1 /*
2  * Copyright (c) 2012-2017 Qualcomm Atheros, Inc.
3  *
4  * Permission to use, copy, modify, and/or distribute this software for any
5  * purpose with or without fee is hereby granted, provided that the above
6  * copyright notice and this permission notice appear in all copies.
7  *
8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15  */
16 
17 #include <linux/etherdevice.h>
18 #include <linux/moduleparam.h>
19 #include <net/netlink.h>
20 #include "wil6210.h"
21 #include "wmi.h"
22 
23 #define WIL_MAX_ROC_DURATION_MS 5000
24 
25 bool disable_ap_sme;
26 module_param(disable_ap_sme, bool, 0444);
27 MODULE_PARM_DESC(disable_ap_sme, " let user space handle AP mode SME");
28 
29 #ifdef CONFIG_PM
30 static struct wiphy_wowlan_support wil_wowlan_support = {
31 	.flags = WIPHY_WOWLAN_ANY | WIPHY_WOWLAN_DISCONNECT,
32 };
33 #endif
34 
35 #define CHAN60G(_channel, _flags) {				\
36 	.band			= NL80211_BAND_60GHZ,		\
37 	.center_freq		= 56160 + (2160 * (_channel)),	\
38 	.hw_value		= (_channel),			\
39 	.flags			= (_flags),			\
40 	.max_antenna_gain	= 0,				\
41 	.max_power		= 40,				\
42 }
43 
44 static struct ieee80211_channel wil_60ghz_channels[] = {
45 	CHAN60G(1, 0),
46 	CHAN60G(2, 0),
47 	CHAN60G(3, 0),
48 /* channel 4 not supported yet */
49 };
50 
51 /* Vendor id to be used in vendor specific command and events
52  * to user space.
53  * NOTE: The authoritative place for definition of QCA_NL80211_VENDOR_ID,
54  * vendor subcmd definitions prefixed with QCA_NL80211_VENDOR_SUBCMD, and
55  * qca_wlan_vendor_attr is open source file src/common/qca-vendor.h in
56  * git://w1.fi/srv/git/hostap.git; the values here are just a copy of that
57  */
58 
59 #define QCA_NL80211_VENDOR_ID	0x001374
60 
61 #define WIL_MAX_RF_SECTORS (128)
62 #define WIL_CID_ALL (0xff)
63 
64 enum qca_wlan_vendor_attr_rf_sector {
65 	QCA_ATTR_MAC_ADDR = 6,
66 	QCA_ATTR_PAD = 13,
67 	QCA_ATTR_TSF = 29,
68 	QCA_ATTR_DMG_RF_SECTOR_INDEX = 30,
69 	QCA_ATTR_DMG_RF_SECTOR_TYPE = 31,
70 	QCA_ATTR_DMG_RF_MODULE_MASK = 32,
71 	QCA_ATTR_DMG_RF_SECTOR_CFG = 33,
72 	QCA_ATTR_DMG_RF_SECTOR_MAX,
73 };
74 
75 enum qca_wlan_vendor_attr_dmg_rf_sector_type {
76 	QCA_ATTR_DMG_RF_SECTOR_TYPE_RX,
77 	QCA_ATTR_DMG_RF_SECTOR_TYPE_TX,
78 	QCA_ATTR_DMG_RF_SECTOR_TYPE_MAX
79 };
80 
81 enum qca_wlan_vendor_attr_dmg_rf_sector_cfg {
82 	QCA_ATTR_DMG_RF_SECTOR_CFG_INVALID = 0,
83 	QCA_ATTR_DMG_RF_SECTOR_CFG_MODULE_INDEX,
84 	QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE0,
85 	QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE1,
86 	QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE2,
87 	QCA_ATTR_DMG_RF_SECTOR_CFG_PSH_HI,
88 	QCA_ATTR_DMG_RF_SECTOR_CFG_PSH_LO,
89 	QCA_ATTR_DMG_RF_SECTOR_CFG_DTYPE_X16,
90 
91 	/* keep last */
92 	QCA_ATTR_DMG_RF_SECTOR_CFG_AFTER_LAST,
93 	QCA_ATTR_DMG_RF_SECTOR_CFG_MAX =
94 	QCA_ATTR_DMG_RF_SECTOR_CFG_AFTER_LAST - 1
95 };
96 
97 static const struct
98 nla_policy wil_rf_sector_policy[QCA_ATTR_DMG_RF_SECTOR_MAX + 1] = {
99 	[QCA_ATTR_MAC_ADDR] = { .len = ETH_ALEN },
100 	[QCA_ATTR_DMG_RF_SECTOR_INDEX] = { .type = NLA_U16 },
101 	[QCA_ATTR_DMG_RF_SECTOR_TYPE] = { .type = NLA_U8 },
102 	[QCA_ATTR_DMG_RF_MODULE_MASK] = { .type = NLA_U32 },
103 	[QCA_ATTR_DMG_RF_SECTOR_CFG] = { .type = NLA_NESTED },
104 };
105 
106 static const struct
107 nla_policy wil_rf_sector_cfg_policy[QCA_ATTR_DMG_RF_SECTOR_CFG_MAX + 1] = {
108 	[QCA_ATTR_DMG_RF_SECTOR_CFG_MODULE_INDEX] = { .type = NLA_U8 },
109 	[QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE0] = { .type = NLA_U32 },
110 	[QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE1] = { .type = NLA_U32 },
111 	[QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE2] = { .type = NLA_U32 },
112 	[QCA_ATTR_DMG_RF_SECTOR_CFG_PSH_HI] = { .type = NLA_U32 },
113 	[QCA_ATTR_DMG_RF_SECTOR_CFG_PSH_LO] = { .type = NLA_U32 },
114 	[QCA_ATTR_DMG_RF_SECTOR_CFG_DTYPE_X16] = { .type = NLA_U32 },
115 };
116 
117 enum qca_nl80211_vendor_subcmds {
118 	QCA_NL80211_VENDOR_SUBCMD_DMG_RF_GET_SECTOR_CFG = 139,
119 	QCA_NL80211_VENDOR_SUBCMD_DMG_RF_SET_SECTOR_CFG = 140,
120 	QCA_NL80211_VENDOR_SUBCMD_DMG_RF_GET_SELECTED_SECTOR = 141,
121 	QCA_NL80211_VENDOR_SUBCMD_DMG_RF_SET_SELECTED_SECTOR = 142,
122 };
123 
124 static int wil_rf_sector_get_cfg(struct wiphy *wiphy,
125 				 struct wireless_dev *wdev,
126 				 const void *data, int data_len);
127 static int wil_rf_sector_set_cfg(struct wiphy *wiphy,
128 				 struct wireless_dev *wdev,
129 				 const void *data, int data_len);
130 static int wil_rf_sector_get_selected(struct wiphy *wiphy,
131 				      struct wireless_dev *wdev,
132 				      const void *data, int data_len);
133 static int wil_rf_sector_set_selected(struct wiphy *wiphy,
134 				      struct wireless_dev *wdev,
135 				      const void *data, int data_len);
136 
137 /* vendor specific commands */
138 static const struct wiphy_vendor_command wil_nl80211_vendor_commands[] = {
139 	{
140 		.info.vendor_id = QCA_NL80211_VENDOR_ID,
141 		.info.subcmd = QCA_NL80211_VENDOR_SUBCMD_DMG_RF_GET_SECTOR_CFG,
142 		.flags = WIPHY_VENDOR_CMD_NEED_WDEV |
143 			 WIPHY_VENDOR_CMD_NEED_RUNNING,
144 		.doit = wil_rf_sector_get_cfg
145 	},
146 	{
147 		.info.vendor_id = QCA_NL80211_VENDOR_ID,
148 		.info.subcmd = QCA_NL80211_VENDOR_SUBCMD_DMG_RF_SET_SECTOR_CFG,
149 		.flags = WIPHY_VENDOR_CMD_NEED_WDEV |
150 			 WIPHY_VENDOR_CMD_NEED_RUNNING,
151 		.doit = wil_rf_sector_set_cfg
152 	},
153 	{
154 		.info.vendor_id = QCA_NL80211_VENDOR_ID,
155 		.info.subcmd =
156 			QCA_NL80211_VENDOR_SUBCMD_DMG_RF_GET_SELECTED_SECTOR,
157 		.flags = WIPHY_VENDOR_CMD_NEED_WDEV |
158 			 WIPHY_VENDOR_CMD_NEED_RUNNING,
159 		.doit = wil_rf_sector_get_selected
160 	},
161 	{
162 		.info.vendor_id = QCA_NL80211_VENDOR_ID,
163 		.info.subcmd =
164 			QCA_NL80211_VENDOR_SUBCMD_DMG_RF_SET_SELECTED_SECTOR,
165 		.flags = WIPHY_VENDOR_CMD_NEED_WDEV |
166 			 WIPHY_VENDOR_CMD_NEED_RUNNING,
167 		.doit = wil_rf_sector_set_selected
168 	},
169 };
170 
171 static struct ieee80211_supported_band wil_band_60ghz = {
172 	.channels = wil_60ghz_channels,
173 	.n_channels = ARRAY_SIZE(wil_60ghz_channels),
174 	.ht_cap = {
175 		.ht_supported = true,
176 		.cap = 0, /* TODO */
177 		.ampdu_factor = IEEE80211_HT_MAX_AMPDU_64K, /* TODO */
178 		.ampdu_density = IEEE80211_HT_MPDU_DENSITY_8, /* TODO */
179 		.mcs = {
180 				/* MCS 1..12 - SC PHY */
181 			.rx_mask = {0xfe, 0x1f}, /* 1..12 */
182 			.tx_params = IEEE80211_HT_MCS_TX_DEFINED, /* TODO */
183 		},
184 	},
185 };
186 
187 static const struct ieee80211_txrx_stypes
188 wil_mgmt_stypes[NUM_NL80211_IFTYPES] = {
189 	[NL80211_IFTYPE_STATION] = {
190 		.tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
191 		BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
192 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
193 		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
194 	},
195 	[NL80211_IFTYPE_AP] = {
196 		.tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
197 		BIT(IEEE80211_STYPE_PROBE_RESP >> 4) |
198 		BIT(IEEE80211_STYPE_ASSOC_RESP >> 4) |
199 		BIT(IEEE80211_STYPE_DISASSOC >> 4),
200 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
201 		BIT(IEEE80211_STYPE_PROBE_REQ >> 4) |
202 		BIT(IEEE80211_STYPE_ASSOC_REQ >> 4) |
203 		BIT(IEEE80211_STYPE_DISASSOC >> 4) |
204 		BIT(IEEE80211_STYPE_AUTH >> 4) |
205 		BIT(IEEE80211_STYPE_DEAUTH >> 4) |
206 		BIT(IEEE80211_STYPE_REASSOC_REQ >> 4)
207 	},
208 	[NL80211_IFTYPE_P2P_CLIENT] = {
209 		.tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
210 		BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
211 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
212 		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
213 	},
214 	[NL80211_IFTYPE_P2P_GO] = {
215 		.tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
216 		BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
217 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
218 		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
219 	},
220 	[NL80211_IFTYPE_P2P_DEVICE] = {
221 		.tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
222 		BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
223 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
224 		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
225 	},
226 };
227 
228 static const u32 wil_cipher_suites[] = {
229 	WLAN_CIPHER_SUITE_GCMP,
230 };
231 
232 static const char * const key_usage_str[] = {
233 	[WMI_KEY_USE_PAIRWISE]	= "PTK",
234 	[WMI_KEY_USE_RX_GROUP]	= "RX_GTK",
235 	[WMI_KEY_USE_TX_GROUP]	= "TX_GTK",
236 };
237 
238 int wil_iftype_nl2wmi(enum nl80211_iftype type)
239 {
240 	static const struct {
241 		enum nl80211_iftype nl;
242 		enum wmi_network_type wmi;
243 	} __nl2wmi[] = {
244 		{NL80211_IFTYPE_ADHOC,		WMI_NETTYPE_ADHOC},
245 		{NL80211_IFTYPE_STATION,	WMI_NETTYPE_INFRA},
246 		{NL80211_IFTYPE_AP,		WMI_NETTYPE_AP},
247 		{NL80211_IFTYPE_P2P_CLIENT,	WMI_NETTYPE_P2P},
248 		{NL80211_IFTYPE_P2P_GO,		WMI_NETTYPE_P2P},
249 		{NL80211_IFTYPE_MONITOR,	WMI_NETTYPE_ADHOC}, /* FIXME */
250 	};
251 	uint i;
252 
253 	for (i = 0; i < ARRAY_SIZE(__nl2wmi); i++) {
254 		if (__nl2wmi[i].nl == type)
255 			return __nl2wmi[i].wmi;
256 	}
257 
258 	return -EOPNOTSUPP;
259 }
260 
261 int wil_cid_fill_sinfo(struct wil6210_priv *wil, int cid,
262 		       struct station_info *sinfo)
263 {
264 	struct wmi_notify_req_cmd cmd = {
265 		.cid = cid,
266 		.interval_usec = 0,
267 	};
268 	struct {
269 		struct wmi_cmd_hdr wmi;
270 		struct wmi_notify_req_done_event evt;
271 	} __packed reply;
272 	struct wil_net_stats *stats = &wil->sta[cid].stats;
273 	int rc;
274 
275 	rc = wmi_call(wil, WMI_NOTIFY_REQ_CMDID, &cmd, sizeof(cmd),
276 		      WMI_NOTIFY_REQ_DONE_EVENTID, &reply, sizeof(reply), 20);
277 	if (rc)
278 		return rc;
279 
280 	wil_dbg_wmi(wil, "Link status for CID %d: {\n"
281 		    "  MCS %d TSF 0x%016llx\n"
282 		    "  BF status 0x%08x RSSI %d SQI %d%%\n"
283 		    "  Tx Tpt %d goodput %d Rx goodput %d\n"
284 		    "  Sectors(rx:tx) my %d:%d peer %d:%d\n""}\n",
285 		    cid, le16_to_cpu(reply.evt.bf_mcs),
286 		    le64_to_cpu(reply.evt.tsf), reply.evt.status,
287 		    reply.evt.rssi,
288 		    reply.evt.sqi,
289 		    le32_to_cpu(reply.evt.tx_tpt),
290 		    le32_to_cpu(reply.evt.tx_goodput),
291 		    le32_to_cpu(reply.evt.rx_goodput),
292 		    le16_to_cpu(reply.evt.my_rx_sector),
293 		    le16_to_cpu(reply.evt.my_tx_sector),
294 		    le16_to_cpu(reply.evt.other_rx_sector),
295 		    le16_to_cpu(reply.evt.other_tx_sector));
296 
297 	sinfo->generation = wil->sinfo_gen;
298 
299 	sinfo->filled = BIT(NL80211_STA_INFO_RX_BYTES) |
300 			BIT(NL80211_STA_INFO_TX_BYTES) |
301 			BIT(NL80211_STA_INFO_RX_PACKETS) |
302 			BIT(NL80211_STA_INFO_TX_PACKETS) |
303 			BIT(NL80211_STA_INFO_RX_BITRATE) |
304 			BIT(NL80211_STA_INFO_TX_BITRATE) |
305 			BIT(NL80211_STA_INFO_RX_DROP_MISC) |
306 			BIT(NL80211_STA_INFO_TX_FAILED);
307 
308 	sinfo->txrate.flags = RATE_INFO_FLAGS_60G;
309 	sinfo->txrate.mcs = le16_to_cpu(reply.evt.bf_mcs);
310 	sinfo->rxrate.mcs = stats->last_mcs_rx;
311 	sinfo->rx_bytes = stats->rx_bytes;
312 	sinfo->rx_packets = stats->rx_packets;
313 	sinfo->rx_dropped_misc = stats->rx_dropped;
314 	sinfo->tx_bytes = stats->tx_bytes;
315 	sinfo->tx_packets = stats->tx_packets;
316 	sinfo->tx_failed = stats->tx_errors;
317 
318 	if (test_bit(wil_status_fwconnected, wil->status)) {
319 		sinfo->filled |= BIT(NL80211_STA_INFO_SIGNAL);
320 		if (test_bit(WMI_FW_CAPABILITY_RSSI_REPORTING,
321 			     wil->fw_capabilities))
322 			sinfo->signal = reply.evt.rssi;
323 		else
324 			sinfo->signal = reply.evt.sqi;
325 	}
326 
327 	return rc;
328 }
329 
330 static int wil_cfg80211_get_station(struct wiphy *wiphy,
331 				    struct net_device *ndev,
332 				    const u8 *mac, struct station_info *sinfo)
333 {
334 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
335 	int rc;
336 
337 	int cid = wil_find_cid(wil, mac);
338 
339 	wil_dbg_misc(wil, "get_station: %pM CID %d\n", mac, cid);
340 	if (cid < 0)
341 		return cid;
342 
343 	rc = wil_cid_fill_sinfo(wil, cid, sinfo);
344 
345 	return rc;
346 }
347 
348 /*
349  * Find @idx-th active STA for station dump.
