cachepc-linux

Fork of AMDESE/linux with modifications for CachePC side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-linux
Log | Files | Refs | README | LICENSE | sfeed.txt

rtl8xxxu_core.c (197796B)


      1// SPDX-License-Identifier: GPL-2.0-only
      2/*
      3 * RTL8XXXU mac80211 USB driver
      4 *
      5 * Copyright (c) 2014 - 2017 Jes Sorensen <Jes.Sorensen@gmail.com>
      6 *
      7 * Portions, notably calibration code:
      8 * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
      9 *
     10 * This driver was written as a replacement for the vendor provided
     11 * rtl8723au driver. As the Realtek 8xxx chips are very similar in
     12 * their programming interface, I have started adding support for
     13 * additional 8xxx chips like the 8192cu, 8188cus, etc.
     14 */
     15
     16#include <linux/init.h>
     17#include <linux/kernel.h>
     18#include <linux/sched.h>
     19#include <linux/errno.h>
     20#include <linux/slab.h>
     21#include <linux/module.h>
     22#include <linux/spinlock.h>
     23#include <linux/list.h>
     24#include <linux/usb.h>
     25#include <linux/netdevice.h>
     26#include <linux/etherdevice.h>
     27#include <linux/ethtool.h>
     28#include <linux/wireless.h>
     29#include <linux/firmware.h>
     30#include <linux/moduleparam.h>
     31#include <net/mac80211.h>
     32#include "rtl8xxxu.h"
     33#include "rtl8xxxu_regs.h"
     34
     35#define DRIVER_NAME "rtl8xxxu"
     36
     37int rtl8xxxu_debug = RTL8XXXU_DEBUG_EFUSE;
     38static bool rtl8xxxu_ht40_2g;
     39static bool rtl8xxxu_dma_aggregation;
     40static int rtl8xxxu_dma_agg_timeout = -1;
     41static int rtl8xxxu_dma_agg_pages = -1;
     42
     43MODULE_AUTHOR("Jes Sorensen <Jes.Sorensen@gmail.com>");
     44MODULE_DESCRIPTION("RTL8XXXu USB mac80211 Wireless LAN Driver");
     45MODULE_LICENSE("GPL");
     46MODULE_FIRMWARE("rtlwifi/rtl8723aufw_A.bin");
     47MODULE_FIRMWARE("rtlwifi/rtl8723aufw_B.bin");
     48MODULE_FIRMWARE("rtlwifi/rtl8723aufw_B_NoBT.bin");
     49MODULE_FIRMWARE("rtlwifi/rtl8192cufw_A.bin");
     50MODULE_FIRMWARE("rtlwifi/rtl8192cufw_B.bin");
     51MODULE_FIRMWARE("rtlwifi/rtl8192cufw_TMSC.bin");
     52MODULE_FIRMWARE("rtlwifi/rtl8192eu_nic.bin");
     53MODULE_FIRMWARE("rtlwifi/rtl8723bu_nic.bin");
     54MODULE_FIRMWARE("rtlwifi/rtl8723bu_bt.bin");
     55
     56module_param_named(debug, rtl8xxxu_debug, int, 0600);
     57MODULE_PARM_DESC(debug, "Set debug mask");
     58module_param_named(ht40_2g, rtl8xxxu_ht40_2g, bool, 0600);
     59MODULE_PARM_DESC(ht40_2g, "Enable HT40 support on the 2.4GHz band");
     60module_param_named(dma_aggregation, rtl8xxxu_dma_aggregation, bool, 0600);
     61MODULE_PARM_DESC(dma_aggregation, "Enable DMA packet aggregation");
     62module_param_named(dma_agg_timeout, rtl8xxxu_dma_agg_timeout, int, 0600);
     63MODULE_PARM_DESC(dma_agg_timeout, "Set DMA aggregation timeout (range 1-127)");
     64module_param_named(dma_agg_pages, rtl8xxxu_dma_agg_pages, int, 0600);
     65MODULE_PARM_DESC(dma_agg_pages, "Set DMA aggregation pages (range 1-127, 0 to disable)");
     66
     67#define USB_VENDOR_ID_REALTEK		0x0bda
     68#define RTL8XXXU_RX_URBS		32
     69#define RTL8XXXU_RX_URB_PENDING_WATER	8
     70#define RTL8XXXU_TX_URBS		64
     71#define RTL8XXXU_TX_URB_LOW_WATER	25
     72#define RTL8XXXU_TX_URB_HIGH_WATER	32
     73
     74static int rtl8xxxu_submit_rx_urb(struct rtl8xxxu_priv *priv,
     75				  struct rtl8xxxu_rx_urb *rx_urb);
     76
     77static struct ieee80211_rate rtl8xxxu_rates[] = {
     78	{ .bitrate = 10, .hw_value = DESC_RATE_1M, .flags = 0 },
     79	{ .bitrate = 20, .hw_value = DESC_RATE_2M, .flags = 0 },
     80	{ .bitrate = 55, .hw_value = DESC_RATE_5_5M, .flags = 0 },
     81	{ .bitrate = 110, .hw_value = DESC_RATE_11M, .flags = 0 },
     82	{ .bitrate = 60, .hw_value = DESC_RATE_6M, .flags = 0 },
     83	{ .bitrate = 90, .hw_value = DESC_RATE_9M, .flags = 0 },
     84	{ .bitrate = 120, .hw_value = DESC_RATE_12M, .flags = 0 },
     85	{ .bitrate = 180, .hw_value = DESC_RATE_18M, .flags = 0 },
     86	{ .bitrate = 240, .hw_value = DESC_RATE_24M, .flags = 0 },
     87	{ .bitrate = 360, .hw_value = DESC_RATE_36M, .flags = 0 },
     88	{ .bitrate = 480, .hw_value = DESC_RATE_48M, .flags = 0 },
     89	{ .bitrate = 540, .hw_value = DESC_RATE_54M, .flags = 0 },
     90};
     91
     92static struct ieee80211_channel rtl8xxxu_channels_2g[] = {
     93	{ .band = NL80211_BAND_2GHZ, .center_freq = 2412,
     94	  .hw_value = 1, .max_power = 30 },
     95	{ .band = NL80211_BAND_2GHZ, .center_freq = 2417,
     96	  .hw_value = 2, .max_power = 30 },
     97	{ .band = NL80211_BAND_2GHZ, .center_freq = 2422,
     98	  .hw_value = 3, .max_power = 30 },
     99	{ .band = NL80211_BAND_2GHZ, .center_freq = 2427,
    100	  .hw_value = 4, .max_power = 30 },
    101	{ .band = NL80211_BAND_2GHZ, .center_freq = 2432,
    102	  .hw_value = 5, .max_power = 30 },
    103	{ .band = NL80211_BAND_2GHZ, .center_freq = 2437,
    104	  .hw_value = 6, .max_power = 30 },
    105	{ .band = NL80211_BAND_2GHZ, .center_freq = 2442,
    106	  .hw_value = 7, .max_power = 30 },
    107	{ .band = NL80211_BAND_2GHZ, .center_freq = 2447,
    108	  .hw_value = 8, .max_power = 30 },
    109	{ .band = NL80211_BAND_2GHZ, .center_freq = 2452,
    110	  .hw_value = 9, .max_power = 30 },
    111	{ .band = NL80211_BAND_2GHZ, .center_freq = 2457,
    112	  .hw_value = 10, .max_power = 30 },
    113	{ .band = NL80211_BAND_2GHZ, .center_freq = 2462,
    114	  .hw_value = 11, .max_power = 30 },
    115	{ .band = NL80211_BAND_2GHZ, .center_freq = 2467,
    116	  .hw_value = 12, .max_power = 30 },
    117	{ .band = NL80211_BAND_2GHZ, .center_freq = 2472,
    118	  .hw_value = 13, .max_power = 30 },
    119	{ .band = NL80211_BAND_2GHZ, .center_freq = 2484,
    120	  .hw_value = 14, .max_power = 30 }
    121};
    122
    123static struct ieee80211_supported_band rtl8xxxu_supported_band = {
    124	.channels = rtl8xxxu_channels_2g,
    125	.n_channels = ARRAY_SIZE(rtl8xxxu_channels_2g),
    126	.bitrates = rtl8xxxu_rates,
    127	.n_bitrates = ARRAY_SIZE(rtl8xxxu_rates),
    128};
    129
    130struct rtl8xxxu_reg8val rtl8xxxu_gen1_mac_init_table[] = {
    131	{0x420, 0x80}, {0x423, 0x00}, {0x430, 0x00}, {0x431, 0x00},
    132	{0x432, 0x00}, {0x433, 0x01}, {0x434, 0x04}, {0x435, 0x05},
    133	{0x436, 0x06}, {0x437, 0x07}, {0x438, 0x00}, {0x439, 0x00},
    134	{0x43a, 0x00}, {0x43b, 0x01}, {0x43c, 0x04}, {0x43d, 0x05},
    135	{0x43e, 0x06}, {0x43f, 0x07}, {0x440, 0x5d}, {0x441, 0x01},
    136	{0x442, 0x00}, {0x444, 0x15}, {0x445, 0xf0}, {0x446, 0x0f},
    137	{0x447, 0x00}, {0x458, 0x41}, {0x459, 0xa8}, {0x45a, 0x72},
    138	{0x45b, 0xb9}, {0x460, 0x66}, {0x461, 0x66}, {0x462, 0x08},
    139	{0x463, 0x03}, {0x4c8, 0xff}, {0x4c9, 0x08}, {0x4cc, 0xff},
    140	{0x4cd, 0xff}, {0x4ce, 0x01}, {0x500, 0x26}, {0x501, 0xa2},
    141	{0x502, 0x2f}, {0x503, 0x00}, {0x504, 0x28}, {0x505, 0xa3},
    142	{0x506, 0x5e}, {0x507, 0x00}, {0x508, 0x2b}, {0x509, 0xa4},
    143	{0x50a, 0x5e}, {0x50b, 0x00}, {0x50c, 0x4f}, {0x50d, 0xa4},
    144	{0x50e, 0x00}, {0x50f, 0x00}, {0x512, 0x1c}, {0x514, 0x0a},
    145	{0x515, 0x10}, {0x516, 0x0a}, {0x517, 0x10}, {0x51a, 0x16},
    146	{0x524, 0x0f}, {0x525, 0x4f}, {0x546, 0x40}, {0x547, 0x00},
    147	{0x550, 0x10}, {0x551, 0x10}, {0x559, 0x02}, {0x55a, 0x02},
    148	{0x55d, 0xff}, {0x605, 0x30}, {0x608, 0x0e}, {0x609, 0x2a},
    149	{0x652, 0x20}, {0x63c, 0x0a}, {0x63d, 0x0a}, {0x63e, 0x0e},
    150	{0x63f, 0x0e}, {0x66e, 0x05}, {0x700, 0x21}, {0x701, 0x43},
    151	{0x702, 0x65}, {0x703, 0x87}, {0x708, 0x21}, {0x709, 0x43},
    152	{0x70a, 0x65}, {0x70b, 0x87}, {0xffff, 0xff},
    153};
    154
    155static struct rtl8xxxu_reg32val rtl8723a_phy_1t_init_table[] = {
    156	{0x800, 0x80040000}, {0x804, 0x00000003},
    157	{0x808, 0x0000fc00}, {0x80c, 0x0000000a},
    158	{0x810, 0x10001331}, {0x814, 0x020c3d10},
    159	{0x818, 0x02200385}, {0x81c, 0x00000000},
    160	{0x820, 0x01000100}, {0x824, 0x00390004},
    161	{0x828, 0x00000000}, {0x82c, 0x00000000},
    162	{0x830, 0x00000000}, {0x834, 0x00000000},
    163	{0x838, 0x00000000}, {0x83c, 0x00000000},
    164	{0x840, 0x00010000}, {0x844, 0x00000000},
    165	{0x848, 0x00000000}, {0x84c, 0x00000000},
    166	{0x850, 0x00000000}, {0x854, 0x00000000},
    167	{0x858, 0x569a569a}, {0x85c, 0x001b25a4},
    168	{0x860, 0x66f60110}, {0x864, 0x061f0130},
    169	{0x868, 0x00000000}, {0x86c, 0x32323200},
    170	{0x870, 0x07000760}, {0x874, 0x22004000},
    171	{0x878, 0x00000808}, {0x87c, 0x00000000},
    172	{0x880, 0xc0083070}, {0x884, 0x000004d5},
    173	{0x888, 0x00000000}, {0x88c, 0xccc000c0},
    174	{0x890, 0x00000800}, {0x894, 0xfffffffe},
    175	{0x898, 0x40302010}, {0x89c, 0x00706050},
    176	{0x900, 0x00000000}, {0x904, 0x00000023},
    177	{0x908, 0x00000000}, {0x90c, 0x81121111},
    178	{0xa00, 0x00d047c8}, {0xa04, 0x80ff000c},
    179	{0xa08, 0x8c838300}, {0xa0c, 0x2e68120f},
    180	{0xa10, 0x9500bb78}, {0xa14, 0x11144028},
    181	{0xa18, 0x00881117}, {0xa1c, 0x89140f00},
    182	{0xa20, 0x1a1b0000}, {0xa24, 0x090e1317},
    183	{0xa28, 0x00000204}, {0xa2c, 0x00d30000},
    184	{0xa70, 0x101fbf00}, {0xa74, 0x00000007},
    185	{0xa78, 0x00000900},
    186	{0xc00, 0x48071d40}, {0xc04, 0x03a05611},
    187	{0xc08, 0x000000e4}, {0xc0c, 0x6c6c6c6c},
    188	{0xc10, 0x08800000}, {0xc14, 0x40000100},
    189	{0xc18, 0x08800000}, {0xc1c, 0x40000100},
    190	{0xc20, 0x00000000}, {0xc24, 0x00000000},
    191	{0xc28, 0x00000000}, {0xc2c, 0x00000000},
    192	{0xc30, 0x69e9ac44}, {0xc34, 0x469652af},
    193	{0xc38, 0x49795994}, {0xc3c, 0x0a97971c},
    194	{0xc40, 0x1f7c403f}, {0xc44, 0x000100b7},
    195	{0xc48, 0xec020107}, {0xc4c, 0x007f037f},
    196	{0xc50, 0x69543420}, {0xc54, 0x43bc0094},
    197	{0xc58, 0x69543420}, {0xc5c, 0x433c0094},
    198	{0xc60, 0x00000000}, {0xc64, 0x7112848b},
    199	{0xc68, 0x47c00bff}, {0xc6c, 0x00000036},
    200	{0xc70, 0x2c7f000d}, {0xc74, 0x018610db},
    201	{0xc78, 0x0000001f}, {0xc7c, 0x00b91612},
    202	{0xc80, 0x40000100}, {0xc84, 0x20f60000},
    203	{0xc88, 0x40000100}, {0xc8c, 0x20200000},
    204	{0xc90, 0x00121820}, {0xc94, 0x00000000},
    205	{0xc98, 0x00121820}, {0xc9c, 0x00007f7f},
    206	{0xca0, 0x00000000}, {0xca4, 0x00000080},
    207	{0xca8, 0x00000000}, {0xcac, 0x00000000},
    208	{0xcb0, 0x00000000}, {0xcb4, 0x00000000},
    209	{0xcb8, 0x00000000}, {0xcbc, 0x28000000},
    210	{0xcc0, 0x00000000}, {0xcc4, 0x00000000},
    211	{0xcc8, 0x00000000}, {0xccc, 0x00000000},
    212	{0xcd0, 0x00000000}, {0xcd4, 0x00000000},
    213	{0xcd8, 0x64b22427}, {0xcdc, 0x00766932},
    214	{0xce0, 0x00222222}, {0xce4, 0x00000000},
    215	{0xce8, 0x37644302}, {0xcec, 0x2f97d40c},
    216	{0xd00, 0x00080740}, {0xd04, 0x00020401},
    217	{0xd08, 0x0000907f}, {0xd0c, 0x20010201},
    218	{0xd10, 0xa0633333}, {0xd14, 0x3333bc43},
    219	{0xd18, 0x7a8f5b6b}, {0xd2c, 0xcc979975},
    220	{0xd30, 0x00000000}, {0xd34, 0x80608000},
    221	{0xd38, 0x00000000}, {0xd3c, 0x00027293},
    222	{0xd40, 0x00000000}, {0xd44, 0x00000000},
    223	{0xd48, 0x00000000}, {0xd4c, 0x00000000},
    224	{0xd50, 0x6437140a}, {0xd54, 0x00000000},
    225	{0xd58, 0x00000000}, {0xd5c, 0x30032064},
    226	{0xd60, 0x4653de68}, {0xd64, 0x04518a3c},
    227	{0xd68, 0x00002101}, {0xd6c, 0x2a201c16},
    228	{0xd70, 0x1812362e}, {0xd74, 0x322c2220},
    229	{0xd78, 0x000e3c24}, {0xe00, 0x2a2a2a2a},
    230	{0xe04, 0x2a2a2a2a}, {0xe08, 0x03902a2a},
    231	{0xe10, 0x2a2a2a2a}, {0xe14, 0x2a2a2a2a},
    232	{0xe18, 0x2a2a2a2a}, {0xe1c, 0x2a2a2a2a},
    233	{0xe28, 0x00000000}, {0xe30, 0x1000dc1f},
    234	{0xe34, 0x10008c1f}, {0xe38, 0x02140102},
    235	{0xe3c, 0x681604c2}, {0xe40, 0x01007c00},
    236	{0xe44, 0x01004800}, {0xe48, 0xfb000000},
    237	{0xe4c, 0x000028d1}, {0xe50, 0x1000dc1f},
    238	{0xe54, 0x10008c1f}, {0xe58, 0x02140102},
    239	{0xe5c, 0x28160d05}, {0xe60, 0x00000008},
    240	{0xe68, 0x001b25a4}, {0xe6c, 0x631b25a0},
    241	{0xe70, 0x631b25a0}, {0xe74, 0x081b25a0},
    242	{0xe78, 0x081b25a0}, {0xe7c, 0x081b25a0},
    243	{0xe80, 0x081b25a0}, {0xe84, 0x631b25a0},
    244	{0xe88, 0x081b25a0}, {0xe8c, 0x631b25a0},
    245	{0xed0, 0x631b25a0}, {0xed4, 0x631b25a0},
    246	{0xed8, 0x631b25a0}, {0xedc, 0x001b25a0},
    247	{0xee0, 0x001b25a0}, {0xeec, 0x6b1b25a0},
    248	{0xf14, 0x00000003}, {0xf4c, 0x00000000},
    249	{0xf00, 0x00000300},
    250	{0xffff, 0xffffffff},
    251};
    252
    253static struct rtl8xxxu_reg32val rtl8192cu_phy_2t_init_table[] = {
    254	{0x024, 0x0011800f}, {0x028, 0x00ffdb83},
    255	{0x800, 0x80040002}, {0x804, 0x00000003},
    256	{0x808, 0x0000fc00}, {0x80c, 0x0000000a},
    257	{0x810, 0x10000330}, {0x814, 0x020c3d10},
    258	{0x818, 0x02200385}, {0x81c, 0x00000000},
    259	{0x820, 0x01000100}, {0x824, 0x00390004},
    260	{0x828, 0x01000100}, {0x82c, 0x00390004},
    261	{0x830, 0x27272727}, {0x834, 0x27272727},
    262	{0x838, 0x27272727}, {0x83c, 0x27272727},
    263	{0x840, 0x00010000}, {0x844, 0x00010000},
    264	{0x848, 0x27272727}, {0x84c, 0x27272727},
    265	{0x850, 0x00000000}, {0x854, 0x00000000},
    266	{0x858, 0x569a569a}, {0x85c, 0x0c1b25a4},
    267	{0x860, 0x66e60230}, {0x864, 0x061f0130},
    268	{0x868, 0x27272727}, {0x86c, 0x2b2b2b27},
    269	{0x870, 0x07000700}, {0x874, 0x22184000},
    270	{0x878, 0x08080808}, {0x87c, 0x00000000},
    271	{0x880, 0xc0083070}, {0x884, 0x000004d5},
    272	{0x888, 0x00000000}, {0x88c, 0xcc0000c0},
    273	{0x890, 0x00000800}, {0x894, 0xfffffffe},
    274	{0x898, 0x40302010}, {0x89c, 0x00706050},
    275	{0x900, 0x00000000}, {0x904, 0x00000023},
    276	{0x908, 0x00000000}, {0x90c, 0x81121313},
    277	{0xa00, 0x00d047c8}, {0xa04, 0x80ff000c},
    278	{0xa08, 0x8c838300}, {0xa0c, 0x2e68120f},
    279	{0xa10, 0x9500bb78}, {0xa14, 0x11144028},
    280	{0xa18, 0x00881117}, {0xa1c, 0x89140f00},
    281	{0xa20, 0x1a1b0000}, {0xa24, 0x090e1317},
    282	{0xa28, 0x00000204}, {0xa2c, 0x00d30000},
    283	{0xa70, 0x101fbf00}, {0xa74, 0x00000007},
    284	{0xc00, 0x48071d40}, {0xc04, 0x03a05633},
    285	{0xc08, 0x000000e4}, {0xc0c, 0x6c6c6c6c},
    286	{0xc10, 0x08800000}, {0xc14, 0x40000100},
    287	{0xc18, 0x08800000}, {0xc1c, 0x40000100},
    288	{0xc20, 0x00000000}, {0xc24, 0x00000000},
    289	{0xc28, 0x00000000}, {0xc2c, 0x00000000},
    290	{0xc30, 0x69e9ac44}, {0xc34, 0x469652cf},
    291	{0xc38, 0x49795994}, {0xc3c, 0x0a97971c},
    292	{0xc40, 0x1f7c403f}, {0xc44, 0x000100b7},
    293	{0xc48, 0xec020107}, {0xc4c, 0x007f037f},
    294	{0xc50, 0x69543420}, {0xc54, 0x43bc0094},
    295	{0xc58, 0x69543420}, {0xc5c, 0x433c0094},
    296	{0xc60, 0x00000000}, {0xc64, 0x5116848b},
    297	{0xc68, 0x47c00bff}, {0xc6c, 0x00000036},
    298	{0xc70, 0x2c7f000d}, {0xc74, 0x2186115b},
    299	{0xc78, 0x0000001f}, {0xc7c, 0x00b99612},
    300	{0xc80, 0x40000100}, {0xc84, 0x20f60000},
    301	{0xc88, 0x40000100}, {0xc8c, 0xa0e40000},
    302	{0xc90, 0x00121820}, {0xc94, 0x00000000},
    303	{0xc98, 0x00121820}, {0xc9c, 0x00007f7f},
    304	{0xca0, 0x00000000}, {0xca4, 0x00000080},
    305	{0xca8, 0x00000000}, {0xcac, 0x00000000},
    306	{0xcb0, 0x00000000}, {0xcb4, 0x00000000},
    307	{0xcb8, 0x00000000}, {0xcbc, 0x28000000},
    308	{0xcc0, 0x00000000}, {0xcc4, 0x00000000},
    309	{0xcc8, 0x00000000}, {0xccc, 0x00000000},
    310	{0xcd0, 0x00000000}, {0xcd4, 0x00000000},
    311	{0xcd8, 0x64b22427}, {0xcdc, 0x00766932},
    312	{0xce0, 0x00222222}, {0xce4, 0x00000000},
    313	{0xce8, 0x37644302}, {0xcec, 0x2f97d40c},
    314	{0xd00, 0x00080740}, {0xd04, 0x00020403},
    315	{0xd08, 0x0000907f}, {0xd0c, 0x20010201},
    316	{0xd10, 0xa0633333}, {0xd14, 0x3333bc43},
    317	{0xd18, 0x7a8f5b6b}, {0xd2c, 0xcc979975},
    318	{0xd30, 0x00000000}, {0xd34, 0x80608000},
    319	{0xd38, 0x00000000}, {0xd3c, 0x00027293},
    320	{0xd40, 0x00000000}, {0xd44, 0x00000000},
    321	{0xd48, 0x00000000}, {0xd4c, 0x00000000},
    322	{0xd50, 0x6437140a}, {0xd54, 0x00000000},
    323	{0xd58, 0x00000000}, {0xd5c, 0x30032064},
    324	{0xd60, 0x4653de68}, {0xd64, 0x04518a3c},
    325	{0xd68, 0x00002101}, {0xd6c, 0x2a201c16},
    326	{0xd70, 0x1812362e}, {0xd74, 0x322c2220},
    327	{0xd78, 0x000e3c24}, {0xe00, 0x2a2a2a2a},
    328	{0xe04, 0x2a2a2a2a}, {0xe08, 0x03902a2a},
    329	{0xe10, 0x2a2a2a2a}, {0xe14, 0x2a2a2a2a},
    330	{0xe18, 0x2a2a2a2a}, {0xe1c, 0x2a2a2a2a},
    331	{0xe28, 0x00000000}, {0xe30, 0x1000dc1f},
    332	{0xe34, 0x10008c1f}, {0xe38, 0x02140102},
    333	{0xe3c, 0x681604c2}, {0xe40, 0x01007c00},
    334	{0xe44, 0x01004800}, {0xe48, 0xfb000000},
    335	{0xe4c, 0x000028d1}, {0xe50, 0x1000dc1f},
    336	{0xe54, 0x10008c1f}, {0xe58, 0x02140102},
    337	{0xe5c, 0x28160d05}, {0xe60, 0x00000010},
    338	{0xe68, 0x001b25a4}, {0xe6c, 0x63db25a4},
    339	{0xe70, 0x63db25a4}, {0xe74, 0x0c1b25a4},
    340	{0xe78, 0x0c1b25a4}, {0xe7c, 0x0c1b25a4},
    341	{0xe80, 0x0c1b25a4}, {0xe84, 0x63db25a4},
    342	{0xe88, 0x0c1b25a4}, {0xe8c, 0x63db25a4},
    343	{0xed0, 0x63db25a4}, {0xed4, 0x63db25a4},
    344	{0xed8, 0x63db25a4}, {0xedc, 0x001b25a4},
    345	{0xee0, 0x001b25a4}, {0xeec, 0x6fdb25a4},
    346	{0xf14, 0x00000003}, {0xf4c, 0x00000000},
    347	{0xf00, 0x00000300},
    348	{0xffff, 0xffffffff},
    349};
    350
    351static struct rtl8xxxu_reg32val rtl8188ru_phy_1t_highpa_table[] = {
    352	{0x024, 0x0011800f}, {0x028, 0x00ffdb83},
    353	{0x040, 0x000c0004}, {0x800, 0x80040000},
    354	{0x804, 0x00000001}, {0x808, 0x0000fc00},
    355	{0x80c, 0x0000000a}, {0x810, 0x10005388},
    356	{0x814, 0x020c3d10}, {0x818, 0x02200385},
    357	{0x81c, 0x00000000}, {0x820, 0x01000100},
    358	{0x824, 0x00390204}, {0x828, 0x00000000},
    359	{0x82c, 0x00000000}, {0x830, 0x00000000},
    360	{0x834, 0x00000000}, {0x838, 0x00000000},
    361	{0x83c, 0x00000000}, {0x840, 0x00010000},
    362	{0x844, 0x00000000}, {0x848, 0x00000000},
    363	{0x84c, 0x00000000}, {0x850, 0x00000000},
    364	{0x854, 0x00000000}, {0x858, 0x569a569a},
    365	{0x85c, 0x001b25a4}, {0x860, 0x66e60230},
    366	{0x864, 0x061f0130}, {0x868, 0x00000000},
    367	{0x86c, 0x20202000}, {0x870, 0x03000300},
    368	{0x874, 0x22004000}, {0x878, 0x00000808},
    369	{0x87c, 0x00ffc3f1}, {0x880, 0xc0083070},
    370	{0x884, 0x000004d5}, {0x888, 0x00000000},
    371	{0x88c, 0xccc000c0}, {0x890, 0x00000800},
    372	{0x894, 0xfffffffe}, {0x898, 0x40302010},
    373	{0x89c, 0x00706050}, {0x900, 0x00000000},
    374	{0x904, 0x00000023}, {0x908, 0x00000000},
    375	{0x90c, 0x81121111}, {0xa00, 0x00d047c8},
    376	{0xa04, 0x80ff000c}, {0xa08, 0x8c838300},
    377	{0xa0c, 0x2e68120f}, {0xa10, 0x9500bb78},
    378	{0xa14, 0x11144028}, {0xa18, 0x00881117},
    379	{0xa1c, 0x89140f00}, {0xa20, 0x15160000},
    380	{0xa24, 0x070b0f12}, {0xa28, 0x00000104},
    381	{0xa2c, 0x00d30000}, {0xa70, 0x101fbf00},
    382	{0xa74, 0x00000007}, {0xc00, 0x48071d40},
    383	{0xc04, 0x03a05611}, {0xc08, 0x000000e4},
    384	{0xc0c, 0x6c6c6c6c}, {0xc10, 0x08800000},
    385	{0xc14, 0x40000100}, {0xc18, 0x08800000},
    386	{0xc1c, 0x40000100}, {0xc20, 0x00000000},
    387	{0xc24, 0x00000000}, {0xc28, 0x00000000},
    388	{0xc2c, 0x00000000}, {0xc30, 0x69e9ac44},
    389	{0xc34, 0x469652cf}, {0xc38, 0x49795994},
    390	{0xc3c, 0x0a97971c}, {0xc40, 0x1f7c403f},
    391	{0xc44, 0x000100b7}, {0xc48, 0xec020107},
    392	{0xc4c, 0x007f037f}, {0xc50, 0x6954342e},
    393	{0xc54, 0x43bc0094}, {0xc58, 0x6954342f},
    394	{0xc5c, 0x433c0094}, {0xc60, 0x00000000},
    395	{0xc64, 0x5116848b}, {0xc68, 0x47c00bff},
    396	{0xc6c, 0x00000036}, {0xc70, 0x2c46000d},
    397	{0xc74, 0x018610db}, {0xc78, 0x0000001f},
    398	{0xc7c, 0x00b91612}, {0xc80, 0x24000090},
    399	{0xc84, 0x20f60000}, {0xc88, 0x24000090},
    400	{0xc8c, 0x20200000}, {0xc90, 0x00121820},
    401	{0xc94, 0x00000000}, {0xc98, 0x00121820},
    402	{0xc9c, 0x00007f7f}, {0xca0, 0x00000000},
    403	{0xca4, 0x00000080}, {0xca8, 0x00000000},
    404	{0xcac, 0x00000000}, {0xcb0, 0x00000000},
    405	{0xcb4, 0x00000000}, {0xcb8, 0x00000000},
    406	{0xcbc, 0x28000000}, {0xcc0, 0x00000000},
    407	{0xcc4, 0x00000000}, {0xcc8, 0x00000000},
    408	{0xccc, 0x00000000}, {0xcd0, 0x00000000},
    409	{0xcd4, 0x00000000}, {0xcd8, 0x64b22427},
    410	{0xcdc, 0x00766932}, {0xce0, 0x00222222},
    411	{0xce4, 0x00000000}, {0xce8, 0x37644302},
    412	{0xcec, 0x2f97d40c}, {0xd00, 0x00080740},
    413	{0xd04, 0x00020401}, {0xd08, 0x0000907f},
    414	{0xd0c, 0x20010201}, {0xd10, 0xa0633333},
    415	{0xd14, 0x3333bc43}, {0xd18, 0x7a8f5b6b},
    416	{0xd2c, 0xcc979975}, {0xd30, 0x00000000},
    417	{0xd34, 0x80608000}, {0xd38, 0x00000000},
    418	{0xd3c, 0x00027293}, {0xd40, 0x00000000},
    419	{0xd44, 0x00000000}, {0xd48, 0x00000000},
    420	{0xd4c, 0x00000000}, {0xd50, 0x6437140a},
    421	{0xd54, 0x00000000}, {0xd58, 0x00000000},
    422	{0xd5c, 0x30032064}, {0xd60, 0x4653de68},
    423	{0xd64, 0x04518a3c}, {0xd68, 0x00002101},
    424	{0xd6c, 0x2a201c16}, {0xd70, 0x1812362e},
    425	{0xd74, 0x322c2220}, {0xd78, 0x000e3c24},
    426	{0xe00, 0x24242424}, {0xe04, 0x24242424},
    427	{0xe08, 0x03902024}, {0xe10, 0x24242424},
    428	{0xe14, 0x24242424}, {0xe18, 0x24242424},
    429	{0xe1c, 0x24242424}, {0xe28, 0x00000000},
    430	{0xe30, 0x1000dc1f}, {0xe34, 0x10008c1f},
    431	{0xe38, 0x02140102}, {0xe3c, 0x681604c2},
    432	{0xe40, 0x01007c00}, {0xe44, 0x01004800},
    433	{0xe48, 0xfb000000}, {0xe4c, 0x000028d1},
    434	{0xe50, 0x1000dc1f}, {0xe54, 0x10008c1f},
    435	{0xe58, 0x02140102}, {0xe5c, 0x28160d05},
    436	{0xe60, 0x00000008}, {0xe68, 0x001b25a4},
    437	{0xe6c, 0x631b25a0}, {0xe70, 0x631b25a0},
    438	{0xe74, 0x081b25a0}, {0xe78, 0x081b25a0},
    439	{0xe7c, 0x081b25a0}, {0xe80, 0x081b25a0},
    440	{0xe84, 0x631b25a0}, {0xe88, 0x081b25a0},
    441	{0xe8c, 0x631b25a0}, {0xed0, 0x631b25a0},
    442	{0xed4, 0x631b25a0}, {0xed8, 0x631b25a0},
    443	{0xedc, 0x001b25a0}, {0xee0, 0x001b25a0},
    444	{0xeec, 0x6b1b25a0}, {0xee8, 0x31555448},
    445	{0xf14, 0x00000003}, {0xf4c, 0x00000000},
    446	{0xf00, 0x00000300},
    447	{0xffff, 0xffffffff},
    448};
    449
    450static struct rtl8xxxu_reg32val rtl8xxx_agc_standard_table[] = {
    451	{0xc78, 0x7b000001}, {0xc78, 0x7b010001},
    452	{0xc78, 0x7b020001}, {0xc78, 0x7b030001},
    453	{0xc78, 0x7b040001}, {0xc78, 0x7b050001},
    454	{0xc78, 0x7a060001}, {0xc78, 0x79070001},
    455	{0xc78, 0x78080001}, {0xc78, 0x77090001},
    456	{0xc78, 0x760a0001}, {0xc78, 0x750b0001},
    457	{0xc78, 0x740c0001}, {0xc78, 0x730d0001},
    458	{0xc78, 0x720e0001}, {0xc78, 0x710f0001},
    459	{0xc78, 0x70100001}, {0xc78, 0x6f110001},
    460	{0xc78, 0x6e120001}, {0xc78, 0x6d130001},
    461	{0xc78, 0x6c140001}, {0xc78, 0x6b150001},
    462	{0xc78, 0x6a160001}, {0xc78, 0x69170001},
    463	{0xc78, 0x68180001}, {0xc78, 0x67190001},
    464	{0xc78, 0x661a0001}, {0xc78, 0x651b0001},
    465	{0xc78, 0x641c0001}, {0xc78, 0x631d0001},
    466	{0xc78, 0x621e0001}, {0xc78, 0x611f0001},
    467	{0xc78, 0x60200001}, {0xc78, 0x49210001},
    468	{0xc78, 0x48220001}, {0xc78, 0x47230001},
    469	{0xc78, 0x46240001}, {0xc78, 0x45250001},
    470	{0xc78, 0x44260001}, {0xc78, 0x43270001},
    471	{0xc78, 0x42280001}, {0xc78, 0x41290001},
    472	{0xc78, 0x402a0001}, {0xc78, 0x262b0001},
    473	{0xc78, 0x252c0001}, {0xc78, 0x242d0001},
    474	{0xc78, 0x232e0001}, {0xc78, 0x222f0001},
    475	{0xc78, 0x21300001}, {0xc78, 0x20310001},
    476	{0xc78, 0x06320001}, {0xc78, 0x05330001},
    477	{0xc78, 0x04340001}, {0xc78, 0x03350001},
    478	{0xc78, 0x02360001}, {0xc78, 0x01370001},
    479	{0xc78, 0x00380001}, {0xc78, 0x00390001},
    480	{0xc78, 0x003a0001}, {0xc78, 0x003b0001},
    481	{0xc78, 0x003c0001}, {0xc78, 0x003d0001},
    482	{0xc78, 0x003e0001}, {0xc78, 0x003f0001},
    483	{0xc78, 0x7b400001}, {0xc78, 0x7b410001},
    484	{0xc78, 0x7b420001}, {0xc78, 0x7b430001},
    485	{0xc78, 0x7b440001}, {0xc78, 0x7b450001},
    486	{0xc78, 0x7a460001}, {0xc78, 0x79470001},
    487	{0xc78, 0x78480001}, {0xc78, 0x77490001},
    488	{0xc78, 0x764a0001}, {0xc78, 0x754b0001},
    489	{0xc78, 0x744c0001}, {0xc78, 0x734d0001},
    490	{0xc78, 0x724e0001}, {0xc78, 0x714f0001},
    491	{0xc78, 0x70500001}, {0xc78, 0x6f510001},
    492	{0xc78, 0x6e520001}, {0xc78, 0x6d530001},
    493	{0xc78, 0x6c540001}, {0xc78, 0x6b550001},
    494	{0xc78, 0x6a560001}, {0xc78, 0x69570001},
    495	{0xc78, 0x68580001}, {0xc78, 0x67590001},
    496	{0xc78, 0x665a0001}, {0xc78, 0x655b0001},
    497	{0xc78, 0x645c0001}, {0xc78, 0x635d0001},
    498	{0xc78, 0x625e0001}, {0xc78, 0x615f0001},
    499	{0xc78, 0x60600001}, {0xc78, 0x49610001},
    500	{0xc78, 0x48620001}, {0xc78, 0x47630001},
    501	{0xc78, 0x46640001}, {0xc78, 0x45650001},
    502	{0xc78, 0x44660001}, {0xc78, 0x43670001},
    503	{0xc78, 0x42680001}, {0xc78, 0x41690001},
    504	{0xc78, 0x406a0001}, {0xc78, 0x266b0001},
    505	{0xc78, 0x256c0001}, {0xc78, 0x246d0001},
    506	{0xc78, 0x236e0001}, {0xc78, 0x226f0001},
    507	{0xc78, 0x21700001}, {0xc78, 0x20710001},
    508	{0xc78, 0x06720001}, {0xc78, 0x05730001},
    509	{0xc78, 0x04740001}, {0xc78, 0x03750001},
    510	{0xc78, 0x02760001}, {0xc78, 0x01770001},
    511	{0xc78, 0x00780001}, {0xc78, 0x00790001},
    512	{0xc78, 0x007a0001}, {0xc78, 0x007b0001},
    513	{0xc78, 0x007c0001}, {0xc78, 0x007d0001},
    514	{0xc78, 0x007e0001}, {0xc78, 0x007f0001},
    515	{0xc78, 0x3800001e}, {0xc78, 0x3801001e},
    516	{0xc78, 0x3802001e}, {0xc78, 0x3803001e},
    517	{0xc78, 0x3804001e}, {0xc78, 0x3805001e},
    518	{0xc78, 0x3806001e}, {0xc78, 0x3807001e},
    519	{0xc78, 0x3808001e}, {0xc78, 0x3c09001e},
    520	{0xc78, 0x3e0a001e}, {0xc78, 0x400b001e},
    521	{0xc78, 0x440c001e}, {0xc78, 0x480d001e},
    522	{0xc78, 0x4c0e001e}, {0xc78, 0x500f001e},
    523	{0xc78, 0x5210001e}, {0xc78, 0x5611001e},
    524	{0xc78, 0x5a12001e}, {0xc78, 0x5e13001e},
    525	{0xc78, 0x6014001e}, {0xc78, 0x6015001e},
    526	{0xc78, 0x6016001e}, {0xc78, 0x6217001e},
    527	{0xc78, 0x6218001e}, {0xc78, 0x6219001e},
    528	{0xc78, 0x621a001e}, {0xc78, 0x621b001e},
    529	{0xc78, 0x621c001e}, {0xc78, 0x621d001e},
    530	{0xc78, 0x621e001e}, {0xc78, 0x621f001e},
    531	{0xffff, 0xffffffff}
    532};
    533
    534static struct rtl8xxxu_reg32val rtl8xxx_agc_highpa_table[] = {
    535	{0xc78, 0x7b000001}, {0xc78, 0x7b010001},
    536	{0xc78, 0x7b020001}, {0xc78, 0x7b030001},
    537	{0xc78, 0x7b040001}, {0xc78, 0x7b050001},
    538	{0xc78, 0x7b060001}, {0xc78, 0x7b070001},
    539	{0xc78, 0x7b080001}, {0xc78, 0x7a090001},
    540	{0xc78, 0x790a0001}, {0xc78, 0x780b0001},
    541	{0xc78, 0x770c0001}, {0xc78, 0x760d0001},
    542	{0xc78, 0x750e0001}, {0xc78, 0x740f0001},
    543	{0xc78, 0x73100001}, {0xc78, 0x72110001},
    544	{0xc78, 0x71120001}, {0xc78, 0x70130001},
    545	{0xc78, 0x6f140001}, {0xc78, 0x6e150001},
    546	{0xc78, 0x6d160001}, {0xc78, 0x6c170001},
    547	{0xc78, 0x6b180001}, {0xc78, 0x6a190001},
    548	{0xc78, 0x691a0001}, {0xc78, 0x681b0001},
    549	{0xc78, 0x671c0001}, {0xc78, 0x661d0001},
    550	{0xc78, 0x651e0001}, {0xc78, 0x641f0001},
    551	{0xc78, 0x63200001}, {0xc78, 0x62210001},
    552	{0xc78, 0x61220001}, {0xc78, 0x60230001},
    553	{0xc78, 0x46240001}, {0xc78, 0x45250001},
    554	{0xc78, 0x44260001}, {0xc78, 0x43270001},
    555	{0xc78, 0x42280001}, {0xc78, 0x41290001},
    556	{0xc78, 0x402a0001}, {0xc78, 0x262b0001},
    557	{0xc78, 0x252c0001}, {0xc78, 0x242d0001},
    558	{0xc78, 0x232e0001}, {0xc78, 0x222f0001},
    559	{0xc78, 0x21300001}, {0xc78, 0x20310001},
    560	{0xc78, 0x06320001}, {0xc78, 0x05330001},
    561	{0xc78, 0x04340001}, {0xc78, 0x03350001},
    562	{0xc78, 0x02360001}, {0xc78, 0x01370001},
    563	{0xc78, 0x00380001}, {0xc78, 0x00390001},
    564	{0xc78, 0x003a0001}, {0xc78, 0x003b0001},
    565	{0xc78, 0x003c0001}, {0xc78, 0x003d0001},
    566	{0xc78, 0x003e0001}, {0xc78, 0x003f0001},
    567	{0xc78, 0x7b400001}, {0xc78, 0x7b410001},
    568	{0xc78, 0x7b420001}, {0xc78, 0x7b430001},
    569	{0xc78, 0x7b440001}, {0xc78, 0x7b450001},
    570	{0xc78, 0x7b460001}, {0xc78, 0x7b470001},
    571	{0xc78, 0x7b480001}, {0xc78, 0x7a490001},
    572	{0xc78, 0x794a0001}, {0xc78, 0x784b0001},
    573	{0xc78, 0x774c0001}, {0xc78, 0x764d0001},
    574	{0xc78, 0x754e0001}, {0xc78, 0x744f0001},
    575	{0xc78, 0x73500001}, {0xc78, 0x72510001},
    576	{0xc78, 0x71520001}, {0xc78, 0x70530001},
    577	{0xc78, 0x6f540001}, {0xc78, 0x6e550001},
    578	{0xc78, 0x6d560001}, {0xc78, 0x6c570001},
    579	{0xc78, 0x6b580001}, {0xc78, 0x6a590001},
    580	{0xc78, 0x695a0001}, {0xc78, 0x685b0001},
    581	{0xc78, 0x675c0001}, {0xc78, 0x665d0001},
    582	{0xc78, 0x655e0001}, {0xc78, 0x645f0001},
    583	{0xc78, 0x63600001}, {0xc78, 0x62610001},
    584	{0xc78, 0x61620001}, {0xc78, 0x60630001},
    585	{0xc78, 0x46640001}, {0xc78, 0x45650001},
    586	{0xc78, 0x44660001}, {0xc78, 0x43670001},
    587	{0xc78, 0x42680001}, {0xc78, 0x41690001},
    588	{0xc78, 0x406a0001}, {0xc78, 0x266b0001},
    589	{0xc78, 0x256c0001}, {0xc78, 0x246d0001},
    590	{0xc78, 0x236e0001}, {0xc78, 0x226f0001},
    591	{0xc78, 0x21700001}, {0xc78, 0x20710001},
    592	{0xc78, 0x06720001}, {0xc78, 0x05730001},
    593	{0xc78, 0x04740001}, {0xc78, 0x03750001},
    594	{0xc78, 0x02760001}, {0xc78, 0x01770001},
    595	{0xc78, 0x00780001}, {0xc78, 0x00790001},
    596	{0xc78, 0x007a0001}, {0xc78, 0x007b0001},
    597	{0xc78, 0x007c0001}, {0xc78, 0x007d0001},
    598	{0xc78, 0x007e0001}, {0xc78, 0x007f0001},
    599	{0xc78, 0x3800001e}, {0xc78, 0x3801001e},
    600	{0xc78, 0x3802001e}, {0xc78, 0x3803001e},
    601	{0xc78, 0x3804001e}, {0xc78, 0x3805001e},
    602	{0xc78, 0x3806001e}, {0xc78, 0x3807001e},
    603	{0xc78, 0x3808001e}, {0xc78, 0x3c09001e},
    604	{0xc78, 0x3e0a001e}, {0xc78, 0x400b001e},
    605	{0xc78, 0x440c001e}, {0xc78, 0x480d001e},
    606	{0xc78, 0x4c0e001e}, {0xc78, 0x500f001e},
    607	{0xc78, 0x5210001e}, {0xc78, 0x5611001e},
    608	{0xc78, 0x5a12001e}, {0xc78, 0x5e13001e},
    609	{0xc78, 0x6014001e}, {0xc78, 0x6015001e},
    610	{0xc78, 0x6016001e}, {0xc78, 0x6217001e},
    611	{0xc78, 0x6218001e}, {0xc78, 0x6219001e},
    612	{0xc78, 0x621a001e}, {0xc78, 0x621b001e},
    613	{0xc78, 0x621c001e}, {0xc78, 0x621d001e},
    614	{0xc78, 0x621e001e}, {0xc78, 0x621f001e},
    615	{0xffff, 0xffffffff}
    616};
    617
    618static struct rtl8xxxu_rfregs rtl8xxxu_rfregs[] = {
    619	{	/* RF_A */
    620		.hssiparm1 = REG_FPGA0_XA_HSSI_PARM1,
    621		.hssiparm2 = REG_FPGA0_XA_HSSI_PARM2,
    622		.lssiparm = REG_FPGA0_XA_LSSI_PARM,
    623		.hspiread = REG_HSPI_XA_READBACK,
    624		.lssiread = REG_FPGA0_XA_LSSI_READBACK,
    625		.rf_sw_ctrl = REG_FPGA0_XA_RF_SW_CTRL,
    626	},
    627	{	/* RF_B */
    628		.hssiparm1 = REG_FPGA0_XB_HSSI_PARM1,
    629		.hssiparm2 = REG_FPGA0_XB_HSSI_PARM2,
    630		.lssiparm = REG_FPGA0_XB_LSSI_PARM,
    631		.hspiread = REG_HSPI_XB_READBACK,
    632		.lssiread = REG_FPGA0_XB_LSSI_READBACK,
    633		.rf_sw_ctrl = REG_FPGA0_XB_RF_SW_CTRL,
    634	},
    635};
    636
    637const u32 rtl8xxxu_iqk_phy_iq_bb_reg[RTL8XXXU_BB_REGS] = {
    638	REG_OFDM0_XA_RX_IQ_IMBALANCE,
    639	REG_OFDM0_XB_RX_IQ_IMBALANCE,
    640	REG_OFDM0_ENERGY_CCA_THRES,
    641	REG_OFDM0_AGCR_SSI_TABLE,
    642	REG_OFDM0_XA_TX_IQ_IMBALANCE,
    643	REG_OFDM0_XB_TX_IQ_IMBALANCE,
    644	REG_OFDM0_XC_TX_AFE,
    645	REG_OFDM0_XD_TX_AFE,
    646	REG_OFDM0_RX_IQ_EXT_ANTA
    647};
    648
    649u8 rtl8xxxu_read8(struct rtl8xxxu_priv *priv, u16 addr)
    650{
    651	struct usb_device *udev = priv->udev;
    652	int len;
    653	u8 data;
    654
    655	mutex_lock(&priv->usb_buf_mutex);
    656	len = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
    657			      REALTEK_USB_CMD_REQ, REALTEK_USB_READ,
    658			      addr, 0, &priv->usb_buf.val8, sizeof(u8),
    659			      RTW_USB_CONTROL_MSG_TIMEOUT);
    660	data = priv->usb_buf.val8;
    661	mutex_unlock(&priv->usb_buf_mutex);
    662
    663	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_REG_READ)
    664		dev_info(&udev->dev, "%s(%04x)   = 0x%02x, len %i\n",
    665			 __func__, addr, data, len);
    666	return data;
    667}
    668
    669u16 rtl8xxxu_read16(struct rtl8xxxu_priv *priv, u16 addr)
    670{
    671	struct usb_device *udev = priv->udev;
    672	int len;
    673	u16 data;
    674
    675	mutex_lock(&priv->usb_buf_mutex);
    676	len = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
    677			      REALTEK_USB_CMD_REQ, REALTEK_USB_READ,
    678			      addr, 0, &priv->usb_buf.val16, sizeof(u16),
    679			      RTW_USB_CONTROL_MSG_TIMEOUT);
    680	data = le16_to_cpu(priv->usb_buf.val16);
    681	mutex_unlock(&priv->usb_buf_mutex);
    682
    683	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_REG_READ)
    684		dev_info(&udev->dev, "%s(%04x)  = 0x%04x, len %i\n",
    685			 __func__, addr, data, len);
    686	return data;
    687}
    688
    689u32 rtl8xxxu_read32(struct rtl8xxxu_priv *priv, u16 addr)
    690{
    691	struct usb_device *udev = priv->udev;
    692	int len;
    693	u32 data;
    694
    695	mutex_lock(&priv->usb_buf_mutex);
    696	len = usb_control_msg(udev, usb_rcvctrlpipe(udev, 0),
    697			      REALTEK_USB_CMD_REQ, REALTEK_USB_READ,
    698			      addr, 0, &priv->usb_buf.val32, sizeof(u32),
    699			      RTW_USB_CONTROL_MSG_TIMEOUT);
    700	data = le32_to_cpu(priv->usb_buf.val32);
    701	mutex_unlock(&priv->usb_buf_mutex);
    702
    703	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_REG_READ)
    704		dev_info(&udev->dev, "%s(%04x)  = 0x%08x, len %i\n",
    705			 __func__, addr, data, len);
    706	return data;
    707}
    708
    709int rtl8xxxu_write8(struct rtl8xxxu_priv *priv, u16 addr, u8 val)
    710{
    711	struct usb_device *udev = priv->udev;
    712	int ret;
    713
    714	mutex_lock(&priv->usb_buf_mutex);
    715	priv->usb_buf.val8 = val;
    716	ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
    717			      REALTEK_USB_CMD_REQ, REALTEK_USB_WRITE,
    718			      addr, 0, &priv->usb_buf.val8, sizeof(u8),
    719			      RTW_USB_CONTROL_MSG_TIMEOUT);
    720
    721	mutex_unlock(&priv->usb_buf_mutex);
    722
    723	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_REG_WRITE)
    724		dev_info(&udev->dev, "%s(%04x) = 0x%02x\n",
    725			 __func__, addr, val);
    726	return ret;
    727}
    728
    729int rtl8xxxu_write16(struct rtl8xxxu_priv *priv, u16 addr, u16 val)
    730{
    731	struct usb_device *udev = priv->udev;
    732	int ret;
    733
    734	mutex_lock(&priv->usb_buf_mutex);
    735	priv->usb_buf.val16 = cpu_to_le16(val);
    736	ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
    737			      REALTEK_USB_CMD_REQ, REALTEK_USB_WRITE,
    738			      addr, 0, &priv->usb_buf.val16, sizeof(u16),
    739			      RTW_USB_CONTROL_MSG_TIMEOUT);
    740	mutex_unlock(&priv->usb_buf_mutex);
    741
    742	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_REG_WRITE)
    743		dev_info(&udev->dev, "%s(%04x) = 0x%04x\n",
    744			 __func__, addr, val);
    745	return ret;
    746}
    747
    748int rtl8xxxu_write32(struct rtl8xxxu_priv *priv, u16 addr, u32 val)
    749{
    750	struct usb_device *udev = priv->udev;
    751	int ret;
    752
    753	mutex_lock(&priv->usb_buf_mutex);
    754	priv->usb_buf.val32 = cpu_to_le32(val);
    755	ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
    756			      REALTEK_USB_CMD_REQ, REALTEK_USB_WRITE,
    757			      addr, 0, &priv->usb_buf.val32, sizeof(u32),
    758			      RTW_USB_CONTROL_MSG_TIMEOUT);
    759	mutex_unlock(&priv->usb_buf_mutex);
    760
    761	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_REG_WRITE)
    762		dev_info(&udev->dev, "%s(%04x) = 0x%08x\n",
    763			 __func__, addr, val);
    764	return ret;
    765}
    766
    767static int
    768rtl8xxxu_writeN(struct rtl8xxxu_priv *priv, u16 addr, u8 *buf, u16 len)
    769{
    770	struct usb_device *udev = priv->udev;
    771	int blocksize = priv->fops->writeN_block_size;
    772	int ret, i, count, remainder;
    773
    774	count = len / blocksize;
    775	remainder = len % blocksize;
    776
    777	for (i = 0; i < count; i++) {
    778		ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
    779				      REALTEK_USB_CMD_REQ, REALTEK_USB_WRITE,
    780				      addr, 0, buf, blocksize,
    781				      RTW_USB_CONTROL_MSG_TIMEOUT);
    782		if (ret != blocksize)
    783			goto write_error;
    784
    785		addr += blocksize;
    786		buf += blocksize;
    787	}
    788
    789	if (remainder) {
    790		ret = usb_control_msg(udev, usb_sndctrlpipe(udev, 0),
    791				      REALTEK_USB_CMD_REQ, REALTEK_USB_WRITE,
    792				      addr, 0, buf, remainder,
    793				      RTW_USB_CONTROL_MSG_TIMEOUT);
    794		if (ret != remainder)
    795			goto write_error;
    796	}
    797
    798	return len;
    799
    800write_error:
    801	dev_info(&udev->dev,
    802		 "%s: Failed to write block at addr: %04x size: %04x\n",
    803		 __func__, addr, blocksize);
    804	return -EAGAIN;
    805}
    806
    807u32 rtl8xxxu_read_rfreg(struct rtl8xxxu_priv *priv,
    808			enum rtl8xxxu_rfpath path, u8 reg)
    809{
    810	u32 hssia, val32, retval;
    811
    812	hssia = rtl8xxxu_read32(priv, REG_FPGA0_XA_HSSI_PARM2);
    813	if (path != RF_A)
    814		val32 = rtl8xxxu_read32(priv, rtl8xxxu_rfregs[path].hssiparm2);
    815	else
    816		val32 = hssia;
    817
    818	val32 &= ~FPGA0_HSSI_PARM2_ADDR_MASK;
    819	val32 |= (reg << FPGA0_HSSI_PARM2_ADDR_SHIFT);
    820	val32 |= FPGA0_HSSI_PARM2_EDGE_READ;
    821	hssia &= ~FPGA0_HSSI_PARM2_EDGE_READ;
    822	rtl8xxxu_write32(priv, REG_FPGA0_XA_HSSI_PARM2, hssia);
    823
    824	udelay(10);
    825
    826	rtl8xxxu_write32(priv, rtl8xxxu_rfregs[path].hssiparm2, val32);
    827	udelay(100);
    828
    829	hssia |= FPGA0_HSSI_PARM2_EDGE_READ;
    830	rtl8xxxu_write32(priv, REG_FPGA0_XA_HSSI_PARM2, hssia);
    831	udelay(10);
    832
    833	val32 = rtl8xxxu_read32(priv, rtl8xxxu_rfregs[path].hssiparm1);
    834	if (val32 & FPGA0_HSSI_PARM1_PI)
    835		retval = rtl8xxxu_read32(priv, rtl8xxxu_rfregs[path].hspiread);
    836	else
    837		retval = rtl8xxxu_read32(priv, rtl8xxxu_rfregs[path].lssiread);
    838
    839	retval &= 0xfffff;
    840
    841	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_RFREG_READ)
    842		dev_info(&priv->udev->dev, "%s(%02x) = 0x%06x\n",
    843			 __func__, reg, retval);
    844	return retval;
    845}
    846
    847/*
    848 * The RTL8723BU driver indicates that registers 0xb2 and 0xb6 can
    849 * have write issues in high temperature conditions. We may have to
    850 * retry writing them.
