1 // SPDX-License-Identifier: GPL-2.0+
2 /* Copyright (c) 2015-2016 Quantenna Communications. All rights reserved. */
3 
4 #include <linux/types.h>
5 #include <linux/skbuff.h>
6 
7 #include "cfg80211.h"
8 #include "core.h"
9 #include "qlink.h"
10 #include "qlink_util.h"
11 #include "bus.h"
12 #include "commands.h"
13 
14 /* Let device itself to select best values for current conditions */
15 #define QTNF_SCAN_TIME_AUTO	0
16 
17 #define QTNF_SCAN_DWELL_ACTIVE_DEFAULT		90
18 #define QTNF_SCAN_DWELL_PASSIVE_DEFAULT		100
19 #define QTNF_SCAN_SAMPLE_DURATION_DEFAULT	QTNF_SCAN_TIME_AUTO
20 
21 static int qtnf_cmd_check_reply_header(const struct qlink_resp *resp,
22 				       u16 cmd_id, u8 mac_id, u8 vif_id,
23 				       size_t resp_size)
24 {
25 	if (unlikely(le16_to_cpu(resp->cmd_id) != cmd_id)) {
26 		pr_warn("VIF%u.%u CMD%x: bad cmd_id in response: 0x%.4X\n",
27 			mac_id, vif_id, cmd_id, le16_to_cpu(resp->cmd_id));
28 		return -EINVAL;
29 	}
30 
31 	if (unlikely(resp->macid != mac_id)) {
32 		pr_warn("VIF%u.%u CMD%x: bad MAC in response: %u\n",
33 			mac_id, vif_id, cmd_id, resp->macid);
34 		return -EINVAL;
35 	}
36 
37 	if (unlikely(resp->vifid != vif_id)) {
38 		pr_warn("VIF%u.%u CMD%x: bad VIF in response: %u\n",
39 			mac_id, vif_id, cmd_id, resp->vifid);
40 		return -EINVAL;
41 	}
42 
43 	if (unlikely(le16_to_cpu(resp->mhdr.len) < resp_size)) {
44 		pr_warn("VIF%u.%u CMD%x: bad response size %u < %zu\n",
45 			mac_id, vif_id, cmd_id,
46 			le16_to_cpu(resp->mhdr.len), resp_size);
47 		return -ENOSPC;
48 	}
49 
50 	return 0;
51 }
52 
53 static int qtnf_cmd_resp_result_decode(enum qlink_cmd_result qcode)
54 {
55 	switch (qcode) {
56 	case QLINK_CMD_RESULT_OK:
57 		return 0;
58 	case QLINK_CMD_RESULT_INVALID:
59 		return -EINVAL;
60 	case QLINK_CMD_RESULT_ENOTSUPP:
61 		return -ENOTSUPP;
62 	case QLINK_CMD_RESULT_ENOTFOUND:
63 		return -ENOENT;
64 	case QLINK_CMD_RESULT_EALREADY:
65 		return -EALREADY;
66 	case QLINK_CMD_RESULT_EADDRINUSE:
67 		return -EADDRINUSE;
68 	case QLINK_CMD_RESULT_EADDRNOTAVAIL:
69 		return -EADDRNOTAVAIL;
70 	case QLINK_CMD_RESULT_EBUSY:
71 		return -EBUSY;
72 	default:
73 		return -EFAULT;
74 	}
75 }
76 
77 static int qtnf_cmd_send_with_reply(struct qtnf_bus *bus,
78 				    struct sk_buff *cmd_skb,
79 				    struct sk_buff **response_skb,
80 				    size_t const_resp_size,
81 				    size_t *var_resp_size)
82 {
83 	struct qlink_cmd *cmd;
84 	struct qlink_resp *resp = NULL;
85 	struct sk_buff *resp_skb = NULL;
86 	int resp_res = 0;
87 	u16 cmd_id;
88 	u8 mac_id;
89 	u8 vif_id;
90 	int ret;
91 
92 	cmd = (struct qlink_cmd *)cmd_skb->data;
93 	cmd_id = le16_to_cpu(cmd->cmd_id);
94 	mac_id = cmd->macid;
95 	vif_id = cmd->vifid;
96 	cmd->mhdr.len = cpu_to_le16(cmd_skb->len);
97 
98 	pr_debug("VIF%u.%u cmd=0x%.4X\n", mac_id, vif_id, cmd_id);
99 
100 	if (!qtnf_fw_is_up(bus) && cmd_id != QLINK_CMD_FW_INIT) {
101 		pr_warn("VIF%u.%u: drop cmd 0x%.4X in fw state %d\n",
102 			mac_id, vif_id, cmd_id, bus->fw_state);
103 		dev_kfree_skb(cmd_skb);
104 		return -ENODEV;
105 	}
106 
107 	ret = qtnf_trans_send_cmd_with_resp(bus, cmd_skb, &resp_skb);
108 	if (ret)
109 		goto out;
110 
111 	if (WARN_ON(!resp_skb || !resp_skb->data)) {
112 		ret = -EFAULT;
113 		goto out;
114 	}
115 
116 	resp = (struct qlink_resp *)resp_skb->data;
117 	resp_res = le16_to_cpu(resp->result);
118 	ret = qtnf_cmd_check_reply_header(resp, cmd_id, mac_id, vif_id,
119 					  const_resp_size);
120 	if (ret)
121 		goto out;
122 
123 	/* Return length of variable part of response */
124 	if (response_skb && var_resp_size)
125 		*var_resp_size = le16_to_cpu(resp->mhdr.len) - const_resp_size;
126 
127 out:
128 	if (response_skb)
129 		*response_skb = resp_skb;
130 	else
131 		consume_skb(resp_skb);
132 
133 	if (!ret)
134 		return qtnf_cmd_resp_result_decode(resp_res);
135 
136 	pr_warn("VIF%u.%u: cmd 0x%.4X failed: %d\n",
137 		mac_id, vif_id, cmd_id, ret);
138 
139 	return ret;
140 }
141 
142 static inline int qtnf_cmd_send(struct qtnf_bus *bus, struct sk_buff *cmd_skb)
143 {
144 	return qtnf_cmd_send_with_reply(bus, cmd_skb, NULL,
145 					sizeof(struct qlink_resp), NULL);
146 }
147 
148 static struct sk_buff *qtnf_cmd_alloc_new_cmdskb(u8 macid, u8 vifid, u16 cmd_no,
149 						 size_t cmd_size)
150 {
151 	struct qlink_cmd *cmd;
152 	struct sk_buff *cmd_skb;
153 
154 	cmd_skb = __dev_alloc_skb(sizeof(*cmd) +
155 				  QTNF_MAX_CMD_BUF_SIZE, GFP_KERNEL);
156 	if (unlikely(!cmd_skb)) {
157 		pr_err("VIF%u.%u CMD %u: alloc failed\n", macid, vifid, cmd_no);
158 		return NULL;
159 	}
160 
161 	skb_put_zero(cmd_skb, cmd_size);
162 
163 	cmd = (struct qlink_cmd *)cmd_skb->data;
164 	cmd->mhdr.len = cpu_to_le16(cmd_skb->len);
165 	cmd->mhdr.type = cpu_to_le16(QLINK_MSG_TYPE_CMD);
166 	cmd->cmd_id = cpu_to_le16(cmd_no);
167 	cmd->macid = macid;
168 	cmd->vifid = vifid;
169 
170 	return cmd_skb;
171 }
172 
173 static void qtnf_cmd_tlv_ie_set_add(struct sk_buff *cmd_skb, u8 frame_type,
174 				    const u8 *buf, size_t len)
175 {
176 	struct qlink_tlv_ie_set *tlv;
177 
178 	tlv = (struct qlink_tlv_ie_set *)skb_put(cmd_skb, sizeof(*tlv) +
179 						 round_up(len, QLINK_ALIGN));
180 	tlv->hdr.type = cpu_to_le16(QTN_TLV_ID_IE_SET);
181 	tlv->hdr.len = cpu_to_le16(len + sizeof(*tlv) - sizeof(tlv->hdr));
182 	tlv->type = frame_type;
183 	tlv->flags = 0;
184 
185 	if (len && buf)
186 		memcpy(tlv->ie_data, buf, len);
187 }
188 
189 static bool qtnf_cmd_start_ap_can_fit(const struct qtnf_vif *vif,
190 				      const struct cfg80211_ap_settings *s)
191 {
192 	unsigned int len = sizeof(struct qlink_cmd_start_ap);
193 
194 	len += round_up(s->ssid_len, QLINK_ALIGN);
195 	len += round_up(s->beacon.head_len, QLINK_ALIGN);
196 	len += round_up(s->beacon.tail_len, QLINK_ALIGN);
197 	len += round_up(s->beacon.beacon_ies_len, QLINK_ALIGN);
198 	len += round_up(s->beacon.proberesp_ies_len, QLINK_ALIGN);
199 	len += round_up(s->beacon.assocresp_ies_len, QLINK_ALIGN);
200 	len += round_up(s->beacon.probe_resp_len, QLINK_ALIGN);
201 
202 	if (cfg80211_chandef_valid(&s->chandef))
203 		len += sizeof(struct qlink_tlv_chandef);
204 
205 	if (s->acl) {
206 		unsigned int acl_len = struct_size(s->acl, mac_addrs,
207 						   s->acl->n_acl_entries);
208 
209 		len += sizeof(struct qlink_tlv_hdr) +
210 			round_up(acl_len, QLINK_ALIGN);
211 	}
212 
213 	if (len > (sizeof(struct qlink_cmd) + QTNF_MAX_CMD_BUF_SIZE)) {
214 		pr_err("VIF%u.%u: can not fit AP settings: %u\n",
215 		       vif->mac->macid, vif->vifid, len);
216 		return false;
217 	}
218 
219 	return true;
220 }
221 
222 static void qtnf_cmd_tlv_ie_ext_add(struct sk_buff *cmd_skb, u8 eid_ext,
223 				    const void *buf, size_t len)
224 {
225 	struct qlink_tlv_ext_ie *tlv;
226 
227 	tlv = (struct qlink_tlv_ext_ie *)skb_put(cmd_skb, sizeof(*tlv) + len);
228 	tlv->hdr.type = cpu_to_le16(WLAN_EID_EXTENSION);
229 	tlv->hdr.len = cpu_to_le16(sizeof(*tlv) + len - sizeof(tlv->hdr));
230 	tlv->eid_ext = eid_ext;
231 
232 	if (len && buf)
233 		memcpy(tlv->ie_data, buf, len);
234 }
235 
236 int qtnf_cmd_send_start_ap(struct qtnf_vif *vif,
237 			   const struct cfg80211_ap_settings *s)
238 {
239 	struct sk_buff *cmd_skb;
240 	struct qlink_cmd_start_ap *cmd;
241 	struct qlink_auth_encr *aen;
242 	int ret;
243 	int i;
244 
245 	if (!qtnf_cmd_start_ap_can_fit(vif, s))
246 		return -E2BIG;
247 
248 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
249 					    QLINK_CMD_START_AP,
250 					    sizeof(*cmd));
251 	if (!cmd_skb)
252 		return -ENOMEM;
253 
254 	cmd = (struct qlink_cmd_start_ap *)cmd_skb->data;
255 	cmd->dtim_period = s->dtim_period;
256 	cmd->beacon_interval = cpu_to_le16(s->beacon_interval);
257 	cmd->hidden_ssid = qlink_hidden_ssid_nl2q(s->hidden_ssid);
258 	cmd->inactivity_timeout = cpu_to_le16(s->inactivity_timeout);
259 	cmd->smps_mode = s->smps_mode;
260 	cmd->p2p_ctwindow = s->p2p_ctwindow;
261 	cmd->p2p_opp_ps = s->p2p_opp_ps;
262 	cmd->pbss = s->pbss;
263 	cmd->ht_required = s->ht_required;
264 	cmd->vht_required = s->vht_required;
265 	cmd->twt_responder = s->twt_responder;
266 	if (s->he_obss_pd.enable) {
267 		cmd->sr_params.sr_control |= QLINK_SR_SRG_INFORMATION_PRESENT;
268 		cmd->sr_params.srg_obss_pd_min_offset =
269 			s->he_obss_pd.min_offset;
270 		cmd->sr_params.srg_obss_pd_max_offset =
271 			s->he_obss_pd.max_offset;
272 	}
273 
274 	aen = &cmd->aen;
275 	aen->auth_type = s->auth_type;
276 	aen->privacy = !!s->privacy;
277 	aen->wpa_versions = cpu_to_le32(s->crypto.wpa_versions);
278 	aen->cipher_group = cpu_to_le32(s->crypto.cipher_group);
279 	aen->n_ciphers_pairwise = cpu_to_le32(s->crypto.n_ciphers_pairwise);
280 	for (i = 0; i < QLINK_MAX_NR_CIPHER_SUITES; i++)
281 		aen->ciphers_pairwise[i] =
282 				cpu_to_le32(s->crypto.ciphers_pairwise[i]);
283 	aen->n_akm_suites = cpu_to_le32(s->crypto.n_akm_suites);
284 	for (i = 0; i < QLINK_MAX_NR_AKM_SUITES; i++)
285 		aen->akm_suites[i] = cpu_to_le32(s->crypto.akm_suites[i]);
286 	aen->control_port = s->crypto.control_port;
287 	aen->control_port_no_encrypt = s->crypto.control_port_no_encrypt;
288 	aen->control_port_ethertype =
289 		cpu_to_le16(be16_to_cpu(s->crypto.control_port_ethertype));
290 
291 	if (s->ssid && s->ssid_len > 0 && s->ssid_len <= IEEE80211_MAX_SSID_LEN)
292 		qtnf_cmd_skb_put_tlv_arr(cmd_skb, WLAN_EID_SSID, s->ssid,
293 					 s->ssid_len);
294 
295 	if (cfg80211_chandef_valid(&s->chandef)) {
296 		struct qlink_tlv_chandef *chtlv =
297 			(struct qlink_tlv_chandef *)skb_put(cmd_skb,
298 							    sizeof(*chtlv));
299 
300 		chtlv->hdr.type = cpu_to_le16(QTN_TLV_ID_CHANDEF);
301 		chtlv->hdr.len = cpu_to_le16(sizeof(*chtlv) -
302 					     sizeof(chtlv->hdr));
303 		qlink_chandef_cfg2q(&s->chandef, &chtlv->chdef);
304 	}
305 
306 	qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_BEACON_HEAD,
307 				s->beacon.head, s->beacon.head_len);
308 	qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_BEACON_TAIL,
309 				s->beacon.tail, s->beacon.tail_len);
310 	qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_BEACON_IES,
311 				s->beacon.beacon_ies, s->beacon.beacon_ies_len);
312 	qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_PROBE_RESP,
313 				s->beacon.probe_resp, s->beacon.probe_resp_len);
314 	qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_PROBE_RESP_IES,
315 				s->beacon.proberesp_ies,
316 				s->beacon.proberesp_ies_len);
317 	qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_ASSOC_RESP,
318 				s->beacon.assocresp_ies,
319 				s->beacon.assocresp_ies_len);
320 
321 	if (s->ht_cap) {
322 		struct qlink_tlv_hdr *tlv = (struct qlink_tlv_hdr *)
323 			skb_put(cmd_skb, sizeof(*tlv) +
324 				round_up(sizeof(*s->ht_cap), QLINK_ALIGN));
325 
326 		tlv->type = cpu_to_le16(WLAN_EID_HT_CAPABILITY);
