path: root/drivers/net/wireless/nxp/nxpwifi/util.c

// SPDX-License-Identifier: GPL-2.0-only
/*
 * NXP Wireless LAN device driver: utility functions
 *
 * Copyright 2011-2024 NXP
 */

#include "cfg.h"
#include "util.h"
#include "fw.h"
#include "main.h"
#include "cmdevt.h"
#include "wmm.h"
#include "11n.h"
#include <net/netlink.h>
#include <linux/mmc/sdio_ids.h>
#include <linux/mmc/sdio_func.h>
#include <linux/bitfield.h>
#include <net/ieee80211_radiotap.h>

#define RX_RATE_FORMAT_MASK   GENMASK(1, 0)
#define RX_RATE_BW_MASK       GENMASK(3, 2)
#define RX_RATE_GI_MASK       BIT(4)
#define RX_RATE_STBC_MASK     BIT(5)
#define RX_RATE_LDPC_MASK     BIT(6)

static struct nxpwifi_debug_data items[] = {
	{"debug_mask", item_size(debug_mask),
	 item_addr(debug_mask), 1},
	{"int_counter", item_size(int_counter),
	 item_addr(int_counter), 1},
	{"wmm_ac_vo", item_size(packets_out[WMM_AC_VO]),
	 item_addr(packets_out[WMM_AC_VO]), 1},
	{"wmm_ac_vi", item_size(packets_out[WMM_AC_VI]),
	 item_addr(packets_out[WMM_AC_VI]), 1},
	{"wmm_ac_be", item_size(packets_out[WMM_AC_BE]),
	 item_addr(packets_out[WMM_AC_BE]), 1},
	{"wmm_ac_bk", item_size(packets_out[WMM_AC_BK]),
	 item_addr(packets_out[WMM_AC_BK]), 1},
	{"tx_buf_size", item_size(tx_buf_size),
	 item_addr(tx_buf_size), 1},
	{"curr_tx_buf_size", item_size(curr_tx_buf_size),
	 item_addr(curr_tx_buf_size), 1},
	{"ps_mode", item_size(ps_mode),
	 item_addr(ps_mode), 1},
	{"ps_state", item_size(ps_state),
	 item_addr(ps_state), 1},
	{"is_deep_sleep", item_size(is_deep_sleep),
	 item_addr(is_deep_sleep), 1},
	{"wakeup_dev_req", item_size(pm_wakeup_card_req),
	 item_addr(pm_wakeup_card_req), 1},
	{"wakeup_tries", item_size(pm_wakeup_fw_try),
	 item_addr(pm_wakeup_fw_try), 1},
	{"hs_configured", item_size(is_hs_configured),
	 item_addr(is_hs_configured), 1},
	{"hs_activated", item_size(hs_activated),
	 item_addr(hs_activated), 1},
	{"num_tx_timeout", item_size(num_tx_timeout),
	 item_addr(num_tx_timeout), 1},
	{"is_cmd_timedout", item_size(is_cmd_timedout),
	 item_addr(is_cmd_timedout), 1},
	{"timeout_cmd_id", item_size(timeout_cmd_id),
	 item_addr(timeout_cmd_id), 1},
	{"timeout_cmd_act", item_size(timeout_cmd_act),
	 item_addr(timeout_cmd_act), 1},
	{"last_cmd_id", item_size(last_cmd_id),
	 item_addr(last_cmd_id), DBG_CMD_NUM},
	{"last_cmd_act", item_size(last_cmd_act),
	 item_addr(last_cmd_act), DBG_CMD_NUM},
	{"last_cmd_index", item_size(last_cmd_index),
	 item_addr(last_cmd_index), 1},
	{"last_cmd_resp_id", item_size(last_cmd_resp_id),
	 item_addr(last_cmd_resp_id), DBG_CMD_NUM},
	{"last_cmd_resp_index", item_size(last_cmd_resp_index),
	 item_addr(last_cmd_resp_index), 1},
	{"last_event", item_size(last_event),
	 item_addr(last_event), DBG_CMD_NUM},
	{"last_event_index", item_size(last_event_index),
	 item_addr(last_event_index), 1},
	{"last_mp_wr_bitmap", item_size(last_mp_wr_bitmap),
	 item_addr(last_mp_wr_bitmap), NXPWIFI_DBG_SDIO_MP_NUM},
	{"last_mp_wr_ports", item_size(last_mp_wr_ports),
	 item_addr(last_mp_wr_ports), NXPWIFI_DBG_SDIO_MP_NUM},
	{"last_mp_wr_len", item_size(last_mp_wr_len),
	 item_addr(last_mp_wr_len), NXPWIFI_DBG_SDIO_MP_NUM},
	{"last_mp_curr_wr_port", item_size(last_mp_curr_wr_port),
	 item_addr(last_mp_curr_wr_port), NXPWIFI_DBG_SDIO_MP_NUM},
	{"last_sdio_mp_index", item_size(last_sdio_mp_index),
	 item_addr(last_sdio_mp_index), 1},
	{"num_cmd_h2c_fail", item_size(num_cmd_host_to_card_failure),
	 item_addr(num_cmd_host_to_card_failure), 1},
	{"num_cmd_sleep_cfm_fail",
	 item_size(num_cmd_sleep_cfm_host_to_card_failure),
	 item_addr(num_cmd_sleep_cfm_host_to_card_failure), 1},
	{"num_tx_h2c_fail", item_size(num_tx_host_to_card_failure),
	 item_addr(num_tx_host_to_card_failure), 1},
	{"num_evt_deauth", item_size(num_event_deauth),
	 item_addr(num_event_deauth), 1},
	{"num_evt_disassoc", item_size(num_event_disassoc),
	 item_addr(num_event_disassoc), 1},
	{"num_evt_link_lost", item_size(num_event_link_lost),
	 item_addr(num_event_link_lost), 1},
	{"num_cmd_deauth", item_size(num_cmd_deauth),
	 item_addr(num_cmd_deauth), 1},
	{"num_cmd_assoc_ok", item_size(num_cmd_assoc_success),
	 item_addr(num_cmd_assoc_success), 1},
	{"num_cmd_assoc_fail", item_size(num_cmd_assoc_failure),
	 item_addr(num_cmd_assoc_failure), 1},
	{"cmd_sent", item_size(cmd_sent),
	 item_addr(cmd_sent), 1},
	{"data_sent", item_size(data_sent),
	 item_addr(data_sent), 1},
	{"cmd_resp_received", item_size(cmd_resp_received),
	 item_addr(cmd_resp_received), 1},
	{"event_received", item_size(event_received),
	 item_addr(event_received), 1},

	/* variables defined in struct nxpwifi_adapter */
	{"cmd_pending", adapter_item_size(cmd_pending),
	 adapter_item_addr(cmd_pending), 1},
	{"tx_pending", adapter_item_size(tx_pending),
	 adapter_item_addr(tx_pending), 1},
	{"rx_pending", adapter_item_size(rx_pending),
	 adapter_item_addr(rx_pending), 1},
};

static int num_of_items = ARRAY_SIZE(items);

