1 // SPDX-License-Identifier: ISC
2 /* Copyright (C) 2020 MediaTek Inc. */
3 
4 #include <linux/etherdevice.h>
5 #include <linux/platform_device.h>
6 #include <linux/pci.h>
7 #include <linux/module.h>
8 #include "mt7915.h"
9 #include "mcu.h"
10 
11 static bool mt7915_dev_running(struct mt7915_dev *dev)
12 {
13 	struct mt7915_phy *phy;
14 
15 	if (test_bit(MT76_STATE_RUNNING, &dev->mphy.state))
16 		return true;
17 
18 	phy = mt7915_ext_phy(dev);
19 
20 	return phy && test_bit(MT76_STATE_RUNNING, &phy->mt76->state);
21 }
22 
23 int mt7915_run(struct ieee80211_hw *hw)
24 {
25 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
26 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
27 	bool running;
28 	int ret;
29 
30 	running = mt7915_dev_running(dev);
31 
32 	if (!running) {
33 		ret = mt76_connac_mcu_set_pm(&dev->mt76,
34 					     dev->phy.mt76->band_idx, 0);
35 		if (ret)
36 			goto out;
37 
38 		ret = mt7915_mcu_set_mac(dev, dev->phy.mt76->band_idx,
39 					 true, true);
40 		if (ret)
41 			goto out;
42 
43 		mt7915_mac_enable_nf(dev, dev->phy.mt76->band_idx);
44 	}
45 
46 	if (phy != &dev->phy) {
47 		ret = mt76_connac_mcu_set_pm(&dev->mt76,
48 					     phy->mt76->band_idx, 0);
49 		if (ret)
50 			goto out;
51 
52 		ret = mt7915_mcu_set_mac(dev, phy->mt76->band_idx,
53 					 true, true);
54 		if (ret)
55 			goto out;
56 
57 		mt7915_mac_enable_nf(dev, phy->mt76->band_idx);
58 	}
59 
60 	ret = mt7915_mcu_set_thermal_throttling(phy,
61 						MT7915_THERMAL_THROTTLE_MAX);
62 
63 	if (ret)
64 		goto out;
65 
66 	ret = mt7915_mcu_set_thermal_protect(phy);
67 
68 	if (ret)
69 		goto out;
70 
71 	ret = mt76_connac_mcu_set_rts_thresh(&dev->mt76, 0x92b,
72 					     phy->mt76->band_idx);
73 	if (ret)
74 		goto out;
75 
76 	ret = mt7915_mcu_set_sku_en(phy, true);
77 	if (ret)
78 		goto out;
79 
80 	ret = mt7915_mcu_set_chan_info(phy, MCU_EXT_CMD(SET_RX_PATH));
81 	if (ret)
82 		goto out;
83 
84 	set_bit(MT76_STATE_RUNNING, &phy->mt76->state);
85 
86 	if (!mt76_testmode_enabled(phy->mt76))
87 		ieee80211_queue_delayed_work(hw, &phy->mt76->mac_work,
88 					     MT7915_WATCHDOG_TIME);
89 
90 	if (!running)
91 		mt7915_mac_reset_counters(phy);
92 
93 out:
94 	return ret;
95 }
96 
97 static int mt7915_start(struct ieee80211_hw *hw)
98 {
99 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
100 	int ret;
101 
102 	flush_work(&dev->init_work);
103 
104 	mutex_lock(&dev->mt76.mutex);
105 	ret = mt7915_run(hw);
106 	mutex_unlock(&dev->mt76.mutex);
107 
108 	return ret;
109 }
110 
111 static void mt7915_stop(struct ieee80211_hw *hw)
112 {
113 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
114 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
115 
116 	cancel_delayed_work_sync(&phy->mt76->mac_work);
117 
118 	mutex_lock(&dev->mt76.mutex);
119 
120 	mt76_testmode_reset(phy->mt76, true);
121 
122 	clear_bit(MT76_STATE_RUNNING, &phy->mt76->state);
123 
124 	if (phy != &dev->phy) {
125 		mt76_connac_mcu_set_pm(&dev->mt76, phy->mt76->band_idx, 1);
126 		mt7915_mcu_set_mac(dev, phy->mt76->band_idx, false, false);
127 	}
128 
129 	if (!mt7915_dev_running(dev)) {
130 		mt76_connac_mcu_set_pm(&dev->mt76, dev->phy.mt76->band_idx, 1);
131 		mt7915_mcu_set_mac(dev, dev->phy.mt76->band_idx, false, false);
132 	}
133 
134 	mutex_unlock(&dev->mt76.mutex);
135 }
136 
137 static inline int get_free_idx(u32 mask, u8 start, u8 end)
138 {
139 	return ffs(~mask & GENMASK(end, start));
140 }
141 
142 static int get_omac_idx(enum nl80211_iftype type, u64 mask)
143 {
144 	int i;
145 
146 	switch (type) {
147 	case NL80211_IFTYPE_MESH_POINT:
148 	case NL80211_IFTYPE_ADHOC:
149 	case NL80211_IFTYPE_STATION:
150 		/* prefer hw bssid slot 1-3 */
151 		i = get_free_idx(mask, HW_BSSID_1, HW_BSSID_3);
152 		if (i)
153 			return i - 1;
154 
155 		if (type != NL80211_IFTYPE_STATION)
156 			break;
157 
158 		i = get_free_idx(mask, EXT_BSSID_1, EXT_BSSID_MAX);
159 		if (i)
160 			return i - 1;
161 
162 		if (~mask & BIT(HW_BSSID_0))
163 			return HW_BSSID_0;
164 
165 		break;
166 	case NL80211_IFTYPE_MONITOR:
167 	case NL80211_IFTYPE_AP:
168 		/* ap uses hw bssid 0 and ext bssid */
169 		if (~mask & BIT(HW_BSSID_0))
170 			return HW_BSSID_0;
171 
172 		i = get_free_idx(mask, EXT_BSSID_1, EXT_BSSID_MAX);
173 		if (i)
174 			return i - 1;
175 
176 		break;
177 	default:
178 		WARN_ON(1);
179 		break;
180 	}
181 
182 	return -1;
183 }
184 
185 static void mt7915_init_bitrate_mask(struct ieee80211_vif *vif)
186 {
187 	struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
188 	int i;
189 
190 	for (i = 0; i < ARRAY_SIZE(mvif->bitrate_mask.control); i++) {
191 		mvif->bitrate_mask.control[i].gi = NL80211_TXRATE_DEFAULT_GI;
192 		mvif->bitrate_mask.control[i].he_gi = 0xff;
193 		mvif->bitrate_mask.control[i].he_ltf = 0xff;
194 		mvif->bitrate_mask.control[i].legacy = GENMASK(31, 0);
195 		memset(mvif->bitrate_mask.control[i].ht_mcs, 0xff,
196 		       sizeof(mvif->bitrate_mask.control[i].ht_mcs));
197 		memset(mvif->bitrate_mask.control[i].vht_mcs, 0xff,
198 		       sizeof(mvif->bitrate_mask.control[i].vht_mcs));
199 		memset(mvif->bitrate_mask.control[i].he_mcs, 0xff,
200 		       sizeof(mvif->bitrate_mask.control[i].he_mcs));
201 	}
202 }
203 
204 static int mt7915_add_interface(struct ieee80211_hw *hw,
205 				struct ieee80211_vif *vif)
206 {
207 	struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
208 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
209 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
210 	struct mt76_txq *mtxq;
211 	bool ext_phy = phy != &dev->phy;
212 	int idx, ret = 0;
213 
214 	mutex_lock(&dev->mt76.mutex);
215 
216 	mt76_testmode_reset(phy->mt76, true);
217 
218 	if (vif->type == NL80211_IFTYPE_MONITOR &&
219 	    is_zero_ether_addr(vif->addr))
220 		phy->monitor_vif = vif;
221 
222 	mvif->mt76.idx = __ffs64(~dev->mt76.vif_mask);
223 	if (mvif->mt76.idx >= (MT7915_MAX_INTERFACES << dev->dbdc_support)) {
224 		ret = -ENOSPC;
225 		goto out;
226 	}
227 
228 	idx = get_omac_idx(vif->type, phy->omac_mask);
229 	if (idx < 0) {
230 		ret = -ENOSPC;
231 		goto out;
232 	}
233 	mvif->mt76.omac_idx = idx;
234 	mvif->phy = phy;
235 	mvif->mt76.band_idx = phy->mt76->band_idx;
236 
237 	mvif->mt76.wmm_idx = vif->type != NL80211_IFTYPE_AP;
238 	if (ext_phy)
239 		mvif->mt76.wmm_idx += 2;
240 
241 	ret = mt7915_mcu_add_dev_info(phy, vif, true);
242 	if (ret)
243 		goto out;
244 
245 	dev->mt76.vif_mask |= BIT_ULL(mvif->mt76.idx);
246 	phy->omac_mask |= BIT_ULL(mvif->mt76.omac_idx);
247 
248 	idx = MT7915_WTBL_RESERVED - mvif->mt76.idx;
249 
250 	INIT_LIST_HEAD(&mvif->sta.rc_list);
251 	INIT_LIST_HEAD(&mvif->sta.wcid.poll_list);
252 	mvif->sta.wcid.idx = idx;
253 	mvif->sta.wcid.phy_idx = ext_phy;
254 	mvif->sta.wcid.hw_key_idx = -1;