327 		tlv->len = cpu_to_le16(sizeof(*s->ht_cap));
328 		memcpy(tlv->val, s->ht_cap, sizeof(*s->ht_cap));
329 	}
330 
331 	if (s->vht_cap) {
332 		struct qlink_tlv_hdr *tlv = (struct qlink_tlv_hdr *)
333 			skb_put(cmd_skb, sizeof(*tlv) + sizeof(*s->vht_cap));
334 
335 		tlv->type = cpu_to_le16(WLAN_EID_VHT_CAPABILITY);
336 		tlv->len = cpu_to_le16(sizeof(*s->vht_cap));
337 		memcpy(tlv->val, s->vht_cap, sizeof(*s->vht_cap));
338 	}
339 
340 	if (s->he_cap)
341 		qtnf_cmd_tlv_ie_ext_add(cmd_skb, WLAN_EID_EXT_HE_CAPABILITY,
342 					s->he_cap, sizeof(*s->he_cap));
343 
344 	if (s->acl) {
345 		size_t acl_size = struct_size(s->acl, mac_addrs,
346 					      s->acl->n_acl_entries);
347 		struct qlink_tlv_hdr *tlv =
348 			skb_put(cmd_skb,
349 				sizeof(*tlv) + round_up(acl_size, QLINK_ALIGN));
350 
351 		tlv->type = cpu_to_le16(QTN_TLV_ID_ACL_DATA);
352 		tlv->len = cpu_to_le16(acl_size);
353 		qlink_acl_data_cfg2q(s->acl, (struct qlink_acl_data *)tlv->val);
354 	}
355 
356 	qtnf_bus_lock(vif->mac->bus);
357 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
358 	if (ret)
359 		goto out;
360 
361 	netif_carrier_on(vif->netdev);
362 
363 out:
364 	qtnf_bus_unlock(vif->mac->bus);
365 
366 	return ret;
367 }
368 
369 int qtnf_cmd_send_stop_ap(struct qtnf_vif *vif)
370 {
371 	struct sk_buff *cmd_skb;
372 	int ret;
373 
374 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
375 					    QLINK_CMD_STOP_AP,
376 					    sizeof(struct qlink_cmd));
377 	if (!cmd_skb)
378 		return -ENOMEM;
379 
380 	qtnf_bus_lock(vif->mac->bus);
381 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
382 	qtnf_bus_unlock(vif->mac->bus);
383 
384 	return ret;
385 }
386 
387 int qtnf_cmd_send_register_mgmt(struct qtnf_vif *vif, u16 frame_type, bool reg)
388 {
389 	struct sk_buff *cmd_skb;
390 	struct qlink_cmd_mgmt_frame_register *cmd;
391 	int ret;
392 
393 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
394 					    QLINK_CMD_REGISTER_MGMT,
395 					    sizeof(*cmd));
396 	if (!cmd_skb)
397 		return -ENOMEM;
398 
399 	qtnf_bus_lock(vif->mac->bus);
400 
401 	cmd = (struct qlink_cmd_mgmt_frame_register *)cmd_skb->data;
402 	cmd->frame_type = cpu_to_le16(frame_type);
403 	cmd->do_register = reg;
404 
405 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
406 
407 	qtnf_bus_unlock(vif->mac->bus);
408 
409 	return ret;
410 }
411 
412 int qtnf_cmd_send_frame(struct qtnf_vif *vif, u32 cookie, u16 flags,
413 			u16 freq, const u8 *buf, size_t len)
414 {
415 	struct sk_buff *cmd_skb;
416 	struct qlink_cmd_frame_tx *cmd;
417 	int ret;
418 
419 	if (sizeof(*cmd) + len > QTNF_MAX_CMD_BUF_SIZE) {
420 		pr_warn("VIF%u.%u: frame is too big: %zu\n", vif->mac->macid,
421 			vif->vifid, len);
422 		return -E2BIG;
423 	}
424 
425 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
426 					    QLINK_CMD_SEND_FRAME,
427 					    sizeof(*cmd));
428 	if (!cmd_skb)
429 		return -ENOMEM;
430 
431 	qtnf_bus_lock(vif->mac->bus);
432 
433 	cmd = (struct qlink_cmd_frame_tx *)cmd_skb->data;
434 	cmd->cookie = cpu_to_le32(cookie);
435 	cmd->freq = cpu_to_le16(freq);
436 	cmd->flags = cpu_to_le16(flags);
437 
438 	if (len && buf)
439 		qtnf_cmd_skb_put_buffer(cmd_skb, buf, len);
440 
441 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
442 
443 	qtnf_bus_unlock(vif->mac->bus);
444 
445 	return ret;
446 }
447 
448 int qtnf_cmd_send_mgmt_set_appie(struct qtnf_vif *vif, u8 frame_type,
449 				 const u8 *buf, size_t len)
450 {
451 	struct sk_buff *cmd_skb;
452 	int ret;
453 
454 	if (len > QTNF_MAX_CMD_BUF_SIZE) {
455 		pr_warn("VIF%u.%u: %u frame is too big: %zu\n", vif->mac->macid,
456 			vif->vifid, frame_type, len);
457 		return -E2BIG;
458 	}
459 
460 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
461 					    QLINK_CMD_MGMT_SET_APPIE,
462 					    sizeof(struct qlink_cmd));
463 	if (!cmd_skb)
464 		return -ENOMEM;
465 
466 	qtnf_cmd_tlv_ie_set_add(cmd_skb, frame_type, buf, len);
467 
468 	qtnf_bus_lock(vif->mac->bus);
469 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
470 	qtnf_bus_unlock(vif->mac->bus);
471 
472 	return ret;
473 }
474 
475 static void
476 qtnf_sta_info_parse_rate(struct rate_info *rate_dst,
477 			 const struct qlink_sta_info_rate *rate_src)
478 {
479 	rate_dst->legacy = get_unaligned_le16(&rate_src->rate) * 10;
480 
481 	rate_dst->mcs = rate_src->mcs;
482 	rate_dst->nss = rate_src->nss;
483 	rate_dst->flags = 0;
484 
485 	switch (rate_src->bw) {
486 	case QLINK_CHAN_WIDTH_5:
487 		rate_dst->bw = RATE_INFO_BW_5;
488 		break;
489 	case QLINK_CHAN_WIDTH_10:
490 		rate_dst->bw = RATE_INFO_BW_10;
491 		break;
492 	case QLINK_CHAN_WIDTH_20:
493 	case QLINK_CHAN_WIDTH_20_NOHT:
494 		rate_dst->bw = RATE_INFO_BW_20;
495 		break;
496 	case QLINK_CHAN_WIDTH_40:
497 		rate_dst->bw = RATE_INFO_BW_40;
498 		break;
499 	case QLINK_CHAN_WIDTH_80:
500 		rate_dst->bw = RATE_INFO_BW_80;
501 		break;
502 	case QLINK_CHAN_WIDTH_160:
503 		rate_dst->bw = RATE_INFO_BW_160;
504 		break;
505 	default:
506 		rate_dst->bw = 0;
507 		break;
508 	}
509 
510 	if (rate_src->flags & QLINK_STA_INFO_RATE_FLAG_HT_MCS)
511 		rate_dst->flags |= RATE_INFO_FLAGS_MCS;
512 	else if (rate_src->flags & QLINK_STA_INFO_RATE_FLAG_VHT_MCS)
513 		rate_dst->flags |= RATE_INFO_FLAGS_VHT_MCS;
514 	else if (rate_src->flags & QLINK_STA_INFO_RATE_FLAG_HE_MCS)
515 		rate_dst->flags |= RATE_INFO_FLAGS_HE_MCS;
516 
517 	if (rate_src->flags & QLINK_STA_INFO_RATE_FLAG_SHORT_GI)
518 		rate_dst->flags |= RATE_INFO_FLAGS_SHORT_GI;
519 }
520 
521 static void
522 qtnf_sta_info_parse_flags(struct nl80211_sta_flag_update *dst,
523 			  const struct qlink_sta_info_state *src)
524 {
525 	u32 mask, value;
526 
527 	dst->mask = 0;
528 	dst->set = 0;
529 
530 	mask = le32_to_cpu(src->mask);
531 	value = le32_to_cpu(src->value);
532 
533 	if (mask & QLINK_STA_FLAG_AUTHORIZED) {
534 		dst->mask |= BIT(NL80211_STA_FLAG_AUTHORIZED);
535 		if (value & QLINK_STA_FLAG_AUTHORIZED)
536 			dst->set |= BIT(NL80211_STA_FLAG_AUTHORIZED);
537 	}
538 
539 	if (mask & QLINK_STA_FLAG_SHORT_PREAMBLE) {
540 		dst->mask |= BIT(NL80211_STA_FLAG_SHORT_PREAMBLE);
541 		if (value & QLINK_STA_FLAG_SHORT_PREAMBLE)
542 			dst->set |= BIT(NL80211_STA_FLAG_SHORT_PREAMBLE);
543 	}
544 
545 	if (mask & QLINK_STA_FLAG_WME) {
546 		dst->mask |= BIT(NL80211_STA_FLAG_WME);
547 		if (value & QLINK_STA_FLAG_WME)
548 			dst->set |= BIT(NL80211_STA_FLAG_WME);
549 	}
550 
551 	if (mask & QLINK_STA_FLAG_MFP) {
552 		dst->mask |= BIT(NL80211_STA_FLAG_MFP);
553 		if (value & QLINK_STA_FLAG_MFP)
554 			dst->set |= BIT(NL80211_STA_FLAG_MFP);
555 	}
556 
557 	if (mask & QLINK_STA_FLAG_AUTHENTICATED) {
558 		dst->mask |= BIT(NL80211_STA_FLAG_AUTHENTICATED);
559 		if (value & QLINK_STA_FLAG_AUTHENTICATED)
560 			dst->set |= BIT(NL80211_STA_FLAG_AUTHENTICATED);
561 	}
562 
563 	if (mask & QLINK_STA_FLAG_TDLS_PEER) {
564 		dst->mask |= BIT(NL80211_STA_FLAG_TDLS_PEER);
565 		if (value & QLINK_STA_FLAG_TDLS_PEER)
566 			dst->set |= BIT(NL80211_STA_FLAG_TDLS_PEER);
567 	}
568 
569 	if (mask & QLINK_STA_FLAG_ASSOCIATED) {
570 		dst->mask |= BIT(NL80211_STA_FLAG_ASSOCIATED);
571 		if (value & QLINK_STA_FLAG_ASSOCIATED)
572 			dst->set |= BIT(NL80211_STA_FLAG_ASSOCIATED);
573 	}
574 }
575 
576 static void
577 qtnf_cmd_sta_info_parse(struct station_info *sinfo, const u8 *data,
578 			size_t resp_size)
579 {
580 	const struct qlink_tlv_hdr *tlv;
581 	const struct qlink_sta_stats *stats = NULL;
582 	const u8 *map = NULL;
583 	unsigned int map_len = 0;
584 	unsigned int stats_len = 0;
585 	u16 tlv_len;
586 
587 #define qtnf_sta_stat_avail(stat_name, bitn)	\
588 	(qtnf_utils_is_bit_set(map, bitn, map_len) && \
589 	 (offsetofend(struct qlink_sta_stats, stat_name) <= stats_len))
590 
591 	qlink_for_each_tlv(tlv, data, resp_size) {
592 		tlv_len = le16_to_cpu(tlv->len);
593 
594 		switch (le16_to_cpu(tlv->type)) {
595 		case QTN_TLV_ID_BITMAP:
596 			map_len = tlv_len;
597 			map = tlv->val;
598 			break;
599 		case QTN_TLV_ID_STA_STATS:
600 			stats_len = tlv_len;
601 			stats = (const struct qlink_sta_stats *)tlv->val;
602 			break;
603 		default:
604 			break;
605 		}
606 	}
607 
608 	if (!qlink_tlv_parsing_ok(tlv, data, resp_size)) {
609 		pr_err("Malformed TLV buffer\n");
610 		return;
611 	}
612 
613 	if (!map || !stats)
614 		return;
615 
616 	if (qtnf_sta_stat_avail(inactive_time, QLINK_STA_INFO_INACTIVE_TIME)) {
617 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_INACTIVE_TIME);
618 		sinfo->inactive_time = le32_to_cpu(stats->inactive_time);
619 	}
620 
621 	if (qtnf_sta_stat_avail(connected_time,
622 				QLINK_STA_INFO_CONNECTED_TIME)) {
623 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_CONNECTED_TIME);
624 		sinfo->connected_time = le32_to_cpu(stats->connected_time);
625 	}
626 
627 	if (qtnf_sta_stat_avail(signal, QLINK_STA_INFO_SIGNAL)) {
628 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_SIGNAL);
629 		sinfo->signal = stats->signal - QLINK_RSSI_OFFSET;
630 	}
631 
632 	if (qtnf_sta_stat_avail(signal_avg, QLINK_STA_INFO_SIGNAL_AVG)) {
633 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_SIGNAL_AVG);
634 		sinfo->signal_avg = stats->signal_avg - QLINK_RSSI_OFFSET;
635 	}
636 
637 	if (qtnf_sta_stat_avail(rxrate, QLINK_STA_INFO_RX_BITRATE)) {
638 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_BITRATE);
639 		qtnf_sta_info_parse_rate(&sinfo->rxrate, &stats->rxrate);
640 	}
641 
642 	if (qtnf_sta_stat_avail(txrate, QLINK_STA_INFO_TX_BITRATE)) {
643 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_BITRATE);
644 		qtnf_sta_info_parse_rate(&sinfo->txrate, &stats->txrate);
645 	}
646 
647 	if (qtnf_sta_stat_avail(sta_flags, QLINK_STA_INFO_STA_FLAGS)) {
648 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_STA_FLAGS);
649 		qtnf_sta_info_parse_flags(&sinfo->sta_flags, &stats->sta_flags);
650 	}
651 
652 	if (qtnf_sta_stat_avail(rx_bytes, QLINK_STA_INFO_RX_BYTES)) {
653 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_BYTES);
654 		sinfo->rx_bytes = le64_to_cpu(stats->rx_bytes);
655 	}
656 
657 	if (qtnf_sta_stat_avail(tx_bytes, QLINK_STA_INFO_TX_BYTES)) {
658 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_BYTES);
659 		sinfo->tx_bytes = le64_to_cpu(stats->tx_bytes);
660 	}
661 
662 	if (qtnf_sta_stat_avail(rx_bytes, QLINK_STA_INFO_RX_BYTES64)) {
663 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_BYTES64);
664 		sinfo->rx_bytes = le64_to_cpu(stats->rx_bytes);
665 	}
666 
667 	if (qtnf_sta_stat_avail(tx_bytes, QLINK_STA_INFO_TX_BYTES64)) {
668 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_BYTES64);
669 		sinfo->tx_bytes = le64_to_cpu(stats->tx_bytes);
670 	}
671 
672 	if (qtnf_sta_stat_avail(rx_packets, QLINK_STA_INFO_RX_PACKETS)) {
673 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_PACKETS);
674 		sinfo->rx_packets = le32_to_cpu(stats->rx_packets);
