xref: /linux/drivers/net/wireless/ath/ath11k/wmi.c (revision 41fb0cf1bced59c1fe178cf6cc9f716b5da9e40e)
1 // SPDX-License-Identifier: BSD-3-Clause-Clear
2 /*
3  * Copyright (c) 2018-2019 The Linux Foundation. All rights reserved.
4  */
5 #include <linux/skbuff.h>
6 #include <linux/ctype.h>
7 #include <net/mac80211.h>
8 #include <net/cfg80211.h>
9 #include <linux/completion.h>
10 #include <linux/if_ether.h>
11 #include <linux/types.h>
12 #include <linux/pci.h>
13 #include <linux/uuid.h>
14 #include <linux/time.h>
15 #include <linux/of.h>
16 #include "core.h"
17 #include "debug.h"
18 #include "mac.h"
19 #include "hw.h"
20 #include "peer.h"
21 
22 struct wmi_tlv_policy {
23 	size_t min_len;
24 };
25 
26 struct wmi_tlv_svc_ready_parse {
27 	bool wmi_svc_bitmap_done;
28 };
29 
30 struct wmi_tlv_dma_ring_caps_parse {
31 	struct wmi_dma_ring_capabilities *dma_ring_caps;
32 	u32 n_dma_ring_caps;
33 };
34 
35 struct wmi_tlv_svc_rdy_ext_parse {
36 	struct ath11k_service_ext_param param;
37 	struct wmi_soc_mac_phy_hw_mode_caps *hw_caps;
38 	struct wmi_hw_mode_capabilities *hw_mode_caps;
39 	u32 n_hw_mode_caps;
40 	u32 tot_phy_id;
41 	struct wmi_hw_mode_capabilities pref_hw_mode_caps;
42 	struct wmi_mac_phy_capabilities *mac_phy_caps;
43 	u32 n_mac_phy_caps;
44 	struct wmi_soc_hal_reg_capabilities *soc_hal_reg_caps;
45 	struct wmi_hal_reg_capabilities_ext *ext_hal_reg_caps;
46 	u32 n_ext_hal_reg_caps;
47 	struct wmi_tlv_dma_ring_caps_parse dma_caps_parse;
48 	bool hw_mode_done;
49 	bool mac_phy_done;
50 	bool ext_hal_reg_done;
51 	bool mac_phy_chainmask_combo_done;
52 	bool mac_phy_chainmask_cap_done;
53 	bool oem_dma_ring_cap_done;
54 	bool dma_ring_cap_done;
55 };
56 
57 struct wmi_tlv_svc_rdy_ext2_parse {
58 	struct wmi_tlv_dma_ring_caps_parse dma_caps_parse;
59 	bool dma_ring_cap_done;
60 };
61 
62 struct wmi_tlv_rdy_parse {
63 	u32 num_extra_mac_addr;
64 };
65 
66 struct wmi_tlv_dma_buf_release_parse {
67 	struct ath11k_wmi_dma_buf_release_fixed_param fixed;
68 	struct wmi_dma_buf_release_entry *buf_entry;
69 	struct wmi_dma_buf_release_meta_data *meta_data;
70 	u32 num_buf_entry;
71 	u32 num_meta;
72 	bool buf_entry_done;
73 	bool meta_data_done;
74 };
75 
76 static const struct wmi_tlv_policy wmi_tlv_policies[] = {
77 	[WMI_TAG_ARRAY_BYTE]
78 		= { .min_len = 0 },
79 	[WMI_TAG_ARRAY_UINT32]
80 		= { .min_len = 0 },
81 	[WMI_TAG_SERVICE_READY_EVENT]
82 		= { .min_len = sizeof(struct wmi_service_ready_event) },
83 	[WMI_TAG_SERVICE_READY_EXT_EVENT]
84 		= { .min_len =  sizeof(struct wmi_service_ready_ext_event) },
85 	[WMI_TAG_SOC_MAC_PHY_HW_MODE_CAPS]
86 		= { .min_len = sizeof(struct wmi_soc_mac_phy_hw_mode_caps) },
87 	[WMI_TAG_SOC_HAL_REG_CAPABILITIES]
88 		= { .min_len = sizeof(struct wmi_soc_hal_reg_capabilities) },
89 	[WMI_TAG_VDEV_START_RESPONSE_EVENT]
90 		= { .min_len = sizeof(struct wmi_vdev_start_resp_event) },
91 	[WMI_TAG_PEER_DELETE_RESP_EVENT]
92 		= { .min_len = sizeof(struct wmi_peer_delete_resp_event) },
93 	[WMI_TAG_OFFLOAD_BCN_TX_STATUS_EVENT]
94 		= { .min_len = sizeof(struct wmi_bcn_tx_status_event) },
95 	[WMI_TAG_VDEV_STOPPED_EVENT]
96 		= { .min_len = sizeof(struct wmi_vdev_stopped_event) },
97 	[WMI_TAG_REG_CHAN_LIST_CC_EVENT]
98 		= { .min_len = sizeof(struct wmi_reg_chan_list_cc_event) },
99 	[WMI_TAG_MGMT_RX_HDR]
100 		= { .min_len = sizeof(struct wmi_mgmt_rx_hdr) },
101 	[WMI_TAG_MGMT_TX_COMPL_EVENT]
102 		= { .min_len = sizeof(struct wmi_mgmt_tx_compl_event) },
103 	[WMI_TAG_SCAN_EVENT]
104 		= { .min_len = sizeof(struct wmi_scan_event) },
105 	[WMI_TAG_PEER_STA_KICKOUT_EVENT]
106 		= { .min_len = sizeof(struct wmi_peer_sta_kickout_event) },
107 	[WMI_TAG_ROAM_EVENT]
108 		= { .min_len = sizeof(struct wmi_roam_event) },
109 	[WMI_TAG_CHAN_INFO_EVENT]
110 		= { .min_len = sizeof(struct wmi_chan_info_event) },
111 	[WMI_TAG_PDEV_BSS_CHAN_INFO_EVENT]
112 		= { .min_len = sizeof(struct wmi_pdev_bss_chan_info_event) },
113 	[WMI_TAG_VDEV_INSTALL_KEY_COMPLETE_EVENT]
114 		= { .min_len = sizeof(struct wmi_vdev_install_key_compl_event) },
115 	[WMI_TAG_READY_EVENT] = {
116 		.min_len = sizeof(struct wmi_ready_event_min) },
117 	[WMI_TAG_SERVICE_AVAILABLE_EVENT]
118 		= {.min_len = sizeof(struct wmi_service_available_event) },
119 	[WMI_TAG_PEER_ASSOC_CONF_EVENT]
120 		= { .min_len = sizeof(struct wmi_peer_assoc_conf_event) },
121 	[WMI_TAG_STATS_EVENT]
122 		= { .min_len = sizeof(struct wmi_stats_event) },
123 	[WMI_TAG_PDEV_CTL_FAILSAFE_CHECK_EVENT]
124 		= { .min_len = sizeof(struct wmi_pdev_ctl_failsafe_chk_event) },
125 	[WMI_TAG_HOST_SWFDA_EVENT] = {
126 		.min_len = sizeof(struct wmi_fils_discovery_event) },
127 	[WMI_TAG_OFFLOAD_PRB_RSP_TX_STATUS_EVENT] = {
128 		.min_len = sizeof(struct wmi_probe_resp_tx_status_event) },
129 	[WMI_TAG_VDEV_DELETE_RESP_EVENT] = {
130 		.min_len = sizeof(struct wmi_vdev_delete_resp_event) },
131 	[WMI_TAG_OBSS_COLOR_COLLISION_EVT] = {
132 		.min_len = sizeof(struct wmi_obss_color_collision_event) },
133 };
134 
135 #define PRIMAP(_hw_mode_) \
136 	[_hw_mode_] = _hw_mode_##_PRI
137 
138 static const int ath11k_hw_mode_pri_map[] = {
139 	PRIMAP(WMI_HOST_HW_MODE_SINGLE),
140 	PRIMAP(WMI_HOST_HW_MODE_DBS),
141 	PRIMAP(WMI_HOST_HW_MODE_SBS_PASSIVE),
142 	PRIMAP(WMI_HOST_HW_MODE_SBS),
143 	PRIMAP(WMI_HOST_HW_MODE_DBS_SBS),
144 	PRIMAP(WMI_HOST_HW_MODE_DBS_OR_SBS),
145 	/* keep last */
146 	PRIMAP(WMI_HOST_HW_MODE_MAX),
147 };
148 
149 static int
150 ath11k_wmi_tlv_iter(struct ath11k_base *ab, const void *ptr, size_t len,
151 		    int (*iter)(struct ath11k_base *ab, u16 tag, u16 len,
152 				const void *ptr, void *data),
153 		    void *data)
154 {
155 	const void *begin = ptr;
156 	const struct wmi_tlv *tlv;
157 	u16 tlv_tag, tlv_len;
158 	int ret;
159 
160 	while (len > 0) {
161 		if (len < sizeof(*tlv)) {
162 			ath11k_err(ab, "wmi tlv parse failure at byte %zd (%zu bytes left, %zu expected)\n",
163 				   ptr - begin, len, sizeof(*tlv));
164 			return -EINVAL;
165 		}
166 
167 		tlv = ptr;
168 		tlv_tag = FIELD_GET(WMI_TLV_TAG, tlv->header);
169 		tlv_len = FIELD_GET(WMI_TLV_LEN, tlv->header);
170 		ptr += sizeof(*tlv);
171 		len -= sizeof(*tlv);
172 
173 		if (tlv_len > len) {
174 			ath11k_err(ab, "wmi tlv parse failure of tag %u at byte %zd (%zu bytes left, %u expected)\n",
175 				   tlv_tag, ptr - begin, len, tlv_len);
176 			return -EINVAL;
177 		}
178 
179 		if (tlv_tag < ARRAY_SIZE(wmi_tlv_policies) &&
180 		    wmi_tlv_policies[tlv_tag].min_len &&
181 		    wmi_tlv_policies[tlv_tag].min_len > tlv_len) {
182 			ath11k_err(ab, "wmi tlv parse failure of tag %u at byte %zd (%u bytes is less than min length %zu)\n",
183 				   tlv_tag, ptr - begin, tlv_len,
184 				   wmi_tlv_policies[tlv_tag].min_len);
185 			return -EINVAL;
186 		}
187 
188 		ret = iter(ab, tlv_tag, tlv_len, ptr, data);
189 		if (ret)
190 			return ret;
191 
192 		ptr += tlv_len;
193 		len -= tlv_len;
194 	}
195 
196 	return 0;
197 }
198 
199 static int ath11k_wmi_tlv_iter_parse(struct ath11k_base *ab, u16 tag, u16 len,
200 				     const void *ptr, void *data)
201 {
202 	const void **tb = data;
203 
204 	if (tag < WMI_TAG_MAX)
205 		tb[tag] = ptr;
206 
207 	return 0;
208 }
209 
210 static int ath11k_wmi_tlv_parse(struct ath11k_base *ar, const void **tb,
211 				const void *ptr, size_t len)
212 {
213 	return ath11k_wmi_tlv_iter(ar, ptr, len, ath11k_wmi_tlv_iter_parse,
214 				   (void *)tb);
215 }
216 
217 static const void **
218 ath11k_wmi_tlv_parse_alloc(struct ath11k_base *ab, const void *ptr,
219 			   size_t len, gfp_t gfp)
220 {
221 	const void **tb;
222 	int ret;
223 
224 	tb = kcalloc(WMI_TAG_MAX, sizeof(*tb), gfp);
225 	if (!tb)
226 		return ERR_PTR(-ENOMEM);
227 
228 	ret = ath11k_wmi_tlv_parse(ab, tb, ptr, len);
229 	if (ret) {
230 		kfree(tb);
231 		return ERR_PTR(ret);
232 	}
233 
234 	return tb;
235 }
236 
237 static int ath11k_wmi_cmd_send_nowait(struct ath11k_pdev_wmi *wmi, struct sk_buff *skb,
238 				      u32 cmd_id)
239 {
240 	struct ath11k_skb_cb *skb_cb = ATH11K_SKB_CB(skb);
241 	struct ath11k_base *ab = wmi->wmi_ab->ab;
242 	struct wmi_cmd_hdr *cmd_hdr;
243 	int ret;
244 	u32 cmd = 0;
245 
246 	if (skb_push(skb, sizeof(struct wmi_cmd_hdr)) == NULL)
247 		return -ENOMEM;
248 
249 	cmd |= FIELD_PREP(WMI_CMD_HDR_CMD_ID, cmd_id);
250 
251 	cmd_hdr = (struct wmi_cmd_hdr *)skb->data;
252 	cmd_hdr->cmd_id = cmd;
253 
254 	trace_ath11k_wmi_cmd(ab, cmd_id, skb->data, skb->len);
255 
256 	memset(skb_cb, 0, sizeof(*skb_cb));
257 	ret = ath11k_htc_send(&ab->htc, wmi->eid, skb);
258 
259 	if (ret)
260 		goto err_pull;
261 
262 	return 0;
263 
264 err_pull:
265 	skb_pull(skb, sizeof(struct wmi_cmd_hdr));
266 	return ret;
267 }
268 
269 int ath11k_wmi_cmd_send(struct ath11k_pdev_wmi *wmi, struct sk_buff *skb,
270 			u32 cmd_id)
271 {
272 	struct ath11k_wmi_base *wmi_sc = wmi->wmi_ab;
273 	int ret = -EOPNOTSUPP;
274 	struct ath11k_base *ab = wmi_sc->ab;
275 
276 	might_sleep();
277 
278 	if (ab->hw_params.credit_flow) {
279 		wait_event_timeout(wmi_sc->tx_credits_wq, ({
280 			ret = ath11k_wmi_cmd_send_nowait(wmi, skb, cmd_id);
281 
282 			if (ret && test_bit(ATH11K_FLAG_CRASH_FLUSH,
283 					    &wmi_sc->ab->dev_flags))
284 				ret = -ESHUTDOWN;
285 
286 			(ret != -EAGAIN);
287 			}), WMI_SEND_TIMEOUT_HZ);
288 	} else {
289 		wait_event_timeout(wmi->tx_ce_desc_wq, ({
290 			ret = ath11k_wmi_cmd_send_nowait(wmi, skb, cmd_id);
291 
292 			if (ret && test_bit(ATH11K_FLAG_CRASH_FLUSH,
293 					    &wmi_sc->ab->dev_flags))
294 				ret = -ESHUTDOWN;
295 
296 			(ret != -ENOBUFS);
297 			}), WMI_SEND_TIMEOUT_HZ);
298 	}
299 
300 	if (ret == -EAGAIN)
301 		ath11k_warn(wmi_sc->ab, "wmi command %d timeout\n", cmd_id);
302 
303 	if (ret == -ENOBUFS)
304 		ath11k_warn(wmi_sc->ab, "ce desc not available for wmi command %d\n",
305 			    cmd_id);
306 
307 	return ret;
308 }
309 
310 static int ath11k_pull_svc_ready_ext(struct ath11k_pdev_wmi *wmi_handle,
311 				     const void *ptr,
312 				     struct ath11k_service_ext_param *param)
313 {
314 	const struct wmi_service_ready_ext_event *ev = ptr;
315 
316 	if (!ev)
317 		return -EINVAL;
318 
319 	/* Move this to host based bitmap */
320 	param->default_conc_scan_config_bits = ev->default_conc_scan_config_bits;
321 	param->default_fw_config_bits =	ev->default_fw_config_bits;
322 	param->he_cap_info = ev->he_cap_info;
323 	param->mpdu_density = ev->mpdu_density;
324 	param->max_bssid_rx_filters = ev->max_bssid_rx_filters;
325 	memcpy(&param->ppet, &ev->ppet, sizeof(param->ppet));
326 
327 	return 0;
328 }
329 
330 static int
331 ath11k_pull_mac_phy_cap_svc_ready_ext(struct ath11k_pdev_wmi *wmi_handle,
332 				      struct wmi_soc_mac_phy_hw_mode_caps *hw_caps,
333 				      struct wmi_hw_mode_capabilities *wmi_hw_mode_caps,
334 				      struct wmi_soc_hal_reg_capabilities *hal_reg_caps,
335 				      struct wmi_mac_phy_capabilities *wmi_mac_phy_caps,
336 				      u8 hw_mode_id, u8 phy_id,
337 				      struct ath11k_pdev *pdev)
338 {
339 	struct wmi_mac_phy_capabilities *mac_phy_caps;
340 	struct ath11k_band_cap *cap_band;
341 	struct ath11k_pdev_cap *pdev_cap = &pdev->cap;
342 	u32 phy_map;
343 	u32 hw_idx, phy_idx = 0;
344 
345 	if (!hw_caps || !wmi_hw_mode_caps || !hal_reg_caps)
346 		return -EINVAL;
347 
348 	for (hw_idx = 0; hw_idx < hw_caps->num_hw_modes; hw_idx++) {
349 		if (hw_mode_id == wmi_hw_mode_caps[hw_idx].hw_mode_id)
350 			break;
351 
352 		phy_map = wmi_hw_mode_caps[hw_idx].phy_id_map;
353 		while (phy_map) {
354 			phy_map >>= 1;
355 			phy_idx++;
356 		}
357 	}
358 
359 	if (hw_idx == hw_caps->num_hw_modes)
360 		return -EINVAL;
361 
362 	phy_idx += phy_id;
363 	if (phy_id >= hal_reg_caps->num_phy)
364 		return -EINVAL;
365 
366 	mac_phy_caps = wmi_mac_phy_caps + phy_idx;
367 
368 	pdev->pdev_id = mac_phy_caps->pdev_id;
369 	pdev_cap->supported_bands |= mac_phy_caps->supported_bands;
370 	pdev_cap->ampdu_density = mac_phy_caps->ampdu_density;
371 
372 	/* Take non-zero tx/rx chainmask. If tx/rx chainmask differs from
373 	 * band to band for a single radio, need to see how this should be
374 	 * handled.
375 	 */
376 	if (mac_phy_caps->supported_bands & WMI_HOST_WLAN_2G_CAP) {
377 		pdev_cap->tx_chain_mask = mac_phy_caps->tx_chain_mask_2g;
378 		pdev_cap->rx_chain_mask = mac_phy_caps->rx_chain_mask_2g;
379 	} else if (mac_phy_caps->supported_bands & WMI_HOST_WLAN_5G_CAP) {
380 		pdev_cap->vht_cap = mac_phy_caps->vht_cap_info_5g;
381 		pdev_cap->vht_mcs = mac_phy_caps->vht_supp_mcs_5g;
382 		pdev_cap->he_mcs = mac_phy_caps->he_supp_mcs_5g;
383 		pdev_cap->tx_chain_mask = mac_phy_caps->tx_chain_mask_5g;
384 		pdev_cap->rx_chain_mask = mac_phy_caps->rx_chain_mask_5g;
385 		pdev_cap->nss_ratio_enabled =
386 			WMI_NSS_RATIO_ENABLE_DISABLE_GET(mac_phy_caps->nss_ratio);
387 		pdev_cap->nss_ratio_info =
388 			WMI_NSS_RATIO_INFO_GET(mac_phy_caps->nss_ratio);
389 	} else {
390 		return -EINVAL;
391 	}
392 
393 	/* tx/rx chainmask reported from fw depends on the actual hw chains used,
394 	 * For example, for 4x4 capable macphys, first 4 chains can be used for first
395 	 * mac and the remaing 4 chains can be used for the second mac or vice-versa.
396 	 * In this case, tx/rx chainmask 0xf will be advertised for first mac and 0xf0
397 	 * will be advertised for second mac or vice-versa. Compute the shift value
398 	 * for tx/rx chainmask which will be used to advertise supported ht/vht rates to
399 	 * mac80211.
400 	 */
401 	pdev_cap->tx_chain_mask_shift =
402 			find_first_bit((unsigned long *)&pdev_cap->tx_chain_mask, 32);
403 	pdev_cap->rx_chain_mask_shift =
404 			find_first_bit((unsigned long *)&pdev_cap->rx_chain_mask, 32);
405 
406 	if (mac_phy_caps->supported_bands & WMI_HOST_WLAN_2G_CAP) {
407 		cap_band = &pdev_cap->band[NL80211_BAND_2GHZ];
408 		cap_band->phy_id = mac_phy_caps->phy_id;
409 		cap_band->max_bw_supported = mac_phy_caps->max_bw_supported_2g;
410 		cap_band->ht_cap_info = mac_phy_caps->ht_cap_info_2g;
411 		cap_band->he_cap_info[0] = mac_phy_caps->he_cap_info_2g;
412 		cap_band->he_cap_info[1] = mac_phy_caps->he_cap_info_2g_ext;
413 		cap_band->he_mcs = mac_phy_caps->he_supp_mcs_2g;
414 		memcpy(cap_band->he_cap_phy_info, &mac_phy_caps->he_cap_phy_info_2g,
415 		       sizeof(u32) * PSOC_HOST_MAX_PHY_SIZE);
416 		memcpy(&cap_band->he_ppet, &mac_phy_caps->he_ppet2g,
417 		       sizeof(struct ath11k_ppe_threshold));
418 	}
419 
420 	if (mac_phy_caps->supported_bands & WMI_HOST_WLAN_5G_CAP) {
421 		cap_band = &pdev_cap->band[NL80211_BAND_5GHZ];
422 		cap_band->phy_id = mac_phy_caps->phy_id;
423 		cap_band->max_bw_supported = mac_phy_caps->max_bw_supported_5g;
424 		cap_band->ht_cap_info = mac_phy_caps->ht_cap_info_5g;
425 		cap_band->he_cap_info[0] = mac_phy_caps->he_cap_info_5g;
426 		cap_band->he_cap_info[1] = mac_phy_caps->he_cap_info_5g_ext;
427 		cap_band->he_mcs = mac_phy_caps->he_supp_mcs_5g;
428 		memcpy(cap_band->he_cap_phy_info, &mac_phy_caps->he_cap_phy_info_5g,
429 		       sizeof(u32) * PSOC_HOST_MAX_PHY_SIZE);
430 		memcpy(&cap_band->he_ppet, &mac_phy_caps->he_ppet5g,
431 		       sizeof(struct ath11k_ppe_threshold));
432 
433 		cap_band = &pdev_cap->band[NL80211_BAND_6GHZ];
434 		cap_band->max_bw_supported = mac_phy_caps->max_bw_supported_5g;
435 		cap_band->ht_cap_info = mac_phy_caps->ht_cap_info_5g;
436 		cap_band->he_cap_info[0] = mac_phy_caps->he_cap_info_5g;
437 		cap_band->he_cap_info[1] = mac_phy_caps->he_cap_info_5g_ext;
438 		cap_band->he_mcs = mac_phy_caps->he_supp_mcs_5g;
439 		memcpy(cap_band->he_cap_phy_info, &mac_phy_caps->he_cap_phy_info_5g,
440 		       sizeof(u32) * PSOC_HOST_MAX_PHY_SIZE);
441 		memcpy(&cap_band->he_ppet, &mac_phy_caps->he_ppet5g,
442 		       sizeof(struct ath11k_ppe_threshold));
443 	}
444 
445 	return 0;
446 }
447 
448 static int
449 ath11k_pull_reg_cap_svc_rdy_ext(struct ath11k_pdev_wmi *wmi_handle,
450 				struct wmi_soc_hal_reg_capabilities *reg_caps,
451 				struct wmi_hal_reg_capabilities_ext *wmi_ext_reg_cap,
452 				u8 phy_idx,
453 				struct ath11k_hal_reg_capabilities_ext *param)
454 {
455 	struct wmi_hal_reg_capabilities_ext *ext_reg_cap;
456 
457 	if (!reg_caps || !wmi_ext_reg_cap)
458 		return -EINVAL;
459 
460 	if (phy_idx >= reg_caps->num_phy)
461 		return -EINVAL;
462 
463 	ext_reg_cap = &wmi_ext_reg_cap[phy_idx];
464 
465 	param->phy_id = ext_reg_cap->phy_id;
466 	param->eeprom_reg_domain = ext_reg_cap->eeprom_reg_domain;
467 	param->eeprom_reg_domain_ext =
468 			      ext_reg_cap->eeprom_reg_domain_ext;
469 	param->regcap1 = ext_reg_cap->regcap1;
470 	param->regcap2 = ext_reg_cap->regcap2;
471 	/* check if param->wireless_mode is needed */
472 	param->low_2ghz_chan = ext_reg_cap->low_2ghz_chan;
473 	param->high_2ghz_chan = ext_reg_cap->high_2ghz_chan;
474 	param->low_5ghz_chan = ext_reg_cap->low_5ghz_chan;
475 	param->high_5ghz_chan = ext_reg_cap->high_5ghz_chan;
476 
477 	return 0;
478 }
479 
480 static int ath11k_pull_service_ready_tlv(struct ath11k_base *ab,
481 					 const void *evt_buf,
482 					 struct ath11k_targ_cap *cap)
483 {
484 	const struct wmi_service_ready_event *ev = evt_buf;
485 
486 	if (!ev) {
487 		ath11k_err(ab, "%s: failed by NULL param\n",
488 			   __func__);
489 		return -EINVAL;
490 	}
491 
492 	cap->phy_capability = ev->phy_capability;
493 	cap->max_frag_entry = ev->max_frag_entry;
494 	cap->num_rf_chains = ev->num_rf_chains;
495 	cap->ht_cap_info = ev->ht_cap_info;
496 	cap->vht_cap_info = ev->vht_cap_info;
497 	cap->vht_supp_mcs = ev->vht_supp_mcs;
498 	cap->hw_min_tx_power = ev->hw_min_tx_power;
499 	cap->hw_max_tx_power = ev->hw_max_tx_power;
500 	cap->sys_cap_info = ev->sys_cap_info;
501 	cap->min_pkt_size_enable = ev->min_pkt_size_enable;
502 	cap->max_bcn_ie_size = ev->max_bcn_ie_size;
503 	cap->max_num_scan_channels = ev->max_num_scan_channels;
504 	cap->max_supported_macs = ev->max_supported_macs;
505 	cap->wmi_fw_sub_feat_caps = ev->wmi_fw_sub_feat_caps;
506 	cap->txrx_chainmask = ev->txrx_chainmask;
507 	cap->default_dbs_hw_mode_index = ev->default_dbs_hw_mode_index;
508 	cap->num_msdu_desc = ev->num_msdu_desc;
509 
510 	return 0;
511 }
512 
513 /* Save the wmi_service_bitmap into a linear bitmap. The wmi_services in
514  * wmi_service ready event are advertised in b0-b3 (LSB 4-bits) of each
515  * 4-byte word.
516  */
517 static void ath11k_wmi_service_bitmap_copy(struct ath11k_pdev_wmi *wmi,
518 					   const u32 *wmi_svc_bm)
519 {
520 	int i, j;
521 
522 	for (i = 0, j = 0; i < WMI_SERVICE_BM_SIZE && j < WMI_MAX_SERVICE; i++) {
523 		do {
524 			if (wmi_svc_bm[i] & BIT(j % WMI_SERVICE_BITS_IN_SIZE32))
525 				set_bit(j, wmi->wmi_ab->svc_map);
526 		} while (++j % WMI_SERVICE_BITS_IN_SIZE32);
527 	}
528 }
529 
530 static int ath11k_wmi_tlv_svc_rdy_parse(struct ath11k_base *ab, u16 tag, u16 len,
531 					const void *ptr, void *data)
532 {
533 	struct wmi_tlv_svc_ready_parse *svc_ready = data;
534 	struct ath11k_pdev_wmi *wmi_handle = &ab->wmi_ab.wmi[0];
535 	u16 expect_len;
536 
537 	switch (tag) {
538 	case WMI_TAG_SERVICE_READY_EVENT:
539 		if (ath11k_pull_service_ready_tlv(ab, ptr, &ab->target_caps))
540 			return -EINVAL;
541 		break;
542 
543 	case WMI_TAG_ARRAY_UINT32:
544 		if (!svc_ready->wmi_svc_bitmap_done) {
545 			expect_len = WMI_SERVICE_BM_SIZE * sizeof(u32);
546 			if (len < expect_len) {
547 				ath11k_warn(ab, "invalid len %d for the tag 0x%x\n",
548 					    len, tag);
549 				return -EINVAL;
550 			}
551 
552 			ath11k_wmi_service_bitmap_copy(wmi_handle, ptr);
553 
554 			svc_ready->wmi_svc_bitmap_done = true;
555 		}
556 		break;
557 	default:
558 		break;
559 	}
560 
561 	return 0;
562 }
563 
564 static int ath11k_service_ready_event(struct ath11k_base *ab, struct sk_buff *skb)
565 {
566 	struct wmi_tlv_svc_ready_parse svc_ready = { };
567 	int ret;
568 
569 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
570 				  ath11k_wmi_tlv_svc_rdy_parse,
571 				  &svc_ready);
572 	if (ret) {
573 		ath11k_warn(ab, "failed to parse tlv %d\n", ret);
574 		return ret;
575 	}
576 
577 	return 0;
578 }
579 
580 struct sk_buff *ath11k_wmi_alloc_skb(struct ath11k_wmi_base *wmi_sc, u32 len)
581 {
582 	struct sk_buff *skb;
583 	struct ath11k_base *ab = wmi_sc->ab;
584 	u32 round_len = roundup(len, 4);
585 
586 	skb = ath11k_htc_alloc_skb(ab, WMI_SKB_HEADROOM + round_len);
587 	if (!skb)
588 		return NULL;
589 
590 	skb_reserve(skb, WMI_SKB_HEADROOM);
591 	if (!IS_ALIGNED((unsigned long)skb->data, 4))
592 		ath11k_warn(ab, "unaligned WMI skb data\n");
593 
594 	skb_put(skb, round_len);
595 	memset(skb->data, 0, round_len);
596 
597 	return skb;
598 }
599 
600 int ath11k_wmi_mgmt_send(struct ath11k *ar, u32 vdev_id, u32 buf_id,
601 			 struct sk_buff *frame)
602 {
603 	struct ath11k_pdev_wmi *wmi = ar->wmi;
604 	struct wmi_mgmt_send_cmd *cmd;
605 	struct wmi_tlv *frame_tlv;
606 	struct sk_buff *skb;
607 	u32 buf_len;
608 	int ret, len;
609 
610 	buf_len = frame->len < WMI_MGMT_SEND_DOWNLD_LEN ?
611 		  frame->len : WMI_MGMT_SEND_DOWNLD_LEN;
612 
613 	len = sizeof(*cmd) + sizeof(*frame_tlv) + roundup(buf_len, 4);
614 
615 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
616 	if (!skb)
617 		return -ENOMEM;
618 
619 	cmd = (struct wmi_mgmt_send_cmd *)skb->data;
620 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_MGMT_TX_SEND_CMD) |
621 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
622 	cmd->vdev_id = vdev_id;
623 	cmd->desc_id = buf_id;
624 	cmd->chanfreq = 0;
625 	cmd->paddr_lo = lower_32_bits(ATH11K_SKB_CB(frame)->paddr);
626 	cmd->paddr_hi = upper_32_bits(ATH11K_SKB_CB(frame)->paddr);
627 	cmd->frame_len = frame->len;
628 	cmd->buf_len = buf_len;
629 	cmd->tx_params_valid = 0;
630 
631 	frame_tlv = (struct wmi_tlv *)(skb->data + sizeof(*cmd));
632 	frame_tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
633 			    FIELD_PREP(WMI_TLV_LEN, buf_len);
634 
635 	memcpy(frame_tlv->value, frame->data, buf_len);
636 
637 	ath11k_ce_byte_swap(frame_tlv->value, buf_len);
638 
639 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_MGMT_TX_SEND_CMDID);
640 	if (ret) {
641 		ath11k_warn(ar->ab,
642 			    "failed to submit WMI_MGMT_TX_SEND_CMDID cmd\n");
643 		dev_kfree_skb(skb);
644 	}
645 
646 	return ret;
647 }
648 
649 int ath11k_wmi_vdev_create(struct ath11k *ar, u8 *macaddr,
650 			   struct vdev_create_params *param)
651 {
652 	struct ath11k_pdev_wmi *wmi = ar->wmi;
653 	struct wmi_vdev_create_cmd *cmd;
654 	struct sk_buff *skb;
655 	struct wmi_vdev_txrx_streams *txrx_streams;
656 	struct wmi_tlv *tlv;
657 	int ret, len;
658 	void *ptr;
659 
660 	/* It can be optimized my sending tx/rx chain configuration
661 	 * only for supported bands instead of always sending it for
662 	 * both the bands.
663 	 */
664 	len = sizeof(*cmd) + TLV_HDR_SIZE +
665 		(WMI_NUM_SUPPORTED_BAND_MAX * sizeof(*txrx_streams));
666 
667 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
668 	if (!skb)
669 		return -ENOMEM;
670 
671 	cmd = (struct wmi_vdev_create_cmd *)skb->data;
672 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_CREATE_CMD) |
673 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
674 
675 	cmd->vdev_id = param->if_id;
676 	cmd->vdev_type = param->type;
677 	cmd->vdev_subtype = param->subtype;
678 	cmd->num_cfg_txrx_streams = WMI_NUM_SUPPORTED_BAND_MAX;
679 	cmd->pdev_id = param->pdev_id;
680 	ether_addr_copy(cmd->vdev_macaddr.addr, macaddr);
681 
682 	ptr = skb->data + sizeof(*cmd);
683 	len = WMI_NUM_SUPPORTED_BAND_MAX * sizeof(*txrx_streams);
684 
685 	tlv = ptr;
686 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
687 		      FIELD_PREP(WMI_TLV_LEN, len);
688 
689 	ptr += TLV_HDR_SIZE;
690 	txrx_streams = ptr;
691 	len = sizeof(*txrx_streams);
692 	txrx_streams->tlv_header =
693 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_TXRX_STREAMS) |
694 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
695 	txrx_streams->band = WMI_TPC_CHAINMASK_CONFIG_BAND_2G;
696 	txrx_streams->supported_tx_streams =
697 				 param->chains[NL80211_BAND_2GHZ].tx;
698 	txrx_streams->supported_rx_streams =
699 				 param->chains[NL80211_BAND_2GHZ].rx;
700 
701 	txrx_streams++;
702 	txrx_streams->tlv_header =
703 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_TXRX_STREAMS) |
704 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
705 	txrx_streams->band = WMI_TPC_CHAINMASK_CONFIG_BAND_5G;
706 	txrx_streams->supported_tx_streams =
707 				 param->chains[NL80211_BAND_5GHZ].tx;
708 	txrx_streams->supported_rx_streams =
709 				 param->chains[NL80211_BAND_5GHZ].rx;
710 
711 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_CREATE_CMDID);
712 	if (ret) {
713 		ath11k_warn(ar->ab,
714 			    "failed to submit WMI_VDEV_CREATE_CMDID\n");
715 		dev_kfree_skb(skb);
716 	}
717 
718 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
719 		   "WMI vdev create: id %d type %d subtype %d macaddr %pM pdevid %d\n",
720 		   param->if_id, param->type, param->subtype,
721 		   macaddr, param->pdev_id);
722 
723 	return ret;
724 }
725 
726 int ath11k_wmi_vdev_delete(struct ath11k *ar, u8 vdev_id)
727 {
728 	struct ath11k_pdev_wmi *wmi = ar->wmi;
729 	struct wmi_vdev_delete_cmd *cmd;
730 	struct sk_buff *skb;
731 	int ret;
732 
733 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
734 	if (!skb)
735 		return -ENOMEM;
736 
737 	cmd = (struct wmi_vdev_delete_cmd *)skb->data;
738 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_DELETE_CMD) |
739 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
740 	cmd->vdev_id = vdev_id;
741 
742 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_DELETE_CMDID);
743 	if (ret) {
744 		ath11k_warn(ar->ab, "failed to submit WMI_VDEV_DELETE_CMDID\n");
745 		dev_kfree_skb(skb);
746 	}
747 
748 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "WMI vdev delete id %d\n", vdev_id);
749 
750 	return ret;
751 }
752 
753 int ath11k_wmi_vdev_stop(struct ath11k *ar, u8 vdev_id)
754 {
755 	struct ath11k_pdev_wmi *wmi = ar->wmi;
756 	struct wmi_vdev_stop_cmd *cmd;
757 	struct sk_buff *skb;
758 	int ret;
759 
760 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
761 	if (!skb)
762 		return -ENOMEM;
763 
764 	cmd = (struct wmi_vdev_stop_cmd *)skb->data;
765 
766 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_STOP_CMD) |
767 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
768 	cmd->vdev_id = vdev_id;
769 
770 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_STOP_CMDID);
771 	if (ret) {
772 		ath11k_warn(ar->ab, "failed to submit WMI_VDEV_STOP cmd\n");
773 		dev_kfree_skb(skb);
774 	}
775 
776 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "WMI vdev stop id 0x%x\n", vdev_id);
777 
778 	return ret;
779 }
780 
781 int ath11k_wmi_vdev_down(struct ath11k *ar, u8 vdev_id)
782 {
783 	struct ath11k_pdev_wmi *wmi = ar->wmi;
784 	struct wmi_vdev_down_cmd *cmd;
785 	struct sk_buff *skb;
786 	int ret;
787 
788 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
789 	if (!skb)
790 		return -ENOMEM;
791 
792 	cmd = (struct wmi_vdev_down_cmd *)skb->data;
793 
794 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_DOWN_CMD) |
795 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
796 	cmd->vdev_id = vdev_id;
797 
798 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_DOWN_CMDID);
799 	if (ret) {
800 		ath11k_warn(ar->ab, "failed to submit WMI_VDEV_DOWN cmd\n");
801 		dev_kfree_skb(skb);
802 	}
803 
804 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "WMI vdev down id 0x%x\n", vdev_id);
805 
806 	return ret;
807 }
808 
809 static void ath11k_wmi_put_wmi_channel(struct wmi_channel *chan,
810 				       struct wmi_vdev_start_req_arg *arg)
811 {
812 	u32 center_freq1 = arg->channel.band_center_freq1;
813 
814 	memset(chan, 0, sizeof(*chan));
815 
816 	chan->mhz = arg->channel.freq;
817 	chan->band_center_freq1 = arg->channel.band_center_freq1;
818 
819 	if (arg->channel.mode == MODE_11AX_HE160) {
820 		if (arg->channel.freq > arg->channel.band_center_freq1)
821 			chan->band_center_freq1 = center_freq1 + 40;
822 		else
823 			chan->band_center_freq1 = center_freq1 - 40;
824 
825 		chan->band_center_freq2 = arg->channel.band_center_freq1;
826 
827 	} else if (arg->channel.mode == MODE_11AC_VHT80_80) {
828 		chan->band_center_freq2 = arg->channel.band_center_freq2;
829 	} else {
830 		chan->band_center_freq2 = 0;
831 	}
832 
833 	chan->info |= FIELD_PREP(WMI_CHAN_INFO_MODE, arg->channel.mode);
834 	if (arg->channel.passive)
835 		chan->info |= WMI_CHAN_INFO_PASSIVE;
836 	if (arg->channel.allow_ibss)
837 		chan->info |= WMI_CHAN_INFO_ADHOC_ALLOWED;
838 	if (arg->channel.allow_ht)
839 		chan->info |= WMI_CHAN_INFO_ALLOW_HT;
840 	if (arg->channel.allow_vht)
841 		chan->info |= WMI_CHAN_INFO_ALLOW_VHT;
842 	if (arg->channel.allow_he)
843 		chan->info |= WMI_CHAN_INFO_ALLOW_HE;
844 	if (arg->channel.ht40plus)
845 		chan->info |= WMI_CHAN_INFO_HT40_PLUS;
846 	if (arg->channel.chan_radar)
847 		chan->info |= WMI_CHAN_INFO_DFS;
848 	if (arg->channel.freq2_radar)
849 		chan->info |= WMI_CHAN_INFO_DFS_FREQ2;
850 
851 	chan->reg_info_1 = FIELD_PREP(WMI_CHAN_REG_INFO1_MAX_PWR,
852 				      arg->channel.max_power) |
853 		FIELD_PREP(WMI_CHAN_REG_INFO1_MAX_REG_PWR,
854 			   arg->channel.max_reg_power);
855 
856 	chan->reg_info_2 = FIELD_PREP(WMI_CHAN_REG_INFO2_ANT_MAX,
857 				      arg->channel.max_antenna_gain) |
858 		FIELD_PREP(WMI_CHAN_REG_INFO2_MAX_TX_PWR,
859 			   arg->channel.max_power);
860 }
861 
862 int ath11k_wmi_vdev_start(struct ath11k *ar, struct wmi_vdev_start_req_arg *arg,
863 			  bool restart)
864 {
865 	struct ath11k_pdev_wmi *wmi = ar->wmi;
866 	struct wmi_vdev_start_request_cmd *cmd;
867 	struct sk_buff *skb;
868 	struct wmi_channel *chan;
869 	struct wmi_tlv *tlv;
870 	void *ptr;
871 	int ret, len;
872 
873 	if (WARN_ON(arg->ssid_len > sizeof(cmd->ssid.ssid)))
874 		return -EINVAL;
875 
876 	len = sizeof(*cmd) + sizeof(*chan) + TLV_HDR_SIZE;
877 
878 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
879 	if (!skb)
880 		return -ENOMEM;
881 
882 	cmd = (struct wmi_vdev_start_request_cmd *)skb->data;
883 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
884 				     WMI_TAG_VDEV_START_REQUEST_CMD) |
885 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
886 	cmd->vdev_id = arg->vdev_id;
887 	cmd->beacon_interval = arg->bcn_intval;
888 	cmd->bcn_tx_rate = arg->bcn_tx_rate;
889 	cmd->dtim_period = arg->dtim_period;
890 	cmd->num_noa_descriptors = arg->num_noa_descriptors;
891 	cmd->preferred_rx_streams = arg->pref_rx_streams;
892 	cmd->preferred_tx_streams = arg->pref_tx_streams;
893 	cmd->cac_duration_ms = arg->cac_duration_ms;
894 	cmd->regdomain = arg->regdomain;
895 	cmd->he_ops = arg->he_ops;
896 
897 	if (!restart) {
898 		if (arg->ssid) {
899 			cmd->ssid.ssid_len = arg->ssid_len;
900 			memcpy(cmd->ssid.ssid, arg->ssid, arg->ssid_len);
901 		}
902 		if (arg->hidden_ssid)
903 			cmd->flags |= WMI_VDEV_START_HIDDEN_SSID;
904 		if (arg->pmf_enabled)
905 			cmd->flags |= WMI_VDEV_START_PMF_ENABLED;
906 	}
907 
908 	cmd->flags |= WMI_VDEV_START_LDPC_RX_ENABLED;
909 	if (test_bit(ATH11K_FLAG_HW_CRYPTO_DISABLED, &ar->ab->dev_flags))
910 		cmd->flags |= WMI_VDEV_START_HW_ENCRYPTION_DISABLED;
911 
912 	ptr = skb->data + sizeof(*cmd);
913 	chan = ptr;
914 
915 	ath11k_wmi_put_wmi_channel(chan, arg);
916 
917 	chan->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_CHANNEL) |
918 			   FIELD_PREP(WMI_TLV_LEN,
919 				      sizeof(*chan) - TLV_HDR_SIZE);
920 	ptr += sizeof(*chan);
921 
922 	tlv = ptr;
923 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
924 		      FIELD_PREP(WMI_TLV_LEN, 0);
925 
926 	/* Note: This is a nested TLV containing:
927 	 * [wmi_tlv][wmi_p2p_noa_descriptor][wmi_tlv]..
