xref: /linux/drivers/net/wireless/ath/ath12k/wmi.c (revision 0ad9617c78acbc71373fb341a6f75d4012b01d69)
1 // SPDX-License-Identifier: BSD-3-Clause-Clear
2 /*
3  * Copyright (c) 2018-2021 The Linux Foundation. All rights reserved.
4  * Copyright (c) 2021-2024 Qualcomm Innovation Center, Inc. All rights reserved.
5  */
6 #include <linux/skbuff.h>
7 #include <linux/ctype.h>
8 #include <net/mac80211.h>
9 #include <net/cfg80211.h>
10 #include <linux/completion.h>
11 #include <linux/if_ether.h>
12 #include <linux/types.h>
13 #include <linux/pci.h>
14 #include <linux/uuid.h>
15 #include <linux/time.h>
16 #include <linux/of.h>
17 #include "core.h"
18 #include "debug.h"
19 #include "mac.h"
20 #include "hw.h"
21 #include "peer.h"
22 #include "p2p.h"
23 
24 struct ath12k_wmi_svc_ready_parse {
25 	bool wmi_svc_bitmap_done;
26 };
27 
28 struct ath12k_wmi_dma_ring_caps_parse {
29 	struct ath12k_wmi_dma_ring_caps_params *dma_ring_caps;
30 	u32 n_dma_ring_caps;
31 };
32 
33 struct ath12k_wmi_service_ext_arg {
34 	u32 default_conc_scan_config_bits;
35 	u32 default_fw_config_bits;
36 	struct ath12k_wmi_ppe_threshold_arg ppet;
37 	u32 he_cap_info;
38 	u32 mpdu_density;
39 	u32 max_bssid_rx_filters;
40 	u32 num_hw_modes;
41 	u32 num_phy;
42 };
43 
44 struct ath12k_wmi_svc_rdy_ext_parse {
45 	struct ath12k_wmi_service_ext_arg arg;
46 	const struct ath12k_wmi_soc_mac_phy_hw_mode_caps_params *hw_caps;
47 	const struct ath12k_wmi_hw_mode_cap_params *hw_mode_caps;
48 	u32 n_hw_mode_caps;
49 	u32 tot_phy_id;
50 	struct ath12k_wmi_hw_mode_cap_params pref_hw_mode_caps;
51 	struct ath12k_wmi_mac_phy_caps_params *mac_phy_caps;
52 	u32 n_mac_phy_caps;
53 	const struct ath12k_wmi_soc_hal_reg_caps_params *soc_hal_reg_caps;
54 	const struct ath12k_wmi_hal_reg_caps_ext_params *ext_hal_reg_caps;
55 	u32 n_ext_hal_reg_caps;
56 	struct ath12k_wmi_dma_ring_caps_parse dma_caps_parse;
57 	bool hw_mode_done;
58 	bool mac_phy_done;
59 	bool ext_hal_reg_done;
60 	bool mac_phy_chainmask_combo_done;
61 	bool mac_phy_chainmask_cap_done;
62 	bool oem_dma_ring_cap_done;
63 	bool dma_ring_cap_done;
64 };
65 
66 struct ath12k_wmi_svc_rdy_ext2_arg {
67 	u32 reg_db_version;
68 	u32 hw_min_max_tx_power_2ghz;
69 	u32 hw_min_max_tx_power_5ghz;
70 	u32 chwidth_num_peer_caps;
71 	u32 preamble_puncture_bw;
72 	u32 max_user_per_ppdu_ofdma;
73 	u32 max_user_per_ppdu_mumimo;
74 	u32 target_cap_flags;
75 	u32 eht_cap_mac_info[WMI_MAX_EHTCAP_MAC_SIZE];
76 	u32 max_num_linkview_peers;
77 	u32 max_num_msduq_supported_per_tid;
78 	u32 default_num_msduq_supported_per_tid;
79 };
80 
81 struct ath12k_wmi_svc_rdy_ext2_parse {
82 	struct ath12k_wmi_svc_rdy_ext2_arg arg;
83 	struct ath12k_wmi_dma_ring_caps_parse dma_caps_parse;
84 	bool dma_ring_cap_done;
85 	bool spectral_bin_scaling_done;
86 	bool mac_phy_caps_ext_done;
87 };
88 
89 struct ath12k_wmi_rdy_parse {
90 	u32 num_extra_mac_addr;
91 };
92 
93 struct ath12k_wmi_dma_buf_release_arg {
94 	struct ath12k_wmi_dma_buf_release_fixed_params fixed;
95 	const struct ath12k_wmi_dma_buf_release_entry_params *buf_entry;
96 	const struct ath12k_wmi_dma_buf_release_meta_data_params *meta_data;
97 	u32 num_buf_entry;
98 	u32 num_meta;
99 	bool buf_entry_done;
100 	bool meta_data_done;
101 };
102 
103 struct ath12k_wmi_tlv_policy {
104 	size_t min_len;
105 };
106 
107 struct wmi_tlv_mgmt_rx_parse {
108 	const struct ath12k_wmi_mgmt_rx_params *fixed;
109 	const u8 *frame_buf;
110 	bool frame_buf_done;
111 };
112 
113 static const struct ath12k_wmi_tlv_policy ath12k_wmi_tlv_policies[] = {
114 	[WMI_TAG_ARRAY_BYTE] = { .min_len = 0 },
115 	[WMI_TAG_ARRAY_UINT32] = { .min_len = 0 },
116 	[WMI_TAG_SERVICE_READY_EVENT] = {
117 		.min_len = sizeof(struct wmi_service_ready_event) },
118 	[WMI_TAG_SERVICE_READY_EXT_EVENT] = {
119 		.min_len = sizeof(struct wmi_service_ready_ext_event) },
120 	[WMI_TAG_SOC_MAC_PHY_HW_MODE_CAPS] = {
121 		.min_len = sizeof(struct ath12k_wmi_soc_mac_phy_hw_mode_caps_params) },
122 	[WMI_TAG_SOC_HAL_REG_CAPABILITIES] = {
123 		.min_len = sizeof(struct ath12k_wmi_soc_hal_reg_caps_params) },
124 	[WMI_TAG_VDEV_START_RESPONSE_EVENT] = {
125 		.min_len = sizeof(struct wmi_vdev_start_resp_event) },
126 	[WMI_TAG_PEER_DELETE_RESP_EVENT] = {
127 		.min_len = sizeof(struct wmi_peer_delete_resp_event) },
128 	[WMI_TAG_OFFLOAD_BCN_TX_STATUS_EVENT] = {
129 		.min_len = sizeof(struct wmi_bcn_tx_status_event) },
130 	[WMI_TAG_VDEV_STOPPED_EVENT] = {
131 		.min_len = sizeof(struct wmi_vdev_stopped_event) },
132 	[WMI_TAG_REG_CHAN_LIST_CC_EXT_EVENT] = {
133 		.min_len = sizeof(struct wmi_reg_chan_list_cc_ext_event) },
134 	[WMI_TAG_MGMT_RX_HDR] = {
135 		.min_len = sizeof(struct ath12k_wmi_mgmt_rx_params) },
136 	[WMI_TAG_MGMT_TX_COMPL_EVENT] = {
137 		.min_len = sizeof(struct wmi_mgmt_tx_compl_event) },
138 	[WMI_TAG_SCAN_EVENT] = {
139 		.min_len = sizeof(struct wmi_scan_event) },
140 	[WMI_TAG_PEER_STA_KICKOUT_EVENT] = {
141 		.min_len = sizeof(struct wmi_peer_sta_kickout_event) },
142 	[WMI_TAG_ROAM_EVENT] = {
143 		.min_len = sizeof(struct wmi_roam_event) },
144 	[WMI_TAG_CHAN_INFO_EVENT] = {
145 		.min_len = sizeof(struct wmi_chan_info_event) },
146 	[WMI_TAG_PDEV_BSS_CHAN_INFO_EVENT] = {
147 		.min_len = sizeof(struct wmi_pdev_bss_chan_info_event) },
148 	[WMI_TAG_VDEV_INSTALL_KEY_COMPLETE_EVENT] = {
149 		.min_len = sizeof(struct wmi_vdev_install_key_compl_event) },
150 	[WMI_TAG_READY_EVENT] = {
151 		.min_len = sizeof(struct ath12k_wmi_ready_event_min_params) },
152 	[WMI_TAG_SERVICE_AVAILABLE_EVENT] = {
153 		.min_len = sizeof(struct wmi_service_available_event) },
154 	[WMI_TAG_PEER_ASSOC_CONF_EVENT] = {
155 		.min_len = sizeof(struct wmi_peer_assoc_conf_event) },
156 	[WMI_TAG_RFKILL_EVENT] = {
157 		.min_len = sizeof(struct wmi_rfkill_state_change_event) },
158 	[WMI_TAG_PDEV_CTL_FAILSAFE_CHECK_EVENT] = {
159 		.min_len = sizeof(struct wmi_pdev_ctl_failsafe_chk_event) },
160 	[WMI_TAG_HOST_SWFDA_EVENT] = {
161 		.min_len = sizeof(struct wmi_fils_discovery_event) },
162 	[WMI_TAG_OFFLOAD_PRB_RSP_TX_STATUS_EVENT] = {
163 		.min_len = sizeof(struct wmi_probe_resp_tx_status_event) },
164 	[WMI_TAG_VDEV_DELETE_RESP_EVENT] = {
165 		.min_len = sizeof(struct wmi_vdev_delete_resp_event) },
166 	[WMI_TAG_TWT_ENABLE_COMPLETE_EVENT] = {
167 		.min_len = sizeof(struct wmi_twt_enable_event) },
168 	[WMI_TAG_TWT_DISABLE_COMPLETE_EVENT] = {
169 		.min_len = sizeof(struct wmi_twt_disable_event) },
170 	[WMI_TAG_P2P_NOA_INFO] = {
171 		.min_len = sizeof(struct ath12k_wmi_p2p_noa_info) },
172 	[WMI_TAG_P2P_NOA_EVENT] = {
173 		.min_len = sizeof(struct wmi_p2p_noa_event) },
174 };
175 
176 static __le32 ath12k_wmi_tlv_hdr(u32 cmd, u32 len)
177 {
178 	return le32_encode_bits(cmd, WMI_TLV_TAG) |
179 		le32_encode_bits(len, WMI_TLV_LEN);
180 }
181 
182 static __le32 ath12k_wmi_tlv_cmd_hdr(u32 cmd, u32 len)
183 {
184 	return ath12k_wmi_tlv_hdr(cmd, len - TLV_HDR_SIZE);
185 }
186 
187 void ath12k_wmi_init_qcn9274(struct ath12k_base *ab,
188 			     struct ath12k_wmi_resource_config_arg *config)
189 {
190 	config->num_vdevs = ab->num_radios * TARGET_NUM_VDEVS;
191 	config->num_peers = ab->num_radios *
192 		ath12k_core_get_max_peers_per_radio(ab);
193 	config->num_tids = ath12k_core_get_max_num_tids(ab);
194 	config->num_offload_peers = TARGET_NUM_OFFLD_PEERS;
195 	config->num_offload_reorder_buffs = TARGET_NUM_OFFLD_REORDER_BUFFS;
196 	config->num_peer_keys = TARGET_NUM_PEER_KEYS;
197 	config->ast_skid_limit = TARGET_AST_SKID_LIMIT;
198 	config->tx_chain_mask = (1 << ab->target_caps.num_rf_chains) - 1;
199 	config->rx_chain_mask = (1 << ab->target_caps.num_rf_chains) - 1;
200 	config->rx_timeout_pri[0] = TARGET_RX_TIMEOUT_LO_PRI;
201 	config->rx_timeout_pri[1] = TARGET_RX_TIMEOUT_LO_PRI;
202 	config->rx_timeout_pri[2] = TARGET_RX_TIMEOUT_LO_PRI;
203 	config->rx_timeout_pri[3] = TARGET_RX_TIMEOUT_HI_PRI;
204 
205 	if (test_bit(ATH12K_FLAG_RAW_MODE, &ab->dev_flags))
206 		config->rx_decap_mode = TARGET_DECAP_MODE_RAW;
207 	else
208 		config->rx_decap_mode = TARGET_DECAP_MODE_NATIVE_WIFI;
209 
210 	config->scan_max_pending_req = TARGET_SCAN_MAX_PENDING_REQS;
211 	config->bmiss_offload_max_vdev = TARGET_BMISS_OFFLOAD_MAX_VDEV;
212 	config->roam_offload_max_vdev = TARGET_ROAM_OFFLOAD_MAX_VDEV;
213 	config->roam_offload_max_ap_profiles = TARGET_ROAM_OFFLOAD_MAX_AP_PROFILES;
214 	config->num_mcast_groups = TARGET_NUM_MCAST_GROUPS;
215 	config->num_mcast_table_elems = TARGET_NUM_MCAST_TABLE_ELEMS;
216 	config->mcast2ucast_mode = TARGET_MCAST2UCAST_MODE;
217 	config->tx_dbg_log_size = TARGET_TX_DBG_LOG_SIZE;
218 	config->num_wds_entries = TARGET_NUM_WDS_ENTRIES;
219 	config->dma_burst_size = TARGET_DMA_BURST_SIZE;
220 	config->rx_skip_defrag_timeout_dup_detection_check =
221 		TARGET_RX_SKIP_DEFRAG_TIMEOUT_DUP_DETECTION_CHECK;
222 	config->vow_config = TARGET_VOW_CONFIG;
223 	config->gtk_offload_max_vdev = TARGET_GTK_OFFLOAD_MAX_VDEV;
224 	config->num_msdu_desc = TARGET_NUM_MSDU_DESC;
225 	config->beacon_tx_offload_max_vdev = ab->num_radios * TARGET_MAX_BCN_OFFLD;
226 	config->rx_batchmode = TARGET_RX_BATCHMODE;
227 	/* Indicates host supports peer map v3 and unmap v2 support */
228 	config->peer_map_unmap_version = 0x32;
229 	config->twt_ap_pdev_count = ab->num_radios;
230 	config->twt_ap_sta_count = 1000;
231 	config->ema_max_vap_cnt = ab->num_radios;
232 	config->ema_max_profile_period = TARGET_EMA_MAX_PROFILE_PERIOD;
233 	config->beacon_tx_offload_max_vdev += config->ema_max_vap_cnt;
234 
235 	if (test_bit(WMI_TLV_SERVICE_PEER_METADATA_V1A_V1B_SUPPORT, ab->wmi_ab.svc_map))
236 		config->peer_metadata_ver = ATH12K_PEER_METADATA_V1B;
237 }
238 
239 void ath12k_wmi_init_wcn7850(struct ath12k_base *ab,
240 			     struct ath12k_wmi_resource_config_arg *config)
241 {
242 	config->num_vdevs = 4;
243 	config->num_peers = 16;
244 	config->num_tids = 32;
245 
246 	config->num_offload_peers = 3;
247 	config->num_offload_reorder_buffs = 3;
248 	config->num_peer_keys = TARGET_NUM_PEER_KEYS;
249 	config->ast_skid_limit = TARGET_AST_SKID_LIMIT;
250 	config->tx_chain_mask = (1 << ab->target_caps.num_rf_chains) - 1;
251 	config->rx_chain_mask = (1 << ab->target_caps.num_rf_chains) - 1;
252 	config->rx_timeout_pri[0] = TARGET_RX_TIMEOUT_LO_PRI;
253 	config->rx_timeout_pri[1] = TARGET_RX_TIMEOUT_LO_PRI;
254 	config->rx_timeout_pri[2] = TARGET_RX_TIMEOUT_LO_PRI;
255 	config->rx_timeout_pri[3] = TARGET_RX_TIMEOUT_HI_PRI;
256 	config->rx_decap_mode = TARGET_DECAP_MODE_NATIVE_WIFI;
257 	config->scan_max_pending_req = TARGET_SCAN_MAX_PENDING_REQS;
258 	config->bmiss_offload_max_vdev = TARGET_BMISS_OFFLOAD_MAX_VDEV;
259 	config->roam_offload_max_vdev = TARGET_ROAM_OFFLOAD_MAX_VDEV;
260 	config->roam_offload_max_ap_profiles = TARGET_ROAM_OFFLOAD_MAX_AP_PROFILES;
261 	config->num_mcast_groups = 0;
262 	config->num_mcast_table_elems = 0;
263 	config->mcast2ucast_mode = 0;
264 	config->tx_dbg_log_size = TARGET_TX_DBG_LOG_SIZE;
265 	config->num_wds_entries = 0;
266 	config->dma_burst_size = 0;
267 	config->rx_skip_defrag_timeout_dup_detection_check = 0;
268 	config->vow_config = TARGET_VOW_CONFIG;
269 	config->gtk_offload_max_vdev = 2;
270 	config->num_msdu_desc = 0x400;
271 	config->beacon_tx_offload_max_vdev = 2;
272 	config->rx_batchmode = TARGET_RX_BATCHMODE;
273 
274 	config->peer_map_unmap_version = 0x1;
275 	config->use_pdev_id = 1;
276 	config->max_frag_entries = 0xa;
277 	config->num_tdls_vdevs = 0x1;
278 	config->num_tdls_conn_table_entries = 8;
279 	config->beacon_tx_offload_max_vdev = 0x2;
280 	config->num_multicast_filter_entries = 0x20;
281 	config->num_wow_filters = 0x16;
282 	config->num_keep_alive_pattern = 0;
283 }
284 
285 #define PRIMAP(_hw_mode_) \
286 	[_hw_mode_] = _hw_mode_##_PRI
287 
288 static const int ath12k_hw_mode_pri_map[] = {
289 	PRIMAP(WMI_HOST_HW_MODE_SINGLE),
290 	PRIMAP(WMI_HOST_HW_MODE_DBS),
291 	PRIMAP(WMI_HOST_HW_MODE_SBS_PASSIVE),
292 	PRIMAP(WMI_HOST_HW_MODE_SBS),
293 	PRIMAP(WMI_HOST_HW_MODE_DBS_SBS),
294 	PRIMAP(WMI_HOST_HW_MODE_DBS_OR_SBS),
295 	/* keep last */
296 	PRIMAP(WMI_HOST_HW_MODE_MAX),
297 };
298 
299 static int
300 ath12k_wmi_tlv_iter(struct ath12k_base *ab, const void *ptr, size_t len,
301 		    int (*iter)(struct ath12k_base *ab, u16 tag, u16 len,
302 				const void *ptr, void *data),
303 		    void *data)
304 {
305 	const void *begin = ptr;
306 	const struct wmi_tlv *tlv;
307 	u16 tlv_tag, tlv_len;
308 	int ret;
309 
310 	while (len > 0) {
311 		if (len < sizeof(*tlv)) {
312 			ath12k_err(ab, "wmi tlv parse failure at byte %zd (%zu bytes left, %zu expected)\n",
313 				   ptr - begin, len, sizeof(*tlv));
314 			return -EINVAL;
315 		}
316 
317 		tlv = ptr;
318 		tlv_tag = le32_get_bits(tlv->header, WMI_TLV_TAG);
319 		tlv_len = le32_get_bits(tlv->header, WMI_TLV_LEN);
320 		ptr += sizeof(*tlv);
321 		len -= sizeof(*tlv);
322 
323 		if (tlv_len > len) {
324 			ath12k_err(ab, "wmi tlv parse failure of tag %u at byte %zd (%zu bytes left, %u expected)\n",
325 				   tlv_tag, ptr - begin, len, tlv_len);
326 			return -EINVAL;
327 		}
328 
329 		if (tlv_tag < ARRAY_SIZE(ath12k_wmi_tlv_policies) &&
330 		    ath12k_wmi_tlv_policies[tlv_tag].min_len &&
331 		    ath12k_wmi_tlv_policies[tlv_tag].min_len > tlv_len) {
332 			ath12k_err(ab, "wmi tlv parse failure of tag %u at byte %zd (%u bytes is less than min length %zu)\n",
333 				   tlv_tag, ptr - begin, tlv_len,
334 				   ath12k_wmi_tlv_policies[tlv_tag].min_len);
335 			return -EINVAL;
336 		}
337 
338 		ret = iter(ab, tlv_tag, tlv_len, ptr, data);
339 		if (ret)
340 			return ret;
341 
342 		ptr += tlv_len;
343 		len -= tlv_len;
344 	}
345 
346 	return 0;
347 }
348 
349 static int ath12k_wmi_tlv_iter_parse(struct ath12k_base *ab, u16 tag, u16 len,
350 				     const void *ptr, void *data)
351 {
352 	const void **tb = data;
353 
354 	if (tag < WMI_TAG_MAX)
355 		tb[tag] = ptr;
356 
357 	return 0;
358 }
359 
360 static int ath12k_wmi_tlv_parse(struct ath12k_base *ar, const void **tb,
361 				const void *ptr, size_t len)
362 {
363 	return ath12k_wmi_tlv_iter(ar, ptr, len, ath12k_wmi_tlv_iter_parse,
364 				   (void *)tb);
365 }
366 
367 static const void **
368 ath12k_wmi_tlv_parse_alloc(struct ath12k_base *ab,
369 			   struct sk_buff *skb, gfp_t gfp)
370 {
371 	const void **tb;
372 	int ret;
373 
374 	tb = kcalloc(WMI_TAG_MAX, sizeof(*tb), gfp);
375 	if (!tb)
376 		return ERR_PTR(-ENOMEM);
377 
378 	ret = ath12k_wmi_tlv_parse(ab, tb, skb->data, skb->len);
379 	if (ret) {
380 		kfree(tb);
381 		return ERR_PTR(ret);
382 	}
383 
384 	return tb;
385 }
386 
387 static int ath12k_wmi_cmd_send_nowait(struct ath12k_wmi_pdev *wmi, struct sk_buff *skb,
388 				      u32 cmd_id)
389 {
390 	struct ath12k_skb_cb *skb_cb = ATH12K_SKB_CB(skb);
391 	struct ath12k_base *ab = wmi->wmi_ab->ab;
392 	struct wmi_cmd_hdr *cmd_hdr;
393 	int ret;
394 
395 	if (!skb_push(skb, sizeof(struct wmi_cmd_hdr)))
396 		return -ENOMEM;
397 
398 	cmd_hdr = (struct wmi_cmd_hdr *)skb->data;
399 	cmd_hdr->cmd_id = le32_encode_bits(cmd_id, WMI_CMD_HDR_CMD_ID);
400 
401 	memset(skb_cb, 0, sizeof(*skb_cb));
402 	ret = ath12k_htc_send(&ab->htc, wmi->eid, skb);
403 
404 	if (ret)
405 		goto err_pull;
406 
407 	return 0;
408 
409 err_pull:
410 	skb_pull(skb, sizeof(struct wmi_cmd_hdr));
411 	return ret;
412 }
413 
414 int ath12k_wmi_cmd_send(struct ath12k_wmi_pdev *wmi, struct sk_buff *skb,
415 			u32 cmd_id)
416 {
417 	struct ath12k_wmi_base *wmi_ab = wmi->wmi_ab;
418 	int ret = -EOPNOTSUPP;
419 
420 	might_sleep();
421 
422 	wait_event_timeout(wmi_ab->tx_credits_wq, ({
423 		ret = ath12k_wmi_cmd_send_nowait(wmi, skb, cmd_id);
424 
425 		if (ret && test_bit(ATH12K_FLAG_CRASH_FLUSH, &wmi_ab->ab->dev_flags))
426 			ret = -ESHUTDOWN;
427 
428 		(ret != -EAGAIN);
429 	}), WMI_SEND_TIMEOUT_HZ);
430 
431 	if (ret == -EAGAIN)
432 		ath12k_warn(wmi_ab->ab, "wmi command %d timeout\n", cmd_id);
433 
434 	return ret;
435 }
436 
437 static int ath12k_pull_svc_ready_ext(struct ath12k_wmi_pdev *wmi_handle,
438 				     const void *ptr,
439 				     struct ath12k_wmi_service_ext_arg *arg)
440 {
441 	const struct wmi_service_ready_ext_event *ev = ptr;
442 	int i;
443 
444 	if (!ev)
445 		return -EINVAL;
446 
447 	/* Move this to host based bitmap */
448 	arg->default_conc_scan_config_bits =
449 		le32_to_cpu(ev->default_conc_scan_config_bits);
450 	arg->default_fw_config_bits = le32_to_cpu(ev->default_fw_config_bits);
451 	arg->he_cap_info = le32_to_cpu(ev->he_cap_info);
452 	arg->mpdu_density = le32_to_cpu(ev->mpdu_density);
453 	arg->max_bssid_rx_filters = le32_to_cpu(ev->max_bssid_rx_filters);
454 	arg->ppet.numss_m1 = le32_to_cpu(ev->ppet.numss_m1);
455 	arg->ppet.ru_bit_mask = le32_to_cpu(ev->ppet.ru_info);
456 
457 	for (i = 0; i < WMI_MAX_NUM_SS; i++)
458 		arg->ppet.ppet16_ppet8_ru3_ru0[i] =
459 			le32_to_cpu(ev->ppet.ppet16_ppet8_ru3_ru0[i]);
460 
461 	return 0;
462 }
463 
464 static int
465 ath12k_pull_mac_phy_cap_svc_ready_ext(struct ath12k_wmi_pdev *wmi_handle,
466 				      struct ath12k_wmi_svc_rdy_ext_parse *svc,
467 				      u8 hw_mode_id, u8 phy_id,
468 				      struct ath12k_pdev *pdev)
469 {
470 	const struct ath12k_wmi_mac_phy_caps_params *mac_caps;
471 	const struct ath12k_wmi_soc_mac_phy_hw_mode_caps_params *hw_caps = svc->hw_caps;
472 	const struct ath12k_wmi_hw_mode_cap_params *wmi_hw_mode_caps = svc->hw_mode_caps;
473 	const struct ath12k_wmi_mac_phy_caps_params *wmi_mac_phy_caps = svc->mac_phy_caps;
474 	struct ath12k_base *ab = wmi_handle->wmi_ab->ab;
475 	struct ath12k_band_cap *cap_band;
476 	struct ath12k_pdev_cap *pdev_cap = &pdev->cap;
477 	struct ath12k_fw_pdev *fw_pdev;
478 	u32 phy_map;
479 	u32 hw_idx, phy_idx = 0;
480 	int i;
481 
482 	if (!hw_caps || !wmi_hw_mode_caps || !svc->soc_hal_reg_caps)
483 		return -EINVAL;
484 
485 	for (hw_idx = 0; hw_idx < le32_to_cpu(hw_caps->num_hw_modes); hw_idx++) {
486 		if (hw_mode_id == le32_to_cpu(wmi_hw_mode_caps[hw_idx].hw_mode_id))
487 			break;
488 
489 		phy_map = le32_to_cpu(wmi_hw_mode_caps[hw_idx].phy_id_map);
490 		phy_idx = fls(phy_map);
491 	}
492 
493 	if (hw_idx == le32_to_cpu(hw_caps->num_hw_modes))
494 		return -EINVAL;
495 
496 	phy_idx += phy_id;
497 	if (phy_id >= le32_to_cpu(svc->soc_hal_reg_caps->num_phy))
498 		return -EINVAL;
499 
500 	mac_caps = wmi_mac_phy_caps + phy_idx;
501 
502 	pdev->pdev_id = ath12k_wmi_mac_phy_get_pdev_id(mac_caps);
503 	pdev->hw_link_id = ath12k_wmi_mac_phy_get_hw_link_id(mac_caps);
504 	pdev_cap->supported_bands |= le32_to_cpu(mac_caps->supported_bands);
505 	pdev_cap->ampdu_density = le32_to_cpu(mac_caps->ampdu_density);
506 
507 	fw_pdev = &ab->fw_pdev[ab->fw_pdev_count];
508 	fw_pdev->supported_bands = le32_to_cpu(mac_caps->supported_bands);
509 	fw_pdev->pdev_id = ath12k_wmi_mac_phy_get_pdev_id(mac_caps);
510 	fw_pdev->phy_id = le32_to_cpu(mac_caps->phy_id);
511 	ab->fw_pdev_count++;
512 
513 	/* Take non-zero tx/rx chainmask. If tx/rx chainmask differs from
514 	 * band to band for a single radio, need to see how this should be
515 	 * handled.
516 	 */
517 	if (le32_to_cpu(mac_caps->supported_bands) & WMI_HOST_WLAN_2G_CAP) {
518 		pdev_cap->tx_chain_mask = le32_to_cpu(mac_caps->tx_chain_mask_2g);
519 		pdev_cap->rx_chain_mask = le32_to_cpu(mac_caps->rx_chain_mask_2g);
520 	} else if (le32_to_cpu(mac_caps->supported_bands) & WMI_HOST_WLAN_5G_CAP) {
521 		pdev_cap->vht_cap = le32_to_cpu(mac_caps->vht_cap_info_5g);
522 		pdev_cap->vht_mcs = le32_to_cpu(mac_caps->vht_supp_mcs_5g);
523 		pdev_cap->he_mcs = le32_to_cpu(mac_caps->he_supp_mcs_5g);
524 		pdev_cap->tx_chain_mask = le32_to_cpu(mac_caps->tx_chain_mask_5g);
525 		pdev_cap->rx_chain_mask = le32_to_cpu(mac_caps->rx_chain_mask_5g);
526 	} else {
527 		return -EINVAL;
528 	}
529 
530 	/* tx/rx chainmask reported from fw depends on the actual hw chains used,
531 	 * For example, for 4x4 capable macphys, first 4 chains can be used for first
532 	 * mac and the remaining 4 chains can be used for the second mac or vice-versa.
533 	 * In this case, tx/rx chainmask 0xf will be advertised for first mac and 0xf0
534 	 * will be advertised for second mac or vice-versa. Compute the shift value
535 	 * for tx/rx chainmask which will be used to advertise supported ht/vht rates to
536 	 * mac80211.
537 	 */
538 	pdev_cap->tx_chain_mask_shift =
539 			find_first_bit((unsigned long *)&pdev_cap->tx_chain_mask, 32);
540 	pdev_cap->rx_chain_mask_shift =
541 			find_first_bit((unsigned long *)&pdev_cap->rx_chain_mask, 32);
542 
543 	if (le32_to_cpu(mac_caps->supported_bands) & WMI_HOST_WLAN_2G_CAP) {
544 		cap_band = &pdev_cap->band[NL80211_BAND_2GHZ];
545 		cap_band->phy_id = le32_to_cpu(mac_caps->phy_id);
546 		cap_band->max_bw_supported = le32_to_cpu(mac_caps->max_bw_supported_2g);
547 		cap_band->ht_cap_info = le32_to_cpu(mac_caps->ht_cap_info_2g);
548 		cap_band->he_cap_info[0] = le32_to_cpu(mac_caps->he_cap_info_2g);
549 		cap_band->he_cap_info[1] = le32_to_cpu(mac_caps->he_cap_info_2g_ext);
550 		cap_band->he_mcs = le32_to_cpu(mac_caps->he_supp_mcs_2g);
551 		for (i = 0; i < WMI_MAX_HECAP_PHY_SIZE; i++)
552 			cap_band->he_cap_phy_info[i] =
553 				le32_to_cpu(mac_caps->he_cap_phy_info_2g[i]);
554 
555 		cap_band->he_ppet.numss_m1 = le32_to_cpu(mac_caps->he_ppet2g.numss_m1);
556 		cap_band->he_ppet.ru_bit_mask = le32_to_cpu(mac_caps->he_ppet2g.ru_info);
557 
558 		for (i = 0; i < WMI_MAX_NUM_SS; i++)
559 			cap_band->he_ppet.ppet16_ppet8_ru3_ru0[i] =
560 				le32_to_cpu(mac_caps->he_ppet2g.ppet16_ppet8_ru3_ru0[i]);
561 	}
562 
563 	if (le32_to_cpu(mac_caps->supported_bands) & WMI_HOST_WLAN_5G_CAP) {
564 		cap_band = &pdev_cap->band[NL80211_BAND_5GHZ];
565 		cap_band->phy_id = le32_to_cpu(mac_caps->phy_id);
566 		cap_band->max_bw_supported =
567 			le32_to_cpu(mac_caps->max_bw_supported_5g);
568 		cap_band->ht_cap_info = le32_to_cpu(mac_caps->ht_cap_info_5g);
569 		cap_band->he_cap_info[0] = le32_to_cpu(mac_caps->he_cap_info_5g);
570 		cap_band->he_cap_info[1] = le32_to_cpu(mac_caps->he_cap_info_5g_ext);
571 		cap_band->he_mcs = le32_to_cpu(mac_caps->he_supp_mcs_5g);
572 		for (i = 0; i < WMI_MAX_HECAP_PHY_SIZE; i++)
573 			cap_band->he_cap_phy_info[i] =
574 				le32_to_cpu(mac_caps->he_cap_phy_info_5g[i]);
575 
576 		cap_band->he_ppet.numss_m1 = le32_to_cpu(mac_caps->he_ppet5g.numss_m1);
577 		cap_band->he_ppet.ru_bit_mask = le32_to_cpu(mac_caps->he_ppet5g.ru_info);
578 
579 		for (i = 0; i < WMI_MAX_NUM_SS; i++)
580 			cap_band->he_ppet.ppet16_ppet8_ru3_ru0[i] =
581 				le32_to_cpu(mac_caps->he_ppet5g.ppet16_ppet8_ru3_ru0[i]);
582 
583 		cap_band = &pdev_cap->band[NL80211_BAND_6GHZ];
584 		cap_band->max_bw_supported =
585 			le32_to_cpu(mac_caps->max_bw_supported_5g);
586 		cap_band->ht_cap_info = le32_to_cpu(mac_caps->ht_cap_info_5g);
587 		cap_band->he_cap_info[0] = le32_to_cpu(mac_caps->he_cap_info_5g);
588 		cap_band->he_cap_info[1] = le32_to_cpu(mac_caps->he_cap_info_5g_ext);
589 		cap_band->he_mcs = le32_to_cpu(mac_caps->he_supp_mcs_5g);
590 		for (i = 0; i < WMI_MAX_HECAP_PHY_SIZE; i++)
591 			cap_band->he_cap_phy_info[i] =
592 				le32_to_cpu(mac_caps->he_cap_phy_info_5g[i]);
593 
594 		cap_band->he_ppet.numss_m1 = le32_to_cpu(mac_caps->he_ppet5g.numss_m1);
595 		cap_band->he_ppet.ru_bit_mask = le32_to_cpu(mac_caps->he_ppet5g.ru_info);
596 
597 		for (i = 0; i < WMI_MAX_NUM_SS; i++)
598 			cap_band->he_ppet.ppet16_ppet8_ru3_ru0[i] =
599 				le32_to_cpu(mac_caps->he_ppet5g.ppet16_ppet8_ru3_ru0[i]);
600 	}
601 
602 	return 0;
603 }
604 
605 static int
606 ath12k_pull_reg_cap_svc_rdy_ext(struct ath12k_wmi_pdev *wmi_handle,
607 				const struct ath12k_wmi_soc_hal_reg_caps_params *reg_caps,
608 				const struct ath12k_wmi_hal_reg_caps_ext_params *ext_caps,
609 				u8 phy_idx,
610 				struct ath12k_wmi_hal_reg_capabilities_ext_arg *param)
611 {
612 	const struct ath12k_wmi_hal_reg_caps_ext_params *ext_reg_cap;
613 
614 	if (!reg_caps || !ext_caps)
615 		return -EINVAL;
616 
617 	if (phy_idx >= le32_to_cpu(reg_caps->num_phy))
618 		return -EINVAL;
619 
620 	ext_reg_cap = &ext_caps[phy_idx];
621 
622 	param->phy_id = le32_to_cpu(ext_reg_cap->phy_id);
623 	param->eeprom_reg_domain = le32_to_cpu(ext_reg_cap->eeprom_reg_domain);
624 	param->eeprom_reg_domain_ext =
625 		le32_to_cpu(ext_reg_cap->eeprom_reg_domain_ext);
626 	param->regcap1 = le32_to_cpu(ext_reg_cap->regcap1);
627 	param->regcap2 = le32_to_cpu(ext_reg_cap->regcap2);
628 	/* check if param->wireless_mode is needed */
629 	param->low_2ghz_chan = le32_to_cpu(ext_reg_cap->low_2ghz_chan);
630 	param->high_2ghz_chan = le32_to_cpu(ext_reg_cap->high_2ghz_chan);
631 	param->low_5ghz_chan = le32_to_cpu(ext_reg_cap->low_5ghz_chan);
632 	param->high_5ghz_chan = le32_to_cpu(ext_reg_cap->high_5ghz_chan);
633 
634 	return 0;
635 }
636 
637 static int ath12k_pull_service_ready_tlv(struct ath12k_base *ab,
638 					 const void *evt_buf,
639 					 struct ath12k_wmi_target_cap_arg *cap)
640 {
641 	const struct wmi_service_ready_event *ev = evt_buf;
642 
643 	if (!ev) {
644 		ath12k_err(ab, "%s: failed by NULL param\n",
645 			   __func__);
646 		return -EINVAL;
647 	}
648 
649 	cap->phy_capability = le32_to_cpu(ev->phy_capability);
650 	cap->max_frag_entry = le32_to_cpu(ev->max_frag_entry);
651 	cap->num_rf_chains = le32_to_cpu(ev->num_rf_chains);
652 	cap->ht_cap_info = le32_to_cpu(ev->ht_cap_info);
653 	cap->vht_cap_info = le32_to_cpu(ev->vht_cap_info);
654 	cap->vht_supp_mcs = le32_to_cpu(ev->vht_supp_mcs);
655 	cap->hw_min_tx_power = le32_to_cpu(ev->hw_min_tx_power);
656 	cap->hw_max_tx_power = le32_to_cpu(ev->hw_max_tx_power);
657 	cap->sys_cap_info = le32_to_cpu(ev->sys_cap_info);
658 	cap->min_pkt_size_enable = le32_to_cpu(ev->min_pkt_size_enable);
659 	cap->max_bcn_ie_size = le32_to_cpu(ev->max_bcn_ie_size);
660 	cap->max_num_scan_channels = le32_to_cpu(ev->max_num_scan_channels);
661 	cap->max_supported_macs = le32_to_cpu(ev->max_supported_macs);
662 	cap->wmi_fw_sub_feat_caps = le32_to_cpu(ev->wmi_fw_sub_feat_caps);
663 	cap->txrx_chainmask = le32_to_cpu(ev->txrx_chainmask);
664 	cap->default_dbs_hw_mode_index = le32_to_cpu(ev->default_dbs_hw_mode_index);
665 	cap->num_msdu_desc = le32_to_cpu(ev->num_msdu_desc);
666 
667 	return 0;
668 }
669 
670 /* Save the wmi_service_bitmap into a linear bitmap. The wmi_services in
671  * wmi_service ready event are advertised in b0-b3 (LSB 4-bits) of each
672  * 4-byte word.
673  */
674 static void ath12k_wmi_service_bitmap_copy(struct ath12k_wmi_pdev *wmi,
675 					   const u32 *wmi_svc_bm)
676 {
677 	int i, j;
678 
679 	for (i = 0, j = 0; i < WMI_SERVICE_BM_SIZE && j < WMI_MAX_SERVICE; i++) {
680 		do {
681 			if (wmi_svc_bm[i] & BIT(j % WMI_SERVICE_BITS_IN_SIZE32))
682 				set_bit(j, wmi->wmi_ab->svc_map);
683 		} while (++j % WMI_SERVICE_BITS_IN_SIZE32);
684 	}
685 }
686 
687 static int ath12k_wmi_svc_rdy_parse(struct ath12k_base *ab, u16 tag, u16 len,
688 				    const void *ptr, void *data)
689 {
690 	struct ath12k_wmi_svc_ready_parse *svc_ready = data;
691 	struct ath12k_wmi_pdev *wmi_handle = &ab->wmi_ab.wmi[0];
692 	u16 expect_len;
693 
694 	switch (tag) {
695 	case WMI_TAG_SERVICE_READY_EVENT:
696 		if (ath12k_pull_service_ready_tlv(ab, ptr, &ab->target_caps))
697 			return -EINVAL;
698 		break;
699 
700 	case WMI_TAG_ARRAY_UINT32:
701 		if (!svc_ready->wmi_svc_bitmap_done) {
702 			expect_len = WMI_SERVICE_BM_SIZE * sizeof(u32);
703 			if (len < expect_len) {
704 				ath12k_warn(ab, "invalid len %d for the tag 0x%x\n",
705 					    len, tag);
706 				return -EINVAL;
707 			}
708 
709 			ath12k_wmi_service_bitmap_copy(wmi_handle, ptr);
710 
711 			svc_ready->wmi_svc_bitmap_done = true;
712 		}
713 		break;
714 	default:
715 		break;
716 	}
717 
718 	return 0;
719 }
720 
721 static int ath12k_service_ready_event(struct ath12k_base *ab, struct sk_buff *skb)
722 {
723 	struct ath12k_wmi_svc_ready_parse svc_ready = { };
724 	int ret;
725 
726 	ret = ath12k_wmi_tlv_iter(ab, skb->data, skb->len,
727 				  ath12k_wmi_svc_rdy_parse,
728 				  &svc_ready);
729 	if (ret) {
730 		ath12k_warn(ab, "failed to parse tlv %d\n", ret);
731 		return ret;
732 	}
733 
734 	return 0;
735 }
736 
737 static u32 ath12k_wmi_mgmt_get_freq(struct ath12k *ar,
738 				    struct ieee80211_tx_info *info)
739 {
740 	struct ath12k_base *ab = ar->ab;
741 	u32 freq = 0;
742 
743 	if (ab->hw_params->single_pdev_only &&
744 	    ar->scan.is_roc &&
745 	    (info->flags & IEEE80211_TX_CTL_TX_OFFCHAN))
746 		freq = ar->scan.roc_freq;
747 
748 	return freq;
749 }
750 
751 struct sk_buff *ath12k_wmi_alloc_skb(struct ath12k_wmi_base *wmi_ab, u32 len)
752 {
753 	struct sk_buff *skb;
754 	struct ath12k_base *ab = wmi_ab->ab;
755 	u32 round_len = roundup(len, 4);
756 
757 	skb = ath12k_htc_alloc_skb(ab, WMI_SKB_HEADROOM + round_len);
758 	if (!skb)
759 		return NULL;
760 
761 	skb_reserve(skb, WMI_SKB_HEADROOM);
762 	if (!IS_ALIGNED((unsigned long)skb->data, 4))
763 		ath12k_warn(ab, "unaligned WMI skb data\n");
764 
765 	skb_put(skb, round_len);
766 	memset(skb->data, 0, round_len);
767 
768 	return skb;
769 }
770 
771 int ath12k_wmi_mgmt_send(struct ath12k *ar, u32 vdev_id, u32 buf_id,
772 			 struct sk_buff *frame)
773 {
774 	struct ath12k_wmi_pdev *wmi = ar->wmi;
775 	struct wmi_mgmt_send_cmd *cmd;
776 	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(frame);
777 	struct wmi_tlv *frame_tlv;
778 	struct sk_buff *skb;
779 	u32 buf_len;
780 	int ret, len;
781 
782 	buf_len = min_t(int, frame->len, WMI_MGMT_SEND_DOWNLD_LEN);
783 
784 	len = sizeof(*cmd) + sizeof(*frame_tlv) + roundup(buf_len, 4);
785 
786 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
787 	if (!skb)
788 		return -ENOMEM;
789 
790 	cmd = (struct wmi_mgmt_send_cmd *)skb->data;
791 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_MGMT_TX_SEND_CMD,
792 						 sizeof(*cmd));
793 	cmd->vdev_id = cpu_to_le32(vdev_id);
794 	cmd->desc_id = cpu_to_le32(buf_id);
795 	cmd->chanfreq = cpu_to_le32(ath12k_wmi_mgmt_get_freq(ar, info));
796 	cmd->paddr_lo = cpu_to_le32(lower_32_bits(ATH12K_SKB_CB(frame)->paddr));
797 	cmd->paddr_hi = cpu_to_le32(upper_32_bits(ATH12K_SKB_CB(frame)->paddr));
798 	cmd->frame_len = cpu_to_le32(frame->len);
799 	cmd->buf_len = cpu_to_le32(buf_len);
800 	cmd->tx_params_valid = 0;
801 
802 	frame_tlv = (struct wmi_tlv *)(skb->data + sizeof(*cmd));
803 	frame_tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_BYTE, buf_len);
804 
805 	memcpy(frame_tlv->value, frame->data, buf_len);
806 
807 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_MGMT_TX_SEND_CMDID);
808 	if (ret) {
809 		ath12k_warn(ar->ab,
810 			    "failed to submit WMI_MGMT_TX_SEND_CMDID cmd\n");
811 		dev_kfree_skb(skb);
812 	}
813 
814 	return ret;
815 }
816 
817 int ath12k_wmi_vdev_create(struct ath12k *ar, u8 *macaddr,
818 			   struct ath12k_wmi_vdev_create_arg *args)
819 {
820 	struct ath12k_wmi_pdev *wmi = ar->wmi;
821 	struct wmi_vdev_create_cmd *cmd;
822 	struct sk_buff *skb;
823 	struct ath12k_wmi_vdev_txrx_streams_params *txrx_streams;
824 	bool is_ml_vdev = is_valid_ether_addr(args->mld_addr);
825 	struct wmi_vdev_create_mlo_params *ml_params;
826 	struct wmi_tlv *tlv;
827 	int ret, len;
828 	void *ptr;
829 
830 	/* It can be optimized my sending tx/rx chain configuration
831 	 * only for supported bands instead of always sending it for
832 	 * both the bands.
