struct ath12k_dp *dp,
1893 				       struct napi_struct *napi, int budget)
1894 {
1895 	struct list_head rx_desc_used_list[ATH12K_MAX_DEVICES];
1896 	struct ath12k_base *ab = dp->ab;
1897 	struct ath12k_hal *hal = dp->hal;
1898 	struct ath12k *ar;
1899 	struct ath12k_pdev_dp *dp_pdev;
1900 	struct ath12k_hw_group *ag = dp->ag;
1901 	struct ath12k_dp_hw_group *dp_hw_grp = &ag->dp_hw_grp;
1902 	struct ath12k_dp *partner_dp;
1903 	struct dp_rxdma_ring *rx_ring;
1904 	struct hal_rx_wbm_rel_info err_info;
1905 	struct hal_srng *srng;
1906 	struct sk_buff *msdu;
1907 	struct sk_buff_head msdu_list, scatter_msdu_list;
1908 	struct ath12k_skb_rxcb *rxcb;
1909 	void *rx_desc;
1910 	int num_buffs_reaped[ATH12K_MAX_DEVICES] = {};
1911 	int total_num_buffs_reaped = 0;
1912 	struct ath12k_rx_desc_info *desc_info;
1913 	struct ath12k_device_dp_stats *device_stats = &dp->device_stats;
1914 	struct ath12k_hw_link *hw_links = ag->hw_links;
1915 	u8 hw_link_id, device_id;
1916 	int ret, pdev_idx;
1917 	struct hal_rx_desc *msdu_data;
1918 
1919 	__skb_queue_head_init(&msdu_list);
1920 	__skb_queue_head_init(&scatter_msdu_list);
1921 
1922 	for (device_id = 0; device_id < ATH12K_MAX_DEVICES; device_id++)
1923 		INIT_LIST_HEAD(&rx_desc_used_list[device_id]);
1924 
1925 	srng = &hal->srng_list[dp->rx_rel_ring.ring_id];
1926 	spin_lock_bh(&srng->lock);
1927 
1928 	ath12k_hal_srng_access_begin(ab, srng);
1929 
1930 	while (budget) {
1931 		rx_desc = ath12k_hal_srng_dst_get_next_entry(ab, srng);
1932 		if (!rx_desc)
1933 			break;
1934 
1935 		ret = ath12k_wifi7_hal_wbm_desc_parse_err(dp, rx_desc,
1936 							  &err_info);
1937 		if (ret) {
1938 			ath12k_warn(ab, "failed to parse rx error in wbm_rel ring desc %d\n",
1939 				    ret);
1940 			continue;
1941 		}
1942 
1943 		desc_info = err_info.rx_desc;
1944 
1945 		/* retry manual desc retrieval if hw cc is not done */
1946 		if (!desc_info) {
1947 			desc_info = ath12k_dp_get_rx_desc(dp, err_info.cookie);
1948 			if (!desc_info) {
1949 				ath12k_warn(ab, "Invalid cookie in DP WBM rx error descriptor retrieval: 0x%x\n",
1950 					    err_info.cookie);
1951 				continue;
1952 			}
1953 		}
1954 
1955 		if (desc_info->magic != ATH12K_DP_RX_DESC_MAGIC)
1956 			ath12k_warn(ab, "WBM RX err, Check HW CC implementation");
1957 
1958 		msdu = desc_info->skb;
1959 		desc_info->skb = NULL;
1960 
1961 		device_id = desc_info->device_id;
1962 		partner_dp = ath12k_dp_hw_grp_to_dp(dp_hw_grp, device_id);
1963 		if (unlikely(!partner_dp)) {
1964 			dev_kfree_skb_any(msdu);
1965 
1966 			/* In any case continuation bit is set
1967 			 * in the previous record, cleanup scatter_msdu_list
1968 			 */