928 	 */
929 
930 	ptr += sizeof(*tlv);
931 
932 	if (restart)
933 		ret = ath11k_wmi_cmd_send(wmi, skb,
934 					  WMI_VDEV_RESTART_REQUEST_CMDID);
935 	else
936 		ret = ath11k_wmi_cmd_send(wmi, skb,
937 					  WMI_VDEV_START_REQUEST_CMDID);
938 	if (ret) {
939 		ath11k_warn(ar->ab, "failed to submit vdev_%s cmd\n",
940 			    restart ? "restart" : "start");
941 		dev_kfree_skb(skb);
942 	}
943 
944 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "vdev %s id 0x%x freq 0x%x mode 0x%x\n",
945 		   restart ? "restart" : "start", arg->vdev_id,
946 		   arg->channel.freq, arg->channel.mode);
947 
948 	return ret;
949 }
950 
951 int ath11k_wmi_vdev_up(struct ath11k *ar, u32 vdev_id, u32 aid, const u8 *bssid)
952 {
953 	struct ath11k_pdev_wmi *wmi = ar->wmi;
954 	struct wmi_vdev_up_cmd *cmd;
955 	struct sk_buff *skb;
956 	int ret;
957 
958 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
959 	if (!skb)
960 		return -ENOMEM;
961 
962 	cmd = (struct wmi_vdev_up_cmd *)skb->data;
963 
964 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_UP_CMD) |
965 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
966 	cmd->vdev_id = vdev_id;
967 	cmd->vdev_assoc_id = aid;
968 
969 	ether_addr_copy(cmd->vdev_bssid.addr, bssid);
970 
971 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_UP_CMDID);
972 	if (ret) {
973 		ath11k_warn(ar->ab, "failed to submit WMI_VDEV_UP cmd\n");
974 		dev_kfree_skb(skb);
975 	}
976 
977 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
978 		   "WMI mgmt vdev up id 0x%x assoc id %d bssid %pM\n",
979 		   vdev_id, aid, bssid);
980 
981 	return ret;
982 }
983 
984 int ath11k_wmi_send_peer_create_cmd(struct ath11k *ar,
985 				    struct peer_create_params *param)
986 {
987 	struct ath11k_pdev_wmi *wmi = ar->wmi;
988 	struct wmi_peer_create_cmd *cmd;
989 	struct sk_buff *skb;
990 	int ret;
991 
992 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
993 	if (!skb)
994 		return -ENOMEM;
995 
996 	cmd = (struct wmi_peer_create_cmd *)skb->data;
997 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PEER_CREATE_CMD) |
998 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
999 
1000 	ether_addr_copy(cmd->peer_macaddr.addr, param->peer_addr);
1001 	cmd->peer_type = param->peer_type;
1002 	cmd->vdev_id = param->vdev_id;
1003 
1004 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_CREATE_CMDID);
1005 	if (ret) {
1006 		ath11k_warn(ar->ab, "failed to submit WMI_PEER_CREATE cmd\n");
1007 		dev_kfree_skb(skb);
1008 	}
1009 
1010 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1011 		   "WMI peer create vdev_id %d peer_addr %pM\n",
1012 		   param->vdev_id, param->peer_addr);
1013 
1014 	return ret;
1015 }
1016 
1017 int ath11k_wmi_send_peer_delete_cmd(struct ath11k *ar,
1018 				    const u8 *peer_addr, u8 vdev_id)
1019 {
1020 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1021 	struct wmi_peer_delete_cmd *cmd;
1022 	struct sk_buff *skb;
1023 	int ret;
1024 
1025 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1026 	if (!skb)
1027 		return -ENOMEM;
1028 
1029 	cmd = (struct wmi_peer_delete_cmd *)skb->data;
1030 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PEER_DELETE_CMD) |
1031 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1032 
1033 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1034 	cmd->vdev_id = vdev_id;
1035 
1036 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1037 		   "WMI peer delete vdev_id %d peer_addr %pM\n",
1038 		   vdev_id,  peer_addr);
1039 
1040 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_DELETE_CMDID);
1041 	if (ret) {
1042 		ath11k_warn(ar->ab, "failed to send WMI_PEER_DELETE cmd\n");
1043 		dev_kfree_skb(skb);
1044 	}
1045 
1046 	return ret;
1047 }
1048 
1049 int ath11k_wmi_send_pdev_set_regdomain(struct ath11k *ar,
1050 				       struct pdev_set_regdomain_params *param)
1051 {
1052 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1053 	struct wmi_pdev_set_regdomain_cmd *cmd;
1054 	struct sk_buff *skb;
1055 	int ret;
1056 
1057 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1058 	if (!skb)
1059 		return -ENOMEM;
1060 
1061 	cmd = (struct wmi_pdev_set_regdomain_cmd *)skb->data;
1062 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1063 				     WMI_TAG_PDEV_SET_REGDOMAIN_CMD) |
1064 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1065 
1066 	cmd->reg_domain = param->current_rd_in_use;
1067 	cmd->reg_domain_2g = param->current_rd_2g;
1068 	cmd->reg_domain_5g = param->current_rd_5g;
1069 	cmd->conformance_test_limit_2g = param->ctl_2g;
1070 	cmd->conformance_test_limit_5g = param->ctl_5g;
1071 	cmd->dfs_domain = param->dfs_domain;
1072 	cmd->pdev_id = param->pdev_id;
1073 
1074 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1075 		   "WMI pdev regd rd %d rd2g %d rd5g %d domain %d pdev id %d\n",
1076 		   param->current_rd_in_use, param->current_rd_2g,
1077 		   param->current_rd_5g, param->dfs_domain, param->pdev_id);
1078 
1079 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_REGDOMAIN_CMDID);
1080 	if (ret) {
1081 		ath11k_warn(ar->ab,
1082 			    "failed to send WMI_PDEV_SET_REGDOMAIN cmd\n");
1083 		dev_kfree_skb(skb);
1084 	}
1085 
1086 	return ret;
1087 }
1088 
1089 int ath11k_wmi_set_peer_param(struct ath11k *ar, const u8 *peer_addr,
1090 			      u32 vdev_id, u32 param_id, u32 param_val)
1091 {
1092 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1093 	struct wmi_peer_set_param_cmd *cmd;
1094 	struct sk_buff *skb;
1095 	int ret;
1096 
1097 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1098 	if (!skb)
1099 		return -ENOMEM;
1100 
1101 	cmd = (struct wmi_peer_set_param_cmd *)skb->data;
1102 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PEER_SET_PARAM_CMD) |
1103 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1104 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1105 	cmd->vdev_id = vdev_id;
1106 	cmd->param_id = param_id;
1107 	cmd->param_value = param_val;
1108 
1109 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_SET_PARAM_CMDID);
1110 	if (ret) {
1111 		ath11k_warn(ar->ab, "failed to send WMI_PEER_SET_PARAM cmd\n");
1112 		dev_kfree_skb(skb);
1113 	}
1114 
1115 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1116 		   "WMI vdev %d peer 0x%pM set param %d value %d\n",
1117 		   vdev_id, peer_addr, param_id, param_val);
1118 
1119 	return ret;
1120 }
1121 
1122 int ath11k_wmi_send_peer_flush_tids_cmd(struct ath11k *ar,
1123 					u8 peer_addr[ETH_ALEN],
1124 					struct peer_flush_params *param)
1125 {
1126 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1127 	struct wmi_peer_flush_tids_cmd *cmd;
1128 	struct sk_buff *skb;
1129 	int ret;
1130 
1131 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1132 	if (!skb)
1133 		return -ENOMEM;
1134 
1135 	cmd = (struct wmi_peer_flush_tids_cmd *)skb->data;
1136 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PEER_FLUSH_TIDS_CMD) |
1137 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1138 
1139 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1140 	cmd->peer_tid_bitmap = param->peer_tid_bitmap;
1141 	cmd->vdev_id = param->vdev_id;
1142 
1143 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_FLUSH_TIDS_CMDID);
1144 	if (ret) {
1145 		ath11k_warn(ar->ab,
1146 			    "failed to send WMI_PEER_FLUSH_TIDS cmd\n");
1147 		dev_kfree_skb(skb);
1148 	}
1149 
1150 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1151 		   "WMI peer flush vdev_id %d peer_addr %pM tids %08x\n",
1152 		   param->vdev_id, peer_addr, param->peer_tid_bitmap);
1153 
1154 	return ret;
1155 }
1156 
1157 int ath11k_wmi_peer_rx_reorder_queue_setup(struct ath11k *ar,
1158 					   int vdev_id, const u8 *addr,
1159 					   dma_addr_t paddr, u8 tid,
1160 					   u8 ba_window_size_valid,
1161 					   u32 ba_window_size)
1162 {
1163 	struct wmi_peer_reorder_queue_setup_cmd *cmd;
1164 	struct sk_buff *skb;
1165 	int ret;
1166 
1167 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
1168 	if (!skb)
1169 		return -ENOMEM;
1170 
1171 	cmd = (struct wmi_peer_reorder_queue_setup_cmd *)skb->data;
1172 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1173 				     WMI_TAG_REORDER_QUEUE_SETUP_CMD) |
1174 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1175 
1176 	ether_addr_copy(cmd->peer_macaddr.addr, addr);
1177 	cmd->vdev_id = vdev_id;
1178 	cmd->tid = tid;
1179 	cmd->queue_ptr_lo = lower_32_bits(paddr);
1180 	cmd->queue_ptr_hi = upper_32_bits(paddr);
1181 	cmd->queue_no = tid;
1182 	cmd->ba_window_size_valid = ba_window_size_valid;
1183 	cmd->ba_window_size = ba_window_size;
1184 
1185 	ret = ath11k_wmi_cmd_send(ar->wmi, skb,
1186 				  WMI_PEER_REORDER_QUEUE_SETUP_CMDID);
1187 	if (ret) {
1188 		ath11k_warn(ar->ab,
1189 			    "failed to send WMI_PEER_REORDER_QUEUE_SETUP\n");
1190 		dev_kfree_skb(skb);
1191 	}
1192 
1193 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1194 		   "wmi rx reorder queue setup addr %pM vdev_id %d tid %d\n",
1195 		   addr, vdev_id, tid);
1196 
1197 	return ret;
1198 }
1199 
1200 int
1201 ath11k_wmi_rx_reord_queue_remove(struct ath11k *ar,
1202 				 struct rx_reorder_queue_remove_params *param)
1203 {
1204 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1205 	struct wmi_peer_reorder_queue_remove_cmd *cmd;
1206 	struct sk_buff *skb;
1207 	int ret;
1208 
1209 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1210 	if (!skb)
1211 		return -ENOMEM;
1212 
1213 	cmd = (struct wmi_peer_reorder_queue_remove_cmd *)skb->data;
1214 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1215 				     WMI_TAG_REORDER_QUEUE_REMOVE_CMD) |
1216 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1217 
1218 	ether_addr_copy(cmd->peer_macaddr.addr, param->peer_macaddr);
1219 	cmd->vdev_id = param->vdev_id;
1220 	cmd->tid_mask = param->peer_tid_bitmap;
1221 
1222 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1223 		   "%s: peer_macaddr %pM vdev_id %d, tid_map %d", __func__,
1224 		   param->peer_macaddr, param->vdev_id, param->peer_tid_bitmap);
1225 
1226 	ret = ath11k_wmi_cmd_send(wmi, skb,
1227 				  WMI_PEER_REORDER_QUEUE_REMOVE_CMDID);
1228 	if (ret) {
1229 		ath11k_warn(ar->ab,
1230 			    "failed to send WMI_PEER_REORDER_QUEUE_REMOVE_CMDID");
1231 		dev_kfree_skb(skb);
1232 	}
1233 
1234 	return ret;
1235 }
1236 
1237 int ath11k_wmi_pdev_set_param(struct ath11k *ar, u32 param_id,
1238 			      u32 param_value, u8 pdev_id)
1239 {
1240 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1241 	struct wmi_pdev_set_param_cmd *cmd;
1242 	struct sk_buff *skb;
1243 	int ret;
1244 
1245 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1246 	if (!skb)
1247 		return -ENOMEM;
1248 
1249 	cmd = (struct wmi_pdev_set_param_cmd *)skb->data;
1250 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_SET_PARAM_CMD) |
1251 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1252 	cmd->pdev_id = pdev_id;
1253 	cmd->param_id = param_id;
1254 	cmd->param_value = param_value;
1255 
1256 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_PARAM_CMDID);
1257 	if (ret) {
1258 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_SET_PARAM cmd\n");
1259 		dev_kfree_skb(skb);
1260 	}
1261 
1262 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1263 		   "WMI pdev set param %d pdev id %d value %d\n",
1264 		   param_id, pdev_id, param_value);
1265 
1266 	return ret;
1267 }
1268 
1269 int ath11k_wmi_pdev_set_ps_mode(struct ath11k *ar, int vdev_id,
1270 				enum wmi_sta_ps_mode psmode)
1271 {
1272 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1273 	struct wmi_pdev_set_ps_mode_cmd *cmd;
1274 	struct sk_buff *skb;
1275 	int ret;
1276 
1277 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1278 	if (!skb)
1279 		return -ENOMEM;
1280 
1281 	cmd = (struct wmi_pdev_set_ps_mode_cmd *)skb->data;
1282 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_STA_POWERSAVE_MODE_CMD) |
1283 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1284 	cmd->vdev_id = vdev_id;
1285 	cmd->sta_ps_mode = psmode;
1286 
1287 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_STA_POWERSAVE_MODE_CMDID);
1288 	if (ret) {
1289 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_SET_PARAM cmd\n");
1290 		dev_kfree_skb(skb);
1291 	}
1292 
1293 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1294 		   "WMI vdev set psmode %d vdev id %d\n",
1295 		   psmode, vdev_id);
1296 
1297 	return ret;
1298 }
1299 
1300 int ath11k_wmi_pdev_suspend(struct ath11k *ar, u32 suspend_opt,
1301 			    u32 pdev_id)
1302 {
1303 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1304 	struct wmi_pdev_suspend_cmd *cmd;
1305 	struct sk_buff *skb;
1306 	int ret;
1307 
1308 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1309 	if (!skb)
1310 		return -ENOMEM;
1311 
1312 	cmd = (struct wmi_pdev_suspend_cmd *)skb->data;
1313 
1314 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_SUSPEND_CMD) |
1315 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1316 
1317 	cmd->suspend_opt = suspend_opt;
1318 	cmd->pdev_id = pdev_id;
1319 
1320 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_SUSPEND_CMDID);
1321 	if (ret) {
1322 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_SUSPEND cmd\n");
1323 		dev_kfree_skb(skb);
1324 	}
1325 
1326 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1327 		   "WMI pdev suspend pdev_id %d\n", pdev_id);
1328 
1329 	return ret;
1330 }
1331 
1332 int ath11k_wmi_pdev_resume(struct ath11k *ar, u32 pdev_id)
1333 {
1334 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1335 	struct wmi_pdev_resume_cmd *cmd;
1336 	struct sk_buff *skb;
1337 	int ret;
1338 
1339 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1340 	if (!skb)
1341 		return -ENOMEM;
1342 
1343 	cmd = (struct wmi_pdev_resume_cmd *)skb->data;
1344 
1345 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_RESUME_CMD) |
1346 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1347 	cmd->pdev_id = pdev_id;
1348 
1349 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1350 		   "WMI pdev resume pdev id %d\n", pdev_id);
1351 
1352 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_RESUME_CMDID);
1353 	if (ret) {
1354 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_RESUME cmd\n");
1355 		dev_kfree_skb(skb);
1356 	}
1357 
1358 	return ret;
1359 }
1360 
1361 /* TODO FW Support for the cmd is not available yet.
1362  * Can be tested once the command and corresponding
1363  * event is implemented in FW
1364  */
1365 int ath11k_wmi_pdev_bss_chan_info_request(struct ath11k *ar,
1366 					  enum wmi_bss_chan_info_req_type type)
1367 {
1368 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1369 	struct wmi_pdev_bss_chan_info_req_cmd *cmd;
1370 	struct sk_buff *skb;
1371 	int ret;
1372 
1373 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1374 	if (!skb)
1375 		return -ENOMEM;
1376 
1377 	cmd = (struct wmi_pdev_bss_chan_info_req_cmd *)skb->data;
1378 
1379 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1380 				     WMI_TAG_PDEV_BSS_CHAN_INFO_REQUEST) |
1381 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1382 	cmd->req_type = type;
1383 	cmd->pdev_id = ar->pdev->pdev_id;
1384 
1385 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1386 		   "WMI bss chan info req type %d\n", type);
1387 
1388 	ret = ath11k_wmi_cmd_send(wmi, skb,
1389 				  WMI_PDEV_BSS_CHAN_INFO_REQUEST_CMDID);
1390 	if (ret) {
1391 		ath11k_warn(ar->ab,
1392 			    "failed to send WMI_PDEV_BSS_CHAN_INFO_REQUEST cmd\n");
1393 		dev_kfree_skb(skb);
1394 	}
1395 
1396 	return ret;
1397 }
1398 
1399 int ath11k_wmi_send_set_ap_ps_param_cmd(struct ath11k *ar, u8 *peer_addr,
1400 					struct ap_ps_params *param)
1401 {
1402 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1403 	struct wmi_ap_ps_peer_cmd *cmd;
1404 	struct sk_buff *skb;
1405 	int ret;
1406 
1407 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1408 	if (!skb)
1409 		return -ENOMEM;
1410 
1411 	cmd = (struct wmi_ap_ps_peer_cmd *)skb->data;
1412 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_AP_PS_PEER_CMD) |
1413 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1414 
1415 	cmd->vdev_id = param->vdev_id;
1416 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1417 	cmd->param = param->param;
1418 	cmd->value = param->value;
1419 
1420 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_AP_PS_PEER_PARAM_CMDID);
1421 	if (ret) {
1422 		ath11k_warn(ar->ab,
1423 			    "failed to send WMI_AP_PS_PEER_PARAM_CMDID\n");
1424 		dev_kfree_skb(skb);
1425 	}
1426 
1427 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1428 		   "WMI set ap ps vdev id %d peer %pM param %d value %d\n",
1429 		   param->vdev_id, peer_addr, param->param, param->value);
1430 
1431 	return ret;
1432 }
1433 
1434 int ath11k_wmi_set_sta_ps_param(struct ath11k *ar, u32 vdev_id,
1435 				u32 param, u32 param_value)
1436 {
1437 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1438 	struct wmi_sta_powersave_param_cmd *cmd;
1439 	struct sk_buff *skb;
1440 	int ret;
1441 
1442 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1443 	if (!skb)
1444 		return -ENOMEM;
1445 
1446 	cmd = (struct wmi_sta_powersave_param_cmd *)skb->data;
1447 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1448 				     WMI_TAG_STA_POWERSAVE_PARAM_CMD) |
1449 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1450 
1451 	cmd->vdev_id = vdev_id;
1452 	cmd->param = param;
1453 	cmd->value = param_value;
1454 
1455 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1456 		   "WMI set sta ps vdev_id %d param %d value %d\n",
1457 		   vdev_id, param, param_value);
1458 
1459 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_STA_POWERSAVE_PARAM_CMDID);
1460 	if (ret) {
1461 		ath11k_warn(ar->ab, "failed to send WMI_STA_POWERSAVE_PARAM_CMDID");
1462 		dev_kfree_skb(skb);
1463 	}
1464 
1465 	return ret;
1466 }
1467 
1468 int ath11k_wmi_force_fw_hang_cmd(struct ath11k *ar, u32 type, u32 delay_time_ms)
1469 {
1470 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1471 	struct wmi_force_fw_hang_cmd *cmd;
1472 	struct sk_buff *skb;
1473 	int ret, len;
1474 
1475 	len = sizeof(*cmd);
1476 
1477 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
1478 	if (!skb)
1479 		return -ENOMEM;
1480 
1481 	cmd = (struct wmi_force_fw_hang_cmd *)skb->data;
1482 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_FORCE_FW_HANG_CMD) |
1483 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
1484 
1485 	cmd->type = type;
1486 	cmd->delay_time_ms = delay_time_ms;
1487 
1488 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_FORCE_FW_HANG_CMDID);
1489 
1490 	if (ret) {
1491 		ath11k_warn(ar->ab, "Failed to send WMI_FORCE_FW_HANG_CMDID");
1492 		dev_kfree_skb(skb);
1493 	}
1494 	return ret;
1495 }
1496 
1497 int ath11k_wmi_vdev_set_param_cmd(struct ath11k *ar, u32 vdev_id,
1498 				  u32 param_id, u32 param_value)
1499 {
1500 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1501 	struct wmi_vdev_set_param_cmd *cmd;
1502 	struct sk_buff *skb;
1503 	int ret;
1504 
1505 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1506 	if (!skb)
1507 		return -ENOMEM;
1508 
1509 	cmd = (struct wmi_vdev_set_param_cmd *)skb->data;
1510 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_SET_PARAM_CMD) |
1511 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1512 
1513 	cmd->vdev_id = vdev_id;
1514 	cmd->param_id = param_id;
1515 	cmd->param_value = param_value;
1516 
1517 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_SET_PARAM_CMDID);
1518 	if (ret) {
1519 		ath11k_warn(ar->ab,
1520 			    "failed to send WMI_VDEV_SET_PARAM_CMDID\n");
1521 		dev_kfree_skb(skb);
1522 	}
1523 
1524 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1525 		   "WMI vdev id 0x%x set param %d value %d\n",
1526 		   vdev_id, param_id, param_value);
1527 
1528 	return ret;
1529 }
1530 
1531 int ath11k_wmi_send_stats_request_cmd(struct ath11k *ar,
1532 				      struct stats_request_params *param)
1533 {
1534 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1535 	struct wmi_request_stats_cmd *cmd;
1536 	struct sk_buff *skb;
1537 	int ret;
1538 
1539 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1540 	if (!skb)
1541 		return -ENOMEM;
1542 
1543 	cmd = (struct wmi_request_stats_cmd *)skb->data;
1544 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_REQUEST_STATS_CMD) |
1545 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1546 
1547 	cmd->stats_id = param->stats_id;
1548 	cmd->vdev_id = param->vdev_id;
1549 	cmd->pdev_id = param->pdev_id;
1550 
1551 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_REQUEST_STATS_CMDID);
1552 	if (ret) {
1553 		ath11k_warn(ar->ab, "failed to send WMI_REQUEST_STATS cmd\n");
1554 		dev_kfree_skb(skb);
1555 	}
1556 
1557 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1558 		   "WMI request stats 0x%x vdev id %d pdev id %d\n",
1559 		   param->stats_id, param->vdev_id, param->pdev_id);
1560 
1561 	return ret;
1562 }
1563 
1564 int ath11k_wmi_send_pdev_temperature_cmd(struct ath11k *ar)
1565 {
1566 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1567 	struct wmi_get_pdev_temperature_cmd *cmd;
1568 	struct sk_buff *skb;
1569 	int ret;
1570 
1571 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1572 	if (!skb)
1573 		return -ENOMEM;
1574 
1575 	cmd = (struct wmi_get_pdev_temperature_cmd *)skb->data;
1576 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_GET_TEMPERATURE_CMD) |
1577 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1578 	cmd->pdev_id = ar->pdev->pdev_id;
1579 
1580 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PDEV_GET_TEMPERATURE_CMDID);
1581 	if (ret) {
1582 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_GET_TEMPERATURE cmd\n");
1583 		dev_kfree_skb(skb);
1584 	}
1585 
1586 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1587 		   "WMI pdev get temperature for pdev_id %d\n", ar->pdev->pdev_id);
1588 
1589 	return ret;
1590 }
1591 
1592 int ath11k_wmi_send_bcn_offload_control_cmd(struct ath11k *ar,
1593 					    u32 vdev_id, u32 bcn_ctrl_op)
1594 {
1595 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1596 	struct wmi_bcn_offload_ctrl_cmd *cmd;
1597 	struct sk_buff *skb;
1598 	int ret;
1599 
1600 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1601 	if (!skb)
1602 		return -ENOMEM;
1603 
1604 	cmd = (struct wmi_bcn_offload_ctrl_cmd *)skb->data;
1605 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1606 				     WMI_TAG_BCN_OFFLOAD_CTRL_CMD) |
1607 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1608 
1609 	cmd->vdev_id = vdev_id;
1610 	cmd->bcn_ctrl_op = bcn_ctrl_op;
1611 
1612 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1613 		   "WMI bcn ctrl offload vdev id %d ctrl_op %d\n",
1614 		   vdev_id, bcn_ctrl_op);
1615 
1616 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_BCN_OFFLOAD_CTRL_CMDID);
1617 	if (ret) {
1618 		ath11k_warn(ar->ab,
1619 			    "failed to send WMI_BCN_OFFLOAD_CTRL_CMDID\n");
1620 		dev_kfree_skb(skb);
1621 	}
1622 
1623 	return ret;
1624 }
1625 
1626 int ath11k_wmi_bcn_tmpl(struct ath11k *ar, u32 vdev_id,
1627 			struct ieee80211_mutable_offsets *offs,
1628 			struct sk_buff *bcn)
1629 {
1630 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1631 	struct wmi_bcn_tmpl_cmd *cmd;
1632 	struct wmi_bcn_prb_info *bcn_prb_info;
1633 	struct wmi_tlv *tlv;
1634 	struct sk_buff *skb;
1635 	void *ptr;
1636 	int ret, len;
1637 	size_t aligned_len = roundup(bcn->len, 4);
1638 	struct ieee80211_vif *vif;
1639 	struct ath11k_vif *arvif = ath11k_mac_get_arvif(ar, vdev_id);
1640 
1641 	if (!arvif) {
1642 		ath11k_warn(ar->ab, "failed to find arvif with vdev id %d\n", vdev_id);
1643 		return -EINVAL;
1644 	}
1645 
1646 	vif = arvif->vif;
1647 
1648 	len = sizeof(*cmd) + sizeof(*bcn_prb_info) + TLV_HDR_SIZE + aligned_len;
1649 
1650 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
1651 	if (!skb)
1652 		return -ENOMEM;
1653 
1654 	cmd = (struct wmi_bcn_tmpl_cmd *)skb->data;
1655 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_BCN_TMPL_CMD) |
1656 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1657 	cmd->vdev_id = vdev_id;
1658 	cmd->tim_ie_offset = offs->tim_offset;
1659 
1660 	if (vif->csa_active) {
1661 		cmd->csa_switch_count_offset = offs->cntdwn_counter_offs[0];
1662 		cmd->ext_csa_switch_count_offset = offs->cntdwn_counter_offs[1];
1663 	}
1664 
1665 	cmd->buf_len = bcn->len;
1666 
1667 	ptr = skb->data + sizeof(*cmd);
1668 
1669 	bcn_prb_info = ptr;
1670 	len = sizeof(*bcn_prb_info);
1671 	bcn_prb_info->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1672 					      WMI_TAG_BCN_PRB_INFO) |
1673 				   FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
1674 	bcn_prb_info->caps = 0;
1675 	bcn_prb_info->erp = 0;
1676 
1677 	ptr += sizeof(*bcn_prb_info);
1678 
1679 	tlv = ptr;
1680 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
1681 		      FIELD_PREP(WMI_TLV_LEN, aligned_len);
1682 	memcpy(tlv->value, bcn->data, bcn->len);
1683 
1684 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_BCN_TMPL_CMDID);
1685 	if (ret) {
1686 		ath11k_warn(ar->ab, "failed to send WMI_BCN_TMPL_CMDID\n");
1687 		dev_kfree_skb(skb);
1688 	}
1689 
1690 	return ret;
1691 }
1692 
1693 int ath11k_wmi_vdev_install_key(struct ath11k *ar,
1694 				struct wmi_vdev_install_key_arg *arg)
1695 {
1696 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1697 	struct wmi_vdev_install_key_cmd *cmd;
1698 	struct wmi_tlv *tlv;
1699 	struct sk_buff *skb;
1700 	int ret, len;
1701 	int key_len_aligned = roundup(arg->key_len, sizeof(uint32_t));
1702 
1703 	len = sizeof(*cmd) + TLV_HDR_SIZE + key_len_aligned;
1704 
1705 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
1706 	if (!skb)
1707 		return -ENOMEM;
1708 
1709 	cmd = (struct wmi_vdev_install_key_cmd *)skb->data;
1710 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VDEV_INSTALL_KEY_CMD) |
1711 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1712 	cmd->vdev_id = arg->vdev_id;
1713 	ether_addr_copy(cmd->peer_macaddr.addr, arg->macaddr);
1714 	cmd->key_idx = arg->key_idx;
1715 	cmd->key_flags = arg->key_flags;
1716 	cmd->key_cipher = arg->key_cipher;
1717 	cmd->key_len = arg->key_len;
1718 	cmd->key_txmic_len = arg->key_txmic_len;
1719 	cmd->key_rxmic_len = arg->key_rxmic_len;
1720 
1721 	if (arg->key_rsc_counter)
1722 		memcpy(&cmd->key_rsc_counter, &arg->key_rsc_counter,
1723 		       sizeof(struct wmi_key_seq_counter));
1724 
1725 	tlv = (struct wmi_tlv *)(skb->data + sizeof(*cmd));
1726 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
1727 		      FIELD_PREP(WMI_TLV_LEN, key_len_aligned);
1728 	if (arg->key_data)
1729 		memcpy(tlv->value, (u8 *)arg->key_data, key_len_aligned);
1730 
1731 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_VDEV_INSTALL_KEY_CMDID);
1732 	if (ret) {
1733 		ath11k_warn(ar->ab,
1734 			    "failed to send WMI_VDEV_INSTALL_KEY cmd\n");
1735 		dev_kfree_skb(skb);
1736 	}
1737 
1738 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1739 		   "WMI vdev install key idx %d cipher %d len %d\n",
1740 		   arg->key_idx, arg->key_cipher, arg->key_len);
1741 
1742 	return ret;
1743 }
1744 
1745 static inline void
1746 ath11k_wmi_copy_peer_flags(struct wmi_peer_assoc_complete_cmd *cmd,
1747 			   struct peer_assoc_params *param,
1748 			   bool hw_crypto_disabled)
1749 {
1750 	cmd->peer_flags = 0;
1751 
1752 	if (param->is_wme_set) {
1753 		if (param->qos_flag)
1754 			cmd->peer_flags |= WMI_PEER_QOS;
1755 		if (param->apsd_flag)
1756 			cmd->peer_flags |= WMI_PEER_APSD;
1757 		if (param->ht_flag)
1758 			cmd->peer_flags |= WMI_PEER_HT;
1759 		if (param->bw_40)
1760 			cmd->peer_flags |= WMI_PEER_40MHZ;
1761 		if (param->bw_80)
1762 			cmd->peer_flags |= WMI_PEER_80MHZ;
1763 		if (param->bw_160)
1764 			cmd->peer_flags |= WMI_PEER_160MHZ;
1765 
1766 		/* Typically if STBC is enabled for VHT it should be enabled
1767 		 * for HT as well
1768 		 **/
1769 		if (param->stbc_flag)
1770 			cmd->peer_flags |= WMI_PEER_STBC;
1771 
1772 		/* Typically if LDPC is enabled for VHT it should be enabled
1773 		 * for HT as well
1774 		 **/
1775 		if (param->ldpc_flag)
1776 			cmd->peer_flags |= WMI_PEER_LDPC;
1777 
1778 		if (param->static_mimops_flag)
1779 			cmd->peer_flags |= WMI_PEER_STATIC_MIMOPS;
1780 		if (param->dynamic_mimops_flag)
1781 			cmd->peer_flags |= WMI_PEER_DYN_MIMOPS;
1782 		if (param->spatial_mux_flag)
1783 			cmd->peer_flags |= WMI_PEER_SPATIAL_MUX;
1784 		if (param->vht_flag)
1785 			cmd->peer_flags |= WMI_PEER_VHT;
1786 		if (param->he_flag)
1787 			cmd->peer_flags |= WMI_PEER_HE;
1788 		if (param->twt_requester)
1789 			cmd->peer_flags |= WMI_PEER_TWT_REQ;
1790 		if (param->twt_responder)
1791 			cmd->peer_flags |= WMI_PEER_TWT_RESP;
1792 	}
1793 
1794 	/* Suppress authorization for all AUTH modes that need 4-way handshake
1795 	 * (during re-association).
1796 	 * Authorization will be done for these modes on key installation.
1797 	 */
1798 	if (param->auth_flag)
1799 		cmd->peer_flags |= WMI_PEER_AUTH;
1800 	if (param->need_ptk_4_way) {
1801 		cmd->peer_flags |= WMI_PEER_NEED_PTK_4_WAY;
1802 		if (!hw_crypto_disabled && param->is_assoc)
1803 			cmd->peer_flags &= ~WMI_PEER_AUTH;
1804 	}
1805 	if (param->need_gtk_2_way)
1806 		cmd->peer_flags |= WMI_PEER_NEED_GTK_2_WAY;
1807 	/* safe mode bypass the 4-way handshake */
1808 	if (param->safe_mode_enabled)
1809 		cmd->peer_flags &= ~(WMI_PEER_NEED_PTK_4_WAY |
1810 				     WMI_PEER_NEED_GTK_2_WAY);
1811 
1812 	if (param->is_pmf_enabled)
1813 		cmd->peer_flags |= WMI_PEER_PMF;
1814 
1815 	/* Disable AMSDU for station transmit, if user configures it */
1816 	/* Disable AMSDU for AP transmit to 11n Stations, if user configures
1817 	 * it
1818 	 * if (param->amsdu_disable) Add after FW support
1819 	 **/
1820 
1821 	/* Target asserts if node is marked HT and all MCS is set to 0.