    851 */
    852int rtl8xxxu_write_rfreg(struct rtl8xxxu_priv *priv,
    853			 enum rtl8xxxu_rfpath path, u8 reg, u32 data)
    854{
    855	int ret, retval;
    856	u32 dataaddr, val32;
    857
    858	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_RFREG_WRITE)
    859		dev_info(&priv->udev->dev, "%s(%02x) = 0x%06x\n",
    860			 __func__, reg, data);
    861
    862	data &= FPGA0_LSSI_PARM_DATA_MASK;
    863	dataaddr = (reg << FPGA0_LSSI_PARM_ADDR_SHIFT) | data;
    864
    865	if (priv->rtl_chip == RTL8192E) {
    866		val32 = rtl8xxxu_read32(priv, REG_FPGA0_POWER_SAVE);
    867		val32 &= ~0x20000;
    868		rtl8xxxu_write32(priv, REG_FPGA0_POWER_SAVE, val32);
    869	}
    870
    871	/* Use XB for path B */
    872	ret = rtl8xxxu_write32(priv, rtl8xxxu_rfregs[path].lssiparm, dataaddr);
    873	if (ret != sizeof(dataaddr))
    874		retval = -EIO;
    875	else
    876		retval = 0;
    877
    878	udelay(1);
    879
    880	if (priv->rtl_chip == RTL8192E) {
    881		val32 = rtl8xxxu_read32(priv, REG_FPGA0_POWER_SAVE);
    882		val32 |= 0x20000;
    883		rtl8xxxu_write32(priv, REG_FPGA0_POWER_SAVE, val32);
    884	}
    885
    886	return retval;
    887}
    888
    889static int
    890rtl8xxxu_gen1_h2c_cmd(struct rtl8xxxu_priv *priv, struct h2c_cmd *h2c, int len)
    891{
    892	struct device *dev = &priv->udev->dev;
    893	int mbox_nr, retry, retval = 0;
    894	int mbox_reg, mbox_ext_reg;
    895	u8 val8;
    896
    897	mutex_lock(&priv->h2c_mutex);
    898
    899	mbox_nr = priv->next_mbox;
    900	mbox_reg = REG_HMBOX_0 + (mbox_nr * 4);
    901	mbox_ext_reg = REG_HMBOX_EXT_0 + (mbox_nr * 2);
    902
    903	/*
    904	 * MBOX ready?
    905	 */
    906	retry = 100;
    907	do {
    908		val8 = rtl8xxxu_read8(priv, REG_HMTFR);
    909		if (!(val8 & BIT(mbox_nr)))
    910			break;
    911	} while (retry--);
    912
    913	if (!retry) {
    914		dev_info(dev, "%s: Mailbox busy\n", __func__);
    915		retval = -EBUSY;
    916		goto error;
    917	}
    918
    919	/*
    920	 * Need to swap as it's being swapped again by rtl8xxxu_write16/32()
    921	 */
    922	if (len > sizeof(u32)) {
    923		rtl8xxxu_write16(priv, mbox_ext_reg, le16_to_cpu(h2c->raw.ext));
    924		if (rtl8xxxu_debug & RTL8XXXU_DEBUG_H2C)
    925			dev_info(dev, "H2C_EXT %04x\n",
    926				 le16_to_cpu(h2c->raw.ext));
    927	}
    928	rtl8xxxu_write32(priv, mbox_reg, le32_to_cpu(h2c->raw.data));
    929	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_H2C)
    930		dev_info(dev, "H2C %08x\n", le32_to_cpu(h2c->raw.data));
    931
    932	priv->next_mbox = (mbox_nr + 1) % H2C_MAX_MBOX;
    933
    934error:
    935	mutex_unlock(&priv->h2c_mutex);
    936	return retval;
    937}
    938
    939int
    940rtl8xxxu_gen2_h2c_cmd(struct rtl8xxxu_priv *priv, struct h2c_cmd *h2c, int len)
    941{
    942	struct device *dev = &priv->udev->dev;
    943	int mbox_nr, retry, retval = 0;
    944	int mbox_reg, mbox_ext_reg;
    945	u8 val8;
    946
    947	mutex_lock(&priv->h2c_mutex);
    948
    949	mbox_nr = priv->next_mbox;
    950	mbox_reg = REG_HMBOX_0 + (mbox_nr * 4);
    951	mbox_ext_reg = REG_HMBOX_EXT0_8723B + (mbox_nr * 4);
    952
    953	/*
    954	 * MBOX ready?
    955	 */
    956	retry = 100;
    957	do {
    958		val8 = rtl8xxxu_read8(priv, REG_HMTFR);
    959		if (!(val8 & BIT(mbox_nr)))
    960			break;
    961	} while (retry--);
    962
    963	if (!retry) {
    964		dev_info(dev, "%s: Mailbox busy\n", __func__);
    965		retval = -EBUSY;
    966		goto error;
    967	}
    968
    969	/*
    970	 * Need to swap as it's being swapped again by rtl8xxxu_write16/32()
    971	 */
    972	if (len > sizeof(u32)) {
    973		rtl8xxxu_write32(priv, mbox_ext_reg,
    974				 le32_to_cpu(h2c->raw_wide.ext));
    975		if (rtl8xxxu_debug & RTL8XXXU_DEBUG_H2C)
    976			dev_info(dev, "H2C_EXT %08x\n",
    977				 le32_to_cpu(h2c->raw_wide.ext));
    978	}
    979	rtl8xxxu_write32(priv, mbox_reg, le32_to_cpu(h2c->raw.data));
    980	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_H2C)
    981		dev_info(dev, "H2C %08x\n", le32_to_cpu(h2c->raw.data));
    982
    983	priv->next_mbox = (mbox_nr + 1) % H2C_MAX_MBOX;
    984
    985error:
    986	mutex_unlock(&priv->h2c_mutex);
    987	return retval;
    988}
    989
    990void rtl8xxxu_gen1_enable_rf(struct rtl8xxxu_priv *priv)
    991{
    992	u8 val8;
    993	u32 val32;
    994
    995	val8 = rtl8xxxu_read8(priv, REG_SPS0_CTRL);
    996	val8 |= BIT(0) | BIT(3);
    997	rtl8xxxu_write8(priv, REG_SPS0_CTRL, val8);
    998
    999	val32 = rtl8xxxu_read32(priv, REG_FPGA0_XAB_RF_PARM);
   1000	val32 &= ~(BIT(4) | BIT(5));
   1001	val32 |= BIT(3);
   1002	if (priv->rf_paths == 2) {
   1003		val32 &= ~(BIT(20) | BIT(21));
   1004		val32 |= BIT(19);
   1005	}
   1006	rtl8xxxu_write32(priv, REG_FPGA0_XAB_RF_PARM, val32);
   1007
   1008	val32 = rtl8xxxu_read32(priv, REG_OFDM0_TRX_PATH_ENABLE);
   1009	val32 &= ~OFDM_RF_PATH_TX_MASK;
   1010	if (priv->tx_paths == 2)
   1011		val32 |= OFDM_RF_PATH_TX_A | OFDM_RF_PATH_TX_B;
   1012	else if (priv->rtl_chip == RTL8192C || priv->rtl_chip == RTL8191C)
   1013		val32 |= OFDM_RF_PATH_TX_B;
   1014	else
   1015		val32 |= OFDM_RF_PATH_TX_A;
   1016	rtl8xxxu_write32(priv, REG_OFDM0_TRX_PATH_ENABLE, val32);
   1017
   1018	val32 = rtl8xxxu_read32(priv, REG_FPGA0_RF_MODE);
   1019	val32 &= ~FPGA_RF_MODE_JAPAN;
   1020	rtl8xxxu_write32(priv, REG_FPGA0_RF_MODE, val32);
   1021
   1022	if (priv->rf_paths == 2)
   1023		rtl8xxxu_write32(priv, REG_RX_WAIT_CCA, 0x63db25a0);
   1024	else
   1025		rtl8xxxu_write32(priv, REG_RX_WAIT_CCA, 0x631b25a0);
   1026
   1027	rtl8xxxu_write_rfreg(priv, RF_A, RF6052_REG_AC, 0x32d95);
   1028	if (priv->rf_paths == 2)
   1029		rtl8xxxu_write_rfreg(priv, RF_B, RF6052_REG_AC, 0x32d95);
   1030
   1031	rtl8xxxu_write8(priv, REG_TXPAUSE, 0x00);
   1032}
   1033
   1034void rtl8xxxu_gen1_disable_rf(struct rtl8xxxu_priv *priv)
   1035{
   1036	u8 sps0;
   1037	u32 val32;
   1038
   1039	sps0 = rtl8xxxu_read8(priv, REG_SPS0_CTRL);
   1040
   1041	/* RF RX code for preamble power saving */
   1042	val32 = rtl8xxxu_read32(priv, REG_FPGA0_XAB_RF_PARM);
   1043	val32 &= ~(BIT(3) | BIT(4) | BIT(5));
   1044	if (priv->rf_paths == 2)
   1045		val32 &= ~(BIT(19) | BIT(20) | BIT(21));
   1046	rtl8xxxu_write32(priv, REG_FPGA0_XAB_RF_PARM, val32);
   1047
   1048	/* Disable TX for four paths */
   1049	val32 = rtl8xxxu_read32(priv, REG_OFDM0_TRX_PATH_ENABLE);
   1050	val32 &= ~OFDM_RF_PATH_TX_MASK;
   1051	rtl8xxxu_write32(priv, REG_OFDM0_TRX_PATH_ENABLE, val32);
   1052
   1053	/* Enable power saving */
   1054	val32 = rtl8xxxu_read32(priv, REG_FPGA0_RF_MODE);
   1055	val32 |= FPGA_RF_MODE_JAPAN;
   1056	rtl8xxxu_write32(priv, REG_FPGA0_RF_MODE, val32);
   1057
   1058	/* AFE control register to power down bits [30:22] */
   1059	if (priv->rf_paths == 2)
   1060		rtl8xxxu_write32(priv, REG_RX_WAIT_CCA, 0x00db25a0);
   1061	else
   1062		rtl8xxxu_write32(priv, REG_RX_WAIT_CCA, 0x001b25a0);
   1063
   1064	/* Power down RF module */
   1065	rtl8xxxu_write_rfreg(priv, RF_A, RF6052_REG_AC, 0);
   1066	if (priv->rf_paths == 2)
   1067		rtl8xxxu_write_rfreg(priv, RF_B, RF6052_REG_AC, 0);
   1068
   1069	sps0 &= ~(BIT(0) | BIT(3));
   1070	rtl8xxxu_write8(priv, REG_SPS0_CTRL, sps0);
   1071}
   1072
   1073static void rtl8xxxu_stop_tx_beacon(struct rtl8xxxu_priv *priv)
   1074{
   1075	u8 val8;
   1076
   1077	val8 = rtl8xxxu_read8(priv, REG_FWHW_TXQ_CTRL + 2);
   1078	val8 &= ~BIT(6);
   1079	rtl8xxxu_write8(priv, REG_FWHW_TXQ_CTRL + 2, val8);
   1080
   1081	rtl8xxxu_write8(priv, REG_TBTT_PROHIBIT + 1, 0x64);
   1082	val8 = rtl8xxxu_read8(priv, REG_TBTT_PROHIBIT + 2);
   1083	val8 &= ~BIT(0);
   1084	rtl8xxxu_write8(priv, REG_TBTT_PROHIBIT + 2, val8);
   1085}
   1086
   1087
   1088/*
   1089 * The rtl8723a has 3 channel groups for it's efuse settings. It only
   1090 * supports the 2.4GHz band, so channels 1 - 14:
   1091 *  group 0: channels 1 - 3
   1092 *  group 1: channels 4 - 9
   1093 *  group 2: channels 10 - 14
   1094 *
   1095 * Note: We index from 0 in the code
   1096 */
   1097static int rtl8xxxu_gen1_channel_to_group(int channel)
   1098{
   1099	int group;
   1100
   1101	if (channel < 4)
   1102		group = 0;
   1103	else if (channel < 10)
   1104		group = 1;
   1105	else
   1106		group = 2;
   1107
   1108	return group;
   1109}
   1110
   1111/*
   1112 * Valid for rtl8723bu and rtl8192eu
   1113 */
   1114int rtl8xxxu_gen2_channel_to_group(int channel)
   1115{
   1116	int group;
   1117
   1118	if (channel < 3)
   1119		group = 0;
   1120	else if (channel < 6)
   1121		group = 1;
   1122	else if (channel < 9)
   1123		group = 2;
   1124	else if (channel < 12)
   1125		group = 3;
   1126	else
   1127		group = 4;
   1128
   1129	return group;
   1130}
   1131
   1132void rtl8xxxu_gen1_config_channel(struct ieee80211_hw *hw)
   1133{
   1134	struct rtl8xxxu_priv *priv = hw->priv;
   1135	u32 val32, rsr;
   1136	u8 val8, opmode;
   1137	bool ht = true;
   1138	int sec_ch_above, channel;
   1139	int i;
   1140
   1141	opmode = rtl8xxxu_read8(priv, REG_BW_OPMODE);
   1142	rsr = rtl8xxxu_read32(priv, REG_RESPONSE_RATE_SET);
   1143	channel = hw->conf.chandef.chan->hw_value;
   1144
   1145	switch (hw->conf.chandef.width) {
   1146	case NL80211_CHAN_WIDTH_20_NOHT:
   1147		ht = false;
   1148		fallthrough;
   1149	case NL80211_CHAN_WIDTH_20:
   1150		opmode |= BW_OPMODE_20MHZ;
   1151		rtl8xxxu_write8(priv, REG_BW_OPMODE, opmode);
   1152
   1153		val32 = rtl8xxxu_read32(priv, REG_FPGA0_RF_MODE);
   1154		val32 &= ~FPGA_RF_MODE;
   1155		rtl8xxxu_write32(priv, REG_FPGA0_RF_MODE, val32);
   1156
   1157		val32 = rtl8xxxu_read32(priv, REG_FPGA1_RF_MODE);
   1158		val32 &= ~FPGA_RF_MODE;
   1159		rtl8xxxu_write32(priv, REG_FPGA1_RF_MODE, val32);
   1160
   1161		val32 = rtl8xxxu_read32(priv, REG_FPGA0_ANALOG2);
   1162		val32 |= FPGA0_ANALOG2_20MHZ;
   1163		rtl8xxxu_write32(priv, REG_FPGA0_ANALOG2, val32);
   1164		break;
   1165	case NL80211_CHAN_WIDTH_40:
   1166		if (hw->conf.chandef.center_freq1 >
   1167		    hw->conf.chandef.chan->center_freq) {
   1168			sec_ch_above = 1;
   1169			channel += 2;
   1170		} else {
   1171			sec_ch_above = 0;
   1172			channel -= 2;
   1173		}
   1174
   1175		opmode &= ~BW_OPMODE_20MHZ;
   1176		rtl8xxxu_write8(priv, REG_BW_OPMODE, opmode);
   1177		rsr &= ~RSR_RSC_BANDWIDTH_40M;
   1178		if (sec_ch_above)
   1179			rsr |= RSR_RSC_UPPER_SUB_CHANNEL;
   1180		else
   1181			rsr |= RSR_RSC_LOWER_SUB_CHANNEL;
   1182		rtl8xxxu_write32(priv, REG_RESPONSE_RATE_SET, rsr);
   1183
   1184		val32 = rtl8xxxu_read32(priv, REG_FPGA0_RF_MODE);
   1185		val32 |= FPGA_RF_MODE;
   1186		rtl8xxxu_write32(priv, REG_FPGA0_RF_MODE, val32);
   1187
   1188		val32 = rtl8xxxu_read32(priv, REG_FPGA1_RF_MODE);
   1189		val32 |= FPGA_RF_MODE;
   1190		rtl8xxxu_write32(priv, REG_FPGA1_RF_MODE, val32);
   1191
   1192		/*
   1193		 * Set Control channel to upper or lower. These settings
   1194		 * are required only for 40MHz
   1195		 */
   1196		val32 = rtl8xxxu_read32(priv, REG_CCK0_SYSTEM);
   1197		val32 &= ~CCK0_SIDEBAND;
   1198		if (!sec_ch_above)
   1199			val32 |= CCK0_SIDEBAND;
   1200		rtl8xxxu_write32(priv, REG_CCK0_SYSTEM, val32);
   1201
   1202		val32 = rtl8xxxu_read32(priv, REG_OFDM1_LSTF);
   1203		val32 &= ~OFDM_LSTF_PRIME_CH_MASK; /* 0xc00 */
   1204		if (sec_ch_above)
   1205			val32 |= OFDM_LSTF_PRIME_CH_LOW;
   1206		else
   1207			val32 |= OFDM_LSTF_PRIME_CH_HIGH;
   1208		rtl8xxxu_write32(priv, REG_OFDM1_LSTF, val32);
   1209
   1210		val32 = rtl8xxxu_read32(priv, REG_FPGA0_ANALOG2);
   1211		val32 &= ~FPGA0_ANALOG2_20MHZ;
   1212		rtl8xxxu_write32(priv, REG_FPGA0_ANALOG2, val32);
   1213
   1214		val32 = rtl8xxxu_read32(priv, REG_FPGA0_POWER_SAVE);
   1215		val32 &= ~(FPGA0_PS_LOWER_CHANNEL | FPGA0_PS_UPPER_CHANNEL);
   1216		if (sec_ch_above)
   1217			val32 |= FPGA0_PS_UPPER_CHANNEL;
   1218		else
   1219			val32 |= FPGA0_PS_LOWER_CHANNEL;
   1220		rtl8xxxu_write32(priv, REG_FPGA0_POWER_SAVE, val32);
   1221		break;
   1222
   1223	default:
   1224		break;
   1225	}
   1226
   1227	for (i = RF_A; i < priv->rf_paths; i++) {
   1228		val32 = rtl8xxxu_read_rfreg(priv, i, RF6052_REG_MODE_AG);
   1229		val32 &= ~MODE_AG_CHANNEL_MASK;
   1230		val32 |= channel;
   1231		rtl8xxxu_write_rfreg(priv, i, RF6052_REG_MODE_AG, val32);
   1232	}
   1233
   1234	if (ht)
   1235		val8 = 0x0e;
   1236	else
   1237		val8 = 0x0a;
   1238
   1239	rtl8xxxu_write8(priv, REG_SIFS_CCK + 1, val8);
   1240	rtl8xxxu_write8(priv, REG_SIFS_OFDM + 1, val8);
   1241
   1242	rtl8xxxu_write16(priv, REG_R2T_SIFS, 0x0808);
   1243	rtl8xxxu_write16(priv, REG_T2T_SIFS, 0x0a0a);
   1244
   1245	for (i = RF_A; i < priv->rf_paths; i++) {
   1246		val32 = rtl8xxxu_read_rfreg(priv, i, RF6052_REG_MODE_AG);
   1247		if (hw->conf.chandef.width == NL80211_CHAN_WIDTH_40)
   1248			val32 &= ~MODE_AG_CHANNEL_20MHZ;
   1249		else
   1250			val32 |= MODE_AG_CHANNEL_20MHZ;
   1251		rtl8xxxu_write_rfreg(priv, i, RF6052_REG_MODE_AG, val32);
   1252	}
   1253}
   1254
   1255void rtl8xxxu_gen2_config_channel(struct ieee80211_hw *hw)
   1256{
   1257	struct rtl8xxxu_priv *priv = hw->priv;
   1258	u32 val32;
   1259	u8 val8, subchannel;
   1260	u16 rf_mode_bw;
   1261	bool ht = true;
   1262	int sec_ch_above, channel;
   1263	int i;
   1264
   1265	rf_mode_bw = rtl8xxxu_read16(priv, REG_WMAC_TRXPTCL_CTL);
   1266	rf_mode_bw &= ~WMAC_TRXPTCL_CTL_BW_MASK;
   1267	channel = hw->conf.chandef.chan->hw_value;
   1268
   1269/* Hack */
   1270	subchannel = 0;
   1271
   1272	switch (hw->conf.chandef.width) {
   1273	case NL80211_CHAN_WIDTH_20_NOHT:
   1274		ht = false;
   1275		fallthrough;
   1276	case NL80211_CHAN_WIDTH_20:
   1277		rf_mode_bw |= WMAC_TRXPTCL_CTL_BW_20;
   1278		subchannel = 0;
   1279
   1280		val32 = rtl8xxxu_read32(priv, REG_FPGA0_RF_MODE);
   1281		val32 &= ~FPGA_RF_MODE;
   1282		rtl8xxxu_write32(priv, REG_FPGA0_RF_MODE, val32);
   1283
   1284		val32 = rtl8xxxu_read32(priv, REG_FPGA1_RF_MODE);
   1285		val32 &= ~FPGA_RF_MODE;
   1286		rtl8xxxu_write32(priv, REG_FPGA1_RF_MODE, val32);
   1287
   1288		val32 = rtl8xxxu_read32(priv, REG_OFDM0_TX_PSDO_NOISE_WEIGHT);
   1289		val32 &= ~(BIT(30) | BIT(31));
   1290		rtl8xxxu_write32(priv, REG_OFDM0_TX_PSDO_NOISE_WEIGHT, val32);
   1291
   1292		break;
   1293	case NL80211_CHAN_WIDTH_40:
   1294		rf_mode_bw |= WMAC_TRXPTCL_CTL_BW_40;
   1295
   1296		if (hw->conf.chandef.center_freq1 >
   1297		    hw->conf.chandef.chan->center_freq) {
   1298			sec_ch_above = 1;
   1299			channel += 2;
   1300		} else {
   1301			sec_ch_above = 0;
   1302			channel -= 2;
   1303		}
   1304
   1305		val32 = rtl8xxxu_read32(priv, REG_FPGA0_RF_MODE);
   1306		val32 |= FPGA_RF_MODE;
   1307		rtl8xxxu_write32(priv, REG_FPGA0_RF_MODE, val32);
   1308
   1309		val32 = rtl8xxxu_read32(priv, REG_FPGA1_RF_MODE);
   1310		val32 |= FPGA_RF_MODE;
   1311		rtl8xxxu_write32(priv, REG_FPGA1_RF_MODE, val32);
   1312
   1313		/*
   1314		 * Set Control channel to upper or lower. These settings
   1315		 * are required only for 40MHz
   1316		 */
   1317		val32 = rtl8xxxu_read32(priv, REG_CCK0_SYSTEM);
   1318		val32 &= ~CCK0_SIDEBAND;
   1319		if (!sec_ch_above)
   1320			val32 |= CCK0_SIDEBAND;
   1321		rtl8xxxu_write32(priv, REG_CCK0_SYSTEM, val32);
   1322
   1323		val32 = rtl8xxxu_read32(priv, REG_OFDM1_LSTF);
   1324		val32 &= ~OFDM_LSTF_PRIME_CH_MASK; /* 0xc00 */
   1325		if (sec_ch_above)
   1326			val32 |= OFDM_LSTF_PRIME_CH_LOW;
   1327		else
   1328			val32 |= OFDM_LSTF_PRIME_CH_HIGH;
   1329		rtl8xxxu_write32(priv, REG_OFDM1_LSTF, val32);
   1330
   1331		val32 = rtl8xxxu_read32(priv, REG_FPGA0_POWER_SAVE);
   1332		val32 &= ~(FPGA0_PS_LOWER_CHANNEL | FPGA0_PS_UPPER_CHANNEL);
   1333		if (sec_ch_above)
   1334			val32 |= FPGA0_PS_UPPER_CHANNEL;
   1335		else
   1336			val32 |= FPGA0_PS_LOWER_CHANNEL;
   1337		rtl8xxxu_write32(priv, REG_FPGA0_POWER_SAVE, val32);
   1338		break;
   1339	case NL80211_CHAN_WIDTH_80:
   1340		rf_mode_bw |= WMAC_TRXPTCL_CTL_BW_80;
   1341		break;
   1342	default:
   1343		break;
   1344	}
   1345
   1346	for (i = RF_A; i < priv->rf_paths; i++) {
   1347		val32 = rtl8xxxu_read_rfreg(priv, i, RF6052_REG_MODE_AG);
   1348		val32 &= ~MODE_AG_CHANNEL_MASK;
   1349		val32 |= channel;
   1350		rtl8xxxu_write_rfreg(priv, i, RF6052_REG_MODE_AG, val32);
   1351	}
   1352
   1353	rtl8xxxu_write16(priv, REG_WMAC_TRXPTCL_CTL, rf_mode_bw);
   1354	rtl8xxxu_write8(priv, REG_DATA_SUBCHANNEL, subchannel);
   1355
   1356	if (ht)
   1357		val8 = 0x0e;
   1358	else
   1359		val8 = 0x0a;
   1360
   1361	rtl8xxxu_write8(priv, REG_SIFS_CCK + 1, val8);
   1362	rtl8xxxu_write8(priv, REG_SIFS_OFDM + 1, val8);
   1363
   1364	rtl8xxxu_write16(priv, REG_R2T_SIFS, 0x0808);
   1365	rtl8xxxu_write16(priv, REG_T2T_SIFS, 0x0a0a);
   1366
   1367	for (i = RF_A; i < priv->rf_paths; i++) {
   1368		val32 = rtl8xxxu_read_rfreg(priv, i, RF6052_REG_MODE_AG);
   1369		val32 &= ~MODE_AG_BW_MASK;
   1370		switch(hw->conf.chandef.width) {
   1371		case NL80211_CHAN_WIDTH_80:
   1372			val32 |= MODE_AG_BW_80MHZ_8723B;
   1373			break;
   1374		case NL80211_CHAN_WIDTH_40:
   1375			val32 |= MODE_AG_BW_40MHZ_8723B;
   1376			break;
   1377		default:
   1378			val32 |= MODE_AG_BW_20MHZ_8723B;
   1379			break;
   1380		}
   1381		rtl8xxxu_write_rfreg(priv, i, RF6052_REG_MODE_AG, val32);
   1382	}
   1383}
   1384
   1385void
   1386rtl8xxxu_gen1_set_tx_power(struct rtl8xxxu_priv *priv, int channel, bool ht40)
   1387{
   1388	struct rtl8xxxu_power_base *power_base = priv->power_base;
   1389	u8 cck[RTL8723A_MAX_RF_PATHS], ofdm[RTL8723A_MAX_RF_PATHS];
   1390	u8 ofdmbase[RTL8723A_MAX_RF_PATHS], mcsbase[RTL8723A_MAX_RF_PATHS];
   1391	u32 val32, ofdm_a, ofdm_b, mcs_a, mcs_b;
   1392	u8 val8;
   1393	int group, i;
   1394
   1395	group = rtl8xxxu_gen1_channel_to_group(channel);
   1396
   1397	cck[0] = priv->cck_tx_power_index_A[group] - 1;
   1398	cck[1] = priv->cck_tx_power_index_B[group] - 1;
   1399
   1400	if (priv->hi_pa) {
   1401		if (cck[0] > 0x20)
   1402			cck[0] = 0x20;
   1403		if (cck[1] > 0x20)
   1404			cck[1] = 0x20;
   1405	}
   1406
   1407	ofdm[0] = priv->ht40_1s_tx_power_index_A[group];
   1408	ofdm[1] = priv->ht40_1s_tx_power_index_B[group];
   1409	if (ofdm[0])
   1410		ofdm[0] -= 1;
   1411	if (ofdm[1])
   1412		ofdm[1] -= 1;
   1413
   1414	ofdmbase[0] = ofdm[0] +	priv->ofdm_tx_power_index_diff[group].a;
   1415	ofdmbase[1] = ofdm[1] +	priv->ofdm_tx_power_index_diff[group].b;
   1416
   1417	mcsbase[0] = ofdm[0];
   1418	mcsbase[1] = ofdm[1];
   1419	if (!ht40) {
   1420		mcsbase[0] += priv->ht20_tx_power_index_diff[group].a;
   1421		mcsbase[1] += priv->ht20_tx_power_index_diff[group].b;
   1422	}
   1423
   1424	if (priv->tx_paths > 1) {
   1425		if (ofdm[0] > priv->ht40_2s_tx_power_index_diff[group].a)
   1426			ofdm[0] -=  priv->ht40_2s_tx_power_index_diff[group].a;
   1427		if (ofdm[1] > priv->ht40_2s_tx_power_index_diff[group].b)
   1428			ofdm[1] -=  priv->ht40_2s_tx_power_index_diff[group].b;
   1429	}
   1430
   1431	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_CHANNEL)
   1432		dev_info(&priv->udev->dev,
   1433			 "%s: Setting TX power CCK A: %02x, "
   1434			 "CCK B: %02x, OFDM A: %02x, OFDM B: %02x\n",
   1435			 __func__, cck[0], cck[1], ofdm[0], ofdm[1]);
   1436
   1437	for (i = 0; i < RTL8723A_MAX_RF_PATHS; i++) {
   1438		if (cck[i] > RF6052_MAX_TX_PWR)
   1439			cck[i] = RF6052_MAX_TX_PWR;
   1440		if (ofdm[i] > RF6052_MAX_TX_PWR)
   1441			ofdm[i] = RF6052_MAX_TX_PWR;
   1442	}
   1443
   1444	val32 = rtl8xxxu_read32(priv, REG_TX_AGC_A_CCK1_MCS32);
   1445	val32 &= 0xffff00ff;
   1446	val32 |= (cck[0] << 8);
   1447	rtl8xxxu_write32(priv, REG_TX_AGC_A_CCK1_MCS32, val32);
   1448
   1449	val32 = rtl8xxxu_read32(priv, REG_TX_AGC_B_CCK11_A_CCK2_11);
   1450	val32 &= 0xff;
   1451	val32 |= ((cck[0] << 8) | (cck[0] << 16) | (cck[0] << 24));
   1452	rtl8xxxu_write32(priv, REG_TX_AGC_B_CCK11_A_CCK2_11, val32);
   1453
   1454	val32 = rtl8xxxu_read32(priv, REG_TX_AGC_B_CCK11_A_CCK2_11);
   1455	val32 &= 0xffffff00;
   1456	val32 |= cck[1];
   1457	rtl8xxxu_write32(priv, REG_TX_AGC_B_CCK11_A_CCK2_11, val32);
   1458
   1459	val32 = rtl8xxxu_read32(priv, REG_TX_AGC_B_CCK1_55_MCS32);
   1460	val32 &= 0xff;
   1461	val32 |= ((cck[1] << 8) | (cck[1] << 16) | (cck[1] << 24));
   1462	rtl8xxxu_write32(priv, REG_TX_AGC_B_CCK1_55_MCS32, val32);
   1463
   1464	ofdm_a = ofdmbase[0] | ofdmbase[0] << 8 |
   1465		ofdmbase[0] << 16 | ofdmbase[0] << 24;
   1466	ofdm_b = ofdmbase[1] | ofdmbase[1] << 8 |
   1467		ofdmbase[1] << 16 | ofdmbase[1] << 24;
   1468
   1469	rtl8xxxu_write32(priv, REG_TX_AGC_A_RATE18_06,
   1470			 ofdm_a + power_base->reg_0e00);
   1471	rtl8xxxu_write32(priv, REG_TX_AGC_B_RATE18_06,
   1472			 ofdm_b + power_base->reg_0830);
   1473
   1474	rtl8xxxu_write32(priv, REG_TX_AGC_A_RATE54_24,
   1475			 ofdm_a + power_base->reg_0e04);
   1476	rtl8xxxu_write32(priv, REG_TX_AGC_B_RATE54_24,
   1477			 ofdm_b + power_base->reg_0834);
   1478
   1479	mcs_a = mcsbase[0] | mcsbase[0] << 8 |
   1480		mcsbase[0] << 16 | mcsbase[0] << 24;
   1481	mcs_b = mcsbase[1] | mcsbase[1] << 8 |
   1482		mcsbase[1] << 16 | mcsbase[1] << 24;
   1483
   1484	rtl8xxxu_write32(priv, REG_TX_AGC_A_MCS03_MCS00,
   1485			 mcs_a + power_base->reg_0e10);
   1486	rtl8xxxu_write32(priv, REG_TX_AGC_B_MCS03_MCS00,
   1487			 mcs_b + power_base->reg_083c);
   1488
   1489	rtl8xxxu_write32(priv, REG_TX_AGC_A_MCS07_MCS04,
   1490			 mcs_a + power_base->reg_0e14);
   1491	rtl8xxxu_write32(priv, REG_TX_AGC_B_MCS07_MCS04,
   1492			 mcs_b + power_base->reg_0848);
   1493
   1494	rtl8xxxu_write32(priv, REG_TX_AGC_A_MCS11_MCS08,
   1495			 mcs_a + power_base->reg_0e18);
   1496	rtl8xxxu_write32(priv, REG_TX_AGC_B_MCS11_MCS08,
   1497			 mcs_b + power_base->reg_084c);
   1498
   1499	rtl8xxxu_write32(priv, REG_TX_AGC_A_MCS15_MCS12,
   1500			 mcs_a + power_base->reg_0e1c);
   1501	for (i = 0; i < 3; i++) {
   1502		if (i != 2)
   1503			val8 = (mcsbase[0] > 8) ? (mcsbase[0] - 8) : 0;
   1504		else
   1505			val8 = (mcsbase[0] > 6) ? (mcsbase[0] - 6) : 0;
   1506		rtl8xxxu_write8(priv, REG_OFDM0_XC_TX_IQ_IMBALANCE + i, val8);
   1507	}
   1508	rtl8xxxu_write32(priv, REG_TX_AGC_B_MCS15_MCS12,
   1509			 mcs_b + power_base->reg_0868);
   1510	for (i = 0; i < 3; i++) {
   1511		if (i != 2)
   1512			val8 = (mcsbase[1] > 8) ? (mcsbase[1] - 8) : 0;
   1513		else
   1514			val8 = (mcsbase[1] > 6) ? (mcsbase[1] - 6) : 0;
   1515		rtl8xxxu_write8(priv, REG_OFDM0_XD_TX_IQ_IMBALANCE + i, val8);
   1516	}
   1517}
   1518
   1519static void rtl8xxxu_set_linktype(struct rtl8xxxu_priv *priv,
   1520				  enum nl80211_iftype linktype)
   1521{
   1522	u8 val8;
   1523
   1524	val8 = rtl8xxxu_read8(priv, REG_MSR);
   1525	val8 &= ~MSR_LINKTYPE_MASK;
   1526
   1527	switch (linktype) {
   1528	case NL80211_IFTYPE_UNSPECIFIED:
   1529		val8 |= MSR_LINKTYPE_NONE;
   1530		break;
   1531	case NL80211_IFTYPE_ADHOC:
   1532		val8 |= MSR_LINKTYPE_ADHOC;
   1533		break;
   1534	case NL80211_IFTYPE_STATION:
   1535		val8 |= MSR_LINKTYPE_STATION;
   1536		break;
   1537	case NL80211_IFTYPE_AP:
   1538		val8 |= MSR_LINKTYPE_AP;
   1539		break;
   1540	default:
   1541		goto out;
   1542	}
   1543
   1544	rtl8xxxu_write8(priv, REG_MSR, val8);
   1545out:
   1546	return;
   1547}
   1548
   1549static void
   1550rtl8xxxu_set_retry(struct rtl8xxxu_priv *priv, u16 short_retry, u16 long_retry)
   1551{
   1552	u16 val16;
   1553
   1554	val16 = ((short_retry << RETRY_LIMIT_SHORT_SHIFT) &
   1555		 RETRY_LIMIT_SHORT_MASK) |
   1556		((long_retry << RETRY_LIMIT_LONG_SHIFT) &
   1557		 RETRY_LIMIT_LONG_MASK);
   1558
   1559	rtl8xxxu_write16(priv, REG_RETRY_LIMIT, val16);
   1560}
   1561
   1562static void
   1563rtl8xxxu_set_spec_sifs(struct rtl8xxxu_priv *priv, u16 cck, u16 ofdm)
   1564{
   1565	u16 val16;
   1566
   1567	val16 = ((cck << SPEC_SIFS_CCK_SHIFT) & SPEC_SIFS_CCK_MASK) |
   1568		((ofdm << SPEC_SIFS_OFDM_SHIFT) & SPEC_SIFS_OFDM_MASK);
   1569
   1570	rtl8xxxu_write16(priv, REG_SPEC_SIFS, val16);
   1571}
   1572
   1573static void rtl8xxxu_print_chipinfo(struct rtl8xxxu_priv *priv)
   1574{
   1575	struct device *dev = &priv->udev->dev;
   1576	char *cut;
   1577
   1578	switch (priv->chip_cut) {
   1579	case 0:
   1580		cut = "A";
   1581		break;
   1582	case 1:
   1583		cut = "B";
   1584		break;
   1585	case 2:
   1586		cut = "C";
   1587		break;
   1588	case 3:
   1589		cut = "D";
   1590		break;
   1591	case 4:
   1592		cut = "E";
   1593		break;
   1594	default:
   1595		cut = "unknown";
   1596	}
   1597
   1598	dev_info(dev,
   1599		 "RTL%s rev %s (%s) %iT%iR, TX queues %i, WiFi=%i, BT=%i, GPS=%i, HI PA=%i\n",
   1600		 priv->chip_name, cut, priv->chip_vendor, priv->tx_paths,
   1601		 priv->rx_paths, priv->ep_tx_count, priv->has_wifi,
   1602		 priv->has_bluetooth, priv->has_gps, priv->hi_pa);
   1603
   1604	dev_info(dev, "RTL%s MAC: %pM\n", priv->chip_name, priv->mac_addr);
   1605}
   1606
   1607static int rtl8xxxu_identify_chip(struct rtl8xxxu_priv *priv)
   1608{
   1609	struct device *dev = &priv->udev->dev;
   1610	struct ieee80211_hw *hw = priv->hw;
   1611	u32 val32, bonding;
   1612	u16 val16;
   1613
   1614	val32 = rtl8xxxu_read32(priv, REG_SYS_CFG);
   1615	priv->chip_cut = (val32 & SYS_CFG_CHIP_VERSION_MASK) >>
   1616		SYS_CFG_CHIP_VERSION_SHIFT;
   1617	if (val32 & SYS_CFG_TRP_VAUX_EN) {
   1618		dev_info(dev, "Unsupported test chip\n");
   1619		return -ENOTSUPP;
   1620	}
   1621
   1622	if (val32 & SYS_CFG_BT_FUNC) {
   1623		if (priv->chip_cut >= 3) {
   1624			sprintf(priv->chip_name, "8723BU");
   1625			priv->rtl_chip = RTL8723B;
   1626		} else {
   1627			sprintf(priv->chip_name, "8723AU");
   1628			priv->usb_interrupts = 1;
   1629			priv->rtl_chip = RTL8723A;
   1630		}
   1631
   1632		priv->rf_paths = 1;
   1633		priv->rx_paths = 1;
   1634		priv->tx_paths = 1;
   1635
   1636		val32 = rtl8xxxu_read32(priv, REG_MULTI_FUNC_CTRL);
   1637		if (val32 & MULTI_WIFI_FUNC_EN)
   1638			priv->has_wifi = 1;
   1639		if (val32 & MULTI_BT_FUNC_EN)
   1640			priv->has_bluetooth = 1;
   1641		if (val32 & MULTI_GPS_FUNC_EN)
   1642			priv->has_gps = 1;
   1643		priv->is_multi_func = 1;
   1644	} else if (val32 & SYS_CFG_TYPE_ID) {
   1645		bonding = rtl8xxxu_read32(priv, REG_HPON_FSM);
   1646		bonding &= HPON_FSM_BONDING_MASK;
   1647		if (priv->fops->tx_desc_size ==
   1648		    sizeof(struct rtl8xxxu_txdesc40)) {
   1649			if (bonding == HPON_FSM_BONDING_1T2R) {
   1650				sprintf(priv->chip_name, "8191EU");
   1651				priv->rf_paths = 2;
   1652				priv->rx_paths = 2;
   1653				priv->tx_paths = 1;
   1654				priv->rtl_chip = RTL8191E;
   1655			} else {
   1656				sprintf(priv->chip_name, "8192EU");
   1657				priv->rf_paths = 2;
   1658				priv->rx_paths = 2;
   1659				priv->tx_paths = 2;
   1660				priv->rtl_chip = RTL8192E;
   1661			}
   1662		} else if (bonding == HPON_FSM_BONDING_1T2R) {
   1663			sprintf(priv->chip_name, "8191CU");
   1664			priv->rf_paths = 2;
   1665			priv->rx_paths = 2;
   1666			priv->tx_paths = 1;
   1667			priv->usb_interrupts = 1;
   1668			priv->rtl_chip = RTL8191C;
   1669		} else {
   1670			sprintf(priv->chip_name, "8192CU");
   1671			priv->rf_paths = 2;
   1672			priv->rx_paths = 2;
   1673			priv->tx_paths = 2;
   1674			priv->usb_interrupts = 0;
   1675			priv->rtl_chip = RTL8192C;
   1676		}
   1677		priv->has_wifi = 1;
   1678	} else {
   1679		sprintf(priv->chip_name, "8188CU");
   1680		priv->rf_paths = 1;
   1681		priv->rx_paths = 1;
   1682		priv->tx_paths = 1;
   1683		priv->rtl_chip = RTL8188C;
   1684		priv->usb_interrupts = 0;
   1685		priv->has_wifi = 1;
   1686	}
   1687
