xref: /openbmc/linux/drivers/net/wireless/ath/ath11k/wmi.c (revision 90a9fb5b6618ae070c94b2141ec5de6a2a207eae)
1 // SPDX-License-Identifier: BSD-3-Clause-Clear
2 /*
3  * Copyright (c) 2018-2019 The Linux Foundation. All rights reserved.
4  * Copyright (c) 2021, 2023 Qualcomm Innovation Center, Inc. All rights reserved.
5  */
6 #include <linux/skbuff.h>
7 #include <linux/ctype.h>
8 #include <net/mac80211.h>
9 #include <net/cfg80211.h>
10 #include <linux/completion.h>
11 #include <linux/if_ether.h>
12 #include <linux/types.h>
13 #include <linux/pci.h>
14 #include <linux/uuid.h>
15 #include <linux/time.h>
16 #include <linux/of.h>
17 #include "core.h"
18 #include "debug.h"
19 #include "mac.h"
20 #include "hw.h"
21 #include "peer.h"
22 #include "testmode.h"
23 
24 struct wmi_tlv_policy {
25 	size_t min_len;
26 };
27 
28 struct wmi_tlv_svc_ready_parse {
29 	bool wmi_svc_bitmap_done;
30 };
31 
32 struct wmi_tlv_dma_ring_caps_parse {
33 	struct wmi_dma_ring_capabilities *dma_ring_caps;
34 	u32 n_dma_ring_caps;
35 };
36 
37 struct wmi_tlv_svc_rdy_ext_parse {
38 	struct ath11k_service_ext_param param;
39 	struct wmi_soc_mac_phy_hw_mode_caps *hw_caps;
40 	struct wmi_hw_mode_capabilities *hw_mode_caps;
41 	u32 n_hw_mode_caps;
42 	u32 tot_phy_id;
43 	struct wmi_hw_mode_capabilities pref_hw_mode_caps;
44 	struct wmi_mac_phy_capabilities *mac_phy_caps;
45 	u32 n_mac_phy_caps;
46 	struct wmi_soc_hal_reg_capabilities *soc_hal_reg_caps;
47 	struct wmi_hal_reg_capabilities_ext *ext_hal_reg_caps;
48 	u32 n_ext_hal_reg_caps;
49 	struct wmi_tlv_dma_ring_caps_parse dma_caps_parse;
50 	bool hw_mode_done;
51 	bool mac_phy_done;
52 	bool ext_hal_reg_done;
53 	bool mac_phy_chainmask_combo_done;
54 	bool mac_phy_chainmask_cap_done;
55 	bool oem_dma_ring_cap_done;
56 	bool dma_ring_cap_done;
57 };
58 
59 struct wmi_tlv_svc_rdy_ext2_parse {
60 	struct wmi_tlv_dma_ring_caps_parse dma_caps_parse;
61 	bool dma_ring_cap_done;
62 };
63 
64 struct wmi_tlv_rdy_parse {
65 	u32 num_extra_mac_addr;
66 };
67 
68 struct wmi_tlv_dma_buf_release_parse {
69 	struct ath11k_wmi_dma_buf_release_fixed_param fixed;
70 	struct wmi_dma_buf_release_entry *buf_entry;
71 	struct wmi_dma_buf_release_meta_data *meta_data;
72 	u32 num_buf_entry;
73 	u32 num_meta;
74 	bool buf_entry_done;
75 	bool meta_data_done;
76 };
77 
78 struct wmi_tlv_fw_stats_parse {
79 	const struct wmi_stats_event *ev;
80 	const struct wmi_per_chain_rssi_stats *rssi;
81 	struct ath11k_fw_stats *stats;
82 	int rssi_num;
83 	bool chain_rssi_done;
84 };
85 
86 struct wmi_tlv_mgmt_rx_parse {
87 	const struct wmi_mgmt_rx_hdr *fixed;
88 	const u8 *frame_buf;
89 	bool frame_buf_done;
90 };
91 
92 static const struct wmi_tlv_policy wmi_tlv_policies[] = {
93 	[WMI_TAG_ARRAY_BYTE]
94 		= { .min_len = 0 },
95 	[WMI_TAG_ARRAY_UINT32]
96 		= { .min_len = 0 },
97 	[WMI_TAG_SERVICE_READY_EVENT]
98 		= { .min_len = sizeof(struct wmi_service_ready_event) },
99 	[WMI_TAG_SERVICE_READY_EXT_EVENT]
100 		= { .min_len =  sizeof(struct wmi_service_ready_ext_event) },
101 	[WMI_TAG_SOC_MAC_PHY_HW_MODE_CAPS]
102 		= { .min_len = sizeof(struct wmi_soc_mac_phy_hw_mode_caps) },
103 	[WMI_TAG_SOC_HAL_REG_CAPABILITIES]
104 		= { .min_len = sizeof(struct wmi_soc_hal_reg_capabilities) },
105 	[WMI_TAG_VDEV_START_RESPONSE_EVENT]
106 		= { .min_len = sizeof(struct wmi_vdev_start_resp_event) },
107 	[WMI_TAG_PEER_DELETE_RESP_EVENT]
108 		= { .min_len = sizeof(struct wmi_peer_delete_resp_event) },
109 	[WMI_TAG_OFFLOAD_BCN_TX_STATUS_EVENT]
110 		= { .min_len = sizeof(struct wmi_bcn_tx_status_event) },
111 	[WMI_TAG_VDEV_STOPPED_EVENT]
112 		= { .min_len = sizeof(struct wmi_vdev_stopped_event) },
113 	[WMI_TAG_REG_CHAN_LIST_CC_EVENT]
114 		= { .min_len = sizeof(struct wmi_reg_chan_list_cc_event) },
115 	[WMI_TAG_REG_CHAN_LIST_CC_EXT_EVENT]
116 		= { .min_len = sizeof(struct wmi_reg_chan_list_cc_ext_event) },
117 	[WMI_TAG_MGMT_RX_HDR]
118 		= { .min_len = sizeof(struct wmi_mgmt_rx_hdr) },
119 	[WMI_TAG_MGMT_TX_COMPL_EVENT]
120 		= { .min_len = sizeof(struct wmi_mgmt_tx_compl_event) },
121 	[WMI_TAG_SCAN_EVENT]
122 		= { .min_len = sizeof(struct wmi_scan_event) },
123 	[WMI_TAG_PEER_STA_KICKOUT_EVENT]
124 		= { .min_len = sizeof(struct wmi_peer_sta_kickout_event) },
125 	[WMI_TAG_ROAM_EVENT]
126 		= { .min_len = sizeof(struct wmi_roam_event) },
127 	[WMI_TAG_CHAN_INFO_EVENT]
128 		= { .min_len = sizeof(struct wmi_chan_info_event) },
129 	[WMI_TAG_PDEV_BSS_CHAN_INFO_EVENT]
130 		= { .min_len = sizeof(struct wmi_pdev_bss_chan_info_event) },
131 	[WMI_TAG_VDEV_INSTALL_KEY_COMPLETE_EVENT]
132 		= { .min_len = sizeof(struct wmi_vdev_install_key_compl_event) },
133 	[WMI_TAG_READY_EVENT] = {
134 		.min_len = sizeof(struct wmi_ready_event_min) },
135 	[WMI_TAG_SERVICE_AVAILABLE_EVENT]
136 		= {.min_len = sizeof(struct wmi_service_available_event) },
137 	[WMI_TAG_PEER_ASSOC_CONF_EVENT]
138 		= { .min_len = sizeof(struct wmi_peer_assoc_conf_event) },
139 	[WMI_TAG_STATS_EVENT]
140 		= { .min_len = sizeof(struct wmi_stats_event) },
141 	[WMI_TAG_PDEV_CTL_FAILSAFE_CHECK_EVENT]
142 		= { .min_len = sizeof(struct wmi_pdev_ctl_failsafe_chk_event) },
143 	[WMI_TAG_HOST_SWFDA_EVENT] = {
144 		.min_len = sizeof(struct wmi_fils_discovery_event) },
145 	[WMI_TAG_OFFLOAD_PRB_RSP_TX_STATUS_EVENT] = {
146 		.min_len = sizeof(struct wmi_probe_resp_tx_status_event) },
147 	[WMI_TAG_VDEV_DELETE_RESP_EVENT] = {
148 		.min_len = sizeof(struct wmi_vdev_delete_resp_event) },
149 	[WMI_TAG_OBSS_COLOR_COLLISION_EVT] = {
150 		.min_len = sizeof(struct wmi_obss_color_collision_event) },
151 	[WMI_TAG_11D_NEW_COUNTRY_EVENT] = {
152 		.min_len = sizeof(struct wmi_11d_new_cc_ev) },
153 	[WMI_TAG_PER_CHAIN_RSSI_STATS] = {
154 		.min_len = sizeof(struct wmi_per_chain_rssi_stats) },
155 	[WMI_TAG_TWT_ADD_DIALOG_COMPLETE_EVENT] = {
156 		.min_len = sizeof(struct wmi_twt_add_dialog_event) },
157 };
158 
159 #define PRIMAP(_hw_mode_) \
160 	[_hw_mode_] = _hw_mode_##_PRI
161 
162 static const int ath11k_hw_mode_pri_map[] = {
163 	PRIMAP(WMI_HOST_HW_MODE_SINGLE),
164 	PRIMAP(WMI_HOST_HW_MODE_DBS),
165 	PRIMAP(WMI_HOST_HW_MODE_SBS_PASSIVE),
166 	PRIMAP(WMI_HOST_HW_MODE_SBS),
167 	PRIMAP(WMI_HOST_HW_MODE_DBS_SBS),
168 	PRIMAP(WMI_HOST_HW_MODE_DBS_OR_SBS),
169 	/* keep last */
170 	PRIMAP(WMI_HOST_HW_MODE_MAX),
171 };
172 
173 static int
174 ath11k_wmi_tlv_iter(struct ath11k_base *ab, const void *ptr, size_t len,
175 		    int (*iter)(struct ath11k_base *ab, u16 tag, u16 len,
176 				const void *ptr, void *data),
177 		    void *data)
178 {
179 	const void *begin = ptr;
180 	const struct wmi_tlv *tlv;
181 	u16 tlv_tag, tlv_len;
182 	int ret;
183 
184 	while (len > 0) {
185 		if (len < sizeof(*tlv)) {
186 			ath11k_err(ab, "wmi tlv parse failure at byte %zd (%zu bytes left, %zu expected)\n",
187 				   ptr - begin, len, sizeof(*tlv));
188 			return -EINVAL;
189 		}
190 
191 		tlv = ptr;
192 		tlv_tag = FIELD_GET(WMI_TLV_TAG, tlv->header);
193 		tlv_len = FIELD_GET(WMI_TLV_LEN, tlv->header);
194 		ptr += sizeof(*tlv);
195 		len -= sizeof(*tlv);
196 
197 		if (tlv_len > len) {
198 			ath11k_err(ab, "wmi tlv parse failure of tag %u at byte %zd (%zu bytes left, %u expected)\n",
199 				   tlv_tag, ptr - begin, len, tlv_len);
200 			return -EINVAL;
201 		}
202 
203 		if (tlv_tag < ARRAY_SIZE(wmi_tlv_policies) &&
204 		    wmi_tlv_policies[tlv_tag].min_len &&
205 		    wmi_tlv_policies[tlv_tag].min_len > tlv_len) {
206 			ath11k_err(ab, "wmi tlv parse failure of tag %u at byte %zd (%u bytes is less than min length %zu)\n",
207 				   tlv_tag, ptr - begin, tlv_len,
208 				   wmi_tlv_policies[tlv_tag].min_len);
209 			return -EINVAL;
210 		}
211 
212 		ret = iter(ab, tlv_tag, tlv_len, ptr, data);
213 		if (ret)
214 			return ret;
215 
216 		ptr += tlv_len;
217 		len -= tlv_len;
218 	}
219 
220 	return 0;
221 }
222 
223 static int ath11k_wmi_tlv_iter_parse(struct ath11k_base *ab, u16 tag, u16 len,
224 				     const void *ptr, void *data)
225 {
226 	const void **tb = data;
227 
228 	if (tag < WMI_TAG_MAX)
229 		tb[tag] = ptr;
230 
231 	return 0;
232 }
233 
234 static int ath11k_wmi_tlv_parse(struct ath11k_base *ar, const void **tb,
235 				const void *ptr, size_t len)
236 {
237 	return ath11k_wmi_tlv_iter(ar, ptr, len, ath11k_wmi_tlv_iter_parse,
238 				   (void *)tb);
239 }
240 
241 const void **ath11k_wmi_tlv_parse_alloc(struct ath11k_base *ab, const void *ptr,
242 					size_t len, gfp_t gfp)
243 {
244 	const void **tb;
245 	int ret;
246 
247 	tb = kcalloc(WMI_TAG_MAX, sizeof(*tb), gfp);
248 	if (!tb)
249 		return ERR_PTR(-ENOMEM);
250 
251 	ret = ath11k_wmi_tlv_parse(ab, tb, ptr, len);
252 	if (ret) {
253 		kfree(tb);
254 		return ERR_PTR(ret);
255 	}
256 
257 	return tb;
258 }
259 
260 static int ath11k_wmi_cmd_send_nowait(struct ath11k_pdev_wmi *wmi, struct sk_buff *skb,
261 				      u32 cmd_id)
262 {
263 	struct ath11k_skb_cb *skb_cb = ATH11K_SKB_CB(skb);
264 	struct ath11k_base *ab = wmi->wmi_ab->ab;
265 	struct wmi_cmd_hdr *cmd_hdr;
266 	int ret;
267 	u32 cmd = 0;
268 
269 	if (skb_push(skb, sizeof(struct wmi_cmd_hdr)) == NULL)
270 		return -ENOMEM;
271 
272 	cmd |= FIELD_PREP(WMI_CMD_HDR_CMD_ID, cmd_id);
273 
274 	cmd_hdr = (struct wmi_cmd_hdr *)skb->data;
275 	cmd_hdr->cmd_id = cmd;
276 
277 	trace_ath11k_wmi_cmd(ab, cmd_id, skb->data, skb->len);
278 
279 	memset(skb_cb, 0, sizeof(*skb_cb));
280 	ret = ath11k_htc_send(&ab->htc, wmi->eid, skb);
281 
282 	if (ret)
283 		goto err_pull;
284 
285 	return 0;
286 
287 err_pull:
288 	skb_pull(skb, sizeof(struct wmi_cmd_hdr));
289 	return ret;
290 }
291 
292 int ath11k_wmi_cmd_send(struct ath11k_pdev_wmi *wmi, struct sk_buff *skb,
293 			u32 cmd_id)
294 {
295 	struct ath11k_wmi_base *wmi_sc = wmi->wmi_ab;
296 	int ret = -EOPNOTSUPP;
297 	struct ath11k_base *ab = wmi_sc->ab;
298 
299 	might_sleep();
300 
301 	if (ab->hw_params.credit_flow) {
302 		wait_event_timeout(wmi_sc->tx_credits_wq, ({
303 			ret = ath11k_wmi_cmd_send_nowait(wmi, skb, cmd_id);
304 
305 			if (ret && test_bit(ATH11K_FLAG_CRASH_FLUSH,
306 					    &wmi_sc->ab->dev_flags))
307 				ret = -ESHUTDOWN;
308 
309 			(ret != -EAGAIN);
310 			}), WMI_SEND_TIMEOUT_HZ);
311 	} else {
312 		wait_event_timeout(wmi->tx_ce_desc_wq, ({
313 			ret = ath11k_wmi_cmd_send_nowait(wmi, skb, cmd_id);
314 
315 			if (ret && test_bit(ATH11K_FLAG_CRASH_FLUSH,
316 					    &wmi_sc->ab->dev_flags))
317 				ret = -ESHUTDOWN;
318 
319 			(ret != -ENOBUFS);
320 			}), WMI_SEND_TIMEOUT_HZ);
321 	}
322 
323 	if (ret == -EAGAIN)
324 		ath11k_warn(wmi_sc->ab, "wmi command %d timeout\n", cmd_id);
325 
326 	if (ret == -ENOBUFS)
327 		ath11k_warn(wmi_sc->ab, "ce desc not available for wmi command %d\n",
328 			    cmd_id);
329 
330 	return ret;
331 }
332 
333 static int ath11k_pull_svc_ready_ext(struct ath11k_pdev_wmi *wmi_handle,
334 				     const void *ptr,
335 				     struct ath11k_service_ext_param *param)
336 {
337 	const struct wmi_service_ready_ext_event *ev = ptr;
338 
339 	if (!ev)
340 		return -EINVAL;
341 
342 	/* Move this to host based bitmap */
343 	param->default_conc_scan_config_bits = ev->default_conc_scan_config_bits;
344 	param->default_fw_config_bits =	ev->default_fw_config_bits;
345 	param->he_cap_info = ev->he_cap_info;
346 	param->mpdu_density = ev->mpdu_density;
347 	param->max_bssid_rx_filters = ev->max_bssid_rx_filters;
348 	memcpy(&param->ppet, &ev->ppet, sizeof(param->ppet));
349 
350 	return 0;
351 }
352 
353 static int
354 ath11k_pull_mac_phy_cap_svc_ready_ext(struct ath11k_pdev_wmi *wmi_handle,
355 				      struct wmi_soc_mac_phy_hw_mode_caps *hw_caps,
356 				      struct wmi_hw_mode_capabilities *wmi_hw_mode_caps,
357 				      struct wmi_soc_hal_reg_capabilities *hal_reg_caps,
358 				      struct wmi_mac_phy_capabilities *wmi_mac_phy_caps,
359 				      u8 hw_mode_id, u8 phy_id,
360 				      struct ath11k_pdev *pdev)
361 {
362 	struct wmi_mac_phy_capabilities *mac_phy_caps;
363 	struct ath11k_base *ab = wmi_handle->wmi_ab->ab;
364 	struct ath11k_band_cap *cap_band;
365 	struct ath11k_pdev_cap *pdev_cap = &pdev->cap;
366 	u32 phy_map;
367 	u32 hw_idx, phy_idx = 0;
368 
369 	if (!hw_caps || !wmi_hw_mode_caps || !hal_reg_caps)
370 		return -EINVAL;
371 
372 	for (hw_idx = 0; hw_idx < hw_caps->num_hw_modes; hw_idx++) {
373 		if (hw_mode_id == wmi_hw_mode_caps[hw_idx].hw_mode_id)
374 			break;
375 
376 		phy_map = wmi_hw_mode_caps[hw_idx].phy_id_map;
377 		while (phy_map) {
378 			phy_map >>= 1;
379 			phy_idx++;
380 		}
381 	}
382 
383 	if (hw_idx == hw_caps->num_hw_modes)
384 		return -EINVAL;
385 
386 	phy_idx += phy_id;
387 	if (phy_id >= hal_reg_caps->num_phy)
388 		return -EINVAL;
389 
390 	mac_phy_caps = wmi_mac_phy_caps + phy_idx;
391 
392 	pdev->pdev_id = mac_phy_caps->pdev_id;
393 	pdev_cap->supported_bands |= mac_phy_caps->supported_bands;
394 	pdev_cap->ampdu_density = mac_phy_caps->ampdu_density;
395 	ab->target_pdev_ids[ab->target_pdev_count].supported_bands =
396 		mac_phy_caps->supported_bands;
397 	ab->target_pdev_ids[ab->target_pdev_count].pdev_id = mac_phy_caps->pdev_id;
398 	ab->target_pdev_count++;
399 
400 	if (!(mac_phy_caps->supported_bands & WMI_HOST_WLAN_2G_CAP) &&
401 	    !(mac_phy_caps->supported_bands & WMI_HOST_WLAN_5G_CAP))
402 		return -EINVAL;
403 
404 	/* Take non-zero tx/rx chainmask. If tx/rx chainmask differs from
405 	 * band to band for a single radio, need to see how this should be
406 	 * handled.
407 	 */
408 	if (mac_phy_caps->supported_bands & WMI_HOST_WLAN_2G_CAP) {
409 		pdev_cap->tx_chain_mask = mac_phy_caps->tx_chain_mask_2g;
410 		pdev_cap->rx_chain_mask = mac_phy_caps->rx_chain_mask_2g;
411 	}
412 
413 	if (mac_phy_caps->supported_bands & WMI_HOST_WLAN_5G_CAP) {
414 		pdev_cap->vht_cap = mac_phy_caps->vht_cap_info_5g;
415 		pdev_cap->vht_mcs = mac_phy_caps->vht_supp_mcs_5g;
416 		pdev_cap->he_mcs = mac_phy_caps->he_supp_mcs_5g;
417 		pdev_cap->tx_chain_mask = mac_phy_caps->tx_chain_mask_5g;
418 		pdev_cap->rx_chain_mask = mac_phy_caps->rx_chain_mask_5g;
419 		pdev_cap->nss_ratio_enabled =
420 			WMI_NSS_RATIO_ENABLE_DISABLE_GET(mac_phy_caps->nss_ratio);
421 		pdev_cap->nss_ratio_info =
422 			WMI_NSS_RATIO_INFO_GET(mac_phy_caps->nss_ratio);
423 	}
424 
425 	/* tx/rx chainmask reported from fw depends on the actual hw chains used,
426 	 * For example, for 4x4 capable macphys, first 4 chains can be used for first
427 	 * mac and the remaining 4 chains can be used for the second mac or vice-versa.
428 	 * In this case, tx/rx chainmask 0xf will be advertised for first mac and 0xf0
429 	 * will be advertised for second mac or vice-versa. Compute the shift value
430 	 * for tx/rx chainmask which will be used to advertise supported ht/vht rates to
431 	 * mac80211.
432 	 */
433 	pdev_cap->tx_chain_mask_shift =
434 			find_first_bit((unsigned long *)&pdev_cap->tx_chain_mask, 32);
435 	pdev_cap->rx_chain_mask_shift =
436 			find_first_bit((unsigned long *)&pdev_cap->rx_chain_mask, 32);
437 
438 	if (mac_phy_caps->supported_bands & WMI_HOST_WLAN_2G_CAP) {
439 		cap_band = &pdev_cap->band[NL80211_BAND_2GHZ];
440 		cap_band->phy_id = mac_phy_caps->phy_id;
441 		cap_band->max_bw_supported = mac_phy_caps->max_bw_supported_2g;
442 		cap_band->ht_cap_info = mac_phy_caps->ht_cap_info_2g;
443 		cap_band->he_cap_info[0] = mac_phy_caps->he_cap_info_2g;
444 		cap_band->he_cap_info[1] = mac_phy_caps->he_cap_info_2g_ext;
445 		cap_band->he_mcs = mac_phy_caps->he_supp_mcs_2g;
446 		memcpy(cap_band->he_cap_phy_info, &mac_phy_caps->he_cap_phy_info_2g,
447 		       sizeof(u32) * PSOC_HOST_MAX_PHY_SIZE);
448 		memcpy(&cap_band->he_ppet, &mac_phy_caps->he_ppet2g,
449 		       sizeof(struct ath11k_ppe_threshold));
450 	}
451 
452 	if (mac_phy_caps->supported_bands & WMI_HOST_WLAN_5G_CAP) {
453 		cap_band = &pdev_cap->band[NL80211_BAND_5GHZ];
454 		cap_band->phy_id = mac_phy_caps->phy_id;
455 		cap_band->max_bw_supported = mac_phy_caps->max_bw_supported_5g;
456 		cap_band->ht_cap_info = mac_phy_caps->ht_cap_info_5g;
457 		cap_band->he_cap_info[0] = mac_phy_caps->he_cap_info_5g;
458 		cap_band->he_cap_info[1] = mac_phy_caps->he_cap_info_5g_ext;
459 		cap_band->he_mcs = mac_phy_caps->he_supp_mcs_5g;
460 		memcpy(cap_band->he_cap_phy_info, &mac_phy_caps->he_cap_phy_info_5g,
461 		       sizeof(u32) * PSOC_HOST_MAX_PHY_SIZE);
462 		memcpy(&cap_band->he_ppet, &mac_phy_caps->he_ppet5g,
463 		       sizeof(struct ath11k_ppe_threshold));
464 
465 		cap_band = &pdev_cap->band[NL80211_BAND_6GHZ];
466 		cap_band->max_bw_supported = mac_phy_caps->max_bw_supported_5g;
467 		cap_band->ht_cap_info = mac_phy_caps->ht_cap_info_5g;
468 		cap_band->he_cap_info[0] = mac_phy_caps->he_cap_info_5g;
469 		cap_band->he_cap_info[1] = mac_phy_caps->he_cap_info_5g_ext;
470 		cap_band->he_mcs = mac_phy_caps->he_supp_mcs_5g;
471 		memcpy(cap_band->he_cap_phy_info, &mac_phy_caps->he_cap_phy_info_5g,
472 		       sizeof(u32) * PSOC_HOST_MAX_PHY_SIZE);
473 		memcpy(&cap_band->he_ppet, &mac_phy_caps->he_ppet5g,
474 		       sizeof(struct ath11k_ppe_threshold));
475 	}
476 
477 	return 0;
478 }
479 
480 static int
481 ath11k_pull_reg_cap_svc_rdy_ext(struct ath11k_pdev_wmi *wmi_handle,
482 				struct wmi_soc_hal_reg_capabilities *reg_caps,
483 				struct wmi_hal_reg_capabilities_ext *wmi_ext_reg_cap,
484 				u8 phy_idx,
485 				struct ath11k_hal_reg_capabilities_ext *param)
486 {
487 	struct wmi_hal_reg_capabilities_ext *ext_reg_cap;
488 
489 	if (!reg_caps || !wmi_ext_reg_cap)
490 		return -EINVAL;
491 
492 	if (phy_idx >= reg_caps->num_phy)
493 		return -EINVAL;
494 
495 	ext_reg_cap = &wmi_ext_reg_cap[phy_idx];
496 
497 	param->phy_id = ext_reg_cap->phy_id;
498 	param->eeprom_reg_domain = ext_reg_cap->eeprom_reg_domain;
499 	param->eeprom_reg_domain_ext =
500 			      ext_reg_cap->eeprom_reg_domain_ext;
501 	param->regcap1 = ext_reg_cap->regcap1;
502 	param->regcap2 = ext_reg_cap->regcap2;
503 	/* check if param->wireless_mode is needed */
504 	param->low_2ghz_chan = ext_reg_cap->low_2ghz_chan;
505 	param->high_2ghz_chan = ext_reg_cap->high_2ghz_chan;
506 	param->low_5ghz_chan = ext_reg_cap->low_5ghz_chan;
507 	param->high_5ghz_chan = ext_reg_cap->high_5ghz_chan;
508 
509 	return 0;
510 }
511 
512 static int ath11k_pull_service_ready_tlv(struct ath11k_base *ab,
513 					 const void *evt_buf,
514 					 struct ath11k_targ_cap *cap)
515 {
516 	const struct wmi_service_ready_event *ev = evt_buf;
517 
518 	if (!ev) {
519 		ath11k_err(ab, "%s: failed by NULL param\n",
520 			   __func__);
521 		return -EINVAL;
522 	}
523 
524 	cap->phy_capability = ev->phy_capability;
525 	cap->max_frag_entry = ev->max_frag_entry;
526 	cap->num_rf_chains = ev->num_rf_chains;
527 	cap->ht_cap_info = ev->ht_cap_info;
528 	cap->vht_cap_info = ev->vht_cap_info;
529 	cap->vht_supp_mcs = ev->vht_supp_mcs;
530 	cap->hw_min_tx_power = ev->hw_min_tx_power;
531 	cap->hw_max_tx_power = ev->hw_max_tx_power;
532 	cap->sys_cap_info = ev->sys_cap_info;
533 	cap->min_pkt_size_enable = ev->min_pkt_size_enable;
534 	cap->max_bcn_ie_size = ev->max_bcn_ie_size;
535 	cap->max_num_scan_channels = ev->max_num_scan_channels;
536 	cap->max_supported_macs = ev->max_supported_macs;
537 	cap->wmi_fw_sub_feat_caps = ev->wmi_fw_sub_feat_caps;
538 	cap->txrx_chainmask = ev->txrx_chainmask;
539 	cap->default_dbs_hw_mode_index = ev->default_dbs_hw_mode_index;
540 	cap->num_msdu_desc = ev->num_msdu_desc;
541 
542 	return 0;
543 }
544 
545 /* Save the wmi_service_bitmap into a linear bitmap. The wmi_services in
546  * wmi_service ready event are advertised in b0-b3 (LSB 4-bits) of each
547  * 4-byte word.
548  */
549 static void ath11k_wmi_service_bitmap_copy(struct ath11k_pdev_wmi *wmi,
550 					   const u32 *wmi_svc_bm)
551 {
552 	int i, j;
553 
554 	for (i = 0, j = 0; i < WMI_SERVICE_BM_SIZE && j < WMI_MAX_SERVICE; i++) {
555 		do {
556 			if (wmi_svc_bm[i] & BIT(j % WMI_SERVICE_BITS_IN_SIZE32))
557 				set_bit(j, wmi->wmi_ab->svc_map);
558 		} while (++j % WMI_SERVICE_BITS_IN_SIZE32);
559 	}
560 }
561 
562 static int ath11k_wmi_tlv_svc_rdy_parse(struct ath11k_base *ab, u16 tag, u16 len,
563 					const void *ptr, void *data)
564 {
565 	struct wmi_tlv_svc_ready_parse *svc_ready = data;
566 	struct ath11k_pdev_wmi *wmi_handle = &ab->wmi_ab.wmi[0];
567 	u16 expect_len;
568 
569 	switch (tag) {
570 	case WMI_TAG_SERVICE_READY_EVENT:
571 		if (ath11k_pull_service_ready_tlv(ab, ptr, &ab->target_caps))
572 			return -EINVAL;
573 		break;
574 
575 	case WMI_TAG_ARRAY_UINT32:
576 		if (!svc_ready->wmi_svc_bitmap_done) {
577 			expect_len = WMI_SERVICE_BM_SIZE * sizeof(u32);
578 			if (len < expect_len) {
579 				ath11k_warn(ab, "invalid len %d for the tag 0x%x\n",
580 					    len, tag);
581 				return -EINVAL;
582 			}
583 
584 			ath11k_wmi_service_bitmap_copy(wmi_handle, ptr);
585 
586 			svc_ready->wmi_svc_bitmap_done = true;
587 		}
588 		break;
589 	default:
590 		break;
591 	}
592 
593 	return 0;
594 }
595 
596 static int ath11k_service_ready_event(struct ath11k_base *ab, struct sk_buff *skb)
597 {
598 	struct wmi_tlv_svc_ready_parse svc_ready = { };
599 	int ret;
600 
601 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
602 				  ath11k_wmi_tlv_svc_rdy_parse,
603 				  &svc_ready);
604 	if (ret) {
605 		ath11k_warn(ab, "failed to parse tlv %d\n", ret);
606 		return ret;
607 	}
608 
609 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event service ready");
610 
611 	return 0;
612 }
613 
614 struct sk_buff *ath11k_wmi_alloc_skb(struct ath11k_wmi_base *wmi_sc, u32 len)
615 {
616 	struct sk_buff *skb;
617 	struct ath11k_base *ab = wmi_sc->ab;
618 	u32 round_len = roundup(len, 4);
619 
620 	skb = ath11k_htc_alloc_skb(ab, WMI_SKB_HEADROOM + round_len);
621 	if (!skb)
622 		return NULL;
623 
624 	skb_reserve(skb, WMI_SKB_HEADROOM);
625 	if (!IS_ALIGNED((unsigned long)skb->data, 4))
626 		ath11k_warn(ab, "unaligned WMI skb data\n");
627 
628 	skb_put(skb, round_len);
629 	memset(skb->data, 0, round_len);
630 
631 	return skb;
632 }
633 
634 static u32 ath11k_wmi_mgmt_get_freq(struct ath11k *ar,
635 				    struct ieee80211_tx_info *info)
636 {
637 	struct ath11k_base *ab = ar->ab;
638 	u32 freq = 0;
639 
640 	if (ab->hw_params.support_off_channel_tx &&
641 	    ar->scan.is_roc &&
642 	    (info->flags & IEEE80211_TX_CTL_TX_OFFCHAN))
643 		freq = ar->scan.roc_freq;
644 
645 	return freq;
646 }
647 
648 int ath11k_wmi_mgmt_send(struct ath11k *ar, u32 vdev_id, u32 buf_id,
649 			 struct sk_buff *frame)
650 {
651 	struct ath11k_pdev_wmi *wmi = ar->wmi;
652 	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(frame);
653 	struct wmi_mgmt_send_cmd *cmd;
654 	struct wmi_tlv *frame_tlv;
655 	struct sk_buff *skb;
656 	u32 buf_len;
657 	int ret, len;
658 
659 	buf_len = frame->len < WMI_MGMT_SEND_DOWNLD_LEN ?
660 		  frame->len : WMI_MGMT_SEND_DOWNLD_LEN;
661 
662 	len = sizeof(*cmd) + sizeof(*frame_tlv) + roundup(buf_len, 4);
663 
664 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
665 	if (!skb)
666 		return -ENOMEM;
667 
668 	cmd = (struct wmi_mgmt_send_cmd *)skb->data;
669 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_MGMT_TX_SEND_CMD) |
670 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
671 	cmd->vdev_id = vdev_id;
672 	cmd->desc_id = buf_id;
673 	cmd->chanfreq = ath11k_wmi_mgmt_get_freq(ar, info);
674 	cmd->paddr_lo = lower_32_bits(ATH11K_SKB_CB(frame)->paddr);
675 	cmd->paddr_hi = upper_32_bits(ATH11K_SKB_CB(frame)->paddr);
676 	cmd->frame_len = frame->len;
677 	cmd->buf_len = buf_len;
678 	cmd->tx_params_valid = 0;
679 
680 	frame_tlv = (struct wmi_tlv *)(skb->data + sizeof(*cmd));
681 	frame_tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
682 			    FIELD_PREP(WMI_TLV_LEN, buf_len);
683 
684 	memcpy(frame_tlv->value, frame->data, buf_len);
685 
686 	ath11k_ce_byte_swap(frame_tlv->value, buf_len);
687 
688 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_MGMT_TX_SEND_CMDID);
689 	if (ret) {
690 		ath11k_warn(ar->ab,
691 			    "failed to submit WMI_MGMT_TX_SEND_CMDID cmd\n");
692 		dev_kfree_skb(skb);
693 	}
694 
695 	return ret;
696 }
697 
698 int ath11k_wmi_vdev_create(struct ath11k *ar, u8 *macaddr,
699 			   struct vdev_create_params *param)
700 {
701 	struct ath11k_pdev_wmi *wmi = ar->wmi;
702 	struct wmi_vdev_create_cmd *cmd;
703 	struct sk_buff *skb;
704 	struct wmi_vdev_txrx_streams *txrx_streams;
705 	struct wmi_tlv *tlv;
706 	int ret, len;
707 	void *ptr;
708 
709 	/* It can be optimized my sending tx/rx chain configuration
710 	 * only for supported bands instead of always sending it for
711 	 * both the bands.
712 	 */
713 	len = sizeof(*cmd) + TLV_HDR_SIZE +
714 		(WMI_NUM_SUPPORTED_BAND_MAX * sizeof(*txrx_streams));
715 
716 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
717 	if (!skb)
718 		return -ENOMEM;
719 
720 	cmd = (struct wmi_vdev_create_cmd *)skb->data;
721 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_CREATE_CMD) |
722 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
723 
724 	cmd->vdev_id = param->if_id;
725 	cmd->vdev_type = param->type;
726 	cmd->vdev_subtype = param->subtype;
727 	cmd->num_cfg_txrx_streams = WMI_NUM_SUPPORTED_BAND_MAX;
728 	cmd->pdev_id = param->pdev_id;
729 	cmd->mbssid_flags = param->mbssid_flags;
730 	cmd->mbssid_tx_vdev_id = param->mbssid_tx_vdev_id;
731 
732 	ether_addr_copy(cmd->vdev_macaddr.addr, macaddr);
733 
734 	ptr = skb->data + sizeof(*cmd);
735 	len = WMI_NUM_SUPPORTED_BAND_MAX * sizeof(*txrx_streams);
736 
737 	tlv = ptr;
738 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
739 		      FIELD_PREP(WMI_TLV_LEN, len);
740 
741 	ptr += TLV_HDR_SIZE;
742 	txrx_streams = ptr;
743 	len = sizeof(*txrx_streams);
744 	txrx_streams->tlv_header =
745 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_TXRX_STREAMS) |
746 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
747 	txrx_streams->band = WMI_TPC_CHAINMASK_CONFIG_BAND_2G;
748 	txrx_streams->supported_tx_streams =
749 				 param->chains[NL80211_BAND_2GHZ].tx;
750 	txrx_streams->supported_rx_streams =
751 				 param->chains[NL80211_BAND_2GHZ].rx;
752 
753 	txrx_streams++;
754 	txrx_streams->tlv_header =
755 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_TXRX_STREAMS) |
756 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
757 	txrx_streams->band = WMI_TPC_CHAINMASK_CONFIG_BAND_5G;
758 	txrx_streams->supported_tx_streams =
759 				 param->chains[NL80211_BAND_5GHZ].tx;
760 	txrx_streams->supported_rx_streams =
761 				 param->chains[NL80211_BAND_5GHZ].rx;
762 
763 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_CREATE_CMDID);
764 	if (ret) {
765 		ath11k_warn(ar->ab,
766 			    "failed to submit WMI_VDEV_CREATE_CMDID\n");
767 		dev_kfree_skb(skb);
768 	}
769 
770 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
771 		   "vdev create: id %d type %d subtype %d macaddr %pM pdevid %d\n",
772 		   param->if_id, param->type, param->subtype,
773 		   macaddr, param->pdev_id);
774 
775 	return ret;
776 }
777 
778 int ath11k_wmi_vdev_delete(struct ath11k *ar, u8 vdev_id)
779 {
780 	struct ath11k_pdev_wmi *wmi = ar->wmi;
781 	struct wmi_vdev_delete_cmd *cmd;
782 	struct sk_buff *skb;
783 	int ret;
784 
785 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
786 	if (!skb)
787 		return -ENOMEM;
788 
789 	cmd = (struct wmi_vdev_delete_cmd *)skb->data;
790 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_DELETE_CMD) |
791 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
792 	cmd->vdev_id = vdev_id;
793 
794 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_DELETE_CMDID);
795 	if (ret) {
796 		ath11k_warn(ar->ab, "failed to submit WMI_VDEV_DELETE_CMDID\n");
797 		dev_kfree_skb(skb);
798 	}
799 
800 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "vdev delete id %d\n", vdev_id);
801 
802 	return ret;
803 }
804 
805 int ath11k_wmi_vdev_stop(struct ath11k *ar, u8 vdev_id)
806 {
807 	struct ath11k_pdev_wmi *wmi = ar->wmi;
808 	struct wmi_vdev_stop_cmd *cmd;
809 	struct sk_buff *skb;
810 	int ret;
811 
812 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
813 	if (!skb)
814 		return -ENOMEM;
815 
816 	cmd = (struct wmi_vdev_stop_cmd *)skb->data;
817 
818 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_STOP_CMD) |
819 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
820 	cmd->vdev_id = vdev_id;
821 
822 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_STOP_CMDID);
823 	if (ret) {
824 		ath11k_warn(ar->ab, "failed to submit WMI_VDEV_STOP cmd\n");
825 		dev_kfree_skb(skb);
826 	}
827 
828 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "vdev stop id 0x%x\n", vdev_id);
829 
830 	return ret;
831 }
832 
833 int ath11k_wmi_vdev_down(struct ath11k *ar, u8 vdev_id)
834 {
835 	struct ath11k_pdev_wmi *wmi = ar->wmi;
836 	struct wmi_vdev_down_cmd *cmd;
837 	struct sk_buff *skb;
838 	int ret;
839 
840 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
841 	if (!skb)
842 		return -ENOMEM;
843 
844 	cmd = (struct wmi_vdev_down_cmd *)skb->data;
845 
846 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_DOWN_CMD) |
847 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
848 	cmd->vdev_id = vdev_id;
849 
850 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_DOWN_CMDID);
851 	if (ret) {
852 		ath11k_warn(ar->ab, "failed to submit WMI_VDEV_DOWN cmd\n");
853 		dev_kfree_skb(skb);
854 	}
855 
856 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "vdev down id 0x%x\n", vdev_id);
857 
858 	return ret;
859 }
860 
861 static void ath11k_wmi_put_wmi_channel(struct wmi_channel *chan,
862 				       struct wmi_vdev_start_req_arg *arg)
863 {
864 	u32 center_freq1 = arg->channel.band_center_freq1;
865 
866 	memset(chan, 0, sizeof(*chan));
867 
868 	chan->mhz = arg->channel.freq;
869 	chan->band_center_freq1 = arg->channel.band_center_freq1;
870 
871 	if (arg->channel.mode == MODE_11AX_HE160) {
872 		if (arg->channel.freq > arg->channel.band_center_freq1)
873 			chan->band_center_freq1 = center_freq1 + 40;
874 		else
875 			chan->band_center_freq1 = center_freq1 - 40;
876 
877 		chan->band_center_freq2 = arg->channel.band_center_freq1;
878 
879 	} else if ((arg->channel.mode == MODE_11AC_VHT80_80) ||
880 		   (arg->channel.mode == MODE_11AX_HE80_80)) {
881 		chan->band_center_freq2 = arg->channel.band_center_freq2;
882 	} else {
883 		chan->band_center_freq2 = 0;
884 	}
885 
886 	chan->info |= FIELD_PREP(WMI_CHAN_INFO_MODE, arg->channel.mode);
887 	if (arg->channel.passive)
888 		chan->info |= WMI_CHAN_INFO_PASSIVE;
889 	if (arg->channel.allow_ibss)
890 		chan->info |= WMI_CHAN_INFO_ADHOC_ALLOWED;
891 	if (arg->channel.allow_ht)
892 		chan->info |= WMI_CHAN_INFO_ALLOW_HT;
893 	if (arg->channel.allow_vht)
894 		chan->info |= WMI_CHAN_INFO_ALLOW_VHT;
895 	if (arg->channel.allow_he)
896 		chan->info |= WMI_CHAN_INFO_ALLOW_HE;
897 	if (arg->channel.ht40plus)
898 		chan->info |= WMI_CHAN_INFO_HT40_PLUS;
899 	if (arg->channel.chan_radar)
900 		chan->info |= WMI_CHAN_INFO_DFS;
901 	if (arg->channel.freq2_radar)
902 		chan->info |= WMI_CHAN_INFO_DFS_FREQ2;
903 
904 	chan->reg_info_1 = FIELD_PREP(WMI_CHAN_REG_INFO1_MAX_PWR,
905 				      arg->channel.max_power) |
906 		FIELD_PREP(WMI_CHAN_REG_INFO1_MAX_REG_PWR,
907 			   arg->channel.max_reg_power);
908 
909 	chan->reg_info_2 = FIELD_PREP(WMI_CHAN_REG_INFO2_ANT_MAX,
910 				      arg->channel.max_antenna_gain) |
911 		FIELD_PREP(WMI_CHAN_REG_INFO2_MAX_TX_PWR,
912 			   arg->channel.max_power);
913 }
914 
915 int ath11k_wmi_vdev_start(struct ath11k *ar, struct wmi_vdev_start_req_arg *arg,
916 			  bool restart)
917 {
918 	struct ath11k_pdev_wmi *wmi = ar->wmi;
919 	struct wmi_vdev_start_request_cmd *cmd;
920 	struct sk_buff *skb;
921 	struct wmi_channel *chan;
922 	struct wmi_tlv *tlv;
923 	void *ptr;
924 	int ret, len;
925 
926 	if (WARN_ON(arg->ssid_len > sizeof(cmd->ssid.ssid)))
927 		return -EINVAL;
928 
929 	len = sizeof(*cmd) + sizeof(*chan) + TLV_HDR_SIZE;
930 
931 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
932 	if (!skb)
933 		return -ENOMEM;
934 
935 	cmd = (struct wmi_vdev_start_request_cmd *)skb->data;
936 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
937 				     WMI_TAG_VDEV_START_REQUEST_CMD) |
938 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
939 	cmd->vdev_id = arg->vdev_id;
940 	cmd->beacon_interval = arg->bcn_intval;
941 	cmd->bcn_tx_rate = arg->bcn_tx_rate;
942 	cmd->dtim_period = arg->dtim_period;
943 	cmd->num_noa_descriptors = arg->num_noa_descriptors;
944 	cmd->preferred_rx_streams = arg->pref_rx_streams;
945 	cmd->preferred_tx_streams = arg->pref_tx_streams;
946 	cmd->cac_duration_ms = arg->cac_duration_ms;
947 	cmd->regdomain = arg->regdomain;
948 	cmd->he_ops = arg->he_ops;
949 	cmd->mbssid_flags = arg->mbssid_flags;
950 	cmd->mbssid_tx_vdev_id = arg->mbssid_tx_vdev_id;
951 
952 	if (!restart) {
953 		if (arg->ssid) {
954 			cmd->ssid.ssid_len = arg->ssid_len;
955 			memcpy(cmd->ssid.ssid, arg->ssid, arg->ssid_len);
956 		}
957 		if (arg->hidden_ssid)
958 			cmd->flags |= WMI_VDEV_START_HIDDEN_SSID;
959 		if (arg->pmf_enabled)
960 			cmd->flags |= WMI_VDEV_START_PMF_ENABLED;
961 	}
962 
963 	cmd->flags |= WMI_VDEV_START_LDPC_RX_ENABLED;
964 	if (test_bit(ATH11K_FLAG_HW_CRYPTO_DISABLED, &ar->ab->dev_flags))
965 		cmd->flags |= WMI_VDEV_START_HW_ENCRYPTION_DISABLED;
966 
967 	ptr = skb->data + sizeof(*cmd);
968 	chan = ptr;
969 
970 	ath11k_wmi_put_wmi_channel(chan, arg);
971 
972 	chan->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_CHANNEL) |
973 			   FIELD_PREP(WMI_TLV_LEN,
974 				      sizeof(*chan) - TLV_HDR_SIZE);
975 	ptr += sizeof(*chan);
976 
977 	tlv = ptr;
978 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
979 		      FIELD_PREP(WMI_TLV_LEN, 0);
980 
981 	/* Note: This is a nested TLV containing:
982 	 * [wmi_tlv][wmi_p2p_noa_descriptor][wmi_tlv]..
