netfilter: netns: shrink netns_ct struct
[linux-2.6-microblaze.git] / drivers / net / wireless / ath / ath10k / wmi-tlv.c
1 /*
2  * Copyright (c) 2005-2011 Atheros Communications Inc.
3  * Copyright (c) 2011-2017 Qualcomm Atheros, Inc.
4  * Copyright (c) 2018, The Linux Foundation. All rights reserved.
5  *
6  * Permission to use, copy, modify, and/or distribute this software for any
7  * purpose with or without fee is hereby granted, provided that the above
8  * copyright notice and this permission notice appear in all copies.
9  *
10  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17  */
18 #include "core.h"
19 #include "debug.h"
20 #include "mac.h"
21 #include "hw.h"
22 #include "wmi.h"
23 #include "wmi-ops.h"
24 #include "wmi-tlv.h"
25 #include "p2p.h"
26 #include "testmode.h"
27
28 /***************/
29 /* TLV helpers */
30 /**************/
31
32 struct wmi_tlv_policy {
33         size_t min_len;
34 };
35
36 static const struct wmi_tlv_policy wmi_tlv_policies[] = {
37         [WMI_TLV_TAG_ARRAY_BYTE]
38                 = { .min_len = 0 },
39         [WMI_TLV_TAG_ARRAY_UINT32]
40                 = { .min_len = 0 },
41         [WMI_TLV_TAG_STRUCT_SCAN_EVENT]
42                 = { .min_len = sizeof(struct wmi_scan_event) },
43         [WMI_TLV_TAG_STRUCT_MGMT_RX_HDR]
44                 = { .min_len = sizeof(struct wmi_tlv_mgmt_rx_ev) },
45         [WMI_TLV_TAG_STRUCT_CHAN_INFO_EVENT]
46                 = { .min_len = sizeof(struct wmi_chan_info_event) },
47         [WMI_TLV_TAG_STRUCT_VDEV_START_RESPONSE_EVENT]
48                 = { .min_len = sizeof(struct wmi_vdev_start_response_event) },
49         [WMI_TLV_TAG_STRUCT_PEER_STA_KICKOUT_EVENT]
50                 = { .min_len = sizeof(struct wmi_peer_sta_kickout_event) },
51         [WMI_TLV_TAG_STRUCT_HOST_SWBA_EVENT]
52                 = { .min_len = sizeof(struct wmi_host_swba_event) },
53         [WMI_TLV_TAG_STRUCT_TIM_INFO]
54                 = { .min_len = sizeof(struct wmi_tim_info) },
55         [WMI_TLV_TAG_STRUCT_P2P_NOA_INFO]
56                 = { .min_len = sizeof(struct wmi_p2p_noa_info) },
57         [WMI_TLV_TAG_STRUCT_SERVICE_READY_EVENT]
58                 = { .min_len = sizeof(struct wmi_tlv_svc_rdy_ev) },
59         [WMI_TLV_TAG_STRUCT_HAL_REG_CAPABILITIES]
60                 = { .min_len = sizeof(struct hal_reg_capabilities) },
61         [WMI_TLV_TAG_STRUCT_WLAN_HOST_MEM_REQ]
62                 = { .min_len = sizeof(struct wlan_host_mem_req) },
63         [WMI_TLV_TAG_STRUCT_READY_EVENT]
64                 = { .min_len = sizeof(struct wmi_tlv_rdy_ev) },
65         [WMI_TLV_TAG_STRUCT_OFFLOAD_BCN_TX_STATUS_EVENT]
66                 = { .min_len = sizeof(struct wmi_tlv_bcn_tx_status_ev) },
67         [WMI_TLV_TAG_STRUCT_DIAG_DATA_CONTAINER_EVENT]
68                 = { .min_len = sizeof(struct wmi_tlv_diag_data_ev) },
69         [WMI_TLV_TAG_STRUCT_P2P_NOA_EVENT]
70                 = { .min_len = sizeof(struct wmi_tlv_p2p_noa_ev) },
71         [WMI_TLV_TAG_STRUCT_ROAM_EVENT]
72                 = { .min_len = sizeof(struct wmi_tlv_roam_ev) },
73         [WMI_TLV_TAG_STRUCT_WOW_EVENT_INFO]
74                 = { .min_len = sizeof(struct wmi_tlv_wow_event_info) },
75         [WMI_TLV_TAG_STRUCT_TX_PAUSE_EVENT]
76                 = { .min_len = sizeof(struct wmi_tlv_tx_pause_ev) },
77 };
78
79 static int
80 ath10k_wmi_tlv_iter(struct ath10k *ar, const void *ptr, size_t len,
81                     int (*iter)(struct ath10k *ar, u16 tag, u16 len,
82                                 const void *ptr, void *data),
83                     void *data)
84 {
85         const void *begin = ptr;
86         const struct wmi_tlv *tlv;
87         u16 tlv_tag, tlv_len;
88         int ret;
89
90         while (len > 0) {
91                 if (len < sizeof(*tlv)) {
92                         ath10k_dbg(ar, ATH10K_DBG_WMI,
93                                    "wmi tlv parse failure at byte %zd (%zu bytes left, %zu expected)\n",
94                                    ptr - begin, len, sizeof(*tlv));
95                         return -EINVAL;
96                 }
97
98                 tlv = ptr;
99                 tlv_tag = __le16_to_cpu(tlv->tag);
100                 tlv_len = __le16_to_cpu(tlv->len);
101                 ptr += sizeof(*tlv);
102                 len -= sizeof(*tlv);
103
104                 if (tlv_len > len) {
105                         ath10k_dbg(ar, ATH10K_DBG_WMI,
106                                    "wmi tlv parse failure of tag %hhu at byte %zd (%zu bytes left, %hhu expected)\n",
107                                    tlv_tag, ptr - begin, len, tlv_len);
108                         return -EINVAL;
109                 }
110
111                 if (tlv_tag < ARRAY_SIZE(wmi_tlv_policies) &&
112                     wmi_tlv_policies[tlv_tag].min_len &&
113                     wmi_tlv_policies[tlv_tag].min_len > tlv_len) {
114                         ath10k_dbg(ar, ATH10K_DBG_WMI,
115                                    "wmi tlv parse failure of tag %hhu at byte %zd (%hhu bytes is less than min length %zu)\n",
116                                    tlv_tag, ptr - begin, tlv_len,
117                                    wmi_tlv_policies[tlv_tag].min_len);
118                         return -EINVAL;
119                 }
120
121                 ret = iter(ar, tlv_tag, tlv_len, ptr, data);
122                 if (ret)
123                         return ret;
124
125                 ptr += tlv_len;
126                 len -= tlv_len;
127         }
128
129         return 0;
130 }
131
132 static int ath10k_wmi_tlv_iter_parse(struct ath10k *ar, u16 tag, u16 len,
133                                      const void *ptr, void *data)
134 {
135         const void **tb = data;
136
137         if (tag < WMI_TLV_TAG_MAX)
138                 tb[tag] = ptr;
139
140         return 0;
141 }
142
143 static int ath10k_wmi_tlv_parse(struct ath10k *ar, const void **tb,
144                                 const void *ptr, size_t len)
145 {
146         return ath10k_wmi_tlv_iter(ar, ptr, len, ath10k_wmi_tlv_iter_parse,
147                                    (void *)tb);
148 }
149
150 static const void **
151 ath10k_wmi_tlv_parse_alloc(struct ath10k *ar, const void *ptr,
152                            size_t len, gfp_t gfp)
153 {
154         const void **tb;
155         int ret;
156
157         tb = kcalloc(WMI_TLV_TAG_MAX, sizeof(*tb), gfp);
158         if (!tb)
159                 return ERR_PTR(-ENOMEM);
160
161         ret = ath10k_wmi_tlv_parse(ar, tb, ptr, len);
162         if (ret) {
163                 kfree(tb);
164                 return ERR_PTR(ret);
165         }
166
167         return tb;
168 }
169
170 static u16 ath10k_wmi_tlv_len(const void *ptr)
171 {
172         return __le16_to_cpu((((const struct wmi_tlv *)ptr) - 1)->len);
173 }
174
175 /**************/
176 /* TLV events */
177 /**************/
178 static int ath10k_wmi_tlv_event_bcn_tx_status(struct ath10k *ar,
179                                               struct sk_buff *skb)
180 {
181         const void **tb;
182         const struct wmi_tlv_bcn_tx_status_ev *ev;
183         struct ath10k_vif *arvif;
184         u32 vdev_id, tx_status;
185         int ret;
186
187         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
188         if (IS_ERR(tb)) {
189                 ret = PTR_ERR(tb);
190                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
191                 return ret;
192         }
193
194         ev = tb[WMI_TLV_TAG_STRUCT_OFFLOAD_BCN_TX_STATUS_EVENT];
195         if (!ev) {
196                 kfree(tb);
197                 return -EPROTO;
198         }
199
200         tx_status = __le32_to_cpu(ev->tx_status);
201         vdev_id = __le32_to_cpu(ev->vdev_id);
202
203         switch (tx_status) {
204         case WMI_TLV_BCN_TX_STATUS_OK:
205                 break;
206         case WMI_TLV_BCN_TX_STATUS_XRETRY:
207         case WMI_TLV_BCN_TX_STATUS_DROP:
208         case WMI_TLV_BCN_TX_STATUS_FILTERED:
209                 /* FIXME: It's probably worth telling mac80211 to stop the
210                  * interface as it is crippled.
211                  */
212                 ath10k_warn(ar, "received bcn tmpl tx status on vdev %i: %d",
213                             vdev_id, tx_status);
214                 break;
215         }
216
217         arvif = ath10k_get_arvif(ar, vdev_id);
218         if (arvif && arvif->is_up && arvif->vif->csa_active)
219                 ieee80211_queue_work(ar->hw, &arvif->ap_csa_work);
220
221         kfree(tb);
222         return 0;
223 }
224
225 static int ath10k_wmi_tlv_event_diag_data(struct ath10k *ar,
226                                           struct sk_buff *skb)
227 {
228         const void **tb;
229         const struct wmi_tlv_diag_data_ev *ev;
230         const struct wmi_tlv_diag_item *item;
231         const void *data;
232         int ret, num_items, len;
233
234         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
235         if (IS_ERR(tb)) {
236                 ret = PTR_ERR(tb);
237                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
238                 return ret;
239         }
240
241         ev = tb[WMI_TLV_TAG_STRUCT_DIAG_DATA_CONTAINER_EVENT];
242         data = tb[WMI_TLV_TAG_ARRAY_BYTE];
243         if (!ev || !data) {
244                 kfree(tb);
245                 return -EPROTO;
246         }
247
248         num_items = __le32_to_cpu(ev->num_items);
249         len = ath10k_wmi_tlv_len(data);
250
251         while (num_items--) {
252                 if (len == 0)
253                         break;
254                 if (len < sizeof(*item)) {
255                         ath10k_warn(ar, "failed to parse diag data: can't fit item header\n");
256                         break;
257                 }
258
259                 item = data;
260
261                 if (len < sizeof(*item) + __le16_to_cpu(item->len)) {
262                         ath10k_warn(ar, "failed to parse diag data: item is too long\n");
263                         break;
264                 }
265
266                 trace_ath10k_wmi_diag_container(ar,
267                                                 item->type,
268                                                 __le32_to_cpu(item->timestamp),
269                                                 __le32_to_cpu(item->code),
270                                                 __le16_to_cpu(item->len),
271                                                 item->payload);
272
273                 len -= sizeof(*item);
274                 len -= roundup(__le16_to_cpu(item->len), 4);
275
276                 data += sizeof(*item);
277                 data += roundup(__le16_to_cpu(item->len), 4);
278         }
279
280         if (num_items != -1 || len != 0)
281                 ath10k_warn(ar, "failed to parse diag data event: num_items %d len %d\n",
282                             num_items, len);
283
284         kfree(tb);
285         return 0;
286 }
287
288 static int ath10k_wmi_tlv_event_diag(struct ath10k *ar,
289                                      struct sk_buff *skb)
290 {
291         const void **tb;
292         const void *data;
293         int ret, len;
294
295         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
296         if (IS_ERR(tb)) {
297                 ret = PTR_ERR(tb);
298                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
299                 return ret;
300         }
301
302         data = tb[WMI_TLV_TAG_ARRAY_BYTE];
303         if (!data) {
304                 kfree(tb);
305                 return -EPROTO;
306         }
307         len = ath10k_wmi_tlv_len(data);
308
309         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv diag event len %d\n", len);
310         trace_ath10k_wmi_diag(ar, data, len);
311
312         kfree(tb);
313         return 0;
314 }
315
316 static int ath10k_wmi_tlv_event_p2p_noa(struct ath10k *ar,
317                                         struct sk_buff *skb)
318 {
319         const void **tb;
320         const struct wmi_tlv_p2p_noa_ev *ev;
321         const struct wmi_p2p_noa_info *noa;
322         int ret, vdev_id;
323
324         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
325         if (IS_ERR(tb)) {
326                 ret = PTR_ERR(tb);
327                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
328                 return ret;
329         }
330
331         ev = tb[WMI_TLV_TAG_STRUCT_P2P_NOA_EVENT];
332         noa = tb[WMI_TLV_TAG_STRUCT_P2P_NOA_INFO];
333
334         if (!ev || !noa) {
335                 kfree(tb);
336                 return -EPROTO;
337         }
338
339         vdev_id = __le32_to_cpu(ev->vdev_id);
340
341         ath10k_dbg(ar, ATH10K_DBG_WMI,
342                    "wmi tlv p2p noa vdev_id %i descriptors %hhu\n",
343                    vdev_id, noa->num_descriptors);
344
345         ath10k_p2p_noa_update_by_vdev_id(ar, vdev_id, noa);
346         kfree(tb);
347         return 0;
348 }
349
350 static int ath10k_wmi_tlv_event_tx_pause(struct ath10k *ar,
351                                          struct sk_buff *skb)
352 {
353         const void **tb;
354         const struct wmi_tlv_tx_pause_ev *ev;
355         int ret, vdev_id;
356         u32 pause_id, action, vdev_map, peer_id, tid_map;
357
358         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
359         if (IS_ERR(tb)) {
360                 ret = PTR_ERR(tb);
361                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
362                 return ret;
363         }
364
365         ev = tb[WMI_TLV_TAG_STRUCT_TX_PAUSE_EVENT];
366         if (!ev) {
367                 kfree(tb);
368                 return -EPROTO;
369         }
370
371         pause_id = __le32_to_cpu(ev->pause_id);
372         action = __le32_to_cpu(ev->action);
373         vdev_map = __le32_to_cpu(ev->vdev_map);
374         peer_id = __le32_to_cpu(ev->peer_id);
375         tid_map = __le32_to_cpu(ev->tid_map);
376
377         ath10k_dbg(ar, ATH10K_DBG_WMI,
378                    "wmi tlv tx pause pause_id %u action %u vdev_map 0x%08x peer_id %u tid_map 0x%08x\n",
379                    pause_id, action, vdev_map, peer_id, tid_map);
380
381         switch (pause_id) {
382         case WMI_TLV_TX_PAUSE_ID_MCC:
383         case WMI_TLV_TX_PAUSE_ID_P2P_CLI_NOA:
384         case WMI_TLV_TX_PAUSE_ID_P2P_GO_PS:
385         case WMI_TLV_TX_PAUSE_ID_AP_PS:
386         case WMI_TLV_TX_PAUSE_ID_IBSS_PS:
387                 for (vdev_id = 0; vdev_map; vdev_id++) {
388                         if (!(vdev_map & BIT(vdev_id)))
389                                 continue;
390
391                         vdev_map &= ~BIT(vdev_id);
392                         ath10k_mac_handle_tx_pause_vdev(ar, vdev_id, pause_id,
393                                                         action);
394                 }
395                 break;
396         case WMI_TLV_TX_PAUSE_ID_AP_PEER_PS:
397         case WMI_TLV_TX_PAUSE_ID_AP_PEER_UAPSD:
398         case WMI_TLV_TX_PAUSE_ID_STA_ADD_BA:
399         case WMI_TLV_TX_PAUSE_ID_HOST:
400                 ath10k_dbg(ar, ATH10K_DBG_MAC,
401                            "mac ignoring unsupported tx pause id %d\n",
402                            pause_id);
403                 break;
404         default:
405                 ath10k_dbg(ar, ATH10K_DBG_MAC,
406                            "mac ignoring unknown tx pause vdev %d\n",
407                            pause_id);
408                 break;
409         }
410
411         kfree(tb);
412         return 0;
413 }
414
415 static int ath10k_wmi_tlv_event_temperature(struct ath10k *ar,
416                                             struct sk_buff *skb)
417 {
418         const struct wmi_tlv_pdev_temperature_event *ev;
419
420         ev = (struct wmi_tlv_pdev_temperature_event *)skb->data;
421         if (WARN_ON(skb->len < sizeof(*ev)))
422                 return -EPROTO;
423
424         ath10k_thermal_event_temperature(ar, __le32_to_cpu(ev->temperature));
425         return 0;
426 }
427
428 static void ath10k_wmi_event_tdls_peer(struct ath10k *ar, struct sk_buff *skb)
429 {
430         struct ieee80211_sta *station;
431         const struct wmi_tlv_tdls_peer_event *ev;
432         const void **tb;
433         struct ath10k_vif *arvif;
434
435         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
436         if (IS_ERR(tb)) {
437                 ath10k_warn(ar, "tdls peer failed to parse tlv");
438                 return;
439         }
440         ev = tb[WMI_TLV_TAG_STRUCT_TDLS_PEER_EVENT];
441         if (!ev) {
442                 kfree(tb);
443                 ath10k_warn(ar, "tdls peer NULL event");
444                 return;
445         }
446
447         switch (__le32_to_cpu(ev->peer_reason)) {
448         case WMI_TDLS_TEARDOWN_REASON_TX:
449         case WMI_TDLS_TEARDOWN_REASON_RSSI:
450         case WMI_TDLS_TEARDOWN_REASON_PTR_TIMEOUT:
451                 station = ieee80211_find_sta_by_ifaddr(ar->hw,
452                                                        ev->peer_macaddr.addr,
453                                                        NULL);
454                 if (!station) {
455                         ath10k_warn(ar, "did not find station from tdls peer event");
456                         kfree(tb);
457                         return;
458                 }
459                 arvif = ath10k_get_arvif(ar, __le32_to_cpu(ev->vdev_id));
460                 ieee80211_tdls_oper_request(
461                                         arvif->vif, station->addr,
462                                         NL80211_TDLS_TEARDOWN,
463                                         WLAN_REASON_TDLS_TEARDOWN_UNREACHABLE,
464                                         GFP_ATOMIC
465                                         );
466                 break;
467         }
468         kfree(tb);
469 }
470
471 /***********/
472 /* TLV ops */
473 /***********/
474
475 static void ath10k_wmi_tlv_op_rx(struct ath10k *ar, struct sk_buff *skb)
476 {
477         struct wmi_cmd_hdr *cmd_hdr;
478         enum wmi_tlv_event_id id;
479         bool consumed;
480
481         cmd_hdr = (struct wmi_cmd_hdr *)skb->data;
482         id = MS(__le32_to_cpu(cmd_hdr->cmd_id), WMI_CMD_HDR_CMD_ID);
483
484         if (skb_pull(skb, sizeof(struct wmi_cmd_hdr)) == NULL)
485                 goto out;
486
487         trace_ath10k_wmi_event(ar, id, skb->data, skb->len);
488
489         consumed = ath10k_tm_event_wmi(ar, id, skb);
490
491         /* Ready event must be handled normally also in UTF mode so that we
492          * know the UTF firmware has booted, others we are just bypass WMI
493          * events to testmode.