350  */
351 static int wil_find_cid_by_idx(struct wil6210_priv *wil, int idx)
352 {
353 	int i;
354 
355 	for (i = 0; i < ARRAY_SIZE(wil->sta); i++) {
356 		if (wil->sta[i].status == wil_sta_unused)
357 			continue;
358 		if (idx == 0)
359 			return i;
360 		idx--;
361 	}
362 
363 	return -ENOENT;
364 }
365 
366 static int wil_cfg80211_dump_station(struct wiphy *wiphy,
367 				     struct net_device *dev, int idx,
368 				     u8 *mac, struct station_info *sinfo)
369 {
370 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
371 	int rc;
372 	int cid = wil_find_cid_by_idx(wil, idx);
373 
374 	if (cid < 0)
375 		return -ENOENT;
376 
377 	ether_addr_copy(mac, wil->sta[cid].addr);
378 	wil_dbg_misc(wil, "dump_station: %pM CID %d\n", mac, cid);
379 
380 	rc = wil_cid_fill_sinfo(wil, cid, sinfo);
381 
382 	return rc;
383 }
384 
385 static int wil_cfg80211_start_p2p_device(struct wiphy *wiphy,
386 					 struct wireless_dev *wdev)
387 {
388 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
389 
390 	wil_dbg_misc(wil, "start_p2p_device: entered\n");
391 	wil->p2p.p2p_dev_started = 1;
392 	return 0;
393 }
394 
395 static void wil_cfg80211_stop_p2p_device(struct wiphy *wiphy,
396 					 struct wireless_dev *wdev)
397 {
398 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
399 	struct wil_p2p_info *p2p = &wil->p2p;
400 
401 	if (!p2p->p2p_dev_started)
402 		return;
403 
404 	wil_dbg_misc(wil, "stop_p2p_device: entered\n");
405 	mutex_lock(&wil->mutex);
406 	mutex_lock(&wil->p2p_wdev_mutex);
407 	wil_p2p_stop_radio_operations(wil);
408 	p2p->p2p_dev_started = 0;
409 	mutex_unlock(&wil->p2p_wdev_mutex);
410 	mutex_unlock(&wil->mutex);
411 }
412 
413 static struct wireless_dev *
414 wil_cfg80211_add_iface(struct wiphy *wiphy, const char *name,
415 		       unsigned char name_assign_type,
416 		       enum nl80211_iftype type,
417 		       struct vif_params *params)
418 {
419 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
420 	struct net_device *ndev = wil_to_ndev(wil);
421 	struct wireless_dev *p2p_wdev;
422 
423 	wil_dbg_misc(wil, "add_iface\n");
424 
425 	if (type != NL80211_IFTYPE_P2P_DEVICE) {
426 		wil_err(wil, "unsupported iftype %d\n", type);
427 		return ERR_PTR(-EINVAL);
428 	}
429 
430 	if (wil->p2p_wdev) {
431 		wil_err(wil, "P2P_DEVICE interface already created\n");
432 		return ERR_PTR(-EINVAL);
433 	}
434 
435 	p2p_wdev = kzalloc(sizeof(*p2p_wdev), GFP_KERNEL);
436 	if (!p2p_wdev)
437 		return ERR_PTR(-ENOMEM);
438 
439 	p2p_wdev->iftype = type;
440 	p2p_wdev->wiphy = wiphy;
441 	/* use our primary ethernet address */
442 	ether_addr_copy(p2p_wdev->address, ndev->perm_addr);
443 
444 	wil->p2p_wdev = p2p_wdev;
445 
446 	return p2p_wdev;
447 }
448 
449 static int wil_cfg80211_del_iface(struct wiphy *wiphy,
450 				  struct wireless_dev *wdev)
451 {
452 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
453 
454 	wil_dbg_misc(wil, "del_iface\n");
455 
456 	if (wdev != wil->p2p_wdev) {
457 		wil_err(wil, "delete of incorrect interface 0x%p\n", wdev);
458 		return -EINVAL;
459 	}
460 
461 	wil_cfg80211_stop_p2p_device(wiphy, wdev);
462 	wil_p2p_wdev_free(wil);
463 
464 	return 0;
465 }
466 
467 static int wil_cfg80211_change_iface(struct wiphy *wiphy,
468 				     struct net_device *ndev,
469 				     enum nl80211_iftype type,
470 				     struct vif_params *params)
471 {
472 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
473 	struct wireless_dev *wdev = wil_to_wdev(wil);
474 	int rc;
475 
476 	wil_dbg_misc(wil, "change_iface: type=%d\n", type);
477 
478 	if (netif_running(wil_to_ndev(wil)) && !wil_is_recovery_blocked(wil)) {
479 		wil_dbg_misc(wil, "interface is up. resetting...\n");
480 		mutex_lock(&wil->mutex);
481 		__wil_down(wil);
482 		rc = __wil_up(wil);
483 		mutex_unlock(&wil->mutex);
484 
485 		if (rc)
486 			return rc;
487 	}
488 
489 	switch (type) {
490 	case NL80211_IFTYPE_STATION:
491 	case NL80211_IFTYPE_AP:
492 	case NL80211_IFTYPE_P2P_CLIENT:
493 	case NL80211_IFTYPE_P2P_GO:
494 		break;
495 	case NL80211_IFTYPE_MONITOR:
496 		if (params->flags)
497 			wil->monitor_flags = params->flags;
498 		break;
499 	default:
500 		return -EOPNOTSUPP;
501 	}
502 
503 	wdev->iftype = type;
504 
505 	return 0;
506 }
507 
508 static int wil_cfg80211_scan(struct wiphy *wiphy,
509 			     struct cfg80211_scan_request *request)
510 {
511 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
512 	struct wireless_dev *wdev = request->wdev;
513 	struct {
514 		struct wmi_start_scan_cmd cmd;
515 		u16 chnl[4];
516 	} __packed cmd;
517 	uint i, n;
518 	int rc;
519 
520 	wil_dbg_misc(wil, "scan: wdev=0x%p iftype=%d\n", wdev, wdev->iftype);
521 
522 	/* check we are client side */
523 	switch (wdev->iftype) {
524 	case NL80211_IFTYPE_STATION:
525 	case NL80211_IFTYPE_P2P_CLIENT:
526 	case NL80211_IFTYPE_P2P_DEVICE:
527 		break;
528 	default:
529 		return -EOPNOTSUPP;
530 	}
531 
532 	/* FW don't support scan after connection attempt */
533 	if (test_bit(wil_status_dontscan, wil->status)) {
534 		wil_err(wil, "Can't scan now\n");
535 		return -EBUSY;
536 	}
537 
538 	mutex_lock(&wil->mutex);
539 
540 	mutex_lock(&wil->p2p_wdev_mutex);
541 	if (wil->scan_request || wil->p2p.discovery_started) {
542 		wil_err(wil, "Already scanning\n");
543 		mutex_unlock(&wil->p2p_wdev_mutex);
544 		rc = -EAGAIN;
545 		goto out;
546 	}
547 	mutex_unlock(&wil->p2p_wdev_mutex);
548 
549 	if (wdev->iftype == NL80211_IFTYPE_P2P_DEVICE) {
550 		if (!wil->p2p.p2p_dev_started) {
551 			wil_err(wil, "P2P search requested on stopped P2P device\n");
552 			rc = -EIO;
553 			goto out;
554 		}
555 		/* social scan on P2P_DEVICE is handled as p2p search */
556 		if (wil_p2p_is_social_scan(request)) {
557 			wil->scan_request = request;
558 			wil->radio_wdev = wdev;
559 			rc = wil_p2p_search(wil, request);
560 			if (rc) {
561 				wil->radio_wdev = wil_to_wdev(wil);
562 				wil->scan_request = NULL;
563 			}
564 			goto out;
565 		}
566 	}
567 
568 	(void)wil_p2p_stop_discovery(wil);
569 
570 	wil_dbg_misc(wil, "Start scan_request 0x%p\n", request);
571 	wil_dbg_misc(wil, "SSID count: %d", request->n_ssids);
572 
573 	for (i = 0; i < request->n_ssids; i++) {
574 		wil_dbg_misc(wil, "SSID[%d]", i);
575 		wil_hex_dump_misc("SSID ", DUMP_PREFIX_OFFSET, 16, 1,
576 				  request->ssids[i].ssid,
577 				  request->ssids[i].ssid_len, true);
578 	}
579 
580 	if (request->n_ssids)
581 		rc = wmi_set_ssid(wil, request->ssids[0].ssid_len,
582 				  request->ssids[0].ssid);
583 	else
584 		rc = wmi_set_ssid(wil, 0, NULL);
585 
586 	if (rc) {
587 		wil_err(wil, "set SSID for scan request failed: %d\n", rc);
588 		goto out;
589 	}
590 
591 	wil->scan_request = request;
592 	mod_timer(&wil->scan_timer, jiffies + WIL6210_SCAN_TO);
593 
594 	memset(&cmd, 0, sizeof(cmd));
595 	cmd.cmd.scan_type = WMI_ACTIVE_SCAN;
596 	cmd.cmd.num_channels = 0;
597 	n = min(request->n_channels, 4U);
598 	for (i = 0; i < n; i++) {
599 		int ch = request->channels[i]->hw_value;
600 
601 		if (ch == 0) {
602 			wil_err(wil,
603 				"Scan requested for unknown frequency %dMhz\n",
604 				request->channels[i]->center_freq);
605 			continue;
606 		}
607 		/* 0-based channel indexes */
608 		cmd.cmd.channel_list[cmd.cmd.num_channels++].channel = ch - 1;
609 		wil_dbg_misc(wil, "Scan for ch %d  : %d MHz\n", ch,
610 			     request->channels[i]->center_freq);
611 	}
612 
613 	if (request->ie_len)
614 		wil_hex_dump_misc("Scan IE ", DUMP_PREFIX_OFFSET, 16, 1,
615 				  request->ie, request->ie_len, true);
616 	else
617 		wil_dbg_misc(wil, "Scan has no IE's\n");
618 
619 	rc = wmi_set_ie(wil, WMI_FRAME_PROBE_REQ, request->ie_len, request->ie);
620 	if (rc)
621 		goto out_restore;
622 
623 	if (wil->discovery_mode && cmd.cmd.scan_type == WMI_ACTIVE_SCAN) {
624 		cmd.cmd.discovery_mode = 1;
625 		wil_dbg_misc(wil, "active scan with discovery_mode=1\n");
626 	}
627 
628 	wil->radio_wdev = wdev;
629 	rc = wmi_send(wil, WMI_START_SCAN_CMDID, &cmd, sizeof(cmd.cmd) +
630 			cmd.cmd.num_channels * sizeof(cmd.cmd.channel_list[0]));
631 
632 out_restore:
633 	if (rc) {
634 		del_timer_sync(&wil->scan_timer);
635 		wil->radio_wdev = wil_to_wdev(wil);
636 		wil->scan_request = NULL;
637 	}
638 out:
639 	mutex_unlock(&wil->mutex);
640 	return rc;
641 }
642 
643 static void wil_cfg80211_abort_scan(struct wiphy *wiphy,
644 				    struct wireless_dev *wdev)
645 {
646 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
647 
648 	wil_dbg_misc(wil, "wdev=0x%p iftype=%d\n", wdev, wdev->iftype);
649 
650 	mutex_lock(&wil->mutex);
651 	mutex_lock(&wil->p2p_wdev_mutex);