983 	 */
984 
985 	ptr += sizeof(*tlv);
986 
987 	if (restart)
988 		ret = ath11k_wmi_cmd_send(wmi, skb,
989 					  WMI_VDEV_RESTART_REQUEST_CMDID);
990 	else
991 		ret = ath11k_wmi_cmd_send(wmi, skb,
992 					  WMI_VDEV_START_REQUEST_CMDID);
993 	if (ret) {
994 		ath11k_warn(ar->ab, "failed to submit vdev_%s cmd\n",
995 			    restart ? "restart" : "start");
996 		dev_kfree_skb(skb);
997 	}
998 
999 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "vdev %s id 0x%x freq 0x%x mode 0x%x\n",
1000 		   restart ? "restart" : "start", arg->vdev_id,
1001 		   arg->channel.freq, arg->channel.mode);
1002 
1003 	return ret;
1004 }
1005 
1006 int ath11k_wmi_vdev_up(struct ath11k *ar, u32 vdev_id, u32 aid, const u8 *bssid,
1007 		       u8 *tx_bssid, u32 nontx_profile_idx, u32 nontx_profile_cnt)
1008 {
1009 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1010 	struct wmi_vdev_up_cmd *cmd;
1011 	struct ieee80211_bss_conf *bss_conf;
1012 	struct ath11k_vif *arvif;
1013 	struct sk_buff *skb;
1014 	int ret;
1015 
1016 	arvif = ath11k_mac_get_arvif(ar, vdev_id);
1017 
1018 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1019 	if (!skb)
1020 		return -ENOMEM;
1021 
1022 	cmd = (struct wmi_vdev_up_cmd *)skb->data;
1023 
1024 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_UP_CMD) |
1025 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1026 	cmd->vdev_id = vdev_id;
1027 	cmd->vdev_assoc_id = aid;
1028 
1029 	ether_addr_copy(cmd->vdev_bssid.addr, bssid);
1030 
1031 	cmd->nontx_profile_idx = nontx_profile_idx;
1032 	cmd->nontx_profile_cnt = nontx_profile_cnt;
1033 	if (tx_bssid)
1034 		ether_addr_copy(cmd->tx_vdev_bssid.addr, tx_bssid);
1035 
1036 	if (arvif && arvif->vif->type == NL80211_IFTYPE_STATION) {
1037 		bss_conf = &arvif->vif->bss_conf;
1038 
1039 		if (bss_conf->nontransmitted) {
1040 			ether_addr_copy(cmd->tx_vdev_bssid.addr,
1041 					bss_conf->transmitter_bssid);
1042 			cmd->nontx_profile_idx = bss_conf->bssid_index;
1043 			cmd->nontx_profile_cnt = bss_conf->bssid_indicator;
1044 		}
1045 	}
1046 
1047 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_UP_CMDID);
1048 	if (ret) {
1049 		ath11k_warn(ar->ab, "failed to submit WMI_VDEV_UP cmd\n");
1050 		dev_kfree_skb(skb);
1051 	}
1052 
1053 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1054 		   "mgmt vdev up id 0x%x assoc id %d bssid %pM\n",
1055 		   vdev_id, aid, bssid);
1056 
1057 	return ret;
1058 }
1059 
1060 int ath11k_wmi_send_peer_create_cmd(struct ath11k *ar,
1061 				    struct peer_create_params *param)
1062 {
1063 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1064 	struct wmi_peer_create_cmd *cmd;
1065 	struct sk_buff *skb;
1066 	int ret;
1067 
1068 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1069 	if (!skb)
1070 		return -ENOMEM;
1071 
1072 	cmd = (struct wmi_peer_create_cmd *)skb->data;
1073 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PEER_CREATE_CMD) |
1074 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1075 
1076 	ether_addr_copy(cmd->peer_macaddr.addr, param->peer_addr);
1077 	cmd->peer_type = param->peer_type;
1078 	cmd->vdev_id = param->vdev_id;
1079 
1080 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_CREATE_CMDID);
1081 	if (ret) {
1082 		ath11k_warn(ar->ab, "failed to submit WMI_PEER_CREATE cmd\n");
1083 		dev_kfree_skb(skb);
1084 	}
1085 
1086 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1087 		   "peer create vdev_id %d peer_addr %pM\n",
1088 		   param->vdev_id, param->peer_addr);
1089 
1090 	return ret;
1091 }
1092 
1093 int ath11k_wmi_send_peer_delete_cmd(struct ath11k *ar,
1094 				    const u8 *peer_addr, u8 vdev_id)
1095 {
1096 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1097 	struct wmi_peer_delete_cmd *cmd;
1098 	struct sk_buff *skb;
1099 	int ret;
1100 
1101 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1102 	if (!skb)
1103 		return -ENOMEM;
1104 
1105 	cmd = (struct wmi_peer_delete_cmd *)skb->data;
1106 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PEER_DELETE_CMD) |
1107 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1108 
1109 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1110 	cmd->vdev_id = vdev_id;
1111 
1112 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1113 		   "peer delete vdev_id %d peer_addr %pM\n",
1114 		   vdev_id,  peer_addr);
1115 
1116 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_DELETE_CMDID);
1117 	if (ret) {
1118 		ath11k_warn(ar->ab, "failed to send WMI_PEER_DELETE cmd\n");
1119 		dev_kfree_skb(skb);
1120 	}
1121 
1122 	return ret;
1123 }
1124 
1125 int ath11k_wmi_send_pdev_set_regdomain(struct ath11k *ar,
1126 				       struct pdev_set_regdomain_params *param)
1127 {
1128 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1129 	struct wmi_pdev_set_regdomain_cmd *cmd;
1130 	struct sk_buff *skb;
1131 	int ret;
1132 
1133 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1134 	if (!skb)
1135 		return -ENOMEM;
1136 
1137 	cmd = (struct wmi_pdev_set_regdomain_cmd *)skb->data;
1138 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1139 				     WMI_TAG_PDEV_SET_REGDOMAIN_CMD) |
1140 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1141 
1142 	cmd->reg_domain = param->current_rd_in_use;
1143 	cmd->reg_domain_2g = param->current_rd_2g;
1144 	cmd->reg_domain_5g = param->current_rd_5g;
1145 	cmd->conformance_test_limit_2g = param->ctl_2g;
1146 	cmd->conformance_test_limit_5g = param->ctl_5g;
1147 	cmd->dfs_domain = param->dfs_domain;
1148 	cmd->pdev_id = param->pdev_id;
1149 
1150 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1151 		   "pdev regd rd %d rd2g %d rd5g %d domain %d pdev id %d\n",
1152 		   param->current_rd_in_use, param->current_rd_2g,
1153 		   param->current_rd_5g, param->dfs_domain, param->pdev_id);
1154 
1155 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_REGDOMAIN_CMDID);
1156 	if (ret) {
1157 		ath11k_warn(ar->ab,
1158 			    "failed to send WMI_PDEV_SET_REGDOMAIN cmd\n");
1159 		dev_kfree_skb(skb);
1160 	}
1161 
1162 	return ret;
1163 }
1164 
1165 int ath11k_wmi_set_peer_param(struct ath11k *ar, const u8 *peer_addr,
1166 			      u32 vdev_id, u32 param_id, u32 param_val)
1167 {
1168 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1169 	struct wmi_peer_set_param_cmd *cmd;
1170 	struct sk_buff *skb;
1171 	int ret;
1172 
1173 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1174 	if (!skb)
1175 		return -ENOMEM;
1176 
1177 	cmd = (struct wmi_peer_set_param_cmd *)skb->data;
1178 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PEER_SET_PARAM_CMD) |
1179 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1180 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1181 	cmd->vdev_id = vdev_id;
1182 	cmd->param_id = param_id;
1183 	cmd->param_value = param_val;
1184 
1185 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_SET_PARAM_CMDID);
1186 	if (ret) {
1187 		ath11k_warn(ar->ab, "failed to send WMI_PEER_SET_PARAM cmd\n");
1188 		dev_kfree_skb(skb);
1189 	}
1190 
1191 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1192 		   "vdev %d peer 0x%pM set param %d value %d\n",
1193 		   vdev_id, peer_addr, param_id, param_val);
1194 
1195 	return ret;
1196 }
1197 
1198 int ath11k_wmi_send_peer_flush_tids_cmd(struct ath11k *ar,
1199 					u8 peer_addr[ETH_ALEN],
1200 					struct peer_flush_params *param)
1201 {
1202 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1203 	struct wmi_peer_flush_tids_cmd *cmd;
1204 	struct sk_buff *skb;
1205 	int ret;
1206 
1207 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1208 	if (!skb)
1209 		return -ENOMEM;
1210 
1211 	cmd = (struct wmi_peer_flush_tids_cmd *)skb->data;
1212 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PEER_FLUSH_TIDS_CMD) |
1213 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1214 
1215 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1216 	cmd->peer_tid_bitmap = param->peer_tid_bitmap;
1217 	cmd->vdev_id = param->vdev_id;
1218 
1219 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_FLUSH_TIDS_CMDID);
1220 	if (ret) {
1221 		ath11k_warn(ar->ab,
1222 			    "failed to send WMI_PEER_FLUSH_TIDS cmd\n");
1223 		dev_kfree_skb(skb);
1224 	}
1225 
1226 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1227 		   "peer flush vdev_id %d peer_addr %pM tids %08x\n",
1228 		   param->vdev_id, peer_addr, param->peer_tid_bitmap);
1229 
1230 	return ret;
1231 }
1232 
1233 int ath11k_wmi_peer_rx_reorder_queue_setup(struct ath11k *ar,
1234 					   int vdev_id, const u8 *addr,
1235 					   dma_addr_t paddr, u8 tid,
1236 					   u8 ba_window_size_valid,
1237 					   u32 ba_window_size)
1238 {
1239 	struct wmi_peer_reorder_queue_setup_cmd *cmd;
1240 	struct sk_buff *skb;
1241 	int ret;
1242 
1243 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
1244 	if (!skb)
1245 		return -ENOMEM;
1246 
1247 	cmd = (struct wmi_peer_reorder_queue_setup_cmd *)skb->data;
1248 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1249 				     WMI_TAG_REORDER_QUEUE_SETUP_CMD) |
1250 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1251 
1252 	ether_addr_copy(cmd->peer_macaddr.addr, addr);
1253 	cmd->vdev_id = vdev_id;
1254 	cmd->tid = tid;
1255 	cmd->queue_ptr_lo = lower_32_bits(paddr);
1256 	cmd->queue_ptr_hi = upper_32_bits(paddr);
1257 	cmd->queue_no = tid;
1258 	cmd->ba_window_size_valid = ba_window_size_valid;
1259 	cmd->ba_window_size = ba_window_size;
1260 
1261 	ret = ath11k_wmi_cmd_send(ar->wmi, skb,
1262 				  WMI_PEER_REORDER_QUEUE_SETUP_CMDID);
1263 	if (ret) {
1264 		ath11k_warn(ar->ab,
1265 			    "failed to send WMI_PEER_REORDER_QUEUE_SETUP\n");
1266 		dev_kfree_skb(skb);
1267 	}
1268 
1269 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1270 		   "rx reorder queue setup addr %pM vdev_id %d tid %d\n",
1271 		   addr, vdev_id, tid);
1272 
1273 	return ret;
1274 }
1275 
1276 int
1277 ath11k_wmi_rx_reord_queue_remove(struct ath11k *ar,
1278 				 struct rx_reorder_queue_remove_params *param)
1279 {
1280 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1281 	struct wmi_peer_reorder_queue_remove_cmd *cmd;
1282 	struct sk_buff *skb;
1283 	int ret;
1284 
1285 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1286 	if (!skb)
1287 		return -ENOMEM;
1288 
1289 	cmd = (struct wmi_peer_reorder_queue_remove_cmd *)skb->data;
1290 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1291 				     WMI_TAG_REORDER_QUEUE_REMOVE_CMD) |
1292 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1293 
1294 	ether_addr_copy(cmd->peer_macaddr.addr, param->peer_macaddr);
1295 	cmd->vdev_id = param->vdev_id;
1296 	cmd->tid_mask = param->peer_tid_bitmap;
1297 
1298 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1299 		   "%s: peer_macaddr %pM vdev_id %d, tid_map %d", __func__,
1300 		   param->peer_macaddr, param->vdev_id, param->peer_tid_bitmap);
1301 
1302 	ret = ath11k_wmi_cmd_send(wmi, skb,
1303 				  WMI_PEER_REORDER_QUEUE_REMOVE_CMDID);
1304 	if (ret) {
1305 		ath11k_warn(ar->ab,
1306 			    "failed to send WMI_PEER_REORDER_QUEUE_REMOVE_CMDID");
1307 		dev_kfree_skb(skb);
1308 	}
1309 
1310 	return ret;
1311 }
1312 
1313 int ath11k_wmi_pdev_set_param(struct ath11k *ar, u32 param_id,
1314 			      u32 param_value, u8 pdev_id)
1315 {
1316 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1317 	struct wmi_pdev_set_param_cmd *cmd;
1318 	struct sk_buff *skb;
1319 	int ret;
1320 
1321 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1322 	if (!skb)
1323 		return -ENOMEM;
1324 
1325 	cmd = (struct wmi_pdev_set_param_cmd *)skb->data;
1326 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_SET_PARAM_CMD) |
1327 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1328 	cmd->pdev_id = pdev_id;
1329 	cmd->param_id = param_id;
1330 	cmd->param_value = param_value;
1331 
1332 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_PARAM_CMDID);
1333 	if (ret) {
1334 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_SET_PARAM cmd\n");
1335 		dev_kfree_skb(skb);
1336 	}
1337 
1338 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1339 		   "pdev set param %d pdev id %d value %d\n",
1340 		   param_id, pdev_id, param_value);
1341 
1342 	return ret;
1343 }
1344 
1345 int ath11k_wmi_pdev_set_ps_mode(struct ath11k *ar, int vdev_id,
1346 				enum wmi_sta_ps_mode psmode)
1347 {
1348 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1349 	struct wmi_pdev_set_ps_mode_cmd *cmd;
1350 	struct sk_buff *skb;
1351 	int ret;
1352 
1353 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1354 	if (!skb)
1355 		return -ENOMEM;
1356 
1357 	cmd = (struct wmi_pdev_set_ps_mode_cmd *)skb->data;
1358 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_STA_POWERSAVE_MODE_CMD) |
1359 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1360 	cmd->vdev_id = vdev_id;
1361 	cmd->sta_ps_mode = psmode;
1362 
1363 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_STA_POWERSAVE_MODE_CMDID);
1364 	if (ret) {
1365 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_SET_PARAM cmd\n");
1366 		dev_kfree_skb(skb);
1367 	}
1368 
1369 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1370 		   "vdev set psmode %d vdev id %d\n",
1371 		   psmode, vdev_id);
1372 
1373 	return ret;
1374 }
1375 
1376 int ath11k_wmi_pdev_suspend(struct ath11k *ar, u32 suspend_opt,
1377 			    u32 pdev_id)
1378 {
1379 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1380 	struct wmi_pdev_suspend_cmd *cmd;
1381 	struct sk_buff *skb;
1382 	int ret;
1383 
1384 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1385 	if (!skb)
1386 		return -ENOMEM;
1387 
1388 	cmd = (struct wmi_pdev_suspend_cmd *)skb->data;
1389 
1390 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_SUSPEND_CMD) |
1391 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1392 
1393 	cmd->suspend_opt = suspend_opt;
1394 	cmd->pdev_id = pdev_id;
1395 
1396 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SUSPEND_CMDID);
1397 	if (ret) {
1398 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_SUSPEND cmd\n");
1399 		dev_kfree_skb(skb);
1400 	}
1401 
1402 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1403 		   "pdev suspend pdev_id %d\n", pdev_id);
1404 
1405 	return ret;
1406 }
1407 
1408 int ath11k_wmi_pdev_resume(struct ath11k *ar, u32 pdev_id)
1409 {
1410 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1411 	struct wmi_pdev_resume_cmd *cmd;
1412 	struct sk_buff *skb;
1413 	int ret;
1414 
1415 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1416 	if (!skb)
1417 		return -ENOMEM;
1418 
1419 	cmd = (struct wmi_pdev_resume_cmd *)skb->data;
1420 
1421 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_RESUME_CMD) |
1422 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1423 	cmd->pdev_id = pdev_id;
1424 
1425 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1426 		   "pdev resume pdev id %d\n", pdev_id);
1427 
1428 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_RESUME_CMDID);
1429 	if (ret) {
1430 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_RESUME cmd\n");
1431 		dev_kfree_skb(skb);
1432 	}
1433 
1434 	return ret;
1435 }
1436 
1437 /* TODO FW Support for the cmd is not available yet.
1438  * Can be tested once the command and corresponding
1439  * event is implemented in FW
1440  */
1441 int ath11k_wmi_pdev_bss_chan_info_request(struct ath11k *ar,
1442 					  enum wmi_bss_chan_info_req_type type)
1443 {
1444 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1445 	struct wmi_pdev_bss_chan_info_req_cmd *cmd;
1446 	struct sk_buff *skb;
1447 	int ret;
1448 
1449 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1450 	if (!skb)
1451 		return -ENOMEM;
1452 
1453 	cmd = (struct wmi_pdev_bss_chan_info_req_cmd *)skb->data;
1454 
1455 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1456 				     WMI_TAG_PDEV_BSS_CHAN_INFO_REQUEST) |
1457 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1458 	cmd->req_type = type;
1459 	cmd->pdev_id = ar->pdev->pdev_id;
1460 
1461 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1462 		   "bss chan info req type %d\n", type);
1463 
1464 	ret = ath11k_wmi_cmd_send(wmi, skb,
1465 				  WMI_PDEV_BSS_CHAN_INFO_REQUEST_CMDID);
1466 	if (ret) {
1467 		ath11k_warn(ar->ab,
1468 			    "failed to send WMI_PDEV_BSS_CHAN_INFO_REQUEST cmd\n");
1469 		dev_kfree_skb(skb);
1470 	}
1471 
1472 	return ret;
1473 }
1474 
1475 int ath11k_wmi_send_set_ap_ps_param_cmd(struct ath11k *ar, u8 *peer_addr,
1476 					struct ap_ps_params *param)
1477 {
1478 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1479 	struct wmi_ap_ps_peer_cmd *cmd;
1480 	struct sk_buff *skb;
1481 	int ret;
1482 
1483 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1484 	if (!skb)
1485 		return -ENOMEM;
1486 
1487 	cmd = (struct wmi_ap_ps_peer_cmd *)skb->data;
1488 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_AP_PS_PEER_CMD) |
1489 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1490 
1491 	cmd->vdev_id = param->vdev_id;
1492 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1493 	cmd->param = param->param;
1494 	cmd->value = param->value;
1495 
1496 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_AP_PS_PEER_PARAM_CMDID);
1497 	if (ret) {
1498 		ath11k_warn(ar->ab,
1499 			    "failed to send WMI_AP_PS_PEER_PARAM_CMDID\n");
1500 		dev_kfree_skb(skb);
1501 	}
1502 
1503 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1504 		   "set ap ps vdev id %d peer %pM param %d value %d\n",
1505 		   param->vdev_id, peer_addr, param->param, param->value);
1506 
1507 	return ret;
1508 }
1509 
1510 int ath11k_wmi_set_sta_ps_param(struct ath11k *ar, u32 vdev_id,
1511 				u32 param, u32 param_value)
1512 {
1513 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1514 	struct wmi_sta_powersave_param_cmd *cmd;
1515 	struct sk_buff *skb;
1516 	int ret;
1517 
1518 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1519 	if (!skb)
1520 		return -ENOMEM;
1521 
1522 	cmd = (struct wmi_sta_powersave_param_cmd *)skb->data;
1523 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1524 				     WMI_TAG_STA_POWERSAVE_PARAM_CMD) |
1525 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1526 
1527 	cmd->vdev_id = vdev_id;
1528 	cmd->param = param;
1529 	cmd->value = param_value;
1530 
1531 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1532 		   "set sta ps vdev_id %d param %d value %d\n",
1533 		   vdev_id, param, param_value);
1534 
1535 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_STA_POWERSAVE_PARAM_CMDID);
1536 	if (ret) {
1537 		ath11k_warn(ar->ab, "failed to send WMI_STA_POWERSAVE_PARAM_CMDID");
1538 		dev_kfree_skb(skb);
1539 	}
1540 
1541 	return ret;
1542 }
1543 
1544 int ath11k_wmi_force_fw_hang_cmd(struct ath11k *ar, u32 type, u32 delay_time_ms)
1545 {
1546 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1547 	struct wmi_force_fw_hang_cmd *cmd;
1548 	struct sk_buff *skb;
1549 	int ret, len;
1550 
1551 	len = sizeof(*cmd);
1552 
1553 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
1554 	if (!skb)
1555 		return -ENOMEM;
1556 
1557 	cmd = (struct wmi_force_fw_hang_cmd *)skb->data;
1558 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_FORCE_FW_HANG_CMD) |
1559 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
1560 
1561 	cmd->type = type;
1562 	cmd->delay_time_ms = delay_time_ms;
1563 
1564 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_FORCE_FW_HANG_CMDID);
1565 
1566 	if (ret) {
1567 		ath11k_warn(ar->ab, "Failed to send WMI_FORCE_FW_HANG_CMDID");
1568 		dev_kfree_skb(skb);
1569 	}
1570 	return ret;
1571 }
1572 
1573 int ath11k_wmi_vdev_set_param_cmd(struct ath11k *ar, u32 vdev_id,
1574 				  u32 param_id, u32 param_value)
1575 {
1576 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1577 	struct wmi_vdev_set_param_cmd *cmd;
1578 	struct sk_buff *skb;
1579 	int ret;
1580 
1581 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1582 	if (!skb)
1583 		return -ENOMEM;
1584 
1585 	cmd = (struct wmi_vdev_set_param_cmd *)skb->data;
1586 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_SET_PARAM_CMD) |
1587 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1588 
1589 	cmd->vdev_id = vdev_id;
1590 	cmd->param_id = param_id;
1591 	cmd->param_value = param_value;
1592 
1593 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_SET_PARAM_CMDID);
1594 	if (ret) {
1595 		ath11k_warn(ar->ab,
1596 			    "failed to send WMI_VDEV_SET_PARAM_CMDID\n");
1597 		dev_kfree_skb(skb);
1598 	}
1599 
1600 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1601 		   "vdev id 0x%x set param %d value %d\n",
1602 		   vdev_id, param_id, param_value);
1603 
1604 	return ret;
1605 }
1606 
1607 int ath11k_wmi_send_stats_request_cmd(struct ath11k *ar,
1608 				      struct stats_request_params *param)
1609 {
1610 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1611 	struct wmi_request_stats_cmd *cmd;
1612 	struct sk_buff *skb;
1613 	int ret;
1614 
1615 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1616 	if (!skb)
1617 		return -ENOMEM;
1618 
1619 	cmd = (struct wmi_request_stats_cmd *)skb->data;
1620 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_REQUEST_STATS_CMD) |
1621 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1622 
1623 	cmd->stats_id = param->stats_id;
1624 	cmd->vdev_id = param->vdev_id;
1625 	cmd->pdev_id = param->pdev_id;
1626 
1627 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_REQUEST_STATS_CMDID);
1628 	if (ret) {
1629 		ath11k_warn(ar->ab, "failed to send WMI_REQUEST_STATS cmd\n");
1630 		dev_kfree_skb(skb);
1631 	}
1632 
1633 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1634 		   "request stats 0x%x vdev id %d pdev id %d\n",
1635 		   param->stats_id, param->vdev_id, param->pdev_id);
1636 
1637 	return ret;
1638 }
1639 
1640 int ath11k_wmi_send_pdev_temperature_cmd(struct ath11k *ar)
1641 {
1642 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1643 	struct wmi_get_pdev_temperature_cmd *cmd;
1644 	struct sk_buff *skb;
1645 	int ret;
1646 
1647 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1648 	if (!skb)
1649 		return -ENOMEM;
1650 
1651 	cmd = (struct wmi_get_pdev_temperature_cmd *)skb->data;
1652 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_GET_TEMPERATURE_CMD) |
1653 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1654 	cmd->pdev_id = ar->pdev->pdev_id;
1655 
1656 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_GET_TEMPERATURE_CMDID);
1657 	if (ret) {
1658 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_GET_TEMPERATURE cmd\n");
1659 		dev_kfree_skb(skb);
1660 	}
1661 
1662 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1663 		   "pdev get temperature for pdev_id %d\n", ar->pdev->pdev_id);
1664 
1665 	return ret;
1666 }
1667 
1668 int ath11k_wmi_send_bcn_offload_control_cmd(struct ath11k *ar,
1669 					    u32 vdev_id, u32 bcn_ctrl_op)
1670 {
1671 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1672 	struct wmi_bcn_offload_ctrl_cmd *cmd;
1673 	struct sk_buff *skb;
1674 	int ret;
1675 
1676 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1677 	if (!skb)
1678 		return -ENOMEM;
1679 
1680 	cmd = (struct wmi_bcn_offload_ctrl_cmd *)skb->data;
1681 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1682 				     WMI_TAG_BCN_OFFLOAD_CTRL_CMD) |
1683 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1684 
1685 	cmd->vdev_id = vdev_id;
1686 	cmd->bcn_ctrl_op = bcn_ctrl_op;
1687 
1688 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1689 		   "bcn ctrl offload vdev id %d ctrl_op %d\n",
1690 		   vdev_id, bcn_ctrl_op);
1691 
1692 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_BCN_OFFLOAD_CTRL_CMDID);
1693 	if (ret) {
1694 		ath11k_warn(ar->ab,
1695 			    "failed to send WMI_BCN_OFFLOAD_CTRL_CMDID\n");
1696 		dev_kfree_skb(skb);
1697 	}
1698 
1699 	return ret;
1700 }
1701 
1702 int ath11k_wmi_bcn_tmpl(struct ath11k *ar, u32 vdev_id,
1703 			struct ieee80211_mutable_offsets *offs,
1704 			struct sk_buff *bcn, u32 ema_params)
1705 {
1706 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1707 	struct wmi_bcn_tmpl_cmd *cmd;
1708 	struct wmi_bcn_prb_info *bcn_prb_info;
1709 	struct wmi_tlv *tlv;
1710 	struct sk_buff *skb;
1711 	void *ptr;
1712 	int ret, len;
1713 	size_t aligned_len = roundup(bcn->len, 4);
1714 	struct ieee80211_vif *vif;
1715 	struct ath11k_vif *arvif = ath11k_mac_get_arvif(ar, vdev_id);
1716 
1717 	if (!arvif) {
1718 		ath11k_warn(ar->ab, "failed to find arvif with vdev id %d\n", vdev_id);
1719 		return -EINVAL;
1720 	}
1721 
1722 	vif = arvif->vif;
1723 
1724 	len = sizeof(*cmd) + sizeof(*bcn_prb_info) + TLV_HDR_SIZE + aligned_len;
1725 
1726 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
1727 	if (!skb)
1728 		return -ENOMEM;
1729 
1730 	cmd = (struct wmi_bcn_tmpl_cmd *)skb->data;
1731 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_BCN_TMPL_CMD) |
1732 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1733 	cmd->vdev_id = vdev_id;
1734 	cmd->tim_ie_offset = offs->tim_offset;
1735 
1736 	if (vif->bss_conf.csa_active) {
1737 		cmd->csa_switch_count_offset = offs->cntdwn_counter_offs[0];
1738 		cmd->ext_csa_switch_count_offset = offs->cntdwn_counter_offs[1];
1739 	}
1740 
1741 	cmd->buf_len = bcn->len;
1742 	cmd->mbssid_ie_offset = offs->mbssid_off;
1743 	cmd->ema_params = ema_params;
1744 
1745 	ptr = skb->data + sizeof(*cmd);
1746 
1747 	bcn_prb_info = ptr;
1748 	len = sizeof(*bcn_prb_info);
1749 	bcn_prb_info->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1750 					      WMI_TAG_BCN_PRB_INFO) |
1751 				   FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
1752 	bcn_prb_info->caps = 0;
1753 	bcn_prb_info->erp = 0;
1754 
1755 	ptr += sizeof(*bcn_prb_info);
1756 
1757 	tlv = ptr;
1758 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
1759 		      FIELD_PREP(WMI_TLV_LEN, aligned_len);
1760 	memcpy(tlv->value, bcn->data, bcn->len);
1761 
1762 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_BCN_TMPL_CMDID);
1763 	if (ret) {
1764 		ath11k_warn(ar->ab, "failed to send WMI_BCN_TMPL_CMDID\n");
1765 		dev_kfree_skb(skb);
1766 	}
1767 
1768 	return ret;
1769 }
1770 
1771 int ath11k_wmi_vdev_install_key(struct ath11k *ar,
1772 				struct wmi_vdev_install_key_arg *arg)
1773 {
1774 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1775 	struct wmi_vdev_install_key_cmd *cmd;
1776 	struct wmi_tlv *tlv;
1777 	struct sk_buff *skb;
1778 	int ret, len;
1779 	int key_len_aligned = roundup(arg->key_len, sizeof(uint32_t));
1780 
1781 	len = sizeof(*cmd) + TLV_HDR_SIZE + key_len_aligned;
1782 
1783 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
1784 	if (!skb)
1785 		return -ENOMEM;
1786 
1787 	cmd = (struct wmi_vdev_install_key_cmd *)skb->data;
1788 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_INSTALL_KEY_CMD) |
1789 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1790 	cmd->vdev_id = arg->vdev_id;
1791 	ether_addr_copy(cmd->peer_macaddr.addr, arg->macaddr);
1792 	cmd->key_idx = arg->key_idx;
1793 	cmd->key_flags = arg->key_flags;
1794 	cmd->key_cipher = arg->key_cipher;
1795 	cmd->key_len = arg->key_len;
1796 	cmd->key_txmic_len = arg->key_txmic_len;
1797 	cmd->key_rxmic_len = arg->key_rxmic_len;
1798 
1799 	if (arg->key_rsc_counter)
1800 		memcpy(&cmd->key_rsc_counter, &arg->key_rsc_counter,
1801 		       sizeof(struct wmi_key_seq_counter));
1802 
1803 	tlv = (struct wmi_tlv *)(skb->data + sizeof(*cmd));
1804 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
1805 		      FIELD_PREP(WMI_TLV_LEN, key_len_aligned);
1806 	if (arg->key_data)
1807 		memcpy(tlv->value, (u8 *)arg->key_data, key_len_aligned);
1808 
1809 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_INSTALL_KEY_CMDID);
1810 	if (ret) {
1811 		ath11k_warn(ar->ab,
1812 			    "failed to send WMI_VDEV_INSTALL_KEY cmd\n");
1813 		dev_kfree_skb(skb);
1814 	}
1815 
1816 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1817 		   "vdev install key idx %d cipher %d len %d\n",
1818 		   arg->key_idx, arg->key_cipher, arg->key_len);
1819 
1820 	return ret;
1821 }
1822 
1823 static inline void
1824 ath11k_wmi_copy_peer_flags(struct wmi_peer_assoc_complete_cmd *cmd,
1825 			   struct peer_assoc_params *param,
1826 			   bool hw_crypto_disabled)
1827 {
1828 	cmd->peer_flags = 0;
1829 
1830 	if (param->is_wme_set) {
1831 		if (param->qos_flag)
1832 			cmd->peer_flags |= WMI_PEER_QOS;
1833 		if (param->apsd_flag)
1834 			cmd->peer_flags |= WMI_PEER_APSD;
1835 		if (param->ht_flag)
1836 			cmd->peer_flags |= WMI_PEER_HT;
1837 		if (param->bw_40)
1838 			cmd->peer_flags |= WMI_PEER_40MHZ;
1839 		if (param->bw_80)
1840 			cmd->peer_flags |= WMI_PEER_80MHZ;
1841 		if (param->bw_160)
1842 			cmd->peer_flags |= WMI_PEER_160MHZ;
1843 
1844 		/* Typically if STBC is enabled for VHT it should be enabled
1845 		 * for HT as well
1846 		 **/
1847 		if (param->stbc_flag)
1848 			cmd->peer_flags |= WMI_PEER_STBC;
1849 
1850 		/* Typically if LDPC is enabled for VHT it should be enabled
1851 		 * for HT as well
1852 		 **/
1853 		if (param->ldpc_flag)
1854 			cmd->peer_flags |= WMI_PEER_LDPC;
1855 
1856 		if (param->static_mimops_flag)
1857 			cmd->peer_flags |= WMI_PEER_STATIC_MIMOPS;
1858 		if (param->dynamic_mimops_flag)
1859 			cmd->peer_flags |= WMI_PEER_DYN_MIMOPS;
1860 		if (param->spatial_mux_flag)
1861 			cmd->peer_flags |= WMI_PEER_SPATIAL_MUX;
1862 		if (param->vht_flag)
1863 			cmd->peer_flags |= WMI_PEER_VHT;
1864 		if (param->he_flag)
1865 			cmd->peer_flags |= WMI_PEER_HE;
1866 		if (param->twt_requester)
1867 			cmd->peer_flags |= WMI_PEER_TWT_REQ;
1868 		if (param->twt_responder)
1869 			cmd->peer_flags |= WMI_PEER_TWT_RESP;
1870 	}
1871 
1872 	/* Suppress authorization for all AUTH modes that need 4-way handshake
1873 	 * (during re-association).
1874 	 * Authorization will be done for these modes on key installation.
1875 	 */
1876 	if (param->auth_flag)
1877 		cmd->peer_flags |= WMI_PEER_AUTH;
1878 	if (param->need_ptk_4_way) {
1879 		cmd->peer_flags |= WMI_PEER_NEED_PTK_4_WAY;
1880 		if (!hw_crypto_disabled && param->is_assoc)
1881 			cmd->peer_flags &= ~WMI_PEER_AUTH;
1882 	}
1883 	if (param->need_gtk_2_way)
1884 		cmd->peer_flags |= WMI_PEER_NEED_GTK_2_WAY;
1885 	/* safe mode bypass the 4-way handshake */
1886 	if (param->safe_mode_enabled)
1887 		cmd->peer_flags &= ~(WMI_PEER_NEED_PTK_4_WAY |
1888 				     WMI_PEER_NEED_GTK_2_WAY);
1889 
1890 	if (param->is_pmf_enabled)
1891 		cmd->peer_flags |= WMI_PEER_PMF;
1892 
1893 	/* Disable AMSDU for station transmit, if user configures it */
1894 	/* Disable AMSDU for AP transmit to 11n Stations, if user configures
1895 	 * it
1896 	 * if (param->amsdu_disable) Add after FW support
1897 	 **/
1898 
1899 	/* Target asserts if node is marked HT and all MCS is set to 0.
1900 	 * Mark the node as non-HT if all the mcs rates are disabled through
1901 	 * iwpriv
1902 	 **/
1903 	if (param->peer_ht_rates.num_rates == 0)
1904 		cmd->peer_flags &= ~WMI_PEER_HT;
1905 }
1906 
1907 int ath11k_wmi_send_peer_assoc_cmd(struct ath11k *ar,
1908 				   struct peer_assoc_params *param)
1909 {
1910 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1911 	struct wmi_peer_assoc_complete_cmd *cmd;
1912 	struct wmi_vht_rate_set *mcs;
1913 	struct wmi_he_rate_set *he_mcs;
1914 	struct sk_buff *skb;
1915 	struct wmi_tlv *tlv;
1916 	void *ptr;
1917 	u32 peer_legacy_rates_align;
1918 	u32 peer_ht_rates_align;
1919 	int i, ret, len;
1920 
1921 	peer_legacy_rates_align = roundup(param->peer_legacy_rates.num_rates,
1922 					  sizeof(u32));
1923 	peer_ht_rates_align = roundup(param->peer_ht_rates.num_rates,
1924 				      sizeof(u32));
1925 
1926 	len = sizeof(*cmd) +
1927 	      TLV_HDR_SIZE + (peer_legacy_rates_align * sizeof(u8)) +
1928 	      TLV_HDR_SIZE + (peer_ht_rates_align * sizeof(u8)) +
1929 	      sizeof(*mcs) + TLV_HDR_SIZE +
1930 	      (sizeof(*he_mcs) * param->peer_he_mcs_count);
1931 
1932 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
1933 	if (!skb)
1934 		return -ENOMEM;
1935 
1936 	ptr = skb->data;
1937 
1938 	cmd = ptr;
1939 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1940 				     WMI_TAG_PEER_ASSOC_COMPLETE_CMD) |
1941 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1942 
1943 	cmd->vdev_id = param->vdev_id;
1944 
1945 	cmd->peer_new_assoc = param->peer_new_assoc;
1946 	cmd->peer_associd = param->peer_associd;
1947 
1948 	ath11k_wmi_copy_peer_flags(cmd, param,
1949 				   test_bit(ATH11K_FLAG_HW_CRYPTO_DISABLED,
1950 					    &ar->ab->dev_flags));
1951 
1952 	ether_addr_copy(cmd->peer_macaddr.addr, param->peer_mac);
1953 
1954 	cmd->peer_rate_caps = param->peer_rate_caps;
1955 	cmd->peer_caps = param->peer_caps;
1956 	cmd->peer_listen_intval = param->peer_listen_intval;
1957 	cmd->peer_ht_caps = param->peer_ht_caps;
1958 	cmd->peer_max_mpdu = param->peer_max_mpdu;
1959 	cmd->peer_mpdu_density = param->peer_mpdu_density;
1960 	cmd->peer_vht_caps = param->peer_vht_caps;
1961 	cmd->peer_phymode = param->peer_phymode;
1962 
1963 	/* Update 11ax capabilities */
1964 	cmd->peer_he_cap_info = param->peer_he_cap_macinfo[0];
1965 	cmd->peer_he_cap_info_ext = param->peer_he_cap_macinfo[1];
1966 	cmd->peer_he_cap_info_internal = param->peer_he_cap_macinfo_internal;
1967 	cmd->peer_he_caps_6ghz = param->peer_he_caps_6ghz;
1968 	cmd->peer_he_ops = param->peer_he_ops;
1969 	memcpy(&cmd->peer_he_cap_phy, &param->peer_he_cap_phyinfo,
1970 	       sizeof(param->peer_he_cap_phyinfo));
1971 	memcpy(&cmd->peer_ppet, &param->peer_ppet,
1972 	       sizeof(param->peer_ppet));
1973 
1974 	/* Update peer legacy rate information */
1975 	ptr += sizeof(*cmd);
1976 
1977 	tlv = ptr;
1978 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
1979 		      FIELD_PREP(WMI_TLV_LEN, peer_legacy_rates_align);
1980 
1981 	ptr += TLV_HDR_SIZE;
1982 
1983 	cmd->num_peer_legacy_rates = param->peer_legacy_rates.num_rates;
1984 	memcpy(ptr, param->peer_legacy_rates.rates,
1985 	       param->peer_legacy_rates.num_rates);
1986 
1987 	/* Update peer HT rate information */
1988 	ptr += peer_legacy_rates_align;
1989 
1990 	tlv = ptr;
1991 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
1992 		      FIELD_PREP(WMI_TLV_LEN, peer_ht_rates_align);
1993 	ptr += TLV_HDR_SIZE;
1994 	cmd->num_peer_ht_rates = param->peer_ht_rates.num_rates;
1995 	memcpy(ptr, param->peer_ht_rates.rates,
1996 	       param->peer_ht_rates.num_rates);
1997 
1998 	/* VHT Rates */
1999 	ptr += peer_ht_rates_align;
2000 
2001 	mcs = ptr;
2002 
2003 	mcs->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VHT_RATE_SET) |
2004 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*mcs) - TLV_HDR_SIZE);
2005 
2006 	cmd->peer_nss = param->peer_nss;
2007 
2008 	/* Update bandwidth-NSS mapping */
2009 	cmd->peer_bw_rxnss_override = 0;
2010 	cmd->peer_bw_rxnss_override |= param->peer_bw_rxnss_override;
2011 
2012 	if (param->vht_capable) {
2013 		mcs->rx_max_rate = param->rx_max_rate;
2014 		mcs->rx_mcs_set = param->rx_mcs_set;
2015 		mcs->tx_max_rate = param->tx_max_rate;
2016 		mcs->tx_mcs_set = param->tx_mcs_set;
2017 	}
2018 
2019 	/* HE Rates */
2020 	cmd->peer_he_mcs = param->peer_he_mcs_count;
2021 	cmd->min_data_rate = param->min_data_rate;
2022 
2023 	ptr += sizeof(*mcs);
2024 
2025 	len = param->peer_he_mcs_count * sizeof(*he_mcs);
2026 
2027 	tlv = ptr;
2028 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
2029 		      FIELD_PREP(WMI_TLV_LEN, len);
2030 	ptr += TLV_HDR_SIZE;
2031 
2032 	/* Loop through the HE rate set */
2033 	for (i = 0; i < param->peer_he_mcs_count; i++) {
2034 		he_mcs = ptr;
2035 		he_mcs->tlv_header = FIELD_PREP(WMI_TLV_TAG,
2036 						WMI_TAG_HE_RATE_SET) |
2037 				     FIELD_PREP(WMI_TLV_LEN,
2038 						sizeof(*he_mcs) - TLV_HDR_SIZE);
2039 
2040 		he_mcs->rx_mcs_set = param->peer_he_tx_mcs_set[i];
2041 		he_mcs->tx_mcs_set = param->peer_he_rx_mcs_set[i];
2042 		ptr += sizeof(*he_mcs);
2043 	}
2044 
2045 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_ASSOC_CMDID);
2046 	if (ret) {
2047 		ath11k_warn(ar->ab,
2048 			    "failed to send WMI_PEER_ASSOC_CMDID\n");
2049 		dev_kfree_skb(skb);
2050 	}
2051 
2052 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2053 		   "peer assoc vdev id %d assoc id %d peer mac %pM peer_flags %x rate_caps %x peer_caps %x listen_intval %d ht_caps %x max_mpdu %d nss %d phymode %d peer_mpdu_density %d vht_caps %x he cap_info %x he ops %x he cap_info_ext %x he phy %x %x %x peer_bw_rxnss_override %x\n",
2054 		   cmd->vdev_id, cmd->peer_associd, param->peer_mac,
2055 		   cmd->peer_flags, cmd->peer_rate_caps, cmd->peer_caps,
2056 		   cmd->peer_listen_intval, cmd->peer_ht_caps,
2057 		   cmd->peer_max_mpdu, cmd->peer_nss, cmd->peer_phymode,
2058 		   cmd->peer_mpdu_density,
2059 		   cmd->peer_vht_caps, cmd->peer_he_cap_info,
2060 		   cmd->peer_he_ops, cmd->peer_he_cap_info_ext,
2061 		   cmd->peer_he_cap_phy[0], cmd->peer_he_cap_phy[1],
2062 		   cmd->peer_he_cap_phy[2],
2063 		   cmd->peer_bw_rxnss_override);
2064 
2065 	return ret;
2066 }
2067 
2068 void ath11k_wmi_start_scan_init(struct ath11k *ar,
2069 				struct scan_req_params *arg)
2070 {
2071 	/* setup commonly used values */
2072 	arg->scan_req_id = 1;
2073 	if (ar->state_11d == ATH11K_11D_PREPARING)
2074 		arg->scan_priority = WMI_SCAN_PRIORITY_MEDIUM;
2075 	else
2076 		arg->scan_priority = WMI_SCAN_PRIORITY_LOW;
2077 	arg->dwell_time_active = 50;
2078 	arg->dwell_time_active_2g = 0;
2079 	arg->dwell_time_passive = 150;
2080 	arg->dwell_time_active_6g = 40;
2081 	arg->dwell_time_passive_6g = 30;
2082 	arg->min_rest_time = 50;
2083 	arg->max_rest_time = 500;
2084 	arg->repeat_probe_time = 0;
2085 	arg->probe_spacing_time = 0;
2086 	arg->idle_time = 0;
2087 	arg->max_scan_time = 20000;
2088 	arg->probe_delay = 5;
2089 	arg->notify_scan_events = WMI_SCAN_EVENT_STARTED |
2090 				  WMI_SCAN_EVENT_COMPLETED |
2091 				  WMI_SCAN_EVENT_BSS_CHANNEL |
2092 				  WMI_SCAN_EVENT_FOREIGN_CHAN |
2093 				  WMI_SCAN_EVENT_DEQUEUED;
2094 	arg->scan_flags |= WMI_SCAN_CHAN_STAT_EVENT;
2095 
2096 	if (test_bit(WMI_TLV_SERVICE_PASSIVE_SCAN_START_TIME_ENHANCE,
2097 		     ar->ab->wmi_ab.svc_map))
2098 		arg->scan_ctrl_flags_ext |=
2099 			WMI_SCAN_FLAG_EXT_PASSIVE_SCAN_START_TIME_ENHANCE;
2100 
2101 	arg->num_bssid = 1;
2102 
2103 	/* fill bssid_list[0] with 0xff, otherwise bssid and RA will be
2104 	 * ZEROs in probe request
2105 	 */
2106 	eth_broadcast_addr(arg->bssid_list[0].addr);
2107 }
2108 
2109 static inline void
2110 ath11k_wmi_copy_scan_event_cntrl_flags(struct wmi_start_scan_cmd *cmd,
2111 				       struct scan_req_params *param)
2112 {
2113 	/* Scan events subscription */
2114 	if (param->scan_ev_started)
2115 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_STARTED;
2116 	if (param->scan_ev_completed)
2117 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_COMPLETED;
2118 	if (param->scan_ev_bss_chan)
2119 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_BSS_CHANNEL;
2120 	if (param->scan_ev_foreign_chan)
2121 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_FOREIGN_CHAN;
2122 	if (param->scan_ev_dequeued)
2123 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_DEQUEUED;
2124 	if (param->scan_ev_preempted)
2125 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_PREEMPTED;
2126 	if (param->scan_ev_start_failed)
2127 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_START_FAILED;
2128 	if (param->scan_ev_restarted)
2129 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_RESTARTED;
2130 	if (param->scan_ev_foreign_chn_exit)
2131 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_FOREIGN_CHAN_EXIT;
2132 	if (param->scan_ev_suspended)
2133 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_SUSPENDED;
2134 	if (param->scan_ev_resumed)
2135 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_RESUMED;
2136 
2137 	/** Set scan control flags */
2138 	cmd->scan_ctrl_flags = 0;
2139 	if (param->scan_f_passive)
2140 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_PASSIVE;
2141 	if (param->scan_f_strict_passive_pch)
2142 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_STRICT_PASSIVE_ON_PCHN;
2143 	if (param->scan_f_promisc_mode)
2144 		cmd->scan_ctrl_flags |=  WMI_SCAN_FILTER_PROMISCUOS;
2145 	if (param->scan_f_capture_phy_err)
2146 		cmd->scan_ctrl_flags |=  WMI_SCAN_CAPTURE_PHY_ERROR;
2147 	if (param->scan_f_half_rate)
2148 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_HALF_RATE_SUPPORT;
2149 	if (param->scan_f_quarter_rate)
2150 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_QUARTER_RATE_SUPPORT;
2151 	if (param->scan_f_cck_rates)
2152 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_CCK_RATES;
2153 	if (param->scan_f_ofdm_rates)
2154 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_OFDM_RATES;
2155 	if (param->scan_f_chan_stat_evnt)
2156 		cmd->scan_ctrl_flags |=  WMI_SCAN_CHAN_STAT_EVENT;
2157 	if (param->scan_f_filter_prb_req)
2158 		cmd->scan_ctrl_flags |=  WMI_SCAN_FILTER_PROBE_REQ;
2159 	if (param->scan_f_bcast_probe)
2160 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_BCAST_PROBE_REQ;
2161 	if (param->scan_f_offchan_mgmt_tx)
2162 		cmd->scan_ctrl_flags |=  WMI_SCAN_OFFCHAN_MGMT_TX;
2163 	if (param->scan_f_offchan_data_tx)
2164 		cmd->scan_ctrl_flags |=  WMI_SCAN_OFFCHAN_DATA_TX;
2165 	if (param->scan_f_force_active_dfs_chn)
2166 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_FORCE_ACTIVE_ON_DFS;
2167 	if (param->scan_f_add_tpc_ie_in_probe)
2168 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_TPC_IE_IN_PROBE_REQ;
2169 	if (param->scan_f_add_ds_ie_in_probe)
2170 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_DS_IE_IN_PROBE_REQ;
2171 	if (param->scan_f_add_spoofed_mac_in_probe)
2172 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_SPOOF_MAC_IN_PROBE_REQ;
2173 	if (param->scan_f_add_rand_seq_in_probe)
2174 		cmd->scan_ctrl_flags |=  WMI_SCAN_RANDOM_SEQ_NO_IN_PROBE_REQ;
2175 	if (param->scan_f_en_ie_whitelist_in_probe)
2176 		cmd->scan_ctrl_flags |=
2177 			 WMI_SCAN_ENABLE_IE_WHTELIST_IN_PROBE_REQ;
2178 
2179 	/* for adaptive scan mode using 3 bits (21 - 23 bits) */
2180 	WMI_SCAN_SET_DWELL_MODE(cmd->scan_ctrl_flags,
2181 				param->adaptive_dwell_time_mode);
2182 
2183 	cmd->scan_ctrl_flags_ext = param->scan_ctrl_flags_ext;
2184 }
2185 
2186 int ath11k_wmi_send_scan_start_cmd(struct ath11k *ar,
2187 				   struct scan_req_params *params)
2188 {
2189 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2190 	struct wmi_start_scan_cmd *cmd;
2191 	struct wmi_ssid *ssid = NULL;
2192 	struct wmi_mac_addr *bssid;
2193 	struct sk_buff *skb;
2194 	struct wmi_tlv *tlv;
2195 	void *ptr;
2196 	int i, ret, len;
2197 	u32 *tmp_ptr;
2198 	u16 extraie_len_with_pad = 0;
2199 	struct hint_short_ssid *s_ssid = NULL;
2200 	struct hint_bssid *hint_bssid = NULL;
2201 
2202 	len = sizeof(*cmd);
2203 
2204 	len += TLV_HDR_SIZE;
2205 	if (params->num_chan)
2206 		len += params->num_chan * sizeof(u32);
2207 
2208 	len += TLV_HDR_SIZE;
2209 	if (params->num_ssids)
2210 		len += params->num_ssids * sizeof(*ssid);
2211 
2212 	len += TLV_HDR_SIZE;
2213 	if (params->num_bssid)
2214 		len += sizeof(*bssid) * params->num_bssid;
2215 
2216 	len += TLV_HDR_SIZE;
2217 	if (params->extraie.len && params->extraie.len <= 0xFFFF)
2218 		extraie_len_with_pad =
2219 			roundup(params->extraie.len, sizeof(u32));
2220 	len += extraie_len_with_pad;
2221 
2222 	if (params->num_hint_bssid)
2223 		len += TLV_HDR_SIZE +
2224 		       params->num_hint_bssid * sizeof(struct hint_bssid);
2225 
2226 	if (params->num_hint_s_ssid)
2227 		len += TLV_HDR_SIZE +
2228 		       params->num_hint_s_ssid * sizeof(struct hint_short_ssid);
2229 
2230 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2231 	if (!skb)
2232 		return -ENOMEM;
2233 
2234 	ptr = skb->data;
2235 
2236 	cmd = ptr;
2237 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_START_SCAN_CMD) |
2238 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2239 
2240 	cmd->scan_id = params->scan_id;
2241 	cmd->scan_req_id = params->scan_req_id;
2242 	cmd->vdev_id = params->vdev_id;
2243 	cmd->scan_priority = params->scan_priority;
2244 	cmd->notify_scan_events = params->notify_scan_events;
2245 
2246 	ath11k_wmi_copy_scan_event_cntrl_flags(cmd, params);
2247 
2248 	cmd->dwell_time_active = params->dwell_time_active;
2249 	cmd->dwell_time_active_2g = params->dwell_time_active_2g;
2250 	cmd->dwell_time_passive = params->dwell_time_passive;
2251 	cmd->dwell_time_active_6g = params->dwell_time_active_6g;
2252 	cmd->dwell_time_passive_6g = params->dwell_time_passive_6g;
2253 	cmd->min_rest_time = params->min_rest_time;
2254 	cmd->max_rest_time = params->max_rest_time;
2255 	cmd->repeat_probe_time = params->repeat_probe_time;
2256 	cmd->probe_spacing_time = params->probe_spacing_time;
2257 	cmd->idle_time = params->idle_time;
2258 	cmd->max_scan_time = params->max_scan_time;
2259 	cmd->probe_delay = params->probe_delay;
2260 	cmd->burst_duration = params->burst_duration;
2261 	cmd->num_chan = params->num_chan;
2262 	cmd->num_bssid = params->num_bssid;
2263 	cmd->num_ssids = params->num_ssids;
2264 	cmd->ie_len = params->extraie.len;
2265 	cmd->n_probes = params->n_probes;
2266 	ether_addr_copy(cmd->mac_addr.addr, params->mac_addr.addr);
2267 	ether_addr_copy(cmd->mac_mask.addr, params->mac_mask.addr);
2268 
2269 	ptr += sizeof(*cmd);
2270 
2271 	len = params->num_chan * sizeof(u32);
2272 
2273 	tlv = ptr;
2274 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_UINT32) |
2275 		      FIELD_PREP(WMI_TLV_LEN, len);
2276 	ptr += TLV_HDR_SIZE;
2277 	tmp_ptr = (u32 *)ptr;
2278 
2279 	for (i = 0; i < params->num_chan; ++i)
2280 		tmp_ptr[i] = params->chan_list[i];
2281 
2282 	ptr += len;
2283 
2284 	len = params->num_ssids * sizeof(*ssid);
2285 	tlv = ptr;
2286 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_FIXED_STRUCT) |
2287 		      FIELD_PREP(WMI_TLV_LEN, len);
2288 
2289 	ptr += TLV_HDR_SIZE;
2290 
2291 	if (params->num_ssids) {
2292 		ssid = ptr;
2293 		for (i = 0; i < params->num_ssids; ++i) {
2294 			ssid->ssid_len = params->ssid[i].length;
2295 			memcpy(ssid->ssid, params->ssid[i].ssid,
2296 			       params->ssid[i].length);
2297 			ssid++;
2298 		}
2299 	}
2300 
2301 	ptr += (params->num_ssids * sizeof(*ssid));
2302 	len = params->num_bssid * sizeof(*bssid);
2303 	tlv = ptr;
2304 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_FIXED_STRUCT) |
2305 		      FIELD_PREP(WMI_TLV_LEN, len);
2306 
2307 	ptr += TLV_HDR_SIZE;
2308 	bssid = ptr;
2309 
2310 	if (params->num_bssid) {
2311 		for (i = 0; i < params->num_bssid; ++i) {
2312 			ether_addr_copy(bssid->addr,
2313 					params->bssid_list[i].addr);
2314 			bssid++;
2315 		}
2316 	}
2317 
2318 	ptr += params->num_bssid * sizeof(*bssid);
2319 
2320 	len = extraie_len_with_pad;
2321 	tlv = ptr;
2322 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
2323 		      FIELD_PREP(WMI_TLV_LEN, len);
2324 	ptr += TLV_HDR_SIZE;
2325 
2326 	if (extraie_len_with_pad)
2327 		memcpy(ptr, params->extraie.ptr,
2328 		       params->extraie.len);
2329 
2330 	ptr += extraie_len_with_pad;
2331 
2332 	if (params->num_hint_s_ssid) {
2333 		len = params->num_hint_s_ssid * sizeof(struct hint_short_ssid);
2334 		tlv = ptr;
2335 		tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_FIXED_STRUCT) |
2336 			      FIELD_PREP(WMI_TLV_LEN, len);
2337 		ptr += TLV_HDR_SIZE;
2338 		s_ssid = ptr;
2339 		for (i = 0; i < params->num_hint_s_ssid; ++i) {
2340 			s_ssid->freq_flags = params->hint_s_ssid[i].freq_flags;
2341 			s_ssid->short_ssid = params->hint_s_ssid[i].short_ssid;
2342 			s_ssid++;
2343 		}
2344 		ptr += len;
2345 	}
2346 
2347 	if (params->num_hint_bssid) {
2348 		len = params->num_hint_bssid * sizeof(struct hint_bssid);
2349 		tlv = ptr;
2350 		tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_FIXED_STRUCT) |
2351 			      FIELD_PREP(WMI_TLV_LEN, len);
2352 		ptr += TLV_HDR_SIZE;
2353 		hint_bssid = ptr;
2354 		for (i = 0; i < params->num_hint_bssid; ++i) {
2355 			hint_bssid->freq_flags =
2356 				params->hint_bssid[i].freq_flags;
2357 			ether_addr_copy(&params->hint_bssid[i].bssid.addr[0],
2358 					&hint_bssid->bssid.addr[0]);
2359 			hint_bssid++;
2360 		}
2361 	}
2362 
2363 	ret = ath11k_wmi_cmd_send(wmi, skb,
2364 				  WMI_START_SCAN_CMDID);
2365 	if (ret) {
2366 		ath11k_warn(ar->ab, "failed to send WMI_START_SCAN_CMDID\n");
2367 		dev_kfree_skb(skb);
2368 	}
2369 
2370 	return ret;
2371 }
2372 
2373 int ath11k_wmi_send_scan_stop_cmd(struct ath11k *ar,
2374 				  struct scan_cancel_param *param)
2375 {
2376 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2377 	struct wmi_stop_scan_cmd *cmd;
2378 	struct sk_buff *skb;
2379 	int ret;
2380 
2381 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2382 	if (!skb)
2383 		return -ENOMEM;
2384 
2385 	cmd = (struct wmi_stop_scan_cmd *)skb->data;
2386 
2387 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_STOP_SCAN_CMD) |
2388 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2389 
2390 	cmd->vdev_id = param->vdev_id;
2391 	cmd->requestor = param->requester;
2392 	cmd->scan_id = param->scan_id;
2393 	cmd->pdev_id = param->pdev_id;
2394 	/* stop the scan with the corresponding scan_id */
2395 	if (param->req_type == WLAN_SCAN_CANCEL_PDEV_ALL) {
2396 		/* Cancelling all scans */
2397 		cmd->req_type =  WMI_SCAN_STOP_ALL;
2398 	} else if (param->req_type == WLAN_SCAN_CANCEL_VDEV_ALL) {
2399 		/* Cancelling VAP scans */
2400 		cmd->req_type =  WMI_SCN_STOP_VAP_ALL;
2401 	} else if (param->req_type == WLAN_SCAN_CANCEL_SINGLE) {
2402 		/* Cancelling specific scan */
2403 		cmd->req_type =  WMI_SCAN_STOP_ONE;
2404 	} else {
