1	// SPDX-License-Identifier: GPL-2.0+
2	/* Copyright (c) 2015-2016 Quantenna Communications. All rights reserved. */
3
4	#include <linux/types.h>
5	#include <linux/skbuff.h>
6
7	#include "cfg80211.h"
8	#include "core.h"
9	#include "qlink.h"
10	#include "qlink_util.h"
11	#include "bus.h"
12	#include "commands.h"
13
14	/* Let device itself to select best values for current conditions */
15	#define QTNF_SCAN_TIME_AUTO 0
16
17	#define QTNF_SCAN_DWELL_ACTIVE_DEFAULT 90
18	#define QTNF_SCAN_DWELL_PASSIVE_DEFAULT 100
19	#define QTNF_SCAN_SAMPLE_DURATION_DEFAULT QTNF_SCAN_TIME_AUTO
20
21	static int qtnf_cmd_check_reply_header(const struct qlink_resp *resp,
22	u16 cmd_id, u8 mac_id, u8 vif_id,
23	size_t resp_size)
24	{
25	if (unlikely(le16_to_cpu(resp->cmd_id) != cmd_id)) {
26	pr_warn("VIF%u.%u CMD%x: bad cmd_id in response: 0x%.4X\n",
27	mac_id, vif_id, cmd_id, le16_to_cpu(resp->cmd_id));
28	return -EINVAL;
29	}
30
31	if (unlikely(resp->macid != mac_id)) {
32	pr_warn("VIF%u.%u CMD%x: bad MAC in response: %u\n",
33	mac_id, vif_id, cmd_id, resp->macid);
34	return -EINVAL;
35	}
36
37	if (unlikely(resp->vifid != vif_id)) {
38	pr_warn("VIF%u.%u CMD%x: bad VIF in response: %u\n",
39	mac_id, vif_id, cmd_id, resp->vifid);
40	return -EINVAL;
41	}
42
43	if (unlikely(le16_to_cpu(resp->mhdr.len) < resp_size)) {
44	pr_warn("VIF%u.%u CMD%x: bad response size %u < %zu\n",
45	mac_id, vif_id, cmd_id,
46	le16_to_cpu(resp->mhdr.len), resp_size);
47	return -ENOSPC;
48	}
49
50	return 0;
51	}
52
53	static int qtnf_cmd_resp_result_decode(enum qlink_cmd_result qcode)
54	{
55	switch (qcode) {
56	case QLINK_CMD_RESULT_OK:
57	return 0;
58	case QLINK_CMD_RESULT_INVALID:
59	return -EINVAL;
60	case QLINK_CMD_RESULT_ENOTSUPP:
61	return -ENOTSUPP;
62	case QLINK_CMD_RESULT_ENOTFOUND:
63	return -ENOENT;
64	case QLINK_CMD_RESULT_EALREADY:
65	return -EALREADY;
66	case QLINK_CMD_RESULT_EADDRINUSE:
67	return -EADDRINUSE;
68	case QLINK_CMD_RESULT_EADDRNOTAVAIL:
69	return -EADDRNOTAVAIL;
70	case QLINK_CMD_RESULT_EBUSY:
71	return -EBUSY;
72	default:
73	return -EFAULT;
74	}
75	}
76
77	static int qtnf_cmd_send_with_reply(struct qtnf_bus *bus,
78	struct sk_buff *cmd_skb,
79	struct sk_buff **response_skb,
80	size_t const_resp_size,
81	size_t *var_resp_size)
82	{
83	struct qlink_cmd *cmd;
84	struct qlink_resp *resp = NULL;
85	struct sk_buff *resp_skb = NULL;
86	int resp_res = 0;
87	u16 cmd_id;
88	u8 mac_id;
89	u8 vif_id;
90	int ret;
91
92	cmd = (struct qlink_cmd *)cmd_skb->data;
93	cmd_id = le16_to_cpu(cmd->cmd_id);
94	mac_id = cmd->macid;
95	vif_id = cmd->vifid;
96	cmd->mhdr.len = cpu_to_le16(cmd_skb->len);
97
98	pr_debug("VIF%u.%u cmd=0x%.4X\n", mac_id, vif_id, cmd_id);
99
100	if (!qtnf_fw_is_up(bus) && cmd_id != QLINK_CMD_FW_INIT) {
101	pr_warn("VIF%u.%u: drop cmd 0x%.4X in fw state %d\n",
102	mac_id, vif_id, cmd_id, bus->fw_state);
103	dev_kfree_skb(cmd_skb);
104	return -ENODEV;
105	}
106
107	ret = qtnf_trans_send_cmd_with_resp(bus, cmd_skb, response_skb: &resp_skb);
108	if (ret)
109	goto out;
110
111	if (WARN_ON(!resp_skb || !resp_skb->data)) {
112	ret = -EFAULT;
113	goto out;
114	}
115
116	resp = (struct qlink_resp *)resp_skb->data;
117	resp_res = le16_to_cpu(resp->result);
118	ret = qtnf_cmd_check_reply_header(resp, cmd_id, mac_id, vif_id,
119	resp_size: const_resp_size);
120	if (ret)
121	goto out;
122
123	/* Return length of variable part of response */
124	if (response_skb && var_resp_size)
125	*var_resp_size = le16_to_cpu(resp->mhdr.len) - const_resp_size;
126
127	out:
128	if (response_skb)
129	*response_skb = resp_skb;
130	else
131	consume_skb(skb: resp_skb);
132
133	if (!ret)
134	return qtnf_cmd_resp_result_decode(qcode: resp_res);
135
136	pr_warn("VIF%u.%u: cmd 0x%.4X failed: %d\n",
137	mac_id, vif_id, cmd_id, ret);
138
139	return ret;
140	}
141
142	static inline int qtnf_cmd_send(struct qtnf_bus *bus, struct sk_buff *cmd_skb)
143	{
144	return qtnf_cmd_send_with_reply(bus, cmd_skb, NULL,
145	const_resp_size: sizeof(struct qlink_resp), NULL);
146	}
147
148	static struct sk_buff *qtnf_cmd_alloc_new_cmdskb(u8 macid, u8 vifid, u16 cmd_no,
149	size_t cmd_size)
150	{
151	struct qlink_cmd *cmd;
152	struct sk_buff *cmd_skb;
153
154	cmd_skb = __dev_alloc_skb(length: sizeof(*cmd) +
155	QTNF_MAX_CMD_BUF_SIZE, GFP_KERNEL);
156	if (unlikely(!cmd_skb)) {
157	pr_err("VIF%u.%u CMD %u: alloc failed\n", macid, vifid, cmd_no);
158	return NULL;
159	}
160
161	skb_put_zero(skb: cmd_skb, len: cmd_size);
162
163	cmd = (struct qlink_cmd *)cmd_skb->data;
164	cmd->mhdr.len = cpu_to_le16(cmd_skb->len);
165	cmd->mhdr.type = cpu_to_le16(QLINK_MSG_TYPE_CMD);
166	cmd->cmd_id = cpu_to_le16(cmd_no);
167	cmd->macid = macid;
168	cmd->vifid = vifid;
169
170	return cmd_skb;
171	}
172
173	static void qtnf_cmd_tlv_ie_set_add(struct sk_buff *cmd_skb, u8 frame_type,
174	const u8 *buf, size_t len)
175	{
176	struct qlink_tlv_ie_set *tlv;
177
178	tlv = (struct qlink_tlv_ie_set *)skb_put(skb: cmd_skb, len: sizeof(*tlv) +
179	round_up(len, QLINK_ALIGN));
180	tlv->hdr.type = cpu_to_le16(QTN_TLV_ID_IE_SET);
181	tlv->hdr.len = cpu_to_le16(len + sizeof(*tlv) - sizeof(tlv->hdr));
182	tlv->type = frame_type;
183	tlv->flags = 0;
184
185	if (len && buf)
186	memcpy(tlv->ie_data, buf, len);
187	}
188
189	static bool qtnf_cmd_start_ap_can_fit(const struct qtnf_vif *vif,
190	const struct cfg80211_ap_settings *s)
191	{
192	unsigned int len = sizeof(struct qlink_cmd_start_ap);
193
194	len += round_up(s->ssid_len, QLINK_ALIGN);
195	len += round_up(s->beacon.head_len, QLINK_ALIGN);
196	len += round_up(s->beacon.tail_len, QLINK_ALIGN);
197	len += round_up(s->beacon.beacon_ies_len, QLINK_ALIGN);
198	len += round_up(s->beacon.proberesp_ies_len, QLINK_ALIGN);
199	len += round_up(s->beacon.assocresp_ies_len, QLINK_ALIGN);
200	len += round_up(s->beacon.probe_resp_len, QLINK_ALIGN);
201
202	if (cfg80211_chandef_valid(chandef: &s->chandef))
203	len += sizeof(struct qlink_tlv_chandef);
204
205	if (s->acl) {
206	unsigned int acl_len = struct_size(s->acl, mac_addrs,
207	s->acl->n_acl_entries);
208
209	len += sizeof(struct qlink_tlv_hdr) +
210	round_up(acl_len, QLINK_ALIGN);
211	}
212
213	if (len > (sizeof(struct qlink_cmd) + QTNF_MAX_CMD_BUF_SIZE)) {
214	pr_err("VIF%u.%u: can not fit AP settings: %u\n",
215	vif->mac->macid, vif->vifid, len);
216	return false;
217	}
218
219	return true;
220	}
221
222	static void qtnf_cmd_tlv_ie_ext_add(struct sk_buff *cmd_skb, u8 eid_ext,
223	const void *buf, size_t len)
224	{
225	struct qlink_tlv_ext_ie *tlv;
226
227	tlv = (struct qlink_tlv_ext_ie *)skb_put(skb: cmd_skb, len: sizeof(*tlv) + len);
228	tlv->hdr.type = cpu_to_le16(WLAN_EID_EXTENSION);
229	tlv->hdr.len = cpu_to_le16(sizeof(*tlv) + len - sizeof(tlv->hdr));
230	tlv->eid_ext = eid_ext;
231
232	if (len && buf)
233	memcpy(tlv->ie_data, buf, len);
234	}
235
236	int qtnf_cmd_send_start_ap(struct qtnf_vif *vif,
237	const struct cfg80211_ap_settings *s)
238	{
239	struct sk_buff *cmd_skb;
240	struct qlink_cmd_start_ap *cmd;
241	struct qlink_auth_encr *aen;
242	int ret;
243	int i;
244	int n;
245
246	if (!qtnf_cmd_start_ap_can_fit(vif, s))
247	return -E2BIG;
248
249	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
250	cmd_no: QLINK_CMD_START_AP,
251	cmd_size: sizeof(*cmd));
252	if (!cmd_skb)
253	return -ENOMEM;
254
255	cmd = (struct qlink_cmd_start_ap *)cmd_skb->data;
256	cmd->dtim_period = s->dtim_period;
257	cmd->beacon_interval = cpu_to_le16(s->beacon_interval);
258	cmd->hidden_ssid = qlink_hidden_ssid_nl2q(nl_val: s->hidden_ssid);
259	cmd->inactivity_timeout = cpu_to_le16(s->inactivity_timeout);
260	cmd->smps_mode = s->smps_mode;
261	cmd->p2p_ctwindow = s->p2p_ctwindow;
262	cmd->p2p_opp_ps = s->p2p_opp_ps;
263	cmd->pbss = s->pbss;
264	cmd->ht_required = s->ht_required;
265	cmd->vht_required = s->vht_required;
266	cmd->twt_responder = s->twt_responder;
267	if (s->he_obss_pd.enable) {
268	cmd->sr_params.sr_control |= QLINK_SR_SRG_INFORMATION_PRESENT;
269	cmd->sr_params.srg_obss_pd_min_offset =
270	s->he_obss_pd.min_offset;
271	cmd->sr_params.srg_obss_pd_max_offset =
272	s->he_obss_pd.max_offset;
273	}
274
275	aen = &cmd->aen;
276	aen->auth_type = s->auth_type;
277	aen->privacy = !!s->privacy;
278	aen->wpa_versions = cpu_to_le32(s->crypto.wpa_versions);
279	aen->cipher_group = cpu_to_le32(s->crypto.cipher_group);
280	aen->n_ciphers_pairwise = cpu_to_le32(s->crypto.n_ciphers_pairwise);
281	for (i = 0; i < QLINK_MAX_NR_CIPHER_SUITES; i++)
282	aen->ciphers_pairwise[i] =
283	cpu_to_le32(s->crypto.ciphers_pairwise[i]);
284	n = min(QLINK_MAX_NR_AKM_SUITES, s->crypto.n_akm_suites);
285	aen->n_akm_suites = cpu_to_le32(n);
286	for (i = 0; i < n; i++)
287	aen->akm_suites[i] = cpu_to_le32(s->crypto.akm_suites[i]);
288	aen->control_port = s->crypto.control_port;
289	aen->control_port_no_encrypt = s->crypto.control_port_no_encrypt;
290	aen->control_port_ethertype =
291	cpu_to_le16(be16_to_cpu(s->crypto.control_port_ethertype));
292
293	if (s->ssid && s->ssid_len > 0 && s->ssid_len <= IEEE80211_MAX_SSID_LEN)
294	qtnf_cmd_skb_put_tlv_arr(skb: cmd_skb, tlv_id: WLAN_EID_SSID, arr: s->ssid,
295	arr_len: s->ssid_len);
296
297	if (cfg80211_chandef_valid(chandef: &s->chandef)) {
298	struct qlink_tlv_chandef *chtlv =
299	(struct qlink_tlv_chandef *)skb_put(skb: cmd_skb,
300	len: sizeof(*chtlv));
301
302	chtlv->hdr.type = cpu_to_le16(QTN_TLV_ID_CHANDEF);
303	chtlv->hdr.len = cpu_to_le16(sizeof(*chtlv) -
304	sizeof(chtlv->hdr));
305	qlink_chandef_cfg2q(chdef: &s->chandef, qch: &chtlv->chdef);
306	}
307
308	qtnf_cmd_tlv_ie_set_add(cmd_skb, frame_type: QLINK_IE_SET_BEACON_HEAD,
309	buf: s->beacon.head, len: s->beacon.head_len);
310	qtnf_cmd_tlv_ie_set_add(cmd_skb, frame_type: QLINK_IE_SET_BEACON_TAIL,
311	buf: s->beacon.tail, len: s->beacon.tail_len);
312	qtnf_cmd_tlv_ie_set_add(cmd_skb, frame_type: QLINK_IE_SET_BEACON_IES,
313	buf: s->beacon.beacon_ies, len: s->beacon.beacon_ies_len);
314	qtnf_cmd_tlv_ie_set_add(cmd_skb, frame_type: QLINK_IE_SET_PROBE_RESP,
315	buf: s->beacon.probe_resp, len: s->beacon.probe_resp_len);
316	qtnf_cmd_tlv_ie_set_add(cmd_skb, frame_type: QLINK_IE_SET_PROBE_RESP_IES,
317	buf: s->beacon.proberesp_ies,
318	len: s->beacon.proberesp_ies_len);
319	qtnf_cmd_tlv_ie_set_add(cmd_skb, frame_type: QLINK_IE_SET_ASSOC_RESP,
320	buf: s->beacon.assocresp_ies,
321	len: s->beacon.assocresp_ies_len);
322
323	if (s->ht_cap) {
324	struct qlink_tlv_hdr *tlv = (struct qlink_tlv_hdr *)
325	skb_put(skb: cmd_skb, len: sizeof(*tlv) +
326	round_up(sizeof(*s->ht_cap), QLINK_ALIGN));
327
328	tlv->type = cpu_to_le16(WLAN_EID_HT_CAPABILITY);