494          */
495         if (consumed && id != WMI_TLV_READY_EVENTID) {
496                 ath10k_dbg(ar, ATH10K_DBG_WMI,
497                            "wmi tlv testmode consumed 0x%x\n", id);
498                 goto out;
499         }
500
501         switch (id) {
502         case WMI_TLV_MGMT_RX_EVENTID:
503                 ath10k_wmi_event_mgmt_rx(ar, skb);
504                 /* mgmt_rx() owns the skb now! */
505                 return;
506         case WMI_TLV_SCAN_EVENTID:
507                 ath10k_wmi_event_scan(ar, skb);
508                 break;
509         case WMI_TLV_CHAN_INFO_EVENTID:
510                 ath10k_wmi_event_chan_info(ar, skb);
511                 break;
512         case WMI_TLV_ECHO_EVENTID:
513                 ath10k_wmi_event_echo(ar, skb);
514                 break;
515         case WMI_TLV_DEBUG_MESG_EVENTID:
516                 ath10k_wmi_event_debug_mesg(ar, skb);
517                 break;
518         case WMI_TLV_UPDATE_STATS_EVENTID:
519                 ath10k_wmi_event_update_stats(ar, skb);
520                 break;
521         case WMI_TLV_VDEV_START_RESP_EVENTID:
522                 ath10k_wmi_event_vdev_start_resp(ar, skb);
523                 break;
524         case WMI_TLV_VDEV_STOPPED_EVENTID:
525                 ath10k_wmi_event_vdev_stopped(ar, skb);
526                 break;
527         case WMI_TLV_PEER_STA_KICKOUT_EVENTID:
528                 ath10k_wmi_event_peer_sta_kickout(ar, skb);
529                 break;
530         case WMI_TLV_HOST_SWBA_EVENTID:
531                 ath10k_wmi_event_host_swba(ar, skb);
532                 break;
533         case WMI_TLV_TBTTOFFSET_UPDATE_EVENTID:
534                 ath10k_wmi_event_tbttoffset_update(ar, skb);
535                 break;
536         case WMI_TLV_PHYERR_EVENTID:
537                 ath10k_wmi_event_phyerr(ar, skb);
538                 break;
539         case WMI_TLV_ROAM_EVENTID:
540                 ath10k_wmi_event_roam(ar, skb);
541                 break;
542         case WMI_TLV_PROFILE_MATCH:
543                 ath10k_wmi_event_profile_match(ar, skb);
544                 break;
545         case WMI_TLV_DEBUG_PRINT_EVENTID:
546                 ath10k_wmi_event_debug_print(ar, skb);
547                 break;
548         case WMI_TLV_PDEV_QVIT_EVENTID:
549                 ath10k_wmi_event_pdev_qvit(ar, skb);
550                 break;
551         case WMI_TLV_WLAN_PROFILE_DATA_EVENTID:
552                 ath10k_wmi_event_wlan_profile_data(ar, skb);
553                 break;
554         case WMI_TLV_RTT_MEASUREMENT_REPORT_EVENTID:
555                 ath10k_wmi_event_rtt_measurement_report(ar, skb);
556                 break;
557         case WMI_TLV_TSF_MEASUREMENT_REPORT_EVENTID:
558                 ath10k_wmi_event_tsf_measurement_report(ar, skb);
559                 break;
560         case WMI_TLV_RTT_ERROR_REPORT_EVENTID:
561                 ath10k_wmi_event_rtt_error_report(ar, skb);
562                 break;
563         case WMI_TLV_WOW_WAKEUP_HOST_EVENTID:
564                 ath10k_wmi_event_wow_wakeup_host(ar, skb);
565                 break;
566         case WMI_TLV_DCS_INTERFERENCE_EVENTID:
567                 ath10k_wmi_event_dcs_interference(ar, skb);
568                 break;
569         case WMI_TLV_PDEV_TPC_CONFIG_EVENTID:
570                 ath10k_wmi_event_pdev_tpc_config(ar, skb);
571                 break;
572         case WMI_TLV_PDEV_FTM_INTG_EVENTID:
573                 ath10k_wmi_event_pdev_ftm_intg(ar, skb);
574                 break;
575         case WMI_TLV_GTK_OFFLOAD_STATUS_EVENTID:
576                 ath10k_wmi_event_gtk_offload_status(ar, skb);
577                 break;
578         case WMI_TLV_GTK_REKEY_FAIL_EVENTID:
579                 ath10k_wmi_event_gtk_rekey_fail(ar, skb);
580                 break;
581         case WMI_TLV_TX_DELBA_COMPLETE_EVENTID:
582                 ath10k_wmi_event_delba_complete(ar, skb);
583                 break;
584         case WMI_TLV_TX_ADDBA_COMPLETE_EVENTID:
585                 ath10k_wmi_event_addba_complete(ar, skb);
586                 break;
587         case WMI_TLV_VDEV_INSTALL_KEY_COMPLETE_EVENTID:
588                 ath10k_wmi_event_vdev_install_key_complete(ar, skb);
589                 break;
590         case WMI_TLV_SERVICE_READY_EVENTID:
591                 ath10k_wmi_event_service_ready(ar, skb);
592                 return;
593         case WMI_TLV_READY_EVENTID:
594                 ath10k_wmi_event_ready(ar, skb);
595                 break;
596         case WMI_TLV_SERVICE_AVAILABLE_EVENTID:
597                 ath10k_wmi_event_service_available(ar, skb);
598                 break;
599         case WMI_TLV_OFFLOAD_BCN_TX_STATUS_EVENTID:
600                 ath10k_wmi_tlv_event_bcn_tx_status(ar, skb);
601                 break;
602         case WMI_TLV_DIAG_DATA_CONTAINER_EVENTID:
603                 ath10k_wmi_tlv_event_diag_data(ar, skb);
604                 break;
605         case WMI_TLV_DIAG_EVENTID:
606                 ath10k_wmi_tlv_event_diag(ar, skb);
607                 break;
608         case WMI_TLV_P2P_NOA_EVENTID:
609                 ath10k_wmi_tlv_event_p2p_noa(ar, skb);
610                 break;
611         case WMI_TLV_TX_PAUSE_EVENTID:
612                 ath10k_wmi_tlv_event_tx_pause(ar, skb);
613                 break;
614         case WMI_TLV_PDEV_TEMPERATURE_EVENTID:
615                 ath10k_wmi_tlv_event_temperature(ar, skb);
616                 break;
617         case WMI_TLV_TDLS_PEER_EVENTID:
618                 ath10k_wmi_event_tdls_peer(ar, skb);
619                 break;
620         case WMI_TLV_MGMT_TX_COMPLETION_EVENTID:
621                 ath10k_wmi_event_mgmt_tx_compl(ar, skb);
622                 break;
623         default:
624                 ath10k_warn(ar, "Unknown eventid: %d\n", id);
625                 break;
626         }
627
628 out:
629         dev_kfree_skb(skb);
630 }
631
632 static int ath10k_wmi_tlv_op_pull_scan_ev(struct ath10k *ar,
633                                           struct sk_buff *skb,
634                                           struct wmi_scan_ev_arg *arg)
635 {
636         const void **tb;
637         const struct wmi_scan_event *ev;
638         int ret;
639
640         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
641         if (IS_ERR(tb)) {
642                 ret = PTR_ERR(tb);
643                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
644                 return ret;
645         }
646
647         ev = tb[WMI_TLV_TAG_STRUCT_SCAN_EVENT];
648         if (!ev) {
649                 kfree(tb);
650                 return -EPROTO;
651         }
652
653         arg->event_type = ev->event_type;
654         arg->reason = ev->reason;
655         arg->channel_freq = ev->channel_freq;
656         arg->scan_req_id = ev->scan_req_id;
657         arg->scan_id = ev->scan_id;
658         arg->vdev_id = ev->vdev_id;
659
660         kfree(tb);
661         return 0;
662 }
663
664 static int
665 ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev(struct ath10k *ar, struct sk_buff *skb,
666                                         struct wmi_tlv_mgmt_tx_compl_ev_arg *arg)
667 {
668         const void **tb;
669         const struct wmi_tlv_mgmt_tx_compl_ev *ev;
670         int ret;
671
672         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
673         if (IS_ERR(tb)) {
674                 ret = PTR_ERR(tb);
675                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
676                 return ret;
677         }
678
679         ev = tb[WMI_TLV_TAG_STRUCT_MGMT_TX_COMPL_EVENT];
680
681         arg->desc_id = ev->desc_id;
682         arg->status = ev->status;
683         arg->pdev_id = ev->pdev_id;
684
685         kfree(tb);
686         return 0;
687 }
688
689 static int ath10k_wmi_tlv_op_pull_mgmt_rx_ev(struct ath10k *ar,
690                                              struct sk_buff *skb,
691                                              struct wmi_mgmt_rx_ev_arg *arg)
692 {
693         const void **tb;
694         const struct wmi_tlv_mgmt_rx_ev *ev;
695         const u8 *frame;
696         u32 msdu_len;
697         int ret;
698
699         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
700         if (IS_ERR(tb)) {
701                 ret = PTR_ERR(tb);
702                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
703                 return ret;
704         }
705
706         ev = tb[WMI_TLV_TAG_STRUCT_MGMT_RX_HDR];
707         frame = tb[WMI_TLV_TAG_ARRAY_BYTE];
708
709         if (!ev || !frame) {
710                 kfree(tb);
711                 return -EPROTO;
712         }
713
714         arg->channel = ev->channel;
715         arg->buf_len = ev->buf_len;
716         arg->status = ev->status;
717         arg->snr = ev->snr;
718         arg->phy_mode = ev->phy_mode;
719         arg->rate = ev->rate;
720
721         msdu_len = __le32_to_cpu(arg->buf_len);
722
723         if (skb->len < (frame - skb->data) + msdu_len) {
724                 kfree(tb);
725                 return -EPROTO;
726         }
727
728         /* shift the sk_buff to point to `frame` */
729         skb_trim(skb, 0);
730         skb_put(skb, frame - skb->data);
731         skb_pull(skb, frame - skb->data);
732         skb_put(skb, msdu_len);
733
734         kfree(tb);
735         return 0;
736 }
737
738 static int ath10k_wmi_tlv_op_pull_ch_info_ev(struct ath10k *ar,
739                                              struct sk_buff *skb,
740                                              struct wmi_ch_info_ev_arg *arg)
741 {
742         const void **tb;
743         const struct wmi_chan_info_event *ev;
744         int ret;
745
746         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
747         if (IS_ERR(tb)) {
748                 ret = PTR_ERR(tb);
749                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
750                 return ret;
751         }
752
753         ev = tb[WMI_TLV_TAG_STRUCT_CHAN_INFO_EVENT];
754         if (!ev) {
755                 kfree(tb);
756                 return -EPROTO;
757         }
758
759         arg->err_code = ev->err_code;
760         arg->freq = ev->freq;
761         arg->cmd_flags = ev->cmd_flags;
762         arg->noise_floor = ev->noise_floor;
763         arg->rx_clear_count = ev->rx_clear_count;
764         arg->cycle_count = ev->cycle_count;
765
766         kfree(tb);
767         return 0;
768 }
769
770 static int
771 ath10k_wmi_tlv_op_pull_vdev_start_ev(struct ath10k *ar, struct sk_buff *skb,
772                                      struct wmi_vdev_start_ev_arg *arg)
773 {
774         const void **tb;
775         const struct wmi_vdev_start_response_event *ev;
776         int ret;
777
778         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
779         if (IS_ERR(tb)) {
780                 ret = PTR_ERR(tb);
781                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
782                 return ret;
783         }
784
785         ev = tb[WMI_TLV_TAG_STRUCT_VDEV_START_RESPONSE_EVENT];
786         if (!ev) {
787                 kfree(tb);
788                 return -EPROTO;
789         }
790
791         skb_pull(skb, sizeof(*ev));
792         arg->vdev_id = ev->vdev_id;
793         arg->req_id = ev->req_id;
794         arg->resp_type = ev->resp_type;
795         arg->status = ev->status;
796
797         kfree(tb);
798         return 0;
799 }
800
801 static int ath10k_wmi_tlv_op_pull_peer_kick_ev(struct ath10k *ar,
802                                                struct sk_buff *skb,
803                                                struct wmi_peer_kick_ev_arg *arg)
804 {
805         const void **tb;
806         const struct wmi_peer_sta_kickout_event *ev;
807         int ret;
808
809         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
810         if (IS_ERR(tb)) {
811                 ret = PTR_ERR(tb);
812                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
813                 return ret;
814         }
815
816         ev = tb[WMI_TLV_TAG_STRUCT_PEER_STA_KICKOUT_EVENT];
817         if (!ev) {
818                 kfree(tb);
819                 return -EPROTO;
820         }
821
822         arg->mac_addr = ev->peer_macaddr.addr;
823
824         kfree(tb);
825         return 0;
826 }
827
828 struct wmi_tlv_swba_parse {
829         const struct wmi_host_swba_event *ev;
830         bool tim_done;
831         bool noa_done;
832         size_t n_tim;
833         size_t n_noa;
834         struct wmi_swba_ev_arg *arg;
835 };
836
837 static int ath10k_wmi_tlv_swba_tim_parse(struct ath10k *ar, u16 tag, u16 len,
838                                          const void *ptr, void *data)
839 {
840         struct wmi_tlv_swba_parse *swba = data;
841         struct wmi_tim_info_arg *tim_info_arg;
842         const struct wmi_tim_info *tim_info_ev = ptr;
843
844         if (tag != WMI_TLV_TAG_STRUCT_TIM_INFO)
845                 return -EPROTO;
846
847         if (swba->n_tim >= ARRAY_SIZE(swba->arg->tim_info))
848                 return -ENOBUFS;
849
850         if (__le32_to_cpu(tim_info_ev->tim_len) >
851              sizeof(tim_info_ev->tim_bitmap)) {
852                 ath10k_warn(ar, "refusing to parse invalid swba structure\n");
853                 return -EPROTO;
854         }
855
856         tim_info_arg = &swba->arg->tim_info[swba->n_tim];
857         tim_info_arg->tim_len = tim_info_ev->tim_len;
858         tim_info_arg->tim_mcast = tim_info_ev->tim_mcast;
859         tim_info_arg->tim_bitmap = tim_info_ev->tim_bitmap;
860         tim_info_arg->tim_changed = tim_info_ev->tim_changed;
861         tim_info_arg->tim_num_ps_pending = tim_info_ev->tim_num_ps_pending;
862
863         swba->n_tim++;
864
865         return 0;
866 }
867
868 static int ath10k_wmi_tlv_swba_noa_parse(struct ath10k *ar, u16 tag, u16 len,
869                                          const void *ptr, void *data)
870 {
871         struct wmi_tlv_swba_parse *swba = data;
872
873         if (tag != WMI_TLV_TAG_STRUCT_P2P_NOA_INFO)
874                 return -EPROTO;
875
876         if (swba->n_noa >= ARRAY_SIZE(swba->arg->noa_info))
877                 return -ENOBUFS;
878
879         swba->arg->noa_info[swba->n_noa++] = ptr;
880         return 0;
881 }
882
883 static int ath10k_wmi_tlv_swba_parse(struct ath10k *ar, u16 tag, u16 len,
884                                      const void *ptr, void *data)
885 {
886         struct wmi_tlv_swba_parse *swba = data;
887         int ret;
888
889         switch (tag) {
890         case WMI_TLV_TAG_STRUCT_HOST_SWBA_EVENT:
891                 swba->ev = ptr;
892                 break;
893         case WMI_TLV_TAG_ARRAY_STRUCT:
894                 if (!swba->tim_done) {
895                         swba->tim_done = true;
896                         ret = ath10k_wmi_tlv_iter(ar, ptr, len,
897                                                   ath10k_wmi_tlv_swba_tim_parse,
898                                                   swba);
899                         if (ret)
900                                 return ret;
901                 } else if (!swba->noa_done) {
902                         swba->noa_done = true;
903                         ret = ath10k_wmi_tlv_iter(ar, ptr, len,
904                                                   ath10k_wmi_tlv_swba_noa_parse,
905                                                   swba);
906                         if (ret)
907                                 return ret;
908                 }
909                 break;
910         default:
911                 break;
912         }
913         return 0;
914 }
915
916 static int ath10k_wmi_tlv_op_pull_swba_ev(struct ath10k *ar,
917                                           struct sk_buff *skb,
918                                           struct wmi_swba_ev_arg *arg)
919 {
920         struct wmi_tlv_swba_parse swba = { .arg = arg };
921         u32 map;
922         size_t n_vdevs;
923         int ret;
924
925         ret = ath10k_wmi_tlv_iter(ar, skb->data, skb->len,
926                                   ath10k_wmi_tlv_swba_parse, &swba);
927         if (ret) {
928                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
929                 return ret;
930         }
931
932         if (!swba.ev)
933                 return -EPROTO;
934
935         arg->vdev_map = swba.ev->vdev_map;
936
937         for (map = __le32_to_cpu(arg->vdev_map), n_vdevs = 0; map; map >>= 1)
938                 if (map & BIT(0))
939                         n_vdevs++;
940
941         if (n_vdevs != swba.n_tim ||
942             n_vdevs != swba.n_noa)
943                 return -EPROTO;
944
945         return 0;
946 }
947
948 static int ath10k_wmi_tlv_op_pull_phyerr_ev_hdr(struct ath10k *ar,
949                                                 struct sk_buff *skb,
950                                                 struct wmi_phyerr_hdr_arg *arg)
951 {
952         const void **tb;
953         const struct wmi_tlv_phyerr_ev *ev;
954         const void *phyerrs;
955         int ret;
956
957         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
958         if (IS_ERR(tb)) {
959                 ret = PTR_ERR(tb);
960                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
961                 return ret;
962         }
963
964         ev = tb[WMI_TLV_TAG_STRUCT_COMB_PHYERR_RX_HDR];
965         phyerrs = tb[WMI_TLV_TAG_ARRAY_BYTE];
966
967         if (!ev || !phyerrs) {
968                 kfree(tb);
969                 return -EPROTO;
970         }
971
972         arg->num_phyerrs  = __le32_to_cpu(ev->num_phyerrs);
973         arg->tsf_l32 = __le32_to_cpu(ev->tsf_l32);
974         arg->tsf_u32 = __le32_to_cpu(ev->tsf_u32);
975         arg->buf_len = __le32_to_cpu(ev->buf_len);
976         arg->phyerrs = phyerrs;
977
978         kfree(tb);
979         return 0;
980 }
981
982 #define WMI_TLV_ABI_VER_NS0 0x5F414351
983 #define WMI_TLV_ABI_VER_NS1 0x00004C4D
984 #define WMI_TLV_ABI_VER_NS2 0x00000000
985 #define WMI_TLV_ABI_VER_NS3 0x00000000
986
987 #define WMI_TLV_ABI_VER0_MAJOR 1
988 #define WMI_TLV_ABI_VER0_MINOR 0
989 #define WMI_TLV_ABI_VER0 ((((WMI_TLV_ABI_VER0_MAJOR) << 24) & 0xFF000000) | \
990                           (((WMI_TLV_ABI_VER0_MINOR) <<  0) & 0x00FFFFFF))
991 #define WMI_TLV_ABI_VER1 53
992
993 static int
994 ath10k_wmi_tlv_parse_mem_reqs(struct ath10k *ar, u16 tag, u16 len,
995                               const void *ptr, void *data)
996 {
997         struct wmi_svc_rdy_ev_arg *arg = data;
998         int i;
999
1000         if (tag != WMI_TLV_TAG_STRUCT_WLAN_HOST_MEM_REQ)
1001                 return -EPROTO;
1002
1003         for (i = 0; i < ARRAY_SIZE(arg->mem_reqs); i++) {
1004                 if (!arg->mem_reqs[i]) {
1005                         arg->mem_reqs[i] = ptr;
1006                         return 0;
1007                 }
1008         }
1009
1010         return -ENOMEM;
1011 }
1012
1013 struct wmi_tlv_svc_rdy_parse {
1014         const struct hal_reg_capabilities *reg;
1015         const struct wmi_tlv_svc_rdy_ev *ev;
1016         const __le32 *svc_bmap;
1017         const struct wlan_host_mem_req *mem_reqs;
1018         bool svc_bmap_done;
1019         bool dbs_hw_mode_done;
1020 };
1021
1022 static int ath10k_wmi_tlv_svc_rdy_parse(struct ath10k *ar, u16 tag, u16 len,
1023                                         const void *ptr, void *data)
1024 {
1025         struct wmi_tlv_svc_rdy_parse *svc_rdy = data;
1026
1027         switch (tag) {
1028         case WMI_TLV_TAG_STRUCT_SERVICE_READY_EVENT:
1029                 svc_rdy->ev = ptr;
1030                 break;
1031         case WMI_TLV_TAG_STRUCT_HAL_REG_CAPABILITIES:
1032                 svc_rdy->reg = ptr;
1033                 break;
1034         case WMI_TLV_TAG_ARRAY_STRUCT:
1035                 svc_rdy->mem_reqs = ptr;
1036                 break;
1037         case WMI_TLV_TAG_ARRAY_UINT32:
1038                 if (!svc_rdy->svc_bmap_done) {
1039                         svc_rdy->svc_bmap_done = true;
1040                         svc_rdy->svc_bmap = ptr;
1041                 } else if (!svc_rdy->dbs_hw_mode_done) {
1042                         svc_rdy->dbs_hw_mode_done = true;
1043                 }
1044                 break;
1045         default:
1046                 break;
1047         }
1048         return 0;
1049 }
1050
1051 static int ath10k_wmi_tlv_op_pull_svc_rdy_ev(struct ath10k *ar,
1052                                              struct sk_buff *skb,
1053                                              struct wmi_svc_rdy_ev_arg *arg)
1054 {
1055         const struct hal_reg_capabilities *reg;
1056         const struct wmi_tlv_svc_rdy_ev *ev;
1057         const __le32 *svc_bmap;
1058         const struct wlan_host_mem_req *mem_reqs;
1059         struct wmi_tlv_svc_rdy_parse svc_rdy = { };
1060         int ret;
1061
1062         ret = ath10k_wmi_tlv_iter(ar, skb->data, skb->len,
1063                                   ath10k_wmi_tlv_svc_rdy_parse, &svc_rdy);
1064         if (ret) {
1065                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1066                 return ret;
1067         }
1068
1069         ev = svc_rdy.ev;
1070         reg = svc_rdy.reg;
1071         svc_bmap = svc_rdy.svc_bmap;
1072         mem_reqs = svc_rdy.mem_reqs;
1073
1074         if (!ev || !reg || !svc_bmap || !mem_reqs)
1075                 return -EPROTO;
1076
1077         /* This is an internal ABI compatibility check for WMI TLV so check it
1078          * here instead of the generic WMI code.
1079          */
1080         ath10k_dbg(ar, ATH10K_DBG_WMI,
1081                    "wmi tlv abi 0x%08x ?= 0x%08x, 0x%08x ?= 0x%08x, 0x%08x ?= 0x%08x, 0x%08x ?= 0x%08x, 0x%08x ?= 0x%08x\n",
1082                    __le32_to_cpu(ev->abi.abi_ver0), WMI_TLV_ABI_VER0,
1083                    __le32_to_cpu(ev->abi.abi_ver_ns0), WMI_TLV_ABI_VER_NS0,
1084                    __le32_to_cpu(ev->abi.abi_ver_ns1), WMI_TLV_ABI_VER_NS1,
1085                    __le32_to_cpu(ev->abi.abi_ver_ns2), WMI_TLV_ABI_VER_NS2,
1086                    __le32_to_cpu(ev->abi.abi_ver_ns3), WMI_TLV_ABI_VER_NS3);
1087
1088         if (__le32_to_cpu(ev->abi.abi_ver0) != WMI_TLV_ABI_VER0 ||
1089             __le32_to_cpu(ev->abi.abi_ver_ns0) != WMI_TLV_ABI_VER_NS0 ||
1090             __le32_to_cpu(ev->abi.abi_ver_ns1) != WMI_TLV_ABI_VER_NS1 ||
1091             __le32_to_cpu(ev->abi.abi_ver_ns2) != WMI_TLV_ABI_VER_NS2 ||
1092             __le32_to_cpu(ev->abi.abi_ver_ns3) != WMI_TLV_ABI_VER_NS3) {
1093                 return -ENOTSUPP;
1094         }
1095
1096         arg->min_tx_power = ev->hw_min_tx_power;
1097         arg->max_tx_power = ev->hw_max_tx_power;
1098         arg->ht_cap = ev->ht_cap_info;
1099         arg->vht_cap = ev->vht_cap_info;
1100         arg->sw_ver0 = ev->abi.abi_ver0;
1101         arg->sw_ver1 = ev->abi.abi_ver1;
1102         arg->fw_build = ev->fw_build_vers;
1103         arg->phy_capab = ev->phy_capability;
1104         arg->num_rf_chains = ev->num_rf_chains;
1105         arg->eeprom_rd = reg->eeprom_rd;
1106         arg->low_5ghz_chan = reg->low_5ghz_chan;
1107         arg->high_5ghz_chan = reg->high_5ghz_chan;
1108         arg->num_mem_reqs = ev->num_mem_reqs;
1109         arg->service_map = svc_bmap;
1110         arg->service_map_len = ath10k_wmi_tlv_len(svc_bmap);
1111
1112         ret = ath10k_wmi_tlv_iter(ar, mem_reqs, ath10k_wmi_tlv_len(mem_reqs),
1113                                   ath10k_wmi_tlv_parse_mem_reqs, arg);
1114         if (ret) {
1115                 ath10k_warn(ar, "failed to parse mem_reqs tlv: %d\n", ret);
1116                 return ret;
1117         }
1118
1119         return 0;
1120 }
1121
1122 static int ath10k_wmi_tlv_op_pull_rdy_ev(struct ath10k *ar,
1123                                          struct sk_buff *skb,
1124                                          struct wmi_rdy_ev_arg *arg)
1125 {
1126         const void **tb;
1127         const struct wmi_tlv_rdy_ev *ev;
1128         int ret;
1129
1130         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
1131         if (IS_ERR(tb)) {
1132                 ret = PTR_ERR(tb);
1133                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1134                 return ret;
1135         }
1136
1137         ev = tb[WMI_TLV_TAG_STRUCT_READY_EVENT];
1138         if (!ev) {
1139                 kfree(tb);
1140                 return -EPROTO;
1141         }
1142
1143         arg->sw_version = ev->abi.abi_ver0;
1144         arg->abi_version = ev->abi.abi_ver1;
1145         arg->status = ev->status;
1146         arg->mac_addr = ev->mac_addr.addr;
1147
1148         kfree(tb);
1149         return 0;
1150 }
1151
1152 static int ath10k_wmi_tlv_svc_avail_parse(struct ath10k *ar, u16 tag, u16 len,
1153                                           const void *ptr, void *data)
1154 {
1155         struct wmi_svc_avail_ev_arg *arg = data;
1156
1157         switch (tag) {
1158         case WMI_TLV_TAG_STRUCT_SERVICE_AVAILABLE_EVENT:
1159                 arg->service_map_ext_len = *(__le32 *)ptr;
1160                 arg->service_map_ext = ptr + sizeof(__le32);
1161                 return 0;
1162         default:
1163                 break;
1164         }
1165         return -EPROTO;
1166 }
1167
1168 static int ath10k_wmi_tlv_op_pull_svc_avail(struct ath10k *ar,
1169                                             struct sk_buff *skb,
1170                                             struct wmi_svc_avail_ev_arg *arg)
1171 {
1172         int ret;
1173
1174         ret = ath10k_wmi_tlv_iter(ar, skb->data, skb->len,
1175                                   ath10k_wmi_tlv_svc_avail_parse, arg);
1176
1177         if (ret) {
1178                 ath10k_warn(ar, "failed to parse svc_avail tlv: %d\n", ret);
1179                 return ret;
1180         }
1181
1182         return 0;
1183 }
1184
1185 static void ath10k_wmi_tlv_pull_vdev_stats(const struct wmi_tlv_vdev_stats *src,
1186                                            struct ath10k_fw_stats_vdev *dst)
1187 {
1188         int i;
1189
1190         dst->vdev_id = __le32_to_cpu(src->vdev_id);
1191         dst->beacon_snr = __le32_to_cpu(src->beacon_snr);
1192         dst->data_snr = __le32_to_cpu(src->data_snr);
1193         dst->num_rx_frames = __le32_to_cpu(src->num_rx_frames);
1194         dst->num_rts_fail = __le32_to_cpu(src->num_rts_fail);
1195         dst->num_rts_success = __le32_to_cpu(src->num_rts_success);
1196         dst->num_rx_err = __le32_to_cpu(src->num_rx_err);
1197         dst->num_rx_discard = __le32_to_cpu(src->num_rx_discard);
1198         dst->num_tx_not_acked = __le32_to_cpu(src->num_tx_not_acked);
1199
1200         for (i = 0; i < ARRAY_SIZE(src->num_tx_frames); i++)
1201                 dst->num_tx_frames[i] =
1202                         __le32_to_cpu(src->num_tx_frames[i]);
1203
1204         for (i = 0; i < ARRAY_SIZE(src->num_tx_frames_retries); i++)
1205                 dst->num_tx_frames_retries[i] =
1206                         __le32_to_cpu(src->num_tx_frames_retries[i]);