   1688	hw->wiphy->available_antennas_tx = BIT(priv->tx_paths) - 1;
   1689	hw->wiphy->available_antennas_rx = BIT(priv->rx_paths) - 1;
   1690
   1691	switch (priv->rtl_chip) {
   1692	case RTL8188E:
   1693	case RTL8192E:
   1694	case RTL8723B:
   1695		switch (val32 & SYS_CFG_VENDOR_EXT_MASK) {
   1696		case SYS_CFG_VENDOR_ID_TSMC:
   1697			sprintf(priv->chip_vendor, "TSMC");
   1698			break;
   1699		case SYS_CFG_VENDOR_ID_SMIC:
   1700			sprintf(priv->chip_vendor, "SMIC");
   1701			priv->vendor_smic = 1;
   1702			break;
   1703		case SYS_CFG_VENDOR_ID_UMC:
   1704			sprintf(priv->chip_vendor, "UMC");
   1705			priv->vendor_umc = 1;
   1706			break;
   1707		default:
   1708			sprintf(priv->chip_vendor, "unknown");
   1709		}
   1710		break;
   1711	default:
   1712		if (val32 & SYS_CFG_VENDOR_ID) {
   1713			sprintf(priv->chip_vendor, "UMC");
   1714			priv->vendor_umc = 1;
   1715		} else {
   1716			sprintf(priv->chip_vendor, "TSMC");
   1717		}
   1718	}
   1719
   1720	val32 = rtl8xxxu_read32(priv, REG_GPIO_OUTSTS);
   1721	priv->rom_rev = (val32 & GPIO_RF_RL_ID) >> 28;
   1722
   1723	val16 = rtl8xxxu_read16(priv, REG_NORMAL_SIE_EP_TX);
   1724	if (val16 & NORMAL_SIE_EP_TX_HIGH_MASK) {
   1725		priv->ep_tx_high_queue = 1;
   1726		priv->ep_tx_count++;
   1727	}
   1728
   1729	if (val16 & NORMAL_SIE_EP_TX_NORMAL_MASK) {
   1730		priv->ep_tx_normal_queue = 1;
   1731		priv->ep_tx_count++;
   1732	}
   1733
   1734	if (val16 & NORMAL_SIE_EP_TX_LOW_MASK) {
   1735		priv->ep_tx_low_queue = 1;
   1736		priv->ep_tx_count++;
   1737	}
   1738
   1739	/*
   1740	 * Fallback for devices that do not provide REG_NORMAL_SIE_EP_TX
   1741	 */
   1742	if (!priv->ep_tx_count) {
   1743		switch (priv->nr_out_eps) {
   1744		case 4:
   1745		case 3:
   1746			priv->ep_tx_low_queue = 1;
   1747			priv->ep_tx_count++;
   1748			fallthrough;
   1749		case 2:
   1750			priv->ep_tx_normal_queue = 1;
   1751			priv->ep_tx_count++;
   1752			fallthrough;
   1753		case 1:
   1754			priv->ep_tx_high_queue = 1;
   1755			priv->ep_tx_count++;
   1756			break;
   1757		default:
   1758			dev_info(dev, "Unsupported USB TX end-points\n");
   1759			return -ENOTSUPP;
   1760		}
   1761	}
   1762
   1763	return 0;
   1764}
   1765
   1766static int
   1767rtl8xxxu_read_efuse8(struct rtl8xxxu_priv *priv, u16 offset, u8 *data)
   1768{
   1769	int i;
   1770	u8 val8;
   1771	u32 val32;
   1772
   1773	/* Write Address */
   1774	rtl8xxxu_write8(priv, REG_EFUSE_CTRL + 1, offset & 0xff);
   1775	val8 = rtl8xxxu_read8(priv, REG_EFUSE_CTRL + 2);
   1776	val8 &= 0xfc;
   1777	val8 |= (offset >> 8) & 0x03;
   1778	rtl8xxxu_write8(priv, REG_EFUSE_CTRL + 2, val8);
   1779
   1780	val8 = rtl8xxxu_read8(priv, REG_EFUSE_CTRL + 3);
   1781	rtl8xxxu_write8(priv, REG_EFUSE_CTRL + 3, val8 & 0x7f);
   1782
   1783	/* Poll for data read */
   1784	val32 = rtl8xxxu_read32(priv, REG_EFUSE_CTRL);
   1785	for (i = 0; i < RTL8XXXU_MAX_REG_POLL; i++) {
   1786		val32 = rtl8xxxu_read32(priv, REG_EFUSE_CTRL);
   1787		if (val32 & BIT(31))
   1788			break;
   1789	}
   1790
   1791	if (i == RTL8XXXU_MAX_REG_POLL)
   1792		return -EIO;
   1793
   1794	udelay(50);
   1795	val32 = rtl8xxxu_read32(priv, REG_EFUSE_CTRL);
   1796
   1797	*data = val32 & 0xff;
   1798	return 0;
   1799}
   1800
   1801static int rtl8xxxu_read_efuse(struct rtl8xxxu_priv *priv)
   1802{
   1803	struct device *dev = &priv->udev->dev;
   1804	int i, ret = 0;
   1805	u8 val8, word_mask, header, extheader;
   1806	u16 val16, efuse_addr, offset;
   1807	u32 val32;
   1808
   1809	val16 = rtl8xxxu_read16(priv, REG_9346CR);
   1810	if (val16 & EEPROM_ENABLE)
   1811		priv->has_eeprom = 1;
   1812	if (val16 & EEPROM_BOOT)
   1813		priv->boot_eeprom = 1;
   1814
   1815	if (priv->is_multi_func) {
   1816		val32 = rtl8xxxu_read32(priv, REG_EFUSE_TEST);
   1817		val32 = (val32 & ~EFUSE_SELECT_MASK) | EFUSE_WIFI_SELECT;
   1818		rtl8xxxu_write32(priv, REG_EFUSE_TEST, val32);
   1819	}
   1820
   1821	dev_dbg(dev, "Booting from %s\n",
   1822		priv->boot_eeprom ? "EEPROM" : "EFUSE");
   1823
   1824	rtl8xxxu_write8(priv, REG_EFUSE_ACCESS, EFUSE_ACCESS_ENABLE);
   1825
   1826	/*  1.2V Power: From VDDON with Power Cut(0x0000[15]), default valid */
   1827	val16 = rtl8xxxu_read16(priv, REG_SYS_ISO_CTRL);
   1828	if (!(val16 & SYS_ISO_PWC_EV12V)) {
   1829		val16 |= SYS_ISO_PWC_EV12V;
   1830		rtl8xxxu_write16(priv, REG_SYS_ISO_CTRL, val16);
   1831	}
   1832	/*  Reset: 0x0000[28], default valid */
   1833	val16 = rtl8xxxu_read16(priv, REG_SYS_FUNC);
   1834	if (!(val16 & SYS_FUNC_ELDR)) {
   1835		val16 |= SYS_FUNC_ELDR;
   1836		rtl8xxxu_write16(priv, REG_SYS_FUNC, val16);
   1837	}
   1838
   1839	/*
   1840	 * Clock: Gated(0x0008[5]) 8M(0x0008[1]) clock from ANA, default valid
   1841	 */
   1842	val16 = rtl8xxxu_read16(priv, REG_SYS_CLKR);
   1843	if (!(val16 & SYS_CLK_LOADER_ENABLE) || !(val16 & SYS_CLK_ANA8M)) {
   1844		val16 |= (SYS_CLK_LOADER_ENABLE | SYS_CLK_ANA8M);
   1845		rtl8xxxu_write16(priv, REG_SYS_CLKR, val16);
   1846	}
   1847
   1848	/* Default value is 0xff */
   1849	memset(priv->efuse_wifi.raw, 0xff, EFUSE_MAP_LEN);
   1850
   1851	efuse_addr = 0;
   1852	while (efuse_addr < EFUSE_REAL_CONTENT_LEN_8723A) {
   1853		u16 map_addr;
   1854
   1855		ret = rtl8xxxu_read_efuse8(priv, efuse_addr++, &header);
   1856		if (ret || header == 0xff)
   1857			goto exit;
   1858
   1859		if ((header & 0x1f) == 0x0f) {	/* extended header */
   1860			offset = (header & 0xe0) >> 5;
   1861
   1862			ret = rtl8xxxu_read_efuse8(priv, efuse_addr++,
   1863						   &extheader);
   1864			if (ret)
   1865				goto exit;
   1866			/* All words disabled */
   1867			if ((extheader & 0x0f) == 0x0f)
   1868				continue;
   1869
   1870			offset |= ((extheader & 0xf0) >> 1);
   1871			word_mask = extheader & 0x0f;
   1872		} else {
   1873			offset = (header >> 4) & 0x0f;
   1874			word_mask = header & 0x0f;
   1875		}
   1876
   1877		/* Get word enable value from PG header */
   1878
   1879		/* We have 8 bits to indicate validity */
   1880		map_addr = offset * 8;
   1881		if (map_addr >= EFUSE_MAP_LEN) {
   1882			dev_warn(dev, "%s: Illegal map_addr (%04x), "
   1883				 "efuse corrupt!\n",
   1884				 __func__, map_addr);
   1885			ret = -EINVAL;
   1886			goto exit;
   1887		}
   1888		for (i = 0; i < EFUSE_MAX_WORD_UNIT; i++) {
   1889			/* Check word enable condition in the section */
   1890			if (word_mask & BIT(i)) {
   1891				map_addr += 2;
   1892				continue;
   1893			}
   1894
   1895			ret = rtl8xxxu_read_efuse8(priv, efuse_addr++, &val8);
   1896			if (ret)
   1897				goto exit;
   1898			priv->efuse_wifi.raw[map_addr++] = val8;
   1899
   1900			ret = rtl8xxxu_read_efuse8(priv, efuse_addr++, &val8);
   1901			if (ret)
   1902				goto exit;
   1903			priv->efuse_wifi.raw[map_addr++] = val8;
   1904		}
   1905	}
   1906
   1907exit:
   1908	rtl8xxxu_write8(priv, REG_EFUSE_ACCESS, EFUSE_ACCESS_DISABLE);
   1909
   1910	return ret;
   1911}
   1912
   1913void rtl8xxxu_reset_8051(struct rtl8xxxu_priv *priv)
   1914{
   1915	u8 val8;
   1916	u16 sys_func;
   1917
   1918	val8 = rtl8xxxu_read8(priv, REG_RSV_CTRL + 1);
   1919	val8 &= ~BIT(0);
   1920	rtl8xxxu_write8(priv, REG_RSV_CTRL + 1, val8);
   1921
   1922	sys_func = rtl8xxxu_read16(priv, REG_SYS_FUNC);
   1923	sys_func &= ~SYS_FUNC_CPU_ENABLE;
   1924	rtl8xxxu_write16(priv, REG_SYS_FUNC, sys_func);
   1925
   1926	val8 = rtl8xxxu_read8(priv, REG_RSV_CTRL + 1);
   1927	val8 |= BIT(0);
   1928	rtl8xxxu_write8(priv, REG_RSV_CTRL + 1, val8);
   1929
   1930	sys_func |= SYS_FUNC_CPU_ENABLE;
   1931	rtl8xxxu_write16(priv, REG_SYS_FUNC, sys_func);
   1932}
   1933
   1934static int rtl8xxxu_start_firmware(struct rtl8xxxu_priv *priv)
   1935{
   1936	struct device *dev = &priv->udev->dev;
   1937	int ret = 0, i;
   1938	u32 val32;
   1939
   1940	/* Poll checksum report */
   1941	for (i = 0; i < RTL8XXXU_FIRMWARE_POLL_MAX; i++) {
   1942		val32 = rtl8xxxu_read32(priv, REG_MCU_FW_DL);
   1943		if (val32 & MCU_FW_DL_CSUM_REPORT)
   1944			break;
   1945	}
   1946
   1947	if (i == RTL8XXXU_FIRMWARE_POLL_MAX) {
   1948		dev_warn(dev, "Firmware checksum poll timed out\n");
   1949		ret = -EAGAIN;
   1950		goto exit;
   1951	}
   1952
   1953	val32 = rtl8xxxu_read32(priv, REG_MCU_FW_DL);
   1954	val32 |= MCU_FW_DL_READY;
   1955	val32 &= ~MCU_WINT_INIT_READY;
   1956	rtl8xxxu_write32(priv, REG_MCU_FW_DL, val32);
   1957
   1958	/*
   1959	 * Reset the 8051 in order for the firmware to start running,
   1960	 * otherwise it won't come up on the 8192eu
   1961	 */
   1962	priv->fops->reset_8051(priv);
   1963
   1964	/* Wait for firmware to become ready */
   1965	for (i = 0; i < RTL8XXXU_FIRMWARE_POLL_MAX; i++) {
   1966		val32 = rtl8xxxu_read32(priv, REG_MCU_FW_DL);
   1967		if (val32 & MCU_WINT_INIT_READY)
   1968			break;
   1969
   1970		udelay(100);
   1971	}
   1972
   1973	if (i == RTL8XXXU_FIRMWARE_POLL_MAX) {
   1974		dev_warn(dev, "Firmware failed to start\n");
   1975		ret = -EAGAIN;
   1976		goto exit;
   1977	}
   1978
   1979	/*
   1980	 * Init H2C command
   1981	 */
   1982	if (priv->rtl_chip == RTL8723B)
   1983		rtl8xxxu_write8(priv, REG_HMTFR, 0x0f);
   1984exit:
   1985	return ret;
   1986}
   1987
   1988static int rtl8xxxu_download_firmware(struct rtl8xxxu_priv *priv)
   1989{
   1990	int pages, remainder, i, ret;
   1991	u8 val8;
   1992	u16 val16;
   1993	u32 val32;
   1994	u8 *fwptr;
   1995
   1996	val8 = rtl8xxxu_read8(priv, REG_SYS_FUNC + 1);
   1997	val8 |= 4;
   1998	rtl8xxxu_write8(priv, REG_SYS_FUNC + 1, val8);
   1999
   2000	/* 8051 enable */
   2001	val16 = rtl8xxxu_read16(priv, REG_SYS_FUNC);
   2002	val16 |= SYS_FUNC_CPU_ENABLE;
   2003	rtl8xxxu_write16(priv, REG_SYS_FUNC, val16);
   2004
   2005	val8 = rtl8xxxu_read8(priv, REG_MCU_FW_DL);
   2006	if (val8 & MCU_FW_RAM_SEL) {
   2007		pr_info("do the RAM reset\n");
   2008		rtl8xxxu_write8(priv, REG_MCU_FW_DL, 0x00);
   2009		priv->fops->reset_8051(priv);
   2010	}
   2011
   2012	/* MCU firmware download enable */
   2013	val8 = rtl8xxxu_read8(priv, REG_MCU_FW_DL);
   2014	val8 |= MCU_FW_DL_ENABLE;
   2015	rtl8xxxu_write8(priv, REG_MCU_FW_DL, val8);
   2016
   2017	/* 8051 reset */
   2018	val32 = rtl8xxxu_read32(priv, REG_MCU_FW_DL);
   2019	val32 &= ~BIT(19);
   2020	rtl8xxxu_write32(priv, REG_MCU_FW_DL, val32);
   2021
   2022	/* Reset firmware download checksum */
   2023	val8 = rtl8xxxu_read8(priv, REG_MCU_FW_DL);
   2024	val8 |= MCU_FW_DL_CSUM_REPORT;
   2025	rtl8xxxu_write8(priv, REG_MCU_FW_DL, val8);
   2026
   2027	pages = priv->fw_size / RTL_FW_PAGE_SIZE;
   2028	remainder = priv->fw_size % RTL_FW_PAGE_SIZE;
   2029
   2030	fwptr = priv->fw_data->data;
   2031
   2032	for (i = 0; i < pages; i++) {
   2033		val8 = rtl8xxxu_read8(priv, REG_MCU_FW_DL + 2) & 0xF8;
   2034		val8 |= i;
   2035		rtl8xxxu_write8(priv, REG_MCU_FW_DL + 2, val8);
   2036
   2037		ret = rtl8xxxu_writeN(priv, REG_FW_START_ADDRESS,
   2038				      fwptr, RTL_FW_PAGE_SIZE);
   2039		if (ret != RTL_FW_PAGE_SIZE) {
   2040			ret = -EAGAIN;
   2041			goto fw_abort;
   2042		}
   2043
   2044		fwptr += RTL_FW_PAGE_SIZE;
   2045	}
   2046
   2047	if (remainder) {
   2048		val8 = rtl8xxxu_read8(priv, REG_MCU_FW_DL + 2) & 0xF8;
   2049		val8 |= i;
   2050		rtl8xxxu_write8(priv, REG_MCU_FW_DL + 2, val8);
   2051		ret = rtl8xxxu_writeN(priv, REG_FW_START_ADDRESS,
   2052				      fwptr, remainder);
   2053		if (ret != remainder) {
   2054			ret = -EAGAIN;
   2055			goto fw_abort;
   2056		}
   2057	}
   2058
   2059	ret = 0;
   2060fw_abort:
   2061	/* MCU firmware download disable */
   2062	val16 = rtl8xxxu_read16(priv, REG_MCU_FW_DL);
   2063	val16 &= ~MCU_FW_DL_ENABLE;
   2064	rtl8xxxu_write16(priv, REG_MCU_FW_DL, val16);
   2065
   2066	return ret;
   2067}
   2068
   2069int rtl8xxxu_load_firmware(struct rtl8xxxu_priv *priv, char *fw_name)
   2070{
   2071	struct device *dev = &priv->udev->dev;
   2072	const struct firmware *fw;
   2073	int ret = 0;
   2074	u16 signature;
   2075
   2076	dev_info(dev, "%s: Loading firmware %s\n", DRIVER_NAME, fw_name);
   2077	if (request_firmware(&fw, fw_name, &priv->udev->dev)) {
   2078		dev_warn(dev, "request_firmware(%s) failed\n", fw_name);
   2079		ret = -EAGAIN;
   2080		goto exit;
   2081	}
   2082	if (!fw) {
   2083		dev_warn(dev, "Firmware data not available\n");
   2084		ret = -EINVAL;
   2085		goto exit;
   2086	}
   2087
   2088	priv->fw_data = kmemdup(fw->data, fw->size, GFP_KERNEL);
   2089	if (!priv->fw_data) {
   2090		ret = -ENOMEM;
   2091		goto exit;
   2092	}
   2093	priv->fw_size = fw->size - sizeof(struct rtl8xxxu_firmware_header);
   2094
   2095	signature = le16_to_cpu(priv->fw_data->signature);
   2096	switch (signature & 0xfff0) {
   2097	case 0x92e0:
   2098	case 0x92c0:
   2099	case 0x88c0:
   2100	case 0x5300:
   2101	case 0x2300:
   2102		break;
   2103	default:
   2104		ret = -EINVAL;
   2105		dev_warn(dev, "%s: Invalid firmware signature: 0x%04x\n",
   2106			 __func__, signature);
   2107	}
   2108
   2109	dev_info(dev, "Firmware revision %i.%i (signature 0x%04x)\n",
   2110		 le16_to_cpu(priv->fw_data->major_version),
   2111		 priv->fw_data->minor_version, signature);
   2112
   2113exit:
   2114	release_firmware(fw);
   2115	return ret;
   2116}
   2117
   2118void rtl8xxxu_firmware_self_reset(struct rtl8xxxu_priv *priv)
   2119{
   2120	u16 val16;
   2121	int i = 100;
   2122
   2123	/* Inform 8051 to perform reset */
   2124	rtl8xxxu_write8(priv, REG_HMTFR + 3, 0x20);
   2125
   2126	for (i = 100; i > 0; i--) {
   2127		val16 = rtl8xxxu_read16(priv, REG_SYS_FUNC);
   2128
   2129		if (!(val16 & SYS_FUNC_CPU_ENABLE)) {
   2130			dev_dbg(&priv->udev->dev,
   2131				"%s: Firmware self reset success!\n", __func__);
   2132			break;
   2133		}
   2134		udelay(50);
   2135	}
   2136
   2137	if (!i) {
   2138		/* Force firmware reset */
   2139		val16 = rtl8xxxu_read16(priv, REG_SYS_FUNC);
   2140		val16 &= ~SYS_FUNC_CPU_ENABLE;
   2141		rtl8xxxu_write16(priv, REG_SYS_FUNC, val16);
   2142	}
   2143}
   2144
   2145static int
   2146rtl8xxxu_init_mac(struct rtl8xxxu_priv *priv)
   2147{
   2148	struct rtl8xxxu_reg8val *array = priv->fops->mactable;
   2149	int i, ret;
   2150	u16 reg;
   2151	u8 val;
   2152
   2153	for (i = 0; ; i++) {
   2154		reg = array[i].reg;
   2155		val = array[i].val;
   2156
   2157		if (reg == 0xffff && val == 0xff)
   2158			break;
   2159
   2160		ret = rtl8xxxu_write8(priv, reg, val);
   2161		if (ret != 1) {
   2162			dev_warn(&priv->udev->dev,
   2163				 "Failed to initialize MAC "
   2164				 "(reg: %04x, val %02x)\n", reg, val);
   2165			return -EAGAIN;
   2166		}
   2167	}
   2168
   2169	if (priv->rtl_chip != RTL8723B && priv->rtl_chip != RTL8192E)
   2170		rtl8xxxu_write8(priv, REG_MAX_AGGR_NUM, 0x0a);
   2171
   2172	return 0;
   2173}
   2174
   2175int rtl8xxxu_init_phy_regs(struct rtl8xxxu_priv *priv,
   2176			   struct rtl8xxxu_reg32val *array)
   2177{
   2178	int i, ret;
   2179	u16 reg;
   2180	u32 val;
   2181
   2182	for (i = 0; ; i++) {
   2183		reg = array[i].reg;
   2184		val = array[i].val;
   2185
   2186		if (reg == 0xffff && val == 0xffffffff)
   2187			break;
   2188
   2189		ret = rtl8xxxu_write32(priv, reg, val);
   2190		if (ret != sizeof(val)) {
   2191			dev_warn(&priv->udev->dev,
   2192				 "Failed to initialize PHY\n");
   2193			return -EAGAIN;
   2194		}
   2195		udelay(1);
   2196	}
   2197
   2198	return 0;
   2199}
   2200
   2201void rtl8xxxu_gen1_init_phy_bb(struct rtl8xxxu_priv *priv)
   2202{
   2203	u8 val8, ldoa15, ldov12d, lpldo, ldohci12;
   2204	u16 val16;
   2205	u32 val32;
   2206
   2207	val8 = rtl8xxxu_read8(priv, REG_AFE_PLL_CTRL);
   2208	udelay(2);
   2209	val8 |= AFE_PLL_320_ENABLE;
   2210	rtl8xxxu_write8(priv, REG_AFE_PLL_CTRL, val8);
   2211	udelay(2);
   2212
   2213	rtl8xxxu_write8(priv, REG_AFE_PLL_CTRL + 1, 0xff);
   2214	udelay(2);
   2215
   2216	val16 = rtl8xxxu_read16(priv, REG_SYS_FUNC);
   2217	val16 |= SYS_FUNC_BB_GLB_RSTN | SYS_FUNC_BBRSTB;
   2218	rtl8xxxu_write16(priv, REG_SYS_FUNC, val16);
   2219
   2220	val32 = rtl8xxxu_read32(priv, REG_AFE_XTAL_CTRL);
   2221	val32 &= ~AFE_XTAL_RF_GATE;
   2222	if (priv->has_bluetooth)
   2223		val32 &= ~AFE_XTAL_BT_GATE;
   2224	rtl8xxxu_write32(priv, REG_AFE_XTAL_CTRL, val32);
   2225
   2226	/* 6. 0x1f[7:0] = 0x07 */
   2227	val8 = RF_ENABLE | RF_RSTB | RF_SDMRSTB;
   2228	rtl8xxxu_write8(priv, REG_RF_CTRL, val8);
   2229
   2230	if (priv->hi_pa)
   2231		rtl8xxxu_init_phy_regs(priv, rtl8188ru_phy_1t_highpa_table);
   2232	else if (priv->tx_paths == 2)
   2233		rtl8xxxu_init_phy_regs(priv, rtl8192cu_phy_2t_init_table);
   2234	else
   2235		rtl8xxxu_init_phy_regs(priv, rtl8723a_phy_1t_init_table);
   2236
   2237	if (priv->rtl_chip == RTL8188R && priv->hi_pa &&
   2238	    priv->vendor_umc && priv->chip_cut == 1)
   2239		rtl8xxxu_write8(priv, REG_OFDM0_AGC_PARM1 + 2, 0x50);
   2240
   2241	if (priv->hi_pa)
   2242		rtl8xxxu_init_phy_regs(priv, rtl8xxx_agc_highpa_table);
   2243	else
   2244		rtl8xxxu_init_phy_regs(priv, rtl8xxx_agc_standard_table);
   2245
   2246	ldoa15 = LDOA15_ENABLE | LDOA15_OBUF;
   2247	ldov12d = LDOV12D_ENABLE | BIT(2) | (2 << LDOV12D_VADJ_SHIFT);
   2248	ldohci12 = 0x57;
   2249	lpldo = 1;
   2250	val32 = (lpldo << 24) | (ldohci12 << 16) | (ldov12d << 8) | ldoa15;
   2251	rtl8xxxu_write32(priv, REG_LDOA15_CTRL, val32);
   2252}
   2253
   2254/*
   2255 * Most of this is black magic retrieved from the old rtl8723au driver
   2256 */
   2257static int rtl8xxxu_init_phy_bb(struct rtl8xxxu_priv *priv)
   2258{
   2259	u8 val8;
   2260	u32 val32;
   2261
   2262	priv->fops->init_phy_bb(priv);
   2263
   2264	if (priv->tx_paths == 1 && priv->rx_paths == 2) {
   2265		/*
   2266		 * For 1T2R boards, patch the registers.
   2267		 *
   2268		 * It looks like 8191/2 1T2R boards use path B for TX
   2269		 */
   2270		val32 = rtl8xxxu_read32(priv, REG_FPGA0_TX_INFO);
   2271		val32 &= ~(BIT(0) | BIT(1));
   2272		val32 |= BIT(1);
   2273		rtl8xxxu_write32(priv, REG_FPGA0_TX_INFO, val32);
   2274
   2275		val32 = rtl8xxxu_read32(priv, REG_FPGA1_TX_INFO);
   2276		val32 &= ~0x300033;
   2277		val32 |= 0x200022;
   2278		rtl8xxxu_write32(priv, REG_FPGA1_TX_INFO, val32);
   2279
   2280		val32 = rtl8xxxu_read32(priv, REG_CCK0_AFE_SETTING);
   2281		val32 &= ~CCK0_AFE_RX_MASK;
   2282		val32 &= 0x00ffffff;
   2283		val32 |= 0x40000000;
   2284		val32 |= CCK0_AFE_RX_ANT_B;
   2285		rtl8xxxu_write32(priv, REG_CCK0_AFE_SETTING, val32);
   2286
   2287		val32 = rtl8xxxu_read32(priv, REG_OFDM0_TRX_PATH_ENABLE);
   2288		val32 &= ~(OFDM_RF_PATH_RX_MASK | OFDM_RF_PATH_TX_MASK);
   2289		val32 |= (OFDM_RF_PATH_RX_A | OFDM_RF_PATH_RX_B |
   2290			  OFDM_RF_PATH_TX_B);
   2291		rtl8xxxu_write32(priv, REG_OFDM0_TRX_PATH_ENABLE, val32);
   2292
   2293		val32 = rtl8xxxu_read32(priv, REG_OFDM0_AGC_PARM1);
   2294		val32 &= ~(BIT(4) | BIT(5));
   2295		val32 |= BIT(4);
   2296		rtl8xxxu_write32(priv, REG_OFDM0_AGC_PARM1, val32);
   2297
   2298		val32 = rtl8xxxu_read32(priv, REG_TX_CCK_RFON);
   2299		val32 &= ~(BIT(27) | BIT(26));
   2300		val32 |= BIT(27);
   2301		rtl8xxxu_write32(priv, REG_TX_CCK_RFON, val32);
   2302
   2303		val32 = rtl8xxxu_read32(priv, REG_TX_CCK_BBON);
   2304		val32 &= ~(BIT(27) | BIT(26));
   2305		val32 |= BIT(27);
   2306		rtl8xxxu_write32(priv, REG_TX_CCK_BBON, val32);
   2307
   2308		val32 = rtl8xxxu_read32(priv, REG_TX_OFDM_RFON);
   2309		val32 &= ~(BIT(27) | BIT(26));
   2310		val32 |= BIT(27);
   2311		rtl8xxxu_write32(priv, REG_TX_OFDM_RFON, val32);
   2312
   2313		val32 = rtl8xxxu_read32(priv, REG_TX_OFDM_BBON);
   2314		val32 &= ~(BIT(27) | BIT(26));
   2315		val32 |= BIT(27);
   2316		rtl8xxxu_write32(priv, REG_TX_OFDM_BBON, val32);
   2317
   2318		val32 = rtl8xxxu_read32(priv, REG_TX_TO_TX);
   2319		val32 &= ~(BIT(27) | BIT(26));
   2320		val32 |= BIT(27);
   2321		rtl8xxxu_write32(priv, REG_TX_TO_TX, val32);
   2322	}
   2323
   2324	if (priv->has_xtalk) {
   2325		val32 = rtl8xxxu_read32(priv, REG_MAC_PHY_CTRL);
   2326
   2327		val8 = priv->xtalk;
   2328		val32 &= 0xff000fff;
   2329		val32 |= ((val8 | (val8 << 6)) << 12);
   2330
   2331		rtl8xxxu_write32(priv, REG_MAC_PHY_CTRL, val32);
   2332	}
   2333
   2334	if (priv->rtl_chip == RTL8192E)
   2335		rtl8xxxu_write32(priv, REG_AFE_XTAL_CTRL, 0x000f81fb);
   2336
   2337	return 0;
   2338}
   2339
   2340static int rtl8xxxu_init_rf_regs(struct rtl8xxxu_priv *priv,
   2341				 struct rtl8xxxu_rfregval *array,
   2342				 enum rtl8xxxu_rfpath path)
   2343{
   2344	int i, ret;
   2345	u8 reg;
   2346	u32 val;
   2347
   2348	for (i = 0; ; i++) {
   2349		reg = array[i].reg;
   2350		val = array[i].val;
   2351
   2352		if (reg == 0xff && val == 0xffffffff)
   2353			break;
   2354
   2355		switch (reg) {
   2356		case 0xfe:
   2357			msleep(50);
   2358			continue;
   2359		case 0xfd:
   2360			mdelay(5);
   2361			continue;
   2362		case 0xfc:
   2363			mdelay(1);
   2364			continue;
   2365		case 0xfb:
   2366			udelay(50);
   2367			continue;
   2368		case 0xfa:
   2369			udelay(5);
   2370			continue;
   2371		case 0xf9:
   2372			udelay(1);
   2373			continue;
   2374		}
   2375
   2376		ret = rtl8xxxu_write_rfreg(priv, path, reg, val);
   2377		if (ret) {
   2378			dev_warn(&priv->udev->dev,
   2379				 "Failed to initialize RF\n");
   2380			return -EAGAIN;
   2381		}
   2382		udelay(1);
   2383	}
   2384
   2385	return 0;
   2386}
   2387
   2388int rtl8xxxu_init_phy_rf(struct rtl8xxxu_priv *priv,
   2389			 struct rtl8xxxu_rfregval *table,
   2390			 enum rtl8xxxu_rfpath path)
   2391{
   2392	u32 val32;
   2393	u16 val16, rfsi_rfenv;
   2394	u16 reg_sw_ctrl, reg_int_oe, reg_hssi_parm2;
   2395
   2396	switch (path) {
   2397	case RF_A:
   2398		reg_sw_ctrl = REG_FPGA0_XA_RF_SW_CTRL;
   2399		reg_int_oe = REG_FPGA0_XA_RF_INT_OE;
   2400		reg_hssi_parm2 = REG_FPGA0_XA_HSSI_PARM2;
   2401		break;
   2402	case RF_B:
   2403		reg_sw_ctrl = REG_FPGA0_XB_RF_SW_CTRL;
   2404		reg_int_oe = REG_FPGA0_XB_RF_INT_OE;
   2405		reg_hssi_parm2 = REG_FPGA0_XB_HSSI_PARM2;
   2406		break;
   2407	default:
   2408		dev_err(&priv->udev->dev, "%s:Unsupported RF path %c\n",
   2409			__func__, path + 'A');
   2410		return -EINVAL;
   2411	}
   2412	/* For path B, use XB */
   2413	rfsi_rfenv = rtl8xxxu_read16(priv, reg_sw_ctrl);
   2414	rfsi_rfenv &= FPGA0_RF_RFENV;
   2415
   2416	/*
   2417	 * These two we might be able to optimize into one
   2418	 */
   2419	val32 = rtl8xxxu_read32(priv, reg_int_oe);
   2420	val32 |= BIT(20);	/* 0x10 << 16 */
   2421	rtl8xxxu_write32(priv, reg_int_oe, val32);
   2422	udelay(1);
   2423
   2424	val32 = rtl8xxxu_read32(priv, reg_int_oe);
   2425	val32 |= BIT(4);
   2426	rtl8xxxu_write32(priv, reg_int_oe, val32);
   2427	udelay(1);
   2428
   2429	/*
   2430	 * These two we might be able to optimize into one
   2431	 */
   2432	val32 = rtl8xxxu_read32(priv, reg_hssi_parm2);
   2433	val32 &= ~FPGA0_HSSI_3WIRE_ADDR_LEN;
   2434	rtl8xxxu_write32(priv, reg_hssi_parm2, val32);
   2435	udelay(1);
   2436
   2437	val32 = rtl8xxxu_read32(priv, reg_hssi_parm2);
   2438	val32 &= ~FPGA0_HSSI_3WIRE_DATA_LEN;
   2439	rtl8xxxu_write32(priv, reg_hssi_parm2, val32);
   2440	udelay(1);
   2441
   2442	rtl8xxxu_init_rf_regs(priv, table, path);
   2443
   2444	/* For path B, use XB */
   2445	val16 = rtl8xxxu_read16(priv, reg_sw_ctrl);
   2446	val16 &= ~FPGA0_RF_RFENV;
   2447	val16 |= rfsi_rfenv;
   2448	rtl8xxxu_write16(priv, reg_sw_ctrl, val16);
   2449
   2450	return 0;
   2451}
   2452
   2453static int rtl8xxxu_llt_write(struct rtl8xxxu_priv *priv, u8 address, u8 data)
   2454{
   2455	int ret = -EBUSY;
   2456	int count = 0;
   2457	u32 value;
   2458
   2459	value = LLT_OP_WRITE | address << 8 | data;
   2460
   2461	rtl8xxxu_write32(priv, REG_LLT_INIT, value);
   2462
   2463	do {
   2464		value = rtl8xxxu_read32(priv, REG_LLT_INIT);
   2465		if ((value & LLT_OP_MASK) == LLT_OP_INACTIVE) {
   2466			ret = 0;
   2467			break;
   2468		}
   2469	} while (count++ < 20);
   2470
   2471	return ret;
   2472}
   2473
   2474int rtl8xxxu_init_llt_table(struct rtl8xxxu_priv *priv)
   2475{
   2476	int ret;
   2477	int i;
   2478	u8 last_tx_page;
   2479
   2480	last_tx_page = priv->fops->total_page_num;
   2481
   2482	for (i = 0; i < last_tx_page; i++) {
   2483		ret = rtl8xxxu_llt_write(priv, i, i + 1);
   2484		if (ret)
   2485			goto exit;
   2486	}
   2487
   2488	ret = rtl8xxxu_llt_write(priv, last_tx_page, 0xff);
   2489	if (ret)
   2490		goto exit;
   2491
   2492	/* Mark remaining pages as a ring buffer */
   2493	for (i = last_tx_page + 1; i < 0xff; i++) {
   2494		ret = rtl8xxxu_llt_write(priv, i, (i + 1));
   2495		if (ret)
   2496			goto exit;
   2497	}
   2498
   2499	/*  Let last entry point to the start entry of ring buffer */
   2500	ret = rtl8xxxu_llt_write(priv, 0xff, last_tx_page + 1);
   2501	if (ret)
   2502		goto exit;
   2503
   2504exit:
   2505	return ret;
   2506}
   2507
   2508int rtl8xxxu_auto_llt_table(struct rtl8xxxu_priv *priv)
   2509{
   2510	u32 val32;
   2511	int ret = 0;
   2512	int i;
   2513
   2514	val32 = rtl8xxxu_read32(priv, REG_AUTO_LLT);
   2515	val32 |= AUTO_LLT_INIT_LLT;
   2516	rtl8xxxu_write32(priv, REG_AUTO_LLT, val32);
   2517
   2518	for (i = 500; i; i--) {
   2519		val32 = rtl8xxxu_read32(priv, REG_AUTO_LLT);
   2520		if (!(val32 & AUTO_LLT_INIT_LLT))
   2521			break;
   2522		usleep_range(2, 4);
   2523	}
   2524
   2525	if (!i) {
   2526		ret = -EBUSY;
   2527		dev_warn(&priv->udev->dev, "LLT table init failed\n");
   2528	}
   2529
   2530	return ret;
   2531}
   2532
   2533static int rtl8xxxu_init_queue_priority(struct rtl8xxxu_priv *priv)
   2534{
   2535	u16 val16, hi, lo;
   2536	u16 hiq, mgq, bkq, beq, viq, voq;
   2537	int hip, mgp, bkp, bep, vip, vop;
   2538	int ret = 0;
   2539
   2540	switch (priv->ep_tx_count) {
   2541	case 1:
   2542		if (priv->ep_tx_high_queue) {
   2543			hi = TRXDMA_QUEUE_HIGH;
   2544		} else if (priv->ep_tx_low_queue) {
   2545			hi = TRXDMA_QUEUE_LOW;
   2546		} else if (priv->ep_tx_normal_queue) {
   2547			hi = TRXDMA_QUEUE_NORMAL;
   2548		} else {
   2549			hi = 0;
   2550			ret = -EINVAL;
   2551		}
   2552
   2553		hiq = hi;
   2554		mgq = hi;
   2555		bkq = hi;
   2556		beq = hi;
   2557		viq = hi;
   2558		voq = hi;
   2559
   2560		hip = 0;
   2561		mgp = 0;
   2562		bkp = 0;
   2563		bep = 0;
   2564		vip = 0;
   2565		vop = 0;
   2566		break;
   2567	case 2:
   2568		if (priv->ep_tx_high_queue && priv->ep_tx_low_queue) {
   2569			hi = TRXDMA_QUEUE_HIGH;
   2570			lo = TRXDMA_QUEUE_LOW;
   2571		} else if (priv->ep_tx_normal_queue && priv->ep_tx_low_queue) {
   2572			hi = TRXDMA_QUEUE_NORMAL;
   2573			lo = TRXDMA_QUEUE_LOW;
   2574		} else if (priv->ep_tx_high_queue && priv->ep_tx_normal_queue) {
   2575			hi = TRXDMA_QUEUE_HIGH;
   2576			lo = TRXDMA_QUEUE_NORMAL;
   2577		} else {
   2578			ret = -EINVAL;
   2579			hi = 0;
   2580			lo = 0;
   2581		}
   2582
   2583		hiq = hi;
   2584		mgq = hi;
   2585		bkq = lo;
   2586		beq = lo;
   2587		viq = hi;
   2588		voq = hi;
   2589
   2590		hip = 0;
   2591		mgp = 0;
   2592		bkp = 1;
   2593		bep = 1;
   2594		vip = 0;
   2595		vop = 0;
   2596		break;
   2597	case 3:
   2598		beq = TRXDMA_QUEUE_LOW;
   2599		bkq = TRXDMA_QUEUE_LOW;
   2600		viq = TRXDMA_QUEUE_NORMAL;
   2601		voq = TRXDMA_QUEUE_HIGH;
   2602		mgq = TRXDMA_QUEUE_HIGH;
   2603		hiq = TRXDMA_QUEUE_HIGH;
   2604
   2605		hip = hiq ^ 3;
   2606		mgp = mgq ^ 3;
   2607		bkp = bkq ^ 3;
   2608		bep = beq ^ 3;
   2609		vip = viq ^ 3;
   2610		vop = viq ^ 3;
   2611		break;
   2612	default:
   2613		ret = -EINVAL;
   2614	}
   2615
   2616	/*
   2617	 * None of the vendor drivers are configuring the beacon
   2618	 * queue here .... why?