329	tlv->len = cpu_to_le16(sizeof(*s->ht_cap));
330	memcpy(tlv->val, s->ht_cap, sizeof(*s->ht_cap));
331	}
332
333	if (s->vht_cap) {
334	struct qlink_tlv_hdr *tlv = (struct qlink_tlv_hdr *)
335	skb_put(skb: cmd_skb, len: sizeof(*tlv) + sizeof(*s->vht_cap));
336
337	tlv->type = cpu_to_le16(WLAN_EID_VHT_CAPABILITY);
338	tlv->len = cpu_to_le16(sizeof(*s->vht_cap));
339	memcpy(tlv->val, s->vht_cap, sizeof(*s->vht_cap));
340	}
341
342	if (s->he_cap)
343	qtnf_cmd_tlv_ie_ext_add(cmd_skb, eid_ext: WLAN_EID_EXT_HE_CAPABILITY,
344	buf: s->he_cap, len: sizeof(*s->he_cap));
345
346	if (s->acl) {
347	size_t acl_size = struct_size(s->acl, mac_addrs,
348	s->acl->n_acl_entries);
349	struct qlink_tlv_hdr *tlv =
350	skb_put(skb: cmd_skb,
351	len: sizeof(*tlv) + round_up(acl_size, QLINK_ALIGN));
352
353	tlv->type = cpu_to_le16(QTN_TLV_ID_ACL_DATA);
354	tlv->len = cpu_to_le16(acl_size);
355	qlink_acl_data_cfg2q(acl: s->acl, qacl: (struct qlink_acl_data *)tlv->val);
356	}
357
358	qtnf_bus_lock(bus: vif->mac->bus);
359	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
360	if (ret)
361	goto out;
362
363	netif_carrier_on(dev: vif->netdev);
364
365	out:
366	qtnf_bus_unlock(bus: vif->mac->bus);
367
368	return ret;
369	}
370
371	int qtnf_cmd_send_stop_ap(struct qtnf_vif *vif)
372	{
373	struct sk_buff *cmd_skb;
374	int ret;
375
376	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
377	cmd_no: QLINK_CMD_STOP_AP,
378	cmd_size: sizeof(struct qlink_cmd));
379	if (!cmd_skb)
380	return -ENOMEM;
381
382	qtnf_bus_lock(bus: vif->mac->bus);
383	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
384	qtnf_bus_unlock(bus: vif->mac->bus);
385
386	return ret;
387	}
388
389	int qtnf_cmd_send_register_mgmt(struct qtnf_vif *vif, u16 frame_type, bool reg)
390	{
391	struct sk_buff *cmd_skb;
392	struct qlink_cmd_mgmt_frame_register *cmd;
393	int ret;
394
395	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
396	cmd_no: QLINK_CMD_REGISTER_MGMT,
397	cmd_size: sizeof(*cmd));
398	if (!cmd_skb)
399	return -ENOMEM;
400
401	qtnf_bus_lock(bus: vif->mac->bus);
402
403	cmd = (struct qlink_cmd_mgmt_frame_register *)cmd_skb->data;
404	cmd->frame_type = cpu_to_le16(frame_type);
405	cmd->do_register = reg;
406
407	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
408
409	qtnf_bus_unlock(bus: vif->mac->bus);
410
411	return ret;
412	}
413
414	int qtnf_cmd_send_frame(struct qtnf_vif *vif, u32 cookie, u16 flags,
415	u16 freq, const u8 *buf, size_t len)
416	{
417	struct sk_buff *cmd_skb;
418	struct qlink_cmd_frame_tx *cmd;
419	int ret;
420
421	if (sizeof(*cmd) + len > QTNF_MAX_CMD_BUF_SIZE) {
422	pr_warn("VIF%u.%u: frame is too big: %zu\n", vif->mac->macid,
423	vif->vifid, len);
424	return -E2BIG;
425	}
426
427	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
428	cmd_no: QLINK_CMD_SEND_FRAME,
429	cmd_size: sizeof(*cmd));
430	if (!cmd_skb)
431	return -ENOMEM;
432
433	qtnf_bus_lock(bus: vif->mac->bus);
434
435	cmd = (struct qlink_cmd_frame_tx *)cmd_skb->data;
436	cmd->cookie = cpu_to_le32(cookie);
437	cmd->freq = cpu_to_le16(freq);
438	cmd->flags = cpu_to_le16(flags);
439
440	if (len && buf)
441	qtnf_cmd_skb_put_buffer(skb: cmd_skb, buf_src: buf, len);
442
443	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
444
445	qtnf_bus_unlock(bus: vif->mac->bus);
446
447	return ret;
448	}
449
450	int qtnf_cmd_send_mgmt_set_appie(struct qtnf_vif *vif, u8 frame_type,
451	const u8 *buf, size_t len)
452	{
453	struct sk_buff *cmd_skb;
454	int ret;
455
456	if (len > QTNF_MAX_CMD_BUF_SIZE) {
457	pr_warn("VIF%u.%u: %u frame is too big: %zu\n", vif->mac->macid,
458	vif->vifid, frame_type, len);
459	return -E2BIG;
460	}
461
462	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
463	cmd_no: QLINK_CMD_MGMT_SET_APPIE,
464	cmd_size: sizeof(struct qlink_cmd));
465	if (!cmd_skb)
466	return -ENOMEM;
467
468	qtnf_cmd_tlv_ie_set_add(cmd_skb, frame_type, buf, len);
469
470	qtnf_bus_lock(bus: vif->mac->bus);
471	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
472	qtnf_bus_unlock(bus: vif->mac->bus);
473
474	return ret;
475	}
476
477	static void
478	qtnf_sta_info_parse_rate(struct rate_info *rate_dst,
479	const struct qlink_sta_info_rate *rate_src)
480	{
481	rate_dst->legacy = get_unaligned_le16(p: &rate_src->rate) * 10;
482
483	rate_dst->mcs = rate_src->mcs;
484	rate_dst->nss = rate_src->nss;
485	rate_dst->flags = 0;
486
487	switch (rate_src->bw) {
488	case QLINK_CHAN_WIDTH_5:
489	rate_dst->bw = RATE_INFO_BW_5;
490	break;
491	case QLINK_CHAN_WIDTH_10:
492	rate_dst->bw = RATE_INFO_BW_10;
493	break;
494	case QLINK_CHAN_WIDTH_20:
495	case QLINK_CHAN_WIDTH_20_NOHT:
496	rate_dst->bw = RATE_INFO_BW_20;
497	break;
498	case QLINK_CHAN_WIDTH_40:
499	rate_dst->bw = RATE_INFO_BW_40;
500	break;
501	case QLINK_CHAN_WIDTH_80:
502	rate_dst->bw = RATE_INFO_BW_80;
503	break;
504	case QLINK_CHAN_WIDTH_160:
505	rate_dst->bw = RATE_INFO_BW_160;
506	break;
507	default:
508	rate_dst->bw = 0;
509	break;
510	}
511
512	if (rate_src->flags & QLINK_STA_INFO_RATE_FLAG_HT_MCS)
513	rate_dst->flags |= RATE_INFO_FLAGS_MCS;
514	else if (rate_src->flags & QLINK_STA_INFO_RATE_FLAG_VHT_MCS)
515	rate_dst->flags |= RATE_INFO_FLAGS_VHT_MCS;
516	else if (rate_src->flags & QLINK_STA_INFO_RATE_FLAG_HE_MCS)
517	rate_dst->flags |= RATE_INFO_FLAGS_HE_MCS;
518
519	if (rate_src->flags & QLINK_STA_INFO_RATE_FLAG_SHORT_GI)
520	rate_dst->flags |= RATE_INFO_FLAGS_SHORT_GI;
521	}
522
523	static void
524	qtnf_sta_info_parse_flags(struct nl80211_sta_flag_update *dst,
525	const struct qlink_sta_info_state *src)
526	{
527	u32 mask, value;
528
529	dst->mask = 0;
530	dst->set = 0;
531
532	mask = le32_to_cpu(src->mask);
533	value = le32_to_cpu(src->value);
534
535	if (mask & QLINK_STA_FLAG_AUTHORIZED) {
536	dst->mask |= BIT(NL80211_STA_FLAG_AUTHORIZED);
537	if (value & QLINK_STA_FLAG_AUTHORIZED)
538	dst->set |= BIT(NL80211_STA_FLAG_AUTHORIZED);
539	}
540
541	if (mask & QLINK_STA_FLAG_SHORT_PREAMBLE) {
542	dst->mask |= BIT(NL80211_STA_FLAG_SHORT_PREAMBLE);
543	if (value & QLINK_STA_FLAG_SHORT_PREAMBLE)
544	dst->set |= BIT(NL80211_STA_FLAG_SHORT_PREAMBLE);
545	}
546
547	if (mask & QLINK_STA_FLAG_WME) {
548	dst->mask |= BIT(NL80211_STA_FLAG_WME);
549	if (value & QLINK_STA_FLAG_WME)
550	dst->set |= BIT(NL80211_STA_FLAG_WME);
551	}
552
553	if (mask & QLINK_STA_FLAG_MFP) {
554	dst->mask |= BIT(NL80211_STA_FLAG_MFP);
555	if (value & QLINK_STA_FLAG_MFP)
556	dst->set |= BIT(NL80211_STA_FLAG_MFP);
557	}
558
559	if (mask & QLINK_STA_FLAG_AUTHENTICATED) {
560	dst->mask |= BIT(NL80211_STA_FLAG_AUTHENTICATED);
561	if (value & QLINK_STA_FLAG_AUTHENTICATED)
562	dst->set |= BIT(NL80211_STA_FLAG_AUTHENTICATED);
563	}
564
565	if (mask & QLINK_STA_FLAG_TDLS_PEER) {
566	dst->mask |= BIT(NL80211_STA_FLAG_TDLS_PEER);
567	if (value & QLINK_STA_FLAG_TDLS_PEER)
568	dst->set |= BIT(NL80211_STA_FLAG_TDLS_PEER);
569	}
570
571	if (mask & QLINK_STA_FLAG_ASSOCIATED) {
572	dst->mask |= BIT(NL80211_STA_FLAG_ASSOCIATED);
573	if (value & QLINK_STA_FLAG_ASSOCIATED)
574	dst->set |= BIT(NL80211_STA_FLAG_ASSOCIATED);
575	}
576	}
577
578	static void
579	qtnf_cmd_sta_info_parse(struct station_info *sinfo, const u8 *data,
580	size_t resp_size)
581	{
582	const struct qlink_tlv_hdr *tlv;
583	const struct qlink_sta_stats *stats = NULL;
584	const u8 *map = NULL;
585	unsigned int map_len = 0;
586	unsigned int stats_len = 0;
587	u16 tlv_len;
588
589	#define qtnf_sta_stat_avail(stat_name, bitn) \
590	(qtnf_utils_is_bit_set(map, bitn, map_len) && \
591	(offsetofend(struct qlink_sta_stats, stat_name) <= stats_len))
592
593	qlink_for_each_tlv(tlv, data, resp_size) {
594	tlv_len = le16_to_cpu(tlv->len);
595
596	switch (le16_to_cpu(tlv->type)) {
597	case QTN_TLV_ID_BITMAP:
598	map_len = tlv_len;
599	map = tlv->val;
600	break;
601	case QTN_TLV_ID_STA_STATS:
602	stats_len = tlv_len;
603	stats = (const struct qlink_sta_stats *)tlv->val;
604	break;
605	default:
606	break;
607	}
608	}
609
610	if (!qlink_tlv_parsing_ok(tlv, data, resp_size)) {
611	pr_err("Malformed TLV buffer\n");
612	return;
613	}
614
615	if (!map || !stats)
616	return;
617
618	if (qtnf_sta_stat_avail(inactive_time, QLINK_STA_INFO_INACTIVE_TIME)) {
619	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_INACTIVE_TIME);
620	sinfo->inactive_time = le32_to_cpu(stats->inactive_time);
621	}
622
623	if (qtnf_sta_stat_avail(connected_time,
624	QLINK_STA_INFO_CONNECTED_TIME)) {
625	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_CONNECTED_TIME);
626	sinfo->connected_time = le32_to_cpu(stats->connected_time);
627	}
628
629	if (qtnf_sta_stat_avail(signal, QLINK_STA_INFO_SIGNAL)) {
630	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_SIGNAL);
631	sinfo->signal = stats->signal - QLINK_RSSI_OFFSET;
632	}
633
634	if (qtnf_sta_stat_avail(signal_avg, QLINK_STA_INFO_SIGNAL_AVG)) {
635	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_SIGNAL_AVG);
636	sinfo->signal_avg = stats->signal_avg - QLINK_RSSI_OFFSET;
637	}
638
639	if (qtnf_sta_stat_avail(rxrate, QLINK_STA_INFO_RX_BITRATE)) {
640	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_BITRATE);
641	qtnf_sta_info_parse_rate(rate_dst: &sinfo->rxrate, rate_src: &stats->rxrate);
642	}
643
644	if (qtnf_sta_stat_avail(txrate, QLINK_STA_INFO_TX_BITRATE)) {
645	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_BITRATE);
646	qtnf_sta_info_parse_rate(rate_dst: &sinfo->txrate, rate_src: &stats->txrate);
647	}
648
649	if (qtnf_sta_stat_avail(sta_flags, QLINK_STA_INFO_STA_FLAGS)) {
650	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_STA_FLAGS);
651	qtnf_sta_info_parse_flags(dst: &sinfo->sta_flags, src: &stats->sta_flags);
652	}
653
654	if (qtnf_sta_stat_avail(rx_bytes, QLINK_STA_INFO_RX_BYTES)) {
655	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_BYTES);
656	sinfo->rx_bytes = le64_to_cpu(stats->rx_bytes);
657	}
658
659	if (qtnf_sta_stat_avail(tx_bytes, QLINK_STA_INFO_TX_BYTES)) {
660	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_BYTES);
661	sinfo->tx_bytes = le64_to_cpu(stats->tx_bytes);
662	}
663
664	if (qtnf_sta_stat_avail(rx_bytes, QLINK_STA_INFO_RX_BYTES64)) {
665	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_BYTES64);
666	sinfo->rx_bytes = le64_to_cpu(stats->rx_bytes);
667	}
668
669	if (qtnf_sta_stat_avail(tx_bytes, QLINK_STA_INFO_TX_BYTES64)) {
670	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_BYTES64);
671	sinfo->tx_bytes = le64_to_cpu(stats->tx_bytes);
672	}
673
674	if (qtnf_sta_stat_avail(rx_packets, QLINK_STA_INFO_RX_PACKETS)) {
675	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_PACKETS);
