xref: /openbmc/linux/net/mac80211/cfg.c (revision 7b6d864b)
1 /*
2  * mac80211 configuration hooks for cfg80211
3  *
4  * Copyright 2006-2010	Johannes Berg <johannes@sipsolutions.net>
5  *
6  * This file is GPLv2 as found in COPYING.
7  */
8 
9 #include <linux/ieee80211.h>
10 #include <linux/nl80211.h>
11 #include <linux/rtnetlink.h>
12 #include <linux/slab.h>
13 #include <net/net_namespace.h>
14 #include <linux/rcupdate.h>
15 #include <linux/if_ether.h>
16 #include <net/cfg80211.h>
17 #include "ieee80211_i.h"
18 #include "driver-ops.h"
19 #include "cfg.h"
20 #include "rate.h"
21 #include "mesh.h"
22 
23 static struct wireless_dev *ieee80211_add_iface(struct wiphy *wiphy,
24 						const char *name,
25 						enum nl80211_iftype type,
26 						u32 *flags,
27 						struct vif_params *params)
28 {
29 	struct ieee80211_local *local = wiphy_priv(wiphy);
30 	struct wireless_dev *wdev;
31 	struct ieee80211_sub_if_data *sdata;
32 	int err;
33 
34 	err = ieee80211_if_add(local, name, &wdev, type, params);
35 	if (err)
36 		return ERR_PTR(err);
37 
38 	if (type == NL80211_IFTYPE_MONITOR && flags) {
39 		sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
40 		sdata->u.mntr_flags = *flags;
41 	}
42 
43 	return wdev;
44 }
45 
46 static int ieee80211_del_iface(struct wiphy *wiphy, struct wireless_dev *wdev)
47 {
48 	ieee80211_if_remove(IEEE80211_WDEV_TO_SUB_IF(wdev));
49 
50 	return 0;
51 }
52 
53 static int ieee80211_change_iface(struct wiphy *wiphy,
54 				  struct net_device *dev,
55 				  enum nl80211_iftype type, u32 *flags,
56 				  struct vif_params *params)
57 {
58 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
59 	int ret;
60 
61 	ret = ieee80211_if_change_type(sdata, type);
62 	if (ret)
63 		return ret;
64 
65 	if (type == NL80211_IFTYPE_AP_VLAN &&
66 	    params && params->use_4addr == 0)
67 		RCU_INIT_POINTER(sdata->u.vlan.sta, NULL);
68 	else if (type == NL80211_IFTYPE_STATION &&
69 		 params && params->use_4addr >= 0)
70 		sdata->u.mgd.use_4addr = params->use_4addr;
71 
72 	if (sdata->vif.type == NL80211_IFTYPE_MONITOR && flags) {
73 		struct ieee80211_local *local = sdata->local;
74 
75 		if (ieee80211_sdata_running(sdata)) {
76 			/*
77 			 * Prohibit MONITOR_FLAG_COOK_FRAMES to be
78 			 * changed while the interface is up.
79 			 * Else we would need to add a lot of cruft
80 			 * to update everything:
81 			 *	cooked_mntrs, monitor and all fif_* counters
82 			 *	reconfigure hardware
83 			 */
84 			if ((*flags & MONITOR_FLAG_COOK_FRAMES) !=
85 			    (sdata->u.mntr_flags & MONITOR_FLAG_COOK_FRAMES))
86 				return -EBUSY;
87 
88 			ieee80211_adjust_monitor_flags(sdata, -1);
89 			sdata->u.mntr_flags = *flags;
90 			ieee80211_adjust_monitor_flags(sdata, 1);
91 
92 			ieee80211_configure_filter(local);
93 		} else {
94 			/*
95 			 * Because the interface is down, ieee80211_do_stop
96 			 * and ieee80211_do_open take care of "everything"
97 			 * mentioned in the comment above.
98 			 */
99 			sdata->u.mntr_flags = *flags;
100 		}
101 	}
102 
103 	return 0;
104 }
105 
106 static int ieee80211_start_p2p_device(struct wiphy *wiphy,
107 				      struct wireless_dev *wdev)
108 {
109 	return ieee80211_do_open(wdev, true);
110 }
111 
112 static void ieee80211_stop_p2p_device(struct wiphy *wiphy,
113 				      struct wireless_dev *wdev)
114 {
115 	ieee80211_sdata_stop(IEEE80211_WDEV_TO_SUB_IF(wdev));
116 }
117 
118 static int ieee80211_set_noack_map(struct wiphy *wiphy,
119 				  struct net_device *dev,
120 				  u16 noack_map)
121 {
122 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
123 
124 	sdata->noack_map = noack_map;
125 	return 0;
126 }
127 
128 static int ieee80211_add_key(struct wiphy *wiphy, struct net_device *dev,
129 			     u8 key_idx, bool pairwise, const u8 *mac_addr,
130 			     struct key_params *params)
131 {
132 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
133 	struct sta_info *sta = NULL;
134 	struct ieee80211_key *key;
135 	int err;
136 
137 	if (!ieee80211_sdata_running(sdata))
138 		return -ENETDOWN;
139 
140 	/* reject WEP and TKIP keys if WEP failed to initialize */
141 	switch (params->cipher) {
142 	case WLAN_CIPHER_SUITE_WEP40:
143 	case WLAN_CIPHER_SUITE_TKIP:
144 	case WLAN_CIPHER_SUITE_WEP104:
145 		if (IS_ERR(sdata->local->wep_tx_tfm))
146 			return -EINVAL;
147 		break;
148 	default:
149 		break;
150 	}
151 
152 	key = ieee80211_key_alloc(params->cipher, key_idx, params->key_len,
153 				  params->key, params->seq_len, params->seq);
154 	if (IS_ERR(key))
155 		return PTR_ERR(key);
156 
157 	if (pairwise)
158 		key->conf.flags |= IEEE80211_KEY_FLAG_PAIRWISE;
159 
160 	mutex_lock(&sdata->local->sta_mtx);
161 
162 	if (mac_addr) {
163 		if (ieee80211_vif_is_mesh(&sdata->vif))
164 			sta = sta_info_get(sdata, mac_addr);
165 		else
166 			sta = sta_info_get_bss(sdata, mac_addr);
167 		/*
168 		 * The ASSOC test makes sure the driver is ready to
169 		 * receive the key. When wpa_supplicant has roamed
170 		 * using FT, it attempts to set the key before
171 		 * association has completed, this rejects that attempt
172 		 * so it will set the key again after assocation.
173 		 *
174 		 * TODO: accept the key if we have a station entry and
175 		 *       add it to the device after the station.
176 		 */
177 		if (!sta || !test_sta_flag(sta, WLAN_STA_ASSOC)) {
178 			ieee80211_key_free_unused(key);
179 			err = -ENOENT;
180 			goto out_unlock;
181 		}
182 	}
183 
184 	switch (sdata->vif.type) {
185 	case NL80211_IFTYPE_STATION:
186 		if (sdata->u.mgd.mfp != IEEE80211_MFP_DISABLED)
187 			key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
188 		break;
189 	case NL80211_IFTYPE_AP:
190 	case NL80211_IFTYPE_AP_VLAN:
191 		/* Keys without a station are used for TX only */
192 		if (key->sta && test_sta_flag(key->sta, WLAN_STA_MFP))
193 			key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
194 		break;
195 	case NL80211_IFTYPE_ADHOC:
196 		/* no MFP (yet) */
197 		break;
198 	case NL80211_IFTYPE_MESH_POINT:
199 #ifdef CONFIG_MAC80211_MESH
200 		if (sdata->u.mesh.security != IEEE80211_MESH_SEC_NONE)
201 			key->conf.flags |= IEEE80211_KEY_FLAG_RX_MGMT;
202 		break;
203 #endif
204 	case NL80211_IFTYPE_WDS:
205 	case NL80211_IFTYPE_MONITOR:
206 	case NL80211_IFTYPE_P2P_DEVICE:
207 	case NL80211_IFTYPE_UNSPECIFIED:
208 	case NUM_NL80211_IFTYPES:
209 	case NL80211_IFTYPE_P2P_CLIENT:
210 	case NL80211_IFTYPE_P2P_GO:
211 		/* shouldn't happen */
212 		WARN_ON_ONCE(1);
213 		break;
214 	}
215 
216 	err = ieee80211_key_link(key, sdata, sta);
217 
218  out_unlock:
219 	mutex_unlock(&sdata->local->sta_mtx);
220 
221 	return err;
222 }
223 
224 static int ieee80211_del_key(struct wiphy *wiphy, struct net_device *dev,
225 			     u8 key_idx, bool pairwise, const u8 *mac_addr)
226 {
227 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
228 	struct ieee80211_local *local = sdata->local;
229 	struct sta_info *sta;
230 	struct ieee80211_key *key = NULL;
231 	int ret;
232 
233 	mutex_lock(&local->sta_mtx);
234 	mutex_lock(&local->key_mtx);
235 
236 	if (mac_addr) {
237 		ret = -ENOENT;
238 
239 		sta = sta_info_get_bss(sdata, mac_addr);
240 		if (!sta)
241 			goto out_unlock;
242 
243 		if (pairwise)
244 			key = key_mtx_dereference(local, sta->ptk);
245 		else
246 			key = key_mtx_dereference(local, sta->gtk[key_idx]);
247 	} else
248 		key = key_mtx_dereference(local, sdata->keys[key_idx]);
249 
250 	if (!key) {
251 		ret = -ENOENT;
252 		goto out_unlock;
253 	}
254 
255 	ieee80211_key_free(key, true);
256 
257 	ret = 0;
258  out_unlock:
259 	mutex_unlock(&local->key_mtx);
260 	mutex_unlock(&local->sta_mtx);
261 
262 	return ret;
263 }
264 
265 static int ieee80211_get_key(struct wiphy *wiphy, struct net_device *dev,
266 			     u8 key_idx, bool pairwise, const u8 *mac_addr,
267 			     void *cookie,
268 			     void (*callback)(void *cookie,
269 					      struct key_params *params))
270 {
271 	struct ieee80211_sub_if_data *sdata;
272 	struct sta_info *sta = NULL;
273 	u8 seq[6] = {0};
274 	struct key_params params;
275 	struct ieee80211_key *key = NULL;
276 	u64 pn64;
277 	u32 iv32;
278 	u16 iv16;
279 	int err = -ENOENT;
280 
281 	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
282 
283 	rcu_read_lock();
284 
285 	if (mac_addr) {
286 		sta = sta_info_get_bss(sdata, mac_addr);
287 		if (!sta)
288 			goto out;
289 
290 		if (pairwise)
291 			key = rcu_dereference(sta->ptk);
292 		else if (key_idx < NUM_DEFAULT_KEYS)
293 			key = rcu_dereference(sta->gtk[key_idx]);
294 	} else
295 		key = rcu_dereference(sdata->keys[key_idx]);
296 
297 	if (!key)
298 		goto out;
299 
300 	memset(&params, 0, sizeof(params));
301 
302 	params.cipher = key->conf.cipher;
303 
304 	switch (key->conf.cipher) {
305 	case WLAN_CIPHER_SUITE_TKIP:
306 		iv32 = key->u.tkip.tx.iv32;
307 		iv16 = key->u.tkip.tx.iv16;
308 
309 		if (key->flags & KEY_FLAG_UPLOADED_TO_HARDWARE)
310 			drv_get_tkip_seq(sdata->local,
311 					 key->conf.hw_key_idx,
312 					 &iv32, &iv16);
313 
314 		seq[0] = iv16 & 0xff;
315 		seq[1] = (iv16 >> 8) & 0xff;
316 		seq[2] = iv32 & 0xff;
317 		seq[3] = (iv32 >> 8) & 0xff;
318 		seq[4] = (iv32 >> 16) & 0xff;
319 		seq[5] = (iv32 >> 24) & 0xff;
320 		params.seq = seq;
321 		params.seq_len = 6;
322 		break;
323 	case WLAN_CIPHER_SUITE_CCMP:
324 		pn64 = atomic64_read(&key->u.ccmp.tx_pn);
325 		seq[0] = pn64;
326 		seq[1] = pn64 >> 8;
327 		seq[2] = pn64 >> 16;
328 		seq[3] = pn64 >> 24;
329 		seq[4] = pn64 >> 32;
330 		seq[5] = pn64 >> 40;
331 		params.seq = seq;
332 		params.seq_len = 6;
333 		break;
334 	case WLAN_CIPHER_SUITE_AES_CMAC:
335 		pn64 = atomic64_read(&key->u.aes_cmac.tx_pn);
336 		seq[0] = pn64;
337 		seq[1] = pn64 >> 8;
338 		seq[2] = pn64 >> 16;
339 		seq[3] = pn64 >> 24;
340 		seq[4] = pn64 >> 32;
341 		seq[5] = pn64 >> 40;
342 		params.seq = seq;
343 		params.seq_len = 6;
344 		break;
345 	}
346 
347 	params.key = key->conf.key;
348 	params.key_len = key->conf.keylen;
349 
350 	callback(cookie, &params);
351 	err = 0;
352 
353  out:
354 	rcu_read_unlock();
355 	return err;
356 }
357 
358 static int ieee80211_config_default_key(struct wiphy *wiphy,
359 					struct net_device *dev,
360 					u8 key_idx, bool uni,
361 					bool multi)
362 {
363 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
364 
365 	ieee80211_set_default_key(sdata, key_idx, uni, multi);
366 
367 	return 0;
368 }
369 
370 static int ieee80211_config_default_mgmt_key(struct wiphy *wiphy,
371 					     struct net_device *dev,
372 					     u8 key_idx)
373 {
374 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
375 
376 	ieee80211_set_default_mgmt_key(sdata, key_idx);
377 
378 	return 0;
379 }
380 
381 void sta_set_rate_info_tx(struct sta_info *sta,
382 			  const struct ieee80211_tx_rate *rate,
383 			  struct rate_info *rinfo)
384 {
385 	rinfo->flags = 0;
386 	if (rate->flags & IEEE80211_TX_RC_MCS) {
387 		rinfo->flags |= RATE_INFO_FLAGS_MCS;
388 		rinfo->mcs = rate->idx;
389 	} else if (rate->flags & IEEE80211_TX_RC_VHT_MCS) {
390 		rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS;
391 		rinfo->mcs = ieee80211_rate_get_vht_mcs(rate);
392 		rinfo->nss = ieee80211_rate_get_vht_nss(rate);
393 	} else {
394 		struct ieee80211_supported_band *sband;
395 		sband = sta->local->hw.wiphy->bands[
396 				ieee80211_get_sdata_band(sta->sdata)];
397 		rinfo->legacy = sband->bitrates[rate->idx].bitrate;
398 	}
399 	if (rate->flags & IEEE80211_TX_RC_40_MHZ_WIDTH)
400 		rinfo->flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
401 	if (rate->flags & IEEE80211_TX_RC_80_MHZ_WIDTH)
402 		rinfo->flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH;
403 	if (rate->flags & IEEE80211_TX_RC_160_MHZ_WIDTH)
404 		rinfo->flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH;
405 	if (rate->flags & IEEE80211_TX_RC_SHORT_GI)
406 		rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI;
407 }
408 
409 void sta_set_rate_info_rx(struct sta_info *sta, struct rate_info *rinfo)
410 {
411 	rinfo->flags = 0;
412 
413 	if (sta->last_rx_rate_flag & RX_FLAG_HT) {
414 		rinfo->flags |= RATE_INFO_FLAGS_MCS;
415 		rinfo->mcs = sta->last_rx_rate_idx;
416 	} else if (sta->last_rx_rate_flag & RX_FLAG_VHT) {
417 		rinfo->flags |= RATE_INFO_FLAGS_VHT_MCS;
418 		rinfo->nss = sta->last_rx_rate_vht_nss;
419 		rinfo->mcs = sta->last_rx_rate_idx;
420 	} else {
421 		struct ieee80211_supported_band *sband;
422 
423 		sband = sta->local->hw.wiphy->bands[
424 				ieee80211_get_sdata_band(sta->sdata)];
425 		rinfo->legacy =
426 			sband->bitrates[sta->last_rx_rate_idx].bitrate;
427 	}
428 
429 	if (sta->last_rx_rate_flag & RX_FLAG_40MHZ)
430 		rinfo->flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
431 	if (sta->last_rx_rate_flag & RX_FLAG_SHORT_GI)
432 		rinfo->flags |= RATE_INFO_FLAGS_SHORT_GI;
433 	if (sta->last_rx_rate_flag & RX_FLAG_80MHZ)
434 		rinfo->flags |= RATE_INFO_FLAGS_80_MHZ_WIDTH;
435 	if (sta->last_rx_rate_flag & RX_FLAG_80P80MHZ)
436 		rinfo->flags |= RATE_INFO_FLAGS_80P80_MHZ_WIDTH;
437 	if (sta->last_rx_rate_flag & RX_FLAG_160MHZ)
438 		rinfo->flags |= RATE_INFO_FLAGS_160_MHZ_WIDTH;
439 }
440 
441 static void sta_set_sinfo(struct sta_info *sta, struct station_info *sinfo)
442 {
443 	struct ieee80211_sub_if_data *sdata = sta->sdata;
444 	struct ieee80211_local *local = sdata->local;
445 	struct timespec uptime;
446 	u64 packets = 0;
447 	int ac;
448 
449 	sinfo->generation = sdata->local->sta_generation;
450 
451 	sinfo->filled = STATION_INFO_INACTIVE_TIME |
452 			STATION_INFO_RX_BYTES64 |
453 			STATION_INFO_TX_BYTES64 |
454 			STATION_INFO_RX_PACKETS |
455 			STATION_INFO_TX_PACKETS |
456 			STATION_INFO_TX_RETRIES |
457 			STATION_INFO_TX_FAILED |
458 			STATION_INFO_TX_BITRATE |
459 			STATION_INFO_RX_BITRATE |
460 			STATION_INFO_RX_DROP_MISC |
461 			STATION_INFO_BSS_PARAM |
462 			STATION_INFO_CONNECTED_TIME |
463 			STATION_INFO_STA_FLAGS |
464 			STATION_INFO_BEACON_LOSS_COUNT;
465 
466 	do_posix_clock_monotonic_gettime(&uptime);
467 	sinfo->connected_time = uptime.tv_sec - sta->last_connected;
468 
469 	sinfo->inactive_time = jiffies_to_msecs(jiffies - sta->last_rx);
470 	sinfo->tx_bytes = 0;
471 	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++) {
472 		sinfo->tx_bytes += sta->tx_bytes[ac];
473 		packets += sta->tx_packets[ac];
474 	}
475 	sinfo->tx_packets = packets;
476 	sinfo->rx_bytes = sta->rx_bytes;
477 	sinfo->rx_packets = sta->rx_packets;
478 	sinfo->tx_retries = sta->tx_retry_count;
479 	sinfo->tx_failed = sta->tx_retry_failed;
480 	sinfo->rx_dropped_misc = sta->rx_dropped;
