wifi: mt76: mt7996: add full system reset knobs into debugfs

Add testing points into debugfs to trigger firmware assert and enable
full system recovery. Also rename knob "fw_ser" to a clear-cut name
"sys_recovery".

Co-developed-by: Bo Jiao <Bo.Jiao@mediatek.com>
Signed-off-by: Bo Jiao <Bo.Jiao@mediatek.com>
Signed-off-by: Ryder Lee <ryder.lee@mediatek.com>
Signed-off-by: Felix Fietkau <nbd@nbd.name>

diff --git a/drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.h b/drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.h
index ac7d581..08b031d 100644 (file)
--- a/drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.h
+++ b/drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.h
@@ -1221,6 +1221,7 @@ enum {
        MCU_UNI_CMD_VOW = 0x37,
        MCU_UNI_CMD_RRO = 0x57,
        MCU_UNI_CMD_OFFCH_SCAN_CTRL = 0x58,
+       MCU_UNI_CMD_ASSERT_DUMP = 0x6f,
 };
 
 enum {

diff --git a/drivers/net/wireless/mediatek/mt76/mt7996/debugfs.c b/drivers/net/wireless/mediatek/mt76/mt7996/debugfs.c
index 9c5e9ac..513ab4b 100644 (file)
--- a/drivers/net/wireless/mediatek/mt76/mt7996/debugfs.c
+++ b/drivers/net/wireless/mediatek/mt76/mt7996/debugfs.c
@@ -48,12 +48,12 @@ DEFINE_DEBUGFS_ATTRIBUTE(fops_implicit_txbf, mt7996_implicit_txbf_get,
 
 /* test knob of system error recovery */
 static ssize_t
-mt7996_fw_ser_set(struct file *file, const char __user *user_buf,
-                 size_t count, loff_t *ppos)
+mt7996_sys_recovery_set(struct file *file, const char __user *user_buf,
+                       size_t count, loff_t *ppos)
 {
        struct mt7996_phy *phy = file->private_data;
        struct mt7996_dev *dev = phy->dev;
-       u8 band_idx = phy->mt76->band_idx;
+       bool band = phy->mt76->band_idx;
        char buf[16];
        int ret = 0;
        u16 val;
@@ -73,17 +73,47 @@ mt7996_fw_ser_set(struct file *file, const char __user *user_buf,
                return -EINVAL;
 
        switch (val) {
-       case SER_SET_RECOVER_L1:
-       case SER_SET_RECOVER_L2:
-       case SER_SET_RECOVER_L3_RX_ABORT:
-       case SER_SET_RECOVER_L3_TX_ABORT:
-       case SER_SET_RECOVER_L3_TX_DISABLE:
-       case SER_SET_RECOVER_L3_BF:
-               ret = mt7996_mcu_set_ser(dev, SER_ENABLE, BIT(val), band_idx);
+       /*
+        * 0: grab firmware current SER state.
+        * 1: trigger & enable system error L1 recovery.
+        * 2: trigger & enable system error L2 recovery.
+        * 3: trigger & enable system error L3 rx abort.
+        * 4: trigger & enable system error L3 tx abort
+        * 5: trigger & enable system error L3 tx disable.
+        * 6: trigger & enable system error L3 bf recovery.
+        * 7: trigger & enable system error L4 mdp recovery.
+        * 8: trigger & enable system error full recovery.
+        * 9: trigger firmware crash.
+        */
+       case UNI_CMD_SER_QUERY:
+               ret = mt7996_mcu_set_ser(dev, UNI_CMD_SER_QUERY, 0, band);
+               break;
+       case UNI_CMD_SER_SET_RECOVER_L1:
+       case UNI_CMD_SER_SET_RECOVER_L2:
+       case UNI_CMD_SER_SET_RECOVER_L3_RX_ABORT:
+       case UNI_CMD_SER_SET_RECOVER_L3_TX_ABORT:
+       case UNI_CMD_SER_SET_RECOVER_L3_TX_DISABLE:
+       case UNI_CMD_SER_SET_RECOVER_L3_BF:
+       case UNI_CMD_SER_SET_RECOVER_L4_MDP:
+               ret = mt7996_mcu_set_ser(dev, UNI_CMD_SER_SET, BIT(val), band);
                if (ret)
                        return ret;
 