676	sinfo->rx_packets = le32_to_cpu(stats->rx_packets);
677	}
678
679	if (qtnf_sta_stat_avail(tx_packets, QLINK_STA_INFO_TX_PACKETS)) {
680	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_PACKETS);
681	sinfo->tx_packets = le32_to_cpu(stats->tx_packets);
682	}
683
684	if (qtnf_sta_stat_avail(rx_beacon, QLINK_STA_INFO_BEACON_RX)) {
685	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_BEACON_RX);
686	sinfo->rx_beacon = le64_to_cpu(stats->rx_beacon);
687	}
688
689	if (qtnf_sta_stat_avail(rx_dropped_misc, QLINK_STA_INFO_RX_DROP_MISC)) {
690	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_RX_DROP_MISC);
691	sinfo->rx_dropped_misc = le32_to_cpu(stats->rx_dropped_misc);
692	}
693
694	if (qtnf_sta_stat_avail(tx_failed, QLINK_STA_INFO_TX_FAILED)) {
695	sinfo->filled |= BIT_ULL(NL80211_STA_INFO_TX_FAILED);
696	sinfo->tx_failed = le32_to_cpu(stats->tx_failed);
697	}
698
699	#undef qtnf_sta_stat_avail
700	}
701
702	int qtnf_cmd_get_sta_info(struct qtnf_vif *vif, const u8 *sta_mac,
703	struct station_info *sinfo)
704	{
705	struct sk_buff *cmd_skb, *resp_skb = NULL;
706	struct qlink_cmd_get_sta_info *cmd;
707	const struct qlink_resp_get_sta_info *resp;
708	size_t var_resp_len = 0;
709	int ret = 0;
710
711	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
712	cmd_no: QLINK_CMD_GET_STA_INFO,
713	cmd_size: sizeof(*cmd));
714	if (!cmd_skb)
715	return -ENOMEM;
716
717	qtnf_bus_lock(bus: vif->mac->bus);
718
719	cmd = (struct qlink_cmd_get_sta_info *)cmd_skb->data;
720	ether_addr_copy(dst: cmd->sta_addr, src: sta_mac);
721
722	ret = qtnf_cmd_send_with_reply(bus: vif->mac->bus, cmd_skb, response_skb: &resp_skb,
723	const_resp_size: sizeof(*resp), var_resp_size: &var_resp_len);
724	if (ret)
725	goto out;
726
727	resp = (const struct qlink_resp_get_sta_info *)resp_skb->data;
728
729	if (!ether_addr_equal(addr1: sta_mac, addr2: resp->sta_addr)) {
730	pr_err("VIF%u.%u: wrong mac in reply: %pM != %pM\n",
731	vif->mac->macid, vif->vifid, resp->sta_addr, sta_mac);
732	ret = -EINVAL;
733	goto out;
734	}
735
736	qtnf_cmd_sta_info_parse(sinfo, data: resp->info, resp_size: var_resp_len);
737
738	out:
739	qtnf_bus_unlock(bus: vif->mac->bus);
740	consume_skb(skb: resp_skb);
741
742	return ret;
743	}
744
745	static int qtnf_cmd_send_add_change_intf(struct qtnf_vif *vif,
746	enum nl80211_iftype iftype,
747	int use4addr,
748	u8 *mac_addr,
749	enum qlink_cmd_type cmd_type)
750	{
751	struct sk_buff *cmd_skb, *resp_skb = NULL;
752	struct qlink_cmd_manage_intf *cmd;
753	const struct qlink_resp_manage_intf *resp;
754	int ret = 0;
755
756	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
757	cmd_no: cmd_type,
758	cmd_size: sizeof(*cmd));
759	if (!cmd_skb)
760	return -ENOMEM;
761
762	qtnf_bus_lock(bus: vif->mac->bus);
763
764	cmd = (struct qlink_cmd_manage_intf *)cmd_skb->data;
765	cmd->intf_info.use4addr = use4addr;
766
767	switch (iftype) {
768	case NL80211_IFTYPE_AP:
769	cmd->intf_info.if_type = cpu_to_le16(QLINK_IFTYPE_AP);
770	break;
771	case NL80211_IFTYPE_STATION:
772	cmd->intf_info.if_type = cpu_to_le16(QLINK_IFTYPE_STATION);
773	break;
774	default:
775	pr_err("VIF%u.%u: unsupported type %d\n", vif->mac->macid,
776	vif->vifid, iftype);
777	ret = -EINVAL;
778	goto out;
779	}
780
781	if (mac_addr)
782	ether_addr_copy(dst: cmd->intf_info.mac_addr, src: mac_addr);
783	else
784	eth_zero_addr(addr: cmd->intf_info.mac_addr);
785
786	ret = qtnf_cmd_send_with_reply(bus: vif->mac->bus, cmd_skb, response_skb: &resp_skb,
787	const_resp_size: sizeof(*resp), NULL);
788	if (ret)
789	goto out;
790
791	resp = (const struct qlink_resp_manage_intf *)resp_skb->data;
792	ether_addr_copy(dst: vif->mac_addr, src: resp->intf_info.mac_addr);
793
794	out:
795	qtnf_bus_unlock(bus: vif->mac->bus);
796	consume_skb(skb: resp_skb);
797
798	return ret;
799	}
800
801	int qtnf_cmd_send_add_intf(struct qtnf_vif *vif, enum nl80211_iftype iftype,
802	int use4addr, u8 *mac_addr)
803	{
804	return qtnf_cmd_send_add_change_intf(vif, iftype, use4addr, mac_addr,
805	cmd_type: QLINK_CMD_ADD_INTF);
806	}
807
808	int qtnf_cmd_send_change_intf_type(struct qtnf_vif *vif,
809	enum nl80211_iftype iftype,
810	int use4addr,
811	u8 *mac_addr)
812	{
813	int ret;
814
815	ret = qtnf_cmd_send_add_change_intf(vif, iftype, use4addr, mac_addr,
816	cmd_type: QLINK_CMD_CHANGE_INTF);
817
818	/* Regulatory settings may be different for different interface types */
819	if (ret == 0 && vif->wdev.iftype != iftype) {
820	enum nl80211_band band;
821	struct wiphy *wiphy = priv_to_wiphy(priv: vif->mac);
822
823	for (band = 0; band < NUM_NL80211_BANDS; ++band) {
824	if (!wiphy->bands[band])
825	continue;
826
827	qtnf_cmd_band_info_get(mac: vif->mac, band: wiphy->bands[band]);
828	}
829	}
830
831	return ret;
832	}
833
834	int qtnf_cmd_send_del_intf(struct qtnf_vif *vif)
835	{
836	struct sk_buff *cmd_skb;
837	struct qlink_cmd_manage_intf *cmd;
838	int ret = 0;
839
840	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
841	cmd_no: QLINK_CMD_DEL_INTF,
842	cmd_size: sizeof(*cmd));
843	if (!cmd_skb)
844	return -ENOMEM;
845
846	qtnf_bus_lock(bus: vif->mac->bus);
847
848	cmd = (struct qlink_cmd_manage_intf *)cmd_skb->data;
849
850	switch (vif->wdev.iftype) {
851	case NL80211_IFTYPE_AP:
852	cmd->intf_info.if_type = cpu_to_le16(QLINK_IFTYPE_AP);
853	break;
854	case NL80211_IFTYPE_STATION:
855	cmd->intf_info.if_type = cpu_to_le16(QLINK_IFTYPE_STATION);
856	break;
857	default:
858	pr_warn("VIF%u.%u: unsupported iftype %d\n", vif->mac->macid,
859	vif->vifid, vif->wdev.iftype);
860	dev_kfree_skb(cmd_skb);
861	ret = -EINVAL;
862	goto out;
863	}
864
865	eth_zero_addr(addr: cmd->intf_info.mac_addr);
866
867	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
868	if (ret)
869	goto out;
870
871	out:
872	qtnf_bus_unlock(bus: vif->mac->bus);
873	return ret;
874	}
875
876	static int
877	qtnf_cmd_resp_proc_hw_info(struct qtnf_bus *bus,
878	const struct qlink_resp_get_hw_info *resp,
879	size_t info_len)
880	{
881	struct qtnf_hw_info *hwinfo = &bus->hw_info;
882	const struct qlink_tlv_hdr *tlv;
883	const char *bld_name = NULL;
884	const char *bld_rev = NULL;
885	const char *bld_type = NULL;
886	const char *bld_label = NULL;
887	u32 bld_tmstamp = 0;
888	u32 plat_id = 0;
889	const char *hw_id = NULL;
890	const char *calibration_ver = NULL;
891	const char *uboot_ver = NULL;
892	u32 hw_ver = 0;
893	u16 tlv_type;
894	u16 tlv_len;
895
896	hwinfo->num_mac = resp->num_mac;
897	hwinfo->mac_bitmap = resp->mac_bitmap;
898	hwinfo->fw_ver = le32_to_cpu(resp->fw_ver);
899	hwinfo->total_tx_chain = resp->total_tx_chain;
900	hwinfo->total_rx_chain = resp->total_rx_chain;
901
902	bld_tmstamp = le32_to_cpu(resp->bld_tmstamp);
903	plat_id = le32_to_cpu(resp->plat_id);
904	hw_ver = le32_to_cpu(resp->hw_ver);
905
906	qlink_for_each_tlv(tlv, resp->info, info_len) {
907	tlv_type = le16_to_cpu(tlv->type);
908	tlv_len = le16_to_cpu(tlv->len);
909
910	switch (tlv_type) {
911	case QTN_TLV_ID_BUILD_NAME:
912	bld_name = (const void *)tlv->val;
913	break;
914	case QTN_TLV_ID_BUILD_REV:
915	bld_rev = (const void *)tlv->val;
916	break;
917	case QTN_TLV_ID_BUILD_TYPE:
918	bld_type = (const void *)tlv->val;
919	break;
920	case QTN_TLV_ID_BUILD_LABEL:
921	bld_label = (const void *)tlv->val;
922	break;
923	case QTN_TLV_ID_HW_ID:
924	hw_id = (const void *)tlv->val;
925	break;
926	case QTN_TLV_ID_CALIBRATION_VER:
927	calibration_ver = (const void *)tlv->val;
928	break;
929	case QTN_TLV_ID_UBOOT_VER:
930	uboot_ver = (const void *)tlv->val;
931	break;
932	case QTN_TLV_ID_BITMAP:
933	memcpy(hwinfo->hw_capab, tlv->val,
934	min(sizeof(hwinfo->hw_capab), (size_t)tlv_len));
935	break;
936	default:
937	break;
938	}
939	}
940
941	if (!qlink_tlv_parsing_ok(tlv, resp->info, info_len)) {
942	pr_err("Malformed TLV buffer\n");
943	return -EINVAL;
944	}
945
946	pr_info("\nBuild name: %s\n"
947	"Build revision: %s\n"
948	"Build type: %s\n"
949	"Build label: %s\n"
950	"Build timestamp: %lu\n"
951	"Platform ID: %lu\n"
952	"Hardware ID: %s\n"
953	"Calibration version: %s\n"
954	"U-Boot version: %s\n"
955	"Hardware version: 0x%08x\n"
956	"Qlink ver: %u.%u\n"
957	"MACs map: %#x\n"
958	"Chains Rx-Tx: %ux%u\n"
959	"FW version: 0x%x\n",
960	bld_name, bld_rev, bld_type, bld_label,
961	(unsigned long)bld_tmstamp,
962	(unsigned long)plat_id,
963	hw_id, calibration_ver, uboot_ver, hw_ver,
964	QLINK_VER_MAJOR(bus->hw_info.ql_proto_ver),
965	QLINK_VER_MINOR(bus->hw_info.ql_proto_ver),
966	hwinfo->mac_bitmap,
967	hwinfo->total_rx_chain, hwinfo->total_tx_chain,
968	hwinfo->fw_ver);
969
970	strscpy(hwinfo->fw_version, bld_label, sizeof(hwinfo->fw_version));
971	hwinfo->hw_version = hw_ver;
972
973	return 0;
974	}
975
976	static void
977	qtnf_parse_wowlan_info(struct qtnf_wmac *mac,
978	const struct qlink_wowlan_capab_data *wowlan)
979	{
980	struct qtnf_mac_info *mac_info = &mac->macinfo;
981	const struct qlink_wowlan_support *data1;
982	struct wiphy_wowlan_support *supp;
983
984	supp = kzalloc(size: sizeof(*supp), GFP_KERNEL);
985	if (!supp)
986	return;
987
988	switch (le16_to_cpu(wowlan->version)) {
989	case 0x1:
990	data1 = (struct qlink_wowlan_support *)wowlan->data;
991
992	supp->flags = WIPHY_WOWLAN_MAGIC_PKT | WIPHY_WOWLAN_DISCONNECT;
993	supp->n_patterns = le32_to_cpu(data1->n_patterns);
994	supp->pattern_max_len = le32_to_cpu(data1->pattern_max_len);
995	supp->pattern_min_len = le32_to_cpu(data1->pattern_min_len);
996
997	mac_info->wowlan = supp;
998	break;
999	default:
1000	pr_warn("MAC%u: unsupported WoWLAN version 0x%x\n",
1001	mac->macid, le16_to_cpu(wowlan->version));
1002	kfree(objp: supp);
1003	break;
1004	}
1005	}
1006
1007	static int
1008	qtnf_parse_variable_mac_info(struct qtnf_wmac *mac,
1009	const struct qlink_resp_get_mac_info *resp,
1010	size_t tlv_buf_size)
1011	{
1012	struct ieee80211_iface_combination *comb = mac->macinfo.if_comb;
1013	size_t n_comb = 0;
1014	struct ieee80211_iface_limit *limits;
1015	const struct qlink_iface_limit_record *rec;
1016	const struct qlink_iface_limit *lim;
1017	const struct qlink_wowlan_capab_data *wowlan;
1018	u16 rec_len;
1019	u16 tlv_type;
1020	u16 tlv_value_len;
1021	const struct qlink_tlv_hdr *tlv;
1022	u8 *ext_capa = NULL;
1023	u8 *ext_capa_mask = NULL;
1024	u8 ext_capa_len = 0;
1025	u8 ext_capa_mask_len = 0;
1026	int i = 0;
1027	struct ieee80211_reg_rule *rule;
1028	unsigned int rule_idx = 0;
1029	const struct qlink_tlv_reg_rule *tlv_rule;
1030
1031	if (WARN_ON(resp->n_reg_rules > NL80211_MAX_SUPP_REG_RULES))
1032	return -E2BIG;
1033
1034	mac->rd = kzalloc(struct_size(mac->rd, reg_rules, resp->n_reg_rules),
