xref: /openbmc/linux/drivers/net/wireless/ath/ath11k/wmi.c (revision 5dcf42f8b79d1419ad7f6d46d7b5f7dc5bf9cdba)
1 // SPDX-License-Identifier: BSD-3-Clause-Clear
2 /*
3  * Copyright (c) 2018-2019 The Linux Foundation. All rights reserved.
4  */
5 #include <linux/skbuff.h>
6 #include <linux/ctype.h>
7 #include <net/mac80211.h>
8 #include <net/cfg80211.h>
9 #include <linux/completion.h>
10 #include <linux/if_ether.h>
11 #include <linux/types.h>
12 #include <linux/pci.h>
13 #include <linux/uuid.h>
14 #include <linux/time.h>
15 #include <linux/of.h>
16 #include "core.h"
17 #include "debug.h"
18 #include "mac.h"
19 #include "hw.h"
20 #include "peer.h"
21 
22 struct wmi_tlv_policy {
23 	size_t min_len;
24 };
25 
26 struct wmi_tlv_svc_ready_parse {
27 	bool wmi_svc_bitmap_done;
28 };
29 
30 struct wmi_tlv_svc_rdy_ext_parse {
31 	struct ath11k_service_ext_param param;
32 	struct wmi_soc_mac_phy_hw_mode_caps *hw_caps;
33 	struct wmi_hw_mode_capabilities *hw_mode_caps;
34 	u32 n_hw_mode_caps;
35 	u32 tot_phy_id;
36 	struct wmi_hw_mode_capabilities pref_hw_mode_caps;
37 	struct wmi_mac_phy_capabilities *mac_phy_caps;
38 	u32 n_mac_phy_caps;
39 	struct wmi_soc_hal_reg_capabilities *soc_hal_reg_caps;
40 	struct wmi_hal_reg_capabilities_ext *ext_hal_reg_caps;
41 	u32 n_ext_hal_reg_caps;
42 	bool hw_mode_done;
43 	bool mac_phy_done;
44 	bool ext_hal_reg_done;
45 };
46 
47 struct wmi_tlv_rdy_parse {
48 	u32 num_extra_mac_addr;
49 };
50 
51 static const struct wmi_tlv_policy wmi_tlv_policies[] = {
52 	[WMI_TAG_ARRAY_BYTE]
53 		= { .min_len = 0 },
54 	[WMI_TAG_ARRAY_UINT32]
55 		= { .min_len = 0 },
56 	[WMI_TAG_SERVICE_READY_EVENT]
57 		= { .min_len = sizeof(struct wmi_service_ready_event) },
58 	[WMI_TAG_SERVICE_READY_EXT_EVENT]
59 		= { .min_len =  sizeof(struct wmi_service_ready_ext_event) },
60 	[WMI_TAG_SOC_MAC_PHY_HW_MODE_CAPS]
61 		= { .min_len = sizeof(struct wmi_soc_mac_phy_hw_mode_caps) },
62 	[WMI_TAG_SOC_HAL_REG_CAPABILITIES]
63 		= { .min_len = sizeof(struct wmi_soc_hal_reg_capabilities) },
64 	[WMI_TAG_VDEV_START_RESPONSE_EVENT]
65 		= { .min_len = sizeof(struct wmi_vdev_start_resp_event) },
66 	[WMI_TAG_PEER_DELETE_RESP_EVENT]
67 		= { .min_len = sizeof(struct wmi_peer_delete_resp_event) },
68 	[WMI_TAG_OFFLOAD_BCN_TX_STATUS_EVENT]
69 		= { .min_len = sizeof(struct wmi_bcn_tx_status_event) },
70 	[WMI_TAG_VDEV_STOPPED_EVENT]
71 		= { .min_len = sizeof(struct wmi_vdev_stopped_event) },
72 	[WMI_TAG_REG_CHAN_LIST_CC_EVENT]
73 		= { .min_len = sizeof(struct wmi_reg_chan_list_cc_event) },
74 	[WMI_TAG_MGMT_RX_HDR]
75 		= { .min_len = sizeof(struct wmi_mgmt_rx_hdr) },
76 	[WMI_TAG_MGMT_TX_COMPL_EVENT]
77 		= { .min_len = sizeof(struct wmi_mgmt_tx_compl_event) },
78 	[WMI_TAG_SCAN_EVENT]
79 		= { .min_len = sizeof(struct wmi_scan_event) },
80 	[WMI_TAG_PEER_STA_KICKOUT_EVENT]
81 		= { .min_len = sizeof(struct wmi_peer_sta_kickout_event) },
82 	[WMI_TAG_ROAM_EVENT]
83 		= { .min_len = sizeof(struct wmi_roam_event) },
84 	[WMI_TAG_CHAN_INFO_EVENT]
85 		= { .min_len = sizeof(struct wmi_chan_info_event) },
86 	[WMI_TAG_PDEV_BSS_CHAN_INFO_EVENT]
87 		= { .min_len = sizeof(struct wmi_pdev_bss_chan_info_event) },
88 	[WMI_TAG_VDEV_INSTALL_KEY_COMPLETE_EVENT]
89 		= { .min_len = sizeof(struct wmi_vdev_install_key_compl_event) },
90 	[WMI_TAG_READY_EVENT] = {
91 		.min_len = sizeof(struct wmi_ready_event_min) },
92 	[WMI_TAG_SERVICE_AVAILABLE_EVENT]
93 		= {.min_len = sizeof(struct wmi_service_available_event) },
94 	[WMI_TAG_PEER_ASSOC_CONF_EVENT]
95 		= { .min_len = sizeof(struct wmi_peer_assoc_conf_event) },
96 	[WMI_TAG_STATS_EVENT]
97 		= { .min_len = sizeof(struct wmi_stats_event) },
98 	[WMI_TAG_PDEV_CTL_FAILSAFE_CHECK_EVENT]
99 		= { .min_len = sizeof(struct wmi_pdev_ctl_failsafe_chk_event) },
100 };
101 
102 #define PRIMAP(_hw_mode_) \
103 	[_hw_mode_] = _hw_mode_##_PRI
104 
105 static const int ath11k_hw_mode_pri_map[] = {
106 	PRIMAP(WMI_HOST_HW_MODE_SINGLE),
107 	PRIMAP(WMI_HOST_HW_MODE_DBS),
108 	PRIMAP(WMI_HOST_HW_MODE_SBS_PASSIVE),
109 	PRIMAP(WMI_HOST_HW_MODE_SBS),
110 	PRIMAP(WMI_HOST_HW_MODE_DBS_SBS),
111 	PRIMAP(WMI_HOST_HW_MODE_DBS_OR_SBS),
112 	/* keep last */
113 	PRIMAP(WMI_HOST_HW_MODE_MAX),
114 };
115 
116 static int
117 ath11k_wmi_tlv_iter(struct ath11k_base *ab, const void *ptr, size_t len,
118 		    int (*iter)(struct ath11k_base *ab, u16 tag, u16 len,
119 				const void *ptr, void *data),
120 		    void *data)
121 {
122 	const void *begin = ptr;
123 	const struct wmi_tlv *tlv;
124 	u16 tlv_tag, tlv_len;
125 	int ret;
126 
127 	while (len > 0) {
128 		if (len < sizeof(*tlv)) {
129 			ath11k_err(ab, "wmi tlv parse failure at byte %zd (%zu bytes left, %zu expected)\n",
130 				   ptr - begin, len, sizeof(*tlv));
131 			return -EINVAL;
132 		}
133 
134 		tlv = ptr;
135 		tlv_tag = FIELD_GET(WMI_TLV_TAG, tlv->header);
136 		tlv_len = FIELD_GET(WMI_TLV_LEN, tlv->header);
137 		ptr += sizeof(*tlv);
138 		len -= sizeof(*tlv);
139 
140 		if (tlv_len > len) {
141 			ath11k_err(ab, "wmi tlv parse failure of tag %hhu at byte %zd (%zu bytes left, %hhu expected)\n",
142 				   tlv_tag, ptr - begin, len, tlv_len);
143 			return -EINVAL;
144 		}
145 
146 		if (tlv_tag < ARRAY_SIZE(wmi_tlv_policies) &&
147 		    wmi_tlv_policies[tlv_tag].min_len &&
148 		    wmi_tlv_policies[tlv_tag].min_len > tlv_len) {
149 			ath11k_err(ab, "wmi tlv parse failure of tag %hhu at byte %zd (%hhu bytes is less than min length %zu)\n",
150 				   tlv_tag, ptr - begin, tlv_len,
151 				   wmi_tlv_policies[tlv_tag].min_len);
152 			return -EINVAL;
153 		}
154 
155 		ret = iter(ab, tlv_tag, tlv_len, ptr, data);
156 		if (ret)
157 			return ret;
158 
159 		ptr += tlv_len;
160 		len -= tlv_len;
161 	}
162 
163 	return 0;
164 }
165 
166 static int ath11k_wmi_tlv_iter_parse(struct ath11k_base *ab, u16 tag, u16 len,
167 				     const void *ptr, void *data)
168 {
169 	const void **tb = data;
170 
171 	if (tag < WMI_TAG_MAX)
172 		tb[tag] = ptr;
173 
174 	return 0;
175 }
176 
177 static int ath11k_wmi_tlv_parse(struct ath11k_base *ar, const void **tb,
178 				const void *ptr, size_t len)
179 {
180 	return ath11k_wmi_tlv_iter(ar, ptr, len, ath11k_wmi_tlv_iter_parse,
181 				   (void *)tb);
182 }
183 
184 static const void **
185 ath11k_wmi_tlv_parse_alloc(struct ath11k_base *ab, const void *ptr,
186 			   size_t len, gfp_t gfp)
187 {
188 	const void **tb;
189 	int ret;
190 
191 	tb = kcalloc(WMI_TAG_MAX, sizeof(*tb), gfp);
192 	if (!tb)
193 		return ERR_PTR(-ENOMEM);
194 
195 	ret = ath11k_wmi_tlv_parse(ab, tb, ptr, len);
196 	if (ret) {
197 		kfree(tb);
198 		return ERR_PTR(ret);
199 	}
200 
201 	return tb;
202 }
203 
204 static int ath11k_wmi_cmd_send_nowait(struct ath11k_pdev_wmi *wmi, struct sk_buff *skb,
205 				      u32 cmd_id)
206 {
207 	struct ath11k_skb_cb *skb_cb = ATH11K_SKB_CB(skb);
208 	struct ath11k_base *ab = wmi->wmi_ab->ab;
209 	struct wmi_cmd_hdr *cmd_hdr;
210 	int ret;
211 	u32 cmd = 0;
212 
213 	if (skb_push(skb, sizeof(struct wmi_cmd_hdr)) == NULL)
214 		return -ENOMEM;
215 
216 	cmd |= FIELD_PREP(WMI_CMD_HDR_CMD_ID, cmd_id);
217 
218 	cmd_hdr = (struct wmi_cmd_hdr *)skb->data;
219 	cmd_hdr->cmd_id = cmd;
220 
221 	memset(skb_cb, 0, sizeof(*skb_cb));
222 	ret = ath11k_htc_send(&ab->htc, wmi->eid, skb);
223 
224 	if (ret)
225 		goto err_pull;
226 
227 	return 0;
228 
229 err_pull:
230 	skb_pull(skb, sizeof(struct wmi_cmd_hdr));
231 	return ret;
232 }
233 
234 int ath11k_wmi_cmd_send(struct ath11k_pdev_wmi *wmi, struct sk_buff *skb,
235 			u32 cmd_id)
236 {
237 	struct ath11k_wmi_base *wmi_sc = wmi->wmi_ab;
238 	int ret = -EOPNOTSUPP;
239 
240 	might_sleep();
241 
242 	wait_event_timeout(wmi_sc->tx_credits_wq, ({
243 		ret = ath11k_wmi_cmd_send_nowait(wmi, skb, cmd_id);
244 
245 		if (ret && test_bit(ATH11K_FLAG_CRASH_FLUSH, &wmi_sc->ab->dev_flags))
246 			ret = -ESHUTDOWN;
247 
248 		(ret != -EAGAIN);
249 	}), WMI_SEND_TIMEOUT_HZ);
250 
251 	if (ret == -EAGAIN)
252 		ath11k_warn(wmi_sc->ab, "wmi command %d timeout\n", cmd_id);
253 
254 	return ret;
255 }
256 
257 static int ath11k_pull_svc_ready_ext(struct ath11k_pdev_wmi *wmi_handle,
258 				     const void *ptr,
259 				     struct ath11k_service_ext_param *param)
260 {
261 	const struct wmi_service_ready_ext_event *ev = ptr;
262 
263 	if (!ev)
264 		return -EINVAL;
265 
266 	/* Move this to host based bitmap */
267 	param->default_conc_scan_config_bits = ev->default_conc_scan_config_bits;
268 	param->default_fw_config_bits =	ev->default_fw_config_bits;
269 	param->he_cap_info = ev->he_cap_info;
270 	param->mpdu_density = ev->mpdu_density;
271 	param->max_bssid_rx_filters = ev->max_bssid_rx_filters;
272 	memcpy(&param->ppet, &ev->ppet, sizeof(param->ppet));
273 
274 	return 0;
275 }
276 
277 static int
278 ath11k_pull_mac_phy_cap_svc_ready_ext(struct ath11k_pdev_wmi *wmi_handle,
279 				      struct wmi_soc_mac_phy_hw_mode_caps *hw_caps,
280 				      struct wmi_hw_mode_capabilities *wmi_hw_mode_caps,
281 				      struct wmi_soc_hal_reg_capabilities *hal_reg_caps,
282 				      struct wmi_mac_phy_capabilities *wmi_mac_phy_caps,
283 				      u8 hw_mode_id, u8 phy_id,
284 				      struct ath11k_pdev *pdev)
285 {
286 	struct wmi_mac_phy_capabilities *mac_phy_caps;
287 	struct ath11k_band_cap *cap_band;
288 	struct ath11k_pdev_cap *pdev_cap = &pdev->cap;
289 	u32 phy_map;
290 	u32 hw_idx, phy_idx = 0;
291 
292 	if (!hw_caps || !wmi_hw_mode_caps || !hal_reg_caps)
293 		return -EINVAL;
294 
295 	for (hw_idx = 0; hw_idx < hw_caps->num_hw_modes; hw_idx++) {
296 		if (hw_mode_id == wmi_hw_mode_caps[hw_idx].hw_mode_id)
297 			break;
298 
299 		phy_map = wmi_hw_mode_caps[hw_idx].phy_id_map;
300 		while (phy_map) {
301 			phy_map >>= 1;
302 			phy_idx++;
303 		}
304 	}
305 
306 	if (hw_idx == hw_caps->num_hw_modes)
307 		return -EINVAL;
308 
309 	phy_idx += phy_id;
310 	if (phy_id >= hal_reg_caps->num_phy)
311 		return -EINVAL;
312 
313 	mac_phy_caps = wmi_mac_phy_caps + phy_idx;
314 
315 	pdev->pdev_id = mac_phy_caps->pdev_id;
316 	pdev_cap->supported_bands = mac_phy_caps->supported_bands;
317 	pdev_cap->ampdu_density = mac_phy_caps->ampdu_density;
318 
319 	/* Take non-zero tx/rx chainmask. If tx/rx chainmask differs from
320 	 * band to band for a single radio, need to see how this should be
321 	 * handled.
322 	 */
323 	if (mac_phy_caps->supported_bands & WMI_HOST_WLAN_2G_CAP) {
324 		pdev_cap->tx_chain_mask = mac_phy_caps->tx_chain_mask_2g;
325 		pdev_cap->rx_chain_mask = mac_phy_caps->rx_chain_mask_2g;
326 	} else if (mac_phy_caps->supported_bands & WMI_HOST_WLAN_5G_CAP) {
327 		pdev_cap->vht_cap = mac_phy_caps->vht_cap_info_5g;
328 		pdev_cap->vht_mcs = mac_phy_caps->vht_supp_mcs_5g;
329 		pdev_cap->he_mcs = mac_phy_caps->he_supp_mcs_5g;
330 		pdev_cap->tx_chain_mask = mac_phy_caps->tx_chain_mask_5g;
331 		pdev_cap->rx_chain_mask = mac_phy_caps->rx_chain_mask_5g;
332 	} else {
333 		return -EINVAL;
334 	}
335 
336 	/* tx/rx chainmask reported from fw depends on the actual hw chains used,
337 	 * For example, for 4x4 capable macphys, first 4 chains can be used for first
338 	 * mac and the remaing 4 chains can be used for the second mac or vice-versa.
339 	 * In this case, tx/rx chainmask 0xf will be advertised for first mac and 0xf0
340 	 * will be advertised for second mac or vice-versa. Compute the shift value for
341 	 * for tx/rx chainmask which will be used to advertise supported ht/vht rates to
342 	 * mac80211.
343 	 */
344 	pdev_cap->tx_chain_mask_shift =
345 			find_first_bit((unsigned long *)&pdev_cap->tx_chain_mask, 32);
346 	pdev_cap->rx_chain_mask_shift =
347 			find_first_bit((unsigned long *)&pdev_cap->rx_chain_mask, 32);
348 
349 	cap_band = &pdev_cap->band[NL80211_BAND_2GHZ];
350 	cap_band->max_bw_supported = mac_phy_caps->max_bw_supported_2g;
351 	cap_band->ht_cap_info = mac_phy_caps->ht_cap_info_2g;
352 	cap_band->he_cap_info[0] = mac_phy_caps->he_cap_info_2g;
353 	cap_band->he_cap_info[1] = mac_phy_caps->he_cap_info_2g_ext;
354 	cap_band->he_mcs = mac_phy_caps->he_supp_mcs_2g;
355 	memcpy(cap_band->he_cap_phy_info, &mac_phy_caps->he_cap_phy_info_2g,
356 	       sizeof(u32) * PSOC_HOST_MAX_PHY_SIZE);
357 	memcpy(&cap_band->he_ppet, &mac_phy_caps->he_ppet2g,
358 	       sizeof(struct ath11k_ppe_threshold));
359 
360 	cap_band = &pdev_cap->band[NL80211_BAND_5GHZ];
361 	cap_band->max_bw_supported = mac_phy_caps->max_bw_supported_5g;
362 	cap_band->ht_cap_info = mac_phy_caps->ht_cap_info_5g;
363 	cap_band->he_cap_info[0] = mac_phy_caps->he_cap_info_5g;
364 	cap_band->he_cap_info[1] = mac_phy_caps->he_cap_info_5g_ext;
365 	cap_band->he_mcs = mac_phy_caps->he_supp_mcs_5g;
366 	memcpy(cap_band->he_cap_phy_info, &mac_phy_caps->he_cap_phy_info_5g,
367 	       sizeof(u32) * PSOC_HOST_MAX_PHY_SIZE);
368 	memcpy(&cap_band->he_ppet, &mac_phy_caps->he_ppet5g,
369 	       sizeof(struct ath11k_ppe_threshold));
370 
371 	cap_band = &pdev_cap->band[NL80211_BAND_6GHZ];
372 	cap_band->max_bw_supported = mac_phy_caps->max_bw_supported_5g;
373 	cap_band->ht_cap_info = mac_phy_caps->ht_cap_info_5g;
374 	cap_band->he_cap_info[0] = mac_phy_caps->he_cap_info_5g;
375 	cap_band->he_cap_info[1] = mac_phy_caps->he_cap_info_5g_ext;
376 	cap_band->he_mcs = mac_phy_caps->he_supp_mcs_5g;
377 	memcpy(cap_band->he_cap_phy_info, &mac_phy_caps->he_cap_phy_info_5g,
378 	       sizeof(u32) * PSOC_HOST_MAX_PHY_SIZE);
379 	memcpy(&cap_band->he_ppet, &mac_phy_caps->he_ppet5g,
380 	       sizeof(struct ath11k_ppe_threshold));
381 
382 	return 0;
383 }
384 
385 static int
386 ath11k_pull_reg_cap_svc_rdy_ext(struct ath11k_pdev_wmi *wmi_handle,
387 				struct wmi_soc_hal_reg_capabilities *reg_caps,
388 				struct wmi_hal_reg_capabilities_ext *wmi_ext_reg_cap,
389 				u8 phy_idx,
390 				struct ath11k_hal_reg_capabilities_ext *param)
391 {
392 	struct wmi_hal_reg_capabilities_ext *ext_reg_cap;
393 
394 	if (!reg_caps || !wmi_ext_reg_cap)
395 		return -EINVAL;
396 
397 	if (phy_idx >= reg_caps->num_phy)
398 		return -EINVAL;
399 
400 	ext_reg_cap = &wmi_ext_reg_cap[phy_idx];
401 
402 	param->phy_id = ext_reg_cap->phy_id;
403 	param->eeprom_reg_domain = ext_reg_cap->eeprom_reg_domain;
404 	param->eeprom_reg_domain_ext =
405 			      ext_reg_cap->eeprom_reg_domain_ext;
406 	param->regcap1 = ext_reg_cap->regcap1;
407 	param->regcap2 = ext_reg_cap->regcap2;
408 	/* check if param->wireless_mode is needed */
409 	param->low_2ghz_chan = ext_reg_cap->low_2ghz_chan;
410 	param->high_2ghz_chan = ext_reg_cap->high_2ghz_chan;
411 	param->low_5ghz_chan = ext_reg_cap->low_5ghz_chan;
412 	param->high_5ghz_chan = ext_reg_cap->high_5ghz_chan;
413 
414 	return 0;
415 }
416 
417 static int ath11k_pull_service_ready_tlv(struct ath11k_base *ab,
418 					 const void *evt_buf,
419 					 struct ath11k_targ_cap *cap)
420 {
421 	const struct wmi_service_ready_event *ev = evt_buf;
422 
423 	if (!ev) {
424 		ath11k_err(ab, "%s: failed by NULL param\n",
425 			   __func__);
426 		return -EINVAL;
427 	}
428 
429 	cap->phy_capability = ev->phy_capability;
430 	cap->max_frag_entry = ev->max_frag_entry;
431 	cap->num_rf_chains = ev->num_rf_chains;
432 	cap->ht_cap_info = ev->ht_cap_info;
433 	cap->vht_cap_info = ev->vht_cap_info;
434 	cap->vht_supp_mcs = ev->vht_supp_mcs;
435 	cap->hw_min_tx_power = ev->hw_min_tx_power;
436 	cap->hw_max_tx_power = ev->hw_max_tx_power;
437 	cap->sys_cap_info = ev->sys_cap_info;
438 	cap->min_pkt_size_enable = ev->min_pkt_size_enable;
439 	cap->max_bcn_ie_size = ev->max_bcn_ie_size;
440 	cap->max_num_scan_channels = ev->max_num_scan_channels;
441 	cap->max_supported_macs = ev->max_supported_macs;
442 	cap->wmi_fw_sub_feat_caps = ev->wmi_fw_sub_feat_caps;
443 	cap->txrx_chainmask = ev->txrx_chainmask;
444 	cap->default_dbs_hw_mode_index = ev->default_dbs_hw_mode_index;
445 	cap->num_msdu_desc = ev->num_msdu_desc;
446 
447 	return 0;
448 }
449 
450 /* Save the wmi_service_bitmap into a linear bitmap. The wmi_services in
451  * wmi_service ready event are advertised in b0-b3 (LSB 4-bits) of each
452  * 4-byte word.
453  */
454 static void ath11k_wmi_service_bitmap_copy(struct ath11k_pdev_wmi *wmi,
455 					   const u32 *wmi_svc_bm)
456 {
457 	int i, j;
458 
459 	for (i = 0, j = 0; i < WMI_SERVICE_BM_SIZE && j < WMI_MAX_SERVICE; i++) {
460 		do {
461 			if (wmi_svc_bm[i] & BIT(j % WMI_SERVICE_BITS_IN_SIZE32))
462 				set_bit(j, wmi->wmi_ab->svc_map);
463 		} while (++j % WMI_SERVICE_BITS_IN_SIZE32);
464 	}
465 }
466 
467 static int ath11k_wmi_tlv_svc_rdy_parse(struct ath11k_base *ab, u16 tag, u16 len,
468 					const void *ptr, void *data)
469 {
470 	struct wmi_tlv_svc_ready_parse *svc_ready = data;
471 	struct ath11k_pdev_wmi *wmi_handle = &ab->wmi_ab.wmi[0];
472 	u16 expect_len;
473 
474 	switch (tag) {
475 	case WMI_TAG_SERVICE_READY_EVENT:
476 		if (ath11k_pull_service_ready_tlv(ab, ptr, &ab->target_caps))
477 			return -EINVAL;
478 		break;
479 
480 	case WMI_TAG_ARRAY_UINT32:
481 		if (!svc_ready->wmi_svc_bitmap_done) {
482 			expect_len = WMI_SERVICE_BM_SIZE * sizeof(u32);
483 			if (len < expect_len) {
484 				ath11k_warn(ab, "invalid len %d for the tag 0x%x\n",
485 					    len, tag);
486 				return -EINVAL;
487 			}
488 
489 			ath11k_wmi_service_bitmap_copy(wmi_handle, ptr);
490 
491 			svc_ready->wmi_svc_bitmap_done = true;
492 		}
493 		break;
494 	default:
495 		break;
496 	}
497 
498 	return 0;
499 }
500 
501 static int ath11k_service_ready_event(struct ath11k_base *ab, struct sk_buff *skb)
502 {
503 	struct wmi_tlv_svc_ready_parse svc_ready = { };
504 	int ret;
505 
506 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
507 				  ath11k_wmi_tlv_svc_rdy_parse,
508 				  &svc_ready);
509 	if (ret) {
510 		ath11k_warn(ab, "failed to parse tlv %d\n", ret);
511 		return ret;
512 	}
513 
514 	return 0;
515 }
516 
517 struct sk_buff *ath11k_wmi_alloc_skb(struct ath11k_wmi_base *wmi_sc, u32 len)
518 {
519 	struct sk_buff *skb;
520 	struct ath11k_base *ab = wmi_sc->ab;
521 	u32 round_len = roundup(len, 4);
522 
523 	skb = ath11k_htc_alloc_skb(ab, WMI_SKB_HEADROOM + round_len);
524 	if (!skb)
525 		return NULL;
526 
527 	skb_reserve(skb, WMI_SKB_HEADROOM);
528 	if (!IS_ALIGNED((unsigned long)skb->data, 4))
529 		ath11k_warn(ab, "unaligned WMI skb data\n");
530 
531 	skb_put(skb, round_len);
532 	memset(skb->data, 0, round_len);
533 
534 	return skb;
535 }
536 
537 int ath11k_wmi_mgmt_send(struct ath11k *ar, u32 vdev_id, u32 buf_id,
538 			 struct sk_buff *frame)
539 {
540 	struct ath11k_pdev_wmi *wmi = ar->wmi;
541 	struct wmi_mgmt_send_cmd *cmd;
542 	struct wmi_tlv *frame_tlv;
543 	struct sk_buff *skb;
544 	u32 buf_len;
545 	int ret, len;
546 
547 	buf_len = frame->len < WMI_MGMT_SEND_DOWNLD_LEN ?
548 		  frame->len : WMI_MGMT_SEND_DOWNLD_LEN;
549 
550 	len = sizeof(*cmd) + sizeof(*frame_tlv) + roundup(buf_len, 4);
551 
552 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
553 	if (!skb)
554 		return -ENOMEM;
555 
556 	cmd = (struct wmi_mgmt_send_cmd *)skb->data;
557 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_MGMT_TX_SEND_CMD) |
558 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
559 	cmd->vdev_id = vdev_id;
560 	cmd->desc_id = buf_id;
561 	cmd->chanfreq = 0;
562 	cmd->paddr_lo = lower_32_bits(ATH11K_SKB_CB(frame)->paddr);
563 	cmd->paddr_hi = upper_32_bits(ATH11K_SKB_CB(frame)->paddr);
564 	cmd->frame_len = frame->len;
565 	cmd->buf_len = buf_len;
566 	cmd->tx_params_valid = 0;
567 
568 	frame_tlv = (struct wmi_tlv *)(skb->data + sizeof(*cmd));
569 	frame_tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
570 			    FIELD_PREP(WMI_TLV_LEN, buf_len);
571 
572 	memcpy(frame_tlv->value, frame->data, buf_len);
573 
574 	ath11k_ce_byte_swap(frame_tlv->value, buf_len);
575 
576 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_MGMT_TX_SEND_CMDID);
577 	if (ret) {
578 		ath11k_warn(ar->ab,
579 			    "failed to submit WMI_MGMT_TX_SEND_CMDID cmd\n");
580 		dev_kfree_skb(skb);
581 	}
582 
583 	return ret;
584 }
585 
586 int ath11k_wmi_vdev_create(struct ath11k *ar, u8 *macaddr,
587 			   struct vdev_create_params *param)
588 {
589 	struct ath11k_pdev_wmi *wmi = ar->wmi;
590 	struct wmi_vdev_create_cmd *cmd;
591 	struct sk_buff *skb;
592 	struct wmi_vdev_txrx_streams *txrx_streams;
593 	struct wmi_tlv *tlv;
594 	int ret, len;
595 	void *ptr;
596 
597 	/* It can be optimized my sending tx/rx chain configuration
598 	 * only for supported bands instead of always sending it for
599 	 * both the bands.