-               ret = mt7996_mcu_set_ser(dev, SER_RECOVER, val, band_idx);
+               ret = mt7996_mcu_set_ser(dev, UNI_CMD_SER_TRIGGER, val, band);
+               break;
+
+       /* enable full chip reset */
+       case UNI_CMD_SER_SET_RECOVER_FULL:
+               mt76_set(dev, MT_WFDMA0_MCU_HOST_INT_ENA, MT_MCU_CMD_WDT_MASK);
+               dev->recovery.state |= MT_MCU_CMD_WDT_MASK;
+               mt7996_reset(dev);
+               break;
+
+       /* WARNING: trigger firmware crash */
+       case UNI_CMD_SER_SET_SYSTEM_ASSERT:
+               ret = mt7996_mcu_trigger_assert(dev);
+               if (ret)
+                       return ret;
                break;
        default:
                break;
@@ -92,9 +122,97 @@ mt7996_fw_ser_set(struct file *file, const char __user *user_buf,
        return ret ? ret : count;
 }
 
-static const struct file_operations mt7996_fw_ser_ops = {
-       .write = mt7996_fw_ser_set,
-       /* TODO: ser read */
+static ssize_t
+mt7996_sys_recovery_get(struct file *file, char __user *user_buf,
+                       size_t count, loff_t *ppos)
+{
+       struct mt7996_phy *phy = file->private_data;
+       struct mt7996_dev *dev = phy->dev;
+       char *buff;
+       int desc = 0;
+       ssize_t ret;
+       static const size_t bufsz = 1024;
+
+       buff = kmalloc(bufsz, GFP_KERNEL);
+       if (!buff)
+               return -ENOMEM;
+
+       /* HELP */
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "Please echo the correct value ...\n");
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "0: grab firmware transient SER state\n");
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "1: trigger system error L1 recovery\n");
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "2: trigger system error L2 recovery\n");
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "3: trigger system error L3 rx abort\n");
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "4: trigger system error L3 tx abort\n");
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "5: trigger system error L3 tx disable\n");
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "6: trigger system error L3 bf recovery\n");
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "7: trigger system error L4 mdp recovery\n");
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "8: trigger system error full recovery\n");
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "9: trigger firmware crash\n");
+
+       /* SER statistics */
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "\nlet's dump firmware SER statistics...\n");
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "::E  R , SER_STATUS        = 0x%08x\n",
+                         mt76_rr(dev, MT_SWDEF_SER_STATS));
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "::E  R , SER_PLE_ERR       = 0x%08x\n",
+                         mt76_rr(dev, MT_SWDEF_PLE_STATS));
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "::E  R , SER_PLE_ERR_1     = 0x%08x\n",
+                         mt76_rr(dev, MT_SWDEF_PLE1_STATS));
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "::E  R , SER_PLE_ERR_AMSDU = 0x%08x\n",
+                         mt76_rr(dev, MT_SWDEF_PLE_AMSDU_STATS));
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "::E  R , SER_PSE_ERR       = 0x%08x\n",
+                         mt76_rr(dev, MT_SWDEF_PSE_STATS));
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "::E  R , SER_PSE_ERR_1     = 0x%08x\n",
+                         mt76_rr(dev, MT_SWDEF_PSE1_STATS));
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "::E  R , SER_LMAC_WISR6_B0 = 0x%08x\n",
+                         mt76_rr(dev, MT_SWDEF_LAMC_WISR6_BN0_STATS));
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "::E  R , SER_LMAC_WISR6_B1 = 0x%08x\n",
+                         mt76_rr(dev, MT_SWDEF_LAMC_WISR6_BN1_STATS));
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "::E  R , SER_LMAC_WISR6_B2 = 0x%08x\n",
+                         mt76_rr(dev, MT_SWDEF_LAMC_WISR6_BN2_STATS));
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "::E  R , SER_LMAC_WISR7_B0 = 0x%08x\n",
+                         mt76_rr(dev, MT_SWDEF_LAMC_WISR7_BN0_STATS));
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "::E  R , SER_LMAC_WISR7_B1 = 0x%08x\n",
+                         mt76_rr(dev, MT_SWDEF_LAMC_WISR7_BN1_STATS));
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "::E  R , SER_LMAC_WISR7_B2 = 0x%08x\n",
+                         mt76_rr(dev, MT_SWDEF_LAMC_WISR7_BN2_STATS));
+       desc += scnprintf(buff + desc, bufsz - desc,
+                         "\nSYS_RESET_COUNT: WM %d, WA %d\n",
+                         dev->recovery.wm_reset_count,
+                         dev->recovery.wa_reset_count);
+
+       ret = simple_read_from_buffer(user_buf, count, ppos, buff, desc);
+       kfree(buff);
+       return ret;
+}
+
+static const struct file_operations mt7996_sys_recovery_ops = {
+       .write = mt7996_sys_recovery_set,
+       .read = mt7996_sys_recovery_get,
        .open = simple_open,
        .llseek = default_llseek,
 };
@@ -674,6 +792,8 @@ int mt7996_init_debugfs(struct mt7996_phy *phy)
        debugfs_create_file("xmit-queues", 0400, dir, phy,
                            &mt7996_xmit_queues_fops);
        debugfs_create_file("tx_stats", 0400, dir, phy, &mt7996_tx_stats_fops);
+       debugfs_create_file("sys_recovery", 0600, dir, phy,
+                           &mt7996_sys_recovery_ops);
        debugfs_create_file("fw_debug_wm", 0600, dir, dev, &fops_fw_debug_wm);
        debugfs_create_file("fw_debug_wa", 0600, dir, dev, &fops_fw_debug_wa);
        debugfs_create_file("fw_debug_bin", 0600, dir, dev, &fops_fw_debug_bin);
@@ -684,7 +804,6 @@ int mt7996_init_debugfs(struct mt7996_phy *phy)
                            &fops_implicit_txbf);
        debugfs_create_devm_seqfile(dev->mt76.dev, "twt_stats", dir,
                                    mt7996_twt_stats);
-       debugfs_create_file("fw_ser", 0600, dir, phy, &mt7996_fw_ser_ops);
        debugfs_create_file("rf_regval", 0600, dir, dev, &fops_rf_regval);
 