/* Send init or shutdown command to firmware. */
int nxpwifi_init_shutdown_fw(struct nxpwifi_private *priv,
			     u32 func_init_shutdown)
{
	u16 cmd;

	if (func_init_shutdown == NXPWIFI_FUNC_INIT) {
		cmd = HOST_CMD_FUNC_INIT;
	} else if (func_init_shutdown == NXPWIFI_FUNC_SHUTDOWN) {
		cmd = HOST_CMD_FUNC_SHUTDOWN;
	} else {
		nxpwifi_dbg(priv->adapter, ERROR,
			    "unsupported parameter\n");
		return -EINVAL;
	}

	return nxpwifi_send_cmd(priv, cmd, HOST_ACT_GEN_SET, 0, NULL, true);
}
EXPORT_SYMBOL_GPL(nxpwifi_init_shutdown_fw);

/* Handle IOCTL get/set of debug info across driver structures. */
int nxpwifi_get_debug_info(struct nxpwifi_private *priv,
			   struct nxpwifi_debug_info *info)
{
	struct nxpwifi_adapter *adapter = priv->adapter;

	if (info) {
		info->debug_mask = adapter->debug_mask;
		memcpy(info->packets_out,
		       priv->wmm.packets_out,
		       sizeof(priv->wmm.packets_out));
		info->curr_tx_buf_size = (u32)adapter->curr_tx_buf_size;
		info->tx_buf_size = (u32)adapter->tx_buf_size;
		info->rx_tbl_num = nxpwifi_get_rx_reorder_tbl(priv,
							      info->rx_tbl);
		info->tx_tbl_num = nxpwifi_get_tx_ba_stream_tbl(priv,
								info->tx_tbl);
		info->ps_mode = adapter->ps_mode;
		info->ps_state = adapter->ps_state;
		info->is_deep_sleep = adapter->is_deep_sleep;
		info->pm_wakeup_card_req = adapter->pm_wakeup_card_req;
		info->pm_wakeup_fw_try = adapter->pm_wakeup_fw_try;
		info->is_hs_configured = test_bit(NXPWIFI_IS_HS_CONFIGURED,
						  &adapter->work_flags);
		info->hs_activated = adapter->hs_activated;
		info->is_cmd_timedout = test_bit(NXPWIFI_IS_CMD_TIMEDOUT,
						 &adapter->work_flags);
		info->num_cmd_host_to_card_failure =
			adapter->dbg.num_cmd_host_to_card_failure;
		info->num_cmd_sleep_cfm_host_to_card_failure =
			adapter->dbg.num_cmd_sleep_cfm_host_to_card_failure;
		info->num_tx_host_to_card_failure =
			adapter->dbg.num_tx_host_to_card_failure;
		info->num_event_deauth = adapter->dbg.num_event_deauth;
		info->num_event_disassoc = adapter->dbg.num_event_disassoc;
		info->num_event_link_lost = adapter->dbg.num_event_link_lost;
		info->num_cmd_deauth = adapter->dbg.num_cmd_deauth;
		info->num_cmd_assoc_success =
			adapter->dbg.num_cmd_assoc_success;
		info->num_cmd_assoc_failure =
			adapter->dbg.num_cmd_assoc_failure;
		info->num_tx_timeout = adapter->dbg.num_tx_timeout;
		info->timeout_cmd_id = adapter->dbg.timeout_cmd_id;
		info->timeout_cmd_act = adapter->dbg.timeout_cmd_act;
		memcpy(info->last_cmd_id, adapter->dbg.last_cmd_id,
		       sizeof(adapter->dbg.last_cmd_id));
		memcpy(info->last_cmd_act, adapter->dbg.last_cmd_act,
		       sizeof(adapter->dbg.last_cmd_act));
		info->last_cmd_index = adapter->dbg.last_cmd_index;
		memcpy(info->last_cmd_resp_id, adapter->dbg.last_cmd_resp_id,
		       sizeof(adapter->dbg.last_cmd_resp_id));
		info->last_cmd_resp_index = adapter->dbg.last_cmd_resp_index;
		memcpy(info->last_event, adapter->dbg.last_event,
		       sizeof(adapter->dbg.last_event));
		info->last_event_index = adapter->dbg.last_event_index;
		memcpy(info->last_mp_wr_bitmap, adapter->dbg.last_mp_wr_bitmap,
		       sizeof(adapter->dbg.last_mp_wr_bitmap));
		memcpy(info->last_mp_wr_ports, adapter->dbg.last_mp_wr_ports,
		       sizeof(adapter->dbg.last_mp_wr_ports));
		memcpy(info->last_mp_curr_wr_port,
		       adapter->dbg.last_mp_curr_wr_port,
		       sizeof(adapter->dbg.last_mp_curr_wr_port));
		memcpy(info->last_mp_wr_len, adapter->dbg.last_mp_wr_len,
		       sizeof(adapter->dbg.last_mp_wr_len));
		info->last_sdio_mp_index = adapter->dbg.last_sdio_mp_index;
		info->data_sent = adapter->data_sent;
		info->cmd_sent = adapter->cmd_sent;
		info->cmd_resp_received = adapter->cmd_resp_received;
	}

	return 0;
}

int nxpwifi_debug_info_to_buffer(struct nxpwifi_private *priv, char *buf,
				 struct nxpwifi_debug_info *info)
{
	char *p = buf;
	struct nxpwifi_debug_data *d = &items[0];
	size_t size, addr;
	long val;
	int i, j;

	if (!info)
		return 0;

	for (i = 0; i < num_of_items; i++) {
		p += sprintf(p, "%s=", d[i].name);

		size = d[i].size / d[i].num;

		if (i < (num_of_items - 3))
			addr = d[i].addr + (size_t)info;
		else /* The last 3 items are struct nxpwifi_adapter variables */
			addr = d[i].addr + (size_t)priv->adapter;

		for (j = 0; j < d[i].num; j++) {
			switch (size) {
			case 1:
				val = *((u8 *)addr);
				break;
			case 2:
				val = get_unaligned((u16 *)addr);
				break;
			case 4:
				val = get_unaligned((u32 *)addr);
				break;
			case 8:
				val = get_unaligned((long long *)addr);
				break;
			default:
				val = -1;
				break;
			}

			p += sprintf(p, "%#lx ", val);
			addr += size;
		}

		p += sprintf(p, "\n");
	}

	if (info->tx_tbl_num) {
		p += sprintf(p, "Tx BA stream table:\n");
		for (i = 0; i < info->tx_tbl_num; i++)
			p += sprintf(p, "tid = %d, ra = %pM\n",
				     info->tx_tbl[i].tid, info->tx_tbl[i].ra);
	}

	if (info->rx_tbl_num) {
		p += sprintf(p, "Rx reorder table:\n");
		for (i = 0; i < info->rx_tbl_num; i++) {
			p += sprintf(p, "tid = %d, ta = %pM, ",
				     info->rx_tbl[i].tid,
				     info->rx_tbl[i].ta);
			p += sprintf(p, "start_win = %d, ",
				     info->rx_tbl[i].start_win);
			p += sprintf(p, "win_size = %d, buffer: ",
				     info->rx_tbl[i].win_size);

			for (j = 0; j < info->rx_tbl[i].win_size; j++)
				p += sprintf(p, "%c ",
					     info->rx_tbl[i].buffer[j] ?
					     '1' : '0');