1035	GFP_KERNEL);
1036	if (!mac->rd)
1037	return -ENOMEM;
1038
1039	mac->rd->n_reg_rules = resp->n_reg_rules;
1040	mac->rd->alpha2[0] = resp->alpha2[0];
1041	mac->rd->alpha2[1] = resp->alpha2[1];
1042
1043	switch (resp->dfs_region) {
1044	case QLINK_DFS_FCC:
1045	mac->rd->dfs_region = NL80211_DFS_FCC;
1046	break;
1047	case QLINK_DFS_ETSI:
1048	mac->rd->dfs_region = NL80211_DFS_ETSI;
1049	break;
1050	case QLINK_DFS_JP:
1051	mac->rd->dfs_region = NL80211_DFS_JP;
1052	break;
1053	case QLINK_DFS_UNSET:
1054	default:
1055	mac->rd->dfs_region = NL80211_DFS_UNSET;
1056	break;
1057	}
1058
1059	qlink_for_each_tlv(tlv, resp->var_info, tlv_buf_size) {
1060	tlv_type = le16_to_cpu(tlv->type);
1061	tlv_value_len = le16_to_cpu(tlv->len);
1062
1063	switch (tlv_type) {
1064	case QTN_TLV_ID_IFACE_LIMIT:
1065	if (unlikely(!comb)) {
1066	pr_warn("MAC%u: no combinations advertised\n",
1067	mac->macid);
1068	return -EINVAL;
1069	}
1070
1071	if (n_comb >= mac->macinfo.n_if_comb) {
1072	pr_warn("MAC%u: combinations count exceeded\n",
1073	mac->macid);
1074	n_comb++;
1075	break;
1076	}
1077
1078	rec = (void *)tlv->val;
1079	rec_len = sizeof(*rec) + rec->n_limits * sizeof(*lim);
1080
1081	if (unlikely(tlv_value_len != rec_len)) {
1082	pr_warn("MAC%u: record %zu size mismatch\n",
1083	mac->macid, n_comb);
1084	return -EINVAL;
1085	}
1086
1087	limits = kcalloc(n: rec->n_limits, size: sizeof(*limits),
1088	GFP_KERNEL);
1089	if (!limits)
1090	return -ENOMEM;
1091
1092	comb[n_comb].num_different_channels =
1093	rec->num_different_channels;
1094	comb[n_comb].max_interfaces =
1095	le16_to_cpu(rec->max_interfaces);
1096	comb[n_comb].n_limits = rec->n_limits;
1097	comb[n_comb].limits = limits;
1098
1099	for (i = 0; i < rec->n_limits; i++) {
1100	lim = &rec->limits[i];
1101	limits[i].max = le16_to_cpu(lim->max_num);
1102	limits[i].types =
1103	qlink_iface_type_to_nl_mask(le16_to_cpu(lim->type));
1104	pr_debug("MAC%u: comb[%zu]: MAX:%u TYPES:%.4X\n",
1105	mac->macid, n_comb,
1106	limits[i].max, limits[i].types);
1107	}
1108
1109	n_comb++;
1110	break;
1111	case WLAN_EID_EXT_CAPABILITY:
1112	if (unlikely(tlv_value_len > U8_MAX))
1113	return -EINVAL;
1114	ext_capa = (u8 *)tlv->val;
1115	ext_capa_len = tlv_value_len;
1116	break;
1117	case QTN_TLV_ID_EXT_CAPABILITY_MASK:
1118	if (unlikely(tlv_value_len > U8_MAX))
1119	return -EINVAL;
1120	ext_capa_mask = (u8 *)tlv->val;
1121	ext_capa_mask_len = tlv_value_len;
1122	break;
1123	case QTN_TLV_ID_WOWLAN_CAPAB:
1124	if (tlv_value_len < sizeof(*wowlan))
1125	return -EINVAL;
1126
1127	wowlan = (void *)tlv->val;
1128	if (!le16_to_cpu(wowlan->len)) {
1129	pr_warn("MAC%u: skip empty WoWLAN data\n",
1130	mac->macid);
1131	break;
1132	}
1133
1134	rec_len = sizeof(*wowlan) + le16_to_cpu(wowlan->len);
1135	if (unlikely(tlv_value_len != rec_len)) {
1136	pr_warn("MAC%u: WoWLAN data size mismatch\n",
1137	mac->macid);
1138	return -EINVAL;
1139	}
1140
1141	kfree(objp: mac->macinfo.wowlan);
1142	mac->macinfo.wowlan = NULL;
1143	qtnf_parse_wowlan_info(mac, wowlan);
1144	break;
1145	case QTN_TLV_ID_REG_RULE:
1146	if (rule_idx >= resp->n_reg_rules) {
1147	pr_warn("unexpected number of rules: %u\n",
1148	resp->n_reg_rules);
1149	return -EINVAL;
1150	}
1151
1152	if (tlv_value_len != sizeof(*tlv_rule) - sizeof(*tlv)) {
1153	pr_warn("malformed TLV 0x%.2X; LEN: %u\n",
1154	tlv_type, tlv_value_len);
1155	return -EINVAL;
1156	}
1157
1158	tlv_rule = (const struct qlink_tlv_reg_rule *)tlv;
1159	rule = &mac->rd->reg_rules[rule_idx++];
1160	qlink_utils_regrule_q2nl(rule, tlv_rule);
1161	break;
1162	default:
1163	pr_warn("MAC%u: unknown TLV type %u\n",
1164	mac->macid, tlv_type);
1165	break;
1166	}
1167	}
1168
1169	if (!qlink_tlv_parsing_ok(tlv, resp->var_info, tlv_buf_size)) {
1170	pr_err("Malformed TLV buffer\n");
1171	return -EINVAL;
1172	}
1173
1174	if (mac->macinfo.n_if_comb != n_comb) {
1175	pr_err("MAC%u: combination mismatch: reported=%zu parsed=%zu\n",
1176	mac->macid, mac->macinfo.n_if_comb, n_comb);
1177	return -EINVAL;
1178	}
1179
1180	if (ext_capa_len != ext_capa_mask_len) {
1181	pr_err("MAC%u: ext_capa/_mask lengths mismatch: %u != %u\n",
1182	mac->macid, ext_capa_len, ext_capa_mask_len);
1183	return -EINVAL;
1184	}
1185
1186	if (rule_idx != resp->n_reg_rules) {
1187	pr_warn("unexpected number of rules: expected %u got %u\n",
1188	resp->n_reg_rules, rule_idx);
1189	return -EINVAL;
1190	}
1191
1192	if (ext_capa_len > 0) {
1193	ext_capa = kmemdup(p: ext_capa, size: ext_capa_len, GFP_KERNEL);
1194	if (!ext_capa)
1195	return -ENOMEM;
1196
1197	ext_capa_mask =
1198	kmemdup(p: ext_capa_mask, size: ext_capa_mask_len, GFP_KERNEL);
1199	if (!ext_capa_mask) {
1200	kfree(objp: ext_capa);
1201	return -ENOMEM;
1202	}
1203	} else {
1204	ext_capa = NULL;
1205	ext_capa_mask = NULL;
1206	}
1207
1208	qtnf_mac_ext_caps_free(mac);
1209	mac->macinfo.extended_capabilities = ext_capa;
1210	mac->macinfo.extended_capabilities_mask = ext_capa_mask;
1211	mac->macinfo.extended_capabilities_len = ext_capa_len;
1212
1213	return 0;
1214	}
1215
1216	static int
1217	qtnf_cmd_resp_proc_mac_info(struct qtnf_wmac *mac,
1218	const struct qlink_resp_get_mac_info *resp_info)
1219	{
1220	struct qtnf_mac_info *mac_info;
1221	struct qtnf_vif *vif;
1222
1223	qtnf_mac_iface_comb_free(mac);
1224
1225	mac_info = &mac->macinfo;
1226
1227	mac_info->bands_cap = resp_info->bands_cap;
1228	ether_addr_copy(dst: mac->macaddr, src: resp_info->dev_mac);
1229
1230	vif = qtnf_mac_get_base_vif(mac);
1231	if (vif)
1232	ether_addr_copy(dst: vif->mac_addr, src: mac->macaddr);
1233	else
1234	pr_err("could not get valid base vif\n");
1235
1236	mac_info->num_tx_chain = resp_info->num_tx_chain;
1237	mac_info->num_rx_chain = resp_info->num_rx_chain;
1238
1239	mac_info->max_ap_assoc_sta = le16_to_cpu(resp_info->max_ap_assoc_sta);
1240	mac_info->radar_detect_widths =
1241	qlink_chan_width_mask_to_nl(le16_to_cpu(
1242	resp_info->radar_detect_widths));
1243	mac_info->max_acl_mac_addrs = le16_to_cpu(resp_info->max_acl_mac_addrs);
1244	mac_info->frag_thr = le32_to_cpu(resp_info->frag_threshold);
1245	mac_info->rts_thr = le32_to_cpu(resp_info->rts_threshold);
1246	mac_info->sretry_limit = resp_info->retry_short;
1247	mac_info->lretry_limit = resp_info->retry_long;
1248	mac_info->coverage_class = resp_info->coverage_class;
1249	mac_info->max_scan_ssids = resp_info->max_scan_ssids;
1250
1251	memcpy(&mac_info->ht_cap_mod_mask, &resp_info->ht_cap_mod_mask,
1252	sizeof(mac_info->ht_cap_mod_mask));
1253	memcpy(&mac_info->vht_cap_mod_mask, &resp_info->vht_cap_mod_mask,
1254	sizeof(mac_info->vht_cap_mod_mask));
1255
1256	mac_info->n_if_comb = resp_info->n_iface_combinations;
1257	mac_info->if_comb = kcalloc(n: mac->macinfo.n_if_comb,
1258	size: sizeof(*mac->macinfo.if_comb),
1259	GFP_KERNEL);
1260
1261	if (!mac->macinfo.if_comb)
1262	return -ENOMEM;
1263
1264	return 0;
1265	}
1266
1267	static void qtnf_cmd_resp_band_fill_htcap(const u8 *info,
1268	struct ieee80211_sta_ht_cap *bcap)
1269	{
1270	const struct ieee80211_ht_cap *ht_cap =
1271	(const struct ieee80211_ht_cap *)info;
1272
1273	bcap->ht_supported = true;
1274	bcap->cap = le16_to_cpu(ht_cap->cap_info);
1275	bcap->ampdu_factor =
1276	ht_cap->ampdu_params_info & IEEE80211_HT_AMPDU_PARM_FACTOR;
1277	bcap->ampdu_density =
1278	(ht_cap->ampdu_params_info & IEEE80211_HT_AMPDU_PARM_DENSITY) >>
1279	IEEE80211_HT_AMPDU_PARM_DENSITY_SHIFT;
1280	memcpy(&bcap->mcs, &ht_cap->mcs, sizeof(bcap->mcs));
1281	}
1282
1283	static void qtnf_cmd_resp_band_fill_vhtcap(const u8 *info,
1284	struct ieee80211_sta_vht_cap *bcap)
1285	{
1286	const struct ieee80211_vht_cap *vht_cap =
1287	(const struct ieee80211_vht_cap *)info;
1288
1289	bcap->vht_supported = true;
1290	bcap->cap = le32_to_cpu(vht_cap->vht_cap_info);
1291	memcpy(&bcap->vht_mcs, &vht_cap->supp_mcs, sizeof(bcap->vht_mcs));
1292	}
1293
1294	static void qtnf_cmd_conv_iftype(struct ieee80211_sband_iftype_data
1295	*iftype_data,
1296	const struct qlink_sband_iftype_data
1297	*qlink_data)
1298	{
1299	iftype_data->types_mask = le16_to_cpu(qlink_data->types_mask);
1300
1301	iftype_data->he_cap.has_he = true;
1302	memcpy(&iftype_data->he_cap.he_cap_elem, &qlink_data->he_cap_elem,
1303	sizeof(qlink_data->he_cap_elem));
1304	memcpy(iftype_data->he_cap.ppe_thres, qlink_data->ppe_thres,
1305	ARRAY_SIZE(qlink_data->ppe_thres));
1306
1307	iftype_data->he_cap.he_mcs_nss_supp.rx_mcs_80 =
1308	qlink_data->he_mcs_nss_supp.rx_mcs_80;
1309	iftype_data->he_cap.he_mcs_nss_supp.tx_mcs_80 =
1310	qlink_data->he_mcs_nss_supp.tx_mcs_80;
1311	iftype_data->he_cap.he_mcs_nss_supp.rx_mcs_160 =
1312	qlink_data->he_mcs_nss_supp.rx_mcs_160;
1313	iftype_data->he_cap.he_mcs_nss_supp.tx_mcs_160 =
1314	qlink_data->he_mcs_nss_supp.tx_mcs_160;
1315	iftype_data->he_cap.he_mcs_nss_supp.rx_mcs_80p80 =
1316	qlink_data->he_mcs_nss_supp.rx_mcs_80p80;
1317	iftype_data->he_cap.he_mcs_nss_supp.tx_mcs_80p80 =
1318	qlink_data->he_mcs_nss_supp.tx_mcs_80p80;
1319	}
1320
1321	static int qtnf_cmd_band_fill_iftype(const u8 *data,
1322	struct ieee80211_supported_band *band)
1323	{
1324	unsigned int i;
1325	struct ieee80211_sband_iftype_data *iftype_data;
1326	const struct qlink_tlv_iftype_data *tlv =
1327	(const struct qlink_tlv_iftype_data *)data;
1328	size_t payload_len;
1329
1330	payload_len = struct_size(tlv, iftype_data, tlv->n_iftype_data);
1331	payload_len = size_sub(minuend: payload_len, subtrahend: sizeof(struct qlink_tlv_hdr));
1332
1333	if (tlv->hdr.len != cpu_to_le16(payload_len)) {
1334	pr_err("bad IFTYPE_DATA TLV len %u\n", tlv->hdr.len);
1335	return -EINVAL;
1336	}
1337
1338	kfree(objp: (__force void *)band->iftype_data);
1339	band->iftype_data = NULL;
1340	band->n_iftype_data = tlv->n_iftype_data;
1341	if (band->n_iftype_data == 0)
1342	return 0;
1343
1344	iftype_data = kcalloc(n: band->n_iftype_data, size: sizeof(*iftype_data),
1345	GFP_KERNEL);
1346	if (!iftype_data) {
1347	band->n_iftype_data = 0;
1348	return -ENOMEM;
1349	}
1350
1351	_ieee80211_set_sband_iftype_data(sband: band, iftd: iftype_data, n_iftd: tlv->n_iftype_data);
1352
1353	for (i = 0; i < band->n_iftype_data; i++)
1354	qtnf_cmd_conv_iftype(iftype_data: iftype_data++, qlink_data: &tlv->iftype_data[i]);
1355
1356	return 0;
1357	}
1358
1359	static int
1360	qtnf_cmd_resp_fill_band_info(struct ieee80211_supported_band *band,
1361	struct qlink_resp_band_info_get *resp,
1362	size_t payload_len)
1363	{
1364	u16 tlv_type;
1365	size_t tlv_dlen;
1366	const struct qlink_tlv_hdr *tlv;
1367	const struct qlink_channel *qchan;
1368	struct ieee80211_channel *chan;