255 	mvif->sta.wcid.tx_info |= MT_WCID_TX_INFO_SET;
256 	mt76_wcid_init(&mvif->sta.wcid);
257 
258 	mt7915_mac_wtbl_update(dev, idx,
259 			       MT_WTBL_UPDATE_ADM_COUNT_CLEAR);
260 
261 	if (vif->txq) {
262 		mtxq = (struct mt76_txq *)vif->txq->drv_priv;
263 		mtxq->wcid = idx;
264 	}
265 
266 	if (vif->type != NL80211_IFTYPE_AP &&
267 	    (!mvif->mt76.omac_idx || mvif->mt76.omac_idx > 3))
268 		vif->offload_flags = 0;
269 	vif->offload_flags |= IEEE80211_OFFLOAD_ENCAP_4ADDR;
270 
271 	mt7915_init_bitrate_mask(vif);
272 	memset(&mvif->cap, -1, sizeof(mvif->cap));
273 
274 	mt7915_mcu_add_bss_info(phy, vif, true);
275 	mt7915_mcu_add_sta(dev, vif, NULL, true);
276 	rcu_assign_pointer(dev->mt76.wcid[idx], &mvif->sta.wcid);
277 
278 out:
279 	mutex_unlock(&dev->mt76.mutex);
280 
281 	return ret;
282 }
283 
284 static void mt7915_remove_interface(struct ieee80211_hw *hw,
285 				    struct ieee80211_vif *vif)
286 {
287 	struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
288 	struct mt7915_sta *msta = &mvif->sta;
289 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
290 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
291 	int idx = msta->wcid.idx;
292 
293 	mt7915_mcu_add_bss_info(phy, vif, false);
294 	mt7915_mcu_add_sta(dev, vif, NULL, false);
295 
296 	mutex_lock(&dev->mt76.mutex);
297 	mt76_testmode_reset(phy->mt76, true);
298 	mutex_unlock(&dev->mt76.mutex);
299 
300 	if (vif == phy->monitor_vif)
301 		phy->monitor_vif = NULL;
302 
303 	mt7915_mcu_add_dev_info(phy, vif, false);
304 
305 	rcu_assign_pointer(dev->mt76.wcid[idx], NULL);
306 
307 	mutex_lock(&dev->mt76.mutex);
308 	dev->mt76.vif_mask &= ~BIT_ULL(mvif->mt76.idx);
309 	phy->omac_mask &= ~BIT_ULL(mvif->mt76.omac_idx);
310 	mutex_unlock(&dev->mt76.mutex);
311 
312 	spin_lock_bh(&dev->mt76.sta_poll_lock);
313 	if (!list_empty(&msta->wcid.poll_list))
314 		list_del_init(&msta->wcid.poll_list);
315 	spin_unlock_bh(&dev->mt76.sta_poll_lock);
316 
317 	mt76_wcid_cleanup(&dev->mt76, &msta->wcid);
318 }
319 
320 int mt7915_set_channel(struct mt7915_phy *phy)
321 {
322 	struct mt7915_dev *dev = phy->dev;
323 	int ret;
324 
325 	cancel_delayed_work_sync(&phy->mt76->mac_work);
326 
327 	mutex_lock(&dev->mt76.mutex);
328 	set_bit(MT76_RESET, &phy->mt76->state);
329 
330 	mt76_set_channel(phy->mt76);
331 
332 	if (dev->flash_mode) {
333 		ret = mt7915_mcu_apply_tx_dpd(phy);
334 		if (ret)
335 			goto out;
336 	}
337 
338 	ret = mt7915_mcu_set_chan_info(phy, MCU_EXT_CMD(CHANNEL_SWITCH));
339 	if (ret)
340 		goto out;
341 
342 	mt7915_mac_set_timing(phy);
343 	ret = mt7915_dfs_init_radar_detector(phy);
344 	mt7915_mac_cca_stats_reset(phy);
345 
346 	mt7915_mac_reset_counters(phy);
347 	phy->noise = 0;
348 
349 out:
350 	clear_bit(MT76_RESET, &phy->mt76->state);
351 	mutex_unlock(&dev->mt76.mutex);
352 
353 	mt76_txq_schedule_all(phy->mt76);
354 
355 	if (!mt76_testmode_enabled(phy->mt76))
356 		ieee80211_queue_delayed_work(phy->mt76->hw,
357 					     &phy->mt76->mac_work,
358 					     MT7915_WATCHDOG_TIME);
359 
360 	return ret;
361 }
362 
363 static int mt7915_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
364 			  struct ieee80211_vif *vif, struct ieee80211_sta *sta,
365 			  struct ieee80211_key_conf *key)
366 {
367 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
368 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
369 	struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
370 	struct mt7915_sta *msta = sta ? (struct mt7915_sta *)sta->drv_priv :
371 				  &mvif->sta;
372 	struct mt76_wcid *wcid = &msta->wcid;
373 	u8 *wcid_keyidx = &wcid->hw_key_idx;
374 	int idx = key->keyidx;
375 	int err = 0;
376 
377 	/* The hardware does not support per-STA RX GTK, fallback
378 	 * to software mode for these.
379 	 */
380 	if ((vif->type == NL80211_IFTYPE_ADHOC ||
381 	     vif->type == NL80211_IFTYPE_MESH_POINT) &&
382 	    (key->cipher == WLAN_CIPHER_SUITE_TKIP ||
383 	     key->cipher == WLAN_CIPHER_SUITE_CCMP) &&
384 	    !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE))
385 		return -EOPNOTSUPP;
386 
387 	/* fall back to sw encryption for unsupported ciphers */
388 	switch (key->cipher) {
389 	case WLAN_CIPHER_SUITE_AES_CMAC:
390 		wcid_keyidx = &wcid->hw_key_idx2;
391 		key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIE;
392 		break;
393 	case WLAN_CIPHER_SUITE_TKIP:
394 	case WLAN_CIPHER_SUITE_CCMP:
395 	case WLAN_CIPHER_SUITE_CCMP_256:
396 	case WLAN_CIPHER_SUITE_GCMP:
397 	case WLAN_CIPHER_SUITE_GCMP_256:
398 	case WLAN_CIPHER_SUITE_SMS4:
399 		break;
400 	case WLAN_CIPHER_SUITE_WEP40:
401 	case WLAN_CIPHER_SUITE_WEP104:
402 	default:
403 		return -EOPNOTSUPP;
404 	}
405 
406 	mutex_lock(&dev->mt76.mutex);
407 
408 	if (cmd == SET_KEY && !sta && !mvif->mt76.cipher) {
409 		mvif->mt76.cipher = mt76_connac_mcu_get_cipher(key->cipher);
410 		mt7915_mcu_add_bss_info(phy, vif, true);
411 	}
412 
413 	if (cmd == SET_KEY) {
414 		*wcid_keyidx = idx;
415 	} else {
416 		if (idx == *wcid_keyidx)
417 			*wcid_keyidx = -1;
418 		goto out;
419 	}
420 
421 	mt76_wcid_key_setup(&dev->mt76, wcid, key);
422 	err = mt76_connac_mcu_add_key(&dev->mt76, vif, &msta->bip,
423 				      key, MCU_EXT_CMD(STA_REC_UPDATE),
424 				      &msta->wcid, cmd);
425 out:
426 	mutex_unlock(&dev->mt76.mutex);
427 
428 	return err;
429 }
430 
431 static int mt7915_set_sar_specs(struct ieee80211_hw *hw,
432 				const struct cfg80211_sar_specs *sar)
433 {
434 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
435 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
436 	int err = -EINVAL;
437 
438 	mutex_lock(&dev->mt76.mutex);
439 	if (!cfg80211_chandef_valid(&phy->mt76->chandef))
440 		goto out;
441 
442 	err = mt76_init_sar_power(hw, sar);
443 	if (err)
444 		goto out;
445 
446 	err = mt7915_mcu_set_txpower_sku(phy);
447 out:
448 	mutex_unlock(&dev->mt76.mutex);
449 
450 	return err;
451 }
452 
453 static int mt7915_config(struct ieee80211_hw *hw, u32 changed)
454 {
455 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
456 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
457 	int ret;
458 
459 	if (changed & IEEE80211_CONF_CHANGE_CHANNEL) {
460 #ifdef CONFIG_NL80211_TESTMODE
461 		if (phy->mt76->test.state != MT76_TM_STATE_OFF) {
462 			mutex_lock(&dev->mt76.mutex);
463 			mt76_testmode_reset(phy->mt76, false);
464 			mutex_unlock(&dev->mt76.mutex);
465 		}
466 #endif
467 		ieee80211_stop_queues(hw);
468 		ret = mt7915_set_channel(phy);
469 		if (ret)
470 			return ret;
471 		ieee80211_wake_queues(hw);
472 	}
473 
474 	if (changed & (IEEE80211_CONF_CHANGE_POWER |
475 		       IEEE80211_CONF_CHANGE_CHANNEL)) {
476 		ret = mt7915_mcu_set_txpower_sku(phy);
477 		if (ret)
478 			return ret;
479 	}
480 
481 	mutex_lock(&dev->mt76.mutex);
482 