			p += sprintf(p, "\n");
		}
	}

	return p - buf;
}

bool nxpwifi_is_channel_setting_allowable(struct nxpwifi_private *priv,
					  struct ieee80211_channel *check_chan)
{
	struct nxpwifi_adapter *adapter = priv->adapter;
	int i;
	struct nxpwifi_private *tmp_priv;
	u8 bss_role = GET_BSS_ROLE(priv);
	struct ieee80211_channel *set_chan;

	for (i = 0; i < adapter->priv_num; i++) {
		tmp_priv = adapter->priv[i];
		if (tmp_priv == priv)
			continue;

		set_chan = NULL;
		if (bss_role == NXPWIFI_BSS_ROLE_STA) {
			if (GET_BSS_ROLE(tmp_priv) == NXPWIFI_BSS_ROLE_UAP &&
			    netif_carrier_ok(tmp_priv->netdev) &&
			    cfg80211_chandef_valid(&tmp_priv->bss_chandef))
				set_chan = tmp_priv->bss_chandef.chan;
		} else if (bss_role == NXPWIFI_BSS_ROLE_UAP) {
			struct nxpwifi_current_bss_params *bss_params =
				&tmp_priv->curr_bss_params;
			int channel = bss_params->bss_descriptor.channel;
			enum nl80211_band band =
				nxpwifi_band_to_radio_type(bss_params->band);
			int freq =
				ieee80211_channel_to_frequency(channel, band);

			if (GET_BSS_ROLE(tmp_priv) == NXPWIFI_BSS_ROLE_STA &&
			    tmp_priv->media_connected)
				set_chan = ieee80211_get_channel(adapter->wiphy, freq);
		}

		if (set_chan && !ieee80211_channel_equal(check_chan, set_chan)) {
			nxpwifi_dbg(adapter, ERROR,
				    "AP/STA must run on the same channel\n");
			return false;
		}
	}

	return true;
}

void nxpwifi_convert_chan_to_band_cfg(struct nxpwifi_private *priv,
				      u8 *band_cfg,
				      struct cfg80211_chan_def *chan_def)
{
	u8 chan_band = 0, chan_width = 0, chan2_offset = 0;

	switch (chan_def->chan->band) {
	case NL80211_BAND_2GHZ:
		chan_band = BAND_2GHZ;
		break;
	case NL80211_BAND_5GHZ:
		chan_band = BAND_5GHZ;
		break;
	default:
		break;
	}

	switch (chan_def->width) {
	case NL80211_CHAN_WIDTH_20_NOHT:
	case NL80211_CHAN_WIDTH_20:
		chan_width = CHAN_BW_20MHZ;
		break;
	case NL80211_CHAN_WIDTH_40:
		chan_width = CHAN_BW_40MHZ;
		if (chan_def->center_freq1 > chan_def->chan->center_freq)
			chan2_offset = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
		else
			chan2_offset = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
		break;
	case NL80211_CHAN_WIDTH_80:
		chan2_offset =
			nxpwifi_get_sec_chan_offset(chan_def->chan->hw_value);
		chan_width = CHAN_BW_80MHZ;
		break;
	case NL80211_CHAN_WIDTH_80P80:
	case NL80211_CHAN_WIDTH_160:
	default:
		nxpwifi_dbg(priv->adapter,
			    WARN, "Unknown channel width: %d\n",
			    chan_def->width);
		break;
	}

	*band_cfg = ((chan2_offset << BAND_CFG_CHAN2_SHIFT_BIT) &
		     BAND_CFG_CHAN2_OFFSET_MASK) |
		    ((chan_width << BAND_CFG_CHAN_WIDTH_SHIFT_BIT) &
		     BAND_CFG_CHAN_WIDTH_MASK) |
		    ((chan_band << BAND_CFG_CHAN_BAND_SHIFT_BIT) &
		     BAND_CFG_CHAN_BAND_MASK);
}

static int
nxpwifi_parse_mgmt_packet(struct nxpwifi_private *priv, u8 *payload, u16 len,
			  struct rxpd *rx_pd)
{
	u16 stype;
	u8 category;
	struct ieee80211_hdr *ieee_hdr = (void *)payload;

	stype = (le16_to_cpu(ieee_hdr->frame_control) & IEEE80211_FCTL_STYPE);

	switch (stype) {
	case IEEE80211_STYPE_ACTION:
		category = *(payload + sizeof(struct ieee80211_hdr));
		switch (category) {
		case WLAN_CATEGORY_BACK:
			/*we dont indicate BACK action frames to cfg80211*/
			nxpwifi_dbg(priv->adapter, INFO,
				    "drop BACK action frames");
			return -EINVAL;
		default:
			nxpwifi_dbg(priv->adapter, INFO,
				    "unknown public action frame category %d\n",
				    category);
		}
		break;
	default:
		nxpwifi_dbg(priv->adapter, INFO,
			    "unknown mgmt frame subtype %#x\n", stype);
		return 0;
	}

	return 0;
}

/* Send deauth frame to cfg80211. */
void nxpwifi_host_mlme_disconnect(struct nxpwifi_private *priv,
				  u16 reason_code, u8 *sa)
{
	u8 frame_buf[100];
	struct ieee80211_mgmt *mgmt = (struct ieee80211_mgmt *)frame_buf;

	memset(frame_buf, 0, sizeof(frame_buf));
	mgmt->frame_control = cpu_to_le16(IEEE80211_STYPE_DEAUTH);
	mgmt->duration = 0;
	mgmt->seq_ctrl = 0;
	mgmt->u.deauth.reason_code = cpu_to_le16(reason_code);

	if (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_STA) {
		eth_broadcast_addr(mgmt->da);
		memcpy(mgmt->sa,
		       priv->curr_bss_params.bss_descriptor.mac_address,
		       ETH_ALEN);
		memcpy(mgmt->bssid, priv->cfg_bssid, ETH_ALEN);
		priv->auth_flag = 0;
		priv->auth_alg = WLAN_AUTH_NONE;
	} else {
		memcpy(mgmt->da, priv->curr_addr, ETH_ALEN);
		memcpy(mgmt->sa, sa, ETH_ALEN);
		memcpy(mgmt->bssid, priv->curr_addr, ETH_ALEN);
	}

	if (GET_BSS_ROLE(priv) != NXPWIFI_BSS_ROLE_UAP) {
		cfg80211_rx_mlme_mgmt(priv->netdev, frame_buf, 26);
	} else {
		cfg80211_rx_mgmt(&priv->wdev,
				 priv->bss_chandef.chan->center_freq,
				 0, frame_buf, 26, 0);
	}
}