1969 			ath12k_dp_clean_up_skb_list(&scatter_msdu_list);
1970 			continue;
1971 		}
1972 
1973 		list_add_tail(&desc_info->list, &rx_desc_used_list[device_id]);
1974 
1975 		rxcb = ATH12K_SKB_RXCB(msdu);
1976 		dma_unmap_single(partner_dp->dev, rxcb->paddr,
1977 				 msdu->len + skb_tailroom(msdu),
1978 				 DMA_FROM_DEVICE);
1979 
1980 		num_buffs_reaped[device_id]++;
1981 		total_num_buffs_reaped++;
1982 
1983 		if (!err_info.continuation)
1984 			budget--;
1985 
1986 		if (err_info.push_reason !=
1987 		    HAL_REO_DEST_RING_PUSH_REASON_ERR_DETECTED) {
1988 			dev_kfree_skb_any(msdu);
1989 			continue;
1990 		}
1991 
1992 		msdu_data = (struct hal_rx_desc *)msdu->data;
1993 		rxcb->err_rel_src = err_info.err_rel_src;
1994 		rxcb->err_code = err_info.err_code;
1995 		rxcb->is_first_msdu = err_info.first_msdu;
1996 		rxcb->is_last_msdu = err_info.last_msdu;
1997 		rxcb->is_continuation = err_info.continuation;
1998 		rxcb->rx_desc = msdu_data;
1999 		rxcb->peer_id = ath12k_wifi7_dp_rx_get_peer_id(dp, dp->peer_metadata_ver,
2000 							       err_info.peer_metadata);
2001 
2002 		if (err_info.continuation) {
2003 			__skb_queue_tail(&scatter_msdu_list, msdu);
2004 			continue;
2005 		}
2006 
2007 		hw_link_id = ath12k_dp_rx_get_msdu_src_link(partner_dp->hal,
2008 							    msdu_data);
2009 		if (hw_link_id >= ATH12K_GROUP_MAX_RADIO) {
2010 			dev_kfree_skb_any(msdu);
2011 
2012 			/* In any case continuation bit is set
2013 			 * in the previous record, cleanup scatter_msdu_list
2014 			 */
2015 			ath12k_dp_clean_up_skb_list(&scatter_msdu_list);
2016 			continue;
2017 		}
2018 
2019 		if (!skb_queue_empty(&scatter_msdu_list)) {
2020 			struct sk_buff *msdu;
2021 
2022 			skb_queue_walk(&scatter_msdu_list, msdu) {
2023 				rxcb = ATH12K_SKB_RXCB(msdu);
2024 				rxcb->hw_link_id = hw_link_id;
2025 			}
2026 
2027 			skb_queue_splice_tail_init(&scatter_msdu_list,
2028 						   &msdu_list);
2029 		}
2030 
2031 		rxcb = ATH12K_SKB_RXCB(msdu);
2032 		rxcb->hw_link_id = hw_link_id;
2033 		__skb_queue_tail(&msdu_list, msdu);
2034 	}
2035 
2036 	/* In any case continuation bit is set in the
2037 	 * last record, cleanup scatter_msdu_list
2038 	 */
2039 	ath12k_dp_clean_up_skb_list(&scatter_msdu_list);
2040 
2041 	ath12k_hal_srng_access_end(ab, srng);
2042 
2043 	spin_unlock_bh(&srng->lock);
2044 
2045 	if (!total_num_buffs_reaped)
2046 		goto done;
2047 
2048 	for (device_id = 0; device_id < ATH12K_MAX_DEVICES; device_id++) {
2049 		if (!num_buffs_reaped[device_id])
2050 			continue;
2051 
2052 		partner_dp = ath12k_dp_hw_grp_to_dp(dp_hw_grp, device_id);
2053 		rx_ring = &partner_dp->rx_refill_buf_ring;
2054 
2055 		ath12k_dp_rx_bufs_replenish(dp, rx_ring,
