1// SPDX-License-Identifier: GPL-2.0-only 2/* 3 * mac80211_hwsim - software simulator of 802.11 radio(s) for mac80211 4 * Copyright (c) 2008, Jouni Malinen <j@w1.fi> 5 * Copyright (c) 2011, Javier Lopez <jlopex@gmail.com> 6 * Copyright (c) 2016 - 2017 Intel Deutschland GmbH 7 * Copyright (C) 2018 - 2024 Intel Corporation 8 */ 9 10/* 11 * TODO: 12 * - Add TSF sync and fix IBSS beacon transmission by adding 13 * competition for "air time" at TBTT 14 * - RX filtering based on filter configuration (data->rx_filter) 15 */ 16 17#include <linux/list.h> 18#include <linux/slab.h> 19#include <linux/spinlock.h> 20#include <net/dst.h> 21#include <net/xfrm.h> 22#include <net/mac80211.h> 23#include <net/ieee80211_radiotap.h> 24#include <linux/if_arp.h> 25#include <linux/rtnetlink.h> 26#include <linux/etherdevice.h> 27#include <linux/platform_device.h> 28#include <linux/debugfs.h> 29#include <linux/module.h> 30#include <linux/ktime.h> 31#include <net/genetlink.h> 32#include <net/net_namespace.h> 33#include <net/netns/generic.h> 34#include <linux/rhashtable.h> 35#include <linux/nospec.h> 36#include <linux/virtio.h> 37#include <linux/virtio_ids.h> 38#include <linux/virtio_config.h> 39#include "mac80211_hwsim.h" 40 41#define WARN_QUEUE 100 42#define MAX_QUEUE 200 43 44MODULE_AUTHOR("Jouni Malinen"); 45MODULE_DESCRIPTION("Software simulator of 802.11 radio(s) for mac80211"); 46MODULE_LICENSE("GPL"); 47 48static int radios = 2; 49module_param(radios, int, 0444); 50MODULE_PARM_DESC(radios, "Number of simulated radios"); 51 52static int channels = 1; 53module_param(channels, int, 0444); 54MODULE_PARM_DESC(channels, "Number of concurrent channels"); 55 56static bool paged_rx = false; 57module_param(paged_rx, bool, 0644); 58MODULE_PARM_DESC(paged_rx, "Use paged SKBs for RX instead of linear ones"); 59 60static bool rctbl = false; 61module_param(rctbl, bool, 0444); 62MODULE_PARM_DESC(rctbl, "Handle rate control table"); 63 64static bool support_p2p_device = true; 65module_param(support_p2p_device, bool, 0444); 66MODULE_PARM_DESC(support_p2p_device, "Support P2P-Device interface type"); 67 68static bool mlo; 69module_param(mlo, bool, 0444); 70MODULE_PARM_DESC(mlo, "Support MLO"); 71 72/** 73 * enum hwsim_regtest - the type of regulatory tests we offer 74 * 75 * @HWSIM_REGTEST_DISABLED: No regulatory tests are performed, 76 * this is the default value. 77 * @HWSIM_REGTEST_DRIVER_REG_FOLLOW: Used for testing the driver regulatory 78 * hint, only one driver regulatory hint will be sent as such the 79 * secondary radios are expected to follow. 80 * @HWSIM_REGTEST_DRIVER_REG_ALL: Used for testing the driver regulatory 81 * request with all radios reporting the same regulatory domain. 82 * @HWSIM_REGTEST_DIFF_COUNTRY: Used for testing the drivers calling 83 * different regulatory domains requests. Expected behaviour is for 84 * an intersection to occur but each device will still use their 85 * respective regulatory requested domains. Subsequent radios will 86 * use the resulting intersection. 87 * @HWSIM_REGTEST_WORLD_ROAM: Used for testing the world roaming. We accomplish 88 * this by using a custom beacon-capable regulatory domain for the first 89 * radio. All other device world roam. 90 * @HWSIM_REGTEST_CUSTOM_WORLD: Used for testing the custom world regulatory 91 * domain requests. All radios will adhere to this custom world regulatory 92 * domain. 93 * @HWSIM_REGTEST_CUSTOM_WORLD_2: Used for testing 2 custom world regulatory 94 * domain requests. The first radio will adhere to the first custom world 95 * regulatory domain, the second one to the second custom world regulatory 96 * domain. All other devices will world roam. 97 * @HWSIM_REGTEST_STRICT_FOLLOW: Used for testing strict regulatory domain 98 * settings, only the first radio will send a regulatory domain request 99 * and use strict settings. The rest of the radios are expected to follow. 100 * @HWSIM_REGTEST_STRICT_ALL: Used for testing strict regulatory domain 101 * settings. All radios will adhere to this. 102 * @HWSIM_REGTEST_STRICT_AND_DRIVER_REG: Used for testing strict regulatory 103 * domain settings, combined with secondary driver regulatory domain 104 * settings. The first radio will get a strict regulatory domain setting 105 * using the first driver regulatory request and the second radio will use 106 * non-strict settings using the second driver regulatory request. All 107 * other devices should follow the intersection created between the 108 * first two. 109 * @HWSIM_REGTEST_ALL: Used for testing every possible mix. You will need 110 * at least 6 radios for a complete test. We will test in this order: 111 * 1 - driver custom world regulatory domain 112 * 2 - second custom world regulatory domain 113 * 3 - first driver regulatory domain request 114 * 4 - second driver regulatory domain request 115 * 5 - strict regulatory domain settings using the third driver regulatory 116 * domain request 117 * 6 and on - should follow the intersection of the 3rd, 4rth and 5th radio 118 * regulatory requests. 119 * 120 * These are the different values you can use for the regtest 121 * module parameter. This is useful to help test world roaming 122 * and the driver regulatory_hint() call and combinations of these. 123 * If you want to do specific alpha2 regulatory domain tests simply 124 * use the userspace regulatory request as that will be respected as 125 * well without the need of this module parameter. This is designed 126 * only for testing the driver regulatory request, world roaming 127 * and all possible combinations. 128 */ 129enum hwsim_regtest { 130 HWSIM_REGTEST_DISABLED = 0, 131 HWSIM_REGTEST_DRIVER_REG_FOLLOW = 1, 132 HWSIM_REGTEST_DRIVER_REG_ALL = 2, 133 HWSIM_REGTEST_DIFF_COUNTRY = 3, 134 HWSIM_REGTEST_WORLD_ROAM = 4, 135 HWSIM_REGTEST_CUSTOM_WORLD = 5, 136 HWSIM_REGTEST_CUSTOM_WORLD_2 = 6, 137 HWSIM_REGTEST_STRICT_FOLLOW = 7, 138 HWSIM_REGTEST_STRICT_ALL = 8, 139 HWSIM_REGTEST_STRICT_AND_DRIVER_REG = 9, 140 HWSIM_REGTEST_ALL = 10, 141}; 142 143/* Set to one of the HWSIM_REGTEST_* values above */ 144static int regtest = HWSIM_REGTEST_DISABLED; 145module_param(regtest, int, 0444); 146MODULE_PARM_DESC(regtest, "The type of regulatory test we want to run"); 147 148static const char *hwsim_alpha2s[] = { 149 "FI", 150 "AL", 151 "US", 152 "DE", 153 "JP", 154 "AL", 155}; 156 157static const struct ieee80211_regdomain hwsim_world_regdom_custom_01 = { 158 .n_reg_rules = 5, 159 .alpha2 = "99", 160 .reg_rules = { 161 REG_RULE(2412-10, 2462+10, 40, 0, 20, 0), 162 REG_RULE(2484-10, 2484+10, 40, 0, 20, 0), 163 REG_RULE(5150-10, 5240+10, 40, 0, 30, 0), 164 REG_RULE(5745-10, 5825+10, 40, 0, 30, 0), 165 REG_RULE(5855-10, 5925+10, 40, 0, 33, 0), 166 } 167}; 168 169static const struct ieee80211_regdomain hwsim_world_regdom_custom_02 = { 170 .n_reg_rules = 3, 171 .alpha2 = "99", 172 .reg_rules = { 173 REG_RULE(2412-10, 2462+10, 40, 0, 20, 0), 174 REG_RULE(5725-10, 5850+10, 40, 0, 30, 175 NL80211_RRF_NO_IR), 176 REG_RULE(5855-10, 5925+10, 40, 0, 33, 0), 177 } 178}; 179 180static const struct ieee80211_regdomain hwsim_world_regdom_custom_03 = { 181 .n_reg_rules = 6, 182 .alpha2 = "99", 183 .reg_rules = { 184 REG_RULE(2412 - 10, 2462 + 10, 40, 0, 20, 0), 185 REG_RULE(2484 - 10, 2484 + 10, 40, 0, 20, 0), 186 REG_RULE(5150 - 10, 5240 + 10, 40, 0, 30, 0), 187 REG_RULE(5745 - 10, 5825 + 10, 40, 0, 30, 0), 188 REG_RULE(5855 - 10, 5925 + 10, 40, 0, 33, 0), 189 REG_RULE(5955 - 10, 7125 + 10, 320, 0, 33, 0), 190 } 191}; 192 193static const struct ieee80211_regdomain hwsim_world_regdom_custom_04 = { 194 .n_reg_rules = 6, 195 .alpha2 = "99", 196 .reg_rules = { 197 REG_RULE(2412 - 10, 2462 + 10, 40, 0, 20, 0), 198 REG_RULE(2484 - 10, 2484 + 10, 40, 0, 20, 0), 199 REG_RULE(5150 - 10, 5240 + 10, 80, 0, 30, NL80211_RRF_AUTO_BW), 200 REG_RULE(5260 - 10, 5320 + 10, 80, 0, 30, 201 NL80211_RRF_DFS_CONCURRENT | NL80211_RRF_DFS | 202 NL80211_RRF_AUTO_BW), 203 REG_RULE(5500 - 10, 5720 + 10, 160, 0, 30, 204 NL80211_RRF_DFS_CONCURRENT | NL80211_RRF_DFS), 205 REG_RULE(5745 - 10, 5825 + 10, 80, 0, 30, 0), 206 REG_RULE(5855 - 10, 5925 + 10, 80, 0, 33, 0), 207 } 208}; 209 210static const struct ieee80211_regdomain *hwsim_world_regdom_custom[] = { 211 &hwsim_world_regdom_custom_01, 212 &hwsim_world_regdom_custom_02, 213 &hwsim_world_regdom_custom_03, 214 &hwsim_world_regdom_custom_04, 215}; 216 217struct hwsim_vif_priv { 218 u32 magic; 219 u32 skip_beacons; 220 u8 bssid[ETH_ALEN]; 221 bool assoc; 222 bool bcn_en; 223 u16 aid; 224}; 225 226#define HWSIM_VIF_MAGIC 0x69537748 227 228static inline void hwsim_check_magic(struct ieee80211_vif *vif) 229{ 230 struct hwsim_vif_priv *vp = (void *)vif->drv_priv; 231 WARN(vp->magic != HWSIM_VIF_MAGIC, 232 "Invalid VIF (%p) magic %#x, %pM, %d/%d\n", 233 vif, vp->magic, vif->addr, vif->type, vif->p2p); 234} 235 236static inline void hwsim_set_magic(struct ieee80211_vif *vif) 237{ 238 struct hwsim_vif_priv *vp = (void *)vif->drv_priv; 239 vp->magic = HWSIM_VIF_MAGIC; 240} 241 242static inline void hwsim_clear_magic(struct ieee80211_vif *vif) 243{ 244 struct hwsim_vif_priv *vp = (void *)vif->drv_priv; 245 vp->magic = 0; 246} 247 248struct hwsim_sta_priv { 249 u32 magic; 250 unsigned int last_link; 251 u16 active_links_rx; 252}; 253 254#define HWSIM_STA_MAGIC 0x6d537749 255 256static inline void hwsim_check_sta_magic(struct ieee80211_sta *sta) 257{ 258 struct hwsim_sta_priv *sp = (void *)sta->drv_priv; 259 WARN_ON(sp->magic != HWSIM_STA_MAGIC); 260} 261 262static inline void hwsim_set_sta_magic(struct ieee80211_sta *sta) 263{ 264 struct hwsim_sta_priv *sp = (void *)sta->drv_priv; 265 sp->magic = HWSIM_STA_MAGIC; 266} 267 268static inline void hwsim_clear_sta_magic(struct ieee80211_sta *sta) 269{ 270 struct hwsim_sta_priv *sp = (void *)sta->drv_priv; 271 sp->magic = 0; 272} 273 274struct hwsim_chanctx_priv { 275 u32 magic; 276}; 277 278#define HWSIM_CHANCTX_MAGIC 0x6d53774a 279 280static inline void hwsim_check_chanctx_magic(struct ieee80211_chanctx_conf *c) 281{ 282 struct hwsim_chanctx_priv *cp = (void *)c->drv_priv; 283 WARN_ON(cp->magic != HWSIM_CHANCTX_MAGIC); 284} 285 286static inline void hwsim_set_chanctx_magic(struct ieee80211_chanctx_conf *c) 287{ 288 struct hwsim_chanctx_priv *cp = (void *)c->drv_priv; 289 cp->magic = HWSIM_CHANCTX_MAGIC; 290} 291 292static inline void hwsim_clear_chanctx_magic(struct ieee80211_chanctx_conf *c) 293{ 294 struct hwsim_chanctx_priv *cp = (void *)c->drv_priv; 295 cp->magic = 0; 296} 297 298static unsigned int hwsim_net_id; 299 300static DEFINE_IDA(hwsim_netgroup_ida); 301 302struct hwsim_net { 303 int netgroup; 304 u32 wmediumd; 305}; 306 307static inline int hwsim_net_get_netgroup(struct net *net) 308{ 309 struct hwsim_net *hwsim_net = net_generic(net, hwsim_net_id); 310 311 return hwsim_net->netgroup; 312} 313 314static inline int hwsim_net_set_netgroup(struct net *net) 315{ 316 struct hwsim_net *hwsim_net = net_generic(net, hwsim_net_id); 317 318 hwsim_net->netgroup = ida_alloc(&hwsim_netgroup_ida, GFP_KERNEL); 319 return hwsim_net->netgroup >= 0 ? 0 : -ENOMEM; 320} 321 322static inline u32 hwsim_net_get_wmediumd(struct net *net) 323{ 324 struct hwsim_net *hwsim_net = net_generic(net, hwsim_net_id); 325 326 return hwsim_net->wmediumd; 327} 328 329static inline void hwsim_net_set_wmediumd(struct net *net, u32 portid) 330{ 331 struct hwsim_net *hwsim_net = net_generic(net, hwsim_net_id); 332 333 hwsim_net->wmediumd = portid; 334} 335 336static struct class *hwsim_class; 337 338static struct net_device *hwsim_mon; /* global monitor netdev */ 339 340#define CHAN2G(_freq) { \ 341 .band = NL80211_BAND_2GHZ, \ 342 .center_freq = (_freq), \ 343 .hw_value = (_freq), \ 344} 345 346#define CHAN5G(_freq) { \ 347 .band = NL80211_BAND_5GHZ, \ 348 .center_freq = (_freq), \ 349 .hw_value = (_freq), \ 350} 351 352#define CHAN6G(_freq) { \ 353 .band = NL80211_BAND_6GHZ, \ 354 .center_freq = (_freq), \ 355 .hw_value = (_freq), \ 356} 357 358static const struct ieee80211_channel hwsim_channels_2ghz[] = { 359 CHAN2G(2412), /* Channel 1 */ 360 CHAN2G(2417), /* Channel 2 */ 361 CHAN2G(2422), /* Channel 3 */ 362 CHAN2G(2427), /* Channel 4 */ 363 CHAN2G(2432), /* Channel 5 */ 364 CHAN2G(2437), /* Channel 6 */ 365 CHAN2G(2442), /* Channel 7 */ 366 CHAN2G(2447), /* Channel 8 */ 367 CHAN2G(2452), /* Channel 9 */ 368 CHAN2G(2457), /* Channel 10 */ 369 CHAN2G(2462), /* Channel 11 */ 370 CHAN2G(2467), /* Channel 12 */ 371 CHAN2G(2472), /* Channel 13 */ 372 CHAN2G(2484), /* Channel 14 */ 373}; 374 375static const struct ieee80211_channel hwsim_channels_5ghz[] = { 376 CHAN5G(5180), /* Channel 36 */ 377 CHAN5G(5200), /* Channel 40 */ 378 CHAN5G(5220), /* Channel 44 */ 379 CHAN5G(5240), /* Channel 48 */ 380 381 CHAN5G(5260), /* Channel 52 */ 382 CHAN5G(5280), /* Channel 56 */ 383 CHAN5G(5300), /* Channel 60 */ 384 CHAN5G(5320), /* Channel 64 */ 385 386 CHAN5G(5500), /* Channel 100 */ 387 CHAN5G(5520), /* Channel 104 */ 388 CHAN5G(5540), /* Channel 108 */ 389 CHAN5G(5560), /* Channel 112 */ 390 CHAN5G(5580), /* Channel 116 */ 391 CHAN5G(5600), /* Channel 120 */ 392 CHAN5G(5620), /* Channel 124 */ 393 CHAN5G(5640), /* Channel 128 */ 394 CHAN5G(5660), /* Channel 132 */ 395 CHAN5G(5680), /* Channel 136 */ 396 CHAN5G(5700), /* Channel 140 */ 397 398 CHAN5G(5745), /* Channel 149 */ 399 CHAN5G(5765), /* Channel 153 */ 400 CHAN5G(5785), /* Channel 157 */ 401 CHAN5G(5805), /* Channel 161 */ 402 CHAN5G(5825), /* Channel 165 */ 403 CHAN5G(5845), /* Channel 169 */ 404 405 CHAN5G(5855), /* Channel 171 */ 406 CHAN5G(5860), /* Channel 172 */ 407 CHAN5G(5865), /* Channel 173 */ 408 CHAN5G(5870), /* Channel 174 */ 409 410 CHAN5G(5875), /* Channel 175 */ 411 CHAN5G(5880), /* Channel 176 */ 412 CHAN5G(5885), /* Channel 177 */ 413 CHAN5G(5890), /* Channel 178 */ 414 CHAN5G(5895), /* Channel 179 */ 415 CHAN5G(5900), /* Channel 180 */ 416 CHAN5G(5905), /* Channel 181 */ 417 418 CHAN5G(5910), /* Channel 182 */ 419 CHAN5G(5915), /* Channel 183 */ 420 CHAN5G(5920), /* Channel 184 */ 421 CHAN5G(5925), /* Channel 185 */ 422}; 423 424static const struct ieee80211_channel hwsim_channels_6ghz[] = { 425 CHAN6G(5955), /* Channel 1 */ 426 CHAN6G(5975), /* Channel 5 */ 427 CHAN6G(5995), /* Channel 9 */ 428 CHAN6G(6015), /* Channel 13 */ 429 CHAN6G(6035), /* Channel 17 */ 430 CHAN6G(6055), /* Channel 21 */ 431 CHAN6G(6075), /* Channel 25 */ 432 CHAN6G(6095), /* Channel 29 */ 433 CHAN6G(6115), /* Channel 33 */ 434 CHAN6G(6135), /* Channel 37 */ 435 CHAN6G(6155), /* Channel 41 */ 436 CHAN6G(6175), /* Channel 45 */ 437 CHAN6G(6195), /* Channel 49 */ 438 CHAN6G(6215), /* Channel 53 */ 439 CHAN6G(6235), /* Channel 57 */ 440 CHAN6G(6255), /* Channel 61 */ 441 CHAN6G(6275), /* Channel 65 */ 442 CHAN6G(6295), /* Channel 69 */ 443 CHAN6G(6315), /* Channel 73 */ 444 CHAN6G(6335), /* Channel 77 */ 445 CHAN6G(6355), /* Channel 81 */ 446 CHAN6G(6375), /* Channel 85 */ 447 CHAN6G(6395), /* Channel 89 */ 448 CHAN6G(6415), /* Channel 93 */ 449 CHAN6G(6435), /* Channel 97 */ 450 CHAN6G(6455), /* Channel 181 */ 451 CHAN6G(6475), /* Channel 105 */ 452 CHAN6G(6495), /* Channel 109 */ 453 CHAN6G(6515), /* Channel 113 */ 454 CHAN6G(6535), /* Channel 117 */ 455 CHAN6G(6555), /* Channel 121 */ 456 CHAN6G(6575), /* Channel 125 */ 457 CHAN6G(6595), /* Channel 129 */ 458 CHAN6G(6615), /* Channel 133 */ 459 CHAN6G(6635), /* Channel 137 */ 460 CHAN6G(6655), /* Channel 141 */ 461 CHAN6G(6675), /* Channel 145 */ 462 CHAN6G(6695), /* Channel 149 */ 463 CHAN6G(6715), /* Channel 153 */ 464 CHAN6G(6735), /* Channel 157 */ 465 CHAN6G(6755), /* Channel 161 */ 466 CHAN6G(6775), /* Channel 165 */ 467 CHAN6G(6795), /* Channel 169 */ 468 CHAN6G(6815), /* Channel 173 */ 469 CHAN6G(6835), /* Channel 177 */ 470 CHAN6G(6855), /* Channel 181 */ 471 CHAN6G(6875), /* Channel 185 */ 472 CHAN6G(6895), /* Channel 189 */ 473 CHAN6G(6915), /* Channel 193 */ 474 CHAN6G(6935), /* Channel 197 */ 475 CHAN6G(6955), /* Channel 201 */ 476 CHAN6G(6975), /* Channel 205 */ 477 CHAN6G(6995), /* Channel 209 */ 478 CHAN6G(7015), /* Channel 213 */ 479 CHAN6G(7035), /* Channel 217 */ 480 CHAN6G(7055), /* Channel 221 */ 481 CHAN6G(7075), /* Channel 225 */ 482 CHAN6G(7095), /* Channel 229 */ 483 CHAN6G(7115), /* Channel 233 */ 484}; 485 486#define NUM_S1G_CHANS_US 51 487static struct ieee80211_channel hwsim_channels_s1g[NUM_S1G_CHANS_US]; 488 489static const struct ieee80211_sta_s1g_cap hwsim_s1g_cap = { 490 .s1g = true, 491 .cap = { S1G_CAP0_SGI_1MHZ | S1G_CAP0_SGI_2MHZ, 492 0, 493 0, 494 S1G_CAP3_MAX_MPDU_LEN, 495 0, 496 S1G_CAP5_AMPDU, 497 0, 498 S1G_CAP7_DUP_1MHZ, 499 S1G_CAP8_TWT_RESPOND | S1G_CAP8_TWT_REQUEST, 500 0}, 501 .nss_mcs = { 0xfc | 1, /* MCS 7 for 1 SS */ 502 /* RX Highest Supported Long GI Data Rate 0:7 */ 503 0, 504 /* RX Highest Supported Long GI Data Rate 0:7 */ 505 /* TX S1G MCS Map 0:6 */ 506 0xfa, 507 /* TX S1G MCS Map :7 */ 508 /* TX Highest Supported Long GI Data Rate 0:6 */ 509 0x80, 510 /* TX Highest Supported Long GI Data Rate 7:8 */ 511 /* Rx Single spatial stream and S1G-MCS Map for 1MHz */ 512 /* Tx Single spatial stream and S1G-MCS Map for 1MHz */ 513 0 }, 514}; 515 516static void hwsim_init_s1g_channels(struct ieee80211_channel *chans) 517{ 518 int ch, freq; 519 520 for (ch = 0; ch < NUM_S1G_CHANS_US; ch++) { 521 freq = 902000 + (ch + 1) * 500; 522 chans[ch].band = NL80211_BAND_S1GHZ; 523 chans[ch].center_freq = KHZ_TO_MHZ(freq); 524 chans[ch].freq_offset = freq % 1000; 525 chans[ch].hw_value = ch + 1; 526 } 527} 528 529static const struct ieee80211_rate hwsim_rates[] = { 530 { .bitrate = 10 }, 531 { .bitrate = 20, .flags = IEEE80211_RATE_SHORT_PREAMBLE }, 532 { .bitrate = 55, .flags = IEEE80211_RATE_SHORT_PREAMBLE }, 533 { .bitrate = 110, .flags = IEEE80211_RATE_SHORT_PREAMBLE }, 534 { .bitrate = 60 }, 535 { .bitrate = 90 }, 536 { .bitrate = 120 }, 537 { .bitrate = 180 }, 538 { .bitrate = 240 }, 539 { .bitrate = 360 }, 540 { .bitrate = 480 }, 541 { .bitrate = 540 } 542}; 543 544#define DEFAULT_RX_RSSI -50 545 546static const u32 hwsim_ciphers[] = { 547 WLAN_CIPHER_SUITE_WEP40, 548 WLAN_CIPHER_SUITE_WEP104, 549 WLAN_CIPHER_SUITE_TKIP, 550 WLAN_CIPHER_SUITE_CCMP, 551 WLAN_CIPHER_SUITE_CCMP_256, 552 WLAN_CIPHER_SUITE_GCMP, 553 WLAN_CIPHER_SUITE_GCMP_256, 554 WLAN_CIPHER_SUITE_AES_CMAC, 555 WLAN_CIPHER_SUITE_BIP_CMAC_256, 556 WLAN_CIPHER_SUITE_BIP_GMAC_128, 557 WLAN_CIPHER_SUITE_BIP_GMAC_256, 558}; 559 560#define OUI_QCA 0x001374 561#define QCA_NL80211_SUBCMD_TEST 1 562enum qca_nl80211_vendor_subcmds { 563 QCA_WLAN_VENDOR_ATTR_TEST = 8, 564 QCA_WLAN_VENDOR_ATTR_MAX = QCA_WLAN_VENDOR_ATTR_TEST 565}; 566 567static const struct nla_policy 568hwsim_vendor_test_policy[QCA_WLAN_VENDOR_ATTR_MAX + 1] = { 569 [QCA_WLAN_VENDOR_ATTR_MAX] = { .type = NLA_U32 }, 570}; 571 572static int mac80211_hwsim_vendor_cmd_test(struct wiphy *wiphy, 573 struct wireless_dev *wdev, 574 const void *data, int data_len) 575{ 576 struct sk_buff *skb; 577 struct nlattr *tb[QCA_WLAN_VENDOR_ATTR_MAX + 1]; 578 int err; 579 u32 val; 580 581 err = nla_parse_deprecated(tb, QCA_WLAN_VENDOR_ATTR_MAX, data, 582 data_len, hwsim_vendor_test_policy, NULL); 583 if (err) 584 return err; 585 if (!tb[QCA_WLAN_VENDOR_ATTR_TEST]) 586 return -EINVAL; 587 val = nla_get_u32(tb[QCA_WLAN_VENDOR_ATTR_TEST]); 588 wiphy_dbg(wiphy, "%s: test=%u\n", __func__, val); 589 590 /* Send a vendor event as a test. Note that this would not normally be 591 * done within a command handler, but rather, based on some other 592 * trigger. For simplicity, this command is used to trigger the event 593 * here. 594 * 595 * event_idx = 0 (index in mac80211_hwsim_vendor_commands) 596 */ 597 skb = cfg80211_vendor_event_alloc(wiphy, wdev, 100, 0, GFP_KERNEL); 598 if (skb) { 599 /* skb_put() or nla_put() will fill up data within 600 * NL80211_ATTR_VENDOR_DATA. 601 */ 602 603 /* Add vendor data */ 604 nla_put_u32(skb, QCA_WLAN_VENDOR_ATTR_TEST, val + 1); 605 606 /* Send the event - this will call nla_nest_end() */ 607 cfg80211_vendor_event(skb, GFP_KERNEL); 608 } 609 610 /* Send a response to the command */ 611 skb = cfg80211_vendor_cmd_alloc_reply_skb(wiphy, 10); 612 if (!skb) 613 return -ENOMEM; 614 615 /* skb_put() or nla_put() will fill up data within 616 * NL80211_ATTR_VENDOR_DATA 617 */ 618 nla_put_u32(skb, QCA_WLAN_VENDOR_ATTR_TEST, val + 2); 619 620 return cfg80211_vendor_cmd_reply(skb); 621} 622 623static struct wiphy_vendor_command mac80211_hwsim_vendor_commands[] = { 624 { 625 .info = { .vendor_id = OUI_QCA, 626 .subcmd = QCA_NL80211_SUBCMD_TEST }, 627 .flags = WIPHY_VENDOR_CMD_NEED_NETDEV, 628 .doit = mac80211_hwsim_vendor_cmd_test, 629 .policy = hwsim_vendor_test_policy, 630 .maxattr = QCA_WLAN_VENDOR_ATTR_MAX, 631 } 632}; 633 634/* Advertise support vendor specific events */ 635static const struct nl80211_vendor_cmd_info mac80211_hwsim_vendor_events[] = { 636 { .vendor_id = OUI_QCA, .subcmd = 1 }, 637}; 638 639static DEFINE_SPINLOCK(hwsim_radio_lock); 640static LIST_HEAD(hwsim_radios); 641static struct rhashtable hwsim_radios_rht; 642static int hwsim_radio_idx; 643static int hwsim_radios_generation = 1; 644 645static struct platform_driver mac80211_hwsim_driver = { 646 .driver = { 647 .name = "mac80211_hwsim", 648 }, 649}; 650 651struct mac80211_hwsim_link_data { 652 u32 link_id; 653 u64 beacon_int /* beacon interval in us */; 654 struct hrtimer beacon_timer; 655}; 656 657struct mac80211_hwsim_data { 658 struct list_head list; 659 struct rhash_head rht; 660 struct ieee80211_hw *hw; 661 struct device *dev; 662 struct ieee80211_supported_band bands[NUM_NL80211_BANDS]; 663 struct ieee80211_channel channels_2ghz[ARRAY_SIZE(hwsim_channels_2ghz)]; 664 struct ieee80211_channel channels_5ghz[ARRAY_SIZE(hwsim_channels_5ghz)]; 665 struct ieee80211_channel channels_6ghz[ARRAY_SIZE(hwsim_channels_6ghz)]; 666 struct ieee80211_channel channels_s1g[ARRAY_SIZE(hwsim_channels_s1g)]; 667 struct ieee80211_rate rates[ARRAY_SIZE(hwsim_rates)]; 668 struct ieee80211_iface_combination if_combination; 669 struct ieee80211_iface_limit if_limits[3]; 670 int n_if_limits; 671 672 u32 ciphers[ARRAY_SIZE(hwsim_ciphers)]; 673 674 struct mac_address addresses[2]; 675 int channels, idx; 676 bool use_chanctx; 677 bool destroy_on_close; 678 u32 portid; 679 char alpha2[2]; 680 const struct ieee80211_regdomain *regd; 681 682 struct ieee80211_channel *tmp_chan; 683 struct ieee80211_channel *roc_chan; 684 u32 roc_duration; 685 struct delayed_work roc_start; 686 struct delayed_work roc_done; 687 struct delayed_work hw_scan; 688 struct cfg80211_scan_request *hw_scan_request; 689 struct ieee80211_vif *hw_scan_vif; 690 int scan_chan_idx; 691 u8 scan_addr[ETH_ALEN]; 692 struct { 693 struct ieee80211_channel *channel; 694 unsigned long next_start, start, end; 695 } survey_data[ARRAY_SIZE(hwsim_channels_2ghz) + 696 ARRAY_SIZE(hwsim_channels_5ghz) + 697 ARRAY_SIZE(hwsim_channels_6ghz)]; 698 699 struct ieee80211_channel *channel; 700 enum nl80211_chan_width bw; 701 unsigned int rx_filter; 702 bool started, idle, scanning; 703 struct mutex mutex; 704 enum ps_mode { 705 PS_DISABLED, PS_ENABLED, PS_AUTO_POLL, PS_MANUAL_POLL 706 } ps; 707 bool ps_poll_pending; 708 struct dentry *debugfs; 709 710 atomic_t pending_cookie; 711 struct sk_buff_head pending; /* packets pending */ 712 /* 713 * Only radios in the same group can communicate together (the 714 * channel has to match too). Each bit represents a group. A 715 * radio can be in more than one group. 