1// SPDX-License-Identifier: ISC
   2/*
   3 * Copyright (c) 2005-2011 Atheros Communications Inc.
   4 * Copyright (c) 2011-2017 Qualcomm Atheros, Inc.
   5 * Copyright (c) 2018-2019, The Linux Foundation. All rights reserved.
   6 */
   7#include "core.h"
   8#include "debug.h"
   9#include "mac.h"
  10#include "hw.h"
  11#include "wmi.h"
  12#include "wmi-ops.h"
  13#include "wmi-tlv.h"
  14#include "p2p.h"
  15#include "testmode.h"
  16#include <linux/bitfield.h>
  17
  18/***************/
  19/* TLV helpers */
  20/**************/
  21
  22struct wmi_tlv_policy {
  23	size_t min_len;
  24};
  25
  26static const struct wmi_tlv_policy wmi_tlv_policies[] = {
  27	[WMI_TLV_TAG_ARRAY_BYTE]
  28		= { .min_len = 0 },
  29	[WMI_TLV_TAG_ARRAY_UINT32]
  30		= { .min_len = 0 },
  31	[WMI_TLV_TAG_STRUCT_SCAN_EVENT]
  32		= { .min_len = sizeof(struct wmi_scan_event) },
  33	[WMI_TLV_TAG_STRUCT_MGMT_RX_HDR]
  34		= { .min_len = sizeof(struct wmi_tlv_mgmt_rx_ev) },
  35	[WMI_TLV_TAG_STRUCT_CHAN_INFO_EVENT]
  36		= { .min_len = sizeof(struct wmi_chan_info_event) },
  37	[WMI_TLV_TAG_STRUCT_VDEV_START_RESPONSE_EVENT]
  38		= { .min_len = sizeof(struct wmi_vdev_start_response_event) },
  39	[WMI_TLV_TAG_STRUCT_PEER_STA_KICKOUT_EVENT]
  40		= { .min_len = sizeof(struct wmi_peer_sta_kickout_event) },
  41	[WMI_TLV_TAG_STRUCT_HOST_SWBA_EVENT]
  42		= { .min_len = sizeof(struct wmi_host_swba_event) },
  43	[WMI_TLV_TAG_STRUCT_TIM_INFO]
  44		= { .min_len = sizeof(struct wmi_tim_info) },
  45	[WMI_TLV_TAG_STRUCT_P2P_NOA_INFO]
  46		= { .min_len = sizeof(struct wmi_p2p_noa_info) },
  47	[WMI_TLV_TAG_STRUCT_SERVICE_READY_EVENT]
  48		= { .min_len = sizeof(struct wmi_tlv_svc_rdy_ev) },
  49	[WMI_TLV_TAG_STRUCT_HAL_REG_CAPABILITIES]
  50		= { .min_len = sizeof(struct hal_reg_capabilities) },
  51	[WMI_TLV_TAG_STRUCT_WLAN_HOST_MEM_REQ]
  52		= { .min_len = sizeof(struct wlan_host_mem_req) },
  53	[WMI_TLV_TAG_STRUCT_READY_EVENT]
  54		= { .min_len = sizeof(struct wmi_tlv_rdy_ev) },
  55	[WMI_TLV_TAG_STRUCT_OFFLOAD_BCN_TX_STATUS_EVENT]
  56		= { .min_len = sizeof(struct wmi_tlv_bcn_tx_status_ev) },
  57	[WMI_TLV_TAG_STRUCT_DIAG_DATA_CONTAINER_EVENT]
  58		= { .min_len = sizeof(struct wmi_tlv_diag_data_ev) },
  59	[WMI_TLV_TAG_STRUCT_P2P_NOA_EVENT]
  60		= { .min_len = sizeof(struct wmi_tlv_p2p_noa_ev) },
  61	[WMI_TLV_TAG_STRUCT_ROAM_EVENT]
  62		= { .min_len = sizeof(struct wmi_tlv_roam_ev) },
  63	[WMI_TLV_TAG_STRUCT_WOW_EVENT_INFO]
  64		= { .min_len = sizeof(struct wmi_tlv_wow_event_info) },
  65	[WMI_TLV_TAG_STRUCT_TX_PAUSE_EVENT]
  66		= { .min_len = sizeof(struct wmi_tlv_tx_pause_ev) },
  67};
  68
  69static int
  70ath10k_wmi_tlv_iter(struct ath10k *ar, const void *ptr, size_t len,
  71		    int (*iter)(struct ath10k *ar, u16 tag, u16 len,
  72				const void *ptr, void *data),
  73		    void *data)
  74{
  75	const void *begin = ptr;
  76	const struct wmi_tlv *tlv;
  77	u16 tlv_tag, tlv_len;
  78	int ret;
  79
  80	while (len > 0) {
  81		if (len < sizeof(*tlv)) {
  82			ath10k_dbg(ar, ATH10K_DBG_WMI,
  83				   "wmi tlv parse failure at byte %zd (%zu bytes left, %zu expected)\n",
  84				   ptr - begin, len, sizeof(*tlv));
  85			return -EINVAL;
  86		}
  87
  88		tlv = ptr;
  89		tlv_tag = __le16_to_cpu(tlv->tag);
  90		tlv_len = __le16_to_cpu(tlv->len);
  91		ptr += sizeof(*tlv);
  92		len -= sizeof(*tlv);
  93
  94		if (tlv_len > len) {
  95			ath10k_dbg(ar, ATH10K_DBG_WMI,
  96				   "wmi tlv parse failure of tag %hhu at byte %zd (%zu bytes left, %hhu expected)\n",
  97				   tlv_tag, ptr - begin, len, tlv_len);
  98			return -EINVAL;
  99		}
 100
 101		if (tlv_tag < ARRAY_SIZE(wmi_tlv_policies) &&
 102		    wmi_tlv_policies[tlv_tag].min_len &&
 103		    wmi_tlv_policies[tlv_tag].min_len > tlv_len) {
 104			ath10k_dbg(ar, ATH10K_DBG_WMI,
 105				   "wmi tlv parse failure of tag %hhu at byte %zd (%hhu bytes is less than min length %zu)\n",
 106				   tlv_tag, ptr - begin, tlv_len,
 107				   wmi_tlv_policies[tlv_tag].min_len);
 108			return -EINVAL;
 109		}
 110
 111		ret = iter(ar, tlv_tag, tlv_len, ptr, data);
 112		if (ret)
 113			return ret;
 114
 115		ptr += tlv_len;
 116		len -= tlv_len;
 117	}
 118
 119	return 0;
 120}
 121
 122static int ath10k_wmi_tlv_iter_parse(struct ath10k *ar, u16 tag, u16 len,
 123				     const void *ptr, void *data)
 124{
 125	const void **tb = data;
 126
 127	if (tag < WMI_TLV_TAG_MAX)
 128		tb[tag] = ptr;
 129
 130	return 0;
 131}
 132
 133static int ath10k_wmi_tlv_parse(struct ath10k *ar, const void **tb,
 134				const void *ptr, size_t len)
 135{
 136	return ath10k_wmi_tlv_iter(ar, ptr, len, ath10k_wmi_tlv_iter_parse,
 137				   (void *)tb);
 138}
 139
 140static const void **
 141ath10k_wmi_tlv_parse_alloc(struct ath10k *ar, const void *ptr,
 142			   size_t len, gfp_t gfp)
 143{
 144	const void **tb;
 145	int ret;
 146
 147	tb = kcalloc(WMI_TLV_TAG_MAX, sizeof(*tb), gfp);
 148	if (!tb)
 149		return ERR_PTR(-ENOMEM);
 150
 151	ret = ath10k_wmi_tlv_parse(ar, tb, ptr, len);
 152	if (ret) {
 153		kfree(tb);
 154		return ERR_PTR(ret);
 155	}
 156
 157	return tb;
 158}
 159
 160static u16 ath10k_wmi_tlv_len(const void *ptr)
 161{
 162	return __le16_to_cpu((((const struct wmi_tlv *)ptr) - 1)->len);
 163}
 164
 165/**************/
 166/* TLV events */
 167/**************/
 168static int ath10k_wmi_tlv_event_bcn_tx_status(struct ath10k *ar,
 169					      struct sk_buff *skb)
 170{
 171	const void **tb;
 172	const struct wmi_tlv_bcn_tx_status_ev *ev;
 173	struct ath10k_vif *arvif;
 174	u32 vdev_id, tx_status;
 175	int ret;
 176
 177	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
 178	if (IS_ERR(tb)) {
 179		ret = PTR_ERR(tb);
 180		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
 181		return ret;
 182	}
 183
 184	ev = tb[WMI_TLV_TAG_STRUCT_OFFLOAD_BCN_TX_STATUS_EVENT];
 185	if (!ev) {
 186		kfree(tb);
 187		return -EPROTO;
 188	}
 189
 190	tx_status = __le32_to_cpu(ev->tx_status);
 191	vdev_id = __le32_to_cpu(ev->vdev_id);
 192
 193	switch (tx_status) {
 194	case WMI_TLV_BCN_TX_STATUS_OK:
 195		break;
 196	case WMI_TLV_BCN_TX_STATUS_XRETRY:
 197	case WMI_TLV_BCN_TX_STATUS_DROP:
 198	case WMI_TLV_BCN_TX_STATUS_FILTERED:
 199		/* FIXME: It's probably worth telling mac80211 to stop the
 200		 * interface as it is crippled.
 201		 */
 202		ath10k_warn(ar, "received bcn tmpl tx status on vdev %i: %d",
 203			    vdev_id, tx_status);
 204		break;
 205	}
 206
 207	arvif = ath10k_get_arvif(ar, vdev_id);
 208	if (arvif && arvif->is_up && arvif->vif->csa_active)
 209		ieee80211_queue_work(ar->hw, &arvif->ap_csa_work);
 210
 211	kfree(tb);
 212	return 0;
 213}
 214
 215static void ath10k_wmi_tlv_event_vdev_delete_resp(struct ath10k *ar,
 216						  struct sk_buff *skb)
 217{
 218	ath10k_dbg(ar, ATH10K_DBG_WMI, "WMI_VDEV_DELETE_RESP_EVENTID\n");
 219	complete(&ar->vdev_delete_done);
 220}
 221
 222static int ath10k_wmi_tlv_event_diag_data(struct ath10k *ar,
 223					  struct sk_buff *skb)
 224{
 225	const void **tb;
 226	const struct wmi_tlv_diag_data_ev *ev;
 227	const struct wmi_tlv_diag_item *item;
 228	const void *data;
 229	int ret, num_items, len;
 230
 231	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
 232	if (IS_ERR(tb)) {
 233		ret = PTR_ERR(tb);
 234		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
 235		return ret;
 236	}
 237
 238	ev = tb[WMI_TLV_TAG_STRUCT_DIAG_DATA_CONTAINER_EVENT];
 239	data = tb[WMI_TLV_TAG_ARRAY_BYTE];
 240	if (!ev || !data) {
 241		kfree(tb);
 242		return -EPROTO;
 243	}
 244
 245	num_items = __le32_to_cpu(ev->num_items);
 246	len = ath10k_wmi_tlv_len(data);
 247
 248	while (num_items--) {
 249		if (len == 0)
 250			break;
 251		if (len < sizeof(*item)) {
 252			ath10k_warn(ar, "failed to parse diag data: can't fit item header\n");
 253			break;
 254		}
 255
 256		item = data;
 257
 258		if (len < sizeof(*item) + __le16_to_cpu(item->len)) {
 259			ath10k_warn(ar, "failed to parse diag data: item is too long\n");
 260			break;
 261		}
 262
 263		trace_ath10k_wmi_diag_container(ar,
 264						item->type,
 265						__le32_to_cpu(item->timestamp),
 266						__le32_to_cpu(item->code),
 267						__le16_to_cpu(item->len),
 268						item->payload);
 269
 270		len -= sizeof(*item);
 271		len -= roundup(__le16_to_cpu(item->len), 4);
 272
 273		data += sizeof(*item);
 274		data += roundup(__le16_to_cpu(item->len), 4);
 275	}
 276
 277	if (num_items != -1 || len != 0)
 278		ath10k_warn(ar, "failed to parse diag data event: num_items %d len %d\n",
 279			    num_items, len);
 280
 281	kfree(tb);
 282	return 0;
 283}
 284
 285static int ath10k_wmi_tlv_event_diag(struct ath10k *ar,
 286				     struct sk_buff *skb)
 287{
 288	const void **tb;
 289	const void *data;
 290	int ret, len;
 291
 292	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
 293	if (IS_ERR(tb)) {
 294		ret = PTR_ERR(tb);
 295		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
 296		return ret;
 297	}
 298
 299	data = tb[WMI_TLV_TAG_ARRAY_BYTE];
 300	if (!data) {
 301		kfree(tb);
 302		return -EPROTO;
 303	}
 304	len = ath10k_wmi_tlv_len(data);
 305
 306	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv diag event len %d\n", len);
 307	trace_ath10k_wmi_diag(ar, data, len);
 308
 309	kfree(tb);
 310	return 0;
 311}
 312
 313static int ath10k_wmi_tlv_event_p2p_noa(struct ath10k *ar,
 314					struct sk_buff *skb)
 315{
 316	const void **tb;
 317	const struct wmi_tlv_p2p_noa_ev *ev;
 318	const struct wmi_p2p_noa_info *noa;
 319	int ret, vdev_id;
 320
 321	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
 322	if (IS_ERR(tb)) {
 323		ret = PTR_ERR(tb);
 324		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
 325		return ret;
 326	}
 327
 328	ev = tb[WMI_TLV_TAG_STRUCT_P2P_NOA_EVENT];
 329	noa = tb[WMI_TLV_TAG_STRUCT_P2P_NOA_INFO];
 330
 331	if (!ev || !noa) {
 332		kfree(tb);
 333		return -EPROTO;
 334	}
 335
 336	vdev_id = __le32_to_cpu(ev->vdev_id);
 337
 338	ath10k_dbg(ar, ATH10K_DBG_WMI,
 339		   "wmi tlv p2p noa vdev_id %i descriptors %hhu\n",
 340		   vdev_id, noa->num_descriptors);
 341
 342	ath10k_p2p_noa_update_by_vdev_id(ar, vdev_id, noa);
 343	kfree(tb);
 344	return 0;
 345}
 346
 347static int ath10k_wmi_tlv_event_tx_pause(struct ath10k *ar,
 348					 struct sk_buff *skb)
 349{
 350	const void **tb;
 351	const struct wmi_tlv_tx_pause_ev *ev;
 352	int ret, vdev_id;
 353	u32 pause_id, action, vdev_map, peer_id, tid_map;
 354
 355	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
 356	if (IS_ERR(tb)) {
 357		ret = PTR_ERR(tb);
 358		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
 359		return ret;
 360	}
 361
 362	ev = tb[WMI_TLV_TAG_STRUCT_TX_PAUSE_EVENT];
 363	if (!ev) {
 364		kfree(tb);
 365		return -EPROTO;
 366	}
 367
 368	pause_id = __le32_to_cpu(ev->pause_id);
 369	action = __le32_to_cpu(ev->action);
 370	vdev_map = __le32_to_cpu(ev->vdev_map);
 371	peer_id = __le32_to_cpu(ev->peer_id);
 372	tid_map = __le32_to_cpu(ev->tid_map);
 373
 374	ath10k_dbg(ar, ATH10K_DBG_WMI,
 375		   "wmi tlv tx pause pause_id %u action %u vdev_map 0x%08x peer_id %u tid_map 0x%08x\n",
 376		   pause_id, action, vdev_map, peer_id, tid_map);
 377
 378	switch (pause_id) {
 379	case WMI_TLV_TX_PAUSE_ID_MCC:
 380	case WMI_TLV_TX_PAUSE_ID_P2P_CLI_NOA:
 381	case WMI_TLV_TX_PAUSE_ID_P2P_GO_PS:
 382	case WMI_TLV_TX_PAUSE_ID_AP_PS:
 383	case WMI_TLV_TX_PAUSE_ID_IBSS_PS:
 384		for (vdev_id = 0; vdev_map; vdev_id++) {
 385			if (!(vdev_map & BIT(vdev_id)))
 386				continue;
 387
 388			vdev_map &= ~BIT(vdev_id);
 389			ath10k_mac_handle_tx_pause_vdev(ar, vdev_id, pause_id,
 390							action);
 391		}
 392		break;
 393	case WMI_TLV_TX_PAUSE_ID_AP_PEER_PS:
 394	case WMI_TLV_TX_PAUSE_ID_AP_PEER_UAPSD:
 395	case WMI_TLV_TX_PAUSE_ID_STA_ADD_BA:
 396	case WMI_TLV_TX_PAUSE_ID_HOST:
 397		ath10k_dbg(ar, ATH10K_DBG_MAC,
 398			   "mac ignoring unsupported tx pause id %d\n",
 399			   pause_id);
 400		break;
 401	default:
 402		ath10k_dbg(ar, ATH10K_DBG_MAC,
 403			   "mac ignoring unknown tx pause vdev %d\n",
 404			   pause_id);
 405		break;
 406	}
 407
 408	kfree(tb);
 409	return 0;
 410}
 411
 412static int ath10k_wmi_tlv_event_temperature(struct ath10k *ar,
 413					    struct sk_buff *skb)
 414{
 415	const struct wmi_tlv_pdev_temperature_event *ev;
 416
 417	ev = (struct wmi_tlv_pdev_temperature_event *)skb->data;
 418	if (WARN_ON(skb->len < sizeof(*ev)))
 419		return -EPROTO;
 420
 421	ath10k_thermal_event_temperature(ar, __le32_to_cpu(ev->temperature));
 422	return 0;
 423}
 424
 425static void ath10k_wmi_event_tdls_peer(struct ath10k *ar, struct sk_buff *skb)
 426{
 427	struct ieee80211_sta *station;
 428	const struct wmi_tlv_tdls_peer_event *ev;
 429	const void **tb;
 430	struct ath10k_vif *arvif;
 431
 432	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
 433	if (IS_ERR(tb)) {
 434		ath10k_warn(ar, "tdls peer failed to parse tlv");
 435		return;
 436	}
 437	ev = tb[WMI_TLV_TAG_STRUCT_TDLS_PEER_EVENT];
 438	if (!ev) {
 439		kfree(tb);
 440		ath10k_warn(ar, "tdls peer NULL event");
 441		return;
 442	}
 443
 444	switch (__le32_to_cpu(ev->peer_reason)) {
 445	case WMI_TDLS_TEARDOWN_REASON_TX:
 446	case WMI_TDLS_TEARDOWN_REASON_RSSI:
 447	case WMI_TDLS_TEARDOWN_REASON_PTR_TIMEOUT:
 448		station = ieee80211_find_sta_by_ifaddr(ar->hw,
 449						       ev->peer_macaddr.addr,
 450						       NULL);
 451		if (!station) {
 452			ath10k_warn(ar, "did not find station from tdls peer event");
 453			kfree(tb);
 454			return;
 455		}
 456		arvif = ath10k_get_arvif(ar, __le32_to_cpu(ev->vdev_id));
 457		ieee80211_tdls_oper_request(
 458					arvif->vif, station->addr,
 459					NL80211_TDLS_TEARDOWN,
 460					WLAN_REASON_TDLS_TEARDOWN_UNREACHABLE,
 461					GFP_ATOMIC
 462					);
 463		break;
 464	}
 465	kfree(tb);
 466}
 467
 468static int ath10k_wmi_tlv_event_peer_delete_resp(struct ath10k *ar,
 469						 struct sk_buff *skb)
 470{
 471	struct wmi_peer_delete_resp_ev_arg *arg;
 472	struct wmi_tlv *tlv_hdr;
 473
 474	tlv_hdr = (struct wmi_tlv *)skb->data;
 475	arg = (struct wmi_peer_delete_resp_ev_arg *)tlv_hdr->value;
 476
 477	ath10k_dbg(ar, ATH10K_DBG_WMI, "vdev id %d", arg->vdev_id);
 478	ath10k_dbg(ar, ATH10K_DBG_WMI, "peer mac addr %pM", &arg->peer_addr);
 479	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv peer delete response\n");
 480
 481	complete(&ar->peer_delete_done);
 482
 483	return 0;
 484}
 485
 486/***********/
 487/* TLV ops */
 488/***********/
 489
 490static void ath10k_wmi_tlv_op_rx(struct ath10k *ar, struct sk_buff *skb)
 491{
 492	struct wmi_cmd_hdr *cmd_hdr;
 493	enum wmi_tlv_event_id id;
 494	bool consumed;
 495
 496	cmd_hdr = (struct wmi_cmd_hdr *)skb->data;
 497	id = MS(__le32_to_cpu(cmd_hdr->cmd_id), WMI_CMD_HDR_CMD_ID);
 498
 499	if (skb_pull(skb, sizeof(struct wmi_cmd_hdr)) == NULL)
 500		goto out;
 501
 502	trace_ath10k_wmi_event(ar, id, skb->data, skb->len);
 503
 504	consumed = ath10k_tm_event_wmi(ar, id, skb);
 505
 506	/* Ready event must be handled normally also in UTF mode so that we
 507	 * know the UTF firmware has booted, others we are just bypass WMI
 508	 * events to testmode.
