wifi: mac80211: move DFS CAC work to wiphy work
[linux-block.git] / net / mac80211 / iface.c
CommitLineData
d2912cb1 1// SPDX-License-Identifier: GPL-2.0-only
f0706e82 2/*
c5d54fbf 3 * Interface handling
0d143fe1 4 *
f0706e82
JB
5 * Copyright 2002-2005, Instant802 Networks, Inc.
6 * Copyright 2005-2006, Devicescape Software, Inc.
7 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
75636525 8 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
d98ad83e 9 * Copyright 2013-2014 Intel Mobile Communications GmbH
d2941df8 10 * Copyright (c) 2016 Intel Deutschland GmbH
15ddba5f 11 * Copyright (C) 2018-2023 Intel Corporation
f0706e82 12 */
5a0e3ad6 13#include <linux/slab.h>
f0706e82
JB
14#include <linux/kernel.h>
15#include <linux/if_arp.h>
16#include <linux/netdevice.h>
17#include <linux/rtnetlink.h>
183f47fc 18#include <linux/kcov.h>
f0706e82 19#include <net/mac80211.h>
cf0277e7 20#include <net/ieee80211_radiotap.h>
f0706e82
JB
21#include "ieee80211_i.h"
22#include "sta_info.h"
e9f207f0 23#include "debugfs_netdev.h"
ee385855 24#include "mesh.h"
0d143fe1 25#include "led.h"
24487981 26#include "driver-ops.h"
cf0277e7 27#include "wme.h"
1be7fe8d 28#include "rate.h"
0d143fe1 29
c771c9d8
JB
30/**
31 * DOC: Interface list locking
32 *
33 * The interface list in each struct ieee80211_local is protected
34 * three-fold:
35 *
36 * (1) modifications may only be done under the RTNL
37 * (2) modifications and readers are protected against each other by
38 * the iflist_mtx.
39 * (3) modifications are done in an RCU manner so atomic readers
40 * can traverse the list in RCU-safe blocks.
41 *
42 * As a consequence, reads (traversals) of the list can be protected
43 * by either the RTNL, the iflist_mtx or RCU.
44 */
45
16114496 46static void ieee80211_iface_work(struct wiphy *wiphy, struct wiphy_work *work);
42bd20d9 47
1ea6f9c0
JB
48bool __ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata)
49{
50 struct ieee80211_chanctx_conf *chanctx_conf;
51 int power;
52
53 rcu_read_lock();
d0a9123e 54 chanctx_conf = rcu_dereference(sdata->vif.bss_conf.chanctx_conf);
1ea6f9c0
JB
55 if (!chanctx_conf) {
56 rcu_read_unlock();
57 return false;
58 }
59
0430c883 60 power = ieee80211_chandef_max_power(&chanctx_conf->def);
1ea6f9c0
JB
61 rcu_read_unlock();
62
bfd8403a
JB
63 if (sdata->deflink.user_power_level != IEEE80211_UNSET_POWER_LEVEL)
64 power = min(power, sdata->deflink.user_power_level);
1ea6f9c0 65
bfd8403a
JB
66 if (sdata->deflink.ap_power_level != IEEE80211_UNSET_POWER_LEVEL)
67 power = min(power, sdata->deflink.ap_power_level);
1ea6f9c0
JB
68
69 if (power != sdata->vif.bss_conf.txpower) {
70 sdata->vif.bss_conf.txpower = power;
71 ieee80211_hw_config(sdata->local, 0);
72 return true;
73 }
74
75 return false;
76}
77
db82d8a9
LB
78void ieee80211_recalc_txpower(struct ieee80211_sub_if_data *sdata,
79 bool update_bss)
1ea6f9c0 80{
5ad11b50
EG
81 if (__ieee80211_recalc_txpower(sdata) ||
82 (update_bss && ieee80211_sdata_running(sdata)))
d8675a63 83 ieee80211_link_info_change_notify(sdata, &sdata->deflink,
7b7090b4 84 BSS_CHANGED_TXPOWER);
1ea6f9c0 85}
c771c9d8 86
62a40a15 87static u32 __ieee80211_idle_off(struct ieee80211_local *local)
cc45ae54
JB
88{
89 if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
90 return 0;
91
92 local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
93 return IEEE80211_CONF_CHANGE_IDLE;
94}
95
62a40a15 96static u32 __ieee80211_idle_on(struct ieee80211_local *local)
cc45ae54
JB
97{
98 if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
99 return 0;
100
3b24f4c6 101 ieee80211_flush_queues(local, NULL, false);
cc45ae54
JB
102
103 local->hw.conf.flags |= IEEE80211_CONF_IDLE;
104 return IEEE80211_CONF_CHANGE_IDLE;
105}
106
62a40a15
JB
107static u32 __ieee80211_recalc_idle(struct ieee80211_local *local,
108 bool force_active)
cc45ae54 109{
1d5e1266 110 bool working, scanning, active;
cc45ae54 111 unsigned int led_trig_start = 0, led_trig_stop = 0;
cc45ae54 112
cc45ae54
JB
113 lockdep_assert_held(&local->mtx);
114
62a40a15
JB
115 active = force_active ||
116 !list_empty(&local->chanctx_list) ||
117 local->monitors;
cc45ae54 118
1d5e1266
JB
119 working = !local->ops->remain_on_channel &&
120 !list_empty(&local->roc_list);
cc45ae54 121
f1e3e051
JB
122 scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) ||
123 test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning);
cc45ae54 124
cc45ae54
JB
125 if (working || scanning)
126 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
127 else
128 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;
129
fd0f979a 130 if (active)
cc45ae54
JB
131 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
132 else
133 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
134
135 ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);
136
fd0f979a 137 if (working || scanning || active)
62a40a15
JB
138 return __ieee80211_idle_off(local);
139 return __ieee80211_idle_on(local);
140}
141
142u32 ieee80211_idle_off(struct ieee80211_local *local)
143{
144 return __ieee80211_recalc_idle(local, true);
145}
146
147void ieee80211_recalc_idle(struct ieee80211_local *local)
148{
149 u32 change = __ieee80211_recalc_idle(local, false);
fd0f979a
JB
150 if (change)
151 ieee80211_hw_config(local, change);
cc45ae54
JB
152}
153
3899ba90 154static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr,
31eba5bc 155 bool check_dup)
478622e8 156{
ac20976d
HS
157 struct ieee80211_local *local = sdata->local;
158 struct ieee80211_sub_if_data *iter;
478622e8
HS
159 u64 new, mask, tmp;
160 u8 *m;
161 int ret = 0;
162
163 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
164 return 0;
165
166 m = addr;
167 new = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
168 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
169 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
170
171 m = local->hw.wiphy->addr_mask;
172 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
173 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
174 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
175
31eba5bc
FF
176 if (!check_dup)
177 return ret;
478622e8
HS
178
179 mutex_lock(&local->iflist_mtx);
ac20976d
HS
180 list_for_each_entry(iter, &local->interfaces, list) {
181 if (iter == sdata)
478622e8
HS
182 continue;
183
3899ba90 184 if (iter->vif.type == NL80211_IFTYPE_MONITOR &&
d8212184 185 !(iter->u.mntr.flags & MONITOR_FLAG_ACTIVE))
478622e8
HS
186 continue;
187
ac20976d 188 m = iter->vif.addr;
478622e8
HS
189 tmp = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
190 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
191 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
192
193 if ((new & ~mask) != (tmp & ~mask)) {
194 ret = -EINVAL;
195 break;
196 }
197 }
198 mutex_unlock(&local->iflist_mtx);
199
200 return ret;
201}
202
3c06e91b
JP
203static int ieee80211_can_powered_addr_change(struct ieee80211_sub_if_data *sdata)
204{
205 struct ieee80211_roc_work *roc;
206 struct ieee80211_local *local = sdata->local;
207 struct ieee80211_sub_if_data *scan_sdata;
208 int ret = 0;
209
210 /* To be the most flexible here we want to only limit changing the
211 * address if the specific interface is doing offchannel work or
212 * scanning.
213 */
214 if (netif_carrier_ok(sdata->dev))
215 return -EBUSY;
216
217 mutex_lock(&local->mtx);
218
219 /* First check no ROC work is happening on this iface */
220 list_for_each_entry(roc, &local->roc_list, list) {
221 if (roc->sdata != sdata)
222 continue;
223
224 if (roc->started) {
225 ret = -EBUSY;
226 goto unlock;
227 }
228 }
229
230 /* And if this iface is scanning */
231 if (local->scanning) {
232 scan_sdata = rcu_dereference_protected(local->scan_sdata,
233 lockdep_is_held(&local->mtx));
234 if (sdata == scan_sdata)
235 ret = -EBUSY;
236 }
237
238 switch (sdata->vif.type) {
239 case NL80211_IFTYPE_STATION:
240 case NL80211_IFTYPE_P2P_CLIENT:
241 /* More interface types could be added here but changing the
242 * address while powered makes the most sense in client modes.
243 */
244 break;
245 default:
ceb3d688 246 ret = -EOPNOTSUPP;
3c06e91b
JP
247 }
248
249unlock:
250 mutex_unlock(&local->mtx);
251 return ret;
252}
253
47846c9b
JB
254static int ieee80211_change_mac(struct net_device *dev, void *addr)
255{
256 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
3c06e91b 257 struct ieee80211_local *local = sdata->local;
fc5f7577 258 struct sockaddr *sa = addr;
31eba5bc 259 bool check_dup = true;
3c06e91b 260 bool live = false;
47846c9b
JB
261 int ret;
262
3c06e91b
JP
263 if (ieee80211_sdata_running(sdata)) {
264 ret = ieee80211_can_powered_addr_change(sdata);
265 if (ret)
266 return ret;
267
268 live = true;
269 }
47846c9b 270
31eba5bc 271 if (sdata->vif.type == NL80211_IFTYPE_MONITOR &&
d8212184 272 !(sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE))
31eba5bc
FF
273 check_dup = false;
274
3899ba90 275 ret = ieee80211_verify_mac(sdata, sa->sa_data, check_dup);
478622e8
HS
276 if (ret)
277 return ret;
278
3c06e91b
JP
279 if (live)
280 drv_remove_interface(local, sdata);
fc5f7577 281 ret = eth_mac_addr(dev, sa);
47846c9b 282
d8787ec6 283 if (ret == 0) {
fc5f7577 284 memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
d8787ec6
JB
285 ether_addr_copy(sdata->vif.bss_conf.addr, sdata->vif.addr);
286 }
47846c9b 287
3c06e91b
JP
288 /* Regardless of eth_mac_addr() return we still want to add the
289 * interface back. This should not fail...
290 */
291 if (live)
292 WARN_ON(drv_add_interface(local, sdata));
293
47846c9b
JB
294 return ret;
295}
296
0d143fe1
JB
297static inline int identical_mac_addr_allowed(int type1, int type2)
298{
299 return type1 == NL80211_IFTYPE_MONITOR ||
300 type2 == NL80211_IFTYPE_MONITOR ||
f142c6b9
JB
301 type1 == NL80211_IFTYPE_P2P_DEVICE ||
302 type2 == NL80211_IFTYPE_P2P_DEVICE ||
0d143fe1
JB
303 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
304 (type1 == NL80211_IFTYPE_AP_VLAN &&
305 (type2 == NL80211_IFTYPE_AP ||
306 type2 == NL80211_IFTYPE_AP_VLAN));
307}
308
87490f6d
JB
309static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
310 enum nl80211_iftype iftype)
0d143fe1 311{
b4a4bf5d 312 struct ieee80211_local *local = sdata->local;
87490f6d 313 struct ieee80211_sub_if_data *nsdata;
b6a55015 314 int ret;
0d143fe1 315
87490f6d 316 ASSERT_RTNL();
0d143fe1
JB
317
318 /* we hold the RTNL here so can safely walk the list */
319 list_for_each_entry(nsdata, &local->interfaces, list) {
371a255e 320 if (nsdata != sdata && ieee80211_sdata_running(nsdata)) {
239281f8
RL
321 /*
322 * Only OCB and monitor mode may coexist
323 */
324 if ((sdata->vif.type == NL80211_IFTYPE_OCB &&
325 nsdata->vif.type != NL80211_IFTYPE_MONITOR) ||
326 (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
327 nsdata->vif.type == NL80211_IFTYPE_OCB))
328 return -EBUSY;
329
0d143fe1
JB
330 /*
331 * Allow only a single IBSS interface to be up at any
332 * time. This is restricted because beacon distribution
333 * cannot work properly if both are in the same IBSS.
334 *
335 * To remove this restriction we'd have to disallow them
336 * from setting the same SSID on different IBSS interfaces
337 * belonging to the same hardware. Then, however, we're
338 * faced with having to adopt two different TSF timers...