2405 		ath11k_warn(ar->ab, "invalid scan cancel param %d",
2406 			    param->req_type);
2407 		dev_kfree_skb(skb);
2408 		return -EINVAL;
2409 	}
2410 
2411 	ret = ath11k_wmi_cmd_send(wmi, skb,
2412 				  WMI_STOP_SCAN_CMDID);
2413 	if (ret) {
2414 		ath11k_warn(ar->ab, "failed to send WMI_STOP_SCAN_CMDID\n");
2415 		dev_kfree_skb(skb);
2416 	}
2417 
2418 	return ret;
2419 }
2420 
2421 int ath11k_wmi_send_scan_chan_list_cmd(struct ath11k *ar,
2422 				       struct scan_chan_list_params *chan_list)
2423 {
2424 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2425 	struct wmi_scan_chan_list_cmd *cmd;
2426 	struct sk_buff *skb;
2427 	struct wmi_channel *chan_info;
2428 	struct channel_param *tchan_info;
2429 	struct wmi_tlv *tlv;
2430 	void *ptr;
2431 	int i, ret, len;
2432 	u16 num_send_chans, num_sends = 0, max_chan_limit = 0;
2433 	u32 *reg1, *reg2;
2434 
2435 	tchan_info = chan_list->ch_param;
2436 	while (chan_list->nallchans) {
2437 		len = sizeof(*cmd) + TLV_HDR_SIZE;
2438 		max_chan_limit = (wmi->wmi_ab->max_msg_len[ar->pdev_idx] - len) /
2439 			sizeof(*chan_info);
2440 
2441 		if (chan_list->nallchans > max_chan_limit)
2442 			num_send_chans = max_chan_limit;
2443 		else
2444 			num_send_chans = chan_list->nallchans;
2445 
2446 		chan_list->nallchans -= num_send_chans;
2447 		len += sizeof(*chan_info) * num_send_chans;
2448 
2449 		skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2450 		if (!skb)
2451 			return -ENOMEM;
2452 
2453 		cmd = (struct wmi_scan_chan_list_cmd *)skb->data;
2454 		cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_SCAN_CHAN_LIST_CMD) |
2455 			FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2456 		cmd->pdev_id = chan_list->pdev_id;
2457 		cmd->num_scan_chans = num_send_chans;
2458 		if (num_sends)
2459 			cmd->flags |= WMI_APPEND_TO_EXISTING_CHAN_LIST_FLAG;
2460 
2461 		ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2462 			   "no.of chan = %d len = %d pdev_id = %d num_sends = %d\n",
2463 			   num_send_chans, len, cmd->pdev_id, num_sends);
2464 
2465 		ptr = skb->data + sizeof(*cmd);
2466 
2467 		len = sizeof(*chan_info) * num_send_chans;
2468 		tlv = ptr;
2469 		tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
2470 			      FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
2471 		ptr += TLV_HDR_SIZE;
2472 
2473 		for (i = 0; i < num_send_chans; ++i) {
2474 			chan_info = ptr;
2475 			memset(chan_info, 0, sizeof(*chan_info));
2476 			len = sizeof(*chan_info);
2477 			chan_info->tlv_header = FIELD_PREP(WMI_TLV_TAG,
2478 							   WMI_TAG_CHANNEL) |
2479 						FIELD_PREP(WMI_TLV_LEN,
2480 							   len - TLV_HDR_SIZE);
2481 
2482 			reg1 = &chan_info->reg_info_1;
2483 			reg2 = &chan_info->reg_info_2;
2484 			chan_info->mhz = tchan_info->mhz;
2485 			chan_info->band_center_freq1 = tchan_info->cfreq1;
2486 			chan_info->band_center_freq2 = tchan_info->cfreq2;
2487 
2488 			if (tchan_info->is_chan_passive)
2489 				chan_info->info |= WMI_CHAN_INFO_PASSIVE;
2490 			if (tchan_info->allow_he)
2491 				chan_info->info |= WMI_CHAN_INFO_ALLOW_HE;
2492 			else if (tchan_info->allow_vht)
2493 				chan_info->info |= WMI_CHAN_INFO_ALLOW_VHT;
2494 			else if (tchan_info->allow_ht)
2495 				chan_info->info |= WMI_CHAN_INFO_ALLOW_HT;
2496 			if (tchan_info->half_rate)
2497 				chan_info->info |= WMI_CHAN_INFO_HALF_RATE;
2498 			if (tchan_info->quarter_rate)
2499 				chan_info->info |= WMI_CHAN_INFO_QUARTER_RATE;
2500 			if (tchan_info->psc_channel)
2501 				chan_info->info |= WMI_CHAN_INFO_PSC;
2502 			if (tchan_info->dfs_set)
2503 				chan_info->info |= WMI_CHAN_INFO_DFS;
2504 
2505 			chan_info->info |= FIELD_PREP(WMI_CHAN_INFO_MODE,
2506 						      tchan_info->phy_mode);
2507 			*reg1 |= FIELD_PREP(WMI_CHAN_REG_INFO1_MIN_PWR,
2508 					    tchan_info->minpower);
2509 			*reg1 |= FIELD_PREP(WMI_CHAN_REG_INFO1_MAX_PWR,
2510 					    tchan_info->maxpower);
2511 			*reg1 |= FIELD_PREP(WMI_CHAN_REG_INFO1_MAX_REG_PWR,
2512 					    tchan_info->maxregpower);
2513 			*reg1 |= FIELD_PREP(WMI_CHAN_REG_INFO1_REG_CLS,
2514 					    tchan_info->reg_class_id);
2515 			*reg2 |= FIELD_PREP(WMI_CHAN_REG_INFO2_ANT_MAX,
2516 					    tchan_info->antennamax);
2517 			*reg2 |= FIELD_PREP(WMI_CHAN_REG_INFO2_MAX_TX_PWR,
2518 					    tchan_info->maxregpower);
2519 
2520 			ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2521 				   "chan scan list chan[%d] = %u, chan_info->info %8x\n",
2522 				   i, chan_info->mhz, chan_info->info);
2523 
2524 			ptr += sizeof(*chan_info);
2525 
2526 			tchan_info++;
2527 		}
2528 
2529 		ret = ath11k_wmi_cmd_send(wmi, skb, WMI_SCAN_CHAN_LIST_CMDID);
2530 		if (ret) {
2531 			ath11k_warn(ar->ab, "failed to send WMI_SCAN_CHAN_LIST cmd\n");
2532 			dev_kfree_skb(skb);
2533 			return ret;
2534 		}
2535 
2536 		num_sends++;
2537 	}
2538 
2539 	return 0;
2540 }
2541 
2542 int ath11k_wmi_send_wmm_update_cmd_tlv(struct ath11k *ar, u32 vdev_id,
2543 				       struct wmi_wmm_params_all_arg *param)
2544 {
2545 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2546 	struct wmi_vdev_set_wmm_params_cmd *cmd;
2547 	struct wmi_wmm_params *wmm_param;
2548 	struct wmi_wmm_params_arg *wmi_wmm_arg;
2549 	struct sk_buff *skb;
2550 	int ret, ac;
2551 
2552 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2553 	if (!skb)
2554 		return -ENOMEM;
2555 
2556 	cmd = (struct wmi_vdev_set_wmm_params_cmd *)skb->data;
2557 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
2558 				     WMI_TAG_VDEV_SET_WMM_PARAMS_CMD) |
2559 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2560 
2561 	cmd->vdev_id = vdev_id;
2562 	cmd->wmm_param_type = 0;
2563 
2564 	for (ac = 0; ac < WME_NUM_AC; ac++) {
2565 		switch (ac) {
2566 		case WME_AC_BE:
2567 			wmi_wmm_arg = &param->ac_be;
2568 			break;
2569 		case WME_AC_BK:
2570 			wmi_wmm_arg = &param->ac_bk;
2571 			break;
2572 		case WME_AC_VI:
2573 			wmi_wmm_arg = &param->ac_vi;
2574 			break;
2575 		case WME_AC_VO:
2576 			wmi_wmm_arg = &param->ac_vo;
2577 			break;
2578 		}
2579 
2580 		wmm_param = (struct wmi_wmm_params *)&cmd->wmm_params[ac];
2581 		wmm_param->tlv_header =
2582 				FIELD_PREP(WMI_TLV_TAG,
2583 					   WMI_TAG_VDEV_SET_WMM_PARAMS_CMD) |
2584 				FIELD_PREP(WMI_TLV_LEN,
2585 					   sizeof(*wmm_param) - TLV_HDR_SIZE);
2586 
2587 		wmm_param->aifs = wmi_wmm_arg->aifs;
2588 		wmm_param->cwmin = wmi_wmm_arg->cwmin;
2589 		wmm_param->cwmax = wmi_wmm_arg->cwmax;
2590 		wmm_param->txoplimit = wmi_wmm_arg->txop;
2591 		wmm_param->acm = wmi_wmm_arg->acm;
2592 		wmm_param->no_ack = wmi_wmm_arg->no_ack;
2593 
2594 		ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2595 			   "wmm set ac %d aifs %d cwmin %d cwmax %d txop %d acm %d no_ack %d\n",
2596 			   ac, wmm_param->aifs, wmm_param->cwmin,
2597 			   wmm_param->cwmax, wmm_param->txoplimit,
2598 			   wmm_param->acm, wmm_param->no_ack);
2599 	}
2600 	ret = ath11k_wmi_cmd_send(wmi, skb,
2601 				  WMI_VDEV_SET_WMM_PARAMS_CMDID);
2602 	if (ret) {
2603 		ath11k_warn(ar->ab,
2604 			    "failed to send WMI_VDEV_SET_WMM_PARAMS_CMDID");
2605 		dev_kfree_skb(skb);
2606 	}
2607 
2608 	return ret;
2609 }
2610 
2611 int ath11k_wmi_send_dfs_phyerr_offload_enable_cmd(struct ath11k *ar,
2612 						  u32 pdev_id)
2613 {
2614 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2615 	struct wmi_dfs_phyerr_offload_cmd *cmd;
2616 	struct sk_buff *skb;
2617 	int ret;
2618 
2619 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2620 	if (!skb)
2621 		return -ENOMEM;
2622 
2623 	cmd = (struct wmi_dfs_phyerr_offload_cmd *)skb->data;
2624 	cmd->tlv_header =
2625 		FIELD_PREP(WMI_TLV_TAG,
2626 			   WMI_TAG_PDEV_DFS_PHYERR_OFFLOAD_ENABLE_CMD) |
2627 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2628 
2629 	cmd->pdev_id = pdev_id;
2630 
2631 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2632 		   "dfs phy err offload enable pdev id %d\n", pdev_id);
2633 
2634 	ret = ath11k_wmi_cmd_send(wmi, skb,
2635 				  WMI_PDEV_DFS_PHYERR_OFFLOAD_ENABLE_CMDID);
2636 	if (ret) {
2637 		ath11k_warn(ar->ab,
2638 			    "failed to send WMI_PDEV_DFS_PHYERR_OFFLOAD_ENABLE cmd\n");
2639 		dev_kfree_skb(skb);
2640 	}
2641 
2642 	return ret;
2643 }
2644 
2645 int ath11k_wmi_delba_send(struct ath11k *ar, u32 vdev_id, const u8 *mac,
2646 			  u32 tid, u32 initiator, u32 reason)
2647 {
2648 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2649 	struct wmi_delba_send_cmd *cmd;
2650 	struct sk_buff *skb;
2651 	int ret;
2652 
2653 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2654 	if (!skb)
2655 		return -ENOMEM;
2656 
2657 	cmd = (struct wmi_delba_send_cmd *)skb->data;
2658 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_DELBA_SEND_CMD) |
2659 			FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2660 	cmd->vdev_id = vdev_id;
2661 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
2662 	cmd->tid = tid;
2663 	cmd->initiator = initiator;
2664 	cmd->reasoncode = reason;
2665 
2666 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2667 		   "delba send vdev_id 0x%X mac_addr %pM tid %u initiator %u reason %u\n",
2668 		   vdev_id, mac, tid, initiator, reason);
2669 
2670 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_DELBA_SEND_CMDID);
2671 
2672 	if (ret) {
2673 		ath11k_warn(ar->ab,
2674 			    "failed to send WMI_DELBA_SEND_CMDID cmd\n");
2675 		dev_kfree_skb(skb);
2676 	}
2677 
2678 	return ret;
2679 }
2680 
2681 int ath11k_wmi_addba_set_resp(struct ath11k *ar, u32 vdev_id, const u8 *mac,
2682 			      u32 tid, u32 status)
2683 {
2684 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2685 	struct wmi_addba_setresponse_cmd *cmd;
2686 	struct sk_buff *skb;
2687 	int ret;
2688 
2689 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2690 	if (!skb)
2691 		return -ENOMEM;
2692 
2693 	cmd = (struct wmi_addba_setresponse_cmd *)skb->data;
2694 	cmd->tlv_header =
2695 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ADDBA_SETRESPONSE_CMD) |
2696 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2697 	cmd->vdev_id = vdev_id;
2698 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
2699 	cmd->tid = tid;
2700 	cmd->statuscode = status;
2701 
2702 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2703 		   "addba set resp vdev_id 0x%X mac_addr %pM tid %u status %u\n",
2704 		   vdev_id, mac, tid, status);
2705 
2706 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_ADDBA_SET_RESP_CMDID);
2707 
2708 	if (ret) {
2709 		ath11k_warn(ar->ab,
2710 			    "failed to send WMI_ADDBA_SET_RESP_CMDID cmd\n");
2711 		dev_kfree_skb(skb);
2712 	}
2713 
2714 	return ret;
2715 }
2716 
2717 int ath11k_wmi_addba_send(struct ath11k *ar, u32 vdev_id, const u8 *mac,
2718 			  u32 tid, u32 buf_size)
2719 {
2720 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2721 	struct wmi_addba_send_cmd *cmd;
2722 	struct sk_buff *skb;
2723 	int ret;
2724 
2725 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2726 	if (!skb)
2727 		return -ENOMEM;
2728 
2729 	cmd = (struct wmi_addba_send_cmd *)skb->data;
2730 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ADDBA_SEND_CMD) |
2731 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2732 	cmd->vdev_id = vdev_id;
2733 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
2734 	cmd->tid = tid;
2735 	cmd->buffersize = buf_size;
2736 
2737 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2738 		   "addba send vdev_id 0x%X mac_addr %pM tid %u bufsize %u\n",
2739 		   vdev_id, mac, tid, buf_size);
2740 
2741 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_ADDBA_SEND_CMDID);
2742 
2743 	if (ret) {
2744 		ath11k_warn(ar->ab,
2745 			    "failed to send WMI_ADDBA_SEND_CMDID cmd\n");
2746 		dev_kfree_skb(skb);
2747 	}
2748 
2749 	return ret;
2750 }
2751 
2752 int ath11k_wmi_addba_clear_resp(struct ath11k *ar, u32 vdev_id, const u8 *mac)
2753 {
2754 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2755 	struct wmi_addba_clear_resp_cmd *cmd;
2756 	struct sk_buff *skb;
2757 	int ret;
2758 
2759 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2760 	if (!skb)
2761 		return -ENOMEM;
2762 
2763 	cmd = (struct wmi_addba_clear_resp_cmd *)skb->data;
2764 	cmd->tlv_header =
2765 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ADDBA_CLEAR_RESP_CMD) |
2766 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2767 	cmd->vdev_id = vdev_id;
2768 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
2769 
2770 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2771 		   "addba clear resp vdev_id 0x%X mac_addr %pM\n",
2772 		   vdev_id, mac);
2773 
2774 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_ADDBA_CLEAR_RESP_CMDID);
2775 
2776 	if (ret) {
2777 		ath11k_warn(ar->ab,
2778 			    "failed to send WMI_ADDBA_CLEAR_RESP_CMDID cmd\n");
2779 		dev_kfree_skb(skb);
2780 	}
2781 
2782 	return ret;
2783 }
2784 
2785 int ath11k_wmi_pdev_peer_pktlog_filter(struct ath11k *ar, u8 *addr, u8 enable)
2786 {
2787 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2788 	struct wmi_pdev_pktlog_filter_cmd *cmd;
2789 	struct wmi_pdev_pktlog_filter_info *info;
2790 	struct sk_buff *skb;
2791 	struct wmi_tlv *tlv;
2792 	void *ptr;
2793 	int ret, len;
2794 
2795 	len = sizeof(*cmd) + sizeof(*info) + TLV_HDR_SIZE;
2796 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2797 	if (!skb)
2798 		return -ENOMEM;
2799 
2800 	cmd = (struct wmi_pdev_pktlog_filter_cmd *)skb->data;
2801 
2802 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_PEER_PKTLOG_FILTER_CMD) |
2803 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2804 
2805 	cmd->pdev_id = DP_HW2SW_MACID(ar->pdev->pdev_id);
2806 	cmd->num_mac = 1;
2807 	cmd->enable = enable;
2808 
2809 	ptr = skb->data + sizeof(*cmd);
2810 
2811 	tlv = ptr;
2812 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
2813 		      FIELD_PREP(WMI_TLV_LEN, sizeof(*info));
2814 
2815 	ptr += TLV_HDR_SIZE;
2816 	info = ptr;
2817 
2818 	ether_addr_copy(info->peer_macaddr.addr, addr);
2819 	info->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_PEER_PKTLOG_FILTER_INFO) |
2820 			   FIELD_PREP(WMI_TLV_LEN,
2821 				      sizeof(*info) - TLV_HDR_SIZE);
2822 
2823 	ret = ath11k_wmi_cmd_send(wmi, skb,
2824 				  WMI_PDEV_PKTLOG_FILTER_CMDID);
2825 	if (ret) {
2826 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_PKTLOG_ENABLE_CMDID\n");
2827 		dev_kfree_skb(skb);
2828 	}
2829 
2830 	return ret;
2831 }
2832 
2833 int
2834 ath11k_wmi_send_init_country_cmd(struct ath11k *ar,
2835 				 struct wmi_init_country_params init_cc_params)
2836 {
2837 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2838 	struct wmi_init_country_cmd *cmd;
2839 	struct sk_buff *skb;
2840 	int ret;
2841 
2842 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2843 	if (!skb)
2844 		return -ENOMEM;
2845 
2846 	cmd = (struct wmi_init_country_cmd *)skb->data;
2847 	cmd->tlv_header =
2848 		FIELD_PREP(WMI_TLV_TAG,
2849 			   WMI_TAG_SET_INIT_COUNTRY_CMD) |
2850 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2851 
2852 	cmd->pdev_id = ar->pdev->pdev_id;
2853 
2854 	switch (init_cc_params.flags) {
2855 	case ALPHA_IS_SET:
2856 		cmd->init_cc_type = WMI_COUNTRY_INFO_TYPE_ALPHA;
2857 		memcpy((u8 *)&cmd->cc_info.alpha2,
2858 		       init_cc_params.cc_info.alpha2, 3);
2859 		break;
2860 	case CC_IS_SET:
2861 		cmd->init_cc_type = WMI_COUNTRY_INFO_TYPE_COUNTRY_CODE;
2862 		cmd->cc_info.country_code = init_cc_params.cc_info.country_code;
2863 		break;
2864 	case REGDMN_IS_SET:
2865 		cmd->init_cc_type = WMI_COUNTRY_INFO_TYPE_REGDOMAIN;
2866 		cmd->cc_info.regdom_id = init_cc_params.cc_info.regdom_id;
2867 		break;
2868 	default:
2869 		ath11k_warn(ar->ab, "unknown cc params flags: 0x%x",
2870 			    init_cc_params.flags);
2871 		ret = -EINVAL;
2872 		goto err;
2873 	}
2874 
2875 	ret = ath11k_wmi_cmd_send(wmi, skb,
2876 				  WMI_SET_INIT_COUNTRY_CMDID);
2877 	if (ret) {
2878 		ath11k_warn(ar->ab,
2879 			    "failed to send WMI_SET_INIT_COUNTRY CMD :%d\n",
2880 			    ret);
2881 		goto err;
2882 	}
2883 
2884 	return 0;
2885 
2886 err:
2887 	dev_kfree_skb(skb);
2888 	return ret;
2889 }
2890 
2891 int ath11k_wmi_send_set_current_country_cmd(struct ath11k *ar,
2892 					    struct wmi_set_current_country_params *param)
2893 {
2894 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2895 	struct wmi_set_current_country_cmd *cmd;
2896 	struct sk_buff *skb;
2897 	int ret;
2898 
2899 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2900 	if (!skb)
2901 		return -ENOMEM;
2902 
2903 	cmd = (struct wmi_set_current_country_cmd *)skb->data;
2904 	cmd->tlv_header =
2905 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_SET_CURRENT_COUNTRY_CMD) |
2906 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2907 
2908 	cmd->pdev_id = ar->pdev->pdev_id;
2909 	memcpy(&cmd->new_alpha2, &param->alpha2, 3);
2910 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_SET_CURRENT_COUNTRY_CMDID);
2911 
2912 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2913 		   "set current country pdev id %d alpha2 %c%c\n",
2914 		   ar->pdev->pdev_id,
2915 		   param->alpha2[0],
2916 		   param->alpha2[1]);
2917 
2918 	if (ret) {
2919 		ath11k_warn(ar->ab,
2920 			    "failed to send WMI_SET_CURRENT_COUNTRY_CMDID: %d\n", ret);
2921 		dev_kfree_skb(skb);
2922 	}
2923 
2924 	return ret;
2925 }
2926 
2927 int
2928 ath11k_wmi_send_thermal_mitigation_param_cmd(struct ath11k *ar,
2929 					     struct thermal_mitigation_params *param)
2930 {
2931 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2932 	struct wmi_therm_throt_config_request_cmd *cmd;
2933 	struct wmi_therm_throt_level_config_info *lvl_conf;
2934 	struct wmi_tlv *tlv;
2935 	struct sk_buff *skb;
2936 	int i, ret, len;
2937 
2938 	len = sizeof(*cmd) + TLV_HDR_SIZE +
2939 	      THERMAL_LEVELS * sizeof(struct wmi_therm_throt_level_config_info);
2940 
2941 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2942 	if (!skb)
2943 		return -ENOMEM;
2944 
2945 	cmd = (struct wmi_therm_throt_config_request_cmd *)skb->data;
2946 
2947 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_THERM_THROT_CONFIG_REQUEST) |
2948 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2949 
2950 	cmd->pdev_id = ar->pdev->pdev_id;
2951 	cmd->enable = param->enable;
2952 	cmd->dc = param->dc;
2953 	cmd->dc_per_event = param->dc_per_event;
2954 	cmd->therm_throt_levels = THERMAL_LEVELS;
2955 
2956 	tlv = (struct wmi_tlv *)(skb->data + sizeof(*cmd));
2957 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
2958 		      FIELD_PREP(WMI_TLV_LEN,
2959 				 (THERMAL_LEVELS *
2960 				  sizeof(struct wmi_therm_throt_level_config_info)));
2961 
2962 	lvl_conf = (struct wmi_therm_throt_level_config_info *)(skb->data +
2963 								sizeof(*cmd) +
2964 								TLV_HDR_SIZE);
2965 	for (i = 0; i < THERMAL_LEVELS; i++) {
2966 		lvl_conf->tlv_header =
2967 			FIELD_PREP(WMI_TLV_TAG, WMI_TAG_THERM_THROT_LEVEL_CONFIG_INFO) |
2968 			FIELD_PREP(WMI_TLV_LEN, sizeof(*lvl_conf) - TLV_HDR_SIZE);
2969 
2970 		lvl_conf->temp_lwm = param->levelconf[i].tmplwm;
2971 		lvl_conf->temp_hwm = param->levelconf[i].tmphwm;
2972 		lvl_conf->dc_off_percent = param->levelconf[i].dcoffpercent;
2973 		lvl_conf->prio = param->levelconf[i].priority;
2974 		lvl_conf++;
2975 	}
2976 
2977 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_THERM_THROT_SET_CONF_CMDID);
2978 	if (ret) {
2979 		ath11k_warn(ar->ab, "failed to send THERM_THROT_SET_CONF cmd\n");
2980 		dev_kfree_skb(skb);
2981 	}
2982 
2983 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2984 		   "vdev set thermal throt pdev_id %d enable %d dc %d dc_per_event %x levels %d\n",
2985 		   ar->pdev->pdev_id, param->enable, param->dc,
2986 		   param->dc_per_event, THERMAL_LEVELS);
2987 
2988 	return ret;
2989 }
2990 
2991 int ath11k_wmi_send_11d_scan_start_cmd(struct ath11k *ar,
2992 				       struct wmi_11d_scan_start_params *param)
2993 {
2994 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2995 	struct wmi_11d_scan_start_cmd *cmd;
2996 	struct sk_buff *skb;
2997 	int ret;
2998 
2999 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
3000 	if (!skb)
3001 		return -ENOMEM;
3002 
3003 	cmd = (struct wmi_11d_scan_start_cmd *)skb->data;
3004 	cmd->tlv_header =
3005 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_11D_SCAN_START_CMD) |
3006 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3007 
3008 	cmd->vdev_id = param->vdev_id;
3009 	cmd->scan_period_msec = param->scan_period_msec;
3010 	cmd->start_interval_msec = param->start_interval_msec;
3011 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_11D_SCAN_START_CMDID);
3012 
3013 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3014 		   "send 11d scan start vdev id %d period %d ms internal %d ms\n",
3015 		   cmd->vdev_id,
3016 		   cmd->scan_period_msec,
3017 		   cmd->start_interval_msec);
3018 
3019 	if (ret) {
3020 		ath11k_warn(ar->ab,
3021 			    "failed to send WMI_11D_SCAN_START_CMDID: %d\n", ret);
3022 		dev_kfree_skb(skb);
3023 	}
3024 
3025 	return ret;
3026 }
3027 
3028 int ath11k_wmi_send_11d_scan_stop_cmd(struct ath11k *ar, u32 vdev_id)
3029 {
3030 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3031 	struct wmi_11d_scan_stop_cmd *cmd;
3032 	struct sk_buff *skb;
3033 	int ret;
3034 
3035 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
3036 	if (!skb)
3037 		return -ENOMEM;
3038 
3039 	cmd = (struct wmi_11d_scan_stop_cmd *)skb->data;
3040 	cmd->tlv_header =
3041 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_11D_SCAN_STOP_CMD) |
3042 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3043 
3044 	cmd->vdev_id = vdev_id;
3045 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_11D_SCAN_STOP_CMDID);
3046 
3047 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3048 		   "send 11d scan stop vdev id %d\n",
3049 		   cmd->vdev_id);
3050 
3051 	if (ret) {
3052 		ath11k_warn(ar->ab,
3053 			    "failed to send WMI_11D_SCAN_STOP_CMDID: %d\n", ret);
3054 		dev_kfree_skb(skb);
3055 	}
3056 
3057 	return ret;
3058 }
3059 
3060 int ath11k_wmi_pdev_pktlog_enable(struct ath11k *ar, u32 pktlog_filter)
3061 {
3062 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3063 	struct wmi_pktlog_enable_cmd *cmd;
3064 	struct sk_buff *skb;
3065 	int ret;
3066 
3067 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
3068 	if (!skb)
3069 		return -ENOMEM;
3070 
3071 	cmd = (struct wmi_pktlog_enable_cmd *)skb->data;
3072 
3073 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_PKTLOG_ENABLE_CMD) |
3074 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3075 
3076 	cmd->pdev_id = DP_HW2SW_MACID(ar->pdev->pdev_id);
3077 	cmd->evlist = pktlog_filter;
3078 	cmd->enable = ATH11K_WMI_PKTLOG_ENABLE_FORCE;
3079 
3080 	ret = ath11k_wmi_cmd_send(wmi, skb,
3081 				  WMI_PDEV_PKTLOG_ENABLE_CMDID);
3082 	if (ret) {
3083 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_PKTLOG_ENABLE_CMDID\n");
3084 		dev_kfree_skb(skb);
3085 	}
3086 
3087 	return ret;
3088 }
3089 
3090 int ath11k_wmi_pdev_pktlog_disable(struct ath11k *ar)
3091 {
3092 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3093 	struct wmi_pktlog_disable_cmd *cmd;
3094 	struct sk_buff *skb;
3095 	int ret;
3096 
3097 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
3098 	if (!skb)
3099 		return -ENOMEM;
3100 
3101 	cmd = (struct wmi_pktlog_disable_cmd *)skb->data;
3102 
3103 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_PKTLOG_DISABLE_CMD) |
3104 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3105 
3106 	cmd->pdev_id = DP_HW2SW_MACID(ar->pdev->pdev_id);
3107 
3108 	ret = ath11k_wmi_cmd_send(wmi, skb,
3109 				  WMI_PDEV_PKTLOG_DISABLE_CMDID);
3110 	if (ret) {
3111 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_PKTLOG_ENABLE_CMDID\n");
3112 		dev_kfree_skb(skb);
3113 	}
3114 
3115 	return ret;
3116 }
3117 
3118 void ath11k_wmi_fill_default_twt_params(struct wmi_twt_enable_params *twt_params)
3119 {
3120 	twt_params->sta_cong_timer_ms = ATH11K_TWT_DEF_STA_CONG_TIMER_MS;
3121 	twt_params->default_slot_size = ATH11K_TWT_DEF_DEFAULT_SLOT_SIZE;
3122 	twt_params->congestion_thresh_setup = ATH11K_TWT_DEF_CONGESTION_THRESH_SETUP;
3123 	twt_params->congestion_thresh_teardown =
3124 		ATH11K_TWT_DEF_CONGESTION_THRESH_TEARDOWN;
3125 	twt_params->congestion_thresh_critical =
3126 		ATH11K_TWT_DEF_CONGESTION_THRESH_CRITICAL;
3127 	twt_params->interference_thresh_teardown =
3128 		ATH11K_TWT_DEF_INTERFERENCE_THRESH_TEARDOWN;
3129 	twt_params->interference_thresh_setup =
3130 		ATH11K_TWT_DEF_INTERFERENCE_THRESH_SETUP;
3131 	twt_params->min_no_sta_setup = ATH11K_TWT_DEF_MIN_NO_STA_SETUP;
3132 	twt_params->min_no_sta_teardown = ATH11K_TWT_DEF_MIN_NO_STA_TEARDOWN;
3133 	twt_params->no_of_bcast_mcast_slots = ATH11K_TWT_DEF_NO_OF_BCAST_MCAST_SLOTS;
3134 	twt_params->min_no_twt_slots = ATH11K_TWT_DEF_MIN_NO_TWT_SLOTS;
3135 	twt_params->max_no_sta_twt = ATH11K_TWT_DEF_MAX_NO_STA_TWT;
3136 	twt_params->mode_check_interval = ATH11K_TWT_DEF_MODE_CHECK_INTERVAL;
3137 	twt_params->add_sta_slot_interval = ATH11K_TWT_DEF_ADD_STA_SLOT_INTERVAL;
3138 	twt_params->remove_sta_slot_interval =
3139 		ATH11K_TWT_DEF_REMOVE_STA_SLOT_INTERVAL;
3140 	/* TODO add MBSSID support */
3141 	twt_params->mbss_support = 0;
3142 }
3143 
3144 int ath11k_wmi_send_twt_enable_cmd(struct ath11k *ar, u32 pdev_id,
3145 				   struct wmi_twt_enable_params *params)
3146 {
3147 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3148 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3149 	struct wmi_twt_enable_params_cmd *cmd;
3150 	struct sk_buff *skb;
3151 	int ret, len;
3152 
3153 	len = sizeof(*cmd);
3154 
3155 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3156 	if (!skb)
3157 		return -ENOMEM;
3158 
3159 	cmd = (struct wmi_twt_enable_params_cmd *)skb->data;
3160 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_TWT_ENABLE_CMD) |
3161 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3162 	cmd->pdev_id = pdev_id;
3163 	cmd->sta_cong_timer_ms = params->sta_cong_timer_ms;
3164 	cmd->default_slot_size = params->default_slot_size;
3165 	cmd->congestion_thresh_setup = params->congestion_thresh_setup;
3166 	cmd->congestion_thresh_teardown = params->congestion_thresh_teardown;
3167 	cmd->congestion_thresh_critical = params->congestion_thresh_critical;
3168 	cmd->interference_thresh_teardown = params->interference_thresh_teardown;
3169 	cmd->interference_thresh_setup = params->interference_thresh_setup;
3170 	cmd->min_no_sta_setup = params->min_no_sta_setup;
3171 	cmd->min_no_sta_teardown = params->min_no_sta_teardown;
3172 	cmd->no_of_bcast_mcast_slots = params->no_of_bcast_mcast_slots;
3173 	cmd->min_no_twt_slots = params->min_no_twt_slots;
3174 	cmd->max_no_sta_twt = params->max_no_sta_twt;
3175 	cmd->mode_check_interval = params->mode_check_interval;
3176 	cmd->add_sta_slot_interval = params->add_sta_slot_interval;
3177 	cmd->remove_sta_slot_interval = params->remove_sta_slot_interval;
3178 	cmd->mbss_support = params->mbss_support;
3179 
3180 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_TWT_ENABLE_CMDID);
3181 	if (ret) {
3182 		ath11k_warn(ab, "Failed to send WMI_TWT_ENABLE_CMDID");
3183 		dev_kfree_skb(skb);
3184 	} else {
3185 		ar->twt_enabled = 1;
3186 	}
3187 	return ret;
3188 }
3189 
3190 int
3191 ath11k_wmi_send_twt_disable_cmd(struct ath11k *ar, u32 pdev_id)
3192 {
3193 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3194 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3195 	struct wmi_twt_disable_params_cmd *cmd;
3196 	struct sk_buff *skb;
3197 	int ret, len;
3198 
3199 	len = sizeof(*cmd);
3200 
3201 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3202 	if (!skb)
3203 		return -ENOMEM;
3204 
3205 	cmd = (struct wmi_twt_disable_params_cmd *)skb->data;
3206 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_TWT_DISABLE_CMD) |
3207 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3208 	cmd->pdev_id = pdev_id;
3209 
3210 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_TWT_DISABLE_CMDID);
3211 	if (ret) {
3212 		ath11k_warn(ab, "Failed to send WMI_TWT_DISABLE_CMDID");
3213 		dev_kfree_skb(skb);
3214 	} else {
3215 		ar->twt_enabled = 0;
3216 	}
3217 	return ret;
3218 }
3219 
3220 int ath11k_wmi_send_twt_add_dialog_cmd(struct ath11k *ar,
3221 				       struct wmi_twt_add_dialog_params *params)
3222 {
3223 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3224 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3225 	struct wmi_twt_add_dialog_params_cmd *cmd;
3226 	struct sk_buff *skb;
3227 	int ret, len;
3228 
3229 	len = sizeof(*cmd);
3230 
3231 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3232 	if (!skb)
3233 		return -ENOMEM;
3234 
3235 	cmd = (struct wmi_twt_add_dialog_params_cmd *)skb->data;
3236 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_TWT_ADD_DIALOG_CMD) |
3237 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3238 
3239 	cmd->vdev_id = params->vdev_id;
3240 	ether_addr_copy(cmd->peer_macaddr.addr, params->peer_macaddr);
3241 	cmd->dialog_id = params->dialog_id;
3242 	cmd->wake_intvl_us = params->wake_intvl_us;
3243 	cmd->wake_intvl_mantis = params->wake_intvl_mantis;
3244 	cmd->wake_dura_us = params->wake_dura_us;
3245 	cmd->sp_offset_us = params->sp_offset_us;
3246 	cmd->flags = params->twt_cmd;
3247 	if (params->flag_bcast)
3248 		cmd->flags |= WMI_TWT_ADD_DIALOG_FLAG_BCAST;
3249 	if (params->flag_trigger)
3250 		cmd->flags |= WMI_TWT_ADD_DIALOG_FLAG_TRIGGER;
3251 	if (params->flag_flow_type)
3252 		cmd->flags |= WMI_TWT_ADD_DIALOG_FLAG_FLOW_TYPE;
3253 	if (params->flag_protection)
3254 		cmd->flags |= WMI_TWT_ADD_DIALOG_FLAG_PROTECTION;
3255 
3256 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3257 		   "add twt dialog vdev %u dialog id %u wake interval %u mantissa %u wake duration %u service period offset %u flags 0x%x\n",
3258 		   cmd->vdev_id, cmd->dialog_id, cmd->wake_intvl_us,
3259 		   cmd->wake_intvl_mantis, cmd->wake_dura_us, cmd->sp_offset_us,
3260 		   cmd->flags);
3261 
3262 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_TWT_ADD_DIALOG_CMDID);
3263 
3264 	if (ret) {
3265 		ath11k_warn(ab,
3266 			    "failed to send wmi command to add twt dialog: %d",
3267 			    ret);
3268 		dev_kfree_skb(skb);
3269 	}
3270 	return ret;
3271 }
3272 
3273 int ath11k_wmi_send_twt_del_dialog_cmd(struct ath11k *ar,
3274 				       struct wmi_twt_del_dialog_params *params)
3275 {
3276 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3277 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3278 	struct wmi_twt_del_dialog_params_cmd *cmd;
3279 	struct sk_buff *skb;
3280 	int ret, len;
3281 
3282 	len = sizeof(*cmd);
3283 
3284 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3285 	if (!skb)
3286 		return -ENOMEM;
3287 
3288 	cmd = (struct wmi_twt_del_dialog_params_cmd *)skb->data;
3289 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_TWT_DEL_DIALOG_CMD) |
3290 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3291 
3292 	cmd->vdev_id = params->vdev_id;
3293 	ether_addr_copy(cmd->peer_macaddr.addr, params->peer_macaddr);
3294 	cmd->dialog_id = params->dialog_id;
3295 
3296 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3297 		   "delete twt dialog vdev %u dialog id %u\n",
3298 		   cmd->vdev_id, cmd->dialog_id);
3299 
3300 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_TWT_DEL_DIALOG_CMDID);
3301 	if (ret) {
3302 		ath11k_warn(ab,
3303 			    "failed to send wmi command to delete twt dialog: %d",
3304 			    ret);
3305 		dev_kfree_skb(skb);
3306 	}
3307 	return ret;
3308 }
3309 
3310 int ath11k_wmi_send_twt_pause_dialog_cmd(struct ath11k *ar,
3311 					 struct wmi_twt_pause_dialog_params *params)
3312 {
3313 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3314 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3315 	struct wmi_twt_pause_dialog_params_cmd *cmd;
3316 	struct sk_buff *skb;
3317 	int ret, len;
3318 
3319 	len = sizeof(*cmd);
3320 
3321 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3322 	if (!skb)
3323 		return -ENOMEM;
3324 
3325 	cmd = (struct wmi_twt_pause_dialog_params_cmd *)skb->data;
3326 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3327 				     WMI_TAG_TWT_PAUSE_DIALOG_CMD) |
3328 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3329 
3330 	cmd->vdev_id = params->vdev_id;
3331 	ether_addr_copy(cmd->peer_macaddr.addr, params->peer_macaddr);
3332 	cmd->dialog_id = params->dialog_id;
3333 
3334 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3335 		   "pause twt dialog vdev %u dialog id %u\n",
3336 		   cmd->vdev_id, cmd->dialog_id);
3337 
3338 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_TWT_PAUSE_DIALOG_CMDID);
3339 	if (ret) {
3340 		ath11k_warn(ab,
3341 			    "failed to send wmi command to pause twt dialog: %d",
3342 			    ret);
3343 		dev_kfree_skb(skb);
3344 	}
3345 	return ret;
3346 }
3347 
3348 int ath11k_wmi_send_twt_resume_dialog_cmd(struct ath11k *ar,
3349 					  struct wmi_twt_resume_dialog_params *params)
3350 {
3351 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3352 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3353 	struct wmi_twt_resume_dialog_params_cmd *cmd;
3354 	struct sk_buff *skb;
3355 	int ret, len;
3356 
3357 	len = sizeof(*cmd);
3358 
3359 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3360 	if (!skb)
3361 		return -ENOMEM;
3362 
3363 	cmd = (struct wmi_twt_resume_dialog_params_cmd *)skb->data;
3364 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3365 				     WMI_TAG_TWT_RESUME_DIALOG_CMD) |
3366 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3367 
3368 	cmd->vdev_id = params->vdev_id;
3369 	ether_addr_copy(cmd->peer_macaddr.addr, params->peer_macaddr);
3370 	cmd->dialog_id = params->dialog_id;
3371 	cmd->sp_offset_us = params->sp_offset_us;
3372 	cmd->next_twt_size = params->next_twt_size;
3373 
3374 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3375 		   "resume twt dialog vdev %u dialog id %u service period offset %u next twt subfield size %u\n",
3376 		   cmd->vdev_id, cmd->dialog_id, cmd->sp_offset_us,
3377 		   cmd->next_twt_size);
3378 
3379 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_TWT_RESUME_DIALOG_CMDID);
3380 	if (ret) {
3381 		ath11k_warn(ab,
3382 			    "failed to send wmi command to resume twt dialog: %d",
3383 			    ret);
3384 		dev_kfree_skb(skb);
3385 	}
3386 	return ret;
3387 }
3388 
3389 int
3390 ath11k_wmi_send_obss_spr_cmd(struct ath11k *ar, u32 vdev_id,
3391 			     struct ieee80211_he_obss_pd *he_obss_pd)
3392 {
3393 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3394 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3395 	struct wmi_obss_spatial_reuse_params_cmd *cmd;
3396 	struct sk_buff *skb;
3397 	int ret, len;
3398 
3399 	len = sizeof(*cmd);
3400 
3401 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3402 	if (!skb)
3403 		return -ENOMEM;
3404 
3405 	cmd = (struct wmi_obss_spatial_reuse_params_cmd *)skb->data;
3406 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3407 				     WMI_TAG_OBSS_SPATIAL_REUSE_SET_CMD) |
3408 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3409 	cmd->vdev_id = vdev_id;
3410 	cmd->enable = he_obss_pd->enable;
3411 	cmd->obss_min = he_obss_pd->min_offset;
3412 	cmd->obss_max = he_obss_pd->max_offset;
3413 
3414 	ret = ath11k_wmi_cmd_send(wmi, skb,
3415 				  WMI_PDEV_OBSS_PD_SPATIAL_REUSE_CMDID);
3416 	if (ret) {
3417 		ath11k_warn(ab,
3418 			    "Failed to send WMI_PDEV_OBSS_PD_SPATIAL_REUSE_CMDID");
3419 		dev_kfree_skb(skb);
3420 	}
3421 	return ret;
3422 }
3423 
3424 int
3425 ath11k_wmi_pdev_set_srg_bss_color_bitmap(struct ath11k *ar, u32 *bitmap)
3426 {
3427 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3428 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3429 	struct wmi_pdev_obss_pd_bitmap_cmd *cmd;
3430 	struct sk_buff *skb;
3431 	int ret, len;
3432 
3433 	len = sizeof(*cmd);
3434 
3435 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3436 	if (!skb)
3437 		return -ENOMEM;
3438 
3439 	cmd = (struct wmi_pdev_obss_pd_bitmap_cmd *)skb->data;
3440 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3441 				     WMI_TAG_PDEV_SRG_BSS_COLOR_BITMAP_CMD) |
3442 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3443 	cmd->pdev_id = ar->pdev->pdev_id;
3444 	memcpy(cmd->bitmap, bitmap, sizeof(cmd->bitmap));
3445 
3446 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3447 		   "obss pd pdev_id %d bss color bitmap %08x %08x\n",
3448 		   cmd->pdev_id, cmd->bitmap[0], cmd->bitmap[1]);
3449 
3450 	ret = ath11k_wmi_cmd_send(wmi, skb,
3451 				  WMI_PDEV_SET_SRG_BSS_COLOR_BITMAP_CMDID);
3452 	if (ret) {
3453 		ath11k_warn(ab,
3454 			    "failed to send WMI_PDEV_SET_SRG_BSS_COLOR_BITMAP_CMDID");
3455 		dev_kfree_skb(skb);
3456 	}
3457 
3458 	return ret;
3459 }
3460 
3461 int
3462 ath11k_wmi_pdev_set_srg_patial_bssid_bitmap(struct ath11k *ar, u32 *bitmap)
3463 {
3464 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3465 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3466 	struct wmi_pdev_obss_pd_bitmap_cmd *cmd;
3467 	struct sk_buff *skb;
3468 	int ret, len;
3469 
3470 	len = sizeof(*cmd);
3471 
3472 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3473 	if (!skb)
3474 		return -ENOMEM;
3475 
3476 	cmd = (struct wmi_pdev_obss_pd_bitmap_cmd *)skb->data;
3477 	cmd->tlv_header =
3478 		FIELD_PREP(WMI_TLV_TAG,
3479 			   WMI_TAG_PDEV_SRG_PARTIAL_BSSID_BITMAP_CMD) |
3480 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3481 	cmd->pdev_id = ar->pdev->pdev_id;
3482 	memcpy(cmd->bitmap, bitmap, sizeof(cmd->bitmap));
3483 
3484 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3485 		   "obss pd pdev_id %d partial bssid bitmap %08x %08x\n",
3486 		   cmd->pdev_id, cmd->bitmap[0], cmd->bitmap[1]);
3487 
3488 	ret = ath11k_wmi_cmd_send(wmi, skb,
3489 				  WMI_PDEV_SET_SRG_PARTIAL_BSSID_BITMAP_CMDID);
3490 	if (ret) {
3491 		ath11k_warn(ab,
3492 			    "failed to send WMI_PDEV_SET_SRG_PARTIAL_BSSID_BITMAP_CMDID");
3493 		dev_kfree_skb(skb);
3494 	}
3495 
3496 	return ret;
3497 }
3498 
3499 int
3500 ath11k_wmi_pdev_srg_obss_color_enable_bitmap(struct ath11k *ar, u32 *bitmap)
3501 {
3502 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3503 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3504 	struct wmi_pdev_obss_pd_bitmap_cmd *cmd;
3505 	struct sk_buff *skb;
3506 	int ret, len;
3507 
3508 	len = sizeof(*cmd);
3509 
3510 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3511 	if (!skb)
3512 		return -ENOMEM;
3513 
3514 	cmd = (struct wmi_pdev_obss_pd_bitmap_cmd *)skb->data;
3515 	cmd->tlv_header =
3516 		FIELD_PREP(WMI_TLV_TAG,
3517 			   WMI_TAG_PDEV_SRG_OBSS_COLOR_ENABLE_BITMAP_CMD) |
3518 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3519 	cmd->pdev_id = ar->pdev->pdev_id;
3520 	memcpy(cmd->bitmap, bitmap, sizeof(cmd->bitmap));
3521 
3522 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3523 		   "obss pd srg pdev_id %d bss color enable bitmap %08x %08x\n",
3524 		   cmd->pdev_id, cmd->bitmap[0], cmd->bitmap[1]);
3525 
3526 	ret = ath11k_wmi_cmd_send(wmi, skb,
3527 				  WMI_PDEV_SET_SRG_OBSS_COLOR_ENABLE_BITMAP_CMDID);
3528 	if (ret) {
3529 		ath11k_warn(ab,
3530 			    "failed to send WMI_PDEV_SET_SRG_OBSS_COLOR_ENABLE_BITMAP_CMDID");
3531 		dev_kfree_skb(skb);
3532 	}
3533 
3534 	return ret;
3535 }
3536 
3537 int
3538 ath11k_wmi_pdev_srg_obss_bssid_enable_bitmap(struct ath11k *ar, u32 *bitmap)
3539 {
3540 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3541 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3542 	struct wmi_pdev_obss_pd_bitmap_cmd *cmd;
3543 	struct sk_buff *skb;
3544 	int ret, len;
3545 
3546 	len = sizeof(*cmd);
3547 
3548 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3549 	if (!skb)
3550 		return -ENOMEM;
3551 
3552 	cmd = (struct wmi_pdev_obss_pd_bitmap_cmd *)skb->data;
3553 	cmd->tlv_header =
3554 		FIELD_PREP(WMI_TLV_TAG,
3555 			   WMI_TAG_PDEV_SRG_OBSS_BSSID_ENABLE_BITMAP_CMD) |
3556 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3557 	cmd->pdev_id = ar->pdev->pdev_id;
3558 	memcpy(cmd->bitmap, bitmap, sizeof(cmd->bitmap));
3559 
3560 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3561 		   "obss pd srg pdev_id %d bssid enable bitmap %08x %08x\n",
3562 		   cmd->pdev_id, cmd->bitmap[0], cmd->bitmap[1]);
3563 
3564 	ret = ath11k_wmi_cmd_send(wmi, skb,
3565 				  WMI_PDEV_SET_SRG_OBSS_BSSID_ENABLE_BITMAP_CMDID);
3566 	if (ret) {
3567 		ath11k_warn(ab,
3568 			    "failed to send WMI_PDEV_SET_SRG_OBSS_BSSID_ENABLE_BITMAP_CMDID");
3569 		dev_kfree_skb(skb);
3570 	}
3571 
3572 	return ret;
3573 }
3574 
3575 int
3576 ath11k_wmi_pdev_non_srg_obss_color_enable_bitmap(struct ath11k *ar, u32 *bitmap)
3577 {
3578 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3579 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3580 	struct wmi_pdev_obss_pd_bitmap_cmd *cmd;
3581 	struct sk_buff *skb;
3582 	int ret, len;
3583 
3584 	len = sizeof(*cmd);
3585 
3586 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3587 	if (!skb)
3588 		return -ENOMEM;
3589 
3590 	cmd = (struct wmi_pdev_obss_pd_bitmap_cmd *)skb->data;
3591 	cmd->tlv_header =
3592 		FIELD_PREP(WMI_TLV_TAG,
3593 			   WMI_TAG_PDEV_NON_SRG_OBSS_COLOR_ENABLE_BITMAP_CMD) |
3594 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3595 	cmd->pdev_id = ar->pdev->pdev_id;
3596 	memcpy(cmd->bitmap, bitmap, sizeof(cmd->bitmap));
3597 
3598 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3599 		   "obss pd non_srg pdev_id %d bss color enable bitmap %08x %08x\n",
3600 		   cmd->pdev_id, cmd->bitmap[0], cmd->bitmap[1]);
3601 
3602 	ret = ath11k_wmi_cmd_send(wmi, skb,
3603 				  WMI_PDEV_SET_NON_SRG_OBSS_COLOR_ENABLE_BITMAP_CMDID);
3604 	if (ret) {
3605 		ath11k_warn(ab,
3606 			    "failed to send WMI_PDEV_SET_NON_SRG_OBSS_COLOR_ENABLE_BITMAP_CMDID");
3607 		dev_kfree_skb(skb);
3608 	}
3609 
3610 	return ret;
3611 }
3612 
3613 int
3614 ath11k_wmi_pdev_non_srg_obss_bssid_enable_bitmap(struct ath11k *ar, u32 *bitmap)
3615 {
3616 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3617 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3618 	struct wmi_pdev_obss_pd_bitmap_cmd *cmd;
3619 	struct sk_buff *skb;
3620 	int ret, len;
3621 
3622 	len = sizeof(*cmd);
3623 
3624 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3625 	if (!skb)
3626 		return -ENOMEM;
3627 
3628 	cmd = (struct wmi_pdev_obss_pd_bitmap_cmd *)skb->data;
3629 	cmd->tlv_header =
3630 		FIELD_PREP(WMI_TLV_TAG,
3631 			   WMI_TAG_PDEV_NON_SRG_OBSS_BSSID_ENABLE_BITMAP_CMD) |
3632 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3633 	cmd->pdev_id = ar->pdev->pdev_id;
3634 	memcpy(cmd->bitmap, bitmap, sizeof(cmd->bitmap));
3635 
3636 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3637 		   "obss pd non_srg pdev_id %d bssid enable bitmap %08x %08x\n",
3638 		   cmd->pdev_id, cmd->bitmap[0], cmd->bitmap[1]);
3639 
3640 	ret = ath11k_wmi_cmd_send(wmi, skb,
3641 				  WMI_PDEV_SET_NON_SRG_OBSS_BSSID_ENABLE_BITMAP_CMDID);
3642 	if (ret) {
3643 		ath11k_warn(ab,
3644 			    "failed to send WMI_PDEV_SET_NON_SRG_OBSS_BSSID_ENABLE_BITMAP_CMDID");
3645 		dev_kfree_skb(skb);
3646 	}
3647 
3648 	return ret;
3649 }
3650 
3651 int
3652 ath11k_wmi_send_obss_color_collision_cfg_cmd(struct ath11k *ar, u32 vdev_id,
3653 					     u8 bss_color, u32 period,
3654 					     bool enable)
3655 {
3656 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3657 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3658 	struct wmi_obss_color_collision_cfg_params_cmd *cmd;
3659 	struct sk_buff *skb;
3660 	int ret, len;
3661 
3662 	len = sizeof(*cmd);
3663 
3664 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3665 	if (!skb)
3666 		return -ENOMEM;
3667 
3668 	cmd = (struct wmi_obss_color_collision_cfg_params_cmd *)skb->data;
3669 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3670 				     WMI_TAG_OBSS_COLOR_COLLISION_DET_CONFIG) |
3671 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3672 	cmd->vdev_id = vdev_id;
3673 	cmd->evt_type = enable ? ATH11K_OBSS_COLOR_COLLISION_DETECTION :
3674 				 ATH11K_OBSS_COLOR_COLLISION_DETECTION_DISABLE;
3675 	cmd->current_bss_color = bss_color;
3676 	cmd->detection_period_ms = period;
3677 	cmd->scan_period_ms = ATH11K_BSS_COLOR_COLLISION_SCAN_PERIOD_MS;
3678 	cmd->free_slot_expiry_time_ms = 0;
3679 	cmd->flags = 0;
3680 
3681 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3682 		   "wmi_send_obss_color_collision_cfg id %d type %d bss_color %d detect_period %d scan_period %d\n",
3683 		   cmd->vdev_id, cmd->evt_type, cmd->current_bss_color,
3684 		   cmd->detection_period_ms, cmd->scan_period_ms);
3685 
3686 	ret = ath11k_wmi_cmd_send(wmi, skb,
3687 				  WMI_OBSS_COLOR_COLLISION_DET_CONFIG_CMDID);
3688 	if (ret) {
3689 		ath11k_warn(ab, "Failed to send WMI_OBSS_COLOR_COLLISION_DET_CONFIG_CMDID");
3690 		dev_kfree_skb(skb);
3691 	}
3692 	return ret;
3693 }
3694 
3695 int ath11k_wmi_send_bss_color_change_enable_cmd(struct ath11k *ar, u32 vdev_id,
3696 						bool enable)
3697 {
3698 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3699 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3700 	struct wmi_bss_color_change_enable_params_cmd *cmd;
3701 	struct sk_buff *skb;
3702 	int ret, len;
3703 
3704 	len = sizeof(*cmd);
3705 
3706 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3707 	if (!skb)
3708 		return -ENOMEM;
3709 
3710 	cmd = (struct wmi_bss_color_change_enable_params_cmd *)skb->data;
3711 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_BSS_COLOR_CHANGE_ENABLE) |
3712 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3713 	cmd->vdev_id = vdev_id;
3714 	cmd->enable = enable ? 1 : 0;
3715 
3716 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3717 		   "wmi_send_bss_color_change_enable id %d enable %d\n",
3718 		   cmd->vdev_id, cmd->enable);
3719 
3720 	ret = ath11k_wmi_cmd_send(wmi, skb,
3721 				  WMI_BSS_COLOR_CHANGE_ENABLE_CMDID);
3722 	if (ret) {
3723 		ath11k_warn(ab, "Failed to send WMI_BSS_COLOR_CHANGE_ENABLE_CMDID");
3724 		dev_kfree_skb(skb);
3725 	}
3726 	return ret;
3727 }
3728 
3729 int ath11k_wmi_fils_discovery_tmpl(struct ath11k *ar, u32 vdev_id,
3730 				   struct sk_buff *tmpl)
3731 {
3732 	struct wmi_tlv *tlv;
3733 	struct sk_buff *skb;
3734 	void *ptr;
3735 	int ret, len;
3736 	size_t aligned_len;
3737 	struct wmi_fils_discovery_tmpl_cmd *cmd;
3738 
3739 	aligned_len = roundup(tmpl->len, 4);
3740 	len = sizeof(*cmd) + TLV_HDR_SIZE + aligned_len;
3741 
3742 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3743 		   "vdev %i set FILS discovery template\n", vdev_id);
3744 
3745 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
3746 	if (!skb)
3747 		return -ENOMEM;
3748 
3749 	cmd = (struct wmi_fils_discovery_tmpl_cmd *)skb->data;
3750 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3751 				     WMI_TAG_FILS_DISCOVERY_TMPL_CMD) |
3752 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3753 	cmd->vdev_id = vdev_id;
3754 	cmd->buf_len = tmpl->len;
3755 	ptr = skb->data + sizeof(*cmd);
3756 
3757 	tlv = ptr;
3758 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
3759 		      FIELD_PREP(WMI_TLV_LEN, aligned_len);
3760 	memcpy(tlv->value, tmpl->data, tmpl->len);
3761 
3762 	ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_FILS_DISCOVERY_TMPL_CMDID);
3763 	if (ret) {
3764 		ath11k_warn(ar->ab,
3765 			    "WMI vdev %i failed to send FILS discovery template command\n",
3766 			    vdev_id);
3767 		dev_kfree_skb(skb);
3768 	}
3769 	return ret;
3770 }
3771 
3772 int ath11k_wmi_probe_resp_tmpl(struct ath11k *ar, u32 vdev_id,
3773 			       struct sk_buff *tmpl)
3774 {
3775 	struct wmi_probe_tmpl_cmd *cmd;
3776 	struct wmi_bcn_prb_info *probe_info;
3777 	struct wmi_tlv *tlv;
3778 	struct sk_buff *skb;
3779 	void *ptr;
3780 	int ret, len;
3781 	size_t aligned_len = roundup(tmpl->len, 4);
3782 
3783 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3784 		   "vdev %i set probe response template\n", vdev_id);
3785 
3786 	len = sizeof(*cmd) + sizeof(*probe_info) + TLV_HDR_SIZE + aligned_len;
3787 
3788 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
3789 	if (!skb)
3790 		return -ENOMEM;
3791 
3792 	cmd = (struct wmi_probe_tmpl_cmd *)skb->data;
3793 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PRB_TMPL_CMD) |
3794 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3795 	cmd->vdev_id = vdev_id;
3796 	cmd->buf_len = tmpl->len;
3797 
3798 	ptr = skb->data + sizeof(*cmd);
3799 
3800 	probe_info = ptr;
3801 	len = sizeof(*probe_info);
3802 	probe_info->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3803 					    WMI_TAG_BCN_PRB_INFO) |
3804 				 FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3805 	probe_info->caps = 0;
3806 	probe_info->erp = 0;
3807 
3808 	ptr += sizeof(*probe_info);
3809 
3810 	tlv = ptr;
3811 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
3812 		      FIELD_PREP(WMI_TLV_LEN, aligned_len);
3813 	memcpy(tlv->value, tmpl->data, tmpl->len);
3814 
3815 	ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_PRB_TMPL_CMDID);
3816 	if (ret) {
3817 		ath11k_warn(ar->ab,
3818 			    "WMI vdev %i failed to send probe response template command\n",
3819 			    vdev_id);
3820 		dev_kfree_skb(skb);
3821 	}
3822 	return ret;
3823 }
3824 
3825 int ath11k_wmi_fils_discovery(struct ath11k *ar, u32 vdev_id, u32 interval,
3826 			      bool unsol_bcast_probe_resp_enabled)
3827 {
3828 	struct sk_buff *skb;
3829 	int ret, len;
3830 	struct wmi_fils_discovery_cmd *cmd;
3831 
3832 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3833 		   "vdev %i set %s interval to %u TU\n",
3834 		   vdev_id, unsol_bcast_probe_resp_enabled ?