675 	}
676 
677 	if (qtnf_sta_stat_avail(tx_packets, QLINK_STA_INFO_TX_PACKETS)) {
678 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_PACKETS);
679 		sinfo->tx_packets = le32_to_cpu(stats->tx_packets);
680 	}
681 
682 	if (qtnf_sta_stat_avail(rx_beacon, QLINK_STA_INFO_BEACON_RX)) {
683 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_BEACON_RX);
684 		sinfo->rx_beacon = le64_to_cpu(stats->rx_beacon);
685 	}
686 
687 	if (qtnf_sta_stat_avail(rx_dropped_misc, QLINK_STA_INFO_RX_DROP_MISC)) {
688 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_DROP_MISC);
689 		sinfo->rx_dropped_misc = le32_to_cpu(stats->rx_dropped_misc);
690 	}
691 
692 	if (qtnf_sta_stat_avail(tx_failed, QLINK_STA_INFO_TX_FAILED)) {
693 		sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_FAILED);
694 		sinfo->tx_failed = le32_to_cpu(stats->tx_failed);
695 	}
696 
697 #undef qtnf_sta_stat_avail
698 }
699 
700 int qtnf_cmd_get_sta_info(struct qtnf_vif *vif, const u8 *sta_mac,
701 			  struct station_info *sinfo)
702 {
703 	struct sk_buff *cmd_skb, *resp_skb = NULL;
704 	struct qlink_cmd_get_sta_info *cmd;
705 	const struct qlink_resp_get_sta_info *resp;
706 	size_t var_resp_len = 0;
707 	int ret = 0;
708 
709 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
710 					    QLINK_CMD_GET_STA_INFO,
711 					    sizeof(*cmd));
712 	if (!cmd_skb)
713 		return -ENOMEM;
714 
715 	qtnf_bus_lock(vif->mac->bus);
716 
717 	cmd = (struct qlink_cmd_get_sta_info *)cmd_skb->data;
718 	ether_addr_copy(cmd->sta_addr, sta_mac);
719 
720 	ret = qtnf_cmd_send_with_reply(vif->mac->bus, cmd_skb, &resp_skb,
721 				       sizeof(*resp), &var_resp_len);
722 	if (ret)
723 		goto out;
724 
725 	resp = (const struct qlink_resp_get_sta_info *)resp_skb->data;
726 
727 	if (!ether_addr_equal(sta_mac, resp->sta_addr)) {
728 		pr_err("VIF%u.%u: wrong mac in reply: %pM != %pM\n",
729 		       vif->mac->macid, vif->vifid, resp->sta_addr, sta_mac);
730 		ret = -EINVAL;
731 		goto out;
732 	}
733 
734 	qtnf_cmd_sta_info_parse(sinfo, resp->info, var_resp_len);
735 
736 out:
737 	qtnf_bus_unlock(vif->mac->bus);
738 	consume_skb(resp_skb);
739 
740 	return ret;
741 }
742 
743 static int qtnf_cmd_send_add_change_intf(struct qtnf_vif *vif,
744 					 enum nl80211_iftype iftype,
745 					 int use4addr,
746 					 u8 *mac_addr,
747 					 enum qlink_cmd_type cmd_type)
748 {
749 	struct sk_buff *cmd_skb, *resp_skb = NULL;
750 	struct qlink_cmd_manage_intf *cmd;
751 	const struct qlink_resp_manage_intf *resp;
752 	int ret = 0;
753 
754 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
755 					    cmd_type,
756 					    sizeof(*cmd));
757 	if (!cmd_skb)
758 		return -ENOMEM;
759 
760 	qtnf_bus_lock(vif->mac->bus);
761 
762 	cmd = (struct qlink_cmd_manage_intf *)cmd_skb->data;
763 	cmd->intf_info.use4addr = use4addr;
764 
765 	switch (iftype) {
766 	case NL80211_IFTYPE_AP:
767 		cmd->intf_info.if_type = cpu_to_le16(QLINK_IFTYPE_AP);
768 		break;
769 	case NL80211_IFTYPE_STATION:
770 		cmd->intf_info.if_type = cpu_to_le16(QLINK_IFTYPE_STATION);
771 		break;
772 	default:
773 		pr_err("VIF%u.%u: unsupported type %d\n", vif->mac->macid,
774 		       vif->vifid, iftype);
775 		ret = -EINVAL;
776 		goto out;
777 	}
778 
779 	if (mac_addr)
780 		ether_addr_copy(cmd->intf_info.mac_addr, mac_addr);
781 	else
782 		eth_zero_addr(cmd->intf_info.mac_addr);
783 
784 	ret = qtnf_cmd_send_with_reply(vif->mac->bus, cmd_skb, &resp_skb,
785 				       sizeof(*resp), NULL);
786 	if (ret)
787 		goto out;
788 
789 	resp = (const struct qlink_resp_manage_intf *)resp_skb->data;
790 	ether_addr_copy(vif->mac_addr, resp->intf_info.mac_addr);
791 
792 out:
793 	qtnf_bus_unlock(vif->mac->bus);
794 	consume_skb(resp_skb);
795 
796 	return ret;
797 }
798 
799 int qtnf_cmd_send_add_intf(struct qtnf_vif *vif, enum nl80211_iftype iftype,
800 			   int use4addr, u8 *mac_addr)
801 {
802 	return qtnf_cmd_send_add_change_intf(vif, iftype, use4addr, mac_addr,
803 			QLINK_CMD_ADD_INTF);
804 }
805 
806 int qtnf_cmd_send_change_intf_type(struct qtnf_vif *vif,
807 				   enum nl80211_iftype iftype,
808 				   int use4addr,
809 				   u8 *mac_addr)
810 {
811 	int ret;
812 
813 	ret = qtnf_cmd_send_add_change_intf(vif, iftype, use4addr, mac_addr,
814 					    QLINK_CMD_CHANGE_INTF);
815 
816 	/* Regulatory settings may be different for different interface types */
817 	if (ret == 0 && vif->wdev.iftype != iftype) {
818 		enum nl80211_band band;
819 		struct wiphy *wiphy = priv_to_wiphy(vif->mac);
820 
821 		for (band = 0; band < NUM_NL80211_BANDS; ++band) {
822 			if (!wiphy->bands[band])
823 				continue;
824 
825 			qtnf_cmd_band_info_get(vif->mac, wiphy->bands[band]);
826 		}
827 	}
828 
829 	return ret;
830 }
831 
832 int qtnf_cmd_send_del_intf(struct qtnf_vif *vif)
833 {
834 	struct sk_buff *cmd_skb;
835 	struct qlink_cmd_manage_intf *cmd;
836 	int ret = 0;
837 
838 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
839 					    QLINK_CMD_DEL_INTF,
840 					    sizeof(*cmd));
841 	if (!cmd_skb)
842 		return -ENOMEM;
843 
844 	qtnf_bus_lock(vif->mac->bus);
845 
846 	cmd = (struct qlink_cmd_manage_intf *)cmd_skb->data;
847 
848 	switch (vif->wdev.iftype) {
849 	case NL80211_IFTYPE_AP:
850 		cmd->intf_info.if_type = cpu_to_le16(QLINK_IFTYPE_AP);
851 		break;
852 	case NL80211_IFTYPE_STATION:
853 		cmd->intf_info.if_type = cpu_to_le16(QLINK_IFTYPE_STATION);
854 		break;
855 	default:
856 		pr_warn("VIF%u.%u: unsupported iftype %d\n", vif->mac->macid,
857 			vif->vifid, vif->wdev.iftype);
858 		dev_kfree_skb(cmd_skb);
859 		ret = -EINVAL;
860 		goto out;
861 	}
862 
863 	eth_zero_addr(cmd->intf_info.mac_addr);
864 
865 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
866 	if (ret)
867 		goto out;
868 
869 out:
870 	qtnf_bus_unlock(vif->mac->bus);
871 	return ret;
872 }
873 
874 static int
875 qtnf_cmd_resp_proc_hw_info(struct qtnf_bus *bus,
876 			   const struct qlink_resp_get_hw_info *resp,
877 			   size_t info_len)
878 {
879 	struct qtnf_hw_info *hwinfo = &bus->hw_info;
880 	const struct qlink_tlv_hdr *tlv;
881 	const char *bld_name = NULL;
882 	const char *bld_rev = NULL;
883 	const char *bld_type = NULL;
884 	const char *bld_label = NULL;
885 	u32 bld_tmstamp = 0;
886 	u32 plat_id = 0;
887 	const char *hw_id = NULL;
888 	const char *calibration_ver = NULL;
889 	const char *uboot_ver = NULL;
890 	u32 hw_ver = 0;
891 	u16 tlv_type;
892 	u16 tlv_len;
893 
894 	hwinfo->num_mac = resp->num_mac;
895 	hwinfo->mac_bitmap = resp->mac_bitmap;
896 	hwinfo->fw_ver = le32_to_cpu(resp->fw_ver);
897 	hwinfo->total_tx_chain = resp->total_tx_chain;
898 	hwinfo->total_rx_chain = resp->total_rx_chain;
899 
900 	bld_tmstamp = le32_to_cpu(resp->bld_tmstamp);
901 	plat_id = le32_to_cpu(resp->plat_id);
902 	hw_ver = le32_to_cpu(resp->hw_ver);
903 
904 	qlink_for_each_tlv(tlv, resp->info, info_len) {
905 		tlv_type = le16_to_cpu(tlv->type);
906 		tlv_len = le16_to_cpu(tlv->len);
907 
908 		switch (tlv_type) {
909 		case QTN_TLV_ID_BUILD_NAME:
910 			bld_name = (const void *)tlv->val;
911 			break;
912 		case QTN_TLV_ID_BUILD_REV:
913 			bld_rev = (const void *)tlv->val;
914 			break;
915 		case QTN_TLV_ID_BUILD_TYPE:
916 			bld_type = (const void *)tlv->val;
917 			break;
918 		case QTN_TLV_ID_BUILD_LABEL:
919 			bld_label = (const void *)tlv->val;
920 			break;
921 		case QTN_TLV_ID_HW_ID:
922 			hw_id = (const void *)tlv->val;
923 			break;
924 		case QTN_TLV_ID_CALIBRATION_VER:
925 			calibration_ver = (const void *)tlv->val;
926 			break;
927 		case QTN_TLV_ID_UBOOT_VER:
928 			uboot_ver = (const void *)tlv->val;
929 			break;
930 		case QTN_TLV_ID_BITMAP:
931 			memcpy(hwinfo->hw_capab, tlv->val,
932 			       min(sizeof(hwinfo->hw_capab), (size_t)tlv_len));
933 			break;
934 		default:
935 			break;
936 		}
937 	}
938 
939 	if (!qlink_tlv_parsing_ok(tlv, resp->info, info_len)) {
940 		pr_err("Malformed TLV buffer\n");
941 		return -EINVAL;
942 	}
943 
944 	pr_info("\nBuild name:            %s\n"
945 		"Build revision:        %s\n"
946 		"Build type:            %s\n"
947 		"Build label:           %s\n"
948 		"Build timestamp:       %lu\n"
949 		"Platform ID:           %lu\n"
950 		"Hardware ID:           %s\n"
951 		"Calibration version:   %s\n"
952 		"U-Boot version:        %s\n"
953 		"Hardware version:      0x%08x\n"
954 		"Qlink ver:             %u.%u\n"
955 		"MACs map:              %#x\n"
956 		"Chains Rx-Tx:          %ux%u\n"
957 		"FW version:            0x%x\n",
958 		bld_name, bld_rev, bld_type, bld_label,
959 		(unsigned long)bld_tmstamp,
960 		(unsigned long)plat_id,
961 		hw_id, calibration_ver, uboot_ver, hw_ver,
962 		QLINK_VER_MAJOR(bus->hw_info.ql_proto_ver),
963 		QLINK_VER_MINOR(bus->hw_info.ql_proto_ver),
964 		hwinfo->mac_bitmap,
965 		hwinfo->total_rx_chain, hwinfo->total_tx_chain,
966 		hwinfo->fw_ver);
967 
968 	strlcpy(hwinfo->fw_version, bld_label, sizeof(hwinfo->fw_version));
969 	hwinfo->hw_version = hw_ver;
970 
971 	return 0;
972 }
973 
974 static void
975 qtnf_parse_wowlan_info(struct qtnf_wmac *mac,
976 		       const struct qlink_wowlan_capab_data *wowlan)
977 {
978 	struct qtnf_mac_info *mac_info = &mac->macinfo;
979 	const struct qlink_wowlan_support *data1;
980 	struct wiphy_wowlan_support *supp;
981 
982 	supp = kzalloc(sizeof(*supp), GFP_KERNEL);
983 	if (!supp)
984 		return;
985 
986 	switch (le16_to_cpu(wowlan->version)) {
987 	case 0x1:
988 		data1 = (struct qlink_wowlan_support *)wowlan->data;
989 
990 		supp->flags = WIPHY_WOWLAN_MAGIC_PKT | WIPHY_WOWLAN_DISCONNECT;
991 		supp->n_patterns = le32_to_cpu(data1->n_patterns);
992 		supp->pattern_max_len = le32_to_cpu(data1->pattern_max_len);
993 		supp->pattern_min_len = le32_to_cpu(data1->pattern_min_len);
994 
995 		mac_info->wowlan = supp;
996 		break;
997 	default:
998 		pr_warn("MAC%u: unsupported WoWLAN version 0x%x\n",
999 			mac->macid, le16_to_cpu(wowlan->version));
1000 		kfree(supp);
1001 		break;
1002 	}
1003 }
1004 
1005 static int
1006 qtnf_parse_variable_mac_info(struct qtnf_wmac *mac,
1007 			     const struct qlink_resp_get_mac_info *resp,
1008 			     size_t tlv_buf_size)
1009 {
1010 	struct ieee80211_iface_combination *comb = mac->macinfo.if_comb;
1011 	size_t n_comb = 0;
1012 	struct ieee80211_iface_limit *limits;
1013 	const struct qlink_iface_limit_record *rec;
1014 	const struct qlink_iface_limit *lim;
1015 	const struct qlink_wowlan_capab_data *wowlan;
1016 	u16 rec_len;
1017 	u16 tlv_type;
1018 	u16 tlv_value_len;
1019 	const struct qlink_tlv_hdr *tlv;
1020 	u8 *ext_capa = NULL;
1021 	u8 *ext_capa_mask = NULL;
1022 	u8 ext_capa_len = 0;
1023 	u8 ext_capa_mask_len = 0;
1024 	int i = 0;
1025 	struct ieee80211_reg_rule *rule;
1026 	unsigned int rule_idx = 0;
1027 	const struct qlink_tlv_reg_rule *tlv_rule;
1028 