483 	if (changed & IEEE80211_CONF_CHANGE_MONITOR) {
484 		bool enabled = !!(hw->conf.flags & IEEE80211_CONF_MONITOR);
485 		bool band = phy->mt76->band_idx;
486 		u32 rxfilter = phy->rxfilter;
487 
488 		if (!enabled) {
489 			rxfilter |= MT_WF_RFCR_DROP_OTHER_UC;
490 			dev->monitor_mask &= ~BIT(band);
491 		} else {
492 			rxfilter &= ~MT_WF_RFCR_DROP_OTHER_UC;
493 			dev->monitor_mask |= BIT(band);
494 		}
495 
496 		mt76_rmw_field(dev, MT_DMA_DCR0(band), MT_DMA_DCR0_RXD_G5_EN,
497 			       enabled);
498 		mt76_rmw_field(dev, MT_DMA_DCR0(band), MT_MDP_DCR0_RX_HDR_TRANS_EN,
499 			       !dev->monitor_mask);
500 		mt76_testmode_reset(phy->mt76, true);
501 		mt76_wr(dev, MT_WF_RFCR(band), rxfilter);
502 	}
503 
504 	mutex_unlock(&dev->mt76.mutex);
505 
506 	return 0;
507 }
508 
509 static int
510 mt7915_conf_tx(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
511 	       unsigned int link_id, u16 queue,
512 	       const struct ieee80211_tx_queue_params *params)
513 {
514 	struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
515 
516 	/* no need to update right away, we'll get BSS_CHANGED_QOS */
517 	queue = mt76_connac_lmac_mapping(queue);
518 	mvif->queue_params[queue] = *params;
519 
520 	return 0;
521 }
522 
523 static void mt7915_configure_filter(struct ieee80211_hw *hw,
524 				    unsigned int changed_flags,
525 				    unsigned int *total_flags,
526 				    u64 multicast)
527 {
528 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
529 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
530 	bool band = phy->mt76->band_idx;
531 	u32 ctl_flags = MT_WF_RFCR1_DROP_ACK |
532 			MT_WF_RFCR1_DROP_BF_POLL |
533 			MT_WF_RFCR1_DROP_BA |
534 			MT_WF_RFCR1_DROP_CFEND |
535 			MT_WF_RFCR1_DROP_CFACK;
536 	u32 rxfilter;
537 	u32 flags = 0;
538 
539 #define MT76_FILTER(_flag, _hw) do {					\
540 		flags |= *total_flags & FIF_##_flag;			\
541 		phy->rxfilter &= ~(_hw);				\
542 		phy->rxfilter |= !(flags & FIF_##_flag) * (_hw);	\
543 	} while (0)
544 
545 	mutex_lock(&dev->mt76.mutex);
546 
547 	phy->rxfilter &= ~(MT_WF_RFCR_DROP_OTHER_BSS |
548 			   MT_WF_RFCR_DROP_OTHER_BEACON |
549 			   MT_WF_RFCR_DROP_FRAME_REPORT |
550 			   MT_WF_RFCR_DROP_PROBEREQ |
551 			   MT_WF_RFCR_DROP_MCAST_FILTERED |
552 			   MT_WF_RFCR_DROP_MCAST |
553 			   MT_WF_RFCR_DROP_BCAST |
554 			   MT_WF_RFCR_DROP_DUPLICATE |
555 			   MT_WF_RFCR_DROP_A2_BSSID |
556 			   MT_WF_RFCR_DROP_UNWANTED_CTL |
557 			   MT_WF_RFCR_DROP_STBC_MULTI);
558 
559 	MT76_FILTER(OTHER_BSS, MT_WF_RFCR_DROP_OTHER_TIM |
560 			       MT_WF_RFCR_DROP_A3_MAC |
561 			       MT_WF_RFCR_DROP_A3_BSSID);
562 
563 	MT76_FILTER(FCSFAIL, MT_WF_RFCR_DROP_FCSFAIL);
564 
565 	MT76_FILTER(CONTROL, MT_WF_RFCR_DROP_CTS |
566 			     MT_WF_RFCR_DROP_RTS |
567 			     MT_WF_RFCR_DROP_CTL_RSV |
568 			     MT_WF_RFCR_DROP_NDPA);
569 
570 	*total_flags = flags;
571 	rxfilter = phy->rxfilter;
572 	if (hw->conf.flags & IEEE80211_CONF_MONITOR)
573 		rxfilter &= ~MT_WF_RFCR_DROP_OTHER_UC;
574 	else
575 		rxfilter |= MT_WF_RFCR_DROP_OTHER_UC;
576 	mt76_wr(dev, MT_WF_RFCR(band), rxfilter);
577 
578 	if (*total_flags & FIF_CONTROL)
579 		mt76_clear(dev, MT_WF_RFCR1(band), ctl_flags);
580 	else
581 		mt76_set(dev, MT_WF_RFCR1(band), ctl_flags);
582 
583 	mutex_unlock(&dev->mt76.mutex);
584 }
585 
586 static void
587 mt7915_update_bss_color(struct ieee80211_hw *hw,
588 			struct ieee80211_vif *vif,
589 			struct cfg80211_he_bss_color *bss_color)
590 {
591 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
592 
593 	switch (vif->type) {
594 	case NL80211_IFTYPE_AP: {
595 		struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
596 
597 		if (mvif->mt76.omac_idx > HW_BSSID_MAX)
598 			return;
599 		fallthrough;
600 	}
601 	case NL80211_IFTYPE_STATION:
602 		mt7915_mcu_update_bss_color(dev, vif, bss_color);
603 		break;
604 	default:
605 		break;
606 	}
607 }
608 
609 static void mt7915_bss_info_changed(struct ieee80211_hw *hw,
610 				    struct ieee80211_vif *vif,
611 				    struct ieee80211_bss_conf *info,
612 				    u64 changed)
613 {
614 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
615 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
616 	int set_bss_info = -1, set_sta = -1;
617 
618 	mutex_lock(&dev->mt76.mutex);
619 
620 	/*
621 	 * station mode uses BSSID to map the wlan entry to a peer,
622 	 * and then peer references bss_info_rfch to set bandwidth cap.
623 	 */
624 	if (changed & BSS_CHANGED_BSSID &&
625 	    vif->type == NL80211_IFTYPE_STATION)
626 		set_bss_info = set_sta = !is_zero_ether_addr(info->bssid);
627 	if (changed & BSS_CHANGED_ASSOC)
628 		set_bss_info = vif->cfg.assoc;
629 	if (changed & BSS_CHANGED_BEACON_ENABLED &&
630 	    vif->type != NL80211_IFTYPE_AP)
631 		set_bss_info = set_sta = info->enable_beacon;
632 
633 	if (set_bss_info == 1)
634 		mt7915_mcu_add_bss_info(phy, vif, true);
635 	if (set_sta == 1)
636 		mt7915_mcu_add_sta(dev, vif, NULL, true);
637 
638 	if (changed & BSS_CHANGED_ERP_CTS_PROT)
639 		mt7915_mac_enable_rtscts(dev, vif, info->use_cts_prot);
640 
641 	if (changed & BSS_CHANGED_ERP_SLOT) {
642 		int slottime = info->use_short_slot ? 9 : 20;
643 
644 		if (slottime != phy->slottime) {
645 			phy->slottime = slottime;
646 			mt7915_mac_set_timing(phy);
647 		}
648 	}
649 
650 	/* ensure that enable txcmd_mode after bss_info */
651 	if (changed & (BSS_CHANGED_QOS | BSS_CHANGED_BEACON_ENABLED))
652 		mt7915_mcu_set_tx(dev, vif);
653 
654 	if (changed & BSS_CHANGED_HE_OBSS_PD)
655 		mt7915_mcu_add_obss_spr(phy, vif, &info->he_obss_pd);
656 
657 	if (changed & BSS_CHANGED_HE_BSS_COLOR)
658 		mt7915_update_bss_color(hw, vif, &info->he_bss_color);
659 
660 	if (changed & (BSS_CHANGED_BEACON |
661 		       BSS_CHANGED_BEACON_ENABLED))
662 		mt7915_mcu_add_beacon(hw, vif, info->enable_beacon, changed);
663 
664 	if (changed & (BSS_CHANGED_UNSOL_BCAST_PROBE_RESP |
665 		       BSS_CHANGED_FILS_DISCOVERY))
666 		mt7915_mcu_add_inband_discov(dev, vif, changed);
667 
668 	if (set_bss_info == 0)
669 		mt7915_mcu_add_bss_info(phy, vif, false);
670 	if (set_sta == 0)
671 		mt7915_mcu_add_sta(dev, vif, NULL, false);
672 
673 	mutex_unlock(&dev->mt76.mutex);
674 }
675 
676 static void
677 mt7915_vif_check_caps(struct mt7915_phy *phy, struct ieee80211_vif *vif)
678 {
679 	struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
680 	struct mt7915_vif_cap *vc = &mvif->cap;
681 
682 	vc->ht_ldpc = vif->bss_conf.ht_ldpc;
683 	vc->vht_ldpc = vif->bss_conf.vht_ldpc;
684 	vc->vht_su_ebfer = vif->bss_conf.vht_su_beamformer;
685 	vc->vht_su_ebfee = vif->bss_conf.vht_su_beamformee;
686 	vc->vht_mu_ebfer = vif->bss_conf.vht_mu_beamformer;
687 	vc->vht_mu_ebfee = vif->bss_conf.vht_mu_beamformee;
688 	vc->he_ldpc = vif->bss_conf.he_ldpc;
689 	vc->he_su_ebfer = vif->bss_conf.he_su_beamformer;