   2619	 */
   2620	if (!ret) {
   2621		val16 = rtl8xxxu_read16(priv, REG_TRXDMA_CTRL);
   2622		val16 &= 0x7;
   2623		val16 |= (voq << TRXDMA_CTRL_VOQ_SHIFT) |
   2624			(viq << TRXDMA_CTRL_VIQ_SHIFT) |
   2625			(beq << TRXDMA_CTRL_BEQ_SHIFT) |
   2626			(bkq << TRXDMA_CTRL_BKQ_SHIFT) |
   2627			(mgq << TRXDMA_CTRL_MGQ_SHIFT) |
   2628			(hiq << TRXDMA_CTRL_HIQ_SHIFT);
   2629		rtl8xxxu_write16(priv, REG_TRXDMA_CTRL, val16);
   2630
   2631		priv->pipe_out[TXDESC_QUEUE_VO] =
   2632			usb_sndbulkpipe(priv->udev, priv->out_ep[vop]);
   2633		priv->pipe_out[TXDESC_QUEUE_VI] =
   2634			usb_sndbulkpipe(priv->udev, priv->out_ep[vip]);
   2635		priv->pipe_out[TXDESC_QUEUE_BE] =
   2636			usb_sndbulkpipe(priv->udev, priv->out_ep[bep]);
   2637		priv->pipe_out[TXDESC_QUEUE_BK] =
   2638			usb_sndbulkpipe(priv->udev, priv->out_ep[bkp]);
   2639		priv->pipe_out[TXDESC_QUEUE_BEACON] =
   2640			usb_sndbulkpipe(priv->udev, priv->out_ep[0]);
   2641		priv->pipe_out[TXDESC_QUEUE_MGNT] =
   2642			usb_sndbulkpipe(priv->udev, priv->out_ep[mgp]);
   2643		priv->pipe_out[TXDESC_QUEUE_HIGH] =
   2644			usb_sndbulkpipe(priv->udev, priv->out_ep[hip]);
   2645		priv->pipe_out[TXDESC_QUEUE_CMD] =
   2646			usb_sndbulkpipe(priv->udev, priv->out_ep[0]);
   2647	}
   2648
   2649	return ret;
   2650}
   2651
   2652void rtl8xxxu_fill_iqk_matrix_a(struct rtl8xxxu_priv *priv, bool iqk_ok,
   2653				int result[][8], int candidate, bool tx_only)
   2654{
   2655	u32 oldval, x, tx0_a, reg;
   2656	int y, tx0_c;
   2657	u32 val32;
   2658
   2659	if (!iqk_ok)
   2660		return;
   2661
   2662	val32 = rtl8xxxu_read32(priv, REG_OFDM0_XA_TX_IQ_IMBALANCE);
   2663	oldval = val32 >> 22;
   2664
   2665	x = result[candidate][0];
   2666	if ((x & 0x00000200) != 0)
   2667		x = x | 0xfffffc00;
   2668	tx0_a = (x * oldval) >> 8;
   2669
   2670	val32 = rtl8xxxu_read32(priv, REG_OFDM0_XA_TX_IQ_IMBALANCE);
   2671	val32 &= ~0x3ff;
   2672	val32 |= tx0_a;
   2673	rtl8xxxu_write32(priv, REG_OFDM0_XA_TX_IQ_IMBALANCE, val32);
   2674
   2675	val32 = rtl8xxxu_read32(priv, REG_OFDM0_ENERGY_CCA_THRES);
   2676	val32 &= ~BIT(31);
   2677	if ((x * oldval >> 7) & 0x1)
   2678		val32 |= BIT(31);
   2679	rtl8xxxu_write32(priv, REG_OFDM0_ENERGY_CCA_THRES, val32);
   2680
   2681	y = result[candidate][1];
   2682	if ((y & 0x00000200) != 0)
   2683		y = y | 0xfffffc00;
   2684	tx0_c = (y * oldval) >> 8;
   2685
   2686	val32 = rtl8xxxu_read32(priv, REG_OFDM0_XC_TX_AFE);
   2687	val32 &= ~0xf0000000;
   2688	val32 |= (((tx0_c & 0x3c0) >> 6) << 28);
   2689	rtl8xxxu_write32(priv, REG_OFDM0_XC_TX_AFE, val32);
   2690
   2691	val32 = rtl8xxxu_read32(priv, REG_OFDM0_XA_TX_IQ_IMBALANCE);
   2692	val32 &= ~0x003f0000;
   2693	val32 |= ((tx0_c & 0x3f) << 16);
   2694	rtl8xxxu_write32(priv, REG_OFDM0_XA_TX_IQ_IMBALANCE, val32);
   2695
   2696	val32 = rtl8xxxu_read32(priv, REG_OFDM0_ENERGY_CCA_THRES);
   2697	val32 &= ~BIT(29);
   2698	if ((y * oldval >> 7) & 0x1)
   2699		val32 |= BIT(29);
   2700	rtl8xxxu_write32(priv, REG_OFDM0_ENERGY_CCA_THRES, val32);
   2701
   2702	if (tx_only) {
   2703		dev_dbg(&priv->udev->dev, "%s: only TX\n", __func__);
   2704		return;
   2705	}
   2706
   2707	reg = result[candidate][2];
   2708
   2709	val32 = rtl8xxxu_read32(priv, REG_OFDM0_XA_RX_IQ_IMBALANCE);
   2710	val32 &= ~0x3ff;
   2711	val32 |= (reg & 0x3ff);
   2712	rtl8xxxu_write32(priv, REG_OFDM0_XA_RX_IQ_IMBALANCE, val32);
   2713
   2714	reg = result[candidate][3] & 0x3F;
   2715
   2716	val32 = rtl8xxxu_read32(priv, REG_OFDM0_XA_RX_IQ_IMBALANCE);
   2717	val32 &= ~0xfc00;
   2718	val32 |= ((reg << 10) & 0xfc00);
   2719	rtl8xxxu_write32(priv, REG_OFDM0_XA_RX_IQ_IMBALANCE, val32);
   2720
   2721	reg = (result[candidate][3] >> 6) & 0xF;
   2722
   2723	val32 = rtl8xxxu_read32(priv, REG_OFDM0_RX_IQ_EXT_ANTA);
   2724	val32 &= ~0xf0000000;
   2725	val32 |= (reg << 28);
   2726	rtl8xxxu_write32(priv, REG_OFDM0_RX_IQ_EXT_ANTA, val32);
   2727}
   2728
   2729void rtl8xxxu_fill_iqk_matrix_b(struct rtl8xxxu_priv *priv, bool iqk_ok,
   2730				int result[][8], int candidate, bool tx_only)
   2731{
   2732	u32 oldval, x, tx1_a, reg;
   2733	int y, tx1_c;
   2734	u32 val32;
   2735
   2736	if (!iqk_ok)
   2737		return;
   2738
   2739	val32 = rtl8xxxu_read32(priv, REG_OFDM0_XB_TX_IQ_IMBALANCE);
   2740	oldval = val32 >> 22;
   2741
   2742	x = result[candidate][4];
   2743	if ((x & 0x00000200) != 0)
   2744		x = x | 0xfffffc00;
   2745	tx1_a = (x * oldval) >> 8;
   2746
   2747	val32 = rtl8xxxu_read32(priv, REG_OFDM0_XB_TX_IQ_IMBALANCE);
   2748	val32 &= ~0x3ff;
   2749	val32 |= tx1_a;
   2750	rtl8xxxu_write32(priv, REG_OFDM0_XB_TX_IQ_IMBALANCE, val32);
   2751
   2752	val32 = rtl8xxxu_read32(priv, REG_OFDM0_ENERGY_CCA_THRES);
   2753	val32 &= ~BIT(27);
   2754	if ((x * oldval >> 7) & 0x1)
   2755		val32 |= BIT(27);
   2756	rtl8xxxu_write32(priv, REG_OFDM0_ENERGY_CCA_THRES, val32);
   2757
   2758	y = result[candidate][5];
   2759	if ((y & 0x00000200) != 0)
   2760		y = y | 0xfffffc00;
   2761	tx1_c = (y * oldval) >> 8;
   2762
   2763	val32 = rtl8xxxu_read32(priv, REG_OFDM0_XD_TX_AFE);
   2764	val32 &= ~0xf0000000;
   2765	val32 |= (((tx1_c & 0x3c0) >> 6) << 28);
   2766	rtl8xxxu_write32(priv, REG_OFDM0_XD_TX_AFE, val32);
   2767
   2768	val32 = rtl8xxxu_read32(priv, REG_OFDM0_XB_TX_IQ_IMBALANCE);
   2769	val32 &= ~0x003f0000;
   2770	val32 |= ((tx1_c & 0x3f) << 16);
   2771	rtl8xxxu_write32(priv, REG_OFDM0_XB_TX_IQ_IMBALANCE, val32);
   2772
   2773	val32 = rtl8xxxu_read32(priv, REG_OFDM0_ENERGY_CCA_THRES);
   2774	val32 &= ~BIT(25);
   2775	if ((y * oldval >> 7) & 0x1)
   2776		val32 |= BIT(25);
   2777	rtl8xxxu_write32(priv, REG_OFDM0_ENERGY_CCA_THRES, val32);
   2778
   2779	if (tx_only) {
   2780		dev_dbg(&priv->udev->dev, "%s: only TX\n", __func__);
   2781		return;
   2782	}
   2783
   2784	reg = result[candidate][6];
   2785
   2786	val32 = rtl8xxxu_read32(priv, REG_OFDM0_XB_RX_IQ_IMBALANCE);
   2787	val32 &= ~0x3ff;
   2788	val32 |= (reg & 0x3ff);
   2789	rtl8xxxu_write32(priv, REG_OFDM0_XB_RX_IQ_IMBALANCE, val32);
   2790
   2791	reg = result[candidate][7] & 0x3f;
   2792
   2793	val32 = rtl8xxxu_read32(priv, REG_OFDM0_XB_RX_IQ_IMBALANCE);
   2794	val32 &= ~0xfc00;
   2795	val32 |= ((reg << 10) & 0xfc00);
   2796	rtl8xxxu_write32(priv, REG_OFDM0_XB_RX_IQ_IMBALANCE, val32);
   2797
   2798	reg = (result[candidate][7] >> 6) & 0xf;
   2799
   2800	val32 = rtl8xxxu_read32(priv, REG_OFDM0_AGCR_SSI_TABLE);
   2801	val32 &= ~0x0000f000;
   2802	val32 |= (reg << 12);
   2803	rtl8xxxu_write32(priv, REG_OFDM0_AGCR_SSI_TABLE, val32);
   2804}
   2805
   2806#define MAX_TOLERANCE		5
   2807
   2808static bool rtl8xxxu_simularity_compare(struct rtl8xxxu_priv *priv,
   2809					int result[][8], int c1, int c2)
   2810{
   2811	u32 i, j, diff, simubitmap, bound = 0;
   2812	int candidate[2] = {-1, -1};	/* for path A and path B */
   2813	bool retval = true;
   2814
   2815	if (priv->tx_paths > 1)
   2816		bound = 8;
   2817	else
   2818		bound = 4;
   2819
   2820	simubitmap = 0;
   2821
   2822	for (i = 0; i < bound; i++) {
   2823		diff = (result[c1][i] > result[c2][i]) ?
   2824			(result[c1][i] - result[c2][i]) :
   2825			(result[c2][i] - result[c1][i]);
   2826		if (diff > MAX_TOLERANCE) {
   2827			if ((i == 2 || i == 6) && !simubitmap) {
   2828				if (result[c1][i] + result[c1][i + 1] == 0)
   2829					candidate[(i / 4)] = c2;
   2830				else if (result[c2][i] + result[c2][i + 1] == 0)
   2831					candidate[(i / 4)] = c1;
   2832				else
   2833					simubitmap = simubitmap | (1 << i);
   2834			} else {
   2835				simubitmap = simubitmap | (1 << i);
   2836			}
   2837		}
   2838	}
   2839
   2840	if (simubitmap == 0) {
   2841		for (i = 0; i < (bound / 4); i++) {
   2842			if (candidate[i] >= 0) {
   2843				for (j = i * 4; j < (i + 1) * 4 - 2; j++)
   2844					result[3][j] = result[candidate[i]][j];
   2845				retval = false;
   2846			}
   2847		}
   2848		return retval;
   2849	} else if (!(simubitmap & 0x0f)) {
   2850		/* path A OK */
   2851		for (i = 0; i < 4; i++)
   2852			result[3][i] = result[c1][i];
   2853	} else if (!(simubitmap & 0xf0) && priv->tx_paths > 1) {
   2854		/* path B OK */
   2855		for (i = 4; i < 8; i++)
   2856			result[3][i] = result[c1][i];
   2857	}
   2858
   2859	return false;
   2860}
   2861
   2862bool rtl8xxxu_gen2_simularity_compare(struct rtl8xxxu_priv *priv,
   2863				      int result[][8], int c1, int c2)
   2864{
   2865	u32 i, j, diff, simubitmap, bound = 0;
   2866	int candidate[2] = {-1, -1};	/* for path A and path B */
   2867	int tmp1, tmp2;
   2868	bool retval = true;
   2869
   2870	if (priv->tx_paths > 1)
   2871		bound = 8;
   2872	else
   2873		bound = 4;
   2874
   2875	simubitmap = 0;
   2876
   2877	for (i = 0; i < bound; i++) {
   2878		if (i & 1) {
   2879			if ((result[c1][i] & 0x00000200))
   2880				tmp1 = result[c1][i] | 0xfffffc00;
   2881			else
   2882				tmp1 = result[c1][i];
   2883
   2884			if ((result[c2][i]& 0x00000200))
   2885				tmp2 = result[c2][i] | 0xfffffc00;
   2886			else
   2887				tmp2 = result[c2][i];
   2888		} else {
   2889			tmp1 = result[c1][i];
   2890			tmp2 = result[c2][i];
   2891		}
   2892
   2893		diff = (tmp1 > tmp2) ? (tmp1 - tmp2) : (tmp2 - tmp1);
   2894
   2895		if (diff > MAX_TOLERANCE) {
   2896			if ((i == 2 || i == 6) && !simubitmap) {
   2897				if (result[c1][i] + result[c1][i + 1] == 0)
   2898					candidate[(i / 4)] = c2;
   2899				else if (result[c2][i] + result[c2][i + 1] == 0)
   2900					candidate[(i / 4)] = c1;
   2901				else
   2902					simubitmap = simubitmap | (1 << i);
   2903			} else {
   2904				simubitmap = simubitmap | (1 << i);
   2905			}
   2906		}
   2907	}
   2908
   2909	if (simubitmap == 0) {
   2910		for (i = 0; i < (bound / 4); i++) {
   2911			if (candidate[i] >= 0) {
   2912				for (j = i * 4; j < (i + 1) * 4 - 2; j++)
   2913					result[3][j] = result[candidate[i]][j];
   2914				retval = false;
   2915			}
   2916		}
   2917		return retval;
   2918	} else {
   2919		if (!(simubitmap & 0x03)) {
   2920			/* path A TX OK */
   2921			for (i = 0; i < 2; i++)
   2922				result[3][i] = result[c1][i];
   2923		}
   2924
   2925		if (!(simubitmap & 0x0c)) {
   2926			/* path A RX OK */
   2927			for (i = 2; i < 4; i++)
   2928				result[3][i] = result[c1][i];
   2929		}
   2930
   2931		if (!(simubitmap & 0x30) && priv->tx_paths > 1) {
   2932			/* path B RX OK */
   2933			for (i = 4; i < 6; i++)
   2934				result[3][i] = result[c1][i];
   2935		}
   2936
   2937		if (!(simubitmap & 0x30) && priv->tx_paths > 1) {
   2938			/* path B RX OK */
   2939			for (i = 6; i < 8; i++)
   2940				result[3][i] = result[c1][i];
   2941		}
   2942	}
   2943
   2944	return false;
   2945}
   2946
   2947void
   2948rtl8xxxu_save_mac_regs(struct rtl8xxxu_priv *priv, const u32 *reg, u32 *backup)
   2949{
   2950	int i;
   2951
   2952	for (i = 0; i < (RTL8XXXU_MAC_REGS - 1); i++)
   2953		backup[i] = rtl8xxxu_read8(priv, reg[i]);
   2954
   2955	backup[i] = rtl8xxxu_read32(priv, reg[i]);
   2956}
   2957
   2958void rtl8xxxu_restore_mac_regs(struct rtl8xxxu_priv *priv,
   2959			       const u32 *reg, u32 *backup)
   2960{
   2961	int i;
   2962
   2963	for (i = 0; i < (RTL8XXXU_MAC_REGS - 1); i++)
   2964		rtl8xxxu_write8(priv, reg[i], backup[i]);
   2965
   2966	rtl8xxxu_write32(priv, reg[i], backup[i]);
   2967}
   2968
   2969void rtl8xxxu_save_regs(struct rtl8xxxu_priv *priv, const u32 *regs,
   2970			u32 *backup, int count)
   2971{
   2972	int i;
   2973
   2974	for (i = 0; i < count; i++)
   2975		backup[i] = rtl8xxxu_read32(priv, regs[i]);
   2976}
   2977
   2978void rtl8xxxu_restore_regs(struct rtl8xxxu_priv *priv, const u32 *regs,
   2979			   u32 *backup, int count)
   2980{
   2981	int i;
   2982
   2983	for (i = 0; i < count; i++)
   2984		rtl8xxxu_write32(priv, regs[i], backup[i]);
   2985}
   2986
   2987
   2988void rtl8xxxu_path_adda_on(struct rtl8xxxu_priv *priv, const u32 *regs,
   2989			   bool path_a_on)
   2990{
   2991	u32 path_on;
   2992	int i;
   2993
   2994	if (priv->tx_paths == 1) {
   2995		path_on = priv->fops->adda_1t_path_on;
   2996		rtl8xxxu_write32(priv, regs[0], priv->fops->adda_1t_init);
   2997	} else {
   2998		path_on = path_a_on ? priv->fops->adda_2t_path_on_a :
   2999			priv->fops->adda_2t_path_on_b;
   3000
   3001		rtl8xxxu_write32(priv, regs[0], path_on);
   3002	}
   3003
   3004	for (i = 1 ; i < RTL8XXXU_ADDA_REGS ; i++)
   3005		rtl8xxxu_write32(priv, regs[i], path_on);
   3006}
   3007
   3008void rtl8xxxu_mac_calibration(struct rtl8xxxu_priv *priv,
   3009			      const u32 *regs, u32 *backup)
   3010{
   3011	int i = 0;
   3012
   3013	rtl8xxxu_write8(priv, regs[i], 0x3f);
   3014
   3015	for (i = 1 ; i < (RTL8XXXU_MAC_REGS - 1); i++)
   3016		rtl8xxxu_write8(priv, regs[i], (u8)(backup[i] & ~BIT(3)));
   3017
   3018	rtl8xxxu_write8(priv, regs[i], (u8)(backup[i] & ~BIT(5)));
   3019}
   3020
   3021static int rtl8xxxu_iqk_path_a(struct rtl8xxxu_priv *priv)
   3022{
   3023	u32 reg_eac, reg_e94, reg_e9c, reg_ea4, val32;
   3024	int result = 0;
   3025
   3026	/* path-A IQK setting */
   3027	rtl8xxxu_write32(priv, REG_TX_IQK_TONE_A, 0x10008c1f);
   3028	rtl8xxxu_write32(priv, REG_RX_IQK_TONE_A, 0x10008c1f);
   3029	rtl8xxxu_write32(priv, REG_TX_IQK_PI_A, 0x82140102);
   3030
   3031	val32 = (priv->rf_paths > 1) ? 0x28160202 :
   3032		/*IS_81xxC_VENDOR_UMC_B_CUT(pHalData->VersionID)?0x28160202: */
   3033		0x28160502;
   3034	rtl8xxxu_write32(priv, REG_RX_IQK_PI_A, val32);
   3035
   3036	/* path-B IQK setting */
   3037	if (priv->rf_paths > 1) {
   3038		rtl8xxxu_write32(priv, REG_TX_IQK_TONE_B, 0x10008c22);
   3039		rtl8xxxu_write32(priv, REG_RX_IQK_TONE_B, 0x10008c22);
   3040		rtl8xxxu_write32(priv, REG_TX_IQK_PI_B, 0x82140102);
   3041		rtl8xxxu_write32(priv, REG_RX_IQK_PI_B, 0x28160202);
   3042	}
   3043
   3044	/* LO calibration setting */
   3045	rtl8xxxu_write32(priv, REG_IQK_AGC_RSP, 0x001028d1);
   3046
   3047	/* One shot, path A LOK & IQK */
   3048	rtl8xxxu_write32(priv, REG_IQK_AGC_PTS, 0xf9000000);
   3049	rtl8xxxu_write32(priv, REG_IQK_AGC_PTS, 0xf8000000);
   3050
   3051	mdelay(1);
   3052
   3053	/* Check failed */
   3054	reg_eac = rtl8xxxu_read32(priv, REG_RX_POWER_AFTER_IQK_A_2);
   3055	reg_e94 = rtl8xxxu_read32(priv, REG_TX_POWER_BEFORE_IQK_A);
   3056	reg_e9c = rtl8xxxu_read32(priv, REG_TX_POWER_AFTER_IQK_A);
   3057	reg_ea4 = rtl8xxxu_read32(priv, REG_RX_POWER_BEFORE_IQK_A_2);
   3058
   3059	if (!(reg_eac & BIT(28)) &&
   3060	    ((reg_e94 & 0x03ff0000) != 0x01420000) &&
   3061	    ((reg_e9c & 0x03ff0000) != 0x00420000))
   3062		result |= 0x01;
   3063	else	/* If TX not OK, ignore RX */
   3064		goto out;
   3065
   3066	/* If TX is OK, check whether RX is OK */
   3067	if (!(reg_eac & BIT(27)) &&
   3068	    ((reg_ea4 & 0x03ff0000) != 0x01320000) &&
   3069	    ((reg_eac & 0x03ff0000) != 0x00360000))
   3070		result |= 0x02;
   3071	else
   3072		dev_warn(&priv->udev->dev, "%s: Path A RX IQK failed!\n",
   3073			 __func__);
   3074out:
   3075	return result;
   3076}
   3077
   3078static int rtl8xxxu_iqk_path_b(struct rtl8xxxu_priv *priv)
   3079{
   3080	u32 reg_eac, reg_eb4, reg_ebc, reg_ec4, reg_ecc;
   3081	int result = 0;
   3082
   3083	/* One shot, path B LOK & IQK */
   3084	rtl8xxxu_write32(priv, REG_IQK_AGC_CONT, 0x00000002);
   3085	rtl8xxxu_write32(priv, REG_IQK_AGC_CONT, 0x00000000);
   3086
   3087	mdelay(1);
   3088
   3089	/* Check failed */
   3090	reg_eac = rtl8xxxu_read32(priv, REG_RX_POWER_AFTER_IQK_A_2);
   3091	reg_eb4 = rtl8xxxu_read32(priv, REG_TX_POWER_BEFORE_IQK_B);
   3092	reg_ebc = rtl8xxxu_read32(priv, REG_TX_POWER_AFTER_IQK_B);
   3093	reg_ec4 = rtl8xxxu_read32(priv, REG_RX_POWER_BEFORE_IQK_B_2);
   3094	reg_ecc = rtl8xxxu_read32(priv, REG_RX_POWER_AFTER_IQK_B_2);
   3095
   3096	if (!(reg_eac & BIT(31)) &&
   3097	    ((reg_eb4 & 0x03ff0000) != 0x01420000) &&
   3098	    ((reg_ebc & 0x03ff0000) != 0x00420000))
   3099		result |= 0x01;
   3100	else
   3101		goto out;
   3102
   3103	if (!(reg_eac & BIT(30)) &&
   3104	    (((reg_ec4 & 0x03ff0000) >> 16) != 0x132) &&
   3105	    (((reg_ecc & 0x03ff0000) >> 16) != 0x36))
   3106		result |= 0x02;
   3107	else
   3108		dev_warn(&priv->udev->dev, "%s: Path B RX IQK failed!\n",
   3109			 __func__);
   3110out:
   3111	return result;
   3112}
   3113
   3114static void rtl8xxxu_phy_iqcalibrate(struct rtl8xxxu_priv *priv,
   3115				     int result[][8], int t)
   3116{
   3117	struct device *dev = &priv->udev->dev;
   3118	u32 i, val32;
   3119	int path_a_ok, path_b_ok;
   3120	int retry = 2;
   3121	static const u32 adda_regs[RTL8XXXU_ADDA_REGS] = {
   3122		REG_FPGA0_XCD_SWITCH_CTRL, REG_BLUETOOTH,
   3123		REG_RX_WAIT_CCA, REG_TX_CCK_RFON,
   3124		REG_TX_CCK_BBON, REG_TX_OFDM_RFON,
   3125		REG_TX_OFDM_BBON, REG_TX_TO_RX,
   3126		REG_TX_TO_TX, REG_RX_CCK,
   3127		REG_RX_OFDM, REG_RX_WAIT_RIFS,
   3128		REG_RX_TO_RX, REG_STANDBY,
   3129		REG_SLEEP, REG_PMPD_ANAEN
   3130	};
   3131	static const u32 iqk_mac_regs[RTL8XXXU_MAC_REGS] = {
   3132		REG_TXPAUSE, REG_BEACON_CTRL,
   3133		REG_BEACON_CTRL_1, REG_GPIO_MUXCFG
   3134	};
   3135	static const u32 iqk_bb_regs[RTL8XXXU_BB_REGS] = {
   3136		REG_OFDM0_TRX_PATH_ENABLE, REG_OFDM0_TR_MUX_PAR,
   3137		REG_FPGA0_XCD_RF_SW_CTRL, REG_CONFIG_ANT_A, REG_CONFIG_ANT_B,
   3138		REG_FPGA0_XAB_RF_SW_CTRL, REG_FPGA0_XA_RF_INT_OE,
   3139		REG_FPGA0_XB_RF_INT_OE, REG_FPGA0_RF_MODE
   3140	};
   3141
   3142	/*
   3143	 * Note: IQ calibration must be performed after loading
   3144	 *       PHY_REG.txt , and radio_a, radio_b.txt
   3145	 */
   3146
   3147	if (t == 0) {
   3148		/* Save ADDA parameters, turn Path A ADDA on */
   3149		rtl8xxxu_save_regs(priv, adda_regs, priv->adda_backup,
   3150				   RTL8XXXU_ADDA_REGS);
   3151		rtl8xxxu_save_mac_regs(priv, iqk_mac_regs, priv->mac_backup);
   3152		rtl8xxxu_save_regs(priv, iqk_bb_regs,
   3153				   priv->bb_backup, RTL8XXXU_BB_REGS);
   3154	}
   3155
   3156	rtl8xxxu_path_adda_on(priv, adda_regs, true);
   3157
   3158	if (t == 0) {
   3159		val32 = rtl8xxxu_read32(priv, REG_FPGA0_XA_HSSI_PARM1);
   3160		if (val32 & FPGA0_HSSI_PARM1_PI)
   3161			priv->pi_enabled = 1;
   3162	}
   3163
   3164	if (!priv->pi_enabled) {
   3165		/* Switch BB to PI mode to do IQ Calibration. */
   3166		rtl8xxxu_write32(priv, REG_FPGA0_XA_HSSI_PARM1, 0x01000100);
   3167		rtl8xxxu_write32(priv, REG_FPGA0_XB_HSSI_PARM1, 0x01000100);
   3168	}
   3169
   3170	val32 = rtl8xxxu_read32(priv, REG_FPGA0_RF_MODE);
   3171	val32 &= ~FPGA_RF_MODE_CCK;
   3172	rtl8xxxu_write32(priv, REG_FPGA0_RF_MODE, val32);
   3173
   3174	rtl8xxxu_write32(priv, REG_OFDM0_TRX_PATH_ENABLE, 0x03a05600);
   3175	rtl8xxxu_write32(priv, REG_OFDM0_TR_MUX_PAR, 0x000800e4);
   3176	rtl8xxxu_write32(priv, REG_FPGA0_XCD_RF_SW_CTRL, 0x22204000);
   3177
   3178	if (!priv->no_pape) {
   3179		val32 = rtl8xxxu_read32(priv, REG_FPGA0_XAB_RF_SW_CTRL);
   3180		val32 |= (FPGA0_RF_PAPE |
   3181			  (FPGA0_RF_PAPE << FPGA0_RF_BD_CTRL_SHIFT));
   3182		rtl8xxxu_write32(priv, REG_FPGA0_XAB_RF_SW_CTRL, val32);
   3183	}
   3184
   3185	val32 = rtl8xxxu_read32(priv, REG_FPGA0_XA_RF_INT_OE);
   3186	val32 &= ~BIT(10);
   3187	rtl8xxxu_write32(priv, REG_FPGA0_XA_RF_INT_OE, val32);
   3188	val32 = rtl8xxxu_read32(priv, REG_FPGA0_XB_RF_INT_OE);
   3189	val32 &= ~BIT(10);
   3190	rtl8xxxu_write32(priv, REG_FPGA0_XB_RF_INT_OE, val32);
   3191
   3192	if (priv->tx_paths > 1) {
   3193		rtl8xxxu_write32(priv, REG_FPGA0_XA_LSSI_PARM, 0x00010000);
   3194		rtl8xxxu_write32(priv, REG_FPGA0_XB_LSSI_PARM, 0x00010000);
   3195	}
   3196
   3197	/* MAC settings */
   3198	rtl8xxxu_mac_calibration(priv, iqk_mac_regs, priv->mac_backup);
   3199
   3200	/* Page B init */
   3201	rtl8xxxu_write32(priv, REG_CONFIG_ANT_A, 0x00080000);
   3202
   3203	if (priv->tx_paths > 1)
   3204		rtl8xxxu_write32(priv, REG_CONFIG_ANT_B, 0x00080000);
   3205
   3206	/* IQ calibration setting */
   3207	rtl8xxxu_write32(priv, REG_FPGA0_IQK, 0x80800000);
   3208	rtl8xxxu_write32(priv, REG_TX_IQK, 0x01007c00);
   3209	rtl8xxxu_write32(priv, REG_RX_IQK, 0x01004800);
   3210
   3211	for (i = 0; i < retry; i++) {
   3212		path_a_ok = rtl8xxxu_iqk_path_a(priv);
   3213		if (path_a_ok == 0x03) {
   3214			val32 = rtl8xxxu_read32(priv,
   3215						REG_TX_POWER_BEFORE_IQK_A);
   3216			result[t][0] = (val32 >> 16) & 0x3ff;
   3217			val32 = rtl8xxxu_read32(priv,
   3218						REG_TX_POWER_AFTER_IQK_A);
   3219			result[t][1] = (val32 >> 16) & 0x3ff;
   3220			val32 = rtl8xxxu_read32(priv,
   3221						REG_RX_POWER_BEFORE_IQK_A_2);
   3222			result[t][2] = (val32 >> 16) & 0x3ff;
   3223			val32 = rtl8xxxu_read32(priv,
   3224						REG_RX_POWER_AFTER_IQK_A_2);
   3225			result[t][3] = (val32 >> 16) & 0x3ff;
   3226			break;
   3227		} else if (i == (retry - 1) && path_a_ok == 0x01) {
   3228			/* TX IQK OK */
   3229			dev_dbg(dev, "%s: Path A IQK Only Tx Success!!\n",
   3230				__func__);
   3231
   3232			val32 = rtl8xxxu_read32(priv,
   3233						REG_TX_POWER_BEFORE_IQK_A);
   3234			result[t][0] = (val32 >> 16) & 0x3ff;
   3235			val32 = rtl8xxxu_read32(priv,
   3236						REG_TX_POWER_AFTER_IQK_A);
   3237			result[t][1] = (val32 >> 16) & 0x3ff;
   3238		}
   3239	}
   3240
   3241	if (!path_a_ok)
   3242		dev_dbg(dev, "%s: Path A IQK failed!\n", __func__);
   3243
   3244	if (priv->tx_paths > 1) {
   3245		/*
   3246		 * Path A into standby
   3247		 */
   3248		rtl8xxxu_write32(priv, REG_FPGA0_IQK, 0x0);
   3249		rtl8xxxu_write32(priv, REG_FPGA0_XA_LSSI_PARM, 0x00010000);
   3250		rtl8xxxu_write32(priv, REG_FPGA0_IQK, 0x80800000);
   3251
   3252		/* Turn Path B ADDA on */
   3253		rtl8xxxu_path_adda_on(priv, adda_regs, false);
   3254
   3255		for (i = 0; i < retry; i++) {
   3256			path_b_ok = rtl8xxxu_iqk_path_b(priv);
   3257			if (path_b_ok == 0x03) {
   3258				val32 = rtl8xxxu_read32(priv, REG_TX_POWER_BEFORE_IQK_B);
   3259				result[t][4] = (val32 >> 16) & 0x3ff;
   3260				val32 = rtl8xxxu_read32(priv, REG_TX_POWER_AFTER_IQK_B);
   3261				result[t][5] = (val32 >> 16) & 0x3ff;
   3262				val32 = rtl8xxxu_read32(priv, REG_RX_POWER_BEFORE_IQK_B_2);
   3263				result[t][6] = (val32 >> 16) & 0x3ff;
   3264				val32 = rtl8xxxu_read32(priv, REG_RX_POWER_AFTER_IQK_B_2);
   3265				result[t][7] = (val32 >> 16) & 0x3ff;
   3266				break;
   3267			} else if (i == (retry - 1) && path_b_ok == 0x01) {
   3268				/* TX IQK OK */
   3269				val32 = rtl8xxxu_read32(priv, REG_TX_POWER_BEFORE_IQK_B);
   3270				result[t][4] = (val32 >> 16) & 0x3ff;
   3271				val32 = rtl8xxxu_read32(priv, REG_TX_POWER_AFTER_IQK_B);
   3272				result[t][5] = (val32 >> 16) & 0x3ff;
   3273			}
   3274		}
   3275
   3276		if (!path_b_ok)
   3277			dev_dbg(dev, "%s: Path B IQK failed!\n", __func__);
   3278	}
   3279
   3280	/* Back to BB mode, load original value */
   3281	rtl8xxxu_write32(priv, REG_FPGA0_IQK, 0);
   3282
   3283	if (t) {
   3284		if (!priv->pi_enabled) {
   3285			/*
   3286			 * Switch back BB to SI mode after finishing
   3287			 * IQ Calibration
   3288			 */
   3289			val32 = 0x01000000;
   3290			rtl8xxxu_write32(priv, REG_FPGA0_XA_HSSI_PARM1, val32);
   3291			rtl8xxxu_write32(priv, REG_FPGA0_XB_HSSI_PARM1, val32);
   3292		}
   3293
   3294		/* Reload ADDA power saving parameters */
   3295		rtl8xxxu_restore_regs(priv, adda_regs, priv->adda_backup,
   3296				      RTL8XXXU_ADDA_REGS);
   3297
   3298		/* Reload MAC parameters */
   3299		rtl8xxxu_restore_mac_regs(priv, iqk_mac_regs, priv->mac_backup);
   3300
   3301		/* Reload BB parameters */
   3302		rtl8xxxu_restore_regs(priv, iqk_bb_regs,
   3303				      priv->bb_backup, RTL8XXXU_BB_REGS);
   3304
   3305		/* Restore RX initial gain */
   3306		rtl8xxxu_write32(priv, REG_FPGA0_XA_LSSI_PARM, 0x00032ed3);
   3307
   3308		if (priv->tx_paths > 1) {
   3309			rtl8xxxu_write32(priv, REG_FPGA0_XB_LSSI_PARM,
   3310					 0x00032ed3);
   3311		}
   3312
   3313		/* Load 0xe30 IQC default value */
   3314		rtl8xxxu_write32(priv, REG_TX_IQK_TONE_A, 0x01008c00);
   3315		rtl8xxxu_write32(priv, REG_RX_IQK_TONE_A, 0x01008c00);
   3316	}
   3317}
   3318
   3319void rtl8xxxu_gen2_prepare_calibrate(struct rtl8xxxu_priv *priv, u8 start)
   3320{
   3321	struct h2c_cmd h2c;
   3322
   3323	memset(&h2c, 0, sizeof(struct h2c_cmd));
   3324	h2c.bt_wlan_calibration.cmd = H2C_8723B_BT_WLAN_CALIBRATION;
   3325	h2c.bt_wlan_calibration.data = start;
   3326
   3327	rtl8xxxu_gen2_h2c_cmd(priv, &h2c, sizeof(h2c.bt_wlan_calibration));
   3328}
   3329
   3330void rtl8xxxu_gen1_phy_iq_calibrate(struct rtl8xxxu_priv *priv)
   3331{
   3332	struct device *dev = &priv->udev->dev;
   3333	int result[4][8];	/* last is final result */
   3334	int i, candidate;
   3335	bool path_a_ok, path_b_ok;
   3336	u32 reg_e94, reg_e9c, reg_ea4, reg_eac;
   3337	u32 reg_eb4, reg_ebc, reg_ec4, reg_ecc;
   3338	s32 reg_tmp = 0;
   3339	bool simu;
   3340
   3341	memset(result, 0, sizeof(result));
   3342	candidate = -1;
   3343
   3344	path_a_ok = false;
   3345	path_b_ok = false;
   3346
   3347	rtl8xxxu_read32(priv, REG_FPGA0_RF_MODE);
   3348
   3349	for (i = 0; i < 3; i++) {
   3350		rtl8xxxu_phy_iqcalibrate(priv, result, i);
   3351
   3352		if (i == 1) {
   3353			simu = rtl8xxxu_simularity_compare(priv, result, 0, 1);
   3354			if (simu) {
   3355				candidate = 0;
   3356				break;
   3357			}
   3358		}
   3359
   3360		if (i == 2) {
   3361			simu = rtl8xxxu_simularity_compare(priv, result, 0, 2);
   3362			if (simu) {
   3363				candidate = 0;
   3364				break;
   3365			}
   3366
   3367			simu = rtl8xxxu_simularity_compare(priv, result, 1, 2);
   3368			if (simu) {
   3369				candidate = 1;
   3370			} else {
   3371				for (i = 0; i < 8; i++)
   3372					reg_tmp += result[3][i];
   3373
   3374				if (reg_tmp)
   3375					candidate = 3;
   3376				else
   3377					candidate = -1;
   3378			}
   3379		}
   3380	}
   3381
   3382	for (i = 0; i < 4; i++) {
   3383		reg_e94 = result[i][0];
   3384		reg_e9c = result[i][1];
   3385		reg_ea4 = result[i][2];
   3386		reg_eac = result[i][3];
   3387		reg_eb4 = result[i][4];
   3388		reg_ebc = result[i][5];
   3389		reg_ec4 = result[i][6];
   3390		reg_ecc = result[i][7];
   3391	}
   3392
   3393	if (candidate >= 0) {
   3394		reg_e94 = result[candidate][0];
   3395		priv->rege94 =  reg_e94;
   3396		reg_e9c = result[candidate][1];
   3397		priv->rege9c = reg_e9c;
   3398		reg_ea4 = result[candidate][2];
   3399		reg_eac = result[candidate][3];
   3400		reg_eb4 = result[candidate][4];
   3401		priv->regeb4 = reg_eb4;
   3402		reg_ebc = result[candidate][5];
   3403		priv->regebc = reg_ebc;
   3404		reg_ec4 = result[candidate][6];
   3405		reg_ecc = result[candidate][7];
   3406		dev_dbg(dev, "%s: candidate is %x\n", __func__, candidate);
   3407		dev_dbg(dev,
   3408			"%s: e94 =%x e9c=%x ea4=%x eac=%x eb4=%x ebc=%x ec4=%x ecc=%x\n",
   3409			__func__, reg_e94, reg_e9c,
   3410			reg_ea4, reg_eac, reg_eb4, reg_ebc, reg_ec4, reg_ecc);
   3411		path_a_ok = true;
   3412		path_b_ok = true;
   3413	} else {