600 	 */
601 	len = sizeof(*cmd) + TLV_HDR_SIZE +
602 		(WMI_NUM_SUPPORTED_BAND_MAX * sizeof(*txrx_streams));
603 
604 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
605 	if (!skb)
606 		return -ENOMEM;
607 
608 	cmd = (struct wmi_vdev_create_cmd *)skb->data;
609 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_CREATE_CMD) |
610 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
611 
612 	cmd->vdev_id = param->if_id;
613 	cmd->vdev_type = param->type;
614 	cmd->vdev_subtype = param->subtype;
615 	cmd->num_cfg_txrx_streams = WMI_NUM_SUPPORTED_BAND_MAX;
616 	cmd->pdev_id = param->pdev_id;
617 	ether_addr_copy(cmd->vdev_macaddr.addr, macaddr);
618 
619 	ptr = skb->data + sizeof(*cmd);
620 	len = WMI_NUM_SUPPORTED_BAND_MAX * sizeof(*txrx_streams);
621 
622 	tlv = ptr;
623 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
624 		      FIELD_PREP(WMI_TLV_LEN, len);
625 
626 	ptr += TLV_HDR_SIZE;
627 	txrx_streams = ptr;
628 	len = sizeof(*txrx_streams);
629 	txrx_streams->tlv_header =
630 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_TXRX_STREAMS) |
631 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
632 	txrx_streams->band = WMI_TPC_CHAINMASK_CONFIG_BAND_2G;
633 	txrx_streams->supported_tx_streams =
634 				 param->chains[NL80211_BAND_2GHZ].tx;
635 	txrx_streams->supported_rx_streams =
636 				 param->chains[NL80211_BAND_2GHZ].rx;
637 
638 	txrx_streams++;
639 	txrx_streams->tlv_header =
640 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_TXRX_STREAMS) |
641 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
642 	txrx_streams->band = WMI_TPC_CHAINMASK_CONFIG_BAND_5G;
643 	txrx_streams->supported_tx_streams =
644 				 param->chains[NL80211_BAND_5GHZ].tx;
645 	txrx_streams->supported_rx_streams =
646 				 param->chains[NL80211_BAND_5GHZ].rx;
647 
648 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_CREATE_CMDID);
649 	if (ret) {
650 		ath11k_warn(ar->ab,
651 			    "failed to submit WMI_VDEV_CREATE_CMDID\n");
652 		dev_kfree_skb(skb);
653 	}
654 
655 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
656 		   "WMI vdev create: id %d type %d subtype %d macaddr %pM pdevid %d\n",
657 		   param->if_id, param->type, param->subtype,
658 		   macaddr, param->pdev_id);
659 
660 	return ret;
661 }
662 
663 int ath11k_wmi_vdev_delete(struct ath11k *ar, u8 vdev_id)
664 {
665 	struct ath11k_pdev_wmi *wmi = ar->wmi;
666 	struct wmi_vdev_delete_cmd *cmd;
667 	struct sk_buff *skb;
668 	int ret;
669 
670 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
671 	if (!skb)
672 		return -ENOMEM;
673 
674 	cmd = (struct wmi_vdev_delete_cmd *)skb->data;
675 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_DELETE_CMD) |
676 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
677 	cmd->vdev_id = vdev_id;
678 
679 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_DELETE_CMDID);
680 	if (ret) {
681 		ath11k_warn(ar->ab, "failed to submit WMI_VDEV_DELETE_CMDID\n");
682 		dev_kfree_skb(skb);
683 	}
684 
685 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "WMI vdev delete id %d\n", vdev_id);
686 
687 	return ret;
688 }
689 
690 int ath11k_wmi_vdev_stop(struct ath11k *ar, u8 vdev_id)
691 {
692 	struct ath11k_pdev_wmi *wmi = ar->wmi;
693 	struct wmi_vdev_stop_cmd *cmd;
694 	struct sk_buff *skb;
695 	int ret;
696 
697 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
698 	if (!skb)
699 		return -ENOMEM;
700 
701 	cmd = (struct wmi_vdev_stop_cmd *)skb->data;
702 
703 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_STOP_CMD) |
704 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
705 	cmd->vdev_id = vdev_id;
706 
707 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_STOP_CMDID);
708 	if (ret) {
709 		ath11k_warn(ar->ab, "failed to submit WMI_VDEV_STOP cmd\n");
710 		dev_kfree_skb(skb);
711 	}
712 
713 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "WMI vdev stop id 0x%x\n", vdev_id);
714 
715 	return ret;
716 }
717 
718 int ath11k_wmi_vdev_down(struct ath11k *ar, u8 vdev_id)
719 {
720 	struct ath11k_pdev_wmi *wmi = ar->wmi;
721 	struct wmi_vdev_down_cmd *cmd;
722 	struct sk_buff *skb;
723 	int ret;
724 
725 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
726 	if (!skb)
727 		return -ENOMEM;
728 
729 	cmd = (struct wmi_vdev_down_cmd *)skb->data;
730 
731 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_DOWN_CMD) |
732 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
733 	cmd->vdev_id = vdev_id;
734 
735 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_DOWN_CMDID);
736 	if (ret) {
737 		ath11k_warn(ar->ab, "failed to submit WMI_VDEV_DOWN cmd\n");
738 		dev_kfree_skb(skb);
739 	}
740 
741 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "WMI vdev down id 0x%x\n", vdev_id);
742 
743 	return ret;
744 }
745 
746 static void ath11k_wmi_put_wmi_channel(struct wmi_channel *chan,
747 				       struct wmi_vdev_start_req_arg *arg)
748 {
749 	memset(chan, 0, sizeof(*chan));
750 
751 	chan->mhz = arg->channel.freq;
752 	chan->band_center_freq1 = arg->channel.band_center_freq1;
753 	if (arg->channel.mode == MODE_11AC_VHT80_80)
754 		chan->band_center_freq2 = arg->channel.band_center_freq2;
755 	else
756 		chan->band_center_freq2 = 0;
757 
758 	chan->info |= FIELD_PREP(WMI_CHAN_INFO_MODE, arg->channel.mode);
759 	if (arg->channel.passive)
760 		chan->info |= WMI_CHAN_INFO_PASSIVE;
761 	if (arg->channel.allow_ibss)
762 		chan->info |= WMI_CHAN_INFO_ADHOC_ALLOWED;
763 	if (arg->channel.allow_ht)
764 		chan->info |= WMI_CHAN_INFO_ALLOW_HT;
765 	if (arg->channel.allow_vht)
766 		chan->info |= WMI_CHAN_INFO_ALLOW_VHT;
767 	if (arg->channel.allow_he)
768 		chan->info |= WMI_CHAN_INFO_ALLOW_HE;
769 	if (arg->channel.ht40plus)
770 		chan->info |= WMI_CHAN_INFO_HT40_PLUS;
771 	if (arg->channel.chan_radar)
772 		chan->info |= WMI_CHAN_INFO_DFS;
773 	if (arg->channel.freq2_radar)
774 		chan->info |= WMI_CHAN_INFO_DFS_FREQ2;
775 
776 	chan->reg_info_1 = FIELD_PREP(WMI_CHAN_REG_INFO1_MAX_PWR,
777 				      arg->channel.max_power) |
778 		FIELD_PREP(WMI_CHAN_REG_INFO1_MAX_REG_PWR,
779 			   arg->channel.max_reg_power);
780 
781 	chan->reg_info_2 = FIELD_PREP(WMI_CHAN_REG_INFO2_ANT_MAX,
782 				      arg->channel.max_antenna_gain) |
783 		FIELD_PREP(WMI_CHAN_REG_INFO2_MAX_TX_PWR,
784 			   arg->channel.max_power);
785 }
786 
787 int ath11k_wmi_vdev_start(struct ath11k *ar, struct wmi_vdev_start_req_arg *arg,
788 			  bool restart)
789 {
790 	struct ath11k_pdev_wmi *wmi = ar->wmi;
791 	struct wmi_vdev_start_request_cmd *cmd;
792 	struct sk_buff *skb;
793 	struct wmi_channel *chan;
794 	struct wmi_tlv *tlv;
795 	void *ptr;
796 	int ret, len;
797 
798 	if (WARN_ON(arg->ssid_len > sizeof(cmd->ssid.ssid)))
799 		return -EINVAL;
800 
801 	len = sizeof(*cmd) + sizeof(*chan) + TLV_HDR_SIZE;
802 
803 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
804 	if (!skb)
805 		return -ENOMEM;
806 
807 	cmd = (struct wmi_vdev_start_request_cmd *)skb->data;
808 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
809 				     WMI_TAG_VDEV_START_REQUEST_CMD) |
810 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
811 	cmd->vdev_id = arg->vdev_id;
812 	cmd->beacon_interval = arg->bcn_intval;
813 	cmd->bcn_tx_rate = arg->bcn_tx_rate;
814 	cmd->dtim_period = arg->dtim_period;
815 	cmd->num_noa_descriptors = arg->num_noa_descriptors;
816 	cmd->preferred_rx_streams = arg->pref_rx_streams;
817 	cmd->preferred_tx_streams = arg->pref_tx_streams;
818 	cmd->cac_duration_ms = arg->cac_duration_ms;
819 	cmd->regdomain = arg->regdomain;
820 	cmd->he_ops = arg->he_ops;
821 
822 	if (!restart) {
823 		if (arg->ssid) {
824 			cmd->ssid.ssid_len = arg->ssid_len;
825 			memcpy(cmd->ssid.ssid, arg->ssid, arg->ssid_len);
826 		}
827 		if (arg->hidden_ssid)
828 			cmd->flags |= WMI_VDEV_START_HIDDEN_SSID;
829 		if (arg->pmf_enabled)
830 			cmd->flags |= WMI_VDEV_START_PMF_ENABLED;
831 	}
832 
833 	cmd->flags |= WMI_VDEV_START_LDPC_RX_ENABLED;
834 
835 	ptr = skb->data + sizeof(*cmd);
836 	chan = ptr;
837 
838 	ath11k_wmi_put_wmi_channel(chan, arg);
839 
840 	chan->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_CHANNEL) |
841 			   FIELD_PREP(WMI_TLV_LEN,
842 				      sizeof(*chan) - TLV_HDR_SIZE);
843 	ptr += sizeof(*chan);
844 
845 	tlv = ptr;
846 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
847 		      FIELD_PREP(WMI_TLV_LEN, 0);
848 
849 	/* Note: This is a nested TLV containing:
850 	 * [wmi_tlv][wmi_p2p_noa_descriptor][wmi_tlv]..
851 	 */
852 
853 	ptr += sizeof(*tlv);
854 
855 	if (restart)
856 		ret = ath11k_wmi_cmd_send(wmi, skb,
857 					  WMI_VDEV_RESTART_REQUEST_CMDID);
858 	else
859 		ret = ath11k_wmi_cmd_send(wmi, skb,
860 					  WMI_VDEV_START_REQUEST_CMDID);
861 	if (ret) {
862 		ath11k_warn(ar->ab, "failed to submit vdev_%s cmd\n",
863 			    restart ? "restart" : "start");
864 		dev_kfree_skb(skb);
865 	}
866 
867 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "vdev %s id 0x%x freq 0x%x mode 0x%x\n",
868 		   restart ? "restart" : "start", arg->vdev_id,
869 		   arg->channel.freq, arg->channel.mode);
870 
871 	return ret;
872 }
873 
874 int ath11k_wmi_vdev_up(struct ath11k *ar, u32 vdev_id, u32 aid, const u8 *bssid)
875 {
876 	struct ath11k_pdev_wmi *wmi = ar->wmi;
877 	struct wmi_vdev_up_cmd *cmd;
878 	struct sk_buff *skb;
879 	int ret;
880 
881 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
882 	if (!skb)
883 		return -ENOMEM;
884 
885 	cmd = (struct wmi_vdev_up_cmd *)skb->data;
886 
887 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_UP_CMD) |
888 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
889 	cmd->vdev_id = vdev_id;
890 	cmd->vdev_assoc_id = aid;
891 
892 	ether_addr_copy(cmd->vdev_bssid.addr, bssid);
893 
894 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_UP_CMDID);
895 	if (ret) {
896 		ath11k_warn(ar->ab, "failed to submit WMI_VDEV_UP cmd\n");
897 		dev_kfree_skb(skb);
898 	}
899 
900 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
901 		   "WMI mgmt vdev up id 0x%x assoc id %d bssid %pM\n",
902 		   vdev_id, aid, bssid);
903 
904 	return ret;
905 }
906 
907 int ath11k_wmi_send_peer_create_cmd(struct ath11k *ar,
908 				    struct peer_create_params *param)
909 {
910 	struct ath11k_pdev_wmi *wmi = ar->wmi;
911 	struct wmi_peer_create_cmd *cmd;
912 	struct sk_buff *skb;
913 	int ret;
914 
915 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
916 	if (!skb)
917 		return -ENOMEM;
918 
919 	cmd = (struct wmi_peer_create_cmd *)skb->data;
920 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PEER_CREATE_CMD) |
921 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
922 
923 	ether_addr_copy(cmd->peer_macaddr.addr, param->peer_addr);
924 	cmd->peer_type = param->peer_type;
925 	cmd->vdev_id = param->vdev_id;
926 
927 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_CREATE_CMDID);
928 	if (ret) {
929 		ath11k_warn(ar->ab, "failed to submit WMI_PEER_CREATE cmd\n");
930 		dev_kfree_skb(skb);
931 	}
932 
933 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
934 		   "WMI peer create vdev_id %d peer_addr %pM\n",
935 		   param->vdev_id, param->peer_addr);
936 
937 	return ret;
938 }
939 
940 int ath11k_wmi_send_peer_delete_cmd(struct ath11k *ar,
941 				    const u8 *peer_addr, u8 vdev_id)
942 {
943 	struct ath11k_pdev_wmi *wmi = ar->wmi;
944 	struct wmi_peer_delete_cmd *cmd;
945 	struct sk_buff *skb;
946 	int ret;
947 
948 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
949 	if (!skb)
950 		return -ENOMEM;
951 
952 	cmd = (struct wmi_peer_delete_cmd *)skb->data;
953 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PEER_DELETE_CMD) |
954 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
955 
956 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
957 	cmd->vdev_id = vdev_id;
958 
959 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
960 		   "WMI peer delete vdev_id %d peer_addr %pM\n",
961 		   vdev_id,  peer_addr);
962 
963 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_DELETE_CMDID);
964 	if (ret) {
965 		ath11k_warn(ar->ab, "failed to send WMI_PEER_DELETE cmd\n");
966 		dev_kfree_skb(skb);
967 	}
968 
969 	return ret;
970 }
971 
972 int ath11k_wmi_send_pdev_set_regdomain(struct ath11k *ar,
973 				       struct pdev_set_regdomain_params *param)
974 {
975 	struct ath11k_pdev_wmi *wmi = ar->wmi;
976 	struct wmi_pdev_set_regdomain_cmd *cmd;
977 	struct sk_buff *skb;
978 	int ret;
979 
980 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
981 	if (!skb)
982 		return -ENOMEM;
983 
984 	cmd = (struct wmi_pdev_set_regdomain_cmd *)skb->data;
985 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
986 				     WMI_TAG_PDEV_SET_REGDOMAIN_CMD) |
987 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
988 
989 	cmd->reg_domain = param->current_rd_in_use;
990 	cmd->reg_domain_2g = param->current_rd_2g;
991 	cmd->reg_domain_5g = param->current_rd_5g;
992 	cmd->conformance_test_limit_2g = param->ctl_2g;
993 	cmd->conformance_test_limit_5g = param->ctl_5g;
994 	cmd->dfs_domain = param->dfs_domain;
995 	cmd->pdev_id = param->pdev_id;
996 
997 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
998 		   "WMI pdev regd rd %d rd2g %d rd5g %d domain %d pdev id %d\n",
999 		   param->current_rd_in_use, param->current_rd_2g,
1000 		   param->current_rd_5g, param->dfs_domain, param->pdev_id);
1001 
1002 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_REGDOMAIN_CMDID);
1003 	if (ret) {
1004 		ath11k_warn(ar->ab,
1005 			    "failed to send WMI_PDEV_SET_REGDOMAIN cmd\n");
1006 		dev_kfree_skb(skb);
1007 	}
1008 
1009 	return ret;
1010 }
1011 
1012 int ath11k_wmi_set_peer_param(struct ath11k *ar, const u8 *peer_addr,
1013 			      u32 vdev_id, u32 param_id, u32 param_val)
1014 {
1015 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1016 	struct wmi_peer_set_param_cmd *cmd;
1017 	struct sk_buff *skb;
1018 	int ret;
1019 
1020 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1021 	if (!skb)
1022 		return -ENOMEM;
1023 
1024 	cmd = (struct wmi_peer_set_param_cmd *)skb->data;
1025 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PEER_SET_PARAM_CMD) |
1026 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1027 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1028 	cmd->vdev_id = vdev_id;
1029 	cmd->param_id = param_id;
1030 	cmd->param_value = param_val;
1031 
1032 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_SET_PARAM_CMDID);
1033 	if (ret) {
1034 		ath11k_warn(ar->ab, "failed to send WMI_PEER_SET_PARAM cmd\n");
1035 		dev_kfree_skb(skb);
1036 	}
1037 
1038 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1039 		   "WMI vdev %d peer 0x%pM set param %d value %d\n",
1040 		   vdev_id, peer_addr, param_id, param_val);
1041 
1042 	return ret;
1043 }
1044 
1045 int ath11k_wmi_send_peer_flush_tids_cmd(struct ath11k *ar,
1046 					u8 peer_addr[ETH_ALEN],
1047 					struct peer_flush_params *param)
1048 {
1049 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1050 	struct wmi_peer_flush_tids_cmd *cmd;
1051 	struct sk_buff *skb;
1052 	int ret;
1053 
1054 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1055 	if (!skb)
1056 		return -ENOMEM;
1057 
1058 	cmd = (struct wmi_peer_flush_tids_cmd *)skb->data;
1059 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PEER_FLUSH_TIDS_CMD) |
1060 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1061 
1062 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1063 	cmd->peer_tid_bitmap = param->peer_tid_bitmap;
1064 	cmd->vdev_id = param->vdev_id;
1065 
1066 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_FLUSH_TIDS_CMDID);
1067 	if (ret) {
1068 		ath11k_warn(ar->ab,
1069 			    "failed to send WMI_PEER_FLUSH_TIDS cmd\n");
1070 		dev_kfree_skb(skb);
1071 	}
1072 
1073 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1074 		   "WMI peer flush vdev_id %d peer_addr %pM tids %08x\n",
1075 		   param->vdev_id, peer_addr, param->peer_tid_bitmap);
1076 
1077 	return ret;
1078 }
1079 
1080 int ath11k_wmi_peer_rx_reorder_queue_setup(struct ath11k *ar,
1081 					   int vdev_id, const u8 *addr,
1082 					   dma_addr_t paddr, u8 tid,
1083 					   u8 ba_window_size_valid,
1084 					   u32 ba_window_size)
1085 {
1086 	struct wmi_peer_reorder_queue_setup_cmd *cmd;
1087 	struct sk_buff *skb;
1088 	int ret;
1089 
1090 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
1091 	if (!skb)
1092 		return -ENOMEM;
1093 
1094 	cmd = (struct wmi_peer_reorder_queue_setup_cmd *)skb->data;
1095 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1096 				     WMI_TAG_REORDER_QUEUE_SETUP_CMD) |
1097 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1098 
1099 	ether_addr_copy(cmd->peer_macaddr.addr, addr);
1100 	cmd->vdev_id = vdev_id;
1101 	cmd->tid = tid;
1102 	cmd->queue_ptr_lo = lower_32_bits(paddr);
1103 	cmd->queue_ptr_hi = upper_32_bits(paddr);
1104 	cmd->queue_no = tid;
1105 	cmd->ba_window_size_valid = ba_window_size_valid;
1106 	cmd->ba_window_size = ba_window_size;
1107 
1108 	ret = ath11k_wmi_cmd_send(ar->wmi, skb,
1109 				  WMI_PEER_REORDER_QUEUE_SETUP_CMDID);
1110 	if (ret) {
1111 		ath11k_warn(ar->ab,
1112 			    "failed to send WMI_PEER_REORDER_QUEUE_SETUP\n");
1113 		dev_kfree_skb(skb);
1114 	}
1115 
1116 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1117 		   "wmi rx reorder queue setup addr %pM vdev_id %d tid %d\n",
1118 		   addr, vdev_id, tid);
1119 
1120 	return ret;
1121 }
1122 
1123 int
1124 ath11k_wmi_rx_reord_queue_remove(struct ath11k *ar,
1125 				 struct rx_reorder_queue_remove_params *param)
1126 {
1127 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1128 	struct wmi_peer_reorder_queue_remove_cmd *cmd;
1129 	struct sk_buff *skb;
1130 	int ret;
1131 
1132 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1133 	if (!skb)
1134 		return -ENOMEM;
1135 
1136 	cmd = (struct wmi_peer_reorder_queue_remove_cmd *)skb->data;
1137 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1138 				     WMI_TAG_REORDER_QUEUE_REMOVE_CMD) |
1139 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1140 
1141 	ether_addr_copy(cmd->peer_macaddr.addr, param->peer_macaddr);
1142 	cmd->vdev_id = param->vdev_id;
1143 	cmd->tid_mask = param->peer_tid_bitmap;
1144 
1145 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1146 		   "%s: peer_macaddr %pM vdev_id %d, tid_map %d", __func__,
1147 		   param->peer_macaddr, param->vdev_id, param->peer_tid_bitmap);
1148 
1149 	ret = ath11k_wmi_cmd_send(wmi, skb,
1150 				  WMI_PEER_REORDER_QUEUE_REMOVE_CMDID);
1151 	if (ret) {
1152 		ath11k_warn(ar->ab,
1153 			    "failed to send WMI_PEER_REORDER_QUEUE_REMOVE_CMDID");
1154 		dev_kfree_skb(skb);
1155 	}
1156 
1157 	return ret;
1158 }
1159 
1160 int ath11k_wmi_pdev_set_param(struct ath11k *ar, u32 param_id,
1161 			      u32 param_value, u8 pdev_id)
1162 {
1163 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1164 	struct wmi_pdev_set_param_cmd *cmd;
1165 	struct sk_buff *skb;
1166 	int ret;
1167 
1168 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1169 	if (!skb)
1170 		return -ENOMEM;
1171 
1172 	cmd = (struct wmi_pdev_set_param_cmd *)skb->data;
1173 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_SET_PARAM_CMD) |
1174 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1175 	cmd->pdev_id = pdev_id;
1176 	cmd->param_id = param_id;
1177 	cmd->param_value = param_value;
1178 
1179 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_PARAM_CMDID);
1180 	if (ret) {
1181 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_SET_PARAM cmd\n");
1182 		dev_kfree_skb(skb);
1183 	}
1184 
1185 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1186 		   "WMI pdev set param %d pdev id %d value %d\n",
1187 		   param_id, pdev_id, param_value);
1188 
1189 	return ret;
1190 }
1191 
1192 int ath11k_wmi_pdev_set_ps_mode(struct ath11k *ar, int vdev_id, u32 enable)
1193 {
1194 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1195 	struct wmi_pdev_set_ps_mode_cmd *cmd;
1196 	struct sk_buff *skb;
1197 	int ret;
1198 
1199 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1200 	if (!skb)
1201 		return -ENOMEM;
1202 
1203 	cmd = (struct wmi_pdev_set_ps_mode_cmd *)skb->data;
1204 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_STA_POWERSAVE_MODE_CMD) |
1205 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1206 	cmd->vdev_id = vdev_id;
1207 	cmd->sta_ps_mode = enable;
1208 
1209 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_STA_POWERSAVE_MODE_CMDID);
1210 	if (ret) {
1211 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_SET_PARAM cmd\n");
1212 		dev_kfree_skb(skb);
1213 	}
1214 
1215 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1216 		   "WMI vdev set psmode %d vdev id %d\n",
1217 		   enable, vdev_id);
1218 
1219 	return ret;
1220 }
1221 
1222 int ath11k_wmi_pdev_suspend(struct ath11k *ar, u32 suspend_opt,
1223 			    u32 pdev_id)
1224 {
1225 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1226 	struct wmi_pdev_suspend_cmd *cmd;
1227 	struct sk_buff *skb;
1228 	int ret;
1229 
1230 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1231 	if (!skb)
1232 		return -ENOMEM;
1233 
1234 	cmd = (struct wmi_pdev_suspend_cmd *)skb->data;
1235 
1236 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_SUSPEND_CMD) |
1237 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1238 
1239 	cmd->suspend_opt = suspend_opt;
1240 	cmd->pdev_id = pdev_id;
1241 
1242 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SUSPEND_CMDID);
1243 	if (ret) {
1244 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_SUSPEND cmd\n");
1245 		dev_kfree_skb(skb);
1246 	}
1247 
1248 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1249 		   "WMI pdev suspend pdev_id %d\n", pdev_id);
1250 
1251 	return ret;
1252 }
1253 
1254 int ath11k_wmi_pdev_resume(struct ath11k *ar, u32 pdev_id)
1255 {
1256 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1257 	struct wmi_pdev_resume_cmd *cmd;
1258 	struct sk_buff *skb;
1259 	int ret;
1260 
1261 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1262 	if (!skb)
1263 		return -ENOMEM;
1264 
1265 	cmd = (struct wmi_pdev_resume_cmd *)skb->data;
1266 
1267 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_RESUME_CMD) |
1268 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1269 	cmd->pdev_id = pdev_id;
1270 
1271 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1272 		   "WMI pdev resume pdev id %d\n", pdev_id);
1273 
1274 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_RESUME_CMDID);
1275 	if (ret) {
1276 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_RESUME cmd\n");
1277 		dev_kfree_skb(skb);
1278 	}
1279 
1280 	return ret;
1281 }
1282 
1283 /* TODO FW Support for the cmd is not available yet.
1284  * Can be tested once the command and corresponding
1285  * event is implemented in FW
1286  */
1287 int ath11k_wmi_pdev_bss_chan_info_request(struct ath11k *ar,
1288 					  enum wmi_bss_chan_info_req_type type)
1289 {
1290 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1291 	struct wmi_pdev_bss_chan_info_req_cmd *cmd;
1292 	struct sk_buff *skb;
1293 	int ret;
1294 
1295 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1296 	if (!skb)
1297 		return -ENOMEM;
1298 
1299 	cmd = (struct wmi_pdev_bss_chan_info_req_cmd *)skb->data;
1300 
1301 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1302 				     WMI_TAG_PDEV_BSS_CHAN_INFO_REQUEST) |
1303 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1304 	cmd->req_type = type;
1305 
1306 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1307 		   "WMI bss chan info req type %d\n", type);
1308 
1309 	ret = ath11k_wmi_cmd_send(wmi, skb,
1310 				  WMI_PDEV_BSS_CHAN_INFO_REQUEST_CMDID);
1311 	if (ret) {
1312 		ath11k_warn(ar->ab,
1313 			    "failed to send WMI_PDEV_BSS_CHAN_INFO_REQUEST cmd\n");
1314 		dev_kfree_skb(skb);
1315 	}
1316 
1317 	return ret;
1318 }
1319 
1320 int ath11k_wmi_send_set_ap_ps_param_cmd(struct ath11k *ar, u8 *peer_addr,
1321 					struct ap_ps_params *param)
1322 {
1323 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1324 	struct wmi_ap_ps_peer_cmd *cmd;
1325 	struct sk_buff *skb;
1326 	int ret;
1327 
1328 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1329 	if (!skb)
1330 		return -ENOMEM;
1331 
1332 	cmd = (struct wmi_ap_ps_peer_cmd *)skb->data;
1333 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_AP_PS_PEER_CMD) |
1334 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1335 
1336 	cmd->vdev_id = param->vdev_id;
1337 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1338 	cmd->param = param->param;
1339 	cmd->value = param->value;
1340 
1341 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_AP_PS_PEER_PARAM_CMDID);
1342 	if (ret) {
1343 		ath11k_warn(ar->ab,
1344 			    "failed to send WMI_AP_PS_PEER_PARAM_CMDID\n");
1345 		dev_kfree_skb(skb);
1346 	}
1347 
1348 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1349 		   "WMI set ap ps vdev id %d peer %pM param %d value %d\n",
1350 		   param->vdev_id, peer_addr, param->param, param->value);
1351 
1352 	return ret;
1353 }
1354 
1355 int ath11k_wmi_set_sta_ps_param(struct ath11k *ar, u32 vdev_id,
1356 				u32 param, u32 param_value)
1357 {
1358 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1359 	struct wmi_sta_powersave_param_cmd *cmd;
1360 	struct sk_buff *skb;
1361 	int ret;
1362 
1363 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1364 	if (!skb)
1365 		return -ENOMEM;
1366 
1367 	cmd = (struct wmi_sta_powersave_param_cmd *)skb->data;
1368 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1369 				     WMI_TAG_STA_POWERSAVE_PARAM_CMD) |
1370 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1371 
1372 	cmd->vdev_id = vdev_id;
1373 	cmd->param = param;
1374 	cmd->value = param_value;
1375 
1376 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1377 		   "WMI set sta ps vdev_id %d param %d value %d\n",
1378 		   vdev_id, param, param_value);
1379 
1380 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_STA_POWERSAVE_PARAM_CMDID);
1381 	if (ret) {
1382 		ath11k_warn(ar->ab, "failed to send WMI_STA_POWERSAVE_PARAM_CMDID");
1383 		dev_kfree_skb(skb);
1384 	}
1385 
1386 	return ret;
1387 }
1388 
1389 int ath11k_wmi_force_fw_hang_cmd(struct ath11k *ar, u32 type, u32 delay_time_ms)
1390 {
1391 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1392 	struct wmi_force_fw_hang_cmd *cmd;
1393 	struct sk_buff *skb;
1394 	int ret, len;
1395 
1396 	len = sizeof(*cmd);
1397 
1398 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
1399 	if (!skb)
1400 		return -ENOMEM;
1401 
1402 	cmd = (struct wmi_force_fw_hang_cmd *)skb->data;
1403 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_FORCE_FW_HANG_CMD) |
1404 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
1405 
1406 	cmd->type = type;
1407 	cmd->delay_time_ms = delay_time_ms;
1408 
1409 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_FORCE_FW_HANG_CMDID);
1410 
1411 	if (ret) {
1412 		ath11k_warn(ar->ab, "Failed to send WMI_FORCE_FW_HANG_CMDID");
1413 		dev_kfree_skb(skb);
1414 	}
1415 	return ret;
1416 }
1417 
1418 int ath11k_wmi_vdev_set_param_cmd(struct ath11k *ar, u32 vdev_id,
1419 				  u32 param_id, u32 param_value)
1420 {
1421 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1422 	struct wmi_vdev_set_param_cmd *cmd;
1423 	struct sk_buff *skb;
1424 	int ret;
1425 
1426 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1427 	if (!skb)
1428 		return -ENOMEM;
1429 
1430 	cmd = (struct wmi_vdev_set_param_cmd *)skb->data;
1431 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_SET_PARAM_CMD) |
1432 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1433 
1434 	cmd->vdev_id = vdev_id;
1435 	cmd->param_id = param_id;
1436 	cmd->param_value = param_value;
1437 
1438 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_SET_PARAM_CMDID);
1439 	if (ret) {
1440 		ath11k_warn(ar->ab,
1441 			    "failed to send WMI_VDEV_SET_PARAM_CMDID\n");
1442 		dev_kfree_skb(skb);
1443 	}
1444 
1445 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1446 		   "WMI vdev id 0x%x set param %d value %d\n",
1447 		   vdev_id, param_id, param_value);
1448 
1449 	return ret;
1450 }
1451 
1452 int ath11k_wmi_send_stats_request_cmd(struct ath11k *ar,
1453 				      struct stats_request_params *param)
1454 {
1455 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1456 	struct wmi_request_stats_cmd *cmd;
1457 	struct sk_buff *skb;
1458 	int ret;
1459 
1460 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1461 	if (!skb)
1462 		return -ENOMEM;
1463 
1464 	cmd = (struct wmi_request_stats_cmd *)skb->data;
1465 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_REQUEST_STATS_CMD) |
1466 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1467 
1468 	cmd->stats_id = param->stats_id;
1469 	cmd->vdev_id = param->vdev_id;
1470 	cmd->pdev_id = param->pdev_id;
1471 
1472 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_REQUEST_STATS_CMDID);
1473 	if (ret) {
1474 		ath11k_warn(ar->ab, "failed to send WMI_REQUEST_STATS cmd\n");
1475 		dev_kfree_skb(skb);
1476 	}
1477 
1478 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1479 		   "WMI request stats 0x%x vdev id %d pdev id %d\n",
1480 		   param->stats_id, param->vdev_id, param->pdev_id);
1481 
1482 	return ret;
1483 }
1484 
1485 int ath11k_wmi_send_pdev_temperature_cmd(struct ath11k *ar)
1486 {
1487 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1488 	struct wmi_get_pdev_temperature_cmd *cmd;
1489 	struct sk_buff *skb;
1490 	int ret;
1491 
1492 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1493 	if (!skb)
1494 		return -ENOMEM;
1495 
1496 	cmd = (struct wmi_get_pdev_temperature_cmd *)skb->data;
1497 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_GET_TEMPERATURE_CMD) |
1498 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1499 	cmd->pdev_id = ar->pdev->pdev_id;
1500 
1501 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_GET_TEMPERATURE_CMDID);
1502 	if (ret) {
1503 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_GET_TEMPERATURE cmd\n");
1504 		dev_kfree_skb(skb);
1505 	}
1506 
1507 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1508 		   "WMI pdev get temperature for pdev_id %d\n", ar->pdev->pdev_id);
1509 
1510 	return ret;
1511 }
1512 
1513 int ath11k_wmi_send_bcn_offload_control_cmd(struct ath11k *ar,
1514 					    u32 vdev_id, u32 bcn_ctrl_op)
1515 {
1516 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1517 	struct wmi_bcn_offload_ctrl_cmd *cmd;
1518 	struct sk_buff *skb;
1519 	int ret;
1520 
1521 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1522 	if (!skb)
1523 		return -ENOMEM;
1524 
1525 	cmd = (struct wmi_bcn_offload_ctrl_cmd *)skb->data;
1526 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1527 				     WMI_TAG_BCN_OFFLOAD_CTRL_CMD) |
1528 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1529 
1530 	cmd->vdev_id = vdev_id;
1531 	cmd->bcn_ctrl_op = bcn_ctrl_op;
1532 
1533 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1534 		   "WMI bcn ctrl offload vdev id %d ctrl_op %d\n",
1535 		   vdev_id, bcn_ctrl_op);
1536 
1537 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_BCN_OFFLOAD_CTRL_CMDID);
1538 	if (ret) {
1539 		ath11k_warn(ar->ab,
1540 			    "failed to send WMI_BCN_OFFLOAD_CTRL_CMDID\n");
1541 		dev_kfree_skb(skb);
1542 	}
1543 
1544 	return ret;
1545 }
1546 
1547 int ath11k_wmi_bcn_tmpl(struct ath11k *ar, u32 vdev_id,
1548 			struct ieee80211_mutable_offsets *offs,
1549 			struct sk_buff *bcn)
1550 {
1551 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1552 	struct wmi_bcn_tmpl_cmd *cmd;
1553 	struct wmi_bcn_prb_info *bcn_prb_info;
1554 	struct wmi_tlv *tlv;
1555 	struct sk_buff *skb;
1556 	void *ptr;
1557 	int ret, len;
1558 	size_t aligned_len = roundup(bcn->len, 4);
1559 
1560 	len = sizeof(*cmd) + sizeof(*bcn_prb_info) + TLV_HDR_SIZE + aligned_len;
1561 
1562 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
1563 	if (!skb)
1564 		return -ENOMEM;
1565 
1566 	cmd = (struct wmi_bcn_tmpl_cmd *)skb->data;
1567 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_BCN_TMPL_CMD) |
1568 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1569 	cmd->vdev_id = vdev_id;
1570 	cmd->tim_ie_offset = offs->tim_offset;
1571 	cmd->csa_switch_count_offset = offs->csa_counter_offs[0];
1572 	cmd->ext_csa_switch_count_offset = offs->csa_counter_offs[1];
1573 	cmd->buf_len = bcn->len;
1574 
1575 	ptr = skb->data + sizeof(*cmd);
1576 
1577 	bcn_prb_info = ptr;
1578 	len = sizeof(*bcn_prb_info);
1579 	bcn_prb_info->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1580 					      WMI_TAG_BCN_PRB_INFO) |
1581 				   FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
1582 	bcn_prb_info->caps = 0;
1583 	bcn_prb_info->erp = 0;
1584 
1585 	ptr += sizeof(*bcn_prb_info);
1586 
1587 	tlv = ptr;
1588 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
1589 		      FIELD_PREP(WMI_TLV_LEN, aligned_len);
1590 	memcpy(tlv->value, bcn->data, bcn->len);
1591 
1592 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_BCN_TMPL_CMDID);
1593 	if (ret) {
1594 		ath11k_warn(ar->ab, "failed to send WMI_BCN_TMPL_CMDID\n");
1595 		dev_kfree_skb(skb);
1596 	}
1597 
1598 	return ret;
1599 }
1600 
1601 int ath11k_wmi_vdev_install_key(struct ath11k *ar,
1602 				struct wmi_vdev_install_key_arg *arg)
1603 {
1604 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1605 	struct wmi_vdev_install_key_cmd *cmd;
1606 	struct wmi_tlv *tlv;
1607 	struct sk_buff *skb;
1608 	int ret, len;
1609 	int key_len_aligned = roundup(arg->key_len, sizeof(uint32_t));
1610 
1611 	len = sizeof(*cmd) + TLV_HDR_SIZE + key_len_aligned;
1612 
1613 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
1614 	if (!skb)
1615 		return -ENOMEM;
1616 
1617 	cmd = (struct wmi_vdev_install_key_cmd *)skb->data;
1618 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_INSTALL_KEY_CMD) |
1619 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1620 	cmd->vdev_id = arg->vdev_id;
1621 	ether_addr_copy(cmd->peer_macaddr.addr, arg->macaddr);
1622 	cmd->key_idx = arg->key_idx;
1623 	cmd->key_flags = arg->key_flags;
1624 	cmd->key_cipher = arg->key_cipher;
1625 	cmd->key_len = arg->key_len;
1626 	cmd->key_txmic_len = arg->key_txmic_len;
1627 	cmd->key_rxmic_len = arg->key_rxmic_len;
1628 
1629 	if (arg->key_rsc_counter)
1630 		memcpy(&cmd->key_rsc_counter, &arg->key_rsc_counter,
1631 		       sizeof(struct wmi_key_seq_counter));
1632 
1633 	tlv = (struct wmi_tlv *)(skb->data + sizeof(*cmd));
1634 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
1635 		      FIELD_PREP(WMI_TLV_LEN, key_len_aligned);
1636 	memcpy(tlv->value, (u8 *)arg->key_data, key_len_aligned);
1637 
1638 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_INSTALL_KEY_CMDID);
1639 	if (ret) {
1640 		ath11k_warn(ar->ab,
1641 			    "failed to send WMI_VDEV_INSTALL_KEY cmd\n");
1642 		dev_kfree_skb(skb);
1643 	}
1644 
1645 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1646 		   "WMI vdev install key idx %d cipher %d len %d\n",
1647 		   arg->key_idx, arg->key_cipher, arg->key_len);
1648 
1649 	return ret;
1650 }
1651 
1652 static inline void
1653 ath11k_wmi_copy_peer_flags(struct wmi_peer_assoc_complete_cmd *cmd,
1654 			   struct peer_assoc_params *param)
1655 {
1656 	cmd->peer_flags = 0;
1657 
1658 	if (param->is_wme_set) {
1659 		if (param->qos_flag)
1660 			cmd->peer_flags |= WMI_PEER_QOS;
1661 		if (param->apsd_flag)
1662 			cmd->peer_flags |= WMI_PEER_APSD;
1663 		if (param->ht_flag)
1664 			cmd->peer_flags |= WMI_PEER_HT;
1665 		if (param->bw_40)
1666 			cmd->peer_flags |= WMI_PEER_40MHZ;
1667 		if (param->bw_80)
1668 			cmd->peer_flags |= WMI_PEER_80MHZ;
1669 		if (param->bw_160)
1670 			cmd->peer_flags |= WMI_PEER_160MHZ;
1671 
1672 		/* Typically if STBC is enabled for VHT it should be enabled
1673 		 * for HT as well
1674 		 **/
1675 		if (param->stbc_flag)
1676 			cmd->peer_flags |= WMI_PEER_STBC;
1677 
1678 		/* Typically if LDPC is enabled for VHT it should be enabled
1679 		 * for HT as well
1680 		 **/
1681 		if (param->ldpc_flag)
1682 			cmd->peer_flags |= WMI_PEER_LDPC;
1683 
1684 		if (param->static_mimops_flag)
1685 			cmd->peer_flags |= WMI_PEER_STATIC_MIMOPS;
1686 		if (param->dynamic_mimops_flag)
1687 			cmd->peer_flags |= WMI_PEER_DYN_MIMOPS;
1688 		if (param->spatial_mux_flag)
1689 			cmd->peer_flags |= WMI_PEER_SPATIAL_MUX;
1690 		if (param->vht_flag)
1691 			cmd->peer_flags |= WMI_PEER_VHT;
1692 		if (param->he_flag)
1693 			cmd->peer_flags |= WMI_PEER_HE;
1694 		if (param->twt_requester)
1695 			cmd->peer_flags |= WMI_PEER_TWT_REQ;
1696 		if (param->twt_responder)
1697 			cmd->peer_flags |= WMI_PEER_TWT_RESP;
1698 	}
1699 
1700 	/* Suppress authorization for all AUTH modes that need 4-way handshake
1701 	 * (during re-association).