481 	sinfo->beacon_loss_count = sta->beacon_loss_count;
482 
483 	if ((sta->local->hw.flags & IEEE80211_HW_SIGNAL_DBM) ||
484 	    (sta->local->hw.flags & IEEE80211_HW_SIGNAL_UNSPEC)) {
485 		sinfo->filled |= STATION_INFO_SIGNAL | STATION_INFO_SIGNAL_AVG;
486 		if (!local->ops->get_rssi ||
487 		    drv_get_rssi(local, sdata, &sta->sta, &sinfo->signal))
488 			sinfo->signal = (s8)sta->last_signal;
489 		sinfo->signal_avg = (s8) -ewma_read(&sta->avg_signal);
490 	}
491 
492 	sta_set_rate_info_tx(sta, &sta->last_tx_rate, &sinfo->txrate);
493 	sta_set_rate_info_rx(sta, &sinfo->rxrate);
494 
495 	if (ieee80211_vif_is_mesh(&sdata->vif)) {
496 #ifdef CONFIG_MAC80211_MESH
497 		sinfo->filled |= STATION_INFO_LLID |
498 				 STATION_INFO_PLID |
499 				 STATION_INFO_PLINK_STATE |
500 				 STATION_INFO_LOCAL_PM |
501 				 STATION_INFO_PEER_PM |
502 				 STATION_INFO_NONPEER_PM;
503 
504 		sinfo->llid = le16_to_cpu(sta->llid);
505 		sinfo->plid = le16_to_cpu(sta->plid);
506 		sinfo->plink_state = sta->plink_state;
507 		if (test_sta_flag(sta, WLAN_STA_TOFFSET_KNOWN)) {
508 			sinfo->filled |= STATION_INFO_T_OFFSET;
509 			sinfo->t_offset = sta->t_offset;
510 		}
511 		sinfo->local_pm = sta->local_pm;
512 		sinfo->peer_pm = sta->peer_pm;
513 		sinfo->nonpeer_pm = sta->nonpeer_pm;
514 #endif
515 	}
516 
517 	sinfo->bss_param.flags = 0;
518 	if (sdata->vif.bss_conf.use_cts_prot)
519 		sinfo->bss_param.flags |= BSS_PARAM_FLAGS_CTS_PROT;
520 	if (sdata->vif.bss_conf.use_short_preamble)
521 		sinfo->bss_param.flags |= BSS_PARAM_FLAGS_SHORT_PREAMBLE;
522 	if (sdata->vif.bss_conf.use_short_slot)
523 		sinfo->bss_param.flags |= BSS_PARAM_FLAGS_SHORT_SLOT_TIME;
524 	sinfo->bss_param.dtim_period = sdata->local->hw.conf.ps_dtim_period;
525 	sinfo->bss_param.beacon_interval = sdata->vif.bss_conf.beacon_int;
526 
527 	sinfo->sta_flags.set = 0;
528 	sinfo->sta_flags.mask = BIT(NL80211_STA_FLAG_AUTHORIZED) |
529 				BIT(NL80211_STA_FLAG_SHORT_PREAMBLE) |
530 				BIT(NL80211_STA_FLAG_WME) |
531 				BIT(NL80211_STA_FLAG_MFP) |
532 				BIT(NL80211_STA_FLAG_AUTHENTICATED) |
533 				BIT(NL80211_STA_FLAG_ASSOCIATED) |
534 				BIT(NL80211_STA_FLAG_TDLS_PEER);
535 	if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
536 		sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_AUTHORIZED);
537 	if (test_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE))
538 		sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_SHORT_PREAMBLE);
539 	if (test_sta_flag(sta, WLAN_STA_WME))
540 		sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_WME);
541 	if (test_sta_flag(sta, WLAN_STA_MFP))
542 		sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_MFP);
543 	if (test_sta_flag(sta, WLAN_STA_AUTH))
544 		sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_AUTHENTICATED);
545 	if (test_sta_flag(sta, WLAN_STA_ASSOC))
546 		sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_ASSOCIATED);
547 	if (test_sta_flag(sta, WLAN_STA_TDLS_PEER))
548 		sinfo->sta_flags.set |= BIT(NL80211_STA_FLAG_TDLS_PEER);
549 }
550 
551 static const char ieee80211_gstrings_sta_stats[][ETH_GSTRING_LEN] = {
552 	"rx_packets", "rx_bytes", "wep_weak_iv_count",
553 	"rx_duplicates", "rx_fragments", "rx_dropped",
554 	"tx_packets", "tx_bytes", "tx_fragments",
555 	"tx_filtered", "tx_retry_failed", "tx_retries",
556 	"beacon_loss", "sta_state", "txrate", "rxrate", "signal",
557 	"channel", "noise", "ch_time", "ch_time_busy",
558 	"ch_time_ext_busy", "ch_time_rx", "ch_time_tx"
559 };
560 #define STA_STATS_LEN	ARRAY_SIZE(ieee80211_gstrings_sta_stats)
561 
562 static int ieee80211_get_et_sset_count(struct wiphy *wiphy,
563 				       struct net_device *dev,
564 				       int sset)
565 {
566 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
567 	int rv = 0;
568 
569 	if (sset == ETH_SS_STATS)
570 		rv += STA_STATS_LEN;
571 
572 	rv += drv_get_et_sset_count(sdata, sset);
573 
574 	if (rv == 0)
575 		return -EOPNOTSUPP;
576 	return rv;
577 }
578 
579 static void ieee80211_get_et_stats(struct wiphy *wiphy,
580 				   struct net_device *dev,
581 				   struct ethtool_stats *stats,
582 				   u64 *data)
583 {
584 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
585 	struct ieee80211_chanctx_conf *chanctx_conf;
586 	struct ieee80211_channel *channel;
587 	struct sta_info *sta;
588 	struct ieee80211_local *local = sdata->local;
589 	struct station_info sinfo;
590 	struct survey_info survey;
591 	int i, q;
592 #define STA_STATS_SURVEY_LEN 7
593 
594 	memset(data, 0, sizeof(u64) * STA_STATS_LEN);
595 
596 #define ADD_STA_STATS(sta)				\
597 	do {						\
598 		data[i++] += sta->rx_packets;		\
599 		data[i++] += sta->rx_bytes;		\
600 		data[i++] += sta->wep_weak_iv_count;	\
601 		data[i++] += sta->num_duplicates;	\
602 		data[i++] += sta->rx_fragments;		\
603 		data[i++] += sta->rx_dropped;		\
604 							\
605 		data[i++] += sinfo.tx_packets;		\
606 		data[i++] += sinfo.tx_bytes;		\
607 		data[i++] += sta->tx_fragments;		\
608 		data[i++] += sta->tx_filtered_count;	\
609 		data[i++] += sta->tx_retry_failed;	\
610 		data[i++] += sta->tx_retry_count;	\
611 		data[i++] += sta->beacon_loss_count;	\
612 	} while (0)
613 
614 	/* For Managed stations, find the single station based on BSSID
615 	 * and use that.  For interface types, iterate through all available
616 	 * stations and add stats for any station that is assigned to this
617 	 * network device.
618 	 */
619 
620 	mutex_lock(&local->sta_mtx);
621 
622 	if (sdata->vif.type == NL80211_IFTYPE_STATION) {
623 		sta = sta_info_get_bss(sdata, sdata->u.mgd.bssid);
624 
625 		if (!(sta && !WARN_ON(sta->sdata->dev != dev)))
626 			goto do_survey;
627 
628 		sinfo.filled = 0;
629 		sta_set_sinfo(sta, &sinfo);
630 
631 		i = 0;
632 		ADD_STA_STATS(sta);
633 
634 		data[i++] = sta->sta_state;
635 
636 
637 		if (sinfo.filled & STATION_INFO_TX_BITRATE)
638 			data[i] = 100000 *
639 				cfg80211_calculate_bitrate(&sinfo.txrate);
640 		i++;
641 		if (sinfo.filled & STATION_INFO_RX_BITRATE)
642 			data[i] = 100000 *
643 				cfg80211_calculate_bitrate(&sinfo.rxrate);
644 		i++;
645 
646 		if (sinfo.filled & STATION_INFO_SIGNAL_AVG)
647 			data[i] = (u8)sinfo.signal_avg;
648 		i++;
649 	} else {
650 		list_for_each_entry(sta, &local->sta_list, list) {
651 			/* Make sure this station belongs to the proper dev */
652 			if (sta->sdata->dev != dev)
653 				continue;
654 
655 			i = 0;
656 			ADD_STA_STATS(sta);
657 		}
658 	}
659 
660 do_survey:
661 	i = STA_STATS_LEN - STA_STATS_SURVEY_LEN;
662 	/* Get survey stats for current channel */
663 	survey.filled = 0;
664 
665 	rcu_read_lock();
666 	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
667 	if (chanctx_conf)
668 		channel = chanctx_conf->def.chan;
669 	else
670 		channel = NULL;
671 	rcu_read_unlock();
672 
673 	if (channel) {
674 		q = 0;
675 		do {
676 			survey.filled = 0;
677 			if (drv_get_survey(local, q, &survey) != 0) {
678 				survey.filled = 0;
679 				break;
680 			}
681 			q++;
682 		} while (channel != survey.channel);
683 	}
684 
685 	if (survey.filled)
686 		data[i++] = survey.channel->center_freq;
687 	else
688 		data[i++] = 0;
689 	if (survey.filled & SURVEY_INFO_NOISE_DBM)
690 		data[i++] = (u8)survey.noise;
691 	else
692 		data[i++] = -1LL;
693 	if (survey.filled & SURVEY_INFO_CHANNEL_TIME)
694 		data[i++] = survey.channel_time;
695 	else
696 		data[i++] = -1LL;
697 	if (survey.filled & SURVEY_INFO_CHANNEL_TIME_BUSY)
698 		data[i++] = survey.channel_time_busy;
699 	else
700 		data[i++] = -1LL;
701 	if (survey.filled & SURVEY_INFO_CHANNEL_TIME_EXT_BUSY)
702 		data[i++] = survey.channel_time_ext_busy;
703 	else
704 		data[i++] = -1LL;
705 	if (survey.filled & SURVEY_INFO_CHANNEL_TIME_RX)
706 		data[i++] = survey.channel_time_rx;
707 	else
708 		data[i++] = -1LL;
709 	if (survey.filled & SURVEY_INFO_CHANNEL_TIME_TX)
710 		data[i++] = survey.channel_time_tx;
711 	else
712 		data[i++] = -1LL;
713 
714 	mutex_unlock(&local->sta_mtx);
715 
716 	if (WARN_ON(i != STA_STATS_LEN))
717 		return;
718 
719 	drv_get_et_stats(sdata, stats, &(data[STA_STATS_LEN]));
720 }
721 
722 static void ieee80211_get_et_strings(struct wiphy *wiphy,
723 				     struct net_device *dev,
724 				     u32 sset, u8 *data)
725 {
726 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
727 	int sz_sta_stats = 0;
728 
729 	if (sset == ETH_SS_STATS) {
730 		sz_sta_stats = sizeof(ieee80211_gstrings_sta_stats);
731 		memcpy(data, *ieee80211_gstrings_sta_stats, sz_sta_stats);
732 	}
733 	drv_get_et_strings(sdata, sset, &(data[sz_sta_stats]));
734 }
735 
736 static int ieee80211_dump_station(struct wiphy *wiphy, struct net_device *dev,
737 				 int idx, u8 *mac, struct station_info *sinfo)
738 {
739 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
740 	struct ieee80211_local *local = sdata->local;
741 	struct sta_info *sta;
742 	int ret = -ENOENT;
743 
744 	mutex_lock(&local->sta_mtx);
745 
746 	sta = sta_info_get_by_idx(sdata, idx);
747 	if (sta) {
748 		ret = 0;
749 		memcpy(mac, sta->sta.addr, ETH_ALEN);
750 		sta_set_sinfo(sta, sinfo);
751 	}
752 
753 	mutex_unlock(&local->sta_mtx);
754 
755 	return ret;
756 }
757 
758 static int ieee80211_dump_survey(struct wiphy *wiphy, struct net_device *dev,
759 				 int idx, struct survey_info *survey)
760 {
761 	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
762 
763 	return drv_get_survey(local, idx, survey);
764 }
765 
766 static int ieee80211_get_station(struct wiphy *wiphy, struct net_device *dev,
767 				 u8 *mac, struct station_info *sinfo)
768 {
769 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
770 	struct ieee80211_local *local = sdata->local;
771 	struct sta_info *sta;
772 	int ret = -ENOENT;
773 
774 	mutex_lock(&local->sta_mtx);
775 
776 	sta = sta_info_get_bss(sdata, mac);
777 	if (sta) {
778 		ret = 0;
779 		sta_set_sinfo(sta, sinfo);
780 	}
781 
782 	mutex_unlock(&local->sta_mtx);
783 
784 	return ret;
785 }
786 
787 static int ieee80211_set_monitor_channel(struct wiphy *wiphy,
788 					 struct cfg80211_chan_def *chandef)
789 {
790 	struct ieee80211_local *local = wiphy_priv(wiphy);
791 	struct ieee80211_sub_if_data *sdata;
792 	int ret = 0;
793 
794 	if (cfg80211_chandef_identical(&local->monitor_chandef, chandef))
795 		return 0;
796 
797 	mutex_lock(&local->iflist_mtx);
798 	if (local->use_chanctx) {
799 		sdata = rcu_dereference_protected(
800 				local->monitor_sdata,
801 				lockdep_is_held(&local->iflist_mtx));
802 		if (sdata) {
803 			ieee80211_vif_release_channel(sdata);
804 			ret = ieee80211_vif_use_channel(sdata, chandef,
805 					IEEE80211_CHANCTX_EXCLUSIVE);
806 		}
807 	} else if (local->open_count == local->monitors) {
808 		local->_oper_chandef = *chandef;
809 		ieee80211_hw_config(local, 0);
810 	}
811 
812 	if (ret == 0)
813 		local->monitor_chandef = *chandef;
814 	mutex_unlock(&local->iflist_mtx);
815 
816 	return ret;
817 }
818 
819 static int ieee80211_set_probe_resp(struct ieee80211_sub_if_data *sdata,
820 				    const u8 *resp, size_t resp_len)
821 {
822 	struct probe_resp *new, *old;
823 
824 	if (!resp || !resp_len)
825 		return 1;
826 
827 	old = rtnl_dereference(sdata->u.ap.probe_resp);
828 
829 	new = kzalloc(sizeof(struct probe_resp) + resp_len, GFP_KERNEL);
830 	if (!new)
831 		return -ENOMEM;
832 
833 	new->len = resp_len;
834 	memcpy(new->data, resp, resp_len);
835 
836 	rcu_assign_pointer(sdata->u.ap.probe_resp, new);
837 	if (old)
838 		kfree_rcu(old, rcu_head);
839 
840 	return 0;
841 }
842 
843 static int ieee80211_assign_beacon(struct ieee80211_sub_if_data *sdata,
844 				   struct cfg80211_beacon_data *params)
845 {
846 	struct beacon_data *new, *old;
847 	int new_head_len, new_tail_len;
848 	int size, err;
849 	u32 changed = BSS_CHANGED_BEACON;
850 
851 	old = rtnl_dereference(sdata->u.ap.beacon);
852 
853 	/* Need to have a beacon head if we don't have one yet */
854 	if (!params->head && !old)
855 		return -EINVAL;
856 
857 	/* new or old head? */
858 	if (params->head)
859 		new_head_len = params->head_len;
860 	else
861 		new_head_len = old->head_len;
862 
863 	/* new or old tail? */
864 	if (params->tail || !old)
865 		/* params->tail_len will be zero for !params->tail */
866 		new_tail_len = params->tail_len;
867 	else
868 		new_tail_len = old->tail_len;
869 
870 	size = sizeof(*new) + new_head_len + new_tail_len;
871 
872 	new = kzalloc(size, GFP_KERNEL);
873 	if (!new)
874 		return -ENOMEM;
875 
876 	/* start filling the new info now */
877 
878 	/*
879 	 * pointers go into the block we allocated,
880 	 * memory is | beacon_data | head | tail |
881 	 */
882 	new->head = ((u8 *) new) + sizeof(*new);
883 	new->tail = new->head + new_head_len;
884 	new->head_len = new_head_len;
885 	new->tail_len = new_tail_len;
886 
887 	/* copy in head */
888 	if (params->head)
889 		memcpy(new->head, params->head, new_head_len);
890 	else
891 		memcpy(new->head, old->head, new_head_len);
892 
893 	/* copy in optional tail */
894 	if (params->tail)
895 		memcpy(new->tail, params->tail, new_tail_len);
896 	else
897 		if (old)
898 			memcpy(new->tail, old->tail, new_tail_len);
899 
900 	err = ieee80211_set_probe_resp(sdata, params->probe_resp,
901 				       params->probe_resp_len);
902 	if (err < 0)
903 		return err;
904 	if (err == 0)
905 		changed |= BSS_CHANGED_AP_PROBE_RESP;
906 
907 	rcu_assign_pointer(sdata->u.ap.beacon, new);
908 
909 	if (old)
910 		kfree_rcu(old, rcu_head);
911 
912 	return changed;
913 }
914 
915 static int ieee80211_start_ap(struct wiphy *wiphy, struct net_device *dev,
916 			      struct cfg80211_ap_settings *params)
917 {
918 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
919 	struct beacon_data *old;
920 	struct ieee80211_sub_if_data *vlan;
921 	u32 changed = BSS_CHANGED_BEACON_INT |
922 		      BSS_CHANGED_BEACON_ENABLED |
923 		      BSS_CHANGED_BEACON |
924 		      BSS_CHANGED_SSID |
925 		      BSS_CHANGED_P2P_PS;
926 	int err;
927 
928 	old = rtnl_dereference(sdata->u.ap.beacon);
929 	if (old)
930 		return -EALREADY;
931 
932 	/* TODO: make hostapd tell us what it wants */
933 	sdata->smps_mode = IEEE80211_SMPS_OFF;
934 	sdata->needed_rx_chains = sdata->local->rx_chains;
935 	sdata->radar_required = params->radar_required;
936 
937 	err = ieee80211_vif_use_channel(sdata, &params->chandef,
938 					IEEE80211_CHANCTX_SHARED);
939 	if (err)
940 		return err;
941 	ieee80211_vif_copy_chanctx_to_vlans(sdata, false);
942 
943 	/*
944 	 * Apply control port protocol, this allows us to
945 	 * not encrypt dynamic WEP control frames.