3835 		   "unsolicited broadcast probe response" : "FILS discovery",
3836 		   interval);
3837 
3838 	len = sizeof(*cmd);
3839 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
3840 	if (!skb)
3841 		return -ENOMEM;
3842 
3843 	cmd = (struct wmi_fils_discovery_cmd *)skb->data;
3844 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ENABLE_FILS_CMD) |
3845 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3846 	cmd->vdev_id = vdev_id;
3847 	cmd->interval = interval;
3848 	cmd->config = unsol_bcast_probe_resp_enabled;
3849 
3850 	ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_ENABLE_FILS_CMDID);
3851 	if (ret) {
3852 		ath11k_warn(ar->ab,
3853 			    "WMI vdev %i failed to send FILS discovery enable/disable command\n",
3854 			    vdev_id);
3855 		dev_kfree_skb(skb);
3856 	}
3857 	return ret;
3858 }
3859 
3860 static void
3861 ath11k_wmi_obss_color_collision_event(struct ath11k_base *ab, struct sk_buff *skb)
3862 {
3863 	const void **tb;
3864 	const struct wmi_obss_color_collision_event *ev;
3865 	struct ath11k_vif *arvif;
3866 	int ret;
3867 
3868 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
3869 	if (IS_ERR(tb)) {
3870 		ret = PTR_ERR(tb);
3871 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
3872 		return;
3873 	}
3874 
3875 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event obss color collision");
3876 
3877 	rcu_read_lock();
3878 
3879 	ev = tb[WMI_TAG_OBSS_COLOR_COLLISION_EVT];
3880 	if (!ev) {
3881 		ath11k_warn(ab, "failed to fetch obss color collision ev");
3882 		goto exit;
3883 	}
3884 
3885 	arvif = ath11k_mac_get_arvif_by_vdev_id(ab, ev->vdev_id);
3886 	if (!arvif) {
3887 		ath11k_warn(ab, "failed to find arvif with vedv id %d in obss_color_collision_event\n",
3888 			    ev->vdev_id);
3889 		goto exit;
3890 	}
3891 
3892 	switch (ev->evt_type) {
3893 	case WMI_BSS_COLOR_COLLISION_DETECTION:
3894 		ieee80211_obss_color_collision_notify(arvif->vif, ev->obss_color_bitmap,
3895 						      GFP_KERNEL);
3896 		ath11k_dbg(ab, ATH11K_DBG_WMI,
3897 			   "OBSS color collision detected vdev:%d, event:%d, bitmap:%08llx\n",
3898 			   ev->vdev_id, ev->evt_type, ev->obss_color_bitmap);
3899 		break;
3900 	case WMI_BSS_COLOR_COLLISION_DISABLE:
3901 	case WMI_BSS_COLOR_FREE_SLOT_TIMER_EXPIRY:
3902 	case WMI_BSS_COLOR_FREE_SLOT_AVAILABLE:
3903 		break;
3904 	default:
3905 		ath11k_warn(ab, "received unknown obss color collision detection event\n");
3906 	}
3907 
3908 exit:
3909 	kfree(tb);
3910 	rcu_read_unlock();
3911 }
3912 
3913 static void
3914 ath11k_fill_band_to_mac_param(struct ath11k_base  *soc,
3915 			      struct wmi_host_pdev_band_to_mac *band_to_mac)
3916 {
3917 	u8 i;
3918 	struct ath11k_hal_reg_capabilities_ext *hal_reg_cap;
3919 	struct ath11k_pdev *pdev;
3920 
3921 	for (i = 0; i < soc->num_radios; i++) {
3922 		pdev = &soc->pdevs[i];
3923 		hal_reg_cap = &soc->hal_reg_cap[i];
3924 		band_to_mac[i].pdev_id = pdev->pdev_id;
3925 
3926 		switch (pdev->cap.supported_bands) {
3927 		case WMI_HOST_WLAN_2G_5G_CAP:
3928 			band_to_mac[i].start_freq = hal_reg_cap->low_2ghz_chan;
3929 			band_to_mac[i].end_freq = hal_reg_cap->high_5ghz_chan;
3930 			break;
3931 		case WMI_HOST_WLAN_2G_CAP:
3932 			band_to_mac[i].start_freq = hal_reg_cap->low_2ghz_chan;
3933 			band_to_mac[i].end_freq = hal_reg_cap->high_2ghz_chan;
3934 			break;
3935 		case WMI_HOST_WLAN_5G_CAP:
3936 			band_to_mac[i].start_freq = hal_reg_cap->low_5ghz_chan;
3937 			band_to_mac[i].end_freq = hal_reg_cap->high_5ghz_chan;
3938 			break;
3939 		default:
3940 			break;
3941 		}
3942 	}
3943 }
3944 
3945 static void
3946 ath11k_wmi_copy_resource_config(struct wmi_resource_config *wmi_cfg,
3947 				struct target_resource_config *tg_cfg)
3948 {
3949 	wmi_cfg->num_vdevs = tg_cfg->num_vdevs;
3950 	wmi_cfg->num_peers = tg_cfg->num_peers;
3951 	wmi_cfg->num_offload_peers = tg_cfg->num_offload_peers;
3952 	wmi_cfg->num_offload_reorder_buffs = tg_cfg->num_offload_reorder_buffs;
3953 	wmi_cfg->num_peer_keys = tg_cfg->num_peer_keys;
3954 	wmi_cfg->num_tids = tg_cfg->num_tids;
3955 	wmi_cfg->ast_skid_limit = tg_cfg->ast_skid_limit;
3956 	wmi_cfg->tx_chain_mask = tg_cfg->tx_chain_mask;
3957 	wmi_cfg->rx_chain_mask = tg_cfg->rx_chain_mask;
3958 	wmi_cfg->rx_timeout_pri[0] = tg_cfg->rx_timeout_pri[0];
3959 	wmi_cfg->rx_timeout_pri[1] = tg_cfg->rx_timeout_pri[1];
3960 	wmi_cfg->rx_timeout_pri[2] = tg_cfg->rx_timeout_pri[2];
3961 	wmi_cfg->rx_timeout_pri[3] = tg_cfg->rx_timeout_pri[3];
3962 	wmi_cfg->rx_decap_mode = tg_cfg->rx_decap_mode;
3963 	wmi_cfg->scan_max_pending_req = tg_cfg->scan_max_pending_req;
3964 	wmi_cfg->bmiss_offload_max_vdev = tg_cfg->bmiss_offload_max_vdev;
3965 	wmi_cfg->roam_offload_max_vdev = tg_cfg->roam_offload_max_vdev;
3966 	wmi_cfg->roam_offload_max_ap_profiles =
3967 		tg_cfg->roam_offload_max_ap_profiles;
3968 	wmi_cfg->num_mcast_groups = tg_cfg->num_mcast_groups;
3969 	wmi_cfg->num_mcast_table_elems = tg_cfg->num_mcast_table_elems;
3970 	wmi_cfg->mcast2ucast_mode = tg_cfg->mcast2ucast_mode;
3971 	wmi_cfg->tx_dbg_log_size = tg_cfg->tx_dbg_log_size;
3972 	wmi_cfg->num_wds_entries = tg_cfg->num_wds_entries;
3973 	wmi_cfg->dma_burst_size = tg_cfg->dma_burst_size;
3974 	wmi_cfg->mac_aggr_delim = tg_cfg->mac_aggr_delim;
3975 	wmi_cfg->rx_skip_defrag_timeout_dup_detection_check =
3976 		tg_cfg->rx_skip_defrag_timeout_dup_detection_check;
3977 	wmi_cfg->vow_config = tg_cfg->vow_config;
3978 	wmi_cfg->gtk_offload_max_vdev = tg_cfg->gtk_offload_max_vdev;
3979 	wmi_cfg->num_msdu_desc = tg_cfg->num_msdu_desc;
3980 	wmi_cfg->max_frag_entries = tg_cfg->max_frag_entries;
3981 	wmi_cfg->num_tdls_vdevs = tg_cfg->num_tdls_vdevs;
3982 	wmi_cfg->num_tdls_conn_table_entries =
3983 		tg_cfg->num_tdls_conn_table_entries;
3984 	wmi_cfg->beacon_tx_offload_max_vdev =
3985 		tg_cfg->beacon_tx_offload_max_vdev;
3986 	wmi_cfg->num_multicast_filter_entries =
3987 		tg_cfg->num_multicast_filter_entries;
3988 	wmi_cfg->num_wow_filters = tg_cfg->num_wow_filters;
3989 	wmi_cfg->num_keep_alive_pattern = tg_cfg->num_keep_alive_pattern;
3990 	wmi_cfg->keep_alive_pattern_size = tg_cfg->keep_alive_pattern_size;
3991 	wmi_cfg->max_tdls_concurrent_sleep_sta =
3992 		tg_cfg->max_tdls_concurrent_sleep_sta;
3993 	wmi_cfg->max_tdls_concurrent_buffer_sta =
3994 		tg_cfg->max_tdls_concurrent_buffer_sta;
3995 	wmi_cfg->wmi_send_separate = tg_cfg->wmi_send_separate;
3996 	wmi_cfg->num_ocb_vdevs = tg_cfg->num_ocb_vdevs;
3997 	wmi_cfg->num_ocb_channels = tg_cfg->num_ocb_channels;
3998 	wmi_cfg->num_ocb_schedules = tg_cfg->num_ocb_schedules;
3999 	wmi_cfg->bpf_instruction_size = tg_cfg->bpf_instruction_size;
4000 	wmi_cfg->max_bssid_rx_filters = tg_cfg->max_bssid_rx_filters;
4001 	wmi_cfg->use_pdev_id = tg_cfg->use_pdev_id;
4002 	wmi_cfg->flag1 = tg_cfg->flag1;
4003 	wmi_cfg->peer_map_unmap_v2_support = tg_cfg->peer_map_unmap_v2_support;
4004 	wmi_cfg->sched_params = tg_cfg->sched_params;
4005 	wmi_cfg->twt_ap_pdev_count = tg_cfg->twt_ap_pdev_count;
4006 	wmi_cfg->twt_ap_sta_count = tg_cfg->twt_ap_sta_count;
4007 	wmi_cfg->host_service_flags &=
4008 		~(1 << WMI_CFG_HOST_SERVICE_FLAG_REG_CC_EXT);
4009 	wmi_cfg->host_service_flags |= (tg_cfg->is_reg_cc_ext_event_supported <<
4010 					WMI_CFG_HOST_SERVICE_FLAG_REG_CC_EXT);
4011 	wmi_cfg->flags2 = WMI_RSRC_CFG_FLAG2_CALC_NEXT_DTIM_COUNT_SET;
4012 	wmi_cfg->ema_max_vap_cnt = tg_cfg->ema_max_vap_cnt;
4013 	wmi_cfg->ema_max_profile_period = tg_cfg->ema_max_profile_period;
4014 }
4015 
4016 static int ath11k_init_cmd_send(struct ath11k_pdev_wmi *wmi,
4017 				struct wmi_init_cmd_param *param)
4018 {
4019 	struct ath11k_base *ab = wmi->wmi_ab->ab;
4020 	struct sk_buff *skb;
4021 	struct wmi_init_cmd *cmd;
4022 	struct wmi_resource_config *cfg;
4023 	struct wmi_pdev_set_hw_mode_cmd_param *hw_mode;
4024 	struct wmi_pdev_band_to_mac *band_to_mac;
4025 	struct wlan_host_mem_chunk *host_mem_chunks;
4026 	struct wmi_tlv *tlv;
4027 	size_t ret, len;
4028 	void *ptr;
4029 	u32 hw_mode_len = 0;
4030 	u16 idx;
4031 
4032 	if (param->hw_mode_id != WMI_HOST_HW_MODE_MAX)
4033 		hw_mode_len = sizeof(*hw_mode) + TLV_HDR_SIZE +
4034 			      (param->num_band_to_mac * sizeof(*band_to_mac));
4035 
4036 	len = sizeof(*cmd) + TLV_HDR_SIZE + sizeof(*cfg) + hw_mode_len +
4037 	      (param->num_mem_chunks ? (sizeof(*host_mem_chunks) * WMI_MAX_MEM_REQS) : 0);
4038 
4039 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
4040 	if (!skb)
4041 		return -ENOMEM;
4042 
4043 	cmd = (struct wmi_init_cmd *)skb->data;
4044 
4045 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_INIT_CMD) |
4046 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
4047 
4048 	ptr = skb->data + sizeof(*cmd);
4049 	cfg = ptr;
4050 
4051 	ath11k_wmi_copy_resource_config(cfg, param->res_cfg);
4052 
4053 	cfg->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_RESOURCE_CONFIG) |
4054 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cfg) - TLV_HDR_SIZE);
4055 
4056 	ptr += sizeof(*cfg);
4057 	host_mem_chunks = ptr + TLV_HDR_SIZE;
4058 	len = sizeof(struct wlan_host_mem_chunk);
4059 
4060 	for (idx = 0; idx < param->num_mem_chunks; ++idx) {
4061 		host_mem_chunks[idx].tlv_header =
4062 				FIELD_PREP(WMI_TLV_TAG,
4063 					   WMI_TAG_WLAN_HOST_MEMORY_CHUNK) |
4064 				FIELD_PREP(WMI_TLV_LEN, len);
4065 
4066 		host_mem_chunks[idx].ptr = param->mem_chunks[idx].paddr;
4067 		host_mem_chunks[idx].size = param->mem_chunks[idx].len;
4068 		host_mem_chunks[idx].req_id = param->mem_chunks[idx].req_id;
4069 
4070 		ath11k_dbg(ab, ATH11K_DBG_WMI,
4071 			   "host mem chunk req_id %d paddr 0x%llx len %d\n",
4072 			   param->mem_chunks[idx].req_id,
4073 			   (u64)param->mem_chunks[idx].paddr,
4074 			   param->mem_chunks[idx].len);
4075 	}
4076 	cmd->num_host_mem_chunks = param->num_mem_chunks;
4077 	len = sizeof(struct wlan_host_mem_chunk) * param->num_mem_chunks;
4078 
4079 	/* num_mem_chunks is zero */
4080 	tlv = ptr;
4081 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
4082 		      FIELD_PREP(WMI_TLV_LEN, len);
4083 	ptr += TLV_HDR_SIZE + len;
4084 
4085 	if (param->hw_mode_id != WMI_HOST_HW_MODE_MAX) {
4086 		hw_mode = (struct wmi_pdev_set_hw_mode_cmd_param *)ptr;
4087 		hw_mode->tlv_header = FIELD_PREP(WMI_TLV_TAG,
4088 						 WMI_TAG_PDEV_SET_HW_MODE_CMD) |
4089 				      FIELD_PREP(WMI_TLV_LEN,
4090 						 sizeof(*hw_mode) - TLV_HDR_SIZE);
4091 
4092 		hw_mode->hw_mode_index = param->hw_mode_id;
4093 		hw_mode->num_band_to_mac = param->num_band_to_mac;
4094 
4095 		ptr += sizeof(*hw_mode);
4096 
4097 		len = param->num_band_to_mac * sizeof(*band_to_mac);
4098 		tlv = ptr;
4099 		tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
4100 			      FIELD_PREP(WMI_TLV_LEN, len);
4101 
4102 		ptr += TLV_HDR_SIZE;
4103 		len = sizeof(*band_to_mac);
4104 
4105 		for (idx = 0; idx < param->num_band_to_mac; idx++) {
4106 			band_to_mac = (void *)ptr;
4107 
4108 			band_to_mac->tlv_header = FIELD_PREP(WMI_TLV_TAG,
4109 							     WMI_TAG_PDEV_BAND_TO_MAC) |
4110 						  FIELD_PREP(WMI_TLV_LEN,
4111 							     len - TLV_HDR_SIZE);
4112 			band_to_mac->pdev_id = param->band_to_mac[idx].pdev_id;
4113 			band_to_mac->start_freq =
4114 				param->band_to_mac[idx].start_freq;
4115 			band_to_mac->end_freq =
4116 				param->band_to_mac[idx].end_freq;
4117 			ptr += sizeof(*band_to_mac);
4118 		}
4119 	}
4120 
4121 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_INIT_CMDID);
4122 	if (ret) {
4123 		ath11k_warn(ab, "failed to send WMI_INIT_CMDID\n");
4124 		dev_kfree_skb(skb);
4125 	}
4126 
4127 	return ret;
4128 }
4129 
4130 int ath11k_wmi_pdev_lro_cfg(struct ath11k *ar,
4131 			    int pdev_id)
4132 {
4133 	struct ath11k_wmi_pdev_lro_config_cmd *cmd;
4134 	struct sk_buff *skb;
4135 	int ret;
4136 
4137 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
4138 	if (!skb)
4139 		return -ENOMEM;
4140 
4141 	cmd = (struct ath11k_wmi_pdev_lro_config_cmd *)skb->data;
4142 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_LRO_INFO_CMD) |
4143 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
4144 
4145 	get_random_bytes(cmd->th_4, sizeof(uint32_t) * ATH11K_IPV4_TH_SEED_SIZE);
4146 	get_random_bytes(cmd->th_6, sizeof(uint32_t) * ATH11K_IPV6_TH_SEED_SIZE);
4147 
4148 	cmd->pdev_id = pdev_id;
4149 
4150 	ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_LRO_CONFIG_CMDID);
4151 	if (ret) {
4152 		ath11k_warn(ar->ab,
4153 			    "failed to send lro cfg req wmi cmd\n");
4154 		goto err;
4155 	}
4156 
4157 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
4158 		   "lro cfg cmd pdev_id 0x%x\n", pdev_id);
4159 	return 0;
4160 err:
4161 	dev_kfree_skb(skb);
4162 	return ret;
4163 }
4164 
4165 int ath11k_wmi_wait_for_service_ready(struct ath11k_base *ab)
4166 {
4167 	unsigned long time_left;
4168 
4169 	time_left = wait_for_completion_timeout(&ab->wmi_ab.service_ready,
4170 						WMI_SERVICE_READY_TIMEOUT_HZ);
4171 	if (!time_left)
4172 		return -ETIMEDOUT;
4173 
4174 	return 0;
4175 }
4176 
4177 int ath11k_wmi_wait_for_unified_ready(struct ath11k_base *ab)
4178 {
4179 	unsigned long time_left;
4180 
4181 	time_left = wait_for_completion_timeout(&ab->wmi_ab.unified_ready,
4182 						WMI_SERVICE_READY_TIMEOUT_HZ);
4183 	if (!time_left)
4184 		return -ETIMEDOUT;
4185 
4186 	return 0;
4187 }
4188 
4189 int ath11k_wmi_set_hw_mode(struct ath11k_base *ab,
4190 			   enum wmi_host_hw_mode_config_type mode)
4191 {
4192 	struct wmi_pdev_set_hw_mode_cmd_param *cmd;
4193 	struct sk_buff *skb;
4194 	struct ath11k_wmi_base *wmi_ab = &ab->wmi_ab;
4195 	int len;
4196 	int ret;
4197 
4198 	len = sizeof(*cmd);
4199 
4200 	skb = ath11k_wmi_alloc_skb(wmi_ab, len);
4201 	if (!skb)
4202 		return -ENOMEM;
4203 
4204 	cmd = (struct wmi_pdev_set_hw_mode_cmd_param *)skb->data;
4205 
4206 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_SET_HW_MODE_CMD) |
4207 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
4208 
4209 	cmd->pdev_id = WMI_PDEV_ID_SOC;
4210 	cmd->hw_mode_index = mode;
4211 
4212 	ret = ath11k_wmi_cmd_send(&wmi_ab->wmi[0], skb, WMI_PDEV_SET_HW_MODE_CMDID);
4213 	if (ret) {
4214 		ath11k_warn(ab, "failed to send WMI_PDEV_SET_HW_MODE_CMDID\n");
4215 		dev_kfree_skb(skb);
4216 	}
4217 
4218 	return ret;
4219 }
4220 
4221 int ath11k_wmi_cmd_init(struct ath11k_base *ab)
4222 {
4223 	struct ath11k_wmi_base *wmi_sc = &ab->wmi_ab;
4224 	struct wmi_init_cmd_param init_param;
4225 	struct target_resource_config  config;
4226 
4227 	memset(&init_param, 0, sizeof(init_param));
4228 	memset(&config, 0, sizeof(config));
4229 
4230 	ab->hw_params.hw_ops->wmi_init_config(ab, &config);
4231 
4232 	if (test_bit(WMI_TLV_SERVICE_REG_CC_EXT_EVENT_SUPPORT,
4233 		     ab->wmi_ab.svc_map))
4234 		config.is_reg_cc_ext_event_supported = 1;
4235 
4236 	memcpy(&wmi_sc->wlan_resource_config, &config, sizeof(config));
4237 
4238 	init_param.res_cfg = &wmi_sc->wlan_resource_config;
4239 	init_param.num_mem_chunks = wmi_sc->num_mem_chunks;
4240 	init_param.hw_mode_id = wmi_sc->preferred_hw_mode;
4241 	init_param.mem_chunks = wmi_sc->mem_chunks;
4242 
4243 	if (ab->hw_params.single_pdev_only)
4244 		init_param.hw_mode_id = WMI_HOST_HW_MODE_MAX;
4245 
4246 	init_param.num_band_to_mac = ab->num_radios;
4247 	ath11k_fill_band_to_mac_param(ab, init_param.band_to_mac);
4248 
4249 	return ath11k_init_cmd_send(&wmi_sc->wmi[0], &init_param);
4250 }
4251 
4252 int ath11k_wmi_vdev_spectral_conf(struct ath11k *ar,
4253 				  struct ath11k_wmi_vdev_spectral_conf_param *param)
4254 {
4255 	struct ath11k_wmi_vdev_spectral_conf_cmd *cmd;
4256 	struct sk_buff *skb;
4257 	int ret;
4258 
4259 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
4260 	if (!skb)
4261 		return -ENOMEM;
4262 
4263 	cmd = (struct ath11k_wmi_vdev_spectral_conf_cmd *)skb->data;
4264 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
4265 				     WMI_TAG_VDEV_SPECTRAL_CONFIGURE_CMD) |
4266 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
4267 
4268 	memcpy(&cmd->param, param, sizeof(*param));
4269 
4270 	ret = ath11k_wmi_cmd_send(ar->wmi, skb,
4271 				  WMI_VDEV_SPECTRAL_SCAN_CONFIGURE_CMDID);
4272 	if (ret) {
4273 		ath11k_warn(ar->ab,
4274 			    "failed to send spectral scan config wmi cmd\n");
4275 		goto err;
4276 	}
4277 
4278 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
4279 		   "spectral scan config cmd vdev_id 0x%x\n",
4280 		   param->vdev_id);
4281 
4282 	return 0;
4283 err:
4284 	dev_kfree_skb(skb);
4285 	return ret;
4286 }
4287 
4288 int ath11k_wmi_vdev_spectral_enable(struct ath11k *ar, u32 vdev_id,
4289 				    u32 trigger, u32 enable)
4290 {
4291 	struct ath11k_wmi_vdev_spectral_enable_cmd *cmd;
4292 	struct sk_buff *skb;
4293 	int ret;
4294 
4295 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
4296 	if (!skb)
4297 		return -ENOMEM;
4298 
4299 	cmd = (struct ath11k_wmi_vdev_spectral_enable_cmd *)skb->data;
4300 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
4301 				     WMI_TAG_VDEV_SPECTRAL_ENABLE_CMD) |
4302 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
4303 
4304 	cmd->vdev_id = vdev_id;
4305 	cmd->trigger_cmd = trigger;
4306 	cmd->enable_cmd = enable;
4307 
4308 	ret = ath11k_wmi_cmd_send(ar->wmi, skb,
4309 				  WMI_VDEV_SPECTRAL_SCAN_ENABLE_CMDID);
4310 	if (ret) {
4311 		ath11k_warn(ar->ab,
4312 			    "failed to send spectral enable wmi cmd\n");
4313 		goto err;
4314 	}
4315 
4316 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
4317 		   "spectral enable cmd vdev id 0x%x\n",
4318 		   vdev_id);
4319 
4320 	return 0;
4321 err:
4322 	dev_kfree_skb(skb);
4323 	return ret;
4324 }
4325 
4326 int ath11k_wmi_pdev_dma_ring_cfg(struct ath11k *ar,
4327 				 struct ath11k_wmi_pdev_dma_ring_cfg_req_cmd *param)
4328 {
4329 	struct ath11k_wmi_pdev_dma_ring_cfg_req_cmd *cmd;
4330 	struct sk_buff *skb;
4331 	int ret;
4332 
4333 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
4334 	if (!skb)
4335 		return -ENOMEM;
4336 
4337 	cmd = (struct ath11k_wmi_pdev_dma_ring_cfg_req_cmd *)skb->data;
4338 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_DMA_RING_CFG_REQ) |
4339 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
4340 
4341 	cmd->pdev_id		= param->pdev_id;
4342 	cmd->module_id		= param->module_id;
4343 	cmd->base_paddr_lo	= param->base_paddr_lo;
4344 	cmd->base_paddr_hi	= param->base_paddr_hi;
4345 	cmd->head_idx_paddr_lo	= param->head_idx_paddr_lo;
4346 	cmd->head_idx_paddr_hi	= param->head_idx_paddr_hi;
4347 	cmd->tail_idx_paddr_lo	= param->tail_idx_paddr_lo;
4348 	cmd->tail_idx_paddr_hi	= param->tail_idx_paddr_hi;
4349 	cmd->num_elems		= param->num_elems;
4350 	cmd->buf_size		= param->buf_size;
4351 	cmd->num_resp_per_event	= param->num_resp_per_event;
4352 	cmd->event_timeout_ms	= param->event_timeout_ms;
4353 
4354 	ret = ath11k_wmi_cmd_send(ar->wmi, skb,
4355 				  WMI_PDEV_DMA_RING_CFG_REQ_CMDID);
4356 	if (ret) {
4357 		ath11k_warn(ar->ab,
4358 			    "failed to send dma ring cfg req wmi cmd\n");
4359 		goto err;
4360 	}
4361 
4362 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
4363 		   "DMA ring cfg req cmd pdev_id 0x%x\n",
4364 		   param->pdev_id);
4365 
4366 	return 0;
4367 err:
4368 	dev_kfree_skb(skb);
4369 	return ret;
4370 }
4371 
4372 static int ath11k_wmi_tlv_dma_buf_entry_parse(struct ath11k_base *soc,
4373 					      u16 tag, u16 len,
4374 					      const void *ptr, void *data)
4375 {
4376 	struct wmi_tlv_dma_buf_release_parse *parse = data;
4377 
4378 	if (tag != WMI_TAG_DMA_BUF_RELEASE_ENTRY)
4379 		return -EPROTO;
4380 
4381 	if (parse->num_buf_entry >= parse->fixed.num_buf_release_entry)
4382 		return -ENOBUFS;
4383 
4384 	parse->num_buf_entry++;
4385 	return 0;
4386 }
4387 
4388 static int ath11k_wmi_tlv_dma_buf_meta_parse(struct ath11k_base *soc,
4389 					     u16 tag, u16 len,
4390 					     const void *ptr, void *data)
4391 {
4392 	struct wmi_tlv_dma_buf_release_parse *parse = data;
4393 
4394 	if (tag != WMI_TAG_DMA_BUF_RELEASE_SPECTRAL_META_DATA)
4395 		return -EPROTO;
4396 
4397 	if (parse->num_meta >= parse->fixed.num_meta_data_entry)
4398 		return -ENOBUFS;
4399 
4400 	parse->num_meta++;
4401 	return 0;
4402 }
4403 
4404 static int ath11k_wmi_tlv_dma_buf_parse(struct ath11k_base *ab,
4405 					u16 tag, u16 len,
4406 					const void *ptr, void *data)
4407 {
4408 	struct wmi_tlv_dma_buf_release_parse *parse = data;
4409 	int ret;
4410 
4411 	switch (tag) {
4412 	case WMI_TAG_DMA_BUF_RELEASE:
4413 		memcpy(&parse->fixed, ptr,
4414 		       sizeof(struct ath11k_wmi_dma_buf_release_fixed_param));
4415 		parse->fixed.pdev_id = DP_HW2SW_MACID(parse->fixed.pdev_id);
4416 		break;
4417 	case WMI_TAG_ARRAY_STRUCT:
4418 		if (!parse->buf_entry_done) {
4419 			parse->num_buf_entry = 0;
4420 			parse->buf_entry = (struct wmi_dma_buf_release_entry *)ptr;
4421 
4422 			ret = ath11k_wmi_tlv_iter(ab, ptr, len,
4423 						  ath11k_wmi_tlv_dma_buf_entry_parse,
4424 						  parse);
4425 			if (ret) {
4426 				ath11k_warn(ab, "failed to parse dma buf entry tlv %d\n",
4427 					    ret);
4428 				return ret;
4429 			}
4430 
4431 			parse->buf_entry_done = true;
4432 		} else if (!parse->meta_data_done) {
4433 			parse->num_meta = 0;
4434 			parse->meta_data = (struct wmi_dma_buf_release_meta_data *)ptr;
4435 
4436 			ret = ath11k_wmi_tlv_iter(ab, ptr, len,
4437 						  ath11k_wmi_tlv_dma_buf_meta_parse,
4438 						  parse);
4439 			if (ret) {
4440 				ath11k_warn(ab, "failed to parse dma buf meta tlv %d\n",
4441 					    ret);
4442 				return ret;
4443 			}
4444 
4445 			parse->meta_data_done = true;
4446 		}
4447 		break;
4448 	default:
4449 		break;
4450 	}
4451 	return 0;
4452 }
4453 
4454 static void ath11k_wmi_pdev_dma_ring_buf_release_event(struct ath11k_base *ab,
4455 						       struct sk_buff *skb)
4456 {
4457 	struct wmi_tlv_dma_buf_release_parse parse = { };
4458 	struct ath11k_dbring_buf_release_event param;
4459 	int ret;
4460 
4461 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
4462 				  ath11k_wmi_tlv_dma_buf_parse,
4463 				  &parse);
4464 	if (ret) {
4465 		ath11k_warn(ab, "failed to parse dma buf release tlv %d\n", ret);
4466 		return;
4467 	}
4468 
4469 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event pdev dma ring buf release");
4470 
4471 	param.fixed		= parse.fixed;
4472 	param.buf_entry		= parse.buf_entry;
4473 	param.num_buf_entry	= parse.num_buf_entry;
4474 	param.meta_data		= parse.meta_data;
4475 	param.num_meta		= parse.num_meta;
4476 
4477 	ret = ath11k_dbring_buffer_release_event(ab, &param);
4478 	if (ret) {
4479 		ath11k_warn(ab, "failed to handle dma buf release event %d\n", ret);
4480 		return;
4481 	}
4482 }
4483 
4484 static int ath11k_wmi_tlv_hw_mode_caps_parse(struct ath11k_base *soc,
4485 					     u16 tag, u16 len,
4486 					     const void *ptr, void *data)
4487 {
4488 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4489 	struct wmi_hw_mode_capabilities *hw_mode_cap;
4490 	u32 phy_map = 0;
4491 
4492 	if (tag != WMI_TAG_HW_MODE_CAPABILITIES)
4493 		return -EPROTO;
4494 
4495 	if (svc_rdy_ext->n_hw_mode_caps >= svc_rdy_ext->param.num_hw_modes)
4496 		return -ENOBUFS;
4497 
4498 	hw_mode_cap = container_of(ptr, struct wmi_hw_mode_capabilities,
4499 				   hw_mode_id);
4500 	svc_rdy_ext->n_hw_mode_caps++;
4501 
4502 	phy_map = hw_mode_cap->phy_id_map;
4503 	while (phy_map) {
4504 		svc_rdy_ext->tot_phy_id++;
4505 		phy_map = phy_map >> 1;
4506 	}
4507 
4508 	return 0;
4509 }
4510 
4511 static int ath11k_wmi_tlv_hw_mode_caps(struct ath11k_base *soc,
4512 				       u16 len, const void *ptr, void *data)
4513 {
4514 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4515 	struct wmi_hw_mode_capabilities *hw_mode_caps;
4516 	enum wmi_host_hw_mode_config_type mode, pref;
4517 	u32 i;
4518 	int ret;
4519 
4520 	svc_rdy_ext->n_hw_mode_caps = 0;
4521 	svc_rdy_ext->hw_mode_caps = (struct wmi_hw_mode_capabilities *)ptr;
4522 
4523 	ret = ath11k_wmi_tlv_iter(soc, ptr, len,
4524 				  ath11k_wmi_tlv_hw_mode_caps_parse,
4525 				  svc_rdy_ext);
4526 	if (ret) {
4527 		ath11k_warn(soc, "failed to parse tlv %d\n", ret);
4528 		return ret;
4529 	}
4530 
4531 	i = 0;
4532 	while (i < svc_rdy_ext->n_hw_mode_caps) {
4533 		hw_mode_caps = &svc_rdy_ext->hw_mode_caps[i];
4534 		mode = hw_mode_caps->hw_mode_id;
4535 		pref = soc->wmi_ab.preferred_hw_mode;
4536 
4537 		if (ath11k_hw_mode_pri_map[mode] < ath11k_hw_mode_pri_map[pref]) {
4538 			svc_rdy_ext->pref_hw_mode_caps = *hw_mode_caps;
4539 			soc->wmi_ab.preferred_hw_mode = mode;
4540 		}
4541 		i++;
4542 	}
4543 
4544 	ath11k_dbg(soc, ATH11K_DBG_WMI, "preferred_hw_mode:%d\n",
4545 		   soc->wmi_ab.preferred_hw_mode);
4546 	if (soc->wmi_ab.preferred_hw_mode == WMI_HOST_HW_MODE_MAX)
4547 		return -EINVAL;
4548 
4549 	return 0;
4550 }
4551 
4552 static int ath11k_wmi_tlv_mac_phy_caps_parse(struct ath11k_base *soc,
4553 					     u16 tag, u16 len,
4554 					     const void *ptr, void *data)
4555 {
4556 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4557 
4558 	if (tag != WMI_TAG_MAC_PHY_CAPABILITIES)
4559 		return -EPROTO;
4560 
4561 	if (svc_rdy_ext->n_mac_phy_caps >= svc_rdy_ext->tot_phy_id)
4562 		return -ENOBUFS;
4563 
4564 	len = min_t(u16, len, sizeof(struct wmi_mac_phy_capabilities));
4565 	if (!svc_rdy_ext->n_mac_phy_caps) {
4566 		svc_rdy_ext->mac_phy_caps = kcalloc(svc_rdy_ext->tot_phy_id,
4567 						    len, GFP_ATOMIC);
4568 		if (!svc_rdy_ext->mac_phy_caps)
4569 			return -ENOMEM;
4570 	}
4571 
4572 	memcpy(svc_rdy_ext->mac_phy_caps + svc_rdy_ext->n_mac_phy_caps, ptr, len);
4573 	svc_rdy_ext->n_mac_phy_caps++;
4574 	return 0;
4575 }
4576 
4577 static int ath11k_wmi_tlv_ext_hal_reg_caps_parse(struct ath11k_base *soc,
4578 						 u16 tag, u16 len,
4579 						 const void *ptr, void *data)
4580 {
4581 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4582 
4583 	if (tag != WMI_TAG_HAL_REG_CAPABILITIES_EXT)
4584 		return -EPROTO;
4585 
4586 	if (svc_rdy_ext->n_ext_hal_reg_caps >= svc_rdy_ext->param.num_phy)
4587 		return -ENOBUFS;
4588 
4589 	svc_rdy_ext->n_ext_hal_reg_caps++;
4590 	return 0;
4591 }
4592 
4593 static int ath11k_wmi_tlv_ext_hal_reg_caps(struct ath11k_base *soc,
4594 					   u16 len, const void *ptr, void *data)
4595 {
4596 	struct ath11k_pdev_wmi *wmi_handle = &soc->wmi_ab.wmi[0];
4597 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4598 	struct ath11k_hal_reg_capabilities_ext reg_cap;
4599 	int ret;
4600 	u32 i;
4601 
4602 	svc_rdy_ext->n_ext_hal_reg_caps = 0;
4603 	svc_rdy_ext->ext_hal_reg_caps = (struct wmi_hal_reg_capabilities_ext *)ptr;
4604 	ret = ath11k_wmi_tlv_iter(soc, ptr, len,
4605 				  ath11k_wmi_tlv_ext_hal_reg_caps_parse,
4606 				  svc_rdy_ext);
4607 	if (ret) {
4608 		ath11k_warn(soc, "failed to parse tlv %d\n", ret);
4609 		return ret;
4610 	}
4611 
4612 	for (i = 0; i < svc_rdy_ext->param.num_phy; i++) {
4613 		ret = ath11k_pull_reg_cap_svc_rdy_ext(wmi_handle,
4614 						      svc_rdy_ext->soc_hal_reg_caps,
4615 						      svc_rdy_ext->ext_hal_reg_caps, i,
4616 						      &reg_cap);
4617 		if (ret) {
4618 			ath11k_warn(soc, "failed to extract reg cap %d\n", i);
4619 			return ret;
4620 		}
4621 
4622 		memcpy(&soc->hal_reg_cap[reg_cap.phy_id],
4623 		       &reg_cap, sizeof(reg_cap));
4624 	}
4625 	return 0;
4626 }
4627 
4628 static int ath11k_wmi_tlv_ext_soc_hal_reg_caps_parse(struct ath11k_base *soc,
4629 						     u16 len, const void *ptr,
4630 						     void *data)
4631 {
4632 	struct ath11k_pdev_wmi *wmi_handle = &soc->wmi_ab.wmi[0];
4633 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4634 	u8 hw_mode_id = svc_rdy_ext->pref_hw_mode_caps.hw_mode_id;
4635 	u32 phy_id_map;
4636 	int pdev_index = 0;
4637 	int ret;
4638 
4639 	svc_rdy_ext->soc_hal_reg_caps = (struct wmi_soc_hal_reg_capabilities *)ptr;
4640 	svc_rdy_ext->param.num_phy = svc_rdy_ext->soc_hal_reg_caps->num_phy;
4641 
4642 	soc->num_radios = 0;
4643 	soc->target_pdev_count = 0;
4644 	phy_id_map = svc_rdy_ext->pref_hw_mode_caps.phy_id_map;
4645 
4646 	while (phy_id_map && soc->num_radios < MAX_RADIOS) {
4647 		ret = ath11k_pull_mac_phy_cap_svc_ready_ext(wmi_handle,
4648 							    svc_rdy_ext->hw_caps,
4649 							    svc_rdy_ext->hw_mode_caps,
4650 							    svc_rdy_ext->soc_hal_reg_caps,
4651 							    svc_rdy_ext->mac_phy_caps,
4652 							    hw_mode_id, soc->num_radios,
4653 							    &soc->pdevs[pdev_index]);
4654 		if (ret) {
4655 			ath11k_warn(soc, "failed to extract mac caps, idx :%d\n",
4656 				    soc->num_radios);
4657 			return ret;
4658 		}
4659 
4660 		soc->num_radios++;
4661 
4662 		/* For QCA6390, save mac_phy capability in the same pdev */
4663 		if (soc->hw_params.single_pdev_only)
4664 			pdev_index = 0;
4665 		else
4666 			pdev_index = soc->num_radios;
4667 
4668 		/* TODO: mac_phy_cap prints */
4669 		phy_id_map >>= 1;
4670 	}
4671 
4672 	/* For QCA6390, set num_radios to 1 because host manages
4673 	 * both 2G and 5G radio in one pdev.
4674 	 * Set pdev_id = 0 and 0 means soc level.