716 */ 717 u64 group; 718 719 /* group shared by radios created in the same netns */ 720 int netgroup; 721 /* wmediumd portid responsible for netgroup of this radio */ 722 u32 wmediumd; 723 724 /* difference between this hw's clock and the real clock, in usecs */ 725 s64 tsf_offset; 726 s64 bcn_delta; 727 /* absolute beacon transmission time. Used to cover up "tx" delay. */ 728 u64 abs_bcn_ts; 729 730 /* Stats */ 731 u64 tx_pkts; 732 u64 rx_pkts; 733 u64 tx_bytes; 734 u64 rx_bytes; 735 u64 tx_dropped; 736 u64 tx_failed; 737 738 /* RSSI in rx status of the receiver */ 739 int rx_rssi; 740 741 /* only used when pmsr capability is supplied */ 742 struct cfg80211_pmsr_capabilities pmsr_capa; 743 struct cfg80211_pmsr_request *pmsr_request; 744 struct wireless_dev *pmsr_request_wdev; 745 746 struct mac80211_hwsim_link_data link_data[IEEE80211_MLD_MAX_NUM_LINKS]; 747}; 748 749static const struct rhashtable_params hwsim_rht_params = { 750 .nelem_hint = 2, 751 .automatic_shrinking = true, 752 .key_len = ETH_ALEN, 753 .key_offset = offsetof(struct mac80211_hwsim_data, addresses[1]), 754 .head_offset = offsetof(struct mac80211_hwsim_data, rht), 755}; 756 757struct hwsim_radiotap_hdr { 758 struct ieee80211_radiotap_header hdr; 759 __le64 rt_tsft; 760 u8 rt_flags; 761 u8 rt_rate; 762 __le16 rt_channel; 763 __le16 rt_chbitmask; 764} __packed; 765 766struct hwsim_radiotap_ack_hdr { 767 struct ieee80211_radiotap_header hdr; 768 u8 rt_flags; 769 u8 pad; 770 __le16 rt_channel; 771 __le16 rt_chbitmask; 772} __packed; 773 774static struct mac80211_hwsim_data *get_hwsim_data_ref_from_addr(const u8 *addr) 775{ 776 return rhashtable_lookup_fast(&hwsim_radios_rht, addr, hwsim_rht_params); 777} 778 779/* MAC80211_HWSIM netlink family */ 780static struct genl_family hwsim_genl_family; 781 782enum hwsim_multicast_groups { 783 HWSIM_MCGRP_CONFIG, 784}; 785 786static const struct genl_multicast_group hwsim_mcgrps[] = { 787 [HWSIM_MCGRP_CONFIG] = { .name = "config", }, 788}; 789 790/* MAC80211_HWSIM netlink policy */ 791 792static const struct nla_policy 793hwsim_rate_info_policy[HWSIM_RATE_INFO_ATTR_MAX + 1] = { 794 [HWSIM_RATE_INFO_ATTR_FLAGS] = { .type = NLA_U8 }, 795 [HWSIM_RATE_INFO_ATTR_MCS] = { .type = NLA_U8 }, 796 [HWSIM_RATE_INFO_ATTR_LEGACY] = { .type = NLA_U16 }, 797 [HWSIM_RATE_INFO_ATTR_NSS] = { .type = NLA_U8 }, 798 [HWSIM_RATE_INFO_ATTR_BW] = { .type = NLA_U8 }, 799 [HWSIM_RATE_INFO_ATTR_HE_GI] = { .type = NLA_U8 }, 800 [HWSIM_RATE_INFO_ATTR_HE_DCM] = { .type = NLA_U8 }, 801 [HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC] = { .type = NLA_U8 }, 802 [HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH] = { .type = NLA_U8 }, 803 [HWSIM_RATE_INFO_ATTR_EHT_GI] = { .type = NLA_U8 }, 804 [HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC] = { .type = NLA_U8 }, 805}; 806 807static const struct nla_policy 808hwsim_ftm_result_policy[NL80211_PMSR_FTM_RESP_ATTR_MAX + 1] = { 809 [NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON] = { .type = NLA_U32 }, 810 [NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX] = { .type = NLA_U16 }, 811 [NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS] = { .type = NLA_U32 }, 812 [NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES] = { .type = NLA_U32 }, 813 [NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME] = { .type = NLA_U8 }, 814 [NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP] = { .type = NLA_U8 }, 815 [NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION] = { .type = NLA_U8 }, 816 [NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST] = { .type = NLA_U8 }, 817 [NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG] = { .type = NLA_U32 }, 818 [NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD] = { .type = NLA_U32 }, 819 [NL80211_PMSR_FTM_RESP_ATTR_TX_RATE] = NLA_POLICY_NESTED(hwsim_rate_info_policy), 820 [NL80211_PMSR_FTM_RESP_ATTR_RX_RATE] = NLA_POLICY_NESTED(hwsim_rate_info_policy), 821 [NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG] = { .type = NLA_U64 }, 822 [NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE] = { .type = NLA_U64 }, 823 [NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD] = { .type = NLA_U64 }, 824 [NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG] = { .type = NLA_U64 }, 825 [NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE] = { .type = NLA_U64 }, 826 [NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD] = { .type = NLA_U64 }, 827 [NL80211_PMSR_FTM_RESP_ATTR_LCI] = { .type = NLA_STRING }, 828 [NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC] = { .type = NLA_STRING }, 829}; 830 831static const struct nla_policy 832hwsim_pmsr_resp_type_policy[NL80211_PMSR_TYPE_MAX + 1] = { 833 [NL80211_PMSR_TYPE_FTM] = NLA_POLICY_NESTED(hwsim_ftm_result_policy), 834}; 835 836static const struct nla_policy 837hwsim_pmsr_resp_policy[NL80211_PMSR_RESP_ATTR_MAX + 1] = { 838 [NL80211_PMSR_RESP_ATTR_STATUS] = { .type = NLA_U32 }, 839 [NL80211_PMSR_RESP_ATTR_HOST_TIME] = { .type = NLA_U64 }, 840 [NL80211_PMSR_RESP_ATTR_AP_TSF] = { .type = NLA_U64 }, 841 [NL80211_PMSR_RESP_ATTR_FINAL] = { .type = NLA_FLAG }, 842 [NL80211_PMSR_RESP_ATTR_DATA] = NLA_POLICY_NESTED(hwsim_pmsr_resp_type_policy), 843}; 844 845static const struct nla_policy 846hwsim_pmsr_peer_result_policy[NL80211_PMSR_PEER_ATTR_MAX + 1] = { 847 [NL80211_PMSR_PEER_ATTR_ADDR] = NLA_POLICY_ETH_ADDR_COMPAT, 848 [NL80211_PMSR_PEER_ATTR_CHAN] = { .type = NLA_REJECT }, 849 [NL80211_PMSR_PEER_ATTR_REQ] = { .type = NLA_REJECT }, 850 [NL80211_PMSR_PEER_ATTR_RESP] = NLA_POLICY_NESTED(hwsim_pmsr_resp_policy), 851}; 852 853static const struct nla_policy 854hwsim_pmsr_peers_result_policy[NL80211_PMSR_ATTR_MAX + 1] = { 855 [NL80211_PMSR_ATTR_MAX_PEERS] = { .type = NLA_REJECT }, 856 [NL80211_PMSR_ATTR_REPORT_AP_TSF] = { .type = NLA_REJECT }, 857 [NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR] = { .type = NLA_REJECT }, 858 [NL80211_PMSR_ATTR_TYPE_CAPA] = { .type = NLA_REJECT }, 859 [NL80211_PMSR_ATTR_PEERS] = NLA_POLICY_NESTED_ARRAY(hwsim_pmsr_peer_result_policy), 860}; 861 862static const struct nla_policy 863hwsim_ftm_capa_policy[NL80211_PMSR_FTM_CAPA_ATTR_MAX + 1] = { 864 [NL80211_PMSR_FTM_CAPA_ATTR_ASAP] = { .type = NLA_FLAG }, 865 [NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP] = { .type = NLA_FLAG }, 866 [NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI] = { .type = NLA_FLAG }, 867 [NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC] = { .type = NLA_FLAG }, 868 [NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES] = { .type = NLA_U32 }, 869 [NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS] = { .type = NLA_U32 }, 870 [NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT] = NLA_POLICY_MAX(NLA_U8, 15), 871 [NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST] = NLA_POLICY_MAX(NLA_U8, 31), 872 [NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED] = { .type = NLA_FLAG }, 873 [NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED] = { .type = NLA_FLAG }, 874}; 875 876static const struct nla_policy 877hwsim_pmsr_capa_type_policy[NL80211_PMSR_TYPE_MAX + 1] = { 878 [NL80211_PMSR_TYPE_FTM] = NLA_POLICY_NESTED(hwsim_ftm_capa_policy), 879}; 880 881static const struct nla_policy 882hwsim_pmsr_capa_policy[NL80211_PMSR_ATTR_MAX + 1] = { 883 [NL80211_PMSR_ATTR_MAX_PEERS] = { .type = NLA_U32 }, 884 [NL80211_PMSR_ATTR_REPORT_AP_TSF] = { .type = NLA_FLAG }, 885 [NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR] = { .type = NLA_FLAG }, 886 [NL80211_PMSR_ATTR_TYPE_CAPA] = NLA_POLICY_NESTED(hwsim_pmsr_capa_type_policy), 887 [NL80211_PMSR_ATTR_PEERS] = { .type = NLA_REJECT }, // only for request. 888}; 889 890static const struct nla_policy hwsim_genl_policy[HWSIM_ATTR_MAX + 1] = { 891 [HWSIM_ATTR_ADDR_RECEIVER] = NLA_POLICY_ETH_ADDR_COMPAT, 892 [HWSIM_ATTR_ADDR_TRANSMITTER] = NLA_POLICY_ETH_ADDR_COMPAT, 893 [HWSIM_ATTR_FRAME] = { .type = NLA_BINARY, 894 .len = IEEE80211_MAX_DATA_LEN }, 895 [HWSIM_ATTR_FLAGS] = { .type = NLA_U32 }, 896 [HWSIM_ATTR_RX_RATE] = { .type = NLA_U32 }, 897 [HWSIM_ATTR_SIGNAL] = { .type = NLA_U32 }, 898 [HWSIM_ATTR_TX_INFO] = { .type = NLA_BINARY, 899 .len = IEEE80211_TX_MAX_RATES * 900 sizeof(struct hwsim_tx_rate)}, 901 [HWSIM_ATTR_COOKIE] = { .type = NLA_U64 }, 902 [HWSIM_ATTR_CHANNELS] = { .type = NLA_U32 }, 903 [HWSIM_ATTR_RADIO_ID] = { .type = NLA_U32 }, 904 [HWSIM_ATTR_REG_HINT_ALPHA2] = { .type = NLA_STRING, .len = 2 }, 905 [HWSIM_ATTR_REG_CUSTOM_REG] = { .type = NLA_U32 }, 906 [HWSIM_ATTR_REG_STRICT_REG] = { .type = NLA_FLAG }, 907 [HWSIM_ATTR_SUPPORT_P2P_DEVICE] = { .type = NLA_FLAG }, 908 [HWSIM_ATTR_USE_CHANCTX] = { .type = NLA_FLAG }, 909 [HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE] = { .type = NLA_FLAG }, 910 [HWSIM_ATTR_RADIO_NAME] = { .type = NLA_STRING }, 911 [HWSIM_ATTR_NO_VIF] = { .type = NLA_FLAG }, 912 [HWSIM_ATTR_FREQ] = { .type = NLA_U32 }, 913 [HWSIM_ATTR_TX_INFO_FLAGS] = { .type = NLA_BINARY }, 914 [HWSIM_ATTR_PERM_ADDR] = NLA_POLICY_ETH_ADDR_COMPAT, 915 [HWSIM_ATTR_IFTYPE_SUPPORT] = { .type = NLA_U32 }, 916 [HWSIM_ATTR_CIPHER_SUPPORT] = { .type = NLA_BINARY }, 917 [HWSIM_ATTR_MLO_SUPPORT] = { .type = NLA_FLAG }, 918 [HWSIM_ATTR_PMSR_SUPPORT] = NLA_POLICY_NESTED(hwsim_pmsr_capa_policy), 919 [HWSIM_ATTR_PMSR_RESULT] = NLA_POLICY_NESTED(hwsim_pmsr_peers_result_policy), 920}; 921 922#if IS_REACHABLE(CONFIG_VIRTIO) 923 924/* MAC80211_HWSIM virtio queues */ 925static struct virtqueue *hwsim_vqs[HWSIM_NUM_VQS]; 926static bool hwsim_virtio_enabled; 927static DEFINE_SPINLOCK(hwsim_virtio_lock); 928 929static void hwsim_virtio_rx_work(struct work_struct *work); 930static DECLARE_WORK(hwsim_virtio_rx, hwsim_virtio_rx_work); 931 932static int hwsim_tx_virtio(struct mac80211_hwsim_data *data, 933 struct sk_buff *skb) 934{ 935 struct scatterlist sg[1]; 936 unsigned long flags; 937 int err; 938 939 spin_lock_irqsave(&hwsim_virtio_lock, flags); 940 if (!hwsim_virtio_enabled) { 941 err = -ENODEV; 942 goto out_free; 943 } 944 945 sg_init_one(sg, skb->head, skb_end_offset(skb)); 946 err = virtqueue_add_outbuf(hwsim_vqs[HWSIM_VQ_TX], sg, 1, skb, 947 GFP_ATOMIC); 948 if (err) 949 goto out_free; 950 virtqueue_kick(hwsim_vqs[HWSIM_VQ_TX]); 951 spin_unlock_irqrestore(&hwsim_virtio_lock, flags); 952 return 0; 953 954out_free: 955 spin_unlock_irqrestore(&hwsim_virtio_lock, flags); 956 nlmsg_free(skb); 957 return err; 958} 959#else 960/* cause a linker error if this ends up being needed */ 961extern int hwsim_tx_virtio(struct mac80211_hwsim_data *data, 962 struct sk_buff *skb); 963#define hwsim_virtio_enabled false 964#endif 965 966static int hwsim_get_chanwidth(enum nl80211_chan_width bw) 967{ 968 switch (bw) { 969 case NL80211_CHAN_WIDTH_20_NOHT: 970 case NL80211_CHAN_WIDTH_20: 971 return 20; 972 case NL80211_CHAN_WIDTH_40: 973 return 40; 974 case NL80211_CHAN_WIDTH_80: 975 return 80; 976 case NL80211_CHAN_WIDTH_80P80: 977 case NL80211_CHAN_WIDTH_160: 978 return 160; 979 case NL80211_CHAN_WIDTH_320: 980 return 320; 981 case NL80211_CHAN_WIDTH_5: 982 return 5; 983 case NL80211_CHAN_WIDTH_10: 984 return 10; 985 case NL80211_CHAN_WIDTH_1: 986 return 1; 987 case NL80211_CHAN_WIDTH_2: 988 return 2; 989 case NL80211_CHAN_WIDTH_4: 990 return 4; 991 case NL80211_CHAN_WIDTH_8: 992 return 8; 993 case NL80211_CHAN_WIDTH_16: 994 return 16; 995 } 996 997 return INT_MAX; 998} 999 1000static void mac80211_hwsim_tx_frame(struct ieee80211_hw *hw, 1001 struct sk_buff *skb, 1002 struct ieee80211_channel *chan); 1003 1004/* sysfs attributes */ 1005static void hwsim_send_ps_poll(void *dat, u8 *mac, struct ieee80211_vif *vif) 1006{ 1007 struct mac80211_hwsim_data *data = dat; 1008 struct hwsim_vif_priv *vp = (void *)vif->drv_priv; 1009 struct sk_buff *skb; 1010 struct ieee80211_pspoll *pspoll; 1011 1012 if (!vp->assoc) 1013 return; 1014 1015 wiphy_dbg(data->hw->wiphy, 1016 "%s: send PS-Poll to %pM for aid %d\n", 1017 __func__, vp->bssid, vp->aid); 1018 1019 skb = dev_alloc_skb(sizeof(*pspoll)); 1020 if (!skb) 1021 return; 1022 pspoll = skb_put(skb, sizeof(*pspoll)); 1023 pspoll->frame_control = cpu_to_le16(IEEE80211_FTYPE_CTL | 1024 IEEE80211_STYPE_PSPOLL | 1025 IEEE80211_FCTL_PM); 1026 pspoll->aid = cpu_to_le16(0xc000 | vp->aid); 1027 memcpy(pspoll->bssid, vp->bssid, ETH_ALEN); 1028 memcpy(pspoll->ta, mac, ETH_ALEN); 1029 1030 rcu_read_lock(); 1031 mac80211_hwsim_tx_frame(data->hw, skb, 1032 rcu_dereference(vif->bss_conf.chanctx_conf)->def.chan); 1033 rcu_read_unlock(); 1034} 1035 1036static void hwsim_send_nullfunc(struct mac80211_hwsim_data *data, u8 *mac, 1037 struct ieee80211_vif *vif, int ps) 1038{ 1039 struct hwsim_vif_priv *vp = (void *)vif->drv_priv; 1040 struct sk_buff *skb; 1041 struct ieee80211_hdr *hdr; 1042 struct ieee80211_tx_info *cb; 1043 1044 if (!vp->assoc) 1045 return; 1046 1047 wiphy_dbg(data->hw->wiphy, 1048 "%s: send data::nullfunc to %pM ps=%d\n", 1049 __func__, vp->bssid, ps); 1050 1051 skb = dev_alloc_skb(sizeof(*hdr)); 1052 if (!skb) 1053 return; 1054 hdr = skb_put(skb, sizeof(*hdr) - ETH_ALEN); 1055 hdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA | 1056 IEEE80211_STYPE_NULLFUNC | 1057 IEEE80211_FCTL_TODS | 1058 (ps ? IEEE80211_FCTL_PM : 0)); 1059 hdr->duration_id = cpu_to_le16(0); 1060 memcpy(hdr->addr1, vp->bssid, ETH_ALEN); 1061 memcpy(hdr->addr2, mac, ETH_ALEN); 1062 memcpy(hdr->addr3, vp->bssid, ETH_ALEN); 1063 1064 cb = IEEE80211_SKB_CB(skb); 1065 cb->control.rates[0].count = 1; 1066 cb->control.rates[1].idx = -1; 1067 1068 rcu_read_lock(); 1069 mac80211_hwsim_tx_frame(data->hw, skb, 1070 rcu_dereference(vif->bss_conf.chanctx_conf)->def.chan); 1071 rcu_read_unlock(); 1072} 1073 1074 1075static void hwsim_send_nullfunc_ps(void *dat, u8 *mac, 1076 struct ieee80211_vif *vif) 1077{ 1078 struct mac80211_hwsim_data *data = dat; 1079 hwsim_send_nullfunc(data, mac, vif, 1); 1080} 1081 1082static void hwsim_send_nullfunc_no_ps(void *dat, u8 *mac, 1083 struct ieee80211_vif *vif) 1084{ 1085 struct mac80211_hwsim_data *data = dat; 1086 hwsim_send_nullfunc(data, mac, vif, 0); 1087} 1088 1089static int hwsim_fops_ps_read(void *dat, u64 *val) 1090{ 1091 struct mac80211_hwsim_data *data = dat; 1092 *val = data->ps; 1093 return 0; 1094} 1095 1096static int hwsim_fops_ps_write(void *dat, u64 val) 1097{ 1098 struct mac80211_hwsim_data *data = dat; 1099 enum ps_mode old_ps; 1100 1101 if (val != PS_DISABLED && val != PS_ENABLED && val != PS_AUTO_POLL && 1102 val != PS_MANUAL_POLL) 1103 return -EINVAL; 1104 1105 if (val == PS_MANUAL_POLL) { 1106 if (data->ps != PS_ENABLED) 1107 return -EINVAL; 1108 local_bh_disable(); 1109 ieee80211_iterate_active_interfaces_atomic( 1110 data->hw, IEEE80211_IFACE_ITER_NORMAL, 1111 hwsim_send_ps_poll, data); 1112 local_bh_enable(); 1113 return 0; 1114 } 1115 old_ps = data->ps; 1116 data->ps = val; 1117 1118 local_bh_disable(); 1119 if (old_ps == PS_DISABLED && val != PS_DISABLED) { 1120 ieee80211_iterate_active_interfaces_atomic( 1121 data->hw, IEEE80211_IFACE_ITER_NORMAL, 1122 hwsim_send_nullfunc_ps, data); 1123 } else if (old_ps != PS_DISABLED && val == PS_DISABLED) { 1124 ieee80211_iterate_active_interfaces_atomic( 1125 data->hw, IEEE80211_IFACE_ITER_NORMAL, 1126 hwsim_send_nullfunc_no_ps, data); 1127 } 1128 local_bh_enable(); 1129 1130 return 0; 1131} 1132 1133DEFINE_DEBUGFS_ATTRIBUTE(hwsim_fops_ps, hwsim_fops_ps_read, hwsim_fops_ps_write, 1134 "%llu\n"); 1135 1136static int hwsim_write_simulate_radar(void *dat, u64 val) 1137{ 1138 struct mac80211_hwsim_data *data = dat; 1139 1140 ieee80211_radar_detected(data->hw); 1141 1142 return 0; 1143} 1144 1145DEFINE_DEBUGFS_ATTRIBUTE(hwsim_simulate_radar, NULL, 1146 hwsim_write_simulate_radar, "%llu\n"); 1147 1148static int hwsim_fops_group_read(void *dat, u64 *val) 1149{ 1150 struct mac80211_hwsim_data *data = dat; 1151 *val = data->group; 1152 return 0; 1153} 1154 1155static int hwsim_fops_group_write(void *dat, u64 val) 1156{ 1157 struct mac80211_hwsim_data *data = dat; 1158 data->group = val; 1159 return 0; 1160} 1161 1162DEFINE_DEBUGFS_ATTRIBUTE(hwsim_fops_group, 1163 hwsim_fops_group_read, hwsim_fops_group_write, 1164 "%llx\n"); 1165 1166static int hwsim_fops_rx_rssi_read(void *dat, u64 *val) 1167{ 1168 struct mac80211_hwsim_data *data = dat; 1169 *val = data->rx_rssi; 1170 return 0; 1171} 1172 1173static int hwsim_fops_rx_rssi_write(void *dat, u64 val) 1174{ 1175 struct mac80211_hwsim_data *data = dat; 1176 int rssi = (int)val; 1177 1178 if (rssi >= 0 || rssi < -100) 1179 return -EINVAL; 1180 1181 data->rx_rssi = rssi; 1182 return 0; 1183} 1184 1185DEFINE_DEBUGFS_ATTRIBUTE(hwsim_fops_rx_rssi, 1186 hwsim_fops_rx_rssi_read, hwsim_fops_rx_rssi_write, 1187 "%lld\n"); 1188 1189static netdev_tx_t hwsim_mon_xmit(struct sk_buff *skb, 1190 struct net_device *dev) 1191{ 1192 /* TODO: allow packet injection */ 1193 dev_kfree_skb(skb); 1194 return NETDEV_TX_OK; 1195} 1196 1197static inline u64 mac80211_hwsim_get_tsf_raw(void) 1198{ 1199 return ktime_to_us(ktime_get_real()); 1200} 1201 1202static __le64 __mac80211_hwsim_get_tsf(struct mac80211_hwsim_data *data) 1203{ 1204 u64 now = mac80211_hwsim_get_tsf_raw(); 1205 return cpu_to_le64(now + data->tsf_offset); 1206} 1207 1208static u64 mac80211_hwsim_get_tsf(struct ieee80211_hw *hw, 1209 struct ieee80211_vif *vif) 1210{ 1211 struct mac80211_hwsim_data *data = hw->priv; 1212 return le64_to_cpu(__mac80211_hwsim_get_tsf(data)); 1213} 1214 1215static void mac80211_hwsim_set_tsf(struct ieee80211_hw *hw, 1216 struct ieee80211_vif *vif, u64 tsf) 1217{ 1218 struct mac80211_hwsim_data *data = hw->priv; 1219 u64 now = mac80211_hwsim_get_tsf(hw, vif); 1220 /* MLD not supported here */ 1221 u32 bcn_int = data->link_data[0].beacon_int; 1222 u64 delta = abs(tsf - now); 1223 1224 /* adjust after beaconing with new timestamp at old TBTT */ 1225 if (tsf > now) { 1226 data->tsf_offset += delta; 1227 data->bcn_delta = do_div(delta, bcn_int); 1228 } else { 1229 data->tsf_offset -= delta; 1230 data->bcn_delta = -(s64)do_div(delta, bcn_int); 1231 } 1232} 1233 1234static void mac80211_hwsim_monitor_rx(struct ieee80211_hw *hw, 1235 struct sk_buff *tx_skb, 1236 struct ieee80211_channel *chan) 1237{ 1238 struct mac80211_hwsim_data *data = hw->priv; 1239 struct sk_buff *skb; 1240 struct hwsim_radiotap_hdr *hdr; 1241 u16 flags, bitrate; 1242 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(tx_skb); 1243 struct ieee80211_rate *txrate = ieee80211_get_tx_rate(hw, info); 1244 1245 if (!txrate) 1246 bitrate = 0; 1247 else 1248 bitrate = txrate->bitrate; 1249 1250 if (!netif_running(hwsim_mon)) 1251 return; 1252 1253 skb = skb_copy_expand(tx_skb, sizeof(*hdr), 0, GFP_ATOMIC); 1254 if (skb == NULL) 1255 return; 1256 1257 hdr = skb_push(skb, sizeof(*hdr)); 1258 hdr->hdr.it_version = PKTHDR_RADIOTAP_VERSION; 1259 hdr->hdr.it_pad = 0; 1260 hdr->hdr.it_len = cpu_to_le16(sizeof(*hdr)); 1261 hdr->hdr.it_present = cpu_to_le32((1 << IEEE80211_RADIOTAP_FLAGS) | 1262 (1 << IEEE80211_RADIOTAP_RATE) | 1263 (1 << IEEE80211_RADIOTAP_TSFT) | 1264 (1 << IEEE80211_RADIOTAP_CHANNEL)); 1265 hdr->rt_tsft = __mac80211_hwsim_get_tsf(data); 1266 hdr->rt_flags = 0; 1267 hdr->rt_rate = bitrate / 5; 1268 hdr->rt_channel = cpu_to_le16(chan->center_freq); 1269 flags = IEEE80211_CHAN_2GHZ; 1270 if (txrate && txrate->flags & IEEE80211_RATE_ERP_G) 1271 flags |= IEEE80211_CHAN_OFDM; 1272 else 1273 flags |= IEEE80211_CHAN_CCK; 1274 hdr->rt_chbitmask = cpu_to_le16(flags); 1275 1276 skb->dev = hwsim_mon; 1277 skb_reset_mac_header(skb); 1278 skb->ip_summed = CHECKSUM_UNNECESSARY; 1279 skb->pkt_type = PACKET_OTHERHOST; 1280 skb->protocol = htons(ETH_P_802_2); 1281 memset(skb->cb, 0, sizeof(skb->cb)); 1282 netif_rx(skb); 1283} 1284 1285 1286static void mac80211_hwsim_monitor_ack(struct ieee80211_channel *chan, 1287 const u8 *addr) 1288{ 1289 struct sk_buff *skb; 1290 struct hwsim_radiotap_ack_hdr *hdr; 1291 u16 flags; 1292 struct ieee80211_hdr *hdr11; 1293 1294 if (!netif_running(hwsim_mon)) 1295 return; 1296 1297 skb = dev_alloc_skb(100); 1298 if (skb == NULL) 1299 return; 1300 1301 hdr = skb_put(skb, sizeof(*hdr)); 1302 hdr->hdr.it_version = PKTHDR_RADIOTAP_VERSION; 1303 hdr->hdr.it_pad = 0; 1304 hdr->hdr.it_len = cpu_to_le16(sizeof(*hdr)); 1305 hdr->hdr.it_present = cpu_to_le32((1 << IEEE80211_RADIOTAP_FLAGS) | 1306 (1 << IEEE80211_RADIOTAP_CHANNEL)); 1307 hdr->rt_flags = 0; 1308 hdr->pad = 0; 1309 hdr->rt_channel = cpu_to_le16(chan->center_freq); 1310 flags = IEEE80211_CHAN_2GHZ; 1311 hdr->rt_chbitmask = cpu_to_le16(flags); 1312 1313 hdr11 = skb_put(skb, 10); 1314 hdr11->frame_control = cpu_to_le16(IEEE80211_FTYPE_CTL | 1315 IEEE80211_STYPE_ACK); 1316 hdr11->duration_id = cpu_to_le16(0); 1317 memcpy(hdr11->addr1, addr, ETH_ALEN); 1318 1319 skb->dev = hwsim_mon; 1320 skb_reset_mac_header(skb); 1321 skb->ip_summed = CHECKSUM_UNNECESSARY; 1322 skb->pkt_type = PACKET_OTHERHOST; 1323 skb->protocol = htons(ETH_P_802_2); 1324 memset(skb->cb, 0, sizeof(skb->cb)); 1325 netif_rx(skb); 1326} 1327 1328struct mac80211_hwsim_addr_match_data { 1329 u8 addr[ETH_ALEN]; 1330 bool ret; 1331}; 1332 1333static void mac80211_hwsim_addr_iter(void *data, u8 *mac, 1334 struct ieee80211_vif *vif) 1335{ 1336 int i; 1337 struct mac80211_hwsim_addr_match_data *md = data; 1338 1339 if (memcmp(mac, md->addr, ETH_ALEN) == 0) { 1340 md->ret = true; 1341 return; 1342 } 1343 1344 /* Match the link address */ 1345 for (i = 0; i < ARRAY_SIZE(vif->link_conf); i++) { 1346 struct ieee80211_bss_conf *conf; 1347 1348 conf = rcu_dereference(vif->link_conf[i]); 1349 if (!conf) 1350 continue; 1351 1352 if (memcmp(conf->addr, md->addr, ETH_ALEN) == 0) { 1353 md->ret = true; 1354 return; 1355 } 1356 } 1357} 1358 1359static bool mac80211_hwsim_addr_match(struct mac80211_hwsim_data *data, 1360 const u8 *addr) 1361{ 1362 struct mac80211_hwsim_addr_match_data md = { 1363 .ret = false, 1364 }; 1365 1366 if (data->scanning && memcmp(addr, data->scan_addr, ETH_ALEN) == 0) 1367 return true; 1368 1369 memcpy(md.addr, addr, ETH_ALEN); 1370 1371 ieee80211_iterate_active_interfaces_atomic(data->hw, 1372 IEEE80211_IFACE_ITER_NORMAL, 1373 mac80211_hwsim_addr_iter, 1374 &md); 1375 1376 return md.ret; 1377} 1378 1379static bool hwsim_ps_rx_ok(struct mac80211_hwsim_data *data, 1380 struct sk_buff *skb) 1381{ 1382 switch (data->ps) { 1383 case PS_DISABLED: 1384 return true; 1385 case PS_ENABLED: 1386 return false; 1387 case PS_AUTO_POLL: 1388 /* TODO: accept (some) Beacons by default and other frames only 1389 * if pending PS-Poll has been sent */ 1390 return true; 1391 case PS_MANUAL_POLL: 1392 /* Allow unicast frames to own address if there is a pending 1393 * PS-Poll */ 1394 if (data->ps_poll_pending && 1395 mac80211_hwsim_addr_match(data, skb->data + 4)) { 1396 data->ps_poll_pending = false; 1397 return true; 1398 } 1399 return false; 1400 } 1401 1402 return true; 1403} 1404 1405static int hwsim_unicast_netgroup(struct mac80211_hwsim_data *data, 1406 struct sk_buff *skb, int portid) 1407{ 1408 struct net *net; 1409 bool found = false; 1410 int res = -ENOENT; 1411 1412 rcu_read_lock(); 1413 for_each_net_rcu(net) { 1414 if (data->netgroup == hwsim_net_get_netgroup(net)) { 1415 res = genlmsg_unicast(net, skb, portid); 1416 found = true; 1417 break; 1418 } 1419 } 1420 rcu_read_unlock(); 1421 1422 if (!found) 1423 nlmsg_free(skb); 1424 1425 return res; 1426} 1427 1428static void mac80211_hwsim_config_mac_nl(struct ieee80211_hw *hw, 1429 const u8 *addr, bool add) 1430{ 1431 struct mac80211_hwsim_data *data = hw->priv; 1432 u32 _portid = READ_ONCE(data->wmediumd); 1433 struct sk_buff *skb; 1434 void *msg_head; 1435 1436 WARN_ON(!is_valid_ether_addr(addr)); 1437 1438 if (!_portid && !hwsim_virtio_enabled) 1439 return; 1440 1441 skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_ATOMIC); 1442 if (!skb) 1443 return; 1444 1445 msg_head = genlmsg_put(skb, 0, 0, &hwsim_genl_family, 0, 1446 add ? HWSIM_CMD_ADD_MAC_ADDR : 1447 HWSIM_CMD_DEL_MAC_ADDR); 1448 if (!msg_head) { 1449 pr_debug("mac80211_hwsim: problem with msg_head\n"); 1450 goto nla_put_failure; 1451 } 1452 1453 if (nla_put(skb, HWSIM_ATTR_ADDR_TRANSMITTER, 1454 ETH_ALEN, data->addresses[1].addr)) 1455 goto nla_put_failure; 1456 1457 if (nla_put(skb, HWSIM_ATTR_ADDR_RECEIVER, ETH_ALEN, addr)) 1458 goto nla_put_failure; 1459 1460 genlmsg_end(skb, msg_head); 1461 1462 if (hwsim_virtio_enabled) 1463 hwsim_tx_virtio(data, skb); 1464 else 1465 hwsim_unicast_netgroup(data, skb, _portid); 1466 return; 1467nla_put_failure: 1468 nlmsg_free(skb); 1469} 1470 1471static inline u16 trans_tx_rate_flags_ieee2hwsim(struct ieee80211_tx_rate *rate) 1472{ 1473 u16 result = 0; 1474 1475 if (rate->flags & IEEE80211_TX_RC_USE_RTS_CTS) 1476 result |= MAC80211_HWSIM_TX_RC_USE_RTS_CTS; 1477 if (rate->flags & IEEE80211_TX_RC_USE_CTS_PROTECT) 1478 result |= MAC80211_HWSIM_TX_RC_USE_CTS_PROTECT; 1479 if (rate->flags & IEEE80211_TX_RC_USE_SHORT_PREAMBLE) 1480 result |= MAC80211_HWSIM_TX_RC_USE_SHORT_PREAMBLE; 1481 if (rate->flags & IEEE80211_TX_RC_MCS) 1482 result |= MAC80211_HWSIM_TX_RC_MCS; 1483 if (rate->flags & IEEE80211_TX_RC_GREEN_FIELD) 1484 result |= MAC80211_HWSIM_TX_RC_GREEN_FIELD; 1485 if (rate->flags & IEEE80211_TX_RC_40_MHZ_WIDTH) 1486 result |= MAC80211_HWSIM_TX_RC_40_MHZ_WIDTH; 1487 if (rate->flags & IEEE80211_TX_RC_DUP_DATA) 1488 result |= MAC80211_HWSIM_TX_RC_DUP_DATA; 1489 if (rate->flags & IEEE80211_TX_RC_SHORT_GI) 1490 result |= MAC80211_HWSIM_TX_RC_SHORT_GI; 1491 if (rate->flags & IEEE80211_TX_RC_VHT_MCS) 1492 result |= MAC80211_HWSIM_TX_RC_VHT_MCS; 1493 if (rate->flags & IEEE80211_TX_RC_80_MHZ_WIDTH) 1494 result |= MAC80211_HWSIM_TX_RC_80_MHZ_WIDTH; 1495 if (rate->flags & IEEE80211_TX_RC_160_MHZ_WIDTH) 1496 result |= MAC80211_HWSIM_TX_RC_160_MHZ_WIDTH; 1497 1498 return result; 1499} 1500 1501static void mac80211_hwsim_tx_frame_nl(struct ieee80211_hw *hw, 1502 struct sk_buff *my_skb, 1503 int dst_portid, 1504 struct ieee80211_channel *channel) 1505{ 1506 struct sk_buff *skb; 1507 struct mac80211_hwsim_data *data = hw->priv; 1508 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) my_skb->data; 1509 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(my_skb); 1510 void *msg_head; 1511 unsigned int hwsim_flags = 0; 1512 int i; 1513 struct hwsim_tx_rate tx_attempts[IEEE80211_TX_MAX_RATES]; 1514 struct hwsim_tx_rate_flag tx_attempts_flags[IEEE80211_TX_MAX_RATES]; 1515 uintptr_t cookie; 1516 1517 if (data->ps != PS_DISABLED) 1518 hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PM); 1519 /* If the queue contains MAX_QUEUE skb's drop some */ 1520 if (skb_queue_len(&data->pending) >= MAX_QUEUE) { 1521 /* Dropping until WARN_QUEUE level */ 1522 while (skb_queue_len(&data->pending) >= WARN_QUEUE) { 1523 ieee80211_free_txskb(hw, skb_dequeue(&data->pending)); 1524 data->tx_dropped++; 1525 } 1526 } 1527 1528 skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_ATOMIC); 1529 if (skb == NULL) 1530 goto nla_put_failure; 1531 1532 msg_head = genlmsg_put(skb, 0, 0, &hwsim_genl_family, 0, 1533 HWSIM_CMD_FRAME); 1534 if (msg_head == NULL) { 1535 pr_debug("mac80211_hwsim: problem with msg_head\n"); 1536 goto nla_put_failure; 1537 } 1538 1539 if (nla_put(skb, HWSIM_ATTR_ADDR_TRANSMITTER, 1540 ETH_ALEN, data->addresses[1].addr)) 1541 goto nla_put_failure; 1542 1543 /* We get the skb->data */ 1544 if (nla_put(skb, HWSIM_ATTR_FRAME, my_skb->len, my_skb->data)) 1545 goto nla_put_failure; 1546 1547 /* We get the flags for this transmission, and we translate them to 1548 wmediumd flags */ 1549 1550 if (info->flags & IEEE80211_TX_CTL_REQ_TX_STATUS) 1551 hwsim_flags |= HWSIM_TX_CTL_REQ_TX_STATUS; 1552 1553 if (info->flags & IEEE80211_TX_CTL_NO_ACK) 1554 hwsim_flags |= HWSIM_TX_CTL_NO_ACK; 1555 1556 if (nla_put_u32(skb, HWSIM_ATTR_FLAGS, hwsim_flags)) 1557 goto nla_put_failure; 1558 1559 if (nla_put_u32(skb, HWSIM_ATTR_FREQ, channel->center_freq)) 1560 goto nla_put_failure; 1561 1562 /* We get the tx control (rate and retries) info*/ 1563 1564 for (i = 0; i < IEEE80211_TX_MAX_RATES; i++) { 1565 tx_attempts[i].idx = info->status.rates[i].idx; 1566 tx_attempts_flags[i].idx = info->status.rates[i].idx; 1567 tx_attempts[i].count = info->status.rates[i].count; 1568 tx_attempts_flags[i].flags = 1569 trans_tx_rate_flags_ieee2hwsim( 1570 &info->status.rates[i]); 1571 } 1572 1573 if (nla_put(skb, HWSIM_ATTR_TX_INFO, 1574 sizeof(struct hwsim_tx_rate)*IEEE80211_TX_MAX_RATES, 1575 tx_attempts)) 1576 goto nla_put_failure; 1577 1578 if (nla_put(skb, HWSIM_ATTR_TX_INFO_FLAGS, 1579 sizeof(struct hwsim_tx_rate_flag) * IEEE80211_TX_MAX_RATES, 1580 tx_attempts_flags)) 1581 goto nla_put_failure; 1582 1583 /* We create a cookie to identify this skb */ 1584 cookie = atomic_inc_return(&data->pending_cookie); 1585 info->rate_driver_data[0] = (void *)cookie; 1586 if (nla_put_u64_64bit(skb, HWSIM_ATTR_COOKIE, cookie, HWSIM_ATTR_PAD)) 1587 goto nla_put_failure; 1588 1589 genlmsg_end(skb, msg_head); 1590 1591 if (hwsim_virtio_enabled) { 1592 if (hwsim_tx_virtio(data, skb)) 1593 goto err_free_txskb; 1594 } else { 1595 if (hwsim_unicast_netgroup(data, skb, dst_portid)) 1596 goto err_free_txskb; 1597 } 1598 1599 /* Enqueue the packet */ 1600 skb_queue_tail(&data->pending, my_skb); 1601 data->tx_pkts++; 1602 data->tx_bytes += my_skb->len; 1603 return; 1604 1605nla_put_failure: 1606 nlmsg_free(skb); 1607err_free_txskb: 1608 pr_debug("mac80211_hwsim: error occurred in %s\n", __func__); 1609 ieee80211_free_txskb(hw, my_skb); 1610 data->tx_failed++; 1611} 1612 1613static bool hwsim_chans_compat(struct ieee80211_channel *c1, 1614 struct ieee80211_channel *c2) 1615{ 1616 if (!c1 || !c2) 1617 return false; 1618 1619 return c1->center_freq == c2->center_freq; 1620} 1621 1622struct tx_iter_data { 1623 struct ieee80211_channel *channel; 1624 bool receive; 1625}; 1626 1627static void mac80211_hwsim_tx_iter(void *_data, u8 *addr, 1628 struct ieee80211_vif *vif) 1629{ 1630 struct tx_iter_data *data = _data; 1631 int i; 1632 1633 for (i = 0; i < ARRAY_SIZE(vif->link_conf); i++) { 1634 struct ieee80211_bss_conf *conf; 1635 struct ieee80211_chanctx_conf *chanctx; 1636 1637 conf = rcu_dereference(vif->link_conf[i]); 1638 if (!conf) 1639 continue; 1640 1641 chanctx = rcu_dereference(conf->chanctx_conf); 1642 if (!chanctx) 1643 continue; 1644 1645 if (!hwsim_chans_compat(data->channel, chanctx->def.chan)) 1646 continue; 1647 1648 data->receive = true; 1649 return; 1650 } 1651} 1652 1653static void mac80211_hwsim_add_vendor_rtap(struct sk_buff *skb) 1654{ 1655 /* 1656 * To enable this code, #define the HWSIM_RADIOTAP_OUI, 1657 * e.g. like this: 1658 * #define HWSIM_RADIOTAP_OUI "\x02\x00\x00" 1659 * (but you should use a valid OUI, not that) 1660 * 1661 * If anyone wants to 'donate' a radiotap OUI/subns code 1662 * please send a patch removing this #ifdef and changing 1663 * the values accordingly. 