946 	 */
947 	sdata->control_port_protocol = params->crypto.control_port_ethertype;
948 	sdata->control_port_no_encrypt = params->crypto.control_port_no_encrypt;
949 	list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) {
950 		vlan->control_port_protocol =
951 			params->crypto.control_port_ethertype;
952 		vlan->control_port_no_encrypt =
953 			params->crypto.control_port_no_encrypt;
954 	}
955 
956 	sdata->vif.bss_conf.beacon_int = params->beacon_interval;
957 	sdata->vif.bss_conf.dtim_period = params->dtim_period;
958 	sdata->vif.bss_conf.enable_beacon = true;
959 
960 	sdata->vif.bss_conf.ssid_len = params->ssid_len;
961 	if (params->ssid_len)
962 		memcpy(sdata->vif.bss_conf.ssid, params->ssid,
963 		       params->ssid_len);
964 	sdata->vif.bss_conf.hidden_ssid =
965 		(params->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE);
966 
967 	memset(&sdata->vif.bss_conf.p2p_noa_attr, 0,
968 	       sizeof(sdata->vif.bss_conf.p2p_noa_attr));
969 	sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow =
970 		params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
971 	if (params->p2p_opp_ps)
972 		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
973 					IEEE80211_P2P_OPPPS_ENABLE_BIT;
974 
975 	err = ieee80211_assign_beacon(sdata, &params->beacon);
976 	if (err < 0)
977 		return err;
978 	changed |= err;
979 
980 	err = drv_start_ap(sdata->local, sdata);
981 	if (err) {
982 		old = rtnl_dereference(sdata->u.ap.beacon);
983 		if (old)
984 			kfree_rcu(old, rcu_head);
985 		RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
986 		return err;
987 	}
988 
989 	ieee80211_bss_info_change_notify(sdata, changed);
990 
991 	netif_carrier_on(dev);
992 	list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
993 		netif_carrier_on(vlan->dev);
994 
995 	return 0;
996 }
997 
998 static int ieee80211_change_beacon(struct wiphy *wiphy, struct net_device *dev,
999 				   struct cfg80211_beacon_data *params)
1000 {
1001 	struct ieee80211_sub_if_data *sdata;
1002 	struct beacon_data *old;
1003 	int err;
1004 
1005 	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1006 
1007 	old = rtnl_dereference(sdata->u.ap.beacon);
1008 	if (!old)
1009 		return -ENOENT;
1010 
1011 	err = ieee80211_assign_beacon(sdata, params);
1012 	if (err < 0)
1013 		return err;
1014 	ieee80211_bss_info_change_notify(sdata, err);
1015 	return 0;
1016 }
1017 
1018 static int ieee80211_stop_ap(struct wiphy *wiphy, struct net_device *dev)
1019 {
1020 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1021 	struct ieee80211_sub_if_data *vlan;
1022 	struct ieee80211_local *local = sdata->local;
1023 	struct beacon_data *old_beacon;
1024 	struct probe_resp *old_probe_resp;
1025 
1026 	old_beacon = rtnl_dereference(sdata->u.ap.beacon);
1027 	if (!old_beacon)
1028 		return -ENOENT;
1029 	old_probe_resp = rtnl_dereference(sdata->u.ap.probe_resp);
1030 
1031 	/* turn off carrier for this interface and dependent VLANs */
1032 	list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
1033 		netif_carrier_off(vlan->dev);
1034 	netif_carrier_off(dev);
1035 
1036 	/* remove beacon and probe response */
1037 	RCU_INIT_POINTER(sdata->u.ap.beacon, NULL);
1038 	RCU_INIT_POINTER(sdata->u.ap.probe_resp, NULL);
1039 	kfree_rcu(old_beacon, rcu_head);
1040 	if (old_probe_resp)
1041 		kfree_rcu(old_probe_resp, rcu_head);
1042 
1043 	list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list)
1044 		sta_info_flush_defer(vlan);
1045 	sta_info_flush_defer(sdata);
1046 	synchronize_net();
1047 	rcu_barrier();
1048 	list_for_each_entry(vlan, &sdata->u.ap.vlans, u.vlan.list) {
1049 		sta_info_flush_cleanup(vlan);
1050 		ieee80211_free_keys(vlan);
1051 	}
1052 	sta_info_flush_cleanup(sdata);
1053 	ieee80211_free_keys(sdata);
1054 
1055 	sdata->vif.bss_conf.enable_beacon = false;
1056 	sdata->vif.bss_conf.ssid_len = 0;
1057 	clear_bit(SDATA_STATE_OFFCHANNEL_BEACON_STOPPED, &sdata->state);
1058 	ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_BEACON_ENABLED);
1059 
1060 	if (sdata->wdev.cac_started) {
1061 		cancel_delayed_work_sync(&sdata->dfs_cac_timer_work);
1062 		cfg80211_cac_event(sdata->dev, NL80211_RADAR_CAC_ABORTED,
1063 				   GFP_KERNEL);
1064 	}
1065 
1066 	drv_stop_ap(sdata->local, sdata);
1067 
1068 	/* free all potentially still buffered bcast frames */
1069 	local->total_ps_buffered -= skb_queue_len(&sdata->u.ap.ps.bc_buf);
1070 	skb_queue_purge(&sdata->u.ap.ps.bc_buf);
1071 
1072 	ieee80211_vif_copy_chanctx_to_vlans(sdata, true);
1073 	ieee80211_vif_release_channel(sdata);
1074 
1075 	return 0;
1076 }
1077 
1078 /* Layer 2 Update frame (802.2 Type 1 LLC XID Update response) */
1079 struct iapp_layer2_update {
1080 	u8 da[ETH_ALEN];	/* broadcast */
1081 	u8 sa[ETH_ALEN];	/* STA addr */
1082 	__be16 len;		/* 6 */
1083 	u8 dsap;		/* 0 */
1084 	u8 ssap;		/* 0 */
1085 	u8 control;
1086 	u8 xid_info[3];
1087 } __packed;
1088 
1089 static void ieee80211_send_layer2_update(struct sta_info *sta)
1090 {
1091 	struct iapp_layer2_update *msg;
1092 	struct sk_buff *skb;
1093 
1094 	/* Send Level 2 Update Frame to update forwarding tables in layer 2
1095 	 * bridge devices */
1096 
1097 	skb = dev_alloc_skb(sizeof(*msg));
1098 	if (!skb)
1099 		return;
1100 	msg = (struct iapp_layer2_update *)skb_put(skb, sizeof(*msg));
1101 
1102 	/* 802.2 Type 1 Logical Link Control (LLC) Exchange Identifier (XID)
1103 	 * Update response frame; IEEE Std 802.2-1998, 5.4.1.2.1 */
1104 
1105 	eth_broadcast_addr(msg->da);
1106 	memcpy(msg->sa, sta->sta.addr, ETH_ALEN);
1107 	msg->len = htons(6);
1108 	msg->dsap = 0;
1109 	msg->ssap = 0x01;	/* NULL LSAP, CR Bit: Response */
1110 	msg->control = 0xaf;	/* XID response lsb.1111F101.
1111 				 * F=0 (no poll command; unsolicited frame) */
1112 	msg->xid_info[0] = 0x81;	/* XID format identifier */
1113 	msg->xid_info[1] = 1;	/* LLC types/classes: Type 1 LLC */
1114 	msg->xid_info[2] = 0;	/* XID sender's receive window size (RW) */
1115 
1116 	skb->dev = sta->sdata->dev;
1117 	skb->protocol = eth_type_trans(skb, sta->sdata->dev);
1118 	memset(skb->cb, 0, sizeof(skb->cb));
1119 	netif_rx_ni(skb);
1120 }
1121 
1122 static int sta_apply_auth_flags(struct ieee80211_local *local,
1123 				struct sta_info *sta,
1124 				u32 mask, u32 set)
1125 {
1126 	int ret;
1127 
1128 	if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
1129 	    set & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
1130 	    !test_sta_flag(sta, WLAN_STA_AUTH)) {
1131 		ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
1132 		if (ret)
1133 			return ret;
1134 	}
1135 
1136 	if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
1137 	    set & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
1138 	    !test_sta_flag(sta, WLAN_STA_ASSOC)) {
1139 		ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
1140 		if (ret)
1141 			return ret;
1142 	}
1143 
1144 	if (mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1145 		if (set & BIT(NL80211_STA_FLAG_AUTHORIZED))
1146 			ret = sta_info_move_state(sta, IEEE80211_STA_AUTHORIZED);
1147 		else if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1148 			ret = sta_info_move_state(sta, IEEE80211_STA_ASSOC);
1149 		else
1150 			ret = 0;
1151 		if (ret)
1152 			return ret;
1153 	}
1154 
1155 	if (mask & BIT(NL80211_STA_FLAG_ASSOCIATED) &&
1156 	    !(set & BIT(NL80211_STA_FLAG_ASSOCIATED)) &&
1157 	    test_sta_flag(sta, WLAN_STA_ASSOC)) {
1158 		ret = sta_info_move_state(sta, IEEE80211_STA_AUTH);
1159 		if (ret)
1160 			return ret;
1161 	}
1162 
1163 	if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED) &&
1164 	    !(set & BIT(NL80211_STA_FLAG_AUTHENTICATED)) &&
1165 	    test_sta_flag(sta, WLAN_STA_AUTH)) {
1166 		ret = sta_info_move_state(sta, IEEE80211_STA_NONE);
1167 		if (ret)
1168 			return ret;
1169 	}
1170 
1171 	return 0;
1172 }
1173 
1174 static int sta_apply_parameters(struct ieee80211_local *local,
1175 				struct sta_info *sta,
1176 				struct station_parameters *params)
1177 {
1178 	int ret = 0;
1179 	u32 rates;
1180 	int i, j;
1181 	struct ieee80211_supported_band *sband;
1182 	struct ieee80211_sub_if_data *sdata = sta->sdata;
1183 	enum ieee80211_band band = ieee80211_get_sdata_band(sdata);
1184 	u32 mask, set;
1185 
1186 	sband = local->hw.wiphy->bands[band];
1187 
1188 	mask = params->sta_flags_mask;
1189 	set = params->sta_flags_set;
1190 
1191 	if (ieee80211_vif_is_mesh(&sdata->vif)) {
1192 		/*
1193 		 * In mesh mode, ASSOCIATED isn't part of the nl80211
1194 		 * API but must follow AUTHENTICATED for driver state.
1195 		 */
1196 		if (mask & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1197 			mask |= BIT(NL80211_STA_FLAG_ASSOCIATED);
1198 		if (set & BIT(NL80211_STA_FLAG_AUTHENTICATED))
1199 			set |= BIT(NL80211_STA_FLAG_ASSOCIATED);
1200 	} else if (test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1201 		/*
1202 		 * TDLS -- everything follows authorized, but
1203 		 * only becoming authorized is possible, not
1204 		 * going back
1205 		 */
1206 		if (set & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1207 			set |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
1208 			       BIT(NL80211_STA_FLAG_ASSOCIATED);
1209 			mask |= BIT(NL80211_STA_FLAG_AUTHENTICATED) |
1210 				BIT(NL80211_STA_FLAG_ASSOCIATED);
1211 		}
1212 	}
1213 
1214 	ret = sta_apply_auth_flags(local, sta, mask, set);
1215 	if (ret)
1216 		return ret;
1217 
1218 	if (mask & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE)) {
1219 		if (set & BIT(NL80211_STA_FLAG_SHORT_PREAMBLE))
1220 			set_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
1221 		else
1222 			clear_sta_flag(sta, WLAN_STA_SHORT_PREAMBLE);
1223 	}
1224 
1225 	if (mask & BIT(NL80211_STA_FLAG_WME)) {
1226 		if (set & BIT(NL80211_STA_FLAG_WME)) {
1227 			set_sta_flag(sta, WLAN_STA_WME);
1228 			sta->sta.wme = true;
1229 		} else {
1230 			clear_sta_flag(sta, WLAN_STA_WME);
1231 			sta->sta.wme = false;
1232 		}
1233 	}
1234 
1235 	if (mask & BIT(NL80211_STA_FLAG_MFP)) {
1236 		if (set & BIT(NL80211_STA_FLAG_MFP))
1237 			set_sta_flag(sta, WLAN_STA_MFP);
1238 		else
1239 			clear_sta_flag(sta, WLAN_STA_MFP);
1240 	}
1241 
1242 	if (mask & BIT(NL80211_STA_FLAG_TDLS_PEER)) {
1243 		if (set & BIT(NL80211_STA_FLAG_TDLS_PEER))
1244 			set_sta_flag(sta, WLAN_STA_TDLS_PEER);
1245 		else
1246 			clear_sta_flag(sta, WLAN_STA_TDLS_PEER);
1247 	}
1248 
1249 	if (params->sta_modify_mask & STATION_PARAM_APPLY_UAPSD) {
1250 		sta->sta.uapsd_queues = params->uapsd_queues;
1251 		sta->sta.max_sp = params->max_sp;
1252 	}
1253 
1254 	/*
1255 	 * cfg80211 validates this (1-2007) and allows setting the AID
1256 	 * only when creating a new station entry
1257 	 */
1258 	if (params->aid)
1259 		sta->sta.aid = params->aid;
1260 
1261 	/*
1262 	 * Some of the following updates would be racy if called on an
1263 	 * existing station, via ieee80211_change_station(). However,
1264 	 * all such changes are rejected by cfg80211 except for updates
1265 	 * changing the supported rates on an existing but not yet used
1266 	 * TDLS peer.