2056 					    &rx_desc_used_list[device_id],
2057 					    num_buffs_reaped[device_id]);
2058 	}
2059 
2060 	rcu_read_lock();
2061 	while ((msdu = __skb_dequeue(&msdu_list))) {
2062 		rxcb = ATH12K_SKB_RXCB(msdu);
2063 		hw_link_id = rxcb->hw_link_id;
2064 
2065 		device_id = hw_links[hw_link_id].device_id;
2066 		partner_dp = ath12k_dp_hw_grp_to_dp(dp_hw_grp, device_id);
2067 		if (unlikely(!partner_dp)) {
2068 			ath12k_dbg(ab, ATH12K_DBG_DATA,
2069 				   "Unable to process WBM error msdu due to invalid hw link id %d device id %d\n",
2070 				   hw_link_id, device_id);
2071 			dev_kfree_skb_any(msdu);
2072 			continue;
2073 		}
2074 
2075 		pdev_idx = ath12k_hw_mac_id_to_pdev_id(partner_dp->hw_params,
2076 						       hw_links[hw_link_id].pdev_idx);
2077 
2078 		dp_pdev = ath12k_dp_to_pdev_dp(partner_dp, pdev_idx);
2079 		if (!dp_pdev) {
2080 			dev_kfree_skb_any(msdu);
2081 			continue;
2082 		}
2083 		ar = ath12k_pdev_dp_to_ar(dp_pdev);
2084 
2085 		if (!ar || !rcu_dereference(ar->ab->pdevs_active[pdev_idx])) {
2086 			dev_kfree_skb_any(msdu);
2087 			continue;
2088 		}
2089 
2090 		if (test_bit(ATH12K_FLAG_CAC_RUNNING, &ar->dev_flags)) {
2091 			dev_kfree_skb_any(msdu);
2092 			continue;
2093 		}
2094 
2095 		if (rxcb->err_rel_src < HAL_WBM_REL_SRC_MODULE_MAX) {
2096 			device_id = dp_pdev->dp->device_id;
2097 			device_stats->rx_wbm_rel_source[rxcb->err_rel_src][device_id]++;
2098 		}
2099 
2100 		ath12k_wifi7_dp_rx_wbm_err(dp_pdev, napi, msdu, &msdu_list);
2101 	}
2102 	rcu_read_unlock();
2103 done:
2104 	return total_num_buffs_reaped;
2105 }
2106 
ath12k_dp_rxdma_ring_sel_config_qcn9274(struct ath12k_base * ab)2107 int ath12k_dp_rxdma_ring_sel_config_qcn9274(struct ath12k_base *ab)
2108 {
2109 	struct ath12k_dp *dp = ath12k_ab_to_dp(ab);
2110 	struct htt_rx_ring_tlv_filter tlv_filter = {};
2111 	u32 ring_id;
2112 	int ret;
2113 	u32 hal_rx_desc_sz = ab->hal.hal_desc_sz;
2114 
2115 	ring_id = dp->rx_refill_buf_ring.refill_buf_ring.ring_id;
2116 
2117 	tlv_filter.rx_filter = HTT_RX_TLV_FLAGS_RXDMA_RING;
2118 	tlv_filter.pkt_filter_flags2 = HTT_RX_FP_CTRL_PKT_FILTER_TLV_FLAGS2_BAR;
2119 	tlv_filter.pkt_filter_flags3 = HTT_RX_FP_DATA_PKT_FILTER_TLV_FLASG3_MCAST |
2120 					HTT_RX_FP_DATA_PKT_FILTER_TLV_FLASG3_UCAST |
2121 					HTT_RX_FP_DATA_PKT_FILTER_TLV_FLASG3_NULL_DATA;
2122 	tlv_filter.offset_valid = true;
2123 	tlv_filter.rx_packet_offset = hal_rx_desc_sz;
2124 
2125 	tlv_filter.rx_mpdu_start_offset =
2126 		ath12k_hal_rx_desc_get_mpdu_start_offset_qcn9274();
2127 	tlv_filter.rx_msdu_end_offset =
2128 		ath12k_hal_rx_desc_get_msdu_end_offset_qcn9274();
2129 
2130 	tlv_filter.rx_mpdu_start_wmask = ath12k_hal_rx_mpdu_start_wmask_get_qcn9274();