690 	vc->he_su_ebfee = vif->bss_conf.he_su_beamformee;
691 	vc->he_mu_ebfer = vif->bss_conf.he_mu_beamformer;
692 }
693 
694 static int
695 mt7915_start_ap(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
696 		struct ieee80211_bss_conf *link_conf)
697 {
698 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
699 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
700 	int err;
701 
702 	mutex_lock(&dev->mt76.mutex);
703 
704 	mt7915_vif_check_caps(phy, vif);
705 
706 	err = mt7915_mcu_add_bss_info(phy, vif, true);
707 	if (err)
708 		goto out;
709 	err = mt7915_mcu_add_sta(dev, vif, NULL, true);
710 out:
711 	mutex_unlock(&dev->mt76.mutex);
712 
713 	return err;
714 }
715 
716 static void
717 mt7915_stop_ap(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
718 	       struct ieee80211_bss_conf *link_conf)
719 {
720 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
721 
722 	mutex_lock(&dev->mt76.mutex);
723 	mt7915_mcu_add_sta(dev, vif, NULL, false);
724 	mutex_unlock(&dev->mt76.mutex);
725 }
726 
727 static void
728 mt7915_channel_switch_beacon(struct ieee80211_hw *hw,
729 			     struct ieee80211_vif *vif,
730 			     struct cfg80211_chan_def *chandef)
731 {
732 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
733 
734 	mutex_lock(&dev->mt76.mutex);
735 	mt7915_mcu_add_beacon(hw, vif, true, BSS_CHANGED_BEACON);
736 	mutex_unlock(&dev->mt76.mutex);
737 }
738 
739 int mt7915_mac_sta_add(struct mt76_dev *mdev, struct ieee80211_vif *vif,
740 		       struct ieee80211_sta *sta)
741 {
742 	struct mt7915_dev *dev = container_of(mdev, struct mt7915_dev, mt76);
743 	struct mt7915_sta *msta = (struct mt7915_sta *)sta->drv_priv;
744 	struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
745 	bool ext_phy = mvif->phy != &dev->phy;
746 	int ret, idx;
747 
748 	idx = mt76_wcid_alloc(dev->mt76.wcid_mask, MT7915_WTBL_STA);
749 	if (idx < 0)
750 		return -ENOSPC;
751 
752 	INIT_LIST_HEAD(&msta->rc_list);
753 	INIT_LIST_HEAD(&msta->wcid.poll_list);
754 	msta->vif = mvif;
755 	msta->wcid.sta = 1;
756 	msta->wcid.idx = idx;
757 	msta->wcid.phy_idx = ext_phy;
758 	msta->wcid.tx_info |= MT_WCID_TX_INFO_SET;
759 	msta->jiffies = jiffies;
760 
761 	ewma_avg_signal_init(&msta->avg_ack_signal);
762 
763 	mt7915_mac_wtbl_update(dev, idx,
764 			       MT_WTBL_UPDATE_ADM_COUNT_CLEAR);
765 
766 	ret = mt7915_mcu_add_sta(dev, vif, sta, true);
767 	if (ret)
768 		return ret;
769 
770 	return mt7915_mcu_add_rate_ctrl(dev, vif, sta, false);
771 }
772 
773 void mt7915_mac_sta_remove(struct mt76_dev *mdev, struct ieee80211_vif *vif,
774 			   struct ieee80211_sta *sta)
775 {
776 	struct mt7915_dev *dev = container_of(mdev, struct mt7915_dev, mt76);
777 	struct mt7915_sta *msta = (struct mt7915_sta *)sta->drv_priv;
778 	int i;
779 
780 	mt7915_mcu_add_sta(dev, vif, sta, false);
781 
782 	mt7915_mac_wtbl_update(dev, msta->wcid.idx,
783 			       MT_WTBL_UPDATE_ADM_COUNT_CLEAR);
784 
785 	for (i = 0; i < ARRAY_SIZE(msta->twt.flow); i++)
786 		mt7915_mac_twt_teardown_flow(dev, msta, i);
787 
788 	spin_lock_bh(&mdev->sta_poll_lock);
789 	if (!list_empty(&msta->wcid.poll_list))
790 		list_del_init(&msta->wcid.poll_list);
791 	if (!list_empty(&msta->rc_list))
792 		list_del_init(&msta->rc_list);
793 	spin_unlock_bh(&mdev->sta_poll_lock);
794 }
795 
796 static void mt7915_tx(struct ieee80211_hw *hw,
797 		      struct ieee80211_tx_control *control,
798 		      struct sk_buff *skb)
799 {
800 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
801 	struct mt76_phy *mphy = hw->priv;
802 	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
803 	struct ieee80211_vif *vif = info->control.vif;
804 	struct mt76_wcid *wcid = &dev->mt76.global_wcid;
805 
806 	if (control->sta) {
807 		struct mt7915_sta *sta;
808 
809 		sta = (struct mt7915_sta *)control->sta->drv_priv;
810 		wcid = &sta->wcid;
811 	}
812 
813 	if (vif && !control->sta) {
814 		struct mt7915_vif *mvif;
815 
816 		mvif = (struct mt7915_vif *)vif->drv_priv;
817 		wcid = &mvif->sta.wcid;
818 	}
819 
820 	mt76_tx(mphy, control->sta, wcid, skb);
821 }
822 
823 static int mt7915_set_rts_threshold(struct ieee80211_hw *hw, u32 val)
824 {
825 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
826 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
827 	int ret;
828 
829 	mutex_lock(&dev->mt76.mutex);
830 	ret = mt76_connac_mcu_set_rts_thresh(&dev->mt76, val,
831 					     phy->mt76->band_idx);
832 	mutex_unlock(&dev->mt76.mutex);
833 
834 	return ret;
835 }
836 
837 static int
838 mt7915_ampdu_action(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
839 		    struct ieee80211_ampdu_params *params)
840 {
841 	enum ieee80211_ampdu_mlme_action action = params->action;
842 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
843 	struct ieee80211_sta *sta = params->sta;
844 	struct ieee80211_txq *txq = sta->txq[params->tid];
845 	struct mt7915_sta *msta = (struct mt7915_sta *)sta->drv_priv;
846 	u16 tid = params->tid;
847 	u16 ssn = params->ssn;
848 	struct mt76_txq *mtxq;
849 	int ret = 0;
850 
851 	if (!txq)
852 		return -EINVAL;
853 
854 	mtxq = (struct mt76_txq *)txq->drv_priv;
855 
856 	mutex_lock(&dev->mt76.mutex);
857 	switch (action) {
858 	case IEEE80211_AMPDU_RX_START:
859 		mt76_rx_aggr_start(&dev->mt76, &msta->wcid, tid, ssn,
860 				   params->buf_size);
861 		ret = mt7915_mcu_add_rx_ba(dev, params, true);
862 		break;
863 	case IEEE80211_AMPDU_RX_STOP:
864 		mt76_rx_aggr_stop(&dev->mt76, &msta->wcid, tid);
865 		ret = mt7915_mcu_add_rx_ba(dev, params, false);
866 		break;
867 	case IEEE80211_AMPDU_TX_OPERATIONAL:
868 		mtxq->aggr = true;
869 		mtxq->send_bar = false;
870 		ret = mt7915_mcu_add_tx_ba(dev, params, true);
871 		break;
872 	case IEEE80211_AMPDU_TX_STOP_FLUSH:
873 	case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
874 		mtxq->aggr = false;
875 		clear_bit(tid, &msta->wcid.ampdu_state);
876 		ret = mt7915_mcu_add_tx_ba(dev, params, false);
877 		break;
878 	case IEEE80211_AMPDU_TX_START:
879 		set_bit(tid, &msta->wcid.ampdu_state);
880 		ret = IEEE80211_AMPDU_TX_START_IMMEDIATE;
881 		break;
882 	case IEEE80211_AMPDU_TX_STOP_CONT:
883 		mtxq->aggr = false;
884 		clear_bit(tid, &msta->wcid.ampdu_state);
885 		ret = mt7915_mcu_add_tx_ba(dev, params, false);
886 		ieee80211_stop_tx_ba_cb_irqsafe(vif, sta->addr, tid);
887 		break;
888 	}
889 	mutex_unlock(&dev->mt76.mutex);
890 
891 	return ret;
892 }
893 
894 static int
895 mt7915_sta_add(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
896 	       struct ieee80211_sta *sta)
897 {
898 	return mt76_sta_state(hw, vif, sta, IEEE80211_STA_NOTEXIST,
899 			      IEEE80211_STA_NONE);
900 }
901 
902 static int
903 mt7915_sta_remove(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