652 
653 	if (!wil->scan_request)
654 		goto out;
655 
656 	if (wdev != wil->scan_request->wdev) {
657 		wil_dbg_misc(wil, "abort scan was called on the wrong iface\n");
658 		goto out;
659 	}
660 
661 	if (wil->radio_wdev == wil->p2p_wdev)
662 		wil_p2p_stop_radio_operations(wil);
663 	else
664 		wil_abort_scan(wil, true);
665 
666 out:
667 	mutex_unlock(&wil->p2p_wdev_mutex);
668 	mutex_unlock(&wil->mutex);
669 }
670 
671 static void wil_print_crypto(struct wil6210_priv *wil,
672 			     struct cfg80211_crypto_settings *c)
673 {
674 	int i, n;
675 
676 	wil_dbg_misc(wil, "WPA versions: 0x%08x cipher group 0x%08x\n",
677 		     c->wpa_versions, c->cipher_group);
678 	wil_dbg_misc(wil, "Pairwise ciphers [%d] {\n", c->n_ciphers_pairwise);
679 	n = min_t(int, c->n_ciphers_pairwise, ARRAY_SIZE(c->ciphers_pairwise));
680 	for (i = 0; i < n; i++)
681 		wil_dbg_misc(wil, "  [%d] = 0x%08x\n", i,
682 			     c->ciphers_pairwise[i]);
683 	wil_dbg_misc(wil, "}\n");
684 	wil_dbg_misc(wil, "AKM suites [%d] {\n", c->n_akm_suites);
685 	n = min_t(int, c->n_akm_suites, ARRAY_SIZE(c->akm_suites));
686 	for (i = 0; i < n; i++)
687 		wil_dbg_misc(wil, "  [%d] = 0x%08x\n", i,
688 			     c->akm_suites[i]);
689 	wil_dbg_misc(wil, "}\n");
690 	wil_dbg_misc(wil, "Control port : %d, eth_type 0x%04x no_encrypt %d\n",
691 		     c->control_port, be16_to_cpu(c->control_port_ethertype),
692 		     c->control_port_no_encrypt);
693 }
694 
695 static void wil_print_connect_params(struct wil6210_priv *wil,
696 				     struct cfg80211_connect_params *sme)
697 {
698 	wil_info(wil, "Connecting to:\n");
699 	if (sme->channel) {
700 		wil_info(wil, "  Channel: %d freq %d\n",
701 			 sme->channel->hw_value, sme->channel->center_freq);
702 	}
703 	if (sme->bssid)
704 		wil_info(wil, "  BSSID: %pM\n", sme->bssid);
705 	if (sme->ssid)
706 		print_hex_dump(KERN_INFO, "  SSID: ", DUMP_PREFIX_OFFSET,
707 			       16, 1, sme->ssid, sme->ssid_len, true);
708 	wil_info(wil, "  Privacy: %s\n", sme->privacy ? "secure" : "open");
709 	wil_info(wil, "  PBSS: %d\n", sme->pbss);
710 	wil_print_crypto(wil, &sme->crypto);
711 }
712 
713 static int wil_cfg80211_connect(struct wiphy *wiphy,
714 				struct net_device *ndev,
715 				struct cfg80211_connect_params *sme)
716 {
717 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
718 	struct cfg80211_bss *bss;
719 	struct wmi_connect_cmd conn;
720 	const u8 *ssid_eid;
721 	const u8 *rsn_eid;
722 	int ch;
723 	int rc = 0;
724 	enum ieee80211_bss_type bss_type = IEEE80211_BSS_TYPE_ESS;
725 
726 	wil_dbg_misc(wil, "connect\n");
727 	wil_print_connect_params(wil, sme);
728 
729 	if (test_bit(wil_status_fwconnecting, wil->status) ||
730 	    test_bit(wil_status_fwconnected, wil->status))
731 		return -EALREADY;
732 
733 	if (sme->ie_len > WMI_MAX_IE_LEN) {
734 		wil_err(wil, "IE too large (%td bytes)\n", sme->ie_len);
735 		return -ERANGE;
736 	}
737 
738 	rsn_eid = sme->ie ?
739 			cfg80211_find_ie(WLAN_EID_RSN, sme->ie, sme->ie_len) :
740 			NULL;
741 	if (sme->privacy && !rsn_eid)
742 		wil_info(wil, "WSC connection\n");
743 
744 	if (sme->pbss)
745 		bss_type = IEEE80211_BSS_TYPE_PBSS;
746 
747 	bss = cfg80211_get_bss(wiphy, sme->channel, sme->bssid,
748 			       sme->ssid, sme->ssid_len,
749 			       bss_type, IEEE80211_PRIVACY_ANY);
750 	if (!bss) {
751 		wil_err(wil, "Unable to find BSS\n");
752 		return -ENOENT;
753 	}
754 
755 	ssid_eid = ieee80211_bss_get_ie(bss, WLAN_EID_SSID);
756 	if (!ssid_eid) {
757 		wil_err(wil, "No SSID\n");
758 		rc = -ENOENT;
759 		goto out;
760 	}
761 	wil->privacy = sme->privacy;
762 	wil->pbss = sme->pbss;
763 
764 	if (wil->privacy) {
765 		/* For secure assoc, remove old keys */
766 		rc = wmi_del_cipher_key(wil, 0, bss->bssid,
767 					WMI_KEY_USE_PAIRWISE);
768 		if (rc) {
769 			wil_err(wil, "WMI_DELETE_CIPHER_KEY_CMD(PTK) failed\n");
770 			goto out;
771 		}
772 		rc = wmi_del_cipher_key(wil, 0, bss->bssid,
773 					WMI_KEY_USE_RX_GROUP);
774 		if (rc) {
775 			wil_err(wil, "WMI_DELETE_CIPHER_KEY_CMD(GTK) failed\n");
776 			goto out;
777 		}
778 	}
779 
780 	/* WMI_SET_APPIE_CMD. ie may contain rsn info as well as other info
781 	 * elements. Send it also in case it's empty, to erase previously set
782 	 * ies in FW.
783 	 */
784 	rc = wmi_set_ie(wil, WMI_FRAME_ASSOC_REQ, sme->ie_len, sme->ie);
785 	if (rc)
786 		goto out;
787 
788 	/* WMI_CONNECT_CMD */
789 	memset(&conn, 0, sizeof(conn));
790 	switch (bss->capability & WLAN_CAPABILITY_DMG_TYPE_MASK) {
791 	case WLAN_CAPABILITY_DMG_TYPE_AP:
792 		conn.network_type = WMI_NETTYPE_INFRA;
793 		break;
794 	case WLAN_CAPABILITY_DMG_TYPE_PBSS:
795 		conn.network_type = WMI_NETTYPE_P2P;
796 		break;
797 	default:
798 		wil_err(wil, "Unsupported BSS type, capability= 0x%04x\n",
799 			bss->capability);
800 		goto out;
801 	}
802 	if (wil->privacy) {
803 		if (rsn_eid) { /* regular secure connection */
804 			conn.dot11_auth_mode = WMI_AUTH11_SHARED;
805 			conn.auth_mode = WMI_AUTH_WPA2_PSK;
806 			conn.pairwise_crypto_type = WMI_CRYPT_AES_GCMP;
807 			conn.pairwise_crypto_len = 16;
808 			conn.group_crypto_type = WMI_CRYPT_AES_GCMP;
809 			conn.group_crypto_len = 16;
810 		} else { /* WSC */
811 			conn.dot11_auth_mode = WMI_AUTH11_WSC;
812 			conn.auth_mode = WMI_AUTH_NONE;
813 		}
814 	} else { /* insecure connection */
815 		conn.dot11_auth_mode = WMI_AUTH11_OPEN;
816 		conn.auth_mode = WMI_AUTH_NONE;
817 	}
818 
819 	conn.ssid_len = min_t(u8, ssid_eid[1], 32);
820 	memcpy(conn.ssid, ssid_eid+2, conn.ssid_len);
821 
822 	ch = bss->channel->hw_value;
823 	if (ch == 0) {
824 		wil_err(wil, "BSS at unknown frequency %dMhz\n",
825 			bss->channel->center_freq);
826 		rc = -EOPNOTSUPP;
827 		goto out;
828 	}
829 	conn.channel = ch - 1;
830 
831 	ether_addr_copy(conn.bssid, bss->bssid);
832 	ether_addr_copy(conn.dst_mac, bss->bssid);
833 
834 	set_bit(wil_status_fwconnecting, wil->status);
835 
836 	rc = wmi_send(wil, WMI_CONNECT_CMDID, &conn, sizeof(conn));
837 	if (rc == 0) {
838 		netif_carrier_on(ndev);
839 		wil6210_bus_request(wil, WIL_MAX_BUS_REQUEST_KBPS);
840 		wil->bss = bss;
841 		/* Connect can take lots of time */
842 		mod_timer(&wil->connect_timer,
843 			  jiffies + msecs_to_jiffies(5000));
844 	} else {
845 		clear_bit(wil_status_fwconnecting, wil->status);
846 	}
847 
848  out:
849 	cfg80211_put_bss(wiphy, bss);
850 
851 	return rc;
852 }
853 
854 static int wil_cfg80211_disconnect(struct wiphy *wiphy,
855 				   struct net_device *ndev,
856 				   u16 reason_code)
857 {
858 	int rc;
859 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
860 
861 	wil_dbg_misc(wil, "disconnect: reason=%d\n", reason_code);
862 
863 	if (!(test_bit(wil_status_fwconnecting, wil->status) ||
864 	      test_bit(wil_status_fwconnected, wil->status))) {
865 		wil_err(wil, "Disconnect was called while disconnected\n");
866 		return 0;
867 	}
868 
869 	wil->locally_generated_disc = true;
870 	rc = wmi_call(wil, WMI_DISCONNECT_CMDID, NULL, 0,
871 		      WMI_DISCONNECT_EVENTID, NULL, 0,
872 		      WIL6210_DISCONNECT_TO_MS);
873 	if (rc)
874 		wil_err(wil, "disconnect error %d\n", rc);
875 
876 	return rc;
877 }
878 
879 static int wil_cfg80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
880 {
881 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
882 	int rc;
883 
884 	/* these parameters are explicitly not supported */
885 	if (changed & (WIPHY_PARAM_RETRY_LONG |
886 		       WIPHY_PARAM_FRAG_THRESHOLD |
887 		       WIPHY_PARAM_RTS_THRESHOLD))
888 		return -ENOTSUPP;
889 
890 	if (changed & WIPHY_PARAM_RETRY_SHORT) {
891 		rc = wmi_set_mgmt_retry(wil, wiphy->retry_short);
892 		if (rc)
893 			return rc;
894 	}
895 
896 	return 0;
897 }
898 
899 int wil_cfg80211_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev,
900 			 struct cfg80211_mgmt_tx_params *params,
901 			 u64 *cookie)
902 {
903 	const u8 *buf = params->buf;
904 	size_t len = params->len, total;
905 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
906 	int rc;
907 	bool tx_status = false;
908 	struct ieee80211_mgmt *mgmt_frame = (void *)buf;
909 	struct wmi_sw_tx_req_cmd *cmd;
910 	struct {
911 		struct wmi_cmd_hdr wmi;
912 		struct wmi_sw_tx_complete_event evt;
913 	} __packed evt;
914 
915 	/* Note, currently we do not support the "wait" parameter, user-space
916 	 * must call remain_on_channel before mgmt_tx or listen on a channel
917 	 * another way (AP/PCP or connected station)
918 	 * in addition we need to check if specified "chan" argument is
919 	 * different from currently "listened" channel and fail if it is.