 509	 */
 510	if (consumed && id != WMI_TLV_READY_EVENTID) {
 511		ath10k_dbg(ar, ATH10K_DBG_WMI,
 512			   "wmi tlv testmode consumed 0x%x\n", id);
 513		goto out;
 514	}
 515
 516	switch (id) {
 517	case WMI_TLV_MGMT_RX_EVENTID:
 518		ath10k_wmi_event_mgmt_rx(ar, skb);
 519		/* mgmt_rx() owns the skb now! */
 520		return;
 521	case WMI_TLV_SCAN_EVENTID:
 522		ath10k_wmi_event_scan(ar, skb);
 523		break;
 524	case WMI_TLV_CHAN_INFO_EVENTID:
 525		ath10k_wmi_event_chan_info(ar, skb);
 526		break;
 527	case WMI_TLV_ECHO_EVENTID:
 528		ath10k_wmi_event_echo(ar, skb);
 529		break;
 530	case WMI_TLV_DEBUG_MESG_EVENTID:
 531		ath10k_wmi_event_debug_mesg(ar, skb);
 532		break;
 533	case WMI_TLV_UPDATE_STATS_EVENTID:
 534		ath10k_wmi_event_update_stats(ar, skb);
 535		break;
 536	case WMI_TLV_VDEV_START_RESP_EVENTID:
 537		ath10k_wmi_event_vdev_start_resp(ar, skb);
 538		break;
 539	case WMI_TLV_VDEV_STOPPED_EVENTID:
 540		ath10k_wmi_event_vdev_stopped(ar, skb);
 541		break;
 542	case WMI_TLV_VDEV_DELETE_RESP_EVENTID:
 543		ath10k_wmi_tlv_event_vdev_delete_resp(ar, skb);
 544		break;
 545	case WMI_TLV_PEER_STA_KICKOUT_EVENTID:
 546		ath10k_wmi_event_peer_sta_kickout(ar, skb);
 547		break;
 548	case WMI_TLV_HOST_SWBA_EVENTID:
 549		ath10k_wmi_event_host_swba(ar, skb);
 550		break;
 551	case WMI_TLV_TBTTOFFSET_UPDATE_EVENTID:
 552		ath10k_wmi_event_tbttoffset_update(ar, skb);
 553		break;
 554	case WMI_TLV_PHYERR_EVENTID:
 555		ath10k_wmi_event_phyerr(ar, skb);
 556		break;
 557	case WMI_TLV_ROAM_EVENTID:
 558		ath10k_wmi_event_roam(ar, skb);
 559		break;
 560	case WMI_TLV_PROFILE_MATCH:
 561		ath10k_wmi_event_profile_match(ar, skb);
 562		break;
 563	case WMI_TLV_DEBUG_PRINT_EVENTID:
 564		ath10k_wmi_event_debug_print(ar, skb);
 565		break;
 566	case WMI_TLV_PDEV_QVIT_EVENTID:
 567		ath10k_wmi_event_pdev_qvit(ar, skb);
 568		break;
 569	case WMI_TLV_WLAN_PROFILE_DATA_EVENTID:
 570		ath10k_wmi_event_wlan_profile_data(ar, skb);
 571		break;
 572	case WMI_TLV_RTT_MEASUREMENT_REPORT_EVENTID:
 573		ath10k_wmi_event_rtt_measurement_report(ar, skb);
 574		break;
 575	case WMI_TLV_TSF_MEASUREMENT_REPORT_EVENTID:
 576		ath10k_wmi_event_tsf_measurement_report(ar, skb);
 577		break;
 578	case WMI_TLV_RTT_ERROR_REPORT_EVENTID:
 579		ath10k_wmi_event_rtt_error_report(ar, skb);
 580		break;
 581	case WMI_TLV_WOW_WAKEUP_HOST_EVENTID:
 582		ath10k_wmi_event_wow_wakeup_host(ar, skb);
 583		break;
 584	case WMI_TLV_DCS_INTERFERENCE_EVENTID:
 585		ath10k_wmi_event_dcs_interference(ar, skb);
 586		break;
 587	case WMI_TLV_PDEV_TPC_CONFIG_EVENTID:
 588		ath10k_wmi_event_pdev_tpc_config(ar, skb);
 589		break;
 590	case WMI_TLV_PDEV_FTM_INTG_EVENTID:
 591		ath10k_wmi_event_pdev_ftm_intg(ar, skb);
 592		break;
 593	case WMI_TLV_GTK_OFFLOAD_STATUS_EVENTID:
 594		ath10k_wmi_event_gtk_offload_status(ar, skb);
 595		break;
 596	case WMI_TLV_GTK_REKEY_FAIL_EVENTID:
 597		ath10k_wmi_event_gtk_rekey_fail(ar, skb);
 598		break;
 599	case WMI_TLV_TX_DELBA_COMPLETE_EVENTID:
 600		ath10k_wmi_event_delba_complete(ar, skb);
 601		break;
 602	case WMI_TLV_TX_ADDBA_COMPLETE_EVENTID:
 603		ath10k_wmi_event_addba_complete(ar, skb);
 604		break;
 605	case WMI_TLV_VDEV_INSTALL_KEY_COMPLETE_EVENTID:
 606		ath10k_wmi_event_vdev_install_key_complete(ar, skb);
 607		break;
 608	case WMI_TLV_SERVICE_READY_EVENTID:
 609		ath10k_wmi_event_service_ready(ar, skb);
 610		return;
 611	case WMI_TLV_READY_EVENTID:
 612		ath10k_wmi_event_ready(ar, skb);
 613		break;
 614	case WMI_TLV_SERVICE_AVAILABLE_EVENTID:
 615		ath10k_wmi_event_service_available(ar, skb);
 616		break;
 617	case WMI_TLV_OFFLOAD_BCN_TX_STATUS_EVENTID:
 618		ath10k_wmi_tlv_event_bcn_tx_status(ar, skb);
 619		break;
 620	case WMI_TLV_DIAG_DATA_CONTAINER_EVENTID:
 621		ath10k_wmi_tlv_event_diag_data(ar, skb);
 622		break;
 623	case WMI_TLV_DIAG_EVENTID:
 624		ath10k_wmi_tlv_event_diag(ar, skb);
 625		break;
 626	case WMI_TLV_P2P_NOA_EVENTID:
 627		ath10k_wmi_tlv_event_p2p_noa(ar, skb);
 628		break;
 629	case WMI_TLV_TX_PAUSE_EVENTID:
 630		ath10k_wmi_tlv_event_tx_pause(ar, skb);
 631		break;
 632	case WMI_TLV_PDEV_TEMPERATURE_EVENTID:
 633		ath10k_wmi_tlv_event_temperature(ar, skb);
 634		break;
 635	case WMI_TLV_TDLS_PEER_EVENTID:
 636		ath10k_wmi_event_tdls_peer(ar, skb);
 637		break;
 638	case WMI_TLV_PEER_DELETE_RESP_EVENTID:
 639		ath10k_wmi_tlv_event_peer_delete_resp(ar, skb);
 640		break;
 641	case WMI_TLV_MGMT_TX_COMPLETION_EVENTID:
 642		ath10k_wmi_event_mgmt_tx_compl(ar, skb);
 643		break;
 644	case WMI_TLV_MGMT_TX_BUNDLE_COMPLETION_EVENTID:
 645		ath10k_wmi_event_mgmt_tx_bundle_compl(ar, skb);
 646		break;
 647	default:
 648		ath10k_dbg(ar, ATH10K_DBG_WMI, "Unknown eventid: %d\n", id);
 649		break;
 650	}
 651
 652out:
 653	dev_kfree_skb(skb);
 654}
 655
 656static int ath10k_wmi_tlv_op_pull_scan_ev(struct ath10k *ar,
 657					  struct sk_buff *skb,
 658					  struct wmi_scan_ev_arg *arg)
 659{
 660	const void **tb;
 661	const struct wmi_scan_event *ev;
 662	int ret;
 663
 664	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
 665	if (IS_ERR(tb)) {
 666		ret = PTR_ERR(tb);
 667		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
 668		return ret;
 669	}
 670
 671	ev = tb[WMI_TLV_TAG_STRUCT_SCAN_EVENT];
 672	if (!ev) {
 673		kfree(tb);
 674		return -EPROTO;
 675	}
 676
 677	arg->event_type = ev->event_type;
 678	arg->reason = ev->reason;
 679	arg->channel_freq = ev->channel_freq;
 680	arg->scan_req_id = ev->scan_req_id;
 681	arg->scan_id = ev->scan_id;
 682	arg->vdev_id = ev->vdev_id;
 683
 684	kfree(tb);
 685	return 0;
 686}
 687
 688static int
 689ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev(struct ath10k *ar, struct sk_buff *skb,
 690					struct wmi_tlv_mgmt_tx_compl_ev_arg *arg)
 691{
 692	const void **tb;
 693	const struct wmi_tlv_mgmt_tx_compl_ev *ev;
 694	int ret;
 695
 696	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
 697	if (IS_ERR(tb)) {
 698		ret = PTR_ERR(tb);
 699		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
 700		return ret;
 701	}
 702
 703	ev = tb[WMI_TLV_TAG_STRUCT_MGMT_TX_COMPL_EVENT];
 704
 705	arg->desc_id = ev->desc_id;
 706	arg->status = ev->status;
 707	arg->pdev_id = ev->pdev_id;
 708	arg->ppdu_id = ev->ppdu_id;
 709
 710	if (test_bit(WMI_SERVICE_TX_DATA_ACK_RSSI, ar->wmi.svc_map))
 711		arg->ack_rssi = ev->ack_rssi;
 712
 713	kfree(tb);
 714	return 0;
 715}
 716
 717struct wmi_tlv_tx_bundle_compl_parse {
 718	const __le32 *num_reports;
 719	const __le32 *desc_ids;
 720	const __le32 *status;
 721	const __le32 *ppdu_ids;
 722	const __le32 *ack_rssi;
 723	bool desc_ids_done;
 724	bool status_done;
 725	bool ppdu_ids_done;
 726	bool ack_rssi_done;
 727};
 728
 729static int
 730ath10k_wmi_tlv_mgmt_tx_bundle_compl_parse(struct ath10k *ar, u16 tag, u16 len,
 731					  const void *ptr, void *data)
 732{
 733	struct wmi_tlv_tx_bundle_compl_parse *bundle_tx_compl = data;
 734
 735	switch (tag) {
 736	case WMI_TLV_TAG_STRUCT_MGMT_TX_COMPL_BUNDLE_EVENT:
 737		bundle_tx_compl->num_reports = ptr;
 738		break;
 739	case WMI_TLV_TAG_ARRAY_UINT32:
 740		if (!bundle_tx_compl->desc_ids_done) {
 741			bundle_tx_compl->desc_ids_done = true;
 742			bundle_tx_compl->desc_ids = ptr;
 743		} else if (!bundle_tx_compl->status_done) {
 744			bundle_tx_compl->status_done = true;
 745			bundle_tx_compl->status = ptr;
 746		} else if (!bundle_tx_compl->ppdu_ids_done) {
 747			bundle_tx_compl->ppdu_ids_done = true;
 748			bundle_tx_compl->ppdu_ids = ptr;
 749		} else if (!bundle_tx_compl->ack_rssi_done) {
 750			bundle_tx_compl->ack_rssi_done = true;
 751			bundle_tx_compl->ack_rssi = ptr;
 752		}
 753		break;
 754	default:
 755		break;
 756	}
 757	return 0;
 758}
 759
 760static int ath10k_wmi_tlv_op_pull_mgmt_tx_bundle_compl_ev(
 761				struct ath10k *ar, struct sk_buff *skb,
 762				struct wmi_tlv_mgmt_tx_bundle_compl_ev_arg *arg)
 763{
 764	struct wmi_tlv_tx_bundle_compl_parse bundle_tx_compl = { };
 765	int ret;
 766
 767	ret = ath10k_wmi_tlv_iter(ar, skb->data, skb->len,
 768				  ath10k_wmi_tlv_mgmt_tx_bundle_compl_parse,
 769				  &bundle_tx_compl);
 770	if (ret) {
 771		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
 772		return ret;
 773	}
 774
 775	if (!bundle_tx_compl.num_reports || !bundle_tx_compl.desc_ids ||
 776	    !bundle_tx_compl.status)
 777		return -EPROTO;
 778
 779	arg->num_reports = *bundle_tx_compl.num_reports;
 780	arg->desc_ids = bundle_tx_compl.desc_ids;
 781	arg->status = bundle_tx_compl.status;
 782	arg->ppdu_ids = bundle_tx_compl.ppdu_ids;
 783
 784	if (test_bit(WMI_SERVICE_TX_DATA_ACK_RSSI, ar->wmi.svc_map))
 785		arg->ack_rssi = bundle_tx_compl.ack_rssi;
 786
 787	return 0;
 788}
 789
 790static int ath10k_wmi_tlv_op_pull_mgmt_rx_ev(struct ath10k *ar,
 791					     struct sk_buff *skb,
 792					     struct wmi_mgmt_rx_ev_arg *arg)
 793{
 794	const void **tb;
 795	const struct wmi_tlv_mgmt_rx_ev *ev;
 796	const u8 *frame;
 797	u32 msdu_len;
 798	int ret;
 799
 800	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
 801	if (IS_ERR(tb)) {
 802		ret = PTR_ERR(tb);
 803		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
 804		return ret;
 805	}
 806
 807	ev = tb[WMI_TLV_TAG_STRUCT_MGMT_RX_HDR];
 808	frame = tb[WMI_TLV_TAG_ARRAY_BYTE];
 809
 810	if (!ev || !frame) {
 811		kfree(tb);
 812		return -EPROTO;
 813	}
 814
 815	arg->channel = ev->channel;
 816	arg->buf_len = ev->buf_len;
 817	arg->status = ev->status;
 818	arg->snr = ev->snr;
 819	arg->phy_mode = ev->phy_mode;
 820	arg->rate = ev->rate;
 821
 822	msdu_len = __le32_to_cpu(arg->buf_len);
 823
 824	if (skb->len < (frame - skb->data) + msdu_len) {
 825		kfree(tb);
 826		return -EPROTO;
 827	}
 828
 829	/* shift the sk_buff to point to `frame` */
 830	skb_trim(skb, 0);
 831	skb_put(skb, frame - skb->data);
 832	skb_pull(skb, frame - skb->data);
 833	skb_put(skb, msdu_len);
 834
 835	kfree(tb);
 836	return 0;
 837}
 838
 839static int ath10k_wmi_tlv_op_pull_ch_info_ev(struct ath10k *ar,
 840					     struct sk_buff *skb,
 841					     struct wmi_ch_info_ev_arg *arg)
 842{
 843	const void **tb;
 844	const struct wmi_tlv_chan_info_event *ev;
 845	int ret;
 846
 847	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
 848	if (IS_ERR(tb)) {
 849		ret = PTR_ERR(tb);
 850		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
 851		return ret;
 852	}
 853
 854	ev = tb[WMI_TLV_TAG_STRUCT_CHAN_INFO_EVENT];
 855	if (!ev) {
 856		kfree(tb);
 857		return -EPROTO;
 858	}
 859
 860	arg->err_code = ev->err_code;
 861	arg->freq = ev->freq;
 862	arg->cmd_flags = ev->cmd_flags;
 863	arg->noise_floor = ev->noise_floor;
 864	arg->rx_clear_count = ev->rx_clear_count;
 865	arg->cycle_count = ev->cycle_count;
 866	if (test_bit(ATH10K_FW_FEATURE_SINGLE_CHAN_INFO_PER_CHANNEL,
 867		     ar->running_fw->fw_file.fw_features))
 868		arg->mac_clk_mhz = ev->mac_clk_mhz;
 869
 870	kfree(tb);
 871	return 0;
 872}
 873
 874static int
 875ath10k_wmi_tlv_op_pull_vdev_start_ev(struct ath10k *ar, struct sk_buff *skb,
 876				     struct wmi_vdev_start_ev_arg *arg)
 877{
 878	const void **tb;
 879	const struct wmi_vdev_start_response_event *ev;
 880	int ret;
 881
 882	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
 883	if (IS_ERR(tb)) {
 884		ret = PTR_ERR(tb);
 885		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
 886		return ret;
 887	}
 888
 889	ev = tb[WMI_TLV_TAG_STRUCT_VDEV_START_RESPONSE_EVENT];
 890	if (!ev) {
 891		kfree(tb);
 892		return -EPROTO;
 893	}
 894
 895	skb_pull(skb, sizeof(*ev));
 896	arg->vdev_id = ev->vdev_id;
 897	arg->req_id = ev->req_id;
 898	arg->resp_type = ev->resp_type;
 899	arg->status = ev->status;
 900
 901	kfree(tb);
 902	return 0;
 903}
 904
 905static int ath10k_wmi_tlv_op_pull_peer_kick_ev(struct ath10k *ar,
 906					       struct sk_buff *skb,
 907					       struct wmi_peer_kick_ev_arg *arg)
 908{
 909	const void **tb;
 910	const struct wmi_peer_sta_kickout_event *ev;
 911	int ret;
 912
 913	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
 914	if (IS_ERR(tb)) {
 915		ret = PTR_ERR(tb);
 916		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
 917		return ret;
 918	}
 919
 920	ev = tb[WMI_TLV_TAG_STRUCT_PEER_STA_KICKOUT_EVENT];
 921	if (!ev) {
 922		kfree(tb);
 923		return -EPROTO;
 924	}
 925
 926	arg->mac_addr = ev->peer_macaddr.addr;
 927
 928	kfree(tb);
 929	return 0;
 930}
 931
 932struct wmi_tlv_swba_parse {
 933	const struct wmi_host_swba_event *ev;
 934	bool tim_done;
 935	bool noa_done;
 936	size_t n_tim;
 937	size_t n_noa;
 938	struct wmi_swba_ev_arg *arg;
 939};
 940
 941static int ath10k_wmi_tlv_swba_tim_parse(struct ath10k *ar, u16 tag, u16 len,
 942					 const void *ptr, void *data)
 943{
 944	struct wmi_tlv_swba_parse *swba = data;
 945	struct wmi_tim_info_arg *tim_info_arg;
 946	const struct wmi_tim_info *tim_info_ev = ptr;
 947
 948	if (tag != WMI_TLV_TAG_STRUCT_TIM_INFO)
 949		return -EPROTO;
 950
 951	if (swba->n_tim >= ARRAY_SIZE(swba->arg->tim_info))
 952		return -ENOBUFS;
 953
 954	if (__le32_to_cpu(tim_info_ev->tim_len) >
 955	     sizeof(tim_info_ev->tim_bitmap)) {
 956		ath10k_warn(ar, "refusing to parse invalid swba structure\n");
 957		return -EPROTO;
 958	}
 959
 960	tim_info_arg = &swba->arg->tim_info[swba->n_tim];
 961	tim_info_arg->tim_len = tim_info_ev->tim_len;
 962	tim_info_arg->tim_mcast = tim_info_ev->tim_mcast;
 963	tim_info_arg->tim_bitmap = tim_info_ev->tim_bitmap;
 964	tim_info_arg->tim_changed = tim_info_ev->tim_changed;
 965	tim_info_arg->tim_num_ps_pending = tim_info_ev->tim_num_ps_pending;
 966
 967	swba->n_tim++;
 968
 969	return 0;
 970}
 971
 972static int ath10k_wmi_tlv_swba_noa_parse(struct ath10k *ar, u16 tag, u16 len,
 973					 const void *ptr, void *data)
 974{
 975	struct wmi_tlv_swba_parse *swba = data;
 976
 977	if (tag != WMI_TLV_TAG_STRUCT_P2P_NOA_INFO)
 978		return -EPROTO;
 979
 980	if (swba->n_noa >= ARRAY_SIZE(swba->arg->noa_info))
 981		return -ENOBUFS;
 982
 983	swba->arg->noa_info[swba->n_noa++] = ptr;
 984	return 0;
 985}
 986
 987static int ath10k_wmi_tlv_swba_parse(struct ath10k *ar, u16 tag, u16 len,
 988				     const void *ptr, void *data)
 989{
 990	struct wmi_tlv_swba_parse *swba = data;
 991	int ret;
 992
 993	switch (tag) {
 994	case WMI_TLV_TAG_STRUCT_HOST_SWBA_EVENT:
 995		swba->ev = ptr;
 996		break;
 997	case WMI_TLV_TAG_ARRAY_STRUCT:
 998		if (!swba->tim_done) {
 999			swba->tim_done = true;
1000			ret = ath10k_wmi_tlv_iter(ar, ptr, len,
1001						  ath10k_wmi_tlv_swba_tim_parse,
1002						  swba);
1003			if (ret)
1004				return ret;
1005		} else if (!swba->noa_done) {
1006			swba->noa_done = true;
1007			ret = ath10k_wmi_tlv_iter(ar, ptr, len,
1008						  ath10k_wmi_tlv_swba_noa_parse,
1009						  swba);
1010			if (ret)
1011				return ret;
1012		}
1013		break;
1014	default:
1015		break;
1016	}
1017	return 0;
1018}
1019
1020static int ath10k_wmi_tlv_op_pull_swba_ev(struct ath10k *ar,
1021					  struct sk_buff *skb,
1022					  struct wmi_swba_ev_arg *arg)
1023{
1024	struct wmi_tlv_swba_parse swba = { .arg = arg };
1025	u32 map;
1026	size_t n_vdevs;
1027	int ret;
1028
1029	ret = ath10k_wmi_tlv_iter(ar, skb->data, skb->len,
1030				  ath10k_wmi_tlv_swba_parse, &swba);
1031	if (ret) {
1032		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1033		return ret;
1034	}
1035
1036	if (!swba.ev)
1037		return -EPROTO;
1038
1039	arg->vdev_map = swba.ev->vdev_map;
1040
1041	for (map = __le32_to_cpu(arg->vdev_map), n_vdevs = 0; map; map >>= 1)
1042		if (map & BIT(0))
1043			n_vdevs++;
1044
1045	if (n_vdevs != swba.n_tim ||
1046	    n_vdevs != swba.n_noa)
1047		return -EPROTO;
1048
1049	return 0;
1050}
1051
1052static int ath10k_wmi_tlv_op_pull_phyerr_ev_hdr(struct ath10k *ar,
1053						struct sk_buff *skb,
1054						struct wmi_phyerr_hdr_arg *arg)
1055{
1056	const void **tb;
1057	const struct wmi_tlv_phyerr_ev *ev;
1058	const void *phyerrs;
1059	int ret;
1060
1061	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
1062	if (IS_ERR(tb)) {
1063		ret = PTR_ERR(tb);
1064		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1065		return ret;
1066	}
1067
1068	ev = tb[WMI_TLV_TAG_STRUCT_COMB_PHYERR_RX_HDR];
1069	phyerrs = tb[WMI_TLV_TAG_ARRAY_BYTE];
1070
1071	if (!ev || !phyerrs) {
1072		kfree(tb);
1073		return -EPROTO;
1074	}
1075
1076	arg->num_phyerrs  = __le32_to_cpu(ev->num_phyerrs);
1077	arg->tsf_l32 = __le32_to_cpu(ev->tsf_l32);
1078	arg->tsf_u32 = __le32_to_cpu(ev->tsf_u32);
1079	arg->buf_len = __le32_to_cpu(ev->buf_len);
1080	arg->phyerrs = phyerrs;
1081
1082	kfree(tb);
1083	return 0;
1084}
1085
1086#define WMI_TLV_ABI_VER_NS0 0x5F414351
1087#define WMI_TLV_ABI_VER_NS1 0x00004C4D
1088#define WMI_TLV_ABI_VER_NS2 0x00000000
1089#define WMI_TLV_ABI_VER_NS3 0x00000000
1090
1091#define WMI_TLV_ABI_VER0_MAJOR 1
1092#define WMI_TLV_ABI_VER0_MINOR 0
1093#define WMI_TLV_ABI_VER0 ((((WMI_TLV_ABI_VER0_MAJOR) << 24) & 0xFF000000) | \
1094			  (((WMI_TLV_ABI_VER0_MINOR) <<  0) & 0x00FFFFFF))
1095#define WMI_TLV_ABI_VER1 53
1096
1097static int
1098ath10k_wmi_tlv_parse_mem_reqs(struct ath10k *ar, u16 tag, u16 len,
1099			      const void *ptr, void *data)
1100{
1101	struct wmi_svc_rdy_ev_arg *arg = data;
1102	int i;
1103
1104	if (tag != WMI_TLV_TAG_STRUCT_WLAN_HOST_MEM_REQ)
1105		return -EPROTO;
1106
1107	for (i = 0; i < ARRAY_SIZE(arg->mem_reqs); i++) {
1108		if (!arg->mem_reqs[i]) {
1109			arg->mem_reqs[i] = ptr;
1110			return 0;
1111		}
1112	}
1113
1114	return -ENOMEM;
1115}
1116
1117struct wmi_tlv_svc_rdy_parse {
1118	const struct hal_reg_capabilities *reg;
1119	const struct wmi_tlv_svc_rdy_ev *ev;
1120	const __le32 *svc_bmap;
1121	const struct wlan_host_mem_req *mem_reqs;
1122	bool svc_bmap_done;
1123	bool dbs_hw_mode_done;
1124};
1125
1126static int ath10k_wmi_tlv_svc_rdy_parse(struct ath10k *ar, u16 tag, u16 len,
1127					const void *ptr, void *data)
1128{
1129	struct wmi_tlv_svc_rdy_parse *svc_rdy = data;
1130
1131	switch (tag) {
1132	case WMI_TLV_TAG_STRUCT_SERVICE_READY_EVENT:
1133		svc_rdy->ev = ptr;
1134		break;
1135	case WMI_TLV_TAG_STRUCT_HAL_REG_CAPABILITIES:
1136		svc_rdy->reg = ptr;
1137		break;
1138	case WMI_TLV_TAG_ARRAY_STRUCT:
1139		svc_rdy->mem_reqs = ptr;
1140		break;
1141	case WMI_TLV_TAG_ARRAY_UINT32:
1142		if (!svc_rdy->svc_bmap_done) {
1143			svc_rdy->svc_bmap_done = true;
1144			svc_rdy->svc_bmap = ptr;
1145		} else if (!svc_rdy->dbs_hw_mode_done) {
1146			svc_rdy->dbs_hw_mode_done = true;
1147		}
1148		break;
1149	default:
1150		break;
1151	}
1152	return 0;
1153}
1154
1155static int ath10k_wmi_tlv_op_pull_svc_rdy_ev(struct ath10k *ar,
1156					     struct sk_buff *skb,
1157					     struct wmi_svc_rdy_ev_arg *arg)
1158{
1159	const struct hal_reg_capabilities *reg;
1160	const struct wmi_tlv_svc_rdy_ev *ev;
1161	const __le32 *svc_bmap;
1162	const struct wlan_host_mem_req *mem_reqs;
1163	struct wmi_tlv_svc_rdy_parse svc_rdy = { };
1164	int ret;
1165
1166	ret = ath10k_wmi_tlv_iter(ar, skb->data, skb->len,
1167				  ath10k_wmi_tlv_svc_rdy_parse, &svc_rdy);
1168	if (ret) {
1169		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1170		return ret;
1171	}
1172
1173	ev = svc_rdy.ev;
1174	reg = svc_rdy.reg;
1175	svc_bmap = svc_rdy.svc_bmap;
1176	mem_reqs = svc_rdy.mem_reqs;
1177
1178	if (!ev || !reg || !svc_bmap || !mem_reqs)
1179		return -EPROTO;
1180
1181	/* This is an internal ABI compatibility check for WMI TLV so check it
1182	 * here instead of the generic WMI code.