833 	 */
834 	len = sizeof(*cmd) + TLV_HDR_SIZE +
835 		(WMI_NUM_SUPPORTED_BAND_MAX * sizeof(*txrx_streams)) +
836 		(is_ml_vdev ? TLV_HDR_SIZE + sizeof(*ml_params) : 0);
837 
838 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
839 	if (!skb)
840 		return -ENOMEM;
841 
842 	cmd = (struct wmi_vdev_create_cmd *)skb->data;
843 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_CREATE_CMD,
844 						 sizeof(*cmd));
845 
846 	cmd->vdev_id = cpu_to_le32(args->if_id);
847 	cmd->vdev_type = cpu_to_le32(args->type);
848 	cmd->vdev_subtype = cpu_to_le32(args->subtype);
849 	cmd->num_cfg_txrx_streams = cpu_to_le32(WMI_NUM_SUPPORTED_BAND_MAX);
850 	cmd->pdev_id = cpu_to_le32(args->pdev_id);
851 	cmd->mbssid_flags = cpu_to_le32(args->mbssid_flags);
852 	cmd->mbssid_tx_vdev_id = cpu_to_le32(args->mbssid_tx_vdev_id);
853 	cmd->vdev_stats_id = cpu_to_le32(args->if_stats_id);
854 	ether_addr_copy(cmd->vdev_macaddr.addr, macaddr);
855 
856 	if (args->if_stats_id != ATH12K_INVAL_VDEV_STATS_ID)
857 		cmd->vdev_stats_id_valid = cpu_to_le32(BIT(0));
858 
859 	ptr = skb->data + sizeof(*cmd);
860 	len = WMI_NUM_SUPPORTED_BAND_MAX * sizeof(*txrx_streams);
861 
862 	tlv = ptr;
863 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT, len);
864 
865 	ptr += TLV_HDR_SIZE;
866 	txrx_streams = ptr;
867 	len = sizeof(*txrx_streams);
868 	txrx_streams->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_TXRX_STREAMS,
869 							  len);
870 	txrx_streams->band = cpu_to_le32(WMI_TPC_CHAINMASK_CONFIG_BAND_2G);
871 	txrx_streams->supported_tx_streams =
872 				cpu_to_le32(args->chains[NL80211_BAND_2GHZ].tx);
873 	txrx_streams->supported_rx_streams =
874 				cpu_to_le32(args->chains[NL80211_BAND_2GHZ].rx);
875 
876 	txrx_streams++;
877 	txrx_streams->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_TXRX_STREAMS,
878 							  len);
879 	txrx_streams->band = cpu_to_le32(WMI_TPC_CHAINMASK_CONFIG_BAND_5G);
880 	txrx_streams->supported_tx_streams =
881 				cpu_to_le32(args->chains[NL80211_BAND_5GHZ].tx);
882 	txrx_streams->supported_rx_streams =
883 				cpu_to_le32(args->chains[NL80211_BAND_5GHZ].rx);
884 
885 	ptr += WMI_NUM_SUPPORTED_BAND_MAX * sizeof(*txrx_streams);
886 
887 	if (is_ml_vdev) {
888 		tlv = ptr;
889 		tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT,
890 						 sizeof(*ml_params));
891 		ptr += TLV_HDR_SIZE;
892 		ml_params = ptr;
893 
894 		ml_params->tlv_header =
895 			ath12k_wmi_tlv_cmd_hdr(WMI_TAG_MLO_VDEV_CREATE_PARAMS,
896 					       sizeof(*ml_params));
897 		ether_addr_copy(ml_params->mld_macaddr.addr, args->mld_addr);
898 	}
899 
900 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
901 		   "WMI vdev create: id %d type %d subtype %d macaddr %pM pdevid %d\n",
902 		   args->if_id, args->type, args->subtype,
903 		   macaddr, args->pdev_id);
904 
905 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_VDEV_CREATE_CMDID);
906 	if (ret) {
907 		ath12k_warn(ar->ab,
908 			    "failed to submit WMI_VDEV_CREATE_CMDID\n");
909 		dev_kfree_skb(skb);
910 	}
911 
912 	return ret;
913 }
914 
915 int ath12k_wmi_vdev_delete(struct ath12k *ar, u8 vdev_id)
916 {
917 	struct ath12k_wmi_pdev *wmi = ar->wmi;
918 	struct wmi_vdev_delete_cmd *cmd;
919 	struct sk_buff *skb;
920 	int ret;
921 
922 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
923 	if (!skb)
924 		return -ENOMEM;
925 
926 	cmd = (struct wmi_vdev_delete_cmd *)skb->data;
927 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_DELETE_CMD,
928 						 sizeof(*cmd));
929 	cmd->vdev_id = cpu_to_le32(vdev_id);
930 
931 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "WMI vdev delete id %d\n", vdev_id);
932 
933 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_VDEV_DELETE_CMDID);
934 	if (ret) {
935 		ath12k_warn(ar->ab, "failed to submit WMI_VDEV_DELETE_CMDID\n");
936 		dev_kfree_skb(skb);
937 	}
938 
939 	return ret;
940 }
941 
942 int ath12k_wmi_vdev_stop(struct ath12k *ar, u8 vdev_id)
943 {
944 	struct ath12k_wmi_pdev *wmi = ar->wmi;
945 	struct wmi_vdev_stop_cmd *cmd;
946 	struct sk_buff *skb;
947 	int ret;
948 
949 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
950 	if (!skb)
951 		return -ENOMEM;
952 
953 	cmd = (struct wmi_vdev_stop_cmd *)skb->data;
954 
955 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_STOP_CMD,
956 						 sizeof(*cmd));
957 	cmd->vdev_id = cpu_to_le32(vdev_id);
958 
959 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "WMI vdev stop id 0x%x\n", vdev_id);
960 
961 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_VDEV_STOP_CMDID);
962 	if (ret) {
963 		ath12k_warn(ar->ab, "failed to submit WMI_VDEV_STOP cmd\n");
964 		dev_kfree_skb(skb);
965 	}
966 
967 	return ret;
968 }
969 
970 int ath12k_wmi_vdev_down(struct ath12k *ar, u8 vdev_id)
971 {
972 	struct ath12k_wmi_pdev *wmi = ar->wmi;
973 	struct wmi_vdev_down_cmd *cmd;
974 	struct sk_buff *skb;
975 	int ret;
976 
977 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
978 	if (!skb)
979 		return -ENOMEM;
980 
981 	cmd = (struct wmi_vdev_down_cmd *)skb->data;
982 
983 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_DOWN_CMD,
984 						 sizeof(*cmd));
985 	cmd->vdev_id = cpu_to_le32(vdev_id);
986 
987 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "WMI vdev down id 0x%x\n", vdev_id);
988 
989 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_VDEV_DOWN_CMDID);
990 	if (ret) {
991 		ath12k_warn(ar->ab, "failed to submit WMI_VDEV_DOWN cmd\n");
992 		dev_kfree_skb(skb);
993 	}
994 
995 	return ret;
996 }
997 
998 static void ath12k_wmi_put_wmi_channel(struct ath12k_wmi_channel_params *chan,
999 				       struct wmi_vdev_start_req_arg *arg)
1000 {
1001 	memset(chan, 0, sizeof(*chan));
1002 
1003 	chan->mhz = cpu_to_le32(arg->freq);
1004 	chan->band_center_freq1 = cpu_to_le32(arg->band_center_freq1);
1005 	if (arg->mode == MODE_11AC_VHT80_80)
1006 		chan->band_center_freq2 = cpu_to_le32(arg->band_center_freq2);
1007 	else
1008 		chan->band_center_freq2 = 0;
1009 
1010 	chan->info |= le32_encode_bits(arg->mode, WMI_CHAN_INFO_MODE);
1011 	if (arg->passive)
1012 		chan->info |= cpu_to_le32(WMI_CHAN_INFO_PASSIVE);
1013 	if (arg->allow_ibss)
1014 		chan->info |= cpu_to_le32(WMI_CHAN_INFO_ADHOC_ALLOWED);
1015 	if (arg->allow_ht)
1016 		chan->info |= cpu_to_le32(WMI_CHAN_INFO_ALLOW_HT);
1017 	if (arg->allow_vht)
1018 		chan->info |= cpu_to_le32(WMI_CHAN_INFO_ALLOW_VHT);
1019 	if (arg->allow_he)
1020 		chan->info |= cpu_to_le32(WMI_CHAN_INFO_ALLOW_HE);
1021 	if (arg->ht40plus)
1022 		chan->info |= cpu_to_le32(WMI_CHAN_INFO_HT40_PLUS);
1023 	if (arg->chan_radar)
1024 		chan->info |= cpu_to_le32(WMI_CHAN_INFO_DFS);
1025 	if (arg->freq2_radar)
1026 		chan->info |= cpu_to_le32(WMI_CHAN_INFO_DFS_FREQ2);
1027 
1028 	chan->reg_info_1 = le32_encode_bits(arg->max_power,
1029 					    WMI_CHAN_REG_INFO1_MAX_PWR) |
1030 		le32_encode_bits(arg->max_reg_power,
1031 				 WMI_CHAN_REG_INFO1_MAX_REG_PWR);
1032 
1033 	chan->reg_info_2 = le32_encode_bits(arg->max_antenna_gain,
1034 					    WMI_CHAN_REG_INFO2_ANT_MAX) |
1035 		le32_encode_bits(arg->max_power, WMI_CHAN_REG_INFO2_MAX_TX_PWR);
1036 }
1037 
1038 int ath12k_wmi_vdev_start(struct ath12k *ar, struct wmi_vdev_start_req_arg *arg,
1039 			  bool restart)
1040 {
1041 	struct wmi_vdev_start_mlo_params *ml_params;
1042 	struct wmi_partner_link_info *partner_info;
1043 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1044 	struct wmi_vdev_start_request_cmd *cmd;
1045 	struct sk_buff *skb;
1046 	struct ath12k_wmi_channel_params *chan;
1047 	struct wmi_tlv *tlv;
1048 	void *ptr;
1049 	int ret, len, i, ml_arg_size = 0;
1050 
1051 	if (WARN_ON(arg->ssid_len > sizeof(cmd->ssid.ssid)))
1052 		return -EINVAL;
1053 
1054 	len = sizeof(*cmd) + sizeof(*chan) + TLV_HDR_SIZE;
1055 
1056 	if (!restart && arg->ml.enabled) {
1057 		ml_arg_size = TLV_HDR_SIZE + sizeof(*ml_params) +
1058 			      TLV_HDR_SIZE + (arg->ml.num_partner_links *
1059 					      sizeof(*partner_info));
1060 		len += ml_arg_size;
1061 	}
1062 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
1063 	if (!skb)
1064 		return -ENOMEM;
1065 
1066 	cmd = (struct wmi_vdev_start_request_cmd *)skb->data;
1067 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_START_REQUEST_CMD,
1068 						 sizeof(*cmd));
1069 	cmd->vdev_id = cpu_to_le32(arg->vdev_id);
1070 	cmd->beacon_interval = cpu_to_le32(arg->bcn_intval);
1071 	cmd->bcn_tx_rate = cpu_to_le32(arg->bcn_tx_rate);
1072 	cmd->dtim_period = cpu_to_le32(arg->dtim_period);
1073 	cmd->num_noa_descriptors = cpu_to_le32(arg->num_noa_descriptors);
1074 	cmd->preferred_rx_streams = cpu_to_le32(arg->pref_rx_streams);
1075 	cmd->preferred_tx_streams = cpu_to_le32(arg->pref_tx_streams);
1076 	cmd->cac_duration_ms = cpu_to_le32(arg->cac_duration_ms);
1077 	cmd->regdomain = cpu_to_le32(arg->regdomain);
1078 	cmd->he_ops = cpu_to_le32(arg->he_ops);
1079 	cmd->punct_bitmap = cpu_to_le32(arg->punct_bitmap);
1080 	cmd->mbssid_flags = cpu_to_le32(arg->mbssid_flags);
1081 	cmd->mbssid_tx_vdev_id = cpu_to_le32(arg->mbssid_tx_vdev_id);
1082 
1083 	if (!restart) {
1084 		if (arg->ssid) {
1085 			cmd->ssid.ssid_len = cpu_to_le32(arg->ssid_len);
1086 			memcpy(cmd->ssid.ssid, arg->ssid, arg->ssid_len);
1087 		}
1088 		if (arg->hidden_ssid)
1089 			cmd->flags |= cpu_to_le32(WMI_VDEV_START_HIDDEN_SSID);
1090 		if (arg->pmf_enabled)
1091 			cmd->flags |= cpu_to_le32(WMI_VDEV_START_PMF_ENABLED);
1092 	}
1093 
1094 	cmd->flags |= cpu_to_le32(WMI_VDEV_START_LDPC_RX_ENABLED);
1095 
1096 	ptr = skb->data + sizeof(*cmd);
1097 	chan = ptr;
1098 
1099 	ath12k_wmi_put_wmi_channel(chan, arg);
1100 
1101 	chan->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_CHANNEL,
1102 						  sizeof(*chan));
1103 	ptr += sizeof(*chan);
1104 
1105 	tlv = ptr;
1106 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT, 0);
1107 
1108 	/* Note: This is a nested TLV containing:
1109 	 * [wmi_tlv][ath12k_wmi_p2p_noa_descriptor][wmi_tlv]..
1110 	 */
1111 
1112 	ptr += sizeof(*tlv);
1113 
1114 	if (ml_arg_size) {
1115 		tlv = ptr;
1116 		tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT,
1117 						 sizeof(*ml_params));
1118 		ptr += TLV_HDR_SIZE;
1119 
1120 		ml_params = ptr;
1121 
1122 		ml_params->tlv_header =
1123 			ath12k_wmi_tlv_cmd_hdr(WMI_TAG_MLO_VDEV_START_PARAMS,
1124 					       sizeof(*ml_params));
1125 
1126 		ml_params->flags = le32_encode_bits(arg->ml.enabled,
1127 						    ATH12K_WMI_FLAG_MLO_ENABLED) |
1128 				   le32_encode_bits(arg->ml.assoc_link,
1129 						    ATH12K_WMI_FLAG_MLO_ASSOC_LINK) |
1130 				   le32_encode_bits(arg->ml.mcast_link,
1131 						    ATH12K_WMI_FLAG_MLO_MCAST_VDEV) |
1132 				   le32_encode_bits(arg->ml.link_add,
1133 						    ATH12K_WMI_FLAG_MLO_LINK_ADD);
1134 
1135 		ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "vdev %d start ml flags 0x%x\n",
1136 			   arg->vdev_id, ml_params->flags);
1137 
1138 		ptr += sizeof(*ml_params);
1139 
1140 		tlv = ptr;
1141 		tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT,
1142 						 arg->ml.num_partner_links *
1143 						 sizeof(*partner_info));
1144 		ptr += TLV_HDR_SIZE;
1145 
1146 		partner_info = ptr;
1147 
1148 		for (i = 0; i < arg->ml.num_partner_links; i++) {
1149 			partner_info->tlv_header =
1150 				ath12k_wmi_tlv_cmd_hdr(WMI_TAG_MLO_PARTNER_LINK_PARAMS,
1151 						       sizeof(*partner_info));
1152 			partner_info->vdev_id =
1153 				cpu_to_le32(arg->ml.partner_info[i].vdev_id);
1154 			partner_info->hw_link_id =
1155 				cpu_to_le32(arg->ml.partner_info[i].hw_link_id);
1156 			ether_addr_copy(partner_info->vdev_addr.addr,
1157 					arg->ml.partner_info[i].addr);
1158 
1159 			ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "partner vdev %d hw_link_id %d macaddr%pM\n",
1160 				   partner_info->vdev_id, partner_info->hw_link_id,
1161 				   partner_info->vdev_addr.addr);
1162 
1163 			partner_info++;
1164 		}
1165 
1166 		ptr = partner_info;
1167 	}
1168 
1169 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "vdev %s id 0x%x freq 0x%x mode 0x%x\n",
1170 		   restart ? "restart" : "start", arg->vdev_id,
1171 		   arg->freq, arg->mode);
1172 
1173 	if (restart)
1174 		ret = ath12k_wmi_cmd_send(wmi, skb,
1175 					  WMI_VDEV_RESTART_REQUEST_CMDID);
1176 	else
1177 		ret = ath12k_wmi_cmd_send(wmi, skb,
1178 					  WMI_VDEV_START_REQUEST_CMDID);
1179 	if (ret) {
1180 		ath12k_warn(ar->ab, "failed to submit vdev_%s cmd\n",
1181 			    restart ? "restart" : "start");
1182 		dev_kfree_skb(skb);
1183 	}
1184 
1185 	return ret;
1186 }
1187 
1188 int ath12k_wmi_vdev_up(struct ath12k *ar, struct ath12k_wmi_vdev_up_params *params)
1189 {
1190 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1191 	struct wmi_vdev_up_cmd *cmd;
1192 	struct sk_buff *skb;
1193 	int ret;
1194 
1195 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1196 	if (!skb)
1197 		return -ENOMEM;
1198 
1199 	cmd = (struct wmi_vdev_up_cmd *)skb->data;
1200 
1201 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_UP_CMD,
1202 						 sizeof(*cmd));
1203 	cmd->vdev_id = cpu_to_le32(params->vdev_id);
1204 	cmd->vdev_assoc_id = cpu_to_le32(params->aid);
1205 
1206 	ether_addr_copy(cmd->vdev_bssid.addr, params->bssid);
1207 
1208 	if (params->tx_bssid) {
1209 		ether_addr_copy(cmd->tx_vdev_bssid.addr, params->tx_bssid);
1210 		cmd->nontx_profile_idx = cpu_to_le32(params->nontx_profile_idx);
1211 		cmd->nontx_profile_cnt = cpu_to_le32(params->nontx_profile_cnt);
1212 	}
1213 
1214 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1215 		   "WMI mgmt vdev up id 0x%x assoc id %d bssid %pM\n",
1216 		   params->vdev_id, params->aid, params->bssid);
1217 
1218 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_VDEV_UP_CMDID);
1219 	if (ret) {
1220 		ath12k_warn(ar->ab, "failed to submit WMI_VDEV_UP cmd\n");
1221 		dev_kfree_skb(skb);
1222 	}
1223 
1224 	return ret;
1225 }
1226 
1227 int ath12k_wmi_send_peer_create_cmd(struct ath12k *ar,
1228 				    struct ath12k_wmi_peer_create_arg *arg)
1229 {
1230 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1231 	struct wmi_peer_create_cmd *cmd;
1232 	struct sk_buff *skb;
1233 	int ret, len;
1234 	struct wmi_peer_create_mlo_params *ml_param;
1235 	void *ptr;
1236 	struct wmi_tlv *tlv;
1237 
1238 	len = sizeof(*cmd) + TLV_HDR_SIZE + sizeof(*ml_param);
1239 
1240 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
1241 	if (!skb)
1242 		return -ENOMEM;
1243 
1244 	cmd = (struct wmi_peer_create_cmd *)skb->data;
1245 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PEER_CREATE_CMD,
1246 						 sizeof(*cmd));
1247 
1248 	ether_addr_copy(cmd->peer_macaddr.addr, arg->peer_addr);
1249 	cmd->peer_type = cpu_to_le32(arg->peer_type);
1250 	cmd->vdev_id = cpu_to_le32(arg->vdev_id);
1251 
1252 	ptr = skb->data + sizeof(*cmd);
1253 	tlv = ptr;
1254 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT,
1255 					 sizeof(*ml_param));
1256 	ptr += TLV_HDR_SIZE;
1257 	ml_param = ptr;
1258 	ml_param->tlv_header =
1259 			ath12k_wmi_tlv_cmd_hdr(WMI_TAG_MLO_PEER_CREATE_PARAMS,
1260 					       sizeof(*ml_param));
1261 	if (arg->ml_enabled)
1262 		ml_param->flags = cpu_to_le32(ATH12K_WMI_FLAG_MLO_ENABLED);
1263 
1264 	ptr += sizeof(*ml_param);
1265 
1266 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1267 		   "WMI peer create vdev_id %d peer_addr %pM ml_flags 0x%x\n",
1268 		   arg->vdev_id, arg->peer_addr, ml_param->flags);
1269 
1270 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_PEER_CREATE_CMDID);
1271 	if (ret) {
1272 		ath12k_warn(ar->ab, "failed to submit WMI_PEER_CREATE cmd\n");
1273 		dev_kfree_skb(skb);
1274 	}
1275 
1276 	return ret;
1277 }
1278 
1279 int ath12k_wmi_send_peer_delete_cmd(struct ath12k *ar,
1280 				    const u8 *peer_addr, u8 vdev_id)
1281 {
1282 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1283 	struct wmi_peer_delete_cmd *cmd;
1284 	struct sk_buff *skb;
1285 	int ret;
1286 
1287 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1288 	if (!skb)
1289 		return -ENOMEM;
1290 
1291 	cmd = (struct wmi_peer_delete_cmd *)skb->data;
1292 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PEER_DELETE_CMD,
1293 						 sizeof(*cmd));
1294 
1295 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1296 	cmd->vdev_id = cpu_to_le32(vdev_id);
1297 
1298 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1299 		   "WMI peer delete vdev_id %d peer_addr %pM\n",
1300 		   vdev_id,  peer_addr);
1301 
1302 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_PEER_DELETE_CMDID);
1303 	if (ret) {
1304 		ath12k_warn(ar->ab, "failed to send WMI_PEER_DELETE cmd\n");
1305 		dev_kfree_skb(skb);
1306 	}
1307 
1308 	return ret;
1309 }
1310 
1311 int ath12k_wmi_send_pdev_set_regdomain(struct ath12k *ar,
1312 				       struct ath12k_wmi_pdev_set_regdomain_arg *arg)
1313 {
1314 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1315 	struct wmi_pdev_set_regdomain_cmd *cmd;
1316 	struct sk_buff *skb;
1317 	int ret;
1318 
1319 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1320 	if (!skb)
1321 		return -ENOMEM;
1322 
1323 	cmd = (struct wmi_pdev_set_regdomain_cmd *)skb->data;
1324 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PDEV_SET_REGDOMAIN_CMD,
1325 						 sizeof(*cmd));
1326 
1327 	cmd->reg_domain = cpu_to_le32(arg->current_rd_in_use);
1328 	cmd->reg_domain_2g = cpu_to_le32(arg->current_rd_2g);
1329 	cmd->reg_domain_5g = cpu_to_le32(arg->current_rd_5g);
1330 	cmd->conformance_test_limit_2g = cpu_to_le32(arg->ctl_2g);
1331 	cmd->conformance_test_limit_5g = cpu_to_le32(arg->ctl_5g);
1332 	cmd->dfs_domain = cpu_to_le32(arg->dfs_domain);
1333 	cmd->pdev_id = cpu_to_le32(arg->pdev_id);
1334 
1335 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1336 		   "WMI pdev regd rd %d rd2g %d rd5g %d domain %d pdev id %d\n",
1337 		   arg->current_rd_in_use, arg->current_rd_2g,
1338 		   arg->current_rd_5g, arg->dfs_domain, arg->pdev_id);
1339 
1340 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_REGDOMAIN_CMDID);
1341 	if (ret) {
1342 		ath12k_warn(ar->ab,
1343 			    "failed to send WMI_PDEV_SET_REGDOMAIN cmd\n");
1344 		dev_kfree_skb(skb);
1345 	}
1346 
1347 	return ret;
1348 }
1349 
1350 int ath12k_wmi_set_peer_param(struct ath12k *ar, const u8 *peer_addr,
1351 			      u32 vdev_id, u32 param_id, u32 param_val)
1352 {
1353 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1354 	struct wmi_peer_set_param_cmd *cmd;
1355 	struct sk_buff *skb;
1356 	int ret;
1357 
1358 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1359 	if (!skb)
1360 		return -ENOMEM;
1361 
1362 	cmd = (struct wmi_peer_set_param_cmd *)skb->data;
1363 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PEER_SET_PARAM_CMD,
1364 						 sizeof(*cmd));
1365 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1366 	cmd->vdev_id = cpu_to_le32(vdev_id);
1367 	cmd->param_id = cpu_to_le32(param_id);
1368 	cmd->param_value = cpu_to_le32(param_val);
1369 
1370 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1371 		   "WMI vdev %d peer 0x%pM set param %d value %d\n",
1372 		   vdev_id, peer_addr, param_id, param_val);
1373 
1374 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_PEER_SET_PARAM_CMDID);
1375 	if (ret) {
1376 		ath12k_warn(ar->ab, "failed to send WMI_PEER_SET_PARAM cmd\n");
1377 		dev_kfree_skb(skb);
1378 	}
1379 
1380 	return ret;
1381 }
1382 
1383 int ath12k_wmi_send_peer_flush_tids_cmd(struct ath12k *ar,
1384 					u8 peer_addr[ETH_ALEN],
1385 					u32 peer_tid_bitmap,
1386 					u8 vdev_id)
1387 {
1388 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1389 	struct wmi_peer_flush_tids_cmd *cmd;
1390 	struct sk_buff *skb;
1391 	int ret;
1392 
1393 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1394 	if (!skb)
1395 		return -ENOMEM;
1396 
1397 	cmd = (struct wmi_peer_flush_tids_cmd *)skb->data;
1398 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PEER_FLUSH_TIDS_CMD,
1399 						 sizeof(*cmd));
1400 
1401 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1402 	cmd->peer_tid_bitmap = cpu_to_le32(peer_tid_bitmap);
1403 	cmd->vdev_id = cpu_to_le32(vdev_id);
1404 
1405 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1406 		   "WMI peer flush vdev_id %d peer_addr %pM tids %08x\n",
1407 		   vdev_id, peer_addr, peer_tid_bitmap);
1408 
1409 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_PEER_FLUSH_TIDS_CMDID);
1410 	if (ret) {
1411 		ath12k_warn(ar->ab,
1412 			    "failed to send WMI_PEER_FLUSH_TIDS cmd\n");
1413 		dev_kfree_skb(skb);
1414 	}
1415 
1416 	return ret;
1417 }
1418 
1419 int ath12k_wmi_peer_rx_reorder_queue_setup(struct ath12k *ar,
1420 					   int vdev_id, const u8 *addr,
1421 					   dma_addr_t paddr, u8 tid,
1422 					   u8 ba_window_size_valid,
1423 					   u32 ba_window_size)
1424 {
1425 	struct wmi_peer_reorder_queue_setup_cmd *cmd;
1426 	struct sk_buff *skb;
1427 	int ret;
1428 
1429 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
1430 	if (!skb)
1431 		return -ENOMEM;
1432 
1433 	cmd = (struct wmi_peer_reorder_queue_setup_cmd *)skb->data;
1434 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_REORDER_QUEUE_SETUP_CMD,
1435 						 sizeof(*cmd));
1436 
1437 	ether_addr_copy(cmd->peer_macaddr.addr, addr);
1438 	cmd->vdev_id = cpu_to_le32(vdev_id);
1439 	cmd->tid = cpu_to_le32(tid);
1440 	cmd->queue_ptr_lo = cpu_to_le32(lower_32_bits(paddr));
1441 	cmd->queue_ptr_hi = cpu_to_le32(upper_32_bits(paddr));
1442 	cmd->queue_no = cpu_to_le32(tid);
1443 	cmd->ba_window_size_valid = cpu_to_le32(ba_window_size_valid);
1444 	cmd->ba_window_size = cpu_to_le32(ba_window_size);
1445 
1446 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1447 		   "wmi rx reorder queue setup addr %pM vdev_id %d tid %d\n",
1448 		   addr, vdev_id, tid);
1449 
1450 	ret = ath12k_wmi_cmd_send(ar->wmi, skb,
1451 				  WMI_PEER_REORDER_QUEUE_SETUP_CMDID);
1452 	if (ret) {
1453 		ath12k_warn(ar->ab,
1454 			    "failed to send WMI_PEER_REORDER_QUEUE_SETUP\n");
1455 		dev_kfree_skb(skb);
1456 	}
1457 
1458 	return ret;
1459 }
1460 
1461 int
1462 ath12k_wmi_rx_reord_queue_remove(struct ath12k *ar,
1463 				 struct ath12k_wmi_rx_reorder_queue_remove_arg *arg)
1464 {
1465 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1466 	struct wmi_peer_reorder_queue_remove_cmd *cmd;
1467 	struct sk_buff *skb;
1468 	int ret;
1469 
1470 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1471 	if (!skb)
1472 		return -ENOMEM;
1473 
1474 	cmd = (struct wmi_peer_reorder_queue_remove_cmd *)skb->data;
1475 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_REORDER_QUEUE_REMOVE_CMD,
1476 						 sizeof(*cmd));
1477 
1478 	ether_addr_copy(cmd->peer_macaddr.addr, arg->peer_macaddr);
1479 	cmd->vdev_id = cpu_to_le32(arg->vdev_id);
1480 	cmd->tid_mask = cpu_to_le32(arg->peer_tid_bitmap);
1481 
1482 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1483 		   "%s: peer_macaddr %pM vdev_id %d, tid_map %d", __func__,
1484 		   arg->peer_macaddr, arg->vdev_id, arg->peer_tid_bitmap);
1485 
1486 	ret = ath12k_wmi_cmd_send(wmi, skb,
1487 				  WMI_PEER_REORDER_QUEUE_REMOVE_CMDID);
1488 	if (ret) {
1489 		ath12k_warn(ar->ab,
1490 			    "failed to send WMI_PEER_REORDER_QUEUE_REMOVE_CMDID");
1491 		dev_kfree_skb(skb);
1492 	}
1493 
1494 	return ret;
1495 }
1496 
1497 int ath12k_wmi_pdev_set_param(struct ath12k *ar, u32 param_id,
1498 			      u32 param_value, u8 pdev_id)
1499 {
1500 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1501 	struct wmi_pdev_set_param_cmd *cmd;
1502 	struct sk_buff *skb;
1503 	int ret;
1504 
1505 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1506 	if (!skb)
1507 		return -ENOMEM;
1508 
1509 	cmd = (struct wmi_pdev_set_param_cmd *)skb->data;
1510 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PDEV_SET_PARAM_CMD,
1511 						 sizeof(*cmd));
1512 	cmd->pdev_id = cpu_to_le32(pdev_id);
1513 	cmd->param_id = cpu_to_le32(param_id);
1514 	cmd->param_value = cpu_to_le32(param_value);
1515 
1516 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1517 		   "WMI pdev set param %d pdev id %d value %d\n",
1518 		   param_id, pdev_id, param_value);
1519 
1520 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_PDEV_SET_PARAM_CMDID);
1521 	if (ret) {
1522 		ath12k_warn(ar->ab, "failed to send WMI_PDEV_SET_PARAM cmd\n");
1523 		dev_kfree_skb(skb);
1524 	}
1525 
1526 	return ret;
1527 }
1528 
1529 int ath12k_wmi_pdev_set_ps_mode(struct ath12k *ar, int vdev_id, u32 enable)
1530 {
1531 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1532 	struct wmi_pdev_set_ps_mode_cmd *cmd;
1533 	struct sk_buff *skb;
1534 	int ret;
1535 
1536 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1537 	if (!skb)
1538 		return -ENOMEM;
1539 
1540 	cmd = (struct wmi_pdev_set_ps_mode_cmd *)skb->data;
1541 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_STA_POWERSAVE_MODE_CMD,
1542 						 sizeof(*cmd));
1543 	cmd->vdev_id = cpu_to_le32(vdev_id);
1544 	cmd->sta_ps_mode = cpu_to_le32(enable);
1545 
1546 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1547 		   "WMI vdev set psmode %d vdev id %d\n",
1548 		   enable, vdev_id);
1549 
1550 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_STA_POWERSAVE_MODE_CMDID);
1551 	if (ret) {
1552 		ath12k_warn(ar->ab, "failed to send WMI_PDEV_SET_PARAM cmd\n");
1553 		dev_kfree_skb(skb);
1554 	}
1555 
1556 	return ret;
1557 }
1558 
1559 int ath12k_wmi_pdev_suspend(struct ath12k *ar, u32 suspend_opt,
1560 			    u32 pdev_id)
1561 {
1562 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1563 	struct wmi_pdev_suspend_cmd *cmd;
1564 	struct sk_buff *skb;
1565 	int ret;
1566 
1567 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1568 	if (!skb)
1569 		return -ENOMEM;
1570 
1571 	cmd = (struct wmi_pdev_suspend_cmd *)skb->data;
1572 
1573 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PDEV_SUSPEND_CMD,
1574 						 sizeof(*cmd));
1575 
1576 	cmd->suspend_opt = cpu_to_le32(suspend_opt);
1577 	cmd->pdev_id = cpu_to_le32(pdev_id);
1578 
1579 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1580 		   "WMI pdev suspend pdev_id %d\n", pdev_id);
1581 
1582 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_PDEV_SUSPEND_CMDID);
1583 	if (ret) {
1584 		ath12k_warn(ar->ab, "failed to send WMI_PDEV_SUSPEND cmd\n");
1585 		dev_kfree_skb(skb);
1586 	}
1587 
1588 	return ret;
1589 }
1590 
1591 int ath12k_wmi_pdev_resume(struct ath12k *ar, u32 pdev_id)
1592 {
1593 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1594 	struct wmi_pdev_resume_cmd *cmd;
1595 	struct sk_buff *skb;
1596 	int ret;
1597 
1598 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1599 	if (!skb)
1600 		return -ENOMEM;
1601 
1602 	cmd = (struct wmi_pdev_resume_cmd *)skb->data;
1603 
1604 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PDEV_RESUME_CMD,
1605 						 sizeof(*cmd));
1606 	cmd->pdev_id = cpu_to_le32(pdev_id);
1607 
1608 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1609 		   "WMI pdev resume pdev id %d\n", pdev_id);
1610 
1611 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_PDEV_RESUME_CMDID);
1612 	if (ret) {
1613 		ath12k_warn(ar->ab, "failed to send WMI_PDEV_RESUME cmd\n");
1614 		dev_kfree_skb(skb);
1615 	}
1616 
1617 	return ret;
1618 }
1619 
1620 /* TODO FW Support for the cmd is not available yet.
1621  * Can be tested once the command and corresponding
1622  * event is implemented in FW
1623  */
1624 int ath12k_wmi_pdev_bss_chan_info_request(struct ath12k *ar,
1625 					  enum wmi_bss_chan_info_req_type type)
1626 {
1627 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1628 	struct wmi_pdev_bss_chan_info_req_cmd *cmd;
1629 	struct sk_buff *skb;
1630 	int ret;
1631 
1632 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1633 	if (!skb)
1634 		return -ENOMEM;
1635 
1636 	cmd = (struct wmi_pdev_bss_chan_info_req_cmd *)skb->data;
1637 
1638 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PDEV_BSS_CHAN_INFO_REQUEST,
1639 						 sizeof(*cmd));
1640 	cmd->req_type = cpu_to_le32(type);
1641 	cmd->pdev_id = cpu_to_le32(ar->pdev->pdev_id);
1642 
1643 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1644 		   "WMI bss chan info req type %d\n", type);
1645 
1646 	ret = ath12k_wmi_cmd_send(wmi, skb,
1647 				  WMI_PDEV_BSS_CHAN_INFO_REQUEST_CMDID);
1648 	if (ret) {
1649 		ath12k_warn(ar->ab,
1650 			    "failed to send WMI_PDEV_BSS_CHAN_INFO_REQUEST cmd\n");
1651 		dev_kfree_skb(skb);
1652 	}
1653 
1654 	return ret;
1655 }
1656 
1657 int ath12k_wmi_send_set_ap_ps_param_cmd(struct ath12k *ar, u8 *peer_addr,
1658 					struct ath12k_wmi_ap_ps_arg *arg)
1659 {
1660 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1661 	struct wmi_ap_ps_peer_cmd *cmd;
1662 	struct sk_buff *skb;
1663 	int ret;
1664 
1665 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1666 	if (!skb)
1667 		return -ENOMEM;
1668 
1669 	cmd = (struct wmi_ap_ps_peer_cmd *)skb->data;
1670 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_AP_PS_PEER_CMD,
1671 						 sizeof(*cmd));
1672 
1673 	cmd->vdev_id = cpu_to_le32(arg->vdev_id);
1674 	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
1675 	cmd->param = cpu_to_le32(arg->param);
1676 	cmd->value = cpu_to_le32(arg->value);
1677 
1678 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1679 		   "WMI set ap ps vdev id %d peer %pM param %d value %d\n",
1680 		   arg->vdev_id, peer_addr, arg->param, arg->value);
1681 
1682 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_AP_PS_PEER_PARAM_CMDID);
1683 	if (ret) {
1684 		ath12k_warn(ar->ab,
1685 			    "failed to send WMI_AP_PS_PEER_PARAM_CMDID\n");
1686 		dev_kfree_skb(skb);
1687 	}
1688 
1689 	return ret;
1690 }
1691 
1692 int ath12k_wmi_set_sta_ps_param(struct ath12k *ar, u32 vdev_id,
1693 				u32 param, u32 param_value)
1694 {
1695 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1696 	struct wmi_sta_powersave_param_cmd *cmd;
1697 	struct sk_buff *skb;
1698 	int ret;
1699 
1700 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1701 	if (!skb)
1702 		return -ENOMEM;
1703 
1704 	cmd = (struct wmi_sta_powersave_param_cmd *)skb->data;
1705 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_STA_POWERSAVE_PARAM_CMD,
1706 						 sizeof(*cmd));
1707 
1708 	cmd->vdev_id = cpu_to_le32(vdev_id);
1709 	cmd->param = cpu_to_le32(param);
1710 	cmd->value = cpu_to_le32(param_value);
1711 
1712 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1713 		   "WMI set sta ps vdev_id %d param %d value %d\n",
1714 		   vdev_id, param, param_value);
1715 
1716 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_STA_POWERSAVE_PARAM_CMDID);
1717 	if (ret) {
1718 		ath12k_warn(ar->ab, "failed to send WMI_STA_POWERSAVE_PARAM_CMDID");
1719 		dev_kfree_skb(skb);
1720 	}
1721 
1722 	return ret;
1723 }
1724 
1725 int ath12k_wmi_force_fw_hang_cmd(struct ath12k *ar, u32 type, u32 delay_time_ms)
1726 {
1727 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1728 	struct wmi_force_fw_hang_cmd *cmd;
1729 	struct sk_buff *skb;
1730 	int ret, len;
1731 
1732 	len = sizeof(*cmd);
1733 
1734 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
1735 	if (!skb)
1736 		return -ENOMEM;
1737 
1738 	cmd = (struct wmi_force_fw_hang_cmd *)skb->data;
1739 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_FORCE_FW_HANG_CMD,
1740 						 len);
1741 
1742 	cmd->type = cpu_to_le32(type);
1743 	cmd->delay_time_ms = cpu_to_le32(delay_time_ms);
1744 
1745 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_FORCE_FW_HANG_CMDID);
1746 
1747 	if (ret) {
1748 		ath12k_warn(ar->ab, "Failed to send WMI_FORCE_FW_HANG_CMDID");
1749 		dev_kfree_skb(skb);
1750 	}
1751 	return ret;
1752 }
1753 
1754 int ath12k_wmi_vdev_set_param_cmd(struct ath12k *ar, u32 vdev_id,
1755 				  u32 param_id, u32 param_value)
1756 {
1757 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1758 	struct wmi_vdev_set_param_cmd *cmd;
1759 	struct sk_buff *skb;
1760 	int ret;
1761 
1762 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1763 	if (!skb)
1764 		return -ENOMEM;
1765 
1766 	cmd = (struct wmi_vdev_set_param_cmd *)skb->data;
1767 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_SET_PARAM_CMD,
1768 						 sizeof(*cmd));
1769 
1770 	cmd->vdev_id = cpu_to_le32(vdev_id);
1771 	cmd->param_id = cpu_to_le32(param_id);
1772 	cmd->param_value = cpu_to_le32(param_value);
1773 
1774 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1775 		   "WMI vdev id 0x%x set param %d value %d\n",
1776 		   vdev_id, param_id, param_value);
1777 
1778 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_VDEV_SET_PARAM_CMDID);
1779 	if (ret) {
1780 		ath12k_warn(ar->ab,
1781 			    "failed to send WMI_VDEV_SET_PARAM_CMDID\n");
1782 		dev_kfree_skb(skb);
1783 	}
1784 
1785 	return ret;
1786 }
1787 
1788 int ath12k_wmi_send_pdev_temperature_cmd(struct ath12k *ar)
1789 {
1790 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1791 	struct wmi_get_pdev_temperature_cmd *cmd;
1792 	struct sk_buff *skb;
1793 	int ret;
1794 
1795 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1796 	if (!skb)
1797 		return -ENOMEM;
1798 
1799 	cmd = (struct wmi_get_pdev_temperature_cmd *)skb->data;
1800 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PDEV_GET_TEMPERATURE_CMD,
1801 						 sizeof(*cmd));
1802 	cmd->pdev_id = cpu_to_le32(ar->pdev->pdev_id);
1803 
1804 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1805 		   "WMI pdev get temperature for pdev_id %d\n", ar->pdev->pdev_id);
1806 
1807 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_PDEV_GET_TEMPERATURE_CMDID);
1808 	if (ret) {
1809 		ath12k_warn(ar->ab, "failed to send WMI_PDEV_GET_TEMPERATURE cmd\n");
1810 		dev_kfree_skb(skb);
1811 	}
1812 
1813 	return ret;
1814 }
1815 
1816 int ath12k_wmi_send_bcn_offload_control_cmd(struct ath12k *ar,
1817 					    u32 vdev_id, u32 bcn_ctrl_op)
1818 {
1819 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1820 	struct wmi_bcn_offload_ctrl_cmd *cmd;
1821 	struct sk_buff *skb;
1822 	int ret;
1823 
1824 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
1825 	if (!skb)
1826 		return -ENOMEM;
1827 
1828 	cmd = (struct wmi_bcn_offload_ctrl_cmd *)skb->data;
1829 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_BCN_OFFLOAD_CTRL_CMD,
1830 						 sizeof(*cmd));
1831 
1832 	cmd->vdev_id = cpu_to_le32(vdev_id);
1833 	cmd->bcn_ctrl_op = cpu_to_le32(bcn_ctrl_op);
1834 
1835 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1836 		   "WMI bcn ctrl offload vdev id %d ctrl_op %d\n",
1837 		   vdev_id, bcn_ctrl_op);
1838 
1839 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_BCN_OFFLOAD_CTRL_CMDID);
1840 	if (ret) {
1841 		ath12k_warn(ar->ab,
1842 			    "failed to send WMI_BCN_OFFLOAD_CTRL_CMDID\n");
1843 		dev_kfree_skb(skb);
1844 	}
1845 
1846 	return ret;
1847 }
1848 
1849 int ath12k_wmi_p2p_go_bcn_ie(struct ath12k *ar, u32 vdev_id,
1850 			     const u8 *p2p_ie)
1851 {
1852 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1853 	struct wmi_p2p_go_set_beacon_ie_cmd *cmd;
1854 	size_t p2p_ie_len, aligned_len;
1855 	struct wmi_tlv *tlv;
1856 	struct sk_buff *skb;
1857 	void *ptr;
1858 	int ret, len;
1859 
1860 	p2p_ie_len = p2p_ie[1] + 2;
1861 	aligned_len = roundup(p2p_ie_len, sizeof(u32));
1862 
1863 	len = sizeof(*cmd) + TLV_HDR_SIZE + aligned_len;
1864 
1865 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
1866 	if (!skb)
1867 		return -ENOMEM;
1868 
1869 	ptr = skb->data;
1870 	cmd = ptr;
1871 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_P2P_GO_SET_BEACON_IE,
1872 						 sizeof(*cmd));
1873 	cmd->vdev_id = cpu_to_le32(vdev_id);
1874 	cmd->ie_buf_len = cpu_to_le32(p2p_ie_len);
1875 
1876 	ptr += sizeof(*cmd);
1877 	tlv = ptr;
1878 	tlv->header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_ARRAY_BYTE,
1879 					     aligned_len);
1880 	memcpy(tlv->value, p2p_ie, p2p_ie_len);
1881 
1882 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_P2P_GO_SET_BEACON_IE);
1883 	if (ret) {
1884 		ath12k_warn(ar->ab, "failed to send WMI_P2P_GO_SET_BEACON_IE\n");
1885 		dev_kfree_skb(skb);
1886 	}
1887 
1888 	return ret;
1889 }
1890 
1891 int ath12k_wmi_bcn_tmpl(struct ath12k *ar, u32 vdev_id,
1892 			struct ieee80211_mutable_offsets *offs,
1893 			struct sk_buff *bcn,
1894 			struct ath12k_wmi_bcn_tmpl_ema_arg *ema_args)
1895 {
1896 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1897 	struct wmi_bcn_tmpl_cmd *cmd;
1898 	struct ath12k_wmi_bcn_prb_info_params *bcn_prb_info;
1899 	struct wmi_tlv *tlv;
1900 	struct sk_buff *skb;
1901 	u32 ema_params = 0;
1902 	void *ptr;
1903 	int ret, len;
1904 	size_t aligned_len = roundup(bcn->len, 4);
1905 
1906 	len = sizeof(*cmd) + sizeof(*bcn_prb_info) + TLV_HDR_SIZE + aligned_len;
1907 
1908 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
1909 	if (!skb)
1910 		return -ENOMEM;
1911 
1912 	cmd = (struct wmi_bcn_tmpl_cmd *)skb->data;
1913 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_BCN_TMPL_CMD,
1914 						 sizeof(*cmd));
1915 	cmd->vdev_id = cpu_to_le32(vdev_id);
1916 	cmd->tim_ie_offset = cpu_to_le32(offs->tim_offset);
1917 	cmd->csa_switch_count_offset = cpu_to_le32(offs->cntdwn_counter_offs[0]);
1918 	cmd->ext_csa_switch_count_offset = cpu_to_le32(offs->cntdwn_counter_offs[1]);
1919 	cmd->buf_len = cpu_to_le32(bcn->len);
1920 	cmd->mbssid_ie_offset = cpu_to_le32(offs->mbssid_off);
1921 	if (ema_args) {
1922 		u32p_replace_bits(&ema_params, ema_args->bcn_cnt, WMI_EMA_BEACON_CNT);
1923 		u32p_replace_bits(&ema_params, ema_args->bcn_index, WMI_EMA_BEACON_IDX);
1924 		if (ema_args->bcn_index == 0)
1925 			u32p_replace_bits(&ema_params, 1, WMI_EMA_BEACON_FIRST);
1926 		if (ema_args->bcn_index + 1 == ema_args->bcn_cnt)
1927 			u32p_replace_bits(&ema_params, 1, WMI_EMA_BEACON_LAST);
1928 		cmd->ema_params = cpu_to_le32(ema_params);
1929 	}
1930 
1931 	ptr = skb->data + sizeof(*cmd);
1932 
1933 	bcn_prb_info = ptr;
1934 	len = sizeof(*bcn_prb_info);
1935 	bcn_prb_info->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_BCN_PRB_INFO,
1936 							  len);
1937 	bcn_prb_info->caps = 0;
1938 	bcn_prb_info->erp = 0;
1939 
1940 	ptr += sizeof(*bcn_prb_info);
1941 
1942 	tlv = ptr;
1943 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_BYTE, aligned_len);
1944 	memcpy(tlv->value, bcn->data, bcn->len);
1945 
1946 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_BCN_TMPL_CMDID);
1947 	if (ret) {
1948 		ath12k_warn(ar->ab, "failed to send WMI_BCN_TMPL_CMDID\n");
1949 		dev_kfree_skb(skb);
1950 	}
1951 
1952 	return ret;
1953 }
1954 
1955 int ath12k_wmi_vdev_install_key(struct ath12k *ar,
1956 				struct wmi_vdev_install_key_arg *arg)
1957 {
1958 	struct ath12k_wmi_pdev *wmi = ar->wmi;
1959 	struct wmi_vdev_install_key_cmd *cmd;
1960 	struct wmi_tlv *tlv;
1961 	struct sk_buff *skb;
1962 	int ret, len, key_len_aligned;
1963 
1964 	/* WMI_TAG_ARRAY_BYTE needs to be aligned with 4, the actual key
1965 	 * length is specified in cmd->key_len.
1966 	 */
1967 	key_len_aligned = roundup(arg->key_len, 4);
1968 
1969 	len = sizeof(*cmd) + TLV_HDR_SIZE + key_len_aligned;
1970 
1971 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
1972 	if (!skb)
1973 		return -ENOMEM;
1974 
1975 	cmd = (struct wmi_vdev_install_key_cmd *)skb->data;
1976 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_INSTALL_KEY_CMD,
1977 						 sizeof(*cmd));
1978 	cmd->vdev_id = cpu_to_le32(arg->vdev_id);
1979 	ether_addr_copy(cmd->peer_macaddr.addr, arg->macaddr);
1980 	cmd->key_idx = cpu_to_le32(arg->key_idx);
1981 	cmd->key_flags = cpu_to_le32(arg->key_flags);
1982 	cmd->key_cipher = cpu_to_le32(arg->key_cipher);
1983 	cmd->key_len = cpu_to_le32(arg->key_len);
1984 	cmd->key_txmic_len = cpu_to_le32(arg->key_txmic_len);
1985 	cmd->key_rxmic_len = cpu_to_le32(arg->key_rxmic_len);
1986 
1987 	if (arg->key_rsc_counter)
1988 		cmd->key_rsc_counter = cpu_to_le64(arg->key_rsc_counter);
1989 
1990 	tlv = (struct wmi_tlv *)(skb->data + sizeof(*cmd));
1991 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_BYTE, key_len_aligned);
1992 	memcpy(tlv->value, arg->key_data, arg->key_len);
1993 
1994 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
1995 		   "WMI vdev install key idx %d cipher %d len %d\n",
1996 		   arg->key_idx, arg->key_cipher, arg->key_len);
1997 
1998 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_VDEV_INSTALL_KEY_CMDID);
1999 	if (ret) {
2000 		ath12k_warn(ar->ab,
2001 			    "failed to send WMI_VDEV_INSTALL_KEY cmd\n");
2002 		dev_kfree_skb(skb);
2003 	}
2004 
2005 	return ret;
2006 }
2007 
2008 static void ath12k_wmi_copy_peer_flags(struct wmi_peer_assoc_complete_cmd *cmd,
2009 				       struct ath12k_wmi_peer_assoc_arg *arg,
2010 				       bool hw_crypto_disabled)
2011 {
2012 	cmd->peer_flags = 0;
2013 	cmd->peer_flags_ext = 0;
2014 
2015 	if (arg->is_wme_set) {
2016 		if (arg->qos_flag)
2017 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_QOS);
2018 		if (arg->apsd_flag)
2019 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_APSD);
2020 		if (arg->ht_flag)
2021 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_HT);
2022 		if (arg->bw_40)
2023 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_40MHZ);
2024 		if (arg->bw_80)
2025 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_80MHZ);
2026 		if (arg->bw_160)
2027 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_160MHZ);
2028 		if (arg->bw_320)
2029 			cmd->peer_flags_ext |= cpu_to_le32(WMI_PEER_EXT_320MHZ);
2030 
2031 		/* Typically if STBC is enabled for VHT it should be enabled
2032 		 * for HT as well
2033 		 **/
2034 		if (arg->stbc_flag)
2035 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_STBC);
2036 
2037 		/* Typically if LDPC is enabled for VHT it should be enabled
2038 		 * for HT as well
2039 		 **/
2040 		if (arg->ldpc_flag)
2041 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_LDPC);
2042 
2043 		if (arg->static_mimops_flag)
2044 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_STATIC_MIMOPS);
2045 		if (arg->dynamic_mimops_flag)
2046 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_DYN_MIMOPS);
2047 		if (arg->spatial_mux_flag)
2048 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_SPATIAL_MUX);
2049 		if (arg->vht_flag)
2050 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_VHT);
2051 		if (arg->he_flag)
2052 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_HE);
2053 		if (arg->twt_requester)
2054 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_TWT_REQ);
2055 		if (arg->twt_responder)
2056 			cmd->peer_flags |= cpu_to_le32(WMI_PEER_TWT_RESP);
2057 		if (arg->eht_flag)
2058 			cmd->peer_flags_ext |= cpu_to_le32(WMI_PEER_EXT_EHT);
2059 	}
2060 
2061 	/* Suppress authorization for all AUTH modes that need 4-way handshake
2062 	 * (during re-association).
2063 	 * Authorization will be done for these modes on key installation.
2064 	 */
2065 	if (arg->auth_flag)
2066 		cmd->peer_flags |= cpu_to_le32(WMI_PEER_AUTH);
2067 	if (arg->need_ptk_4_way) {
2068 		cmd->peer_flags |= cpu_to_le32(WMI_PEER_NEED_PTK_4_WAY);
2069 		if (!hw_crypto_disabled)
2070 			cmd->peer_flags &= cpu_to_le32(~WMI_PEER_AUTH);
2071 	}
2072 	if (arg->need_gtk_2_way)
2073 		cmd->peer_flags |= cpu_to_le32(WMI_PEER_NEED_GTK_2_WAY);
2074 	/* safe mode bypass the 4-way handshake */
2075 	if (arg->safe_mode_enabled)
2076 		cmd->peer_flags &= cpu_to_le32(~(WMI_PEER_NEED_PTK_4_WAY |
2077 						 WMI_PEER_NEED_GTK_2_WAY));
2078 
2079 	if (arg->is_pmf_enabled)
2080 		cmd->peer_flags |= cpu_to_le32(WMI_PEER_PMF);
2081 
2082 	/* Disable AMSDU for station transmit, if user configures it */
2083 	/* Disable AMSDU for AP transmit to 11n Stations, if user configures
2084 	 * it
2085 	 * if (arg->amsdu_disable) Add after FW support
2086 	 **/
2087 
2088 	/* Target asserts if node is marked HT and all MCS is set to 0.