920 	 */
921 
922 	wil_dbg_misc(wil, "mgmt_tx\n");
923 	wil_hex_dump_misc("mgmt tx frame ", DUMP_PREFIX_OFFSET, 16, 1, buf,
924 			  len, true);
925 
926 	if (len < sizeof(struct ieee80211_hdr_3addr))
927 		return -EINVAL;
928 
929 	total = sizeof(*cmd) + len;
930 	if (total < len)
931 		return -EINVAL;
932 
933 	cmd = kmalloc(total, GFP_KERNEL);
934 	if (!cmd) {
935 		rc = -ENOMEM;
936 		goto out;
937 	}
938 
939 	memcpy(cmd->dst_mac, mgmt_frame->da, WMI_MAC_LEN);
940 	cmd->len = cpu_to_le16(len);
941 	memcpy(cmd->payload, buf, len);
942 
943 	rc = wmi_call(wil, WMI_SW_TX_REQ_CMDID, cmd, total,
944 		      WMI_SW_TX_COMPLETE_EVENTID, &evt, sizeof(evt), 2000);
945 	if (rc == 0)
946 		tx_status = !evt.evt.status;
947 
948 	kfree(cmd);
949  out:
950 	cfg80211_mgmt_tx_status(wdev, cookie ? *cookie : 0, buf, len,
951 				tx_status, GFP_KERNEL);
952 	return rc;
953 }
954 
955 static int wil_cfg80211_set_channel(struct wiphy *wiphy,
956 				    struct cfg80211_chan_def *chandef)
957 {
958 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
959 
960 	wil->monitor_chandef = *chandef;
961 
962 	return 0;
963 }
964 
965 static enum wmi_key_usage wil_detect_key_usage(struct wil6210_priv *wil,
966 					       bool pairwise)
967 {
968 	struct wireless_dev *wdev = wil_to_wdev(wil);
969 	enum wmi_key_usage rc;
970 
971 	if (pairwise) {
972 		rc = WMI_KEY_USE_PAIRWISE;
973 	} else {
974 		switch (wdev->iftype) {
975 		case NL80211_IFTYPE_STATION:
976 		case NL80211_IFTYPE_P2P_CLIENT:
977 			rc = WMI_KEY_USE_RX_GROUP;
978 			break;
979 		case NL80211_IFTYPE_AP:
980 		case NL80211_IFTYPE_P2P_GO:
981 			rc = WMI_KEY_USE_TX_GROUP;
982 			break;
983 		default:
984 			/* TODO: Rx GTK or Tx GTK? */
985 			wil_err(wil, "Can't determine GTK type\n");
986 			rc = WMI_KEY_USE_RX_GROUP;
987 			break;
988 		}
989 	}
990 	wil_dbg_misc(wil, "detect_key_usage: -> %s\n", key_usage_str[rc]);
991 
992 	return rc;
993 }
994 
995 static struct wil_sta_info *
996 wil_find_sta_by_key_usage(struct wil6210_priv *wil,
997 			  enum wmi_key_usage key_usage, const u8 *mac_addr)
998 {
999 	int cid = -EINVAL;
1000 
1001 	if (key_usage == WMI_KEY_USE_TX_GROUP)
1002 		return NULL; /* not needed */
1003 
1004 	/* supplicant provides Rx group key in STA mode with NULL MAC address */
1005 	if (mac_addr)
1006 		cid = wil_find_cid(wil, mac_addr);
1007 	else if (key_usage == WMI_KEY_USE_RX_GROUP)
1008 		cid = wil_find_cid_by_idx(wil, 0);
1009 	if (cid < 0) {
1010 		wil_err(wil, "No CID for %pM %s\n", mac_addr,
1011 			key_usage_str[key_usage]);
1012 		return ERR_PTR(cid);
1013 	}
1014 
1015 	return &wil->sta[cid];
1016 }
1017 
1018 static void wil_set_crypto_rx(u8 key_index, enum wmi_key_usage key_usage,
1019 			      struct wil_sta_info *cs,
1020 			      struct key_params *params)
1021 {
1022 	struct wil_tid_crypto_rx_single *cc;
1023 	int tid;
1024 
1025 	if (!cs)
1026 		return;
1027 
1028 	switch (key_usage) {
1029 	case WMI_KEY_USE_PAIRWISE:
1030 		for (tid = 0; tid < WIL_STA_TID_NUM; tid++) {
1031 			cc = &cs->tid_crypto_rx[tid].key_id[key_index];
1032 			if (params->seq)
1033 				memcpy(cc->pn, params->seq,
1034 				       IEEE80211_GCMP_PN_LEN);
1035 			else
1036 				memset(cc->pn, 0, IEEE80211_GCMP_PN_LEN);
1037 			cc->key_set = true;
1038 		}
1039 		break;
1040 	case WMI_KEY_USE_RX_GROUP:
1041 		cc = &cs->group_crypto_rx.key_id[key_index];
1042 		if (params->seq)
1043 			memcpy(cc->pn, params->seq, IEEE80211_GCMP_PN_LEN);
1044 		else
1045 			memset(cc->pn, 0, IEEE80211_GCMP_PN_LEN);
1046 		cc->key_set = true;
1047 		break;
1048 	default:
1049 		break;
1050 	}
1051 }
1052 
1053 static void wil_del_rx_key(u8 key_index, enum wmi_key_usage key_usage,
1054 			   struct wil_sta_info *cs)
1055 {
1056 	struct wil_tid_crypto_rx_single *cc;
1057 	int tid;
1058 
1059 	if (!cs)
1060 		return;
1061 
1062 	switch (key_usage) {
1063 	case WMI_KEY_USE_PAIRWISE:
1064 		for (tid = 0; tid < WIL_STA_TID_NUM; tid++) {
1065 			cc = &cs->tid_crypto_rx[tid].key_id[key_index];
1066 			cc->key_set = false;
1067 		}
1068 		break;
1069 	case WMI_KEY_USE_RX_GROUP:
1070 		cc = &cs->group_crypto_rx.key_id[key_index];
1071 		cc->key_set = false;
1072 		break;
1073 	default:
1074 		break;
1075 	}
1076 }
1077 
1078 static int wil_cfg80211_add_key(struct wiphy *wiphy,
1079 				struct net_device *ndev,
1080 				u8 key_index, bool pairwise,
1081 				const u8 *mac_addr,
1082 				struct key_params *params)
1083 {
1084 	int rc;
1085 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1086 	enum wmi_key_usage key_usage = wil_detect_key_usage(wil, pairwise);
1087 	struct wil_sta_info *cs = wil_find_sta_by_key_usage(wil, key_usage,
1088 							    mac_addr);
1089 
1090 	if (!params) {
1091 		wil_err(wil, "NULL params\n");
1092 		return -EINVAL;
1093 	}
1094 
1095 	wil_dbg_misc(wil, "add_key: %pM %s[%d] PN %*phN\n",
1096 		     mac_addr, key_usage_str[key_usage], key_index,
1097 		     params->seq_len, params->seq);
1098 
1099 	if (IS_ERR(cs)) {
1100 		wil_err(wil, "Not connected, %pM %s[%d] PN %*phN\n",
1101 			mac_addr, key_usage_str[key_usage], key_index,
1102 			params->seq_len, params->seq);
1103 		return -EINVAL;
1104 	}
1105 
1106 	wil_del_rx_key(key_index, key_usage, cs);
1107 
1108 	if (params->seq && params->seq_len != IEEE80211_GCMP_PN_LEN) {
1109 		wil_err(wil,
1110 			"Wrong PN len %d, %pM %s[%d] PN %*phN\n",
1111 			params->seq_len, mac_addr,
1112 			key_usage_str[key_usage], key_index,
1113 			params->seq_len, params->seq);
1114 		return -EINVAL;
1115 	}
1116 
1117 	rc = wmi_add_cipher_key(wil, key_index, mac_addr, params->key_len,
1118 				params->key, key_usage);
1119 	if (!rc)
1120 		wil_set_crypto_rx(key_index, key_usage, cs, params);
1121 
1122 	return rc;
1123 }
1124 
1125 static int wil_cfg80211_del_key(struct wiphy *wiphy,
1126 				struct net_device *ndev,
1127 				u8 key_index, bool pairwise,
1128 				const u8 *mac_addr)
1129 {
1130 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1131 	enum wmi_key_usage key_usage = wil_detect_key_usage(wil, pairwise);
1132 	struct wil_sta_info *cs = wil_find_sta_by_key_usage(wil, key_usage,
1133 							    mac_addr);
1134 
1135 	wil_dbg_misc(wil, "del_key: %pM %s[%d]\n", mac_addr,
1136 		     key_usage_str[key_usage], key_index);
1137 
1138 	if (IS_ERR(cs))
1139 		wil_info(wil, "Not connected, %pM %s[%d]\n",
1140 			 mac_addr, key_usage_str[key_usage], key_index);
1141 
1142 	if (!IS_ERR_OR_NULL(cs))
1143 		wil_del_rx_key(key_index, key_usage, cs);
1144 
1145 	return wmi_del_cipher_key(wil, key_index, mac_addr, key_usage);
1146 }
1147 
1148 /* Need to be present or wiphy_new() will WARN */
1149 static int wil_cfg80211_set_default_key(struct wiphy *wiphy,
1150 					struct net_device *ndev,
1151 					u8 key_index, bool unicast,
1152 					bool multicast)
1153 {
1154 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1155 
1156 	wil_dbg_misc(wil, "set_default_key: entered\n");
1157 	return 0;
1158 }
1159 
1160 static int wil_remain_on_channel(struct wiphy *wiphy,
1161 				 struct wireless_dev *wdev,
1162 				 struct ieee80211_channel *chan,
1163 				 unsigned int duration,
1164 				 u64 *cookie)
1165 {
1166 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1167 	int rc;
1168 
1169 	wil_dbg_misc(wil,
1170 		     "remain_on_channel: center_freq=%d, duration=%d iftype=%d\n",
1171 		     chan->center_freq, duration, wdev->iftype);
1172 
1173 	rc = wil_p2p_listen(wil, wdev, duration, chan, cookie);
1174 	return rc;
1175 }
1176 
1177 static int wil_cancel_remain_on_channel(struct wiphy *wiphy,
1178 					struct wireless_dev *wdev,
1179 					u64 cookie)
1180 {
1181 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1182 
1183 	wil_dbg_misc(wil, "cancel_remain_on_channel\n");
1184 
1185 	return wil_p2p_cancel_listen(wil, cookie);
1186 }
1187 
1188 /**
1189  * find a specific IE in a list of IEs
1190  * return a pointer to the beginning of IE in the list
1191  * or NULL if not found
1192  */
1193 static const u8 *_wil_cfg80211_find_ie(const u8 *ies, u16 ies_len, const u8 *ie,
1194 				       u16 ie_len)
1195 {
1196 	struct ieee80211_vendor_ie *vie;
1197 	u32 oui;
1198 
1199 	/* IE tag at offset 0, length at offset 1 */
1200 	if (ie_len < 2 || 2 + ie[1] > ie_len)
1201 		return NULL;
1202 
1203 	if (ie[0] != WLAN_EID_VENDOR_SPECIFIC)
1204 		return cfg80211_find_ie(ie[0], ies, ies_len);
1205 
1206 	/* make sure there is room for 3 bytes OUI + 1 byte OUI type */
1207 	if (ie[1] < 4)
1208 		return NULL;
1209 	vie = (struct ieee80211_vendor_ie *)ie;
1210 	oui = vie->oui[0] << 16 | vie->oui[1] << 8 | vie->oui[2];
1211 	return cfg80211_find_vendor_ie(oui, vie->oui_type, ies,
1212 				       ies_len);
1213 }
1214 
1215 /**
1216  * merge the IEs in two lists into a single list.
1217  * do not include IEs from the second list which exist in the first list.