   3414		reg_e94 = reg_eb4 = priv->rege94 = priv->regeb4 = 0x100;
   3415		reg_e9c = reg_ebc = priv->rege9c = priv->regebc = 0x0;
   3416	}
   3417
   3418	if (reg_e94 && candidate >= 0)
   3419		rtl8xxxu_fill_iqk_matrix_a(priv, path_a_ok, result,
   3420					   candidate, (reg_ea4 == 0));
   3421
   3422	if (priv->tx_paths > 1 && reg_eb4)
   3423		rtl8xxxu_fill_iqk_matrix_b(priv, path_b_ok, result,
   3424					   candidate, (reg_ec4 == 0));
   3425
   3426	rtl8xxxu_save_regs(priv, rtl8xxxu_iqk_phy_iq_bb_reg,
   3427			   priv->bb_recovery_backup, RTL8XXXU_BB_REGS);
   3428}
   3429
   3430static void rtl8723a_phy_lc_calibrate(struct rtl8xxxu_priv *priv)
   3431{
   3432	u32 val32;
   3433	u32 rf_amode, rf_bmode = 0, lstf;
   3434
   3435	/* Check continuous TX and Packet TX */
   3436	lstf = rtl8xxxu_read32(priv, REG_OFDM1_LSTF);
   3437
   3438	if (lstf & OFDM_LSTF_MASK) {
   3439		/* Disable all continuous TX */
   3440		val32 = lstf & ~OFDM_LSTF_MASK;
   3441		rtl8xxxu_write32(priv, REG_OFDM1_LSTF, val32);
   3442
   3443		/* Read original RF mode Path A */
   3444		rf_amode = rtl8xxxu_read_rfreg(priv, RF_A, RF6052_REG_AC);
   3445
   3446		/* Set RF mode to standby Path A */
   3447		rtl8xxxu_write_rfreg(priv, RF_A, RF6052_REG_AC,
   3448				     (rf_amode & 0x8ffff) | 0x10000);
   3449
   3450		/* Path-B */
   3451		if (priv->tx_paths > 1) {
   3452			rf_bmode = rtl8xxxu_read_rfreg(priv, RF_B,
   3453						       RF6052_REG_AC);
   3454
   3455			rtl8xxxu_write_rfreg(priv, RF_B, RF6052_REG_AC,
   3456					     (rf_bmode & 0x8ffff) | 0x10000);
   3457		}
   3458	} else {
   3459		/*  Deal with Packet TX case */
   3460		/*  block all queues */
   3461		rtl8xxxu_write8(priv, REG_TXPAUSE, 0xff);
   3462	}
   3463
   3464	/* Start LC calibration */
   3465	if (priv->fops->has_s0s1)
   3466		rtl8xxxu_write_rfreg(priv, RF_A, RF6052_REG_S0S1, 0xdfbe0);
   3467	val32 = rtl8xxxu_read_rfreg(priv, RF_A, RF6052_REG_MODE_AG);
   3468	val32 |= 0x08000;
   3469	rtl8xxxu_write_rfreg(priv, RF_A, RF6052_REG_MODE_AG, val32);
   3470
   3471	msleep(100);
   3472
   3473	if (priv->fops->has_s0s1)
   3474		rtl8xxxu_write_rfreg(priv, RF_A, RF6052_REG_S0S1, 0xdffe0);
   3475
   3476	/* Restore original parameters */
   3477	if (lstf & OFDM_LSTF_MASK) {
   3478		/* Path-A */
   3479		rtl8xxxu_write32(priv, REG_OFDM1_LSTF, lstf);
   3480		rtl8xxxu_write_rfreg(priv, RF_A, RF6052_REG_AC, rf_amode);
   3481
   3482		/* Path-B */
   3483		if (priv->tx_paths > 1)
   3484			rtl8xxxu_write_rfreg(priv, RF_B, RF6052_REG_AC,
   3485					     rf_bmode);
   3486	} else /*  Deal with Packet TX case */
   3487		rtl8xxxu_write8(priv, REG_TXPAUSE, 0x00);
   3488}
   3489
   3490static int rtl8xxxu_set_mac(struct rtl8xxxu_priv *priv)
   3491{
   3492	int i;
   3493	u16 reg;
   3494
   3495	reg = REG_MACID;
   3496
   3497	for (i = 0; i < ETH_ALEN; i++)
   3498		rtl8xxxu_write8(priv, reg + i, priv->mac_addr[i]);
   3499
   3500	return 0;
   3501}
   3502
   3503static int rtl8xxxu_set_bssid(struct rtl8xxxu_priv *priv, const u8 *bssid)
   3504{
   3505	int i;
   3506	u16 reg;
   3507
   3508	dev_dbg(&priv->udev->dev, "%s: (%pM)\n", __func__, bssid);
   3509
   3510	reg = REG_BSSID;
   3511
   3512	for (i = 0; i < ETH_ALEN; i++)
   3513		rtl8xxxu_write8(priv, reg + i, bssid[i]);
   3514
   3515	return 0;
   3516}
   3517
   3518static void
   3519rtl8xxxu_set_ampdu_factor(struct rtl8xxxu_priv *priv, u8 ampdu_factor)
   3520{
   3521	u8 vals[4] = { 0x41, 0xa8, 0x72, 0xb9 };
   3522	u8 max_agg = 0xf;
   3523	int i;
   3524
   3525	ampdu_factor = 1 << (ampdu_factor + 2);
   3526	if (ampdu_factor > max_agg)
   3527		ampdu_factor = max_agg;
   3528
   3529	for (i = 0; i < 4; i++) {
   3530		if ((vals[i] & 0xf0) > (ampdu_factor << 4))
   3531			vals[i] = (vals[i] & 0x0f) | (ampdu_factor << 4);
   3532
   3533		if ((vals[i] & 0x0f) > ampdu_factor)
   3534			vals[i] = (vals[i] & 0xf0) | ampdu_factor;
   3535
   3536		rtl8xxxu_write8(priv, REG_AGGLEN_LMT + i, vals[i]);
   3537	}
   3538}
   3539
   3540static void rtl8xxxu_set_ampdu_min_space(struct rtl8xxxu_priv *priv, u8 density)
   3541{
   3542	u8 val8;
   3543
   3544	val8 = rtl8xxxu_read8(priv, REG_AMPDU_MIN_SPACE);
   3545	val8 &= 0xf8;
   3546	val8 |= density;
   3547	rtl8xxxu_write8(priv, REG_AMPDU_MIN_SPACE, val8);
   3548}
   3549
   3550static int rtl8xxxu_active_to_emu(struct rtl8xxxu_priv *priv)
   3551{
   3552	u8 val8;
   3553	int count, ret = 0;
   3554
   3555	/* Start of rtl8723AU_card_enable_flow */
   3556	/* Act to Cardemu sequence*/
   3557	/* Turn off RF */
   3558	rtl8xxxu_write8(priv, REG_RF_CTRL, 0);
   3559
   3560	/* 0x004E[7] = 0, switch DPDT_SEL_P output from register 0x0065[2] */
   3561	val8 = rtl8xxxu_read8(priv, REG_LEDCFG2);
   3562	val8 &= ~LEDCFG2_DPDT_SELECT;
   3563	rtl8xxxu_write8(priv, REG_LEDCFG2, val8);
   3564
   3565	/* 0x0005[1] = 1 turn off MAC by HW state machine*/
   3566	val8 = rtl8xxxu_read8(priv, REG_APS_FSMCO + 1);
   3567	val8 |= BIT(1);
   3568	rtl8xxxu_write8(priv, REG_APS_FSMCO + 1, val8);
   3569
   3570	for (count = RTL8XXXU_MAX_REG_POLL; count; count--) {
   3571		val8 = rtl8xxxu_read8(priv, REG_APS_FSMCO + 1);
   3572		if ((val8 & BIT(1)) == 0)
   3573			break;
   3574		udelay(10);
   3575	}
   3576
   3577	if (!count) {
   3578		dev_warn(&priv->udev->dev, "%s: Disabling MAC timed out\n",
   3579			 __func__);
   3580		ret = -EBUSY;
   3581		goto exit;
   3582	}
   3583
   3584	/* 0x0000[5] = 1 analog Ips to digital, 1:isolation */
   3585	val8 = rtl8xxxu_read8(priv, REG_SYS_ISO_CTRL);
   3586	val8 |= SYS_ISO_ANALOG_IPS;
   3587	rtl8xxxu_write8(priv, REG_SYS_ISO_CTRL, val8);
   3588
   3589	/* 0x0020[0] = 0 disable LDOA12 MACRO block*/
   3590	val8 = rtl8xxxu_read8(priv, REG_LDOA15_CTRL);
   3591	val8 &= ~LDOA15_ENABLE;
   3592	rtl8xxxu_write8(priv, REG_LDOA15_CTRL, val8);
   3593
   3594exit:
   3595	return ret;
   3596}
   3597
   3598int rtl8xxxu_active_to_lps(struct rtl8xxxu_priv *priv)
   3599{
   3600	u8 val8;
   3601	u8 val32;
   3602	int count, ret = 0;
   3603
   3604	rtl8xxxu_write8(priv, REG_TXPAUSE, 0xff);
   3605
   3606	/*
   3607	 * Poll - wait for RX packet to complete
   3608	 */
   3609	for (count = RTL8XXXU_MAX_REG_POLL; count; count--) {
   3610		val32 = rtl8xxxu_read32(priv, 0x5f8);
   3611		if (!val32)
   3612			break;
   3613		udelay(10);
   3614	}
   3615
   3616	if (!count) {
   3617		dev_warn(&priv->udev->dev,
   3618			 "%s: RX poll timed out (0x05f8)\n", __func__);
   3619		ret = -EBUSY;
   3620		goto exit;
   3621	}
   3622
   3623	/* Disable CCK and OFDM, clock gated */
   3624	val8 = rtl8xxxu_read8(priv, REG_SYS_FUNC);
   3625	val8 &= ~SYS_FUNC_BBRSTB;
   3626	rtl8xxxu_write8(priv, REG_SYS_FUNC, val8);
   3627
   3628	udelay(2);
   3629
   3630	/* Reset baseband */
   3631	val8 = rtl8xxxu_read8(priv, REG_SYS_FUNC);
   3632	val8 &= ~SYS_FUNC_BB_GLB_RSTN;
   3633	rtl8xxxu_write8(priv, REG_SYS_FUNC, val8);
   3634
   3635	/* Reset MAC TRX */
   3636	val8 = rtl8xxxu_read8(priv, REG_CR);
   3637	val8 = CR_HCI_TXDMA_ENABLE | CR_HCI_RXDMA_ENABLE;
   3638	rtl8xxxu_write8(priv, REG_CR, val8);
   3639
   3640	/* Reset MAC TRX */
   3641	val8 = rtl8xxxu_read8(priv, REG_CR + 1);
   3642	val8 &= ~BIT(1); /* CR_SECURITY_ENABLE */
   3643	rtl8xxxu_write8(priv, REG_CR + 1, val8);
   3644
   3645	/* Respond TX OK to scheduler */
   3646	val8 = rtl8xxxu_read8(priv, REG_DUAL_TSF_RST);
   3647	val8 |= DUAL_TSF_TX_OK;
   3648	rtl8xxxu_write8(priv, REG_DUAL_TSF_RST, val8);
   3649
   3650exit:
   3651	return ret;
   3652}
   3653
   3654void rtl8xxxu_disabled_to_emu(struct rtl8xxxu_priv *priv)
   3655{
   3656	u8 val8;
   3657
   3658	/* Clear suspend enable and power down enable*/
   3659	val8 = rtl8xxxu_read8(priv, REG_APS_FSMCO + 1);
   3660	val8 &= ~(BIT(3) | BIT(7));
   3661	rtl8xxxu_write8(priv, REG_APS_FSMCO + 1, val8);
   3662
   3663	/* 0x48[16] = 0 to disable GPIO9 as EXT WAKEUP*/
   3664	val8 = rtl8xxxu_read8(priv, REG_GPIO_INTM + 2);
   3665	val8 &= ~BIT(0);
   3666	rtl8xxxu_write8(priv, REG_GPIO_INTM + 2, val8);
   3667
   3668	/* 0x04[12:11] = 11 enable WL suspend*/
   3669	val8 = rtl8xxxu_read8(priv, REG_APS_FSMCO + 1);
   3670	val8 &= ~(BIT(3) | BIT(4));
   3671	rtl8xxxu_write8(priv, REG_APS_FSMCO + 1, val8);
   3672}
   3673
   3674static int rtl8xxxu_emu_to_disabled(struct rtl8xxxu_priv *priv)
   3675{
   3676	u8 val8;
   3677
   3678	/* 0x0007[7:0] = 0x20 SOP option to disable BG/MB */
   3679	rtl8xxxu_write8(priv, REG_APS_FSMCO + 3, 0x20);
   3680
   3681	/* 0x04[12:11] = 01 enable WL suspend */
   3682	val8 = rtl8xxxu_read8(priv, REG_APS_FSMCO + 1);
   3683	val8 &= ~BIT(4);
   3684	val8 |= BIT(3);
   3685	rtl8xxxu_write8(priv, REG_APS_FSMCO + 1, val8);
   3686
   3687	val8 = rtl8xxxu_read8(priv, REG_APS_FSMCO + 1);
   3688	val8 |= BIT(7);
   3689	rtl8xxxu_write8(priv, REG_APS_FSMCO + 1, val8);
   3690
   3691	/* 0x48[16] = 1 to enable GPIO9 as EXT wakeup */
   3692	val8 = rtl8xxxu_read8(priv, REG_GPIO_INTM + 2);
   3693	val8 |= BIT(0);
   3694	rtl8xxxu_write8(priv, REG_GPIO_INTM + 2, val8);
   3695
   3696	return 0;
   3697}
   3698
   3699int rtl8xxxu_flush_fifo(struct rtl8xxxu_priv *priv)
   3700{
   3701	struct device *dev = &priv->udev->dev;
   3702	u32 val32;
   3703	int retry, retval;
   3704
   3705	rtl8xxxu_write8(priv, REG_TXPAUSE, 0xff);
   3706
   3707	val32 = rtl8xxxu_read32(priv, REG_RXPKT_NUM);
   3708	val32 |= RXPKT_NUM_RW_RELEASE_EN;
   3709	rtl8xxxu_write32(priv, REG_RXPKT_NUM, val32);
   3710
   3711	retry = 100;
   3712	retval = -EBUSY;
   3713
   3714	do {
   3715		val32 = rtl8xxxu_read32(priv, REG_RXPKT_NUM);
   3716		if (val32 & RXPKT_NUM_RXDMA_IDLE) {
   3717			retval = 0;
   3718			break;
   3719		}
   3720	} while (retry--);
   3721
   3722	rtl8xxxu_write16(priv, REG_RQPN_NPQ, 0);
   3723	rtl8xxxu_write32(priv, REG_RQPN, 0x80000000);
   3724	mdelay(2);
   3725
   3726	if (!retry)
   3727		dev_warn(dev, "Failed to flush FIFO\n");
   3728
   3729	return retval;
   3730}
   3731
   3732void rtl8xxxu_gen1_usb_quirks(struct rtl8xxxu_priv *priv)
   3733{
   3734	/* Fix USB interface interference issue */
   3735	rtl8xxxu_write8(priv, 0xfe40, 0xe0);
   3736	rtl8xxxu_write8(priv, 0xfe41, 0x8d);
   3737	rtl8xxxu_write8(priv, 0xfe42, 0x80);
   3738	/*
   3739	 * This sets TXDMA_OFFSET_DROP_DATA_EN (bit 9) as well as bits
   3740	 * 8 and 5, for which I have found no documentation.
   3741	 */
   3742	rtl8xxxu_write32(priv, REG_TXDMA_OFFSET_CHK, 0xfd0320);
   3743
   3744	/*
   3745	 * Solve too many protocol error on USB bus.
   3746	 * Can't do this for 8188/8192 UMC A cut parts
   3747	 */
   3748	if (!(!priv->chip_cut && priv->vendor_umc)) {
   3749		rtl8xxxu_write8(priv, 0xfe40, 0xe6);
   3750		rtl8xxxu_write8(priv, 0xfe41, 0x94);
   3751		rtl8xxxu_write8(priv, 0xfe42, 0x80);
   3752
   3753		rtl8xxxu_write8(priv, 0xfe40, 0xe0);
   3754		rtl8xxxu_write8(priv, 0xfe41, 0x19);
   3755		rtl8xxxu_write8(priv, 0xfe42, 0x80);
   3756
   3757		rtl8xxxu_write8(priv, 0xfe40, 0xe5);
   3758		rtl8xxxu_write8(priv, 0xfe41, 0x91);
   3759		rtl8xxxu_write8(priv, 0xfe42, 0x80);
   3760
   3761		rtl8xxxu_write8(priv, 0xfe40, 0xe2);
   3762		rtl8xxxu_write8(priv, 0xfe41, 0x81);
   3763		rtl8xxxu_write8(priv, 0xfe42, 0x80);
   3764	}
   3765}
   3766
   3767void rtl8xxxu_gen2_usb_quirks(struct rtl8xxxu_priv *priv)
   3768{
   3769	u32 val32;
   3770
   3771	val32 = rtl8xxxu_read32(priv, REG_TXDMA_OFFSET_CHK);
   3772	val32 |= TXDMA_OFFSET_DROP_DATA_EN;
   3773	rtl8xxxu_write32(priv, REG_TXDMA_OFFSET_CHK, val32);
   3774}
   3775
   3776void rtl8xxxu_power_off(struct rtl8xxxu_priv *priv)
   3777{
   3778	u8 val8;
   3779	u16 val16;
   3780	u32 val32;
   3781
   3782	/*
   3783	 * Workaround for 8188RU LNA power leakage problem.
   3784	 */
   3785	if (priv->rtl_chip == RTL8188R) {
   3786		val32 = rtl8xxxu_read32(priv, REG_FPGA0_XCD_RF_PARM);
   3787		val32 |= BIT(1);
   3788		rtl8xxxu_write32(priv, REG_FPGA0_XCD_RF_PARM, val32);
   3789	}
   3790
   3791	rtl8xxxu_flush_fifo(priv);
   3792
   3793	rtl8xxxu_active_to_lps(priv);
   3794
   3795	/* Turn off RF */
   3796	rtl8xxxu_write8(priv, REG_RF_CTRL, 0x00);
   3797
   3798	/* Reset Firmware if running in RAM */
   3799	if (rtl8xxxu_read8(priv, REG_MCU_FW_DL) & MCU_FW_RAM_SEL)
   3800		rtl8xxxu_firmware_self_reset(priv);
   3801
   3802	/* Reset MCU */
   3803	val16 = rtl8xxxu_read16(priv, REG_SYS_FUNC);
   3804	val16 &= ~SYS_FUNC_CPU_ENABLE;
   3805	rtl8xxxu_write16(priv, REG_SYS_FUNC, val16);
   3806
   3807	/* Reset MCU ready status */
   3808	rtl8xxxu_write8(priv, REG_MCU_FW_DL, 0x00);
   3809
   3810	rtl8xxxu_active_to_emu(priv);
   3811	rtl8xxxu_emu_to_disabled(priv);
   3812
   3813	/* Reset MCU IO Wrapper */
   3814	val8 = rtl8xxxu_read8(priv, REG_RSV_CTRL + 1);
   3815	val8 &= ~BIT(0);
   3816	rtl8xxxu_write8(priv, REG_RSV_CTRL + 1, val8);
   3817
   3818	val8 = rtl8xxxu_read8(priv, REG_RSV_CTRL + 1);
   3819	val8 |= BIT(0);
   3820	rtl8xxxu_write8(priv, REG_RSV_CTRL + 1, val8);
   3821
   3822	/* RSV_CTRL 0x1C[7:0] = 0x0e  lock ISO/CLK/Power control register */
   3823	rtl8xxxu_write8(priv, REG_RSV_CTRL, 0x0e);
   3824}
   3825
   3826void rtl8723bu_set_ps_tdma(struct rtl8xxxu_priv *priv,
   3827			   u8 arg1, u8 arg2, u8 arg3, u8 arg4, u8 arg5)
   3828{
   3829	struct h2c_cmd h2c;
   3830
   3831	memset(&h2c, 0, sizeof(struct h2c_cmd));
   3832	h2c.b_type_dma.cmd = H2C_8723B_B_TYPE_TDMA;
   3833	h2c.b_type_dma.data1 = arg1;
   3834	h2c.b_type_dma.data2 = arg2;
   3835	h2c.b_type_dma.data3 = arg3;
   3836	h2c.b_type_dma.data4 = arg4;
   3837	h2c.b_type_dma.data5 = arg5;
   3838	rtl8xxxu_gen2_h2c_cmd(priv, &h2c, sizeof(h2c.b_type_dma));
   3839}
   3840
   3841void rtl8xxxu_gen2_disable_rf(struct rtl8xxxu_priv *priv)
   3842{
   3843	u32 val32;
   3844
   3845	val32 = rtl8xxxu_read32(priv, REG_RX_WAIT_CCA);
   3846	val32 &= ~(BIT(22) | BIT(23));
   3847	rtl8xxxu_write32(priv, REG_RX_WAIT_CCA, val32);
   3848}
   3849
   3850static void rtl8xxxu_init_queue_reserved_page(struct rtl8xxxu_priv *priv)
   3851{
   3852	struct rtl8xxxu_fileops *fops = priv->fops;
   3853	u32 hq, lq, nq, eq, pubq;
   3854	u32 val32;
   3855
   3856	hq = 0;
   3857	lq = 0;
   3858	nq = 0;
   3859	eq = 0;
   3860	pubq = 0;
   3861
   3862	if (priv->ep_tx_high_queue)
   3863		hq = fops->page_num_hi;
   3864	if (priv->ep_tx_low_queue)
   3865		lq = fops->page_num_lo;
   3866	if (priv->ep_tx_normal_queue)
   3867		nq = fops->page_num_norm;
   3868
   3869	val32 = (nq << RQPN_NPQ_SHIFT) | (eq << RQPN_EPQ_SHIFT);
   3870	rtl8xxxu_write32(priv, REG_RQPN_NPQ, val32);
   3871
   3872	pubq = fops->total_page_num - hq - lq - nq - 1;
   3873
   3874	val32 = RQPN_LOAD;
   3875	val32 |= (hq << RQPN_HI_PQ_SHIFT);
   3876	val32 |= (lq << RQPN_LO_PQ_SHIFT);
   3877	val32 |= (pubq << RQPN_PUB_PQ_SHIFT);
   3878
   3879	rtl8xxxu_write32(priv, REG_RQPN, val32);
   3880}
   3881
   3882static int rtl8xxxu_init_device(struct ieee80211_hw *hw)
   3883{
   3884	struct rtl8xxxu_priv *priv = hw->priv;
   3885	struct device *dev = &priv->udev->dev;
   3886	struct rtl8xxxu_fileops *fops = priv->fops;
   3887	bool macpower;
   3888	int ret;
   3889	u8 val8;
   3890	u16 val16;
   3891	u32 val32;
   3892
   3893	/* Check if MAC is already powered on */
   3894	val8 = rtl8xxxu_read8(priv, REG_CR);
   3895	val16 = rtl8xxxu_read16(priv, REG_SYS_CLKR);
   3896
   3897	/*
   3898	 * Fix 92DU-VC S3 hang with the reason is that secondary mac is not
   3899	 * initialized. First MAC returns 0xea, second MAC returns 0x00
   3900	 */
   3901	if (val8 == 0xea || !(val16 & SYS_CLK_MAC_CLK_ENABLE))
   3902		macpower = false;
   3903	else
   3904		macpower = true;
   3905
   3906	if (fops->needs_full_init)
   3907		macpower = false;
   3908
   3909	ret = fops->power_on(priv);
   3910	if (ret < 0) {
   3911		dev_warn(dev, "%s: Failed power on\n", __func__);
   3912		goto exit;
   3913	}
   3914
   3915	if (!macpower)
   3916		rtl8xxxu_init_queue_reserved_page(priv);
   3917
   3918	ret = rtl8xxxu_init_queue_priority(priv);
   3919	dev_dbg(dev, "%s: init_queue_priority %i\n", __func__, ret);
   3920	if (ret)
   3921		goto exit;
   3922
   3923	/*
   3924	 * Set RX page boundary
   3925	 */
   3926	rtl8xxxu_write16(priv, REG_TRXFF_BNDY + 2, fops->trxff_boundary);
   3927
   3928	ret = rtl8xxxu_download_firmware(priv);
   3929	dev_dbg(dev, "%s: download_firmware %i\n", __func__, ret);
   3930	if (ret)
   3931		goto exit;
   3932	ret = rtl8xxxu_start_firmware(priv);
   3933	dev_dbg(dev, "%s: start_firmware %i\n", __func__, ret);
   3934	if (ret)
   3935		goto exit;
   3936
   3937	if (fops->phy_init_antenna_selection)
   3938		fops->phy_init_antenna_selection(priv);
   3939
   3940	ret = rtl8xxxu_init_mac(priv);
   3941
   3942	dev_dbg(dev, "%s: init_mac %i\n", __func__, ret);
   3943	if (ret)
   3944		goto exit;
   3945
   3946	ret = rtl8xxxu_init_phy_bb(priv);
   3947	dev_dbg(dev, "%s: init_phy_bb %i\n", __func__, ret);
   3948	if (ret)
   3949		goto exit;
   3950
   3951	ret = fops->init_phy_rf(priv);
   3952	if (ret)
   3953		goto exit;
   3954
   3955	/* RFSW Control - clear bit 14 ?? */
   3956	if (priv->rtl_chip != RTL8723B && priv->rtl_chip != RTL8192E)
   3957		rtl8xxxu_write32(priv, REG_FPGA0_TX_INFO, 0x00000003);
   3958
   3959	val32 = FPGA0_RF_TRSW | FPGA0_RF_TRSWB | FPGA0_RF_ANTSW |
   3960		FPGA0_RF_ANTSWB |
   3961		((FPGA0_RF_ANTSW | FPGA0_RF_ANTSWB) << FPGA0_RF_BD_CTRL_SHIFT);
   3962	if (!priv->no_pape) {
   3963		val32 |= (FPGA0_RF_PAPE |
   3964			  (FPGA0_RF_PAPE << FPGA0_RF_BD_CTRL_SHIFT));
   3965	}
   3966	rtl8xxxu_write32(priv, REG_FPGA0_XAB_RF_SW_CTRL, val32);
   3967
   3968	/* 0x860[6:5]= 00 - why? - this sets antenna B */
   3969	if (priv->rtl_chip != RTL8192E)
   3970		rtl8xxxu_write32(priv, REG_FPGA0_XA_RF_INT_OE, 0x66f60210);
   3971
   3972	if (!macpower) {
   3973		/*
   3974		 * Set TX buffer boundary
   3975		 */
   3976		val8 = fops->total_page_num + 1;
   3977
   3978		rtl8xxxu_write8(priv, REG_TXPKTBUF_BCNQ_BDNY, val8);
   3979		rtl8xxxu_write8(priv, REG_TXPKTBUF_MGQ_BDNY, val8);
   3980		rtl8xxxu_write8(priv, REG_TXPKTBUF_WMAC_LBK_BF_HD, val8);
   3981		rtl8xxxu_write8(priv, REG_TRXFF_BNDY, val8);
   3982		rtl8xxxu_write8(priv, REG_TDECTRL + 1, val8);
   3983	}
   3984
   3985	/*
   3986	 * The vendor drivers set PBP for all devices, except 8192e.
   3987	 * There is no explanation for this in any of the sources.
   3988	 */
   3989	val8 = (fops->pbp_rx << PBP_PAGE_SIZE_RX_SHIFT) |
   3990		(fops->pbp_tx << PBP_PAGE_SIZE_TX_SHIFT);
   3991	if (priv->rtl_chip != RTL8192E)
   3992		rtl8xxxu_write8(priv, REG_PBP, val8);
   3993
   3994	dev_dbg(dev, "%s: macpower %i\n", __func__, macpower);
   3995	if (!macpower) {
   3996		ret = fops->llt_init(priv);
   3997		if (ret) {
   3998			dev_warn(dev, "%s: LLT table init failed\n", __func__);
   3999			goto exit;
   4000		}
   4001
   4002		/*
   4003		 * Chip specific quirks
   4004		 */
   4005		fops->usb_quirks(priv);
   4006
   4007		/*
   4008		 * Enable TX report and TX report timer for 8723bu/8188eu/...
   4009		 */
   4010		if (fops->has_tx_report) {
   4011			val8 = rtl8xxxu_read8(priv, REG_TX_REPORT_CTRL);
   4012			val8 |= TX_REPORT_CTRL_TIMER_ENABLE;
   4013			rtl8xxxu_write8(priv, REG_TX_REPORT_CTRL, val8);
   4014			/* Set MAX RPT MACID */
   4015			rtl8xxxu_write8(priv, REG_TX_REPORT_CTRL + 1, 0x02);
   4016			/* TX report Timer. Unit: 32us */
   4017			rtl8xxxu_write16(priv, REG_TX_REPORT_TIME, 0xcdf0);
   4018
   4019			/* tmp ps ? */
   4020			val8 = rtl8xxxu_read8(priv, 0xa3);
   4021			val8 &= 0xf8;
   4022			rtl8xxxu_write8(priv, 0xa3, val8);
   4023		}
   4024	}
   4025
   4026	/*
   4027	 * Unit in 8 bytes, not obvious what it is used for
   4028	 */
   4029	rtl8xxxu_write8(priv, REG_RX_DRVINFO_SZ, 4);
   4030
   4031	if (priv->rtl_chip == RTL8192E) {
   4032		rtl8xxxu_write32(priv, REG_HIMR0, 0x00);
   4033		rtl8xxxu_write32(priv, REG_HIMR1, 0x00);
   4034	} else {
   4035		/*
   4036		 * Enable all interrupts - not obvious USB needs to do this
   4037		 */
   4038		rtl8xxxu_write32(priv, REG_HISR, 0xffffffff);
   4039		rtl8xxxu_write32(priv, REG_HIMR, 0xffffffff);
   4040	}
   4041
   4042	rtl8xxxu_set_mac(priv);
   4043	rtl8xxxu_set_linktype(priv, NL80211_IFTYPE_STATION);
   4044
   4045	/*
   4046	 * Configure initial WMAC settings
   4047	 */
   4048	val32 = RCR_ACCEPT_PHYS_MATCH | RCR_ACCEPT_MCAST | RCR_ACCEPT_BCAST |
   4049		RCR_ACCEPT_MGMT_FRAME | RCR_HTC_LOC_CTRL |
   4050		RCR_APPEND_PHYSTAT | RCR_APPEND_ICV | RCR_APPEND_MIC;
   4051	rtl8xxxu_write32(priv, REG_RCR, val32);
   4052
   4053	/*
   4054	 * Accept all multicast
   4055	 */
   4056	rtl8xxxu_write32(priv, REG_MAR, 0xffffffff);
   4057	rtl8xxxu_write32(priv, REG_MAR + 4, 0xffffffff);
   4058
   4059	/*
   4060	 * Init adaptive controls
   4061	 */
   4062	val32 = rtl8xxxu_read32(priv, REG_RESPONSE_RATE_SET);
   4063	val32 &= ~RESPONSE_RATE_BITMAP_ALL;
   4064	val32 |= RESPONSE_RATE_RRSR_CCK_ONLY_1M;
   4065	rtl8xxxu_write32(priv, REG_RESPONSE_RATE_SET, val32);
   4066
   4067	/* CCK = 0x0a, OFDM = 0x10 */
   4068	rtl8xxxu_set_spec_sifs(priv, 0x10, 0x10);
   4069	rtl8xxxu_set_retry(priv, 0x30, 0x30);
   4070	rtl8xxxu_set_spec_sifs(priv, 0x0a, 0x10);
   4071
   4072	/*
   4073	 * Init EDCA
   4074	 */
   4075	rtl8xxxu_write16(priv, REG_MAC_SPEC_SIFS, 0x100a);
   4076
   4077	/* Set CCK SIFS */
   4078	rtl8xxxu_write16(priv, REG_SIFS_CCK, 0x100a);
   4079
   4080	/* Set OFDM SIFS */
   4081	rtl8xxxu_write16(priv, REG_SIFS_OFDM, 0x100a);
   4082
   4083	/* TXOP */
   4084	rtl8xxxu_write32(priv, REG_EDCA_BE_PARAM, 0x005ea42b);
   4085	rtl8xxxu_write32(priv, REG_EDCA_BK_PARAM, 0x0000a44f);
   4086	rtl8xxxu_write32(priv, REG_EDCA_VI_PARAM, 0x005ea324);
   4087	rtl8xxxu_write32(priv, REG_EDCA_VO_PARAM, 0x002fa226);
   4088
   4089	/* Set data auto rate fallback retry count */
   4090	rtl8xxxu_write32(priv, REG_DARFRC, 0x00000000);
   4091	rtl8xxxu_write32(priv, REG_DARFRC + 4, 0x10080404);
   4092	rtl8xxxu_write32(priv, REG_RARFRC, 0x04030201);
   4093	rtl8xxxu_write32(priv, REG_RARFRC + 4, 0x08070605);
   4094
   4095	val8 = rtl8xxxu_read8(priv, REG_FWHW_TXQ_CTRL);
   4096	val8 |= FWHW_TXQ_CTRL_AMPDU_RETRY;
   4097	rtl8xxxu_write8(priv, REG_FWHW_TXQ_CTRL, val8);
   4098
   4099	/*  Set ACK timeout */
   4100	rtl8xxxu_write8(priv, REG_ACKTO, 0x40);
   4101
   4102	/*
   4103	 * Initialize beacon parameters
   4104	 */
   4105	val16 = BEACON_DISABLE_TSF_UPDATE | (BEACON_DISABLE_TSF_UPDATE << 8);
   4106	rtl8xxxu_write16(priv, REG_BEACON_CTRL, val16);
   4107	rtl8xxxu_write16(priv, REG_TBTT_PROHIBIT, 0x6404);
   4108	rtl8xxxu_write8(priv, REG_DRIVER_EARLY_INT, DRIVER_EARLY_INT_TIME);
   4109	rtl8xxxu_write8(priv, REG_BEACON_DMA_TIME, BEACON_DMA_ATIME_INT_TIME);
   4110	rtl8xxxu_write16(priv, REG_BEACON_TCFG, 0x660F);
   4111
   4112	/*
   4113	 * Initialize burst parameters
   4114	 */
   4115	if (priv->rtl_chip == RTL8723B) {
   4116		/*
   4117		 * For USB high speed set 512B packets
   4118		 */
   4119		val8 = rtl8xxxu_read8(priv, REG_RXDMA_PRO_8723B);
   4120		val8 &= ~(BIT(4) | BIT(5));
   4121		val8 |= BIT(4);
   4122		val8 |= BIT(1) | BIT(2) | BIT(3);
   4123		rtl8xxxu_write8(priv, REG_RXDMA_PRO_8723B, val8);
   4124
   4125		/*
   4126		 * For USB high speed set 512B packets
   4127		 */
   4128		val8 = rtl8xxxu_read8(priv, REG_HT_SINGLE_AMPDU_8723B);
   4129		val8 |= BIT(7);
   4130		rtl8xxxu_write8(priv, REG_HT_SINGLE_AMPDU_8723B, val8);
   4131
   4132		rtl8xxxu_write16(priv, REG_MAX_AGGR_NUM, 0x0c14);
   4133		rtl8xxxu_write8(priv, REG_AMPDU_MAX_TIME_8723B, 0x5e);
   4134		rtl8xxxu_write32(priv, REG_AGGLEN_LMT, 0xffffffff);
   4135		rtl8xxxu_write8(priv, REG_RX_PKT_LIMIT, 0x18);
   4136		rtl8xxxu_write8(priv, REG_PIFS, 0x00);
   4137		rtl8xxxu_write8(priv, REG_USTIME_TSF_8723B, 0x50);
   4138		rtl8xxxu_write8(priv, REG_USTIME_EDCA, 0x50);
   4139
   4140		val8 = rtl8xxxu_read8(priv, REG_RSV_CTRL);
   4141		val8 |= BIT(5) | BIT(6);
   4142		rtl8xxxu_write8(priv, REG_RSV_CTRL, val8);
   4143	}
   4144
   4145	if (fops->init_aggregation)
   4146		fops->init_aggregation(priv);
   4147
   4148	/*
   4149	 * Enable CCK and OFDM block
   4150	 */
   4151	val32 = rtl8xxxu_read32(priv, REG_FPGA0_RF_MODE);
   4152	val32 |= (FPGA_RF_MODE_CCK | FPGA_RF_MODE_OFDM);
   4153	rtl8xxxu_write32(priv, REG_FPGA0_RF_MODE, val32);
   4154
   4155	/*
   4156	 * Invalidate all CAM entries - bit 30 is undocumented
   4157	 */
   4158	rtl8xxxu_write32(priv, REG_CAM_CMD, CAM_CMD_POLLING | BIT(30));
   4159
   4160	/*
   4161	 * Start out with default power levels for channel 6, 20MHz
   4162	 */
   4163	fops->set_tx_power(priv, 1, false);
   4164
   4165	/* Let the 8051 take control of antenna setting */
   4166	if (priv->rtl_chip != RTL8192E) {
   4167		val8 = rtl8xxxu_read8(priv, REG_LEDCFG2);
   4168		val8 |= LEDCFG2_DPDT_SELECT;
   4169		rtl8xxxu_write8(priv, REG_LEDCFG2, val8);
   4170	}
   4171
   4172	rtl8xxxu_write8(priv, REG_HWSEQ_CTRL, 0xff);
   4173
   4174	/* Disable BAR - not sure if this has any effect on USB */
   4175	rtl8xxxu_write32(priv, REG_BAR_MODE_CTRL, 0x0201ffff);
   4176
   4177	rtl8xxxu_write16(priv, REG_FAST_EDCA_CTRL, 0);
   4178
   4179	if (fops->init_statistics)
   4180		fops->init_statistics(priv);
   4181
   4182	if (priv->rtl_chip == RTL8192E) {
   4183		/*
   4184		 * 0x4c6[3] 1: RTS BW = Data BW
   4185		 * 0: RTS BW depends on CCA / secondary CCA result.
   4186		 */
   4187		val8 = rtl8xxxu_read8(priv, REG_QUEUE_CTRL);
   4188		val8 &= ~BIT(3);
   4189		rtl8xxxu_write8(priv, REG_QUEUE_CTRL, val8);
   4190		/*
   4191		 * Reset USB mode switch setting
   4192		 */
   4193		rtl8xxxu_write8(priv, REG_ACLK_MON, 0x00);
   4194	}
   4195
   4196	rtl8723a_phy_lc_calibrate(priv);
   4197
   4198	fops->phy_iq_calibrate(priv);
   4199
   4200	/*
   4201	 * This should enable thermal meter
   4202	 */
   4203	if (fops->gen2_thermal_meter)
   4204		rtl8xxxu_write_rfreg(priv,
   4205				     RF_A, RF6052_REG_T_METER_8723B, 0x37cf8);
   4206	else
   4207		rtl8xxxu_write_rfreg(priv, RF_A, RF6052_REG_T_METER, 0x60);
   4208
   4209	/* Set NAV_UPPER to 30000us */
   4210	val8 = ((30000 + NAV_UPPER_UNIT - 1) / NAV_UPPER_UNIT);
   4211	rtl8xxxu_write8(priv, REG_NAV_UPPER, val8);
   4212
   4213	if (priv->rtl_chip == RTL8723A) {
   4214		/*
   4215		 * 2011/03/09 MH debug only, UMC-B cut pass 2500 S5 test,
   4216		 * but we need to find root cause.
   4217		 * This is 8723au only.
   4218		 */
   4219		val32 = rtl8xxxu_read32(priv, REG_FPGA0_RF_MODE);
   4220		if ((val32 & 0xff000000) != 0x83000000) {
   4221			val32 |= FPGA_RF_MODE_CCK;
   4222			rtl8xxxu_write32(priv, REG_FPGA0_RF_MODE, val32);
   4223		}
   4224	} else if (priv->rtl_chip == RTL8192E) {
   4225		rtl8xxxu_write8(priv, REG_USB_HRPWM, 0x00);
   4226	}
   4227
   4228	val32 = rtl8xxxu_read32(priv, REG_FWHW_TXQ_CTRL);
   4229	val32 |= FWHW_TXQ_CTRL_XMIT_MGMT_ACK;
   4230	/* ack for xmit mgmt frames. */
   4231	rtl8xxxu_write32(priv, REG_FWHW_TXQ_CTRL, val32);
   4232
   4233	if (priv->rtl_chip == RTL8192E) {
   4234		/*
   4235		 * Fix LDPC rx hang issue.