2131 	tlv_filter.rx_msdu_end_wmask = ath12k_hal_rx_msdu_end_wmask_get_qcn9274();
2132 	ath12k_dbg(ab, ATH12K_DBG_DATA,
2133 		   "Configuring compact tlv masks rx_mpdu_start_wmask 0x%x rx_msdu_end_wmask 0x%x\n",
2134 		   tlv_filter.rx_mpdu_start_wmask, tlv_filter.rx_msdu_end_wmask);
2135 
2136 	ret = ath12k_dp_tx_htt_rx_filter_setup(ab, ring_id, 0,
2137 					       HAL_RXDMA_BUF,
2138 					       DP_RXDMA_REFILL_RING_SIZE,
2139 					       &tlv_filter);
2140 
2141 	return ret;
2142 }
2143 
ath12k_dp_rxdma_ring_sel_config_wcn7850(struct ath12k_base * ab)2144 int ath12k_dp_rxdma_ring_sel_config_wcn7850(struct ath12k_base *ab)
2145 {
2146 	struct ath12k_dp *dp = ath12k_ab_to_dp(ab);
2147 	struct htt_rx_ring_tlv_filter tlv_filter = {};
2148 	u32 ring_id;
2149 	int ret = 0;
2150 	u32 hal_rx_desc_sz = ab->hal.hal_desc_sz;
2151 	int i;
2152 
2153 	ring_id = dp->rx_refill_buf_ring.refill_buf_ring.ring_id;
2154 
2155 	tlv_filter.rx_filter = HTT_RX_TLV_FLAGS_RXDMA_RING;
2156 	tlv_filter.pkt_filter_flags2 = HTT_RX_FP_CTRL_PKT_FILTER_TLV_FLAGS2_BAR;
2157 	tlv_filter.pkt_filter_flags3 = HTT_RX_FP_DATA_PKT_FILTER_TLV_FLASG3_MCAST |
2158 					HTT_RX_FP_DATA_PKT_FILTER_TLV_FLASG3_UCAST |
2159 					HTT_RX_FP_DATA_PKT_FILTER_TLV_FLASG3_NULL_DATA;
2160 	tlv_filter.offset_valid = true;
2161 	tlv_filter.rx_packet_offset = hal_rx_desc_sz;
2162 
2163 	tlv_filter.rx_header_offset = offsetof(struct hal_rx_desc_wcn7850, pkt_hdr_tlv);
2164 
2165 	tlv_filter.rx_mpdu_start_offset =
2166 		ath12k_hal_rx_desc_get_mpdu_start_offset_wcn7850();
2167 	tlv_filter.rx_msdu_end_offset =
2168 		ath12k_hal_rx_desc_get_msdu_end_offset_wcn7850();
2169 
2170 	/* TODO: Selectively subscribe to required qwords within msdu_end
2171 	 * and mpdu_start and setup the mask in below msg
2172 	 * and modify the rx_desc struct
2173 	 */
2174 
2175 	for (i = 0; i < ab->hw_params->num_rxdma_per_pdev; i++) {
2176 		ring_id = dp->rx_mac_buf_ring[i].ring_id;
2177 		ret = ath12k_dp_tx_htt_rx_filter_setup(ab, ring_id, i,
2178 						       HAL_RXDMA_BUF,
2179 						       DP_RXDMA_REFILL_RING_SIZE,
2180 						       &tlv_filter);
2181 	}
2182 
2183 	return ret;
2184 }
2185 
ath12k_dp_rxdma_ring_sel_config_qcc2072(struct ath12k_base * ab)2186 int ath12k_dp_rxdma_ring_sel_config_qcc2072(struct ath12k_base *ab)
2187 {
2188 	struct ath12k_dp *dp = ath12k_ab_to_dp(ab);
2189 	struct htt_rx_ring_tlv_filter tlv_filter = {};
2190 	u32 ring_id;
2191 	int ret = 0;
2192 	u32 hal_rx_desc_sz = ab->hal.hal_desc_sz;
2193 	int i;
2194 
2195 	ring_id = dp->rx_refill_buf_ring.refill_buf_ring.ring_id;
2196 
2197 	tlv_filter.rx_filter = HTT_RX_TLV_FLAGS_RXDMA_RING;
2198 	tlv_filter.pkt_filter_flags2 = HTT_RX_FP_CTRL_PKT_FILTER_TLV_FLAGS2_BAR;