1369	unsigned int chidx = 0;
1370	u32 qflags;
1371	int ret = -EINVAL;
1372
1373	memset(&band->ht_cap, 0, sizeof(band->ht_cap));
1374	memset(&band->vht_cap, 0, sizeof(band->vht_cap));
1375
1376	if (band->channels) {
1377	if (band->n_channels == resp->num_chans) {
1378	memset(band->channels, 0,
1379	sizeof(*band->channels) * band->n_channels);
1380	} else {
1381	kfree(objp: band->channels);
1382	band->n_channels = 0;
1383	band->channels = NULL;
1384	}
1385	}
1386
1387	band->n_channels = resp->num_chans;
1388	if (band->n_channels == 0)
1389	return 0;
1390
1391	if (!band->channels)
1392	band->channels = kcalloc(n: band->n_channels, size: sizeof(*chan),
1393	GFP_KERNEL);
1394	if (!band->channels) {
1395	band->n_channels = 0;
1396	return -ENOMEM;
1397	}
1398
1399	qlink_for_each_tlv(tlv, resp->info, payload_len) {
1400	tlv_type = le16_to_cpu(tlv->type);
1401	tlv_dlen = le16_to_cpu(tlv->len);
1402
1403	switch (tlv_type) {
1404	case QTN_TLV_ID_CHANNEL:
1405	if (unlikely(tlv_dlen != sizeof(*qchan))) {
1406	pr_err("invalid channel TLV len %zu\n",
1407	tlv_dlen);
1408	goto error_ret;
1409	}
1410
1411	if (chidx == band->n_channels) {
1412	pr_err("too many channel TLVs\n");
1413	goto error_ret;
1414	}
1415
1416	qchan = (const struct qlink_channel *)tlv->val;
1417	chan = &band->channels[chidx++];
1418	qflags = le32_to_cpu(qchan->flags);
1419
1420	chan->hw_value = le16_to_cpu(qchan->hw_value);
1421	chan->band = band->band;
1422	chan->center_freq = le16_to_cpu(qchan->center_freq);
1423	chan->max_antenna_gain = (int)qchan->max_antenna_gain;
1424	chan->max_power = (int)qchan->max_power;
1425	chan->max_reg_power = (int)qchan->max_reg_power;
1426	chan->beacon_found = qchan->beacon_found;
1427	chan->dfs_cac_ms = le32_to_cpu(qchan->dfs_cac_ms);
1428	chan->flags = 0;
1429
1430	if (qflags & QLINK_CHAN_DISABLED)
1431	chan->flags |= IEEE80211_CHAN_DISABLED;
1432
1433	if (qflags & QLINK_CHAN_NO_IR)
1434	chan->flags |= IEEE80211_CHAN_NO_IR;
1435
1436	if (qflags & QLINK_CHAN_NO_HT40PLUS)
1437	chan->flags |= IEEE80211_CHAN_NO_HT40PLUS;
1438
1439	if (qflags & QLINK_CHAN_NO_HT40MINUS)
1440	chan->flags |= IEEE80211_CHAN_NO_HT40MINUS;
1441
1442	if (qflags & QLINK_CHAN_NO_OFDM)
1443	chan->flags |= IEEE80211_CHAN_NO_OFDM;
1444
1445	if (qflags & QLINK_CHAN_NO_80MHZ)
1446	chan->flags |= IEEE80211_CHAN_NO_80MHZ;
1447
1448	if (qflags & QLINK_CHAN_NO_160MHZ)
1449	chan->flags |= IEEE80211_CHAN_NO_160MHZ;
1450
1451	if (qflags & QLINK_CHAN_INDOOR_ONLY)
1452	chan->flags |= IEEE80211_CHAN_INDOOR_ONLY;
1453
1454	if (qflags & QLINK_CHAN_IR_CONCURRENT)
1455	chan->flags |= IEEE80211_CHAN_IR_CONCURRENT;
1456
1457	if (qflags & QLINK_CHAN_NO_20MHZ)
1458	chan->flags |= IEEE80211_CHAN_NO_20MHZ;
1459
1460	if (qflags & QLINK_CHAN_NO_10MHZ)
1461	chan->flags |= IEEE80211_CHAN_NO_10MHZ;
1462
1463	if (qflags & QLINK_CHAN_RADAR) {
1464	chan->flags |= IEEE80211_CHAN_RADAR;
1465	chan->dfs_state_entered = jiffies;
1466
1467	if (qchan->dfs_state == QLINK_DFS_USABLE)
1468	chan->dfs_state = NL80211_DFS_USABLE;
1469	else if (qchan->dfs_state ==
1470	QLINK_DFS_AVAILABLE)
1471	chan->dfs_state = NL80211_DFS_AVAILABLE;
1472	else
1473	chan->dfs_state =
1474	NL80211_DFS_UNAVAILABLE;
1475	}
1476
1477	pr_debug("chan=%d flags=%#x max_pow=%d max_reg_pow=%d\n",
1478	chan->hw_value, chan->flags, chan->max_power,
1479	chan->max_reg_power);
1480	break;
1481	case WLAN_EID_HT_CAPABILITY:
1482	if (unlikely(tlv_dlen !=
1483	sizeof(struct ieee80211_ht_cap))) {
1484	pr_err("bad HTCAP TLV len %zu\n", tlv_dlen);
1485	goto error_ret;
1486	}
1487
1488	qtnf_cmd_resp_band_fill_htcap(info: tlv->val, bcap: &band->ht_cap);
1489	break;
1490	case WLAN_EID_VHT_CAPABILITY:
1491	if (unlikely(tlv_dlen !=
1492	sizeof(struct ieee80211_vht_cap))) {
1493	pr_err("bad VHTCAP TLV len %zu\n", tlv_dlen);
1494	goto error_ret;
1495	}
1496
1497	qtnf_cmd_resp_band_fill_vhtcap(info: tlv->val,
1498	bcap: &band->vht_cap);
1499	break;
1500	case QTN_TLV_ID_IFTYPE_DATA:
1501	ret = qtnf_cmd_band_fill_iftype(data: (const uint8_t *)tlv,
1502	band);
1503	if (ret)
1504	goto error_ret;
1505	break;
1506	default:
1507	pr_warn("unknown TLV type: %#x\n", tlv_type);
1508	break;
1509	}
1510	}
1511
1512	if (!qlink_tlv_parsing_ok(tlv, resp->info, payload_len)) {
1513	pr_err("Malformed TLV buffer\n");
1514	goto error_ret;
1515	}
1516
1517	if (band->n_channels != chidx) {
1518	pr_err("channel count mismatch: reported=%d, parsed=%d\n",
1519	band->n_channels, chidx);
1520	goto error_ret;
1521	}
1522
1523	return 0;
1524
1525	error_ret:
1526	kfree(objp: band->channels);
1527	band->channels = NULL;
1528	band->n_channels = 0;
1529
1530	return ret;
1531	}
1532
1533	int qtnf_cmd_get_mac_info(struct qtnf_wmac *mac)
1534	{
1535	struct sk_buff *cmd_skb, *resp_skb = NULL;
1536	const struct qlink_resp_get_mac_info *resp;
1537	size_t var_data_len = 0;
1538	int ret = 0;
1539
1540	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: mac->macid, QLINK_VIFID_RSVD,
1541	cmd_no: QLINK_CMD_MAC_INFO,
1542	cmd_size: sizeof(struct qlink_cmd));
1543	if (!cmd_skb)
1544	return -ENOMEM;
1545
1546	qtnf_bus_lock(bus: mac->bus);
1547	ret = qtnf_cmd_send_with_reply(bus: mac->bus, cmd_skb, response_skb: &resp_skb,
1548	const_resp_size: sizeof(*resp), var_resp_size: &var_data_len);
1549	if (ret)
1550	goto out;
1551
1552	resp = (const struct qlink_resp_get_mac_info *)resp_skb->data;
1553	ret = qtnf_cmd_resp_proc_mac_info(mac, resp_info: resp);
1554	if (ret)
1555	goto out;
1556
1557	ret = qtnf_parse_variable_mac_info(mac, resp, tlv_buf_size: var_data_len);
1558
1559	out:
1560	qtnf_bus_unlock(bus: mac->bus);
1561	consume_skb(skb: resp_skb);
1562
1563	return ret;
1564	}
1565
1566	int qtnf_cmd_get_hw_info(struct qtnf_bus *bus)
1567	{
1568	struct sk_buff *cmd_skb, *resp_skb = NULL;
1569	const struct qlink_resp_get_hw_info *resp;
1570	size_t info_len = 0;
1571	int ret = 0;
1572
1573	cmd_skb = qtnf_cmd_alloc_new_cmdskb(QLINK_MACID_RSVD, QLINK_VIFID_RSVD,
1574	cmd_no: QLINK_CMD_GET_HW_INFO,
1575	cmd_size: sizeof(struct qlink_cmd));
1576	if (!cmd_skb)
1577	return -ENOMEM;
1578
1579	qtnf_bus_lock(bus);
1580	ret = qtnf_cmd_send_with_reply(bus, cmd_skb, response_skb: &resp_skb,
1581	const_resp_size: sizeof(*resp), var_resp_size: &info_len);
1582	if (ret)
1583	goto out;
1584
1585	resp = (const struct qlink_resp_get_hw_info *)resp_skb->data;
1586	ret = qtnf_cmd_resp_proc_hw_info(bus, resp, info_len);
1587
1588	out:
1589	qtnf_bus_unlock(bus);
1590	consume_skb(skb: resp_skb);
1591
1592	return ret;
1593	}
1594
1595	int qtnf_cmd_band_info_get(struct qtnf_wmac *mac,
1596	struct ieee80211_supported_band *band)
1597	{
1598	struct sk_buff *cmd_skb, *resp_skb = NULL;
1599	struct qlink_cmd_band_info_get *cmd;
1600	struct qlink_resp_band_info_get *resp;
1601	size_t info_len = 0;
1602	int ret = 0;
1603	u8 qband = qlink_utils_band_cfg2q(band: band->band);
1604
1605	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: mac->macid, vifid: 0,
1606	cmd_no: QLINK_CMD_BAND_INFO_GET,
1607	cmd_size: sizeof(*cmd));
1608	if (!cmd_skb)
1609	return -ENOMEM;
1610
1611	cmd = (struct qlink_cmd_band_info_get *)cmd_skb->data;
1612	cmd->band = qband;
1613
1614	qtnf_bus_lock(bus: mac->bus);
1615	ret = qtnf_cmd_send_with_reply(bus: mac->bus, cmd_skb, response_skb: &resp_skb,
1616	const_resp_size: sizeof(*resp), var_resp_size: &info_len);
1617	if (ret)
1618	goto out;
1619
1620	resp = (struct qlink_resp_band_info_get *)resp_skb->data;
1621	if (resp->band != qband) {
1622	pr_err("MAC%u: reply band %u != cmd band %u\n", mac->macid,
1623	resp->band, qband);
1624	ret = -EINVAL;
1625	goto out;
1626	}
1627
1628	ret = qtnf_cmd_resp_fill_band_info(band, resp, payload_len: info_len);
1629
1630	out:
1631	qtnf_bus_unlock(bus: mac->bus);
1632	consume_skb(skb: resp_skb);
1633
1634	return ret;
1635	}
1636
1637	int qtnf_cmd_send_update_phy_params(struct qtnf_wmac *mac, u32 changed)
1638	{
1639	struct wiphy *wiphy = priv_to_wiphy(priv: mac);
1640	struct sk_buff *cmd_skb;
1641	int ret = 0;
1642
1643	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: mac->macid, vifid: 0,
1644	cmd_no: QLINK_CMD_PHY_PARAMS_SET,
1645	cmd_size: sizeof(struct qlink_cmd));
1646	if (!cmd_skb)
1647	return -ENOMEM;
1648
1649	qtnf_bus_lock(bus: mac->bus);
1650
1651	if (changed & WIPHY_PARAM_FRAG_THRESHOLD)
1652	qtnf_cmd_skb_put_tlv_u32(skb: cmd_skb, tlv_id: QTN_TLV_ID_FRAG_THRESH,
1653	value: wiphy->frag_threshold);
1654	if (changed & WIPHY_PARAM_RTS_THRESHOLD)
1655	qtnf_cmd_skb_put_tlv_u32(skb: cmd_skb, tlv_id: QTN_TLV_ID_RTS_THRESH,
1656	value: wiphy->rts_threshold);
1657	if (changed & WIPHY_PARAM_COVERAGE_CLASS)
1658	qtnf_cmd_skb_put_tlv_u32(skb: cmd_skb, tlv_id: QTN_TLV_ID_COVERAGE_CLASS,
1659	value: wiphy->coverage_class);
1660
1661	if (changed & WIPHY_PARAM_RETRY_LONG)
1662	qtnf_cmd_skb_put_tlv_u32(skb: cmd_skb, tlv_id: QTN_TLV_ID_LRETRY_LIMIT,
1663	value: wiphy->retry_long);
1664
1665	if (changed & WIPHY_PARAM_RETRY_SHORT)
1666	qtnf_cmd_skb_put_tlv_u32(skb: cmd_skb, tlv_id: QTN_TLV_ID_SRETRY_LIMIT,
1667	value: wiphy->retry_short);
1668
1669	ret = qtnf_cmd_send(bus: mac->bus, cmd_skb);
1670
1671	qtnf_bus_unlock(bus: mac->bus);
1672
1673	return ret;
1674	}
1675
1676	int qtnf_cmd_send_init_fw(struct qtnf_bus *bus)
1677	{
1678	struct sk_buff *resp_skb = NULL;
1679	struct qlink_resp_init_fw *resp;
1680	struct qlink_cmd_init_fw *cmd;
1681	struct sk_buff *cmd_skb;
1682	size_t info_len = 0;
1683	int ret;
1684
1685	cmd_skb = qtnf_cmd_alloc_new_cmdskb(QLINK_MACID_RSVD, QLINK_VIFID_RSVD,
1686	cmd_no: QLINK_CMD_FW_INIT,
1687	cmd_size: sizeof(*cmd));
1688	if (!cmd_skb)
1689	return -ENOMEM;
1690
1691	cmd = (struct qlink_cmd_init_fw *)cmd_skb->data;
1692	cmd->qlink_proto_ver = cpu_to_le32(QLINK_PROTO_VER);
1693
1694	qtnf_bus_lock(bus);
1695	ret = qtnf_cmd_send_with_reply(bus, cmd_skb, response_skb: &resp_skb,
1696	const_resp_size: sizeof(*resp), var_resp_size: &info_len);
1697	qtnf_bus_unlock(bus);
1698
1699	if (ret)
1700	goto out;
1701
1702	resp = (struct qlink_resp_init_fw *)resp_skb->data;
1703	bus->hw_info.ql_proto_ver = le32_to_cpu(resp->qlink_proto_ver);
1704
1705	out:
1706	consume_skb(skb: resp_skb);
1707	return ret;
1708	}
1709
1710	void qtnf_cmd_send_deinit_fw(struct qtnf_bus *bus)
1711	{
1712	struct sk_buff *cmd_skb;
1713
1714	cmd_skb = qtnf_cmd_alloc_new_cmdskb(QLINK_MACID_RSVD, QLINK_VIFID_RSVD,
1715	cmd_no: QLINK_CMD_FW_DEINIT,
1716	cmd_size: sizeof(struct qlink_cmd));
1717	if (!cmd_skb)
1718	return;
1719
1720	qtnf_bus_lock(bus);
1721	qtnf_cmd_send(bus, cmd_skb);
1722	qtnf_bus_unlock(bus);
1723	}
1724