1029 	if (WARN_ON(resp->n_reg_rules > NL80211_MAX_SUPP_REG_RULES))
1030 		return -E2BIG;
1031 
1032 	mac->rd = kzalloc(struct_size(mac->rd, reg_rules, resp->n_reg_rules),
1033 			  GFP_KERNEL);
1034 	if (!mac->rd)
1035 		return -ENOMEM;
1036 
1037 	mac->rd->n_reg_rules = resp->n_reg_rules;
1038 	mac->rd->alpha2[0] = resp->alpha2[0];
1039 	mac->rd->alpha2[1] = resp->alpha2[1];
1040 
1041 	switch (resp->dfs_region) {
1042 	case QLINK_DFS_FCC:
1043 		mac->rd->dfs_region = NL80211_DFS_FCC;
1044 		break;
1045 	case QLINK_DFS_ETSI:
1046 		mac->rd->dfs_region = NL80211_DFS_ETSI;
1047 		break;
1048 	case QLINK_DFS_JP:
1049 		mac->rd->dfs_region = NL80211_DFS_JP;
1050 		break;
1051 	case QLINK_DFS_UNSET:
1052 	default:
1053 		mac->rd->dfs_region = NL80211_DFS_UNSET;
1054 		break;
1055 	}
1056 
1057 	qlink_for_each_tlv(tlv, resp->var_info, tlv_buf_size) {
1058 		tlv_type = le16_to_cpu(tlv->type);
1059 		tlv_value_len = le16_to_cpu(tlv->len);
1060 
1061 		switch (tlv_type) {
1062 		case QTN_TLV_ID_IFACE_LIMIT:
1063 			if (unlikely(!comb)) {
1064 				pr_warn("MAC%u: no combinations advertised\n",
1065 					mac->macid);
1066 				return -EINVAL;
1067 			}
1068 
1069 			if (n_comb >= mac->macinfo.n_if_comb) {
1070 				pr_warn("MAC%u: combinations count exceeded\n",
1071 					mac->macid);
1072 				n_comb++;
1073 				break;
1074 			}
1075 
1076 			rec = (void *)tlv->val;
1077 			rec_len = sizeof(*rec) + rec->n_limits * sizeof(*lim);
1078 
1079 			if (unlikely(tlv_value_len != rec_len)) {
1080 				pr_warn("MAC%u: record %zu size mismatch\n",
1081 					mac->macid, n_comb);
1082 				return -EINVAL;
1083 			}
1084 
1085 			limits = kcalloc(rec->n_limits, sizeof(*limits),
1086 					 GFP_KERNEL);
1087 			if (!limits)
1088 				return -ENOMEM;
1089 
1090 			comb[n_comb].num_different_channels =
1091 				rec->num_different_channels;
1092 			comb[n_comb].max_interfaces =
1093 				le16_to_cpu(rec->max_interfaces);
1094 			comb[n_comb].n_limits = rec->n_limits;
1095 			comb[n_comb].limits = limits;
1096 
1097 			for (i = 0; i < rec->n_limits; i++) {
1098 				lim = &rec->limits[i];
1099 				limits[i].max = le16_to_cpu(lim->max_num);
1100 				limits[i].types =
1101 					qlink_iface_type_to_nl_mask(le16_to_cpu(lim->type));
1102 				pr_debug("MAC%u: comb[%zu]: MAX:%u TYPES:%.4X\n",
1103 					 mac->macid, n_comb,
1104 					 limits[i].max, limits[i].types);
1105 			}
1106 
1107 			n_comb++;
1108 			break;
1109 		case WLAN_EID_EXT_CAPABILITY:
1110 			if (unlikely(tlv_value_len > U8_MAX))
1111 				return -EINVAL;
1112 			ext_capa = (u8 *)tlv->val;
1113 			ext_capa_len = tlv_value_len;
1114 			break;
1115 		case QTN_TLV_ID_EXT_CAPABILITY_MASK:
1116 			if (unlikely(tlv_value_len > U8_MAX))
1117 				return -EINVAL;
1118 			ext_capa_mask = (u8 *)tlv->val;
1119 			ext_capa_mask_len = tlv_value_len;
1120 			break;
1121 		case QTN_TLV_ID_WOWLAN_CAPAB:
1122 			if (tlv_value_len < sizeof(*wowlan))
1123 				return -EINVAL;
1124 
1125 			wowlan = (void *)tlv->val;
1126 			if (!le16_to_cpu(wowlan->len)) {
1127 				pr_warn("MAC%u: skip empty WoWLAN data\n",
1128 					mac->macid);
1129 				break;
1130 			}
1131 
1132 			rec_len = sizeof(*wowlan) + le16_to_cpu(wowlan->len);
1133 			if (unlikely(tlv_value_len != rec_len)) {
1134 				pr_warn("MAC%u: WoWLAN data size mismatch\n",
1135 					mac->macid);
1136 				return -EINVAL;
1137 			}
1138 
1139 			kfree(mac->macinfo.wowlan);
1140 			mac->macinfo.wowlan = NULL;
1141 			qtnf_parse_wowlan_info(mac, wowlan);
1142 			break;
1143 		case QTN_TLV_ID_REG_RULE:
1144 			if (rule_idx >= resp->n_reg_rules) {
1145 				pr_warn("unexpected number of rules: %u\n",
1146 					resp->n_reg_rules);
1147 				return -EINVAL;
1148 			}
1149 
1150 			if (tlv_value_len != sizeof(*tlv_rule) - sizeof(*tlv)) {
1151 				pr_warn("malformed TLV 0x%.2X; LEN: %u\n",
1152 					tlv_type, tlv_value_len);
1153 				return -EINVAL;
1154 			}
1155 
1156 			tlv_rule = (const struct qlink_tlv_reg_rule *)tlv;
1157 			rule = &mac->rd->reg_rules[rule_idx++];
1158 			qlink_utils_regrule_q2nl(rule, tlv_rule);
1159 			break;
1160 		default:
1161 			pr_warn("MAC%u: unknown TLV type %u\n",
1162 				mac->macid, tlv_type);
1163 			break;
1164 		}
1165 	}
1166 
1167 	if (!qlink_tlv_parsing_ok(tlv, resp->var_info, tlv_buf_size)) {
1168 		pr_err("Malformed TLV buffer\n");
1169 		return -EINVAL;
1170 	}
1171 
1172 	if (mac->macinfo.n_if_comb != n_comb) {
1173 		pr_err("MAC%u: combination mismatch: reported=%zu parsed=%zu\n",
1174 		       mac->macid, mac->macinfo.n_if_comb, n_comb);
1175 		return -EINVAL;
1176 	}
1177 
1178 	if (ext_capa_len != ext_capa_mask_len) {
1179 		pr_err("MAC%u: ext_capa/_mask lengths mismatch: %u != %u\n",
1180 		       mac->macid, ext_capa_len, ext_capa_mask_len);
1181 		return -EINVAL;
1182 	}
1183 
1184 	if (rule_idx != resp->n_reg_rules) {
1185 		pr_warn("unexpected number of rules: expected %u got %u\n",
1186 			resp->n_reg_rules, rule_idx);
1187 		return -EINVAL;
1188 	}
1189 
1190 	if (ext_capa_len > 0) {
1191 		ext_capa = kmemdup(ext_capa, ext_capa_len, GFP_KERNEL);
1192 		if (!ext_capa)
1193 			return -ENOMEM;
1194 
1195 		ext_capa_mask =
1196 			kmemdup(ext_capa_mask, ext_capa_mask_len, GFP_KERNEL);
1197 		if (!ext_capa_mask) {
1198 			kfree(ext_capa);
1199 			return -ENOMEM;
1200 		}
1201 	} else {
1202 		ext_capa = NULL;
1203 		ext_capa_mask = NULL;
1204 	}
1205 
1206 	qtnf_mac_ext_caps_free(mac);
1207 	mac->macinfo.extended_capabilities = ext_capa;
1208 	mac->macinfo.extended_capabilities_mask = ext_capa_mask;
1209 	mac->macinfo.extended_capabilities_len = ext_capa_len;
1210 
1211 	return 0;
1212 }
1213 
1214 static int
1215 qtnf_cmd_resp_proc_mac_info(struct qtnf_wmac *mac,
1216 			    const struct qlink_resp_get_mac_info *resp_info)
1217 {
1218 	struct qtnf_mac_info *mac_info;
1219 	struct qtnf_vif *vif;
1220 
1221 	qtnf_mac_iface_comb_free(mac);
1222 
1223 	mac_info = &mac->macinfo;
1224 
1225 	mac_info->bands_cap = resp_info->bands_cap;
1226 	ether_addr_copy(mac->macaddr, resp_info->dev_mac);
1227 
1228 	vif = qtnf_mac_get_base_vif(mac);
1229 	if (vif)
1230 		ether_addr_copy(vif->mac_addr, mac->macaddr);
1231 	else
1232 		pr_err("could not get valid base vif\n");
1233 
1234 	mac_info->num_tx_chain = resp_info->num_tx_chain;
1235 	mac_info->num_rx_chain = resp_info->num_rx_chain;
1236 
1237 	mac_info->max_ap_assoc_sta = le16_to_cpu(resp_info->max_ap_assoc_sta);
1238 	mac_info->radar_detect_widths =
1239 			qlink_chan_width_mask_to_nl(le16_to_cpu(
1240 					resp_info->radar_detect_widths));
1241 	mac_info->max_acl_mac_addrs = le16_to_cpu(resp_info->max_acl_mac_addrs);
1242 	mac_info->frag_thr = le32_to_cpu(resp_info->frag_threshold);
1243 	mac_info->rts_thr = le32_to_cpu(resp_info->rts_threshold);
1244 	mac_info->sretry_limit = resp_info->retry_short;
1245 	mac_info->lretry_limit = resp_info->retry_long;
1246 	mac_info->coverage_class = resp_info->coverage_class;
1247 	mac_info->max_scan_ssids = resp_info->max_scan_ssids;
1248 
1249 	memcpy(&mac_info->ht_cap_mod_mask, &resp_info->ht_cap_mod_mask,
1250 	       sizeof(mac_info->ht_cap_mod_mask));
1251 	memcpy(&mac_info->vht_cap_mod_mask, &resp_info->vht_cap_mod_mask,
1252 	       sizeof(mac_info->vht_cap_mod_mask));
1253 
1254 	mac_info->n_if_comb = resp_info->n_iface_combinations;
1255 	mac_info->if_comb = kcalloc(mac->macinfo.n_if_comb,
1256 				    sizeof(*mac->macinfo.if_comb),
1257 				    GFP_KERNEL);
1258 
1259 	if (!mac->macinfo.if_comb)
1260 		return -ENOMEM;
1261 
1262 	return 0;
1263 }
1264 
1265 static void qtnf_cmd_resp_band_fill_htcap(const u8 *info,
1266 					  struct ieee80211_sta_ht_cap *bcap)
1267 {
1268 	const struct ieee80211_ht_cap *ht_cap =
1269 		(const struct ieee80211_ht_cap *)info;
1270 
1271 	bcap->ht_supported = true;
1272 	bcap->cap = le16_to_cpu(ht_cap->cap_info);
1273 	bcap->ampdu_factor =
1274 		ht_cap->ampdu_params_info & IEEE80211_HT_AMPDU_PARM_FACTOR;
1275 	bcap->ampdu_density =
1276 		(ht_cap->ampdu_params_info & IEEE80211_HT_AMPDU_PARM_DENSITY) >>
1277 		IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT;
1278 	memcpy(&bcap->mcs, &ht_cap->mcs, sizeof(bcap->mcs));
1279 }
1280 
1281 static void qtnf_cmd_resp_band_fill_vhtcap(const u8 *info,
1282 					   struct ieee80211_sta_vht_cap *bcap)
1283 {
1284 	const struct ieee80211_vht_cap *vht_cap =
1285 		(const struct ieee80211_vht_cap *)info;
1286 
1287 	bcap->vht_supported = true;
1288 	bcap->cap = le32_to_cpu(vht_cap->vht_cap_info);
1289 	memcpy(&bcap->vht_mcs, &vht_cap->supp_mcs, sizeof(bcap->vht_mcs));
1290 }
1291 
1292 static void qtnf_cmd_conv_iftype(struct ieee80211_sband_iftype_data
1293 				  *iftype_data,
1294 				  const struct qlink_sband_iftype_data
1295 				  *qlink_data)
1296 {
1297 	iftype_data->types_mask = le16_to_cpu(qlink_data->types_mask);
1298 
1299 	iftype_data->he_cap.has_he = true;
1300 	memcpy(&iftype_data->he_cap.he_cap_elem, &qlink_data->he_cap_elem,
1301 	       sizeof(qlink_data->he_cap_elem));
1302 	memcpy(iftype_data->he_cap.ppe_thres, qlink_data->ppe_thres,
1303 	       ARRAY_SIZE(qlink_data->ppe_thres));
1304 
1305 	iftype_data->he_cap.he_mcs_nss_supp.rx_mcs_80 =
1306 		qlink_data->he_mcs_nss_supp.rx_mcs_80;
1307 	iftype_data->he_cap.he_mcs_nss_supp.tx_mcs_80 =
1308 		qlink_data->he_mcs_nss_supp.tx_mcs_80;
1309 	iftype_data->he_cap.he_mcs_nss_supp.rx_mcs_160 =
1310 		qlink_data->he_mcs_nss_supp.rx_mcs_160;
1311 	iftype_data->he_cap.he_mcs_nss_supp.tx_mcs_160 =
1312 		qlink_data->he_mcs_nss_supp.tx_mcs_160;
1313 	iftype_data->he_cap.he_mcs_nss_supp.rx_mcs_80p80 =
1314 		qlink_data->he_mcs_nss_supp.rx_mcs_80p80;
1315 	iftype_data->he_cap.he_mcs_nss_supp.tx_mcs_80p80 =
1316 		qlink_data->he_mcs_nss_supp.tx_mcs_80p80;
1317 }
1318 
1319 static int qtnf_cmd_band_fill_iftype(const u8 *data,
1320 				     struct ieee80211_supported_band *band)
1321 {
1322 	unsigned int i;
1323 	struct ieee80211_sband_iftype_data *iftype_data;
1324 	const struct qlink_tlv_iftype_data *tlv =
1325 		(const struct qlink_tlv_iftype_data *)data;
1326 	size_t payload_len = tlv->n_iftype_data * sizeof(*tlv->iftype_data) +
1327 		sizeof(*tlv) -
1328 		sizeof(struct qlink_tlv_hdr);
1329 
1330 	if (tlv->hdr.len != cpu_to_le16(payload_len)) {
1331 		pr_err("bad IFTYPE_DATA TLV len %u\n", tlv->hdr.len);
1332 		return -EINVAL;
1333 	}
1334 
1335 	kfree(band->iftype_data);
1336 	band->iftype_data = NULL;
1337 	band->n_iftype_data = tlv->n_iftype_data;
1338 	if (band->n_iftype_data == 0)
1339 		return 0;
1340 
1341 	iftype_data = kcalloc(band->n_iftype_data, sizeof(*iftype_data),
1342 			      GFP_KERNEL);
1343 	if (!iftype_data) {
1344 		band->n_iftype_data = 0;
1345 		return -ENOMEM;
1346 	}
1347 	band->iftype_data = iftype_data;
1348 
1349 	for (i = 0; i < band->n_iftype_data; i++)
1350 		qtnf_cmd_conv_iftype(iftype_data++, &tlv->iftype_data[i]);