1218  * add only vendor specific IEs from second list to keep
1219  * the merged list sorted (since vendor-specific IE has the
1220  * highest tag number)
1221  * caller must free the allocated memory for merged IEs
1222  */
1223 static int _wil_cfg80211_merge_extra_ies(const u8 *ies1, u16 ies1_len,
1224 					 const u8 *ies2, u16 ies2_len,
1225 					 u8 **merged_ies, u16 *merged_len)
1226 {
1227 	u8 *buf, *dpos;
1228 	const u8 *spos;
1229 
1230 	if (ies1_len == 0 && ies2_len == 0) {
1231 		*merged_ies = NULL;
1232 		*merged_len = 0;
1233 		return 0;
1234 	}
1235 
1236 	buf = kmalloc(ies1_len + ies2_len, GFP_KERNEL);
1237 	if (!buf)
1238 		return -ENOMEM;
1239 	memcpy(buf, ies1, ies1_len);
1240 	dpos = buf + ies1_len;
1241 	spos = ies2;
1242 	while (spos + 1 < ies2 + ies2_len) {
1243 		/* IE tag at offset 0, length at offset 1 */
1244 		u16 ielen = 2 + spos[1];
1245 
1246 		if (spos + ielen > ies2 + ies2_len)
1247 			break;
1248 		if (spos[0] == WLAN_EID_VENDOR_SPECIFIC &&
1249 		    !_wil_cfg80211_find_ie(ies1, ies1_len, spos, ielen)) {
1250 			memcpy(dpos, spos, ielen);
1251 			dpos += ielen;
1252 		}
1253 		spos += ielen;
1254 	}
1255 
1256 	*merged_ies = buf;
1257 	*merged_len = dpos - buf;
1258 	return 0;
1259 }
1260 
1261 static void wil_print_bcon_data(struct cfg80211_beacon_data *b)
1262 {
1263 	wil_hex_dump_misc("head     ", DUMP_PREFIX_OFFSET, 16, 1,
1264 			  b->head, b->head_len, true);
1265 	wil_hex_dump_misc("tail     ", DUMP_PREFIX_OFFSET, 16, 1,
1266 			  b->tail, b->tail_len, true);
1267 	wil_hex_dump_misc("BCON IE  ", DUMP_PREFIX_OFFSET, 16, 1,
1268 			  b->beacon_ies, b->beacon_ies_len, true);
1269 	wil_hex_dump_misc("PROBE    ", DUMP_PREFIX_OFFSET, 16, 1,
1270 			  b->probe_resp, b->probe_resp_len, true);
1271 	wil_hex_dump_misc("PROBE IE ", DUMP_PREFIX_OFFSET, 16, 1,
1272 			  b->proberesp_ies, b->proberesp_ies_len, true);
1273 	wil_hex_dump_misc("ASSOC IE ", DUMP_PREFIX_OFFSET, 16, 1,
1274 			  b->assocresp_ies, b->assocresp_ies_len, true);
1275 }
1276 
1277 /* internal functions for device reset and starting AP */
1278 static int _wil_cfg80211_set_ies(struct wiphy *wiphy,
1279 				 struct cfg80211_beacon_data *bcon)
1280 {
1281 	int rc;
1282 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1283 	u16 len = 0, proberesp_len = 0;
1284 	u8 *ies = NULL, *proberesp = NULL;
1285 
1286 	if (bcon->probe_resp) {
1287 		struct ieee80211_mgmt *f =
1288 			(struct ieee80211_mgmt *)bcon->probe_resp;
1289 		size_t hlen = offsetof(struct ieee80211_mgmt,
1290 				       u.probe_resp.variable);
1291 		proberesp = f->u.probe_resp.variable;
1292 		proberesp_len = bcon->probe_resp_len - hlen;
1293 	}
1294 	rc = _wil_cfg80211_merge_extra_ies(proberesp,
1295 					   proberesp_len,
1296 					   bcon->proberesp_ies,
1297 					   bcon->proberesp_ies_len,
1298 					   &ies, &len);
1299 
1300 	if (rc)
1301 		goto out;
1302 
1303 	rc = wmi_set_ie(wil, WMI_FRAME_PROBE_RESP, len, ies);
1304 	if (rc)
1305 		goto out;
1306 
1307 	if (bcon->assocresp_ies)
1308 		rc = wmi_set_ie(wil, WMI_FRAME_ASSOC_RESP,
1309 				bcon->assocresp_ies_len, bcon->assocresp_ies);
1310 	else
1311 		rc = wmi_set_ie(wil, WMI_FRAME_ASSOC_RESP, len, ies);
1312 #if 0 /* to use beacon IE's, remove this #if 0 */
1313 	if (rc)
1314 		goto out;
1315 
1316 	rc = wmi_set_ie(wil, WMI_FRAME_BEACON, bcon->tail_len, bcon->tail);
1317 #endif
1318 out:
1319 	kfree(ies);
1320 	return rc;
1321 }
1322 
1323 static int _wil_cfg80211_start_ap(struct wiphy *wiphy,
1324 				  struct net_device *ndev,
1325 				  const u8 *ssid, size_t ssid_len, u32 privacy,
1326 				  int bi, u8 chan,
1327 				  struct cfg80211_beacon_data *bcon,
1328 				  u8 hidden_ssid, u32 pbss)
1329 {
1330 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1331 	int rc;
1332 	struct wireless_dev *wdev = ndev->ieee80211_ptr;
1333 	u8 wmi_nettype = wil_iftype_nl2wmi(wdev->iftype);
1334 	u8 is_go = (wdev->iftype == NL80211_IFTYPE_P2P_GO);
1335 
1336 	if (pbss)
1337 		wmi_nettype = WMI_NETTYPE_P2P;
1338 
1339 	wil_dbg_misc(wil, "start_ap: is_go=%d\n", is_go);
1340 	if (is_go && !pbss) {
1341 		wil_err(wil, "P2P GO must be in PBSS\n");
1342 		return -ENOTSUPP;
1343 	}
1344 
1345 	wil_set_recovery_state(wil, fw_recovery_idle);
1346 
1347 	mutex_lock(&wil->mutex);
1348 
1349 	__wil_down(wil);
1350 	rc = __wil_up(wil);
1351 	if (rc)
1352 		goto out;
1353 
1354 	rc = wmi_set_ssid(wil, ssid_len, ssid);
1355 	if (rc)
1356 		goto out;
1357 
1358 	rc = _wil_cfg80211_set_ies(wiphy, bcon);
1359 	if (rc)
1360 		goto out;
1361 
1362 	wil->privacy = privacy;
1363 	wil->channel = chan;
1364 	wil->hidden_ssid = hidden_ssid;
1365 	wil->pbss = pbss;
1366 
1367 	netif_carrier_on(ndev);
1368 	wil6210_bus_request(wil, WIL_MAX_BUS_REQUEST_KBPS);
1369 
1370 	rc = wmi_pcp_start(wil, bi, wmi_nettype, chan, hidden_ssid, is_go);
1371 	if (rc)
1372 		goto err_pcp_start;
1373 
1374 	rc = wil_bcast_init(wil);
1375 	if (rc)
1376 		goto err_bcast;
1377 
1378 	goto out; /* success */
1379 
1380 err_bcast:
1381 	wmi_pcp_stop(wil);
1382 err_pcp_start:
1383 	netif_carrier_off(ndev);
1384 	wil6210_bus_request(wil, WIL_DEFAULT_BUS_REQUEST_KBPS);
1385 out:
1386 	mutex_unlock(&wil->mutex);
1387 	return rc;
1388 }
1389 
1390 static int wil_cfg80211_change_beacon(struct wiphy *wiphy,
1391 				      struct net_device *ndev,
1392 				      struct cfg80211_beacon_data *bcon)
1393 {
1394 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1395 	int rc;
1396 	u32 privacy = 0;
1397 
1398 	wil_dbg_misc(wil, "change_beacon\n");
1399 	wil_print_bcon_data(bcon);
1400 
1401 	if (bcon->tail &&
1402 	    cfg80211_find_ie(WLAN_EID_RSN, bcon->tail,
1403 			     bcon->tail_len))
1404 		privacy = 1;
1405 
1406 	/* in case privacy has changed, need to restart the AP */
1407 	if (wil->privacy != privacy) {
1408 		struct wireless_dev *wdev = ndev->ieee80211_ptr;
1409 
1410 		wil_dbg_misc(wil, "privacy changed %d=>%d. Restarting AP\n",
1411 			     wil->privacy, privacy);
1412 
1413 		rc = _wil_cfg80211_start_ap(wiphy, ndev, wdev->ssid,
1414 					    wdev->ssid_len, privacy,
1415 					    wdev->beacon_interval,
1416 					    wil->channel, bcon,
1417 					    wil->hidden_ssid,
1418 					    wil->pbss);
1419 	} else {
1420 		rc = _wil_cfg80211_set_ies(wiphy, bcon);
1421 	}
1422 
1423 	return rc;
1424 }
1425 
1426 static int wil_cfg80211_start_ap(struct wiphy *wiphy,
1427 				 struct net_device *ndev,
1428 				 struct cfg80211_ap_settings *info)
1429 {
1430 	int rc;
1431 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1432 	struct ieee80211_channel *channel = info->chandef.chan;
1433 	struct cfg80211_beacon_data *bcon = &info->beacon;
1434 	struct cfg80211_crypto_settings *crypto = &info->crypto;
1435 	u8 hidden_ssid;
1436 
1437 	wil_dbg_misc(wil, "start_ap\n");
1438 
1439 	if (!channel) {
1440 		wil_err(wil, "AP: No channel???\n");
1441 		return -EINVAL;
1442 	}
1443 
1444 	switch (info->hidden_ssid) {
1445 	case NL80211_HIDDEN_SSID_NOT_IN_USE:
1446 		hidden_ssid = WMI_HIDDEN_SSID_DISABLED;
1447 		break;
1448 
1449 	case NL80211_HIDDEN_SSID_ZERO_LEN:
1450 		hidden_ssid = WMI_HIDDEN_SSID_SEND_EMPTY;
1451 		break;
1452 
1453 	case NL80211_HIDDEN_SSID_ZERO_CONTENTS:
1454 		hidden_ssid = WMI_HIDDEN_SSID_CLEAR;
1455 		break;
1456 
1457 	default:
1458 		wil_err(wil, "AP: Invalid hidden SSID %d\n", info->hidden_ssid);
1459 		return -EOPNOTSUPP;
1460 	}
1461 	wil_dbg_misc(wil, "AP on Channel %d %d MHz, %s\n", channel->hw_value,
1462 		     channel->center_freq, info->privacy ? "secure" : "open");
1463 	wil_dbg_misc(wil, "Privacy: %d auth_type %d\n",
1464 		     info->privacy, info->auth_type);
1465 	wil_dbg_misc(wil, "Hidden SSID mode: %d\n",
1466 		     info->hidden_ssid);
1467 	wil_dbg_misc(wil, "BI %d DTIM %d\n", info->beacon_interval,
1468 		     info->dtim_period);
1469 	wil_dbg_misc(wil, "PBSS %d\n", info->pbss);
1470 	wil_hex_dump_misc("SSID ", DUMP_PREFIX_OFFSET, 16, 1,
1471 			  info->ssid, info->ssid_len, true);
1472 	wil_print_bcon_data(bcon);
1473 	wil_print_crypto(wil, crypto);
1474 
1475 	rc = _wil_cfg80211_start_ap(wiphy, ndev,
1476 				    info->ssid, info->ssid_len, info->privacy,
1477 				    info->beacon_interval, channel->hw_value,
1478 				    bcon, hidden_ssid, info->pbss);
1479 
1480 	return rc;
1481 }
1482 
1483 static int wil_cfg80211_stop_ap(struct wiphy *wiphy,
1484 				struct net_device *ndev)
1485 {
1486 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1487 
1488 	wil_dbg_misc(wil, "stop_ap\n");
1489 
1490 	netif_carrier_off(ndev);
1491 	wil6210_bus_request(wil, WIL_DEFAULT_BUS_REQUEST_KBPS);
1492 	wil_set_recovery_state(wil, fw_recovery_idle);
1493 
1494 	set_bit(wil_status_resetting, wil->status);
1495 
1496 	mutex_lock(&wil->mutex);
1497 
1498 	wmi_pcp_stop(wil);
1499 
1500 	__wil_down(wil);
1501 
1502 	mutex_unlock(&wil->mutex);
1503 
1504 	return 0;
1505 }
1506 
1507 static int wil_cfg80211_add_station(struct wiphy *wiphy,
1508 				    struct net_device *dev,
1509 				    const u8 *mac,
1510 				    struct station_parameters *params)
1511 {
1512 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1513 