1822 	 * Mark the node as non-HT if all the mcs rates are disabled through
1823 	 * iwpriv
1824 	 **/
1825 	if (param->peer_ht_rates.num_rates == 0)
1826 		cmd->peer_flags &= ~WMI_PEER_HT;
1827 }
1828 
1829 int ath11k_wmi_send_peer_assoc_cmd(struct ath11k *ar,
1830 				   struct peer_assoc_params *param)
1831 {
1832 	struct ath11k_pdev_wmi *wmi = ar->wmi;
1833 	struct wmi_peer_assoc_complete_cmd *cmd;
1834 	struct wmi_vht_rate_set *mcs;
1835 	struct wmi_he_rate_set *he_mcs;
1836 	struct sk_buff *skb;
1837 	struct wmi_tlv *tlv;
1838 	void *ptr;
1839 	u32 peer_legacy_rates_align;
1840 	u32 peer_ht_rates_align;
1841 	int i, ret, len;
1842 
1843 	peer_legacy_rates_align = roundup(param->peer_legacy_rates.num_rates,
1844 					  sizeof(u32));
1845 	peer_ht_rates_align = roundup(param->peer_ht_rates.num_rates,
1846 				      sizeof(u32));
1847 
1848 	len = sizeof(*cmd) +
1849 	      TLV_HDR_SIZE + (peer_legacy_rates_align * sizeof(u8)) +
1850 	      TLV_HDR_SIZE + (peer_ht_rates_align * sizeof(u8)) +
1851 	      sizeof(*mcs) + TLV_HDR_SIZE +
1852 	      (sizeof(*he_mcs) * param->peer_he_mcs_count);
1853 
1854 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
1855 	if (!skb)
1856 		return -ENOMEM;
1857 
1858 	ptr = skb->data;
1859 
1860 	cmd = ptr;
1861 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1862 				     WMI_TAG_PEER_ASSOC_COMPLETE_CMD) |
1863 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
1864 
1865 	cmd->vdev_id = param->vdev_id;
1866 
1867 	cmd->peer_new_assoc = param->peer_new_assoc;
1868 	cmd->peer_associd = param->peer_associd;
1869 
1870 	ath11k_wmi_copy_peer_flags(cmd, param,
1871 				   test_bit(ATH11K_FLAG_HW_CRYPTO_DISABLED,
1872 					    &ar->ab->dev_flags));
1873 
1874 	ether_addr_copy(cmd->peer_macaddr.addr, param->peer_mac);
1875 
1876 	cmd->peer_rate_caps = param->peer_rate_caps;
1877 	cmd->peer_caps = param->peer_caps;
1878 	cmd->peer_listen_intval = param->peer_listen_intval;
1879 	cmd->peer_ht_caps = param->peer_ht_caps;
1880 	cmd->peer_max_mpdu = param->peer_max_mpdu;
1881 	cmd->peer_mpdu_density = param->peer_mpdu_density;
1882 	cmd->peer_vht_caps = param->peer_vht_caps;
1883 	cmd->peer_phymode = param->peer_phymode;
1884 
1885 	/* Update 11ax capabilities */
1886 	cmd->peer_he_cap_info = param->peer_he_cap_macinfo[0];
1887 	cmd->peer_he_cap_info_ext = param->peer_he_cap_macinfo[1];
1888 	cmd->peer_he_cap_info_internal = param->peer_he_cap_macinfo_internal;
1889 	cmd->peer_he_caps_6ghz = param->peer_he_caps_6ghz;
1890 	cmd->peer_he_ops = param->peer_he_ops;
1891 	memcpy(&cmd->peer_he_cap_phy, &param->peer_he_cap_phyinfo,
1892 	       sizeof(param->peer_he_cap_phyinfo));
1893 	memcpy(&cmd->peer_ppet, &param->peer_ppet,
1894 	       sizeof(param->peer_ppet));
1895 
1896 	/* Update peer legacy rate information */
1897 	ptr += sizeof(*cmd);
1898 
1899 	tlv = ptr;
1900 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
1901 		      FIELD_PREP(WMI_TLV_LEN, peer_legacy_rates_align);
1902 
1903 	ptr += TLV_HDR_SIZE;
1904 
1905 	cmd->num_peer_legacy_rates = param->peer_legacy_rates.num_rates;
1906 	memcpy(ptr, param->peer_legacy_rates.rates,
1907 	       param->peer_legacy_rates.num_rates);
1908 
1909 	/* Update peer HT rate information */
1910 	ptr += peer_legacy_rates_align;
1911 
1912 	tlv = ptr;
1913 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
1914 		      FIELD_PREP(WMI_TLV_LEN, peer_ht_rates_align);
1915 	ptr += TLV_HDR_SIZE;
1916 	cmd->num_peer_ht_rates = param->peer_ht_rates.num_rates;
1917 	memcpy(ptr, param->peer_ht_rates.rates,
1918 	       param->peer_ht_rates.num_rates);
1919 
1920 	/* VHT Rates */
1921 	ptr += peer_ht_rates_align;
1922 
1923 	mcs = ptr;
1924 
1925 	mcs->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_VHT_RATE_SET) |
1926 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*mcs) - TLV_HDR_SIZE);
1927 
1928 	cmd->peer_nss = param->peer_nss;
1929 
1930 	/* Update bandwidth-NSS mapping */
1931 	cmd->peer_bw_rxnss_override = 0;
1932 	cmd->peer_bw_rxnss_override |= param->peer_bw_rxnss_override;
1933 
1934 	if (param->vht_capable) {
1935 		mcs->rx_max_rate = param->rx_max_rate;
1936 		mcs->rx_mcs_set = param->rx_mcs_set;
1937 		mcs->tx_max_rate = param->tx_max_rate;
1938 		mcs->tx_mcs_set = param->tx_mcs_set;
1939 	}
1940 
1941 	/* HE Rates */
1942 	cmd->peer_he_mcs = param->peer_he_mcs_count;
1943 	cmd->min_data_rate = param->min_data_rate;
1944 
1945 	ptr += sizeof(*mcs);
1946 
1947 	len = param->peer_he_mcs_count * sizeof(*he_mcs);
1948 
1949 	tlv = ptr;
1950 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
1951 		      FIELD_PREP(WMI_TLV_LEN, len);
1952 	ptr += TLV_HDR_SIZE;
1953 
1954 	/* Loop through the HE rate set */
1955 	for (i = 0; i < param->peer_he_mcs_count; i++) {
1956 		he_mcs = ptr;
1957 		he_mcs->tlv_header = FIELD_PREP(WMI_TLV_TAG,
1958 						WMI_TAG_HE_RATE_SET) |
1959 				     FIELD_PREP(WMI_TLV_LEN,
1960 						sizeof(*he_mcs) - TLV_HDR_SIZE);
1961 
1962 		he_mcs->rx_mcs_set = param->peer_he_tx_mcs_set[i];
1963 		he_mcs->tx_mcs_set = param->peer_he_rx_mcs_set[i];
1964 		ptr += sizeof(*he_mcs);
1965 	}
1966 
1967 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_PEER_ASSOC_CMDID);
1968 	if (ret) {
1969 		ath11k_warn(ar->ab,
1970 			    "failed to send WMI_PEER_ASSOC_CMDID\n");
1971 		dev_kfree_skb(skb);
1972 	}
1973 
1974 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
1975 		   "wmi peer assoc vdev id %d assoc id %d peer mac %pM peer_flags %x rate_caps %x peer_caps %x listen_intval %d ht_caps %x max_mpdu %d nss %d phymode %d peer_mpdu_density %d vht_caps %x he cap_info %x he ops %x he cap_info_ext %x he phy %x %x %x peer_bw_rxnss_override %x\n",
1976 		   cmd->vdev_id, cmd->peer_associd, param->peer_mac,
1977 		   cmd->peer_flags, cmd->peer_rate_caps, cmd->peer_caps,
1978 		   cmd->peer_listen_intval, cmd->peer_ht_caps,
1979 		   cmd->peer_max_mpdu, cmd->peer_nss, cmd->peer_phymode,
1980 		   cmd->peer_mpdu_density,
1981 		   cmd->peer_vht_caps, cmd->peer_he_cap_info,
1982 		   cmd->peer_he_ops, cmd->peer_he_cap_info_ext,
1983 		   cmd->peer_he_cap_phy[0], cmd->peer_he_cap_phy[1],
1984 		   cmd->peer_he_cap_phy[2],
1985 		   cmd->peer_bw_rxnss_override);
1986 
1987 	return ret;
1988 }
1989 
1990 void ath11k_wmi_start_scan_init(struct ath11k *ar,
1991 				struct scan_req_params *arg)
1992 {
1993 	/* setup commonly used values */
1994 	arg->scan_req_id = 1;
1995 	arg->scan_priority = WMI_SCAN_PRIORITY_LOW;
1996 	arg->dwell_time_active = 50;
1997 	arg->dwell_time_active_2g = 0;
1998 	arg->dwell_time_passive = 150;
1999 	arg->dwell_time_active_6g = 40;
2000 	arg->dwell_time_passive_6g = 30;
2001 	arg->min_rest_time = 50;
2002 	arg->max_rest_time = 500;
2003 	arg->repeat_probe_time = 0;
2004 	arg->probe_spacing_time = 0;
2005 	arg->idle_time = 0;
2006 	arg->max_scan_time = 20000;
2007 	arg->probe_delay = 5;
2008 	arg->notify_scan_events = WMI_SCAN_EVENT_STARTED |
2009 				  WMI_SCAN_EVENT_COMPLETED |
2010 				  WMI_SCAN_EVENT_BSS_CHANNEL |
2011 				  WMI_SCAN_EVENT_FOREIGN_CHAN |
2012 				  WMI_SCAN_EVENT_DEQUEUED;
2013 	arg->scan_flags |= WMI_SCAN_CHAN_STAT_EVENT;
2014 	arg->num_bssid = 1;
2015 
2016 	/* fill bssid_list[0] with 0xff, otherwise bssid and RA will be
2017 	 * ZEROs in probe request
2018 	 */
2019 	eth_broadcast_addr(arg->bssid_list[0].addr);
2020 }
2021 
2022 static inline void
2023 ath11k_wmi_copy_scan_event_cntrl_flags(struct wmi_start_scan_cmd *cmd,
2024 				       struct scan_req_params *param)
2025 {
2026 	/* Scan events subscription */
2027 	if (param->scan_ev_started)
2028 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_STARTED;
2029 	if (param->scan_ev_completed)
2030 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_COMPLETED;
2031 	if (param->scan_ev_bss_chan)
2032 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_BSS_CHANNEL;
2033 	if (param->scan_ev_foreign_chan)
2034 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_FOREIGN_CHAN;
2035 	if (param->scan_ev_dequeued)
2036 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_DEQUEUED;
2037 	if (param->scan_ev_preempted)
2038 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_PREEMPTED;
2039 	if (param->scan_ev_start_failed)
2040 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_START_FAILED;
2041 	if (param->scan_ev_restarted)
2042 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_RESTARTED;
2043 	if (param->scan_ev_foreign_chn_exit)
2044 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_FOREIGN_CHAN_EXIT;
2045 	if (param->scan_ev_suspended)
2046 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_SUSPENDED;
2047 	if (param->scan_ev_resumed)
2048 		cmd->notify_scan_events |=  WMI_SCAN_EVENT_RESUMED;
2049 
2050 	/** Set scan control flags */
2051 	cmd->scan_ctrl_flags = 0;
2052 	if (param->scan_f_passive)
2053 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_PASSIVE;
2054 	if (param->scan_f_strict_passive_pch)
2055 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_STRICT_PASSIVE_ON_PCHN;
2056 	if (param->scan_f_promisc_mode)
2057 		cmd->scan_ctrl_flags |=  WMI_SCAN_FILTER_PROMISCUOS;
2058 	if (param->scan_f_capture_phy_err)
2059 		cmd->scan_ctrl_flags |=  WMI_SCAN_CAPTURE_PHY_ERROR;
2060 	if (param->scan_f_half_rate)
2061 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_HALF_RATE_SUPPORT;
2062 	if (param->scan_f_quarter_rate)
2063 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_QUARTER_RATE_SUPPORT;
2064 	if (param->scan_f_cck_rates)
2065 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_CCK_RATES;
2066 	if (param->scan_f_ofdm_rates)
2067 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_OFDM_RATES;
2068 	if (param->scan_f_chan_stat_evnt)
2069 		cmd->scan_ctrl_flags |=  WMI_SCAN_CHAN_STAT_EVENT;
2070 	if (param->scan_f_filter_prb_req)
2071 		cmd->scan_ctrl_flags |=  WMI_SCAN_FILTER_PROBE_REQ;
2072 	if (param->scan_f_bcast_probe)
2073 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_BCAST_PROBE_REQ;
2074 	if (param->scan_f_offchan_mgmt_tx)
2075 		cmd->scan_ctrl_flags |=  WMI_SCAN_OFFCHAN_MGMT_TX;
2076 	if (param->scan_f_offchan_data_tx)
2077 		cmd->scan_ctrl_flags |=  WMI_SCAN_OFFCHAN_DATA_TX;
2078 	if (param->scan_f_force_active_dfs_chn)
2079 		cmd->scan_ctrl_flags |=  WMI_SCAN_FLAG_FORCE_ACTIVE_ON_DFS;
2080 	if (param->scan_f_add_tpc_ie_in_probe)
2081 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_TPC_IE_IN_PROBE_REQ;
2082 	if (param->scan_f_add_ds_ie_in_probe)
2083 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_DS_IE_IN_PROBE_REQ;
2084 	if (param->scan_f_add_spoofed_mac_in_probe)
2085 		cmd->scan_ctrl_flags |=  WMI_SCAN_ADD_SPOOF_MAC_IN_PROBE_REQ;
2086 	if (param->scan_f_add_rand_seq_in_probe)
2087 		cmd->scan_ctrl_flags |=  WMI_SCAN_RANDOM_SEQ_NO_IN_PROBE_REQ;
2088 	if (param->scan_f_en_ie_whitelist_in_probe)
2089 		cmd->scan_ctrl_flags |=
2090 			 WMI_SCAN_ENABLE_IE_WHTELIST_IN_PROBE_REQ;
2091 
2092 	/* for adaptive scan mode using 3 bits (21 - 23 bits) */
2093 	WMI_SCAN_SET_DWELL_MODE(cmd->scan_ctrl_flags,
2094 				param->adaptive_dwell_time_mode);
2095 }
2096 
2097 int ath11k_wmi_send_scan_start_cmd(struct ath11k *ar,
2098 				   struct scan_req_params *params)
2099 {
2100 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2101 	struct wmi_start_scan_cmd *cmd;
2102 	struct wmi_ssid *ssid = NULL;
2103 	struct wmi_mac_addr *bssid;
2104 	struct sk_buff *skb;
2105 	struct wmi_tlv *tlv;
2106 	void *ptr;
2107 	int i, ret, len;
2108 	u32 *tmp_ptr;
2109 	u8 extraie_len_with_pad = 0;
2110 	struct hint_short_ssid *s_ssid = NULL;
2111 	struct hint_bssid *hint_bssid = NULL;
2112 
2113 	len = sizeof(*cmd);
2114 
2115 	len += TLV_HDR_SIZE;
2116 	if (params->num_chan)
2117 		len += params->num_chan * sizeof(u32);
2118 
2119 	len += TLV_HDR_SIZE;
2120 	if (params->num_ssids)
2121 		len += params->num_ssids * sizeof(*ssid);
2122 
2123 	len += TLV_HDR_SIZE;
2124 	if (params->num_bssid)
2125 		len += sizeof(*bssid) * params->num_bssid;
2126 
2127 	len += TLV_HDR_SIZE;
2128 	if (params->extraie.len)
2129 		extraie_len_with_pad =
2130 			roundup(params->extraie.len, sizeof(u32));
2131 	len += extraie_len_with_pad;
2132 
2133 	if (params->num_hint_bssid)
2134 		len += TLV_HDR_SIZE +
2135 		       params->num_hint_bssid * sizeof(struct hint_bssid);
2136 
2137 	if (params->num_hint_s_ssid)
2138 		len += TLV_HDR_SIZE +
2139 		       params->num_hint_s_ssid * sizeof(struct hint_short_ssid);
2140 
2141 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2142 	if (!skb)
2143 		return -ENOMEM;
2144 
2145 	ptr = skb->data;
2146 
2147 	cmd = ptr;
2148 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_START_SCAN_CMD) |
2149 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2150 
2151 	cmd->scan_id = params->scan_id;
2152 	cmd->scan_req_id = params->scan_req_id;
2153 	cmd->vdev_id = params->vdev_id;
2154 	cmd->scan_priority = params->scan_priority;
2155 	cmd->notify_scan_events = params->notify_scan_events;
2156 
2157 	ath11k_wmi_copy_scan_event_cntrl_flags(cmd, params);
2158 
2159 	cmd->dwell_time_active = params->dwell_time_active;
2160 	cmd->dwell_time_active_2g = params->dwell_time_active_2g;
2161 	cmd->dwell_time_passive = params->dwell_time_passive;
2162 	cmd->dwell_time_active_6g = params->dwell_time_active_6g;
2163 	cmd->dwell_time_passive_6g = params->dwell_time_passive_6g;
2164 	cmd->min_rest_time = params->min_rest_time;
2165 	cmd->max_rest_time = params->max_rest_time;
2166 	cmd->repeat_probe_time = params->repeat_probe_time;
2167 	cmd->probe_spacing_time = params->probe_spacing_time;
2168 	cmd->idle_time = params->idle_time;
2169 	cmd->max_scan_time = params->max_scan_time;
2170 	cmd->probe_delay = params->probe_delay;
2171 	cmd->burst_duration = params->burst_duration;
2172 	cmd->num_chan = params->num_chan;
2173 	cmd->num_bssid = params->num_bssid;
2174 	cmd->num_ssids = params->num_ssids;
2175 	cmd->ie_len = params->extraie.len;
2176 	cmd->n_probes = params->n_probes;
2177 
2178 	ptr += sizeof(*cmd);
2179 
2180 	len = params->num_chan * sizeof(u32);
2181 
2182 	tlv = ptr;
2183 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_UINT32) |
2184 		      FIELD_PREP(WMI_TLV_LEN, len);
2185 	ptr += TLV_HDR_SIZE;
2186 	tmp_ptr = (u32 *)ptr;
2187 
2188 	for (i = 0; i < params->num_chan; ++i)
2189 		tmp_ptr[i] = params->chan_list[i];
2190 
2191 	ptr += len;
2192 
2193 	len = params->num_ssids * sizeof(*ssid);
2194 	tlv = ptr;
2195 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_FIXED_STRUCT) |
2196 		      FIELD_PREP(WMI_TLV_LEN, len);
2197 
2198 	ptr += TLV_HDR_SIZE;
2199 
2200 	if (params->num_ssids) {
2201 		ssid = ptr;
2202 		for (i = 0; i < params->num_ssids; ++i) {
2203 			ssid->ssid_len = params->ssid[i].length;
2204 			memcpy(ssid->ssid, params->ssid[i].ssid,
2205 			       params->ssid[i].length);
2206 			ssid++;
2207 		}
2208 	}
2209 
2210 	ptr += (params->num_ssids * sizeof(*ssid));
2211 	len = params->num_bssid * sizeof(*bssid);
2212 	tlv = ptr;
2213 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_FIXED_STRUCT) |
2214 		      FIELD_PREP(WMI_TLV_LEN, len);
2215 
2216 	ptr += TLV_HDR_SIZE;
2217 	bssid = ptr;
2218 
2219 	if (params->num_bssid) {
2220 		for (i = 0; i < params->num_bssid; ++i) {
2221 			ether_addr_copy(bssid->addr,
2222 					params->bssid_list[i].addr);
2223 			bssid++;
2224 		}
2225 	}
2226 
2227 	ptr += params->num_bssid * sizeof(*bssid);
2228 
2229 	len = extraie_len_with_pad;
2230 	tlv = ptr;
2231 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
2232 		      FIELD_PREP(WMI_TLV_LEN, len);
2233 	ptr += TLV_HDR_SIZE;
2234 
2235 	if (params->extraie.len)
2236 		memcpy(ptr, params->extraie.ptr,
2237 		       params->extraie.len);
2238 
2239 	ptr += extraie_len_with_pad;
2240 
2241 	if (params->num_hint_s_ssid) {
2242 		len = params->num_hint_s_ssid * sizeof(struct hint_short_ssid);
2243 		tlv = ptr;
2244 		tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_FIXED_STRUCT) |
2245 			      FIELD_PREP(WMI_TLV_LEN, len);
2246 		ptr += TLV_HDR_SIZE;
2247 		s_ssid = ptr;
2248 		for (i = 0; i < params->num_hint_s_ssid; ++i) {
2249 			s_ssid->freq_flags = params->hint_s_ssid[i].freq_flags;
2250 			s_ssid->short_ssid = params->hint_s_ssid[i].short_ssid;
2251 			s_ssid++;
2252 		}
2253 		ptr += len;
2254 	}
2255 
2256 	if (params->num_hint_bssid) {
2257 		len = params->num_hint_bssid * sizeof(struct hint_bssid);
2258 		tlv = ptr;
2259 		tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_FIXED_STRUCT) |
2260 			      FIELD_PREP(WMI_TLV_LEN, len);
2261 		ptr += TLV_HDR_SIZE;
2262 		hint_bssid = ptr;
2263 		for (i = 0; i < params->num_hint_bssid; ++i) {
2264 			hint_bssid->freq_flags =
2265 				params->hint_bssid[i].freq_flags;
2266 			ether_addr_copy(&params->hint_bssid[i].bssid.addr[0],
2267 					&hint_bssid->bssid.addr[0]);
2268 			hint_bssid++;
2269 		}
2270 	}
2271 
2272 	ret = ath11k_wmi_cmd_send(wmi, skb,
2273 				  WMI_START_SCAN_CMDID);
2274 	if (ret) {
2275 		ath11k_warn(ar->ab, "failed to send WMI_START_SCAN_CMDID\n");
2276 		dev_kfree_skb(skb);
2277 	}
2278 
2279 	return ret;
2280 }
2281 
2282 int ath11k_wmi_send_scan_stop_cmd(struct ath11k *ar,
2283 				  struct scan_cancel_param *param)
2284 {
2285 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2286 	struct wmi_stop_scan_cmd *cmd;
2287 	struct sk_buff *skb;
2288 	int ret;
2289 
2290 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2291 	if (!skb)
2292 		return -ENOMEM;
2293 
2294 	cmd = (struct wmi_stop_scan_cmd *)skb->data;
2295 
2296 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_STOP_SCAN_CMD) |
2297 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2298 
2299 	cmd->vdev_id = param->vdev_id;
2300 	cmd->requestor = param->requester;
2301 	cmd->scan_id = param->scan_id;
2302 	cmd->pdev_id = param->pdev_id;
2303 	/* stop the scan with the corresponding scan_id */
2304 	if (param->req_type == WLAN_SCAN_CANCEL_PDEV_ALL) {
2305 		/* Cancelling all scans */
2306 		cmd->req_type =  WMI_SCAN_STOP_ALL;
2307 	} else if (param->req_type == WLAN_SCAN_CANCEL_VDEV_ALL) {
2308 		/* Cancelling VAP scans */
2309 		cmd->req_type =  WMI_SCN_STOP_VAP_ALL;
2310 	} else if (param->req_type == WLAN_SCAN_CANCEL_SINGLE) {
2311 		/* Cancelling specific scan */
2312 		cmd->req_type =  WMI_SCAN_STOP_ONE;
2313 	} else {
2314 		ath11k_warn(ar->ab, "invalid scan cancel param %d",
2315 			    param->req_type);
2316 		dev_kfree_skb(skb);
2317 		return -EINVAL;
2318 	}
2319 
2320 	ret = ath11k_wmi_cmd_send(wmi, skb,
2321 				  WMI_STOP_SCAN_CMDID);
2322 	if (ret) {
2323 		ath11k_warn(ar->ab, "failed to send WMI_STOP_SCAN_CMDID\n");
2324 		dev_kfree_skb(skb);
2325 	}
2326 
2327 	return ret;
2328 }
2329 
2330 int ath11k_wmi_send_scan_chan_list_cmd(struct ath11k *ar,
2331 				       struct scan_chan_list_params *chan_list)
2332 {
2333 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2334 	struct wmi_scan_chan_list_cmd *cmd;
2335 	struct sk_buff *skb;
2336 	struct wmi_channel *chan_info;
2337 	struct channel_param *tchan_info;
2338 	struct wmi_tlv *tlv;
2339 	void *ptr;
2340 	int i, ret, len;
2341 	u16 num_send_chans, num_sends = 0, max_chan_limit = 0;
2342 	u32 *reg1, *reg2;
2343 
2344 	tchan_info = chan_list->ch_param;
2345 	while (chan_list->nallchans) {
2346 		len = sizeof(*cmd) + TLV_HDR_SIZE;
2347 		max_chan_limit = (wmi->wmi_ab->max_msg_len[ar->pdev_idx] - len) /
2348 			sizeof(*chan_info);
2349 
2350 		if (chan_list->nallchans > max_chan_limit)
2351 			num_send_chans = max_chan_limit;
2352 		else
2353 			num_send_chans = chan_list->nallchans;
2354 
2355 		chan_list->nallchans -= num_send_chans;
2356 		len += sizeof(*chan_info) * num_send_chans;
2357 
2358 		skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2359 		if (!skb)
2360 			return -ENOMEM;
2361 
2362 		cmd = (struct wmi_scan_chan_list_cmd *)skb->data;
2363 		cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_SCAN_CHAN_LIST_CMD) |
2364 			FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2365 		cmd->pdev_id = chan_list->pdev_id;
2366 		cmd->num_scan_chans = num_send_chans;
2367 		if (num_sends)
2368 			cmd->flags |= WMI_APPEND_TO_EXISTING_CHAN_LIST_FLAG;
2369 
2370 		ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2371 			   "WMI no.of chan = %d len = %d pdev_id = %d num_sends = %d\n",
2372 			   num_send_chans, len, cmd->pdev_id, num_sends);
2373 
2374 		ptr = skb->data + sizeof(*cmd);
2375 
2376 		len = sizeof(*chan_info) * num_send_chans;
2377 		tlv = ptr;
2378 		tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
2379 			      FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
2380 		ptr += TLV_HDR_SIZE;
2381 
2382 		for (i = 0; i < num_send_chans; ++i) {
2383 			chan_info = ptr;
2384 			memset(chan_info, 0, sizeof(*chan_info));
2385 			len = sizeof(*chan_info);
2386 			chan_info->tlv_header = FIELD_PREP(WMI_TLV_TAG,
2387 							   WMI_TAG_CHANNEL) |
2388 						FIELD_PREP(WMI_TLV_LEN,
2389 							   len - TLV_HDR_SIZE);
2390 
2391 			reg1 = &chan_info->reg_info_1;
2392 			reg2 = &chan_info->reg_info_2;
2393 			chan_info->mhz = tchan_info->mhz;
2394 			chan_info->band_center_freq1 = tchan_info->cfreq1;
2395 			chan_info->band_center_freq2 = tchan_info->cfreq2;
2396 
2397 			if (tchan_info->is_chan_passive)
2398 				chan_info->info |= WMI_CHAN_INFO_PASSIVE;
2399 			if (tchan_info->allow_he)
2400 				chan_info->info |= WMI_CHAN_INFO_ALLOW_HE;
2401 			else if (tchan_info->allow_vht)
2402 				chan_info->info |= WMI_CHAN_INFO_ALLOW_VHT;
2403 			else if (tchan_info->allow_ht)
2404 				chan_info->info |= WMI_CHAN_INFO_ALLOW_HT;
2405 			if (tchan_info->half_rate)
2406 				chan_info->info |= WMI_CHAN_INFO_HALF_RATE;
2407 			if (tchan_info->quarter_rate)
2408 				chan_info->info |= WMI_CHAN_INFO_QUARTER_RATE;
2409 			if (tchan_info->psc_channel)
2410 				chan_info->info |= WMI_CHAN_INFO_PSC;
2411 			if (tchan_info->dfs_set)
2412 				chan_info->info |= WMI_CHAN_INFO_DFS;
2413 
2414 			chan_info->info |= FIELD_PREP(WMI_CHAN_INFO_MODE,
2415 						      tchan_info->phy_mode);
2416 			*reg1 |= FIELD_PREP(WMI_CHAN_REG_INFO1_MIN_PWR,
2417 					    tchan_info->minpower);
2418 			*reg1 |= FIELD_PREP(WMI_CHAN_REG_INFO1_MAX_PWR,
2419 					    tchan_info->maxpower);
2420 			*reg1 |= FIELD_PREP(WMI_CHAN_REG_INFO1_MAX_REG_PWR,
2421 					    tchan_info->maxregpower);
2422 			*reg1 |= FIELD_PREP(WMI_CHAN_REG_INFO1_REG_CLS,
2423 					    tchan_info->reg_class_id);
2424 			*reg2 |= FIELD_PREP(WMI_CHAN_REG_INFO2_ANT_MAX,
2425 					    tchan_info->antennamax);
2426 			*reg2 |= FIELD_PREP(WMI_CHAN_REG_INFO2_MAX_TX_PWR,
2427 					    tchan_info->maxregpower);
2428 
2429 			ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2430 				   "WMI chan scan list chan[%d] = %u, chan_info->info %8x\n",
2431 				   i, chan_info->mhz, chan_info->info);
2432 
2433 			ptr += sizeof(*chan_info);
2434 
2435 			tchan_info++;
2436 		}
2437 
2438 		ret = ath11k_wmi_cmd_send(wmi, skb, WMI_SCAN_CHAN_LIST_CMDID);
2439 		if (ret) {
2440 			ath11k_warn(ar->ab, "failed to send WMI_SCAN_CHAN_LIST cmd\n");
2441 			dev_kfree_skb(skb);
2442 			return ret;
2443 		}
2444 
2445 		num_sends++;
2446 	}
2447 
2448 	return 0;
2449 }
2450 
2451 int ath11k_wmi_send_wmm_update_cmd_tlv(struct ath11k *ar, u32 vdev_id,
2452 				       struct wmi_wmm_params_all_arg *param)
2453 {
2454 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2455 	struct wmi_vdev_set_wmm_params_cmd *cmd;
2456 	struct wmi_wmm_params *wmm_param;
2457 	struct wmi_wmm_params_arg *wmi_wmm_arg;
2458 	struct sk_buff *skb;
2459 	int ret, ac;
2460 
2461 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2462 	if (!skb)
2463 		return -ENOMEM;
2464 
2465 	cmd = (struct wmi_vdev_set_wmm_params_cmd *)skb->data;
2466 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
2467 				     WMI_TAG_VDEV_SET_WMM_PARAMS_CMD) |
2468 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2469 
2470 	cmd->vdev_id = vdev_id;
2471 	cmd->wmm_param_type = 0;
2472 
2473 	for (ac = 0; ac < WME_NUM_AC; ac++) {
2474 		switch (ac) {
2475 		case WME_AC_BE:
2476 			wmi_wmm_arg = &param->ac_be;
2477 			break;
2478 		case WME_AC_BK:
2479 			wmi_wmm_arg = &param->ac_bk;
2480 			break;
2481 		case WME_AC_VI:
2482 			wmi_wmm_arg = &param->ac_vi;
2483 			break;
2484 		case WME_AC_VO:
2485 			wmi_wmm_arg = &param->ac_vo;
2486 			break;
2487 		}
2488 
2489 		wmm_param = (struct wmi_wmm_params *)&cmd->wmm_params[ac];
2490 		wmm_param->tlv_header =
2491 				FIELD_PREP(WMI_TLV_TAG,
2492 					   WMI_TAG_VDEV_SET_WMM_PARAMS_CMD) |
2493 				FIELD_PREP(WMI_TLV_LEN,
2494 					   sizeof(*wmm_param) - TLV_HDR_SIZE);
2495 
2496 		wmm_param->aifs = wmi_wmm_arg->aifs;
2497 		wmm_param->cwmin = wmi_wmm_arg->cwmin;
2498 		wmm_param->cwmax = wmi_wmm_arg->cwmax;
2499 		wmm_param->txoplimit = wmi_wmm_arg->txop;
2500 		wmm_param->acm = wmi_wmm_arg->acm;
2501 		wmm_param->no_ack = wmi_wmm_arg->no_ack;
2502 
2503 		ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2504 			   "wmi wmm set ac %d aifs %d cwmin %d cwmax %d txop %d acm %d no_ack %d\n",
2505 			   ac, wmm_param->aifs, wmm_param->cwmin,
2506 			   wmm_param->cwmax, wmm_param->txoplimit,
2507 			   wmm_param->acm, wmm_param->no_ack);
2508 	}
2509 	ret = ath11k_wmi_cmd_send(wmi, skb,
2510 				  WMI_VDEV_SET_WMM_PARAMS_CMDID);
2511 	if (ret) {
2512 		ath11k_warn(ar->ab,
2513 			    "failed to send WMI_VDEV_SET_WMM_PARAMS_CMDID");
2514 		dev_kfree_skb(skb);
2515 	}
2516 
2517 	return ret;
2518 }
2519 
2520 int ath11k_wmi_send_dfs_phyerr_offload_enable_cmd(struct ath11k *ar,
2521 						  u32 pdev_id)
2522 {
2523 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2524 	struct wmi_dfs_phyerr_offload_cmd *cmd;
2525 	struct sk_buff *skb;
2526 	int ret;
2527 
2528 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2529 	if (!skb)
2530 		return -ENOMEM;
2531 
2532 	cmd = (struct wmi_dfs_phyerr_offload_cmd *)skb->data;
2533 	cmd->tlv_header =
2534 		FIELD_PREP(WMI_TLV_TAG,
2535 			   WMI_TAG_PDEV_DFS_PHYERR_OFFLOAD_ENABLE_CMD) |
2536 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2537 
2538 	cmd->pdev_id = pdev_id;
2539 
2540 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2541 		   "WMI dfs phy err offload enable pdev id %d\n", pdev_id);
2542 
2543 	ret = ath11k_wmi_cmd_send(wmi, skb,
2544 				  WMI_PDEV_DFS_PHYERR_OFFLOAD_ENABLE_CMDID);
2545 	if (ret) {
2546 		ath11k_warn(ar->ab,
2547 			    "failed to send WMI_PDEV_DFS_PHYERR_OFFLOAD_ENABLE cmd\n");
2548 		dev_kfree_skb(skb);
2549 	}
2550 
2551 	return ret;
2552 }
2553 
2554 int ath11k_wmi_delba_send(struct ath11k *ar, u32 vdev_id, const u8 *mac,
2555 			  u32 tid, u32 initiator, u32 reason)
2556 {
2557 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2558 	struct wmi_delba_send_cmd *cmd;
2559 	struct sk_buff *skb;
2560 	int ret;
2561 
2562 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2563 	if (!skb)
2564 		return -ENOMEM;
2565 
2566 	cmd = (struct wmi_delba_send_cmd *)skb->data;
2567 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_DELBA_SEND_CMD) |
2568 			FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2569 	cmd->vdev_id = vdev_id;
2570 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
2571 	cmd->tid = tid;
2572 	cmd->initiator = initiator;
2573 	cmd->reasoncode = reason;
2574 
2575 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2576 		   "wmi delba send vdev_id 0x%X mac_addr %pM tid %u initiator %u reason %u\n",
2577 		   vdev_id, mac, tid, initiator, reason);
2578 
2579 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_DELBA_SEND_CMDID);
2580 
2581 	if (ret) {
2582 		ath11k_warn(ar->ab,
2583 			    "failed to send WMI_DELBA_SEND_CMDID cmd\n");
2584 		dev_kfree_skb(skb);
2585 	}
2586 
2587 	return ret;
2588 }
2589 
2590 int ath11k_wmi_addba_set_resp(struct ath11k *ar, u32 vdev_id, const u8 *mac,
2591 			      u32 tid, u32 status)
2592 {
2593 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2594 	struct wmi_addba_setresponse_cmd *cmd;
2595 	struct sk_buff *skb;
2596 	int ret;
2597 
2598 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2599 	if (!skb)
2600 		return -ENOMEM;
2601 
2602 	cmd = (struct wmi_addba_setresponse_cmd *)skb->data;
2603 	cmd->tlv_header =
2604 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ADDBA_SETRESPONSE_CMD) |
2605 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2606 	cmd->vdev_id = vdev_id;
2607 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
2608 	cmd->tid = tid;
2609 	cmd->statuscode = status;
2610 
2611 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2612 		   "wmi addba set resp vdev_id 0x%X mac_addr %pM tid %u status %u\n",
2613 		   vdev_id, mac, tid, status);
2614 
2615 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_ADDBA_SET_RESP_CMDID);
2616 
2617 	if (ret) {
2618 		ath11k_warn(ar->ab,
2619 			    "failed to send WMI_ADDBA_SET_RESP_CMDID cmd\n");
2620 		dev_kfree_skb(skb);
2621 	}
2622 
2623 	return ret;
2624 }
2625 
2626 int ath11k_wmi_addba_send(struct ath11k *ar, u32 vdev_id, const u8 *mac,
2627 			  u32 tid, u32 buf_size)
2628 {
2629 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2630 	struct wmi_addba_send_cmd *cmd;
2631 	struct sk_buff *skb;
2632 	int ret;
2633 
2634 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2635 	if (!skb)
2636 		return -ENOMEM;
2637 
2638 	cmd = (struct wmi_addba_send_cmd *)skb->data;
2639 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ADDBA_SEND_CMD) |
2640 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2641 	cmd->vdev_id = vdev_id;
2642 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
2643 	cmd->tid = tid;
2644 	cmd->buffersize = buf_size;
2645 
2646 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2647 		   "wmi addba send vdev_id 0x%X mac_addr %pM tid %u bufsize %u\n",
2648 		   vdev_id, mac, tid, buf_size);
2649 
2650 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_ADDBA_SEND_CMDID);
2651 
2652 	if (ret) {
2653 		ath11k_warn(ar->ab,
2654 			    "failed to send WMI_ADDBA_SEND_CMDID cmd\n");
2655 		dev_kfree_skb(skb);
2656 	}
2657 
2658 	return ret;
2659 }
2660 
2661 int ath11k_wmi_addba_clear_resp(struct ath11k *ar, u32 vdev_id, const u8 *mac)
2662 {
2663 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2664 	struct wmi_addba_clear_resp_cmd *cmd;
2665 	struct sk_buff *skb;
2666 	int ret;
2667 
2668 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2669 	if (!skb)
2670 		return -ENOMEM;
2671 
2672 	cmd = (struct wmi_addba_clear_resp_cmd *)skb->data;
2673 	cmd->tlv_header =
2674 		FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ADDBA_CLEAR_RESP_CMD) |
2675 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2676 	cmd->vdev_id = vdev_id;
2677 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
2678 
2679 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2680 		   "wmi addba clear resp vdev_id 0x%X mac_addr %pM\n",
2681 		   vdev_id, mac);
2682 
2683 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_ADDBA_CLEAR_RESP_CMDID);
2684 
2685 	if (ret) {
2686 		ath11k_warn(ar->ab,
2687 			    "failed to send WMI_ADDBA_CLEAR_RESP_CMDID cmd\n");
2688 		dev_kfree_skb(skb);
2689 	}
2690 
2691 	return ret;
2692 }
2693 
2694 int ath11k_wmi_pdev_peer_pktlog_filter(struct ath11k *ar, u8 *addr, u8 enable)
2695 {
2696 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2697 	struct wmi_pdev_pktlog_filter_cmd *cmd;
2698 	struct wmi_pdev_pktlog_filter_info *info;
2699 	struct sk_buff *skb;
2700 	struct wmi_tlv *tlv;
2701 	void *ptr;
2702 	int ret, len;
2703 
2704 	len = sizeof(*cmd) + sizeof(*info) + TLV_HDR_SIZE;
2705 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2706 	if (!skb)
2707 		return -ENOMEM;
2708 
2709 	cmd = (struct wmi_pdev_pktlog_filter_cmd *)skb->data;
2710 
2711 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_PEER_PKTLOG_FILTER_CMD) |
2712 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2713 
2714 	cmd->pdev_id = DP_HW2SW_MACID(ar->pdev->pdev_id);
2715 	cmd->num_mac = 1;
2716 	cmd->enable = enable;
2717 
2718 	ptr = skb->data + sizeof(*cmd);
2719 
2720 	tlv = ptr;
2721 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
2722 		      FIELD_PREP(WMI_TLV_LEN, sizeof(*info));
2723 
2724 	ptr += TLV_HDR_SIZE;
2725 	info = ptr;
2726 
2727 	ether_addr_copy(info->peer_macaddr.addr, addr);
2728 	info->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_PEER_PKTLOG_FILTER_INFO) |
2729 			   FIELD_PREP(WMI_TLV_LEN,
2730 				      sizeof(*info) - TLV_HDR_SIZE);
2731 
2732 	ret = ath11k_wmi_cmd_send(wmi, skb,
2733 				  WMI_PDEV_PKTLOG_FILTER_CMDID);
2734 	if (ret) {
2735 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_PKTLOG_ENABLE_CMDID\n");
2736 		dev_kfree_skb(skb);
2737 	}
2738 
2739 	return ret;
2740 }
2741 
2742 int
2743 ath11k_wmi_send_init_country_cmd(struct ath11k *ar,
2744 				 struct wmi_init_country_params init_cc_params)
2745 {
2746 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2747 	struct wmi_init_country_cmd *cmd;
2748 	struct sk_buff *skb;
2749 	int ret;
2750 
2751 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2752 	if (!skb)
2753 		return -ENOMEM;
2754 
2755 	cmd = (struct wmi_init_country_cmd *)skb->data;
2756 	cmd->tlv_header =
2757 		FIELD_PREP(WMI_TLV_TAG,
2758 			   WMI_TAG_SET_INIT_COUNTRY_CMD) |
2759 		FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2760 
2761 	cmd->pdev_id = ar->pdev->pdev_id;
2762 
2763 	switch (init_cc_params.flags) {
2764 	case ALPHA_IS_SET:
2765 		cmd->init_cc_type = WMI_COUNTRY_INFO_TYPE_ALPHA;
2766 		memcpy((u8 *)&cmd->cc_info.alpha2,
2767 		       init_cc_params.cc_info.alpha2, 3);
2768 		break;
2769 	case CC_IS_SET:
2770 		cmd->init_cc_type = WMI_COUNTRY_INFO_TYPE_COUNTRY_CODE;
2771 		cmd->cc_info.country_code = init_cc_params.cc_info.country_code;
2772 		break;
2773 	case REGDMN_IS_SET:
2774 		cmd->init_cc_type = WMI_COUNTRY_INFO_TYPE_REGDOMAIN;
2775 		cmd->cc_info.regdom_id = init_cc_params.cc_info.regdom_id;
2776 		break;
2777 	default:
2778 		ret = -EINVAL;
2779 		goto out;
2780 	}
2781 
2782 	ret = ath11k_wmi_cmd_send(wmi, skb,
2783 				  WMI_SET_INIT_COUNTRY_CMDID);
2784 
2785 out:
2786 	if (ret) {
2787 		ath11k_warn(ar->ab,
2788 			    "failed to send WMI_SET_INIT_COUNTRY CMD :%d\n",
2789 			    ret);
2790 		dev_kfree_skb(skb);
2791 	}
2792 
2793 	return ret;
2794 }
2795 
2796 int
2797 ath11k_wmi_send_thermal_mitigation_param_cmd(struct ath11k *ar,
2798 					     struct thermal_mitigation_params *param)
2799 {
2800 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2801 	struct wmi_therm_throt_config_request_cmd *cmd;
2802 	struct wmi_therm_throt_level_config_info *lvl_conf;
2803 	struct wmi_tlv *tlv;
2804 	struct sk_buff *skb;
2805 	int i, ret, len;
2806 
2807 	len = sizeof(*cmd) + TLV_HDR_SIZE +
2808 	      THERMAL_LEVELS * sizeof(struct wmi_therm_throt_level_config_info);
2809 
2810 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2811 	if (!skb)
2812 		return -ENOMEM;
2813 
2814 	cmd = (struct wmi_therm_throt_config_request_cmd *)skb->data;
2815 
2816 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_THERM_THROT_CONFIG_REQUEST) |
2817 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2818 
2819 	cmd->pdev_id = ar->pdev->pdev_id;
2820 	cmd->enable = param->enable;
2821 	cmd->dc = param->dc;
2822 	cmd->dc_per_event = param->dc_per_event;
2823 	cmd->therm_throt_levels = THERMAL_LEVELS;
2824 
2825 	tlv = (struct wmi_tlv *)(skb->data + sizeof(*cmd));
2826 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
2827 		      FIELD_PREP(WMI_TLV_LEN,
2828 				 (THERMAL_LEVELS *
2829 				  sizeof(struct wmi_therm_throt_level_config_info)));
2830 
2831 	lvl_conf = (struct wmi_therm_throt_level_config_info *)(skb->data +
2832 								sizeof(*cmd) +
2833 								TLV_HDR_SIZE);