1725	int qtnf_cmd_send_add_key(struct qtnf_vif *vif, u8 key_index, bool pairwise,
1726	const u8 *mac_addr, struct key_params *params)
1727	{
1728	struct sk_buff *cmd_skb;
1729	struct qlink_cmd_add_key *cmd;
1730	int ret = 0;
1731
1732	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
1733	cmd_no: QLINK_CMD_ADD_KEY,
1734	cmd_size: sizeof(*cmd));
1735	if (!cmd_skb)
1736	return -ENOMEM;
1737
1738	qtnf_bus_lock(bus: vif->mac->bus);
1739
1740	cmd = (struct qlink_cmd_add_key *)cmd_skb->data;
1741
1742	if (mac_addr)
1743	ether_addr_copy(dst: cmd->addr, src: mac_addr);
1744	else
1745	eth_broadcast_addr(addr: cmd->addr);
1746
1747	cmd->cipher = cpu_to_le32(params->cipher);
1748	cmd->key_index = key_index;
1749	cmd->pairwise = pairwise;
1750
1751	if (params->key && params->key_len > 0)
1752	qtnf_cmd_skb_put_tlv_arr(skb: cmd_skb, tlv_id: QTN_TLV_ID_KEY,
1753	arr: params->key,
1754	arr_len: params->key_len);
1755
1756	if (params->seq && params->seq_len > 0)
1757	qtnf_cmd_skb_put_tlv_arr(skb: cmd_skb, tlv_id: QTN_TLV_ID_SEQ,
1758	arr: params->seq,
1759	arr_len: params->seq_len);
1760
1761	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
1762
1763	qtnf_bus_unlock(bus: vif->mac->bus);
1764
1765	return ret;
1766	}
1767
1768	int qtnf_cmd_send_del_key(struct qtnf_vif *vif, u8 key_index, bool pairwise,
1769	const u8 *mac_addr)
1770	{
1771	struct sk_buff *cmd_skb;
1772	struct qlink_cmd_del_key *cmd;
1773	int ret = 0;
1774
1775	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
1776	cmd_no: QLINK_CMD_DEL_KEY,
1777	cmd_size: sizeof(*cmd));
1778	if (!cmd_skb)
1779	return -ENOMEM;
1780
1781	qtnf_bus_lock(bus: vif->mac->bus);
1782
1783	cmd = (struct qlink_cmd_del_key *)cmd_skb->data;
1784
1785	if (mac_addr)
1786	ether_addr_copy(dst: cmd->addr, src: mac_addr);
1787	else
1788	eth_broadcast_addr(addr: cmd->addr);
1789
1790	cmd->key_index = key_index;
1791	cmd->pairwise = pairwise;
1792
1793	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
1794
1795	qtnf_bus_unlock(bus: vif->mac->bus);
1796
1797	return ret;
1798	}
1799
1800	int qtnf_cmd_send_set_default_key(struct qtnf_vif *vif, u8 key_index,
1801	bool unicast, bool multicast)
1802	{
1803	struct sk_buff *cmd_skb;
1804	struct qlink_cmd_set_def_key *cmd;
1805	int ret = 0;
1806
1807	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
1808	cmd_no: QLINK_CMD_SET_DEFAULT_KEY,
1809	cmd_size: sizeof(*cmd));
1810	if (!cmd_skb)
1811	return -ENOMEM;
1812
1813	qtnf_bus_lock(bus: vif->mac->bus);
1814
1815	cmd = (struct qlink_cmd_set_def_key *)cmd_skb->data;
1816	cmd->key_index = key_index;
1817	cmd->unicast = unicast;
1818	cmd->multicast = multicast;
1819
1820	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
1821
1822	qtnf_bus_unlock(bus: vif->mac->bus);
1823
1824	return ret;
1825	}
1826
1827	int qtnf_cmd_send_set_default_mgmt_key(struct qtnf_vif *vif, u8 key_index)
1828	{
1829	struct sk_buff *cmd_skb;
1830	struct qlink_cmd_set_def_mgmt_key *cmd;
1831	int ret = 0;
1832
1833	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
1834	cmd_no: QLINK_CMD_SET_DEFAULT_MGMT_KEY,
1835	cmd_size: sizeof(*cmd));
1836	if (!cmd_skb)
1837	return -ENOMEM;
1838
1839	qtnf_bus_lock(bus: vif->mac->bus);
1840
1841	cmd = (struct qlink_cmd_set_def_mgmt_key *)cmd_skb->data;
1842	cmd->key_index = key_index;
1843
1844	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
1845
1846	qtnf_bus_unlock(bus: vif->mac->bus);
1847
1848	return ret;
1849	}
1850
1851	static u32 qtnf_encode_sta_flags(u32 flags)
1852	{
1853	u32 code = 0;
1854
1855	if (flags & BIT(NL80211_STA_FLAG_AUTHORIZED))
1856	code |= QLINK_STA_FLAG_AUTHORIZED;
1857	if (flags & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE))
1858	code |= QLINK_STA_FLAG_SHORT_PREAMBLE;
1859	if (flags & BIT(NL80211_STA_FLAG_WME))
1860	code |= QLINK_STA_FLAG_WME;
1861	if (flags & BIT(NL80211_STA_FLAG_MFP))
1862	code |= QLINK_STA_FLAG_MFP;
1863	if (flags & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1864	code |= QLINK_STA_FLAG_AUTHENTICATED;
1865	if (flags & BIT(NL80211_STA_FLAG_TDLS_PEER))
1866	code |= QLINK_STA_FLAG_TDLS_PEER;
1867	if (flags & BIT(NL80211_STA_FLAG_ASSOCIATED))
1868	code |= QLINK_STA_FLAG_ASSOCIATED;
1869	return code;
1870	}
1871
1872	int qtnf_cmd_send_change_sta(struct qtnf_vif *vif, const u8 *mac,
1873	struct station_parameters *params)
1874	{
1875	struct sk_buff *cmd_skb;
1876	struct qlink_cmd_change_sta *cmd;
1877	int ret = 0;
1878
1879	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
1880	cmd_no: QLINK_CMD_CHANGE_STA,
1881	cmd_size: sizeof(*cmd));
1882	if (!cmd_skb)
1883	return -ENOMEM;
1884
1885	qtnf_bus_lock(bus: vif->mac->bus);
1886
1887	cmd = (struct qlink_cmd_change_sta *)cmd_skb->data;
1888	ether_addr_copy(dst: cmd->sta_addr, src: mac);
1889	cmd->flag_update.mask =
1890	cpu_to_le32(qtnf_encode_sta_flags(params->sta_flags_mask));
1891	cmd->flag_update.value =
1892	cpu_to_le32(qtnf_encode_sta_flags(params->sta_flags_set));
1893
1894	switch (vif->wdev.iftype) {
1895	case NL80211_IFTYPE_AP:
1896	cmd->if_type = cpu_to_le16(QLINK_IFTYPE_AP);
1897	break;
1898	case NL80211_IFTYPE_STATION:
1899	cmd->if_type = cpu_to_le16(QLINK_IFTYPE_STATION);
1900	break;
1901	default:
1902	pr_err("unsupported iftype %d\n", vif->wdev.iftype);
1903	dev_kfree_skb(cmd_skb);
1904	ret = -EINVAL;
1905	goto out;
1906	}
1907
1908	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
1909
1910	out:
1911	qtnf_bus_unlock(bus: vif->mac->bus);
1912
1913	return ret;
1914	}
1915
1916	int qtnf_cmd_send_del_sta(struct qtnf_vif *vif,
1917	struct station_del_parameters *params)
1918	{
1919	struct sk_buff *cmd_skb;
1920	struct qlink_cmd_del_sta *cmd;
1921	int ret = 0;
1922
1923	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
1924	cmd_no: QLINK_CMD_DEL_STA,
1925	cmd_size: sizeof(*cmd));
1926	if (!cmd_skb)
1927	return -ENOMEM;
1928
1929	qtnf_bus_lock(bus: vif->mac->bus);
1930
1931	cmd = (struct qlink_cmd_del_sta *)cmd_skb->data;
1932
1933	if (params->mac)
1934	ether_addr_copy(dst: cmd->sta_addr, src: params->mac);
1935	else
1936	eth_broadcast_addr(addr: cmd->sta_addr); /* flush all stations */
1937
1938	cmd->subtype = params->subtype;
1939	cmd->reason_code = cpu_to_le16(params->reason_code);
1940
1941	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
1942
1943	qtnf_bus_unlock(bus: vif->mac->bus);
1944
1945	return ret;
1946	}
1947
1948	static void qtnf_cmd_channel_tlv_add(struct sk_buff *cmd_skb,
1949	const struct ieee80211_channel *sc)
1950	{
1951	struct qlink_tlv_channel *tlv;
1952	struct qlink_channel *qch;
1953
1954	tlv = skb_put_zero(skb: cmd_skb, len: sizeof(*tlv));
1955	qch = &tlv->chan;
1956	tlv->hdr.type = cpu_to_le16(QTN_TLV_ID_CHANNEL);
1957	tlv->hdr.len = cpu_to_le16(sizeof(*qch));
1958
1959	qch->center_freq = cpu_to_le16(sc->center_freq);
1960	qch->hw_value = cpu_to_le16(sc->hw_value);
1961	qch->band = qlink_utils_band_cfg2q(band: sc->band);
1962	qch->max_power = sc->max_power;
1963	qch->max_reg_power = sc->max_reg_power;
1964	qch->max_antenna_gain = sc->max_antenna_gain;
1965	qch->beacon_found = sc->beacon_found;
1966	qch->dfs_state = qlink_utils_dfs_state_cfg2q(state: sc->dfs_state);
1967	qch->flags = cpu_to_le32(qlink_utils_chflags_cfg2q(sc->flags));
1968	}
1969
1970	static void qtnf_cmd_randmac_tlv_add(struct sk_buff *cmd_skb,
1971	const u8 *mac_addr,
1972	const u8 *mac_addr_mask)
1973	{
1974	struct qlink_random_mac_addr *randmac;
1975	struct qlink_tlv_hdr *hdr =
1976	skb_put(skb: cmd_skb, len: sizeof(*hdr) + sizeof(*randmac));
1977
1978	hdr->type = cpu_to_le16(QTN_TLV_ID_RANDOM_MAC_ADDR);
1979	hdr->len = cpu_to_le16(sizeof(*randmac));
1980	randmac = (struct qlink_random_mac_addr *)hdr->val;
1981
1982	memcpy(randmac->mac_addr, mac_addr, ETH_ALEN);
1983	memcpy(randmac->mac_addr_mask, mac_addr_mask, ETH_ALEN);
1984	}
1985
1986	int qtnf_cmd_send_scan(struct qtnf_wmac *mac)
1987	{
1988	struct cfg80211_scan_request *scan_req = mac->scan_req;
1989	u16 dwell_passive = QTNF_SCAN_DWELL_PASSIVE_DEFAULT;
1990	u16 dwell_active = QTNF_SCAN_DWELL_ACTIVE_DEFAULT;
1991	struct wireless_dev *wdev = scan_req->wdev;
1992	struct ieee80211_channel *sc;
1993	struct qlink_cmd_scan *cmd;
1994	struct sk_buff *cmd_skb;
1995	int n_channels = 0;
1996	u64 flags = 0;
1997	int count;
1998	int ret;
1999
2000	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: mac->macid, QLINK_VIFID_RSVD,
2001	cmd_no: QLINK_CMD_SCAN,
2002	cmd_size: sizeof(*cmd));
2003	if (!cmd_skb)
2004	return -ENOMEM;
2005
2006	cmd = (struct qlink_cmd_scan *)cmd_skb->data;
2007
2008	if (scan_req->duration) {
2009	dwell_active = scan_req->duration;
2010	dwell_passive = scan_req->duration;
2011	} else if (wdev->iftype == NL80211_IFTYPE_STATION &&
2012	wdev->connected) {
2013	/* let device select dwell based on traffic conditions */
2014	dwell_active = QTNF_SCAN_TIME_AUTO;
2015	dwell_passive = QTNF_SCAN_TIME_AUTO;
2016	}
2017
2018	cmd->n_ssids = cpu_to_le16(scan_req->n_ssids);
2019	for (count = 0; count < scan_req->n_ssids; ++count) {
2020	qtnf_cmd_skb_put_tlv_arr(skb: cmd_skb, tlv_id: WLAN_EID_SSID,
2021	arr: scan_req->ssids[count].ssid,
2022	arr_len: scan_req->ssids[count].ssid_len);
2023	}
2024
2025	if (scan_req->ie_len != 0)
2026	qtnf_cmd_tlv_ie_set_add(cmd_skb, frame_type: QLINK_IE_SET_PROBE_REQ,
2027	buf: scan_req->ie, len: scan_req->ie_len);
2028
2029	for (count = 0; count < scan_req->n_channels; ++count) {
2030	sc = scan_req->channels[count];
2031	if (sc->flags & IEEE80211_CHAN_DISABLED)
2032	continue;
2033
2034	pr_debug("[MAC%u] scan chan=%d, freq=%d, flags=%#x\n",
2035	mac->macid, sc->hw_value, sc->center_freq,
2036	sc->flags);
2037
2038	qtnf_cmd_channel_tlv_add(cmd_skb, sc);
2039	++n_channels;
2040	}
2041
2042	if (scan_req->flags & NL80211_SCAN_FLAG_FLUSH)
2043	flags |= QLINK_SCAN_FLAG_FLUSH;
2044
2045	if (scan_req->duration_mandatory)
2046	flags |= QLINK_SCAN_FLAG_DURATION_MANDATORY;
2047
2048	cmd->n_channels = cpu_to_le16(n_channels);
2049	cmd->active_dwell = cpu_to_le16(dwell_active);
2050	cmd->passive_dwell = cpu_to_le16(dwell_passive);
2051	cmd->sample_duration = cpu_to_le16(QTNF_SCAN_SAMPLE_DURATION_DEFAULT);
2052	cmd->flags = cpu_to_le64(flags);
2053
2054	pr_debug("[MAC%u] %s scan dwell active=%u passive=%u duration=%u\n",
2055	mac->macid,
2056	scan_req->duration_mandatory ? "mandatory" : "max",
2057	dwell_active, dwell_passive,
2058	QTNF_SCAN_SAMPLE_DURATION_DEFAULT);
2059
2060	if (scan_req->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) {
2061	pr_debug("[MAC%u] scan with random addr=%pM, mask=%pM\n",
2062	mac->macid,
2063	scan_req->mac_addr, scan_req->mac_addr_mask);