   4236		 */
   4237		val32 = rtl8xxxu_read32(priv, REG_AFE_MISC);
   4238		rtl8xxxu_write8(priv, REG_8192E_LDOV12_CTRL, 0x75);
   4239		val32 &= 0xfff00fff;
   4240		val32 |= 0x0007e000;
   4241		rtl8xxxu_write32(priv, REG_AFE_MISC, val32);
   4242	}
   4243exit:
   4244	return ret;
   4245}
   4246
   4247static void rtl8xxxu_cam_write(struct rtl8xxxu_priv *priv,
   4248			       struct ieee80211_key_conf *key, const u8 *mac)
   4249{
   4250	u32 cmd, val32, addr, ctrl;
   4251	int j, i, tmp_debug;
   4252
   4253	tmp_debug = rtl8xxxu_debug;
   4254	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_KEY)
   4255		rtl8xxxu_debug |= RTL8XXXU_DEBUG_REG_WRITE;
   4256
   4257	/*
   4258	 * This is a bit of a hack - the lower bits of the cipher
   4259	 * suite selector happens to match the cipher index in the CAM
   4260	 */
   4261	addr = key->keyidx << CAM_CMD_KEY_SHIFT;
   4262	ctrl = (key->cipher & 0x0f) << 2 | key->keyidx | CAM_WRITE_VALID;
   4263
   4264	for (j = 5; j >= 0; j--) {
   4265		switch (j) {
   4266		case 0:
   4267			val32 = ctrl | (mac[0] << 16) | (mac[1] << 24);
   4268			break;
   4269		case 1:
   4270			val32 = mac[2] | (mac[3] << 8) |
   4271				(mac[4] << 16) | (mac[5] << 24);
   4272			break;
   4273		default:
   4274			i = (j - 2) << 2;
   4275			val32 = key->key[i] | (key->key[i + 1] << 8) |
   4276				key->key[i + 2] << 16 | key->key[i + 3] << 24;
   4277			break;
   4278		}
   4279
   4280		rtl8xxxu_write32(priv, REG_CAM_WRITE, val32);
   4281		cmd = CAM_CMD_POLLING | CAM_CMD_WRITE | (addr + j);
   4282		rtl8xxxu_write32(priv, REG_CAM_CMD, cmd);
   4283		udelay(100);
   4284	}
   4285
   4286	rtl8xxxu_debug = tmp_debug;
   4287}
   4288
   4289static
   4290int rtl8xxxu_get_antenna(struct ieee80211_hw *hw, u32 *tx_ant, u32 *rx_ant)
   4291{
   4292	struct rtl8xxxu_priv *priv = hw->priv;
   4293
   4294	*tx_ant = BIT(priv->tx_paths) - 1;
   4295	*rx_ant = BIT(priv->rx_paths) - 1;
   4296
   4297	return 0;
   4298}
   4299
   4300static void rtl8xxxu_sw_scan_start(struct ieee80211_hw *hw,
   4301				   struct ieee80211_vif *vif, const u8 *mac)
   4302{
   4303	struct rtl8xxxu_priv *priv = hw->priv;
   4304	u8 val8;
   4305
   4306	val8 = rtl8xxxu_read8(priv, REG_BEACON_CTRL);
   4307	val8 |= BEACON_DISABLE_TSF_UPDATE;
   4308	rtl8xxxu_write8(priv, REG_BEACON_CTRL, val8);
   4309}
   4310
   4311static void rtl8xxxu_sw_scan_complete(struct ieee80211_hw *hw,
   4312				      struct ieee80211_vif *vif)
   4313{
   4314	struct rtl8xxxu_priv *priv = hw->priv;
   4315	u8 val8;
   4316
   4317	val8 = rtl8xxxu_read8(priv, REG_BEACON_CTRL);
   4318	val8 &= ~BEACON_DISABLE_TSF_UPDATE;
   4319	rtl8xxxu_write8(priv, REG_BEACON_CTRL, val8);
   4320}
   4321
   4322void rtl8xxxu_update_rate_mask(struct rtl8xxxu_priv *priv,
   4323			       u32 ramask, u8 rateid, int sgi)
   4324{
   4325	struct h2c_cmd h2c;
   4326
   4327	memset(&h2c, 0, sizeof(struct h2c_cmd));
   4328
   4329	h2c.ramask.cmd = H2C_SET_RATE_MASK;
   4330	h2c.ramask.mask_lo = cpu_to_le16(ramask & 0xffff);
   4331	h2c.ramask.mask_hi = cpu_to_le16(ramask >> 16);
   4332
   4333	h2c.ramask.arg = 0x80;
   4334	if (sgi)
   4335		h2c.ramask.arg |= 0x20;
   4336
   4337	dev_dbg(&priv->udev->dev, "%s: rate mask %08x, arg %02x, size %zi\n",
   4338		__func__, ramask, h2c.ramask.arg, sizeof(h2c.ramask));
   4339	rtl8xxxu_gen1_h2c_cmd(priv, &h2c, sizeof(h2c.ramask));
   4340}
   4341
   4342void rtl8xxxu_gen2_update_rate_mask(struct rtl8xxxu_priv *priv,
   4343				    u32 ramask, u8 rateid, int sgi)
   4344{
   4345	struct h2c_cmd h2c;
   4346	u8 bw = RTL8XXXU_CHANNEL_WIDTH_20;
   4347
   4348	memset(&h2c, 0, sizeof(struct h2c_cmd));
   4349
   4350	h2c.b_macid_cfg.cmd = H2C_8723B_MACID_CFG_RAID;
   4351	h2c.b_macid_cfg.ramask0 = ramask & 0xff;
   4352	h2c.b_macid_cfg.ramask1 = (ramask >> 8) & 0xff;
   4353	h2c.b_macid_cfg.ramask2 = (ramask >> 16) & 0xff;
   4354	h2c.b_macid_cfg.ramask3 = (ramask >> 24) & 0xff;
   4355
   4356	h2c.ramask.arg = 0x80;
   4357	h2c.b_macid_cfg.data1 = rateid;
   4358	if (sgi)
   4359		h2c.b_macid_cfg.data1 |= BIT(7);
   4360
   4361	h2c.b_macid_cfg.data2 = bw;
   4362
   4363	dev_dbg(&priv->udev->dev, "%s: rate mask %08x, arg %02x, size %zi\n",
   4364		__func__, ramask, h2c.ramask.arg, sizeof(h2c.b_macid_cfg));
   4365	rtl8xxxu_gen2_h2c_cmd(priv, &h2c, sizeof(h2c.b_macid_cfg));
   4366}
   4367
   4368void rtl8xxxu_gen1_report_connect(struct rtl8xxxu_priv *priv,
   4369				  u8 macid, bool connect)
   4370{
   4371	struct h2c_cmd h2c;
   4372
   4373	memset(&h2c, 0, sizeof(struct h2c_cmd));
   4374
   4375	h2c.joinbss.cmd = H2C_JOIN_BSS_REPORT;
   4376
   4377	if (connect)
   4378		h2c.joinbss.data = H2C_JOIN_BSS_CONNECT;
   4379	else
   4380		h2c.joinbss.data = H2C_JOIN_BSS_DISCONNECT;
   4381
   4382	rtl8xxxu_gen1_h2c_cmd(priv, &h2c, sizeof(h2c.joinbss));
   4383}
   4384
   4385void rtl8xxxu_gen2_report_connect(struct rtl8xxxu_priv *priv,
   4386				  u8 macid, bool connect)
   4387{
   4388#ifdef RTL8XXXU_GEN2_REPORT_CONNECT
   4389	/*
   4390	 * Barry Day reports this causes issues with 8192eu and 8723bu
   4391	 * devices reconnecting. The reason for this is unclear, but
   4392	 * until it is better understood, leave the code in place but
   4393	 * disabled, so it is not lost.
   4394	 */
   4395	struct h2c_cmd h2c;
   4396
   4397	memset(&h2c, 0, sizeof(struct h2c_cmd));
   4398
   4399	h2c.media_status_rpt.cmd = H2C_8723B_MEDIA_STATUS_RPT;
   4400	if (connect)
   4401		h2c.media_status_rpt.parm |= BIT(0);
   4402	else
   4403		h2c.media_status_rpt.parm &= ~BIT(0);
   4404
   4405	rtl8xxxu_gen2_h2c_cmd(priv, &h2c, sizeof(h2c.media_status_rpt));
   4406#endif
   4407}
   4408
   4409void rtl8xxxu_gen1_init_aggregation(struct rtl8xxxu_priv *priv)
   4410{
   4411	u8 agg_ctrl, usb_spec, page_thresh, timeout;
   4412
   4413	usb_spec = rtl8xxxu_read8(priv, REG_USB_SPECIAL_OPTION);
   4414	usb_spec &= ~USB_SPEC_USB_AGG_ENABLE;
   4415	rtl8xxxu_write8(priv, REG_USB_SPECIAL_OPTION, usb_spec);
   4416
   4417	agg_ctrl = rtl8xxxu_read8(priv, REG_TRXDMA_CTRL);
   4418	agg_ctrl &= ~TRXDMA_CTRL_RXDMA_AGG_EN;
   4419
   4420	if (!rtl8xxxu_dma_aggregation) {
   4421		rtl8xxxu_write8(priv, REG_TRXDMA_CTRL, agg_ctrl);
   4422		return;
   4423	}
   4424
   4425	agg_ctrl |= TRXDMA_CTRL_RXDMA_AGG_EN;
   4426	rtl8xxxu_write8(priv, REG_TRXDMA_CTRL, agg_ctrl);
   4427
   4428	/*
   4429	 * The number of packets we can take looks to be buffer size / 512
   4430	 * which matches the 512 byte rounding we have to do when de-muxing
   4431	 * the packets.
   4432	 *
   4433	 * Sample numbers from the vendor driver:
   4434	 * USB High-Speed mode values:
   4435	 *   RxAggBlockCount = 8 : 512 byte unit
   4436	 *   RxAggBlockTimeout = 6
   4437	 *   RxAggPageCount = 48 : 128 byte unit
   4438	 *   RxAggPageTimeout = 4 or 6 (absolute time 34ms/(2^6))
   4439	 */
   4440
   4441	page_thresh = (priv->fops->rx_agg_buf_size / 512);
   4442	if (rtl8xxxu_dma_agg_pages >= 0) {
   4443		if (rtl8xxxu_dma_agg_pages <= page_thresh)
   4444			timeout = page_thresh;
   4445		else if (rtl8xxxu_dma_agg_pages <= 6)
   4446			dev_err(&priv->udev->dev,
   4447				"%s: dma_agg_pages=%i too small, minimum is 6\n",
   4448				__func__, rtl8xxxu_dma_agg_pages);
   4449		else
   4450			dev_err(&priv->udev->dev,
   4451				"%s: dma_agg_pages=%i larger than limit %i\n",
   4452				__func__, rtl8xxxu_dma_agg_pages, page_thresh);
   4453	}
   4454	rtl8xxxu_write8(priv, REG_RXDMA_AGG_PG_TH, page_thresh);
   4455	/*
   4456	 * REG_RXDMA_AGG_PG_TH + 1 seems to be the timeout register on
   4457	 * gen2 chips and rtl8188eu. The rtl8723au seems unhappy if we
   4458	 * don't set it, so better set both.
   4459	 */
   4460	timeout = 4;
   4461
   4462	if (rtl8xxxu_dma_agg_timeout >= 0) {
   4463		if (rtl8xxxu_dma_agg_timeout <= 127)
   4464			timeout = rtl8xxxu_dma_agg_timeout;
   4465		else
   4466			dev_err(&priv->udev->dev,
   4467				"%s: Invalid dma_agg_timeout: %i\n",
   4468				__func__, rtl8xxxu_dma_agg_timeout);
   4469	}
   4470
   4471	rtl8xxxu_write8(priv, REG_RXDMA_AGG_PG_TH + 1, timeout);
   4472	rtl8xxxu_write8(priv, REG_USB_DMA_AGG_TO, timeout);
   4473	priv->rx_buf_aggregation = 1;
   4474}
   4475
   4476static const struct ieee80211_rate rtl8xxxu_legacy_ratetable[] = {
   4477	{.bitrate = 10, .hw_value = 0x00,},
   4478	{.bitrate = 20, .hw_value = 0x01,},
   4479	{.bitrate = 55, .hw_value = 0x02,},
   4480	{.bitrate = 110, .hw_value = 0x03,},
   4481	{.bitrate = 60, .hw_value = 0x04,},
   4482	{.bitrate = 90, .hw_value = 0x05,},
   4483	{.bitrate = 120, .hw_value = 0x06,},
   4484	{.bitrate = 180, .hw_value = 0x07,},
   4485	{.bitrate = 240, .hw_value = 0x08,},
   4486	{.bitrate = 360, .hw_value = 0x09,},
   4487	{.bitrate = 480, .hw_value = 0x0a,},
   4488	{.bitrate = 540, .hw_value = 0x0b,},
   4489};
   4490
   4491static void rtl8xxxu_desc_to_mcsrate(u16 rate, u8 *mcs, u8 *nss)
   4492{
   4493	if (rate <= DESC_RATE_54M)
   4494		return;
   4495
   4496	if (rate >= DESC_RATE_MCS0 && rate <= DESC_RATE_MCS15) {
   4497		if (rate < DESC_RATE_MCS8)
   4498			*nss = 1;
   4499		else
   4500			*nss = 2;
   4501		*mcs = rate - DESC_RATE_MCS0;
   4502	}
   4503}
   4504
   4505static void rtl8xxxu_set_basic_rates(struct rtl8xxxu_priv *priv, u32 rate_cfg)
   4506{
   4507	struct ieee80211_hw *hw = priv->hw;
   4508	u32 val32;
   4509	u8 rate_idx = 0;
   4510
   4511	rate_cfg &= RESPONSE_RATE_BITMAP_ALL;
   4512
   4513	val32 = rtl8xxxu_read32(priv, REG_RESPONSE_RATE_SET);
   4514	if (hw->conf.chandef.chan->band == NL80211_BAND_5GHZ)
   4515		val32 &= RESPONSE_RATE_RRSR_INIT_5G;
   4516	else
   4517		val32 &= RESPONSE_RATE_RRSR_INIT_2G;
   4518	val32 |= rate_cfg;
   4519	rtl8xxxu_write32(priv, REG_RESPONSE_RATE_SET, val32);
   4520
   4521	dev_dbg(&priv->udev->dev, "%s: rates %08x\n", __func__,	rate_cfg);
   4522
   4523	while (rate_cfg) {
   4524		rate_cfg = (rate_cfg >> 1);
   4525		rate_idx++;
   4526	}
   4527	rtl8xxxu_write8(priv, REG_INIRTS_RATE_SEL, rate_idx);
   4528}
   4529
   4530static u16
   4531rtl8xxxu_wireless_mode(struct ieee80211_hw *hw, struct ieee80211_sta *sta)
   4532{
   4533	u16 network_type = WIRELESS_MODE_UNKNOWN;
   4534
   4535	if (hw->conf.chandef.chan->band == NL80211_BAND_5GHZ) {
   4536		if (sta->deflink.vht_cap.vht_supported)
   4537			network_type = WIRELESS_MODE_AC;
   4538		else if (sta->deflink.ht_cap.ht_supported)
   4539			network_type = WIRELESS_MODE_N_5G;
   4540
   4541		network_type |= WIRELESS_MODE_A;
   4542	} else {
   4543		if (sta->deflink.vht_cap.vht_supported)
   4544			network_type = WIRELESS_MODE_AC;
   4545		else if (sta->deflink.ht_cap.ht_supported)
   4546			network_type = WIRELESS_MODE_N_24G;
   4547
   4548		if (sta->deflink.supp_rates[0] <= 0xf)
   4549			network_type |= WIRELESS_MODE_B;
   4550		else if (sta->deflink.supp_rates[0] & 0xf)
   4551			network_type |= (WIRELESS_MODE_B | WIRELESS_MODE_G);
   4552		else
   4553			network_type |= WIRELESS_MODE_G;
   4554	}
   4555
   4556	return network_type;
   4557}
   4558
   4559static void
   4560rtl8xxxu_bss_info_changed(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
   4561			  struct ieee80211_bss_conf *bss_conf, u32 changed)
   4562{
   4563	struct rtl8xxxu_priv *priv = hw->priv;
   4564	struct device *dev = &priv->udev->dev;
   4565	struct ieee80211_sta *sta;
   4566	struct rtl8xxxu_ra_report *rarpt;
   4567	u32 val32;
   4568	u8 val8;
   4569
   4570	rarpt = &priv->ra_report;
   4571
   4572	if (changed & BSS_CHANGED_ASSOC) {
   4573		dev_dbg(dev, "Changed ASSOC: %i!\n", bss_conf->assoc);
   4574
   4575		rtl8xxxu_set_linktype(priv, vif->type);
   4576
   4577		if (bss_conf->assoc) {
   4578			u32 ramask;
   4579			int sgi = 0;
   4580			u8 highest_rate;
   4581			u8 mcs = 0, nss = 0;
   4582			u32 bit_rate;
   4583
   4584
   4585			rcu_read_lock();
   4586			sta = ieee80211_find_sta(vif, bss_conf->bssid);
   4587			if (!sta) {
   4588				dev_info(dev, "%s: ASSOC no sta found\n",
   4589					 __func__);
   4590				rcu_read_unlock();
   4591				goto error;
   4592			}
   4593
   4594			if (sta->deflink.ht_cap.ht_supported)
   4595				dev_info(dev, "%s: HT supported\n", __func__);
   4596			if (sta->deflink.vht_cap.vht_supported)
   4597				dev_info(dev, "%s: VHT supported\n", __func__);
   4598
   4599			/* TODO: Set bits 28-31 for rate adaptive id */
   4600			ramask = (sta->deflink.supp_rates[0] & 0xfff) |
   4601				sta->deflink.ht_cap.mcs.rx_mask[0] << 12 |
   4602				sta->deflink.ht_cap.mcs.rx_mask[1] << 20;
   4603			if (sta->deflink.ht_cap.cap &
   4604			    (IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_SGI_20))
   4605				sgi = 1;
   4606			rcu_read_unlock();
   4607
   4608			highest_rate = fls(ramask) - 1;
   4609			if (highest_rate < DESC_RATE_MCS0) {
   4610				rarpt->txrate.legacy =
   4611				rtl8xxxu_legacy_ratetable[highest_rate].bitrate;
   4612			} else {
   4613				rtl8xxxu_desc_to_mcsrate(highest_rate,
   4614							 &mcs, &nss);
   4615				rarpt->txrate.flags |= RATE_INFO_FLAGS_MCS;
   4616
   4617				rarpt->txrate.mcs = mcs;
   4618				rarpt->txrate.nss = nss;
   4619
   4620				if (sgi) {
   4621					rarpt->txrate.flags |=
   4622						RATE_INFO_FLAGS_SHORT_GI;
   4623				}
   4624
   4625				rarpt->txrate.bw |= RATE_INFO_BW_20;
   4626			}
   4627			bit_rate = cfg80211_calculate_bitrate(&rarpt->txrate);
   4628			rarpt->bit_rate = bit_rate;
   4629			rarpt->desc_rate = highest_rate;
   4630
   4631			priv->vif = vif;
   4632			priv->rssi_level = RTL8XXXU_RATR_STA_INIT;
   4633
   4634			priv->fops->update_rate_mask(priv, ramask, 0, sgi);
   4635
   4636			rtl8xxxu_write8(priv, REG_BCN_MAX_ERR, 0xff);
   4637
   4638			rtl8xxxu_stop_tx_beacon(priv);
   4639
   4640			/* joinbss sequence */
   4641			rtl8xxxu_write16(priv, REG_BCN_PSR_RPT,
   4642					 0xc000 | bss_conf->aid);
   4643
   4644			priv->fops->report_connect(priv, 0, true);
   4645		} else {
   4646			val8 = rtl8xxxu_read8(priv, REG_BEACON_CTRL);
   4647			val8 |= BEACON_DISABLE_TSF_UPDATE;
   4648			rtl8xxxu_write8(priv, REG_BEACON_CTRL, val8);
   4649
   4650			priv->fops->report_connect(priv, 0, false);
   4651		}
   4652	}
   4653
   4654	if (changed & BSS_CHANGED_ERP_PREAMBLE) {
   4655		dev_dbg(dev, "Changed ERP_PREAMBLE: Use short preamble %i\n",
   4656			bss_conf->use_short_preamble);
   4657		val32 = rtl8xxxu_read32(priv, REG_RESPONSE_RATE_SET);
   4658		if (bss_conf->use_short_preamble)
   4659			val32 |= RSR_ACK_SHORT_PREAMBLE;
   4660		else
   4661			val32 &= ~RSR_ACK_SHORT_PREAMBLE;
   4662		rtl8xxxu_write32(priv, REG_RESPONSE_RATE_SET, val32);
   4663	}
   4664
   4665	if (changed & BSS_CHANGED_ERP_SLOT) {
   4666		dev_dbg(dev, "Changed ERP_SLOT: short_slot_time %i\n",
   4667			bss_conf->use_short_slot);
   4668
   4669		if (bss_conf->use_short_slot)
   4670			val8 = 9;
   4671		else
   4672			val8 = 20;
   4673		rtl8xxxu_write8(priv, REG_SLOT, val8);
   4674	}
   4675
   4676	if (changed & BSS_CHANGED_BSSID) {
   4677		dev_dbg(dev, "Changed BSSID!\n");
   4678		rtl8xxxu_set_bssid(priv, bss_conf->bssid);
   4679	}
   4680
   4681	if (changed & BSS_CHANGED_BASIC_RATES) {
   4682		dev_dbg(dev, "Changed BASIC_RATES!\n");
   4683		rtl8xxxu_set_basic_rates(priv, bss_conf->basic_rates);
   4684	}
   4685error:
   4686	return;
   4687}
   4688
   4689static u32 rtl8xxxu_80211_to_rtl_queue(u32 queue)
   4690{
   4691	u32 rtlqueue;
   4692
   4693	switch (queue) {
   4694	case IEEE80211_AC_VO:
   4695		rtlqueue = TXDESC_QUEUE_VO;
   4696		break;
   4697	case IEEE80211_AC_VI:
   4698		rtlqueue = TXDESC_QUEUE_VI;
   4699		break;
   4700	case IEEE80211_AC_BE:
   4701		rtlqueue = TXDESC_QUEUE_BE;
   4702		break;
   4703	case IEEE80211_AC_BK:
   4704		rtlqueue = TXDESC_QUEUE_BK;
   4705		break;
   4706	default:
   4707		rtlqueue = TXDESC_QUEUE_BE;
   4708	}
   4709
   4710	return rtlqueue;
   4711}
   4712
   4713static u32 rtl8xxxu_queue_select(struct ieee80211_hw *hw, struct sk_buff *skb)
   4714{
   4715	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
   4716	u32 queue;
   4717
   4718	if (ieee80211_is_mgmt(hdr->frame_control))
   4719		queue = TXDESC_QUEUE_MGNT;
   4720	else
   4721		queue = rtl8xxxu_80211_to_rtl_queue(skb_get_queue_mapping(skb));
   4722
   4723	return queue;
   4724}
   4725
   4726/*
   4727 * Despite newer chips 8723b/8812/8821 having a larger TX descriptor
   4728 * format. The descriptor checksum is still only calculated over the
   4729 * initial 32 bytes of the descriptor!
   4730 */
   4731static void rtl8xxxu_calc_tx_desc_csum(struct rtl8xxxu_txdesc32 *tx_desc)
   4732{
   4733	__le16 *ptr = (__le16 *)tx_desc;
   4734	u16 csum = 0;
   4735	int i;
   4736
   4737	/*
   4738	 * Clear csum field before calculation, as the csum field is
   4739	 * in the middle of the struct.
   4740	 */
   4741	tx_desc->csum = cpu_to_le16(0);
   4742
   4743	for (i = 0; i < (sizeof(struct rtl8xxxu_txdesc32) / sizeof(u16)); i++)
   4744		csum = csum ^ le16_to_cpu(ptr[i]);
   4745
   4746	tx_desc->csum |= cpu_to_le16(csum);
   4747}
   4748
   4749static void rtl8xxxu_free_tx_resources(struct rtl8xxxu_priv *priv)
   4750{
   4751	struct rtl8xxxu_tx_urb *tx_urb, *tmp;
   4752	unsigned long flags;
   4753
   4754	spin_lock_irqsave(&priv->tx_urb_lock, flags);
   4755	list_for_each_entry_safe(tx_urb, tmp, &priv->tx_urb_free_list, list) {
   4756		list_del(&tx_urb->list);
   4757		priv->tx_urb_free_count--;
   4758		usb_free_urb(&tx_urb->urb);
   4759	}
   4760	spin_unlock_irqrestore(&priv->tx_urb_lock, flags);
   4761}
   4762
   4763static struct rtl8xxxu_tx_urb *
   4764rtl8xxxu_alloc_tx_urb(struct rtl8xxxu_priv *priv)
   4765{
   4766	struct rtl8xxxu_tx_urb *tx_urb;
   4767	unsigned long flags;
   4768
   4769	spin_lock_irqsave(&priv->tx_urb_lock, flags);
   4770	tx_urb = list_first_entry_or_null(&priv->tx_urb_free_list,
   4771					  struct rtl8xxxu_tx_urb, list);
   4772	if (tx_urb) {
   4773		list_del(&tx_urb->list);
   4774		priv->tx_urb_free_count--;
   4775		if (priv->tx_urb_free_count < RTL8XXXU_TX_URB_LOW_WATER &&
   4776		    !priv->tx_stopped) {
   4777			priv->tx_stopped = true;
   4778			ieee80211_stop_queues(priv->hw);
   4779		}
   4780	}
   4781
   4782	spin_unlock_irqrestore(&priv->tx_urb_lock, flags);
   4783
   4784	return tx_urb;
   4785}
   4786
   4787static void rtl8xxxu_free_tx_urb(struct rtl8xxxu_priv *priv,
   4788				 struct rtl8xxxu_tx_urb *tx_urb)
   4789{
   4790	unsigned long flags;
   4791
   4792	INIT_LIST_HEAD(&tx_urb->list);
   4793
   4794	spin_lock_irqsave(&priv->tx_urb_lock, flags);
   4795
   4796	list_add(&tx_urb->list, &priv->tx_urb_free_list);
   4797	priv->tx_urb_free_count++;
   4798	if (priv->tx_urb_free_count > RTL8XXXU_TX_URB_HIGH_WATER &&
   4799	    priv->tx_stopped) {
   4800		priv->tx_stopped = false;
   4801		ieee80211_wake_queues(priv->hw);
   4802	}
   4803
   4804	spin_unlock_irqrestore(&priv->tx_urb_lock, flags);
   4805}
   4806
   4807static void rtl8xxxu_tx_complete(struct urb *urb)
   4808{
   4809	struct sk_buff *skb = (struct sk_buff *)urb->context;
   4810	struct ieee80211_tx_info *tx_info;
   4811	struct ieee80211_hw *hw;
   4812	struct rtl8xxxu_priv *priv;
   4813	struct rtl8xxxu_tx_urb *tx_urb =
   4814		container_of(urb, struct rtl8xxxu_tx_urb, urb);
   4815
   4816	tx_info = IEEE80211_SKB_CB(skb);
   4817	hw = tx_info->rate_driver_data[0];
   4818	priv = hw->priv;
   4819
   4820	skb_pull(skb, priv->fops->tx_desc_size);
   4821
   4822	ieee80211_tx_info_clear_status(tx_info);
   4823	tx_info->status.rates[0].idx = -1;
   4824	tx_info->status.rates[0].count = 0;
   4825
   4826	if (!urb->status)
   4827		tx_info->flags |= IEEE80211_TX_STAT_ACK;
   4828
   4829	ieee80211_tx_status_irqsafe(hw, skb);
   4830
   4831	rtl8xxxu_free_tx_urb(priv, tx_urb);
   4832}
   4833
   4834static void rtl8xxxu_dump_action(struct device *dev,
   4835				 struct ieee80211_hdr *hdr)
   4836{
   4837	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)hdr;
   4838	u16 cap, timeout;
   4839
   4840	if (!(rtl8xxxu_debug & RTL8XXXU_DEBUG_ACTION))
   4841		return;
   4842
   4843	switch (mgmt->u.action.u.addba_resp.action_code) {
   4844	case WLAN_ACTION_ADDBA_RESP:
   4845		cap = le16_to_cpu(mgmt->u.action.u.addba_resp.capab);
   4846		timeout = le16_to_cpu(mgmt->u.action.u.addba_resp.timeout);
   4847		dev_info(dev, "WLAN_ACTION_ADDBA_RESP: "
   4848			 "timeout %i, tid %02x, buf_size %02x, policy %02x, "
   4849			 "status %02x\n",
   4850			 timeout,
   4851			 (cap & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2,
   4852			 (cap & IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK) >> 6,
   4853			 (cap >> 1) & 0x1,
   4854			 le16_to_cpu(mgmt->u.action.u.addba_resp.status));
   4855		break;
   4856	case WLAN_ACTION_ADDBA_REQ:
   4857		cap = le16_to_cpu(mgmt->u.action.u.addba_req.capab);
   4858		timeout = le16_to_cpu(mgmt->u.action.u.addba_req.timeout);
   4859		dev_info(dev, "WLAN_ACTION_ADDBA_REQ: "
   4860			 "timeout %i, tid %02x, buf_size %02x, policy %02x\n",
   4861			 timeout,
   4862			 (cap & IEEE80211_ADDBA_PARAM_TID_MASK) >> 2,
   4863			 (cap & IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK) >> 6,
   4864			 (cap >> 1) & 0x1);
   4865		break;
   4866	default:
   4867		dev_info(dev, "action frame %02x\n",
   4868			 mgmt->u.action.u.addba_resp.action_code);
   4869		break;
   4870	}
   4871}
   4872
   4873/*
   4874 * Fill in v1 (gen1) specific TX descriptor bits.
   4875 * This format is used on 8188cu/8192cu/8723au
   4876 */
   4877void
   4878rtl8xxxu_fill_txdesc_v1(struct ieee80211_hw *hw, struct ieee80211_hdr *hdr,
   4879			struct ieee80211_tx_info *tx_info,
   4880			struct rtl8xxxu_txdesc32 *tx_desc, bool sgi,
   4881			bool short_preamble, bool ampdu_enable, u32 rts_rate)
   4882{
   4883	struct ieee80211_rate *tx_rate = ieee80211_get_tx_rate(hw, tx_info);
   4884	struct rtl8xxxu_priv *priv = hw->priv;
   4885	struct device *dev = &priv->udev->dev;
   4886	u8 *qc = ieee80211_get_qos_ctl(hdr);
   4887	u8 tid = qc[0] & IEEE80211_QOS_CTL_TID_MASK;
   4888	u32 rate;
   4889	u16 rate_flags = tx_info->control.rates[0].flags;
   4890	u16 seq_number;
   4891
   4892	if (rate_flags & IEEE80211_TX_RC_MCS &&
   4893	    !ieee80211_is_mgmt(hdr->frame_control))
   4894		rate = tx_info->control.rates[0].idx + DESC_RATE_MCS0;
   4895	else
   4896		rate = tx_rate->hw_value;
   4897
   4898	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_TX)
   4899		dev_info(dev, "%s: TX rate: %d, pkt size %u\n",
   4900			 __func__, rate, le16_to_cpu(tx_desc->pkt_size));
   4901
   4902	seq_number = IEEE80211_SEQ_TO_SN(le16_to_cpu(hdr->seq_ctrl));
   4903
   4904	tx_desc->txdw5 = cpu_to_le32(rate);
   4905
   4906	if (ieee80211_is_data(hdr->frame_control))
   4907		tx_desc->txdw5 |= cpu_to_le32(0x0001ff00);
   4908
   4909	tx_desc->txdw3 = cpu_to_le32((u32)seq_number << TXDESC32_SEQ_SHIFT);
   4910
   4911	if (ampdu_enable && test_bit(tid, priv->tid_tx_operational))
   4912		tx_desc->txdw1 |= cpu_to_le32(TXDESC32_AGG_ENABLE);
   4913	else
   4914		tx_desc->txdw1 |= cpu_to_le32(TXDESC32_AGG_BREAK);
   4915
   4916	if (ieee80211_is_mgmt(hdr->frame_control)) {
   4917		tx_desc->txdw5 = cpu_to_le32(rate);
   4918		tx_desc->txdw4 |= cpu_to_le32(TXDESC32_USE_DRIVER_RATE);
   4919		tx_desc->txdw5 |= cpu_to_le32(6 << TXDESC32_RETRY_LIMIT_SHIFT);
   4920		tx_desc->txdw5 |= cpu_to_le32(TXDESC32_RETRY_LIMIT_ENABLE);
   4921	}
   4922
   4923	if (ieee80211_is_data_qos(hdr->frame_control))
   4924		tx_desc->txdw4 |= cpu_to_le32(TXDESC32_QOS);
   4925
   4926	if (short_preamble)
   4927		tx_desc->txdw4 |= cpu_to_le32(TXDESC32_SHORT_PREAMBLE);
   4928
   4929	if (sgi)
   4930		tx_desc->txdw5 |= cpu_to_le32(TXDESC32_SHORT_GI);
   4931
   4932	/*
   4933	 * rts_rate is zero if RTS/CTS or CTS to SELF are not enabled
   4934	 */
   4935	tx_desc->txdw4 |= cpu_to_le32(rts_rate << TXDESC32_RTS_RATE_SHIFT);
   4936	if (ampdu_enable || (rate_flags & IEEE80211_TX_RC_USE_RTS_CTS)) {
   4937		tx_desc->txdw4 |= cpu_to_le32(TXDESC32_RTS_CTS_ENABLE);
   4938		tx_desc->txdw4 |= cpu_to_le32(TXDESC32_HW_RTS_ENABLE);
   4939	} else if (rate_flags & IEEE80211_TX_RC_USE_CTS_PROTECT) {
   4940		tx_desc->txdw4 |= cpu_to_le32(TXDESC32_CTS_SELF_ENABLE);
   4941		tx_desc->txdw4 |= cpu_to_le32(TXDESC32_HW_RTS_ENABLE);
   4942	}
   4943}
   4944
   4945/*
   4946 * Fill in v2 (gen2) specific TX descriptor bits.
   4947 * This format is used on 8192eu/8723bu
   4948 */
   4949void
   4950rtl8xxxu_fill_txdesc_v2(struct ieee80211_hw *hw, struct ieee80211_hdr *hdr,
   4951			struct ieee80211_tx_info *tx_info,
   4952			struct rtl8xxxu_txdesc32 *tx_desc32, bool sgi,
   4953			bool short_preamble, bool ampdu_enable, u32 rts_rate)
   4954{
   4955	struct ieee80211_rate *tx_rate = ieee80211_get_tx_rate(hw, tx_info);
   4956	struct rtl8xxxu_priv *priv = hw->priv;
   4957	struct device *dev = &priv->udev->dev;
   4958	struct rtl8xxxu_txdesc40 *tx_desc40;
   4959	u8 *qc = ieee80211_get_qos_ctl(hdr);
   4960	u8 tid = qc[0] & IEEE80211_QOS_CTL_TID_MASK;
   4961	u32 rate;
   4962	u16 rate_flags = tx_info->control.rates[0].flags;
   4963	u16 seq_number;
   4964
   4965	tx_desc40 = (struct rtl8xxxu_txdesc40 *)tx_desc32;
   4966
   4967	if (rate_flags & IEEE80211_TX_RC_MCS &&
   4968	    !ieee80211_is_mgmt(hdr->frame_control))
   4969		rate = tx_info->control.rates[0].idx + DESC_RATE_MCS0;
   4970	else
   4971		rate = tx_rate->hw_value;
   4972
   4973	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_TX)
   4974		dev_info(dev, "%s: TX rate: %d, pkt size %u\n",
   4975			 __func__, rate, le16_to_cpu(tx_desc40->pkt_size));
   4976
   4977	seq_number = IEEE80211_SEQ_TO_SN(le16_to_cpu(hdr->seq_ctrl));
   4978
   4979	tx_desc40->txdw4 = cpu_to_le32(rate);
   4980	if (ieee80211_is_data(hdr->frame_control)) {
   4981		tx_desc40->txdw4 |= cpu_to_le32(0x1f <<
   4982						TXDESC40_DATA_RATE_FB_SHIFT);
   4983	}
   4984
   4985	tx_desc40->txdw9 = cpu_to_le32((u32)seq_number << TXDESC40_SEQ_SHIFT);
   4986
   4987	if (ampdu_enable && test_bit(tid, priv->tid_tx_operational))
   4988		tx_desc40->txdw2 |= cpu_to_le32(TXDESC40_AGG_ENABLE);
   4989	else
   4990		tx_desc40->txdw2 |= cpu_to_le32(TXDESC40_AGG_BREAK);
   4991
   4992	if (ieee80211_is_mgmt(hdr->frame_control)) {
   4993		tx_desc40->txdw4 = cpu_to_le32(rate);
   4994		tx_desc40->txdw3 |= cpu_to_le32(TXDESC40_USE_DRIVER_RATE);
   4995		tx_desc40->txdw4 |=
   4996			cpu_to_le32(6 << TXDESC40_RETRY_LIMIT_SHIFT);
   4997		tx_desc40->txdw4 |= cpu_to_le32(TXDESC40_RETRY_LIMIT_ENABLE);
   4998	}
   4999
   5000	if (short_preamble)
   5001		tx_desc40->txdw5 |= cpu_to_le32(TXDESC40_SHORT_PREAMBLE);
   5002
   5003	tx_desc40->txdw4 |= cpu_to_le32(rts_rate << TXDESC40_RTS_RATE_SHIFT);
   5004	/*
   5005	 * rts_rate is zero if RTS/CTS or CTS to SELF are not enabled
   5006	 */
   5007	if (ampdu_enable || (rate_flags & IEEE80211_TX_RC_USE_RTS_CTS)) {
   5008		tx_desc40->txdw3 |= cpu_to_le32(TXDESC40_RTS_CTS_ENABLE);
   5009		tx_desc40->txdw3 |= cpu_to_le32(TXDESC40_HW_RTS_ENABLE);
   5010	} else if (rate_flags & IEEE80211_TX_RC_USE_CTS_PROTECT) {
   5011		/*
   5012		 * For some reason the vendor driver doesn't set
   5013		 * TXDESC40_HW_RTS_ENABLE for CTS to SELF
   5014		 */
   5015		tx_desc40->txdw3 |= cpu_to_le32(TXDESC40_CTS_SELF_ENABLE);
   5016	}
   5017}
   5018
   5019static void rtl8xxxu_tx(struct ieee80211_hw *hw,
   5020			struct ieee80211_tx_control *control,
   5021			struct sk_buff *skb)
   5022{
   5023	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
   5024	struct ieee80211_tx_info *tx_info = IEEE80211_SKB_CB(skb);
   5025	struct rtl8xxxu_priv *priv = hw->priv;
   5026	struct rtl8xxxu_txdesc32 *tx_desc;
   5027	struct rtl8xxxu_tx_urb *tx_urb;
   5028	struct ieee80211_sta *sta = NULL;
   5029	struct ieee80211_vif *vif = tx_info->control.vif;
   5030	struct device *dev = &priv->udev->dev;
   5031	u32 queue, rts_rate;
   5032	u16 pktlen = skb->len;
   5033	u16 rate_flag = tx_info->control.rates[0].flags;
   5034	int tx_desc_size = priv->fops->tx_desc_size;
   5035	int ret;
   5036	bool ampdu_enable, sgi = false, short_preamble = false;
   5037
   5038	if (skb_headroom(skb) < tx_desc_size) {
   5039		dev_warn(dev,
   5040			 "%s: Not enough headroom (%i) for tx descriptor\n",
   5041			 __func__, skb_headroom(skb));
   5042		goto error;
   5043	}
   5044
   5045	if (unlikely(skb->len > (65535 - tx_desc_size))) {
   5046		dev_warn(dev, "%s: Trying to send over-sized skb (%i)\n",
   5047			 __func__, skb->len);
   5048		goto error;
   5049	}
   5050
   5051	tx_urb = rtl8xxxu_alloc_tx_urb(priv);
   5052	if (!tx_urb) {
   5053		dev_warn(dev, "%s: Unable to allocate tx urb\n", __func__);
   5054		goto error;
   5055	}
   5056
   5057	if (ieee80211_is_action(hdr->frame_control))
   5058		rtl8xxxu_dump_action(dev, hdr);
   5059
   5060	tx_info->rate_driver_data[0] = hw;
   5061
   5062	if (control && control->sta)
   5063		sta = control->sta;
   5064
   5065	tx_desc = skb_push(skb, tx_desc_size);
   5066
   5067	memset(tx_desc, 0, tx_desc_size);
   5068	tx_desc->pkt_size = cpu_to_le16(pktlen);
   5069	tx_desc->pkt_offset = tx_desc_size;
   5070
   5071	tx_desc->txdw0 =
   5072		TXDESC_OWN | TXDESC_FIRST_SEGMENT | TXDESC_LAST_SEGMENT;
   5073	if (is_multicast_ether_addr(ieee80211_get_DA(hdr)) ||
   5074	    is_broadcast_ether_addr(ieee80211_get_DA(hdr)))
   5075		tx_desc->txdw0 |= TXDESC_BROADMULTICAST;
   5076
   5077	queue = rtl8xxxu_queue_select(hw, skb);
   5078	tx_desc->txdw1 = cpu_to_le32(queue << TXDESC_QUEUE_SHIFT);
   5079
   5080	if (tx_info->control.hw_key) {
   5081		switch (tx_info->control.hw_key->cipher) {
   5082		case WLAN_CIPHER_SUITE_WEP40:
   5083		case WLAN_CIPHER_SUITE_WEP104:
   5084		case WLAN_CIPHER_SUITE_TKIP:
   5085			tx_desc->txdw1 |= cpu_to_le32(TXDESC_SEC_RC4);
   5086			break;
   5087		case WLAN_CIPHER_SUITE_CCMP:
   5088			tx_desc->txdw1 |= cpu_to_le32(TXDESC_SEC_AES);
   5089			break;
   5090		default:
   5091			break;
   5092		}
   5093	}
   5094
   5095	/* (tx_info->flags & IEEE80211_TX_CTL_AMPDU) && */
   5096	ampdu_enable = false;
   5097	if (ieee80211_is_data_qos(hdr->frame_control) && sta) {
   5098		if (sta->deflink.ht_cap.ht_supported) {
   5099			u32 ampdu, val32;
   5100			u8 *qc = ieee80211_get_qos_ctl(hdr);
   5101			u8 tid = qc[0] & IEEE80211_QOS_CTL_TID_MASK;
   5102
   5103			ampdu = (u32)sta->deflink.ht_cap.ampdu_density;
   5104			val32 = ampdu << TXDESC_AMPDU_DENSITY_SHIFT;
   5105			tx_desc->txdw2 |= cpu_to_le32(val32);
   5106
   5107			ampdu_enable = true;
   5108
   5109			if (!test_bit(tid, priv->tx_aggr_started) &&
   5110			    !(skb->protocol == cpu_to_be16(ETH_P_PAE)))
   5111				if (!ieee80211_start_tx_ba_session(sta, tid, 0))
   5112					set_bit(tid, priv->tx_aggr_started);
   5113		}
   5114	}
   5115
   5116	if (rate_flag & IEEE80211_TX_RC_SHORT_GI ||
   5117	    (ieee80211_is_data_qos(hdr->frame_control) &&
   5118	     sta && sta->deflink.ht_cap.cap &
   5119	     (IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_SGI_20)))
   5120		sgi = true;
   5121
   5122	if (rate_flag & IEEE80211_TX_RC_USE_SHORT_PREAMBLE ||
   5123	    (sta && vif && vif->bss_conf.use_short_preamble))
   5124		short_preamble = true;
   5125
   5126	if (rate_flag & IEEE80211_TX_RC_USE_RTS_CTS)
   5127		rts_rate = ieee80211_get_rts_cts_rate(hw, tx_info)->hw_value;
   5128	else if (rate_flag & IEEE80211_TX_RC_USE_CTS_PROTECT)
   5129		rts_rate = ieee80211_get_rts_cts_rate(hw, tx_info)->hw_value;
   5130	else
   5131		rts_rate = 0;
   5132
   5133
   5134	priv->fops->fill_txdesc(hw, hdr, tx_info, tx_desc, sgi, short_preamble,
   5135				ampdu_enable, rts_rate);
   5136
   5137	rtl8xxxu_calc_tx_desc_csum(tx_desc);
   5138
   5139	usb_fill_bulk_urb(&tx_urb->urb, priv->udev, priv->pipe_out[queue],
   5140			  skb->data, skb->len, rtl8xxxu_tx_complete, skb);
   5141
   5142	usb_anchor_urb(&tx_urb->urb, &priv->tx_anchor);
   5143	ret = usb_submit_urb(&tx_urb->urb, GFP_ATOMIC);
   5144	if (ret) {
   5145		usb_unanchor_urb(&tx_urb->urb);
   5146		rtl8xxxu_free_tx_urb(priv, tx_urb);
   5147		goto error;
   5148	}
   5149	return;
   5150error:
   5151	dev_kfree_skb(skb);
   5152}
   5153
   5154static void rtl8xxxu_rx_parse_phystats(struct rtl8xxxu_priv *priv,
   5155				       struct ieee80211_rx_status *rx_status,
   5156				       struct rtl8723au_phy_stats *phy_stats,
   5157				       u32 rxmcs)
   5158{
   5159	if (phy_stats->sgi_en)
   5160		rx_status->enc_flags |= RX_ENC_FLAG_SHORT_GI;
   5161
   5162	if (rxmcs < DESC_RATE_6M) {
   5163		/*
   5164		 * Handle PHY stats for CCK rates
   5165		 */
   5166		u8 cck_agc_rpt = phy_stats->cck_agc_rpt_ofdm_cfosho_a;
   5167
   5168		switch (cck_agc_rpt & 0xc0) {
   5169		case 0xc0:
   5170			rx_status->signal = -46 - (cck_agc_rpt & 0x3e);
   5171			break;
   5172		case 0x80:
   5173			rx_status->signal = -26 - (cck_agc_rpt & 0x3e);
   5174			break;
   5175		case 0x40:
   5176			rx_status->signal = -12 - (cck_agc_rpt & 0x3e);
   5177			break;
   5178		case 0x00:
   5179			rx_status->signal = 16 - (cck_agc_rpt & 0x3e);
   5180			break;
   5181		}
   5182	} else {
   5183		rx_status->signal =
   5184			(phy_stats->cck_sig_qual_ofdm_pwdb_all >> 1) - 110;
   5185	}
   5186}
   5187
   5188static void rtl8xxxu_free_rx_resources(struct rtl8xxxu_priv *priv)
   5189{
   5190	struct rtl8xxxu_rx_urb *rx_urb, *tmp;
   5191	unsigned long flags;
   5192
   5193	spin_lock_irqsave(&priv->rx_urb_lock, flags);
   5194
   5195	list_for_each_entry_safe(rx_urb, tmp,
   5196				 &priv->rx_urb_pending_list, list) {
   5197		list_del(&rx_urb->list);
   5198		priv->rx_urb_pending_count--;
   5199		usb_free_urb(&rx_urb->urb);
   5200	}
   5201
   5202	spin_unlock_irqrestore(&priv->rx_urb_lock, flags);
   5203}
   5204
   5205static void rtl8xxxu_queue_rx_urb(struct rtl8xxxu_priv *priv,
   5206				  struct rtl8xxxu_rx_urb *rx_urb)
   5207{
   5208	struct sk_buff *skb;
   5209	unsigned long flags;
   5210	int pending = 0;
   5211
   5212	spin_lock_irqsave(&priv->rx_urb_lock, flags);
   5213
   5214	if (!priv->shutdown) {
   5215		list_add_tail(&rx_urb->list, &priv->rx_urb_pending_list);
   5216		priv->rx_urb_pending_count++;
   5217		pending = priv->rx_urb_pending_count;
   5218	} else {
   5219		skb = (struct sk_buff *)rx_urb->urb.context;
   5220		dev_kfree_skb(skb);
   5221		usb_free_urb(&rx_urb->urb);
   5222	}
   5223
   5224	spin_unlock_irqrestore(&priv->rx_urb_lock, flags);
   5225
   5226	if (pending > RTL8XXXU_RX_URB_PENDING_WATER)
   5227		schedule_work(&priv->rx_urb_wq);
   5228}
   5229
   5230static void rtl8xxxu_rx_urb_work(struct work_struct *work)
   5231{
   5232	struct rtl8xxxu_priv *priv;
   5233	struct rtl8xxxu_rx_urb *rx_urb, *tmp;
   5234	struct list_head local;
   5235	struct sk_buff *skb;
   5236	unsigned long flags;
   5237	int ret;
   5238
   5239	priv = container_of(work, struct rtl8xxxu_priv, rx_urb_wq);
   5240	INIT_LIST_HEAD(&local);
   5241
   5242	spin_lock_irqsave(&priv->rx_urb_lock, flags);
   5243
   5244	list_splice_init(&priv->rx_urb_pending_list, &local);
   5245	priv->rx_urb_pending_count = 0;
   5246
   5247	spin_unlock_irqrestore(&priv->rx_urb_lock, flags);
   5248
   5249	list_for_each_entry_safe(rx_urb, tmp, &local, list) {
   5250		list_del_init(&rx_urb->list);
   5251		ret = rtl8xxxu_submit_rx_urb(priv, rx_urb);
   5252		/*
   5253		 * If out of memory or temporary error, put it back on the
   5254		 * queue and try again. Otherwise the device is dead/gone
   5255		 * and we should drop it.