339 */
87490f6d 340 if (iftype == NL80211_IFTYPE_ADHOC &&
0d143fe1
JB
341 nsdata->vif.type == NL80211_IFTYPE_ADHOC)
342 return -EBUSY;
73da7d5b
SW
343 /*
344 * will not add another interface while any channel
345 * switch is active.
346 */
d0a9123e 347 if (nsdata->vif.bss_conf.csa_active)
73da7d5b 348 return -EBUSY;
0d143fe1
JB
349
350 /*
351 * The remaining checks are only performed for interfaces
352 * with the same MAC address.
353 */
371a255e
JB
354 if (!ether_addr_equal(sdata->vif.addr,
355 nsdata->vif.addr))
0d143fe1
JB
356 continue;
357
358 /*
359 * check whether it may have the same address
360 */
87490f6d 361 if (!identical_mac_addr_allowed(iftype,
0d143fe1
JB
362 nsdata->vif.type))
363 return -ENOTUNIQ;
364
ae960ee9
JB
365 /* No support for VLAN with MLO yet */
366 if (iftype == NL80211_IFTYPE_AP_VLAN &&
f216033d
FF
367 sdata->wdev.use_4addr &&
368 nsdata->vif.type == NL80211_IFTYPE_AP &&
369 nsdata->vif.valid_links)
ae960ee9
JB
370 return -EOPNOTSUPP;
371
0d143fe1
JB
372 /*
373 * can only add VLANs to enabled APs
374 */
87490f6d 375 if (iftype == NL80211_IFTYPE_AP_VLAN &&
0d143fe1
JB
376 nsdata->vif.type == NL80211_IFTYPE_AP)
377 sdata->bss = &nsdata->u.ap;
378 }
379 }
380
b6a55015
LC
381 mutex_lock(&local->chanctx_mtx);
382 ret = ieee80211_check_combinations(sdata, NULL, 0, 0);
383 mutex_unlock(&local->chanctx_mtx);
384 return ret;
87490f6d
JB
385}
386
a9865538
JB
387static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata,
388 enum nl80211_iftype iftype)
3a25a8c8
JB
389{
390 int n_queues = sdata->local->hw.queues;
391 int i;
392
708d50ed
AB
393 if (iftype == NL80211_IFTYPE_NAN)
394 return 0;
395
a9865538 396 if (iftype != NL80211_IFTYPE_P2P_DEVICE) {
0ef24e52
IP
397 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
398 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
399 IEEE80211_INVAL_HW_QUEUE))
400 return -EINVAL;
401 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
402 n_queues))
403 return -EINVAL;
404 }
3a25a8c8
JB
405 }
406
a9865538
JB
407 if ((iftype != NL80211_IFTYPE_AP &&
408 iftype != NL80211_IFTYPE_P2P_GO &&
409 iftype != NL80211_IFTYPE_MESH_POINT) ||
30686bf7 410 !ieee80211_hw_check(&sdata->local->hw, QUEUE_CONTROL)) {
3a25a8c8
JB
411 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
412 return 0;
413 }
414
415 if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
416 return -EINVAL;
417
418 if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
419 return -EINVAL;
420
421 return 0;
422}
423
4b7afb52 424static int ieee80211_open(struct net_device *dev)
6aea26ce 425{
4b7afb52
FF
426 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
427 int err;
428
429 /* fail early if user set an invalid address */
430 if (!is_valid_ether_addr(dev->dev_addr))
431 return -EADDRNOTAVAIL;
432
433 err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
434 if (err)
435 return err;
436
a05829a7
JB
437 wiphy_lock(sdata->local->hw.wiphy);
438 err = ieee80211_do_open(&sdata->wdev, true);
439 wiphy_unlock(sdata->local->hw.wiphy);
440
441 return err;
6aea26ce
FF
442}
443
a05829a7 444static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata, bool going_down)
6aea26ce
FF
445{
446 struct ieee80211_local *local = sdata->local;
4b7afb52
FF
447 unsigned long flags;
448 struct sk_buff *skb, *tmp;
449 u32 hw_reconf_flags = 0;
450 int i, flushed;
451 struct ps_data *ps;
452 struct cfg80211_chan_def chandef;
453 bool cancel_scan;
454 struct cfg80211_nan_func *func;
6aea26ce 455
4b7afb52 456 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
3598cb6e 457 synchronize_rcu(); /* flush _ieee80211_wake_txqs() */
6aea26ce 458
4b7afb52
FF
459 cancel_scan = rcu_access_pointer(local->scan_sdata) == sdata;
460 if (cancel_scan)
461 ieee80211_scan_cancel(local);
6aea26ce 462
4b7afb52 463 ieee80211_roc_purge(local, sdata);
6aea26ce 464
4b7afb52
FF
465 switch (sdata->vif.type) {
466 case NL80211_IFTYPE_STATION:
467 ieee80211_mgd_stop(sdata);
468 break;
469 case NL80211_IFTYPE_ADHOC:
470 ieee80211_ibss_stop(sdata);
471 break;
472 case NL80211_IFTYPE_MONITOR:
473 if (sdata->u.mntr.flags & MONITOR_FLAG_COOK_FRAMES)
474 break;
475 list_del_rcu(&sdata->u.mntr.list);
476 break;
477 default:
478 break;
479 }
6aea26ce 480
4b7afb52
FF
481 /*
482 * Remove all stations associated with this interface.
483 *
484 * This must be done before calling ops->remove_interface()
485 * because otherwise we can later invoke ops->sta_notify()
486 * whenever the STAs are removed, and that invalidates driver
487 * assumptions about always getting a vif pointer that is valid
488 * (because if we remove a STA after ops->remove_interface()
489 * the driver will have removed the vif info already!)
490 *
70d9c599 491 * For AP_VLANs stations may exist since there's nothing else that
4b7afb52
FF
492 * would have removed them, but in other modes there shouldn't
493 * be any stations.
494 */
495 flushed = sta_info_flush(sdata);
70d9c599 496 WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP_VLAN && flushed > 0);
6aea26ce 497
4b7afb52
FF
498 /* don't count this interface for allmulti while it is down */
499 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
500 atomic_dec(&local->iff_allmultis);
6aea26ce 501
4b7afb52
FF
502 if (sdata->vif.type == NL80211_IFTYPE_AP) {
503 local->fif_pspoll--;
504 local->fif_probe_req--;
505 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
506 local->fif_probe_req--;
6aea26ce
FF
507 }
508
4b7afb52
FF
509 if (sdata->dev) {
510 netif_addr_lock_bh(sdata->dev);
511 spin_lock_bh(&local->filter_lock);
512 __hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
513 sdata->dev->addr_len);
514 spin_unlock_bh(&local->filter_lock);
515 netif_addr_unlock_bh(sdata->dev);
6aea26ce 516 }
6aea26ce 517
4b7afb52
FF
518 del_timer_sync(&local->dynamic_ps_timer);
519 cancel_work_sync(&local->dynamic_ps_enable_work);
6aea26ce 520
4b7afb52 521 sdata_lock(sdata);
f1871abd 522 WARN(ieee80211_vif_is_mld(&sdata->vif),
d8787ec6
JB
523 "destroying interface with valid links 0x%04x\n",
524 sdata->vif.valid_links);
525
4b7afb52 526 mutex_lock(&local->mtx);
d0a9123e 527 sdata->vif.bss_conf.csa_active = false;
4b7afb52 528 if (sdata->vif.type == NL80211_IFTYPE_STATION)
bfd8403a
JB
529 sdata->deflink.u.mgd.csa_waiting_bcn = false;
530 if (sdata->deflink.csa_block_tx) {
4b7afb52
FF
531 ieee80211_wake_vif_queues(local, sdata,
532 IEEE80211_QUEUE_STOP_REASON_CSA);
bfd8403a 533 sdata->deflink.csa_block_tx = false;
6aea26ce 534 }
4b7afb52
FF
535 mutex_unlock(&local->mtx);
536 sdata_unlock(sdata);
6aea26ce 537
bfd8403a
JB
538 cancel_work_sync(&sdata->deflink.csa_finalize_work);
539 cancel_work_sync(&sdata->deflink.color_change_finalize_work);
85416a4f 540
766d2601
JB
541 wiphy_delayed_work_cancel(local->hw.wiphy,
542 &sdata->deflink.dfs_cac_timer_work);
85416a4f 543
4b7afb52
FF
544 if (sdata->wdev.cac_started) {
545 chandef = sdata->vif.bss_conf.chandef;
546 WARN_ON(local->suspended);
547 mutex_lock(&local->mtx);
d8675a63 548 ieee80211_link_release_channel(&sdata->deflink);
4b7afb52
FF
549 mutex_unlock(&local->mtx);
550 cfg80211_cac_event(sdata->dev, &chandef,
551 NL80211_RADAR_CAC_ABORTED,
552 GFP_KERNEL);
553 }
85416a4f 554
4b7afb52 555 if (sdata->vif.type == NL80211_IFTYPE_AP) {
4b7afb52
FF
556 WARN_ON(!list_empty(&sdata->u.ap.vlans));
557 } else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
558 /* remove all packets in parent bc_buf pointing to this dev */
559 ps = &sdata->bss->ps;
3a25a8c8 560
4b7afb52
FF
561 spin_lock_irqsave(&ps->bc_buf.lock, flags);
562 skb_queue_walk_safe(&ps->bc_buf, skb, tmp) {
563 if (skb->dev == sdata->dev) {
564 __skb_unlink(skb, &ps->bc_buf);
565 local->total_ps_buffered--;
566 ieee80211_free_txskb(&local->hw, skb);
567 }
568 }
569 spin_unlock_irqrestore(&ps->bc_buf.lock, flags);
3a25a8c8 570 }
3a25a8c8 571
4b7afb52
FF
572 if (going_down)
573 local->open_count--;
4b6f1dd6 574
4b7afb52
FF
575 switch (sdata->vif.type) {
576 case NL80211_IFTYPE_AP_VLAN:
577 mutex_lock(&local->mtx);
578 list_del(&sdata->u.vlan.list);
579 mutex_unlock(&local->mtx);
d0a9123e 580 RCU_INIT_POINTER(sdata->vif.bss_conf.chanctx_conf, NULL);
4b7afb52
FF
581 /* see comment in the default case below */
582 ieee80211_free_keys(sdata, true);
583 /* no need to tell driver */
584 break;
585 case NL80211_IFTYPE_MONITOR:
586 if (sdata->u.mntr.flags & MONITOR_FLAG_COOK_FRAMES) {
587 local->cooked_mntrs--;
588 break;
589 }
685fb72b 590
4b7afb52
FF
591 local->monitors--;
592 if (local->monitors == 0) {
593 local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
594 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
595 }
4b6f1dd6 596
4b7afb52
FF
597 ieee80211_adjust_monitor_flags(sdata, -1);
598 break;
599 case NL80211_IFTYPE_NAN:
600 /* clean all the functions */
601 spin_lock_bh(&sdata->u.nan.func_lock);
4b6f1dd6 602
4b7afb52
FF
603 idr_for_each_entry(&sdata->u.nan.function_inst_ids, func, i) {
604 idr_remove(&sdata->u.nan.function_inst_ids, i);
605 cfg80211_free_nan_func(func);
606 }
607 idr_destroy(&sdata->u.nan.function_inst_ids);
3a25a8c8 608
4b7afb52
FF
609 spin_unlock_bh(&sdata->u.nan.func_lock);
610 break;
611 case NL80211_IFTYPE_P2P_DEVICE:
612 /* relies on synchronize_rcu() below */
613 RCU_INIT_POINTER(local->p2p_sdata, NULL);
614 fallthrough;
615 default:
16114496 616 wiphy_work_cancel(sdata->local->hw.wiphy, &sdata->work);
4b7afb52
FF
617 /*
618 * When we get here, the interface is marked down.
619 * Free the remaining keys, if there are any
620 * (which can happen in AP mode if userspace sets
70d9c599 621 * keys before the interface is operating)
4b7afb52
FF
622 *
623 * Force the key freeing to always synchronize_net()
624 * to wait for the RX path in case it is using this
625 * interface enqueuing frames at this very time on
626 * another CPU.
627 */
628 ieee80211_free_keys(sdata, true);
629 skb_queue_purge(&sdata->skb_queue);
f5a4c24e 630 skb_queue_purge(&sdata->status_queue);
4b6f1dd6
JB
631 }
632
4b7afb52
FF
633 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
634 for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
635 skb_queue_walk_safe(&local->pending[i], skb, tmp) {
636 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
637 if (info->control.vif == &sdata->vif) {
638 __skb_unlink(skb, &local->pending[i]);
639 ieee80211_free_txskb(&local->hw, skb);
640 }
641 }
3a25a8c8 642 }
4b7afb52 643 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
3a25a8c8 644
4b7afb52
FF
645 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
646 ieee80211_txq_remove_vlan(local, sdata);
fab57a6c 647
4b7afb52
FF
648 sdata->bss = NULL;
649
650 if (local->open_count == 0)
651 ieee80211_clear_tx_pending(local);
652
653 sdata->vif.bss_conf.beacon_int = 0;
654
655 /*
656 * If the interface goes down while suspended, presumably because
657 * the device was unplugged and that happens before our resume,
658 * then the driver is already unconfigured and the remainder of
659 * this function isn't needed.