/* Parse and forward received management packet to cfg80211. */
int
nxpwifi_process_mgmt_packet(struct nxpwifi_private *priv,
			    struct sk_buff *skb)
{
	struct nxpwifi_adapter *adapter = priv->adapter;
	struct rxpd *rx_pd;
	u16 pkt_len;
	struct ieee80211_hdr *ieee_hdr;
	int ret;

	if (!skb)
		return -ENOMEM;

	if (!priv->mgmt_frame_mask ||
	    priv->wdev.iftype == NL80211_IFTYPE_UNSPECIFIED) {
		nxpwifi_dbg(adapter, ERROR,
			    "do not receive mgmt frames on uninitialized intf");
		return -EINVAL;
	}

	rx_pd = (struct rxpd *)skb->data;
	pkt_len = le16_to_cpu(rx_pd->rx_pkt_length);
	if (pkt_len < sizeof(struct ieee80211_hdr) + sizeof(pkt_len)) {
		nxpwifi_dbg(adapter, ERROR, "invalid rx_pkt_length");
		return -EINVAL;
	}

	skb_pull(skb, le16_to_cpu(rx_pd->rx_pkt_offset));
	skb_pull(skb, sizeof(pkt_len));
	pkt_len -= sizeof(pkt_len);

	ieee_hdr = (void *)skb->data;
	if (ieee80211_is_mgmt(ieee_hdr->frame_control)) {
		ret = nxpwifi_parse_mgmt_packet(priv, (u8 *)ieee_hdr,
						pkt_len, rx_pd);
		if (ret)
			return ret;
	}
	/* Remove address4 */
	memmove(skb->data + sizeof(struct ieee80211_hdr_3addr),
		skb->data + sizeof(struct ieee80211_hdr),
		pkt_len - sizeof(struct ieee80211_hdr));

	pkt_len -= ETH_ALEN;
	rx_pd->rx_pkt_length = cpu_to_le16(pkt_len);

	if (priv->host_mlme_reg &&
	    (GET_BSS_ROLE(priv) != NXPWIFI_BSS_ROLE_UAP) &&
	    (ieee80211_is_auth(ieee_hdr->frame_control) ||
	     ieee80211_is_deauth(ieee_hdr->frame_control) ||
	     ieee80211_is_disassoc(ieee_hdr->frame_control))) {
		struct nxpwifi_rxinfo *rx_info;

		if (ieee80211_is_auth(ieee_hdr->frame_control)) {
			if (priv->auth_flag & HOST_MLME_AUTH_PENDING) {
				if (priv->auth_alg != WLAN_AUTH_SAE) {
					priv->auth_flag &=
						~HOST_MLME_AUTH_PENDING;
					priv->auth_flag |=
						HOST_MLME_AUTH_DONE;
				}
			} else {
				return 0;
			}

			nxpwifi_dbg(adapter, MSG,
				    "auth: receive authentication from %pM\n",
				    ieee_hdr->addr3);
		} else {
			if (!priv->wdev.connected)
				return 0;

			if (ieee80211_is_deauth(ieee_hdr->frame_control)) {
				nxpwifi_dbg(adapter, MSG,
					    "auth: receive deauth from %pM\n",
					    ieee_hdr->addr3);
				priv->auth_flag = 0;
				priv->auth_alg = WLAN_AUTH_NONE;
			} else {
				nxpwifi_dbg(adapter, MSG,
					    "assoc: receive disassoc from %pM\n",
					    ieee_hdr->addr3);
			}
		}

		rx_info = NXPWIFI_SKB_RXCB(skb);
		rx_info->pkt_len = pkt_len;
		skb_queue_tail(&adapter->rx_mlme_q, skb);
		nxpwifi_queue_wiphy_work(adapter, &adapter->host_mlme_work);
		return -EINPROGRESS;
	}

	if (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_UAP) {
		if (ieee80211_is_auth(ieee_hdr->frame_control))
			nxpwifi_dbg(adapter, MSG,
				    "auth: receive auth from %pM\n",
				    ieee_hdr->addr2);
		if (ieee80211_is_deauth(ieee_hdr->frame_control))
			nxpwifi_dbg(adapter, MSG,
				    "auth: receive deauth from %pM\n",
				    ieee_hdr->addr2);
		if (ieee80211_is_disassoc(ieee_hdr->frame_control))
			nxpwifi_dbg(adapter, MSG,
				    "assoc: receive disassoc from %pM\n",
				    ieee_hdr->addr2);
		if (ieee80211_is_assoc_req(ieee_hdr->frame_control))
			nxpwifi_dbg(adapter, MSG,
				    "assoc: receive assoc req from %pM\n",
				    ieee_hdr->addr2);
		if (ieee80211_is_reassoc_req(ieee_hdr->frame_control))
			nxpwifi_dbg(adapter, MSG,
				    "assoc: receive reassoc req from %pM\n",
				    ieee_hdr->addr2);
	}

	cfg80211_rx_mgmt(&priv->wdev, priv->roc_cfg.chan.center_freq,
			 CAL_RSSI(rx_pd->snr, rx_pd->nf), skb->data, pkt_len,
			 0);

	return 0;
}

#define RTAP_MAX_LEN 128

int nxpwifi_recv_packet_to_monif(struct nxpwifi_private *priv,
				 struct sk_buff *skb)
{
	struct rxpd *rxpd;
	struct rxpd_extra_info ext;
	struct ieee80211_hdr *dot11;
	struct ieee80211_radiotap_header *hdr;
	int freq, band;
	bool has_ext = false, has_ts = false, use_tsft = false;
	u16 rx_flags = 0, off, chan_flags, rx_pkt_offset;
	__le16 freq_le, flags_le;
	u8 rthdr[RTAP_MAX_LEN] = {0};
	s8 signal, noise;
	u8 flags = 0, chan, ant, format, bw, gi, ldpc, mcs, nss, stbc;

	if (!skb)
		return -EINVAL;

	rxpd = (struct rxpd *)skb->data;
	rx_pkt_offset = le16_to_cpu(rxpd->rx_pkt_offset);

	if (rx_pkt_offset > skb->len || rx_pkt_offset < sizeof(struct rxpd))
		return -EINVAL;

	if (skb->len - rx_pkt_offset < sizeof(struct ieee80211_hdr))
		return -EINVAL;

	has_ext = rxpd->flags & RXPD_FLAG_EXTRA_HEADER;

	if (has_ext)
		memcpy((void *)&ext, (void *)(rxpd + 1), sizeof(ext));

	dot11 = (void *)skb->data + rx_pkt_offset;
	memset(rthdr, 0, sizeof(rthdr));
	hdr = (void *)rthdr;
	hdr->it_version = 0;
	hdr->it_pad = 0;
	hdr->it_present = 0;
	off = sizeof(*hdr);
	hdr->it_present |= cpu_to_le32(BIT(IEEE80211_RADIOTAP_FLAGS));

	if (has_ext) {
		has_ts = true;
		use_tsft = (ext.timestamp.position == 0);

		if (has_ts) {
			if (use_tsft)
				hdr->it_present |= cpu_to_le32(BIT(IEEE80211_RADIOTAP_TSFT));
			else
				hdr->it_present |= cpu_to_le32(BIT(IEEE80211_RADIOTAP_TIMESTAMP));
		}

		flags = ext.flags & ~IEEE80211_RADIOTAP_F_BADFCS;
		/* reverse fail fcs, 1 means pass FCS in FW,
		 * but means fail FCS in radiotap
		 */
		flags &= ~((~ext.flags) & IEEE80211_RADIOTAP_F_BADFCS);

		if (ext.plcp_crc_failed)
			rx_flags |= IEEE80211_RADIOTAP_F_RX_BADPLCP;
	}

	if (has_ts && use_tsft) {
		off = ALIGN(off, 8);
		memcpy(rthdr + off, &ext.timestamp.device_timestamp, 8);
		off += 8;
	}