4675 	 */
4676 	if (soc->hw_params.single_pdev_only) {
4677 		soc->num_radios = 1;
4678 		soc->pdevs[0].pdev_id = 0;
4679 	}
4680 
4681 	return 0;
4682 }
4683 
4684 static int ath11k_wmi_tlv_dma_ring_caps_parse(struct ath11k_base *soc,
4685 					      u16 tag, u16 len,
4686 					      const void *ptr, void *data)
4687 {
4688 	struct wmi_tlv_dma_ring_caps_parse *parse = data;
4689 
4690 	if (tag != WMI_TAG_DMA_RING_CAPABILITIES)
4691 		return -EPROTO;
4692 
4693 	parse->n_dma_ring_caps++;
4694 	return 0;
4695 }
4696 
4697 static int ath11k_wmi_alloc_dbring_caps(struct ath11k_base *ab,
4698 					u32 num_cap)
4699 {
4700 	size_t sz;
4701 	void *ptr;
4702 
4703 	sz = num_cap * sizeof(struct ath11k_dbring_cap);
4704 	ptr = kzalloc(sz, GFP_ATOMIC);
4705 	if (!ptr)
4706 		return -ENOMEM;
4707 
4708 	ab->db_caps = ptr;
4709 	ab->num_db_cap = num_cap;
4710 
4711 	return 0;
4712 }
4713 
4714 static void ath11k_wmi_free_dbring_caps(struct ath11k_base *ab)
4715 {
4716 	kfree(ab->db_caps);
4717 	ab->db_caps = NULL;
4718 }
4719 
4720 static int ath11k_wmi_tlv_dma_ring_caps(struct ath11k_base *ab,
4721 					u16 len, const void *ptr, void *data)
4722 {
4723 	struct wmi_tlv_dma_ring_caps_parse *dma_caps_parse = data;
4724 	struct wmi_dma_ring_capabilities *dma_caps;
4725 	struct ath11k_dbring_cap *dir_buff_caps;
4726 	int ret;
4727 	u32 i;
4728 
4729 	dma_caps_parse->n_dma_ring_caps = 0;
4730 	dma_caps = (struct wmi_dma_ring_capabilities *)ptr;
4731 	ret = ath11k_wmi_tlv_iter(ab, ptr, len,
4732 				  ath11k_wmi_tlv_dma_ring_caps_parse,
4733 				  dma_caps_parse);
4734 	if (ret) {
4735 		ath11k_warn(ab, "failed to parse dma ring caps tlv %d\n", ret);
4736 		return ret;
4737 	}
4738 
4739 	if (!dma_caps_parse->n_dma_ring_caps)
4740 		return 0;
4741 
4742 	if (ab->num_db_cap) {
4743 		ath11k_warn(ab, "Already processed, so ignoring dma ring caps\n");
4744 		return 0;
4745 	}
4746 
4747 	ret = ath11k_wmi_alloc_dbring_caps(ab, dma_caps_parse->n_dma_ring_caps);
4748 	if (ret)
4749 		return ret;
4750 
4751 	dir_buff_caps = ab->db_caps;
4752 	for (i = 0; i < dma_caps_parse->n_dma_ring_caps; i++) {
4753 		if (dma_caps[i].module_id >= WMI_DIRECT_BUF_MAX) {
4754 			ath11k_warn(ab, "Invalid module id %d\n", dma_caps[i].module_id);
4755 			ret = -EINVAL;
4756 			goto free_dir_buff;
4757 		}
4758 
4759 		dir_buff_caps[i].id = dma_caps[i].module_id;
4760 		dir_buff_caps[i].pdev_id = DP_HW2SW_MACID(dma_caps[i].pdev_id);
4761 		dir_buff_caps[i].min_elem = dma_caps[i].min_elem;
4762 		dir_buff_caps[i].min_buf_sz = dma_caps[i].min_buf_sz;
4763 		dir_buff_caps[i].min_buf_align = dma_caps[i].min_buf_align;
4764 	}
4765 
4766 	return 0;
4767 
4768 free_dir_buff:
4769 	ath11k_wmi_free_dbring_caps(ab);
4770 	return ret;
4771 }
4772 
4773 static int ath11k_wmi_tlv_svc_rdy_ext_parse(struct ath11k_base *ab,
4774 					    u16 tag, u16 len,
4775 					    const void *ptr, void *data)
4776 {
4777 	struct ath11k_pdev_wmi *wmi_handle = &ab->wmi_ab.wmi[0];
4778 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4779 	int ret;
4780 
4781 	switch (tag) {
4782 	case WMI_TAG_SERVICE_READY_EXT_EVENT:
4783 		ret = ath11k_pull_svc_ready_ext(wmi_handle, ptr,
4784 						&svc_rdy_ext->param);
4785 		if (ret) {
4786 			ath11k_warn(ab, "unable to extract ext params\n");
4787 			return ret;
4788 		}
4789 		break;
4790 
4791 	case WMI_TAG_SOC_MAC_PHY_HW_MODE_CAPS:
4792 		svc_rdy_ext->hw_caps = (struct wmi_soc_mac_phy_hw_mode_caps *)ptr;
4793 		svc_rdy_ext->param.num_hw_modes = svc_rdy_ext->hw_caps->num_hw_modes;
4794 		break;
4795 
4796 	case WMI_TAG_SOC_HAL_REG_CAPABILITIES:
4797 		ret = ath11k_wmi_tlv_ext_soc_hal_reg_caps_parse(ab, len, ptr,
4798 								svc_rdy_ext);
4799 		if (ret)
4800 			return ret;
4801 		break;
4802 
4803 	case WMI_TAG_ARRAY_STRUCT:
4804 		if (!svc_rdy_ext->hw_mode_done) {
4805 			ret = ath11k_wmi_tlv_hw_mode_caps(ab, len, ptr,
4806 							  svc_rdy_ext);
4807 			if (ret)
4808 				return ret;
4809 
4810 			svc_rdy_ext->hw_mode_done = true;
4811 		} else if (!svc_rdy_ext->mac_phy_done) {
4812 			svc_rdy_ext->n_mac_phy_caps = 0;
4813 			ret = ath11k_wmi_tlv_iter(ab, ptr, len,
4814 						  ath11k_wmi_tlv_mac_phy_caps_parse,
4815 						  svc_rdy_ext);
4816 			if (ret) {
4817 				ath11k_warn(ab, "failed to parse tlv %d\n", ret);
4818 				return ret;
4819 			}
4820 
4821 			svc_rdy_ext->mac_phy_done = true;
4822 		} else if (!svc_rdy_ext->ext_hal_reg_done) {
4823 			ret = ath11k_wmi_tlv_ext_hal_reg_caps(ab, len, ptr,
4824 							      svc_rdy_ext);
4825 			if (ret)
4826 				return ret;
4827 
4828 			svc_rdy_ext->ext_hal_reg_done = true;
4829 		} else if (!svc_rdy_ext->mac_phy_chainmask_combo_done) {
4830 			svc_rdy_ext->mac_phy_chainmask_combo_done = true;
4831 		} else if (!svc_rdy_ext->mac_phy_chainmask_cap_done) {
4832 			svc_rdy_ext->mac_phy_chainmask_cap_done = true;
4833 		} else if (!svc_rdy_ext->oem_dma_ring_cap_done) {
4834 			svc_rdy_ext->oem_dma_ring_cap_done = true;
4835 		} else if (!svc_rdy_ext->dma_ring_cap_done) {
4836 			ret = ath11k_wmi_tlv_dma_ring_caps(ab, len, ptr,
4837 							   &svc_rdy_ext->dma_caps_parse);
4838 			if (ret)
4839 				return ret;
4840 
4841 			svc_rdy_ext->dma_ring_cap_done = true;
4842 		}
4843 		break;
4844 
4845 	default:
4846 		break;
4847 	}
4848 	return 0;
4849 }
4850 
4851 static int ath11k_service_ready_ext_event(struct ath11k_base *ab,
4852 					  struct sk_buff *skb)
4853 {
4854 	struct wmi_tlv_svc_rdy_ext_parse svc_rdy_ext = { };
4855 	int ret;
4856 
4857 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
4858 				  ath11k_wmi_tlv_svc_rdy_ext_parse,
4859 				  &svc_rdy_ext);
4860 	if (ret) {
4861 		ath11k_warn(ab, "failed to parse tlv %d\n", ret);
4862 		goto err;
4863 	}
4864 
4865 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event service ready ext");
4866 
4867 	if (!test_bit(WMI_TLV_SERVICE_EXT2_MSG, ab->wmi_ab.svc_map))
4868 		complete(&ab->wmi_ab.service_ready);
4869 
4870 	kfree(svc_rdy_ext.mac_phy_caps);
4871 	return 0;
4872 
4873 err:
4874 	ath11k_wmi_free_dbring_caps(ab);
4875 	return ret;
4876 }
4877 
4878 static int ath11k_wmi_tlv_svc_rdy_ext2_parse(struct ath11k_base *ab,
4879 					     u16 tag, u16 len,
4880 					     const void *ptr, void *data)
4881 {
4882 	struct wmi_tlv_svc_rdy_ext2_parse *parse = data;
4883 	int ret;
4884 
4885 	switch (tag) {
4886 	case WMI_TAG_ARRAY_STRUCT:
4887 		if (!parse->dma_ring_cap_done) {
4888 			ret = ath11k_wmi_tlv_dma_ring_caps(ab, len, ptr,
4889 							   &parse->dma_caps_parse);
4890 			if (ret)
4891 				return ret;
4892 
4893 			parse->dma_ring_cap_done = true;
4894 		}
4895 		break;
4896 	default:
4897 		break;
4898 	}
4899 
4900 	return 0;
4901 }
4902 
4903 static int ath11k_service_ready_ext2_event(struct ath11k_base *ab,
4904 					   struct sk_buff *skb)
4905 {
4906 	struct wmi_tlv_svc_rdy_ext2_parse svc_rdy_ext2 = { };
4907 	int ret;
4908 
4909 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
4910 				  ath11k_wmi_tlv_svc_rdy_ext2_parse,
4911 				  &svc_rdy_ext2);
4912 	if (ret) {
4913 		ath11k_warn(ab, "failed to parse ext2 event tlv %d\n", ret);
4914 		goto err;
4915 	}
4916 
4917 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event service ready ext2");
4918 
4919 	complete(&ab->wmi_ab.service_ready);
4920 
4921 	return 0;
4922 
4923 err:
4924 	ath11k_wmi_free_dbring_caps(ab);
4925 	return ret;
4926 }
4927 
4928 static int ath11k_pull_vdev_start_resp_tlv(struct ath11k_base *ab, struct sk_buff *skb,
4929 					   struct wmi_vdev_start_resp_event *vdev_rsp)
4930 {
4931 	const void **tb;
4932 	const struct wmi_vdev_start_resp_event *ev;
4933 	int ret;
4934 
4935 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4936 	if (IS_ERR(tb)) {
4937 		ret = PTR_ERR(tb);
4938 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4939 		return ret;
4940 	}
4941 
4942 	ev = tb[WMI_TAG_VDEV_START_RESPONSE_EVENT];
4943 	if (!ev) {
4944 		ath11k_warn(ab, "failed to fetch vdev start resp ev");
4945 		kfree(tb);
4946 		return -EPROTO;
4947 	}
4948 
4949 	memset(vdev_rsp, 0, sizeof(*vdev_rsp));
4950 
4951 	vdev_rsp->vdev_id = ev->vdev_id;
4952 	vdev_rsp->requestor_id = ev->requestor_id;
4953 	vdev_rsp->resp_type = ev->resp_type;
4954 	vdev_rsp->status = ev->status;
4955 	vdev_rsp->chain_mask = ev->chain_mask;
4956 	vdev_rsp->smps_mode = ev->smps_mode;
4957 	vdev_rsp->mac_id = ev->mac_id;
4958 	vdev_rsp->cfgd_tx_streams = ev->cfgd_tx_streams;
4959 	vdev_rsp->cfgd_rx_streams = ev->cfgd_rx_streams;
4960 
4961 	kfree(tb);
4962 	return 0;
4963 }
4964 
4965 static void ath11k_print_reg_rule(struct ath11k_base *ab, const char *band,
4966 				  u32 num_reg_rules,
4967 				  struct cur_reg_rule *reg_rule_ptr)
4968 {
4969 	struct cur_reg_rule *reg_rule = reg_rule_ptr;
4970 	u32 count;
4971 
4972 	ath11k_dbg(ab, ATH11K_DBG_WMI, "number of reg rules in %s band: %d\n",
4973 		   band, num_reg_rules);
4974 
4975 	for (count = 0; count < num_reg_rules; count++) {
4976 		ath11k_dbg(ab, ATH11K_DBG_WMI,
4977 			   "reg rule %d: (%d - %d @ %d) (%d, %d) (FLAGS %d)\n",
4978 			   count + 1, reg_rule->start_freq, reg_rule->end_freq,
4979 			   reg_rule->max_bw, reg_rule->ant_gain,
4980 			   reg_rule->reg_power, reg_rule->flags);
4981 		reg_rule++;
4982 	}
4983 }
4984 
4985 static struct cur_reg_rule
4986 *create_reg_rules_from_wmi(u32 num_reg_rules,
4987 			   struct wmi_regulatory_rule_struct *wmi_reg_rule)
4988 {
4989 	struct cur_reg_rule *reg_rule_ptr;
4990 	u32 count;
4991 
4992 	reg_rule_ptr = kcalloc(num_reg_rules, sizeof(*reg_rule_ptr),
4993 			       GFP_ATOMIC);
4994 
4995 	if (!reg_rule_ptr)
4996 		return NULL;
4997 
4998 	for (count = 0; count < num_reg_rules; count++) {
4999 		reg_rule_ptr[count].start_freq =
5000 			FIELD_GET(REG_RULE_START_FREQ,
5001 				  wmi_reg_rule[count].freq_info);
5002 		reg_rule_ptr[count].end_freq =
5003 			FIELD_GET(REG_RULE_END_FREQ,
5004 				  wmi_reg_rule[count].freq_info);
5005 		reg_rule_ptr[count].max_bw =
5006 			FIELD_GET(REG_RULE_MAX_BW,
5007 				  wmi_reg_rule[count].bw_pwr_info);
5008 		reg_rule_ptr[count].reg_power =
5009 			FIELD_GET(REG_RULE_REG_PWR,
5010 				  wmi_reg_rule[count].bw_pwr_info);
5011 		reg_rule_ptr[count].ant_gain =
5012 			FIELD_GET(REG_RULE_ANT_GAIN,
5013 				  wmi_reg_rule[count].bw_pwr_info);
5014 		reg_rule_ptr[count].flags =
5015 			FIELD_GET(REG_RULE_FLAGS,
5016 				  wmi_reg_rule[count].flag_info);
5017 	}
5018 
5019 	return reg_rule_ptr;
5020 }
5021 
5022 static int ath11k_pull_reg_chan_list_update_ev(struct ath11k_base *ab,
5023 					       struct sk_buff *skb,
5024 					       struct cur_regulatory_info *reg_info)
5025 {
5026 	const void **tb;
5027 	const struct wmi_reg_chan_list_cc_event *chan_list_event_hdr;
5028 	struct wmi_regulatory_rule_struct *wmi_reg_rule;
5029 	u32 num_2ghz_reg_rules, num_5ghz_reg_rules;
5030 	int ret;
5031 
5032 	ath11k_dbg(ab, ATH11K_DBG_WMI, "processing regulatory channel list\n");
5033 
5034 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5035 	if (IS_ERR(tb)) {
5036 		ret = PTR_ERR(tb);
5037 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5038 		return ret;
5039 	}
5040 
5041 	chan_list_event_hdr = tb[WMI_TAG_REG_CHAN_LIST_CC_EVENT];
5042 	if (!chan_list_event_hdr) {
5043 		ath11k_warn(ab, "failed to fetch reg chan list update ev\n");
5044 		kfree(tb);
5045 		return -EPROTO;
5046 	}
5047 
5048 	reg_info->num_2ghz_reg_rules = chan_list_event_hdr->num_2ghz_reg_rules;
5049 	reg_info->num_5ghz_reg_rules = chan_list_event_hdr->num_5ghz_reg_rules;
5050 
5051 	if (!(reg_info->num_2ghz_reg_rules + reg_info->num_5ghz_reg_rules)) {
5052 		ath11k_warn(ab, "No regulatory rules available in the event info\n");
5053 		kfree(tb);
5054 		return -EINVAL;
5055 	}
5056 
5057 	memcpy(reg_info->alpha2, &chan_list_event_hdr->alpha2,
5058 	       REG_ALPHA2_LEN);
5059 	reg_info->dfs_region = chan_list_event_hdr->dfs_region;
5060 	reg_info->phybitmap = chan_list_event_hdr->phybitmap;
5061 	reg_info->num_phy = chan_list_event_hdr->num_phy;
5062 	reg_info->phy_id = chan_list_event_hdr->phy_id;
5063 	reg_info->ctry_code = chan_list_event_hdr->country_id;
5064 	reg_info->reg_dmn_pair = chan_list_event_hdr->domain_code;
5065 
5066 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5067 		   "status_code %s",
5068 		   ath11k_cc_status_to_str(reg_info->status_code));
5069 
5070 	reg_info->status_code =
5071 		ath11k_wmi_cc_setting_code_to_reg(chan_list_event_hdr->status_code);
5072 
5073 	reg_info->is_ext_reg_event = false;
5074 
5075 	reg_info->min_bw_2ghz = chan_list_event_hdr->min_bw_2ghz;
5076 	reg_info->max_bw_2ghz = chan_list_event_hdr->max_bw_2ghz;
5077 	reg_info->min_bw_5ghz = chan_list_event_hdr->min_bw_5ghz;
5078 	reg_info->max_bw_5ghz = chan_list_event_hdr->max_bw_5ghz;
5079 
5080 	num_2ghz_reg_rules = reg_info->num_2ghz_reg_rules;
5081 	num_5ghz_reg_rules = reg_info->num_5ghz_reg_rules;
5082 
5083 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5084 		   "cc %s dsf %d BW: min_2ghz %d max_2ghz %d min_5ghz %d max_5ghz %d",
5085 		   reg_info->alpha2, reg_info->dfs_region,
5086 		   reg_info->min_bw_2ghz, reg_info->max_bw_2ghz,
5087 		   reg_info->min_bw_5ghz, reg_info->max_bw_5ghz);
5088 
5089 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5090 		   "num_2ghz_reg_rules %d num_5ghz_reg_rules %d",
5091 		   num_2ghz_reg_rules, num_5ghz_reg_rules);
5092 
5093 	wmi_reg_rule =
5094 		(struct wmi_regulatory_rule_struct *)((u8 *)chan_list_event_hdr
5095 						+ sizeof(*chan_list_event_hdr)
5096 						+ sizeof(struct wmi_tlv));
5097 
5098 	if (num_2ghz_reg_rules) {
5099 		reg_info->reg_rules_2ghz_ptr =
5100 				create_reg_rules_from_wmi(num_2ghz_reg_rules,
5101 							  wmi_reg_rule);
5102 		if (!reg_info->reg_rules_2ghz_ptr) {
5103 			kfree(tb);
5104 			ath11k_warn(ab, "Unable to Allocate memory for 2 GHz rules\n");
5105 			return -ENOMEM;
5106 		}
5107 
5108 		ath11k_print_reg_rule(ab, "2 GHz",
5109 				      num_2ghz_reg_rules,
5110 				      reg_info->reg_rules_2ghz_ptr);
5111 	}
5112 
5113 	if (num_5ghz_reg_rules) {
5114 		wmi_reg_rule += num_2ghz_reg_rules;
5115 		reg_info->reg_rules_5ghz_ptr =
5116 				create_reg_rules_from_wmi(num_5ghz_reg_rules,
5117 							  wmi_reg_rule);
5118 		if (!reg_info->reg_rules_5ghz_ptr) {
5119 			kfree(tb);
5120 			ath11k_warn(ab, "Unable to Allocate memory for 5 GHz rules\n");
5121 			return -ENOMEM;
5122 		}
5123 
5124 		ath11k_print_reg_rule(ab, "5 GHz",
5125 				      num_5ghz_reg_rules,
5126 				      reg_info->reg_rules_5ghz_ptr);
5127 	}
5128 
5129 	ath11k_dbg(ab, ATH11K_DBG_WMI, "processed regulatory channel list\n");
5130 
5131 	kfree(tb);
5132 	return 0;
5133 }
5134 
5135 static struct cur_reg_rule
5136 *create_ext_reg_rules_from_wmi(u32 num_reg_rules,
5137 			       struct wmi_regulatory_ext_rule *wmi_reg_rule)
5138 {
5139 	struct cur_reg_rule *reg_rule_ptr;
5140 	u32 count;
5141 
5142 	reg_rule_ptr =  kcalloc(num_reg_rules, sizeof(*reg_rule_ptr), GFP_ATOMIC);
5143 
5144 	if (!reg_rule_ptr)
5145 		return NULL;
5146 
5147 	for (count = 0; count < num_reg_rules; count++) {
5148 		reg_rule_ptr[count].start_freq =
5149 			u32_get_bits(wmi_reg_rule[count].freq_info,
5150 				     REG_RULE_START_FREQ);
5151 		reg_rule_ptr[count].end_freq =
5152 			u32_get_bits(wmi_reg_rule[count].freq_info,
5153 				     REG_RULE_END_FREQ);
5154 		reg_rule_ptr[count].max_bw =
5155 			u32_get_bits(wmi_reg_rule[count].bw_pwr_info,
5156 				     REG_RULE_MAX_BW);
5157 		reg_rule_ptr[count].reg_power =
5158 			u32_get_bits(wmi_reg_rule[count].bw_pwr_info,
5159 				     REG_RULE_REG_PWR);
5160 		reg_rule_ptr[count].ant_gain =
5161 			u32_get_bits(wmi_reg_rule[count].bw_pwr_info,
5162 				     REG_RULE_ANT_GAIN);
5163 		reg_rule_ptr[count].flags =
5164 			u32_get_bits(wmi_reg_rule[count].flag_info,
5165 				     REG_RULE_FLAGS);
5166 		reg_rule_ptr[count].psd_flag =
5167 			u32_get_bits(wmi_reg_rule[count].psd_power_info,
5168 				     REG_RULE_PSD_INFO);
5169 		reg_rule_ptr[count].psd_eirp =
5170 			u32_get_bits(wmi_reg_rule[count].psd_power_info,
5171 				     REG_RULE_PSD_EIRP);
5172 	}
5173 
5174 	return reg_rule_ptr;
5175 }
5176 
5177 static u8
5178 ath11k_invalid_5ghz_reg_ext_rules_from_wmi(u32 num_reg_rules,
5179 					   const struct wmi_regulatory_ext_rule *rule)
5180 {
5181 	u8 num_invalid_5ghz_rules = 0;
5182 	u32 count, start_freq;
5183 
5184 	for (count = 0; count < num_reg_rules; count++) {
5185 		start_freq = u32_get_bits(rule[count].freq_info,
5186 					  REG_RULE_START_FREQ);
5187 
5188 		if (start_freq >= ATH11K_MIN_6G_FREQ)
5189 			num_invalid_5ghz_rules++;
5190 	}
5191 
5192 	return num_invalid_5ghz_rules;
5193 }
5194 
5195 static int ath11k_pull_reg_chan_list_ext_update_ev(struct ath11k_base *ab,
5196 						   struct sk_buff *skb,
5197 						   struct cur_regulatory_info *reg_info)
5198 {
5199 	const void **tb;
5200 	const struct wmi_reg_chan_list_cc_ext_event *ev;
5201 	struct wmi_regulatory_ext_rule *ext_wmi_reg_rule;
5202 	u32 num_2ghz_reg_rules, num_5ghz_reg_rules;
5203 	u32 num_6ghz_reg_rules_ap[WMI_REG_CURRENT_MAX_AP_TYPE];
5204 	u32 num_6ghz_client[WMI_REG_CURRENT_MAX_AP_TYPE][WMI_REG_MAX_CLIENT_TYPE];
5205 	u32 total_reg_rules = 0;
5206 	int ret, i, j, num_invalid_5ghz_ext_rules = 0;
5207 
5208 	ath11k_dbg(ab, ATH11K_DBG_WMI, "processing regulatory ext channel list\n");
5209 
5210 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5211 	if (IS_ERR(tb)) {
5212 		ret = PTR_ERR(tb);
5213 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5214 		return ret;
5215 	}
5216 
5217 	ev = tb[WMI_TAG_REG_CHAN_LIST_CC_EXT_EVENT];
5218 	if (!ev) {
5219 		ath11k_warn(ab, "failed to fetch reg chan list ext update ev\n");
5220 		kfree(tb);
5221 		return -EPROTO;
5222 	}
5223 
5224 	reg_info->num_2ghz_reg_rules = ev->num_2ghz_reg_rules;
5225 	reg_info->num_5ghz_reg_rules = ev->num_5ghz_reg_rules;
5226 	reg_info->num_6ghz_rules_ap[WMI_REG_INDOOR_AP] =
5227 			ev->num_6ghz_reg_rules_ap_lpi;
5228 	reg_info->num_6ghz_rules_ap[WMI_REG_STANDARD_POWER_AP] =
5229 			ev->num_6ghz_reg_rules_ap_sp;
5230 	reg_info->num_6ghz_rules_ap[WMI_REG_VERY_LOW_POWER_AP] =
5231 			ev->num_6ghz_reg_rules_ap_vlp;
5232 
5233 	for (i = 0; i < WMI_REG_MAX_CLIENT_TYPE; i++) {
5234 		reg_info->num_6ghz_rules_client[WMI_REG_INDOOR_AP][i] =
5235 			ev->num_6ghz_reg_rules_client_lpi[i];
5236 		reg_info->num_6ghz_rules_client[WMI_REG_STANDARD_POWER_AP][i] =
5237 			ev->num_6ghz_reg_rules_client_sp[i];
5238 		reg_info->num_6ghz_rules_client[WMI_REG_VERY_LOW_POWER_AP][i] =
5239 			ev->num_6ghz_reg_rules_client_vlp[i];
5240 	}
5241 
5242 	num_2ghz_reg_rules = reg_info->num_2ghz_reg_rules;
5243 	num_5ghz_reg_rules = reg_info->num_5ghz_reg_rules;
5244 
5245 	total_reg_rules += num_2ghz_reg_rules;
5246 	total_reg_rules += num_5ghz_reg_rules;
5247 
5248 	if ((num_2ghz_reg_rules > MAX_REG_RULES) ||
5249 	    (num_5ghz_reg_rules > MAX_REG_RULES)) {
5250 		ath11k_warn(ab, "Num reg rules for 2.4 GHz/5 GHz exceeds max limit (num_2ghz_reg_rules: %d num_5ghz_reg_rules: %d max_rules: %d)\n",
5251 			    num_2ghz_reg_rules, num_5ghz_reg_rules, MAX_REG_RULES);
5252 		kfree(tb);
5253 		return -EINVAL;
5254 	}
5255 
5256 	for (i = 0; i < WMI_REG_CURRENT_MAX_AP_TYPE; i++) {
5257 		num_6ghz_reg_rules_ap[i] = reg_info->num_6ghz_rules_ap[i];
5258 
5259 		if (num_6ghz_reg_rules_ap[i] > MAX_6GHZ_REG_RULES) {
5260 			ath11k_warn(ab, "Num 6 GHz reg rules for AP mode(%d) exceeds max limit (num_6ghz_reg_rules_ap: %d, max_rules: %d)\n",
5261 				    i, num_6ghz_reg_rules_ap[i], MAX_6GHZ_REG_RULES);
5262 			kfree(tb);
5263 			return -EINVAL;
5264 		}
5265 
5266 		total_reg_rules += num_6ghz_reg_rules_ap[i];
5267 	}
5268 
5269 	for (i = 0; i < WMI_REG_MAX_CLIENT_TYPE; i++) {
5270 		num_6ghz_client[WMI_REG_INDOOR_AP][i] =
5271 			reg_info->num_6ghz_rules_client[WMI_REG_INDOOR_AP][i];
5272 		total_reg_rules += num_6ghz_client[WMI_REG_INDOOR_AP][i];
5273 
5274 		num_6ghz_client[WMI_REG_STANDARD_POWER_AP][i] =
5275 			reg_info->num_6ghz_rules_client[WMI_REG_STANDARD_POWER_AP][i];
5276 		total_reg_rules += num_6ghz_client[WMI_REG_STANDARD_POWER_AP][i];
5277 
5278 		num_6ghz_client[WMI_REG_VERY_LOW_POWER_AP][i] =
5279 			reg_info->num_6ghz_rules_client[WMI_REG_VERY_LOW_POWER_AP][i];
5280 		total_reg_rules += num_6ghz_client[WMI_REG_VERY_LOW_POWER_AP][i];
5281 
5282 		if ((num_6ghz_client[WMI_REG_INDOOR_AP][i] > MAX_6GHZ_REG_RULES) ||
5283 		    (num_6ghz_client[WMI_REG_STANDARD_POWER_AP][i] >
5284 							     MAX_6GHZ_REG_RULES) ||
5285 		    (num_6ghz_client[WMI_REG_VERY_LOW_POWER_AP][i] >
5286 							     MAX_6GHZ_REG_RULES)) {
5287 			ath11k_warn(ab,
5288 				    "Num 6 GHz client reg rules exceeds max limit, for client(type: %d)\n",
5289 				    i);
5290 			kfree(tb);
5291 			return -EINVAL;
5292 		}
5293 	}
5294 
5295 	if (!total_reg_rules) {
5296 		ath11k_warn(ab, "No reg rules available\n");
5297 		kfree(tb);
5298 		return -EINVAL;
5299 	}
5300 
5301 	memcpy(reg_info->alpha2, &ev->alpha2, REG_ALPHA2_LEN);
5302 
5303 	reg_info->dfs_region = ev->dfs_region;
5304 	reg_info->phybitmap = ev->phybitmap;
5305 	reg_info->num_phy = ev->num_phy;
5306 	reg_info->phy_id = ev->phy_id;
5307 	reg_info->ctry_code = ev->country_id;
5308 	reg_info->reg_dmn_pair = ev->domain_code;
5309 
5310 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5311 		   "status_code %s",
5312 		   ath11k_cc_status_to_str(reg_info->status_code));
5313 
5314 	reg_info->status_code =
5315 		ath11k_wmi_cc_setting_code_to_reg(ev->status_code);
5316 
5317 	reg_info->is_ext_reg_event = true;
5318 
5319 	reg_info->min_bw_2ghz = ev->min_bw_2ghz;
5320 	reg_info->max_bw_2ghz = ev->max_bw_2ghz;
5321 	reg_info->min_bw_5ghz = ev->min_bw_5ghz;
5322 	reg_info->max_bw_5ghz = ev->max_bw_5ghz;
5323 
5324 	reg_info->min_bw_6ghz_ap[WMI_REG_INDOOR_AP] =
5325 			ev->min_bw_6ghz_ap_lpi;
5326 	reg_info->max_bw_6ghz_ap[WMI_REG_INDOOR_AP] =
5327 			ev->max_bw_6ghz_ap_lpi;
5328 	reg_info->min_bw_6ghz_ap[WMI_REG_STANDARD_POWER_AP] =
5329 			ev->min_bw_6ghz_ap_sp;
5330 	reg_info->max_bw_6ghz_ap[WMI_REG_STANDARD_POWER_AP] =
5331 			ev->max_bw_6ghz_ap_sp;
5332 	reg_info->min_bw_6ghz_ap[WMI_REG_VERY_LOW_POWER_AP] =
5333 			ev->min_bw_6ghz_ap_vlp;
5334 	reg_info->max_bw_6ghz_ap[WMI_REG_VERY_LOW_POWER_AP] =
5335 			ev->max_bw_6ghz_ap_vlp;
5336 
5337 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5338 		   "6 GHz AP BW: LPI (%d - %d), SP (%d - %d), VLP (%d - %d)\n",
5339 		   reg_info->min_bw_6ghz_ap[WMI_REG_INDOOR_AP],
5340 		   reg_info->max_bw_6ghz_ap[WMI_REG_INDOOR_AP],
5341 		   reg_info->min_bw_6ghz_ap[WMI_REG_STANDARD_POWER_AP],
5342 		   reg_info->max_bw_6ghz_ap[WMI_REG_STANDARD_POWER_AP],
5343 		   reg_info->min_bw_6ghz_ap[WMI_REG_VERY_LOW_POWER_AP],
5344 		   reg_info->max_bw_6ghz_ap[WMI_REG_VERY_LOW_POWER_AP]);
5345 
5346 	for (i = 0; i < WMI_REG_MAX_CLIENT_TYPE; i++) {
5347 		reg_info->min_bw_6ghz_client[WMI_REG_INDOOR_AP][i] =
5348 				ev->min_bw_6ghz_client_lpi[i];
5349 		reg_info->max_bw_6ghz_client[WMI_REG_INDOOR_AP][i] =
5350 				ev->max_bw_6ghz_client_lpi[i];
5351 		reg_info->min_bw_6ghz_client[WMI_REG_STANDARD_POWER_AP][i] =
5352 				ev->min_bw_6ghz_client_sp[i];
5353 		reg_info->max_bw_6ghz_client[WMI_REG_STANDARD_POWER_AP][i] =
5354 				ev->max_bw_6ghz_client_sp[i];
5355 		reg_info->min_bw_6ghz_client[WMI_REG_VERY_LOW_POWER_AP][i] =
5356 				ev->min_bw_6ghz_client_vlp[i];
5357 		reg_info->max_bw_6ghz_client[WMI_REG_VERY_LOW_POWER_AP][i] =
5358 				ev->max_bw_6ghz_client_vlp[i];
5359 
5360 		ath11k_dbg(ab, ATH11K_DBG_WMI,
5361 			   "6 GHz %s BW: LPI (%d - %d), SP (%d - %d), VLP (%d - %d)\n",
5362 			   ath11k_6ghz_client_type_to_str(i),
5363 			   reg_info->min_bw_6ghz_client[WMI_REG_INDOOR_AP][i],
5364 			   reg_info->max_bw_6ghz_client[WMI_REG_INDOOR_AP][i],
5365 			   reg_info->min_bw_6ghz_client[WMI_REG_STANDARD_POWER_AP][i],
5366 			   reg_info->max_bw_6ghz_client[WMI_REG_STANDARD_POWER_AP][i],
5367 			   reg_info->min_bw_6ghz_client[WMI_REG_VERY_LOW_POWER_AP][i],
5368 			   reg_info->max_bw_6ghz_client[WMI_REG_VERY_LOW_POWER_AP][i]);
5369 	}
5370 
5371 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5372 		   "cc_ext %s dsf %d BW: min_2ghz %d max_2ghz %d min_5ghz %d max_5ghz %d",
5373 		   reg_info->alpha2, reg_info->dfs_region,
5374 		   reg_info->min_bw_2ghz, reg_info->max_bw_2ghz,
5375 		   reg_info->min_bw_5ghz, reg_info->max_bw_5ghz);
5376 
5377 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5378 		   "num_2ghz_reg_rules %d num_5ghz_reg_rules %d",
5379 		   num_2ghz_reg_rules, num_5ghz_reg_rules);
5380 
5381 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5382 		   "num_6ghz_reg_rules_ap_lpi: %d num_6ghz_reg_rules_ap_sp: %d num_6ghz_reg_rules_ap_vlp: %d",
5383 		   num_6ghz_reg_rules_ap[WMI_REG_INDOOR_AP],
5384 		   num_6ghz_reg_rules_ap[WMI_REG_STANDARD_POWER_AP],
5385 		   num_6ghz_reg_rules_ap[WMI_REG_VERY_LOW_POWER_AP]);
5386 
5387 	j = WMI_REG_DEFAULT_CLIENT;
5388 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5389 		   "6 GHz Regular client: num_6ghz_reg_rules_lpi: %d num_6ghz_reg_rules_sp: %d num_6ghz_reg_rules_vlp: %d",
5390 		   num_6ghz_client[WMI_REG_INDOOR_AP][j],
5391 		   num_6ghz_client[WMI_REG_STANDARD_POWER_AP][j],
5392 		   num_6ghz_client[WMI_REG_VERY_LOW_POWER_AP][j]);
5393 
5394 	j = WMI_REG_SUBORDINATE_CLIENT;
5395 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5396 		   "6 GHz Subordinate client: num_6ghz_reg_rules_lpi: %d num_6ghz_reg_rules_sp: %d num_6ghz_reg_rules_vlp: %d",
5397 		   num_6ghz_client[WMI_REG_INDOOR_AP][j],
5398 		   num_6ghz_client[WMI_REG_STANDARD_POWER_AP][j],
5399 		   num_6ghz_client[WMI_REG_VERY_LOW_POWER_AP][j]);
5400 
5401 	ext_wmi_reg_rule =
5402 		(struct wmi_regulatory_ext_rule *)((u8 *)ev + sizeof(*ev) +
5403 						   sizeof(struct wmi_tlv));
5404 	if (num_2ghz_reg_rules) {
5405 		reg_info->reg_rules_2ghz_ptr =
5406 			create_ext_reg_rules_from_wmi(num_2ghz_reg_rules,
5407 						      ext_wmi_reg_rule);
5408 
5409 		if (!reg_info->reg_rules_2ghz_ptr) {
5410 			kfree(tb);
5411 			ath11k_warn(ab, "Unable to Allocate memory for 2 GHz rules\n");
5412 			return -ENOMEM;
5413 		}
5414 
5415 		ath11k_print_reg_rule(ab, "2 GHz",
5416 				      num_2ghz_reg_rules,
5417 				      reg_info->reg_rules_2ghz_ptr);
5418 	}
5419 
5420 	ext_wmi_reg_rule += num_2ghz_reg_rules;
5421 
5422 	/* Firmware might include 6 GHz reg rule in 5 GHz rule list
5423 	 * for few countries along with separate 6 GHz rule.
5424 	 * Having same 6 GHz reg rule in 5 GHz and 6 GHz rules list
5425 	 * causes intersect check to be true, and same rules will be
5426 	 * shown multiple times in iw cmd.
5427 	 * Hence, avoid parsing 6 GHz rule from 5 GHz reg rule list
5428 	 */
5429 	num_invalid_5ghz_ext_rules =
5430 		ath11k_invalid_5ghz_reg_ext_rules_from_wmi(num_5ghz_reg_rules,
5431 							   ext_wmi_reg_rule);
5432 
5433 	if (num_invalid_5ghz_ext_rules) {
5434 		ath11k_dbg(ab, ATH11K_DBG_WMI,
5435 			   "CC: %s 5 GHz reg rules number %d from fw, %d number of invalid 5 GHz rules",
5436 			   reg_info->alpha2, reg_info->num_5ghz_reg_rules,
5437 			   num_invalid_5ghz_ext_rules);
5438 
5439 		num_5ghz_reg_rules = num_5ghz_reg_rules - num_invalid_5ghz_ext_rules;
5440 		reg_info->num_5ghz_reg_rules = num_5ghz_reg_rules;
5441 	}
5442 
5443 	if (num_5ghz_reg_rules) {
5444 		reg_info->reg_rules_5ghz_ptr =
5445 			create_ext_reg_rules_from_wmi(num_5ghz_reg_rules,
5446 						      ext_wmi_reg_rule);
5447 
5448 		if (!reg_info->reg_rules_5ghz_ptr) {
5449 			kfree(tb);
5450 			ath11k_warn(ab, "Unable to Allocate memory for 5 GHz rules\n");
5451 			return -ENOMEM;
5452 		}
5453 
5454 		ath11k_print_reg_rule(ab, "5 GHz",
5455 				      num_5ghz_reg_rules,
5456 				      reg_info->reg_rules_5ghz_ptr);
5457 	}
5458 
5459 	/* We have adjusted the number of 5 GHz reg rules above. But still those
5460 	 * many rules needs to be adjusted in ext_wmi_reg_rule.
5461 	 *
5462 	 * NOTE: num_invalid_5ghz_ext_rules will be 0 for rest other cases.
5463 	 */
5464 	ext_wmi_reg_rule += (num_5ghz_reg_rules + num_invalid_5ghz_ext_rules);
5465 
5466 	for (i = 0; i < WMI_REG_CURRENT_MAX_AP_TYPE; i++) {
5467 		reg_info->reg_rules_6ghz_ap_ptr[i] =
5468 			create_ext_reg_rules_from_wmi(num_6ghz_reg_rules_ap[i],
5469 						      ext_wmi_reg_rule);
5470 
5471 		if (!reg_info->reg_rules_6ghz_ap_ptr[i]) {
5472 			kfree(tb);
5473 			ath11k_warn(ab, "Unable to Allocate memory for 6 GHz AP rules\n");
5474 			return -ENOMEM;
5475 		}
5476 
5477 		ath11k_print_reg_rule(ab, ath11k_6ghz_ap_type_to_str(i),
5478 				      num_6ghz_reg_rules_ap[i],
5479 				      reg_info->reg_rules_6ghz_ap_ptr[i]);
5480 
5481 		ext_wmi_reg_rule += num_6ghz_reg_rules_ap[i];
5482 	}
5483 
5484 	for (j = 0; j < WMI_REG_CURRENT_MAX_AP_TYPE; j++) {
5485 		ath11k_dbg(ab, ATH11K_DBG_WMI,
5486 			   "6 GHz AP type %s", ath11k_6ghz_ap_type_to_str(j));
5487 
5488 		for (i = 0; i < WMI_REG_MAX_CLIENT_TYPE; i++) {
5489 			reg_info->reg_rules_6ghz_client_ptr[j][i] =
5490 				create_ext_reg_rules_from_wmi(num_6ghz_client[j][i],
5491 							      ext_wmi_reg_rule);
5492 
5493 			if (!reg_info->reg_rules_6ghz_client_ptr[j][i]) {
5494 				kfree(tb);
5495 				ath11k_warn(ab, "Unable to Allocate memory for 6 GHz client rules\n");
5496 				return -ENOMEM;
5497 			}
5498 
5499 			ath11k_print_reg_rule(ab,
5500 					      ath11k_6ghz_client_type_to_str(i),
5501 					      num_6ghz_client[j][i],
5502 					      reg_info->reg_rules_6ghz_client_ptr[j][i]);
5503 
5504 			ext_wmi_reg_rule += num_6ghz_client[j][i];
5505 		}
5506 	}
5507 
5508 	reg_info->client_type = ev->client_type;
5509 	reg_info->rnr_tpe_usable = ev->rnr_tpe_usable;
5510 	reg_info->unspecified_ap_usable =
5511 			ev->unspecified_ap_usable;
5512 	reg_info->domain_code_6ghz_ap[WMI_REG_INDOOR_AP] =
5513 			ev->domain_code_6ghz_ap_lpi;
5514 	reg_info->domain_code_6ghz_ap[WMI_REG_STANDARD_POWER_AP] =
5515 			ev->domain_code_6ghz_ap_sp;
5516 	reg_info->domain_code_6ghz_ap[WMI_REG_VERY_LOW_POWER_AP] =
5517 			ev->domain_code_6ghz_ap_vlp;
5518 
5519 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5520 		   "6 GHz reg info client type %s rnr_tpe_usable %d unspecified_ap_usable %d AP sub domain: lpi %s, sp %s, vlp %s\n",
5521 		   ath11k_6ghz_client_type_to_str(reg_info->client_type),
5522 		   reg_info->rnr_tpe_usable,
5523 		   reg_info->unspecified_ap_usable,
5524 		   ath11k_sub_reg_6ghz_to_str(ev->domain_code_6ghz_ap_lpi),
5525 		   ath11k_sub_reg_6ghz_to_str(ev->domain_code_6ghz_ap_sp),
5526 		   ath11k_sub_reg_6ghz_to_str(ev->domain_code_6ghz_ap_vlp));
5527 
5528 	for (i = 0; i < WMI_REG_MAX_CLIENT_TYPE; i++) {
5529 		reg_info->domain_code_6ghz_client[WMI_REG_INDOOR_AP][i] =
5530 				ev->domain_code_6ghz_client_lpi[i];
5531 		reg_info->domain_code_6ghz_client[WMI_REG_STANDARD_POWER_AP][i] =
5532 				ev->domain_code_6ghz_client_sp[i];
5533 		reg_info->domain_code_6ghz_client[WMI_REG_VERY_LOW_POWER_AP][i] =
5534 				ev->domain_code_6ghz_client_vlp[i];
5535 
5536 		ath11k_dbg(ab, ATH11K_DBG_WMI,
5537 			   "6 GHz client type %s client sub domain: lpi %s, sp %s, vlp %s\n",
5538 			   ath11k_6ghz_client_type_to_str(i),
5539 			   ath11k_sub_reg_6ghz_to_str(ev->domain_code_6ghz_client_lpi[i]),
5540 			   ath11k_sub_reg_6ghz_to_str(ev->domain_code_6ghz_client_sp[i]),
5541 			   ath11k_sub_reg_6ghz_to_str(ev->domain_code_6ghz_client_vlp[i])
5542 			  );
5543 	}
5544 
5545 	reg_info->domain_code_6ghz_super_id = ev->domain_code_6ghz_super_id;
5546 
5547 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5548 		   "6 GHz client_type %s 6 GHz super domain %s",
5549 		   ath11k_6ghz_client_type_to_str(reg_info->client_type),
5550 		   ath11k_super_reg_6ghz_to_str(reg_info->domain_code_6ghz_super_id));
5551 
5552 	ath11k_dbg(ab, ATH11K_DBG_WMI, "processed regulatory ext channel list\n");
5553 
5554 	kfree(tb);
5555 	return 0;
5556 }
5557 
5558 static int ath11k_pull_peer_del_resp_ev(struct ath11k_base *ab, struct sk_buff *skb,
5559 					struct wmi_peer_delete_resp_event *peer_del_resp)
5560 {
5561 	const void **tb;
5562 	const struct wmi_peer_delete_resp_event *ev;
5563 	int ret;
5564 
5565 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5566 	if (IS_ERR(tb)) {
5567 		ret = PTR_ERR(tb);
5568 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5569 		return ret;
5570 	}
5571 
5572 	ev = tb[WMI_TAG_PEER_DELETE_RESP_EVENT];
5573 	if (!ev) {
5574 		ath11k_warn(ab, "failed to fetch peer delete resp ev");
5575 		kfree(tb);
5576 		return -EPROTO;
5577 	}
5578 
5579 	memset(peer_del_resp, 0, sizeof(*peer_del_resp));
5580 
5581 	peer_del_resp->vdev_id = ev->vdev_id;
5582 	ether_addr_copy(peer_del_resp->peer_macaddr.addr,
5583 			ev->peer_macaddr.addr);
5584 
5585 	kfree(tb);
5586 	return 0;
5587 }
5588 
5589 static int ath11k_pull_vdev_del_resp_ev(struct ath11k_base *ab,
5590 					struct sk_buff *skb,
5591 					u32 *vdev_id)
5592 {
5593 	const void **tb;
5594 	const struct wmi_vdev_delete_resp_event *ev;
5595 	int ret;
5596 
5597 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5598 	if (IS_ERR(tb)) {
5599 		ret = PTR_ERR(tb);
5600 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5601 		return ret;
5602 	}
5603 
5604 	ev = tb[WMI_TAG_VDEV_DELETE_RESP_EVENT];
5605 	if (!ev) {
5606 		ath11k_warn(ab, "failed to fetch vdev delete resp ev");
5607 		kfree(tb);
5608 		return -EPROTO;
5609 	}
5610 
5611 	*vdev_id = ev->vdev_id;
5612 
5613 	kfree(tb);
5614 	return 0;
5615 }
5616 
5617 static int ath11k_pull_bcn_tx_status_ev(struct ath11k_base *ab, void *evt_buf,
5618 					u32 len, u32 *vdev_id,
5619 					u32 *tx_status)
5620 {
5621 	const void **tb;
5622 	const struct wmi_bcn_tx_status_event *ev;
5623 	int ret;
5624 
5625 	tb = ath11k_wmi_tlv_parse_alloc(ab, evt_buf, len, GFP_ATOMIC);
5626 	if (IS_ERR(tb)) {
5627 		ret = PTR_ERR(tb);
5628 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5629 		return ret;
5630 	}
5631 
5632 	ev = tb[WMI_TAG_OFFLOAD_BCN_TX_STATUS_EVENT];
5633 	if (!ev) {
5634 		ath11k_warn(ab, "failed to fetch bcn tx status ev");
5635 		kfree(tb);
5636 		return -EPROTO;
5637 	}
5638 
5639 	*vdev_id   = ev->vdev_id;
5640 	*tx_status = ev->tx_status;
5641 
5642 	kfree(tb);
5643 	return 0;
5644 }
5645 
5646 static int ath11k_pull_vdev_stopped_param_tlv(struct ath11k_base *ab, struct sk_buff *skb,
5647 					      u32 *vdev_id)
5648 {
5649 	const void **tb;
5650 	const struct wmi_vdev_stopped_event *ev;
5651 	int ret;
5652 
5653 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5654 	if (IS_ERR(tb)) {
5655 		ret = PTR_ERR(tb);
5656 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5657 		return ret;
5658 	}
5659 
5660 	ev = tb[WMI_TAG_VDEV_STOPPED_EVENT];
5661 	if (!ev) {
5662 		ath11k_warn(ab, "failed to fetch vdev stop ev");
5663 		kfree(tb);
5664 		return -EPROTO;
5665 	}
5666 
5667 	*vdev_id =  ev->vdev_id;
5668 
5669 	kfree(tb);
5670 	return 0;
5671 }
5672 
5673 static int ath11k_wmi_tlv_mgmt_rx_parse(struct ath11k_base *ab,
5674 					u16 tag, u16 len,
5675 					const void *ptr, void *data)
5676 {
5677 	struct wmi_tlv_mgmt_rx_parse *parse = data;
5678 
5679 	switch (tag) {
5680 	case WMI_TAG_MGMT_RX_HDR:
5681 		parse->fixed = ptr;
5682 		break;
5683 	case WMI_TAG_ARRAY_BYTE:
5684 		if (!parse->frame_buf_done) {
5685 			parse->frame_buf = ptr;
5686 			parse->frame_buf_done = true;
5687 		}
5688 		break;
5689 	}
5690 	return 0;
5691 }
5692 
5693 static int ath11k_pull_mgmt_rx_params_tlv(struct ath11k_base *ab,
5694 					  struct sk_buff *skb,
5695 					  struct mgmt_rx_event_params *hdr)
5696 {
5697 	struct wmi_tlv_mgmt_rx_parse parse = { };
5698 	const struct wmi_mgmt_rx_hdr *ev;
5699 	const u8 *frame;
5700 	int ret;
5701 
5702 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
5703 				  ath11k_wmi_tlv_mgmt_rx_parse,
5704 				  &parse);
5705 	if (ret) {
5706 		ath11k_warn(ab, "failed to parse mgmt rx tlv %d\n",
5707 			    ret);
5708 		return ret;
5709 	}
5710 
5711 	ev = parse.fixed;
5712 	frame = parse.frame_buf;
5713 
5714 	if (!ev || !frame) {
5715 		ath11k_warn(ab, "failed to fetch mgmt rx hdr");
5716 		return -EPROTO;
5717 	}
5718 
5719 	hdr->pdev_id =  ev->pdev_id;
5720 	hdr->chan_freq = ev->chan_freq;
5721 	hdr->channel =  ev->channel;
5722 	hdr->snr =  ev->snr;
5723 	hdr->rate =  ev->rate;
5724 	hdr->phy_mode =  ev->phy_mode;
5725 	hdr->buf_len =  ev->buf_len;
5726 	hdr->status =  ev->status;
5727 	hdr->flags =  ev->flags;
5728 	hdr->rssi =  ev->rssi;
5729 	hdr->tsf_delta =  ev->tsf_delta;
5730 	memcpy(hdr->rssi_ctl, ev->rssi_ctl, sizeof(hdr->rssi_ctl));
5731 
5732 	if (skb->len < (frame - skb->data) + hdr->buf_len) {
5733 		ath11k_warn(ab, "invalid length in mgmt rx hdr ev");
5734 		return -EPROTO;
5735 	}
5736 
5737 	/* shift the sk_buff to point to `frame` */
5738 	skb_trim(skb, 0);
5739 	skb_put(skb, frame - skb->data);
5740 	skb_pull(skb, frame - skb->data);
5741 	skb_put(skb, hdr->buf_len);
5742 
5743 	ath11k_ce_byte_swap(skb->data, hdr->buf_len);
5744 
5745 	return 0;
5746 }
5747 
5748 static int wmi_process_mgmt_tx_comp(struct ath11k *ar,
5749 				    struct wmi_mgmt_tx_compl_event *tx_compl_param)
5750 {
5751 	struct sk_buff *msdu;
5752 	struct ieee80211_tx_info *info;
5753 	struct ath11k_skb_cb *skb_cb;
5754 	int num_mgmt;
5755 
5756 	spin_lock_bh(&ar->txmgmt_idr_lock);
5757 	msdu = idr_find(&ar->txmgmt_idr, tx_compl_param->desc_id);
5758 
5759 	if (!msdu) {
5760 		ath11k_warn(ar->ab, "received mgmt tx compl for invalid msdu_id: %d\n",
5761 			    tx_compl_param->desc_id);
5762 		spin_unlock_bh(&ar->txmgmt_idr_lock);
5763 		return -ENOENT;
5764 	}
5765 
5766 	idr_remove(&ar->txmgmt_idr, tx_compl_param->desc_id);
5767 	spin_unlock_bh(&ar->txmgmt_idr_lock);
5768 
5769 	skb_cb = ATH11K_SKB_CB(msdu);
5770 	dma_unmap_single(ar->ab->dev, skb_cb->paddr, msdu->len, DMA_TO_DEVICE);
5771 
5772 	info = IEEE80211_SKB_CB(msdu);
5773 	if ((!(info->flags & IEEE80211_TX_CTL_NO_ACK)) &&
5774 	    !tx_compl_param->status) {
5775 		info->flags |= IEEE80211_TX_STAT_ACK;
5776 		if (test_bit(WMI_TLV_SERVICE_TX_DATA_MGMT_ACK_RSSI,
5777 			     ar->ab->wmi_ab.svc_map))
5778 			info->status.ack_signal = tx_compl_param->ack_rssi;
5779 	}
5780 
5781 	ieee80211_tx_status_irqsafe(ar->hw, msdu);
5782 
5783 	num_mgmt = atomic_dec_if_positive(&ar->num_pending_mgmt_tx);
5784 
5785 	/* WARN when we received this event without doing any mgmt tx */
5786 	if (num_mgmt < 0)
5787 		WARN_ON_ONCE(1);
5788 
5789 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
5790 		   "mgmt tx comp pending %d desc id %d\n",
5791 		   num_mgmt, tx_compl_param->desc_id);
5792 
5793 	if (!num_mgmt)
5794 		wake_up(&ar->txmgmt_empty_waitq);
5795 
5796 	return 0;
5797 }
5798 
5799 static int ath11k_pull_mgmt_tx_compl_param_tlv(struct ath11k_base *ab,
5800 					       struct sk_buff *skb,
5801 					       struct wmi_mgmt_tx_compl_event *param)
5802 {
5803 	const void **tb;
5804 	const struct wmi_mgmt_tx_compl_event *ev;
5805 	int ret;
5806 
5807 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5808 	if (IS_ERR(tb)) {
5809 		ret = PTR_ERR(tb);
5810 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5811 		return ret;
5812 	}
5813 
5814 	ev = tb[WMI_TAG_MGMT_TX_COMPL_EVENT];
5815 	if (!ev) {
5816 		ath11k_warn(ab, "failed to fetch mgmt tx compl ev");
5817 		kfree(tb);
5818 		return -EPROTO;
5819 	}
5820 
5821 	param->pdev_id = ev->pdev_id;
5822 	param->desc_id = ev->desc_id;
5823 	param->status = ev->status;
5824 	param->ack_rssi = ev->ack_rssi;
5825 
5826 	kfree(tb);
5827 	return 0;
5828 }
5829 
5830 static void ath11k_wmi_event_scan_started(struct ath11k *ar)
5831 {
5832 	lockdep_assert_held(&ar->data_lock);
5833 
5834 	switch (ar->scan.state) {
5835 	case ATH11K_SCAN_IDLE:
5836 	case ATH11K_SCAN_RUNNING:
5837 	case ATH11K_SCAN_ABORTING:
5838 		ath11k_warn(ar->ab, "received scan started event in an invalid scan state: %s (%d)\n",
5839 			    ath11k_scan_state_str(ar->scan.state),
5840 			    ar->scan.state);
5841 		break;
5842 	case ATH11K_SCAN_STARTING:
5843 		ar->scan.state = ATH11K_SCAN_RUNNING;
5844 		if (ar->scan.is_roc)
5845 			ieee80211_ready_on_channel(ar->hw);
5846 		complete(&ar->scan.started);
5847 		break;
5848 	}
5849 }
5850 
5851 static void ath11k_wmi_event_scan_start_failed(struct ath11k *ar)
5852 {
5853 	lockdep_assert_held(&ar->data_lock);
5854 
5855 	switch (ar->scan.state) {
5856 	case ATH11K_SCAN_IDLE:
5857 	case ATH11K_SCAN_RUNNING:
5858 	case ATH11K_SCAN_ABORTING:
5859 		ath11k_warn(ar->ab, "received scan start failed event in an invalid scan state: %s (%d)\n",
5860 			    ath11k_scan_state_str(ar->scan.state),
5861 			    ar->scan.state);
5862 		break;
5863 	case ATH11K_SCAN_STARTING:
5864 		complete(&ar->scan.started);
5865 		__ath11k_mac_scan_finish(ar);
5866 		break;
5867 	}
5868 }
5869 
5870 static void ath11k_wmi_event_scan_completed(struct ath11k *ar)
5871 {
5872 	lockdep_assert_held(&ar->data_lock);
5873 
5874 	switch (ar->scan.state) {
5875 	case ATH11K_SCAN_IDLE:
5876 	case ATH11K_SCAN_STARTING:
5877 		/* One suspected reason scan can be completed while starting is
5878 		 * if firmware fails to deliver all scan events to the host,
5879 		 * e.g. when transport pipe is full. This has been observed
5880 		 * with spectral scan phyerr events starving wmi transport
5881 		 * pipe. In such case the "scan completed" event should be (and
5882 		 * is) ignored by the host as it may be just firmware's scan
5883 		 * state machine recovering.