   5256		 */
   5257		switch (ret) {
   5258		case 0:
   5259			break;
   5260		case -ENOMEM:
   5261		case -EAGAIN:
   5262			rtl8xxxu_queue_rx_urb(priv, rx_urb);
   5263			break;
   5264		default:
   5265			pr_info("failed to requeue urb %i\n", ret);
   5266			skb = (struct sk_buff *)rx_urb->urb.context;
   5267			dev_kfree_skb(skb);
   5268			usb_free_urb(&rx_urb->urb);
   5269		}
   5270	}
   5271}
   5272
   5273/*
   5274 * The RTL8723BU/RTL8192EU vendor driver use coexistence table type
   5275 * 0-7 to represent writing different combinations of register values
   5276 * to REG_BT_COEX_TABLEs. It's for different kinds of coexistence use
   5277 * cases which Realtek doesn't provide detail for these settings. Keep
   5278 * this aligned with vendor driver for easier maintenance.
   5279 */
   5280static
   5281void rtl8723bu_set_coex_with_type(struct rtl8xxxu_priv *priv, u8 type)
   5282{
   5283	switch (type) {
   5284	case 0:
   5285		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE1, 0x55555555);
   5286		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE2, 0x55555555);
   5287		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE3, 0x00ffffff);
   5288		rtl8xxxu_write8(priv, REG_BT_COEX_TABLE4, 0x03);
   5289		break;
   5290	case 1:
   5291	case 3:
   5292		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE1, 0x55555555);
   5293		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE2, 0x5a5a5a5a);
   5294		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE3, 0x00ffffff);
   5295		rtl8xxxu_write8(priv, REG_BT_COEX_TABLE4, 0x03);
   5296		break;
   5297	case 2:
   5298		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE1, 0x5a5a5a5a);
   5299		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE2, 0x5a5a5a5a);
   5300		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE3, 0x00ffffff);
   5301		rtl8xxxu_write8(priv, REG_BT_COEX_TABLE4, 0x03);
   5302		break;
   5303	case 4:
   5304		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE1, 0x5a5a5a5a);
   5305		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE2, 0xaaaa5a5a);
   5306		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE3, 0x00ffffff);
   5307		rtl8xxxu_write8(priv, REG_BT_COEX_TABLE4, 0x03);
   5308		break;
   5309	case 5:
   5310		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE1, 0x5a5a5a5a);
   5311		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE2, 0xaa5a5a5a);
   5312		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE3, 0x00ffffff);
   5313		rtl8xxxu_write8(priv, REG_BT_COEX_TABLE4, 0x03);
   5314		break;
   5315	case 6:
   5316		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE1, 0x55555555);
   5317		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE2, 0xaaaaaaaa);
   5318		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE3, 0x00ffffff);
   5319		rtl8xxxu_write8(priv, REG_BT_COEX_TABLE4, 0x03);
   5320		break;
   5321	case 7:
   5322		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE1, 0xaaaaaaaa);
   5323		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE2, 0xaaaaaaaa);
   5324		rtl8xxxu_write32(priv, REG_BT_COEX_TABLE3, 0x00ffffff);
   5325		rtl8xxxu_write8(priv, REG_BT_COEX_TABLE4, 0x03);
   5326		break;
   5327	default:
   5328		break;
   5329	}
   5330}
   5331
   5332static
   5333void rtl8723bu_update_bt_link_info(struct rtl8xxxu_priv *priv, u8 bt_info)
   5334{
   5335	struct rtl8xxxu_btcoex *btcoex = &priv->bt_coex;
   5336
   5337	if (bt_info & BT_INFO_8723B_1ANT_B_INQ_PAGE)
   5338		btcoex->c2h_bt_inquiry = true;
   5339	else
   5340		btcoex->c2h_bt_inquiry = false;
   5341
   5342	if (!(bt_info & BT_INFO_8723B_1ANT_B_CONNECTION)) {
   5343		btcoex->bt_status = BT_8723B_1ANT_STATUS_NON_CONNECTED_IDLE;
   5344		btcoex->has_sco = false;
   5345		btcoex->has_hid = false;
   5346		btcoex->has_pan = false;
   5347		btcoex->has_a2dp = false;
   5348	} else {
   5349		if ((bt_info & 0x1f) == BT_INFO_8723B_1ANT_B_CONNECTION)
   5350			btcoex->bt_status = BT_8723B_1ANT_STATUS_CONNECTED_IDLE;
   5351		else if ((bt_info & BT_INFO_8723B_1ANT_B_SCO_ESCO) ||
   5352			 (bt_info & BT_INFO_8723B_1ANT_B_SCO_BUSY))
   5353			btcoex->bt_status = BT_8723B_1ANT_STATUS_SCO_BUSY;
   5354		else if (bt_info & BT_INFO_8723B_1ANT_B_ACL_BUSY)
   5355			btcoex->bt_status = BT_8723B_1ANT_STATUS_ACL_BUSY;
   5356		else
   5357			btcoex->bt_status = BT_8723B_1ANT_STATUS_MAX;
   5358
   5359		if (bt_info & BT_INFO_8723B_1ANT_B_FTP)
   5360			btcoex->has_pan = true;
   5361		else
   5362			btcoex->has_pan = false;
   5363
   5364		if (bt_info & BT_INFO_8723B_1ANT_B_A2DP)
   5365			btcoex->has_a2dp = true;
   5366		else
   5367			btcoex->has_a2dp = false;
   5368
   5369		if (bt_info & BT_INFO_8723B_1ANT_B_HID)
   5370			btcoex->has_hid = true;
   5371		else
   5372			btcoex->has_hid = false;
   5373
   5374		if (bt_info & BT_INFO_8723B_1ANT_B_SCO_ESCO)
   5375			btcoex->has_sco = true;
   5376		else
   5377			btcoex->has_sco = false;
   5378	}
   5379
   5380	if (!btcoex->has_a2dp && !btcoex->has_sco &&
   5381	    !btcoex->has_pan && btcoex->has_hid)
   5382		btcoex->hid_only = true;
   5383	else
   5384		btcoex->hid_only = false;
   5385
   5386	if (!btcoex->has_sco && !btcoex->has_pan &&
   5387	    !btcoex->has_hid && btcoex->has_a2dp)
   5388		btcoex->has_a2dp = true;
   5389	else
   5390		btcoex->has_a2dp = false;
   5391
   5392	if (btcoex->bt_status == BT_8723B_1ANT_STATUS_SCO_BUSY ||
   5393	    btcoex->bt_status == BT_8723B_1ANT_STATUS_ACL_BUSY)
   5394		btcoex->bt_busy = true;
   5395	else
   5396		btcoex->bt_busy = false;
   5397}
   5398
   5399static
   5400void rtl8723bu_handle_bt_inquiry(struct rtl8xxxu_priv *priv)
   5401{
   5402	struct ieee80211_vif *vif;
   5403	struct rtl8xxxu_btcoex *btcoex;
   5404	bool wifi_connected;
   5405
   5406	vif = priv->vif;
   5407	btcoex = &priv->bt_coex;
   5408	wifi_connected = (vif && vif->bss_conf.assoc);
   5409
   5410	if (!wifi_connected) {
   5411		rtl8723bu_set_ps_tdma(priv, 0x8, 0x0, 0x0, 0x0, 0x0);
   5412		rtl8723bu_set_coex_with_type(priv, 0);
   5413	} else if (btcoex->has_sco || btcoex->has_hid || btcoex->has_a2dp) {
   5414		rtl8723bu_set_ps_tdma(priv, 0x61, 0x35, 0x3, 0x11, 0x11);
   5415		rtl8723bu_set_coex_with_type(priv, 4);
   5416	} else if (btcoex->has_pan) {
   5417		rtl8723bu_set_ps_tdma(priv, 0x61, 0x3f, 0x3, 0x11, 0x11);
   5418		rtl8723bu_set_coex_with_type(priv, 4);
   5419	} else {
   5420		rtl8723bu_set_ps_tdma(priv, 0x8, 0x0, 0x0, 0x0, 0x0);
   5421		rtl8723bu_set_coex_with_type(priv, 7);
   5422	}
   5423}
   5424
   5425static
   5426void rtl8723bu_handle_bt_info(struct rtl8xxxu_priv *priv)
   5427{
   5428	struct ieee80211_vif *vif;
   5429	struct rtl8xxxu_btcoex *btcoex;
   5430	bool wifi_connected;
   5431
   5432	vif = priv->vif;
   5433	btcoex = &priv->bt_coex;
   5434	wifi_connected = (vif && vif->bss_conf.assoc);
   5435
   5436	if (wifi_connected) {
   5437		u32 val32 = 0;
   5438		u32 high_prio_tx = 0, high_prio_rx = 0;
   5439
   5440		val32 = rtl8xxxu_read32(priv, 0x770);
   5441		high_prio_tx = val32 & 0x0000ffff;
   5442		high_prio_rx = (val32  & 0xffff0000) >> 16;
   5443
   5444		if (btcoex->bt_busy) {
   5445			if (btcoex->hid_only) {
   5446				rtl8723bu_set_ps_tdma(priv, 0x61, 0x20,
   5447						      0x3, 0x11, 0x11);
   5448				rtl8723bu_set_coex_with_type(priv, 5);
   5449			} else if (btcoex->a2dp_only) {
   5450				rtl8723bu_set_ps_tdma(priv, 0x61, 0x35,
   5451						      0x3, 0x11, 0x11);
   5452				rtl8723bu_set_coex_with_type(priv, 4);
   5453			} else if ((btcoex->has_a2dp && btcoex->has_pan) ||
   5454				   (btcoex->has_hid && btcoex->has_a2dp &&
   5455				    btcoex->has_pan)) {
   5456				rtl8723bu_set_ps_tdma(priv, 0x51, 0x21,
   5457						      0x3, 0x10, 0x10);
   5458				rtl8723bu_set_coex_with_type(priv, 4);
   5459			} else if (btcoex->has_hid && btcoex->has_a2dp) {
   5460				rtl8723bu_set_ps_tdma(priv, 0x51, 0x21,
   5461						      0x3, 0x10, 0x10);
   5462				rtl8723bu_set_coex_with_type(priv, 3);
   5463			} else {
   5464				rtl8723bu_set_ps_tdma(priv, 0x61, 0x35,
   5465						      0x3, 0x11, 0x11);
   5466				rtl8723bu_set_coex_with_type(priv, 4);
   5467			}
   5468		} else {
   5469			rtl8723bu_set_ps_tdma(priv, 0x8, 0x0, 0x0, 0x0, 0x0);
   5470			if (high_prio_tx + high_prio_rx <= 60)
   5471				rtl8723bu_set_coex_with_type(priv, 2);
   5472			else
   5473				rtl8723bu_set_coex_with_type(priv, 7);
   5474		}
   5475	} else {
   5476		rtl8723bu_set_ps_tdma(priv, 0x8, 0x0, 0x0, 0x0, 0x0);
   5477		rtl8723bu_set_coex_with_type(priv, 0);
   5478	}
   5479}
   5480
   5481static void rtl8xxxu_c2hcmd_callback(struct work_struct *work)
   5482{
   5483	struct rtl8xxxu_priv *priv;
   5484	struct rtl8723bu_c2h *c2h;
   5485	struct sk_buff *skb = NULL;
   5486	u8 bt_info = 0;
   5487	struct rtl8xxxu_btcoex *btcoex;
   5488	struct rtl8xxxu_ra_report *rarpt;
   5489	u8 rate, sgi, bw;
   5490	u32 bit_rate;
   5491	u8 mcs = 0, nss = 0;
   5492
   5493	priv = container_of(work, struct rtl8xxxu_priv, c2hcmd_work);
   5494	btcoex = &priv->bt_coex;
   5495	rarpt = &priv->ra_report;
   5496
   5497	if (priv->rf_paths > 1)
   5498		goto out;
   5499
   5500	while (!skb_queue_empty(&priv->c2hcmd_queue)) {
   5501		skb = skb_dequeue(&priv->c2hcmd_queue);
   5502
   5503		c2h = (struct rtl8723bu_c2h *)skb->data;
   5504
   5505		switch (c2h->id) {
   5506		case C2H_8723B_BT_INFO:
   5507			bt_info = c2h->bt_info.bt_info;
   5508
   5509			rtl8723bu_update_bt_link_info(priv, bt_info);
   5510			if (btcoex->c2h_bt_inquiry) {
   5511				rtl8723bu_handle_bt_inquiry(priv);
   5512				break;
   5513			}
   5514			rtl8723bu_handle_bt_info(priv);
   5515			break;
   5516		case C2H_8723B_RA_REPORT:
   5517			rarpt->txrate.flags = 0;
   5518			rate = c2h->ra_report.rate;
   5519			sgi = c2h->ra_report.sgi;
   5520			bw = c2h->ra_report.bw;
   5521
   5522			if (rate < DESC_RATE_MCS0) {
   5523				rarpt->txrate.legacy =
   5524					rtl8xxxu_legacy_ratetable[rate].bitrate;
   5525			} else {
   5526				rtl8xxxu_desc_to_mcsrate(rate, &mcs, &nss);
   5527				rarpt->txrate.flags |= RATE_INFO_FLAGS_MCS;
   5528
   5529				rarpt->txrate.mcs = mcs;
   5530				rarpt->txrate.nss = nss;
   5531
   5532				if (sgi) {
   5533					rarpt->txrate.flags |=
   5534						RATE_INFO_FLAGS_SHORT_GI;
   5535				}
   5536
   5537				if (bw == RATE_INFO_BW_20)
   5538					rarpt->txrate.bw |= RATE_INFO_BW_20;
   5539			}
   5540			bit_rate = cfg80211_calculate_bitrate(&rarpt->txrate);
   5541			rarpt->bit_rate = bit_rate;
   5542			rarpt->desc_rate = rate;
   5543			break;
   5544		default:
   5545			break;
   5546		}
   5547	}
   5548
   5549out:
   5550	dev_kfree_skb(skb);
   5551}
   5552
   5553static void rtl8723bu_handle_c2h(struct rtl8xxxu_priv *priv,
   5554				 struct sk_buff *skb)
   5555{
   5556	struct rtl8723bu_c2h *c2h = (struct rtl8723bu_c2h *)skb->data;
   5557	struct device *dev = &priv->udev->dev;
   5558	int len;
   5559
   5560	len = skb->len - 2;
   5561
   5562	dev_dbg(dev, "C2H ID %02x seq %02x, len %02x source %02x\n",
   5563		c2h->id, c2h->seq, len, c2h->bt_info.response_source);
   5564
   5565	switch(c2h->id) {
   5566	case C2H_8723B_BT_INFO:
   5567		if (c2h->bt_info.response_source >
   5568		    BT_INFO_SRC_8723B_BT_ACTIVE_SEND)
   5569			dev_dbg(dev, "C2H_BT_INFO WiFi only firmware\n");
   5570		else
   5571			dev_dbg(dev, "C2H_BT_INFO BT/WiFi coexist firmware\n");
   5572
   5573		if (c2h->bt_info.bt_has_reset)
   5574			dev_dbg(dev, "BT has been reset\n");
   5575		if (c2h->bt_info.tx_rx_mask)
   5576			dev_dbg(dev, "BT TRx mask\n");
   5577
   5578		break;
   5579	case C2H_8723B_BT_MP_INFO:
   5580		dev_dbg(dev, "C2H_MP_INFO ext ID %02x, status %02x\n",
   5581			c2h->bt_mp_info.ext_id, c2h->bt_mp_info.status);
   5582		break;
   5583	case C2H_8723B_RA_REPORT:
   5584		dev_dbg(dev,
   5585			"C2H RA RPT: rate %02x, unk %i, macid %02x, noise %i\n",
   5586			c2h->ra_report.rate, c2h->ra_report.sgi,
   5587			c2h->ra_report.macid, c2h->ra_report.noisy_state);
   5588		break;
   5589	default:
   5590		dev_info(dev, "Unhandled C2H event %02x seq %02x\n",
   5591			 c2h->id, c2h->seq);
   5592		print_hex_dump(KERN_INFO, "C2H content: ", DUMP_PREFIX_NONE,
   5593			       16, 1, c2h->raw.payload, len, false);
   5594		break;
   5595	}
   5596
   5597	skb_queue_tail(&priv->c2hcmd_queue, skb);
   5598
   5599	schedule_work(&priv->c2hcmd_work);
   5600}
   5601
   5602int rtl8xxxu_parse_rxdesc16(struct rtl8xxxu_priv *priv, struct sk_buff *skb)
   5603{
   5604	struct ieee80211_hw *hw = priv->hw;
   5605	struct ieee80211_rx_status *rx_status;
   5606	struct rtl8xxxu_rxdesc16 *rx_desc;
   5607	struct rtl8723au_phy_stats *phy_stats;
   5608	struct sk_buff *next_skb = NULL;
   5609	__le32 *_rx_desc_le;
   5610	u32 *_rx_desc;
   5611	int drvinfo_sz, desc_shift;
   5612	int i, pkt_cnt, pkt_len, urb_len, pkt_offset;
   5613
   5614	urb_len = skb->len;
   5615	pkt_cnt = 0;
   5616
   5617	if (urb_len < sizeof(struct rtl8xxxu_rxdesc16)) {
   5618		kfree_skb(skb);
   5619		return RX_TYPE_ERROR;
   5620	}
   5621
   5622	do {
   5623		rx_desc = (struct rtl8xxxu_rxdesc16 *)skb->data;
   5624		_rx_desc_le = (__le32 *)skb->data;
   5625		_rx_desc = (u32 *)skb->data;
   5626
   5627		for (i = 0;
   5628		     i < (sizeof(struct rtl8xxxu_rxdesc16) / sizeof(u32)); i++)
   5629			_rx_desc[i] = le32_to_cpu(_rx_desc_le[i]);
   5630
   5631		/*
   5632		 * Only read pkt_cnt from the header if we're parsing the
   5633		 * first packet
   5634		 */
   5635		if (!pkt_cnt)
   5636			pkt_cnt = rx_desc->pkt_cnt;
   5637		pkt_len = rx_desc->pktlen;
   5638
   5639		drvinfo_sz = rx_desc->drvinfo_sz * 8;
   5640		desc_shift = rx_desc->shift;
   5641		pkt_offset = roundup(pkt_len + drvinfo_sz + desc_shift +
   5642				     sizeof(struct rtl8xxxu_rxdesc16), 128);
   5643
   5644		/*
   5645		 * Only clone the skb if there's enough data at the end to
   5646		 * at least cover the rx descriptor
   5647		 */
   5648		if (pkt_cnt > 1 &&
   5649		    urb_len >= (pkt_offset + sizeof(struct rtl8xxxu_rxdesc16)))
   5650			next_skb = skb_clone(skb, GFP_ATOMIC);
   5651
   5652		rx_status = IEEE80211_SKB_RXCB(skb);
   5653		memset(rx_status, 0, sizeof(struct ieee80211_rx_status));
   5654
   5655		skb_pull(skb, sizeof(struct rtl8xxxu_rxdesc16));
   5656
   5657		phy_stats = (struct rtl8723au_phy_stats *)skb->data;
   5658
   5659		skb_pull(skb, drvinfo_sz + desc_shift);
   5660
   5661		skb_trim(skb, pkt_len);
   5662
   5663		if (rx_desc->phy_stats)
   5664			rtl8xxxu_rx_parse_phystats(priv, rx_status, phy_stats,
   5665						   rx_desc->rxmcs);
   5666
   5667		rx_status->mactime = rx_desc->tsfl;
   5668		rx_status->flag |= RX_FLAG_MACTIME_START;
   5669
   5670		if (!rx_desc->swdec)
   5671			rx_status->flag |= RX_FLAG_DECRYPTED;
   5672		if (rx_desc->crc32)
   5673			rx_status->flag |= RX_FLAG_FAILED_FCS_CRC;
   5674		if (rx_desc->bw)
   5675			rx_status->bw = RATE_INFO_BW_40;
   5676
   5677		if (rx_desc->rxht) {
   5678			rx_status->encoding = RX_ENC_HT;
   5679			rx_status->rate_idx = rx_desc->rxmcs - DESC_RATE_MCS0;
   5680		} else {
   5681			rx_status->rate_idx = rx_desc->rxmcs;
   5682		}
   5683
   5684		rx_status->freq = hw->conf.chandef.chan->center_freq;
   5685		rx_status->band = hw->conf.chandef.chan->band;
   5686
   5687		ieee80211_rx_irqsafe(hw, skb);
   5688
   5689		skb = next_skb;
   5690		if (skb)
   5691			skb_pull(next_skb, pkt_offset);
   5692
   5693		pkt_cnt--;
   5694		urb_len -= pkt_offset;
   5695		next_skb = NULL;
   5696	} while (skb && pkt_cnt > 0 &&
   5697		 urb_len >= sizeof(struct rtl8xxxu_rxdesc16));
   5698
   5699	return RX_TYPE_DATA_PKT;
   5700}
   5701
   5702int rtl8xxxu_parse_rxdesc24(struct rtl8xxxu_priv *priv, struct sk_buff *skb)
   5703{
   5704	struct ieee80211_hw *hw = priv->hw;
   5705	struct ieee80211_rx_status *rx_status = IEEE80211_SKB_RXCB(skb);
   5706	struct rtl8xxxu_rxdesc24 *rx_desc =
   5707		(struct rtl8xxxu_rxdesc24 *)skb->data;
   5708	struct rtl8723au_phy_stats *phy_stats;
   5709	__le32 *_rx_desc_le = (__le32 *)skb->data;
   5710	u32 *_rx_desc = (u32 *)skb->data;
   5711	int drvinfo_sz, desc_shift;
   5712	int i;
   5713
   5714	for (i = 0; i < (sizeof(struct rtl8xxxu_rxdesc24) / sizeof(u32)); i++)
   5715		_rx_desc[i] = le32_to_cpu(_rx_desc_le[i]);
   5716
   5717	memset(rx_status, 0, sizeof(struct ieee80211_rx_status));
   5718
   5719	skb_pull(skb, sizeof(struct rtl8xxxu_rxdesc24));
   5720
   5721	phy_stats = (struct rtl8723au_phy_stats *)skb->data;
   5722
   5723	drvinfo_sz = rx_desc->drvinfo_sz * 8;
   5724	desc_shift = rx_desc->shift;
   5725	skb_pull(skb, drvinfo_sz + desc_shift);
   5726
   5727	if (rx_desc->rpt_sel) {
   5728		struct device *dev = &priv->udev->dev;
   5729		dev_dbg(dev, "%s: C2H packet\n", __func__);
   5730		rtl8723bu_handle_c2h(priv, skb);
   5731		return RX_TYPE_C2H;
   5732	}
   5733
   5734	if (rx_desc->phy_stats)
   5735		rtl8xxxu_rx_parse_phystats(priv, rx_status, phy_stats,
   5736					   rx_desc->rxmcs);
   5737
   5738	rx_status->mactime = rx_desc->tsfl;
   5739	rx_status->flag |= RX_FLAG_MACTIME_START;
   5740
   5741	if (!rx_desc->swdec)
   5742		rx_status->flag |= RX_FLAG_DECRYPTED;
   5743	if (rx_desc->crc32)
   5744		rx_status->flag |= RX_FLAG_FAILED_FCS_CRC;
   5745	if (rx_desc->bw)
   5746		rx_status->bw = RATE_INFO_BW_40;
   5747
   5748	if (rx_desc->rxmcs >= DESC_RATE_MCS0) {
   5749		rx_status->encoding = RX_ENC_HT;
   5750		rx_status->rate_idx = rx_desc->rxmcs - DESC_RATE_MCS0;
   5751	} else {
   5752		rx_status->rate_idx = rx_desc->rxmcs;
   5753	}
   5754
   5755	rx_status->freq = hw->conf.chandef.chan->center_freq;
   5756	rx_status->band = hw->conf.chandef.chan->band;
   5757
   5758	ieee80211_rx_irqsafe(hw, skb);
   5759	return RX_TYPE_DATA_PKT;
   5760}
   5761
   5762static void rtl8xxxu_rx_complete(struct urb *urb)
   5763{
   5764	struct rtl8xxxu_rx_urb *rx_urb =
   5765		container_of(urb, struct rtl8xxxu_rx_urb, urb);
   5766	struct ieee80211_hw *hw = rx_urb->hw;
   5767	struct rtl8xxxu_priv *priv = hw->priv;
   5768	struct sk_buff *skb = (struct sk_buff *)urb->context;
   5769	struct device *dev = &priv->udev->dev;
   5770
   5771	skb_put(skb, urb->actual_length);
   5772
   5773	if (urb->status == 0) {
   5774		priv->fops->parse_rx_desc(priv, skb);
   5775
   5776		skb = NULL;
   5777		rx_urb->urb.context = NULL;
   5778		rtl8xxxu_queue_rx_urb(priv, rx_urb);
   5779	} else {
   5780		dev_dbg(dev, "%s: status %i\n",	__func__, urb->status);
   5781		goto cleanup;
   5782	}
   5783	return;
   5784
   5785cleanup:
   5786	usb_free_urb(urb);
   5787	dev_kfree_skb(skb);
   5788	return;
   5789}
   5790
   5791static int rtl8xxxu_submit_rx_urb(struct rtl8xxxu_priv *priv,
   5792				  struct rtl8xxxu_rx_urb *rx_urb)
   5793{
   5794	struct rtl8xxxu_fileops *fops = priv->fops;
   5795	struct sk_buff *skb;
   5796	int skb_size;
   5797	int ret, rx_desc_sz;
   5798
   5799	rx_desc_sz = fops->rx_desc_size;
   5800
   5801	if (priv->rx_buf_aggregation && fops->rx_agg_buf_size) {
   5802		skb_size = fops->rx_agg_buf_size;
   5803		skb_size += (rx_desc_sz + sizeof(struct rtl8723au_phy_stats));
   5804	} else {
   5805		skb_size = IEEE80211_MAX_FRAME_LEN;
   5806	}
   5807
   5808	skb = __netdev_alloc_skb(NULL, skb_size, GFP_KERNEL);
   5809	if (!skb)
   5810		return -ENOMEM;
   5811
   5812	memset(skb->data, 0, rx_desc_sz);
   5813	usb_fill_bulk_urb(&rx_urb->urb, priv->udev, priv->pipe_in, skb->data,
   5814			  skb_size, rtl8xxxu_rx_complete, skb);
   5815	usb_anchor_urb(&rx_urb->urb, &priv->rx_anchor);
   5816	ret = usb_submit_urb(&rx_urb->urb, GFP_ATOMIC);
   5817	if (ret)
   5818		usb_unanchor_urb(&rx_urb->urb);
   5819	return ret;
   5820}
   5821
   5822static void rtl8xxxu_int_complete(struct urb *urb)
   5823{
   5824	struct rtl8xxxu_priv *priv = (struct rtl8xxxu_priv *)urb->context;
   5825	struct device *dev = &priv->udev->dev;
   5826	int ret;
   5827
   5828	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_INTERRUPT)
   5829		dev_dbg(dev, "%s: status %i\n", __func__, urb->status);
   5830	if (urb->status == 0) {
   5831		usb_anchor_urb(urb, &priv->int_anchor);
   5832		ret = usb_submit_urb(urb, GFP_ATOMIC);
   5833		if (ret)
   5834			usb_unanchor_urb(urb);
   5835	} else {
   5836		dev_dbg(dev, "%s: Error %i\n", __func__, urb->status);
   5837	}
   5838}
   5839
   5840
   5841static int rtl8xxxu_submit_int_urb(struct ieee80211_hw *hw)
   5842{
   5843	struct rtl8xxxu_priv *priv = hw->priv;
   5844	struct urb *urb;
   5845	u32 val32;
   5846	int ret;
   5847
   5848	urb = usb_alloc_urb(0, GFP_KERNEL);
   5849	if (!urb)
   5850		return -ENOMEM;
   5851
   5852	usb_fill_int_urb(urb, priv->udev, priv->pipe_interrupt,
   5853			 priv->int_buf, USB_INTR_CONTENT_LENGTH,
   5854			 rtl8xxxu_int_complete, priv, 1);
   5855	usb_anchor_urb(urb, &priv->int_anchor);
   5856	ret = usb_submit_urb(urb, GFP_KERNEL);
   5857	if (ret) {
   5858		usb_unanchor_urb(urb);
   5859		goto error;
   5860	}
   5861
   5862	val32 = rtl8xxxu_read32(priv, REG_USB_HIMR);
   5863	val32 |= USB_HIMR_CPWM;
   5864	rtl8xxxu_write32(priv, REG_USB_HIMR, val32);
   5865
   5866error:
   5867	usb_free_urb(urb);
   5868	return ret;
   5869}
   5870
   5871static int rtl8xxxu_add_interface(struct ieee80211_hw *hw,
   5872				  struct ieee80211_vif *vif)
   5873{
   5874	struct rtl8xxxu_priv *priv = hw->priv;
   5875	int ret;
   5876	u8 val8;
   5877
   5878	switch (vif->type) {
   5879	case NL80211_IFTYPE_STATION:
   5880		if (!priv->vif)
   5881			priv->vif = vif;
   5882		else
   5883			return -EOPNOTSUPP;
   5884		rtl8xxxu_stop_tx_beacon(priv);
   5885
   5886		val8 = rtl8xxxu_read8(priv, REG_BEACON_CTRL);
   5887		val8 |= BEACON_ATIM | BEACON_FUNCTION_ENABLE |
   5888			BEACON_DISABLE_TSF_UPDATE;
   5889		rtl8xxxu_write8(priv, REG_BEACON_CTRL, val8);
   5890		ret = 0;
   5891		break;
   5892	default:
   5893		ret = -EOPNOTSUPP;
   5894	}
   5895
   5896	rtl8xxxu_set_linktype(priv, vif->type);
   5897
   5898	return ret;
   5899}
   5900
   5901static void rtl8xxxu_remove_interface(struct ieee80211_hw *hw,
   5902				      struct ieee80211_vif *vif)
   5903{
   5904	struct rtl8xxxu_priv *priv = hw->priv;
   5905
   5906	dev_dbg(&priv->udev->dev, "%s\n", __func__);
   5907
   5908	if (priv->vif)
   5909		priv->vif = NULL;
   5910}
   5911
   5912static int rtl8xxxu_config(struct ieee80211_hw *hw, u32 changed)
   5913{
   5914	struct rtl8xxxu_priv *priv = hw->priv;
   5915	struct device *dev = &priv->udev->dev;
   5916	u16 val16;
   5917	int ret = 0, channel;
   5918	bool ht40;
   5919
   5920	if (rtl8xxxu_debug & RTL8XXXU_DEBUG_CHANNEL)
   5921		dev_info(dev,
   5922			 "%s: channel: %i (changed %08x chandef.width %02x)\n",
   5923			 __func__, hw->conf.chandef.chan->hw_value,
   5924			 changed, hw->conf.chandef.width);
   5925
   5926	if (changed & IEEE80211_CONF_CHANGE_RETRY_LIMITS) {
   5927		val16 = ((hw->conf.long_frame_max_tx_count <<
   5928			  RETRY_LIMIT_LONG_SHIFT) & RETRY_LIMIT_LONG_MASK) |
   5929			((hw->conf.short_frame_max_tx_count <<
   5930			  RETRY_LIMIT_SHORT_SHIFT) & RETRY_LIMIT_SHORT_MASK);
   5931		rtl8xxxu_write16(priv, REG_RETRY_LIMIT, val16);
   5932	}
   5933
   5934	if (changed & IEEE80211_CONF_CHANGE_CHANNEL) {
   5935		switch (hw->conf.chandef.width) {
   5936		case NL80211_CHAN_WIDTH_20_NOHT:
   5937		case NL80211_CHAN_WIDTH_20:
   5938			ht40 = false;
   5939			break;
   5940		case NL80211_CHAN_WIDTH_40:
   5941			ht40 = true;
   5942			break;
   5943		default:
   5944			ret = -ENOTSUPP;
   5945			goto exit;
   5946		}
   5947
   5948		channel = hw->conf.chandef.chan->hw_value;
   5949
   5950		priv->fops->set_tx_power(priv, channel, ht40);
   5951
   5952		priv->fops->config_channel(hw);
   5953	}
   5954
   5955exit:
   5956	return ret;
   5957}
   5958
   5959static int rtl8xxxu_conf_tx(struct ieee80211_hw *hw,
   5960			    struct ieee80211_vif *vif, u16 queue,
   5961			    const struct ieee80211_tx_queue_params *param)
   5962{
   5963	struct rtl8xxxu_priv *priv = hw->priv;
   5964	struct device *dev = &priv->udev->dev;
   5965	u32 val32;
   5966	u8 aifs, acm_ctrl, acm_bit;
   5967
   5968	aifs = param->aifs;
   5969
   5970	val32 = aifs |
   5971		fls(param->cw_min) << EDCA_PARAM_ECW_MIN_SHIFT |
   5972		fls(param->cw_max) << EDCA_PARAM_ECW_MAX_SHIFT |
   5973		(u32)param->txop << EDCA_PARAM_TXOP_SHIFT;
   5974
   5975	acm_ctrl = rtl8xxxu_read8(priv, REG_ACM_HW_CTRL);
   5976	dev_dbg(dev,
   5977		"%s: IEEE80211 queue %02x val %08x, acm %i, acm_ctrl %02x\n",
   5978		__func__, queue, val32, param->acm, acm_ctrl);
   5979
   5980	switch (queue) {
   5981	case IEEE80211_AC_VO:
   5982		acm_bit = ACM_HW_CTRL_VO;
   5983		rtl8xxxu_write32(priv, REG_EDCA_VO_PARAM, val32);
   5984		break;
   5985	case IEEE80211_AC_VI:
   5986		acm_bit = ACM_HW_CTRL_VI;
   5987		rtl8xxxu_write32(priv, REG_EDCA_VI_PARAM, val32);
   5988		break;
   5989	case IEEE80211_AC_BE:
   5990		acm_bit = ACM_HW_CTRL_BE;
   5991		rtl8xxxu_write32(priv, REG_EDCA_BE_PARAM, val32);
   5992		break;
   5993	case IEEE80211_AC_BK:
   5994		acm_bit = ACM_HW_CTRL_BK;
   5995		rtl8xxxu_write32(priv, REG_EDCA_BK_PARAM, val32);
   5996		break;
   5997	default:
   5998		acm_bit = 0;
   5999		break;
   6000	}
   6001
   6002	if (param->acm)
   6003		acm_ctrl |= acm_bit;
   6004	else
   6005		acm_ctrl &= ~acm_bit;
   6006	rtl8xxxu_write8(priv, REG_ACM_HW_CTRL, acm_ctrl);
   6007
   6008	return 0;
   6009}
   6010
   6011static void rtl8xxxu_configure_filter(struct ieee80211_hw *hw,
   6012				      unsigned int changed_flags,
   6013				      unsigned int *total_flags, u64 multicast)
   6014{
   6015	struct rtl8xxxu_priv *priv = hw->priv;
   6016	u32 rcr = rtl8xxxu_read32(priv, REG_RCR);
   6017
   6018	dev_dbg(&priv->udev->dev, "%s: changed_flags %08x, total_flags %08x\n",
   6019		__func__, changed_flags, *total_flags);
   6020
   6021	/*
   6022	 * FIF_ALLMULTI ignored as all multicast frames are accepted (REG_MAR)
   6023	 */
   6024
   6025	if (*total_flags & FIF_FCSFAIL)
   6026		rcr |= RCR_ACCEPT_CRC32;
   6027	else
   6028		rcr &= ~RCR_ACCEPT_CRC32;
   6029
   6030	/*
   6031	 * FIF_PLCPFAIL not supported?