2089 	 * Mark the node as non-HT if all the mcs rates are disabled through
2090 	 * iwpriv
2091 	 **/
2092 	if (arg->peer_ht_rates.num_rates == 0)
2093 		cmd->peer_flags &= cpu_to_le32(~WMI_PEER_HT);
2094 }
2095 
2096 int ath12k_wmi_send_peer_assoc_cmd(struct ath12k *ar,
2097 				   struct ath12k_wmi_peer_assoc_arg *arg)
2098 {
2099 	struct ath12k_wmi_pdev *wmi = ar->wmi;
2100 	struct wmi_peer_assoc_complete_cmd *cmd;
2101 	struct ath12k_wmi_vht_rate_set_params *mcs;
2102 	struct ath12k_wmi_he_rate_set_params *he_mcs;
2103 	struct ath12k_wmi_eht_rate_set_params *eht_mcs;
2104 	struct wmi_peer_assoc_mlo_params *ml_params;
2105 	struct wmi_peer_assoc_mlo_partner_info_params *partner_info;
2106 	struct sk_buff *skb;
2107 	struct wmi_tlv *tlv;
2108 	void *ptr;
2109 	u32 peer_legacy_rates_align;
2110 	u32 peer_ht_rates_align;
2111 	int i, ret, len;
2112 	__le32 v;
2113 
2114 	peer_legacy_rates_align = roundup(arg->peer_legacy_rates.num_rates,
2115 					  sizeof(u32));
2116 	peer_ht_rates_align = roundup(arg->peer_ht_rates.num_rates,
2117 				      sizeof(u32));
2118 
2119 	len = sizeof(*cmd) +
2120 	      TLV_HDR_SIZE + (peer_legacy_rates_align * sizeof(u8)) +
2121 	      TLV_HDR_SIZE + (peer_ht_rates_align * sizeof(u8)) +
2122 	      sizeof(*mcs) + TLV_HDR_SIZE +
2123 	      (sizeof(*he_mcs) * arg->peer_he_mcs_count) +
2124 	      TLV_HDR_SIZE + (sizeof(*eht_mcs) * arg->peer_eht_mcs_count);
2125 
2126 	if (arg->ml.enabled)
2127 		len += TLV_HDR_SIZE + sizeof(*ml_params) +
2128 		       TLV_HDR_SIZE + (arg->ml.num_partner_links * sizeof(*partner_info));
2129 	else
2130 		len += (2 * TLV_HDR_SIZE);
2131 
2132 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
2133 	if (!skb)
2134 		return -ENOMEM;
2135 
2136 	ptr = skb->data;
2137 
2138 	cmd = ptr;
2139 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PEER_ASSOC_COMPLETE_CMD,
2140 						 sizeof(*cmd));
2141 
2142 	cmd->vdev_id = cpu_to_le32(arg->vdev_id);
2143 
2144 	cmd->peer_new_assoc = cpu_to_le32(arg->peer_new_assoc);
2145 	cmd->peer_associd = cpu_to_le32(arg->peer_associd);
2146 	cmd->punct_bitmap = cpu_to_le32(arg->punct_bitmap);
2147 
2148 	ath12k_wmi_copy_peer_flags(cmd, arg,
2149 				   test_bit(ATH12K_FLAG_HW_CRYPTO_DISABLED,
2150 					    &ar->ab->dev_flags));
2151 
2152 	ether_addr_copy(cmd->peer_macaddr.addr, arg->peer_mac);
2153 
2154 	cmd->peer_rate_caps = cpu_to_le32(arg->peer_rate_caps);
2155 	cmd->peer_caps = cpu_to_le32(arg->peer_caps);
2156 	cmd->peer_listen_intval = cpu_to_le32(arg->peer_listen_intval);
2157 	cmd->peer_ht_caps = cpu_to_le32(arg->peer_ht_caps);
2158 	cmd->peer_max_mpdu = cpu_to_le32(arg->peer_max_mpdu);
2159 	cmd->peer_mpdu_density = cpu_to_le32(arg->peer_mpdu_density);
2160 	cmd->peer_vht_caps = cpu_to_le32(arg->peer_vht_caps);
2161 	cmd->peer_phymode = cpu_to_le32(arg->peer_phymode);
2162 
2163 	/* Update 11ax capabilities */
2164 	cmd->peer_he_cap_info = cpu_to_le32(arg->peer_he_cap_macinfo[0]);
2165 	cmd->peer_he_cap_info_ext = cpu_to_le32(arg->peer_he_cap_macinfo[1]);
2166 	cmd->peer_he_cap_info_internal = cpu_to_le32(arg->peer_he_cap_macinfo_internal);
2167 	cmd->peer_he_caps_6ghz = cpu_to_le32(arg->peer_he_caps_6ghz);
2168 	cmd->peer_he_ops = cpu_to_le32(arg->peer_he_ops);
2169 	for (i = 0; i < WMI_MAX_HECAP_PHY_SIZE; i++)
2170 		cmd->peer_he_cap_phy[i] =
2171 			cpu_to_le32(arg->peer_he_cap_phyinfo[i]);
2172 	cmd->peer_ppet.numss_m1 = cpu_to_le32(arg->peer_ppet.numss_m1);
2173 	cmd->peer_ppet.ru_info = cpu_to_le32(arg->peer_ppet.ru_bit_mask);
2174 	for (i = 0; i < WMI_MAX_NUM_SS; i++)
2175 		cmd->peer_ppet.ppet16_ppet8_ru3_ru0[i] =
2176 			cpu_to_le32(arg->peer_ppet.ppet16_ppet8_ru3_ru0[i]);
2177 
2178 	/* Update 11be capabilities */
2179 	memcpy_and_pad(cmd->peer_eht_cap_mac, sizeof(cmd->peer_eht_cap_mac),
2180 		       arg->peer_eht_cap_mac, sizeof(arg->peer_eht_cap_mac),
2181 		       0);
2182 	memcpy_and_pad(cmd->peer_eht_cap_phy, sizeof(cmd->peer_eht_cap_phy),
2183 		       arg->peer_eht_cap_phy, sizeof(arg->peer_eht_cap_phy),
2184 		       0);
2185 	memcpy_and_pad(&cmd->peer_eht_ppet, sizeof(cmd->peer_eht_ppet),
2186 		       &arg->peer_eht_ppet, sizeof(arg->peer_eht_ppet), 0);
2187 
2188 	/* Update peer legacy rate information */
2189 	ptr += sizeof(*cmd);
2190 
2191 	tlv = ptr;
2192 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_BYTE, peer_legacy_rates_align);
2193 
2194 	ptr += TLV_HDR_SIZE;
2195 
2196 	cmd->num_peer_legacy_rates = cpu_to_le32(arg->peer_legacy_rates.num_rates);
2197 	memcpy(ptr, arg->peer_legacy_rates.rates,
2198 	       arg->peer_legacy_rates.num_rates);
2199 
2200 	/* Update peer HT rate information */
2201 	ptr += peer_legacy_rates_align;
2202 
2203 	tlv = ptr;
2204 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_BYTE, peer_ht_rates_align);
2205 	ptr += TLV_HDR_SIZE;
2206 	cmd->num_peer_ht_rates = cpu_to_le32(arg->peer_ht_rates.num_rates);
2207 	memcpy(ptr, arg->peer_ht_rates.rates,
2208 	       arg->peer_ht_rates.num_rates);
2209 
2210 	/* VHT Rates */
2211 	ptr += peer_ht_rates_align;
2212 
2213 	mcs = ptr;
2214 
2215 	mcs->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VHT_RATE_SET,
2216 						 sizeof(*mcs));
2217 
2218 	cmd->peer_nss = cpu_to_le32(arg->peer_nss);
2219 
2220 	/* Update bandwidth-NSS mapping */
2221 	cmd->peer_bw_rxnss_override = 0;
2222 	cmd->peer_bw_rxnss_override |= cpu_to_le32(arg->peer_bw_rxnss_override);
2223 
2224 	if (arg->vht_capable) {
2225 		mcs->rx_max_rate = cpu_to_le32(arg->rx_max_rate);
2226 		mcs->rx_mcs_set = cpu_to_le32(arg->rx_mcs_set);
2227 		mcs->tx_max_rate = cpu_to_le32(arg->tx_max_rate);
2228 		mcs->tx_mcs_set = cpu_to_le32(arg->tx_mcs_set);
2229 	}
2230 
2231 	/* HE Rates */
2232 	cmd->peer_he_mcs = cpu_to_le32(arg->peer_he_mcs_count);
2233 	cmd->min_data_rate = cpu_to_le32(arg->min_data_rate);
2234 
2235 	ptr += sizeof(*mcs);
2236 
2237 	len = arg->peer_he_mcs_count * sizeof(*he_mcs);
2238 
2239 	tlv = ptr;
2240 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT, len);
2241 	ptr += TLV_HDR_SIZE;
2242 
2243 	/* Loop through the HE rate set */
2244 	for (i = 0; i < arg->peer_he_mcs_count; i++) {
2245 		he_mcs = ptr;
2246 		he_mcs->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_HE_RATE_SET,
2247 							    sizeof(*he_mcs));
2248 
2249 		he_mcs->rx_mcs_set = cpu_to_le32(arg->peer_he_rx_mcs_set[i]);
2250 		he_mcs->tx_mcs_set = cpu_to_le32(arg->peer_he_tx_mcs_set[i]);
2251 		ptr += sizeof(*he_mcs);
2252 	}
2253 
2254 	tlv = ptr;
2255 	len = arg->ml.enabled ? sizeof(*ml_params) : 0;
2256 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT, len);
2257 	ptr += TLV_HDR_SIZE;
2258 	if (!len)
2259 		goto skip_ml_params;
2260 
2261 	ml_params = ptr;
2262 	ml_params->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_MLO_PEER_ASSOC_PARAMS,
2263 						       len);
2264 	ml_params->flags = cpu_to_le32(ATH12K_WMI_FLAG_MLO_ENABLED);
2265 
2266 	if (arg->ml.assoc_link)
2267 		ml_params->flags |= cpu_to_le32(ATH12K_WMI_FLAG_MLO_ASSOC_LINK);
2268 
2269 	if (arg->ml.primary_umac)
2270 		ml_params->flags |= cpu_to_le32(ATH12K_WMI_FLAG_MLO_PRIMARY_UMAC);
2271 
2272 	if (arg->ml.logical_link_idx_valid)
2273 		ml_params->flags |=
2274 			cpu_to_le32(ATH12K_WMI_FLAG_MLO_LOGICAL_LINK_IDX_VALID);
2275 
2276 	if (arg->ml.peer_id_valid)
2277 		ml_params->flags |= cpu_to_le32(ATH12K_WMI_FLAG_MLO_PEER_ID_VALID);
2278 
2279 	ether_addr_copy(ml_params->mld_addr.addr, arg->ml.mld_addr);
2280 	ml_params->logical_link_idx = cpu_to_le32(arg->ml.logical_link_idx);
2281 	ml_params->ml_peer_id = cpu_to_le32(arg->ml.ml_peer_id);
2282 	ml_params->ieee_link_id = cpu_to_le32(arg->ml.ieee_link_id);
2283 	ptr += sizeof(*ml_params);
2284 
2285 skip_ml_params:
2286 	/* Loop through the EHT rate set */
2287 	len = arg->peer_eht_mcs_count * sizeof(*eht_mcs);
2288 	tlv = ptr;
2289 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT, len);
2290 	ptr += TLV_HDR_SIZE;
2291 
2292 	for (i = 0; i < arg->peer_eht_mcs_count; i++) {
2293 		eht_mcs = ptr;
2294 		eht_mcs->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_HE_RATE_SET,
2295 							     sizeof(*eht_mcs));
2296 
2297 		eht_mcs->rx_mcs_set = cpu_to_le32(arg->peer_eht_rx_mcs_set[i]);
2298 		eht_mcs->tx_mcs_set = cpu_to_le32(arg->peer_eht_tx_mcs_set[i]);
2299 		ptr += sizeof(*eht_mcs);
2300 	}
2301 
2302 	tlv = ptr;
2303 	len = arg->ml.enabled ? arg->ml.num_partner_links * sizeof(*partner_info) : 0;
2304 	/* fill ML Partner links */
2305 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT, len);
2306 	ptr += TLV_HDR_SIZE;
2307 
2308 	if (len == 0)
2309 		goto send;
2310 
2311 	for (i = 0; i < arg->ml.num_partner_links; i++) {
2312 		u32 cmd = WMI_TAG_MLO_PARTNER_LINK_PARAMS_PEER_ASSOC;
2313 
2314 		partner_info = ptr;
2315 		partner_info->tlv_header = ath12k_wmi_tlv_cmd_hdr(cmd,
2316 								  sizeof(*partner_info));
2317 		partner_info->vdev_id = cpu_to_le32(arg->ml.partner_info[i].vdev_id);
2318 		partner_info->hw_link_id =
2319 			cpu_to_le32(arg->ml.partner_info[i].hw_link_id);
2320 		partner_info->flags = cpu_to_le32(ATH12K_WMI_FLAG_MLO_ENABLED);
2321 
2322 		if (arg->ml.partner_info[i].assoc_link)
2323 			partner_info->flags |=
2324 				cpu_to_le32(ATH12K_WMI_FLAG_MLO_ASSOC_LINK);
2325 
2326 		if (arg->ml.partner_info[i].primary_umac)
2327 			partner_info->flags |=
2328 				cpu_to_le32(ATH12K_WMI_FLAG_MLO_PRIMARY_UMAC);
2329 
2330 		if (arg->ml.partner_info[i].logical_link_idx_valid) {
2331 			v = cpu_to_le32(ATH12K_WMI_FLAG_MLO_LINK_ID_VALID);
2332 			partner_info->flags |= v;
2333 		}
2334 
2335 		partner_info->logical_link_idx =
2336 			cpu_to_le32(arg->ml.partner_info[i].logical_link_idx);
2337 		ptr += sizeof(*partner_info);
2338 	}
2339 
2340 send:
2341 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
2342 		   "wmi peer assoc vdev id %d assoc id %d peer mac %pM peer_flags %x rate_caps %x peer_caps %x listen_intval %d ht_caps %x max_mpdu %d nss %d phymode %d peer_mpdu_density %d vht_caps %x he cap_info %x he ops %x he cap_info_ext %x he phy %x %x %x peer_bw_rxnss_override %x peer_flags_ext %x eht mac_cap %x %x eht phy_cap %x %x %x\n",
2343 		   cmd->vdev_id, cmd->peer_associd, arg->peer_mac,
2344 		   cmd->peer_flags, cmd->peer_rate_caps, cmd->peer_caps,
2345 		   cmd->peer_listen_intval, cmd->peer_ht_caps,
2346 		   cmd->peer_max_mpdu, cmd->peer_nss, cmd->peer_phymode,
2347 		   cmd->peer_mpdu_density,
2348 		   cmd->peer_vht_caps, cmd->peer_he_cap_info,
2349 		   cmd->peer_he_ops, cmd->peer_he_cap_info_ext,
2350 		   cmd->peer_he_cap_phy[0], cmd->peer_he_cap_phy[1],
2351 		   cmd->peer_he_cap_phy[2],
2352 		   cmd->peer_bw_rxnss_override, cmd->peer_flags_ext,
2353 		   cmd->peer_eht_cap_mac[0], cmd->peer_eht_cap_mac[1],
2354 		   cmd->peer_eht_cap_phy[0], cmd->peer_eht_cap_phy[1],
2355 		   cmd->peer_eht_cap_phy[2]);
2356 
2357 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_PEER_ASSOC_CMDID);
2358 	if (ret) {
2359 		ath12k_warn(ar->ab,
2360 			    "failed to send WMI_PEER_ASSOC_CMDID\n");
2361 		dev_kfree_skb(skb);
2362 	}
2363 
2364 	return ret;
2365 }
2366 
2367 void ath12k_wmi_start_scan_init(struct ath12k *ar,
2368 				struct ath12k_wmi_scan_req_arg *arg)
2369 {
2370 	/* setup commonly used values */
2371 	arg->scan_req_id = 1;
2372 	arg->scan_priority = WMI_SCAN_PRIORITY_LOW;
2373 	arg->dwell_time_active = 50;
2374 	arg->dwell_time_active_2g = 0;
2375 	arg->dwell_time_passive = 150;
2376 	arg->dwell_time_active_6g = 40;
2377 	arg->dwell_time_passive_6g = 30;
2378 	arg->min_rest_time = 50;
2379 	arg->max_rest_time = 500;
2380 	arg->repeat_probe_time = 0;
2381 	arg->probe_spacing_time = 0;
2382 	arg->idle_time = 0;
2383 	arg->max_scan_time = 20000;
2384 	arg->probe_delay = 5;
2385 	arg->notify_scan_events = WMI_SCAN_EVENT_STARTED |
2386 				  WMI_SCAN_EVENT_COMPLETED |
2387 				  WMI_SCAN_EVENT_BSS_CHANNEL |
2388 				  WMI_SCAN_EVENT_FOREIGN_CHAN |
2389 				  WMI_SCAN_EVENT_DEQUEUED;
2390 	arg->scan_f_chan_stat_evnt = 1;
2391 	arg->num_bssid = 1;
2392 
2393 	/* fill bssid_list[0] with 0xff, otherwise bssid and RA will be
2394 	 * ZEROs in probe request
2395 	 */
2396 	eth_broadcast_addr(arg->bssid_list[0].addr);
2397 }
2398 
2399 static void ath12k_wmi_copy_scan_event_cntrl_flags(struct wmi_start_scan_cmd *cmd,
2400 						   struct ath12k_wmi_scan_req_arg *arg)
2401 {
2402 	/* Scan events subscription */
2403 	if (arg->scan_ev_started)
2404 		cmd->notify_scan_events |= cpu_to_le32(WMI_SCAN_EVENT_STARTED);
2405 	if (arg->scan_ev_completed)
2406 		cmd->notify_scan_events |= cpu_to_le32(WMI_SCAN_EVENT_COMPLETED);
2407 	if (arg->scan_ev_bss_chan)
2408 		cmd->notify_scan_events |= cpu_to_le32(WMI_SCAN_EVENT_BSS_CHANNEL);
2409 	if (arg->scan_ev_foreign_chan)
2410 		cmd->notify_scan_events |= cpu_to_le32(WMI_SCAN_EVENT_FOREIGN_CHAN);
2411 	if (arg->scan_ev_dequeued)
2412 		cmd->notify_scan_events |= cpu_to_le32(WMI_SCAN_EVENT_DEQUEUED);
2413 	if (arg->scan_ev_preempted)
2414 		cmd->notify_scan_events |= cpu_to_le32(WMI_SCAN_EVENT_PREEMPTED);
2415 	if (arg->scan_ev_start_failed)
2416 		cmd->notify_scan_events |= cpu_to_le32(WMI_SCAN_EVENT_START_FAILED);
2417 	if (arg->scan_ev_restarted)
2418 		cmd->notify_scan_events |= cpu_to_le32(WMI_SCAN_EVENT_RESTARTED);
2419 	if (arg->scan_ev_foreign_chn_exit)
2420 		cmd->notify_scan_events |= cpu_to_le32(WMI_SCAN_EVENT_FOREIGN_CHAN_EXIT);
2421 	if (arg->scan_ev_suspended)
2422 		cmd->notify_scan_events |= cpu_to_le32(WMI_SCAN_EVENT_SUSPENDED);
2423 	if (arg->scan_ev_resumed)
2424 		cmd->notify_scan_events |= cpu_to_le32(WMI_SCAN_EVENT_RESUMED);
2425 
2426 	/** Set scan control flags */
2427 	cmd->scan_ctrl_flags = 0;
2428 	if (arg->scan_f_passive)
2429 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_FLAG_PASSIVE);
2430 	if (arg->scan_f_strict_passive_pch)
2431 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_FLAG_STRICT_PASSIVE_ON_PCHN);
2432 	if (arg->scan_f_promisc_mode)
2433 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_FILTER_PROMISCUOS);
2434 	if (arg->scan_f_capture_phy_err)
2435 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_CAPTURE_PHY_ERROR);
2436 	if (arg->scan_f_half_rate)
2437 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_FLAG_HALF_RATE_SUPPORT);
2438 	if (arg->scan_f_quarter_rate)
2439 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_FLAG_QUARTER_RATE_SUPPORT);
2440 	if (arg->scan_f_cck_rates)
2441 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_ADD_CCK_RATES);
2442 	if (arg->scan_f_ofdm_rates)
2443 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_ADD_OFDM_RATES);
2444 	if (arg->scan_f_chan_stat_evnt)
2445 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_CHAN_STAT_EVENT);
2446 	if (arg->scan_f_filter_prb_req)
2447 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_FILTER_PROBE_REQ);
2448 	if (arg->scan_f_bcast_probe)
2449 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_ADD_BCAST_PROBE_REQ);
2450 	if (arg->scan_f_offchan_mgmt_tx)
2451 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_OFFCHAN_MGMT_TX);
2452 	if (arg->scan_f_offchan_data_tx)
2453 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_OFFCHAN_DATA_TX);
2454 	if (arg->scan_f_force_active_dfs_chn)
2455 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_FLAG_FORCE_ACTIVE_ON_DFS);
2456 	if (arg->scan_f_add_tpc_ie_in_probe)
2457 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_ADD_TPC_IE_IN_PROBE_REQ);
2458 	if (arg->scan_f_add_ds_ie_in_probe)
2459 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_ADD_DS_IE_IN_PROBE_REQ);
2460 	if (arg->scan_f_add_spoofed_mac_in_probe)
2461 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_ADD_SPOOF_MAC_IN_PROBE_REQ);
2462 	if (arg->scan_f_add_rand_seq_in_probe)
2463 		cmd->scan_ctrl_flags |= cpu_to_le32(WMI_SCAN_RANDOM_SEQ_NO_IN_PROBE_REQ);
2464 	if (arg->scan_f_en_ie_whitelist_in_probe)
2465 		cmd->scan_ctrl_flags |=
2466 			cpu_to_le32(WMI_SCAN_ENABLE_IE_WHTELIST_IN_PROBE_REQ);
2467 
2468 	cmd->scan_ctrl_flags |= le32_encode_bits(arg->adaptive_dwell_time_mode,
2469 						 WMI_SCAN_DWELL_MODE_MASK);
2470 }
2471 
2472 int ath12k_wmi_send_scan_start_cmd(struct ath12k *ar,
2473 				   struct ath12k_wmi_scan_req_arg *arg)
2474 {
2475 	struct ath12k_wmi_pdev *wmi = ar->wmi;
2476 	struct wmi_start_scan_cmd *cmd;
2477 	struct ath12k_wmi_ssid_params *ssid = NULL;
2478 	struct ath12k_wmi_mac_addr_params *bssid;
2479 	struct sk_buff *skb;
2480 	struct wmi_tlv *tlv;
2481 	void *ptr;
2482 	int i, ret, len;
2483 	u32 *tmp_ptr, extraie_len_with_pad = 0;
2484 	struct ath12k_wmi_hint_short_ssid_arg *s_ssid = NULL;
2485 	struct ath12k_wmi_hint_bssid_arg *hint_bssid = NULL;
2486 
2487 	len = sizeof(*cmd);
2488 
2489 	len += TLV_HDR_SIZE;
2490 	if (arg->num_chan)
2491 		len += arg->num_chan * sizeof(u32);
2492 
2493 	len += TLV_HDR_SIZE;
2494 	if (arg->num_ssids)
2495 		len += arg->num_ssids * sizeof(*ssid);
2496 
2497 	len += TLV_HDR_SIZE;
2498 	if (arg->num_bssid)
2499 		len += sizeof(*bssid) * arg->num_bssid;
2500 
2501 	if (arg->num_hint_bssid)
2502 		len += TLV_HDR_SIZE +
2503 		       arg->num_hint_bssid * sizeof(*hint_bssid);
2504 
2505 	if (arg->num_hint_s_ssid)
2506 		len += TLV_HDR_SIZE +
2507 		       arg->num_hint_s_ssid * sizeof(*s_ssid);
2508 
2509 	len += TLV_HDR_SIZE;
2510 	if (arg->extraie.len)
2511 		extraie_len_with_pad =
2512 			roundup(arg->extraie.len, sizeof(u32));
2513 	if (extraie_len_with_pad <= (wmi->wmi_ab->max_msg_len[ar->pdev_idx] - len)) {
2514 		len += extraie_len_with_pad;
2515 	} else {
2516 		ath12k_warn(ar->ab, "discard large size %d bytes extraie for scan start\n",
2517 			    arg->extraie.len);
2518 		extraie_len_with_pad = 0;
2519 	}
2520 
2521 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
2522 	if (!skb)
2523 		return -ENOMEM;
2524 
2525 	ptr = skb->data;
2526 
2527 	cmd = ptr;
2528 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_START_SCAN_CMD,
2529 						 sizeof(*cmd));
2530 
2531 	cmd->scan_id = cpu_to_le32(arg->scan_id);
2532 	cmd->scan_req_id = cpu_to_le32(arg->scan_req_id);
2533 	cmd->vdev_id = cpu_to_le32(arg->vdev_id);
2534 	cmd->scan_priority = cpu_to_le32(arg->scan_priority);
2535 	cmd->notify_scan_events = cpu_to_le32(arg->notify_scan_events);
2536 
2537 	ath12k_wmi_copy_scan_event_cntrl_flags(cmd, arg);
2538 
2539 	cmd->dwell_time_active = cpu_to_le32(arg->dwell_time_active);
2540 	cmd->dwell_time_active_2g = cpu_to_le32(arg->dwell_time_active_2g);
2541 	cmd->dwell_time_passive = cpu_to_le32(arg->dwell_time_passive);
2542 	cmd->dwell_time_active_6g = cpu_to_le32(arg->dwell_time_active_6g);
2543 	cmd->dwell_time_passive_6g = cpu_to_le32(arg->dwell_time_passive_6g);
2544 	cmd->min_rest_time = cpu_to_le32(arg->min_rest_time);
2545 	cmd->max_rest_time = cpu_to_le32(arg->max_rest_time);
2546 	cmd->repeat_probe_time = cpu_to_le32(arg->repeat_probe_time);
2547 	cmd->probe_spacing_time = cpu_to_le32(arg->probe_spacing_time);
2548 	cmd->idle_time = cpu_to_le32(arg->idle_time);
2549 	cmd->max_scan_time = cpu_to_le32(arg->max_scan_time);
2550 	cmd->probe_delay = cpu_to_le32(arg->probe_delay);
2551 	cmd->burst_duration = cpu_to_le32(arg->burst_duration);
2552 	cmd->num_chan = cpu_to_le32(arg->num_chan);
2553 	cmd->num_bssid = cpu_to_le32(arg->num_bssid);
2554 	cmd->num_ssids = cpu_to_le32(arg->num_ssids);
2555 	cmd->ie_len = cpu_to_le32(arg->extraie.len);
2556 	cmd->n_probes = cpu_to_le32(arg->n_probes);
2557 
2558 	ptr += sizeof(*cmd);
2559 
2560 	len = arg->num_chan * sizeof(u32);
2561 
2562 	tlv = ptr;
2563 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_UINT32, len);
2564 	ptr += TLV_HDR_SIZE;
2565 	tmp_ptr = (u32 *)ptr;
2566 
2567 	memcpy(tmp_ptr, arg->chan_list, arg->num_chan * 4);
2568 
2569 	ptr += len;
2570 
2571 	len = arg->num_ssids * sizeof(*ssid);
2572 	tlv = ptr;
2573 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_FIXED_STRUCT, len);
2574 
2575 	ptr += TLV_HDR_SIZE;
2576 
2577 	if (arg->num_ssids) {
2578 		ssid = ptr;
2579 		for (i = 0; i < arg->num_ssids; ++i) {
2580 			ssid->ssid_len = cpu_to_le32(arg->ssid[i].ssid_len);
2581 			memcpy(ssid->ssid, arg->ssid[i].ssid,
2582 			       arg->ssid[i].ssid_len);
2583 			ssid++;
2584 		}
2585 	}
2586 
2587 	ptr += (arg->num_ssids * sizeof(*ssid));
2588 	len = arg->num_bssid * sizeof(*bssid);
2589 	tlv = ptr;
2590 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_FIXED_STRUCT, len);
2591 
2592 	ptr += TLV_HDR_SIZE;
2593 	bssid = ptr;
2594 
2595 	if (arg->num_bssid) {
2596 		for (i = 0; i < arg->num_bssid; ++i) {
2597 			ether_addr_copy(bssid->addr,
2598 					arg->bssid_list[i].addr);
2599 			bssid++;
2600 		}
2601 	}
2602 
2603 	ptr += arg->num_bssid * sizeof(*bssid);
2604 
2605 	len = extraie_len_with_pad;
2606 	tlv = ptr;
2607 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_BYTE, len);
2608 	ptr += TLV_HDR_SIZE;
2609 
2610 	if (extraie_len_with_pad)
2611 		memcpy(ptr, arg->extraie.ptr,
2612 		       arg->extraie.len);
2613 
2614 	ptr += extraie_len_with_pad;
2615 
2616 	if (arg->num_hint_s_ssid) {
2617 		len = arg->num_hint_s_ssid * sizeof(*s_ssid);
2618 		tlv = ptr;
2619 		tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_FIXED_STRUCT, len);
2620 		ptr += TLV_HDR_SIZE;
2621 		s_ssid = ptr;
2622 		for (i = 0; i < arg->num_hint_s_ssid; ++i) {
2623 			s_ssid->freq_flags = arg->hint_s_ssid[i].freq_flags;
2624 			s_ssid->short_ssid = arg->hint_s_ssid[i].short_ssid;
2625 			s_ssid++;
2626 		}
2627 		ptr += len;
2628 	}
2629 
2630 	if (arg->num_hint_bssid) {
2631 		len = arg->num_hint_bssid * sizeof(struct ath12k_wmi_hint_bssid_arg);
2632 		tlv = ptr;
2633 		tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_FIXED_STRUCT, len);
2634 		ptr += TLV_HDR_SIZE;
2635 		hint_bssid = ptr;
2636 		for (i = 0; i < arg->num_hint_bssid; ++i) {
2637 			hint_bssid->freq_flags =
2638 				arg->hint_bssid[i].freq_flags;
2639 			ether_addr_copy(&arg->hint_bssid[i].bssid.addr[0],
2640 					&hint_bssid->bssid.addr[0]);
2641 			hint_bssid++;
2642 		}
2643 	}
2644 
2645 	ret = ath12k_wmi_cmd_send(wmi, skb,
2646 				  WMI_START_SCAN_CMDID);
2647 	if (ret) {
2648 		ath12k_warn(ar->ab, "failed to send WMI_START_SCAN_CMDID\n");
2649 		dev_kfree_skb(skb);
2650 	}
2651 
2652 	return ret;
2653 }
2654 
2655 int ath12k_wmi_send_scan_stop_cmd(struct ath12k *ar,
2656 				  struct ath12k_wmi_scan_cancel_arg *arg)
2657 {
2658 	struct ath12k_wmi_pdev *wmi = ar->wmi;
2659 	struct wmi_stop_scan_cmd *cmd;
2660 	struct sk_buff *skb;
2661 	int ret;
2662 
2663 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2664 	if (!skb)
2665 		return -ENOMEM;
2666 
2667 	cmd = (struct wmi_stop_scan_cmd *)skb->data;
2668 
2669 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_STOP_SCAN_CMD,
2670 						 sizeof(*cmd));
2671 
2672 	cmd->vdev_id = cpu_to_le32(arg->vdev_id);
2673 	cmd->requestor = cpu_to_le32(arg->requester);
2674 	cmd->scan_id = cpu_to_le32(arg->scan_id);
2675 	cmd->pdev_id = cpu_to_le32(arg->pdev_id);
2676 	/* stop the scan with the corresponding scan_id */
2677 	if (arg->req_type == WLAN_SCAN_CANCEL_PDEV_ALL) {
2678 		/* Cancelling all scans */
2679 		cmd->req_type = cpu_to_le32(WMI_SCAN_STOP_ALL);
2680 	} else if (arg->req_type == WLAN_SCAN_CANCEL_VDEV_ALL) {
2681 		/* Cancelling VAP scans */
2682 		cmd->req_type = cpu_to_le32(WMI_SCAN_STOP_VAP_ALL);
2683 	} else if (arg->req_type == WLAN_SCAN_CANCEL_SINGLE) {
2684 		/* Cancelling specific scan */
2685 		cmd->req_type = WMI_SCAN_STOP_ONE;
2686 	} else {
2687 		ath12k_warn(ar->ab, "invalid scan cancel req_type %d",
2688 			    arg->req_type);
2689 		dev_kfree_skb(skb);
2690 		return -EINVAL;
2691 	}
2692 
2693 	ret = ath12k_wmi_cmd_send(wmi, skb,
2694 				  WMI_STOP_SCAN_CMDID);
2695 	if (ret) {
2696 		ath12k_warn(ar->ab, "failed to send WMI_STOP_SCAN_CMDID\n");
2697 		dev_kfree_skb(skb);
2698 	}
2699 
2700 	return ret;
2701 }
2702 
2703 int ath12k_wmi_send_scan_chan_list_cmd(struct ath12k *ar,
2704 				       struct ath12k_wmi_scan_chan_list_arg *arg)
2705 {
2706 	struct ath12k_wmi_pdev *wmi = ar->wmi;
2707 	struct wmi_scan_chan_list_cmd *cmd;
2708 	struct sk_buff *skb;
2709 	struct ath12k_wmi_channel_params *chan_info;
2710 	struct ath12k_wmi_channel_arg *channel_arg;
2711 	struct wmi_tlv *tlv;
2712 	void *ptr;
2713 	int i, ret, len;
2714 	u16 num_send_chans, num_sends = 0, max_chan_limit = 0;
2715 	__le32 *reg1, *reg2;
2716 
2717 	channel_arg = &arg->channel[0];
2718 	while (arg->nallchans) {
2719 		len = sizeof(*cmd) + TLV_HDR_SIZE;
2720 		max_chan_limit = (wmi->wmi_ab->max_msg_len[ar->pdev_idx] - len) /
2721 			sizeof(*chan_info);
2722 
2723 		num_send_chans = min(arg->nallchans, max_chan_limit);
2724 
2725 		arg->nallchans -= num_send_chans;
2726 		len += sizeof(*chan_info) * num_send_chans;
2727 
2728 		skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
2729 		if (!skb)
2730 			return -ENOMEM;
2731 
2732 		cmd = (struct wmi_scan_chan_list_cmd *)skb->data;
2733 		cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_SCAN_CHAN_LIST_CMD,
2734 							 sizeof(*cmd));
2735 		cmd->pdev_id = cpu_to_le32(arg->pdev_id);
2736 		cmd->num_scan_chans = cpu_to_le32(num_send_chans);
2737 		if (num_sends)
2738 			cmd->flags |= cpu_to_le32(WMI_APPEND_TO_EXISTING_CHAN_LIST_FLAG);
2739 
2740 		ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
2741 			   "WMI no.of chan = %d len = %d pdev_id = %d num_sends = %d\n",
2742 			   num_send_chans, len, cmd->pdev_id, num_sends);
2743 
2744 		ptr = skb->data + sizeof(*cmd);
2745 
2746 		len = sizeof(*chan_info) * num_send_chans;
2747 		tlv = ptr;
2748 		tlv->header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_ARRAY_STRUCT,
2749 						     len);
2750 		ptr += TLV_HDR_SIZE;
2751 
2752 		for (i = 0; i < num_send_chans; ++i) {
2753 			chan_info = ptr;
2754 			memset(chan_info, 0, sizeof(*chan_info));
2755 			len = sizeof(*chan_info);
2756 			chan_info->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_CHANNEL,
2757 								       len);
2758 
2759 			reg1 = &chan_info->reg_info_1;
2760 			reg2 = &chan_info->reg_info_2;
2761 			chan_info->mhz = cpu_to_le32(channel_arg->mhz);
2762 			chan_info->band_center_freq1 = cpu_to_le32(channel_arg->cfreq1);
2763 			chan_info->band_center_freq2 = cpu_to_le32(channel_arg->cfreq2);
2764 
2765 			if (channel_arg->is_chan_passive)
2766 				chan_info->info |= cpu_to_le32(WMI_CHAN_INFO_PASSIVE);
2767 			if (channel_arg->allow_he)
2768 				chan_info->info |= cpu_to_le32(WMI_CHAN_INFO_ALLOW_HE);
2769 			else if (channel_arg->allow_vht)
2770 				chan_info->info |= cpu_to_le32(WMI_CHAN_INFO_ALLOW_VHT);
2771 			else if (channel_arg->allow_ht)
2772 				chan_info->info |= cpu_to_le32(WMI_CHAN_INFO_ALLOW_HT);
2773 			if (channel_arg->half_rate)
2774 				chan_info->info |= cpu_to_le32(WMI_CHAN_INFO_HALF_RATE);
2775 			if (channel_arg->quarter_rate)
2776 				chan_info->info |=
2777 					cpu_to_le32(WMI_CHAN_INFO_QUARTER_RATE);
2778 
2779 			if (channel_arg->psc_channel)
2780 				chan_info->info |= cpu_to_le32(WMI_CHAN_INFO_PSC);
2781 
2782 			if (channel_arg->dfs_set)
2783 				chan_info->info |= cpu_to_le32(WMI_CHAN_INFO_DFS);
2784 
2785 			chan_info->info |= le32_encode_bits(channel_arg->phy_mode,
2786 							    WMI_CHAN_INFO_MODE);
2787 			*reg1 |= le32_encode_bits(channel_arg->minpower,
2788 						  WMI_CHAN_REG_INFO1_MIN_PWR);
2789 			*reg1 |= le32_encode_bits(channel_arg->maxpower,
2790 						  WMI_CHAN_REG_INFO1_MAX_PWR);
2791 			*reg1 |= le32_encode_bits(channel_arg->maxregpower,
2792 						  WMI_CHAN_REG_INFO1_MAX_REG_PWR);
2793 			*reg1 |= le32_encode_bits(channel_arg->reg_class_id,
2794 						  WMI_CHAN_REG_INFO1_REG_CLS);
2795 			*reg2 |= le32_encode_bits(channel_arg->antennamax,
2796 						  WMI_CHAN_REG_INFO2_ANT_MAX);
2797 
2798 			ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
2799 				   "WMI chan scan list chan[%d] = %u, chan_info->info %8x\n",
2800 				   i, chan_info->mhz, chan_info->info);
2801 
2802 			ptr += sizeof(*chan_info);
2803 
2804 			channel_arg++;
2805 		}
2806 
2807 		ret = ath12k_wmi_cmd_send(wmi, skb, WMI_SCAN_CHAN_LIST_CMDID);
2808 		if (ret) {
2809 			ath12k_warn(ar->ab, "failed to send WMI_SCAN_CHAN_LIST cmd\n");
2810 			dev_kfree_skb(skb);
2811 			return ret;
2812 		}
2813 
2814 		num_sends++;
2815 	}
2816 
2817 	return 0;
2818 }
2819 
2820 int ath12k_wmi_send_wmm_update_cmd(struct ath12k *ar, u32 vdev_id,
2821 				   struct wmi_wmm_params_all_arg *param)
2822 {
2823 	struct ath12k_wmi_pdev *wmi = ar->wmi;
2824 	struct wmi_vdev_set_wmm_params_cmd *cmd;
2825 	struct wmi_wmm_params *wmm_param;
2826 	struct wmi_wmm_params_arg *wmi_wmm_arg;
2827 	struct sk_buff *skb;
2828 	int ret, ac;
2829 
2830 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2831 	if (!skb)
2832 		return -ENOMEM;
2833 
2834 	cmd = (struct wmi_vdev_set_wmm_params_cmd *)skb->data;
2835 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_SET_WMM_PARAMS_CMD,
2836 						 sizeof(*cmd));
2837 
2838 	cmd->vdev_id = cpu_to_le32(vdev_id);
2839 	cmd->wmm_param_type = 0;
2840 
2841 	for (ac = 0; ac < WME_NUM_AC; ac++) {
2842 		switch (ac) {
2843 		case WME_AC_BE:
2844 			wmi_wmm_arg = &param->ac_be;
2845 			break;
2846 		case WME_AC_BK:
2847 			wmi_wmm_arg = &param->ac_bk;
2848 			break;
2849 		case WME_AC_VI:
2850 			wmi_wmm_arg = &param->ac_vi;
2851 			break;
2852 		case WME_AC_VO:
2853 			wmi_wmm_arg = &param->ac_vo;
2854 			break;
2855 		}
2856 
2857 		wmm_param = (struct wmi_wmm_params *)&cmd->wmm_params[ac];
2858 		wmm_param->tlv_header =
2859 			ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_SET_WMM_PARAMS_CMD,
2860 					       sizeof(*wmm_param));
2861 
2862 		wmm_param->aifs = cpu_to_le32(wmi_wmm_arg->aifs);
2863 		wmm_param->cwmin = cpu_to_le32(wmi_wmm_arg->cwmin);
2864 		wmm_param->cwmax = cpu_to_le32(wmi_wmm_arg->cwmax);
2865 		wmm_param->txoplimit = cpu_to_le32(wmi_wmm_arg->txop);
2866 		wmm_param->acm = cpu_to_le32(wmi_wmm_arg->acm);
2867 		wmm_param->no_ack = cpu_to_le32(wmi_wmm_arg->no_ack);
2868 
2869 		ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
2870 			   "wmi wmm set ac %d aifs %d cwmin %d cwmax %d txop %d acm %d no_ack %d\n",
2871 			   ac, wmm_param->aifs, wmm_param->cwmin,
2872 			   wmm_param->cwmax, wmm_param->txoplimit,
2873 			   wmm_param->acm, wmm_param->no_ack);
2874 	}
2875 	ret = ath12k_wmi_cmd_send(wmi, skb,
2876 				  WMI_VDEV_SET_WMM_PARAMS_CMDID);
2877 	if (ret) {
2878 		ath12k_warn(ar->ab,
2879 			    "failed to send WMI_VDEV_SET_WMM_PARAMS_CMDID");
2880 		dev_kfree_skb(skb);
2881 	}
2882 
2883 	return ret;
2884 }
2885 
2886 int ath12k_wmi_send_dfs_phyerr_offload_enable_cmd(struct ath12k *ar,
2887 						  u32 pdev_id)
2888 {
2889 	struct ath12k_wmi_pdev *wmi = ar->wmi;
2890 	struct wmi_dfs_phyerr_offload_cmd *cmd;
2891 	struct sk_buff *skb;
2892 	int ret;
2893 
2894 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
2895 	if (!skb)
2896 		return -ENOMEM;
2897 
2898 	cmd = (struct wmi_dfs_phyerr_offload_cmd *)skb->data;
2899 	cmd->tlv_header =
2900 		ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PDEV_DFS_PHYERR_OFFLOAD_ENABLE_CMD,
2901 				       sizeof(*cmd));
2902 
2903 	cmd->pdev_id = cpu_to_le32(pdev_id);
2904 
2905 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
2906 		   "WMI dfs phy err offload enable pdev id %d\n", pdev_id);
2907 
2908 	ret = ath12k_wmi_cmd_send(wmi, skb,
2909 				  WMI_PDEV_DFS_PHYERR_OFFLOAD_ENABLE_CMDID);
2910 	if (ret) {
2911 		ath12k_warn(ar->ab,
2912 			    "failed to send WMI_PDEV_DFS_PHYERR_OFFLOAD_ENABLE cmd\n");
2913 		dev_kfree_skb(skb);
2914 	}
2915 
2916 	return ret;
2917 }
2918 
2919 int ath12k_wmi_set_bios_cmd(struct ath12k_base *ab, u32 param_id,
2920 			    const u8 *buf, size_t buf_len)
2921 {
2922 	struct ath12k_wmi_base *wmi_ab = &ab->wmi_ab;
2923 	struct wmi_pdev_set_bios_interface_cmd *cmd;
2924 	struct wmi_tlv *tlv;
2925 	struct sk_buff *skb;
2926 	u8 *ptr;
2927 	u32 len, len_aligned;
2928 	int ret;
2929 
2930 	len_aligned = roundup(buf_len, sizeof(u32));
2931 	len = sizeof(*cmd) + TLV_HDR_SIZE + len_aligned;
2932 
2933 	skb = ath12k_wmi_alloc_skb(wmi_ab, len);
2934 	if (!skb)
2935 		return -ENOMEM;
2936 
2937 	cmd = (struct wmi_pdev_set_bios_interface_cmd *)skb->data;
2938 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PDEV_SET_BIOS_INTERFACE_CMD,
2939 						 sizeof(*cmd));
2940 	cmd->pdev_id = cpu_to_le32(WMI_PDEV_ID_SOC);
2941 	cmd->param_type_id = cpu_to_le32(param_id);
2942 	cmd->length = cpu_to_le32(buf_len);
2943 
2944 	ptr = skb->data + sizeof(*cmd);
2945 	tlv = (struct wmi_tlv *)ptr;
2946 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_BYTE, len_aligned);
2947 	ptr += TLV_HDR_SIZE;
2948 	memcpy(ptr, buf, buf_len);
2949 
2950 	ret = ath12k_wmi_cmd_send(&wmi_ab->wmi[0],
2951 				  skb,
2952 				  WMI_PDEV_SET_BIOS_INTERFACE_CMDID);
2953 	if (ret) {
2954 		ath12k_warn(ab,
2955 			    "failed to send WMI_PDEV_SET_BIOS_INTERFACE_CMDID parameter id %d: %d\n",
2956 			    param_id, ret);
2957 		dev_kfree_skb(skb);
2958 	}
2959 
2960 	return 0;
2961 }
2962 
2963 int ath12k_wmi_set_bios_sar_cmd(struct ath12k_base *ab, const u8 *psar_table)
2964 {
2965 	struct ath12k_wmi_base *wmi_ab = &ab->wmi_ab;
2966 	struct wmi_pdev_set_bios_sar_table_cmd *cmd;
2967 	struct wmi_tlv *tlv;
2968 	struct sk_buff *skb;
2969 	int ret;
2970 	u8 *buf_ptr;
2971 	u32 len, sar_table_len_aligned, sar_dbs_backoff_len_aligned;
2972 	const u8 *psar_value = psar_table + ATH12K_ACPI_POWER_LIMIT_DATA_OFFSET;
2973 	const u8 *pdbs_value = psar_table + ATH12K_ACPI_DBS_BACKOFF_DATA_OFFSET;
2974 
2975 	sar_table_len_aligned = roundup(ATH12K_ACPI_BIOS_SAR_TABLE_LEN, sizeof(u32));
2976 	sar_dbs_backoff_len_aligned = roundup(ATH12K_ACPI_BIOS_SAR_DBS_BACKOFF_LEN,
2977 					      sizeof(u32));
2978 	len = sizeof(*cmd) + TLV_HDR_SIZE + sar_table_len_aligned +
2979 		TLV_HDR_SIZE + sar_dbs_backoff_len_aligned;
2980 
2981 	skb = ath12k_wmi_alloc_skb(wmi_ab, len);
2982 	if (!skb)
2983 		return -ENOMEM;
2984 
2985 	cmd = (struct wmi_pdev_set_bios_sar_table_cmd *)skb->data;
2986 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PDEV_SET_BIOS_SAR_TABLE_CMD,
2987 						 sizeof(*cmd));
2988 	cmd->pdev_id = cpu_to_le32(WMI_PDEV_ID_SOC);
2989 	cmd->sar_len = cpu_to_le32(ATH12K_ACPI_BIOS_SAR_TABLE_LEN);