2834 	for (i = 0; i < THERMAL_LEVELS; i++) {
2835 		lvl_conf->tlv_header =
2836 			FIELD_PREP(WMI_TLV_TAG, WMI_TAG_THERM_THROT_LEVEL_CONFIG_INFO) |
2837 			FIELD_PREP(WMI_TLV_LEN, sizeof(*lvl_conf) - TLV_HDR_SIZE);
2838 
2839 		lvl_conf->temp_lwm = param->levelconf[i].tmplwm;
2840 		lvl_conf->temp_hwm = param->levelconf[i].tmphwm;
2841 		lvl_conf->dc_off_percent = param->levelconf[i].dcoffpercent;
2842 		lvl_conf->prio = param->levelconf[i].priority;
2843 		lvl_conf++;
2844 	}
2845 
2846 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_THERM_THROT_SET_CONF_CMDID);
2847 	if (ret) {
2848 		ath11k_warn(ar->ab, "failed to send THERM_THROT_SET_CONF cmd\n");
2849 		dev_kfree_skb(skb);
2850 	}
2851 
2852 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
2853 		   "WMI vdev set thermal throt pdev_id %d enable %d dc %d dc_per_event %x levels %d\n",
2854 		   ar->pdev->pdev_id, param->enable, param->dc,
2855 		   param->dc_per_event, THERMAL_LEVELS);
2856 
2857 	return ret;
2858 }
2859 
2860 int ath11k_wmi_pdev_pktlog_enable(struct ath11k *ar, u32 pktlog_filter)
2861 {
2862 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2863 	struct wmi_pktlog_enable_cmd *cmd;
2864 	struct sk_buff *skb;
2865 	int ret;
2866 
2867 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2868 	if (!skb)
2869 		return -ENOMEM;
2870 
2871 	cmd = (struct wmi_pktlog_enable_cmd *)skb->data;
2872 
2873 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_PKTLOG_ENABLE_CMD) |
2874 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2875 
2876 	cmd->pdev_id = DP_HW2SW_MACID(ar->pdev->pdev_id);
2877 	cmd->evlist = pktlog_filter;
2878 	cmd->enable = ATH11K_WMI_PKTLOG_ENABLE_FORCE;
2879 
2880 	ret = ath11k_wmi_cmd_send(wmi, skb,
2881 				  WMI_PDEV_PKTLOG_ENABLE_CMDID);
2882 	if (ret) {
2883 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_PKTLOG_ENABLE_CMDID\n");
2884 		dev_kfree_skb(skb);
2885 	}
2886 
2887 	return ret;
2888 }
2889 
2890 int ath11k_wmi_pdev_pktlog_disable(struct ath11k *ar)
2891 {
2892 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2893 	struct wmi_pktlog_disable_cmd *cmd;
2894 	struct sk_buff *skb;
2895 	int ret;
2896 
2897 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2898 	if (!skb)
2899 		return -ENOMEM;
2900 
2901 	cmd = (struct wmi_pktlog_disable_cmd *)skb->data;
2902 
2903 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_PKTLOG_DISABLE_CMD) |
2904 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
2905 
2906 	cmd->pdev_id = DP_HW2SW_MACID(ar->pdev->pdev_id);
2907 
2908 	ret = ath11k_wmi_cmd_send(wmi, skb,
2909 				  WMI_PDEV_PKTLOG_DISABLE_CMDID);
2910 	if (ret) {
2911 		ath11k_warn(ar->ab, "failed to send WMI_PDEV_PKTLOG_ENABLE_CMDID\n");
2912 		dev_kfree_skb(skb);
2913 	}
2914 
2915 	return ret;
2916 }
2917 
2918 int
2919 ath11k_wmi_send_twt_enable_cmd(struct ath11k *ar, u32 pdev_id)
2920 {
2921 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2922 	struct ath11k_base *ab = wmi->wmi_ab->ab;
2923 	struct wmi_twt_enable_params_cmd *cmd;
2924 	struct sk_buff *skb;
2925 	int ret, len;
2926 
2927 	len = sizeof(*cmd);
2928 
2929 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2930 	if (!skb)
2931 		return -ENOMEM;
2932 
2933 	cmd = (struct wmi_twt_enable_params_cmd *)skb->data;
2934 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_TWT_ENABLE_CMD) |
2935 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
2936 	cmd->pdev_id = pdev_id;
2937 	cmd->sta_cong_timer_ms = ATH11K_TWT_DEF_STA_CONG_TIMER_MS;
2938 	cmd->default_slot_size = ATH11K_TWT_DEF_DEFAULT_SLOT_SIZE;
2939 	cmd->congestion_thresh_setup = ATH11K_TWT_DEF_CONGESTION_THRESH_SETUP;
2940 	cmd->congestion_thresh_teardown =
2941 		ATH11K_TWT_DEF_CONGESTION_THRESH_TEARDOWN;
2942 	cmd->congestion_thresh_critical =
2943 		ATH11K_TWT_DEF_CONGESTION_THRESH_CRITICAL;
2944 	cmd->interference_thresh_teardown =
2945 		ATH11K_TWT_DEF_INTERFERENCE_THRESH_TEARDOWN;
2946 	cmd->interference_thresh_setup =
2947 		ATH11K_TWT_DEF_INTERFERENCE_THRESH_SETUP;
2948 	cmd->min_no_sta_setup = ATH11K_TWT_DEF_MIN_NO_STA_SETUP;
2949 	cmd->min_no_sta_teardown = ATH11K_TWT_DEF_MIN_NO_STA_TEARDOWN;
2950 	cmd->no_of_bcast_mcast_slots = ATH11K_TWT_DEF_NO_OF_BCAST_MCAST_SLOTS;
2951 	cmd->min_no_twt_slots = ATH11K_TWT_DEF_MIN_NO_TWT_SLOTS;
2952 	cmd->max_no_sta_twt = ATH11K_TWT_DEF_MAX_NO_STA_TWT;
2953 	cmd->mode_check_interval = ATH11K_TWT_DEF_MODE_CHECK_INTERVAL;
2954 	cmd->add_sta_slot_interval = ATH11K_TWT_DEF_ADD_STA_SLOT_INTERVAL;
2955 	cmd->remove_sta_slot_interval =
2956 		ATH11K_TWT_DEF_REMOVE_STA_SLOT_INTERVAL;
2957 	/* TODO add MBSSID support */
2958 	cmd->mbss_support = 0;
2959 
2960 	ret = ath11k_wmi_cmd_send(wmi, skb,
2961 				  WMI_TWT_ENABLE_CMDID);
2962 	if (ret) {
2963 		ath11k_warn(ab, "Failed to send WMI_TWT_ENABLE_CMDID");
2964 		dev_kfree_skb(skb);
2965 	}
2966 	return ret;
2967 }
2968 
2969 int
2970 ath11k_wmi_send_twt_disable_cmd(struct ath11k *ar, u32 pdev_id)
2971 {
2972 	struct ath11k_pdev_wmi *wmi = ar->wmi;
2973 	struct ath11k_base *ab = wmi->wmi_ab->ab;
2974 	struct wmi_twt_disable_params_cmd *cmd;
2975 	struct sk_buff *skb;
2976 	int ret, len;
2977 
2978 	len = sizeof(*cmd);
2979 
2980 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
2981 	if (!skb)
2982 		return -ENOMEM;
2983 
2984 	cmd = (struct wmi_twt_disable_params_cmd *)skb->data;
2985 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_TWT_DISABLE_CMD) |
2986 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
2987 	cmd->pdev_id = pdev_id;
2988 
2989 	ret = ath11k_wmi_cmd_send(wmi, skb,
2990 				  WMI_TWT_DISABLE_CMDID);
2991 	if (ret) {
2992 		ath11k_warn(ab, "Failed to send WMI_TWT_DISABLE_CMDID");
2993 		dev_kfree_skb(skb);
2994 	}
2995 	return ret;
2996 }
2997 
2998 int
2999 ath11k_wmi_send_obss_spr_cmd(struct ath11k *ar, u32 vdev_id,
3000 			     struct ieee80211_he_obss_pd *he_obss_pd)
3001 {
3002 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3003 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3004 	struct wmi_obss_spatial_reuse_params_cmd *cmd;
3005 	struct sk_buff *skb;
3006 	int ret, len;
3007 
3008 	len = sizeof(*cmd);
3009 
3010 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3011 	if (!skb)
3012 		return -ENOMEM;
3013 
3014 	cmd = (struct wmi_obss_spatial_reuse_params_cmd *)skb->data;
3015 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3016 				     WMI_TAG_OBSS_SPATIAL_REUSE_SET_CMD) |
3017 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3018 	cmd->vdev_id = vdev_id;
3019 	cmd->enable = he_obss_pd->enable;
3020 	cmd->obss_min = he_obss_pd->min_offset;
3021 	cmd->obss_max = he_obss_pd->max_offset;
3022 
3023 	ret = ath11k_wmi_cmd_send(wmi, skb,
3024 				  WMI_PDEV_OBSS_PD_SPATIAL_REUSE_CMDID);
3025 	if (ret) {
3026 		ath11k_warn(ab,
3027 			    "Failed to send WMI_PDEV_OBSS_PD_SPATIAL_REUSE_CMDID");
3028 		dev_kfree_skb(skb);
3029 	}
3030 	return ret;
3031 }
3032 
3033 int
3034 ath11k_wmi_pdev_set_srg_bss_color_bitmap(struct ath11k *ar, u32 *bitmap)
3035 {
3036 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3037 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3038 	struct wmi_pdev_obss_pd_bitmap_cmd *cmd;
3039 	struct sk_buff *skb;
3040 	int ret, len;
3041 
3042 	len = sizeof(*cmd);
3043 
3044 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3045 	if (!skb)
3046 		return -ENOMEM;
3047 
3048 	cmd = (struct wmi_pdev_obss_pd_bitmap_cmd *)skb->data;
3049 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3050 				     WMI_TAG_PDEV_SRG_BSS_COLOR_BITMAP_CMD) |
3051 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3052 	cmd->pdev_id = ar->pdev->pdev_id;
3053 	memcpy(cmd->bitmap, bitmap, sizeof(cmd->bitmap));
3054 
3055 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3056 		   "obss pd pdev_id %d bss color bitmap %08x %08x\n",
3057 		   cmd->pdev_id, cmd->bitmap[0], cmd->bitmap[1]);
3058 
3059 	ret = ath11k_wmi_cmd_send(wmi, skb,
3060 				  WMI_PDEV_SET_SRG_BSS_COLOR_BITMAP_CMDID);
3061 	if (ret) {
3062 		ath11k_warn(ab,
3063 			    "failed to send WMI_PDEV_SET_SRG_BSS_COLOR_BITMAP_CMDID");
3064 		dev_kfree_skb(skb);
3065 	}
3066 
3067 	return ret;
3068 }
3069 
3070 int
3071 ath11k_wmi_pdev_set_srg_patial_bssid_bitmap(struct ath11k *ar, u32 *bitmap)
3072 {
3073 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3074 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3075 	struct wmi_pdev_obss_pd_bitmap_cmd *cmd;
3076 	struct sk_buff *skb;
3077 	int ret, len;
3078 
3079 	len = sizeof(*cmd);
3080 
3081 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3082 	if (!skb)
3083 		return -ENOMEM;
3084 
3085 	cmd = (struct wmi_pdev_obss_pd_bitmap_cmd *)skb->data;
3086 	cmd->tlv_header =
3087 		FIELD_PREP(WMI_TLV_TAG,
3088 			   WMI_TAG_PDEV_SRG_PARTIAL_BSSID_BITMAP_CMD) |
3089 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3090 	cmd->pdev_id = ar->pdev->pdev_id;
3091 	memcpy(cmd->bitmap, bitmap, sizeof(cmd->bitmap));
3092 
3093 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3094 		   "obss pd pdev_id %d partial bssid bitmap %08x %08x\n",
3095 		   cmd->pdev_id, cmd->bitmap[0], cmd->bitmap[1]);
3096 
3097 	ret = ath11k_wmi_cmd_send(wmi, skb,
3098 				  WMI_PDEV_SET_SRG_PARTIAL_BSSID_BITMAP_CMDID);
3099 	if (ret) {
3100 		ath11k_warn(ab,
3101 			    "failed to send WMI_PDEV_SET_SRG_PARTIAL_BSSID_BITMAP_CMDID");
3102 		dev_kfree_skb(skb);
3103 	}
3104 
3105 	return ret;
3106 }
3107 
3108 int
3109 ath11k_wmi_pdev_srg_obss_color_enable_bitmap(struct ath11k *ar, u32 *bitmap)
3110 {
3111 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3112 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3113 	struct wmi_pdev_obss_pd_bitmap_cmd *cmd;
3114 	struct sk_buff *skb;
3115 	int ret, len;
3116 
3117 	len = sizeof(*cmd);
3118 
3119 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3120 	if (!skb)
3121 		return -ENOMEM;
3122 
3123 	cmd = (struct wmi_pdev_obss_pd_bitmap_cmd *)skb->data;
3124 	cmd->tlv_header =
3125 		FIELD_PREP(WMI_TLV_TAG,
3126 			   WMI_TAG_PDEV_SRG_OBSS_COLOR_ENABLE_BITMAP_CMD) |
3127 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3128 	cmd->pdev_id = ar->pdev->pdev_id;
3129 	memcpy(cmd->bitmap, bitmap, sizeof(cmd->bitmap));
3130 
3131 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3132 		   "obss pd srg pdev_id %d bss color enable bitmap %08x %08x\n",
3133 		   cmd->pdev_id, cmd->bitmap[0], cmd->bitmap[1]);
3134 
3135 	ret = ath11k_wmi_cmd_send(wmi, skb,
3136 				  WMI_PDEV_SET_SRG_OBSS_COLOR_ENABLE_BITMAP_CMDID);
3137 	if (ret) {
3138 		ath11k_warn(ab,
3139 			    "failed to send WMI_PDEV_SET_SRG_OBSS_COLOR_ENABLE_BITMAP_CMDID");
3140 		dev_kfree_skb(skb);
3141 	}
3142 
3143 	return ret;
3144 }
3145 
3146 int
3147 ath11k_wmi_pdev_srg_obss_bssid_enable_bitmap(struct ath11k *ar, u32 *bitmap)
3148 {
3149 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3150 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3151 	struct wmi_pdev_obss_pd_bitmap_cmd *cmd;
3152 	struct sk_buff *skb;
3153 	int ret, len;
3154 
3155 	len = sizeof(*cmd);
3156 
3157 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3158 	if (!skb)
3159 		return -ENOMEM;
3160 
3161 	cmd = (struct wmi_pdev_obss_pd_bitmap_cmd *)skb->data;
3162 	cmd->tlv_header =
3163 		FIELD_PREP(WMI_TLV_TAG,
3164 			   WMI_TAG_PDEV_SRG_OBSS_BSSID_ENABLE_BITMAP_CMD) |
3165 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3166 	cmd->pdev_id = ar->pdev->pdev_id;
3167 	memcpy(cmd->bitmap, bitmap, sizeof(cmd->bitmap));
3168 
3169 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3170 		   "obss pd srg pdev_id %d bssid enable bitmap %08x %08x\n",
3171 		   cmd->pdev_id, cmd->bitmap[0], cmd->bitmap[1]);
3172 
3173 	ret = ath11k_wmi_cmd_send(wmi, skb,
3174 				  WMI_PDEV_SET_SRG_OBSS_BSSID_ENABLE_BITMAP_CMDID);
3175 	if (ret) {
3176 		ath11k_warn(ab,
3177 			    "failed to send WMI_PDEV_SET_SRG_OBSS_BSSID_ENABLE_BITMAP_CMDID");
3178 		dev_kfree_skb(skb);
3179 	}
3180 
3181 	return ret;
3182 }
3183 
3184 int
3185 ath11k_wmi_pdev_non_srg_obss_color_enable_bitmap(struct ath11k *ar, u32 *bitmap)
3186 {
3187 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3188 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3189 	struct wmi_pdev_obss_pd_bitmap_cmd *cmd;
3190 	struct sk_buff *skb;
3191 	int ret, len;
3192 
3193 	len = sizeof(*cmd);
3194 
3195 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3196 	if (!skb)
3197 		return -ENOMEM;
3198 
3199 	cmd = (struct wmi_pdev_obss_pd_bitmap_cmd *)skb->data;
3200 	cmd->tlv_header =
3201 		FIELD_PREP(WMI_TLV_TAG,
3202 			   WMI_TAG_PDEV_NON_SRG_OBSS_COLOR_ENABLE_BITMAP_CMD) |
3203 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3204 	cmd->pdev_id = ar->pdev->pdev_id;
3205 	memcpy(cmd->bitmap, bitmap, sizeof(cmd->bitmap));
3206 
3207 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3208 		   "obss pd non_srg pdev_id %d bss color enable bitmap %08x %08x\n",
3209 		   cmd->pdev_id, cmd->bitmap[0], cmd->bitmap[1]);
3210 
3211 	ret = ath11k_wmi_cmd_send(wmi, skb,
3212 				  WMI_PDEV_SET_NON_SRG_OBSS_COLOR_ENABLE_BITMAP_CMDID);
3213 	if (ret) {
3214 		ath11k_warn(ab,
3215 			    "failed to send WMI_PDEV_SET_NON_SRG_OBSS_COLOR_ENABLE_BITMAP_CMDID");
3216 		dev_kfree_skb(skb);
3217 	}
3218 
3219 	return ret;
3220 }
3221 
3222 int
3223 ath11k_wmi_pdev_non_srg_obss_bssid_enable_bitmap(struct ath11k *ar, u32 *bitmap)
3224 {
3225 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3226 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3227 	struct wmi_pdev_obss_pd_bitmap_cmd *cmd;
3228 	struct sk_buff *skb;
3229 	int ret, len;
3230 
3231 	len = sizeof(*cmd);
3232 
3233 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3234 	if (!skb)
3235 		return -ENOMEM;
3236 
3237 	cmd = (struct wmi_pdev_obss_pd_bitmap_cmd *)skb->data;
3238 	cmd->tlv_header =
3239 		FIELD_PREP(WMI_TLV_TAG,
3240 			   WMI_TAG_PDEV_NON_SRG_OBSS_BSSID_ENABLE_BITMAP_CMD) |
3241 		FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3242 	cmd->pdev_id = ar->pdev->pdev_id;
3243 	memcpy(cmd->bitmap, bitmap, sizeof(cmd->bitmap));
3244 
3245 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3246 		   "obss pd non_srg pdev_id %d bssid enable bitmap %08x %08x\n",
3247 		   cmd->pdev_id, cmd->bitmap[0], cmd->bitmap[1]);
3248 
3249 	ret = ath11k_wmi_cmd_send(wmi, skb,
3250 				  WMI_PDEV_SET_NON_SRG_OBSS_BSSID_ENABLE_BITMAP_CMDID);
3251 	if (ret) {
3252 		ath11k_warn(ab,
3253 			    "failed to send WMI_PDEV_SET_NON_SRG_OBSS_BSSID_ENABLE_BITMAP_CMDID");
3254 		dev_kfree_skb(skb);
3255 	}
3256 
3257 	return ret;
3258 }
3259 
3260 int
3261 ath11k_wmi_send_obss_color_collision_cfg_cmd(struct ath11k *ar, u32 vdev_id,
3262 					     u8 bss_color, u32 period,
3263 					     bool enable)
3264 {
3265 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3266 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3267 	struct wmi_obss_color_collision_cfg_params_cmd *cmd;
3268 	struct sk_buff *skb;
3269 	int ret, len;
3270 
3271 	len = sizeof(*cmd);
3272 
3273 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3274 	if (!skb)
3275 		return -ENOMEM;
3276 
3277 	cmd = (struct wmi_obss_color_collision_cfg_params_cmd *)skb->data;
3278 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3279 				     WMI_TAG_OBSS_COLOR_COLLISION_DET_CONFIG) |
3280 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3281 	cmd->vdev_id = vdev_id;
3282 	cmd->evt_type = enable ? ATH11K_OBSS_COLOR_COLLISION_DETECTION :
3283 				 ATH11K_OBSS_COLOR_COLLISION_DETECTION_DISABLE;
3284 	cmd->current_bss_color = bss_color;
3285 	cmd->detection_period_ms = period;
3286 	cmd->scan_period_ms = ATH11K_BSS_COLOR_COLLISION_SCAN_PERIOD_MS;
3287 	cmd->free_slot_expiry_time_ms = 0;
3288 	cmd->flags = 0;
3289 
3290 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3291 		   "wmi_send_obss_color_collision_cfg id %d type %d bss_color %d detect_period %d scan_period %d\n",
3292 		   cmd->vdev_id, cmd->evt_type, cmd->current_bss_color,
3293 		   cmd->detection_period_ms, cmd->scan_period_ms);
3294 
3295 	ret = ath11k_wmi_cmd_send(wmi, skb,
3296 				  WMI_OBSS_COLOR_COLLISION_DET_CONFIG_CMDID);
3297 	if (ret) {
3298 		ath11k_warn(ab, "Failed to send WMI_OBSS_COLOR_COLLISION_DET_CONFIG_CMDID");
3299 		dev_kfree_skb(skb);
3300 	}
3301 	return ret;
3302 }
3303 
3304 int ath11k_wmi_send_bss_color_change_enable_cmd(struct ath11k *ar, u32 vdev_id,
3305 						bool enable)
3306 {
3307 	struct ath11k_pdev_wmi *wmi = ar->wmi;
3308 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3309 	struct wmi_bss_color_change_enable_params_cmd *cmd;
3310 	struct sk_buff *skb;
3311 	int ret, len;
3312 
3313 	len = sizeof(*cmd);
3314 
3315 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3316 	if (!skb)
3317 		return -ENOMEM;
3318 
3319 	cmd = (struct wmi_bss_color_change_enable_params_cmd *)skb->data;
3320 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_BSS_COLOR_CHANGE_ENABLE) |
3321 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3322 	cmd->vdev_id = vdev_id;
3323 	cmd->enable = enable ? 1 : 0;
3324 
3325 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3326 		   "wmi_send_bss_color_change_enable id %d enable %d\n",
3327 		   cmd->vdev_id, cmd->enable);
3328 
3329 	ret = ath11k_wmi_cmd_send(wmi, skb,
3330 				  WMI_BSS_COLOR_CHANGE_ENABLE_CMDID);
3331 	if (ret) {
3332 		ath11k_warn(ab, "Failed to send WMI_BSS_COLOR_CHANGE_ENABLE_CMDID");
3333 		dev_kfree_skb(skb);
3334 	}
3335 	return ret;
3336 }
3337 
3338 int ath11k_wmi_fils_discovery_tmpl(struct ath11k *ar, u32 vdev_id,
3339 				   struct sk_buff *tmpl)
3340 {
3341 	struct wmi_tlv *tlv;
3342 	struct sk_buff *skb;
3343 	void *ptr;
3344 	int ret, len;
3345 	size_t aligned_len;
3346 	struct wmi_fils_discovery_tmpl_cmd *cmd;
3347 
3348 	aligned_len = roundup(tmpl->len, 4);
3349 	len = sizeof(*cmd) + TLV_HDR_SIZE + aligned_len;
3350 
3351 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3352 		   "WMI vdev %i set FILS discovery template\n", vdev_id);
3353 
3354 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
3355 	if (!skb)
3356 		return -ENOMEM;
3357 
3358 	cmd = (struct wmi_fils_discovery_tmpl_cmd *)skb->data;
3359 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3360 				     WMI_TAG_FILS_DISCOVERY_TMPL_CMD) |
3361 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3362 	cmd->vdev_id = vdev_id;
3363 	cmd->buf_len = tmpl->len;
3364 	ptr = skb->data + sizeof(*cmd);
3365 
3366 	tlv = ptr;
3367 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
3368 		      FIELD_PREP(WMI_TLV_LEN, aligned_len);
3369 	memcpy(tlv->value, tmpl->data, tmpl->len);
3370 
3371 	ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_FILS_DISCOVERY_TMPL_CMDID);
3372 	if (ret) {
3373 		ath11k_warn(ar->ab,
3374 			    "WMI vdev %i failed to send FILS discovery template command\n",
3375 			    vdev_id);
3376 		dev_kfree_skb(skb);
3377 	}
3378 	return ret;
3379 }
3380 
3381 int ath11k_wmi_probe_resp_tmpl(struct ath11k *ar, u32 vdev_id,
3382 			       struct sk_buff *tmpl)
3383 {
3384 	struct wmi_probe_tmpl_cmd *cmd;
3385 	struct wmi_bcn_prb_info *probe_info;
3386 	struct wmi_tlv *tlv;
3387 	struct sk_buff *skb;
3388 	void *ptr;
3389 	int ret, len;
3390 	size_t aligned_len = roundup(tmpl->len, 4);
3391 
3392 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3393 		   "WMI vdev %i set probe response template\n", vdev_id);
3394 
3395 	len = sizeof(*cmd) + sizeof(*probe_info) + TLV_HDR_SIZE + aligned_len;
3396 
3397 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
3398 	if (!skb)
3399 		return -ENOMEM;
3400 
3401 	cmd = (struct wmi_probe_tmpl_cmd *)skb->data;
3402 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PRB_TMPL_CMD) |
3403 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3404 	cmd->vdev_id = vdev_id;
3405 	cmd->buf_len = tmpl->len;
3406 
3407 	ptr = skb->data + sizeof(*cmd);
3408 
3409 	probe_info = ptr;
3410 	len = sizeof(*probe_info);
3411 	probe_info->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3412 					    WMI_TAG_BCN_PRB_INFO) |
3413 				 FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3414 	probe_info->caps = 0;
3415 	probe_info->erp = 0;
3416 
3417 	ptr += sizeof(*probe_info);
3418 
3419 	tlv = ptr;
3420 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_BYTE) |
3421 		      FIELD_PREP(WMI_TLV_LEN, aligned_len);
3422 	memcpy(tlv->value, tmpl->data, tmpl->len);
3423 
3424 	ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_PRB_TMPL_CMDID);
3425 	if (ret) {
3426 		ath11k_warn(ar->ab,
3427 			    "WMI vdev %i failed to send probe response template command\n",
3428 			    vdev_id);
3429 		dev_kfree_skb(skb);
3430 	}
3431 	return ret;
3432 }
3433 
3434 int ath11k_wmi_fils_discovery(struct ath11k *ar, u32 vdev_id, u32 interval,
3435 			      bool unsol_bcast_probe_resp_enabled)
3436 {
3437 	struct sk_buff *skb;
3438 	int ret, len;
3439 	struct wmi_fils_discovery_cmd *cmd;
3440 
3441 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3442 		   "WMI vdev %i set %s interval to %u TU\n",
3443 		   vdev_id, unsol_bcast_probe_resp_enabled ?
3444 		   "unsolicited broadcast probe response" : "FILS discovery",
3445 		   interval);
3446 
3447 	len = sizeof(*cmd);
3448 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
3449 	if (!skb)
3450 		return -ENOMEM;
3451 
3452 	cmd = (struct wmi_fils_discovery_cmd *)skb->data;
3453 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ENABLE_FILS_CMD) |
3454 			  FIELD_PREP(WMI_TLV_LEN, len - TLV_HDR_SIZE);
3455 	cmd->vdev_id = vdev_id;
3456 	cmd->interval = interval;
3457 	cmd->config = unsol_bcast_probe_resp_enabled;
3458 
3459 	ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_ENABLE_FILS_CMDID);
3460 	if (ret) {
3461 		ath11k_warn(ar->ab,
3462 			    "WMI vdev %i failed to send FILS discovery enable/disable command\n",
3463 			    vdev_id);
3464 		dev_kfree_skb(skb);
3465 	}
3466 	return ret;
3467 }
3468 
3469 static void
3470 ath11k_wmi_obss_color_collision_event(struct ath11k_base *ab, struct sk_buff *skb)
3471 {
3472 	const void **tb;
3473 	const struct wmi_obss_color_collision_event *ev;
3474 	struct ath11k_vif *arvif;
3475 	int ret;
3476 
3477 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
3478 	if (IS_ERR(tb)) {
3479 		ret = PTR_ERR(tb);
3480 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
3481 		return;
3482 	}
3483 
3484 	ev = tb[WMI_TAG_OBSS_COLOR_COLLISION_EVT];
3485 	if (!ev) {
3486 		ath11k_warn(ab, "failed to fetch obss color collision ev");
3487 		goto exit;
3488 	}
3489 
3490 	arvif = ath11k_mac_get_arvif_by_vdev_id(ab, ev->vdev_id);
3491 	if (!arvif) {
3492 		ath11k_warn(ab, "failed to find arvif with vedv id %d in obss_color_collision_event\n",
3493 			    ev->vdev_id);
3494 		goto exit;
3495 	}
3496 
3497 	switch (ev->evt_type) {
3498 	case WMI_BSS_COLOR_COLLISION_DETECTION:
3499 		ieeee80211_obss_color_collision_notify(arvif->vif, ev->obss_color_bitmap);
3500 		ath11k_dbg(ab, ATH11K_DBG_WMI,
3501 			   "OBSS color collision detected vdev:%d, event:%d, bitmap:%08llx\n",
3502 			   ev->vdev_id, ev->evt_type, ev->obss_color_bitmap);
3503 		break;
3504 	case WMI_BSS_COLOR_COLLISION_DISABLE:
3505 	case WMI_BSS_COLOR_FREE_SLOT_TIMER_EXPIRY:
3506 	case WMI_BSS_COLOR_FREE_SLOT_AVAILABLE:
3507 		break;
3508 	default:
3509 		ath11k_warn(ab, "received unknown obss color collision detetction event\n");
3510 	}
3511 
3512 exit:
3513 	kfree(tb);
3514 }
3515 
3516 static void
3517 ath11k_fill_band_to_mac_param(struct ath11k_base  *soc,
3518 			      struct wmi_host_pdev_band_to_mac *band_to_mac)
3519 {
3520 	u8 i;
3521 	struct ath11k_hal_reg_capabilities_ext *hal_reg_cap;
3522 	struct ath11k_pdev *pdev;
3523 
3524 	for (i = 0; i < soc->num_radios; i++) {
3525 		pdev = &soc->pdevs[i];
3526 		hal_reg_cap = &soc->hal_reg_cap[i];
3527 		band_to_mac[i].pdev_id = pdev->pdev_id;
3528 
3529 		switch (pdev->cap.supported_bands) {
3530 		case WMI_HOST_WLAN_2G_5G_CAP:
3531 			band_to_mac[i].start_freq = hal_reg_cap->low_2ghz_chan;
3532 			band_to_mac[i].end_freq = hal_reg_cap->high_5ghz_chan;
3533 			break;
3534 		case WMI_HOST_WLAN_2G_CAP:
3535 			band_to_mac[i].start_freq = hal_reg_cap->low_2ghz_chan;
3536 			band_to_mac[i].end_freq = hal_reg_cap->high_2ghz_chan;
3537 			break;
3538 		case WMI_HOST_WLAN_5G_CAP:
3539 			band_to_mac[i].start_freq = hal_reg_cap->low_5ghz_chan;
3540 			band_to_mac[i].end_freq = hal_reg_cap->high_5ghz_chan;
3541 			break;
3542 		default:
3543 			break;
3544 		}
3545 	}
3546 }
3547 
3548 static void
3549 ath11k_wmi_copy_resource_config(struct wmi_resource_config *wmi_cfg,
3550 				struct target_resource_config *tg_cfg)
3551 {
3552 	wmi_cfg->num_vdevs = tg_cfg->num_vdevs;
3553 	wmi_cfg->num_peers = tg_cfg->num_peers;
3554 	wmi_cfg->num_offload_peers = tg_cfg->num_offload_peers;
3555 	wmi_cfg->num_offload_reorder_buffs = tg_cfg->num_offload_reorder_buffs;
3556 	wmi_cfg->num_peer_keys = tg_cfg->num_peer_keys;
3557 	wmi_cfg->num_tids = tg_cfg->num_tids;
3558 	wmi_cfg->ast_skid_limit = tg_cfg->ast_skid_limit;
3559 	wmi_cfg->tx_chain_mask = tg_cfg->tx_chain_mask;
3560 	wmi_cfg->rx_chain_mask = tg_cfg->rx_chain_mask;
3561 	wmi_cfg->rx_timeout_pri[0] = tg_cfg->rx_timeout_pri[0];
3562 	wmi_cfg->rx_timeout_pri[1] = tg_cfg->rx_timeout_pri[1];
3563 	wmi_cfg->rx_timeout_pri[2] = tg_cfg->rx_timeout_pri[2];
3564 	wmi_cfg->rx_timeout_pri[3] = tg_cfg->rx_timeout_pri[3];
3565 	wmi_cfg->rx_decap_mode = tg_cfg->rx_decap_mode;
3566 	wmi_cfg->scan_max_pending_req = tg_cfg->scan_max_pending_req;
3567 	wmi_cfg->bmiss_offload_max_vdev = tg_cfg->bmiss_offload_max_vdev;
3568 	wmi_cfg->roam_offload_max_vdev = tg_cfg->roam_offload_max_vdev;
3569 	wmi_cfg->roam_offload_max_ap_profiles =
3570 		tg_cfg->roam_offload_max_ap_profiles;
3571 	wmi_cfg->num_mcast_groups = tg_cfg->num_mcast_groups;
3572 	wmi_cfg->num_mcast_table_elems = tg_cfg->num_mcast_table_elems;
3573 	wmi_cfg->mcast2ucast_mode = tg_cfg->mcast2ucast_mode;
3574 	wmi_cfg->tx_dbg_log_size = tg_cfg->tx_dbg_log_size;
3575 	wmi_cfg->num_wds_entries = tg_cfg->num_wds_entries;
3576 	wmi_cfg->dma_burst_size = tg_cfg->dma_burst_size;
3577 	wmi_cfg->mac_aggr_delim = tg_cfg->mac_aggr_delim;
3578 	wmi_cfg->rx_skip_defrag_timeout_dup_detection_check =
3579 		tg_cfg->rx_skip_defrag_timeout_dup_detection_check;
3580 	wmi_cfg->vow_config = tg_cfg->vow_config;
3581 	wmi_cfg->gtk_offload_max_vdev = tg_cfg->gtk_offload_max_vdev;
3582 	wmi_cfg->num_msdu_desc = tg_cfg->num_msdu_desc;
3583 	wmi_cfg->max_frag_entries = tg_cfg->max_frag_entries;
3584 	wmi_cfg->num_tdls_vdevs = tg_cfg->num_tdls_vdevs;
3585 	wmi_cfg->num_tdls_conn_table_entries =
3586 		tg_cfg->num_tdls_conn_table_entries;
3587 	wmi_cfg->beacon_tx_offload_max_vdev =
3588 		tg_cfg->beacon_tx_offload_max_vdev;
3589 	wmi_cfg->num_multicast_filter_entries =
3590 		tg_cfg->num_multicast_filter_entries;
3591 	wmi_cfg->num_wow_filters = tg_cfg->num_wow_filters;
3592 	wmi_cfg->num_keep_alive_pattern = tg_cfg->num_keep_alive_pattern;
3593 	wmi_cfg->keep_alive_pattern_size = tg_cfg->keep_alive_pattern_size;
3594 	wmi_cfg->max_tdls_concurrent_sleep_sta =
3595 		tg_cfg->max_tdls_concurrent_sleep_sta;
3596 	wmi_cfg->max_tdls_concurrent_buffer_sta =
3597 		tg_cfg->max_tdls_concurrent_buffer_sta;
3598 	wmi_cfg->wmi_send_separate = tg_cfg->wmi_send_separate;
3599 	wmi_cfg->num_ocb_vdevs = tg_cfg->num_ocb_vdevs;
3600 	wmi_cfg->num_ocb_channels = tg_cfg->num_ocb_channels;
3601 	wmi_cfg->num_ocb_schedules = tg_cfg->num_ocb_schedules;
3602 	wmi_cfg->bpf_instruction_size = tg_cfg->bpf_instruction_size;
3603 	wmi_cfg->max_bssid_rx_filters = tg_cfg->max_bssid_rx_filters;
3604 	wmi_cfg->use_pdev_id = tg_cfg->use_pdev_id;
3605 	wmi_cfg->flag1 = tg_cfg->flag1;
3606 	wmi_cfg->peer_map_unmap_v2_support = tg_cfg->peer_map_unmap_v2_support;
3607 	wmi_cfg->sched_params = tg_cfg->sched_params;
3608 	wmi_cfg->twt_ap_pdev_count = tg_cfg->twt_ap_pdev_count;
3609 	wmi_cfg->twt_ap_sta_count = tg_cfg->twt_ap_sta_count;
3610 }
3611 
3612 static int ath11k_init_cmd_send(struct ath11k_pdev_wmi *wmi,
3613 				struct wmi_init_cmd_param *param)
3614 {
3615 	struct ath11k_base *ab = wmi->wmi_ab->ab;
3616 	struct sk_buff *skb;
3617 	struct wmi_init_cmd *cmd;
3618 	struct wmi_resource_config *cfg;
3619 	struct wmi_pdev_set_hw_mode_cmd_param *hw_mode;
3620 	struct wmi_pdev_band_to_mac *band_to_mac;
3621 	struct wlan_host_mem_chunk *host_mem_chunks;
3622 	struct wmi_tlv *tlv;
3623 	size_t ret, len;
3624 	void *ptr;
3625 	u32 hw_mode_len = 0;
3626 	u16 idx;
3627 
3628 	if (param->hw_mode_id != WMI_HOST_HW_MODE_MAX)
3629 		hw_mode_len = sizeof(*hw_mode) + TLV_HDR_SIZE +
3630 			      (param->num_band_to_mac * sizeof(*band_to_mac));
3631 
3632 	len = sizeof(*cmd) + TLV_HDR_SIZE + sizeof(*cfg) + hw_mode_len +
3633 	      (param->num_mem_chunks ? (sizeof(*host_mem_chunks) * WMI_MAX_MEM_REQS) : 0);
3634 
3635 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, len);
3636 	if (!skb)
3637 		return -ENOMEM;
3638 
3639 	cmd = (struct wmi_init_cmd *)skb->data;
3640 
3641 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_INIT_CMD) |
3642 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3643 
3644 	ptr = skb->data + sizeof(*cmd);
3645 	cfg = ptr;
3646 
3647 	ath11k_wmi_copy_resource_config(cfg, param->res_cfg);
3648 
3649 	cfg->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_RESOURCE_CONFIG) |
3650 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cfg) - TLV_HDR_SIZE);
3651 
3652 	ptr += sizeof(*cfg);
3653 	host_mem_chunks = ptr + TLV_HDR_SIZE;
3654 	len = sizeof(struct wlan_host_mem_chunk);
3655 
3656 	for (idx = 0; idx < param->num_mem_chunks; ++idx) {
3657 		host_mem_chunks[idx].tlv_header =
3658 				FIELD_PREP(WMI_TLV_TAG,
3659 					   WMI_TAG_WLAN_HOST_MEMORY_CHUNK) |
3660 				FIELD_PREP(WMI_TLV_LEN, len);
3661 
3662 		host_mem_chunks[idx].ptr = param->mem_chunks[idx].paddr;
3663 		host_mem_chunks[idx].size = param->mem_chunks[idx].len;
3664 		host_mem_chunks[idx].req_id = param->mem_chunks[idx].req_id;
3665 
3666 		ath11k_dbg(ab, ATH11K_DBG_WMI,
3667 			   "WMI host mem chunk req_id %d paddr 0x%llx len %d\n",
3668 			   param->mem_chunks[idx].req_id,
3669 			   (u64)param->mem_chunks[idx].paddr,
3670 			   param->mem_chunks[idx].len);
3671 	}
3672 	cmd->num_host_mem_chunks = param->num_mem_chunks;
3673 	len = sizeof(struct wlan_host_mem_chunk) * param->num_mem_chunks;
3674 
3675 	/* num_mem_chunks is zero */
3676 	tlv = ptr;
3677 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
3678 		      FIELD_PREP(WMI_TLV_LEN, len);
3679 	ptr += TLV_HDR_SIZE + len;
3680 
3681 	if (param->hw_mode_id != WMI_HOST_HW_MODE_MAX) {
3682 		hw_mode = (struct wmi_pdev_set_hw_mode_cmd_param *)ptr;
3683 		hw_mode->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3684 						 WMI_TAG_PDEV_SET_HW_MODE_CMD) |
3685 				      FIELD_PREP(WMI_TLV_LEN,
3686 						 sizeof(*hw_mode) - TLV_HDR_SIZE);
3687 
3688 		hw_mode->hw_mode_index = param->hw_mode_id;
3689 		hw_mode->num_band_to_mac = param->num_band_to_mac;
3690 
3691 		ptr += sizeof(*hw_mode);
3692 
3693 		len = param->num_band_to_mac * sizeof(*band_to_mac);
3694 		tlv = ptr;
3695 		tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_STRUCT) |
3696 			      FIELD_PREP(WMI_TLV_LEN, len);
3697 
3698 		ptr += TLV_HDR_SIZE;
3699 		len = sizeof(*band_to_mac);
3700 
3701 		for (idx = 0; idx < param->num_band_to_mac; idx++) {
3702 			band_to_mac = (void *)ptr;
3703 
3704 			band_to_mac->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3705 							     WMI_TAG_PDEV_BAND_TO_MAC) |
3706 						  FIELD_PREP(WMI_TLV_LEN,
3707 							     len - TLV_HDR_SIZE);
3708 			band_to_mac->pdev_id = param->band_to_mac[idx].pdev_id;
3709 			band_to_mac->start_freq =
3710 				param->band_to_mac[idx].start_freq;
3711 			band_to_mac->end_freq =
3712 				param->band_to_mac[idx].end_freq;
3713 			ptr += sizeof(*band_to_mac);
3714 		}
3715 	}
3716 
3717 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_INIT_CMDID);
3718 	if (ret) {
3719 		ath11k_warn(ab, "failed to send WMI_INIT_CMDID\n");
3720 		dev_kfree_skb(skb);
3721 	}
3722 
3723 	return ret;
3724 }
3725 
3726 int ath11k_wmi_pdev_lro_cfg(struct ath11k *ar,
3727 			    int pdev_id)
3728 {
3729 	struct ath11k_wmi_pdev_lro_config_cmd *cmd;
3730 	struct sk_buff *skb;
3731 	int ret;
3732 
3733 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
3734 	if (!skb)
3735 		return -ENOMEM;
3736 
3737 	cmd = (struct ath11k_wmi_pdev_lro_config_cmd *)skb->data;
3738 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_LRO_INFO_CMD) |
3739 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3740 
3741 	get_random_bytes(cmd->th_4, sizeof(uint32_t) * ATH11K_IPV4_TH_SEED_SIZE);
3742 	get_random_bytes(cmd->th_6, sizeof(uint32_t) * ATH11K_IPV6_TH_SEED_SIZE);
3743 
3744 	cmd->pdev_id = pdev_id;
3745 
3746 	ret = ath11k_wmi_cmd_send(ar->wmi, skb, WMI_LRO_CONFIG_CMDID);
3747 	if (ret) {
3748 		ath11k_warn(ar->ab,
3749 			    "failed to send lro cfg req wmi cmd\n");
3750 		goto err;
3751 	}
3752 
3753 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3754 		   "WMI lro cfg cmd pdev_id 0x%x\n", pdev_id);
3755 	return 0;
3756 err:
3757 	dev_kfree_skb(skb);
3758 	return ret;
3759 }
3760 
3761 int ath11k_wmi_wait_for_service_ready(struct ath11k_base *ab)
3762 {
3763 	unsigned long time_left;
3764 
3765 	time_left = wait_for_completion_timeout(&ab->wmi_ab.service_ready,
3766 						WMI_SERVICE_READY_TIMEOUT_HZ);
3767 	if (!time_left)
3768 		return -ETIMEDOUT;
3769 
3770 	return 0;
3771 }
3772 
3773 int ath11k_wmi_wait_for_unified_ready(struct ath11k_base *ab)
3774 {
3775 	unsigned long time_left;
3776 
3777 	time_left = wait_for_completion_timeout(&ab->wmi_ab.unified_ready,
3778 						WMI_SERVICE_READY_TIMEOUT_HZ);
3779 	if (!time_left)
3780 		return -ETIMEDOUT;
3781 
3782 	return 0;
3783 }
3784 
3785 int ath11k_wmi_set_hw_mode(struct ath11k_base *ab,
3786 			   enum wmi_host_hw_mode_config_type mode)
3787 {
3788 	struct wmi_pdev_set_hw_mode_cmd_param *cmd;
3789 	struct sk_buff *skb;
3790 	struct ath11k_wmi_base *wmi_ab = &ab->wmi_ab;
3791 	int len;
3792 	int ret;
3793 
3794 	len = sizeof(*cmd);
3795 
3796 	skb = ath11k_wmi_alloc_skb(wmi_ab, len);
3797 	if (!skb)
3798 		return -ENOMEM;
3799 
3800 	cmd = (struct wmi_pdev_set_hw_mode_cmd_param *)skb->data;
3801 
3802 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_PDEV_SET_HW_MODE_CMD) |
3803 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3804 
3805 	cmd->pdev_id = WMI_PDEV_ID_SOC;
3806 	cmd->hw_mode_index = mode;
3807 
3808 	ret = ath11k_wmi_cmd_send(&wmi_ab->wmi[0], skb, WMI_PDEV_SET_HW_MODE_CMDID);
3809 	if (ret) {
3810 		ath11k_warn(ab, "failed to send WMI_PDEV_SET_HW_MODE_CMDID\n");
3811 		dev_kfree_skb(skb);
3812 	}
3813 
3814 	return ret;
3815 }
3816 
3817 int ath11k_wmi_cmd_init(struct ath11k_base *ab)
3818 {
3819 	struct ath11k_wmi_base *wmi_sc = &ab->wmi_ab;
3820 	struct wmi_init_cmd_param init_param;
3821 	struct target_resource_config  config;
3822 
3823 	memset(&init_param, 0, sizeof(init_param));
3824 	memset(&config, 0, sizeof(config));
3825 
3826 	ab->hw_params.hw_ops->wmi_init_config(ab, &config);
3827 
3828 	memcpy(&wmi_sc->wlan_resource_config, &config, sizeof(config));
3829 
3830 	init_param.res_cfg = &wmi_sc->wlan_resource_config;
3831 	init_param.num_mem_chunks = wmi_sc->num_mem_chunks;
3832 	init_param.hw_mode_id = wmi_sc->preferred_hw_mode;
3833 	init_param.mem_chunks = wmi_sc->mem_chunks;
3834 
3835 	if (ab->hw_params.single_pdev_only)
3836 		init_param.hw_mode_id = WMI_HOST_HW_MODE_MAX;
3837 
3838 	init_param.num_band_to_mac = ab->num_radios;
3839 	ath11k_fill_band_to_mac_param(ab, init_param.band_to_mac);
3840 
3841 	return ath11k_init_cmd_send(&wmi_sc->wmi[0], &init_param);
3842 }
3843 