   6032	 */
   6033
   6034	if (*total_flags & FIF_BCN_PRBRESP_PROMISC)
   6035		rcr &= ~RCR_CHECK_BSSID_BEACON;
   6036	else
   6037		rcr |= RCR_CHECK_BSSID_BEACON;
   6038
   6039	if (*total_flags & FIF_CONTROL)
   6040		rcr |= RCR_ACCEPT_CTRL_FRAME;
   6041	else
   6042		rcr &= ~RCR_ACCEPT_CTRL_FRAME;
   6043
   6044	if (*total_flags & FIF_OTHER_BSS) {
   6045		rcr |= RCR_ACCEPT_AP;
   6046		rcr &= ~RCR_CHECK_BSSID_MATCH;
   6047	} else {
   6048		rcr &= ~RCR_ACCEPT_AP;
   6049		rcr |= RCR_CHECK_BSSID_MATCH;
   6050	}
   6051
   6052	if (*total_flags & FIF_PSPOLL)
   6053		rcr |= RCR_ACCEPT_PM;
   6054	else
   6055		rcr &= ~RCR_ACCEPT_PM;
   6056
   6057	/*
   6058	 * FIF_PROBE_REQ ignored as probe requests always seem to be accepted
   6059	 */
   6060
   6061	rtl8xxxu_write32(priv, REG_RCR, rcr);
   6062
   6063	*total_flags &= (FIF_ALLMULTI | FIF_FCSFAIL | FIF_BCN_PRBRESP_PROMISC |
   6064			 FIF_CONTROL | FIF_OTHER_BSS | FIF_PSPOLL |
   6065			 FIF_PROBE_REQ);
   6066}
   6067
   6068static int rtl8xxxu_set_rts_threshold(struct ieee80211_hw *hw, u32 rts)
   6069{
   6070	if (rts > 2347)
   6071		return -EINVAL;
   6072
   6073	return 0;
   6074}
   6075
   6076static int rtl8xxxu_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
   6077			    struct ieee80211_vif *vif,
   6078			    struct ieee80211_sta *sta,
   6079			    struct ieee80211_key_conf *key)
   6080{
   6081	struct rtl8xxxu_priv *priv = hw->priv;
   6082	struct device *dev = &priv->udev->dev;
   6083	u8 mac_addr[ETH_ALEN];
   6084	u8 val8;
   6085	u16 val16;
   6086	u32 val32;
   6087	int retval = -EOPNOTSUPP;
   6088
   6089	dev_dbg(dev, "%s: cmd %02x, cipher %08x, index %i\n",
   6090		__func__, cmd, key->cipher, key->keyidx);
   6091
   6092	if (vif->type != NL80211_IFTYPE_STATION)
   6093		return -EOPNOTSUPP;
   6094
   6095	if (key->keyidx > 3)
   6096		return -EOPNOTSUPP;
   6097
   6098	switch (key->cipher) {
   6099	case WLAN_CIPHER_SUITE_WEP40:
   6100	case WLAN_CIPHER_SUITE_WEP104:
   6101
   6102		break;
   6103	case WLAN_CIPHER_SUITE_CCMP:
   6104		key->flags |= IEEE80211_KEY_FLAG_SW_MGMT_TX;
   6105		break;
   6106	case WLAN_CIPHER_SUITE_TKIP:
   6107		key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
   6108		break;
   6109	default:
   6110		return -EOPNOTSUPP;
   6111	}
   6112
   6113	if (key->flags & IEEE80211_KEY_FLAG_PAIRWISE) {
   6114		dev_dbg(dev, "%s: pairwise key\n", __func__);
   6115		ether_addr_copy(mac_addr, sta->addr);
   6116	} else {
   6117		dev_dbg(dev, "%s: group key\n", __func__);
   6118		eth_broadcast_addr(mac_addr);
   6119	}
   6120
   6121	val16 = rtl8xxxu_read16(priv, REG_CR);
   6122	val16 |= CR_SECURITY_ENABLE;
   6123	rtl8xxxu_write16(priv, REG_CR, val16);
   6124
   6125	val8 = SEC_CFG_TX_SEC_ENABLE | SEC_CFG_TXBC_USE_DEFKEY |
   6126		SEC_CFG_RX_SEC_ENABLE | SEC_CFG_RXBC_USE_DEFKEY;
   6127	val8 |= SEC_CFG_TX_USE_DEFKEY | SEC_CFG_RX_USE_DEFKEY;
   6128	rtl8xxxu_write8(priv, REG_SECURITY_CFG, val8);
   6129
   6130	switch (cmd) {
   6131	case SET_KEY:
   6132		key->hw_key_idx = key->keyidx;
   6133		key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
   6134		rtl8xxxu_cam_write(priv, key, mac_addr);
   6135		retval = 0;
   6136		break;
   6137	case DISABLE_KEY:
   6138		rtl8xxxu_write32(priv, REG_CAM_WRITE, 0x00000000);
   6139		val32 = CAM_CMD_POLLING | CAM_CMD_WRITE |
   6140			key->keyidx << CAM_CMD_KEY_SHIFT;
   6141		rtl8xxxu_write32(priv, REG_CAM_CMD, val32);
   6142		retval = 0;
   6143		break;
   6144	default:
   6145		dev_warn(dev, "%s: Unsupported command %02x\n", __func__, cmd);
   6146	}
   6147
   6148	return retval;
   6149}
   6150
   6151static int
   6152rtl8xxxu_ampdu_action(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
   6153		      struct ieee80211_ampdu_params *params)
   6154{
   6155	struct rtl8xxxu_priv *priv = hw->priv;
   6156	struct device *dev = &priv->udev->dev;
   6157	u8 ampdu_factor, ampdu_density;
   6158	struct ieee80211_sta *sta = params->sta;
   6159	u16 tid = params->tid;
   6160	enum ieee80211_ampdu_mlme_action action = params->action;
   6161
   6162	switch (action) {
   6163	case IEEE80211_AMPDU_TX_START:
   6164		dev_dbg(dev, "%s: IEEE80211_AMPDU_TX_START\n", __func__);
   6165		ampdu_factor = sta->deflink.ht_cap.ampdu_factor;
   6166		ampdu_density = sta->deflink.ht_cap.ampdu_density;
   6167		rtl8xxxu_set_ampdu_factor(priv, ampdu_factor);
   6168		rtl8xxxu_set_ampdu_min_space(priv, ampdu_density);
   6169		dev_dbg(dev,
   6170			"Changed HT: ampdu_factor %02x, ampdu_density %02x\n",
   6171			ampdu_factor, ampdu_density);
   6172		return IEEE80211_AMPDU_TX_START_IMMEDIATE;
   6173	case IEEE80211_AMPDU_TX_STOP_CONT:
   6174	case IEEE80211_AMPDU_TX_STOP_FLUSH:
   6175	case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
   6176		dev_dbg(dev, "%s: IEEE80211_AMPDU_TX_STOP\n", __func__);
   6177		rtl8xxxu_set_ampdu_factor(priv, 0);
   6178		rtl8xxxu_set_ampdu_min_space(priv, 0);
   6179		clear_bit(tid, priv->tx_aggr_started);
   6180		clear_bit(tid, priv->tid_tx_operational);
   6181		ieee80211_stop_tx_ba_cb_irqsafe(vif, sta->addr, tid);
   6182		break;
   6183	case IEEE80211_AMPDU_TX_OPERATIONAL:
   6184		dev_dbg(dev, "%s: IEEE80211_AMPDU_TX_OPERATIONAL\n", __func__);
   6185		set_bit(tid, priv->tid_tx_operational);
   6186		break;
   6187	case IEEE80211_AMPDU_RX_START:
   6188		dev_dbg(dev, "%s: IEEE80211_AMPDU_RX_START\n", __func__);
   6189		break;
   6190	case IEEE80211_AMPDU_RX_STOP:
   6191		dev_dbg(dev, "%s: IEEE80211_AMPDU_RX_STOP\n", __func__);
   6192		break;
   6193	default:
   6194		break;
   6195	}
   6196	return 0;
   6197}
   6198
   6199static void
   6200rtl8xxxu_sta_statistics(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
   6201			struct ieee80211_sta *sta, struct station_info *sinfo)
   6202{
   6203	struct rtl8xxxu_priv *priv = hw->priv;
   6204
   6205	sinfo->txrate = priv->ra_report.txrate;
   6206	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_BITRATE);
   6207}
   6208
   6209static u8 rtl8xxxu_signal_to_snr(int signal)
   6210{
   6211	if (signal < RTL8XXXU_NOISE_FLOOR_MIN)
   6212		signal = RTL8XXXU_NOISE_FLOOR_MIN;
   6213	else if (signal > 0)
   6214		signal = 0;
   6215	return (u8)(signal - RTL8XXXU_NOISE_FLOOR_MIN);
   6216}
   6217
   6218static void rtl8xxxu_refresh_rate_mask(struct rtl8xxxu_priv *priv,
   6219				       int signal, struct ieee80211_sta *sta)
   6220{
   6221	struct ieee80211_hw *hw = priv->hw;
   6222	u16 wireless_mode;
   6223	u8 rssi_level, ratr_idx;
   6224	u8 txbw_40mhz;
   6225	u8 snr, snr_thresh_high, snr_thresh_low;
   6226	u8 go_up_gap = 5;
   6227
   6228	rssi_level = priv->rssi_level;
   6229	snr = rtl8xxxu_signal_to_snr(signal);
   6230	snr_thresh_high = RTL8XXXU_SNR_THRESH_HIGH;
   6231	snr_thresh_low = RTL8XXXU_SNR_THRESH_LOW;
   6232	txbw_40mhz = (hw->conf.chandef.width == NL80211_CHAN_WIDTH_40) ? 1 : 0;
   6233
   6234	switch (rssi_level) {
   6235	case RTL8XXXU_RATR_STA_MID:
   6236		snr_thresh_high += go_up_gap;
   6237		break;
   6238	case RTL8XXXU_RATR_STA_LOW:
   6239		snr_thresh_high += go_up_gap;
   6240		snr_thresh_low += go_up_gap;
   6241		break;
   6242	default:
   6243		break;
   6244	}
   6245
   6246	if (snr > snr_thresh_high)
   6247		rssi_level = RTL8XXXU_RATR_STA_HIGH;
   6248	else if (snr > snr_thresh_low)
   6249		rssi_level = RTL8XXXU_RATR_STA_MID;
   6250	else
   6251		rssi_level = RTL8XXXU_RATR_STA_LOW;
   6252
   6253	if (rssi_level != priv->rssi_level) {
   6254		int sgi = 0;
   6255		u32 rate_bitmap = 0;
   6256
   6257		rcu_read_lock();
   6258		rate_bitmap = (sta->deflink.supp_rates[0] & 0xfff) |
   6259				(sta->deflink.ht_cap.mcs.rx_mask[0] << 12) |
   6260				(sta->deflink.ht_cap.mcs.rx_mask[1] << 20);
   6261		if (sta->deflink.ht_cap.cap &
   6262		    (IEEE80211_HT_CAP_SGI_40 | IEEE80211_HT_CAP_SGI_20))
   6263			sgi = 1;
   6264		rcu_read_unlock();
   6265
   6266		wireless_mode = rtl8xxxu_wireless_mode(hw, sta);
   6267		switch (wireless_mode) {
   6268		case WIRELESS_MODE_B:
   6269			ratr_idx = RATEID_IDX_B;
   6270			if (rate_bitmap & 0x0000000c)
   6271				rate_bitmap &= 0x0000000d;
   6272			else
   6273				rate_bitmap &= 0x0000000f;
   6274			break;
   6275		case WIRELESS_MODE_A:
   6276		case WIRELESS_MODE_G:
   6277			ratr_idx = RATEID_IDX_G;
   6278			if (rssi_level == RTL8XXXU_RATR_STA_HIGH)
   6279				rate_bitmap &= 0x00000f00;
   6280			else
   6281				rate_bitmap &= 0x00000ff0;
   6282			break;
   6283		case (WIRELESS_MODE_B | WIRELESS_MODE_G):
   6284			ratr_idx = RATEID_IDX_BG;
   6285			if (rssi_level == RTL8XXXU_RATR_STA_HIGH)
   6286				rate_bitmap &= 0x00000f00;
   6287			else if (rssi_level == RTL8XXXU_RATR_STA_MID)
   6288				rate_bitmap &= 0x00000ff0;
   6289			else
   6290				rate_bitmap &= 0x00000ff5;
   6291			break;
   6292		case WIRELESS_MODE_N_24G:
   6293		case WIRELESS_MODE_N_5G:
   6294		case (WIRELESS_MODE_G | WIRELESS_MODE_N_24G):
   6295		case (WIRELESS_MODE_A | WIRELESS_MODE_N_5G):
   6296			if (priv->tx_paths == 2 && priv->rx_paths == 2)
   6297				ratr_idx = RATEID_IDX_GN_N2SS;
   6298			else
   6299				ratr_idx = RATEID_IDX_GN_N1SS;
   6300			break;
   6301		case (WIRELESS_MODE_B | WIRELESS_MODE_G | WIRELESS_MODE_N_24G):
   6302		case (WIRELESS_MODE_B | WIRELESS_MODE_N_24G):
   6303			if (txbw_40mhz) {
   6304				if (priv->tx_paths == 2 && priv->rx_paths == 2)
   6305					ratr_idx = RATEID_IDX_BGN_40M_2SS;
   6306				else
   6307					ratr_idx = RATEID_IDX_BGN_40M_1SS;
   6308			} else {
   6309				if (priv->tx_paths == 2 && priv->rx_paths == 2)
   6310					ratr_idx = RATEID_IDX_BGN_20M_2SS_BN;
   6311				else
   6312					ratr_idx = RATEID_IDX_BGN_20M_1SS_BN;
   6313			}
   6314
   6315			if (priv->tx_paths == 2 && priv->rx_paths == 2) {
   6316				if (rssi_level == RTL8XXXU_RATR_STA_HIGH) {
   6317					rate_bitmap &= 0x0f8f0000;
   6318				} else if (rssi_level == RTL8XXXU_RATR_STA_MID) {
   6319					rate_bitmap &= 0x0f8ff000;
   6320				} else {
   6321					if (txbw_40mhz)
   6322						rate_bitmap &= 0x0f8ff015;
   6323					else
   6324						rate_bitmap &= 0x0f8ff005;
   6325				}
   6326			} else {
   6327				if (rssi_level == RTL8XXXU_RATR_STA_HIGH) {
   6328					rate_bitmap &= 0x000f0000;
   6329				} else if (rssi_level == RTL8XXXU_RATR_STA_MID) {
   6330					rate_bitmap &= 0x000ff000;
   6331				} else {
   6332					if (txbw_40mhz)
   6333						rate_bitmap &= 0x000ff015;
   6334					else
   6335						rate_bitmap &= 0x000ff005;
   6336				}
   6337			}
   6338			break;
   6339		default:
   6340			ratr_idx = RATEID_IDX_BGN_40M_2SS;
   6341			rate_bitmap &= 0x0fffffff;
   6342			break;
   6343		}
   6344
   6345		priv->rssi_level = rssi_level;
   6346		priv->fops->update_rate_mask(priv, rate_bitmap, ratr_idx, sgi);
   6347	}
   6348}
   6349
   6350static void rtl8xxxu_watchdog_callback(struct work_struct *work)
   6351{
   6352	struct ieee80211_vif *vif;
   6353	struct rtl8xxxu_priv *priv;
   6354
   6355	priv = container_of(work, struct rtl8xxxu_priv, ra_watchdog.work);
   6356	vif = priv->vif;
   6357
   6358	if (vif && vif->type == NL80211_IFTYPE_STATION) {
   6359		int signal;
   6360		struct ieee80211_sta *sta;
   6361
   6362		rcu_read_lock();
   6363		sta = ieee80211_find_sta(vif, vif->bss_conf.bssid);
   6364		if (!sta) {
   6365			struct device *dev = &priv->udev->dev;
   6366
   6367			dev_dbg(dev, "%s: no sta found\n", __func__);
   6368			rcu_read_unlock();
   6369			goto out;
   6370		}
   6371		rcu_read_unlock();
   6372
   6373		signal = ieee80211_ave_rssi(vif);
   6374		rtl8xxxu_refresh_rate_mask(priv, signal, sta);
   6375	}
   6376
   6377out:
   6378	schedule_delayed_work(&priv->ra_watchdog, 2 * HZ);
   6379}
   6380
   6381static int rtl8xxxu_start(struct ieee80211_hw *hw)
   6382{
   6383	struct rtl8xxxu_priv *priv = hw->priv;
   6384	struct rtl8xxxu_rx_urb *rx_urb;
   6385	struct rtl8xxxu_tx_urb *tx_urb;
   6386	struct sk_buff *skb;
   6387	unsigned long flags;
   6388	int ret, i;
   6389
   6390	ret = 0;
   6391
   6392	init_usb_anchor(&priv->rx_anchor);
   6393	init_usb_anchor(&priv->tx_anchor);
   6394	init_usb_anchor(&priv->int_anchor);
   6395
   6396	priv->fops->enable_rf(priv);
   6397	if (priv->usb_interrupts) {
   6398		ret = rtl8xxxu_submit_int_urb(hw);
   6399		if (ret)
   6400			goto exit;
   6401	}
   6402
   6403	for (i = 0; i < RTL8XXXU_TX_URBS; i++) {
   6404		tx_urb = kmalloc(sizeof(struct rtl8xxxu_tx_urb), GFP_KERNEL);
   6405		if (!tx_urb) {
   6406			if (!i)
   6407				ret = -ENOMEM;
   6408
   6409			goto error_out;
   6410		}
   6411		usb_init_urb(&tx_urb->urb);
   6412		INIT_LIST_HEAD(&tx_urb->list);
   6413		tx_urb->hw = hw;
   6414		list_add(&tx_urb->list, &priv->tx_urb_free_list);
   6415		priv->tx_urb_free_count++;
   6416	}
   6417
   6418	priv->tx_stopped = false;
   6419
   6420	spin_lock_irqsave(&priv->rx_urb_lock, flags);
   6421	priv->shutdown = false;
   6422	spin_unlock_irqrestore(&priv->rx_urb_lock, flags);
   6423
   6424	for (i = 0; i < RTL8XXXU_RX_URBS; i++) {
   6425		rx_urb = kmalloc(sizeof(struct rtl8xxxu_rx_urb), GFP_KERNEL);
   6426		if (!rx_urb) {
   6427			if (!i)
   6428				ret = -ENOMEM;
   6429
   6430			goto error_out;
   6431		}
   6432		usb_init_urb(&rx_urb->urb);
   6433		INIT_LIST_HEAD(&rx_urb->list);
   6434		rx_urb->hw = hw;
   6435
   6436		ret = rtl8xxxu_submit_rx_urb(priv, rx_urb);
   6437		if (ret) {
   6438			if (ret != -ENOMEM) {
   6439				skb = (struct sk_buff *)rx_urb->urb.context;
   6440				dev_kfree_skb(skb);
   6441			}
   6442			rtl8xxxu_queue_rx_urb(priv, rx_urb);
   6443		}
   6444	}
   6445
   6446	schedule_delayed_work(&priv->ra_watchdog, 2 * HZ);
   6447exit:
   6448	/*
   6449	 * Accept all data and mgmt frames
   6450	 */
   6451	rtl8xxxu_write16(priv, REG_RXFLTMAP2, 0xffff);
   6452	rtl8xxxu_write16(priv, REG_RXFLTMAP0, 0xffff);
   6453
   6454	rtl8xxxu_write32(priv, REG_OFDM0_XA_AGC_CORE1, 0x6954341e);
   6455
   6456	return ret;
   6457
   6458error_out:
   6459	rtl8xxxu_free_tx_resources(priv);
   6460	/*
   6461	 * Disable all data and mgmt frames
   6462	 */
   6463	rtl8xxxu_write16(priv, REG_RXFLTMAP2, 0x0000);
   6464	rtl8xxxu_write16(priv, REG_RXFLTMAP0, 0x0000);
   6465
   6466	return ret;
   6467}
   6468
   6469static void rtl8xxxu_stop(struct ieee80211_hw *hw)
   6470{
   6471	struct rtl8xxxu_priv *priv = hw->priv;
   6472	unsigned long flags;
   6473
   6474	rtl8xxxu_write8(priv, REG_TXPAUSE, 0xff);
   6475
   6476	rtl8xxxu_write16(priv, REG_RXFLTMAP0, 0x0000);
   6477	rtl8xxxu_write16(priv, REG_RXFLTMAP2, 0x0000);
   6478
   6479	spin_lock_irqsave(&priv->rx_urb_lock, flags);
   6480	priv->shutdown = true;
   6481	spin_unlock_irqrestore(&priv->rx_urb_lock, flags);
   6482
   6483	usb_kill_anchored_urbs(&priv->rx_anchor);
   6484	usb_kill_anchored_urbs(&priv->tx_anchor);
   6485	if (priv->usb_interrupts)
   6486		usb_kill_anchored_urbs(&priv->int_anchor);
   6487
   6488	rtl8xxxu_write8(priv, REG_TXPAUSE, 0xff);
   6489
   6490	priv->fops->disable_rf(priv);
   6491
   6492	/*
   6493	 * Disable interrupts
   6494	 */
   6495	if (priv->usb_interrupts)
   6496		rtl8xxxu_write32(priv, REG_USB_HIMR, 0);
   6497
   6498	cancel_delayed_work_sync(&priv->ra_watchdog);
   6499
   6500	rtl8xxxu_free_rx_resources(priv);
   6501	rtl8xxxu_free_tx_resources(priv);
   6502}
   6503
   6504static const struct ieee80211_ops rtl8xxxu_ops = {
   6505	.tx = rtl8xxxu_tx,
   6506	.add_interface = rtl8xxxu_add_interface,
   6507	.remove_interface = rtl8xxxu_remove_interface,
   6508	.config = rtl8xxxu_config,
   6509	.conf_tx = rtl8xxxu_conf_tx,
   6510	.bss_info_changed = rtl8xxxu_bss_info_changed,
   6511	.configure_filter = rtl8xxxu_configure_filter,
   6512	.set_rts_threshold = rtl8xxxu_set_rts_threshold,
   6513	.start = rtl8xxxu_start,
   6514	.stop = rtl8xxxu_stop,
   6515	.sw_scan_start = rtl8xxxu_sw_scan_start,
   6516	.sw_scan_complete = rtl8xxxu_sw_scan_complete,
   6517	.set_key = rtl8xxxu_set_key,
   6518	.ampdu_action = rtl8xxxu_ampdu_action,
   6519	.sta_statistics = rtl8xxxu_sta_statistics,
   6520	.get_antenna = rtl8xxxu_get_antenna,
   6521};
   6522
   6523static int rtl8xxxu_parse_usb(struct rtl8xxxu_priv *priv,
   6524			      struct usb_interface *interface)
   6525{
   6526	struct usb_interface_descriptor *interface_desc;
   6527	struct usb_host_interface *host_interface;
   6528	struct usb_endpoint_descriptor *endpoint;
   6529	struct device *dev = &priv->udev->dev;
   6530	int i, j = 0, endpoints;
   6531	u8 dir, xtype, num;
   6532	int ret = 0;
   6533
   6534	host_interface = interface->cur_altsetting;
   6535	interface_desc = &host_interface->desc;
   6536	endpoints = interface_desc->bNumEndpoints;
   6537
   6538	for (i = 0; i < endpoints; i++) {
   6539		endpoint = &host_interface->endpoint[i].desc;
   6540
   6541		dir = endpoint->bEndpointAddress & USB_ENDPOINT_DIR_MASK;
   6542		num = usb_endpoint_num(endpoint);
   6543		xtype = usb_endpoint_type(endpoint);
   6544		if (rtl8xxxu_debug & RTL8XXXU_DEBUG_USB)
   6545			dev_dbg(dev,
   6546				"%s: endpoint: dir %02x, # %02x, type %02x\n",
   6547				__func__, dir, num, xtype);
   6548		if (usb_endpoint_dir_in(endpoint) &&
   6549		    usb_endpoint_xfer_bulk(endpoint)) {
   6550			if (rtl8xxxu_debug & RTL8XXXU_DEBUG_USB)
   6551				dev_dbg(dev, "%s: in endpoint num %i\n",
   6552					__func__, num);
   6553
   6554			if (priv->pipe_in) {
   6555				dev_warn(dev,
   6556					 "%s: Too many IN pipes\n", __func__);
   6557				ret = -EINVAL;
   6558				goto exit;
   6559			}
   6560
   6561			priv->pipe_in =	usb_rcvbulkpipe(priv->udev, num);
   6562		}
   6563
   6564		if (usb_endpoint_dir_in(endpoint) &&
   6565		    usb_endpoint_xfer_int(endpoint)) {
   6566			if (rtl8xxxu_debug & RTL8XXXU_DEBUG_USB)
   6567				dev_dbg(dev, "%s: interrupt endpoint num %i\n",
   6568					__func__, num);
   6569
   6570			if (priv->pipe_interrupt) {
   6571				dev_warn(dev, "%s: Too many INTERRUPT pipes\n",
   6572					 __func__);
   6573				ret = -EINVAL;
   6574				goto exit;
   6575			}
   6576
   6577			priv->pipe_interrupt = usb_rcvintpipe(priv->udev, num);
   6578		}
   6579
   6580		if (usb_endpoint_dir_out(endpoint) &&
   6581		    usb_endpoint_xfer_bulk(endpoint)) {
   6582			if (rtl8xxxu_debug & RTL8XXXU_DEBUG_USB)
   6583				dev_dbg(dev, "%s: out endpoint num %i\n",
   6584					__func__, num);
   6585			if (j >= RTL8XXXU_OUT_ENDPOINTS) {
   6586				dev_warn(dev,
   6587					 "%s: Too many OUT pipes\n", __func__);
   6588				ret = -EINVAL;
   6589				goto exit;
   6590			}
   6591			priv->out_ep[j++] = num;
   6592		}
   6593	}
   6594exit:
   6595	priv->nr_out_eps = j;
   6596	return ret;
   6597}
   6598
   6599static int rtl8xxxu_probe(struct usb_interface *interface,
   6600			  const struct usb_device_id *id)
   6601{
   6602	struct rtl8xxxu_priv *priv;
   6603	struct ieee80211_hw *hw;
   6604	struct usb_device *udev;
   6605	struct ieee80211_supported_band *sband;
   6606	int ret;
   6607	int untested = 1;
   6608
   6609	udev = usb_get_dev(interface_to_usbdev(interface));
   6610
   6611	switch (id->idVendor) {
   6612	case USB_VENDOR_ID_REALTEK:
   6613		switch(id->idProduct) {
   6614		case 0x1724:
   6615		case 0x8176:
   6616		case 0x8178:
   6617		case 0x817f:
   6618		case 0x818b:
   6619			untested = 0;
   6620			break;
   6621		}
   6622		break;
   6623	case 0x7392:
   6624		if (id->idProduct == 0x7811 || id->idProduct == 0xa611)
   6625			untested = 0;
   6626		break;
   6627	case 0x050d:
   6628		if (id->idProduct == 0x1004)
   6629			untested = 0;
   6630		break;
   6631	case 0x20f4:
   6632		if (id->idProduct == 0x648b)
   6633			untested = 0;
   6634		break;
   6635	case 0x2001:
   6636		if (id->idProduct == 0x3308)
   6637			untested = 0;
   6638		break;
   6639	case 0x2357:
   6640		if (id->idProduct == 0x0109)
   6641			untested = 0;
   6642		break;
   6643	default:
   6644		break;
   6645	}
   6646
   6647	if (untested) {
   6648		rtl8xxxu_debug |= RTL8XXXU_DEBUG_EFUSE;
   6649		dev_info(&udev->dev,
   6650			 "This Realtek USB WiFi dongle (0x%04x:0x%04x) is untested!\n",
   6651			 id->idVendor, id->idProduct);
   6652		dev_info(&udev->dev,
   6653			 "Please report results to Jes.Sorensen@gmail.com\n");
   6654	}
   6655
   6656	hw = ieee80211_alloc_hw(sizeof(struct rtl8xxxu_priv), &rtl8xxxu_ops);
   6657	if (!hw) {
   6658		ret = -ENOMEM;
   6659		priv = NULL;
   6660		goto exit;
   6661	}
   6662
   6663	priv = hw->priv;
   6664	priv->hw = hw;
   6665	priv->udev = udev;
   6666	priv->fops = (struct rtl8xxxu_fileops *)id->driver_info;
   6667	mutex_init(&priv->usb_buf_mutex);
   6668	mutex_init(&priv->h2c_mutex);
   6669	INIT_LIST_HEAD(&priv->tx_urb_free_list);
   6670	spin_lock_init(&priv->tx_urb_lock);
   6671	INIT_LIST_HEAD(&priv->rx_urb_pending_list);
   6672	spin_lock_init(&priv->rx_urb_lock);
   6673	INIT_WORK(&priv->rx_urb_wq, rtl8xxxu_rx_urb_work);
   6674	INIT_DELAYED_WORK(&priv->ra_watchdog, rtl8xxxu_watchdog_callback);
   6675	INIT_WORK(&priv->c2hcmd_work, rtl8xxxu_c2hcmd_callback);
   6676	skb_queue_head_init(&priv->c2hcmd_queue);
   6677
   6678	usb_set_intfdata(interface, hw);
   6679
   6680	ret = rtl8xxxu_parse_usb(priv, interface);
   6681	if (ret)
   6682		goto exit;
   6683
   6684	ret = rtl8xxxu_identify_chip(priv);
   6685	if (ret) {
   6686		dev_err(&udev->dev, "Fatal - failed to identify chip\n");
   6687		goto exit;
   6688	}
   6689
   6690	ret = rtl8xxxu_read_efuse(priv);
   6691	if (ret) {
   6692		dev_err(&udev->dev, "Fatal - failed to read EFuse\n");
   6693		goto exit;
   6694	}
   6695
   6696	ret = priv->fops->parse_efuse(priv);
   6697	if (ret) {
   6698		dev_err(&udev->dev, "Fatal - failed to parse EFuse\n");
   6699		goto exit;
   6700	}
   6701
   6702	rtl8xxxu_print_chipinfo(priv);
   6703
   6704	ret = priv->fops->load_firmware(priv);
   6705	if (ret) {
   6706		dev_err(&udev->dev, "Fatal - failed to load firmware\n");
   6707		goto exit;
   6708	}
   6709
   6710	ret = rtl8xxxu_init_device(hw);
   6711	if (ret)
   6712		goto exit;
   6713
   6714	hw->wiphy->max_scan_ssids = 1;
   6715	hw->wiphy->max_scan_ie_len = IEEE80211_MAX_DATA_LEN;
   6716	hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION);
   6717	hw->queues = 4;
   6718
   6719	sband = &rtl8xxxu_supported_band;
   6720	sband->ht_cap.ht_supported = true;
   6721	sband->ht_cap.ampdu_factor = IEEE80211_HT_MAX_AMPDU_64K;
   6722	sband->ht_cap.ampdu_density = IEEE80211_HT_MPDU_DENSITY_16;
   6723	sband->ht_cap.cap = IEEE80211_HT_CAP_SGI_20 | IEEE80211_HT_CAP_SGI_40;
   6724	memset(&sband->ht_cap.mcs, 0, sizeof(sband->ht_cap.mcs));
   6725	sband->ht_cap.mcs.rx_mask[0] = 0xff;
   6726	sband->ht_cap.mcs.rx_mask[4] = 0x01;
   6727	if (priv->rf_paths > 1) {
   6728		sband->ht_cap.mcs.rx_mask[1] = 0xff;
   6729		sband->ht_cap.cap |= IEEE80211_HT_CAP_SGI_40;
   6730	}
   6731	sband->ht_cap.mcs.tx_params = IEEE80211_HT_MCS_TX_DEFINED;
   6732	/*
   6733	 * Some APs will negotiate HT20_40 in a noisy environment leading
   6734	 * to miserable performance. Rather than defaulting to this, only
   6735	 * enable it if explicitly requested at module load time.
   6736	 */
   6737	if (rtl8xxxu_ht40_2g) {
   6738		dev_info(&udev->dev, "Enabling HT_20_40 on the 2.4GHz band\n");
   6739		sband->ht_cap.cap |= IEEE80211_HT_CAP_SUP_WIDTH_20_40;
   6740	}
   6741	hw->wiphy->bands[NL80211_BAND_2GHZ] = sband;
   6742
   6743	hw->wiphy->rts_threshold = 2347;
   6744
   6745	SET_IEEE80211_DEV(priv->hw, &interface->dev);
   6746	SET_IEEE80211_PERM_ADDR(hw, priv->mac_addr);
   6747
   6748	hw->extra_tx_headroom = priv->fops->tx_desc_size;
   6749	ieee80211_hw_set(hw, SIGNAL_DBM);
   6750	/*
   6751	 * The firmware handles rate control
   6752	 */
   6753	ieee80211_hw_set(hw, HAS_RATE_CONTROL);
   6754	ieee80211_hw_set(hw, AMPDU_AGGREGATION);
   6755
   6756	wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_CQM_RSSI_LIST);
   6757
   6758	ret = ieee80211_register_hw(priv->hw);
   6759	if (ret) {
   6760		dev_err(&udev->dev, "%s: Failed to register: %i\n",
   6761			__func__, ret);
   6762		goto exit;
   6763	}
   6764
   6765	return 0;
   6766
   6767exit:
   6768	usb_set_intfdata(interface, NULL);
   6769
   6770	if (priv) {
   6771		kfree(priv->fw_data);
   6772		mutex_destroy(&priv->usb_buf_mutex);
   6773		mutex_destroy(&priv->h2c_mutex);
   6774	}
   6775	usb_put_dev(udev);
   6776
   6777	ieee80211_free_hw(hw);
   6778
   6779	return ret;
   6780}
   6781
   6782static void rtl8xxxu_disconnect(struct usb_interface *interface)
   6783{
   6784	struct rtl8xxxu_priv *priv;
   6785	struct ieee80211_hw *hw;
   6786
   6787	hw = usb_get_intfdata(interface);
   6788	priv = hw->priv;
   6789
   6790	ieee80211_unregister_hw(hw);
   6791
   6792	priv->fops->power_off(priv);
   6793
   6794	usb_set_intfdata(interface, NULL);
   6795
   6796	dev_info(&priv->udev->dev, "disconnecting\n");
   6797
   6798	kfree(priv->fw_data);
   6799	mutex_destroy(&priv->usb_buf_mutex);
   6800	mutex_destroy(&priv->h2c_mutex);
   6801
   6802	if (priv->udev->state != USB_STATE_NOTATTACHED) {
   6803		dev_info(&priv->udev->dev,
   6804			 "Device still attached, trying to reset\n");
   6805		usb_reset_device(priv->udev);
   6806	}
   6807	usb_put_dev(priv->udev);
   6808	ieee80211_free_hw(hw);
   6809}
   6810
   6811static const struct usb_device_id dev_table[] = {
   6812{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x8724, 0xff, 0xff, 0xff),
   6813	.driver_info = (unsigned long)&rtl8723au_fops},
   6814{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x1724, 0xff, 0xff, 0xff),
   6815	.driver_info = (unsigned long)&rtl8723au_fops},
   6816{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x0724, 0xff, 0xff, 0xff),
   6817	.driver_info = (unsigned long)&rtl8723au_fops},
   6818{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x818b, 0xff, 0xff, 0xff),
   6819	.driver_info = (unsigned long)&rtl8192eu_fops},
   6820/* TP-Link TL-WN822N v4 */
   6821{USB_DEVICE_AND_INTERFACE_INFO(0x2357, 0x0108, 0xff, 0xff, 0xff),
   6822	.driver_info = (unsigned long)&rtl8192eu_fops},
   6823/* D-Link DWA-131 rev E1, tested by David PatiƱo */
   6824{USB_DEVICE_AND_INTERFACE_INFO(0x2001, 0x3319, 0xff, 0xff, 0xff),
   6825	.driver_info = (unsigned long)&rtl8192eu_fops},
   6826/* Tested by Myckel Habets */
   6827{USB_DEVICE_AND_INTERFACE_INFO(0x2357, 0x0109, 0xff, 0xff, 0xff),
   6828	.driver_info = (unsigned long)&rtl8192eu_fops},
   6829{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0xb720, 0xff, 0xff, 0xff),
   6830	.driver_info = (unsigned long)&rtl8723bu_fops},
   6831{USB_DEVICE_AND_INTERFACE_INFO(0x7392, 0xa611, 0xff, 0xff, 0xff),
   6832	.driver_info = (unsigned long)&rtl8723bu_fops},
   6833#ifdef CONFIG_RTL8XXXU_UNTESTED
   6834/* Still supported by rtlwifi */
   6835{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x8176, 0xff, 0xff, 0xff),
   6836	.driver_info = (unsigned long)&rtl8192cu_fops},
   6837{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x8178, 0xff, 0xff, 0xff),
   6838	.driver_info = (unsigned long)&rtl8192cu_fops},
   6839{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x817f, 0xff, 0xff, 0xff),
   6840	.driver_info = (unsigned long)&rtl8192cu_fops},
   6841/* Tested by Larry Finger */
   6842{USB_DEVICE_AND_INTERFACE_INFO(0x7392, 0x7811, 0xff, 0xff, 0xff),
   6843	.driver_info = (unsigned long)&rtl8192cu_fops},
   6844/* Tested by Andrea Merello */
   6845{USB_DEVICE_AND_INTERFACE_INFO(0x050d, 0x1004, 0xff, 0xff, 0xff),
   6846	.driver_info = (unsigned long)&rtl8192cu_fops},
   6847/* Tested by Jocelyn Mayer */
   6848{USB_DEVICE_AND_INTERFACE_INFO(0x20f4, 0x648b, 0xff, 0xff, 0xff),
   6849	.driver_info = (unsigned long)&rtl8192cu_fops},
   6850/* Tested by Stefano Bravi */
   6851{USB_DEVICE_AND_INTERFACE_INFO(0x2001, 0x3308, 0xff, 0xff, 0xff),
   6852	.driver_info = (unsigned long)&rtl8192cu_fops},
   6853/* Currently untested 8188 series devices */
   6854{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x018a, 0xff, 0xff, 0xff),
   6855	.driver_info = (unsigned long)&rtl8192cu_fops},
   6856{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x8191, 0xff, 0xff, 0xff),
   6857	.driver_info = (unsigned long)&rtl8192cu_fops},
   6858{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x8170, 0xff, 0xff, 0xff),
   6859	.driver_info = (unsigned long)&rtl8192cu_fops},
   6860{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x8177, 0xff, 0xff, 0xff),
   6861	.driver_info = (unsigned long)&rtl8192cu_fops},
   6862{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x817a, 0xff, 0xff, 0xff),
   6863	.driver_info = (unsigned long)&rtl8192cu_fops},
   6864{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x817b, 0xff, 0xff, 0xff),
   6865	.driver_info = (unsigned long)&rtl8192cu_fops},
   6866{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x817d, 0xff, 0xff, 0xff),
   6867	.driver_info = (unsigned long)&rtl8192cu_fops},
   6868{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x817e, 0xff, 0xff, 0xff),
   6869	.driver_info = (unsigned long)&rtl8192cu_fops},
   6870{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x818a, 0xff, 0xff, 0xff),
   6871	.driver_info = (unsigned long)&rtl8192cu_fops},
   6872{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x317f, 0xff, 0xff, 0xff),
   6873	.driver_info = (unsigned long)&rtl8192cu_fops},
   6874{USB_DEVICE_AND_INTERFACE_INFO(0x1058, 0x0631, 0xff, 0xff, 0xff),
   6875	.driver_info = (unsigned long)&rtl8192cu_fops},
   6876{USB_DEVICE_AND_INTERFACE_INFO(0x04bb, 0x094c, 0xff, 0xff, 0xff),
   6877	.driver_info = (unsigned long)&rtl8192cu_fops},
   6878{USB_DEVICE_AND_INTERFACE_INFO(0x050d, 0x1102, 0xff, 0xff, 0xff),
   6879	.driver_info = (unsigned long)&rtl8192cu_fops},
   6880{USB_DEVICE_AND_INTERFACE_INFO(0x06f8, 0xe033, 0xff, 0xff, 0xff),
   6881	.driver_info = (unsigned long)&rtl8192cu_fops},
   6882{USB_DEVICE_AND_INTERFACE_INFO(0x07b8, 0x8189, 0xff, 0xff, 0xff),
   6883	.driver_info = (unsigned long)&rtl8192cu_fops},
   6884{USB_DEVICE_AND_INTERFACE_INFO(0x0846, 0x9041, 0xff, 0xff, 0xff),
   6885	.driver_info = (unsigned long)&rtl8192cu_fops},
   6886{USB_DEVICE_AND_INTERFACE_INFO(0x0b05, 0x17ba, 0xff, 0xff, 0xff),
   6887	.driver_info = (unsigned long)&rtl8192cu_fops},
   6888{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x1e1e, 0xff, 0xff, 0xff),
   6889	.driver_info = (unsigned long)&rtl8192cu_fops},
   6890{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x5088, 0xff, 0xff, 0xff),
   6891	.driver_info = (unsigned long)&rtl8192cu_fops},
   6892{USB_DEVICE_AND_INTERFACE_INFO(0x0df6, 0x0052, 0xff, 0xff, 0xff),
   6893	.driver_info = (unsigned long)&rtl8192cu_fops},
   6894{USB_DEVICE_AND_INTERFACE_INFO(0x0df6, 0x005c, 0xff, 0xff, 0xff),
   6895	.driver_info = (unsigned long)&rtl8192cu_fops},
   6896{USB_DEVICE_AND_INTERFACE_INFO(0x0eb0, 0x9071, 0xff, 0xff, 0xff),
   6897	.driver_info = (unsigned long)&rtl8192cu_fops},
   6898{USB_DEVICE_AND_INTERFACE_INFO(0x103c, 0x1629, 0xff, 0xff, 0xff),
   6899	.driver_info = (unsigned long)&rtl8192cu_fops},
   6900{USB_DEVICE_AND_INTERFACE_INFO(0x13d3, 0x3357, 0xff, 0xff, 0xff),
   6901	.driver_info = (unsigned long)&rtl8192cu_fops},
   6902{USB_DEVICE_AND_INTERFACE_INFO(0x2001, 0x330b, 0xff, 0xff, 0xff),
   6903	.driver_info = (unsigned long)&rtl8192cu_fops},
   6904{USB_DEVICE_AND_INTERFACE_INFO(0x2019, 0x4902, 0xff, 0xff, 0xff),
   6905	.driver_info = (unsigned long)&rtl8192cu_fops},
   6906{USB_DEVICE_AND_INTERFACE_INFO(0x2019, 0xab2a, 0xff, 0xff, 0xff),
   6907	.driver_info = (unsigned long)&rtl8192cu_fops},
   6908{USB_DEVICE_AND_INTERFACE_INFO(0x2019, 0xab2e, 0xff, 0xff, 0xff),
   6909	.driver_info = (unsigned long)&rtl8192cu_fops},
   6910{USB_DEVICE_AND_INTERFACE_INFO(0x2019, 0xed17, 0xff, 0xff, 0xff),
   6911	.driver_info = (unsigned long)&rtl8192cu_fops},
   6912{USB_DEVICE_AND_INTERFACE_INFO(0x4855, 0x0090, 0xff, 0xff, 0xff),
   6913	.driver_info = (unsigned long)&rtl8192cu_fops},
   6914{USB_DEVICE_AND_INTERFACE_INFO(0x4856, 0x0091, 0xff, 0xff, 0xff),
   6915	.driver_info = (unsigned long)&rtl8192cu_fops},
   6916{USB_DEVICE_AND_INTERFACE_INFO(0xcdab, 0x8010, 0xff, 0xff, 0xff),
   6917	.driver_info = (unsigned long)&rtl8192cu_fops},
   6918{USB_DEVICE_AND_INTERFACE_INFO(0x04f2, 0xaff7, 0xff, 0xff, 0xff),
   6919	.driver_info = (unsigned long)&rtl8192cu_fops},
   6920{USB_DEVICE_AND_INTERFACE_INFO(0x04f2, 0xaff9, 0xff, 0xff, 0xff),
   6921	.driver_info = (unsigned long)&rtl8192cu_fops},
   6922{USB_DEVICE_AND_INTERFACE_INFO(0x04f2, 0xaffa, 0xff, 0xff, 0xff),
   6923	.driver_info = (unsigned long)&rtl8192cu_fops},
   6924{USB_DEVICE_AND_INTERFACE_INFO(0x04f2, 0xaff8, 0xff, 0xff, 0xff),
   6925	.driver_info = (unsigned long)&rtl8192cu_fops},
   6926{USB_DEVICE_AND_INTERFACE_INFO(0x04f2, 0xaffb, 0xff, 0xff, 0xff),
   6927	.driver_info = (unsigned long)&rtl8192cu_fops},
   6928{USB_DEVICE_AND_INTERFACE_INFO(0x04f2, 0xaffc, 0xff, 0xff, 0xff),
   6929	.driver_info = (unsigned long)&rtl8192cu_fops},
   6930{USB_DEVICE_AND_INTERFACE_INFO(0x2019, 0x1201, 0xff, 0xff, 0xff),
   6931	.driver_info = (unsigned long)&rtl8192cu_fops},
   6932/* Currently untested 8192 series devices */
   6933{USB_DEVICE_AND_INTERFACE_INFO(0x04bb, 0x0950, 0xff, 0xff, 0xff),
   6934	.driver_info = (unsigned long)&rtl8192cu_fops},
   6935{USB_DEVICE_AND_INTERFACE_INFO(0x050d, 0x2102, 0xff, 0xff, 0xff),
   6936	.driver_info = (unsigned long)&rtl8192cu_fops},
   6937{USB_DEVICE_AND_INTERFACE_INFO(0x050d, 0x2103, 0xff, 0xff, 0xff),
   6938	.driver_info = (unsigned long)&rtl8192cu_fops},
   6939{USB_DEVICE_AND_INTERFACE_INFO(0x0586, 0x341f, 0xff, 0xff, 0xff),
   6940	.driver_info = (unsigned long)&rtl8192cu_fops},
   6941{USB_DEVICE_AND_INTERFACE_INFO(0x06f8, 0xe035, 0xff, 0xff, 0xff),
   6942	.driver_info = (unsigned long)&rtl8192cu_fops},
   6943{USB_DEVICE_AND_INTERFACE_INFO(0x0b05, 0x17ab, 0xff, 0xff, 0xff),
   6944	.driver_info = (unsigned long)&rtl8192cu_fops},
   6945{USB_DEVICE_AND_INTERFACE_INFO(0x0df6, 0x0061, 0xff, 0xff, 0xff),
   6946	.driver_info = (unsigned long)&rtl8192cu_fops},
   6947{USB_DEVICE_AND_INTERFACE_INFO(0x0df6, 0x0070, 0xff, 0xff, 0xff),
   6948	.driver_info = (unsigned long)&rtl8192cu_fops},
   6949{USB_DEVICE_AND_INTERFACE_INFO(0x0789, 0x016d, 0xff, 0xff, 0xff),
   6950	.driver_info = (unsigned long)&rtl8192cu_fops},
   6951{USB_DEVICE_AND_INTERFACE_INFO(0x07aa, 0x0056, 0xff, 0xff, 0xff),
   6952	.driver_info = (unsigned long)&rtl8192cu_fops},
   6953{USB_DEVICE_AND_INTERFACE_INFO(0x07b8, 0x8178, 0xff, 0xff, 0xff),
   6954	.driver_info = (unsigned long)&rtl8192cu_fops},
   6955{USB_DEVICE_AND_INTERFACE_INFO(0x0846, 0x9021, 0xff, 0xff, 0xff),
   6956	.driver_info = (unsigned long)&rtl8192cu_fops},
   6957{USB_DEVICE_AND_INTERFACE_INFO(0x0846, 0xf001, 0xff, 0xff, 0xff),
   6958	.driver_info = (unsigned long)&rtl8192cu_fops},
   6959{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x2e2e, 0xff, 0xff, 0xff),
   6960	.driver_info = (unsigned long)&rtl8192cu_fops},
   6961{USB_DEVICE_AND_INTERFACE_INFO(0x0e66, 0x0019, 0xff, 0xff, 0xff),
   6962	.driver_info = (unsigned long)&rtl8192cu_fops},
   6963{USB_DEVICE_AND_INTERFACE_INFO(0x0e66, 0x0020, 0xff, 0xff, 0xff),
   6964	.driver_info = (unsigned long)&rtl8192cu_fops},
   6965{USB_DEVICE_AND_INTERFACE_INFO(0x2001, 0x3307, 0xff, 0xff, 0xff),
   6966	.driver_info = (unsigned long)&rtl8192cu_fops},
   6967{USB_DEVICE_AND_INTERFACE_INFO(0x2001, 0x3309, 0xff, 0xff, 0xff),
   6968	.driver_info = (unsigned long)&rtl8192cu_fops},
   6969{USB_DEVICE_AND_INTERFACE_INFO(0x2001, 0x330a, 0xff, 0xff, 0xff),
   6970	.driver_info = (unsigned long)&rtl8192cu_fops},
   6971{USB_DEVICE_AND_INTERFACE_INFO(0x2019, 0xab2b, 0xff, 0xff, 0xff),
   6972	.driver_info = (unsigned long)&rtl8192cu_fops},
   6973{USB_DEVICE_AND_INTERFACE_INFO(0x20f4, 0x624d, 0xff, 0xff, 0xff),
   6974	.driver_info = (unsigned long)&rtl8192cu_fops},
   6975{USB_DEVICE_AND_INTERFACE_INFO(0x2357, 0x0100, 0xff, 0xff, 0xff),
   6976	.driver_info = (unsigned long)&rtl8192cu_fops},
   6977{USB_DEVICE_AND_INTERFACE_INFO(0x4855, 0x0091, 0xff, 0xff, 0xff),
   6978	.driver_info = (unsigned long)&rtl8192cu_fops},
   6979{USB_DEVICE_AND_INTERFACE_INFO(0x7392, 0x7822, 0xff, 0xff, 0xff),
   6980	.driver_info = (unsigned long)&rtl8192cu_fops},
   6981/* found in rtl8192eu vendor driver */
   6982{USB_DEVICE_AND_INTERFACE_INFO(0x2357, 0x0107, 0xff, 0xff, 0xff),
   6983	.driver_info = (unsigned long)&rtl8192eu_fops},
   6984{USB_DEVICE_AND_INTERFACE_INFO(0x2019, 0xab33, 0xff, 0xff, 0xff),
   6985	.driver_info = (unsigned long)&rtl8192eu_fops},
   6986{USB_DEVICE_AND_INTERFACE_INFO(USB_VENDOR_ID_REALTEK, 0x818c, 0xff, 0xff, 0xff),
   6987	.driver_info = (unsigned long)&rtl8192eu_fops},
   6988#endif
   6989{ }
   6990};
   6991
   6992static struct usb_driver rtl8xxxu_driver = {
   6993	.name = DRIVER_NAME,
   6994	.probe = rtl8xxxu_probe,
   6995	.disconnect = rtl8xxxu_disconnect,
   6996	.id_table = dev_table,
   6997	.no_dynamic_id = 1,
   6998	.disable_hub_initiated_lpm = 1,
   6999};
   7000
   7001static int __init rtl8xxxu_module_init(void)
   7002{
   7003	int res;
   7004
   7005	res = usb_register(&rtl8xxxu_driver);
   7006	if (res < 0)
   7007		pr_err(DRIVER_NAME ": usb_register() failed (%i)\n", res);
   7008
   7009	return res;
   7010}
   7011
   7012static void __exit rtl8xxxu_module_exit(void)
   7013{
   7014	usb_deregister(&rtl8xxxu_driver);
   7015}
   7016
   7017
   7018MODULE_DEVICE_TABLE(usb, dev_table);
   7019
   7020module_init(rtl8xxxu_module_init);
   7021module_exit(rtl8xxxu_module_exit);