5884 		 */
5885 		ath11k_warn(ar->ab, "received scan completed event in an invalid scan state: %s (%d)\n",
5886 			    ath11k_scan_state_str(ar->scan.state),
5887 			    ar->scan.state);
5888 		break;
5889 	case ATH11K_SCAN_RUNNING:
5890 	case ATH11K_SCAN_ABORTING:
5891 		__ath11k_mac_scan_finish(ar);
5892 		break;
5893 	}
5894 }
5895 
5896 static void ath11k_wmi_event_scan_bss_chan(struct ath11k *ar)
5897 {
5898 	lockdep_assert_held(&ar->data_lock);
5899 
5900 	switch (ar->scan.state) {
5901 	case ATH11K_SCAN_IDLE:
5902 	case ATH11K_SCAN_STARTING:
5903 		ath11k_warn(ar->ab, "received scan bss chan event in an invalid scan state: %s (%d)\n",
5904 			    ath11k_scan_state_str(ar->scan.state),
5905 			    ar->scan.state);
5906 		break;
5907 	case ATH11K_SCAN_RUNNING:
5908 	case ATH11K_SCAN_ABORTING:
5909 		ar->scan_channel = NULL;
5910 		break;
5911 	}
5912 }
5913 
5914 static void ath11k_wmi_event_scan_foreign_chan(struct ath11k *ar, u32 freq)
5915 {
5916 	lockdep_assert_held(&ar->data_lock);
5917 
5918 	switch (ar->scan.state) {
5919 	case ATH11K_SCAN_IDLE:
5920 	case ATH11K_SCAN_STARTING:
5921 		ath11k_warn(ar->ab, "received scan foreign chan event in an invalid scan state: %s (%d)\n",
5922 			    ath11k_scan_state_str(ar->scan.state),
5923 			    ar->scan.state);
5924 		break;
5925 	case ATH11K_SCAN_RUNNING:
5926 	case ATH11K_SCAN_ABORTING:
5927 		ar->scan_channel = ieee80211_get_channel(ar->hw->wiphy, freq);
5928 		if (ar->scan.is_roc && ar->scan.roc_freq == freq)
5929 			complete(&ar->scan.on_channel);
5930 		break;
5931 	}
5932 }
5933 
5934 static const char *
5935 ath11k_wmi_event_scan_type_str(enum wmi_scan_event_type type,
5936 			       enum wmi_scan_completion_reason reason)
5937 {
5938 	switch (type) {
5939 	case WMI_SCAN_EVENT_STARTED:
5940 		return "started";
5941 	case WMI_SCAN_EVENT_COMPLETED:
5942 		switch (reason) {
5943 		case WMI_SCAN_REASON_COMPLETED:
5944 			return "completed";
5945 		case WMI_SCAN_REASON_CANCELLED:
5946 			return "completed [cancelled]";
5947 		case WMI_SCAN_REASON_PREEMPTED:
5948 			return "completed [preempted]";
5949 		case WMI_SCAN_REASON_TIMEDOUT:
5950 			return "completed [timedout]";
5951 		case WMI_SCAN_REASON_INTERNAL_FAILURE:
5952 			return "completed [internal err]";
5953 		case WMI_SCAN_REASON_MAX:
5954 			break;
5955 		}
5956 		return "completed [unknown]";
5957 	case WMI_SCAN_EVENT_BSS_CHANNEL:
5958 		return "bss channel";
5959 	case WMI_SCAN_EVENT_FOREIGN_CHAN:
5960 		return "foreign channel";
5961 	case WMI_SCAN_EVENT_DEQUEUED:
5962 		return "dequeued";
5963 	case WMI_SCAN_EVENT_PREEMPTED:
5964 		return "preempted";
5965 	case WMI_SCAN_EVENT_START_FAILED:
5966 		return "start failed";
5967 	case WMI_SCAN_EVENT_RESTARTED:
5968 		return "restarted";
5969 	case WMI_SCAN_EVENT_FOREIGN_CHAN_EXIT:
5970 		return "foreign channel exit";
5971 	default:
5972 		return "unknown";
5973 	}
5974 }
5975 
5976 static int ath11k_pull_scan_ev(struct ath11k_base *ab, struct sk_buff *skb,
5977 			       struct wmi_scan_event *scan_evt_param)
5978 {
5979 	const void **tb;
5980 	const struct wmi_scan_event *ev;
5981 	int ret;
5982 
5983 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5984 	if (IS_ERR(tb)) {
5985 		ret = PTR_ERR(tb);
5986 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5987 		return ret;
5988 	}
5989 
5990 	ev = tb[WMI_TAG_SCAN_EVENT];
5991 	if (!ev) {
5992 		ath11k_warn(ab, "failed to fetch scan ev");
5993 		kfree(tb);
5994 		return -EPROTO;
5995 	}
5996 
5997 	scan_evt_param->event_type = ev->event_type;
5998 	scan_evt_param->reason = ev->reason;
5999 	scan_evt_param->channel_freq = ev->channel_freq;
6000 	scan_evt_param->scan_req_id = ev->scan_req_id;
6001 	scan_evt_param->scan_id = ev->scan_id;
6002 	scan_evt_param->vdev_id = ev->vdev_id;
6003 	scan_evt_param->tsf_timestamp = ev->tsf_timestamp;
6004 
6005 	kfree(tb);
6006 	return 0;
6007 }
6008 
6009 static int ath11k_pull_peer_sta_kickout_ev(struct ath11k_base *ab, struct sk_buff *skb,
6010 					   struct wmi_peer_sta_kickout_arg *arg)
6011 {
6012 	const void **tb;
6013 	const struct wmi_peer_sta_kickout_event *ev;
6014 	int ret;
6015 
6016 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
6017 	if (IS_ERR(tb)) {
6018 		ret = PTR_ERR(tb);
6019 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
6020 		return ret;
6021 	}
6022 
6023 	ev = tb[WMI_TAG_PEER_STA_KICKOUT_EVENT];
6024 	if (!ev) {
6025 		ath11k_warn(ab, "failed to fetch peer sta kickout ev");
6026 		kfree(tb);
6027 		return -EPROTO;
6028 	}
6029 
6030 	arg->mac_addr = ev->peer_macaddr.addr;
6031 
6032 	kfree(tb);
6033 	return 0;
6034 }
6035 
6036 static int ath11k_pull_roam_ev(struct ath11k_base *ab, struct sk_buff *skb,
6037 			       struct wmi_roam_event *roam_ev)
6038 {
6039 	const void **tb;
6040 	const struct wmi_roam_event *ev;
6041 	int ret;
6042 
6043 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
6044 	if (IS_ERR(tb)) {
6045 		ret = PTR_ERR(tb);
6046 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
6047 		return ret;
6048 	}
6049 
6050 	ev = tb[WMI_TAG_ROAM_EVENT];
6051 	if (!ev) {
6052 		ath11k_warn(ab, "failed to fetch roam ev");
6053 		kfree(tb);
6054 		return -EPROTO;
6055 	}
6056 
6057 	roam_ev->vdev_id = ev->vdev_id;
6058 	roam_ev->reason = ev->reason;
6059 	roam_ev->rssi = ev->rssi;
6060 
6061 	kfree(tb);
6062 	return 0;
6063 }
6064 
6065 static int freq_to_idx(struct ath11k *ar, int freq)
6066 {
6067 	struct ieee80211_supported_band *sband;
6068 	int band, ch, idx = 0;
6069 
6070 	for (band = NL80211_BAND_2GHZ; band < NUM_NL80211_BANDS; band++) {
6071 		sband = ar->hw->wiphy->bands[band];
6072 		if (!sband)
6073 			continue;
6074 
6075 		for (ch = 0; ch < sband->n_channels; ch++, idx++)
6076 			if (sband->channels[ch].center_freq == freq)
6077 				goto exit;
6078 	}
6079 
6080 exit:
6081 	return idx;
6082 }
6083 
6084 static int ath11k_pull_chan_info_ev(struct ath11k_base *ab, u8 *evt_buf,
6085 				    u32 len, struct wmi_chan_info_event *ch_info_ev)
6086 {
6087 	const void **tb;
6088 	const struct wmi_chan_info_event *ev;
6089 	int ret;
6090 
6091 	tb = ath11k_wmi_tlv_parse_alloc(ab, evt_buf, len, GFP_ATOMIC);
6092 	if (IS_ERR(tb)) {
6093 		ret = PTR_ERR(tb);
6094 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
6095 		return ret;
6096 	}
6097 
6098 	ev = tb[WMI_TAG_CHAN_INFO_EVENT];
6099 	if (!ev) {
6100 		ath11k_warn(ab, "failed to fetch chan info ev");
6101 		kfree(tb);
6102 		return -EPROTO;
6103 	}
6104 
6105 	ch_info_ev->err_code = ev->err_code;
6106 	ch_info_ev->freq = ev->freq;
6107 	ch_info_ev->cmd_flags = ev->cmd_flags;
6108 	ch_info_ev->noise_floor = ev->noise_floor;
6109 	ch_info_ev->rx_clear_count = ev->rx_clear_count;
6110 	ch_info_ev->cycle_count = ev->cycle_count;
6111 	ch_info_ev->chan_tx_pwr_range = ev->chan_tx_pwr_range;
6112 	ch_info_ev->chan_tx_pwr_tp = ev->chan_tx_pwr_tp;
6113 	ch_info_ev->rx_frame_count = ev->rx_frame_count;
6114 	ch_info_ev->tx_frame_cnt = ev->tx_frame_cnt;
6115 	ch_info_ev->mac_clk_mhz = ev->mac_clk_mhz;
6116 	ch_info_ev->vdev_id = ev->vdev_id;
6117 
6118 	kfree(tb);
6119 	return 0;
6120 }
6121 
6122 static int
6123 ath11k_pull_pdev_bss_chan_info_ev(struct ath11k_base *ab, struct sk_buff *skb,
6124 				  struct wmi_pdev_bss_chan_info_event *bss_ch_info_ev)
6125 {
6126 	const void **tb;
6127 	const struct wmi_pdev_bss_chan_info_event *ev;
6128 	int ret;
6129 
6130 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
6131 	if (IS_ERR(tb)) {
6132 		ret = PTR_ERR(tb);
6133 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
6134 		return ret;
6135 	}
6136 
6137 	ev = tb[WMI_TAG_PDEV_BSS_CHAN_INFO_EVENT];
6138 	if (!ev) {
6139 		ath11k_warn(ab, "failed to fetch pdev bss chan info ev");
6140 		kfree(tb);
6141 		return -EPROTO;
6142 	}
6143 
6144 	bss_ch_info_ev->pdev_id = ev->pdev_id;
6145 	bss_ch_info_ev->freq = ev->freq;
6146 	bss_ch_info_ev->noise_floor = ev->noise_floor;
6147 	bss_ch_info_ev->rx_clear_count_low = ev->rx_clear_count_low;
6148 	bss_ch_info_ev->rx_clear_count_high = ev->rx_clear_count_high;
6149 	bss_ch_info_ev->cycle_count_low = ev->cycle_count_low;
6150 	bss_ch_info_ev->cycle_count_high = ev->cycle_count_high;
6151 	bss_ch_info_ev->tx_cycle_count_low = ev->tx_cycle_count_low;
6152 	bss_ch_info_ev->tx_cycle_count_high = ev->tx_cycle_count_high;
6153 	bss_ch_info_ev->rx_cycle_count_low = ev->rx_cycle_count_low;
6154 	bss_ch_info_ev->rx_cycle_count_high = ev->rx_cycle_count_high;
6155 	bss_ch_info_ev->rx_bss_cycle_count_low = ev->rx_bss_cycle_count_low;
6156 	bss_ch_info_ev->rx_bss_cycle_count_high = ev->rx_bss_cycle_count_high;
6157 
6158 	kfree(tb);
6159 	return 0;
6160 }
6161 
6162 static int
6163 ath11k_pull_vdev_install_key_compl_ev(struct ath11k_base *ab, struct sk_buff *skb,
6164 				      struct wmi_vdev_install_key_complete_arg *arg)
6165 {
6166 	const void **tb;
6167 	const struct wmi_vdev_install_key_compl_event *ev;
6168 	int ret;
6169 
6170 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
6171 	if (IS_ERR(tb)) {
6172 		ret = PTR_ERR(tb);
6173 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
6174 		return ret;
6175 	}
6176 
6177 	ev = tb[WMI_TAG_VDEV_INSTALL_KEY_COMPLETE_EVENT];
6178 	if (!ev) {
6179 		ath11k_warn(ab, "failed to fetch vdev install key compl ev");
6180 		kfree(tb);
6181 		return -EPROTO;
6182 	}
6183 
6184 	arg->vdev_id = ev->vdev_id;
6185 	arg->macaddr = ev->peer_macaddr.addr;
6186 	arg->key_idx = ev->key_idx;
6187 	arg->key_flags = ev->key_flags;
6188 	arg->status = ev->status;
6189 
6190 	kfree(tb);
6191 	return 0;
6192 }
6193 
6194 static int ath11k_pull_peer_assoc_conf_ev(struct ath11k_base *ab, struct sk_buff *skb,
6195 					  struct wmi_peer_assoc_conf_arg *peer_assoc_conf)
6196 {
6197 	const void **tb;
6198 	const struct wmi_peer_assoc_conf_event *ev;
6199 	int ret;
6200 
6201 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
6202 	if (IS_ERR(tb)) {
6203 		ret = PTR_ERR(tb);
6204 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
6205 		return ret;
6206 	}
6207 
6208 	ev = tb[WMI_TAG_PEER_ASSOC_CONF_EVENT];
6209 	if (!ev) {
6210 		ath11k_warn(ab, "failed to fetch peer assoc conf ev");
6211 		kfree(tb);
6212 		return -EPROTO;
6213 	}
6214 
6215 	peer_assoc_conf->vdev_id = ev->vdev_id;
6216 	peer_assoc_conf->macaddr = ev->peer_macaddr.addr;
6217 
6218 	kfree(tb);
6219 	return 0;
6220 }
6221 
6222 static void ath11k_wmi_pull_pdev_stats_base(const struct wmi_pdev_stats_base *src,
6223 					    struct ath11k_fw_stats_pdev *dst)
6224 {
6225 	dst->ch_noise_floor = src->chan_nf;
6226 	dst->tx_frame_count = src->tx_frame_count;
6227 	dst->rx_frame_count = src->rx_frame_count;
6228 	dst->rx_clear_count = src->rx_clear_count;
6229 	dst->cycle_count = src->cycle_count;
6230 	dst->phy_err_count = src->phy_err_count;
6231 	dst->chan_tx_power = src->chan_tx_pwr;
6232 }
6233 
6234 static void
6235 ath11k_wmi_pull_pdev_stats_tx(const struct wmi_pdev_stats_tx *src,
6236 			      struct ath11k_fw_stats_pdev *dst)
6237 {
6238 	dst->comp_queued = src->comp_queued;
6239 	dst->comp_delivered = src->comp_delivered;
6240 	dst->msdu_enqued = src->msdu_enqued;
6241 	dst->mpdu_enqued = src->mpdu_enqued;
6242 	dst->wmm_drop = src->wmm_drop;
6243 	dst->local_enqued = src->local_enqued;
6244 	dst->local_freed = src->local_freed;
6245 	dst->hw_queued = src->hw_queued;
6246 	dst->hw_reaped = src->hw_reaped;
6247 	dst->underrun = src->underrun;
6248 	dst->hw_paused = src->hw_paused;
6249 	dst->tx_abort = src->tx_abort;
6250 	dst->mpdus_requeued = src->mpdus_requeued;
6251 	dst->tx_ko = src->tx_ko;
6252 	dst->tx_xretry = src->tx_xretry;
6253 	dst->data_rc = src->data_rc;
6254 	dst->self_triggers = src->self_triggers;
6255 	dst->sw_retry_failure = src->sw_retry_failure;
6256 	dst->illgl_rate_phy_err = src->illgl_rate_phy_err;
6257 	dst->pdev_cont_xretry = src->pdev_cont_xretry;
6258 	dst->pdev_tx_timeout = src->pdev_tx_timeout;
6259 	dst->pdev_resets = src->pdev_resets;
6260 	dst->stateless_tid_alloc_failure = src->stateless_tid_alloc_failure;
6261 	dst->phy_underrun = src->phy_underrun;
6262 	dst->txop_ovf = src->txop_ovf;
6263 	dst->seq_posted = src->seq_posted;
6264 	dst->seq_failed_queueing = src->seq_failed_queueing;
6265 	dst->seq_completed = src->seq_completed;
6266 	dst->seq_restarted = src->seq_restarted;
6267 	dst->mu_seq_posted = src->mu_seq_posted;
6268 	dst->mpdus_sw_flush = src->mpdus_sw_flush;
6269 	dst->mpdus_hw_filter = src->mpdus_hw_filter;
6270 	dst->mpdus_truncated = src->mpdus_truncated;
6271 	dst->mpdus_ack_failed = src->mpdus_ack_failed;
6272 	dst->mpdus_expired = src->mpdus_expired;
6273 }
6274 
6275 static void ath11k_wmi_pull_pdev_stats_rx(const struct wmi_pdev_stats_rx *src,
6276 					  struct ath11k_fw_stats_pdev *dst)
6277 {
6278 	dst->mid_ppdu_route_change = src->mid_ppdu_route_change;
6279 	dst->status_rcvd = src->status_rcvd;
6280 	dst->r0_frags = src->r0_frags;
6281 	dst->r1_frags = src->r1_frags;
6282 	dst->r2_frags = src->r2_frags;
6283 	dst->r3_frags = src->r3_frags;
6284 	dst->htt_msdus = src->htt_msdus;
6285 	dst->htt_mpdus = src->htt_mpdus;
6286 	dst->loc_msdus = src->loc_msdus;
6287 	dst->loc_mpdus = src->loc_mpdus;
6288 	dst->oversize_amsdu = src->oversize_amsdu;
6289 	dst->phy_errs = src->phy_errs;
6290 	dst->phy_err_drop = src->phy_err_drop;
6291 	dst->mpdu_errs = src->mpdu_errs;
6292 	dst->rx_ovfl_errs = src->rx_ovfl_errs;
6293 }
6294 
6295 static void
6296 ath11k_wmi_pull_vdev_stats(const struct wmi_vdev_stats *src,
6297 			   struct ath11k_fw_stats_vdev *dst)
6298 {
6299 	int i;
6300 
6301 	dst->vdev_id = src->vdev_id;
6302 	dst->beacon_snr = src->beacon_snr;
6303 	dst->data_snr = src->data_snr;
6304 	dst->num_rx_frames = src->num_rx_frames;
6305 	dst->num_rts_fail = src->num_rts_fail;
6306 	dst->num_rts_success = src->num_rts_success;
6307 	dst->num_rx_err = src->num_rx_err;
6308 	dst->num_rx_discard = src->num_rx_discard;
6309 	dst->num_tx_not_acked = src->num_tx_not_acked;
6310 
6311 	for (i = 0; i < ARRAY_SIZE(src->num_tx_frames); i++)
6312 		dst->num_tx_frames[i] = src->num_tx_frames[i];
6313 
6314 	for (i = 0; i < ARRAY_SIZE(src->num_tx_frames_retries); i++)
6315 		dst->num_tx_frames_retries[i] = src->num_tx_frames_retries[i];
6316 
6317 	for (i = 0; i < ARRAY_SIZE(src->num_tx_frames_failures); i++)
6318 		dst->num_tx_frames_failures[i] = src->num_tx_frames_failures[i];
6319 
6320 	for (i = 0; i < ARRAY_SIZE(src->tx_rate_history); i++)
6321 		dst->tx_rate_history[i] = src->tx_rate_history[i];
6322 
6323 	for (i = 0; i < ARRAY_SIZE(src->beacon_rssi_history); i++)
6324 		dst->beacon_rssi_history[i] = src->beacon_rssi_history[i];
6325 }
6326 
6327 static void
6328 ath11k_wmi_pull_bcn_stats(const struct wmi_bcn_stats *src,
6329 			  struct ath11k_fw_stats_bcn *dst)
6330 {
6331 	dst->vdev_id = src->vdev_id;
6332 	dst->tx_bcn_succ_cnt = src->tx_bcn_succ_cnt;
6333 	dst->tx_bcn_outage_cnt = src->tx_bcn_outage_cnt;
6334 }
6335 
6336 static int ath11k_wmi_tlv_rssi_chain_parse(struct ath11k_base *ab,
6337 					   u16 tag, u16 len,
6338 					   const void *ptr, void *data)
6339 {
6340 	struct wmi_tlv_fw_stats_parse *parse = data;
6341 	const struct wmi_stats_event *ev = parse->ev;
6342 	struct ath11k_fw_stats *stats = parse->stats;
6343 	struct ath11k *ar;
6344 	struct ath11k_vif *arvif;
6345 	struct ieee80211_sta *sta;
6346 	struct ath11k_sta *arsta;
6347 	const struct wmi_rssi_stats *stats_rssi = (const struct wmi_rssi_stats *)ptr;
6348 	int j, ret = 0;
6349 
6350 	if (tag != WMI_TAG_RSSI_STATS)
6351 		return -EPROTO;
6352 
6353 	rcu_read_lock();
6354 
6355 	ar = ath11k_mac_get_ar_by_pdev_id(ab, ev->pdev_id);
6356 	stats->stats_id = WMI_REQUEST_RSSI_PER_CHAIN_STAT;
6357 
6358 	ath11k_dbg(ab, ATH11K_DBG_WMI,
6359 		   "stats vdev id %d mac %pM\n",
6360 		   stats_rssi->vdev_id, stats_rssi->peer_macaddr.addr);
6361 
6362 	arvif = ath11k_mac_get_arvif(ar, stats_rssi->vdev_id);
6363 	if (!arvif) {
6364 		ath11k_warn(ab, "not found vif for vdev id %d\n",
6365 			    stats_rssi->vdev_id);
6366 		ret = -EPROTO;
6367 		goto exit;
6368 	}
6369 
6370 	ath11k_dbg(ab, ATH11K_DBG_WMI,
6371 		   "stats bssid %pM vif %pK\n",
6372 		   arvif->bssid, arvif->vif);
6373 
6374 	sta = ieee80211_find_sta_by_ifaddr(ar->hw,
6375 					   arvif->bssid,
6376 					   NULL);
6377 	if (!sta) {
6378 		ath11k_dbg(ab, ATH11K_DBG_WMI,
6379 			   "not found station of bssid %pM for rssi chain\n",
6380 			   arvif->bssid);
6381 		goto exit;
6382 	}
6383 
6384 	arsta = (struct ath11k_sta *)sta->drv_priv;
6385 
6386 	BUILD_BUG_ON(ARRAY_SIZE(arsta->chain_signal) >
6387 		     ARRAY_SIZE(stats_rssi->rssi_avg_beacon));
6388 
6389 	for (j = 0; j < ARRAY_SIZE(arsta->chain_signal); j++) {
6390 		arsta->chain_signal[j] = stats_rssi->rssi_avg_beacon[j];
6391 		ath11k_dbg(ab, ATH11K_DBG_WMI,
6392 			   "stats beacon rssi[%d] %d data rssi[%d] %d\n",
6393 			   j,
6394 			   stats_rssi->rssi_avg_beacon[j],
6395 			   j,
6396 			   stats_rssi->rssi_avg_data[j]);
6397 	}
6398 
6399 exit:
6400 	rcu_read_unlock();
6401 	return ret;
6402 }
6403 
6404 static int ath11k_wmi_tlv_fw_stats_data_parse(struct ath11k_base *ab,
6405 					      struct wmi_tlv_fw_stats_parse *parse,
6406 					      const void *ptr,
6407 					      u16 len)
6408 {
6409 	struct ath11k_fw_stats *stats = parse->stats;
6410 	const struct wmi_stats_event *ev = parse->ev;
6411 	struct ath11k *ar;
6412 	struct ath11k_vif *arvif;
6413 	struct ieee80211_sta *sta;
6414 	struct ath11k_sta *arsta;
6415 	int i, ret = 0;
6416 	const void *data = ptr;
6417 
6418 	if (!ev) {
6419 		ath11k_warn(ab, "failed to fetch update stats ev");
6420 		return -EPROTO;
6421 	}
6422 
6423 	stats->stats_id = 0;
6424 
6425 	rcu_read_lock();
6426 
6427 	ar = ath11k_mac_get_ar_by_pdev_id(ab, ev->pdev_id);
6428 
6429 	for (i = 0; i < ev->num_pdev_stats; i++) {
6430 		const struct wmi_pdev_stats *src;
6431 		struct ath11k_fw_stats_pdev *dst;
6432 
6433 		src = data;
6434 		if (len < sizeof(*src)) {
6435 			ret = -EPROTO;
6436 			goto exit;
6437 		}
6438 
6439 		stats->stats_id = WMI_REQUEST_PDEV_STAT;
6440 
6441 		data += sizeof(*src);
6442 		len -= sizeof(*src);
6443 
6444 		dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
6445 		if (!dst)
6446 			continue;
6447 
6448 		ath11k_wmi_pull_pdev_stats_base(&src->base, dst);
6449 		ath11k_wmi_pull_pdev_stats_tx(&src->tx, dst);
6450 		ath11k_wmi_pull_pdev_stats_rx(&src->rx, dst);
6451 		list_add_tail(&dst->list, &stats->pdevs);
6452 	}
6453 
6454 	for (i = 0; i < ev->num_vdev_stats; i++) {
6455 		const struct wmi_vdev_stats *src;
6456 		struct ath11k_fw_stats_vdev *dst;
6457 
6458 		src = data;
6459 		if (len < sizeof(*src)) {
6460 			ret = -EPROTO;
6461 			goto exit;
6462 		}
6463 
6464 		stats->stats_id = WMI_REQUEST_VDEV_STAT;
6465 
6466 		arvif = ath11k_mac_get_arvif(ar, src->vdev_id);
6467 		if (arvif) {
6468 			sta = ieee80211_find_sta_by_ifaddr(ar->hw,
6469 							   arvif->bssid,
6470 							   NULL);
6471 			if (sta) {
6472 				arsta = (struct ath11k_sta *)sta->drv_priv;
6473 				arsta->rssi_beacon = src->beacon_snr;
6474 				ath11k_dbg(ab, ATH11K_DBG_WMI,
6475 					   "stats vdev id %d snr %d\n",
6476 					   src->vdev_id, src->beacon_snr);
6477 			} else {
6478 				ath11k_dbg(ab, ATH11K_DBG_WMI,
6479 					   "not found station of bssid %pM for vdev stat\n",
6480 					   arvif->bssid);
6481 			}
6482 		}
6483 
6484 		data += sizeof(*src);
6485 		len -= sizeof(*src);
6486 
6487 		dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
6488 		if (!dst)
6489 			continue;
6490 
6491 		ath11k_wmi_pull_vdev_stats(src, dst);
6492 		list_add_tail(&dst->list, &stats->vdevs);
6493 	}
6494 
6495 	for (i = 0; i < ev->num_bcn_stats; i++) {
6496 		const struct wmi_bcn_stats *src;
6497 		struct ath11k_fw_stats_bcn *dst;
6498 
6499 		src = data;
6500 		if (len < sizeof(*src)) {
6501 			ret = -EPROTO;
6502 			goto exit;
6503 		}
6504 
6505 		stats->stats_id = WMI_REQUEST_BCN_STAT;
6506 
6507 		data += sizeof(*src);
6508 		len -= sizeof(*src);
6509 
6510 		dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
6511 		if (!dst)
6512 			continue;
6513 
6514 		ath11k_wmi_pull_bcn_stats(src, dst);
6515 		list_add_tail(&dst->list, &stats->bcn);
6516 	}
6517 
6518 exit:
6519 	rcu_read_unlock();
6520 	return ret;
6521 }
6522 
6523 static int ath11k_wmi_tlv_fw_stats_parse(struct ath11k_base *ab,
6524 					 u16 tag, u16 len,
6525 					 const void *ptr, void *data)
6526 {
6527 	struct wmi_tlv_fw_stats_parse *parse = data;
6528 	int ret = 0;
6529 
6530 	switch (tag) {
6531 	case WMI_TAG_STATS_EVENT:
6532 		parse->ev = (struct wmi_stats_event *)ptr;
6533 		parse->stats->pdev_id = parse->ev->pdev_id;
6534 		break;
6535 	case WMI_TAG_ARRAY_BYTE:
6536 		ret = ath11k_wmi_tlv_fw_stats_data_parse(ab, parse, ptr, len);
6537 		break;
6538 	case WMI_TAG_PER_CHAIN_RSSI_STATS:
6539 		parse->rssi = (struct wmi_per_chain_rssi_stats *)ptr;
6540 
6541 		if (parse->ev->stats_id & WMI_REQUEST_RSSI_PER_CHAIN_STAT)
6542 			parse->rssi_num = parse->rssi->num_per_chain_rssi_stats;
6543 
6544 		ath11k_dbg(ab, ATH11K_DBG_WMI,
6545 			   "stats id 0x%x num chain %d\n",
6546 			   parse->ev->stats_id,
6547 			   parse->rssi_num);
6548 		break;
6549 	case WMI_TAG_ARRAY_STRUCT:
6550 		if (parse->rssi_num && !parse->chain_rssi_done) {
6551 			ret = ath11k_wmi_tlv_iter(ab, ptr, len,
6552 						  ath11k_wmi_tlv_rssi_chain_parse,
6553 						  parse);
6554 			if (ret) {
6555 				ath11k_warn(ab, "failed to parse rssi chain %d\n",
6556 					    ret);
6557 				return ret;
6558 			}
6559 			parse->chain_rssi_done = true;
6560 		}
6561 		break;
6562 	default:
6563 		break;
6564 	}
6565 	return ret;
6566 }
6567 
6568 int ath11k_wmi_pull_fw_stats(struct ath11k_base *ab, struct sk_buff *skb,
6569 			     struct ath11k_fw_stats *stats)
6570 {
6571 	struct wmi_tlv_fw_stats_parse parse = { };
6572 
6573 	stats->stats_id = 0;
6574 	parse.stats = stats;
6575 
6576 	return ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
6577 				   ath11k_wmi_tlv_fw_stats_parse,
6578 				   &parse);
6579 }
6580 
6581 static void
6582 ath11k_wmi_fw_pdev_base_stats_fill(const struct ath11k_fw_stats_pdev *pdev,
6583 				   char *buf, u32 *length)
6584 {
6585 	u32 len = *length;
6586 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
6587 
6588 	len += scnprintf(buf + len, buf_len - len, "\n");
6589 	len += scnprintf(buf + len, buf_len - len, "%30s\n",
6590 			"ath11k PDEV stats");
6591 	len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
6592 			"=================");
6593 
6594 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6595 			"Channel noise floor", pdev->ch_noise_floor);
6596 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6597 			"Channel TX power", pdev->chan_tx_power);
6598 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6599 			"TX frame count", pdev->tx_frame_count);
6600 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6601 			"RX frame count", pdev->rx_frame_count);
6602 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6603 			"RX clear count", pdev->rx_clear_count);
6604 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6605 			"Cycle count", pdev->cycle_count);
6606 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6607 			"PHY error count", pdev->phy_err_count);
6608 
6609 	*length = len;
6610 }
6611 
6612 static void
6613 ath11k_wmi_fw_pdev_tx_stats_fill(const struct ath11k_fw_stats_pdev *pdev,
6614 				 char *buf, u32 *length)
6615 {
6616 	u32 len = *length;
6617 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
6618 
6619 	len += scnprintf(buf + len, buf_len - len, "\n%30s\n",
6620 			 "ath11k PDEV TX stats");
6621 	len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
6622 			 "====================");
6623 
6624 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6625 			 "HTT cookies queued", pdev->comp_queued);
6626 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6627 			 "HTT cookies disp.", pdev->comp_delivered);
6628 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6629 			 "MSDU queued", pdev->msdu_enqued);
6630 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6631 			 "MPDU queued", pdev->mpdu_enqued);
6632 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6633 			 "MSDUs dropped", pdev->wmm_drop);
6634 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6635 			 "Local enqued", pdev->local_enqued);
6636 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6637 			 "Local freed", pdev->local_freed);
6638 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6639 			 "HW queued", pdev->hw_queued);
6640 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6641 			 "PPDUs reaped", pdev->hw_reaped);
6642 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6643 			 "Num underruns", pdev->underrun);
6644 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6645 			 "Num HW Paused", pdev->hw_paused);
6646 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6647 			 "PPDUs cleaned", pdev->tx_abort);
6648 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6649 			 "MPDUs requeued", pdev->mpdus_requeued);
6650 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6651 			 "PPDU OK", pdev->tx_ko);
6652 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6653 			 "Excessive retries", pdev->tx_xretry);
6654 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6655 			 "HW rate", pdev->data_rc);
6656 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6657 			 "Sched self triggers", pdev->self_triggers);
6658 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6659 			 "Dropped due to SW retries",
6660 			 pdev->sw_retry_failure);
6661 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6662 			 "Illegal rate phy errors",
6663 			 pdev->illgl_rate_phy_err);
6664 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6665 			 "PDEV continuous xretry", pdev->pdev_cont_xretry);
6666 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6667 			 "TX timeout", pdev->pdev_tx_timeout);
6668 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6669 			 "PDEV resets", pdev->pdev_resets);
6670 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6671 			 "Stateless TIDs alloc failures",
6672 			 pdev->stateless_tid_alloc_failure);
6673 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6674 			 "PHY underrun", pdev->phy_underrun);
6675 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6676 			 "MPDU is more than txop limit", pdev->txop_ovf);
6677 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6678 			 "Num sequences posted", pdev->seq_posted);
6679 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6680 			 "Num seq failed queueing ", pdev->seq_failed_queueing);
6681 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6682 			 "Num sequences completed ", pdev->seq_completed);
6683 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6684 			 "Num sequences restarted ", pdev->seq_restarted);
6685 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6686 			 "Num of MU sequences posted ", pdev->mu_seq_posted);
6687 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6688 			 "Num of MPDUS SW flushed ", pdev->mpdus_sw_flush);
6689 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6690 			 "Num of MPDUS HW filtered ", pdev->mpdus_hw_filter);
6691 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6692 			 "Num of MPDUS truncated ", pdev->mpdus_truncated);
6693 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6694 			 "Num of MPDUS ACK failed ", pdev->mpdus_ack_failed);
6695 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
6696 			 "Num of MPDUS expired ", pdev->mpdus_expired);
6697 	*length = len;
6698 }
6699 
6700 static void
6701 ath11k_wmi_fw_pdev_rx_stats_fill(const struct ath11k_fw_stats_pdev *pdev,
6702 				 char *buf, u32 *length)
6703 {
6704 	u32 len = *length;
6705 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
6706 
6707 	len += scnprintf(buf + len, buf_len - len, "\n%30s\n",
6708 			 "ath11k PDEV RX stats");
6709 	len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
6710 			 "====================");
6711 
6712 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6713 			 "Mid PPDU route change",
6714 			 pdev->mid_ppdu_route_change);
6715 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6716 			 "Tot. number of statuses", pdev->status_rcvd);
6717 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6718 			 "Extra frags on rings 0", pdev->r0_frags);
6719 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6720 			 "Extra frags on rings 1", pdev->r1_frags);
6721 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6722 			 "Extra frags on rings 2", pdev->r2_frags);
6723 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6724 			 "Extra frags on rings 3", pdev->r3_frags);
6725 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6726 			 "MSDUs delivered to HTT", pdev->htt_msdus);
6727 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6728 			 "MPDUs delivered to HTT", pdev->htt_mpdus);
6729 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6730 			 "MSDUs delivered to stack", pdev->loc_msdus);
6731 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6732 			 "MPDUs delivered to stack", pdev->loc_mpdus);
6733 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6734 			 "Oversized AMSUs", pdev->oversize_amsdu);
6735 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6736 			 "PHY errors", pdev->phy_errs);
6737 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6738 			 "PHY errors drops", pdev->phy_err_drop);
6739 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6740 			 "MPDU errors (FCS, MIC, ENC)", pdev->mpdu_errs);
6741 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
6742 			 "Overflow errors", pdev->rx_ovfl_errs);
6743 	*length = len;
6744 }
6745 
6746 static void
6747 ath11k_wmi_fw_vdev_stats_fill(struct ath11k *ar,
6748 			      const struct ath11k_fw_stats_vdev *vdev,
6749 			      char *buf, u32 *length)
6750 {
6751 	u32 len = *length;
6752 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
6753 	struct ath11k_vif *arvif = ath11k_mac_get_arvif(ar, vdev->vdev_id);
6754 	u8 *vif_macaddr;
6755 	int i;
6756 
6757 	/* VDEV stats has all the active VDEVs of other PDEVs as well,
6758 	 * ignoring those not part of requested PDEV
6759 	 */
6760 	if (!arvif)
6761 		return;
6762 
6763 	vif_macaddr = arvif->vif->addr;
6764 
6765 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
6766 			 "VDEV ID", vdev->vdev_id);
6767 	len += scnprintf(buf + len, buf_len - len, "%30s %pM\n",
6768 			 "VDEV MAC address", vif_macaddr);
6769 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
6770 			 "beacon snr", vdev->beacon_snr);
6771 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
6772 			 "data snr", vdev->data_snr);
6773 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
6774 			 "num rx frames", vdev->num_rx_frames);
6775 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
6776 			 "num rts fail", vdev->num_rts_fail);
6777 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
6778 			 "num rts success", vdev->num_rts_success);
6779 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
6780 			 "num rx err", vdev->num_rx_err);
6781 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
6782 			 "num rx discard", vdev->num_rx_discard);
6783 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
6784 			 "num tx not acked", vdev->num_tx_not_acked);
6785 
6786 	for (i = 0 ; i < ARRAY_SIZE(vdev->num_tx_frames); i++)
6787 		len += scnprintf(buf + len, buf_len - len,
6788 				"%25s [%02d] %u\n",
6789 				"num tx frames", i,
6790 				vdev->num_tx_frames[i]);
6791 
6792 	for (i = 0 ; i < ARRAY_SIZE(vdev->num_tx_frames_retries); i++)
6793 		len += scnprintf(buf + len, buf_len - len,
6794 				"%25s [%02d] %u\n",
6795 				"num tx frames retries", i,
6796 				vdev->num_tx_frames_retries[i]);
6797 
6798 	for (i = 0 ; i < ARRAY_SIZE(vdev->num_tx_frames_failures); i++)
6799 		len += scnprintf(buf + len, buf_len - len,
6800 				"%25s [%02d] %u\n",
6801 				"num tx frames failures", i,
6802 				vdev->num_tx_frames_failures[i]);
6803 
6804 	for (i = 0 ; i < ARRAY_SIZE(vdev->tx_rate_history); i++)
6805 		len += scnprintf(buf + len, buf_len - len,
6806 				"%25s [%02d] 0x%08x\n",
6807 				"tx rate history", i,
6808 				vdev->tx_rate_history[i]);
6809 
6810 	for (i = 0 ; i < ARRAY_SIZE(vdev->beacon_rssi_history); i++)
6811 		len += scnprintf(buf + len, buf_len - len,
6812 				"%25s [%02d] %u\n",
6813 				"beacon rssi history", i,
6814 				vdev->beacon_rssi_history[i]);
6815 
6816 	len += scnprintf(buf + len, buf_len - len, "\n");
6817 	*length = len;
6818 }
6819 
6820 static void
6821 ath11k_wmi_fw_bcn_stats_fill(struct ath11k *ar,
6822 			     const struct ath11k_fw_stats_bcn *bcn,
6823 			     char *buf, u32 *length)
6824 {
6825 	u32 len = *length;
6826 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
6827 	struct ath11k_vif *arvif = ath11k_mac_get_arvif(ar, bcn->vdev_id);
6828 	u8 *vdev_macaddr;
6829 
6830 	if (!arvif) {
6831 		ath11k_warn(ar->ab, "invalid vdev id %d in bcn stats",
6832 			    bcn->vdev_id);
6833 		return;
6834 	}
6835 
6836 	vdev_macaddr = arvif->vif->addr;
6837 
6838 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
6839 			 "VDEV ID", bcn->vdev_id);
6840 	len += scnprintf(buf + len, buf_len - len, "%30s %pM\n",
6841 			 "VDEV MAC address", vdev_macaddr);
6842 	len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
6843 			 "================");
6844 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
6845 			 "Num of beacon tx success", bcn->tx_bcn_succ_cnt);
6846 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
6847 			 "Num of beacon tx failures", bcn->tx_bcn_outage_cnt);
6848 
6849 	len += scnprintf(buf + len, buf_len - len, "\n");
6850 	*length = len;
6851 }
6852 
6853 void ath11k_wmi_fw_stats_fill(struct ath11k *ar,
6854 			      struct ath11k_fw_stats *fw_stats,
6855 			      u32 stats_id, char *buf)
6856 {
6857 	u32 len = 0;
6858 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
6859 	const struct ath11k_fw_stats_pdev *pdev;
6860 	const struct ath11k_fw_stats_vdev *vdev;
6861 	const struct ath11k_fw_stats_bcn *bcn;
6862 	size_t num_bcn;
6863 
6864 	spin_lock_bh(&ar->data_lock);
6865 
6866 	if (stats_id == WMI_REQUEST_PDEV_STAT) {
6867 		pdev = list_first_entry_or_null(&fw_stats->pdevs,
6868 						struct ath11k_fw_stats_pdev, list);
6869 		if (!pdev) {
6870 			ath11k_warn(ar->ab, "failed to get pdev stats\n");
6871 			goto unlock;
6872 		}
6873 
6874 		ath11k_wmi_fw_pdev_base_stats_fill(pdev, buf, &len);
6875 		ath11k_wmi_fw_pdev_tx_stats_fill(pdev, buf, &len);
6876 		ath11k_wmi_fw_pdev_rx_stats_fill(pdev, buf, &len);
6877 	}
6878 
6879 	if (stats_id == WMI_REQUEST_VDEV_STAT) {
6880 		len += scnprintf(buf + len, buf_len - len, "\n");
6881 		len += scnprintf(buf + len, buf_len - len, "%30s\n",
6882 				 "ath11k VDEV stats");
6883 		len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
6884 				 "=================");
6885 
6886 		list_for_each_entry(vdev, &fw_stats->vdevs, list)
6887 			ath11k_wmi_fw_vdev_stats_fill(ar, vdev, buf, &len);
6888 	}
6889 
6890 	if (stats_id == WMI_REQUEST_BCN_STAT) {
6891 		num_bcn = list_count_nodes(&fw_stats->bcn);
6892 
6893 		len += scnprintf(buf + len, buf_len - len, "\n");
6894 		len += scnprintf(buf + len, buf_len - len, "%30s (%zu)\n",
6895 				 "ath11k Beacon stats", num_bcn);
6896 		len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
6897 				 "===================");
6898 
6899 		list_for_each_entry(bcn, &fw_stats->bcn, list)
6900 			ath11k_wmi_fw_bcn_stats_fill(ar, bcn, buf, &len);
6901 	}
6902 
6903 unlock:
6904 	spin_unlock_bh(&ar->data_lock);
6905 
6906 	if (len >= buf_len)
6907 		buf[len - 1] = 0;
6908 	else
6909 		buf[len] = 0;
6910 }
6911 
6912 static void ath11k_wmi_op_ep_tx_credits(struct ath11k_base *ab)
6913 {
6914 	/* try to send pending beacons first. they take priority */
6915 	wake_up(&ab->wmi_ab.tx_credits_wq);
6916 }
6917 
6918 static int ath11k_reg_11d_new_cc_event(struct ath11k_base *ab, struct sk_buff *skb)
6919 {
6920 	const struct wmi_11d_new_cc_ev *ev;
6921 	struct ath11k *ar;
6922 	struct ath11k_pdev *pdev;
6923 	const void **tb;
6924 	int ret, i;
6925 
6926 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
6927 	if (IS_ERR(tb)) {
6928 		ret = PTR_ERR(tb);
6929 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
6930 		return ret;
6931 	}
6932 
6933 	ev = tb[WMI_TAG_11D_NEW_COUNTRY_EVENT];
6934 	if (!ev) {
6935 		kfree(tb);
6936 		ath11k_warn(ab, "failed to fetch 11d new cc ev");
6937 		return -EPROTO;
6938 	}
6939 
6940 	spin_lock_bh(&ab->base_lock);
6941 	memcpy(&ab->new_alpha2, &ev->new_alpha2, 2);
6942 	spin_unlock_bh(&ab->base_lock);
6943 
6944 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event 11d new cc %c%c\n",
6945 		   ab->new_alpha2[0],
6946 		   ab->new_alpha2[1]);
6947 
6948 	kfree(tb);
6949 
6950 	for (i = 0; i < ab->num_radios; i++) {
6951 		pdev = &ab->pdevs[i];
6952 		ar = pdev->ar;
6953 		ar->state_11d = ATH11K_11D_IDLE;
6954 		complete(&ar->completed_11d_scan);
6955 	}
6956 
6957 	queue_work(ab->workqueue, &ab->update_11d_work);
6958 
6959 	return 0;
6960 }
6961 
6962 static void ath11k_wmi_htc_tx_complete(struct ath11k_base *ab,
6963 				       struct sk_buff *skb)
6964 {
6965 	struct ath11k_pdev_wmi *wmi = NULL;
6966 	u32 i;
6967 	u8 wmi_ep_count;
6968 	u8 eid;
6969 
6970 	eid = ATH11K_SKB_CB(skb)->eid;
6971 	dev_kfree_skb(skb);
6972 
6973 	if (eid >= ATH11K_HTC_EP_COUNT)
6974 		return;
6975 
6976 	wmi_ep_count = ab->htc.wmi_ep_count;
6977 	if (wmi_ep_count > ab->hw_params.max_radios)
6978 		return;
6979 
6980 	for (i = 0; i < ab->htc.wmi_ep_count; i++) {
6981 		if (ab->wmi_ab.wmi[i].eid == eid) {
6982 			wmi = &ab->wmi_ab.wmi[i];
6983 			break;
6984 		}
6985 	}
6986 
6987 	if (wmi)
6988 		wake_up(&wmi->tx_ce_desc_wq);
6989 }
6990 
6991 static bool ath11k_reg_is_world_alpha(char *alpha)
6992 {
6993 	if (alpha[0] == '0' && alpha[1] == '0')
6994 		return true;
6995 
6996 	if (alpha[0] == 'n' && alpha[1] == 'a')
6997 		return true;
6998 
6999 	return false;
7000 }
7001 
7002 static int ath11k_reg_chan_list_event(struct ath11k_base *ab,
7003 				      struct sk_buff *skb,
7004 				      enum wmi_reg_chan_list_cmd_type id)
7005 {
7006 	struct cur_regulatory_info *reg_info = NULL;
7007 	struct ieee80211_regdomain *regd = NULL;
7008 	bool intersect = false;
7009 	int ret = 0, pdev_idx, i, j;
7010 	struct ath11k *ar;
7011 
7012 	reg_info = kzalloc(sizeof(*reg_info), GFP_ATOMIC);
7013 	if (!reg_info) {
7014 		ret = -ENOMEM;
7015 		goto fallback;
7016 	}
7017 
7018 	if (id == WMI_REG_CHAN_LIST_CC_ID)
7019 		ret = ath11k_pull_reg_chan_list_update_ev(ab, skb, reg_info);
7020 	else
7021 		ret = ath11k_pull_reg_chan_list_ext_update_ev(ab, skb, reg_info);
7022 
7023 	if (ret) {
7024 		ath11k_warn(ab, "failed to extract regulatory info from received event\n");
7025 		goto fallback;
7026 	}
7027 
7028 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event reg chan list id %d", id);
7029 
7030 	if (reg_info->status_code != REG_SET_CC_STATUS_PASS) {
7031 		/* In case of failure to set the requested ctry,
7032 		 * fw retains the current regd. We print a failure info
7033 		 * and return from here.
7034 		 */
7035 		ath11k_warn(ab, "Failed to set the requested Country regulatory setting\n");
7036 		goto mem_free;
7037 	}
7038 
7039 	pdev_idx = reg_info->phy_id;
7040 
7041 	/* Avoid default reg rule updates sent during FW recovery if
7042 	 * it is already available
7043 	 */
7044 	spin_lock(&ab->base_lock);
7045 	if (test_bit(ATH11K_FLAG_RECOVERY, &ab->dev_flags) &&
7046 	    ab->default_regd[pdev_idx]) {
7047 		spin_unlock(&ab->base_lock);
7048 		goto mem_free;
7049 	}
7050 	spin_unlock(&ab->base_lock);
7051 
7052 	if (pdev_idx >= ab->num_radios) {
7053 		/* Process the event for phy0 only if single_pdev_only
7054 		 * is true. If pdev_idx is valid but not 0, discard the
7055 		 * event. Otherwise, it goes to fallback.
7056 		 */
7057 		if (ab->hw_params.single_pdev_only &&
7058 		    pdev_idx < ab->hw_params.num_rxmda_per_pdev)
7059 			goto mem_free;
7060 		else
7061 			goto fallback;
7062 	}
7063 
7064 	/* Avoid multiple overwrites to default regd, during core
7065 	 * stop-start after mac registration.
7066 	 */
7067 	if (ab->default_regd[pdev_idx] && !ab->new_regd[pdev_idx] &&
7068 	    !memcmp((char *)ab->default_regd[pdev_idx]->alpha2,
7069 		    (char *)reg_info->alpha2, 2))
7070 		goto mem_free;
7071 
7072 	/* Intersect new rules with default regd if a new country setting was
7073 	 * requested, i.e a default regd was already set during initialization
7074 	 * and the regd coming from this event has a valid country info.
7075 	 */
7076 	if (ab->default_regd[pdev_idx] &&
7077 	    !ath11k_reg_is_world_alpha((char *)
7078 		ab->default_regd[pdev_idx]->alpha2) &&
7079 	    !ath11k_reg_is_world_alpha((char *)reg_info->alpha2))
7080 		intersect = true;
7081 
7082 	regd = ath11k_reg_build_regd(ab, reg_info, intersect);
7083 	if (!regd) {
7084 		ath11k_warn(ab, "failed to build regd from reg_info\n");
7085 		goto fallback;
7086 	}
7087 
7088 	spin_lock(&ab->base_lock);
7089 	if (ab->default_regd[pdev_idx]) {
7090 		/* The initial rules from FW after WMI Init is to build
7091 		 * the default regd. From then on, any rules updated for
7092 		 * the pdev could be due to user reg changes.
7093 		 * Free previously built regd before assigning the newly
7094 		 * generated regd to ar. NULL pointer handling will be
7095 		 * taken care by kfree itself.
7096 		 */
7097 		ar = ab->pdevs[pdev_idx].ar;
7098 		kfree(ab->new_regd[pdev_idx]);
7099 		ab->new_regd[pdev_idx] = regd;
7100 		queue_work(ab->workqueue, &ar->regd_update_work);
7101 	} else {
7102 		/* This regd would be applied during mac registration and is
7103 		 * held constant throughout for regd intersection purpose
7104 		 */
7105 		ab->default_regd[pdev_idx] = regd;
7106 	}
7107 	ab->dfs_region = reg_info->dfs_region;
7108 	spin_unlock(&ab->base_lock);
7109 
7110 	goto mem_free;
7111 
7112 fallback:
7113 	/* Fallback to older reg (by sending previous country setting
7114 	 * again if fw has succeeded and we failed to process here.
7115 	 * The Regdomain should be uniform across driver and fw. Since the
7116 	 * FW has processed the command and sent a success status, we expect
7117 	 * this function to succeed as well. If it doesn't, CTRY needs to be
7118 	 * reverted at the fw and the old SCAN_CHAN_LIST cmd needs to be sent.