1664 */ 1665#ifdef HWSIM_RADIOTAP_OUI 1666 struct ieee80211_radiotap_vendor_tlv *rtap; 1667 static const char vendor_data[8] = "ABCDEFGH"; 1668 1669 // Make sure no padding is needed 1670 BUILD_BUG_ON(sizeof(vendor_data) % 4); 1671 /* this is last radiotap info before the mac header, so 1672 * skb_reset_mac_header for mac8022 to know the end of 1673 * the radiotap TLV/beginning of the 802.11 header 1674 */ 1675 skb_reset_mac_header(skb); 1676 1677 /* 1678 * Note that this code requires the headroom in the SKB 1679 * that was allocated earlier. 1680 */ 1681 rtap = skb_push(skb, sizeof(*rtap) + sizeof(vendor_data)); 1682 1683 rtap->len = cpu_to_le16(sizeof(*rtap) - 1684 sizeof(struct ieee80211_radiotap_tlv) + 1685 sizeof(vendor_data)); 1686 rtap->type = cpu_to_le16(IEEE80211_RADIOTAP_VENDOR_NAMESPACE); 1687 1688 rtap->content.oui[0] = HWSIM_RADIOTAP_OUI[0]; 1689 rtap->content.oui[1] = HWSIM_RADIOTAP_OUI[1]; 1690 rtap->content.oui[2] = HWSIM_RADIOTAP_OUI[2]; 1691 rtap->content.oui_subtype = 127; 1692 /* clear reserved field */ 1693 rtap->content.reserved = 0; 1694 rtap->content.vendor_type = 0; 1695 memcpy(rtap->content.data, vendor_data, sizeof(vendor_data)); 1696 1697 IEEE80211_SKB_RXCB(skb)->flag |= RX_FLAG_RADIOTAP_TLV_AT_END; 1698#endif 1699} 1700 1701static void mac80211_hwsim_rx(struct mac80211_hwsim_data *data, 1702 struct ieee80211_rx_status *rx_status, 1703 struct sk_buff *skb) 1704{ 1705 struct ieee80211_hdr *hdr = (void *)skb->data; 1706 1707 if (!ieee80211_has_morefrags(hdr->frame_control) && 1708 !is_multicast_ether_addr(hdr->addr1) && 1709 (ieee80211_is_mgmt(hdr->frame_control) || 1710 ieee80211_is_data(hdr->frame_control))) { 1711 struct ieee80211_sta *sta; 1712 unsigned int link_id; 1713 1714 rcu_read_lock(); 1715 sta = ieee80211_find_sta_by_link_addrs(data->hw, hdr->addr2, 1716 hdr->addr1, &link_id); 1717 if (sta) { 1718 struct hwsim_sta_priv *sp = (void *)sta->drv_priv; 1719 1720 if (ieee80211_has_pm(hdr->frame_control)) 1721 sp->active_links_rx &= ~BIT(link_id); 1722 else 1723 sp->active_links_rx |= BIT(link_id); 1724 } 1725 rcu_read_unlock(); 1726 } 1727 1728 memcpy(IEEE80211_SKB_RXCB(skb), rx_status, sizeof(*rx_status)); 1729 1730 mac80211_hwsim_add_vendor_rtap(skb); 1731 1732 data->rx_pkts++; 1733 data->rx_bytes += skb->len; 1734 ieee80211_rx_irqsafe(data->hw, skb); 1735} 1736 1737static bool mac80211_hwsim_tx_frame_no_nl(struct ieee80211_hw *hw, 1738 struct sk_buff *skb, 1739 struct ieee80211_channel *chan) 1740{ 1741 struct mac80211_hwsim_data *data = hw->priv, *data2; 1742 bool ack = false; 1743 struct ieee80211_hdr *hdr = (struct ieee80211_hdr *) skb->data; 1744 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb); 1745 struct ieee80211_rx_status rx_status; 1746 u64 now; 1747 1748 memset(&rx_status, 0, sizeof(rx_status)); 1749 rx_status.flag |= RX_FLAG_MACTIME_START; 1750 rx_status.freq = chan->center_freq; 1751 rx_status.freq_offset = chan->freq_offset ? 1 : 0; 1752 rx_status.band = chan->band; 1753 if (info->control.rates[0].flags & IEEE80211_TX_RC_VHT_MCS) { 1754 rx_status.rate_idx = 1755 ieee80211_rate_get_vht_mcs(&info->control.rates[0]); 1756 rx_status.nss = 1757 ieee80211_rate_get_vht_nss(&info->control.rates[0]); 1758 rx_status.encoding = RX_ENC_VHT; 1759 } else { 1760 rx_status.rate_idx = info->control.rates[0].idx; 1761 if (info->control.rates[0].flags & IEEE80211_TX_RC_MCS) 1762 rx_status.encoding = RX_ENC_HT; 1763 } 1764 if (info->control.rates[0].flags & IEEE80211_TX_RC_40_MHZ_WIDTH) 1765 rx_status.bw = RATE_INFO_BW_40; 1766 else if (info->control.rates[0].flags & IEEE80211_TX_RC_80_MHZ_WIDTH) 1767 rx_status.bw = RATE_INFO_BW_80; 1768 else if (info->control.rates[0].flags & IEEE80211_TX_RC_160_MHZ_WIDTH) 1769 rx_status.bw = RATE_INFO_BW_160; 1770 else 1771 rx_status.bw = RATE_INFO_BW_20; 1772 if (info->control.rates[0].flags & IEEE80211_TX_RC_SHORT_GI) 1773 rx_status.enc_flags |= RX_ENC_FLAG_SHORT_GI; 1774 /* TODO: simulate optional packet loss */ 1775 rx_status.signal = data->rx_rssi; 1776 if (info->control.vif) 1777 rx_status.signal += info->control.vif->bss_conf.txpower; 1778 1779 if (data->ps != PS_DISABLED) 1780 hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PM); 1781 1782 /* release the skb's source info */ 1783 skb_orphan(skb); 1784 skb_dst_drop(skb); 1785 skb->mark = 0; 1786 skb_ext_reset(skb); 1787 nf_reset_ct(skb); 1788 1789 /* 1790 * Get absolute mactime here so all HWs RX at the "same time", and 1791 * absolute TX time for beacon mactime so the timestamp matches. 1792 * Giving beacons a different mactime than non-beacons looks messy, but 1793 * it helps the Toffset be exact and a ~10us mactime discrepancy 1794 * probably doesn't really matter. 1795 */ 1796 if (ieee80211_is_beacon(hdr->frame_control) || 1797 ieee80211_is_probe_resp(hdr->frame_control)) { 1798 rx_status.boottime_ns = ktime_get_boottime_ns(); 1799 now = data->abs_bcn_ts; 1800 } else { 1801 now = mac80211_hwsim_get_tsf_raw(); 1802 } 1803 1804 /* Copy skb to all enabled radios that are on the current frequency */ 1805 spin_lock(&hwsim_radio_lock); 1806 list_for_each_entry(data2, &hwsim_radios, list) { 1807 struct sk_buff *nskb; 1808 struct tx_iter_data tx_iter_data = { 1809 .receive = false, 1810 .channel = chan, 1811 }; 1812 1813 if (data == data2) 1814 continue; 1815 1816 if (!data2->started || (data2->idle && !data2->tmp_chan) || 1817 !hwsim_ps_rx_ok(data2, skb)) 1818 continue; 1819 1820 if (!(data->group & data2->group)) 1821 continue; 1822 1823 if (data->netgroup != data2->netgroup) 1824 continue; 1825 1826 if (!hwsim_chans_compat(chan, data2->tmp_chan) && 1827 !hwsim_chans_compat(chan, data2->channel)) { 1828 ieee80211_iterate_active_interfaces_atomic( 1829 data2->hw, IEEE80211_IFACE_ITER_NORMAL, 1830 mac80211_hwsim_tx_iter, &tx_iter_data); 1831 if (!tx_iter_data.receive) 1832 continue; 1833 } 1834 1835 /* 1836 * reserve some space for our vendor and the normal 1837 * radiotap header, since we're copying anyway 1838 */ 1839 if (skb->len < PAGE_SIZE && paged_rx) { 1840 struct page *page = alloc_page(GFP_ATOMIC); 1841 1842 if (!page) 1843 continue; 1844 1845 nskb = dev_alloc_skb(128); 1846 if (!nskb) { 1847 __free_page(page); 1848 continue; 1849 } 1850 1851 memcpy(page_address(page), skb->data, skb->len); 1852 skb_add_rx_frag(nskb, 0, page, 0, skb->len, skb->len); 1853 } else { 1854 nskb = skb_copy(skb, GFP_ATOMIC); 1855 if (!nskb) 1856 continue; 1857 } 1858 1859 if (mac80211_hwsim_addr_match(data2, hdr->addr1)) 1860 ack = true; 1861 1862 rx_status.mactime = now + data2->tsf_offset; 1863 1864 mac80211_hwsim_rx(data2, &rx_status, nskb); 1865 } 1866 spin_unlock(&hwsim_radio_lock); 1867 1868 return ack; 1869} 1870 1871static struct ieee80211_bss_conf * 1872mac80211_hwsim_select_tx_link(struct mac80211_hwsim_data *data, 1873 struct ieee80211_vif *vif, 1874 struct ieee80211_sta *sta, 1875 struct ieee80211_hdr *hdr, 1876 struct ieee80211_link_sta **link_sta) 1877{ 1878 struct hwsim_sta_priv *sp = (void *)sta->drv_priv; 1879 int i; 1880 1881 if (!ieee80211_vif_is_mld(vif)) 1882 return &vif->bss_conf; 1883 1884 WARN_ON(is_multicast_ether_addr(hdr->addr1)); 1885 1886 if (WARN_ON_ONCE(!sta || !sta->valid_links)) 1887 return &vif->bss_conf; 1888 1889 for (i = 0; i < ARRAY_SIZE(vif->link_conf); i++) { 1890 struct ieee80211_bss_conf *bss_conf; 1891 unsigned int link_id; 1892 1893 /* round-robin the available link IDs */ 1894 link_id = (sp->last_link + i + 1) % ARRAY_SIZE(vif->link_conf); 1895 1896 if (!(vif->active_links & BIT(link_id))) 1897 continue; 1898 1899 if (!(sp->active_links_rx & BIT(link_id))) 1900 continue; 1901 1902 *link_sta = rcu_dereference(sta->link[link_id]); 1903 if (!*link_sta) 1904 continue; 1905 1906 bss_conf = rcu_dereference(vif->link_conf[link_id]); 1907 if (WARN_ON_ONCE(!bss_conf)) 1908 continue; 1909 1910 /* can happen while switching links */ 1911 if (!rcu_access_pointer(bss_conf->chanctx_conf)) 1912 continue; 1913 1914 sp->last_link = link_id; 1915 return bss_conf; 1916 } 1917 1918 return NULL; 1919} 1920 1921static void mac80211_hwsim_tx(struct ieee80211_hw *hw, 1922 struct ieee80211_tx_control *control, 1923 struct sk_buff *skb) 1924{ 1925 struct mac80211_hwsim_data *data = hw->priv; 1926 struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb); 1927 struct ieee80211_hdr *hdr = (void *)skb->data; 1928 struct ieee80211_chanctx_conf *chanctx_conf; 1929 struct ieee80211_channel *channel; 1930 bool ack; 1931 enum nl80211_chan_width confbw = NL80211_CHAN_WIDTH_20_NOHT; 1932 u32 _portid, i; 1933 1934 if (WARN_ON(skb->len < 10)) { 1935 /* Should not happen; just a sanity check for addr1 use */ 1936 ieee80211_free_txskb(hw, skb); 1937 return; 1938 } 1939 1940 if (!data->use_chanctx) { 1941 channel = data->channel; 1942 confbw = data->bw; 1943 } else if (txi->hw_queue == 4) { 1944 channel = data->tmp_chan; 1945 } else { 1946 u8 link = u32_get_bits(IEEE80211_SKB_CB(skb)->control.flags, 1947 IEEE80211_TX_CTRL_MLO_LINK); 1948 struct ieee80211_vif *vif = txi->control.vif; 1949 struct ieee80211_link_sta *link_sta = NULL; 1950 struct ieee80211_sta *sta = control->sta; 1951 struct ieee80211_bss_conf *bss_conf; 1952 1953 if (link != IEEE80211_LINK_UNSPECIFIED) { 1954 bss_conf = rcu_dereference(txi->control.vif->link_conf[link]); 1955 if (sta) 1956 link_sta = rcu_dereference(sta->link[link]); 1957 } else { 1958 bss_conf = mac80211_hwsim_select_tx_link(data, vif, sta, 1959 hdr, &link_sta); 1960 } 1961 1962 if (unlikely(!bss_conf)) { 1963 /* if it's an MLO STA, it might have deactivated all 1964 * links temporarily - but we don't handle real PS in 1965 * this code yet, so just drop the frame in that case 1966 */ 1967 WARN(link != IEEE80211_LINK_UNSPECIFIED || !sta || !sta->mlo, 1968 "link:%d, sta:%pM, sta->mlo:%d\n", 1969 link, sta ? sta->addr : NULL, sta ? sta->mlo : -1); 1970 ieee80211_free_txskb(hw, skb); 1971 return; 1972 } 1973 1974 if (sta && sta->mlo) { 1975 if (WARN_ON(!link_sta)) { 1976 ieee80211_free_txskb(hw, skb); 1977 return; 1978 } 1979 /* address translation to link addresses on TX */ 1980 ether_addr_copy(hdr->addr1, link_sta->addr); 1981 ether_addr_copy(hdr->addr2, bss_conf->addr); 1982 /* translate A3 only if it's the BSSID */ 1983 if (!ieee80211_has_tods(hdr->frame_control) && 1984 !ieee80211_has_fromds(hdr->frame_control)) { 1985 if (ether_addr_equal(hdr->addr3, sta->addr)) 1986 ether_addr_copy(hdr->addr3, link_sta->addr); 1987 else if (ether_addr_equal(hdr->addr3, vif->addr)) 1988 ether_addr_copy(hdr->addr3, bss_conf->addr); 1989 } 1990 /* no need to look at A4, if present it's SA */ 1991 } 1992 1993 chanctx_conf = rcu_dereference(bss_conf->chanctx_conf); 1994 if (chanctx_conf) { 1995 channel = chanctx_conf->def.chan; 1996 confbw = chanctx_conf->def.width; 1997 } else { 1998 channel = NULL; 1999 } 2000 } 2001 2002 if (WARN(!channel, "TX w/o channel - queue = %d\n", txi->hw_queue)) { 2003 ieee80211_free_txskb(hw, skb); 2004 return; 2005 } 2006 2007 if (data->idle && !data->tmp_chan) { 2008 wiphy_dbg(hw->wiphy, "Trying to TX when idle - reject\n"); 2009 ieee80211_free_txskb(hw, skb); 2010 return; 2011 } 2012 2013 if (txi->control.vif) 2014 hwsim_check_magic(txi->control.vif); 2015 if (control->sta) 2016 hwsim_check_sta_magic(control->sta); 2017 2018 if (ieee80211_hw_check(hw, SUPPORTS_RC_TABLE)) 2019 ieee80211_get_tx_rates(txi->control.vif, control->sta, skb, 2020 txi->control.rates, 2021 ARRAY_SIZE(txi->control.rates)); 2022 2023 for (i = 0; i < ARRAY_SIZE(txi->control.rates); i++) { 2024 u16 rflags = txi->control.rates[i].flags; 2025 /* initialize to data->bw for 5/10 MHz handling */ 2026 enum nl80211_chan_width bw = data->bw; 2027 2028 if (txi->control.rates[i].idx == -1) 2029 break; 2030 2031 if (rflags & IEEE80211_TX_RC_40_MHZ_WIDTH) 2032 bw = NL80211_CHAN_WIDTH_40; 2033 else if (rflags & IEEE80211_TX_RC_80_MHZ_WIDTH) 2034 bw = NL80211_CHAN_WIDTH_80; 2035 else if (rflags & IEEE80211_TX_RC_160_MHZ_WIDTH) 2036 bw = NL80211_CHAN_WIDTH_160; 2037 2038 if (WARN_ON(hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw))) 2039 return; 2040 } 2041 2042 if (skb->len >= 24 + 8 && 2043 ieee80211_is_probe_resp(hdr->frame_control)) { 2044 /* fake header transmission time */ 2045 struct ieee80211_mgmt *mgmt; 2046 struct ieee80211_rate *txrate; 2047 /* TODO: get MCS */ 2048 int bitrate = 100; 2049 u64 ts; 2050 2051 mgmt = (struct ieee80211_mgmt *)skb->data; 2052 txrate = ieee80211_get_tx_rate(hw, txi); 2053 if (txrate) 2054 bitrate = txrate->bitrate; 2055 ts = mac80211_hwsim_get_tsf_raw(); 2056 mgmt->u.probe_resp.timestamp = 2057 cpu_to_le64(ts + data->tsf_offset + 2058 24 * 8 * 10 / bitrate); 2059 } 2060 2061 mac80211_hwsim_monitor_rx(hw, skb, channel); 2062 2063 /* wmediumd mode check */ 2064 _portid = READ_ONCE(data->wmediumd); 2065 2066 if (_portid || hwsim_virtio_enabled) 2067 return mac80211_hwsim_tx_frame_nl(hw, skb, _portid, channel); 2068 2069 /* NO wmediumd detected, perfect medium simulation */ 2070 data->tx_pkts++; 2071 data->tx_bytes += skb->len; 2072 ack = mac80211_hwsim_tx_frame_no_nl(hw, skb, channel); 2073 2074 if (ack && skb->len >= 16) 2075 mac80211_hwsim_monitor_ack(channel, hdr->addr2); 2076 2077 ieee80211_tx_info_clear_status(txi); 2078 2079 /* frame was transmitted at most favorable rate at first attempt */ 2080 txi->control.rates[0].count = 1; 2081 txi->control.rates[1].idx = -1; 2082 2083 if (!(txi->flags & IEEE80211_TX_CTL_NO_ACK) && ack) 2084 txi->flags |= IEEE80211_TX_STAT_ACK; 2085 ieee80211_tx_status_irqsafe(hw, skb); 2086} 2087 2088 2089static int mac80211_hwsim_start(struct ieee80211_hw *hw) 2090{ 2091 struct mac80211_hwsim_data *data = hw->priv; 2092 wiphy_dbg(hw->wiphy, "%s\n", __func__); 2093 data->started = true; 2094 return 0; 2095} 2096 2097 2098static void mac80211_hwsim_stop(struct ieee80211_hw *hw) 2099{ 2100 struct mac80211_hwsim_data *data = hw->priv; 2101 int i; 2102 2103 data->started = false; 2104 2105 for (i = 0; i < ARRAY_SIZE(data->link_data); i++) 2106 hrtimer_cancel(&data->link_data[i].beacon_timer); 2107 2108 while (!skb_queue_empty(&data->pending)) 2109 ieee80211_free_txskb(hw, skb_dequeue(&data->pending)); 2110 2111 wiphy_dbg(hw->wiphy, "%s\n", __func__); 2112} 2113 2114 2115static int mac80211_hwsim_add_interface(struct ieee80211_hw *hw, 2116 struct ieee80211_vif *vif) 2117{ 2118 wiphy_dbg(hw->wiphy, "%s (type=%d mac_addr=%pM)\n", 2119 __func__, ieee80211_vif_type_p2p(vif), 2120 vif->addr); 2121 hwsim_set_magic(vif); 2122 2123 if (vif->type != NL80211_IFTYPE_MONITOR) 2124 mac80211_hwsim_config_mac_nl(hw, vif->addr, true); 2125 2126 vif->cab_queue = 0; 2127 vif->hw_queue[IEEE80211_AC_VO] = 0; 2128 vif->hw_queue[IEEE80211_AC_VI] = 1; 2129 vif->hw_queue[IEEE80211_AC_BE] = 2; 2130 vif->hw_queue[IEEE80211_AC_BK] = 3; 2131 2132 return 0; 2133} 2134 2135#ifdef CONFIG_MAC80211_DEBUGFS 2136static void mac80211_hwsim_vif_add_debugfs(struct ieee80211_hw *hw, 2137 struct ieee80211_vif *vif) 2138{ 2139 struct hwsim_vif_priv *vp = (void *)vif->drv_priv; 2140 2141 debugfs_create_u32("skip_beacons", 0600, vif->debugfs_dir, 2142 &vp->skip_beacons); 2143} 2144#endif 2145 2146static int mac80211_hwsim_change_interface(struct ieee80211_hw *hw, 2147 struct ieee80211_vif *vif, 2148 enum nl80211_iftype newtype, 2149 bool newp2p) 2150{ 2151 newtype = ieee80211_iftype_p2p(newtype, newp2p); 2152 wiphy_dbg(hw->wiphy, 2153 "%s (old type=%d, new type=%d, mac_addr=%pM)\n", 2154 __func__, ieee80211_vif_type_p2p(vif), 2155 newtype, vif->addr); 2156 hwsim_check_magic(vif); 2157 2158 /* 2159 * interface may change from non-AP to AP in 2160 * which case this needs to be set up again 2161 */ 2162 vif->cab_queue = 0; 2163 2164 return 0; 2165} 2166 2167static void mac80211_hwsim_remove_interface( 2168 struct ieee80211_hw *hw, struct ieee80211_vif *vif) 2169{ 2170 wiphy_dbg(hw->wiphy, "%s (type=%d mac_addr=%pM)\n", 2171 __func__, ieee80211_vif_type_p2p(vif), 2172 vif->addr); 2173 hwsim_check_magic(vif); 2174 hwsim_clear_magic(vif); 2175 if (vif->type != NL80211_IFTYPE_MONITOR) 2176 mac80211_hwsim_config_mac_nl(hw, vif->addr, false); 2177} 2178 2179static void mac80211_hwsim_tx_frame(struct ieee80211_hw *hw, 2180 struct sk_buff *skb, 2181 struct ieee80211_channel *chan) 2182{ 2183 struct mac80211_hwsim_data *data = hw->priv; 2184 u32 _portid = READ_ONCE(data->wmediumd); 2185 2186 if (ieee80211_hw_check(hw, SUPPORTS_RC_TABLE)) { 2187 struct ieee80211_tx_info *txi = IEEE80211_SKB_CB(skb); 2188 ieee80211_get_tx_rates(txi->control.vif, NULL, skb, 2189 txi->control.rates, 2190 ARRAY_SIZE(txi->control.rates)); 2191 } 2192 2193 mac80211_hwsim_monitor_rx(hw, skb, chan); 2194 2195 if (_portid || hwsim_virtio_enabled) 2196 return mac80211_hwsim_tx_frame_nl(hw, skb, _portid, chan); 2197 2198 data->tx_pkts++; 2199 data->tx_bytes += skb->len; 2200 mac80211_hwsim_tx_frame_no_nl(hw, skb, chan); 2201 dev_kfree_skb(skb); 2202} 2203 2204static void __mac80211_hwsim_beacon_tx(struct ieee80211_bss_conf *link_conf, 2205 struct mac80211_hwsim_data *data, 2206 struct ieee80211_hw *hw, 2207 struct ieee80211_vif *vif, 2208 struct sk_buff *skb) 2209{ 2210 struct hwsim_vif_priv *vp = (void *)vif->drv_priv; 2211 struct ieee80211_tx_info *info; 2212 struct ieee80211_rate *txrate; 2213 struct ieee80211_mgmt *mgmt; 2214 /* TODO: get MCS */ 2215 int bitrate = 100; 2216 2217 if (vp->skip_beacons) { 2218 vp->skip_beacons--; 2219 dev_kfree_skb(skb); 2220 return; 2221 } 2222 2223 info = IEEE80211_SKB_CB(skb); 2224 if (ieee80211_hw_check(hw, SUPPORTS_RC_TABLE)) 2225 ieee80211_get_tx_rates(vif, NULL, skb, 2226 info->control.rates, 2227 ARRAY_SIZE(info->control.rates)); 2228 2229 txrate = ieee80211_get_tx_rate(hw, info); 2230 if (txrate) 2231 bitrate = txrate->bitrate; 2232 2233 mgmt = (struct ieee80211_mgmt *) skb->data; 2234 /* fake header transmission time */ 2235 data->abs_bcn_ts = mac80211_hwsim_get_tsf_raw(); 2236 if (ieee80211_is_s1g_beacon(mgmt->frame_control)) { 2237 struct ieee80211_ext *ext = (void *) mgmt; 2238 2239 ext->u.s1g_beacon.timestamp = cpu_to_le32(data->abs_bcn_ts + 2240 data->tsf_offset + 2241 10 * 8 * 10 / 2242 bitrate); 2243 } else { 2244 mgmt->u.beacon.timestamp = cpu_to_le64(data->abs_bcn_ts + 2245 data->tsf_offset + 2246 24 * 8 * 10 / 2247 bitrate); 2248 } 2249 2250 mac80211_hwsim_tx_frame(hw, skb, 2251 rcu_dereference(link_conf->chanctx_conf)->def.chan); 2252} 2253 2254static void mac80211_hwsim_beacon_tx(void *arg, u8 *mac, 2255 struct ieee80211_vif *vif) 2256{ 2257 struct mac80211_hwsim_link_data *link_data = arg; 2258 u32 link_id = link_data->link_id; 2259 struct ieee80211_bss_conf *link_conf; 2260 struct mac80211_hwsim_data *data = 2261 container_of(link_data, struct mac80211_hwsim_data, 2262 link_data[link_id]); 2263 struct ieee80211_hw *hw = data->hw; 2264 struct sk_buff *skb; 2265 2266 hwsim_check_magic(vif); 2267 2268 link_conf = rcu_dereference(vif->link_conf[link_id]); 2269 if (!link_conf) 2270 return; 2271 2272 if (vif->type != NL80211_IFTYPE_AP && 2273 vif->type != NL80211_IFTYPE_MESH_POINT && 2274 vif->type != NL80211_IFTYPE_ADHOC && 2275 vif->type != NL80211_IFTYPE_OCB) 2276 return; 2277 2278 if (vif->mbssid_tx_vif && vif->mbssid_tx_vif != vif) 2279 return; 2280 2281 if (vif->bss_conf.ema_ap) { 2282 struct ieee80211_ema_beacons *ema; 2283 u8 i = 0; 2284 2285 ema = ieee80211_beacon_get_template_ema_list(hw, vif, link_id); 2286 if (!ema || !ema->cnt) 2287 return; 2288 2289 for (i = 0; i < ema->cnt; i++) { 2290 __mac80211_hwsim_beacon_tx(link_conf, data, hw, vif, 2291 ema->bcn[i].skb); 2292 ema->bcn[i].skb = NULL; /* Already freed */ 2293 } 2294 ieee80211_beacon_free_ema_list(ema); 2295 } else { 2296 skb = ieee80211_beacon_get(hw, vif, link_id); 2297 if (!skb) 2298 return; 2299 2300 __mac80211_hwsim_beacon_tx(link_conf, data, hw, vif, skb); 2301 } 2302 2303 while ((skb = ieee80211_get_buffered_bc(hw, vif)) != NULL) { 2304 mac80211_hwsim_tx_frame(hw, skb, 2305 rcu_dereference(link_conf->chanctx_conf)->def.chan); 2306 } 2307 2308 if (link_conf->csa_active && ieee80211_beacon_cntdwn_is_complete(vif, link_id)) 2309 ieee80211_csa_finish(vif, link_id); 2310} 2311 2312static enum hrtimer_restart 2313mac80211_hwsim_beacon(struct hrtimer *timer) 2314{ 2315 struct mac80211_hwsim_link_data *link_data = 2316 container_of(timer, struct mac80211_hwsim_link_data, beacon_timer); 2317 struct mac80211_hwsim_data *data = 2318 container_of(link_data, struct mac80211_hwsim_data, 2319 link_data[link_data->link_id]); 2320 struct ieee80211_hw *hw = data->hw; 2321 u64 bcn_int = link_data->beacon_int; 2322 2323 if (!data->started) 2324 return HRTIMER_NORESTART; 2325 2326 ieee80211_iterate_active_interfaces_atomic( 2327 hw, IEEE80211_IFACE_ITER_NORMAL, 2328 mac80211_hwsim_beacon_tx, link_data); 2329 2330 /* beacon at new TBTT + beacon interval */ 2331 if (data->bcn_delta) { 2332 bcn_int -= data->bcn_delta; 2333 data->bcn_delta = 0; 2334 } 2335 hrtimer_forward_now(&link_data->beacon_timer, 2336 ns_to_ktime(bcn_int * NSEC_PER_USEC)); 2337 return HRTIMER_RESTART; 2338} 2339 2340static const char * const hwsim_chanwidths[] = { 2341 [NL80211_CHAN_WIDTH_5] = "ht5", 2342 [NL80211_CHAN_WIDTH_10] = "ht10", 2343 [NL80211_CHAN_WIDTH_20_NOHT] = "noht", 2344 [NL80211_CHAN_WIDTH_20] = "ht20", 2345 [NL80211_CHAN_WIDTH_40] = "ht40", 2346 [NL80211_CHAN_WIDTH_80] = "vht80", 2347 [NL80211_CHAN_WIDTH_80P80] = "vht80p80", 2348 [NL80211_CHAN_WIDTH_160] = "vht160", 2349 [NL80211_CHAN_WIDTH_1] = "1MHz", 2350 [NL80211_CHAN_WIDTH_2] = "2MHz", 2351 [NL80211_CHAN_WIDTH_4] = "4MHz", 2352 [NL80211_CHAN_WIDTH_8] = "8MHz", 2353 [NL80211_CHAN_WIDTH_16] = "16MHz", 2354}; 2355 2356static int mac80211_hwsim_config(struct ieee80211_hw *hw, u32 changed) 2357{ 2358 struct mac80211_hwsim_data *data = hw->priv; 2359 struct ieee80211_conf *conf = &hw->conf; 2360 static const char *smps_modes[IEEE80211_SMPS_NUM_MODES] = { 2361 [IEEE80211_SMPS_AUTOMATIC] = "auto", 2362 [IEEE80211_SMPS_OFF] = "off", 2363 [IEEE80211_SMPS_STATIC] = "static", 2364 [IEEE80211_SMPS_DYNAMIC] = "dynamic", 2365 }; 2366 int idx; 2367 2368 if (conf->chandef.chan) 2369 wiphy_dbg(hw->wiphy, 2370 "%s (freq=%d(%d - %d)/%s idle=%d ps=%d smps=%s)\n", 2371 __func__, 2372 conf->chandef.chan->center_freq, 2373 conf->chandef.center_freq1, 2374 conf->chandef.center_freq2, 2375 hwsim_chanwidths[conf->chandef.width], 2376 !!(conf->flags & IEEE80211_CONF_IDLE), 2377 !!(conf->flags & IEEE80211_CONF_PS), 2378 smps_modes[conf->smps_mode]); 2379 else 2380 wiphy_dbg(hw->wiphy, 2381 "%s (freq=0 idle=%d ps=%d smps=%s)\n", 2382 __func__, 2383 !!(conf->flags & IEEE80211_CONF_IDLE), 2384 !!(conf->flags & IEEE80211_CONF_PS), 2385 smps_modes[conf->smps_mode]); 2386 2387 data->idle = !!