1702 	 * Authorization will be done for these modes on key installation.
1703 	 */
1704 	if (param->auth_flag)
1705 		cmd->peer_flags |= WMI_PEER_AUTH;
1706 	if (param->need_ptk_4_way)
1707 		cmd->peer_flags |= WMI_PEER_NEED_PTK_4_WAY;
1708 	else
1709 		cmd->peer_flags &= ~WMI_PEER_NEED_PTK_4_WAY;
1710 	if (param->need_gtk_2_way)
1711 		cmd->peer_flags |= WMI_PEER_NEED_GTK_2_WAY;
1712 	/* safe mode bypass the 4-way handshake */
1713 	if (param->safe_mode_enabled)
1714 		cmd->peer_flags &= ~(WMI_PEER_NEED_PTK_4_WAY |
1715 				     WMI_PEER_NEED_GTK_2_WAY);
1716 
1717 	if (param->is_pmf_enabled)
1718 		cmd->peer_flags |= WMI_PEER_PMF;
1719 
1720 	/* Disable AMSDU for station transmit, if user configures it */
1721 	/* Disable AMSDU for AP transmit to 11n Stations, if user configures
1722 	 * it
1723 	 * if (param->amsdu_disable) Add after FW support
1724 	 **/
1725 
1726 	/* Target asserts if node is marked HT and all MCS is set to 0.
1727 	 * Mark the node as non-HT if all the mcs rates are disabled through
1728 	 * iwpriv
1729 	 **/
1730 	if (param->peer_ht_rates.num_rates == 0)
1731 		cmd->peer_flags &= ~WMI_PEER_HT;
1732 }
1733 
1734 int ath11k_wmi_send_peer_assoc_cmd(struct ath11k *ar,
1735 				   struct peer_assoc_params *param)
1736 {
1737 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1738 	struct wmi_peer_assoc_complete_cmd *cmd;
1739 	struct wmi_vht_rate_set *mcs;
1740 	struct wmi_he_rate_set *he_mcs;
1741 	struct sk_buff *skb;
1742 	struct wmi_tlv *tlv;
1743 	void *ptr;
1744 	u32 peer_legacy_rates_align;
1745 	u32 peer_ht_rates_align;
1746 	int i, ret, len;
1747 
1748 	peer_legacy_rates_align = roundup(param->peer_legacy_rates.num_rates,
1749 					  sizeof(u32));
1750 	peer_ht_rates_align = roundup(param->peer_ht_rates.num_rates,
1751 				      sizeof(u32));
1752 
1753 	len = sizeof(*cmd) +
1754 	      TLV_HDR_SIZE + (peer_legacy_rates_align * sizeof(u8)) +
1755 	      TLV_HDR_SIZE + (peer_ht_rates_align * sizeof(u8)) +
1756 	      sizeof(*mcs) + TLV_HDR_SIZE +
1757 	      (sizeof(*he_mcs) * param->peer_he_mcs_count);
1758 
1759 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
1760 	if (!skb)
1761 		return -ENOMEM;
1762 
1763 	ptr = skb->data;
1764 
1765 	cmd = ptr;
1766 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1767 				     WMI_TAG_PEER_ASSOC_COMPLETE_CMD) |
1768 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1769 
1770 	cmd->vdev_id = param->vdev_id;
1771 
1772 	cmd->peer_new_assoc = param->peer_new_assoc;
1773 	cmd->peer_associd = param->peer_associd;
1774 
1775 	ath11k_wmi_copy_peer_flags(cmd, param);
1776 
1777 	ether_addr_copy(cmd->peer_macaddr.addr, param->peer_mac);
1778 
1779 	cmd->peer_rate_caps = param->peer_rate_caps;
1780 	cmd->peer_caps = param->peer_caps;
1781 	cmd->peer_listen_intval = param->peer_listen_intval;
1782 	cmd->peer_ht_caps = param->peer_ht_caps;
1783 	cmd->peer_max_mpdu = param->peer_max_mpdu;
1784 	cmd->peer_mpdu_density = param->peer_mpdu_density;
1785 	cmd->peer_vht_caps = param->peer_vht_caps;
1786 	cmd->peer_phymode = param->peer_phymode;
1787 
1788 	/* Update 11ax capabilities */
1789 	cmd->peer_he_cap_info = param->peer_he_cap_macinfo[0];
1790 	cmd->peer_he_cap_info_ext = param->peer_he_cap_macinfo[1];
1791 	cmd->peer_he_cap_info_internal = param->peer_he_cap_macinfo_internal;
1792 	cmd->peer_he_ops = param->peer_he_ops;
1793 	memcpy(&cmd->peer_he_cap_phy, &param->peer_he_cap_phyinfo,
1794 	       sizeof(param->peer_he_cap_phyinfo));
1795 	memcpy(&cmd->peer_ppet, &param->peer_ppet,
1796 	       sizeof(param->peer_ppet));
1797 
1798 	/* Update peer legacy rate information */
1799 	ptr += sizeof(*cmd);
1800 
1801 	tlv = ptr;
1802 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
1803 		      FIELD_PREP(WMI_TLV_LEN, peer_legacy_rates_align);
1804 
1805 	ptr += TLV_HDR_SIZE;
1806 
1807 	cmd->num_peer_legacy_rates = param->peer_legacy_rates.num_rates;
1808 	memcpy(ptr, param->peer_legacy_rates.rates,
1809 	       param->peer_legacy_rates.num_rates);
1810 
1811 	/* Update peer HT rate information */
1812 	ptr += peer_legacy_rates_align;
1813 
1814 	tlv = ptr;
1815 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
1816 		      FIELD_PREP(WMI_TLV_LEN, peer_ht_rates_align);
1817 	ptr += TLV_HDR_SIZE;
1818 	cmd->num_peer_ht_rates = param->peer_ht_rates.num_rates;
1819 	memcpy(ptr, param->peer_ht_rates.rates,
1820 	       param->peer_ht_rates.num_rates);
1821 
1822 	/* VHT Rates */
1823 	ptr += peer_ht_rates_align;
1824 
1825 	mcs = ptr;
1826 
1827 	mcs->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VHT_RATE_SET) |
1828 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*mcs) - TLV_HDR_SIZE);
1829 
1830 	cmd->peer_nss = param->peer_nss;
1831 
1832 	/* Update bandwidth-NSS mapping */
1833 	cmd->peer_bw_rxnss_override = 0;
1834 	cmd->peer_bw_rxnss_override |= param->peer_bw_rxnss_override;
1835 
1836 	if (param->vht_capable) {
1837 		mcs->rx_max_rate = param->rx_max_rate;
1838 		mcs->rx_mcs_set = param->rx_mcs_set;
1839 		mcs->tx_max_rate = param->tx_max_rate;
1840 		mcs->tx_mcs_set = param->tx_mcs_set;
1841 	}
1842 
1843 	/* HE Rates */
1844 	cmd->peer_he_mcs = param->peer_he_mcs_count;
1845 
1846 	ptr += sizeof(*mcs);
1847 
1848 	len = param->peer_he_mcs_count * sizeof(*he_mcs);
1849 
1850 	tlv = ptr;
1851 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
1852 		      FIELD_PREP(WMI_TLV_LEN, len);
1853 	ptr += TLV_HDR_SIZE;
1854 
1855 	/* Loop through the HE rate set */
1856 	for (i = 0; i < param->peer_he_mcs_count; i++) {
1857 		he_mcs = ptr;
1858 		he_mcs->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1859 						WMI_TAG_HE_RATE_SET) |
1860 				     FIELD_PREP(WMI_TLV_LEN,
1861 						sizeof(*he_mcs) - TLV_HDR_SIZE);
1862 
1863 		he_mcs->rx_mcs_set = param->peer_he_rx_mcs_set[i];
1864 		he_mcs->tx_mcs_set = param->peer_he_tx_mcs_set[i];
1865 		ptr += sizeof(*he_mcs);
1866 	}
1867 
1868 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_ASSOC_CMDID);
1869 	if (ret) {
1870 		ath11k_warn(ar->ab,
1871 			    "failed to send WMI_PEER_ASSOC_CMDID\n");
1872 		dev_kfree_skb(skb);
1873 	}
1874 
1875 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1876 		   "wmi peer assoc vdev id %d assoc id %d peer mac %pM peer_flags %x rate_caps %x peer_caps %x listen_intval %d ht_caps %x max_mpdu %d nss %d phymode %d peer_mpdu_density %d vht_caps %x he cap_info %x he ops %x he cap_info_ext %x he phy %x %x %x peer_bw_rxnss_override %x\n",
1877 		   cmd->vdev_id, cmd->peer_associd, param->peer_mac,
1878 		   cmd->peer_flags, cmd->peer_rate_caps, cmd->peer_caps,
1879 		   cmd->peer_listen_intval, cmd->peer_ht_caps,
1880 		   cmd->peer_max_mpdu, cmd->peer_nss, cmd->peer_phymode,
1881 		   cmd->peer_mpdu_density,
1882 		   cmd->peer_vht_caps, cmd->peer_he_cap_info,
1883 		   cmd->peer_he_ops, cmd->peer_he_cap_info_ext,
1884 		   cmd->peer_he_cap_phy[0], cmd->peer_he_cap_phy[1],
1885 		   cmd->peer_he_cap_phy[2],
1886 		   cmd->peer_bw_rxnss_override);
1887 
1888 	return ret;
1889 }
1890 
1891 void ath11k_wmi_start_scan_init(struct ath11k *ar,
1892 				struct scan_req_params *arg)
1893 {
1894 	/* setup commonly used values */
1895 	arg->scan_req_id = 1;
1896 	arg->scan_priority = WMI_SCAN_PRIORITY_LOW;
1897 	arg->dwell_time_active = 50;
1898 	arg->dwell_time_active_2g = 0;
1899 	arg->dwell_time_passive = 150;
1900 	arg->min_rest_time = 50;
1901 	arg->max_rest_time = 500;
1902 	arg->repeat_probe_time = 0;
1903 	arg->probe_spacing_time = 0;
1904 	arg->idle_time = 0;
1905 	arg->max_scan_time = 20000;
1906 	arg->probe_delay = 5;
1907 	arg->notify_scan_events = WMI_SCAN_EVENT_STARTED |
1908 				  WMI_SCAN_EVENT_COMPLETED |
1909 				  WMI_SCAN_EVENT_BSS_CHANNEL |
1910 				  WMI_SCAN_EVENT_FOREIGN_CHAN |
1911 				  WMI_SCAN_EVENT_DEQUEUED;
1912 	arg->scan_flags |= WMI_SCAN_CHAN_STAT_EVENT;
1913 	arg->num_bssid = 1;
1914 }
1915 
1916 static inline void
1917 ath11k_wmi_copy_scan_event_cntrl_flags(struct wmi_start_scan_cmd *cmd,
1918 				       struct scan_req_params *param)
1919 {
1920 	/* Scan events subscription */
1921 	if (param->scan_ev_started)
1922 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_STARTED;
1923 	if (param->scan_ev_completed)
1924 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_COMPLETED;
1925 	if (param->scan_ev_bss_chan)
1926 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_BSS_CHANNEL;
1927 	if (param->scan_ev_foreign_chan)
1928 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_FOREIGN_CHAN;
1929 	if (param->scan_ev_dequeued)
1930 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_DEQUEUED;
1931 	if (param->scan_ev_preempted)
1932 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_PREEMPTED;
1933 	if (param->scan_ev_start_failed)
1934 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_START_FAILED;
1935 	if (param->scan_ev_restarted)
1936 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_RESTARTED;
1937 	if (param->scan_ev_foreign_chn_exit)
1938 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_FOREIGN_CHAN_EXIT;
1939 	if (param->scan_ev_suspended)
1940 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_SUSPENDED;
1941 	if (param->scan_ev_resumed)
1942 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_RESUMED;
1943 
1944 	/** Set scan control flags */
1945 	cmd->scan_ctrl_flags = 0;
1946 	if (param->scan_f_passive)
1947 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_PASSIVE;
1948 	if (param->scan_f_strict_passive_pch)
1949 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_STRICT_PASSIVE_ON_PCHN;
1950 	if (param->scan_f_promisc_mode)
1951 		cmd->scan_ctrl_flags |=  WMI_SCAN_FILTER_PROMISCUOS;
1952 	if (param->scan_f_capture_phy_err)
1953 		cmd->scan_ctrl_flags |=  WMI_SCAN_CAPTURE_PHY_ERROR;
1954 	if (param->scan_f_half_rate)
1955 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_HALF_RATE_SUPPORT;
1956 	if (param->scan_f_quarter_rate)
1957 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_QUARTER_RATE_SUPPORT;
1958 	if (param->scan_f_cck_rates)
1959 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_CCK_RATES;
1960 	if (param->scan_f_ofdm_rates)
1961 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_OFDM_RATES;
1962 	if (param->scan_f_chan_stat_evnt)
1963 		cmd->scan_ctrl_flags |=  WMI_SCAN_CHAN_STAT_EVENT;
1964 	if (param->scan_f_filter_prb_req)
1965 		cmd->scan_ctrl_flags |=  WMI_SCAN_FILTER_PROBE_REQ;
1966 	if (param->scan_f_bcast_probe)
1967 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_BCAST_PROBE_REQ;
1968 	if (param->scan_f_offchan_mgmt_tx)
1969 		cmd->scan_ctrl_flags |=  WMI_SCAN_OFFCHAN_MGMT_TX;
1970 	if (param->scan_f_offchan_data_tx)
1971 		cmd->scan_ctrl_flags |=  WMI_SCAN_OFFCHAN_DATA_TX;
1972 	if (param->scan_f_force_active_dfs_chn)
1973 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_FORCE_ACTIVE_ON_DFS;
1974 	if (param->scan_f_add_tpc_ie_in_probe)
1975 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_TPC_IE_IN_PROBE_REQ;
1976 	if (param->scan_f_add_ds_ie_in_probe)
1977 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_DS_IE_IN_PROBE_REQ;
1978 	if (param->scan_f_add_spoofed_mac_in_probe)
1979 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_SPOOF_MAC_IN_PROBE_REQ;
1980 	if (param->scan_f_add_rand_seq_in_probe)
1981 		cmd->scan_ctrl_flags |=  WMI_SCAN_RANDOM_SEQ_NO_IN_PROBE_REQ;
1982 	if (param->scan_f_en_ie_whitelist_in_probe)
1983 		cmd->scan_ctrl_flags |=
1984 			 WMI_SCAN_ENABLE_IE_WHTELIST_IN_PROBE_REQ;
1985 
1986 	/* for adaptive scan mode using 3 bits (21 - 23 bits) */
1987 	WMI_SCAN_SET_DWELL_MODE(cmd->scan_ctrl_flags,
1988 				param->adaptive_dwell_time_mode);
1989 }
1990 
1991 int ath11k_wmi_send_scan_start_cmd(struct ath11k *ar,
1992 				   struct scan_req_params *params)
1993 {
1994 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1995 	struct wmi_start_scan_cmd *cmd;
1996 	struct wmi_ssid *ssid = NULL;
1997 	struct wmi_mac_addr *bssid;
1998 	struct sk_buff *skb;
1999 	struct wmi_tlv *tlv;
2000 	void *ptr;
2001 	int i, ret, len;
2002 	u32 *tmp_ptr;
2003 	u8 extraie_len_with_pad = 0;
2004 
2005 	len = sizeof(*cmd);
2006 
2007 	len += TLV_HDR_SIZE;
2008 	if (params->num_chan)
2009 		len += params->num_chan * sizeof(u32);
2010 
2011 	len += TLV_HDR_SIZE;
2012 	if (params->num_ssids)
2013 		len += params->num_ssids * sizeof(*ssid);
2014 
2015 	len += TLV_HDR_SIZE;
2016 	if (params->num_bssid)
2017 		len += sizeof(*bssid) * params->num_bssid;
2018 
2019 	len += TLV_HDR_SIZE;
2020 	if (params->extraie.len)
2021 		extraie_len_with_pad =
2022 			roundup(params->extraie.len, sizeof(u32));
2023 	len += extraie_len_with_pad;
2024 
2025 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2026 	if (!skb)
2027 		return -ENOMEM;
2028 
2029 	ptr = skb->data;
2030 
2031 	cmd = ptr;
2032 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_START_SCAN_CMD) |
2033 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2034 
2035 	cmd->scan_id = params->scan_id;
2036 	cmd->scan_req_id = params->scan_req_id;
2037 	cmd->vdev_id = params->vdev_id;
2038 	cmd->scan_priority = params->scan_priority;
2039 	cmd->notify_scan_events = params->notify_scan_events;
2040 
2041 	ath11k_wmi_copy_scan_event_cntrl_flags(cmd, params);
2042 
2043 	cmd->dwell_time_active = params->dwell_time_active;
2044 	cmd->dwell_time_active_2g = params->dwell_time_active_2g;
2045 	cmd->dwell_time_passive = params->dwell_time_passive;
2046 	cmd->min_rest_time = params->min_rest_time;
2047 	cmd->max_rest_time = params->max_rest_time;
2048 	cmd->repeat_probe_time = params->repeat_probe_time;
2049 	cmd->probe_spacing_time = params->probe_spacing_time;
2050 	cmd->idle_time = params->idle_time;
2051 	cmd->max_scan_time = params->max_scan_time;
2052 	cmd->probe_delay = params->probe_delay;
2053 	cmd->burst_duration = params->burst_duration;
2054 	cmd->num_chan = params->num_chan;
2055 	cmd->num_bssid = params->num_bssid;
2056 	cmd->num_ssids = params->num_ssids;
2057 	cmd->ie_len = params->extraie.len;
2058 	cmd->n_probes = params->n_probes;
2059 
2060 	ptr += sizeof(*cmd);
2061 
2062 	len = params->num_chan * sizeof(u32);
2063 
2064 	tlv = ptr;
2065 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_UINT32) |
2066 		      FIELD_PREP(WMI_TLV_LEN, len);
2067 	ptr += TLV_HDR_SIZE;
2068 	tmp_ptr = (u32 *)ptr;
2069 
2070 	for (i = 0; i < params->num_chan; ++i)
2071 		tmp_ptr[i] = params->chan_list[i];
2072 
2073 	ptr += len;
2074 
2075 	len = params->num_ssids * sizeof(*ssid);
2076 	tlv = ptr;
2077 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_FIXED_STRUCT) |
2078 		      FIELD_PREP(WMI_TLV_LEN, len);
2079 
2080 	ptr += TLV_HDR_SIZE;
2081 
2082 	if (params->num_ssids) {
2083 		ssid = ptr;
2084 		for (i = 0; i < params->num_ssids; ++i) {
2085 			ssid->ssid_len = params->ssid[i].length;
2086 			memcpy(ssid->ssid, params->ssid[i].ssid,
2087 			       params->ssid[i].length);
2088 			ssid++;
2089 		}
2090 	}
2091 
2092 	ptr += (params->num_ssids * sizeof(*ssid));
2093 	len = params->num_bssid * sizeof(*bssid);
2094 	tlv = ptr;
2095 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_FIXED_STRUCT) |
2096 		      FIELD_PREP(WMI_TLV_LEN, len);
2097 
2098 	ptr += TLV_HDR_SIZE;
2099 	bssid = ptr;
2100 
2101 	if (params->num_bssid) {
2102 		for (i = 0; i < params->num_bssid; ++i) {
2103 			ether_addr_copy(bssid->addr,
2104 					params->bssid_list[i].addr);
2105 			bssid++;
2106 		}
2107 	}
2108 
2109 	ptr += params->num_bssid * sizeof(*bssid);
2110 
2111 	len = extraie_len_with_pad;
2112 	tlv = ptr;
2113 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
2114 		      FIELD_PREP(WMI_TLV_LEN, len);
2115 	ptr += TLV_HDR_SIZE;
2116 
2117 	if (params->extraie.len)
2118 		memcpy(ptr, params->extraie.ptr,
2119 		       params->extraie.len);
2120 
2121 	ptr += extraie_len_with_pad;
2122 
2123 	ret = ath11k_wmi_cmd_send(wmi, skb,
2124 				  WMI_START_SCAN_CMDID);
2125 	if (ret) {
2126 		ath11k_warn(ar->ab, "failed to send WMI_START_SCAN_CMDID\n");
2127 		dev_kfree_skb(skb);
2128 	}
2129 
2130 	return ret;
2131 }
2132 
2133 int ath11k_wmi_send_scan_stop_cmd(struct ath11k *ar,
2134 				  struct scan_cancel_param *param)
2135 {
2136 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2137 	struct wmi_stop_scan_cmd *cmd;
2138 	struct sk_buff *skb;
2139 	int ret;
2140 
2141 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2142 	if (!skb)
2143 		return -ENOMEM;
2144 
2145 	cmd = (struct wmi_stop_scan_cmd *)skb->data;
2146 
2147 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_STOP_SCAN_CMD) |
2148 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2149 
2150 	cmd->vdev_id = param->vdev_id;
2151 	cmd->requestor = param->requester;
2152 	cmd->scan_id = param->scan_id;
2153 	cmd->pdev_id = param->pdev_id;
2154 	/* stop the scan with the corresponding scan_id */
2155 	if (param->req_type == WLAN_SCAN_CANCEL_PDEV_ALL) {
2156 		/* Cancelling all scans */
2157 		cmd->req_type =  WMI_SCAN_STOP_ALL;
2158 	} else if (param->req_type == WLAN_SCAN_CANCEL_VDEV_ALL) {
2159 		/* Cancelling VAP scans */
2160 		cmd->req_type =  WMI_SCN_STOP_VAP_ALL;
2161 	} else if (param->req_type == WLAN_SCAN_CANCEL_SINGLE) {
2162 		/* Cancelling specific scan */
2163 		cmd->req_type =  WMI_SCAN_STOP_ONE;
2164 	} else {
2165 		ath11k_warn(ar->ab, "invalid scan cancel param %d",
2166 			    param->req_type);
2167 		dev_kfree_skb(skb);
2168 		return -EINVAL;
2169 	}
2170 
2171 	ret = ath11k_wmi_cmd_send(wmi, skb,
2172 				  WMI_STOP_SCAN_CMDID);
2173 	if (ret) {
2174 		ath11k_warn(ar->ab, "failed to send WMI_STOP_SCAN_CMDID\n");
2175 		dev_kfree_skb(skb);
2176 	}
2177 
2178 	return ret;
2179 }
2180 
2181 int ath11k_wmi_send_scan_chan_list_cmd(struct ath11k *ar,
2182 				       struct scan_chan_list_params *chan_list)
2183 {
2184 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2185 	struct wmi_scan_chan_list_cmd *cmd;
2186 	struct sk_buff *skb;
2187 	struct wmi_channel *chan_info;
2188 	struct channel_param *tchan_info;
2189 	struct wmi_tlv *tlv;
2190 	void *ptr;
2191 	int i, ret, len;
2192 	u32 *reg1, *reg2;
2193 
2194 	len = sizeof(*cmd) + TLV_HDR_SIZE +
2195 		 sizeof(*chan_info) * chan_list->nallchans;
2196 
2197 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2198 	if (!skb)
2199 		return -ENOMEM;
2200 
2201 	cmd = (struct wmi_scan_chan_list_cmd *)skb->data;
2202 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_SCAN_CHAN_LIST_CMD) |
2203 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2204 
2205 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2206 		   "WMI no.of chan = %d len = %d\n", chan_list->nallchans, len);
2207 	cmd->pdev_id = chan_list->pdev_id;
2208 	cmd->num_scan_chans = chan_list->nallchans;
2209 
2210 	ptr = skb->data + sizeof(*cmd);
2211 
2212 	len = sizeof(*chan_info) * chan_list->nallchans;
2213 	tlv = ptr;
2214 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
2215 		      FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
2216 	ptr += TLV_HDR_SIZE;
2217 
2218 	tchan_info = &chan_list->ch_param[0];
2219 
2220 	for (i = 0; i < chan_list->nallchans; ++i) {
2221 		chan_info = ptr;
2222 		memset(chan_info, 0, sizeof(*chan_info));
2223 		len = sizeof(*chan_info);
2224 		chan_info->tlv_header = FIELD_PREP(WMI_TLV_TAG,
2225 						   WMI_TAG_CHANNEL) |
2226 					FIELD_PREP(WMI_TLV_LEN,
2227 						   len - TLV_HDR_SIZE);
2228 
2229 		reg1 = &chan_info->reg_info_1;
2230 		reg2 = &chan_info->reg_info_2;
2231 		chan_info->mhz = tchan_info->mhz;
2232 		chan_info->band_center_freq1 = tchan_info->cfreq1;
2233 		chan_info->band_center_freq2 = tchan_info->cfreq2;
2234 
2235 		if (tchan_info->is_chan_passive)
2236 			chan_info->info |= WMI_CHAN_INFO_PASSIVE;
2237 		if (tchan_info->allow_he)
2238 			chan_info->info |= WMI_CHAN_INFO_ALLOW_HE;
2239 		else if (tchan_info->allow_vht)
2240 			chan_info->info |= WMI_CHAN_INFO_ALLOW_VHT;
2241 		else if (tchan_info->allow_ht)
2242 			chan_info->info |= WMI_CHAN_INFO_ALLOW_HT;
2243 		if (tchan_info->half_rate)
2244 			chan_info->info |= WMI_CHAN_INFO_HALF_RATE;
2245 		if (tchan_info->quarter_rate)
2246 			chan_info->info |= WMI_CHAN_INFO_QUARTER_RATE;
2247 
2248 		chan_info->info |= FIELD_PREP(WMI_CHAN_INFO_MODE,
2249 					      tchan_info->phy_mode);
2250 		*reg1 |= FIELD_PREP(WMI_CHAN_REG_INFO1_MIN_PWR,
2251 				    tchan_info->minpower);
2252 		*reg1 |= FIELD_PREP(WMI_CHAN_REG_INFO1_MAX_PWR,
2253 				    tchan_info->maxpower);
2254 		*reg1 |= FIELD_PREP(WMI_CHAN_REG_INFO1_MAX_REG_PWR,
2255 				    tchan_info->maxregpower);
2256 		*reg1 |= FIELD_PREP(WMI_CHAN_REG_INFO1_REG_CLS,
2257 				    tchan_info->reg_class_id);
2258 		*reg2 |= FIELD_PREP(WMI_CHAN_REG_INFO2_ANT_MAX,
2259 				    tchan_info->antennamax);
2260 
2261 		ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2262 			   "WMI chan scan list chan[%d] = %u\n",
2263 			   i, chan_info->mhz);
2264 
2265 		ptr += sizeof(*chan_info);
2266 
2267 		tchan_info++;
2268 	}
2269 
2270 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_SCAN_CHAN_LIST_CMDID);
2271 	if (ret) {
2272 		ath11k_warn(ar->ab, "failed to send WMI_SCAN_CHAN_LIST cmd\n");
2273 		dev_kfree_skb(skb);
2274 	}
2275 
2276 	return ret;
2277 }
2278 
2279 int ath11k_wmi_send_wmm_update_cmd_tlv(struct ath11k *ar, u32 vdev_id,
2280 				       struct wmi_wmm_params_all_arg *param)
2281 {
2282 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2283 	struct wmi_vdev_set_wmm_params_cmd *cmd;
2284 	struct wmi_wmm_params *wmm_param;
2285 	struct wmi_wmm_params_arg *wmi_wmm_arg;
2286 	struct sk_buff *skb;
2287 	int ret, ac;
2288 
2289 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2290 	if (!skb)
2291 		return -ENOMEM;
2292 
2293 	cmd = (struct wmi_vdev_set_wmm_params_cmd *)skb->data;
2294 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
2295 				     WMI_TAG_VDEV_SET_WMM_PARAMS_CMD) |
2296 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2297 
2298 	cmd->vdev_id = vdev_id;
2299 	cmd->wmm_param_type = 0;
2300 
2301 	for (ac = 0; ac < WME_NUM_AC; ac++) {
2302 		switch (ac) {
2303 		case WME_AC_BE:
2304 			wmi_wmm_arg = &param->ac_be;
2305 			break;
2306 		case WME_AC_BK:
2307 			wmi_wmm_arg = &param->ac_bk;
2308 			break;
2309 		case WME_AC_VI:
2310 			wmi_wmm_arg = &param->ac_vi;
2311 			break;
2312 		case WME_AC_VO:
2313 			wmi_wmm_arg = &param->ac_vo;
2314 			break;
2315 		}
2316 
2317 		wmm_param = (struct wmi_wmm_params *)&cmd->wmm_params[ac];
2318 		wmm_param->tlv_header =
2319 				FIELD_PREP(WMI_TLV_TAG,
2320 					   WMI_TAG_VDEV_SET_WMM_PARAMS_CMD) |
2321 				FIELD_PREP(WMI_TLV_LEN,
2322 					   sizeof(*wmm_param) - TLV_HDR_SIZE);
2323 
2324 		wmm_param->aifs = wmi_wmm_arg->aifs;
2325 		wmm_param->cwmin = wmi_wmm_arg->cwmin;
2326 		wmm_param->cwmax = wmi_wmm_arg->cwmax;
2327 		wmm_param->txoplimit = wmi_wmm_arg->txop;
2328 		wmm_param->acm = wmi_wmm_arg->acm;
2329 		wmm_param->no_ack = wmi_wmm_arg->no_ack;
2330 
2331 		ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2332 			   "wmi wmm set ac %d aifs %d cwmin %d cwmax %d txop %d acm %d no_ack %d\n",
2333 			   ac, wmm_param->aifs, wmm_param->cwmin,
2334 			   wmm_param->cwmax, wmm_param->txoplimit,
2335 			   wmm_param->acm, wmm_param->no_ack);
2336 	}
2337 	ret = ath11k_wmi_cmd_send(wmi, skb,
2338 				  WMI_VDEV_SET_WMM_PARAMS_CMDID);
2339 	if (ret) {
2340 		ath11k_warn(ar->ab,
2341 			    "failed to send WMI_VDEV_SET_WMM_PARAMS_CMDID");
2342 		dev_kfree_skb(skb);
2343 	}
2344 
2345 	return ret;
2346 }
2347 
2348 int ath11k_wmi_send_dfs_phyerr_offload_enable_cmd(struct ath11k *ar,
2349 						  u32 pdev_id)
2350 {
2351 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2352 	struct wmi_dfs_phyerr_offload_cmd *cmd;
2353 	struct sk_buff *skb;
2354 	int ret;
2355 
2356 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2357 	if (!skb)
2358 		return -ENOMEM;
2359 
2360 	cmd = (struct wmi_dfs_phyerr_offload_cmd *)skb->data;
2361 	cmd->tlv_header =
2362 		FIELD_PREP(WMI_TLV_TAG,
2363 			   WMI_TAG_PDEV_DFS_PHYERR_OFFLOAD_ENABLE_CMD) |
2364 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2365 
2366 	cmd->pdev_id = pdev_id;
2367 
2368 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2369 		   "WMI dfs phy err offload enable pdev id %d\n", pdev_id);
2370 
2371 	ret = ath11k_wmi_cmd_send(wmi, skb,
2372 				  WMI_PDEV_DFS_PHYERR_OFFLOAD_ENABLE_CMDID);
2373 	if (ret) {
2374 		ath11k_warn(ar->ab,
2375 			    "failed to send WMI_PDEV_DFS_PHYERR_OFFLOAD_ENABLE cmd\n");
2376 		dev_kfree_skb(skb);
2377 	}
2378 
2379 	return ret;
2380 }
2381 
2382 int ath11k_wmi_delba_send(struct ath11k *ar, u32 vdev_id, const u8 *mac,
2383 			  u32 tid, u32 initiator, u32 reason)
2384 {
2385 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2386 	struct wmi_delba_send_cmd *cmd;
2387 	struct sk_buff *skb;
2388 	int ret;
2389 
2390 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2391 	if (!skb)
2392 		return -ENOMEM;
2393 
2394 	cmd = (struct wmi_delba_send_cmd *)skb->data;
2395 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_DELBA_SEND_CMD) |
2396 			FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2397 	cmd->vdev_id = vdev_id;
2398 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
2399 	cmd->tid = tid;
2400 	cmd->initiator = initiator;
2401 	cmd->reasoncode = reason;
2402 
2403 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2404 		   "wmi delba send vdev_id 0x%X mac_addr %pM tid %u initiator %u reason %u\n",
2405 		   vdev_id, mac, tid, initiator, reason);
2406 
2407 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_DELBA_SEND_CMDID);
2408 
2409 	if (ret) {
2410 		ath11k_warn(ar->ab,
2411 			    "failed to send WMI_DELBA_SEND_CMDID cmd\n");
2412 		dev_kfree_skb(skb);
2413 	}
2414 
2415 	return ret;
2416 }
2417 
2418 int ath11k_wmi_addba_set_resp(struct ath11k *ar, u32 vdev_id, const u8 *mac,
2419 			      u32 tid, u32 status)
2420 {
2421 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2422 	struct wmi_addba_setresponse_cmd *cmd;
2423 	struct sk_buff *skb;
2424 	int ret;
2425 
2426 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2427 	if (!skb)
2428 		return -ENOMEM;
2429 
2430 	cmd = (struct wmi_addba_setresponse_cmd *)skb->data;
2431 	cmd->tlv_header =
2432 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ADDBA_SETRESPONSE_CMD) |
2433 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2434 	cmd->vdev_id = vdev_id;
2435 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
2436 	cmd->tid = tid;
2437 	cmd->statuscode = status;
2438 
2439 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2440 		   "wmi addba set resp vdev_id 0x%X mac_addr %pM tid %u status %u\n",
2441 		   vdev_id, mac, tid, status);