1351 
1352 	return 0;
1353 }
1354 
1355 static int
1356 qtnf_cmd_resp_fill_band_info(struct ieee80211_supported_band *band,
1357 			     struct qlink_resp_band_info_get *resp,
1358 			     size_t payload_len)
1359 {
1360 	u16 tlv_type;
1361 	size_t tlv_dlen;
1362 	const struct qlink_tlv_hdr *tlv;
1363 	const struct qlink_channel *qchan;
1364 	struct ieee80211_channel *chan;
1365 	unsigned int chidx = 0;
1366 	u32 qflags;
1367 	int ret = -EINVAL;
1368 
1369 	memset(&band->ht_cap, 0, sizeof(band->ht_cap));
1370 	memset(&band->vht_cap, 0, sizeof(band->vht_cap));
1371 
1372 	if (band->channels) {
1373 		if (band->n_channels == resp->num_chans) {
1374 			memset(band->channels, 0,
1375 			       sizeof(*band->channels) * band->n_channels);
1376 		} else {
1377 			kfree(band->channels);
1378 			band->n_channels = 0;
1379 			band->channels = NULL;
1380 		}
1381 	}
1382 
1383 	band->n_channels = resp->num_chans;
1384 	if (band->n_channels == 0)
1385 		return 0;
1386 
1387 	if (!band->channels)
1388 		band->channels = kcalloc(band->n_channels, sizeof(*chan),
1389 					 GFP_KERNEL);
1390 	if (!band->channels) {
1391 		band->n_channels = 0;
1392 		return -ENOMEM;
1393 	}
1394 
1395 	qlink_for_each_tlv(tlv, resp->info, payload_len) {
1396 		tlv_type = le16_to_cpu(tlv->type);
1397 		tlv_dlen = le16_to_cpu(tlv->len);
1398 
1399 		switch (tlv_type) {
1400 		case QTN_TLV_ID_CHANNEL:
1401 			if (unlikely(tlv_dlen != sizeof(*qchan))) {
1402 				pr_err("invalid channel TLV len %zu\n",
1403 				       tlv_dlen);
1404 				goto error_ret;
1405 			}
1406 
1407 			if (chidx == band->n_channels) {
1408 				pr_err("too many channel TLVs\n");
1409 				goto error_ret;
1410 			}
1411 
1412 			qchan = (const struct qlink_channel *)tlv->val;
1413 			chan = &band->channels[chidx++];
1414 			qflags = le32_to_cpu(qchan->flags);
1415 
1416 			chan->hw_value = le16_to_cpu(qchan->hw_value);
1417 			chan->band = band->band;
1418 			chan->center_freq = le16_to_cpu(qchan->center_freq);
1419 			chan->max_antenna_gain = (int)qchan->max_antenna_gain;
1420 			chan->max_power = (int)qchan->max_power;
1421 			chan->max_reg_power = (int)qchan->max_reg_power;
1422 			chan->beacon_found = qchan->beacon_found;
1423 			chan->dfs_cac_ms = le32_to_cpu(qchan->dfs_cac_ms);
1424 			chan->flags = 0;
1425 
1426 			if (qflags & QLINK_CHAN_DISABLED)
1427 				chan->flags |= IEEE80211_CHAN_DISABLED;
1428 
1429 			if (qflags & QLINK_CHAN_NO_IR)
1430 				chan->flags |= IEEE80211_CHAN_NO_IR;
1431 
1432 			if (qflags & QLINK_CHAN_NO_HT40PLUS)
1433 				chan->flags |= IEEE80211_CHAN_NO_HT40PLUS;
1434 
1435 			if (qflags & QLINK_CHAN_NO_HT40MINUS)
1436 				chan->flags |= IEEE80211_CHAN_NO_HT40MINUS;
1437 
1438 			if (qflags & QLINK_CHAN_NO_OFDM)
1439 				chan->flags |= IEEE80211_CHAN_NO_OFDM;
1440 
1441 			if (qflags & QLINK_CHAN_NO_80MHZ)
1442 				chan->flags |= IEEE80211_CHAN_NO_80MHZ;
1443 
1444 			if (qflags & QLINK_CHAN_NO_160MHZ)
1445 				chan->flags |= IEEE80211_CHAN_NO_160MHZ;
1446 
1447 			if (qflags & QLINK_CHAN_INDOOR_ONLY)
1448 				chan->flags |= IEEE80211_CHAN_INDOOR_ONLY;
1449 
1450 			if (qflags & QLINK_CHAN_IR_CONCURRENT)
1451 				chan->flags |= IEEE80211_CHAN_IR_CONCURRENT;
1452 
1453 			if (qflags & QLINK_CHAN_NO_20MHZ)
1454 				chan->flags |= IEEE80211_CHAN_NO_20MHZ;
1455 
1456 			if (qflags & QLINK_CHAN_NO_10MHZ)
1457 				chan->flags |= IEEE80211_CHAN_NO_10MHZ;
1458 
1459 			if (qflags & QLINK_CHAN_RADAR) {
1460 				chan->flags |= IEEE80211_CHAN_RADAR;
1461 				chan->dfs_state_entered = jiffies;
1462 
1463 				if (qchan->dfs_state == QLINK_DFS_USABLE)
1464 					chan->dfs_state = NL80211_DFS_USABLE;
1465 				else if (qchan->dfs_state ==
1466 					QLINK_DFS_AVAILABLE)
1467 					chan->dfs_state = NL80211_DFS_AVAILABLE;
1468 				else
1469 					chan->dfs_state =
1470 						NL80211_DFS_UNAVAILABLE;
1471 			}
1472 
1473 			pr_debug("chan=%d flags=%#x max_pow=%d max_reg_pow=%d\n",
1474 				 chan->hw_value, chan->flags, chan->max_power,
1475 				 chan->max_reg_power);
1476 			break;
1477 		case WLAN_EID_HT_CAPABILITY:
1478 			if (unlikely(tlv_dlen !=
1479 				     sizeof(struct ieee80211_ht_cap))) {
1480 				pr_err("bad HTCAP TLV len %zu\n", tlv_dlen);
1481 				goto error_ret;
1482 			}
1483 
1484 			qtnf_cmd_resp_band_fill_htcap(tlv->val, &band->ht_cap);
1485 			break;
1486 		case WLAN_EID_VHT_CAPABILITY:
1487 			if (unlikely(tlv_dlen !=
1488 				     sizeof(struct ieee80211_vht_cap))) {
1489 				pr_err("bad VHTCAP TLV len %zu\n", tlv_dlen);
1490 				goto error_ret;
1491 			}
1492 
1493 			qtnf_cmd_resp_band_fill_vhtcap(tlv->val,
1494 						       &band->vht_cap);
1495 			break;
1496 		case QTN_TLV_ID_IFTYPE_DATA:
1497 			ret = qtnf_cmd_band_fill_iftype((const uint8_t *)tlv,
1498 							band);
1499 			if (ret)
1500 				goto error_ret;
1501 			break;
1502 		default:
1503 			pr_warn("unknown TLV type: %#x\n", tlv_type);
1504 			break;
1505 		}
1506 	}
1507 
1508 	if (!qlink_tlv_parsing_ok(tlv, resp->info, payload_len)) {
1509 		pr_err("Malformed TLV buffer\n");
1510 		goto error_ret;
1511 	}
1512 
1513 	if (band->n_channels != chidx) {
1514 		pr_err("channel count mismatch: reported=%d, parsed=%d\n",
1515 		       band->n_channels, chidx);
1516 		goto error_ret;
1517 	}
1518 
1519 	return 0;
1520 
1521 error_ret:
1522 	kfree(band->channels);
1523 	band->channels = NULL;
1524 	band->n_channels = 0;
1525 
1526 	return ret;
1527 }
1528 
1529 int qtnf_cmd_get_mac_info(struct qtnf_wmac *mac)
1530 {
1531 	struct sk_buff *cmd_skb, *resp_skb = NULL;
1532 	const struct qlink_resp_get_mac_info *resp;
1533 	size_t var_data_len = 0;
1534 	int ret = 0;
1535 
1536 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, QLINK_VIFID_RSVD,
1537 					    QLINK_CMD_MAC_INFO,
1538 					    sizeof(struct qlink_cmd));
1539 	if (!cmd_skb)
1540 		return -ENOMEM;
1541 
1542 	qtnf_bus_lock(mac->bus);
1543 	ret = qtnf_cmd_send_with_reply(mac->bus, cmd_skb, &resp_skb,
1544 				       sizeof(*resp), &var_data_len);
1545 	if (ret)
1546 		goto out;
1547 
1548 	resp = (const struct qlink_resp_get_mac_info *)resp_skb->data;
1549 	ret = qtnf_cmd_resp_proc_mac_info(mac, resp);
1550 	if (ret)
1551 		goto out;
1552 
1553 	ret = qtnf_parse_variable_mac_info(mac, resp, var_data_len);
1554 
1555 out:
1556 	qtnf_bus_unlock(mac->bus);
1557 	consume_skb(resp_skb);
1558 
1559 	return ret;
1560 }
1561 
1562 int qtnf_cmd_get_hw_info(struct qtnf_bus *bus)
1563 {
1564 	struct sk_buff *cmd_skb, *resp_skb = NULL;
1565 	const struct qlink_resp_get_hw_info *resp;
1566 	size_t info_len = 0;
1567 	int ret = 0;
1568 
1569 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(QLINK_MACID_RSVD, QLINK_VIFID_RSVD,
1570 					    QLINK_CMD_GET_HW_INFO,
1571 					    sizeof(struct qlink_cmd));
1572 	if (!cmd_skb)
1573 		return -ENOMEM;
1574 
1575 	qtnf_bus_lock(bus);
1576 	ret = qtnf_cmd_send_with_reply(bus, cmd_skb, &resp_skb,
1577 				       sizeof(*resp), &info_len);
1578 	if (ret)
1579 		goto out;
1580 
1581 	resp = (const struct qlink_resp_get_hw_info *)resp_skb->data;
1582 	ret = qtnf_cmd_resp_proc_hw_info(bus, resp, info_len);
1583 
1584 out:
1585 	qtnf_bus_unlock(bus);
1586 	consume_skb(resp_skb);
1587 
1588 	return ret;
1589 }
1590 
1591 int qtnf_cmd_band_info_get(struct qtnf_wmac *mac,
1592 			   struct ieee80211_supported_band *band)
1593 {
1594 	struct sk_buff *cmd_skb, *resp_skb = NULL;
1595 	struct qlink_cmd_band_info_get *cmd;
1596 	struct qlink_resp_band_info_get *resp;
1597 	size_t info_len = 0;
1598 	int ret = 0;
1599 	u8 qband = qlink_utils_band_cfg2q(band->band);
1600 
1601 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, 0,
1602 					    QLINK_CMD_BAND_INFO_GET,
1603 					    sizeof(*cmd));
1604 	if (!cmd_skb)
1605 		return -ENOMEM;
1606 
1607 	cmd = (struct qlink_cmd_band_info_get *)cmd_skb->data;
1608 	cmd->band = qband;
1609 
1610 	qtnf_bus_lock(mac->bus);
1611 	ret = qtnf_cmd_send_with_reply(mac->bus, cmd_skb, &resp_skb,
1612 				       sizeof(*resp), &info_len);
1613 	if (ret)
1614 		goto out;
1615 
1616 	resp = (struct qlink_resp_band_info_get *)resp_skb->data;
1617 	if (resp->band != qband) {
1618 		pr_err("MAC%u: reply band %u != cmd band %u\n", mac->macid,
1619 		       resp->band, qband);
1620 		ret = -EINVAL;
1621 		goto out;
1622 	}
1623 
1624 	ret = qtnf_cmd_resp_fill_band_info(band, resp, info_len);
1625 
1626 out:
1627 	qtnf_bus_unlock(mac->bus);
1628 	consume_skb(resp_skb);
1629 
1630 	return ret;
1631 }
1632 
1633 int qtnf_cmd_send_update_phy_params(struct qtnf_wmac *mac, u32 changed)
1634 {
1635 	struct wiphy *wiphy = priv_to_wiphy(mac);
1636 	struct sk_buff *cmd_skb;
1637 	int ret = 0;
1638 
1639 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, 0,
1640 					    QLINK_CMD_PHY_PARAMS_SET,
1641 					    sizeof(struct qlink_cmd));
1642 	if (!cmd_skb)
1643 		return -ENOMEM;
1644 
1645 	qtnf_bus_lock(mac->bus);
1646 
1647 	if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
1648 		qtnf_cmd_skb_put_tlv_u32(cmd_skb, QTN_TLV_ID_FRAG_THRESH,
1649 					 wiphy->frag_threshold);
1650 	if (changed & WIPHY_PARAM_RTS_THRESHOLD)
1651 		qtnf_cmd_skb_put_tlv_u32(cmd_skb, QTN_TLV_ID_RTS_THRESH,
1652 					 wiphy->rts_threshold);
1653 	if (changed & WIPHY_PARAM_COVERAGE_CLASS)
1654 		qtnf_cmd_skb_put_tlv_u32(cmd_skb, QTN_TLV_ID_COVERAGE_CLASS,
1655 					 wiphy->coverage_class);
1656 
1657 	if (changed & WIPHY_PARAM_RETRY_LONG)
1658 		qtnf_cmd_skb_put_tlv_u32(cmd_skb, QTN_TLV_ID_LRETRY_LIMIT,
1659 					 wiphy->retry_long);
1660 
1661 	if (changed & WIPHY_PARAM_RETRY_SHORT)
1662 		qtnf_cmd_skb_put_tlv_u32(cmd_skb, QTN_TLV_ID_SRETRY_LIMIT,
1663 					 wiphy->retry_short);
1664 
1665 	ret = qtnf_cmd_send(mac->bus, cmd_skb);
1666 
1667 	qtnf_bus_unlock(mac->bus);
1668 
1669 	return ret;
1670 }
1671 
1672 int qtnf_cmd_send_init_fw(struct qtnf_bus *bus)
1673 {
1674 	struct sk_buff *resp_skb = NULL;
1675 	struct qlink_resp_init_fw *resp;
1676 	struct qlink_cmd_init_fw *cmd;
1677 	struct sk_buff *cmd_skb;
1678 	size_t info_len = 0;
1679 	int ret;
1680 
1681 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(QLINK_MACID_RSVD, QLINK_VIFID_RSVD,
1682 					    QLINK_CMD_FW_INIT,
1683 					    sizeof(*cmd));
1684 	if (!cmd_skb)
1685 		return -ENOMEM;
1686 
1687 	cmd = (struct qlink_cmd_init_fw *)cmd_skb->data;
1688 	cmd->qlink_proto_ver = cpu_to_le32(QLINK_PROTO_VER);
1689 
1690 	qtnf_bus_lock(bus);
1691 	ret = qtnf_cmd_send_with_reply(bus, cmd_skb, &resp_skb,
1692 				       sizeof(*resp), &info_len);
1693 	qtnf_bus_unlock(bus);
1694 
1695 	if (ret)
1696 		goto out;
1697 
1698 	resp = (struct qlink_resp_init_fw *)resp_skb->data;
1699 	bus->hw_info.ql_proto_ver = le32_to_cpu(resp->qlink_proto_ver);
1700 
1701 out:
1702 	consume_skb(resp_skb);
1703 	return ret;
1704 }
1705 
1706 void qtnf_cmd_send_deinit_fw(struct qtnf_bus *bus)
1707 {