1207
1208         for (i = 0; i < ARRAY_SIZE(src->num_tx_frames_failures); i++)
1209                 dst->num_tx_frames_failures[i] =
1210                         __le32_to_cpu(src->num_tx_frames_failures[i]);
1211
1212         for (i = 0; i < ARRAY_SIZE(src->tx_rate_history); i++)
1213                 dst->tx_rate_history[i] =
1214                         __le32_to_cpu(src->tx_rate_history[i]);
1215
1216         for (i = 0; i < ARRAY_SIZE(src->beacon_rssi_history); i++)
1217                 dst->beacon_rssi_history[i] =
1218                         __le32_to_cpu(src->beacon_rssi_history[i]);
1219 }
1220
1221 static int ath10k_wmi_tlv_op_pull_fw_stats(struct ath10k *ar,
1222                                            struct sk_buff *skb,
1223                                            struct ath10k_fw_stats *stats)
1224 {
1225         const void **tb;
1226         const struct wmi_tlv_stats_ev *ev;
1227         const void *data;
1228         u32 num_pdev_stats;
1229         u32 num_vdev_stats;
1230         u32 num_peer_stats;
1231         u32 num_bcnflt_stats;
1232         u32 num_chan_stats;
1233         size_t data_len;
1234         int ret;
1235         int i;
1236
1237         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
1238         if (IS_ERR(tb)) {
1239                 ret = PTR_ERR(tb);
1240                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1241                 return ret;
1242         }
1243
1244         ev = tb[WMI_TLV_TAG_STRUCT_STATS_EVENT];
1245         data = tb[WMI_TLV_TAG_ARRAY_BYTE];
1246
1247         if (!ev || !data) {
1248                 kfree(tb);
1249                 return -EPROTO;
1250         }
1251
1252         data_len = ath10k_wmi_tlv_len(data);
1253         num_pdev_stats = __le32_to_cpu(ev->num_pdev_stats);
1254         num_vdev_stats = __le32_to_cpu(ev->num_vdev_stats);
1255         num_peer_stats = __le32_to_cpu(ev->num_peer_stats);
1256         num_bcnflt_stats = __le32_to_cpu(ev->num_bcnflt_stats);
1257         num_chan_stats = __le32_to_cpu(ev->num_chan_stats);
1258
1259         ath10k_dbg(ar, ATH10K_DBG_WMI,
1260                    "wmi tlv stats update pdev %i vdev %i peer %i bcnflt %i chan %i\n",
1261                    num_pdev_stats, num_vdev_stats, num_peer_stats,
1262                    num_bcnflt_stats, num_chan_stats);
1263
1264         for (i = 0; i < num_pdev_stats; i++) {
1265                 const struct wmi_pdev_stats *src;
1266                 struct ath10k_fw_stats_pdev *dst;
1267
1268                 src = data;
1269                 if (data_len < sizeof(*src)) {
1270                         kfree(tb);
1271                         return -EPROTO;
1272                 }
1273
1274                 data += sizeof(*src);
1275                 data_len -= sizeof(*src);
1276
1277                 dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
1278                 if (!dst)
1279                         continue;
1280
1281                 ath10k_wmi_pull_pdev_stats_base(&src->base, dst);
1282                 ath10k_wmi_pull_pdev_stats_tx(&src->tx, dst);
1283                 ath10k_wmi_pull_pdev_stats_rx(&src->rx, dst);
1284                 list_add_tail(&dst->list, &stats->pdevs);
1285         }
1286
1287         for (i = 0; i < num_vdev_stats; i++) {
1288                 const struct wmi_tlv_vdev_stats *src;
1289                 struct ath10k_fw_stats_vdev *dst;
1290
1291                 src = data;
1292                 if (data_len < sizeof(*src)) {
1293                         kfree(tb);
1294                         return -EPROTO;
1295                 }
1296
1297                 data += sizeof(*src);
1298                 data_len -= sizeof(*src);
1299
1300                 dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
1301                 if (!dst)
1302                         continue;
1303
1304                 ath10k_wmi_tlv_pull_vdev_stats(src, dst);
1305                 list_add_tail(&dst->list, &stats->vdevs);
1306         }
1307
1308         for (i = 0; i < num_peer_stats; i++) {
1309                 const struct wmi_10x_peer_stats *src;
1310                 struct ath10k_fw_stats_peer *dst;
1311
1312                 src = data;
1313                 if (data_len < sizeof(*src)) {
1314                         kfree(tb);
1315                         return -EPROTO;
1316                 }
1317
1318                 data += sizeof(*src);
1319                 data_len -= sizeof(*src);
1320
1321                 dst = kzalloc(sizeof(*dst), GFP_ATOMIC);
1322                 if (!dst)
1323                         continue;
1324
1325                 ath10k_wmi_pull_peer_stats(&src->old, dst);
1326                 dst->peer_rx_rate = __le32_to_cpu(src->peer_rx_rate);
1327                 list_add_tail(&dst->list, &stats->peers);
1328         }
1329
1330         kfree(tb);
1331         return 0;
1332 }
1333
1334 static int ath10k_wmi_tlv_op_pull_roam_ev(struct ath10k *ar,
1335                                           struct sk_buff *skb,
1336                                           struct wmi_roam_ev_arg *arg)
1337 {
1338         const void **tb;
1339         const struct wmi_tlv_roam_ev *ev;
1340         int ret;
1341
1342         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
1343         if (IS_ERR(tb)) {
1344                 ret = PTR_ERR(tb);
1345                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1346                 return ret;
1347         }
1348
1349         ev = tb[WMI_TLV_TAG_STRUCT_ROAM_EVENT];
1350         if (!ev) {
1351                 kfree(tb);
1352                 return -EPROTO;
1353         }
1354
1355         arg->vdev_id = ev->vdev_id;
1356         arg->reason = ev->reason;
1357         arg->rssi = ev->rssi;
1358
1359         kfree(tb);
1360         return 0;
1361 }
1362
1363 static int
1364 ath10k_wmi_tlv_op_pull_wow_ev(struct ath10k *ar, struct sk_buff *skb,
1365                               struct wmi_wow_ev_arg *arg)
1366 {
1367         const void **tb;
1368         const struct wmi_tlv_wow_event_info *ev;
1369         int ret;
1370
1371         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
1372         if (IS_ERR(tb)) {
1373                 ret = PTR_ERR(tb);
1374                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1375                 return ret;
1376         }
1377
1378         ev = tb[WMI_TLV_TAG_STRUCT_WOW_EVENT_INFO];
1379         if (!ev) {
1380                 kfree(tb);
1381                 return -EPROTO;
1382         }
1383
1384         arg->vdev_id = __le32_to_cpu(ev->vdev_id);
1385         arg->flag = __le32_to_cpu(ev->flag);
1386         arg->wake_reason = __le32_to_cpu(ev->wake_reason);
1387         arg->data_len = __le32_to_cpu(ev->data_len);
1388
1389         kfree(tb);
1390         return 0;
1391 }
1392
1393 static int ath10k_wmi_tlv_op_pull_echo_ev(struct ath10k *ar,
1394                                           struct sk_buff *skb,
1395                                           struct wmi_echo_ev_arg *arg)
1396 {
1397         const void **tb;
1398         const struct wmi_echo_event *ev;
1399         int ret;
1400
1401         tb = ath10k_wmi_tlv_parse_alloc(ar, skb->data, skb->len, GFP_ATOMIC);
1402         if (IS_ERR(tb)) {
1403                 ret = PTR_ERR(tb);
1404                 ath10k_warn(ar, "failed to parse tlv: %d\n", ret);
1405                 return ret;
1406         }
1407
1408         ev = tb[WMI_TLV_TAG_STRUCT_ECHO_EVENT];
1409         if (!ev) {
1410                 kfree(tb);
1411                 return -EPROTO;
1412         }
1413
1414         arg->value = ev->value;
1415
1416         kfree(tb);
1417         return 0;
1418 }
1419
1420 static struct sk_buff *
1421 ath10k_wmi_tlv_op_gen_pdev_suspend(struct ath10k *ar, u32 opt)
1422 {
1423         struct wmi_tlv_pdev_suspend *cmd;
1424         struct wmi_tlv *tlv;
1425         struct sk_buff *skb;
1426
1427         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1428         if (!skb)
1429                 return ERR_PTR(-ENOMEM);
1430
1431         tlv = (void *)skb->data;
1432         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_SUSPEND_CMD);
1433         tlv->len = __cpu_to_le16(sizeof(*cmd));
1434         cmd = (void *)tlv->value;
1435         cmd->opt = __cpu_to_le32(opt);
1436
1437         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pdev suspend\n");
1438         return skb;
1439 }
1440
1441 static struct sk_buff *
1442 ath10k_wmi_tlv_op_gen_pdev_resume(struct ath10k *ar)
1443 {
1444         struct wmi_tlv_resume_cmd *cmd;
1445         struct wmi_tlv *tlv;
1446         struct sk_buff *skb;
1447
1448         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1449         if (!skb)
1450                 return ERR_PTR(-ENOMEM);
1451
1452         tlv = (void *)skb->data;
1453         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_RESUME_CMD);
1454         tlv->len = __cpu_to_le16(sizeof(*cmd));
1455         cmd = (void *)tlv->value;
1456         cmd->reserved = __cpu_to_le32(0);
1457
1458         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pdev resume\n");
1459         return skb;
1460 }
1461
1462 static struct sk_buff *
1463 ath10k_wmi_tlv_op_gen_pdev_set_rd(struct ath10k *ar,
1464                                   u16 rd, u16 rd2g, u16 rd5g,
1465                                   u16 ctl2g, u16 ctl5g,
1466                                   enum wmi_dfs_region dfs_reg)
1467 {
1468         struct wmi_tlv_pdev_set_rd_cmd *cmd;
1469         struct wmi_tlv *tlv;
1470         struct sk_buff *skb;
1471
1472         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1473         if (!skb)
1474                 return ERR_PTR(-ENOMEM);
1475
1476         tlv = (void *)skb->data;
1477         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_SET_REGDOMAIN_CMD);
1478         tlv->len = __cpu_to_le16(sizeof(*cmd));
1479         cmd = (void *)tlv->value;
1480         cmd->regd = __cpu_to_le32(rd);
1481         cmd->regd_2ghz = __cpu_to_le32(rd2g);
1482         cmd->regd_5ghz = __cpu_to_le32(rd5g);
1483         cmd->conform_limit_2ghz = __cpu_to_le32(ctl2g);
1484         cmd->conform_limit_5ghz = __cpu_to_le32(ctl5g);
1485
1486         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pdev set rd\n");
1487         return skb;
1488 }
1489
1490 static enum wmi_txbf_conf ath10k_wmi_tlv_txbf_conf_scheme(struct ath10k *ar)
1491 {
1492         return WMI_TXBF_CONF_AFTER_ASSOC;
1493 }
1494
1495 static struct sk_buff *
1496 ath10k_wmi_tlv_op_gen_pdev_set_param(struct ath10k *ar, u32 param_id,
1497                                      u32 param_value)
1498 {
1499         struct wmi_tlv_pdev_set_param_cmd *cmd;
1500         struct wmi_tlv *tlv;
1501         struct sk_buff *skb;
1502
1503         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1504         if (!skb)
1505                 return ERR_PTR(-ENOMEM);
1506
1507         tlv = (void *)skb->data;
1508         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_SET_PARAM_CMD);
1509         tlv->len = __cpu_to_le16(sizeof(*cmd));
1510         cmd = (void *)tlv->value;
1511         cmd->param_id = __cpu_to_le32(param_id);
1512         cmd->param_value = __cpu_to_le32(param_value);
1513
1514         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pdev set param\n");
1515         return skb;
1516 }
1517
1518 static struct sk_buff *ath10k_wmi_tlv_op_gen_init(struct ath10k *ar)
1519 {
1520         struct sk_buff *skb;
1521         struct wmi_tlv *tlv;
1522         struct wmi_tlv_init_cmd *cmd;
1523         struct wmi_tlv_resource_config *cfg;
1524         struct wmi_host_mem_chunks *chunks;
1525         size_t len, chunks_len;
1526         void *ptr;
1527
1528         chunks_len = ar->wmi.num_mem_chunks * sizeof(struct host_memory_chunk);
1529         len = (sizeof(*tlv) + sizeof(*cmd)) +
1530               (sizeof(*tlv) + sizeof(*cfg)) +
1531               (sizeof(*tlv) + chunks_len);
1532
1533         skb = ath10k_wmi_alloc_skb(ar, len);
1534         if (!skb)
1535                 return ERR_PTR(-ENOMEM);
1536
1537         ptr = skb->data;
1538
1539         tlv = ptr;
1540         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_INIT_CMD);
1541         tlv->len = __cpu_to_le16(sizeof(*cmd));
1542         cmd = (void *)tlv->value;
1543         ptr += sizeof(*tlv);
1544         ptr += sizeof(*cmd);
1545
1546         tlv = ptr;
1547         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_RESOURCE_CONFIG);
1548         tlv->len = __cpu_to_le16(sizeof(*cfg));
1549         cfg = (void *)tlv->value;
1550         ptr += sizeof(*tlv);
1551         ptr += sizeof(*cfg);
1552
1553         tlv = ptr;
1554         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
1555         tlv->len = __cpu_to_le16(chunks_len);
1556         chunks = (void *)tlv->value;
1557
1558         ptr += sizeof(*tlv);
1559         ptr += chunks_len;
1560
1561         cmd->abi.abi_ver0 = __cpu_to_le32(WMI_TLV_ABI_VER0);
1562         cmd->abi.abi_ver1 = __cpu_to_le32(WMI_TLV_ABI_VER1);
1563         cmd->abi.abi_ver_ns0 = __cpu_to_le32(WMI_TLV_ABI_VER_NS0);
1564         cmd->abi.abi_ver_ns1 = __cpu_to_le32(WMI_TLV_ABI_VER_NS1);
1565         cmd->abi.abi_ver_ns2 = __cpu_to_le32(WMI_TLV_ABI_VER_NS2);
1566         cmd->abi.abi_ver_ns3 = __cpu_to_le32(WMI_TLV_ABI_VER_NS3);
1567         cmd->num_host_mem_chunks = __cpu_to_le32(ar->wmi.num_mem_chunks);
1568
1569         cfg->num_vdevs = __cpu_to_le32(TARGET_TLV_NUM_VDEVS);
1570
1571         if (ar->hw_params.num_peers)
1572                 cfg->num_peers = __cpu_to_le32(ar->hw_params.num_peers);
1573         else
1574                 cfg->num_peers = __cpu_to_le32(TARGET_TLV_NUM_PEERS);
1575         cfg->ast_skid_limit = __cpu_to_le32(ar->hw_params.ast_skid_limit);
1576         cfg->num_wds_entries = __cpu_to_le32(ar->hw_params.num_wds_entries);
1577
1578         if (test_bit(WMI_SERVICE_RX_FULL_REORDER, ar->wmi.svc_map)) {
1579                 cfg->num_offload_peers = __cpu_to_le32(TARGET_TLV_NUM_VDEVS);
1580                 cfg->num_offload_reorder_bufs = __cpu_to_le32(TARGET_TLV_NUM_VDEVS);
1581         } else {
1582                 cfg->num_offload_peers = __cpu_to_le32(0);
1583                 cfg->num_offload_reorder_bufs = __cpu_to_le32(0);
1584         }
1585
1586         cfg->num_peer_keys = __cpu_to_le32(2);
1587         if (ar->hw_params.num_peers)
1588                 cfg->num_tids = __cpu_to_le32(ar->hw_params.num_peers * 2);
1589         else
1590                 cfg->num_tids = __cpu_to_le32(TARGET_TLV_NUM_TIDS);
1591         cfg->tx_chain_mask = __cpu_to_le32(0x7);
1592         cfg->rx_chain_mask = __cpu_to_le32(0x7);
1593         cfg->rx_timeout_pri[0] = __cpu_to_le32(0x64);
1594         cfg->rx_timeout_pri[1] = __cpu_to_le32(0x64);
1595         cfg->rx_timeout_pri[2] = __cpu_to_le32(0x64);
1596         cfg->rx_timeout_pri[3] = __cpu_to_le32(0x28);
1597         cfg->rx_decap_mode = __cpu_to_le32(ar->wmi.rx_decap_mode);
1598         cfg->scan_max_pending_reqs = __cpu_to_le32(4);
1599         cfg->bmiss_offload_max_vdev = __cpu_to_le32(TARGET_TLV_NUM_VDEVS);
1600         cfg->roam_offload_max_vdev = __cpu_to_le32(TARGET_TLV_NUM_VDEVS);
1601         cfg->roam_offload_max_ap_profiles = __cpu_to_le32(8);
1602         cfg->num_mcast_groups = __cpu_to_le32(0);
1603         cfg->num_mcast_table_elems = __cpu_to_le32(0);
1604         cfg->mcast2ucast_mode = __cpu_to_le32(0);
1605         cfg->tx_dbg_log_size = __cpu_to_le32(0x400);
1606         cfg->dma_burst_size = __cpu_to_le32(0);
1607         cfg->mac_aggr_delim = __cpu_to_le32(0);
1608         cfg->rx_skip_defrag_timeout_dup_detection_check = __cpu_to_le32(0);
1609         cfg->vow_config = __cpu_to_le32(0);
1610         cfg->gtk_offload_max_vdev = __cpu_to_le32(2);
1611         cfg->num_msdu_desc = __cpu_to_le32(TARGET_TLV_NUM_MSDU_DESC);
1612         cfg->max_frag_entries = __cpu_to_le32(2);
1613         cfg->num_tdls_vdevs = __cpu_to_le32(TARGET_TLV_NUM_TDLS_VDEVS);
1614         cfg->num_tdls_conn_table_entries = __cpu_to_le32(0x20);
1615         cfg->beacon_tx_offload_max_vdev = __cpu_to_le32(2);
1616         cfg->num_multicast_filter_entries = __cpu_to_le32(5);
1617         cfg->num_wow_filters = __cpu_to_le32(ar->wow.max_num_patterns);
1618         cfg->num_keep_alive_pattern = __cpu_to_le32(6);
1619         cfg->keep_alive_pattern_size = __cpu_to_le32(0);
1620         cfg->max_tdls_concurrent_sleep_sta = __cpu_to_le32(1);
1621         cfg->max_tdls_concurrent_buffer_sta = __cpu_to_le32(1);
1622         cfg->wmi_send_separate = __cpu_to_le32(0);
1623         cfg->num_ocb_vdevs = __cpu_to_le32(0);
1624         cfg->num_ocb_channels = __cpu_to_le32(0);
1625         cfg->num_ocb_schedules = __cpu_to_le32(0);
1626         cfg->host_capab = __cpu_to_le32(0);
1627
1628         ath10k_wmi_put_host_mem_chunks(ar, chunks);
1629
1630         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv init\n");
1631         return skb;
1632 }
1633
1634 static struct sk_buff *
1635 ath10k_wmi_tlv_op_gen_start_scan(struct ath10k *ar,
1636                                  const struct wmi_start_scan_arg *arg)
1637 {
1638         struct wmi_tlv_start_scan_cmd *cmd;
1639         struct wmi_tlv *tlv;
1640         struct sk_buff *skb;
1641         size_t len, chan_len, ssid_len, bssid_len, ie_len;
1642         __le32 *chans;
1643         struct wmi_ssid *ssids;
1644         struct wmi_mac_addr *addrs;
1645         void *ptr;
1646         int i, ret;
1647
1648         ret = ath10k_wmi_start_scan_verify(arg);
1649         if (ret)
1650                 return ERR_PTR(ret);
1651
1652         chan_len = arg->n_channels * sizeof(__le32);
1653         ssid_len = arg->n_ssids * sizeof(struct wmi_ssid);
1654         bssid_len = arg->n_bssids * sizeof(struct wmi_mac_addr);
1655         ie_len = roundup(arg->ie_len, 4);
1656         len = (sizeof(*tlv) + sizeof(*cmd)) +
1657               sizeof(*tlv) + chan_len +
1658               sizeof(*tlv) + ssid_len +
1659               sizeof(*tlv) + bssid_len +
1660               sizeof(*tlv) + ie_len;
1661
1662         skb = ath10k_wmi_alloc_skb(ar, len);
1663         if (!skb)
1664                 return ERR_PTR(-ENOMEM);
1665
1666         ptr = (void *)skb->data;
1667         tlv = ptr;
1668         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_START_SCAN_CMD);
1669         tlv->len = __cpu_to_le16(sizeof(*cmd));
1670         cmd = (void *)tlv->value;
1671
1672         ath10k_wmi_put_start_scan_common(&cmd->common, arg);
1673         cmd->burst_duration_ms = __cpu_to_le32(arg->burst_duration_ms);
1674         cmd->num_channels = __cpu_to_le32(arg->n_channels);
1675         cmd->num_ssids = __cpu_to_le32(arg->n_ssids);
1676         cmd->num_bssids = __cpu_to_le32(arg->n_bssids);
1677         cmd->ie_len = __cpu_to_le32(arg->ie_len);
1678         cmd->num_probes = __cpu_to_le32(3);
1679         ether_addr_copy(cmd->mac_addr.addr, arg->mac_addr.addr);
1680         ether_addr_copy(cmd->mac_mask.addr, arg->mac_mask.addr);
1681
1682         /* FIXME: There are some scan flag inconsistencies across firmwares,
1683          * e.g. WMI-TLV inverts the logic behind the following flag.
1684          */
1685         cmd->common.scan_ctrl_flags ^= __cpu_to_le32(WMI_SCAN_FILTER_PROBE_REQ);
1686
1687         ptr += sizeof(*tlv);
1688         ptr += sizeof(*cmd);
1689
1690         tlv = ptr;
1691         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_UINT32);
1692         tlv->len = __cpu_to_le16(chan_len);
1693         chans = (void *)tlv->value;
1694         for (i = 0; i < arg->n_channels; i++)
1695                 chans[i] = __cpu_to_le32(arg->channels[i]);
1696
1697         ptr += sizeof(*tlv);
1698         ptr += chan_len;
1699
1700         tlv = ptr;
1701         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_FIXED_STRUCT);
1702         tlv->len = __cpu_to_le16(ssid_len);
1703         ssids = (void *)tlv->value;
1704         for (i = 0; i < arg->n_ssids; i++) {
1705                 ssids[i].ssid_len = __cpu_to_le32(arg->ssids[i].len);
1706                 memcpy(ssids[i].ssid, arg->ssids[i].ssid, arg->ssids[i].len);
1707         }
1708
1709         ptr += sizeof(*tlv);
1710         ptr += ssid_len;
1711
1712         tlv = ptr;
1713         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_FIXED_STRUCT);
1714         tlv->len = __cpu_to_le16(bssid_len);
1715         addrs = (void *)tlv->value;
1716         for (i = 0; i < arg->n_bssids; i++)
1717                 ether_addr_copy(addrs[i].addr, arg->bssids[i].bssid);
1718
1719         ptr += sizeof(*tlv);
1720         ptr += bssid_len;
1721
1722         tlv = ptr;
1723         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
1724         tlv->len = __cpu_to_le16(ie_len);
1725         memcpy(tlv->value, arg->ie, arg->ie_len);
1726
1727         ptr += sizeof(*tlv);
1728         ptr += ie_len;
1729
1730         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv start scan\n");
1731         return skb;
1732 }
1733
1734 static struct sk_buff *
1735 ath10k_wmi_tlv_op_gen_stop_scan(struct ath10k *ar,
1736                                 const struct wmi_stop_scan_arg *arg)
1737 {
1738         struct wmi_stop_scan_cmd *cmd;
1739         struct wmi_tlv *tlv;
1740         struct sk_buff *skb;
1741         u32 scan_id;
1742         u32 req_id;
1743
1744         if (arg->req_id > 0xFFF)
1745                 return ERR_PTR(-EINVAL);
1746         if (arg->req_type == WMI_SCAN_STOP_ONE && arg->u.scan_id > 0xFFF)
1747                 return ERR_PTR(-EINVAL);
1748
1749         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1750         if (!skb)
1751                 return ERR_PTR(-ENOMEM);
1752
1753         scan_id = arg->u.scan_id;
1754         scan_id |= WMI_HOST_SCAN_REQ_ID_PREFIX;
1755
1756         req_id = arg->req_id;
1757         req_id |= WMI_HOST_SCAN_REQUESTOR_ID_PREFIX;
1758
1759         tlv = (void *)skb->data;
1760         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STOP_SCAN_CMD);
1761         tlv->len = __cpu_to_le16(sizeof(*cmd));
1762         cmd = (void *)tlv->value;
1763         cmd->req_type = __cpu_to_le32(arg->req_type);
1764         cmd->vdev_id = __cpu_to_le32(arg->u.vdev_id);
1765         cmd->scan_id = __cpu_to_le32(scan_id);
1766         cmd->scan_req_id = __cpu_to_le32(req_id);
1767
1768         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv stop scan\n");
1769         return skb;
1770 }
1771
1772 static struct sk_buff *
1773 ath10k_wmi_tlv_op_gen_vdev_create(struct ath10k *ar,
1774                                   u32 vdev_id,
1775                                   enum wmi_vdev_type vdev_type,
1776                                   enum wmi_vdev_subtype vdev_subtype,
1777                                   const u8 mac_addr[ETH_ALEN])
1778 {
1779         struct wmi_vdev_create_cmd *cmd;
1780         struct wmi_tlv *tlv;
1781         struct sk_buff *skb;
1782
1783         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1784         if (!skb)
1785                 return ERR_PTR(-ENOMEM);
1786
1787         tlv = (void *)skb->data;
1788         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_CREATE_CMD);
1789         tlv->len = __cpu_to_le16(sizeof(*cmd));
1790         cmd = (void *)tlv->value;
1791         cmd->vdev_id = __cpu_to_le32(vdev_id);
1792         cmd->vdev_type = __cpu_to_le32(vdev_type);
1793         cmd->vdev_subtype = __cpu_to_le32(vdev_subtype);
1794         ether_addr_copy(cmd->vdev_macaddr.addr, mac_addr);
1795
1796         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev create\n");
1797         return skb;
1798 }
1799
1800 static struct sk_buff *
1801 ath10k_wmi_tlv_op_gen_vdev_delete(struct ath10k *ar, u32 vdev_id)
1802 {
1803         struct wmi_vdev_delete_cmd *cmd;
1804         struct wmi_tlv *tlv;
1805         struct sk_buff *skb;
1806
1807         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1808         if (!skb)
1809                 return ERR_PTR(-ENOMEM);
1810
1811         tlv = (void *)skb->data;
1812         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_DELETE_CMD);
1813         tlv->len = __cpu_to_le16(sizeof(*cmd));
1814         cmd = (void *)tlv->value;
1815         cmd->vdev_id = __cpu_to_le32(vdev_id);
1816
1817         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev delete\n");
1818         return skb;
1819 }
1820
1821 static struct sk_buff *
1822 ath10k_wmi_tlv_op_gen_vdev_start(struct ath10k *ar,
1823                                  const struct wmi_vdev_start_request_arg *arg,
1824                                  bool restart)
1825 {
1826         struct wmi_tlv_vdev_start_cmd *cmd;
1827         struct wmi_channel *ch;
1828         struct wmi_tlv *tlv;
1829         struct sk_buff *skb;
1830         size_t len;
1831         void *ptr;
1832         u32 flags = 0;
1833
1834         if (WARN_ON(arg->hidden_ssid && !arg->ssid))
1835                 return ERR_PTR(-EINVAL);
1836         if (WARN_ON(arg->ssid_len > sizeof(cmd->ssid.ssid)))
1837                 return ERR_PTR(-EINVAL);
1838
1839         len = (sizeof(*tlv) + sizeof(*cmd)) +
1840               (sizeof(*tlv) + sizeof(*ch)) +
1841               (sizeof(*tlv) + 0);
1842         skb = ath10k_wmi_alloc_skb(ar, len);
1843         if (!skb)
1844                 return ERR_PTR(-ENOMEM);
1845
1846         if (arg->hidden_ssid)
1847                 flags |= WMI_VDEV_START_HIDDEN_SSID;
1848         if (arg->pmf_enabled)
1849                 flags |= WMI_VDEV_START_PMF_ENABLED;
1850
1851         ptr = (void *)skb->data;
1852
1853         tlv = ptr;
1854         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_START_REQUEST_CMD);
1855         tlv->len = __cpu_to_le16(sizeof(*cmd));
1856         cmd = (void *)tlv->value;
1857         cmd->vdev_id = __cpu_to_le32(arg->vdev_id);
1858         cmd->bcn_intval = __cpu_to_le32(arg->bcn_intval);
1859         cmd->dtim_period = __cpu_to_le32(arg->dtim_period);
1860         cmd->flags = __cpu_to_le32(flags);
1861         cmd->bcn_tx_rate = __cpu_to_le32(arg->bcn_tx_rate);
1862         cmd->bcn_tx_power = __cpu_to_le32(arg->bcn_tx_power);
1863         cmd->disable_hw_ack = __cpu_to_le32(arg->disable_hw_ack);
1864
1865         if (arg->ssid) {
1866                 cmd->ssid.ssid_len = __cpu_to_le32(arg->ssid_len);
1867                 memcpy(cmd->ssid.ssid, arg->ssid, arg->ssid_len);
1868         }
1869
1870         ptr += sizeof(*tlv);
1871         ptr += sizeof(*cmd);
1872
1873         tlv = ptr;
1874         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_CHANNEL);
1875         tlv->len = __cpu_to_le16(sizeof(*ch));
1876         ch = (void *)tlv->value;
1877         ath10k_wmi_put_wmi_channel(ch, &arg->channel);
1878
1879         ptr += sizeof(*tlv);
1880         ptr += sizeof(*ch);
1881
1882         tlv = ptr;
1883         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
1884         tlv->len = 0;
1885
1886         /* Note: This is a nested TLV containing:
1887          * [wmi_tlv][wmi_p2p_noa_descriptor][wmi_tlv]..