2442 
2443 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_ADDBA_SET_RESP_CMDID);
2444 
2445 	if (ret) {
2446 		ath11k_warn(ar->ab,
2447 			    "failed to send WMI_ADDBA_SET_RESP_CMDID cmd\n");
2448 		dev_kfree_skb(skb);
2449 	}
2450 
2451 	return ret;
2452 }
2453 
2454 int ath11k_wmi_addba_send(struct ath11k *ar, u32 vdev_id, const u8 *mac,
2455 			  u32 tid, u32 buf_size)
2456 {
2457 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2458 	struct wmi_addba_send_cmd *cmd;
2459 	struct sk_buff *skb;
2460 	int ret;
2461 
2462 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2463 	if (!skb)
2464 		return -ENOMEM;
2465 
2466 	cmd = (struct wmi_addba_send_cmd *)skb->data;
2467 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ADDBA_SEND_CMD) |
2468 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2469 	cmd->vdev_id = vdev_id;
2470 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
2471 	cmd->tid = tid;
2472 	cmd->buffersize = buf_size;
2473 
2474 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2475 		   "wmi addba send vdev_id 0x%X mac_addr %pM tid %u bufsize %u\n",
2476 		   vdev_id, mac, tid, buf_size);
2477 
2478 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_ADDBA_SEND_CMDID);
2479 
2480 	if (ret) {
2481 		ath11k_warn(ar->ab,
2482 			    "failed to send WMI_ADDBA_SEND_CMDID cmd\n");
2483 		dev_kfree_skb(skb);
2484 	}
2485 
2486 	return ret;
2487 }
2488 
2489 int ath11k_wmi_addba_clear_resp(struct ath11k *ar, u32 vdev_id, const u8 *mac)
2490 {
2491 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2492 	struct wmi_addba_clear_resp_cmd *cmd;
2493 	struct sk_buff *skb;
2494 	int ret;
2495 
2496 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2497 	if (!skb)
2498 		return -ENOMEM;
2499 
2500 	cmd = (struct wmi_addba_clear_resp_cmd *)skb->data;
2501 	cmd->tlv_header =
2502 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ADDBA_CLEAR_RESP_CMD) |
2503 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2504 	cmd->vdev_id = vdev_id;
2505 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
2506 
2507 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2508 		   "wmi addba clear resp vdev_id 0x%X mac_addr %pM\n",
2509 		   vdev_id, mac);
2510 
2511 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_ADDBA_CLEAR_RESP_CMDID);
2512 
2513 	if (ret) {
2514 		ath11k_warn(ar->ab,
2515 			    "failed to send WMI_ADDBA_CLEAR_RESP_CMDID cmd\n");
2516 		dev_kfree_skb(skb);
2517 	}
2518 
2519 	return ret;
2520 }
2521 
2522 int ath11k_wmi_pdev_peer_pktlog_filter(struct ath11k *ar, u8 *addr, u8 enable)
2523 {
2524 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2525 	struct wmi_pdev_pktlog_filter_cmd *cmd;
2526 	struct wmi_pdev_pktlog_filter_info *info;
2527 	struct sk_buff *skb;
2528 	struct wmi_tlv *tlv;
2529 	void *ptr;
2530 	int ret, len;
2531 
2532 	len = sizeof(*cmd) + sizeof(*info) + TLV_HDR_SIZE;
2533 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2534 	if (!skb)
2535 		return -ENOMEM;
2536 
2537 	cmd = (struct wmi_pdev_pktlog_filter_cmd *)skb->data;
2538 
2539 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_PEER_PKTLOG_FILTER_CMD) |
2540 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2541 
2542 	cmd->pdev_id = DP_HW2SW_MACID(ar->pdev->pdev_id);
2543 	cmd->num_mac = 1;
2544 	cmd->enable = enable;
2545 
2546 	ptr = skb->data + sizeof(*cmd);
2547 
2548 	tlv = ptr;
2549 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
2550 		      FIELD_PREP(WMI_TLV_LEN, sizeof(*info));
2551 
2552 	ptr += TLV_HDR_SIZE;
2553 	info = ptr;
2554 
2555 	ether_addr_copy(info->peer_macaddr.addr, addr);
2556 	info->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_PEER_PKTLOG_FILTER_INFO) |
2557 			   FIELD_PREP(WMI_TLV_LEN,
2558 				      sizeof(*info) - TLV_HDR_SIZE);
2559 
2560 	ret = ath11k_wmi_cmd_send(wmi, skb,
2561 				  WMI_PDEV_PKTLOG_FILTER_CMDID);
2562 	if (ret) {
2563 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_PKTLOG_ENABLE_CMDID\n");
2564 		dev_kfree_skb(skb);
2565 	}
2566 
2567 	return ret;
2568 }
2569 
2570 int
2571 ath11k_wmi_send_init_country_cmd(struct ath11k *ar,
2572 				 struct wmi_init_country_params init_cc_params)
2573 {
2574 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2575 	struct wmi_init_country_cmd *cmd;
2576 	struct sk_buff *skb;
2577 	int ret;
2578 
2579 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2580 	if (!skb)
2581 		return -ENOMEM;
2582 
2583 	cmd = (struct wmi_init_country_cmd *)skb->data;
2584 	cmd->tlv_header =
2585 		FIELD_PREP(WMI_TLV_TAG,
2586 			   WMI_TAG_SET_INIT_COUNTRY_CMD) |
2587 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2588 
2589 	cmd->pdev_id = ar->pdev->pdev_id;
2590 
2591 	switch (init_cc_params.flags) {
2592 	case ALPHA_IS_SET:
2593 		cmd->init_cc_type = WMI_COUNTRY_INFO_TYPE_ALPHA;
2594 		memcpy((u8 *)&cmd->cc_info.alpha2,
2595 		       init_cc_params.cc_info.alpha2, 3);
2596 		break;
2597 	case CC_IS_SET:
2598 		cmd->init_cc_type = WMI_COUNTRY_INFO_TYPE_COUNTRY_CODE;
2599 		cmd->cc_info.country_code = init_cc_params.cc_info.country_code;
2600 		break;
2601 	case REGDMN_IS_SET:
2602 		cmd->init_cc_type = WMI_COUNTRY_INFO_TYPE_REGDOMAIN;
2603 		cmd->cc_info.regdom_id = init_cc_params.cc_info.regdom_id;
2604 		break;
2605 	default:
2606 		ret = -EINVAL;
2607 		goto out;
2608 	}
2609 
2610 	ret = ath11k_wmi_cmd_send(wmi, skb,
2611 				  WMI_SET_INIT_COUNTRY_CMDID);
2612 
2613 out:
2614 	if (ret) {
2615 		ath11k_warn(ar->ab,
2616 			    "failed to send WMI_SET_INIT_COUNTRY CMD :%d\n",
2617 			    ret);
2618 		dev_kfree_skb(skb);
2619 	}
2620 
2621 	return ret;
2622 }
2623 
2624 int
2625 ath11k_wmi_send_thermal_mitigation_param_cmd(struct ath11k *ar,
2626 					     struct thermal_mitigation_params *param)
2627 {
2628 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2629 	struct wmi_therm_throt_config_request_cmd *cmd;
2630 	struct wmi_therm_throt_level_config_info *lvl_conf;
2631 	struct wmi_tlv *tlv;
2632 	struct sk_buff *skb;
2633 	int i, ret, len;
2634 
2635 	len = sizeof(*cmd) + TLV_HDR_SIZE +
2636 	      THERMAL_LEVELS * sizeof(struct wmi_therm_throt_level_config_info);
2637 
2638 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2639 	if (!skb)
2640 		return -ENOMEM;
2641 
2642 	cmd = (struct wmi_therm_throt_config_request_cmd *)skb->data;
2643 
2644 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_THERM_THROT_CONFIG_REQUEST) |
2645 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2646 
2647 	cmd->pdev_id = ar->pdev->pdev_id;
2648 	cmd->enable = param->enable;
2649 	cmd->dc = param->dc;
2650 	cmd->dc_per_event = param->dc_per_event;
2651 	cmd->therm_throt_levels = THERMAL_LEVELS;
2652 
2653 	tlv = (struct wmi_tlv *)(skb->data + sizeof(*cmd));
2654 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
2655 		      FIELD_PREP(WMI_TLV_LEN,
2656 				 (THERMAL_LEVELS *
2657 				  sizeof(struct wmi_therm_throt_level_config_info)));
2658 
2659 	lvl_conf = (struct wmi_therm_throt_level_config_info *)(skb->data +
2660 								sizeof(*cmd) +
2661 								TLV_HDR_SIZE);
2662 	for (i = 0; i < THERMAL_LEVELS; i++) {
2663 		lvl_conf->tlv_header =
2664 			FIELD_PREP(WMI_TLV_TAG, WMI_TAG_THERM_THROT_LEVEL_CONFIG_INFO) |
2665 			FIELD_PREP(WMI_TLV_LEN, sizeof(*lvl_conf) - TLV_HDR_SIZE);
2666 
2667 		lvl_conf->temp_lwm = param->levelconf[i].tmplwm;
2668 		lvl_conf->temp_hwm = param->levelconf[i].tmphwm;
2669 		lvl_conf->dc_off_percent = param->levelconf[i].dcoffpercent;
2670 		lvl_conf->prio = param->levelconf[i].priority;
2671 		lvl_conf++;
2672 	}
2673 
2674 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_THERM_THROT_SET_CONF_CMDID);
2675 	if (ret) {
2676 		ath11k_warn(ar->ab, "failed to send THERM_THROT_SET_CONF cmd\n");
2677 		dev_kfree_skb(skb);
2678 	}
2679 
2680 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2681 		   "WMI vdev set thermal throt pdev_id %d enable %d dc %d dc_per_event %x levels %d\n",
2682 		   ar->pdev->pdev_id, param->enable, param->dc,
2683 		   param->dc_per_event, THERMAL_LEVELS);
2684 
2685 	return ret;
2686 }
2687 
2688 int ath11k_wmi_pdev_pktlog_enable(struct ath11k *ar, u32 pktlog_filter)
2689 {
2690 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2691 	struct wmi_pktlog_enable_cmd *cmd;
2692 	struct sk_buff *skb;
2693 	int ret;
2694 
2695 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2696 	if (!skb)
2697 		return -ENOMEM;
2698 
2699 	cmd = (struct wmi_pktlog_enable_cmd *)skb->data;
2700 
2701 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_PKTLOG_ENABLE_CMD) |
2702 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2703 
2704 	cmd->pdev_id = DP_HW2SW_MACID(ar->pdev->pdev_id);
2705 	cmd->evlist = pktlog_filter;
2706 	cmd->enable = ATH11K_WMI_PKTLOG_ENABLE_FORCE;
2707 
2708 	ret = ath11k_wmi_cmd_send(wmi, skb,
2709 				  WMI_PDEV_PKTLOG_ENABLE_CMDID);
2710 	if (ret) {
2711 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_PKTLOG_ENABLE_CMDID\n");
2712 		dev_kfree_skb(skb);
2713 	}
2714 
2715 	return ret;
2716 }
2717 
2718 int ath11k_wmi_pdev_pktlog_disable(struct ath11k *ar)
2719 {
2720 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2721 	struct wmi_pktlog_disable_cmd *cmd;
2722 	struct sk_buff *skb;
2723 	int ret;
2724 
2725 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2726 	if (!skb)
2727 		return -ENOMEM;
2728 
2729 	cmd = (struct wmi_pktlog_disable_cmd *)skb->data;
2730 
2731 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_PKTLOG_DISABLE_CMD) |
2732 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2733 
2734 	cmd->pdev_id = DP_HW2SW_MACID(ar->pdev->pdev_id);
2735 
2736 	ret = ath11k_wmi_cmd_send(wmi, skb,
2737 				  WMI_PDEV_PKTLOG_DISABLE_CMDID);
2738 	if (ret) {
2739 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_PKTLOG_ENABLE_CMDID\n");
2740 		dev_kfree_skb(skb);
2741 	}
2742 
2743 	return ret;
2744 }
2745 
2746 int
2747 ath11k_wmi_send_twt_enable_cmd(struct ath11k *ar, u32 pdev_id)
2748 {
2749 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2750 	struct ath11k_base *ab = wmi->wmi_ab->ab;
2751 	struct wmi_twt_enable_params_cmd *cmd;
2752 	struct sk_buff *skb;
2753 	int ret, len;
2754 
2755 	len = sizeof(*cmd);
2756 
2757 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2758 	if (!skb)
2759 		return -ENOMEM;
2760 
2761 	cmd = (struct wmi_twt_enable_params_cmd *)skb->data;
2762 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_TWT_ENABLE_CMD) |
2763 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
2764 	cmd->pdev_id = pdev_id;
2765 	cmd->sta_cong_timer_ms = ATH11K_TWT_DEF_STA_CONG_TIMER_MS;
2766 	cmd->default_slot_size = ATH11K_TWT_DEF_DEFAULT_SLOT_SIZE;
2767 	cmd->congestion_thresh_setup = ATH11K_TWT_DEF_CONGESTION_THRESH_SETUP;
2768 	cmd->congestion_thresh_teardown =
2769 		ATH11K_TWT_DEF_CONGESTION_THRESH_TEARDOWN;
2770 	cmd->congestion_thresh_critical =
2771 		ATH11K_TWT_DEF_CONGESTION_THRESH_CRITICAL;
2772 	cmd->interference_thresh_teardown =
2773 		ATH11K_TWT_DEF_INTERFERENCE_THRESH_TEARDOWN;
2774 	cmd->interference_thresh_setup =
2775 		ATH11K_TWT_DEF_INTERFERENCE_THRESH_SETUP;
2776 	cmd->min_no_sta_setup = ATH11K_TWT_DEF_MIN_NO_STA_SETUP;
2777 	cmd->min_no_sta_teardown = ATH11K_TWT_DEF_MIN_NO_STA_TEARDOWN;
2778 	cmd->no_of_bcast_mcast_slots = ATH11K_TWT_DEF_NO_OF_BCAST_MCAST_SLOTS;
2779 	cmd->min_no_twt_slots = ATH11K_TWT_DEF_MIN_NO_TWT_SLOTS;
2780 	cmd->max_no_sta_twt = ATH11K_TWT_DEF_MAX_NO_STA_TWT;
2781 	cmd->mode_check_interval = ATH11K_TWT_DEF_MODE_CHECK_INTERVAL;
2782 	cmd->add_sta_slot_interval = ATH11K_TWT_DEF_ADD_STA_SLOT_INTERVAL;
2783 	cmd->remove_sta_slot_interval =
2784 		ATH11K_TWT_DEF_REMOVE_STA_SLOT_INTERVAL;
2785 	/* TODO add MBSSID support */
2786 	cmd->mbss_support = 0;
2787 
2788 	ret = ath11k_wmi_cmd_send(wmi, skb,
2789 				  WMI_TWT_ENABLE_CMDID);
2790 	if (ret) {
2791 		ath11k_warn(ab, "Failed to send WMI_TWT_ENABLE_CMDID");
2792 		dev_kfree_skb(skb);
2793 	}
2794 	return ret;
2795 }
2796 
2797 int
2798 ath11k_wmi_send_twt_disable_cmd(struct ath11k *ar, u32 pdev_id)
2799 {
2800 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2801 	struct ath11k_base *ab = wmi->wmi_ab->ab;
2802 	struct wmi_twt_disable_params_cmd *cmd;
2803 	struct sk_buff *skb;
2804 	int ret, len;
2805 
2806 	len = sizeof(*cmd);
2807 
2808 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2809 	if (!skb)
2810 		return -ENOMEM;
2811 
2812 	cmd = (struct wmi_twt_disable_params_cmd *)skb->data;
2813 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_TWT_DISABLE_CMD) |
2814 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
2815 	cmd->pdev_id = pdev_id;
2816 
2817 	ret = ath11k_wmi_cmd_send(wmi, skb,
2818 				  WMI_TWT_DISABLE_CMDID);
2819 	if (ret) {
2820 		ath11k_warn(ab, "Failed to send WMI_TWT_DISABLE_CMDID");
2821 		dev_kfree_skb(skb);
2822 	}
2823 	return ret;
2824 }
2825 
2826 int
2827 ath11k_wmi_send_obss_spr_cmd(struct ath11k *ar, u32 vdev_id,
2828 			     struct ieee80211_he_obss_pd *he_obss_pd)
2829 {
2830 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2831 	struct ath11k_base *ab = wmi->wmi_ab->ab;
2832 	struct wmi_obss_spatial_reuse_params_cmd *cmd;
2833 	struct sk_buff *skb;
2834 	int ret, len;
2835 
2836 	len = sizeof(*cmd);
2837 
2838 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2839 	if (!skb)
2840 		return -ENOMEM;
2841 
2842 	cmd = (struct wmi_obss_spatial_reuse_params_cmd *)skb->data;
2843 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
2844 				     WMI_TAG_OBSS_SPATIAL_REUSE_SET_CMD) |
2845 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
2846 	cmd->vdev_id = vdev_id;
2847 	cmd->enable = he_obss_pd->enable;
2848 	cmd->obss_min = he_obss_pd->min_offset;
2849 	cmd->obss_max = he_obss_pd->max_offset;
2850 
2851 	ret = ath11k_wmi_cmd_send(wmi, skb,
2852 				  WMI_PDEV_OBSS_PD_SPATIAL_REUSE_CMDID);
2853 	if (ret) {
2854 		ath11k_warn(ab,
2855 			    "Failed to send WMI_PDEV_OBSS_PD_SPATIAL_REUSE_CMDID");
2856 		dev_kfree_skb(skb);
2857 	}
2858 	return ret;
2859 }
2860 
2861 int
2862 ath11k_wmi_send_obss_color_collision_cfg_cmd(struct ath11k *ar, u32 vdev_id,
2863 					     u8 bss_color, u32 period,
2864 					     bool enable)
2865 {
2866 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2867 	struct ath11k_base *ab = wmi->wmi_ab->ab;
2868 	struct wmi_obss_color_collision_cfg_params_cmd *cmd;
2869 	struct sk_buff *skb;
2870 	int ret, len;
2871 
2872 	len = sizeof(*cmd);
2873 
2874 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2875 	if (!skb)
2876 		return -ENOMEM;
2877 
2878 	cmd = (struct wmi_obss_color_collision_cfg_params_cmd *)skb->data;
2879 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
2880 				     WMI_TAG_OBSS_COLOR_COLLISION_DET_CONFIG) |
2881 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
2882 	cmd->vdev_id = vdev_id;
2883 	cmd->evt_type = enable ? ATH11K_OBSS_COLOR_COLLISION_DETECTION :
2884 				 ATH11K_OBSS_COLOR_COLLISION_DETECTION_DISABLE;
2885 	cmd->current_bss_color = bss_color;
2886 	cmd->detection_period_ms = period;
2887 	cmd->scan_period_ms = ATH11K_BSS_COLOR_COLLISION_SCAN_PERIOD_MS;
2888 	cmd->free_slot_expiry_time_ms = 0;
2889 	cmd->flags = 0;
2890 
2891 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2892 		   "wmi_send_obss_color_collision_cfg id %d type %d bss_color %d detect_period %d scan_period %d\n",
2893 		   cmd->vdev_id, cmd->evt_type, cmd->current_bss_color,
2894 		   cmd->detection_period_ms, cmd->scan_period_ms);
2895 
2896 	ret = ath11k_wmi_cmd_send(wmi, skb,
2897 				  WMI_OBSS_COLOR_COLLISION_DET_CONFIG_CMDID);
2898 	if (ret) {
2899 		ath11k_warn(ab, "Failed to send WMI_OBSS_COLOR_COLLISION_DET_CONFIG_CMDID");
2900 		dev_kfree_skb(skb);
2901 	}
2902 	return ret;
2903 }
2904 
2905 int ath11k_wmi_send_bss_color_change_enable_cmd(struct ath11k *ar, u32 vdev_id,
2906 						bool enable)
2907 {
2908 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2909 	struct ath11k_base *ab = wmi->wmi_ab->ab;
2910 	struct wmi_bss_color_change_enable_params_cmd *cmd;
2911 	struct sk_buff *skb;
2912 	int ret, len;
2913 
2914 	len = sizeof(*cmd);
2915 
2916 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2917 	if (!skb)
2918 		return -ENOMEM;
2919 
2920 	cmd = (struct wmi_bss_color_change_enable_params_cmd *)skb->data;
2921 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_BSS_COLOR_CHANGE_ENABLE) |
2922 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
2923 	cmd->vdev_id = vdev_id;
2924 	cmd->enable = enable ? 1 : 0;
2925 
2926 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2927 		   "wmi_send_bss_color_change_enable id %d enable %d\n",
2928 		   cmd->vdev_id, cmd->enable);
2929 
2930 	ret = ath11k_wmi_cmd_send(wmi, skb,
2931 				  WMI_BSS_COLOR_CHANGE_ENABLE_CMDID);
2932 	if (ret) {
2933 		ath11k_warn(ab, "Failed to send WMI_BSS_COLOR_CHANGE_ENABLE_CMDID");
2934 		dev_kfree_skb(skb);
2935 	}
2936 	return ret;
2937 }
2938 
2939 static void
2940 ath11k_fill_band_to_mac_param(struct ath11k_base  *soc,
2941 			      struct wmi_host_pdev_band_to_mac *band_to_mac)
2942 {
2943 	u8 i;
2944 	struct ath11k_hal_reg_capabilities_ext *hal_reg_cap;
2945 	struct ath11k_pdev *pdev;
2946 
2947 	for (i = 0; i < soc->num_radios; i++) {
2948 		pdev = &soc->pdevs[i];
2949 		hal_reg_cap = &soc->hal_reg_cap[i];
2950 		band_to_mac[i].pdev_id = pdev->pdev_id;
2951 
2952 		switch (pdev->cap.supported_bands) {
2953 		case WMI_HOST_WLAN_2G_5G_CAP:
2954 			band_to_mac[i].start_freq = hal_reg_cap->low_2ghz_chan;
2955 			band_to_mac[i].end_freq = hal_reg_cap->high_5ghz_chan;
2956 			break;
2957 		case WMI_HOST_WLAN_2G_CAP:
2958 			band_to_mac[i].start_freq = hal_reg_cap->low_2ghz_chan;
2959 			band_to_mac[i].end_freq = hal_reg_cap->high_2ghz_chan;
2960 			break;
2961 		case WMI_HOST_WLAN_5G_CAP:
2962 			band_to_mac[i].start_freq = hal_reg_cap->low_5ghz_chan;
2963 			band_to_mac[i].end_freq = hal_reg_cap->high_5ghz_chan;
2964 			break;
2965 		default:
2966 			break;
2967 		}
2968 	}
2969 }
2970 
2971 static void
2972 ath11k_wmi_copy_resource_config(struct wmi_resource_config *wmi_cfg,
2973 				struct target_resource_config *tg_cfg)
2974 {
2975 	wmi_cfg->num_vdevs = tg_cfg->num_vdevs;
2976 	wmi_cfg->num_peers = tg_cfg->num_peers;
2977 	wmi_cfg->num_offload_peers = tg_cfg->num_offload_peers;
2978 	wmi_cfg->num_offload_reorder_buffs = tg_cfg->num_offload_reorder_buffs;
2979 	wmi_cfg->num_peer_keys = tg_cfg->num_peer_keys;
2980 	wmi_cfg->num_tids = tg_cfg->num_tids;
2981 	wmi_cfg->ast_skid_limit = tg_cfg->ast_skid_limit;
2982 	wmi_cfg->tx_chain_mask = tg_cfg->tx_chain_mask;
2983 	wmi_cfg->rx_chain_mask = tg_cfg->rx_chain_mask;
2984 	wmi_cfg->rx_timeout_pri[0] = tg_cfg->rx_timeout_pri[0];
2985 	wmi_cfg->rx_timeout_pri[1] = tg_cfg->rx_timeout_pri[1];
2986 	wmi_cfg->rx_timeout_pri[2] = tg_cfg->rx_timeout_pri[2];
2987 	wmi_cfg->rx_timeout_pri[3] = tg_cfg->rx_timeout_pri[3];
2988 	wmi_cfg->rx_decap_mode = tg_cfg->rx_decap_mode;
2989 	wmi_cfg->scan_max_pending_req = tg_cfg->scan_max_pending_req;
2990 	wmi_cfg->bmiss_offload_max_vdev = tg_cfg->bmiss_offload_max_vdev;
2991 	wmi_cfg->roam_offload_max_vdev = tg_cfg->roam_offload_max_vdev;
2992 	wmi_cfg->roam_offload_max_ap_profiles =
2993 		tg_cfg->roam_offload_max_ap_profiles;
2994 	wmi_cfg->num_mcast_groups = tg_cfg->num_mcast_groups;
2995 	wmi_cfg->num_mcast_table_elems = tg_cfg->num_mcast_table_elems;
2996 	wmi_cfg->mcast2ucast_mode = tg_cfg->mcast2ucast_mode;
2997 	wmi_cfg->tx_dbg_log_size = tg_cfg->tx_dbg_log_size;
2998 	wmi_cfg->num_wds_entries = tg_cfg->num_wds_entries;
2999 	wmi_cfg->dma_burst_size = tg_cfg->dma_burst_size;
3000 	wmi_cfg->mac_aggr_delim = tg_cfg->mac_aggr_delim;
3001 	wmi_cfg->rx_skip_defrag_timeout_dup_detection_check =
3002 		tg_cfg->rx_skip_defrag_timeout_dup_detection_check;
3003 	wmi_cfg->vow_config = tg_cfg->vow_config;
3004 	wmi_cfg->gtk_offload_max_vdev = tg_cfg->gtk_offload_max_vdev;
3005 	wmi_cfg->num_msdu_desc = tg_cfg->num_msdu_desc;
3006 	wmi_cfg->max_frag_entries = tg_cfg->max_frag_entries;
3007 	wmi_cfg->num_tdls_vdevs = tg_cfg->num_tdls_vdevs;
3008 	wmi_cfg->num_tdls_conn_table_entries =
3009 		tg_cfg->num_tdls_conn_table_entries;
3010 	wmi_cfg->beacon_tx_offload_max_vdev =
3011 		tg_cfg->beacon_tx_offload_max_vdev;
3012 	wmi_cfg->num_multicast_filter_entries =
3013 		tg_cfg->num_multicast_filter_entries;
3014 	wmi_cfg->num_wow_filters = tg_cfg->num_wow_filters;
3015 	wmi_cfg->num_keep_alive_pattern = tg_cfg->num_keep_alive_pattern;
3016 	wmi_cfg->keep_alive_pattern_size = tg_cfg->keep_alive_pattern_size;
3017 	wmi_cfg->max_tdls_concurrent_sleep_sta =
3018 		tg_cfg->max_tdls_concurrent_sleep_sta;
3019 	wmi_cfg->max_tdls_concurrent_buffer_sta =
3020 		tg_cfg->max_tdls_concurrent_buffer_sta;
3021 	wmi_cfg->wmi_send_separate = tg_cfg->wmi_send_separate;
3022 	wmi_cfg->num_ocb_vdevs = tg_cfg->num_ocb_vdevs;
3023 	wmi_cfg->num_ocb_channels = tg_cfg->num_ocb_channels;
3024 	wmi_cfg->num_ocb_schedules = tg_cfg->num_ocb_schedules;
3025 	wmi_cfg->bpf_instruction_size = tg_cfg->bpf_instruction_size;
3026 	wmi_cfg->max_bssid_rx_filters = tg_cfg->max_bssid_rx_filters;
3027 	wmi_cfg->use_pdev_id = tg_cfg->use_pdev_id;
3028 	wmi_cfg->flag1 = tg_cfg->atf_config;
3029 	wmi_cfg->peer_map_unmap_v2_support = tg_cfg->peer_map_unmap_v2_support;
3030 	wmi_cfg->sched_params = tg_cfg->sched_params;
3031 	wmi_cfg->twt_ap_pdev_count = tg_cfg->twt_ap_pdev_count;
3032 	wmi_cfg->twt_ap_sta_count = tg_cfg->twt_ap_sta_count;
3033 }
3034 
3035 static int ath11k_init_cmd_send(struct ath11k_pdev_wmi *wmi,
3036 				struct wmi_init_cmd_param *param)
3037 {
3038 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3039 	struct sk_buff *skb;
3040 	struct wmi_init_cmd *cmd;
3041 	struct wmi_resource_config *cfg;
3042 	struct wmi_pdev_set_hw_mode_cmd_param *hw_mode;
3043 	struct wmi_pdev_band_to_mac *band_to_mac;
3044 	struct wlan_host_mem_chunk *host_mem_chunks;
3045 	struct wmi_tlv *tlv;
3046 	size_t ret, len;
3047 	void *ptr;
3048 	u32 hw_mode_len = 0;
3049 	u16 idx;
3050 
3051 	if (param->hw_mode_id != WMI_HOST_HW_MODE_MAX)
3052 		hw_mode_len = sizeof(*hw_mode) + TLV_HDR_SIZE +
3053 			      (param->num_band_to_mac * sizeof(*band_to_mac));
3054 
3055 	len = sizeof(*cmd) + TLV_HDR_SIZE + sizeof(*cfg) + hw_mode_len +
3056 	      (sizeof(*host_mem_chunks) * WMI_MAX_MEM_REQS);
3057 
3058 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3059 	if (!skb)
3060 		return -ENOMEM;
3061 
3062 	cmd = (struct wmi_init_cmd *)skb->data;
3063 
3064 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_INIT_CMD) |
3065 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3066 
3067 	ptr = skb->data + sizeof(*cmd);
3068 	cfg = ptr;
3069 
3070 	ath11k_wmi_copy_resource_config(cfg, param->res_cfg);
3071 
3072 	cfg->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_RESOURCE_CONFIG) |
3073 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cfg) - TLV_HDR_SIZE);
3074 
3075 	ptr += sizeof(*cfg);
3076 	host_mem_chunks = ptr + TLV_HDR_SIZE;
3077 	len = sizeof(struct wlan_host_mem_chunk);
3078 
3079 	for (idx = 0; idx < param->num_mem_chunks; ++idx) {
3080 		host_mem_chunks[idx].tlv_header =
3081 				FIELD_PREP(WMI_TLV_TAG,
3082 					   WMI_TAG_WLAN_HOST_MEMORY_CHUNK) |
3083 				FIELD_PREP(WMI_TLV_LEN, len);
3084 
3085 		host_mem_chunks[idx].ptr = param->mem_chunks[idx].paddr;
3086 		host_mem_chunks[idx].size = param->mem_chunks[idx].len;
3087 		host_mem_chunks[idx].req_id = param->mem_chunks[idx].req_id;
3088 
3089 		ath11k_dbg(ab, ATH11K_DBG_WMI,
3090 			   "WMI host mem chunk req_id %d paddr 0x%llx len %d\n",
3091 			   param->mem_chunks[idx].req_id,
3092 			   (u64)param->mem_chunks[idx].paddr,
3093 			   param->mem_chunks[idx].len);
3094 	}
3095 	cmd->num_host_mem_chunks = param->num_mem_chunks;
3096 	len = sizeof(struct wlan_host_mem_chunk) * param->num_mem_chunks;
3097 
3098 	/* num_mem_chunks is zero */
3099 	tlv = ptr;
3100 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
3101 		      FIELD_PREP(WMI_TLV_LEN, len);
3102 	ptr += TLV_HDR_SIZE + len;
3103 
3104 	if (param->hw_mode_id != WMI_HOST_HW_MODE_MAX) {
3105 		hw_mode = (struct wmi_pdev_set_hw_mode_cmd_param *)ptr;
3106 		hw_mode->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3107 						 WMI_TAG_PDEV_SET_HW_MODE_CMD) |
3108 				      FIELD_PREP(WMI_TLV_LEN,
3109 						 sizeof(*hw_mode) - TLV_HDR_SIZE);
3110 
3111 		hw_mode->hw_mode_index = param->hw_mode_id;
3112 		hw_mode->num_band_to_mac = param->num_band_to_mac;
3113 
3114 		ptr += sizeof(*hw_mode);
3115 
3116 		len = param->num_band_to_mac * sizeof(*band_to_mac);
3117 		tlv = ptr;
3118 		tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
3119 			      FIELD_PREP(WMI_TLV_LEN, len);
3120 
3121 		ptr += TLV_HDR_SIZE;
3122 		len = sizeof(*band_to_mac);
3123 
3124 		for (idx = 0; idx < param->num_band_to_mac; idx++) {
3125 			band_to_mac = (void *)ptr;
3126 
3127 			band_to_mac->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3128 							     WMI_TAG_PDEV_BAND_TO_MAC) |
3129 						  FIELD_PREP(WMI_TLV_LEN,
3130 							     len - TLV_HDR_SIZE);
3131 			band_to_mac->pdev_id = param->band_to_mac[idx].pdev_id;
3132 			band_to_mac->start_freq =
3133 				param->band_to_mac[idx].start_freq;
3134 			band_to_mac->end_freq =
3135 				param->band_to_mac[idx].end_freq;
3136 			ptr += sizeof(*band_to_mac);
3137 		}
3138 	}
3139 
3140 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_INIT_CMDID);
3141 	if (ret) {
3142 		ath11k_warn(ab, "failed to send WMI_INIT_CMDID\n");
3143 		dev_kfree_skb(skb);
3144 	}
3145 
3146 	return ret;
3147 }
3148 
3149 int ath11k_wmi_pdev_lro_cfg(struct ath11k *ar,
3150 			    int pdev_id)
3151 {
3152 	struct ath11k_wmi_pdev_lro_config_cmd *cmd;
3153 	struct sk_buff *skb;
3154 	int ret;
3155 
3156 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
3157 	if (!skb)
3158 		return -ENOMEM;
3159 
3160 	cmd = (struct ath11k_wmi_pdev_lro_config_cmd *)skb->data;
3161 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_LRO_INFO_CMD) |
3162 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3163 
3164 	get_random_bytes(cmd->th_4, sizeof(uint32_t) * ATH11K_IPV4_TH_SEED_SIZE);
3165 	get_random_bytes(cmd->th_6, sizeof(uint32_t) * ATH11K_IPV6_TH_SEED_SIZE);
3166 
3167 	cmd->pdev_id = pdev_id;
3168 
3169 	ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_LRO_CONFIG_CMDID);
3170 	if (ret) {
3171 		ath11k_warn(ar->ab,
3172 			    "failed to send lro cfg req wmi cmd\n");
3173 		goto err;
3174 	}
3175 
3176 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3177 		   "WMI lro cfg cmd pdev_id 0x%x\n", pdev_id);
3178 	return 0;
3179 err:
3180 	dev_kfree_skb(skb);
3181 	return ret;
3182 }
3183 