1708 	struct sk_buff *cmd_skb;
1709 
1710 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(QLINK_MACID_RSVD, QLINK_VIFID_RSVD,
1711 					    QLINK_CMD_FW_DEINIT,
1712 					    sizeof(struct qlink_cmd));
1713 	if (!cmd_skb)
1714 		return;
1715 
1716 	qtnf_bus_lock(bus);
1717 	qtnf_cmd_send(bus, cmd_skb);
1718 	qtnf_bus_unlock(bus);
1719 }
1720 
1721 int qtnf_cmd_send_add_key(struct qtnf_vif *vif, u8 key_index, bool pairwise,
1722 			  const u8 *mac_addr, struct key_params *params)
1723 {
1724 	struct sk_buff *cmd_skb;
1725 	struct qlink_cmd_add_key *cmd;
1726 	int ret = 0;
1727 
1728 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
1729 					    QLINK_CMD_ADD_KEY,
1730 					    sizeof(*cmd));
1731 	if (!cmd_skb)
1732 		return -ENOMEM;
1733 
1734 	qtnf_bus_lock(vif->mac->bus);
1735 
1736 	cmd = (struct qlink_cmd_add_key *)cmd_skb->data;
1737 
1738 	if (mac_addr)
1739 		ether_addr_copy(cmd->addr, mac_addr);
1740 	else
1741 		eth_broadcast_addr(cmd->addr);
1742 
1743 	cmd->cipher = cpu_to_le32(params->cipher);
1744 	cmd->key_index = key_index;
1745 	cmd->pairwise = pairwise;
1746 
1747 	if (params->key && params->key_len > 0)
1748 		qtnf_cmd_skb_put_tlv_arr(cmd_skb, QTN_TLV_ID_KEY,
1749 					 params->key,
1750 					 params->key_len);
1751 
1752 	if (params->seq && params->seq_len > 0)
1753 		qtnf_cmd_skb_put_tlv_arr(cmd_skb, QTN_TLV_ID_SEQ,
1754 					 params->seq,
1755 					 params->seq_len);
1756 
1757 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
1758 
1759 	qtnf_bus_unlock(vif->mac->bus);
1760 
1761 	return ret;
1762 }
1763 
1764 int qtnf_cmd_send_del_key(struct qtnf_vif *vif, u8 key_index, bool pairwise,
1765 			  const u8 *mac_addr)
1766 {
1767 	struct sk_buff *cmd_skb;
1768 	struct qlink_cmd_del_key *cmd;
1769 	int ret = 0;
1770 
1771 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
1772 					    QLINK_CMD_DEL_KEY,
1773 					    sizeof(*cmd));
1774 	if (!cmd_skb)
1775 		return -ENOMEM;
1776 
1777 	qtnf_bus_lock(vif->mac->bus);
1778 
1779 	cmd = (struct qlink_cmd_del_key *)cmd_skb->data;
1780 
1781 	if (mac_addr)
1782 		ether_addr_copy(cmd->addr, mac_addr);
1783 	else
1784 		eth_broadcast_addr(cmd->addr);
1785 
1786 	cmd->key_index = key_index;
1787 	cmd->pairwise = pairwise;
1788 
1789 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
1790 
1791 	qtnf_bus_unlock(vif->mac->bus);
1792 
1793 	return ret;
1794 }
1795 
1796 int qtnf_cmd_send_set_default_key(struct qtnf_vif *vif, u8 key_index,
1797 				  bool unicast, bool multicast)
1798 {
1799 	struct sk_buff *cmd_skb;
1800 	struct qlink_cmd_set_def_key *cmd;
1801 	int ret = 0;
1802 
1803 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
1804 					    QLINK_CMD_SET_DEFAULT_KEY,
1805 					    sizeof(*cmd));
1806 	if (!cmd_skb)
1807 		return -ENOMEM;
1808 
1809 	qtnf_bus_lock(vif->mac->bus);
1810 
1811 	cmd = (struct qlink_cmd_set_def_key *)cmd_skb->data;
1812 	cmd->key_index = key_index;
1813 	cmd->unicast = unicast;
1814 	cmd->multicast = multicast;
1815 
1816 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
1817 
1818 	qtnf_bus_unlock(vif->mac->bus);
1819 
1820 	return ret;
1821 }
1822 
1823 int qtnf_cmd_send_set_default_mgmt_key(struct qtnf_vif *vif, u8 key_index)
1824 {
1825 	struct sk_buff *cmd_skb;
1826 	struct qlink_cmd_set_def_mgmt_key *cmd;
1827 	int ret = 0;
1828 
1829 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
1830 					    QLINK_CMD_SET_DEFAULT_MGMT_KEY,
1831 					    sizeof(*cmd));
1832 	if (!cmd_skb)
1833 		return -ENOMEM;
1834 
1835 	qtnf_bus_lock(vif->mac->bus);
1836 
1837 	cmd = (struct qlink_cmd_set_def_mgmt_key *)cmd_skb->data;
1838 	cmd->key_index = key_index;
1839 
1840 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
1841 
1842 	qtnf_bus_unlock(vif->mac->bus);
1843 
1844 	return ret;
1845 }
1846 
1847 static u32 qtnf_encode_sta_flags(u32 flags)
1848 {
1849 	u32 code = 0;
1850 
1851 	if (flags & BIT(NL80211_STA_FLAG_AUTHORIZED))
1852 		code |= QLINK_STA_FLAG_AUTHORIZED;
1853 	if (flags & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE))
1854 		code |= QLINK_STA_FLAG_SHORT_PREAMBLE;
1855 	if (flags & BIT(NL80211_STA_FLAG_WME))
1856 		code |= QLINK_STA_FLAG_WME;
1857 	if (flags & BIT(NL80211_STA_FLAG_MFP))
1858 		code |= QLINK_STA_FLAG_MFP;
1859 	if (flags & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1860 		code |= QLINK_STA_FLAG_AUTHENTICATED;
1861 	if (flags & BIT(NL80211_STA_FLAG_TDLS_PEER))
1862 		code |= QLINK_STA_FLAG_TDLS_PEER;
1863 	if (flags & BIT(NL80211_STA_FLAG_ASSOCIATED))
1864 		code |= QLINK_STA_FLAG_ASSOCIATED;
1865 	return code;
1866 }
1867 
1868 int qtnf_cmd_send_change_sta(struct qtnf_vif *vif, const u8 *mac,
1869 			     struct station_parameters *params)
1870 {
1871 	struct sk_buff *cmd_skb;
1872 	struct qlink_cmd_change_sta *cmd;
1873 	int ret = 0;
1874 
1875 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
1876 					    QLINK_CMD_CHANGE_STA,
1877 					    sizeof(*cmd));
1878 	if (!cmd_skb)
1879 		return -ENOMEM;
1880 
1881 	qtnf_bus_lock(vif->mac->bus);
1882 
1883 	cmd = (struct qlink_cmd_change_sta *)cmd_skb->data;
1884 	ether_addr_copy(cmd->sta_addr, mac);
1885 	cmd->flag_update.mask =
1886 		cpu_to_le32(qtnf_encode_sta_flags(params->sta_flags_mask));
1887 	cmd->flag_update.value =
1888 		cpu_to_le32(qtnf_encode_sta_flags(params->sta_flags_set));
1889 
1890 	switch (vif->wdev.iftype) {
1891 	case NL80211_IFTYPE_AP:
1892 		cmd->if_type = cpu_to_le16(QLINK_IFTYPE_AP);
1893 		break;
1894 	case NL80211_IFTYPE_STATION:
1895 		cmd->if_type = cpu_to_le16(QLINK_IFTYPE_STATION);
1896 		break;
1897 	default:
1898 		pr_err("unsupported iftype %d\n", vif->wdev.iftype);
1899 		dev_kfree_skb(cmd_skb);
1900 		ret = -EINVAL;
1901 		goto out;
1902 	}
1903 
1904 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
1905 
1906 out:
1907 	qtnf_bus_unlock(vif->mac->bus);
1908 
1909 	return ret;
1910 }
1911 
1912 int qtnf_cmd_send_del_sta(struct qtnf_vif *vif,
1913 			  struct station_del_parameters *params)
1914 {
1915 	struct sk_buff *cmd_skb;
1916 	struct qlink_cmd_del_sta *cmd;
1917 	int ret = 0;
1918 
1919 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
1920 					    QLINK_CMD_DEL_STA,
1921 					    sizeof(*cmd));
1922 	if (!cmd_skb)
1923 		return -ENOMEM;
1924 
1925 	qtnf_bus_lock(vif->mac->bus);
1926 
1927 	cmd = (struct qlink_cmd_del_sta *)cmd_skb->data;
1928 
1929 	if (params->mac)
1930 		ether_addr_copy(cmd->sta_addr, params->mac);
1931 	else
1932 		eth_broadcast_addr(cmd->sta_addr);	/* flush all stations */
1933 
1934 	cmd->subtype = params->subtype;
1935 	cmd->reason_code = cpu_to_le16(params->reason_code);
1936 
1937 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
1938 
1939 	qtnf_bus_unlock(vif->mac->bus);
1940 
1941 	return ret;
1942 }
1943 
1944 static void qtnf_cmd_channel_tlv_add(struct sk_buff *cmd_skb,
1945 				     const struct ieee80211_channel *sc)
1946 {
1947 	struct qlink_tlv_channel *tlv;
1948 	struct qlink_channel *qch;
1949 
1950 	tlv = skb_put_zero(cmd_skb, sizeof(*tlv));
1951 	qch = &tlv->chan;
1952 	tlv->hdr.type = cpu_to_le16(QTN_TLV_ID_CHANNEL);
1953 	tlv->hdr.len = cpu_to_le16(sizeof(*qch));
1954 
1955 	qch->center_freq = cpu_to_le16(sc->center_freq);
1956 	qch->hw_value = cpu_to_le16(sc->hw_value);
1957 	qch->band = qlink_utils_band_cfg2q(sc->band);
1958 	qch->max_power = sc->max_power;
1959 	qch->max_reg_power = sc->max_reg_power;
1960 	qch->max_antenna_gain = sc->max_antenna_gain;
1961 	qch->beacon_found = sc->beacon_found;
1962 	qch->dfs_state = qlink_utils_dfs_state_cfg2q(sc->dfs_state);
1963 	qch->flags = cpu_to_le32(qlink_utils_chflags_cfg2q(sc->flags));
1964 }
1965 
1966 static void qtnf_cmd_randmac_tlv_add(struct sk_buff *cmd_skb,
1967 				     const u8 *mac_addr,
1968 				     const u8 *mac_addr_mask)
1969 {
1970 	struct qlink_random_mac_addr *randmac;
1971 	struct qlink_tlv_hdr *hdr =
1972 		skb_put(cmd_skb, sizeof(*hdr) + sizeof(*randmac));
1973 
1974 	hdr->type = cpu_to_le16(QTN_TLV_ID_RANDOM_MAC_ADDR);
1975 	hdr->len = cpu_to_le16(sizeof(*randmac));
1976 	randmac = (struct qlink_random_mac_addr *)hdr->val;
1977 
1978 	memcpy(randmac->mac_addr, mac_addr, ETH_ALEN);
1979 	memcpy(randmac->mac_addr_mask, mac_addr_mask, ETH_ALEN);
1980 }
1981 
1982 int qtnf_cmd_send_scan(struct qtnf_wmac *mac)
1983 {
1984 	struct cfg80211_scan_request *scan_req = mac->scan_req;
1985 	u16 dwell_passive = QTNF_SCAN_DWELL_PASSIVE_DEFAULT;
1986 	u16 dwell_active = QTNF_SCAN_DWELL_ACTIVE_DEFAULT;
1987 	struct wireless_dev *wdev = scan_req->wdev;
1988 	struct ieee80211_channel *sc;
1989 	struct qlink_cmd_scan *cmd;
1990 	struct sk_buff *cmd_skb;
1991 	int n_channels = 0;
1992 	u64 flags = 0;
1993 	int count;
1994 	int ret;
1995 
1996 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, QLINK_VIFID_RSVD,
1997 					    QLINK_CMD_SCAN,
1998 					    sizeof(*cmd));
1999 	if (!cmd_skb)
2000 		return -ENOMEM;
2001 
2002 	cmd = (struct qlink_cmd_scan *)cmd_skb->data;
2003 
2004 	if (scan_req->duration) {
2005 		dwell_active = scan_req->duration;
2006 		dwell_passive = scan_req->duration;
2007 	} else if (wdev->iftype == NL80211_IFTYPE_STATION &&
2008 		   wdev->current_bss) {
2009 		/* let device select dwell based on traffic conditions */
2010 		dwell_active = QTNF_SCAN_TIME_AUTO;
2011 		dwell_passive = QTNF_SCAN_TIME_AUTO;
2012 	}
2013 
2014 	cmd->n_ssids = cpu_to_le16(scan_req->n_ssids);
2015 	for (count = 0; count < scan_req->n_ssids; ++count) {
2016 		qtnf_cmd_skb_put_tlv_arr(cmd_skb, WLAN_EID_SSID,
2017 					 scan_req->ssids[count].ssid,
2018 					 scan_req->ssids[count].ssid_len);
2019 	}
2020 
2021 	if (scan_req->ie_len != 0)
2022 		qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_PROBE_REQ,
2023 					scan_req->ie, scan_req->ie_len);
2024 
2025 	for (count = 0; count < scan_req->n_channels; ++count) {
2026 		sc = scan_req->channels[count];
2027 		if (sc->flags & IEEE80211_CHAN_DISABLED)
2028 			continue;
2029 
2030 		pr_debug("[MAC%u] scan chan=%d, freq=%d, flags=%#x\n",
2031 			 mac->macid, sc->hw_value, sc->center_freq,
2032 			 sc->flags);
2033 
2034 		qtnf_cmd_channel_tlv_add(cmd_skb, sc);
2035 		++n_channels;
2036 	}
2037 
2038 	if (scan_req->flags & NL80211_SCAN_FLAG_FLUSH)
2039 		flags |= QLINK_SCAN_FLAG_FLUSH;
2040 
2041 	if (scan_req->duration_mandatory)
2042 		flags |= QLINK_SCAN_FLAG_DURATION_MANDATORY;
2043 
2044 	cmd->n_channels = cpu_to_le16(n_channels);
2045 	cmd->active_dwell = cpu_to_le16(dwell_active);
2046 	cmd->passive_dwell = cpu_to_le16(dwell_passive);
2047 	cmd->sample_duration = cpu_to_le16(QTNF_SCAN_SAMPLE_DURATION_DEFAULT);
2048 	cmd->flags = cpu_to_le64(flags);
2049 
2050 	pr_debug("[MAC%u] %s scan dwell active=%u passive=%u duration=%u\n",
2051 		 mac->macid,
2052 		 scan_req->duration_mandatory ? "mandatory" : "max",
2053 		 dwell_active, dwell_passive,