1183	 */
1184	ath10k_dbg(ar, ATH10K_DBG_WMI,
1185		   "wmi tlv abi 0x%08x ?= 0x%08x, 0x%08x ?= 0x%08x, 0x%08x ?= 0x%08x, 0x%08x ?= 0x%08x, 0x%08x ?= 0x%08x\n",
1186		   __le32_to_cpu(ev->abi.abi_ver0), WMI_TLV_ABI_VER0,
1187		   __le32_to_cpu(ev->abi.abi_ver_ns0), WMI_TLV_ABI_VER_NS0,
1188		   __le32_to_cpu(ev->abi.abi_ver_ns1), WMI_TLV_ABI_VER_NS1,
1189		   __le32_to_cpu(ev->abi.abi_ver_ns2), WMI_TLV_ABI_VER_NS2,
1190		   __le32_to_cpu(ev->abi.abi_ver_ns3), WMI_TLV_ABI_VER_NS3);
1191
1192	if (__le32_to_cpu(ev->abi.abi_ver0) != WMI_TLV_ABI_VER0 ||
1193	    __le32_to_cpu(ev->abi.abi_ver_ns0) != WMI_TLV_ABI_VER_NS0 ||
1194	    __le32_to_cpu(ev->abi.abi_ver_ns1) != WMI_TLV_ABI_VER_NS1 ||
1195	    __le32_to_cpu(ev->abi.abi_ver_ns2) != WMI_TLV_ABI_VER_NS2 ||
1196	    __le32_to_cpu(ev->abi.abi_ver_ns3) != WMI_TLV_ABI_VER_NS3) {
1197		return -ENOTSUPP;
1198	}
1199
1200	arg->min_tx_power = ev->hw_min_tx_power;
1201	arg->max_tx_power = ev->hw_max_tx_power;
1202	arg->ht_cap = ev->ht_cap_info;
1203	arg->vht_cap = ev->vht_cap_info;
1204	arg->sw_ver0 = ev->abi.abi_ver0;
1205	arg->sw_ver1 = ev->abi.abi_ver1;
1206	arg->fw_build = ev->fw_build_vers;
1207	arg->phy_capab = ev->phy_capability;
1208	arg->num_rf_chains = ev->num_rf_chains;
1209	arg->eeprom_rd = reg->eeprom_rd;
1210	arg->low_5ghz_chan = reg->low_5ghz_chan;
1211	arg->high_5ghz_chan = reg->high_5ghz_chan;
1212	arg->num_mem_reqs = ev->num_mem_reqs;
1213	arg->service_map = svc_bmap;
1214	arg->service_map_len = ath10k_wmi_tlv_len(svc_bmap);
1215
1216	ret = ath10k_wmi_tlv_iter(ar, mem_reqs, ath10k_wmi_tlv_len(mem_reqs),
1217				  ath10k_wmi_tlv_parse_mem_reqs, arg);
1218	if (ret) {
1219		ath10k_warn(ar, "failed to parse mem_reqs tlv: %d\n", ret);
1220		return ret;
1221	}
1222
1223	return 0;
1224}
1225
1226static int ath10k_wmi_tlv_op_pull_rdy_ev(struct ath10k *ar,
1227					 struct sk_buff *skb,
1228					 struct wmi_rdy_ev_arg *arg)
1229{
1230	const void **tb;
1231	const struct wmi_tlv_rdy_ev *ev;
1232	int ret;
1233
1234	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
1235	if (IS_ERR(tb)) {
1236		ret = PTR_ERR(tb);
1237		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1238		return ret;
1239	}
1240
1241	ev = tb[WMI_TLV_TAG_STRUCT_READY_EVENT];
1242	if (!ev) {
1243		kfree(tb);
1244		return -EPROTO;
1245	}
1246
1247	arg->sw_version = ev->abi.abi_ver0;
1248	arg->abi_version = ev->abi.abi_ver1;
1249	arg->status = ev->status;
1250	arg->mac_addr = ev->mac_addr.addr;
1251
1252	kfree(tb);
1253	return 0;
1254}
1255
1256static int ath10k_wmi_tlv_svc_avail_parse(struct ath10k *ar, u16 tag, u16 len,
1257					  const void *ptr, void *data)
1258{
1259	struct wmi_svc_avail_ev_arg *arg = data;
1260
1261	switch (tag) {
1262	case WMI_TLV_TAG_STRUCT_SERVICE_AVAILABLE_EVENT:
1263		arg->service_map_ext_len = *(__le32 *)ptr;
1264		arg->service_map_ext = ptr + sizeof(__le32);
1265		return 0;
1266	default:
1267		break;
1268	}
1269	return -EPROTO;
1270}
1271
1272static int ath10k_wmi_tlv_op_pull_svc_avail(struct ath10k *ar,
1273					    struct sk_buff *skb,
1274					    struct wmi_svc_avail_ev_arg *arg)
1275{
1276	int ret;
1277
1278	ret = ath10k_wmi_tlv_iter(ar, skb->data, skb->len,
1279				  ath10k_wmi_tlv_svc_avail_parse, arg);
1280
1281	if (ret) {
1282		ath10k_warn(ar, "failed to parse svc_avail tlv: %d\n", ret);
1283		return ret;
1284	}
1285
1286	return 0;
1287}
1288
1289static void ath10k_wmi_tlv_pull_vdev_stats(const struct wmi_tlv_vdev_stats *src,
1290					   struct ath10k_fw_stats_vdev *dst)
1291{
1292	int i;
1293
1294	dst->vdev_id = __le32_to_cpu(src->vdev_id);
1295	dst->beacon_snr = __le32_to_cpu(src->beacon_snr);
1296	dst->data_snr = __le32_to_cpu(src->data_snr);
1297	dst->num_rx_frames = __le32_to_cpu(src->num_rx_frames);
1298	dst->num_rts_fail = __le32_to_cpu(src->num_rts_fail);
1299	dst->num_rts_success = __le32_to_cpu(src->num_rts_success);
1300	dst->num_rx_err = __le32_to_cpu(src->num_rx_err);
1301	dst->num_rx_discard = __le32_to_cpu(src->num_rx_discard);
1302	dst->num_tx_not_acked = __le32_to_cpu(src->num_tx_not_acked);
1303
1304	for (i = 0; i < ARRAY_SIZE(src->num_tx_frames); i++)
1305		dst->num_tx_frames[i] =
1306			__le32_to_cpu(src->num_tx_frames[i]);
1307
1308	for (i = 0; i < ARRAY_SIZE(src->num_tx_frames_retries); i++)
1309		dst->num_tx_frames_retries[i] =
1310			__le32_to_cpu(src->num_tx_frames_retries[i]);
1311
1312	for (i = 0; i < ARRAY_SIZE(src->num_tx_frames_failures); i++)
1313		dst->num_tx_frames_failures[i] =
1314			__le32_to_cpu(src->num_tx_frames_failures[i]);
1315
1316	for (i = 0; i < ARRAY_SIZE(src->tx_rate_history); i++)
1317		dst->tx_rate_history[i] =
1318			__le32_to_cpu(src->tx_rate_history[i]);
1319
1320	for (i = 0; i < ARRAY_SIZE(src->beacon_rssi_history); i++)
1321		dst->beacon_rssi_history[i] =
1322			__le32_to_cpu(src->beacon_rssi_history[i]);
1323}
1324
1325static int ath10k_wmi_tlv_op_pull_fw_stats(struct ath10k *ar,
1326					   struct sk_buff *skb,
1327					   struct ath10k_fw_stats *stats)
1328{
1329	const void **tb;
1330	const struct wmi_tlv_stats_ev *ev;
1331	u32 num_peer_stats_extd;
1332	const void *data;
1333	u32 num_pdev_stats;
1334	u32 num_vdev_stats;
1335	u32 num_peer_stats;
1336	u32 num_bcnflt_stats;
1337	u32 num_chan_stats;
1338	size_t data_len;
1339	u32 stats_id;
1340	int ret;
1341	int i;
1342
1343	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
1344	if (IS_ERR(tb)) {
1345		ret = PTR_ERR(tb);
1346		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1347		return ret;
1348	}
1349
1350	ev = tb[WMI_TLV_TAG_STRUCT_STATS_EVENT];
1351	data = tb[WMI_TLV_TAG_ARRAY_BYTE];
1352
1353	if (!ev || !data) {
1354		kfree(tb);
1355		return -EPROTO;
1356	}
1357
1358	data_len = ath10k_wmi_tlv_len(data);
1359	num_pdev_stats = __le32_to_cpu(ev->num_pdev_stats);
1360	num_vdev_stats = __le32_to_cpu(ev->num_vdev_stats);
1361	num_peer_stats = __le32_to_cpu(ev->num_peer_stats);
1362	num_bcnflt_stats = __le32_to_cpu(ev->num_bcnflt_stats);
1363	num_chan_stats = __le32_to_cpu(ev->num_chan_stats);
1364	stats_id = __le32_to_cpu(ev->stats_id);
1365	num_peer_stats_extd = __le32_to_cpu(ev->num_peer_stats_extd);
1366
1367	ath10k_dbg(ar, ATH10K_DBG_WMI,
1368		   "wmi tlv stats update pdev %i vdev %i peer %i bcnflt %i chan %i peer_extd %i\n",
1369		   num_pdev_stats, num_vdev_stats, num_peer_stats,
1370		   num_bcnflt_stats, num_chan_stats, num_peer_stats_extd);
1371
1372	for (i = 0; i < num_pdev_stats; i++) {
1373		const struct wmi_pdev_stats *src;
1374		struct ath10k_fw_stats_pdev *dst;
1375
1376		src = data;
1377		if (data_len < sizeof(*src)) {
1378			kfree(tb);
1379			return -EPROTO;
1380		}
1381
1382		data += sizeof(*src);
1383		data_len -= sizeof(*src);
1384
1385		dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
1386		if (!dst)
1387			continue;
1388
1389		ath10k_wmi_pull_pdev_stats_base(&src->base, dst);
1390		ath10k_wmi_pull_pdev_stats_tx(&src->tx, dst);
1391		ath10k_wmi_pull_pdev_stats_rx(&src->rx, dst);
1392		list_add_tail(&dst->list, &stats->pdevs);
1393	}
1394
1395	for (i = 0; i < num_vdev_stats; i++) {
1396		const struct wmi_tlv_vdev_stats *src;
1397		struct ath10k_fw_stats_vdev *dst;
1398
1399		src = data;
1400		if (data_len < sizeof(*src)) {
1401			kfree(tb);
1402			return -EPROTO;
1403		}
1404
1405		data += sizeof(*src);
1406		data_len -= sizeof(*src);
1407
1408		dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
1409		if (!dst)
1410			continue;
1411
1412		ath10k_wmi_tlv_pull_vdev_stats(src, dst);
1413		list_add_tail(&dst->list, &stats->vdevs);
1414	}
1415
1416	for (i = 0; i < num_peer_stats; i++) {
1417		const struct wmi_10x_peer_stats *src;
1418		struct ath10k_fw_stats_peer *dst;
1419
1420		src = data;
1421		if (data_len < sizeof(*src)) {
1422			kfree(tb);
1423			return -EPROTO;
1424		}
1425
1426		data += sizeof(*src);
1427		data_len -= sizeof(*src);
1428
1429		dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
1430		if (!dst)
1431			continue;
1432
1433		ath10k_wmi_pull_peer_stats(&src->old, dst);
1434		dst->peer_rx_rate = __le32_to_cpu(src->peer_rx_rate);
1435
1436		if (stats_id & WMI_TLV_STAT_PEER_EXTD) {
1437			const struct wmi_tlv_peer_stats_extd *extd;
1438			unsigned long rx_duration_high;
1439
1440			extd = data + sizeof(*src) * (num_peer_stats - i - 1)
1441			       + sizeof(*extd) * i;
1442
1443			dst->rx_duration = __le32_to_cpu(extd->rx_duration);
1444			rx_duration_high = __le32_to_cpu
1445						(extd->rx_duration_high);
1446
1447			if (test_bit(WMI_TLV_PEER_RX_DURATION_HIGH_VALID_BIT,
1448				     &rx_duration_high)) {
1449				rx_duration_high =
1450					FIELD_GET(WMI_TLV_PEER_RX_DURATION_HIGH_MASK,
1451						  rx_duration_high);
1452				dst->rx_duration |= (u64)rx_duration_high <<
1453						    WMI_TLV_PEER_RX_DURATION_SHIFT;
1454			}
1455		}
1456
1457		list_add_tail(&dst->list, &stats->peers);
1458	}
1459
1460	kfree(tb);
1461	return 0;
1462}
1463
1464static int ath10k_wmi_tlv_op_pull_roam_ev(struct ath10k *ar,
1465					  struct sk_buff *skb,
1466					  struct wmi_roam_ev_arg *arg)
1467{
1468	const void **tb;
1469	const struct wmi_tlv_roam_ev *ev;
1470	int ret;
1471
1472	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
1473	if (IS_ERR(tb)) {
1474		ret = PTR_ERR(tb);
1475		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1476		return ret;
1477	}
1478
1479	ev = tb[WMI_TLV_TAG_STRUCT_ROAM_EVENT];
1480	if (!ev) {
1481		kfree(tb);
1482		return -EPROTO;
1483	}
1484
1485	arg->vdev_id = ev->vdev_id;
1486	arg->reason = ev->reason;
1487	arg->rssi = ev->rssi;
1488
1489	kfree(tb);
1490	return 0;
1491}
1492
1493static int
1494ath10k_wmi_tlv_op_pull_wow_ev(struct ath10k *ar, struct sk_buff *skb,
1495			      struct wmi_wow_ev_arg *arg)
1496{
1497	const void **tb;
1498	const struct wmi_tlv_wow_event_info *ev;
1499	int ret;
1500
1501	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
1502	if (IS_ERR(tb)) {
1503		ret = PTR_ERR(tb);
1504		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1505		return ret;
1506	}
1507
1508	ev = tb[WMI_TLV_TAG_STRUCT_WOW_EVENT_INFO];
1509	if (!ev) {
1510		kfree(tb);
1511		return -EPROTO;
1512	}
1513
1514	arg->vdev_id = __le32_to_cpu(ev->vdev_id);
1515	arg->flag = __le32_to_cpu(ev->flag);
1516	arg->wake_reason = __le32_to_cpu(ev->wake_reason);
1517	arg->data_len = __le32_to_cpu(ev->data_len);
1518
1519	kfree(tb);
1520	return 0;
1521}
1522
1523static int ath10k_wmi_tlv_op_pull_echo_ev(struct ath10k *ar,
1524					  struct sk_buff *skb,
1525					  struct wmi_echo_ev_arg *arg)
1526{
1527	const void **tb;
1528	const struct wmi_echo_event *ev;
1529	int ret;
1530
1531	tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
1532	if (IS_ERR(tb)) {
1533		ret = PTR_ERR(tb);
1534		ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1535		return ret;
1536	}
1537
1538	ev = tb[WMI_TLV_TAG_STRUCT_ECHO_EVENT];
1539	if (!ev) {
1540		kfree(tb);
1541		return -EPROTO;
1542	}
1543
1544	arg->value = ev->value;
1545
1546	kfree(tb);
1547	return 0;
1548}
1549
1550static struct sk_buff *
1551ath10k_wmi_tlv_op_gen_pdev_suspend(struct ath10k *ar, u32 opt)
1552{
1553	struct wmi_tlv_pdev_suspend *cmd;
1554	struct wmi_tlv *tlv;
1555	struct sk_buff *skb;
1556
1557	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1558	if (!skb)
1559		return ERR_PTR(-ENOMEM);
1560
1561	tlv = (void *)skb->data;
1562	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_SUSPEND_CMD);
1563	tlv->len = __cpu_to_le16(sizeof(*cmd));
1564	cmd = (void *)tlv->value;
1565	cmd->opt = __cpu_to_le32(opt);
1566
1567	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pdev suspend\n");
1568	return skb;
1569}
1570
1571static struct sk_buff *
1572ath10k_wmi_tlv_op_gen_pdev_resume(struct ath10k *ar)
1573{
1574	struct wmi_tlv_resume_cmd *cmd;
1575	struct wmi_tlv *tlv;
1576	struct sk_buff *skb;
1577
1578	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1579	if (!skb)
1580		return ERR_PTR(-ENOMEM);
1581
1582	tlv = (void *)skb->data;
1583	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_RESUME_CMD);
1584	tlv->len = __cpu_to_le16(sizeof(*cmd));
1585	cmd = (void *)tlv->value;
1586	cmd->reserved = __cpu_to_le32(0);
1587
1588	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pdev resume\n");
1589	return skb;
1590}
1591
1592static struct sk_buff *
1593ath10k_wmi_tlv_op_gen_pdev_set_rd(struct ath10k *ar,
1594				  u16 rd, u16 rd2g, u16 rd5g,
1595				  u16 ctl2g, u16 ctl5g,
1596				  enum wmi_dfs_region dfs_reg)
1597{
1598	struct wmi_tlv_pdev_set_rd_cmd *cmd;
1599	struct wmi_tlv *tlv;
1600	struct sk_buff *skb;
1601
1602	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1603	if (!skb)
1604		return ERR_PTR(-ENOMEM);
1605
1606	tlv = (void *)skb->data;
1607	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_SET_REGDOMAIN_CMD);
1608	tlv->len = __cpu_to_le16(sizeof(*cmd));
1609	cmd = (void *)tlv->value;
1610	cmd->regd = __cpu_to_le32(rd);
1611	cmd->regd_2ghz = __cpu_to_le32(rd2g);
1612	cmd->regd_5ghz = __cpu_to_le32(rd5g);
1613	cmd->conform_limit_2ghz = __cpu_to_le32(ctl2g);
1614	cmd->conform_limit_5ghz = __cpu_to_le32(ctl5g);
1615
1616	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pdev set rd\n");
1617	return skb;
1618}
1619
1620static enum wmi_txbf_conf ath10k_wmi_tlv_txbf_conf_scheme(struct ath10k *ar)
1621{
1622	return WMI_TXBF_CONF_AFTER_ASSOC;
1623}
1624
1625static struct sk_buff *
1626ath10k_wmi_tlv_op_gen_pdev_set_param(struct ath10k *ar, u32 param_id,
1627				     u32 param_value)
1628{
1629	struct wmi_tlv_pdev_set_param_cmd *cmd;
1630	struct wmi_tlv *tlv;
1631	struct sk_buff *skb;
1632
1633	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1634	if (!skb)
1635		return ERR_PTR(-ENOMEM);
1636
1637	tlv = (void *)skb->data;
1638	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_SET_PARAM_CMD);
1639	tlv->len = __cpu_to_le16(sizeof(*cmd));
1640	cmd = (void *)tlv->value;
1641	cmd->param_id = __cpu_to_le32(param_id);
1642	cmd->param_value = __cpu_to_le32(param_value);
1643
1644	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pdev set param %d value 0x%x\n",
1645		   param_id, param_value);
1646	return skb;
1647}
1648
1649static void
1650ath10k_wmi_tlv_put_host_mem_chunks(struct ath10k *ar, void *host_mem_chunks)
1651{
1652	struct host_memory_chunk *chunk;
1653	struct wmi_tlv *tlv;
1654	int i;
1655	__le16 tlv_len, tlv_tag;
1656
1657	tlv_tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WLAN_HOST_MEMORY_CHUNK);
1658	tlv_len = __cpu_to_le16(sizeof(*chunk));
1659	for (i = 0; i < ar->wmi.num_mem_chunks; i++) {
1660		tlv = host_mem_chunks;
1661		tlv->tag = tlv_tag;
1662		tlv->len = tlv_len;
1663		chunk = (void *)tlv->value;
1664
1665		chunk->ptr = __cpu_to_le32(ar->wmi.mem_chunks[i].paddr);
1666		chunk->size = __cpu_to_le32(ar->wmi.mem_chunks[i].len);
1667		chunk->req_id = __cpu_to_le32(ar->wmi.mem_chunks[i].req_id);
1668
1669		ath10k_dbg(ar, ATH10K_DBG_WMI,
1670			   "wmi-tlv chunk %d len %d, addr 0x%llx, id 0x%x\n",
1671			   i,
1672			   ar->wmi.mem_chunks[i].len,
1673			   (unsigned long long)ar->wmi.mem_chunks[i].paddr,
1674			   ar->wmi.mem_chunks[i].req_id);
1675
1676		host_mem_chunks += sizeof(*tlv);
1677		host_mem_chunks += sizeof(*chunk);
1678	}
1679}
1680
1681static struct sk_buff *ath10k_wmi_tlv_op_gen_init(struct ath10k *ar)
1682{
1683	struct sk_buff *skb;
1684	struct wmi_tlv *tlv;
1685	struct wmi_tlv_init_cmd *cmd;
1686	struct wmi_tlv_resource_config *cfg;
1687	void *chunks;
1688	size_t len, chunks_len;
1689	void *ptr;
1690
1691	chunks_len = ar->wmi.num_mem_chunks *
1692		     (sizeof(struct host_memory_chunk) + sizeof(*tlv));
1693	len = (sizeof(*tlv) + sizeof(*cmd)) +
1694	      (sizeof(*tlv) + sizeof(*cfg)) +
1695	      (sizeof(*tlv) + chunks_len);
1696
1697	skb = ath10k_wmi_alloc_skb(ar, len);
1698	if (!skb)
1699		return ERR_PTR(-ENOMEM);
1700
1701	ptr = skb->data;
1702
1703	tlv = ptr;
1704	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_INIT_CMD);
1705	tlv->len = __cpu_to_le16(sizeof(*cmd));
1706	cmd = (void *)tlv->value;
1707	ptr += sizeof(*tlv);
1708	ptr += sizeof(*cmd);
1709
1710	tlv = ptr;
1711	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_RESOURCE_CONFIG);
1712	tlv->len = __cpu_to_le16(sizeof(*cfg));
1713	cfg = (void *)tlv->value;
1714	ptr += sizeof(*tlv);
1715	ptr += sizeof(*cfg);
1716
1717	tlv = ptr;
1718	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
1719	tlv->len = __cpu_to_le16(chunks_len);
1720	chunks = (void *)tlv->value;
1721
1722	ptr += sizeof(*tlv);
1723	ptr += chunks_len;
1724
1725	cmd->abi.abi_ver0 = __cpu_to_le32(WMI_TLV_ABI_VER0);
1726	cmd->abi.abi_ver1 = __cpu_to_le32(WMI_TLV_ABI_VER1);
1727	cmd->abi.abi_ver_ns0 = __cpu_to_le32(WMI_TLV_ABI_VER_NS0);
1728	cmd->abi.abi_ver_ns1 = __cpu_to_le32(WMI_TLV_ABI_VER_NS1);
1729	cmd->abi.abi_ver_ns2 = __cpu_to_le32(WMI_TLV_ABI_VER_NS2);
1730	cmd->abi.abi_ver_ns3 = __cpu_to_le32(WMI_TLV_ABI_VER_NS3);
1731	cmd->num_host_mem_chunks = __cpu_to_le32(ar->wmi.num_mem_chunks);
1732
1733	cfg->num_vdevs = __cpu_to_le32(TARGET_TLV_NUM_VDEVS);
1734
1735	if (ar->hw_params.num_peers)
1736		cfg->num_peers = __cpu_to_le32(ar->hw_params.num_peers);
1737	else
1738		cfg->num_peers = __cpu_to_le32(TARGET_TLV_NUM_PEERS);
1739	cfg->ast_skid_limit = __cpu_to_le32(ar->hw_params.ast_skid_limit);
1740	cfg->num_wds_entries = __cpu_to_le32(ar->hw_params.num_wds_entries);
1741
1742	if (test_bit(WMI_SERVICE_RX_FULL_REORDER, ar->wmi.svc_map)) {
1743		cfg->num_offload_peers = __cpu_to_le32(TARGET_TLV_NUM_VDEVS);
1744		cfg->num_offload_reorder_bufs = __cpu_to_le32(TARGET_TLV_NUM_VDEVS);
1745	} else {
1746		cfg->num_offload_peers = __cpu_to_le32(0);
1747		cfg->num_offload_reorder_bufs = __cpu_to_le32(0);
1748	}
1749
1750	cfg->num_peer_keys = __cpu_to_le32(2);
1751	if (ar->hw_params.num_peers)
1752		cfg->num_tids = __cpu_to_le32(ar->hw_params.num_peers * 2);
1753	else
1754		cfg->num_tids = __cpu_to_le32(TARGET_TLV_NUM_TIDS);
1755	cfg->tx_chain_mask = __cpu_to_le32(0x7);
1756	cfg->rx_chain_mask = __cpu_to_le32(0x7);
1757	cfg->rx_timeout_pri[0] = __cpu_to_le32(0x64);
1758	cfg->rx_timeout_pri[1] = __cpu_to_le32(0x64);
1759	cfg->rx_timeout_pri[2] = __cpu_to_le32(0x64);
1760	cfg->rx_timeout_pri[3] = __cpu_to_le32(0x28);
1761	cfg->rx_decap_mode = __cpu_to_le32(ar->wmi.rx_decap_mode);
1762	cfg->scan_max_pending_reqs = __cpu_to_le32(4);
1763	cfg->bmiss_offload_max_vdev = __cpu_to_le32(TARGET_TLV_NUM_VDEVS);
1764	cfg->roam_offload_max_vdev = __cpu_to_le32(TARGET_TLV_NUM_VDEVS);
1765	cfg->roam_offload_max_ap_profiles = __cpu_to_le32(8);
1766	cfg->num_mcast_groups = __cpu_to_le32(0);
1767	cfg->num_mcast_table_elems = __cpu_to_le32(0);
1768	cfg->mcast2ucast_mode = __cpu_to_le32(0);
1769	cfg->tx_dbg_log_size = __cpu_to_le32(0x400);
1770	cfg->dma_burst_size = __cpu_to_le32(0);
1771	cfg->mac_aggr_delim = __cpu_to_le32(0);
1772	cfg->rx_skip_defrag_timeout_dup_detection_check = __cpu_to_le32(0);
1773	cfg->vow_config = __cpu_to_le32(0);
1774	cfg->gtk_offload_max_vdev = __cpu_to_le32(2);
1775	cfg->num_msdu_desc = __cpu_to_le32(ar->htt.max_num_pending_tx);
1776	cfg->max_frag_entries = __cpu_to_le32(2);
1777	cfg->num_tdls_vdevs = __cpu_to_le32(TARGET_TLV_NUM_TDLS_VDEVS);
1778	cfg->num_tdls_conn_table_entries = __cpu_to_le32(0x20);
1779	cfg->beacon_tx_offload_max_vdev = __cpu_to_le32(2);
1780	cfg->num_multicast_filter_entries = __cpu_to_le32(5);
1781	cfg->num_wow_filters = __cpu_to_le32(ar->wow.max_num_patterns);
1782	cfg->num_keep_alive_pattern = __cpu_to_le32(6);
1783	cfg->keep_alive_pattern_size = __cpu_to_le32(0);
1784	cfg->max_tdls_concurrent_sleep_sta = __cpu_to_le32(1);
1785	cfg->max_tdls_concurrent_buffer_sta = __cpu_to_le32(1);
1786	cfg->wmi_send_separate = __cpu_to_le32(0);
1787	cfg->num_ocb_vdevs = __cpu_to_le32(0);
1788	cfg->num_ocb_channels = __cpu_to_le32(0);
1789	cfg->num_ocb_schedules = __cpu_to_le32(0);
1790	cfg->host_capab = __cpu_to_le32(WMI_TLV_FLAG_MGMT_BUNDLE_TX_COMPL);
1791
1792	if (test_bit(WMI_SERVICE_TX_DATA_ACK_RSSI, ar->wmi.svc_map))
1793		cfg->host_capab |= __cpu_to_le32(WMI_RSRC_CFG_FLAG_TX_ACK_RSSI);
1794
1795	ath10k_wmi_tlv_put_host_mem_chunks(ar, chunks);
1796
1797	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv init\n");
1798	return skb;
1799}
1800
1801static struct sk_buff *
1802ath10k_wmi_tlv_op_gen_start_scan(struct ath10k *ar,
1803				 const struct wmi_start_scan_arg *arg)
1804{
1805	struct wmi_tlv_start_scan_cmd *cmd;
1806	struct wmi_tlv *tlv;
1807	struct sk_buff *skb;
1808	size_t len, chan_len, ssid_len, bssid_len, ie_len;
1809	__le32 *chans;
1810	struct wmi_ssid *ssids;
1811	struct wmi_mac_addr *addrs;
1812	void *ptr;
1813	int i, ret;
1814
1815	ret = ath10k_wmi_start_scan_verify(arg);
1816	if (ret)
1817		return ERR_PTR(ret);
1818
1819	chan_len = arg->n_channels * sizeof(__le32);
1820	ssid_len = arg->n_ssids * sizeof(struct wmi_ssid);
1821	bssid_len = arg->n_bssids * sizeof(struct wmi_mac_addr);
1822	ie_len = roundup(arg->ie_len, 4);
1823	len = (sizeof(*tlv) + sizeof(*cmd)) +
1824	      sizeof(*tlv) + chan_len +
1825	      sizeof(*tlv) + ssid_len +
1826	      sizeof(*tlv) + bssid_len +
1827	      sizeof(*tlv) + ie_len;
1828
1829	skb = ath10k_wmi_alloc_skb(ar, len);
1830	if (!skb)
1831		return ERR_PTR(-ENOMEM);
1832
1833	ptr = (void *)skb->data;
1834	tlv = ptr;
1835	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_START_SCAN_CMD);
1836	tlv->len = __cpu_to_le16(sizeof(*cmd));
1837	cmd = (void *)tlv->value;
1838
1839	ath10k_wmi_put_start_scan_common(&cmd->common, arg);
1840	cmd->burst_duration_ms = __cpu_to_le32(arg->burst_duration_ms);
1841	cmd->num_channels = __cpu_to_le32(arg->n_channels);
1842	cmd->num_ssids = __cpu_to_le32(arg->n_ssids);
1843	cmd->num_bssids = __cpu_to_le32(arg->n_bssids);
1844	cmd->ie_len = __cpu_to_le32(arg->ie_len);
1845	cmd->num_probes = __cpu_to_le32(3);
1846	ether_addr_copy(cmd->mac_addr.addr, arg->mac_addr.addr);
1847	ether_addr_copy(cmd->mac_mask.addr, arg->mac_mask.addr);
1848
1849	/* FIXME: There are some scan flag inconsistencies across firmwares,
1850	 * e.g. WMI-TLV inverts the logic behind the following flag.