3184 int ath11k_wmi_wait_for_service_ready(struct ath11k_base *ab)
3185 {
3186 	unsigned long time_left;
3187 
3188 	time_left = wait_for_completion_timeout(&ab->wmi_ab.service_ready,
3189 						WMI_SERVICE_READY_TIMEOUT_HZ);
3190 	if (!time_left)
3191 		return -ETIMEDOUT;
3192 
3193 	return 0;
3194 }
3195 
3196 int ath11k_wmi_wait_for_unified_ready(struct ath11k_base *ab)
3197 {
3198 	unsigned long time_left;
3199 
3200 	time_left = wait_for_completion_timeout(&ab->wmi_ab.unified_ready,
3201 						WMI_SERVICE_READY_TIMEOUT_HZ);
3202 	if (!time_left)
3203 		return -ETIMEDOUT;
3204 
3205 	return 0;
3206 }
3207 
3208 int ath11k_wmi_cmd_init(struct ath11k_base *ab)
3209 {
3210 	struct ath11k_wmi_base *wmi_sc = &ab->wmi_ab;
3211 	struct wmi_init_cmd_param init_param;
3212 	struct target_resource_config  config;
3213 
3214 	memset(&init_param, 0, sizeof(init_param));
3215 	memset(&config, 0, sizeof(config));
3216 
3217 	config.num_vdevs = ab->num_radios * TARGET_NUM_VDEVS;
3218 
3219 	if (ab->num_radios == 2) {
3220 		config.num_peers = TARGET_NUM_PEERS(DBS);
3221 		config.num_tids = TARGET_NUM_TIDS(DBS);
3222 	} else if (ab->num_radios == 3) {
3223 		config.num_peers = TARGET_NUM_PEERS(DBS_SBS);
3224 		config.num_tids = TARGET_NUM_TIDS(DBS_SBS);
3225 	} else {
3226 		/* Control should not reach here */
3227 		config.num_peers = TARGET_NUM_PEERS(SINGLE);
3228 		config.num_tids = TARGET_NUM_TIDS(SINGLE);
3229 	}
3230 	config.num_offload_peers = TARGET_NUM_OFFLD_PEERS;
3231 	config.num_offload_reorder_buffs = TARGET_NUM_OFFLD_REORDER_BUFFS;
3232 	config.num_peer_keys = TARGET_NUM_PEER_KEYS;
3233 	config.ast_skid_limit = TARGET_AST_SKID_LIMIT;
3234 	config.tx_chain_mask = (1 << ab->target_caps.num_rf_chains) - 1;
3235 	config.rx_chain_mask = (1 << ab->target_caps.num_rf_chains) - 1;
3236 	config.rx_timeout_pri[0] = TARGET_RX_TIMEOUT_LO_PRI;
3237 	config.rx_timeout_pri[1] = TARGET_RX_TIMEOUT_LO_PRI;
3238 	config.rx_timeout_pri[2] = TARGET_RX_TIMEOUT_LO_PRI;
3239 	config.rx_timeout_pri[3] = TARGET_RX_TIMEOUT_HI_PRI;
3240 	config.rx_decap_mode = TARGET_DECAP_MODE_NATIVE_WIFI;
3241 	config.scan_max_pending_req = TARGET_SCAN_MAX_PENDING_REQS;
3242 	config.bmiss_offload_max_vdev = TARGET_BMISS_OFFLOAD_MAX_VDEV;
3243 	config.roam_offload_max_vdev = TARGET_ROAM_OFFLOAD_MAX_VDEV;
3244 	config.roam_offload_max_ap_profiles = TARGET_ROAM_OFFLOAD_MAX_AP_PROFILES;
3245 	config.num_mcast_groups = TARGET_NUM_MCAST_GROUPS;
3246 	config.num_mcast_table_elems = TARGET_NUM_MCAST_TABLE_ELEMS;
3247 	config.mcast2ucast_mode = TARGET_MCAST2UCAST_MODE;
3248 	config.tx_dbg_log_size = TARGET_TX_DBG_LOG_SIZE;
3249 	config.num_wds_entries = TARGET_NUM_WDS_ENTRIES;
3250 	config.dma_burst_size = TARGET_DMA_BURST_SIZE;
3251 	config.rx_skip_defrag_timeout_dup_detection_check =
3252 		TARGET_RX_SKIP_DEFRAG_TIMEOUT_DUP_DETECTION_CHECK;
3253 	config.vow_config = TARGET_VOW_CONFIG;
3254 	config.gtk_offload_max_vdev = TARGET_GTK_OFFLOAD_MAX_VDEV;
3255 	config.num_msdu_desc = TARGET_NUM_MSDU_DESC;
3256 	config.beacon_tx_offload_max_vdev = ab->num_radios * TARGET_MAX_BCN_OFFLD;
3257 	config.rx_batchmode = TARGET_RX_BATCHMODE;
3258 	config.peer_map_unmap_v2_support = 1;
3259 	config.twt_ap_pdev_count = ab->num_radios;
3260 	config.twt_ap_sta_count = 1000;
3261 
3262 	memcpy(&wmi_sc->wlan_resource_config, &config, sizeof(config));
3263 
3264 	init_param.res_cfg = &wmi_sc->wlan_resource_config;
3265 	init_param.num_mem_chunks = wmi_sc->num_mem_chunks;
3266 	init_param.hw_mode_id = wmi_sc->preferred_hw_mode;
3267 	init_param.mem_chunks = wmi_sc->mem_chunks;
3268 
3269 	if (wmi_sc->preferred_hw_mode == WMI_HOST_HW_MODE_SINGLE)
3270 		init_param.hw_mode_id = WMI_HOST_HW_MODE_MAX;
3271 
3272 	init_param.num_band_to_mac = ab->num_radios;
3273 
3274 	ath11k_fill_band_to_mac_param(ab, init_param.band_to_mac);
3275 
3276 	return ath11k_init_cmd_send(&wmi_sc->wmi[0], &init_param);
3277 }
3278 
3279 static int ath11k_wmi_tlv_hw_mode_caps_parse(struct ath11k_base *soc,
3280 					     u16 tag, u16 len,
3281 					     const void *ptr, void *data)
3282 {
3283 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
3284 	struct wmi_hw_mode_capabilities *hw_mode_cap;
3285 	u32 phy_map = 0;
3286 
3287 	if (tag != WMI_TAG_HW_MODE_CAPABILITIES)
3288 		return -EPROTO;
3289 
3290 	if (svc_rdy_ext->n_hw_mode_caps >= svc_rdy_ext->param.num_hw_modes)
3291 		return -ENOBUFS;
3292 
3293 	hw_mode_cap = container_of(ptr, struct wmi_hw_mode_capabilities,
3294 				   hw_mode_id);
3295 	svc_rdy_ext->n_hw_mode_caps++;
3296 
3297 	phy_map = hw_mode_cap->phy_id_map;
3298 	while (phy_map) {
3299 		svc_rdy_ext->tot_phy_id++;
3300 		phy_map = phy_map >> 1;
3301 	}
3302 
3303 	return 0;
3304 }
3305 
3306 static int ath11k_wmi_tlv_hw_mode_caps(struct ath11k_base *soc,
3307 				       u16 len, const void *ptr, void *data)
3308 {
3309 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
3310 	struct wmi_hw_mode_capabilities *hw_mode_caps;
3311 	enum wmi_host_hw_mode_config_type mode, pref;
3312 	u32 i;
3313 	int ret;
3314 
3315 	svc_rdy_ext->n_hw_mode_caps = 0;
3316 	svc_rdy_ext->hw_mode_caps = (struct wmi_hw_mode_capabilities *)ptr;
3317 
3318 	ret = ath11k_wmi_tlv_iter(soc, ptr, len,
3319 				  ath11k_wmi_tlv_hw_mode_caps_parse,
3320 				  svc_rdy_ext);
3321 	if (ret) {
3322 		ath11k_warn(soc, "failed to parse tlv %d\n", ret);
3323 		return ret;
3324 	}
3325 
3326 	i = 0;
3327 	while (i < svc_rdy_ext->n_hw_mode_caps) {
3328 		hw_mode_caps = &svc_rdy_ext->hw_mode_caps[i];
3329 		mode = hw_mode_caps->hw_mode_id;
3330 		pref = soc->wmi_ab.preferred_hw_mode;
3331 
3332 		if (ath11k_hw_mode_pri_map[mode] < ath11k_hw_mode_pri_map[pref]) {
3333 			svc_rdy_ext->pref_hw_mode_caps = *hw_mode_caps;
3334 			soc->wmi_ab.preferred_hw_mode = mode;
3335 		}
3336 		i++;
3337 	}
3338 
3339 	if (soc->wmi_ab.preferred_hw_mode == WMI_HOST_HW_MODE_MAX)
3340 		return -EINVAL;
3341 
3342 	return 0;
3343 }
3344 
3345 static int ath11k_wmi_tlv_mac_phy_caps_parse(struct ath11k_base *soc,
3346 					     u16 tag, u16 len,
3347 					     const void *ptr, void *data)
3348 {
3349 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
3350 
3351 	if (tag != WMI_TAG_MAC_PHY_CAPABILITIES)
3352 		return -EPROTO;
3353 
3354 	if (svc_rdy_ext->n_mac_phy_caps >= svc_rdy_ext->tot_phy_id)
3355 		return -ENOBUFS;
3356 
3357 	len = min_t(u16, len, sizeof(struct wmi_mac_phy_capabilities));
3358 	if (!svc_rdy_ext->n_mac_phy_caps) {
3359 		svc_rdy_ext->mac_phy_caps = kzalloc((svc_rdy_ext->tot_phy_id) * len,
3360 						    GFP_ATOMIC);
3361 		if (!svc_rdy_ext->mac_phy_caps)
3362 			return -ENOMEM;
3363 	}
3364 
3365 	memcpy(svc_rdy_ext->mac_phy_caps + svc_rdy_ext->n_mac_phy_caps, ptr, len);
3366 	svc_rdy_ext->n_mac_phy_caps++;
3367 	return 0;
3368 }
3369 
3370 static int ath11k_wmi_tlv_ext_hal_reg_caps_parse(struct ath11k_base *soc,
3371 						 u16 tag, u16 len,
3372 						 const void *ptr, void *data)
3373 {
3374 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
3375 
3376 	if (tag != WMI_TAG_HAL_REG_CAPABILITIES_EXT)
3377 		return -EPROTO;
3378 
3379 	if (svc_rdy_ext->n_ext_hal_reg_caps >= svc_rdy_ext->param.num_phy)
3380 		return -ENOBUFS;
3381 
3382 	svc_rdy_ext->n_ext_hal_reg_caps++;
3383 	return 0;
3384 }
3385 
3386 static int ath11k_wmi_tlv_ext_hal_reg_caps(struct ath11k_base *soc,
3387 					   u16 len, const void *ptr, void *data)
3388 {
3389 	struct ath11k_pdev_wmi *wmi_handle = &soc->wmi_ab.wmi[0];
3390 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
3391 	struct ath11k_hal_reg_capabilities_ext reg_cap;
3392 	int ret;
3393 	u32 i;
3394 
3395 	svc_rdy_ext->n_ext_hal_reg_caps = 0;
3396 	svc_rdy_ext->ext_hal_reg_caps = (struct wmi_hal_reg_capabilities_ext *)ptr;
3397 	ret = ath11k_wmi_tlv_iter(soc, ptr, len,
3398 				  ath11k_wmi_tlv_ext_hal_reg_caps_parse,
3399 				  svc_rdy_ext);
3400 	if (ret) {
3401 		ath11k_warn(soc, "failed to parse tlv %d\n", ret);
3402 		return ret;
3403 	}
3404 
3405 	for (i = 0; i < svc_rdy_ext->param.num_phy; i++) {
3406 		ret = ath11k_pull_reg_cap_svc_rdy_ext(wmi_handle,
3407 						      svc_rdy_ext->soc_hal_reg_caps,
3408 						      svc_rdy_ext->ext_hal_reg_caps, i,
3409 						      &reg_cap);
3410 		if (ret) {
3411 			ath11k_warn(soc, "failed to extract reg cap %d\n", i);
3412 			return ret;
3413 		}
3414 
3415 		memcpy(&soc->hal_reg_cap[reg_cap.phy_id],
3416 		       &reg_cap, sizeof(reg_cap));
3417 	}
3418 	return 0;
3419 }
3420 
3421 static int ath11k_wmi_tlv_ext_soc_hal_reg_caps_parse(struct ath11k_base *soc,
3422 						     u16 len, const void *ptr,
3423 						     void *data)
3424 {
3425 	struct ath11k_pdev_wmi *wmi_handle = &soc->wmi_ab.wmi[0];
3426 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
3427 	u8 hw_mode_id = svc_rdy_ext->pref_hw_mode_caps.hw_mode_id;
3428 	u32 phy_id_map;
3429 	int ret;
3430 
3431 	svc_rdy_ext->soc_hal_reg_caps = (struct wmi_soc_hal_reg_capabilities *)ptr;
3432 	svc_rdy_ext->param.num_phy = svc_rdy_ext->soc_hal_reg_caps->num_phy;
3433 
3434 	soc->num_radios = 0;
3435 	phy_id_map = svc_rdy_ext->pref_hw_mode_caps.phy_id_map;
3436 
3437 	while (phy_id_map && soc->num_radios < MAX_RADIOS) {
3438 		ret = ath11k_pull_mac_phy_cap_svc_ready_ext(wmi_handle,
3439 							    svc_rdy_ext->hw_caps,
3440 							    svc_rdy_ext->hw_mode_caps,
3441 							    svc_rdy_ext->soc_hal_reg_caps,
3442 							    svc_rdy_ext->mac_phy_caps,
3443 							    hw_mode_id, soc->num_radios,
3444 							    &soc->pdevs[soc->num_radios]);
3445 		if (ret) {
3446 			ath11k_warn(soc, "failed to extract mac caps, idx :%d\n",
3447 				    soc->num_radios);
3448 			return ret;
3449 		}
3450 
3451 		soc->num_radios++;
3452 
3453 		/* TODO: mac_phy_cap prints */
3454 		phy_id_map >>= 1;
3455 	}
3456 	return 0;
3457 }
3458 
3459 static int ath11k_wmi_tlv_svc_rdy_ext_parse(struct ath11k_base *ab,
3460 					    u16 tag, u16 len,
3461 					    const void *ptr, void *data)
3462 {
3463 	struct ath11k_pdev_wmi *wmi_handle = &ab->wmi_ab.wmi[0];
3464 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
3465 	int ret;
3466 
3467 	switch (tag) {
3468 	case WMI_TAG_SERVICE_READY_EXT_EVENT:
3469 		ret = ath11k_pull_svc_ready_ext(wmi_handle, ptr,
3470 						&svc_rdy_ext->param);
3471 		if (ret) {
3472 			ath11k_warn(ab, "unable to extract ext params\n");
3473 			return ret;
3474 		}
3475 		break;
3476 
3477 	case WMI_TAG_SOC_MAC_PHY_HW_MODE_CAPS:
3478 		svc_rdy_ext->hw_caps = (struct wmi_soc_mac_phy_hw_mode_caps *)ptr;
3479 		svc_rdy_ext->param.num_hw_modes = svc_rdy_ext->hw_caps->num_hw_modes;
3480 		break;
3481 
3482 	case WMI_TAG_SOC_HAL_REG_CAPABILITIES:
3483 		ret = ath11k_wmi_tlv_ext_soc_hal_reg_caps_parse(ab, len, ptr,
3484 								svc_rdy_ext);
3485 		if (ret)
3486 			return ret;
3487 		break;
3488 
3489 	case WMI_TAG_ARRAY_STRUCT:
3490 		if (!svc_rdy_ext->hw_mode_done) {
3491 			ret = ath11k_wmi_tlv_hw_mode_caps(ab, len, ptr,
3492 							  svc_rdy_ext);
3493 			if (ret)
3494 				return ret;
3495 
3496 			svc_rdy_ext->hw_mode_done = true;
3497 		} else if (!svc_rdy_ext->mac_phy_done) {
3498 			svc_rdy_ext->n_mac_phy_caps = 0;
3499 			ret = ath11k_wmi_tlv_iter(ab, ptr, len,
3500 						  ath11k_wmi_tlv_mac_phy_caps_parse,
3501 						  svc_rdy_ext);
3502 			if (ret) {
3503 				ath11k_warn(ab, "failed to parse tlv %d\n", ret);
3504 				return ret;
3505 			}
3506 
3507 			svc_rdy_ext->mac_phy_done = true;
3508 		} else if (!svc_rdy_ext->ext_hal_reg_done) {
3509 			ret = ath11k_wmi_tlv_ext_hal_reg_caps(ab, len, ptr,
3510 							      svc_rdy_ext);
3511 			if (ret)
3512 				return ret;
3513 
3514 			svc_rdy_ext->ext_hal_reg_done = true;
3515 			complete(&ab->wmi_ab.service_ready);
3516 		}
3517 		break;
3518 
3519 	default:
3520 		break;
3521 	}
3522 	return 0;
3523 }
3524 
3525 static int ath11k_service_ready_ext_event(struct ath11k_base *ab,
3526 					  struct sk_buff *skb)
3527 {
3528 	struct wmi_tlv_svc_rdy_ext_parse svc_rdy_ext = { };
3529 	int ret;
3530 
3531 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
3532 				  ath11k_wmi_tlv_svc_rdy_ext_parse,
3533 				  &svc_rdy_ext);
3534 	if (ret) {
3535 		ath11k_warn(ab, "failed to parse tlv %d\n", ret);
3536 		return ret;
3537 	}
3538 
3539 	kfree(svc_rdy_ext.mac_phy_caps);
3540 	return 0;
3541 }
3542 
3543 static int ath11k_pull_vdev_start_resp_tlv(struct ath11k_base *ab, struct sk_buff *skb,
3544 					   struct wmi_vdev_start_resp_event *vdev_rsp)
3545 {
3546 	const void **tb;
3547 	const struct wmi_vdev_start_resp_event *ev;
3548 	int ret;
3549 
3550 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
3551 	if (IS_ERR(tb)) {
3552 		ret = PTR_ERR(tb);
3553 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
3554 		return ret;
3555 	}
3556 
3557 	ev = tb[WMI_TAG_VDEV_START_RESPONSE_EVENT];
3558 	if (!ev) {
3559 		ath11k_warn(ab, "failed to fetch vdev start resp ev");
3560 		kfree(tb);
3561 		return -EPROTO;
3562 	}
3563 
3564 	memset(vdev_rsp, 0, sizeof(*vdev_rsp));
3565 
3566 	vdev_rsp->vdev_id = ev->vdev_id;
3567 	vdev_rsp->requestor_id = ev->requestor_id;
3568 	vdev_rsp->resp_type = ev->resp_type;
3569 	vdev_rsp->status = ev->status;
3570 	vdev_rsp->chain_mask = ev->chain_mask;
3571 	vdev_rsp->smps_mode = ev->smps_mode;
3572 	vdev_rsp->mac_id = ev->mac_id;
3573 	vdev_rsp->cfgd_tx_streams = ev->cfgd_tx_streams;
3574 	vdev_rsp->cfgd_rx_streams = ev->cfgd_rx_streams;
3575 
3576 	kfree(tb);
3577 	return 0;
3578 }
3579 
3580 static struct cur_reg_rule
3581 *create_reg_rules_from_wmi(u32 num_reg_rules,
3582 			   struct wmi_regulatory_rule_struct *wmi_reg_rule)
3583 {
3584 	struct cur_reg_rule *reg_rule_ptr;
3585 	u32 count;
3586 
3587 	reg_rule_ptr =  kzalloc((num_reg_rules * sizeof(*reg_rule_ptr)),
3588 				GFP_ATOMIC);
3589 
3590 	if (!reg_rule_ptr)
3591 		return NULL;
3592 
3593 	for (count = 0; count < num_reg_rules; count++) {
3594 		reg_rule_ptr[count].start_freq =
3595 			FIELD_GET(REG_RULE_START_FREQ,
3596 				  wmi_reg_rule[count].freq_info);
3597 		reg_rule_ptr[count].end_freq =
3598 			FIELD_GET(REG_RULE_END_FREQ,
3599 				  wmi_reg_rule[count].freq_info);
3600 		reg_rule_ptr[count].max_bw =
3601 			FIELD_GET(REG_RULE_MAX_BW,
3602 				  wmi_reg_rule[count].bw_pwr_info);
3603 		reg_rule_ptr[count].reg_power =
3604 			FIELD_GET(REG_RULE_REG_PWR,
3605 				  wmi_reg_rule[count].bw_pwr_info);
3606 		reg_rule_ptr[count].ant_gain =
3607 			FIELD_GET(REG_RULE_ANT_GAIN,
3608 				  wmi_reg_rule[count].bw_pwr_info);
3609 		reg_rule_ptr[count].flags =
3610 			FIELD_GET(REG_RULE_FLAGS,
3611 				  wmi_reg_rule[count].flag_info);
3612 	}
3613 
3614 	return reg_rule_ptr;
3615 }
3616 
3617 static int ath11k_pull_reg_chan_list_update_ev(struct ath11k_base *ab,
3618 					       struct sk_buff *skb,
3619 					       struct cur_regulatory_info *reg_info)
3620 {
3621 	const void **tb;
3622 	const struct wmi_reg_chan_list_cc_event *chan_list_event_hdr;
3623 	struct wmi_regulatory_rule_struct *wmi_reg_rule;
3624 	u32 num_2g_reg_rules, num_5g_reg_rules;
3625 	int ret;
3626 
3627 	ath11k_dbg(ab, ATH11K_DBG_WMI, "processing regulatory channel list\n");
3628 
3629 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
3630 	if (IS_ERR(tb)) {
3631 		ret = PTR_ERR(tb);
3632 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
3633 		return ret;
3634 	}
3635 
3636 	chan_list_event_hdr = tb[WMI_TAG_REG_CHAN_LIST_CC_EVENT];
3637 	if (!chan_list_event_hdr) {
3638 		ath11k_warn(ab, "failed to fetch reg chan list update ev\n");
3639 		kfree(tb);
3640 		return -EPROTO;
3641 	}
3642 
3643 	reg_info->num_2g_reg_rules = chan_list_event_hdr->num_2g_reg_rules;
3644 	reg_info->num_5g_reg_rules = chan_list_event_hdr->num_5g_reg_rules;
3645 
3646 	if (!(reg_info->num_2g_reg_rules + reg_info->num_5g_reg_rules)) {
3647 		ath11k_warn(ab, "No regulatory rules available in the event info\n");
3648 		kfree(tb);
3649 		return -EINVAL;
3650 	}
3651 
3652 	memcpy(reg_info->alpha2, &chan_list_event_hdr->alpha2,
3653 	       REG_ALPHA2_LEN);
3654 	reg_info->dfs_region = chan_list_event_hdr->dfs_region;
3655 	reg_info->phybitmap = chan_list_event_hdr->phybitmap;
3656 	reg_info->num_phy = chan_list_event_hdr->num_phy;
3657 	reg_info->phy_id = chan_list_event_hdr->phy_id;
3658 	reg_info->ctry_code = chan_list_event_hdr->country_id;
3659 	reg_info->reg_dmn_pair = chan_list_event_hdr->domain_code;
3660 	if (chan_list_event_hdr->status_code == WMI_REG_SET_CC_STATUS_PASS)
3661 		reg_info->status_code = REG_SET_CC_STATUS_PASS;
3662 	else if (chan_list_event_hdr->status_code == WMI_REG_CURRENT_ALPHA2_NOT_FOUND)
3663 		reg_info->status_code = REG_CURRENT_ALPHA2_NOT_FOUND;
3664 	else if (chan_list_event_hdr->status_code == WMI_REG_INIT_ALPHA2_NOT_FOUND)
3665 		reg_info->status_code = REG_INIT_ALPHA2_NOT_FOUND;
3666 	else if (chan_list_event_hdr->status_code == WMI_REG_SET_CC_CHANGE_NOT_ALLOWED)
3667 		reg_info->status_code = REG_SET_CC_CHANGE_NOT_ALLOWED;
3668 	else if (chan_list_event_hdr->status_code == WMI_REG_SET_CC_STATUS_NO_MEMORY)
3669 		reg_info->status_code = REG_SET_CC_STATUS_NO_MEMORY;
3670 	else if (chan_list_event_hdr->status_code == WMI_REG_SET_CC_STATUS_FAIL)
3671 		reg_info->status_code = REG_SET_CC_STATUS_FAIL;
3672 
3673 	reg_info->min_bw_2g = chan_list_event_hdr->min_bw_2g;
3674 	reg_info->max_bw_2g = chan_list_event_hdr->max_bw_2g;
3675 	reg_info->min_bw_5g = chan_list_event_hdr->min_bw_5g;
3676 	reg_info->max_bw_5g = chan_list_event_hdr->max_bw_5g;
3677 
3678 	num_2g_reg_rules = reg_info->num_2g_reg_rules;
3679 	num_5g_reg_rules = reg_info->num_5g_reg_rules;
3680 
3681 	ath11k_dbg(ab, ATH11K_DBG_WMI,
3682 		   "%s:cc %s dsf %d BW: min_2g %d max_2g %d min_5g %d max_5g %d",
3683 		   __func__, reg_info->alpha2, reg_info->dfs_region,
3684 		   reg_info->min_bw_2g, reg_info->max_bw_2g,
3685 		   reg_info->min_bw_5g, reg_info->max_bw_5g);
3686 
3687 	ath11k_dbg(ab, ATH11K_DBG_WMI,
3688 		   "%s: num_2g_reg_rules %d num_5g_reg_rules %d", __func__,
3689 		   num_2g_reg_rules, num_5g_reg_rules);
3690 
3691 	wmi_reg_rule =
3692 		(struct wmi_regulatory_rule_struct *)((u8 *)chan_list_event_hdr
3693 						+ sizeof(*chan_list_event_hdr)
3694 						+ sizeof(struct wmi_tlv));
3695 
3696 	if (num_2g_reg_rules) {
3697 		reg_info->reg_rules_2g_ptr = create_reg_rules_from_wmi(num_2g_reg_rules,
3698 								       wmi_reg_rule);
3699 		if (!reg_info->reg_rules_2g_ptr) {
3700 			kfree(tb);
3701 			ath11k_warn(ab, "Unable to Allocate memory for 2g rules\n");
3702 			return -ENOMEM;
3703 		}
3704 	}
3705 
3706 	if (num_5g_reg_rules) {
3707 		wmi_reg_rule += num_2g_reg_rules;
3708 		reg_info->reg_rules_5g_ptr = create_reg_rules_from_wmi(num_5g_reg_rules,
3709 								       wmi_reg_rule);
3710 		if (!reg_info->reg_rules_5g_ptr) {
3711 			kfree(tb);
3712 			ath11k_warn(ab, "Unable to Allocate memory for 5g rules\n");
3713 			return -ENOMEM;
3714 		}
3715 	}
3716 
3717 	ath11k_dbg(ab, ATH11K_DBG_WMI, "processed regulatory channel list\n");
3718 
3719 	kfree(tb);
3720 	return 0;
3721 }
3722 
3723 static int ath11k_pull_peer_del_resp_ev(struct ath11k_base *ab, struct sk_buff *skb,
3724 					struct wmi_peer_delete_resp_event *peer_del_resp)
3725 {
3726 	const void **tb;
3727 	const struct wmi_peer_delete_resp_event *ev;
3728 	int ret;
3729 
3730 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
3731 	if (IS_ERR(tb)) {
3732 		ret = PTR_ERR(tb);
3733 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
3734 		return ret;
3735 	}
3736 
3737 	ev = tb[WMI_TAG_PEER_DELETE_RESP_EVENT];
3738 	if (!ev) {
3739 		ath11k_warn(ab, "failed to fetch peer delete resp ev");
3740 		kfree(tb);
3741 		return -EPROTO;
3742 	}
3743 
3744 	memset(peer_del_resp, 0, sizeof(*peer_del_resp));
3745 
3746 	peer_del_resp->vdev_id = ev->vdev_id;
3747 	ether_addr_copy(peer_del_resp->peer_macaddr.addr,
3748 			ev->peer_macaddr.addr);
3749 
3750 	kfree(tb);
3751 	return 0;
3752 }
3753 
3754 static int ath11k_pull_bcn_tx_status_ev(struct ath11k_base *ab, void *evt_buf,
3755 					u32 len, u32 *vdev_id,
3756 					u32 *tx_status)
3757 {
3758 	const void **tb;
3759 	const struct wmi_bcn_tx_status_event *ev;
3760 	int ret;
3761 
3762 	tb = ath11k_wmi_tlv_parse_alloc(ab, evt_buf, len, GFP_ATOMIC);
3763 	if (IS_ERR(tb)) {
3764 		ret = PTR_ERR(tb);
3765 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
3766 		return ret;
3767 	}
3768 
3769 	ev = tb[WMI_TAG_OFFLOAD_BCN_TX_STATUS_EVENT];
3770 	if (!ev) {
3771 		ath11k_warn(ab, "failed to fetch bcn tx status ev");
3772 		kfree(tb);
3773 		return -EPROTO;
3774 	}
3775 
3776 	*vdev_id   = ev->vdev_id;
3777 	*tx_status = ev->tx_status;
3778 
3779 	kfree(tb);
3780 	return 0;
3781 }
3782 
3783 static int ath11k_pull_vdev_stopped_param_tlv(struct ath11k_base *ab, struct sk_buff *skb,
3784 					      u32 *vdev_id)
3785 {
3786 	const void **tb;
3787 	const struct wmi_vdev_stopped_event *ev;
3788 	int ret;
3789 
3790 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
3791 	if (IS_ERR(tb)) {
3792 		ret = PTR_ERR(tb);
3793 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
3794 		return ret;
3795 	}
3796 
3797 	ev = tb[WMI_TAG_VDEV_STOPPED_EVENT];
3798 	if (!ev) {
3799 		ath11k_warn(ab, "failed to fetch vdev stop ev");
3800 		kfree(tb);
3801 		return -EPROTO;
3802 	}
3803 
3804 	*vdev_id =  ev->vdev_id;
3805 
3806 	kfree(tb);
3807 	return 0;
3808 }
3809 
3810 static int ath11k_pull_mgmt_rx_params_tlv(struct ath11k_base *ab,
3811 					  struct sk_buff *skb,
3812 					  struct mgmt_rx_event_params *hdr)
3813 {
3814 	const void **tb;
3815 	const struct wmi_mgmt_rx_hdr *ev;
3816 	const u8 *frame;
3817 	int ret;
3818 
3819 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
3820 	if (IS_ERR(tb)) {
3821 		ret = PTR_ERR(tb);
3822 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
3823 		return ret;
3824 	}
3825 
3826 	ev = tb[WMI_TAG_MGMT_RX_HDR];
3827 	frame = tb[WMI_TAG_ARRAY_BYTE];
3828 
3829 	if (!ev || !frame) {
3830 		ath11k_warn(ab, "failed to fetch mgmt rx hdr");
3831 		kfree(tb);
3832 		return -EPROTO;
3833 	}
3834 
3835 	hdr->pdev_id =  ev->pdev_id;
3836 	hdr->chan_freq = ev->chan_freq;
3837 	hdr->channel =  ev->channel;
3838 	hdr->snr =  ev->snr;
3839 	hdr->rate =  ev->rate;
3840 	hdr->phy_mode =  ev->phy_mode;
3841 	hdr->buf_len =  ev->buf_len;
3842 	hdr->status =  ev->status;
3843 	hdr->flags =  ev->flags;
3844 	hdr->rssi =  ev->rssi;
3845 	hdr->tsf_delta =  ev->tsf_delta;
3846 	memcpy(hdr->rssi_ctl, ev->rssi_ctl, sizeof(hdr->rssi_ctl));
3847 
3848 	if (skb->len < (frame - skb->data) + hdr->buf_len) {
3849 		ath11k_warn(ab, "invalid length in mgmt rx hdr ev");
3850 		kfree(tb);
3851 		return -EPROTO;
3852 	}
3853 
3854 	/* shift the sk_buff to point to `frame` */
3855 	skb_trim(skb, 0);
3856 	skb_put(skb, frame - skb->data);
3857 	skb_pull(skb, frame - skb->data);
3858 	skb_put(skb, hdr->buf_len);
3859 
3860 	ath11k_ce_byte_swap(skb->data, hdr->buf_len);
3861 
3862 	kfree(tb);
3863 	return 0;
3864 }
3865 
3866 static int wmi_process_mgmt_tx_comp(struct ath11k *ar, u32 desc_id,
3867 				    u32 status)
3868 {
3869 	struct sk_buff *msdu;
3870 	struct ieee80211_tx_info *info;
3871 	struct ath11k_skb_cb *skb_cb;
3872 
3873 	spin_lock_bh(&ar->txmgmt_idr_lock);
3874 	msdu = idr_find(&ar->txmgmt_idr, desc_id);
3875 
3876 	if (!msdu) {
3877 		ath11k_warn(ar->ab, "received mgmt tx compl for invalid msdu_id: %d\n",
3878 			    desc_id);
3879 		spin_unlock_bh(&ar->txmgmt_idr_lock);
3880 		return -ENOENT;
3881 	}
3882 
3883 	idr_remove(&ar->txmgmt_idr, desc_id);
3884 	spin_unlock_bh(&ar->txmgmt_idr_lock);
3885 
3886 	skb_cb = ATH11K_SKB_CB(msdu);
3887 	dma_unmap_single(ar->ab->dev, skb_cb->paddr, msdu->len, DMA_TO_DEVICE);
3888 
3889 	info = IEEE80211_SKB_CB(msdu);
3890 	if ((!(info->flags & IEEE80211_TX_CTL_NO_ACK)) && !status)
3891 		info->flags |= IEEE80211_TX_STAT_ACK;
3892 
3893 	ieee80211_tx_status_irqsafe(ar->hw, msdu);
3894 
3895 	/* WARN when we received this event without doing any mgmt tx */
3896 	if (atomic_dec_if_positive(&ar->num_pending_mgmt_tx) < 0)
3897 		WARN_ON_ONCE(1);
3898 
3899 	return 0;
3900 }
3901 
3902 static int ath11k_pull_mgmt_tx_compl_param_tlv(struct ath11k_base *ab,
3903 					       struct sk_buff *skb,
3904 					       struct wmi_mgmt_tx_compl_event *param)
3905 {
3906 	const void **tb;
3907 	const struct wmi_mgmt_tx_compl_event *ev;
3908 	int ret;
3909 
3910 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
3911 	if (IS_ERR(tb)) {
3912 		ret = PTR_ERR(tb);
3913 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
3914 		return ret;
3915 	}
3916 
3917 	ev = tb[WMI_TAG_MGMT_TX_COMPL_EVENT];
3918 	if (!ev) {
3919 		ath11k_warn(ab, "failed to fetch mgmt tx compl ev");
3920 		kfree(tb);
3921 		return -EPROTO;
3922 	}
3923 
3924 	param->pdev_id = ev->pdev_id;
3925 	param->desc_id = ev->desc_id;
3926 	param->status = ev->status;
3927 
3928 	kfree(tb);
3929 	return 0;
3930 }
3931 
3932 static void ath11k_wmi_event_scan_started(struct ath11k *ar)
3933 {
3934 	lockdep_assert_held(&ar->data_lock);
3935 
3936 	switch (ar->scan.state) {
3937 	case ATH11K_SCAN_IDLE:
3938 	case ATH11K_SCAN_RUNNING:
3939 	case ATH11K_SCAN_ABORTING:
3940 		ath11k_warn(ar->ab, "received scan started event in an invalid scan state: %s (%d)\n",
3941 			    ath11k_scan_state_str(ar->scan.state),
3942 			    ar->scan.state);
3943 		break;
3944 	case ATH11K_SCAN_STARTING:
3945 		ar->scan.state = ATH11K_SCAN_RUNNING;
3946 		complete(&ar->scan.started);
3947 		break;
3948 	}
3949 }
3950 
3951 static void ath11k_wmi_event_scan_start_failed(struct ath11k *ar)
3952 {
3953 	lockdep_assert_held(&ar->data_lock);
3954 
3955 	switch (ar->scan.state) {
3956 	case ATH11K_SCAN_IDLE:
3957 	case ATH11K_SCAN_RUNNING:
3958 	case ATH11K_SCAN_ABORTING:
3959 		ath11k_warn(ar->ab, "received scan start failed event in an invalid scan state: %s (%d)\n",
3960 			    ath11k_scan_state_str(ar->scan.state),
3961 			    ar->scan.state);
3962 		break;
3963 	case ATH11K_SCAN_STARTING:
3964 		complete(&ar->scan.started);
3965 		__ath11k_mac_scan_finish(ar);
3966 		break;
3967 	}
3968 }
3969 
3970 static void ath11k_wmi_event_scan_completed(struct ath11k *ar)
3971 {
3972 	lockdep_assert_held(&ar->data_lock);
3973 
3974 	switch (ar->scan.state) {
3975 	case ATH11K_SCAN_IDLE:
3976 	case ATH11K_SCAN_STARTING:
3977 		/* One suspected reason scan can be completed while starting is
3978 		 * if firmware fails to deliver all scan events to the host,
3979 		 * e.g. when transport pipe is full. This has been observed
3980 		 * with spectral scan phyerr events starving wmi transport
3981 		 * pipe. In such case the "scan completed" event should be (and
3982 		 * is) ignored by the host as it may be just firmware's scan
3983 		 * state machine recovering.