904 		  struct ieee80211_sta *sta)
905 {
906 	return mt76_sta_state(hw, vif, sta, IEEE80211_STA_NONE,
907 			      IEEE80211_STA_NOTEXIST);
908 }
909 
910 static int
911 mt7915_get_stats(struct ieee80211_hw *hw,
912 		 struct ieee80211_low_level_stats *stats)
913 {
914 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
915 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
916 	struct mt76_mib_stats *mib = &phy->mib;
917 
918 	mutex_lock(&dev->mt76.mutex);
919 
920 	stats->dot11RTSSuccessCount = mib->rts_cnt;
921 	stats->dot11RTSFailureCount = mib->rts_retries_cnt;
922 	stats->dot11FCSErrorCount = mib->fcs_err_cnt;
923 	stats->dot11ACKFailureCount = mib->ack_fail_cnt;
924 
925 	mutex_unlock(&dev->mt76.mutex);
926 
927 	return 0;
928 }
929 
930 u64 __mt7915_get_tsf(struct ieee80211_hw *hw, struct mt7915_vif *mvif)
931 {
932 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
933 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
934 	bool band = phy->mt76->band_idx;
935 	union {
936 		u64 t64;
937 		u32 t32[2];
938 	} tsf;
939 	u16 n;
940 
941 	lockdep_assert_held(&dev->mt76.mutex);
942 
943 	n = mvif->mt76.omac_idx > HW_BSSID_MAX ? HW_BSSID_0
944 					       : mvif->mt76.omac_idx;
945 	/* TSF software read */
946 	if (is_mt7915(&dev->mt76))
947 		mt76_rmw(dev, MT_LPON_TCR(band, n), MT_LPON_TCR_SW_MODE,
948 			 MT_LPON_TCR_SW_READ);
949 	else
950 		mt76_rmw(dev, MT_LPON_TCR_MT7916(band, n), MT_LPON_TCR_SW_MODE,
951 			 MT_LPON_TCR_SW_READ);
952 	tsf.t32[0] = mt76_rr(dev, MT_LPON_UTTR0(band));
953 	tsf.t32[1] = mt76_rr(dev, MT_LPON_UTTR1(band));
954 
955 	return tsf.t64;
956 }
957 
958 static u64
959 mt7915_get_tsf(struct ieee80211_hw *hw, struct ieee80211_vif *vif)
960 {
961 	struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
962 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
963 	u64 ret;
964 
965 	mutex_lock(&dev->mt76.mutex);
966 	ret = __mt7915_get_tsf(hw, mvif);
967 	mutex_unlock(&dev->mt76.mutex);
968 
969 	return ret;
970 }
971 
972 static void
973 mt7915_set_tsf(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
974 	       u64 timestamp)
975 {
976 	struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
977 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
978 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
979 	bool band = phy->mt76->band_idx;
980 	union {
981 		u64 t64;
982 		u32 t32[2];
983 	} tsf = { .t64 = timestamp, };
984 	u16 n;
985 
986 	mutex_lock(&dev->mt76.mutex);
987 
988 	n = mvif->mt76.omac_idx > HW_BSSID_MAX ? HW_BSSID_0
989 					       : mvif->mt76.omac_idx;
990 	mt76_wr(dev, MT_LPON_UTTR0(band), tsf.t32[0]);
991 	mt76_wr(dev, MT_LPON_UTTR1(band), tsf.t32[1]);
992 	/* TSF software overwrite */
993 	if (is_mt7915(&dev->mt76))
994 		mt76_rmw(dev, MT_LPON_TCR(band, n), MT_LPON_TCR_SW_MODE,
995 			 MT_LPON_TCR_SW_WRITE);
996 	else
997 		mt76_rmw(dev, MT_LPON_TCR_MT7916(band, n), MT_LPON_TCR_SW_MODE,
998 			 MT_LPON_TCR_SW_WRITE);
999 
1000 	mutex_unlock(&dev->mt76.mutex);
1001 }
1002 
1003 static void
1004 mt7915_offset_tsf(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1005 		  s64 timestamp)
1006 {
1007 	struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
1008 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
1009 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
1010 	bool band = phy->mt76->band_idx;
1011 	union {
1012 		u64 t64;
1013 		u32 t32[2];
1014 	} tsf = { .t64 = timestamp, };
1015 	u16 n;
1016 
1017 	mutex_lock(&dev->mt76.mutex);
1018 
1019 	n = mvif->mt76.omac_idx > HW_BSSID_MAX ? HW_BSSID_0
1020 					       : mvif->mt76.omac_idx;
1021 	mt76_wr(dev, MT_LPON_UTTR0(band), tsf.t32[0]);
1022 	mt76_wr(dev, MT_LPON_UTTR1(band), tsf.t32[1]);
1023 	/* TSF software adjust*/
1024 	if (is_mt7915(&dev->mt76))
1025 		mt76_rmw(dev, MT_LPON_TCR(band, n), MT_LPON_TCR_SW_MODE,
1026 			 MT_LPON_TCR_SW_ADJUST);
1027 	else
1028 		mt76_rmw(dev, MT_LPON_TCR_MT7916(band, n), MT_LPON_TCR_SW_MODE,
1029 			 MT_LPON_TCR_SW_ADJUST);
1030 
1031 	mutex_unlock(&dev->mt76.mutex);
1032 }
1033 
1034 static void
1035 mt7915_set_coverage_class(struct ieee80211_hw *hw, s16 coverage_class)
1036 {
1037 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
1038 	struct mt7915_dev *dev = phy->dev;
1039 
1040 	mutex_lock(&dev->mt76.mutex);
1041 	phy->coverage_class = max_t(s16, coverage_class, 0);
1042 	mt7915_mac_set_timing(phy);
1043 	mutex_unlock(&dev->mt76.mutex);
1044 }
1045 
1046 static int
1047 mt7915_set_antenna(struct ieee80211_hw *hw, u32 tx_ant, u32 rx_ant)
1048 {
1049 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
1050 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
1051 	int max_nss = hweight8(hw->wiphy->available_antennas_tx);
1052 	u8 chainshift = dev->chainshift;
1053 	u8 band = phy->mt76->band_idx;
1054 
1055 	if (!tx_ant || tx_ant != rx_ant || ffs(tx_ant) > max_nss)
1056 		return -EINVAL;
1057 
1058 	mutex_lock(&dev->mt76.mutex);
1059 
1060 	phy->mt76->antenna_mask = tx_ant;
1061 
1062 	/* handle a variant of mt7916 which has 3T3R but nss2 on 5 GHz band */
1063 	if (is_mt7916(&dev->mt76) && band && hweight8(tx_ant) == max_nss)
1064 		phy->mt76->chainmask = (dev->chainmask >> chainshift) << chainshift;
1065 	else
1066 		phy->mt76->chainmask = tx_ant << (chainshift * band);
1067 
1068 	mt76_set_stream_caps(phy->mt76, true);
1069 	mt7915_set_stream_vht_txbf_caps(phy);
1070 	mt7915_set_stream_he_caps(phy);
1071 
1072 	mutex_unlock(&dev->mt76.mutex);
1073 
1074 	return 0;
1075 }
1076 
1077 static void mt7915_sta_statistics(struct ieee80211_hw *hw,
1078 				  struct ieee80211_vif *vif,
1079 				  struct ieee80211_sta *sta,
1080 				  struct station_info *sinfo)
1081 {
1082 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
1083 	struct mt7915_sta *msta = (struct mt7915_sta *)sta->drv_priv;
1084 	struct rate_info *txrate = &msta->wcid.rate;
1085 	struct rate_info rxrate = {};
1086 
1087 	if (is_mt7915(&phy->dev->mt76) &&
1088 	    !mt7915_mcu_get_rx_rate(phy, vif, sta, &rxrate)) {
1089 		sinfo->rxrate = rxrate;
1090 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_BITRATE);
1091 	}
1092 
1093 	if (txrate->legacy || txrate->flags) {
1094 		if (txrate->legacy) {
1095 			sinfo->txrate.legacy = txrate->legacy;
1096 		} else {
1097 			sinfo->txrate.mcs = txrate->mcs;
1098 			sinfo->txrate.nss = txrate->nss;
1099 			sinfo->txrate.bw = txrate->bw;
1100 			sinfo->txrate.he_gi = txrate->he_gi;
1101 			sinfo->txrate.he_dcm = txrate->he_dcm;
1102 			sinfo->txrate.he_ru_alloc = txrate->he_ru_alloc;
1103 		}
1104 		sinfo->txrate.flags = txrate->flags;
1105 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_BITRATE);
1106 	}
1107 
1108 	/* offloading flows bypass networking stack, so driver counts and
1109 	 * reports sta statistics via NL80211_STA_INFO when WED is active.