7119 	 */
7120 	/* TODO: This is rare, but still should also be handled */
7121 	WARN_ON(1);
7122 mem_free:
7123 	if (reg_info) {
7124 		kfree(reg_info->reg_rules_2ghz_ptr);
7125 		kfree(reg_info->reg_rules_5ghz_ptr);
7126 		if (reg_info->is_ext_reg_event) {
7127 			for (i = 0; i < WMI_REG_CURRENT_MAX_AP_TYPE; i++)
7128 				kfree(reg_info->reg_rules_6ghz_ap_ptr[i]);
7129 
7130 			for (j = 0; j < WMI_REG_CURRENT_MAX_AP_TYPE; j++)
7131 				for (i = 0; i < WMI_REG_MAX_CLIENT_TYPE; i++)
7132 					kfree(reg_info->reg_rules_6ghz_client_ptr[j][i]);
7133 		}
7134 		kfree(reg_info);
7135 	}
7136 	return ret;
7137 }
7138 
7139 static int ath11k_wmi_tlv_rdy_parse(struct ath11k_base *ab, u16 tag, u16 len,
7140 				    const void *ptr, void *data)
7141 {
7142 	struct wmi_tlv_rdy_parse *rdy_parse = data;
7143 	struct wmi_ready_event fixed_param;
7144 	struct wmi_mac_addr *addr_list;
7145 	struct ath11k_pdev *pdev;
7146 	u32 num_mac_addr;
7147 	int i;
7148 
7149 	switch (tag) {
7150 	case WMI_TAG_READY_EVENT:
7151 		memset(&fixed_param, 0, sizeof(fixed_param));
7152 		memcpy(&fixed_param, (struct wmi_ready_event *)ptr,
7153 		       min_t(u16, sizeof(fixed_param), len));
7154 		ab->wlan_init_status = fixed_param.ready_event_min.status;
7155 		rdy_parse->num_extra_mac_addr =
7156 			fixed_param.ready_event_min.num_extra_mac_addr;
7157 
7158 		ether_addr_copy(ab->mac_addr,
7159 				fixed_param.ready_event_min.mac_addr.addr);
7160 		ab->pktlog_defs_checksum = fixed_param.pktlog_defs_checksum;
7161 		ab->wmi_ready = true;
7162 		break;
7163 	case WMI_TAG_ARRAY_FIXED_STRUCT:
7164 		addr_list = (struct wmi_mac_addr *)ptr;
7165 		num_mac_addr = rdy_parse->num_extra_mac_addr;
7166 
7167 		if (!(ab->num_radios > 1 && num_mac_addr >= ab->num_radios))
7168 			break;
7169 
7170 		for (i = 0; i < ab->num_radios; i++) {
7171 			pdev = &ab->pdevs[i];
7172 			ether_addr_copy(pdev->mac_addr, addr_list[i].addr);
7173 		}
7174 		ab->pdevs_macaddr_valid = true;
7175 		break;
7176 	default:
7177 		break;
7178 	}
7179 
7180 	return 0;
7181 }
7182 
7183 static int ath11k_ready_event(struct ath11k_base *ab, struct sk_buff *skb)
7184 {
7185 	struct wmi_tlv_rdy_parse rdy_parse = { };
7186 	int ret;
7187 
7188 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
7189 				  ath11k_wmi_tlv_rdy_parse, &rdy_parse);
7190 	if (ret) {
7191 		ath11k_warn(ab, "failed to parse tlv %d\n", ret);
7192 		return ret;
7193 	}
7194 
7195 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event ready");
7196 
7197 	complete(&ab->wmi_ab.unified_ready);
7198 	return 0;
7199 }
7200 
7201 static void ath11k_peer_delete_resp_event(struct ath11k_base *ab, struct sk_buff *skb)
7202 {
7203 	struct wmi_peer_delete_resp_event peer_del_resp;
7204 	struct ath11k *ar;
7205 
7206 	if (ath11k_pull_peer_del_resp_ev(ab, skb, &peer_del_resp) != 0) {
7207 		ath11k_warn(ab, "failed to extract peer delete resp");
7208 		return;
7209 	}
7210 
7211 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event peer delete resp");
7212 
7213 	rcu_read_lock();
7214 	ar = ath11k_mac_get_ar_by_vdev_id(ab, peer_del_resp.vdev_id);
7215 	if (!ar) {
7216 		ath11k_warn(ab, "invalid vdev id in peer delete resp ev %d",
7217 			    peer_del_resp.vdev_id);
7218 		rcu_read_unlock();
7219 		return;
7220 	}
7221 
7222 	complete(&ar->peer_delete_done);
7223 	rcu_read_unlock();
7224 	ath11k_dbg(ab, ATH11K_DBG_WMI, "peer delete resp for vdev id %d addr %pM\n",
7225 		   peer_del_resp.vdev_id, peer_del_resp.peer_macaddr.addr);
7226 }
7227 
7228 static void ath11k_vdev_delete_resp_event(struct ath11k_base *ab,
7229 					  struct sk_buff *skb)
7230 {
7231 	struct ath11k *ar;
7232 	u32 vdev_id = 0;
7233 
7234 	if (ath11k_pull_vdev_del_resp_ev(ab, skb, &vdev_id) != 0) {
7235 		ath11k_warn(ab, "failed to extract vdev delete resp");
7236 		return;
7237 	}
7238 
7239 	rcu_read_lock();
7240 	ar = ath11k_mac_get_ar_by_vdev_id(ab, vdev_id);
7241 	if (!ar) {
7242 		ath11k_warn(ab, "invalid vdev id in vdev delete resp ev %d",
7243 			    vdev_id);
7244 		rcu_read_unlock();
7245 		return;
7246 	}
7247 
7248 	complete(&ar->vdev_delete_done);
7249 
7250 	rcu_read_unlock();
7251 
7252 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event vdev delete resp for vdev id %d\n",
7253 		   vdev_id);
7254 }
7255 
7256 static inline const char *ath11k_wmi_vdev_resp_print(u32 vdev_resp_status)
7257 {
7258 	switch (vdev_resp_status) {
7259 	case WMI_VDEV_START_RESPONSE_INVALID_VDEVID:
7260 		return "invalid vdev id";
7261 	case WMI_VDEV_START_RESPONSE_NOT_SUPPORTED:
7262 		return "not supported";
7263 	case WMI_VDEV_START_RESPONSE_DFS_VIOLATION:
7264 		return "dfs violation";
7265 	case WMI_VDEV_START_RESPONSE_INVALID_REGDOMAIN:
7266 		return "invalid regdomain";
7267 	default:
7268 		return "unknown";
7269 	}
7270 }
7271 
7272 static void ath11k_vdev_start_resp_event(struct ath11k_base *ab, struct sk_buff *skb)
7273 {
7274 	struct wmi_vdev_start_resp_event vdev_start_resp;
7275 	struct ath11k *ar;
7276 	u32 status;
7277 
7278 	if (ath11k_pull_vdev_start_resp_tlv(ab, skb, &vdev_start_resp) != 0) {
7279 		ath11k_warn(ab, "failed to extract vdev start resp");
7280 		return;
7281 	}
7282 
7283 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event start resp event");
7284 
7285 	rcu_read_lock();
7286 	ar = ath11k_mac_get_ar_by_vdev_id(ab, vdev_start_resp.vdev_id);
7287 	if (!ar) {
7288 		ath11k_warn(ab, "invalid vdev id in vdev start resp ev %d",
7289 			    vdev_start_resp.vdev_id);
7290 		rcu_read_unlock();
7291 		return;
7292 	}
7293 
7294 	ar->last_wmi_vdev_start_status = 0;
7295 
7296 	status = vdev_start_resp.status;
7297 
7298 	if (WARN_ON_ONCE(status)) {
7299 		ath11k_warn(ab, "vdev start resp error status %d (%s)\n",
7300 			    status, ath11k_wmi_vdev_resp_print(status));
7301 		ar->last_wmi_vdev_start_status = status;
7302 	}
7303 
7304 	complete(&ar->vdev_setup_done);
7305 
7306 	rcu_read_unlock();
7307 
7308 	ath11k_dbg(ab, ATH11K_DBG_WMI, "vdev start resp for vdev id %d",
7309 		   vdev_start_resp.vdev_id);
7310 }
7311 
7312 static void ath11k_bcn_tx_status_event(struct ath11k_base *ab, struct sk_buff *skb)
7313 {
7314 	struct ath11k_vif *arvif;
7315 	u32 vdev_id, tx_status;
7316 
7317 	if (ath11k_pull_bcn_tx_status_ev(ab, skb->data, skb->len,
7318 					 &vdev_id, &tx_status) != 0) {
7319 		ath11k_warn(ab, "failed to extract bcn tx status");
7320 		return;
7321 	}
7322 
7323 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event offload bcn tx status");
7324 
7325 	rcu_read_lock();
7326 	arvif = ath11k_mac_get_arvif_by_vdev_id(ab, vdev_id);
7327 	if (!arvif) {
7328 		ath11k_warn(ab, "invalid vdev id %d in bcn_tx_status",
7329 			    vdev_id);
7330 		rcu_read_unlock();
7331 		return;
7332 	}
7333 	ath11k_mac_bcn_tx_event(arvif);
7334 	rcu_read_unlock();
7335 }
7336 
7337 static void ath11k_wmi_event_peer_sta_ps_state_chg(struct ath11k_base *ab,
7338 						   struct sk_buff *skb)
7339 {
7340 	const struct wmi_peer_sta_ps_state_chg_event *ev;
7341 	struct ieee80211_sta *sta;
7342 	struct ath11k_peer *peer;
7343 	struct ath11k *ar;
7344 	struct ath11k_sta *arsta;
7345 	const void **tb;
7346 	enum ath11k_wmi_peer_ps_state peer_previous_ps_state;
7347 	int ret;
7348 
7349 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
7350 	if (IS_ERR(tb)) {
7351 		ret = PTR_ERR(tb);
7352 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
7353 		return;
7354 	}
7355 
7356 	ev = tb[WMI_TAG_PEER_STA_PS_STATECHANGE_EVENT];
7357 	if (!ev) {
7358 		ath11k_warn(ab, "failed to fetch sta ps change ev");
7359 		kfree(tb);
7360 		return;
7361 	}
7362 
7363 	ath11k_dbg(ab, ATH11K_DBG_WMI,
7364 		   "event peer sta ps change ev addr %pM state %u sup_bitmap %x ps_valid %u ts %u\n",
7365 		   ev->peer_macaddr.addr, ev->peer_ps_state,
7366 		   ev->ps_supported_bitmap, ev->peer_ps_valid,
7367 		   ev->peer_ps_timestamp);
7368 
7369 	rcu_read_lock();
7370 
7371 	spin_lock_bh(&ab->base_lock);
7372 
7373 	peer = ath11k_peer_find_by_addr(ab, ev->peer_macaddr.addr);
7374 
7375 	if (!peer) {
7376 		spin_unlock_bh(&ab->base_lock);
7377 		ath11k_warn(ab, "peer not found %pM\n", ev->peer_macaddr.addr);
7378 		goto exit;
7379 	}
7380 
7381 	ar = ath11k_mac_get_ar_by_vdev_id(ab, peer->vdev_id);
7382 
7383 	if (!ar) {
7384 		spin_unlock_bh(&ab->base_lock);
7385 		ath11k_warn(ab, "invalid vdev id in peer sta ps state change ev %d",
7386 			    peer->vdev_id);
7387 
7388 		goto exit;
7389 	}
7390 
7391 	sta = peer->sta;
7392 
7393 	spin_unlock_bh(&ab->base_lock);
7394 
7395 	if (!sta) {
7396 		ath11k_warn(ab, "failed to find station entry %pM\n",
7397 			    ev->peer_macaddr.addr);
7398 		goto exit;
7399 	}
7400 
7401 	arsta = (struct ath11k_sta *)sta->drv_priv;
7402 
7403 	spin_lock_bh(&ar->data_lock);
7404 
7405 	peer_previous_ps_state = arsta->peer_ps_state;
7406 	arsta->peer_ps_state = ev->peer_ps_state;
7407 	arsta->peer_current_ps_valid = !!ev->peer_ps_valid;
7408 
7409 	if (test_bit(WMI_TLV_SERVICE_PEER_POWER_SAVE_DURATION_SUPPORT,
7410 		     ar->ab->wmi_ab.svc_map)) {
7411 		if (!(ev->ps_supported_bitmap & WMI_PEER_PS_VALID) ||
7412 		    !(ev->ps_supported_bitmap & WMI_PEER_PS_STATE_TIMESTAMP) ||
7413 		    !ev->peer_ps_valid)
7414 			goto out;
7415 
7416 		if (arsta->peer_ps_state == WMI_PEER_PS_STATE_ON) {
7417 			arsta->ps_start_time = ev->peer_ps_timestamp;
7418 			arsta->ps_start_jiffies = jiffies;
7419 		} else if (arsta->peer_ps_state == WMI_PEER_PS_STATE_OFF &&
7420 			   peer_previous_ps_state == WMI_PEER_PS_STATE_ON) {
7421 			arsta->ps_total_duration = arsta->ps_total_duration +
7422 					(ev->peer_ps_timestamp - arsta->ps_start_time);
7423 		}
7424 
7425 		if (ar->ps_timekeeper_enable)
7426 			trace_ath11k_ps_timekeeper(ar, ev->peer_macaddr.addr,
7427 						   ev->peer_ps_timestamp,
7428 						   arsta->peer_ps_state);
7429 	}
7430 
7431 out:
7432 	spin_unlock_bh(&ar->data_lock);
7433 exit:
7434 	rcu_read_unlock();
7435 	kfree(tb);
7436 }
7437 
7438 static void ath11k_vdev_stopped_event(struct ath11k_base *ab, struct sk_buff *skb)
7439 {
7440 	struct ath11k *ar;
7441 	u32 vdev_id = 0;
7442 
7443 	if (ath11k_pull_vdev_stopped_param_tlv(ab, skb, &vdev_id) != 0) {
7444 		ath11k_warn(ab, "failed to extract vdev stopped event");
7445 		return;
7446 	}
7447 
7448 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event vdev stopped");
7449 
7450 	rcu_read_lock();
7451 	ar = ath11k_mac_get_ar_by_vdev_id(ab, vdev_id);
7452 	if (!ar) {
7453 		ath11k_warn(ab, "invalid vdev id in vdev stopped ev %d",
7454 			    vdev_id);
7455 		rcu_read_unlock();
7456 		return;
7457 	}
7458 
7459 	complete(&ar->vdev_setup_done);
7460 
7461 	rcu_read_unlock();
7462 
7463 	ath11k_dbg(ab, ATH11K_DBG_WMI, "vdev stopped for vdev id %d", vdev_id);
7464 }
7465 
7466 static void ath11k_mgmt_rx_event(struct ath11k_base *ab, struct sk_buff *skb)
7467 {
7468 	struct mgmt_rx_event_params rx_ev = {0};
7469 	struct ath11k *ar;
7470 	struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(skb);
7471 	struct ieee80211_hdr *hdr;
7472 	u16 fc;
7473 	struct ieee80211_supported_band *sband;
7474 
7475 	if (ath11k_pull_mgmt_rx_params_tlv(ab, skb, &rx_ev) != 0) {
7476 		ath11k_warn(ab, "failed to extract mgmt rx event");
7477 		dev_kfree_skb(skb);
7478 		return;
7479 	}
7480 
7481 	memset(status, 0, sizeof(*status));
7482 
7483 	ath11k_dbg(ab, ATH11K_DBG_MGMT, "event mgmt rx status %08x\n",
7484 		   rx_ev.status);
7485 
7486 	rcu_read_lock();
7487 	ar = ath11k_mac_get_ar_by_pdev_id(ab, rx_ev.pdev_id);
7488 
7489 	if (!ar) {
7490 		ath11k_warn(ab, "invalid pdev_id %d in mgmt_rx_event\n",
7491 			    rx_ev.pdev_id);
7492 		dev_kfree_skb(skb);
7493 		goto exit;
7494 	}
7495 
7496 	if ((test_bit(ATH11K_CAC_RUNNING, &ar->dev_flags)) ||
7497 	    (rx_ev.status & (WMI_RX_STATUS_ERR_DECRYPT |
7498 	    WMI_RX_STATUS_ERR_KEY_CACHE_MISS | WMI_RX_STATUS_ERR_CRC))) {
7499 		dev_kfree_skb(skb);
7500 		goto exit;
7501 	}
7502 
7503 	if (rx_ev.status & WMI_RX_STATUS_ERR_MIC)
7504 		status->flag |= RX_FLAG_MMIC_ERROR;
7505 
7506 	if (rx_ev.chan_freq >= ATH11K_MIN_6G_FREQ &&
7507 	    rx_ev.chan_freq <= ATH11K_MAX_6G_FREQ) {
7508 		status->band = NL80211_BAND_6GHZ;
7509 		status->freq = rx_ev.chan_freq;
7510 	} else if (rx_ev.channel >= 1 && rx_ev.channel <= 14) {
7511 		status->band = NL80211_BAND_2GHZ;
7512 	} else if (rx_ev.channel >= 36 && rx_ev.channel <= ATH11K_MAX_5G_CHAN) {
7513 		status->band = NL80211_BAND_5GHZ;
7514 	} else {
7515 		/* Shouldn't happen unless list of advertised channels to
7516 		 * mac80211 has been changed.
7517 		 */
7518 		WARN_ON_ONCE(1);
7519 		dev_kfree_skb(skb);
7520 		goto exit;
7521 	}
7522 
7523 	if (rx_ev.phy_mode == MODE_11B &&
7524 	    (status->band == NL80211_BAND_5GHZ || status->band == NL80211_BAND_6GHZ))
7525 		ath11k_dbg(ab, ATH11K_DBG_WMI,
7526 			   "mgmt rx 11b (CCK) on 5/6GHz, band = %d\n", status->band);
7527 
7528 	sband = &ar->mac.sbands[status->band];
7529 
7530 	if (status->band != NL80211_BAND_6GHZ)
7531 		status->freq = ieee80211_channel_to_frequency(rx_ev.channel,
7532 							      status->band);
7533 
7534 	status->signal = rx_ev.snr + ATH11K_DEFAULT_NOISE_FLOOR;
7535 	status->rate_idx = ath11k_mac_bitrate_to_idx(sband, rx_ev.rate / 100);
7536 
7537 	hdr = (struct ieee80211_hdr *)skb->data;
7538 	fc = le16_to_cpu(hdr->frame_control);
7539 
7540 	/* Firmware is guaranteed to report all essential management frames via
7541 	 * WMI while it can deliver some extra via HTT. Since there can be
7542 	 * duplicates split the reporting wrt monitor/sniffing.
7543 	 */
7544 	status->flag |= RX_FLAG_SKIP_MONITOR;
7545 
7546 	/* In case of PMF, FW delivers decrypted frames with Protected Bit set.
7547 	 * Don't clear that. Also, FW delivers broadcast management frames
7548 	 * (ex: group privacy action frames in mesh) as encrypted payload.
7549 	 */
7550 	if (ieee80211_has_protected(hdr->frame_control) &&
7551 	    !is_multicast_ether_addr(ieee80211_get_DA(hdr))) {
7552 		status->flag |= RX_FLAG_DECRYPTED;
7553 
7554 		if (!ieee80211_is_robust_mgmt_frame(skb)) {
7555 			status->flag |= RX_FLAG_IV_STRIPPED |
7556 					RX_FLAG_MMIC_STRIPPED;
7557 			hdr->frame_control = __cpu_to_le16(fc &
7558 					     ~IEEE80211_FCTL_PROTECTED);
7559 		}
7560 	}
7561 
7562 	if (ieee80211_is_beacon(hdr->frame_control))
7563 		ath11k_mac_handle_beacon(ar, skb);
7564 
7565 	ath11k_dbg(ab, ATH11K_DBG_MGMT,
7566 		   "event mgmt rx skb %pK len %d ftype %02x stype %02x\n",
7567 		   skb, skb->len,
7568 		   fc & IEEE80211_FCTL_FTYPE, fc & IEEE80211_FCTL_STYPE);
7569 
7570 	ath11k_dbg(ab, ATH11K_DBG_MGMT,
7571 		   "event mgmt rx freq %d band %d snr %d, rate_idx %d\n",
7572 		   status->freq, status->band, status->signal,
7573 		   status->rate_idx);
7574 
7575 	ieee80211_rx_ni(ar->hw, skb);
7576 
7577 exit:
7578 	rcu_read_unlock();
7579 }
7580 
7581 static void ath11k_mgmt_tx_compl_event(struct ath11k_base *ab, struct sk_buff *skb)
7582 {
7583 	struct wmi_mgmt_tx_compl_event tx_compl_param = {0};
7584 	struct ath11k *ar;
7585 
7586 	if (ath11k_pull_mgmt_tx_compl_param_tlv(ab, skb, &tx_compl_param) != 0) {
7587 		ath11k_warn(ab, "failed to extract mgmt tx compl event");
7588 		return;
7589 	}
7590 
7591 	rcu_read_lock();
7592 	ar = ath11k_mac_get_ar_by_pdev_id(ab, tx_compl_param.pdev_id);
7593 	if (!ar) {
7594 		ath11k_warn(ab, "invalid pdev id %d in mgmt_tx_compl_event\n",
7595 			    tx_compl_param.pdev_id);
7596 		goto exit;
7597 	}
7598 
7599 	wmi_process_mgmt_tx_comp(ar, &tx_compl_param);
7600 
7601 	ath11k_dbg(ab, ATH11K_DBG_MGMT,
7602 		   "event mgmt tx compl ev pdev_id %d, desc_id %d, status %d ack_rssi %d",
7603 		   tx_compl_param.pdev_id, tx_compl_param.desc_id,
7604 		   tx_compl_param.status, tx_compl_param.ack_rssi);
7605 
7606 exit:
7607 	rcu_read_unlock();
7608 }
7609 
7610 static struct ath11k *ath11k_get_ar_on_scan_state(struct ath11k_base *ab,
7611 						  u32 vdev_id,
7612 						  enum ath11k_scan_state state)
7613 {
7614 	int i;
7615 	struct ath11k_pdev *pdev;
7616 	struct ath11k *ar;
7617 
7618 	for (i = 0; i < ab->num_radios; i++) {
7619 		pdev = rcu_dereference(ab->pdevs_active[i]);
7620 		if (pdev && pdev->ar) {
7621 			ar = pdev->ar;
7622 
7623 			spin_lock_bh(&ar->data_lock);
7624 			if (ar->scan.state == state &&
7625 			    ar->scan.vdev_id == vdev_id) {
7626 				spin_unlock_bh(&ar->data_lock);
7627 				return ar;
7628 			}
7629 			spin_unlock_bh(&ar->data_lock);
7630 		}
7631 	}
7632 	return NULL;
7633 }
7634 
7635 static void ath11k_scan_event(struct ath11k_base *ab, struct sk_buff *skb)
7636 {
7637 	struct ath11k *ar;
7638 	struct wmi_scan_event scan_ev = {0};
7639 
7640 	if (ath11k_pull_scan_ev(ab, skb, &scan_ev) != 0) {
7641 		ath11k_warn(ab, "failed to extract scan event");
7642 		return;
7643 	}
7644 
7645 	rcu_read_lock();
7646 
7647 	/* In case the scan was cancelled, ex. during interface teardown,
7648 	 * the interface will not be found in active interfaces.
7649 	 * Rather, in such scenarios, iterate over the active pdev's to
7650 	 * search 'ar' if the corresponding 'ar' scan is ABORTING and the
7651 	 * aborting scan's vdev id matches this event info.
7652 	 */
7653 	if (scan_ev.event_type == WMI_SCAN_EVENT_COMPLETED &&
7654 	    scan_ev.reason == WMI_SCAN_REASON_CANCELLED) {
7655 		ar = ath11k_get_ar_on_scan_state(ab, scan_ev.vdev_id,
7656 						 ATH11K_SCAN_ABORTING);
7657 		if (!ar)
7658 			ar = ath11k_get_ar_on_scan_state(ab, scan_ev.vdev_id,
7659 							 ATH11K_SCAN_RUNNING);
7660 	} else {
7661 		ar = ath11k_mac_get_ar_by_vdev_id(ab, scan_ev.vdev_id);
7662 	}
7663 
7664 	if (!ar) {
7665 		ath11k_warn(ab, "Received scan event for unknown vdev");
7666 		rcu_read_unlock();
7667 		return;
7668 	}
7669 
7670 	spin_lock_bh(&ar->data_lock);
7671 
7672 	ath11k_dbg(ab, ATH11K_DBG_WMI,
7673 		   "event scan %s type %d reason %d freq %d req_id %d scan_id %d vdev_id %d state %s (%d)\n",
7674 		   ath11k_wmi_event_scan_type_str(scan_ev.event_type, scan_ev.reason),
7675 		   scan_ev.event_type, scan_ev.reason, scan_ev.channel_freq,
7676 		   scan_ev.scan_req_id, scan_ev.scan_id, scan_ev.vdev_id,
7677 		   ath11k_scan_state_str(ar->scan.state), ar->scan.state);
7678 
7679 	switch (scan_ev.event_type) {
7680 	case WMI_SCAN_EVENT_STARTED:
7681 		ath11k_wmi_event_scan_started(ar);
7682 		break;
7683 	case WMI_SCAN_EVENT_COMPLETED:
7684 		ath11k_wmi_event_scan_completed(ar);
7685 		break;
7686 	case WMI_SCAN_EVENT_BSS_CHANNEL:
7687 		ath11k_wmi_event_scan_bss_chan(ar);
7688 		break;
7689 	case WMI_SCAN_EVENT_FOREIGN_CHAN:
7690 		ath11k_wmi_event_scan_foreign_chan(ar, scan_ev.channel_freq);
7691 		break;
7692 	case WMI_SCAN_EVENT_START_FAILED:
7693 		ath11k_warn(ab, "received scan start failure event\n");
7694 		ath11k_wmi_event_scan_start_failed(ar);
7695 		break;
7696 	case WMI_SCAN_EVENT_DEQUEUED:
7697 		__ath11k_mac_scan_finish(ar);
7698 		break;
7699 	case WMI_SCAN_EVENT_PREEMPTED:
7700 	case WMI_SCAN_EVENT_RESTARTED:
7701 	case WMI_SCAN_EVENT_FOREIGN_CHAN_EXIT:
7702 	default:
7703 		break;
7704 	}
7705 
7706 	spin_unlock_bh(&ar->data_lock);
7707 
7708 	rcu_read_unlock();
7709 }
7710 
7711 static void ath11k_peer_sta_kickout_event(struct ath11k_base *ab, struct sk_buff *skb)
7712 {
7713 	struct wmi_peer_sta_kickout_arg arg = {};
7714 	struct ieee80211_sta *sta;
7715 	struct ath11k_peer *peer;
7716 	struct ath11k *ar;
7717 	u32 vdev_id;
7718 
7719 	if (ath11k_pull_peer_sta_kickout_ev(ab, skb, &arg) != 0) {
7720 		ath11k_warn(ab, "failed to extract peer sta kickout event");
7721 		return;
7722 	}
7723 
7724 	rcu_read_lock();
7725 
7726 	spin_lock_bh(&ab->base_lock);
7727 
7728 	peer = ath11k_peer_find_by_addr(ab, arg.mac_addr);
7729 
7730 	if (!peer) {
7731 		ath11k_warn(ab, "peer not found %pM\n",
7732 			    arg.mac_addr);
7733 		spin_unlock_bh(&ab->base_lock);
7734 		goto exit;
7735 	}
7736 
7737 	vdev_id = peer->vdev_id;
7738 
7739 	spin_unlock_bh(&ab->base_lock);
7740 
7741 	ar = ath11k_mac_get_ar_by_vdev_id(ab, vdev_id);
7742 	if (!ar) {
7743 		ath11k_warn(ab, "invalid vdev id in peer sta kickout ev %d",
7744 			    peer->vdev_id);
7745 		goto exit;
7746 	}
7747 
7748 	sta = ieee80211_find_sta_by_ifaddr(ar->hw,
7749 					   arg.mac_addr, NULL);
7750 	if (!sta) {
7751 		ath11k_warn(ab, "Spurious quick kickout for STA %pM\n",
7752 			    arg.mac_addr);
7753 		goto exit;
7754 	}
7755 
7756 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event peer sta kickout %pM",
7757 		   arg.mac_addr);
7758 
7759 	ieee80211_report_low_ack(sta, 10);
7760 
7761 exit:
7762 	rcu_read_unlock();
7763 }
7764 
7765 static void ath11k_roam_event(struct ath11k_base *ab, struct sk_buff *skb)
7766 {
7767 	struct wmi_roam_event roam_ev = {};
7768 	struct ath11k *ar;
7769 
7770 	if (ath11k_pull_roam_ev(ab, skb, &roam_ev) != 0) {
7771 		ath11k_warn(ab, "failed to extract roam event");
7772 		return;
7773 	}
7774 
7775 	ath11k_dbg(ab, ATH11K_DBG_WMI,
7776 		   "event roam vdev %u reason 0x%08x rssi %d\n",
7777 		   roam_ev.vdev_id, roam_ev.reason, roam_ev.rssi);
7778 
7779 	rcu_read_lock();
7780 	ar = ath11k_mac_get_ar_by_vdev_id(ab, roam_ev.vdev_id);
7781 	if (!ar) {
7782 		ath11k_warn(ab, "invalid vdev id in roam ev %d",
7783 			    roam_ev.vdev_id);
7784 		rcu_read_unlock();
7785 		return;
7786 	}
7787 
7788 	if (roam_ev.reason >= WMI_ROAM_REASON_MAX)
7789 		ath11k_warn(ab, "ignoring unknown roam event reason %d on vdev %i\n",
7790 			    roam_ev.reason, roam_ev.vdev_id);
7791 
7792 	switch (roam_ev.reason) {
7793 	case WMI_ROAM_REASON_BEACON_MISS:
7794 		ath11k_mac_handle_beacon_miss(ar, roam_ev.vdev_id);
7795 		break;
7796 	case WMI_ROAM_REASON_BETTER_AP:
7797 	case WMI_ROAM_REASON_LOW_RSSI:
7798 	case WMI_ROAM_REASON_SUITABLE_AP_FOUND:
7799 	case WMI_ROAM_REASON_HO_FAILED:
7800 		ath11k_warn(ab, "ignoring not implemented roam event reason %d on vdev %i\n",
7801 			    roam_ev.reason, roam_ev.vdev_id);
7802 		break;
7803 	}
7804 
7805 	rcu_read_unlock();
7806 }
7807 
7808 static void ath11k_chan_info_event(struct ath11k_base *ab, struct sk_buff *skb)
7809 {
7810 	struct wmi_chan_info_event ch_info_ev = {0};
7811 	struct ath11k *ar;
7812 	struct survey_info *survey;
7813 	int idx;
7814 	/* HW channel counters frequency value in hertz */
7815 	u32 cc_freq_hz = ab->cc_freq_hz;
7816 
7817 	if (ath11k_pull_chan_info_ev(ab, skb->data, skb->len, &ch_info_ev) != 0) {
7818 		ath11k_warn(ab, "failed to extract chan info event");
7819 		return;
7820 	}
7821 
7822 	ath11k_dbg(ab, ATH11K_DBG_WMI,
7823 		   "event chan info vdev_id %d err_code %d freq %d cmd_flags %d noise_floor %d rx_clear_count %d cycle_count %d mac_clk_mhz %d\n",
7824 		   ch_info_ev.vdev_id, ch_info_ev.err_code, ch_info_ev.freq,
7825 		   ch_info_ev.cmd_flags, ch_info_ev.noise_floor,
7826 		   ch_info_ev.rx_clear_count, ch_info_ev.cycle_count,
7827 		   ch_info_ev.mac_clk_mhz);
7828 
7829 	if (ch_info_ev.cmd_flags == WMI_CHAN_INFO_END_RESP) {
7830 		ath11k_dbg(ab, ATH11K_DBG_WMI, "chan info report completed\n");
7831 		return;
7832 	}
7833 
7834 	rcu_read_lock();
7835 	ar = ath11k_mac_get_ar_by_vdev_id(ab, ch_info_ev.vdev_id);
7836 	if (!ar) {
7837 		ath11k_warn(ab, "invalid vdev id in chan info ev %d",
7838 			    ch_info_ev.vdev_id);
7839 		rcu_read_unlock();
7840 		return;
7841 	}
7842 	spin_lock_bh(&ar->data_lock);
7843 
7844 	switch (ar->scan.state) {
7845 	case ATH11K_SCAN_IDLE:
7846 	case ATH11K_SCAN_STARTING:
7847 		ath11k_warn(ab, "received chan info event without a scan request, ignoring\n");
7848 		goto exit;
7849 	case ATH11K_SCAN_RUNNING:
7850 	case ATH11K_SCAN_ABORTING:
7851 		break;
7852 	}
7853 
7854 	idx = freq_to_idx(ar, ch_info_ev.freq);
7855 	if (idx >= ARRAY_SIZE(ar->survey)) {
7856 		ath11k_warn(ab, "chan info: invalid frequency %d (idx %d out of bounds)\n",
7857 			    ch_info_ev.freq, idx);
7858 		goto exit;
7859 	}
7860 
7861 	/* If FW provides MAC clock frequency in Mhz, overriding the initialized
7862 	 * HW channel counters frequency value
7863 	 */
7864 	if (ch_info_ev.mac_clk_mhz)
7865 		cc_freq_hz = (ch_info_ev.mac_clk_mhz * 1000);
7866 
7867 	if (ch_info_ev.cmd_flags == WMI_CHAN_INFO_START_RESP) {
7868 		survey = &ar->survey[idx];
7869 		memset(survey, 0, sizeof(*survey));
7870 		survey->noise = ch_info_ev.noise_floor;
7871 		survey->filled = SURVEY_INFO_NOISE_DBM | SURVEY_INFO_TIME |
7872 				 SURVEY_INFO_TIME_BUSY;
7873 		survey->time = div_u64(ch_info_ev.cycle_count, cc_freq_hz);
7874 		survey->time_busy = div_u64(ch_info_ev.rx_clear_count, cc_freq_hz);
7875 	}
7876 exit:
7877 	spin_unlock_bh(&ar->data_lock);
7878 	rcu_read_unlock();
7879 }
7880 
7881 static void
7882 ath11k_pdev_bss_chan_info_event(struct ath11k_base *ab, struct sk_buff *skb)
7883 {
7884 	struct wmi_pdev_bss_chan_info_event bss_ch_info_ev = {};
7885 	struct survey_info *survey;
7886 	struct ath11k *ar;
7887 	u32 cc_freq_hz = ab->cc_freq_hz;
7888 	u64 busy, total, tx, rx, rx_bss;
7889 	int idx;
7890 
7891 	if (ath11k_pull_pdev_bss_chan_info_ev(ab, skb, &bss_ch_info_ev) != 0) {
7892 		ath11k_warn(ab, "failed to extract pdev bss chan info event");
7893 		return;
7894 	}
7895 
7896 	busy = (u64)(bss_ch_info_ev.rx_clear_count_high) << 32 |
7897 			bss_ch_info_ev.rx_clear_count_low;
7898 
7899 	total = (u64)(bss_ch_info_ev.cycle_count_high) << 32 |
7900 			bss_ch_info_ev.cycle_count_low;
7901 
7902 	tx = (u64)(bss_ch_info_ev.tx_cycle_count_high) << 32 |
7903 			bss_ch_info_ev.tx_cycle_count_low;
7904 
7905 	rx = (u64)(bss_ch_info_ev.rx_cycle_count_high) << 32 |
7906 			bss_ch_info_ev.rx_cycle_count_low;
7907 
7908 	rx_bss = (u64)(bss_ch_info_ev.rx_bss_cycle_count_high) << 32 |
7909 			bss_ch_info_ev.rx_bss_cycle_count_low;
7910 
7911 	ath11k_dbg(ab, ATH11K_DBG_WMI,
7912 		   "event pdev bss chan info:\n pdev_id: %d freq: %d noise: %d cycle: busy %llu total %llu tx %llu rx %llu rx_bss %llu\n",
7913 		   bss_ch_info_ev.pdev_id, bss_ch_info_ev.freq,
7914 		   bss_ch_info_ev.noise_floor, busy, total,
7915 		   tx, rx, rx_bss);
7916 
7917 	rcu_read_lock();
7918 	ar = ath11k_mac_get_ar_by_pdev_id(ab, bss_ch_info_ev.pdev_id);
7919 
7920 	if (!ar) {
7921 		ath11k_warn(ab, "invalid pdev id %d in bss_chan_info event\n",
7922 			    bss_ch_info_ev.pdev_id);
7923 		rcu_read_unlock();
7924 		return;
7925 	}
7926 
7927 	spin_lock_bh(&ar->data_lock);
7928 	idx = freq_to_idx(ar, bss_ch_info_ev.freq);
7929 	if (idx >= ARRAY_SIZE(ar->survey)) {
7930 		ath11k_warn(ab, "bss chan info: invalid frequency %d (idx %d out of bounds)\n",
7931 			    bss_ch_info_ev.freq, idx);
7932 		goto exit;
7933 	}
7934 
7935 	survey = &ar->survey[idx];
7936 
7937 	survey->noise     = bss_ch_info_ev.noise_floor;
7938 	survey->time      = div_u64(total, cc_freq_hz);
7939 	survey->time_busy = div_u64(busy, cc_freq_hz);
7940 	survey->time_rx   = div_u64(rx_bss, cc_freq_hz);
7941 	survey->time_tx   = div_u64(tx, cc_freq_hz);
7942 	survey->filled   |= (SURVEY_INFO_NOISE_DBM |
7943 			     SURVEY_INFO_TIME |
7944 			     SURVEY_INFO_TIME_BUSY |
7945 			     SURVEY_INFO_TIME_RX |
7946 			     SURVEY_INFO_TIME_TX);
7947 exit:
7948 	spin_unlock_bh(&ar->data_lock);
7949 	complete(&ar->bss_survey_done);
7950 
7951 	rcu_read_unlock();
7952 }
7953 
7954 static void ath11k_vdev_install_key_compl_event(struct ath11k_base *ab,
7955 						struct sk_buff *skb)
7956 {
7957 	struct wmi_vdev_install_key_complete_arg install_key_compl = {0};
7958 	struct ath11k *ar;
7959 
7960 	if (ath11k_pull_vdev_install_key_compl_ev(ab, skb, &install_key_compl) != 0) {
7961 		ath11k_warn(ab, "failed to extract install key compl event");
7962 		return;
7963 	}
7964 
7965 	ath11k_dbg(ab, ATH11K_DBG_WMI,
7966 		   "event vdev install key ev idx %d flags %08x macaddr %pM status %d\n",
7967 		   install_key_compl.key_idx, install_key_compl.key_flags,
7968 		   install_key_compl.macaddr, install_key_compl.status);
7969 
7970 	rcu_read_lock();
7971 	ar = ath11k_mac_get_ar_by_vdev_id(ab, install_key_compl.vdev_id);
7972 	if (!ar) {
7973 		ath11k_warn(ab, "invalid vdev id in install key compl ev %d",
7974 			    install_key_compl.vdev_id);
7975 		rcu_read_unlock();
7976 		return;
7977 	}
7978 
7979 	ar->install_key_status = 0;
7980 
7981 	if (install_key_compl.status != WMI_VDEV_INSTALL_KEY_COMPL_STATUS_SUCCESS) {
7982 		ath11k_warn(ab, "install key failed for %pM status %d\n",
7983 			    install_key_compl.macaddr, install_key_compl.status);
7984 		ar->install_key_status = install_key_compl.status;
7985 	}
7986 
7987 	complete(&ar->install_key_done);
7988 	rcu_read_unlock();
7989 }
7990 
7991 static int  ath11k_wmi_tlv_services_parser(struct ath11k_base *ab,
7992 					   u16 tag, u16 len,
7993 					   const void *ptr, void *data)
7994 {
7995 	const struct wmi_service_available_event *ev;
7996 	u32 *wmi_ext2_service_bitmap;
7997 	int i, j;
7998 
7999 	switch (tag) {
8000 	case WMI_TAG_SERVICE_AVAILABLE_EVENT:
8001 		ev = (struct wmi_service_available_event *)ptr;
8002 		for (i = 0, j = WMI_MAX_SERVICE;
8003 			i < WMI_SERVICE_SEGMENT_BM_SIZE32 && j < WMI_MAX_EXT_SERVICE;
8004 			i++) {
8005 			do {
8006 				if (ev->wmi_service_segment_bitmap[i] &
8007 				    BIT(j % WMI_AVAIL_SERVICE_BITS_IN_SIZE32))
8008 					set_bit(j, ab->wmi_ab.svc_map);
8009 			} while (++j % WMI_AVAIL_SERVICE_BITS_IN_SIZE32);
8010 		}
8011 
8012 		ath11k_dbg(ab, ATH11K_DBG_WMI,
8013 			   "wmi_ext_service_bitmap 0:0x%04x, 1:0x%04x, 2:0x%04x, 3:0x%04x",
8014 			   ev->wmi_service_segment_bitmap[0],
8015 			   ev->wmi_service_segment_bitmap[1],
8016 			   ev->wmi_service_segment_bitmap[2],
8017 			   ev->wmi_service_segment_bitmap[3]);
8018 		break;
8019 	case WMI_TAG_ARRAY_UINT32:
8020 		wmi_ext2_service_bitmap = (u32 *)ptr;
8021 		for (i = 0, j = WMI_MAX_EXT_SERVICE;
8022 			i < WMI_SERVICE_SEGMENT_BM_SIZE32 && j < WMI_MAX_EXT2_SERVICE;
8023 			i++) {
8024 			do {
8025 				if (wmi_ext2_service_bitmap[i] &
8026 				    BIT(j % WMI_AVAIL_SERVICE_BITS_IN_SIZE32))
8027 					set_bit(j, ab->wmi_ab.svc_map);
8028 			} while (++j % WMI_AVAIL_SERVICE_BITS_IN_SIZE32);
8029 		}
8030 
8031 		ath11k_dbg(ab, ATH11K_DBG_WMI,
8032 			   "wmi_ext2_service__bitmap  0:0x%04x, 1:0x%04x, 2:0x%04x, 3:0x%04x",
8033 			   wmi_ext2_service_bitmap[0], wmi_ext2_service_bitmap[1],
8034 			   wmi_ext2_service_bitmap[2], wmi_ext2_service_bitmap[3]);
8035 		break;
8036 	}
8037 	return 0;
8038 }
8039 
8040 static void ath11k_service_available_event(struct ath11k_base *ab, struct sk_buff *skb)
8041 {
8042 	int ret;
8043 
8044 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
8045 				  ath11k_wmi_tlv_services_parser,
8046 				  NULL);
8047 	if (ret)
8048 		ath11k_warn(ab, "failed to parse services available tlv %d\n", ret);
8049 
8050 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event service available");
8051 }
8052 
8053 static void ath11k_peer_assoc_conf_event(struct ath11k_base *ab, struct sk_buff *skb)
8054 {
8055 	struct wmi_peer_assoc_conf_arg peer_assoc_conf = {0};
8056 	struct ath11k *ar;
8057 
8058 	if (ath11k_pull_peer_assoc_conf_ev(ab, skb, &peer_assoc_conf) != 0) {
8059 		ath11k_warn(ab, "failed to extract peer assoc conf event");
8060 		return;
8061 	}
8062 
8063 	ath11k_dbg(ab, ATH11K_DBG_WMI,
8064 		   "event peer assoc conf ev vdev id %d macaddr %pM\n",
8065 		   peer_assoc_conf.vdev_id, peer_assoc_conf.macaddr);
8066 
8067 	rcu_read_lock();
8068 	ar = ath11k_mac_get_ar_by_vdev_id(ab, peer_assoc_conf.vdev_id);
8069 
8070 	if (!ar) {
8071 		ath11k_warn(ab, "invalid vdev id in peer assoc conf ev %d",
8072 			    peer_assoc_conf.vdev_id);
8073 		rcu_read_unlock();
8074 		return;
8075 	}
8076 
8077 	complete(&ar->peer_assoc_done);
8078 	rcu_read_unlock();
8079 }
8080 
8081 static void ath11k_update_stats_event(struct ath11k_base *ab, struct sk_buff *skb)
8082 {
8083 	struct ath11k_fw_stats stats = {};
8084 	struct ath11k *ar;
8085 	int ret;
8086 
8087 	INIT_LIST_HEAD(&stats.pdevs);
8088 	INIT_LIST_HEAD(&stats.vdevs);
8089 	INIT_LIST_HEAD(&stats.bcn);
8090 
8091 	ret = ath11k_wmi_pull_fw_stats(ab, skb, &stats);
8092 	if (ret) {
8093 		ath11k_warn(ab, "failed to pull fw stats: %d\n", ret);
8094 		goto free;
8095 	}
8096 
8097 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event update stats");
8098 
8099 	rcu_read_lock();
8100 	ar = ath11k_mac_get_ar_by_pdev_id(ab, stats.pdev_id);
8101 	if (!ar) {
8102 		rcu_read_unlock();
8103 		ath11k_warn(ab, "failed to get ar for pdev_id %d: %d\n",
8104 			    stats.pdev_id, ret);
8105 		goto free;
8106 	}
8107 
8108 	spin_lock_bh(&ar->data_lock);
8109 
8110 	/* WMI_REQUEST_PDEV_STAT can be requested via .get_txpower mac ops or via
8111 	 * debugfs fw stats. Therefore, processing it separately.
8112 	 */
8113 	if (stats.stats_id == WMI_REQUEST_PDEV_STAT) {
8114 		list_splice_tail_init(&stats.pdevs, &ar->fw_stats.pdevs);
8115 		ar->fw_stats_done = true;
8116 		goto complete;
8117 	}
8118 
8119 	/* WMI_REQUEST_VDEV_STAT, WMI_REQUEST_BCN_STAT and WMI_REQUEST_RSSI_PER_CHAIN_STAT
8120 	 * are currently requested only via debugfs fw stats. Hence, processing these
8121 	 * in debugfs context
8122 	 */
8123 	ath11k_debugfs_fw_stats_process(ar, &stats);
8124 
8125 complete:
8126 	complete(&ar->fw_stats_complete);
8127 	rcu_read_unlock();
8128 	spin_unlock_bh(&ar->data_lock);
8129 
8130 free:
8131 	ath11k_fw_stats_free(&stats);
8132 }
8133 
8134 /* PDEV_CTL_FAILSAFE_CHECK_EVENT is received from FW when the frequency scanned
8135  * is not part of BDF CTL(Conformance test limits) table entries.
8136  */
8137 static void ath11k_pdev_ctl_failsafe_check_event(struct ath11k_base *ab,
8138 						 struct sk_buff *skb)
8139 {
8140 	const void **tb;
8141 	const struct wmi_pdev_ctl_failsafe_chk_event *ev;
8142 	int ret;
8143 
8144 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
8145 	if (IS_ERR(tb)) {
8146 		ret = PTR_ERR(tb);
8147 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
8148 		return;
8149 	}
8150 
8151 	ev = tb[WMI_TAG_PDEV_CTL_FAILSAFE_CHECK_EVENT];
8152 	if (!ev) {
8153 		ath11k_warn(ab, "failed to fetch pdev ctl failsafe check ev");
8154 		kfree(tb);
8155 		return;
8156 	}
8157 
8158 	ath11k_dbg(ab, ATH11K_DBG_WMI,
8159 		   "event pdev ctl failsafe check status %d\n",
8160 		   ev->ctl_failsafe_status);
8161 
8162 	/* If ctl_failsafe_status is set to 1 FW will max out the Transmit power
8163 	 * to 10 dBm else the CTL power entry in the BDF would be picked up.
8164 	 */
8165 	if (ev->ctl_failsafe_status != 0)
8166 		ath11k_warn(ab, "pdev ctl failsafe failure status %d",
8167 			    ev->ctl_failsafe_status);
8168 
8169 	kfree(tb);
8170 }
8171 
8172 static void
8173 ath11k_wmi_process_csa_switch_count_event(struct ath11k_base *ab,
8174 					  const struct wmi_pdev_csa_switch_ev *ev,
8175 					  const u32 *vdev_ids)
8176 {
8177 	int i;
8178 	struct ath11k_vif *arvif;
8179 
8180 	/* Finish CSA once the switch count becomes NULL */
8181 	if (ev->current_switch_count)
8182 		return;
8183 
8184 	rcu_read_lock();
8185 	for (i = 0; i < ev->num_vdevs; i++) {
8186 		arvif = ath11k_mac_get_arvif_by_vdev_id(ab, vdev_ids[i]);
8187 
8188 		if (!arvif) {
8189 			ath11k_warn(ab, "Recvd csa status for unknown vdev %d",
8190 				    vdev_ids[i]);
8191 			continue;
8192 		}
8193 
8194 		if (arvif->is_up && arvif->vif->bss_conf.csa_active)
8195 			ieee80211_csa_finish(arvif->vif);
8196 	}
8197 	rcu_read_unlock();
8198 }
8199 
8200 static void
8201 ath11k_wmi_pdev_csa_switch_count_status_event(struct ath11k_base *ab,
8202 					      struct sk_buff *skb)
8203 {
8204 	const void **tb;
8205 	const struct wmi_pdev_csa_switch_ev *ev;
8206 	const u32 *vdev_ids;
8207 	int ret;
8208 
8209 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
8210 	if (IS_ERR(tb)) {
8211 		ret = PTR_ERR(tb);
8212 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
8213 		return;
8214 	}
8215 
8216 	ev = tb[WMI_TAG_PDEV_CSA_SWITCH_COUNT_STATUS_EVENT];
8217 	vdev_ids = tb[WMI_TAG_ARRAY_UINT32];
8218 
8219 	if (!ev || !vdev_ids) {
8220 		ath11k_warn(ab, "failed to fetch pdev csa switch count ev");
8221 		kfree(tb);
8222 		return;
8223 	}
8224 
8225 	ath11k_dbg(ab, ATH11K_DBG_WMI,
8226 		   "event pdev csa switch count %d for pdev %d, num_vdevs %d",
8227 		   ev->current_switch_count, ev->pdev_id,
8228 		   ev->num_vdevs);
8229 
8230 	ath11k_wmi_process_csa_switch_count_event(ab, ev, vdev_ids);
8231 
8232 	kfree(tb);
8233 }
8234 
8235 static void
8236 ath11k_wmi_pdev_dfs_radar_detected_event(struct ath11k_base *ab, struct sk_buff *skb)
8237 {
8238 	const void **tb;
8239 	const struct wmi_pdev_radar_ev *ev;
8240 	struct ath11k *ar;
8241 	int ret;
8242 
8243 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
8244 	if (IS_ERR(tb)) {
8245 		ret = PTR_ERR(tb);
8246 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
8247 		return;
8248 	}
8249 
8250 	ev = tb[WMI_TAG_PDEV_DFS_RADAR_DETECTION_EVENT];
8251 
8252 	if (!ev) {
8253 		ath11k_warn(ab, "failed to fetch pdev dfs radar detected ev");
8254 		kfree(tb);
8255 		return;
8256 	}
8257 
8258 	ath11k_dbg(ab, ATH11K_DBG_WMI,
8259 		   "event pdev dfs radar detected on pdev %d, detection mode %d, chan freq %d, chan_width %d, detector id %d, seg id %d, timestamp %d, chirp %d, freq offset %d, sidx %d",
8260 		   ev->pdev_id, ev->detection_mode, ev->chan_freq, ev->chan_width,
8261 		   ev->detector_id, ev->segment_id, ev->timestamp, ev->is_chirp,
8262 		   ev->freq_offset, ev->sidx);
8263 
8264 	ar = ath11k_mac_get_ar_by_pdev_id(ab, ev->pdev_id);
8265 
8266 	if (!ar) {
8267 		ath11k_warn(ab, "radar detected in invalid pdev %d\n",
8268 			    ev->pdev_id);
8269 		goto exit;
8270 	}
8271 
8272 	ath11k_dbg(ar->ab, ATH11K_DBG_REG, "DFS Radar Detected in pdev %d\n",
8273 		   ev->pdev_id);
8274 
8275 	if (ar->dfs_block_radar_events)
8276 		ath11k_info(ab, "DFS Radar detected, but ignored as requested\n");
8277 	else
8278 		ieee80211_radar_detected(ar->hw);
8279 
8280 exit:
8281 	kfree(tb);
8282 }
8283 
8284 static void
8285 ath11k_wmi_pdev_temperature_event(struct ath11k_base *ab,
8286 				  struct sk_buff *skb)
8287 {
8288 	struct ath11k *ar;
8289 	const void **tb;
8290 	const struct wmi_pdev_temperature_event *ev;
8291 	int ret;
8292 
8293 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
8294 	if (IS_ERR(tb)) {
8295 		ret = PTR_ERR(tb);
8296 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
8297 		return;
8298 	}
8299 
8300 	ev = tb[WMI_TAG_PDEV_TEMPERATURE_EVENT];
8301 	if (!ev) {
8302 		ath11k_warn(ab, "failed to fetch pdev temp ev");
8303 		kfree(tb);
8304 		return;
8305 	}
8306 
8307 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event pdev temperature ev temp %d pdev_id %d\n",
8308 		   ev->temp, ev->pdev_id);
8309 
8310 	ar = ath11k_mac_get_ar_by_pdev_id(ab, ev->pdev_id);
8311 	if (!ar) {
8312 		ath11k_warn(ab, "invalid pdev id in pdev temperature ev %d", ev->pdev_id);
8313 		kfree(tb);
8314 		return;
8315 	}
8316 
8317 	ath11k_thermal_event_temperature(ar, ev->temp);
8318 
8319 	kfree(tb);
8320 }
8321 
8322 static void ath11k_fils_discovery_event(struct ath11k_base *ab,
8323 					struct sk_buff *skb)
8324 {
8325 	const void **tb;
8326 	const struct wmi_fils_discovery_event *ev;
8327 	int ret;
8328 
8329 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
8330 	if (IS_ERR(tb)) {
8331 		ret = PTR_ERR(tb);
8332 		ath11k_warn(ab,
8333 			    "failed to parse FILS discovery event tlv %d\n",
8334 			    ret);
8335 		return;
8336 	}
8337 
8338 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event fils discovery");
8339 
8340 	ev = tb[WMI_TAG_HOST_SWFDA_EVENT];
8341 	if (!ev) {
8342 		ath11k_warn(ab, "failed to fetch FILS discovery event\n");
8343 		kfree(tb);
8344 		return;
8345 	}
8346 
8347 	ath11k_warn(ab,
8348 		    "FILS discovery frame expected from host for vdev_id: %u, transmission scheduled at %u, next TBTT: %u\n",
8349 		    ev->vdev_id, ev->fils_tt, ev->tbtt);
8350 
8351 	kfree(tb);
8352 }
8353 
8354 static void ath11k_probe_resp_tx_status_event(struct ath11k_base *ab,
8355 					      struct sk_buff *skb)
8356 {
8357 	const void **tb;
8358 	const struct wmi_probe_resp_tx_status_event *ev;
8359 	int ret;
8360 
8361 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
8362 	if (IS_ERR(tb)) {
8363 		ret = PTR_ERR(tb);
8364 		ath11k_warn(ab,
8365 			    "failed to parse probe response transmission status event tlv: %d\n",
8366 			    ret);
8367 		return;
8368 	}
8369 
8370 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event probe resp tx status");
8371 
8372 	ev = tb[WMI_TAG_OFFLOAD_PRB_RSP_TX_STATUS_EVENT];
8373 	if (!ev) {
8374 		ath11k_warn(ab,
8375 			    "failed to fetch probe response transmission status event");
8376 		kfree(tb);
8377 		return;
8378 	}
8379 
8380 	if (ev->tx_status)
8381 		ath11k_warn(ab,
8382 			    "Probe response transmission failed for vdev_id %u, status %u\n",
8383 			    ev->vdev_id, ev->tx_status);
8384 
8385 	kfree(tb);
8386 }
8387 
8388 static int ath11k_wmi_tlv_wow_wakeup_host_parse(struct ath11k_base *ab,
8389 						u16 tag, u16 len,
8390 						const void *ptr, void *data)
8391 {
8392 	struct wmi_wow_ev_arg *ev = data;
8393 	const char *wow_pg_fault;
8394 	int wow_pg_len;
8395 
8396 	switch (tag) {
8397 	case WMI_TAG_WOW_EVENT_INFO:
8398 		memcpy(ev, ptr, sizeof(*ev));
8399 		ath11k_dbg(ab, ATH11K_DBG_WMI, "wow wakeup host reason %d %s\n",
8400 			   ev->wake_reason, wow_reason(ev->wake_reason));
8401 		break;
8402 
8403 	case WMI_TAG_ARRAY_BYTE:
8404 		if (ev && ev->wake_reason == WOW_REASON_PAGE_FAULT) {
8405 			wow_pg_fault = ptr;
8406 			/* the first 4 bytes are length */
8407 			wow_pg_len = *(int *)wow_pg_fault;
8408 			wow_pg_fault += sizeof(int);
8409 			ath11k_dbg(ab, ATH11K_DBG_WMI, "wow data_len = %d\n",
8410 				   wow_pg_len);
8411 			ath11k_dbg_dump(ab, ATH11K_DBG_WMI,
8412 					"wow_event_info_type packet present",
8413 					"wow_pg_fault ",
8414 					wow_pg_fault,
8415 					wow_pg_len);
8416 		}
8417 		break;
8418 	default:
8419 		break;
8420 	}
8421 
8422 	return 0;
8423 }
8424 
8425 static void ath11k_wmi_event_wow_wakeup_host(struct ath11k_base *ab, struct sk_buff *skb)
8426 {
8427 	struct wmi_wow_ev_arg ev = { };
8428 	int ret;
8429 
8430 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
8431 				  ath11k_wmi_tlv_wow_wakeup_host_parse,
8432 				  &ev);
8433 	if (ret) {
8434 		ath11k_warn(ab, "failed to parse wmi wow tlv: %d\n", ret);
8435 		return;
8436 	}
8437 
8438 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event wow wakeup host");
8439 
8440 	complete(&ab->wow.wakeup_completed);
8441 }
8442 
8443 static void
8444 ath11k_wmi_diag_event(struct ath11k_base *ab,
8445 		      struct sk_buff *skb)
8446 {
8447 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event diag");
8448 
8449 	trace_ath11k_wmi_diag(ab, skb->data, skb->len);
8450 }
8451 
8452 static const char *ath11k_wmi_twt_add_dialog_event_status(u32 status)
8453 {
8454 	switch (status) {
8455 	case WMI_ADD_TWT_STATUS_OK:
8456 		return "ok";
8457 	case WMI_ADD_TWT_STATUS_TWT_NOT_ENABLED:
8458 		return "twt disabled";
8459 	case WMI_ADD_TWT_STATUS_USED_DIALOG_ID:
8460 		return "dialog id in use";
8461 	case WMI_ADD_TWT_STATUS_INVALID_PARAM:
8462 		return "invalid parameters";
8463 	case WMI_ADD_TWT_STATUS_NOT_READY:
8464 		return "not ready";
8465 	case WMI_ADD_TWT_STATUS_NO_RESOURCE:
8466 		return "resource unavailable";
8467 	case WMI_ADD_TWT_STATUS_NO_ACK:
8468 		return "no ack";
8469 	case WMI_ADD_TWT_STATUS_NO_RESPONSE:
8470 		return "no response";
8471 	case WMI_ADD_TWT_STATUS_DENIED:
8472 		return "denied";
8473 	case WMI_ADD_TWT_STATUS_UNKNOWN_ERROR:
8474 		fallthrough;
8475 	default:
8476 		return "unknown error";
8477 	}
8478 }
8479 
8480 static void ath11k_wmi_twt_add_dialog_event(struct ath11k_base *ab,
8481 					    struct sk_buff *skb)
8482 {
8483 	const void **tb;
8484 	const struct wmi_twt_add_dialog_event *ev;
8485 	int ret;
8486 
8487 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
8488 	if (IS_ERR(tb)) {
8489 		ret = PTR_ERR(tb);
8490 		ath11k_warn(ab,
8491 			    "failed to parse wmi twt add dialog status event tlv: %d\n",
8492 			    ret);
8493 		return;
8494 	}
8495 
8496 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event twt add dialog");
8497 
8498 	ev = tb[WMI_TAG_TWT_ADD_DIALOG_COMPLETE_EVENT];
8499 	if (!ev) {
8500 		ath11k_warn(ab, "failed to fetch twt add dialog wmi event\n");
8501 		goto exit;
8502 	}
8503 
8504 	if (ev->status)
8505 		ath11k_warn(ab,
8506 			    "wmi add twt dialog event vdev %d dialog id %d status %s\n",
8507 			    ev->vdev_id, ev->dialog_id,
8508 			    ath11k_wmi_twt_add_dialog_event_status(ev->status));
8509 
8510 exit:
8511 	kfree(tb);
8512 }
8513 
8514 static void ath11k_wmi_gtk_offload_status_event(struct ath11k_base *ab,
8515 						struct sk_buff *skb)
8516 {
8517 	const void **tb;
8518 	const struct wmi_gtk_offload_status_event *ev;
8519 	struct ath11k_vif *arvif;
8520 	__be64 replay_ctr_be;
8521 	u64    replay_ctr;
8522 	int ret;
8523 
8524 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
8525 	if (IS_ERR(tb)) {
8526 		ret = PTR_ERR(tb);
8527 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
8528 		return;
8529 	}
8530 
8531 	ev = tb[WMI_TAG_GTK_OFFLOAD_STATUS_EVENT];
8532 	if (!ev) {
8533 		ath11k_warn(ab, "failed to fetch gtk offload status ev");
8534 		kfree(tb);
8535 		return;
8536 	}
8537 
8538 	arvif = ath11k_mac_get_arvif_by_vdev_id(ab, ev->vdev_id);
8539 	if (!arvif) {
8540 		ath11k_warn(ab, "failed to get arvif for vdev_id:%d\n",
8541 			    ev->vdev_id);
8542 		kfree(tb);
8543 		return;
8544 	}
8545 
8546 	ath11k_dbg(ab, ATH11K_DBG_WMI, "event gtk offload refresh_cnt %d\n",
8547 		   ev->refresh_cnt);
8548 	ath11k_dbg_dump(ab, ATH11K_DBG_WMI, "replay_cnt",
8549 			NULL, ev->replay_ctr.counter, GTK_REPLAY_COUNTER_BYTES);
8550 
8551 	replay_ctr =  ev->replay_ctr.word1;
8552 	replay_ctr = (replay_ctr << 32) | ev->replay_ctr.word0;
8553 	arvif->rekey_data.replay_ctr = replay_ctr;
8554 
8555 	/* supplicant expects big-endian replay counter */
8556 	replay_ctr_be = cpu_to_be64(replay_ctr);
8557 
8558 	ieee80211_gtk_rekey_notify(arvif->vif, arvif->bssid,
8559 				   (void *)&replay_ctr_be, GFP_ATOMIC);
8560 
8561 	kfree(tb);
8562 }
8563 
8564 static void ath11k_wmi_tlv_op_rx(struct ath11k_base *ab, struct sk_buff *skb)
8565 {
8566 	struct wmi_cmd_hdr *cmd_hdr;
8567 	enum wmi_tlv_event_id id;
8568 
8569 	cmd_hdr = (struct wmi_cmd_hdr *)skb->data;
8570 	id = FIELD_GET(WMI_CMD_HDR_CMD_ID, (cmd_hdr->cmd_id));
8571 
8572 	trace_ath11k_wmi_event(ab, id, skb->data, skb->len);
8573 
8574 	if (skb_pull(skb, sizeof(struct wmi_cmd_hdr)) == NULL)
8575 		goto out;
8576 
8577 	switch (id) {
8578 		/* Process all the WMI events here */
8579 	case WMI_SERVICE_READY_EVENTID:
8580 		ath11k_service_ready_event(ab, skb);
8581 		break;
8582 	case WMI_SERVICE_READY_EXT_EVENTID:
8583 		ath11k_service_ready_ext_event(ab, skb);
8584 		break;
8585 	case WMI_SERVICE_READY_EXT2_EVENTID:
8586 		ath11k_service_ready_ext2_event(ab, skb);
8587 		break;
8588 	case WMI_REG_CHAN_LIST_CC_EVENTID:
8589 		ath11k_reg_chan_list_event(ab, skb, WMI_REG_CHAN_LIST_CC_ID);
8590 		break;
8591 	case WMI_REG_CHAN_LIST_CC_EXT_EVENTID:
8592 		ath11k_reg_chan_list_event(ab, skb, WMI_REG_CHAN_LIST_CC_EXT_ID);
8593 		break;
8594 	case WMI_READY_EVENTID:
8595 		ath11k_ready_event(ab, skb);
8596 		break;
8597 	case WMI_PEER_DELETE_RESP_EVENTID:
8598 		ath11k_peer_delete_resp_event(ab, skb);
8599 		break;
8600 	case WMI_VDEV_START_RESP_EVENTID:
8601 		ath11k_vdev_start_resp_event(ab, skb);
8602 		break;
8603 	case WMI_OFFLOAD_BCN_TX_STATUS_EVENTID:
8604 		ath11k_bcn_tx_status_event(ab, skb);
8605 		break;
8606 	case WMI_VDEV_STOPPED_EVENTID:
8607 		ath11k_vdev_stopped_event(ab, skb);
8608 		break;
8609 	case WMI_MGMT_RX_EVENTID:
8610 		ath11k_mgmt_rx_event(ab, skb);
8611 		/* mgmt_rx_event() owns the skb now! */
8612 		return;
8613 	case WMI_MGMT_TX_COMPLETION_EVENTID:
8614 		ath11k_mgmt_tx_compl_event(ab, skb);
8615 		break;
8616 	case WMI_SCAN_EVENTID:
8617 		ath11k_scan_event(ab, skb);
8618 		break;
8619 	case WMI_PEER_STA_KICKOUT_EVENTID:
8620 		ath11k_peer_sta_kickout_event(ab, skb);
8621 		break;
8622 	case WMI_ROAM_EVENTID:
8623 		ath11k_roam_event(ab, skb);
8624 		break;
8625 	case WMI_CHAN_INFO_EVENTID:
8626 		ath11k_chan_info_event(ab, skb);
8627 		break;
8628 	case WMI_PDEV_BSS_CHAN_INFO_EVENTID:
8629 		ath11k_pdev_bss_chan_info_event(ab, skb);
8630 		break;
8631 	case WMI_VDEV_INSTALL_KEY_COMPLETE_EVENTID:
8632 		ath11k_vdev_install_key_compl_event(ab, skb);
8633 		break;
8634 	case WMI_SERVICE_AVAILABLE_EVENTID:
8635 		ath11k_service_available_event(ab, skb);
8636 		break;
8637 	case WMI_PEER_ASSOC_CONF_EVENTID:
8638 		ath11k_peer_assoc_conf_event(ab, skb);
8639 		break;
8640 	case WMI_UPDATE_STATS_EVENTID:
8641 		ath11k_update_stats_event(ab, skb);
8642 		break;
8643 	case WMI_PDEV_CTL_FAILSAFE_CHECK_EVENTID:
8644 		ath11k_pdev_ctl_failsafe_check_event(ab, skb);
8645 		break;
8646 	case WMI_PDEV_CSA_SWITCH_COUNT_STATUS_EVENTID:
8647 		ath11k_wmi_pdev_csa_switch_count_status_event(ab, skb);
8648 		break;
8649 	case WMI_PDEV_UTF_EVENTID:
8650 		ath11k_tm_wmi_event(ab, id, skb);
8651 		break;
8652 	case WMI_PDEV_TEMPERATURE_EVENTID:
8653 		ath11k_wmi_pdev_temperature_event(ab, skb);
8654 		break;
8655 	case WMI_PDEV_DMA_RING_BUF_RELEASE_EVENTID:
8656 		ath11k_wmi_pdev_dma_ring_buf_release_event(ab, skb);
8657 		break;
8658 	case WMI_HOST_FILS_DISCOVERY_EVENTID:
8659 		ath11k_fils_discovery_event(ab, skb);
8660 		break;
8661 	case WMI_OFFLOAD_PROB_RESP_TX_STATUS_EVENTID:
8662 		ath11k_probe_resp_tx_status_event(ab, skb);
8663 		break;
8664 	case WMI_OBSS_COLOR_COLLISION_DETECTION_EVENTID:
8665 		ath11k_wmi_obss_color_collision_event(ab, skb);
8666 		break;
8667 	case WMI_TWT_ADD_DIALOG_EVENTID:
8668 		ath11k_wmi_twt_add_dialog_event(ab, skb);
8669 		break;
8670 	case WMI_PDEV_DFS_RADAR_DETECTION_EVENTID:
8671 		ath11k_wmi_pdev_dfs_radar_detected_event(ab, skb);
8672 		break;
8673 	case WMI_VDEV_DELETE_RESP_EVENTID:
8674 		ath11k_vdev_delete_resp_event(ab, skb);
8675 		break;
8676 	case WMI_WOW_WAKEUP_HOST_EVENTID:
8677 		ath11k_wmi_event_wow_wakeup_host(ab, skb);
8678 		break;
8679 	case WMI_11D_NEW_COUNTRY_EVENTID:
8680 		ath11k_reg_11d_new_cc_event(ab, skb);
8681 		break;
8682 	case WMI_DIAG_EVENTID:
8683 		ath11k_wmi_diag_event(ab, skb);
8684 		break;
8685 	case WMI_PEER_STA_PS_STATECHG_EVENTID:
8686 		ath11k_wmi_event_peer_sta_ps_state_chg(ab, skb);
8687 		break;
8688 	case WMI_GTK_OFFLOAD_STATUS_EVENTID:
8689 		ath11k_wmi_gtk_offload_status_event(ab, skb);
8690 		break;
8691 	default:
8692 		ath11k_dbg(ab, ATH11K_DBG_WMI, "unsupported event id 0x%x\n", id);
8693 		break;
8694 	}
8695 
8696 out:
8697 	dev_kfree_skb(skb);
8698 }
8699 
8700 static int ath11k_connect_pdev_htc_service(struct ath11k_base *ab,
8701 					   u32 pdev_idx)
8702 {
8703 	int status;
8704 	u32 svc_id[] = { ATH11K_HTC_SVC_ID_WMI_CONTROL,
8705 			 ATH11K_HTC_SVC_ID_WMI_CONTROL_MAC1,
8706 			 ATH11K_HTC_SVC_ID_WMI_CONTROL_MAC2 };
8707 
8708 	struct ath11k_htc_svc_conn_req conn_req;
8709 	struct ath11k_htc_svc_conn_resp conn_resp;
8710 
8711 	memset(&conn_req, 0, sizeof(conn_req));
8712 	memset(&conn_resp, 0, sizeof(conn_resp));
8713 
8714 	/* these fields are the same for all service endpoints */
8715 	conn_req.ep_ops.ep_tx_complete = ath11k_wmi_htc_tx_complete;
8716 	conn_req.ep_ops.ep_rx_complete = ath11k_wmi_tlv_op_rx;
8717 	conn_req.ep_ops.ep_tx_credits = ath11k_wmi_op_ep_tx_credits;
8718 
8719 	/* connect to control service */
8720 	conn_req.service_id = svc_id[pdev_idx];
8721 
8722 	status = ath11k_htc_connect_service(&ab->htc, &conn_req, &conn_resp);
8723 	if (status) {
8724 		ath11k_warn(ab, "failed to connect to WMI CONTROL service status: %d\n",
8725 			    status);
8726 		return status;
8727 	}
8728 
8729 	ab->wmi_ab.wmi_endpoint_id[pdev_idx] = conn_resp.eid;
8730 	ab->wmi_ab.wmi[pdev_idx].eid = conn_resp.eid;
8731 	ab->wmi_ab.max_msg_len[pdev_idx] = conn_resp.max_msg_len;
8732 	init_waitqueue_head(&ab->wmi_ab.wmi[pdev_idx].tx_ce_desc_wq);
8733 
8734 	return 0;
8735 }
8736 
8737 static int
8738 ath11k_wmi_send_unit_test_cmd(struct ath11k *ar,
8739 			      struct wmi_unit_test_cmd ut_cmd,
8740 			      u32 *test_args)
8741 {
8742 	struct ath11k_pdev_wmi *wmi = ar->wmi;
8743 	struct wmi_unit_test_cmd *cmd;
8744 	struct sk_buff *skb;
8745 	struct wmi_tlv *tlv;
8746 	void *ptr;
8747 	u32 *ut_cmd_args;
8748 	int buf_len, arg_len;
8749 	int ret;
8750 	int i;
8751 
8752 	arg_len = sizeof(u32) * ut_cmd.num_args;
8753 	buf_len = sizeof(ut_cmd) + arg_len + TLV_HDR_SIZE;
8754 
8755 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, buf_len);
8756 	if (!skb)
8757 		return -ENOMEM;
8758 
8759 	cmd = (struct wmi_unit_test_cmd *)skb->data;
8760 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_UNIT_TEST_CMD) |
8761 			  FIELD_PREP(WMI_TLV_LEN, sizeof(ut_cmd) - TLV_HDR_SIZE);
8762 
8763 	cmd->vdev_id = ut_cmd.vdev_id;
8764 	cmd->module_id = ut_cmd.module_id;
8765 	cmd->num_args = ut_cmd.num_args;
8766 	cmd->diag_token = ut_cmd.diag_token;
8767 
8768 	ptr = skb->data + sizeof(ut_cmd);
8769 
8770 	tlv = ptr;
8771 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_UINT32) |
8772 		      FIELD_PREP(WMI_TLV_LEN, arg_len);
8773 
8774 	ptr += TLV_HDR_SIZE;
8775 
8776 	ut_cmd_args = ptr;
8777 	for (i = 0; i < ut_cmd.num_args; i++)
8778 		ut_cmd_args[i] = test_args[i];
8779 
8780 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_UNIT_TEST_CMDID);
8781 
8782 	if (ret) {
8783 		ath11k_warn(ar->ab, "failed to send WMI_UNIT_TEST CMD :%d\n",
8784 			    ret);
8785 		dev_kfree_skb(skb);
8786 	}
8787 
8788 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
8789 		   "unit test : module %d vdev %d n_args %d token %d\n",
8790 		   cmd->module_id, cmd->vdev_id, cmd->num_args,
8791 		   cmd->diag_token);
8792 
8793 	return ret;
8794 }
8795 
8796 int ath11k_wmi_simulate_radar(struct ath11k *ar)
8797 {
8798 	struct ath11k_vif *arvif;
8799 	u32 dfs_args[DFS_MAX_TEST_ARGS];
8800 	struct wmi_unit_test_cmd wmi_ut;
8801 	bool arvif_found = false;
8802 
8803 	list_for_each_entry(arvif, &ar->arvifs, list) {
8804 		if (arvif->is_started && arvif->vdev_type == WMI_VDEV_TYPE_AP) {
8805 			arvif_found = true;
8806 			break;
8807 		}
8808 	}
8809 
8810 	if (!arvif_found)
8811 		return -EINVAL;
8812 
8813 	dfs_args[DFS_TEST_CMDID] = 0;
8814 	dfs_args[DFS_TEST_PDEV_ID] = ar->pdev->pdev_id;
8815 	/* Currently we could pass segment_id(b0 - b1), chirp(b2)
8816 	 * freq offset (b3 - b10) to unit test. For simulation
8817 	 * purpose this can be set to 0 which is valid.