2990 	cmd->dbs_backoff_len = cpu_to_le32(ATH12K_ACPI_BIOS_SAR_DBS_BACKOFF_LEN);
2991 
2992 	buf_ptr = skb->data + sizeof(*cmd);
2993 	tlv = (struct wmi_tlv *)buf_ptr;
2994 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_BYTE,
2995 					 sar_table_len_aligned);
2996 	buf_ptr += TLV_HDR_SIZE;
2997 	memcpy(buf_ptr, psar_value, ATH12K_ACPI_BIOS_SAR_TABLE_LEN);
2998 
2999 	buf_ptr += sar_table_len_aligned;
3000 	tlv = (struct wmi_tlv *)buf_ptr;
3001 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_BYTE,
3002 					 sar_dbs_backoff_len_aligned);
3003 	buf_ptr += TLV_HDR_SIZE;
3004 	memcpy(buf_ptr, pdbs_value, ATH12K_ACPI_BIOS_SAR_DBS_BACKOFF_LEN);
3005 
3006 	ret = ath12k_wmi_cmd_send(&wmi_ab->wmi[0],
3007 				  skb,
3008 				  WMI_PDEV_SET_BIOS_SAR_TABLE_CMDID);
3009 	if (ret) {
3010 		ath12k_warn(ab,
3011 			    "failed to send WMI_PDEV_SET_BIOS_INTERFACE_CMDID %d\n",
3012 			    ret);
3013 		dev_kfree_skb(skb);
3014 	}
3015 
3016 	return ret;
3017 }
3018 
3019 int ath12k_wmi_set_bios_geo_cmd(struct ath12k_base *ab, const u8 *pgeo_table)
3020 {
3021 	struct ath12k_wmi_base *wmi_ab = &ab->wmi_ab;
3022 	struct wmi_pdev_set_bios_geo_table_cmd *cmd;
3023 	struct wmi_tlv *tlv;
3024 	struct sk_buff *skb;
3025 	int ret;
3026 	u8 *buf_ptr;
3027 	u32 len, sar_geo_len_aligned;
3028 	const u8 *pgeo_value = pgeo_table + ATH12K_ACPI_GEO_OFFSET_DATA_OFFSET;
3029 
3030 	sar_geo_len_aligned = roundup(ATH12K_ACPI_BIOS_SAR_GEO_OFFSET_LEN, sizeof(u32));
3031 	len = sizeof(*cmd) + TLV_HDR_SIZE + sar_geo_len_aligned;
3032 
3033 	skb = ath12k_wmi_alloc_skb(wmi_ab, len);
3034 	if (!skb)
3035 		return -ENOMEM;
3036 
3037 	cmd = (struct wmi_pdev_set_bios_geo_table_cmd *)skb->data;
3038 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PDEV_SET_BIOS_GEO_TABLE_CMD,
3039 						 sizeof(*cmd));
3040 	cmd->pdev_id = cpu_to_le32(WMI_PDEV_ID_SOC);
3041 	cmd->geo_len = cpu_to_le32(ATH12K_ACPI_BIOS_SAR_GEO_OFFSET_LEN);
3042 
3043 	buf_ptr = skb->data + sizeof(*cmd);
3044 	tlv = (struct wmi_tlv *)buf_ptr;
3045 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_BYTE, sar_geo_len_aligned);
3046 	buf_ptr += TLV_HDR_SIZE;
3047 	memcpy(buf_ptr, pgeo_value, ATH12K_ACPI_BIOS_SAR_GEO_OFFSET_LEN);
3048 
3049 	ret = ath12k_wmi_cmd_send(&wmi_ab->wmi[0],
3050 				  skb,
3051 				  WMI_PDEV_SET_BIOS_GEO_TABLE_CMDID);
3052 	if (ret) {
3053 		ath12k_warn(ab,
3054 			    "failed to send WMI_PDEV_SET_BIOS_GEO_TABLE_CMDID %d\n",
3055 			    ret);
3056 		dev_kfree_skb(skb);
3057 	}
3058 
3059 	return ret;
3060 }
3061 
3062 int ath12k_wmi_delba_send(struct ath12k *ar, u32 vdev_id, const u8 *mac,
3063 			  u32 tid, u32 initiator, u32 reason)
3064 {
3065 	struct ath12k_wmi_pdev *wmi = ar->wmi;
3066 	struct wmi_delba_send_cmd *cmd;
3067 	struct sk_buff *skb;
3068 	int ret;
3069 
3070 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
3071 	if (!skb)
3072 		return -ENOMEM;
3073 
3074 	cmd = (struct wmi_delba_send_cmd *)skb->data;
3075 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_DELBA_SEND_CMD,
3076 						 sizeof(*cmd));
3077 	cmd->vdev_id = cpu_to_le32(vdev_id);
3078 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
3079 	cmd->tid = cpu_to_le32(tid);
3080 	cmd->initiator = cpu_to_le32(initiator);
3081 	cmd->reasoncode = cpu_to_le32(reason);
3082 
3083 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
3084 		   "wmi delba send vdev_id 0x%X mac_addr %pM tid %u initiator %u reason %u\n",
3085 		   vdev_id, mac, tid, initiator, reason);
3086 
3087 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_DELBA_SEND_CMDID);
3088 
3089 	if (ret) {
3090 		ath12k_warn(ar->ab,
3091 			    "failed to send WMI_DELBA_SEND_CMDID cmd\n");
3092 		dev_kfree_skb(skb);
3093 	}
3094 
3095 	return ret;
3096 }
3097 
3098 int ath12k_wmi_addba_set_resp(struct ath12k *ar, u32 vdev_id, const u8 *mac,
3099 			      u32 tid, u32 status)
3100 {
3101 	struct ath12k_wmi_pdev *wmi = ar->wmi;
3102 	struct wmi_addba_setresponse_cmd *cmd;
3103 	struct sk_buff *skb;
3104 	int ret;
3105 
3106 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
3107 	if (!skb)
3108 		return -ENOMEM;
3109 
3110 	cmd = (struct wmi_addba_setresponse_cmd *)skb->data;
3111 	cmd->tlv_header =
3112 		ath12k_wmi_tlv_cmd_hdr(WMI_TAG_ADDBA_SETRESPONSE_CMD,
3113 				       sizeof(*cmd));
3114 	cmd->vdev_id = cpu_to_le32(vdev_id);
3115 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
3116 	cmd->tid = cpu_to_le32(tid);
3117 	cmd->statuscode = cpu_to_le32(status);
3118 
3119 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
3120 		   "wmi addba set resp vdev_id 0x%X mac_addr %pM tid %u status %u\n",
3121 		   vdev_id, mac, tid, status);
3122 
3123 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_ADDBA_SET_RESP_CMDID);
3124 
3125 	if (ret) {
3126 		ath12k_warn(ar->ab,
3127 			    "failed to send WMI_ADDBA_SET_RESP_CMDID cmd\n");
3128 		dev_kfree_skb(skb);
3129 	}
3130 
3131 	return ret;
3132 }
3133 
3134 int ath12k_wmi_addba_send(struct ath12k *ar, u32 vdev_id, const u8 *mac,
3135 			  u32 tid, u32 buf_size)
3136 {
3137 	struct ath12k_wmi_pdev *wmi = ar->wmi;
3138 	struct wmi_addba_send_cmd *cmd;
3139 	struct sk_buff *skb;
3140 	int ret;
3141 
3142 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
3143 	if (!skb)
3144 		return -ENOMEM;
3145 
3146 	cmd = (struct wmi_addba_send_cmd *)skb->data;
3147 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_ADDBA_SEND_CMD,
3148 						 sizeof(*cmd));
3149 	cmd->vdev_id = cpu_to_le32(vdev_id);
3150 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
3151 	cmd->tid = cpu_to_le32(tid);
3152 	cmd->buffersize = cpu_to_le32(buf_size);
3153 
3154 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
3155 		   "wmi addba send vdev_id 0x%X mac_addr %pM tid %u bufsize %u\n",
3156 		   vdev_id, mac, tid, buf_size);
3157 
3158 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_ADDBA_SEND_CMDID);
3159 
3160 	if (ret) {
3161 		ath12k_warn(ar->ab,
3162 			    "failed to send WMI_ADDBA_SEND_CMDID cmd\n");
3163 		dev_kfree_skb(skb);
3164 	}
3165 
3166 	return ret;
3167 }
3168 
3169 int ath12k_wmi_addba_clear_resp(struct ath12k *ar, u32 vdev_id, const u8 *mac)
3170 {
3171 	struct ath12k_wmi_pdev *wmi = ar->wmi;
3172 	struct wmi_addba_clear_resp_cmd *cmd;
3173 	struct sk_buff *skb;
3174 	int ret;
3175 
3176 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
3177 	if (!skb)
3178 		return -ENOMEM;
3179 
3180 	cmd = (struct wmi_addba_clear_resp_cmd *)skb->data;
3181 	cmd->tlv_header =
3182 		ath12k_wmi_tlv_cmd_hdr(WMI_TAG_ADDBA_CLEAR_RESP_CMD,
3183 				       sizeof(*cmd));
3184 	cmd->vdev_id = cpu_to_le32(vdev_id);
3185 	ether_addr_copy(cmd->peer_macaddr.addr, mac);
3186 
3187 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
3188 		   "wmi addba clear resp vdev_id 0x%X mac_addr %pM\n",
3189 		   vdev_id, mac);
3190 
3191 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_ADDBA_CLEAR_RESP_CMDID);
3192 
3193 	if (ret) {
3194 		ath12k_warn(ar->ab,
3195 			    "failed to send WMI_ADDBA_CLEAR_RESP_CMDID cmd\n");
3196 		dev_kfree_skb(skb);
3197 	}
3198 
3199 	return ret;
3200 }
3201 
3202 int ath12k_wmi_send_init_country_cmd(struct ath12k *ar,
3203 				     struct ath12k_wmi_init_country_arg *arg)
3204 {
3205 	struct ath12k_wmi_pdev *wmi = ar->wmi;
3206 	struct wmi_init_country_cmd *cmd;
3207 	struct sk_buff *skb;
3208 	int ret;
3209 
3210 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, sizeof(*cmd));
3211 	if (!skb)
3212 		return -ENOMEM;
3213 
3214 	cmd = (struct wmi_init_country_cmd *)skb->data;
3215 	cmd->tlv_header =
3216 		ath12k_wmi_tlv_cmd_hdr(WMI_TAG_SET_INIT_COUNTRY_CMD,
3217 				       sizeof(*cmd));
3218 
3219 	cmd->pdev_id = cpu_to_le32(ar->pdev->pdev_id);
3220 
3221 	switch (arg->flags) {
3222 	case ALPHA_IS_SET:
3223 		cmd->init_cc_type = WMI_COUNTRY_INFO_TYPE_ALPHA;
3224 		memcpy(&cmd->cc_info.alpha2, arg->cc_info.alpha2, 3);
3225 		break;
3226 	case CC_IS_SET:
3227 		cmd->init_cc_type = cpu_to_le32(WMI_COUNTRY_INFO_TYPE_COUNTRY_CODE);
3228 		cmd->cc_info.country_code =
3229 			cpu_to_le32(arg->cc_info.country_code);
3230 		break;
3231 	case REGDMN_IS_SET:
3232 		cmd->init_cc_type = cpu_to_le32(WMI_COUNTRY_INFO_TYPE_REGDOMAIN);
3233 		cmd->cc_info.regdom_id = cpu_to_le32(arg->cc_info.regdom_id);
3234 		break;
3235 	default:
3236 		ret = -EINVAL;
3237 		goto out;
3238 	}
3239 
3240 	ret = ath12k_wmi_cmd_send(wmi, skb,
3241 				  WMI_SET_INIT_COUNTRY_CMDID);
3242 
3243 out:
3244 	if (ret) {
3245 		ath12k_warn(ar->ab,
3246 			    "failed to send WMI_SET_INIT_COUNTRY CMD :%d\n",
3247 			    ret);
3248 		dev_kfree_skb(skb);
3249 	}
3250 
3251 	return ret;
3252 }
3253 
3254 int
3255 ath12k_wmi_send_twt_enable_cmd(struct ath12k *ar, u32 pdev_id)
3256 {
3257 	struct ath12k_wmi_pdev *wmi = ar->wmi;
3258 	struct ath12k_base *ab = wmi->wmi_ab->ab;
3259 	struct wmi_twt_enable_params_cmd *cmd;
3260 	struct sk_buff *skb;
3261 	int ret, len;
3262 
3263 	len = sizeof(*cmd);
3264 
3265 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
3266 	if (!skb)
3267 		return -ENOMEM;
3268 
3269 	cmd = (struct wmi_twt_enable_params_cmd *)skb->data;
3270 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_TWT_ENABLE_CMD,
3271 						 len);
3272 	cmd->pdev_id = cpu_to_le32(pdev_id);
3273 	cmd->sta_cong_timer_ms = cpu_to_le32(ATH12K_TWT_DEF_STA_CONG_TIMER_MS);
3274 	cmd->default_slot_size = cpu_to_le32(ATH12K_TWT_DEF_DEFAULT_SLOT_SIZE);
3275 	cmd->congestion_thresh_setup =
3276 		cpu_to_le32(ATH12K_TWT_DEF_CONGESTION_THRESH_SETUP);
3277 	cmd->congestion_thresh_teardown =
3278 		cpu_to_le32(ATH12K_TWT_DEF_CONGESTION_THRESH_TEARDOWN);
3279 	cmd->congestion_thresh_critical =
3280 		cpu_to_le32(ATH12K_TWT_DEF_CONGESTION_THRESH_CRITICAL);
3281 	cmd->interference_thresh_teardown =
3282 		cpu_to_le32(ATH12K_TWT_DEF_INTERFERENCE_THRESH_TEARDOWN);
3283 	cmd->interference_thresh_setup =
3284 		cpu_to_le32(ATH12K_TWT_DEF_INTERFERENCE_THRESH_SETUP);
3285 	cmd->min_no_sta_setup = cpu_to_le32(ATH12K_TWT_DEF_MIN_NO_STA_SETUP);
3286 	cmd->min_no_sta_teardown = cpu_to_le32(ATH12K_TWT_DEF_MIN_NO_STA_TEARDOWN);
3287 	cmd->no_of_bcast_mcast_slots =
3288 		cpu_to_le32(ATH12K_TWT_DEF_NO_OF_BCAST_MCAST_SLOTS);
3289 	cmd->min_no_twt_slots = cpu_to_le32(ATH12K_TWT_DEF_MIN_NO_TWT_SLOTS);
3290 	cmd->max_no_sta_twt = cpu_to_le32(ATH12K_TWT_DEF_MAX_NO_STA_TWT);
3291 	cmd->mode_check_interval = cpu_to_le32(ATH12K_TWT_DEF_MODE_CHECK_INTERVAL);
3292 	cmd->add_sta_slot_interval = cpu_to_le32(ATH12K_TWT_DEF_ADD_STA_SLOT_INTERVAL);
3293 	cmd->remove_sta_slot_interval =
3294 		cpu_to_le32(ATH12K_TWT_DEF_REMOVE_STA_SLOT_INTERVAL);
3295 	/* TODO add MBSSID support */
3296 	cmd->mbss_support = 0;
3297 
3298 	ret = ath12k_wmi_cmd_send(wmi, skb,
3299 				  WMI_TWT_ENABLE_CMDID);
3300 	if (ret) {
3301 		ath12k_warn(ab, "Failed to send WMI_TWT_ENABLE_CMDID");
3302 		dev_kfree_skb(skb);
3303 	}
3304 	return ret;
3305 }
3306 
3307 int
3308 ath12k_wmi_send_twt_disable_cmd(struct ath12k *ar, u32 pdev_id)
3309 {
3310 	struct ath12k_wmi_pdev *wmi = ar->wmi;
3311 	struct ath12k_base *ab = wmi->wmi_ab->ab;
3312 	struct wmi_twt_disable_params_cmd *cmd;
3313 	struct sk_buff *skb;
3314 	int ret, len;
3315 
3316 	len = sizeof(*cmd);
3317 
3318 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
3319 	if (!skb)
3320 		return -ENOMEM;
3321 
3322 	cmd = (struct wmi_twt_disable_params_cmd *)skb->data;
3323 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_TWT_DISABLE_CMD,
3324 						 len);
3325 	cmd->pdev_id = cpu_to_le32(pdev_id);
3326 
3327 	ret = ath12k_wmi_cmd_send(wmi, skb,
3328 				  WMI_TWT_DISABLE_CMDID);
3329 	if (ret) {
3330 		ath12k_warn(ab, "Failed to send WMI_TWT_DISABLE_CMDID");
3331 		dev_kfree_skb(skb);
3332 	}
3333 	return ret;
3334 }
3335 
3336 int
3337 ath12k_wmi_send_obss_spr_cmd(struct ath12k *ar, u32 vdev_id,
3338 			     struct ieee80211_he_obss_pd *he_obss_pd)
3339 {
3340 	struct ath12k_wmi_pdev *wmi = ar->wmi;
3341 	struct ath12k_base *ab = wmi->wmi_ab->ab;
3342 	struct wmi_obss_spatial_reuse_params_cmd *cmd;
3343 	struct sk_buff *skb;
3344 	int ret, len;
3345 
3346 	len = sizeof(*cmd);
3347 
3348 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
3349 	if (!skb)
3350 		return -ENOMEM;
3351 
3352 	cmd = (struct wmi_obss_spatial_reuse_params_cmd *)skb->data;
3353 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_OBSS_SPATIAL_REUSE_SET_CMD,
3354 						 len);
3355 	cmd->vdev_id = cpu_to_le32(vdev_id);
3356 	cmd->enable = cpu_to_le32(he_obss_pd->enable);
3357 	cmd->obss_min = a_cpu_to_sle32(he_obss_pd->min_offset);
3358 	cmd->obss_max = a_cpu_to_sle32(he_obss_pd->max_offset);
3359 
3360 	ret = ath12k_wmi_cmd_send(wmi, skb,
3361 				  WMI_PDEV_OBSS_PD_SPATIAL_REUSE_CMDID);
3362 	if (ret) {
3363 		ath12k_warn(ab,
3364 			    "Failed to send WMI_PDEV_OBSS_PD_SPATIAL_REUSE_CMDID");
3365 		dev_kfree_skb(skb);
3366 	}
3367 	return ret;
3368 }
3369 
3370 int ath12k_wmi_obss_color_cfg_cmd(struct ath12k *ar, u32 vdev_id,
3371 				  u8 bss_color, u32 period,
3372 				  bool enable)
3373 {
3374 	struct ath12k_wmi_pdev *wmi = ar->wmi;
3375 	struct ath12k_base *ab = wmi->wmi_ab->ab;
3376 	struct wmi_obss_color_collision_cfg_params_cmd *cmd;
3377 	struct sk_buff *skb;
3378 	int ret, len;
3379 
3380 	len = sizeof(*cmd);
3381 
3382 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
3383 	if (!skb)
3384 		return -ENOMEM;
3385 
3386 	cmd = (struct wmi_obss_color_collision_cfg_params_cmd *)skb->data;
3387 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_OBSS_COLOR_COLLISION_DET_CONFIG,
3388 						 len);
3389 	cmd->vdev_id = cpu_to_le32(vdev_id);
3390 	cmd->evt_type = enable ? cpu_to_le32(ATH12K_OBSS_COLOR_COLLISION_DETECTION) :
3391 		cpu_to_le32(ATH12K_OBSS_COLOR_COLLISION_DETECTION_DISABLE);
3392 	cmd->current_bss_color = cpu_to_le32(bss_color);
3393 	cmd->detection_period_ms = cpu_to_le32(period);
3394 	cmd->scan_period_ms = cpu_to_le32(ATH12K_BSS_COLOR_COLLISION_SCAN_PERIOD_MS);
3395 	cmd->free_slot_expiry_time_ms = 0;
3396 	cmd->flags = 0;
3397 
3398 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
3399 		   "wmi_send_obss_color_collision_cfg id %d type %d bss_color %d detect_period %d scan_period %d\n",
3400 		   cmd->vdev_id, cmd->evt_type, cmd->current_bss_color,
3401 		   cmd->detection_period_ms, cmd->scan_period_ms);
3402 
3403 	ret = ath12k_wmi_cmd_send(wmi, skb,
3404 				  WMI_OBSS_COLOR_COLLISION_DET_CONFIG_CMDID);
3405 	if (ret) {
3406 		ath12k_warn(ab, "Failed to send WMI_OBSS_COLOR_COLLISION_DET_CONFIG_CMDID");
3407 		dev_kfree_skb(skb);
3408 	}
3409 	return ret;
3410 }
3411 
3412 int ath12k_wmi_send_bss_color_change_enable_cmd(struct ath12k *ar, u32 vdev_id,
3413 						bool enable)
3414 {
3415 	struct ath12k_wmi_pdev *wmi = ar->wmi;
3416 	struct ath12k_base *ab = wmi->wmi_ab->ab;
3417 	struct wmi_bss_color_change_enable_params_cmd *cmd;
3418 	struct sk_buff *skb;
3419 	int ret, len;
3420 
3421 	len = sizeof(*cmd);
3422 
3423 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
3424 	if (!skb)
3425 		return -ENOMEM;
3426 
3427 	cmd = (struct wmi_bss_color_change_enable_params_cmd *)skb->data;
3428 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_BSS_COLOR_CHANGE_ENABLE,
3429 						 len);
3430 	cmd->vdev_id = cpu_to_le32(vdev_id);
3431 	cmd->enable = enable ? cpu_to_le32(1) : 0;
3432 
3433 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
3434 		   "wmi_send_bss_color_change_enable id %d enable %d\n",
3435 		   cmd->vdev_id, cmd->enable);
3436 
3437 	ret = ath12k_wmi_cmd_send(wmi, skb,
3438 				  WMI_BSS_COLOR_CHANGE_ENABLE_CMDID);
3439 	if (ret) {
3440 		ath12k_warn(ab, "Failed to send WMI_BSS_COLOR_CHANGE_ENABLE_CMDID");
3441 		dev_kfree_skb(skb);
3442 	}
3443 	return ret;
3444 }
3445 
3446 int ath12k_wmi_fils_discovery_tmpl(struct ath12k *ar, u32 vdev_id,
3447 				   struct sk_buff *tmpl)
3448 {
3449 	struct wmi_tlv *tlv;
3450 	struct sk_buff *skb;
3451 	void *ptr;
3452 	int ret, len;
3453 	size_t aligned_len;
3454 	struct wmi_fils_discovery_tmpl_cmd *cmd;
3455 
3456 	aligned_len = roundup(tmpl->len, 4);
3457 	len = sizeof(*cmd) + TLV_HDR_SIZE + aligned_len;
3458 
3459 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
3460 		   "WMI vdev %i set FILS discovery template\n", vdev_id);
3461 
3462 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
3463 	if (!skb)
3464 		return -ENOMEM;
3465 
3466 	cmd = (struct wmi_fils_discovery_tmpl_cmd *)skb->data;
3467 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_FILS_DISCOVERY_TMPL_CMD,
3468 						 sizeof(*cmd));
3469 	cmd->vdev_id = cpu_to_le32(vdev_id);
3470 	cmd->buf_len = cpu_to_le32(tmpl->len);
3471 	ptr = skb->data + sizeof(*cmd);
3472 
3473 	tlv = ptr;
3474 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_BYTE, aligned_len);
3475 	memcpy(tlv->value, tmpl->data, tmpl->len);
3476 
3477 	ret = ath12k_wmi_cmd_send(ar->wmi, skb, WMI_FILS_DISCOVERY_TMPL_CMDID);
3478 	if (ret) {
3479 		ath12k_warn(ar->ab,
3480 			    "WMI vdev %i failed to send FILS discovery template command\n",
3481 			    vdev_id);
3482 		dev_kfree_skb(skb);
3483 	}
3484 	return ret;
3485 }
3486 
3487 int ath12k_wmi_probe_resp_tmpl(struct ath12k *ar, u32 vdev_id,
3488 			       struct sk_buff *tmpl)
3489 {
3490 	struct wmi_probe_tmpl_cmd *cmd;
3491 	struct ath12k_wmi_bcn_prb_info_params *probe_info;
3492 	struct wmi_tlv *tlv;
3493 	struct sk_buff *skb;
3494 	void *ptr;
3495 	int ret, len;
3496 	size_t aligned_len = roundup(tmpl->len, 4);
3497 
3498 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
3499 		   "WMI vdev %i set probe response template\n", vdev_id);
3500 
3501 	len = sizeof(*cmd) + sizeof(*probe_info) + TLV_HDR_SIZE + aligned_len;
3502 
3503 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
3504 	if (!skb)
3505 		return -ENOMEM;
3506 
3507 	cmd = (struct wmi_probe_tmpl_cmd *)skb->data;
3508 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PRB_TMPL_CMD,
3509 						 sizeof(*cmd));
3510 	cmd->vdev_id = cpu_to_le32(vdev_id);
3511 	cmd->buf_len = cpu_to_le32(tmpl->len);
3512 
3513 	ptr = skb->data + sizeof(*cmd);
3514 
3515 	probe_info = ptr;
3516 	len = sizeof(*probe_info);
3517 	probe_info->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_BCN_PRB_INFO,
3518 							len);
3519 	probe_info->caps = 0;
3520 	probe_info->erp = 0;
3521 
3522 	ptr += sizeof(*probe_info);
3523 
3524 	tlv = ptr;
3525 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_BYTE, aligned_len);
3526 	memcpy(tlv->value, tmpl->data, tmpl->len);
3527 
3528 	ret = ath12k_wmi_cmd_send(ar->wmi, skb, WMI_PRB_TMPL_CMDID);
3529 	if (ret) {
3530 		ath12k_warn(ar->ab,
3531 			    "WMI vdev %i failed to send probe response template command\n",
3532 			    vdev_id);
3533 		dev_kfree_skb(skb);
3534 	}
3535 	return ret;
3536 }
3537 
3538 int ath12k_wmi_fils_discovery(struct ath12k *ar, u32 vdev_id, u32 interval,
3539 			      bool unsol_bcast_probe_resp_enabled)
3540 {
3541 	struct sk_buff *skb;
3542 	int ret, len;
3543 	struct wmi_fils_discovery_cmd *cmd;
3544 
3545 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
3546 		   "WMI vdev %i set %s interval to %u TU\n",
3547 		   vdev_id, unsol_bcast_probe_resp_enabled ?
3548 		   "unsolicited broadcast probe response" : "FILS discovery",
3549 		   interval);
3550 
3551 	len = sizeof(*cmd);
3552 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
3553 	if (!skb)
3554 		return -ENOMEM;
3555 
3556 	cmd = (struct wmi_fils_discovery_cmd *)skb->data;
3557 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_ENABLE_FILS_CMD,
3558 						 len);
3559 	cmd->vdev_id = cpu_to_le32(vdev_id);
3560 	cmd->interval = cpu_to_le32(interval);
3561 	cmd->config = cpu_to_le32(unsol_bcast_probe_resp_enabled);
3562 
3563 	ret = ath12k_wmi_cmd_send(ar->wmi, skb, WMI_ENABLE_FILS_CMDID);
3564 	if (ret) {
3565 		ath12k_warn(ar->ab,
3566 			    "WMI vdev %i failed to send FILS discovery enable/disable command\n",
3567 			    vdev_id);
3568 		dev_kfree_skb(skb);
3569 	}
3570 	return ret;
3571 }
3572 
3573 static void
3574 ath12k_fill_band_to_mac_param(struct ath12k_base  *soc,
3575 			      struct ath12k_wmi_pdev_band_arg *arg)
3576 {
3577 	u8 i;
3578 	struct ath12k_wmi_hal_reg_capabilities_ext_arg *hal_reg_cap;
3579 	struct ath12k_pdev *pdev;
3580 
3581 	for (i = 0; i < soc->num_radios; i++) {
3582 		pdev = &soc->pdevs[i];
3583 		hal_reg_cap = &soc->hal_reg_cap[i];
3584 		arg[i].pdev_id = pdev->pdev_id;
3585 
3586 		switch (pdev->cap.supported_bands) {
3587 		case WMI_HOST_WLAN_2G_5G_CAP:
3588 			arg[i].start_freq = hal_reg_cap->low_2ghz_chan;
3589 			arg[i].end_freq = hal_reg_cap->high_5ghz_chan;
3590 			break;
3591 		case WMI_HOST_WLAN_2G_CAP:
3592 			arg[i].start_freq = hal_reg_cap->low_2ghz_chan;
3593 			arg[i].end_freq = hal_reg_cap->high_2ghz_chan;
3594 			break;
3595 		case WMI_HOST_WLAN_5G_CAP:
3596 			arg[i].start_freq = hal_reg_cap->low_5ghz_chan;
3597 			arg[i].end_freq = hal_reg_cap->high_5ghz_chan;
3598 			break;
3599 		default:
3600 			break;
3601 		}
3602 	}
3603 }
3604 
3605 static void
3606 ath12k_wmi_copy_resource_config(struct ath12k_wmi_resource_config_params *wmi_cfg,
3607 				struct ath12k_wmi_resource_config_arg *tg_cfg)
3608 {
3609 	wmi_cfg->num_vdevs = cpu_to_le32(tg_cfg->num_vdevs);
3610 	wmi_cfg->num_peers = cpu_to_le32(tg_cfg->num_peers);
3611 	wmi_cfg->num_offload_peers = cpu_to_le32(tg_cfg->num_offload_peers);
3612 	wmi_cfg->num_offload_reorder_buffs =
3613 		cpu_to_le32(tg_cfg->num_offload_reorder_buffs);
3614 	wmi_cfg->num_peer_keys = cpu_to_le32(tg_cfg->num_peer_keys);
3615 	wmi_cfg->num_tids = cpu_to_le32(tg_cfg->num_tids);
3616 	wmi_cfg->ast_skid_limit = cpu_to_le32(tg_cfg->ast_skid_limit);
3617 	wmi_cfg->tx_chain_mask = cpu_to_le32(tg_cfg->tx_chain_mask);
3618 	wmi_cfg->rx_chain_mask = cpu_to_le32(tg_cfg->rx_chain_mask);
3619 	wmi_cfg->rx_timeout_pri[0] = cpu_to_le32(tg_cfg->rx_timeout_pri[0]);
3620 	wmi_cfg->rx_timeout_pri[1] = cpu_to_le32(tg_cfg->rx_timeout_pri[1]);
3621 	wmi_cfg->rx_timeout_pri[2] = cpu_to_le32(tg_cfg->rx_timeout_pri[2]);
3622 	wmi_cfg->rx_timeout_pri[3] = cpu_to_le32(tg_cfg->rx_timeout_pri[3]);
3623 	wmi_cfg->rx_decap_mode = cpu_to_le32(tg_cfg->rx_decap_mode);
3624 	wmi_cfg->scan_max_pending_req = cpu_to_le32(tg_cfg->scan_max_pending_req);
3625 	wmi_cfg->bmiss_offload_max_vdev = cpu_to_le32(tg_cfg->bmiss_offload_max_vdev);
3626 	wmi_cfg->roam_offload_max_vdev = cpu_to_le32(tg_cfg->roam_offload_max_vdev);
3627 	wmi_cfg->roam_offload_max_ap_profiles =
3628 		cpu_to_le32(tg_cfg->roam_offload_max_ap_profiles);
3629 	wmi_cfg->num_mcast_groups = cpu_to_le32(tg_cfg->num_mcast_groups);
3630 	wmi_cfg->num_mcast_table_elems = cpu_to_le32(tg_cfg->num_mcast_table_elems);
3631 	wmi_cfg->mcast2ucast_mode = cpu_to_le32(tg_cfg->mcast2ucast_mode);
3632 	wmi_cfg->tx_dbg_log_size = cpu_to_le32(tg_cfg->tx_dbg_log_size);
3633 	wmi_cfg->num_wds_entries = cpu_to_le32(tg_cfg->num_wds_entries);
3634 	wmi_cfg->dma_burst_size = cpu_to_le32(tg_cfg->dma_burst_size);
3635 	wmi_cfg->mac_aggr_delim = cpu_to_le32(tg_cfg->mac_aggr_delim);
3636 	wmi_cfg->rx_skip_defrag_timeout_dup_detection_check =
3637 		cpu_to_le32(tg_cfg->rx_skip_defrag_timeout_dup_detection_check);
3638 	wmi_cfg->vow_config = cpu_to_le32(tg_cfg->vow_config);
3639 	wmi_cfg->gtk_offload_max_vdev = cpu_to_le32(tg_cfg->gtk_offload_max_vdev);
3640 	wmi_cfg->num_msdu_desc = cpu_to_le32(tg_cfg->num_msdu_desc);
3641 	wmi_cfg->max_frag_entries = cpu_to_le32(tg_cfg->max_frag_entries);
3642 	wmi_cfg->num_tdls_vdevs = cpu_to_le32(tg_cfg->num_tdls_vdevs);
3643 	wmi_cfg->num_tdls_conn_table_entries =
3644 		cpu_to_le32(tg_cfg->num_tdls_conn_table_entries);
3645 	wmi_cfg->beacon_tx_offload_max_vdev =
3646 		cpu_to_le32(tg_cfg->beacon_tx_offload_max_vdev);
3647 	wmi_cfg->num_multicast_filter_entries =
3648 		cpu_to_le32(tg_cfg->num_multicast_filter_entries);
3649 	wmi_cfg->num_wow_filters = cpu_to_le32(tg_cfg->num_wow_filters);
3650 	wmi_cfg->num_keep_alive_pattern = cpu_to_le32(tg_cfg->num_keep_alive_pattern);
3651 	wmi_cfg->keep_alive_pattern_size = cpu_to_le32(tg_cfg->keep_alive_pattern_size);
3652 	wmi_cfg->max_tdls_concurrent_sleep_sta =
3653 		cpu_to_le32(tg_cfg->max_tdls_concurrent_sleep_sta);
3654 	wmi_cfg->max_tdls_concurrent_buffer_sta =
3655 		cpu_to_le32(tg_cfg->max_tdls_concurrent_buffer_sta);
3656 	wmi_cfg->wmi_send_separate = cpu_to_le32(tg_cfg->wmi_send_separate);
3657 	wmi_cfg->num_ocb_vdevs = cpu_to_le32(tg_cfg->num_ocb_vdevs);
3658 	wmi_cfg->num_ocb_channels = cpu_to_le32(tg_cfg->num_ocb_channels);
3659 	wmi_cfg->num_ocb_schedules = cpu_to_le32(tg_cfg->num_ocb_schedules);
3660 	wmi_cfg->bpf_instruction_size = cpu_to_le32(tg_cfg->bpf_instruction_size);
3661 	wmi_cfg->max_bssid_rx_filters = cpu_to_le32(tg_cfg->max_bssid_rx_filters);
3662 	wmi_cfg->use_pdev_id = cpu_to_le32(tg_cfg->use_pdev_id);
3663 	wmi_cfg->flag1 = cpu_to_le32(tg_cfg->atf_config |
3664 				     WMI_RSRC_CFG_FLAG1_BSS_CHANNEL_INFO_64);
3665 	wmi_cfg->peer_map_unmap_version = cpu_to_le32(tg_cfg->peer_map_unmap_version);
3666 	wmi_cfg->sched_params = cpu_to_le32(tg_cfg->sched_params);
3667 	wmi_cfg->twt_ap_pdev_count = cpu_to_le32(tg_cfg->twt_ap_pdev_count);
3668 	wmi_cfg->twt_ap_sta_count = cpu_to_le32(tg_cfg->twt_ap_sta_count);
3669 	wmi_cfg->flags2 = le32_encode_bits(tg_cfg->peer_metadata_ver,
3670 					   WMI_RSRC_CFG_FLAGS2_RX_PEER_METADATA_VERSION);
3671 	wmi_cfg->host_service_flags = cpu_to_le32(tg_cfg->is_reg_cc_ext_event_supported <<
3672 				WMI_RSRC_CFG_HOST_SVC_FLAG_REG_CC_EXT_SUPPORT_BIT);
3673 	wmi_cfg->ema_max_vap_cnt = cpu_to_le32(tg_cfg->ema_max_vap_cnt);
3674 	wmi_cfg->ema_max_profile_period = cpu_to_le32(tg_cfg->ema_max_profile_period);
3675 	wmi_cfg->flags2 |= cpu_to_le32(WMI_RSRC_CFG_FLAGS2_CALC_NEXT_DTIM_COUNT_SET);
3676 }
3677 
3678 static int ath12k_init_cmd_send(struct ath12k_wmi_pdev *wmi,
3679 				struct ath12k_wmi_init_cmd_arg *arg)
3680 {
3681 	struct ath12k_base *ab = wmi->wmi_ab->ab;
3682 	struct sk_buff *skb;
3683 	struct wmi_init_cmd *cmd;
3684 	struct ath12k_wmi_resource_config_params *cfg;
3685 	struct ath12k_wmi_pdev_set_hw_mode_cmd *hw_mode;
3686 	struct ath12k_wmi_pdev_band_to_mac_params *band_to_mac;
3687 	struct ath12k_wmi_host_mem_chunk_params *host_mem_chunks;
3688 	struct wmi_tlv *tlv;
3689 	size_t ret, len;
3690 	void *ptr;
3691 	u32 hw_mode_len = 0;
3692 	u16 idx;
3693 
3694 	if (arg->hw_mode_id != WMI_HOST_HW_MODE_MAX)
3695 		hw_mode_len = sizeof(*hw_mode) + TLV_HDR_SIZE +
3696 			      (arg->num_band_to_mac * sizeof(*band_to_mac));
3697 
3698 	len = sizeof(*cmd) + TLV_HDR_SIZE + sizeof(*cfg) + hw_mode_len +
3699 	      (arg->num_mem_chunks ? (sizeof(*host_mem_chunks) * WMI_MAX_MEM_REQS) : 0);
3700 
3701 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
3702 	if (!skb)
3703 		return -ENOMEM;
3704 
3705 	cmd = (struct wmi_init_cmd *)skb->data;
3706 
3707 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_INIT_CMD,
3708 						 sizeof(*cmd));
3709 
3710 	ptr = skb->data + sizeof(*cmd);
3711 	cfg = ptr;
3712 
3713 	ath12k_wmi_copy_resource_config(cfg, &arg->res_cfg);
3714 
3715 	cfg->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_RESOURCE_CONFIG,
3716 						 sizeof(*cfg));
3717 
3718 	ptr += sizeof(*cfg);
3719 	host_mem_chunks = ptr + TLV_HDR_SIZE;
3720 	len = sizeof(struct ath12k_wmi_host_mem_chunk_params);
3721 
3722 	for (idx = 0; idx < arg->num_mem_chunks; ++idx) {
3723 		host_mem_chunks[idx].tlv_header =
3724 			ath12k_wmi_tlv_hdr(WMI_TAG_WLAN_HOST_MEMORY_CHUNK,
3725 					   len);
3726 
3727 		host_mem_chunks[idx].ptr = cpu_to_le32(arg->mem_chunks[idx].paddr);
3728 		host_mem_chunks[idx].size = cpu_to_le32(arg->mem_chunks[idx].len);
3729 		host_mem_chunks[idx].req_id = cpu_to_le32(arg->mem_chunks[idx].req_id);
3730 
3731 		ath12k_dbg(ab, ATH12K_DBG_WMI,
3732 			   "WMI host mem chunk req_id %d paddr 0x%llx len %d\n",
3733 			   arg->mem_chunks[idx].req_id,
3734 			   (u64)arg->mem_chunks[idx].paddr,
3735 			   arg->mem_chunks[idx].len);
3736 	}
3737 	cmd->num_host_mem_chunks = cpu_to_le32(arg->num_mem_chunks);
3738 	len = sizeof(struct ath12k_wmi_host_mem_chunk_params) * arg->num_mem_chunks;
3739 
3740 	/* num_mem_chunks is zero */
3741 	tlv = ptr;
3742 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT, len);
3743 	ptr += TLV_HDR_SIZE + len;
3744 
3745 	if (arg->hw_mode_id != WMI_HOST_HW_MODE_MAX) {
3746 		hw_mode = (struct ath12k_wmi_pdev_set_hw_mode_cmd *)ptr;
3747 		hw_mode->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PDEV_SET_HW_MODE_CMD,
3748 							     sizeof(*hw_mode));
3749 
3750 		hw_mode->hw_mode_index = cpu_to_le32(arg->hw_mode_id);
3751 		hw_mode->num_band_to_mac = cpu_to_le32(arg->num_band_to_mac);
3752 
3753 		ptr += sizeof(*hw_mode);
3754 
3755 		len = arg->num_band_to_mac * sizeof(*band_to_mac);
3756 		tlv = ptr;
3757 		tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT, len);
3758 
3759 		ptr += TLV_HDR_SIZE;
3760 		len = sizeof(*band_to_mac);
3761 
3762 		for (idx = 0; idx < arg->num_band_to_mac; idx++) {
3763 			band_to_mac = (void *)ptr;
3764 
3765 			band_to_mac->tlv_header =
3766 				ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PDEV_BAND_TO_MAC,
3767 						       len);
3768 			band_to_mac->pdev_id = cpu_to_le32(arg->band_to_mac[idx].pdev_id);
3769 			band_to_mac->start_freq =
3770 				cpu_to_le32(arg->band_to_mac[idx].start_freq);
3771 			band_to_mac->end_freq =
3772 				cpu_to_le32(arg->band_to_mac[idx].end_freq);
3773 			ptr += sizeof(*band_to_mac);
3774 		}
3775 	}
3776 
3777 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_INIT_CMDID);
3778 	if (ret) {
3779 		ath12k_warn(ab, "failed to send WMI_INIT_CMDID\n");
3780 		dev_kfree_skb(skb);
3781 	}
3782 
3783 	return ret;
3784 }
3785 
3786 int ath12k_wmi_pdev_lro_cfg(struct ath12k *ar,
3787 			    int pdev_id)
3788 {
3789 	struct ath12k_wmi_pdev_lro_config_cmd *cmd;
3790 	struct sk_buff *skb;
3791 	int ret;
3792 
3793 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
3794 	if (!skb)
3795 		return -ENOMEM;
3796 
3797 	cmd = (struct ath12k_wmi_pdev_lro_config_cmd *)skb->data;
3798 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_LRO_INFO_CMD,
3799 						 sizeof(*cmd));
3800 
3801 	get_random_bytes(cmd->th_4, sizeof(cmd->th_4));
3802 	get_random_bytes(cmd->th_6, sizeof(cmd->th_6));
3803 
3804 	cmd->pdev_id = cpu_to_le32(pdev_id);
3805 
3806 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
3807 		   "WMI lro cfg cmd pdev_id 0x%x\n", pdev_id);
3808 
3809 	ret = ath12k_wmi_cmd_send(ar->wmi, skb, WMI_LRO_CONFIG_CMDID);
3810 	if (ret) {
3811 		ath12k_warn(ar->ab,
3812 			    "failed to send lro cfg req wmi cmd\n");
3813 		goto err;
3814 	}
3815 
3816 	return 0;
3817 err:
3818 	dev_kfree_skb(skb);
3819 	return ret;
3820 }
3821 
3822 int ath12k_wmi_wait_for_service_ready(struct ath12k_base *ab)
3823 {
3824 	unsigned long time_left;
3825 
3826 	time_left = wait_for_completion_timeout(&ab->wmi_ab.service_ready,
3827 						WMI_SERVICE_READY_TIMEOUT_HZ);
3828 	if (!time_left)
3829 		return -ETIMEDOUT;
3830 
3831 	return 0;
3832 }
3833 
3834 int ath12k_wmi_wait_for_unified_ready(struct ath12k_base *ab)
3835 {
3836 	unsigned long time_left;
3837 
3838 	time_left = wait_for_completion_timeout(&ab->wmi_ab.unified_ready,
3839 						WMI_SERVICE_READY_TIMEOUT_HZ);
3840 	if (!time_left)
3841 		return -ETIMEDOUT;
3842 
3843 	return 0;
3844 }
3845 
3846 int ath12k_wmi_set_hw_mode(struct ath12k_base *ab,
3847 			   enum wmi_host_hw_mode_config_type mode)
3848 {
3849 	struct ath12k_wmi_pdev_set_hw_mode_cmd *cmd;
3850 	struct sk_buff *skb;
3851 	struct ath12k_wmi_base *wmi_ab = &ab->wmi_ab;
3852 	int len;
3853 	int ret;
3854 
3855 	len = sizeof(*cmd);
3856 
3857 	skb = ath12k_wmi_alloc_skb(wmi_ab, len);
3858 	if (!skb)
3859 		return -ENOMEM;
3860 
3861 	cmd = (struct ath12k_wmi_pdev_set_hw_mode_cmd *)skb->data;
3862 
3863 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_PDEV_SET_HW_MODE_CMD,
3864 						 sizeof(*cmd));
3865 
3866 	cmd->pdev_id = WMI_PDEV_ID_SOC;
3867 	cmd->hw_mode_index = cpu_to_le32(mode);
3868 
3869 	ret = ath12k_wmi_cmd_send(&wmi_ab->wmi[0], skb, WMI_PDEV_SET_HW_MODE_CMDID);
3870 	if (ret) {
3871 		ath12k_warn(ab, "failed to send WMI_PDEV_SET_HW_MODE_CMDID\n");
3872 		dev_kfree_skb(skb);
3873 	}
3874 
3875 	return ret;
3876 }
3877 
3878 int ath12k_wmi_cmd_init(struct ath12k_base *ab)
3879 {
3880 	struct ath12k_wmi_base *wmi_ab = &ab->wmi_ab;
3881 	struct ath12k_wmi_init_cmd_arg arg = {};
3882 
3883 	if (test_bit(WMI_TLV_SERVICE_REG_CC_EXT_EVENT_SUPPORT,
3884 		     ab->wmi_ab.svc_map))
3885 		arg.res_cfg.is_reg_cc_ext_event_supported = true;
3886 
3887 	ab->hw_params->wmi_init(ab, &arg.res_cfg);
3888 	ab->wow.wmi_conf_rx_decap_mode = arg.res_cfg.rx_decap_mode;
3889 
3890 	arg.num_mem_chunks = wmi_ab->num_mem_chunks;
3891 	arg.hw_mode_id = wmi_ab->preferred_hw_mode;
3892 	arg.mem_chunks = wmi_ab->mem_chunks;
3893 
3894 	if (ab->hw_params->single_pdev_only)
3895 		arg.hw_mode_id = WMI_HOST_HW_MODE_MAX;
3896 
3897 	arg.num_band_to_mac = ab->num_radios;
3898 	ath12k_fill_band_to_mac_param(ab, arg.band_to_mac);
3899 
3900 	ab->dp.peer_metadata_ver = arg.res_cfg.peer_metadata_ver;
3901 
3902 	return ath12k_init_cmd_send(&wmi_ab->wmi[0], &arg);
3903 }
3904 
3905 int ath12k_wmi_vdev_spectral_conf(struct ath12k *ar,
3906 				  struct ath12k_wmi_vdev_spectral_conf_arg *arg)
3907 {
3908 	struct ath12k_wmi_vdev_spectral_conf_cmd *cmd;
3909 	struct sk_buff *skb;
3910 	int ret;
3911 
3912 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
3913 	if (!skb)
3914 		return -ENOMEM;
3915 
3916 	cmd = (struct ath12k_wmi_vdev_spectral_conf_cmd *)skb->data;
3917 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_SPECTRAL_CONFIGURE_CMD,
3918 						 sizeof(*cmd));
3919 	cmd->vdev_id = cpu_to_le32(arg->vdev_id);
3920 	cmd->scan_count = cpu_to_le32(arg->scan_count);
3921 	cmd->scan_period = cpu_to_le32(arg->scan_period);
3922 	cmd->scan_priority = cpu_to_le32(arg->scan_priority);
3923 	cmd->scan_fft_size = cpu_to_le32(arg->scan_fft_size);
3924 	cmd->scan_gc_ena = cpu_to_le32(arg->scan_gc_ena);
3925 	cmd->scan_restart_ena = cpu_to_le32(arg->scan_restart_ena);
3926 	cmd->scan_noise_floor_ref = cpu_to_le32(arg->scan_noise_floor_ref);
3927 	cmd->scan_init_delay = cpu_to_le32(arg->scan_init_delay);