1110 	 */
1111 	if (mtk_wed_device_active(&phy->dev->mt76.mmio.wed)) {
1112 		sinfo->tx_bytes = msta->wcid.stats.tx_bytes;
1113 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_BYTES64);
1114 
1115 		if (!mt7915_mcu_wed_wa_tx_stats(phy->dev, msta->wcid.idx)) {
1116 			sinfo->tx_packets = msta->wcid.stats.tx_packets;
1117 			sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_PACKETS);
1118 		}
1119 
1120 		if (mtk_wed_get_rx_capa(&phy->dev->mt76.mmio.wed)) {
1121 			sinfo->rx_bytes = msta->wcid.stats.rx_bytes;
1122 			sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_BYTES64);
1123 
1124 			sinfo->rx_packets = msta->wcid.stats.rx_packets;
1125 			sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_PACKETS);
1126 		}
1127 	}
1128 
1129 	sinfo->tx_failed = msta->wcid.stats.tx_failed;
1130 	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_FAILED);
1131 
1132 	sinfo->tx_retries = msta->wcid.stats.tx_retries;
1133 	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_RETRIES);
1134 
1135 	sinfo->ack_signal = (s8)msta->ack_signal;
1136 	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_ACK_SIGNAL);
1137 
1138 	sinfo->avg_ack_signal = -(s8)ewma_avg_signal_read(&msta->avg_ack_signal);
1139 	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_ACK_SIGNAL_AVG);
1140 }
1141 
1142 static void mt7915_sta_rc_work(void *data, struct ieee80211_sta *sta)
1143 {
1144 	struct mt7915_sta *msta = (struct mt7915_sta *)sta->drv_priv;
1145 	struct mt7915_dev *dev = msta->vif->phy->dev;
1146 	u32 *changed = data;
1147 
1148 	spin_lock_bh(&dev->mt76.sta_poll_lock);
1149 	msta->changed |= *changed;
1150 	if (list_empty(&msta->rc_list))
1151 		list_add_tail(&msta->rc_list, &dev->sta_rc_list);
1152 	spin_unlock_bh(&dev->mt76.sta_poll_lock);
1153 }
1154 
1155 static void mt7915_sta_rc_update(struct ieee80211_hw *hw,
1156 				 struct ieee80211_vif *vif,
1157 				 struct ieee80211_sta *sta,
1158 				 u32 changed)
1159 {
1160 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
1161 	struct mt7915_dev *dev = phy->dev;
1162 
1163 	mt7915_sta_rc_work(&changed, sta);
1164 	ieee80211_queue_work(hw, &dev->rc_work);
1165 }
1166 
1167 static int
1168 mt7915_set_bitrate_mask(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1169 			const struct cfg80211_bitrate_mask *mask)
1170 {
1171 	struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
1172 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
1173 	struct mt7915_dev *dev = phy->dev;
1174 	u32 changed = IEEE80211_RC_SUPP_RATES_CHANGED;
1175 
1176 	mvif->bitrate_mask = *mask;
1177 
1178 	/* if multiple rates across different preambles are given we can
1179 	 * reconfigure this info with all peers using sta_rec command with
1180 	 * the below exception cases.
1181 	 * - single rate : if a rate is passed along with different preambles,
1182 	 * we select the highest one as fixed rate. i.e VHT MCS for VHT peers.
1183 	 * - multiple rates: if it's not in range format i.e 0-{7,8,9} for VHT
1184 	 * then multiple MCS setting (MCS 4,5,6) is not supported.
1185 	 */
1186 	ieee80211_iterate_stations_atomic(hw, mt7915_sta_rc_work, &changed);
1187 	ieee80211_queue_work(hw, &dev->rc_work);
1188 
1189 	return 0;
1190 }
1191 
1192 static void mt7915_sta_set_4addr(struct ieee80211_hw *hw,
1193 				 struct ieee80211_vif *vif,
1194 				 struct ieee80211_sta *sta,
1195 				 bool enabled)
1196 {
1197 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
1198 	struct mt7915_sta *msta = (struct mt7915_sta *)sta->drv_priv;
1199 
1200 	if (enabled)
1201 		set_bit(MT_WCID_FLAG_4ADDR, &msta->wcid.flags);
1202 	else
1203 		clear_bit(MT_WCID_FLAG_4ADDR, &msta->wcid.flags);
1204 
1205 	mt76_connac_mcu_wtbl_update_hdr_trans(&dev->mt76, vif, sta);
1206 }
1207 
1208 static void mt7915_sta_set_decap_offload(struct ieee80211_hw *hw,
1209 				 struct ieee80211_vif *vif,
1210 				 struct ieee80211_sta *sta,
1211 				 bool enabled)
1212 {
1213 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
1214 	struct mt7915_sta *msta = (struct mt7915_sta *)sta->drv_priv;
1215 
1216 	if (enabled)
1217 		set_bit(MT_WCID_FLAG_HDR_TRANS, &msta->wcid.flags);
1218 	else
1219 		clear_bit(MT_WCID_FLAG_HDR_TRANS, &msta->wcid.flags);
1220 
1221 	mt76_connac_mcu_wtbl_update_hdr_trans(&dev->mt76, vif, sta);
1222 }
1223 
1224 static int mt7915_sta_set_txpwr(struct ieee80211_hw *hw,
1225 				struct ieee80211_vif *vif,
1226 				struct ieee80211_sta *sta)
1227 {
1228 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
1229 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
1230 	s16 txpower = sta->deflink.txpwr.power;
1231 	int ret;
1232 
1233 	if (sta->deflink.txpwr.type == NL80211_TX_POWER_AUTOMATIC)
1234 		txpower = 0;
1235 
1236 	mutex_lock(&dev->mt76.mutex);
1237 
1238 	/* NOTE: temporarily use 0 as minimum limit, which is a
1239 	 * global setting and will be applied to all stations.
1240 	 */
1241 	ret = mt7915_mcu_set_txpower_frame_min(phy, 0);
1242 	if (ret)
1243 		goto out;
1244 
1245 	/* This only applies to data frames while pushing traffic,
1246 	 * whereas the management frames or other packets that are
1247 	 * using fixed rate can be configured via TxD.
1248 	 */
1249 	ret = mt7915_mcu_set_txpower_frame(phy, vif, sta, txpower);
1250 
1251 out:
1252 	mutex_unlock(&dev->mt76.mutex);
1253 
1254 	return ret;
1255 }
1256 
1257 static const char mt7915_gstrings_stats[][ETH_GSTRING_LEN] = {
1258 	"tx_ampdu_cnt",
1259 	"tx_stop_q_empty_cnt",
1260 	"tx_mpdu_attempts",
1261 	"tx_mpdu_success",
1262 	"tx_rwp_fail_cnt",
1263 	"tx_rwp_need_cnt",
1264 	"tx_pkt_ebf_cnt",
1265 	"tx_pkt_ibf_cnt",
1266 	"tx_ampdu_len:0-1",
1267 	"tx_ampdu_len:2-10",
1268 	"tx_ampdu_len:11-19",
1269 	"tx_ampdu_len:20-28",
1270 	"tx_ampdu_len:29-37",
1271 	"tx_ampdu_len:38-46",
1272 	"tx_ampdu_len:47-55",
1273 	"tx_ampdu_len:56-79",
1274 	"tx_ampdu_len:80-103",
1275 	"tx_ampdu_len:104-127",
1276 	"tx_ampdu_len:128-151",
1277 	"tx_ampdu_len:152-175",
1278 	"tx_ampdu_len:176-199",
1279 	"tx_ampdu_len:200-223",
1280 	"tx_ampdu_len:224-247",
1281 	"ba_miss_count",
1282 	"tx_beamformer_ppdu_iBF",
1283 	"tx_beamformer_ppdu_eBF",
1284 	"tx_beamformer_rx_feedback_all",
1285 	"tx_beamformer_rx_feedback_he",
1286 	"tx_beamformer_rx_feedback_vht",
1287 	"tx_beamformer_rx_feedback_ht",
1288 	"tx_beamformer_rx_feedback_bw", /* zero based idx: 20, 40, 80, 160 */
1289 	"tx_beamformer_rx_feedback_nc",
1290 	"tx_beamformer_rx_feedback_nr",
1291 	"tx_beamformee_ok_feedback_pkts",
1292 	"tx_beamformee_feedback_trig",
1293 	"tx_mu_beamforming",
1294 	"tx_mu_mpdu",
1295 	"tx_mu_successful_mpdu",
1296 	"tx_su_successful_mpdu",
1297 	"tx_msdu_pack_1",
1298 	"tx_msdu_pack_2",
1299 	"tx_msdu_pack_3",
1300 	"tx_msdu_pack_4",
1301 	"tx_msdu_pack_5",
1302 	"tx_msdu_pack_6",
1303 	"tx_msdu_pack_7",
1304 	"tx_msdu_pack_8",