1888          */
1889
1890         ptr += sizeof(*tlv);
1891         ptr += 0;
1892
1893         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev start\n");
1894         return skb;
1895 }
1896
1897 static struct sk_buff *
1898 ath10k_wmi_tlv_op_gen_vdev_stop(struct ath10k *ar, u32 vdev_id)
1899 {
1900         struct wmi_vdev_stop_cmd *cmd;
1901         struct wmi_tlv *tlv;
1902         struct sk_buff *skb;
1903
1904         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1905         if (!skb)
1906                 return ERR_PTR(-ENOMEM);
1907
1908         tlv = (void *)skb->data;
1909         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_STOP_CMD);
1910         tlv->len = __cpu_to_le16(sizeof(*cmd));
1911         cmd = (void *)tlv->value;
1912         cmd->vdev_id = __cpu_to_le32(vdev_id);
1913
1914         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev stop\n");
1915         return skb;
1916 }
1917
1918 static struct sk_buff *
1919 ath10k_wmi_tlv_op_gen_vdev_up(struct ath10k *ar, u32 vdev_id, u32 aid,
1920                               const u8 *bssid)
1921
1922 {
1923         struct wmi_vdev_up_cmd *cmd;
1924         struct wmi_tlv *tlv;
1925         struct sk_buff *skb;
1926
1927         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1928         if (!skb)
1929                 return ERR_PTR(-ENOMEM);
1930
1931         tlv = (void *)skb->data;
1932         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_UP_CMD);
1933         tlv->len = __cpu_to_le16(sizeof(*cmd));
1934         cmd = (void *)tlv->value;
1935         cmd->vdev_id = __cpu_to_le32(vdev_id);
1936         cmd->vdev_assoc_id = __cpu_to_le32(aid);
1937         ether_addr_copy(cmd->vdev_bssid.addr, bssid);
1938
1939         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev up\n");
1940         return skb;
1941 }
1942
1943 static struct sk_buff *
1944 ath10k_wmi_tlv_op_gen_vdev_down(struct ath10k *ar, u32 vdev_id)
1945 {
1946         struct wmi_vdev_down_cmd *cmd;
1947         struct wmi_tlv *tlv;
1948         struct sk_buff *skb;
1949
1950         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1951         if (!skb)
1952                 return ERR_PTR(-ENOMEM);
1953
1954         tlv = (void *)skb->data;
1955         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_DOWN_CMD);
1956         tlv->len = __cpu_to_le16(sizeof(*cmd));
1957         cmd = (void *)tlv->value;
1958         cmd->vdev_id = __cpu_to_le32(vdev_id);
1959
1960         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev down\n");
1961         return skb;
1962 }
1963
1964 static struct sk_buff *
1965 ath10k_wmi_tlv_op_gen_vdev_set_param(struct ath10k *ar, u32 vdev_id,
1966                                      u32 param_id, u32 param_value)
1967 {
1968         struct wmi_vdev_set_param_cmd *cmd;
1969         struct wmi_tlv *tlv;
1970         struct sk_buff *skb;
1971
1972         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
1973         if (!skb)
1974                 return ERR_PTR(-ENOMEM);
1975
1976         tlv = (void *)skb->data;
1977         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_SET_PARAM_CMD);
1978         tlv->len = __cpu_to_le16(sizeof(*cmd));
1979         cmd = (void *)tlv->value;
1980         cmd->vdev_id = __cpu_to_le32(vdev_id);
1981         cmd->param_id = __cpu_to_le32(param_id);
1982         cmd->param_value = __cpu_to_le32(param_value);
1983
1984         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev set param\n");
1985         return skb;
1986 }
1987
1988 static struct sk_buff *
1989 ath10k_wmi_tlv_op_gen_vdev_install_key(struct ath10k *ar,
1990                                        const struct wmi_vdev_install_key_arg *arg)
1991 {
1992         struct wmi_vdev_install_key_cmd *cmd;
1993         struct wmi_tlv *tlv;
1994         struct sk_buff *skb;
1995         size_t len;
1996         void *ptr;
1997
1998         if (arg->key_cipher == WMI_CIPHER_NONE && arg->key_data != NULL)
1999                 return ERR_PTR(-EINVAL);
2000         if (arg->key_cipher != WMI_CIPHER_NONE && arg->key_data == NULL)
2001                 return ERR_PTR(-EINVAL);
2002
2003         len = sizeof(*tlv) + sizeof(*cmd) +
2004               sizeof(*tlv) + roundup(arg->key_len, sizeof(__le32));
2005         skb = ath10k_wmi_alloc_skb(ar, len);
2006         if (!skb)
2007                 return ERR_PTR(-ENOMEM);
2008
2009         ptr = (void *)skb->data;
2010         tlv = ptr;
2011         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_INSTALL_KEY_CMD);
2012         tlv->len = __cpu_to_le16(sizeof(*cmd));
2013         cmd = (void *)tlv->value;
2014         cmd->vdev_id = __cpu_to_le32(arg->vdev_id);
2015         cmd->key_idx = __cpu_to_le32(arg->key_idx);
2016         cmd->key_flags = __cpu_to_le32(arg->key_flags);
2017         cmd->key_cipher = __cpu_to_le32(arg->key_cipher);
2018         cmd->key_len = __cpu_to_le32(arg->key_len);
2019         cmd->key_txmic_len = __cpu_to_le32(arg->key_txmic_len);
2020         cmd->key_rxmic_len = __cpu_to_le32(arg->key_rxmic_len);
2021
2022         if (arg->macaddr)
2023                 ether_addr_copy(cmd->peer_macaddr.addr, arg->macaddr);
2024
2025         ptr += sizeof(*tlv);
2026         ptr += sizeof(*cmd);
2027
2028         tlv = ptr;
2029         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
2030         tlv->len = __cpu_to_le16(roundup(arg->key_len, sizeof(__le32)));
2031         if (arg->key_data)
2032                 memcpy(tlv->value, arg->key_data, arg->key_len);
2033
2034         ptr += sizeof(*tlv);
2035         ptr += roundup(arg->key_len, sizeof(__le32));
2036
2037         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev install key\n");
2038         return skb;
2039 }
2040
2041 static void *ath10k_wmi_tlv_put_uapsd_ac(struct ath10k *ar, void *ptr,
2042                                          const struct wmi_sta_uapsd_auto_trig_arg *arg)
2043 {
2044         struct wmi_sta_uapsd_auto_trig_param *ac;
2045         struct wmi_tlv *tlv;
2046
2047         tlv = ptr;
2048         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STA_UAPSD_AUTO_TRIG_PARAM);
2049         tlv->len = __cpu_to_le16(sizeof(*ac));
2050         ac = (void *)tlv->value;
2051
2052         ac->wmm_ac = __cpu_to_le32(arg->wmm_ac);
2053         ac->user_priority = __cpu_to_le32(arg->user_priority);
2054         ac->service_interval = __cpu_to_le32(arg->service_interval);
2055         ac->suspend_interval = __cpu_to_le32(arg->suspend_interval);
2056         ac->delay_interval = __cpu_to_le32(arg->delay_interval);
2057
2058         ath10k_dbg(ar, ATH10K_DBG_WMI,
2059                    "wmi tlv vdev sta uapsd auto trigger ac %d prio %d svc int %d susp int %d delay int %d\n",
2060                    ac->wmm_ac, ac->user_priority, ac->service_interval,
2061                    ac->suspend_interval, ac->delay_interval);
2062
2063         return ptr + sizeof(*tlv) + sizeof(*ac);
2064 }
2065
2066 static struct sk_buff *
2067 ath10k_wmi_tlv_op_gen_vdev_sta_uapsd(struct ath10k *ar, u32 vdev_id,
2068                                      const u8 peer_addr[ETH_ALEN],
2069                                      const struct wmi_sta_uapsd_auto_trig_arg *args,
2070                                      u32 num_ac)
2071 {
2072         struct wmi_sta_uapsd_auto_trig_cmd_fixed_param *cmd;
2073         struct wmi_sta_uapsd_auto_trig_param *ac;
2074         struct wmi_tlv *tlv;
2075         struct sk_buff *skb;
2076         size_t len;
2077         size_t ac_tlv_len;
2078         void *ptr;
2079         int i;
2080
2081         ac_tlv_len = num_ac * (sizeof(*tlv) + sizeof(*ac));
2082         len = sizeof(*tlv) + sizeof(*cmd) +
2083               sizeof(*tlv) + ac_tlv_len;
2084         skb = ath10k_wmi_alloc_skb(ar, len);
2085         if (!skb)
2086                 return ERR_PTR(-ENOMEM);
2087
2088         ptr = (void *)skb->data;
2089         tlv = ptr;
2090         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STA_UAPSD_AUTO_TRIG_CMD);
2091         tlv->len = __cpu_to_le16(sizeof(*cmd));
2092         cmd = (void *)tlv->value;
2093         cmd->vdev_id = __cpu_to_le32(vdev_id);
2094         cmd->num_ac = __cpu_to_le32(num_ac);
2095         ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
2096
2097         ptr += sizeof(*tlv);
2098         ptr += sizeof(*cmd);
2099
2100         tlv = ptr;
2101         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
2102         tlv->len = __cpu_to_le16(ac_tlv_len);
2103         ac = (void *)tlv->value;
2104
2105         ptr += sizeof(*tlv);
2106         for (i = 0; i < num_ac; i++)
2107                 ptr = ath10k_wmi_tlv_put_uapsd_ac(ar, ptr, &args[i]);
2108
2109         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev sta uapsd auto trigger\n");
2110         return skb;
2111 }
2112
2113 static void *ath10k_wmi_tlv_put_wmm(void *ptr,
2114                                     const struct wmi_wmm_params_arg *arg)
2115 {
2116         struct wmi_wmm_params *wmm;
2117         struct wmi_tlv *tlv;
2118
2119         tlv = ptr;
2120         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WMM_PARAMS);
2121         tlv->len = __cpu_to_le16(sizeof(*wmm));
2122         wmm = (void *)tlv->value;
2123         ath10k_wmi_set_wmm_param(wmm, arg);
2124
2125         return ptr + sizeof(*tlv) + sizeof(*wmm);
2126 }
2127
2128 static struct sk_buff *
2129 ath10k_wmi_tlv_op_gen_vdev_wmm_conf(struct ath10k *ar, u32 vdev_id,
2130                                     const struct wmi_wmm_params_all_arg *arg)
2131 {
2132         struct wmi_tlv_vdev_set_wmm_cmd *cmd;
2133         struct wmi_tlv *tlv;
2134         struct sk_buff *skb;
2135         size_t len;
2136         void *ptr;
2137
2138         len = sizeof(*tlv) + sizeof(*cmd);
2139         skb = ath10k_wmi_alloc_skb(ar, len);
2140         if (!skb)
2141                 return ERR_PTR(-ENOMEM);
2142
2143         ptr = (void *)skb->data;
2144         tlv = ptr;
2145         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_SET_WMM_PARAMS_CMD);
2146         tlv->len = __cpu_to_le16(sizeof(*cmd));
2147         cmd = (void *)tlv->value;
2148         cmd->vdev_id = __cpu_to_le32(vdev_id);
2149
2150         ath10k_wmi_set_wmm_param(&cmd->vdev_wmm_params[0].params, &arg->ac_be);
2151         ath10k_wmi_set_wmm_param(&cmd->vdev_wmm_params[1].params, &arg->ac_bk);
2152         ath10k_wmi_set_wmm_param(&cmd->vdev_wmm_params[2].params, &arg->ac_vi);
2153         ath10k_wmi_set_wmm_param(&cmd->vdev_wmm_params[3].params, &arg->ac_vo);
2154
2155         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv vdev wmm conf\n");
2156         return skb;
2157 }
2158
2159 static struct sk_buff *
2160 ath10k_wmi_tlv_op_gen_sta_keepalive(struct ath10k *ar,
2161                                     const struct wmi_sta_keepalive_arg *arg)
2162 {
2163         struct wmi_tlv_sta_keepalive_cmd *cmd;
2164         struct wmi_sta_keepalive_arp_resp *arp;
2165         struct sk_buff *skb;
2166         struct wmi_tlv *tlv;
2167         void *ptr;
2168         size_t len;
2169
2170         len = sizeof(*tlv) + sizeof(*cmd) +
2171               sizeof(*tlv) + sizeof(*arp);
2172         skb = ath10k_wmi_alloc_skb(ar, len);
2173         if (!skb)
2174                 return ERR_PTR(-ENOMEM);
2175
2176         ptr = (void *)skb->data;
2177         tlv = ptr;
2178         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STA_KEEPALIVE_CMD);
2179         tlv->len = __cpu_to_le16(sizeof(*cmd));
2180         cmd = (void *)tlv->value;
2181         cmd->vdev_id = __cpu_to_le32(arg->vdev_id);
2182         cmd->enabled = __cpu_to_le32(arg->enabled);
2183         cmd->method = __cpu_to_le32(arg->method);
2184         cmd->interval = __cpu_to_le32(arg->interval);
2185
2186         ptr += sizeof(*tlv);
2187         ptr += sizeof(*cmd);
2188
2189         tlv = ptr;
2190         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STA_KEEPALVE_ARP_RESPONSE);
2191         tlv->len = __cpu_to_le16(sizeof(*arp));
2192         arp = (void *)tlv->value;
2193
2194         arp->src_ip4_addr = arg->src_ip4_addr;
2195         arp->dest_ip4_addr = arg->dest_ip4_addr;
2196         ether_addr_copy(arp->dest_mac_addr.addr, arg->dest_mac_addr);
2197
2198         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv sta keepalive vdev %d enabled %d method %d interval %d\n",
2199                    arg->vdev_id, arg->enabled, arg->method, arg->interval);
2200         return skb;
2201 }
2202
2203 static struct sk_buff *
2204 ath10k_wmi_tlv_op_gen_peer_create(struct ath10k *ar, u32 vdev_id,
2205                                   const u8 peer_addr[ETH_ALEN],
2206                                   enum wmi_peer_type peer_type)
2207 {
2208         struct wmi_tlv_peer_create_cmd *cmd;
2209         struct wmi_tlv *tlv;
2210         struct sk_buff *skb;
2211
2212         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2213         if (!skb)
2214                 return ERR_PTR(-ENOMEM);
2215
2216         tlv = (void *)skb->data;
2217         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PEER_CREATE_CMD);
2218         tlv->len = __cpu_to_le16(sizeof(*cmd));
2219         cmd = (void *)tlv->value;
2220         cmd->vdev_id = __cpu_to_le32(vdev_id);
2221         cmd->peer_type = __cpu_to_le32(peer_type);
2222         ether_addr_copy(cmd->peer_addr.addr, peer_addr);
2223
2224         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv peer create\n");
2225         return skb;
2226 }
2227
2228 static struct sk_buff *
2229 ath10k_wmi_tlv_op_gen_peer_delete(struct ath10k *ar, u32 vdev_id,
2230                                   const u8 peer_addr[ETH_ALEN])
2231 {
2232         struct wmi_peer_delete_cmd *cmd;
2233         struct wmi_tlv *tlv;
2234         struct sk_buff *skb;
2235
2236         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2237         if (!skb)
2238                 return ERR_PTR(-ENOMEM);
2239
2240         tlv = (void *)skb->data;
2241         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PEER_DELETE_CMD);
2242         tlv->len = __cpu_to_le16(sizeof(*cmd));
2243         cmd = (void *)tlv->value;
2244         cmd->vdev_id = __cpu_to_le32(vdev_id);
2245         ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
2246
2247         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv peer delete\n");
2248         return skb;
2249 }
2250
2251 static struct sk_buff *
2252 ath10k_wmi_tlv_op_gen_peer_flush(struct ath10k *ar, u32 vdev_id,
2253                                  const u8 peer_addr[ETH_ALEN], u32 tid_bitmap)
2254 {
2255         struct wmi_peer_flush_tids_cmd *cmd;
2256         struct wmi_tlv *tlv;
2257         struct sk_buff *skb;
2258
2259         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2260         if (!skb)
2261                 return ERR_PTR(-ENOMEM);
2262
2263         tlv = (void *)skb->data;
2264         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PEER_FLUSH_TIDS_CMD);
2265         tlv->len = __cpu_to_le16(sizeof(*cmd));
2266         cmd = (void *)tlv->value;
2267         cmd->vdev_id = __cpu_to_le32(vdev_id);
2268         cmd->peer_tid_bitmap = __cpu_to_le32(tid_bitmap);
2269         ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
2270
2271         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv peer flush\n");
2272         return skb;
2273 }
2274
2275 static struct sk_buff *
2276 ath10k_wmi_tlv_op_gen_peer_set_param(struct ath10k *ar, u32 vdev_id,
2277                                      const u8 *peer_addr,
2278                                      enum wmi_peer_param param_id,
2279                                      u32 param_value)
2280 {
2281         struct wmi_peer_set_param_cmd *cmd;
2282         struct wmi_tlv *tlv;
2283         struct sk_buff *skb;
2284
2285         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2286         if (!skb)
2287                 return ERR_PTR(-ENOMEM);
2288
2289         tlv = (void *)skb->data;
2290         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PEER_SET_PARAM_CMD);
2291         tlv->len = __cpu_to_le16(sizeof(*cmd));
2292         cmd = (void *)tlv->value;
2293         cmd->vdev_id = __cpu_to_le32(vdev_id);
2294         cmd->param_id = __cpu_to_le32(param_id);
2295         cmd->param_value = __cpu_to_le32(param_value);
2296         ether_addr_copy(cmd->peer_macaddr.addr, peer_addr);
2297
2298         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv peer set param\n");
2299         return skb;
2300 }
2301
2302 static struct sk_buff *
2303 ath10k_wmi_tlv_op_gen_peer_assoc(struct ath10k *ar,
2304                                  const struct wmi_peer_assoc_complete_arg *arg)
2305 {
2306         struct wmi_tlv_peer_assoc_cmd *cmd;
2307         struct wmi_vht_rate_set *vht_rate;
2308         struct wmi_tlv *tlv;
2309         struct sk_buff *skb;
2310         size_t len, legacy_rate_len, ht_rate_len;
2311         void *ptr;
2312
2313         if (arg->peer_mpdu_density > 16)
2314                 return ERR_PTR(-EINVAL);
2315         if (arg->peer_legacy_rates.num_rates > MAX_SUPPORTED_RATES)
2316                 return ERR_PTR(-EINVAL);
2317         if (arg->peer_ht_rates.num_rates > MAX_SUPPORTED_RATES)
2318                 return ERR_PTR(-EINVAL);
2319
2320         legacy_rate_len = roundup(arg->peer_legacy_rates.num_rates,
2321                                   sizeof(__le32));
2322         ht_rate_len = roundup(arg->peer_ht_rates.num_rates, sizeof(__le32));
2323         len = (sizeof(*tlv) + sizeof(*cmd)) +
2324               (sizeof(*tlv) + legacy_rate_len) +
2325               (sizeof(*tlv) + ht_rate_len) +
2326               (sizeof(*tlv) + sizeof(*vht_rate));
2327         skb = ath10k_wmi_alloc_skb(ar, len);
2328         if (!skb)
2329                 return ERR_PTR(-ENOMEM);
2330
2331         ptr = (void *)skb->data;
2332         tlv = ptr;
2333         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PEER_ASSOC_COMPLETE_CMD);
2334         tlv->len = __cpu_to_le16(sizeof(*cmd));
2335         cmd = (void *)tlv->value;
2336
2337         cmd->vdev_id = __cpu_to_le32(arg->vdev_id);
2338         cmd->new_assoc = __cpu_to_le32(arg->peer_reassoc ? 0 : 1);
2339         cmd->assoc_id = __cpu_to_le32(arg->peer_aid);
2340         cmd->flags = __cpu_to_le32(arg->peer_flags);
2341         cmd->caps = __cpu_to_le32(arg->peer_caps);
2342         cmd->listen_intval = __cpu_to_le32(arg->peer_listen_intval);
2343         cmd->ht_caps = __cpu_to_le32(arg->peer_ht_caps);
2344         cmd->max_mpdu = __cpu_to_le32(arg->peer_max_mpdu);
2345         cmd->mpdu_density = __cpu_to_le32(arg->peer_mpdu_density);
2346         cmd->rate_caps = __cpu_to_le32(arg->peer_rate_caps);
2347         cmd->nss = __cpu_to_le32(arg->peer_num_spatial_streams);
2348         cmd->vht_caps = __cpu_to_le32(arg->peer_vht_caps);
2349         cmd->phy_mode = __cpu_to_le32(arg->peer_phymode);
2350         cmd->num_legacy_rates = __cpu_to_le32(arg->peer_legacy_rates.num_rates);
2351         cmd->num_ht_rates = __cpu_to_le32(arg->peer_ht_rates.num_rates);
2352         ether_addr_copy(cmd->mac_addr.addr, arg->addr);
2353
2354         ptr += sizeof(*tlv);
2355         ptr += sizeof(*cmd);
2356
2357         tlv = ptr;
2358         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
2359         tlv->len = __cpu_to_le16(legacy_rate_len);
2360         memcpy(tlv->value, arg->peer_legacy_rates.rates,
2361                arg->peer_legacy_rates.num_rates);
2362
2363         ptr += sizeof(*tlv);
2364         ptr += legacy_rate_len;
2365
2366         tlv = ptr;
2367         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
2368         tlv->len = __cpu_to_le16(ht_rate_len);
2369         memcpy(tlv->value, arg->peer_ht_rates.rates,
2370                arg->peer_ht_rates.num_rates);
2371
2372         ptr += sizeof(*tlv);
2373         ptr += ht_rate_len;
2374
2375         tlv = ptr;
2376         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VHT_RATE_SET);
2377         tlv->len = __cpu_to_le16(sizeof(*vht_rate));
2378         vht_rate = (void *)tlv->value;
2379
2380         vht_rate->rx_max_rate = __cpu_to_le32(arg->peer_vht_rates.rx_max_rate);
2381         vht_rate->rx_mcs_set = __cpu_to_le32(arg->peer_vht_rates.rx_mcs_set);
2382         vht_rate->tx_max_rate = __cpu_to_le32(arg->peer_vht_rates.tx_max_rate);
2383         vht_rate->tx_mcs_set = __cpu_to_le32(arg->peer_vht_rates.tx_mcs_set);
2384
2385         ptr += sizeof(*tlv);
2386         ptr += sizeof(*vht_rate);
2387
2388         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv peer assoc\n");
2389         return skb;
2390 }
2391
2392 static struct sk_buff *
2393 ath10k_wmi_tlv_op_gen_set_psmode(struct ath10k *ar, u32 vdev_id,
2394                                  enum wmi_sta_ps_mode psmode)
2395 {
2396         struct wmi_sta_powersave_mode_cmd *cmd;
2397         struct wmi_tlv *tlv;
2398         struct sk_buff *skb;
2399
2400         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2401         if (!skb)
2402                 return ERR_PTR(-ENOMEM);
2403
2404         tlv = (void *)skb->data;
2405         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STA_POWERSAVE_MODE_CMD);
2406         tlv->len = __cpu_to_le16(sizeof(*cmd));
2407         cmd = (void *)tlv->value;
2408         cmd->vdev_id = __cpu_to_le32(vdev_id);
2409         cmd->sta_ps_mode = __cpu_to_le32(psmode);
2410
2411         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv set psmode\n");
2412         return skb;
2413 }
2414
2415 static struct sk_buff *
2416 ath10k_wmi_tlv_op_gen_set_sta_ps(struct ath10k *ar, u32 vdev_id,
2417                                  enum wmi_sta_powersave_param param_id,
2418                                  u32 param_value)
2419 {
2420         struct wmi_sta_powersave_param_cmd *cmd;
2421         struct wmi_tlv *tlv;
2422         struct sk_buff *skb;
2423
2424         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2425         if (!skb)
2426                 return ERR_PTR(-ENOMEM);
2427
2428         tlv = (void *)skb->data;
2429         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_STA_POWERSAVE_PARAM_CMD);
2430         tlv->len = __cpu_to_le16(sizeof(*cmd));
2431         cmd = (void *)tlv->value;
2432         cmd->vdev_id = __cpu_to_le32(vdev_id);
2433         cmd->param_id = __cpu_to_le32(param_id);
2434         cmd->param_value = __cpu_to_le32(param_value);
2435
2436         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv set sta ps\n");
2437         return skb;
2438 }
2439
2440 static struct sk_buff *
2441 ath10k_wmi_tlv_op_gen_set_ap_ps(struct ath10k *ar, u32 vdev_id, const u8 *mac,
2442                                 enum wmi_ap_ps_peer_param param_id, u32 value)
2443 {
2444         struct wmi_ap_ps_peer_cmd *cmd;