1267 	 */
1268 
1269 	if (params->listen_interval >= 0)
1270 		sta->listen_interval = params->listen_interval;
1271 
1272 	if (params->supported_rates) {
1273 		rates = 0;
1274 
1275 		for (i = 0; i < params->supported_rates_len; i++) {
1276 			int rate = (params->supported_rates[i] & 0x7f) * 5;
1277 			for (j = 0; j < sband->n_bitrates; j++) {
1278 				if (sband->bitrates[j].bitrate == rate)
1279 					rates |= BIT(j);
1280 			}
1281 		}
1282 		sta->sta.supp_rates[band] = rates;
1283 	}
1284 
1285 	if (params->ht_capa)
1286 		ieee80211_ht_cap_ie_to_sta_ht_cap(sdata, sband,
1287 						  params->ht_capa, sta);
1288 
1289 	if (params->vht_capa)
1290 		ieee80211_vht_cap_ie_to_sta_vht_cap(sdata, sband,
1291 						    params->vht_capa, sta);
1292 
1293 	if (ieee80211_vif_is_mesh(&sdata->vif)) {
1294 #ifdef CONFIG_MAC80211_MESH
1295 		u32 changed = 0;
1296 
1297 		if (params->sta_modify_mask & STATION_PARAM_APPLY_PLINK_STATE) {
1298 			switch (params->plink_state) {
1299 			case NL80211_PLINK_ESTAB:
1300 				if (sta->plink_state != NL80211_PLINK_ESTAB)
1301 					changed = mesh_plink_inc_estab_count(
1302 							sdata);
1303 				sta->plink_state = params->plink_state;
1304 
1305 				ieee80211_mps_sta_status_update(sta);
1306 				changed |= ieee80211_mps_set_sta_local_pm(sta,
1307 					      sdata->u.mesh.mshcfg.power_mode);
1308 				break;
1309 			case NL80211_PLINK_LISTEN:
1310 			case NL80211_PLINK_BLOCKED:
1311 			case NL80211_PLINK_OPN_SNT:
1312 			case NL80211_PLINK_OPN_RCVD:
1313 			case NL80211_PLINK_CNF_RCVD:
1314 			case NL80211_PLINK_HOLDING:
1315 				if (sta->plink_state == NL80211_PLINK_ESTAB)
1316 					changed = mesh_plink_dec_estab_count(
1317 							sdata);
1318 				sta->plink_state = params->plink_state;
1319 
1320 				ieee80211_mps_sta_status_update(sta);
1321 				changed |=
1322 				      ieee80211_mps_local_status_update(sdata);
1323 				break;
1324 			default:
1325 				/*  nothing  */
1326 				break;
1327 			}
1328 		}
1329 
1330 		switch (params->plink_action) {
1331 		case NL80211_PLINK_ACTION_NO_ACTION:
1332 			/* nothing */
1333 			break;
1334 		case NL80211_PLINK_ACTION_OPEN:
1335 			changed |= mesh_plink_open(sta);
1336 			break;
1337 		case NL80211_PLINK_ACTION_BLOCK:
1338 			changed |= mesh_plink_block(sta);
1339 			break;
1340 		}
1341 
1342 		if (params->local_pm)
1343 			changed |=
1344 			      ieee80211_mps_set_sta_local_pm(sta,
1345 							     params->local_pm);
1346 		ieee80211_bss_info_change_notify(sdata, changed);
1347 #endif
1348 	}
1349 
1350 	return 0;
1351 }
1352 
1353 static int ieee80211_add_station(struct wiphy *wiphy, struct net_device *dev,
1354 				 u8 *mac, struct station_parameters *params)
1355 {
1356 	struct ieee80211_local *local = wiphy_priv(wiphy);
1357 	struct sta_info *sta;
1358 	struct ieee80211_sub_if_data *sdata;
1359 	int err;
1360 	int layer2_update;
1361 
1362 	if (params->vlan) {
1363 		sdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1364 
1365 		if (sdata->vif.type != NL80211_IFTYPE_AP_VLAN &&
1366 		    sdata->vif.type != NL80211_IFTYPE_AP)
1367 			return -EINVAL;
1368 	} else
1369 		sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1370 
1371 	if (ether_addr_equal(mac, sdata->vif.addr))
1372 		return -EINVAL;
1373 
1374 	if (is_multicast_ether_addr(mac))
1375 		return -EINVAL;
1376 
1377 	sta = sta_info_alloc(sdata, mac, GFP_KERNEL);
1378 	if (!sta)
1379 		return -ENOMEM;
1380 
1381 	/*
1382 	 * defaults -- if userspace wants something else we'll
1383 	 * change it accordingly in sta_apply_parameters()
1384 	 */
1385 	if (!(params->sta_flags_set & BIT(NL80211_STA_FLAG_TDLS_PEER))) {
1386 		sta_info_pre_move_state(sta, IEEE80211_STA_AUTH);
1387 		sta_info_pre_move_state(sta, IEEE80211_STA_ASSOC);
1388 	}
1389 
1390 	err = sta_apply_parameters(local, sta, params);
1391 	if (err) {
1392 		sta_info_free(local, sta);
1393 		return err;
1394 	}
1395 
1396 	/*
1397 	 * for TDLS, rate control should be initialized only when
1398 	 * rates are known and station is marked authorized
1399 	 */
1400 	if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER))
1401 		rate_control_rate_init(sta);
1402 
1403 	layer2_update = sdata->vif.type == NL80211_IFTYPE_AP_VLAN ||
1404 		sdata->vif.type == NL80211_IFTYPE_AP;
1405 
1406 	err = sta_info_insert_rcu(sta);
1407 	if (err) {
1408 		rcu_read_unlock();
1409 		return err;
1410 	}
1411 
1412 	if (layer2_update)
1413 		ieee80211_send_layer2_update(sta);
1414 
1415 	rcu_read_unlock();
1416 
1417 	return 0;
1418 }
1419 
1420 static int ieee80211_del_station(struct wiphy *wiphy, struct net_device *dev,
1421 				 u8 *mac)
1422 {
1423 	struct ieee80211_sub_if_data *sdata;
1424 
1425 	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1426 
1427 	if (mac)
1428 		return sta_info_destroy_addr_bss(sdata, mac);
1429 
1430 	sta_info_flush(sdata);
1431 	return 0;
1432 }
1433 
1434 static int ieee80211_change_station(struct wiphy *wiphy,
1435 				    struct net_device *dev, u8 *mac,
1436 				    struct station_parameters *params)
1437 {
1438 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1439 	struct ieee80211_local *local = wiphy_priv(wiphy);
1440 	struct sta_info *sta;
1441 	struct ieee80211_sub_if_data *vlansdata;
1442 	enum cfg80211_station_type statype;
1443 	int err;
1444 
1445 	mutex_lock(&local->sta_mtx);
1446 
1447 	sta = sta_info_get_bss(sdata, mac);
1448 	if (!sta) {
1449 		err = -ENOENT;
1450 		goto out_err;
1451 	}
1452 
1453 	switch (sdata->vif.type) {
1454 	case NL80211_IFTYPE_MESH_POINT:
1455 		if (sdata->u.mesh.user_mpm)
1456 			statype = CFG80211_STA_MESH_PEER_USER;
1457 		else
1458 			statype = CFG80211_STA_MESH_PEER_KERNEL;
1459 		break;
1460 	case NL80211_IFTYPE_ADHOC:
1461 		statype = CFG80211_STA_IBSS;
1462 		break;
1463 	case NL80211_IFTYPE_STATION:
1464 		if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
1465 			statype = CFG80211_STA_AP_STA;
1466 			break;
1467 		}
1468 		if (test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1469 			statype = CFG80211_STA_TDLS_PEER_ACTIVE;
1470 		else
1471 			statype = CFG80211_STA_TDLS_PEER_SETUP;
1472 		break;
1473 	case NL80211_IFTYPE_AP:
1474 	case NL80211_IFTYPE_AP_VLAN:
1475 		statype = CFG80211_STA_AP_CLIENT;
1476 		break;
1477 	default:
1478 		err = -EOPNOTSUPP;
1479 		goto out_err;
1480 	}
1481 
1482 	err = cfg80211_check_station_change(wiphy, params, statype);
1483 	if (err)
1484 		goto out_err;
1485 
1486 	if (params->vlan && params->vlan != sta->sdata->dev) {
1487 		bool prev_4addr = false;
1488 		bool new_4addr = false;
1489 
1490 		vlansdata = IEEE80211_DEV_TO_SUB_IF(params->vlan);
1491 
1492 		if (params->vlan->ieee80211_ptr->use_4addr) {
1493 			if (vlansdata->u.vlan.sta) {
1494 				err = -EBUSY;
1495 				goto out_err;
1496 			}
1497 
1498 			rcu_assign_pointer(vlansdata->u.vlan.sta, sta);
1499 			new_4addr = true;
1500 		}
1501 
1502 		if (sta->sdata->vif.type == NL80211_IFTYPE_AP_VLAN &&
1503 		    sta->sdata->u.vlan.sta) {
1504 			rcu_assign_pointer(sta->sdata->u.vlan.sta, NULL);
1505 			prev_4addr = true;
1506 		}
1507 
1508 		sta->sdata = vlansdata;
1509 
1510 		if (sta->sta_state == IEEE80211_STA_AUTHORIZED &&
1511 		    prev_4addr != new_4addr) {
1512 			if (new_4addr)
1513 				atomic_dec(&sta->sdata->bss->num_mcast_sta);
1514 			else
1515 				atomic_inc(&sta->sdata->bss->num_mcast_sta);
1516 		}
1517 
1518 		ieee80211_send_layer2_update(sta);
1519 	}
1520 
1521 	err = sta_apply_parameters(local, sta, params);
1522 	if (err)
1523 		goto out_err;
1524 
1525 	/* When peer becomes authorized, init rate control as well */
1526 	if (test_sta_flag(sta, WLAN_STA_TDLS_PEER) &&
1527 	    test_sta_flag(sta, WLAN_STA_AUTHORIZED))
1528 		rate_control_rate_init(sta);
1529 
1530 	mutex_unlock(&local->sta_mtx);
1531 
1532 	if (sdata->vif.type == NL80211_IFTYPE_STATION &&
1533 	    params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)) {
1534 		ieee80211_recalc_ps(local, -1);
1535 		ieee80211_recalc_ps_vif(sdata);
1536 	}
1537 
1538 	return 0;
1539 out_err:
1540 	mutex_unlock(&local->sta_mtx);
1541 	return err;
1542 }
1543 
1544 #ifdef CONFIG_MAC80211_MESH
1545 static int ieee80211_add_mpath(struct wiphy *wiphy, struct net_device *dev,
1546 				 u8 *dst, u8 *next_hop)
1547 {
1548 	struct ieee80211_sub_if_data *sdata;
1549 	struct mesh_path *mpath;
1550 	struct sta_info *sta;
1551 
1552 	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1553 
1554 	rcu_read_lock();
1555 	sta = sta_info_get(sdata, next_hop);
1556 	if (!sta) {
1557 		rcu_read_unlock();
1558 		return -ENOENT;
1559 	}
1560 
1561 	mpath = mesh_path_add(sdata, dst);
1562 	if (IS_ERR(mpath)) {
1563 		rcu_read_unlock();
1564 		return PTR_ERR(mpath);
1565 	}
1566 
1567 	mesh_path_fix_nexthop(mpath, sta);
1568 
1569 	rcu_read_unlock();
1570 	return 0;
1571 }
1572 
1573 static int ieee80211_del_mpath(struct wiphy *wiphy, struct net_device *dev,
1574 			       u8 *dst)
1575 {
1576 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1577 
1578 	if (dst)
1579 		return mesh_path_del(sdata, dst);
1580 
1581 	mesh_path_flush_by_iface(sdata);
1582 	return 0;
1583 }
1584 
1585 static int ieee80211_change_mpath(struct wiphy *wiphy,
1586 				    struct net_device *dev,
1587 				    u8 *dst, u8 *next_hop)
1588 {
1589 	struct ieee80211_sub_if_data *sdata;
1590 	struct mesh_path *mpath;
1591 	struct sta_info *sta;
1592 
1593 	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1594 
1595 	rcu_read_lock();
1596 
1597 	sta = sta_info_get(sdata, next_hop);
1598 	if (!sta) {
1599 		rcu_read_unlock();
1600 		return -ENOENT;
1601 	}
1602 
1603 	mpath = mesh_path_lookup(sdata, dst);
1604 	if (!mpath) {
1605 		rcu_read_unlock();
1606 		return -ENOENT;
1607 	}
1608 
1609 	mesh_path_fix_nexthop(mpath, sta);
1610 
1611 	rcu_read_unlock();
1612 	return 0;
1613 }
1614 
1615 static void mpath_set_pinfo(struct mesh_path *mpath, u8 *next_hop,
1616 			    struct mpath_info *pinfo)
1617 {
1618 	struct sta_info *next_hop_sta = rcu_dereference(mpath->next_hop);
1619 
1620 	if (next_hop_sta)
1621 		memcpy(next_hop, next_hop_sta->sta.addr, ETH_ALEN);
1622 	else
1623 		memset(next_hop, 0, ETH_ALEN);
1624 
1625 	memset(pinfo, 0, sizeof(*pinfo));
1626 
1627 	pinfo->generation = mesh_paths_generation;
1628 
1629 	pinfo->filled = MPATH_INFO_FRAME_QLEN |
1630 			MPATH_INFO_SN |
1631 			MPATH_INFO_METRIC |
1632 			MPATH_INFO_EXPTIME |
1633 			MPATH_INFO_DISCOVERY_TIMEOUT |
1634 			MPATH_INFO_DISCOVERY_RETRIES |
1635 			MPATH_INFO_FLAGS;
1636 
1637 	pinfo->frame_qlen = mpath->frame_queue.qlen;
1638 	pinfo->sn = mpath->sn;
1639 	pinfo->metric = mpath->metric;
1640 	if (time_before(jiffies, mpath->exp_time))
1641 		pinfo->exptime = jiffies_to_msecs(mpath->exp_time - jiffies);
1642 	pinfo->discovery_timeout =
1643 			jiffies_to_msecs(mpath->discovery_timeout);
1644 	pinfo->discovery_retries = mpath->discovery_retries;
1645 	if (mpath->flags & MESH_PATH_ACTIVE)
1646 		pinfo->flags |= NL80211_MPATH_FLAG_ACTIVE;
1647 	if (mpath->flags & MESH_PATH_RESOLVING)
1648 		pinfo->flags |= NL80211_MPATH_FLAG_RESOLVING;
1649 	if (mpath->flags & MESH_PATH_SN_VALID)
1650 		pinfo->flags |= NL80211_MPATH_FLAG_SN_VALID;
1651 	if (mpath->flags & MESH_PATH_FIXED)
1652 		pinfo->flags |= NL80211_MPATH_FLAG_FIXED;
1653 	if (mpath->flags & MESH_PATH_RESOLVED)
1654 		pinfo->flags |= NL80211_MPATH_FLAG_RESOLVED;
1655 }
1656 
1657 static int ieee80211_get_mpath(struct wiphy *wiphy, struct net_device *dev,
1658 			       u8 *dst, u8 *next_hop, struct mpath_info *pinfo)
1659 
1660 {
1661 	struct ieee80211_sub_if_data *sdata;
1662 	struct mesh_path *mpath;
1663 
1664 	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1665 
1666 	rcu_read_lock();
1667 	mpath = mesh_path_lookup(sdata, dst);
1668 	if (!mpath) {
1669 		rcu_read_unlock();
1670 		return -ENOENT;
1671 	}
1672 	memcpy(dst, mpath->dst, ETH_ALEN);
1673 	mpath_set_pinfo(mpath, next_hop, pinfo);
1674 	rcu_read_unlock();
1675 	return 0;
1676 }
1677 
1678 static int ieee80211_dump_mpath(struct wiphy *wiphy, struct net_device *dev,
1679 				 int idx, u8 *dst, u8 *next_hop,
1680 				 struct mpath_info *pinfo)
1681 {
1682 	struct ieee80211_sub_if_data *sdata;
1683 	struct mesh_path *mpath;
1684 
1685 	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1686 
1687 	rcu_read_lock();
1688 	mpath = mesh_path_lookup_by_idx(sdata, idx);
1689 	if (!mpath) {
1690 		rcu_read_unlock();
1691 		return -ENOENT;
1692 	}
1693 	memcpy(dst, mpath->dst, ETH_ALEN);
1694 	mpath_set_pinfo(mpath, next_hop, pinfo);
1695 	rcu_read_unlock();
1696 	return 0;
1697 }
1698 
1699 static int ieee80211_get_mesh_config(struct wiphy *wiphy,
1700 				struct net_device *dev,
1701 				struct mesh_config *conf)
1702 {
1703 	struct ieee80211_sub_if_data *sdata;
1704 	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1705 
1706 	memcpy(conf, &(sdata->u.mesh.mshcfg), sizeof(struct mesh_config));
1707 	return 0;
1708 }
1709 
1710 static inline bool _chg_mesh_attr(enum nl80211_meshconf_params parm, u32 mask)
1711 {
1712 	return (mask >> (parm-1)) & 0x1;
1713 }
1714 
1715 static int copy_mesh_setup(struct ieee80211_if_mesh *ifmsh,
1716 		const struct mesh_setup *setup)
1717 {
1718 	u8 *new_ie;
1719 	const u8 *old_ie;
1720 	struct ieee80211_sub_if_data *sdata = container_of(ifmsh,
1721 					struct ieee80211_sub_if_data, u.mesh);
1722 
1723 	/* allocate information elements */
1724 	new_ie = NULL;
1725 	old_ie = ifmsh->ie;
1726 
1727 	if (setup->ie_len) {
1728 		new_ie = kmemdup(setup->ie, setup->ie_len,
1729 				GFP_KERNEL);
1730 		if (!new_ie)
1731 			return -ENOMEM;
1732 	}
1733 	ifmsh->ie_len = setup->ie_len;
1734 	ifmsh->ie = new_ie;
1735 	kfree(old_ie);
1736 
1737 	/* now copy the rest of the setup parameters */
1738 	ifmsh->mesh_id_len = setup->mesh_id_len;
1739 	memcpy(ifmsh->mesh_id, setup->mesh_id, ifmsh->mesh_id_len);
1740 	ifmsh->mesh_sp_id = setup->sync_method;
1741 	ifmsh->mesh_pp_id = setup->path_sel_proto;
1742 	ifmsh->mesh_pm_id = setup->path_metric;
1743 	ifmsh->user_mpm = setup->user_mpm;
1744 	ifmsh->security = IEEE80211_MESH_SEC_NONE;
1745 	if (setup->is_authenticated)
1746 		ifmsh->security |= IEEE80211_MESH_SEC_AUTHED;
1747 	if (setup->is_secure)
1748 		ifmsh->security |= IEEE80211_MESH_SEC_SECURED;
1749 
1750 	/* mcast rate setting in Mesh Node */
1751 	memcpy(sdata->vif.bss_conf.mcast_rate, setup->mcast_rate,
1752 						sizeof(setup->mcast_rate));
1753 
1754 	sdata->vif.bss_conf.beacon_int = setup->beacon_interval;
1755 	sdata->vif.bss_conf.dtim_period = setup->dtim_period;
1756 
1757 	return 0;
1758 }
1759 
1760 static int ieee80211_update_mesh_config(struct wiphy *wiphy,
1761 					struct net_device *dev, u32 mask,
1762 					const struct mesh_config *nconf)
1763 {
1764 	struct mesh_config *conf;
1765 	struct ieee80211_sub_if_data *sdata;
1766 	struct ieee80211_if_mesh *ifmsh;
1767 
1768 	sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1769 	ifmsh = &sdata->u.mesh;
1770 
1771 	/* Set the config options which we are interested in setting */
1772 	conf = &(sdata->u.mesh.mshcfg);
1773 	if (_chg_mesh_attr(NL80211_MESHCONF_RETRY_TIMEOUT, mask))
1774 		conf->dot11MeshRetryTimeout = nconf->dot11MeshRetryTimeout;
1775 	if (_chg_mesh_attr(NL80211_MESHCONF_CONFIRM_TIMEOUT, mask))
1776 		conf->dot11MeshConfirmTimeout = nconf->dot11MeshConfirmTimeout;
1777 	if (_chg_mesh_attr(NL80211_MESHCONF_HOLDING_TIMEOUT, mask))
1778 		conf->dot11MeshHoldingTimeout = nconf->dot11MeshHoldingTimeout;
1779 	if (_chg_mesh_attr(NL80211_MESHCONF_MAX_PEER_LINKS, mask))
1780 		conf->dot11MeshMaxPeerLinks = nconf->dot11MeshMaxPeerLinks;
1781 	if (_chg_mesh_attr(NL80211_MESHCONF_MAX_RETRIES, mask))
1782 		conf->dot11MeshMaxRetries = nconf->dot11MeshMaxRetries;
1783 	if (_chg_mesh_attr(NL80211_MESHCONF_TTL, mask))
1784 		conf->dot11MeshTTL = nconf->dot11MeshTTL;
1785 	if (_chg_mesh_attr(NL80211_MESHCONF_ELEMENT_TTL, mask))
1786 		conf->element_ttl = nconf->element_ttl;
1787 	if (_chg_mesh_attr(NL80211_MESHCONF_AUTO_OPEN_PLINKS, mask)) {
1788 		if (ifmsh->user_mpm)
1789 			return -EBUSY;
1790 		conf->auto_open_plinks = nconf->auto_open_plinks;
1791 	}
1792 	if (_chg_mesh_attr(NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR, mask))
1793 		conf->dot11MeshNbrOffsetMaxNeighbor =
1794 			nconf->dot11MeshNbrOffsetMaxNeighbor;
1795 	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES, mask))
1796 		conf->dot11MeshHWMPmaxPREQretries =
1797 			nconf->dot11MeshHWMPmaxPREQretries;
1798 	if (_chg_mesh_attr(NL80211_MESHCONF_PATH_REFRESH_TIME, mask))
1799 		conf->path_refresh_time = nconf->path_refresh_time;
1800 	if (_chg_mesh_attr(NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT, mask))
1801 		conf->min_discovery_timeout = nconf->min_discovery_timeout;
1802 	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT, mask))
1803 		conf->dot11MeshHWMPactivePathTimeout =
1804 			nconf->dot11MeshHWMPactivePathTimeout;
1805 	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL, mask))
1806 		conf->dot11MeshHWMPpreqMinInterval =
1807 			nconf->dot11MeshHWMPpreqMinInterval;
1808 	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL, mask))
1809 		conf->dot11MeshHWMPperrMinInterval =
1810 			nconf->dot11MeshHWMPperrMinInterval;
1811 	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME,
1812 			   mask))
1813 		conf->dot11MeshHWMPnetDiameterTraversalTime =
1814 			nconf->dot11MeshHWMPnetDiameterTraversalTime;
1815 	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOTMODE, mask)) {
1816 		conf->dot11MeshHWMPRootMode = nconf->dot11MeshHWMPRootMode;
1817 		ieee80211_mesh_root_setup(ifmsh);
1818 	}
1819 	if (_chg_mesh_attr(NL80211_MESHCONF_GATE_ANNOUNCEMENTS, mask)) {
1820 		/* our current gate announcement implementation rides on root
1821 		 * announcements, so require this ifmsh to also be a root node
1822 		 * */
1823 		if (nconf->dot11MeshGateAnnouncementProtocol &&
1824 		    !(conf->dot11MeshHWMPRootMode > IEEE80211_ROOTMODE_ROOT)) {
1825 			conf->dot11MeshHWMPRootMode = IEEE80211_PROACTIVE_RANN;
1826 			ieee80211_mesh_root_setup(ifmsh);
1827 		}
1828 		conf->dot11MeshGateAnnouncementProtocol =
1829 			nconf->dot11MeshGateAnnouncementProtocol;
1830 	}
1831 	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_RANN_INTERVAL, mask))
1832 		conf->dot11MeshHWMPRannInterval =
1833 			nconf->dot11MeshHWMPRannInterval;
1834 	if (_chg_mesh_attr(NL80211_MESHCONF_FORWARDING, mask))
1835 		conf->dot11MeshForwarding = nconf->dot11MeshForwarding;
1836 	if (_chg_mesh_attr(NL80211_MESHCONF_RSSI_THRESHOLD, mask)) {
1837 		/* our RSSI threshold implementation is supported only for
1838 		 * devices that report signal in dBm.