(conf->flags & IEEE80211_CONF_IDLE); 2388 2389 WARN_ON(conf->chandef.chan && data->use_chanctx); 2390 2391 mutex_lock(&data->mutex); 2392 if (data->scanning && conf->chandef.chan) { 2393 for (idx = 0; idx < ARRAY_SIZE(data->survey_data); idx++) { 2394 if (data->survey_data[idx].channel == data->channel) { 2395 data->survey_data[idx].start = 2396 data->survey_data[idx].next_start; 2397 data->survey_data[idx].end = jiffies; 2398 break; 2399 } 2400 } 2401 2402 data->channel = conf->chandef.chan; 2403 data->bw = conf->chandef.width; 2404 2405 for (idx = 0; idx < ARRAY_SIZE(data->survey_data); idx++) { 2406 if (data->survey_data[idx].channel && 2407 data->survey_data[idx].channel != data->channel) 2408 continue; 2409 data->survey_data[idx].channel = data->channel; 2410 data->survey_data[idx].next_start = jiffies; 2411 break; 2412 } 2413 } else { 2414 data->channel = conf->chandef.chan; 2415 data->bw = conf->chandef.width; 2416 } 2417 mutex_unlock(&data->mutex); 2418 2419 for (idx = 0; idx < ARRAY_SIZE(data->link_data); idx++) { 2420 struct mac80211_hwsim_link_data *link_data = 2421 &data->link_data[idx]; 2422 2423 if (!data->started || !link_data->beacon_int) { 2424 hrtimer_cancel(&link_data->beacon_timer); 2425 } else if (!hrtimer_is_queued(&link_data->beacon_timer)) { 2426 u64 tsf = mac80211_hwsim_get_tsf(hw, NULL); 2427 u32 bcn_int = link_data->beacon_int; 2428 u64 until_tbtt = bcn_int - do_div(tsf, bcn_int); 2429 2430 hrtimer_start(&link_data->beacon_timer, 2431 ns_to_ktime(until_tbtt * NSEC_PER_USEC), 2432 HRTIMER_MODE_REL_SOFT); 2433 } 2434 } 2435 2436 return 0; 2437} 2438 2439 2440static void mac80211_hwsim_configure_filter(struct ieee80211_hw *hw, 2441 unsigned int changed_flags, 2442 unsigned int *total_flags,u64 multicast) 2443{ 2444 struct mac80211_hwsim_data *data = hw->priv; 2445 2446 wiphy_dbg(hw->wiphy, "%s\n", __func__); 2447 2448 data->rx_filter = 0; 2449 if (*total_flags & FIF_ALLMULTI) 2450 data->rx_filter |= FIF_ALLMULTI; 2451 if (*total_flags & FIF_MCAST_ACTION) 2452 data->rx_filter |= FIF_MCAST_ACTION; 2453 2454 *total_flags = data->rx_filter; 2455} 2456 2457static void mac80211_hwsim_bcn_en_iter(void *data, u8 *mac, 2458 struct ieee80211_vif *vif) 2459{ 2460 unsigned int *count = data; 2461 struct hwsim_vif_priv *vp = (void *)vif->drv_priv; 2462 2463 if (vp->bcn_en) 2464 (*count)++; 2465} 2466 2467static void mac80211_hwsim_vif_info_changed(struct ieee80211_hw *hw, 2468 struct ieee80211_vif *vif, 2469 u64 changed) 2470{ 2471 struct hwsim_vif_priv *vp = (void *)vif->drv_priv; 2472 2473 hwsim_check_magic(vif); 2474 2475 wiphy_dbg(hw->wiphy, "%s(changed=0x%llx vif->addr=%pM)\n", 2476 __func__, changed, vif->addr); 2477 2478 if (changed & BSS_CHANGED_ASSOC) { 2479 wiphy_dbg(hw->wiphy, " ASSOC: assoc=%d aid=%d\n", 2480 vif->cfg.assoc, vif->cfg.aid); 2481 vp->assoc = vif->cfg.assoc; 2482 vp->aid = vif->cfg.aid; 2483 } 2484 2485 if (vif->type == NL80211_IFTYPE_STATION && 2486 changed & (BSS_CHANGED_MLD_VALID_LINKS | BSS_CHANGED_MLD_TTLM)) { 2487 u16 usable_links = ieee80211_vif_usable_links(vif); 2488 2489 if (vif->active_links != usable_links) 2490 ieee80211_set_active_links_async(vif, usable_links); 2491 } 2492} 2493 2494static void mac80211_hwsim_link_info_changed(struct ieee80211_hw *hw, 2495 struct ieee80211_vif *vif, 2496 struct ieee80211_bss_conf *info, 2497 u64 changed) 2498{ 2499 struct hwsim_vif_priv *vp = (void *)vif->drv_priv; 2500 struct mac80211_hwsim_data *data = hw->priv; 2501 unsigned int link_id = info->link_id; 2502 struct mac80211_hwsim_link_data *link_data = &data->link_data[link_id]; 2503 2504 hwsim_check_magic(vif); 2505 2506 wiphy_dbg(hw->wiphy, "%s(changed=0x%llx vif->addr=%pM, link id %u)\n", 2507 __func__, (unsigned long long)changed, vif->addr, link_id); 2508 2509 if (changed & BSS_CHANGED_BSSID) { 2510 wiphy_dbg(hw->wiphy, "%s: BSSID changed: %pM\n", 2511 __func__, info->bssid); 2512 memcpy(vp->bssid, info->bssid, ETH_ALEN); 2513 } 2514 2515 if (changed & BSS_CHANGED_BEACON_ENABLED) { 2516 wiphy_dbg(hw->wiphy, " BCN EN: %d (BI=%u)\n", 2517 info->enable_beacon, info->beacon_int); 2518 vp->bcn_en = info->enable_beacon; 2519 if (data->started && 2520 !hrtimer_is_queued(&link_data->beacon_timer) && 2521 info->enable_beacon) { 2522 u64 tsf, until_tbtt; 2523 u32 bcn_int; 2524 link_data->beacon_int = info->beacon_int * 1024; 2525 tsf = mac80211_hwsim_get_tsf(hw, vif); 2526 bcn_int = link_data->beacon_int; 2527 until_tbtt = bcn_int - do_div(tsf, bcn_int); 2528 2529 hrtimer_start(&link_data->beacon_timer, 2530 ns_to_ktime(until_tbtt * NSEC_PER_USEC), 2531 HRTIMER_MODE_REL_SOFT); 2532 } else if (!info->enable_beacon) { 2533 unsigned int count = 0; 2534 ieee80211_iterate_active_interfaces_atomic( 2535 data->hw, IEEE80211_IFACE_ITER_NORMAL, 2536 mac80211_hwsim_bcn_en_iter, &count); 2537 wiphy_dbg(hw->wiphy, " beaconing vifs remaining: %u", 2538 count); 2539 if (count == 0) { 2540 hrtimer_cancel(&link_data->beacon_timer); 2541 link_data->beacon_int = 0; 2542 } 2543 } 2544 } 2545 2546 if (changed & BSS_CHANGED_ERP_CTS_PROT) { 2547 wiphy_dbg(hw->wiphy, " ERP_CTS_PROT: %d\n", 2548 info->use_cts_prot); 2549 } 2550 2551 if (changed & BSS_CHANGED_ERP_PREAMBLE) { 2552 wiphy_dbg(hw->wiphy, " ERP_PREAMBLE: %d\n", 2553 info->use_short_preamble); 2554 } 2555 2556 if (changed & BSS_CHANGED_ERP_SLOT) { 2557 wiphy_dbg(hw->wiphy, " ERP_SLOT: %d\n", info->use_short_slot); 2558 } 2559 2560 if (changed & BSS_CHANGED_HT) { 2561 wiphy_dbg(hw->wiphy, " HT: op_mode=0x%x\n", 2562 info->ht_operation_mode); 2563 } 2564 2565 if (changed & BSS_CHANGED_BASIC_RATES) { 2566 wiphy_dbg(hw->wiphy, " BASIC_RATES: 0x%llx\n", 2567 (unsigned long long) info->basic_rates); 2568 } 2569 2570 if (changed & BSS_CHANGED_TXPOWER) 2571 wiphy_dbg(hw->wiphy, " TX Power: %d dBm\n", info->txpower); 2572} 2573 2574static void 2575mac80211_hwsim_sta_rc_update(struct ieee80211_hw *hw, 2576 struct ieee80211_vif *vif, 2577 struct ieee80211_sta *sta, 2578 u32 changed) 2579{ 2580 struct mac80211_hwsim_data *data = hw->priv; 2581 u32 bw = U32_MAX; 2582 int link_id; 2583 2584 rcu_read_lock(); 2585 for (link_id = 0; 2586 link_id < ARRAY_SIZE(vif->link_conf); 2587 link_id++) { 2588 enum nl80211_chan_width confbw = NL80211_CHAN_WIDTH_20_NOHT; 2589 struct ieee80211_bss_conf *vif_conf; 2590 struct ieee80211_link_sta *link_sta; 2591 2592 link_sta = rcu_dereference(sta->link[link_id]); 2593 2594 if (!link_sta) 2595 continue; 2596 2597 switch (link_sta->bandwidth) { 2598#define C(_bw) case IEEE80211_STA_RX_BW_##_bw: bw = _bw; break 2599 C(20); 2600 C(40); 2601 C(80); 2602 C(160); 2603 C(320); 2604#undef C 2605 } 2606 2607 if (!data->use_chanctx) { 2608 confbw = data->bw; 2609 } else { 2610 struct ieee80211_chanctx_conf *chanctx_conf; 2611 2612 vif_conf = rcu_dereference(vif->link_conf[link_id]); 2613 if (WARN_ON(!vif_conf)) 2614 continue; 2615 2616 chanctx_conf = rcu_dereference(vif_conf->chanctx_conf); 2617 2618 if (!WARN_ON(!chanctx_conf)) 2619 confbw = chanctx_conf->def.width; 2620 } 2621 2622 WARN(bw > hwsim_get_chanwidth(confbw), 2623 "intf %pM [link=%d]: bad STA %pM bandwidth %d MHz (%d) > channel config %d MHz (%d)\n", 2624 vif->addr, link_id, sta->addr, bw, sta->deflink.bandwidth, 2625 hwsim_get_chanwidth(data->bw), data->bw); 2626 2627 2628 } 2629 rcu_read_unlock(); 2630 2631 2632} 2633 2634static int mac80211_hwsim_sta_add(struct ieee80211_hw *hw, 2635 struct ieee80211_vif *vif, 2636 struct ieee80211_sta *sta) 2637{ 2638 struct hwsim_sta_priv *sp = (void *)sta->drv_priv; 2639 2640 hwsim_check_magic(vif); 2641 hwsim_set_sta_magic(sta); 2642 mac80211_hwsim_sta_rc_update(hw, vif, sta, 0); 2643 2644 if (sta->valid_links) { 2645 WARN(hweight16(sta->valid_links) > 1, 2646 "expect to add STA with single link, have 0x%x\n", 2647 sta->valid_links); 2648 sp->active_links_rx = sta->valid_links; 2649 } 2650 2651 return 0; 2652} 2653 2654static int mac80211_hwsim_sta_remove(struct ieee80211_hw *hw, 2655 struct ieee80211_vif *vif, 2656 struct ieee80211_sta *sta) 2657{ 2658 hwsim_check_magic(vif); 2659 hwsim_clear_sta_magic(sta); 2660 2661 return 0; 2662} 2663 2664static int mac80211_hwsim_sta_state(struct ieee80211_hw *hw, 2665 struct ieee80211_vif *vif, 2666 struct ieee80211_sta *sta, 2667 enum ieee80211_sta_state old_state, 2668 enum ieee80211_sta_state new_state) 2669{ 2670 if (new_state == IEEE80211_STA_NOTEXIST) 2671 return mac80211_hwsim_sta_remove(hw, vif, sta); 2672 2673 if (old_state == IEEE80211_STA_NOTEXIST) 2674 return mac80211_hwsim_sta_add(hw, vif, sta); 2675 2676 /* 2677 * in an MLO connection, when client is authorized 2678 * (AP station marked as such), enable all links 2679 */ 2680 if (ieee80211_vif_is_mld(vif) && 2681 vif->type == NL80211_IFTYPE_STATION && 2682 new_state == IEEE80211_STA_AUTHORIZED && !sta->tdls) 2683 ieee80211_set_active_links_async(vif, 2684 ieee80211_vif_usable_links(vif)); 2685 2686 return 0; 2687} 2688 2689static void mac80211_hwsim_sta_notify(struct ieee80211_hw *hw, 2690 struct ieee80211_vif *vif, 2691 enum sta_notify_cmd cmd, 2692 struct ieee80211_sta *sta) 2693{ 2694 hwsim_check_magic(vif); 2695 2696 switch (cmd) { 2697 case STA_NOTIFY_SLEEP: 2698 case STA_NOTIFY_AWAKE: 2699 /* TODO: make good use of these flags */ 2700 break; 2701 default: 2702 WARN(1, "Invalid sta notify: %d\n", cmd); 2703 break; 2704 } 2705} 2706 2707static int mac80211_hwsim_set_tim(struct ieee80211_hw *hw, 2708 struct ieee80211_sta *sta, 2709 bool set) 2710{ 2711 hwsim_check_sta_magic(sta); 2712 return 0; 2713} 2714 2715static int mac80211_hwsim_conf_tx(struct ieee80211_hw *hw, 2716 struct ieee80211_vif *vif, 2717 unsigned int link_id, u16 queue, 2718 const struct ieee80211_tx_queue_params *params) 2719{ 2720 wiphy_dbg(hw->wiphy, 2721 "%s (queue=%d txop=%d cw_min=%d cw_max=%d aifs=%d)\n", 2722 __func__, queue, 2723 params->txop, params->cw_min, 2724 params->cw_max, params->aifs); 2725 return 0; 2726} 2727 2728static int mac80211_hwsim_get_survey(struct ieee80211_hw *hw, int idx, 2729 struct survey_info *survey) 2730{ 2731 struct mac80211_hwsim_data *hwsim = hw->priv; 2732 2733 if (idx < 0 || idx >= ARRAY_SIZE(hwsim->survey_data)) 2734 return -ENOENT; 2735 2736 mutex_lock(&hwsim->mutex); 2737 survey->channel = hwsim->survey_data[idx].channel; 2738 if (!survey->channel) { 2739 mutex_unlock(&hwsim->mutex); 2740 return -ENOENT; 2741 } 2742 2743 /* 2744 * Magically conjured dummy values --- this is only ok for simulated hardware. 2745 * 2746 * A real driver which cannot determine real values noise MUST NOT 2747 * report any, especially not a magically conjured ones :-) 2748 */ 2749 survey->filled = SURVEY_INFO_NOISE_DBM | 2750 SURVEY_INFO_TIME | 2751 SURVEY_INFO_TIME_BUSY; 2752 survey->noise = -92; 2753 survey->time = 2754 jiffies_to_msecs(hwsim->survey_data[idx].end - 2755 hwsim->survey_data[idx].start); 2756 /* report 12.5% of channel time is used */ 2757 survey->time_busy = survey->time/8; 2758 mutex_unlock(&hwsim->mutex); 2759 2760 return 0; 2761} 2762 2763static enum ieee80211_neg_ttlm_res 2764mac80211_hwsim_can_neg_ttlm(struct ieee80211_hw *hw, struct ieee80211_vif *vif, 2765 struct ieee80211_neg_ttlm *neg_ttlm) 2766{ 2767 u32 i; 2768 2769 /* For testing purposes, accept if all TIDs are mapped to the same links 2770 * set, otherwise reject. 2771 */ 2772 for (i = 0; i < IEEE80211_TTLM_NUM_TIDS; i++) { 2773 if (neg_ttlm->downlink[i] != neg_ttlm->uplink[i] || 2774 neg_ttlm->downlink[i] != neg_ttlm->downlink[0]) 2775 return NEG_TTLM_RES_REJECT; 2776 } 2777 2778 return NEG_TTLM_RES_ACCEPT; 2779} 2780 2781#ifdef CONFIG_NL80211_TESTMODE 2782/* 2783 * This section contains example code for using netlink 2784 * attributes with the testmode command in nl80211. 2785 */ 2786 2787/* These enums need to be kept in sync with userspace */ 2788enum hwsim_testmode_attr { 2789 __HWSIM_TM_ATTR_INVALID = 0, 2790 HWSIM_TM_ATTR_CMD = 1, 2791 HWSIM_TM_ATTR_PS = 2, 2792 2793 /* keep last */ 2794 __HWSIM_TM_ATTR_AFTER_LAST, 2795 HWSIM_TM_ATTR_MAX = __HWSIM_TM_ATTR_AFTER_LAST - 1 2796}; 2797 2798enum hwsim_testmode_cmd { 2799 HWSIM_TM_CMD_SET_PS = 0, 2800 HWSIM_TM_CMD_GET_PS = 1, 2801 HWSIM_TM_CMD_STOP_QUEUES = 2, 2802 HWSIM_TM_CMD_WAKE_QUEUES = 3, 2803}; 2804 2805static const struct nla_policy hwsim_testmode_policy[HWSIM_TM_ATTR_MAX + 1] = { 2806 [HWSIM_TM_ATTR_CMD] = { .type = NLA_U32 }, 2807 [HWSIM_TM_ATTR_PS] = { .type = NLA_U32 }, 2808}; 2809 2810static int mac80211_hwsim_testmode_cmd(struct ieee80211_hw *hw, 2811 struct ieee80211_vif *vif, 2812 void *data, int len) 2813{ 2814 struct mac80211_hwsim_data *hwsim = hw->priv; 2815 struct nlattr *tb[HWSIM_TM_ATTR_MAX + 1]; 2816 struct sk_buff *skb; 2817 int err, ps; 2818 2819 err = nla_parse_deprecated(tb, HWSIM_TM_ATTR_MAX, data, len, 2820 hwsim_testmode_policy, NULL); 2821 if (err) 2822 return err; 2823 2824 if (!tb[HWSIM_TM_ATTR_CMD]) 2825 return -EINVAL; 2826 2827 switch (nla_get_u32(tb[HWSIM_TM_ATTR_CMD])) { 2828 case HWSIM_TM_CMD_SET_PS: 2829 if (!tb[HWSIM_TM_ATTR_PS]) 2830 return -EINVAL; 2831 ps = nla_get_u32(tb[HWSIM_TM_ATTR_PS]); 2832 return hwsim_fops_ps_write(hwsim, ps); 2833 case HWSIM_TM_CMD_GET_PS: 2834 skb = cfg80211_testmode_alloc_reply_skb(hw->wiphy, 2835 nla_total_size(sizeof(u32))); 2836 if (!skb) 2837 return -ENOMEM; 2838 if (nla_put_u32(skb, HWSIM_TM_ATTR_PS, hwsim->ps)) 2839 goto nla_put_failure; 2840 return cfg80211_testmode_reply(skb); 2841 case HWSIM_TM_CMD_STOP_QUEUES: 2842 ieee80211_stop_queues(hw); 2843 return 0; 2844 case HWSIM_TM_CMD_WAKE_QUEUES: 2845 ieee80211_wake_queues(hw); 2846 return 0; 2847 default: 2848 return -EOPNOTSUPP; 2849 } 2850 2851 nla_put_failure: 2852 kfree_skb(skb); 2853 return -ENOBUFS; 2854} 2855#endif 2856 2857static int mac80211_hwsim_ampdu_action(struct ieee80211_hw *hw, 2858 struct ieee80211_vif *vif, 2859 struct ieee80211_ampdu_params *params) 2860{ 2861 struct ieee80211_sta *sta = params->sta; 2862 enum ieee80211_ampdu_mlme_action action = params->action; 2863 u16 tid = params->tid; 2864 2865 switch (action) { 2866 case IEEE80211_AMPDU_TX_START: 2867 return IEEE80211_AMPDU_TX_START_IMMEDIATE; 2868 case IEEE80211_AMPDU_TX_STOP_CONT: 2869 case IEEE80211_AMPDU_TX_STOP_FLUSH: 2870 case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT: 2871 ieee80211_stop_tx_ba_cb_irqsafe(vif, sta->addr, tid); 2872 break; 2873 case IEEE80211_AMPDU_TX_OPERATIONAL: 2874 break; 2875 case IEEE80211_AMPDU_RX_START: 2876 case IEEE80211_AMPDU_RX_STOP: 2877 break; 2878 default: 2879 return -EOPNOTSUPP; 2880 } 2881 2882 return 0; 2883} 2884 2885static void mac80211_hwsim_flush(struct ieee80211_hw *hw, 2886 struct ieee80211_vif *vif, 2887 u32 queues, bool drop) 2888{ 2889 /* Not implemented, queues only on kernel side */ 2890} 2891 2892static void hw_scan_work(struct work_struct *work) 2893{ 2894 struct mac80211_hwsim_data *hwsim = 2895 container_of(work, struct mac80211_hwsim_data, hw_scan.work); 2896 struct cfg80211_scan_request *req = hwsim->hw_scan_request; 2897 int dwell, i; 2898 2899 mutex_lock(&hwsim->mutex); 2900 if (hwsim->scan_chan_idx >= req->n_channels) { 2901 struct cfg80211_scan_info info = { 2902 .aborted = false, 2903 }; 2904 2905 wiphy_dbg(hwsim->hw->wiphy, "hw scan complete\n"); 2906 ieee80211_scan_completed(hwsim->hw, &info); 2907 hwsim->hw_scan_request = NULL; 2908 hwsim->hw_scan_vif = NULL; 2909 hwsim->tmp_chan = NULL; 2910 mutex_unlock(&hwsim->mutex); 2911 mac80211_hwsim_config_mac_nl(hwsim->hw, hwsim->scan_addr, 2912 false); 2913 return; 2914 } 2915 2916 wiphy_dbg(hwsim->hw->wiphy, "hw scan %d MHz\n", 2917 req->channels[hwsim->scan_chan_idx]->center_freq); 2918 2919 hwsim->tmp_chan = req->channels[hwsim->scan_chan_idx]; 2920 if (hwsim->tmp_chan->flags & (IEEE80211_CHAN_NO_IR | 2921 IEEE80211_CHAN_RADAR) || 2922 !req->n_ssids) { 2923 dwell = 120; 2924 } else { 2925 dwell = 30; 2926 /* send probes */ 2927 for (i = 0; i < req->n_ssids; i++) { 2928 struct sk_buff *probe; 2929 struct ieee80211_mgmt *mgmt; 2930 2931 probe = ieee80211_probereq_get(hwsim->hw, 2932 hwsim->scan_addr, 2933 req->ssids[i].ssid, 2934 req->ssids[i].ssid_len, 2935 req->ie_len); 2936 if (!probe) 2937 continue; 2938 2939 mgmt = (struct ieee80211_mgmt *) probe->data; 2940 memcpy(mgmt->da, req->bssid, ETH_ALEN); 2941 memcpy(mgmt->bssid, req->bssid, ETH_ALEN); 2942 2943 if (req->ie_len) 2944 skb_put_data(probe, req->ie, req->ie_len); 2945 2946 rcu_read_lock(); 2947 if (!ieee80211_tx_prepare_skb(hwsim->hw, 2948 hwsim->hw_scan_vif, 2949 probe, 2950 hwsim->tmp_chan->band, 2951 NULL)) { 2952 rcu_read_unlock(); 2953 kfree_skb(probe); 2954 continue; 2955 } 2956 2957 local_bh_disable(); 2958 mac80211_hwsim_tx_frame(hwsim->hw, probe, 2959 hwsim->tmp_chan); 2960 rcu_read_unlock(); 2961 local_bh_enable(); 2962 } 2963 } 2964 ieee80211_queue_delayed_work(hwsim->hw, &hwsim->hw_scan, 2965 msecs_to_jiffies(dwell)); 2966 hwsim->survey_data[hwsim->scan_chan_idx].channel = hwsim->tmp_chan; 2967 hwsim->survey_data[hwsim->scan_chan_idx].start = jiffies; 2968 hwsim->survey_data[hwsim->scan_chan_idx].end = 2969 jiffies + msecs_to_jiffies(dwell); 2970 hwsim->scan_chan_idx++; 2971 mutex_unlock(&hwsim->mutex); 2972} 2973 2974static int mac80211_hwsim_hw_scan(struct ieee80211_hw *hw, 2975 struct ieee80211_vif *vif, 2976 struct ieee80211_scan_request *hw_req) 2977{ 2978 struct mac80211_hwsim_data *hwsim = hw->priv; 2979 struct cfg80211_scan_request *req = &hw_req->req; 2980 2981 mutex_lock(&hwsim->mutex); 2982 if (WARN_ON(hwsim->tmp_chan || hwsim->hw_scan_request)) { 2983 mutex_unlock(&hwsim->mutex); 2984 return -EBUSY; 2985 } 2986 hwsim->hw_scan_request = req; 2987 hwsim->hw_scan_vif = vif; 2988 hwsim->scan_chan_idx = 0; 2989 if (req->flags & NL80211_SCAN_FLAG_RANDOM_ADDR) 2990 get_random_mask_addr(hwsim->scan_addr, 2991 hw_req->req.mac_addr, 2992 hw_req->req.mac_addr_mask); 2993 else 2994 memcpy(hwsim->scan_addr, vif->addr, ETH_ALEN); 2995 memset(hwsim->survey_data, 0, sizeof(hwsim->survey_data)); 2996 mutex_unlock(&hwsim->mutex); 2997 2998 mac80211_hwsim_config_mac_nl(hw, hwsim->scan_addr, true); 2999 wiphy_dbg(hw->wiphy, "hwsim hw_scan request\n"); 3000 3001 ieee80211_queue_delayed_work(hwsim->hw, &hwsim->hw_scan, 0); 3002 3003 return 0; 3004} 3005 3006static void mac80211_hwsim_cancel_hw_scan(struct ieee80211_hw *hw, 3007 struct ieee80211_vif *vif) 3008{ 3009 struct mac80211_hwsim_data *hwsim = hw->priv; 3010 struct cfg80211_scan_info info = { 3011 .aborted = true, 3012 }; 3013 3014 wiphy_dbg(hw->wiphy, "hwsim cancel_hw_scan\n"); 3015 3016 cancel_delayed_work_sync(&hwsim->hw_scan); 3017 3018 mutex_lock(&hwsim->mutex); 3019 ieee80211_scan_completed(hwsim->hw, &info); 3020 hwsim->tmp_chan = NULL; 3021 hwsim->hw_scan_request = NULL; 3022 hwsim->hw_scan_vif = NULL; 3023 mutex_unlock(&hwsim->mutex); 3024} 3025 3026static void mac80211_hwsim_sw_scan(struct ieee80211_hw *hw, 3027 struct ieee80211_vif *vif, 3028 const u8 *mac_addr) 3029{ 3030 struct mac80211_hwsim_data *hwsim = hw->priv; 3031 3032 mutex_lock(&hwsim->mutex); 3033 3034 if (hwsim->scanning) { 3035 pr_debug("two hwsim sw_scans detected!\n"); 3036 goto out; 3037 } 3038 3039 pr_debug("hwsim sw_scan request, prepping stuff\n"); 3040 3041 memcpy(hwsim->scan_addr, mac_addr, ETH_ALEN); 3042 mac80211_hwsim_config_mac_nl(hw, hwsim->scan_addr, true); 3043 hwsim->scanning = true; 3044 memset(hwsim->survey_data, 0, sizeof(hwsim->survey_data)); 3045 3046out: 3047 mutex_unlock(&hwsim->mutex); 3048} 3049 3050static void mac80211_hwsim_sw_scan_complete(struct ieee80211_hw *hw, 3051 struct ieee80211_vif *vif) 3052{ 3053 struct mac80211_hwsim_data *hwsim = hw->priv; 3054 3055 mutex_lock(&hwsim->mutex); 3056 3057 pr_debug("hwsim sw_scan_complete\n"); 3058 hwsim->scanning = false; 3059 mac80211_hwsim_config_mac_nl(hw, hwsim->scan_addr, false); 3060 eth_zero_addr(hwsim->scan_addr); 3061 3062 mutex_unlock(&hwsim->mutex); 3063} 3064 3065static void hw_roc_start(struct work_struct *work) 3066{ 3067 struct mac80211_hwsim_data *hwsim = 3068 container_of(work, struct mac80211_hwsim_data, roc_start.work); 3069 3070 mutex_lock(&hwsim->mutex); 3071 3072 wiphy_dbg(hwsim->hw->wiphy, "hwsim ROC begins\n"); 3073 hwsim->tmp_chan = hwsim->roc_chan; 3074 ieee80211_ready_on_channel(hwsim->hw); 3075 3076 ieee80211_queue_delayed_work(hwsim->hw, &hwsim->roc_done, 3077 msecs_to_jiffies(hwsim->roc_duration)); 3078 3079 mutex_unlock(&hwsim->mutex); 3080} 3081 3082static void hw_roc_done(struct work_struct *work) 3083{ 3084 struct mac80211_hwsim_data *hwsim = 3085 container_of(work, struct mac80211_hwsim_data, roc_done.work); 3086 3087 mutex_lock(&hwsim->mutex); 3088 ieee80211_remain_on_channel_expired(hwsim->hw); 3089 hwsim->tmp_chan = NULL; 3090 mutex_unlock(&hwsim->mutex); 3091 3092 wiphy_dbg(hwsim->hw->wiphy, "hwsim ROC expired\n"); 3093} 3094 3095static int mac80211_hwsim_roc(struct ieee80211_hw *hw, 3096 struct ieee80211_vif *vif, 3097 struct ieee80211_channel *chan, 3098 int duration, 3099 enum ieee80211_roc_type type) 3100{ 3101 struct mac80211_hwsim_data *hwsim = hw->priv; 3102 3103 mutex_lock(&hwsim->mutex); 3104 if (WARN_ON(hwsim->tmp_chan || hwsim->hw_scan_request)) { 3105 mutex_unlock(&hwsim->mutex); 3106 return -EBUSY; 3107 } 3108 3109 hwsim->roc_chan = chan; 3110 hwsim->roc_duration = duration; 3111 mutex_unlock(&hwsim->mutex); 3112 3113 wiphy_dbg(hw->wiphy, "hwsim ROC (%d MHz, %d ms)\n", 3114 chan->center_freq, duration); 3115 ieee80211_queue_delayed_work(hw, &hwsim->roc_start, HZ/50); 3116 3117 return 0; 3118} 3119 3120static int mac80211_hwsim_croc(struct ieee80211_hw *hw, 3121 struct ieee80211_vif *vif) 3122{ 3123 struct mac80211_hwsim_data *hwsim = hw->priv; 3124 3125 cancel_delayed_work_sync(&hwsim->roc_start); 3126 cancel_delayed_work_sync(&hwsim->roc_done); 3127 3128 mutex_lock(&hwsim->mutex); 3129 hwsim->tmp_chan = NULL; 3130 mutex_unlock(&hwsim->mutex); 3131 3132 wiphy_dbg(hw->wiphy, "hwsim ROC canceled\n"); 3133 3134 return 0; 3135} 3136 3137static int mac80211_hwsim_add_chanctx(struct ieee80211_hw *hw, 3138 struct ieee80211_chanctx_conf *ctx) 3139{ 3140 hwsim_set_chanctx_magic(ctx); 3141 wiphy_dbg(hw->wiphy, 3142 "add channel context control: %d MHz/width: %d/cfreqs:%d/%d MHz\n", 3143 ctx->def.chan->center_freq, ctx->def.width, 3144 ctx->def.center_freq1, ctx->def.center_freq2); 3145 return 0; 3146} 3147 3148static void mac80211_hwsim_remove_chanctx(struct ieee80211_hw *hw, 3149 struct ieee80211_chanctx_conf *ctx) 3150{ 3151 wiphy_dbg(hw->wiphy, 3152 "remove channel context control: %d MHz/width: %d/cfreqs:%d/%d MHz\n", 3153 ctx->def.chan->center_freq, ctx->def.width, 3154 ctx->def.center_freq1, ctx->def.center_freq2); 3155 hwsim_check_chanctx_magic(ctx); 3156 hwsim_clear_chanctx_magic(ctx); 3157} 3158 3159static void mac80211_hwsim_change_chanctx(struct ieee80211_hw *hw, 3160 struct ieee80211_chanctx_conf *ctx, 3161 u32 changed) 3162{ 3163 hwsim_check_chanctx_magic(ctx); 3164 wiphy_dbg(hw->wiphy, 3165 "change channel context control: %d MHz/width: %d/cfreqs:%d/%d MHz\n", 3166 ctx->def.chan->center_freq, ctx->def.width, 3167 ctx->def.center_freq1, ctx->def.center_freq2); 3168} 3169 3170static int mac80211_hwsim_assign_vif_chanctx(struct ieee80211_hw *hw, 3171 struct ieee80211_vif *vif, 3172 struct ieee80211_bss_conf *link_conf, 3173 struct ieee80211_chanctx_conf *ctx) 3174{ 3175 hwsim_check_magic(vif); 3176 hwsim_check_chanctx_magic(ctx); 3177 3178 /* if we activate a link while already associated wake it up */ 3179 if (vif->type == NL80211_IFTYPE_STATION && vif->cfg.assoc) { 3180 struct sk_buff *skb; 3181 3182 skb = ieee80211_nullfunc_get(hw, vif, link_conf->link_id, true); 3183 if (skb) { 3184 local_bh_disable(); 3185 mac80211_hwsim_tx_frame(hw, skb, ctx->def.chan); 3186 local_bh_enable(); 3187 } 3188 } 3189 3190 return 0; 3191} 3192 3193static void mac80211_hwsim_unassign_vif_chanctx(struct ieee80211_hw *hw, 3194 struct ieee80211_vif *vif, 3195 struct ieee80211_bss_conf *link_conf, 3196 struct ieee80211_chanctx_conf *ctx) 3197{ 3198 hwsim_check_magic(vif); 3199 hwsim_check_chanctx_magic(ctx); 3200 3201 /* if we deactivate a link while associated suspend it first */ 3202 if (vif->type == NL80211_IFTYPE_STATION && vif->cfg.assoc) { 3203 struct sk_buff *skb; 3204 3205 skb = ieee80211_nullfunc_get(hw, vif, link_conf->link_id, true); 3206 if (skb) { 3207 struct ieee80211_hdr *hdr = (void *)skb->data; 3208 3209 hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PM); 3210 3211 local_bh_disable(); 3212 mac80211_hwsim_tx_frame(hw, skb, ctx->def.chan); 3213 local_bh_enable(); 3214 } 3215 } 3216} 3217 3218static int mac80211_hwsim_switch_vif_chanctx(struct ieee80211_hw *hw, 3219 struct ieee80211_vif_chanctx_switch *vifs, 3220 int n_vifs, 3221 enum ieee80211_chanctx_switch_mode mode) 3222{ 3223 int i; 3224 3225 if (n_vifs <= 0) 3226 return -EINVAL; 3227 3228 wiphy_dbg(hw->wiphy, 3229 "switch vif channel context mode: %u\n", mode); 3230 3231 for (i = 0; i < n_vifs; i++) { 3232 hwsim_check_chanctx_magic(vifs[i].old_ctx); 3233 wiphy_dbg(hw->wiphy, 3234 "switch vif channel context: %d MHz/width: %d/cfreqs:%d/%d MHz -> %d MHz/width: %d/cfreqs:%d/%d MHz\n", 3235 vifs[i].old_ctx->def.chan->center_freq, 3236 vifs[i].old_ctx->def.width, 3237 vifs[i].old_ctx->def.center_freq1, 3238 vifs[i].old_ctx->def.center_freq2, 3239 vifs[i].new_ctx->def.chan->center_freq, 3240 vifs[i].new_ctx->def.width, 3241 vifs[i].new_ctx->def.center_freq1, 3242 vifs[i].new_ctx->def.center_freq2); 3243 3244 switch (mode) { 3245 case CHANCTX_SWMODE_REASSIGN_VIF: 3246 hwsim_check_chanctx_magic(vifs[i].new_ctx); 3247 break; 3248 case CHANCTX_SWMODE_SWAP_CONTEXTS: 3249 hwsim_set_chanctx_magic(vifs[i].new_ctx); 3250 hwsim_clear_chanctx_magic(vifs[i].old_ctx); 3251 break; 3252 default: 3253 WARN_ON("Invalid mode"); 3254 } 3255 } 3256 return 0; 3257} 3258 3259static const char mac80211_hwsim_gstrings_stats[][ETH_GSTRING_LEN] = { 3260 "tx_pkts_nic", 3261 "tx_bytes_nic", 3262 "rx_pkts_nic", 3263 "rx_bytes_nic", 3264 "d_tx_dropped", 3265 "d_tx_failed", 3266 "d_ps_mode", 3267 "d_group", 3268}; 3269 3270#define MAC80211_HWSIM_SSTATS_LEN ARRAY_SIZE(mac80211_hwsim_gstrings_stats) 3271 3272static void mac80211_hwsim_get_et_strings(struct ieee80211_hw *hw, 3273 struct ieee80211_vif *vif, 3274 u32 sset, u8 *data) 3275{ 3276 if (sset == ETH_SS_STATS) 3277 memcpy(data, mac80211_hwsim_gstrings_stats, 3278 sizeof(mac80211_hwsim_gstrings_stats)); 3279} 3280 3281static int mac80211_hwsim_get_et_sset_count(struct ieee80211_hw *hw, 3282 struct ieee80211_vif *vif, int sset) 3283{ 3284 if (sset == ETH_SS_STATS) 3285 return MAC80211_HWSIM_SSTATS_LEN; 3286 return 0; 3287} 3288 3289static void mac80211_hwsim_get_et_stats(struct ieee80211_hw *hw, 3290 struct ieee80211_vif *vif, 3291 struct ethtool_stats *stats, u64 *data) 3292{ 3293 struct mac80211_hwsim_data *ar = hw->priv; 3294 int i = 0; 3295 3296 data[i++] = ar->tx_pkts; 3297 data[i++] = ar->tx_bytes; 3298 data[i++] = ar->rx_pkts; 3299 data[i++] = ar->rx_bytes; 3300 data[i++] = ar->tx_dropped; 3301 data[i++] = ar->tx_failed; 3302 data[i++] = ar->ps; 3303 data[i++] = ar->group; 3304 3305 WARN_ON(i != MAC80211_HWSIM_SSTATS_LEN); 3306} 3307 3308static int mac80211_hwsim_tx_last_beacon(struct ieee80211_hw *hw) 3309{ 3310 return 1; 3311} 3312 3313static int mac80211_hwsim_set_rts_threshold(struct ieee80211_hw *hw, u32 value) 3314{ 3315 return -EOPNOTSUPP; 3316} 3317 3318static int mac80211_hwsim_change_vif_links(struct ieee80211_hw *hw, 3319 struct ieee80211_vif *vif, 3320 u16 old_links, u16 new_links, 3321 struct ieee80211_bss_conf *old[IEEE80211_MLD_MAX_NUM_LINKS]) 3322{ 3323 unsigned long rem = old_links & ~new_links; 3324 unsigned long add = new_links & ~old_links; 3325 int i; 3326 3327 if (!old_links) 3328 rem |= BIT(0); 3329 if (!new_links) 3330 add |= BIT(0); 3331 3332 for_each_set_bit(i, &rem, IEEE80211_MLD_MAX_NUM_LINKS) 3333 mac80211_hwsim_config_mac_nl(hw, old[i]->addr, false); 3334 3335 for_each_set_bit(i, &add, IEEE80211_MLD_MAX_NUM_LINKS) { 3336 struct ieee80211_bss_conf *link_conf; 3337 3338 link_conf = link_conf_dereference_protected(vif, i); 3339 if (WARN_ON(!link_conf)) 3340 continue; 3341 3342 mac80211_hwsim_config_mac_nl(hw, link_conf->addr, true); 3343 } 3344 3345 return 0; 3346} 3347 3348static int mac80211_hwsim_change_sta_links(struct ieee80211_hw *hw, 3349 struct ieee80211_vif *vif, 3350 struct ieee80211_sta *sta, 3351 u16 old_links, u16 new_links) 3352{ 3353 struct hwsim_sta_priv *sp = (void *)sta->drv_priv; 3354 3355 hwsim_check_sta_magic(sta); 3356 3357 if (vif->type == NL80211_IFTYPE_STATION) 3358 sp->active_links_rx = new_links; 3359 3360 return 0; 3361} 3362 3363static int mac80211_hwsim_send_pmsr_ftm_request_peer(struct sk_buff *msg, 3364 struct cfg80211_pmsr_ftm_request_peer *request) 3365{ 3366 struct nlattr *ftm; 3367 3368 if (!request->requested) 3369 return -EINVAL; 3370 3371 ftm = nla_nest_start(msg, NL80211_PMSR_TYPE_FTM); 3372 if (!ftm) 3373 return -ENOBUFS; 3374 3375 if (nla_put_u32(msg, NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE, request->preamble)) 3376 return -ENOBUFS; 3377 3378 if (nla_put_u16(msg, NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD, request->burst_period)) 3379 return -ENOBUFS; 3380 3381 if (request->asap && nla_put_flag(msg, NL80211_PMSR_FTM_REQ_ATTR_ASAP)) 3382 return -ENOBUFS; 3383 3384 if (request->request_lci && nla_put_flag(msg, NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI)) 3385 return -ENOBUFS; 3386 3387 if (request->request_civicloc && 3388 nla_put_flag(msg, NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC)) 3389 return -ENOBUFS; 3390 3391 if (request->trigger_based && nla_put_flag(msg, NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED)) 3392 return -ENOBUFS; 3393 3394 if (request->non_trigger_based && 3395 nla_put_flag(msg, NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED)) 3396 return -ENOBUFS; 3397 3398 if (request->lmr_feedback && nla_put_flag(msg, NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK)) 3399 return -ENOBUFS; 3400 3401 if (nla_put_u8(msg, NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP, request->num_bursts_exp)) 3402 return -ENOBUFS; 3403 3404 if (nla_put_u8(msg, NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION, request->burst_duration)) 3405 return -ENOBUFS; 3406 3407 if (nla_put_u8(msg, NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST, request->ftms_per_burst)) 3408 return -ENOBUFS; 3409 3410 if (nla_put_u8(msg, NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES, request->ftmr_retries)) 3411 return -ENOBUFS; 3412 3413 if (nla_put_u8(msg, NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION, request->burst_duration)) 3414 return -ENOBUFS; 3415 3416 if (nla_put_u8(msg, NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR, request->bss_color)) 3417 return -ENOBUFS; 3418 3419 nla_nest_end(msg, ftm); 3420 3421 return 0; 3422} 3423 3424static int mac80211_hwsim_send_pmsr_request_peer(struct sk_buff *msg, 3425 struct cfg80211_pmsr_request_peer *request) 3426{ 3427 struct nlattr *peer, *chandef, *req, *data; 3428 int err; 3429 3430 peer = nla_nest_start(msg, NL80211_PMSR_ATTR_PEERS); 3431 if (!peer) 3432 return -ENOBUFS; 3433 3434 if (nla_put(msg, NL80211_PMSR_PEER_ATTR_ADDR, ETH_ALEN, 3435 request->addr)) 3436 return -ENOBUFS; 3437 3438 chandef = nla_nest_start(msg, NL80211_PMSR_PEER_ATTR_CHAN); 3439 if (!chandef) 3440 return -ENOBUFS; 3441 3442 err = nl80211_send_chandef(msg, &request->chandef); 3443 if (err) 3444 return err; 3445 3446 nla_nest_end(msg, chandef); 3447 3448 req = nla_nest_start(msg, NL80211_PMSR_PEER_ATTR_REQ); 3449 if (!req) 3450 return -ENOBUFS; 3451 3452 if (request->report_ap_tsf && nla_put_flag(msg, NL80211_PMSR_REQ_ATTR_GET_AP_TSF)) 3453 return -ENOBUFS; 3454 3455 data = nla_nest_start(msg, NL80211_PMSR_REQ_ATTR_DATA); 3456 if (!data) 3457 return -ENOBUFS; 3458 3459 err = mac80211_hwsim_send_pmsr_ftm_request_peer(msg, &request->ftm); 3460 if (err) 3461 return err; 3462 3463 nla_nest_end(msg, data); 3464 nla_nest_end(msg, req); 3465 nla_nest_end(msg, peer); 3466 3467 return 0; 3468} 3469 3470static int mac80211_hwsim_send_pmsr_request(struct sk_buff *msg, 3471 struct cfg80211_pmsr_request *request) 3472{ 3473 struct nlattr *pmsr; 3474 int err; 3475 3476 pmsr = nla_nest_start(msg, NL80211_ATTR_PEER_MEASUREMENTS); 3477 if (!pmsr) 3478 return -ENOBUFS; 3479 3480 if (nla_put_u32(msg, NL80211_ATTR_TIMEOUT, request->timeout)) 3481 return -ENOBUFS; 3482 3483 if (!is_zero_ether_addr(request->mac_addr)) { 3484 if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, request->mac_addr)) 3485 return -ENOBUFS; 3486 if (nla_put(msg, NL80211_ATTR_MAC_MASK, ETH_ALEN, request->mac_addr_mask)) 3487 return -ENOBUFS; 3488 } 3489 3490 for (int i = 0; i < request->n_peers; i++) { 3491 err = mac80211_hwsim_send_pmsr_request_peer(msg, &request->peers[i]); 3492 if (err) 3493 return err; 3494 } 3495 3496 nla_nest_end(msg, pmsr); 3497 3498 return 0; 3499} 3500 3501static int mac80211_hwsim_start_pmsr(struct ieee80211_hw *hw, 3502 struct ieee80211_vif *vif, 3503 struct cfg80211_pmsr_request *request) 3504{ 3505 struct mac80211_hwsim_data *data; 3506 struct sk_buff *skb = NULL; 3507 struct nlattr *pmsr; 3508 void *msg_head; 3509 u32 _portid; 3510 int err = 0; 3511 3512 data = hw->priv; 3513 _portid = READ_ONCE(data->wmediumd); 3514 if (!