2054 		 QTNF_SCAN_SAMPLE_DURATION_DEFAULT);
2055 
2056 	if (scan_req->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) {
2057 		pr_debug("[MAC%u] scan with random addr=%pM, mask=%pM\n",
2058 			 mac->macid,
2059 			 scan_req->mac_addr, scan_req->mac_addr_mask);
2060 		qtnf_cmd_randmac_tlv_add(cmd_skb, scan_req->mac_addr,
2061 					 scan_req->mac_addr_mask);
2062 	}
2063 
2064 	qtnf_bus_lock(mac->bus);
2065 	ret = qtnf_cmd_send(mac->bus, cmd_skb);
2066 	qtnf_bus_unlock(mac->bus);
2067 
2068 	return ret;
2069 }
2070 
2071 int qtnf_cmd_send_connect(struct qtnf_vif *vif,
2072 			  struct cfg80211_connect_params *sme)
2073 {
2074 	struct sk_buff *cmd_skb;
2075 	struct qlink_cmd_connect *cmd;
2076 	struct qlink_auth_encr *aen;
2077 	int ret;
2078 	int i;
2079 	u32 connect_flags = 0;
2080 
2081 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2082 					    QLINK_CMD_CONNECT,
2083 					    sizeof(*cmd));
2084 	if (!cmd_skb)
2085 		return -ENOMEM;
2086 
2087 	cmd = (struct qlink_cmd_connect *)cmd_skb->data;
2088 
2089 	ether_addr_copy(cmd->bssid, vif->bssid);
2090 
2091 	if (sme->bssid_hint)
2092 		ether_addr_copy(cmd->bssid_hint, sme->bssid_hint);
2093 	else
2094 		eth_zero_addr(cmd->bssid_hint);
2095 
2096 	if (sme->prev_bssid)
2097 		ether_addr_copy(cmd->prev_bssid, sme->prev_bssid);
2098 	else
2099 		eth_zero_addr(cmd->prev_bssid);
2100 
2101 	if ((sme->bg_scan_period >= 0) &&
2102 	    (sme->bg_scan_period <= SHRT_MAX))
2103 		cmd->bg_scan_period = cpu_to_le16(sme->bg_scan_period);
2104 	else
2105 		cmd->bg_scan_period = cpu_to_le16(-1); /* use default value */
2106 
2107 	if (sme->flags & ASSOC_REQ_DISABLE_HT)
2108 		connect_flags |= QLINK_STA_CONNECT_DISABLE_HT;
2109 	if (sme->flags & ASSOC_REQ_DISABLE_VHT)
2110 		connect_flags |= QLINK_STA_CONNECT_DISABLE_VHT;
2111 	if (sme->flags & ASSOC_REQ_USE_RRM)
2112 		connect_flags |= QLINK_STA_CONNECT_USE_RRM;
2113 
2114 	cmd->flags = cpu_to_le32(connect_flags);
2115 	memcpy(&cmd->ht_capa, &sme->ht_capa, sizeof(cmd->ht_capa));
2116 	memcpy(&cmd->ht_capa_mask, &sme->ht_capa_mask,
2117 	       sizeof(cmd->ht_capa_mask));
2118 	memcpy(&cmd->vht_capa, &sme->vht_capa, sizeof(cmd->vht_capa));
2119 	memcpy(&cmd->vht_capa_mask, &sme->vht_capa_mask,
2120 	       sizeof(cmd->vht_capa_mask));
2121 	cmd->pbss = sme->pbss;
2122 
2123 	aen = &cmd->aen;
2124 	aen->auth_type = sme->auth_type;
2125 	aen->privacy = !!sme->privacy;
2126 	cmd->mfp = sme->mfp;
2127 	aen->wpa_versions = cpu_to_le32(sme->crypto.wpa_versions);
2128 	aen->cipher_group = cpu_to_le32(sme->crypto.cipher_group);
2129 	aen->n_ciphers_pairwise = cpu_to_le32(sme->crypto.n_ciphers_pairwise);
2130 
2131 	for (i = 0; i < QLINK_MAX_NR_CIPHER_SUITES; i++)
2132 		aen->ciphers_pairwise[i] =
2133 			cpu_to_le32(sme->crypto.ciphers_pairwise[i]);
2134 
2135 	aen->n_akm_suites = cpu_to_le32(sme->crypto.n_akm_suites);
2136 
2137 	for (i = 0; i < QLINK_MAX_NR_AKM_SUITES; i++)
2138 		aen->akm_suites[i] = cpu_to_le32(sme->crypto.akm_suites[i]);
2139 
2140 	aen->control_port = sme->crypto.control_port;
2141 	aen->control_port_no_encrypt =
2142 		sme->crypto.control_port_no_encrypt;
2143 	aen->control_port_ethertype =
2144 		cpu_to_le16(be16_to_cpu(sme->crypto.control_port_ethertype));
2145 
2146 	qtnf_cmd_skb_put_tlv_arr(cmd_skb, WLAN_EID_SSID, sme->ssid,
2147 				 sme->ssid_len);
2148 
2149 	if (sme->ie_len != 0)
2150 		qtnf_cmd_tlv_ie_set_add(cmd_skb, QLINK_IE_SET_ASSOC_REQ,
2151 					sme->ie, sme->ie_len);
2152 
2153 	if (sme->channel)
2154 		qtnf_cmd_channel_tlv_add(cmd_skb, sme->channel);
2155 
2156 	qtnf_bus_lock(vif->mac->bus);
2157 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
2158 	qtnf_bus_unlock(vif->mac->bus);
2159 
2160 	return ret;
2161 }
2162 
2163 int qtnf_cmd_send_external_auth(struct qtnf_vif *vif,
2164 				struct cfg80211_external_auth_params *auth)
2165 {
2166 	struct sk_buff *cmd_skb;
2167 	struct qlink_cmd_external_auth *cmd;
2168 	int ret;
2169 
2170 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2171 					    QLINK_CMD_EXTERNAL_AUTH,
2172 					    sizeof(*cmd));
2173 	if (!cmd_skb)
2174 		return -ENOMEM;
2175 
2176 	cmd = (struct qlink_cmd_external_auth *)cmd_skb->data;
2177 
2178 	ether_addr_copy(cmd->peer, auth->bssid);
2179 	cmd->status = cpu_to_le16(auth->status);
2180 
2181 	qtnf_bus_lock(vif->mac->bus);
2182 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
2183 	qtnf_bus_unlock(vif->mac->bus);
2184 
2185 	return ret;
2186 }
2187 
2188 int qtnf_cmd_send_disconnect(struct qtnf_vif *vif, u16 reason_code)
2189 {
2190 	struct sk_buff *cmd_skb;
2191 	struct qlink_cmd_disconnect *cmd;
2192 	int ret;
2193 
2194 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2195 					    QLINK_CMD_DISCONNECT,
2196 					    sizeof(*cmd));
2197 	if (!cmd_skb)
2198 		return -ENOMEM;
2199 
2200 	qtnf_bus_lock(vif->mac->bus);
2201 
2202 	cmd = (struct qlink_cmd_disconnect *)cmd_skb->data;
2203 	cmd->reason = cpu_to_le16(reason_code);
2204 
2205 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
2206 
2207 	qtnf_bus_unlock(vif->mac->bus);
2208 
2209 	return ret;
2210 }
2211 
2212 int qtnf_cmd_send_updown_intf(struct qtnf_vif *vif, bool up)
2213 {
2214 	struct sk_buff *cmd_skb;
2215 	struct qlink_cmd_updown *cmd;
2216 	int ret;
2217 
2218 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2219 					    QLINK_CMD_UPDOWN_INTF,
2220 					    sizeof(*cmd));
2221 	if (!cmd_skb)
2222 		return -ENOMEM;
2223 
2224 	cmd = (struct qlink_cmd_updown *)cmd_skb->data;
2225 	cmd->if_up = !!up;
2226 
2227 	qtnf_bus_lock(vif->mac->bus);
2228 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
2229 	qtnf_bus_unlock(vif->mac->bus);
2230 
2231 	return ret;
2232 }
2233 
2234 int qtnf_cmd_reg_notify(struct qtnf_wmac *mac, struct regulatory_request *req,
2235 			bool slave_radar, bool dfs_offload)
2236 {
2237 	struct wiphy *wiphy = priv_to_wiphy(mac);
2238 	struct qtnf_bus *bus = mac->bus;
2239 	struct sk_buff *cmd_skb;
2240 	int ret;
2241 	struct qlink_cmd_reg_notify *cmd;
2242 	enum nl80211_band band;
2243 	const struct ieee80211_supported_band *cfg_band;
2244 
2245 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, QLINK_VIFID_RSVD,
2246 					    QLINK_CMD_REG_NOTIFY,
2247 					    sizeof(*cmd));
2248 	if (!cmd_skb)
2249 		return -ENOMEM;
2250 
2251 	cmd = (struct qlink_cmd_reg_notify *)cmd_skb->data;
2252 	cmd->alpha2[0] = req->alpha2[0];
2253 	cmd->alpha2[1] = req->alpha2[1];
2254 
2255 	switch (req->initiator) {
2256 	case NL80211_REGDOM_SET_BY_CORE:
2257 		cmd->initiator = QLINK_REGDOM_SET_BY_CORE;
2258 		break;
2259 	case NL80211_REGDOM_SET_BY_USER:
2260 		cmd->initiator = QLINK_REGDOM_SET_BY_USER;
2261 		break;
2262 	case NL80211_REGDOM_SET_BY_DRIVER:
2263 		cmd->initiator = QLINK_REGDOM_SET_BY_DRIVER;
2264 		break;
2265 	case NL80211_REGDOM_SET_BY_COUNTRY_IE:
2266 		cmd->initiator = QLINK_REGDOM_SET_BY_COUNTRY_IE;
2267 		break;
2268 	}
2269 
2270 	switch (req->user_reg_hint_type) {
2271 	case NL80211_USER_REG_HINT_USER:
2272 		cmd->user_reg_hint_type = QLINK_USER_REG_HINT_USER;
2273 		break;
2274 	case NL80211_USER_REG_HINT_CELL_BASE:
2275 		cmd->user_reg_hint_type = QLINK_USER_REG_HINT_CELL_BASE;
2276 		break;
2277 	case NL80211_USER_REG_HINT_INDOOR:
2278 		cmd->user_reg_hint_type = QLINK_USER_REG_HINT_INDOOR;
2279 		break;
2280 	}
2281 
2282 	switch (req->dfs_region) {
2283 	case NL80211_DFS_FCC:
2284 		cmd->dfs_region = QLINK_DFS_FCC;
2285 		break;
2286 	case NL80211_DFS_ETSI:
2287 		cmd->dfs_region = QLINK_DFS_ETSI;
2288 		break;
2289 	case NL80211_DFS_JP:
2290 		cmd->dfs_region = QLINK_DFS_JP;
2291 		break;
2292 	default:
2293 		cmd->dfs_region = QLINK_DFS_UNSET;
2294 		break;
2295 	}
2296 
2297 	cmd->slave_radar = slave_radar;
2298 	cmd->dfs_offload = dfs_offload;
2299 	cmd->num_channels = 0;
2300 
2301 	for (band = 0; band < NUM_NL80211_BANDS; band++) {
2302 		unsigned int i;
2303 
2304 		cfg_band = wiphy->bands[band];
2305 		if (!cfg_band)
2306 			continue;
2307 
2308 		cmd->num_channels += cfg_band->n_channels;
2309 
2310 		for (i = 0; i < cfg_band->n_channels; ++i) {
2311 			qtnf_cmd_channel_tlv_add(cmd_skb,
2312 						 &cfg_band->channels[i]);
2313 		}
2314 	}
2315 
2316 	qtnf_bus_lock(bus);
2317 	ret = qtnf_cmd_send(bus, cmd_skb);
2318 	qtnf_bus_unlock(bus);
2319 
2320 	return ret;
2321 }
2322 
2323 static int
2324 qtnf_cmd_resp_proc_chan_stat_info(struct survey_info *survey,
2325 				  const u8 *payload, size_t payload_len)
2326 {
2327 	const struct qlink_chan_stats *stats = NULL;
2328 	const struct qlink_tlv_hdr *tlv;
2329 	u16 tlv_value_len;
2330 	u16 tlv_type;
2331 	const u8 *map = NULL;
2332 	unsigned int map_len = 0;
2333 	unsigned int stats_len = 0;
2334 
2335 	qlink_for_each_tlv(tlv, payload, payload_len) {
2336 		tlv_type = le16_to_cpu(tlv->type);
2337 		tlv_value_len = le16_to_cpu(tlv->len);
2338 
2339 		switch (tlv_type) {
2340 		case QTN_TLV_ID_BITMAP:
2341 			map = tlv->val;
2342 			map_len = tlv_value_len;
2343 			break;
2344 		case QTN_TLV_ID_CHANNEL_STATS:
2345 			stats = (struct qlink_chan_stats *)tlv->val;
2346 			stats_len = tlv_value_len;
2347 			break;
2348 		default:
2349 			pr_info("Unknown TLV type: %#x\n", tlv_type);
2350 			break;
2351 		}
2352 	}
2353 
2354 	if (!qlink_tlv_parsing_ok(tlv, payload, payload_len)) {
2355 		pr_err("Malformed TLV buffer\n");
2356 		return -EINVAL;
2357 	}
2358 
2359 	if (!map || !stats)
2360 		return 0;
2361 
2362 #define qtnf_chan_stat_avail(stat_name, bitn)	\
2363 	(qtnf_utils_is_bit_set(map, bitn, map_len) && \
2364 	 (offsetofend(struct qlink_chan_stats, stat_name) <= stats_len))
2365 
2366 	if (qtnf_chan_stat_avail(time_on, QLINK_CHAN_STAT_TIME_ON)) {
2367 		survey->filled |= SURVEY_INFO_TIME;
2368 		survey->time = le64_to_cpu(stats->time_on);
2369 	}
2370 
2371 	if (qtnf_chan_stat_avail(time_tx, QLINK_CHAN_STAT_TIME_TX)) {
2372 		survey->filled |= SURVEY_INFO_TIME_TX;
2373 		survey->time_tx = le64_to_cpu(stats->time_tx);
2374 	}
2375 
2376 	if (qtnf_chan_stat_avail(time_rx, QLINK_CHAN_STAT_TIME_RX)) {
2377 		survey->filled |= SURVEY_INFO_TIME_RX;
2378 		survey->time_rx = le64_to_cpu(stats->time_rx);
2379 	}
2380 
2381 	if (qtnf_chan_stat_avail(cca_busy, QLINK_CHAN_STAT_CCA_BUSY)) {
2382 		survey->filled |= SURVEY_INFO_TIME_BUSY;
2383 		survey->time_busy = le64_to_cpu(stats->cca_busy);
2384 	}
2385 
2386 	if (qtnf_chan_stat_avail(cca_busy_ext, QLINK_CHAN_STAT_CCA_BUSY_EXT)) {
2387 		survey->filled |= SURVEY_INFO_TIME_EXT_BUSY;
2388 		survey->time_ext_busy = le64_to_cpu(stats->cca_busy_ext);
2389 	}
2390 
2391 	if (qtnf_chan_stat_avail(time_scan, QLINK_CHAN_STAT_TIME_SCAN)) {
2392 		survey->filled |= SURVEY_INFO_TIME_SCAN;
2393 		survey->time_scan = le64_to_cpu(stats->time_scan);
2394 	}
2395 
2396 	if (qtnf_chan_stat_avail(chan_noise, QLINK_CHAN_STAT_CHAN_NOISE)) {