1839 		 */
1840 		if (!(sdata->local->hw.flags & IEEE80211_HW_SIGNAL_DBM))
1841 			return -ENOTSUPP;
1842 		conf->rssi_threshold = nconf->rssi_threshold;
1843 	}
1844 	if (_chg_mesh_attr(NL80211_MESHCONF_HT_OPMODE, mask)) {
1845 		conf->ht_opmode = nconf->ht_opmode;
1846 		sdata->vif.bss_conf.ht_operation_mode = nconf->ht_opmode;
1847 		ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_HT);
1848 	}
1849 	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT, mask))
1850 		conf->dot11MeshHWMPactivePathToRootTimeout =
1851 			nconf->dot11MeshHWMPactivePathToRootTimeout;
1852 	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_ROOT_INTERVAL, mask))
1853 		conf->dot11MeshHWMProotInterval =
1854 			nconf->dot11MeshHWMProotInterval;
1855 	if (_chg_mesh_attr(NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL, mask))
1856 		conf->dot11MeshHWMPconfirmationInterval =
1857 			nconf->dot11MeshHWMPconfirmationInterval;
1858 	if (_chg_mesh_attr(NL80211_MESHCONF_POWER_MODE, mask)) {
1859 		conf->power_mode = nconf->power_mode;
1860 		ieee80211_mps_local_status_update(sdata);
1861 	}
1862 	if (_chg_mesh_attr(NL80211_MESHCONF_AWAKE_WINDOW, mask))
1863 		conf->dot11MeshAwakeWindowDuration =
1864 			nconf->dot11MeshAwakeWindowDuration;
1865 	ieee80211_mbss_info_change_notify(sdata, BSS_CHANGED_BEACON);
1866 	return 0;
1867 }
1868 
1869 static int ieee80211_join_mesh(struct wiphy *wiphy, struct net_device *dev,
1870 			       const struct mesh_config *conf,
1871 			       const struct mesh_setup *setup)
1872 {
1873 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1874 	struct ieee80211_if_mesh *ifmsh = &sdata->u.mesh;
1875 	int err;
1876 
1877 	memcpy(&ifmsh->mshcfg, conf, sizeof(struct mesh_config));
1878 	err = copy_mesh_setup(ifmsh, setup);
1879 	if (err)
1880 		return err;
1881 
1882 	/* can mesh use other SMPS modes? */
1883 	sdata->smps_mode = IEEE80211_SMPS_OFF;
1884 	sdata->needed_rx_chains = sdata->local->rx_chains;
1885 
1886 	err = ieee80211_vif_use_channel(sdata, &setup->chandef,
1887 					IEEE80211_CHANCTX_SHARED);
1888 	if (err)
1889 		return err;
1890 
1891 	return ieee80211_start_mesh(sdata);
1892 }
1893 
1894 static int ieee80211_leave_mesh(struct wiphy *wiphy, struct net_device *dev)
1895 {
1896 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1897 
1898 	ieee80211_stop_mesh(sdata);
1899 	ieee80211_vif_release_channel(sdata);
1900 
1901 	return 0;
1902 }
1903 #endif
1904 
1905 static int ieee80211_change_bss(struct wiphy *wiphy,
1906 				struct net_device *dev,
1907 				struct bss_parameters *params)
1908 {
1909 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1910 	enum ieee80211_band band;
1911 	u32 changed = 0;
1912 
1913 	if (!rtnl_dereference(sdata->u.ap.beacon))
1914 		return -ENOENT;
1915 
1916 	band = ieee80211_get_sdata_band(sdata);
1917 
1918 	if (params->use_cts_prot >= 0) {
1919 		sdata->vif.bss_conf.use_cts_prot = params->use_cts_prot;
1920 		changed |= BSS_CHANGED_ERP_CTS_PROT;
1921 	}
1922 	if (params->use_short_preamble >= 0) {
1923 		sdata->vif.bss_conf.use_short_preamble =
1924 			params->use_short_preamble;
1925 		changed |= BSS_CHANGED_ERP_PREAMBLE;
1926 	}
1927 
1928 	if (!sdata->vif.bss_conf.use_short_slot &&
1929 	    band == IEEE80211_BAND_5GHZ) {
1930 		sdata->vif.bss_conf.use_short_slot = true;
1931 		changed |= BSS_CHANGED_ERP_SLOT;
1932 	}
1933 
1934 	if (params->use_short_slot_time >= 0) {
1935 		sdata->vif.bss_conf.use_short_slot =
1936 			params->use_short_slot_time;
1937 		changed |= BSS_CHANGED_ERP_SLOT;
1938 	}
1939 
1940 	if (params->basic_rates) {
1941 		int i, j;
1942 		u32 rates = 0;
1943 		struct ieee80211_supported_band *sband = wiphy->bands[band];
1944 
1945 		for (i = 0; i < params->basic_rates_len; i++) {
1946 			int rate = (params->basic_rates[i] & 0x7f) * 5;
1947 			for (j = 0; j < sband->n_bitrates; j++) {
1948 				if (sband->bitrates[j].bitrate == rate)
1949 					rates |= BIT(j);
1950 			}
1951 		}
1952 		sdata->vif.bss_conf.basic_rates = rates;
1953 		changed |= BSS_CHANGED_BASIC_RATES;
1954 	}
1955 
1956 	if (params->ap_isolate >= 0) {
1957 		if (params->ap_isolate)
1958 			sdata->flags |= IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
1959 		else
1960 			sdata->flags &= ~IEEE80211_SDATA_DONT_BRIDGE_PACKETS;
1961 	}
1962 
1963 	if (params->ht_opmode >= 0) {
1964 		sdata->vif.bss_conf.ht_operation_mode =
1965 			(u16) params->ht_opmode;
1966 		changed |= BSS_CHANGED_HT;
1967 	}
1968 
1969 	if (params->p2p_ctwindow >= 0) {
1970 		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
1971 					~IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
1972 		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
1973 			params->p2p_ctwindow & IEEE80211_P2P_OPPPS_CTWINDOW_MASK;
1974 		changed |= BSS_CHANGED_P2P_PS;
1975 	}
1976 
1977 	if (params->p2p_opp_ps > 0) {
1978 		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow |=
1979 					IEEE80211_P2P_OPPPS_ENABLE_BIT;
1980 		changed |= BSS_CHANGED_P2P_PS;
1981 	} else if (params->p2p_opp_ps == 0) {
1982 		sdata->vif.bss_conf.p2p_noa_attr.oppps_ctwindow &=
1983 					~IEEE80211_P2P_OPPPS_ENABLE_BIT;
1984 		changed |= BSS_CHANGED_P2P_PS;
1985 	}
1986 
1987 	ieee80211_bss_info_change_notify(sdata, changed);
1988 
1989 	return 0;
1990 }
1991 
1992 static int ieee80211_set_txq_params(struct wiphy *wiphy,
1993 				    struct net_device *dev,
1994 				    struct ieee80211_txq_params *params)
1995 {
1996 	struct ieee80211_local *local = wiphy_priv(wiphy);
1997 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
1998 	struct ieee80211_tx_queue_params p;
1999 
2000 	if (!local->ops->conf_tx)
2001 		return -EOPNOTSUPP;
2002 
2003 	if (local->hw.queues < IEEE80211_NUM_ACS)
2004 		return -EOPNOTSUPP;
2005 
2006 	memset(&p, 0, sizeof(p));
2007 	p.aifs = params->aifs;
2008 	p.cw_max = params->cwmax;
2009 	p.cw_min = params->cwmin;
2010 	p.txop = params->txop;
2011 
2012 	/*
2013 	 * Setting tx queue params disables u-apsd because it's only
2014 	 * called in master mode.
2015 	 */
2016 	p.uapsd = false;
2017 
2018 	sdata->tx_conf[params->ac] = p;
2019 	if (drv_conf_tx(local, sdata, params->ac, &p)) {
2020 		wiphy_debug(local->hw.wiphy,
2021 			    "failed to set TX queue parameters for AC %d\n",
2022 			    params->ac);
2023 		return -EINVAL;
2024 	}
2025 
2026 	ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_QOS);
2027 
2028 	return 0;
2029 }
2030 
2031 #ifdef CONFIG_PM
2032 static int ieee80211_suspend(struct wiphy *wiphy,
2033 			     struct cfg80211_wowlan *wowlan)
2034 {
2035 	return __ieee80211_suspend(wiphy_priv(wiphy), wowlan);
2036 }
2037 
2038 static int ieee80211_resume(struct wiphy *wiphy)
2039 {
2040 	return __ieee80211_resume(wiphy_priv(wiphy));
2041 }
2042 #else
2043 #define ieee80211_suspend NULL
2044 #define ieee80211_resume NULL
2045 #endif
2046 
2047 static int ieee80211_scan(struct wiphy *wiphy,
2048 			  struct cfg80211_scan_request *req)
2049 {
2050 	struct ieee80211_sub_if_data *sdata;
2051 
2052 	sdata = IEEE80211_WDEV_TO_SUB_IF(req->wdev);
2053 
2054 	switch (ieee80211_vif_type_p2p(&sdata->vif)) {
2055 	case NL80211_IFTYPE_STATION:
2056 	case NL80211_IFTYPE_ADHOC:
2057 	case NL80211_IFTYPE_MESH_POINT:
2058 	case NL80211_IFTYPE_P2P_CLIENT:
2059 	case NL80211_IFTYPE_P2P_DEVICE:
2060 		break;
2061 	case NL80211_IFTYPE_P2P_GO:
2062 		if (sdata->local->ops->hw_scan)
2063 			break;
2064 		/*
2065 		 * FIXME: implement NoA while scanning in software,
2066 		 * for now fall through to allow scanning only when
2067 		 * beaconing hasn't been configured yet
2068 		 */
2069 	case NL80211_IFTYPE_AP:
2070 		/*
2071 		 * If the scan has been forced (and the driver supports
2072 		 * forcing), don't care about being beaconing already.