2064	qtnf_cmd_randmac_tlv_add(cmd_skb, mac_addr: scan_req->mac_addr,
2065	mac_addr_mask: scan_req->mac_addr_mask);
2066	}
2067
2068	qtnf_bus_lock(bus: mac->bus);
2069	ret = qtnf_cmd_send(bus: mac->bus, cmd_skb);
2070	qtnf_bus_unlock(bus: mac->bus);
2071
2072	return ret;
2073	}
2074
2075	int qtnf_cmd_send_connect(struct qtnf_vif *vif,
2076	struct cfg80211_connect_params *sme)
2077	{
2078	struct sk_buff *cmd_skb;
2079	struct qlink_cmd_connect *cmd;
2080	struct qlink_auth_encr *aen;
2081	int ret;
2082	int i;
2083	int n;
2084	u32 connect_flags = 0;
2085
2086	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
2087	cmd_no: QLINK_CMD_CONNECT,
2088	cmd_size: sizeof(*cmd));
2089	if (!cmd_skb)
2090	return -ENOMEM;
2091
2092	cmd = (struct qlink_cmd_connect *)cmd_skb->data;
2093
2094	ether_addr_copy(dst: cmd->bssid, src: vif->bssid);
2095
2096	if (sme->bssid_hint)
2097	ether_addr_copy(dst: cmd->bssid_hint, src: sme->bssid_hint);
2098	else
2099	eth_zero_addr(addr: cmd->bssid_hint);
2100
2101	if (sme->prev_bssid)
2102	ether_addr_copy(dst: cmd->prev_bssid, src: sme->prev_bssid);
2103	else
2104	eth_zero_addr(addr: cmd->prev_bssid);
2105
2106	if ((sme->bg_scan_period >= 0) &&
2107	(sme->bg_scan_period <= SHRT_MAX))
2108	cmd->bg_scan_period = cpu_to_le16(sme->bg_scan_period);
2109	else
2110	cmd->bg_scan_period = cpu_to_le16(-1); /* use default value */
2111
2112	if (sme->flags & ASSOC_REQ_DISABLE_HT)
2113	connect_flags |= QLINK_STA_CONNECT_DISABLE_HT;
2114	if (sme->flags & ASSOC_REQ_DISABLE_VHT)
2115	connect_flags |= QLINK_STA_CONNECT_DISABLE_VHT;
2116	if (sme->flags & ASSOC_REQ_USE_RRM)
2117	connect_flags |= QLINK_STA_CONNECT_USE_RRM;
2118
2119	cmd->flags = cpu_to_le32(connect_flags);
2120	memcpy(&cmd->ht_capa, &sme->ht_capa, sizeof(cmd->ht_capa));
2121	memcpy(&cmd->ht_capa_mask, &sme->ht_capa_mask,
2122	sizeof(cmd->ht_capa_mask));
2123	memcpy(&cmd->vht_capa, &sme->vht_capa, sizeof(cmd->vht_capa));
2124	memcpy(&cmd->vht_capa_mask, &sme->vht_capa_mask,
2125	sizeof(cmd->vht_capa_mask));
2126	cmd->pbss = sme->pbss;
2127
2128	aen = &cmd->aen;
2129	aen->auth_type = sme->auth_type;
2130	aen->privacy = !!sme->privacy;
2131	cmd->mfp = sme->mfp;
2132	aen->wpa_versions = cpu_to_le32(sme->crypto.wpa_versions);
2133	aen->cipher_group = cpu_to_le32(sme->crypto.cipher_group);
2134	aen->n_ciphers_pairwise = cpu_to_le32(sme->crypto.n_ciphers_pairwise);
2135
2136	for (i = 0; i < QLINK_MAX_NR_CIPHER_SUITES; i++)
2137	aen->ciphers_pairwise[i] =
2138	cpu_to_le32(sme->crypto.ciphers_pairwise[i]);
2139
2140	n = min(QLINK_MAX_NR_AKM_SUITES, sme->crypto.n_akm_suites);
2141	aen->n_akm_suites = cpu_to_le32(n);
2142
2143	for (i = 0; i < n; i++)
2144	aen->akm_suites[i] = cpu_to_le32(sme->crypto.akm_suites[i]);
2145
2146	aen->control_port = sme->crypto.control_port;
2147	aen->control_port_no_encrypt =
2148	sme->crypto.control_port_no_encrypt;
2149	aen->control_port_ethertype =
2150	cpu_to_le16(be16_to_cpu(sme->crypto.control_port_ethertype));
2151
2152	qtnf_cmd_skb_put_tlv_arr(skb: cmd_skb, tlv_id: WLAN_EID_SSID, arr: sme->ssid,
2153	arr_len: sme->ssid_len);
2154
2155	if (sme->ie_len != 0)
2156	qtnf_cmd_tlv_ie_set_add(cmd_skb, frame_type: QLINK_IE_SET_ASSOC_REQ,
2157	buf: sme->ie, len: sme->ie_len);
2158
2159	if (sme->channel)
2160	qtnf_cmd_channel_tlv_add(cmd_skb, sc: sme->channel);
2161
2162	qtnf_bus_lock(bus: vif->mac->bus);
2163	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
2164	qtnf_bus_unlock(bus: vif->mac->bus);
2165
2166	return ret;
2167	}
2168
2169	int qtnf_cmd_send_external_auth(struct qtnf_vif *vif,
2170	struct cfg80211_external_auth_params *auth)
2171	{
2172	struct sk_buff *cmd_skb;
2173	struct qlink_cmd_external_auth *cmd;
2174	int ret;
2175
2176	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
2177	cmd_no: QLINK_CMD_EXTERNAL_AUTH,
2178	cmd_size: sizeof(*cmd));
2179	if (!cmd_skb)
2180	return -ENOMEM;
2181
2182	cmd = (struct qlink_cmd_external_auth *)cmd_skb->data;
2183
2184	ether_addr_copy(dst: cmd->peer, src: auth->bssid);
2185	cmd->status = cpu_to_le16(auth->status);
2186
2187	qtnf_bus_lock(bus: vif->mac->bus);
2188	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
2189	qtnf_bus_unlock(bus: vif->mac->bus);
2190
2191	return ret;
2192	}
2193
2194	int qtnf_cmd_send_disconnect(struct qtnf_vif *vif, u16 reason_code)
2195	{
2196	struct sk_buff *cmd_skb;
2197	struct qlink_cmd_disconnect *cmd;
2198	int ret;
2199
2200	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
2201	cmd_no: QLINK_CMD_DISCONNECT,
2202	cmd_size: sizeof(*cmd));
2203	if (!cmd_skb)
2204	return -ENOMEM;
2205
2206	qtnf_bus_lock(bus: vif->mac->bus);
2207
2208	cmd = (struct qlink_cmd_disconnect *)cmd_skb->data;
2209	cmd->reason = cpu_to_le16(reason_code);
2210
2211	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
2212
2213	qtnf_bus_unlock(bus: vif->mac->bus);
2214
2215	return ret;
2216	}
2217
2218	int qtnf_cmd_send_updown_intf(struct qtnf_vif *vif, bool up)
2219	{
2220	struct sk_buff *cmd_skb;
2221	struct qlink_cmd_updown *cmd;
2222	int ret;
2223
2224	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
2225	cmd_no: QLINK_CMD_UPDOWN_INTF,
2226	cmd_size: sizeof(*cmd));
2227	if (!cmd_skb)
2228	return -ENOMEM;
2229
2230	cmd = (struct qlink_cmd_updown *)cmd_skb->data;
2231	cmd->if_up = !!up;
2232
2233	qtnf_bus_lock(bus: vif->mac->bus);
2234	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
2235	qtnf_bus_unlock(bus: vif->mac->bus);
2236
2237	return ret;
2238	}
2239
2240	int qtnf_cmd_reg_notify(struct qtnf_wmac *mac, struct regulatory_request *req,
2241	bool slave_radar, bool dfs_offload)
2242	{
2243	struct wiphy *wiphy = priv_to_wiphy(priv: mac);
2244	struct qtnf_bus *bus = mac->bus;
2245	struct sk_buff *cmd_skb;
2246	int ret;
2247	struct qlink_cmd_reg_notify *cmd;
2248	enum nl80211_band band;
2249	const struct ieee80211_supported_band *cfg_band;
2250
2251	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: mac->macid, QLINK_VIFID_RSVD,
2252	cmd_no: QLINK_CMD_REG_NOTIFY,
2253	cmd_size: sizeof(*cmd));
2254	if (!cmd_skb)
2255	return -ENOMEM;
2256
2257	cmd = (struct qlink_cmd_reg_notify *)cmd_skb->data;
2258	cmd->alpha2[0] = req->alpha2[0];
2259	cmd->alpha2[1] = req->alpha2[1];
2260
2261	switch (req->initiator) {
2262	case NL80211_REGDOM_SET_BY_CORE:
2263	cmd->initiator = QLINK_REGDOM_SET_BY_CORE;
2264	break;
2265	case NL80211_REGDOM_SET_BY_USER:
2266	cmd->initiator = QLINK_REGDOM_SET_BY_USER;
2267	break;
2268	case NL80211_REGDOM_SET_BY_DRIVER:
2269	cmd->initiator = QLINK_REGDOM_SET_BY_DRIVER;
2270	break;
2271	case NL80211_REGDOM_SET_BY_COUNTRY_IE:
2272	cmd->initiator = QLINK_REGDOM_SET_BY_COUNTRY_IE;
2273	break;
2274	}
2275
2276	switch (req->user_reg_hint_type) {
2277	case NL80211_USER_REG_HINT_USER:
2278	cmd->user_reg_hint_type = QLINK_USER_REG_HINT_USER;
2279	break;
2280	case NL80211_USER_REG_HINT_CELL_BASE:
2281	cmd->user_reg_hint_type = QLINK_USER_REG_HINT_CELL_BASE;
2282	break;
2283	case NL80211_USER_REG_HINT_INDOOR:
2284	cmd->user_reg_hint_type = QLINK_USER_REG_HINT_INDOOR;
2285	break;
2286	}
2287
2288	switch (req->dfs_region) {
2289	case NL80211_DFS_FCC:
2290	cmd->dfs_region = QLINK_DFS_FCC;
2291	break;
2292	case NL80211_DFS_ETSI:
2293	cmd->dfs_region = QLINK_DFS_ETSI;
2294	break;
2295	case NL80211_DFS_JP:
2296	cmd->dfs_region = QLINK_DFS_JP;
2297	break;
2298	default:
2299	cmd->dfs_region = QLINK_DFS_UNSET;
2300	break;
2301	}
2302
2303	cmd->slave_radar = slave_radar;
2304	cmd->dfs_offload = dfs_offload;
2305	cmd->num_channels = 0;
2306
2307	for (band = 0; band < NUM_NL80211_BANDS; band++) {
2308	unsigned int i;
2309
2310	cfg_band = wiphy->bands[band];
2311	if (!cfg_band)
2312	continue;
2313
2314	cmd->num_channels += cfg_band->n_channels;
2315
2316	for (i = 0; i < cfg_band->n_channels; ++i) {
2317	qtnf_cmd_channel_tlv_add(cmd_skb,
2318	sc: &cfg_band->channels[i]);
2319	}
2320	}
2321
2322	qtnf_bus_lock(bus);
2323	ret = qtnf_cmd_send(bus, cmd_skb);
2324	qtnf_bus_unlock(bus);
2325
2326	return ret;
2327	}
2328
2329	static int
2330	qtnf_cmd_resp_proc_chan_stat_info(struct survey_info *survey,
2331	const u8 *payload, size_t payload_len)
2332	{
2333	const struct qlink_chan_stats *stats = NULL;
2334	const struct qlink_tlv_hdr *tlv;
2335	u16 tlv_value_len;
2336	u16 tlv_type;
2337	const u8 *map = NULL;
2338	unsigned int map_len = 0;
2339	unsigned int stats_len = 0;
2340
2341	qlink_for_each_tlv(tlv, payload, payload_len) {
2342	tlv_type = le16_to_cpu(tlv->type);
2343	tlv_value_len = le16_to_cpu(tlv->len);
2344
2345	switch (tlv_type) {
2346	case QTN_TLV_ID_BITMAP:
2347	map = tlv->val;
2348	map_len = tlv_value_len;
2349	break;
2350	case QTN_TLV_ID_CHANNEL_STATS:
2351	stats = (struct qlink_chan_stats *)tlv->val;
2352	stats_len = tlv_value_len;
2353	break;
2354	default:
2355	pr_info("Unknown TLV type: %#x\n", tlv_type);
2356	break;
2357	}
2358	}
2359
2360	if (!qlink_tlv_parsing_ok(tlv, payload, payload_len)) {
2361	pr_err("Malformed TLV buffer\n");
2362	return -EINVAL;
2363	}
2364
2365	if (!map || !stats)
2366	return 0;
2367
2368	#define qtnf_chan_stat_avail(stat_name, bitn) \
2369	(qtnf_utils_is_bit_set(map, bitn, map_len) && \
2370	(offsetofend(struct qlink_chan_stats, stat_name) <= stats_len))
2371
2372	if (qtnf_chan_stat_avail(time_on, QLINK_CHAN_STAT_TIME_ON)) {
2373	survey->filled |= SURVEY_INFO_TIME;
2374	survey->time = le64_to_cpu(stats->time_on);
2375	}
2376
2377	if (qtnf_chan_stat_avail(time_tx, QLINK_CHAN_STAT_TIME_TX)) {
2378	survey->filled |= SURVEY_INFO_TIME_TX;
2379	survey->time_tx = le64_to_cpu(stats->time_tx);
2380	}
2381
2382	if (qtnf_chan_stat_avail(time_rx, QLINK_CHAN_STAT_TIME_RX)) {
2383	survey->filled |= SURVEY_INFO_TIME_RX;
2384	survey->time_rx = le64_to_cpu(stats->time_rx);
2385	}
2386
2387	if (qtnf_chan_stat_avail(cca_busy, QLINK_CHAN_STAT_CCA_BUSY)) {
2388	survey->filled |= SURVEY_INFO_TIME_BUSY;
2389	survey->time_busy = le64_to_cpu(stats->cca_busy);
2390	}
2391
2392	if (qtnf_chan_stat_avail(cca_busy_ext, QLINK_CHAN_STAT_CCA_BUSY_EXT)) {
2393	survey->filled |= SURVEY_INFO_TIME_EXT_BUSY;
2394	survey->time_ext_busy = le64_to_cpu(stats->cca_busy_ext);
2395	}
2396
2397	if (qtnf_chan_stat_avail(time_scan, QLINK_CHAN_STAT_TIME_SCAN)) {
2398	survey->filled |= SURVEY_INFO_TIME_SCAN;
2399	survey->time_scan = le64_to_cpu(stats->time_scan);
2400	}
2401
2402	if (qtnf_chan_stat_avail(chan_noise, QLINK_CHAN_STAT_CHAN_NOISE)) {
2403	survey->filled |= SURVEY_INFO_NOISE_DBM;
2404	survey->noise = stats->chan_noise;
2405	}
2406
2407	#undef qtnf_chan_stat_avail
2408
2409	return 0;
2410	}
2411
2412	int qtnf_cmd_get_chan_stats(struct qtnf_wmac *mac, u32 chan_freq,