3844 int ath11k_wmi_vdev_spectral_conf(struct ath11k *ar,
3845 				  struct ath11k_wmi_vdev_spectral_conf_param *param)
3846 {
3847 	struct ath11k_wmi_vdev_spectral_conf_cmd *cmd;
3848 	struct sk_buff *skb;
3849 	int ret;
3850 
3851 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
3852 	if (!skb)
3853 		return -ENOMEM;
3854 
3855 	cmd = (struct ath11k_wmi_vdev_spectral_conf_cmd *)skb->data;
3856 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3857 				     WMI_TAG_VDEV_SPECTRAL_CONFIGURE_CMD) |
3858 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3859 
3860 	memcpy(&cmd->param, param, sizeof(*param));
3861 
3862 	ret = ath11k_wmi_cmd_send(ar->wmi, skb,
3863 				  WMI_VDEV_SPECTRAL_SCAN_CONFIGURE_CMDID);
3864 	if (ret) {
3865 		ath11k_warn(ar->ab,
3866 			    "failed to send spectral scan config wmi cmd\n");
3867 		goto err;
3868 	}
3869 
3870 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3871 		   "WMI spectral scan config cmd vdev_id 0x%x\n",
3872 		   param->vdev_id);
3873 
3874 	return 0;
3875 err:
3876 	dev_kfree_skb(skb);
3877 	return ret;
3878 }
3879 
3880 int ath11k_wmi_vdev_spectral_enable(struct ath11k *ar, u32 vdev_id,
3881 				    u32 trigger, u32 enable)
3882 {
3883 	struct ath11k_wmi_vdev_spectral_enable_cmd *cmd;
3884 	struct sk_buff *skb;
3885 	int ret;
3886 
3887 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
3888 	if (!skb)
3889 		return -ENOMEM;
3890 
3891 	cmd = (struct ath11k_wmi_vdev_spectral_enable_cmd *)skb->data;
3892 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
3893 				     WMI_TAG_VDEV_SPECTRAL_ENABLE_CMD) |
3894 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3895 
3896 	cmd->vdev_id = vdev_id;
3897 	cmd->trigger_cmd = trigger;
3898 	cmd->enable_cmd = enable;
3899 
3900 	ret = ath11k_wmi_cmd_send(ar->wmi, skb,
3901 				  WMI_VDEV_SPECTRAL_SCAN_ENABLE_CMDID);
3902 	if (ret) {
3903 		ath11k_warn(ar->ab,
3904 			    "failed to send spectral enable wmi cmd\n");
3905 		goto err;
3906 	}
3907 
3908 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3909 		   "WMI spectral enable cmd vdev id 0x%x\n",
3910 		   vdev_id);
3911 
3912 	return 0;
3913 err:
3914 	dev_kfree_skb(skb);
3915 	return ret;
3916 }
3917 
3918 int ath11k_wmi_pdev_dma_ring_cfg(struct ath11k *ar,
3919 				 struct ath11k_wmi_pdev_dma_ring_cfg_req_cmd *param)
3920 {
3921 	struct ath11k_wmi_pdev_dma_ring_cfg_req_cmd *cmd;
3922 	struct sk_buff *skb;
3923 	int ret;
3924 
3925 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
3926 	if (!skb)
3927 		return -ENOMEM;
3928 
3929 	cmd = (struct ath11k_wmi_pdev_dma_ring_cfg_req_cmd *)skb->data;
3930 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_DMA_RING_CFG_REQ) |
3931 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
3932 
3933 	cmd->pdev_id		= param->pdev_id;
3934 	cmd->module_id		= param->module_id;
3935 	cmd->base_paddr_lo	= param->base_paddr_lo;
3936 	cmd->base_paddr_hi	= param->base_paddr_hi;
3937 	cmd->head_idx_paddr_lo	= param->head_idx_paddr_lo;
3938 	cmd->head_idx_paddr_hi	= param->head_idx_paddr_hi;
3939 	cmd->tail_idx_paddr_lo	= param->tail_idx_paddr_lo;
3940 	cmd->tail_idx_paddr_hi	= param->tail_idx_paddr_hi;
3941 	cmd->num_elems		= param->num_elems;
3942 	cmd->buf_size		= param->buf_size;
3943 	cmd->num_resp_per_event	= param->num_resp_per_event;
3944 	cmd->event_timeout_ms	= param->event_timeout_ms;
3945 
3946 	ret = ath11k_wmi_cmd_send(ar->wmi, skb,
3947 				  WMI_PDEV_DMA_RING_CFG_REQ_CMDID);
3948 	if (ret) {
3949 		ath11k_warn(ar->ab,
3950 			    "failed to send dma ring cfg req wmi cmd\n");
3951 		goto err;
3952 	}
3953 
3954 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
3955 		   "WMI DMA ring cfg req cmd pdev_id 0x%x\n",
3956 		   param->pdev_id);
3957 
3958 	return 0;
3959 err:
3960 	dev_kfree_skb(skb);
3961 	return ret;
3962 }
3963 
3964 static int ath11k_wmi_tlv_dma_buf_entry_parse(struct ath11k_base *soc,
3965 					      u16 tag, u16 len,
3966 					      const void *ptr, void *data)
3967 {
3968 	struct wmi_tlv_dma_buf_release_parse *parse = data;
3969 
3970 	if (tag != WMI_TAG_DMA_BUF_RELEASE_ENTRY)
3971 		return -EPROTO;
3972 
3973 	if (parse->num_buf_entry >= parse->fixed.num_buf_release_entry)
3974 		return -ENOBUFS;
3975 
3976 	parse->num_buf_entry++;
3977 	return 0;
3978 }
3979 
3980 static int ath11k_wmi_tlv_dma_buf_meta_parse(struct ath11k_base *soc,
3981 					     u16 tag, u16 len,
3982 					     const void *ptr, void *data)
3983 {
3984 	struct wmi_tlv_dma_buf_release_parse *parse = data;
3985 
3986 	if (tag != WMI_TAG_DMA_BUF_RELEASE_SPECTRAL_META_DATA)
3987 		return -EPROTO;
3988 
3989 	if (parse->num_meta >= parse->fixed.num_meta_data_entry)
3990 		return -ENOBUFS;
3991 
3992 	parse->num_meta++;
3993 	return 0;
3994 }
3995 
3996 static int ath11k_wmi_tlv_dma_buf_parse(struct ath11k_base *ab,
3997 					u16 tag, u16 len,
3998 					const void *ptr, void *data)
3999 {
4000 	struct wmi_tlv_dma_buf_release_parse *parse = data;
4001 	int ret;
4002 
4003 	switch (tag) {
4004 	case WMI_TAG_DMA_BUF_RELEASE:
4005 		memcpy(&parse->fixed, ptr,
4006 		       sizeof(struct ath11k_wmi_dma_buf_release_fixed_param));
4007 		parse->fixed.pdev_id = DP_HW2SW_MACID(parse->fixed.pdev_id);
4008 		break;
4009 	case WMI_TAG_ARRAY_STRUCT:
4010 		if (!parse->buf_entry_done) {
4011 			parse->num_buf_entry = 0;
4012 			parse->buf_entry = (struct wmi_dma_buf_release_entry *)ptr;
4013 
4014 			ret = ath11k_wmi_tlv_iter(ab, ptr, len,
4015 						  ath11k_wmi_tlv_dma_buf_entry_parse,
4016 						  parse);
4017 			if (ret) {
4018 				ath11k_warn(ab, "failed to parse dma buf entry tlv %d\n",
4019 					    ret);
4020 				return ret;
4021 			}
4022 
4023 			parse->buf_entry_done = true;
4024 		} else if (!parse->meta_data_done) {
4025 			parse->num_meta = 0;
4026 			parse->meta_data = (struct wmi_dma_buf_release_meta_data *)ptr;
4027 
4028 			ret = ath11k_wmi_tlv_iter(ab, ptr, len,
4029 						  ath11k_wmi_tlv_dma_buf_meta_parse,
4030 						  parse);
4031 			if (ret) {
4032 				ath11k_warn(ab, "failed to parse dma buf meta tlv %d\n",
4033 					    ret);
4034 				return ret;
4035 			}
4036 
4037 			parse->meta_data_done = true;
4038 		}
4039 		break;
4040 	default:
4041 		break;
4042 	}
4043 	return 0;
4044 }
4045 
4046 static void ath11k_wmi_pdev_dma_ring_buf_release_event(struct ath11k_base *ab,
4047 						       struct sk_buff *skb)
4048 {
4049 	struct wmi_tlv_dma_buf_release_parse parse = { };
4050 	struct ath11k_dbring_buf_release_event param;
4051 	int ret;
4052 
4053 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
4054 				  ath11k_wmi_tlv_dma_buf_parse,
4055 				  &parse);
4056 	if (ret) {
4057 		ath11k_warn(ab, "failed to parse dma buf release tlv %d\n", ret);
4058 		return;
4059 	}
4060 
4061 	param.fixed		= parse.fixed;
4062 	param.buf_entry		= parse.buf_entry;
4063 	param.num_buf_entry	= parse.num_buf_entry;
4064 	param.meta_data		= parse.meta_data;
4065 	param.num_meta		= parse.num_meta;
4066 
4067 	ret = ath11k_dbring_buffer_release_event(ab, &param);
4068 	if (ret) {
4069 		ath11k_warn(ab, "failed to handle dma buf release event %d\n", ret);
4070 		return;
4071 	}
4072 }
4073 
4074 static int ath11k_wmi_tlv_hw_mode_caps_parse(struct ath11k_base *soc,
4075 					     u16 tag, u16 len,
4076 					     const void *ptr, void *data)
4077 {
4078 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4079 	struct wmi_hw_mode_capabilities *hw_mode_cap;
4080 	u32 phy_map = 0;
4081 
4082 	if (tag != WMI_TAG_HW_MODE_CAPABILITIES)
4083 		return -EPROTO;
4084 
4085 	if (svc_rdy_ext->n_hw_mode_caps >= svc_rdy_ext->param.num_hw_modes)
4086 		return -ENOBUFS;
4087 
4088 	hw_mode_cap = container_of(ptr, struct wmi_hw_mode_capabilities,
4089 				   hw_mode_id);
4090 	svc_rdy_ext->n_hw_mode_caps++;
4091 
4092 	phy_map = hw_mode_cap->phy_id_map;
4093 	while (phy_map) {
4094 		svc_rdy_ext->tot_phy_id++;
4095 		phy_map = phy_map >> 1;
4096 	}
4097 
4098 	return 0;
4099 }
4100 
4101 static int ath11k_wmi_tlv_hw_mode_caps(struct ath11k_base *soc,
4102 				       u16 len, const void *ptr, void *data)
4103 {
4104 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4105 	struct wmi_hw_mode_capabilities *hw_mode_caps;
4106 	enum wmi_host_hw_mode_config_type mode, pref;
4107 	u32 i;
4108 	int ret;
4109 
4110 	svc_rdy_ext->n_hw_mode_caps = 0;
4111 	svc_rdy_ext->hw_mode_caps = (struct wmi_hw_mode_capabilities *)ptr;
4112 
4113 	ret = ath11k_wmi_tlv_iter(soc, ptr, len,
4114 				  ath11k_wmi_tlv_hw_mode_caps_parse,
4115 				  svc_rdy_ext);
4116 	if (ret) {
4117 		ath11k_warn(soc, "failed to parse tlv %d\n", ret);
4118 		return ret;
4119 	}
4120 
4121 	i = 0;
4122 	while (i < svc_rdy_ext->n_hw_mode_caps) {
4123 		hw_mode_caps = &svc_rdy_ext->hw_mode_caps[i];
4124 		mode = hw_mode_caps->hw_mode_id;
4125 		pref = soc->wmi_ab.preferred_hw_mode;
4126 
4127 		if (ath11k_hw_mode_pri_map[mode] < ath11k_hw_mode_pri_map[pref]) {
4128 			svc_rdy_ext->pref_hw_mode_caps = *hw_mode_caps;
4129 			soc->wmi_ab.preferred_hw_mode = mode;
4130 		}
4131 		i++;
4132 	}
4133 
4134 	ath11k_dbg(soc, ATH11K_DBG_WMI, "preferred_hw_mode:%d\n",
4135 		   soc->wmi_ab.preferred_hw_mode);
4136 	if (soc->wmi_ab.preferred_hw_mode == WMI_HOST_HW_MODE_MAX)
4137 		return -EINVAL;
4138 
4139 	return 0;
4140 }
4141 
4142 static int ath11k_wmi_tlv_mac_phy_caps_parse(struct ath11k_base *soc,
4143 					     u16 tag, u16 len,
4144 					     const void *ptr, void *data)
4145 {
4146 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4147 
4148 	if (tag != WMI_TAG_MAC_PHY_CAPABILITIES)
4149 		return -EPROTO;
4150 
4151 	if (svc_rdy_ext->n_mac_phy_caps >= svc_rdy_ext->tot_phy_id)
4152 		return -ENOBUFS;
4153 
4154 	len = min_t(u16, len, sizeof(struct wmi_mac_phy_capabilities));
4155 	if (!svc_rdy_ext->n_mac_phy_caps) {
4156 		svc_rdy_ext->mac_phy_caps = kcalloc(svc_rdy_ext->tot_phy_id,
4157 						    len, GFP_ATOMIC);
4158 		if (!svc_rdy_ext->mac_phy_caps)
4159 			return -ENOMEM;
4160 	}
4161 
4162 	memcpy(svc_rdy_ext->mac_phy_caps + svc_rdy_ext->n_mac_phy_caps, ptr, len);
4163 	svc_rdy_ext->n_mac_phy_caps++;
4164 	return 0;
4165 }
4166 
4167 static int ath11k_wmi_tlv_ext_hal_reg_caps_parse(struct ath11k_base *soc,
4168 						 u16 tag, u16 len,
4169 						 const void *ptr, void *data)
4170 {
4171 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4172 
4173 	if (tag != WMI_TAG_HAL_REG_CAPABILITIES_EXT)
4174 		return -EPROTO;
4175 
4176 	if (svc_rdy_ext->n_ext_hal_reg_caps >= svc_rdy_ext->param.num_phy)
4177 		return -ENOBUFS;
4178 
4179 	svc_rdy_ext->n_ext_hal_reg_caps++;
4180 	return 0;
4181 }
4182 
4183 static int ath11k_wmi_tlv_ext_hal_reg_caps(struct ath11k_base *soc,
4184 					   u16 len, const void *ptr, void *data)
4185 {
4186 	struct ath11k_pdev_wmi *wmi_handle = &soc->wmi_ab.wmi[0];
4187 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4188 	struct ath11k_hal_reg_capabilities_ext reg_cap;
4189 	int ret;
4190 	u32 i;
4191 
4192 	svc_rdy_ext->n_ext_hal_reg_caps = 0;
4193 	svc_rdy_ext->ext_hal_reg_caps = (struct wmi_hal_reg_capabilities_ext *)ptr;
4194 	ret = ath11k_wmi_tlv_iter(soc, ptr, len,
4195 				  ath11k_wmi_tlv_ext_hal_reg_caps_parse,
4196 				  svc_rdy_ext);
4197 	if (ret) {
4198 		ath11k_warn(soc, "failed to parse tlv %d\n", ret);
4199 		return ret;
4200 	}
4201 
4202 	for (i = 0; i < svc_rdy_ext->param.num_phy; i++) {
4203 		ret = ath11k_pull_reg_cap_svc_rdy_ext(wmi_handle,
4204 						      svc_rdy_ext->soc_hal_reg_caps,
4205 						      svc_rdy_ext->ext_hal_reg_caps, i,
4206 						      &reg_cap);
4207 		if (ret) {
4208 			ath11k_warn(soc, "failed to extract reg cap %d\n", i);
4209 			return ret;
4210 		}
4211 
4212 		memcpy(&soc->hal_reg_cap[reg_cap.phy_id],
4213 		       &reg_cap, sizeof(reg_cap));
4214 	}
4215 	return 0;
4216 }
4217 
4218 static int ath11k_wmi_tlv_ext_soc_hal_reg_caps_parse(struct ath11k_base *soc,
4219 						     u16 len, const void *ptr,
4220 						     void *data)
4221 {
4222 	struct ath11k_pdev_wmi *wmi_handle = &soc->wmi_ab.wmi[0];
4223 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4224 	u8 hw_mode_id = svc_rdy_ext->pref_hw_mode_caps.hw_mode_id;
4225 	u32 phy_id_map;
4226 	int pdev_index = 0;
4227 	int ret;
4228 
4229 	svc_rdy_ext->soc_hal_reg_caps = (struct wmi_soc_hal_reg_capabilities *)ptr;
4230 	svc_rdy_ext->param.num_phy = svc_rdy_ext->soc_hal_reg_caps->num_phy;
4231 
4232 	soc->num_radios = 0;
4233 	phy_id_map = svc_rdy_ext->pref_hw_mode_caps.phy_id_map;
4234 
4235 	while (phy_id_map && soc->num_radios < MAX_RADIOS) {
4236 		ret = ath11k_pull_mac_phy_cap_svc_ready_ext(wmi_handle,
4237 							    svc_rdy_ext->hw_caps,
4238 							    svc_rdy_ext->hw_mode_caps,
4239 							    svc_rdy_ext->soc_hal_reg_caps,
4240 							    svc_rdy_ext->mac_phy_caps,
4241 							    hw_mode_id, soc->num_radios,
4242 							    &soc->pdevs[pdev_index]);
4243 		if (ret) {
4244 			ath11k_warn(soc, "failed to extract mac caps, idx :%d\n",
4245 				    soc->num_radios);
4246 			return ret;
4247 		}
4248 
4249 		soc->num_radios++;
4250 
4251 		/* For QCA6390, save mac_phy capability in the same pdev */
4252 		if (soc->hw_params.single_pdev_only)
4253 			pdev_index = 0;
4254 		else
4255 			pdev_index = soc->num_radios;
4256 
4257 		/* TODO: mac_phy_cap prints */
4258 		phy_id_map >>= 1;
4259 	}
4260 
4261 	/* For QCA6390, set num_radios to 1 because host manages
4262 	 * both 2G and 5G radio in one pdev.
4263 	 * Set pdev_id = 0 and 0 means soc level.
4264 	 */
4265 	if (soc->hw_params.single_pdev_only) {
4266 		soc->num_radios = 1;
4267 		soc->pdevs[0].pdev_id = 0;
4268 	}
4269 
4270 	return 0;
4271 }
4272 
4273 static int ath11k_wmi_tlv_dma_ring_caps_parse(struct ath11k_base *soc,
4274 					      u16 tag, u16 len,
4275 					      const void *ptr, void *data)
4276 {
4277 	struct wmi_tlv_dma_ring_caps_parse *parse = data;
4278 
4279 	if (tag != WMI_TAG_DMA_RING_CAPABILITIES)
4280 		return -EPROTO;
4281 
4282 	parse->n_dma_ring_caps++;
4283 	return 0;
4284 }
4285 
4286 static int ath11k_wmi_alloc_dbring_caps(struct ath11k_base *ab,
4287 					u32 num_cap)
4288 {
4289 	size_t sz;
4290 	void *ptr;
4291 
4292 	sz = num_cap * sizeof(struct ath11k_dbring_cap);
4293 	ptr = kzalloc(sz, GFP_ATOMIC);
4294 	if (!ptr)
4295 		return -ENOMEM;
4296 
4297 	ab->db_caps = ptr;
4298 	ab->num_db_cap = num_cap;
4299 
4300 	return 0;
4301 }
4302 
4303 static void ath11k_wmi_free_dbring_caps(struct ath11k_base *ab)
4304 {
4305 	kfree(ab->db_caps);
4306 	ab->db_caps = NULL;
4307 }
4308 
4309 static int ath11k_wmi_tlv_dma_ring_caps(struct ath11k_base *ab,
4310 					u16 len, const void *ptr, void *data)
4311 {
4312 	struct wmi_tlv_dma_ring_caps_parse *dma_caps_parse = data;
4313 	struct wmi_dma_ring_capabilities *dma_caps;
4314 	struct ath11k_dbring_cap *dir_buff_caps;
4315 	int ret;
4316 	u32 i;
4317 
4318 	dma_caps_parse->n_dma_ring_caps = 0;
4319 	dma_caps = (struct wmi_dma_ring_capabilities *)ptr;
4320 	ret = ath11k_wmi_tlv_iter(ab, ptr, len,
4321 				  ath11k_wmi_tlv_dma_ring_caps_parse,
4322 				  dma_caps_parse);
4323 	if (ret) {
4324 		ath11k_warn(ab, "failed to parse dma ring caps tlv %d\n", ret);
4325 		return ret;
4326 	}
4327 
4328 	if (!dma_caps_parse->n_dma_ring_caps)
4329 		return 0;
4330 
4331 	if (ab->num_db_cap) {
4332 		ath11k_warn(ab, "Already processed, so ignoring dma ring caps\n");
4333 		return 0;
4334 	}
4335 
4336 	ret = ath11k_wmi_alloc_dbring_caps(ab, dma_caps_parse->n_dma_ring_caps);
4337 	if (ret)
4338 		return ret;
4339 
4340 	dir_buff_caps = ab->db_caps;
4341 	for (i = 0; i < dma_caps_parse->n_dma_ring_caps; i++) {
4342 		if (dma_caps[i].module_id >= WMI_DIRECT_BUF_MAX) {
4343 			ath11k_warn(ab, "Invalid module id %d\n", dma_caps[i].module_id);
4344 			ret = -EINVAL;
4345 			goto free_dir_buff;
4346 		}
4347 
4348 		dir_buff_caps[i].id = dma_caps[i].module_id;
4349 		dir_buff_caps[i].pdev_id = DP_HW2SW_MACID(dma_caps[i].pdev_id);
4350 		dir_buff_caps[i].min_elem = dma_caps[i].min_elem;
4351 		dir_buff_caps[i].min_buf_sz = dma_caps[i].min_buf_sz;
4352 		dir_buff_caps[i].min_buf_align = dma_caps[i].min_buf_align;
4353 	}
4354 
4355 	return 0;
4356 
4357 free_dir_buff:
4358 	ath11k_wmi_free_dbring_caps(ab);
4359 	return ret;
4360 }
4361 
4362 static int ath11k_wmi_tlv_svc_rdy_ext_parse(struct ath11k_base *ab,
4363 					    u16 tag, u16 len,
4364 					    const void *ptr, void *data)
4365 {
4366 	struct ath11k_pdev_wmi *wmi_handle = &ab->wmi_ab.wmi[0];
4367 	struct wmi_tlv_svc_rdy_ext_parse *svc_rdy_ext = data;
4368 	int ret;
4369 
4370 	switch (tag) {
4371 	case WMI_TAG_SERVICE_READY_EXT_EVENT:
4372 		ret = ath11k_pull_svc_ready_ext(wmi_handle, ptr,
4373 						&svc_rdy_ext->param);
4374 		if (ret) {
4375 			ath11k_warn(ab, "unable to extract ext params\n");
4376 			return ret;
4377 		}
4378 		break;
4379 
4380 	case WMI_TAG_SOC_MAC_PHY_HW_MODE_CAPS:
4381 		svc_rdy_ext->hw_caps = (struct wmi_soc_mac_phy_hw_mode_caps *)ptr;
4382 		svc_rdy_ext->param.num_hw_modes = svc_rdy_ext->hw_caps->num_hw_modes;
4383 		break;
4384 
4385 	case WMI_TAG_SOC_HAL_REG_CAPABILITIES:
4386 		ret = ath11k_wmi_tlv_ext_soc_hal_reg_caps_parse(ab, len, ptr,
4387 								svc_rdy_ext);
4388 		if (ret)
4389 			return ret;
4390 		break;
4391 
4392 	case WMI_TAG_ARRAY_STRUCT:
4393 		if (!svc_rdy_ext->hw_mode_done) {
4394 			ret = ath11k_wmi_tlv_hw_mode_caps(ab, len, ptr,
4395 							  svc_rdy_ext);
4396 			if (ret)
4397 				return ret;
4398 
4399 			svc_rdy_ext->hw_mode_done = true;
4400 		} else if (!svc_rdy_ext->mac_phy_done) {
4401 			svc_rdy_ext->n_mac_phy_caps = 0;
4402 			ret = ath11k_wmi_tlv_iter(ab, ptr, len,
4403 						  ath11k_wmi_tlv_mac_phy_caps_parse,
4404 						  svc_rdy_ext);
4405 			if (ret) {
4406 				ath11k_warn(ab, "failed to parse tlv %d\n", ret);
4407 				return ret;
4408 			}
4409 
4410 			svc_rdy_ext->mac_phy_done = true;
4411 		} else if (!svc_rdy_ext->ext_hal_reg_done) {
4412 			ret = ath11k_wmi_tlv_ext_hal_reg_caps(ab, len, ptr,
4413 							      svc_rdy_ext);
4414 			if (ret)
4415 				return ret;
4416 
4417 			svc_rdy_ext->ext_hal_reg_done = true;
4418 		} else if (!svc_rdy_ext->mac_phy_chainmask_combo_done) {
4419 			svc_rdy_ext->mac_phy_chainmask_combo_done = true;
4420 		} else if (!svc_rdy_ext->mac_phy_chainmask_cap_done) {
4421 			svc_rdy_ext->mac_phy_chainmask_cap_done = true;
4422 		} else if (!svc_rdy_ext->oem_dma_ring_cap_done) {
4423 			svc_rdy_ext->oem_dma_ring_cap_done = true;
4424 		} else if (!svc_rdy_ext->dma_ring_cap_done) {
4425 			ret = ath11k_wmi_tlv_dma_ring_caps(ab, len, ptr,
4426 							   &svc_rdy_ext->dma_caps_parse);
4427 			if (ret)
4428 				return ret;
4429 
4430 			svc_rdy_ext->dma_ring_cap_done = true;
4431 		}
4432 		break;
4433 
4434 	default:
4435 		break;
4436 	}
4437 	return 0;
4438 }
4439 
4440 static int ath11k_service_ready_ext_event(struct ath11k_base *ab,
4441 					  struct sk_buff *skb)
4442 {
4443 	struct wmi_tlv_svc_rdy_ext_parse svc_rdy_ext = { };
4444 	int ret;
4445 
4446 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
4447 				  ath11k_wmi_tlv_svc_rdy_ext_parse,
4448 				  &svc_rdy_ext);
4449 	if (ret) {
4450 		ath11k_warn(ab, "failed to parse tlv %d\n", ret);
4451 		goto err;
4452 	}
4453 
4454 	if (!test_bit(WMI_TLV_SERVICE_EXT2_MSG, ab->wmi_ab.svc_map))
4455 		complete(&ab->wmi_ab.service_ready);
4456 
4457 	kfree(svc_rdy_ext.mac_phy_caps);
4458 	return 0;
4459 
4460 err:
4461 	ath11k_wmi_free_dbring_caps(ab);
4462 	return ret;
4463 }
4464 
4465 static int ath11k_wmi_tlv_svc_rdy_ext2_parse(struct ath11k_base *ab,
4466 					     u16 tag, u16 len,
4467 					     const void *ptr, void *data)
4468 {
4469 	struct wmi_tlv_svc_rdy_ext2_parse *parse = data;
4470 	int ret;
4471 
4472 	switch (tag) {
4473 	case WMI_TAG_ARRAY_STRUCT:
4474 		if (!parse->dma_ring_cap_done) {
4475 			ret = ath11k_wmi_tlv_dma_ring_caps(ab, len, ptr,
4476 							   &parse->dma_caps_parse);
4477 			if (ret)
4478 				return ret;
4479 
4480 			parse->dma_ring_cap_done = true;
4481 		}
4482 		break;
4483 	default:
4484 		break;
4485 	}
4486 
4487 	return 0;
4488 }
4489 
4490 static int ath11k_service_ready_ext2_event(struct ath11k_base *ab,
4491 					   struct sk_buff *skb)
4492 {
4493 	struct wmi_tlv_svc_rdy_ext2_parse svc_rdy_ext2 = { };
4494 	int ret;
4495 
4496 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
4497 				  ath11k_wmi_tlv_svc_rdy_ext2_parse,
4498 				  &svc_rdy_ext2);
4499 	if (ret) {
4500 		ath11k_warn(ab, "failed to parse ext2 event tlv %d\n", ret);
4501 		goto err;
4502 	}
4503 
4504 	complete(&ab->wmi_ab.service_ready);
4505 
4506 	return 0;
4507 
4508 err:
4509 	ath11k_wmi_free_dbring_caps(ab);
4510 	return ret;
4511 }
4512 
4513 static int ath11k_pull_vdev_start_resp_tlv(struct ath11k_base *ab, struct sk_buff *skb,
4514 					   struct wmi_vdev_start_resp_event *vdev_rsp)
4515 {
4516 	const void **tb;
4517 	const struct wmi_vdev_start_resp_event *ev;
4518 	int ret;
4519 
4520 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4521 	if (IS_ERR(tb)) {
4522 		ret = PTR_ERR(tb);
4523 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4524 		return ret;
4525 	}
4526 
4527 	ev = tb[WMI_TAG_VDEV_START_RESPONSE_EVENT];
4528 	if (!ev) {
4529 		ath11k_warn(ab, "failed to fetch vdev start resp ev");
4530 		kfree(tb);
4531 		return -EPROTO;
4532 	}
4533 
4534 	memset(vdev_rsp, 0, sizeof(*vdev_rsp));
4535 
4536 	vdev_rsp->vdev_id = ev->vdev_id;
4537 	vdev_rsp->requestor_id = ev->requestor_id;
4538 	vdev_rsp->resp_type = ev->resp_type;
4539 	vdev_rsp->status = ev->status;
4540 	vdev_rsp->chain_mask = ev->chain_mask;
4541 	vdev_rsp->smps_mode = ev->smps_mode;
4542 	vdev_rsp->mac_id = ev->mac_id;
4543 	vdev_rsp->cfgd_tx_streams = ev->cfgd_tx_streams;
4544 	vdev_rsp->cfgd_rx_streams = ev->cfgd_rx_streams;
4545 
4546 	kfree(tb);
4547 	return 0;
4548 }
4549 
4550 static struct cur_reg_rule
4551 *create_reg_rules_from_wmi(u32 num_reg_rules,
4552 			   struct wmi_regulatory_rule_struct *wmi_reg_rule)
4553 {
4554 	struct cur_reg_rule *reg_rule_ptr;
4555 	u32 count;
4556 
4557 	reg_rule_ptr = kcalloc(num_reg_rules, sizeof(*reg_rule_ptr),
4558 			       GFP_ATOMIC);
4559 
4560 	if (!reg_rule_ptr)
4561 		return NULL;
4562 
4563 	for (count = 0; count < num_reg_rules; count++) {
4564 		reg_rule_ptr[count].start_freq =
4565 			FIELD_GET(REG_RULE_START_FREQ,
4566 				  wmi_reg_rule[count].freq_info);
4567 		reg_rule_ptr[count].end_freq =
4568 			FIELD_GET(REG_RULE_END_FREQ,
4569 				  wmi_reg_rule[count].freq_info);
4570 		reg_rule_ptr[count].max_bw =
4571 			FIELD_GET(REG_RULE_MAX_BW,
4572 				  wmi_reg_rule[count].bw_pwr_info);
4573 		reg_rule_ptr[count].reg_power =
4574 			FIELD_GET(REG_RULE_REG_PWR,
4575 				  wmi_reg_rule[count].bw_pwr_info);
4576 		reg_rule_ptr[count].ant_gain =
4577 			FIELD_GET(REG_RULE_ANT_GAIN,
4578 				  wmi_reg_rule[count].bw_pwr_info);
4579 		reg_rule_ptr[count].flags =
4580 			FIELD_GET(REG_RULE_FLAGS,
4581 				  wmi_reg_rule[count].flag_info);
4582 	}
4583 
4584 	return reg_rule_ptr;
4585 }
4586 
4587 static int ath11k_pull_reg_chan_list_update_ev(struct ath11k_base *ab,
4588 					       struct sk_buff *skb,
4589 					       struct cur_regulatory_info *reg_info)
4590 {
4591 	const void **tb;
4592 	const struct wmi_reg_chan_list_cc_event *chan_list_event_hdr;
4593 	struct wmi_regulatory_rule_struct *wmi_reg_rule;
4594 	u32 num_2g_reg_rules, num_5g_reg_rules;
4595 	int ret;
4596 
4597 	ath11k_dbg(ab, ATH11K_DBG_WMI, "processing regulatory channel list\n");
4598 
4599 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4600 	if (IS_ERR(tb)) {
4601 		ret = PTR_ERR(tb);
4602 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4603 		return ret;
4604 	}
4605 
4606 	chan_list_event_hdr = tb[WMI_TAG_REG_CHAN_LIST_CC_EVENT];
4607 	if (!chan_list_event_hdr) {
4608 		ath11k_warn(ab, "failed to fetch reg chan list update ev\n");
4609 		kfree(tb);
4610 		return -EPROTO;
4611 	}
4612 
4613 	reg_info->num_2g_reg_rules = chan_list_event_hdr->num_2g_reg_rules;
4614 	reg_info->num_5g_reg_rules = chan_list_event_hdr->num_5g_reg_rules;
4615 
4616 	if (!(reg_info->num_2g_reg_rules + reg_info->num_5g_reg_rules)) {
4617 		ath11k_warn(ab, "No regulatory rules available in the event info\n");
4618 		kfree(tb);
4619 		return -EINVAL;
4620 	}
4621 
4622 	memcpy(reg_info->alpha2, &chan_list_event_hdr->alpha2,
4623 	       REG_ALPHA2_LEN);
4624 	reg_info->dfs_region = chan_list_event_hdr->dfs_region;
4625 	reg_info->phybitmap = chan_list_event_hdr->phybitmap;
4626 	reg_info->num_phy = chan_list_event_hdr->num_phy;
4627 	reg_info->phy_id = chan_list_event_hdr->phy_id;
4628 	reg_info->ctry_code = chan_list_event_hdr->country_id;
4629 	reg_info->reg_dmn_pair = chan_list_event_hdr->domain_code;
4630 	if (chan_list_event_hdr->status_code == WMI_REG_SET_CC_STATUS_PASS)
4631 		reg_info->status_code = REG_SET_CC_STATUS_PASS;
4632 	else if (chan_list_event_hdr->status_code == WMI_REG_CURRENT_ALPHA2_NOT_FOUND)
4633 		reg_info->status_code = REG_CURRENT_ALPHA2_NOT_FOUND;
4634 	else if (chan_list_event_hdr->status_code == WMI_REG_INIT_ALPHA2_NOT_FOUND)
4635 		reg_info->status_code = REG_INIT_ALPHA2_NOT_FOUND;
4636 	else if (chan_list_event_hdr->status_code == WMI_REG_SET_CC_CHANGE_NOT_ALLOWED)
4637 		reg_info->status_code = REG_SET_CC_CHANGE_NOT_ALLOWED;
4638 	else if (chan_list_event_hdr->status_code == WMI_REG_SET_CC_STATUS_NO_MEMORY)
4639 		reg_info->status_code = REG_SET_CC_STATUS_NO_MEMORY;
4640 	else if (chan_list_event_hdr->status_code == WMI_REG_SET_CC_STATUS_FAIL)
4641 		reg_info->status_code = REG_SET_CC_STATUS_FAIL;
4642 
4643 	reg_info->min_bw_2g = chan_list_event_hdr->min_bw_2g;
4644 	reg_info->max_bw_2g = chan_list_event_hdr->max_bw_2g;
4645 	reg_info->min_bw_5g = chan_list_event_hdr->min_bw_5g;
4646 	reg_info->max_bw_5g = chan_list_event_hdr->max_bw_5g;
4647 
4648 	num_2g_reg_rules = reg_info->num_2g_reg_rules;
4649 	num_5g_reg_rules = reg_info->num_5g_reg_rules;
4650 
4651 	ath11k_dbg(ab, ATH11K_DBG_WMI,
4652 		   "%s:cc %s dsf %d BW: min_2g %d max_2g %d min_5g %d max_5g %d",
4653 		   __func__, reg_info->alpha2, reg_info->dfs_region,
4654 		   reg_info->min_bw_2g, reg_info->max_bw_2g,
4655 		   reg_info->min_bw_5g, reg_info->max_bw_5g);
4656 
4657 	ath11k_dbg(ab, ATH11K_DBG_WMI,
4658 		   "%s: num_2g_reg_rules %d num_5g_reg_rules %d", __func__,
4659 		   num_2g_reg_rules, num_5g_reg_rules);
4660 
4661 	wmi_reg_rule =
4662 		(struct wmi_regulatory_rule_struct *)((u8 *)chan_list_event_hdr
4663 						+ sizeof(*chan_list_event_hdr)
4664 						+ sizeof(struct wmi_tlv));
4665 
4666 	if (num_2g_reg_rules) {
4667 		reg_info->reg_rules_2g_ptr = create_reg_rules_from_wmi(num_2g_reg_rules,
4668 								       wmi_reg_rule);
4669 		if (!reg_info->reg_rules_2g_ptr) {
4670 			kfree(tb);
4671 			ath11k_warn(ab, "Unable to Allocate memory for 2g rules\n");
4672 			return -ENOMEM;
4673 		}
4674 	}
4675 
4676 	if (num_5g_reg_rules) {
4677 		wmi_reg_rule += num_2g_reg_rules;
4678 		reg_info->reg_rules_5g_ptr = create_reg_rules_from_wmi(num_5g_reg_rules,
4679 								       wmi_reg_rule);
4680 		if (!reg_info->reg_rules_5g_ptr) {
4681 			kfree(tb);
4682 			ath11k_warn(ab, "Unable to Allocate memory for 5g rules\n");
4683 			return -ENOMEM;
4684 		}
4685 	}
4686 
4687 	ath11k_dbg(ab, ATH11K_DBG_WMI, "processed regulatory channel list\n");
4688 
4689 	kfree(tb);
4690 	return 0;
4691 }
4692 
4693 static int ath11k_pull_peer_del_resp_ev(struct ath11k_base *ab, struct sk_buff *skb,
4694 					struct wmi_peer_delete_resp_event *peer_del_resp)
4695 {
4696 	const void **tb;
4697 	const struct wmi_peer_delete_resp_event *ev;
4698 	int ret;
4699 
4700 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4701 	if (IS_ERR(tb)) {
4702 		ret = PTR_ERR(tb);
4703 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4704 		return ret;
4705 	}
4706 
4707 	ev = tb[WMI_TAG_PEER_DELETE_RESP_EVENT];
4708 	if (!ev) {
4709 		ath11k_warn(ab, "failed to fetch peer delete resp ev");
4710 		kfree(tb);
4711 		return -EPROTO;
4712 	}
4713 
4714 	memset(peer_del_resp, 0, sizeof(*peer_del_resp));
4715 
4716 	peer_del_resp->vdev_id = ev->vdev_id;
4717 	ether_addr_copy(peer_del_resp->peer_macaddr.addr,
4718 			ev->peer_macaddr.addr);
4719 
4720 	kfree(tb);
4721 	return 0;
4722 }
4723 
4724 static int ath11k_pull_vdev_del_resp_ev(struct ath11k_base *ab,
4725 					struct sk_buff *skb,
4726 					u32 *vdev_id)
4727 {
4728 	const void **tb;
4729 	const struct wmi_vdev_delete_resp_event *ev;
4730 	int ret;
4731 
4732 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4733 	if (IS_ERR(tb)) {
4734 		ret = PTR_ERR(tb);
4735 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4736 		return ret;
4737 	}
4738 
4739 	ev = tb[WMI_TAG_VDEV_DELETE_RESP_EVENT];
4740 	if (!ev) {
4741 		ath11k_warn(ab, "failed to fetch vdev delete resp ev");
4742 		kfree(tb);
4743 		return -EPROTO;
4744 	}
4745 
4746 	*vdev_id = ev->vdev_id;
4747 
4748 	kfree(tb);
4749 	return 0;
4750 }
4751 
4752 static int ath11k_pull_bcn_tx_status_ev(struct ath11k_base *ab, void *evt_buf,
4753 					u32 len, u32 *vdev_id,
4754 					u32 *tx_status)
4755 {
4756 	const void **tb;
4757 	const struct wmi_bcn_tx_status_event *ev;
4758 	int ret;
4759 
4760 	tb = ath11k_wmi_tlv_parse_alloc(ab, evt_buf, len, GFP_ATOMIC);
4761 	if (IS_ERR(tb)) {
4762 		ret = PTR_ERR(tb);
4763 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4764 		return ret;
4765 	}
4766 
4767 	ev = tb[WMI_TAG_OFFLOAD_BCN_TX_STATUS_EVENT];
4768 	if (!ev) {
4769 		ath11k_warn(ab, "failed to fetch bcn tx status ev");
4770 		kfree(tb);
4771 		return -EPROTO;
4772 	}
4773 
4774 	*vdev_id   = ev->vdev_id;
4775 	*tx_status = ev->tx_status;
4776 
4777 	kfree(tb);
4778 	return 0;
4779 }
4780 
4781 static int ath11k_pull_vdev_stopped_param_tlv(struct ath11k_base *ab, struct sk_buff *skb,
4782 					      u32 *vdev_id)
4783 {
4784 	const void **tb;
4785 	const struct wmi_vdev_stopped_event *ev;
4786 	int ret;
4787 
4788 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4789 	if (IS_ERR(tb)) {
4790 		ret = PTR_ERR(tb);
4791 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4792 		return ret;
4793 	}
4794 
4795 	ev = tb[WMI_TAG_VDEV_STOPPED_EVENT];
4796 	if (!ev) {
4797 		ath11k_warn(ab, "failed to fetch vdev stop ev");
4798 		kfree(tb);
4799 		return -EPROTO;
4800 	}
4801 
4802 	*vdev_id =  ev->vdev_id;
4803 
4804 	kfree(tb);
4805 	return 0;
4806 }
4807 
4808 static int ath11k_pull_mgmt_rx_params_tlv(struct ath11k_base *ab,
4809 					  struct sk_buff *skb,
4810 					  struct mgmt_rx_event_params *hdr)
4811 {
4812 	const void **tb;
4813 	const struct wmi_mgmt_rx_hdr *ev;
4814 	const u8 *frame;
4815 	int ret;
4816 
4817 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4818 	if (IS_ERR(tb)) {
4819 		ret = PTR_ERR(tb);
4820 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4821 		return ret;
4822 	}
4823 
4824 	ev = tb[WMI_TAG_MGMT_RX_HDR];
4825 	frame = tb[WMI_TAG_ARRAY_BYTE];
4826 
4827 	if (!ev || !frame) {
4828 		ath11k_warn(ab, "failed to fetch mgmt rx hdr");
4829 		kfree(tb);
4830 		return -EPROTO;
4831 	}
4832 
4833 	hdr->pdev_id =  ev->pdev_id;
4834 	hdr->chan_freq = ev->chan_freq;
4835 	hdr->channel =  ev->channel;
4836 	hdr->snr =  ev->snr;
4837 	hdr->rate =  ev->rate;
4838 	hdr->phy_mode =  ev->phy_mode;
4839 	hdr->buf_len =  ev->buf_len;
4840 	hdr->status =  ev->status;
4841 	hdr->flags =  ev->flags;
4842 	hdr->rssi =  ev->rssi;
4843 	hdr->tsf_delta =  ev->tsf_delta;
4844 	memcpy(hdr->rssi_ctl, ev->rssi_ctl, sizeof(hdr->rssi_ctl));
4845 
4846 	if (skb->len < (frame - skb->data) + hdr->buf_len) {
4847 		ath11k_warn(ab, "invalid length in mgmt rx hdr ev");
4848 		kfree(tb);
4849 		return -EPROTO;
4850 	}
4851 
4852 	/* shift the sk_buff to point to `frame` */
4853 	skb_trim(skb, 0);
4854 	skb_put(skb, frame - skb->data);
4855 	skb_pull(skb, frame - skb->data);
4856 	skb_put(skb, hdr->buf_len);
4857 
4858 	ath11k_ce_byte_swap(skb->data, hdr->buf_len);
4859 
4860 	kfree(tb);
4861 	return 0;
4862 }
4863 
4864 static int wmi_process_mgmt_tx_comp(struct ath11k *ar, u32 desc_id,
4865 				    u32 status)
4866 {
4867 	struct sk_buff *msdu;
4868 	struct ieee80211_tx_info *info;
4869 	struct ath11k_skb_cb *skb_cb;
4870 
4871 	spin_lock_bh(&ar->txmgmt_idr_lock);
4872 	msdu = idr_find(&ar->txmgmt_idr, desc_id);
4873 
4874 	if (!msdu) {
4875 		ath11k_warn(ar->ab, "received mgmt tx compl for invalid msdu_id: %d\n",
4876 			    desc_id);
4877 		spin_unlock_bh(&ar->txmgmt_idr_lock);
4878 		return -ENOENT;
4879 	}
4880 
4881 	idr_remove(&ar->txmgmt_idr, desc_id);
4882 	spin_unlock_bh(&ar->txmgmt_idr_lock);
4883 
4884 	skb_cb = ATH11K_SKB_CB(msdu);
4885 	dma_unmap_single(ar->ab->dev, skb_cb->paddr, msdu->len, DMA_TO_DEVICE);
4886 
4887 	info = IEEE80211_SKB_CB(msdu);
4888 	if ((!(info->flags & IEEE80211_TX_CTL_NO_ACK)) && !status)
4889 		info->flags |= IEEE80211_TX_STAT_ACK;
4890 
4891 	ieee80211_tx_status_irqsafe(ar->hw, msdu);
4892 
4893 	/* WARN when we received this event without doing any mgmt tx */
4894 	if (atomic_dec_if_positive(&ar->num_pending_mgmt_tx) < 0)
4895 		WARN_ON_ONCE(1);
4896 
4897 	return 0;
4898 }
4899 
4900 static int ath11k_pull_mgmt_tx_compl_param_tlv(struct ath11k_base *ab,
4901 					       struct sk_buff *skb,
4902 					       struct wmi_mgmt_tx_compl_event *param)
4903 {
4904 	const void **tb;
4905 	const struct wmi_mgmt_tx_compl_event *ev;
4906 	int ret;
4907 
4908 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
4909 	if (IS_ERR(tb)) {
4910 		ret = PTR_ERR(tb);
4911 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
4912 		return ret;
4913 	}
4914 
4915 	ev = tb[WMI_TAG_MGMT_TX_COMPL_EVENT];
4916 	if (!ev) {
4917 		ath11k_warn(ab, "failed to fetch mgmt tx compl ev");
4918 		kfree(tb);
4919 		return -EPROTO;
4920 	}
4921 
4922 	param->pdev_id = ev->pdev_id;
4923 	param->desc_id = ev->desc_id;
4924 	param->status = ev->status;
4925 
4926 	kfree(tb);
4927 	return 0;
4928 }
4929 
4930 static void ath11k_wmi_event_scan_started(struct ath11k *ar)
4931 {
4932 	lockdep_assert_held(&ar->data_lock);
4933 
4934 	switch (ar->scan.state) {
4935 	case ATH11K_SCAN_IDLE:
4936 	case ATH11K_SCAN_RUNNING:
4937 	case ATH11K_SCAN_ABORTING:
4938 		ath11k_warn(ar->ab, "received scan started event in an invalid scan state: %s (%d)\n",
4939 			    ath11k_scan_state_str(ar->scan.state),
4940 			    ar->scan.state);
4941 		break;
4942 	case ATH11K_SCAN_STARTING:
4943 		ar->scan.state = ATH11K_SCAN_RUNNING;
4944 		complete(&ar->scan.started);
4945 		break;
4946 	}
4947 }
4948 
4949 static void ath11k_wmi_event_scan_start_failed(struct ath11k *ar)
4950 {
4951 	lockdep_assert_held(&ar->data_lock);
4952 
4953 	switch (ar->scan.state) {
4954 	case ATH11K_SCAN_IDLE:
4955 	case ATH11K_SCAN_RUNNING:
4956 	case ATH11K_SCAN_ABORTING:
4957 		ath11k_warn(ar->ab, "received scan start failed event in an invalid scan state: %s (%d)\n",
4958 			    ath11k_scan_state_str(ar->scan.state),
4959 			    ar->scan.state);
4960 		break;
4961 	case ATH11K_SCAN_STARTING:
4962 		complete(&ar->scan.started);
4963 		__ath11k_mac_scan_finish(ar);
4964 		break;
4965 	}
4966 }
4967 
4968 static void ath11k_wmi_event_scan_completed(struct ath11k *ar)
4969 {
4970 	lockdep_assert_held(&ar->data_lock);
4971 
4972 	switch (ar->scan.state) {
4973 	case ATH11K_SCAN_IDLE:
4974 	case ATH11K_SCAN_STARTING:
4975 		/* One suspected reason scan can be completed while starting is
4976 		 * if firmware fails to deliver all scan events to the host,
4977 		 * e.g. when transport pipe is full. This has been observed
4978 		 * with spectral scan phyerr events starving wmi transport
4979 		 * pipe. In such case the "scan completed" event should be (and
4980 		 * is) ignored by the host as it may be just firmware's scan
4981 		 * state machine recovering.