1851	 */
1852	cmd->common.scan_ctrl_flags ^= __cpu_to_le32(WMI_SCAN_FILTER_PROBE_REQ);
1853
1854	ptr += sizeof(*tlv);
1855	ptr += sizeof(*cmd);
1856
1857	tlv = ptr;
1858	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_UINT32);
1859	tlv->len = __cpu_to_le16(chan_len);
1860	chans = (void *)tlv->value;
1861	for (i = 0; i < arg->n_channels; i++)
1862		chans[i] = __cpu_to_le32(arg->channels[i]);
1863
1864	ptr += sizeof(*tlv);
1865	ptr += chan_len;
1866
1867	tlv = ptr;
1868	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_FIXED_STRUCT);
1869	tlv->len = __cpu_to_le16(ssid_len);
1870	ssids = (void *)tlv->value;
1871	for (i = 0; i < arg->n_ssids; i++) {
1872		ssids[i].ssid_len = __cpu_to_le32(arg->ssids[i].len);
1873		memcpy(ssids[i].ssid, arg->ssids[i].ssid, arg->ssids[i].len);
1874	}
1875
1876	ptr += sizeof(*tlv);
1877	ptr += ssid_len;
1878
1879	tlv = ptr;
1880	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_FIXED_STRUCT);
1881	tlv->len = __cpu_to_le16(bssid_len);
1882	addrs = (void *)tlv->value;
1883	for (i = 0; i < arg->n_bssids; i++)
1884		ether_addr_copy(addrs[i].addr, arg->bssids[i].bssid);
1885
1886	ptr += sizeof(*tlv);
1887	ptr += bssid_len;
1888
1889	tlv = ptr;
1890	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
1891	tlv->len = __cpu_to_le16(ie_len);
1892	memcpy(tlv->value, arg->ie, arg->ie_len);
1893
1894	ptr += sizeof(*tlv);
1895	ptr += ie_len;
1896
1897	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv start scan\n");
1898	return skb;
1899}
1900
1901static struct sk_buff *
1902ath10k_wmi_tlv_op_gen_stop_scan(struct ath10k *ar,
1903				const struct wmi_stop_scan_arg *arg)
1904{
1905	struct wmi_stop_scan_cmd *cmd;
1906	struct wmi_tlv *tlv;
1907	struct sk_buff *skb;
1908	u32 scan_id;
1909	u32 req_id;
1910
1911	if (arg->req_id > 0xFFF)
1912		return ERR_PTR(-EINVAL);
1913	if (arg->req_type == WMI_SCAN_STOP_ONE && arg->u.scan_id > 0xFFF)
1914		return ERR_PTR(-EINVAL);
1915
1916	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1917	if (!skb)
1918		return ERR_PTR(-ENOMEM);
1919
1920	scan_id = arg->u.scan_id;
1921	scan_id |= WMI_HOST_SCAN_REQ_ID_PREFIX;
1922
1923	req_id = arg->req_id;
1924	req_id |= WMI_HOST_SCAN_REQUESTOR_ID_PREFIX;
1925
1926	tlv = (void *)skb->data;
1927	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STOP_SCAN_CMD);
1928	tlv->len = __cpu_to_le16(sizeof(*cmd));
1929	cmd = (void *)tlv->value;
1930	cmd->req_type = __cpu_to_le32(arg->req_type);
1931	cmd->vdev_id = __cpu_to_le32(arg->u.vdev_id);
1932	cmd->scan_id = __cpu_to_le32(scan_id);
1933	cmd->scan_req_id = __cpu_to_le32(req_id);
1934
1935	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv stop scan\n");
1936	return skb;
1937}
1938
1939static int ath10k_wmi_tlv_op_get_vdev_subtype(struct ath10k *ar,
1940					      enum wmi_vdev_subtype subtype)
1941{
1942	switch (subtype) {
1943	case WMI_VDEV_SUBTYPE_NONE:
1944		return WMI_TLV_VDEV_SUBTYPE_NONE;
1945	case WMI_VDEV_SUBTYPE_P2P_DEVICE:
1946		return WMI_TLV_VDEV_SUBTYPE_P2P_DEV;
1947	case WMI_VDEV_SUBTYPE_P2P_CLIENT:
1948		return WMI_TLV_VDEV_SUBTYPE_P2P_CLI;
1949	case WMI_VDEV_SUBTYPE_P2P_GO:
1950		return WMI_TLV_VDEV_SUBTYPE_P2P_GO;
1951	case WMI_VDEV_SUBTYPE_PROXY_STA:
1952		return WMI_TLV_VDEV_SUBTYPE_PROXY_STA;
1953	case WMI_VDEV_SUBTYPE_MESH_11S:
1954		return WMI_TLV_VDEV_SUBTYPE_MESH_11S;
1955	case WMI_VDEV_SUBTYPE_MESH_NON_11S:
1956		return -ENOTSUPP;
1957	}
1958	return -ENOTSUPP;
1959}
1960
1961static struct sk_buff *
1962ath10k_wmi_tlv_op_gen_vdev_create(struct ath10k *ar,
1963				  u32 vdev_id,
1964				  enum wmi_vdev_type vdev_type,
1965				  enum wmi_vdev_subtype vdev_subtype,
1966				  const u8 mac_addr[ETH_ALEN])
1967{
1968	struct wmi_vdev_create_cmd *cmd;
1969	struct wmi_tlv *tlv;
1970	struct sk_buff *skb;
1971
1972	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1973	if (!skb)
1974		return ERR_PTR(-ENOMEM);
1975
1976	tlv = (void *)skb->data;
1977	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_CREATE_CMD);
1978	tlv->len = __cpu_to_le16(sizeof(*cmd));
1979	cmd = (void *)tlv->value;
1980	cmd->vdev_id = __cpu_to_le32(vdev_id);
1981	cmd->vdev_type = __cpu_to_le32(vdev_type);
1982	cmd->vdev_subtype = __cpu_to_le32(vdev_subtype);
1983	ether_addr_copy(cmd->vdev_macaddr.addr, mac_addr);
1984
1985	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev create\n");
1986	return skb;
1987}
1988
1989static struct sk_buff *
1990ath10k_wmi_tlv_op_gen_vdev_delete(struct ath10k *ar, u32 vdev_id)
1991{
1992	struct wmi_vdev_delete_cmd *cmd;
1993	struct wmi_tlv *tlv;
1994	struct sk_buff *skb;
1995
1996	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1997	if (!skb)
1998		return ERR_PTR(-ENOMEM);
1999
2000	tlv = (void *)skb->data;
2001	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_DELETE_CMD);
2002	tlv->len = __cpu_to_le16(sizeof(*cmd));
2003	cmd = (void *)tlv->value;
2004	cmd->vdev_id = __cpu_to_le32(vdev_id);
2005
2006	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev delete\n");
2007	return skb;
2008}
2009
2010static struct sk_buff *
2011ath10k_wmi_tlv_op_gen_vdev_start(struct ath10k *ar,
2012				 const struct wmi_vdev_start_request_arg *arg,
2013				 bool restart)
2014{
2015	struct wmi_tlv_vdev_start_cmd *cmd;
2016	struct wmi_channel *ch;
2017	struct wmi_tlv *tlv;
2018	struct sk_buff *skb;
2019	size_t len;
2020	void *ptr;
2021	u32 flags = 0;
2022
2023	if (WARN_ON(arg->hidden_ssid && !arg->ssid))
2024		return ERR_PTR(-EINVAL);
2025	if (WARN_ON(arg->ssid_len > sizeof(cmd->ssid.ssid)))
2026		return ERR_PTR(-EINVAL);
2027
2028	len = (sizeof(*tlv) + sizeof(*cmd)) +
2029	      (sizeof(*tlv) + sizeof(*ch)) +
2030	      (sizeof(*tlv) + 0);
2031	skb = ath10k_wmi_alloc_skb(ar, len);
2032	if (!skb)
2033		return ERR_PTR(-ENOMEM);
2034
2035	if (arg->hidden_ssid)
2036		flags |= WMI_VDEV_START_HIDDEN_SSID;
2037	if (arg->pmf_enabled)
2038		flags |= WMI_VDEV_START_PMF_ENABLED;
2039
2040	ptr = (void *)skb->data;
2041
2042	tlv = ptr;
2043	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_START_REQUEST_CMD);
2044	tlv->len = __cpu_to_le16(sizeof(*cmd));
2045	cmd = (void *)tlv->value;
2046	cmd->vdev_id = __cpu_to_le32(arg->vdev_id);
2047	cmd->bcn_intval = __cpu_to_le32(arg->bcn_intval);
2048	cmd->dtim_period = __cpu_to_le32(arg->dtim_period);
2049	cmd->flags = __cpu_to_le32(flags);
2050	cmd->bcn_tx_rate = __cpu_to_le32(arg->bcn_tx_rate);
2051	cmd->bcn_tx_power = __cpu_to_le32(arg->bcn_tx_power);
2052	cmd->disable_hw_ack = __cpu_to_le32(arg->disable_hw_ack);
2053
2054	if (arg->ssid) {
2055		cmd->ssid.ssid_len = __cpu_to_le32(arg->ssid_len);
2056		memcpy(cmd->ssid.ssid, arg->ssid, arg->ssid_len);
2057	}
2058
2059	ptr += sizeof(*tlv);
2060	ptr += sizeof(*cmd);
2061
2062	tlv = ptr;
2063	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_CHANNEL);
2064	tlv->len = __cpu_to_le16(sizeof(*ch));
2065	ch = (void *)tlv->value;
2066	ath10k_wmi_put_wmi_channel(ch, &arg->channel);
2067
2068	ptr += sizeof(*tlv);
2069	ptr += sizeof(*ch);
2070
2071	tlv = ptr;
2072	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
2073	tlv->len = 0;
2074
2075	/* Note: This is a nested TLV containing:
2076	 * [wmi_tlv][wmi_p2p_noa_descriptor][wmi_tlv]..
2077	 */
2078
2079	ptr += sizeof(*tlv);
2080	ptr += 0;
2081
2082	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev start\n");
2083	return skb;
2084}
2085
2086static struct sk_buff *
2087ath10k_wmi_tlv_op_gen_vdev_stop(struct ath10k *ar, u32 vdev_id)
2088{
2089	struct wmi_vdev_stop_cmd *cmd;
2090	struct wmi_tlv *tlv;
2091	struct sk_buff *skb;
2092
2093	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2094	if (!skb)
2095		return ERR_PTR(-ENOMEM);
2096
2097	tlv = (void *)skb->data;
2098	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_STOP_CMD);
2099	tlv->len = __cpu_to_le16(sizeof(*cmd));
2100	cmd = (void *)tlv->value;
2101	cmd->vdev_id = __cpu_to_le32(vdev_id);
2102
2103	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev stop\n");
2104	return skb;
2105}
2106
2107static struct sk_buff *
2108ath10k_wmi_tlv_op_gen_vdev_up(struct ath10k *ar, u32 vdev_id, u32 aid,
2109			      const u8 *bssid)
2110
2111{
2112	struct wmi_vdev_up_cmd *cmd;
2113	struct wmi_tlv *tlv;
2114	struct sk_buff *skb;
2115
2116	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2117	if (!skb)
2118		return ERR_PTR(-ENOMEM);
2119
2120	tlv = (void *)skb->data;
2121	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_UP_CMD);
2122	tlv->len = __cpu_to_le16(sizeof(*cmd));
2123	cmd = (void *)tlv->value;
2124	cmd->vdev_id = __cpu_to_le32(vdev_id);
2125	cmd->vdev_assoc_id = __cpu_to_le32(aid);
2126	ether_addr_copy(cmd->vdev_bssid.addr, bssid);
2127
2128	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev up\n");
2129	return skb;
2130}
2131
2132static struct sk_buff *
2133ath10k_wmi_tlv_op_gen_vdev_down(struct ath10k *ar, u32 vdev_id)
2134{
2135	struct wmi_vdev_down_cmd *cmd;
2136	struct wmi_tlv *tlv;
2137	struct sk_buff *skb;
2138
2139	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2140	if (!skb)
2141		return ERR_PTR(-ENOMEM);
2142
2143	tlv = (void *)skb->data;
2144	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_DOWN_CMD);
2145	tlv->len = __cpu_to_le16(sizeof(*cmd));
2146	cmd = (void *)tlv->value;
2147	cmd->vdev_id = __cpu_to_le32(vdev_id);
2148
2149	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev down\n");
2150	return skb;
2151}
2152
2153static struct sk_buff *
2154ath10k_wmi_tlv_op_gen_vdev_set_param(struct ath10k *ar, u32 vdev_id,
2155				     u32 param_id, u32 param_value)
2156{
2157	struct wmi_vdev_set_param_cmd *cmd;
2158	struct wmi_tlv *tlv;
2159	struct sk_buff *skb;
2160
2161	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2162	if (!skb)
2163		return ERR_PTR(-ENOMEM);
2164
2165	tlv = (void *)skb->data;
2166	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_SET_PARAM_CMD);
2167	tlv->len = __cpu_to_le16(sizeof(*cmd));
2168	cmd = (void *)tlv->value;
2169	cmd->vdev_id = __cpu_to_le32(vdev_id);
2170	cmd->param_id = __cpu_to_le32(param_id);
2171	cmd->param_value = __cpu_to_le32(param_value);
2172
2173	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev %d set param %d value 0x%x\n",
2174		   vdev_id, param_id, param_value);
2175	return skb;
2176}
2177
2178static struct sk_buff *
2179ath10k_wmi_tlv_op_gen_vdev_install_key(struct ath10k *ar,
2180				       const struct wmi_vdev_install_key_arg *arg)
2181{
2182	struct wmi_vdev_install_key_cmd *cmd;
2183	struct wmi_tlv *tlv;
2184	struct sk_buff *skb;
2185	size_t len;
2186	void *ptr;
2187
2188	if (arg->key_cipher == ar->wmi_key_cipher[WMI_CIPHER_NONE] &&
2189	    arg->key_data)
2190		return ERR_PTR(-EINVAL);
2191	if (arg->key_cipher != ar->wmi_key_cipher[WMI_CIPHER_NONE] &&
2192	    !arg->key_data)
2193		return ERR_PTR(-EINVAL);
2194
2195	len = sizeof(*tlv) + sizeof(*cmd) +
2196	      sizeof(*tlv) + roundup(arg->key_len, sizeof(__le32));
2197	skb = ath10k_wmi_alloc_skb(ar, len);
2198	if (!skb)
2199		return ERR_PTR(-ENOMEM);
2200
2201	ptr = (void *)skb->data;
2202	tlv = ptr;
2203	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_INSTALL_KEY_CMD);
2204	tlv->len = __cpu_to_le16(sizeof(*cmd));
2205	cmd = (void *)tlv->value;
2206	cmd->vdev_id = __cpu_to_le32(arg->vdev_id);
2207	cmd->key_idx = __cpu_to_le32(arg->key_idx);
2208	cmd->key_flags = __cpu_to_le32(arg->key_flags);
2209	cmd->key_cipher = __cpu_to_le32(arg->key_cipher);
2210	cmd->key_len = __cpu_to_le32(arg->key_len);
2211	cmd->key_txmic_len = __cpu_to_le32(arg->key_txmic_len);
2212	cmd->key_rxmic_len = __cpu_to_le32(arg->key_rxmic_len);
2213
2214	if (arg->macaddr)
2215		ether_addr_copy(cmd->peer_macaddr.addr, arg->macaddr);
2216
2217	ptr += sizeof(*tlv);
2218	ptr += sizeof(*cmd);
2219
2220	tlv = ptr;
2221	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
2222	tlv->len = __cpu_to_le16(roundup(arg->key_len, sizeof(__le32)));
2223	if (arg->key_data)
2224		memcpy(tlv->value, arg->key_data, arg->key_len);
2225
2226	ptr += sizeof(*tlv);
2227	ptr += roundup(arg->key_len, sizeof(__le32));
2228
2229	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev install key\n");
2230	return skb;
2231}
2232
2233static void *ath10k_wmi_tlv_put_uapsd_ac(struct ath10k *ar, void *ptr,
2234					 const struct wmi_sta_uapsd_auto_trig_arg *arg)
2235{
2236	struct wmi_sta_uapsd_auto_trig_param *ac;
2237	struct wmi_tlv *tlv;
2238
2239	tlv = ptr;
2240	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STA_UAPSD_AUTO_TRIG_PARAM);
2241	tlv->len = __cpu_to_le16(sizeof(*ac));
2242	ac = (void *)tlv->value;
2243
2244	ac->wmm_ac = __cpu_to_le32(arg->wmm_ac);
2245	ac->user_priority = __cpu_to_le32(arg->user_priority);
2246	ac->service_interval = __cpu_to_le32(arg->service_interval);
2247	ac->suspend_interval = __cpu_to_le32(arg->suspend_interval);
2248	ac->delay_interval = __cpu_to_le32(arg->delay_interval);
2249
2250	ath10k_dbg(ar, ATH10K_DBG_WMI,
2251		   "wmi tlv vdev sta uapsd auto trigger ac %d prio %d svc int %d susp int %d delay int %d\n",
2252		   ac->wmm_ac, ac->user_priority, ac->service_interval,
2253		   ac->suspend_interval, ac->delay_interval);
2254
2255	return ptr + sizeof(*tlv) + sizeof(*ac);
2256}
2257
2258static struct sk_buff *
2259ath10k_wmi_tlv_op_gen_vdev_sta_uapsd(struct ath10k *ar, u32 vdev_id,
2260				     const u8 peer_addr[ETH_ALEN],
2261				     const struct wmi_sta_uapsd_auto_trig_arg *args,
2262				     u32 num_ac)
2263{
2264	struct wmi_sta_uapsd_auto_trig_cmd_fixed_param *cmd;
2265	struct wmi_sta_uapsd_auto_trig_param *ac;
2266	struct wmi_tlv *tlv;
2267	struct sk_buff *skb;
2268	size_t len;
2269	size_t ac_tlv_len;
2270	void *ptr;
2271	int i;
2272
2273	ac_tlv_len = num_ac * (sizeof(*tlv) + sizeof(*ac));
2274	len = sizeof(*tlv) + sizeof(*cmd) +
2275	      sizeof(*tlv) + ac_tlv_len;
2276	skb = ath10k_wmi_alloc_skb(ar, len);
2277	if (!skb)
2278		return ERR_PTR(-ENOMEM);
2279
2280	ptr = (void *)skb->data;
2281	tlv = ptr;
2282	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STA_UAPSD_AUTO_TRIG_CMD);
2283	tlv->len = __cpu_to_le16(sizeof(*cmd));
2284	cmd = (void *)tlv->value;
2285	cmd->vdev_id = __cpu_to_le32(vdev_id);
2286	cmd->num_ac = __cpu_to_le32(num_ac);
2287	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
2288
2289	ptr += sizeof(*tlv);
2290	ptr += sizeof(*cmd);
2291
2292	tlv = ptr;
2293	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
2294	tlv->len = __cpu_to_le16(ac_tlv_len);
2295	ac = (void *)tlv->value;
2296
2297	ptr += sizeof(*tlv);
2298	for (i = 0; i < num_ac; i++)
2299		ptr = ath10k_wmi_tlv_put_uapsd_ac(ar, ptr, &args[i]);
2300
2301	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev sta uapsd auto trigger\n");
2302	return skb;
2303}
2304
2305static void *ath10k_wmi_tlv_put_wmm(void *ptr,
2306				    const struct wmi_wmm_params_arg *arg)
2307{
2308	struct wmi_wmm_params *wmm;
2309	struct wmi_tlv *tlv;
2310
2311	tlv = ptr;
2312	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WMM_PARAMS);
2313	tlv->len = __cpu_to_le16(sizeof(*wmm));
2314	wmm = (void *)tlv->value;
2315	ath10k_wmi_set_wmm_param(wmm, arg);
2316
2317	return ptr + sizeof(*tlv) + sizeof(*wmm);
2318}
2319
2320static struct sk_buff *
2321ath10k_wmi_tlv_op_gen_vdev_wmm_conf(struct ath10k *ar, u32 vdev_id,
2322				    const struct wmi_wmm_params_all_arg *arg)
2323{
2324	struct wmi_tlv_vdev_set_wmm_cmd *cmd;
2325	struct wmi_tlv *tlv;
2326	struct sk_buff *skb;
2327	size_t len;
2328	void *ptr;
2329
2330	len = sizeof(*tlv) + sizeof(*cmd);
2331	skb = ath10k_wmi_alloc_skb(ar, len);
2332	if (!skb)
2333		return ERR_PTR(-ENOMEM);
2334
2335	ptr = (void *)skb->data;
2336	tlv = ptr;
2337	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_SET_WMM_PARAMS_CMD);
2338	tlv->len = __cpu_to_le16(sizeof(*cmd));
2339	cmd = (void *)tlv->value;
2340	cmd->vdev_id = __cpu_to_le32(vdev_id);
2341
2342	ath10k_wmi_set_wmm_param(&cmd->vdev_wmm_params[0].params, &arg->ac_be);
2343	ath10k_wmi_set_wmm_param(&cmd->vdev_wmm_params[1].params, &arg->ac_bk);
2344	ath10k_wmi_set_wmm_param(&cmd->vdev_wmm_params[2].params, &arg->ac_vi);
2345	ath10k_wmi_set_wmm_param(&cmd->vdev_wmm_params[3].params, &arg->ac_vo);
2346
2347	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev wmm conf\n");
2348	return skb;
2349}
2350
2351static struct sk_buff *
2352ath10k_wmi_tlv_op_gen_sta_keepalive(struct ath10k *ar,
2353				    const struct wmi_sta_keepalive_arg *arg)
2354{
2355	struct wmi_tlv_sta_keepalive_cmd *cmd;
2356	struct wmi_sta_keepalive_arp_resp *arp;
2357	struct sk_buff *skb;
2358	struct wmi_tlv *tlv;
2359	void *ptr;
2360	size_t len;
2361
2362	len = sizeof(*tlv) + sizeof(*cmd) +
2363	      sizeof(*tlv) + sizeof(*arp);
2364	skb = ath10k_wmi_alloc_skb(ar, len);
2365	if (!skb)
2366		return ERR_PTR(-ENOMEM);
2367
2368	ptr = (void *)skb->data;
2369	tlv = ptr;
2370	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STA_KEEPALIVE_CMD);
2371	tlv->len = __cpu_to_le16(sizeof(*cmd));
2372	cmd = (void *)tlv->value;
2373	cmd->vdev_id = __cpu_to_le32(arg->vdev_id);
2374	cmd->enabled = __cpu_to_le32(arg->enabled);
2375	cmd->method = __cpu_to_le32(arg->method);
2376	cmd->interval = __cpu_to_le32(arg->interval);
2377
2378	ptr += sizeof(*tlv);
2379	ptr += sizeof(*cmd);
2380
2381	tlv = ptr;
2382	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STA_KEEPALVE_ARP_RESPONSE);
2383	tlv->len = __cpu_to_le16(sizeof(*arp));
2384	arp = (void *)tlv->value;
2385
2386	arp->src_ip4_addr = arg->src_ip4_addr;
2387	arp->dest_ip4_addr = arg->dest_ip4_addr;
2388	ether_addr_copy(arp->dest_mac_addr.addr, arg->dest_mac_addr);
2389
2390	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv sta keepalive vdev %d enabled %d method %d interval %d\n",
2391		   arg->vdev_id, arg->enabled, arg->method, arg->interval);
2392	return skb;
2393}
2394
2395static struct sk_buff *
2396ath10k_wmi_tlv_op_gen_peer_create(struct ath10k *ar, u32 vdev_id,
2397				  const u8 peer_addr[ETH_ALEN],
2398				  enum wmi_peer_type peer_type)
2399{
2400	struct wmi_tlv_peer_create_cmd *cmd;
2401	struct wmi_tlv *tlv;
2402	struct sk_buff *skb;
2403
2404	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2405	if (!skb)
2406		return ERR_PTR(-ENOMEM);
2407
2408	tlv = (void *)skb->data;
2409	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PEER_CREATE_CMD);
2410	tlv->len = __cpu_to_le16(sizeof(*cmd));
2411	cmd = (void *)tlv->value;
2412	cmd->vdev_id = __cpu_to_le32(vdev_id);
2413	cmd->peer_type = __cpu_to_le32(peer_type);
2414	ether_addr_copy(cmd->peer_addr.addr, peer_addr);
2415
2416	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv peer create\n");
2417	return skb;
2418}
2419
2420static struct sk_buff *
2421ath10k_wmi_tlv_op_gen_peer_delete(struct ath10k *ar, u32 vdev_id,
2422				  const u8 peer_addr[ETH_ALEN])
2423{
2424	struct wmi_peer_delete_cmd *cmd;
2425	struct wmi_tlv *tlv;
2426	struct sk_buff *skb;
2427
2428	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2429	if (!skb)
2430		return ERR_PTR(-ENOMEM);
2431
2432	tlv = (void *)skb->data;
2433	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PEER_DELETE_CMD);
2434	tlv->len = __cpu_to_le16(sizeof(*cmd));
2435	cmd = (void *)tlv->value;
2436	cmd->vdev_id = __cpu_to_le32(vdev_id);
2437	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
2438
2439	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv peer delete\n");
2440	return skb;
2441}
2442
2443static struct sk_buff *
2444ath10k_wmi_tlv_op_gen_peer_flush(struct ath10k *ar, u32 vdev_id,
2445				 const u8 peer_addr[ETH_ALEN], u32 tid_bitmap)
2446{
2447	struct wmi_peer_flush_tids_cmd *cmd;
2448	struct wmi_tlv *tlv;
2449	struct sk_buff *skb;
2450
2451	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2452	if (!skb)
2453		return ERR_PTR(-ENOMEM);
2454
2455	tlv = (void *)skb->data;
2456	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PEER_FLUSH_TIDS_CMD);
2457	tlv->len = __cpu_to_le16(sizeof(*cmd));
2458	cmd = (void *)tlv->value;
2459	cmd->vdev_id = __cpu_to_le32(vdev_id);
2460	cmd->peer_tid_bitmap = __cpu_to_le32(tid_bitmap);
2461	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
2462
2463	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv peer flush\n");
2464	return skb;
2465}
2466
2467static struct sk_buff *
2468ath10k_wmi_tlv_op_gen_peer_set_param(struct ath10k *ar, u32 vdev_id,
2469				     const u8 *peer_addr,
2470				     enum wmi_peer_param param_id,
2471				     u32 param_value)
2472{
2473	struct wmi_peer_set_param_cmd *cmd;
2474	struct wmi_tlv *tlv;
2475	struct sk_buff *skb;
2476
2477	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2478	if (!skb)
2479		return ERR_PTR(-ENOMEM);
2480
2481	tlv = (void *)skb->data;
2482	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PEER_SET_PARAM_CMD);