1514 	wil_dbg_misc(wil, "add station %pM aid %d\n", mac, params->aid);
1515 
1516 	if (!disable_ap_sme) {
1517 		wil_err(wil, "not supported with AP SME enabled\n");
1518 		return -EOPNOTSUPP;
1519 	}
1520 
1521 	if (params->aid > WIL_MAX_DMG_AID) {
1522 		wil_err(wil, "invalid aid\n");
1523 		return -EINVAL;
1524 	}
1525 
1526 	return wmi_new_sta(wil, mac, params->aid);
1527 }
1528 
1529 static int wil_cfg80211_del_station(struct wiphy *wiphy,
1530 				    struct net_device *dev,
1531 				    struct station_del_parameters *params)
1532 {
1533 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1534 
1535 	wil_dbg_misc(wil, "del_station: %pM, reason=%d\n", params->mac,
1536 		     params->reason_code);
1537 
1538 	mutex_lock(&wil->mutex);
1539 	wil6210_disconnect(wil, params->mac, params->reason_code, false);
1540 	mutex_unlock(&wil->mutex);
1541 
1542 	return 0;
1543 }
1544 
1545 static int wil_cfg80211_change_station(struct wiphy *wiphy,
1546 				       struct net_device *dev,
1547 				       const u8 *mac,
1548 				       struct station_parameters *params)
1549 {
1550 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1551 	int authorize;
1552 	int cid, i;
1553 	struct vring_tx_data *txdata = NULL;
1554 
1555 	wil_dbg_misc(wil, "change station %pM mask 0x%x set 0x%x\n", mac,
1556 		     params->sta_flags_mask, params->sta_flags_set);
1557 
1558 	if (!disable_ap_sme) {
1559 		wil_dbg_misc(wil, "not supported with AP SME enabled\n");
1560 		return -EOPNOTSUPP;
1561 	}
1562 
1563 	if (!(params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)))
1564 		return 0;
1565 
1566 	cid = wil_find_cid(wil, mac);
1567 	if (cid < 0) {
1568 		wil_err(wil, "station not found\n");
1569 		return -ENOLINK;
1570 	}
1571 
1572 	for (i = 0; i < ARRAY_SIZE(wil->vring2cid_tid); i++)
1573 		if (wil->vring2cid_tid[i][0] == cid) {
1574 			txdata = &wil->vring_tx_data[i];
1575 			break;
1576 		}
1577 
1578 	if (!txdata) {
1579 		wil_err(wil, "vring data not found\n");
1580 		return -ENOLINK;
1581 	}
1582 
1583 	authorize = params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED);
1584 	txdata->dot1x_open = authorize ? 1 : 0;
1585 	wil_dbg_misc(wil, "cid %d vring %d authorize %d\n", cid, i,
1586 		     txdata->dot1x_open);
1587 
1588 	return 0;
1589 }
1590 
1591 /* probe_client handling */
1592 static void wil_probe_client_handle(struct wil6210_priv *wil,
1593 				    struct wil_probe_client_req *req)
1594 {
1595 	struct net_device *ndev = wil_to_ndev(wil);
1596 	struct wil_sta_info *sta = &wil->sta[req->cid];
1597 	/* assume STA is alive if it is still connected,
1598 	 * else FW will disconnect it
1599 	 */
1600 	bool alive = (sta->status == wil_sta_connected);
1601 
1602 	cfg80211_probe_status(ndev, sta->addr, req->cookie, alive, GFP_KERNEL);
1603 }
1604 
1605 static struct list_head *next_probe_client(struct wil6210_priv *wil)
1606 {
1607 	struct list_head *ret = NULL;
1608 
1609 	mutex_lock(&wil->probe_client_mutex);
1610 
1611 	if (!list_empty(&wil->probe_client_pending)) {
1612 		ret = wil->probe_client_pending.next;
1613 		list_del(ret);
1614 	}
1615 
1616 	mutex_unlock(&wil->probe_client_mutex);
1617 
1618 	return ret;
1619 }
1620 
1621 void wil_probe_client_worker(struct work_struct *work)
1622 {
1623 	struct wil6210_priv *wil = container_of(work, struct wil6210_priv,
1624 						probe_client_worker);
1625 	struct wil_probe_client_req *req;
1626 	struct list_head *lh;
1627 
1628 	while ((lh = next_probe_client(wil)) != NULL) {
1629 		req = list_entry(lh, struct wil_probe_client_req, list);
1630 
1631 		wil_probe_client_handle(wil, req);
1632 		kfree(req);
1633 	}
1634 }
1635 
1636 void wil_probe_client_flush(struct wil6210_priv *wil)
1637 {
1638 	struct wil_probe_client_req *req, *t;
1639 
1640 	wil_dbg_misc(wil, "probe_client_flush\n");
1641 
1642 	mutex_lock(&wil->probe_client_mutex);
1643 
1644 	list_for_each_entry_safe(req, t, &wil->probe_client_pending, list) {
1645 		list_del(&req->list);
1646 		kfree(req);
1647 	}
1648 
1649 	mutex_unlock(&wil->probe_client_mutex);
1650 }
1651 
1652 static int wil_cfg80211_probe_client(struct wiphy *wiphy,
1653 				     struct net_device *dev,
1654 				     const u8 *peer, u64 *cookie)
1655 {
1656 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1657 	struct wil_probe_client_req *req;
1658 	int cid = wil_find_cid(wil, peer);
1659 
1660 	wil_dbg_misc(wil, "probe_client: %pM => CID %d\n", peer, cid);
1661 
1662 	if (cid < 0)
1663 		return -ENOLINK;
1664 
1665 	req = kzalloc(sizeof(*req), GFP_KERNEL);
1666 	if (!req)
1667 		return -ENOMEM;
1668 
1669 	req->cid = cid;
1670 	req->cookie = cid;
1671 
1672 	mutex_lock(&wil->probe_client_mutex);
1673 	list_add_tail(&req->list, &wil->probe_client_pending);
1674 	mutex_unlock(&wil->probe_client_mutex);
1675 
1676 	*cookie = req->cookie;
1677 	queue_work(wil->wq_service, &wil->probe_client_worker);
1678 	return 0;
1679 }
1680 
1681 static int wil_cfg80211_change_bss(struct wiphy *wiphy,
1682 				   struct net_device *dev,
1683 				   struct bss_parameters *params)
1684 {
1685 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1686 
1687 	if (params->ap_isolate >= 0) {
1688 		wil_dbg_misc(wil, "change_bss: ap_isolate %d => %d\n",
1689 			     wil->ap_isolate, params->ap_isolate);
1690 		wil->ap_isolate = params->ap_isolate;
1691 	}
1692 
1693 	return 0;
1694 }
1695 
1696 static int wil_cfg80211_set_power_mgmt(struct wiphy *wiphy,
1697 				       struct net_device *dev,
1698 				       bool enabled, int timeout)
1699 {
1700 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1701 	enum wmi_ps_profile_type ps_profile;
1702 
1703 	wil_dbg_misc(wil, "enabled=%d, timeout=%d\n",
1704 		     enabled, timeout);
1705 
1706 	if (enabled)
1707 		ps_profile = WMI_PS_PROFILE_TYPE_DEFAULT;
1708 	else
1709 		ps_profile = WMI_PS_PROFILE_TYPE_PS_DISABLED;
1710 
1711 	return wil_ps_update(wil, ps_profile);
1712 }
1713 
1714 static int wil_cfg80211_suspend(struct wiphy *wiphy,
1715 				struct cfg80211_wowlan *wow)
1716 {
1717 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1718 	int rc;
1719 
1720 	/* Setting the wakeup trigger based on wow is TBD */
1721 
1722 	if (test_bit(wil_status_suspended, wil->status)) {
1723 		wil_dbg_pm(wil, "trying to suspend while suspended\n");
1724 		return 0;
1725 	}
1726 
1727 	rc = wil_can_suspend(wil, false);
1728 	if (rc)
1729 		goto out;
1730 
1731 	wil_dbg_pm(wil, "suspending\n");
1732 
1733 	mutex_lock(&wil->mutex);
1734 	mutex_lock(&wil->p2p_wdev_mutex);
1735 	wil_p2p_stop_radio_operations(wil);
1736 	wil_abort_scan(wil, true);
1737 	mutex_unlock(&wil->p2p_wdev_mutex);
1738 	mutex_unlock(&wil->mutex);
1739 
1740 out:
1741 	return rc;
1742 }
1743 
1744 static int wil_cfg80211_resume(struct wiphy *wiphy)
1745 {
1746 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1747 
1748 	wil_dbg_pm(wil, "resuming\n");
1749 
1750 	return 0;
1751 }
1752 
1753 static int
1754 wil_cfg80211_sched_scan_start(struct wiphy *wiphy,
1755 			      struct net_device *dev,
1756 			      struct cfg80211_sched_scan_request *request)
1757 {
1758 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1759 	int i, rc;
1760 
1761 	wil_dbg_misc(wil,
1762 		     "sched scan start: n_ssids %d, ie_len %zu, flags 0x%x\n",
1763 		     request->n_ssids, request->ie_len, request->flags);
1764 	for (i = 0; i < request->n_ssids; i++) {
1765 		wil_dbg_misc(wil, "SSID[%d]:", i);
1766 		wil_hex_dump_misc("SSID ", DUMP_PREFIX_OFFSET, 16, 1,
1767 				  request->ssids[i].ssid,
1768 				  request->ssids[i].ssid_len, true);
1769 	}
1770 	wil_dbg_misc(wil, "channels:");
1771 	for (i = 0; i < request->n_channels; i++)
1772 		wil_dbg_misc(wil, " %d%s", request->channels[i]->hw_value,
1773 			     i == request->n_channels - 1 ? "\n" : "");
1774 	wil_dbg_misc(wil, "n_match_sets %d, min_rssi_thold %d, delay %d\n",
1775 		     request->n_match_sets, request->min_rssi_thold,
1776 		     request->delay);
1777 	for (i = 0; i < request->n_match_sets; i++) {
1778 		struct cfg80211_match_set *ms = &request->match_sets[i];
1779 
1780 		wil_dbg_misc(wil, "MATCHSET[%d]: rssi_thold %d\n",
1781 			     i, ms->rssi_thold);
1782 		wil_hex_dump_misc("SSID ", DUMP_PREFIX_OFFSET, 16, 1,
1783 				  ms->ssid.ssid,
1784 				  ms->ssid.ssid_len, true);
1785 	}
1786 	wil_dbg_misc(wil, "n_scan_plans %d\n", request->n_scan_plans);
1787 	for (i = 0; i < request->n_scan_plans; i++) {
1788 		struct cfg80211_sched_scan_plan *sp = &request->scan_plans[i];
1789 
1790 		wil_dbg_misc(wil, "SCAN PLAN[%d]: interval %d iterations %d\n",
1791 			     i, sp->interval, sp->iterations);
1792 	}
1793 
1794 	rc = wmi_set_ie(wil, WMI_FRAME_PROBE_REQ, request->ie_len, request->ie);
1795 	if (rc)
1796 		return rc;
1797 	return wmi_start_sched_scan(wil, request);
1798 }
1799 
1800 static int
1801 wil_cfg80211_sched_scan_stop(struct wiphy *wiphy, struct net_device *dev,
1802 			     u64 reqid)
1803 {
1804 	struct wil6210_priv *wil = wiphy_to_wil(wiphy);
1805 	int rc;
1806 
1807 	rc = wmi_stop_sched_scan(wil);
1808 	/* device would return error if it thinks PNO is already stopped.