2397 		survey->filled |= SURVEY_INFO_NOISE_DBM;
2398 		survey->noise = stats->chan_noise;
2399 	}
2400 
2401 #undef qtnf_chan_stat_avail
2402 
2403 	return 0;
2404 }
2405 
2406 int qtnf_cmd_get_chan_stats(struct qtnf_wmac *mac, u32 chan_freq,
2407 			    struct survey_info *survey)
2408 {
2409 	struct sk_buff *cmd_skb, *resp_skb = NULL;
2410 	struct qlink_cmd_get_chan_stats *cmd;
2411 	struct qlink_resp_get_chan_stats *resp;
2412 	size_t var_data_len = 0;
2413 	int ret = 0;
2414 
2415 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, QLINK_VIFID_RSVD,
2416 					    QLINK_CMD_CHAN_STATS,
2417 					    sizeof(*cmd));
2418 	if (!cmd_skb)
2419 		return -ENOMEM;
2420 
2421 	cmd = (struct qlink_cmd_get_chan_stats *)cmd_skb->data;
2422 	cmd->channel_freq = cpu_to_le32(chan_freq);
2423 
2424 	qtnf_bus_lock(mac->bus);
2425 	ret = qtnf_cmd_send_with_reply(mac->bus, cmd_skb, &resp_skb,
2426 				       sizeof(*resp), &var_data_len);
2427 	qtnf_bus_unlock(mac->bus);
2428 
2429 	if (ret)
2430 		goto out;
2431 
2432 	resp = (struct qlink_resp_get_chan_stats *)resp_skb->data;
2433 
2434 	if (le32_to_cpu(resp->chan_freq) != chan_freq) {
2435 		pr_err("[MAC%u] channel stats freq %u != requested %u\n",
2436 		       mac->macid, le32_to_cpu(resp->chan_freq), chan_freq);
2437 		ret = -EINVAL;
2438 		goto out;
2439 	}
2440 
2441 	ret = qtnf_cmd_resp_proc_chan_stat_info(survey, resp->info,
2442 						var_data_len);
2443 
2444 out:
2445 	consume_skb(resp_skb);
2446 
2447 	return ret;
2448 }
2449 
2450 int qtnf_cmd_send_chan_switch(struct qtnf_vif *vif,
2451 			      struct cfg80211_csa_settings *params)
2452 {
2453 	struct qtnf_wmac *mac = vif->mac;
2454 	struct qlink_cmd_chan_switch *cmd;
2455 	struct sk_buff *cmd_skb;
2456 	int ret;
2457 	u64 flags = 0;
2458 
2459 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(mac->macid, vif->vifid,
2460 					    QLINK_CMD_CHAN_SWITCH,
2461 					    sizeof(*cmd));
2462 	if (!cmd_skb)
2463 		return -ENOMEM;
2464 
2465 	if (params->radar_required)
2466 		flags |= QLINK_CHAN_SW_RADAR_REQUIRED;
2467 
2468 	if (params->block_tx)
2469 		flags |= QLINK_CHAN_SW_BLOCK_TX;
2470 
2471 	cmd = (struct qlink_cmd_chan_switch *)cmd_skb->data;
2472 	qlink_chandef_cfg2q(&params->chandef, &cmd->channel);
2473 	cmd->flags = cpu_to_le64(flags);
2474 	cmd->beacon_count = params->count;
2475 
2476 	qtnf_bus_lock(mac->bus);
2477 	ret = qtnf_cmd_send(mac->bus, cmd_skb);
2478 	qtnf_bus_unlock(mac->bus);
2479 
2480 	return ret;
2481 }
2482 
2483 int qtnf_cmd_get_channel(struct qtnf_vif *vif, struct cfg80211_chan_def *chdef)
2484 {
2485 	struct qtnf_bus *bus = vif->mac->bus;
2486 	const struct qlink_resp_channel_get *resp;
2487 	struct sk_buff *cmd_skb;
2488 	struct sk_buff *resp_skb = NULL;
2489 	int ret;
2490 
2491 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2492 					    QLINK_CMD_CHAN_GET,
2493 					    sizeof(struct qlink_cmd));
2494 	if (!cmd_skb)
2495 		return -ENOMEM;
2496 
2497 	qtnf_bus_lock(bus);
2498 	ret = qtnf_cmd_send_with_reply(bus, cmd_skb, &resp_skb,
2499 				       sizeof(*resp), NULL);
2500 	if (ret)
2501 		goto out;
2502 
2503 	resp = (const struct qlink_resp_channel_get *)resp_skb->data;
2504 	qlink_chandef_q2cfg(priv_to_wiphy(vif->mac), &resp->chan, chdef);
2505 
2506 out:
2507 	qtnf_bus_unlock(bus);
2508 	consume_skb(resp_skb);
2509 
2510 	return ret;
2511 }
2512 
2513 int qtnf_cmd_start_cac(const struct qtnf_vif *vif,
2514 		       const struct cfg80211_chan_def *chdef,
2515 		       u32 cac_time_ms)
2516 {
2517 	struct qtnf_bus *bus = vif->mac->bus;
2518 	struct sk_buff *cmd_skb;
2519 	struct qlink_cmd_start_cac *cmd;
2520 	int ret;
2521 
2522 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2523 					    QLINK_CMD_START_CAC,
2524 					    sizeof(*cmd));
2525 	if (!cmd_skb)
2526 		return -ENOMEM;
2527 
2528 	cmd = (struct qlink_cmd_start_cac *)cmd_skb->data;
2529 	cmd->cac_time_ms = cpu_to_le32(cac_time_ms);
2530 	qlink_chandef_cfg2q(chdef, &cmd->chan);
2531 
2532 	qtnf_bus_lock(bus);
2533 	ret = qtnf_cmd_send(bus, cmd_skb);
2534 	qtnf_bus_unlock(bus);
2535 
2536 	return ret;
2537 }
2538 
2539 int qtnf_cmd_set_mac_acl(const struct qtnf_vif *vif,
2540 			 const struct cfg80211_acl_data *params)
2541 {
2542 	struct qtnf_bus *bus = vif->mac->bus;
2543 	struct sk_buff *cmd_skb;
2544 	struct qlink_tlv_hdr *tlv;
2545 	size_t acl_size = struct_size(params, mac_addrs, params->n_acl_entries);
2546 	int ret;
2547 
2548 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2549 					    QLINK_CMD_SET_MAC_ACL,
2550 					    sizeof(struct qlink_cmd));
2551 	if (!cmd_skb)
2552 		return -ENOMEM;
2553 
2554 	tlv = skb_put(cmd_skb, sizeof(*tlv) + round_up(acl_size, QLINK_ALIGN));
2555 	tlv->type = cpu_to_le16(QTN_TLV_ID_ACL_DATA);
2556 	tlv->len = cpu_to_le16(acl_size);
2557 	qlink_acl_data_cfg2q(params, (struct qlink_acl_data *)tlv->val);
2558 
2559 	qtnf_bus_lock(bus);
2560 	ret = qtnf_cmd_send(bus, cmd_skb);
2561 	qtnf_bus_unlock(bus);
2562 
2563 	return ret;
2564 }
2565 
2566 int qtnf_cmd_send_pm_set(const struct qtnf_vif *vif, u8 pm_mode, int timeout)
2567 {
2568 	struct qtnf_bus *bus = vif->mac->bus;
2569 	struct sk_buff *cmd_skb;
2570 	struct qlink_cmd_pm_set *cmd;
2571 	int ret = 0;
2572 
2573 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2574 					    QLINK_CMD_PM_SET, sizeof(*cmd));
2575 	if (!cmd_skb)
2576 		return -ENOMEM;
2577 
2578 	cmd = (struct qlink_cmd_pm_set *)cmd_skb->data;
2579 	cmd->pm_mode = pm_mode;
2580 	cmd->pm_standby_timer = cpu_to_le32(timeout);
2581 
2582 	qtnf_bus_lock(bus);
2583 
2584 	ret = qtnf_cmd_send(bus, cmd_skb);
2585 
2586 	qtnf_bus_unlock(bus);
2587 
2588 	return ret;
2589 }
2590 
2591 int qtnf_cmd_get_tx_power(const struct qtnf_vif *vif, int *dbm)
2592 {
2593 	struct qtnf_bus *bus = vif->mac->bus;
2594 	const struct qlink_resp_txpwr *resp;
2595 	struct sk_buff *resp_skb = NULL;
2596 	struct qlink_cmd_txpwr *cmd;
2597 	struct sk_buff *cmd_skb;
2598 	int ret = 0;
2599 
2600 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2601 					    QLINK_CMD_TXPWR, sizeof(*cmd));
2602 	if (!cmd_skb)
2603 		return -ENOMEM;
2604 
2605 	cmd = (struct qlink_cmd_txpwr *)cmd_skb->data;
2606 	cmd->op_type = QLINK_TXPWR_GET;
2607 
2608 	qtnf_bus_lock(bus);
2609 
2610 	ret = qtnf_cmd_send_with_reply(bus, cmd_skb, &resp_skb,
2611 				       sizeof(*resp), NULL);
2612 	if (ret)
2613 		goto out;
2614 
2615 	resp = (const struct qlink_resp_txpwr *)resp_skb->data;
2616 	*dbm = MBM_TO_DBM(le32_to_cpu(resp->txpwr));
2617 
2618 out:
2619 	qtnf_bus_unlock(bus);
2620 	consume_skb(resp_skb);
2621 
2622 	return ret;
2623 }
2624 
2625 int qtnf_cmd_set_tx_power(const struct qtnf_vif *vif,
2626 			  enum nl80211_tx_power_setting type, int mbm)
2627 {
2628 	struct qtnf_bus *bus = vif->mac->bus;
2629 	const struct qlink_resp_txpwr *resp;
2630 	struct sk_buff *resp_skb = NULL;
2631 	struct qlink_cmd_txpwr *cmd;
2632 	struct sk_buff *cmd_skb;
2633 	int ret = 0;
2634 
2635 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2636 					    QLINK_CMD_TXPWR, sizeof(*cmd));
2637 	if (!cmd_skb)
2638 		return -ENOMEM;
2639 
2640 	cmd = (struct qlink_cmd_txpwr *)cmd_skb->data;
2641 	cmd->op_type = QLINK_TXPWR_SET;
2642 	cmd->txpwr_setting = type;
2643 	cmd->txpwr = cpu_to_le32(mbm);
2644 
2645 	qtnf_bus_lock(bus);
2646 
2647 	ret = qtnf_cmd_send_with_reply(bus, cmd_skb, &resp_skb,
2648 				       sizeof(*resp), NULL);
2649 
2650 	qtnf_bus_unlock(bus);
2651 	consume_skb(resp_skb);
2652 
2653 	return ret;
2654 }
2655 
2656 int qtnf_cmd_send_wowlan_set(const struct qtnf_vif *vif,
2657 			     const struct cfg80211_wowlan *wowl)
2658 {
2659 	struct qtnf_bus *bus = vif->mac->bus;
2660 	struct sk_buff *cmd_skb;
2661 	struct qlink_cmd_wowlan_set *cmd;
2662 	u32 triggers = 0;
2663 	int count = 0;
2664 	int ret = 0;
2665 
2666 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2667 					    QLINK_CMD_WOWLAN_SET, sizeof(*cmd));
2668 	if (!cmd_skb)
2669 		return -ENOMEM;
2670 
2671 	qtnf_bus_lock(bus);
2672 
2673 	cmd = (struct qlink_cmd_wowlan_set *)cmd_skb->data;
2674 
2675 	if (wowl) {
2676 		if (wowl->disconnect)
2677 			triggers |=  QLINK_WOWLAN_TRIG_DISCONNECT;
2678 
2679 		if (wowl->magic_pkt)
2680 			triggers |= QLINK_WOWLAN_TRIG_MAGIC_PKT;
2681 
2682 		if (wowl->n_patterns && wowl->patterns) {
2683 			triggers |= QLINK_WOWLAN_TRIG_PATTERN_PKT;
2684 			while (count < wowl->n_patterns) {
2685 				qtnf_cmd_skb_put_tlv_arr(cmd_skb,
2686 					QTN_TLV_ID_WOWLAN_PATTERN,
2687 					wowl->patterns[count].pattern,
2688 					wowl->patterns[count].pattern_len);
2689 				count++;
2690 			}
2691 		}
2692 	}
2693 
2694 	cmd->triggers = cpu_to_le32(triggers);
2695 
2696 	ret = qtnf_cmd_send(bus, cmd_skb);
2697 
2698 	qtnf_bus_unlock(bus);
2699 	return ret;
2700 }
2701 
2702 int qtnf_cmd_netdev_changeupper(const struct qtnf_vif *vif, int br_domain)
2703 {
2704 	struct qtnf_bus *bus = vif->mac->bus;
2705 	struct sk_buff *cmd_skb;
2706 	struct qlink_cmd_ndev_changeupper *cmd;
2707 	int ret;
2708 
2709 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2710 					    QLINK_CMD_NDEV_EVENT,
2711 					    sizeof(*cmd));
2712 	if (!cmd_skb)
2713 		return -ENOMEM;
2714 
2715 	pr_debug("[VIF%u.%u] set broadcast domain to %d\n",
2716 		 vif->mac->macid, vif->vifid, br_domain);
2717 
2718 	cmd = (struct qlink_cmd_ndev_changeupper *)cmd_skb->data;
2719 	cmd->nehdr.event = cpu_to_le16(QLINK_NDEV_EVENT_CHANGEUPPER);
2720 	cmd->upper_type = QLINK_NDEV_UPPER_TYPE_BRIDGE;
2721 	cmd->br_domain = cpu_to_le32(br_domain);
2722 
2723 	qtnf_bus_lock(bus);
2724 	ret = qtnf_cmd_send(bus, cmd_skb);
2725 	qtnf_bus_unlock(bus);
2726 
2727 	if (ret)
2728 		pr_err("[VIF%u.%u] failed to set broadcast domain\n",
2729 		       vif->mac->macid, vif->vifid);
2730 
2731 	return ret;
2732 }
2733 
2734 int qtnf_cmd_send_update_owe(struct qtnf_vif *vif,
2735 			     struct cfg80211_update_owe_info *owe)
2736 {
2737 	struct qlink_cmd_update_owe *cmd;
2738 	struct sk_buff *cmd_skb;
2739 	int ret;
2740 
2741 	if (sizeof(*cmd) + owe->ie_len > QTNF_MAX_CMD_BUF_SIZE) {
2742 		pr_warn("VIF%u.%u: OWE update IEs too big: %zu\n",
2743 			vif->mac->macid, vif->vifid, owe->ie_len);
2744 		return -E2BIG;
2745 	}
2746 
2747 	cmd_skb = qtnf_cmd_alloc_new_cmdskb(vif->mac->macid, vif->vifid,
2748 					    QLINK_CMD_UPDATE_OWE,
2749 					    sizeof(*cmd));
2750 	if (!cmd_skb)
2751 		return -ENOMEM;
2752 
2753 	cmd = (struct qlink_cmd_update_owe *)cmd_skb->data;
2754 	ether_addr_copy(cmd->peer, owe->peer);
2755 	cmd->status = cpu_to_le16(owe->status);
2756 	if (owe->ie_len && owe->ie)
2757 		qtnf_cmd_skb_put_buffer(cmd_skb, owe->ie, owe->ie_len);
2758 
2759 	qtnf_bus_lock(vif->mac->bus);
2760 	ret = qtnf_cmd_send(vif->mac->bus, cmd_skb);
2761 	qtnf_bus_unlock(vif->mac->bus);
2762 
2763 	return ret;
2764 }
2765