2483	tlv->len = __cpu_to_le16(sizeof(*cmd));
2484	cmd = (void *)tlv->value;
2485	cmd->vdev_id = __cpu_to_le32(vdev_id);
2486	cmd->param_id = __cpu_to_le32(param_id);
2487	cmd->param_value = __cpu_to_le32(param_value);
2488	ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
2489
2490	ath10k_dbg(ar, ATH10K_DBG_WMI,
2491		   "wmi tlv vdev %d peer %pM set param %d value 0x%x\n",
2492		   vdev_id, peer_addr, param_id, param_value);
2493	return skb;
2494}
2495
2496static struct sk_buff *
2497ath10k_wmi_tlv_op_gen_peer_assoc(struct ath10k *ar,
2498				 const struct wmi_peer_assoc_complete_arg *arg)
2499{
2500	struct wmi_tlv_peer_assoc_cmd *cmd;
2501	struct wmi_vht_rate_set *vht_rate;
2502	struct wmi_tlv *tlv;
2503	struct sk_buff *skb;
2504	size_t len, legacy_rate_len, ht_rate_len;
2505	void *ptr;
2506
2507	if (arg->peer_mpdu_density > 16)
2508		return ERR_PTR(-EINVAL);
2509	if (arg->peer_legacy_rates.num_rates > MAX_SUPPORTED_RATES)
2510		return ERR_PTR(-EINVAL);
2511	if (arg->peer_ht_rates.num_rates > MAX_SUPPORTED_RATES)
2512		return ERR_PTR(-EINVAL);
2513
2514	legacy_rate_len = roundup(arg->peer_legacy_rates.num_rates,
2515				  sizeof(__le32));
2516	ht_rate_len = roundup(arg->peer_ht_rates.num_rates, sizeof(__le32));
2517	len = (sizeof(*tlv) + sizeof(*cmd)) +
2518	      (sizeof(*tlv) + legacy_rate_len) +
2519	      (sizeof(*tlv) + ht_rate_len) +
2520	      (sizeof(*tlv) + sizeof(*vht_rate));
2521	skb = ath10k_wmi_alloc_skb(ar, len);
2522	if (!skb)
2523		return ERR_PTR(-ENOMEM);
2524
2525	ptr = (void *)skb->data;
2526	tlv = ptr;
2527	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PEER_ASSOC_COMPLETE_CMD);
2528	tlv->len = __cpu_to_le16(sizeof(*cmd));
2529	cmd = (void *)tlv->value;
2530
2531	cmd->vdev_id = __cpu_to_le32(arg->vdev_id);
2532	cmd->new_assoc = __cpu_to_le32(arg->peer_reassoc ? 0 : 1);
2533	cmd->assoc_id = __cpu_to_le32(arg->peer_aid);
2534	cmd->flags = __cpu_to_le32(arg->peer_flags);
2535	cmd->caps = __cpu_to_le32(arg->peer_caps);
2536	cmd->listen_intval = __cpu_to_le32(arg->peer_listen_intval);
2537	cmd->ht_caps = __cpu_to_le32(arg->peer_ht_caps);
2538	cmd->max_mpdu = __cpu_to_le32(arg->peer_max_mpdu);
2539	cmd->mpdu_density = __cpu_to_le32(arg->peer_mpdu_density);
2540	cmd->rate_caps = __cpu_to_le32(arg->peer_rate_caps);
2541	cmd->nss = __cpu_to_le32(arg->peer_num_spatial_streams);
2542	cmd->vht_caps = __cpu_to_le32(arg->peer_vht_caps);
2543	cmd->phy_mode = __cpu_to_le32(arg->peer_phymode);
2544	cmd->num_legacy_rates = __cpu_to_le32(arg->peer_legacy_rates.num_rates);
2545	cmd->num_ht_rates = __cpu_to_le32(arg->peer_ht_rates.num_rates);
2546	ether_addr_copy(cmd->mac_addr.addr, arg->addr);
2547
2548	ptr += sizeof(*tlv);
2549	ptr += sizeof(*cmd);
2550
2551	tlv = ptr;
2552	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
2553	tlv->len = __cpu_to_le16(legacy_rate_len);
2554	memcpy(tlv->value, arg->peer_legacy_rates.rates,
2555	       arg->peer_legacy_rates.num_rates);
2556
2557	ptr += sizeof(*tlv);
2558	ptr += legacy_rate_len;
2559
2560	tlv = ptr;
2561	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
2562	tlv->len = __cpu_to_le16(ht_rate_len);
2563	memcpy(tlv->value, arg->peer_ht_rates.rates,
2564	       arg->peer_ht_rates.num_rates);
2565
2566	ptr += sizeof(*tlv);
2567	ptr += ht_rate_len;
2568
2569	tlv = ptr;
2570	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VHT_RATE_SET);
2571	tlv->len = __cpu_to_le16(sizeof(*vht_rate));
2572	vht_rate = (void *)tlv->value;
2573
2574	vht_rate->rx_max_rate = __cpu_to_le32(arg->peer_vht_rates.rx_max_rate);
2575	vht_rate->rx_mcs_set = __cpu_to_le32(arg->peer_vht_rates.rx_mcs_set);
2576	vht_rate->tx_max_rate = __cpu_to_le32(arg->peer_vht_rates.tx_max_rate);
2577	vht_rate->tx_mcs_set = __cpu_to_le32(arg->peer_vht_rates.tx_mcs_set);
2578
2579	ptr += sizeof(*tlv);
2580	ptr += sizeof(*vht_rate);
2581
2582	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv peer assoc\n");
2583	return skb;
2584}
2585
2586static struct sk_buff *
2587ath10k_wmi_tlv_op_gen_set_psmode(struct ath10k *ar, u32 vdev_id,
2588				 enum wmi_sta_ps_mode psmode)
2589{
2590	struct wmi_sta_powersave_mode_cmd *cmd;
2591	struct wmi_tlv *tlv;
2592	struct sk_buff *skb;
2593
2594	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2595	if (!skb)
2596		return ERR_PTR(-ENOMEM);
2597
2598	tlv = (void *)skb->data;
2599	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STA_POWERSAVE_MODE_CMD);
2600	tlv->len = __cpu_to_le16(sizeof(*cmd));
2601	cmd = (void *)tlv->value;
2602	cmd->vdev_id = __cpu_to_le32(vdev_id);
2603	cmd->sta_ps_mode = __cpu_to_le32(psmode);
2604
2605	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv set psmode\n");
2606	return skb;
2607}
2608
2609static struct sk_buff *
2610ath10k_wmi_tlv_op_gen_set_sta_ps(struct ath10k *ar, u32 vdev_id,
2611				 enum wmi_sta_powersave_param param_id,
2612				 u32 param_value)
2613{
2614	struct wmi_sta_powersave_param_cmd *cmd;
2615	struct wmi_tlv *tlv;
2616	struct sk_buff *skb;
2617
2618	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2619	if (!skb)
2620		return ERR_PTR(-ENOMEM);
2621
2622	tlv = (void *)skb->data;
2623	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STA_POWERSAVE_PARAM_CMD);
2624	tlv->len = __cpu_to_le16(sizeof(*cmd));
2625	cmd = (void *)tlv->value;
2626	cmd->vdev_id = __cpu_to_le32(vdev_id);
2627	cmd->param_id = __cpu_to_le32(param_id);
2628	cmd->param_value = __cpu_to_le32(param_value);
2629
2630	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv set sta ps\n");
2631	return skb;
2632}
2633
2634static struct sk_buff *
2635ath10k_wmi_tlv_op_gen_set_ap_ps(struct ath10k *ar, u32 vdev_id, const u8 *mac,
2636				enum wmi_ap_ps_peer_param param_id, u32 value)
2637{
2638	struct wmi_ap_ps_peer_cmd *cmd;
2639	struct wmi_tlv *tlv;
2640	struct sk_buff *skb;
2641
2642	if (!mac)
2643		return ERR_PTR(-EINVAL);
2644
2645	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2646	if (!skb)
2647		return ERR_PTR(-ENOMEM);
2648
2649	tlv = (void *)skb->data;
2650	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_AP_PS_PEER_CMD);
2651	tlv->len = __cpu_to_le16(sizeof(*cmd));
2652	cmd = (void *)tlv->value;
2653	cmd->vdev_id = __cpu_to_le32(vdev_id);
2654	cmd->param_id = __cpu_to_le32(param_id);
2655	cmd->param_value = __cpu_to_le32(value);
2656	ether_addr_copy(cmd->peer_macaddr.addr, mac);
2657
2658	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv ap ps param\n");
2659	return skb;
2660}
2661
2662static struct sk_buff *
2663ath10k_wmi_tlv_op_gen_scan_chan_list(struct ath10k *ar,
2664				     const struct wmi_scan_chan_list_arg *arg)
2665{
2666	struct wmi_tlv_scan_chan_list_cmd *cmd;
2667	struct wmi_channel *ci;
2668	struct wmi_channel_arg *ch;
2669	struct wmi_tlv *tlv;
2670	struct sk_buff *skb;
2671	size_t chans_len, len;
2672	int i;
2673	void *ptr, *chans;
2674
2675	chans_len = arg->n_channels * (sizeof(*tlv) + sizeof(*ci));
2676	len = (sizeof(*tlv) + sizeof(*cmd)) +
2677	      (sizeof(*tlv) + chans_len);
2678
2679	skb = ath10k_wmi_alloc_skb(ar, len);
2680	if (!skb)
2681		return ERR_PTR(-ENOMEM);
2682
2683	ptr = (void *)skb->data;
2684	tlv = ptr;
2685	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_SCAN_CHAN_LIST_CMD);
2686	tlv->len = __cpu_to_le16(sizeof(*cmd));
2687	cmd = (void *)tlv->value;
2688	cmd->num_scan_chans = __cpu_to_le32(arg->n_channels);
2689
2690	ptr += sizeof(*tlv);
2691	ptr += sizeof(*cmd);
2692
2693	tlv = ptr;
2694	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
2695	tlv->len = __cpu_to_le16(chans_len);
2696	chans = (void *)tlv->value;
2697
2698	for (i = 0; i < arg->n_channels; i++) {
2699		ch = &arg->channels[i];
2700
2701		tlv = chans;
2702		tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_CHANNEL);
2703		tlv->len = __cpu_to_le16(sizeof(*ci));
2704		ci = (void *)tlv->value;
2705
2706		ath10k_wmi_put_wmi_channel(ci, ch);
2707
2708		chans += sizeof(*tlv);
2709		chans += sizeof(*ci);
2710	}
2711
2712	ptr += sizeof(*tlv);
2713	ptr += chans_len;
2714
2715	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv scan chan list\n");
2716	return skb;
2717}
2718
2719static struct sk_buff *
2720ath10k_wmi_tlv_op_gen_scan_prob_req_oui(struct ath10k *ar, u32 prob_req_oui)
2721{
2722	struct wmi_scan_prob_req_oui_cmd *cmd;
2723	struct wmi_tlv *tlv;
2724	struct sk_buff *skb;
2725
2726	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2727	if (!skb)
2728		return ERR_PTR(-ENOMEM);
2729
2730	tlv = (void *)skb->data;
2731	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_SCAN_PROB_REQ_OUI_CMD);
2732	tlv->len = __cpu_to_le16(sizeof(*cmd));
2733	cmd = (void *)tlv->value;
2734	cmd->prob_req_oui = __cpu_to_le32(prob_req_oui);
2735
2736	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv scan prob req oui\n");
2737	return skb;
2738}
2739
2740static struct sk_buff *
2741ath10k_wmi_tlv_op_gen_beacon_dma(struct ath10k *ar, u32 vdev_id,
2742				 const void *bcn, size_t bcn_len,
2743				 u32 bcn_paddr, bool dtim_zero,
2744				 bool deliver_cab)
2745
2746{
2747	struct wmi_bcn_tx_ref_cmd *cmd;
2748	struct wmi_tlv *tlv;
2749	struct sk_buff *skb;
2750	struct ieee80211_hdr *hdr;
2751	u16 fc;
2752
2753	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2754	if (!skb)
2755		return ERR_PTR(-ENOMEM);
2756
2757	hdr = (struct ieee80211_hdr *)bcn;
2758	fc = le16_to_cpu(hdr->frame_control);
2759
2760	tlv = (void *)skb->data;
2761	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_BCN_SEND_FROM_HOST_CMD);
2762	tlv->len = __cpu_to_le16(sizeof(*cmd));
2763	cmd = (void *)tlv->value;
2764	cmd->vdev_id = __cpu_to_le32(vdev_id);
2765	cmd->data_len = __cpu_to_le32(bcn_len);
2766	cmd->data_ptr = __cpu_to_le32(bcn_paddr);
2767	cmd->msdu_id = 0;
2768	cmd->frame_control = __cpu_to_le32(fc);
2769	cmd->flags = 0;
2770
2771	if (dtim_zero)
2772		cmd->flags |= __cpu_to_le32(WMI_BCN_TX_REF_FLAG_DTIM_ZERO);
2773
2774	if (deliver_cab)
2775		cmd->flags |= __cpu_to_le32(WMI_BCN_TX_REF_FLAG_DELIVER_CAB);
2776
2777	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv beacon dma\n");
2778	return skb;
2779}
2780
2781static struct sk_buff *
2782ath10k_wmi_tlv_op_gen_pdev_set_wmm(struct ath10k *ar,
2783				   const struct wmi_wmm_params_all_arg *arg)
2784{
2785	struct wmi_tlv_pdev_set_wmm_cmd *cmd;
2786	struct wmi_wmm_params *wmm;
2787	struct wmi_tlv *tlv;
2788	struct sk_buff *skb;
2789	size_t len;
2790	void *ptr;
2791
2792	len = (sizeof(*tlv) + sizeof(*cmd)) +
2793	      (4 * (sizeof(*tlv) + sizeof(*wmm)));
2794	skb = ath10k_wmi_alloc_skb(ar, len);
2795	if (!skb)
2796		return ERR_PTR(-ENOMEM);
2797
2798	ptr = (void *)skb->data;
2799
2800	tlv = ptr;
2801	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_SET_WMM_PARAMS_CMD);
2802	tlv->len = __cpu_to_le16(sizeof(*cmd));
2803	cmd = (void *)tlv->value;
2804
2805	/* nothing to set here */
2806
2807	ptr += sizeof(*tlv);
2808	ptr += sizeof(*cmd);
2809
2810	ptr = ath10k_wmi_tlv_put_wmm(ptr, &arg->ac_be);
2811	ptr = ath10k_wmi_tlv_put_wmm(ptr, &arg->ac_bk);
2812	ptr = ath10k_wmi_tlv_put_wmm(ptr, &arg->ac_vi);
2813	ptr = ath10k_wmi_tlv_put_wmm(ptr, &arg->ac_vo);
2814
2815	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pdev set wmm\n");
2816	return skb;
2817}
2818
2819static struct sk_buff *
2820ath10k_wmi_tlv_op_gen_request_stats(struct ath10k *ar, u32 stats_mask)
2821{
2822	struct wmi_request_stats_cmd *cmd;
2823	struct wmi_tlv *tlv;
2824	struct sk_buff *skb;
2825
2826	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2827	if (!skb)
2828		return ERR_PTR(-ENOMEM);
2829
2830	tlv = (void *)skb->data;
2831	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_REQUEST_STATS_CMD);
2832	tlv->len = __cpu_to_le16(sizeof(*cmd));
2833	cmd = (void *)tlv->value;
2834	cmd->stats_id = __cpu_to_le32(stats_mask);
2835
2836	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv request stats\n");
2837	return skb;
2838}
2839
2840static int
2841ath10k_wmi_mgmt_tx_alloc_msdu_id(struct ath10k *ar, struct sk_buff *skb,
2842				 dma_addr_t paddr)
2843{
2844	struct ath10k_wmi *wmi = &ar->wmi;
2845	struct ath10k_mgmt_tx_pkt_addr *pkt_addr;
2846	int ret;
2847
2848	pkt_addr = kmalloc(sizeof(*pkt_addr), GFP_ATOMIC);
2849	if (!pkt_addr)
2850		return -ENOMEM;
2851
2852	pkt_addr->vaddr = skb;
2853	pkt_addr->paddr = paddr;
2854
2855	spin_lock_bh(&ar->data_lock);
2856	ret = idr_alloc(&wmi->mgmt_pending_tx, pkt_addr, 0,
2857			wmi->mgmt_max_num_pending_tx, GFP_ATOMIC);
2858	spin_unlock_bh(&ar->data_lock);
2859
2860	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi mgmt tx alloc msdu_id ret %d\n", ret);
2861	return ret;
2862}
2863
2864static struct sk_buff *
2865ath10k_wmi_tlv_op_gen_mgmt_tx_send(struct ath10k *ar, struct sk_buff *msdu,
2866				   dma_addr_t paddr)
2867{
2868	struct ath10k_skb_cb *cb = ATH10K_SKB_CB(msdu);
2869	struct wmi_tlv_mgmt_tx_cmd *cmd;
2870	struct ieee80211_hdr *hdr;
2871	struct ath10k_vif *arvif;
2872	u32 buf_len = msdu->len;
2873	struct wmi_tlv *tlv;
2874	struct sk_buff *skb;
2875	int len, desc_id;
2876	u32 vdev_id;
2877	void *ptr;
2878
2879	if (!cb->vif)
2880		return ERR_PTR(-EINVAL);
2881
2882	hdr = (struct ieee80211_hdr *)msdu->data;
2883	arvif = (void *)cb->vif->drv_priv;
2884	vdev_id = arvif->vdev_id;
2885
2886	if (WARN_ON_ONCE(!ieee80211_is_mgmt(hdr->frame_control) &&
2887			 (!(ieee80211_is_nullfunc(hdr->frame_control) ||
2888			 ieee80211_is_qos_nullfunc(hdr->frame_control)))))
2889		return ERR_PTR(-EINVAL);
2890
2891	len = sizeof(*cmd) + 2 * sizeof(*tlv);
2892
2893	if ((ieee80211_is_action(hdr->frame_control) ||
2894	     ieee80211_is_deauth(hdr->frame_control) ||
2895	     ieee80211_is_disassoc(hdr->frame_control)) &&
2896	     ieee80211_has_protected(hdr->frame_control)) {
2897		skb_put(msdu, IEEE80211_CCMP_MIC_LEN);
2898		buf_len += IEEE80211_CCMP_MIC_LEN;
2899	}
2900
2901	buf_len = min_t(u32, buf_len, WMI_TLV_MGMT_TX_FRAME_MAX_LEN);
2902	buf_len = round_up(buf_len, 4);
2903
2904	len += buf_len;
2905	len = round_up(len, 4);
2906	skb = ath10k_wmi_alloc_skb(ar, len);
2907	if (!skb)
2908		return ERR_PTR(-ENOMEM);
2909
2910	desc_id = ath10k_wmi_mgmt_tx_alloc_msdu_id(ar, msdu, paddr);
2911	if (desc_id < 0)
2912		goto err_free_skb;
2913
2914	ptr = (void *)skb->data;
2915	tlv = ptr;
2916	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_MGMT_TX_CMD);
2917	tlv->len = __cpu_to_le16(sizeof(*cmd));
2918	cmd = (void *)tlv->value;
2919	cmd->vdev_id = __cpu_to_le32(vdev_id);
2920	cmd->desc_id = __cpu_to_le32(desc_id);
2921	cmd->chanfreq = 0;
2922	cmd->buf_len = __cpu_to_le32(buf_len);
2923	cmd->frame_len = __cpu_to_le32(msdu->len);
2924	cmd->paddr = __cpu_to_le64(paddr);
2925
2926	ptr += sizeof(*tlv);
2927	ptr += sizeof(*cmd);
2928
2929	tlv = ptr;
2930	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
2931	tlv->len = __cpu_to_le16(buf_len);
2932
2933	ptr += sizeof(*tlv);
2934	memcpy(ptr, msdu->data, buf_len);
2935
2936	return skb;
2937
2938err_free_skb:
2939	dev_kfree_skb(skb);
2940	return ERR_PTR(desc_id);
2941}
2942
2943static struct sk_buff *
2944ath10k_wmi_tlv_op_gen_force_fw_hang(struct ath10k *ar,
2945				    enum wmi_force_fw_hang_type type,
2946				    u32 delay_ms)
2947{
2948	struct wmi_force_fw_hang_cmd *cmd;
2949	struct wmi_tlv *tlv;
2950	struct sk_buff *skb;
2951
2952	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2953	if (!skb)
2954		return ERR_PTR(-ENOMEM);
2955
2956	tlv = (void *)skb->data;
2957	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_FORCE_FW_HANG_CMD);
2958	tlv->len = __cpu_to_le16(sizeof(*cmd));
2959	cmd = (void *)tlv->value;
2960	cmd->type = __cpu_to_le32(type);
2961	cmd->delay_ms = __cpu_to_le32(delay_ms);
2962
2963	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv force fw hang\n");
2964	return skb;
2965}
2966
2967static struct sk_buff *
2968ath10k_wmi_tlv_op_gen_dbglog_cfg(struct ath10k *ar, u64 module_enable,
2969				 u32 log_level)
2970{
2971	struct wmi_tlv_dbglog_cmd *cmd;
2972	struct wmi_tlv *tlv;
2973	struct sk_buff *skb;
2974	size_t len, bmap_len;
2975	u32 value;
2976	void *ptr;
2977
2978	if (module_enable) {
2979		value = WMI_TLV_DBGLOG_LOG_LEVEL_VALUE(
2980				module_enable,
2981				WMI_TLV_DBGLOG_LOG_LEVEL_VERBOSE);
2982	} else {
2983		value = WMI_TLV_DBGLOG_LOG_LEVEL_VALUE(
2984				WMI_TLV_DBGLOG_ALL_MODULES,
2985				WMI_TLV_DBGLOG_LOG_LEVEL_WARN);
2986	}
2987
2988	bmap_len = 0;
2989	len = sizeof(*tlv) + sizeof(*cmd) + sizeof(*tlv) + bmap_len;
2990	skb = ath10k_wmi_alloc_skb(ar, len);
2991	if (!skb)
2992		return ERR_PTR(-ENOMEM);
2993
2994	ptr = (void *)skb->data;
2995
2996	tlv = ptr;
2997	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_DEBUG_LOG_CONFIG_CMD);
2998	tlv->len = __cpu_to_le16(sizeof(*cmd));
2999	cmd = (void *)tlv->value;
3000	cmd->param = __cpu_to_le32(WMI_TLV_DBGLOG_PARAM_LOG_LEVEL);
3001	cmd->value = __cpu_to_le32(value);
3002
3003	ptr += sizeof(*tlv);
3004	ptr += sizeof(*cmd);
3005
3006	tlv = ptr;
3007	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_UINT32);
3008	tlv->len = __cpu_to_le16(bmap_len);
3009
3010	/* nothing to do here */
3011
3012	ptr += sizeof(*tlv);
3013	ptr += sizeof(bmap_len);
3014
3015	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv dbglog value 0x%08x\n", value);
3016	return skb;
3017}
3018
3019static struct sk_buff *
3020ath10k_wmi_tlv_op_gen_pktlog_enable(struct ath10k *ar, u32 filter)
3021{
3022	struct wmi_tlv_pktlog_enable *cmd;
3023	struct wmi_tlv *tlv;
3024	struct sk_buff *skb;
3025	void *ptr;
3026	size_t len;
3027
3028	len = sizeof(*tlv) + sizeof(*cmd);
3029	skb = ath10k_wmi_alloc_skb(ar, len);
3030	if (!skb)
3031		return ERR_PTR(-ENOMEM);
3032
3033	ptr = (void *)skb->data;
3034	tlv = ptr;
3035	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_PKTLOG_ENABLE_CMD);
3036	tlv->len = __cpu_to_le16(sizeof(*cmd));
3037	cmd = (void *)tlv->value;
3038	cmd->filter = __cpu_to_le32(filter);
3039
3040	ptr += sizeof(*tlv);
3041	ptr += sizeof(*cmd);
3042
3043	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pktlog enable filter 0x%08x\n",
3044		   filter);
3045	return skb;
3046}
3047
3048static struct sk_buff *
3049ath10k_wmi_tlv_op_gen_pdev_get_temperature(struct ath10k *ar)
3050{
3051	struct wmi_tlv_pdev_get_temp_cmd *cmd;
3052	struct wmi_tlv *tlv;
3053	struct sk_buff *skb;
3054
3055	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
3056	if (!skb)
3057		return ERR_PTR(-ENOMEM);
3058
3059	tlv = (void *)skb->data;
3060	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_GET_TEMPERATURE_CMD);
3061	tlv->len = __cpu_to_le16(sizeof(*cmd));
3062	cmd = (void *)tlv->value;
3063	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi pdev get temperature tlv\n");
3064	return skb;
3065}
3066
3067static struct sk_buff *
3068ath10k_wmi_tlv_op_gen_pktlog_disable(struct ath10k *ar)
3069{
3070	struct wmi_tlv_pktlog_disable *cmd;
3071	struct wmi_tlv *tlv;
3072	struct sk_buff *skb;
3073	void *ptr;
3074	size_t len;
3075
3076	len = sizeof(*tlv) + sizeof(*cmd);
3077	skb = ath10k_wmi_alloc_skb(ar, len);
3078	if (!skb)
3079		return ERR_PTR(-ENOMEM);
3080
3081	ptr = (void *)skb->data;
3082	tlv = ptr;
3083	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_PKTLOG_DISABLE_CMD);
3084	tlv->len = __cpu_to_le16(sizeof(*cmd));
3085	cmd = (void *)tlv->value;
3086
3087	ptr += sizeof(*tlv);
3088	ptr += sizeof(*cmd);
3089
3090	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pktlog disable\n");
3091	return skb;
3092}
3093
3094static struct sk_buff *
3095ath10k_wmi_tlv_op_gen_bcn_tmpl(struct ath10k *ar, u32 vdev_id,
3096			       u32 tim_ie_offset, struct sk_buff *bcn,
3097			       u32 prb_caps, u32 prb_erp, void *prb_ies,
3098			       size_t prb_ies_len)
3099{
3100	struct wmi_tlv_bcn_tmpl_cmd *cmd;
3101	struct wmi_tlv_bcn_prb_info *info;
3102	struct wmi_tlv *tlv;
3103	struct sk_buff *skb;
3104	void *ptr;
3105	size_t len;
3106
3107	if (WARN_ON(prb_ies_len > 0 && !prb_ies))
3108		return ERR_PTR(-EINVAL);
3109
3110	len = sizeof(*tlv) + sizeof(*cmd) +
3111	      sizeof(*tlv) + sizeof(*info) + prb_ies_len +
3112	      sizeof(*tlv) + roundup(bcn->len, 4);
3113	skb = ath10k_wmi_alloc_skb(ar, len);
3114	if (!skb)
3115		return ERR_PTR(-ENOMEM);
3116
3117	ptr = (void *)skb->data;
3118	tlv = ptr;
3119	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_BCN_TMPL_CMD);
3120	tlv->len = __cpu_to_le16(sizeof(*cmd));
3121	cmd = (void *)tlv->value;
3122	cmd->vdev_id = __cpu_to_le32(vdev_id);
3123	cmd->tim_ie_offset = __cpu_to_le32(tim_ie_offset);
3124	cmd->buf_len = __cpu_to_le32(bcn->len);
3125
3126	ptr += sizeof(*tlv);
3127	ptr += sizeof(*cmd);
3128
3129	/* FIXME: prb_ies_len should be probably aligned to 4byte boundary but
3130	 * then it is then impossible to pass original ie len.