_portid && !hwsim_virtio_enabled) 3515 return -EOPNOTSUPP; 3516 3517 mutex_lock(&data->mutex); 3518 3519 if (data->pmsr_request) { 3520 err = -EBUSY; 3521 goto out_free; 3522 } 3523 3524 skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL); 3525 3526 if (!skb) { 3527 err = -ENOMEM; 3528 goto out_free; 3529 } 3530 3531 msg_head = genlmsg_put(skb, 0, 0, &hwsim_genl_family, 0, HWSIM_CMD_START_PMSR); 3532 3533 if (nla_put(skb, HWSIM_ATTR_ADDR_TRANSMITTER, 3534 ETH_ALEN, data->addresses[1].addr)) { 3535 err = -ENOMEM; 3536 goto out_free; 3537 } 3538 3539 pmsr = nla_nest_start(skb, HWSIM_ATTR_PMSR_REQUEST); 3540 if (!pmsr) { 3541 err = -ENOMEM; 3542 goto out_free; 3543 } 3544 3545 err = mac80211_hwsim_send_pmsr_request(skb, request); 3546 if (err) 3547 goto out_free; 3548 3549 nla_nest_end(skb, pmsr); 3550 3551 genlmsg_end(skb, msg_head); 3552 if (hwsim_virtio_enabled) 3553 hwsim_tx_virtio(data, skb); 3554 else 3555 hwsim_unicast_netgroup(data, skb, _portid); 3556 3557 data->pmsr_request = request; 3558 data->pmsr_request_wdev = ieee80211_vif_to_wdev(vif); 3559 3560out_free: 3561 if (err && skb) 3562 nlmsg_free(skb); 3563 3564 mutex_unlock(&data->mutex); 3565 return err; 3566} 3567 3568static void mac80211_hwsim_abort_pmsr(struct ieee80211_hw *hw, 3569 struct ieee80211_vif *vif, 3570 struct cfg80211_pmsr_request *request) 3571{ 3572 struct mac80211_hwsim_data *data; 3573 struct sk_buff *skb = NULL; 3574 struct nlattr *pmsr; 3575 void *msg_head; 3576 u32 _portid; 3577 int err = 0; 3578 3579 data = hw->priv; 3580 _portid = READ_ONCE(data->wmediumd); 3581 if (!_portid && !hwsim_virtio_enabled) 3582 return; 3583 3584 mutex_lock(&data->mutex); 3585 3586 if (data->pmsr_request != request) { 3587 err = -EINVAL; 3588 goto out; 3589 } 3590 3591 skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL); 3592 if (!skb) { 3593 err = -ENOMEM; 3594 goto out; 3595 } 3596 3597 msg_head = genlmsg_put(skb, 0, 0, &hwsim_genl_family, 0, HWSIM_CMD_ABORT_PMSR); 3598 3599 if (nla_put(skb, HWSIM_ATTR_ADDR_TRANSMITTER, ETH_ALEN, data->addresses[1].addr)) 3600 goto out; 3601 3602 pmsr = nla_nest_start(skb, HWSIM_ATTR_PMSR_REQUEST); 3603 if (!pmsr) { 3604 err = -ENOMEM; 3605 goto out; 3606 } 3607 3608 err = mac80211_hwsim_send_pmsr_request(skb, request); 3609 if (err) 3610 goto out; 3611 3612 err = nla_nest_end(skb, pmsr); 3613 if (err) 3614 goto out; 3615 3616 genlmsg_end(skb, msg_head); 3617 if (hwsim_virtio_enabled) 3618 hwsim_tx_virtio(data, skb); 3619 else 3620 hwsim_unicast_netgroup(data, skb, _portid); 3621 3622out: 3623 if (err && skb) 3624 nlmsg_free(skb); 3625 3626 mutex_unlock(&data->mutex); 3627} 3628 3629static int mac80211_hwsim_parse_rate_info(struct nlattr *rateattr, 3630 struct rate_info *rate_info, 3631 struct genl_info *info) 3632{ 3633 struct nlattr *tb[HWSIM_RATE_INFO_ATTR_MAX + 1]; 3634 int ret; 3635 3636 ret = nla_parse_nested(tb, HWSIM_RATE_INFO_ATTR_MAX, 3637 rateattr, hwsim_rate_info_policy, info->extack); 3638 if (ret) 3639 return ret; 3640 3641 if (tb[HWSIM_RATE_INFO_ATTR_FLAGS]) 3642 rate_info->flags = nla_get_u8(tb[HWSIM_RATE_INFO_ATTR_FLAGS]); 3643 3644 if (tb[HWSIM_RATE_INFO_ATTR_MCS]) 3645 rate_info->mcs = nla_get_u8(tb[HWSIM_RATE_INFO_ATTR_MCS]); 3646 3647 if (tb[HWSIM_RATE_INFO_ATTR_LEGACY]) 3648 rate_info->legacy = nla_get_u16(tb[HWSIM_RATE_INFO_ATTR_LEGACY]); 3649 3650 if (tb[HWSIM_RATE_INFO_ATTR_NSS]) 3651 rate_info->nss = nla_get_u8(tb[HWSIM_RATE_INFO_ATTR_NSS]); 3652 3653 if (tb[HWSIM_RATE_INFO_ATTR_BW]) 3654 rate_info->bw = nla_get_u8(tb[HWSIM_RATE_INFO_ATTR_BW]); 3655 3656 if (tb[HWSIM_RATE_INFO_ATTR_HE_GI]) 3657 rate_info->he_gi = nla_get_u8(tb[HWSIM_RATE_INFO_ATTR_HE_GI]); 3658 3659 if (tb[HWSIM_RATE_INFO_ATTR_HE_DCM]) 3660 rate_info->he_dcm = nla_get_u8(tb[HWSIM_RATE_INFO_ATTR_HE_DCM]); 3661 3662 if (tb[HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC]) 3663 rate_info->he_ru_alloc = 3664 nla_get_u8(tb[HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC]); 3665 3666 if (tb[HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH]) 3667 rate_info->n_bonded_ch = nla_get_u8(tb[HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH]); 3668 3669 if (tb[HWSIM_RATE_INFO_ATTR_EHT_GI]) 3670 rate_info->eht_gi = nla_get_u8(tb[HWSIM_RATE_INFO_ATTR_EHT_GI]); 3671 3672 if (tb[HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC]) 3673 rate_info->eht_ru_alloc = nla_get_u8(tb[HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC]); 3674 3675 return 0; 3676} 3677 3678static int mac80211_hwsim_parse_ftm_result(struct nlattr *ftm, 3679 struct cfg80211_pmsr_ftm_result *result, 3680 struct genl_info *info) 3681{ 3682 struct nlattr *tb[NL80211_PMSR_FTM_RESP_ATTR_MAX + 1]; 3683 int ret; 3684 3685 ret = nla_parse_nested(tb, NL80211_PMSR_FTM_RESP_ATTR_MAX, 3686 ftm, hwsim_ftm_result_policy, info->extack); 3687 if (ret) 3688 return ret; 3689 3690 if (tb[NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON]) 3691 result->failure_reason = nla_get_u32(tb[NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON]); 3692 3693 if (tb[NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX]) 3694 result->burst_index = nla_get_u16(tb[NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX]); 3695 3696 if (tb[NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS]) { 3697 result->num_ftmr_attempts_valid = 1; 3698 result->num_ftmr_attempts = 3699 nla_get_u32(tb[NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS]); 3700 } 3701 3702 if (tb[NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES]) { 3703 result->num_ftmr_successes_valid = 1; 3704 result->num_ftmr_successes = 3705 nla_get_u32(tb[NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES]); 3706 } 3707 3708 if (tb[NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME]) 3709 result->busy_retry_time = 3710 nla_get_u8(tb[NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME]); 3711 3712 if (tb[NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP]) 3713 result->num_bursts_exp = nla_get_u8(tb[NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP]); 3714 3715 if (tb[NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION]) 3716 result->burst_duration = nla_get_u8(tb[NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION]); 3717 3718 if (tb[NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST]) 3719 result->ftms_per_burst = nla_get_u8(tb[NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST]); 3720 3721 if (tb[NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG]) { 3722 result->rssi_avg_valid = 1; 3723 result->rssi_avg = nla_get_s32(tb[NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG]); 3724 } 3725 if (tb[NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD]) { 3726 result->rssi_spread_valid = 1; 3727 result->rssi_spread = 3728 nla_get_s32(tb[NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD]); 3729 } 3730 3731 if (tb[NL80211_PMSR_FTM_RESP_ATTR_TX_RATE]) { 3732 result->tx_rate_valid = 1; 3733 ret = mac80211_hwsim_parse_rate_info(tb[NL80211_PMSR_FTM_RESP_ATTR_TX_RATE], 3734 &result->tx_rate, info); 3735 if (ret) 3736 return ret; 3737 } 3738 3739 if (tb[NL80211_PMSR_FTM_RESP_ATTR_RX_RATE]) { 3740 result->rx_rate_valid = 1; 3741 ret = mac80211_hwsim_parse_rate_info(tb[NL80211_PMSR_FTM_RESP_ATTR_RX_RATE], 3742 &result->rx_rate, info); 3743 if (ret) 3744 return ret; 3745 } 3746 3747 if (tb[NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG]) { 3748 result->rtt_avg_valid = 1; 3749 result->rtt_avg = 3750 nla_get_u64(tb[NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG]); 3751 } 3752 if (tb[NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE]) { 3753 result->rtt_variance_valid = 1; 3754 result->rtt_variance = 3755 nla_get_u64(tb[NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE]); 3756 } 3757 if (tb[NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD]) { 3758 result->rtt_spread_valid = 1; 3759 result->rtt_spread = 3760 nla_get_u64(tb[NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD]); 3761 } 3762 if (tb[NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG]) { 3763 result->dist_avg_valid = 1; 3764 result->dist_avg = 3765 nla_get_u64(tb[NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG]); 3766 } 3767 if (tb[NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE]) { 3768 result->dist_variance_valid = 1; 3769 result->dist_variance = 3770 nla_get_u64(tb[NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE]); 3771 } 3772 if (tb[NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD]) { 3773 result->dist_spread_valid = 1; 3774 result->dist_spread = 3775 nla_get_u64(tb[NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD]); 3776 } 3777 3778 if (tb[NL80211_PMSR_FTM_RESP_ATTR_LCI]) { 3779 result->lci = nla_data(tb[NL80211_PMSR_FTM_RESP_ATTR_LCI]); 3780 result->lci_len = nla_len(tb[NL80211_PMSR_FTM_RESP_ATTR_LCI]); 3781 } 3782 3783 if (tb[NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC]) { 3784 result->civicloc = nla_data(tb[NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC]); 3785 result->civicloc_len = nla_len(tb[NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC]); 3786 } 3787 3788 return 0; 3789} 3790 3791static int mac80211_hwsim_parse_pmsr_resp(struct nlattr *resp, 3792 struct cfg80211_pmsr_result *result, 3793 struct genl_info *info) 3794{ 3795 struct nlattr *tb[NL80211_PMSR_RESP_ATTR_MAX + 1]; 3796 struct nlattr *pmsr; 3797 int rem; 3798 int ret; 3799 3800 ret = nla_parse_nested(tb, NL80211_PMSR_RESP_ATTR_MAX, resp, hwsim_pmsr_resp_policy, 3801 info->extack); 3802 if (ret) 3803 return ret; 3804 3805 if (tb[NL80211_PMSR_RESP_ATTR_STATUS]) 3806 result->status = nla_get_u32(tb[NL80211_PMSR_RESP_ATTR_STATUS]); 3807 3808 if (tb[NL80211_PMSR_RESP_ATTR_HOST_TIME]) 3809 result->host_time = nla_get_u64(tb[NL80211_PMSR_RESP_ATTR_HOST_TIME]); 3810 3811 if (tb[NL80211_PMSR_RESP_ATTR_AP_TSF]) { 3812 result->ap_tsf_valid = 1; 3813 result->ap_tsf = nla_get_u64(tb[NL80211_PMSR_RESP_ATTR_AP_TSF]); 3814 } 3815 3816 result->final = !!tb[NL80211_PMSR_RESP_ATTR_FINAL]; 3817 3818 if (!tb[NL80211_PMSR_RESP_ATTR_DATA]) 3819 return 0; 3820 3821 nla_for_each_nested(pmsr, tb[NL80211_PMSR_RESP_ATTR_DATA], rem) { 3822 switch (nla_type(pmsr)) { 3823 case NL80211_PMSR_TYPE_FTM: 3824 result->type = NL80211_PMSR_TYPE_FTM; 3825 ret = mac80211_hwsim_parse_ftm_result(pmsr, &result->ftm, info); 3826 if (ret) 3827 return ret; 3828 break; 3829 default: 3830 NL_SET_ERR_MSG_ATTR(info->extack, pmsr, "Unknown pmsr resp type"); 3831 return -EINVAL; 3832 } 3833 } 3834 3835 return 0; 3836} 3837 3838static int mac80211_hwsim_parse_pmsr_result(struct nlattr *peer, 3839 struct cfg80211_pmsr_result *result, 3840 struct genl_info *info) 3841{ 3842 struct nlattr *tb[NL80211_PMSR_PEER_ATTR_MAX + 1]; 3843 int ret; 3844 3845 if (!peer) 3846 return -EINVAL; 3847 3848 ret = nla_parse_nested(tb, NL80211_PMSR_PEER_ATTR_MAX, peer, 3849 hwsim_pmsr_peer_result_policy, info->extack); 3850 if (ret) 3851 return ret; 3852 3853 if (tb[NL80211_PMSR_PEER_ATTR_ADDR]) 3854 memcpy(result->addr, nla_data(tb[NL80211_PMSR_PEER_ATTR_ADDR]), 3855 ETH_ALEN); 3856 3857 if (tb[NL80211_PMSR_PEER_ATTR_RESP]) { 3858 ret = mac80211_hwsim_parse_pmsr_resp(tb[NL80211_PMSR_PEER_ATTR_RESP], result, info); 3859 if (ret) 3860 return ret; 3861 } 3862 3863 return 0; 3864}; 3865 3866static int hwsim_pmsr_report_nl(struct sk_buff *msg, struct genl_info *info) 3867{ 3868 struct mac80211_hwsim_data *data; 3869 struct nlattr *peers, *peer; 3870 struct nlattr *reqattr; 3871 const u8 *src; 3872 int err; 3873 int rem; 3874 3875 if (!info->attrs[HWSIM_ATTR_ADDR_TRANSMITTER]) 3876 return -EINVAL; 3877 3878 src = nla_data(info->attrs[HWSIM_ATTR_ADDR_TRANSMITTER]); 3879 data = get_hwsim_data_ref_from_addr(src); 3880 if (!data) 3881 return -EINVAL; 3882 3883 mutex_lock(&data->mutex); 3884 if (!data->pmsr_request) { 3885 err = -EINVAL; 3886 goto out; 3887 } 3888 3889 reqattr = info->attrs[HWSIM_ATTR_PMSR_RESULT]; 3890 if (!reqattr) { 3891 err = -EINVAL; 3892 goto out; 3893 } 3894 3895 peers = nla_find_nested(reqattr, NL80211_PMSR_ATTR_PEERS); 3896 if (!peers) { 3897 err = -EINVAL; 3898 goto out; 3899 } 3900 3901 nla_for_each_nested(peer, peers, rem) { 3902 struct cfg80211_pmsr_result result = {}; 3903 3904 err = mac80211_hwsim_parse_pmsr_result(peer, &result, info); 3905 if (err) 3906 goto out; 3907 3908 cfg80211_pmsr_report(data->pmsr_request_wdev, 3909 data->pmsr_request, &result, GFP_KERNEL); 3910 } 3911 3912 cfg80211_pmsr_complete(data->pmsr_request_wdev, data->pmsr_request, GFP_KERNEL); 3913 3914 err = 0; 3915out: 3916 data->pmsr_request = NULL; 3917 data->pmsr_request_wdev = NULL; 3918 3919 mutex_unlock(&data->mutex); 3920 return err; 3921} 3922 3923#ifdef CONFIG_MAC80211_DEBUGFS 3924#define HWSIM_DEBUGFS_OPS \ 3925 .vif_add_debugfs = mac80211_hwsim_vif_add_debugfs, 3926#else 3927#define HWSIM_DEBUGFS_OPS 3928#endif 3929 3930#define HWSIM_COMMON_OPS \ 3931 .tx = mac80211_hwsim_tx, \ 3932 .wake_tx_queue = ieee80211_handle_wake_tx_queue, \ 3933 .start = mac80211_hwsim_start, \ 3934 .stop = mac80211_hwsim_stop, \ 3935 .add_interface = mac80211_hwsim_add_interface, \ 3936 .change_interface = mac80211_hwsim_change_interface, \ 3937 .remove_interface = mac80211_hwsim_remove_interface, \ 3938 .config = mac80211_hwsim_config, \ 3939 .configure_filter = mac80211_hwsim_configure_filter, \ 3940 .vif_cfg_changed = mac80211_hwsim_vif_info_changed, \ 3941 .link_info_changed = mac80211_hwsim_link_info_changed, \ 3942 .tx_last_beacon = mac80211_hwsim_tx_last_beacon, \ 3943 .sta_notify = mac80211_hwsim_sta_notify, \ 3944 .sta_rc_update = mac80211_hwsim_sta_rc_update, \ 3945 .conf_tx = mac80211_hwsim_conf_tx, \ 3946 .get_survey = mac80211_hwsim_get_survey, \ 3947 CFG80211_TESTMODE_CMD(mac80211_hwsim_testmode_cmd) \ 3948 .ampdu_action = mac80211_hwsim_ampdu_action, \ 3949 .flush = mac80211_hwsim_flush, \ 3950 .get_et_sset_count = mac80211_hwsim_get_et_sset_count, \ 3951 .get_et_stats = mac80211_hwsim_get_et_stats, \ 3952 .get_et_strings = mac80211_hwsim_get_et_strings, \ 3953 .start_pmsr = mac80211_hwsim_start_pmsr, \ 3954 .abort_pmsr = mac80211_hwsim_abort_pmsr, \ 3955 HWSIM_DEBUGFS_OPS 3956 3957#define HWSIM_NON_MLO_OPS \ 3958 .sta_add = mac80211_hwsim_sta_add, \ 3959 .sta_remove = mac80211_hwsim_sta_remove, \ 3960 .set_tim = mac80211_hwsim_set_tim, \ 3961 .get_tsf = mac80211_hwsim_get_tsf, \ 3962 .set_tsf = mac80211_hwsim_set_tsf, 3963 3964static const struct ieee80211_ops mac80211_hwsim_ops = { 3965 HWSIM_COMMON_OPS 3966 HWSIM_NON_MLO_OPS 3967 .sw_scan_start = mac80211_hwsim_sw_scan, 3968 .sw_scan_complete = mac80211_hwsim_sw_scan_complete, 3969 .add_chanctx = ieee80211_emulate_add_chanctx, 3970 .remove_chanctx = ieee80211_emulate_remove_chanctx, 3971 .change_chanctx = ieee80211_emulate_change_chanctx, 3972 .switch_vif_chanctx = ieee80211_emulate_switch_vif_chanctx, 3973}; 3974 3975#define HWSIM_CHANCTX_OPS \ 3976 .hw_scan = mac80211_hwsim_hw_scan, \ 3977 .cancel_hw_scan = mac80211_hwsim_cancel_hw_scan, \ 3978 .remain_on_channel = mac80211_hwsim_roc, \ 3979 .cancel_remain_on_channel = mac80211_hwsim_croc, \ 3980 .add_chanctx = mac80211_hwsim_add_chanctx, \ 3981 .remove_chanctx = mac80211_hwsim_remove_chanctx, \ 3982 .change_chanctx = mac80211_hwsim_change_chanctx, \ 3983 .assign_vif_chanctx = mac80211_hwsim_assign_vif_chanctx,\ 3984 .unassign_vif_chanctx = mac80211_hwsim_unassign_vif_chanctx, \ 3985 .switch_vif_chanctx = mac80211_hwsim_switch_vif_chanctx, 3986 3987static const struct ieee80211_ops mac80211_hwsim_mchan_ops = { 3988 HWSIM_COMMON_OPS 3989 HWSIM_NON_MLO_OPS 3990 HWSIM_CHANCTX_OPS 3991}; 3992 3993static const struct ieee80211_ops mac80211_hwsim_mlo_ops = { 3994 HWSIM_COMMON_OPS 3995 HWSIM_CHANCTX_OPS 3996 .set_rts_threshold = mac80211_hwsim_set_rts_threshold, 3997 .change_vif_links = mac80211_hwsim_change_vif_links, 3998 .change_sta_links = mac80211_hwsim_change_sta_links, 3999 .sta_state = mac80211_hwsim_sta_state, 4000 .can_neg_ttlm = mac80211_hwsim_can_neg_ttlm, 4001}; 4002 4003struct hwsim_new_radio_params { 4004 unsigned int channels; 4005 const char *reg_alpha2; 4006 const struct ieee80211_regdomain *regd; 4007 bool reg_strict; 4008 bool p2p_device; 4009 bool use_chanctx; 4010 bool destroy_on_close; 4011 const char *hwname; 4012 bool no_vif; 4013 const u8 *perm_addr; 4014 u32 iftypes; 4015 u32 *ciphers; 4016 u8 n_ciphers; 4017 bool mlo; 4018 const struct cfg80211_pmsr_capabilities *pmsr_capa; 4019}; 4020 4021static void hwsim_mcast_config_msg(struct sk_buff *mcast_skb, 4022 struct genl_info *info) 4023{ 4024 if (info) 4025 genl_notify(&hwsim_genl_family, mcast_skb, info, 4026 HWSIM_MCGRP_CONFIG, GFP_KERNEL); 4027 else 4028 genlmsg_multicast(&hwsim_genl_family, mcast_skb, 0, 4029 HWSIM_MCGRP_CONFIG, GFP_KERNEL); 4030} 4031 4032static int append_radio_msg(struct sk_buff *skb, int id, 4033 struct hwsim_new_radio_params *param) 4034{ 4035 int ret; 4036 4037 ret = nla_put_u32(skb, HWSIM_ATTR_RADIO_ID, id); 4038 if (ret < 0) 4039 return ret; 4040 4041 if (param->channels) { 4042 ret = nla_put_u32(skb, HWSIM_ATTR_CHANNELS, param->channels); 4043 if (ret < 0) 4044 return ret; 4045 } 4046 4047 if (param->reg_alpha2) { 4048 ret = nla_put(skb, HWSIM_ATTR_REG_HINT_ALPHA2, 2, 4049 param->reg_alpha2); 4050 if (ret < 0) 4051 return ret; 4052 } 4053 4054 if (param->regd) { 4055 int i; 4056 4057 for (i = 0; i < ARRAY_SIZE(hwsim_world_regdom_custom); i++) { 4058 if (hwsim_world_regdom_custom[i] != param->regd) 4059 continue; 4060 4061 ret = nla_put_u32(skb, HWSIM_ATTR_REG_CUSTOM_REG, i); 4062 if (ret < 0) 4063 return ret; 4064 break; 4065 } 4066 } 4067 4068 if (param->reg_strict) { 4069 ret = nla_put_flag(skb, HWSIM_ATTR_REG_STRICT_REG); 4070 if (ret < 0) 4071 return ret; 4072 } 4073 4074 if (param->p2p_device) { 4075 ret = nla_put_flag(skb, HWSIM_ATTR_SUPPORT_P2P_DEVICE); 4076 if (ret < 0) 4077 return ret; 4078 } 4079 4080 if (param->use_chanctx) { 4081 ret = nla_put_flag(skb, HWSIM_ATTR_USE_CHANCTX); 4082 if (ret < 0) 4083 return ret; 4084 } 4085 4086 if (param->hwname) { 4087 ret = nla_put(skb, HWSIM_ATTR_RADIO_NAME, 4088 strlen(param->hwname), param->hwname); 4089 if (ret < 0) 4090 return ret; 4091 } 4092 4093 return 0; 4094} 4095 4096static void hwsim_mcast_new_radio(int id, struct genl_info *info, 4097 struct hwsim_new_radio_params *param) 4098{ 4099 struct sk_buff *mcast_skb; 4100 void *data; 4101 4102 mcast_skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL); 4103 if (!mcast_skb) 4104 return; 4105 4106 data = genlmsg_put(mcast_skb, 0, 0, &hwsim_genl_family, 0, 4107 HWSIM_CMD_NEW_RADIO); 4108 if (!data) 4109 goto out_err; 4110 4111 if (append_radio_msg(mcast_skb, id, param) < 0) 4112 goto out_err; 4113 4114 genlmsg_end(mcast_skb, data); 4115 4116 hwsim_mcast_config_msg(mcast_skb, info); 4117 return; 4118 4119out_err: 4120 nlmsg_free(mcast_skb); 4121} 4122 4123static const struct ieee80211_sband_iftype_data sband_capa_2ghz[] = { 4124 { 4125 .types_mask = BIT(NL80211_IFTYPE_STATION), 4126 .he_cap = { 4127 .has_he = true, 4128 .he_cap_elem = { 4129 .mac_cap_info[0] = 4130 IEEE80211_HE_MAC_CAP0_HTC_HE, 4131 .mac_cap_info[1] = 4132 IEEE80211_HE_MAC_CAP1_TF_MAC_PAD_DUR_16US | 4133 IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8, 4134 .mac_cap_info[2] = 4135 IEEE80211_HE_MAC_CAP2_BSR | 4136 IEEE80211_HE_MAC_CAP2_MU_CASCADING | 4137 IEEE80211_HE_MAC_CAP2_ACK_EN, 4138 .mac_cap_info[3] = 4139 IEEE80211_HE_MAC_CAP3_OMI_CONTROL | 4140 IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3, 4141 .mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU, 4142 .phy_cap_info[0] = 4143 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_IN_2G, 4144 .phy_cap_info[1] = 4145 IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK | 4146 IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A | 4147 IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD | 4148 IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS, 4149 .phy_cap_info[2] = 4150 IEEE80211_HE_PHY_CAP2_NDP_4x_LTF_AND_3_2US | 4151 IEEE80211_HE_PHY_CAP2_STBC_TX_UNDER_80MHZ | 4152 IEEE80211_HE_PHY_CAP2_STBC_RX_UNDER_80MHZ | 4153 IEEE80211_HE_PHY_CAP2_UL_MU_FULL_MU_MIMO | 4154 IEEE80211_HE_PHY_CAP2_UL_MU_PARTIAL_MU_MIMO, 4155 4156 /* Leave all the other PHY capability bytes 4157 * unset, as DCM, beam forming, RU and PPE 4158 * threshold information are not supported 4159 */ 4160 }, 4161 .he_mcs_nss_supp = { 4162 .rx_mcs_80 = cpu_to_le16(0xfffa), 4163 .tx_mcs_80 = cpu_to_le16(0xfffa), 4164 .rx_mcs_160 = cpu_to_le16(0xffff), 4165 .tx_mcs_160 = cpu_to_le16(0xffff), 4166 .rx_mcs_80p80 = cpu_to_le16(0xffff), 4167 .tx_mcs_80p80 = cpu_to_le16(0xffff), 4168 }, 4169 }, 4170 .eht_cap = { 4171 .has_eht = true, 4172 .eht_cap_elem = { 4173 .mac_cap_info[0] = 4174 IEEE80211_EHT_MAC_CAP0_EPCS_PRIO_ACCESS | 4175 IEEE80211_EHT_MAC_CAP0_OM_CONTROL | 4176 IEEE80211_EHT_MAC_CAP0_TRIG_TXOP_SHARING_MODE1, 4177 .phy_cap_info[0] = 4178 IEEE80211_EHT_PHY_CAP0_242_TONE_RU_GT20MHZ | 4179 IEEE80211_EHT_PHY_CAP0_NDP_4_EHT_LFT_32_GI | 4180 IEEE80211_EHT_PHY_CAP0_PARTIAL_BW_UL_MU_MIMO | 4181 IEEE80211_EHT_PHY_CAP0_SU_BEAMFORMER | 4182 IEEE80211_EHT_PHY_CAP0_SU_BEAMFORMEE, 4183 .phy_cap_info[3] = 4184 IEEE80211_EHT_PHY_CAP3_NG_16_SU_FEEDBACK | 4185 IEEE80211_EHT_PHY_CAP3_NG_16_MU_FEEDBACK | 4186 IEEE80211_EHT_PHY_CAP3_CODEBOOK_4_2_SU_FDBK | 4187 IEEE80211_EHT_PHY_CAP3_CODEBOOK_7_5_MU_FDBK | 4188 IEEE80211_EHT_PHY_CAP3_TRIG_SU_BF_FDBK | 4189 IEEE80211_EHT_PHY_CAP3_TRIG_MU_BF_PART_BW_FDBK | 4190 IEEE80211_EHT_PHY_CAP3_TRIG_CQI_FDBK, 4191 .phy_cap_info[4] = 4192 IEEE80211_EHT_PHY_CAP4_PART_BW_DL_MU_MIMO | 4193 IEEE80211_EHT_PHY_CAP4_PSR_SR_SUPP | 4194 IEEE80211_EHT_PHY_CAP4_POWER_BOOST_FACT_SUPP | 4195 IEEE80211_EHT_PHY_CAP4_EHT_MU_PPDU_4_EHT_LTF_08_GI | 4196 IEEE80211_EHT_PHY_CAP4_MAX_NC_MASK, 4197 .phy_cap_info[5] = 4198 IEEE80211_EHT_PHY_CAP5_NON_TRIG_CQI_FEEDBACK | 4199 IEEE80211_EHT_PHY_CAP5_TX_LESS_242_TONE_RU_SUPP | 4200 IEEE80211_EHT_PHY_CAP5_RX_LESS_242_TONE_RU_SUPP | 4201 IEEE80211_EHT_PHY_CAP5_PPE_THRESHOLD_PRESENT | 4202 IEEE80211_EHT_PHY_CAP5_COMMON_NOMINAL_PKT_PAD_MASK | 4203 IEEE80211_EHT_PHY_CAP5_MAX_NUM_SUPP_EHT_LTF_MASK, 4204 .phy_cap_info[6] = 4205 IEEE80211_EHT_PHY_CAP6_MAX_NUM_SUPP_EHT_LTF_MASK | 4206 IEEE80211_EHT_PHY_CAP6_MCS15_SUPP_MASK, 4207 .phy_cap_info[7] = 4208 IEEE80211_EHT_PHY_CAP7_20MHZ_STA_RX_NDP_WIDER_BW, 4209 }, 4210 4211 /* For all MCS and bandwidth, set 8 NSS for both Tx and 4212 * Rx 4213 */ 4214 .eht_mcs_nss_supp = { 4215 /* 4216 * Since B0, B1, B2 and B3 are not set in 4217 * the supported channel width set field in the 4218 * HE PHY capabilities information field the 4219 * device is a 20MHz only device on 2.4GHz band. 4220 */ 4221 .only_20mhz = { 4222 .rx_tx_mcs7_max_nss = 0x88, 4223 .rx_tx_mcs9_max_nss = 0x88, 4224 .rx_tx_mcs11_max_nss = 0x88, 4225 .rx_tx_mcs13_max_nss = 0x88, 4226 }, 4227 }, 4228 /* PPE threshold information is not supported */ 4229 }, 4230 }, 4231 { 4232 .types_mask = BIT(NL80211_IFTYPE_AP), 4233 .he_cap = { 4234 .has_he = true, 4235 .he_cap_elem = { 4236 .mac_cap_info[0] = 4237 IEEE80211_HE_MAC_CAP0_HTC_HE, 4238 .mac_cap_info[1] = 4239 IEEE80211_HE_MAC_CAP1_TF_MAC_PAD_DUR_16US | 4240 IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8, 4241 .mac_cap_info[2] = 4242 IEEE80211_HE_MAC_CAP2_BSR | 4243 IEEE80211_HE_MAC_CAP2_MU_CASCADING | 4244 IEEE80211_HE_MAC_CAP2_ACK_EN, 4245 .mac_cap_info[3] = 4246 IEEE80211_HE_MAC_CAP3_OMI_CONTROL | 4247 IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3, 4248 .mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU, 4249 .phy_cap_info[0] = 4250 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_IN_2G, 4251 .phy_cap_info[1] = 4252 IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK | 4253 IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A | 4254 IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD | 4255 IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS, 4256 .phy_cap_info[2] = 4257 IEEE80211_HE_PHY_CAP2_NDP_4x_LTF_AND_3_2US | 4258 IEEE80211_HE_PHY_CAP2_STBC_TX_UNDER_80MHZ | 4259 IEEE80211_HE_PHY_CAP2_STBC_RX_UNDER_80MHZ | 4260 IEEE80211_HE_PHY_CAP2_UL_MU_FULL_MU_MIMO | 4261 IEEE80211_HE_PHY_CAP2_UL_MU_PARTIAL_MU_MIMO, 4262 4263 /* Leave all the other PHY capability bytes 4264 * unset, as DCM, beam forming, RU and PPE 4265 * threshold information are not supported 4266 */ 4267 }, 4268 .he_mcs_nss_supp = { 4269 .rx_mcs_80 = cpu_to_le16(0xfffa), 4270 .tx_mcs_80 = cpu_to_le16(0xfffa), 4271 .rx_mcs_160 = cpu_to_le16(0xffff), 4272 .tx_mcs_160 = cpu_to_le16(0xffff), 4273 .rx_mcs_80p80 = cpu_to_le16(0xffff), 4274 .tx_mcs_80p80 = cpu_to_le16(0xffff), 4275 }, 4276 }, 4277 .eht_cap = { 4278 .has_eht = true, 4279 .eht_cap_elem = { 4280 .mac_cap_info[0] = 4281 IEEE80211_EHT_MAC_CAP0_EPCS_PRIO_ACCESS | 4282 IEEE80211_EHT_MAC_CAP0_OM_CONTROL | 4283 IEEE80211_EHT_MAC_CAP0_TRIG_TXOP_SHARING_MODE1, 4284 .phy_cap_info[0] = 4285 IEEE80211_EHT_PHY_CAP0_242_TONE_RU_GT20MHZ | 4286 IEEE80211_EHT_PHY_CAP0_NDP_4_EHT_LFT_32_GI | 4287 IEEE80211_EHT_PHY_CAP0_PARTIAL_BW_UL_MU_MIMO | 4288 IEEE80211_EHT_PHY_CAP0_SU_BEAMFORMER | 4289 IEEE80211_EHT_PHY_CAP0_SU_BEAMFORMEE, 4290 .phy_cap_info[3] = 4291 IEEE80211_EHT_PHY_CAP3_NG_16_SU_FEEDBACK | 4292 IEEE80211_EHT_PHY_CAP3_NG_16_MU_FEEDBACK | 4293 IEEE80211_EHT_PHY_CAP3_CODEBOOK_4_2_SU_FDBK | 4294 IEEE80211_EHT_PHY_CAP3_CODEBOOK_7_5_MU_FDBK | 4295 IEEE80211_EHT_PHY_CAP3_TRIG_SU_BF_FDBK | 4296 IEEE80211_EHT_PHY_CAP3_TRIG_MU_BF_PART_BW_FDBK | 4297 IEEE80211_EHT_PHY_CAP3_TRIG_CQI_FDBK, 4298 .phy_cap_info[4] = 4299 IEEE80211_EHT_PHY_CAP4_PART_BW_DL_MU_MIMO | 4300 IEEE80211_EHT_PHY_CAP4_PSR_SR_SUPP | 4301 IEEE80211_EHT_PHY_CAP4_POWER_BOOST_FACT_SUPP | 4302 IEEE80211_EHT_PHY_CAP4_EHT_MU_PPDU_4_EHT_LTF_08_GI | 4303 IEEE80211_EHT_PHY_CAP4_MAX_NC_MASK, 4304 .phy_cap_info[5] = 4305 IEEE80211_EHT_PHY_CAP5_NON_TRIG_CQI_FEEDBACK | 4306 IEEE80211_EHT_PHY_CAP5_TX_LESS_242_TONE_RU_SUPP | 4307 IEEE80211_EHT_PHY_CAP5_RX_LESS_242_TONE_RU_SUPP | 4308 IEEE80211_EHT_PHY_CAP5_PPE_THRESHOLD_PRESENT | 4309 IEEE80211_EHT_PHY_CAP5_COMMON_NOMINAL_PKT_PAD_MASK | 4310 IEEE80211_EHT_PHY_CAP5_MAX_NUM_SUPP_EHT_LTF_MASK, 4311 .phy_cap_info[6] = 4312 IEEE80211_EHT_PHY_CAP6_MAX_NUM_SUPP_EHT_LTF_MASK | 4313 IEEE80211_EHT_PHY_CAP6_MCS15_SUPP_MASK, 4314 .phy_cap_info[7] = 4315 IEEE80211_EHT_PHY_CAP7_20MHZ_STA_RX_NDP_WIDER_BW, 4316 }, 4317 4318 /* For all MCS and bandwidth, set 8 NSS for both Tx and 4319 * Rx 4320 */ 4321 .eht_mcs_nss_supp = { 4322 /* 4323 * Since B0, B1, B2 and B3 are not set in 4324 * the supported channel width set field in the 4325 * HE PHY capabilities information field the 4326 * device is a 20MHz only device on 2.4GHz band. 4327 */ 4328 .only_20mhz = { 4329 .rx_tx_mcs7_max_nss = 0x88, 4330 .rx_tx_mcs9_max_nss = 0x88, 4331 .rx_tx_mcs11_max_nss = 0x88, 4332 .rx_tx_mcs13_max_nss = 0x88, 4333 }, 4334 }, 4335 /* PPE threshold information is not supported */ 4336 }, 4337 }, 4338#ifdef CONFIG_MAC80211_MESH 4339 { 4340 .types_mask = BIT(NL80211_IFTYPE_MESH_POINT), 4341 .he_cap = { 4342 .has_he = true, 4343 .he_cap_elem = { 4344 .mac_cap_info[0] = 4345 IEEE80211_HE_MAC_CAP0_HTC_HE, 4346 .mac_cap_info[1] = 4347 IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8, 4348 .mac_cap_info[2] = 4349 IEEE80211_HE_MAC_CAP2_ACK_EN, 4350 .mac_cap_info[3] = 4351 IEEE80211_HE_MAC_CAP3_OMI_CONTROL | 4352 IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3, 4353 .mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU, 4354 .phy_cap_info[0] = 4355 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_IN_2G, 4356 .phy_cap_info[1] = 4357 IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK | 4358 IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A | 4359 IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD | 4360 IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS, 4361 .phy_cap_info[2] = 0, 4362 4363 /* Leave all the other PHY capability bytes 4364 * unset, as DCM, beam forming, RU and PPE 4365 * threshold information are not supported 4366 */ 4367 }, 4368 .he_mcs_nss_supp = { 4369 .rx_mcs_80 = cpu_to_le16(0xfffa), 4370 .tx_mcs_80 = cpu_to_le16(0xfffa), 4371 .rx_mcs_160 = cpu_to_le16(0xffff), 4372 .tx_mcs_160 = cpu_to_le16(0xffff), 4373 .rx_mcs_80p80 = cpu_to_le16(0xffff), 4374 .tx_mcs_80p80 = cpu_to_le16(0xffff), 4375 }, 4376 }, 4377 }, 4378#endif 4379}; 4380 4381static const struct ieee80211_sband_iftype_data sband_capa_5ghz[] = { 4382 { 4383 /* TODO: should we support other types, e.g., P2P? */ 4384 .types_mask = BIT(NL80211_IFTYPE_STATION), 4385 .he_cap = { 4386 .has_he = true, 4387 .he_cap_elem = { 4388 .mac_cap_info[0] = 4389 IEEE80211_HE_MAC_CAP0_HTC_HE, 4390 .mac_cap_info[1] = 4391 IEEE80211_HE_MAC_CAP1_TF_MAC_PAD_DUR_16US | 4392 IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8, 4393 .mac_cap_info[2] = 4394 IEEE80211_HE_MAC_CAP2_BSR | 4395 IEEE80211_HE_MAC_CAP2_MU_CASCADING | 4396 IEEE80211_HE_MAC_CAP2_ACK_EN, 4397 .mac_cap_info[3] = 4398 IEEE80211_HE_MAC_CAP3_OMI_CONTROL | 4399 IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3, 4400 .mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU, 4401 .phy_cap_info[0] = 4402 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_80MHZ_IN_5G | 4403 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_160MHZ_IN_5G | 4404 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_80PLUS80_MHZ_IN_5G, 4405 .phy_cap_info[1] = 4406 IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK | 4407 IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A | 4408 IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD | 4409 IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS, 4410 .phy_cap_info[2] = 4411 IEEE80211_HE_PHY_CAP2_NDP_4x_LTF_AND_3_2US | 4412 IEEE80211_HE_PHY_CAP2_STBC_TX_UNDER_80MHZ | 4413 IEEE80211_HE_PHY_CAP2_STBC_RX_UNDER_80MHZ | 4414 IEEE80211_HE_PHY_CAP2_UL_MU_FULL_MU_MIMO | 4415 IEEE80211_HE_PHY_CAP2_UL_MU_PARTIAL_MU_MIMO, 4416 4417 /* Leave all the other PHY capability bytes 4418 * unset, as DCM, beam forming, RU and PPE 4419 * threshold information are not supported 4420 */ 4421 }, 4422 .he_mcs_nss_supp = { 4423 .rx_mcs_80 = cpu_to_le16(0xfffa), 4424 .tx_mcs_80 = cpu_to_le16(0xfffa), 4425 .rx_mcs_160 = cpu_to_le16(0xfffa), 4426 .tx_mcs_160 = cpu_to_le16(0xfffa), 4427 .rx_mcs_80p80 = cpu_to_le16(0xfffa), 4428 .tx_mcs_80p80 = cpu_to_le16(0xfffa), 4429 }, 4430 }, 4431 .eht_cap = { 4432 .has_eht = true, 4433 .eht_cap_elem = { 4434 .mac_cap_info[0] = 4435 IEEE80211_EHT_MAC_CAP0_EPCS_PRIO_ACCESS | 4436 IEEE80211_EHT_MAC_CAP0_OM_CONTROL | 4437 IEEE80211_EHT_MAC_CAP0_TRIG_TXOP_SHARING_MODE1, 4438 .phy_cap_info[0] = 4439 IEEE80211_EHT_PHY_CAP0_242_TONE_RU_GT20MHZ | 4440 IEEE80211_EHT_PHY_CAP0_NDP_4_EHT_LFT_32_GI | 4441 IEEE80211_EHT_PHY_CAP0_PARTIAL_BW_UL_MU_MIMO | 4442 IEEE80211_EHT_PHY_CAP0_SU_BEAMFORMER | 4443 IEEE80211_EHT_PHY_CAP0_SU_BEAMFORMEE | 4444 IEEE80211_EHT_PHY_CAP0_BEAMFORMEE_SS_80MHZ_MASK, 4445 .phy_cap_info[1] = 4446 IEEE80211_EHT_PHY_CAP1_BEAMFORMEE_SS_80MHZ_MASK | 4447 IEEE80211_EHT_PHY_CAP1_BEAMFORMEE_SS_160MHZ_MASK, 4448 .phy_cap_info[2] = 4449 IEEE80211_EHT_PHY_CAP2_SOUNDING_DIM_80MHZ_MASK | 4450 IEEE80211_EHT_PHY_CAP2_SOUNDING_DIM_160MHZ_MASK, 4451 .phy_cap_info[3] = 4452 IEEE80211_EHT_PHY_CAP3_NG_16_SU_FEEDBACK | 4453 IEEE80211_EHT_PHY_CAP3_NG_16_MU_FEEDBACK | 4454 IEEE80211_EHT_PHY_CAP3_CODEBOOK_4_2_SU_FDBK | 4455 IEEE80211_EHT_PHY_CAP3_CODEBOOK_7_5_MU_FDBK | 4456 IEEE80211_EHT_PHY_CAP3_TRIG_SU_BF_FDBK | 4457 IEEE80211_EHT_PHY_CAP3_TRIG_MU_BF_PART_BW_FDBK | 4458 IEEE80211_EHT_PHY_CAP3_TRIG_CQI_FDBK, 4459 .phy_cap_info[4] = 4460 IEEE80211_EHT_PHY_CAP4_PART_BW_DL_MU_MIMO | 4461 IEEE80211_EHT_PHY_CAP4_PSR_SR_SUPP | 4462 IEEE80211_EHT_PHY_CAP4_POWER_BOOST_FACT_SUPP | 4463 IEEE80211_EHT_PHY_CAP4_EHT_MU_PPDU_4_EHT_LTF_08_GI | 4464 IEEE80211_EHT_PHY_CAP4_MAX_NC_MASK, 4465 .phy_cap_info[5] = 4466 IEEE80211_EHT_PHY_CAP5_NON_TRIG_CQI_FEEDBACK | 4467 IEEE80211_EHT_PHY_CAP5_TX_LESS_242_TONE_RU_SUPP | 4468 IEEE80211_EHT_PHY_CAP5_RX_LESS_242_TONE_RU_SUPP | 4469 IEEE80211_EHT_PHY_CAP5_PPE_THRESHOLD_PRESENT | 4470 IEEE80211_EHT_PHY_CAP5_COMMON_NOMINAL_PKT_PAD_MASK | 4471 IEEE80211_EHT_PHY_CAP5_MAX_NUM_SUPP_EHT_LTF_MASK, 4472 .phy_cap_info[6] = 4473 IEEE80211_EHT_PHY_CAP6_MAX_NUM_SUPP_EHT_LTF_MASK | 4474 IEEE80211_EHT_PHY_CAP6_MCS15_SUPP_MASK, 4475 .phy_cap_info[7] = 4476 IEEE80211_EHT_PHY_CAP7_20MHZ_STA_RX_NDP_WIDER_BW | 4477 IEEE80211_EHT_PHY_CAP7_NON_OFDMA_UL_MU_MIMO_80MHZ | 4478 IEEE80211_EHT_PHY_CAP7_NON_OFDMA_UL_MU_MIMO_160MHZ | 4479 IEEE80211_EHT_PHY_CAP7_MU_BEAMFORMER_80MHZ | 4480 IEEE80211_EHT_PHY_CAP7_MU_BEAMFORMER_160MHZ, 4481 }, 4482 4483 /* For all MCS and bandwidth, set 8 NSS for both Tx and 4484 * Rx 4485 */ 4486 .eht_mcs_nss_supp = { 4487 /* 4488 * As B1 and B2 are set in the supported 4489 * channel width set field in the HE PHY 4490 * capabilities information field include all 4491 * the following MCS/NSS. 4492 */ 4493 .bw._80 = { 4494 .rx_tx_mcs9_max_nss = 0x88, 4495 .rx_tx_mcs11_max_nss = 0x88, 4496 .rx_tx_mcs13_max_nss = 0x88, 4497 }, 4498 .bw._160 = { 4499 .rx_tx_mcs9_max_nss = 0x88, 4500 .rx_tx_mcs11_max_nss = 0x88, 4501 .rx_tx_mcs13_max_nss = 0x88, 4502 }, 4503 }, 4504 /* PPE threshold information is not supported */ 4505 }, 4506 }, 4507 { 4508 .types_mask = BIT(NL80211_IFTYPE_AP), 4509 .he_cap = { 4510 .has_he = true, 4511 .he_cap_elem = { 4512 .mac_cap_info[0] = 4513 IEEE80211_HE_MAC_CAP0_HTC_HE, 4514 .mac_cap_info[1] = 4515 IEEE80211_HE_MAC_CAP1_TF_MAC_PAD_DUR_16US | 4516 IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8, 4517 .mac_cap_info[2] = 4518 IEEE80211_HE_MAC_CAP2_BSR | 4519 IEEE80211_HE_MAC_CAP2_MU_CASCADING | 4520 IEEE80211_HE_MAC_CAP2_ACK_EN, 4521 .mac_cap_info[3] = 4522 IEEE80211_HE_MAC_CAP3_OMI_CONTROL | 4523 IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3, 4524 .mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU, 4525 .phy_cap_info[0] = 4526 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_80MHZ_IN_5G | 4527 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_160MHZ_IN_5G | 4528 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_80PLUS80_MHZ_IN_5G, 4529 .phy_cap_info[1] = 4530 IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK | 4531 IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A | 4532 IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD | 4533 IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS, 4534 .phy_cap_info[2] = 4535 IEEE80211_HE_PHY_CAP2_NDP_4x_LTF_AND_3_2US | 4536 IEEE80211_HE_PHY_CAP2_STBC_TX_UNDER_80MHZ | 4537 IEEE80211_HE_PHY_CAP2_STBC_RX_UNDER_80MHZ | 4538 IEEE80211_HE_PHY_CAP2_UL_MU_FULL_MU_MIMO | 4539 IEEE80211_HE_PHY_CAP2_UL_MU_PARTIAL_MU_MIMO, 4540 4541 /* Leave all the other PHY capability bytes 4542 * unset, as DCM, beam forming, RU and PPE 4543 * threshold information are not supported 4544 */ 4545 }, 4546 .he_mcs_nss_supp = { 4547 .rx_mcs_80 = cpu_to_le16(0xfffa), 4548 .tx_mcs_80 = cpu_to_le16(0xfffa), 4549 .rx_mcs_160 = cpu_to_le16(0xfffa), 4550 .tx_mcs_160 = cpu_to_le16(0xfffa), 4551 .rx_mcs_80p80 = cpu_to_le16(0xfffa), 4552 .tx_mcs_80p80 = cpu_to_le16(0xfffa), 4553 }, 4554 }, 4555 .eht_cap = { 4556 .has_eht = true, 4557 .eht_cap_elem = { 4558 .mac_cap_info[0] = 4559 IEEE80211_EHT_MAC_CAP0_EPCS_PRIO_ACCESS | 4560 IEEE80211_EHT_MAC_CAP0_OM_CONTROL | 4561 IEEE80211_EHT_MAC_CAP0_TRIG_TXOP_SHARING_MODE1, 4562 .phy_cap_info[0] = 4563 IEEE80211_EHT_PHY_CAP0_242_TONE_RU_GT20MHZ | 4564 IEEE80211_EHT_PHY_CAP0_NDP_4_EHT_LFT_32_GI | 4565 IEEE80211_EHT_PHY_CAP0_PARTIAL_BW_UL_MU_MIMO | 4566 IEEE80211_EHT_PHY_CAP0_SU_BEAMFORMER | 4567 IEEE80211_EHT_PHY_CAP0_SU_BEAMFORMEE | 4568 IEEE80211_EHT_PHY_CAP0_BEAMFORMEE_SS_80MHZ_MASK, 4569 .phy_cap_info[1] = 4570 IEEE80211_EHT_PHY_CAP1_BEAMFORMEE_SS_80MHZ_MASK | 4571 IEEE80211_EHT_PHY_CAP1_BEAMFORMEE_SS_160MHZ_MASK, 4572 .phy_cap_info[2] = 4573 IEEE80211_EHT_PHY_CAP2_SOUNDING_DIM_80MHZ_MASK | 4574 IEEE80211_EHT_PHY_CAP2_SOUNDING_DIM_160MHZ_MASK, 4575 .phy_cap_info[3] = 4576 IEEE80211_EHT_PHY_CAP3_NG_16_SU_FEEDBACK | 4577 IEEE80211_EHT_PHY_CAP3_NG_16_MU_FEEDBACK | 4578 IEEE80211_EHT_PHY_CAP3_CODEBOOK_4_2_SU_FDBK | 4579 IEEE80211_EHT_PHY_CAP3_CODEBOOK_7_5_MU_FDBK | 4580 IEEE80211_EHT_PHY_CAP3_TRIG_SU_BF_FDBK | 4581 IEEE80211_EHT_PHY_CAP3_TRIG_MU_BF_PART_BW_FDBK | 4582 IEEE80211_EHT_PHY_CAP3_TRIG_CQI_FDBK, 4583 .phy_cap_info[4] = 4584 IEEE80211_EHT_PHY_CAP4_PART_BW_DL_MU_MIMO | 4585 IEEE80211_EHT_PHY_CAP4_PSR_SR_SUPP | 4586 IEEE80211_EHT_PHY_CAP4_POWER_BOOST_FACT_SUPP | 4587 IEEE80211_EHT_PHY_CAP4_EHT_MU_PPDU_4_EHT_LTF_08_GI | 4588 IEEE80211_EHT_PHY_CAP4_MAX_NC_MASK, 4589 .phy_cap_info[5] = 4590 IEEE80211_EHT_PHY_CAP5_NON_TRIG_CQI_FEEDBACK | 4591 IEEE80211_EHT_PHY_CAP5_TX_LESS_242_TONE_RU_SUPP | 4592 IEEE80211_EHT_PHY_CAP5_RX_LESS_242_TONE_RU_SUPP | 4593 IEEE80211_EHT_PHY_CAP5_PPE_THRESHOLD_PRESENT | 4594 IEEE80211_EHT_PHY_CAP5_COMMON_NOMINAL_PKT_PAD_MASK | 4595 IEEE80211_EHT_PHY_CAP5_MAX_NUM_SUPP_EHT_LTF_MASK, 4596 .phy_cap_info[6] = 4597 IEEE80211_EHT_PHY_CAP6_MAX_NUM_SUPP_EHT_LTF_MASK | 4598 IEEE80211_EHT_PHY_CAP6_MCS15_SUPP_MASK, 4599 .phy_cap_info[7] = 4600 IEEE80211_EHT_PHY_CAP7_20MHZ_STA_RX_NDP_WIDER_BW | 4601 IEEE80211_EHT_PHY_CAP7_NON_OFDMA_UL_MU_MIMO_80MHZ | 4602 IEEE80211_EHT_PHY_CAP7_NON_OFDMA_UL_MU_MIMO_160MHZ | 4603 IEEE80211_EHT_PHY_CAP7_MU_BEAMFORMER_80MHZ | 4604 IEEE80211_EHT_PHY_CAP7_MU_BEAMFORMER_160MHZ, 4605 }, 4606 4607 /* For all MCS and bandwidth, set 8 NSS for both Tx and 4608 * Rx 4609 */ 4610 .eht_mcs_nss_supp = { 4611 /* 4612 * As B1 and B2 are set in the supported 4613 * channel width set field in the HE PHY 4614 * capabilities information field include all 4615 * the following MCS/NSS. 4616 */ 4617 .bw._80 = { 4618 .rx_tx_mcs9_max_nss = 0x88, 4619 .rx_tx_mcs11_max_nss = 0x88, 4620 .rx_tx_mcs13_max_nss = 0x88, 4621 }, 4622 .bw._160 = { 4623 .rx_tx_mcs9_max_nss = 0x88, 4624 .rx_tx_mcs11_max_nss = 0x88, 4625 .rx_tx_mcs13_max_nss = 0x88, 4626 }, 4627 }, 4628 /* PPE threshold information is not supported */ 4629 }, 4630 }, 4631#ifdef CONFIG_MAC80211_MESH 4632 { 4633 /* TODO: should we support other types, e.g., IBSS?*/ 4634 .types_mask = BIT(NL80211_IFTYPE_MESH_POINT), 4635 .he_cap = { 4636 .has_he = true, 4637 .he_cap_elem = { 4638 .mac_cap_info[0] = 4639 IEEE80211_HE_MAC_CAP0_HTC_HE, 4640 .mac_cap_info[1] = 4641 IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8, 4642 .mac_cap_info[2] = 4643 IEEE80211_HE_MAC_CAP2_ACK_EN, 4644 .mac_cap_info[3] = 4645 IEEE80211_HE_MAC_CAP3_OMI_CONTROL | 4646 IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3, 4647 .mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU, 4648 .phy_cap_info[0] = 4649 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_80MHZ_IN_5G | 4650 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_160MHZ_IN_5G | 4651 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_80PLUS80_MHZ_IN_5G, 4652 .phy_cap_info[1] = 4653 IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK | 4654 IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A | 4655 IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD | 4656 IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS, 4657 .phy_cap_info[2] = 0, 4658 4659 /* Leave all the other PHY capability bytes 4660 * unset, as DCM, beam forming, RU and PPE 4661 * threshold information are not supported 4662 */ 4663 }, 4664 .he_mcs_nss_supp = { 4665 .rx_mcs_80 = cpu_to_le16(0xfffa), 4666 .tx_mcs_80 = cpu_to_le16(0xfffa), 4667 .rx_mcs_160 = cpu_to_le16(0xfffa), 4668 .tx_mcs_160 = cpu_to_le16(0xfffa), 4669 .rx_mcs_80p80 = cpu_to_le16(0xfffa), 4670 .tx_mcs_80p80 = cpu_to_le16(0xfffa), 4671 }, 4672 }, 4673 }, 4674#endif 4675}; 4676 4677static const struct ieee80211_sband_iftype_data sband_capa_6ghz[] = { 4678 { 4679 /* TODO: should we support other types, e.g., P2P? */ 4680 .types_mask = BIT(NL80211_IFTYPE_STATION), 4681 .he_6ghz_capa = { 4682 .capa = cpu_to_le16(IEEE80211_HE_6GHZ_CAP_MIN_MPDU_START | 4683 IEEE80211_HE_6GHZ_CAP_MAX_AMPDU_LEN_EXP | 4684 IEEE80211_HE_6GHZ_CAP_MAX_MPDU_LEN | 4685 IEEE80211_HE_6GHZ_CAP_SM_PS | 4686 IEEE80211_HE_6GHZ_CAP_RD_RESPONDER | 4687 IEEE80211_HE_6GHZ_CAP_TX_ANTPAT_CONS | 4688 IEEE80211_HE_6GHZ_CAP_RX_ANTPAT_CONS), 4689 }, 4690 .he_cap = { 4691 .has_he = true, 4692 .he_cap_elem = { 4693 .mac_cap_info[0] = 4694 IEEE80211_HE_MAC_CAP0_HTC_HE, 4695 .mac_cap_info[1] = 4696 IEEE80211_HE_MAC_CAP1_TF_MAC_PAD_DUR_16US | 4697 IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8, 4698 .mac_cap_info[2] = 4699 IEEE80211_HE_MAC_CAP2_BSR | 4700 IEEE80211_HE_MAC_CAP2_MU_CASCADING | 4701 IEEE80211_HE_MAC_CAP2_ACK_EN, 4702 .mac_cap_info[3] = 4703 IEEE80211_HE_MAC_CAP3_OMI_CONTROL | 4704 IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3, 4705 .mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU, 4706 .phy_cap_info[0] = 4707 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_80MHZ_IN_5G | 4708 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_160MHZ_IN_5G | 4709 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_80PLUS80_MHZ_IN_5G, 4710 .phy_cap_info[1] = 4711 IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK | 4712 IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A | 4713 IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD | 4714 IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS, 4715 .phy_cap_info[2] = 4716 IEEE80211_HE_PHY_CAP2_NDP_4x_LTF_AND_3_2US | 4717 IEEE80211_HE_PHY_CAP2_STBC_TX_UNDER_80MHZ | 4718 IEEE80211_HE_PHY_CAP2_STBC_RX_UNDER_80MHZ | 4719 IEEE80211_HE_PHY_CAP2_UL_MU_FULL_MU_MIMO | 4720 IEEE80211_HE_PHY_CAP2_UL_MU_PARTIAL_MU_MIMO, 4721 4722 /* Leave all the other PHY capability bytes 4723 * unset, as DCM, beam forming, RU and PPE 4724 * threshold information are not supported 4725 */ 4726 }, 4727 .he_mcs_nss_supp = { 4728 .rx_mcs_80 = cpu_to_le16(0xfffa), 4729 .tx_mcs_80 = cpu_to_le16(0xfffa), 4730 .rx_mcs_160 = cpu_to_le16(0xfffa), 4731 .tx_mcs_160 = cpu_to_le16(0xfffa), 4732 .rx_mcs_80p80 = cpu_to_le16(0xfffa), 4733 .tx_mcs_80p80 = cpu_to_le16(0xfffa), 4734 }, 4735 }, 4736 .eht_cap = { 4737 .has_eht = true, 4738 .eht_cap_elem = { 4739 .mac_cap_info[0] = 4740 IEEE80211_EHT_MAC_CAP0_EPCS_PRIO_ACCESS | 4741 IEEE80211_EHT_MAC_CAP0_OM_CONTROL | 4742 IEEE80211_EHT_MAC_CAP0_TRIG_TXOP_SHARING_MODE1, 4743 .phy_cap_info[0] = 4744 IEEE80211_EHT_PHY_CAP0_320MHZ_IN_6GHZ | 4745 IEEE80211_EHT_PHY_CAP0_242_TONE_RU_GT20MHZ | 4746 IEEE80211_EHT_PHY_CAP0_NDP_4_EHT_LFT_32_GI | 4747 IEEE80211_EHT_PHY_CAP0_PARTIAL_BW_UL_MU_MIMO | 4748 IEEE80211_EHT_PHY_CAP0_SU_BEAMFORMER | 4749 IEEE80211_EHT_PHY_CAP0_SU_BEAMFORMEE | 4750 IEEE80211_EHT_PHY_CAP0_BEAMFORMEE_SS_80MHZ_MASK, 4751 .phy_cap_info[1] = 4752 IEEE80211_EHT_PHY_CAP1_BEAMFORMEE_SS_80MHZ_MASK | 4753 IEEE80211_EHT_PHY_CAP1_BEAMFORMEE_SS_160MHZ_MASK | 4754 IEEE80211_EHT_PHY_CAP1_BEAMFORMEE_SS_320MHZ_MASK, 4755 .phy_cap_info[2] = 4756 IEEE80211_EHT_PHY_CAP2_SOUNDING_DIM_80MHZ_MASK | 4757 IEEE80211_EHT_PHY_CAP2_SOUNDING_DIM_160MHZ_MASK | 4758 IEEE80211_EHT_PHY_CAP2_SOUNDING_DIM_320MHZ_MASK, 4759 .phy_cap_info[3] = 4760 IEEE80211_EHT_PHY_CAP3_NG_16_SU_FEEDBACK | 4761 IEEE80211_EHT_PHY_CAP3_NG_16_MU_FEEDBACK | 4762 IEEE80211_EHT_PHY_CAP3_CODEBOOK_4_2_SU_FDBK | 4763 IEEE80211_EHT_PHY_CAP3_CODEBOOK_7_5_MU_FDBK | 4764 IEEE80211_EHT_PHY_CAP3_TRIG_SU_BF_FDBK | 4765 IEEE80211_EHT_PHY_CAP3_TRIG_MU_BF_PART_BW_FDBK | 4766 IEEE80211_EHT_PHY_CAP3_TRIG_CQI_FDBK, 4767 .phy_cap_info[4] = 4768 IEEE80211_EHT_PHY_CAP4_PART_BW_DL_MU_MIMO | 4769 IEEE80211_EHT_PHY_CAP4_PSR_SR_SUPP | 4770 IEEE80211_EHT_PHY_CAP4_POWER_BOOST_FACT_SUPP | 4771 IEEE80211_EHT_PHY_CAP4_EHT_MU_PPDU_4_EHT_LTF_08_GI | 4772 IEEE80211_EHT_PHY_CAP4_MAX_NC_MASK, 4773 .phy_cap_info[5] = 4774 IEEE80211_EHT_PHY_CAP5_NON_TRIG_CQI_FEEDBACK | 4775 IEEE80211_EHT_PHY_CAP5_TX_LESS_242_TONE_RU_SUPP | 4776 IEEE80211_EHT_PHY_CAP5_RX_LESS_242_TONE_RU_SUPP | 4777 IEEE80211_EHT_PHY_CAP5_PPE_THRESHOLD_PRESENT | 4778 IEEE80211_EHT_PHY_CAP5_COMMON_NOMINAL_PKT_PAD_MASK | 4779 IEEE80211_EHT_PHY_CAP5_MAX_NUM_SUPP_EHT_LTF_MASK, 4780 .phy_cap_info[6] = 4781 IEEE80211_EHT_PHY_CAP6_MAX_NUM_SUPP_EHT_LTF_MASK | 4782 IEEE80211_EHT_PHY_CAP6_MCS15_SUPP_MASK | 4783 IEEE80211_EHT_PHY_CAP6_EHT_DUP_6GHZ_SUPP, 4784 .phy_cap_info[7] = 4785 IEEE80211_EHT_PHY_CAP7_20MHZ_STA_RX_NDP_WIDER_BW | 4786 IEEE80211_EHT_PHY_CAP7_NON_OFDMA_UL_MU_MIMO_80MHZ | 4787 IEEE80211_EHT_PHY_CAP7_NON_OFDMA_UL_MU_MIMO_160MHZ | 4788 IEEE80211_EHT_PHY_CAP7_NON_OFDMA_UL_MU_MIMO_320MHZ | 4789 IEEE80211_EHT_PHY_CAP7_MU_BEAMFORMER_80MHZ | 4790 IEEE80211_EHT_PHY_CAP7_MU_BEAMFORMER_160MHZ | 4791 IEEE80211_EHT_PHY_CAP7_MU_BEAMFORMER_320MHZ, 4792 }, 4793 4794 /* For all MCS and bandwidth, set 8 NSS for both Tx and 4795 * Rx 4796 */ 4797 .eht_mcs_nss_supp = { 4798 /* 4799 * As B1 and B2 are set in the supported 4800 * channel width set field in the HE PHY 4801 * capabilities information field and 320MHz in 4802 * 6GHz is supported include all the following 4803 * MCS/NSS. 4804 */ 4805 .bw._80 = { 4806 .rx_tx_mcs9_max_nss = 0x88, 4807 .rx_tx_mcs11_max_nss = 0x88, 4808 .rx_tx_mcs13_max_nss = 0x88, 4809 }, 4810 .bw._160 = { 4811 .rx_tx_mcs9_max_nss = 0x88, 4812 .rx_tx_mcs11_max_nss = 0x88, 4813 .rx_tx_mcs13_max_nss = 0x88, 4814 }, 4815 .bw._320 = { 4816 .rx_tx_mcs9_max_nss = 0x88, 4817 .rx_tx_mcs11_max_nss = 0x88, 4818 .rx_tx_mcs13_max_nss = 0x88, 4819 }, 4820 }, 4821 /* PPE threshold information is not supported */ 4822 }, 4823 }, 4824 { 4825 .types_mask = BIT(NL80211_IFTYPE_AP), 4826 .he_6ghz_capa = { 4827 .capa = cpu_to_le16(IEEE80211_HE_6GHZ_CAP_MIN_MPDU_START | 4828 IEEE80211_HE_6GHZ_CAP_MAX_AMPDU_LEN_EXP | 4829 IEEE80211_HE_6GHZ_CAP_MAX_MPDU_LEN | 4830 IEEE80211_HE_6GHZ_CAP_SM_PS | 4831 IEEE80211_HE_6GHZ_CAP_RD_RESPONDER | 4832 IEEE80211_HE_6GHZ_CAP_TX_ANTPAT_CONS | 4833 IEEE80211_HE_6GHZ_CAP_RX_ANTPAT_CONS), 4834 }, 4835 .he_cap = { 4836 .has_he = true, 4837 .he_cap_elem = { 4838 .mac_cap_info[0] = 4839 IEEE80211_HE_MAC_CAP0_HTC_HE, 4840 .mac_cap_info[1] = 4841 IEEE80211_HE_MAC_CAP1_TF_MAC_PAD_DUR_16US | 4842 IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8, 4843 .mac_cap_info[2] = 4844 IEEE80211_HE_MAC_CAP2_BSR | 4845 IEEE80211_HE_MAC_CAP2_MU_CASCADING | 4846 IEEE80211_HE_MAC_CAP2_ACK_EN, 4847 .mac_cap_info[3] = 4848 IEEE80211_HE_MAC_CAP3_OMI_CONTROL | 4849 IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3, 4850 .mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU, 4851 .phy_cap_info[0] = 4852 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_80MHZ_IN_5G | 4853 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_160MHZ_IN_5G | 4854 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_80PLUS80_MHZ_IN_5G, 4855 .phy_cap_info[1] = 4856 IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK | 4857 IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A | 4858 IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD | 4859 IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS, 4860 .phy_cap_info[2] = 4861 IEEE80211_HE_PHY_CAP2_NDP_4x_LTF_AND_3_2US | 4862 IEEE80211_HE_PHY_CAP2_STBC_TX_UNDER_80MHZ | 4863 IEEE80211_HE_PHY_CAP2_STBC_RX_UNDER_80MHZ | 4864 IEEE80211_HE_PHY_CAP2_UL_MU_FULL_MU_MIMO | 4865 IEEE80211_HE_PHY_CAP2_UL_MU_PARTIAL_MU_MIMO, 4866 4867 /* Leave all the other PHY capability bytes 4868 * unset, as DCM, beam forming, RU and PPE 4869 * threshold information are not supported 4870 */ 4871 }, 4872 .he_mcs_nss_supp = { 4873 .rx_mcs_80 = cpu_to_le16(0xfffa), 4874 .tx_mcs_80 = cpu_to_le16(0xfffa), 4875 .rx_mcs_160 = cpu_to_le16(0xfffa), 4876 .tx_mcs_160 = cpu_to_le16(0xfffa), 4877 .rx_mcs_80p80 = cpu_to_le16(0xfffa), 4878 .tx_mcs_80p80 = cpu_to_le16(0xfffa), 4879 }, 4880 }, 4881 .eht_cap = { 4882 .has_eht = true, 4883 .eht_cap_elem = { 4884 .mac_cap_info[0] = 4885 IEEE80211_EHT_MAC_CAP0_EPCS_PRIO_ACCESS | 4886 IEEE80211_EHT_MAC_CAP0_OM_CONTROL | 4887 IEEE80211_EHT_MAC_CAP0_TRIG_TXOP_SHARING_MODE1, 4888 .phy_cap_info[0] = 4889 IEEE80211_EHT_PHY_CAP0_320MHZ_IN_6GHZ | 4890 IEEE80211_EHT_PHY_CAP0_242_TONE_RU_GT20MHZ | 4891 IEEE80211_EHT_PHY_CAP0_NDP_4_EHT_LFT_32_GI | 4892 IEEE80211_EHT_PHY_CAP0_PARTIAL_BW_UL_MU_MIMO | 4893 IEEE80211_EHT_PHY_CAP0_SU_BEAMFORMER | 4894 IEEE80211_EHT_PHY_CAP0_SU_BEAMFORMEE | 4895 IEEE80211_EHT_PHY_CAP0_BEAMFORMEE_SS_80MHZ_MASK, 4896 .phy_cap_info[1] = 4897 IEEE80211_EHT_PHY_CAP1_BEAMFORMEE_SS_80MHZ_MASK | 4898 IEEE80211_EHT_PHY_CAP1_BEAMFORMEE_SS_160MHZ_MASK | 4899 IEEE80211_EHT_PHY_CAP1_BEAMFORMEE_SS_320MHZ_MASK, 4900 .phy_cap_info[2] = 4901 IEEE80211_EHT_PHY_CAP2_SOUNDING_DIM_80MHZ_MASK | 4902 IEEE80211_EHT_PHY_CAP2_SOUNDING_DIM_160MHZ_MASK | 4903 IEEE80211_EHT_PHY_CAP2_SOUNDING_DIM_320MHZ_MASK, 4904 .phy_cap_info[3] = 4905 IEEE80211_EHT_PHY_CAP3_NG_16_SU_FEEDBACK | 4906 IEEE80211_EHT_PHY_CAP3_NG_16_MU_FEEDBACK | 4907 IEEE80211_EHT_PHY_CAP3_CODEBOOK_4_2_SU_FDBK | 4908 IEEE80211_EHT_PHY_CAP3_CODEBOOK_7_5_MU_FDBK | 4909 IEEE80211_EHT_PHY_CAP3_TRIG_SU_BF_FDBK | 4910 IEEE80211_EHT_PHY_CAP3_TRIG_MU_BF_PART_BW_FDBK | 4911 IEEE80211_EHT_PHY_CAP3_TRIG_CQI_FDBK, 4912 .phy_cap_info[4] = 4913 IEEE80211_EHT_PHY_CAP4_PART_BW_DL_MU_MIMO | 4914 IEEE80211_EHT_PHY_CAP4_PSR_SR_SUPP | 4915 IEEE80211_EHT_PHY_CAP4_POWER_BOOST_FACT_SUPP | 4916 IEEE80211_EHT_PHY_CAP4_EHT_MU_PPDU_4_EHT_LTF_08_GI | 4917 IEEE80211_EHT_PHY_CAP4_MAX_NC_MASK, 4918 .phy_cap_info[5] = 4919 IEEE80211_EHT_PHY_CAP5_NON_TRIG_CQI_FEEDBACK | 4920 IEEE80211_EHT_PHY_CAP5_TX_LESS_242_TONE_RU_SUPP | 4921 IEEE80211_EHT_PHY_CAP5_RX_LESS_242_TONE_RU_SUPP | 4922 IEEE80211_EHT_PHY_CAP5_PPE_THRESHOLD_PRESENT | 4923 IEEE80211_EHT_PHY_CAP5_COMMON_NOMINAL_PKT_PAD_MASK | 4924 IEEE80211_EHT_PHY_CAP5_MAX_NUM_SUPP_EHT_LTF_MASK, 4925 .phy_cap_info[6] = 4926 IEEE80211_EHT_PHY_CAP6_MAX_NUM_SUPP_EHT_LTF_MASK | 4927 IEEE80211_EHT_PHY_CAP6_MCS15_SUPP_MASK | 4928 IEEE80211_EHT_PHY_CAP6_EHT_DUP_6GHZ_SUPP, 4929 .phy_cap_info[7] = 4930 IEEE80211_EHT_PHY_CAP7_20MHZ_STA_RX_NDP_WIDER_BW | 4931 IEEE80211_EHT_PHY_CAP7_NON_OFDMA_UL_MU_MIMO_80MHZ | 4932 IEEE80211_EHT_PHY_CAP7_NON_OFDMA_UL_MU_MIMO_160MHZ | 4933 IEEE80211_EHT_PHY_CAP7_NON_OFDMA_UL_MU_MIMO_320MHZ | 4934 IEEE80211_EHT_PHY_CAP7_MU_BEAMFORMER_80MHZ | 4935 IEEE80211_EHT_PHY_CAP7_MU_BEAMFORMER_160MHZ | 4936 IEEE80211_EHT_PHY_CAP7_MU_BEAMFORMER_320MHZ, 4937 }, 4938 4939 /* For all MCS and bandwidth, set 8 NSS for both Tx and 4940 * Rx 4941 */ 4942 .eht_mcs_nss_supp = { 4943 /* 4944 * As B1 and B2 are set in the supported 4945 * channel width set field in the HE PHY 4946 * capabilities information field and 320MHz in 4947 * 6GHz is supported include all the following 4948 * MCS/NSS. 4949 */ 4950 .bw._80 = { 4951 .rx_tx_mcs9_max_nss = 0x88, 4952 .rx_tx_mcs11_max_nss = 0x88, 4953 .rx_tx_mcs13_max_nss = 0x88, 4954 }, 4955 .bw._160 = { 4956 .rx_tx_mcs9_max_nss = 0x88, 4957 .rx_tx_mcs11_max_nss = 0x88, 4958 .rx_tx_mcs13_max_nss = 0x88, 4959 }, 4960 .bw._320 = { 4961 .rx_tx_mcs9_max_nss = 0x88, 4962 .rx_tx_mcs11_max_nss = 0x88, 4963 .rx_tx_mcs13_max_nss = 0x88, 4964 }, 4965 }, 4966 /* PPE threshold information is not supported */ 4967 }, 4968 }, 4969#ifdef CONFIG_MAC80211_MESH 4970 { 4971 /* TODO: should we support other types, e.g., IBSS?