2073 		 * This will create problems to the attached stations (e.g. all
2074 		 * the  frames sent while scanning on other channel will be
2075 		 * lost)
2076 		 */
2077 		if (sdata->u.ap.beacon &&
2078 		    (!(wiphy->features & NL80211_FEATURE_AP_SCAN) ||
2079 		     !(req->flags & NL80211_SCAN_FLAG_AP)))
2080 			return -EOPNOTSUPP;
2081 		break;
2082 	default:
2083 		return -EOPNOTSUPP;
2084 	}
2085 
2086 	return ieee80211_request_scan(sdata, req);
2087 }
2088 
2089 static int
2090 ieee80211_sched_scan_start(struct wiphy *wiphy,
2091 			   struct net_device *dev,
2092 			   struct cfg80211_sched_scan_request *req)
2093 {
2094 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2095 
2096 	if (!sdata->local->ops->sched_scan_start)
2097 		return -EOPNOTSUPP;
2098 
2099 	return ieee80211_request_sched_scan_start(sdata, req);
2100 }
2101 
2102 static int
2103 ieee80211_sched_scan_stop(struct wiphy *wiphy, struct net_device *dev)
2104 {
2105 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2106 
2107 	if (!sdata->local->ops->sched_scan_stop)
2108 		return -EOPNOTSUPP;
2109 
2110 	return ieee80211_request_sched_scan_stop(sdata);
2111 }
2112 
2113 static int ieee80211_auth(struct wiphy *wiphy, struct net_device *dev,
2114 			  struct cfg80211_auth_request *req)
2115 {
2116 	return ieee80211_mgd_auth(IEEE80211_DEV_TO_SUB_IF(dev), req);
2117 }
2118 
2119 static int ieee80211_assoc(struct wiphy *wiphy, struct net_device *dev,
2120 			   struct cfg80211_assoc_request *req)
2121 {
2122 	return ieee80211_mgd_assoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
2123 }
2124 
2125 static int ieee80211_deauth(struct wiphy *wiphy, struct net_device *dev,
2126 			    struct cfg80211_deauth_request *req)
2127 {
2128 	return ieee80211_mgd_deauth(IEEE80211_DEV_TO_SUB_IF(dev), req);
2129 }
2130 
2131 static int ieee80211_disassoc(struct wiphy *wiphy, struct net_device *dev,
2132 			      struct cfg80211_disassoc_request *req)
2133 {
2134 	return ieee80211_mgd_disassoc(IEEE80211_DEV_TO_SUB_IF(dev), req);
2135 }
2136 
2137 static int ieee80211_join_ibss(struct wiphy *wiphy, struct net_device *dev,
2138 			       struct cfg80211_ibss_params *params)
2139 {
2140 	return ieee80211_ibss_join(IEEE80211_DEV_TO_SUB_IF(dev), params);
2141 }
2142 
2143 static int ieee80211_leave_ibss(struct wiphy *wiphy, struct net_device *dev)
2144 {
2145 	return ieee80211_ibss_leave(IEEE80211_DEV_TO_SUB_IF(dev));
2146 }
2147 
2148 static int ieee80211_set_mcast_rate(struct wiphy *wiphy, struct net_device *dev,
2149 				    int rate[IEEE80211_NUM_BANDS])
2150 {
2151 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2152 
2153 	memcpy(sdata->vif.bss_conf.mcast_rate, rate,
2154 	       sizeof(int) * IEEE80211_NUM_BANDS);
2155 
2156 	return 0;
2157 }
2158 
2159 static int ieee80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
2160 {
2161 	struct ieee80211_local *local = wiphy_priv(wiphy);
2162 	int err;
2163 
2164 	if (changed & WIPHY_PARAM_FRAG_THRESHOLD) {
2165 		err = drv_set_frag_threshold(local, wiphy->frag_threshold);
2166 
2167 		if (err)
2168 			return err;
2169 	}
2170 
2171 	if (changed & WIPHY_PARAM_COVERAGE_CLASS) {
2172 		err = drv_set_coverage_class(local, wiphy->coverage_class);
2173 
2174 		if (err)
2175 			return err;
2176 	}
2177 
2178 	if (changed & WIPHY_PARAM_RTS_THRESHOLD) {
2179 		err = drv_set_rts_threshold(local, wiphy->rts_threshold);
2180 
2181 		if (err)
2182 			return err;
2183 	}
2184 
2185 	if (changed & WIPHY_PARAM_RETRY_SHORT) {
2186 		if (wiphy->retry_short > IEEE80211_MAX_TX_RETRY)
2187 			return -EINVAL;
2188 		local->hw.conf.short_frame_max_tx_count = wiphy->retry_short;
2189 	}
2190 	if (changed & WIPHY_PARAM_RETRY_LONG) {
2191 		if (wiphy->retry_long > IEEE80211_MAX_TX_RETRY)
2192 			return -EINVAL;
2193 		local->hw.conf.long_frame_max_tx_count = wiphy->retry_long;
2194 	}
2195 	if (changed &
2196 	    (WIPHY_PARAM_RETRY_SHORT | WIPHY_PARAM_RETRY_LONG))
2197 		ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_RETRY_LIMITS);
2198 
2199 	return 0;
2200 }
2201 
2202 static int ieee80211_set_tx_power(struct wiphy *wiphy,
2203 				  struct wireless_dev *wdev,
2204 				  enum nl80211_tx_power_setting type, int mbm)
2205 {
2206 	struct ieee80211_local *local = wiphy_priv(wiphy);
2207 	struct ieee80211_sub_if_data *sdata;
2208 
2209 	if (wdev) {
2210 		sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2211 
2212 		switch (type) {
2213 		case NL80211_TX_POWER_AUTOMATIC:
2214 			sdata->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
2215 			break;
2216 		case NL80211_TX_POWER_LIMITED:
2217 		case NL80211_TX_POWER_FIXED:
2218 			if (mbm < 0 || (mbm % 100))
2219 				return -EOPNOTSUPP;
2220 			sdata->user_power_level = MBM_TO_DBM(mbm);
2221 			break;
2222 		}
2223 
2224 		ieee80211_recalc_txpower(sdata);
2225 
2226 		return 0;
2227 	}
2228 
2229 	switch (type) {
2230 	case NL80211_TX_POWER_AUTOMATIC:
2231 		local->user_power_level = IEEE80211_UNSET_POWER_LEVEL;
2232 		break;
2233 	case NL80211_TX_POWER_LIMITED:
2234 	case NL80211_TX_POWER_FIXED:
2235 		if (mbm < 0 || (mbm % 100))
2236 			return -EOPNOTSUPP;
2237 		local->user_power_level = MBM_TO_DBM(mbm);
2238 		break;
2239 	}
2240 
2241 	mutex_lock(&local->iflist_mtx);
2242 	list_for_each_entry(sdata, &local->interfaces, list)
2243 		sdata->user_power_level = local->user_power_level;
2244 	list_for_each_entry(sdata, &local->interfaces, list)
2245 		ieee80211_recalc_txpower(sdata);
2246 	mutex_unlock(&local->iflist_mtx);
2247 
2248 	return 0;
2249 }
2250 
2251 static int ieee80211_get_tx_power(struct wiphy *wiphy,
2252 				  struct wireless_dev *wdev,
2253 				  int *dbm)
2254 {
2255 	struct ieee80211_local *local = wiphy_priv(wiphy);
2256 	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2257 
2258 	if (!local->use_chanctx)
2259 		*dbm = local->hw.conf.power_level;
2260 	else
2261 		*dbm = sdata->vif.bss_conf.txpower;
2262 
2263 	return 0;
2264 }
2265 
2266 static int ieee80211_set_wds_peer(struct wiphy *wiphy, struct net_device *dev,
2267 				  const u8 *addr)
2268 {
2269 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2270 
2271 	memcpy(&sdata->u.wds.remote_addr, addr, ETH_ALEN);
2272 
2273 	return 0;
2274 }
2275 
2276 static void ieee80211_rfkill_poll(struct wiphy *wiphy)
2277 {
2278 	struct ieee80211_local *local = wiphy_priv(wiphy);
2279 
2280 	drv_rfkill_poll(local);
2281 }
2282 
2283 #ifdef CONFIG_NL80211_TESTMODE
2284 static int ieee80211_testmode_cmd(struct wiphy *wiphy, void *data, int len)
2285 {
2286 	struct ieee80211_local *local = wiphy_priv(wiphy);
2287 
2288 	if (!local->ops->testmode_cmd)
2289 		return -EOPNOTSUPP;
2290 
2291 	return local->ops->testmode_cmd(&local->hw, data, len);
2292 }
2293 
2294 static int ieee80211_testmode_dump(struct wiphy *wiphy,
2295 				   struct sk_buff *skb,
2296 				   struct netlink_callback *cb,
2297 				   void *data, int len)
2298 {
2299 	struct ieee80211_local *local = wiphy_priv(wiphy);
2300 
2301 	if (!local->ops->testmode_dump)
2302 		return -EOPNOTSUPP;
2303 
2304 	return local->ops->testmode_dump(&local->hw, skb, cb, data, len);
2305 }
2306 #endif
2307 
2308 int __ieee80211_request_smps(struct ieee80211_sub_if_data *sdata,
2309 			     enum ieee80211_smps_mode smps_mode)
2310 {
2311 	const u8 *ap;
2312 	enum ieee80211_smps_mode old_req;
2313 	int err;
2314 
2315 	lockdep_assert_held(&sdata->u.mgd.mtx);
2316 
2317 	old_req = sdata->u.mgd.req_smps;
2318 	sdata->u.mgd.req_smps = smps_mode;
2319 
2320 	if (old_req == smps_mode &&
2321 	    smps_mode != IEEE80211_SMPS_AUTOMATIC)
2322 		return 0;
2323 
2324 	/*
2325 	 * If not associated, or current association is not an HT
2326 	 * association, there's no need to do anything, just store
2327 	 * the new value until we associate.
2328 	 */
2329 	if (!sdata->u.mgd.associated ||
2330 	    sdata->vif.bss_conf.chandef.width == NL80211_CHAN_WIDTH_20_NOHT)
2331 		return 0;
2332 
2333 	ap = sdata->u.mgd.associated->bssid;
2334 
2335 	if (smps_mode == IEEE80211_SMPS_AUTOMATIC) {
2336 		if (sdata->u.mgd.powersave)
2337 			smps_mode = IEEE80211_SMPS_DYNAMIC;
2338 		else
2339 			smps_mode = IEEE80211_SMPS_OFF;
2340 	}
2341 
2342 	/* send SM PS frame to AP */
2343 	err = ieee80211_send_smps_action(sdata, smps_mode,
2344 					 ap, ap);
2345 	if (err)
2346 		sdata->u.mgd.req_smps = old_req;
2347 
2348 	return err;
2349 }
2350 
2351 static int ieee80211_set_power_mgmt(struct wiphy *wiphy, struct net_device *dev,
2352 				    bool enabled, int timeout)
2353 {
2354 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2355 	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2356 
2357 	if (sdata->vif.type != NL80211_IFTYPE_STATION &&
2358 	    sdata->vif.type != NL80211_IFTYPE_MESH_POINT)
2359 		return -EOPNOTSUPP;
2360 
2361 	if (!(local->hw.flags & IEEE80211_HW_SUPPORTS_PS))
2362 		return -EOPNOTSUPP;
2363 
2364 	if (enabled == sdata->u.mgd.powersave &&
2365 	    timeout == local->dynamic_ps_forced_timeout)
2366 		return 0;
2367 
2368 	sdata->u.mgd.powersave = enabled;
2369 	local->dynamic_ps_forced_timeout = timeout;
2370 
2371 	/* no change, but if automatic follow powersave */
2372 	mutex_lock(&sdata->u.mgd.mtx);
2373 	__ieee80211_request_smps(sdata, sdata->u.mgd.req_smps);
2374 	mutex_unlock(&sdata->u.mgd.mtx);
2375 
2376 	if (local->hw.flags & IEEE80211_HW_SUPPORTS_DYNAMIC_PS)
2377 		ieee80211_hw_config(local, IEEE80211_CONF_CHANGE_PS);
2378 
2379 	ieee80211_recalc_ps(local, -1);
2380 	ieee80211_recalc_ps_vif(sdata);
2381 
2382 	return 0;
2383 }
2384 
2385 static int ieee80211_set_cqm_rssi_config(struct wiphy *wiphy,
2386 					 struct net_device *dev,
2387 					 s32 rssi_thold, u32 rssi_hyst)
2388 {
2389 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2390 	struct ieee80211_vif *vif = &sdata->vif;
2391 	struct ieee80211_bss_conf *bss_conf = &vif->bss_conf;
2392 
2393 	if (rssi_thold == bss_conf->cqm_rssi_thold &&
2394 	    rssi_hyst == bss_conf->cqm_rssi_hyst)
2395 		return 0;
2396 
2397 	bss_conf->cqm_rssi_thold = rssi_thold;
2398 	bss_conf->cqm_rssi_hyst = rssi_hyst;
2399 
2400 	/* tell the driver upon association, unless already associated */
2401 	if (sdata->u.mgd.associated &&
2402 	    sdata->vif.driver_flags & IEEE80211_VIF_SUPPORTS_CQM_RSSI)
2403 		ieee80211_bss_info_change_notify(sdata, BSS_CHANGED_CQM);
2404 
2405 	return 0;
2406 }
2407 
2408 static int ieee80211_set_bitrate_mask(struct wiphy *wiphy,
2409 				      struct net_device *dev,
2410 				      const u8 *addr,
2411 				      const struct cfg80211_bitrate_mask *mask)
2412 {
2413 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2414 	struct ieee80211_local *local = wdev_priv(dev->ieee80211_ptr);
2415 	int i, ret;
2416 
2417 	if (!ieee80211_sdata_running(sdata))
2418 		return -ENETDOWN;
2419 
2420 	if (local->hw.flags & IEEE80211_HW_HAS_RATE_CONTROL) {
2421 		ret = drv_set_bitrate_mask(local, sdata, mask);
2422 		if (ret)
2423 			return ret;
2424 	}
2425 
2426 	for (i = 0; i < IEEE80211_NUM_BANDS; i++) {
2427 		struct ieee80211_supported_band *sband = wiphy->bands[i];
2428 		int j;
2429 
2430 		sdata->rc_rateidx_mask[i] = mask->control[i].legacy;
2431 		memcpy(sdata->rc_rateidx_mcs_mask[i], mask->control[i].mcs,
2432 		       sizeof(mask->control[i].mcs));
2433 
2434 		sdata->rc_has_mcs_mask[i] = false;
2435 		if (!sband)
2436 			continue;
2437 
2438 		for (j = 0; j < IEEE80211_HT_MCS_MASK_LEN; j++)
2439 			if (~sdata->rc_rateidx_mcs_mask[i][j]) {
2440 				sdata->rc_has_mcs_mask[i] = true;
2441 				break;
2442 			}
2443 	}
2444 
2445 	return 0;
2446 }
2447 
2448 static int ieee80211_start_roc_work(struct ieee80211_local *local,
2449 				    struct ieee80211_sub_if_data *sdata,
2450 				    struct ieee80211_channel *channel,
2451 				    unsigned int duration, u64 *cookie,
2452 				    struct sk_buff *txskb,
2453 				    enum ieee80211_roc_type type)
2454 {
2455 	struct ieee80211_roc_work *roc, *tmp;
2456 	bool queued = false;
2457 	int ret;
2458 
2459 	lockdep_assert_held(&local->mtx);
2460 
2461 	if (local->use_chanctx && !local->ops->remain_on_channel)
2462 		return -EOPNOTSUPP;
2463 
2464 	roc = kzalloc(sizeof(*roc), GFP_KERNEL);
2465 	if (!roc)
2466 		return -ENOMEM;
2467 
2468 	roc->chan = channel;
2469 	roc->duration = duration;
2470 	roc->req_duration = duration;
2471 	roc->frame = txskb;
2472 	roc->type = type;
2473 	roc->mgmt_tx_cookie = (unsigned long)txskb;
2474 	roc->sdata = sdata;
2475 	INIT_DELAYED_WORK(&roc->work, ieee80211_sw_roc_work);
2476 	INIT_LIST_HEAD(&roc->dependents);
2477 
2478 	/* if there's one pending or we're scanning, queue this one */
2479 	if (!list_empty(&local->roc_list) ||
2480 	    local->scanning || local->radar_detect_enabled)
2481 		goto out_check_combine;
2482 
2483 	/* if not HW assist, just queue & schedule work */
2484 	if (!local->ops->remain_on_channel) {
2485 		ieee80211_queue_delayed_work(&local->hw, &roc->work, 0);
2486 		goto out_queue;
2487 	}
2488 
2489 	/* otherwise actually kick it off here (for error handling) */
2490 
2491 	/*
2492 	 * If the duration is zero, then the driver
2493 	 * wouldn't actually do anything. Set it to
2494 	 * 10 for now.
2495 	 *
2496 	 * TODO: cancel the off-channel operation
2497 	 *       when we get the SKB's TX status and
2498 	 *       the wait time was zero before.
2499 	 */
2500 	if (!duration)
2501 		duration = 10;
2502 
2503 	ret = drv_remain_on_channel(local, sdata, channel, duration, type);
2504 	if (ret) {
2505 		kfree(roc);
2506 		return ret;
2507 	}
2508 
2509 	roc->started = true;
2510 	goto out_queue;
2511 
2512  out_check_combine:
2513 	list_for_each_entry(tmp, &local->roc_list, list) {
2514 		if (tmp->chan != channel || tmp->sdata != sdata)
2515 			continue;
2516 
2517 		/*
2518 		 * Extend this ROC if possible:
2519 		 *
2520 		 * If it hasn't started yet, just increase the duration
2521 		 * and add the new one to the list of dependents.
2522 		 * If the type of the new ROC has higher priority, modify the
2523 		 * type of the previous one to match that of the new one.
2524 		 */
2525 		if (!tmp->started) {
2526 			list_add_tail(&roc->list, &tmp->dependents);
2527 			tmp->duration = max(tmp->duration, roc->duration);
2528 			tmp->type = max(tmp->type, roc->type);
2529 			queued = true;
2530 			break;
2531 		}
2532 
2533 		/* If it has already started, it's more difficult ... */
2534 		if (local->ops->remain_on_channel) {
2535 			unsigned long j = jiffies;
2536 
2537 			/*
2538 			 * In the offloaded ROC case, if it hasn't begun, add
2539 			 * this new one to the dependent list to be handled
2540 			 * when the master one begins. If it has begun,
2541 			 * check that there's still a minimum time left and
2542 			 * if so, start this one, transmitting the frame, but
2543 			 * add it to the list directly after this one with
2544 			 * a reduced time so we'll ask the driver to execute
2545 			 * it right after finishing the previous one, in the
2546 			 * hope that it'll also be executed right afterwards,
2547 			 * effectively extending the old one.
2548 			 * If there's no minimum time left, just add it to the
2549 			 * normal list.
2550 			 * TODO: the ROC type is ignored here, assuming that it
2551 			 * is better to immediately use the current ROC.
2552 			 */
2553 			if (!tmp->hw_begun) {
2554 				list_add_tail(&roc->list, &tmp->dependents);
2555 				queued = true;
2556 				break;
2557 			}
2558 
2559 			if (time_before(j + IEEE80211_ROC_MIN_LEFT,
2560 					tmp->hw_start_time +
2561 					msecs_to_jiffies(tmp->duration))) {
2562 				int new_dur;
2563 
2564 				ieee80211_handle_roc_started(roc);
2565 
2566 				new_dur = roc->duration -
2567 					  jiffies_to_msecs(tmp->hw_start_time +
2568 							   msecs_to_jiffies(
2569 								tmp->duration) -
2570 							   j);
2571 
2572 				if (new_dur > 0) {
2573 					/* add right after tmp */
2574 					list_add(&roc->list, &tmp->list);
2575 				} else {
2576 					list_add_tail(&roc->list,
2577 						      &tmp->dependents);
2578 				}
2579 				queued = true;
2580 			}
2581 		} else if (del_timer_sync(&tmp->work.timer)) {
2582 			unsigned long new_end;
2583 
2584 			/*
2585 			 * In the software ROC case, cancel the timer, if
2586 			 * that fails then the finish work is already
2587 			 * queued/pending and thus we queue the new ROC
2588 			 * normally, if that succeeds then we can extend
2589 			 * the timer duration and TX the frame (if any.)
2590 			 */
2591 
2592 			list_add_tail(&roc->list, &tmp->dependents);
2593 			queued = true;
2594 
2595 			new_end = jiffies + msecs_to_jiffies(roc->duration);
2596 
2597 			/* ok, it was started & we canceled timer */
2598 			if (time_after(new_end, tmp->work.timer.expires))
2599 				mod_timer(&tmp->work.timer, new_end);
2600 			else
2601 				add_timer(&tmp->work.timer);
2602 
2603 			ieee80211_handle_roc_started(roc);
2604 		}
2605 		break;
2606 	}
2607 
2608  out_queue:
2609 	if (!queued)
2610 		list_add_tail(&roc->list, &local->roc_list);
2611 
2612 	/*
2613 	 * cookie is either the roc cookie (for normal roc)
2614 	 * or the SKB (for mgmt TX)
2615 	 */
2616 	if (!txskb) {
2617 		/* local->mtx protects this */
2618 		local->roc_cookie_counter++;
2619 		roc->cookie = local->roc_cookie_counter;
2620 		/* wow, you wrapped 64 bits ... more likely a bug */
2621 		if (WARN_ON(roc->cookie == 0)) {
2622 			roc->cookie = 1;
2623 			local->roc_cookie_counter++;
2624 		}
2625 		*cookie = roc->cookie;
2626 	} else {
2627 		*cookie = (unsigned long)txskb;
2628 	}
2629 
2630 	return 0;
2631 }
2632 
2633 static int ieee80211_remain_on_channel(struct wiphy *wiphy,
2634 				       struct wireless_dev *wdev,
2635 				       struct ieee80211_channel *chan,
2636 				       unsigned int duration,
2637 				       u64 *cookie)
2638 {
2639 	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2640 	struct ieee80211_local *local = sdata->local;
2641 	int ret;
2642 
2643 	mutex_lock(&local->mtx);
2644 	ret = ieee80211_start_roc_work(local, sdata, chan,
2645 				       duration, cookie, NULL,
2646 				       IEEE80211_ROC_TYPE_NORMAL);
2647 	mutex_unlock(&local->mtx);
2648 
2649 	return ret;
2650 }
2651 
2652 static int ieee80211_cancel_roc(struct ieee80211_local *local,
2653 				u64 cookie, bool mgmt_tx)
2654 {
2655 	struct ieee80211_roc_work *roc, *tmp, *found = NULL;
2656 	int ret;
2657 
2658 	mutex_lock(&local->mtx);
2659 	list_for_each_entry_safe(roc, tmp, &local->roc_list, list) {
2660 		struct ieee80211_roc_work *dep, *tmp2;
2661 
2662 		list_for_each_entry_safe(dep, tmp2, &roc->dependents, list) {
2663 			if (!mgmt_tx && dep->cookie != cookie)
2664 				continue;
2665 			else if (mgmt_tx && dep->mgmt_tx_cookie != cookie)
2666 				continue;
2667 			/* found dependent item -- just remove it */
2668 			list_del(&dep->list);
2669 			mutex_unlock(&local->mtx);
2670 
2671 			ieee80211_roc_notify_destroy(dep, true);
2672 			return 0;
2673 		}
2674 
2675 		if (!mgmt_tx && roc->cookie != cookie)
2676 			continue;
2677 		else if (mgmt_tx && roc->mgmt_tx_cookie != cookie)
2678 			continue;
2679 
2680 		found = roc;
2681 		break;
2682 	}
2683 
2684 	if (!found) {
2685 		mutex_unlock(&local->mtx);
2686 		return -ENOENT;
2687 	}
2688 
2689 	/*
2690 	 * We found the item to cancel, so do that. Note that it
2691 	 * may have dependents, which we also cancel (and send
2692 	 * the expired signal for.) Not doing so would be quite
2693 	 * tricky here, but we may need to fix it later.