2199 	tlv_filter.pkt_filter_flags3 = HTT_RX_FP_DATA_PKT_FILTER_TLV_FLASG3_MCAST |
2200 				       HTT_RX_FP_DATA_PKT_FILTER_TLV_FLASG3_UCAST |
2201 				       HTT_RX_FP_DATA_PKT_FILTER_TLV_FLASG3_NULL_DATA;
2202 	tlv_filter.offset_valid = true;
2203 	tlv_filter.rx_packet_offset = hal_rx_desc_sz;
2204 
2205 	tlv_filter.rx_header_offset = offsetof(struct hal_rx_desc_qcc2072, pkt_hdr_tlv);
2206 
2207 	tlv_filter.rx_mpdu_start_offset =
2208 		ath12k_hal_rx_desc_get_mpdu_start_offset_qcc2072();
2209 	tlv_filter.rx_msdu_end_offset =
2210 		ath12k_hal_rx_desc_get_msdu_end_offset_qcc2072();
2211 
2212 	/*
2213 	 * TODO: Selectively subscribe to required qwords within msdu_end
2214 	 * and mpdu_start and setup the mask in below msg
2215 	 * and modify the rx_desc struct
2216 	 */
2217 
2218 	for (i = 0; i < ab->hw_params->num_rxdma_per_pdev; i++) {
2219 		ring_id = dp->rx_mac_buf_ring[i].ring_id;
2220 		ret = ath12k_dp_tx_htt_rx_filter_setup(ab, ring_id, i,
2221 						       HAL_RXDMA_BUF,
2222 						       DP_RXDMA_REFILL_RING_SIZE,
2223 						       &tlv_filter);
2224 	}
2225 
2226 	return ret;
2227 }
2228 
ath12k_wifi7_dp_rx_process_reo_status(struct ath12k_dp * dp)2229 void ath12k_wifi7_dp_rx_process_reo_status(struct ath12k_dp *dp)
2230 {
2231 	struct ath12k_base *ab = dp->ab;
2232 	struct ath12k_hal *hal = dp->hal;
2233 	struct hal_srng *srng;
2234 	struct ath12k_dp_rx_reo_cmd *cmd, *tmp;
2235 	bool found = false;
2236 	u16 tag;
2237 	struct hal_reo_status reo_status;
2238 	void *hdr, *desc;
2239 
2240 	srng = &hal->srng_list[dp->reo_status_ring.ring_id];
2241 
2242 	memset(&reo_status, 0, sizeof(reo_status));
2243 
2244 	spin_lock_bh(&srng->lock);
2245 
2246 	ath12k_hal_srng_access_begin(ab, srng);
2247 
2248 	while ((hdr = ath12k_hal_srng_dst_get_next_entry(ab, srng))) {
2249 		tag = hal->ops->reo_status_dec_tlv_hdr(hdr, &desc);
2250 
2251 		switch (tag) {
2252 		case HAL_REO_GET_QUEUE_STATS_STATUS:
2253 			ath12k_wifi7_hal_reo_status_queue_stats(ab, desc,
2254 								&reo_status);
2255 			break;
2256 		case HAL_REO_FLUSH_QUEUE_STATUS:
2257 			ath12k_wifi7_hal_reo_flush_queue_status(ab, desc,
2258 								&reo_status);
2259 			break;
2260 		case HAL_REO_FLUSH_CACHE_STATUS:
2261 			ath12k_wifi7_hal_reo_flush_cache_status(ab, desc,
2262 								&reo_status);
2263 			break;
2264 		case HAL_REO_UNBLOCK_CACHE_STATUS:
2265 			ath12k_wifi7_hal_reo_unblk_cache_status(ab, desc,
2266 								&reo_status);
2267 			break;
2268 		case HAL_REO_FLUSH_TIMEOUT_LIST_STATUS:
2269 			ath12k_wifi7_hal_reo_flush_timeout_list_status(ab, desc,
2270 								       &reo_status);
2271 			break;
2272 		case HAL_REO_DESCRIPTOR_THRESHOLD_REACHED_STATUS:
2273 			ath12k_wifi7_hal_reo_desc_thresh_reached_status(ab, desc,
2274 									&reo_status);
2275 			break;
2276 		case HAL_REO_UPDATE_RX_REO_QUEUE_STATUS:
2277 			ath12k_wifi7_hal_reo_update_rx_reo_queue_status(ab, desc,
2278 									&reo_status);
2279 			break;
2280 		default:
2281 			ath12k_warn(ab, "Unknown reo status type %d\n", tag);
2282 			continue;
2283 		}
2284 
2285 		spin_lock_bh(&dp->reo_cmd_lock);
2286 		list_for_each_entry_safe(cmd, tmp, &dp->reo_cmd_list, list) {
2287 			if (reo_status.uniform_hdr.cmd_num == cmd->cmd_num) {
2288 				found = true;
2289 				list_del(&cmd->list);
2290 				break;
2291 			}
2292 		}
2293 		spin_unlock_bh(&dp->reo_cmd_lock);
2294 
2295 		if (found) {
2296 			cmd->handler(dp, (void *)&cmd->data,
2297 				     reo_status.uniform_hdr.cmd_status);
2298 			kfree(cmd);
2299 		}
2300 
2301 		found = false;
2302 	}
2303 
2304 	ath12k_hal_srng_access_end(ab, srng);
2305 
2306 	spin_unlock_bh(&srng->lock);
2307 }
2308 
2309 bool
ath12k_wifi7_dp_rxdesc_mpdu_valid(struct ath12k_base * ab,struct hal_rx_desc * rx_desc)2310 ath12k_wifi7_dp_rxdesc_mpdu_valid(struct ath12k_base *ab,
2311 				  struct hal_rx_desc *rx_desc)
2312 {
2313 	u32 tlv_tag;
2314 
2315 	tlv_tag = ab->hal.ops->rx_desc_get_mpdu_start_tag(rx_desc);
2316 
2317 	return tlv_tag == HAL_RX_MPDU_START;
2318 }
2319 
2320 void
ath12k_wifi7_dp_rx_set_link_id_qcn9274(struct ath12k_dp_peer * dp_peer,struct ath12k_skb_rxcb * rxcb,struct ieee80211_rx_status * status)2321 ath12k_wifi7_dp_rx_set_link_id_qcn9274(struct ath12k_dp_peer *dp_peer,
2322 				       struct ath12k_skb_rxcb *rxcb,
2323 				       struct ieee80211_rx_status *status)
2324 {
2325 	status->link_valid = 1;
2326 	status->link_id = dp_peer->hw_links[rxcb->hw_link_id];
2327 }
2328 
2329 void
ath12k_wifi7_dp_rx_set_link_id_wcn7850(struct ath12k_dp_peer * dp_peer,struct ath12k_skb_rxcb * rxcb,struct ieee80211_rx_status * status)2330 ath12k_wifi7_dp_rx_set_link_id_wcn7850(struct ath12k_dp_peer *dp_peer,
2331 				       struct ath12k_skb_rxcb *rxcb,
2332 				       struct ieee80211_rx_status *status)
2333 {
2334 	struct ath12k_dp_link_peer *link_peer;
2335 	unsigned long links_map;
2336 	int i;
2337 
2338 	RCU_LOCKDEP_WARN(!rcu_read_lock_held(),
2339 			 "ath12k set rx link id called without rcu lock");
2340 
2341 	links_map = READ_ONCE(dp_peer->link_peers_map);
2342 	for_each_set_bit(i, &links_map, ATH12K_NUM_MAX_LINKS) {
2343 		link_peer = rcu_dereference(dp_peer->link_peers[i]);
2344 		if (link_peer && link_peer->peer_id == rxcb->peer_id) {
2345 			status->link_valid = 1;
2346 			status->link_id = link_peer->link_id;
2347 			return;
2348 		}
2349 	}
2350 }
2351