660 * XXX: what about WoWLAN? If the device has software state, e.g.
661 * memory allocated, it might expect teardown commands from
662 * mac80211 here?
663 */
664 if (local->suspended) {
665 WARN_ON(local->wowlan);
6dd23603 666 WARN_ON(rcu_access_pointer(local->monitor_sdata));
4b7afb52 667 return;
55de908a
JB
668 }
669
4b7afb52
FF
670 switch (sdata->vif.type) {
671 case NL80211_IFTYPE_AP_VLAN:
672 break;
673 case NL80211_IFTYPE_MONITOR:
674 if (local->monitors == 0)
675 ieee80211_del_virtual_monitor(local);
42bd20d9 676
4b7afb52
FF
677 mutex_lock(&local->mtx);
678 ieee80211_recalc_idle(local);
679 mutex_unlock(&local->mtx);
4b6f1dd6 680
4b7afb52
FF
681 if (!(sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE))
682 break;
4b6f1dd6 683
4b7afb52
FF
684 fallthrough;
685 default:
686 if (going_down)
687 drv_remove_interface(local, sdata);
688 }
4b6f1dd6 689
4b7afb52 690 ieee80211_recalc_ps(local);
8b305780 691
4b7afb52
FF
692 if (cancel_scan)
693 flush_delayed_work(&local->scan_work);
4b6f1dd6 694
4b7afb52
FF
695 if (local->open_count == 0) {
696 ieee80211_stop_device(local);
697
698 /* no reconfiguring after stop! */
8b305780
JB
699 return;
700 }
4b6f1dd6 701
4b7afb52
FF
702 /* do after stop to avoid reconfiguring when we stop anyway */
703 ieee80211_configure_filter(local);
704 ieee80211_hw_config(local, hw_reconf_flags);
8b305780 705
4b7afb52
FF
706 if (local->monitors == local->open_count)
707 ieee80211_add_virtual_monitor(local);
708}
4b6f1dd6 709
17196425
JC
710static void ieee80211_stop_mbssid(struct ieee80211_sub_if_data *sdata)
711{
712 struct ieee80211_sub_if_data *tx_sdata, *non_tx_sdata, *tmp_sdata;
713 struct ieee80211_vif *tx_vif = sdata->vif.mbssid_tx_vif;
714
715 if (!tx_vif)
716 return;
717
718 tx_sdata = vif_to_sdata(tx_vif);
719 sdata->vif.mbssid_tx_vif = NULL;
720
721 list_for_each_entry_safe(non_tx_sdata, tmp_sdata,
722 &tx_sdata->local->interfaces, list) {
723 if (non_tx_sdata != sdata && non_tx_sdata != tx_sdata &&
724 non_tx_sdata->vif.mbssid_tx_vif == tx_vif &&
725 ieee80211_sdata_running(non_tx_sdata)) {
726 non_tx_sdata->vif.mbssid_tx_vif = NULL;
727 dev_close(non_tx_sdata->wdev.netdev);
728 }
729 }
730
731 if (sdata != tx_sdata && ieee80211_sdata_running(tx_sdata)) {
732 tx_sdata->vif.mbssid_tx_vif = NULL;
733 dev_close(tx_sdata->wdev.netdev);
734 }
735}
736
4b7afb52
FF
737static int ieee80211_stop(struct net_device *dev)
738{
739 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
55de908a 740
17196425 741 /* close dependent VLAN and MBSSID interfaces before locking wiphy */
d5befb22
JB
742 if (sdata->vif.type == NL80211_IFTYPE_AP) {
743 struct ieee80211_sub_if_data *vlan, *tmpsdata;
744
745 list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
746 u.vlan.list)
747 dev_close(vlan->dev);
17196425
JC
748
749 ieee80211_stop_mbssid(sdata);
d5befb22
JB
750 }
751
3d901102
JB
752 cancel_work_sync(&sdata->activate_links_work);
753
a05829a7 754 wiphy_lock(sdata->local->hw.wiphy);
4b7afb52 755 ieee80211_do_stop(sdata, true);
a05829a7 756 wiphy_unlock(sdata->local->hw.wiphy);
4b6f1dd6 757
4b7afb52 758 return 0;
4b6f1dd6
JB
759}
760
4b7afb52 761static void ieee80211_set_multicast_list(struct net_device *dev)
87490f6d 762{
4b7afb52 763 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
87490f6d 764 struct ieee80211_local *local = sdata->local;
4b7afb52 765 int allmulti, sdata_allmulti;
87490f6d 766
4b7afb52
FF
767 allmulti = !!(dev->flags & IFF_ALLMULTI);
768 sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
665c93a9 769
4b7afb52
FF
770 if (allmulti != sdata_allmulti) {
771 if (dev->flags & IFF_ALLMULTI)
772 atomic_inc(&local->iff_allmultis);
773 else
774 atomic_dec(&local->iff_allmultis);
775 sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
776 }
665c93a9 777
4b7afb52
FF
778 spin_lock_bh(&local->filter_lock);
779 __hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
780 spin_unlock_bh(&local->filter_lock);
781 ieee80211_queue_work(&local->hw, &local->reconfig_filter);
782}
665c93a9 783
4b7afb52
FF
784/*
785 * Called when the netdev is removed or, by the code below, before
786 * the interface type changes.
787 */
788static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata)
789{
4b7afb52
FF
790 /* free extra data */
791 ieee80211_free_keys(sdata, false);
f9dca80b 792
4b7afb52 793 ieee80211_debugfs_remove_netdev(sdata);
0d143fe1 794
3a11ce08 795 ieee80211_destroy_frag_cache(&sdata->frags);
0d143fe1 796
4b7afb52
FF
797 if (ieee80211_vif_is_mesh(&sdata->vif))
798 ieee80211_mesh_teardown_sdata(sdata);
b2e8434f
JB
799
800 ieee80211_vif_clear_links(sdata);
801 ieee80211_link_stop(&sdata->deflink);
4b7afb52 802}
0d143fe1 803
4b7afb52
FF
804static void ieee80211_uninit(struct net_device *dev)
805{
806 ieee80211_teardown_sdata(IEEE80211_DEV_TO_SUB_IF(dev));
807}
075e0847 808
4b7afb52
FF
809static void
810ieee80211_get_stats64(struct net_device *dev, struct rtnl_link_stats64 *stats)
811{
6401297e 812 dev_fetch_sw_netstats(stats, dev->tstats);
4b7afb52 813}
e3b90ca2 814
61587f15
FF
815static int ieee80211_netdev_setup_tc(struct net_device *dev,
816 enum tc_setup_type type, void *type_data)
817{
818 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
819 struct ieee80211_local *local = sdata->local;
820
821 return drv_net_setup_tc(local, sdata, dev, type, type_data);
822}
823
4b7afb52
FF
824static const struct net_device_ops ieee80211_dataif_ops = {
825 .ndo_open = ieee80211_open,
826 .ndo_stop = ieee80211_stop,
827 .ndo_uninit = ieee80211_uninit,
828 .ndo_start_xmit = ieee80211_subif_start_xmit,
829 .ndo_set_rx_mode = ieee80211_set_multicast_list,
830 .ndo_set_mac_address = ieee80211_change_mac,
4b7afb52 831 .ndo_get_stats64 = ieee80211_get_stats64,
61587f15 832 .ndo_setup_tc = ieee80211_netdev_setup_tc,
4b7afb52 833};
e3b90ca2 834
4b7afb52
FF
835static u16 ieee80211_monitor_select_queue(struct net_device *dev,
836 struct sk_buff *skb,
837 struct net_device *sb_dev)
838{
839 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
840 struct ieee80211_local *local = sdata->local;
841 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
842 struct ieee80211_hdr *hdr;
843 int len_rthdr;
90e8f58d 844
4b7afb52
FF
845 if (local->hw.queues < IEEE80211_NUM_ACS)
846 return 0;
0d143fe1 847
4b7afb52
FF
848 /* reset flags and info before parsing radiotap header */
849 memset(info, 0, sizeof(*info));
59034591 850
4b7afb52
FF
851 if (!ieee80211_parse_tx_radiotap(skb, dev))
852 return 0; /* doesn't matter, frame will be dropped */
0d143fe1 853
4b7afb52
FF
854 len_rthdr = ieee80211_get_radiotap_len(skb->data);
855 hdr = (struct ieee80211_hdr *)(skb->data + len_rthdr);
856 if (skb->len < len_rthdr + 2 ||
857 skb->len < len_rthdr + ieee80211_hdrlen(hdr->frame_control))
858 return 0; /* doesn't matter, frame will be dropped */
2d2080c3 859
4b7afb52
FF
860 return ieee80211_select_queue_80211(sdata, skb, hdr);
861}
0d143fe1 862
4b7afb52
FF
863static const struct net_device_ops ieee80211_monitorif_ops = {
864 .ndo_open = ieee80211_open,
865 .ndo_stop = ieee80211_stop,
866 .ndo_uninit = ieee80211_uninit,
867 .ndo_start_xmit = ieee80211_monitor_start_xmit,
868 .ndo_set_rx_mode = ieee80211_set_multicast_list,
869 .ndo_set_mac_address = ieee80211_change_mac,
870 .ndo_select_queue = ieee80211_monitor_select_queue,
871 .ndo_get_stats64 = ieee80211_get_stats64,
872};
0d143fe1 873
d787a3e3
FF
874static int ieee80211_netdev_fill_forward_path(struct net_device_path_ctx *ctx,
875 struct net_device_path *path)
876{
877 struct ieee80211_sub_if_data *sdata;
878 struct ieee80211_local *local;
879 struct sta_info *sta;
880 int ret = -ENOENT;
881
882 sdata = IEEE80211_DEV_TO_SUB_IF(ctx->dev);
883 local = sdata->local;
884
885 if (!local->ops->net_fill_forward_path)
886 return -EOPNOTSUPP;
887
888 rcu_read_lock();
889 switch (sdata->vif.type) {
890 case NL80211_IFTYPE_AP_VLAN:
891 sta = rcu_dereference(sdata->u.vlan.sta);
892 if (sta)
893 break;
894 if (sdata->wdev.use_4addr)
895 goto out;
896 if (is_multicast_ether_addr(ctx->daddr))
897 goto out;
898 sta = sta_info_get_bss(sdata, ctx->daddr);
899 break;
900 case NL80211_IFTYPE_AP:
901 if (is_multicast_ether_addr(ctx->daddr))
902 goto out;
903 sta = sta_info_get(sdata, ctx->daddr);
904 break;
905 case NL80211_IFTYPE_STATION:
906 if (sdata->wdev.wiphy->flags & WIPHY_FLAG_SUPPORTS_TDLS) {
907 sta = sta_info_get(sdata, ctx->daddr);
908 if (sta && test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
909 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER_AUTH))
910 goto out;
911
912 break;
913 }
914 }
915
bfd8403a 916 sta = sta_info_get(sdata, sdata->deflink.u.mgd.bssid);
d787a3e3
FF
917 break;
918 default:
919 goto out;
920 }
921
922 if (!sta)
923 goto out;
924
925 ret = drv_net_fill_forward_path(local, sdata, &sta->sta, ctx, path);
926out:
927 rcu_read_unlock();
928
929 return ret;
930}
931
4b7afb52
FF
932static const struct net_device_ops ieee80211_dataif_8023_ops = {
933 .ndo_open = ieee80211_open,
934 .ndo_stop = ieee80211_stop,
935 .ndo_uninit = ieee80211_uninit,
936 .ndo_start_xmit = ieee80211_subif_start_xmit_8023,
937 .ndo_set_rx_mode = ieee80211_set_multicast_list,
938 .ndo_set_mac_address = ieee80211_change_mac,
4b7afb52 939 .ndo_get_stats64 = ieee80211_get_stats64,
d787a3e3 940 .ndo_fill_forward_path = ieee80211_netdev_fill_forward_path,
61587f15 941 .ndo_setup_tc = ieee80211_netdev_setup_tc,
4b7afb52 942};
1be7fe8d 943
80a915ec 944static bool ieee80211_iftype_supports_hdr_offload(enum nl80211_iftype iftype)