3984 		 */
3985 		ath11k_warn(ar->ab, "received scan completed event in an invalid scan state: %s (%d)\n",
3986 			    ath11k_scan_state_str(ar->scan.state),
3987 			    ar->scan.state);
3988 		break;
3989 	case ATH11K_SCAN_RUNNING:
3990 	case ATH11K_SCAN_ABORTING:
3991 		__ath11k_mac_scan_finish(ar);
3992 		break;
3993 	}
3994 }
3995 
3996 static void ath11k_wmi_event_scan_bss_chan(struct ath11k *ar)
3997 {
3998 	lockdep_assert_held(&ar->data_lock);
3999 
4000 	switch (ar->scan.state) {
4001 	case ATH11K_SCAN_IDLE:
4002 	case ATH11K_SCAN_STARTING:
4003 		ath11k_warn(ar->ab, "received scan bss chan event in an invalid scan state: %s (%d)\n",
4004 			    ath11k_scan_state_str(ar->scan.state),
4005 			    ar->scan.state);
4006 		break;
4007 	case ATH11K_SCAN_RUNNING:
4008 	case ATH11K_SCAN_ABORTING:
4009 		ar->scan_channel = NULL;
4010 		break;
4011 	}
4012 }
4013 
4014 static void ath11k_wmi_event_scan_foreign_chan(struct ath11k *ar, u32 freq)
4015 {
4016 	lockdep_assert_held(&ar->data_lock);
4017 
4018 	switch (ar->scan.state) {
4019 	case ATH11K_SCAN_IDLE:
4020 	case ATH11K_SCAN_STARTING:
4021 		ath11k_warn(ar->ab, "received scan foreign chan event in an invalid scan state: %s (%d)\n",
4022 			    ath11k_scan_state_str(ar->scan.state),
4023 			    ar->scan.state);
4024 		break;
4025 	case ATH11K_SCAN_RUNNING:
4026 	case ATH11K_SCAN_ABORTING:
4027 		ar->scan_channel = ieee80211_get_channel(ar->hw->wiphy, freq);
4028 		break;
4029 	}
4030 }
4031 
4032 static const char *
4033 ath11k_wmi_event_scan_type_str(enum wmi_scan_event_type type,
4034 			       enum wmi_scan_completion_reason reason)
4035 {
4036 	switch (type) {
4037 	case WMI_SCAN_EVENT_STARTED:
4038 		return "started";
4039 	case WMI_SCAN_EVENT_COMPLETED:
4040 		switch (reason) {
4041 		case WMI_SCAN_REASON_COMPLETED:
4042 			return "completed";
4043 		case WMI_SCAN_REASON_CANCELLED:
4044 			return "completed [cancelled]";
4045 		case WMI_SCAN_REASON_PREEMPTED:
4046 			return "completed [preempted]";
4047 		case WMI_SCAN_REASON_TIMEDOUT:
4048 			return "completed [timedout]";
4049 		case WMI_SCAN_REASON_INTERNAL_FAILURE:
4050 			return "completed [internal err]";
4051 		case WMI_SCAN_REASON_MAX:
4052 			break;
4053 		}
4054 		return "completed [unknown]";
4055 	case WMI_SCAN_EVENT_BSS_CHANNEL:
4056 		return "bss channel";
4057 	case WMI_SCAN_EVENT_FOREIGN_CHAN:
4058 		return "foreign channel";
4059 	case WMI_SCAN_EVENT_DEQUEUED:
4060 		return "dequeued";
4061 	case WMI_SCAN_EVENT_PREEMPTED:
4062 		return "preempted";
4063 	case WMI_SCAN_EVENT_START_FAILED:
4064 		return "start failed";
4065 	case WMI_SCAN_EVENT_RESTARTED:
4066 		return "restarted";
4067 	case WMI_SCAN_EVENT_FOREIGN_CHAN_EXIT:
4068 		return "foreign channel exit";
4069 	default:
4070 		return "unknown";
4071 	}
4072 }
4073 
4074 static int ath11k_pull_scan_ev(struct ath11k_base *ab, struct sk_buff *skb,
4075 			       struct wmi_scan_event *scan_evt_param)
4076 {
4077 	const void **tb;
4078 	const struct wmi_scan_event *ev;
4079 	int ret;
4080 
4081 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4082 	if (IS_ERR(tb)) {
4083 		ret = PTR_ERR(tb);
4084 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4085 		return ret;
4086 	}
4087 
4088 	ev = tb[WMI_TAG_SCAN_EVENT];
4089 	if (!ev) {
4090 		ath11k_warn(ab, "failed to fetch scan ev");
4091 		kfree(tb);
4092 		return -EPROTO;
4093 	}
4094 
4095 	scan_evt_param->event_type = ev->event_type;
4096 	scan_evt_param->reason = ev->reason;
4097 	scan_evt_param->channel_freq = ev->channel_freq;
4098 	scan_evt_param->scan_req_id = ev->scan_req_id;
4099 	scan_evt_param->scan_id = ev->scan_id;
4100 	scan_evt_param->vdev_id = ev->vdev_id;
4101 	scan_evt_param->tsf_timestamp = ev->tsf_timestamp;
4102 
4103 	kfree(tb);
4104 	return 0;
4105 }
4106 
4107 static int ath11k_pull_peer_sta_kickout_ev(struct ath11k_base *ab, struct sk_buff *skb,
4108 					   struct wmi_peer_sta_kickout_arg *arg)
4109 {
4110 	const void **tb;
4111 	const struct wmi_peer_sta_kickout_event *ev;
4112 	int ret;
4113 
4114 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4115 	if (IS_ERR(tb)) {
4116 		ret = PTR_ERR(tb);
4117 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4118 		return ret;
4119 	}
4120 
4121 	ev = tb[WMI_TAG_PEER_STA_KICKOUT_EVENT];
4122 	if (!ev) {
4123 		ath11k_warn(ab, "failed to fetch peer sta kickout ev");
4124 		kfree(tb);
4125 		return -EPROTO;
4126 	}
4127 
4128 	arg->mac_addr = ev->peer_macaddr.addr;
4129 
4130 	kfree(tb);
4131 	return 0;
4132 }
4133 
4134 static int ath11k_pull_roam_ev(struct ath11k_base *ab, struct sk_buff *skb,
4135 			       struct wmi_roam_event *roam_ev)
4136 {
4137 	const void **tb;
4138 	const struct wmi_roam_event *ev;
4139 	int ret;
4140 
4141 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4142 	if (IS_ERR(tb)) {
4143 		ret = PTR_ERR(tb);
4144 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4145 		return ret;
4146 	}
4147 
4148 	ev = tb[WMI_TAG_ROAM_EVENT];
4149 	if (!ev) {
4150 		ath11k_warn(ab, "failed to fetch roam ev");
4151 		kfree(tb);
4152 		return -EPROTO;
4153 	}
4154 
4155 	roam_ev->vdev_id = ev->vdev_id;
4156 	roam_ev->reason = ev->reason;
4157 	roam_ev->rssi = ev->rssi;
4158 
4159 	kfree(tb);
4160 	return 0;
4161 }
4162 
4163 static int freq_to_idx(struct ath11k *ar, int freq)
4164 {
4165 	struct ieee80211_supported_band *sband;
4166 	int band, ch, idx = 0;
4167 
4168 	for (band = NL80211_BAND_2GHZ; band < NUM_NL80211_BANDS; band++) {
4169 		sband = ar->hw->wiphy->bands[band];
4170 		if (!sband)
4171 			continue;
4172 
4173 		for (ch = 0; ch < sband->n_channels; ch++, idx++)
4174 			if (sband->channels[ch].center_freq == freq)
4175 				goto exit;
4176 	}
4177 
4178 exit:
4179 	return idx;
4180 }
4181 
4182 static int ath11k_pull_chan_info_ev(struct ath11k_base *ab, u8 *evt_buf,
4183 				    u32 len, struct wmi_chan_info_event *ch_info_ev)
4184 {
4185 	const void **tb;
4186 	const struct wmi_chan_info_event *ev;
4187 	int ret;
4188 
4189 	tb = ath11k_wmi_tlv_parse_alloc(ab, evt_buf, len, GFP_ATOMIC);
4190 	if (IS_ERR(tb)) {
4191 		ret = PTR_ERR(tb);
4192 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4193 		return ret;
4194 	}
4195 
4196 	ev = tb[WMI_TAG_CHAN_INFO_EVENT];
4197 	if (!ev) {
4198 		ath11k_warn(ab, "failed to fetch chan info ev");
4199 		kfree(tb);
4200 		return -EPROTO;
4201 	}
4202 
4203 	ch_info_ev->err_code = ev->err_code;
4204 	ch_info_ev->freq = ev->freq;
4205 	ch_info_ev->cmd_flags = ev->cmd_flags;
4206 	ch_info_ev->noise_floor = ev->noise_floor;
4207 	ch_info_ev->rx_clear_count = ev->rx_clear_count;
4208 	ch_info_ev->cycle_count = ev->cycle_count;
4209 	ch_info_ev->chan_tx_pwr_range = ev->chan_tx_pwr_range;
4210 	ch_info_ev->chan_tx_pwr_tp = ev->chan_tx_pwr_tp;
4211 	ch_info_ev->rx_frame_count = ev->rx_frame_count;
4212 	ch_info_ev->tx_frame_cnt = ev->tx_frame_cnt;
4213 	ch_info_ev->mac_clk_mhz = ev->mac_clk_mhz;
4214 	ch_info_ev->vdev_id = ev->vdev_id;
4215 
4216 	kfree(tb);
4217 	return 0;
4218 }
4219 
4220 static int
4221 ath11k_pull_pdev_bss_chan_info_ev(struct ath11k_base *ab, struct sk_buff *skb,
4222 				  struct wmi_pdev_bss_chan_info_event *bss_ch_info_ev)
4223 {
4224 	const void **tb;
4225 	const struct wmi_pdev_bss_chan_info_event *ev;
4226 	int ret;
4227 
4228 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4229 	if (IS_ERR(tb)) {
4230 		ret = PTR_ERR(tb);
4231 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4232 		return ret;
4233 	}
4234 
4235 	ev = tb[WMI_TAG_PDEV_BSS_CHAN_INFO_EVENT];
4236 	if (!ev) {
4237 		ath11k_warn(ab, "failed to fetch pdev bss chan info ev");
4238 		kfree(tb);
4239 		return -EPROTO;
4240 	}
4241 
4242 	bss_ch_info_ev->pdev_id = ev->pdev_id;
4243 	bss_ch_info_ev->freq = ev->freq;
4244 	bss_ch_info_ev->noise_floor = ev->noise_floor;
4245 	bss_ch_info_ev->rx_clear_count_low = ev->rx_clear_count_low;
4246 	bss_ch_info_ev->rx_clear_count_high = ev->rx_clear_count_high;
4247 	bss_ch_info_ev->cycle_count_low = ev->cycle_count_low;
4248 	bss_ch_info_ev->cycle_count_high = ev->cycle_count_high;
4249 	bss_ch_info_ev->tx_cycle_count_low = ev->tx_cycle_count_low;
4250 	bss_ch_info_ev->tx_cycle_count_high = ev->tx_cycle_count_high;
4251 	bss_ch_info_ev->rx_cycle_count_low = ev->rx_cycle_count_low;
4252 	bss_ch_info_ev->rx_cycle_count_high = ev->rx_cycle_count_high;
4253 	bss_ch_info_ev->rx_bss_cycle_count_low = ev->rx_bss_cycle_count_low;
4254 	bss_ch_info_ev->rx_bss_cycle_count_high = ev->rx_bss_cycle_count_high;
4255 
4256 	kfree(tb);
4257 	return 0;
4258 }
4259 
4260 static int
4261 ath11k_pull_vdev_install_key_compl_ev(struct ath11k_base *ab, struct sk_buff *skb,
4262 				      struct wmi_vdev_install_key_complete_arg *arg)
4263 {
4264 	const void **tb;
4265 	const struct wmi_vdev_install_key_compl_event *ev;
4266 	int ret;
4267 
4268 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4269 	if (IS_ERR(tb)) {
4270 		ret = PTR_ERR(tb);
4271 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4272 		return ret;
4273 	}
4274 
4275 	ev = tb[WMI_TAG_VDEV_INSTALL_KEY_COMPLETE_EVENT];
4276 	if (!ev) {
4277 		ath11k_warn(ab, "failed to fetch vdev install key compl ev");
4278 		kfree(tb);
4279 		return -EPROTO;
4280 	}
4281 
4282 	arg->vdev_id = ev->vdev_id;
4283 	arg->macaddr = ev->peer_macaddr.addr;
4284 	arg->key_idx = ev->key_idx;
4285 	arg->key_flags = ev->key_flags;
4286 	arg->status = ev->status;
4287 
4288 	kfree(tb);
4289 	return 0;
4290 }
4291 
4292 static int ath11k_pull_peer_assoc_conf_ev(struct ath11k_base *ab, struct sk_buff *skb,
4293 					  struct wmi_peer_assoc_conf_arg *peer_assoc_conf)
4294 {
4295 	const void **tb;
4296 	const struct wmi_peer_assoc_conf_event *ev;
4297 	int ret;
4298 
4299 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4300 	if (IS_ERR(tb)) {
4301 		ret = PTR_ERR(tb);
4302 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4303 		return ret;
4304 	}
4305 
4306 	ev = tb[WMI_TAG_PEER_ASSOC_CONF_EVENT];
4307 	if (!ev) {
4308 		ath11k_warn(ab, "failed to fetch peer assoc conf ev");
4309 		kfree(tb);
4310 		return -EPROTO;
4311 	}
4312 
4313 	peer_assoc_conf->vdev_id = ev->vdev_id;
4314 	peer_assoc_conf->macaddr = ev->peer_macaddr.addr;
4315 
4316 	kfree(tb);
4317 	return 0;
4318 }
4319 
4320 static void ath11k_wmi_pull_pdev_stats_base(const struct wmi_pdev_stats_base *src,
4321 					    struct ath11k_fw_stats_pdev *dst)
4322 {
4323 	dst->ch_noise_floor = src->chan_nf;
4324 	dst->tx_frame_count = src->tx_frame_count;
4325 	dst->rx_frame_count = src->rx_frame_count;
4326 	dst->rx_clear_count = src->rx_clear_count;
4327 	dst->cycle_count = src->cycle_count;
4328 	dst->phy_err_count = src->phy_err_count;
4329 	dst->chan_tx_power = src->chan_tx_pwr;
4330 }
4331 
4332 static void
4333 ath11k_wmi_pull_pdev_stats_tx(const struct wmi_pdev_stats_tx *src,
4334 			      struct ath11k_fw_stats_pdev *dst)
4335 {
4336 	dst->comp_queued = src->comp_queued;
4337 	dst->comp_delivered = src->comp_delivered;
4338 	dst->msdu_enqued = src->msdu_enqued;
4339 	dst->mpdu_enqued = src->mpdu_enqued;
4340 	dst->wmm_drop = src->wmm_drop;
4341 	dst->local_enqued = src->local_enqued;
4342 	dst->local_freed = src->local_freed;
4343 	dst->hw_queued = src->hw_queued;
4344 	dst->hw_reaped = src->hw_reaped;
4345 	dst->underrun = src->underrun;
4346 	dst->tx_abort = src->tx_abort;
4347 	dst->mpdus_requed = src->mpdus_requed;
4348 	dst->tx_ko = src->tx_ko;
4349 	dst->data_rc = src->data_rc;
4350 	dst->self_triggers = src->self_triggers;
4351 	dst->sw_retry_failure = src->sw_retry_failure;
4352 	dst->illgl_rate_phy_err = src->illgl_rate_phy_err;
4353 	dst->pdev_cont_xretry = src->pdev_cont_xretry;
4354 	dst->pdev_tx_timeout = src->pdev_tx_timeout;
4355 	dst->pdev_resets = src->pdev_resets;
4356 	dst->stateless_tid_alloc_failure = src->stateless_tid_alloc_failure;
4357 	dst->phy_underrun = src->phy_underrun;
4358 	dst->txop_ovf = src->txop_ovf;
4359 }
4360 
4361 static void ath11k_wmi_pull_pdev_stats_rx(const struct wmi_pdev_stats_rx *src,
4362 					  struct ath11k_fw_stats_pdev *dst)
4363 {
4364 	dst->mid_ppdu_route_change = src->mid_ppdu_route_change;
4365 	dst->status_rcvd = src->status_rcvd;
4366 	dst->r0_frags = src->r0_frags;
4367 	dst->r1_frags = src->r1_frags;
4368 	dst->r2_frags = src->r2_frags;
4369 	dst->r3_frags = src->r3_frags;
4370 	dst->htt_msdus = src->htt_msdus;
4371 	dst->htt_mpdus = src->htt_mpdus;
4372 	dst->loc_msdus = src->loc_msdus;
4373 	dst->loc_mpdus = src->loc_mpdus;
4374 	dst->oversize_amsdu = src->oversize_amsdu;
4375 	dst->phy_errs = src->phy_errs;
4376 	dst->phy_err_drop = src->phy_err_drop;
4377 	dst->mpdu_errs = src->mpdu_errs;
4378 }
4379 
4380 static void
4381 ath11k_wmi_pull_vdev_stats(const struct wmi_vdev_stats *src,
4382 			   struct ath11k_fw_stats_vdev *dst)
4383 {
4384 	int i;
4385 
4386 	dst->vdev_id = src->vdev_id;
4387 	dst->beacon_snr = src->beacon_snr;
4388 	dst->data_snr = src->data_snr;
4389 	dst->num_rx_frames = src->num_rx_frames;
4390 	dst->num_rts_fail = src->num_rts_fail;
4391 	dst->num_rts_success = src->num_rts_success;
4392 	dst->num_rx_err = src->num_rx_err;
4393 	dst->num_rx_discard = src->num_rx_discard;
4394 	dst->num_tx_not_acked = src->num_tx_not_acked;
4395 
4396 	for (i = 0; i < ARRAY_SIZE(src->num_tx_frames); i++)
4397 		dst->num_tx_frames[i] = src->num_tx_frames[i];
4398 
4399 	for (i = 0; i < ARRAY_SIZE(src->num_tx_frames_retries); i++)
4400 		dst->num_tx_frames_retries[i] = src->num_tx_frames_retries[i];
4401 
4402 	for (i = 0; i < ARRAY_SIZE(src->num_tx_frames_failures); i++)
4403 		dst->num_tx_frames_failures[i] = src->num_tx_frames_failures[i];
4404 
4405 	for (i = 0; i < ARRAY_SIZE(src->tx_rate_history); i++)
4406 		dst->tx_rate_history[i] = src->tx_rate_history[i];
4407 
4408 	for (i = 0; i < ARRAY_SIZE(src->beacon_rssi_history); i++)
4409 		dst->beacon_rssi_history[i] = src->beacon_rssi_history[i];
4410 }
4411 
4412 static void
4413 ath11k_wmi_pull_bcn_stats(const struct wmi_bcn_stats *src,
4414 			  struct ath11k_fw_stats_bcn *dst)
4415 {
4416 	dst->vdev_id = src->vdev_id;
4417 	dst->tx_bcn_succ_cnt = src->tx_bcn_succ_cnt;
4418 	dst->tx_bcn_outage_cnt = src->tx_bcn_outage_cnt;
4419 }
4420 
4421 int ath11k_wmi_pull_fw_stats(struct ath11k_base *ab, struct sk_buff *skb,
4422 			     struct ath11k_fw_stats *stats)
4423 {
4424 	const void **tb;
4425 	const struct wmi_stats_event *ev;
4426 	const void *data;
4427 	int i, ret;
4428 	u32 len = skb->len;
4429 
4430 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, len, GFP_ATOMIC);
4431 	if (IS_ERR(tb)) {
4432 		ret = PTR_ERR(tb);
4433 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4434 		return ret;
4435 	}
4436 
4437 	ev = tb[WMI_TAG_STATS_EVENT];
4438 	data = tb[WMI_TAG_ARRAY_BYTE];
4439 	if (!ev || !data) {
4440 		ath11k_warn(ab, "failed to fetch update stats ev");
4441 		kfree(tb);
4442 		return -EPROTO;
4443 	}
4444 
4445 	ath11k_dbg(ab, ATH11K_DBG_WMI,
4446 		   "wmi stats update ev pdev_id %d pdev %i vdev %i bcn %i\n",
4447 		   ev->pdev_id,
4448 		   ev->num_pdev_stats, ev->num_vdev_stats,
4449 		   ev->num_bcn_stats);
4450 
4451 	stats->pdev_id = ev->pdev_id;
4452 	stats->stats_id = 0;
4453 
4454 	for (i = 0; i < ev->num_pdev_stats; i++) {
4455 		const struct wmi_pdev_stats *src;
4456 		struct ath11k_fw_stats_pdev *dst;
4457 
4458 		src = data;
4459 		if (len < sizeof(*src)) {
4460 			kfree(tb);
4461 			return -EPROTO;
4462 		}
4463 
4464 		stats->stats_id = WMI_REQUEST_PDEV_STAT;
4465 
4466 		data += sizeof(*src);
4467 		len -= sizeof(*src);
4468 
4469 		dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
4470 		if (!dst)
4471 			continue;
4472 
4473 		ath11k_wmi_pull_pdev_stats_base(&src->base, dst);
4474 		ath11k_wmi_pull_pdev_stats_tx(&src->tx, dst);
4475 		ath11k_wmi_pull_pdev_stats_rx(&src->rx, dst);
4476 		list_add_tail(&dst->list, &stats->pdevs);
4477 	}
4478 
4479 	for (i = 0; i < ev->num_vdev_stats; i++) {
4480 		const struct wmi_vdev_stats *src;
4481 		struct ath11k_fw_stats_vdev *dst;
4482 
4483 		src = data;
4484 		if (len < sizeof(*src)) {
4485 			kfree(tb);
4486 			return -EPROTO;
4487 		}
4488 
4489 		stats->stats_id = WMI_REQUEST_VDEV_STAT;
4490 
4491 		data += sizeof(*src);
4492 		len -= sizeof(*src);
4493 
4494 		dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
4495 		if (!dst)
4496 			continue;
4497 
4498 		ath11k_wmi_pull_vdev_stats(src, dst);
4499 		list_add_tail(&dst->list, &stats->vdevs);
4500 	}
4501 
4502 	for (i = 0; i < ev->num_bcn_stats; i++) {
4503 		const struct wmi_bcn_stats *src;
4504 		struct ath11k_fw_stats_bcn *dst;
4505 
4506 		src = data;
4507 		if (len < sizeof(*src)) {
4508 			kfree(tb);
4509 			return -EPROTO;
4510 		}
4511 
4512 		stats->stats_id = WMI_REQUEST_BCN_STAT;
4513 
4514 		data += sizeof(*src);
4515 		len -= sizeof(*src);
4516 
4517 		dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
4518 		if (!dst)
4519 			continue;
4520 
4521 		ath11k_wmi_pull_bcn_stats(src, dst);
4522 		list_add_tail(&dst->list, &stats->bcn);
4523 	}
4524 
4525 	kfree(tb);
4526 	return 0;
4527 }
4528 
4529 static int
4530 ath11k_pull_pdev_temp_ev(struct ath11k_base *ab, u8 *evt_buf,
4531 			 u32 len, const struct wmi_pdev_temperature_event *ev)
4532 {
4533 	const void **tb;
4534 	int ret;
4535 
4536 	tb = ath11k_wmi_tlv_parse_alloc(ab, evt_buf, len, GFP_ATOMIC);
4537 	if (IS_ERR(tb)) {
4538 		ret = PTR_ERR(tb);
4539 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4540 		return ret;
4541 	}
4542 
4543 	ev = tb[WMI_TAG_PDEV_TEMPERATURE_EVENT];
4544 	if (!ev) {
4545 		ath11k_warn(ab, "failed to fetch pdev temp ev");
4546 		kfree(tb);
4547 		return -EPROTO;
4548 	}
4549 
4550 	kfree(tb);
4551 	return 0;
4552 }
4553 
4554 size_t ath11k_wmi_fw_stats_num_vdevs(struct list_head *head)
4555 {
4556 	struct ath11k_fw_stats_vdev *i;
4557 	size_t num = 0;
4558 
4559 	list_for_each_entry(i, head, list)
4560 		++num;
4561 
4562 	return num;
4563 }
4564 
4565 static size_t ath11k_wmi_fw_stats_num_bcn(struct list_head *head)
4566 {
4567 	struct ath11k_fw_stats_bcn *i;
4568 	size_t num = 0;
4569 
4570 	list_for_each_entry(i, head, list)
4571 		++num;
4572 
4573 	return num;
4574 }
4575 
4576 static void
4577 ath11k_wmi_fw_pdev_base_stats_fill(const struct ath11k_fw_stats_pdev *pdev,
4578 				   char *buf, u32 *length)
4579 {
4580 	u32 len = *length;
4581 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
4582 
4583 	len += scnprintf(buf + len, buf_len - len, "\n");
4584 	len += scnprintf(buf + len, buf_len - len, "%30s\n",
4585 			"ath11k PDEV stats");
4586 	len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
4587 			"=================");
4588 
4589 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4590 			"Channel noise floor", pdev->ch_noise_floor);
4591 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4592 			"Channel TX power", pdev->chan_tx_power);
4593 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4594 			"TX frame count", pdev->tx_frame_count);
4595 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4596 			"RX frame count", pdev->rx_frame_count);
4597 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4598 			"RX clear count", pdev->rx_clear_count);
4599 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4600 			"Cycle count", pdev->cycle_count);
4601 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4602 			"PHY error count", pdev->phy_err_count);
4603 
4604 	*length = len;
4605 }
4606 
4607 static void
4608 ath11k_wmi_fw_pdev_tx_stats_fill(const struct ath11k_fw_stats_pdev *pdev,
4609 				 char *buf, u32 *length)
4610 {
4611 	u32 len = *length;
4612 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
4613 
4614 	len += scnprintf(buf + len, buf_len - len, "\n%30s\n",
4615 			 "ath11k PDEV TX stats");
4616 	len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
4617 			 "====================");
4618 
4619 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4620 			 "HTT cookies queued", pdev->comp_queued);
4621 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4622 			 "HTT cookies disp.", pdev->comp_delivered);
4623 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4624 			 "MSDU queued", pdev->msdu_enqued);
4625 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4626 			 "MPDU queued", pdev->mpdu_enqued);
4627 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4628 			 "MSDUs dropped", pdev->wmm_drop);
4629 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4630 			 "Local enqued", pdev->local_enqued);
4631 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4632 			 "Local freed", pdev->local_freed);
4633 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4634 			 "HW queued", pdev->hw_queued);
4635 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4636 			 "PPDUs reaped", pdev->hw_reaped);
4637 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4638 			 "Num underruns", pdev->underrun);
4639 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4640 			 "PPDUs cleaned", pdev->tx_abort);
4641 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4642 			 "MPDUs requed", pdev->mpdus_requed);
4643 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4644 			 "Excessive retries", pdev->tx_ko);
4645 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4646 			 "HW rate", pdev->data_rc);
4647 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4648 			 "Sched self triggers", pdev->self_triggers);
4649 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4650 			 "Dropped due to SW retries",
4651 			 pdev->sw_retry_failure);
4652 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4653 			 "Illegal rate phy errors",
4654 			 pdev->illgl_rate_phy_err);
4655 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4656 			 "PDEV continuous xretry", pdev->pdev_cont_xretry);
4657 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4658 			 "TX timeout", pdev->pdev_tx_timeout);
4659 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4660 			 "PDEV resets", pdev->pdev_resets);
4661 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4662 			 "Stateless TIDs alloc failures",
4663 			 pdev->stateless_tid_alloc_failure);
4664 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4665 			 "PHY underrun", pdev->phy_underrun);
4666 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
4667 			 "MPDU is more than txop limit", pdev->txop_ovf);
4668 	*length = len;
4669 }
4670 
4671 static void
4672 ath11k_wmi_fw_pdev_rx_stats_fill(const struct ath11k_fw_stats_pdev *pdev,
4673 				 char *buf, u32 *length)
4674 {
4675 	u32 len = *length;
4676 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
4677 
4678 	len += scnprintf(buf + len, buf_len - len, "\n%30s\n",
4679 			 "ath11k PDEV RX stats");
4680 	len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
4681 			 "====================");
4682 
4683 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4684 			 "Mid PPDU route change",
4685 			 pdev->mid_ppdu_route_change);
4686 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4687 			 "Tot. number of statuses", pdev->status_rcvd);
4688 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4689 			 "Extra frags on rings 0", pdev->r0_frags);
4690 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4691 			 "Extra frags on rings 1", pdev->r1_frags);
4692 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4693 			 "Extra frags on rings 2", pdev->r2_frags);
4694 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4695 			 "Extra frags on rings 3", pdev->r3_frags);
4696 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4697 			 "MSDUs delivered to HTT", pdev->htt_msdus);
4698 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4699 			 "MPDUs delivered to HTT", pdev->htt_mpdus);
4700 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4701 			 "MSDUs delivered to stack", pdev->loc_msdus);
4702 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4703 			 "MPDUs delivered to stack", pdev->loc_mpdus);
4704 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4705 			 "Oversized AMSUs", pdev->oversize_amsdu);
4706 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4707 			 "PHY errors", pdev->phy_errs);
4708 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4709 			 "PHY errors drops", pdev->phy_err_drop);
4710 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
4711 			 "MPDU errors (FCS, MIC, ENC)", pdev->mpdu_errs);
4712 	*length = len;
4713 }
4714 
4715 static void
4716 ath11k_wmi_fw_vdev_stats_fill(struct ath11k *ar,
4717 			      const struct ath11k_fw_stats_vdev *vdev,
4718 			      char *buf, u32 *length)
4719 {
4720 	u32 len = *length;
4721 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
4722 	struct ath11k_vif *arvif = ath11k_mac_get_arvif(ar, vdev->vdev_id);
4723 	u8 *vif_macaddr;
4724 	int i;
4725 
4726 	/* VDEV stats has all the active VDEVs of other PDEVs as well,
4727 	 * ignoring those not part of requested PDEV
4728 	 */
4729 	if (!arvif)
4730 		return;
4731 
4732 	vif_macaddr = arvif->vif->addr;
4733 
4734 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
4735 			 "VDEV ID", vdev->vdev_id);
4736 	len += scnprintf(buf + len, buf_len - len, "%30s %pM\n",
4737 			 "VDEV MAC address", vif_macaddr);
4738 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
4739 			 "beacon snr", vdev->beacon_snr);
4740 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
4741 			 "data snr", vdev->data_snr);
4742 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
4743 			 "num rx frames", vdev->num_rx_frames);
4744 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
4745 			 "num rts fail", vdev->num_rts_fail);
4746 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
4747 			 "num rts success", vdev->num_rts_success);
4748 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
4749 			 "num rx err", vdev->num_rx_err);
4750 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
4751 			 "num rx discard", vdev->num_rx_discard);
4752 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
4753 			 "num tx not acked", vdev->num_tx_not_acked);
4754 
4755 	for (i = 0 ; i < ARRAY_SIZE(vdev->num_tx_frames); i++)
4756 		len += scnprintf(buf + len, buf_len - len,
4757 				"%25s [%02d] %u\n",
4758 				"num tx frames", i,
4759 				vdev->num_tx_frames[i]);
4760 
4761 	for (i = 0 ; i < ARRAY_SIZE(vdev->num_tx_frames_retries); i++)
4762 		len += scnprintf(buf + len, buf_len - len,
4763 				"%25s [%02d] %u\n",
4764 				"num tx frames retries", i,
4765 				vdev->num_tx_frames_retries[i]);
4766 
4767 	for (i = 0 ; i < ARRAY_SIZE(vdev->num_tx_frames_failures); i++)
4768 		len += scnprintf(buf + len, buf_len - len,
4769 				"%25s [%02d] %u\n",
4770 				"num tx frames failures", i,
4771 				vdev->num_tx_frames_failures[i]);
4772 
4773 	for (i = 0 ; i < ARRAY_SIZE(vdev->tx_rate_history); i++)
4774 		len += scnprintf(buf + len, buf_len - len,
4775 				"%25s [%02d] 0x%08x\n",
4776 				"tx rate history", i,
4777 				vdev->tx_rate_history[i]);
4778 
4779 	for (i = 0 ; i < ARRAY_SIZE(vdev->beacon_rssi_history); i++)
4780 		len += scnprintf(buf + len, buf_len - len,
4781 				"%25s [%02d] %u\n",
4782 				"beacon rssi history", i,
4783 				vdev->beacon_rssi_history[i]);
4784 
4785 	len += scnprintf(buf + len, buf_len - len, "\n");
4786 	*length = len;
4787 }
4788 
4789 static void
4790 ath11k_wmi_fw_bcn_stats_fill(struct ath11k *ar,
4791 			     const struct ath11k_fw_stats_bcn *bcn,
4792 			     char *buf, u32 *length)
4793 {
4794 	u32 len = *length;
4795 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
4796 	struct ath11k_vif *arvif = ath11k_mac_get_arvif(ar, bcn->vdev_id);
4797 	u8 *vdev_macaddr;
4798 
4799 	if (!arvif) {
4800 		ath11k_warn(ar->ab, "invalid vdev id %d in bcn stats",
4801 			    bcn->vdev_id);
4802 		return;
4803 	}
4804 
4805 	vdev_macaddr = arvif->vif->addr;
4806 
4807 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
4808 			 "VDEV ID", bcn->vdev_id);
4809 	len += scnprintf(buf + len, buf_len - len, "%30s %pM\n",
4810 			 "VDEV MAC address", vdev_macaddr);
4811 	len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
4812 			 "================");
4813 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
4814 			 "Num of beacon tx success", bcn->tx_bcn_succ_cnt);
4815 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
4816 			 "Num of beacon tx failures", bcn->tx_bcn_outage_cnt);
4817 
4818 	len += scnprintf(buf + len, buf_len - len, "\n");
4819 	*length = len;
4820 }
4821 
4822 void ath11k_wmi_fw_stats_fill(struct ath11k *ar,
4823 			      struct ath11k_fw_stats *fw_stats,
4824 			      u32 stats_id, char *buf)
4825 {
4826 	u32 len = 0;
4827 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
4828 	const struct ath11k_fw_stats_pdev *pdev;
4829 	const struct ath11k_fw_stats_vdev *vdev;
4830 	const struct ath11k_fw_stats_bcn *bcn;
4831 	size_t num_bcn;
4832 
4833 	spin_lock_bh(&ar->data_lock);
4834 
4835 	if (stats_id == WMI_REQUEST_PDEV_STAT) {
4836 		pdev = list_first_entry_or_null(&fw_stats->pdevs,
4837 						struct ath11k_fw_stats_pdev, list);
4838 		if (!pdev) {
4839 			ath11k_warn(ar->ab, "failed to get pdev stats\n");
4840 			goto unlock;
4841 		}
4842 
4843 		ath11k_wmi_fw_pdev_base_stats_fill(pdev, buf, &len);
4844 		ath11k_wmi_fw_pdev_tx_stats_fill(pdev, buf, &len);
4845 		ath11k_wmi_fw_pdev_rx_stats_fill(pdev, buf, &len);
4846 	}
4847 
4848 	if (stats_id == WMI_REQUEST_VDEV_STAT) {
4849 		len += scnprintf(buf + len, buf_len - len, "\n");
4850 		len += scnprintf(buf + len, buf_len - len, "%30s\n",
4851 				 "ath11k VDEV stats");
4852 		len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
4853 				 "=================");
4854 
4855 		list_for_each_entry(vdev, &fw_stats->vdevs, list)
4856 			ath11k_wmi_fw_vdev_stats_fill(ar, vdev, buf, &len);
4857 	}
4858 
4859 	if (stats_id == WMI_REQUEST_BCN_STAT) {
4860 		num_bcn = ath11k_wmi_fw_stats_num_bcn(&fw_stats->bcn);
4861 
4862 		len += scnprintf(buf + len, buf_len - len, "\n");
4863 		len += scnprintf(buf + len, buf_len - len, "%30s (%zu)\n",
4864 				 "ath11k Beacon stats", num_bcn);
4865 		len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
4866 				 "===================");
4867 
4868 		list_for_each_entry(bcn, &fw_stats->bcn, list)
4869 			ath11k_wmi_fw_bcn_stats_fill(ar, bcn, buf, &len);
4870 	}
4871 
4872 unlock:
4873 	spin_unlock_bh(&ar->data_lock);
4874 
4875 	if (len >= buf_len)
4876 		buf[len - 1] = 0;
4877 	else
4878 		buf[len] = 0;
4879 }
4880 
4881 static void ath11k_wmi_op_ep_tx_credits(struct ath11k_base *ab)
4882 {
4883 	/* try to send pending beacons first. they take priority */
4884 	wake_up(&ab->wmi_ab.tx_credits_wq);
4885 }
4886 
4887 static void ath11k_wmi_htc_tx_complete(struct ath11k_base *ab,
4888 				       struct sk_buff *skb)
4889 {
4890 	dev_kfree_skb(skb);
4891 }
4892 
4893 static bool ath11k_reg_is_world_alpha(char *alpha)
4894 {
4895 	return alpha[0] == '0' && alpha[1] == '0';
4896 }
4897 
4898 static int ath11k_reg_chan_list_event(struct ath11k_base *ab, struct sk_buff *skb)
4899 {
4900 	struct cur_regulatory_info *reg_info = NULL;
4901 	struct ieee80211_regdomain *regd = NULL;
4902 	bool intersect = false;
4903 	int ret = 0, pdev_idx;
4904 	struct ath11k *ar;
4905 
4906 	reg_info = kzalloc(sizeof(*reg_info), GFP_ATOMIC);
4907 	if (!reg_info) {
4908 		ret = -ENOMEM;
4909 		goto fallback;
4910 	}
4911 
4912 	ret = ath11k_pull_reg_chan_list_update_ev(ab, skb, reg_info);
4913 	if (ret) {
4914 		ath11k_warn(ab, "failed to extract regulatory info from received event\n");
4915 		goto fallback;
4916 	}
4917 
4918 	if (reg_info->status_code != REG_SET_CC_STATUS_PASS) {
4919 		/* In case of failure to set the requested ctry,
4920 		 * fw retains the current regd. We print a failure info
4921 		 * and return from here.