4982 		 */
4983 		ath11k_warn(ar->ab, "received scan completed event in an invalid scan state: %s (%d)\n",
4984 			    ath11k_scan_state_str(ar->scan.state),
4985 			    ar->scan.state);
4986 		break;
4987 	case ATH11K_SCAN_RUNNING:
4988 	case ATH11K_SCAN_ABORTING:
4989 		__ath11k_mac_scan_finish(ar);
4990 		break;
4991 	}
4992 }
4993 
4994 static void ath11k_wmi_event_scan_bss_chan(struct ath11k *ar)
4995 {
4996 	lockdep_assert_held(&ar->data_lock);
4997 
4998 	switch (ar->scan.state) {
4999 	case ATH11K_SCAN_IDLE:
5000 	case ATH11K_SCAN_STARTING:
5001 		ath11k_warn(ar->ab, "received scan bss chan event in an invalid scan state: %s (%d)\n",
5002 			    ath11k_scan_state_str(ar->scan.state),
5003 			    ar->scan.state);
5004 		break;
5005 	case ATH11K_SCAN_RUNNING:
5006 	case ATH11K_SCAN_ABORTING:
5007 		ar->scan_channel = NULL;
5008 		break;
5009 	}
5010 }
5011 
5012 static void ath11k_wmi_event_scan_foreign_chan(struct ath11k *ar, u32 freq)
5013 {
5014 	lockdep_assert_held(&ar->data_lock);
5015 
5016 	switch (ar->scan.state) {
5017 	case ATH11K_SCAN_IDLE:
5018 	case ATH11K_SCAN_STARTING:
5019 		ath11k_warn(ar->ab, "received scan foreign chan event in an invalid scan state: %s (%d)\n",
5020 			    ath11k_scan_state_str(ar->scan.state),
5021 			    ar->scan.state);
5022 		break;
5023 	case ATH11K_SCAN_RUNNING:
5024 	case ATH11K_SCAN_ABORTING:
5025 		ar->scan_channel = ieee80211_get_channel(ar->hw->wiphy, freq);
5026 		break;
5027 	}
5028 }
5029 
5030 static const char *
5031 ath11k_wmi_event_scan_type_str(enum wmi_scan_event_type type,
5032 			       enum wmi_scan_completion_reason reason)
5033 {
5034 	switch (type) {
5035 	case WMI_SCAN_EVENT_STARTED:
5036 		return "started";
5037 	case WMI_SCAN_EVENT_COMPLETED:
5038 		switch (reason) {
5039 		case WMI_SCAN_REASON_COMPLETED:
5040 			return "completed";
5041 		case WMI_SCAN_REASON_CANCELLED:
5042 			return "completed [cancelled]";
5043 		case WMI_SCAN_REASON_PREEMPTED:
5044 			return "completed [preempted]";
5045 		case WMI_SCAN_REASON_TIMEDOUT:
5046 			return "completed [timedout]";
5047 		case WMI_SCAN_REASON_INTERNAL_FAILURE:
5048 			return "completed [internal err]";
5049 		case WMI_SCAN_REASON_MAX:
5050 			break;
5051 		}
5052 		return "completed [unknown]";
5053 	case WMI_SCAN_EVENT_BSS_CHANNEL:
5054 		return "bss channel";
5055 	case WMI_SCAN_EVENT_FOREIGN_CHAN:
5056 		return "foreign channel";
5057 	case WMI_SCAN_EVENT_DEQUEUED:
5058 		return "dequeued";
5059 	case WMI_SCAN_EVENT_PREEMPTED:
5060 		return "preempted";
5061 	case WMI_SCAN_EVENT_START_FAILED:
5062 		return "start failed";
5063 	case WMI_SCAN_EVENT_RESTARTED:
5064 		return "restarted";
5065 	case WMI_SCAN_EVENT_FOREIGN_CHAN_EXIT:
5066 		return "foreign channel exit";
5067 	default:
5068 		return "unknown";
5069 	}
5070 }
5071 
5072 static int ath11k_pull_scan_ev(struct ath11k_base *ab, struct sk_buff *skb,
5073 			       struct wmi_scan_event *scan_evt_param)
5074 {
5075 	const void **tb;
5076 	const struct wmi_scan_event *ev;
5077 	int ret;
5078 
5079 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5080 	if (IS_ERR(tb)) {
5081 		ret = PTR_ERR(tb);
5082 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5083 		return ret;
5084 	}
5085 
5086 	ev = tb[WMI_TAG_SCAN_EVENT];
5087 	if (!ev) {
5088 		ath11k_warn(ab, "failed to fetch scan ev");
5089 		kfree(tb);
5090 		return -EPROTO;
5091 	}
5092 
5093 	scan_evt_param->event_type = ev->event_type;
5094 	scan_evt_param->reason = ev->reason;
5095 	scan_evt_param->channel_freq = ev->channel_freq;
5096 	scan_evt_param->scan_req_id = ev->scan_req_id;
5097 	scan_evt_param->scan_id = ev->scan_id;
5098 	scan_evt_param->vdev_id = ev->vdev_id;
5099 	scan_evt_param->tsf_timestamp = ev->tsf_timestamp;
5100 
5101 	kfree(tb);
5102 	return 0;
5103 }
5104 
5105 static int ath11k_pull_peer_sta_kickout_ev(struct ath11k_base *ab, struct sk_buff *skb,
5106 					   struct wmi_peer_sta_kickout_arg *arg)
5107 {
5108 	const void **tb;
5109 	const struct wmi_peer_sta_kickout_event *ev;
5110 	int ret;
5111 
5112 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5113 	if (IS_ERR(tb)) {
5114 		ret = PTR_ERR(tb);
5115 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5116 		return ret;
5117 	}
5118 
5119 	ev = tb[WMI_TAG_PEER_STA_KICKOUT_EVENT];
5120 	if (!ev) {
5121 		ath11k_warn(ab, "failed to fetch peer sta kickout ev");
5122 		kfree(tb);
5123 		return -EPROTO;
5124 	}
5125 
5126 	arg->mac_addr = ev->peer_macaddr.addr;
5127 
5128 	kfree(tb);
5129 	return 0;
5130 }
5131 
5132 static int ath11k_pull_roam_ev(struct ath11k_base *ab, struct sk_buff *skb,
5133 			       struct wmi_roam_event *roam_ev)
5134 {
5135 	const void **tb;
5136 	const struct wmi_roam_event *ev;
5137 	int ret;
5138 
5139 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5140 	if (IS_ERR(tb)) {
5141 		ret = PTR_ERR(tb);
5142 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5143 		return ret;
5144 	}
5145 
5146 	ev = tb[WMI_TAG_ROAM_EVENT];
5147 	if (!ev) {
5148 		ath11k_warn(ab, "failed to fetch roam ev");
5149 		kfree(tb);
5150 		return -EPROTO;
5151 	}
5152 
5153 	roam_ev->vdev_id = ev->vdev_id;
5154 	roam_ev->reason = ev->reason;
5155 	roam_ev->rssi = ev->rssi;
5156 
5157 	kfree(tb);
5158 	return 0;
5159 }
5160 
5161 static int freq_to_idx(struct ath11k *ar, int freq)
5162 {
5163 	struct ieee80211_supported_band *sband;
5164 	int band, ch, idx = 0;
5165 
5166 	for (band = NL80211_BAND_2GHZ; band < NUM_NL80211_BANDS; band++) {
5167 		sband = ar->hw->wiphy->bands[band];
5168 		if (!sband)
5169 			continue;
5170 
5171 		for (ch = 0; ch < sband->n_channels; ch++, idx++)
5172 			if (sband->channels[ch].center_freq == freq)
5173 				goto exit;
5174 	}
5175 
5176 exit:
5177 	return idx;
5178 }
5179 
5180 static int ath11k_pull_chan_info_ev(struct ath11k_base *ab, u8 *evt_buf,
5181 				    u32 len, struct wmi_chan_info_event *ch_info_ev)
5182 {
5183 	const void **tb;
5184 	const struct wmi_chan_info_event *ev;
5185 	int ret;
5186 
5187 	tb = ath11k_wmi_tlv_parse_alloc(ab, evt_buf, len, GFP_ATOMIC);
5188 	if (IS_ERR(tb)) {
5189 		ret = PTR_ERR(tb);
5190 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5191 		return ret;
5192 	}
5193 
5194 	ev = tb[WMI_TAG_CHAN_INFO_EVENT];
5195 	if (!ev) {
5196 		ath11k_warn(ab, "failed to fetch chan info ev");
5197 		kfree(tb);
5198 		return -EPROTO;
5199 	}
5200 
5201 	ch_info_ev->err_code = ev->err_code;
5202 	ch_info_ev->freq = ev->freq;
5203 	ch_info_ev->cmd_flags = ev->cmd_flags;
5204 	ch_info_ev->noise_floor = ev->noise_floor;
5205 	ch_info_ev->rx_clear_count = ev->rx_clear_count;
5206 	ch_info_ev->cycle_count = ev->cycle_count;
5207 	ch_info_ev->chan_tx_pwr_range = ev->chan_tx_pwr_range;
5208 	ch_info_ev->chan_tx_pwr_tp = ev->chan_tx_pwr_tp;
5209 	ch_info_ev->rx_frame_count = ev->rx_frame_count;
5210 	ch_info_ev->tx_frame_cnt = ev->tx_frame_cnt;
5211 	ch_info_ev->mac_clk_mhz = ev->mac_clk_mhz;
5212 	ch_info_ev->vdev_id = ev->vdev_id;
5213 
5214 	kfree(tb);
5215 	return 0;
5216 }
5217 
5218 static int
5219 ath11k_pull_pdev_bss_chan_info_ev(struct ath11k_base *ab, struct sk_buff *skb,
5220 				  struct wmi_pdev_bss_chan_info_event *bss_ch_info_ev)
5221 {
5222 	const void **tb;
5223 	const struct wmi_pdev_bss_chan_info_event *ev;
5224 	int ret;
5225 
5226 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5227 	if (IS_ERR(tb)) {
5228 		ret = PTR_ERR(tb);
5229 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5230 		return ret;
5231 	}
5232 
5233 	ev = tb[WMI_TAG_PDEV_BSS_CHAN_INFO_EVENT];
5234 	if (!ev) {
5235 		ath11k_warn(ab, "failed to fetch pdev bss chan info ev");
5236 		kfree(tb);
5237 		return -EPROTO;
5238 	}
5239 
5240 	bss_ch_info_ev->pdev_id = ev->pdev_id;
5241 	bss_ch_info_ev->freq = ev->freq;
5242 	bss_ch_info_ev->noise_floor = ev->noise_floor;
5243 	bss_ch_info_ev->rx_clear_count_low = ev->rx_clear_count_low;
5244 	bss_ch_info_ev->rx_clear_count_high = ev->rx_clear_count_high;
5245 	bss_ch_info_ev->cycle_count_low = ev->cycle_count_low;
5246 	bss_ch_info_ev->cycle_count_high = ev->cycle_count_high;
5247 	bss_ch_info_ev->tx_cycle_count_low = ev->tx_cycle_count_low;
5248 	bss_ch_info_ev->tx_cycle_count_high = ev->tx_cycle_count_high;
5249 	bss_ch_info_ev->rx_cycle_count_low = ev->rx_cycle_count_low;
5250 	bss_ch_info_ev->rx_cycle_count_high = ev->rx_cycle_count_high;
5251 	bss_ch_info_ev->rx_bss_cycle_count_low = ev->rx_bss_cycle_count_low;
5252 	bss_ch_info_ev->rx_bss_cycle_count_high = ev->rx_bss_cycle_count_high;
5253 
5254 	kfree(tb);
5255 	return 0;
5256 }
5257 
5258 static int
5259 ath11k_pull_vdev_install_key_compl_ev(struct ath11k_base *ab, struct sk_buff *skb,
5260 				      struct wmi_vdev_install_key_complete_arg *arg)
5261 {
5262 	const void **tb;
5263 	const struct wmi_vdev_install_key_compl_event *ev;
5264 	int ret;
5265 
5266 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5267 	if (IS_ERR(tb)) {
5268 		ret = PTR_ERR(tb);
5269 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5270 		return ret;
5271 	}
5272 
5273 	ev = tb[WMI_TAG_VDEV_INSTALL_KEY_COMPLETE_EVENT];
5274 	if (!ev) {
5275 		ath11k_warn(ab, "failed to fetch vdev install key compl ev");
5276 		kfree(tb);
5277 		return -EPROTO;
5278 	}
5279 
5280 	arg->vdev_id = ev->vdev_id;
5281 	arg->macaddr = ev->peer_macaddr.addr;
5282 	arg->key_idx = ev->key_idx;
5283 	arg->key_flags = ev->key_flags;
5284 	arg->status = ev->status;
5285 
5286 	kfree(tb);
5287 	return 0;
5288 }
5289 
5290 static int ath11k_pull_peer_assoc_conf_ev(struct ath11k_base *ab, struct sk_buff *skb,
5291 					  struct wmi_peer_assoc_conf_arg *peer_assoc_conf)
5292 {
5293 	const void **tb;
5294 	const struct wmi_peer_assoc_conf_event *ev;
5295 	int ret;
5296 
5297 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
5298 	if (IS_ERR(tb)) {
5299 		ret = PTR_ERR(tb);
5300 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5301 		return ret;
5302 	}
5303 
5304 	ev = tb[WMI_TAG_PEER_ASSOC_CONF_EVENT];
5305 	if (!ev) {
5306 		ath11k_warn(ab, "failed to fetch peer assoc conf ev");
5307 		kfree(tb);
5308 		return -EPROTO;
5309 	}
5310 
5311 	peer_assoc_conf->vdev_id = ev->vdev_id;
5312 	peer_assoc_conf->macaddr = ev->peer_macaddr.addr;
5313 
5314 	kfree(tb);
5315 	return 0;
5316 }
5317 
5318 static void ath11k_wmi_pull_pdev_stats_base(const struct wmi_pdev_stats_base *src,
5319 					    struct ath11k_fw_stats_pdev *dst)
5320 {
5321 	dst->ch_noise_floor = src->chan_nf;
5322 	dst->tx_frame_count = src->tx_frame_count;
5323 	dst->rx_frame_count = src->rx_frame_count;
5324 	dst->rx_clear_count = src->rx_clear_count;
5325 	dst->cycle_count = src->cycle_count;
5326 	dst->phy_err_count = src->phy_err_count;
5327 	dst->chan_tx_power = src->chan_tx_pwr;
5328 }
5329 
5330 static void
5331 ath11k_wmi_pull_pdev_stats_tx(const struct wmi_pdev_stats_tx *src,
5332 			      struct ath11k_fw_stats_pdev *dst)
5333 {
5334 	dst->comp_queued = src->comp_queued;
5335 	dst->comp_delivered = src->comp_delivered;
5336 	dst->msdu_enqued = src->msdu_enqued;
5337 	dst->mpdu_enqued = src->mpdu_enqued;
5338 	dst->wmm_drop = src->wmm_drop;
5339 	dst->local_enqued = src->local_enqued;
5340 	dst->local_freed = src->local_freed;
5341 	dst->hw_queued = src->hw_queued;
5342 	dst->hw_reaped = src->hw_reaped;
5343 	dst->underrun = src->underrun;
5344 	dst->hw_paused = src->hw_paused;
5345 	dst->tx_abort = src->tx_abort;
5346 	dst->mpdus_requeued = src->mpdus_requeued;
5347 	dst->tx_ko = src->tx_ko;
5348 	dst->tx_xretry = src->tx_xretry;
5349 	dst->data_rc = src->data_rc;
5350 	dst->self_triggers = src->self_triggers;
5351 	dst->sw_retry_failure = src->sw_retry_failure;
5352 	dst->illgl_rate_phy_err = src->illgl_rate_phy_err;
5353 	dst->pdev_cont_xretry = src->pdev_cont_xretry;
5354 	dst->pdev_tx_timeout = src->pdev_tx_timeout;
5355 	dst->pdev_resets = src->pdev_resets;
5356 	dst->stateless_tid_alloc_failure = src->stateless_tid_alloc_failure;
5357 	dst->phy_underrun = src->phy_underrun;
5358 	dst->txop_ovf = src->txop_ovf;
5359 	dst->seq_posted = src->seq_posted;
5360 	dst->seq_failed_queueing = src->seq_failed_queueing;
5361 	dst->seq_completed = src->seq_completed;
5362 	dst->seq_restarted = src->seq_restarted;
5363 	dst->mu_seq_posted = src->mu_seq_posted;
5364 	dst->mpdus_sw_flush = src->mpdus_sw_flush;
5365 	dst->mpdus_hw_filter = src->mpdus_hw_filter;
5366 	dst->mpdus_truncated = src->mpdus_truncated;
5367 	dst->mpdus_ack_failed = src->mpdus_ack_failed;
5368 	dst->mpdus_expired = src->mpdus_expired;
5369 }
5370 
5371 static void ath11k_wmi_pull_pdev_stats_rx(const struct wmi_pdev_stats_rx *src,
5372 					  struct ath11k_fw_stats_pdev *dst)
5373 {
5374 	dst->mid_ppdu_route_change = src->mid_ppdu_route_change;
5375 	dst->status_rcvd = src->status_rcvd;
5376 	dst->r0_frags = src->r0_frags;
5377 	dst->r1_frags = src->r1_frags;
5378 	dst->r2_frags = src->r2_frags;
5379 	dst->r3_frags = src->r3_frags;
5380 	dst->htt_msdus = src->htt_msdus;
5381 	dst->htt_mpdus = src->htt_mpdus;
5382 	dst->loc_msdus = src->loc_msdus;
5383 	dst->loc_mpdus = src->loc_mpdus;
5384 	dst->oversize_amsdu = src->oversize_amsdu;
5385 	dst->phy_errs = src->phy_errs;
5386 	dst->phy_err_drop = src->phy_err_drop;
5387 	dst->mpdu_errs = src->mpdu_errs;
5388 	dst->rx_ovfl_errs = src->rx_ovfl_errs;
5389 }
5390 
5391 static void
5392 ath11k_wmi_pull_vdev_stats(const struct wmi_vdev_stats *src,
5393 			   struct ath11k_fw_stats_vdev *dst)
5394 {
5395 	int i;
5396 
5397 	dst->vdev_id = src->vdev_id;
5398 	dst->beacon_snr = src->beacon_snr;
5399 	dst->data_snr = src->data_snr;
5400 	dst->num_rx_frames = src->num_rx_frames;
5401 	dst->num_rts_fail = src->num_rts_fail;
5402 	dst->num_rts_success = src->num_rts_success;
5403 	dst->num_rx_err = src->num_rx_err;
5404 	dst->num_rx_discard = src->num_rx_discard;
5405 	dst->num_tx_not_acked = src->num_tx_not_acked;
5406 
5407 	for (i = 0; i < ARRAY_SIZE(src->num_tx_frames); i++)
5408 		dst->num_tx_frames[i] = src->num_tx_frames[i];
5409 
5410 	for (i = 0; i < ARRAY_SIZE(src->num_tx_frames_retries); i++)
5411 		dst->num_tx_frames_retries[i] = src->num_tx_frames_retries[i];
5412 
5413 	for (i = 0; i < ARRAY_SIZE(src->num_tx_frames_failures); i++)
5414 		dst->num_tx_frames_failures[i] = src->num_tx_frames_failures[i];
5415 
5416 	for (i = 0; i < ARRAY_SIZE(src->tx_rate_history); i++)
5417 		dst->tx_rate_history[i] = src->tx_rate_history[i];
5418 
5419 	for (i = 0; i < ARRAY_SIZE(src->beacon_rssi_history); i++)
5420 		dst->beacon_rssi_history[i] = src->beacon_rssi_history[i];
5421 }
5422 
5423 static void
5424 ath11k_wmi_pull_bcn_stats(const struct wmi_bcn_stats *src,
5425 			  struct ath11k_fw_stats_bcn *dst)
5426 {
5427 	dst->vdev_id = src->vdev_id;
5428 	dst->tx_bcn_succ_cnt = src->tx_bcn_succ_cnt;
5429 	dst->tx_bcn_outage_cnt = src->tx_bcn_outage_cnt;
5430 }
5431 
5432 int ath11k_wmi_pull_fw_stats(struct ath11k_base *ab, struct sk_buff *skb,
5433 			     struct ath11k_fw_stats *stats)
5434 {
5435 	const void **tb;
5436 	const struct wmi_stats_event *ev;
5437 	const void *data;
5438 	int i, ret;
5439 	u32 len = skb->len;
5440 
5441 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, len, GFP_ATOMIC);
5442 	if (IS_ERR(tb)) {
5443 		ret = PTR_ERR(tb);
5444 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
5445 		return ret;
5446 	}
5447 
5448 	ev = tb[WMI_TAG_STATS_EVENT];
5449 	data = tb[WMI_TAG_ARRAY_BYTE];
5450 	if (!ev || !data) {
5451 		ath11k_warn(ab, "failed to fetch update stats ev");
5452 		kfree(tb);
5453 		return -EPROTO;
5454 	}
5455 
5456 	ath11k_dbg(ab, ATH11K_DBG_WMI,
5457 		   "wmi stats update ev pdev_id %d pdev %i vdev %i bcn %i\n",
5458 		   ev->pdev_id,
5459 		   ev->num_pdev_stats, ev->num_vdev_stats,
5460 		   ev->num_bcn_stats);
5461 
5462 	stats->pdev_id = ev->pdev_id;
5463 	stats->stats_id = 0;
5464 
5465 	for (i = 0; i < ev->num_pdev_stats; i++) {
5466 		const struct wmi_pdev_stats *src;
5467 		struct ath11k_fw_stats_pdev *dst;
5468 
5469 		src = data;
5470 		if (len < sizeof(*src)) {
5471 			kfree(tb);
5472 			return -EPROTO;
5473 		}
5474 
5475 		stats->stats_id = WMI_REQUEST_PDEV_STAT;
5476 
5477 		data += sizeof(*src);
5478 		len -= sizeof(*src);
5479 
5480 		dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
5481 		if (!dst)
5482 			continue;
5483 
5484 		ath11k_wmi_pull_pdev_stats_base(&src->base, dst);
5485 		ath11k_wmi_pull_pdev_stats_tx(&src->tx, dst);
5486 		ath11k_wmi_pull_pdev_stats_rx(&src->rx, dst);
5487 		list_add_tail(&dst->list, &stats->pdevs);
5488 	}
5489 
5490 	for (i = 0; i < ev->num_vdev_stats; i++) {
5491 		const struct wmi_vdev_stats *src;
5492 		struct ath11k_fw_stats_vdev *dst;
5493 
5494 		src = data;
5495 		if (len < sizeof(*src)) {
5496 			kfree(tb);
5497 			return -EPROTO;
5498 		}
5499 
5500 		stats->stats_id = WMI_REQUEST_VDEV_STAT;
5501 
5502 		data += sizeof(*src);
5503 		len -= sizeof(*src);
5504 
5505 		dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
5506 		if (!dst)
5507 			continue;
5508 
5509 		ath11k_wmi_pull_vdev_stats(src, dst);
5510 		list_add_tail(&dst->list, &stats->vdevs);
5511 	}
5512 
5513 	for (i = 0; i < ev->num_bcn_stats; i++) {
5514 		const struct wmi_bcn_stats *src;
5515 		struct ath11k_fw_stats_bcn *dst;
5516 
5517 		src = data;
5518 		if (len < sizeof(*src)) {
5519 			kfree(tb);
5520 			return -EPROTO;
5521 		}
5522 
5523 		stats->stats_id = WMI_REQUEST_BCN_STAT;
5524 
5525 		data += sizeof(*src);
5526 		len -= sizeof(*src);
5527 
5528 		dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
5529 		if (!dst)
5530 			continue;
5531 
5532 		ath11k_wmi_pull_bcn_stats(src, dst);
5533 		list_add_tail(&dst->list, &stats->bcn);
5534 	}
5535 
5536 	kfree(tb);
5537 	return 0;
5538 }
5539 
5540 size_t ath11k_wmi_fw_stats_num_vdevs(struct list_head *head)
5541 {
5542 	struct ath11k_fw_stats_vdev *i;
5543 	size_t num = 0;
5544 
5545 	list_for_each_entry(i, head, list)
5546 		++num;
5547 
5548 	return num;
5549 }
5550 
5551 static size_t ath11k_wmi_fw_stats_num_bcn(struct list_head *head)
5552 {
5553 	struct ath11k_fw_stats_bcn *i;
5554 	size_t num = 0;
5555 
5556 	list_for_each_entry(i, head, list)
5557 		++num;
5558 
5559 	return num;
5560 }
5561 
5562 static void
5563 ath11k_wmi_fw_pdev_base_stats_fill(const struct ath11k_fw_stats_pdev *pdev,
5564 				   char *buf, u32 *length)
5565 {
5566 	u32 len = *length;
5567 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
5568 
5569 	len += scnprintf(buf + len, buf_len - len, "\n");
5570 	len += scnprintf(buf + len, buf_len - len, "%30s\n",
5571 			"ath11k PDEV stats");
5572 	len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
5573 			"=================");
5574 
5575 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5576 			"Channel noise floor", pdev->ch_noise_floor);
5577 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5578 			"Channel TX power", pdev->chan_tx_power);
5579 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5580 			"TX frame count", pdev->tx_frame_count);
5581 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5582 			"RX frame count", pdev->rx_frame_count);
5583 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5584 			"RX clear count", pdev->rx_clear_count);
5585 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5586 			"Cycle count", pdev->cycle_count);
5587 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5588 			"PHY error count", pdev->phy_err_count);
5589 
5590 	*length = len;
5591 }
5592 
5593 static void
5594 ath11k_wmi_fw_pdev_tx_stats_fill(const struct ath11k_fw_stats_pdev *pdev,
5595 				 char *buf, u32 *length)
5596 {
5597 	u32 len = *length;
5598 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
5599 
5600 	len += scnprintf(buf + len, buf_len - len, "\n%30s\n",
5601 			 "ath11k PDEV TX stats");
5602 	len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
5603 			 "====================");
5604 
5605 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5606 			 "HTT cookies queued", pdev->comp_queued);
5607 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5608 			 "HTT cookies disp.", pdev->comp_delivered);
5609 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5610 			 "MSDU queued", pdev->msdu_enqued);
5611 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5612 			 "MPDU queued", pdev->mpdu_enqued);
5613 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5614 			 "MSDUs dropped", pdev->wmm_drop);
5615 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5616 			 "Local enqued", pdev->local_enqued);
5617 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5618 			 "Local freed", pdev->local_freed);
5619 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5620 			 "HW queued", pdev->hw_queued);
5621 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5622 			 "PPDUs reaped", pdev->hw_reaped);
5623 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5624 			 "Num underruns", pdev->underrun);
5625 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5626 			 "Num HW Paused", pdev->hw_paused);
5627 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5628 			 "PPDUs cleaned", pdev->tx_abort);
5629 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5630 			 "MPDUs requeued", pdev->mpdus_requeued);
5631 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5632 			 "PPDU OK", pdev->tx_ko);
5633 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5634 			 "Excessive retries", pdev->tx_xretry);
5635 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5636 			 "HW rate", pdev->data_rc);
5637 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5638 			 "Sched self triggers", pdev->self_triggers);
5639 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5640 			 "Dropped due to SW retries",
5641 			 pdev->sw_retry_failure);
5642 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5643 			 "Illegal rate phy errors",
5644 			 pdev->illgl_rate_phy_err);
5645 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5646 			 "PDEV continuous xretry", pdev->pdev_cont_xretry);
5647 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5648 			 "TX timeout", pdev->pdev_tx_timeout);
5649 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5650 			 "PDEV resets", pdev->pdev_resets);
5651 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5652 			 "Stateless TIDs alloc failures",
5653 			 pdev->stateless_tid_alloc_failure);
5654 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5655 			 "PHY underrun", pdev->phy_underrun);
5656 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5657 			 "MPDU is more than txop limit", pdev->txop_ovf);
5658 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5659 			 "Num sequences posted", pdev->seq_posted);
5660 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5661 			 "Num seq failed queueing ", pdev->seq_failed_queueing);
5662 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5663 			 "Num sequences completed ", pdev->seq_completed);
5664 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5665 			 "Num sequences restarted ", pdev->seq_restarted);
5666 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5667 			 "Num of MU sequences posted ", pdev->mu_seq_posted);
5668 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5669 			 "Num of MPDUS SW flushed ", pdev->mpdus_sw_flush);
5670 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5671 			 "Num of MPDUS HW filtered ", pdev->mpdus_hw_filter);
5672 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5673 			 "Num of MPDUS truncated ", pdev->mpdus_truncated);
5674 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5675 			 "Num of MPDUS ACK failed ", pdev->mpdus_ack_failed);
5676 	len += scnprintf(buf + len, buf_len - len, "%30s %10u\n",
5677 			 "Num of MPDUS expired ", pdev->mpdus_expired);
5678 	*length = len;
5679 }
5680 
5681 static void
5682 ath11k_wmi_fw_pdev_rx_stats_fill(const struct ath11k_fw_stats_pdev *pdev,
5683 				 char *buf, u32 *length)
5684 {
5685 	u32 len = *length;
5686 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
5687 
5688 	len += scnprintf(buf + len, buf_len - len, "\n%30s\n",
5689 			 "ath11k PDEV RX stats");
5690 	len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
5691 			 "====================");
5692 
5693 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5694 			 "Mid PPDU route change",
5695 			 pdev->mid_ppdu_route_change);
5696 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5697 			 "Tot. number of statuses", pdev->status_rcvd);
5698 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5699 			 "Extra frags on rings 0", pdev->r0_frags);
5700 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5701 			 "Extra frags on rings 1", pdev->r1_frags);
5702 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5703 			 "Extra frags on rings 2", pdev->r2_frags);
5704 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5705 			 "Extra frags on rings 3", pdev->r3_frags);
5706 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5707 			 "MSDUs delivered to HTT", pdev->htt_msdus);
5708 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5709 			 "MPDUs delivered to HTT", pdev->htt_mpdus);
5710 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5711 			 "MSDUs delivered to stack", pdev->loc_msdus);
5712 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5713 			 "MPDUs delivered to stack", pdev->loc_mpdus);
5714 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5715 			 "Oversized AMSUs", pdev->oversize_amsdu);
5716 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5717 			 "PHY errors", pdev->phy_errs);
5718 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5719 			 "PHY errors drops", pdev->phy_err_drop);
5720 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5721 			 "MPDU errors (FCS, MIC, ENC)", pdev->mpdu_errs);
5722 	len += scnprintf(buf + len, buf_len - len, "%30s %10d\n",
5723 			 "Overflow errors", pdev->rx_ovfl_errs);
5724 	*length = len;
5725 }
5726 
5727 static void
5728 ath11k_wmi_fw_vdev_stats_fill(struct ath11k *ar,
5729 			      const struct ath11k_fw_stats_vdev *vdev,
5730 			      char *buf, u32 *length)
5731 {
5732 	u32 len = *length;
5733 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
5734 	struct ath11k_vif *arvif = ath11k_mac_get_arvif(ar, vdev->vdev_id);
5735 	u8 *vif_macaddr;
5736 	int i;
5737 
5738 	/* VDEV stats has all the active VDEVs of other PDEVs as well,
5739 	 * ignoring those not part of requested PDEV
5740 	 */
5741 	if (!arvif)
5742 		return;
5743 
5744 	vif_macaddr = arvif->vif->addr;
5745 
5746 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
5747 			 "VDEV ID", vdev->vdev_id);
5748 	len += scnprintf(buf + len, buf_len - len, "%30s %pM\n",
5749 			 "VDEV MAC address", vif_macaddr);
5750 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
5751 			 "beacon snr", vdev->beacon_snr);
5752 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
5753 			 "data snr", vdev->data_snr);
5754 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
5755 			 "num rx frames", vdev->num_rx_frames);
5756 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
5757 			 "num rts fail", vdev->num_rts_fail);
5758 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
5759 			 "num rts success", vdev->num_rts_success);
5760 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
5761 			 "num rx err", vdev->num_rx_err);
5762 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
5763 			 "num rx discard", vdev->num_rx_discard);
5764 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
5765 			 "num tx not acked", vdev->num_tx_not_acked);
5766 
5767 	for (i = 0 ; i < ARRAY_SIZE(vdev->num_tx_frames); i++)
5768 		len += scnprintf(buf + len, buf_len - len,
5769 				"%25s [%02d] %u\n",
5770 				"num tx frames", i,
5771 				vdev->num_tx_frames[i]);
5772 
5773 	for (i = 0 ; i < ARRAY_SIZE(vdev->num_tx_frames_retries); i++)
5774 		len += scnprintf(buf + len, buf_len - len,
5775 				"%25s [%02d] %u\n",
5776 				"num tx frames retries", i,
5777 				vdev->num_tx_frames_retries[i]);
5778 
5779 	for (i = 0 ; i < ARRAY_SIZE(vdev->num_tx_frames_failures); i++)
5780 		len += scnprintf(buf + len, buf_len - len,
5781 				"%25s [%02d] %u\n",
5782 				"num tx frames failures", i,
5783 				vdev->num_tx_frames_failures[i]);
5784 
5785 	for (i = 0 ; i < ARRAY_SIZE(vdev->tx_rate_history); i++)
5786 		len += scnprintf(buf + len, buf_len - len,
5787 				"%25s [%02d] 0x%08x\n",
5788 				"tx rate history", i,
5789 				vdev->tx_rate_history[i]);
5790 
5791 	for (i = 0 ; i < ARRAY_SIZE(vdev->beacon_rssi_history); i++)
5792 		len += scnprintf(buf + len, buf_len - len,
5793 				"%25s [%02d] %u\n",
5794 				"beacon rssi history", i,
5795 				vdev->beacon_rssi_history[i]);
5796 
5797 	len += scnprintf(buf + len, buf_len - len, "\n");
5798 	*length = len;
5799 }
5800 
5801 static void
5802 ath11k_wmi_fw_bcn_stats_fill(struct ath11k *ar,
5803 			     const struct ath11k_fw_stats_bcn *bcn,
5804 			     char *buf, u32 *length)
5805 {
5806 	u32 len = *length;
5807 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
5808 	struct ath11k_vif *arvif = ath11k_mac_get_arvif(ar, bcn->vdev_id);
5809 	u8 *vdev_macaddr;
5810 
5811 	if (!arvif) {
5812 		ath11k_warn(ar->ab, "invalid vdev id %d in bcn stats",
5813 			    bcn->vdev_id);
5814 		return;
5815 	}
5816 
5817 	vdev_macaddr = arvif->vif->addr;
5818 
5819 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
5820 			 "VDEV ID", bcn->vdev_id);
5821 	len += scnprintf(buf + len, buf_len - len, "%30s %pM\n",
5822 			 "VDEV MAC address", vdev_macaddr);
5823 	len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
5824 			 "================");
5825 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
5826 			 "Num of beacon tx success", bcn->tx_bcn_succ_cnt);
5827 	len += scnprintf(buf + len, buf_len - len, "%30s %u\n",
5828 			 "Num of beacon tx failures", bcn->tx_bcn_outage_cnt);
5829 
5830 	len += scnprintf(buf + len, buf_len - len, "\n");
5831 	*length = len;
5832 }
5833 
5834 void ath11k_wmi_fw_stats_fill(struct ath11k *ar,
5835 			      struct ath11k_fw_stats *fw_stats,
5836 			      u32 stats_id, char *buf)
5837 {
5838 	u32 len = 0;
5839 	u32 buf_len = ATH11K_FW_STATS_BUF_SIZE;
5840 	const struct ath11k_fw_stats_pdev *pdev;
5841 	const struct ath11k_fw_stats_vdev *vdev;
5842 	const struct ath11k_fw_stats_bcn *bcn;
5843 	size_t num_bcn;
5844 
5845 	spin_lock_bh(&ar->data_lock);
5846 
5847 	if (stats_id == WMI_REQUEST_PDEV_STAT) {
5848 		pdev = list_first_entry_or_null(&fw_stats->pdevs,
5849 						struct ath11k_fw_stats_pdev, list);
5850 		if (!pdev) {
5851 			ath11k_warn(ar->ab, "failed to get pdev stats\n");
5852 			goto unlock;
5853 		}
5854 
5855 		ath11k_wmi_fw_pdev_base_stats_fill(pdev, buf, &len);
5856 		ath11k_wmi_fw_pdev_tx_stats_fill(pdev, buf, &len);
5857 		ath11k_wmi_fw_pdev_rx_stats_fill(pdev, buf, &len);
5858 	}
5859 
5860 	if (stats_id == WMI_REQUEST_VDEV_STAT) {
5861 		len += scnprintf(buf + len, buf_len - len, "\n");
5862 		len += scnprintf(buf + len, buf_len - len, "%30s\n",
5863 				 "ath11k VDEV stats");
5864 		len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
5865 				 "=================");
5866 
5867 		list_for_each_entry(vdev, &fw_stats->vdevs, list)
5868 			ath11k_wmi_fw_vdev_stats_fill(ar, vdev, buf, &len);
5869 	}
5870 
5871 	if (stats_id == WMI_REQUEST_BCN_STAT) {
5872 		num_bcn = ath11k_wmi_fw_stats_num_bcn(&fw_stats->bcn);
5873 
5874 		len += scnprintf(buf + len, buf_len - len, "\n");
5875 		len += scnprintf(buf + len, buf_len - len, "%30s (%zu)\n",
5876 				 "ath11k Beacon stats", num_bcn);
5877 		len += scnprintf(buf + len, buf_len - len, "%30s\n\n",
5878 				 "===================");
5879 
5880 		list_for_each_entry(bcn, &fw_stats->bcn, list)
5881 			ath11k_wmi_fw_bcn_stats_fill(ar, bcn, buf, &len);
5882 	}
5883 
5884 unlock:
5885 	spin_unlock_bh(&ar->data_lock);
5886 
5887 	if (len >= buf_len)
5888 		buf[len - 1] = 0;
5889 	else
5890 		buf[len] = 0;
5891 }
5892 
5893 static void ath11k_wmi_op_ep_tx_credits(struct ath11k_base *ab)
5894 {
5895 	/* try to send pending beacons first. they take priority */
5896 	wake_up(&ab->wmi_ab.tx_credits_wq);
5897 }
5898 
5899 static void ath11k_wmi_htc_tx_complete(struct ath11k_base *ab,
5900 				       struct sk_buff *skb)
5901 {
5902 	struct ath11k_pdev_wmi *wmi = NULL;
5903 	u32 i;
5904 	u8 wmi_ep_count;
5905 	u8 eid;
5906 
5907 	eid = ATH11K_SKB_CB(skb)->eid;
5908 	dev_kfree_skb(skb);
5909 
5910 	if (eid >= ATH11K_HTC_EP_COUNT)
5911 		return;
5912 
5913 	wmi_ep_count = ab->htc.wmi_ep_count;
5914 	if (wmi_ep_count > ab->hw_params.max_radios)
5915 		return;
5916 
5917 	for (i = 0; i < ab->htc.wmi_ep_count; i++) {
5918 		if (ab->wmi_ab.wmi[i].eid == eid) {
5919 			wmi = &ab->wmi_ab.wmi[i];
5920 			break;
5921 		}
5922 	}
5923 
5924 	if (wmi)
5925 		wake_up(&wmi->tx_ce_desc_wq);
5926 }
5927 
5928 static bool ath11k_reg_is_world_alpha(char *alpha)
5929 {
5930 	return alpha[0] == '0' && alpha[1] == '0';
5931 }
5932 
5933 static int ath11k_reg_chan_list_event(struct ath11k_base *ab, struct sk_buff *skb)
5934 {
5935 	struct cur_regulatory_info *reg_info = NULL;
5936 	struct ieee80211_regdomain *regd = NULL;
5937 	bool intersect = false;
5938 	int ret = 0, pdev_idx;
5939 	struct ath11k *ar;
5940 
5941 	reg_info = kzalloc(sizeof(*reg_info), GFP_ATOMIC);
5942 	if (!reg_info) {
5943 		ret = -ENOMEM;
5944 		goto fallback;
5945 	}
5946 
5947 	ret = ath11k_pull_reg_chan_list_update_ev(ab, skb, reg_info);
5948 	if (ret) {
5949 		ath11k_warn(ab, "failed to extract regulatory info from received event\n");
5950 		goto fallback;
5951 	}
5952 
5953 	if (reg_info->status_code != REG_SET_CC_STATUS_PASS) {
5954 		/* In case of failure to set the requested ctry,
5955 		 * fw retains the current regd. We print a failure info
5956 		 * and return from here.