	if (ieee80211_has_morefrags(dot11->frame_control))
		flags |= IEEE80211_RADIOTAP_F_FRAG;

	if (ieee80211_has_protected(dot11->frame_control))
		flags |= IEEE80211_RADIOTAP_F_WEP;

	rthdr[off++] = flags;
	off = ALIGN(off, 2);
	hdr->it_present |= cpu_to_le32(BIT(IEEE80211_RADIOTAP_CHANNEL));
	chan = (le32_to_cpu(rxpd->rx_info) >> 5) & 0xff;
	band = (chan <= 14) ? NL80211_BAND_2GHZ : NL80211_BAND_5GHZ;
	freq = ieee80211_channel_to_frequency(chan, band);

	if (has_ext)
		chan_flags = ext.channel_flags;
	else if (band == NL80211_BAND_2GHZ)
		chan_flags = IEEE80211_CHAN_2GHZ;
	else
		chan_flags = IEEE80211_CHAN_5GHZ;

	freq_le  = cpu_to_le16(freq);
	flags_le = cpu_to_le16(chan_flags);
	memcpy(rthdr + off, &freq_le, 2);
	off += 2;
	memcpy(rthdr + off, &flags_le, 2);
	off += 2;
	hdr->it_present |= cpu_to_le32(BIT(IEEE80211_RADIOTAP_DBM_ANTSIGNAL));
	signal = -(rxpd->nf - rxpd->snr);
	rthdr[off++] = signal;
	hdr->it_present |= cpu_to_le32(BIT(IEEE80211_RADIOTAP_DBM_ANTNOISE));
	noise = -rxpd->nf;
	rthdr[off++] = noise;
	hdr->it_present |= cpu_to_le32(BIT(IEEE80211_RADIOTAP_ANTENNA));
	ant = rxpd->antenna >> 1;
	rthdr[off++] = ant;

	if (rx_flags) {
		hdr->it_present |= cpu_to_le32(BIT(IEEE80211_RADIOTAP_RX_FLAGS));
		off = ALIGN(off, 2);
		memcpy(rthdr + off, &rx_flags, 2);
		off += 2;
	}

	format = FIELD_GET(RX_RATE_FORMAT_MASK, rxpd->rate_info);
	bw = FIELD_GET(RX_RATE_BW_MASK, rxpd->rate_info);
	ldpc = FIELD_GET(RX_RATE_LDPC_MASK, rxpd->rate_info) ? 1 : 0;
	stbc = FIELD_GET(RX_RATE_STBC_MASK, rxpd->rate_info) ? 1 : 0;

	if (format == NXPWIFI_RATE_FORMAT_HE) {
		gi = ((rxpd->rate_info >> 7) & 0x1) << 1 |
			((rxpd->rate_info >> 4) & 0x1);
	} else {
		gi = FIELD_GET(RX_RATE_GI_MASK, rxpd->rate_info);
	}

	mcs = rxpd->rx_rate & 0xf;
	nss = ((rxpd->rx_rate >> 4) & 0xf) + 1;

	if (format == NXPWIFI_RATE_FORMAT_HT) {
		u8 mcs_flags = 0;

		hdr->it_present |= cpu_to_le32(BIT(IEEE80211_RADIOTAP_MCS));
		rthdr[off++] = IEEE80211_RADIOTAP_MCS_HAVE_MCS |
					IEEE80211_RADIOTAP_MCS_HAVE_BW |
					IEEE80211_RADIOTAP_MCS_HAVE_GI;

		if (bw == 1)
			mcs_flags |= IEEE80211_RADIOTAP_MCS_BW_40;

		if (gi)
			mcs_flags |= IEEE80211_RADIOTAP_MCS_SGI;

		if (ldpc)
			mcs_flags |= IEEE80211_RADIOTAP_MCS_FEC_LDPC;

		if (stbc)
			mcs_flags |= (1 << IEEE80211_RADIOTAP_MCS_STBC_SHIFT);

		rthdr[off++] = mcs_flags;
		rthdr[off++] = mcs;
	}

	if (format == NXPWIFI_RATE_FORMAT_VHT && has_ext) {
		struct ieee80211_radiotap_vht vht = {0};
		u32 vht_sig1 = 0, vht_sig2 = 0;
		__le16 partial_aid = 0;
		u8 bw_field = 0;

		vht_sig1 = ext.vht_he_sig1;
		vht_sig2 = ext.vht_he_sig2;
		hdr->it_present |= cpu_to_le32(BIT(IEEE80211_RADIOTAP_VHT));
		vht.known = cpu_to_le16(IEEE80211_RADIOTAP_VHT_KNOWN_GI |
					IEEE80211_RADIOTAP_VHT_KNOWN_BANDWIDTH |
					IEEE80211_RADIOTAP_VHT_KNOWN_STBC |
					IEEE80211_RADIOTAP_VHT_KNOWN_BEAMFORMED |
					IEEE80211_RADIOTAP_VHT_KNOWN_GROUP_ID);

		if (stbc)
			vht.flags |= IEEE80211_RADIOTAP_VHT_FLAG_STBC;

		if (gi)
			vht.flags |= IEEE80211_RADIOTAP_VHT_FLAG_SGI;

		if (vht_sig2 & BIT(1))
			vht.flags |= IEEE80211_RADIOTAP_VHT_FLAG_SGI_NSYM_M10_9;

		if (vht_sig2 & BIT(8))
			vht.flags |= IEEE80211_RADIOTAP_VHT_FLAG_BEAMFORMED;

		switch (bw) {
		case 1:
			bw_field = 1; /* 40 MHz */
			break;
		case 2:
			bw_field = 4; /* 80 MHz */
			break;
		case 3:
			bw_field = 11; /* 160 MHz */
			break;
		default:
			bw_field = 0; /* 20 MHz */
		}

		vht.bandwidth = bw_field;
		vht.mcs_nss[0] = (nss & 0xf) | (mcs << 4);

		if (vht_sig2 & BIT(2))
			vht.coding |= IEEE80211_RADIOTAP_CODING_LDPC_USER0;

		vht.group_id = (vht_sig1 >> 4) & 0x3f;
		memcpy(&vht.partial_aid, &partial_aid, 2);
		off = ALIGN(off, 2);
		memcpy(rthdr + off, &vht, sizeof(vht));
		off += sizeof(vht);
	}