2445         struct wmi_tlv *tlv;
2446         struct sk_buff *skb;
2447
2448         if (!mac)
2449                 return ERR_PTR(-EINVAL);
2450
2451         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2452         if (!skb)
2453                 return ERR_PTR(-ENOMEM);
2454
2455         tlv = (void *)skb->data;
2456         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_AP_PS_PEER_CMD);
2457         tlv->len = __cpu_to_le16(sizeof(*cmd));
2458         cmd = (void *)tlv->value;
2459         cmd->vdev_id = __cpu_to_le32(vdev_id);
2460         cmd->param_id = __cpu_to_le32(param_id);
2461         cmd->param_value = __cpu_to_le32(value);
2462         ether_addr_copy(cmd->peer_macaddr.addr, mac);
2463
2464         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv ap ps param\n");
2465         return skb;
2466 }
2467
2468 static struct sk_buff *
2469 ath10k_wmi_tlv_op_gen_scan_chan_list(struct ath10k *ar,
2470                                      const struct wmi_scan_chan_list_arg *arg)
2471 {
2472         struct wmi_tlv_scan_chan_list_cmd *cmd;
2473         struct wmi_channel *ci;
2474         struct wmi_channel_arg *ch;
2475         struct wmi_tlv *tlv;
2476         struct sk_buff *skb;
2477         size_t chans_len, len;
2478         int i;
2479         void *ptr, *chans;
2480
2481         chans_len = arg->n_channels * (sizeof(*tlv) + sizeof(*ci));
2482         len = (sizeof(*tlv) + sizeof(*cmd)) +
2483               (sizeof(*tlv) + chans_len);
2484
2485         skb = ath10k_wmi_alloc_skb(ar, len);
2486         if (!skb)
2487                 return ERR_PTR(-ENOMEM);
2488
2489         ptr = (void *)skb->data;
2490         tlv = ptr;
2491         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_SCAN_CHAN_LIST_CMD);
2492         tlv->len = __cpu_to_le16(sizeof(*cmd));
2493         cmd = (void *)tlv->value;
2494         cmd->num_scan_chans = __cpu_to_le32(arg->n_channels);
2495
2496         ptr += sizeof(*tlv);
2497         ptr += sizeof(*cmd);
2498
2499         tlv = ptr;
2500         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
2501         tlv->len = __cpu_to_le16(chans_len);
2502         chans = (void *)tlv->value;
2503
2504         for (i = 0; i < arg->n_channels; i++) {
2505                 ch = &arg->channels[i];
2506
2507                 tlv = chans;
2508                 tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_CHANNEL);
2509                 tlv->len = __cpu_to_le16(sizeof(*ci));
2510                 ci = (void *)tlv->value;
2511
2512                 ath10k_wmi_put_wmi_channel(ci, ch);
2513
2514                 chans += sizeof(*tlv);
2515                 chans += sizeof(*ci);
2516         }
2517
2518         ptr += sizeof(*tlv);
2519         ptr += chans_len;
2520
2521         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv scan chan list\n");
2522         return skb;
2523 }
2524
2525 static struct sk_buff *
2526 ath10k_wmi_tlv_op_gen_scan_prob_req_oui(struct ath10k *ar, u32 prob_req_oui)
2527 {
2528         struct wmi_scan_prob_req_oui_cmd *cmd;
2529         struct wmi_tlv *tlv;
2530         struct sk_buff *skb;
2531
2532         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2533         if (!skb)
2534                 return ERR_PTR(-ENOMEM);
2535
2536         tlv = (void *)skb->data;
2537         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_SCAN_PROB_REQ_OUI_CMD);
2538         tlv->len = __cpu_to_le16(sizeof(*cmd));
2539         cmd = (void *)tlv->value;
2540         cmd->prob_req_oui = __cpu_to_le32(prob_req_oui);
2541
2542         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv scan prob req oui\n");
2543         return skb;
2544 }
2545
2546 static struct sk_buff *
2547 ath10k_wmi_tlv_op_gen_beacon_dma(struct ath10k *ar, u32 vdev_id,
2548                                  const void *bcn, size_t bcn_len,
2549                                  u32 bcn_paddr, bool dtim_zero,
2550                                  bool deliver_cab)
2551
2552 {
2553         struct wmi_bcn_tx_ref_cmd *cmd;
2554         struct wmi_tlv *tlv;
2555         struct sk_buff *skb;
2556         struct ieee80211_hdr *hdr;
2557         u16 fc;
2558
2559         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2560         if (!skb)
2561                 return ERR_PTR(-ENOMEM);
2562
2563         hdr = (struct ieee80211_hdr *)bcn;
2564         fc = le16_to_cpu(hdr->frame_control);
2565
2566         tlv = (void *)skb->data;
2567         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_BCN_SEND_FROM_HOST_CMD);
2568         tlv->len = __cpu_to_le16(sizeof(*cmd));
2569         cmd = (void *)tlv->value;
2570         cmd->vdev_id = __cpu_to_le32(vdev_id);
2571         cmd->data_len = __cpu_to_le32(bcn_len);
2572         cmd->data_ptr = __cpu_to_le32(bcn_paddr);
2573         cmd->msdu_id = 0;
2574         cmd->frame_control = __cpu_to_le32(fc);
2575         cmd->flags = 0;
2576
2577         if (dtim_zero)
2578                 cmd->flags |= __cpu_to_le32(WMI_BCN_TX_REF_FLAG_DTIM_ZERO);
2579
2580         if (deliver_cab)
2581                 cmd->flags |= __cpu_to_le32(WMI_BCN_TX_REF_FLAG_DELIVER_CAB);
2582
2583         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv beacon dma\n");
2584         return skb;
2585 }
2586
2587 static struct sk_buff *
2588 ath10k_wmi_tlv_op_gen_pdev_set_wmm(struct ath10k *ar,
2589                                    const struct wmi_wmm_params_all_arg *arg)
2590 {
2591         struct wmi_tlv_pdev_set_wmm_cmd *cmd;
2592         struct wmi_wmm_params *wmm;
2593         struct wmi_tlv *tlv;
2594         struct sk_buff *skb;
2595         size_t len;
2596         void *ptr;
2597
2598         len = (sizeof(*tlv) + sizeof(*cmd)) +
2599               (4 * (sizeof(*tlv) + sizeof(*wmm)));
2600         skb = ath10k_wmi_alloc_skb(ar, len);
2601         if (!skb)
2602                 return ERR_PTR(-ENOMEM);
2603
2604         ptr = (void *)skb->data;
2605
2606         tlv = ptr;
2607         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_SET_WMM_PARAMS_CMD);
2608         tlv->len = __cpu_to_le16(sizeof(*cmd));
2609         cmd = (void *)tlv->value;
2610
2611         /* nothing to set here */
2612
2613         ptr += sizeof(*tlv);
2614         ptr += sizeof(*cmd);
2615
2616         ptr = ath10k_wmi_tlv_put_wmm(ptr, &arg->ac_be);
2617         ptr = ath10k_wmi_tlv_put_wmm(ptr, &arg->ac_bk);
2618         ptr = ath10k_wmi_tlv_put_wmm(ptr, &arg->ac_vi);
2619         ptr = ath10k_wmi_tlv_put_wmm(ptr, &arg->ac_vo);
2620
2621         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pdev set wmm\n");
2622         return skb;
2623 }
2624
2625 static struct sk_buff *
2626 ath10k_wmi_tlv_op_gen_request_stats(struct ath10k *ar, u32 stats_mask)
2627 {
2628         struct wmi_request_stats_cmd *cmd;
2629         struct wmi_tlv *tlv;
2630         struct sk_buff *skb;
2631
2632         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2633         if (!skb)
2634                 return ERR_PTR(-ENOMEM);
2635
2636         tlv = (void *)skb->data;
2637         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_REQUEST_STATS_CMD);
2638         tlv->len = __cpu_to_le16(sizeof(*cmd));
2639         cmd = (void *)tlv->value;
2640         cmd->stats_id = __cpu_to_le32(stats_mask);
2641
2642         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv request stats\n");
2643         return skb;
2644 }
2645
2646 static int
2647 ath10k_wmi_mgmt_tx_alloc_msdu_id(struct ath10k *ar, struct sk_buff *skb,
2648                                  dma_addr_t paddr)
2649 {
2650         struct ath10k_wmi *wmi = &ar->wmi;
2651         struct ath10k_mgmt_tx_pkt_addr *pkt_addr;
2652         int ret;
2653
2654         pkt_addr = kmalloc(sizeof(*pkt_addr), GFP_ATOMIC);
2655         if (!pkt_addr)
2656                 return -ENOMEM;
2657
2658         pkt_addr->vaddr = skb;
2659         pkt_addr->paddr = paddr;
2660
2661         spin_lock_bh(&ar->data_lock);
2662         ret = idr_alloc(&wmi->mgmt_pending_tx, pkt_addr, 0,
2663                         wmi->mgmt_max_num_pending_tx, GFP_ATOMIC);
2664         spin_unlock_bh(&ar->data_lock);
2665
2666         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi mgmt tx alloc msdu_id ret %d\n", ret);
2667         return ret;
2668 }
2669
2670 static struct sk_buff *
2671 ath10k_wmi_tlv_op_gen_mgmt_tx_send(struct ath10k *ar, struct sk_buff *msdu,
2672                                    dma_addr_t paddr)
2673 {
2674         struct ath10k_skb_cb *cb = ATH10K_SKB_CB(msdu);
2675         struct wmi_tlv_mgmt_tx_cmd *cmd;
2676         struct ieee80211_hdr *hdr;
2677         struct ath10k_vif *arvif;
2678         u32 buf_len = msdu->len;
2679         struct wmi_tlv *tlv;
2680         struct sk_buff *skb;
2681         int len, desc_id;
2682         u32 vdev_id;
2683         void *ptr;
2684
2685         if (!cb->vif)
2686                 return ERR_PTR(-EINVAL);
2687
2688         hdr = (struct ieee80211_hdr *)msdu->data;
2689         arvif = (void *)cb->vif->drv_priv;
2690         vdev_id = arvif->vdev_id;
2691
2692         if (WARN_ON_ONCE(!ieee80211_is_mgmt(hdr->frame_control)))
2693                 return ERR_PTR(-EINVAL);
2694
2695         len = sizeof(*cmd) + 2 * sizeof(*tlv);
2696
2697         if ((ieee80211_is_action(hdr->frame_control) ||
2698              ieee80211_is_deauth(hdr->frame_control) ||
2699              ieee80211_is_disassoc(hdr->frame_control)) &&
2700              ieee80211_has_protected(hdr->frame_control)) {
2701                 len += IEEE80211_CCMP_MIC_LEN;
2702                 buf_len += IEEE80211_CCMP_MIC_LEN;
2703         }
2704
2705         buf_len = min_t(u32, buf_len, WMI_TLV_MGMT_TX_FRAME_MAX_LEN);
2706         buf_len = round_up(buf_len, 4);
2707
2708         len += buf_len;
2709         len = round_up(len, 4);
2710         skb = ath10k_wmi_alloc_skb(ar, len);
2711         if (!skb)
2712                 return ERR_PTR(-ENOMEM);
2713
2714         desc_id = ath10k_wmi_mgmt_tx_alloc_msdu_id(ar, msdu, paddr);
2715         if (desc_id < 0)
2716                 goto err_free_skb;
2717
2718         ptr = (void *)skb->data;
2719         tlv = ptr;
2720         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_MGMT_TX_CMD);
2721         tlv->len = __cpu_to_le16(sizeof(*cmd));
2722         cmd = (void *)tlv->value;
2723         cmd->vdev_id = __cpu_to_le32(vdev_id);
2724         cmd->desc_id = __cpu_to_le32(desc_id);
2725         cmd->chanfreq = 0;
2726         cmd->buf_len = __cpu_to_le32(buf_len);
2727         cmd->frame_len = __cpu_to_le32(msdu->len);
2728         cmd->paddr = __cpu_to_le64(paddr);
2729
2730         ptr += sizeof(*tlv);
2731         ptr += sizeof(*cmd);
2732
2733         tlv = ptr;
2734         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
2735         tlv->len = __cpu_to_le16(buf_len);
2736
2737         ptr += sizeof(*tlv);
2738         memcpy(ptr, msdu->data, buf_len);
2739
2740         return skb;
2741
2742 err_free_skb:
2743         dev_kfree_skb(skb);
2744         return ERR_PTR(desc_id);
2745 }
2746
2747 static struct sk_buff *
2748 ath10k_wmi_tlv_op_gen_force_fw_hang(struct ath10k *ar,
2749                                     enum wmi_force_fw_hang_type type,
2750                                     u32 delay_ms)
2751 {
2752         struct wmi_force_fw_hang_cmd *cmd;
2753         struct wmi_tlv *tlv;
2754         struct sk_buff *skb;
2755
2756         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2757         if (!skb)
2758                 return ERR_PTR(-ENOMEM);
2759
2760         tlv = (void *)skb->data;
2761         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_FORCE_FW_HANG_CMD);
2762         tlv->len = __cpu_to_le16(sizeof(*cmd));
2763         cmd = (void *)tlv->value;
2764         cmd->type = __cpu_to_le32(type);
2765         cmd->delay_ms = __cpu_to_le32(delay_ms);
2766
2767         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv force fw hang\n");
2768         return skb;
2769 }
2770
2771 static struct sk_buff *
2772 ath10k_wmi_tlv_op_gen_dbglog_cfg(struct ath10k *ar, u64 module_enable,
2773                                  u32 log_level)
2774 {
2775         struct wmi_tlv_dbglog_cmd *cmd;
2776         struct wmi_tlv *tlv;
2777         struct sk_buff *skb;
2778         size_t len, bmap_len;
2779         u32 value;
2780         void *ptr;
2781
2782         if (module_enable) {
2783                 value = WMI_TLV_DBGLOG_LOG_LEVEL_VALUE(
2784                                 module_enable,
2785                                 WMI_TLV_DBGLOG_LOG_LEVEL_VERBOSE);
2786         } else {
2787                 value = WMI_TLV_DBGLOG_LOG_LEVEL_VALUE(
2788                                 WMI_TLV_DBGLOG_ALL_MODULES,
2789                                 WMI_TLV_DBGLOG_LOG_LEVEL_WARN);
2790         }
2791
2792         bmap_len = 0;
2793         len = sizeof(*tlv) + sizeof(*cmd) + sizeof(*tlv) + bmap_len;
2794         skb = ath10k_wmi_alloc_skb(ar, len);
2795         if (!skb)
2796                 return ERR_PTR(-ENOMEM);
2797
2798         ptr = (void *)skb->data;
2799
2800         tlv = ptr;
2801         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_DEBUG_LOG_CONFIG_CMD);
2802         tlv->len = __cpu_to_le16(sizeof(*cmd));
2803         cmd = (void *)tlv->value;
2804         cmd->param = __cpu_to_le32(WMI_TLV_DBGLOG_PARAM_LOG_LEVEL);
2805         cmd->value = __cpu_to_le32(value);
2806
2807         ptr += sizeof(*tlv);
2808         ptr += sizeof(*cmd);
2809
2810         tlv = ptr;
2811         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_UINT32);
2812         tlv->len = __cpu_to_le16(bmap_len);
2813
2814         /* nothing to do here */
2815
2816         ptr += sizeof(*tlv);
2817         ptr += sizeof(bmap_len);
2818
2819         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv dbglog value 0x%08x\n", value);
2820         return skb;
2821 }
2822
2823 static struct sk_buff *
2824 ath10k_wmi_tlv_op_gen_pktlog_enable(struct ath10k *ar, u32 filter)
2825 {
2826         struct wmi_tlv_pktlog_enable *cmd;
2827         struct wmi_tlv *tlv;
2828         struct sk_buff *skb;
2829         void *ptr;
2830         size_t len;
2831
2832         len = sizeof(*tlv) + sizeof(*cmd);
2833         skb = ath10k_wmi_alloc_skb(ar, len);
2834         if (!skb)
2835                 return ERR_PTR(-ENOMEM);
2836
2837         ptr = (void *)skb->data;
2838         tlv = ptr;
2839         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_PKTLOG_ENABLE_CMD);
2840         tlv->len = __cpu_to_le16(sizeof(*cmd));
2841         cmd = (void *)tlv->value;
2842         cmd->filter = __cpu_to_le32(filter);
2843
2844         ptr += sizeof(*tlv);
2845         ptr += sizeof(*cmd);
2846
2847         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pktlog enable filter 0x%08x\n",
2848                    filter);
2849         return skb;
2850 }
2851
2852 static struct sk_buff *
2853 ath10k_wmi_tlv_op_gen_pdev_get_temperature(struct ath10k *ar)
2854 {
2855         struct wmi_tlv_pdev_get_temp_cmd *cmd;
2856         struct wmi_tlv *tlv;
2857         struct sk_buff *skb;
2858
2859         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
2860         if (!skb)
2861                 return ERR_PTR(-ENOMEM);
2862
2863         tlv = (void *)skb->data;
2864         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_GET_TEMPERATURE_CMD);
2865         tlv->len = __cpu_to_le16(sizeof(*cmd));
2866         cmd = (void *)tlv->value;
2867         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi pdev get temperature tlv\n");
2868         return skb;
2869 }
2870
2871 static struct sk_buff *
2872 ath10k_wmi_tlv_op_gen_pktlog_disable(struct ath10k *ar)
2873 {
2874         struct wmi_tlv_pktlog_disable *cmd;
2875         struct wmi_tlv *tlv;
2876         struct sk_buff *skb;
2877         void *ptr;
2878         size_t len;
2879
2880         len = sizeof(*tlv) + sizeof(*cmd);
2881         skb = ath10k_wmi_alloc_skb(ar, len);
2882         if (!skb)
2883                 return ERR_PTR(-ENOMEM);
2884
2885         ptr = (void *)skb->data;
2886         tlv = ptr;
2887         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_PKTLOG_DISABLE_CMD);
2888         tlv->len = __cpu_to_le16(sizeof(*cmd));
2889         cmd = (void *)tlv->value;
2890
2891         ptr += sizeof(*tlv);
2892         ptr += sizeof(*cmd);
2893
2894         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv pktlog disable\n");
2895         return skb;
2896 }
2897
2898 static struct sk_buff *
2899 ath10k_wmi_tlv_op_gen_bcn_tmpl(struct ath10k *ar, u32 vdev_id,
2900                                u32 tim_ie_offset, struct sk_buff *bcn,
2901                                u32 prb_caps, u32 prb_erp, void *prb_ies,
2902                                size_t prb_ies_len)
2903 {
2904         struct wmi_tlv_bcn_tmpl_cmd *cmd;
2905         struct wmi_tlv_bcn_prb_info *info;
2906         struct wmi_tlv *tlv;
2907         struct sk_buff *skb;
2908         void *ptr;
2909         size_t len;
2910
2911         if (WARN_ON(prb_ies_len > 0 && !prb_ies))
2912                 return ERR_PTR(-EINVAL);
2913
2914         len = sizeof(*tlv) + sizeof(*cmd) +
2915               sizeof(*tlv) + sizeof(*info) + prb_ies_len +
2916               sizeof(*tlv) + roundup(bcn->len, 4);
2917         skb = ath10k_wmi_alloc_skb(ar, len);
2918         if (!skb)
2919                 return ERR_PTR(-ENOMEM);
2920
2921         ptr = (void *)skb->data;
2922         tlv = ptr;
2923         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_BCN_TMPL_CMD);
2924         tlv->len = __cpu_to_le16(sizeof(*cmd));
2925         cmd = (void *)tlv->value;
2926         cmd->vdev_id = __cpu_to_le32(vdev_id);
2927         cmd->tim_ie_offset = __cpu_to_le32(tim_ie_offset);
2928         cmd->buf_len = __cpu_to_le32(bcn->len);
2929
2930         ptr += sizeof(*tlv);
2931         ptr += sizeof(*cmd);
2932
2933         /* FIXME: prb_ies_len should be probably aligned to 4byte boundary but
2934          * then it is then impossible to pass original ie len.
2935          * This chunk is not used yet so if setting probe resp template yields
2936          * problems with beaconing or crashes firmware look here.
2937          */
2938         tlv = ptr;
2939         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_BCN_PRB_INFO);
2940         tlv->len = __cpu_to_le16(sizeof(*info) + prb_ies_len);
2941         info = (void *)tlv->value;
2942         info->caps = __cpu_to_le32(prb_caps);
2943         info->erp = __cpu_to_le32(prb_erp);
2944         memcpy(info->ies, prb_ies, prb_ies_len);
2945
2946         ptr += sizeof(*tlv);
2947         ptr += sizeof(*info);
2948         ptr += prb_ies_len;
2949
2950         tlv = ptr;
2951         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
2952         tlv->len = __cpu_to_le16(roundup(bcn->len, 4));
2953         memcpy(tlv->value, bcn->data, bcn->len);
2954
2955         /* FIXME: Adjust TSF? */
2956
2957         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv bcn tmpl vdev_id %i\n",
2958                    vdev_id);
2959         return skb;
2960 }
2961
2962 static struct sk_buff *
2963 ath10k_wmi_tlv_op_gen_prb_tmpl(struct ath10k *ar, u32 vdev_id,
2964                                struct sk_buff *prb)
2965 {
2966         struct wmi_tlv_prb_tmpl_cmd *cmd;
2967         struct wmi_tlv_bcn_prb_info *info;
2968         struct wmi_tlv *tlv;
2969         struct sk_buff *skb;
2970         void *ptr;
2971         size_t len;
2972
2973         len = sizeof(*tlv) + sizeof(*cmd) +
2974               sizeof(*tlv) + sizeof(*info) +
2975               sizeof(*tlv) + roundup(prb->len, 4);
2976         skb = ath10k_wmi_alloc_skb(ar, len);
2977         if (!skb)
2978                 return ERR_PTR(-ENOMEM);
2979
2980         ptr = (void *)skb->data;
2981         tlv = ptr;
2982         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PRB_TMPL_CMD);
2983         tlv->len = __cpu_to_le16(sizeof(*cmd));
2984         cmd = (void *)tlv->value;
2985         cmd->vdev_id = __cpu_to_le32(vdev_id);
2986         cmd->buf_len = __cpu_to_le32(prb->len);
2987
2988         ptr += sizeof(*tlv);
2989         ptr += sizeof(*cmd);
2990
2991         tlv = ptr;
2992         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_BCN_PRB_INFO);
2993         tlv->len = __cpu_to_le16(sizeof(*info));
2994         info = (void *)tlv->value;
2995         info->caps = 0;
2996         info->erp = 0;
2997
2998         ptr += sizeof(*tlv);
2999         ptr += sizeof(*info);
3000
3001         tlv = ptr;
3002         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
3003         tlv->len = __cpu_to_le16(roundup(prb->len, 4));
3004         memcpy(tlv->value, prb->data, prb->len);
3005
3006         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv prb tmpl vdev_id %i\n",
3007                    vdev_id);
3008         return skb;
3009 }
3010
3011 static struct sk_buff *
3012 ath10k_wmi_tlv_op_gen_p2p_go_bcn_ie(struct ath10k *ar, u32 vdev_id,
3013                                     const u8 *p2p_ie)
3014 {
3015         struct wmi_tlv_p2p_go_bcn_ie *cmd;
3016         struct wmi_tlv *tlv;
3017         struct sk_buff *skb;
3018         void *ptr;
3019         size_t len;
3020
3021         len = sizeof(*tlv) + sizeof(*cmd) +
3022               sizeof(*tlv) + roundup(p2p_ie[1] + 2, 4);
3023         skb = ath10k_wmi_alloc_skb(ar, len);
3024         if (!skb)
3025                 return ERR_PTR(-ENOMEM);
3026
3027         ptr = (void *)skb->data;
3028         tlv = ptr;
3029         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_P2P_GO_SET_BEACON_IE);
3030         tlv->len = __cpu_to_le16(sizeof(*cmd));
3031         cmd = (void *)tlv->value;
3032         cmd->vdev_id = __cpu_to_le32(vdev_id);
3033         cmd->ie_len = __cpu_to_le32(p2p_ie[1] + 2);
3034
3035         ptr += sizeof(*tlv);
3036         ptr += sizeof(*cmd);
3037
3038         tlv = ptr;
3039         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
3040         tlv->len = __cpu_to_le16(roundup(p2p_ie[1] + 2, 4));
3041         memcpy(tlv->value, p2p_ie, p2p_ie[1] + 2);
3042
3043         ptr += sizeof(*tlv);
3044         ptr += roundup(p2p_ie[1] + 2, 4);
3045
3046         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv p2p go bcn ie for vdev %i\n",
3047                    vdev_id);
3048         return skb;
3049 }
3050
3051 static struct sk_buff *
3052 ath10k_wmi_tlv_op_gen_update_fw_tdls_state(struct ath10k *ar, u32 vdev_id,
3053                                            enum wmi_tdls_state state)
3054 {
3055         struct wmi_tdls_set_state_cmd *cmd;
3056         struct wmi_tlv *tlv;
3057         struct sk_buff *skb;
3058         void *ptr;
3059         size_t len;
3060         /* Set to options from wmi_tlv_tdls_options,
3061          * for now none of them are enabled.