3928 	cmd->scan_nb_tone_thr = cpu_to_le32(arg->scan_nb_tone_thr);
3929 	cmd->scan_str_bin_thr = cpu_to_le32(arg->scan_str_bin_thr);
3930 	cmd->scan_wb_rpt_mode = cpu_to_le32(arg->scan_wb_rpt_mode);
3931 	cmd->scan_rssi_rpt_mode = cpu_to_le32(arg->scan_rssi_rpt_mode);
3932 	cmd->scan_rssi_thr = cpu_to_le32(arg->scan_rssi_thr);
3933 	cmd->scan_pwr_format = cpu_to_le32(arg->scan_pwr_format);
3934 	cmd->scan_rpt_mode = cpu_to_le32(arg->scan_rpt_mode);
3935 	cmd->scan_bin_scale = cpu_to_le32(arg->scan_bin_scale);
3936 	cmd->scan_dbm_adj = cpu_to_le32(arg->scan_dbm_adj);
3937 	cmd->scan_chn_mask = cpu_to_le32(arg->scan_chn_mask);
3938 
3939 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
3940 		   "WMI spectral scan config cmd vdev_id 0x%x\n",
3941 		   arg->vdev_id);
3942 
3943 	ret = ath12k_wmi_cmd_send(ar->wmi, skb,
3944 				  WMI_VDEV_SPECTRAL_SCAN_CONFIGURE_CMDID);
3945 	if (ret) {
3946 		ath12k_warn(ar->ab,
3947 			    "failed to send spectral scan config wmi cmd\n");
3948 		goto err;
3949 	}
3950 
3951 	return 0;
3952 err:
3953 	dev_kfree_skb(skb);
3954 	return ret;
3955 }
3956 
3957 int ath12k_wmi_vdev_spectral_enable(struct ath12k *ar, u32 vdev_id,
3958 				    u32 trigger, u32 enable)
3959 {
3960 	struct ath12k_wmi_vdev_spectral_enable_cmd *cmd;
3961 	struct sk_buff *skb;
3962 	int ret;
3963 
3964 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
3965 	if (!skb)
3966 		return -ENOMEM;
3967 
3968 	cmd = (struct ath12k_wmi_vdev_spectral_enable_cmd *)skb->data;
3969 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_VDEV_SPECTRAL_ENABLE_CMD,
3970 						 sizeof(*cmd));
3971 
3972 	cmd->vdev_id = cpu_to_le32(vdev_id);
3973 	cmd->trigger_cmd = cpu_to_le32(trigger);
3974 	cmd->enable_cmd = cpu_to_le32(enable);
3975 
3976 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
3977 		   "WMI spectral enable cmd vdev id 0x%x\n",
3978 		   vdev_id);
3979 
3980 	ret = ath12k_wmi_cmd_send(ar->wmi, skb,
3981 				  WMI_VDEV_SPECTRAL_SCAN_ENABLE_CMDID);
3982 	if (ret) {
3983 		ath12k_warn(ar->ab,
3984 			    "failed to send spectral enable wmi cmd\n");
3985 		goto err;
3986 	}
3987 
3988 	return 0;
3989 err:
3990 	dev_kfree_skb(skb);
3991 	return ret;
3992 }
3993 
3994 int ath12k_wmi_pdev_dma_ring_cfg(struct ath12k *ar,
3995 				 struct ath12k_wmi_pdev_dma_ring_cfg_arg *arg)
3996 {
3997 	struct ath12k_wmi_pdev_dma_ring_cfg_req_cmd *cmd;
3998 	struct sk_buff *skb;
3999 	int ret;
4000 
4001 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, sizeof(*cmd));
4002 	if (!skb)
4003 		return -ENOMEM;
4004 
4005 	cmd = (struct ath12k_wmi_pdev_dma_ring_cfg_req_cmd *)skb->data;
4006 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_DMA_RING_CFG_REQ,
4007 						 sizeof(*cmd));
4008 
4009 	cmd->pdev_id = cpu_to_le32(arg->pdev_id);
4010 	cmd->module_id = cpu_to_le32(arg->module_id);
4011 	cmd->base_paddr_lo = cpu_to_le32(arg->base_paddr_lo);
4012 	cmd->base_paddr_hi = cpu_to_le32(arg->base_paddr_hi);
4013 	cmd->head_idx_paddr_lo = cpu_to_le32(arg->head_idx_paddr_lo);
4014 	cmd->head_idx_paddr_hi = cpu_to_le32(arg->head_idx_paddr_hi);
4015 	cmd->tail_idx_paddr_lo = cpu_to_le32(arg->tail_idx_paddr_lo);
4016 	cmd->tail_idx_paddr_hi = cpu_to_le32(arg->tail_idx_paddr_hi);
4017 	cmd->num_elems = cpu_to_le32(arg->num_elems);
4018 	cmd->buf_size = cpu_to_le32(arg->buf_size);
4019 	cmd->num_resp_per_event = cpu_to_le32(arg->num_resp_per_event);
4020 	cmd->event_timeout_ms = cpu_to_le32(arg->event_timeout_ms);
4021 
4022 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
4023 		   "WMI DMA ring cfg req cmd pdev_id 0x%x\n",
4024 		   arg->pdev_id);
4025 
4026 	ret = ath12k_wmi_cmd_send(ar->wmi, skb,
4027 				  WMI_PDEV_DMA_RING_CFG_REQ_CMDID);
4028 	if (ret) {
4029 		ath12k_warn(ar->ab,
4030 			    "failed to send dma ring cfg req wmi cmd\n");
4031 		goto err;
4032 	}
4033 
4034 	return 0;
4035 err:
4036 	dev_kfree_skb(skb);
4037 	return ret;
4038 }
4039 
4040 static int ath12k_wmi_dma_buf_entry_parse(struct ath12k_base *soc,
4041 					  u16 tag, u16 len,
4042 					  const void *ptr, void *data)
4043 {
4044 	struct ath12k_wmi_dma_buf_release_arg *arg = data;
4045 
4046 	if (tag != WMI_TAG_DMA_BUF_RELEASE_ENTRY)
4047 		return -EPROTO;
4048 
4049 	if (arg->num_buf_entry >= le32_to_cpu(arg->fixed.num_buf_release_entry))
4050 		return -ENOBUFS;
4051 
4052 	arg->num_buf_entry++;
4053 	return 0;
4054 }
4055 
4056 static int ath12k_wmi_dma_buf_meta_parse(struct ath12k_base *soc,
4057 					 u16 tag, u16 len,
4058 					 const void *ptr, void *data)
4059 {
4060 	struct ath12k_wmi_dma_buf_release_arg *arg = data;
4061 
4062 	if (tag != WMI_TAG_DMA_BUF_RELEASE_SPECTRAL_META_DATA)
4063 		return -EPROTO;
4064 
4065 	if (arg->num_meta >= le32_to_cpu(arg->fixed.num_meta_data_entry))
4066 		return -ENOBUFS;
4067 
4068 	arg->num_meta++;
4069 
4070 	return 0;
4071 }
4072 
4073 static int ath12k_wmi_dma_buf_parse(struct ath12k_base *ab,
4074 				    u16 tag, u16 len,
4075 				    const void *ptr, void *data)
4076 {
4077 	struct ath12k_wmi_dma_buf_release_arg *arg = data;
4078 	const struct ath12k_wmi_dma_buf_release_fixed_params *fixed;
4079 	u32 pdev_id;
4080 	int ret;
4081 
4082 	switch (tag) {
4083 	case WMI_TAG_DMA_BUF_RELEASE:
4084 		fixed = ptr;
4085 		arg->fixed = *fixed;
4086 		pdev_id = DP_HW2SW_MACID(le32_to_cpu(fixed->pdev_id));
4087 		arg->fixed.pdev_id = cpu_to_le32(pdev_id);
4088 		break;
4089 	case WMI_TAG_ARRAY_STRUCT:
4090 		if (!arg->buf_entry_done) {
4091 			arg->num_buf_entry = 0;
4092 			arg->buf_entry = ptr;
4093 
4094 			ret = ath12k_wmi_tlv_iter(ab, ptr, len,
4095 						  ath12k_wmi_dma_buf_entry_parse,
4096 						  arg);
4097 			if (ret) {
4098 				ath12k_warn(ab, "failed to parse dma buf entry tlv %d\n",
4099 					    ret);
4100 				return ret;
4101 			}
4102 
4103 			arg->buf_entry_done = true;
4104 		} else if (!arg->meta_data_done) {
4105 			arg->num_meta = 0;
4106 			arg->meta_data = ptr;
4107 
4108 			ret = ath12k_wmi_tlv_iter(ab, ptr, len,
4109 						  ath12k_wmi_dma_buf_meta_parse,
4110 						  arg);
4111 			if (ret) {
4112 				ath12k_warn(ab, "failed to parse dma buf meta tlv %d\n",
4113 					    ret);
4114 				return ret;
4115 			}
4116 
4117 			arg->meta_data_done = true;
4118 		}
4119 		break;
4120 	default:
4121 		break;
4122 	}
4123 	return 0;
4124 }
4125 
4126 static void ath12k_wmi_pdev_dma_ring_buf_release_event(struct ath12k_base *ab,
4127 						       struct sk_buff *skb)
4128 {
4129 	struct ath12k_wmi_dma_buf_release_arg arg = {};
4130 	struct ath12k_dbring_buf_release_event param;
4131 	int ret;
4132 
4133 	ret = ath12k_wmi_tlv_iter(ab, skb->data, skb->len,
4134 				  ath12k_wmi_dma_buf_parse,
4135 				  &arg);
4136 	if (ret) {
4137 		ath12k_warn(ab, "failed to parse dma buf release tlv %d\n", ret);
4138 		return;
4139 	}
4140 
4141 	param.fixed = arg.fixed;
4142 	param.buf_entry = arg.buf_entry;
4143 	param.num_buf_entry = arg.num_buf_entry;
4144 	param.meta_data = arg.meta_data;
4145 	param.num_meta = arg.num_meta;
4146 
4147 	ret = ath12k_dbring_buffer_release_event(ab, &param);
4148 	if (ret) {
4149 		ath12k_warn(ab, "failed to handle dma buf release event %d\n", ret);
4150 		return;
4151 	}
4152 }
4153 
4154 static int ath12k_wmi_hw_mode_caps_parse(struct ath12k_base *soc,
4155 					 u16 tag, u16 len,
4156 					 const void *ptr, void *data)
4157 {
4158 	struct ath12k_wmi_svc_rdy_ext_parse *svc_rdy_ext = data;
4159 	struct ath12k_wmi_hw_mode_cap_params *hw_mode_cap;
4160 	u32 phy_map = 0;
4161 
4162 	if (tag != WMI_TAG_HW_MODE_CAPABILITIES)
4163 		return -EPROTO;
4164 
4165 	if (svc_rdy_ext->n_hw_mode_caps >= svc_rdy_ext->arg.num_hw_modes)
4166 		return -ENOBUFS;
4167 
4168 	hw_mode_cap = container_of(ptr, struct ath12k_wmi_hw_mode_cap_params,
4169 				   hw_mode_id);
4170 	svc_rdy_ext->n_hw_mode_caps++;
4171 
4172 	phy_map = le32_to_cpu(hw_mode_cap->phy_id_map);
4173 	svc_rdy_ext->tot_phy_id += fls(phy_map);
4174 
4175 	return 0;
4176 }
4177 
4178 static int ath12k_wmi_hw_mode_caps(struct ath12k_base *soc,
4179 				   u16 len, const void *ptr, void *data)
4180 {
4181 	struct ath12k_wmi_svc_rdy_ext_parse *svc_rdy_ext = data;
4182 	const struct ath12k_wmi_hw_mode_cap_params *hw_mode_caps;
4183 	enum wmi_host_hw_mode_config_type mode, pref;
4184 	u32 i;
4185 	int ret;
4186 
4187 	svc_rdy_ext->n_hw_mode_caps = 0;
4188 	svc_rdy_ext->hw_mode_caps = ptr;
4189 
4190 	ret = ath12k_wmi_tlv_iter(soc, ptr, len,
4191 				  ath12k_wmi_hw_mode_caps_parse,
4192 				  svc_rdy_ext);
4193 	if (ret) {
4194 		ath12k_warn(soc, "failed to parse tlv %d\n", ret);
4195 		return ret;
4196 	}
4197 
4198 	for (i = 0 ; i < svc_rdy_ext->n_hw_mode_caps; i++) {
4199 		hw_mode_caps = &svc_rdy_ext->hw_mode_caps[i];
4200 		mode = le32_to_cpu(hw_mode_caps->hw_mode_id);
4201 
4202 		if (mode >= WMI_HOST_HW_MODE_MAX)
4203 			continue;
4204 
4205 		pref = soc->wmi_ab.preferred_hw_mode;
4206 
4207 		if (ath12k_hw_mode_pri_map[mode] < ath12k_hw_mode_pri_map[pref]) {
4208 			svc_rdy_ext->pref_hw_mode_caps = *hw_mode_caps;
4209 			soc->wmi_ab.preferred_hw_mode = mode;
4210 		}
4211 	}
4212 
4213 	ath12k_dbg(soc, ATH12K_DBG_WMI, "preferred_hw_mode:%d\n",
4214 		   soc->wmi_ab.preferred_hw_mode);
4215 	if (soc->wmi_ab.preferred_hw_mode == WMI_HOST_HW_MODE_MAX)
4216 		return -EINVAL;
4217 
4218 	return 0;
4219 }
4220 
4221 static int ath12k_wmi_mac_phy_caps_parse(struct ath12k_base *soc,
4222 					 u16 tag, u16 len,
4223 					 const void *ptr, void *data)
4224 {
4225 	struct ath12k_wmi_svc_rdy_ext_parse *svc_rdy_ext = data;
4226 
4227 	if (tag != WMI_TAG_MAC_PHY_CAPABILITIES)
4228 		return -EPROTO;
4229 
4230 	if (svc_rdy_ext->n_mac_phy_caps >= svc_rdy_ext->tot_phy_id)
4231 		return -ENOBUFS;
4232 
4233 	len = min_t(u16, len, sizeof(struct ath12k_wmi_mac_phy_caps_params));
4234 	if (!svc_rdy_ext->n_mac_phy_caps) {
4235 		svc_rdy_ext->mac_phy_caps = kzalloc((svc_rdy_ext->tot_phy_id) * len,
4236 						    GFP_ATOMIC);
4237 		if (!svc_rdy_ext->mac_phy_caps)
4238 			return -ENOMEM;
4239 	}
4240 
4241 	memcpy(svc_rdy_ext->mac_phy_caps + svc_rdy_ext->n_mac_phy_caps, ptr, len);
4242 	svc_rdy_ext->n_mac_phy_caps++;
4243 	return 0;
4244 }
4245 
4246 static int ath12k_wmi_ext_hal_reg_caps_parse(struct ath12k_base *soc,
4247 					     u16 tag, u16 len,
4248 					     const void *ptr, void *data)
4249 {
4250 	struct ath12k_wmi_svc_rdy_ext_parse *svc_rdy_ext = data;
4251 
4252 	if (tag != WMI_TAG_HAL_REG_CAPABILITIES_EXT)
4253 		return -EPROTO;
4254 
4255 	if (svc_rdy_ext->n_ext_hal_reg_caps >= svc_rdy_ext->arg.num_phy)
4256 		return -ENOBUFS;
4257 
4258 	svc_rdy_ext->n_ext_hal_reg_caps++;
4259 	return 0;
4260 }
4261 
4262 static int ath12k_wmi_ext_hal_reg_caps(struct ath12k_base *soc,
4263 				       u16 len, const void *ptr, void *data)
4264 {
4265 	struct ath12k_wmi_pdev *wmi_handle = &soc->wmi_ab.wmi[0];
4266 	struct ath12k_wmi_svc_rdy_ext_parse *svc_rdy_ext = data;
4267 	struct ath12k_wmi_hal_reg_capabilities_ext_arg reg_cap;
4268 	int ret;
4269 	u32 i;
4270 
4271 	svc_rdy_ext->n_ext_hal_reg_caps = 0;
4272 	svc_rdy_ext->ext_hal_reg_caps = ptr;
4273 	ret = ath12k_wmi_tlv_iter(soc, ptr, len,
4274 				  ath12k_wmi_ext_hal_reg_caps_parse,
4275 				  svc_rdy_ext);
4276 	if (ret) {
4277 		ath12k_warn(soc, "failed to parse tlv %d\n", ret);
4278 		return ret;
4279 	}
4280 
4281 	for (i = 0; i < svc_rdy_ext->arg.num_phy; i++) {
4282 		ret = ath12k_pull_reg_cap_svc_rdy_ext(wmi_handle,
4283 						      svc_rdy_ext->soc_hal_reg_caps,
4284 						      svc_rdy_ext->ext_hal_reg_caps, i,
4285 						      &reg_cap);
4286 		if (ret) {
4287 			ath12k_warn(soc, "failed to extract reg cap %d\n", i);
4288 			return ret;
4289 		}
4290 
4291 		if (reg_cap.phy_id >= MAX_RADIOS) {
4292 			ath12k_warn(soc, "unexpected phy id %u\n", reg_cap.phy_id);
4293 			return -EINVAL;
4294 		}
4295 
4296 		soc->hal_reg_cap[reg_cap.phy_id] = reg_cap;
4297 	}
4298 	return 0;
4299 }
4300 
4301 static int ath12k_wmi_ext_soc_hal_reg_caps_parse(struct ath12k_base *soc,
4302 						 u16 len, const void *ptr,
4303 						 void *data)
4304 {
4305 	struct ath12k_wmi_pdev *wmi_handle = &soc->wmi_ab.wmi[0];
4306 	struct ath12k_wmi_svc_rdy_ext_parse *svc_rdy_ext = data;
4307 	u8 hw_mode_id = le32_to_cpu(svc_rdy_ext->pref_hw_mode_caps.hw_mode_id);
4308 	u32 phy_id_map;
4309 	int pdev_index = 0;
4310 	int ret;
4311 
4312 	svc_rdy_ext->soc_hal_reg_caps = ptr;
4313 	svc_rdy_ext->arg.num_phy = le32_to_cpu(svc_rdy_ext->soc_hal_reg_caps->num_phy);
4314 
4315 	soc->num_radios = 0;
4316 	phy_id_map = le32_to_cpu(svc_rdy_ext->pref_hw_mode_caps.phy_id_map);
4317 	soc->fw_pdev_count = 0;
4318 
4319 	while (phy_id_map && soc->num_radios < MAX_RADIOS) {
4320 		ret = ath12k_pull_mac_phy_cap_svc_ready_ext(wmi_handle,
4321 							    svc_rdy_ext,
4322 							    hw_mode_id, soc->num_radios,
4323 							    &soc->pdevs[pdev_index]);
4324 		if (ret) {
4325 			ath12k_warn(soc, "failed to extract mac caps, idx :%d\n",
4326 				    soc->num_radios);
4327 			return ret;
4328 		}
4329 
4330 		soc->num_radios++;
4331 
4332 		/* For single_pdev_only targets,
4333 		 * save mac_phy capability in the same pdev
4334 		 */
4335 		if (soc->hw_params->single_pdev_only)
4336 			pdev_index = 0;
4337 		else
4338 			pdev_index = soc->num_radios;
4339 
4340 		/* TODO: mac_phy_cap prints */
4341 		phy_id_map >>= 1;
4342 	}
4343 
4344 	if (soc->hw_params->single_pdev_only) {
4345 		soc->num_radios = 1;
4346 		soc->pdevs[0].pdev_id = 0;
4347 	}
4348 
4349 	return 0;
4350 }
4351 
4352 static int ath12k_wmi_dma_ring_caps_parse(struct ath12k_base *soc,
4353 					  u16 tag, u16 len,
4354 					  const void *ptr, void *data)
4355 {
4356 	struct ath12k_wmi_dma_ring_caps_parse *parse = data;
4357 
4358 	if (tag != WMI_TAG_DMA_RING_CAPABILITIES)
4359 		return -EPROTO;
4360 
4361 	parse->n_dma_ring_caps++;
4362 	return 0;
4363 }
4364 
4365 static int ath12k_wmi_alloc_dbring_caps(struct ath12k_base *ab,
4366 					u32 num_cap)
4367 {
4368 	size_t sz;
4369 	void *ptr;
4370 
4371 	sz = num_cap * sizeof(struct ath12k_dbring_cap);
4372 	ptr = kzalloc(sz, GFP_ATOMIC);
4373 	if (!ptr)
4374 		return -ENOMEM;
4375 
4376 	ab->db_caps = ptr;
4377 	ab->num_db_cap = num_cap;
4378 
4379 	return 0;
4380 }
4381 
4382 static void ath12k_wmi_free_dbring_caps(struct ath12k_base *ab)
4383 {
4384 	kfree(ab->db_caps);
4385 	ab->db_caps = NULL;
4386 	ab->num_db_cap = 0;
4387 }
4388 
4389 static int ath12k_wmi_dma_ring_caps(struct ath12k_base *ab,
4390 				    u16 len, const void *ptr, void *data)
4391 {
4392 	struct ath12k_wmi_dma_ring_caps_parse *dma_caps_parse = data;
4393 	struct ath12k_wmi_dma_ring_caps_params *dma_caps;
4394 	struct ath12k_dbring_cap *dir_buff_caps;
4395 	int ret;
4396 	u32 i;
4397 
4398 	dma_caps_parse->n_dma_ring_caps = 0;
4399 	dma_caps = (struct ath12k_wmi_dma_ring_caps_params *)ptr;
4400 	ret = ath12k_wmi_tlv_iter(ab, ptr, len,
4401 				  ath12k_wmi_dma_ring_caps_parse,
4402 				  dma_caps_parse);
4403 	if (ret) {
4404 		ath12k_warn(ab, "failed to parse dma ring caps tlv %d\n", ret);
4405 		return ret;
4406 	}
4407 
4408 	if (!dma_caps_parse->n_dma_ring_caps)
4409 		return 0;
4410 
4411 	if (ab->num_db_cap) {
4412 		ath12k_warn(ab, "Already processed, so ignoring dma ring caps\n");
4413 		return 0;
4414 	}
4415 
4416 	ret = ath12k_wmi_alloc_dbring_caps(ab, dma_caps_parse->n_dma_ring_caps);
4417 	if (ret)
4418 		return ret;
4419 
4420 	dir_buff_caps = ab->db_caps;
4421 	for (i = 0; i < dma_caps_parse->n_dma_ring_caps; i++) {
4422 		if (le32_to_cpu(dma_caps[i].module_id) >= WMI_DIRECT_BUF_MAX) {
4423 			ath12k_warn(ab, "Invalid module id %d\n",
4424 				    le32_to_cpu(dma_caps[i].module_id));
4425 			ret = -EINVAL;
4426 			goto free_dir_buff;
4427 		}
4428 
4429 		dir_buff_caps[i].id = le32_to_cpu(dma_caps[i].module_id);
4430 		dir_buff_caps[i].pdev_id =
4431 			DP_HW2SW_MACID(le32_to_cpu(dma_caps[i].pdev_id));
4432 		dir_buff_caps[i].min_elem = le32_to_cpu(dma_caps[i].min_elem);
4433 		dir_buff_caps[i].min_buf_sz = le32_to_cpu(dma_caps[i].min_buf_sz);
4434 		dir_buff_caps[i].min_buf_align = le32_to_cpu(dma_caps[i].min_buf_align);
4435 	}
4436 
4437 	return 0;
4438 
4439 free_dir_buff:
4440 	ath12k_wmi_free_dbring_caps(ab);
4441 	return ret;
4442 }
4443 
4444 static int ath12k_wmi_svc_rdy_ext_parse(struct ath12k_base *ab,
4445 					u16 tag, u16 len,
4446 					const void *ptr, void *data)
4447 {
4448 	struct ath12k_wmi_pdev *wmi_handle = &ab->wmi_ab.wmi[0];
4449 	struct ath12k_wmi_svc_rdy_ext_parse *svc_rdy_ext = data;
4450 	int ret;
4451 
4452 	switch (tag) {
4453 	case WMI_TAG_SERVICE_READY_EXT_EVENT:
4454 		ret = ath12k_pull_svc_ready_ext(wmi_handle, ptr,
4455 						&svc_rdy_ext->arg);
4456 		if (ret) {
4457 			ath12k_warn(ab, "unable to extract ext params\n");
4458 			return ret;
4459 		}
4460 		break;
4461 
4462 	case WMI_TAG_SOC_MAC_PHY_HW_MODE_CAPS:
4463 		svc_rdy_ext->hw_caps = ptr;
4464 		svc_rdy_ext->arg.num_hw_modes =
4465 			le32_to_cpu(svc_rdy_ext->hw_caps->num_hw_modes);
4466 		break;
4467 
4468 	case WMI_TAG_SOC_HAL_REG_CAPABILITIES:
4469 		ret = ath12k_wmi_ext_soc_hal_reg_caps_parse(ab, len, ptr,
4470 							    svc_rdy_ext);
4471 		if (ret)
4472 			return ret;
4473 		break;
4474 
4475 	case WMI_TAG_ARRAY_STRUCT:
4476 		if (!svc_rdy_ext->hw_mode_done) {
4477 			ret = ath12k_wmi_hw_mode_caps(ab, len, ptr, svc_rdy_ext);
4478 			if (ret)
4479 				return ret;
4480 
4481 			svc_rdy_ext->hw_mode_done = true;
4482 		} else if (!svc_rdy_ext->mac_phy_done) {
4483 			svc_rdy_ext->n_mac_phy_caps = 0;
4484 			ret = ath12k_wmi_tlv_iter(ab, ptr, len,
4485 						  ath12k_wmi_mac_phy_caps_parse,
4486 						  svc_rdy_ext);
4487 			if (ret) {
4488 				ath12k_warn(ab, "failed to parse tlv %d\n", ret);
4489 				return ret;
4490 			}
4491 
4492 			svc_rdy_ext->mac_phy_done = true;
4493 		} else if (!svc_rdy_ext->ext_hal_reg_done) {
4494 			ret = ath12k_wmi_ext_hal_reg_caps(ab, len, ptr, svc_rdy_ext);
4495 			if (ret)
4496 				return ret;
4497 
4498 			svc_rdy_ext->ext_hal_reg_done = true;
4499 		} else if (!svc_rdy_ext->mac_phy_chainmask_combo_done) {
4500 			svc_rdy_ext->mac_phy_chainmask_combo_done = true;
4501 		} else if (!svc_rdy_ext->mac_phy_chainmask_cap_done) {
4502 			svc_rdy_ext->mac_phy_chainmask_cap_done = true;
4503 		} else if (!svc_rdy_ext->oem_dma_ring_cap_done) {
4504 			svc_rdy_ext->oem_dma_ring_cap_done = true;
4505 		} else if (!svc_rdy_ext->dma_ring_cap_done) {
4506 			ret = ath12k_wmi_dma_ring_caps(ab, len, ptr,
4507 						       &svc_rdy_ext->dma_caps_parse);
4508 			if (ret)
4509 				return ret;
4510 
4511 			svc_rdy_ext->dma_ring_cap_done = true;
4512 		}
4513 		break;
4514 
4515 	default:
4516 		break;
4517 	}
4518 	return 0;
4519 }
4520 
4521 static int ath12k_service_ready_ext_event(struct ath12k_base *ab,
4522 					  struct sk_buff *skb)
4523 {
4524 	struct ath12k_wmi_svc_rdy_ext_parse svc_rdy_ext = { };
4525 	int ret;
4526 
4527 	ret = ath12k_wmi_tlv_iter(ab, skb->data, skb->len,
4528 				  ath12k_wmi_svc_rdy_ext_parse,
4529 				  &svc_rdy_ext);
4530 	if (ret) {
4531 		ath12k_warn(ab, "failed to parse tlv %d\n", ret);
4532 		goto err;
4533 	}
4534 
4535 	if (!test_bit(WMI_TLV_SERVICE_EXT2_MSG, ab->wmi_ab.svc_map))
4536 		complete(&ab->wmi_ab.service_ready);
4537 
4538 	kfree(svc_rdy_ext.mac_phy_caps);
4539 	return 0;
4540 
4541 err:
4542 	ath12k_wmi_free_dbring_caps(ab);
4543 	return ret;
4544 }
4545 
4546 static int ath12k_pull_svc_ready_ext2(struct ath12k_wmi_pdev *wmi_handle,
4547 				      const void *ptr,
4548 				      struct ath12k_wmi_svc_rdy_ext2_arg *arg)
4549 {
4550 	const struct wmi_service_ready_ext2_event *ev = ptr;
4551 
4552 	if (!ev)
4553 		return -EINVAL;
4554 
4555 	arg->reg_db_version = le32_to_cpu(ev->reg_db_version);
4556 	arg->hw_min_max_tx_power_2ghz = le32_to_cpu(ev->hw_min_max_tx_power_2ghz);
4557 	arg->hw_min_max_tx_power_5ghz = le32_to_cpu(ev->hw_min_max_tx_power_5ghz);
4558 	arg->chwidth_num_peer_caps = le32_to_cpu(ev->chwidth_num_peer_caps);
4559 	arg->preamble_puncture_bw = le32_to_cpu(ev->preamble_puncture_bw);
4560 	arg->max_user_per_ppdu_ofdma = le32_to_cpu(ev->max_user_per_ppdu_ofdma);
4561 	arg->max_user_per_ppdu_mumimo = le32_to_cpu(ev->max_user_per_ppdu_mumimo);
4562 	arg->target_cap_flags = le32_to_cpu(ev->target_cap_flags);
4563 	return 0;
4564 }
4565 
4566 static void ath12k_wmi_eht_caps_parse(struct ath12k_pdev *pdev, u32 band,
4567 				      const __le32 cap_mac_info[],
4568 				      const __le32 cap_phy_info[],
4569 				      const __le32 supp_mcs[],
4570 				      const struct ath12k_wmi_ppe_threshold_params *ppet,
4571 				       __le32 cap_info_internal)
4572 {
4573 	struct ath12k_band_cap *cap_band = &pdev->cap.band[band];
4574 	u32 support_320mhz;
4575 	u8 i;
4576 
4577 	if (band == NL80211_BAND_6GHZ)
4578 		support_320mhz = cap_band->eht_cap_phy_info[0] &
4579 					IEEE80211_EHT_PHY_CAP0_320MHZ_IN_6GHZ;
4580 
4581 	for (i = 0; i < WMI_MAX_EHTCAP_MAC_SIZE; i++)
4582 		cap_band->eht_cap_mac_info[i] = le32_to_cpu(cap_mac_info[i]);
4583 
4584 	for (i = 0; i < WMI_MAX_EHTCAP_PHY_SIZE; i++)
4585 		cap_band->eht_cap_phy_info[i] = le32_to_cpu(cap_phy_info[i]);
4586 
4587 	if (band == NL80211_BAND_6GHZ)
4588 		cap_band->eht_cap_phy_info[0] |= support_320mhz;
4589 
4590 	cap_band->eht_mcs_20_only = le32_to_cpu(supp_mcs[0]);
4591 	cap_band->eht_mcs_80 = le32_to_cpu(supp_mcs[1]);
4592 	if (band != NL80211_BAND_2GHZ) {
4593 		cap_band->eht_mcs_160 = le32_to_cpu(supp_mcs[2]);
4594 		cap_band->eht_mcs_320 = le32_to_cpu(supp_mcs[3]);
4595 	}
4596 
4597 	cap_band->eht_ppet.numss_m1 = le32_to_cpu(ppet->numss_m1);
4598 	cap_band->eht_ppet.ru_bit_mask = le32_to_cpu(ppet->ru_info);
4599 	for (i = 0; i < WMI_MAX_NUM_SS; i++)
4600 		cap_band->eht_ppet.ppet16_ppet8_ru3_ru0[i] =
4601 			le32_to_cpu(ppet->ppet16_ppet8_ru3_ru0[i]);
4602 
4603 	cap_band->eht_cap_info_internal = le32_to_cpu(cap_info_internal);
4604 }
4605 
4606 static int
4607 ath12k_wmi_tlv_mac_phy_caps_ext_parse(struct ath12k_base *ab,
4608 				      const struct ath12k_wmi_caps_ext_params *caps,
4609 				      struct ath12k_pdev *pdev)
4610 {
4611 	struct ath12k_band_cap *cap_band;
4612 	u32 bands, support_320mhz;
4613 	int i;
4614 
4615 	if (ab->hw_params->single_pdev_only) {
4616 		if (caps->hw_mode_id == WMI_HOST_HW_MODE_SINGLE) {
4617 			support_320mhz = le32_to_cpu(caps->eht_cap_phy_info_5ghz[0]) &
4618 				IEEE80211_EHT_PHY_CAP0_320MHZ_IN_6GHZ;
4619 			cap_band = &pdev->cap.band[NL80211_BAND_6GHZ];
4620 			cap_band->eht_cap_phy_info[0] |= support_320mhz;
4621 			return 0;
4622 		}
4623 
4624 		for (i = 0; i < ab->fw_pdev_count; i++) {
4625 			struct ath12k_fw_pdev *fw_pdev = &ab->fw_pdev[i];
4626 
4627 			if (fw_pdev->pdev_id == ath12k_wmi_caps_ext_get_pdev_id(caps) &&
4628 			    fw_pdev->phy_id == le32_to_cpu(caps->phy_id)) {
4629 				bands = fw_pdev->supported_bands;
4630 				break;
4631 			}
4632 		}
4633 
4634 		if (i == ab->fw_pdev_count)
4635 			return -EINVAL;
4636 	} else {
4637 		bands = pdev->cap.supported_bands;
4638 	}
4639 
4640 	if (bands & WMI_HOST_WLAN_2G_CAP) {
4641 		ath12k_wmi_eht_caps_parse(pdev, NL80211_BAND_2GHZ,
4642 					  caps->eht_cap_mac_info_2ghz,
4643 					  caps->eht_cap_phy_info_2ghz,
4644 					  caps->eht_supp_mcs_ext_2ghz,
4645 					  &caps->eht_ppet_2ghz,
4646 					  caps->eht_cap_info_internal);
4647 	}
4648 
4649 	if (bands & WMI_HOST_WLAN_5G_CAP) {
4650 		ath12k_wmi_eht_caps_parse(pdev, NL80211_BAND_5GHZ,
4651 					  caps->eht_cap_mac_info_5ghz,
4652 					  caps->eht_cap_phy_info_5ghz,
4653 					  caps->eht_supp_mcs_ext_5ghz,
4654 					  &caps->eht_ppet_5ghz,
4655 					  caps->eht_cap_info_internal);
4656 
4657 		ath12k_wmi_eht_caps_parse(pdev, NL80211_BAND_6GHZ,
4658 					  caps->eht_cap_mac_info_5ghz,
4659 					  caps->eht_cap_phy_info_5ghz,
4660 					  caps->eht_supp_mcs_ext_5ghz,
4661 					  &caps->eht_ppet_5ghz,
4662 					  caps->eht_cap_info_internal);
4663 	}
4664 
4665 	pdev->cap.eml_cap = le32_to_cpu(caps->eml_capability);
4666 	pdev->cap.mld_cap = le32_to_cpu(caps->mld_capability);
4667 
4668 	return 0;
4669 }
4670 
4671 static int ath12k_wmi_tlv_mac_phy_caps_ext(struct ath12k_base *ab, u16 tag,
4672 					   u16 len, const void *ptr,
4673 					   void *data)
4674 {
4675 	const struct ath12k_wmi_caps_ext_params *caps = ptr;
4676 	int i = 0, ret;
4677 
4678 	if (tag != WMI_TAG_MAC_PHY_CAPABILITIES_EXT)
4679 		return -EPROTO;
4680 
4681 	if (ab->hw_params->single_pdev_only) {
4682 		if (ab->wmi_ab.preferred_hw_mode != le32_to_cpu(caps->hw_mode_id) &&
4683 		    caps->hw_mode_id != WMI_HOST_HW_MODE_SINGLE)
4684 			return 0;
4685 	} else {
4686 		for (i = 0; i < ab->num_radios; i++) {
4687 			if (ab->pdevs[i].pdev_id ==
4688 			    ath12k_wmi_caps_ext_get_pdev_id(caps))
4689 				break;
4690 		}
4691 
4692 		if (i == ab->num_radios)
4693 			return -EINVAL;
4694 	}
4695 
4696 	ret = ath12k_wmi_tlv_mac_phy_caps_ext_parse(ab, caps, &ab->pdevs[i]);
4697 	if (ret) {
4698 		ath12k_warn(ab,
4699 			    "failed to parse extended MAC PHY capabilities for pdev %d: %d\n",
4700 			    ret, ab->pdevs[i].pdev_id);
4701 		return ret;
4702 	}
4703 
4704 	return 0;
4705 }
4706 
4707 static int ath12k_wmi_svc_rdy_ext2_parse(struct ath12k_base *ab,
4708 					 u16 tag, u16 len,
4709 					 const void *ptr, void *data)
4710 {
4711 	struct ath12k_wmi_pdev *wmi_handle = &ab->wmi_ab.wmi[0];
4712 	struct ath12k_wmi_svc_rdy_ext2_parse *parse = data;
4713 	int ret;
4714 
4715 	switch (tag) {
4716 	case WMI_TAG_SERVICE_READY_EXT2_EVENT:
4717 		ret = ath12k_pull_svc_ready_ext2(wmi_handle, ptr,
4718 						 &parse->arg);
4719 		if (ret) {
4720 			ath12k_warn(ab,
4721 				    "failed to extract wmi service ready ext2 parameters: %d\n",
4722 				    ret);
4723 			return ret;
4724 		}
4725 		break;
4726 
4727 	case WMI_TAG_ARRAY_STRUCT:
4728 		if (!parse->dma_ring_cap_done) {
4729 			ret = ath12k_wmi_dma_ring_caps(ab, len, ptr,
4730 						       &parse->dma_caps_parse);
4731 			if (ret)
4732 				return ret;
4733 
4734 			parse->dma_ring_cap_done = true;
4735 		} else if (!parse->spectral_bin_scaling_done) {
4736 			/* TODO: This is a place-holder as WMI tag for
4737 			 * spectral scaling is before
4738 			 * WMI_TAG_MAC_PHY_CAPABILITIES_EXT
4739 			 */
4740 			parse->spectral_bin_scaling_done = true;
4741 		} else if (!parse->mac_phy_caps_ext_done) {
4742 			ret = ath12k_wmi_tlv_iter(ab, ptr, len,
4743 						  ath12k_wmi_tlv_mac_phy_caps_ext,
4744 						  parse);
4745 			if (ret) {
4746 				ath12k_warn(ab, "failed to parse extended MAC PHY capabilities WMI TLV: %d\n",
4747 					    ret);
4748 				return ret;
4749 			}
4750 
4751 			parse->mac_phy_caps_ext_done = true;
4752 		}
4753 		break;
4754 	default:
4755 		break;
4756 	}
4757 
4758 	return 0;
4759 }
4760 
4761 static int ath12k_service_ready_ext2_event(struct ath12k_base *ab,
4762 					   struct sk_buff *skb)
4763 {
4764 	struct ath12k_wmi_svc_rdy_ext2_parse svc_rdy_ext2 = { };
4765 	int ret;
4766 
4767 	ret = ath12k_wmi_tlv_iter(ab, skb->data, skb->len,
4768 				  ath12k_wmi_svc_rdy_ext2_parse,
4769 				  &svc_rdy_ext2);
4770 	if (ret) {
4771 		ath12k_warn(ab, "failed to parse ext2 event tlv %d\n", ret);
4772 		goto err;
4773 	}
4774 
4775 	complete(&ab->wmi_ab.service_ready);
4776 
4777 	return 0;
4778 
4779 err:
4780 	ath12k_wmi_free_dbring_caps(ab);
4781 	return ret;
4782 }
4783 
4784 static int ath12k_pull_vdev_start_resp_tlv(struct ath12k_base *ab, struct sk_buff *skb,
4785 					   struct wmi_vdev_start_resp_event *vdev_rsp)
4786 {
4787 	const void **tb;
4788 	const struct wmi_vdev_start_resp_event *ev;
4789 	int ret;
4790 
4791 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
4792 	if (IS_ERR(tb)) {
4793 		ret = PTR_ERR(tb);
4794 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
4795 		return ret;
4796 	}
4797 
4798 	ev = tb[WMI_TAG_VDEV_START_RESPONSE_EVENT];
4799 	if (!ev) {
4800 		ath12k_warn(ab, "failed to fetch vdev start resp ev");
4801 		kfree(tb);
4802 		return -EPROTO;
4803 	}
4804 
4805 	*vdev_rsp = *ev;
4806 
4807 	kfree(tb);
4808 	return 0;
4809 }
4810 
4811 static struct ath12k_reg_rule
4812 *create_ext_reg_rules_from_wmi(u32 num_reg_rules,
4813 			       struct ath12k_wmi_reg_rule_ext_params *wmi_reg_rule)
4814 {
4815 	struct ath12k_reg_rule *reg_rule_ptr;
4816 	u32 count;
4817 
4818 	reg_rule_ptr = kzalloc((num_reg_rules * sizeof(*reg_rule_ptr)),
4819 			       GFP_ATOMIC);
4820 
4821 	if (!reg_rule_ptr)
4822 		return NULL;
4823 
4824 	for (count = 0; count < num_reg_rules; count++) {
4825 		reg_rule_ptr[count].start_freq =
4826 			le32_get_bits(wmi_reg_rule[count].freq_info,
4827 				      REG_RULE_START_FREQ);
4828 		reg_rule_ptr[count].end_freq =
4829 			le32_get_bits(wmi_reg_rule[count].freq_info,
4830 				      REG_RULE_END_FREQ);
4831 		reg_rule_ptr[count].max_bw =
4832 			le32_get_bits(wmi_reg_rule[count].bw_pwr_info,
4833 				      REG_RULE_MAX_BW);
4834 		reg_rule_ptr[count].reg_power =
4835 			le32_get_bits(wmi_reg_rule[count].bw_pwr_info,
4836 				      REG_RULE_REG_PWR);
4837 		reg_rule_ptr[count].ant_gain =
4838 			le32_get_bits(wmi_reg_rule[count].bw_pwr_info,
4839 				      REG_RULE_ANT_GAIN);
4840 		reg_rule_ptr[count].flags =
4841 			le32_get_bits(wmi_reg_rule[count].flag_info,
4842 				      REG_RULE_FLAGS);
4843 		reg_rule_ptr[count].psd_flag =
4844 			le32_get_bits(wmi_reg_rule[count].psd_power_info,
4845 				      REG_RULE_PSD_INFO);
4846 		reg_rule_ptr[count].psd_eirp =
4847 			le32_get_bits(wmi_reg_rule[count].psd_power_info,
4848 				      REG_RULE_PSD_EIRP);
4849 	}
4850 
4851 	return reg_rule_ptr;
4852 }
4853 
4854 static int ath12k_pull_reg_chan_list_ext_update_ev(struct ath12k_base *ab,
4855 						   struct sk_buff *skb,
4856 						   struct ath12k_reg_info *reg_info)
4857 {
4858 	const void **tb;
4859 	const struct wmi_reg_chan_list_cc_ext_event *ev;
4860 	struct ath12k_wmi_reg_rule_ext_params *ext_wmi_reg_rule;
4861 	u32 num_2g_reg_rules, num_5g_reg_rules;
4862 	u32 num_6g_reg_rules_ap[WMI_REG_CURRENT_MAX_AP_TYPE];
4863 	u32 num_6g_reg_rules_cl[WMI_REG_CURRENT_MAX_AP_TYPE][WMI_REG_MAX_CLIENT_TYPE];
4864 	u32 total_reg_rules = 0;
4865 	int ret, i, j;
4866 
4867 	ath12k_dbg(ab, ATH12K_DBG_WMI, "processing regulatory ext channel list\n");
4868 
4869 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
4870 	if (IS_ERR(tb)) {
4871 		ret = PTR_ERR(tb);
4872 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
4873 		return ret;
4874 	}
4875 
4876 	ev = tb[WMI_TAG_REG_CHAN_LIST_CC_EXT_EVENT];
4877 	if (!ev) {
4878 		ath12k_warn(ab, "failed to fetch reg chan list ext update ev\n");
4879 		kfree(tb);
4880 		return -EPROTO;
4881 	}
4882 
4883 	reg_info->num_2g_reg_rules = le32_to_cpu(ev->num_2g_reg_rules);
4884 	reg_info->num_5g_reg_rules = le32_to_cpu(ev->num_5g_reg_rules);
4885 	reg_info->num_6g_reg_rules_ap[WMI_REG_INDOOR_AP] =
4886 		le32_to_cpu(ev->num_6g_reg_rules_ap_lpi);
4887 	reg_info->num_6g_reg_rules_ap[WMI_REG_STD_POWER_AP] =
4888 		le32_to_cpu(ev->num_6g_reg_rules_ap_sp);
4889 	reg_info->num_6g_reg_rules_ap[WMI_REG_VLP_AP] =
4890 		le32_to_cpu(ev->num_6g_reg_rules_ap_vlp);
4891 
4892 	for (i = 0; i < WMI_REG_MAX_CLIENT_TYPE; i++) {
4893 		reg_info->num_6g_reg_rules_cl[WMI_REG_INDOOR_AP][i] =
4894 			le32_to_cpu(ev->num_6g_reg_rules_cl_lpi[i]);
4895 		reg_info->num_6g_reg_rules_cl[WMI_REG_STD_POWER_AP][i] =
4896 			le32_to_cpu(ev->num_6g_reg_rules_cl_sp[i]);
4897 		reg_info->num_6g_reg_rules_cl[WMI_REG_VLP_AP][i] =
4898 			le32_to_cpu(ev->num_6g_reg_rules_cl_vlp[i]);
4899 	}
4900 
4901 	num_2g_reg_rules = reg_info->num_2g_reg_rules;
4902 	total_reg_rules += num_2g_reg_rules;
4903 	num_5g_reg_rules = reg_info->num_5g_reg_rules;
4904 	total_reg_rules += num_5g_reg_rules;
4905 
4906 	if (num_2g_reg_rules > MAX_REG_RULES || num_5g_reg_rules > MAX_REG_RULES) {
4907 		ath12k_warn(ab, "Num reg rules for 2G/5G exceeds max limit (num_2g_reg_rules: %d num_5g_reg_rules: %d max_rules: %d)\n",
4908 			    num_2g_reg_rules, num_5g_reg_rules, MAX_REG_RULES);
4909 		kfree(tb);
4910 		return -EINVAL;
4911 	}
4912 
4913 	for (i = 0; i < WMI_REG_CURRENT_MAX_AP_TYPE; i++) {
4914 		num_6g_reg_rules_ap[i] = reg_info->num_6g_reg_rules_ap[i];
4915 
4916 		if (num_6g_reg_rules_ap[i] > MAX_6G_REG_RULES) {
4917 			ath12k_warn(ab, "Num 6G reg rules for AP mode(%d) exceeds max limit (num_6g_reg_rules_ap: %d, max_rules: %d)\n",
4918 				    i, num_6g_reg_rules_ap[i], MAX_6G_REG_RULES);
4919 			kfree(tb);
4920 			return -EINVAL;
4921 		}
4922 
4923 		total_reg_rules += num_6g_reg_rules_ap[i];
4924 	}
4925 
4926 	for (i = 0; i < WMI_REG_MAX_CLIENT_TYPE; i++) {
4927 		num_6g_reg_rules_cl[WMI_REG_INDOOR_AP][i] =
4928 				reg_info->num_6g_reg_rules_cl[WMI_REG_INDOOR_AP][i];
4929 		total_reg_rules += num_6g_reg_rules_cl[WMI_REG_INDOOR_AP][i];
4930 
4931 		num_6g_reg_rules_cl[WMI_REG_STD_POWER_AP][i] =
4932 				reg_info->num_6g_reg_rules_cl[WMI_REG_STD_POWER_AP][i];
4933 		total_reg_rules += num_6g_reg_rules_cl[WMI_REG_STD_POWER_AP][i];
4934 
4935 		num_6g_reg_rules_cl[WMI_REG_VLP_AP][i] =
4936 				reg_info->num_6g_reg_rules_cl[WMI_REG_VLP_AP][i];
4937 		total_reg_rules += num_6g_reg_rules_cl[WMI_REG_VLP_AP][i];
4938 
4939 		if (num_6g_reg_rules_cl[WMI_REG_INDOOR_AP][i] > MAX_6G_REG_RULES ||
4940 		    num_6g_reg_rules_cl[WMI_REG_STD_POWER_AP][i] > MAX_6G_REG_RULES ||
4941 		    num_6g_reg_rules_cl[WMI_REG_VLP_AP][i] >  MAX_6G_REG_RULES) {
4942 			ath12k_warn(ab, "Num 6g client reg rules exceeds max limit, for client(type: %d)\n",
4943 				    i);
4944 			kfree(tb);
4945 			return -EINVAL;
4946 		}
4947 	}
4948 
4949 	if (!total_reg_rules) {
4950 		ath12k_warn(ab, "No reg rules available\n");
4951 		kfree(tb);
4952 		return -EINVAL;
4953 	}
4954 
4955 	memcpy(reg_info->alpha2, &ev->alpha2, REG_ALPHA2_LEN);
4956 
4957 	/* FIXME: Currently FW includes 6G reg rule also in 5G rule
4958 	 * list for country US.
4959 	 * Having same 6G reg rule in 5G and 6G rules list causes
4960 	 * intersect check to be true, and same rules will be shown
4961 	 * multiple times in iw cmd. So added hack below to avoid
4962 	 * parsing 6G rule from 5G reg rule list, and this can be
4963 	 * removed later, after FW updates to remove 6G reg rule
4964 	 * from 5G rules list.