	/* TIMESTAMP */
	if (has_ts && !use_tsft) {
		u64 ts;
		__le64 ts_le;
		u16 accuracy = 0;
		__le16 acc_le;
		u8 flags = 0;

		hdr->it_present |=
			cpu_to_le32(BIT(IEEE80211_RADIOTAP_TIMESTAMP));
		off = ALIGN(off, 8);

		if (ext.timestamp.flags & 0x01) {
			flags |= IEEE80211_RADIOTAP_TIMESTAMP_FLAG_32BIT;
			ts = (u32)ext.timestamp.device_timestamp;
		} else {
			flags |= IEEE80211_RADIOTAP_TIMESTAMP_FLAG_64BIT;
			ts = ext.timestamp.device_timestamp;
		}

		ts_le = cpu_to_le64(ts);
		memcpy(rthdr + off, &ts_le, sizeof(ts_le));
		off += sizeof(ts_le);

		if (ext.timestamp.flags & 0x02) {
			accuracy = ext.timestamp.accuracy;
			flags |= IEEE80211_RADIOTAP_TIMESTAMP_FLAG_ACCURACY;
		}

		acc_le = cpu_to_le16(accuracy);
		memcpy(rthdr + off, &acc_le, sizeof(acc_le));
		off += sizeof(acc_le);
		rthdr[off++] = (ext.timestamp.unit & 0x0f) |
				((ext.timestamp.position & 0x0f) << 4);
		rthdr[off++] = flags;
	}

	if (format == NXPWIFI_RATE_FORMAT_HE && has_ext) {
		struct ieee80211_radiotap_he he = {0};
		u16 data1 = 0, data2 = 0, data3 = 0, data5 = 0, data6 = 0;
		u8 bw_val = 0;

		memcpy((void *)&ext, (void *)(rxpd + 1), sizeof(ext));

		off = ALIGN(off, 2);
		hdr->it_present |= cpu_to_le32(BIT(IEEE80211_RADIOTAP_HE));
		data1 |= IEEE80211_RADIOTAP_HE_DATA1_DATA_MCS_KNOWN;
		data1 |= IEEE80211_RADIOTAP_HE_DATA1_BW_RU_ALLOC_KNOWN;
		data1 |= IEEE80211_RADIOTAP_HE_DATA1_STBC_KNOWN;
		data1 |= IEEE80211_RADIOTAP_HE_DATA1_CODING_KNOWN;
		data2 |= IEEE80211_RADIOTAP_HE_DATA2_GI_KNOWN;
		data3 = mcs << 8;
		data3 |= FIELD_PREP(IEEE80211_RADIOTAP_HE_DATA3_DATA_MCS, mcs);

		if (stbc)
			data3 |= IEEE80211_RADIOTAP_HE_DATA3_STBC;

		switch (bw) {
		case 0:
			bw_val |= IEEE80211_RADIOTAP_HE_DATA5_DATA_BW_RU_ALLOC_20MHZ;
			break;
		case 1:
			bw_val |= IEEE80211_RADIOTAP_HE_DATA5_DATA_BW_RU_ALLOC_40MHZ;
			break;
		case 2:
			bw_val |= IEEE80211_RADIOTAP_HE_DATA5_DATA_BW_RU_ALLOC_80MHZ;
			break;
		case 3:
			bw_val |= IEEE80211_RADIOTAP_HE_DATA5_DATA_BW_RU_ALLOC_160MHZ;
			break;
		}

		data5 |= FIELD_PREP(IEEE80211_RADIOTAP_HE_DATA5_DATA_BW_RU_ALLOC,
						    bw_val);

		switch (gi) {
		case 0:
			data5 |= IEEE80211_RADIOTAP_HE_DATA5_GI_0_8;
			break;
		case 1:
			data5 |= IEEE80211_RADIOTAP_HE_DATA5_GI_1_6;
			break;
		case 2:
			data5 |= IEEE80211_RADIOTAP_HE_DATA5_GI_3_2;
			break;
		}

		data6 |= FIELD_PREP(IEEE80211_RADIOTAP_HE_DATA6_NSTS, nss);
		he.data1 = cpu_to_le16(data1);
		he.data2 = cpu_to_le16(data2);
		he.data3 = cpu_to_le16(data3);
		he.data5 = cpu_to_le16(data5);
		he.data6 = cpu_to_le16(data6);
		memcpy(rthdr + off, &he, sizeof(he));
		off += sizeof(he);
	}

	hdr->it_len = cpu_to_le16(off);

	if (off > sizeof(rthdr))
		return -EINVAL;

	/* Remove RXPD */
	skb_pull(skb, rx_pkt_offset);

	/* Ensure enough headroom */
	if (skb_cow_head(skb, off))
		return -ENOMEM;

	/* Push radiotap header */
	skb_push(skb, off);
	memcpy(skb->data, rthdr, off);
	skb_reset_mac_header(skb);
	skb->ip_summed = CHECKSUM_NONE;
	skb->pkt_type  = PACKET_OTHERHOST;
	skb->dev       = priv->netdev;
	skb->protocol  = htons(ETH_P_802_2);
	netif_rx(skb);
	return 0;
}

/* Process received packet and pass to net stack; reuse or build skb as needed. */
int nxpwifi_recv_packet(struct nxpwifi_private *priv, struct sk_buff *skb)
{
	struct nxpwifi_sta_node *src_node;
	struct ethhdr *p_ethhdr;

	if (!skb)
		return -ENOMEM;

	priv->stats.rx_bytes += skb->len;
	priv->stats.rx_packets++;

	if (GET_BSS_ROLE(priv) == NXPWIFI_BSS_ROLE_UAP) {
		p_ethhdr = (void *)skb->data;
		rcu_read_lock();
		src_node = nxpwifi_get_sta_entry(priv, p_ethhdr->h_source);
		if (src_node) {
			src_node->stats.last_rx = jiffies;
			src_node->stats.rx_bytes += skb->len;
			src_node->stats.rx_packets++;
		}
		rcu_read_unlock();
	}

	skb->dev = priv->netdev;
	skb->protocol = eth_type_trans(skb, priv->netdev);
	skb->ip_summed = CHECKSUM_NONE;

	netif_rx(skb);
	return 0;
}

/* IOCTL completion callback: wake waiters or process response as needed. */
int nxpwifi_complete_cmd(struct nxpwifi_adapter *adapter,
			 struct cmd_ctrl_node *cmd_node)
{
	WARN_ON(!cmd_node->wait_q_enabled);
	nxpwifi_dbg(adapter, CMD, "cmd completed: status=%d\n",
		    adapter->cmd_wait_q.status);

	*cmd_node->condition = true;
	wake_up_interruptible(&adapter->cmd_wait_q.wait);

	return 0;
}

/* Find STA entry by MAC under rcu_read_lock(); return NULL if not found. */
struct nxpwifi_sta_node *
nxpwifi_get_sta_entry(struct nxpwifi_private *priv, const u8 *mac)
{
	struct nxpwifi_sta_node *node;
	struct nxpwifi_sta_node *found = NULL;

	if (!mac)
		return NULL;
	list_for_each_entry_rcu(node, &priv->sta_list, list) {
		if (!memcmp(node->mac_addr, mac, ETH_ALEN)) {
			found = node;
			break;
		}
	}

	return found;
}

struct nxpwifi_sta_node *
nxpwifi_get_sta_entry_rcu(struct nxpwifi_private *priv, const u8 *mac)
{
	struct nxpwifi_sta_node *node;

	rcu_read_lock();
	node = nxpwifi_get_sta_entry(priv, mac);
	rcu_read_unlock();

	return node;
}

/* Add STA entry by MAC; return existing entry or NULL on invalid MAC. */
struct nxpwifi_sta_node *
nxpwifi_add_sta_entry(struct nxpwifi_private *priv, const u8 *mac)
{
	struct nxpwifi_sta_node *node;

	if (!mac)
		return NULL;