3062          */
3063         u32 options = 0;
3064
3065         if (test_bit(WMI_SERVICE_TDLS_UAPSD_BUFFER_STA, ar->wmi.svc_map))
3066                 options |=  WMI_TLV_TDLS_BUFFER_STA_EN;
3067
3068         /* WMI_TDLS_ENABLE_ACTIVE_EXTERNAL_CONTROL means firm will handle TDLS
3069          * link inactivity detecting logic.
3070          */
3071         if (state == WMI_TDLS_ENABLE_ACTIVE)
3072                 state = WMI_TDLS_ENABLE_ACTIVE_EXTERNAL_CONTROL;
3073
3074         len = sizeof(*tlv) + sizeof(*cmd);
3075         skb = ath10k_wmi_alloc_skb(ar, len);
3076         if (!skb)
3077                 return ERR_PTR(-ENOMEM);
3078
3079         ptr = (void *)skb->data;
3080         tlv = ptr;
3081         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_TDLS_SET_STATE_CMD);
3082         tlv->len = __cpu_to_le16(sizeof(*cmd));
3083
3084         cmd = (void *)tlv->value;
3085         cmd->vdev_id = __cpu_to_le32(vdev_id);
3086         cmd->state = __cpu_to_le32(state);
3087         cmd->notification_interval_ms = __cpu_to_le32(5000);
3088         cmd->tx_discovery_threshold = __cpu_to_le32(100);
3089         cmd->tx_teardown_threshold = __cpu_to_le32(5);
3090         cmd->rssi_teardown_threshold = __cpu_to_le32(-75);
3091         cmd->rssi_delta = __cpu_to_le32(-20);
3092         cmd->tdls_options = __cpu_to_le32(options);
3093         cmd->tdls_peer_traffic_ind_window = __cpu_to_le32(2);
3094         cmd->tdls_peer_traffic_response_timeout_ms = __cpu_to_le32(5000);
3095         cmd->tdls_puapsd_mask = __cpu_to_le32(0xf);
3096         cmd->tdls_puapsd_inactivity_time_ms = __cpu_to_le32(0);
3097         cmd->tdls_puapsd_rx_frame_threshold = __cpu_to_le32(10);
3098
3099         ptr += sizeof(*tlv);
3100         ptr += sizeof(*cmd);
3101
3102         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv update fw tdls state %d for vdev %i\n",
3103                    state, vdev_id);
3104         return skb;
3105 }
3106
3107 static u32 ath10k_wmi_tlv_prepare_peer_qos(u8 uapsd_queues, u8 sp)
3108 {
3109         u32 peer_qos = 0;
3110
3111         if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_VO)
3112                 peer_qos |= WMI_TLV_TDLS_PEER_QOS_AC_VO;
3113         if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_VI)
3114                 peer_qos |= WMI_TLV_TDLS_PEER_QOS_AC_VI;
3115         if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_BK)
3116                 peer_qos |= WMI_TLV_TDLS_PEER_QOS_AC_BK;
3117         if (uapsd_queues & IEEE80211_WMM_IE_STA_QOSINFO_AC_BE)
3118                 peer_qos |= WMI_TLV_TDLS_PEER_QOS_AC_BE;
3119
3120         peer_qos |= SM(sp, WMI_TLV_TDLS_PEER_SP);
3121
3122         return peer_qos;
3123 }
3124
3125 static struct sk_buff *
3126 ath10k_wmi_tlv_op_gen_tdls_peer_update(struct ath10k *ar,
3127                                        const struct wmi_tdls_peer_update_cmd_arg *arg,
3128                                        const struct wmi_tdls_peer_capab_arg *cap,
3129                                        const struct wmi_channel_arg *chan_arg)
3130 {
3131         struct wmi_tdls_peer_update_cmd *cmd;
3132         struct wmi_tdls_peer_capab *peer_cap;
3133         struct wmi_channel *chan;
3134         struct wmi_tlv *tlv;
3135         struct sk_buff *skb;
3136         u32 peer_qos;
3137         void *ptr;
3138         int len;
3139         int i;
3140
3141         len = sizeof(*tlv) + sizeof(*cmd) +
3142               sizeof(*tlv) + sizeof(*peer_cap) +
3143               sizeof(*tlv) + cap->peer_chan_len * sizeof(*chan);
3144
3145         skb = ath10k_wmi_alloc_skb(ar, len);
3146         if (!skb)
3147                 return ERR_PTR(-ENOMEM);
3148
3149         ptr = (void *)skb->data;
3150         tlv = ptr;
3151         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_TDLS_PEER_UPDATE_CMD);
3152         tlv->len = __cpu_to_le16(sizeof(*cmd));
3153
3154         cmd = (void *)tlv->value;
3155         cmd->vdev_id = __cpu_to_le32(arg->vdev_id);
3156         ether_addr_copy(cmd->peer_macaddr.addr, arg->addr);
3157         cmd->peer_state = __cpu_to_le32(arg->peer_state);
3158
3159         ptr += sizeof(*tlv);
3160         ptr += sizeof(*cmd);
3161
3162         tlv = ptr;
3163         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_TDLS_PEER_CAPABILITIES);
3164         tlv->len = __cpu_to_le16(sizeof(*peer_cap));
3165         peer_cap = (void *)tlv->value;
3166         peer_qos = ath10k_wmi_tlv_prepare_peer_qos(cap->peer_uapsd_queues,
3167                                                    cap->peer_max_sp);
3168         peer_cap->peer_qos = __cpu_to_le32(peer_qos);
3169         peer_cap->buff_sta_support = __cpu_to_le32(cap->buff_sta_support);
3170         peer_cap->off_chan_support = __cpu_to_le32(cap->off_chan_support);
3171         peer_cap->peer_curr_operclass = __cpu_to_le32(cap->peer_curr_operclass);
3172         peer_cap->self_curr_operclass = __cpu_to_le32(cap->self_curr_operclass);
3173         peer_cap->peer_chan_len = __cpu_to_le32(cap->peer_chan_len);
3174         peer_cap->peer_operclass_len = __cpu_to_le32(cap->peer_operclass_len);
3175
3176         for (i = 0; i < WMI_TDLS_MAX_SUPP_OPER_CLASSES; i++)
3177                 peer_cap->peer_operclass[i] = cap->peer_operclass[i];
3178
3179         peer_cap->is_peer_responder = __cpu_to_le32(cap->is_peer_responder);
3180         peer_cap->pref_offchan_num = __cpu_to_le32(cap->pref_offchan_num);
3181         peer_cap->pref_offchan_bw = __cpu_to_le32(cap->pref_offchan_bw);
3182
3183         ptr += sizeof(*tlv);
3184         ptr += sizeof(*peer_cap);
3185
3186         tlv = ptr;
3187         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3188         tlv->len = __cpu_to_le16(cap->peer_chan_len * sizeof(*chan));
3189
3190         ptr += sizeof(*tlv);
3191
3192         for (i = 0; i < cap->peer_chan_len; i++) {
3193                 tlv = ptr;
3194                 tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_CHANNEL);
3195                 tlv->len = __cpu_to_le16(sizeof(*chan));
3196                 chan = (void *)tlv->value;
3197                 ath10k_wmi_put_wmi_channel(chan, &chan_arg[i]);
3198
3199                 ptr += sizeof(*tlv);
3200                 ptr += sizeof(*chan);
3201         }
3202
3203         ath10k_dbg(ar, ATH10K_DBG_WMI,
3204                    "wmi tlv tdls peer update vdev %i state %d n_chans %u\n",
3205                    arg->vdev_id, arg->peer_state, cap->peer_chan_len);
3206         return skb;
3207 }
3208
3209 static struct sk_buff *
3210 ath10k_wmi_tlv_op_gen_pdev_set_quiet_mode(struct ath10k *ar, u32 period,
3211                                           u32 duration, u32 next_offset,
3212                                           u32 enabled)
3213 {
3214         struct wmi_tlv_set_quiet_cmd *cmd;
3215         struct wmi_tlv *tlv;
3216         struct sk_buff *skb;
3217
3218         skb = ath10k_wmi_alloc_skb(ar, sizeof(*tlv) + sizeof(*cmd));
3219         if (!skb)
3220                 return ERR_PTR(-ENOMEM);
3221
3222         tlv = (void *)skb->data;
3223         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_PDEV_SET_QUIET_CMD);
3224         tlv->len = __cpu_to_le16(sizeof(*cmd));
3225         cmd = (void *)tlv->value;
3226
3227         /* vdev_id is not in use, set to 0 */
3228         cmd->vdev_id = __cpu_to_le32(0);
3229         cmd->period = __cpu_to_le32(period);
3230         cmd->duration = __cpu_to_le32(duration);
3231         cmd->next_start = __cpu_to_le32(next_offset);
3232         cmd->enabled = __cpu_to_le32(enabled);
3233
3234         ath10k_dbg(ar, ATH10K_DBG_WMI,
3235                    "wmi tlv quiet param: period %u duration %u enabled %d\n",
3236                    period, duration, enabled);
3237         return skb;
3238 }
3239
3240 static struct sk_buff *
3241 ath10k_wmi_tlv_op_gen_wow_enable(struct ath10k *ar)
3242 {
3243         struct wmi_tlv_wow_enable_cmd *cmd;
3244         struct wmi_tlv *tlv;
3245         struct sk_buff *skb;
3246         size_t len;
3247
3248         len = sizeof(*tlv) + sizeof(*cmd);
3249         skb = ath10k_wmi_alloc_skb(ar, len);
3250         if (!skb)
3251                 return ERR_PTR(-ENOMEM);
3252
3253         tlv = (struct wmi_tlv *)skb->data;
3254         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WOW_ENABLE_CMD);
3255         tlv->len = __cpu_to_le16(sizeof(*cmd));
3256         cmd = (void *)tlv->value;
3257
3258         cmd->enable = __cpu_to_le32(1);
3259
3260         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv wow enable\n");
3261         return skb;
3262 }
3263
3264 static struct sk_buff *
3265 ath10k_wmi_tlv_op_gen_wow_add_wakeup_event(struct ath10k *ar,
3266                                            u32 vdev_id,
3267                                            enum wmi_wow_wakeup_event event,
3268                                            u32 enable)
3269 {
3270         struct wmi_tlv_wow_add_del_event_cmd *cmd;
3271         struct wmi_tlv *tlv;
3272         struct sk_buff *skb;
3273         size_t len;
3274
3275         len = sizeof(*tlv) + sizeof(*cmd);
3276         skb = ath10k_wmi_alloc_skb(ar, len);
3277         if (!skb)
3278                 return ERR_PTR(-ENOMEM);
3279
3280         tlv = (struct wmi_tlv *)skb->data;
3281         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WOW_ADD_DEL_EVT_CMD);
3282         tlv->len = __cpu_to_le16(sizeof(*cmd));
3283         cmd = (void *)tlv->value;
3284
3285         cmd->vdev_id = __cpu_to_le32(vdev_id);
3286         cmd->is_add = __cpu_to_le32(enable);
3287         cmd->event_bitmap = __cpu_to_le32(1 << event);
3288
3289         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv wow add wakeup event %s enable %d vdev_id %d\n",
3290                    wow_wakeup_event(event), enable, vdev_id);
3291         return skb;
3292 }
3293
3294 static struct sk_buff *
3295 ath10k_wmi_tlv_gen_wow_host_wakeup_ind(struct ath10k *ar)
3296 {
3297         struct wmi_tlv_wow_host_wakeup_ind *cmd;
3298         struct wmi_tlv *tlv;
3299         struct sk_buff *skb;
3300         size_t len;
3301
3302         len = sizeof(*tlv) + sizeof(*cmd);
3303         skb = ath10k_wmi_alloc_skb(ar, len);
3304         if (!skb)
3305                 return ERR_PTR(-ENOMEM);
3306
3307         tlv = (struct wmi_tlv *)skb->data;
3308         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WOW_HOSTWAKEUP_FROM_SLEEP_CMD);
3309         tlv->len = __cpu_to_le16(sizeof(*cmd));
3310         cmd = (void *)tlv->value;
3311
3312         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv wow host wakeup ind\n");
3313         return skb;
3314 }
3315
3316 static struct sk_buff *
3317 ath10k_wmi_tlv_op_gen_wow_add_pattern(struct ath10k *ar, u32 vdev_id,
3318                                       u32 pattern_id, const u8 *pattern,
3319                                       const u8 *bitmask, int pattern_len,
3320                                       int pattern_offset)
3321 {
3322         struct wmi_tlv_wow_add_pattern_cmd *cmd;
3323         struct wmi_tlv_wow_bitmap_pattern *bitmap;
3324         struct wmi_tlv *tlv;
3325         struct sk_buff *skb;
3326         void *ptr;
3327         size_t len;
3328
3329         len = sizeof(*tlv) + sizeof(*cmd) +
3330               sizeof(*tlv) +                    /* array struct */
3331               sizeof(*tlv) + sizeof(*bitmap) +  /* bitmap */
3332               sizeof(*tlv) +                    /* empty ipv4 sync */
3333               sizeof(*tlv) +                    /* empty ipv6 sync */
3334               sizeof(*tlv) +                    /* empty magic */
3335               sizeof(*tlv) +                    /* empty info timeout */
3336               sizeof(*tlv) + sizeof(u32);       /* ratelimit interval */
3337
3338         skb = ath10k_wmi_alloc_skb(ar, len);
3339         if (!skb)
3340                 return ERR_PTR(-ENOMEM);
3341
3342         /* cmd */
3343         ptr = (void *)skb->data;
3344         tlv = ptr;
3345         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WOW_ADD_PATTERN_CMD);
3346         tlv->len = __cpu_to_le16(sizeof(*cmd));
3347         cmd = (void *)tlv->value;
3348
3349         cmd->vdev_id = __cpu_to_le32(vdev_id);
3350         cmd->pattern_id = __cpu_to_le32(pattern_id);
3351         cmd->pattern_type = __cpu_to_le32(WOW_BITMAP_PATTERN);
3352
3353         ptr += sizeof(*tlv);
3354         ptr += sizeof(*cmd);
3355
3356         /* bitmap */
3357         tlv = ptr;
3358         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3359         tlv->len = __cpu_to_le16(sizeof(*tlv) + sizeof(*bitmap));
3360
3361         ptr += sizeof(*tlv);
3362
3363         tlv = ptr;
3364         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WOW_BITMAP_PATTERN_T);
3365         tlv->len = __cpu_to_le16(sizeof(*bitmap));
3366         bitmap = (void *)tlv->value;
3367
3368         memcpy(bitmap->patternbuf, pattern, pattern_len);
3369         memcpy(bitmap->bitmaskbuf, bitmask, pattern_len);
3370         bitmap->pattern_offset = __cpu_to_le32(pattern_offset);
3371         bitmap->pattern_len = __cpu_to_le32(pattern_len);
3372         bitmap->bitmask_len = __cpu_to_le32(pattern_len);
3373         bitmap->pattern_id = __cpu_to_le32(pattern_id);
3374
3375         ptr += sizeof(*tlv);
3376         ptr += sizeof(*bitmap);
3377
3378         /* ipv4 sync */
3379         tlv = ptr;
3380         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3381         tlv->len = __cpu_to_le16(0);
3382
3383         ptr += sizeof(*tlv);
3384
3385         /* ipv6 sync */
3386         tlv = ptr;
3387         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3388         tlv->len = __cpu_to_le16(0);
3389
3390         ptr += sizeof(*tlv);
3391
3392         /* magic */
3393         tlv = ptr;
3394         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3395         tlv->len = __cpu_to_le16(0);
3396
3397         ptr += sizeof(*tlv);
3398
3399         /* pattern info timeout */
3400         tlv = ptr;
3401         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_UINT32);
3402         tlv->len = __cpu_to_le16(0);
3403
3404         ptr += sizeof(*tlv);
3405
3406         /* ratelimit interval */
3407         tlv = ptr;
3408         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_UINT32);
3409         tlv->len = __cpu_to_le16(sizeof(u32));
3410
3411         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv wow add pattern vdev_id %d pattern_id %d, pattern_offset %d\n",
3412                    vdev_id, pattern_id, pattern_offset);
3413         return skb;
3414 }
3415
3416 static struct sk_buff *
3417 ath10k_wmi_tlv_op_gen_wow_del_pattern(struct ath10k *ar, u32 vdev_id,
3418                                       u32 pattern_id)
3419 {
3420         struct wmi_tlv_wow_del_pattern_cmd *cmd;
3421         struct wmi_tlv *tlv;
3422         struct sk_buff *skb;
3423         size_t len;
3424
3425         len = sizeof(*tlv) + sizeof(*cmd);
3426         skb = ath10k_wmi_alloc_skb(ar, len);
3427         if (!skb)
3428                 return ERR_PTR(-ENOMEM);
3429
3430         tlv = (struct wmi_tlv *)skb->data;
3431         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_WOW_DEL_PATTERN_CMD);
3432         tlv->len = __cpu_to_le16(sizeof(*cmd));
3433         cmd = (void *)tlv->value;
3434
3435         cmd->vdev_id = __cpu_to_le32(vdev_id);
3436         cmd->pattern_id = __cpu_to_le32(pattern_id);
3437         cmd->pattern_type = __cpu_to_le32(WOW_BITMAP_PATTERN);
3438
3439         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv wow del pattern vdev_id %d pattern_id %d\n",
3440                    vdev_id, pattern_id);
3441         return skb;
3442 }
3443
3444 /* Request FW to start PNO operation */
3445 static struct sk_buff *
3446 ath10k_wmi_tlv_op_gen_config_pno_start(struct ath10k *ar,
3447                                        u32 vdev_id,
3448                                        struct wmi_pno_scan_req *pno)
3449 {
3450         struct nlo_configured_parameters *nlo_list;
3451         struct wmi_tlv_wow_nlo_config_cmd *cmd;
3452         struct wmi_tlv *tlv;
3453         struct sk_buff *skb;
3454         __le32 *channel_list;
3455         u16 tlv_len;
3456         size_t len;
3457         void *ptr;
3458         u32 i;
3459
3460         len = sizeof(*tlv) + sizeof(*cmd) +
3461               sizeof(*tlv) +
3462               /* TLV place holder for array of structures
3463                * nlo_configured_parameters(nlo_list)
3464                */
3465               sizeof(*tlv);
3466               /* TLV place holder for array of uint32 channel_list */
3467
3468         len += sizeof(u32) * min_t(u8, pno->a_networks[0].channel_count,
3469                                    WMI_NLO_MAX_CHAN);
3470         len += sizeof(struct nlo_configured_parameters) *
3471                                 min_t(u8, pno->uc_networks_count, WMI_NLO_MAX_SSIDS);
3472
3473         skb = ath10k_wmi_alloc_skb(ar, len);
3474         if (!skb)
3475                 return ERR_PTR(-ENOMEM);
3476
3477         ptr = (void *)skb->data;
3478         tlv = ptr;
3479         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_NLO_CONFIG_CMD);
3480         tlv->len = __cpu_to_le16(sizeof(*cmd));
3481         cmd = (void *)tlv->value;
3482
3483         /* wmi_tlv_wow_nlo_config_cmd parameters*/
3484         cmd->vdev_id = __cpu_to_le32(pno->vdev_id);
3485         cmd->flags = __cpu_to_le32(WMI_NLO_CONFIG_START | WMI_NLO_CONFIG_SSID_HIDE_EN);
3486
3487         /* current FW does not support min-max range for dwell time */
3488         cmd->active_dwell_time = __cpu_to_le32(pno->active_max_time);
3489         cmd->passive_dwell_time = __cpu_to_le32(pno->passive_max_time);
3490
3491         if (pno->do_passive_scan)
3492                 cmd->flags |= __cpu_to_le32(WMI_NLO_CONFIG_SCAN_PASSIVE);
3493
3494         /* copy scan interval */
3495         cmd->fast_scan_period = __cpu_to_le32(pno->fast_scan_period);
3496         cmd->slow_scan_period = __cpu_to_le32(pno->slow_scan_period);
3497         cmd->fast_scan_max_cycles = __cpu_to_le32(pno->fast_scan_max_cycles);
3498         cmd->delay_start_time = __cpu_to_le32(pno->delay_start_time);
3499
3500         if (pno->enable_pno_scan_randomization) {
3501                 cmd->flags |= __cpu_to_le32(WMI_NLO_CONFIG_SPOOFED_MAC_IN_PROBE_REQ |
3502                                 WMI_NLO_CONFIG_RANDOM_SEQ_NO_IN_PROBE_REQ);
3503                 ether_addr_copy(cmd->mac_addr.addr, pno->mac_addr);
3504                 ether_addr_copy(cmd->mac_mask.addr, pno->mac_addr_mask);
3505         }
3506
3507         ptr += sizeof(*tlv);
3508         ptr += sizeof(*cmd);
3509
3510         /* nlo_configured_parameters(nlo_list) */
3511         cmd->no_of_ssids = __cpu_to_le32(min_t(u8, pno->uc_networks_count,
3512                                                WMI_NLO_MAX_SSIDS));
3513         tlv_len = __le32_to_cpu(cmd->no_of_ssids) *