        if (phy->mt76->cap.has_5ghz) {

diff --git a/drivers/net/wireless/mediatek/mt76/mt7996/mcu.c b/drivers/net/wireless/mediatek/mt76/mt7996/mcu.c
index 7a73f1a..c99605a 100644 (file)
--- a/drivers/net/wireless/mediatek/mt76/mt7996/mcu.c
+++ b/drivers/net/wireless/mediatek/mt76/mt7996/mcu.c
@@ -3615,6 +3615,22 @@ int mt7996_mcu_rf_regval(struct mt7996_dev *dev, u32 regidx, u32 *val, bool set)
        return 0;
 }
 
+int mt7996_mcu_trigger_assert(struct mt7996_dev *dev)
+{
+       struct {
+               __le16 tag;
+               __le16 len;
+               u8 enable;
+               u8 rsv[3];
+       } __packed req = {
+               .len = cpu_to_le16(sizeof(req) - 4),
+               .enable = true,
+       };
+
+       return mt76_mcu_send_msg(&dev->mt76, MCU_WM_UNI_CMD(ASSERT_DUMP),
+                                &req, sizeof(req), false);
+}
+
 int mt7996_mcu_set_rro(struct mt7996_dev *dev, u16 tag, u8 val)
 {
        struct {

diff --git a/drivers/net/wireless/mediatek/mt76/mt7996/mcu.h b/drivers/net/wireless/mediatek/mt76/mt7996/mcu.h
index dd0c5ac..6f92b9a 100644 (file)
--- a/drivers/net/wireless/mediatek/mt76/mt7996/mcu.h
+++ b/drivers/net/wireless/mediatek/mt76/mt7996/mcu.h
@@ -648,23 +648,21 @@ enum {
 };
 