4965 	 */
4966 	if (memcmp(reg_info->alpha2, "US", 2) == 0) {
4967 		reg_info->num_5g_reg_rules = REG_US_5G_NUM_REG_RULES;
4968 		num_5g_reg_rules = reg_info->num_5g_reg_rules;
4969 	}
4970 
4971 	reg_info->dfs_region = le32_to_cpu(ev->dfs_region);
4972 	reg_info->phybitmap = le32_to_cpu(ev->phybitmap);
4973 	reg_info->num_phy = le32_to_cpu(ev->num_phy);
4974 	reg_info->phy_id = le32_to_cpu(ev->phy_id);
4975 	reg_info->ctry_code = le32_to_cpu(ev->country_id);
4976 	reg_info->reg_dmn_pair = le32_to_cpu(ev->domain_code);
4977 
4978 	switch (le32_to_cpu(ev->status_code)) {
4979 	case WMI_REG_SET_CC_STATUS_PASS:
4980 		reg_info->status_code = REG_SET_CC_STATUS_PASS;
4981 		break;
4982 	case WMI_REG_CURRENT_ALPHA2_NOT_FOUND:
4983 		reg_info->status_code = REG_CURRENT_ALPHA2_NOT_FOUND;
4984 		break;
4985 	case WMI_REG_INIT_ALPHA2_NOT_FOUND:
4986 		reg_info->status_code = REG_INIT_ALPHA2_NOT_FOUND;
4987 		break;
4988 	case WMI_REG_SET_CC_CHANGE_NOT_ALLOWED:
4989 		reg_info->status_code = REG_SET_CC_CHANGE_NOT_ALLOWED;
4990 		break;
4991 	case WMI_REG_SET_CC_STATUS_NO_MEMORY:
4992 		reg_info->status_code = REG_SET_CC_STATUS_NO_MEMORY;
4993 		break;
4994 	case WMI_REG_SET_CC_STATUS_FAIL:
4995 		reg_info->status_code = REG_SET_CC_STATUS_FAIL;
4996 		break;
4997 	}
4998 
4999 	reg_info->is_ext_reg_event = true;
5000 
5001 	reg_info->min_bw_2g = le32_to_cpu(ev->min_bw_2g);
5002 	reg_info->max_bw_2g = le32_to_cpu(ev->max_bw_2g);
5003 	reg_info->min_bw_5g = le32_to_cpu(ev->min_bw_5g);
5004 	reg_info->max_bw_5g = le32_to_cpu(ev->max_bw_5g);
5005 	reg_info->min_bw_6g_ap[WMI_REG_INDOOR_AP] = le32_to_cpu(ev->min_bw_6g_ap_lpi);
5006 	reg_info->max_bw_6g_ap[WMI_REG_INDOOR_AP] = le32_to_cpu(ev->max_bw_6g_ap_lpi);
5007 	reg_info->min_bw_6g_ap[WMI_REG_STD_POWER_AP] = le32_to_cpu(ev->min_bw_6g_ap_sp);
5008 	reg_info->max_bw_6g_ap[WMI_REG_STD_POWER_AP] = le32_to_cpu(ev->max_bw_6g_ap_sp);
5009 	reg_info->min_bw_6g_ap[WMI_REG_VLP_AP] = le32_to_cpu(ev->min_bw_6g_ap_vlp);
5010 	reg_info->max_bw_6g_ap[WMI_REG_VLP_AP] = le32_to_cpu(ev->max_bw_6g_ap_vlp);
5011 
5012 	for (i = 0; i < WMI_REG_MAX_CLIENT_TYPE; i++) {
5013 		reg_info->min_bw_6g_client[WMI_REG_INDOOR_AP][i] =
5014 			le32_to_cpu(ev->min_bw_6g_client_lpi[i]);
5015 		reg_info->max_bw_6g_client[WMI_REG_INDOOR_AP][i] =
5016 			le32_to_cpu(ev->max_bw_6g_client_lpi[i]);
5017 		reg_info->min_bw_6g_client[WMI_REG_STD_POWER_AP][i] =
5018 			le32_to_cpu(ev->min_bw_6g_client_sp[i]);
5019 		reg_info->max_bw_6g_client[WMI_REG_STD_POWER_AP][i] =
5020 			le32_to_cpu(ev->max_bw_6g_client_sp[i]);
5021 		reg_info->min_bw_6g_client[WMI_REG_VLP_AP][i] =
5022 			le32_to_cpu(ev->min_bw_6g_client_vlp[i]);
5023 		reg_info->max_bw_6g_client[WMI_REG_VLP_AP][i] =
5024 			le32_to_cpu(ev->max_bw_6g_client_vlp[i]);
5025 	}
5026 
5027 	ath12k_dbg(ab, ATH12K_DBG_WMI,
5028 		   "%s:cc_ext %s dfs %d BW: min_2g %d max_2g %d min_5g %d max_5g %d phy_bitmap 0x%x",
5029 		   __func__, reg_info->alpha2, reg_info->dfs_region,
5030 		   reg_info->min_bw_2g, reg_info->max_bw_2g,
5031 		   reg_info->min_bw_5g, reg_info->max_bw_5g,
5032 		   reg_info->phybitmap);
5033 
5034 	ath12k_dbg(ab, ATH12K_DBG_WMI,
5035 		   "num_2g_reg_rules %d num_5g_reg_rules %d",
5036 		   num_2g_reg_rules, num_5g_reg_rules);
5037 
5038 	ath12k_dbg(ab, ATH12K_DBG_WMI,
5039 		   "num_6g_reg_rules_ap_lpi: %d num_6g_reg_rules_ap_sp: %d num_6g_reg_rules_ap_vlp: %d",
5040 		   num_6g_reg_rules_ap[WMI_REG_INDOOR_AP],
5041 		   num_6g_reg_rules_ap[WMI_REG_STD_POWER_AP],
5042 		   num_6g_reg_rules_ap[WMI_REG_VLP_AP]);
5043 
5044 	ath12k_dbg(ab, ATH12K_DBG_WMI,
5045 		   "6g Regular client: num_6g_reg_rules_lpi: %d num_6g_reg_rules_sp: %d num_6g_reg_rules_vlp: %d",
5046 		   num_6g_reg_rules_cl[WMI_REG_INDOOR_AP][WMI_REG_DEFAULT_CLIENT],
5047 		   num_6g_reg_rules_cl[WMI_REG_STD_POWER_AP][WMI_REG_DEFAULT_CLIENT],
5048 		   num_6g_reg_rules_cl[WMI_REG_VLP_AP][WMI_REG_DEFAULT_CLIENT]);
5049 
5050 	ath12k_dbg(ab, ATH12K_DBG_WMI,
5051 		   "6g Subordinate client: num_6g_reg_rules_lpi: %d num_6g_reg_rules_sp: %d num_6g_reg_rules_vlp: %d",
5052 		   num_6g_reg_rules_cl[WMI_REG_INDOOR_AP][WMI_REG_SUBORDINATE_CLIENT],
5053 		   num_6g_reg_rules_cl[WMI_REG_STD_POWER_AP][WMI_REG_SUBORDINATE_CLIENT],
5054 		   num_6g_reg_rules_cl[WMI_REG_VLP_AP][WMI_REG_SUBORDINATE_CLIENT]);
5055 
5056 	ext_wmi_reg_rule =
5057 		(struct ath12k_wmi_reg_rule_ext_params *)((u8 *)ev
5058 			+ sizeof(*ev)
5059 			+ sizeof(struct wmi_tlv));
5060 
5061 	if (num_2g_reg_rules) {
5062 		reg_info->reg_rules_2g_ptr =
5063 			create_ext_reg_rules_from_wmi(num_2g_reg_rules,
5064 						      ext_wmi_reg_rule);
5065 
5066 		if (!reg_info->reg_rules_2g_ptr) {
5067 			kfree(tb);
5068 			ath12k_warn(ab, "Unable to Allocate memory for 2g rules\n");
5069 			return -ENOMEM;
5070 		}
5071 	}
5072 
5073 	if (num_5g_reg_rules) {
5074 		ext_wmi_reg_rule += num_2g_reg_rules;
5075 		reg_info->reg_rules_5g_ptr =
5076 			create_ext_reg_rules_from_wmi(num_5g_reg_rules,
5077 						      ext_wmi_reg_rule);
5078 
5079 		if (!reg_info->reg_rules_5g_ptr) {
5080 			kfree(tb);
5081 			ath12k_warn(ab, "Unable to Allocate memory for 5g rules\n");
5082 			return -ENOMEM;
5083 		}
5084 	}
5085 
5086 	ext_wmi_reg_rule += num_5g_reg_rules;
5087 
5088 	for (i = 0; i < WMI_REG_CURRENT_MAX_AP_TYPE; i++) {
5089 		reg_info->reg_rules_6g_ap_ptr[i] =
5090 			create_ext_reg_rules_from_wmi(num_6g_reg_rules_ap[i],
5091 						      ext_wmi_reg_rule);
5092 
5093 		if (!reg_info->reg_rules_6g_ap_ptr[i]) {
5094 			kfree(tb);
5095 			ath12k_warn(ab, "Unable to Allocate memory for 6g ap rules\n");
5096 			return -ENOMEM;
5097 		}
5098 
5099 		ext_wmi_reg_rule += num_6g_reg_rules_ap[i];
5100 	}
5101 
5102 	for (j = 0; j < WMI_REG_CURRENT_MAX_AP_TYPE; j++) {
5103 		for (i = 0; i < WMI_REG_MAX_CLIENT_TYPE; i++) {
5104 			reg_info->reg_rules_6g_client_ptr[j][i] =
5105 				create_ext_reg_rules_from_wmi(num_6g_reg_rules_cl[j][i],
5106 							      ext_wmi_reg_rule);
5107 
5108 			if (!reg_info->reg_rules_6g_client_ptr[j][i]) {
5109 				kfree(tb);
5110 				ath12k_warn(ab, "Unable to Allocate memory for 6g client rules\n");
5111 				return -ENOMEM;
5112 			}
5113 
5114 			ext_wmi_reg_rule += num_6g_reg_rules_cl[j][i];
5115 		}
5116 	}
5117 
5118 	reg_info->client_type = le32_to_cpu(ev->client_type);
5119 	reg_info->rnr_tpe_usable = ev->rnr_tpe_usable;
5120 	reg_info->unspecified_ap_usable = ev->unspecified_ap_usable;
5121 	reg_info->domain_code_6g_ap[WMI_REG_INDOOR_AP] =
5122 		le32_to_cpu(ev->domain_code_6g_ap_lpi);
5123 	reg_info->domain_code_6g_ap[WMI_REG_STD_POWER_AP] =
5124 		le32_to_cpu(ev->domain_code_6g_ap_sp);
5125 	reg_info->domain_code_6g_ap[WMI_REG_VLP_AP] =
5126 		le32_to_cpu(ev->domain_code_6g_ap_vlp);
5127 
5128 	for (i = 0; i < WMI_REG_MAX_CLIENT_TYPE; i++) {
5129 		reg_info->domain_code_6g_client[WMI_REG_INDOOR_AP][i] =
5130 			le32_to_cpu(ev->domain_code_6g_client_lpi[i]);
5131 		reg_info->domain_code_6g_client[WMI_REG_STD_POWER_AP][i] =
5132 			le32_to_cpu(ev->domain_code_6g_client_sp[i]);
5133 		reg_info->domain_code_6g_client[WMI_REG_VLP_AP][i] =
5134 			le32_to_cpu(ev->domain_code_6g_client_vlp[i]);
5135 	}
5136 
5137 	reg_info->domain_code_6g_super_id = le32_to_cpu(ev->domain_code_6g_super_id);
5138 
5139 	ath12k_dbg(ab, ATH12K_DBG_WMI, "6g client_type: %d domain_code_6g_super_id: %d",
5140 		   reg_info->client_type, reg_info->domain_code_6g_super_id);
5141 
5142 	ath12k_dbg(ab, ATH12K_DBG_WMI, "processed regulatory ext channel list\n");
5143 
5144 	kfree(tb);
5145 	return 0;
5146 }
5147 
5148 static int ath12k_pull_peer_del_resp_ev(struct ath12k_base *ab, struct sk_buff *skb,
5149 					struct wmi_peer_delete_resp_event *peer_del_resp)
5150 {
5151 	const void **tb;
5152 	const struct wmi_peer_delete_resp_event *ev;
5153 	int ret;
5154 
5155 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
5156 	if (IS_ERR(tb)) {
5157 		ret = PTR_ERR(tb);
5158 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
5159 		return ret;
5160 	}
5161 
5162 	ev = tb[WMI_TAG_PEER_DELETE_RESP_EVENT];
5163 	if (!ev) {
5164 		ath12k_warn(ab, "failed to fetch peer delete resp ev");
5165 		kfree(tb);
5166 		return -EPROTO;
5167 	}
5168 
5169 	memset(peer_del_resp, 0, sizeof(*peer_del_resp));
5170 
5171 	peer_del_resp->vdev_id = ev->vdev_id;
5172 	ether_addr_copy(peer_del_resp->peer_macaddr.addr,
5173 			ev->peer_macaddr.addr);
5174 
5175 	kfree(tb);
5176 	return 0;
5177 }
5178 
5179 static int ath12k_pull_vdev_del_resp_ev(struct ath12k_base *ab,
5180 					struct sk_buff *skb,
5181 					u32 *vdev_id)
5182 {
5183 	const void **tb;
5184 	const struct wmi_vdev_delete_resp_event *ev;
5185 	int ret;
5186 
5187 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
5188 	if (IS_ERR(tb)) {
5189 		ret = PTR_ERR(tb);
5190 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
5191 		return ret;
5192 	}
5193 
5194 	ev = tb[WMI_TAG_VDEV_DELETE_RESP_EVENT];
5195 	if (!ev) {
5196 		ath12k_warn(ab, "failed to fetch vdev delete resp ev");
5197 		kfree(tb);
5198 		return -EPROTO;
5199 	}
5200 
5201 	*vdev_id = le32_to_cpu(ev->vdev_id);
5202 
5203 	kfree(tb);
5204 	return 0;
5205 }
5206 
5207 static int ath12k_pull_bcn_tx_status_ev(struct ath12k_base *ab,
5208 					struct sk_buff *skb,
5209 					u32 *vdev_id, u32 *tx_status)
5210 {
5211 	const void **tb;
5212 	const struct wmi_bcn_tx_status_event *ev;
5213 	int ret;
5214 
5215 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
5216 	if (IS_ERR(tb)) {
5217 		ret = PTR_ERR(tb);
5218 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
5219 		return ret;
5220 	}
5221 
5222 	ev = tb[WMI_TAG_OFFLOAD_BCN_TX_STATUS_EVENT];
5223 	if (!ev) {
5224 		ath12k_warn(ab, "failed to fetch bcn tx status ev");
5225 		kfree(tb);
5226 		return -EPROTO;
5227 	}
5228 
5229 	*vdev_id = le32_to_cpu(ev->vdev_id);
5230 	*tx_status = le32_to_cpu(ev->tx_status);
5231 
5232 	kfree(tb);
5233 	return 0;
5234 }
5235 
5236 static int ath12k_pull_vdev_stopped_param_tlv(struct ath12k_base *ab, struct sk_buff *skb,
5237 					      u32 *vdev_id)
5238 {
5239 	const void **tb;
5240 	const struct wmi_vdev_stopped_event *ev;
5241 	int ret;
5242 
5243 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
5244 	if (IS_ERR(tb)) {
5245 		ret = PTR_ERR(tb);
5246 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
5247 		return ret;
5248 	}
5249 
5250 	ev = tb[WMI_TAG_VDEV_STOPPED_EVENT];
5251 	if (!ev) {
5252 		ath12k_warn(ab, "failed to fetch vdev stop ev");
5253 		kfree(tb);
5254 		return -EPROTO;
5255 	}
5256 
5257 	*vdev_id = le32_to_cpu(ev->vdev_id);
5258 
5259 	kfree(tb);
5260 	return 0;
5261 }
5262 
5263 static int ath12k_wmi_tlv_mgmt_rx_parse(struct ath12k_base *ab,
5264 					u16 tag, u16 len,
5265 					const void *ptr, void *data)
5266 {
5267 	struct wmi_tlv_mgmt_rx_parse *parse = data;
5268 
5269 	switch (tag) {
5270 	case WMI_TAG_MGMT_RX_HDR:
5271 		parse->fixed = ptr;
5272 		break;
5273 	case WMI_TAG_ARRAY_BYTE:
5274 		if (!parse->frame_buf_done) {
5275 			parse->frame_buf = ptr;
5276 			parse->frame_buf_done = true;
5277 		}
5278 		break;
5279 	}
5280 	return 0;
5281 }
5282 
5283 static int ath12k_pull_mgmt_rx_params_tlv(struct ath12k_base *ab,
5284 					  struct sk_buff *skb,
5285 					  struct ath12k_wmi_mgmt_rx_arg *hdr)
5286 {
5287 	struct wmi_tlv_mgmt_rx_parse parse = { };
5288 	const struct ath12k_wmi_mgmt_rx_params *ev;
5289 	const u8 *frame;
5290 	int i, ret;
5291 
5292 	ret = ath12k_wmi_tlv_iter(ab, skb->data, skb->len,
5293 				  ath12k_wmi_tlv_mgmt_rx_parse,
5294 				  &parse);
5295 	if (ret) {
5296 		ath12k_warn(ab, "failed to parse mgmt rx tlv %d\n", ret);
5297 		return ret;
5298 	}
5299 
5300 	ev = parse.fixed;
5301 	frame = parse.frame_buf;
5302 
5303 	if (!ev || !frame) {
5304 		ath12k_warn(ab, "failed to fetch mgmt rx hdr");
5305 		return -EPROTO;
5306 	}
5307 
5308 	hdr->pdev_id = le32_to_cpu(ev->pdev_id);
5309 	hdr->chan_freq = le32_to_cpu(ev->chan_freq);
5310 	hdr->channel = le32_to_cpu(ev->channel);
5311 	hdr->snr = le32_to_cpu(ev->snr);
5312 	hdr->rate = le32_to_cpu(ev->rate);
5313 	hdr->phy_mode = le32_to_cpu(ev->phy_mode);
5314 	hdr->buf_len = le32_to_cpu(ev->buf_len);
5315 	hdr->status = le32_to_cpu(ev->status);
5316 	hdr->flags = le32_to_cpu(ev->flags);
5317 	hdr->rssi = a_sle32_to_cpu(ev->rssi);
5318 	hdr->tsf_delta = le32_to_cpu(ev->tsf_delta);
5319 
5320 	for (i = 0; i < ATH_MAX_ANTENNA; i++)
5321 		hdr->rssi_ctl[i] = le32_to_cpu(ev->rssi_ctl[i]);
5322 
5323 	if (skb->len < (frame - skb->data) + hdr->buf_len) {
5324 		ath12k_warn(ab, "invalid length in mgmt rx hdr ev");
5325 		return -EPROTO;
5326 	}
5327 
5328 	/* shift the sk_buff to point to `frame` */
5329 	skb_trim(skb, 0);
5330 	skb_put(skb, frame - skb->data);
5331 	skb_pull(skb, frame - skb->data);
5332 	skb_put(skb, hdr->buf_len);
5333 
5334 	return 0;
5335 }
5336 
5337 static int wmi_process_mgmt_tx_comp(struct ath12k *ar, u32 desc_id,
5338 				    u32 status)
5339 {
5340 	struct sk_buff *msdu;
5341 	struct ieee80211_tx_info *info;
5342 	struct ath12k_skb_cb *skb_cb;
5343 	int num_mgmt;
5344 
5345 	spin_lock_bh(&ar->txmgmt_idr_lock);
5346 	msdu = idr_find(&ar->txmgmt_idr, desc_id);
5347 
5348 	if (!msdu) {
5349 		ath12k_warn(ar->ab, "received mgmt tx compl for invalid msdu_id: %d\n",
5350 			    desc_id);
5351 		spin_unlock_bh(&ar->txmgmt_idr_lock);
5352 		return -ENOENT;
5353 	}
5354 
5355 	idr_remove(&ar->txmgmt_idr, desc_id);
5356 	spin_unlock_bh(&ar->txmgmt_idr_lock);
5357 
5358 	skb_cb = ATH12K_SKB_CB(msdu);
5359 	dma_unmap_single(ar->ab->dev, skb_cb->paddr, msdu->len, DMA_TO_DEVICE);
5360 
5361 	info = IEEE80211_SKB_CB(msdu);
5362 	if ((!(info->flags & IEEE80211_TX_CTL_NO_ACK)) && !status)
5363 		info->flags |= IEEE80211_TX_STAT_ACK;
5364 
5365 	if ((info->flags & IEEE80211_TX_CTL_NO_ACK) && !status)
5366 		info->flags |= IEEE80211_TX_STAT_NOACK_TRANSMITTED;
5367 
5368 	ieee80211_tx_status_irqsafe(ath12k_ar_to_hw(ar), msdu);
5369 
5370 	num_mgmt = atomic_dec_if_positive(&ar->num_pending_mgmt_tx);
5371 
5372 	/* WARN when we received this event without doing any mgmt tx */
5373 	if (num_mgmt < 0)
5374 		WARN_ON_ONCE(1);
5375 
5376 	if (!num_mgmt)
5377 		wake_up(&ar->txmgmt_empty_waitq);
5378 
5379 	return 0;
5380 }
5381 
5382 static int ath12k_pull_mgmt_tx_compl_param_tlv(struct ath12k_base *ab,
5383 					       struct sk_buff *skb,
5384 					       struct wmi_mgmt_tx_compl_event *param)
5385 {
5386 	const void **tb;
5387 	const struct wmi_mgmt_tx_compl_event *ev;
5388 	int ret;
5389 
5390 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
5391 	if (IS_ERR(tb)) {
5392 		ret = PTR_ERR(tb);
5393 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
5394 		return ret;
5395 	}
5396 
5397 	ev = tb[WMI_TAG_MGMT_TX_COMPL_EVENT];
5398 	if (!ev) {
5399 		ath12k_warn(ab, "failed to fetch mgmt tx compl ev");
5400 		kfree(tb);
5401 		return -EPROTO;
5402 	}
5403 
5404 	param->pdev_id = ev->pdev_id;
5405 	param->desc_id = ev->desc_id;
5406 	param->status = ev->status;
5407 
5408 	kfree(tb);
5409 	return 0;
5410 }
5411 
5412 static void ath12k_wmi_event_scan_started(struct ath12k *ar)
5413 {
5414 	lockdep_assert_held(&ar->data_lock);
5415 
5416 	switch (ar->scan.state) {
5417 	case ATH12K_SCAN_IDLE:
5418 	case ATH12K_SCAN_RUNNING:
5419 	case ATH12K_SCAN_ABORTING:
5420 		ath12k_warn(ar->ab, "received scan started event in an invalid scan state: %s (%d)\n",
5421 			    ath12k_scan_state_str(ar->scan.state),
5422 			    ar->scan.state);
5423 		break;
5424 	case ATH12K_SCAN_STARTING:
5425 		ar->scan.state = ATH12K_SCAN_RUNNING;
5426 
5427 		if (ar->scan.is_roc)
5428 			ieee80211_ready_on_channel(ath12k_ar_to_hw(ar));
5429 
5430 		complete(&ar->scan.started);
5431 		break;
5432 	}
5433 }
5434 
5435 static void ath12k_wmi_event_scan_start_failed(struct ath12k *ar)
5436 {
5437 	lockdep_assert_held(&ar->data_lock);
5438 
5439 	switch (ar->scan.state) {
5440 	case ATH12K_SCAN_IDLE:
5441 	case ATH12K_SCAN_RUNNING:
5442 	case ATH12K_SCAN_ABORTING:
5443 		ath12k_warn(ar->ab, "received scan start failed event in an invalid scan state: %s (%d)\n",
5444 			    ath12k_scan_state_str(ar->scan.state),
5445 			    ar->scan.state);
5446 		break;
5447 	case ATH12K_SCAN_STARTING:
5448 		complete(&ar->scan.started);
5449 		__ath12k_mac_scan_finish(ar);
5450 		break;
5451 	}
5452 }
5453 
5454 static void ath12k_wmi_event_scan_completed(struct ath12k *ar)
5455 {
5456 	lockdep_assert_held(&ar->data_lock);
5457 
5458 	switch (ar->scan.state) {
5459 	case ATH12K_SCAN_IDLE:
5460 	case ATH12K_SCAN_STARTING:
5461 		/* One suspected reason scan can be completed while starting is
5462 		 * if firmware fails to deliver all scan events to the host,
5463 		 * e.g. when transport pipe is full. This has been observed
5464 		 * with spectral scan phyerr events starving wmi transport
5465 		 * pipe. In such case the "scan completed" event should be (and
5466 		 * is) ignored by the host as it may be just firmware's scan
5467 		 * state machine recovering.
5468 		 */
5469 		ath12k_warn(ar->ab, "received scan completed event in an invalid scan state: %s (%d)\n",
5470 			    ath12k_scan_state_str(ar->scan.state),
5471 			    ar->scan.state);
5472 		break;
5473 	case ATH12K_SCAN_RUNNING:
5474 	case ATH12K_SCAN_ABORTING:
5475 		__ath12k_mac_scan_finish(ar);
5476 		break;
5477 	}
5478 }
5479 
5480 static void ath12k_wmi_event_scan_bss_chan(struct ath12k *ar)
5481 {
5482 	lockdep_assert_held(&ar->data_lock);
5483 
5484 	switch (ar->scan.state) {
5485 	case ATH12K_SCAN_IDLE:
5486 	case ATH12K_SCAN_STARTING:
5487 		ath12k_warn(ar->ab, "received scan bss chan event in an invalid scan state: %s (%d)\n",
5488 			    ath12k_scan_state_str(ar->scan.state),
5489 			    ar->scan.state);
5490 		break;
5491 	case ATH12K_SCAN_RUNNING:
5492 	case ATH12K_SCAN_ABORTING:
5493 		ar->scan_channel = NULL;
5494 		break;
5495 	}
5496 }
5497 
5498 static void ath12k_wmi_event_scan_foreign_chan(struct ath12k *ar, u32 freq)
5499 {
5500 	struct ieee80211_hw *hw = ath12k_ar_to_hw(ar);
5501 
5502 	lockdep_assert_held(&ar->data_lock);
5503 
5504 	switch (ar->scan.state) {
5505 	case ATH12K_SCAN_IDLE:
5506 	case ATH12K_SCAN_STARTING:
5507 		ath12k_warn(ar->ab, "received scan foreign chan event in an invalid scan state: %s (%d)\n",
5508 			    ath12k_scan_state_str(ar->scan.state),
5509 			    ar->scan.state);
5510 		break;
5511 	case ATH12K_SCAN_RUNNING:
5512 	case ATH12K_SCAN_ABORTING:
5513 		ar->scan_channel = ieee80211_get_channel(hw->wiphy, freq);
5514 
5515 		if (ar->scan.is_roc && ar->scan.roc_freq == freq)
5516 			complete(&ar->scan.on_channel);
5517 
5518 		break;
5519 	}
5520 }
5521 
5522 static const char *
5523 ath12k_wmi_event_scan_type_str(enum wmi_scan_event_type type,
5524 			       enum wmi_scan_completion_reason reason)
5525 {
5526 	switch (type) {
5527 	case WMI_SCAN_EVENT_STARTED:
5528 		return "started";
5529 	case WMI_SCAN_EVENT_COMPLETED:
5530 		switch (reason) {
5531 		case WMI_SCAN_REASON_COMPLETED:
5532 			return "completed";
5533 		case WMI_SCAN_REASON_CANCELLED:
5534 			return "completed [cancelled]";
5535 		case WMI_SCAN_REASON_PREEMPTED:
5536 			return "completed [preempted]";
5537 		case WMI_SCAN_REASON_TIMEDOUT:
5538 			return "completed [timedout]";
5539 		case WMI_SCAN_REASON_INTERNAL_FAILURE:
5540 			return "completed [internal err]";
5541 		case WMI_SCAN_REASON_MAX:
5542 			break;
5543 		}
5544 		return "completed [unknown]";
5545 	case WMI_SCAN_EVENT_BSS_CHANNEL:
5546 		return "bss channel";
5547 	case WMI_SCAN_EVENT_FOREIGN_CHAN:
5548 		return "foreign channel";
5549 	case WMI_SCAN_EVENT_DEQUEUED:
5550 		return "dequeued";
5551 	case WMI_SCAN_EVENT_PREEMPTED:
5552 		return "preempted";
5553 	case WMI_SCAN_EVENT_START_FAILED:
5554 		return "start failed";
5555 	case WMI_SCAN_EVENT_RESTARTED:
5556 		return "restarted";
5557 	case WMI_SCAN_EVENT_FOREIGN_CHAN_EXIT:
5558 		return "foreign channel exit";
5559 	default:
5560 		return "unknown";
5561 	}
5562 }
5563 
5564 static int ath12k_pull_scan_ev(struct ath12k_base *ab, struct sk_buff *skb,
5565 			       struct wmi_scan_event *scan_evt_param)
5566 {
5567 	const void **tb;
5568 	const struct wmi_scan_event *ev;
5569 	int ret;
5570 
5571 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
5572 	if (IS_ERR(tb)) {
5573 		ret = PTR_ERR(tb);
5574 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
5575 		return ret;
5576 	}
5577 
5578 	ev = tb[WMI_TAG_SCAN_EVENT];
5579 	if (!ev) {
5580 		ath12k_warn(ab, "failed to fetch scan ev");
5581 		kfree(tb);
5582 		return -EPROTO;
5583 	}
5584 
5585 	scan_evt_param->event_type = ev->event_type;
5586 	scan_evt_param->reason = ev->reason;
5587 	scan_evt_param->channel_freq = ev->channel_freq;
5588 	scan_evt_param->scan_req_id = ev->scan_req_id;
5589 	scan_evt_param->scan_id = ev->scan_id;
5590 	scan_evt_param->vdev_id = ev->vdev_id;
5591 	scan_evt_param->tsf_timestamp = ev->tsf_timestamp;
5592 
5593 	kfree(tb);
5594 	return 0;
5595 }
5596 
5597 static int ath12k_pull_peer_sta_kickout_ev(struct ath12k_base *ab, struct sk_buff *skb,
5598 					   struct wmi_peer_sta_kickout_arg *arg)
5599 {
5600 	const void **tb;
5601 	const struct wmi_peer_sta_kickout_event *ev;
5602 	int ret;
5603 
5604 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
5605 	if (IS_ERR(tb)) {
5606 		ret = PTR_ERR(tb);
5607 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
5608 		return ret;
5609 	}
5610 
5611 	ev = tb[WMI_TAG_PEER_STA_KICKOUT_EVENT];
5612 	if (!ev) {
5613 		ath12k_warn(ab, "failed to fetch peer sta kickout ev");
5614 		kfree(tb);
5615 		return -EPROTO;
5616 	}
5617 
5618 	arg->mac_addr = ev->peer_macaddr.addr;
5619 
5620 	kfree(tb);
5621 	return 0;
5622 }
5623 
5624 static int ath12k_pull_roam_ev(struct ath12k_base *ab, struct sk_buff *skb,
5625 			       struct wmi_roam_event *roam_ev)
5626 {
5627 	const void **tb;
5628 	const struct wmi_roam_event *ev;
5629 	int ret;
5630 
5631 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
5632 	if (IS_ERR(tb)) {
5633 		ret = PTR_ERR(tb);
5634 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
5635 		return ret;
5636 	}
5637 
5638 	ev = tb[WMI_TAG_ROAM_EVENT];
5639 	if (!ev) {
5640 		ath12k_warn(ab, "failed to fetch roam ev");
5641 		kfree(tb);
5642 		return -EPROTO;
5643 	}
5644 
5645 	roam_ev->vdev_id = ev->vdev_id;
5646 	roam_ev->reason = ev->reason;
5647 	roam_ev->rssi = ev->rssi;
5648 
5649 	kfree(tb);
5650 	return 0;
5651 }
5652 
5653 static int freq_to_idx(struct ath12k *ar, int freq)
5654 {
5655 	struct ieee80211_supported_band *sband;
5656 	struct ieee80211_hw *hw = ath12k_ar_to_hw(ar);
5657 	int band, ch, idx = 0;
5658 
5659 	for (band = NL80211_BAND_2GHZ; band < NUM_NL80211_BANDS; band++) {
5660 		if (!ar->mac.sbands[band].channels)
5661 			continue;
5662 
5663 		sband = hw->wiphy->bands[band];
5664 		if (!sband)
5665 			continue;
5666 
5667 		for (ch = 0; ch < sband->n_channels; ch++, idx++)
5668 			if (sband->channels[ch].center_freq == freq)
5669 				goto exit;
5670 	}
5671 
5672 exit:
5673 	return idx;
5674 }
5675 
5676 static int ath12k_pull_chan_info_ev(struct ath12k_base *ab, struct sk_buff *skb,
5677 				    struct wmi_chan_info_event *ch_info_ev)
5678 {
5679 	const void **tb;
5680 	const struct wmi_chan_info_event *ev;
5681 	int ret;
5682 
5683 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
5684 	if (IS_ERR(tb)) {
5685 		ret = PTR_ERR(tb);
5686 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
5687 		return ret;
5688 	}
5689 
5690 	ev = tb[WMI_TAG_CHAN_INFO_EVENT];
5691 	if (!ev) {
5692 		ath12k_warn(ab, "failed to fetch chan info ev");
5693 		kfree(tb);
5694 		return -EPROTO;
5695 	}
5696 
5697 	ch_info_ev->err_code = ev->err_code;
5698 	ch_info_ev->freq = ev->freq;
5699 	ch_info_ev->cmd_flags = ev->cmd_flags;
5700 	ch_info_ev->noise_floor = ev->noise_floor;
5701 	ch_info_ev->rx_clear_count = ev->rx_clear_count;
5702 	ch_info_ev->cycle_count = ev->cycle_count;
5703 	ch_info_ev->chan_tx_pwr_range = ev->chan_tx_pwr_range;
5704 	ch_info_ev->chan_tx_pwr_tp = ev->chan_tx_pwr_tp;
5705 	ch_info_ev->rx_frame_count = ev->rx_frame_count;
5706 	ch_info_ev->tx_frame_cnt = ev->tx_frame_cnt;
5707 	ch_info_ev->mac_clk_mhz = ev->mac_clk_mhz;
5708 	ch_info_ev->vdev_id = ev->vdev_id;
5709 
5710 	kfree(tb);
5711 	return 0;
5712 }
5713 
5714 static int
5715 ath12k_pull_pdev_bss_chan_info_ev(struct ath12k_base *ab, struct sk_buff *skb,
5716 				  struct wmi_pdev_bss_chan_info_event *bss_ch_info_ev)
5717 {
5718 	const void **tb;
5719 	const struct wmi_pdev_bss_chan_info_event *ev;
5720 	int ret;
5721 
5722 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
5723 	if (IS_ERR(tb)) {
5724 		ret = PTR_ERR(tb);
5725 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
5726 		return ret;
5727 	}
5728 
5729 	ev = tb[WMI_TAG_PDEV_BSS_CHAN_INFO_EVENT];
5730 	if (!ev) {
5731 		ath12k_warn(ab, "failed to fetch pdev bss chan info ev");
5732 		kfree(tb);
5733 		return -EPROTO;
5734 	}
5735 
5736 	bss_ch_info_ev->pdev_id = ev->pdev_id;
5737 	bss_ch_info_ev->freq = ev->freq;
5738 	bss_ch_info_ev->noise_floor = ev->noise_floor;
5739 	bss_ch_info_ev->rx_clear_count_low = ev->rx_clear_count_low;
5740 	bss_ch_info_ev->rx_clear_count_high = ev->rx_clear_count_high;
5741 	bss_ch_info_ev->cycle_count_low = ev->cycle_count_low;
5742 	bss_ch_info_ev->cycle_count_high = ev->cycle_count_high;
5743 	bss_ch_info_ev->tx_cycle_count_low = ev->tx_cycle_count_low;
5744 	bss_ch_info_ev->tx_cycle_count_high = ev->tx_cycle_count_high;
5745 	bss_ch_info_ev->rx_cycle_count_low = ev->rx_cycle_count_low;
5746 	bss_ch_info_ev->rx_cycle_count_high = ev->rx_cycle_count_high;
5747 	bss_ch_info_ev->rx_bss_cycle_count_low = ev->rx_bss_cycle_count_low;
5748 	bss_ch_info_ev->rx_bss_cycle_count_high = ev->rx_bss_cycle_count_high;
5749 
5750 	kfree(tb);
5751 	return 0;
5752 }
5753 
5754 static int
5755 ath12k_pull_vdev_install_key_compl_ev(struct ath12k_base *ab, struct sk_buff *skb,
5756 				      struct wmi_vdev_install_key_complete_arg *arg)
5757 {
5758 	const void **tb;
5759 	const struct wmi_vdev_install_key_compl_event *ev;
5760 	int ret;
5761 
5762 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
5763 	if (IS_ERR(tb)) {
5764 		ret = PTR_ERR(tb);
5765 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
5766 		return ret;
5767 	}
5768 
5769 	ev = tb[WMI_TAG_VDEV_INSTALL_KEY_COMPLETE_EVENT];
5770 	if (!ev) {
5771 		ath12k_warn(ab, "failed to fetch vdev install key compl ev");
5772 		kfree(tb);
5773 		return -EPROTO;
5774 	}
5775 
5776 	arg->vdev_id = le32_to_cpu(ev->vdev_id);
5777 	arg->macaddr = ev->peer_macaddr.addr;
5778 	arg->key_idx = le32_to_cpu(ev->key_idx);
5779 	arg->key_flags = le32_to_cpu(ev->key_flags);
5780 	arg->status = le32_to_cpu(ev->status);
5781 
5782 	kfree(tb);
5783 	return 0;
5784 }
5785 
5786 static int ath12k_pull_peer_assoc_conf_ev(struct ath12k_base *ab, struct sk_buff *skb,
5787 					  struct wmi_peer_assoc_conf_arg *peer_assoc_conf)
5788 {
5789 	const void **tb;
5790 	const struct wmi_peer_assoc_conf_event *ev;
5791 	int ret;
5792 
5793 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
5794 	if (IS_ERR(tb)) {
5795 		ret = PTR_ERR(tb);
5796 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
5797 		return ret;
5798 	}
5799 
5800 	ev = tb[WMI_TAG_PEER_ASSOC_CONF_EVENT];
5801 	if (!ev) {
5802 		ath12k_warn(ab, "failed to fetch peer assoc conf ev");
5803 		kfree(tb);
5804 		return -EPROTO;
5805 	}
5806 
5807 	peer_assoc_conf->vdev_id = le32_to_cpu(ev->vdev_id);
5808 	peer_assoc_conf->macaddr = ev->peer_macaddr.addr;
5809 
5810 	kfree(tb);
5811 	return 0;
5812 }
5813 
5814 static int
5815 ath12k_pull_pdev_temp_ev(struct ath12k_base *ab, struct sk_buff *skb,
5816 			 const struct wmi_pdev_temperature_event *ev)
5817 {
5818 	const void **tb;
5819 	int ret;
5820 
5821 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
5822 	if (IS_ERR(tb)) {
5823 		ret = PTR_ERR(tb);
5824 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
5825 		return ret;
5826 	}
5827 
5828 	ev = tb[WMI_TAG_PDEV_TEMPERATURE_EVENT];
5829 	if (!ev) {
5830 		ath12k_warn(ab, "failed to fetch pdev temp ev");
5831 		kfree(tb);
5832 		return -EPROTO;
5833 	}
5834 
5835 	kfree(tb);
5836 	return 0;
5837 }
5838 
5839 static void ath12k_wmi_op_ep_tx_credits(struct ath12k_base *ab)
5840 {
5841 	/* try to send pending beacons first. they take priority */
5842 	wake_up(&ab->wmi_ab.tx_credits_wq);
5843 }
5844 
5845 static void ath12k_wmi_htc_tx_complete(struct ath12k_base *ab,
5846 				       struct sk_buff *skb)
5847 {
5848 	dev_kfree_skb(skb);
5849 }
5850 
5851 static bool ath12k_reg_is_world_alpha(char *alpha)
5852 {
5853 	if (alpha[0] == '0' && alpha[1] == '0')
5854 		return true;
5855 
5856 	if (alpha[0] == 'n' && alpha[1] == 'a')
5857 		return true;
5858 
5859 	return false;
5860 }
5861 
5862 static int ath12k_reg_chan_list_event(struct ath12k_base *ab, struct sk_buff *skb)
5863 {
5864 	struct ath12k_reg_info *reg_info = NULL;
5865 	struct ieee80211_regdomain *regd = NULL;
5866 	bool intersect = false;
5867 	int ret = 0, pdev_idx, i, j;
5868 	struct ath12k *ar;
5869 
5870 	reg_info = kzalloc(sizeof(*reg_info), GFP_ATOMIC);
5871 	if (!reg_info) {
5872 		ret = -ENOMEM;
5873 		goto fallback;
5874 	}
5875 
5876 	ret = ath12k_pull_reg_chan_list_ext_update_ev(ab, skb, reg_info);
5877 
5878 	if (ret) {
5879 		ath12k_warn(ab, "failed to extract regulatory info from received event\n");
5880 		goto fallback;
5881 	}
5882 
5883 	if (reg_info->status_code != REG_SET_CC_STATUS_PASS) {
5884 		/* In case of failure to set the requested ctry,
5885 		 * fw retains the current regd. We print a failure info
5886 		 * and return from here.
5887 		 */
5888 		ath12k_warn(ab, "Failed to set the requested Country regulatory setting\n");
5889 		goto mem_free;
5890 	}
5891 
5892 	pdev_idx = reg_info->phy_id;
5893 
5894 	if (pdev_idx >= ab->num_radios) {
5895 		/* Process the event for phy0 only if single_pdev_only
5896 		 * is true. If pdev_idx is valid but not 0, discard the
5897 		 * event. Otherwise, it goes to fallback.
5898 		 */
5899 		if (ab->hw_params->single_pdev_only &&
5900 		    pdev_idx < ab->hw_params->num_rxdma_per_pdev)
5901 			goto mem_free;
5902 		else
5903 			goto fallback;
5904 	}
5905 
5906 	/* Avoid multiple overwrites to default regd, during core
5907 	 * stop-start after mac registration.
5908 	 */
5909 	if (ab->default_regd[pdev_idx] && !ab->new_regd[pdev_idx] &&
5910 	    !memcmp(ab->default_regd[pdev_idx]->alpha2,
5911 		    reg_info->alpha2, 2))
5912 		goto mem_free;
5913 
5914 	/* Intersect new rules with default regd if a new country setting was
5915 	 * requested, i.e a default regd was already set during initialization
5916 	 * and the regd coming from this event has a valid country info.
5917 	 */
5918 	if (ab->default_regd[pdev_idx] &&
5919 	    !ath12k_reg_is_world_alpha((char *)
5920 		ab->default_regd[pdev_idx]->alpha2) &&
5921 	    !ath12k_reg_is_world_alpha((char *)reg_info->alpha2))
5922 		intersect = true;
5923 
5924 	regd = ath12k_reg_build_regd(ab, reg_info, intersect);
5925 	if (!regd) {
5926 		ath12k_warn(ab, "failed to build regd from reg_info\n");
5927 		goto fallback;
5928 	}
5929 
5930 	spin_lock(&ab->base_lock);
5931 	if (test_bit(ATH12K_FLAG_REGISTERED, &ab->dev_flags)) {
5932 		/* Once mac is registered, ar is valid and all CC events from
5933 		 * fw is considered to be received due to user requests
5934 		 * currently.
5935 		 * Free previously built regd before assigning the newly
5936 		 * generated regd to ar. NULL pointer handling will be
5937 		 * taken care by kfree itself.
5938 		 */
5939 		ar = ab->pdevs[pdev_idx].ar;
5940 		kfree(ab->new_regd[pdev_idx]);
5941 		ab->new_regd[pdev_idx] = regd;
5942 		queue_work(ab->workqueue, &ar->regd_update_work);
5943 	} else {
5944 		/* Multiple events for the same *ar is not expected. But we
5945 		 * can still clear any previously stored default_regd if we
5946 		 * are receiving this event for the same radio by mistake.
5947 		 * NULL pointer handling will be taken care by kfree itself.
5948 		 */
5949 		kfree(ab->default_regd[pdev_idx]);
5950 		/* This regd would be applied during mac registration */
5951 		ab->default_regd[pdev_idx] = regd;
5952 	}
5953 	ab->dfs_region = reg_info->dfs_region;
5954 	spin_unlock(&ab->base_lock);
5955 
5956 	goto mem_free;
5957 
5958 fallback:
5959 	/* Fallback to older reg (by sending previous country setting
5960 	 * again if fw has succeeded and we failed to process here.
5961 	 * The Regdomain should be uniform across driver and fw. Since the
5962 	 * FW has processed the command and sent a success status, we expect
5963 	 * this function to succeed as well. If it doesn't, CTRY needs to be
5964 	 * reverted at the fw and the old SCAN_CHAN_LIST cmd needs to be sent.
5965 	 */
5966 	/* TODO: This is rare, but still should also be handled */
5967 	WARN_ON(1);
5968 mem_free:
5969 	if (reg_info) {
5970 		kfree(reg_info->reg_rules_2g_ptr);
5971 		kfree(reg_info->reg_rules_5g_ptr);
5972 		if (reg_info->is_ext_reg_event) {
5973 			for (i = 0; i < WMI_REG_CURRENT_MAX_AP_TYPE; i++)
5974 				kfree(reg_info->reg_rules_6g_ap_ptr[i]);
5975 
5976 			for (j = 0; j < WMI_REG_CURRENT_MAX_AP_TYPE; j++)
5977 				for (i = 0; i < WMI_REG_MAX_CLIENT_TYPE; i++)
5978 					kfree(reg_info->reg_rules_6g_client_ptr[j][i]);
5979 		}
5980 		kfree(reg_info);
5981 	}
5982 	return ret;
5983 }
5984 
5985 static int ath12k_wmi_rdy_parse(struct ath12k_base *ab, u16 tag, u16 len,
5986 				const void *ptr, void *data)
5987 {
5988 	struct ath12k_wmi_rdy_parse *rdy_parse = data;
5989 	struct wmi_ready_event fixed_param;
5990 	struct ath12k_wmi_mac_addr_params *addr_list;
5991 	struct ath12k_pdev *pdev;
5992 	u32 num_mac_addr;
5993 	int i;
5994 
5995 	switch (tag) {
5996 	case WMI_TAG_READY_EVENT:
5997 		memset(&fixed_param, 0, sizeof(fixed_param));
5998 		memcpy(&fixed_param, (struct wmi_ready_event *)ptr,
5999 		       min_t(u16, sizeof(fixed_param), len));
6000 		ab->wlan_init_status = le32_to_cpu(fixed_param.ready_event_min.status);
6001 		rdy_parse->num_extra_mac_addr =
6002 			le32_to_cpu(fixed_param.ready_event_min.num_extra_mac_addr);
6003 
6004 		ether_addr_copy(ab->mac_addr,
6005 				fixed_param.ready_event_min.mac_addr.addr);
6006 		ab->pktlog_defs_checksum = le32_to_cpu(fixed_param.pktlog_defs_checksum);
6007 		ab->wmi_ready = true;
6008 		break;
6009 	case WMI_TAG_ARRAY_FIXED_STRUCT:
6010 		addr_list = (struct ath12k_wmi_mac_addr_params *)ptr;
6011 		num_mac_addr = rdy_parse->num_extra_mac_addr;
6012 
6013 		if (!(ab->num_radios > 1 && num_mac_addr >= ab->num_radios))
6014 			break;
6015 
6016 		for (i = 0; i < ab->num_radios; i++) {
6017 			pdev = &ab->pdevs[i];
6018 			ether_addr_copy(pdev->mac_addr, addr_list[i].addr);
6019 		}
6020 		ab->pdevs_macaddr_valid = true;
6021 		break;
6022 	default:
6023 		break;
6024 	}
6025 
6026 	return 0;
6027 }
6028 
6029 static int ath12k_ready_event(struct ath12k_base *ab, struct sk_buff *skb)
6030 {
6031 	struct ath12k_wmi_rdy_parse rdy_parse = { };
6032 	int ret;
6033 
6034 	ret = ath12k_wmi_tlv_iter(ab, skb->data, skb->len,
6035 				  ath12k_wmi_rdy_parse, &rdy_parse);
6036 	if (ret) {
6037 		ath12k_warn(ab, "failed to parse tlv %d\n", ret);
6038 		return ret;
6039 	}
6040 
6041 	complete(&ab->wmi_ab.unified_ready);
6042 	return 0;
6043 }
6044 
6045 static void ath12k_peer_delete_resp_event(struct ath12k_base *ab, struct sk_buff *skb)
6046 {
6047 	struct wmi_peer_delete_resp_event peer_del_resp;
6048 	struct ath12k *ar;
6049 
6050 	if (ath12k_pull_peer_del_resp_ev(ab, skb, &peer_del_resp) != 0) {
6051 		ath12k_warn(ab, "failed to extract peer delete resp");
6052 		return;
6053 	}
6054 
6055 	rcu_read_lock();
6056 	ar = ath12k_mac_get_ar_by_vdev_id(ab, le32_to_cpu(peer_del_resp.vdev_id));
6057 	if (!ar) {
6058 		ath12k_warn(ab, "invalid vdev id in peer delete resp ev %d",
6059 			    peer_del_resp.vdev_id);
6060 		rcu_read_unlock();
6061 		return;
6062 	}
6063 
6064 	complete(&ar->peer_delete_done);
6065 	rcu_read_unlock();
6066 	ath12k_dbg(ab, ATH12K_DBG_WMI, "peer delete resp for vdev id %d addr %pM\n",
6067 		   peer_del_resp.vdev_id, peer_del_resp.peer_macaddr.addr);
6068 }
6069 
6070 static void ath12k_vdev_delete_resp_event(struct ath12k_base *ab,
6071 					  struct sk_buff *skb)
6072 {
6073 	struct ath12k *ar;
6074 	u32 vdev_id = 0;
6075 
6076 	if (ath12k_pull_vdev_del_resp_ev(ab, skb, &vdev_id) != 0) {
6077 		ath12k_warn(ab, "failed to extract vdev delete resp");
6078 		return;
6079 	}
6080 
6081 	rcu_read_lock();
6082 	ar = ath12k_mac_get_ar_by_vdev_id(ab, vdev_id);
6083 	if (!ar) {
6084 		ath12k_warn(ab, "invalid vdev id in vdev delete resp ev %d",
6085 			    vdev_id);
6086 		rcu_read_unlock();
6087 		return;
6088 	}
6089 
6090 	complete(&ar->vdev_delete_done);
6091 
6092 	rcu_read_unlock();
6093 
6094 	ath12k_dbg(ab, ATH12K_DBG_WMI, "vdev delete resp for vdev id %d\n",
6095 		   vdev_id);
6096 }
6097 
6098 static const char *ath12k_wmi_vdev_resp_print(u32 vdev_resp_status)
6099 {
6100 	switch (vdev_resp_status) {
6101 	case WMI_VDEV_START_RESPONSE_INVALID_VDEVID:
6102 		return "invalid vdev id";
6103 	case WMI_VDEV_START_RESPONSE_NOT_SUPPORTED:
6104 		return "not supported";
6105 	case WMI_VDEV_START_RESPONSE_DFS_VIOLATION:
6106 		return "dfs violation";
6107 	case WMI_VDEV_START_RESPONSE_INVALID_REGDOMAIN:
6108 		return "invalid regdomain";
6109 	default:
6110 		return "unknown";
6111 	}
6112 }
6113 
6114 static void ath12k_vdev_start_resp_event(struct ath12k_base *ab, struct sk_buff *skb)
6115 {
6116 	struct wmi_vdev_start_resp_event vdev_start_resp;
6117 	struct ath12k *ar;
6118 	u32 status;
6119 
6120 	if (ath12k_pull_vdev_start_resp_tlv(ab, skb, &vdev_start_resp) != 0) {
6121 		ath12k_warn(ab, "failed to extract vdev start resp");
6122 		return;
6123 	}
6124 
6125 	rcu_read_lock();
6126 	ar = ath12k_mac_get_ar_by_vdev_id(ab, le32_to_cpu(vdev_start_resp.vdev_id));
6127 	if (!ar) {
6128 		ath12k_warn(ab, "invalid vdev id in vdev start resp ev %d",
6129 			    vdev_start_resp.vdev_id);
6130 		rcu_read_unlock();
6131 		return;
6132 	}
6133 
6134 	ar->last_wmi_vdev_start_status = 0;
6135 
6136 	status = le32_to_cpu(vdev_start_resp.status);
6137 
6138 	if (WARN_ON_ONCE(status)) {
6139 		ath12k_warn(ab, "vdev start resp error status %d (%s)\n",
6140 			    status, ath12k_wmi_vdev_resp_print(status));
6141 		ar->last_wmi_vdev_start_status = status;
6142 	}
6143 
6144 	complete(&ar->vdev_setup_done);
6145 
6146 	rcu_read_unlock();
6147 
6148 	ath12k_dbg(ab, ATH12K_DBG_WMI, "vdev start resp for vdev id %d",
6149 		   vdev_start_resp.vdev_id);
6150 }
6151 
6152 static void ath12k_bcn_tx_status_event(struct ath12k_base *ab, struct sk_buff *skb)
6153 {
6154 	u32 vdev_id, tx_status;
6155 
6156 	if (ath12k_pull_bcn_tx_status_ev(ab, skb, &vdev_id, &tx_status) != 0) {
6157 		ath12k_warn(ab, "failed to extract bcn tx status");
6158 		return;
6159 	}
6160 }
6161 
6162 static void ath12k_vdev_stopped_event(struct ath12k_base *ab, struct sk_buff *skb)
6163 {
6164 	struct ath12k *ar;
6165 	u32 vdev_id = 0;
6166 
6167 	if (ath12k_pull_vdev_stopped_param_tlv(ab, skb, &vdev_id) != 0) {
6168 		ath12k_warn(ab, "failed to extract vdev stopped event");
6169 		return;
6170 	}
6171 
6172 	rcu_read_lock();
6173 	ar = ath12k_mac_get_ar_by_vdev_id(ab, vdev_id);
6174 	if (!ar) {
6175 		ath12k_warn(ab, "invalid vdev id in vdev stopped ev %d",
6176 			    vdev_id);
6177 		rcu_read_unlock();
6178 		return;
6179 	}
6180 
6181 	complete(&ar->vdev_setup_done);
6182 
6183 	rcu_read_unlock();
6184 
6185 	ath12k_dbg(ab, ATH12K_DBG_WMI, "vdev stopped for vdev id %d", vdev_id);
6186 }
6187 
6188 static void ath12k_mgmt_rx_event(struct ath12k_base *ab, struct sk_buff *skb)
6189 {
6190 	struct ath12k_wmi_mgmt_rx_arg rx_ev = {0};
6191 	struct ath12k *ar;
6192 	struct ieee80211_rx_status *status = IEEE80211_SKB_RXCB(skb);
6193 	struct ieee80211_hdr *hdr;
6194 	u16 fc;
6195 	struct ieee80211_supported_band *sband;
6196 
6197 	if (ath12k_pull_mgmt_rx_params_tlv(ab, skb, &rx_ev) != 0) {
6198 		ath12k_warn(ab, "failed to extract mgmt rx event");
6199 		dev_kfree_skb(skb);
6200 		return;
6201 	}
6202 
6203 	memset(status, 0, sizeof(*status));
6204 
6205 	ath12k_dbg(ab, ATH12K_DBG_MGMT, "mgmt rx event status %08x\n",
6206 		   rx_ev.status);
6207 
6208 	rcu_read_lock();
6209 	ar = ath12k_mac_get_ar_by_pdev_id(ab, rx_ev.pdev_id);
6210 
6211 	if (!ar) {
6212 		ath12k_warn(ab, "invalid pdev_id %d in mgmt_rx_event\n",
6213 			    rx_ev.pdev_id);
6214 		dev_kfree_skb(skb);
6215 		goto exit;
6216 	}
6217 
6218 	if ((test_bit(ATH12K_FLAG_CAC_RUNNING, &ar->dev_flags)) ||
6219 	    (rx_ev.status & (WMI_RX_STATUS_ERR_DECRYPT |
6220 			     WMI_RX_STATUS_ERR_KEY_CACHE_MISS |
6221 			     WMI_RX_STATUS_ERR_CRC))) {
6222 		dev_kfree_skb(skb);
6223 		goto exit;
6224 	}
6225 
6226 	if (rx_ev.status & WMI_RX_STATUS_ERR_MIC)
6227 		status->flag |= RX_FLAG_MMIC_ERROR;
6228 
6229 	if (rx_ev.chan_freq >= ATH12K_MIN_6G_FREQ &&
6230 	    rx_ev.chan_freq <= ATH12K_MAX_6G_FREQ) {
6231 		status->band = NL80211_BAND_6GHZ;
6232 		status->freq = rx_ev.chan_freq;
6233 	} else if (rx_ev.channel >= 1 && rx_ev.channel <= 14) {
6234 		status->band = NL80211_BAND_2GHZ;
6235 	} else if (rx_ev.channel >= 36 && rx_ev.channel <= ATH12K_MAX_5G_CHAN) {
6236 		status->band = NL80211_BAND_5GHZ;
6237 	} else {
6238 		/* Shouldn't happen unless list of advertised channels to
6239 		 * mac80211 has been changed.