4b7afb52
FF
945{
946 switch (iftype) {
947 /* P2P GO and client are mapped to AP/STATION types */
948 case NL80211_IFTYPE_AP:
949 case NL80211_IFTYPE_STATION:
950 return true;
f64331d5 951 default:
4b7afb52 952 return false;
0d143fe1 953 }
4b7afb52 954}
0d143fe1 955
4b7afb52
FF
956static bool ieee80211_set_sdata_offload_flags(struct ieee80211_sub_if_data *sdata)
957{
958 struct ieee80211_local *local = sdata->local;
959 u32 flags;
965bedad 960
4b7afb52 961 flags = sdata->vif.offload_flags;
2b730daa 962
4b7afb52 963 if (ieee80211_hw_check(&local->hw, SUPPORTS_TX_ENCAP_OFFLOAD) &&
80a915ec 964 ieee80211_iftype_supports_hdr_offload(sdata->vif.type)) {
4b7afb52 965 flags |= IEEE80211_OFFLOAD_ENCAP_ENABLED;
2b730daa 966
4b7afb52
FF
967 if (!ieee80211_hw_check(&local->hw, SUPPORTS_TX_FRAG) &&
968 local->hw.wiphy->frag_threshold != (u32)-1)
969 flags &= ~IEEE80211_OFFLOAD_ENCAP_ENABLED;
2b730daa 970
4b7afb52
FF
971 if (local->monitors)
972 flags &= ~IEEE80211_OFFLOAD_ENCAP_ENABLED;
973 } else {
974 flags &= ~IEEE80211_OFFLOAD_ENCAP_ENABLED;
2b730daa 975 }
0d143fe1 976
80a915ec
FF
977 if (ieee80211_hw_check(&local->hw, SUPPORTS_RX_DECAP_OFFLOAD) &&
978 ieee80211_iftype_supports_hdr_offload(sdata->vif.type)) {
979 flags |= IEEE80211_OFFLOAD_DECAP_ENABLED;
980
55f8205e
S
981 if (local->monitors &&
982 !ieee80211_hw_check(&local->hw, SUPPORTS_CONC_MON_RX_DECAP))
80a915ec
FF
983 flags &= ~IEEE80211_OFFLOAD_DECAP_ENABLED;
984 } else {
985 flags &= ~IEEE80211_OFFLOAD_DECAP_ENABLED;
986 }
987
4b7afb52
FF
988 if (sdata->vif.offload_flags == flags)
989 return false;
990
991 sdata->vif.offload_flags = flags;
80a915ec 992 ieee80211_check_fast_rx_iface(sdata);
4b7afb52 993 return true;
0d143fe1
JB
994}
995
4b7afb52 996static void ieee80211_set_vif_encap_ops(struct ieee80211_sub_if_data *sdata)
0d143fe1 997{
4b7afb52
FF
998 struct ieee80211_local *local = sdata->local;
999 struct ieee80211_sub_if_data *bss = sdata;
1000 bool enabled;
34d4bc4d 1001
4b7afb52
FF
1002 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
1003 if (!sdata->bss)
1004 return;
34d4bc4d 1005
4b7afb52
FF
1006 bss = container_of(sdata->bss, struct ieee80211_sub_if_data, u.ap);
1007 }
34d4bc4d 1008
4b7afb52 1009 if (!ieee80211_hw_check(&local->hw, SUPPORTS_TX_ENCAP_OFFLOAD) ||
80a915ec 1010 !ieee80211_iftype_supports_hdr_offload(bss->vif.type))
4b7afb52 1011 return;
34d4bc4d 1012
4b7afb52
FF
1013 enabled = bss->vif.offload_flags & IEEE80211_OFFLOAD_ENCAP_ENABLED;
1014 if (sdata->wdev.use_4addr &&
1015 !(bss->vif.offload_flags & IEEE80211_OFFLOAD_ENCAP_4ADDR))
1016 enabled = false;
0d143fe1 1017
4b7afb52
FF
1018 sdata->dev->netdev_ops = enabled ? &ieee80211_dataif_8023_ops :
1019 &ieee80211_dataif_ops;
1020}
c29acf20 1021
4b7afb52
FF
1022static void ieee80211_recalc_sdata_offload(struct ieee80211_sub_if_data *sdata)
1023{
1024 struct ieee80211_local *local = sdata->local;
1025 struct ieee80211_sub_if_data *vsdata;
352ffad6 1026
4b7afb52
FF
1027 if (ieee80211_set_sdata_offload_flags(sdata)) {
1028 drv_update_vif_offload(local, sdata);
1029 ieee80211_set_vif_encap_ops(sdata);
1030 }
0d143fe1 1031
4b7afb52
FF
1032 list_for_each_entry(vsdata, &local->interfaces, list) {
1033 if (vsdata->vif.type != NL80211_IFTYPE_AP_VLAN ||
1034 vsdata->bss != &sdata->u.ap)
1035 continue;
af6b6374 1036
4b7afb52 1037 ieee80211_set_vif_encap_ops(vsdata);
8ffcc704 1038 }
4b7afb52 1039}
cd7760e6 1040
4b7afb52
FF
1041void ieee80211_recalc_offload(struct ieee80211_local *local)
1042{
1043 struct ieee80211_sub_if_data *sdata;
0d143fe1 1044
4b7afb52
FF
1045 if (!ieee80211_hw_check(&local->hw, SUPPORTS_TX_ENCAP_OFFLOAD))
1046 return;
0d143fe1 1047
4b7afb52 1048 mutex_lock(&local->iflist_mtx);
e3b90ca2 1049
4b7afb52
FF
1050 list_for_each_entry(sdata, &local->interfaces, list) {
1051 if (!ieee80211_sdata_running(sdata))
1052 continue;
1053
1054 ieee80211_recalc_sdata_offload(sdata);
f142c6b9 1055 }
3ac64bee 1056
4b7afb52
FF
1057 mutex_unlock(&local->iflist_mtx);
1058}
0d143fe1 1059
4b7afb52
FF
1060void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
1061 const int offset)
1062{
1063 struct ieee80211_local *local = sdata->local;
1064 u32 flags = sdata->u.mntr.flags;
59af6928 1065
4b7afb52
FF
1066#define ADJUST(_f, _s) do { \
1067 if (flags & MONITOR_FLAG_##_f) \
1068 local->fif_##_s += offset; \
1069 } while (0)
04ecd257 1070
4b7afb52
FF
1071 ADJUST(FCSFAIL, fcsfail);
1072 ADJUST(PLCPFAIL, plcpfail);
1073 ADJUST(CONTROL, control);
1074 ADJUST(CONTROL, pspoll);
1075 ADJUST(OTHER_BSS, other_bss);
164eb02d 1076
4b7afb52
FF
1077#undef ADJUST
1078}
1079
1080static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
1081{
1082 struct ieee80211_local *local = sdata->local;
1083 int i;
1084
1085 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
1086 if (ieee80211_hw_check(&local->hw, QUEUE_CONTROL))
1087 sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
1088 else if (local->hw.queues >= IEEE80211_NUM_ACS)
1089 sdata->vif.hw_queue[i] = i;
1090 else
1091 sdata->vif.hw_queue[i] = 0;
164eb02d 1092 }
4b7afb52
FF
1093 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
1094}
164eb02d 1095
8e14130d
JB
1096static void ieee80211_sdata_init(struct ieee80211_local *local,
1097 struct ieee80211_sub_if_data *sdata)
1098{
1099 sdata->local = local;
1100
1101 /*
1102 * Initialize the default link, so we can use link_id 0 for non-MLD,
1103 * and that continues to work for non-MLD-aware drivers that use just
1104 * vif.bss_conf instead of vif.link_conf.
1105 *
1106 * Note that we never change this, so if link ID 0 isn't used in an
1107 * MLD connection, we get a separate allocation for it.
1108 */
d8787ec6 1109 ieee80211_link_init(sdata, -1, &sdata->deflink, &sdata->vif.bss_conf);
8e14130d
JB
1110}
1111
4b7afb52
FF
1112int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
1113{
1114 struct ieee80211_sub_if_data *sdata;
1115 int ret;
0d143fe1 1116
4b7afb52
FF
1117 if (!ieee80211_hw_check(&local->hw, WANT_MONITOR_VIF))
1118 return 0;
397a7a24 1119
4b7afb52 1120 ASSERT_RTNL();
6dd23603 1121 lockdep_assert_wiphy(local->hw.wiphy);
0d143fe1 1122
4b7afb52
FF
1123 if (local->monitor_sdata)
1124 return 0;
0d143fe1 1125
4b7afb52
FF
1126 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
1127 if (!sdata)
1128 return -ENOMEM;
0d143fe1 1129
4b7afb52 1130 /* set up data */
4b7afb52
FF
1131 sdata->vif.type = NL80211_IFTYPE_MONITOR;
1132 snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
1133 wiphy_name(local->hw.wiphy));
1134 sdata->wdev.iftype = NL80211_IFTYPE_MONITOR;
4484de23 1135 mutex_init(&sdata->wdev.mtx);
0d143fe1 1136
8e14130d
JB
1137 ieee80211_sdata_init(local, sdata);
1138
4b7afb52 1139 ieee80211_set_default_queues(sdata);
167e33f4 1140
4b7afb52
FF
1141 ret = drv_add_interface(local, sdata);
1142 if (WARN_ON(ret)) {
1143 /* ok .. stupid driver, it asked for this! */
1144 kfree(sdata);
1145 return ret;
1146 }
1147
bdeca45a
BA
1148 set_bit(SDATA_STATE_RUNNING, &sdata->state);
1149
4b7afb52
FF
1150 ret = ieee80211_check_queues(sdata, NL80211_IFTYPE_MONITOR);
1151 if (ret) {
1152 kfree(sdata);
1153 return ret;
0d143fe1
JB
1154 }
1155
4b7afb52
FF
1156 mutex_lock(&local->iflist_mtx);
1157 rcu_assign_pointer(local->monitor_sdata, sdata);
1158 mutex_unlock(&local->iflist_mtx);
1159
4484de23 1160 sdata_lock(sdata);
4b7afb52 1161 mutex_lock(&local->mtx);
d8675a63 1162 ret = ieee80211_link_use_channel(&sdata->deflink, &local->monitor_chandef,
b4f85443 1163 IEEE80211_CHANCTX_EXCLUSIVE);
4b7afb52 1164 mutex_unlock(&local->mtx);
4484de23 1165 sdata_unlock(sdata);
4b7afb52
FF
1166 if (ret) {
1167 mutex_lock(&local->iflist_mtx);
1168 RCU_INIT_POINTER(local->monitor_sdata, NULL);
1169 mutex_unlock(&local->iflist_mtx);
1170 synchronize_net();
1171 drv_remove_interface(local, sdata);
4484de23 1172 mutex_destroy(&sdata->wdev.mtx);
4b7afb52
FF
1173 kfree(sdata);
1174 return ret;
5061b0c2 1175 }
075e0847 1176
4b7afb52 1177 skb_queue_head_init(&sdata->skb_queue);
f5a4c24e 1178 skb_queue_head_init(&sdata->status_queue);
16114496 1179 wiphy_work_init(&sdata->work, ieee80211_iface_work);
53168215 1180
4b7afb52
FF
1181 return 0;
1182}
ba8c3d6f 1183
4b7afb52
FF
1184void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
1185{
1186 struct ieee80211_sub_if_data *sdata;
b2c0958b 1187
4b7afb52
FF
1188 if (!ieee80211_hw_check(&local->hw, WANT_MONITOR_VIF))
1189 return;
5c21e810 1190
4b7afb52 1191 ASSERT_RTNL();
6dd23603 1192 lockdep_assert_wiphy(local->hw.wiphy);
4b7afb52
FF
1193
1194 mutex_lock(&local->iflist_mtx);
1195
1196 sdata = rcu_dereference_protected(local->monitor_sdata,
1197 lockdep_is_held(&local->iflist_mtx));
1198 if (!sdata) {
1199 mutex_unlock(&local->iflist_mtx);
b2c0958b
JB
1200 return;
1201 }
1202
4b7afb52
FF
1203 RCU_INIT_POINTER(local->monitor_sdata, NULL);
1204 mutex_unlock(&local->iflist_mtx);
1205
1206 synchronize_net();
1207
4484de23 1208 sdata_lock(sdata);
4b7afb52 1209 mutex_lock(&local->mtx);
d8675a63 1210 ieee80211_link_release_channel(&sdata->deflink);
4b7afb52 1211 mutex_unlock(&local->mtx);
4484de23 1212 sdata_unlock(sdata);
4b7afb52
FF
1213
1214 drv_remove_interface(local, sdata);
1215
4484de23 1216 mutex_destroy(&sdata->wdev.mtx);
4b7afb52
FF
1217 kfree(sdata);
1218}
1219
1220/*
1221 * NOTE: Be very careful when changing this function, it must NOT return
1222 * an error on interface type changes that have been pre-checked, so most
1223 * checks should be in ieee80211_check_concurrent_iface.