2694 	 */
2695 
2696 	if (local->ops->remain_on_channel) {
2697 		if (found->started) {
2698 			ret = drv_cancel_remain_on_channel(local);
2699 			if (WARN_ON_ONCE(ret)) {
2700 				mutex_unlock(&local->mtx);
2701 				return ret;
2702 			}
2703 		}
2704 
2705 		list_del(&found->list);
2706 
2707 		if (found->started)
2708 			ieee80211_start_next_roc(local);
2709 		mutex_unlock(&local->mtx);
2710 
2711 		ieee80211_roc_notify_destroy(found, true);
2712 	} else {
2713 		/* work may be pending so use it all the time */
2714 		found->abort = true;
2715 		ieee80211_queue_delayed_work(&local->hw, &found->work, 0);
2716 
2717 		mutex_unlock(&local->mtx);
2718 
2719 		/* work will clean up etc */
2720 		flush_delayed_work(&found->work);
2721 		WARN_ON(!found->to_be_freed);
2722 		kfree(found);
2723 	}
2724 
2725 	return 0;
2726 }
2727 
2728 static int ieee80211_cancel_remain_on_channel(struct wiphy *wiphy,
2729 					      struct wireless_dev *wdev,
2730 					      u64 cookie)
2731 {
2732 	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2733 	struct ieee80211_local *local = sdata->local;
2734 
2735 	return ieee80211_cancel_roc(local, cookie, false);
2736 }
2737 
2738 static int ieee80211_start_radar_detection(struct wiphy *wiphy,
2739 					   struct net_device *dev,
2740 					   struct cfg80211_chan_def *chandef)
2741 {
2742 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2743 	struct ieee80211_local *local = sdata->local;
2744 	unsigned long timeout;
2745 	int err;
2746 
2747 	if (!list_empty(&local->roc_list) || local->scanning)
2748 		return -EBUSY;
2749 
2750 	/* whatever, but channel contexts should not complain about that one */
2751 	sdata->smps_mode = IEEE80211_SMPS_OFF;
2752 	sdata->needed_rx_chains = local->rx_chains;
2753 	sdata->radar_required = true;
2754 
2755 	mutex_lock(&local->iflist_mtx);
2756 	err = ieee80211_vif_use_channel(sdata, chandef,
2757 					IEEE80211_CHANCTX_SHARED);
2758 	mutex_unlock(&local->iflist_mtx);
2759 	if (err)
2760 		return err;
2761 
2762 	timeout = msecs_to_jiffies(IEEE80211_DFS_MIN_CAC_TIME_MS);
2763 	ieee80211_queue_delayed_work(&sdata->local->hw,
2764 				     &sdata->dfs_cac_timer_work, timeout);
2765 
2766 	return 0;
2767 }
2768 
2769 static int ieee80211_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev,
2770 			     struct ieee80211_channel *chan, bool offchan,
2771 			     unsigned int wait, const u8 *buf, size_t len,
2772 			     bool no_cck, bool dont_wait_for_ack, u64 *cookie)
2773 {
2774 	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2775 	struct ieee80211_local *local = sdata->local;
2776 	struct sk_buff *skb;
2777 	struct sta_info *sta;
2778 	const struct ieee80211_mgmt *mgmt = (void *)buf;
2779 	bool need_offchan = false;
2780 	u32 flags;
2781 	int ret;
2782 
2783 	if (dont_wait_for_ack)
2784 		flags = IEEE80211_TX_CTL_NO_ACK;
2785 	else
2786 		flags = IEEE80211_TX_INTFL_NL80211_FRAME_TX |
2787 			IEEE80211_TX_CTL_REQ_TX_STATUS;
2788 
2789 	if (no_cck)
2790 		flags |= IEEE80211_TX_CTL_NO_CCK_RATE;
2791 
2792 	switch (sdata->vif.type) {
2793 	case NL80211_IFTYPE_ADHOC:
2794 		if (!sdata->vif.bss_conf.ibss_joined)
2795 			need_offchan = true;
2796 		/* fall through */
2797 #ifdef CONFIG_MAC80211_MESH
2798 	case NL80211_IFTYPE_MESH_POINT:
2799 		if (ieee80211_vif_is_mesh(&sdata->vif) &&
2800 		    !sdata->u.mesh.mesh_id_len)
2801 			need_offchan = true;
2802 		/* fall through */
2803 #endif
2804 	case NL80211_IFTYPE_AP:
2805 	case NL80211_IFTYPE_AP_VLAN:
2806 	case NL80211_IFTYPE_P2P_GO:
2807 		if (sdata->vif.type != NL80211_IFTYPE_ADHOC &&
2808 		    !ieee80211_vif_is_mesh(&sdata->vif) &&
2809 		    !rcu_access_pointer(sdata->bss->beacon))
2810 			need_offchan = true;
2811 		if (!ieee80211_is_action(mgmt->frame_control) ||
2812 		    mgmt->u.action.category == WLAN_CATEGORY_PUBLIC)
2813 			break;
2814 		rcu_read_lock();
2815 		sta = sta_info_get(sdata, mgmt->da);
2816 		rcu_read_unlock();
2817 		if (!sta)
2818 			return -ENOLINK;
2819 		break;
2820 	case NL80211_IFTYPE_STATION:
2821 	case NL80211_IFTYPE_P2P_CLIENT:
2822 		if (!sdata->u.mgd.associated)
2823 			need_offchan = true;
2824 		break;
2825 	case NL80211_IFTYPE_P2P_DEVICE:
2826 		need_offchan = true;
2827 		break;
2828 	default:
2829 		return -EOPNOTSUPP;
2830 	}
2831 
2832 	mutex_lock(&local->mtx);
2833 
2834 	/* Check if the operating channel is the requested channel */
2835 	if (!need_offchan) {
2836 		struct ieee80211_chanctx_conf *chanctx_conf;
2837 
2838 		rcu_read_lock();
2839 		chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
2840 
2841 		if (chanctx_conf)
2842 			need_offchan = chan != chanctx_conf->def.chan;
2843 		else
2844 			need_offchan = true;
2845 		rcu_read_unlock();
2846 	}
2847 
2848 	if (need_offchan && !offchan) {
2849 		ret = -EBUSY;
2850 		goto out_unlock;
2851 	}
2852 
2853 	skb = dev_alloc_skb(local->hw.extra_tx_headroom + len);
2854 	if (!skb) {
2855 		ret = -ENOMEM;
2856 		goto out_unlock;
2857 	}
2858 	skb_reserve(skb, local->hw.extra_tx_headroom);
2859 
2860 	memcpy(skb_put(skb, len), buf, len);
2861 
2862 	IEEE80211_SKB_CB(skb)->flags = flags;
2863 
2864 	skb->dev = sdata->dev;
2865 
2866 	if (!need_offchan) {
2867 		*cookie = (unsigned long) skb;
2868 		ieee80211_tx_skb(sdata, skb);
2869 		ret = 0;
2870 		goto out_unlock;
2871 	}
2872 
2873 	IEEE80211_SKB_CB(skb)->flags |= IEEE80211_TX_CTL_TX_OFFCHAN |
2874 					IEEE80211_TX_INTFL_OFFCHAN_TX_OK;
2875 	if (local->hw.flags & IEEE80211_HW_QUEUE_CONTROL)
2876 		IEEE80211_SKB_CB(skb)->hw_queue =
2877 			local->hw.offchannel_tx_hw_queue;
2878 
2879 	/* This will handle all kinds of coalescing and immediate TX */
2880 	ret = ieee80211_start_roc_work(local, sdata, chan,
2881 				       wait, cookie, skb,
2882 				       IEEE80211_ROC_TYPE_MGMT_TX);
2883 	if (ret)
2884 		kfree_skb(skb);
2885  out_unlock:
2886 	mutex_unlock(&local->mtx);
2887 	return ret;
2888 }
2889 
2890 static int ieee80211_mgmt_tx_cancel_wait(struct wiphy *wiphy,
2891 					 struct wireless_dev *wdev,
2892 					 u64 cookie)
2893 {
2894 	struct ieee80211_local *local = wiphy_priv(wiphy);
2895 
2896 	return ieee80211_cancel_roc(local, cookie, true);
2897 }
2898 
2899 static void ieee80211_mgmt_frame_register(struct wiphy *wiphy,
2900 					  struct wireless_dev *wdev,
2901 					  u16 frame_type, bool reg)
2902 {
2903 	struct ieee80211_local *local = wiphy_priv(wiphy);
2904 	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
2905 
2906 	switch (frame_type) {
2907 	case IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_AUTH:
2908 		if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
2909 			struct ieee80211_if_ibss *ifibss = &sdata->u.ibss;
2910 
2911 			if (reg)
2912 				ifibss->auth_frame_registrations++;
2913 			else
2914 				ifibss->auth_frame_registrations--;
2915 		}
2916 		break;
2917 	case IEEE80211_FTYPE_MGMT | IEEE80211_STYPE_PROBE_REQ:
2918 		if (reg)
2919 			local->probe_req_reg++;
2920 		else
2921 			local->probe_req_reg--;
2922 
2923 		if (!local->open_count)
2924 			break;
2925 
2926 		ieee80211_queue_work(&local->hw, &local->reconfig_filter);
2927 		break;
2928 	default:
2929 		break;
2930 	}
2931 }
2932 
2933 static int ieee80211_set_antenna(struct wiphy *wiphy, u32 tx_ant, u32 rx_ant)
2934 {
2935 	struct ieee80211_local *local = wiphy_priv(wiphy);
2936 
2937 	if (local->started)
2938 		return -EOPNOTSUPP;
2939 
2940 	return drv_set_antenna(local, tx_ant, rx_ant);
2941 }
2942 
2943 static int ieee80211_get_antenna(struct wiphy *wiphy, u32 *tx_ant, u32 *rx_ant)
2944 {
2945 	struct ieee80211_local *local = wiphy_priv(wiphy);
2946 
2947 	return drv_get_antenna(local, tx_ant, rx_ant);
2948 }
2949 
2950 static int ieee80211_set_ringparam(struct wiphy *wiphy, u32 tx, u32 rx)
2951 {
2952 	struct ieee80211_local *local = wiphy_priv(wiphy);
2953 
2954 	return drv_set_ringparam(local, tx, rx);
2955 }
2956 
2957 static void ieee80211_get_ringparam(struct wiphy *wiphy,
2958 				    u32 *tx, u32 *tx_max, u32 *rx, u32 *rx_max)
2959 {
2960 	struct ieee80211_local *local = wiphy_priv(wiphy);
2961 
2962 	drv_get_ringparam(local, tx, tx_max, rx, rx_max);
2963 }
2964 
2965 static int ieee80211_set_rekey_data(struct wiphy *wiphy,
2966 				    struct net_device *dev,
2967 				    struct cfg80211_gtk_rekey_data *data)
2968 {
2969 	struct ieee80211_local *local = wiphy_priv(wiphy);
2970 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2971 
2972 	if (!local->ops->set_rekey_data)
2973 		return -EOPNOTSUPP;
2974 
2975 	drv_set_rekey_data(local, sdata, data);
2976 
2977 	return 0;
2978 }
2979 
2980 static void ieee80211_tdls_add_ext_capab(struct sk_buff *skb)
2981 {
2982 	u8 *pos = (void *)skb_put(skb, 7);
2983 
2984 	*pos++ = WLAN_EID_EXT_CAPABILITY;
2985 	*pos++ = 5; /* len */
2986 	*pos++ = 0x0;
2987 	*pos++ = 0x0;
2988 	*pos++ = 0x0;
2989 	*pos++ = 0x0;
2990 	*pos++ = WLAN_EXT_CAPA5_TDLS_ENABLED;
2991 }
2992 
2993 static u16 ieee80211_get_tdls_sta_capab(struct ieee80211_sub_if_data *sdata)
2994 {
2995 	struct ieee80211_local *local = sdata->local;
2996 	u16 capab;
2997 
2998 	capab = 0;
2999 	if (ieee80211_get_sdata_band(sdata) != IEEE80211_BAND_2GHZ)
3000 		return capab;
3001 
3002 	if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_SLOT_INCAPABLE))
3003 		capab |= WLAN_CAPABILITY_SHORT_SLOT_TIME;
3004 	if (!(local->hw.flags & IEEE80211_HW_2GHZ_SHORT_PREAMBLE_INCAPABLE))
3005 		capab |= WLAN_CAPABILITY_SHORT_PREAMBLE;
3006 
3007 	return capab;
3008 }
3009 
3010 static void ieee80211_tdls_add_link_ie(struct sk_buff *skb, u8 *src_addr,
3011 				       u8 *peer, u8 *bssid)
3012 {
3013 	struct ieee80211_tdls_lnkie *lnkid;
3014 
3015 	lnkid = (void *)skb_put(skb, sizeof(struct ieee80211_tdls_lnkie));
3016 
3017 	lnkid->ie_type = WLAN_EID_LINK_ID;
3018 	lnkid->ie_len = sizeof(struct ieee80211_tdls_lnkie) - 2;
3019 
3020 	memcpy(lnkid->bssid, bssid, ETH_ALEN);
3021 	memcpy(lnkid->init_sta, src_addr, ETH_ALEN);
3022 	memcpy(lnkid->resp_sta, peer, ETH_ALEN);
3023 }
3024 
3025 static int
3026 ieee80211_prep_tdls_encap_data(struct wiphy *wiphy, struct net_device *dev,
3027 			       u8 *peer, u8 action_code, u8 dialog_token,
3028 			       u16 status_code, struct sk_buff *skb)
3029 {
3030 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3031 	enum ieee80211_band band = ieee80211_get_sdata_band(sdata);
3032 	struct ieee80211_tdls_data *tf;
3033 
3034 	tf = (void *)skb_put(skb, offsetof(struct ieee80211_tdls_data, u));
3035 
3036 	memcpy(tf->da, peer, ETH_ALEN);
3037 	memcpy(tf->sa, sdata->vif.addr, ETH_ALEN);
3038 	tf->ether_type = cpu_to_be16(ETH_P_TDLS);
3039 	tf->payload_type = WLAN_TDLS_SNAP_RFTYPE;
3040 
3041 	switch (action_code) {
3042 	case WLAN_TDLS_SETUP_REQUEST:
3043 		tf->category = WLAN_CATEGORY_TDLS;
3044 		tf->action_code = WLAN_TDLS_SETUP_REQUEST;
3045 
3046 		skb_put(skb, sizeof(tf->u.setup_req));
3047 		tf->u.setup_req.dialog_token = dialog_token;
3048 		tf->u.setup_req.capability =
3049 			cpu_to_le16(ieee80211_get_tdls_sta_capab(sdata));
3050 
3051 		ieee80211_add_srates_ie(sdata, skb, false, band);
3052 		ieee80211_add_ext_srates_ie(sdata, skb, false, band);
3053 		ieee80211_tdls_add_ext_capab(skb);
3054 		break;
3055 	case WLAN_TDLS_SETUP_RESPONSE:
3056 		tf->category = WLAN_CATEGORY_TDLS;
3057 		tf->action_code = WLAN_TDLS_SETUP_RESPONSE;
3058 
3059 		skb_put(skb, sizeof(tf->u.setup_resp));
3060 		tf->u.setup_resp.status_code = cpu_to_le16(status_code);
3061 		tf->u.setup_resp.dialog_token = dialog_token;
3062 		tf->u.setup_resp.capability =
3063 			cpu_to_le16(ieee80211_get_tdls_sta_capab(sdata));
3064 
3065 		ieee80211_add_srates_ie(sdata, skb, false, band);
3066 		ieee80211_add_ext_srates_ie(sdata, skb, false, band);
3067 		ieee80211_tdls_add_ext_capab(skb);
3068 		break;
3069 	case WLAN_TDLS_SETUP_CONFIRM:
3070 		tf->category = WLAN_CATEGORY_TDLS;
3071 		tf->action_code = WLAN_TDLS_SETUP_CONFIRM;
3072 
3073 		skb_put(skb, sizeof(tf->u.setup_cfm));
3074 		tf->u.setup_cfm.status_code = cpu_to_le16(status_code);
3075 		tf->u.setup_cfm.dialog_token = dialog_token;
3076 		break;
3077 	case WLAN_TDLS_TEARDOWN:
3078 		tf->category = WLAN_CATEGORY_TDLS;
3079 		tf->action_code = WLAN_TDLS_TEARDOWN;
3080 
3081 		skb_put(skb, sizeof(tf->u.teardown));
3082 		tf->u.teardown.reason_code = cpu_to_le16(status_code);
3083 		break;
3084 	case WLAN_TDLS_DISCOVERY_REQUEST:
3085 		tf->category = WLAN_CATEGORY_TDLS;
3086 		tf->action_code = WLAN_TDLS_DISCOVERY_REQUEST;
3087 
3088 		skb_put(skb, sizeof(tf->u.discover_req));
3089 		tf->u.discover_req.dialog_token = dialog_token;
3090 		break;
3091 	default:
3092 		return -EINVAL;
3093 	}
3094 
3095 	return 0;
3096 }
3097 
3098 static int
3099 ieee80211_prep_tdls_direct(struct wiphy *wiphy, struct net_device *dev,
3100 			   u8 *peer, u8 action_code, u8 dialog_token,
3101 			   u16 status_code, struct sk_buff *skb)