5957 		 */
5958 		ath11k_warn(ab, "Failed to set the requested Country regulatory setting\n");
5959 		goto mem_free;
5960 	}
5961 
5962 	pdev_idx = reg_info->phy_id;
5963 
5964 	/* Avoid default reg rule updates sent during FW recovery if
5965 	 * it is already available
5966 	 */
5967 	spin_lock(&ab->base_lock);
5968 	if (test_bit(ATH11K_FLAG_RECOVERY, &ab->dev_flags) &&
5969 	    ab->default_regd[pdev_idx]) {
5970 		spin_unlock(&ab->base_lock);
5971 		goto mem_free;
5972 	}
5973 	spin_unlock(&ab->base_lock);
5974 
5975 	if (pdev_idx >= ab->num_radios) {
5976 		/* Process the event for phy0 only if single_pdev_only
5977 		 * is true. If pdev_idx is valid but not 0, discard the
5978 		 * event. Otherwise, it goes to fallback.
5979 		 */
5980 		if (ab->hw_params.single_pdev_only &&
5981 		    pdev_idx < ab->hw_params.num_rxmda_per_pdev)
5982 			goto mem_free;
5983 		else
5984 			goto fallback;
5985 	}
5986 
5987 	/* Avoid multiple overwrites to default regd, during core
5988 	 * stop-start after mac registration.
5989 	 */
5990 	if (ab->default_regd[pdev_idx] && !ab->new_regd[pdev_idx] &&
5991 	    !memcmp((char *)ab->default_regd[pdev_idx]->alpha2,
5992 		    (char *)reg_info->alpha2, 2))
5993 		goto mem_free;
5994 
5995 	/* Intersect new rules with default regd if a new country setting was
5996 	 * requested, i.e a default regd was already set during initialization
5997 	 * and the regd coming from this event has a valid country info.
5998 	 */
5999 	if (ab->default_regd[pdev_idx] &&
6000 	    !ath11k_reg_is_world_alpha((char *)
6001 		ab->default_regd[pdev_idx]->alpha2) &&
6002 	    !ath11k_reg_is_world_alpha((char *)reg_info->alpha2))
6003 		intersect = true;
6004 
6005 	regd = ath11k_reg_build_regd(ab, reg_info, intersect);
6006 	if (!regd) {
6007 		ath11k_warn(ab, "failed to build regd from reg_info\n");
6008 		goto fallback;
6009 	}
6010 
6011 	spin_lock(&ab->base_lock);
6012 	if (ab->default_regd[pdev_idx]) {
6013 		/* The initial rules from FW after WMI Init is to build
6014 		 * the default regd. From then on, any rules updated for
6015 		 * the pdev could be due to user reg changes.
6016 		 * Free previously built regd before assigning the newly
6017 		 * generated regd to ar. NULL pointer handling will be
6018 		 * taken care by kfree itself.
6019 		 */
6020 		ar = ab->pdevs[pdev_idx].ar;
6021 		kfree(ab->new_regd[pdev_idx]);
6022 		ab->new_regd[pdev_idx] = regd;
6023 		ieee80211_queue_work(ar->hw, &ar->regd_update_work);
6024 	} else {
6025 		/* This regd would be applied during mac registration and is
6026 		 * held constant throughout for regd intersection purpose
6027 		 */
6028 		ab->default_regd[pdev_idx] = regd;
6029 	}
6030 	ab->dfs_region = reg_info->dfs_region;
6031 	spin_unlock(&ab->base_lock);
6032 
6033 	goto mem_free;
6034 
6035 fallback:
6036 	/* Fallback to older reg (by sending previous country setting
6037 	 * again if fw has succeded and we failed to process here.
6038 	 * The Regdomain should be uniform across driver and fw. Since the
6039 	 * FW has processed the command and sent a success status, we expect
6040 	 * this function to succeed as well. If it doesn't, CTRY needs to be
6041 	 * reverted at the fw and the old SCAN_CHAN_LIST cmd needs to be sent.
6042 	 */
6043 	/* TODO: This is rare, but still should also be handled */
6044 	WARN_ON(1);
6045 mem_free:
6046 	if (reg_info) {
6047 		kfree(reg_info->reg_rules_2g_ptr);
6048 		kfree(reg_info->reg_rules_5g_ptr);
6049 		kfree(reg_info);
6050 	}
6051 	return ret;
6052 }
6053 
6054 static int ath11k_wmi_tlv_rdy_parse(struct ath11k_base *ab, u16 tag, u16 len,
6055 				    const void *ptr, void *data)
6056 {
6057 	struct wmi_tlv_rdy_parse *rdy_parse = data;
6058 	struct wmi_ready_event fixed_param;
6059 	struct wmi_mac_addr *addr_list;
6060 	struct ath11k_pdev *pdev;
6061 	u32 num_mac_addr;
6062 	int i;
6063 
6064 	switch (tag) {
6065 	case WMI_TAG_READY_EVENT:
6066 		memset(&fixed_param, 0, sizeof(fixed_param));
6067 		memcpy(&fixed_param, (struct wmi_ready_event *)ptr,
6068 		       min_t(u16, sizeof(fixed_param), len));
6069 		ab->wlan_init_status = fixed_param.ready_event_min.status;
6070 		rdy_parse->num_extra_mac_addr =
6071 			fixed_param.ready_event_min.num_extra_mac_addr;
6072 
6073 		ether_addr_copy(ab->mac_addr,
6074 				fixed_param.ready_event_min.mac_addr.addr);
6075 		ab->pktlog_defs_checksum = fixed_param.pktlog_defs_checksum;
6076 		ab->wmi_ready = true;
6077 		break;
6078 	case WMI_TAG_ARRAY_FIXED_STRUCT:
6079 		addr_list = (struct wmi_mac_addr *)ptr;
6080 		num_mac_addr = rdy_parse->num_extra_mac_addr;
6081 
6082 		if (!(ab->num_radios > 1 && num_mac_addr >= ab->num_radios))
6083 			break;
6084 
6085 		for (i = 0; i < ab->num_radios; i++) {
6086 			pdev = &ab->pdevs[i];
6087 			ether_addr_copy(pdev->mac_addr, addr_list[i].addr);
6088 		}
6089 		ab->pdevs_macaddr_valid = true;
6090 		break;
6091 	default:
6092 		break;
6093 	}
6094 
6095 	return 0;
6096 }
6097 
6098 static int ath11k_ready_event(struct ath11k_base *ab, struct sk_buff *skb)
6099 {
6100 	struct wmi_tlv_rdy_parse rdy_parse = { };
6101 	int ret;
6102 
6103 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
6104 				  ath11k_wmi_tlv_rdy_parse, &rdy_parse);
6105 	if (ret) {
6106 		ath11k_warn(ab, "failed to parse tlv %d\n", ret);
6107 		return ret;
6108 	}
6109 
6110 	complete(&ab->wmi_ab.unified_ready);
6111 	return 0;
6112 }
6113 
6114 static void ath11k_peer_delete_resp_event(struct ath11k_base *ab, struct sk_buff *skb)
6115 {
6116 	struct wmi_peer_delete_resp_event peer_del_resp;
6117 	struct ath11k *ar;
6118 
6119 	if (ath11k_pull_peer_del_resp_ev(ab, skb, &peer_del_resp) != 0) {
6120 		ath11k_warn(ab, "failed to extract peer delete resp");
6121 		return;
6122 	}
6123 
6124 	rcu_read_lock();
6125 	ar = ath11k_mac_get_ar_by_vdev_id(ab, peer_del_resp.vdev_id);
6126 	if (!ar) {
6127 		ath11k_warn(ab, "invalid vdev id in peer delete resp ev %d",
6128 			    peer_del_resp.vdev_id);
6129 		rcu_read_unlock();
6130 		return;
6131 	}
6132 
6133 	complete(&ar->peer_delete_done);
6134 	rcu_read_unlock();
6135 	ath11k_dbg(ab, ATH11K_DBG_WMI, "peer delete resp for vdev id %d addr %pM\n",
6136 		   peer_del_resp.vdev_id, peer_del_resp.peer_macaddr.addr);
6137 }
6138 
6139 static void ath11k_vdev_delete_resp_event(struct ath11k_base *ab,
6140 					  struct sk_buff *skb)
6141 {
6142 	struct ath11k *ar;
6143 	u32 vdev_id = 0;
6144 
6145 	if (ath11k_pull_vdev_del_resp_ev(ab, skb, &vdev_id) != 0) {
6146 		ath11k_warn(ab, "failed to extract vdev delete resp");
6147 		return;
6148 	}
6149 
6150 	rcu_read_lock();
6151 	ar = ath11k_mac_get_ar_by_vdev_id(ab, vdev_id);
6152 	if (!ar) {
6153 		ath11k_warn(ab, "invalid vdev id in vdev delete resp ev %d",
6154 			    vdev_id);
6155 		rcu_read_unlock();
6156 		return;
6157 	}
6158 
6159 	complete(&ar->vdev_delete_done);
6160 
6161 	rcu_read_unlock();
6162 
6163 	ath11k_dbg(ab, ATH11K_DBG_WMI, "vdev delete resp for vdev id %d\n",
6164 		   vdev_id);
6165 }
6166 
6167 static inline const char *ath11k_wmi_vdev_resp_print(u32 vdev_resp_status)
6168 {
6169 	switch (vdev_resp_status) {
6170 	case WMI_VDEV_START_RESPONSE_INVALID_VDEVID:
6171 		return "invalid vdev id";
6172 	case WMI_VDEV_START_RESPONSE_NOT_SUPPORTED:
6173 		return "not supported";
6174 	case WMI_VDEV_START_RESPONSE_DFS_VIOLATION:
6175 		return "dfs violation";
6176 	case WMI_VDEV_START_RESPONSE_INVALID_REGDOMAIN:
6177 		return "invalid regdomain";
6178 	default:
6179 		return "unknown";
6180 	}
6181 }
6182 
6183 static void ath11k_vdev_start_resp_event(struct ath11k_base *ab, struct sk_buff *skb)
6184 {
6185 	struct wmi_vdev_start_resp_event vdev_start_resp;
6186 	struct ath11k *ar;
6187 	u32 status;
6188 
6189 	if (ath11k_pull_vdev_start_resp_tlv(ab, skb, &vdev_start_resp) != 0) {
6190 		ath11k_warn(ab, "failed to extract vdev start resp");
6191 		return;
6192 	}
6193 
6194 	rcu_read_lock();
6195 	ar = ath11k_mac_get_ar_by_vdev_id(ab, vdev_start_resp.vdev_id);
6196 	if (!ar) {
6197 		ath11k_warn(ab, "invalid vdev id in vdev start resp ev %d",
6198 			    vdev_start_resp.vdev_id);
6199 		rcu_read_unlock();
6200 		return;
6201 	}
6202 
6203 	ar->last_wmi_vdev_start_status = 0;
6204 
6205 	status = vdev_start_resp.status;
6206 
6207 	if (WARN_ON_ONCE(status)) {
6208 		ath11k_warn(ab, "vdev start resp error status %d (%s)\n",
6209 			    status, ath11k_wmi_vdev_resp_print(status));
6210 		ar->last_wmi_vdev_start_status = status;
6211 	}
6212 
6213 	complete(&ar->vdev_setup_done);
6214 
6215 	rcu_read_unlock();
6216 
6217 	ath11k_dbg(ab, ATH11K_DBG_WMI, "vdev start resp for vdev id %d",
6218 		   vdev_start_resp.vdev_id);
6219 }
6220 
6221 static void ath11k_bcn_tx_status_event(struct ath11k_base *ab, struct sk_buff *skb)
6222 {
6223 	struct ath11k_vif *arvif;
6224 	u32 vdev_id, tx_status;
6225 
6226 	if (ath11k_pull_bcn_tx_status_ev(ab, skb->data, skb->len,
6227 					 &vdev_id, &tx_status) != 0) {
6228 		ath11k_warn(ab, "failed to extract bcn tx status");
6229 		return;
6230 	}
6231 
6232 	arvif = ath11k_mac_get_arvif_by_vdev_id(ab, vdev_id);
6233 	if (!arvif) {
6234 		ath11k_warn(ab, "invalid vdev id %d in bcn_tx_status",
6235 			    vdev_id);
6236 		return;
6237 	}
6238 	ath11k_mac_bcn_tx_event(arvif);
6239 }
6240 
6241 static void ath11k_vdev_stopped_event(struct ath11k_base *ab, struct sk_buff *skb)
6242 {
6243 	struct ath11k *ar;
6244 	u32 vdev_id = 0;
6245 
6246 	if (ath11k_pull_vdev_stopped_param_tlv(ab, skb, &vdev_id) != 0) {
6247 		ath11k_warn(ab, "failed to extract vdev stopped event");
6248 		return;
6249 	}
6250 
6251 	rcu_read_lock();
6252 	ar = ath11k_mac_get_ar_by_vdev_id(ab, vdev_id);
6253 	if (!ar) {
6254 		ath11k_warn(ab, "invalid vdev id in vdev stopped ev %d",
6255 			    vdev_id);
6256 		rcu_read_unlock();
6257 		return;
6258 	}
6259 
6260 	complete(&ar->vdev_setup_done);
6261 
6262 	rcu_read_unlock();
6263 
6264 	ath11k_dbg(ab, ATH11K_DBG_WMI, "vdev stopped for vdev id %d", vdev_id);
6265 }
6266 
6267 static void ath11k_mgmt_rx_event(struct ath11k_base *ab, struct sk_buff *skb)
6268 {
6269 	struct mgmt_rx_event_params rx_ev = {0};
6270 	struct ath11k *ar;
6271 	struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(skb);
6272 	struct ieee80211_hdr *hdr;
6273 	u16 fc;
6274 	struct ieee80211_supported_band *sband;
6275 
6276 	if (ath11k_pull_mgmt_rx_params_tlv(ab, skb, &rx_ev) != 0) {
6277 		ath11k_warn(ab, "failed to extract mgmt rx event");
6278 		dev_kfree_skb(skb);
6279 		return;
6280 	}
6281 
6282 	memset(status, 0, sizeof(*status));
6283 
6284 	ath11k_dbg(ab, ATH11K_DBG_MGMT, "mgmt rx event status %08x\n",
6285 		   rx_ev.status);
6286 
6287 	rcu_read_lock();
6288 	ar = ath11k_mac_get_ar_by_pdev_id(ab, rx_ev.pdev_id);
6289 
6290 	if (!ar) {
6291 		ath11k_warn(ab, "invalid pdev_id %d in mgmt_rx_event\n",
6292 			    rx_ev.pdev_id);
6293 		dev_kfree_skb(skb);
6294 		goto exit;
6295 	}
6296 
6297 	if ((test_bit(ATH11K_CAC_RUNNING, &ar->dev_flags)) ||
6298 	    (rx_ev.status & (WMI_RX_STATUS_ERR_DECRYPT |
6299 	    WMI_RX_STATUS_ERR_KEY_CACHE_MISS | WMI_RX_STATUS_ERR_CRC))) {
6300 		dev_kfree_skb(skb);
6301 		goto exit;
6302 	}
6303 
6304 	if (rx_ev.status & WMI_RX_STATUS_ERR_MIC)
6305 		status->flag |= RX_FLAG_MMIC_ERROR;
6306 
6307 	if (rx_ev.chan_freq >= ATH11K_MIN_6G_FREQ &&
6308 	    rx_ev.chan_freq <= ATH11K_MAX_6G_FREQ) {
6309 		status->band = NL80211_BAND_6GHZ;
6310 		status->freq = rx_ev.chan_freq;
6311 	} else if (rx_ev.channel >= 1 && rx_ev.channel <= 14) {
6312 		status->band = NL80211_BAND_2GHZ;
6313 	} else if (rx_ev.channel >= 36 && rx_ev.channel <= ATH11K_MAX_5G_CHAN) {
6314 		status->band = NL80211_BAND_5GHZ;
6315 	} else {
6316 		/* Shouldn't happen unless list of advertised channels to
6317 		 * mac80211 has been changed.
6318 		 */
6319 		WARN_ON_ONCE(1);
6320 		dev_kfree_skb(skb);
6321 		goto exit;
6322 	}
6323 
6324 	if (rx_ev.phy_mode == MODE_11B &&
6325 	    (status->band == NL80211_BAND_5GHZ || status->band == NL80211_BAND_6GHZ))
6326 		ath11k_dbg(ab, ATH11K_DBG_WMI,
6327 			   "wmi mgmt rx 11b (CCK) on 5/6GHz, band = %d\n", status->band);
6328 
6329 	sband = &ar->mac.sbands[status->band];
6330 
6331 	if (status->band != NL80211_BAND_6GHZ)
6332 		status->freq = ieee80211_channel_to_frequency(rx_ev.channel,
6333 							      status->band);
6334 
6335 	status->signal = rx_ev.snr + ATH11K_DEFAULT_NOISE_FLOOR;
6336 	status->rate_idx = ath11k_mac_bitrate_to_idx(sband, rx_ev.rate / 100);
6337 
6338 	hdr = (struct ieee80211_hdr *)skb->data;
6339 	fc = le16_to_cpu(hdr->frame_control);
6340 
6341 	/* Firmware is guaranteed to report all essential management frames via
6342 	 * WMI while it can deliver some extra via HTT. Since there can be
6343 	 * duplicates split the reporting wrt monitor/sniffing.
6344 	 */
6345 	status->flag |= RX_FLAG_SKIP_MONITOR;
6346 
6347 	/* In case of PMF, FW delivers decrypted frames with Protected Bit set.
6348 	 * Don't clear that. Also, FW delivers broadcast management frames
6349 	 * (ex: group privacy action frames in mesh) as encrypted payload.
6350 	 */
6351 	if (ieee80211_has_protected(hdr->frame_control) &&
6352 	    !is_multicast_ether_addr(ieee80211_get_DA(hdr))) {
6353 		status->flag |= RX_FLAG_DECRYPTED;
6354 
6355 		if (!ieee80211_is_robust_mgmt_frame(skb)) {
6356 			status->flag |= RX_FLAG_IV_STRIPPED |
6357 					RX_FLAG_MMIC_STRIPPED;
6358 			hdr->frame_control = __cpu_to_le16(fc &
6359 					     ~IEEE80211_FCTL_PROTECTED);
6360 		}
6361 	}
6362 
6363 	if (ieee80211_is_beacon(hdr->frame_control))
6364 		ath11k_mac_handle_beacon(ar, skb);
6365 
6366 	ath11k_dbg(ab, ATH11K_DBG_MGMT,
6367 		   "event mgmt rx skb %pK len %d ftype %02x stype %02x\n",
6368 		   skb, skb->len,
6369 		   fc & IEEE80211_FCTL_FTYPE, fc & IEEE80211_FCTL_STYPE);
6370 
6371 	ath11k_dbg(ab, ATH11K_DBG_MGMT,
6372 		   "event mgmt rx freq %d band %d snr %d, rate_idx %d\n",
6373 		   status->freq, status->band, status->signal,
6374 		   status->rate_idx);
6375 
6376 	ieee80211_rx_ni(ar->hw, skb);
6377 
6378 exit:
6379 	rcu_read_unlock();
6380 }
6381 
6382 static void ath11k_mgmt_tx_compl_event(struct ath11k_base *ab, struct sk_buff *skb)
6383 {
6384 	struct wmi_mgmt_tx_compl_event tx_compl_param = {0};
6385 	struct ath11k *ar;
6386 
6387 	if (ath11k_pull_mgmt_tx_compl_param_tlv(ab, skb, &tx_compl_param) != 0) {
6388 		ath11k_warn(ab, "failed to extract mgmt tx compl event");
6389 		return;
6390 	}
6391 
6392 	rcu_read_lock();
6393 	ar = ath11k_mac_get_ar_by_pdev_id(ab, tx_compl_param.pdev_id);
6394 	if (!ar) {
6395 		ath11k_warn(ab, "invalid pdev id %d in mgmt_tx_compl_event\n",
6396 			    tx_compl_param.pdev_id);
6397 		goto exit;
6398 	}
6399 
6400 	wmi_process_mgmt_tx_comp(ar, tx_compl_param.desc_id,
6401 				 tx_compl_param.status);
6402 
6403 	ath11k_dbg(ab, ATH11K_DBG_MGMT,
6404 		   "mgmt tx compl ev pdev_id %d, desc_id %d, status %d",
6405 		   tx_compl_param.pdev_id, tx_compl_param.desc_id,
6406 		   tx_compl_param.status);
6407 
6408 exit:
6409 	rcu_read_unlock();
6410 }
6411 
6412 static struct ath11k *ath11k_get_ar_on_scan_state(struct ath11k_base *ab,
6413 						  u32 vdev_id,
6414 						  enum ath11k_scan_state state)
6415 {
6416 	int i;
6417 	struct ath11k_pdev *pdev;
6418 	struct ath11k *ar;
6419 
6420 	for (i = 0; i < ab->num_radios; i++) {
6421 		pdev = rcu_dereference(ab->pdevs_active[i]);
6422 		if (pdev && pdev->ar) {
6423 			ar = pdev->ar;
6424 
6425 			spin_lock_bh(&ar->data_lock);
6426 			if (ar->scan.state == state &&
6427 			    ar->scan.vdev_id == vdev_id) {
6428 				spin_unlock_bh(&ar->data_lock);
6429 				return ar;
6430 			}
6431 			spin_unlock_bh(&ar->data_lock);
6432 		}
6433 	}
6434 	return NULL;
6435 }
6436 
6437 static void ath11k_scan_event(struct ath11k_base *ab, struct sk_buff *skb)
6438 {
6439 	struct ath11k *ar;
6440 	struct wmi_scan_event scan_ev = {0};
6441 
6442 	if (ath11k_pull_scan_ev(ab, skb, &scan_ev) != 0) {
6443 		ath11k_warn(ab, "failed to extract scan event");
6444 		return;
6445 	}
6446 
6447 	rcu_read_lock();
6448 
6449 	/* In case the scan was cancelled, ex. during interface teardown,
6450 	 * the interface will not be found in active interfaces.
6451 	 * Rather, in such scenarios, iterate over the active pdev's to
6452 	 * search 'ar' if the corresponding 'ar' scan is ABORTING and the
6453 	 * aborting scan's vdev id matches this event info.