1224 */
1225int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up)
1226{
1227 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
1228 struct net_device *dev = wdev->netdev;
1229 struct ieee80211_local *local = sdata->local;
15ddba5f 1230 u64 changed = 0;
4b7afb52
FF
1231 int res;
1232 u32 hw_reconf_flags = 0;
1233
b2c0958b 1234 switch (sdata->vif.type) {
4b7afb52
FF
1235 case NL80211_IFTYPE_AP_VLAN: {
1236 struct ieee80211_sub_if_data *master;
1237
1238 if (!sdata->bss)
1239 return -ENOLINK;
b2c0958b
JB
1240
1241 mutex_lock(&local->mtx);
4b7afb52 1242 list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
b2c0958b 1243 mutex_unlock(&local->mtx);
31eba5bc 1244
4b7afb52
FF
1245 master = container_of(sdata->bss,
1246 struct ieee80211_sub_if_data, u.ap);
1247 sdata->control_port_protocol =
1248 master->control_port_protocol;
1249 sdata->control_port_no_encrypt =
1250 master->control_port_no_encrypt;
1251 sdata->control_port_over_nl80211 =
1252 master->control_port_over_nl80211;
1253 sdata->control_port_no_preauth =
1254 master->control_port_no_preauth;
1255 sdata->vif.cab_queue = master->vif.cab_queue;
1256 memcpy(sdata->vif.hw_queue, master->vif.hw_queue,
1257 sizeof(sdata->vif.hw_queue));
1258 sdata->vif.bss_conf.chandef = master->vif.bss_conf.chandef;
b2c0958b 1259
4b7afb52
FF
1260 mutex_lock(&local->key_mtx);
1261 sdata->crypto_tx_tailroom_needed_cnt +=
1262 master->crypto_tx_tailroom_needed_cnt;
1263 mutex_unlock(&local->key_mtx);
b2c0958b 1264
4b7afb52
FF
1265 break;
1266 }
1267 case NL80211_IFTYPE_AP:
1268 sdata->bss = &sdata->u.ap;
1269 break;
1270 case NL80211_IFTYPE_MESH_POINT:
1271 case NL80211_IFTYPE_STATION:
1272 case NL80211_IFTYPE_MONITOR:
1273 case NL80211_IFTYPE_ADHOC:
1274 case NL80211_IFTYPE_P2P_DEVICE:
1275 case NL80211_IFTYPE_OCB:
1276 case NL80211_IFTYPE_NAN:
1277 /* no special treatment */
1278 break;
1279 case NL80211_IFTYPE_UNSPECIFIED:
1280 case NUM_NL80211_IFTYPES:
1281 case NL80211_IFTYPE_P2P_CLIENT:
1282 case NL80211_IFTYPE_P2P_GO:
70d9c599 1283 case NL80211_IFTYPE_WDS:
4b7afb52
FF
1284 /* cannot happen */
1285 WARN_ON(1);
1286 break;
1287 }
46238845 1288
b2c0958b 1289 if (local->open_count == 0) {
c4fdb081
JB
1290 /* here we can consider everything in good order (again) */
1291 local->reconfig_failure = false;
1292
4b7afb52
FF
1293 res = drv_start(local);
1294 if (res)
1295 goto err_del_bss;
1296 /* we're brought up, everything changes */
1297 hw_reconf_flags = ~0;
1298 ieee80211_led_radio(local, true);
1299 ieee80211_mod_tpt_led_trig(local,
1300 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
b2c0958b
JB
1301 }
1302
4b7afb52
FF
1303 /*
1304 * Copy the hopefully now-present MAC address to
1305 * this interface, if it has the special null one.
1306 */
1307 if (dev && is_zero_ether_addr(dev->dev_addr)) {
de1352ea 1308 eth_hw_addr_set(dev, local->hw.wiphy->perm_addr);
4b7afb52 1309 memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);
34d4bc4d 1310
4b7afb52
FF
1311 if (!is_valid_ether_addr(dev->dev_addr)) {
1312 res = -EADDRNOTAVAIL;
1313 goto err_stop;
1314 }
1315 }
34d4bc4d 1316
4b7afb52
FF
1317 switch (sdata->vif.type) {
1318 case NL80211_IFTYPE_AP_VLAN:
1319 /* no need to tell driver, but set carrier and chanctx */
bfd8403a 1320 if (sdata->bss->active) {
d8675a63 1321 ieee80211_link_vlan_copy_chanctx(&sdata->deflink);
4b7afb52
FF
1322 netif_carrier_on(dev);
1323 ieee80211_set_vif_encap_ops(sdata);
1324 } else {
1325 netif_carrier_off(dev);
1326 }
1327 break;
1328 case NL80211_IFTYPE_MONITOR:
1329 if (sdata->u.mntr.flags & MONITOR_FLAG_COOK_FRAMES) {
1330 local->cooked_mntrs++;
1331 break;
1332 }
5061b0c2 1333
4b7afb52
FF
1334 if (sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE) {
1335 res = drv_add_interface(local, sdata);
1336 if (res)
1337 goto err_stop;
1338 } else if (local->monitors == 0 && local->open_count == 0) {
1339 res = ieee80211_add_virtual_monitor(local);
1340 if (res)
1341 goto err_stop;
1342 }
0d143fe1 1343
4b7afb52
FF
1344 /* must be before the call to ieee80211_configure_filter */
1345 local->monitors++;
1346 if (local->monitors == 1) {
1347 local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
1348 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
1349 }
0d143fe1 1350
4b7afb52
FF
1351 ieee80211_adjust_monitor_flags(sdata, 1);
1352 ieee80211_configure_filter(local);
1353 ieee80211_recalc_offload(local);
1354 mutex_lock(&local->mtx);
1355 ieee80211_recalc_idle(local);
1356 mutex_unlock(&local->mtx);
0d143fe1 1357
4b7afb52
FF
1358 netif_carrier_on(dev);
1359 break;
1360 default:
1361 if (coming_up) {
1362 ieee80211_del_virtual_monitor(local);
1363 ieee80211_set_sdata_offload_flags(sdata);
0d143fe1 1364
4b7afb52
FF
1365 res = drv_add_interface(local, sdata);
1366 if (res)
1367 goto err_stop;
0d143fe1 1368
4b7afb52
FF
1369 ieee80211_set_vif_encap_ops(sdata);
1370 res = ieee80211_check_queues(sdata,
1371 ieee80211_vif_type_p2p(&sdata->vif));
1372 if (res)
1373 goto err_del_interface;
1374 }
f0706e82 1375
4b7afb52
FF
1376 if (sdata->vif.type == NL80211_IFTYPE_AP) {
1377 local->fif_pspoll++;
1378 local->fif_probe_req++;
75636525 1379
4b7afb52
FF
1380 ieee80211_configure_filter(local);
1381 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
1382 local->fif_probe_req++;
1383 }
aee14ceb 1384
4b7afb52
FF
1385 if (sdata->vif.probe_req_reg)
1386 drv_config_iface_filter(local, sdata,
1387 FIF_PROBE_REQ,
1388 FIF_PROBE_REQ);
11a843b7 1389
4b7afb52
FF
1390 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE &&
1391 sdata->vif.type != NL80211_IFTYPE_NAN)
1392 changed |= ieee80211_reset_erp_info(sdata);
d8675a63
JB
1393 ieee80211_link_info_change_notify(sdata, &sdata->deflink,
1394 changed);
f0706e82 1395
4b7afb52
FF
1396 switch (sdata->vif.type) {
1397 case NL80211_IFTYPE_STATION:
1398 case NL80211_IFTYPE_ADHOC:
1399 case NL80211_IFTYPE_AP:
1400 case NL80211_IFTYPE_MESH_POINT:
1401 case NL80211_IFTYPE_OCB:
1402 netif_carrier_off(dev);
1403 break;
4b7afb52
FF
1404 case NL80211_IFTYPE_P2P_DEVICE:
1405 case NL80211_IFTYPE_NAN:
1406 break;
1407 default:
1408 /* not reached */
1409 WARN_ON(1);
1410 }
f142c6b9 1411
4b7afb52
FF
1412 /*
1413 * Set default queue parameters so drivers don't
1414 * need to initialise the hardware if the hardware
1415 * doesn't start up with sane defaults.
1416 * Enable QoS for anything but station interfaces.
1417 */
b3e2130b 1418 ieee80211_set_wmm_default(&sdata->deflink, true,
4b7afb52
FF
1419 sdata->vif.type != NL80211_IFTYPE_STATION);
1420 }
cf0277e7 1421
4b7afb52 1422 switch (sdata->vif.type) {
4b7afb52
FF
1423 case NL80211_IFTYPE_P2P_DEVICE:
1424 rcu_assign_pointer(local->p2p_sdata, sdata);
1425 break;
1426 case NL80211_IFTYPE_MONITOR:
1427 if (sdata->u.mntr.flags & MONITOR_FLAG_COOK_FRAMES)
1428 break;
1429 list_add_tail_rcu(&sdata->u.mntr.list, &local->mon_list);
1430 break;
1431 default:
1432 break;
5a490510 1433 }
5a490510 1434
4b7afb52
FF
1435 /*
1436 * set_multicast_list will be invoked by the networking core
1437 * which will check whether any increments here were done in
1438 * error and sync them down to the hardware as filter flags.
1439 */
1440 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
1441 atomic_inc(&local->iff_allmultis);
587e729e 1442
4b7afb52
FF
1443 if (coming_up)
1444 local->open_count++;
cf0277e7 1445
4b7afb52
FF
1446 if (hw_reconf_flags)
1447 ieee80211_hw_config(local, hw_reconf_flags);
cf0277e7 1448
4b7afb52 1449 ieee80211_recalc_ps(local);
cb17ed29 1450
c95014e1
AW
1451 set_bit(SDATA_STATE_RUNNING, &sdata->state);
1452
4b7afb52
FF
1453 return 0;
1454 err_del_interface:
1455 drv_remove_interface(local, sdata);
1456 err_stop:
1457 if (!local->open_count)
1458 drv_stop(local);
1459 err_del_bss:
1460 sdata->bss = NULL;
1461 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
1462 mutex_lock(&local->mtx);
1463 list_del(&sdata->u.vlan.list);
1464 mutex_unlock(&local->mtx);
1465 }
1466 /* might already be clear but that doesn't matter */
1467 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
1468 return res;
1469}
50ff477a 1470
5a490510
JB
1471static void ieee80211_if_free(struct net_device *dev)
1472{
1473 free_percpu(dev->tstats);
5a490510
JB
1474}
1475
587e729e
JB
1476static void ieee80211_if_setup(struct net_device *dev)
1477{
1478 ether_setup(dev);
550fd08c 1479 dev->priv_flags &= ~IFF_TX_SKB_SHARING;
107395f9 1480 dev->priv_flags |= IFF_NO_QUEUE;
587e729e 1481 dev->netdev_ops = &ieee80211_dataif_ops;
cf124db5
DM
1482 dev->needs_free_netdev = true;
1483 dev->priv_destructor = ieee80211_if_free;
587e729e
JB
1484}
1485
07bd1c79
JB
1486static void ieee80211_iface_process_skb(struct ieee80211_local *local,
1487 struct ieee80211_sub_if_data *sdata,
1488 struct sk_buff *skb)
1489{
1490 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1491
1492 if (ieee80211_is_action(mgmt->frame_control) &&
1493 mgmt->u.action.category == WLAN_CATEGORY_BACK) {
1494 struct sta_info *sta;
1495 int len = skb->len;
1496
1497 mutex_lock(&local->sta_mtx);
1498 sta = sta_info_get_bss(sdata, mgmt->sa);
1499 if (sta) {
1500 switch (mgmt->u.action.u.addba_req.action_code) {
1501 case WLAN_ACTION_ADDBA_REQ:
1502 ieee80211_process_addba_request(local, sta,
1503 mgmt, len);
1504 break;
1505 case WLAN_ACTION_ADDBA_RESP:
1506 ieee80211_process_addba_resp(local, sta,
1507 mgmt, len);
1508 break;
1509 case WLAN_ACTION_DELBA:
1510 ieee80211_process_delba(sdata, sta,
1511 mgmt, len);
1512 break;
1513 default:
1514 WARN_ON(1);
1515 break;
1516 }
1517 }
1518 mutex_unlock(&local->sta_mtx);
1519 } else if (ieee80211_is_action(mgmt->frame_control) &&
1520 mgmt->u.action.category == WLAN_CATEGORY_VHT) {
1521 switch (mgmt->u.action.u.vht_group_notif.action_code) {
1522 case WLAN_VHT_ACTION_OPMODE_NOTIF: {
1523 struct ieee80211_rx_status *status;
1524 enum nl80211_band band;
1525 struct sta_info *sta;
1526 u8 opmode;
1527
1528 status = IEEE80211_SKB_RXCB(skb);
1529 band = status->band;
1530 opmode = mgmt->u.action.u.vht_opmode_notif.operating_mode;
1531
1532 mutex_lock(&local->sta_mtx);
1533 sta = sta_info_get_bss(sdata, mgmt->sa);
1534
1535 if (sta)
c71420db
JB
1536 ieee80211_vht_handle_opmode(sdata,
1537 &sta->deflink,
afe0d181 1538 opmode, band);
07bd1c79
JB
1539
1540 mutex_unlock(&local->sta_mtx);
1541 break;
1542 }
1543 case WLAN_VHT_ACTION_GROUPID_MGMT:
d8675a63
JB
1544 ieee80211_process_mu_groups(sdata, &sdata->deflink,
1545 mgmt);
07bd1c79
JB
1546 break;
1547 default:
1548 WARN_ON(1);
1549 break;
1550 }
f5a4c24e
LB
1551 } else if (ieee80211_is_action(mgmt->frame_control) &&
1552 mgmt->u.action.category == WLAN_CATEGORY_S1G) {
1553 switch (mgmt->u.action.u.s1g.action_code) {
1554 case WLAN_S1G_TWT_TEARDOWN:
1555 case WLAN_S1G_TWT_SETUP:
1556 ieee80211_s1g_rx_twt_action(sdata, skb);
1557 break;
1558 default:
1559 break;
1560 }
07bd1c79
JB
1561 } else if (ieee80211_is_ext(mgmt->frame_control)) {
1562 if (sdata->vif.type == NL80211_IFTYPE_STATION)
1563 ieee80211_sta_rx_queued_ext(sdata, skb);
1564 else
1565 WARN_ON(1);
1566 } else if (ieee80211_is_data_qos(mgmt->frame_control)) {
1567 struct ieee80211_hdr *hdr = (void *)mgmt;
1568 struct sta_info *sta;
1569
1570 /*
1571 * So the frame isn't mgmt, but frame_control
1572 * is at the right place anyway, of course, so
1573 * the if statement is correct.