3131	 * This chunk is not used yet so if setting probe resp template yields
3132	 * problems with beaconing or crashes firmware look here.
3133	 */
3134	tlv = ptr;
3135	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_BCN_PRB_INFO);
3136	tlv->len = __cpu_to_le16(sizeof(*info) + prb_ies_len);
3137	info = (void *)tlv->value;
3138	info->caps = __cpu_to_le32(prb_caps);
3139	info->erp = __cpu_to_le32(prb_erp);
3140	memcpy(info->ies, prb_ies, prb_ies_len);
3141
3142	ptr += sizeof(*tlv);
3143	ptr += sizeof(*info);
3144	ptr += prb_ies_len;
3145
3146	tlv = ptr;
3147	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
3148	tlv->len = __cpu_to_le16(roundup(bcn->len, 4));
3149	memcpy(tlv->value, bcn->data, bcn->len);
3150
3151	/* FIXME: Adjust TSF? */
3152
3153	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv bcn tmpl vdev_id %i\n",
3154		   vdev_id);
3155	return skb;
3156}
3157
3158static struct sk_buff *
3159ath10k_wmi_tlv_op_gen_prb_tmpl(struct ath10k *ar, u32 vdev_id,
3160			       struct sk_buff *prb)
3161{
3162	struct wmi_tlv_prb_tmpl_cmd *cmd;
3163	struct wmi_tlv_bcn_prb_info *info;
3164	struct wmi_tlv *tlv;
3165	struct sk_buff *skb;
3166	void *ptr;
3167	size_t len;
3168
3169	len = sizeof(*tlv) + sizeof(*cmd) +
3170	      sizeof(*tlv) + sizeof(*info) +
3171	      sizeof(*tlv) + roundup(prb->len, 4);
3172	skb = ath10k_wmi_alloc_skb(ar, len);
3173	if (!skb)
3174		return ERR_PTR(-ENOMEM);
3175
3176	ptr = (void *)skb->data;
3177	tlv = ptr;
3178	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PRB_TMPL_CMD);
3179	tlv->len = __cpu_to_le16(sizeof(*cmd));
3180	cmd = (void *)tlv->value;
3181	cmd->vdev_id = __cpu_to_le32(vdev_id);
3182	cmd->buf_len = __cpu_to_le32(prb->len);
3183
3184	ptr += sizeof(*tlv);
3185	ptr += sizeof(*cmd);
3186
3187	tlv = ptr;
3188	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_BCN_PRB_INFO);
3189	tlv->len = __cpu_to_le16(sizeof(*info));
3190	info = (void *)tlv->value;
3191	info->caps = 0;
3192	info->erp = 0;
3193
3194	ptr += sizeof(*tlv);
3195	ptr += sizeof(*info);
3196
3197	tlv = ptr;
3198	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
3199	tlv->len = __cpu_to_le16(roundup(prb->len, 4));
3200	memcpy(tlv->value, prb->data, prb->len);
3201
3202	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv prb tmpl vdev_id %i\n",
3203		   vdev_id);
3204	return skb;
3205}
3206
3207static struct sk_buff *
3208ath10k_wmi_tlv_op_gen_p2p_go_bcn_ie(struct ath10k *ar, u32 vdev_id,
3209				    const u8 *p2p_ie)
3210{
3211	struct wmi_tlv_p2p_go_bcn_ie *cmd;
3212	struct wmi_tlv *tlv;
3213	struct sk_buff *skb;
3214	void *ptr;
3215	size_t len;
3216
3217	len = sizeof(*tlv) + sizeof(*cmd) +
3218	      sizeof(*tlv) + roundup(p2p_ie[1] + 2, 4);
3219	skb = ath10k_wmi_alloc_skb(ar, len);
3220	if (!skb)
3221		return ERR_PTR(-ENOMEM);
3222
3223	ptr = (void *)skb->data;
3224	tlv = ptr;
3225	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_P2P_GO_SET_BEACON_IE);
3226	tlv->len = __cpu_to_le16(sizeof(*cmd));
3227	cmd = (void *)tlv->value;
3228	cmd->vdev_id = __cpu_to_le32(vdev_id);
3229	cmd->ie_len = __cpu_to_le32(p2p_ie[1] + 2);
3230
3231	ptr += sizeof(*tlv);
3232	ptr += sizeof(*cmd);
3233
3234	tlv = ptr;
3235	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
3236	tlv->len = __cpu_to_le16(roundup(p2p_ie[1] + 2, 4));
3237	memcpy(tlv->value, p2p_ie, p2p_ie[1] + 2);
3238
3239	ptr += sizeof(*tlv);
3240	ptr += roundup(p2p_ie[1] + 2, 4);
3241
3242	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv p2p go bcn ie for vdev %i\n",
3243		   vdev_id);
3244	return skb;
3245}
3246
3247static struct sk_buff *
3248ath10k_wmi_tlv_op_gen_update_fw_tdls_state(struct ath10k *ar, u32 vdev_id,
3249					   enum wmi_tdls_state state)
3250{
3251	struct wmi_tdls_set_state_cmd *cmd;
3252	struct wmi_tlv *tlv;
3253	struct sk_buff *skb;
3254	void *ptr;
3255	size_t len;
3256	/* Set to options from wmi_tlv_tdls_options,
3257	 * for now none of them are enabled.
3258	 */
3259	u32 options = 0;
3260
3261	if (test_bit(WMI_SERVICE_TDLS_UAPSD_BUFFER_STA, ar->wmi.svc_map))
3262		options |=  WMI_TLV_TDLS_BUFFER_STA_EN;
3263
3264	/* WMI_TDLS_ENABLE_ACTIVE_EXTERNAL_CONTROL means firm will handle TDLS
3265	 * link inactivity detecting logic.
3266	 */
3267	if (state == WMI_TDLS_ENABLE_ACTIVE)
3268		state = WMI_TDLS_ENABLE_ACTIVE_EXTERNAL_CONTROL;
3269
3270	len = sizeof(*tlv) + sizeof(*cmd);
3271	skb = ath10k_wmi_alloc_skb(ar, len);
3272	if (!skb)
3273		return ERR_PTR(-ENOMEM);
3274
3275	ptr = (void *)skb->data;
3276	tlv = ptr;
3277	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_TDLS_SET_STATE_CMD);
3278	tlv->len = __cpu_to_le16(sizeof(*cmd));
3279
3280	cmd = (void *)tlv->value;
3281	cmd->vdev_id = __cpu_to_le32(vdev_id);
3282	cmd->state = __cpu_to_le32(state);
3283	cmd->notification_interval_ms = __cpu_to_le32(5000);
3284	cmd->tx_discovery_threshold = __cpu_to_le32(100);
3285	cmd->tx_teardown_threshold = __cpu_to_le32(5);
3286	cmd->rssi_teardown_threshold = __cpu_to_le32(-75);
3287	cmd->rssi_delta = __cpu_to_le32(-20);
3288	cmd->tdls_options = __cpu_to_le32(options);
3289	cmd->tdls_peer_traffic_ind_window = __cpu_to_le32(2);
3290	cmd->tdls_peer_traffic_response_timeout_ms = __cpu_to_le32(5000);
3291	cmd->tdls_puapsd_mask = __cpu_to_le32(0xf);
3292	cmd->tdls_puapsd_inactivity_time_ms = __cpu_to_le32(0);
3293	cmd->tdls_puapsd_rx_frame_threshold = __cpu_to_le32(10);
3294
3295	ptr += sizeof(*tlv);
3296	ptr += sizeof(*cmd);
3297
3298	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv update fw tdls state %d for vdev %i\n",
3299		   state, vdev_id);
3300	return skb;
3301}
3302
3303static u32 ath10k_wmi_tlv_prepare_peer_qos(u8 uapsd_queues, u8 sp)
3304{
3305	u32 peer_qos = 0;
3306
3307	if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_VO)
3308		peer_qos |= WMI_TLV_TDLS_PEER_QOS_AC_VO;
3309	if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_VI)
3310		peer_qos |= WMI_TLV_TDLS_PEER_QOS_AC_VI;
3311	if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_BK)
3312		peer_qos |= WMI_TLV_TDLS_PEER_QOS_AC_BK;
3313	if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_BE)
3314		peer_qos |= WMI_TLV_TDLS_PEER_QOS_AC_BE;
3315
3316	peer_qos |= SM(sp, WMI_TLV_TDLS_PEER_SP);
3317
3318	return peer_qos;
3319}
3320
3321static struct sk_buff *
3322ath10k_wmi_tlv_op_gen_tdls_peer_update(struct ath10k *ar,
3323				       const struct wmi_tdls_peer_update_cmd_arg *arg,
3324				       const struct wmi_tdls_peer_capab_arg *cap,
3325				       const struct wmi_channel_arg *chan_arg)
3326{
3327	struct wmi_tdls_peer_update_cmd *cmd;
3328	struct wmi_tdls_peer_capab *peer_cap;
3329	struct wmi_channel *chan;
3330	struct wmi_tlv *tlv;
3331	struct sk_buff *skb;
3332	u32 peer_qos;
3333	void *ptr;
3334	int len;
3335	int i;
3336
3337	len = sizeof(*tlv) + sizeof(*cmd) +
3338	      sizeof(*tlv) + sizeof(*peer_cap) +
3339	      sizeof(*tlv) + cap->peer_chan_len * sizeof(*chan);
3340
3341	skb = ath10k_wmi_alloc_skb(ar, len);
3342	if (!skb)
3343		return ERR_PTR(-ENOMEM);
3344
3345	ptr = (void *)skb->data;
3346	tlv = ptr;
3347	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_TDLS_PEER_UPDATE_CMD);
3348	tlv->len = __cpu_to_le16(sizeof(*cmd));
3349
3350	cmd = (void *)tlv->value;
3351	cmd->vdev_id = __cpu_to_le32(arg->vdev_id);
3352	ether_addr_copy(cmd->peer_macaddr.addr, arg->addr);
3353	cmd->peer_state = __cpu_to_le32(arg->peer_state);
3354
3355	ptr += sizeof(*tlv);
3356	ptr += sizeof(*cmd);
3357
3358	tlv = ptr;
3359	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_TDLS_PEER_CAPABILITIES);
3360	tlv->len = __cpu_to_le16(sizeof(*peer_cap));
3361	peer_cap = (void *)tlv->value;
3362	peer_qos = ath10k_wmi_tlv_prepare_peer_qos(cap->peer_uapsd_queues,
3363						   cap->peer_max_sp);
3364	peer_cap->peer_qos = __cpu_to_le32(peer_qos);
3365	peer_cap->buff_sta_support = __cpu_to_le32(cap->buff_sta_support);
3366	peer_cap->off_chan_support = __cpu_to_le32(cap->off_chan_support);
3367	peer_cap->peer_curr_operclass = __cpu_to_le32(cap->peer_curr_operclass);
3368	peer_cap->self_curr_operclass = __cpu_to_le32(cap->self_curr_operclass);
3369	peer_cap->peer_chan_len = __cpu_to_le32(cap->peer_chan_len);
3370	peer_cap->peer_operclass_len = __cpu_to_le32(cap->peer_operclass_len);
3371
3372	for (i = 0; i < WMI_TDLS_MAX_SUPP_OPER_CLASSES; i++)
3373		peer_cap->peer_operclass[i] = cap->peer_operclass[i];
3374
3375	peer_cap->is_peer_responder = __cpu_to_le32(cap->is_peer_responder);
3376	peer_cap->pref_offchan_num = __cpu_to_le32(cap->pref_offchan_num);
3377	peer_cap->pref_offchan_bw = __cpu_to_le32(cap->pref_offchan_bw);
3378
3379	ptr += sizeof(*tlv);
3380	ptr += sizeof(*peer_cap);
3381
3382	tlv = ptr;
3383	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3384	tlv->len = __cpu_to_le16(cap->peer_chan_len * sizeof(*chan));
3385
3386	ptr += sizeof(*tlv);
3387
3388	for (i = 0; i < cap->peer_chan_len; i++) {
3389		tlv = ptr;
3390		tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_CHANNEL);
3391		tlv->len = __cpu_to_le16(sizeof(*chan));
3392		chan = (void *)tlv->value;
3393		ath10k_wmi_put_wmi_channel(chan, &chan_arg[i]);
3394
3395		ptr += sizeof(*tlv);
3396		ptr += sizeof(*chan);
3397	}
3398
3399	ath10k_dbg(ar, ATH10K_DBG_WMI,
3400		   "wmi tlv tdls peer update vdev %i state %d n_chans %u\n",
3401		   arg->vdev_id, arg->peer_state, cap->peer_chan_len);
3402	return skb;
3403}
3404
3405static struct sk_buff *
3406ath10k_wmi_tlv_op_gen_pdev_set_quiet_mode(struct ath10k *ar, u32 period,
3407					  u32 duration, u32 next_offset,
3408					  u32 enabled)
3409{
3410	struct wmi_tlv_set_quiet_cmd *cmd;
3411	struct wmi_tlv *tlv;
3412	struct sk_buff *skb;
3413
3414	skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
3415	if (!skb)
3416		return ERR_PTR(-ENOMEM);
3417
3418	tlv = (void *)skb->data;
3419	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_SET_QUIET_CMD);
3420	tlv->len = __cpu_to_le16(sizeof(*cmd));
3421	cmd = (void *)tlv->value;
3422
3423	/* vdev_id is not in use, set to 0 */
3424	cmd->vdev_id = __cpu_to_le32(0);
3425	cmd->period = __cpu_to_le32(period);
3426	cmd->duration = __cpu_to_le32(duration);
3427	cmd->next_start = __cpu_to_le32(next_offset);
3428	cmd->enabled = __cpu_to_le32(enabled);
3429
3430	ath10k_dbg(ar, ATH10K_DBG_WMI,
3431		   "wmi tlv quiet param: period %u duration %u enabled %d\n",
3432		   period, duration, enabled);
3433	return skb;
3434}
3435
3436static struct sk_buff *
3437ath10k_wmi_tlv_op_gen_wow_enable(struct ath10k *ar)
3438{
3439	struct wmi_tlv_wow_enable_cmd *cmd;
3440	struct wmi_tlv *tlv;
3441	struct sk_buff *skb;
3442	size_t len;
3443
3444	len = sizeof(*tlv) + sizeof(*cmd);
3445	skb = ath10k_wmi_alloc_skb(ar, len);
3446	if (!skb)
3447		return ERR_PTR(-ENOMEM);
3448
3449	tlv = (struct wmi_tlv *)skb->data;
3450	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WOW_ENABLE_CMD);
3451	tlv->len = __cpu_to_le16(sizeof(*cmd));
3452	cmd = (void *)tlv->value;
3453
3454	cmd->enable = __cpu_to_le32(1);
3455	if (!ar->bus_param.link_can_suspend)
3456		cmd->pause_iface_config = __cpu_to_le32(WOW_IFACE_PAUSE_DISABLED);
3457
3458	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv wow enable\n");
3459	return skb;
3460}
3461
3462static struct sk_buff *
3463ath10k_wmi_tlv_op_gen_wow_add_wakeup_event(struct ath10k *ar,
3464					   u32 vdev_id,
3465					   enum wmi_wow_wakeup_event event,
3466					   u32 enable)
3467{
3468	struct wmi_tlv_wow_add_del_event_cmd *cmd;
3469	struct wmi_tlv *tlv;
3470	struct sk_buff *skb;
3471	size_t len;
3472
3473	len = sizeof(*tlv) + sizeof(*cmd);
3474	skb = ath10k_wmi_alloc_skb(ar, len);
3475	if (!skb)
3476		return ERR_PTR(-ENOMEM);
3477
3478	tlv = (struct wmi_tlv *)skb->data;
3479	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WOW_ADD_DEL_EVT_CMD);
3480	tlv->len = __cpu_to_le16(sizeof(*cmd));
3481	cmd = (void *)tlv->value;
3482
3483	cmd->vdev_id = __cpu_to_le32(vdev_id);
3484	cmd->is_add = __cpu_to_le32(enable);
3485	cmd->event_bitmap = __cpu_to_le32(1 << event);
3486
3487	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv wow add wakeup event %s enable %d vdev_id %d\n",
3488		   wow_wakeup_event(event), enable, vdev_id);
3489	return skb;
3490}
3491
3492static struct sk_buff *
3493ath10k_wmi_tlv_gen_wow_host_wakeup_ind(struct ath10k *ar)
3494{
3495	struct wmi_tlv_wow_host_wakeup_ind *cmd;
3496	struct wmi_tlv *tlv;
3497	struct sk_buff *skb;
3498	size_t len;
3499
3500	len = sizeof(*tlv) + sizeof(*cmd);
3501	skb = ath10k_wmi_alloc_skb(ar, len);
3502	if (!skb)
3503		return ERR_PTR(-ENOMEM);
3504
3505	tlv = (struct wmi_tlv *)skb->data;
3506	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WOW_HOSTWAKEUP_FROM_SLEEP_CMD);
3507	tlv->len = __cpu_to_le16(sizeof(*cmd));
3508	cmd = (void *)tlv->value;
3509
3510	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv wow host wakeup ind\n");
3511	return skb;
3512}
3513
3514static struct sk_buff *
3515ath10k_wmi_tlv_op_gen_wow_add_pattern(struct ath10k *ar, u32 vdev_id,
3516				      u32 pattern_id, const u8 *pattern,
3517				      const u8 *bitmask, int pattern_len,
3518				      int pattern_offset)
3519{
3520	struct wmi_tlv_wow_add_pattern_cmd *cmd;
3521	struct wmi_tlv_wow_bitmap_pattern *bitmap;
3522	struct wmi_tlv *tlv;
3523	struct sk_buff *skb;
3524	void *ptr;
3525	size_t len;
3526
3527	len = sizeof(*tlv) + sizeof(*cmd) +
3528	      sizeof(*tlv) +			/* array struct */
3529	      sizeof(*tlv) + sizeof(*bitmap) +  /* bitmap */
3530	      sizeof(*tlv) +			/* empty ipv4 sync */
3531	      sizeof(*tlv) +			/* empty ipv6 sync */
3532	      sizeof(*tlv) +			/* empty magic */
3533	      sizeof(*tlv) +			/* empty info timeout */
3534	      sizeof(*tlv) + sizeof(u32);	/* ratelimit interval */
3535
3536	skb = ath10k_wmi_alloc_skb(ar, len);
3537	if (!skb)
3538		return ERR_PTR(-ENOMEM);
3539
3540	/* cmd */
3541	ptr = (void *)skb->data;
3542	tlv = ptr;
3543	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WOW_ADD_PATTERN_CMD);
3544	tlv->len = __cpu_to_le16(sizeof(*cmd));
3545	cmd = (void *)tlv->value;
3546
3547	cmd->vdev_id = __cpu_to_le32(vdev_id);
3548	cmd->pattern_id = __cpu_to_le32(pattern_id);
3549	cmd->pattern_type = __cpu_to_le32(WOW_BITMAP_PATTERN);
3550
3551	ptr += sizeof(*tlv);
3552	ptr += sizeof(*cmd);
3553
3554	/* bitmap */
3555	tlv = ptr;
3556	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3557	tlv->len = __cpu_to_le16(sizeof(*tlv) + sizeof(*bitmap));
3558
3559	ptr += sizeof(*tlv);
3560
3561	tlv = ptr;
3562	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WOW_BITMAP_PATTERN_T);
3563	tlv->len = __cpu_to_le16(sizeof(*bitmap));
3564	bitmap = (void *)tlv->value;
3565
3566	memcpy(bitmap->patternbuf, pattern, pattern_len);
3567	memcpy(bitmap->bitmaskbuf, bitmask, pattern_len);
3568	bitmap->pattern_offset = __cpu_to_le32(pattern_offset);
3569	bitmap->pattern_len = __cpu_to_le32(pattern_len);
3570	bitmap->bitmask_len = __cpu_to_le32(pattern_len);
3571	bitmap->pattern_id = __cpu_to_le32(pattern_id);
3572
3573	ptr += sizeof(*tlv);
3574	ptr += sizeof(*bitmap);
3575
3576	/* ipv4 sync */
3577	tlv = ptr;
3578	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3579	tlv->len = __cpu_to_le16(0);
3580
3581	ptr += sizeof(*tlv);
3582
3583	/* ipv6 sync */
3584	tlv = ptr;
3585	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3586	tlv->len = __cpu_to_le16(0);
3587
3588	ptr += sizeof(*tlv);
3589
3590	/* magic */
3591	tlv = ptr;
3592	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3593	tlv->len = __cpu_to_le16(0);
3594
3595	ptr += sizeof(*tlv);
3596
3597	/* pattern info timeout */
3598	tlv = ptr;
3599	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_UINT32);
3600	tlv->len = __cpu_to_le16(0);
3601
3602	ptr += sizeof(*tlv);
3603
3604	/* ratelimit interval */
3605	tlv = ptr;
3606	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_UINT32);
3607	tlv->len = __cpu_to_le16(sizeof(u32));
3608
3609	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv wow add pattern vdev_id %d pattern_id %d, pattern_offset %d\n",
3610		   vdev_id, pattern_id, pattern_offset);
3611	return skb;
3612}
3613
3614static struct sk_buff *
3615ath10k_wmi_tlv_op_gen_wow_del_pattern(struct ath10k *ar, u32 vdev_id,
3616				      u32 pattern_id)
3617{
3618	struct wmi_tlv_wow_del_pattern_cmd *cmd;
3619	struct wmi_tlv *tlv;
3620	struct sk_buff *skb;
3621	size_t len;
3622
3623	len = sizeof(*tlv) + sizeof(*cmd);
3624	skb = ath10k_wmi_alloc_skb(ar, len);
3625	if (!skb)
3626		return ERR_PTR(-ENOMEM);
3627
3628	tlv = (struct wmi_tlv *)skb->data;
3629	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WOW_DEL_PATTERN_CMD);
3630	tlv->len = __cpu_to_le16(sizeof(*cmd));
3631	cmd = (void *)tlv->value;
3632
3633	cmd->vdev_id = __cpu_to_le32(vdev_id);
3634	cmd->pattern_id = __cpu_to_le32(pattern_id);
3635	cmd->pattern_type = __cpu_to_le32(WOW_BITMAP_PATTERN);
3636
3637	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv wow del pattern vdev_id %d pattern_id %d\n",
3638		   vdev_id, pattern_id);
3639	return skb;
3640}
3641
3642/* Request FW to start PNO operation */
3643static struct sk_buff *
3644ath10k_wmi_tlv_op_gen_config_pno_start(struct ath10k *ar,
3645				       u32 vdev_id,
3646				       struct wmi_pno_scan_req *pno)
3647{
3648	struct nlo_configured_parameters *nlo_list;
3649	struct wmi_tlv_wow_nlo_config_cmd *cmd;
3650	struct wmi_tlv *tlv;
3651	struct sk_buff *skb;
3652	__le32 *channel_list;
3653	size_t len;
3654	void *ptr;