1809 	 * ignore the return code so user space and driver gets back in-sync
1810 	 */
1811 	wil_dbg_misc(wil, "sched scan stopped (%d)\n", rc);
1812 
1813 	return 0;
1814 }
1815 
1816 static const struct cfg80211_ops wil_cfg80211_ops = {
1817 	.add_virtual_intf = wil_cfg80211_add_iface,
1818 	.del_virtual_intf = wil_cfg80211_del_iface,
1819 	.scan = wil_cfg80211_scan,
1820 	.abort_scan = wil_cfg80211_abort_scan,
1821 	.connect = wil_cfg80211_connect,
1822 	.disconnect = wil_cfg80211_disconnect,
1823 	.set_wiphy_params = wil_cfg80211_set_wiphy_params,
1824 	.change_virtual_intf = wil_cfg80211_change_iface,
1825 	.get_station = wil_cfg80211_get_station,
1826 	.dump_station = wil_cfg80211_dump_station,
1827 	.remain_on_channel = wil_remain_on_channel,
1828 	.cancel_remain_on_channel = wil_cancel_remain_on_channel,
1829 	.mgmt_tx = wil_cfg80211_mgmt_tx,
1830 	.set_monitor_channel = wil_cfg80211_set_channel,
1831 	.add_key = wil_cfg80211_add_key,
1832 	.del_key = wil_cfg80211_del_key,
1833 	.set_default_key = wil_cfg80211_set_default_key,
1834 	/* AP mode */
1835 	.change_beacon = wil_cfg80211_change_beacon,
1836 	.start_ap = wil_cfg80211_start_ap,
1837 	.stop_ap = wil_cfg80211_stop_ap,
1838 	.add_station = wil_cfg80211_add_station,
1839 	.del_station = wil_cfg80211_del_station,
1840 	.change_station = wil_cfg80211_change_station,
1841 	.probe_client = wil_cfg80211_probe_client,
1842 	.change_bss = wil_cfg80211_change_bss,
1843 	/* P2P device */
1844 	.start_p2p_device = wil_cfg80211_start_p2p_device,
1845 	.stop_p2p_device = wil_cfg80211_stop_p2p_device,
1846 	.set_power_mgmt = wil_cfg80211_set_power_mgmt,
1847 	.suspend = wil_cfg80211_suspend,
1848 	.resume = wil_cfg80211_resume,
1849 	.sched_scan_start = wil_cfg80211_sched_scan_start,
1850 	.sched_scan_stop = wil_cfg80211_sched_scan_stop,
1851 };
1852 
1853 static void wil_wiphy_init(struct wiphy *wiphy)
1854 {
1855 	wiphy->max_scan_ssids = 1;
1856 	wiphy->max_scan_ie_len = WMI_MAX_IE_LEN;
1857 	wiphy->max_remain_on_channel_duration = WIL_MAX_ROC_DURATION_MS;
1858 	wiphy->max_num_pmkids = 0 /* TODO: */;
1859 	wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
1860 				 BIT(NL80211_IFTYPE_AP) |
1861 				 BIT(NL80211_IFTYPE_P2P_CLIENT) |
1862 				 BIT(NL80211_IFTYPE_P2P_GO) |
1863 				 BIT(NL80211_IFTYPE_P2P_DEVICE) |
1864 				 BIT(NL80211_IFTYPE_MONITOR);
1865 	wiphy->flags |= WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL |
1866 			WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD |
1867 			WIPHY_FLAG_PS_ON_BY_DEFAULT;
1868 	if (!disable_ap_sme)
1869 		wiphy->flags |= WIPHY_FLAG_HAVE_AP_SME;
1870 	dev_dbg(wiphy_dev(wiphy), "%s : flags = 0x%08x\n",
1871 		__func__, wiphy->flags);
1872 	wiphy->probe_resp_offload =
1873 		NL80211_PROBE_RESP_OFFLOAD_SUPPORT_WPS |
1874 		NL80211_PROBE_RESP_OFFLOAD_SUPPORT_WPS2 |
1875 		NL80211_PROBE_RESP_OFFLOAD_SUPPORT_P2P;
1876 
1877 	wiphy->bands[NL80211_BAND_60GHZ] = &wil_band_60ghz;
1878 
1879 	/* may change after reading FW capabilities */
1880 	wiphy->signal_type = CFG80211_SIGNAL_TYPE_UNSPEC;
1881 
1882 	wiphy->cipher_suites = wil_cipher_suites;
1883 	wiphy->n_cipher_suites = ARRAY_SIZE(wil_cipher_suites);
1884 	wiphy->mgmt_stypes = wil_mgmt_stypes;
1885 	wiphy->features |= NL80211_FEATURE_SK_TX_STATUS;
1886 
1887 	wiphy->n_vendor_commands = ARRAY_SIZE(wil_nl80211_vendor_commands);
1888 	wiphy->vendor_commands = wil_nl80211_vendor_commands;
1889 
1890 #ifdef CONFIG_PM
1891 	wiphy->wowlan = &wil_wowlan_support;
1892 #endif
1893 }
1894 
1895 struct wireless_dev *wil_cfg80211_init(struct device *dev)
1896 {
1897 	int rc = 0;
1898 	struct wireless_dev *wdev;
1899 
1900 	dev_dbg(dev, "%s()\n", __func__);
1901 
1902 	wdev = kzalloc(sizeof(*wdev), GFP_KERNEL);
1903 	if (!wdev)
1904 		return ERR_PTR(-ENOMEM);
1905 
1906 	wdev->wiphy = wiphy_new(&wil_cfg80211_ops,
1907 				sizeof(struct wil6210_priv));
1908 	if (!wdev->wiphy) {
1909 		rc = -ENOMEM;
1910 		goto out;
1911 	}
1912 
1913 	set_wiphy_dev(wdev->wiphy, dev);
1914 	wil_wiphy_init(wdev->wiphy);
1915 
1916 	return wdev;
1917 
1918 out:
1919 	kfree(wdev);
1920 
1921 	return ERR_PTR(rc);
1922 }
1923 
1924 void wil_wdev_free(struct wil6210_priv *wil)
1925 {
1926 	struct wireless_dev *wdev = wil_to_wdev(wil);
1927 
1928 	dev_dbg(wil_to_dev(wil), "%s()\n", __func__);
1929 
1930 	if (!wdev)
1931 		return;
1932 
1933 	wiphy_free(wdev->wiphy);
1934 	kfree(wdev);
1935 }
1936 
1937 void wil_p2p_wdev_free(struct wil6210_priv *wil)
1938 {
1939 	struct wireless_dev *p2p_wdev;
1940 
1941 	mutex_lock(&wil->p2p_wdev_mutex);
1942 	p2p_wdev = wil->p2p_wdev;
1943 	wil->p2p_wdev = NULL;
1944 	wil->radio_wdev = wil_to_wdev(wil);
1945 	mutex_unlock(&wil->p2p_wdev_mutex);
1946 	if (p2p_wdev) {
1947 		cfg80211_unregister_wdev(p2p_wdev);
1948 		kfree(p2p_wdev);
1949 	}
1950 }
1951 
1952 static int wil_rf_sector_status_to_rc(u8 status)
1953 {
1954 	switch (status) {
1955 	case WMI_RF_SECTOR_STATUS_SUCCESS:
1956 		return 0;
1957 	case WMI_RF_SECTOR_STATUS_BAD_PARAMETERS_ERROR:
1958 		return -EINVAL;
1959 	case WMI_RF_SECTOR_STATUS_BUSY_ERROR:
1960 		return -EAGAIN;
1961 	case WMI_RF_SECTOR_STATUS_NOT_SUPPORTED_ERROR:
1962 		return -EOPNOTSUPP;
1963 	default:
1964 		return -EINVAL;
1965 	}
1966 }
1967 
1968 static int wil_rf_sector_get_cfg(struct wiphy *wiphy,
1969 				 struct wireless_dev *wdev,
1970 				 const void *data, int data_len)
1971 {
1972 	struct wil6210_priv *wil = wdev_to_wil(wdev);
1973 	int rc;
1974 	struct nlattr *tb[QCA_ATTR_DMG_RF_SECTOR_MAX + 1];
1975 	u16 sector_index;
1976 	u8 sector_type;
1977 	u32 rf_modules_vec;
1978 	struct wmi_get_rf_sector_params_cmd cmd;
1979 	struct {
1980 		struct wmi_cmd_hdr wmi;
1981 		struct wmi_get_rf_sector_params_done_event evt;
1982 	} __packed reply;
1983 	struct sk_buff *msg;
1984 	struct nlattr *nl_cfgs, *nl_cfg;
1985 	u32 i;
1986 	struct wmi_rf_sector_info *si;
1987 
1988 	if (!test_bit(WMI_FW_CAPABILITY_RF_SECTORS, wil->fw_capabilities))
1989 		return -EOPNOTSUPP;
1990 
1991 	rc = nla_parse(tb, QCA_ATTR_DMG_RF_SECTOR_MAX, data, data_len,
1992 		       wil_rf_sector_policy, NULL);
1993 	if (rc) {
1994 		wil_err(wil, "Invalid rf sector ATTR\n");
1995 		return rc;
1996 	}
1997 
1998 	if (!tb[QCA_ATTR_DMG_RF_SECTOR_INDEX] ||
1999 	    !tb[QCA_ATTR_DMG_RF_SECTOR_TYPE] ||
2000 	    !tb[QCA_ATTR_DMG_RF_MODULE_MASK]) {
2001 		wil_err(wil, "Invalid rf sector spec\n");
2002 		return -EINVAL;
2003 	}
2004 
2005 	sector_index = nla_get_u16(
2006 		tb[QCA_ATTR_DMG_RF_SECTOR_INDEX]);
2007 	if (sector_index >= WIL_MAX_RF_SECTORS) {
2008 		wil_err(wil, "Invalid sector index %d\n", sector_index);
2009 		return -EINVAL;
2010 	}
2011 
2012 	sector_type = nla_get_u8(tb[QCA_ATTR_DMG_RF_SECTOR_TYPE]);
2013 	if (sector_type >= QCA_ATTR_DMG_RF_SECTOR_TYPE_MAX) {
2014 		wil_err(wil, "Invalid sector type %d\n", sector_type);
2015 		return -EINVAL;
2016 	}
2017 
2018 	rf_modules_vec = nla_get_u32(
2019 		tb[QCA_ATTR_DMG_RF_MODULE_MASK]);
2020 	if (rf_modules_vec >= BIT(WMI_MAX_RF_MODULES_NUM)) {
2021 		wil_err(wil, "Invalid rf module mask 0x%x\n", rf_modules_vec);
2022 		return -EINVAL;
2023 	}
2024 
2025 	cmd.sector_idx = cpu_to_le16(sector_index);
2026 	cmd.sector_type = sector_type;
2027 	cmd.rf_modules_vec = rf_modules_vec & 0xFF;
2028 	memset(&reply, 0, sizeof(reply));
2029 	rc = wmi_call(wil, WMI_GET_RF_SECTOR_PARAMS_CMDID, &cmd, sizeof(cmd),
2030 		      WMI_GET_RF_SECTOR_PARAMS_DONE_EVENTID,
2031 		      &reply, sizeof(reply),
2032 		      500);
2033 	if (rc)
2034 		return rc;
2035 	if (reply.evt.status) {
2036 		wil_err(wil, "get rf sector cfg failed with status %d\n",
2037 			reply.evt.status);
2038 		return wil_rf_sector_status_to_rc(reply.evt.status);
2039 	}
2040 
2041 	msg = cfg80211_vendor_cmd_alloc_reply_skb(
2042 		wiphy, 64 * WMI_MAX_RF_MODULES_NUM);
2043 	if (!msg)
2044 		return -ENOMEM;
2045 
2046 	if (nla_put_u64_64bit(msg, QCA_ATTR_TSF,
2047 			      le64_to_cpu(reply.evt.tsf),
2048 			      QCA_ATTR_PAD))
2049 		goto nla_put_failure;
2050 
2051 	nl_cfgs = nla_nest_start(msg, QCA_ATTR_DMG_RF_SECTOR_CFG);
2052 	if (!nl_cfgs)
2053 		goto nla_put_failure;
2054 	for (i = 0; i < WMI_MAX_RF_MODULES_NUM; i++) {
2055 		if (!(rf_modules_vec & BIT(i)))
2056 			continue;
2057 		nl_cfg = nla_nest_start(msg, i);
2058 		if (!nl_cfg)
2059 			goto nla_put_failure;
2060 		si = &reply.evt.sectors_info[i];
2061 		if (nla_put_u8(msg, QCA_ATTR_DMG_RF_SECTOR_CFG_MODULE_INDEX,
2062 			       i) ||
2063 		    nla_put_u32(msg, QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE0,
2064 				le32_to_cpu(si->etype0)) ||
2065 		    nla_put_u32(msg, QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE1,
2066 				le32_to_cpu(si->etype1)) ||
2067 		    nla_put_u32(msg, QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE2,
2068 				le32_to_cpu(si->etype2)) ||
2069 		    nla_put_u32(msg, QCA_ATTR_DMG_RF_SECTOR_CFG_PSH_HI,
2070 				le32_to_cpu(si->psh_hi)) ||
2071 		    nla_put_u32(msg, QCA_ATTR_DMG_RF_SECTOR_CFG_PSH_LO,
2072 				le32_to_cpu(si->psh_lo)) ||
2073 		    nla_put_u32(msg, QCA_ATTR_DMG_RF_SECTOR_CFG_DTYPE_X16,
2074 				le32_to_cpu(si->dtype_swch_off)))
2075 			goto nla_put_failure;
2076 		nla_nest_end(msg, nl_cfg);
2077 	}
2078 
2079 	nla_nest_end(msg, nl_cfgs);
2080 	rc = cfg80211_vendor_cmd_reply(msg);
2081 	return rc;
2082 nla_put_failure:
2083 	kfree_skb(msg);
2084 	return -ENOBUFS;
2085 }
2086 
2087 static int wil_rf_sector_set_cfg(struct wiphy *wiphy,
2088 				 struct wireless_dev *wdev,
2089 				 const void *data, int data_len)
2090 {
2091 	struct wil6210_priv *wil = wdev_to_wil(wdev);
2092 	int rc, tmp;
2093 	struct nlattr *tb[QCA_ATTR_DMG_RF_SECTOR_MAX + 1];
2094 	struct nlattr *tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_MAX + 1];
2095 	u16 sector_index, rf_module_index;
2096 	u8 sector_type;
2097 	u32 rf_modules_vec = 0;
2098 	struct wmi_set_rf_sector_params_cmd cmd;
2099 	struct {
2100 		struct wmi_cmd_hdr wmi;
2101 		struct wmi_set_rf_sector_params_done_event evt;
2102 	} __packed reply;
2103 	struct nlattr *nl_cfg;
2104 	struct wmi_rf_sector_info *si;
2105 
2106 	if (!test_bit(WMI_FW_CAPABILITY_RF_SECTORS, wil->fw_capabilities))