1574 *
1575 * Warn if we have other data frame types here,
1576 * they must not get here.
1577 */
1578 WARN_ON(hdr->frame_control &
1579 cpu_to_le16(IEEE80211_STYPE_NULLFUNC));
1580 WARN_ON(!(hdr->seq_ctrl &
1581 cpu_to_le16(IEEE80211_SCTL_FRAG)));
1582 /*
1583 * This was a fragment of a frame, received while
1584 * a block-ack session was active. That cannot be
1585 * right, so terminate the session.
1586 */
1587 mutex_lock(&local->sta_mtx);
1588 sta = sta_info_get_bss(sdata, mgmt->sa);
1589 if (sta) {
1590 u16 tid = ieee80211_get_tid(hdr);
1591
1592 __ieee80211_stop_rx_ba_session(
1593 sta, tid, WLAN_BACK_RECIPIENT,
1594 WLAN_REASON_QSTA_REQUIRE_SETUP,
1595 true);
1596 }
1597 mutex_unlock(&local->sta_mtx);
1598 } else switch (sdata->vif.type) {
1599 case NL80211_IFTYPE_STATION:
1600 ieee80211_sta_rx_queued_mgmt(sdata, skb);
1601 break;
1602 case NL80211_IFTYPE_ADHOC:
1603 ieee80211_ibss_rx_queued_mgmt(sdata, skb);
1604 break;
1605 case NL80211_IFTYPE_MESH_POINT:
1606 if (!ieee80211_vif_is_mesh(&sdata->vif))
1607 break;
1608 ieee80211_mesh_rx_queued_mgmt(sdata, skb);
1609 break;
1610 default:
1611 WARN(1, "frame for unexpected interface type");
1612 break;
1613 }
1614}
1615
f5a4c24e
LB
1616static void ieee80211_iface_process_status(struct ieee80211_sub_if_data *sdata,
1617 struct sk_buff *skb)
1618{
1619 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1620
1621 if (ieee80211_is_action(mgmt->frame_control) &&
1622 mgmt->u.action.category == WLAN_CATEGORY_S1G) {
1623 switch (mgmt->u.action.u.s1g.action_code) {
1624 case WLAN_S1G_TWT_TEARDOWN:
1625 case WLAN_S1G_TWT_SETUP:
1626 ieee80211_s1g_status_twt_action(sdata, skb);
1627 break;
1628 default:
1629 break;
1630 }
1631 }
1632}
1633
16114496 1634static void ieee80211_iface_work(struct wiphy *wiphy, struct wiphy_work *work)
1fa57d01
JB
1635{
1636 struct ieee80211_sub_if_data *sdata =
1637 container_of(work, struct ieee80211_sub_if_data, work);
1638 struct ieee80211_local *local = sdata->local;
1639 struct sk_buff *skb;
1640
1641 if (!ieee80211_sdata_running(sdata))
1642 return;
1643
fc58c47e 1644 if (test_bit(SCAN_SW_SCANNING, &local->scanning))
1fa57d01
JB
1645 return;
1646
4afaff17 1647 if (!ieee80211_can_run_worker(local))
1fa57d01
JB
1648 return;
1649
1650 /* first process frames */
1651 while ((skb = skb_dequeue(&sdata->skb_queue))) {
261e411b 1652 kcov_remote_start_common(skb_get_kcov_handle(skb));
bed7ee6e 1653
f057d140
JB
1654 if (skb->protocol == cpu_to_be16(ETH_P_TDLS))
1655 ieee80211_process_tdls_channel_switch(sdata, skb);
1656 else
1657 ieee80211_iface_process_skb(local, sdata, skb);
36b3a628
JB
1658
1659 kfree_skb(skb);
261e411b 1660 kcov_remote_stop();
1fa57d01
JB
1661 }
1662
f5a4c24e
LB
1663 /* process status queue */
1664 while ((skb = skb_dequeue(&sdata->status_queue))) {
1665 kcov_remote_start_common(skb_get_kcov_handle(skb));
1666
1667 ieee80211_iface_process_status(sdata, skb);
1668 kfree_skb(skb);
1669
1670 kcov_remote_stop();
1671 }
1672
1fa57d01
JB
1673 /* then other type-dependent work */
1674 switch (sdata->vif.type) {
1675 case NL80211_IFTYPE_STATION:
1676 ieee80211_sta_work(sdata);
1677 break;
1678 case NL80211_IFTYPE_ADHOC:
1679 ieee80211_ibss_work(sdata);
1680 break;
1681 case NL80211_IFTYPE_MESH_POINT:
1682 if (!ieee80211_vif_is_mesh(&sdata->vif))
1683 break;
1684 ieee80211_mesh_work(sdata);
1685 break;
239281f8
RL
1686 case NL80211_IFTYPE_OCB:
1687 ieee80211_ocb_work(sdata);
1688 break;
1fa57d01
JB
1689 default:
1690 break;
1691 }
1692}
1693
3d901102
JB
1694static void ieee80211_activate_links_work(struct work_struct *work)
1695{
1696 struct ieee80211_sub_if_data *sdata =
1697 container_of(work, struct ieee80211_sub_if_data,
1698 activate_links_work);
1699
1700 ieee80211_set_active_links(&sdata->vif, sdata->desired_active_links);
1701}
1702
75636525
JB
1703/*
1704 * Helper function to initialise an interface to a specific type.
1705 */
1706static void ieee80211_setup_sdata(struct ieee80211_sub_if_data *sdata,
05c914fe 1707 enum nl80211_iftype type)
f0706e82 1708{
239281f8
RL
1709 static const u8 bssid_wildcard[ETH_ALEN] = {0xff, 0xff, 0xff,
1710 0xff, 0xff, 0xff};
1711
bfd8403a 1712 /* clear type-dependent unions */
75636525 1713 memset(&sdata->u, 0, sizeof(sdata->u));
bfd8403a 1714 memset(&sdata->deflink.u, 0, sizeof(sdata->deflink.u));
75636525
JB
1715
1716 /* and set some type-dependent values */
1717 sdata->vif.type = type;
2ca27bcf 1718 sdata->vif.p2p = false;
60719ffd 1719 sdata->wdev.iftype = type;
75636525 1720
a621fa4d
JB
1721 sdata->control_port_protocol = cpu_to_be16(ETH_P_PAE);
1722 sdata->control_port_no_encrypt = false;
7f3f96ce
MT
1723 sdata->control_port_over_nl80211 = false;
1724 sdata->control_port_no_preauth = false;
f276e20b 1725 sdata->vif.cfg.idle = true;
db6d9e9e 1726 sdata->vif.bss_conf.txpower = INT_MIN; /* unset */
a621fa4d 1727
b53be792
SW
1728 sdata->noack_map = 0;
1729
f142c6b9
JB
1730 /* only monitor/p2p-device differ */
1731 if (sdata->dev) {
1732 sdata->dev->netdev_ops = &ieee80211_dataif_ops;
1733 sdata->dev->type = ARPHRD_ETHER;
1734 }
75636525 1735
35f20c14 1736 skb_queue_head_init(&sdata->skb_queue);
f5a4c24e 1737 skb_queue_head_init(&sdata->status_queue);
16114496 1738 wiphy_work_init(&sdata->work, ieee80211_iface_work);
3d901102 1739 INIT_WORK(&sdata->activate_links_work, ieee80211_activate_links_work);
35f20c14 1740
75636525 1741 switch (type) {
2ca27bcf
JB
1742 case NL80211_IFTYPE_P2P_GO:
1743 type = NL80211_IFTYPE_AP;
1744 sdata->vif.type = type;
1745 sdata->vif.p2p = true;
fc0561dc 1746 fallthrough;
05c914fe 1747 case NL80211_IFTYPE_AP:
d012a605 1748 skb_queue_head_init(&sdata->u.ap.ps.bc_buf);
75636525 1749 INIT_LIST_HEAD(&sdata->u.ap.vlans);
ad2d223a 1750 sdata->vif.bss_conf.bssid = sdata->vif.addr;
75636525 1751 break;
2ca27bcf
JB
1752 case NL80211_IFTYPE_P2P_CLIENT:
1753 type = NL80211_IFTYPE_STATION;
1754 sdata->vif.type = type;
1755 sdata->vif.p2p = true;
fc0561dc 1756 fallthrough;
05c914fe 1757 case NL80211_IFTYPE_STATION:
bfd8403a 1758 sdata->vif.bss_conf.bssid = sdata->deflink.u.mgd.bssid;
9c6bd790 1759 ieee80211_sta_setup_sdata(sdata);
472dbc45 1760 break;
6e0bd6c3 1761 case NL80211_IFTYPE_OCB:
239281f8
RL
1762 sdata->vif.bss_conf.bssid = bssid_wildcard;
1763 ieee80211_ocb_setup_sdata(sdata);
6e0bd6c3 1764 break;
46900298 1765 case NL80211_IFTYPE_ADHOC:
ad2d223a 1766 sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid;
46900298
JB
1767 ieee80211_ibss_setup_sdata(sdata);
1768 break;
05c914fe 1769 case NL80211_IFTYPE_MESH_POINT:
75636525
JB
1770 if (ieee80211_vif_is_mesh(&sdata->vif))
1771 ieee80211_mesh_init_sdata(sdata);
1772 break;
05c914fe 1773 case NL80211_IFTYPE_MONITOR:
75636525 1774 sdata->dev->type = ARPHRD_IEEE80211_RADIOTAP;
587e729e 1775 sdata->dev->netdev_ops = &ieee80211_monitorif_ops;
d8212184 1776 sdata->u.mntr.flags = MONITOR_FLAG_CONTROL |
75636525
JB
1777 MONITOR_FLAG_OTHER_BSS;
1778 break;
167e33f4
AB
1779 case NL80211_IFTYPE_NAN:
1780 idr_init(&sdata->u.nan.function_inst_ids);
1781 spin_lock_init(&sdata->u.nan.func_lock);
1782 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1783 break;
05c914fe 1784 case NL80211_IFTYPE_AP_VLAN:
98104fde 1785 case NL80211_IFTYPE_P2P_DEVICE:
ad2d223a 1786 sdata->vif.bss_conf.bssid = sdata->vif.addr;
f142c6b9 1787 break;
05c914fe 1788 case NL80211_IFTYPE_UNSPECIFIED:
70d9c599 1789 case NL80211_IFTYPE_WDS:
2e161f78 1790 case NUM_NL80211_IFTYPES:
c7976f52 1791 WARN_ON(1);
75636525
JB
1792 break;
1793 }
1794
b2e8434f
JB
1795 /* need to do this after the switch so vif.type is correct */
1796 ieee80211_link_setup(&sdata->deflink);
1797
75636525
JB
1798 ieee80211_debugfs_add_netdev(sdata);
1799}
1800
34d4bc4d
JB
1801static int ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data *sdata,
1802 enum nl80211_iftype type)
1803{
1804 struct ieee80211_local *local = sdata->local;
1805 int ret, err;
2ca27bcf
JB
1806 enum nl80211_iftype internal_type = type;
1807 bool p2p = false;
34d4bc4d
JB
1808
1809 ASSERT_RTNL();
1810
1811 if (!local->ops->change_interface)
1812 return -EBUSY;
1813
d8787ec6 1814 /* for now, don't support changing while links exist */
f1871abd 1815 if (ieee80211_vif_is_mld(&sdata->vif))
d8787ec6
JB
1816 return -EBUSY;
1817
34d4bc4d
JB
1818 switch (sdata->vif.type) {
1819 case NL80211_IFTYPE_AP:
d5befb22
JB
1820 if (!list_empty(&sdata->u.ap.vlans))
1821 return -EBUSY;
1822 break;
34d4bc4d
JB
1823 case NL80211_IFTYPE_STATION:
1824 case NL80211_IFTYPE_ADHOC:
239281f8 1825 case NL80211_IFTYPE_OCB:
34d4bc4d
JB
1826 /*
1827 * Could maybe also all others here?