6240 		 */
6241 		WARN_ON_ONCE(1);
6242 		dev_kfree_skb(skb);
6243 		goto exit;
6244 	}
6245 
6246 	if (rx_ev.phy_mode == MODE_11B &&
6247 	    (status->band == NL80211_BAND_5GHZ || status->band == NL80211_BAND_6GHZ))
6248 		ath12k_dbg(ab, ATH12K_DBG_WMI,
6249 			   "wmi mgmt rx 11b (CCK) on 5/6GHz, band = %d\n", status->band);
6250 
6251 	sband = &ar->mac.sbands[status->band];
6252 
6253 	if (status->band != NL80211_BAND_6GHZ)
6254 		status->freq = ieee80211_channel_to_frequency(rx_ev.channel,
6255 							      status->band);
6256 
6257 	status->signal = rx_ev.snr + ATH12K_DEFAULT_NOISE_FLOOR;
6258 	status->rate_idx = ath12k_mac_bitrate_to_idx(sband, rx_ev.rate / 100);
6259 
6260 	hdr = (struct ieee80211_hdr *)skb->data;
6261 	fc = le16_to_cpu(hdr->frame_control);
6262 
6263 	/* Firmware is guaranteed to report all essential management frames via
6264 	 * WMI while it can deliver some extra via HTT. Since there can be
6265 	 * duplicates split the reporting wrt monitor/sniffing.
6266 	 */
6267 	status->flag |= RX_FLAG_SKIP_MONITOR;
6268 
6269 	/* In case of PMF, FW delivers decrypted frames with Protected Bit set
6270 	 * including group privacy action frames.
6271 	 */
6272 	if (ieee80211_has_protected(hdr->frame_control)) {
6273 		status->flag |= RX_FLAG_DECRYPTED;
6274 
6275 		if (!ieee80211_is_robust_mgmt_frame(skb)) {
6276 			status->flag |= RX_FLAG_IV_STRIPPED |
6277 					RX_FLAG_MMIC_STRIPPED;
6278 			hdr->frame_control = __cpu_to_le16(fc &
6279 					     ~IEEE80211_FCTL_PROTECTED);
6280 		}
6281 	}
6282 
6283 	if (ieee80211_is_beacon(hdr->frame_control))
6284 		ath12k_mac_handle_beacon(ar, skb);
6285 
6286 	ath12k_dbg(ab, ATH12K_DBG_MGMT,
6287 		   "event mgmt rx skb %p len %d ftype %02x stype %02x\n",
6288 		   skb, skb->len,
6289 		   fc & IEEE80211_FCTL_FTYPE, fc & IEEE80211_FCTL_STYPE);
6290 
6291 	ath12k_dbg(ab, ATH12K_DBG_MGMT,
6292 		   "event mgmt rx freq %d band %d snr %d, rate_idx %d\n",
6293 		   status->freq, status->band, status->signal,
6294 		   status->rate_idx);
6295 
6296 	ieee80211_rx_ni(ath12k_ar_to_hw(ar), skb);
6297 
6298 exit:
6299 	rcu_read_unlock();
6300 }
6301 
6302 static void ath12k_mgmt_tx_compl_event(struct ath12k_base *ab, struct sk_buff *skb)
6303 {
6304 	struct wmi_mgmt_tx_compl_event tx_compl_param = {0};
6305 	struct ath12k *ar;
6306 
6307 	if (ath12k_pull_mgmt_tx_compl_param_tlv(ab, skb, &tx_compl_param) != 0) {
6308 		ath12k_warn(ab, "failed to extract mgmt tx compl event");
6309 		return;
6310 	}
6311 
6312 	rcu_read_lock();
6313 	ar = ath12k_mac_get_ar_by_pdev_id(ab, le32_to_cpu(tx_compl_param.pdev_id));
6314 	if (!ar) {
6315 		ath12k_warn(ab, "invalid pdev id %d in mgmt_tx_compl_event\n",
6316 			    tx_compl_param.pdev_id);
6317 		goto exit;
6318 	}
6319 
6320 	wmi_process_mgmt_tx_comp(ar, le32_to_cpu(tx_compl_param.desc_id),
6321 				 le32_to_cpu(tx_compl_param.status));
6322 
6323 	ath12k_dbg(ab, ATH12K_DBG_MGMT,
6324 		   "mgmt tx compl ev pdev_id %d, desc_id %d, status %d",
6325 		   tx_compl_param.pdev_id, tx_compl_param.desc_id,
6326 		   tx_compl_param.status);
6327 
6328 exit:
6329 	rcu_read_unlock();
6330 }
6331 
6332 static struct ath12k *ath12k_get_ar_on_scan_state(struct ath12k_base *ab,
6333 						  u32 vdev_id,
6334 						  enum ath12k_scan_state state)
6335 {
6336 	int i;
6337 	struct ath12k_pdev *pdev;
6338 	struct ath12k *ar;
6339 
6340 	for (i = 0; i < ab->num_radios; i++) {
6341 		pdev = rcu_dereference(ab->pdevs_active[i]);
6342 		if (pdev && pdev->ar) {
6343 			ar = pdev->ar;
6344 
6345 			spin_lock_bh(&ar->data_lock);
6346 			if (ar->scan.state == state &&
6347 			    ar->scan.arvif &&
6348 			    ar->scan.arvif->vdev_id == vdev_id) {
6349 				spin_unlock_bh(&ar->data_lock);
6350 				return ar;
6351 			}
6352 			spin_unlock_bh(&ar->data_lock);
6353 		}
6354 	}
6355 	return NULL;
6356 }
6357 
6358 static void ath12k_scan_event(struct ath12k_base *ab, struct sk_buff *skb)
6359 {
6360 	struct ath12k *ar;
6361 	struct wmi_scan_event scan_ev = {0};
6362 
6363 	if (ath12k_pull_scan_ev(ab, skb, &scan_ev) != 0) {
6364 		ath12k_warn(ab, "failed to extract scan event");
6365 		return;
6366 	}
6367 
6368 	rcu_read_lock();
6369 
6370 	/* In case the scan was cancelled, ex. during interface teardown,
6371 	 * the interface will not be found in active interfaces.
6372 	 * Rather, in such scenarios, iterate over the active pdev's to
6373 	 * search 'ar' if the corresponding 'ar' scan is ABORTING and the
6374 	 * aborting scan's vdev id matches this event info.
6375 	 */
6376 	if (le32_to_cpu(scan_ev.event_type) == WMI_SCAN_EVENT_COMPLETED &&
6377 	    le32_to_cpu(scan_ev.reason) == WMI_SCAN_REASON_CANCELLED) {
6378 		ar = ath12k_get_ar_on_scan_state(ab, le32_to_cpu(scan_ev.vdev_id),
6379 						 ATH12K_SCAN_ABORTING);
6380 		if (!ar)
6381 			ar = ath12k_get_ar_on_scan_state(ab, le32_to_cpu(scan_ev.vdev_id),
6382 							 ATH12K_SCAN_RUNNING);
6383 	} else {
6384 		ar = ath12k_mac_get_ar_by_vdev_id(ab, le32_to_cpu(scan_ev.vdev_id));
6385 	}
6386 
6387 	if (!ar) {
6388 		ath12k_warn(ab, "Received scan event for unknown vdev");
6389 		rcu_read_unlock();
6390 		return;
6391 	}
6392 
6393 	spin_lock_bh(&ar->data_lock);
6394 
6395 	ath12k_dbg(ab, ATH12K_DBG_WMI,
6396 		   "scan event %s type %d reason %d freq %d req_id %d scan_id %d vdev_id %d state %s (%d)\n",
6397 		   ath12k_wmi_event_scan_type_str(le32_to_cpu(scan_ev.event_type),
6398 						  le32_to_cpu(scan_ev.reason)),
6399 		   le32_to_cpu(scan_ev.event_type),
6400 		   le32_to_cpu(scan_ev.reason),
6401 		   le32_to_cpu(scan_ev.channel_freq),
6402 		   le32_to_cpu(scan_ev.scan_req_id),
6403 		   le32_to_cpu(scan_ev.scan_id),
6404 		   le32_to_cpu(scan_ev.vdev_id),
6405 		   ath12k_scan_state_str(ar->scan.state), ar->scan.state);
6406 
6407 	switch (le32_to_cpu(scan_ev.event_type)) {
6408 	case WMI_SCAN_EVENT_STARTED:
6409 		ath12k_wmi_event_scan_started(ar);
6410 		break;
6411 	case WMI_SCAN_EVENT_COMPLETED:
6412 		ath12k_wmi_event_scan_completed(ar);
6413 		break;
6414 	case WMI_SCAN_EVENT_BSS_CHANNEL:
6415 		ath12k_wmi_event_scan_bss_chan(ar);
6416 		break;
6417 	case WMI_SCAN_EVENT_FOREIGN_CHAN:
6418 		ath12k_wmi_event_scan_foreign_chan(ar, le32_to_cpu(scan_ev.channel_freq));
6419 		break;
6420 	case WMI_SCAN_EVENT_START_FAILED:
6421 		ath12k_warn(ab, "received scan start failure event\n");
6422 		ath12k_wmi_event_scan_start_failed(ar);
6423 		break;
6424 	case WMI_SCAN_EVENT_DEQUEUED:
6425 		__ath12k_mac_scan_finish(ar);
6426 		break;
6427 	case WMI_SCAN_EVENT_PREEMPTED:
6428 	case WMI_SCAN_EVENT_RESTARTED:
6429 	case WMI_SCAN_EVENT_FOREIGN_CHAN_EXIT:
6430 	default:
6431 		break;
6432 	}
6433 
6434 	spin_unlock_bh(&ar->data_lock);
6435 
6436 	rcu_read_unlock();
6437 }
6438 
6439 static void ath12k_peer_sta_kickout_event(struct ath12k_base *ab, struct sk_buff *skb)
6440 {
6441 	struct wmi_peer_sta_kickout_arg arg = {};
6442 	struct ieee80211_sta *sta;
6443 	struct ath12k_peer *peer;
6444 	struct ath12k *ar;
6445 
6446 	if (ath12k_pull_peer_sta_kickout_ev(ab, skb, &arg) != 0) {
6447 		ath12k_warn(ab, "failed to extract peer sta kickout event");
6448 		return;
6449 	}
6450 
6451 	rcu_read_lock();
6452 
6453 	spin_lock_bh(&ab->base_lock);
6454 
6455 	peer = ath12k_peer_find_by_addr(ab, arg.mac_addr);
6456 
6457 	if (!peer) {
6458 		ath12k_warn(ab, "peer not found %pM\n",
6459 			    arg.mac_addr);
6460 		goto exit;
6461 	}
6462 
6463 	ar = ath12k_mac_get_ar_by_vdev_id(ab, peer->vdev_id);
6464 	if (!ar) {
6465 		ath12k_warn(ab, "invalid vdev id in peer sta kickout ev %d",
6466 			    peer->vdev_id);
6467 		goto exit;
6468 	}
6469 
6470 	sta = ieee80211_find_sta_by_ifaddr(ath12k_ar_to_hw(ar),
6471 					   arg.mac_addr, NULL);
6472 	if (!sta) {
6473 		ath12k_warn(ab, "Spurious quick kickout for STA %pM\n",
6474 			    arg.mac_addr);
6475 		goto exit;
6476 	}
6477 
6478 	ath12k_dbg(ab, ATH12K_DBG_WMI, "peer sta kickout event %pM",
6479 		   arg.mac_addr);
6480 
6481 	ieee80211_report_low_ack(sta, 10);
6482 
6483 exit:
6484 	spin_unlock_bh(&ab->base_lock);
6485 	rcu_read_unlock();
6486 }
6487 
6488 static void ath12k_roam_event(struct ath12k_base *ab, struct sk_buff *skb)
6489 {
6490 	struct wmi_roam_event roam_ev = {};
6491 	struct ath12k *ar;
6492 	u32 vdev_id;
6493 	u8 roam_reason;
6494 
6495 	if (ath12k_pull_roam_ev(ab, skb, &roam_ev) != 0) {
6496 		ath12k_warn(ab, "failed to extract roam event");
6497 		return;
6498 	}
6499 
6500 	vdev_id = le32_to_cpu(roam_ev.vdev_id);
6501 	roam_reason = u32_get_bits(le32_to_cpu(roam_ev.reason),
6502 				   WMI_ROAM_REASON_MASK);
6503 
6504 	ath12k_dbg(ab, ATH12K_DBG_WMI,
6505 		   "wmi roam event vdev %u reason %d rssi %d\n",
6506 		   vdev_id, roam_reason, roam_ev.rssi);
6507 
6508 	rcu_read_lock();
6509 	ar = ath12k_mac_get_ar_by_vdev_id(ab, vdev_id);
6510 	if (!ar) {
6511 		ath12k_warn(ab, "invalid vdev id in roam ev %d", vdev_id);
6512 		rcu_read_unlock();
6513 		return;
6514 	}
6515 
6516 	if (roam_reason >= WMI_ROAM_REASON_MAX)
6517 		ath12k_warn(ab, "ignoring unknown roam event reason %d on vdev %i\n",
6518 			    roam_reason, vdev_id);
6519 
6520 	switch (roam_reason) {
6521 	case WMI_ROAM_REASON_BEACON_MISS:
6522 		ath12k_mac_handle_beacon_miss(ar, vdev_id);
6523 		break;
6524 	case WMI_ROAM_REASON_BETTER_AP:
6525 	case WMI_ROAM_REASON_LOW_RSSI:
6526 	case WMI_ROAM_REASON_SUITABLE_AP_FOUND:
6527 	case WMI_ROAM_REASON_HO_FAILED:
6528 		ath12k_warn(ab, "ignoring not implemented roam event reason %d on vdev %i\n",
6529 			    roam_reason, vdev_id);
6530 		break;
6531 	}
6532 
6533 	rcu_read_unlock();
6534 }
6535 
6536 static void ath12k_chan_info_event(struct ath12k_base *ab, struct sk_buff *skb)
6537 {
6538 	struct wmi_chan_info_event ch_info_ev = {0};
6539 	struct ath12k *ar;
6540 	struct survey_info *survey;
6541 	int idx;
6542 	/* HW channel counters frequency value in hertz */
6543 	u32 cc_freq_hz = ab->cc_freq_hz;
6544 
6545 	if (ath12k_pull_chan_info_ev(ab, skb, &ch_info_ev) != 0) {
6546 		ath12k_warn(ab, "failed to extract chan info event");
6547 		return;
6548 	}
6549 
6550 	ath12k_dbg(ab, ATH12K_DBG_WMI,
6551 		   "chan info vdev_id %d err_code %d freq %d cmd_flags %d noise_floor %d rx_clear_count %d cycle_count %d mac_clk_mhz %d\n",
6552 		   ch_info_ev.vdev_id, ch_info_ev.err_code, ch_info_ev.freq,
6553 		   ch_info_ev.cmd_flags, ch_info_ev.noise_floor,
6554 		   ch_info_ev.rx_clear_count, ch_info_ev.cycle_count,
6555 		   ch_info_ev.mac_clk_mhz);
6556 
6557 	if (le32_to_cpu(ch_info_ev.cmd_flags) == WMI_CHAN_INFO_END_RESP) {
6558 		ath12k_dbg(ab, ATH12K_DBG_WMI, "chan info report completed\n");
6559 		return;
6560 	}
6561 
6562 	rcu_read_lock();
6563 	ar = ath12k_mac_get_ar_by_vdev_id(ab, le32_to_cpu(ch_info_ev.vdev_id));
6564 	if (!ar) {
6565 		ath12k_warn(ab, "invalid vdev id in chan info ev %d",
6566 			    ch_info_ev.vdev_id);
6567 		rcu_read_unlock();
6568 		return;
6569 	}
6570 	spin_lock_bh(&ar->data_lock);
6571 
6572 	switch (ar->scan.state) {
6573 	case ATH12K_SCAN_IDLE:
6574 	case ATH12K_SCAN_STARTING:
6575 		ath12k_warn(ab, "received chan info event without a scan request, ignoring\n");
6576 		goto exit;
6577 	case ATH12K_SCAN_RUNNING:
6578 	case ATH12K_SCAN_ABORTING:
6579 		break;
6580 	}
6581 
6582 	idx = freq_to_idx(ar, le32_to_cpu(ch_info_ev.freq));
6583 	if (idx >= ARRAY_SIZE(ar->survey)) {
6584 		ath12k_warn(ab, "chan info: invalid frequency %d (idx %d out of bounds)\n",
6585 			    ch_info_ev.freq, idx);
6586 		goto exit;
6587 	}
6588 
6589 	/* If FW provides MAC clock frequency in Mhz, overriding the initialized
6590 	 * HW channel counters frequency value
6591 	 */
6592 	if (ch_info_ev.mac_clk_mhz)
6593 		cc_freq_hz = (le32_to_cpu(ch_info_ev.mac_clk_mhz) * 1000);
6594 
6595 	if (ch_info_ev.cmd_flags == WMI_CHAN_INFO_START_RESP) {
6596 		survey = &ar->survey[idx];
6597 		memset(survey, 0, sizeof(*survey));
6598 		survey->noise = le32_to_cpu(ch_info_ev.noise_floor);
6599 		survey->filled = SURVEY_INFO_NOISE_DBM | SURVEY_INFO_TIME |
6600 				 SURVEY_INFO_TIME_BUSY;
6601 		survey->time = div_u64(le32_to_cpu(ch_info_ev.cycle_count), cc_freq_hz);
6602 		survey->time_busy = div_u64(le32_to_cpu(ch_info_ev.rx_clear_count),
6603 					    cc_freq_hz);
6604 	}
6605 exit:
6606 	spin_unlock_bh(&ar->data_lock);
6607 	rcu_read_unlock();
6608 }
6609 
6610 static void
6611 ath12k_pdev_bss_chan_info_event(struct ath12k_base *ab, struct sk_buff *skb)
6612 {
6613 	struct wmi_pdev_bss_chan_info_event bss_ch_info_ev = {};
6614 	struct survey_info *survey;
6615 	struct ath12k *ar;
6616 	u32 cc_freq_hz = ab->cc_freq_hz;
6617 	u64 busy, total, tx, rx, rx_bss;
6618 	int idx;
6619 
6620 	if (ath12k_pull_pdev_bss_chan_info_ev(ab, skb, &bss_ch_info_ev) != 0) {
6621 		ath12k_warn(ab, "failed to extract pdev bss chan info event");
6622 		return;
6623 	}
6624 
6625 	busy = (u64)(le32_to_cpu(bss_ch_info_ev.rx_clear_count_high)) << 32 |
6626 		le32_to_cpu(bss_ch_info_ev.rx_clear_count_low);
6627 
6628 	total = (u64)(le32_to_cpu(bss_ch_info_ev.cycle_count_high)) << 32 |
6629 		le32_to_cpu(bss_ch_info_ev.cycle_count_low);
6630 
6631 	tx = (u64)(le32_to_cpu(bss_ch_info_ev.tx_cycle_count_high)) << 32 |
6632 		le32_to_cpu(bss_ch_info_ev.tx_cycle_count_low);
6633 
6634 	rx = (u64)(le32_to_cpu(bss_ch_info_ev.rx_cycle_count_high)) << 32 |
6635 		le32_to_cpu(bss_ch_info_ev.rx_cycle_count_low);
6636 
6637 	rx_bss = (u64)(le32_to_cpu(bss_ch_info_ev.rx_bss_cycle_count_high)) << 32 |
6638 		le32_to_cpu(bss_ch_info_ev.rx_bss_cycle_count_low);
6639 
6640 	ath12k_dbg(ab, ATH12K_DBG_WMI,
6641 		   "pdev bss chan info:\n pdev_id: %d freq: %d noise: %d cycle: busy %llu total %llu tx %llu rx %llu rx_bss %llu\n",
6642 		   bss_ch_info_ev.pdev_id, bss_ch_info_ev.freq,
6643 		   bss_ch_info_ev.noise_floor, busy, total,
6644 		   tx, rx, rx_bss);
6645 
6646 	rcu_read_lock();
6647 	ar = ath12k_mac_get_ar_by_pdev_id(ab, le32_to_cpu(bss_ch_info_ev.pdev_id));
6648 
6649 	if (!ar) {
6650 		ath12k_warn(ab, "invalid pdev id %d in bss_chan_info event\n",
6651 			    bss_ch_info_ev.pdev_id);
6652 		rcu_read_unlock();
6653 		return;
6654 	}
6655 
6656 	spin_lock_bh(&ar->data_lock);
6657 	idx = freq_to_idx(ar, le32_to_cpu(bss_ch_info_ev.freq));
6658 	if (idx >= ARRAY_SIZE(ar->survey)) {
6659 		ath12k_warn(ab, "bss chan info: invalid frequency %d (idx %d out of bounds)\n",
6660 			    bss_ch_info_ev.freq, idx);
6661 		goto exit;
6662 	}
6663 
6664 	survey = &ar->survey[idx];
6665 
6666 	survey->noise     = le32_to_cpu(bss_ch_info_ev.noise_floor);
6667 	survey->time      = div_u64(total, cc_freq_hz);
6668 	survey->time_busy = div_u64(busy, cc_freq_hz);
6669 	survey->time_rx   = div_u64(rx_bss, cc_freq_hz);
6670 	survey->time_tx   = div_u64(tx, cc_freq_hz);
6671 	survey->filled   |= (SURVEY_INFO_NOISE_DBM |
6672 			     SURVEY_INFO_TIME |
6673 			     SURVEY_INFO_TIME_BUSY |
6674 			     SURVEY_INFO_TIME_RX |
6675 			     SURVEY_INFO_TIME_TX);
6676 exit:
6677 	spin_unlock_bh(&ar->data_lock);
6678 	complete(&ar->bss_survey_done);
6679 
6680 	rcu_read_unlock();
6681 }
6682 
6683 static void ath12k_vdev_install_key_compl_event(struct ath12k_base *ab,
6684 						struct sk_buff *skb)
6685 {
6686 	struct wmi_vdev_install_key_complete_arg install_key_compl = {0};
6687 	struct ath12k *ar;
6688 
6689 	if (ath12k_pull_vdev_install_key_compl_ev(ab, skb, &install_key_compl) != 0) {
6690 		ath12k_warn(ab, "failed to extract install key compl event");
6691 		return;
6692 	}
6693 
6694 	ath12k_dbg(ab, ATH12K_DBG_WMI,
6695 		   "vdev install key ev idx %d flags %08x macaddr %pM status %d\n",
6696 		   install_key_compl.key_idx, install_key_compl.key_flags,
6697 		   install_key_compl.macaddr, install_key_compl.status);
6698 
6699 	rcu_read_lock();
6700 	ar = ath12k_mac_get_ar_by_vdev_id(ab, install_key_compl.vdev_id);
6701 	if (!ar) {
6702 		ath12k_warn(ab, "invalid vdev id in install key compl ev %d",
6703 			    install_key_compl.vdev_id);
6704 		rcu_read_unlock();
6705 		return;
6706 	}
6707 
6708 	ar->install_key_status = 0;
6709 
6710 	if (install_key_compl.status != WMI_VDEV_INSTALL_KEY_COMPL_STATUS_SUCCESS) {
6711 		ath12k_warn(ab, "install key failed for %pM status %d\n",
6712 			    install_key_compl.macaddr, install_key_compl.status);
6713 		ar->install_key_status = install_key_compl.status;
6714 	}
6715 
6716 	complete(&ar->install_key_done);
6717 	rcu_read_unlock();
6718 }
6719 
6720 static int ath12k_wmi_tlv_services_parser(struct ath12k_base *ab,
6721 					  u16 tag, u16 len,
6722 					  const void *ptr,
6723 					  void *data)
6724 {
6725 	const struct wmi_service_available_event *ev;
6726 	u32 *wmi_ext2_service_bitmap;
6727 	int i, j;
6728 	u16 expected_len;
6729 
6730 	expected_len = WMI_SERVICE_SEGMENT_BM_SIZE32 * sizeof(u32);
6731 	if (len < expected_len) {
6732 		ath12k_warn(ab, "invalid length %d for the WMI services available tag 0x%x\n",
6733 			    len, tag);
6734 		return -EINVAL;
6735 	}
6736 
6737 	switch (tag) {
6738 	case WMI_TAG_SERVICE_AVAILABLE_EVENT:
6739 		ev = (struct wmi_service_available_event *)ptr;
6740 		for (i = 0, j = WMI_MAX_SERVICE;
6741 		     i < WMI_SERVICE_SEGMENT_BM_SIZE32 && j < WMI_MAX_EXT_SERVICE;
6742 		     i++) {
6743 			do {
6744 				if (le32_to_cpu(ev->wmi_service_segment_bitmap[i]) &
6745 				    BIT(j % WMI_AVAIL_SERVICE_BITS_IN_SIZE32))
6746 					set_bit(j, ab->wmi_ab.svc_map);
6747 			} while (++j % WMI_AVAIL_SERVICE_BITS_IN_SIZE32);
6748 		}
6749 
6750 		ath12k_dbg(ab, ATH12K_DBG_WMI,
6751 			   "wmi_ext_service_bitmap 0x%x 0x%x 0x%x 0x%x",
6752 			   ev->wmi_service_segment_bitmap[0],
6753 			   ev->wmi_service_segment_bitmap[1],
6754 			   ev->wmi_service_segment_bitmap[2],
6755 			   ev->wmi_service_segment_bitmap[3]);
6756 		break;
6757 	case WMI_TAG_ARRAY_UINT32:
6758 		wmi_ext2_service_bitmap = (u32 *)ptr;
6759 		for (i = 0, j = WMI_MAX_EXT_SERVICE;
6760 		     i < WMI_SERVICE_SEGMENT_BM_SIZE32 && j < WMI_MAX_EXT2_SERVICE;
6761 		     i++) {
6762 			do {
6763 				if (wmi_ext2_service_bitmap[i] &
6764 				    BIT(j % WMI_AVAIL_SERVICE_BITS_IN_SIZE32))
6765 					set_bit(j, ab->wmi_ab.svc_map);
6766 			} while (++j % WMI_AVAIL_SERVICE_BITS_IN_SIZE32);
6767 		}
6768 
6769 		ath12k_dbg(ab, ATH12K_DBG_WMI,
6770 			   "wmi_ext2_service_bitmap 0x%04x 0x%04x 0x%04x 0x%04x",
6771 			   wmi_ext2_service_bitmap[0], wmi_ext2_service_bitmap[1],
6772 			   wmi_ext2_service_bitmap[2], wmi_ext2_service_bitmap[3]);
6773 		break;
6774 	}
6775 	return 0;
6776 }
6777 
6778 static int ath12k_service_available_event(struct ath12k_base *ab, struct sk_buff *skb)
6779 {
6780 	int ret;
6781 
6782 	ret = ath12k_wmi_tlv_iter(ab, skb->data, skb->len,
6783 				  ath12k_wmi_tlv_services_parser,
6784 				  NULL);
6785 	return ret;
6786 }
6787 
6788 static void ath12k_peer_assoc_conf_event(struct ath12k_base *ab, struct sk_buff *skb)
6789 {
6790 	struct wmi_peer_assoc_conf_arg peer_assoc_conf = {0};
6791 	struct ath12k *ar;
6792 
6793 	if (ath12k_pull_peer_assoc_conf_ev(ab, skb, &peer_assoc_conf) != 0) {
6794 		ath12k_warn(ab, "failed to extract peer assoc conf event");
6795 		return;
6796 	}
6797 
6798 	ath12k_dbg(ab, ATH12K_DBG_WMI,
6799 		   "peer assoc conf ev vdev id %d macaddr %pM\n",
6800 		   peer_assoc_conf.vdev_id, peer_assoc_conf.macaddr);
6801 
6802 	rcu_read_lock();
6803 	ar = ath12k_mac_get_ar_by_vdev_id(ab, peer_assoc_conf.vdev_id);
6804 
6805 	if (!ar) {
6806 		ath12k_warn(ab, "invalid vdev id in peer assoc conf ev %d",
6807 			    peer_assoc_conf.vdev_id);
6808 		rcu_read_unlock();
6809 		return;
6810 	}
6811 
6812 	complete(&ar->peer_assoc_done);
6813 	rcu_read_unlock();
6814 }
6815 
6816 static void ath12k_update_stats_event(struct ath12k_base *ab, struct sk_buff *skb)
6817 {
6818 }
6819 
6820 /* PDEV_CTL_FAILSAFE_CHECK_EVENT is received from FW when the frequency scanned
6821  * is not part of BDF CTL(Conformance test limits) table entries.
6822  */
6823 static void ath12k_pdev_ctl_failsafe_check_event(struct ath12k_base *ab,
6824 						 struct sk_buff *skb)
6825 {
6826 	const void **tb;
6827 	const struct wmi_pdev_ctl_failsafe_chk_event *ev;
6828 	int ret;
6829 
6830 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
6831 	if (IS_ERR(tb)) {
6832 		ret = PTR_ERR(tb);
6833 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
6834 		return;
6835 	}
6836 
6837 	ev = tb[WMI_TAG_PDEV_CTL_FAILSAFE_CHECK_EVENT];
6838 	if (!ev) {
6839 		ath12k_warn(ab, "failed to fetch pdev ctl failsafe check ev");
6840 		kfree(tb);
6841 		return;
6842 	}
6843 
6844 	ath12k_dbg(ab, ATH12K_DBG_WMI,
6845 		   "pdev ctl failsafe check ev status %d\n",
6846 		   ev->ctl_failsafe_status);
6847 
6848 	/* If ctl_failsafe_status is set to 1 FW will max out the Transmit power
6849 	 * to 10 dBm else the CTL power entry in the BDF would be picked up.
6850 	 */
6851 	if (ev->ctl_failsafe_status != 0)
6852 		ath12k_warn(ab, "pdev ctl failsafe failure status %d",
6853 			    ev->ctl_failsafe_status);
6854 
6855 	kfree(tb);
6856 }
6857 
6858 static void
6859 ath12k_wmi_process_csa_switch_count_event(struct ath12k_base *ab,
6860 					  const struct ath12k_wmi_pdev_csa_event *ev,
6861 					  const u32 *vdev_ids)
6862 {
6863 	int i;
6864 	struct ieee80211_bss_conf *conf;
6865 	struct ath12k_link_vif *arvif;
6866 	struct ath12k_vif *ahvif;
6867 
6868 	/* Finish CSA once the switch count becomes NULL */
6869 	if (ev->current_switch_count)
6870 		return;
6871 
6872 	rcu_read_lock();
6873 	for (i = 0; i < le32_to_cpu(ev->num_vdevs); i++) {
6874 		arvif = ath12k_mac_get_arvif_by_vdev_id(ab, vdev_ids[i]);
6875 
6876 		if (!arvif) {
6877 			ath12k_warn(ab, "Recvd csa status for unknown vdev %d",
6878 				    vdev_ids[i]);
6879 			continue;
6880 		}
6881 		ahvif = arvif->ahvif;
6882 
6883 		if (arvif->link_id >= IEEE80211_MLD_MAX_NUM_LINKS) {
6884 			ath12k_warn(ab, "Invalid CSA switch count even link id: %d\n",
6885 				    arvif->link_id);
6886 			continue;
6887 		}
6888 
6889 		conf = rcu_dereference(ahvif->vif->link_conf[arvif->link_id]);
6890 		if (!conf) {
6891 			ath12k_warn(ab, "unable to access bss link conf in process csa for vif %pM link %u\n",
6892 				    ahvif->vif->addr, arvif->link_id);
6893 			continue;
6894 		}
6895 
6896 		if (arvif->is_up && conf->csa_active)
6897 			ieee80211_csa_finish(ahvif->vif, 0);
6898 	}
6899 	rcu_read_unlock();
6900 }
6901 
6902 static void
6903 ath12k_wmi_pdev_csa_switch_count_status_event(struct ath12k_base *ab,
6904 					      struct sk_buff *skb)
6905 {
6906 	const void **tb;
6907 	const struct ath12k_wmi_pdev_csa_event *ev;
6908 	const u32 *vdev_ids;
6909 	int ret;
6910 
6911 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
6912 	if (IS_ERR(tb)) {
6913 		ret = PTR_ERR(tb);
6914 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
6915 		return;
6916 	}
6917 
6918 	ev = tb[WMI_TAG_PDEV_CSA_SWITCH_COUNT_STATUS_EVENT];
6919 	vdev_ids = tb[WMI_TAG_ARRAY_UINT32];
6920 
6921 	if (!ev || !vdev_ids) {
6922 		ath12k_warn(ab, "failed to fetch pdev csa switch count ev");
6923 		kfree(tb);
6924 		return;
6925 	}
6926 
6927 	ath12k_dbg(ab, ATH12K_DBG_WMI,
6928 		   "pdev csa switch count %d for pdev %d, num_vdevs %d",
6929 		   ev->current_switch_count, ev->pdev_id,
6930 		   ev->num_vdevs);
6931 
6932 	ath12k_wmi_process_csa_switch_count_event(ab, ev, vdev_ids);
6933 
6934 	kfree(tb);
6935 }
6936 
6937 static void
6938 ath12k_wmi_pdev_dfs_radar_detected_event(struct ath12k_base *ab, struct sk_buff *skb)
6939 {
6940 	const void **tb;
6941 	struct ath12k_mac_get_any_chanctx_conf_arg arg;
6942 	const struct ath12k_wmi_pdev_radar_event *ev;
6943 	struct ath12k *ar;
6944 	int ret;
6945 
6946 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
6947 	if (IS_ERR(tb)) {
6948 		ret = PTR_ERR(tb);
6949 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
6950 		return;
6951 	}
6952 
6953 	ev = tb[WMI_TAG_PDEV_DFS_RADAR_DETECTION_EVENT];
6954 
6955 	if (!ev) {
6956 		ath12k_warn(ab, "failed to fetch pdev dfs radar detected ev");
6957 		kfree(tb);
6958 		return;
6959 	}
6960 
6961 	ath12k_dbg(ab, ATH12K_DBG_WMI,
6962 		   "pdev dfs radar detected on pdev %d, detection mode %d, chan freq %d, chan_width %d, detector id %d, seg id %d, timestamp %d, chirp %d, freq offset %d, sidx %d",
6963 		   ev->pdev_id, ev->detection_mode, ev->chan_freq, ev->chan_width,
6964 		   ev->detector_id, ev->segment_id, ev->timestamp, ev->is_chirp,
6965 		   ev->freq_offset, ev->sidx);
6966 
6967 	rcu_read_lock();
6968 
6969 	ar = ath12k_mac_get_ar_by_pdev_id(ab, le32_to_cpu(ev->pdev_id));
6970 
6971 	if (!ar) {
6972 		ath12k_warn(ab, "radar detected in invalid pdev %d\n",
6973 			    ev->pdev_id);
6974 		goto exit;
6975 	}
6976 
6977 	arg.ar = ar;
6978 	arg.chanctx_conf = NULL;
6979 	ieee80211_iter_chan_contexts_atomic(ath12k_ar_to_hw(ar),
6980 					    ath12k_mac_get_any_chanctx_conf_iter, &arg);
6981 	if (!arg.chanctx_conf) {
6982 		ath12k_warn(ab, "failed to find valid chanctx_conf in radar detected event\n");
6983 		goto exit;
6984 	}
6985 
6986 	ath12k_dbg(ar->ab, ATH12K_DBG_REG, "DFS Radar Detected in pdev %d\n",
6987 		   ev->pdev_id);
6988 
6989 	if (ar->dfs_block_radar_events)
6990 		ath12k_info(ab, "DFS Radar detected, but ignored as requested\n");
6991 	else
6992 		ieee80211_radar_detected(ath12k_ar_to_hw(ar), arg.chanctx_conf);
6993 
6994 exit:
6995 	rcu_read_unlock();
6996 
6997 	kfree(tb);
6998 }
6999 
7000 static void
7001 ath12k_wmi_pdev_temperature_event(struct ath12k_base *ab,
7002 				  struct sk_buff *skb)
7003 {
7004 	struct ath12k *ar;
7005 	struct wmi_pdev_temperature_event ev = {0};
7006 
7007 	if (ath12k_pull_pdev_temp_ev(ab, skb, &ev) != 0) {
7008 		ath12k_warn(ab, "failed to extract pdev temperature event");
7009 		return;
7010 	}
7011 
7012 	ath12k_dbg(ab, ATH12K_DBG_WMI,
7013 		   "pdev temperature ev temp %d pdev_id %d\n", ev.temp, ev.pdev_id);
7014 
7015 	rcu_read_lock();
7016 
7017 	ar = ath12k_mac_get_ar_by_pdev_id(ab, le32_to_cpu(ev.pdev_id));
7018 	if (!ar) {
7019 		ath12k_warn(ab, "invalid pdev id in pdev temperature ev %d", ev.pdev_id);
7020 		goto exit;
7021 	}
7022 
7023 exit:
7024 	rcu_read_unlock();
7025 }
7026 
7027 static void ath12k_fils_discovery_event(struct ath12k_base *ab,
7028 					struct sk_buff *skb)
7029 {
7030 	const void **tb;
7031 	const struct wmi_fils_discovery_event *ev;
7032 	int ret;
7033 
7034 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
7035 	if (IS_ERR(tb)) {
7036 		ret = PTR_ERR(tb);
7037 		ath12k_warn(ab,
7038 			    "failed to parse FILS discovery event tlv %d\n",
7039 			    ret);
7040 		return;
7041 	}
7042 
7043 	ev = tb[WMI_TAG_HOST_SWFDA_EVENT];
7044 	if (!ev) {
7045 		ath12k_warn(ab, "failed to fetch FILS discovery event\n");
7046 		kfree(tb);
7047 		return;
7048 	}
7049 
7050 	ath12k_warn(ab,
7051 		    "FILS discovery frame expected from host for vdev_id: %u, transmission scheduled at %u, next TBTT: %u\n",
7052 		    ev->vdev_id, ev->fils_tt, ev->tbtt);
7053 
7054 	kfree(tb);
7055 }
7056 
7057 static void ath12k_probe_resp_tx_status_event(struct ath12k_base *ab,
7058 					      struct sk_buff *skb)
7059 {
7060 	const void **tb;
7061 	const struct wmi_probe_resp_tx_status_event *ev;
7062 	int ret;
7063 
7064 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
7065 	if (IS_ERR(tb)) {
7066 		ret = PTR_ERR(tb);
7067 		ath12k_warn(ab,
7068 			    "failed to parse probe response transmission status event tlv: %d\n",
7069 			    ret);
7070 		return;
7071 	}
7072 
7073 	ev = tb[WMI_TAG_OFFLOAD_PRB_RSP_TX_STATUS_EVENT];
7074 	if (!ev) {
7075 		ath12k_warn(ab,
7076 			    "failed to fetch probe response transmission status event");
7077 		kfree(tb);
7078 		return;
7079 	}
7080 
7081 	if (ev->tx_status)
7082 		ath12k_warn(ab,
7083 			    "Probe response transmission failed for vdev_id %u, status %u\n",
7084 			    ev->vdev_id, ev->tx_status);
7085 
7086 	kfree(tb);
7087 }
7088 
7089 static int ath12k_wmi_p2p_noa_event(struct ath12k_base *ab,
7090 				    struct sk_buff *skb)
7091 {
7092 	const void **tb;
7093 	const struct wmi_p2p_noa_event *ev;
7094 	const struct ath12k_wmi_p2p_noa_info *noa;
7095 	struct ath12k *ar;
7096 	int ret, vdev_id;
7097 
7098 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
7099 	if (IS_ERR(tb)) {
7100 		ret = PTR_ERR(tb);
7101 		ath12k_warn(ab, "failed to parse P2P NoA TLV: %d\n", ret);
7102 		return ret;
7103 	}
7104 
7105 	ev = tb[WMI_TAG_P2P_NOA_EVENT];
7106 	noa = tb[WMI_TAG_P2P_NOA_INFO];
7107 
7108 	if (!ev || !noa) {
7109 		ret = -EPROTO;
7110 		goto out;
7111 	}
7112 
7113 	vdev_id = __le32_to_cpu(ev->vdev_id);
7114 
7115 	ath12k_dbg(ab, ATH12K_DBG_WMI,
7116 		   "wmi tlv p2p noa vdev_id %i descriptors %u\n",
7117 		   vdev_id, le32_get_bits(noa->noa_attr, WMI_P2P_NOA_INFO_DESC_NUM));
7118 
7119 	rcu_read_lock();
7120 	ar = ath12k_mac_get_ar_by_vdev_id(ab, vdev_id);
7121 	if (!ar) {
7122 		ath12k_warn(ab, "invalid vdev id %d in P2P NoA event\n",
7123 			    vdev_id);
7124 		ret = -EINVAL;
7125 		goto unlock;
7126 	}
7127 
7128 	ath12k_p2p_noa_update_by_vdev_id(ar, vdev_id, noa);
7129 
7130 	ret = 0;
7131 
7132 unlock:
7133 	rcu_read_unlock();
7134 out:
7135 	kfree(tb);
7136 	return ret;
7137 }
7138 
7139 static void ath12k_rfkill_state_change_event(struct ath12k_base *ab,
7140 					     struct sk_buff *skb)
7141 {
7142 	const struct wmi_rfkill_state_change_event *ev;
7143 	const void **tb;
7144 	int ret;
7145 
7146 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
7147 	if (IS_ERR(tb)) {
7148 		ret = PTR_ERR(tb);
7149 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
7150 		return;
7151 	}
7152 
7153 	ev = tb[WMI_TAG_RFKILL_EVENT];
7154 	if (!ev) {
7155 		kfree(tb);
7156 		return;
7157 	}
7158 
7159 	ath12k_dbg(ab, ATH12K_DBG_MAC,
7160 		   "wmi tlv rfkill state change gpio %d type %d radio_state %d\n",
7161 		   le32_to_cpu(ev->gpio_pin_num),
7162 		   le32_to_cpu(ev->int_type),
7163 		   le32_to_cpu(ev->radio_state));
7164 
7165 	spin_lock_bh(&ab->base_lock);
7166 	ab->rfkill_radio_on = (ev->radio_state == cpu_to_le32(WMI_RFKILL_RADIO_STATE_ON));
7167 	spin_unlock_bh(&ab->base_lock);
7168 
7169 	queue_work(ab->workqueue, &ab->rfkill_work);
7170 	kfree(tb);
7171 }
7172 
7173 static void
7174 ath12k_wmi_diag_event(struct ath12k_base *ab, struct sk_buff *skb)
7175 {
7176 	trace_ath12k_wmi_diag(ab, skb->data, skb->len);
7177 }
7178 
7179 static void ath12k_wmi_twt_enable_event(struct ath12k_base *ab,
7180 					struct sk_buff *skb)
7181 {
7182 	const void **tb;
7183 	const struct wmi_twt_enable_event *ev;
7184 	int ret;
7185 
7186 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
7187 	if (IS_ERR(tb)) {
7188 		ret = PTR_ERR(tb);
7189 		ath12k_warn(ab, "failed to parse wmi twt enable status event tlv: %d\n",
7190 			    ret);
7191 		return;
7192 	}
7193 
7194 	ev = tb[WMI_TAG_TWT_ENABLE_COMPLETE_EVENT];
7195 	if (!ev) {
7196 		ath12k_warn(ab, "failed to fetch twt enable wmi event\n");
7197 		goto exit;
7198 	}
7199 
7200 	ath12k_dbg(ab, ATH12K_DBG_MAC, "wmi twt enable event pdev id %u status %u\n",
7201 		   le32_to_cpu(ev->pdev_id),
7202 		   le32_to_cpu(ev->status));
7203 
7204 exit:
7205 	kfree(tb);
7206 }
7207 
7208 static void ath12k_wmi_twt_disable_event(struct ath12k_base *ab,
7209 					 struct sk_buff *skb)
7210 {
7211 	const void **tb;
7212 	const struct wmi_twt_disable_event *ev;
7213 	int ret;
7214 
7215 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
7216 	if (IS_ERR(tb)) {
7217 		ret = PTR_ERR(tb);
7218 		ath12k_warn(ab, "failed to parse wmi twt disable status event tlv: %d\n",
7219 			    ret);
7220 		return;
7221 	}
7222 
7223 	ev = tb[WMI_TAG_TWT_DISABLE_COMPLETE_EVENT];
7224 	if (!ev) {
7225 		ath12k_warn(ab, "failed to fetch twt disable wmi event\n");
7226 		goto exit;
7227 	}
7228 
7229 	ath12k_dbg(ab, ATH12K_DBG_MAC, "wmi twt disable event pdev id %d status %u\n",
7230 		   le32_to_cpu(ev->pdev_id),
7231 		   le32_to_cpu(ev->status));
7232 
7233 exit:
7234 	kfree(tb);
7235 }
7236 
7237 static int ath12k_wmi_wow_wakeup_host_parse(struct ath12k_base *ab,
7238 					    u16 tag, u16 len,
7239 					    const void *ptr, void *data)
7240 {
7241 	const struct wmi_wow_ev_pg_fault_param *pf_param;
7242 	const struct wmi_wow_ev_param *param;
7243 	struct wmi_wow_ev_arg *arg = data;
7244 	int pf_len;
7245 
7246 	switch (tag) {
7247 	case WMI_TAG_WOW_EVENT_INFO:
7248 		param = ptr;
7249 		arg->wake_reason = le32_to_cpu(param->wake_reason);
7250 		ath12k_dbg(ab, ATH12K_DBG_WMI, "wow wakeup host reason %d %s\n",
7251 			   arg->wake_reason, wow_reason(arg->wake_reason));
7252 		break;
7253 
7254 	case WMI_TAG_ARRAY_BYTE:
7255 		if (arg && arg->wake_reason == WOW_REASON_PAGE_FAULT) {
7256 			pf_param = ptr;
7257 			pf_len = le32_to_cpu(pf_param->len);
7258 			if (pf_len > len - sizeof(pf_len) ||
7259 			    pf_len < 0) {
7260 				ath12k_warn(ab, "invalid wo reason page fault buffer len %d\n",
7261 					    pf_len);
7262 				return -EINVAL;
7263 			}
7264 			ath12k_dbg(ab, ATH12K_DBG_WMI, "wow_reason_page_fault len %d\n",
7265 				   pf_len);
7266 			ath12k_dbg_dump(ab, ATH12K_DBG_WMI,
7267 					"wow_reason_page_fault packet present",
7268 					"wow_pg_fault ",
7269 					pf_param->data,
7270 					pf_len);
7271 		}
7272 		break;
7273 	default:
7274 		break;
7275 	}
7276 
7277 	return 0;
7278 }
7279 
7280 static void ath12k_wmi_event_wow_wakeup_host(struct ath12k_base *ab, struct sk_buff *skb)
7281 {
7282 	struct wmi_wow_ev_arg arg = { };
7283 	int ret;
7284 
7285 	ret = ath12k_wmi_tlv_iter(ab, skb->data, skb->len,
7286 				  ath12k_wmi_wow_wakeup_host_parse,
7287 				  &arg);
7288 	if (ret) {
7289 		ath12k_warn(ab, "failed to parse wmi wow wakeup host event tlv: %d\n",
7290 			    ret);
7291 		return;
7292 	}
7293 
7294 	complete(&ab->wow.wakeup_completed);
7295 }
7296 
7297 static void ath12k_wmi_gtk_offload_status_event(struct ath12k_base *ab,
7298 						struct sk_buff *skb)
7299 {
7300 	const struct wmi_gtk_offload_status_event *ev;
7301 	struct ath12k_link_vif *arvif;
7302 	__be64 replay_ctr_be;
7303 	u64 replay_ctr;
7304 	const void **tb;
7305 	int ret;
7306 
7307 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
7308 	if (IS_ERR(tb)) {
7309 		ret = PTR_ERR(tb);
7310 		ath12k_warn(ab, "failed to parse tlv: %d\n", ret);
7311 		return;
7312 	}
7313 
7314 	ev = tb[WMI_TAG_GTK_OFFLOAD_STATUS_EVENT];
7315 	if (!ev) {
7316 		ath12k_warn(ab, "failed to fetch gtk offload status ev");
7317 		kfree(tb);
7318 		return;
7319 	}
7320 
7321 	rcu_read_lock();
7322 	arvif = ath12k_mac_get_arvif_by_vdev_id(ab, le32_to_cpu(ev->vdev_id));
7323 	if (!arvif) {
7324 		rcu_read_unlock();
7325 		ath12k_warn(ab, "failed to get arvif for vdev_id:%d\n",
7326 			    le32_to_cpu(ev->vdev_id));
7327 		kfree(tb);
7328 		return;
7329 	}
7330 
7331 	replay_ctr = le64_to_cpu(ev->replay_ctr);
7332 	arvif->rekey_data.replay_ctr = replay_ctr;
7333 	ath12k_dbg(ab, ATH12K_DBG_WMI, "wmi gtk offload event refresh_cnt %d replay_ctr %llu\n",
7334 		   le32_to_cpu(ev->refresh_cnt), replay_ctr);
7335 
7336 	/* supplicant expects big-endian replay counter */
7337 	replay_ctr_be = cpu_to_be64(replay_ctr);
7338 
7339 	ieee80211_gtk_rekey_notify(arvif->ahvif->vif, arvif->bssid,
7340 				   (void *)&replay_ctr_be, GFP_ATOMIC);
7341 
7342 	rcu_read_unlock();
7343 
7344 	kfree(tb);
7345 }
7346 
7347 static void ath12k_wmi_event_mlo_setup_complete(struct ath12k_base *ab,
7348 						struct sk_buff *skb)
7349 {
7350 	const struct wmi_mlo_setup_complete_event *ev;
7351 	struct ath12k *ar = NULL;
7352 	struct ath12k_pdev *pdev;
7353 	const void **tb;
7354 	int ret, i;
7355 
7356 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
7357 	if (IS_ERR(tb)) {
7358 		ret = PTR_ERR(tb);
7359 		ath12k_warn(ab, "failed to parse mlo setup complete event tlv: %d\n",
7360 			    ret);
7361 		return;
7362 	}
7363 
7364 	ev = tb[WMI_TAG_MLO_SETUP_COMPLETE_EVENT];
7365 	if (!ev) {
7366 		ath12k_warn(ab, "failed to fetch mlo setup complete event\n");
7367 		kfree(tb);
7368 		return;
7369 	}
7370 
7371 	if (le32_to_cpu(ev->pdev_id) > ab->num_radios)
7372 		goto skip_lookup;
7373 
7374 	for (i = 0; i < ab->num_radios; i++) {
7375 		pdev = &ab->pdevs[i];
7376 		if (pdev && pdev->pdev_id == le32_to_cpu(ev->pdev_id)) {
7377 			ar = pdev->ar;
7378 			break;
7379 		}
7380 	}
7381 
7382 skip_lookup:
7383 	if (!ar) {
7384 		ath12k_warn(ab, "invalid pdev_id %d status %u in setup complete event\n",
7385 			    ev->pdev_id, ev->status);
7386 		goto out;
7387 	}
7388 
7389 	ar->mlo_setup_status = le32_to_cpu(ev->status);
7390 	complete(&ar->mlo_setup_done);
7391 
7392 out:
7393 	kfree(tb);
7394 }
7395 
7396 static void ath12k_wmi_event_teardown_complete(struct ath12k_base *ab,
7397 					       struct sk_buff *skb)
7398 {
7399 	const struct wmi_mlo_teardown_complete_event *ev;
7400 	const void **tb;
7401 	int ret;
7402 
7403 	tb = ath12k_wmi_tlv_parse_alloc(ab, skb, GFP_ATOMIC);
7404 	if (IS_ERR(tb)) {
7405 		ret = PTR_ERR(tb);
7406 		ath12k_warn(ab, "failed to parse teardown complete event tlv: %d\n", ret);
7407 		return;
7408 	}
7409 
7410 	ev = tb[WMI_TAG_MLO_TEARDOWN_COMPLETE];
7411 	if (!ev) {
7412 		ath12k_warn(ab, "failed to fetch teardown complete event\n");
7413 		kfree(tb);
7414 		return;
7415 	}
7416 
7417 	kfree(tb);
7418 }
7419 
7420 static void ath12k_wmi_op_rx(struct ath12k_base *ab, struct sk_buff *skb)
7421 {
7422 	struct wmi_cmd_hdr *cmd_hdr;
7423 	enum wmi_tlv_event_id id;
7424 
7425 	cmd_hdr = (struct wmi_cmd_hdr *)skb->data;
7426 	id = le32_get_bits(cmd_hdr->cmd_id, WMI_CMD_HDR_CMD_ID);
7427 
7428 	if (!skb_pull(skb, sizeof(struct wmi_cmd_hdr)))
7429 		goto out;
7430 
7431 	switch (id) {
7432 		/* Process all the WMI events here */
7433 	case WMI_SERVICE_READY_EVENTID:
7434 		ath12k_service_ready_event(ab, skb);
7435 		break;
7436 	case WMI_SERVICE_READY_EXT_EVENTID:
7437 		ath12k_service_ready_ext_event(ab, skb);
7438 		break;
7439 	case WMI_SERVICE_READY_EXT2_EVENTID:
7440 		ath12k_service_ready_ext2_event(ab, skb);
7441 		break;
7442 	case WMI_REG_CHAN_LIST_CC_EXT_EVENTID:
7443 		ath12k_reg_chan_list_event(ab, skb);
7444 		break;
7445 	case WMI_READY_EVENTID:
7446 		ath12k_ready_event(ab, skb);
7447 		break;
7448 	case WMI_PEER_DELETE_RESP_EVENTID:
7449 		ath12k_peer_delete_resp_event(ab, skb);
7450 		break;
7451 	case WMI_VDEV_START_RESP_EVENTID:
7452 		ath12k_vdev_start_resp_event(ab, skb);
7453 		break;
7454 	case WMI_OFFLOAD_BCN_TX_STATUS_EVENTID:
7455 		ath12k_bcn_tx_status_event(ab, skb);
7456 		break;
7457 	case WMI_VDEV_STOPPED_EVENTID:
7458 		ath12k_vdev_stopped_event(ab, skb);
7459 		break;
7460 	case WMI_MGMT_RX_EVENTID:
7461 		ath12k_mgmt_rx_event(ab, skb);
7462 		/* mgmt_rx_event() owns the skb now! */
7463 		return;
7464 	case WMI_MGMT_TX_COMPLETION_EVENTID:
7465 		ath12k_mgmt_tx_compl_event(ab, skb);
7466 		break;
7467 	case WMI_SCAN_EVENTID:
7468 		ath12k_scan_event(ab, skb);
7469 		break;
7470 	case WMI_PEER_STA_KICKOUT_EVENTID:
7471 		ath12k_peer_sta_kickout_event(ab, skb);
7472 		break;
7473 	case WMI_ROAM_EVENTID:
7474 		ath12k_roam_event(ab, skb);
7475 		break;
7476 	case WMI_CHAN_INFO_EVENTID:
7477 		ath12k_chan_info_event(ab, skb);
7478 		break;
7479 	case WMI_PDEV_BSS_CHAN_INFO_EVENTID:
7480 		ath12k_pdev_bss_chan_info_event(ab, skb);
7481 		break;
7482 	case WMI_VDEV_INSTALL_KEY_COMPLETE_EVENTID:
7483 		ath12k_vdev_install_key_compl_event(ab, skb);
7484 		break;
7485 	case WMI_SERVICE_AVAILABLE_EVENTID:
7486 		ath12k_service_available_event(ab, skb);
7487 		break;
7488 	case WMI_PEER_ASSOC_CONF_EVENTID:
7489 		ath12k_peer_assoc_conf_event(ab, skb);
7490 		break;
7491 	case WMI_UPDATE_STATS_EVENTID:
7492 		ath12k_update_stats_event(ab, skb);
7493 		break;
7494 	case WMI_PDEV_CTL_FAILSAFE_CHECK_EVENTID:
7495 		ath12k_pdev_ctl_failsafe_check_event(ab, skb);
7496 		break;
7497 	case WMI_PDEV_CSA_SWITCH_COUNT_STATUS_EVENTID:
7498 		ath12k_wmi_pdev_csa_switch_count_status_event(ab, skb);
7499 		break;
7500 	case WMI_PDEV_TEMPERATURE_EVENTID:
7501 		ath12k_wmi_pdev_temperature_event(ab, skb);
7502 		break;
7503 	case WMI_PDEV_DMA_RING_BUF_RELEASE_EVENTID:
7504 		ath12k_wmi_pdev_dma_ring_buf_release_event(ab, skb);
7505 		break;
7506 	case WMI_HOST_FILS_DISCOVERY_EVENTID:
7507 		ath12k_fils_discovery_event(ab, skb);
7508 		break;
7509 	case WMI_OFFLOAD_PROB_RESP_TX_STATUS_EVENTID:
7510 		ath12k_probe_resp_tx_status_event(ab, skb);
7511 		break;
7512 	case WMI_RFKILL_STATE_CHANGE_EVENTID:
7513 		ath12k_rfkill_state_change_event(ab, skb);
7514 		break;
7515 	case WMI_TWT_ENABLE_EVENTID:
7516 		ath12k_wmi_twt_enable_event(ab, skb);
7517 		break;
7518 	case WMI_TWT_DISABLE_EVENTID:
7519 		ath12k_wmi_twt_disable_event(ab, skb);
7520 		break;
7521 	case WMI_P2P_NOA_EVENTID:
7522 		ath12k_wmi_p2p_noa_event(ab, skb);
7523 		break;
7524 	case WMI_PDEV_DFS_RADAR_DETECTION_EVENTID:
7525 		ath12k_wmi_pdev_dfs_radar_detected_event(ab, skb);
7526 		break;
7527 	case WMI_VDEV_DELETE_RESP_EVENTID:
7528 		ath12k_vdev_delete_resp_event(ab, skb);
7529 		break;
7530 	case WMI_DIAG_EVENTID:
7531 		ath12k_wmi_diag_event(ab, skb);
7532 		break;
7533 	case WMI_WOW_WAKEUP_HOST_EVENTID:
7534 		ath12k_wmi_event_wow_wakeup_host(ab, skb);
7535 		break;
7536 	case WMI_GTK_OFFLOAD_STATUS_EVENTID:
7537 		ath12k_wmi_gtk_offload_status_event(ab, skb);
7538 		break;
7539 	case WMI_MLO_SETUP_COMPLETE_EVENTID:
7540 		ath12k_wmi_event_mlo_setup_complete(ab, skb);
7541 		break;
7542 	case WMI_MLO_TEARDOWN_COMPLETE_EVENTID:
7543 		ath12k_wmi_event_teardown_complete(ab, skb);
7544 		break;
7545 	/* add Unsupported events (rare) here */
7546 	case WMI_TBTTOFFSET_EXT_UPDATE_EVENTID:
7547 	case WMI_PEER_OPER_MODE_CHANGE_EVENTID:
7548 	case WMI_PDEV_DMA_RING_CFG_RSP_EVENTID:
7549 		ath12k_dbg(ab, ATH12K_DBG_WMI,
7550 			   "ignoring unsupported event 0x%x\n", id);
7551 		break;
7552 	/* add Unsupported events (frequent) here */
7553 	case WMI_PDEV_GET_HALPHY_CAL_STATUS_EVENTID:
7554 	case WMI_MGMT_RX_FW_CONSUMED_EVENTID:
7555 	case WMI_OBSS_COLOR_COLLISION_DETECTION_EVENTID:
7556 		/* debug might flood hence silently ignore (no-op) */
7557 		break;
7558 	/* TODO: Add remaining events */
7559 	default:
7560 		ath12k_dbg(ab, ATH12K_DBG_WMI, "Unknown eventid: 0x%x\n", id);
7561 		break;
7562 	}
7563 
7564 out:
7565 	dev_kfree_skb(skb);
7566 }
7567 
7568 static int ath12k_connect_pdev_htc_service(struct ath12k_base *ab,
7569 					   u32 pdev_idx)
7570 {
7571 	int status;
7572 	static const u32 svc_id[] = {
7573 		ATH12K_HTC_SVC_ID_WMI_CONTROL,
7574 		ATH12K_HTC_SVC_ID_WMI_CONTROL_MAC1,
7575 		ATH12K_HTC_SVC_ID_WMI_CONTROL_MAC2
7576 	};
7577 	struct ath12k_htc_svc_conn_req conn_req = {};
7578 	struct ath12k_htc_svc_conn_resp conn_resp = {};
7579 
7580 	/* these fields are the same for all service endpoints */
7581 	conn_req.ep_ops.ep_tx_complete = ath12k_wmi_htc_tx_complete;
7582 	conn_req.ep_ops.ep_rx_complete = ath12k_wmi_op_rx;
7583 	conn_req.ep_ops.ep_tx_credits = ath12k_wmi_op_ep_tx_credits;
7584 
7585 	/* connect to control service */
7586 	conn_req.service_id = svc_id[pdev_idx];
7587 
7588 	status = ath12k_htc_connect_service(&ab->htc, &conn_req, &conn_resp);
7589 	if (status) {
7590 		ath12k_warn(ab, "failed to connect to WMI CONTROL service status: %d\n",
7591 			    status);
7592 		return status;
7593 	}
7594 
7595 	ab->wmi_ab.wmi_endpoint_id[pdev_idx] = conn_resp.eid;
7596 	ab->wmi_ab.wmi[pdev_idx].eid = conn_resp.eid;
7597 	ab->wmi_ab.max_msg_len[pdev_idx] = conn_resp.max_msg_len;
7598 
7599 	return 0;
7600 }
7601 
7602 static int
7603 ath12k_wmi_send_unit_test_cmd(struct ath12k *ar,
7604 			      struct wmi_unit_test_cmd ut_cmd,
7605 			      u32 *test_args)
7606 {
7607 	struct ath12k_wmi_pdev *wmi = ar->wmi;
7608 	struct wmi_unit_test_cmd *cmd;
7609 	struct sk_buff *skb;
7610 	struct wmi_tlv *tlv;
7611 	void *ptr;
7612 	u32 *ut_cmd_args;
7613 	int buf_len, arg_len;
7614 	int ret;
7615 	int i;
7616 
7617 	arg_len = sizeof(u32) * le32_to_cpu(ut_cmd.num_args);
7618 	buf_len = sizeof(ut_cmd) + arg_len + TLV_HDR_SIZE;
7619 
7620 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, buf_len);
7621 	if (!skb)
7622 		return -ENOMEM;
7623 
7624 	cmd = (struct wmi_unit_test_cmd *)skb->data;
7625 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_UNIT_TEST_CMD,
7626 						 sizeof(ut_cmd));
7627 
7628 	cmd->vdev_id = ut_cmd.vdev_id;
7629 	cmd->module_id = ut_cmd.module_id;
7630 	cmd->num_args = ut_cmd.num_args;
7631 	cmd->diag_token = ut_cmd.diag_token;
7632 
7633 	ptr = skb->data + sizeof(ut_cmd);
7634 
7635 	tlv = ptr;
7636 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_UINT32, arg_len);
7637 
7638 	ptr += TLV_HDR_SIZE;
7639 
7640 	ut_cmd_args = ptr;
7641 	for (i = 0; i < le32_to_cpu(ut_cmd.num_args); i++)
7642 		ut_cmd_args[i] = test_args[i];
7643 
7644 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
7645 		   "WMI unit test : module %d vdev %d n_args %d token %d\n",
7646 		   cmd->module_id, cmd->vdev_id, cmd->num_args,
7647 		   cmd->diag_token);
7648 
7649 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_UNIT_TEST_CMDID);
7650 
7651 	if (ret) {
7652 		ath12k_warn(ar->ab, "failed to send WMI_UNIT_TEST CMD :%d\n",
7653 			    ret);
7654 		dev_kfree_skb(skb);
7655 	}
7656 
7657 	return ret;
7658 }
7659 
7660 int ath12k_wmi_simulate_radar(struct ath12k *ar)
7661 {
7662 	struct ath12k_link_vif *arvif;
7663 	u32 dfs_args[DFS_MAX_TEST_ARGS];
7664 	struct wmi_unit_test_cmd wmi_ut;
7665 	bool arvif_found = false;
7666 
7667 	list_for_each_entry(arvif, &ar->arvifs, list) {
7668 		if (arvif->is_started && arvif->ahvif->vdev_type == WMI_VDEV_TYPE_AP) {
7669 			arvif_found = true;
7670 			break;
7671 		}
7672 	}
7673 
7674 	if (!arvif_found)
7675 		return -EINVAL;
7676 
7677 	dfs_args[DFS_TEST_CMDID] = 0;
7678 	dfs_args[DFS_TEST_PDEV_ID] = ar->pdev->pdev_id;
7679 	/* Currently we could pass segment_id(b0 - b1), chirp(b2)
7680 	 * freq offset (b3 - b10) to unit test. For simulation
7681 	 * purpose this can be set to 0 which is valid.