3102 {
3103 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3104 	enum ieee80211_band band = ieee80211_get_sdata_band(sdata);
3105 	struct ieee80211_mgmt *mgmt;
3106 
3107 	mgmt = (void *)skb_put(skb, 24);
3108 	memset(mgmt, 0, 24);
3109 	memcpy(mgmt->da, peer, ETH_ALEN);
3110 	memcpy(mgmt->sa, sdata->vif.addr, ETH_ALEN);
3111 	memcpy(mgmt->bssid, sdata->u.mgd.bssid, ETH_ALEN);
3112 
3113 	mgmt->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
3114 					  IEEE80211_STYPE_ACTION);
3115 
3116 	switch (action_code) {
3117 	case WLAN_PUB_ACTION_TDLS_DISCOVER_RES:
3118 		skb_put(skb, 1 + sizeof(mgmt->u.action.u.tdls_discover_resp));
3119 		mgmt->u.action.category = WLAN_CATEGORY_PUBLIC;
3120 		mgmt->u.action.u.tdls_discover_resp.action_code =
3121 			WLAN_PUB_ACTION_TDLS_DISCOVER_RES;
3122 		mgmt->u.action.u.tdls_discover_resp.dialog_token =
3123 			dialog_token;
3124 		mgmt->u.action.u.tdls_discover_resp.capability =
3125 			cpu_to_le16(ieee80211_get_tdls_sta_capab(sdata));
3126 
3127 		ieee80211_add_srates_ie(sdata, skb, false, band);
3128 		ieee80211_add_ext_srates_ie(sdata, skb, false, band);
3129 		ieee80211_tdls_add_ext_capab(skb);
3130 		break;
3131 	default:
3132 		return -EINVAL;
3133 	}
3134 
3135 	return 0;
3136 }
3137 
3138 static int ieee80211_tdls_mgmt(struct wiphy *wiphy, struct net_device *dev,
3139 			       u8 *peer, u8 action_code, u8 dialog_token,
3140 			       u16 status_code, const u8 *extra_ies,
3141 			       size_t extra_ies_len)
3142 {
3143 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3144 	struct ieee80211_local *local = sdata->local;
3145 	struct sk_buff *skb = NULL;
3146 	bool send_direct;
3147 	int ret;
3148 
3149 	if (!(wiphy->flags & WIPHY_FLAG_SUPPORTS_TDLS))
3150 		return -ENOTSUPP;
3151 
3152 	/* make sure we are in managed mode, and associated */
3153 	if (sdata->vif.type != NL80211_IFTYPE_STATION ||
3154 	    !sdata->u.mgd.associated)
3155 		return -EINVAL;
3156 
3157 	tdls_dbg(sdata, "TDLS mgmt action %d peer %pM\n",
3158 		 action_code, peer);
3159 
3160 	skb = dev_alloc_skb(local->hw.extra_tx_headroom +
3161 			    max(sizeof(struct ieee80211_mgmt),
3162 				sizeof(struct ieee80211_tdls_data)) +
3163 			    50 + /* supported rates */
3164 			    7 + /* ext capab */
3165 			    extra_ies_len +
3166 			    sizeof(struct ieee80211_tdls_lnkie));
3167 	if (!skb)
3168 		return -ENOMEM;
3169 
3170 	skb_reserve(skb, local->hw.extra_tx_headroom);
3171 
3172 	switch (action_code) {
3173 	case WLAN_TDLS_SETUP_REQUEST:
3174 	case WLAN_TDLS_SETUP_RESPONSE:
3175 	case WLAN_TDLS_SETUP_CONFIRM:
3176 	case WLAN_TDLS_TEARDOWN:
3177 	case WLAN_TDLS_DISCOVERY_REQUEST:
3178 		ret = ieee80211_prep_tdls_encap_data(wiphy, dev, peer,
3179 						     action_code, dialog_token,
3180 						     status_code, skb);
3181 		send_direct = false;
3182 		break;
3183 	case WLAN_PUB_ACTION_TDLS_DISCOVER_RES:
3184 		ret = ieee80211_prep_tdls_direct(wiphy, dev, peer, action_code,
3185 						 dialog_token, status_code,
3186 						 skb);
3187 		send_direct = true;
3188 		break;
3189 	default:
3190 		ret = -ENOTSUPP;
3191 		break;
3192 	}
3193 
3194 	if (ret < 0)
3195 		goto fail;
3196 
3197 	if (extra_ies_len)
3198 		memcpy(skb_put(skb, extra_ies_len), extra_ies, extra_ies_len);
3199 
3200 	/* the TDLS link IE is always added last */
3201 	switch (action_code) {
3202 	case WLAN_TDLS_SETUP_REQUEST:
3203 	case WLAN_TDLS_SETUP_CONFIRM:
3204 	case WLAN_TDLS_TEARDOWN:
3205 	case WLAN_TDLS_DISCOVERY_REQUEST:
3206 		/* we are the initiator */
3207 		ieee80211_tdls_add_link_ie(skb, sdata->vif.addr, peer,
3208 					   sdata->u.mgd.bssid);
3209 		break;
3210 	case WLAN_TDLS_SETUP_RESPONSE:
3211 	case WLAN_PUB_ACTION_TDLS_DISCOVER_RES:
3212 		/* we are the responder */
3213 		ieee80211_tdls_add_link_ie(skb, peer, sdata->vif.addr,
3214 					   sdata->u.mgd.bssid);
3215 		break;
3216 	default:
3217 		ret = -ENOTSUPP;
3218 		goto fail;
3219 	}
3220 
3221 	if (send_direct) {
3222 		ieee80211_tx_skb(sdata, skb);
3223 		return 0;
3224 	}
3225 
3226 	/*
3227 	 * According to 802.11z: Setup req/resp are sent in AC_BK, otherwise
3228 	 * we should default to AC_VI.
3229 	 */
3230 	switch (action_code) {
3231 	case WLAN_TDLS_SETUP_REQUEST:
3232 	case WLAN_TDLS_SETUP_RESPONSE:
3233 		skb_set_queue_mapping(skb, IEEE80211_AC_BK);
3234 		skb->priority = 2;
3235 		break;
3236 	default:
3237 		skb_set_queue_mapping(skb, IEEE80211_AC_VI);
3238 		skb->priority = 5;
3239 		break;
3240 	}
3241 
3242 	/* disable bottom halves when entering the Tx path */
3243 	local_bh_disable();
3244 	ret = ieee80211_subif_start_xmit(skb, dev);
3245 	local_bh_enable();
3246 
3247 	return ret;
3248 
3249 fail:
3250 	dev_kfree_skb(skb);
3251 	return ret;
3252 }
3253 
3254 static int ieee80211_tdls_oper(struct wiphy *wiphy, struct net_device *dev,
3255 			       u8 *peer, enum nl80211_tdls_operation oper)
3256 {
3257 	struct sta_info *sta;
3258 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3259 
3260 	if (!(wiphy->flags & WIPHY_FLAG_SUPPORTS_TDLS))
3261 		return -ENOTSUPP;
3262 
3263 	if (sdata->vif.type != NL80211_IFTYPE_STATION)
3264 		return -EINVAL;
3265 
3266 	tdls_dbg(sdata, "TDLS oper %d peer %pM\n", oper, peer);
3267 
3268 	switch (oper) {
3269 	case NL80211_TDLS_ENABLE_LINK:
3270 		rcu_read_lock();
3271 		sta = sta_info_get(sdata, peer);
3272 		if (!sta) {
3273 			rcu_read_unlock();
3274 			return -ENOLINK;
3275 		}
3276 
3277 		set_sta_flag(sta, WLAN_STA_TDLS_PEER_AUTH);
3278 		rcu_read_unlock();
3279 		break;
3280 	case NL80211_TDLS_DISABLE_LINK:
3281 		return sta_info_destroy_addr(sdata, peer);
3282 	case NL80211_TDLS_TEARDOWN:
3283 	case NL80211_TDLS_SETUP:
3284 	case NL80211_TDLS_DISCOVERY_REQ:
3285 		/* We don't support in-driver setup/teardown/discovery */
3286 		return -ENOTSUPP;
3287 	default:
3288 		return -ENOTSUPP;
3289 	}
3290 
3291 	return 0;
3292 }
3293 
3294 static int ieee80211_probe_client(struct wiphy *wiphy, struct net_device *dev,
3295 				  const u8 *peer, u64 *cookie)
3296 {
3297 	struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3298 	struct ieee80211_local *local = sdata->local;
3299 	struct ieee80211_qos_hdr *nullfunc;
3300 	struct sk_buff *skb;
3301 	int size = sizeof(*nullfunc);
3302 	__le16 fc;
3303 	bool qos;
3304 	struct ieee80211_tx_info *info;
3305 	struct sta_info *sta;
3306 	struct ieee80211_chanctx_conf *chanctx_conf;
3307 	enum ieee80211_band band;
3308 
3309 	rcu_read_lock();
3310 	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3311 	if (WARN_ON(!chanctx_conf)) {
3312 		rcu_read_unlock();
3313 		return -EINVAL;
3314 	}
3315 	band = chanctx_conf->def.chan->band;
3316 	sta = sta_info_get(sdata, peer);
3317 	if (sta) {
3318 		qos = test_sta_flag(sta, WLAN_STA_WME);
3319 	} else {
3320 		rcu_read_unlock();
3321 		return -ENOLINK;
3322 	}
3323 
3324 	if (qos) {
3325 		fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3326 				 IEEE80211_STYPE_QOS_NULLFUNC |
3327 				 IEEE80211_FCTL_FROMDS);
3328 	} else {
3329 		size -= 2;
3330 		fc = cpu_to_le16(IEEE80211_FTYPE_DATA |
3331 				 IEEE80211_STYPE_NULLFUNC |
3332 				 IEEE80211_FCTL_FROMDS);
3333 	}
3334 
3335 	skb = dev_alloc_skb(local->hw.extra_tx_headroom + size);
3336 	if (!skb) {
3337 		rcu_read_unlock();
3338 		return -ENOMEM;
3339 	}
3340 
3341 	skb->dev = dev;
3342 
3343 	skb_reserve(skb, local->hw.extra_tx_headroom);
3344 
3345 	nullfunc = (void *) skb_put(skb, size);
3346 	nullfunc->frame_control = fc;
3347 	nullfunc->duration_id = 0;
3348 	memcpy(nullfunc->addr1, sta->sta.addr, ETH_ALEN);
3349 	memcpy(nullfunc->addr2, sdata->vif.addr, ETH_ALEN);
3350 	memcpy(nullfunc->addr3, sdata->vif.addr, ETH_ALEN);
3351 	nullfunc->seq_ctrl = 0;
3352 
3353 	info = IEEE80211_SKB_CB(skb);
3354 
3355 	info->flags |= IEEE80211_TX_CTL_REQ_TX_STATUS |
3356 		       IEEE80211_TX_INTFL_NL80211_FRAME_TX;
3357 
3358 	skb_set_queue_mapping(skb, IEEE80211_AC_VO);
3359 	skb->priority = 7;
3360 	if (qos)
3361 		nullfunc->qos_ctrl = cpu_to_le16(7);
3362 
3363 	local_bh_disable();
3364 	ieee80211_xmit(sdata, skb, band);
3365 	local_bh_enable();
3366 	rcu_read_unlock();
3367 
3368 	*cookie = (unsigned long) skb;
3369 	return 0;
3370 }
3371 
3372 static int ieee80211_cfg_get_channel(struct wiphy *wiphy,
3373 				     struct wireless_dev *wdev,
3374 				     struct cfg80211_chan_def *chandef)
3375 {
3376 	struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
3377 	struct ieee80211_local *local = wiphy_priv(wiphy);
3378 	struct ieee80211_chanctx_conf *chanctx_conf;
3379 	int ret = -ENODATA;
3380 
3381 	rcu_read_lock();
3382 	chanctx_conf = rcu_dereference(sdata->vif.chanctx_conf);
3383 	if (chanctx_conf) {
3384 		*chandef = chanctx_conf->def;
3385 		ret = 0;
3386 	} else if (local->open_count > 0 &&
3387 		   local->open_count == local->monitors &&
3388 		   sdata->vif.type == NL80211_IFTYPE_MONITOR) {
3389 		if (local->use_chanctx)
3390 			*chandef = local->monitor_chandef;
3391 		else
3392 			*chandef = local->_oper_chandef;
3393 		ret = 0;
3394 	}
3395 	rcu_read_unlock();
3396 
3397 	return ret;
3398 }
3399 
3400 #ifdef CONFIG_PM
3401 static void ieee80211_set_wakeup(struct wiphy *wiphy, bool enabled)
3402 {
3403 	drv_set_wakeup(wiphy_priv(wiphy), enabled);
3404 }
3405 #endif
3406 
3407 struct cfg80211_ops mac80211_config_ops = {
3408 	.add_virtual_intf = ieee80211_add_iface,
3409 	.del_virtual_intf = ieee80211_del_iface,
3410 	.change_virtual_intf = ieee80211_change_iface,
3411 	.start_p2p_device = ieee80211_start_p2p_device,
3412 	.stop_p2p_device = ieee80211_stop_p2p_device,
3413 	.add_key = ieee80211_add_key,
3414 	.del_key = ieee80211_del_key,
3415 	.get_key = ieee80211_get_key,
3416 	.set_default_key = ieee80211_config_default_key,
3417 	.set_default_mgmt_key = ieee80211_config_default_mgmt_key,
3418 	.start_ap = ieee80211_start_ap,
3419 	.change_beacon = ieee80211_change_beacon,
3420 	.stop_ap = ieee80211_stop_ap,
3421 	.add_station = ieee80211_add_station,
3422 	.del_station = ieee80211_del_station,
3423 	.change_station = ieee80211_change_station,
3424 	.get_station = ieee80211_get_station,
3425 	.dump_station = ieee80211_dump_station,
3426 	.dump_survey = ieee80211_dump_survey,
3427 #ifdef CONFIG_MAC80211_MESH
3428 	.add_mpath = ieee80211_add_mpath,
3429 	.del_mpath = ieee80211_del_mpath,
3430 	.change_mpath = ieee80211_change_mpath,
3431 	.get_mpath = ieee80211_get_mpath,
3432 	.dump_mpath = ieee80211_dump_mpath,
3433 	.update_mesh_config = ieee80211_update_mesh_config,
3434 	.get_mesh_config = ieee80211_get_mesh_config,
3435 	.join_mesh = ieee80211_join_mesh,
3436 	.leave_mesh = ieee80211_leave_mesh,
3437 #endif
3438 	.change_bss = ieee80211_change_bss,
3439 	.set_txq_params = ieee80211_set_txq_params,
3440 	.set_monitor_channel = ieee80211_set_monitor_channel,
3441 	.suspend = ieee80211_suspend,
3442 	.resume = ieee80211_resume,
3443 	.scan = ieee80211_scan,
3444 	.sched_scan_start = ieee80211_sched_scan_start,
3445 	.sched_scan_stop = ieee80211_sched_scan_stop,
3446 	.auth = ieee80211_auth,
3447 	.assoc = ieee80211_assoc,
3448 	.deauth = ieee80211_deauth,
3449 	.disassoc = ieee80211_disassoc,
3450 	.join_ibss = ieee80211_join_ibss,
3451 	.leave_ibss = ieee80211_leave_ibss,
3452 	.set_mcast_rate = ieee80211_set_mcast_rate,
3453 	.set_wiphy_params = ieee80211_set_wiphy_params,
3454 	.set_tx_power = ieee80211_set_tx_power,
3455 	.get_tx_power = ieee80211_get_tx_power,
3456 	.set_wds_peer = ieee80211_set_wds_peer,
3457 	.rfkill_poll = ieee80211_rfkill_poll,
3458 	CFG80211_TESTMODE_CMD(ieee80211_testmode_cmd)
3459 	CFG80211_TESTMODE_DUMP(ieee80211_testmode_dump)
3460 	.set_power_mgmt = ieee80211_set_power_mgmt,
3461 	.set_bitrate_mask = ieee80211_set_bitrate_mask,
3462 	.remain_on_channel = ieee80211_remain_on_channel,
3463 	.cancel_remain_on_channel = ieee80211_cancel_remain_on_channel,
3464 	.mgmt_tx = ieee80211_mgmt_tx,
3465 	.mgmt_tx_cancel_wait = ieee80211_mgmt_tx_cancel_wait,
3466 	.set_cqm_rssi_config = ieee80211_set_cqm_rssi_config,
3467 	.mgmt_frame_register = ieee80211_mgmt_frame_register,
3468 	.set_antenna = ieee80211_set_antenna,
3469 	.get_antenna = ieee80211_get_antenna,
3470 	.set_ringparam = ieee80211_set_ringparam,
3471 	.get_ringparam = ieee80211_get_ringparam,
3472 	.set_rekey_data = ieee80211_set_rekey_data,
3473 	.tdls_oper = ieee80211_tdls_oper,
3474 	.tdls_mgmt = ieee80211_tdls_mgmt,
3475 	.probe_client = ieee80211_probe_client,
3476 	.set_noack_map = ieee80211_set_noack_map,
3477 #ifdef CONFIG_PM
3478 	.set_wakeup = ieee80211_set_wakeup,
3479 #endif
3480 	.get_et_sset_count = ieee80211_get_et_sset_count,
3481 	.get_et_stats = ieee80211_get_et_stats,
3482 	.get_et_strings = ieee80211_get_et_strings,
3483 	.get_channel = ieee80211_cfg_get_channel,
3484 	.start_radar_detection = ieee80211_start_radar_detection,
3485 };
3486