1828 * Just not sure how that interacts
1829 * with the RX/config path e.g. for
1830 * mesh.
1831 */
1832 break;
1833 default:
1834 return -EBUSY;
1835 }
1836
1837 switch (type) {
1838 case NL80211_IFTYPE_AP:
1839 case NL80211_IFTYPE_STATION:
1840 case NL80211_IFTYPE_ADHOC:
239281f8 1841 case NL80211_IFTYPE_OCB:
34d4bc4d
JB
1842 /*
1843 * Could probably support everything
70d9c599 1844 * but here.
34d4bc4d
JB
1845 */
1846 break;
2ca27bcf
JB
1847 case NL80211_IFTYPE_P2P_CLIENT:
1848 p2p = true;
1849 internal_type = NL80211_IFTYPE_STATION;
1850 break;
1851 case NL80211_IFTYPE_P2P_GO:
1852 p2p = true;
1853 internal_type = NL80211_IFTYPE_AP;
1854 break;
34d4bc4d
JB
1855 default:
1856 return -EBUSY;
1857 }
1858
2ca27bcf 1859 ret = ieee80211_check_concurrent_iface(sdata, internal_type);
34d4bc4d
JB
1860 if (ret)
1861 return ret;
1862
054c9939
JB
1863 ieee80211_stop_vif_queues(local, sdata,
1864 IEEE80211_QUEUE_STOP_REASON_IFTYPE_CHANGE);
b2ddde56 1865 /* do_stop will synchronize_rcu() first thing */
34d4bc4d
JB
1866 ieee80211_do_stop(sdata, false);
1867
f142c6b9 1868 ieee80211_teardown_sdata(sdata);
34d4bc4d 1869
6aea26ce 1870 ieee80211_set_sdata_offload_flags(sdata);
2ca27bcf 1871 ret = drv_change_interface(local, sdata, internal_type, p2p);
34d4bc4d 1872 if (ret)
a9865538 1873 type = ieee80211_vif_type_p2p(&sdata->vif);
34d4bc4d 1874
3a25a8c8
JB
1875 /*
1876 * Ignore return value here, there's not much we can do since
1877 * the driver changed the interface type internally already.
1878 * The warnings will hopefully make driver authors fix it :-)
1879 */
a9865538 1880 ieee80211_check_queues(sdata, type);
3a25a8c8 1881
34d4bc4d 1882 ieee80211_setup_sdata(sdata, type);
6aea26ce 1883 ieee80211_set_vif_encap_ops(sdata);
34d4bc4d 1884
f142c6b9 1885 err = ieee80211_do_open(&sdata->wdev, false);
34d4bc4d
JB
1886 WARN(err, "type change: do_open returned %d", err);
1887
054c9939
JB
1888 ieee80211_wake_vif_queues(local, sdata,
1889 IEEE80211_QUEUE_STOP_REASON_IFTYPE_CHANGE);
34d4bc4d
JB
1890 return ret;
1891}
1892
f3947e2d 1893int ieee80211_if_change_type(struct ieee80211_sub_if_data *sdata,
05c914fe 1894 enum nl80211_iftype type)
75636525 1895{
34d4bc4d
JB
1896 int ret;
1897
f3947e2d
JB
1898 ASSERT_RTNL();
1899
2ca27bcf 1900 if (type == ieee80211_vif_type_p2p(&sdata->vif))
f3947e2d
JB
1901 return 0;
1902
34d4bc4d
JB
1903 if (ieee80211_sdata_running(sdata)) {
1904 ret = ieee80211_runtime_change_iftype(sdata, type);
1905 if (ret)
1906 return ret;
1907 } else {
1908 /* Purge and reset type-dependent state. */
f142c6b9 1909 ieee80211_teardown_sdata(sdata);
34d4bc4d
JB
1910 ieee80211_setup_sdata(sdata, type);
1911 }
75636525
JB
1912
1913 /* reset some values that shouldn't be kept across type changes */
9bc383de
JB
1914 if (type == NL80211_IFTYPE_STATION)
1915 sdata->u.mgd.use_4addr = false;
f3947e2d
JB
1916
1917 return 0;
f0706e82
JB
1918}
1919
fa9029f8 1920static void ieee80211_assign_perm_addr(struct ieee80211_local *local,
f142c6b9 1921 u8 *perm_addr, enum nl80211_iftype type)
fa9029f8
JB
1922{
1923 struct ieee80211_sub_if_data *sdata;
1924 u64 mask, start, addr, val, inc;
1925 u8 *m;
1926 u8 tmp_addr[ETH_ALEN];
1927 int i;
1928
1929 /* default ... something at least */
f142c6b9 1930 memcpy(perm_addr, local->hw.wiphy->perm_addr, ETH_ALEN);
fa9029f8
JB
1931
1932 if (is_zero_ether_addr(local->hw.wiphy->addr_mask) &&
1933 local->hw.wiphy->n_addresses <= 1)
1934 return;
1935
fa9029f8
JB
1936 mutex_lock(&local->iflist_mtx);
1937
1938 switch (type) {
1939 case NL80211_IFTYPE_MONITOR:
1940 /* doesn't matter */
1941 break;
fa9029f8
JB
1942 case NL80211_IFTYPE_AP_VLAN:
1943 /* match up with an AP interface */
1944 list_for_each_entry(sdata, &local->interfaces, list) {
1945 if (sdata->vif.type != NL80211_IFTYPE_AP)
1946 continue;
f142c6b9 1947 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
fa9029f8
JB
1948 break;
1949 }
1950 /* keep default if no AP interface present */
1951 break;
6d71117a
JB
1952 case NL80211_IFTYPE_P2P_CLIENT:
1953 case NL80211_IFTYPE_P2P_GO:
30686bf7 1954 if (ieee80211_hw_check(&local->hw, P2P_DEV_ADDR_FOR_INTF)) {
6d71117a
JB
1955 list_for_each_entry(sdata, &local->interfaces, list) {
1956 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
1957 continue;
1958 if (!ieee80211_sdata_running(sdata))
1959 continue;
1960 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1961 goto out_unlock;
1962 }
1963 }
fc0561dc 1964 fallthrough;
fa9029f8
JB
1965 default:
1966 /* assign a new address if possible -- try n_addresses first */
1967 for (i = 0; i < local->hw.wiphy->n_addresses; i++) {
1968 bool used = false;
1969
1970 list_for_each_entry(sdata, &local->interfaces, list) {
496d7e8e 1971 if (ether_addr_equal(local->hw.wiphy->addresses[i].addr,
1972 sdata->vif.addr)) {
fa9029f8
JB
1973 used = true;
1974 break;
1975 }
1976 }
1977
1978 if (!used) {
f142c6b9 1979 memcpy(perm_addr,
fa9029f8
JB
1980 local->hw.wiphy->addresses[i].addr,
1981 ETH_ALEN);
1982 break;
1983 }
1984 }
1985
1986 /* try mask if available */
1987 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
1988 break;
1989
1990 m = local->hw.wiphy->addr_mask;
1991 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
1992 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
1993 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
1994
1995 if (__ffs64(mask) + hweight64(mask) != fls64(mask)) {
1996 /* not a contiguous mask ... not handled now! */
bdcbd8e0 1997 pr_info("not contiguous\n");
fa9029f8
JB
1998 break;
1999 }
2000
ac20976d
HS
2001 /*
2002 * Pick address of existing interface in case user changed
2003 * MAC address manually, default to perm_addr.
2004 */
fa9029f8 2005 m = local->hw.wiphy->perm_addr;
ac20976d
HS
2006 list_for_each_entry(sdata, &local->interfaces, list) {
2007 if (sdata->vif.type == NL80211_IFTYPE_MONITOR)
2008 continue;
2009 m = sdata->vif.addr;
2010 break;
2011 }
fa9029f8
JB
2012 start = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
2013 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
2014 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
2015
2016 inc = 1ULL<<__ffs64(mask);
2017 val = (start & mask);
2018 addr = (start & ~mask) | (val & mask);
2019 do {
2020 bool used = false;
2021
2022 tmp_addr[5] = addr >> 0*8;
2023 tmp_addr[4] = addr >> 1*8;
2024 tmp_addr[3] = addr >> 2*8;
2025 tmp_addr[2] = addr >> 3*8;
2026 tmp_addr[1] = addr >> 4*8;
2027 tmp_addr[0] = addr >> 5*8;
2028
2029 val += inc;
2030
2031 list_for_each_entry(sdata, &local->interfaces, list) {
496d7e8e 2032 if (ether_addr_equal(tmp_addr, sdata->vif.addr)) {
fa9029f8
JB
2033 used = true;
2034 break;
2035 }
2036 }
2037
2038 if (!used) {
f142c6b9 2039 memcpy(perm_addr, tmp_addr, ETH_ALEN);
fa9029f8
JB
2040 break;
2041 }
2042 addr = (start & ~mask) | (val & mask);
2043 } while (addr != start);
2044
2045 break;
2046 }
2047
6d71117a 2048 out_unlock:
fa9029f8
JB
2049 mutex_unlock(&local->iflist_mtx);
2050}
2051
3e122be0 2052int ieee80211_if_add(struct ieee80211_local *local, const char *name,
6bab2e19 2053 unsigned char name_assign_type,
84efbb84 2054 struct wireless_dev **new_wdev, enum nl80211_iftype type,
ee385855 2055 struct vif_params *params)
f0706e82 2056{
f142c6b9 2057 struct net_device *ndev = NULL;
f0706e82 2058 struct ieee80211_sub_if_data *sdata = NULL;
ba8c3d6f 2059 struct txq_info *txqi;
75636525 2060 int ret, i;
f0706e82
JB
2061
2062 ASSERT_RTNL();
75636525 2063
708d50ed 2064 if (type == NL80211_IFTYPE_P2P_DEVICE || type == NL80211_IFTYPE_NAN) {
f142c6b9
JB
2065 struct wireless_dev *wdev;
2066
2067 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size,
2068 GFP_KERNEL);
2069 if (!sdata)
2070 return -ENOMEM;
2071 wdev = &sdata->wdev;
2072
2073 sdata->dev = NULL;
28b904ec 2074 strscpy(sdata->name, name, IFNAMSIZ);
f142c6b9
JB
2075 ieee80211_assign_perm_addr(local, wdev->address, type);
2076 memcpy(sdata->vif.addr, wdev->address, ETH_ALEN);
d8787ec6 2077 ether_addr_copy(sdata->vif.bss_conf.addr, sdata->vif.addr);
f142c6b9 2078 } else {
ba8c3d6f
FF
2079 int size = ALIGN(sizeof(*sdata) + local->hw.vif_data_size,
2080 sizeof(void *));
2081 int txq_size = 0;
2082
107395f9 2083 if (type != NL80211_IFTYPE_AP_VLAN &&
8105f9b8
FF
2084 (type != NL80211_IFTYPE_MONITOR ||
2085 (params->flags & MONITOR_FLAG_ACTIVE)))
ba8c3d6f
FF
2086 txq_size += sizeof(struct txq_info) +
2087 local->hw.txq_data_size;
2088
ba8c3d6f 2089 ndev = alloc_netdev_mqs(size + txq_size,
6bab2e19 2090 name, name_assign_type,
107395f9 2091 ieee80211_if_setup, 1, 1);
f142c6b9
JB
2092 if (!ndev)
2093 return -ENOMEM;
1f6e0baa 2094
f142c6b9
JB
2095 dev_net_set(ndev, wiphy_net(local->hw.wiphy));
2096
5a490510
JB
2097 ndev->tstats = netdev_alloc_pcpu_stats(struct pcpu_sw_netstats);
2098 if (!ndev->tstats) {
2099 free_netdev(ndev);
2100 return -ENOMEM;