7682 	 */
7683 	dfs_args[DFS_TEST_RADAR_PARAM] = 0;
7684 
7685 	wmi_ut.vdev_id = cpu_to_le32(arvif->vdev_id);
7686 	wmi_ut.module_id = cpu_to_le32(DFS_UNIT_TEST_MODULE);
7687 	wmi_ut.num_args = cpu_to_le32(DFS_MAX_TEST_ARGS);
7688 	wmi_ut.diag_token = cpu_to_le32(DFS_UNIT_TEST_TOKEN);
7689 
7690 	ath12k_dbg(ar->ab, ATH12K_DBG_REG, "Triggering Radar Simulation\n");
7691 
7692 	return ath12k_wmi_send_unit_test_cmd(ar, wmi_ut, dfs_args);
7693 }
7694 
7695 int ath12k_wmi_connect(struct ath12k_base *ab)
7696 {
7697 	u32 i;
7698 	u8 wmi_ep_count;
7699 
7700 	wmi_ep_count = ab->htc.wmi_ep_count;
7701 	if (wmi_ep_count > ab->hw_params->max_radios)
7702 		return -1;
7703 
7704 	for (i = 0; i < wmi_ep_count; i++)
7705 		ath12k_connect_pdev_htc_service(ab, i);
7706 
7707 	return 0;
7708 }
7709 
7710 static void ath12k_wmi_pdev_detach(struct ath12k_base *ab, u8 pdev_id)
7711 {
7712 	if (WARN_ON(pdev_id >= MAX_RADIOS))
7713 		return;
7714 
7715 	/* TODO: Deinit any pdev specific wmi resource */
7716 }
7717 
7718 int ath12k_wmi_pdev_attach(struct ath12k_base *ab,
7719 			   u8 pdev_id)
7720 {
7721 	struct ath12k_wmi_pdev *wmi_handle;
7722 
7723 	if (pdev_id >= ab->hw_params->max_radios)
7724 		return -EINVAL;
7725 
7726 	wmi_handle = &ab->wmi_ab.wmi[pdev_id];
7727 
7728 	wmi_handle->wmi_ab = &ab->wmi_ab;
7729 
7730 	ab->wmi_ab.ab = ab;
7731 	/* TODO: Init remaining resource specific to pdev */
7732 
7733 	return 0;
7734 }
7735 
7736 int ath12k_wmi_attach(struct ath12k_base *ab)
7737 {
7738 	int ret;
7739 
7740 	ret = ath12k_wmi_pdev_attach(ab, 0);
7741 	if (ret)
7742 		return ret;
7743 
7744 	ab->wmi_ab.ab = ab;
7745 	ab->wmi_ab.preferred_hw_mode = WMI_HOST_HW_MODE_MAX;
7746 
7747 	/* It's overwritten when service_ext_ready is handled */
7748 	if (ab->hw_params->single_pdev_only)
7749 		ab->wmi_ab.preferred_hw_mode = WMI_HOST_HW_MODE_SINGLE;
7750 
7751 	/* TODO: Init remaining wmi soc resources required */
7752 	init_completion(&ab->wmi_ab.service_ready);
7753 	init_completion(&ab->wmi_ab.unified_ready);
7754 
7755 	return 0;
7756 }
7757 
7758 void ath12k_wmi_detach(struct ath12k_base *ab)
7759 {
7760 	int i;
7761 
7762 	/* TODO: Deinit wmi resource specific to SOC as required */
7763 
7764 	for (i = 0; i < ab->htc.wmi_ep_count; i++)
7765 		ath12k_wmi_pdev_detach(ab, i);
7766 
7767 	ath12k_wmi_free_dbring_caps(ab);
7768 }
7769 
7770 int ath12k_wmi_hw_data_filter_cmd(struct ath12k *ar, struct wmi_hw_data_filter_arg *arg)
7771 {
7772 	struct wmi_hw_data_filter_cmd *cmd;
7773 	struct sk_buff *skb;
7774 	int len;
7775 
7776 	len = sizeof(*cmd);
7777 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
7778 
7779 	if (!skb)
7780 		return -ENOMEM;
7781 
7782 	cmd = (struct wmi_hw_data_filter_cmd *)skb->data;
7783 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_HW_DATA_FILTER_CMD,
7784 						 sizeof(*cmd));
7785 	cmd->vdev_id = cpu_to_le32(arg->vdev_id);
7786 	cmd->enable = cpu_to_le32(arg->enable ? 1 : 0);
7787 
7788 	/* Set all modes in case of disable */
7789 	if (arg->enable)
7790 		cmd->hw_filter_bitmap = cpu_to_le32(arg->hw_filter_bitmap);
7791 	else
7792 		cmd->hw_filter_bitmap = cpu_to_le32((u32)~0U);
7793 
7794 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
7795 		   "wmi hw data filter enable %d filter_bitmap 0x%x\n",
7796 		   arg->enable, arg->hw_filter_bitmap);
7797 
7798 	return ath12k_wmi_cmd_send(ar->wmi, skb, WMI_HW_DATA_FILTER_CMDID);
7799 }
7800 
7801 int ath12k_wmi_wow_host_wakeup_ind(struct ath12k *ar)
7802 {
7803 	struct wmi_wow_host_wakeup_cmd *cmd;
7804 	struct sk_buff *skb;
7805 	size_t len;
7806 
7807 	len = sizeof(*cmd);
7808 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
7809 	if (!skb)
7810 		return -ENOMEM;
7811 
7812 	cmd = (struct wmi_wow_host_wakeup_cmd *)skb->data;
7813 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_WOW_HOSTWAKEUP_FROM_SLEEP_CMD,
7814 						 sizeof(*cmd));
7815 
7816 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "wmi tlv wow host wakeup ind\n");
7817 
7818 	return ath12k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_HOSTWAKEUP_FROM_SLEEP_CMDID);
7819 }
7820 
7821 int ath12k_wmi_wow_enable(struct ath12k *ar)
7822 {
7823 	struct wmi_wow_enable_cmd *cmd;
7824 	struct sk_buff *skb;
7825 	int len;
7826 
7827 	len = sizeof(*cmd);
7828 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
7829 	if (!skb)
7830 		return -ENOMEM;
7831 
7832 	cmd = (struct wmi_wow_enable_cmd *)skb->data;
7833 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_WOW_ENABLE_CMD,
7834 						 sizeof(*cmd));
7835 
7836 	cmd->enable = cpu_to_le32(1);
7837 	cmd->pause_iface_config = cpu_to_le32(WOW_IFACE_PAUSE_ENABLED);
7838 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "wmi tlv wow enable\n");
7839 
7840 	return ath12k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_ENABLE_CMDID);
7841 }
7842 
7843 int ath12k_wmi_wow_add_wakeup_event(struct ath12k *ar, u32 vdev_id,
7844 				    enum wmi_wow_wakeup_event event,
7845 				    u32 enable)
7846 {
7847 	struct wmi_wow_add_del_event_cmd *cmd;
7848 	struct sk_buff *skb;
7849 	size_t len;
7850 
7851 	len = sizeof(*cmd);
7852 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
7853 	if (!skb)
7854 		return -ENOMEM;
7855 
7856 	cmd = (struct wmi_wow_add_del_event_cmd *)skb->data;
7857 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_WOW_ADD_DEL_EVT_CMD,
7858 						 sizeof(*cmd));
7859 	cmd->vdev_id = cpu_to_le32(vdev_id);
7860 	cmd->is_add = cpu_to_le32(enable);
7861 	cmd->event_bitmap = cpu_to_le32((1 << event));
7862 
7863 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "wmi tlv wow add wakeup event %s enable %d vdev_id %d\n",
7864 		   wow_wakeup_event(event), enable, vdev_id);
7865 
7866 	return ath12k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_ENABLE_DISABLE_WAKE_EVENT_CMDID);
7867 }
7868 
7869 int ath12k_wmi_wow_add_pattern(struct ath12k *ar, u32 vdev_id, u32 pattern_id,
7870 			       const u8 *pattern, const u8 *mask,
7871 			       int pattern_len, int pattern_offset)
7872 {
7873 	struct wmi_wow_add_pattern_cmd *cmd;
7874 	struct wmi_wow_bitmap_pattern_params *bitmap;
7875 	struct wmi_tlv *tlv;
7876 	struct sk_buff *skb;
7877 	void *ptr;
7878 	size_t len;
7879 
7880 	len = sizeof(*cmd) +
7881 	      sizeof(*tlv) +			/* array struct */
7882 	      sizeof(*bitmap) +			/* bitmap */
7883 	      sizeof(*tlv) +			/* empty ipv4 sync */
7884 	      sizeof(*tlv) +			/* empty ipv6 sync */
7885 	      sizeof(*tlv) +			/* empty magic */
7886 	      sizeof(*tlv) +			/* empty info timeout */
7887 	      sizeof(*tlv) + sizeof(u32);	/* ratelimit interval */
7888 
7889 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
7890 	if (!skb)
7891 		return -ENOMEM;
7892 
7893 	/* cmd */
7894 	ptr = skb->data;
7895 	cmd = ptr;
7896 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_WOW_ADD_PATTERN_CMD,
7897 						 sizeof(*cmd));
7898 	cmd->vdev_id = cpu_to_le32(vdev_id);
7899 	cmd->pattern_id = cpu_to_le32(pattern_id);
7900 	cmd->pattern_type = cpu_to_le32(WOW_BITMAP_PATTERN);
7901 
7902 	ptr += sizeof(*cmd);
7903 
7904 	/* bitmap */
7905 	tlv = ptr;
7906 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT, sizeof(*bitmap));
7907 
7908 	ptr += sizeof(*tlv);
7909 
7910 	bitmap = ptr;
7911 	bitmap->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_WOW_BITMAP_PATTERN_T,
7912 						    sizeof(*bitmap));
7913 	memcpy(bitmap->patternbuf, pattern, pattern_len);
7914 	memcpy(bitmap->bitmaskbuf, mask, pattern_len);
7915 	bitmap->pattern_offset = cpu_to_le32(pattern_offset);
7916 	bitmap->pattern_len = cpu_to_le32(pattern_len);
7917 	bitmap->bitmask_len = cpu_to_le32(pattern_len);
7918 	bitmap->pattern_id = cpu_to_le32(pattern_id);
7919 
7920 	ptr += sizeof(*bitmap);
7921 
7922 	/* ipv4 sync */
7923 	tlv = ptr;
7924 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT, 0);
7925 
7926 	ptr += sizeof(*tlv);
7927 
7928 	/* ipv6 sync */
7929 	tlv = ptr;
7930 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT, 0);
7931 
7932 	ptr += sizeof(*tlv);
7933 
7934 	/* magic */
7935 	tlv = ptr;
7936 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT, 0);
7937 
7938 	ptr += sizeof(*tlv);
7939 
7940 	/* pattern info timeout */
7941 	tlv = ptr;
7942 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_UINT32, 0);
7943 
7944 	ptr += sizeof(*tlv);
7945 
7946 	/* ratelimit interval */
7947 	tlv = ptr;
7948 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_UINT32, sizeof(u32));
7949 
7950 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "wmi tlv wow add pattern vdev_id %d pattern_id %d pattern_offset %d pattern_len %d\n",
7951 		   vdev_id, pattern_id, pattern_offset, pattern_len);
7952 
7953 	ath12k_dbg_dump(ar->ab, ATH12K_DBG_WMI, NULL, "wow pattern: ",
7954 			bitmap->patternbuf, pattern_len);
7955 	ath12k_dbg_dump(ar->ab, ATH12K_DBG_WMI, NULL, "wow bitmask: ",
7956 			bitmap->bitmaskbuf, pattern_len);
7957 
7958 	return ath12k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_ADD_WAKE_PATTERN_CMDID);
7959 }
7960 
7961 int ath12k_wmi_wow_del_pattern(struct ath12k *ar, u32 vdev_id, u32 pattern_id)
7962 {
7963 	struct wmi_wow_del_pattern_cmd *cmd;
7964 	struct sk_buff *skb;
7965 	size_t len;
7966 
7967 	len = sizeof(*cmd);
7968 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
7969 	if (!skb)
7970 		return -ENOMEM;
7971 
7972 	cmd = (struct wmi_wow_del_pattern_cmd *)skb->data;
7973 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_WOW_DEL_PATTERN_CMD,
7974 						 sizeof(*cmd));
7975 	cmd->vdev_id = cpu_to_le32(vdev_id);
7976 	cmd->pattern_id = cpu_to_le32(pattern_id);
7977 	cmd->pattern_type = cpu_to_le32(WOW_BITMAP_PATTERN);
7978 
7979 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "wmi tlv wow del pattern vdev_id %d pattern_id %d\n",
7980 		   vdev_id, pattern_id);
7981 
7982 	return ath12k_wmi_cmd_send(ar->wmi, skb, WMI_WOW_DEL_WAKE_PATTERN_CMDID);
7983 }
7984 
7985 static struct sk_buff *
7986 ath12k_wmi_op_gen_config_pno_start(struct ath12k *ar, u32 vdev_id,
7987 				   struct wmi_pno_scan_req_arg *pno)
7988 {
7989 	struct nlo_configured_params *nlo_list;
7990 	size_t len, nlo_list_len, channel_list_len;
7991 	struct wmi_wow_nlo_config_cmd *cmd;
7992 	__le32 *channel_list;
7993 	struct wmi_tlv *tlv;
7994 	struct sk_buff *skb;
7995 	void *ptr;
7996 	u32 i;
7997 
7998 	len = sizeof(*cmd) +
7999 	      sizeof(*tlv) +
8000 	      /* TLV place holder for array of structures
8001 	       * nlo_configured_params(nlo_list)
8002 	       */
8003 	      sizeof(*tlv);
8004 	      /* TLV place holder for array of uint32 channel_list */
8005 
8006 	channel_list_len = sizeof(u32) * pno->a_networks[0].channel_count;
8007 	len += channel_list_len;
8008 
8009 	nlo_list_len = sizeof(*nlo_list) * pno->uc_networks_count;
8010 	len += nlo_list_len;
8011 
8012 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
8013 	if (!skb)
8014 		return ERR_PTR(-ENOMEM);
8015 
8016 	ptr = skb->data;
8017 	cmd = ptr;
8018 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_NLO_CONFIG_CMD, sizeof(*cmd));
8019 
8020 	cmd->vdev_id = cpu_to_le32(pno->vdev_id);
8021 	cmd->flags = cpu_to_le32(WMI_NLO_CONFIG_START | WMI_NLO_CONFIG_SSID_HIDE_EN);
8022 
8023 	/* current FW does not support min-max range for dwell time */
8024 	cmd->active_dwell_time = cpu_to_le32(pno->active_max_time);
8025 	cmd->passive_dwell_time = cpu_to_le32(pno->passive_max_time);
8026 
8027 	if (pno->do_passive_scan)
8028 		cmd->flags |= cpu_to_le32(WMI_NLO_CONFIG_SCAN_PASSIVE);
8029 
8030 	cmd->fast_scan_period = cpu_to_le32(pno->fast_scan_period);
8031 	cmd->slow_scan_period = cpu_to_le32(pno->slow_scan_period);
8032 	cmd->fast_scan_max_cycles = cpu_to_le32(pno->fast_scan_max_cycles);
8033 	cmd->delay_start_time = cpu_to_le32(pno->delay_start_time);
8034 
8035 	if (pno->enable_pno_scan_randomization) {
8036 		cmd->flags |= cpu_to_le32(WMI_NLO_CONFIG_SPOOFED_MAC_IN_PROBE_REQ |
8037 					  WMI_NLO_CONFIG_RANDOM_SEQ_NO_IN_PROBE_REQ);
8038 		ether_addr_copy(cmd->mac_addr.addr, pno->mac_addr);
8039 		ether_addr_copy(cmd->mac_mask.addr, pno->mac_addr_mask);
8040 	}
8041 
8042 	ptr += sizeof(*cmd);
8043 
8044 	/* nlo_configured_params(nlo_list) */
8045 	cmd->no_of_ssids = cpu_to_le32(pno->uc_networks_count);
8046 	tlv = ptr;
8047 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT, nlo_list_len);
8048 
8049 	ptr += sizeof(*tlv);
8050 	nlo_list = ptr;
8051 	for (i = 0; i < pno->uc_networks_count; i++) {
8052 		tlv = (struct wmi_tlv *)(&nlo_list[i].tlv_header);
8053 		tlv->header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_ARRAY_BYTE,
8054 						     sizeof(*nlo_list));
8055 
8056 		nlo_list[i].ssid.valid = cpu_to_le32(1);
8057 		nlo_list[i].ssid.ssid.ssid_len =
8058 			cpu_to_le32(pno->a_networks[i].ssid.ssid_len);
8059 		memcpy(nlo_list[i].ssid.ssid.ssid,
8060 		       pno->a_networks[i].ssid.ssid,
8061 		       le32_to_cpu(nlo_list[i].ssid.ssid.ssid_len));
8062 
8063 		if (pno->a_networks[i].rssi_threshold &&
8064 		    pno->a_networks[i].rssi_threshold > -300) {
8065 			nlo_list[i].rssi_cond.valid = cpu_to_le32(1);
8066 			nlo_list[i].rssi_cond.rssi =
8067 					cpu_to_le32(pno->a_networks[i].rssi_threshold);
8068 		}
8069 
8070 		nlo_list[i].bcast_nw_type.valid = cpu_to_le32(1);
8071 		nlo_list[i].bcast_nw_type.bcast_nw_type =
8072 					cpu_to_le32(pno->a_networks[i].bcast_nw_type);
8073 	}
8074 
8075 	ptr += nlo_list_len;
8076 	cmd->num_of_channels = cpu_to_le32(pno->a_networks[0].channel_count);
8077 	tlv = ptr;
8078 	tlv->header =  ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_UINT32, channel_list_len);
8079 	ptr += sizeof(*tlv);
8080 	channel_list = ptr;
8081 
8082 	for (i = 0; i < pno->a_networks[0].channel_count; i++)
8083 		channel_list[i] = cpu_to_le32(pno->a_networks[0].channels[i]);
8084 
8085 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "wmi tlv start pno config vdev_id %d\n",
8086 		   vdev_id);
8087 
8088 	return skb;
8089 }
8090 
8091 static struct sk_buff *ath12k_wmi_op_gen_config_pno_stop(struct ath12k *ar,
8092 							 u32 vdev_id)
8093 {
8094 	struct wmi_wow_nlo_config_cmd *cmd;
8095 	struct sk_buff *skb;
8096 	size_t len;
8097 
8098 	len = sizeof(*cmd);
8099 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
8100 	if (!skb)
8101 		return ERR_PTR(-ENOMEM);
8102 
8103 	cmd = (struct wmi_wow_nlo_config_cmd *)skb->data;
8104 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_NLO_CONFIG_CMD, len);
8105 
8106 	cmd->vdev_id = cpu_to_le32(vdev_id);
8107 	cmd->flags = cpu_to_le32(WMI_NLO_CONFIG_STOP);
8108 
8109 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
8110 		   "wmi tlv stop pno config vdev_id %d\n", vdev_id);
8111 	return skb;
8112 }
8113 
8114 int ath12k_wmi_wow_config_pno(struct ath12k *ar, u32 vdev_id,
8115 			      struct wmi_pno_scan_req_arg  *pno_scan)
8116 {
8117 	struct sk_buff *skb;
8118 
8119 	if (pno_scan->enable)
8120 		skb = ath12k_wmi_op_gen_config_pno_start(ar, vdev_id, pno_scan);
8121 	else
8122 		skb = ath12k_wmi_op_gen_config_pno_stop(ar, vdev_id);
8123 
8124 	if (IS_ERR_OR_NULL(skb))
8125 		return -ENOMEM;
8126 
8127 	return ath12k_wmi_cmd_send(ar->wmi, skb, WMI_NETWORK_LIST_OFFLOAD_CONFIG_CMDID);
8128 }
8129 
8130 static void ath12k_wmi_fill_ns_offload(struct ath12k *ar,
8131 				       struct wmi_arp_ns_offload_arg *offload,
8132 				       void **ptr,
8133 				       bool enable,
8134 				       bool ext)
8135 {
8136 	struct wmi_ns_offload_params *ns;
8137 	struct wmi_tlv *tlv;
8138 	void *buf_ptr = *ptr;
8139 	u32 ns_cnt, ns_ext_tuples;
8140 	int i, max_offloads;
8141 
8142 	ns_cnt = offload->ipv6_count;
8143 
8144 	tlv  = buf_ptr;
8145 
8146 	if (ext) {
8147 		ns_ext_tuples = offload->ipv6_count - WMI_MAX_NS_OFFLOADS;
8148 		tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT,
8149 						 ns_ext_tuples * sizeof(*ns));
8150 		i = WMI_MAX_NS_OFFLOADS;
8151 		max_offloads = offload->ipv6_count;
8152 	} else {
8153 		tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT,
8154 						 WMI_MAX_NS_OFFLOADS * sizeof(*ns));
8155 		i = 0;
8156 		max_offloads = WMI_MAX_NS_OFFLOADS;
8157 	}
8158 
8159 	buf_ptr += sizeof(*tlv);
8160 
8161 	for (; i < max_offloads; i++) {
8162 		ns = buf_ptr;
8163 		ns->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_NS_OFFLOAD_TUPLE,
8164 							sizeof(*ns));
8165 
8166 		if (enable) {
8167 			if (i < ns_cnt)
8168 				ns->flags |= cpu_to_le32(WMI_NSOL_FLAGS_VALID);
8169 
8170 			memcpy(ns->target_ipaddr[0], offload->ipv6_addr[i], 16);
8171 			memcpy(ns->solicitation_ipaddr, offload->self_ipv6_addr[i], 16);
8172 
8173 			if (offload->ipv6_type[i])
8174 				ns->flags |= cpu_to_le32(WMI_NSOL_FLAGS_IS_IPV6_ANYCAST);
8175 
8176 			memcpy(ns->target_mac.addr, offload->mac_addr, ETH_ALEN);
8177 
8178 			if (!is_zero_ether_addr(ns->target_mac.addr))
8179 				ns->flags |= cpu_to_le32(WMI_NSOL_FLAGS_MAC_VALID);
8180 
8181 			ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
8182 				   "wmi index %d ns_solicited %pI6 target %pI6",
8183 				   i, ns->solicitation_ipaddr,
8184 				   ns->target_ipaddr[0]);
8185 		}
8186 
8187 		buf_ptr += sizeof(*ns);
8188 	}
8189 
8190 	*ptr = buf_ptr;
8191 }
8192 
8193 static void ath12k_wmi_fill_arp_offload(struct ath12k *ar,
8194 					struct wmi_arp_ns_offload_arg *offload,
8195 					void **ptr,
8196 					bool enable)
8197 {
8198 	struct wmi_arp_offload_params *arp;
8199 	struct wmi_tlv *tlv;
8200 	void *buf_ptr = *ptr;
8201 	int i;
8202 
8203 	/* fill arp tuple */
8204 	tlv = buf_ptr;
8205 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_STRUCT,
8206 					 WMI_MAX_ARP_OFFLOADS * sizeof(*arp));
8207 	buf_ptr += sizeof(*tlv);
8208 
8209 	for (i = 0; i < WMI_MAX_ARP_OFFLOADS; i++) {
8210 		arp = buf_ptr;
8211 		arp->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_ARP_OFFLOAD_TUPLE,
8212 							 sizeof(*arp));
8213 
8214 		if (enable && i < offload->ipv4_count) {
8215 			/* Copy the target ip addr and flags */
8216 			arp->flags = cpu_to_le32(WMI_ARPOL_FLAGS_VALID);
8217 			memcpy(arp->target_ipaddr, offload->ipv4_addr[i], 4);
8218 
8219 			ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "wmi arp offload address %pI4",
8220 				   arp->target_ipaddr);
8221 		}
8222 
8223 		buf_ptr += sizeof(*arp);
8224 	}
8225 
8226 	*ptr = buf_ptr;
8227 }
8228 
8229 int ath12k_wmi_arp_ns_offload(struct ath12k *ar,
8230 			      struct ath12k_link_vif *arvif,
8231 			      struct wmi_arp_ns_offload_arg *offload,
8232 			      bool enable)
8233 {
8234 	struct wmi_set_arp_ns_offload_cmd *cmd;
8235 	struct wmi_tlv *tlv;
8236 	struct sk_buff *skb;
8237 	void *buf_ptr;
8238 	size_t len;
8239 	u8 ns_cnt, ns_ext_tuples = 0;
8240 
8241 	ns_cnt = offload->ipv6_count;
8242 
8243 	len = sizeof(*cmd) +
8244 	      sizeof(*tlv) +
8245 	      WMI_MAX_NS_OFFLOADS * sizeof(struct wmi_ns_offload_params) +
8246 	      sizeof(*tlv) +
8247 	      WMI_MAX_ARP_OFFLOADS * sizeof(struct wmi_arp_offload_params);
8248 
8249 	if (ns_cnt > WMI_MAX_NS_OFFLOADS) {
8250 		ns_ext_tuples = ns_cnt - WMI_MAX_NS_OFFLOADS;
8251 		len += sizeof(*tlv) +
8252 		       ns_ext_tuples * sizeof(struct wmi_ns_offload_params);
8253 	}
8254 
8255 	skb = ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
8256 	if (!skb)
8257 		return -ENOMEM;
8258 
8259 	buf_ptr = skb->data;
8260 	cmd = buf_ptr;
8261 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_SET_ARP_NS_OFFLOAD_CMD,
8262 						 sizeof(*cmd));
8263 	cmd->flags = cpu_to_le32(0);
8264 	cmd->vdev_id = cpu_to_le32(arvif->vdev_id);
8265 	cmd->num_ns_ext_tuples = cpu_to_le32(ns_ext_tuples);
8266 
8267 	buf_ptr += sizeof(*cmd);
8268 
8269 	ath12k_wmi_fill_ns_offload(ar, offload, &buf_ptr, enable, 0);
8270 	ath12k_wmi_fill_arp_offload(ar, offload, &buf_ptr, enable);
8271 
8272 	if (ns_ext_tuples)
8273 		ath12k_wmi_fill_ns_offload(ar, offload, &buf_ptr, enable, 1);
8274 
8275 	return ath12k_wmi_cmd_send(ar->wmi, skb, WMI_SET_ARP_NS_OFFLOAD_CMDID);
8276 }
8277 
8278 int ath12k_wmi_gtk_rekey_offload(struct ath12k *ar,
8279 				 struct ath12k_link_vif *arvif, bool enable)
8280 {
8281 	struct ath12k_rekey_data *rekey_data = &arvif->rekey_data;
8282 	struct wmi_gtk_rekey_offload_cmd *cmd;
8283 	struct sk_buff *skb;
8284 	__le64 replay_ctr;
8285 	int len;
8286 
8287 	len = sizeof(*cmd);
8288 	skb =  ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
8289 	if (!skb)
8290 		return -ENOMEM;
8291 
8292 	cmd = (struct wmi_gtk_rekey_offload_cmd *)skb->data;
8293 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_GTK_OFFLOAD_CMD, sizeof(*cmd));
8294 	cmd->vdev_id = cpu_to_le32(arvif->vdev_id);
8295 
8296 	if (enable) {
8297 		cmd->flags = cpu_to_le32(GTK_OFFLOAD_ENABLE_OPCODE);
8298 
8299 		/* the length in rekey_data and cmd is equal */
8300 		memcpy(cmd->kck, rekey_data->kck, sizeof(cmd->kck));
8301 		memcpy(cmd->kek, rekey_data->kek, sizeof(cmd->kek));
8302 
8303 		replay_ctr = cpu_to_le64(rekey_data->replay_ctr);
8304 		memcpy(cmd->replay_ctr, &replay_ctr,
8305 		       sizeof(replay_ctr));
8306 	} else {
8307 		cmd->flags = cpu_to_le32(GTK_OFFLOAD_DISABLE_OPCODE);
8308 	}
8309 
8310 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "offload gtk rekey vdev: %d %d\n",
8311 		   arvif->vdev_id, enable);
8312 	return ath12k_wmi_cmd_send(ar->wmi, skb, WMI_GTK_OFFLOAD_CMDID);
8313 }
8314 
8315 int ath12k_wmi_gtk_rekey_getinfo(struct ath12k *ar,
8316 				 struct ath12k_link_vif *arvif)
8317 {
8318 	struct wmi_gtk_rekey_offload_cmd *cmd;
8319 	struct sk_buff *skb;
8320 	int len;
8321 
8322 	len = sizeof(*cmd);
8323 	skb =  ath12k_wmi_alloc_skb(ar->wmi->wmi_ab, len);
8324 	if (!skb)
8325 		return -ENOMEM;
8326 
8327 	cmd = (struct wmi_gtk_rekey_offload_cmd *)skb->data;
8328 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_GTK_OFFLOAD_CMD, sizeof(*cmd));
8329 	cmd->vdev_id = cpu_to_le32(arvif->vdev_id);
8330 	cmd->flags = cpu_to_le32(GTK_OFFLOAD_REQUEST_STATUS_OPCODE);
8331 
8332 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI, "get gtk rekey vdev_id: %d\n",
8333 		   arvif->vdev_id);
8334 	return ath12k_wmi_cmd_send(ar->wmi, skb, WMI_GTK_OFFLOAD_CMDID);
8335 }
8336 
8337 int ath12k_wmi_sta_keepalive(struct ath12k *ar,
8338 			     const struct wmi_sta_keepalive_arg *arg)
8339 {
8340 	struct wmi_sta_keepalive_arp_resp_params *arp;
8341 	struct ath12k_wmi_pdev *wmi = ar->wmi;
8342 	struct wmi_sta_keepalive_cmd *cmd;
8343 	struct sk_buff *skb;
8344 	size_t len;
8345 
8346 	len = sizeof(*cmd) + sizeof(*arp);
8347 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
8348 	if (!skb)
8349 		return -ENOMEM;
8350 
8351 	cmd = (struct wmi_sta_keepalive_cmd *)skb->data;
8352 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_STA_KEEPALIVE_CMD, sizeof(*cmd));
8353 	cmd->vdev_id = cpu_to_le32(arg->vdev_id);
8354 	cmd->enabled = cpu_to_le32(arg->enabled);
8355 	cmd->interval = cpu_to_le32(arg->interval);
8356 	cmd->method = cpu_to_le32(arg->method);
8357 
8358 	arp = (struct wmi_sta_keepalive_arp_resp_params *)(cmd + 1);
8359 	arp->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_STA_KEEPALVE_ARP_RESPONSE,
8360 						 sizeof(*arp));
8361 	if (arg->method == WMI_STA_KEEPALIVE_METHOD_UNSOLICITED_ARP_RESPONSE ||
8362 	    arg->method == WMI_STA_KEEPALIVE_METHOD_GRATUITOUS_ARP_REQUEST) {
8363 		arp->src_ip4_addr = cpu_to_le32(arg->src_ip4_addr);
8364 		arp->dest_ip4_addr = cpu_to_le32(arg->dest_ip4_addr);
8365 		ether_addr_copy(arp->dest_mac_addr.addr, arg->dest_mac_addr);
8366 	}
8367 
8368 	ath12k_dbg(ar->ab, ATH12K_DBG_WMI,
8369 		   "wmi sta keepalive vdev %d enabled %d method %d interval %d\n",
8370 		   arg->vdev_id, arg->enabled, arg->method, arg->interval);
8371 
8372 	return ath12k_wmi_cmd_send(wmi, skb, WMI_STA_KEEPALIVE_CMDID);
8373 }
8374 
8375 int ath12k_wmi_mlo_setup(struct ath12k *ar, struct wmi_mlo_setup_arg *mlo_params)
8376 {
8377 	struct wmi_mlo_setup_cmd *cmd;
8378 	struct ath12k_wmi_pdev *wmi = ar->wmi;
8379 	u32 *partner_links, num_links;
8380 	int i, ret, buf_len, arg_len;
8381 	struct sk_buff *skb;
8382 	struct wmi_tlv *tlv;
8383 	void *ptr;
8384 
8385 	num_links = mlo_params->num_partner_links;
8386 	arg_len = num_links * sizeof(u32);
8387 	buf_len = sizeof(*cmd) + TLV_HDR_SIZE + arg_len;
8388 
8389 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, buf_len);
8390 	if (!skb)
8391 		return -ENOMEM;
8392 
8393 	cmd = (struct wmi_mlo_setup_cmd *)skb->data;
8394 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_MLO_SETUP_CMD,
8395 						 sizeof(*cmd));
8396 	cmd->mld_group_id = mlo_params->group_id;
8397 	cmd->pdev_id = cpu_to_le32(ar->pdev->pdev_id);
8398 	ptr = skb->data + sizeof(*cmd);
8399 
8400 	tlv = ptr;
8401 	tlv->header = ath12k_wmi_tlv_hdr(WMI_TAG_ARRAY_UINT32, arg_len);
8402 	ptr += TLV_HDR_SIZE;
8403 
8404 	partner_links = ptr;
8405 	for (i = 0; i < num_links; i++)
8406 		partner_links[i] = mlo_params->partner_link_id[i];
8407 
8408 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_MLO_SETUP_CMDID);
8409 	if (ret) {
8410 		ath12k_warn(ar->ab, "failed to submit WMI_MLO_SETUP_CMDID command: %d\n",
8411 			    ret);
8412 		dev_kfree_skb(skb);
8413 		return ret;
8414 	}
8415 
8416 	return 0;
8417 }
8418 
8419 int ath12k_wmi_mlo_ready(struct ath12k *ar)
8420 {
8421 	struct wmi_mlo_ready_cmd *cmd;
8422 	struct ath12k_wmi_pdev *wmi = ar->wmi;
8423 	struct sk_buff *skb;
8424 	int ret, len;
8425 
8426 	len = sizeof(*cmd);
8427 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
8428 	if (!skb)
8429 		return -ENOMEM;
8430 
8431 	cmd = (struct wmi_mlo_ready_cmd *)skb->data;
8432 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_MLO_READY_CMD,
8433 						 sizeof(*cmd));
8434 	cmd->pdev_id = cpu_to_le32(ar->pdev->pdev_id);
8435 
8436 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_MLO_READY_CMDID);
8437 	if (ret) {
8438 		ath12k_warn(ar->ab, "failed to submit WMI_MLO_READY_CMDID command: %d\n",
8439 			    ret);
8440 		dev_kfree_skb(skb);
8441 		return ret;
8442 	}
8443 
8444 	return 0;
8445 }
8446 
8447 int ath12k_wmi_mlo_teardown(struct ath12k *ar)
8448 {
8449 	struct wmi_mlo_teardown_cmd *cmd;
8450 	struct ath12k_wmi_pdev *wmi = ar->wmi;
8451 	struct sk_buff *skb;
8452 	int ret, len;
8453 
8454 	len = sizeof(*cmd);
8455 	skb = ath12k_wmi_alloc_skb(wmi->wmi_ab, len);
8456 	if (!skb)
8457 		return -ENOMEM;
8458 
8459 	cmd = (struct wmi_mlo_teardown_cmd *)skb->data;
8460 	cmd->tlv_header = ath12k_wmi_tlv_cmd_hdr(WMI_TAG_MLO_TEARDOWN_CMD,
8461 						 sizeof(*cmd));
8462 	cmd->pdev_id = cpu_to_le32(ar->pdev->pdev_id);
8463 	cmd->reason_code = WMI_MLO_TEARDOWN_SSR_REASON;
8464 
8465 	ret = ath12k_wmi_cmd_send(wmi, skb, WMI_MLO_TEARDOWN_CMDID);
8466 	if (ret) {
8467 		ath12k_warn(ar->ab, "failed to submit WMI MLO teardown command: %d\n",
8468 			    ret);
8469 		dev_kfree_skb(skb);
8470 		return ret;
8471 	}
8472 
8473 	return 0;
8474 }
8475