	spin_lock_bh(&priv->sta_list_spinlock);
	node = nxpwifi_get_sta_entry_rcu(priv, mac);

	if (node)
		goto done;

	node = kzalloc_obj(*node, GFP_ATOMIC);
	if (!node)
		goto done;

	memcpy(node->mac_addr, mac, ETH_ALEN);
	list_add_tail_rcu(&node->list, &priv->sta_list);

done:
	spin_unlock_bh(&priv->sta_list_spinlock);
	return node;
}

/* Parse HT cap IE from association IEs and set STA HT parameters. */
void
nxpwifi_set_sta_ht_cap(struct nxpwifi_private *priv, const u8 *ies,
		       int ies_len, struct nxpwifi_sta_node *node)
{
	struct element *ht_cap_ie;
	const struct ieee80211_ht_cap *ht_cap;

	if (!ies)
		return;

	ht_cap_ie = (void *)cfg80211_find_ie(WLAN_EID_HT_CAPABILITY, ies,
					     ies_len);
	if (ht_cap_ie) {
		ht_cap = (void *)(ht_cap_ie + 1);
		node->is_11n_enabled = 1;
		node->max_amsdu = le16_to_cpu(ht_cap->cap_info) &
				  IEEE80211_HT_CAP_MAX_AMSDU ?
				  NXPWIFI_TX_DATA_BUF_SIZE_8K :
				  NXPWIFI_TX_DATA_BUF_SIZE_4K;
	} else {
		node->is_11n_enabled = 0;
	}
}

/* Delete a station from list; called under cfg80211 mutex. */

void nxpwifi_del_sta_entry(struct nxpwifi_private *priv, const u8 *mac)
{
	struct nxpwifi_sta_node *node;

	list_for_each_entry_rcu(node, &priv->sta_list, list) {
		if (!memcmp(node->mac_addr, mac, ETH_ALEN)) {
			list_del_rcu(&node->list);
			kfree_rcu(node, rcu);
			break;
		}
	}
}

/* Delete all stations from list. */
void nxpwifi_del_all_sta_list(struct nxpwifi_private *priv)
{
	struct nxpwifi_sta_node *node, *tmp;

	spin_lock_bh(&priv->sta_list_spinlock);

	list_for_each_entry_safe(node, tmp, &priv->sta_list, list) {
		list_del_rcu(&node->list);
		kfree_rcu(node, rcu);
	}

	INIT_LIST_HEAD(&priv->sta_list);
	spin_unlock_bh(&priv->sta_list_spinlock);
}

/* Add one histogram sample. */
void nxpwifi_hist_data_add(struct nxpwifi_private *priv,
			   u8 rx_rate, s8 snr, s8 nflr)
{
	struct nxpwifi_histogram_data *phist_data = priv->hist_data;

	if (atomic_read(&phist_data->num_samples) > NXPWIFI_HIST_MAX_SAMPLES)
		nxpwifi_hist_data_reset(priv);
	nxpwifi_hist_data_set(priv, rx_rate, snr, nflr);
}

/* function to add histogram record */
void nxpwifi_hist_data_set(struct nxpwifi_private *priv, u8 rx_rate, s8 snr,
			   s8 nflr)
{
	struct nxpwifi_histogram_data *phist_data = priv->hist_data;
	s8 nf   = -nflr;
	s8 rssi = snr - nflr;

	atomic_inc(&phist_data->num_samples);
	atomic_inc(&phist_data->rx_rate[rx_rate]);
	atomic_inc(&phist_data->snr[snr + 128]);
	atomic_inc(&phist_data->noise_flr[nf + 128]);
	atomic_inc(&phist_data->sig_str[rssi + 128]);
}

/* function to reset histogram data during init/reset */
void nxpwifi_hist_data_reset(struct nxpwifi_private *priv)
{
	int ix;
	struct nxpwifi_histogram_data *phist_data = priv->hist_data;

	atomic_set(&phist_data->num_samples, 0);
	for (ix = 0; ix < NXPWIFI_MAX_AC_RX_RATES; ix++)
		atomic_set(&phist_data->rx_rate[ix], 0);
	for (ix = 0; ix < NXPWIFI_MAX_SNR; ix++)
		atomic_set(&phist_data->snr[ix], 0);
	for (ix = 0; ix < NXPWIFI_MAX_NOISE_FLR; ix++)
		atomic_set(&phist_data->noise_flr[ix], 0);
	for (ix = 0; ix < NXPWIFI_MAX_SIG_STRENGTH; ix++)
		atomic_set(&phist_data->sig_str[ix], 0);
}

void *nxpwifi_alloc_dma_align_buf(int rx_len, gfp_t flags)
{
	struct sk_buff *skb;
	int buf_len, pad;

	buf_len = rx_len + NXPWIFI_RX_HEADROOM + NXPWIFI_DMA_ALIGN_SZ;

	skb = __dev_alloc_skb(buf_len, flags);

	if (!skb)
		return NULL;

	skb_reserve(skb, NXPWIFI_RX_HEADROOM);

	pad = NXPWIFI_ALIGN_ADDR(skb->data, NXPWIFI_DMA_ALIGN_SZ) -
	      (long)skb->data;

	skb_reserve(skb, pad);

	return skb;
}
EXPORT_SYMBOL_GPL(nxpwifi_alloc_dma_align_buf);

void nxpwifi_fw_dump_event(struct nxpwifi_private *priv)
{
	nxpwifi_send_cmd(priv, HOST_CMD_FW_DUMP_EVENT, HOST_ACT_GEN_SET,
			 0, NULL, true);
}
EXPORT_SYMBOL_GPL(nxpwifi_fw_dump_event);

int nxpwifi_append_data_tlv(u16 id, u8 *data, int len, u8 *pos, u8 *cmd_end)
{
	struct nxpwifi_ie_types_data *tlv;
	u16 header_len = sizeof(struct nxpwifi_ie_types_header);

	tlv = (struct nxpwifi_ie_types_data *)pos;
	tlv->header.len = cpu_to_le16(len);

	if (id == WLAN_EID_EXT_HE_CAPABILITY) {
		if ((pos + header_len + len + 1) > cmd_end)
			return 0;

		tlv->header.type = cpu_to_le16(WLAN_EID_EXTENSION);
		tlv->data[0] = WLAN_EID_EXT_HE_CAPABILITY;
		memcpy(tlv->data + 1, data, len);
	} else {
		if ((pos + header_len + len) > cmd_end)
			return 0;

		tlv->header.type = cpu_to_le16(id);
		memcpy(tlv->data, data, len);
	}

	return (header_len + len);
}

static int nxpwifi_get_vdll_image(struct nxpwifi_adapter *adapter, u32 vdll_len)
{
	struct vdll_dnld_ctrl *ctrl = &adapter->vdll_ctrl;
	bool req_fw = false;
	u32 offset;

	if (ctrl->vdll_mem) {
		nxpwifi_dbg(adapter, EVENT,
			    "VDLL mem is not empty: %p old_len=%d new_len=%d\n",
			    ctrl->vdll_mem, ctrl->vdll_len, vdll_len);
		vfree(ctrl->vdll_mem);
		ctrl->vdll_mem = NULL;
		ctrl->vdll_len = 0;
	}