1305 
1306 	/* rx counters */
1307 	"rx_fifo_full_cnt",
1308 	"rx_mpdu_cnt",
1309 	"channel_idle_cnt",
1310 	"primary_cca_busy_time",
1311 	"secondary_cca_busy_time",
1312 	"primary_energy_detect_time",
1313 	"cck_mdrdy_time",
1314 	"ofdm_mdrdy_time",
1315 	"green_mdrdy_time",
1316 	"rx_vector_mismatch_cnt",
1317 	"rx_delimiter_fail_cnt",
1318 	"rx_mrdy_cnt",
1319 	"rx_len_mismatch_cnt",
1320 	"rx_ampdu_cnt",
1321 	"rx_ampdu_bytes_cnt",
1322 	"rx_ampdu_valid_subframe_cnt",
1323 	"rx_ampdu_valid_subframe_b_cnt",
1324 	"rx_pfdrop_cnt",
1325 	"rx_vec_queue_overflow_drop_cnt",
1326 	"rx_ba_cnt",
1327 
1328 	/* muru mu-mimo and ofdma related stats */
1329 	"dl_cck_cnt",
1330 	"dl_ofdm_cnt",
1331 	"dl_htmix_cnt",
1332 	"dl_htgf_cnt",
1333 	"dl_vht_su_cnt",
1334 	"dl_vht_2mu_cnt",
1335 	"dl_vht_3mu_cnt",
1336 	"dl_vht_4mu_cnt",
1337 	"dl_he_su_cnt",
1338 	"dl_he_ext_su_cnt",
1339 	"dl_he_2ru_cnt",
1340 	"dl_he_2mu_cnt",
1341 	"dl_he_3ru_cnt",
1342 	"dl_he_3mu_cnt",
1343 	"dl_he_4ru_cnt",
1344 	"dl_he_4mu_cnt",
1345 	"dl_he_5to8ru_cnt",
1346 	"dl_he_9to16ru_cnt",
1347 	"dl_he_gtr16ru_cnt",
1348 
1349 	"ul_hetrig_su_cnt",
1350 	"ul_hetrig_2ru_cnt",
1351 	"ul_hetrig_3ru_cnt",
1352 	"ul_hetrig_4ru_cnt",
1353 	"ul_hetrig_5to8ru_cnt",
1354 	"ul_hetrig_9to16ru_cnt",
1355 	"ul_hetrig_gtr16ru_cnt",
1356 	"ul_hetrig_2mu_cnt",
1357 	"ul_hetrig_3mu_cnt",
1358 	"ul_hetrig_4mu_cnt",
1359 
1360 	/* per vif counters */
1361 	"v_tx_mode_cck",
1362 	"v_tx_mode_ofdm",
1363 	"v_tx_mode_ht",
1364 	"v_tx_mode_ht_gf",
1365 	"v_tx_mode_vht",
1366 	"v_tx_mode_he_su",
1367 	"v_tx_mode_he_ext_su",
1368 	"v_tx_mode_he_tb",
1369 	"v_tx_mode_he_mu",
1370 	"v_tx_bw_20",
1371 	"v_tx_bw_40",
1372 	"v_tx_bw_80",
1373 	"v_tx_bw_160",
1374 	"v_tx_mcs_0",
1375 	"v_tx_mcs_1",
1376 	"v_tx_mcs_2",
1377 	"v_tx_mcs_3",
1378 	"v_tx_mcs_4",
1379 	"v_tx_mcs_5",
1380 	"v_tx_mcs_6",
1381 	"v_tx_mcs_7",
1382 	"v_tx_mcs_8",
1383 	"v_tx_mcs_9",
1384 	"v_tx_mcs_10",
1385 	"v_tx_mcs_11",
1386 	"v_tx_nss_1",
1387 	"v_tx_nss_2",
1388 	"v_tx_nss_3",
1389 	"v_tx_nss_4",
1390 };
1391 
1392 #define MT7915_SSTATS_LEN ARRAY_SIZE(mt7915_gstrings_stats)
1393 
1394 /* Ethtool related API */
1395 static
1396 void mt7915_get_et_strings(struct ieee80211_hw *hw,
1397 			   struct ieee80211_vif *vif,
1398 			   u32 sset, u8 *data)
1399 {
1400 	if (sset != ETH_SS_STATS)
1401 		return;
1402 
1403 	memcpy(data, mt7915_gstrings_stats, sizeof(mt7915_gstrings_stats));
1404 	data += sizeof(mt7915_gstrings_stats);
1405 	page_pool_ethtool_stats_get_strings(data);
1406 }
1407 
1408 static
1409 int mt7915_get_et_sset_count(struct ieee80211_hw *hw,
1410 			     struct ieee80211_vif *vif, int sset)
1411 {
1412 	if (sset != ETH_SS_STATS)
1413 		return 0;
1414 
1415 	return MT7915_SSTATS_LEN + page_pool_ethtool_stats_get_count();
1416 }
1417 
1418 static void mt7915_ethtool_worker(void *wi_data, struct ieee80211_sta *sta)
1419 {
1420 	struct mt76_ethtool_worker_info *wi = wi_data;
1421 	struct mt7915_sta *msta = (struct mt7915_sta *)sta->drv_priv;
1422 
1423 	if (msta->vif->mt76.idx != wi->idx)
1424 		return;
1425 
1426 	mt76_ethtool_worker(wi, &msta->wcid.stats, false);
1427 }
1428 
1429 static
1430 void mt7915_get_et_stats(struct ieee80211_hw *hw,
1431 			 struct ieee80211_vif *vif,
1432 			 struct ethtool_stats *stats, u64 *data)
1433 {
1434 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
1435 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
1436 	struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
1437 	struct mt76_mib_stats *mib = &phy->mib;
1438 	struct mt76_ethtool_worker_info wi = {
1439 		.data = data,
1440 		.idx = mvif->mt76.idx,
1441 	};
1442 	/* See mt7915_ampdu_stat_read_phy, etc */
1443 	int i, ei = 0, stats_size;
1444 
1445 	mutex_lock(&dev->mt76.mutex);
1446 
1447 	mt7915_mac_update_stats(phy);
1448 
1449 	data[ei++] = mib->tx_ampdu_cnt;
1450 	data[ei++] = mib->tx_stop_q_empty_cnt;
1451 	data[ei++] = mib->tx_mpdu_attempts_cnt;
1452 	data[ei++] = mib->tx_mpdu_success_cnt;
1453 	data[ei++] = mib->tx_rwp_fail_cnt;
1454 	data[ei++] = mib->tx_rwp_need_cnt;
1455 	data[ei++] = mib->tx_pkt_ebf_cnt;
1456 	data[ei++] = mib->tx_pkt_ibf_cnt;
1457 
1458 	/* Tx ampdu stat */
1459 	for (i = 0; i < 15 /*ARRAY_SIZE(bound)*/; i++)
1460 		data[ei++] = phy->mt76->aggr_stats[i];
1461 
1462 	data[ei++] = phy->mib.ba_miss_cnt;
1463 
1464 	/* Tx Beamformer monitor */
1465 	data[ei++] = mib->tx_bf_ibf_ppdu_cnt;
1466 	data[ei++] = mib->tx_bf_ebf_ppdu_cnt;
1467 
1468 	/* Tx Beamformer Rx feedback monitor */
1469 	data[ei++] = mib->tx_bf_rx_fb_all_cnt;
1470 	data[ei++] = mib->tx_bf_rx_fb_he_cnt;
1471 	data[ei++] = mib->tx_bf_rx_fb_vht_cnt;
1472 	data[ei++] = mib->tx_bf_rx_fb_ht_cnt;
1473 
1474 	data[ei++] = mib->tx_bf_rx_fb_bw;
1475 	data[ei++] = mib->tx_bf_rx_fb_nc_cnt;
1476 	data[ei++] = mib->tx_bf_rx_fb_nr_cnt;
1477 
1478 	/* Tx Beamformee Rx NDPA & Tx feedback report */
1479 	data[ei++] = mib->tx_bf_fb_cpl_cnt;
1480 	data[ei++] = mib->tx_bf_fb_trig_cnt;
1481 
1482 	/* Tx SU & MU counters */
1483 	data[ei++] = mib->tx_bf_cnt;
1484 	data[ei++] = mib->tx_mu_mpdu_cnt;
1485 	data[ei++] = mib->tx_mu_acked_mpdu_cnt;
1486 	data[ei++] = mib->tx_su_acked_mpdu_cnt;
1487 
1488 	/* Tx amsdu info (pack-count histogram) */
1489 	for (i = 0; i < ARRAY_SIZE(mib->tx_amsdu); i++)
1490 		data[ei++] = mib->tx_amsdu[i];
1491 
1492 	/* rx counters */
1493 	data[ei++] = mib->rx_fifo_full_cnt;
1494 	data[ei++] = mib->rx_mpdu_cnt;
1495 	data[ei++] = mib->channel_idle_cnt;
1496 	data[ei++] = mib->primary_cca_busy_time;
1497 	data[ei++] = mib->secondary_cca_busy_time;
1498 	data[ei++] = mib->primary_energy_detect_time;
1499 	data[ei++] = mib->cck_mdrdy_time;
1500 	data[ei++] = mib->ofdm_mdrdy_time;
1501 	data[ei++] = mib->green_mdrdy_time;
1502 	data[ei++] = mib->rx_vector_mismatch_cnt;
1503 	data[ei++] = mib->rx_delimiter_fail_cnt;
1504 	data[ei++] = mib->rx_mrdy_cnt;
1505 	data[ei++] = mib->rx_len_mismatch_cnt;
1506 	data[ei++] = mib->rx_ampdu_cnt;
1507 	data[ei++] = mib->rx_ampdu_bytes_cnt;
1508 	data[ei++] = mib->rx_ampdu_valid_subframe_cnt;
1509 	data[ei++] = mib->rx_ampdu_valid_subframe_bytes_cnt;
1510 	data[ei++] = mib->rx_pfdrop_cnt;
1511 	data[ei++] = mib->rx_vec_queue_overflow_drop_cnt;
1512 	data[ei++] = mib->rx_ba_cnt;
1513 
1514 	data[ei++] = mib->dl_cck_cnt;
1515 	data[ei++] = mib->dl_ofdm_cnt;
1516 	data[ei++] = mib->dl_htmix_cnt;
1517 	data[ei++] = mib->dl_htgf_cnt;
1518 	data[ei++] = mib->dl_vht_su_cnt;
1519 	data[ei++] = mib->dl_vht_2mu_cnt;
1520 	data[ei++] = mib->dl_vht_3mu_cnt;
1521 	data[ei++] = mib->dl_vht_4mu_cnt;
1522 	data[ei++] = mib->dl_he_su_cnt;
1523 	data[ei++] = mib->dl_he_ext_su_cnt;
1524 	data[ei++] = mib->dl_he_2ru_cnt;
1525 	data[ei++] = mib->dl_he_2mu_cnt;
1526 	data[ei++] = mib->dl_he_3ru_cnt;
1527 	data[ei++] = mib->dl_he_3mu_cnt;