3514                 sizeof(struct nlo_configured_parameters);
3515
3516         tlv = ptr;
3517         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3518         tlv->len = __cpu_to_le16(len);
3519
3520         ptr += sizeof(*tlv);
3521         nlo_list = ptr;
3522         for (i = 0; i < __le32_to_cpu(cmd->no_of_ssids); i++) {
3523                 tlv = (struct wmi_tlv *)(&nlo_list[i].tlv_header);
3524                 tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_BYTE);
3525                 tlv->len = __cpu_to_le16(sizeof(struct nlo_configured_parameters) -
3526                                          sizeof(*tlv));
3527
3528                 /* copy ssid and it's length */
3529                 nlo_list[i].ssid.valid = __cpu_to_le32(true);
3530                 nlo_list[i].ssid.ssid.ssid_len = pno->a_networks[i].ssid.ssid_len;
3531                 memcpy(nlo_list[i].ssid.ssid.ssid,
3532                        pno->a_networks[i].ssid.ssid,
3533                        __le32_to_cpu(nlo_list[i].ssid.ssid.ssid_len));
3534
3535                 /* copy rssi threshold */
3536                 if (pno->a_networks[i].rssi_threshold &&
3537                     pno->a_networks[i].rssi_threshold > -300) {
3538                         nlo_list[i].rssi_cond.valid = __cpu_to_le32(true);
3539                         nlo_list[i].rssi_cond.rssi =
3540                                 __cpu_to_le32(pno->a_networks[i].rssi_threshold);
3541                 }
3542
3543                 nlo_list[i].bcast_nw_type.valid = __cpu_to_le32(true);
3544                 nlo_list[i].bcast_nw_type.bcast_nw_type =
3545                         __cpu_to_le32(pno->a_networks[i].bcast_nw_type);
3546         }
3547
3548         ptr += __le32_to_cpu(cmd->no_of_ssids) * sizeof(struct nlo_configured_parameters);
3549
3550         /* copy channel info */
3551         cmd->num_of_channels = __cpu_to_le32(min_t(u8,
3552                                                    pno->a_networks[0].channel_count,
3553                                                    WMI_NLO_MAX_CHAN));
3554
3555         tlv = ptr;
3556         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_UINT32);
3557         tlv->len = __cpu_to_le16(__le32_to_cpu(cmd->num_of_channels) *
3558                                  sizeof(u_int32_t));
3559         ptr += sizeof(*tlv);
3560
3561         channel_list = (__le32 *)ptr;
3562         for (i = 0; i < __le32_to_cpu(cmd->num_of_channels); i++)
3563                 channel_list[i] = __cpu_to_le32(pno->a_networks[0].channels[i]);
3564
3565         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv start pno config vdev_id %d\n",
3566                    vdev_id);
3567
3568         return skb;
3569 }
3570
3571 /* Request FW to stop ongoing PNO operation */
3572 static struct sk_buff *ath10k_wmi_tlv_op_gen_config_pno_stop(struct ath10k *ar,
3573                                                              u32 vdev_id)
3574 {
3575         struct wmi_tlv_wow_nlo_config_cmd *cmd;
3576         struct wmi_tlv *tlv;
3577         struct sk_buff *skb;
3578         void *ptr;
3579         size_t len;
3580
3581         len = sizeof(*tlv) + sizeof(*cmd) +
3582               sizeof(*tlv) +
3583               /* TLV place holder for array of structures
3584                * nlo_configured_parameters(nlo_list)
3585                */
3586               sizeof(*tlv);
3587               /* TLV place holder for array of uint32 channel_list */
3588         skb = ath10k_wmi_alloc_skb(ar, len);
3589         if (!skb)
3590                 return ERR_PTR(-ENOMEM);
3591
3592         ptr = (void *)skb->data;
3593         tlv = ptr;
3594         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_NLO_CONFIG_CMD);
3595         tlv->len = __cpu_to_le16(sizeof(*cmd));
3596         cmd = (void *)tlv->value;
3597
3598         cmd->vdev_id = __cpu_to_le32(vdev_id);
3599         cmd->flags = __cpu_to_le32(WMI_NLO_CONFIG_STOP);
3600
3601         ptr += sizeof(*tlv);
3602         ptr += sizeof(*cmd);
3603
3604         /* nlo_configured_parameters(nlo_list) */
3605         tlv = ptr;
3606         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_STRUCT);
3607         tlv->len = __cpu_to_le16(0);
3608
3609         ptr += sizeof(*tlv);
3610
3611         /* channel list */
3612         tlv = ptr;
3613         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_ARRAY_UINT32);
3614         tlv->len = __cpu_to_le16(0);
3615
3616         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv stop pno config vdev_id %d\n", vdev_id);
3617         return skb;
3618 }
3619
3620 static struct sk_buff *
3621 ath10k_wmi_tlv_op_gen_config_pno(struct ath10k *ar, u32 vdev_id,
3622                                  struct wmi_pno_scan_req *pno_scan)
3623 {
3624         if (pno_scan->enable)
3625                 return ath10k_wmi_tlv_op_gen_config_pno_start(ar, vdev_id, pno_scan);
3626         else
3627                 return ath10k_wmi_tlv_op_gen_config_pno_stop(ar, vdev_id);
3628 }
3629
3630 static struct sk_buff *
3631 ath10k_wmi_tlv_op_gen_adaptive_qcs(struct ath10k *ar, bool enable)
3632 {
3633         struct wmi_tlv_adaptive_qcs *cmd;
3634         struct wmi_tlv *tlv;
3635         struct sk_buff *skb;
3636         void *ptr;
3637         size_t len;
3638
3639         len = sizeof(*tlv) + sizeof(*cmd);
3640         skb = ath10k_wmi_alloc_skb(ar, len);
3641         if (!skb)
3642                 return ERR_PTR(-ENOMEM);
3643
3644         ptr = (void *)skb->data;
3645         tlv = ptr;
3646         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_RESMGR_ADAPTIVE_OCS_CMD);
3647         tlv->len = __cpu_to_le16(sizeof(*cmd));
3648         cmd = (void *)tlv->value;
3649         cmd->enable = __cpu_to_le32(enable ? 1 : 0);
3650
3651         ptr += sizeof(*tlv);
3652         ptr += sizeof(*cmd);
3653
3654         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv adaptive qcs %d\n", enable);
3655         return skb;
3656 }
3657
3658 static struct sk_buff *
3659 ath10k_wmi_tlv_op_gen_echo(struct ath10k *ar, u32 value)
3660 {
3661         struct wmi_echo_cmd *cmd;
3662         struct wmi_tlv *tlv;
3663         struct sk_buff *skb;
3664         void *ptr;
3665         size_t len;
3666
3667         len = sizeof(*tlv) + sizeof(*cmd);
3668         skb = ath10k_wmi_alloc_skb(ar, len);
3669         if (!skb)
3670                 return ERR_PTR(-ENOMEM);
3671
3672         ptr = (void *)skb->data;
3673         tlv = ptr;
3674         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_ECHO_CMD);
3675         tlv->len = __cpu_to_le16(sizeof(*cmd));
3676         cmd = (void *)tlv->value;
3677         cmd->value = cpu_to_le32(value);
3678
3679         ptr += sizeof(*tlv);
3680         ptr += sizeof(*cmd);
3681
3682         ath10k_dbg(ar, ATH10K_DBG_WMI, "wmi tlv echo value 0x%08x\n", value);
3683         return skb;
3684 }
3685
3686 static struct sk_buff *
3687 ath10k_wmi_tlv_op_gen_vdev_spectral_conf(struct ath10k *ar,
3688                                          const struct wmi_vdev_spectral_conf_arg *arg)
3689 {
3690         struct wmi_vdev_spectral_conf_cmd *cmd;
3691         struct sk_buff *skb;
3692         struct wmi_tlv *tlv;
3693         void *ptr;
3694         size_t len;
3695
3696         len = sizeof(*tlv) + sizeof(*cmd);
3697         skb = ath10k_wmi_alloc_skb(ar, len);
3698         if (!skb)
3699                 return ERR_PTR(-ENOMEM);
3700
3701         ptr = (void *)skb->data;
3702         tlv = ptr;
3703         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_SPECTRAL_CONFIGURE_CMD);
3704         tlv->len = __cpu_to_le16(sizeof(*cmd));
3705         cmd = (void *)tlv->value;
3706         cmd->vdev_id = __cpu_to_le32(arg->vdev_id);
3707         cmd->scan_count = __cpu_to_le32(arg->scan_count);
3708         cmd->scan_period = __cpu_to_le32(arg->scan_period);
3709         cmd->scan_priority = __cpu_to_le32(arg->scan_priority);
3710         cmd->scan_fft_size = __cpu_to_le32(arg->scan_fft_size);
3711         cmd->scan_gc_ena = __cpu_to_le32(arg->scan_gc_ena);
3712         cmd->scan_restart_ena = __cpu_to_le32(arg->scan_restart_ena);
3713         cmd->scan_noise_floor_ref = __cpu_to_le32(arg->scan_noise_floor_ref);
3714         cmd->scan_init_delay = __cpu_to_le32(arg->scan_init_delay);
3715         cmd->scan_nb_tone_thr = __cpu_to_le32(arg->scan_nb_tone_thr);
3716         cmd->scan_str_bin_thr = __cpu_to_le32(arg->scan_str_bin_thr);
3717         cmd->scan_wb_rpt_mode = __cpu_to_le32(arg->scan_wb_rpt_mode);
3718         cmd->scan_rssi_rpt_mode = __cpu_to_le32(arg->scan_rssi_rpt_mode);
3719         cmd->scan_rssi_thr = __cpu_to_le32(arg->scan_rssi_thr);
3720         cmd->scan_pwr_format = __cpu_to_le32(arg->scan_pwr_format);
3721         cmd->scan_rpt_mode = __cpu_to_le32(arg->scan_rpt_mode);
3722         cmd->scan_bin_scale = __cpu_to_le32(arg->scan_bin_scale);
3723         cmd->scan_dbm_adj = __cpu_to_le32(arg->scan_dbm_adj);
3724         cmd->scan_chn_mask = __cpu_to_le32(arg->scan_chn_mask);
3725
3726         return skb;
3727 }
3728
3729 static struct sk_buff *
3730 ath10k_wmi_tlv_op_gen_vdev_spectral_enable(struct ath10k *ar, u32 vdev_id,
3731                                            u32 trigger, u32 enable)
3732 {
3733         struct wmi_vdev_spectral_enable_cmd *cmd;
3734         struct sk_buff *skb;
3735         struct wmi_tlv *tlv;
3736         void *ptr;
3737         size_t len;
3738
3739         len = sizeof(*tlv) + sizeof(*cmd);
3740         skb = ath10k_wmi_alloc_skb(ar, len);
3741         if (!skb)
3742                 return ERR_PTR(-ENOMEM);
3743
3744         ptr = (void *)skb->data;
3745         tlv = ptr;
3746         tlv->tag = __cpu_to_le16(WMI_TLV_TAG_STRUCT_VDEV_SPECTRAL_ENABLE_CMD);
3747         tlv->len = __cpu_to_le16(sizeof(*cmd));
3748         cmd = (void *)tlv->value;
3749         cmd->vdev_id = __cpu_to_le32(vdev_id);
3750         cmd->trigger_cmd = __cpu_to_le32(trigger);
3751         cmd->enable_cmd = __cpu_to_le32(enable);
3752
3753         return skb;
3754 }
3755
3756 /****************/
3757 /* TLV mappings */
3758 /****************/
3759
3760 static struct wmi_cmd_map wmi_tlv_cmd_map = {
3761         .init_cmdid = WMI_TLV_INIT_CMDID,
3762         .start_scan_cmdid = WMI_TLV_START_SCAN_CMDID,
3763         .stop_scan_cmdid = WMI_TLV_STOP_SCAN_CMDID,
3764         .scan_chan_list_cmdid = WMI_TLV_SCAN_CHAN_LIST_CMDID,
3765         .scan_sch_prio_tbl_cmdid = WMI_TLV_SCAN_SCH_PRIO_TBL_CMDID,
3766         .scan_prob_req_oui_cmdid = WMI_TLV_SCAN_PROB_REQ_OUI_CMDID,
3767         .pdev_set_regdomain_cmdid = WMI_TLV_PDEV_SET_REGDOMAIN_CMDID,
3768         .pdev_set_channel_cmdid = WMI_TLV_PDEV_SET_CHANNEL_CMDID,
3769         .pdev_set_param_cmdid = WMI_TLV_PDEV_SET_PARAM_CMDID,
3770         .pdev_pktlog_enable_cmdid = WMI_TLV_PDEV_PKTLOG_ENABLE_CMDID,
3771         .pdev_pktlog_disable_cmdid = WMI_TLV_PDEV_PKTLOG_DISABLE_CMDID,
3772         .pdev_set_wmm_params_cmdid = WMI_TLV_PDEV_SET_WMM_PARAMS_CMDID,
3773         .pdev_set_ht_cap_ie_cmdid = WMI_TLV_PDEV_SET_HT_CAP_IE_CMDID,
3774         .pdev_set_vht_cap_ie_cmdid = WMI_TLV_PDEV_SET_VHT_CAP_IE_CMDID,
3775         .pdev_set_dscp_tid_map_cmdid = WMI_TLV_PDEV_SET_DSCP_TID_MAP_CMDID,
3776         .pdev_set_quiet_mode_cmdid = WMI_TLV_PDEV_SET_QUIET_MODE_CMDID,
3777         .pdev_green_ap_ps_enable_cmdid = WMI_TLV_PDEV_GREEN_AP_PS_ENABLE_CMDID,
3778         .pdev_get_tpc_config_cmdid = WMI_TLV_PDEV_GET_TPC_CONFIG_CMDID,
3779         .pdev_set_base_macaddr_cmdid = WMI_TLV_PDEV_SET_BASE_MACADDR_CMDID,
3780         .vdev_create_cmdid = WMI_TLV_VDEV_CREATE_CMDID,
3781         .vdev_delete_cmdid = WMI_TLV_VDEV_DELETE_CMDID,
3782         .vdev_start_request_cmdid = WMI_TLV_VDEV_START_REQUEST_CMDID,
3783         .vdev_restart_request_cmdid = WMI_TLV_VDEV_RESTART_REQUEST_CMDID,
3784         .vdev_up_cmdid = WMI_TLV_VDEV_UP_CMDID,
3785         .vdev_stop_cmdid = WMI_TLV_VDEV_STOP_CMDID,
3786         .vdev_down_cmdid = WMI_TLV_VDEV_DOWN_CMDID,
3787         .vdev_set_param_cmdid = WMI_TLV_VDEV_SET_PARAM_CMDID,
3788         .vdev_install_key_cmdid = WMI_TLV_VDEV_INSTALL_KEY_CMDID,
3789         .peer_create_cmdid = WMI_TLV_PEER_CREATE_CMDID,
3790         .peer_delete_cmdid = WMI_TLV_PEER_DELETE_CMDID,
3791         .peer_flush_tids_cmdid = WMI_TLV_PEER_FLUSH_TIDS_CMDID,
3792         .peer_set_param_cmdid = WMI_TLV_PEER_SET_PARAM_CMDID,
3793         .peer_assoc_cmdid = WMI_TLV_PEER_ASSOC_CMDID,
3794         .peer_add_wds_entry_cmdid = WMI_TLV_PEER_ADD_WDS_ENTRY_CMDID,
3795         .peer_remove_wds_entry_cmdid = WMI_TLV_PEER_REMOVE_WDS_ENTRY_CMDID,
3796         .peer_mcast_group_cmdid = WMI_TLV_PEER_MCAST_GROUP_CMDID,
3797         .bcn_tx_cmdid = WMI_TLV_BCN_TX_CMDID,
3798         .pdev_send_bcn_cmdid = WMI_TLV_PDEV_SEND_BCN_CMDID,
3799         .bcn_tmpl_cmdid = WMI_TLV_BCN_TMPL_CMDID,
3800         .bcn_filter_rx_cmdid = WMI_TLV_BCN_FILTER_RX_CMDID,
3801         .prb_req_filter_rx_cmdid = WMI_TLV_PRB_REQ_FILTER_RX_CMDID,
3802         .mgmt_tx_cmdid = WMI_TLV_MGMT_TX_CMDID,
3803         .mgmt_tx_send_cmdid = WMI_TLV_MGMT_TX_SEND_CMD,
3804         .prb_tmpl_cmdid = WMI_TLV_PRB_TMPL_CMDID,
3805         .addba_clear_resp_cmdid = WMI_TLV_ADDBA_CLEAR_RESP_CMDID,
3806         .addba_send_cmdid = WMI_TLV_ADDBA_SEND_CMDID,
3807         .addba_status_cmdid = WMI_TLV_ADDBA_STATUS_CMDID,
3808         .delba_send_cmdid = WMI_TLV_DELBA_SEND_CMDID,
3809         .addba_set_resp_cmdid = WMI_TLV_ADDBA_SET_RESP_CMDID,
3810         .send_singleamsdu_cmdid = WMI_TLV_SEND_SINGLEAMSDU_CMDID,
3811         .sta_powersave_mode_cmdid = WMI_TLV_STA_POWERSAVE_MODE_CMDID,
3812         .sta_powersave_param_cmdid = WMI_TLV_STA_POWERSAVE_PARAM_CMDID,
3813         .sta_mimo_ps_mode_cmdid = WMI_TLV_STA_MIMO_PS_MODE_CMDID,
3814         .pdev_dfs_enable_cmdid = WMI_TLV_PDEV_DFS_ENABLE_CMDID,
3815         .pdev_dfs_disable_cmdid = WMI_TLV_PDEV_DFS_DISABLE_CMDID,
3816         .roam_scan_mode = WMI_TLV_ROAM_SCAN_MODE,
3817         .roam_scan_rssi_threshold = WMI_TLV_ROAM_SCAN_RSSI_THRESHOLD,
3818         .roam_scan_period = WMI_TLV_ROAM_SCAN_PERIOD,
3819         .roam_scan_rssi_change_threshold =
3820                                 WMI_TLV_ROAM_SCAN_RSSI_CHANGE_THRESHOLD,
3821         .roam_ap_profile = WMI_TLV_ROAM_AP_PROFILE,
3822         .ofl_scan_add_ap_profile = WMI_TLV_ROAM_AP_PROFILE,
3823         .ofl_scan_remove_ap_profile = WMI_TLV_OFL_SCAN_REMOVE_AP_PROFILE,
3824         .ofl_scan_period = WMI_TLV_OFL_SCAN_PERIOD,
3825         .p2p_dev_set_device_info = WMI_TLV_P2P_DEV_SET_DEVICE_INFO,
3826         .p2p_dev_set_discoverability = WMI_TLV_P2P_DEV_SET_DISCOVERABILITY,
3827         .p2p_go_set_beacon_ie = WMI_TLV_P2P_GO_SET_BEACON_IE,
3828         .p2p_go_set_probe_resp_ie = WMI_TLV_P2P_GO_SET_PROBE_RESP_IE,
3829         .p2p_set_vendor_ie_data_cmdid = WMI_TLV_P2P_SET_VENDOR_IE_DATA_CMDID,
3830         .ap_ps_peer_param_cmdid = WMI_TLV_AP_PS_PEER_PARAM_CMDID,
3831         .ap_ps_peer_uapsd_coex_cmdid = WMI_TLV_AP_PS_PEER_UAPSD_COEX_CMDID,
3832         .peer_rate_retry_sched_cmdid = WMI_TLV_PEER_RATE_RETRY_SCHED_CMDID,
3833         .wlan_profile_trigger_cmdid = WMI_TLV_WLAN_PROFILE_TRIGGER_CMDID,
3834         .wlan_profile_set_hist_intvl_cmdid =
3835                                 WMI_TLV_WLAN_PROFILE_SET_HIST_INTVL_CMDID,
3836         .wlan_profile_get_profile_data_cmdid =
3837                                 WMI_TLV_WLAN_PROFILE_GET_PROFILE_DATA_CMDID,
3838         .wlan_profile_enable_profile_id_cmdid =
3839                                 WMI_TLV_WLAN_PROFILE_ENABLE_PROFILE_ID_CMDID,
3840         .wlan_profile_list_profile_id_cmdid =
3841                                 WMI_TLV_WLAN_PROFILE_LIST_PROFILE_ID_CMDID,
3842         .pdev_suspend_cmdid = WMI_TLV_PDEV_SUSPEND_CMDID,
3843         .pdev_resume_cmdid = WMI_TLV_PDEV_RESUME_CMDID,
3844         .add_bcn_filter_cmdid = WMI_TLV_ADD_BCN_FILTER_CMDID,
3845         .rmv_bcn_filter_cmdid = WMI_TLV_RMV_BCN_FILTER_CMDID,
3846         .wow_add_wake_pattern_cmdid = WMI_TLV_WOW_ADD_WAKE_PATTERN_CMDID,
3847         .wow_del_wake_pattern_cmdid = WMI_TLV_WOW_DEL_WAKE_PATTERN_CMDID,
3848         .wow_enable_disable_wake_event_cmdid =
3849                                 WMI_TLV_WOW_ENABLE_DISABLE_WAKE_EVENT_CMDID,
3850         .wow_enable_cmdid = WMI_TLV_WOW_ENABLE_CMDID,
3851         .wow_hostwakeup_from_sleep_cmdid =
3852                                 WMI_TLV_WOW_HOSTWAKEUP_FROM_SLEEP_CMDID,
3853         .rtt_measreq_cmdid = WMI_TLV_RTT_MEASREQ_CMDID,
3854         .rtt_tsf_cmdid = WMI_TLV_RTT_TSF_CMDID,
3855         .vdev_spectral_scan_configure_cmdid = WMI_TLV_SPECTRAL_SCAN_CONF_CMDID,
3856         .vdev_spectral_scan_enable_cmdid = WMI_TLV_SPECTRAL_SCAN_ENABLE_CMDID,
3857         .request_stats_cmdid = WMI_TLV_REQUEST_STATS_CMDID,
3858         .set_arp_ns_offload_cmdid = WMI_TLV_SET_ARP_NS_OFFLOAD_CMDID,
3859         .network_list_offload_config_cmdid =
3860                                 WMI_TLV_NETWORK_LIST_OFFLOAD_CONFIG_CMDID,
3861         .gtk_offload_cmdid = WMI_TLV_GTK_OFFLOAD_CMDID,
3862         .csa_offload_enable_cmdid = WMI_TLV_CSA_OFFLOAD_ENABLE_CMDID,
3863         .csa_offload_chanswitch_cmdid = WMI_TLV_CSA_OFFLOAD_CHANSWITCH_CMDID,
3864         .chatter_set_mode_cmdid = WMI_TLV_CHATTER_SET_MODE_CMDID,
3865         .peer_tid_addba_cmdid = WMI_TLV_PEER_TID_ADDBA_CMDID,
3866         .peer_tid_delba_cmdid = WMI_TLV_PEER_TID_DELBA_CMDID,
3867         .sta_dtim_ps_method_cmdid = WMI_TLV_STA_DTIM_PS_METHOD_CMDID,
3868         .sta_uapsd_auto_trig_cmdid = WMI_TLV_STA_UAPSD_AUTO_TRIG_CMDID,
3869         .sta_keepalive_cmd = WMI_TLV_STA_KEEPALIVE_CMDID,
3870         .echo_cmdid = WMI_TLV_ECHO_CMDID,
3871         .pdev_utf_cmdid = WMI_TLV_PDEV_UTF_CMDID,
3872         .dbglog_cfg_cmdid = WMI_TLV_DBGLOG_CFG_CMDID,
3873         .pdev_qvit_cmdid = WMI_TLV_PDEV_QVIT_CMDID,
3874         .pdev_ftm_intg_cmdid = WMI_TLV_PDEV_FTM_INTG_CMDID,
3875         .vdev_set_keepalive_cmdid = WMI_TLV_VDEV_SET_KEEPALIVE_CMDID,
3876         .vdev_get_keepalive_cmdid = WMI_TLV_VDEV_GET_KEEPALIVE_CMDID,
3877         .force_fw_hang_cmdid = WMI_TLV_FORCE_FW_HANG_CMDID,
3878         .gpio_config_cmdid = WMI_TLV_GPIO_CONFIG_CMDID,
3879         .gpio_output_cmdid = WMI_TLV_GPIO_OUTPUT_CMDID,
3880         .pdev_get_temperature_cmdid = WMI_TLV_PDEV_GET_TEMPERATURE_CMDID,
3881         .vdev_set_wmm_params_cmdid = WMI_TLV_VDEV_SET_WMM_PARAMS_CMDID,
3882         .tdls_set_state_cmdid = WMI_TLV_TDLS_SET_STATE_CMDID,
3883         .tdls_peer_update_cmdid = WMI_TLV_TDLS_PEER_UPDATE_CMDID,
3884         .adaptive_qcs_cmdid = WMI_TLV_RESMGR_ADAPTIVE_OCS_CMDID,
3885         .scan_update_request_cmdid = WMI_CMD_UNSUPPORTED,
3886         .vdev_standby_response_cmdid = WMI_CMD_UNSUPPORTED,
3887         .vdev_resume_response_cmdid = WMI_CMD_UNSUPPORTED,
3888         .wlan_peer_caching_add_peer_cmdid = WMI_CMD_UNSUPPORTED,
3889         .wlan_peer_caching_evict_peer_cmdid = WMI_CMD_UNSUPPORTED,