3655	u32 i;
3656
3657	len = sizeof(*tlv) + sizeof(*cmd) +
3658	      sizeof(*tlv) +
3659	      /* TLV place holder for array of structures
3660	       * nlo_configured_parameters(nlo_list)
3661	       */
3662	      sizeof(*tlv);
3663	      /* TLV place holder for array of uint32 channel_list */
3664
3665	len += sizeof(u32) * min_t(u8, pno->a_networks[0].channel_count,
3666				   WMI_NLO_MAX_CHAN);
3667	len += sizeof(struct nlo_configured_parameters) *
3668				min_t(u8, pno->uc_networks_count, WMI_NLO_MAX_SSIDS);
3669
3670	skb = ath10k_wmi_alloc_skb(ar, len);
3671	if (!skb)
3672		return ERR_PTR(-ENOMEM);
3673
3674	ptr = (void *)skb->data;
3675	tlv = ptr;
3676	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_NLO_CONFIG_CMD);
3677	tlv->len = __cpu_to_le16(sizeof(*cmd));
3678	cmd = (void *)tlv->value;
3679
3680	/* wmi_tlv_wow_nlo_config_cmd parameters*/
3681	cmd->vdev_id = __cpu_to_le32(pno->vdev_id);
3682	cmd->flags = __cpu_to_le32(WMI_NLO_CONFIG_START | WMI_NLO_CONFIG_SSID_HIDE_EN);
3683
3684	/* current FW does not support min-max range for dwell time */
3685	cmd->active_dwell_time = __cpu_to_le32(pno->active_max_time);
3686	cmd->passive_dwell_time = __cpu_to_le32(pno->passive_max_time);
3687
3688	if (pno->do_passive_scan)
3689		cmd->flags |= __cpu_to_le32(WMI_NLO_CONFIG_SCAN_PASSIVE);
3690
3691	/* copy scan interval */
3692	cmd->fast_scan_period = __cpu_to_le32(pno->fast_scan_period);
3693	cmd->slow_scan_period = __cpu_to_le32(pno->slow_scan_period);
3694	cmd->fast_scan_max_cycles = __cpu_to_le32(pno->fast_scan_max_cycles);
3695	cmd->delay_start_time = __cpu_to_le32(pno->delay_start_time);
3696
3697	if (pno->enable_pno_scan_randomization) {
3698		cmd->flags |= __cpu_to_le32(WMI_NLO_CONFIG_SPOOFED_MAC_IN_PROBE_REQ |
3699				WMI_NLO_CONFIG_RANDOM_SEQ_NO_IN_PROBE_REQ);
3700		ether_addr_copy(cmd->mac_addr.addr, pno->mac_addr);
3701		ether_addr_copy(cmd->mac_mask.addr, pno->mac_addr_mask);
3702	}
3703
3704	ptr += sizeof(*tlv);
3705	ptr += sizeof(*cmd);
3706
3707	/* nlo_configured_parameters(nlo_list) */
3708	cmd->no_of_ssids = __cpu_to_le32(min_t(u8, pno->uc_networks_count,
3709					       WMI_NLO_MAX_SSIDS));
3710
3711	tlv = ptr;
3712	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3713	tlv->len = __cpu_to_le16(len);
3714
3715	ptr += sizeof(*tlv);
3716	nlo_list = ptr;
3717	for (i = 0; i < __le32_to_cpu(cmd->no_of_ssids); i++) {
3718		tlv = (struct wmi_tlv *)(&nlo_list[i].tlv_header);
3719		tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
3720		tlv->len = __cpu_to_le16(sizeof(struct nlo_configured_parameters) -
3721					 sizeof(*tlv));
3722
3723		/* copy ssid and it's length */
3724		nlo_list[i].ssid.valid = __cpu_to_le32(true);
3725		nlo_list[i].ssid.ssid.ssid_len = pno->a_networks[i].ssid.ssid_len;
3726		memcpy(nlo_list[i].ssid.ssid.ssid,
3727		       pno->a_networks[i].ssid.ssid,
3728		       __le32_to_cpu(nlo_list[i].ssid.ssid.ssid_len));
3729
3730		/* copy rssi threshold */
3731		if (pno->a_networks[i].rssi_threshold &&
3732		    pno->a_networks[i].rssi_threshold > -300) {
3733			nlo_list[i].rssi_cond.valid = __cpu_to_le32(true);
3734			nlo_list[i].rssi_cond.rssi =
3735				__cpu_to_le32(pno->a_networks[i].rssi_threshold);
3736		}
3737
3738		nlo_list[i].bcast_nw_type.valid = __cpu_to_le32(true);
3739		nlo_list[i].bcast_nw_type.bcast_nw_type =
3740			__cpu_to_le32(pno->a_networks[i].bcast_nw_type);
3741	}
3742
3743	ptr += __le32_to_cpu(cmd->no_of_ssids) * sizeof(struct nlo_configured_parameters);
3744
3745	/* copy channel info */
3746	cmd->num_of_channels = __cpu_to_le32(min_t(u8,
3747						   pno->a_networks[0].channel_count,
3748						   WMI_NLO_MAX_CHAN));
3749
3750	tlv = ptr;
3751	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_UINT32);
3752	tlv->len = __cpu_to_le16(__le32_to_cpu(cmd->num_of_channels) *
3753				 sizeof(u_int32_t));
3754	ptr += sizeof(*tlv);
3755
3756	channel_list = (__le32 *)ptr;
3757	for (i = 0; i < __le32_to_cpu(cmd->num_of_channels); i++)
3758		channel_list[i] = __cpu_to_le32(pno->a_networks[0].channels[i]);
3759
3760	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv start pno config vdev_id %d\n",
3761		   vdev_id);
3762
3763	return skb;
3764}
3765
3766/* Request FW to stop ongoing PNO operation */
3767static struct sk_buff *ath10k_wmi_tlv_op_gen_config_pno_stop(struct ath10k *ar,
3768							     u32 vdev_id)
3769{
3770	struct wmi_tlv_wow_nlo_config_cmd *cmd;
3771	struct wmi_tlv *tlv;
3772	struct sk_buff *skb;
3773	void *ptr;
3774	size_t len;
3775
3776	len = sizeof(*tlv) + sizeof(*cmd) +
3777	      sizeof(*tlv) +
3778	      /* TLV place holder for array of structures
3779	       * nlo_configured_parameters(nlo_list)
3780	       */
3781	      sizeof(*tlv);
3782	      /* TLV place holder for array of uint32 channel_list */
3783	skb = ath10k_wmi_alloc_skb(ar, len);
3784	if (!skb)
3785		return ERR_PTR(-ENOMEM);
3786
3787	ptr = (void *)skb->data;
3788	tlv = ptr;
3789	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_NLO_CONFIG_CMD);
3790	tlv->len = __cpu_to_le16(sizeof(*cmd));
3791	cmd = (void *)tlv->value;
3792
3793	cmd->vdev_id = __cpu_to_le32(vdev_id);
3794	cmd->flags = __cpu_to_le32(WMI_NLO_CONFIG_STOP);
3795
3796	ptr += sizeof(*tlv);
3797	ptr += sizeof(*cmd);
3798
3799	/* nlo_configured_parameters(nlo_list) */
3800	tlv = ptr;
3801	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3802	tlv->len = __cpu_to_le16(0);
3803
3804	ptr += sizeof(*tlv);
3805
3806	/* channel list */
3807	tlv = ptr;
3808	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_UINT32);
3809	tlv->len = __cpu_to_le16(0);
3810
3811	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv stop pno config vdev_id %d\n", vdev_id);
3812	return skb;
3813}
3814
3815static struct sk_buff *
3816ath10k_wmi_tlv_op_gen_config_pno(struct ath10k *ar, u32 vdev_id,
3817				 struct wmi_pno_scan_req *pno_scan)
3818{
3819	if (pno_scan->enable)
3820		return ath10k_wmi_tlv_op_gen_config_pno_start(ar, vdev_id, pno_scan);
3821	else
3822		return ath10k_wmi_tlv_op_gen_config_pno_stop(ar, vdev_id);
3823}
3824
3825static struct sk_buff *
3826ath10k_wmi_tlv_op_gen_adaptive_qcs(struct ath10k *ar, bool enable)
3827{
3828	struct wmi_tlv_adaptive_qcs *cmd;
3829	struct wmi_tlv *tlv;
3830	struct sk_buff *skb;
3831	void *ptr;
3832	size_t len;
3833
3834	len = sizeof(*tlv) + sizeof(*cmd);
3835	skb = ath10k_wmi_alloc_skb(ar, len);
3836	if (!skb)
3837		return ERR_PTR(-ENOMEM);
3838
3839	ptr = (void *)skb->data;
3840	tlv = ptr;
3841	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_RESMGR_ADAPTIVE_OCS_CMD);
3842	tlv->len = __cpu_to_le16(sizeof(*cmd));
3843	cmd = (void *)tlv->value;
3844	cmd->enable = __cpu_to_le32(enable ? 1 : 0);
3845
3846	ptr += sizeof(*tlv);
3847	ptr += sizeof(*cmd);
3848
3849	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv adaptive qcs %d\n", enable);
3850	return skb;
3851}
3852
3853static struct sk_buff *
3854ath10k_wmi_tlv_op_gen_echo(struct ath10k *ar, u32 value)
3855{
3856	struct wmi_echo_cmd *cmd;
3857	struct wmi_tlv *tlv;
3858	struct sk_buff *skb;
3859	void *ptr;
3860	size_t len;
3861
3862	len = sizeof(*tlv) + sizeof(*cmd);
3863	skb = ath10k_wmi_alloc_skb(ar, len);
3864	if (!skb)
3865		return ERR_PTR(-ENOMEM);
3866
3867	ptr = (void *)skb->data;
3868	tlv = ptr;
3869	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_ECHO_CMD);
3870	tlv->len = __cpu_to_le16(sizeof(*cmd));
3871	cmd = (void *)tlv->value;
3872	cmd->value = cpu_to_le32(value);
3873
3874	ptr += sizeof(*tlv);
3875	ptr += sizeof(*cmd);
3876
3877	ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv echo value 0x%08x\n", value);
3878	return skb;
3879}
3880
3881static struct sk_buff *
3882ath10k_wmi_tlv_op_gen_vdev_spectral_conf(struct ath10k *ar,
3883					 const struct wmi_vdev_spectral_conf_arg *arg)
3884{
3885	struct wmi_vdev_spectral_conf_cmd *cmd;
3886	struct sk_buff *skb;
3887	struct wmi_tlv *tlv;
3888	void *ptr;
3889	size_t len;
3890
3891	len = sizeof(*tlv) + sizeof(*cmd);
3892	skb = ath10k_wmi_alloc_skb(ar, len);
3893	if (!skb)
3894		return ERR_PTR(-ENOMEM);
3895
3896	ptr = (void *)skb->data;
3897	tlv = ptr;
3898	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_SPECTRAL_CONFIGURE_CMD);
3899	tlv->len = __cpu_to_le16(sizeof(*cmd));
3900	cmd = (void *)tlv->value;
3901	cmd->vdev_id = __cpu_to_le32(arg->vdev_id);
3902	cmd->scan_count = __cpu_to_le32(arg->scan_count);
3903	cmd->scan_period = __cpu_to_le32(arg->scan_period);
3904	cmd->scan_priority = __cpu_to_le32(arg->scan_priority);
3905	cmd->scan_fft_size = __cpu_to_le32(arg->scan_fft_size);
3906	cmd->scan_gc_ena = __cpu_to_le32(arg->scan_gc_ena);
3907	cmd->scan_restart_ena = __cpu_to_le32(arg->scan_restart_ena);
3908	cmd->scan_noise_floor_ref = __cpu_to_le32(arg->scan_noise_floor_ref);
3909	cmd->scan_init_delay = __cpu_to_le32(arg->scan_init_delay);
3910	cmd->scan_nb_tone_thr = __cpu_to_le32(arg->scan_nb_tone_thr);
3911	cmd->scan_str_bin_thr = __cpu_to_le32(arg->scan_str_bin_thr);
3912	cmd->scan_wb_rpt_mode = __cpu_to_le32(arg->scan_wb_rpt_mode);
3913	cmd->scan_rssi_rpt_mode = __cpu_to_le32(arg->scan_rssi_rpt_mode);
3914	cmd->scan_rssi_thr = __cpu_to_le32(arg->scan_rssi_thr);
3915	cmd->scan_pwr_format = __cpu_to_le32(arg->scan_pwr_format);
3916	cmd->scan_rpt_mode = __cpu_to_le32(arg->scan_rpt_mode);
3917	cmd->scan_bin_scale = __cpu_to_le32(arg->scan_bin_scale);
3918	cmd->scan_dbm_adj = __cpu_to_le32(arg->scan_dbm_adj);
3919	cmd->scan_chn_mask = __cpu_to_le32(arg->scan_chn_mask);
3920
3921	return skb;
3922}
3923
3924static struct sk_buff *
3925ath10k_wmi_tlv_op_gen_vdev_spectral_enable(struct ath10k *ar, u32 vdev_id,
3926					   u32 trigger, u32 enable)
3927{
3928	struct wmi_vdev_spectral_enable_cmd *cmd;
3929	struct sk_buff *skb;
3930	struct wmi_tlv *tlv;
3931	void *ptr;
3932	size_t len;
3933
3934	len = sizeof(*tlv) + sizeof(*cmd);
3935	skb = ath10k_wmi_alloc_skb(ar, len);
3936	if (!skb)
3937		return ERR_PTR(-ENOMEM);
3938
3939	ptr = (void *)skb->data;
3940	tlv = ptr;
3941	tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_SPECTRAL_ENABLE_CMD);
3942	tlv->len = __cpu_to_le16(sizeof(*cmd));
3943	cmd = (void *)tlv->value;
3944	cmd->vdev_id = __cpu_to_le32(vdev_id);
3945	cmd->trigger_cmd = __cpu_to_le32(trigger);
3946	cmd->enable_cmd = __cpu_to_le32(enable);
3947
3948	return skb;
3949}
3950
3951/****************/
3952/* TLV mappings */
3953/****************/
3954
3955static struct wmi_cmd_map wmi_tlv_cmd_map = {
3956	.init_cmdid = WMI_TLV_INIT_CMDID,
3957	.start_scan_cmdid = WMI_TLV_START_SCAN_CMDID,
3958	.stop_scan_cmdid = WMI_TLV_STOP_SCAN_CMDID,
3959	.scan_chan_list_cmdid = WMI_TLV_SCAN_CHAN_LIST_CMDID,
3960	.scan_sch_prio_tbl_cmdid = WMI_TLV_SCAN_SCH_PRIO_TBL_CMDID,
3961	.scan_prob_req_oui_cmdid = WMI_TLV_SCAN_PROB_REQ_OUI_CMDID,
3962	.pdev_set_regdomain_cmdid = WMI_TLV_PDEV_SET_REGDOMAIN_CMDID,
3963	.pdev_set_channel_cmdid = WMI_TLV_PDEV_SET_CHANNEL_CMDID,
3964	.pdev_set_param_cmdid = WMI_TLV_PDEV_SET_PARAM_CMDID,
3965	.pdev_pktlog_enable_cmdid = WMI_TLV_PDEV_PKTLOG_ENABLE_CMDID,
3966	.pdev_pktlog_disable_cmdid = WMI_TLV_PDEV_PKTLOG_DISABLE_CMDID,
3967	.pdev_set_wmm_params_cmdid = WMI_TLV_PDEV_SET_WMM_PARAMS_CMDID,
3968	.pdev_set_ht_cap_ie_cmdid = WMI_TLV_PDEV_SET_HT_CAP_IE_CMDID,
3969	.pdev_set_vht_cap_ie_cmdid = WMI_TLV_PDEV_SET_VHT_CAP_IE_CMDID,
3970	.pdev_set_dscp_tid_map_cmdid = WMI_TLV_PDEV_SET_DSCP_TID_MAP_CMDID,
3971	.pdev_set_quiet_mode_cmdid = WMI_TLV_PDEV_SET_QUIET_MODE_CMDID,
3972	.pdev_green_ap_ps_enable_cmdid = WMI_TLV_PDEV_GREEN_AP_PS_ENABLE_CMDID,
3973	.pdev_get_tpc_config_cmdid = WMI_TLV_PDEV_GET_TPC_CONFIG_CMDID,
3974	.pdev_set_base_macaddr_cmdid = WMI_TLV_PDEV_SET_BASE_MACADDR_CMDID,
3975	.vdev_create_cmdid = WMI_TLV_VDEV_CREATE_CMDID,
3976	.vdev_delete_cmdid = WMI_TLV_VDEV_DELETE_CMDID,
3977	.vdev_start_request_cmdid = WMI_TLV_VDEV_START_REQUEST_CMDID,
3978	.vdev_restart_request_cmdid = WMI_TLV_VDEV_RESTART_REQUEST_CMDID,
3979	.vdev_up_cmdid = WMI_TLV_VDEV_UP_CMDID,
3980	.vdev_stop_cmdid = WMI_TLV_VDEV_STOP_CMDID,
3981	.vdev_down_cmdid = WMI_TLV_VDEV_DOWN_CMDID,
3982	.vdev_set_param_cmdid = WMI_TLV_VDEV_SET_PARAM_CMDID,
3983	.vdev_install_key_cmdid = WMI_TLV_VDEV_INSTALL_KEY_CMDID,
3984	.peer_create_cmdid = WMI_TLV_PEER_CREATE_CMDID,
3985	.peer_delete_cmdid = WMI_TLV_PEER_DELETE_CMDID,
3986	.peer_flush_tids_cmdid = WMI_TLV_PEER_FLUSH_TIDS_CMDID,
3987	.peer_set_param_cmdid = WMI_TLV_PEER_SET_PARAM_CMDID,
3988	.peer_assoc_cmdid = WMI_TLV_PEER_ASSOC_CMDID,
3989	.peer_add_wds_entry_cmdid = WMI_TLV_PEER_ADD_WDS_ENTRY_CMDID,
3990	.peer_remove_wds_entry_cmdid = WMI_TLV_PEER_REMOVE_WDS_ENTRY_CMDID,
3991	.peer_mcast_group_cmdid = WMI_TLV_PEER_MCAST_GROUP_CMDID,
3992	.bcn_tx_cmdid = WMI_TLV_BCN_TX_CMDID,
3993	.pdev_send_bcn_cmdid = WMI_TLV_PDEV_SEND_BCN_CMDID,
3994	.bcn_tmpl_cmdid = WMI_TLV_BCN_TMPL_CMDID,
3995	.bcn_filter_rx_cmdid = WMI_TLV_BCN_FILTER_RX_CMDID,
3996	.prb_req_filter_rx_cmdid = WMI_TLV_PRB_REQ_FILTER_RX_CMDID,
3997	.mgmt_tx_cmdid = WMI_TLV_MGMT_TX_CMDID,
3998	.mgmt_tx_send_cmdid = WMI_TLV_MGMT_TX_SEND_CMD,
3999	.prb_tmpl_cmdid = WMI_TLV_PRB_TMPL_CMDID,
4000	.addba_clear_resp_cmdid = WMI_TLV_ADDBA_CLEAR_RESP_CMDID,
4001	.addba_send_cmdid = WMI_TLV_ADDBA_SEND_CMDID,
4002	.addba_status_cmdid = WMI_TLV_ADDBA_STATUS_CMDID,
4003	.delba_send_cmdid = WMI_TLV_DELBA_SEND_CMDID,
4004	.addba_set_resp_cmdid = WMI_TLV_ADDBA_SET_RESP_CMDID,
4005	.send_singleamsdu_cmdid = WMI_TLV_SEND_SINGLEAMSDU_CMDID,
4006	.sta_powersave_mode_cmdid = WMI_TLV_STA_POWERSAVE_MODE_CMDID,
4007	.sta_powersave_param_cmdid = WMI_TLV_STA_POWERSAVE_PARAM_CMDID,
4008	.sta_mimo_ps_mode_cmdid = WMI_TLV_STA_MIMO_PS_MODE_CMDID,
4009	.pdev_dfs_enable_cmdid = WMI_TLV_PDEV_DFS_ENABLE_CMDID,
4010	.pdev_dfs_disable_cmdid = WMI_TLV_PDEV_DFS_DISABLE_CMDID,
4011	.roam_scan_mode = WMI_TLV_ROAM_SCAN_MODE,
4012	.roam_scan_rssi_threshold = WMI_TLV_ROAM_SCAN_RSSI_THRESHOLD,
4013	.roam_scan_period = WMI_TLV_ROAM_SCAN_PERIOD,
4014	.roam_scan_rssi_change_threshold =
4015				WMI_TLV_ROAM_SCAN_RSSI_CHANGE_THRESHOLD,
4016	.roam_ap_profile = WMI_TLV_ROAM_AP_PROFILE,
4017	.ofl_scan_add_ap_profile = WMI_TLV_ROAM_AP_PROFILE,
4018	.ofl_scan_remove_ap_profile = WMI_TLV_OFL_SCAN_REMOVE_AP_PROFILE,
4019	.ofl_scan_period = WMI_TLV_OFL_SCAN_PERIOD,
4020	.p2p_dev_set_device_info = WMI_TLV_P2P_DEV_SET_DEVICE_INFO,
4021	.p2p_dev_set_discoverability = WMI_TLV_P2P_DEV_SET_DISCOVERABILITY,
4022	.p2p_go_set_beacon_ie = WMI_TLV_P2P_GO_SET_BEACON_IE,
4023	.p2p_go_set_probe_resp_ie = WMI_TLV_P2P_GO_SET_PROBE_RESP_IE,
4024	.p2p_set_vendor_ie_data_cmdid = WMI_TLV_P2P_SET_VENDOR_IE_DATA_CMDID,
4025	.ap_ps_peer_param_cmdid = WMI_TLV_AP_PS_PEER_PARAM_CMDID,
4026	.ap_ps_peer_uapsd_coex_cmdid = WMI_TLV_AP_PS_PEER_UAPSD_COEX_CMDID,
4027	.peer_rate_retry_sched_cmdid = WMI_TLV_PEER_RATE_RETRY_SCHED_CMDID,
4028	.wlan_profile_trigger_cmdid = WMI_TLV_WLAN_PROFILE_TRIGGER_CMDID,
4029	.wlan_profile_set_hist_intvl_cmdid =
4030				WMI_TLV_WLAN_PROFILE_SET_HIST_INTVL_CMDID,
4031	.wlan_profile_get_profile_data_cmdid =
4032				WMI_TLV_WLAN_PROFILE_GET_PROFILE_DATA_CMDID,
4033	.wlan_profile_enable_profile_id_cmdid =
4034				WMI_TLV_WLAN_PROFILE_ENABLE_PROFILE_ID_CMDID,
4035	.wlan_profile_list_profile_id_cmdid =
4036				WMI_TLV_WLAN_PROFILE_LIST_PROFILE_ID_CMDID,
4037	.pdev_suspend_cmdid = WMI_TLV_PDEV_SUSPEND_CMDID,
4038	.pdev_resume_cmdid = WMI_TLV_PDEV_RESUME_CMDID,
4039	.add_bcn_filter_cmdid = WMI_TLV_ADD_BCN_FILTER_CMDID,
4040	.rmv_bcn_filter_cmdid = WMI_TLV_RMV_BCN_FILTER_CMDID,
4041	.wow_add_wake_pattern_cmdid = WMI_TLV_WOW_ADD_WAKE_PATTERN_CMDID,
4042	.wow_del_wake_pattern_cmdid = WMI_TLV_WOW_DEL_WAKE_PATTERN_CMDID,
4043	.wow_enable_disable_wake_event_cmdid =
4044				WMI_TLV_WOW_ENABLE_DISABLE_WAKE_EVENT_CMDID,
4045	.wow_enable_cmdid = WMI_TLV_WOW_ENABLE_CMDID,
4046	.wow_hostwakeup_from_sleep_cmdid =
4047				WMI_TLV_WOW_HOSTWAKEUP_FROM_SLEEP_CMDID,
4048	.rtt_measreq_cmdid = WMI_TLV_RTT_MEASREQ_CMDID,
4049	.rtt_tsf_cmdid = WMI_TLV_RTT_TSF_CMDID,
4050	.vdev_spectral_scan_configure_cmdid = WMI_TLV_SPECTRAL_SCAN_CONF_CMDID,
4051	.vdev_spectral_scan_enable_cmdid = WMI_TLV_SPECTRAL_SCAN_ENABLE_CMDID,
4052	.request_stats_cmdid = WMI_TLV_REQUEST_STATS_CMDID,
4053	.set_arp_ns_offload_cmdid = WMI_TLV_SET_ARP_NS_OFFLOAD_CMDID,
4054	.network_list_offload_config_cmdid =
4055				WMI_TLV_NETWORK_LIST_OFFLOAD_CONFIG_CMDID,
4056	.gtk_offload_cmdid = WMI_TLV_GTK_OFFLOAD_CMDID,
4057	.csa_offload_enable_cmdid = WMI_TLV_CSA_OFFLOAD_ENABLE_CMDID,
4058	.csa_offload_chanswitch_cmdid = WMI_TLV_CSA_OFFLOAD_CHANSWITCH_CMDID,
4059	.chatter_set_mode_cmdid = WMI_TLV_CHATTER_SET_MODE_CMDID,
4060	.peer_tid_addba_cmdid = WMI_TLV_PEER_TID_ADDBA_CMDID,
4061	.peer_tid_delba_cmdid = WMI_TLV_PEER_TID_DELBA_CMDID,
4062	.sta_dtim_ps_method_cmdid = WMI_TLV_STA_DTIM_PS_METHOD_CMDID,
4063	.sta_uapsd_auto_trig_cmdid = WMI_TLV_STA_UAPSD_AUTO_TRIG_CMDID,
4064	.sta_keepalive_cmd = WMI_TLV_STA_KEEPALIVE_CMDID,
4065	.echo_cmdid = WMI_TLV_ECHO_CMDID,
4066	.pdev_utf_cmdid = WMI_TLV_PDEV_UTF_CMDID,
4067	.dbglog_cfg_cmdid = WMI_TLV_DBGLOG_CFG_CMDID,
4068	.pdev_qvit_cmdid = WMI_TLV_PDEV_QVIT_CMDID,
4069	.pdev_ftm_intg_cmdid = WMI_TLV_PDEV_FTM_INTG_CMDID,
4070	.vdev_set_keepalive_cmdid = WMI_TLV_VDEV_SET_KEEPALIVE_CMDID,
4071	.vdev_get_keepalive_cmdid = WMI_TLV_VDEV_GET_KEEPALIVE_CMDID,
4072	.force_fw_hang_cmdid = WMI_TLV_FORCE_FW_HANG_CMDID,
4073	.gpio_config_cmdid = WMI_TLV_GPIO_CONFIG_CMDID,
4074	.gpio_output_cmdid = WMI_TLV_GPIO_OUTPUT_CMDID,