8818 	 */
8819 	dfs_args[DFS_TEST_RADAR_PARAM] = 0;
8820 
8821 	wmi_ut.vdev_id = arvif->vdev_id;
8822 	wmi_ut.module_id = DFS_UNIT_TEST_MODULE;
8823 	wmi_ut.num_args = DFS_MAX_TEST_ARGS;
8824 	wmi_ut.diag_token = DFS_UNIT_TEST_TOKEN;
8825 
8826 	ath11k_dbg(ar->ab, ATH11K_DBG_REG, "Triggering Radar Simulation\n");
8827 
8828 	return ath11k_wmi_send_unit_test_cmd(ar, wmi_ut, dfs_args);
8829 }
8830 
8831 int ath11k_wmi_fw_dbglog_cfg(struct ath11k *ar, u32 *module_id_bitmap,
8832 			     struct ath11k_fw_dbglog *dbglog)
8833 {
8834 	struct ath11k_pdev_wmi *wmi = ar->wmi;
8835 	struct wmi_debug_log_config_cmd_fixed_param *cmd;
8836 	struct sk_buff *skb;
8837 	struct wmi_tlv *tlv;
8838 	int ret, len;
8839 
8840 	len = sizeof(*cmd) + TLV_HDR_SIZE + (MAX_MODULE_ID_BITMAP_WORDS * sizeof(u32));
8841 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
8842 	if (!skb)
8843 		return -ENOMEM;
8844 
8845 	cmd = (struct wmi_debug_log_config_cmd_fixed_param *)skb->data;
8846 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_DEBUG_LOG_CONFIG_CMD) |
8847 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
8848 	cmd->dbg_log_param = dbglog->param;
8849 
8850 	tlv = (struct wmi_tlv *)((u8 *)cmd + sizeof(*cmd));
8851 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_UINT32) |
8852 		      FIELD_PREP(WMI_TLV_LEN, MAX_MODULE_ID_BITMAP_WORDS * sizeof(u32));
8853 
8854 	switch (dbglog->param) {
8855 	case WMI_DEBUG_LOG_PARAM_LOG_LEVEL:
8856 	case WMI_DEBUG_LOG_PARAM_VDEV_ENABLE:
8857 	case WMI_DEBUG_LOG_PARAM_VDEV_DISABLE:
8858 	case WMI_DEBUG_LOG_PARAM_VDEV_ENABLE_BITMAP:
8859 		cmd->value = dbglog->value;
8860 		break;
8861 	case WMI_DEBUG_LOG_PARAM_MOD_ENABLE_BITMAP:
8862 	case WMI_DEBUG_LOG_PARAM_WOW_MOD_ENABLE_BITMAP:
8863 		cmd->value = dbglog->value;
8864 		memcpy(tlv->value, module_id_bitmap,
8865 		       MAX_MODULE_ID_BITMAP_WORDS * sizeof(u32));
8866 		/* clear current config to be used for next user config */
8867 		memset(module_id_bitmap, 0,
8868 		       MAX_MODULE_ID_BITMAP_WORDS * sizeof(u32));
8869 		break;
8870 	default:
8871 		dev_kfree_skb(skb);
8872 		return -EINVAL;
8873 	}
8874 
8875 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_DBGLOG_CFG_CMDID);
8876 	if (ret) {
8877 		ath11k_warn(ar->ab,
8878 			    "failed to send WMI_DBGLOG_CFG_CMDID\n");
8879 		dev_kfree_skb(skb);
8880 	}
8881 	return ret;
8882 }
8883 
8884 int ath11k_wmi_connect(struct ath11k_base *ab)
8885 {
8886 	u32 i;
8887 	u8 wmi_ep_count;
8888 
8889 	wmi_ep_count = ab->htc.wmi_ep_count;
8890 	if (wmi_ep_count > ab->hw_params.max_radios)
8891 		return -1;
8892 
8893 	for (i = 0; i < wmi_ep_count; i++)
8894 		ath11k_connect_pdev_htc_service(ab, i);
8895 
8896 	return 0;
8897 }
8898 
8899 static void ath11k_wmi_pdev_detach(struct ath11k_base *ab, u8 pdev_id)
8900 {
8901 	if (WARN_ON(pdev_id >= MAX_RADIOS))
8902 		return;
8903 
8904 	/* TODO: Deinit any pdev specific wmi resource */
8905 }
8906 
8907 int ath11k_wmi_pdev_attach(struct ath11k_base *ab,
8908 			   u8 pdev_id)
8909 {
8910 	struct ath11k_pdev_wmi *wmi_handle;
8911 
8912 	if (pdev_id >= ab->hw_params.max_radios)
8913 		return -EINVAL;
8914 
8915 	wmi_handle = &ab->wmi_ab.wmi[pdev_id];
8916 
8917 	wmi_handle->wmi_ab = &ab->wmi_ab;
8918 
8919 	ab->wmi_ab.ab = ab;
8920 	/* TODO: Init remaining resource specific to pdev */
8921 
8922 	return 0;
8923 }
8924 
8925 int ath11k_wmi_attach(struct ath11k_base *ab)
8926 {
8927 	int ret;
8928 
8929 	ret = ath11k_wmi_pdev_attach(ab, 0);
8930 	if (ret)
8931 		return ret;
8932 
8933 	ab->wmi_ab.ab = ab;
8934 	ab->wmi_ab.preferred_hw_mode = WMI_HOST_HW_MODE_MAX;
8935 
8936 	/* It's overwritten when service_ext_ready is handled */
8937 	if (ab->hw_params.single_pdev_only && ab->hw_params.num_rxmda_per_pdev > 1)
8938 		ab->wmi_ab.preferred_hw_mode = WMI_HOST_HW_MODE_SINGLE;
8939 
8940 	/* TODO: Init remaining wmi soc resources required */
8941 	init_completion(&ab->wmi_ab.service_ready);
8942 	init_completion(&ab->wmi_ab.unified_ready);
8943 
8944 	return 0;
8945 }
8946 
8947 void ath11k_wmi_detach(struct ath11k_base *ab)
8948 {
8949 	int i;
8950 
8951 	/* TODO: Deinit wmi resource specific to SOC as required */
8952 
8953 	for (i = 0; i < ab->htc.wmi_ep_count; i++)
8954 		ath11k_wmi_pdev_detach(ab, i);
8955 
8956 	ath11k_wmi_free_dbring_caps(ab);
8957 }
8958 
8959 int ath11k_wmi_hw_data_filter_cmd(struct ath11k *ar, u32 vdev_id,
8960 				  u32 filter_bitmap, bool enable)
8961 {
8962 	struct wmi_hw_data_filter_cmd *cmd;
8963 	struct sk_buff *skb;
8964 	int len;
8965 
8966 	len = sizeof(*cmd);
8967 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
8968 
8969 	if (!skb)
8970 		return -ENOMEM;
8971 
8972 	cmd = (struct wmi_hw_data_filter_cmd *)skb->data;
8973 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_HW_DATA_FILTER_CMD) |
8974 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
8975 
8976 	cmd->vdev_id = vdev_id;
8977 	cmd->enable = enable;
8978 
8979 	/* Set all modes in case of disable */
8980 	if (cmd->enable)
8981 		cmd->hw_filter_bitmap = filter_bitmap;
8982 	else
8983 		cmd->hw_filter_bitmap = ((u32)~0U);
8984 
8985 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
8986 		   "hw data filter enable %d filter_bitmap 0x%x\n",
8987 		   enable, filter_bitmap);
8988 
8989 	return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_HW_DATA_FILTER_CMDID);
8990 }
8991 
8992 int ath11k_wmi_wow_host_wakeup_ind(struct ath11k *ar)
8993 {
8994 	struct wmi_wow_host_wakeup_ind *cmd;
8995 	struct sk_buff *skb;
8996 	size_t len;
8997 
8998 	len = sizeof(*cmd);
8999 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
9000 	if (!skb)
9001 		return -ENOMEM;
9002 
9003 	cmd = (struct wmi_wow_host_wakeup_ind *)skb->data;
9004 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
9005 				     WMI_TAG_WOW_HOSTWAKEUP_FROM_SLEEP_CMD) |
9006 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
9007 
9008 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "tlv wow host wakeup ind\n");
9009 
9010 	return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_HOSTWAKEUP_FROM_SLEEP_CMDID);
9011 }
9012 
9013 int ath11k_wmi_wow_enable(struct ath11k *ar)
9014 {
9015 	struct wmi_wow_enable_cmd *cmd;
9016 	struct sk_buff *skb;
9017 	int len;
9018 
9019 	len = sizeof(*cmd);
9020 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
9021 	if (!skb)
9022 		return -ENOMEM;
9023 
9024 	cmd = (struct wmi_wow_enable_cmd *)skb->data;
9025 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_WOW_ENABLE_CMD) |
9026 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
9027 
9028 	cmd->enable = 1;
9029 	cmd->pause_iface_config = WOW_IFACE_PAUSE_ENABLED;
9030 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "tlv wow enable\n");
9031 
9032 	return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_ENABLE_CMDID);
9033 }
9034 
9035 int ath11k_wmi_scan_prob_req_oui(struct ath11k *ar,
9036 				 const u8 mac_addr[ETH_ALEN])
9037 {
9038 	struct sk_buff *skb;
9039 	struct wmi_scan_prob_req_oui_cmd *cmd;
9040 	u32 prob_req_oui;
9041 	int len;
9042 
9043 	prob_req_oui = (((u32)mac_addr[0]) << 16) |
9044 		       (((u32)mac_addr[1]) << 8) | mac_addr[2];
9045 
9046 	len = sizeof(*cmd);
9047 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
9048 	if (!skb)
9049 		return -ENOMEM;
9050 
9051 	cmd = (struct wmi_scan_prob_req_oui_cmd *)skb->data;
9052 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
9053 				     WMI_TAG_SCAN_PROB_REQ_OUI_CMD) |
9054 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
9055 	cmd->prob_req_oui = prob_req_oui;
9056 
9057 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "scan prob req oui %d\n",
9058 		   prob_req_oui);
9059 
9060 	return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_SCAN_PROB_REQ_OUI_CMDID);
9061 }
9062 
9063 int ath11k_wmi_wow_add_wakeup_event(struct ath11k *ar, u32 vdev_id,
9064 				    enum wmi_wow_wakeup_event event,
9065 				u32 enable)
9066 {
9067 	struct wmi_wow_add_del_event_cmd *cmd;
9068 	struct sk_buff *skb;
9069 	size_t len;
9070 
9071 	len = sizeof(*cmd);
9072 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
9073 	if (!skb)
9074 		return -ENOMEM;
9075 
9076 	cmd = (struct wmi_wow_add_del_event_cmd *)skb->data;
9077 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_WOW_ADD_DEL_EVT_CMD) |
9078 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
9079 
9080 	cmd->vdev_id = vdev_id;
9081 	cmd->is_add = enable;
9082 	cmd->event_bitmap = (1 << event);
9083 
9084 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "tlv wow add wakeup event %s enable %d vdev_id %d\n",
9085 		   wow_wakeup_event(event), enable, vdev_id);
9086 
9087 	return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_ENABLE_DISABLE_WAKE_EVENT_CMDID);
9088 }
9089 
9090 int ath11k_wmi_wow_add_pattern(struct ath11k *ar, u32 vdev_id, u32 pattern_id,
9091 			       const u8 *pattern, const u8 *mask,
9092 			   int pattern_len, int pattern_offset)
9093 {
9094 	struct wmi_wow_add_pattern_cmd *cmd;
9095 	struct wmi_wow_bitmap_pattern *bitmap;
9096 	struct wmi_tlv *tlv;
9097 	struct sk_buff *skb;
9098 	u8 *ptr;
9099 	size_t len;
9100 
9101 	len = sizeof(*cmd) +
9102 	      sizeof(*tlv) +			/* array struct */
9103 	      sizeof(*bitmap) +			/* bitmap */
9104 	      sizeof(*tlv) +			/* empty ipv4 sync */
9105 	      sizeof(*tlv) +			/* empty ipv6 sync */
9106 	      sizeof(*tlv) +			/* empty magic */
9107 	      sizeof(*tlv) +			/* empty info timeout */
9108 	      sizeof(*tlv) + sizeof(u32);	/* ratelimit interval */
9109 
9110 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
9111 	if (!skb)
9112 		return -ENOMEM;
9113 
9114 	/* cmd */
9115 	ptr = (u8 *)skb->data;
9116 	cmd = (struct wmi_wow_add_pattern_cmd *)ptr;
9117 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
9118 				     WMI_TAG_WOW_ADD_PATTERN_CMD) |
9119 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
9120 
9121 	cmd->vdev_id = vdev_id;
9122 	cmd->pattern_id = pattern_id;
9123 	cmd->pattern_type = WOW_BITMAP_PATTERN;
9124 
9125 	ptr += sizeof(*cmd);
9126 
9127 	/* bitmap */
9128 	tlv = (struct wmi_tlv *)ptr;
9129 	tlv->header = FIELD_PREP(WMI_TLV_TAG,
9130 				 WMI_TAG_ARRAY_STRUCT) |
9131 		      FIELD_PREP(WMI_TLV_LEN, sizeof(*bitmap));
9132 
9133 	ptr += sizeof(*tlv);
9134 
9135 	bitmap = (struct wmi_wow_bitmap_pattern *)ptr;
9136 	bitmap->tlv_header = FIELD_PREP(WMI_TLV_TAG,
9137 					WMI_TAG_WOW_BITMAP_PATTERN_T) |
9138 			     FIELD_PREP(WMI_TLV_LEN, sizeof(*bitmap) - TLV_HDR_SIZE);
9139 
9140 	memcpy(bitmap->patternbuf, pattern, pattern_len);
9141 	ath11k_ce_byte_swap(bitmap->patternbuf, roundup(pattern_len, 4));
9142 	memcpy(bitmap->bitmaskbuf, mask, pattern_len);
9143 	ath11k_ce_byte_swap(bitmap->bitmaskbuf, roundup(pattern_len, 4));
9144 	bitmap->pattern_offset = pattern_offset;
9145 	bitmap->pattern_len = pattern_len;
9146 	bitmap->bitmask_len = pattern_len;
9147 	bitmap->pattern_id = pattern_id;
9148 
9149 	ptr += sizeof(*bitmap);
9150 
9151 	/* ipv4 sync */
9152 	tlv = (struct wmi_tlv *)ptr;
9153 	tlv->header = FIELD_PREP(WMI_TLV_TAG,
9154 				 WMI_TAG_ARRAY_STRUCT) |
9155 		      FIELD_PREP(WMI_TLV_LEN, 0);
9156 
9157 	ptr += sizeof(*tlv);
9158 
9159 	/* ipv6 sync */
9160 	tlv = (struct wmi_tlv *)ptr;
9161 	tlv->header = FIELD_PREP(WMI_TLV_TAG,
9162 				 WMI_TAG_ARRAY_STRUCT) |
9163 		      FIELD_PREP(WMI_TLV_LEN, 0);
9164 
9165 	ptr += sizeof(*tlv);
9166 
9167 	/* magic */
9168 	tlv = (struct wmi_tlv *)ptr;
9169 	tlv->header = FIELD_PREP(WMI_TLV_TAG,
9170 				 WMI_TAG_ARRAY_STRUCT) |
9171 		      FIELD_PREP(WMI_TLV_LEN, 0);
9172 
9173 	ptr += sizeof(*tlv);
9174 
9175 	/* pattern info timeout */
9176 	tlv = (struct wmi_tlv *)ptr;
9177 	tlv->header = FIELD_PREP(WMI_TLV_TAG,
9178 				 WMI_TAG_ARRAY_UINT32) |
9179 		      FIELD_PREP(WMI_TLV_LEN, 0);
9180 
9181 	ptr += sizeof(*tlv);
9182 
9183 	/* ratelimit interval */
9184 	tlv = (struct wmi_tlv *)ptr;
9185 	tlv->header = FIELD_PREP(WMI_TLV_TAG,
9186 				 WMI_TAG_ARRAY_UINT32) |
9187 		      FIELD_PREP(WMI_TLV_LEN, sizeof(u32));
9188 
9189 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "tlv wow add pattern vdev_id %d pattern_id %d pattern_offset %d\n",
9190 		   vdev_id, pattern_id, pattern_offset);
9191 
9192 	return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_ADD_WAKE_PATTERN_CMDID);
9193 }
9194 
9195 int ath11k_wmi_wow_del_pattern(struct ath11k *ar, u32 vdev_id, u32 pattern_id)
9196 {
9197 	struct wmi_wow_del_pattern_cmd *cmd;
9198 	struct sk_buff *skb;
9199 	size_t len;
9200 
9201 	len = sizeof(*cmd);
9202 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
9203 	if (!skb)
9204 		return -ENOMEM;
9205 
9206 	cmd = (struct wmi_wow_del_pattern_cmd *)skb->data;
9207 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
9208 				     WMI_TAG_WOW_DEL_PATTERN_CMD) |
9209 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
9210 
9211 	cmd->vdev_id = vdev_id;
9212 	cmd->pattern_id = pattern_id;
9213 	cmd->pattern_type = WOW_BITMAP_PATTERN;
9214 
9215 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "tlv wow del pattern vdev_id %d pattern_id %d\n",
9216 		   vdev_id, pattern_id);
9217 
9218 	return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_DEL_WAKE_PATTERN_CMDID);
9219 }
9220 
9221 static struct sk_buff *
9222 ath11k_wmi_op_gen_config_pno_start(struct ath11k *ar,
9223 				   u32 vdev_id,
9224 				       struct wmi_pno_scan_req *pno)
9225 {
9226 	struct nlo_configured_parameters *nlo_list;
9227 	struct wmi_wow_nlo_config_cmd *cmd;
9228 	struct wmi_tlv *tlv;
9229 	struct sk_buff *skb;
9230 	u32 *channel_list;
9231 	size_t len, nlo_list_len, channel_list_len;
9232 	u8 *ptr;
9233 	u32 i;
9234 
9235 	len = sizeof(*cmd) +
9236 	      sizeof(*tlv) +
9237 	      /* TLV place holder for array of structures
9238 	       * nlo_configured_parameters(nlo_list)
9239 	       */
9240 	      sizeof(*tlv);
9241 	      /* TLV place holder for array of uint32 channel_list */
9242 
9243 	channel_list_len = sizeof(u32) * pno->a_networks[0].channel_count;
9244 	len += channel_list_len;
9245 
9246 	nlo_list_len = sizeof(*nlo_list) * pno->uc_networks_count;
9247 	len += nlo_list_len;
9248 
9249 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
9250 	if (!skb)
9251 		return ERR_PTR(-ENOMEM);
9252 
9253 	ptr = (u8 *)skb->data;
9254 	cmd = (struct wmi_wow_nlo_config_cmd *)ptr;
9255 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_NLO_CONFIG_CMD) |
9256 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
9257 
9258 	cmd->vdev_id = pno->vdev_id;
9259 	cmd->flags = WMI_NLO_CONFIG_START | WMI_NLO_CONFIG_SSID_HIDE_EN;
9260 
9261 	/* current FW does not support min-max range for dwell time */
9262 	cmd->active_dwell_time = pno->active_max_time;
9263 	cmd->passive_dwell_time = pno->passive_max_time;
9264 
9265 	if (pno->do_passive_scan)
9266 		cmd->flags |= WMI_NLO_CONFIG_SCAN_PASSIVE;
9267 
9268 	cmd->fast_scan_period = pno->fast_scan_period;
9269 	cmd->slow_scan_period = pno->slow_scan_period;
9270 	cmd->fast_scan_max_cycles = pno->fast_scan_max_cycles;
9271 	cmd->delay_start_time = pno->delay_start_time;
9272 
9273 	if (pno->enable_pno_scan_randomization) {
9274 		cmd->flags |= WMI_NLO_CONFIG_SPOOFED_MAC_IN_PROBE_REQ |
9275 				WMI_NLO_CONFIG_RANDOM_SEQ_NO_IN_PROBE_REQ;
9276 		ether_addr_copy(cmd->mac_addr.addr, pno->mac_addr);
9277 		ether_addr_copy(cmd->mac_mask.addr, pno->mac_addr_mask);
9278 		ath11k_ce_byte_swap(cmd->mac_addr.addr, 8);
9279 		ath11k_ce_byte_swap(cmd->mac_mask.addr, 8);
9280 	}
9281 
9282 	ptr += sizeof(*cmd);
9283 
9284 	/* nlo_configured_parameters(nlo_list) */
9285 	cmd->no_of_ssids = pno->uc_networks_count;
9286 	tlv = (struct wmi_tlv *)ptr;
9287 	tlv->header = FIELD_PREP(WMI_TLV_TAG,
9288 				 WMI_TAG_ARRAY_STRUCT) |
9289 		      FIELD_PREP(WMI_TLV_LEN, nlo_list_len);
9290 
9291 	ptr += sizeof(*tlv);
9292 	nlo_list = (struct nlo_configured_parameters *)ptr;
9293 	for (i = 0; i < cmd->no_of_ssids; i++) {
9294 		tlv = (struct wmi_tlv *)(&nlo_list[i].tlv_header);
9295 		tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
9296 			      FIELD_PREP(WMI_TLV_LEN, sizeof(*nlo_list) - sizeof(*tlv));
9297 
9298 		nlo_list[i].ssid.valid = true;
9299 		nlo_list[i].ssid.ssid.ssid_len = pno->a_networks[i].ssid.ssid_len;
9300 		memcpy(nlo_list[i].ssid.ssid.ssid,
9301 		       pno->a_networks[i].ssid.ssid,
9302 		       nlo_list[i].ssid.ssid.ssid_len);
9303 		ath11k_ce_byte_swap(nlo_list[i].ssid.ssid.ssid,
9304 				    roundup(nlo_list[i].ssid.ssid.ssid_len, 4));
9305 
9306 		if (pno->a_networks[i].rssi_threshold &&
9307 		    pno->a_networks[i].rssi_threshold > -300) {
9308 			nlo_list[i].rssi_cond.valid = true;
9309 			nlo_list[i].rssi_cond.rssi =
9310 				pno->a_networks[i].rssi_threshold;
9311 		}
9312 
9313 		nlo_list[i].bcast_nw_type.valid = true;
9314 		nlo_list[i].bcast_nw_type.bcast_nw_type =
9315 			pno->a_networks[i].bcast_nw_type;
9316 	}
9317 
9318 	ptr += nlo_list_len;
9319 	cmd->num_of_channels = pno->a_networks[0].channel_count;
9320 	tlv = (struct wmi_tlv *)ptr;
9321 	tlv->header =  FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_UINT32) |
9322 		       FIELD_PREP(WMI_TLV_LEN, channel_list_len);
9323 	ptr += sizeof(*tlv);
9324 	channel_list = (u32 *)ptr;
9325 	for (i = 0; i < cmd->num_of_channels; i++)
9326 		channel_list[i] = pno->a_networks[0].channels[i];
9327 
9328 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "tlv start pno config vdev_id %d\n",
9329 		   vdev_id);
9330 
9331 	return skb;
9332 }
9333 
9334 static struct sk_buff *ath11k_wmi_op_gen_config_pno_stop(struct ath11k *ar,
9335 							 u32 vdev_id)
9336 {
9337 	struct wmi_wow_nlo_config_cmd *cmd;
9338 	struct sk_buff *skb;
9339 	size_t len;
9340 
9341 	len = sizeof(*cmd);
9342 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
9343 	if (!skb)
9344 		return ERR_PTR(-ENOMEM);
9345 
9346 	cmd = (struct wmi_wow_nlo_config_cmd *)skb->data;
9347 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_NLO_CONFIG_CMD) |
9348 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
9349 
9350 	cmd->vdev_id = vdev_id;
9351 	cmd->flags = WMI_NLO_CONFIG_STOP;
9352 
9353 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
9354 		   "tlv stop pno config vdev_id %d\n", vdev_id);
9355 	return skb;
9356 }
9357 
9358 int ath11k_wmi_wow_config_pno(struct ath11k *ar, u32 vdev_id,
9359 			      struct wmi_pno_scan_req  *pno_scan)
9360 {
9361 	struct sk_buff *skb;
9362 
9363 	if (pno_scan->enable)
9364 		skb = ath11k_wmi_op_gen_config_pno_start(ar, vdev_id, pno_scan);
9365 	else
9366 		skb = ath11k_wmi_op_gen_config_pno_stop(ar, vdev_id);
9367 
9368 	if (IS_ERR_OR_NULL(skb))
9369 		return -ENOMEM;
9370 
9371 	return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_NETWORK_LIST_OFFLOAD_CONFIG_CMDID);
9372 }
9373 
9374 static void ath11k_wmi_fill_ns_offload(struct ath11k *ar,
9375 				       struct ath11k_arp_ns_offload *offload,
9376 				       u8 **ptr,
9377 				       bool enable,
9378 				       bool ext)
9379 {
9380 	struct wmi_ns_offload_tuple *ns;
9381 	struct wmi_tlv *tlv;
9382 	u8 *buf_ptr = *ptr;
9383 	u32 ns_cnt, ns_ext_tuples;
9384 	int i, max_offloads;
9385 
9386 	ns_cnt = offload->ipv6_count;
9387 
9388 	tlv  = (struct wmi_tlv *)buf_ptr;
9389 
9390 	if (ext) {
9391 		ns_ext_tuples = offload->ipv6_count - WMI_MAX_NS_OFFLOADS;
9392 		tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
9393 			      FIELD_PREP(WMI_TLV_LEN, ns_ext_tuples * sizeof(*ns));
9394 		i = WMI_MAX_NS_OFFLOADS;
9395 		max_offloads = offload->ipv6_count;
9396 	} else {
9397 		tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
9398 			      FIELD_PREP(WMI_TLV_LEN, WMI_MAX_NS_OFFLOADS * sizeof(*ns));
9399 		i = 0;
9400 		max_offloads = WMI_MAX_NS_OFFLOADS;
9401 	}
9402 
9403 	buf_ptr += sizeof(*tlv);
9404 
9405 	for (; i < max_offloads; i++) {
9406 		ns = (struct wmi_ns_offload_tuple *)buf_ptr;
9407 		ns->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_NS_OFFLOAD_TUPLE) |
9408 				 FIELD_PREP(WMI_TLV_LEN, sizeof(*ns) - TLV_HDR_SIZE);
9409 
9410 		if (enable) {
9411 			if (i < ns_cnt)
9412 				ns->flags |= WMI_NSOL_FLAGS_VALID;
9413 
9414 			memcpy(ns->target_ipaddr[0], offload->ipv6_addr[i], 16);
9415 			memcpy(ns->solicitation_ipaddr, offload->self_ipv6_addr[i], 16);
9416 			ath11k_ce_byte_swap(ns->target_ipaddr[0], 16);
9417 			ath11k_ce_byte_swap(ns->solicitation_ipaddr, 16);
9418 
9419 			if (offload->ipv6_type[i])
9420 				ns->flags |= WMI_NSOL_FLAGS_IS_IPV6_ANYCAST;
9421 
9422 			memcpy(ns->target_mac.addr, offload->mac_addr, ETH_ALEN);
9423 			ath11k_ce_byte_swap(ns->target_mac.addr, 8);
9424 
9425 			if (ns->target_mac.word0 != 0 ||
9426 			    ns->target_mac.word1 != 0) {
9427 				ns->flags |= WMI_NSOL_FLAGS_MAC_VALID;
9428 			}
9429 
9430 			ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
9431 				   "index %d ns_solicited %pI6 target %pI6",
9432 				   i, ns->solicitation_ipaddr,
9433 				   ns->target_ipaddr[0]);
9434 		}
9435 
9436 		buf_ptr += sizeof(*ns);
9437 	}
9438 
9439 	*ptr = buf_ptr;
9440 }
9441 
9442 static void ath11k_wmi_fill_arp_offload(struct ath11k *ar,
9443 					struct ath11k_arp_ns_offload *offload,
9444 					u8 **ptr,
9445 					bool enable)
9446 {
9447 	struct wmi_arp_offload_tuple *arp;
9448 	struct wmi_tlv *tlv;
9449 	u8 *buf_ptr = *ptr;
9450 	int i;
9451 
9452 	/* fill arp tuple */
9453 	tlv = (struct wmi_tlv *)buf_ptr;
9454 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
9455 		      FIELD_PREP(WMI_TLV_LEN, WMI_MAX_ARP_OFFLOADS * sizeof(*arp));
9456 	buf_ptr += sizeof(*tlv);
9457 
9458 	for (i = 0; i < WMI_MAX_ARP_OFFLOADS; i++) {
9459 		arp = (struct wmi_arp_offload_tuple *)buf_ptr;
9460 		arp->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARP_OFFLOAD_TUPLE) |
9461 				  FIELD_PREP(WMI_TLV_LEN, sizeof(*arp) - TLV_HDR_SIZE);
9462 
9463 		if (enable && i < offload->ipv4_count) {
9464 			/* Copy the target ip addr and flags */
9465 			arp->flags = WMI_ARPOL_FLAGS_VALID;
9466 			memcpy(arp->target_ipaddr, offload->ipv4_addr[i], 4);
9467 			ath11k_ce_byte_swap(arp->target_ipaddr, 4);
9468 
9469 			ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "arp offload address %pI4",
9470 				   arp->target_ipaddr);
9471 		}
9472 
9473 		buf_ptr += sizeof(*arp);
9474 	}
9475 
9476 	*ptr = buf_ptr;
9477 }
9478 
9479 int ath11k_wmi_arp_ns_offload(struct ath11k *ar,
9480 			      struct ath11k_vif *arvif, bool enable)
9481 {
9482 	struct ath11k_arp_ns_offload *offload;
9483 	struct wmi_set_arp_ns_offload_cmd *cmd;
9484 	struct wmi_tlv *tlv;
9485 	struct sk_buff *skb;
9486 	u8 *buf_ptr;
9487 	size_t len;
9488 	u8 ns_cnt, ns_ext_tuples = 0;
9489 
9490 	offload = &arvif->arp_ns_offload;
9491 	ns_cnt = offload->ipv6_count;
9492 
9493 	len = sizeof(*cmd) +
9494 	      sizeof(*tlv) +
9495 	      WMI_MAX_NS_OFFLOADS * sizeof(struct wmi_ns_offload_tuple) +
9496 	      sizeof(*tlv) +
9497 	      WMI_MAX_ARP_OFFLOADS * sizeof(struct wmi_arp_offload_tuple);
9498 
9499 	if (ns_cnt > WMI_MAX_NS_OFFLOADS) {
9500 		ns_ext_tuples = ns_cnt - WMI_MAX_NS_OFFLOADS;
9501 		len += sizeof(*tlv) +
9502 		       ns_ext_tuples * sizeof(struct wmi_ns_offload_tuple);
9503 	}
9504 
9505 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
9506 	if (!skb)
9507 		return -ENOMEM;
9508 
9509 	buf_ptr = skb->data;
9510 	cmd = (struct wmi_set_arp_ns_offload_cmd *)buf_ptr;
9511 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
9512 				     WMI_TAG_SET_ARP_NS_OFFLOAD_CMD) |
9513 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
9514 
9515 	cmd->flags = 0;
9516 	cmd->vdev_id = arvif->vdev_id;
9517 	cmd->num_ns_ext_tuples = ns_ext_tuples;
9518 
9519 	buf_ptr += sizeof(*cmd);
9520 
9521 	ath11k_wmi_fill_ns_offload(ar, offload, &buf_ptr, enable, 0);
9522 	ath11k_wmi_fill_arp_offload(ar, offload, &buf_ptr, enable);
9523 
9524 	if (ns_ext_tuples)
9525 		ath11k_wmi_fill_ns_offload(ar, offload, &buf_ptr, enable, 1);
9526 
9527 	return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_SET_ARP_NS_OFFLOAD_CMDID);
9528 }
9529 
9530 int ath11k_wmi_gtk_rekey_offload(struct ath11k *ar,
9531 				 struct ath11k_vif *arvif, bool enable)
9532 {
9533 	struct wmi_gtk_rekey_offload_cmd *cmd;
9534 	struct ath11k_rekey_data *rekey_data = &arvif->rekey_data;
9535 	int len;
9536 	struct sk_buff *skb;
9537 	__le64 replay_ctr;
9538 
9539 	len = sizeof(*cmd);
9540 	skb =  ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
9541 	if (!skb)
9542 		return -ENOMEM;
9543 
9544 	cmd = (struct wmi_gtk_rekey_offload_cmd *)skb->data;
9545 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_GTK_OFFLOAD_CMD) |
9546 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
9547 
9548 	cmd->vdev_id = arvif->vdev_id;
9549 
9550 	if (enable) {
9551 		cmd->flags = GTK_OFFLOAD_ENABLE_OPCODE;
9552 
9553 		/* the length in rekey_data and cmd is equal */
9554 		memcpy(cmd->kck, rekey_data->kck, sizeof(cmd->kck));
9555 		ath11k_ce_byte_swap(cmd->kck, GTK_OFFLOAD_KEK_BYTES);
9556 		memcpy(cmd->kek, rekey_data->kek, sizeof(cmd->kek));
9557 		ath11k_ce_byte_swap(cmd->kek, GTK_OFFLOAD_KEK_BYTES);
9558 
9559 		replay_ctr = cpu_to_le64(rekey_data->replay_ctr);
9560 		memcpy(cmd->replay_ctr, &replay_ctr,
9561 		       sizeof(replay_ctr));
9562 		ath11k_ce_byte_swap(cmd->replay_ctr, GTK_REPLAY_COUNTER_BYTES);
9563 	} else {
9564 		cmd->flags = GTK_OFFLOAD_DISABLE_OPCODE;
9565 	}
9566 
9567 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "offload gtk rekey vdev: %d %d\n",
9568 		   arvif->vdev_id, enable);
9569 	return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_GTK_OFFLOAD_CMDID);
9570 }
9571 
9572 int ath11k_wmi_gtk_rekey_getinfo(struct ath11k *ar,
9573 				 struct ath11k_vif *arvif)
9574 {
9575 	struct wmi_gtk_rekey_offload_cmd *cmd;
9576 	int len;
9577 	struct sk_buff *skb;
9578 
9579 	len = sizeof(*cmd);
9580 	skb =  ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
9581 	if (!skb)
9582 		return -ENOMEM;
9583 
9584 	cmd = (struct wmi_gtk_rekey_offload_cmd *)skb->data;
9585 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_GTK_OFFLOAD_CMD) |
9586 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
9587 
9588 	cmd->vdev_id = arvif->vdev_id;
9589 	cmd->flags = GTK_OFFLOAD_REQUEST_STATUS_OPCODE;
9590 
9591 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "get gtk rekey vdev_id: %d\n",
9592 		   arvif->vdev_id);
9593 	return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_GTK_OFFLOAD_CMDID);
9594 }
9595 
9596 int ath11k_wmi_pdev_set_bios_sar_table_param(struct ath11k *ar, const u8 *sar_val)
9597 {	struct ath11k_pdev_wmi *wmi = ar->wmi;
9598 	struct wmi_pdev_set_sar_table_cmd *cmd;
9599 	struct wmi_tlv *tlv;
9600 	struct sk_buff *skb;
9601 	u8 *buf_ptr;
9602 	u32 len, sar_len_aligned, rsvd_len_aligned;
9603 
9604 	sar_len_aligned = roundup(BIOS_SAR_TABLE_LEN, sizeof(u32));
9605 	rsvd_len_aligned = roundup(BIOS_SAR_RSVD1_LEN, sizeof(u32));
9606 	len = sizeof(*cmd) +
9607 	      TLV_HDR_SIZE + sar_len_aligned +
9608 	      TLV_HDR_SIZE + rsvd_len_aligned;
9609 
9610 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
9611 	if (!skb)
9612 		return -ENOMEM;
9613 
9614 	cmd = (struct wmi_pdev_set_sar_table_cmd *)skb->data;
9615 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_SET_BIOS_SAR_TABLE_CMD) |
9616 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
9617 	cmd->pdev_id = ar->pdev->pdev_id;
9618 	cmd->sar_len = BIOS_SAR_TABLE_LEN;
9619 	cmd->rsvd_len = BIOS_SAR_RSVD1_LEN;
9620 
9621 	buf_ptr = skb->data + sizeof(*cmd);
9622 	tlv = (struct wmi_tlv *)buf_ptr;
9623 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
9624 		      FIELD_PREP(WMI_TLV_LEN, sar_len_aligned);
9625 	buf_ptr += TLV_HDR_SIZE;
9626 	memcpy(buf_ptr, sar_val, BIOS_SAR_TABLE_LEN);
9627 
9628 	buf_ptr += sar_len_aligned;
9629 	tlv = (struct wmi_tlv *)buf_ptr;
9630 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
9631 		      FIELD_PREP(WMI_TLV_LEN, rsvd_len_aligned);
9632 
9633 	return ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_BIOS_SAR_TABLE_CMDID);
9634 }
9635 
9636 int ath11k_wmi_pdev_set_bios_geo_table_param(struct ath11k *ar)
9637 {
9638 	struct ath11k_pdev_wmi *wmi = ar->wmi;
9639 	struct wmi_pdev_set_geo_table_cmd *cmd;
9640 	struct wmi_tlv *tlv;
9641 	struct sk_buff *skb;
9642 	u8 *buf_ptr;
9643 	u32 len, rsvd_len_aligned;
9644 
9645 	rsvd_len_aligned = roundup(BIOS_SAR_RSVD2_LEN, sizeof(u32));
9646 	len = sizeof(*cmd) + TLV_HDR_SIZE + rsvd_len_aligned;
9647 
9648 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
9649 	if (!skb)
9650 		return -ENOMEM;
9651 
9652 	cmd = (struct wmi_pdev_set_geo_table_cmd *)skb->data;
9653 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_SET_BIOS_GEO_TABLE_CMD) |
9654 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
9655 	cmd->pdev_id = ar->pdev->pdev_id;
9656 	cmd->rsvd_len = BIOS_SAR_RSVD2_LEN;
9657 
9658 	buf_ptr = skb->data + sizeof(*cmd);
9659 	tlv = (struct wmi_tlv *)buf_ptr;
9660 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
9661 		      FIELD_PREP(WMI_TLV_LEN, rsvd_len_aligned);
9662 
9663 	return ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_BIOS_GEO_TABLE_CMDID);
9664 }
9665 
9666 int ath11k_wmi_sta_keepalive(struct ath11k *ar,
9667 			     const struct wmi_sta_keepalive_arg *arg)
9668 {
9669 	struct ath11k_pdev_wmi *wmi = ar->wmi;
9670 	struct wmi_sta_keepalive_cmd *cmd;
9671 	struct wmi_sta_keepalive_arp_resp *arp;
9672 	struct sk_buff *skb;
9673 	size_t len;
9674 
9675 	len = sizeof(*cmd) + sizeof(*arp);
9676 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
9677 	if (!skb)
9678 		return -ENOMEM;
9679 
9680 	cmd = (struct wmi_sta_keepalive_cmd *)skb->data;
9681 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
9682 				     WMI_TAG_STA_KEEPALIVE_CMD) |
9683 				     FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
9684 	cmd->vdev_id = arg->vdev_id;
9685 	cmd->enabled = arg->enabled;
9686 	cmd->interval = arg->interval;
9687 	cmd->method = arg->method;
9688 
9689 	arp = (struct wmi_sta_keepalive_arp_resp *)(cmd + 1);
9690 	arp->tlv_header = FIELD_PREP(WMI_TLV_TAG,
9691 				     WMI_TAG_STA_KEEPALIVE_ARP_RESPONSE) |
9692 			 FIELD_PREP(WMI_TLV_LEN, sizeof(*arp) - TLV_HDR_SIZE);
9693 
9694 	if (arg->method == WMI_STA_KEEPALIVE_METHOD_UNSOLICITED_ARP_RESPONSE ||
9695 	    arg->method == WMI_STA_KEEPALIVE_METHOD_GRATUITOUS_ARP_REQUEST) {
9696 		arp->src_ip4_addr = arg->src_ip4_addr;
9697 		arp->dest_ip4_addr = arg->dest_ip4_addr;
9698 		ether_addr_copy(arp->dest_mac_addr.addr, arg->dest_mac_addr);
9699 	}
9700 
9701 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
9702 		   "sta keepalive vdev %d enabled %d method %d interval %d\n",
9703 		   arg->vdev_id, arg->enabled, arg->method, arg->interval);
9704 
9705 	return ath11k_wmi_cmd_send(wmi, skb, WMI_STA_KEEPALIVE_CMDID);
9706 }
9707