*/ 4972 .types_mask = BIT(NL80211_IFTYPE_MESH_POINT), 4973 .he_6ghz_capa = { 4974 .capa = cpu_to_le16(IEEE80211_HE_6GHZ_CAP_MIN_MPDU_START | 4975 IEEE80211_HE_6GHZ_CAP_MAX_AMPDU_LEN_EXP | 4976 IEEE80211_HE_6GHZ_CAP_MAX_MPDU_LEN | 4977 IEEE80211_HE_6GHZ_CAP_SM_PS | 4978 IEEE80211_HE_6GHZ_CAP_RD_RESPONDER | 4979 IEEE80211_HE_6GHZ_CAP_TX_ANTPAT_CONS | 4980 IEEE80211_HE_6GHZ_CAP_RX_ANTPAT_CONS), 4981 }, 4982 .he_cap = { 4983 .has_he = true, 4984 .he_cap_elem = { 4985 .mac_cap_info[0] = 4986 IEEE80211_HE_MAC_CAP0_HTC_HE, 4987 .mac_cap_info[1] = 4988 IEEE80211_HE_MAC_CAP1_MULTI_TID_AGG_RX_QOS_8, 4989 .mac_cap_info[2] = 4990 IEEE80211_HE_MAC_CAP2_ACK_EN, 4991 .mac_cap_info[3] = 4992 IEEE80211_HE_MAC_CAP3_OMI_CONTROL | 4993 IEEE80211_HE_MAC_CAP3_MAX_AMPDU_LEN_EXP_EXT_3, 4994 .mac_cap_info[4] = IEEE80211_HE_MAC_CAP4_AMSDU_IN_AMPDU, 4995 .phy_cap_info[0] = 4996 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_40MHZ_80MHZ_IN_5G | 4997 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_160MHZ_IN_5G | 4998 IEEE80211_HE_PHY_CAP0_CHANNEL_WIDTH_SET_80PLUS80_MHZ_IN_5G, 4999 .phy_cap_info[1] = 5000 IEEE80211_HE_PHY_CAP1_PREAMBLE_PUNC_RX_MASK | 5001 IEEE80211_HE_PHY_CAP1_DEVICE_CLASS_A | 5002 IEEE80211_HE_PHY_CAP1_LDPC_CODING_IN_PAYLOAD | 5003 IEEE80211_HE_PHY_CAP1_MIDAMBLE_RX_TX_MAX_NSTS, 5004 .phy_cap_info[2] = 0, 5005 5006 /* Leave all the other PHY capability bytes 5007 * unset, as DCM, beam forming, RU and PPE 5008 * threshold information are not supported 5009 */ 5010 }, 5011 .he_mcs_nss_supp = { 5012 .rx_mcs_80 = cpu_to_le16(0xfffa), 5013 .tx_mcs_80 = cpu_to_le16(0xfffa), 5014 .rx_mcs_160 = cpu_to_le16(0xfffa), 5015 .tx_mcs_160 = cpu_to_le16(0xfffa), 5016 .rx_mcs_80p80 = cpu_to_le16(0xfffa), 5017 .tx_mcs_80p80 = cpu_to_le16(0xfffa), 5018 }, 5019 }, 5020 }, 5021#endif 5022}; 5023 5024static void mac80211_hwsim_sband_capab(struct ieee80211_supported_band *sband) 5025{ 5026 switch (sband->band) { 5027 case NL80211_BAND_2GHZ: 5028 ieee80211_set_sband_iftype_data(sband, sband_capa_2ghz); 5029 break; 5030 case NL80211_BAND_5GHZ: 5031 ieee80211_set_sband_iftype_data(sband, sband_capa_5ghz); 5032 break; 5033 case NL80211_BAND_6GHZ: 5034 ieee80211_set_sband_iftype_data(sband, sband_capa_6ghz); 5035 break; 5036 default: 5037 break; 5038 } 5039} 5040 5041#ifdef CONFIG_MAC80211_MESH 5042#define HWSIM_MESH_BIT BIT(NL80211_IFTYPE_MESH_POINT) 5043#else 5044#define HWSIM_MESH_BIT 0 5045#endif 5046 5047#define HWSIM_DEFAULT_IF_LIMIT \ 5048 (BIT(NL80211_IFTYPE_STATION) | \ 5049 BIT(NL80211_IFTYPE_P2P_CLIENT) | \ 5050 BIT(NL80211_IFTYPE_AP) | \ 5051 BIT(NL80211_IFTYPE_P2P_GO) | \ 5052 HWSIM_MESH_BIT) 5053 5054#define HWSIM_IFTYPE_SUPPORT_MASK \ 5055 (BIT(NL80211_IFTYPE_STATION) | \ 5056 BIT(NL80211_IFTYPE_AP) | \ 5057 BIT(NL80211_IFTYPE_P2P_CLIENT) | \ 5058 BIT(NL80211_IFTYPE_P2P_GO) | \ 5059 BIT(NL80211_IFTYPE_ADHOC) | \ 5060 BIT(NL80211_IFTYPE_MESH_POINT) | \ 5061 BIT(NL80211_IFTYPE_OCB)) 5062 5063static const u8 iftypes_ext_capa_ap[] = { 5064 [0] = WLAN_EXT_CAPA1_EXT_CHANNEL_SWITCHING, 5065 [2] = WLAN_EXT_CAPA3_MULTI_BSSID_SUPPORT, 5066 [7] = WLAN_EXT_CAPA8_OPMODE_NOTIF | 5067 WLAN_EXT_CAPA8_MAX_MSDU_IN_AMSDU_LSB, 5068 [8] = WLAN_EXT_CAPA9_MAX_MSDU_IN_AMSDU_MSB, 5069 [9] = WLAN_EXT_CAPA10_TWT_RESPONDER_SUPPORT, 5070}; 5071 5072#define MAC80211_HWSIM_MLD_CAPA_OPS \ 5073 FIELD_PREP_CONST(IEEE80211_MLD_CAP_OP_TID_TO_LINK_MAP_NEG_SUPP, \ 5074 IEEE80211_MLD_CAP_OP_TID_TO_LINK_MAP_NEG_SUPP_SAME) | \ 5075 FIELD_PREP_CONST(IEEE80211_MLD_CAP_OP_MAX_SIMUL_LINKS, \ 5076 IEEE80211_MLD_MAX_NUM_LINKS - 1) 5077 5078static const struct wiphy_iftype_ext_capab mac80211_hwsim_iftypes_ext_capa[] = { 5079 { 5080 .iftype = NL80211_IFTYPE_AP, 5081 .extended_capabilities = iftypes_ext_capa_ap, 5082 .extended_capabilities_mask = iftypes_ext_capa_ap, 5083 .extended_capabilities_len = sizeof(iftypes_ext_capa_ap), 5084 .eml_capabilities = IEEE80211_EML_CAP_EMLSR_SUPP | 5085 IEEE80211_EML_CAP_EMLMR_SUPPORT, 5086 .mld_capa_and_ops = MAC80211_HWSIM_MLD_CAPA_OPS, 5087 }, 5088}; 5089 5090static int mac80211_hwsim_new_radio(struct genl_info *info, 5091 struct hwsim_new_radio_params *param) 5092{ 5093 int err; 5094 u8 addr[ETH_ALEN]; 5095 struct mac80211_hwsim_data *data; 5096 struct ieee80211_hw *hw; 5097 enum nl80211_band band; 5098 const struct ieee80211_ops *ops = &mac80211_hwsim_ops; 5099 struct net *net; 5100 int idx, i; 5101 int n_limits = 0; 5102 5103 if (WARN_ON(param->channels > 1 && !param->use_chanctx)) 5104 return -EINVAL; 5105 5106 spin_lock_bh(&hwsim_radio_lock); 5107 idx = hwsim_radio_idx++; 5108 spin_unlock_bh(&hwsim_radio_lock); 5109 5110 if (param->mlo) 5111 ops = &mac80211_hwsim_mlo_ops; 5112 else if (param->use_chanctx) 5113 ops = &mac80211_hwsim_mchan_ops; 5114 hw = ieee80211_alloc_hw_nm(sizeof(*data), ops, param->hwname); 5115 if (!hw) { 5116 pr_debug("mac80211_hwsim: ieee80211_alloc_hw failed\n"); 5117 err = -ENOMEM; 5118 goto failed; 5119 } 5120 5121 /* ieee80211_alloc_hw_nm may have used a default name */ 5122 param->hwname = wiphy_name(hw->wiphy); 5123 5124 if (info) 5125 net = genl_info_net(info); 5126 else 5127 net = &init_net; 5128 wiphy_net_set(hw->wiphy, net); 5129 5130 data = hw->priv; 5131 data->hw = hw; 5132 5133 data->dev = device_create(hwsim_class, NULL, 0, hw, "hwsim%d", idx); 5134 if (IS_ERR(data->dev)) { 5135 printk(KERN_DEBUG 5136 "mac80211_hwsim: device_create failed (%ld)\n", 5137 PTR_ERR(data->dev)); 5138 err = -ENOMEM; 5139 goto failed_drvdata; 5140 } 5141 data->dev->driver = &mac80211_hwsim_driver.driver; 5142 err = device_bind_driver(data->dev); 5143 if (err != 0) { 5144 pr_debug("mac80211_hwsim: device_bind_driver failed (%d)\n", 5145 err); 5146 goto failed_bind; 5147 } 5148 5149 skb_queue_head_init(&data->pending); 5150 5151 SET_IEEE80211_DEV(hw, data->dev); 5152 if (!param->perm_addr) { 5153 eth_zero_addr(addr); 5154 addr[0] = 0x02; 5155 addr[3] = idx >> 8; 5156 addr[4] = idx; 5157 memcpy(data->addresses[0].addr, addr, ETH_ALEN); 5158 /* Why need here second address ? */ 5159 memcpy(data->addresses[1].addr, addr, ETH_ALEN); 5160 data->addresses[1].addr[0] |= 0x40; 5161 hw->wiphy->n_addresses = 2; 5162 hw->wiphy->addresses = data->addresses; 5163 /* possible address clash is checked at hash table insertion */ 5164 } else { 5165 memcpy(data->addresses[0].addr, param->perm_addr, ETH_ALEN); 5166 /* compatibility with automatically generated mac addr */ 5167 memcpy(data->addresses[1].addr, param->perm_addr, ETH_ALEN); 5168 hw->wiphy->n_addresses = 2; 5169 hw->wiphy->addresses = data->addresses; 5170 } 5171 5172 data->channels = param->channels; 5173 data->use_chanctx = param->use_chanctx; 5174 data->idx = idx; 5175 data->destroy_on_close = param->destroy_on_close; 5176 if (info) 5177 data->portid = info->snd_portid; 5178 5179 /* setup interface limits, only on interface types we support */ 5180 if (param->iftypes & BIT(NL80211_IFTYPE_ADHOC)) { 5181 data->if_limits[n_limits].max = 1; 5182 data->if_limits[n_limits].types = BIT(NL80211_IFTYPE_ADHOC); 5183 n_limits++; 5184 } 5185 5186 if (param->iftypes & HWSIM_DEFAULT_IF_LIMIT) { 5187 data->if_limits[n_limits].max = 2048; 5188 /* 5189 * For this case, we may only support a subset of 5190 * HWSIM_DEFAULT_IF_LIMIT, therefore we only want to add the 5191 * bits that both param->iftype & HWSIM_DEFAULT_IF_LIMIT have. 5192 */ 5193 data->if_limits[n_limits].types = 5194 HWSIM_DEFAULT_IF_LIMIT & param->iftypes; 5195 n_limits++; 5196 } 5197 5198 if (param->iftypes & BIT(NL80211_IFTYPE_P2P_DEVICE)) { 5199 data->if_limits[n_limits].max = 1; 5200 data->if_limits[n_limits].types = 5201 BIT(NL80211_IFTYPE_P2P_DEVICE); 5202 n_limits++; 5203 } 5204 5205 if (data->use_chanctx) { 5206 hw->wiphy->max_scan_ssids = 255; 5207 hw->wiphy->max_scan_ie_len = IEEE80211_MAX_DATA_LEN; 5208 hw->wiphy->max_remain_on_channel_duration = 1000; 5209 data->if_combination.radar_detect_widths = 0; 5210 data->if_combination.num_different_channels = data->channels; 5211 } else { 5212 data->if_combination.num_different_channels = 1; 5213 data->if_combination.radar_detect_widths = 5214 BIT(NL80211_CHAN_WIDTH_5) | 5215 BIT(NL80211_CHAN_WIDTH_10) | 5216 BIT(NL80211_CHAN_WIDTH_20_NOHT) | 5217 BIT(NL80211_CHAN_WIDTH_20) | 5218 BIT(NL80211_CHAN_WIDTH_40) | 5219 BIT(NL80211_CHAN_WIDTH_80) | 5220 BIT(NL80211_CHAN_WIDTH_160); 5221 } 5222 5223 if (!n_limits) { 5224 err = -EINVAL; 5225 goto failed_hw; 5226 } 5227 5228 data->if_combination.max_interfaces = 0; 5229 for (i = 0; i < n_limits; i++) 5230 data->if_combination.max_interfaces += 5231 data->if_limits[i].max; 5232 5233 data->if_combination.n_limits = n_limits; 5234 data->if_combination.limits = data->if_limits; 5235 5236 /* 5237 * If we actually were asked to support combinations, 5238 * advertise them - if there's only a single thing like 5239 * only IBSS then don't advertise it as combinations. 5240 */ 5241 if (data->if_combination.max_interfaces > 1) { 5242 hw->wiphy->iface_combinations = &data->if_combination; 5243 hw->wiphy->n_iface_combinations = 1; 5244 } 5245 5246 if (param->ciphers) { 5247 memcpy(data->ciphers, param->ciphers, 5248 param->n_ciphers * sizeof(u32)); 5249 hw->wiphy->cipher_suites = data->ciphers; 5250 hw->wiphy->n_cipher_suites = param->n_ciphers; 5251 } 5252 5253 hw->wiphy->mbssid_max_interfaces = 8; 5254 hw->wiphy->ema_max_profile_periodicity = 3; 5255 5256 data->rx_rssi = DEFAULT_RX_RSSI; 5257 5258 INIT_DELAYED_WORK(&data->roc_start, hw_roc_start); 5259 INIT_DELAYED_WORK(&data->roc_done, hw_roc_done); 5260 INIT_DELAYED_WORK(&data->hw_scan, hw_scan_work); 5261 5262 hw->queues = 5; 5263 hw->offchannel_tx_hw_queue = 4; 5264 5265 ieee80211_hw_set(hw, SUPPORT_FAST_XMIT); 5266 ieee80211_hw_set(hw, CHANCTX_STA_CSA); 5267 ieee80211_hw_set(hw, SUPPORTS_HT_CCK_RATES); 5268 ieee80211_hw_set(hw, QUEUE_CONTROL); 5269 ieee80211_hw_set(hw, WANT_MONITOR_VIF); 5270 ieee80211_hw_set(hw, AMPDU_AGGREGATION); 5271 ieee80211_hw_set(hw, MFP_CAPABLE); 5272 ieee80211_hw_set(hw, SIGNAL_DBM); 5273 ieee80211_hw_set(hw, SUPPORTS_PS); 5274 ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS); 5275 ieee80211_hw_set(hw, TDLS_WIDER_BW); 5276 ieee80211_hw_set(hw, SUPPORTS_MULTI_BSSID); 5277 5278 if (param->mlo) { 5279 hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_MLO; 5280 ieee80211_hw_set(hw, HAS_RATE_CONTROL); 5281 ieee80211_hw_set(hw, SUPPORTS_DYNAMIC_PS); 5282 ieee80211_hw_set(hw, CONNECTION_MONITOR); 5283 ieee80211_hw_set(hw, AP_LINK_PS); 5284 5285 hw->wiphy->iftype_ext_capab = mac80211_hwsim_iftypes_ext_capa; 5286 hw->wiphy->num_iftype_ext_capab = 5287 ARRAY_SIZE(mac80211_hwsim_iftypes_ext_capa); 5288 } else { 5289 ieee80211_hw_set(hw, HOST_BROADCAST_PS_BUFFERING); 5290 ieee80211_hw_set(hw, PS_NULLFUNC_STACK); 5291 if (rctbl) 5292 ieee80211_hw_set(hw, SUPPORTS_RC_TABLE); 5293 } 5294 5295 hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT; 5296 hw->wiphy->flags |= WIPHY_FLAG_SUPPORTS_TDLS | 5297 WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL | 5298 WIPHY_FLAG_AP_UAPSD | 5299 WIPHY_FLAG_SUPPORTS_5_10_MHZ | 5300 WIPHY_FLAG_HAS_CHANNEL_SWITCH; 5301 hw->wiphy->features |= NL80211_FEATURE_ACTIVE_MONITOR | 5302 NL80211_FEATURE_AP_MODE_CHAN_WIDTH_CHANGE | 5303 NL80211_FEATURE_STATIC_SMPS | 5304 NL80211_FEATURE_DYNAMIC_SMPS | 5305 NL80211_FEATURE_SCAN_RANDOM_MAC_ADDR; 5306 wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_VHT_IBSS); 5307 wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_BEACON_PROTECTION); 5308 wiphy_ext_feature_set(hw->wiphy, 5309 NL80211_EXT_FEATURE_MULTICAST_REGISTRATIONS); 5310 wiphy_ext_feature_set(hw->wiphy, 5311 NL80211_EXT_FEATURE_BEACON_RATE_LEGACY); 5312 wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_ENABLE_FTM_RESPONDER); 5313 5314 wiphy_ext_feature_set(hw->wiphy, 5315 NL80211_EXT_FEATURE_SCAN_MIN_PREQ_CONTENT); 5316 5317 hw->wiphy->interface_modes = param->iftypes; 5318 5319 /* ask mac80211 to reserve space for magic */ 5320 hw->vif_data_size = sizeof(struct hwsim_vif_priv); 5321 hw->sta_data_size = sizeof(struct hwsim_sta_priv); 5322 hw->chanctx_data_size = sizeof(struct hwsim_chanctx_priv); 5323 5324 memcpy(data->channels_2ghz, hwsim_channels_2ghz, 5325 sizeof(hwsim_channels_2ghz)); 5326 memcpy(data->channels_5ghz, hwsim_channels_5ghz, 5327 sizeof(hwsim_channels_5ghz)); 5328 memcpy(data->channels_6ghz, hwsim_channels_6ghz, 5329 sizeof(hwsim_channels_6ghz)); 5330 memcpy(data->channels_s1g, hwsim_channels_s1g, 5331 sizeof(hwsim_channels_s1g)); 5332 memcpy(data->rates, hwsim_rates, sizeof(hwsim_rates)); 5333 5334 for (band = NL80211_BAND_2GHZ; band < NUM_NL80211_BANDS; band++) { 5335 struct ieee80211_supported_band *sband = &data->bands[band]; 5336 5337 sband->band = band; 5338 5339 switch (band) { 5340 case NL80211_BAND_2GHZ: 5341 sband->channels = data->channels_2ghz; 5342 sband->n_channels = ARRAY_SIZE(hwsim_channels_2ghz); 5343 sband->bitrates = data->rates; 5344 sband->n_bitrates = ARRAY_SIZE(hwsim_rates); 5345 break; 5346 case NL80211_BAND_5GHZ: 5347 sband->channels = data->channels_5ghz; 5348 sband->n_channels = ARRAY_SIZE(hwsim_channels_5ghz); 5349 sband->bitrates = data->rates + 4; 5350 sband->n_bitrates = ARRAY_SIZE(hwsim_rates) - 4; 5351 5352 sband->vht_cap.vht_supported = true; 5353 sband->vht_cap.cap = 5354 IEEE80211_VHT_CAP_MAX_MPDU_LENGTH_11454 | 5355 IEEE80211_VHT_CAP_SUPP_CHAN_WIDTH_160_80PLUS80MHZ | 5356 IEEE80211_VHT_CAP_RXLDPC | 5357 IEEE80211_VHT_CAP_SHORT_GI_80 | 5358 IEEE80211_VHT_CAP_SHORT_GI_160 | 5359 IEEE80211_VHT_CAP_TXSTBC | 5360 IEEE80211_VHT_CAP_RXSTBC_4 | 5361 IEEE80211_VHT_CAP_MAX_A_MPDU_LENGTH_EXPONENT_MASK; 5362 sband->vht_cap.vht_mcs.rx_mcs_map = 5363 cpu_to_le16(IEEE80211_VHT_MCS_SUPPORT_0_9 << 0 | 5364 IEEE80211_VHT_MCS_SUPPORT_0_9 << 2 | 5365 IEEE80211_VHT_MCS_SUPPORT_0_9 << 4 | 5366 IEEE80211_VHT_MCS_SUPPORT_0_9 << 6 | 5367 IEEE80211_VHT_MCS_SUPPORT_0_9 << 8 | 5368 IEEE80211_VHT_MCS_SUPPORT_0_9 << 10 | 5369 IEEE80211_VHT_MCS_SUPPORT_0_9 << 12 | 5370 IEEE80211_VHT_MCS_SUPPORT_0_9 << 14); 5371 sband->vht_cap.vht_mcs.tx_mcs_map = 5372 sband->vht_cap.vht_mcs.rx_mcs_map; 5373 break; 5374 case NL80211_BAND_6GHZ: 5375 sband->channels = data->channels_6ghz; 5376 sband->n_channels = ARRAY_SIZE(hwsim_channels_6ghz); 5377 sband->bitrates = data->rates + 4; 5378 sband->n_bitrates = ARRAY_SIZE(hwsim_rates) - 4; 5379 break; 5380 case NL80211_BAND_S1GHZ: 5381 memcpy(&sband->s1g_cap, &hwsim_s1g_cap, 5382 sizeof(sband->s1g_cap)); 5383 sband->channels = data->channels_s1g; 5384 sband->n_channels = ARRAY_SIZE(hwsim_channels_s1g); 5385 break; 5386 default: 5387 continue; 5388 } 5389 5390 if (band != NL80211_BAND_6GHZ){ 5391 sband->ht_cap.ht_supported = true; 5392 sband->ht_cap.cap = IEEE80211_HT_CAP_SUP_WIDTH_20_40 | 5393 IEEE80211_HT_CAP_GRN_FLD | 5394 IEEE80211_HT_CAP_SGI_20 | 5395 IEEE80211_HT_CAP_SGI_40 | 5396 IEEE80211_HT_CAP_DSSSCCK40; 5397 sband->ht_cap.ampdu_factor = 0x3; 5398 sband->ht_cap.ampdu_density = 0x6; 5399 memset(&sband->ht_cap.mcs, 0, 5400 sizeof(sband->ht_cap.mcs)); 5401 sband->ht_cap.mcs.rx_mask[0] = 0xff; 5402 sband->ht_cap.mcs.rx_mask[1] = 0xff; 5403 sband->ht_cap.mcs.tx_params = IEEE80211_HT_MCS_TX_DEFINED; 5404 } 5405 5406 mac80211_hwsim_sband_capab(sband); 5407 5408 hw->wiphy->bands[band] = sband; 5409 } 5410 5411 /* By default all radios belong to the first group */ 5412 data->group = 1; 5413 mutex_init(&data->mutex); 5414 5415 data->netgroup = hwsim_net_get_netgroup(net); 5416 data->wmediumd = hwsim_net_get_wmediumd(net); 5417 5418 /* Enable frame retransmissions for lossy channels */ 5419 hw->max_rates = 4; 5420 hw->max_rate_tries = 11; 5421 5422 hw->wiphy->vendor_commands = mac80211_hwsim_vendor_commands; 5423 hw->wiphy->n_vendor_commands = 5424 ARRAY_SIZE(mac80211_hwsim_vendor_commands); 5425 hw->wiphy->vendor_events = mac80211_hwsim_vendor_events; 5426 hw->wiphy->n_vendor_events = ARRAY_SIZE(mac80211_hwsim_vendor_events); 5427 5428 if (param->reg_strict) 5429 hw->wiphy->regulatory_flags |= REGULATORY_STRICT_REG; 5430 if (param->regd) { 5431 data->regd = param->regd; 5432 hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG; 5433 wiphy_apply_custom_regulatory(hw->wiphy, param->regd); 5434 /* give the regulatory workqueue a chance to run */ 5435 schedule_timeout_interruptible(1); 5436 } 5437 5438 wiphy_ext_feature_set(hw->wiphy, 5439 NL80211_EXT_FEATURE_DFS_CONCURRENT); 5440 5441 if (param->no_vif) 5442 ieee80211_hw_set(hw, NO_AUTO_VIF); 5443 5444 wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_CQM_RSSI_LIST); 5445 5446 for (i = 0; i < ARRAY_SIZE(data->link_data); i++) { 5447 hrtimer_init(&data->link_data[i].beacon_timer, CLOCK_MONOTONIC, 5448 HRTIMER_MODE_ABS_SOFT); 5449 data->link_data[i].beacon_timer.function = 5450 mac80211_hwsim_beacon; 5451 data->link_data[i].link_id = i; 5452 } 5453 5454 err = ieee80211_register_hw(hw); 5455 if (err < 0) { 5456 pr_debug("mac80211_hwsim: ieee80211_register_hw failed (%d)\n", 5457 err); 5458 goto failed_hw; 5459 } 5460 5461 wiphy_dbg(hw->wiphy, "hwaddr %pM registered\n", hw->wiphy->perm_addr); 5462 5463 if (param->reg_alpha2) { 5464 data->alpha2[0] = param->reg_alpha2[0]; 5465 data->alpha2[1] = param->reg_alpha2[1]; 5466 regulatory_hint(hw->wiphy, param->reg_alpha2); 5467 } 5468 5469 data->debugfs = debugfs_create_dir("hwsim", hw->wiphy->debugfsdir); 5470 debugfs_create_file("ps", 0666, data->debugfs, data, &hwsim_fops_ps); 5471 debugfs_create_file("group", 0666, data->debugfs, data, 5472 &hwsim_fops_group); 5473 debugfs_create_file("rx_rssi", 0666, data->debugfs, data, 5474 &hwsim_fops_rx_rssi); 5475 if (!data->use_chanctx) 5476 debugfs_create_file("dfs_simulate_radar", 0222, 5477 data->debugfs, 5478 data, &hwsim_simulate_radar); 5479 5480 if (param->pmsr_capa) { 5481 data->pmsr_capa = *param->pmsr_capa; 5482 hw->wiphy->pmsr_capa = &data->pmsr_capa; 5483 } 5484 5485 spin_lock_bh(&hwsim_radio_lock); 5486 err = rhashtable_insert_fast(&hwsim_radios_rht, &data->rht, 5487 hwsim_rht_params); 5488 if (err < 0) { 5489 if (info) { 5490 GENL_SET_ERR_MSG(info, "perm addr already present"); 5491 NL_SET_BAD_ATTR(info->extack, 5492 info->attrs[HWSIM_ATTR_PERM_ADDR]); 5493 } 5494 spin_unlock_bh(&hwsim_radio_lock); 5495 goto failed_final_insert; 5496 } 5497 5498 list_add_tail(&data->list, &hwsim_radios); 5499 hwsim_radios_generation++; 5500 spin_unlock_bh(&hwsim_radio_lock); 5501 5502 hwsim_mcast_new_radio(idx, info, param); 5503 5504 return idx; 5505 5506failed_final_insert: 5507 debugfs_remove_recursive(data->debugfs); 5508 ieee80211_unregister_hw(data->hw); 5509failed_hw: 5510 device_release_driver(data->dev); 5511failed_bind: 5512 device_unregister(data->dev); 5513failed_drvdata: 5514 ieee80211_free_hw(hw); 5515failed: 5516 return err; 5517} 5518 5519static void hwsim_mcast_del_radio(int id, const char *hwname, 5520 struct genl_info *info) 5521{ 5522 struct sk_buff *skb; 5523 void *data; 5524 int ret; 5525 5526 skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL); 5527 if (!skb) 5528 return; 5529 5530 data = genlmsg_put(skb, 0, 0, &hwsim_genl_family, 0, 5531 HWSIM_CMD_DEL_RADIO); 5532 if (!data) 5533 goto error; 5534 5535 ret = nla_put_u32(skb, HWSIM_ATTR_RADIO_ID, id); 5536 if (ret < 0) 5537 goto error; 5538 5539 ret = nla_put(skb, HWSIM_ATTR_RADIO_NAME, strlen(hwname), 5540 hwname); 5541 if (ret < 0) 5542 goto error; 5543 5544 genlmsg_end(skb, data); 5545 5546 hwsim_mcast_config_msg(skb, info); 5547 5548 return; 5549 5550error: 5551 nlmsg_free(skb); 5552} 5553 5554static void mac80211_hwsim_del_radio(struct mac80211_hwsim_data *data, 5555 const char *hwname, 5556 struct genl_info *info) 5557{ 5558 hwsim_mcast_del_radio(data->idx, hwname, info); 5559 debugfs_remove_recursive(data->debugfs); 5560 ieee80211_unregister_hw(data->hw); 5561 device_release_driver(data->dev); 5562 device_unregister(data->dev); 5563 ieee80211_free_hw(data->hw); 5564} 5565 5566static int mac80211_hwsim_get_radio(struct sk_buff *skb, 5567 struct mac80211_hwsim_data *data, 5568 u32 portid, u32 seq, 5569 struct netlink_callback *cb, int flags) 5570{ 5571 void *hdr; 5572 struct hwsim_new_radio_params param = { }; 5573 int res = -EMSGSIZE; 5574 5575 hdr = genlmsg_put(skb, portid, seq, &hwsim_genl_family, flags, 5576 HWSIM_CMD_GET_RADIO); 5577 if (!hdr) 5578 return -EMSGSIZE; 5579 5580 if (cb) 5581 genl_dump_check_consistent(cb, hdr); 5582 5583 if (data->alpha2[0] && data->alpha2[1]) 5584 param.reg_alpha2 = data->alpha2; 5585 5586 param.reg_strict = !!(data->hw->wiphy->regulatory_flags & 5587 REGULATORY_STRICT_REG); 5588 param.p2p_device = !!(data->hw->wiphy->interface_modes & 5589 BIT(NL80211_IFTYPE_P2P_DEVICE)); 5590 param.use_chanctx = data->use_chanctx; 5591 param.regd = data->regd; 5592 param.channels = data->channels; 5593 param.hwname = wiphy_name(data->hw->wiphy); 5594 param.pmsr_capa = &data->pmsr_capa; 5595 5596 res = append_radio_msg(skb, data->idx, ¶m); 5597 if (res < 0) 5598 goto out_err; 5599 5600 genlmsg_end(skb, hdr); 5601 return 0; 5602 5603out_err: 5604 genlmsg_cancel(skb, hdr); 5605 return res; 5606} 5607 5608static void mac80211_hwsim_free(void) 5609{ 5610 struct mac80211_hwsim_data *data; 5611 5612 spin_lock_bh(&hwsim_radio_lock); 5613 while ((data = list_first_entry_or_null(&hwsim_radios, 5614 struct mac80211_hwsim_data, 5615 list))) { 5616 list_del(&data->list); 5617 spin_unlock_bh(&hwsim_radio_lock); 5618 mac80211_hwsim_del_radio(data, wiphy_name(data->hw->wiphy), 5619 NULL); 5620 spin_lock_bh(&hwsim_radio_lock); 5621 } 5622 spin_unlock_bh(&hwsim_radio_lock); 5623 class_destroy(hwsim_class); 5624} 5625 5626static const struct net_device_ops hwsim_netdev_ops = { 5627 .ndo_start_xmit = hwsim_mon_xmit, 5628 .ndo_set_mac_address = eth_mac_addr, 5629 .ndo_validate_addr = eth_validate_addr, 5630}; 5631 5632static void hwsim_mon_setup(struct net_device *dev) 5633{ 5634 u8 addr[ETH_ALEN]; 5635 5636 dev->netdev_ops = &hwsim_netdev_ops; 5637 dev->needs_free_netdev = true; 5638 ether_setup(dev); 5639 dev->priv_flags |= IFF_NO_QUEUE; 5640 dev->type = ARPHRD_IEEE80211_RADIOTAP; 5641 eth_zero_addr(addr); 5642 addr[0] = 0x12; 5643 eth_hw_addr_set(dev, addr); 5644} 5645 5646static void hwsim_register_wmediumd(struct net *net, u32 portid) 5647{ 5648 struct mac80211_hwsim_data *data; 5649 5650 hwsim_net_set_wmediumd(net, portid); 5651 5652 spin_lock_bh(&hwsim_radio_lock); 5653 list_for_each_entry(data, &hwsim_radios, list) { 5654 if (data->netgroup == hwsim_net_get_netgroup(net)) 5655 data->wmediumd = portid; 5656 } 5657 spin_unlock_bh(&hwsim_radio_lock); 5658} 5659 5660static int hwsim_tx_info_frame_received_nl(struct sk_buff *skb_2, 5661 struct genl_info *info) 5662{ 5663 5664 struct ieee80211_hdr *hdr; 5665 struct mac80211_hwsim_data *data2; 5666 struct ieee80211_tx_info *txi; 5667 struct hwsim_tx_rate *tx_attempts; 5668 u64 ret_skb_cookie; 5669 struct sk_buff *skb, *tmp; 5670 const u8 *src; 5671 unsigned int hwsim_flags; 5672 int i; 5673 unsigned long flags; 5674 bool found = false; 5675 5676 if (!info->attrs[HWSIM_ATTR_ADDR_TRANSMITTER] || 5677 !info->attrs[HWSIM_ATTR_FLAGS] || 5678 !info->attrs[HWSIM_ATTR_COOKIE] || 5679 !info->attrs[HWSIM_ATTR_SIGNAL] || 5680 !info->attrs[HWSIM_ATTR_TX_INFO]) 5681 goto out; 5682 5683 src = (void *)nla_data(info->attrs[HWSIM_ATTR_ADDR_TRANSMITTER]); 5684 hwsim_flags = nla_get_u32(info->attrs[HWSIM_ATTR_FLAGS]); 5685 ret_skb_cookie = nla_get_u64(info->attrs[HWSIM_ATTR_COOKIE]); 5686 5687 data2 = get_hwsim_data_ref_from_addr(src); 5688 if (!data2) 5689 goto out; 5690 5691 if (!hwsim_virtio_enabled) { 5692 if (hwsim_net_get_netgroup(genl_info_net(info)) != 5693 data2->netgroup) 5694 goto out; 5695 5696 if (info->snd_portid != data2->wmediumd) 5697 goto out; 5698 } 5699 5700 /* look for the skb matching the cookie passed back from user */ 5701 spin_lock_irqsave(&data2->pending.lock, flags); 5702 skb_queue_walk_safe(&data2->pending, skb, tmp) { 5703 uintptr_t skb_cookie; 5704 5705 txi = IEEE80211_SKB_CB(skb); 5706 skb_cookie = (uintptr_t)txi->rate_driver_data[0]; 5707 5708 if (skb_cookie == ret_skb_cookie) { 5709 __skb_unlink(skb, &data2->pending); 5710 found = true; 5711 break; 5712 } 5713 } 5714 spin_unlock_irqrestore(&data2->pending.lock, flags); 5715 5716 /* not found */ 5717 if (!found) 5718 goto out; 5719 5720 /* Tx info received because the frame was broadcasted on user space, 5721 so we get all the necessary info: tx attempts and skb control buff */ 5722 5723 tx_attempts = (struct hwsim_tx_rate *)nla_data( 5724 info->attrs[HWSIM_ATTR_TX_INFO]); 5725 5726 /* now send back TX status */ 5727 txi = IEEE80211_SKB_CB(skb); 5728 5729 ieee80211_tx_info_clear_status(txi); 5730 5731 for (i = 0; i < IEEE80211_TX_MAX_RATES; i++) { 5732 txi->status.rates[i].idx = tx_attempts[i].idx; 5733 txi->status.rates[i].count = tx_attempts[i].count; 5734 } 5735 5736 txi->status.ack_signal = nla_get_u32(info->attrs[HWSIM_ATTR_SIGNAL]); 5737 5738 if (!