3890         .wlan_peer_caching_restore_peer_cmdid = WMI_CMD_UNSUPPORTED,
3891         .wlan_peer_caching_print_all_peers_info_cmdid = WMI_CMD_UNSUPPORTED,
3892         .peer_update_wds_entry_cmdid = WMI_CMD_UNSUPPORTED,
3893         .peer_add_proxy_sta_entry_cmdid = WMI_CMD_UNSUPPORTED,
3894         .rtt_keepalive_cmdid = WMI_CMD_UNSUPPORTED,
3895         .oem_req_cmdid = WMI_CMD_UNSUPPORTED,
3896         .nan_cmdid = WMI_CMD_UNSUPPORTED,
3897         .vdev_ratemask_cmdid = WMI_CMD_UNSUPPORTED,
3898         .qboost_cfg_cmdid = WMI_CMD_UNSUPPORTED,
3899         .pdev_smart_ant_enable_cmdid = WMI_CMD_UNSUPPORTED,
3900         .pdev_smart_ant_set_rx_antenna_cmdid = WMI_CMD_UNSUPPORTED,
3901         .peer_smart_ant_set_tx_antenna_cmdid = WMI_CMD_UNSUPPORTED,
3902         .peer_smart_ant_set_train_info_cmdid = WMI_CMD_UNSUPPORTED,
3903         .peer_smart_ant_set_node_config_ops_cmdid = WMI_CMD_UNSUPPORTED,
3904         .pdev_set_antenna_switch_table_cmdid = WMI_CMD_UNSUPPORTED,
3905         .pdev_set_ctl_table_cmdid = WMI_CMD_UNSUPPORTED,
3906         .pdev_set_mimogain_table_cmdid = WMI_CMD_UNSUPPORTED,
3907         .pdev_ratepwr_table_cmdid = WMI_CMD_UNSUPPORTED,
3908         .pdev_ratepwr_chainmsk_table_cmdid = WMI_CMD_UNSUPPORTED,
3909         .pdev_fips_cmdid = WMI_CMD_UNSUPPORTED,
3910         .tt_set_conf_cmdid = WMI_CMD_UNSUPPORTED,
3911         .fwtest_cmdid = WMI_CMD_UNSUPPORTED,
3912         .vdev_atf_request_cmdid = WMI_CMD_UNSUPPORTED,
3913         .peer_atf_request_cmdid = WMI_CMD_UNSUPPORTED,
3914         .pdev_get_ani_cck_config_cmdid = WMI_CMD_UNSUPPORTED,
3915         .pdev_get_ani_ofdm_config_cmdid = WMI_CMD_UNSUPPORTED,
3916         .pdev_reserve_ast_entry_cmdid = WMI_CMD_UNSUPPORTED,
3917 };
3918
3919 static struct wmi_pdev_param_map wmi_tlv_pdev_param_map = {
3920         .tx_chain_mask = WMI_TLV_PDEV_PARAM_TX_CHAIN_MASK,
3921         .rx_chain_mask = WMI_TLV_PDEV_PARAM_RX_CHAIN_MASK,
3922         .txpower_limit2g = WMI_TLV_PDEV_PARAM_TXPOWER_LIMIT2G,
3923         .txpower_limit5g = WMI_TLV_PDEV_PARAM_TXPOWER_LIMIT5G,
3924         .txpower_scale = WMI_TLV_PDEV_PARAM_TXPOWER_SCALE,
3925         .beacon_gen_mode = WMI_TLV_PDEV_PARAM_BEACON_GEN_MODE,
3926         .beacon_tx_mode = WMI_TLV_PDEV_PARAM_BEACON_TX_MODE,
3927         .resmgr_offchan_mode = WMI_TLV_PDEV_PARAM_RESMGR_OFFCHAN_MODE,
3928         .protection_mode = WMI_TLV_PDEV_PARAM_PROTECTION_MODE,
3929         .dynamic_bw = WMI_TLV_PDEV_PARAM_DYNAMIC_BW,
3930         .non_agg_sw_retry_th = WMI_TLV_PDEV_PARAM_NON_AGG_SW_RETRY_TH,
3931         .agg_sw_retry_th = WMI_TLV_PDEV_PARAM_AGG_SW_RETRY_TH,
3932         .sta_kickout_th = WMI_TLV_PDEV_PARAM_STA_KICKOUT_TH,
3933         .ac_aggrsize_scaling = WMI_TLV_PDEV_PARAM_AC_AGGRSIZE_SCALING,
3934         .ltr_enable = WMI_TLV_PDEV_PARAM_LTR_ENABLE,
3935         .ltr_ac_latency_be = WMI_TLV_PDEV_PARAM_LTR_AC_LATENCY_BE,
3936         .ltr_ac_latency_bk = WMI_TLV_PDEV_PARAM_LTR_AC_LATENCY_BK,
3937         .ltr_ac_latency_vi = WMI_TLV_PDEV_PARAM_LTR_AC_LATENCY_VI,
3938         .ltr_ac_latency_vo = WMI_TLV_PDEV_PARAM_LTR_AC_LATENCY_VO,
3939         .ltr_ac_latency_timeout = WMI_TLV_PDEV_PARAM_LTR_AC_LATENCY_TIMEOUT,
3940         .ltr_sleep_override = WMI_TLV_PDEV_PARAM_LTR_SLEEP_OVERRIDE,
3941         .ltr_rx_override = WMI_TLV_PDEV_PARAM_LTR_RX_OVERRIDE,
3942         .ltr_tx_activity_timeout = WMI_TLV_PDEV_PARAM_LTR_TX_ACTIVITY_TIMEOUT,
3943         .l1ss_enable = WMI_TLV_PDEV_PARAM_L1SS_ENABLE,
3944         .dsleep_enable = WMI_TLV_PDEV_PARAM_DSLEEP_ENABLE,
3945         .pcielp_txbuf_flush = WMI_TLV_PDEV_PARAM_PCIELP_TXBUF_FLUSH,
3946         .pcielp_txbuf_watermark = WMI_TLV_PDEV_PARAM_PCIELP_TXBUF_TMO_EN,
3947         .pcielp_txbuf_tmo_en = WMI_TLV_PDEV_PARAM_PCIELP_TXBUF_TMO_EN,
3948         .pcielp_txbuf_tmo_value = WMI_TLV_PDEV_PARAM_PCIELP_TXBUF_TMO_VALUE,
3949         .pdev_stats_update_period = WMI_TLV_PDEV_PARAM_PDEV_STATS_UPDATE_PERIOD,
3950         .vdev_stats_update_period = WMI_TLV_PDEV_PARAM_VDEV_STATS_UPDATE_PERIOD,
3951         .peer_stats_update_period = WMI_TLV_PDEV_PARAM_PEER_STATS_UPDATE_PERIOD,
3952         .bcnflt_stats_update_period =
3953                                 WMI_TLV_PDEV_PARAM_BCNFLT_STATS_UPDATE_PERIOD,
3954         .pmf_qos = WMI_TLV_PDEV_PARAM_PMF_QOS,
3955         .arp_ac_override = WMI_TLV_PDEV_PARAM_ARP_AC_OVERRIDE,
3956         .dcs = WMI_TLV_PDEV_PARAM_DCS,
3957         .ani_enable = WMI_TLV_PDEV_PARAM_ANI_ENABLE,
3958         .ani_poll_period = WMI_TLV_PDEV_PARAM_ANI_POLL_PERIOD,
3959         .ani_listen_period = WMI_TLV_PDEV_PARAM_ANI_LISTEN_PERIOD,
3960         .ani_ofdm_level = WMI_TLV_PDEV_PARAM_ANI_OFDM_LEVEL,
3961         .ani_cck_level = WMI_TLV_PDEV_PARAM_ANI_CCK_LEVEL,
3962         .dyntxchain = WMI_TLV_PDEV_PARAM_DYNTXCHAIN,
3963         .proxy_sta = WMI_TLV_PDEV_PARAM_PROXY_STA,
3964         .idle_ps_config = WMI_TLV_PDEV_PARAM_IDLE_PS_CONFIG,
3965         .power_gating_sleep = WMI_TLV_PDEV_PARAM_POWER_GATING_SLEEP,
3966         .fast_channel_reset = WMI_TLV_PDEV_PARAM_UNSUPPORTED,
3967         .burst_dur = WMI_TLV_PDEV_PARAM_BURST_DUR,
3968         .burst_enable = WMI_TLV_PDEV_PARAM_BURST_ENABLE,
3969         .cal_period = WMI_PDEV_PARAM_UNSUPPORTED,
3970         .aggr_burst = WMI_PDEV_PARAM_UNSUPPORTED,
3971         .rx_decap_mode = WMI_PDEV_PARAM_UNSUPPORTED,
3972         .smart_antenna_default_antenna = WMI_PDEV_PARAM_UNSUPPORTED,
3973         .igmpmld_override = WMI_PDEV_PARAM_UNSUPPORTED,
3974         .igmpmld_tid = WMI_PDEV_PARAM_UNSUPPORTED,
3975         .antenna_gain = WMI_PDEV_PARAM_UNSUPPORTED,
3976         .rx_filter = WMI_PDEV_PARAM_UNSUPPORTED,
3977         .set_mcast_to_ucast_tid = WMI_PDEV_PARAM_UNSUPPORTED,
3978         .proxy_sta_mode = WMI_PDEV_PARAM_UNSUPPORTED,
3979         .set_mcast2ucast_mode = WMI_PDEV_PARAM_UNSUPPORTED,
3980         .set_mcast2ucast_buffer = WMI_PDEV_PARAM_UNSUPPORTED,
3981         .remove_mcast2ucast_buffer = WMI_PDEV_PARAM_UNSUPPORTED,
3982         .peer_sta_ps_statechg_enable = WMI_PDEV_PARAM_UNSUPPORTED,
3983         .igmpmld_ac_override = WMI_PDEV_PARAM_UNSUPPORTED,
3984         .block_interbss = WMI_PDEV_PARAM_UNSUPPORTED,
3985         .set_disable_reset_cmdid = WMI_PDEV_PARAM_UNSUPPORTED,
3986         .set_msdu_ttl_cmdid = WMI_PDEV_PARAM_UNSUPPORTED,
3987         .set_ppdu_duration_cmdid = WMI_PDEV_PARAM_UNSUPPORTED,
3988         .txbf_sound_period_cmdid = WMI_PDEV_PARAM_UNSUPPORTED,
3989         .set_promisc_mode_cmdid = WMI_PDEV_PARAM_UNSUPPORTED,
3990         .set_burst_mode_cmdid = WMI_PDEV_PARAM_UNSUPPORTED,
3991         .en_stats = WMI_PDEV_PARAM_UNSUPPORTED,
3992         .mu_group_policy = WMI_PDEV_PARAM_UNSUPPORTED,
3993         .noise_detection = WMI_PDEV_PARAM_UNSUPPORTED,
3994         .noise_threshold = WMI_PDEV_PARAM_UNSUPPORTED,
3995         .dpd_enable = WMI_PDEV_PARAM_UNSUPPORTED,
3996         .set_mcast_bcast_echo = WMI_PDEV_PARAM_UNSUPPORTED,
3997         .atf_strict_sch = WMI_PDEV_PARAM_UNSUPPORTED,
3998         .atf_sched_duration = WMI_PDEV_PARAM_UNSUPPORTED,
3999         .ant_plzn = WMI_PDEV_PARAM_UNSUPPORTED,
4000         .mgmt_retry_limit = WMI_PDEV_PARAM_UNSUPPORTED,
4001         .sensitivity_level = WMI_PDEV_PARAM_UNSUPPORTED,
4002         .signed_txpower_2g = WMI_PDEV_PARAM_UNSUPPORTED,
4003         .signed_txpower_5g = WMI_PDEV_PARAM_UNSUPPORTED,
4004         .enable_per_tid_amsdu = WMI_PDEV_PARAM_UNSUPPORTED,
4005         .enable_per_tid_ampdu = WMI_PDEV_PARAM_UNSUPPORTED,
4006         .cca_threshold = WMI_PDEV_PARAM_UNSUPPORTED,
4007         .rts_fixed_rate = WMI_PDEV_PARAM_UNSUPPORTED,
4008         .pdev_reset = WMI_PDEV_PARAM_UNSUPPORTED,
4009         .wapi_mbssid_offset = WMI_PDEV_PARAM_UNSUPPORTED,
4010         .arp_srcaddr = WMI_PDEV_PARAM_UNSUPPORTED,
4011         .arp_dstaddr = WMI_PDEV_PARAM_UNSUPPORTED,
4012 };
4013
4014 static struct wmi_vdev_param_map wmi_tlv_vdev_param_map = {
4015         .rts_threshold = WMI_TLV_VDEV_PARAM_RTS_THRESHOLD,
4016         .fragmentation_threshold = WMI_TLV_VDEV_PARAM_FRAGMENTATION_THRESHOLD,
4017         .beacon_interval = WMI_TLV_VDEV_PARAM_BEACON_INTERVAL,
4018         .listen_interval = WMI_TLV_VDEV_PARAM_LISTEN_INTERVAL,
4019         .multicast_rate = WMI_TLV_VDEV_PARAM_MULTICAST_RATE,
4020         .mgmt_tx_rate = WMI_TLV_VDEV_PARAM_MGMT_TX_RATE,
4021         .slot_time = WMI_TLV_VDEV_PARAM_SLOT_TIME,
4022         .preamble = WMI_TLV_VDEV_PARAM_PREAMBLE,
4023         .swba_time = WMI_TLV_VDEV_PARAM_SWBA_TIME,
4024         .wmi_vdev_stats_update_period = WMI_TLV_VDEV_STATS_UPDATE_PERIOD,
4025         .wmi_vdev_pwrsave_ageout_time = WMI_TLV_VDEV_PWRSAVE_AGEOUT_TIME,
4026         .wmi_vdev_host_swba_interval = WMI_TLV_VDEV_HOST_SWBA_INTERVAL,
4027         .dtim_period = WMI_TLV_VDEV_PARAM_DTIM_PERIOD,
4028         .wmi_vdev_oc_scheduler_air_time_limit =
4029                                 WMI_TLV_VDEV_OC_SCHEDULER_AIR_TIME_LIMIT,
4030         .wds = WMI_TLV_VDEV_PARAM_WDS,
4031         .atim_window = WMI_TLV_VDEV_PARAM_ATIM_WINDOW,
4032         .bmiss_count_max = WMI_TLV_VDEV_PARAM_BMISS_COUNT_MAX,
4033         .bmiss_first_bcnt = WMI_TLV_VDEV_PARAM_BMISS_FIRST_BCNT,
4034         .bmiss_final_bcnt = WMI_TLV_VDEV_PARAM_BMISS_FINAL_BCNT,
4035         .feature_wmm = WMI_TLV_VDEV_PARAM_FEATURE_WMM,
4036         .chwidth = WMI_TLV_VDEV_PARAM_CHWIDTH,
4037         .chextoffset = WMI_TLV_VDEV_PARAM_CHEXTOFFSET,
4038         .disable_htprotection = WMI_TLV_VDEV_PARAM_DISABLE_HTPROTECTION,
4039         .sta_quickkickout = WMI_TLV_VDEV_PARAM_STA_QUICKKICKOUT,
4040         .mgmt_rate = WMI_TLV_VDEV_PARAM_MGMT_RATE,
4041         .protection_mode = WMI_TLV_VDEV_PARAM_PROTECTION_MODE,
4042         .fixed_rate = WMI_TLV_VDEV_PARAM_FIXED_RATE,
4043         .sgi = WMI_TLV_VDEV_PARAM_SGI,
4044         .ldpc = WMI_TLV_VDEV_PARAM_LDPC,
4045         .tx_stbc = WMI_TLV_VDEV_PARAM_TX_STBC,
4046         .rx_stbc = WMI_TLV_VDEV_PARAM_RX_STBC,
4047         .intra_bss_fwd = WMI_TLV_VDEV_PARAM_INTRA_BSS_FWD,
4048         .def_keyid = WMI_TLV_VDEV_PARAM_DEF_KEYID,
4049         .nss = WMI_TLV_VDEV_PARAM_NSS,
4050         .bcast_data_rate = WMI_TLV_VDEV_PARAM_BCAST_DATA_RATE,
4051         .mcast_data_rate = WMI_TLV_VDEV_PARAM_MCAST_DATA_RATE,
4052         .mcast_indicate = WMI_TLV_VDEV_PARAM_MCAST_INDICATE,
4053         .dhcp_indicate = WMI_TLV_VDEV_PARAM_DHCP_INDICATE,
4054         .unknown_dest_indicate = WMI_TLV_VDEV_PARAM_UNKNOWN_DEST_INDICATE,
4055         .ap_keepalive_min_idle_inactive_time_secs =
4056                 WMI_TLV_VDEV_PARAM_AP_KEEPALIVE_MIN_IDLE_INACTIVE_TIME_SECS,
4057         .ap_keepalive_max_idle_inactive_time_secs =
4058                 WMI_TLV_VDEV_PARAM_AP_KEEPALIVE_MAX_IDLE_INACTIVE_TIME_SECS,
4059         .ap_keepalive_max_unresponsive_time_secs =
4060                 WMI_TLV_VDEV_PARAM_AP_KEEPALIVE_MAX_UNRESPONSIVE_TIME_SECS,
4061         .ap_enable_nawds = WMI_TLV_VDEV_PARAM_AP_ENABLE_NAWDS,
4062         .mcast2ucast_set = WMI_TLV_VDEV_PARAM_UNSUPPORTED,
4063         .enable_rtscts = WMI_TLV_VDEV_PARAM_ENABLE_RTSCTS,
4064         .txbf = WMI_TLV_VDEV_PARAM_TXBF,
4065         .packet_powersave = WMI_TLV_VDEV_PARAM_PACKET_POWERSAVE,
4066         .drop_unencry = WMI_TLV_VDEV_PARAM_DROP_UNENCRY,
4067         .tx_encap_type = WMI_TLV_VDEV_PARAM_TX_ENCAP_TYPE,
4068         .ap_detect_out_of_sync_sleeping_sta_time_secs =
4069                                         WMI_TLV_VDEV_PARAM_UNSUPPORTED,
4070         .rc_num_retries = WMI_VDEV_PARAM_UNSUPPORTED,
4071         .cabq_maxdur = WMI_VDEV_PARAM_UNSUPPORTED,
4072         .mfptest_set = WMI_VDEV_PARAM_UNSUPPORTED,
4073         .rts_fixed_rate = WMI_VDEV_PARAM_UNSUPPORTED,
4074         .vht_sgimask = WMI_VDEV_PARAM_UNSUPPORTED,
4075         .vht80_ratemask = WMI_VDEV_PARAM_UNSUPPORTED,
4076         .early_rx_adjust_enable = WMI_VDEV_PARAM_UNSUPPORTED,
4077         .early_rx_tgt_bmiss_num = WMI_VDEV_PARAM_UNSUPPORTED,
4078         .early_rx_bmiss_sample_cycle = WMI_VDEV_PARAM_UNSUPPORTED,
4079         .early_rx_slop_step = WMI_VDEV_PARAM_UNSUPPORTED,
4080         .early_rx_init_slop = WMI_VDEV_PARAM_UNSUPPORTED,
4081         .early_rx_adjust_pause = WMI_VDEV_PARAM_UNSUPPORTED,
4082         .proxy_sta = WMI_VDEV_PARAM_UNSUPPORTED,
4083         .meru_vc = WMI_VDEV_PARAM_UNSUPPORTED,
4084         .rx_decap_type = WMI_VDEV_PARAM_UNSUPPORTED,
4085         .bw_nss_ratemask = WMI_VDEV_PARAM_UNSUPPORTED,
4086 };
4087
4088 static const struct wmi_ops wmi_tlv_ops = {
4089         .rx = ath10k_wmi_tlv_op_rx,
4090         .map_svc = wmi_tlv_svc_map,
4091         .map_svc_ext = wmi_tlv_svc_map_ext,
4092
4093         .pull_scan = ath10k_wmi_tlv_op_pull_scan_ev,
4094         .pull_mgmt_rx = ath10k_wmi_tlv_op_pull_mgmt_rx_ev,
4095         .pull_mgmt_tx_compl = ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev,
4096         .pull_ch_info = ath10k_wmi_tlv_op_pull_ch_info_ev,
4097         .pull_vdev_start = ath10k_wmi_tlv_op_pull_vdev_start_ev,
4098         .pull_peer_kick = ath10k_wmi_tlv_op_pull_peer_kick_ev,
4099         .pull_swba = ath10k_wmi_tlv_op_pull_swba_ev,
4100         .pull_phyerr_hdr = ath10k_wmi_tlv_op_pull_phyerr_ev_hdr,
4101         .pull_phyerr = ath10k_wmi_op_pull_phyerr_ev,
4102         .pull_svc_rdy = ath10k_wmi_tlv_op_pull_svc_rdy_ev,
4103         .pull_rdy = ath10k_wmi_tlv_op_pull_rdy_ev,
4104         .pull_svc_avail = ath10k_wmi_tlv_op_pull_svc_avail,
4105         .pull_fw_stats = ath10k_wmi_tlv_op_pull_fw_stats,
4106         .pull_roam_ev = ath10k_wmi_tlv_op_pull_roam_ev,
4107         .pull_wow_event = ath10k_wmi_tlv_op_pull_wow_ev,
4108         .pull_echo_ev = ath10k_wmi_tlv_op_pull_echo_ev,
4109         .get_txbf_conf_scheme = ath10k_wmi_tlv_txbf_conf_scheme,
4110
4111         .gen_pdev_suspend = ath10k_wmi_tlv_op_gen_pdev_suspend,
4112         .gen_pdev_resume = ath10k_wmi_tlv_op_gen_pdev_resume,
4113         .gen_pdev_set_rd = ath10k_wmi_tlv_op_gen_pdev_set_rd,
4114         .gen_pdev_set_param = ath10k_wmi_tlv_op_gen_pdev_set_param,
4115         .gen_init = ath10k_wmi_tlv_op_gen_init,
4116         .gen_start_scan = ath10k_wmi_tlv_op_gen_start_scan,
4117         .gen_stop_scan = ath10k_wmi_tlv_op_gen_stop_scan,
4118         .gen_vdev_create = ath10k_wmi_tlv_op_gen_vdev_create,
4119         .gen_vdev_delete = ath10k_wmi_tlv_op_gen_vdev_delete,
4120         .gen_vdev_start = ath10k_wmi_tlv_op_gen_vdev_start,
4121         .gen_vdev_stop = ath10k_wmi_tlv_op_gen_vdev_stop,
4122         .gen_vdev_up = ath10k_wmi_tlv_op_gen_vdev_up,
4123         .gen_vdev_down = ath10k_wmi_tlv_op_gen_vdev_down,
4124         .gen_vdev_set_param = ath10k_wmi_tlv_op_gen_vdev_set_param,
4125         .gen_vdev_install_key = ath10k_wmi_tlv_op_gen_vdev_install_key,
4126         .gen_vdev_wmm_conf = ath10k_wmi_tlv_op_gen_vdev_wmm_conf,
4127         .gen_peer_create = ath10k_wmi_tlv_op_gen_peer_create,
4128         .gen_peer_delete = ath10k_wmi_tlv_op_gen_peer_delete,
4129         .gen_peer_flush = ath10k_wmi_tlv_op_gen_peer_flush,
4130         .gen_peer_set_param = ath10k_wmi_tlv_op_gen_peer_set_param,
4131         .gen_peer_assoc = ath10k_wmi_tlv_op_gen_peer_assoc,
4132         .gen_set_psmode = ath10k_wmi_tlv_op_gen_set_psmode,
4133         .gen_set_sta_ps = ath10k_wmi_tlv_op_gen_set_sta_ps,
4134         .gen_set_ap_ps = ath10k_wmi_tlv_op_gen_set_ap_ps,
4135         .gen_scan_chan_list = ath10k_wmi_tlv_op_gen_scan_chan_list,
4136         .gen_scan_prob_req_oui = ath10k_wmi_tlv_op_gen_scan_prob_req_oui,
4137         .gen_beacon_dma = ath10k_wmi_tlv_op_gen_beacon_dma,
4138         .gen_pdev_set_wmm = ath10k_wmi_tlv_op_gen_pdev_set_wmm,
4139         .gen_request_stats = ath10k_wmi_tlv_op_gen_request_stats,
4140         .gen_force_fw_hang = ath10k_wmi_tlv_op_gen_force_fw_hang,
4141         /* .gen_mgmt_tx = not implemented; HTT is used */
4142         .gen_mgmt_tx_send = ath10k_wmi_tlv_op_gen_mgmt_tx_send,
4143         .gen_dbglog_cfg = ath10k_wmi_tlv_op_gen_dbglog_cfg,
4144         .gen_pktlog_enable = ath10k_wmi_tlv_op_gen_pktlog_enable,
4145         .gen_pktlog_disable = ath10k_wmi_tlv_op_gen_pktlog_disable,
4146         .gen_pdev_set_quiet_mode = ath10k_wmi_tlv_op_gen_pdev_set_quiet_mode,
4147         .gen_pdev_get_temperature = ath10k_wmi_tlv_op_gen_pdev_get_temperature,
4148         /* .gen_addba_clear_resp not implemented */
4149         /* .gen_addba_send not implemented */
4150         /* .gen_addba_set_resp not implemented */
4151         /* .gen_delba_send not implemented */
4152         .gen_bcn_tmpl = ath10k_wmi_tlv_op_gen_bcn_tmpl,
4153         .gen_prb_tmpl = ath10k_wmi_tlv_op_gen_prb_tmpl,
4154         .gen_p2p_go_bcn_ie = ath10k_wmi_tlv_op_gen_p2p_go_bcn_ie,
4155         .gen_vdev_sta_uapsd = ath10k_wmi_tlv_op_gen_vdev_sta_uapsd,
4156         .gen_sta_keepalive = ath10k_wmi_tlv_op_gen_sta_keepalive,
4157         .gen_wow_enable = ath10k_wmi_tlv_op_gen_wow_enable,
4158         .gen_wow_add_wakeup_event = ath10k_wmi_tlv_op_gen_wow_add_wakeup_event,
4159         .gen_wow_host_wakeup_ind = ath10k_wmi_tlv_gen_wow_host_wakeup_ind,
4160         .gen_wow_add_pattern = ath10k_wmi_tlv_op_gen_wow_add_pattern,
4161         .gen_wow_del_pattern = ath10k_wmi_tlv_op_gen_wow_del_pattern,
4162         .gen_wow_config_pno = ath10k_wmi_tlv_op_gen_config_pno,
4163         .gen_update_fw_tdls_state = ath10k_wmi_tlv_op_gen_update_fw_tdls_state,
4164         .gen_tdls_peer_update = ath10k_wmi_tlv_op_gen_tdls_peer_update,
4165         .gen_adaptive_qcs = ath10k_wmi_tlv_op_gen_adaptive_qcs,
4166         .fw_stats_fill = ath10k_wmi_main_op_fw_stats_fill,
4167         .get_vdev_subtype = ath10k_wmi_op_get_vdev_subtype,
4168         .gen_echo = ath10k_wmi_tlv_op_gen_echo,
4169         .gen_vdev_spectral_conf = ath10k_wmi_tlv_op_gen_vdev_spectral_conf,
4170         .gen_vdev_spectral_enable = ath10k_wmi_tlv_op_gen_vdev_spectral_enable,
4171 };
4172
4173 static const struct wmi_peer_flags_map wmi_tlv_peer_flags_map = {
4174         .auth = WMI_TLV_PEER_AUTH,
4175         .qos = WMI_TLV_PEER_QOS,
4176         .need_ptk_4_way = WMI_TLV_PEER_NEED_PTK_4_WAY,
4177         .need_gtk_2_way = WMI_TLV_PEER_NEED_GTK_2_WAY,
4178         .apsd = WMI_TLV_PEER_APSD,
4179         .ht = WMI_TLV_PEER_HT,
4180         .bw40 = WMI_TLV_PEER_40MHZ,
4181         .stbc = WMI_TLV_PEER_STBC,
4182         .ldbc = WMI_TLV_PEER_LDPC,
4183         .dyn_mimops = WMI_TLV_PEER_DYN_MIMOPS,
4184         .static_mimops = WMI_TLV_PEER_STATIC_MIMOPS,
4185         .spatial_mux = WMI_TLV_PEER_SPATIAL_MUX,
4186         .vht = WMI_TLV_PEER_VHT,
4187         .bw80 = WMI_TLV_PEER_80MHZ,
4188         .pmf = WMI_TLV_PEER_PMF,
4189         .bw160 = WMI_TLV_PEER_160MHZ,
4190 };
4191
4192 /************/
4193 /* TLV init */
4194 /************/
4195
4196 void ath10k_wmi_tlv_attach(struct ath10k *ar)
4197 {
4198         ar->wmi.cmd = &wmi_tlv_cmd_map;
4199         ar->wmi.vdev_param = &wmi_tlv_vdev_param_map;
4200         ar->wmi.pdev_param = &wmi_tlv_pdev_param_map;
4201         ar->wmi.ops = &wmi_tlv_ops;
4202         ar->wmi.peer_flags = &wmi_tlv_peer_flags_map;
4203 }