4922 		 */
4923 		ath11k_warn(ab, "Failed to set the requested Country regulatory setting\n");
4924 		goto mem_free;
4925 	}
4926 
4927 	pdev_idx = reg_info->phy_id;
4928 
4929 	if (pdev_idx >= ab->num_radios)
4930 		goto fallback;
4931 
4932 	/* Avoid multiple overwrites to default regd, during core
4933 	 * stop-start after mac registration.
4934 	 */
4935 	if (ab->default_regd[pdev_idx] && !ab->new_regd[pdev_idx] &&
4936 	    !memcmp((char *)ab->default_regd[pdev_idx]->alpha2,
4937 		    (char *)reg_info->alpha2, 2))
4938 		goto mem_free;
4939 
4940 	/* Intersect new rules with default regd if a new country setting was
4941 	 * requested, i.e a default regd was already set during initialization
4942 	 * and the regd coming from this event has a valid country info.
4943 	 */
4944 	if (ab->default_regd[pdev_idx] &&
4945 	    !ath11k_reg_is_world_alpha((char *)
4946 		ab->default_regd[pdev_idx]->alpha2) &&
4947 	    !ath11k_reg_is_world_alpha((char *)reg_info->alpha2))
4948 		intersect = true;
4949 
4950 	regd = ath11k_reg_build_regd(ab, reg_info, intersect);
4951 	if (!regd) {
4952 		ath11k_warn(ab, "failed to build regd from reg_info\n");
4953 		goto fallback;
4954 	}
4955 
4956 	spin_lock(&ab->base_lock);
4957 	if (test_bit(ATH11K_FLAG_REGISTERED, &ab->dev_flags)) {
4958 		/* Once mac is registered, ar is valid and all CC events from
4959 		 * fw is considered to be received due to user requests
4960 		 * currently.
4961 		 * Free previously built regd before assigning the newly
4962 		 * generated regd to ar. NULL pointer handling will be
4963 		 * taken care by kfree itself.
4964 		 */
4965 		ar = ab->pdevs[pdev_idx].ar;
4966 		kfree(ab->new_regd[pdev_idx]);
4967 		ab->new_regd[pdev_idx] = regd;
4968 		ieee80211_queue_work(ar->hw, &ar->regd_update_work);
4969 	} else {
4970 		/* Multiple events for the same *ar is not expected. But we
4971 		 * can still clear any previously stored default_regd if we
4972 		 * are receiving this event for the same radio by mistake.
4973 		 * NULL pointer handling will be taken care by kfree itself.
4974 		 */
4975 		kfree(ab->default_regd[pdev_idx]);
4976 		/* This regd would be applied during mac registration */
4977 		ab->default_regd[pdev_idx] = regd;
4978 	}
4979 	ab->dfs_region = reg_info->dfs_region;
4980 	spin_unlock(&ab->base_lock);
4981 
4982 	goto mem_free;
4983 
4984 fallback:
4985 	/* Fallback to older reg (by sending previous country setting
4986 	 * again if fw has succeded and we failed to process here.
4987 	 * The Regdomain should be uniform across driver and fw. Since the
4988 	 * FW has processed the command and sent a success status, we expect
4989 	 * this function to succeed as well. If it doesn't, CTRY needs to be
4990 	 * reverted at the fw and the old SCAN_CHAN_LIST cmd needs to be sent.
4991 	 */
4992 	/* TODO: This is rare, but still should also be handled */
4993 	WARN_ON(1);
4994 mem_free:
4995 	if (reg_info) {
4996 		kfree(reg_info->reg_rules_2g_ptr);
4997 		kfree(reg_info->reg_rules_5g_ptr);
4998 		kfree(reg_info);
4999 	}
5000 	return ret;
5001 }
5002 
5003 static int ath11k_wmi_tlv_rdy_parse(struct ath11k_base *ab, u16 tag, u16 len,
5004 				    const void *ptr, void *data)
5005 {
5006 	struct wmi_tlv_rdy_parse *rdy_parse = data;
5007 	struct wmi_ready_event fixed_param;
5008 	struct wmi_mac_addr *addr_list;
5009 	struct ath11k_pdev *pdev;
5010 	u32 num_mac_addr;
5011 	int i;
5012 
5013 	switch (tag) {
5014 	case WMI_TAG_READY_EVENT:
5015 		memset(&fixed_param, 0, sizeof(fixed_param));
5016 		memcpy(&fixed_param, (struct wmi_ready_event *)ptr,
5017 		       min_t(u16, sizeof(fixed_param), len));
5018 		ab->wlan_init_status = fixed_param.ready_event_min.status;
5019 		rdy_parse->num_extra_mac_addr =
5020 			fixed_param.ready_event_min.num_extra_mac_addr;
5021 
5022 		ether_addr_copy(ab->mac_addr,
5023 				fixed_param.ready_event_min.mac_addr.addr);
5024 		ab->pktlog_defs_checksum = fixed_param.pktlog_defs_checksum;
5025 		ab->wmi_ready = true;
5026 		break;
5027 	case WMI_TAG_ARRAY_FIXED_STRUCT:
5028 		addr_list = (struct wmi_mac_addr *)ptr;
5029 		num_mac_addr = rdy_parse->num_extra_mac_addr;
5030 
5031 		if (!(ab->num_radios > 1 && num_mac_addr >= ab->num_radios))
5032 			break;
5033 
5034 		for (i = 0; i < ab->num_radios; i++) {
5035 			pdev = &ab->pdevs[i];
5036 			ether_addr_copy(pdev->mac_addr, addr_list[i].addr);
5037 		}
5038 		ab->pdevs_macaddr_valid = true;
5039 		break;
5040 	default:
5041 		break;
5042 	}
5043 
5044 	return 0;
5045 }
5046 
5047 static int ath11k_ready_event(struct ath11k_base *ab, struct sk_buff *skb)
5048 {
5049 	struct wmi_tlv_rdy_parse rdy_parse = { };
5050 	int ret;
5051 
5052 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
5053 				  ath11k_wmi_tlv_rdy_parse, &rdy_parse);
5054 	if (ret) {
5055 		ath11k_warn(ab, "failed to parse tlv %d\n", ret);
5056 		return ret;
5057 	}
5058 
5059 	complete(&ab->wmi_ab.unified_ready);
5060 	return 0;
5061 }
5062 
5063 static void ath11k_peer_delete_resp_event(struct ath11k_base *ab, struct sk_buff *skb)
5064 {
5065 	struct wmi_peer_delete_resp_event peer_del_resp;
5066 
5067 	if (ath11k_pull_peer_del_resp_ev(ab, skb, &peer_del_resp) != 0) {
5068 		ath11k_warn(ab, "failed to extract peer delete resp");
5069 		return;
5070 	}
5071 
5072 	/* TODO: Do we need to validate whether ath11k_peer_find() return NULL
5073 	 *	 Why this is needed when there is HTT event for peer delete
5074 	 */
5075 }
5076 
5077 static inline const char *ath11k_wmi_vdev_resp_print(u32 vdev_resp_status)
5078 {
5079 	switch (vdev_resp_status) {
5080 	case WMI_VDEV_START_RESPONSE_INVALID_VDEVID:
5081 		return "invalid vdev id";
5082 	case WMI_VDEV_START_RESPONSE_NOT_SUPPORTED:
5083 		return "not supported";
5084 	case WMI_VDEV_START_RESPONSE_DFS_VIOLATION:
5085 		return "dfs violation";
5086 	case WMI_VDEV_START_RESPONSE_INVALID_REGDOMAIN:
5087 		return "invalid regdomain";
5088 	default:
5089 		return "unknown";
5090 	}
5091 }
5092 
5093 static void ath11k_vdev_start_resp_event(struct ath11k_base *ab, struct sk_buff *skb)
5094 {
5095 	struct wmi_vdev_start_resp_event vdev_start_resp;
5096 	struct ath11k *ar;
5097 	u32 status;
5098 
5099 	if (ath11k_pull_vdev_start_resp_tlv(ab, skb, &vdev_start_resp) != 0) {
5100 		ath11k_warn(ab, "failed to extract vdev start resp");
5101 		return;
5102 	}
5103 
5104 	rcu_read_lock();
5105 	ar = ath11k_mac_get_ar_by_vdev_id(ab, vdev_start_resp.vdev_id);
5106 	if (!ar) {
5107 		ath11k_warn(ab, "invalid vdev id in vdev start resp ev %d",
5108 			    vdev_start_resp.vdev_id);
5109 		rcu_read_unlock();
5110 		return;
5111 	}
5112 
5113 	ar->last_wmi_vdev_start_status = 0;
5114 
5115 	status = vdev_start_resp.status;
5116 
5117 	if (WARN_ON_ONCE(status)) {
5118 		ath11k_warn(ab, "vdev start resp error status %d (%s)\n",
5119 			    status, ath11k_wmi_vdev_resp_print(status));
5120 		ar->last_wmi_vdev_start_status = status;
5121 	}
5122 
5123 	complete(&ar->vdev_setup_done);
5124 
5125 	rcu_read_unlock();
5126 
5127 	ath11k_dbg(ab, ATH11K_DBG_WMI, "vdev start resp for vdev id %d",
5128 		   vdev_start_resp.vdev_id);
5129 }
5130 
5131 static void ath11k_bcn_tx_status_event(struct ath11k_base *ab, struct sk_buff *skb)
5132 {
5133 	u32 vdev_id, tx_status;
5134 
5135 	if (ath11k_pull_bcn_tx_status_ev(ab, skb->data, skb->len,
5136 					 &vdev_id, &tx_status) != 0) {
5137 		ath11k_warn(ab, "failed to extract bcn tx status");
5138 		return;
5139 	}
5140 }
5141 
5142 static void ath11k_vdev_stopped_event(struct ath11k_base *ab, struct sk_buff *skb)
5143 {
5144 	struct ath11k *ar;
5145 	u32 vdev_id = 0;
5146 
5147 	if (ath11k_pull_vdev_stopped_param_tlv(ab, skb, &vdev_id) != 0) {
5148 		ath11k_warn(ab, "failed to extract vdev stopped event");
5149 		return;
5150 	}
5151 
5152 	rcu_read_lock();
5153 	ar = ath11k_mac_get_ar_vdev_stop_status(ab, vdev_id);
5154 	if (!ar) {
5155 		ath11k_warn(ab, "invalid vdev id in vdev stopped ev %d",
5156 			    vdev_id);
5157 		rcu_read_unlock();
5158 		return;
5159 	}
5160 
5161 	complete(&ar->vdev_setup_done);
5162 
5163 	rcu_read_unlock();
5164 
5165 	ath11k_dbg(ab, ATH11K_DBG_WMI, "vdev stopped for vdev id %d", vdev_id);
5166 }
5167 
5168 static void ath11k_mgmt_rx_event(struct ath11k_base *ab, struct sk_buff *skb)
5169 {
5170 	struct mgmt_rx_event_params rx_ev = {0};
5171 	struct ath11k *ar;
5172 	struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(skb);
5173 	struct ieee80211_hdr *hdr;
5174 	u16 fc;
5175 	struct ieee80211_supported_band *sband;
5176 
5177 	if (ath11k_pull_mgmt_rx_params_tlv(ab, skb, &rx_ev) != 0) {
5178 		ath11k_warn(ab, "failed to extract mgmt rx event");
5179 		dev_kfree_skb(skb);
5180 		return;
5181 	}
5182 
5183 	memset(status, 0, sizeof(*status));
5184 
5185 	ath11k_dbg(ab, ATH11K_DBG_MGMT, "mgmt rx event status %08x\n",
5186 		   rx_ev.status);
5187 
5188 	rcu_read_lock();
5189 	ar = ath11k_mac_get_ar_by_pdev_id(ab, rx_ev.pdev_id);
5190 
5191 	if (!ar) {
5192 		ath11k_warn(ab, "invalid pdev_id %d in mgmt_rx_event\n",
5193 			    rx_ev.pdev_id);
5194 		dev_kfree_skb(skb);
5195 		goto exit;
5196 	}
5197 
5198 	if ((test_bit(ATH11K_CAC_RUNNING, &ar->dev_flags)) ||
5199 	    (rx_ev.status & (WMI_RX_STATUS_ERR_DECRYPT |
5200 	    WMI_RX_STATUS_ERR_KEY_CACHE_MISS | WMI_RX_STATUS_ERR_CRC))) {
5201 		dev_kfree_skb(skb);
5202 		goto exit;
5203 	}
5204 
5205 	if (rx_ev.status & WMI_RX_STATUS_ERR_MIC)
5206 		status->flag |= RX_FLAG_MMIC_ERROR;
5207 
5208 	if (rx_ev.chan_freq >= ATH11K_MIN_6G_FREQ) {
5209 		status->band = NL80211_BAND_6GHZ;
5210 	} else if (rx_ev.channel >= 1 && rx_ev.channel <= 14) {
5211 		status->band = NL80211_BAND_2GHZ;
5212 	} else if (rx_ev.channel >= 36 && rx_ev.channel <= ATH11K_MAX_5G_CHAN) {
5213 		status->band = NL80211_BAND_5GHZ;
5214 	} else {
5215 		/* Shouldn't happen unless list of advertised channels to
5216 		 * mac80211 has been changed.
5217 		 */
5218 		WARN_ON_ONCE(1);
5219 		dev_kfree_skb(skb);
5220 		goto exit;
5221 	}
5222 
5223 	if (rx_ev.phy_mode == MODE_11B &&
5224 	    (status->band == NL80211_BAND_5GHZ || status->band == NL80211_BAND_6GHZ))
5225 		ath11k_dbg(ab, ATH11K_DBG_WMI,
5226 			   "wmi mgmt rx 11b (CCK) on 5/6GHz, band = %d\n", status->band);
5227 
5228 	sband = &ar->mac.sbands[status->band];
5229 
5230 	status->freq = ieee80211_channel_to_frequency(rx_ev.channel,
5231 						      status->band);
5232 	status->signal = rx_ev.snr + ATH11K_DEFAULT_NOISE_FLOOR;
5233 	status->rate_idx = ath11k_mac_bitrate_to_idx(sband, rx_ev.rate / 100);
5234 
5235 	hdr = (struct ieee80211_hdr *)skb->data;
5236 	fc = le16_to_cpu(hdr->frame_control);
5237 
5238 	/* Firmware is guaranteed to report all essential management frames via
5239 	 * WMI while it can deliver some extra via HTT. Since there can be
5240 	 * duplicates split the reporting wrt monitor/sniffing.
5241 	 */
5242 	status->flag |= RX_FLAG_SKIP_MONITOR;
5243 
5244 	/* In case of PMF, FW delivers decrypted frames with Protected Bit set.
5245 	 * Don't clear that. Also, FW delivers broadcast management frames
5246 	 * (ex: group privacy action frames in mesh) as encrypted payload.
5247 	 */
5248 	if (ieee80211_has_protected(hdr->frame_control) &&
5249 	    !is_multicast_ether_addr(ieee80211_get_DA(hdr))) {
5250 		status->flag |= RX_FLAG_DECRYPTED;
5251 
5252 		if (!ieee80211_is_robust_mgmt_frame(skb)) {
5253 			status->flag |= RX_FLAG_IV_STRIPPED |
5254 					RX_FLAG_MMIC_STRIPPED;
5255 			hdr->frame_control = __cpu_to_le16(fc &
5256 					     ~IEEE80211_FCTL_PROTECTED);
5257 		}
5258 	}
5259 
5260 	/* TODO: Pending handle beacon implementation
5261 	 *if (ieee80211_is_beacon(hdr->frame_control))
5262 	 *	ath11k_mac_handle_beacon(ar, skb);
5263 	 */
5264 
5265 	ath11k_dbg(ab, ATH11K_DBG_MGMT,
5266 		   "event mgmt rx skb %pK len %d ftype %02x stype %02x\n",
5267 		   skb, skb->len,
5268 		   fc & IEEE80211_FCTL_FTYPE, fc & IEEE80211_FCTL_STYPE);
5269 
5270 	ath11k_dbg(ab, ATH11K_DBG_MGMT,
5271 		   "event mgmt rx freq %d band %d snr %d, rate_idx %d\n",
5272 		   status->freq, status->band, status->signal,
5273 		   status->rate_idx);
5274 
5275 	ieee80211_rx_ni(ar->hw, skb);
5276 
5277 exit:
5278 	rcu_read_unlock();
5279 }
5280 
5281 static void ath11k_mgmt_tx_compl_event(struct ath11k_base *ab, struct sk_buff *skb)
5282 {
5283 	struct wmi_mgmt_tx_compl_event tx_compl_param = {0};
5284 	struct ath11k *ar;
5285 
5286 	if (ath11k_pull_mgmt_tx_compl_param_tlv(ab, skb, &tx_compl_param) != 0) {
5287 		ath11k_warn(ab, "failed to extract mgmt tx compl event");
5288 		return;
5289 	}
5290 
5291 	rcu_read_lock();
5292 	ar = ath11k_mac_get_ar_by_pdev_id(ab, tx_compl_param.pdev_id);
5293 	if (!ar) {
5294 		ath11k_warn(ab, "invalid pdev id %d in mgmt_tx_compl_event\n",
5295 			    tx_compl_param.pdev_id);
5296 		goto exit;
5297 	}
5298 
5299 	wmi_process_mgmt_tx_comp(ar, tx_compl_param.desc_id,
5300 				 tx_compl_param.status);
5301 
5302 	ath11k_dbg(ab, ATH11K_DBG_MGMT,
5303 		   "mgmt tx compl ev pdev_id %d, desc_id %d, status %d",
5304 		   tx_compl_param.pdev_id, tx_compl_param.desc_id,
5305 		   tx_compl_param.status);
5306 
5307 exit:
5308 	rcu_read_unlock();
5309 }
5310 
5311 static struct ath11k *ath11k_get_ar_on_scan_abort(struct ath11k_base *ab,
5312 						  u32 vdev_id)
5313 {
5314 	int i;
5315 	struct ath11k_pdev *pdev;
5316 	struct ath11k *ar;
5317 
5318 	for (i = 0; i < ab->num_radios; i++) {
5319 		pdev = rcu_dereference(ab->pdevs_active[i]);
5320 		if (pdev && pdev->ar) {
5321 			ar = pdev->ar;
5322 
5323 			spin_lock_bh(&ar->data_lock);
5324 			if (ar->scan.state == ATH11K_SCAN_ABORTING &&
5325 			    ar->scan.vdev_id == vdev_id) {
5326 				spin_unlock_bh(&ar->data_lock);
5327 				return ar;
5328 			}
5329 			spin_unlock_bh(&ar->data_lock);
5330 		}
5331 	}
5332 	return NULL;
5333 }
5334 
5335 static void ath11k_scan_event(struct ath11k_base *ab, struct sk_buff *skb)
5336 {
5337 	struct ath11k *ar;
5338 	struct wmi_scan_event scan_ev = {0};
5339 
5340 	if (ath11k_pull_scan_ev(ab, skb, &scan_ev) != 0) {
5341 		ath11k_warn(ab, "failed to extract scan event");
5342 		return;
5343 	}
5344 
5345 	rcu_read_lock();
5346 
5347 	/* In case the scan was cancelled, ex. during interface teardown,
5348 	 * the interface will not be found in active interfaces.
5349 	 * Rather, in such scenarios, iterate over the active pdev's to
5350 	 * search 'ar' if the corresponding 'ar' scan is ABORTING and the
5351 	 * aborting scan's vdev id matches this event info.