4075	.pdev_get_temperature_cmdid = WMI_TLV_PDEV_GET_TEMPERATURE_CMDID,
4076	.vdev_set_wmm_params_cmdid = WMI_TLV_VDEV_SET_WMM_PARAMS_CMDID,
4077	.tdls_set_state_cmdid = WMI_TLV_TDLS_SET_STATE_CMDID,
4078	.tdls_peer_update_cmdid = WMI_TLV_TDLS_PEER_UPDATE_CMDID,
4079	.adaptive_qcs_cmdid = WMI_TLV_RESMGR_ADAPTIVE_OCS_CMDID,
4080	.scan_update_request_cmdid = WMI_CMD_UNSUPPORTED,
4081	.vdev_standby_response_cmdid = WMI_CMD_UNSUPPORTED,
4082	.vdev_resume_response_cmdid = WMI_CMD_UNSUPPORTED,
4083	.wlan_peer_caching_add_peer_cmdid = WMI_CMD_UNSUPPORTED,
4084	.wlan_peer_caching_evict_peer_cmdid = WMI_CMD_UNSUPPORTED,
4085	.wlan_peer_caching_restore_peer_cmdid = WMI_CMD_UNSUPPORTED,
4086	.wlan_peer_caching_print_all_peers_info_cmdid = WMI_CMD_UNSUPPORTED,
4087	.peer_update_wds_entry_cmdid = WMI_CMD_UNSUPPORTED,
4088	.peer_add_proxy_sta_entry_cmdid = WMI_CMD_UNSUPPORTED,
4089	.rtt_keepalive_cmdid = WMI_CMD_UNSUPPORTED,
4090	.oem_req_cmdid = WMI_CMD_UNSUPPORTED,
4091	.nan_cmdid = WMI_CMD_UNSUPPORTED,
4092	.vdev_ratemask_cmdid = WMI_CMD_UNSUPPORTED,
4093	.qboost_cfg_cmdid = WMI_CMD_UNSUPPORTED,
4094	.pdev_smart_ant_enable_cmdid = WMI_CMD_UNSUPPORTED,
4095	.pdev_smart_ant_set_rx_antenna_cmdid = WMI_CMD_UNSUPPORTED,
4096	.peer_smart_ant_set_tx_antenna_cmdid = WMI_CMD_UNSUPPORTED,
4097	.peer_smart_ant_set_train_info_cmdid = WMI_CMD_UNSUPPORTED,
4098	.peer_smart_ant_set_node_config_ops_cmdid = WMI_CMD_UNSUPPORTED,
4099	.pdev_set_antenna_switch_table_cmdid = WMI_CMD_UNSUPPORTED,
4100	.pdev_set_ctl_table_cmdid = WMI_CMD_UNSUPPORTED,
4101	.pdev_set_mimogain_table_cmdid = WMI_CMD_UNSUPPORTED,
4102	.pdev_ratepwr_table_cmdid = WMI_CMD_UNSUPPORTED,
4103	.pdev_ratepwr_chainmsk_table_cmdid = WMI_CMD_UNSUPPORTED,
4104	.pdev_fips_cmdid = WMI_CMD_UNSUPPORTED,
4105	.tt_set_conf_cmdid = WMI_CMD_UNSUPPORTED,
4106	.fwtest_cmdid = WMI_CMD_UNSUPPORTED,
4107	.vdev_atf_request_cmdid = WMI_CMD_UNSUPPORTED,
4108	.peer_atf_request_cmdid = WMI_CMD_UNSUPPORTED,
4109	.pdev_get_ani_cck_config_cmdid = WMI_CMD_UNSUPPORTED,
4110	.pdev_get_ani_ofdm_config_cmdid = WMI_CMD_UNSUPPORTED,
4111	.pdev_reserve_ast_entry_cmdid = WMI_CMD_UNSUPPORTED,
4112};
4113
4114static struct wmi_pdev_param_map wmi_tlv_pdev_param_map = {
4115	.tx_chain_mask = WMI_TLV_PDEV_PARAM_TX_CHAIN_MASK,
4116	.rx_chain_mask = WMI_TLV_PDEV_PARAM_RX_CHAIN_MASK,
4117	.txpower_limit2g = WMI_TLV_PDEV_PARAM_TXPOWER_LIMIT2G,
4118	.txpower_limit5g = WMI_TLV_PDEV_PARAM_TXPOWER_LIMIT5G,
4119	.txpower_scale = WMI_TLV_PDEV_PARAM_TXPOWER_SCALE,
4120	.beacon_gen_mode = WMI_TLV_PDEV_PARAM_BEACON_GEN_MODE,
4121	.beacon_tx_mode = WMI_TLV_PDEV_PARAM_BEACON_TX_MODE,
4122	.resmgr_offchan_mode = WMI_TLV_PDEV_PARAM_RESMGR_OFFCHAN_MODE,
4123	.protection_mode = WMI_TLV_PDEV_PARAM_PROTECTION_MODE,
4124	.dynamic_bw = WMI_TLV_PDEV_PARAM_DYNAMIC_BW,
4125	.non_agg_sw_retry_th = WMI_TLV_PDEV_PARAM_NON_AGG_SW_RETRY_TH,
4126	.agg_sw_retry_th = WMI_TLV_PDEV_PARAM_AGG_SW_RETRY_TH,
4127	.sta_kickout_th = WMI_TLV_PDEV_PARAM_STA_KICKOUT_TH,
4128	.ac_aggrsize_scaling = WMI_TLV_PDEV_PARAM_AC_AGGRSIZE_SCALING,
4129	.ltr_enable = WMI_TLV_PDEV_PARAM_LTR_ENABLE,
4130	.ltr_ac_latency_be = WMI_TLV_PDEV_PARAM_LTR_AC_LATENCY_BE,
4131	.ltr_ac_latency_bk = WMI_TLV_PDEV_PARAM_LTR_AC_LATENCY_BK,
4132	.ltr_ac_latency_vi = WMI_TLV_PDEV_PARAM_LTR_AC_LATENCY_VI,
4133	.ltr_ac_latency_vo = WMI_TLV_PDEV_PARAM_LTR_AC_LATENCY_VO,
4134	.ltr_ac_latency_timeout = WMI_TLV_PDEV_PARAM_LTR_AC_LATENCY_TIMEOUT,
4135	.ltr_sleep_override = WMI_TLV_PDEV_PARAM_LTR_SLEEP_OVERRIDE,
4136	.ltr_rx_override = WMI_TLV_PDEV_PARAM_LTR_RX_OVERRIDE,
4137	.ltr_tx_activity_timeout = WMI_TLV_PDEV_PARAM_LTR_TX_ACTIVITY_TIMEOUT,
4138	.l1ss_enable = WMI_TLV_PDEV_PARAM_L1SS_ENABLE,
4139	.dsleep_enable = WMI_TLV_PDEV_PARAM_DSLEEP_ENABLE,
4140	.pcielp_txbuf_flush = WMI_TLV_PDEV_PARAM_PCIELP_TXBUF_FLUSH,
4141	.pcielp_txbuf_watermark = WMI_TLV_PDEV_PARAM_PCIELP_TXBUF_TMO_EN,
4142	.pcielp_txbuf_tmo_en = WMI_TLV_PDEV_PARAM_PCIELP_TXBUF_TMO_EN,
4143	.pcielp_txbuf_tmo_value = WMI_TLV_PDEV_PARAM_PCIELP_TXBUF_TMO_VALUE,
4144	.pdev_stats_update_period = WMI_TLV_PDEV_PARAM_PDEV_STATS_UPDATE_PERIOD,
4145	.vdev_stats_update_period = WMI_TLV_PDEV_PARAM_VDEV_STATS_UPDATE_PERIOD,
4146	.peer_stats_update_period = WMI_TLV_PDEV_PARAM_PEER_STATS_UPDATE_PERIOD,
4147	.bcnflt_stats_update_period =
4148				WMI_TLV_PDEV_PARAM_BCNFLT_STATS_UPDATE_PERIOD,
4149	.pmf_qos = WMI_TLV_PDEV_PARAM_PMF_QOS,
4150	.arp_ac_override = WMI_TLV_PDEV_PARAM_ARP_AC_OVERRIDE,
4151	.dcs = WMI_TLV_PDEV_PARAM_DCS,
4152	.ani_enable = WMI_TLV_PDEV_PARAM_ANI_ENABLE,
4153	.ani_poll_period = WMI_TLV_PDEV_PARAM_ANI_POLL_PERIOD,
4154	.ani_listen_period = WMI_TLV_PDEV_PARAM_ANI_LISTEN_PERIOD,
4155	.ani_ofdm_level = WMI_TLV_PDEV_PARAM_ANI_OFDM_LEVEL,
4156	.ani_cck_level = WMI_TLV_PDEV_PARAM_ANI_CCK_LEVEL,
4157	.dyntxchain = WMI_TLV_PDEV_PARAM_DYNTXCHAIN,
4158	.proxy_sta = WMI_TLV_PDEV_PARAM_PROXY_STA,
4159	.idle_ps_config = WMI_TLV_PDEV_PARAM_IDLE_PS_CONFIG,
4160	.power_gating_sleep = WMI_TLV_PDEV_PARAM_POWER_GATING_SLEEP,
4161	.fast_channel_reset = WMI_TLV_PDEV_PARAM_UNSUPPORTED,
4162	.burst_dur = WMI_TLV_PDEV_PARAM_BURST_DUR,
4163	.burst_enable = WMI_TLV_PDEV_PARAM_BURST_ENABLE,
4164	.cal_period = WMI_PDEV_PARAM_UNSUPPORTED,
4165	.aggr_burst = WMI_PDEV_PARAM_UNSUPPORTED,
4166	.rx_decap_mode = WMI_PDEV_PARAM_UNSUPPORTED,
4167	.smart_antenna_default_antenna = WMI_PDEV_PARAM_UNSUPPORTED,
4168	.igmpmld_override = WMI_PDEV_PARAM_UNSUPPORTED,
4169	.igmpmld_tid = WMI_PDEV_PARAM_UNSUPPORTED,
4170	.antenna_gain = WMI_PDEV_PARAM_UNSUPPORTED,
4171	.rx_filter = WMI_PDEV_PARAM_UNSUPPORTED,
4172	.set_mcast_to_ucast_tid = WMI_PDEV_PARAM_UNSUPPORTED,
4173	.proxy_sta_mode = WMI_PDEV_PARAM_UNSUPPORTED,
4174	.set_mcast2ucast_mode = WMI_PDEV_PARAM_UNSUPPORTED,
4175	.set_mcast2ucast_buffer = WMI_PDEV_PARAM_UNSUPPORTED,
4176	.remove_mcast2ucast_buffer = WMI_PDEV_PARAM_UNSUPPORTED,
4177	.peer_sta_ps_statechg_enable = WMI_PDEV_PARAM_UNSUPPORTED,
4178	.igmpmld_ac_override = WMI_PDEV_PARAM_UNSUPPORTED,
4179	.block_interbss = WMI_PDEV_PARAM_UNSUPPORTED,
4180	.set_disable_reset_cmdid = WMI_PDEV_PARAM_UNSUPPORTED,
4181	.set_msdu_ttl_cmdid = WMI_PDEV_PARAM_UNSUPPORTED,
4182	.set_ppdu_duration_cmdid = WMI_PDEV_PARAM_UNSUPPORTED,
4183	.txbf_sound_period_cmdid = WMI_PDEV_PARAM_UNSUPPORTED,
4184	.set_promisc_mode_cmdid = WMI_PDEV_PARAM_UNSUPPORTED,
4185	.set_burst_mode_cmdid = WMI_PDEV_PARAM_UNSUPPORTED,
4186	.en_stats = WMI_PDEV_PARAM_UNSUPPORTED,
4187	.mu_group_policy = WMI_PDEV_PARAM_UNSUPPORTED,
4188	.noise_detection = WMI_PDEV_PARAM_UNSUPPORTED,
4189	.noise_threshold = WMI_PDEV_PARAM_UNSUPPORTED,
4190	.dpd_enable = WMI_PDEV_PARAM_UNSUPPORTED,
4191	.set_mcast_bcast_echo = WMI_PDEV_PARAM_UNSUPPORTED,
4192	.atf_strict_sch = WMI_PDEV_PARAM_UNSUPPORTED,
4193	.atf_sched_duration = WMI_PDEV_PARAM_UNSUPPORTED,
4194	.ant_plzn = WMI_PDEV_PARAM_UNSUPPORTED,
4195	.mgmt_retry_limit = WMI_PDEV_PARAM_UNSUPPORTED,
4196	.sensitivity_level = WMI_PDEV_PARAM_UNSUPPORTED,
4197	.signed_txpower_2g = WMI_PDEV_PARAM_UNSUPPORTED,
4198	.signed_txpower_5g = WMI_PDEV_PARAM_UNSUPPORTED,
4199	.enable_per_tid_amsdu = WMI_PDEV_PARAM_UNSUPPORTED,
4200	.enable_per_tid_ampdu = WMI_PDEV_PARAM_UNSUPPORTED,
4201	.cca_threshold = WMI_PDEV_PARAM_UNSUPPORTED,
4202	.rts_fixed_rate = WMI_PDEV_PARAM_UNSUPPORTED,
4203	.pdev_reset = WMI_PDEV_PARAM_UNSUPPORTED,
4204	.wapi_mbssid_offset = WMI_PDEV_PARAM_UNSUPPORTED,
4205	.arp_srcaddr = WMI_PDEV_PARAM_UNSUPPORTED,
4206	.arp_dstaddr = WMI_PDEV_PARAM_UNSUPPORTED,
4207};
4208
4209static struct wmi_vdev_param_map wmi_tlv_vdev_param_map = {
4210	.rts_threshold = WMI_TLV_VDEV_PARAM_RTS_THRESHOLD,
4211	.fragmentation_threshold = WMI_TLV_VDEV_PARAM_FRAGMENTATION_THRESHOLD,
4212	.beacon_interval = WMI_TLV_VDEV_PARAM_BEACON_INTERVAL,
4213	.listen_interval = WMI_TLV_VDEV_PARAM_LISTEN_INTERVAL,
4214	.multicast_rate = WMI_TLV_VDEV_PARAM_MULTICAST_RATE,
4215	.mgmt_tx_rate = WMI_TLV_VDEV_PARAM_MGMT_TX_RATE,
4216	.slot_time = WMI_TLV_VDEV_PARAM_SLOT_TIME,
4217	.preamble = WMI_TLV_VDEV_PARAM_PREAMBLE,
4218	.swba_time = WMI_TLV_VDEV_PARAM_SWBA_TIME,
4219	.wmi_vdev_stats_update_period = WMI_TLV_VDEV_STATS_UPDATE_PERIOD,
4220	.wmi_vdev_pwrsave_ageout_time = WMI_TLV_VDEV_PWRSAVE_AGEOUT_TIME,
4221	.wmi_vdev_host_swba_interval = WMI_TLV_VDEV_HOST_SWBA_INTERVAL,
4222	.dtim_period = WMI_TLV_VDEV_PARAM_DTIM_PERIOD,
4223	.wmi_vdev_oc_scheduler_air_time_limit =
4224				WMI_TLV_VDEV_OC_SCHEDULER_AIR_TIME_LIMIT,
4225	.wds = WMI_TLV_VDEV_PARAM_WDS,
4226	.atim_window = WMI_TLV_VDEV_PARAM_ATIM_WINDOW,
4227	.bmiss_count_max = WMI_TLV_VDEV_PARAM_BMISS_COUNT_MAX,
4228	.bmiss_first_bcnt = WMI_TLV_VDEV_PARAM_BMISS_FIRST_BCNT,
4229	.bmiss_final_bcnt = WMI_TLV_VDEV_PARAM_BMISS_FINAL_BCNT,
4230	.feature_wmm = WMI_TLV_VDEV_PARAM_FEATURE_WMM,
4231	.chwidth = WMI_TLV_VDEV_PARAM_CHWIDTH,
4232	.chextoffset = WMI_TLV_VDEV_PARAM_CHEXTOFFSET,
4233	.disable_htprotection =	WMI_TLV_VDEV_PARAM_DISABLE_HTPROTECTION,
4234	.sta_quickkickout = WMI_TLV_VDEV_PARAM_STA_QUICKKICKOUT,
4235	.mgmt_rate = WMI_TLV_VDEV_PARAM_MGMT_RATE,
4236	.protection_mode = WMI_TLV_VDEV_PARAM_PROTECTION_MODE,
4237	.fixed_rate = WMI_TLV_VDEV_PARAM_FIXED_RATE,
4238	.sgi = WMI_TLV_VDEV_PARAM_SGI,
4239	.ldpc = WMI_TLV_VDEV_PARAM_LDPC,
4240	.tx_stbc = WMI_TLV_VDEV_PARAM_TX_STBC,
4241	.rx_stbc = WMI_TLV_VDEV_PARAM_RX_STBC,
4242	.intra_bss_fwd = WMI_TLV_VDEV_PARAM_INTRA_BSS_FWD,
4243	.def_keyid = WMI_TLV_VDEV_PARAM_DEF_KEYID,
4244	.nss = WMI_TLV_VDEV_PARAM_NSS,
4245	.bcast_data_rate = WMI_TLV_VDEV_PARAM_BCAST_DATA_RATE,
4246	.mcast_data_rate = WMI_TLV_VDEV_PARAM_MCAST_DATA_RATE,
4247	.mcast_indicate = WMI_TLV_VDEV_PARAM_MCAST_INDICATE,
4248	.dhcp_indicate = WMI_TLV_VDEV_PARAM_DHCP_INDICATE,
4249	.unknown_dest_indicate = WMI_TLV_VDEV_PARAM_UNKNOWN_DEST_INDICATE,
4250	.ap_keepalive_min_idle_inactive_time_secs =
4251		WMI_TLV_VDEV_PARAM_AP_KEEPALIVE_MIN_IDLE_INACTIVE_TIME_SECS,
4252	.ap_keepalive_max_idle_inactive_time_secs =
4253		WMI_TLV_VDEV_PARAM_AP_KEEPALIVE_MAX_IDLE_INACTIVE_TIME_SECS,
4254	.ap_keepalive_max_unresponsive_time_secs =
4255		WMI_TLV_VDEV_PARAM_AP_KEEPALIVE_MAX_UNRESPONSIVE_TIME_SECS,
4256	.ap_enable_nawds = WMI_TLV_VDEV_PARAM_AP_ENABLE_NAWDS,
4257	.mcast2ucast_set = WMI_TLV_VDEV_PARAM_UNSUPPORTED,
4258	.enable_rtscts = WMI_TLV_VDEV_PARAM_ENABLE_RTSCTS,
4259	.txbf = WMI_TLV_VDEV_PARAM_TXBF,
4260	.packet_powersave = WMI_TLV_VDEV_PARAM_PACKET_POWERSAVE,
4261	.drop_unencry = WMI_TLV_VDEV_PARAM_DROP_UNENCRY,
4262	.tx_encap_type = WMI_TLV_VDEV_PARAM_TX_ENCAP_TYPE,
4263	.ap_detect_out_of_sync_sleeping_sta_time_secs =
4264					WMI_TLV_VDEV_PARAM_UNSUPPORTED,
4265	.rc_num_retries = WMI_VDEV_PARAM_UNSUPPORTED,
4266	.cabq_maxdur = WMI_VDEV_PARAM_UNSUPPORTED,
4267	.mfptest_set = WMI_VDEV_PARAM_UNSUPPORTED,
4268	.rts_fixed_rate = WMI_VDEV_PARAM_UNSUPPORTED,
4269	.vht_sgimask = WMI_VDEV_PARAM_UNSUPPORTED,
4270	.vht80_ratemask = WMI_VDEV_PARAM_UNSUPPORTED,
4271	.early_rx_adjust_enable = WMI_VDEV_PARAM_UNSUPPORTED,
4272	.early_rx_tgt_bmiss_num = WMI_VDEV_PARAM_UNSUPPORTED,
4273	.early_rx_bmiss_sample_cycle = WMI_VDEV_PARAM_UNSUPPORTED,
4274	.early_rx_slop_step = WMI_VDEV_PARAM_UNSUPPORTED,
4275	.early_rx_init_slop = WMI_VDEV_PARAM_UNSUPPORTED,
4276	.early_rx_adjust_pause = WMI_VDEV_PARAM_UNSUPPORTED,
4277	.proxy_sta = WMI_VDEV_PARAM_UNSUPPORTED,
4278	.meru_vc = WMI_VDEV_PARAM_UNSUPPORTED,
4279	.rx_decap_type = WMI_VDEV_PARAM_UNSUPPORTED,
4280	.bw_nss_ratemask = WMI_VDEV_PARAM_UNSUPPORTED,
4281};
4282
4283static const struct wmi_ops wmi_tlv_ops = {
4284	.rx = ath10k_wmi_tlv_op_rx,
4285	.map_svc = wmi_tlv_svc_map,
4286	.map_svc_ext = wmi_tlv_svc_map_ext,
4287
4288	.pull_scan = ath10k_wmi_tlv_op_pull_scan_ev,
4289	.pull_mgmt_rx = ath10k_wmi_tlv_op_pull_mgmt_rx_ev,
4290	.pull_mgmt_tx_compl = ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev,
4291	.pull_mgmt_tx_bundle_compl = ath10k_wmi_tlv_op_pull_mgmt_tx_bundle_compl_ev,
4292	.pull_ch_info = ath10k_wmi_tlv_op_pull_ch_info_ev,
4293	.pull_vdev_start = ath10k_wmi_tlv_op_pull_vdev_start_ev,
4294	.pull_peer_kick = ath10k_wmi_tlv_op_pull_peer_kick_ev,
4295	.pull_swba = ath10k_wmi_tlv_op_pull_swba_ev,
4296	.pull_phyerr_hdr = ath10k_wmi_tlv_op_pull_phyerr_ev_hdr,
4297	.pull_phyerr = ath10k_wmi_op_pull_phyerr_ev,
4298	.pull_svc_rdy = ath10k_wmi_tlv_op_pull_svc_rdy_ev,
4299	.pull_rdy = ath10k_wmi_tlv_op_pull_rdy_ev,
4300	.pull_svc_avail = ath10k_wmi_tlv_op_pull_svc_avail,
4301	.pull_fw_stats = ath10k_wmi_tlv_op_pull_fw_stats,
4302	.pull_roam_ev = ath10k_wmi_tlv_op_pull_roam_ev,
4303	.pull_wow_event = ath10k_wmi_tlv_op_pull_wow_ev,
4304	.pull_echo_ev = ath10k_wmi_tlv_op_pull_echo_ev,
4305	.get_txbf_conf_scheme = ath10k_wmi_tlv_txbf_conf_scheme,
4306
4307	.gen_pdev_suspend = ath10k_wmi_tlv_op_gen_pdev_suspend,
4308	.gen_pdev_resume = ath10k_wmi_tlv_op_gen_pdev_resume,
4309	.gen_pdev_set_rd = ath10k_wmi_tlv_op_gen_pdev_set_rd,
4310	.gen_pdev_set_param = ath10k_wmi_tlv_op_gen_pdev_set_param,
4311	.gen_init = ath10k_wmi_tlv_op_gen_init,
4312	.gen_start_scan = ath10k_wmi_tlv_op_gen_start_scan,
4313	.gen_stop_scan = ath10k_wmi_tlv_op_gen_stop_scan,
4314	.gen_vdev_create = ath10k_wmi_tlv_op_gen_vdev_create,
4315	.gen_vdev_delete = ath10k_wmi_tlv_op_gen_vdev_delete,
4316	.gen_vdev_start = ath10k_wmi_tlv_op_gen_vdev_start,
4317	.gen_vdev_stop = ath10k_wmi_tlv_op_gen_vdev_stop,
4318	.gen_vdev_up = ath10k_wmi_tlv_op_gen_vdev_up,
4319	.gen_vdev_down = ath10k_wmi_tlv_op_gen_vdev_down,
4320	.gen_vdev_set_param = ath10k_wmi_tlv_op_gen_vdev_set_param,
4321	.gen_vdev_install_key = ath10k_wmi_tlv_op_gen_vdev_install_key,
4322	.gen_vdev_wmm_conf = ath10k_wmi_tlv_op_gen_vdev_wmm_conf,
4323	.gen_peer_create = ath10k_wmi_tlv_op_gen_peer_create,
4324	.gen_peer_delete = ath10k_wmi_tlv_op_gen_peer_delete,
4325	.gen_peer_flush = ath10k_wmi_tlv_op_gen_peer_flush,
4326	.gen_peer_set_param = ath10k_wmi_tlv_op_gen_peer_set_param,
4327	.gen_peer_assoc = ath10k_wmi_tlv_op_gen_peer_assoc,
4328	.gen_set_psmode = ath10k_wmi_tlv_op_gen_set_psmode,
4329	.gen_set_sta_ps = ath10k_wmi_tlv_op_gen_set_sta_ps,
4330	.gen_set_ap_ps = ath10k_wmi_tlv_op_gen_set_ap_ps,
4331	.gen_scan_chan_list = ath10k_wmi_tlv_op_gen_scan_chan_list,
4332	.gen_scan_prob_req_oui = ath10k_wmi_tlv_op_gen_scan_prob_req_oui,
4333	.gen_beacon_dma = ath10k_wmi_tlv_op_gen_beacon_dma,
4334	.gen_pdev_set_wmm = ath10k_wmi_tlv_op_gen_pdev_set_wmm,
4335	.gen_request_stats = ath10k_wmi_tlv_op_gen_request_stats,
4336	.gen_force_fw_hang = ath10k_wmi_tlv_op_gen_force_fw_hang,
4337	/* .gen_mgmt_tx = not implemented; HTT is used */
4338	.gen_mgmt_tx_send = ath10k_wmi_tlv_op_gen_mgmt_tx_send,
4339	.gen_dbglog_cfg = ath10k_wmi_tlv_op_gen_dbglog_cfg,
4340	.gen_pktlog_enable = ath10k_wmi_tlv_op_gen_pktlog_enable,
4341	.gen_pktlog_disable = ath10k_wmi_tlv_op_gen_pktlog_disable,
4342	.gen_pdev_set_quiet_mode = ath10k_wmi_tlv_op_gen_pdev_set_quiet_mode,
4343	.gen_pdev_get_temperature = ath10k_wmi_tlv_op_gen_pdev_get_temperature,
4344	/* .gen_addba_clear_resp not implemented */
4345	/* .gen_addba_send not implemented */
4346	/* .gen_addba_set_resp not implemented */
4347	/* .gen_delba_send not implemented */
4348	.gen_bcn_tmpl = ath10k_wmi_tlv_op_gen_bcn_tmpl,
4349	.gen_prb_tmpl = ath10k_wmi_tlv_op_gen_prb_tmpl,
4350	.gen_p2p_go_bcn_ie = ath10k_wmi_tlv_op_gen_p2p_go_bcn_ie,
4351	.gen_vdev_sta_uapsd = ath10k_wmi_tlv_op_gen_vdev_sta_uapsd,
4352	.gen_sta_keepalive = ath10k_wmi_tlv_op_gen_sta_keepalive,
4353	.gen_wow_enable = ath10k_wmi_tlv_op_gen_wow_enable,
4354	.gen_wow_add_wakeup_event = ath10k_wmi_tlv_op_gen_wow_add_wakeup_event,
4355	.gen_wow_host_wakeup_ind = ath10k_wmi_tlv_gen_wow_host_wakeup_ind,
4356	.gen_wow_add_pattern = ath10k_wmi_tlv_op_gen_wow_add_pattern,
4357	.gen_wow_del_pattern = ath10k_wmi_tlv_op_gen_wow_del_pattern,
4358	.gen_wow_config_pno = ath10k_wmi_tlv_op_gen_config_pno,
4359	.gen_update_fw_tdls_state = ath10k_wmi_tlv_op_gen_update_fw_tdls_state,
4360	.gen_tdls_peer_update = ath10k_wmi_tlv_op_gen_tdls_peer_update,
4361	.gen_adaptive_qcs = ath10k_wmi_tlv_op_gen_adaptive_qcs,
4362	.fw_stats_fill = ath10k_wmi_main_op_fw_stats_fill,
4363	.get_vdev_subtype = ath10k_wmi_tlv_op_get_vdev_subtype,
4364	.gen_echo = ath10k_wmi_tlv_op_gen_echo,
4365	.gen_vdev_spectral_conf = ath10k_wmi_tlv_op_gen_vdev_spectral_conf,
4366	.gen_vdev_spectral_enable = ath10k_wmi_tlv_op_gen_vdev_spectral_enable,
4367};
4368
4369static const struct wmi_peer_flags_map wmi_tlv_peer_flags_map = {
4370	.auth = WMI_TLV_PEER_AUTH,
4371	.qos = WMI_TLV_PEER_QOS,
4372	.need_ptk_4_way = WMI_TLV_PEER_NEED_PTK_4_WAY,
4373	.need_gtk_2_way = WMI_TLV_PEER_NEED_GTK_2_WAY,
4374	.apsd = WMI_TLV_PEER_APSD,
4375	.ht = WMI_TLV_PEER_HT,
4376	.bw40 = WMI_TLV_PEER_40MHZ,
4377	.stbc = WMI_TLV_PEER_STBC,
4378	.ldbc = WMI_TLV_PEER_LDPC,
4379	.dyn_mimops = WMI_TLV_PEER_DYN_MIMOPS,
4380	.static_mimops = WMI_TLV_PEER_STATIC_MIMOPS,
4381	.spatial_mux = WMI_TLV_PEER_SPATIAL_MUX,
4382	.vht = WMI_TLV_PEER_VHT,
4383	.bw80 = WMI_TLV_PEER_80MHZ,
4384	.pmf = WMI_TLV_PEER_PMF,
4385	.bw160 = WMI_TLV_PEER_160MHZ,
4386};
4387
4388/************/
4389/* TLV init */
4390/************/
4391
4392void ath10k_wmi_tlv_attach(struct ath10k *ar)
4393{
4394	ar->wmi.cmd = &wmi_tlv_cmd_map;
4395	ar->wmi.vdev_param = &wmi_tlv_vdev_param_map;
4396	ar->wmi.pdev_param = &wmi_tlv_pdev_param_map;
4397	ar->wmi.ops = &wmi_tlv_ops;
4398	ar->wmi.peer_flags = &wmi_tlv_peer_flags_map;
4399}