 enum {
-       UNI_CMD_SER_QUERY = 0x0,
-       UNI_CMD_SER_SET = 0x2,
-       UNI_CMD_SER_TRIGGER = 0x3,
-};
-
-enum {
-       SER_QUERY,
+       UNI_CMD_SER_QUERY,
        /* recovery */
-       SER_SET_RECOVER_L1,
-       SER_SET_RECOVER_L2,
-       SER_SET_RECOVER_L3_RX_ABORT,
-       SER_SET_RECOVER_L3_TX_ABORT,
-       SER_SET_RECOVER_L3_TX_DISABLE,
-       SER_SET_RECOVER_L3_BF,
+       UNI_CMD_SER_SET_RECOVER_L1,
+       UNI_CMD_SER_SET_RECOVER_L2,
+       UNI_CMD_SER_SET_RECOVER_L3_RX_ABORT,
+       UNI_CMD_SER_SET_RECOVER_L3_TX_ABORT,
+       UNI_CMD_SER_SET_RECOVER_L3_TX_DISABLE,
+       UNI_CMD_SER_SET_RECOVER_L3_BF,
+       UNI_CMD_SER_SET_RECOVER_L4_MDP,
+       UNI_CMD_SER_SET_RECOVER_FULL,
+       UNI_CMD_SER_SET_SYSTEM_ASSERT,
        /* action */
-       SER_ENABLE = 2,
-       SER_RECOVER
+       UNI_CMD_SER_ENABLE = 1,
+       UNI_CMD_SER_SET,
+       UNI_CMD_SER_TRIGGER
 };
 
 enum {

diff --git a/drivers/net/wireless/mediatek/mt76/mt7996/mt7996.h b/drivers/net/wireless/mediatek/mt76/mt7996/mt7996.h
index 1a78016..bc399e8 100644 (file)
--- a/drivers/net/wireless/mediatek/mt76/mt7996/mt7996.h
+++ b/drivers/net/wireless/mediatek/mt76/mt7996/mt7996.h
@@ -441,6 +441,7 @@ int mt7996_mcu_set_rro(struct mt7996_dev *dev, u16 tag, u8 val);
 int mt7996_mcu_wa_cmd(struct mt7996_dev *dev, int cmd, u32 a1, u32 a2, u32 a3);
 int mt7996_mcu_fw_log_2_host(struct mt7996_dev *dev, u8 type, u8 ctrl);
 int mt7996_mcu_fw_dbg_ctrl(struct mt7996_dev *dev, u32 module, u8 level);
+int mt7996_mcu_trigger_assert(struct mt7996_dev *dev);
 void mt7996_mcu_rx_event(struct mt7996_dev *dev, struct sk_buff *skb);
 void mt7996_mcu_exit(struct mt7996_dev *dev);
 

diff --git a/drivers/net/wireless/mediatek/mt76/mt7996/regs.h b/drivers/net/wireless/mediatek/mt76/mt7996/regs.h
index 5ba74b4..fb9b8de 100644 (file)
--- a/drivers/net/wireless/mediatek/mt76/mt7996/regs.h
+++ b/drivers/net/wireless/mediatek/mt76/mt7996/regs.h
@@ -480,6 +480,19 @@ enum base_rev {
 #define MT_SWDEF_MODE                          MT_SWDEF(0x3c)
 #define MT_SWDEF_NORMAL_MODE                   0
 
+#define MT_SWDEF_SER_STATS                     MT_SWDEF(0x040)
+#define MT_SWDEF_PLE_STATS                     MT_SWDEF(0x044)
+#define MT_SWDEF_PLE1_STATS                    MT_SWDEF(0x048)
+#define MT_SWDEF_PLE_AMSDU_STATS               MT_SWDEF(0x04c)
+#define MT_SWDEF_PSE_STATS                     MT_SWDEF(0x050)
+#define MT_SWDEF_PSE1_STATS                    MT_SWDEF(0x054)
+#define MT_SWDEF_LAMC_WISR6_BN0_STATS          MT_SWDEF(0x058)
+#define MT_SWDEF_LAMC_WISR6_BN1_STATS          MT_SWDEF(0x05c)
+#define MT_SWDEF_LAMC_WISR6_BN2_STATS          MT_SWDEF(0x060)
+#define MT_SWDEF_LAMC_WISR7_BN0_STATS          MT_SWDEF(0x064)
+#define MT_SWDEF_LAMC_WISR7_BN1_STATS          MT_SWDEF(0x068)
+#define MT_SWDEF_LAMC_WISR7_BN2_STATS          MT_SWDEF(0x06c)
+
 /* LED */
 #define MT_LED_TOP_BASE                                0x18013000
 #define MT_LED_PHYS(_n)                                (MT_LED_TOP_BASE + (_n))