2413	struct survey_info *survey)
2414	{
2415	struct sk_buff *cmd_skb, *resp_skb = NULL;
2416	struct qlink_cmd_get_chan_stats *cmd;
2417	struct qlink_resp_get_chan_stats *resp;
2418	size_t var_data_len = 0;
2419	int ret = 0;
2420
2421	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: mac->macid, QLINK_VIFID_RSVD,
2422	cmd_no: QLINK_CMD_CHAN_STATS,
2423	cmd_size: sizeof(*cmd));
2424	if (!cmd_skb)
2425	return -ENOMEM;
2426
2427	cmd = (struct qlink_cmd_get_chan_stats *)cmd_skb->data;
2428	cmd->channel_freq = cpu_to_le32(chan_freq);
2429
2430	qtnf_bus_lock(bus: mac->bus);
2431	ret = qtnf_cmd_send_with_reply(bus: mac->bus, cmd_skb, response_skb: &resp_skb,
2432	const_resp_size: sizeof(*resp), var_resp_size: &var_data_len);
2433	qtnf_bus_unlock(bus: mac->bus);
2434
2435	if (ret)
2436	goto out;
2437
2438	resp = (struct qlink_resp_get_chan_stats *)resp_skb->data;
2439
2440	if (le32_to_cpu(resp->chan_freq) != chan_freq) {
2441	pr_err("[MAC%u] channel stats freq %u != requested %u\n",
2442	mac->macid, le32_to_cpu(resp->chan_freq), chan_freq);
2443	ret = -EINVAL;
2444	goto out;
2445	}
2446
2447	ret = qtnf_cmd_resp_proc_chan_stat_info(survey, payload: resp->info,
2448	payload_len: var_data_len);
2449
2450	out:
2451	consume_skb(skb: resp_skb);
2452
2453	return ret;
2454	}
2455
2456	int qtnf_cmd_send_chan_switch(struct qtnf_vif *vif,
2457	struct cfg80211_csa_settings *params)
2458	{
2459	struct qtnf_wmac *mac = vif->mac;
2460	struct qlink_cmd_chan_switch *cmd;
2461	struct sk_buff *cmd_skb;
2462	int ret;
2463	u64 flags = 0;
2464
2465	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: mac->macid, vifid: vif->vifid,
2466	cmd_no: QLINK_CMD_CHAN_SWITCH,
2467	cmd_size: sizeof(*cmd));
2468	if (!cmd_skb)
2469	return -ENOMEM;
2470
2471	if (params->radar_required)
2472	flags |= QLINK_CHAN_SW_RADAR_REQUIRED;
2473
2474	if (params->block_tx)
2475	flags |= QLINK_CHAN_SW_BLOCK_TX;
2476
2477	cmd = (struct qlink_cmd_chan_switch *)cmd_skb->data;
2478	qlink_chandef_cfg2q(chdef: &params->chandef, qch: &cmd->channel);
2479	cmd->flags = cpu_to_le64(flags);
2480	cmd->beacon_count = params->count;
2481
2482	qtnf_bus_lock(bus: mac->bus);
2483	ret = qtnf_cmd_send(bus: mac->bus, cmd_skb);
2484	qtnf_bus_unlock(bus: mac->bus);
2485
2486	return ret;
2487	}
2488
2489	int qtnf_cmd_get_channel(struct qtnf_vif *vif, struct cfg80211_chan_def *chdef)
2490	{
2491	struct qtnf_bus *bus = vif->mac->bus;
2492	const struct qlink_resp_channel_get *resp;
2493	struct sk_buff *cmd_skb;
2494	struct sk_buff *resp_skb = NULL;
2495	int ret;
2496
2497	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
2498	cmd_no: QLINK_CMD_CHAN_GET,
2499	cmd_size: sizeof(struct qlink_cmd));
2500	if (!cmd_skb)
2501	return -ENOMEM;
2502
2503	qtnf_bus_lock(bus);
2504	ret = qtnf_cmd_send_with_reply(bus, cmd_skb, response_skb: &resp_skb,
2505	const_resp_size: sizeof(*resp), NULL);
2506	if (ret)
2507	goto out;
2508
2509	resp = (const struct qlink_resp_channel_get *)resp_skb->data;
2510	qlink_chandef_q2cfg(wiphy: priv_to_wiphy(priv: vif->mac), qch: &resp->chan, chdef);
2511
2512	out:
2513	qtnf_bus_unlock(bus);
2514	consume_skb(skb: resp_skb);
2515
2516	return ret;
2517	}
2518
2519	int qtnf_cmd_start_cac(const struct qtnf_vif *vif,
2520	const struct cfg80211_chan_def *chdef,
2521	u32 cac_time_ms)
2522	{
2523	struct qtnf_bus *bus = vif->mac->bus;
2524	struct sk_buff *cmd_skb;
2525	struct qlink_cmd_start_cac *cmd;
2526	int ret;
2527
2528	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
2529	cmd_no: QLINK_CMD_START_CAC,
2530	cmd_size: sizeof(*cmd));
2531	if (!cmd_skb)
2532	return -ENOMEM;
2533
2534	cmd = (struct qlink_cmd_start_cac *)cmd_skb->data;
2535	cmd->cac_time_ms = cpu_to_le32(cac_time_ms);
2536	qlink_chandef_cfg2q(chdef, qch: &cmd->chan);
2537
2538	qtnf_bus_lock(bus);
2539	ret = qtnf_cmd_send(bus, cmd_skb);
2540	qtnf_bus_unlock(bus);
2541
2542	return ret;
2543	}
2544
2545	int qtnf_cmd_set_mac_acl(const struct qtnf_vif *vif,
2546	const struct cfg80211_acl_data *params)
2547	{
2548	struct qtnf_bus *bus = vif->mac->bus;
2549	struct sk_buff *cmd_skb;
2550	struct qlink_tlv_hdr *tlv;
2551	size_t acl_size = struct_size(params, mac_addrs, params->n_acl_entries);
2552	int ret;
2553
2554	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
2555	cmd_no: QLINK_CMD_SET_MAC_ACL,
2556	cmd_size: sizeof(struct qlink_cmd));
2557	if (!cmd_skb)
2558	return -ENOMEM;
2559
2560	tlv = skb_put(skb: cmd_skb, len: sizeof(*tlv) + round_up(acl_size, QLINK_ALIGN));
2561	tlv->type = cpu_to_le16(QTN_TLV_ID_ACL_DATA);
2562	tlv->len = cpu_to_le16(acl_size);
2563	qlink_acl_data_cfg2q(acl: params, qacl: (struct qlink_acl_data *)tlv->val);
2564
2565	qtnf_bus_lock(bus);
2566	ret = qtnf_cmd_send(bus, cmd_skb);
2567	qtnf_bus_unlock(bus);
2568
2569	return ret;
2570	}
2571
2572	int qtnf_cmd_send_pm_set(const struct qtnf_vif *vif, u8 pm_mode, int timeout)
2573	{
2574	struct qtnf_bus *bus = vif->mac->bus;
2575	struct sk_buff *cmd_skb;
2576	struct qlink_cmd_pm_set *cmd;
2577	int ret = 0;
2578
2579	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
2580	cmd_no: QLINK_CMD_PM_SET, cmd_size: sizeof(*cmd));
2581	if (!cmd_skb)
2582	return -ENOMEM;
2583
2584	cmd = (struct qlink_cmd_pm_set *)cmd_skb->data;
2585	cmd->pm_mode = pm_mode;
2586	cmd->pm_standby_timer = cpu_to_le32(timeout);
2587
2588	qtnf_bus_lock(bus);
2589
2590	ret = qtnf_cmd_send(bus, cmd_skb);
2591
2592	qtnf_bus_unlock(bus);
2593
2594	return ret;
2595	}
2596
2597	int qtnf_cmd_get_tx_power(const struct qtnf_vif *vif, int *dbm)
2598	{
2599	struct qtnf_bus *bus = vif->mac->bus;
2600	const struct qlink_resp_txpwr *resp;
2601	struct sk_buff *resp_skb = NULL;
2602	struct qlink_cmd_txpwr *cmd;
2603	struct sk_buff *cmd_skb;
2604	int ret = 0;
2605
2606	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
2607	cmd_no: QLINK_CMD_TXPWR, cmd_size: sizeof(*cmd));
2608	if (!cmd_skb)
2609	return -ENOMEM;
2610
2611	cmd = (struct qlink_cmd_txpwr *)cmd_skb->data;
2612	cmd->op_type = QLINK_TXPWR_GET;
2613
2614	qtnf_bus_lock(bus);
2615
2616	ret = qtnf_cmd_send_with_reply(bus, cmd_skb, response_skb: &resp_skb,
2617	const_resp_size: sizeof(*resp), NULL);
2618	if (ret)
2619	goto out;
2620
2621	resp = (const struct qlink_resp_txpwr *)resp_skb->data;
2622	*dbm = MBM_TO_DBM(le32_to_cpu(resp->txpwr));
2623
2624	out:
2625	qtnf_bus_unlock(bus);
2626	consume_skb(skb: resp_skb);
2627
2628	return ret;
2629	}
2630
2631	int qtnf_cmd_set_tx_power(const struct qtnf_vif *vif,
2632	enum nl80211_tx_power_setting type, int mbm)
2633	{
2634	struct qtnf_bus *bus = vif->mac->bus;
2635	const struct qlink_resp_txpwr *resp;
2636	struct sk_buff *resp_skb = NULL;
2637	struct qlink_cmd_txpwr *cmd;
2638	struct sk_buff *cmd_skb;
2639	int ret = 0;
2640
2641	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
2642	cmd_no: QLINK_CMD_TXPWR, cmd_size: sizeof(*cmd));
2643	if (!cmd_skb)
2644	return -ENOMEM;
2645
2646	cmd = (struct qlink_cmd_txpwr *)cmd_skb->data;
2647	cmd->op_type = QLINK_TXPWR_SET;
2648	cmd->txpwr_setting = type;
2649	cmd->txpwr = cpu_to_le32(mbm);
2650
2651	qtnf_bus_lock(bus);
2652
2653	ret = qtnf_cmd_send_with_reply(bus, cmd_skb, response_skb: &resp_skb,
2654	const_resp_size: sizeof(*resp), NULL);
2655
2656	qtnf_bus_unlock(bus);
2657	consume_skb(skb: resp_skb);
2658
2659	return ret;
2660	}
2661
2662	int qtnf_cmd_send_wowlan_set(const struct qtnf_vif *vif,
2663	const struct cfg80211_wowlan *wowl)
2664	{
2665	struct qtnf_bus *bus = vif->mac->bus;
2666	struct sk_buff *cmd_skb;
2667	struct qlink_cmd_wowlan_set *cmd;
2668	u32 triggers = 0;
2669	int count = 0;
2670	int ret = 0;
2671
2672	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
2673	cmd_no: QLINK_CMD_WOWLAN_SET, cmd_size: sizeof(*cmd));
2674	if (!cmd_skb)
2675	return -ENOMEM;
2676
2677	qtnf_bus_lock(bus);
2678
2679	cmd = (struct qlink_cmd_wowlan_set *)cmd_skb->data;
2680
2681	if (wowl) {
2682	if (wowl->disconnect)
2683	triggers |= QLINK_WOWLAN_TRIG_DISCONNECT;
2684
2685	if (wowl->magic_pkt)
2686	triggers |= QLINK_WOWLAN_TRIG_MAGIC_PKT;
2687
2688	if (wowl->n_patterns && wowl->patterns) {
2689	triggers |= QLINK_WOWLAN_TRIG_PATTERN_PKT;
2690	while (count < wowl->n_patterns) {
2691	qtnf_cmd_skb_put_tlv_arr(skb: cmd_skb,
2692	tlv_id: QTN_TLV_ID_WOWLAN_PATTERN,
2693	arr: wowl->patterns[count].pattern,
2694	arr_len: wowl->patterns[count].pattern_len);
2695	count++;
2696	}
2697	}
2698	}
2699
2700	cmd->triggers = cpu_to_le32(triggers);
2701
2702	ret = qtnf_cmd_send(bus, cmd_skb);
2703
2704	qtnf_bus_unlock(bus);
2705	return ret;
2706	}
2707
2708	int qtnf_cmd_netdev_changeupper(const struct qtnf_vif *vif, int br_domain)
2709	{
2710	struct qtnf_bus *bus = vif->mac->bus;
2711	struct sk_buff *cmd_skb;
2712	struct qlink_cmd_ndev_changeupper *cmd;
2713	int ret;
2714
2715	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
2716	cmd_no: QLINK_CMD_NDEV_EVENT,
2717	cmd_size: sizeof(*cmd));
2718	if (!cmd_skb)
2719	return -ENOMEM;
2720
2721	pr_debug("[VIF%u.%u] set broadcast domain to %d\n",
2722	vif->mac->macid, vif->vifid, br_domain);
2723
2724	cmd = (struct qlink_cmd_ndev_changeupper *)cmd_skb->data;
2725	cmd->nehdr.event = cpu_to_le16(QLINK_NDEV_EVENT_CHANGEUPPER);
2726	cmd->upper_type = QLINK_NDEV_UPPER_TYPE_BRIDGE;
2727	cmd->br_domain = cpu_to_le32(br_domain);
2728
2729	qtnf_bus_lock(bus);
2730	ret = qtnf_cmd_send(bus, cmd_skb);
2731	qtnf_bus_unlock(bus);
2732
2733	if (ret)
2734	pr_err("[VIF%u.%u] failed to set broadcast domain\n",
2735	vif->mac->macid, vif->vifid);
2736
2737	return ret;
2738	}
2739
2740	int qtnf_cmd_send_update_owe(struct qtnf_vif *vif,
2741	struct cfg80211_update_owe_info *owe)
2742	{
2743	struct qlink_cmd_update_owe *cmd;
2744	struct sk_buff *cmd_skb;
2745	int ret;
2746
2747	if (sizeof(*cmd) + owe->ie_len > QTNF_MAX_CMD_BUF_SIZE) {
2748	pr_warn("VIF%u.%u: OWE update IEs too big: %zu\n",
2749	vif->mac->macid, vif->vifid, owe->ie_len);
2750	return -E2BIG;
2751	}
2752
2753	cmd_skb = qtnf_cmd_alloc_new_cmdskb(macid: vif->mac->macid, vifid: vif->vifid,
2754	cmd_no: QLINK_CMD_UPDATE_OWE,
2755	cmd_size: sizeof(*cmd));
2756	if (!cmd_skb)
2757	return -ENOMEM;
2758
2759	cmd = (struct qlink_cmd_update_owe *)cmd_skb->data;
2760	ether_addr_copy(dst: cmd->peer, src: owe->peer);
2761	cmd->status = cpu_to_le16(owe->status);
2762	if (owe->ie_len && owe->ie)
2763	qtnf_cmd_skb_put_buffer(skb: cmd_skb, buf_src: owe->ie, len: owe->ie_len);
2764
2765	qtnf_bus_lock(bus: vif->mac->bus);
2766	ret = qtnf_cmd_send(bus: vif->mac->bus, cmd_skb);
2767	qtnf_bus_unlock(bus: vif->mac->bus);
2768
2769	return ret;
2770	}
2771