	ctrl->vdll_mem = vmalloc(vdll_len);
	if (!ctrl->vdll_mem)
		return -ENOMEM;

	if (!adapter->firmware) {
		req_fw = true;
		if (request_firmware(&adapter->firmware, adapter->fw_name,
				     adapter->dev))
			return -ENOENT;
	}

	if (adapter->firmware) {
		if (vdll_len < adapter->firmware->size) {
			offset = adapter->firmware->size - vdll_len;
			memcpy(ctrl->vdll_mem, adapter->firmware->data + offset,
			       vdll_len);
		} else {
			nxpwifi_dbg(adapter, ERROR,
				    "Invalid VDLL length = %d, fw_len=%d\n",
				    vdll_len, (int)adapter->firmware->size);
			return -EINVAL;
		}
		if (req_fw) {
			release_firmware(adapter->firmware);
			adapter->firmware = NULL;
		}
	}

	ctrl->vdll_len = vdll_len;
	nxpwifi_dbg(adapter, MSG, "VDLL image: len=%d\n", ctrl->vdll_len);

	return 0;
}

int nxpwifi_download_vdll_block(struct nxpwifi_adapter *adapter,
				u8 *block, u16 block_len)
{
	struct vdll_dnld_ctrl *ctrl = &adapter->vdll_ctrl;
	struct host_cmd_ds_command *host_cmd;
	u16 msg_len = block_len + S_DS_GEN;
	int ret = 0;

	skb_trim(ctrl->skb, 0);
	skb_put_zero(ctrl->skb, msg_len);

	host_cmd = (struct host_cmd_ds_command *)(ctrl->skb->data);

	host_cmd->command = cpu_to_le16(HOST_CMD_VDLL);
	host_cmd->seq_num = cpu_to_le16(0xFF00);
	host_cmd->size = cpu_to_le16(msg_len);
	memcpy(ctrl->skb->data + S_DS_GEN, block, block_len);

	skb_push(ctrl->skb, adapter->intf_hdr_len);
	ret = adapter->if_ops.host_to_card(adapter, NXPWIFI_TYPE_VDLL,
					   ctrl->skb, NULL);
	skb_pull(ctrl->skb, adapter->intf_hdr_len);

	if (ret)
		nxpwifi_dbg(adapter, ERROR,
			    "Fail to download VDLL: block: %p, len: %d\n",
			    block, block_len);

	return ret;
}

int nxpwifi_process_vdll_event(struct nxpwifi_private *priv,
			       struct sk_buff *skb)
{
	struct nxpwifi_adapter *adapter = priv->adapter;
	struct vdll_ind_event *vdll_evt =
		(struct vdll_ind_event *)(skb->data + sizeof(u32));
	u16 type = le16_to_cpu(vdll_evt->type);
	u16 vdll_id = le16_to_cpu(vdll_evt->vdll_id);
	u32 offset = le32_to_cpu(vdll_evt->offset);
	u16 block_len = le16_to_cpu(vdll_evt->block_len);
	struct vdll_dnld_ctrl *ctrl = &adapter->vdll_ctrl;
	int ret = 0;

	switch (type) {
	case VDLL_IND_TYPE_REQ:
		nxpwifi_dbg(adapter, EVENT,
			    "VDLL IND (REG): ID: %d, offset: %#x, len: %d\n",
			    vdll_id, offset, block_len);
		if (offset <= ctrl->vdll_len) {
			block_len =
				min((u32)block_len, ctrl->vdll_len - offset);
			if (!adapter->cmd_sent) {
				ret = nxpwifi_download_vdll_block(adapter,
								  ctrl->vdll_mem
								  + offset,
								  block_len);
				if (ret)
					nxpwifi_dbg(adapter, ERROR,
						    "Download VDLL failed\n");
			} else {
				nxpwifi_dbg(adapter, EVENT,
					    "Delay download VDLL block\n");
				ctrl->pending_block_len = block_len;
				ctrl->pending_block = ctrl->vdll_mem + offset;
			}
		} else {
			nxpwifi_dbg(adapter, ERROR,
				    "Err Req: offset=%#x, len=%d, vdll_len=%d\n",
				    offset, block_len, ctrl->vdll_len);
			ret = -EINVAL;
		}
		break;
	case VDLL_IND_TYPE_OFFSET:
		nxpwifi_dbg(adapter, EVENT,
			    "VDLL IND (OFFSET): offset: %#x\n", offset);
		ret = nxpwifi_get_vdll_image(adapter, offset);
		break;
	case VDLL_IND_TYPE_ERR_SIG:
	case VDLL_IND_TYPE_ERR_ID:
	case VDLL_IND_TYPE_SEC_ERR_ID:
		nxpwifi_dbg(adapter, ERROR, "VDLL IND: error: %d\n", type);
		break;
	case VDLL_IND_TYPE_INTF_RESET:
		nxpwifi_dbg(adapter, EVENT, "VDLL IND: interface reset\n");
		break;
	default:
		nxpwifi_dbg(adapter, ERROR, "VDLL IND: unknown type: %d", type);
		ret = -EINVAL;
		break;
	}

	return ret;
}

u64 nxpwifi_roc_cookie(struct nxpwifi_adapter *adapter)
{
	adapter->roc_cookie_counter++;

	/* wow, you wrapped 64 bits ... more likely a bug */
	if (WARN_ON(adapter->roc_cookie_counter == 0))
		adapter->roc_cookie_counter++;

	return adapter->roc_cookie_counter;
}

static bool nxpwifi_can_queue_work(struct nxpwifi_adapter *adapter)
{
	if (test_bit(NXPWIFI_SURPRISE_REMOVED, &adapter->work_flags) ||
	    test_bit(NXPWIFI_IS_CMD_TIMEDOUT, &adapter->work_flags) ||
	    test_bit(NXPWIFI_IS_SUSPENDED, &adapter->work_flags)) {
		nxpwifi_dbg(adapter, WARN,
			    "queueing nxpwifi work while going to suspend\n");
		return false;
	}

	return true;
}

void nxpwifi_queue_work(struct nxpwifi_adapter *adapter,
			struct work_struct *work)
{
	if (!nxpwifi_can_queue_work(adapter))
		return;

	queue_work(adapter->workqueue, work);
}
EXPORT_SYMBOL(nxpwifi_queue_work);

void nxpwifi_queue_delayed_work(struct nxpwifi_adapter *adapter,
				struct delayed_work *dwork,
				unsigned long delay)
{
	if (!nxpwifi_can_queue_work(adapter))
		return;

	queue_delayed_work(adapter->workqueue, dwork, delay);
}
EXPORT_SYMBOL(nxpwifi_queue_delayed_work);

void nxpwifi_queue_wiphy_work(struct nxpwifi_adapter *adapter,
			      struct wiphy_work *work)
{
	if (!nxpwifi_can_queue_work(adapter))
		return;

	wiphy_work_queue(adapter->wiphy, work);
}

void nxpwifi_queue_delayed_wiphy_work(struct nxpwifi_adapter *adapter,
				      struct wiphy_delayed_work *dwork,
				      unsigned long delay)
{
	if (!nxpwifi_can_queue_work(adapter))
		return;

	wiphy_delayed_work_queue(adapter->wiphy, dwork, delay);
}