2107 		return -EOPNOTSUPP;
2108 
2109 	rc = nla_parse(tb, QCA_ATTR_DMG_RF_SECTOR_MAX, data, data_len,
2110 		       wil_rf_sector_policy, NULL);
2111 	if (rc) {
2112 		wil_err(wil, "Invalid rf sector ATTR\n");
2113 		return rc;
2114 	}
2115 
2116 	if (!tb[QCA_ATTR_DMG_RF_SECTOR_INDEX] ||
2117 	    !tb[QCA_ATTR_DMG_RF_SECTOR_TYPE] ||
2118 	    !tb[QCA_ATTR_DMG_RF_SECTOR_CFG]) {
2119 		wil_err(wil, "Invalid rf sector spec\n");
2120 		return -EINVAL;
2121 	}
2122 
2123 	sector_index = nla_get_u16(
2124 		tb[QCA_ATTR_DMG_RF_SECTOR_INDEX]);
2125 	if (sector_index >= WIL_MAX_RF_SECTORS) {
2126 		wil_err(wil, "Invalid sector index %d\n", sector_index);
2127 		return -EINVAL;
2128 	}
2129 
2130 	sector_type = nla_get_u8(tb[QCA_ATTR_DMG_RF_SECTOR_TYPE]);
2131 	if (sector_type >= QCA_ATTR_DMG_RF_SECTOR_TYPE_MAX) {
2132 		wil_err(wil, "Invalid sector type %d\n", sector_type);
2133 		return -EINVAL;
2134 	}
2135 
2136 	memset(&cmd, 0, sizeof(cmd));
2137 
2138 	cmd.sector_idx = cpu_to_le16(sector_index);
2139 	cmd.sector_type = sector_type;
2140 	nla_for_each_nested(nl_cfg, tb[QCA_ATTR_DMG_RF_SECTOR_CFG],
2141 			    tmp) {
2142 		rc = nla_parse_nested(tb2, QCA_ATTR_DMG_RF_SECTOR_CFG_MAX,
2143 				      nl_cfg, wil_rf_sector_cfg_policy,
2144 				      NULL);
2145 		if (rc) {
2146 			wil_err(wil, "invalid sector cfg\n");
2147 			return -EINVAL;
2148 		}
2149 
2150 		if (!tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_MODULE_INDEX] ||
2151 		    !tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE0] ||
2152 		    !tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE1] ||
2153 		    !tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE2] ||
2154 		    !tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_PSH_HI] ||
2155 		    !tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_PSH_LO] ||
2156 		    !tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_DTYPE_X16]) {
2157 			wil_err(wil, "missing cfg params\n");
2158 			return -EINVAL;
2159 		}
2160 
2161 		rf_module_index = nla_get_u8(
2162 			tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_MODULE_INDEX]);
2163 		if (rf_module_index >= WMI_MAX_RF_MODULES_NUM) {
2164 			wil_err(wil, "invalid RF module index %d\n",
2165 				rf_module_index);
2166 			return -EINVAL;
2167 		}
2168 		rf_modules_vec |= BIT(rf_module_index);
2169 		si = &cmd.sectors_info[rf_module_index];
2170 		si->etype0 = cpu_to_le32(nla_get_u32(
2171 			tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE0]));
2172 		si->etype1 = cpu_to_le32(nla_get_u32(
2173 			tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE1]));
2174 		si->etype2 = cpu_to_le32(nla_get_u32(
2175 			tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_ETYPE2]));
2176 		si->psh_hi = cpu_to_le32(nla_get_u32(
2177 			tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_PSH_HI]));
2178 		si->psh_lo = cpu_to_le32(nla_get_u32(
2179 			tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_PSH_LO]));
2180 		si->dtype_swch_off = cpu_to_le32(nla_get_u32(
2181 			tb2[QCA_ATTR_DMG_RF_SECTOR_CFG_DTYPE_X16]));
2182 	}
2183 
2184 	cmd.rf_modules_vec = rf_modules_vec & 0xFF;
2185 	memset(&reply, 0, sizeof(reply));
2186 	rc = wmi_call(wil, WMI_SET_RF_SECTOR_PARAMS_CMDID, &cmd, sizeof(cmd),
2187 		      WMI_SET_RF_SECTOR_PARAMS_DONE_EVENTID,
2188 		      &reply, sizeof(reply),
2189 		      500);
2190 	if (rc)
2191 		return rc;
2192 	return wil_rf_sector_status_to_rc(reply.evt.status);
2193 }
2194 
2195 static int wil_rf_sector_get_selected(struct wiphy *wiphy,
2196 				      struct wireless_dev *wdev,
2197 				      const void *data, int data_len)
2198 {
2199 	struct wil6210_priv *wil = wdev_to_wil(wdev);
2200 	int rc;
2201 	struct nlattr *tb[QCA_ATTR_DMG_RF_SECTOR_MAX + 1];
2202 	u8 sector_type, mac_addr[ETH_ALEN];
2203 	int cid = 0;
2204 	struct wmi_get_selected_rf_sector_index_cmd cmd;
2205 	struct {
2206 		struct wmi_cmd_hdr wmi;
2207 		struct wmi_get_selected_rf_sector_index_done_event evt;
2208 	} __packed reply;
2209 	struct sk_buff *msg;
2210 
2211 	if (!test_bit(WMI_FW_CAPABILITY_RF_SECTORS, wil->fw_capabilities))
2212 		return -EOPNOTSUPP;
2213 
2214 	rc = nla_parse(tb, QCA_ATTR_DMG_RF_SECTOR_MAX, data, data_len,
2215 		       wil_rf_sector_policy, NULL);
2216 	if (rc) {
2217 		wil_err(wil, "Invalid rf sector ATTR\n");
2218 		return rc;
2219 	}
2220 
2221 	if (!tb[QCA_ATTR_DMG_RF_SECTOR_TYPE]) {
2222 		wil_err(wil, "Invalid rf sector spec\n");
2223 		return -EINVAL;
2224 	}
2225 	sector_type = nla_get_u8(tb[QCA_ATTR_DMG_RF_SECTOR_TYPE]);
2226 	if (sector_type >= QCA_ATTR_DMG_RF_SECTOR_TYPE_MAX) {
2227 		wil_err(wil, "Invalid sector type %d\n", sector_type);
2228 		return -EINVAL;
2229 	}
2230 
2231 	if (tb[QCA_ATTR_MAC_ADDR]) {
2232 		ether_addr_copy(mac_addr, nla_data(tb[QCA_ATTR_MAC_ADDR]));
2233 		cid = wil_find_cid(wil, mac_addr);
2234 		if (cid < 0) {
2235 			wil_err(wil, "invalid MAC address %pM\n", mac_addr);
2236 			return -ENOENT;
2237 		}
2238 	} else {
2239 		if (test_bit(wil_status_fwconnected, wil->status)) {
2240 			wil_err(wil, "must specify MAC address when connected\n");
2241 			return -EINVAL;
2242 		}
2243 	}
2244 
2245 	memset(&cmd, 0, sizeof(cmd));
2246 	cmd.cid = (u8)cid;
2247 	cmd.sector_type = sector_type;
2248 	memset(&reply, 0, sizeof(reply));
2249 	rc = wmi_call(wil, WMI_GET_SELECTED_RF_SECTOR_INDEX_CMDID,
2250 		      &cmd, sizeof(cmd),
2251 		      WMI_GET_SELECTED_RF_SECTOR_INDEX_DONE_EVENTID,
2252 		      &reply, sizeof(reply),
2253 		      500);
2254 	if (rc)
2255 		return rc;
2256 	if (reply.evt.status) {
2257 		wil_err(wil, "get rf selected sector cfg failed with status %d\n",
2258 			reply.evt.status);
2259 		return wil_rf_sector_status_to_rc(reply.evt.status);
2260 	}
2261 
2262 	msg = cfg80211_vendor_cmd_alloc_reply_skb(
2263 		wiphy, 64 * WMI_MAX_RF_MODULES_NUM);
2264 	if (!msg)
2265 		return -ENOMEM;
2266 
2267 	if (nla_put_u64_64bit(msg, QCA_ATTR_TSF,
2268 			      le64_to_cpu(reply.evt.tsf),
2269 			      QCA_ATTR_PAD) ||
2270 	    nla_put_u16(msg, QCA_ATTR_DMG_RF_SECTOR_INDEX,
2271 			le16_to_cpu(reply.evt.sector_idx)))
2272 		goto nla_put_failure;
2273 
2274 	rc = cfg80211_vendor_cmd_reply(msg);
2275 	return rc;
2276 nla_put_failure:
2277 	kfree_skb(msg);
2278 	return -ENOBUFS;
2279 }
2280 
2281 static int wil_rf_sector_wmi_set_selected(struct wil6210_priv *wil,
2282 					  u16 sector_index,
2283 					  u8 sector_type, u8 cid)
2284 {
2285 	struct wmi_set_selected_rf_sector_index_cmd cmd;
2286 	struct {
2287 		struct wmi_cmd_hdr wmi;
2288 		struct wmi_set_selected_rf_sector_index_done_event evt;
2289 	} __packed reply;
2290 	int rc;
2291 
2292 	memset(&cmd, 0, sizeof(cmd));
2293 	cmd.sector_idx = cpu_to_le16(sector_index);
2294 	cmd.sector_type = sector_type;
2295 	cmd.cid = (u8)cid;
2296 	memset(&reply, 0, sizeof(reply));
2297 	rc = wmi_call(wil, WMI_SET_SELECTED_RF_SECTOR_INDEX_CMDID,
2298 		      &cmd, sizeof(cmd),
2299 		      WMI_SET_SELECTED_RF_SECTOR_INDEX_DONE_EVENTID,
2300 		      &reply, sizeof(reply),
2301 		      500);
2302 	if (rc)
2303 		return rc;
2304 	return wil_rf_sector_status_to_rc(reply.evt.status);
2305 }
2306 
2307 static int wil_rf_sector_set_selected(struct wiphy *wiphy,
2308 				      struct wireless_dev *wdev,
2309 				      const void *data, int data_len)
2310 {
2311 	struct wil6210_priv *wil = wdev_to_wil(wdev);
2312 	int rc;
2313 	struct nlattr *tb[QCA_ATTR_DMG_RF_SECTOR_MAX + 1];
2314 	u16 sector_index;
2315 	u8 sector_type, mac_addr[ETH_ALEN], i;
2316 	int cid = 0;
2317 
2318 	if (!test_bit(WMI_FW_CAPABILITY_RF_SECTORS, wil->fw_capabilities))
2319 		return -EOPNOTSUPP;
2320 
2321 	rc = nla_parse(tb, QCA_ATTR_DMG_RF_SECTOR_MAX, data, data_len,
2322 		       wil_rf_sector_policy, NULL);
2323 	if (rc) {
2324 		wil_err(wil, "Invalid rf sector ATTR\n");
2325 		return rc;
2326 	}
2327 
2328 	if (!tb[QCA_ATTR_DMG_RF_SECTOR_INDEX] ||
2329 	    !tb[QCA_ATTR_DMG_RF_SECTOR_TYPE]) {
2330 		wil_err(wil, "Invalid rf sector spec\n");
2331 		return -EINVAL;
2332 	}
2333 
2334 	sector_index = nla_get_u16(
2335 		tb[QCA_ATTR_DMG_RF_SECTOR_INDEX]);
2336 	if (sector_index >= WIL_MAX_RF_SECTORS &&
2337 	    sector_index != WMI_INVALID_RF_SECTOR_INDEX) {
2338 		wil_err(wil, "Invalid sector index %d\n", sector_index);
2339 		return -EINVAL;
2340 	}
2341 
2342 	sector_type = nla_get_u8(tb[QCA_ATTR_DMG_RF_SECTOR_TYPE]);
2343 	if (sector_type >= QCA_ATTR_DMG_RF_SECTOR_TYPE_MAX) {
2344 		wil_err(wil, "Invalid sector type %d\n", sector_type);
2345 		return -EINVAL;
2346 	}
2347 
2348 	if (tb[QCA_ATTR_MAC_ADDR]) {
2349 		ether_addr_copy(mac_addr, nla_data(tb[QCA_ATTR_MAC_ADDR]));
2350 		if (!is_broadcast_ether_addr(mac_addr)) {
2351 			cid = wil_find_cid(wil, mac_addr);
2352 			if (cid < 0) {
2353 				wil_err(wil, "invalid MAC address %pM\n",
2354 					mac_addr);
2355 				return -ENOENT;
2356 			}
2357 		} else {
2358 			if (sector_index != WMI_INVALID_RF_SECTOR_INDEX) {
2359 				wil_err(wil, "broadcast MAC valid only with unlocking\n");
2360 				return -EINVAL;
2361 			}
2362 			cid = -1;
2363 		}
2364 	} else {
2365 		if (test_bit(wil_status_fwconnected, wil->status)) {
2366 			wil_err(wil, "must specify MAC address when connected\n");
2367 			return -EINVAL;
2368 		}
2369 		/* otherwise, using cid=0 for unassociated station */
2370 	}
2371 
2372 	if (cid >= 0) {
2373 		rc = wil_rf_sector_wmi_set_selected(wil, sector_index,
2374 						    sector_type, cid);
2375 	} else {
2376 		/* unlock all cids */
2377 		rc = wil_rf_sector_wmi_set_selected(
2378 			wil, WMI_INVALID_RF_SECTOR_INDEX, sector_type,
2379 			WIL_CID_ALL);
2380 		if (rc == -EINVAL) {
2381 			for (i = 0; i < WIL6210_MAX_CID; i++) {
2382 				rc = wil_rf_sector_wmi_set_selected(
2383 					wil, WMI_INVALID_RF_SECTOR_INDEX,
2384 					sector_type, i);
2385 				/* the FW will silently ignore and return
2386 				 * success for unused cid, so abort the loop
2387 				 * on any other error
2388 				 */
2389 				if (rc) {
2390 					wil_err(wil, "unlock cid %d failed with status %d\n",
2391 						i, rc);
2392 					break;
2393 				}
2394 			}
2395 		}
2396 	}
2397 
2398 	return rc;
2399 }
2400