2101 }
2102
f142c6b9
JB
2103 ndev->needed_headroom = local->tx_headroom +
2104 4*6 /* four MAC addresses */
2105 + 2 + 2 + 2 + 2 /* ctl, dur, seq, qos */
2106 + 6 /* mesh */
2107 + 8 /* rfc1042/bridge tunnel */
2108 - ETH_HLEN /* ethernet hard_header_len */
2109 + IEEE80211_ENCRYPT_HEADROOM;
2110 ndev->needed_tailroom = IEEE80211_ENCRYPT_TAILROOM;
2111
2112 ret = dev_alloc_name(ndev, ndev->name);
2113 if (ret < 0) {
e6436be2 2114 ieee80211_if_free(ndev);
c7a61cba 2115 free_netdev(ndev);
f142c6b9
JB
2116 return ret;
2117 }
2118
2119 ieee80211_assign_perm_addr(local, ndev->perm_addr, type);
dd665d23 2120 if (is_valid_ether_addr(params->macaddr))
de1352ea 2121 eth_hw_addr_set(ndev, params->macaddr);
b5dfae02 2122 else
de1352ea 2123 eth_hw_addr_set(ndev, ndev->perm_addr);
f142c6b9
JB
2124 SET_NETDEV_DEV(ndev, wiphy_dev(local->hw.wiphy));
2125
2126 /* don't use IEEE80211_DEV_TO_SUB_IF -- it checks too much */
2127 sdata = netdev_priv(ndev);
2128 ndev->ieee80211_ptr = &sdata->wdev;
2129 memcpy(sdata->vif.addr, ndev->dev_addr, ETH_ALEN);
d8787ec6 2130 ether_addr_copy(sdata->vif.bss_conf.addr, sdata->vif.addr);
f142c6b9
JB
2131 memcpy(sdata->name, ndev->name, IFNAMSIZ);
2132
ba8c3d6f
FF
2133 if (txq_size) {
2134 txqi = netdev_priv(ndev) + size;
fa962b92 2135 ieee80211_txq_init(sdata, NULL, txqi, 0);
ba8c3d6f
FF
2136 }
2137
f142c6b9
JB
2138 sdata->dev = ndev;
2139 }
75636525
JB
2140
2141 /* initialise type-independent data */
f0706e82 2142 sdata->wdev.wiphy = local->hw.wiphy;
8e14130d
JB
2143
2144 ieee80211_sdata_init(local, sdata);
75636525 2145
3a11ce08 2146 ieee80211_init_frag_cache(&sdata->frags);
75636525
JB
2147
2148 INIT_LIST_HEAD(&sdata->key_list);
2149
8d1f7ecd
JB
2150 INIT_DELAYED_WORK(&sdata->dec_tailroom_needed_wk,
2151 ieee80211_delayed_tailroom_dec);
97f97b1f 2152
57fbcce3 2153 for (i = 0; i < NUM_NL80211_BANDS; i++) {
37eb0b16
JM
2154 struct ieee80211_supported_band *sband;
2155 sband = local->hw.wiphy->bands[i];
2156 sdata->rc_rateidx_mask[i] =
2157 sband ? (1 << sband->n_bitrates) - 1 : 0;
b119ad6e
LB
2158 if (sband) {
2159 __le16 cap;
2160 u16 *vht_rate_mask;
2161
19468413
SW
2162 memcpy(sdata->rc_rateidx_mcs_mask[i],
2163 sband->ht_cap.mcs.rx_mask,
2164 sizeof(sdata->rc_rateidx_mcs_mask[i]));
b119ad6e
LB
2165
2166 cap = sband->vht_cap.vht_mcs.rx_mcs_map;
2167 vht_rate_mask = sdata->rc_rateidx_vht_mcs_mask[i];
2168 ieee80211_get_vht_mask_from_cap(cap, vht_rate_mask);
2169 } else {
19468413
SW
2170 memset(sdata->rc_rateidx_mcs_mask[i], 0,
2171 sizeof(sdata->rc_rateidx_mcs_mask[i]));
b119ad6e
LB
2172 memset(sdata->rc_rateidx_vht_mcs_mask[i], 0,
2173 sizeof(sdata->rc_rateidx_vht_mcs_mask[i]));
2174 }
37eb0b16 2175 }
75636525 2176
3a25a8c8
JB
2177 ieee80211_set_default_queues(sdata);
2178
bfd8403a
JB
2179 sdata->deflink.ap_power_level = IEEE80211_UNSET_POWER_LEVEL;
2180 sdata->deflink.user_power_level = local->user_power_level;
1ea6f9c0 2181
75636525
JB
2182 /* setup type-dependent data */
2183 ieee80211_setup_sdata(sdata, type);
f0706e82 2184
f142c6b9 2185 if (ndev) {
dd665d23
JB
2186 ndev->ieee80211_ptr->use_4addr = params->use_4addr;
2187 if (type == NL80211_IFTYPE_STATION)
2188 sdata->u.mgd.use_4addr = params->use_4addr;
9bc383de 2189
f142c6b9 2190 ndev->features |= local->hw.netdev_features;
3c06e91b 2191 ndev->priv_flags |= IFF_LIVE_ADDR_CHANGE;
07b83d2e
JB
2192 ndev->hw_features |= ndev->features &
2193 MAC80211_SUPPORTED_FEATURES_TX;
7d360f60 2194 sdata->vif.netdev_features = local->hw.netdev_features;
72d78728 2195
b7ffbd7e
JB
2196 netdev_set_default_ethtool_ops(ndev, &ieee80211_ethtool_ops);
2197
79f5962b
JA
2198 /* MTU range is normally 256 - 2304, where the upper limit is
2199 * the maximum MSDU size. Monitor interfaces send and receive
2200 * MPDU and A-MSDU frames which may be much larger so we do
2201 * not impose an upper limit in that case.
2202 */
9c22b4a3 2203 ndev->min_mtu = 256;
79f5962b
JA
2204 if (type == NL80211_IFTYPE_MONITOR)
2205 ndev->max_mtu = 0;
2206 else
2207 ndev->max_mtu = local->hw.max_mtu;
9c22b4a3 2208
2fe8ef10 2209 ret = cfg80211_register_netdevice(ndev);
f142c6b9 2210 if (ret) {
cf124db5 2211 free_netdev(ndev);
f142c6b9
JB
2212 return ret;
2213 }
2214 }
f0706e82 2215
c771c9d8 2216 mutex_lock(&local->iflist_mtx);
79010420 2217 list_add_tail_rcu(&sdata->list, &local->interfaces);
c771c9d8 2218 mutex_unlock(&local->iflist_mtx);
79010420 2219
84efbb84
JB
2220 if (new_wdev)
2221 *new_wdev = &sdata->wdev;
f0706e82 2222
f0706e82 2223 return 0;
f0706e82
JB
2224}
2225
f698d856 2226void ieee80211_if_remove(struct ieee80211_sub_if_data *sdata)
f0706e82 2227{
f0706e82 2228 ASSERT_RTNL();
11a843b7 2229
c771c9d8 2230 mutex_lock(&sdata->local->iflist_mtx);
75636525 2231 list_del_rcu(&sdata->list);
c771c9d8
JB
2232 mutex_unlock(&sdata->local->iflist_mtx);
2233
f1267cf3
BP
2234 if (sdata->vif.txq)
2235 ieee80211_txq_purge(sdata->local, to_txq_info(sdata->vif.txq));
2236
75636525 2237 synchronize_rcu();
f142c6b9 2238
2fe8ef10
JB
2239 cfg80211_unregister_wdev(&sdata->wdev);
2240
2241 if (!sdata->dev) {
835112b2 2242 ieee80211_teardown_sdata(sdata);
f142c6b9
JB
2243 kfree(sdata);
2244 }
2245}
2246
2247void ieee80211_sdata_stop(struct ieee80211_sub_if_data *sdata)
2248{
2249 if (WARN_ON_ONCE(!test_bit(SDATA_STATE_RUNNING, &sdata->state)))
2250 return;
2251 ieee80211_do_stop(sdata, true);
f0706e82
JB
2252}
2253
75636525 2254void ieee80211_remove_interfaces(struct ieee80211_local *local)
f0706e82 2255{
75636525 2256 struct ieee80211_sub_if_data *sdata, *tmp;
efe117ab 2257 LIST_HEAD(unreg_list);
f0706e82
JB
2258
2259 ASSERT_RTNL();
2260
d8d9008c
JB
2261 /* Before destroying the interfaces, make sure they're all stopped so
2262 * that the hardware is stopped. Otherwise, the driver might still be
2263 * iterating the interfaces during the shutdown, e.g. from a worker
2264 * or from RX processing or similar, and if it does so (using atomic
2265 * iteration) while we're manipulating the list, the iteration will
2266 * crash.
2267 *
2268 * After this, the hardware should be stopped and the driver should
2269 * have stopped all of its activities, so that we can do RCU-unaware
2270 * manipulations of the interface list below.
c8aa22db 2271 */
d8d9008c
JB
2272 cfg80211_shutdown_all_interfaces(local->hw.wiphy);
2273
2274 WARN(local->open_count, "%s: open count remains %d\n",
2275 wiphy_name(local->hw.wiphy), local->open_count);
c8aa22db 2276
a50e5fb8
SS
2277 ieee80211_txq_teardown_flows(local);
2278
efe117ab 2279 mutex_lock(&local->iflist_mtx);
a3df43b1 2280 list_splice_init(&local->interfaces, &unreg_list);
efe117ab 2281 mutex_unlock(&local->iflist_mtx);
a05829a7 2282
a05829a7 2283 wiphy_lock(local->hw.wiphy);
a3df43b1
JB
2284 list_for_each_entry_safe(sdata, tmp, &unreg_list, list) {
2285 bool netdev = sdata->dev;
2286
f142c6b9
JB
2287 list_del(&sdata->list);
2288 cfg80211_unregister_wdev(&sdata->wdev);
a3df43b1
JB
2289
2290 if (!netdev)
2291 kfree(sdata);
f142c6b9 2292 }
a05829a7 2293 wiphy_unlock(local->hw.wiphy);
f0706e82 2294}
5cff20e6 2295
47846c9b 2296static int netdev_notify(struct notifier_block *nb,
351638e7 2297 unsigned long state, void *ptr)
47846c9b 2298{
351638e7 2299 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
47846c9b
JB
2300 struct ieee80211_sub_if_data *sdata;
2301
2302 if (state != NETDEV_CHANGENAME)
8bd811aa 2303 return NOTIFY_DONE;
47846c9b
JB
2304
2305 if (!dev->ieee80211_ptr || !dev->ieee80211_ptr->wiphy)
8bd811aa 2306 return NOTIFY_DONE;
47846c9b
JB
2307
2308 if (dev->ieee80211_ptr->wiphy->privid != mac80211_wiphy_privid)
8bd811aa 2309 return NOTIFY_DONE;
47846c9b
JB
2310
2311 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2f5265e6 2312 memcpy(sdata->name, dev->name, IFNAMSIZ);
47846c9b 2313 ieee80211_debugfs_rename_netdev(sdata);
8bd811aa
ZG
2314
2315 return NOTIFY_OK;
47846c9b
JB
2316}
2317
2318static struct notifier_block mac80211_netdev_notifier = {
2319 .notifier_call = netdev_notify,
2320};
2321
2322int ieee80211_iface_init(void)
2323{
2324 return register_netdevice_notifier(&mac80211_netdev_notifier);
2325}
2326
2327void ieee80211_iface_exit(void)
2328{
2329 unregister_netdevice_notifier(&mac80211_netdev_notifier);
2330}
72f15d53
MB
2331
2332void ieee80211_vif_inc_num_mcast(struct ieee80211_sub_if_data *sdata)
2333{
2334 if (sdata->vif.type == NL80211_IFTYPE_AP)
2335 atomic_inc(&sdata->u.ap.num_mcast_sta);
2336 else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
2337 atomic_inc(&sdata->u.vlan.num_mcast_sta);
2338}
2339
2340void ieee80211_vif_dec_num_mcast(struct ieee80211_sub_if_data *sdata)
2341{
2342 if (sdata->vif.type == NL80211_IFTYPE_AP)
2343 atomic_dec(&sdata->u.ap.num_mcast_sta);
2344 else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
2345 atomic_dec(&sdata->u.vlan.num_mcast_sta);
2346}