1528 	data[ei++] = mib->dl_he_4ru_cnt;
1529 	data[ei++] = mib->dl_he_4mu_cnt;
1530 	data[ei++] = mib->dl_he_5to8ru_cnt;
1531 	data[ei++] = mib->dl_he_9to16ru_cnt;
1532 	data[ei++] = mib->dl_he_gtr16ru_cnt;
1533 
1534 	data[ei++] = mib->ul_hetrig_su_cnt;
1535 	data[ei++] = mib->ul_hetrig_2ru_cnt;
1536 	data[ei++] = mib->ul_hetrig_3ru_cnt;
1537 	data[ei++] = mib->ul_hetrig_4ru_cnt;
1538 	data[ei++] = mib->ul_hetrig_5to8ru_cnt;
1539 	data[ei++] = mib->ul_hetrig_9to16ru_cnt;
1540 	data[ei++] = mib->ul_hetrig_gtr16ru_cnt;
1541 	data[ei++] = mib->ul_hetrig_2mu_cnt;
1542 	data[ei++] = mib->ul_hetrig_3mu_cnt;
1543 	data[ei++] = mib->ul_hetrig_4mu_cnt;
1544 
1545 	/* Add values for all stations owned by this vif */
1546 	wi.initial_stat_idx = ei;
1547 	ieee80211_iterate_stations_atomic(hw, mt7915_ethtool_worker, &wi);
1548 
1549 	mutex_unlock(&dev->mt76.mutex);
1550 
1551 	if (wi.sta_count == 0)
1552 		return;
1553 
1554 	ei += wi.worker_stat_count;
1555 
1556 	mt76_ethtool_page_pool_stats(&dev->mt76, &data[ei], &ei);
1557 
1558 	stats_size = MT7915_SSTATS_LEN + page_pool_ethtool_stats_get_count();
1559 	if (ei != stats_size)
1560 		dev_err(dev->mt76.dev, "ei: %d size: %d", ei, stats_size);
1561 }
1562 
1563 static void
1564 mt7915_twt_teardown_request(struct ieee80211_hw *hw,
1565 			    struct ieee80211_sta *sta,
1566 			    u8 flowid)
1567 {
1568 	struct mt7915_sta *msta = (struct mt7915_sta *)sta->drv_priv;
1569 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
1570 
1571 	mutex_lock(&dev->mt76.mutex);
1572 	mt7915_mac_twt_teardown_flow(dev, msta, flowid);
1573 	mutex_unlock(&dev->mt76.mutex);
1574 }
1575 
1576 static int
1577 mt7915_set_radar_background(struct ieee80211_hw *hw,
1578 			    struct cfg80211_chan_def *chandef)
1579 {
1580 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
1581 	struct mt7915_dev *dev = phy->dev;
1582 	int ret = -EINVAL;
1583 	bool running;
1584 
1585 	mutex_lock(&dev->mt76.mutex);
1586 
1587 	if (dev->mt76.region == NL80211_DFS_UNSET)
1588 		goto out;
1589 
1590 	if (dev->rdd2_phy && dev->rdd2_phy != phy) {
1591 		/* rdd2 is already locked */
1592 		ret = -EBUSY;
1593 		goto out;
1594 	}
1595 
1596 	/* rdd2 already configured on a radar channel */
1597 	running = dev->rdd2_phy &&
1598 		  cfg80211_chandef_valid(&dev->rdd2_chandef) &&
1599 		  !!(dev->rdd2_chandef.chan->flags & IEEE80211_CHAN_RADAR);
1600 
1601 	if (!chandef || running ||
1602 	    !(chandef->chan->flags & IEEE80211_CHAN_RADAR)) {
1603 		ret = mt7915_mcu_rdd_background_enable(phy, NULL);
1604 		if (ret)
1605 			goto out;
1606 
1607 		if (!running)
1608 			goto update_phy;
1609 	}
1610 
1611 	ret = mt7915_mcu_rdd_background_enable(phy, chandef);
1612 	if (ret)
1613 		goto out;
1614 
1615 update_phy:
1616 	dev->rdd2_phy = chandef ? phy : NULL;
1617 	if (chandef)
1618 		dev->rdd2_chandef = *chandef;
1619 out:
1620 	mutex_unlock(&dev->mt76.mutex);
1621 
1622 	return ret;
1623 }
1624 
1625 #ifdef CONFIG_NET_MEDIATEK_SOC_WED
1626 static int
1627 mt7915_net_fill_forward_path(struct ieee80211_hw *hw,
1628 			     struct ieee80211_vif *vif,
1629 			     struct ieee80211_sta *sta,
1630 			     struct net_device_path_ctx *ctx,
1631 			     struct net_device_path *path)
1632 {
1633 	struct mt7915_vif *mvif = (struct mt7915_vif *)vif->drv_priv;
1634 	struct mt7915_sta *msta = (struct mt7915_sta *)sta->drv_priv;
1635 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
1636 	struct mt7915_phy *phy = mt7915_hw_phy(hw);
1637 	struct mtk_wed_device *wed = &dev->mt76.mmio.wed;
1638 
1639 	if (!mtk_wed_device_active(wed))
1640 		return -ENODEV;
1641 
1642 	if (msta->wcid.idx > 0xff)
1643 		return -EIO;
1644 
1645 	path->type = DEV_PATH_MTK_WDMA;
1646 	path->dev = ctx->dev;
1647 	path->mtk_wdma.wdma_idx = wed->wdma_idx;
1648 	path->mtk_wdma.bss = mvif->mt76.idx;
1649 	path->mtk_wdma.wcid = is_mt7915(&dev->mt76) ? msta->wcid.idx : 0x3ff;
1650 	path->mtk_wdma.queue = phy != &dev->phy;
1651 
1652 	ctx->dev = NULL;
1653 
1654 	return 0;
1655 }
1656 
1657 static int
1658 mt7915_net_setup_tc(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1659 		    struct net_device *netdev, enum tc_setup_type type,
1660 		    void *type_data)
1661 {
1662 	struct mt7915_dev *dev = mt7915_hw_dev(hw);
1663 	struct mtk_wed_device *wed = &dev->mt76.mmio.wed;
1664 
1665 	if (!mtk_wed_device_active(wed))
1666 		return -EOPNOTSUPP;
1667 
1668 	return mtk_wed_device_setup_tc(wed, netdev, type, type_data);
1669 }
1670 #endif
1671 
1672 const struct ieee80211_ops mt7915_ops = {
1673 	.tx = mt7915_tx,
1674 	.start = mt7915_start,
1675 	.stop = mt7915_stop,
1676 	.add_interface = mt7915_add_interface,
1677 	.remove_interface = mt7915_remove_interface,
1678 	.config = mt7915_config,
1679 	.conf_tx = mt7915_conf_tx,
1680 	.configure_filter = mt7915_configure_filter,
1681 	.bss_info_changed = mt7915_bss_info_changed,
1682 	.start_ap = mt7915_start_ap,
1683 	.stop_ap = mt7915_stop_ap,
1684 	.sta_add = mt7915_sta_add,
1685 	.sta_remove = mt7915_sta_remove,
1686 	.sta_pre_rcu_remove = mt76_sta_pre_rcu_remove,
1687 	.sta_rc_update = mt7915_sta_rc_update,
1688 	.set_key = mt7915_set_key,
1689 	.ampdu_action = mt7915_ampdu_action,
1690 	.set_rts_threshold = mt7915_set_rts_threshold,
1691 	.wake_tx_queue = mt76_wake_tx_queue,
1692 	.sw_scan_start = mt76_sw_scan,
1693 	.sw_scan_complete = mt76_sw_scan_complete,
1694 	.release_buffered_frames = mt76_release_buffered_frames,
1695 	.get_txpower = mt76_get_txpower,
1696 	.set_sar_specs = mt7915_set_sar_specs,
1697 	.channel_switch_beacon = mt7915_channel_switch_beacon,
1698 	.get_stats = mt7915_get_stats,
1699 	.get_et_sset_count = mt7915_get_et_sset_count,
1700 	.get_et_stats = mt7915_get_et_stats,
1701 	.get_et_strings = mt7915_get_et_strings,
1702 	.get_tsf = mt7915_get_tsf,
1703 	.set_tsf = mt7915_set_tsf,
1704 	.offset_tsf = mt7915_offset_tsf,
1705 	.get_survey = mt76_get_survey,
1706 	.get_antenna = mt76_get_antenna,
1707 	.set_antenna = mt7915_set_antenna,
1708 	.set_bitrate_mask = mt7915_set_bitrate_mask,
1709 	.set_coverage_class = mt7915_set_coverage_class,
1710 	.sta_statistics = mt7915_sta_statistics,
1711 	.sta_set_txpwr = mt7915_sta_set_txpwr,
1712 	.sta_set_4addr = mt7915_sta_set_4addr,
1713 	.sta_set_decap_offload = mt7915_sta_set_decap_offload,
1714 	.add_twt_setup = mt7915_mac_add_twt_setup,
1715 	.twt_teardown_request = mt7915_twt_teardown_request,
1716 	CFG80211_TESTMODE_CMD(mt76_testmode_cmd)
1717 	CFG80211_TESTMODE_DUMP(mt76_testmode_dump)
1718 #ifdef CONFIG_MAC80211_DEBUGFS
1719 	.sta_add_debugfs = mt7915_sta_add_debugfs,
1720 #endif
1721 	.set_radar_background = mt7915_set_radar_background,
1722 #ifdef CONFIG_NET_MEDIATEK_SOC_WED
1723 	.net_fill_forward_path = mt7915_net_fill_forward_path,
1724 	.net_setup_tc = mt7915_net_setup_tc,
1725 #endif
1726 };
1727