6454 	 */
6455 	if (scan_ev.event_type == WMI_SCAN_EVENT_COMPLETED &&
6456 	    scan_ev.reason == WMI_SCAN_REASON_CANCELLED) {
6457 		ar = ath11k_get_ar_on_scan_state(ab, scan_ev.vdev_id,
6458 						 ATH11K_SCAN_ABORTING);
6459 		if (!ar)
6460 			ar = ath11k_get_ar_on_scan_state(ab, scan_ev.vdev_id,
6461 							 ATH11K_SCAN_RUNNING);
6462 	} else {
6463 		ar = ath11k_mac_get_ar_by_vdev_id(ab, scan_ev.vdev_id);
6464 	}
6465 
6466 	if (!ar) {
6467 		ath11k_warn(ab, "Received scan event for unknown vdev");
6468 		rcu_read_unlock();
6469 		return;
6470 	}
6471 
6472 	spin_lock_bh(&ar->data_lock);
6473 
6474 	ath11k_dbg(ab, ATH11K_DBG_WMI,
6475 		   "scan event %s type %d reason %d freq %d req_id %d scan_id %d vdev_id %d state %s (%d)\n",
6476 		   ath11k_wmi_event_scan_type_str(scan_ev.event_type, scan_ev.reason),
6477 		   scan_ev.event_type, scan_ev.reason, scan_ev.channel_freq,
6478 		   scan_ev.scan_req_id, scan_ev.scan_id, scan_ev.vdev_id,
6479 		   ath11k_scan_state_str(ar->scan.state), ar->scan.state);
6480 
6481 	switch (scan_ev.event_type) {
6482 	case WMI_SCAN_EVENT_STARTED:
6483 		ath11k_wmi_event_scan_started(ar);
6484 		break;
6485 	case WMI_SCAN_EVENT_COMPLETED:
6486 		ath11k_wmi_event_scan_completed(ar);
6487 		break;
6488 	case WMI_SCAN_EVENT_BSS_CHANNEL:
6489 		ath11k_wmi_event_scan_bss_chan(ar);
6490 		break;
6491 	case WMI_SCAN_EVENT_FOREIGN_CHAN:
6492 		ath11k_wmi_event_scan_foreign_chan(ar, scan_ev.channel_freq);
6493 		break;
6494 	case WMI_SCAN_EVENT_START_FAILED:
6495 		ath11k_warn(ab, "received scan start failure event\n");
6496 		ath11k_wmi_event_scan_start_failed(ar);
6497 		break;
6498 	case WMI_SCAN_EVENT_DEQUEUED:
6499 		__ath11k_mac_scan_finish(ar);
6500 		break;
6501 	case WMI_SCAN_EVENT_PREEMPTED:
6502 	case WMI_SCAN_EVENT_RESTARTED:
6503 	case WMI_SCAN_EVENT_FOREIGN_CHAN_EXIT:
6504 	default:
6505 		break;
6506 	}
6507 
6508 	spin_unlock_bh(&ar->data_lock);
6509 
6510 	rcu_read_unlock();
6511 }
6512 
6513 static void ath11k_peer_sta_kickout_event(struct ath11k_base *ab, struct sk_buff *skb)
6514 {
6515 	struct wmi_peer_sta_kickout_arg arg = {};
6516 	struct ieee80211_sta *sta;
6517 	struct ath11k_peer *peer;
6518 	struct ath11k *ar;
6519 	u32 vdev_id;
6520 
6521 	if (ath11k_pull_peer_sta_kickout_ev(ab, skb, &arg) != 0) {
6522 		ath11k_warn(ab, "failed to extract peer sta kickout event");
6523 		return;
6524 	}
6525 
6526 	rcu_read_lock();
6527 
6528 	spin_lock_bh(&ab->base_lock);
6529 
6530 	peer = ath11k_peer_find_by_addr(ab, arg.mac_addr);
6531 
6532 	if (!peer) {
6533 		ath11k_warn(ab, "peer not found %pM\n",
6534 			    arg.mac_addr);
6535 		spin_unlock_bh(&ab->base_lock);
6536 		goto exit;
6537 	}
6538 
6539 	vdev_id = peer->vdev_id;
6540 
6541 	spin_unlock_bh(&ab->base_lock);
6542 
6543 	ar = ath11k_mac_get_ar_by_vdev_id(ab, vdev_id);
6544 	if (!ar) {
6545 		ath11k_warn(ab, "invalid vdev id in peer sta kickout ev %d",
6546 			    peer->vdev_id);
6547 		goto exit;
6548 	}
6549 
6550 	sta = ieee80211_find_sta_by_ifaddr(ar->hw,
6551 					   arg.mac_addr, NULL);
6552 	if (!sta) {
6553 		ath11k_warn(ab, "Spurious quick kickout for STA %pM\n",
6554 			    arg.mac_addr);
6555 		goto exit;
6556 	}
6557 
6558 	ath11k_dbg(ab, ATH11K_DBG_WMI, "peer sta kickout event %pM",
6559 		   arg.mac_addr);
6560 
6561 	ieee80211_report_low_ack(sta, 10);
6562 
6563 exit:
6564 	rcu_read_unlock();
6565 }
6566 
6567 static void ath11k_roam_event(struct ath11k_base *ab, struct sk_buff *skb)
6568 {
6569 	struct wmi_roam_event roam_ev = {};
6570 	struct ath11k *ar;
6571 
6572 	if (ath11k_pull_roam_ev(ab, skb, &roam_ev) != 0) {
6573 		ath11k_warn(ab, "failed to extract roam event");
6574 		return;
6575 	}
6576 
6577 	ath11k_dbg(ab, ATH11K_DBG_WMI,
6578 		   "wmi roam event vdev %u reason 0x%08x rssi %d\n",
6579 		   roam_ev.vdev_id, roam_ev.reason, roam_ev.rssi);
6580 
6581 	rcu_read_lock();
6582 	ar = ath11k_mac_get_ar_by_vdev_id(ab, roam_ev.vdev_id);
6583 	if (!ar) {
6584 		ath11k_warn(ab, "invalid vdev id in roam ev %d",
6585 			    roam_ev.vdev_id);
6586 		rcu_read_unlock();
6587 		return;
6588 	}
6589 
6590 	if (roam_ev.reason >= WMI_ROAM_REASON_MAX)
6591 		ath11k_warn(ab, "ignoring unknown roam event reason %d on vdev %i\n",
6592 			    roam_ev.reason, roam_ev.vdev_id);
6593 
6594 	switch (roam_ev.reason) {
6595 	case WMI_ROAM_REASON_BEACON_MISS:
6596 		ath11k_mac_handle_beacon_miss(ar, roam_ev.vdev_id);
6597 		break;
6598 	case WMI_ROAM_REASON_BETTER_AP:
6599 	case WMI_ROAM_REASON_LOW_RSSI:
6600 	case WMI_ROAM_REASON_SUITABLE_AP_FOUND:
6601 	case WMI_ROAM_REASON_HO_FAILED:
6602 		ath11k_warn(ab, "ignoring not implemented roam event reason %d on vdev %i\n",
6603 			    roam_ev.reason, roam_ev.vdev_id);
6604 		break;
6605 	}
6606 
6607 	rcu_read_unlock();
6608 }
6609 
6610 static void ath11k_chan_info_event(struct ath11k_base *ab, struct sk_buff *skb)
6611 {
6612 	struct wmi_chan_info_event ch_info_ev = {0};
6613 	struct ath11k *ar;
6614 	struct survey_info *survey;
6615 	int idx;
6616 	/* HW channel counters frequency value in hertz */
6617 	u32 cc_freq_hz = ab->cc_freq_hz;
6618 
6619 	if (ath11k_pull_chan_info_ev(ab, skb->data, skb->len, &ch_info_ev) != 0) {
6620 		ath11k_warn(ab, "failed to extract chan info event");
6621 		return;
6622 	}
6623 
6624 	ath11k_dbg(ab, ATH11K_DBG_WMI,
6625 		   "chan info vdev_id %d err_code %d freq %d cmd_flags %d noise_floor %d rx_clear_count %d cycle_count %d mac_clk_mhz %d\n",
6626 		   ch_info_ev.vdev_id, ch_info_ev.err_code, ch_info_ev.freq,
6627 		   ch_info_ev.cmd_flags, ch_info_ev.noise_floor,
6628 		   ch_info_ev.rx_clear_count, ch_info_ev.cycle_count,
6629 		   ch_info_ev.mac_clk_mhz);
6630 
6631 	if (ch_info_ev.cmd_flags == WMI_CHAN_INFO_END_RESP) {
6632 		ath11k_dbg(ab, ATH11K_DBG_WMI, "chan info report completed\n");
6633 		return;
6634 	}
6635 
6636 	rcu_read_lock();
6637 	ar = ath11k_mac_get_ar_by_vdev_id(ab, ch_info_ev.vdev_id);
6638 	if (!ar) {
6639 		ath11k_warn(ab, "invalid vdev id in chan info ev %d",
6640 			    ch_info_ev.vdev_id);
6641 		rcu_read_unlock();
6642 		return;
6643 	}
6644 	spin_lock_bh(&ar->data_lock);
6645 
6646 	switch (ar->scan.state) {
6647 	case ATH11K_SCAN_IDLE:
6648 	case ATH11K_SCAN_STARTING:
6649 		ath11k_warn(ab, "received chan info event without a scan request, ignoring\n");
6650 		goto exit;
6651 	case ATH11K_SCAN_RUNNING:
6652 	case ATH11K_SCAN_ABORTING:
6653 		break;
6654 	}
6655 
6656 	idx = freq_to_idx(ar, ch_info_ev.freq);
6657 	if (idx >= ARRAY_SIZE(ar->survey)) {
6658 		ath11k_warn(ab, "chan info: invalid frequency %d (idx %d out of bounds)\n",
6659 			    ch_info_ev.freq, idx);
6660 		goto exit;
6661 	}
6662 
6663 	/* If FW provides MAC clock frequency in Mhz, overriding the initialized
6664 	 * HW channel counters frequency value
6665 	 */
6666 	if (ch_info_ev.mac_clk_mhz)
6667 		cc_freq_hz = (ch_info_ev.mac_clk_mhz * 1000);
6668 
6669 	if (ch_info_ev.cmd_flags == WMI_CHAN_INFO_START_RESP) {
6670 		survey = &ar->survey[idx];
6671 		memset(survey, 0, sizeof(*survey));
6672 		survey->noise = ch_info_ev.noise_floor;
6673 		survey->filled = SURVEY_INFO_NOISE_DBM | SURVEY_INFO_TIME |
6674 				 SURVEY_INFO_TIME_BUSY;
6675 		survey->time = div_u64(ch_info_ev.cycle_count, cc_freq_hz);
6676 		survey->time_busy = div_u64(ch_info_ev.rx_clear_count, cc_freq_hz);
6677 	}
6678 exit:
6679 	spin_unlock_bh(&ar->data_lock);
6680 	rcu_read_unlock();
6681 }
6682 
6683 static void
6684 ath11k_pdev_bss_chan_info_event(struct ath11k_base *ab, struct sk_buff *skb)
6685 {
6686 	struct wmi_pdev_bss_chan_info_event bss_ch_info_ev = {};
6687 	struct survey_info *survey;
6688 	struct ath11k *ar;
6689 	u32 cc_freq_hz = ab->cc_freq_hz;
6690 	u64 busy, total, tx, rx, rx_bss;
6691 	int idx;
6692 
6693 	if (ath11k_pull_pdev_bss_chan_info_ev(ab, skb, &bss_ch_info_ev) != 0) {
6694 		ath11k_warn(ab, "failed to extract pdev bss chan info event");
6695 		return;
6696 	}
6697 
6698 	busy = (u64)(bss_ch_info_ev.rx_clear_count_high) << 32 |
6699 			bss_ch_info_ev.rx_clear_count_low;
6700 
6701 	total = (u64)(bss_ch_info_ev.cycle_count_high) << 32 |
6702 			bss_ch_info_ev.cycle_count_low;
6703 
6704 	tx = (u64)(bss_ch_info_ev.tx_cycle_count_high) << 32 |
6705 			bss_ch_info_ev.tx_cycle_count_low;
6706 
6707 	rx = (u64)(bss_ch_info_ev.rx_cycle_count_high) << 32 |
6708 			bss_ch_info_ev.rx_cycle_count_low;
6709 
6710 	rx_bss = (u64)(bss_ch_info_ev.rx_bss_cycle_count_high) << 32 |
6711 			bss_ch_info_ev.rx_bss_cycle_count_low;
6712 
6713 	ath11k_dbg(ab, ATH11K_DBG_WMI,
6714 		   "pdev bss chan info:\n pdev_id: %d freq: %d noise: %d cycle: busy %llu total %llu tx %llu rx %llu rx_bss %llu\n",
6715 		   bss_ch_info_ev.pdev_id, bss_ch_info_ev.freq,
6716 		   bss_ch_info_ev.noise_floor, busy, total,
6717 		   tx, rx, rx_bss);
6718 
6719 	rcu_read_lock();
6720 	ar = ath11k_mac_get_ar_by_pdev_id(ab, bss_ch_info_ev.pdev_id);
6721 
6722 	if (!ar) {
6723 		ath11k_warn(ab, "invalid pdev id %d in bss_chan_info event\n",
6724 			    bss_ch_info_ev.pdev_id);
6725 		rcu_read_unlock();
6726 		return;
6727 	}
6728 
6729 	spin_lock_bh(&ar->data_lock);
6730 	idx = freq_to_idx(ar, bss_ch_info_ev.freq);
6731 	if (idx >= ARRAY_SIZE(ar->survey)) {
6732 		ath11k_warn(ab, "bss chan info: invalid frequency %d (idx %d out of bounds)\n",
6733 			    bss_ch_info_ev.freq, idx);
6734 		goto exit;
6735 	}
6736 
6737 	survey = &ar->survey[idx];
6738 
6739 	survey->noise     = bss_ch_info_ev.noise_floor;
6740 	survey->time      = div_u64(total, cc_freq_hz);
6741 	survey->time_busy = div_u64(busy, cc_freq_hz);
6742 	survey->time_rx   = div_u64(rx_bss, cc_freq_hz);
6743 	survey->time_tx   = div_u64(tx, cc_freq_hz);
6744 	survey->filled   |= (SURVEY_INFO_NOISE_DBM |
6745 			     SURVEY_INFO_TIME |
6746 			     SURVEY_INFO_TIME_BUSY |
6747 			     SURVEY_INFO_TIME_RX |
6748 			     SURVEY_INFO_TIME_TX);
6749 exit:
6750 	spin_unlock_bh(&ar->data_lock);
6751 	complete(&ar->bss_survey_done);
6752 
6753 	rcu_read_unlock();
6754 }
6755 
6756 static void ath11k_vdev_install_key_compl_event(struct ath11k_base *ab,
6757 						struct sk_buff *skb)
6758 {
6759 	struct wmi_vdev_install_key_complete_arg install_key_compl = {0};
6760 	struct ath11k *ar;
6761 
6762 	if (ath11k_pull_vdev_install_key_compl_ev(ab, skb, &install_key_compl) != 0) {
6763 		ath11k_warn(ab, "failed to extract install key compl event");
6764 		return;
6765 	}
6766 
6767 	ath11k_dbg(ab, ATH11K_DBG_WMI,
6768 		   "vdev install key ev idx %d flags %08x macaddr %pM status %d\n",
6769 		   install_key_compl.key_idx, install_key_compl.key_flags,
6770 		   install_key_compl.macaddr, install_key_compl.status);
6771 
6772 	rcu_read_lock();
6773 	ar = ath11k_mac_get_ar_by_vdev_id(ab, install_key_compl.vdev_id);
6774 	if (!ar) {
6775 		ath11k_warn(ab, "invalid vdev id in install key compl ev %d",
6776 			    install_key_compl.vdev_id);
6777 		rcu_read_unlock();
6778 		return;
6779 	}
6780 
6781 	ar->install_key_status = 0;
6782 
6783 	if (install_key_compl.status != WMI_VDEV_INSTALL_KEY_COMPL_STATUS_SUCCESS) {
6784 		ath11k_warn(ab, "install key failed for %pM status %d\n",
6785 			    install_key_compl.macaddr, install_key_compl.status);
6786 		ar->install_key_status = install_key_compl.status;
6787 	}
6788 
6789 	complete(&ar->install_key_done);
6790 	rcu_read_unlock();
6791 }
6792 
6793 static void ath11k_service_available_event(struct ath11k_base *ab, struct sk_buff *skb)
6794 {
6795 	const void **tb;
6796 	const struct wmi_service_available_event *ev;
6797 	int ret;
6798 	int i, j;
6799 
6800 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
6801 	if (IS_ERR(tb)) {
6802 		ret = PTR_ERR(tb);
6803 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
6804 		return;
6805 	}
6806 
6807 	ev = tb[WMI_TAG_SERVICE_AVAILABLE_EVENT];
6808 	if (!ev) {
6809 		ath11k_warn(ab, "failed to fetch svc available ev");
6810 		kfree(tb);
6811 		return;
6812 	}
6813 
6814 	/* TODO: Use wmi_service_segment_offset information to get the service
6815 	 * especially when more services are advertised in multiple sevice
6816 	 * available events.
6817 	 */
6818 	for (i = 0, j = WMI_MAX_SERVICE;
6819 	     i < WMI_SERVICE_SEGMENT_BM_SIZE32 && j < WMI_MAX_EXT_SERVICE;
6820 	     i++) {
6821 		do {
6822 			if (ev->wmi_service_segment_bitmap[i] &
6823 			    BIT(j % WMI_AVAIL_SERVICE_BITS_IN_SIZE32))
6824 				set_bit(j, ab->wmi_ab.svc_map);
6825 		} while (++j % WMI_AVAIL_SERVICE_BITS_IN_SIZE32);
6826 	}
6827 
6828 	ath11k_dbg(ab, ATH11K_DBG_WMI,
6829 		   "wmi_ext_service_bitmap 0:0x%x, 1:0x%x, 2:0x%x, 3:0x%x",
6830 		   ev->wmi_service_segment_bitmap[0], ev->wmi_service_segment_bitmap[1],
6831 		   ev->wmi_service_segment_bitmap[2], ev->wmi_service_segment_bitmap[3]);
6832 
6833 	kfree(tb);
6834 }
6835 
6836 static void ath11k_peer_assoc_conf_event(struct ath11k_base *ab, struct sk_buff *skb)
6837 {
6838 	struct wmi_peer_assoc_conf_arg peer_assoc_conf = {0};
6839 	struct ath11k *ar;
6840 
6841 	if (ath11k_pull_peer_assoc_conf_ev(ab, skb, &peer_assoc_conf) != 0) {
6842 		ath11k_warn(ab, "failed to extract peer assoc conf event");
6843 		return;
6844 	}
6845 
6846 	ath11k_dbg(ab, ATH11K_DBG_WMI,
6847 		   "peer assoc conf ev vdev id %d macaddr %pM\n",
6848 		   peer_assoc_conf.vdev_id, peer_assoc_conf.macaddr);
6849 
6850 	rcu_read_lock();
6851 	ar = ath11k_mac_get_ar_by_vdev_id(ab, peer_assoc_conf.vdev_id);
6852 
6853 	if (!ar) {
6854 		ath11k_warn(ab, "invalid vdev id in peer assoc conf ev %d",
6855 			    peer_assoc_conf.vdev_id);
6856 		rcu_read_unlock();
6857 		return;
6858 	}
6859 
6860 	complete(&ar->peer_assoc_done);
6861 	rcu_read_unlock();
6862 }
6863 
6864 static void ath11k_update_stats_event(struct ath11k_base *ab, struct sk_buff *skb)
6865 {
6866 	ath11k_debugfs_fw_stats_process(ab, skb);
6867 }
6868 
6869 /* PDEV_CTL_FAILSAFE_CHECK_EVENT is received from FW when the frequency scanned
6870  * is not part of BDF CTL(Conformance test limits) table entries.
6871  */
6872 static void ath11k_pdev_ctl_failsafe_check_event(struct ath11k_base *ab,
6873 						 struct sk_buff *skb)
6874 {
6875 	const void **tb;
6876 	const struct wmi_pdev_ctl_failsafe_chk_event *ev;
6877 	int ret;
6878 
6879 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
6880 	if (IS_ERR(tb)) {
6881 		ret = PTR_ERR(tb);
6882 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
6883 		return;
6884 	}
6885 
6886 	ev = tb[WMI_TAG_PDEV_CTL_FAILSAFE_CHECK_EVENT];
6887 	if (!ev) {
6888 		ath11k_warn(ab, "failed to fetch pdev ctl failsafe check ev");
6889 		kfree(tb);
6890 		return;
6891 	}
6892 
6893 	ath11k_dbg(ab, ATH11K_DBG_WMI,
6894 		   "pdev ctl failsafe check ev status %d\n",
6895 		   ev->ctl_failsafe_status);
6896 
6897 	/* If ctl_failsafe_status is set to 1 FW will max out the Transmit power
6898 	 * to 10 dBm else the CTL power entry in the BDF would be picked up.
6899 	 */
6900 	if (ev->ctl_failsafe_status != 0)
6901 		ath11k_warn(ab, "pdev ctl failsafe failure status %d",
6902 			    ev->ctl_failsafe_status);
6903 
6904 	kfree(tb);
6905 }
6906 
6907 static void
6908 ath11k_wmi_process_csa_switch_count_event(struct ath11k_base *ab,
6909 					  const struct wmi_pdev_csa_switch_ev *ev,
6910 					  const u32 *vdev_ids)
6911 {
6912 	int i;
6913 	struct ath11k_vif *arvif;
6914 
6915 	/* Finish CSA once the switch count becomes NULL */
6916 	if (ev->current_switch_count)
6917 		return;
6918 
6919 	rcu_read_lock();
6920 	for (i = 0; i < ev->num_vdevs; i++) {
6921 		arvif = ath11k_mac_get_arvif_by_vdev_id(ab, vdev_ids[i]);
6922 
6923 		if (!arvif) {
6924 			ath11k_warn(ab, "Recvd csa status for unknown vdev %d",
6925 				    vdev_ids[i]);
6926 			continue;
6927 		}
6928 
6929 		if (arvif->is_up && arvif->vif->csa_active)
6930 			ieee80211_csa_finish(arvif->vif);
6931 	}
6932 	rcu_read_unlock();
6933 }
6934 
6935 static void
6936 ath11k_wmi_pdev_csa_switch_count_status_event(struct ath11k_base *ab,
6937 					      struct sk_buff *skb)
6938 {
6939 	const void **tb;
6940 	const struct wmi_pdev_csa_switch_ev *ev;
6941 	const u32 *vdev_ids;
6942 	int ret;
6943 
6944 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
6945 	if (IS_ERR(tb)) {
6946 		ret = PTR_ERR(tb);
6947 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
6948 		return;
6949 	}
6950 
6951 	ev = tb[WMI_TAG_PDEV_CSA_SWITCH_COUNT_STATUS_EVENT];
6952 	vdev_ids = tb[WMI_TAG_ARRAY_UINT32];
6953 
6954 	if (!ev || !vdev_ids) {
6955 		ath11k_warn(ab, "failed to fetch pdev csa switch count ev");
6956 		kfree(tb);
6957 		return;
6958 	}
6959 
6960 	ath11k_dbg(ab, ATH11K_DBG_WMI,
6961 		   "pdev csa switch count %d for pdev %d, num_vdevs %d",
6962 		   ev->current_switch_count, ev->pdev_id,
6963 		   ev->num_vdevs);
6964 
6965 	ath11k_wmi_process_csa_switch_count_event(ab, ev, vdev_ids);
6966 
6967 	kfree(tb);
6968 }
6969 
6970 static void
6971 ath11k_wmi_pdev_dfs_radar_detected_event(struct ath11k_base *ab, struct sk_buff *skb)
6972 {
6973 	const void **tb;
6974 	const struct wmi_pdev_radar_ev *ev;
6975 	struct ath11k *ar;
6976 	int ret;
6977 
6978 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
6979 	if (IS_ERR(tb)) {
6980 		ret = PTR_ERR(tb);
6981 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
6982 		return;
6983 	}
6984 
6985 	ev = tb[WMI_TAG_PDEV_DFS_RADAR_DETECTION_EVENT];
6986 
6987 	if (!ev) {
6988 		ath11k_warn(ab, "failed to fetch pdev dfs radar detected ev");
6989 		kfree(tb);
6990 		return;
6991 	}
6992 
6993 	ath11k_dbg(ab, ATH11K_DBG_WMI,
6994 		   "pdev dfs radar detected on pdev %d, detection mode %d, chan freq %d, chan_width %d, detector id %d, seg id %d, timestamp %d, chirp %d, freq offset %d, sidx %d",
6995 		   ev->pdev_id, ev->detection_mode, ev->chan_freq, ev->chan_width,
6996 		   ev->detector_id, ev->segment_id, ev->timestamp, ev->is_chirp,
6997 		   ev->freq_offset, ev->sidx);
6998 
6999 	ar = ath11k_mac_get_ar_by_pdev_id(ab, ev->pdev_id);
7000 
7001 	if (!ar) {
7002 		ath11k_warn(ab, "radar detected in invalid pdev %d\n",
7003 			    ev->pdev_id);
7004 		goto exit;
7005 	}
7006 
7007 	ath11k_dbg(ar->ab, ATH11K_DBG_REG, "DFS Radar Detected in pdev %d\n",
7008 		   ev->pdev_id);
7009 
7010 	if (ar->dfs_block_radar_events)
7011 		ath11k_info(ab, "DFS Radar detected, but ignored as requested\n");
7012 	else
7013 		ieee80211_radar_detected(ar->hw);
7014 
7015 exit:
7016 	kfree(tb);
7017 }
7018 
7019 static void
7020 ath11k_wmi_pdev_temperature_event(struct ath11k_base *ab,
7021 				  struct sk_buff *skb)
7022 {
7023 	struct ath11k *ar;
7024 	const void **tb;
7025 	const struct wmi_pdev_temperature_event *ev;
7026 	int ret;
7027 
7028 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
7029 	if (IS_ERR(tb)) {
7030 		ret = PTR_ERR(tb);
7031 		ath11k_warn(ab, "failed to parse tlv: %d\n", ret);
7032 		return;
7033 	}
7034 
7035 	ev = tb[WMI_TAG_PDEV_TEMPERATURE_EVENT];
7036 	if (!ev) {
7037 		ath11k_warn(ab, "failed to fetch pdev temp ev");
7038 		kfree(tb);
7039 		return;
7040 	}
7041 
7042 	ath11k_dbg(ab, ATH11K_DBG_WMI,
7043 		   "pdev temperature ev temp %d pdev_id %d\n", ev->temp, ev->pdev_id);
7044 
7045 	ar = ath11k_mac_get_ar_by_pdev_id(ab, ev->pdev_id);
7046 	if (!ar) {
7047 		ath11k_warn(ab, "invalid pdev id in pdev temperature ev %d", ev->pdev_id);
7048 		kfree(tb);
7049 		return;
7050 	}
7051 
7052 	ath11k_thermal_event_temperature(ar, ev->temp);
7053 
7054 	kfree(tb);
7055 }
7056 
7057 static void ath11k_fils_discovery_event(struct ath11k_base *ab,
7058 					struct sk_buff *skb)
7059 {
7060 	const void **tb;
7061 	const struct wmi_fils_discovery_event *ev;
7062 	int ret;
7063 
7064 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
7065 	if (IS_ERR(tb)) {
7066 		ret = PTR_ERR(tb);
7067 		ath11k_warn(ab,
7068 			    "failed to parse FILS discovery event tlv %d\n",
7069 			    ret);
7070 		return;
7071 	}
7072 
7073 	ev = tb[WMI_TAG_HOST_SWFDA_EVENT];
7074 	if (!ev) {
7075 		ath11k_warn(ab, "failed to fetch FILS discovery event\n");
7076 		kfree(tb);
7077 		return;
7078 	}
7079 
7080 	ath11k_warn(ab,
7081 		    "FILS discovery frame expected from host for vdev_id: %u, transmission scheduled at %u, next TBTT: %u\n",
7082 		    ev->vdev_id, ev->fils_tt, ev->tbtt);
7083 
7084 	kfree(tb);
7085 }
7086 
7087 static void ath11k_probe_resp_tx_status_event(struct ath11k_base *ab,
7088 					      struct sk_buff *skb)
7089 {
7090 	const void **tb;
7091 	const struct wmi_probe_resp_tx_status_event *ev;
7092 	int ret;
7093 
7094 	tb = ath11k_wmi_tlv_parse_alloc(ab, skb->data, skb->len, GFP_ATOMIC);
7095 	if (IS_ERR(tb)) {
7096 		ret = PTR_ERR(tb);
7097 		ath11k_warn(ab,
7098 			    "failed to parse probe response transmission status event tlv: %d\n",
7099 			    ret);
7100 		return;
7101 	}
7102 
7103 	ev = tb[WMI_TAG_OFFLOAD_PRB_RSP_TX_STATUS_EVENT];
7104 	if (!ev) {
7105 		ath11k_warn(ab,
7106 			    "failed to fetch probe response transmission status event");
7107 		kfree(tb);
7108 		return;
7109 	}
7110 
7111 	if (ev->tx_status)
7112 		ath11k_warn(ab,
7113 			    "Probe response transmission failed for vdev_id %u, status %u\n",
7114 			    ev->vdev_id, ev->tx_status);
7115 
7116 	kfree(tb);
7117 }
7118 
7119 static int ath11k_wmi_tlv_wow_wakeup_host_parse(struct ath11k_base *ab,
7120 						u16 tag, u16 len,
7121 						const void *ptr, void *data)
7122 {
7123 	struct wmi_wow_ev_arg *ev = data;
7124 	const char *wow_pg_fault;
7125 	int wow_pg_len;
7126 
7127 	switch (tag) {
7128 	case WMI_TAG_WOW_EVENT_INFO:
7129 		memcpy(ev, ptr, sizeof(*ev));
7130 		ath11k_dbg(ab, ATH11K_DBG_WMI, "wow wakeup host reason %d %s\n",
7131 			   ev->wake_reason, wow_reason(ev->wake_reason));
7132 		break;
7133 
7134 	case WMI_TAG_ARRAY_BYTE:
7135 		if (ev && ev->wake_reason == WOW_REASON_PAGE_FAULT) {
7136 			wow_pg_fault = ptr;
7137 			/* the first 4 bytes are length */
7138 			wow_pg_len = *(int *)wow_pg_fault;
7139 			wow_pg_fault += sizeof(int);
7140 			ath11k_dbg(ab, ATH11K_DBG_WMI, "wow data_len = %d\n",
7141 				   wow_pg_len);
7142 			ath11k_dbg_dump(ab, ATH11K_DBG_WMI,
7143 					"wow_event_info_type packet present",
7144 					"wow_pg_fault ",
7145 					wow_pg_fault,
7146 					wow_pg_len);
7147 		}
7148 		break;
7149 	default:
7150 		break;
7151 	}
7152 
7153 	return 0;
7154 }
7155 
7156 static void ath11k_wmi_event_wow_wakeup_host(struct ath11k_base *ab, struct sk_buff *skb)
7157 {
7158 	struct wmi_wow_ev_arg ev = { };
7159 	int ret;
7160 
7161 	ret = ath11k_wmi_tlv_iter(ab, skb->data, skb->len,
7162 				  ath11k_wmi_tlv_wow_wakeup_host_parse,
7163 				  &ev);
7164 	if (ret) {
7165 		ath11k_warn(ab, "failed to parse wmi wow tlv: %d\n", ret);
7166 		return;
7167 	}
7168 
7169 	complete(&ab->wow.wakeup_completed);
7170 }
7171 
7172 static void ath11k_wmi_tlv_op_rx(struct ath11k_base *ab, struct sk_buff *skb)
7173 {
7174 	struct wmi_cmd_hdr *cmd_hdr;
7175 	enum wmi_tlv_event_id id;
7176 
7177 	cmd_hdr = (struct wmi_cmd_hdr *)skb->data;
7178 	id = FIELD_GET(WMI_CMD_HDR_CMD_ID, (cmd_hdr->cmd_id));
7179 
7180 	trace_ath11k_wmi_event(ab, id, skb->data, skb->len);
7181 
7182 	if (skb_pull(skb, sizeof(struct wmi_cmd_hdr)) == NULL)
7183 		goto out;
7184 
7185 	switch (id) {
7186 		/* Process all the WMI events here */
7187 	case WMI_SERVICE_READY_EVENTID:
7188 		ath11k_service_ready_event(ab, skb);
7189 		break;
7190 	case WMI_SERVICE_READY_EXT_EVENTID:
7191 		ath11k_service_ready_ext_event(ab, skb);
7192 		break;
7193 	case WMI_SERVICE_READY_EXT2_EVENTID:
7194 		ath11k_service_ready_ext2_event(ab, skb);
7195 		break;
7196 	case WMI_REG_CHAN_LIST_CC_EVENTID:
7197 		ath11k_reg_chan_list_event(ab, skb);
7198 		break;
7199 	case WMI_READY_EVENTID:
7200 		ath11k_ready_event(ab, skb);
7201 		break;
7202 	case WMI_PEER_DELETE_RESP_EVENTID:
7203 		ath11k_peer_delete_resp_event(ab, skb);
7204 		break;
7205 	case WMI_VDEV_START_RESP_EVENTID:
7206 		ath11k_vdev_start_resp_event(ab, skb);
7207 		break;
7208 	case WMI_OFFLOAD_BCN_TX_STATUS_EVENTID:
7209 		ath11k_bcn_tx_status_event(ab, skb);
7210 		break;
7211 	case WMI_VDEV_STOPPED_EVENTID:
7212 		ath11k_vdev_stopped_event(ab, skb);
7213 		break;
7214 	case WMI_MGMT_RX_EVENTID:
7215 		ath11k_mgmt_rx_event(ab, skb);
7216 		/* mgmt_rx_event() owns the skb now! */
7217 		return;
7218 	case WMI_MGMT_TX_COMPLETION_EVENTID:
7219 		ath11k_mgmt_tx_compl_event(ab, skb);
7220 		break;
7221 	case WMI_SCAN_EVENTID:
7222 		ath11k_scan_event(ab, skb);
7223 		break;
7224 	case WMI_PEER_STA_KICKOUT_EVENTID:
7225 		ath11k_peer_sta_kickout_event(ab, skb);
7226 		break;
7227 	case WMI_ROAM_EVENTID:
7228 		ath11k_roam_event(ab, skb);
7229 		break;
7230 	case WMI_CHAN_INFO_EVENTID:
7231 		ath11k_chan_info_event(ab, skb);
7232 		break;
7233 	case WMI_PDEV_BSS_CHAN_INFO_EVENTID:
7234 		ath11k_pdev_bss_chan_info_event(ab, skb);
7235 		break;
7236 	case WMI_VDEV_INSTALL_KEY_COMPLETE_EVENTID:
7237 		ath11k_vdev_install_key_compl_event(ab, skb);
7238 		break;
7239 	case WMI_SERVICE_AVAILABLE_EVENTID:
7240 		ath11k_service_available_event(ab, skb);
7241 		break;
7242 	case WMI_PEER_ASSOC_CONF_EVENTID:
7243 		ath11k_peer_assoc_conf_event(ab, skb);
7244 		break;
7245 	case WMI_UPDATE_STATS_EVENTID:
7246 		ath11k_update_stats_event(ab, skb);
7247 		break;
7248 	case WMI_PDEV_CTL_FAILSAFE_CHECK_EVENTID:
7249 		ath11k_pdev_ctl_failsafe_check_event(ab, skb);
7250 		break;
7251 	case WMI_PDEV_CSA_SWITCH_COUNT_STATUS_EVENTID:
7252 		ath11k_wmi_pdev_csa_switch_count_status_event(ab, skb);
7253 		break;
7254 	case WMI_PDEV_TEMPERATURE_EVENTID:
7255 		ath11k_wmi_pdev_temperature_event(ab, skb);
7256 		break;
7257 	case WMI_PDEV_DMA_RING_BUF_RELEASE_EVENTID:
7258 		ath11k_wmi_pdev_dma_ring_buf_release_event(ab, skb);
7259 		break;
7260 	case WMI_HOST_FILS_DISCOVERY_EVENTID:
7261 		ath11k_fils_discovery_event(ab, skb);
7262 		break;
7263 	case WMI_OFFLOAD_PROB_RESP_TX_STATUS_EVENTID:
7264 		ath11k_probe_resp_tx_status_event(ab, skb);
7265 		break;
7266 	case WMI_OBSS_COLOR_COLLISION_DETECTION_EVENTID:
7267 		ath11k_wmi_obss_color_collision_event(ab, skb);
7268 		break;
7269 	/* add Unsupported events here */
7270 	case WMI_TBTTOFFSET_EXT_UPDATE_EVENTID:
7271 	case WMI_PEER_OPER_MODE_CHANGE_EVENTID:
7272 	case WMI_TWT_ENABLE_EVENTID:
7273 	case WMI_TWT_DISABLE_EVENTID:
7274 	case WMI_PDEV_DMA_RING_CFG_RSP_EVENTID:
7275 	case WMI_PEER_CREATE_CONF_EVENTID:
7276 		ath11k_dbg(ab, ATH11K_DBG_WMI,
7277 			   "ignoring unsupported event 0x%x\n", id);
7278 		break;
7279 	case WMI_PDEV_DFS_RADAR_DETECTION_EVENTID:
7280 		ath11k_wmi_pdev_dfs_radar_detected_event(ab, skb);
7281 		break;
7282 	case WMI_VDEV_DELETE_RESP_EVENTID:
7283 		ath11k_vdev_delete_resp_event(ab, skb);
7284 		break;
7285 	case WMI_WOW_WAKEUP_HOST_EVENTID:
7286 		ath11k_wmi_event_wow_wakeup_host(ab, skb);
7287 		break;
7288 	/* TODO: Add remaining events */
7289 	default:
7290 		ath11k_dbg(ab, ATH11K_DBG_WMI, "Unknown eventid: 0x%x\n", id);
7291 		break;
7292 	}
7293 
7294 out:
7295 	dev_kfree_skb(skb);
7296 }
7297 
7298 static int ath11k_connect_pdev_htc_service(struct ath11k_base *ab,
7299 					   u32 pdev_idx)
7300 {
7301 	int status;
7302 	u32 svc_id[] = { ATH11K_HTC_SVC_ID_WMI_CONTROL,
7303 			 ATH11K_HTC_SVC_ID_WMI_CONTROL_MAC1,
7304 			 ATH11K_HTC_SVC_ID_WMI_CONTROL_MAC2 };
7305 
7306 	struct ath11k_htc_svc_conn_req conn_req;
7307 	struct ath11k_htc_svc_conn_resp conn_resp;
7308 
7309 	memset(&conn_req, 0, sizeof(conn_req));
7310 	memset(&conn_resp, 0, sizeof(conn_resp));
7311 
7312 	/* these fields are the same for all service endpoints */
7313 	conn_req.ep_ops.ep_tx_complete = ath11k_wmi_htc_tx_complete;
7314 	conn_req.ep_ops.ep_rx_complete = ath11k_wmi_tlv_op_rx;
7315 	conn_req.ep_ops.ep_tx_credits = ath11k_wmi_op_ep_tx_credits;
7316 
7317 	/* connect to control service */
7318 	conn_req.service_id = svc_id[pdev_idx];
7319 
7320 	status = ath11k_htc_connect_service(&ab->htc, &conn_req, &conn_resp);
7321 	if (status) {
7322 		ath11k_warn(ab, "failed to connect to WMI CONTROL service status: %d\n",
7323 			    status);
7324 		return status;
7325 	}
7326 
7327 	ab->wmi_ab.wmi_endpoint_id[pdev_idx] = conn_resp.eid;
7328 	ab->wmi_ab.wmi[pdev_idx].eid = conn_resp.eid;
7329 	ab->wmi_ab.max_msg_len[pdev_idx] = conn_resp.max_msg_len;
7330 	init_waitqueue_head(&ab->wmi_ab.wmi[pdev_idx].tx_ce_desc_wq);
7331 
7332 	return 0;
7333 }
7334 
7335 static int
7336 ath11k_wmi_send_unit_test_cmd(struct ath11k *ar,
7337 			      struct wmi_unit_test_cmd ut_cmd,
7338 			      u32 *test_args)
7339 {
7340 	struct ath11k_pdev_wmi *wmi = ar->wmi;
7341 	struct wmi_unit_test_cmd *cmd;
7342 	struct sk_buff *skb;
7343 	struct wmi_tlv *tlv;
7344 	void *ptr;
7345 	u32 *ut_cmd_args;
7346 	int buf_len, arg_len;
7347 	int ret;
7348 	int i;
7349 
7350 	arg_len = sizeof(u32) * ut_cmd.num_args;
7351 	buf_len = sizeof(ut_cmd) + arg_len + TLV_HDR_SIZE;
7352 
7353 	skb = ath11k_wmi_alloc_skb(wmi->wmi_ab, buf_len);
7354 	if (!skb)
7355 		return -ENOMEM;
7356 
7357 	cmd = (struct wmi_unit_test_cmd *)skb->data;
7358 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_UNIT_TEST_CMD) |
7359 			  FIELD_PREP(WMI_TLV_LEN, sizeof(ut_cmd) - TLV_HDR_SIZE);
7360 
7361 	cmd->vdev_id = ut_cmd.vdev_id;
7362 	cmd->module_id = ut_cmd.module_id;
7363 	cmd->num_args = ut_cmd.num_args;
7364 	cmd->diag_token = ut_cmd.diag_token;
7365 
7366 	ptr = skb->data + sizeof(ut_cmd);
7367 
7368 	tlv = ptr;
7369 	tlv->header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_ARRAY_UINT32) |
7370 		      FIELD_PREP(WMI_TLV_LEN, arg_len);
7371 
7372 	ptr += TLV_HDR_SIZE;
7373 
7374 	ut_cmd_args = ptr;
7375 	for (i = 0; i < ut_cmd.num_args; i++)
7376 		ut_cmd_args[i] = test_args[i];
7377 
7378 	ret = ath11k_wmi_cmd_send(wmi, skb, WMI_UNIT_TEST_CMDID);
7379 
7380 	if (ret) {
7381 		ath11k_warn(ar->ab, "failed to send WMI_UNIT_TEST CMD :%d\n",
7382 			    ret);
7383 		dev_kfree_skb(skb);
7384 	}
7385 
7386 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI,
7387 		   "WMI unit test : module %d vdev %d n_args %d token %d\n",
7388 		   cmd->module_id, cmd->vdev_id, cmd->num_args,
7389 		   cmd->diag_token);
7390 
7391 	return ret;
7392 }
7393 
7394 int ath11k_wmi_simulate_radar(struct ath11k *ar)
7395 {
7396 	struct ath11k_vif *arvif;
7397 	u32 dfs_args[DFS_MAX_TEST_ARGS];
7398 	struct wmi_unit_test_cmd wmi_ut;
7399 	bool arvif_found = false;
7400 
7401 	list_for_each_entry(arvif, &ar->arvifs, list) {
7402 		if (arvif->is_started && arvif->vdev_type == WMI_VDEV_TYPE_AP) {
7403 			arvif_found = true;
7404 			break;
7405 		}
7406 	}
7407 
7408 	if (!arvif_found)
7409 		return -EINVAL;
7410 
7411 	dfs_args[DFS_TEST_CMDID] = 0;
7412 	dfs_args[DFS_TEST_PDEV_ID] = ar->pdev->pdev_id;
7413 	/* Currently we could pass segment_id(b0 - b1), chirp(b2)
7414 	 * freq offset (b3 - b10) to unit test. For simulation
7415 	 * purpose this can be set to 0 which is valid.
7416 	 */
7417 	dfs_args[DFS_TEST_RADAR_PARAM] = 0;
7418 
7419 	wmi_ut.vdev_id = arvif->vdev_id;
7420 	wmi_ut.module_id = DFS_UNIT_TEST_MODULE;
7421 	wmi_ut.num_args = DFS_MAX_TEST_ARGS;
7422 	wmi_ut.diag_token = DFS_UNIT_TEST_TOKEN;
7423 
7424 	ath11k_dbg(ar->ab, ATH11K_DBG_REG, "Triggering Radar Simulation\n");
7425 
7426 	return ath11k_wmi_send_unit_test_cmd(ar, wmi_ut, dfs_args);
7427 }
7428 
7429 int ath11k_wmi_connect(struct ath11k_base *ab)
7430 {
7431 	u32 i;
7432 	u8 wmi_ep_count;
7433 
7434 	wmi_ep_count = ab->htc.wmi_ep_count;
7435 	if (wmi_ep_count > ab->hw_params.max_radios)
7436 		return -1;
7437 
7438 	for (i = 0; i < wmi_ep_count; i++)
7439 		ath11k_connect_pdev_htc_service(ab, i);
7440 
7441 	return 0;
7442 }
7443 
7444 static void ath11k_wmi_pdev_detach(struct ath11k_base *ab, u8 pdev_id)
7445 {
7446 	if (WARN_ON(pdev_id >= MAX_RADIOS))
7447 		return;
7448 
7449 	/* TODO: Deinit any pdev specific wmi resource */
7450 }
7451 
7452 int ath11k_wmi_pdev_attach(struct ath11k_base *ab,
7453 			   u8 pdev_id)
7454 {
7455 	struct ath11k_pdev_wmi *wmi_handle;
7456 
7457 	if (pdev_id >= ab->hw_params.max_radios)
7458 		return -EINVAL;
7459 
7460 	wmi_handle = &ab->wmi_ab.wmi[pdev_id];
7461 
7462 	wmi_handle->wmi_ab = &ab->wmi_ab;
7463 
7464 	ab->wmi_ab.ab = ab;
7465 	/* TODO: Init remaining resource specific to pdev */
7466 
7467 	return 0;
7468 }
7469 
7470 int ath11k_wmi_attach(struct ath11k_base *ab)
7471 {
7472 	int ret;
7473 
7474 	ret = ath11k_wmi_pdev_attach(ab, 0);
7475 	if (ret)
7476 		return ret;
7477 
7478 	ab->wmi_ab.ab = ab;
7479 	ab->wmi_ab.preferred_hw_mode = WMI_HOST_HW_MODE_MAX;
7480 
7481 	/* It's overwritten when service_ext_ready is handled */
7482 	if (ab->hw_params.single_pdev_only)
7483 		ab->wmi_ab.preferred_hw_mode = WMI_HOST_HW_MODE_SINGLE;
7484 
7485 	/* TODO: Init remaining wmi soc resources required */
7486 	init_completion(&ab->wmi_ab.service_ready);
7487 	init_completion(&ab->wmi_ab.unified_ready);
7488 
7489 	return 0;
7490 }
7491 
7492 void ath11k_wmi_detach(struct ath11k_base *ab)
7493 {
7494 	int i;
7495 
7496 	/* TODO: Deinit wmi resource specific to SOC as required */
7497 
7498 	for (i = 0; i < ab->htc.wmi_ep_count; i++)
7499 		ath11k_wmi_pdev_detach(ab, i);
7500 
7501 	ath11k_wmi_free_dbring_caps(ab);
7502 }
7503 
7504 int ath11k_wmi_wow_host_wakeup_ind(struct ath11k *ar)
7505 {
7506 	struct wmi_wow_host_wakeup_ind *cmd;
7507 	struct sk_buff *skb;
7508 	size_t len;
7509 
7510 	len = sizeof(*cmd);
7511 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
7512 	if (!skb)
7513 		return -ENOMEM;
7514 
7515 	cmd = (struct wmi_wow_host_wakeup_ind *)skb->data;
7516 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG,
7517 				     WMI_TAG_WOW_HOSTWAKEUP_FROM_SLEEP_CMD) |
7518 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
7519 
7520 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "wmi tlv wow host wakeup ind\n");
7521 
7522 	return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_HOSTWAKEUP_FROM_SLEEP_CMDID);
7523 }
7524 
7525 int ath11k_wmi_wow_enable(struct ath11k *ar)
7526 {
7527 	struct wmi_wow_enable_cmd *cmd;
7528 	struct sk_buff *skb;
7529 	int len;
7530 
7531 	len = sizeof(*cmd);
7532 	skb = ath11k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
7533 	if (!skb)
7534 		return -ENOMEM;
7535 
7536 	cmd = (struct wmi_wow_enable_cmd *)skb->data;
7537 	cmd->tlv_header = FIELD_PREP(WMI_TLV_TAG, WMI_TAG_WOW_ENABLE_CMD) |
7538 			  FIELD_PREP(WMI_TLV_LEN, sizeof(*cmd) - TLV_HDR_SIZE);
7539 
7540 	cmd->enable = 1;
7541 	cmd->pause_iface_config = WOW_IFACE_PAUSE_ENABLED;
7542 	ath11k_dbg(ar->ab, ATH11K_DBG_WMI, "wmi tlv wow enable\n");
7543 
7544 	return ath11k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_ENABLE_CMDID);
7545 }
7546