5352 	 */
5353 	if (scan_ev.event_type == WMI_SCAN_EVENT_COMPLETED &&
5354 	    scan_ev.reason == WMI_SCAN_REASON_CANCELLED)
5355 		ar = ath11k_get_ar_on_scan_abort(ab, scan_ev.vdev_id);
5356 	else
5357 		ar = ath11k_mac_get_ar_by_vdev_id(ab, scan_ev.vdev_id);
5358 
5359 	if (!ar) {
5360 		ath11k_warn(ab, "Received scan event for unknown vdev");
5361 		rcu_read_unlock();
5362 		return;
5363 	}
5364 
5365 	spin_lock_bh(&ar->data_lock);
5366 
5367 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5368 		   "scan event %s type %d reason %d freq %d req_id %d scan_id %d vdev_id %d state %s (%d)\n",
5369 		   ath11k_wmi_event_scan_type_str(scan_ev.event_type, scan_ev.reason),
5370 		   scan_ev.event_type, scan_ev.reason, scan_ev.channel_freq,
5371 		   scan_ev.scan_req_id, scan_ev.scan_id, scan_ev.vdev_id,
5372 		   ath11k_scan_state_str(ar->scan.state), ar->scan.state);
5373 
5374 	switch (scan_ev.event_type) {
5375 	case WMI_SCAN_EVENT_STARTED:
5376 		ath11k_wmi_event_scan_started(ar);
5377 		break;
5378 	case WMI_SCAN_EVENT_COMPLETED:
5379 		ath11k_wmi_event_scan_completed(ar);
5380 		break;
5381 	case WMI_SCAN_EVENT_BSS_CHANNEL:
5382 		ath11k_wmi_event_scan_bss_chan(ar);
5383 		break;
5384 	case WMI_SCAN_EVENT_FOREIGN_CHAN:
5385 		ath11k_wmi_event_scan_foreign_chan(ar, scan_ev.channel_freq);
5386 		break;
5387 	case WMI_SCAN_EVENT_START_FAILED:
5388 		ath11k_warn(ab, "received scan start failure event\n");
5389 		ath11k_wmi_event_scan_start_failed(ar);
5390 		break;
5391 	case WMI_SCAN_EVENT_DEQUEUED:
5392 	case WMI_SCAN_EVENT_PREEMPTED:
5393 	case WMI_SCAN_EVENT_RESTARTED:
5394 	case WMI_SCAN_EVENT_FOREIGN_CHAN_EXIT:
5395 	default:
5396 		break;
5397 	}
5398 
5399 	spin_unlock_bh(&ar->data_lock);
5400 
5401 	rcu_read_unlock();
5402 }
5403 
5404 static void ath11k_peer_sta_kickout_event(struct ath11k_base *ab, struct sk_buff *skb)
5405 {
5406 	struct wmi_peer_sta_kickout_arg arg = {};
5407 	struct ieee80211_sta *sta;
5408 	struct ath11k_peer *peer;
5409 	struct ath11k *ar;
5410 
5411 	if (ath11k_pull_peer_sta_kickout_ev(ab, skb, &arg) != 0) {
5412 		ath11k_warn(ab, "failed to extract peer sta kickout event");
5413 		return;
5414 	}
5415 
5416 	rcu_read_lock();
5417 
5418 	spin_lock_bh(&ab->base_lock);
5419 
5420 	peer = ath11k_peer_find_by_addr(ab, arg.mac_addr);
5421 
5422 	if (!peer) {
5423 		ath11k_warn(ab, "peer not found %pM\n",
5424 			    arg.mac_addr);
5425 		goto exit;
5426 	}
5427 
5428 	ar = ath11k_mac_get_ar_by_vdev_id(ab, peer->vdev_id);
5429 	if (!ar) {
5430 		ath11k_warn(ab, "invalid vdev id in peer sta kickout ev %d",
5431 			    peer->vdev_id);
5432 		goto exit;
5433 	}
5434 
5435 	sta = ieee80211_find_sta_by_ifaddr(ar->hw,
5436 					   arg.mac_addr, NULL);
5437 	if (!sta) {
5438 		ath11k_warn(ab, "Spurious quick kickout for STA %pM\n",
5439 			    arg.mac_addr);
5440 		goto exit;
5441 	}
5442 
5443 	ath11k_dbg(ab, ATH11K_DBG_WMI, "peer sta kickout event %pM",
5444 		   arg.mac_addr);
5445 
5446 	ieee80211_report_low_ack(sta, 10);
5447 
5448 exit:
5449 	spin_unlock_bh(&ab->base_lock);
5450 	rcu_read_unlock();
5451 }
5452 
5453 static void ath11k_roam_event(struct ath11k_base *ab, struct sk_buff *skb)
5454 {
5455 	struct wmi_roam_event roam_ev = {};
5456 	struct ath11k *ar;
5457 
5458 	if (ath11k_pull_roam_ev(ab, skb, &roam_ev) != 0) {
5459 		ath11k_warn(ab, "failed to extract roam event");
5460 		return;
5461 	}
5462 
5463 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5464 		   "wmi roam event vdev %u reason 0x%08x rssi %d\n",
5465 		   roam_ev.vdev_id, roam_ev.reason, roam_ev.rssi);
5466 
5467 	rcu_read_lock();
5468 	ar = ath11k_mac_get_ar_by_vdev_id(ab, roam_ev.vdev_id);
5469 	if (!ar) {
5470 		ath11k_warn(ab, "invalid vdev id in roam ev %d",
5471 			    roam_ev.vdev_id);
5472 		rcu_read_unlock();
5473 		return;
5474 	}
5475 
5476 	if (roam_ev.reason >= WMI_ROAM_REASON_MAX)
5477 		ath11k_warn(ab, "ignoring unknown roam event reason %d on vdev %i\n",
5478 			    roam_ev.reason, roam_ev.vdev_id);
5479 
5480 	switch (roam_ev.reason) {
5481 	case WMI_ROAM_REASON_BEACON_MISS:
5482 		/* TODO: Pending beacon miss and connection_loss_work
5483 		 * implementation
5484 		 * ath11k_mac_handle_beacon_miss(ar, vdev_id);
5485 		 */
5486 		break;
5487 	case WMI_ROAM_REASON_BETTER_AP:
5488 	case WMI_ROAM_REASON_LOW_RSSI:
5489 	case WMI_ROAM_REASON_SUITABLE_AP_FOUND:
5490 	case WMI_ROAM_REASON_HO_FAILED:
5491 		ath11k_warn(ab, "ignoring not implemented roam event reason %d on vdev %i\n",
5492 			    roam_ev.reason, roam_ev.vdev_id);
5493 		break;
5494 	}
5495 
5496 	rcu_read_unlock();
5497 }
5498 
5499 static void ath11k_chan_info_event(struct ath11k_base *ab, struct sk_buff *skb)
5500 {
5501 	struct wmi_chan_info_event ch_info_ev = {0};
5502 	struct ath11k *ar;
5503 	struct survey_info *survey;
5504 	int idx;
5505 	/* HW channel counters frequency value in hertz */
5506 	u32 cc_freq_hz = ab->cc_freq_hz;
5507 
5508 	if (ath11k_pull_chan_info_ev(ab, skb->data, skb->len, &ch_info_ev) != 0) {
5509 		ath11k_warn(ab, "failed to extract chan info event");
5510 		return;
5511 	}
5512 
5513 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5514 		   "chan info vdev_id %d err_code %d freq %d cmd_flags %d noise_floor %d rx_clear_count %d cycle_count %d mac_clk_mhz %d\n",
5515 		   ch_info_ev.vdev_id, ch_info_ev.err_code, ch_info_ev.freq,
5516 		   ch_info_ev.cmd_flags, ch_info_ev.noise_floor,
5517 		   ch_info_ev.rx_clear_count, ch_info_ev.cycle_count,
5518 		   ch_info_ev.mac_clk_mhz);
5519 
5520 	if (ch_info_ev.cmd_flags == WMI_CHAN_INFO_END_RESP) {
5521 		ath11k_dbg(ab, ATH11K_DBG_WMI, "chan info report completed\n");
5522 		return;
5523 	}
5524 
5525 	rcu_read_lock();
5526 	ar = ath11k_mac_get_ar_by_vdev_id(ab, ch_info_ev.vdev_id);
5527 	if (!ar) {
5528 		ath11k_warn(ab, "invalid vdev id in chan info ev %d",
5529 			    ch_info_ev.vdev_id);
5530 		rcu_read_unlock();
5531 		return;
5532 	}
5533 	spin_lock_bh(&ar->data_lock);
5534 
5535 	switch (ar->scan.state) {
5536 	case ATH11K_SCAN_IDLE:
5537 	case ATH11K_SCAN_STARTING:
5538 		ath11k_warn(ab, "received chan info event without a scan request, ignoring\n");
5539 		goto exit;
5540 	case ATH11K_SCAN_RUNNING:
5541 	case ATH11K_SCAN_ABORTING:
5542 		break;
5543 	}
5544 
5545 	idx = freq_to_idx(ar, ch_info_ev.freq);
5546 	if (idx >= ARRAY_SIZE(ar->survey)) {
5547 		ath11k_warn(ab, "chan info: invalid frequency %d (idx %d out of bounds)\n",
5548 			    ch_info_ev.freq, idx);
5549 		goto exit;
5550 	}
5551 
5552 	/* If FW provides MAC clock frequency in Mhz, overriding the initialized
5553 	 * HW channel counters frequency value
5554 	 */
5555 	if (ch_info_ev.mac_clk_mhz)
5556 		cc_freq_hz = (ch_info_ev.mac_clk_mhz * 1000);
5557 
5558 	if (ch_info_ev.cmd_flags == WMI_CHAN_INFO_START_RESP) {
5559 		survey = &ar->survey[idx];
5560 		memset(survey, 0, sizeof(*survey));
5561 		survey->noise = ch_info_ev.noise_floor;
5562 		survey->filled = SURVEY_INFO_NOISE_DBM | SURVEY_INFO_TIME |
5563 				 SURVEY_INFO_TIME_BUSY;
5564 		survey->time = div_u64(ch_info_ev.cycle_count, cc_freq_hz);
5565 		survey->time_busy = div_u64(ch_info_ev.rx_clear_count, cc_freq_hz);
5566 	}
5567 exit:
5568 	spin_unlock_bh(&ar->data_lock);
5569 	rcu_read_unlock();
5570 }
5571 
5572 static void
5573 ath11k_pdev_bss_chan_info_event(struct ath11k_base *ab, struct sk_buff *skb)
5574 {
5575 	struct wmi_pdev_bss_chan_info_event bss_ch_info_ev = {};
5576 	struct survey_info *survey;
5577 	struct ath11k *ar;
5578 	u32 cc_freq_hz = ab->cc_freq_hz;
5579 	u64 busy, total, tx, rx, rx_bss;
5580 	int idx;
5581 
5582 	if (ath11k_pull_pdev_bss_chan_info_ev(ab, skb, &bss_ch_info_ev) != 0) {
5583 		ath11k_warn(ab, "failed to extract pdev bss chan info event");
5584 		return;
5585 	}
5586 
5587 	busy = (u64)(bss_ch_info_ev.rx_clear_count_high) << 32 |
5588 			bss_ch_info_ev.rx_clear_count_low;
5589 
5590 	total = (u64)(bss_ch_info_ev.cycle_count_high) << 32 |
5591 			bss_ch_info_ev.cycle_count_low;
5592 
5593 	tx = (u64)(bss_ch_info_ev.tx_cycle_count_high) << 32 |
5594 			bss_ch_info_ev.tx_cycle_count_low;
5595 
5596 	rx = (u64)(bss_ch_info_ev.rx_cycle_count_high) << 32 |
5597 			bss_ch_info_ev.rx_cycle_count_low;
5598 
5599 	rx_bss = (u64)(bss_ch_info_ev.rx_bss_cycle_count_high) << 32 |
5600 			bss_ch_info_ev.rx_bss_cycle_count_low;
5601 
5602 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5603 		   "pdev bss chan info:\n pdev_id: %d freq: %d noise: %d cycle: busy %llu total %llu tx %llu rx %llu rx_bss %llu\n",
5604 		   bss_ch_info_ev.pdev_id, bss_ch_info_ev.freq,
5605 		   bss_ch_info_ev.noise_floor, busy, total,
5606 		   tx, rx, rx_bss);
5607 
5608 	rcu_read_lock();
5609 	ar = ath11k_mac_get_ar_by_pdev_id(ab, bss_ch_info_ev.pdev_id);
5610 
5611 	if (!ar) {
5612 		ath11k_warn(ab, "invalid pdev id %d in bss_chan_info event\n",
5613 			    bss_ch_info_ev.pdev_id);
5614 		rcu_read_unlock();
5615 		return;
5616 	}
5617 
5618 	spin_lock_bh(&ar->data_lock);
5619 	idx = freq_to_idx(ar, bss_ch_info_ev.freq);
5620 	if (idx >= ARRAY_SIZE(ar->survey)) {
5621 		ath11k_warn(ab, "bss chan info: invalid frequency %d (idx %d out of bounds)\n",
5622 			    bss_ch_info_ev.freq, idx);
5623 		goto exit;
5624 	}
5625 
5626 	survey = &ar->survey[idx];
5627 
5628 	survey->noise     = bss_ch_info_ev.noise_floor;
5629 	survey->time      = div_u64(total, cc_freq_hz);
5630 	survey->time_busy = div_u64(busy, cc_freq_hz);
5631 	survey->time_rx   = div_u64(rx_bss, cc_freq_hz);
5632 	survey->time_tx   = div_u64(tx, cc_freq_hz);
5633 	survey->filled   |= (SURVEY_INFO_NOISE_DBM |
5634 			     SURVEY_INFO_TIME |
5635 			     SURVEY_INFO_TIME_BUSY |
5636 			     SURVEY_INFO_TIME_RX |
5637 			     SURVEY_INFO_TIME_TX);
5638 exit:
5639 	spin_unlock_bh(&ar->data_lock);
5640 	complete(&ar->bss_survey_done);
5641 
5642 	rcu_read_unlock();
5643 }
5644 
5645 static void ath11k_vdev_install_key_compl_event(struct ath11k_base *ab,
5646 						struct sk_buff *skb)
5647 {
5648 	struct wmi_vdev_install_key_complete_arg install_key_compl = {0};
5649 	struct ath11k *ar;
5650 
5651 	if (ath11k_pull_vdev_install_key_compl_ev(ab, skb, &install_key_compl) != 0) {
5652 		ath11k_warn(ab, "failed to extract install key compl event");
5653 		return;
5654 	}
5655 
5656 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5657 		   "vdev install key ev idx %d flags %08x macaddr %pM status %d\n",
5658 		   install_key_compl.key_idx, install_key_compl.key_flags,
5659 		   install_key_compl.macaddr, install_key_compl.status);
5660 
5661 	rcu_read_lock();
5662 	ar = ath11k_mac_get_ar_by_vdev_id(ab, install_key_compl.vdev_id);
5663 	if (!ar) {
5664 		ath11k_warn(ab, "invalid vdev id in install key compl ev %d",
5665 			    install_key_compl.vdev_id);
5666 		rcu_read_unlock();
5667 		return;
5668 	}
5669 
5670 	ar->install_key_status = 0;
5671 
5672 	if (install_key_compl.status != WMI_VDEV_INSTALL_KEY_COMPL_STATUS_SUCCESS) {
5673 		ath11k_warn(ab, "install key failed for %pM status %d\n",
5674 			    install_key_compl.macaddr, install_key_compl.status);
5675 		ar->install_key_status = install_key_compl.status;
5676 	}
5677 
5678 	complete(&ar->install_key_done);
5679 	rcu_read_unlock();
5680 }
5681 
5682 static void ath11k_service_available_event(struct ath11k_base *ab, struct sk_buff *skb)
5683 {
5684 	const void **tb;
5685 	const struct wmi_service_available_event *ev;
5686 	int ret;
5687 	int i, j;
5688 
5689 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5690 	if (IS_ERR(tb)) {
5691 		ret = PTR_ERR(tb);
5692 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5693 		return;
5694 	}
5695 
5696 	ev = tb[WMI_TAG_SERVICE_AVAILABLE_EVENT];
5697 	if (!ev) {
5698 		ath11k_warn(ab, "failed to fetch svc available ev");
5699 		kfree(tb);
5700 		return;
5701 	}
5702 
5703 	/* TODO: Use wmi_service_segment_offset information to get the service
5704 	 * especially when more services are advertised in multiple sevice
5705 	 * available events.
5706 	 */
5707 	for (i = 0, j = WMI_MAX_SERVICE;
5708 	     i < WMI_SERVICE_SEGMENT_BM_SIZE32 && j < WMI_MAX_EXT_SERVICE;
5709 	     i++) {
5710 		do {
5711 			if (ev->wmi_service_segment_bitmap[i] &
5712 			    BIT(j % WMI_AVAIL_SERVICE_BITS_IN_SIZE32))
5713 				set_bit(j, ab->wmi_ab.svc_map);
5714 		} while (++j % WMI_AVAIL_SERVICE_BITS_IN_SIZE32);
5715 	}
5716 
5717 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5718 		   "wmi_ext_service_bitmap 0:0x%x, 1:0x%x, 2:0x%x, 3:0x%x",
5719 		   ev->wmi_service_segment_bitmap[0], ev->wmi_service_segment_bitmap[1],
5720 		   ev->wmi_service_segment_bitmap[2], ev->wmi_service_segment_bitmap[3]);
5721 
5722 	kfree(tb);
5723 }
5724 
5725 static void ath11k_peer_assoc_conf_event(struct ath11k_base *ab, struct sk_buff *skb)
5726 {
5727 	struct wmi_peer_assoc_conf_arg peer_assoc_conf = {0};
5728 	struct ath11k *ar;
5729 
5730 	if (ath11k_pull_peer_assoc_conf_ev(ab, skb, &peer_assoc_conf) != 0) {
5731 		ath11k_warn(ab, "failed to extract peer assoc conf event");
5732 		return;
5733 	}
5734 
5735 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5736 		   "peer assoc conf ev vdev id %d macaddr %pM\n",
5737 		   peer_assoc_conf.vdev_id, peer_assoc_conf.macaddr);
5738 
5739 	rcu_read_lock();
5740 	ar = ath11k_mac_get_ar_by_vdev_id(ab, peer_assoc_conf.vdev_id);
5741 
5742 	if (!ar) {
5743 		ath11k_warn(ab, "invalid vdev id in peer assoc conf ev %d",
5744 			    peer_assoc_conf.vdev_id);
5745 		rcu_read_unlock();
5746 		return;
5747 	}
5748 
5749 	complete(&ar->peer_assoc_done);
5750 	rcu_read_unlock();
5751 }
5752 
5753 static void ath11k_update_stats_event(struct ath11k_base *ab, struct sk_buff *skb)
5754 {
5755 	ath11k_debug_fw_stats_process(ab, skb);
5756 }
5757 
5758 /* PDEV_CTL_FAILSAFE_CHECK_EVENT is received from FW when the frequency scanned
5759  * is not part of BDF CTL(Conformance test limits) table entries.
5760  */
5761 static void ath11k_pdev_ctl_failsafe_check_event(struct ath11k_base *ab,
5762 						 struct sk_buff *skb)
5763 {
5764 	const void **tb;
5765 	const struct wmi_pdev_ctl_failsafe_chk_event *ev;
5766 	int ret;
5767 
5768 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5769 	if (IS_ERR(tb)) {
5770 		ret = PTR_ERR(tb);
5771 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5772 		return;
5773 	}
5774 
5775 	ev = tb[WMI_TAG_PDEV_CTL_FAILSAFE_CHECK_EVENT];
5776 	if (!ev) {
5777 		ath11k_warn(ab, "failed to fetch pdev ctl failsafe check ev");
5778 		kfree(tb);
5779 		return;
5780 	}
5781 
5782 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5783 		   "pdev ctl failsafe check ev status %d\n",
5784 		   ev->ctl_failsafe_status);
5785 
5786 	/* If ctl_failsafe_status is set to 1 FW will max out the Transmit power
5787 	 * to 10 dBm else the CTL power entry in the BDF would be picked up.
5788 	 */
5789 	if (ev->ctl_failsafe_status != 0)
5790 		ath11k_warn(ab, "pdev ctl failsafe failure status %d",
5791 			    ev->ctl_failsafe_status);
5792 
5793 	kfree(tb);
5794 }
5795 
5796 static void
5797 ath11k_wmi_process_csa_switch_count_event(struct ath11k_base *ab,
5798 					  const struct wmi_pdev_csa_switch_ev *ev,
5799 					  const u32 *vdev_ids)
5800 {
5801 	int i;
5802 	struct ath11k_vif *arvif;
5803 
5804 	/* Finish CSA once the switch count becomes NULL */
5805 	if (ev->current_switch_count)
5806 		return;
5807 
5808 	rcu_read_lock();
5809 	for (i = 0; i < ev->num_vdevs; i++) {
5810 		arvif = ath11k_mac_get_arvif_by_vdev_id(ab, vdev_ids[i]);
5811 
5812 		if (!arvif) {
5813 			ath11k_warn(ab, "Recvd csa status for unknown vdev %d",
5814 				    vdev_ids[i]);
5815 			continue;
5816 		}
5817 
5818 		if (arvif->is_up && arvif->vif->csa_active)
5819 			ieee80211_csa_finish(arvif->vif);
5820 	}
5821 	rcu_read_unlock();
5822 }
5823 
5824 static void
5825 ath11k_wmi_pdev_csa_switch_count_status_event(struct ath11k_base *ab,
5826 					      struct sk_buff *skb)
5827 {
5828 	const void **tb;
5829 	const struct wmi_pdev_csa_switch_ev *ev;
5830 	const u32 *vdev_ids;
5831 	int ret;
5832 
5833 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5834 	if (IS_ERR(tb)) {
5835 		ret = PTR_ERR(tb);
5836 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5837 		return;
5838 	}
5839 
5840 	ev = tb[WMI_TAG_PDEV_CSA_SWITCH_COUNT_STATUS_EVENT];
5841 	vdev_ids = tb[WMI_TAG_ARRAY_UINT32];
5842 
5843 	if (!ev || !vdev_ids) {
5844 		ath11k_warn(ab, "failed to fetch pdev csa switch count ev");
5845 		kfree(tb);
5846 		return;
5847 	}
5848 
5849 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5850 		   "pdev csa switch count %d for pdev %d, num_vdevs %d",
5851 		   ev->current_switch_count, ev->pdev_id,
5852 		   ev->num_vdevs);
5853 
5854 	ath11k_wmi_process_csa_switch_count_event(ab, ev, vdev_ids);
5855 
5856 	kfree(tb);
5857 }
5858 
5859 static void
5860 ath11k_wmi_pdev_dfs_radar_detected_event(struct ath11k_base *ab, struct sk_buff *skb)
5861 {
5862 	const void **tb;
5863 	const struct wmi_pdev_radar_ev *ev;
5864 	struct ath11k *ar;
5865 	int ret;
5866 
5867 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5868 	if (IS_ERR(tb)) {
5869 		ret = PTR_ERR(tb);
5870 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5871 		return;
5872 	}
5873 
5874 	ev = tb[WMI_TAG_PDEV_DFS_RADAR_DETECTION_EVENT];
5875 
5876 	if (!ev) {
5877 		ath11k_warn(ab, "failed to fetch pdev dfs radar detected ev");
5878 		kfree(tb);
5879 		return;
5880 	}
5881 
5882 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5883 		   "pdev dfs radar detected on pdev %d, detection mode %d, chan freq %d, chan_width %d, detector id %d, seg id %d, timestamp %d, chirp %d, freq offset %d, sidx %d",
5884 		   ev->pdev_id, ev->detection_mode, ev->chan_freq, ev->chan_width,
5885 		   ev->detector_id, ev->segment_id, ev->timestamp, ev->is_chirp,
5886 		   ev->freq_offset, ev->sidx);
5887 
5888 	ar = ath11k_mac_get_ar_by_pdev_id(ab, ev->pdev_id);
5889 
5890 	if (!ar) {
5891 		ath11k_warn(ab, "radar detected in invalid pdev %d\n",
5892 			    ev->pdev_id);
5893 		goto exit;
5894 	}
5895 
5896 	ath11k_dbg(ar->ab, ATH11K_DBG_REG, "DFS Radar Detected in pdev %d\n",
5897 		   ev->pdev_id);
5898 
5899 	if (ar->dfs_block_radar_events)
5900 		ath11k_info(ab, "DFS Radar detected, but ignored as requested\n");
5901 	else
5902 		ieee80211_radar_detected(ar->hw);
5903 
5904 exit:
5905 	kfree(tb);
5906 }
5907 
5908 static void
5909 ath11k_wmi_pdev_temperature_event(struct ath11k_base *ab,
5910 				  struct sk_buff *skb)
5911 {
5912 	struct ath11k *ar;
5913 	struct wmi_pdev_temperature_event ev = {0};
5914 
5915 	if (ath11k_pull_pdev_temp_ev(ab, skb->data, skb->len, &ev) != 0) {
5916 		ath11k_warn(ab, "failed to extract pdev temperature event");
5917 		return;
5918 	}
5919 
5920 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5921 		   "pdev temperature ev temp %d pdev_id %d\n", ev.temp, ev.pdev_id);
5922 
5923 	ar = ath11k_mac_get_ar_by_pdev_id(ab, ev.pdev_id);
5924 	if (!ar) {
5925 		ath11k_warn(ab, "invalid pdev id in pdev temperature ev %d", ev.pdev_id);
5926 		return;
5927 	}
5928 
5929 	ath11k_thermal_event_temperature(ar, ev.temp);
5930 }
5931 
5932 static void ath11k_wmi_tlv_op_rx(struct ath11k_base *ab, struct sk_buff *skb)
5933 {
5934 	struct wmi_cmd_hdr *cmd_hdr;
5935 	enum wmi_tlv_event_id id;
5936 
5937 	cmd_hdr = (struct wmi_cmd_hdr *)skb->data;
5938 	id = FIELD_GET(WMI_CMD_HDR_CMD_ID, (cmd_hdr->cmd_id));
5939 
5940 	if (skb_pull(skb, sizeof(struct wmi_cmd_hdr)) == NULL)
5941 		goto out;
5942 
5943 	switch (id) {
5944 		/* Process all the WMI events here */
5945 	case WMI_SERVICE_READY_EVENTID:
5946 		ath11k_service_ready_event(ab, skb);
5947 		break;
5948 	case WMI_SERVICE_READY_EXT_EVENTID:
5949 		ath11k_service_ready_ext_event(ab, skb);
5950 		break;
5951 	case WMI_REG_CHAN_LIST_CC_EVENTID:
5952 		ath11k_reg_chan_list_event(ab, skb);
5953 		break;
5954 	case WMI_READY_EVENTID:
5955 		ath11k_ready_event(ab, skb);
5956 		break;
5957 	case WMI_PEER_DELETE_RESP_EVENTID:
5958 		ath11k_peer_delete_resp_event(ab, skb);
5959 		break;
5960 	case WMI_VDEV_START_RESP_EVENTID:
5961 		ath11k_vdev_start_resp_event(ab, skb);
5962 		break;
5963 	case WMI_OFFLOAD_BCN_TX_STATUS_EVENTID:
5964 		ath11k_bcn_tx_status_event(ab, skb);
5965 		break;
5966 	case WMI_VDEV_STOPPED_EVENTID:
5967 		ath11k_vdev_stopped_event(ab, skb);
5968 		break;
5969 	case WMI_MGMT_RX_EVENTID:
5970 		ath11k_mgmt_rx_event(ab, skb);
5971 		/* mgmt_rx_event() owns the skb now! */
5972 		return;
5973 	case WMI_MGMT_TX_COMPLETION_EVENTID:
5974 		ath11k_mgmt_tx_compl_event(ab, skb);
5975 		break;
5976 	case WMI_SCAN_EVENTID:
5977 		ath11k_scan_event(ab, skb);
5978 		break;
5979 	case WMI_PEER_STA_KICKOUT_EVENTID:
5980 		ath11k_peer_sta_kickout_event(ab, skb);
5981 		break;
5982 	case WMI_ROAM_EVENTID:
5983 		ath11k_roam_event(ab, skb);
5984 		break;
5985 	case WMI_CHAN_INFO_EVENTID:
5986 		ath11k_chan_info_event(ab, skb);
5987 		break;
5988 	case WMI_PDEV_BSS_CHAN_INFO_EVENTID:
5989 		ath11k_pdev_bss_chan_info_event(ab, skb);
5990 		break;
5991 	case WMI_VDEV_INSTALL_KEY_COMPLETE_EVENTID:
5992 		ath11k_vdev_install_key_compl_event(ab, skb);
5993 		break;
5994 	case WMI_SERVICE_AVAILABLE_EVENTID:
5995 		ath11k_service_available_event(ab, skb);
5996 		break;
5997 	case WMI_PEER_ASSOC_CONF_EVENTID:
5998 		ath11k_peer_assoc_conf_event(ab, skb);
5999 		break;
6000 	case WMI_UPDATE_STATS_EVENTID:
6001 		ath11k_update_stats_event(ab, skb);
6002 		break;
6003 	case WMI_PDEV_CTL_FAILSAFE_CHECK_EVENTID:
6004 		ath11k_pdev_ctl_failsafe_check_event(ab, skb);
6005 		break;
6006 	case WMI_PDEV_CSA_SWITCH_COUNT_STATUS_EVENTID:
6007 		ath11k_wmi_pdev_csa_switch_count_status_event(ab, skb);
6008 		break;
6009 	case WMI_PDEV_TEMPERATURE_EVENTID:
6010 		ath11k_wmi_pdev_temperature_event(ab, skb);
6011 		break;
6012 	/* add Unsupported events here */
6013 	case WMI_TBTTOFFSET_EXT_UPDATE_EVENTID:
6014 	case WMI_VDEV_DELETE_RESP_EVENTID:
6015 	case WMI_PEER_OPER_MODE_CHANGE_EVENTID:
6016 	case WMI_TWT_ENABLE_EVENTID:
6017 	case WMI_TWT_DISABLE_EVENTID:
6018 		ath11k_dbg(ab, ATH11K_DBG_WMI,
6019 			   "ignoring unsupported event 0x%x\n", id);
6020 		break;
6021 	case WMI_PDEV_DFS_RADAR_DETECTION_EVENTID:
6022 		ath11k_wmi_pdev_dfs_radar_detected_event(ab, skb);
6023 		break;
6024 	/* TODO: Add remaining events */
6025 	default:
6026 		ath11k_warn(ab, "Unknown eventid: 0x%x\n", id);
6027 		break;
6028 	}
6029 
6030 out:
6031 	dev_kfree_skb(skb);
6032 }
6033 
6034 static int ath11k_connect_pdev_htc_service(struct ath11k_base *ab,
6035 					   u32 pdev_idx)
6036 {
6037 	int status;
6038 	u32 svc_id[] = { ATH11K_HTC_SVC_ID_WMI_CONTROL,
6039 			 ATH11K_HTC_SVC_ID_WMI_CONTROL_MAC1,
6040 			 ATH11K_HTC_SVC_ID_WMI_CONTROL_MAC2 };
6041 
6042 	struct ath11k_htc_svc_conn_req conn_req;
6043 	struct ath11k_htc_svc_conn_resp conn_resp;
6044 
6045 	memset(&conn_req, 0, sizeof(conn_req));
6046 	memset(&conn_resp, 0, sizeof(conn_resp));
6047 
6048 	/* these fields are the same for all service endpoints */
6049 	conn_req.ep_ops.ep_tx_complete = ath11k_wmi_htc_tx_complete;
6050 	conn_req.ep_ops.ep_rx_complete = ath11k_wmi_tlv_op_rx;
6051 	conn_req.ep_ops.ep_tx_credits = ath11k_wmi_op_ep_tx_credits;
6052 
6053 	/* connect to control service */
6054 	conn_req.service_id = svc_id[pdev_idx];
6055 
6056 	status = ath11k_htc_connect_service(&ab->htc, &conn_req, &conn_resp);
6057 	if (status) {
6058 		ath11k_warn(ab, "failed to connect to WMI CONTROL service status: %d\n",
6059 			    status);
6060 		return status;
6061 	}
6062 
6063 	ab->wmi_ab.wmi_endpoint_id[pdev_idx] = conn_resp.eid;
6064 	ab->wmi_ab.wmi[pdev_idx].eid = conn_resp.eid;
6065 	ab->wmi_ab.max_msg_len[pdev_idx] = conn_resp.max_msg_len;
6066 
6067 	return 0;
6068 }
6069 
6070 static int
6071 ath11k_wmi_send_unit_test_cmd(struct ath11k *ar,
6072 			      struct wmi_unit_test_cmd ut_cmd,
6073 			      u32 *test_args)
6074 {
6075 	struct ath11k_pdev_wmi *wmi = ar->wmi;
6076 	struct wmi_unit_test_cmd *cmd;
6077 	struct sk_buff *skb;
6078 	struct wmi_tlv *tlv;
6079 	void *ptr;
6080 	u32 *ut_cmd_args;
6081 	int buf_len, arg_len;
6082 	int ret;
6083 	int i;
6084 
6085 	arg_len = sizeof(u32) * ut_cmd.num_args;
6086 	buf_len = sizeof(ut_cmd) + arg_len + TLV_HDR_SIZE;
6087 
6088 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, buf_len);
6089 	if (!skb)
6090 		return -ENOMEM;
6091 
6092 	cmd = (struct wmi_unit_test_cmd *)skb->data;
6093 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_UNIT_TEST_CMD) |
6094 			  FIELD_PREP(WMI_TLV_LEN, sizeof(ut_cmd) - TLV_HDR_SIZE);
6095 
6096 	cmd->vdev_id = ut_cmd.vdev_id;
6097 	cmd->module_id = ut_cmd.module_id;
6098 	cmd->num_args = ut_cmd.num_args;
6099 	cmd->diag_token = ut_cmd.diag_token;
6100 
6101 	ptr = skb->data + sizeof(ut_cmd);
6102 
6103 	tlv = ptr;
6104 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_UINT32) |
6105 		      FIELD_PREP(WMI_TLV_LEN, arg_len);
6106 
6107 	ptr += TLV_HDR_SIZE;
6108 
6109 	ut_cmd_args = ptr;
6110 	for (i = 0; i < ut_cmd.num_args; i++)
6111 		ut_cmd_args[i] = test_args[i];
6112 
6113 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_UNIT_TEST_CMDID);
6114 
6115 	if (ret) {
6116 		ath11k_warn(ar->ab, "failed to send WMI_UNIT_TEST CMD :%d\n",
6117 			    ret);
6118 		dev_kfree_skb(skb);
6119 	}
6120 
6121 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
6122 		   "WMI unit test : module %d vdev %d n_args %d token %d\n",
6123 		   cmd->module_id, cmd->vdev_id, cmd->num_args,
6124 		   cmd->diag_token);
6125 
6126 	return ret;
6127 }
6128 
6129 int ath11k_wmi_simulate_radar(struct ath11k *ar)
6130 {
6131 	struct ath11k_vif *arvif;
6132 	u32 dfs_args[DFS_MAX_TEST_ARGS];
6133 	struct wmi_unit_test_cmd wmi_ut;
6134 	bool arvif_found = false;
6135 
6136 	list_for_each_entry(arvif, &ar->arvifs, list) {
6137 		if (arvif->is_started && arvif->vdev_type == WMI_VDEV_TYPE_AP) {
6138 			arvif_found = true;
6139 			break;
6140 		}
6141 	}
6142 
6143 	if (!arvif_found)
6144 		return -EINVAL;
6145 
6146 	dfs_args[DFS_TEST_CMDID] = 0;
6147 	dfs_args[DFS_TEST_PDEV_ID] = ar->pdev->pdev_id;
6148 	/* Currently we could pass segment_id(b0 - b1), chirp(b2)
6149 	 * freq offset (b3 - b10) to unit test. For simulation
6150 	 * purpose this can be set to 0 which is valid.
6151 	 */
6152 	dfs_args[DFS_TEST_RADAR_PARAM] = 0;
6153 
6154 	wmi_ut.vdev_id = arvif->vdev_id;
6155 	wmi_ut.module_id = DFS_UNIT_TEST_MODULE;
6156 	wmi_ut.num_args = DFS_MAX_TEST_ARGS;
6157 	wmi_ut.diag_token = DFS_UNIT_TEST_TOKEN;
6158 
6159 	ath11k_dbg(ar->ab, ATH11K_DBG_REG, "Triggering Radar Simulation\n");
6160 
6161 	return ath11k_wmi_send_unit_test_cmd(ar, wmi_ut, dfs_args);
6162 }
6163 
6164 int ath11k_wmi_connect(struct ath11k_base *ab)
6165 {
6166 	u32 i;
6167 	u8 wmi_ep_count;
6168 
6169 	wmi_ep_count = ab->htc.wmi_ep_count;
6170 	if (wmi_ep_count > MAX_RADIOS)
6171 		return -1;
6172 
6173 	for (i = 0; i < wmi_ep_count; i++)
6174 		ath11k_connect_pdev_htc_service(ab, i);
6175 
6176 	return 0;
6177 }
6178 
6179 static void ath11k_wmi_pdev_detach(struct ath11k_base *ab, u8 pdev_id)
6180 {
6181 	if (WARN_ON(pdev_id >= MAX_RADIOS))
6182 		return;
6183 
6184 	/* TODO: Deinit any pdev specific wmi resource */
6185 }
6186 
6187 int ath11k_wmi_pdev_attach(struct ath11k_base *ab,
6188 			   u8 pdev_id)
6189 {
6190 	struct ath11k_pdev_wmi *wmi_handle;
6191 
6192 	if (pdev_id >= MAX_RADIOS)
6193 		return -EINVAL;
6194 
6195 	wmi_handle = &ab->wmi_ab.wmi[pdev_id];
6196 
6197 	wmi_handle->wmi_ab = &ab->wmi_ab;
6198 
6199 	ab->wmi_ab.ab = ab;
6200 	/* TODO: Init remaining resource specific to pdev */
6201 
6202 	return 0;
6203 }
6204 
6205 int ath11k_wmi_attach(struct ath11k_base *ab)
6206 {
6207 	int ret;
6208 
6209 	ret = ath11k_wmi_pdev_attach(ab, 0);
6210 	if (ret)
6211 		return ret;
6212 
6213 	ab->wmi_ab.ab = ab;
6214 	ab->wmi_ab.preferred_hw_mode = WMI_HOST_HW_MODE_MAX;
6215 
6216 	/* TODO: Init remaining wmi soc resources required */
6217 	init_completion(&ab->wmi_ab.service_ready);
6218 	init_completion(&ab->wmi_ab.unified_ready);
6219 
6220 	return 0;
6221 }
6222 
6223 void ath11k_wmi_detach(struct ath11k_base *ab)
6224 {
6225 	int i;
6226 
6227 	/* TODO: Deinit wmi resource specific to SOC as required */
6228 
6229 	for (i = 0; i < ab->htc.wmi_ep_count; i++)
6230 		ath11k_wmi_pdev_detach(ab, i);
6231 }
6232