(hwsim_flags & HWSIM_TX_CTL_NO_ACK) && 5739 (hwsim_flags & HWSIM_TX_STAT_ACK)) { 5740 if (skb->len >= 16) { 5741 hdr = (struct ieee80211_hdr *) skb->data; 5742 mac80211_hwsim_monitor_ack(data2->channel, 5743 hdr->addr2); 5744 } 5745 txi->flags |= IEEE80211_TX_STAT_ACK; 5746 } 5747 5748 if (hwsim_flags & HWSIM_TX_CTL_NO_ACK) 5749 txi->flags |= IEEE80211_TX_STAT_NOACK_TRANSMITTED; 5750 5751 ieee80211_tx_status_irqsafe(data2->hw, skb); 5752 return 0; 5753out: 5754 return -EINVAL; 5755 5756} 5757 5758static int hwsim_cloned_frame_received_nl(struct sk_buff *skb_2, 5759 struct genl_info *info) 5760{ 5761 struct mac80211_hwsim_data *data2; 5762 struct ieee80211_rx_status rx_status; 5763 struct ieee80211_hdr *hdr; 5764 const u8 *dst; 5765 int frame_data_len; 5766 void *frame_data; 5767 struct sk_buff *skb = NULL; 5768 struct ieee80211_channel *channel = NULL; 5769 5770 if (!info->attrs[HWSIM_ATTR_ADDR_RECEIVER] || 5771 !info->attrs[HWSIM_ATTR_FRAME] || 5772 !info->attrs[HWSIM_ATTR_RX_RATE] || 5773 !info->attrs[HWSIM_ATTR_SIGNAL]) 5774 goto out; 5775 5776 dst = (void *)nla_data(info->attrs[HWSIM_ATTR_ADDR_RECEIVER]); 5777 frame_data_len = nla_len(info->attrs[HWSIM_ATTR_FRAME]); 5778 frame_data = (void *)nla_data(info->attrs[HWSIM_ATTR_FRAME]); 5779 5780 if (frame_data_len < sizeof(struct ieee80211_hdr_3addr) || 5781 frame_data_len > IEEE80211_MAX_DATA_LEN) 5782 goto err; 5783 5784 /* Allocate new skb here */ 5785 skb = alloc_skb(frame_data_len, GFP_KERNEL); 5786 if (skb == NULL) 5787 goto err; 5788 5789 /* Copy the data */ 5790 skb_put_data(skb, frame_data, frame_data_len); 5791 5792 data2 = get_hwsim_data_ref_from_addr(dst); 5793 if (!data2) 5794 goto out; 5795 5796 if (data2->use_chanctx) { 5797 if (data2->tmp_chan) 5798 channel = data2->tmp_chan; 5799 } else { 5800 channel = data2->channel; 5801 } 5802 5803 if (!hwsim_virtio_enabled) { 5804 if (hwsim_net_get_netgroup(genl_info_net(info)) != 5805 data2->netgroup) 5806 goto out; 5807 5808 if (info->snd_portid != data2->wmediumd) 5809 goto out; 5810 } 5811 5812 /* check if radio is configured properly */ 5813 5814 if ((data2->idle && !data2->tmp_chan) || !data2->started) 5815 goto out; 5816 5817 /* A frame is received from user space */ 5818 memset(&rx_status, 0, sizeof(rx_status)); 5819 if (info->attrs[HWSIM_ATTR_FREQ]) { 5820 struct tx_iter_data iter_data = {}; 5821 5822 /* throw away off-channel packets, but allow both the temporary 5823 * ("hw" scan/remain-on-channel), regular channels and links, 5824 * since the internal datapath also allows this 5825 */ 5826 rx_status.freq = nla_get_u32(info->attrs[HWSIM_ATTR_FREQ]); 5827 5828 iter_data.channel = ieee80211_get_channel(data2->hw->wiphy, 5829 rx_status.freq); 5830 if (!iter_data.channel) 5831 goto out; 5832 rx_status.band = iter_data.channel->band; 5833 5834 mutex_lock(&data2->mutex); 5835 if (!hwsim_chans_compat(iter_data.channel, channel)) { 5836 ieee80211_iterate_active_interfaces_atomic( 5837 data2->hw, IEEE80211_IFACE_ITER_NORMAL, 5838 mac80211_hwsim_tx_iter, &iter_data); 5839 if (!iter_data.receive) { 5840 mutex_unlock(&data2->mutex); 5841 goto out; 5842 } 5843 } 5844 mutex_unlock(&data2->mutex); 5845 } else if (!channel) { 5846 goto out; 5847 } else { 5848 rx_status.freq = channel->center_freq; 5849 rx_status.band = channel->band; 5850 } 5851 5852 rx_status.rate_idx = nla_get_u32(info->attrs[HWSIM_ATTR_RX_RATE]); 5853 if (rx_status.rate_idx >= data2->hw->wiphy->bands[rx_status.band]->n_bitrates) 5854 goto out; 5855 rx_status.signal = nla_get_u32(info->attrs[HWSIM_ATTR_SIGNAL]); 5856 5857 hdr = (void *)skb->data; 5858 5859 if (ieee80211_is_beacon(hdr->frame_control) || 5860 ieee80211_is_probe_resp(hdr->frame_control)) 5861 rx_status.boottime_ns = ktime_get_boottime_ns(); 5862 5863 mac80211_hwsim_rx(data2, &rx_status, skb); 5864 5865 return 0; 5866err: 5867 pr_debug("mac80211_hwsim: error occurred in %s\n", __func__); 5868out: 5869 dev_kfree_skb(skb); 5870 return -EINVAL; 5871} 5872 5873static int hwsim_register_received_nl(struct sk_buff *skb_2, 5874 struct genl_info *info) 5875{ 5876 struct net *net = genl_info_net(info); 5877 struct mac80211_hwsim_data *data; 5878 int chans = 1; 5879 5880 spin_lock_bh(&hwsim_radio_lock); 5881 list_for_each_entry(data, &hwsim_radios, list) 5882 chans = max(chans, data->channels); 5883 spin_unlock_bh(&hwsim_radio_lock); 5884 5885 /* In the future we should revise the userspace API and allow it 5886 * to set a flag that it does support multi-channel, then we can 5887 * let this pass conditionally on the flag. 5888 * For current userspace, prohibit it since it won't work right. 5889 */ 5890 if (chans > 1) 5891 return -EOPNOTSUPP; 5892 5893 if (hwsim_net_get_wmediumd(net)) 5894 return -EBUSY; 5895 5896 hwsim_register_wmediumd(net, info->snd_portid); 5897 5898 pr_debug("mac80211_hwsim: received a REGISTER, " 5899 "switching to wmediumd mode with pid %d\n", info->snd_portid); 5900 5901 return 0; 5902} 5903 5904/* ensures ciphers only include ciphers listed in 'hwsim_ciphers' array */ 5905static bool hwsim_known_ciphers(const u32 *ciphers, int n_ciphers) 5906{ 5907 int i; 5908 5909 for (i = 0; i < n_ciphers; i++) { 5910 int j; 5911 int found = 0; 5912 5913 for (j = 0; j < ARRAY_SIZE(hwsim_ciphers); j++) { 5914 if (ciphers[i] == hwsim_ciphers[j]) { 5915 found = 1; 5916 break; 5917 } 5918 } 5919 5920 if (!found) 5921 return false; 5922 } 5923 5924 return true; 5925} 5926 5927static int parse_ftm_capa(const struct nlattr *ftm_capa, struct cfg80211_pmsr_capabilities *out, 5928 struct genl_info *info) 5929{ 5930 struct nlattr *tb[NL80211_PMSR_FTM_CAPA_ATTR_MAX + 1]; 5931 int ret; 5932 5933 ret = nla_parse_nested(tb, NL80211_PMSR_FTM_CAPA_ATTR_MAX, ftm_capa, hwsim_ftm_capa_policy, 5934 NULL); 5935 if (ret) { 5936 NL_SET_ERR_MSG_ATTR(info->extack, ftm_capa, "malformed FTM capability"); 5937 return -EINVAL; 5938 } 5939 5940 out->ftm.supported = 1; 5941 if (tb[NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES]) 5942 out->ftm.preambles = nla_get_u32(tb[NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES]); 5943 if (tb[NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS]) 5944 out->ftm.bandwidths = nla_get_u32(tb[NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS]); 5945 if (tb[NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT]) 5946 out->ftm.max_bursts_exponent = 5947 nla_get_u8(tb[NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT]); 5948 if (tb[NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST]) 5949 out->ftm.max_ftms_per_burst = 5950 nla_get_u8(tb[NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST]); 5951 out->ftm.asap = !!tb[NL80211_PMSR_FTM_CAPA_ATTR_ASAP]; 5952 out->ftm.non_asap = !!tb[NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP]; 5953 out->ftm.request_lci = !!tb[NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI]; 5954 out->ftm.request_civicloc = !!tb[NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC]; 5955 out->ftm.trigger_based = !!tb[NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED]; 5956 out->ftm.non_trigger_based = !!tb[NL80211_PMSR_FTM_CAPA_ATTR_NON_TRIGGER_BASED]; 5957 5958 return 0; 5959} 5960 5961static int parse_pmsr_capa(const struct nlattr *pmsr_capa, struct cfg80211_pmsr_capabilities *out, 5962 struct genl_info *info) 5963{ 5964 struct nlattr *tb[NL80211_PMSR_ATTR_MAX + 1]; 5965 struct nlattr *nla; 5966 int size; 5967 int ret; 5968 5969 ret = nla_parse_nested(tb, NL80211_PMSR_ATTR_MAX, pmsr_capa, hwsim_pmsr_capa_policy, NULL); 5970 if (ret) { 5971 NL_SET_ERR_MSG_ATTR(info->extack, pmsr_capa, "malformed PMSR capability"); 5972 return -EINVAL; 5973 } 5974 5975 if (tb[NL80211_PMSR_ATTR_MAX_PEERS]) 5976 out->max_peers = nla_get_u32(tb[NL80211_PMSR_ATTR_MAX_PEERS]); 5977 out->report_ap_tsf = !!tb[NL80211_PMSR_ATTR_REPORT_AP_TSF]; 5978 out->randomize_mac_addr = !!tb[NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR]; 5979 5980 if (!tb[NL80211_PMSR_ATTR_TYPE_CAPA]) { 5981 NL_SET_ERR_MSG_ATTR(info->extack, tb[NL80211_PMSR_ATTR_TYPE_CAPA], 5982 "malformed PMSR type"); 5983 return -EINVAL; 5984 } 5985 5986 nla_for_each_nested(nla, tb[NL80211_PMSR_ATTR_TYPE_CAPA], size) { 5987 switch (nla_type(nla)) { 5988 case NL80211_PMSR_TYPE_FTM: 5989 parse_ftm_capa(nla, out, info); 5990 break; 5991 default: 5992 NL_SET_ERR_MSG_ATTR(info->extack, nla, "unsupported measurement type"); 5993 return -EINVAL; 5994 } 5995 } 5996 5997 return 0; 5998} 5999 6000static int hwsim_new_radio_nl(struct sk_buff *msg, struct genl_info *info) 6001{ 6002 struct hwsim_new_radio_params param = { 0 }; 6003 const char *hwname = NULL; 6004 int ret; 6005 6006 param.reg_strict = info->attrs[HWSIM_ATTR_REG_STRICT_REG]; 6007 param.p2p_device = info->attrs[HWSIM_ATTR_SUPPORT_P2P_DEVICE]; 6008 param.channels = channels; 6009 param.destroy_on_close = 6010 info->attrs[HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE]; 6011 6012 if (info->attrs[HWSIM_ATTR_CHANNELS]) 6013 param.channels = nla_get_u32(info->attrs[HWSIM_ATTR_CHANNELS]); 6014 6015 if (param.channels < 1) { 6016 GENL_SET_ERR_MSG(info, "must have at least one channel"); 6017 return -EINVAL; 6018 } 6019 6020 if (info->attrs[HWSIM_ATTR_NO_VIF]) 6021 param.no_vif = true; 6022 6023 if (info->attrs[HWSIM_ATTR_USE_CHANCTX]) 6024 param.use_chanctx = true; 6025 else 6026 param.use_chanctx = (param.channels > 1); 6027 6028 if (info->attrs[HWSIM_ATTR_REG_HINT_ALPHA2]) 6029 param.reg_alpha2 = 6030 nla_data(info->attrs[HWSIM_ATTR_REG_HINT_ALPHA2]); 6031 6032 if (info->attrs[HWSIM_ATTR_REG_CUSTOM_REG]) { 6033 u32 idx = nla_get_u32(info->attrs[HWSIM_ATTR_REG_CUSTOM_REG]); 6034 6035 if (idx >= ARRAY_SIZE(hwsim_world_regdom_custom)) 6036 return -EINVAL; 6037 6038 idx = array_index_nospec(idx, 6039 ARRAY_SIZE(hwsim_world_regdom_custom)); 6040 param.regd = hwsim_world_regdom_custom[idx]; 6041 } 6042 6043 if (info->attrs[HWSIM_ATTR_PERM_ADDR]) { 6044 if (!is_valid_ether_addr( 6045 nla_data(info->attrs[HWSIM_ATTR_PERM_ADDR]))) { 6046 GENL_SET_ERR_MSG(info,"MAC is no valid source addr"); 6047 NL_SET_BAD_ATTR(info->extack, 6048 info->attrs[HWSIM_ATTR_PERM_ADDR]); 6049 return -EINVAL; 6050 } 6051 6052 param.perm_addr = nla_data(info->attrs[HWSIM_ATTR_PERM_ADDR]); 6053 } 6054 6055 if (info->attrs[HWSIM_ATTR_IFTYPE_SUPPORT]) { 6056 param.iftypes = 6057 nla_get_u32(info->attrs[HWSIM_ATTR_IFTYPE_SUPPORT]); 6058 6059 if (param.iftypes & ~HWSIM_IFTYPE_SUPPORT_MASK) { 6060 NL_SET_ERR_MSG_ATTR(info->extack, 6061 info->attrs[HWSIM_ATTR_IFTYPE_SUPPORT], 6062 "cannot support more iftypes than kernel"); 6063 return -EINVAL; 6064 } 6065 } else { 6066 param.iftypes = HWSIM_IFTYPE_SUPPORT_MASK; 6067 } 6068 6069 /* ensure both flag and iftype support is honored */ 6070 if (param.p2p_device || 6071 param.iftypes & BIT(NL80211_IFTYPE_P2P_DEVICE)) { 6072 param.iftypes |= BIT(NL80211_IFTYPE_P2P_DEVICE); 6073 param.p2p_device = true; 6074 } 6075 6076 if (info->attrs[HWSIM_ATTR_CIPHER_SUPPORT]) { 6077 u32 len = nla_len(info->attrs[HWSIM_ATTR_CIPHER_SUPPORT]); 6078 6079 param.ciphers = 6080 nla_data(info->attrs[HWSIM_ATTR_CIPHER_SUPPORT]); 6081 6082 if (len % sizeof(u32)) { 6083 NL_SET_ERR_MSG_ATTR(info->extack, 6084 info->attrs[HWSIM_ATTR_CIPHER_SUPPORT], 6085 "bad cipher list length"); 6086 return -EINVAL; 6087 } 6088 6089 param.n_ciphers = len / sizeof(u32); 6090 6091 if (param.n_ciphers > ARRAY_SIZE(hwsim_ciphers)) { 6092 NL_SET_ERR_MSG_ATTR(info->extack, 6093 info->attrs[HWSIM_ATTR_CIPHER_SUPPORT], 6094 "too many ciphers specified"); 6095 return -EINVAL; 6096 } 6097 6098 if (!hwsim_known_ciphers(param.ciphers, param.n_ciphers)) { 6099 NL_SET_ERR_MSG_ATTR(info->extack, 6100 info->attrs[HWSIM_ATTR_CIPHER_SUPPORT], 6101 "unsupported ciphers specified"); 6102 return -EINVAL; 6103 } 6104 } 6105 6106 param.mlo = info->attrs[HWSIM_ATTR_MLO_SUPPORT]; 6107 6108 if (param.mlo) 6109 param.use_chanctx = true; 6110 6111 if (info->attrs[HWSIM_ATTR_RADIO_NAME]) { 6112 hwname = kstrndup((char *)nla_data(info->attrs[HWSIM_ATTR_RADIO_NAME]), 6113 nla_len(info->attrs[HWSIM_ATTR_RADIO_NAME]), 6114 GFP_KERNEL); 6115 if (!hwname) 6116 return -ENOMEM; 6117 param.hwname = hwname; 6118 } 6119 6120 if (info->attrs[HWSIM_ATTR_PMSR_SUPPORT]) { 6121 struct cfg80211_pmsr_capabilities *pmsr_capa; 6122 6123 pmsr_capa = kmalloc(sizeof(*pmsr_capa), GFP_KERNEL); 6124 if (!pmsr_capa) { 6125 ret = -ENOMEM; 6126 goto out_free; 6127 } 6128 param.pmsr_capa = pmsr_capa; 6129 6130 ret = parse_pmsr_capa(info->attrs[HWSIM_ATTR_PMSR_SUPPORT], pmsr_capa, info); 6131 if (ret) 6132 goto out_free; 6133 } 6134 6135 ret = mac80211_hwsim_new_radio(info, ¶m); 6136 6137out_free: 6138 kfree(hwname); 6139 kfree(param.pmsr_capa); 6140 return ret; 6141} 6142 6143static int hwsim_del_radio_nl(struct sk_buff *msg, struct genl_info *info) 6144{ 6145 struct mac80211_hwsim_data *data; 6146 s64 idx = -1; 6147 const char *hwname = NULL; 6148 6149 if (info->attrs[HWSIM_ATTR_RADIO_ID]) { 6150 idx = nla_get_u32(info->attrs[HWSIM_ATTR_RADIO_ID]); 6151 } else if (info->attrs[HWSIM_ATTR_RADIO_NAME]) { 6152 hwname = kstrndup((char *)nla_data(info->attrs[HWSIM_ATTR_RADIO_NAME]), 6153 nla_len(info->attrs[HWSIM_ATTR_RADIO_NAME]), 6154 GFP_KERNEL); 6155 if (!hwname) 6156 return -ENOMEM; 6157 } else 6158 return -EINVAL; 6159 6160 spin_lock_bh(&hwsim_radio_lock); 6161 list_for_each_entry(data, &hwsim_radios, list) { 6162 if (idx >= 0) { 6163 if (data->idx != idx) 6164 continue; 6165 } else { 6166 if (!hwname || 6167 strcmp(hwname, wiphy_name(data->hw->wiphy))) 6168 continue; 6169 } 6170 6171 if (!net_eq(wiphy_net(data->hw->wiphy), genl_info_net(info))) 6172 continue; 6173 6174 list_del(&data->list); 6175 rhashtable_remove_fast(&hwsim_radios_rht, &data->rht, 6176 hwsim_rht_params); 6177 hwsim_radios_generation++; 6178 spin_unlock_bh(&hwsim_radio_lock); 6179 mac80211_hwsim_del_radio(data, wiphy_name(data->hw->wiphy), 6180 info); 6181 kfree(hwname); 6182 return 0; 6183 } 6184 spin_unlock_bh(&hwsim_radio_lock); 6185 6186 kfree(hwname); 6187 return -ENODEV; 6188} 6189 6190static int hwsim_get_radio_nl(struct sk_buff *msg, struct genl_info *info) 6191{ 6192 struct mac80211_hwsim_data *data; 6193 struct sk_buff *skb; 6194 int idx, res = -ENODEV; 6195 6196 if (!info->attrs[HWSIM_ATTR_RADIO_ID]) 6197 return -EINVAL; 6198 idx = nla_get_u32(info->attrs[HWSIM_ATTR_RADIO_ID]); 6199 6200 spin_lock_bh(&hwsim_radio_lock); 6201 list_for_each_entry(data, &hwsim_radios, list) { 6202 if (data->idx != idx) 6203 continue; 6204 6205 if (!net_eq(wiphy_net(data->hw->wiphy), genl_info_net(info))) 6206 continue; 6207 6208 skb = nlmsg_new(NLMSG_DEFAULT_SIZE, GFP_ATOMIC); 6209 if (!skb) { 6210 res = -ENOMEM; 6211 goto out_err; 6212 } 6213 6214 res = mac80211_hwsim_get_radio(skb, data, info->snd_portid, 6215 info->snd_seq, NULL, 0); 6216 if (res < 0) { 6217 nlmsg_free(skb); 6218 goto out_err; 6219 } 6220 6221 res = genlmsg_reply(skb, info); 6222 break; 6223 } 6224 6225out_err: 6226 spin_unlock_bh(&hwsim_radio_lock); 6227 6228 return res; 6229} 6230 6231static int hwsim_dump_radio_nl(struct sk_buff *skb, 6232 struct netlink_callback *cb) 6233{ 6234 int last_idx = cb->args[0] - 1; 6235 struct mac80211_hwsim_data *data = NULL; 6236 int res = 0; 6237 void *hdr; 6238 6239 spin_lock_bh(&hwsim_radio_lock); 6240 cb->seq = hwsim_radios_generation; 6241 6242 if (last_idx >= hwsim_radio_idx-1) 6243 goto done; 6244 6245 list_for_each_entry(data, &hwsim_radios, list) { 6246 if (data->idx <= last_idx) 6247 continue; 6248 6249 if (!net_eq(wiphy_net(data->hw->wiphy), sock_net(skb->sk))) 6250 continue; 6251 6252 res = mac80211_hwsim_get_radio(skb, data, 6253 NETLINK_CB(cb->skb).portid, 6254 cb->nlh->nlmsg_seq, cb, 6255 NLM_F_MULTI); 6256 if (res < 0) 6257 break; 6258 6259 last_idx = data->idx; 6260 } 6261 6262 cb->args[0] = last_idx + 1; 6263 6264 /* list changed, but no new element sent, set interrupted flag */ 6265 if (skb->len == 0 && cb->prev_seq && cb->seq != cb->prev_seq) { 6266 hdr = genlmsg_put(skb, NETLINK_CB(cb->skb).portid, 6267 cb->nlh->nlmsg_seq, &hwsim_genl_family, 6268 NLM_F_MULTI, HWSIM_CMD_GET_RADIO); 6269 if (hdr) { 6270 genl_dump_check_consistent(cb, hdr); 6271 genlmsg_end(skb, hdr); 6272 } else { 6273 res = -EMSGSIZE; 6274 } 6275 } 6276 6277done: 6278 spin_unlock_bh(&hwsim_radio_lock); 6279 return res ?: skb->len; 6280} 6281 6282/* Generic Netlink operations array */ 6283static const struct genl_small_ops hwsim_ops[] = { 6284 { 6285 .cmd = HWSIM_CMD_REGISTER, 6286 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP, 6287 .doit = hwsim_register_received_nl, 6288 .flags = GENL_UNS_ADMIN_PERM, 6289 }, 6290 { 6291 .cmd = HWSIM_CMD_FRAME, 6292 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP, 6293 .doit = hwsim_cloned_frame_received_nl, 6294 }, 6295 { 6296 .cmd = HWSIM_CMD_TX_INFO_FRAME, 6297 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP, 6298 .doit = hwsim_tx_info_frame_received_nl, 6299 }, 6300 { 6301 .cmd = HWSIM_CMD_NEW_RADIO, 6302 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP, 6303 .doit = hwsim_new_radio_nl, 6304 .flags = GENL_UNS_ADMIN_PERM, 6305 }, 6306 { 6307 .cmd = HWSIM_CMD_DEL_RADIO, 6308 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP, 6309 .doit = hwsim_del_radio_nl, 6310 .flags = GENL_UNS_ADMIN_PERM, 6311 }, 6312 { 6313 .cmd = HWSIM_CMD_GET_RADIO, 6314 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP, 6315 .doit = hwsim_get_radio_nl, 6316 .dumpit = hwsim_dump_radio_nl, 6317 }, 6318 { 6319 .cmd = HWSIM_CMD_REPORT_PMSR, 6320 .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP, 6321 .doit = hwsim_pmsr_report_nl, 6322 }, 6323}; 6324 6325static struct genl_family hwsim_genl_family __ro_after_init = { 6326 .name = "MAC80211_HWSIM", 6327 .version = 1, 6328 .maxattr = HWSIM_ATTR_MAX, 6329 .policy = hwsim_genl_policy, 6330 .netnsok = true, 6331 .module = THIS_MODULE, 6332 .small_ops = hwsim_ops, 6333 .n_small_ops = ARRAY_SIZE(hwsim_ops), 6334 .resv_start_op = HWSIM_CMD_REPORT_PMSR + 1, // match with __HWSIM_CMD_MAX 6335 .mcgrps = hwsim_mcgrps, 6336 .n_mcgrps = ARRAY_SIZE(hwsim_mcgrps), 6337}; 6338 6339static void remove_user_radios(u32 portid) 6340{ 6341 struct mac80211_hwsim_data *entry, *tmp; 6342 LIST_HEAD(list); 6343 6344 spin_lock_bh(&hwsim_radio_lock); 6345 list_for_each_entry_safe(entry, tmp, &hwsim_radios, list) { 6346 if (entry->destroy_on_close && entry->portid == portid) { 6347 list_move(&entry->list, &list); 6348 rhashtable_remove_fast(&hwsim_radios_rht, &entry->rht, 6349 hwsim_rht_params); 6350 hwsim_radios_generation++; 6351 } 6352 } 6353 spin_unlock_bh(&hwsim_radio_lock); 6354 6355 list_for_each_entry_safe(entry, tmp, &list, list) { 6356 list_del(&entry->list); 6357 mac80211_hwsim_del_radio(entry, wiphy_name(entry->hw->wiphy), 6358 NULL); 6359 } 6360} 6361 6362static int mac80211_hwsim_netlink_notify(struct notifier_block *nb, 6363 unsigned long state, 6364 void *_notify) 6365{ 6366 struct netlink_notify *notify = _notify; 6367 6368 if (state != NETLINK_URELEASE) 6369 return NOTIFY_DONE; 6370 6371 remove_user_radios(notify->portid); 6372 6373 if (notify->portid == hwsim_net_get_wmediumd(notify->net)) { 6374 printk(KERN_INFO "mac80211_hwsim: wmediumd released netlink" 6375 " socket, switching to perfect channel medium\n"); 6376 hwsim_register_wmediumd(notify->net, 0); 6377 } 6378 return NOTIFY_DONE; 6379 6380} 6381 6382static struct notifier_block hwsim_netlink_notifier = { 6383 .notifier_call = mac80211_hwsim_netlink_notify, 6384}; 6385 6386static int __init hwsim_init_netlink(void) 6387{ 6388 int rc; 6389 6390 printk(KERN_INFO "mac80211_hwsim: initializing netlink\n"); 6391 6392 rc = genl_register_family(&hwsim_genl_family); 6393 if (rc) 6394 goto failure; 6395 6396 rc = netlink_register_notifier(&hwsim_netlink_notifier); 6397 if (rc) { 6398 genl_unregister_family(&hwsim_genl_family); 6399 goto failure; 6400 } 6401 6402 return 0; 6403 6404failure: 6405 pr_debug("mac80211_hwsim: error occurred in %s\n", __func__); 6406 return -EINVAL; 6407} 6408 6409static __net_init int hwsim_init_net(struct net *net) 6410{ 6411 return hwsim_net_set_netgroup(net); 6412} 6413 6414static void __net_exit hwsim_exit_net(struct net *net) 6415{ 6416 struct mac80211_hwsim_data *data, *tmp; 6417 LIST_HEAD(list); 6418 6419 spin_lock_bh(&hwsim_radio_lock); 6420 list_for_each_entry_safe(data, tmp, &hwsim_radios, list) { 6421 if (!net_eq(wiphy_net(data->hw->wiphy), net)) 6422 continue; 6423 6424 /* Radios created in init_net are returned to init_net. */ 6425 if (data->netgroup == hwsim_net_get_netgroup(&init_net)) 6426 continue; 6427 6428 list_move(&data->list, &list); 6429 rhashtable_remove_fast(&hwsim_radios_rht, &data->rht, 6430 hwsim_rht_params); 6431 hwsim_radios_generation++; 6432 } 6433 spin_unlock_bh(&hwsim_radio_lock); 6434 6435 list_for_each_entry_safe(data, tmp, &list, list) { 6436 list_del(&data->list); 6437 mac80211_hwsim_del_radio(data, 6438 wiphy_name(data->hw->wiphy), 6439 NULL); 6440 } 6441 6442 ida_free(&hwsim_netgroup_ida, hwsim_net_get_netgroup(net)); 6443} 6444 6445static struct pernet_operations hwsim_net_ops = { 6446 .init = hwsim_init_net, 6447 .exit = hwsim_exit_net, 6448 .id = &hwsim_net_id, 6449 .size = sizeof(struct hwsim_net), 6450}; 6451 6452static void hwsim_exit_netlink(void) 6453{ 6454 /* unregister the notifier */ 6455 netlink_unregister_notifier(&hwsim_netlink_notifier); 6456 /* unregister the family */ 6457 genl_unregister_family(&hwsim_genl_family); 6458} 6459 6460#if IS_REACHABLE(CONFIG_VIRTIO) 6461static void hwsim_virtio_tx_done(struct virtqueue *vq) 6462{ 6463 unsigned int len; 6464 struct sk_buff *skb; 6465 unsigned long flags; 6466 6467 spin_lock_irqsave(&hwsim_virtio_lock, flags); 6468 while ((skb = virtqueue_get_buf(vq, &len))) 6469 dev_kfree_skb_irq(skb); 6470 spin_unlock_irqrestore(&hwsim_virtio_lock, flags); 6471} 6472 6473static int hwsim_virtio_handle_cmd(struct sk_buff *skb) 6474{ 6475 struct nlmsghdr *nlh; 6476 struct genlmsghdr *gnlh; 6477 struct nlattr *tb[HWSIM_ATTR_MAX + 1]; 6478 struct genl_info info = {}; 6479 int err; 6480 6481 nlh = nlmsg_hdr(skb); 6482 gnlh = nlmsg_data(nlh); 6483 6484 if (skb->len < nlh->nlmsg_len) 6485 return -EINVAL; 6486 6487 err = genlmsg_parse(nlh, &hwsim_genl_family, tb, HWSIM_ATTR_MAX, 6488 hwsim_genl_policy, NULL); 6489 if (err) { 6490 pr_err_ratelimited("hwsim: genlmsg_parse returned %d\n", err); 6491 return err; 6492 } 6493 6494 info.attrs = tb; 6495 6496 switch (gnlh->cmd) { 6497 case HWSIM_CMD_FRAME: 6498 hwsim_cloned_frame_received_nl(skb, &info); 6499 break; 6500 case HWSIM_CMD_TX_INFO_FRAME: 6501 hwsim_tx_info_frame_received_nl(skb, &info); 6502 break; 6503 case HWSIM_CMD_REPORT_PMSR: 6504 hwsim_pmsr_report_nl(skb, &info); 6505 break; 6506 default: 6507 pr_err_ratelimited("hwsim: invalid cmd: %d\n", gnlh->cmd); 6508 return -EPROTO; 6509 } 6510 return 0; 6511} 6512 6513static void hwsim_virtio_rx_work(struct work_struct *work) 6514{ 6515 struct virtqueue *vq; 6516 unsigned int len; 6517 struct sk_buff *skb; 6518 struct scatterlist sg[1]; 6519 int err; 6520 unsigned long flags; 6521 6522 spin_lock_irqsave(&hwsim_virtio_lock, flags); 6523 if (!hwsim_virtio_enabled) 6524 goto out_unlock; 6525 6526 skb = virtqueue_get_buf(hwsim_vqs[HWSIM_VQ_RX], &len); 6527 if (!skb) 6528 goto out_unlock; 6529 spin_unlock_irqrestore(&hwsim_virtio_lock, flags); 6530 6531 skb->data = skb->head; 6532 skb_reset_tail_pointer(skb); 6533 skb_put(skb, len); 6534 hwsim_virtio_handle_cmd(skb); 6535 6536 spin_lock_irqsave(&hwsim_virtio_lock, flags); 6537 if (!hwsim_virtio_enabled) { 6538 dev_kfree_skb_irq(skb); 6539 goto out_unlock; 6540 } 6541 vq = hwsim_vqs[HWSIM_VQ_RX]; 6542 sg_init_one(sg, skb->head, skb_end_offset(skb)); 6543 err = virtqueue_add_inbuf(vq, sg, 1, skb, GFP_ATOMIC); 6544 if (WARN(err, "virtqueue_add_inbuf returned %d\n", err)) 6545 dev_kfree_skb_irq(skb); 6546 else 6547 virtqueue_kick(vq); 6548 schedule_work(&hwsim_virtio_rx); 6549 6550out_unlock: 6551 spin_unlock_irqrestore(&hwsim_virtio_lock, flags); 6552} 6553 6554static void hwsim_virtio_rx_done(struct virtqueue *vq) 6555{ 6556 schedule_work(&hwsim_virtio_rx); 6557} 6558 6559static int init_vqs(struct virtio_device *vdev) 6560{ 6561 vq_callback_t *callbacks[HWSIM_NUM_VQS] = { 6562 [HWSIM_VQ_TX] = hwsim_virtio_tx_done, 6563 [HWSIM_VQ_RX] = hwsim_virtio_rx_done, 6564 }; 6565 const char *names[HWSIM_NUM_VQS] = { 6566 [HWSIM_VQ_TX] = "tx", 6567 [HWSIM_VQ_RX] = "rx", 6568 }; 6569 6570 return virtio_find_vqs(vdev, HWSIM_NUM_VQS, 6571 hwsim_vqs, callbacks, names, NULL); 6572} 6573 6574static int fill_vq(struct virtqueue *vq) 6575{ 6576 int i, err; 6577 struct sk_buff *skb; 6578 struct scatterlist sg[1]; 6579 6580 for (i = 0; i < virtqueue_get_vring_size(vq); i++) { 6581 skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL); 6582 if (!skb) 6583 return -ENOMEM; 6584 6585 sg_init_one(sg, skb->head, skb_end_offset(skb)); 6586 err = virtqueue_add_inbuf(vq, sg, 1, skb, GFP_KERNEL); 6587 if (err) { 6588 nlmsg_free(skb); 6589 return err; 6590 } 6591 } 6592 virtqueue_kick(vq); 6593 return 0; 6594} 6595 6596static void remove_vqs(struct virtio_device *vdev) 6597{ 6598 int i; 6599 6600 virtio_reset_device(vdev); 6601 6602 for (i = 0; i < ARRAY_SIZE(hwsim_vqs); i++) { 6603 struct virtqueue *vq = hwsim_vqs[i]; 6604 struct sk_buff *skb; 6605 6606 while ((skb = virtqueue_detach_unused_buf(vq))) 6607 nlmsg_free(skb); 6608 } 6609 6610 vdev->config->del_vqs(vdev); 6611} 6612 6613static int hwsim_virtio_probe(struct virtio_device *vdev) 6614{ 6615 int err; 6616 unsigned long flags; 6617 6618 spin_lock_irqsave(&hwsim_virtio_lock, flags); 6619 if (hwsim_virtio_enabled) { 6620 spin_unlock_irqrestore(&hwsim_virtio_lock, flags); 6621 return -EEXIST; 6622 } 6623 spin_unlock_irqrestore(&hwsim_virtio_lock, flags); 6624 6625 err = init_vqs(vdev); 6626 if (err) 6627 return err; 6628 6629 virtio_device_ready(vdev); 6630 6631 err = fill_vq(hwsim_vqs[HWSIM_VQ_RX]); 6632 if (err) 6633 goto out_remove; 6634 6635 spin_lock_irqsave(&hwsim_virtio_lock, flags); 6636 hwsim_virtio_enabled = true; 6637 spin_unlock_irqrestore(&hwsim_virtio_lock, flags); 6638 6639 schedule_work(&hwsim_virtio_rx); 6640 return 0; 6641 6642out_remove: 6643 remove_vqs(vdev); 6644 return err; 6645} 6646 6647static void hwsim_virtio_remove(struct virtio_device *vdev) 6648{ 6649 hwsim_virtio_enabled = false; 6650 6651 cancel_work_sync(&hwsim_virtio_rx); 6652 6653 remove_vqs(vdev); 6654} 6655 6656/* MAC80211_HWSIM virtio device id table */ 6657static const struct virtio_device_id id_table[] = { 6658 { VIRTIO_ID_MAC80211_HWSIM, VIRTIO_DEV_ANY_ID }, 6659 { 0 } 6660}; 6661MODULE_DEVICE_TABLE(virtio, id_table); 6662 6663static struct virtio_driver virtio_hwsim = { 6664 .driver.name = KBUILD_MODNAME, 6665 .driver.owner = THIS_MODULE, 6666 .id_table = id_table, 6667 .probe = hwsim_virtio_probe, 6668 .remove = hwsim_virtio_remove, 6669}; 6670 6671static int hwsim_register_virtio_driver(void) 6672{ 6673 return register_virtio_driver(&virtio_hwsim); 6674} 6675 6676static void hwsim_unregister_virtio_driver(void) 6677{ 6678 unregister_virtio_driver(&virtio_hwsim); 6679} 6680#else 6681static inline int hwsim_register_virtio_driver(void) 6682{ 6683 return 0; 6684} 6685 6686static inline void hwsim_unregister_virtio_driver(void) 6687{ 6688} 6689#endif 6690 6691static int __init init_mac80211_hwsim(void) 6692{ 6693 int i, err; 6694 6695 if (radios < 0 || radios > 100) 6696 return -EINVAL; 6697 6698 if (channels < 1) 6699 return -EINVAL; 6700 6701 err = rhashtable_init(&hwsim_radios_rht, &hwsim_rht_params); 6702 if (err) 6703 return err; 6704 6705 err = register_pernet_device(&hwsim_net_ops); 6706 if (err) 6707 goto out_free_rht; 6708 6709 err = platform_driver_register(&mac80211_hwsim_driver); 6710 if (err) 6711 goto out_unregister_pernet; 6712 6713 err = hwsim_init_netlink(); 6714 if (err) 6715 goto out_unregister_driver; 6716 6717 err = hwsim_register_virtio_driver(); 6718 if (err) 6719 goto out_exit_netlink; 6720 6721 hwsim_class = class_create("mac80211_hwsim"); 6722 if (IS_ERR(hwsim_class)) { 6723 err = PTR_ERR(hwsim_class); 6724 goto out_exit_virtio; 6725 } 6726 6727 hwsim_init_s1g_channels(hwsim_channels_s1g); 6728 6729 for (i = 0; i < radios; i++) { 6730 struct hwsim_new_radio_params param = { 0 }; 6731 6732 param.channels = channels; 6733 6734 switch (regtest) { 6735 case HWSIM_REGTEST_DIFF_COUNTRY: 6736 if (i < ARRAY_SIZE(hwsim_alpha2s)) 6737 param.reg_alpha2 = hwsim_alpha2s[i]; 6738 break; 6739 case HWSIM_REGTEST_DRIVER_REG_FOLLOW: 6740 if (!i) 6741 param.reg_alpha2 = hwsim_alpha2s[0]; 6742 break; 6743 case HWSIM_REGTEST_STRICT_ALL: 6744 param.reg_strict = true; 6745 fallthrough; 6746 case HWSIM_REGTEST_DRIVER_REG_ALL: 6747 param.reg_alpha2 = hwsim_alpha2s[0]; 6748 break; 6749 case HWSIM_REGTEST_WORLD_ROAM: 6750 if (i == 0) 6751 param.regd = &hwsim_world_regdom_custom_01; 6752 break; 6753 case HWSIM_REGTEST_CUSTOM_WORLD: 6754 param.regd = &hwsim_world_regdom_custom_01; 6755 break; 6756 case HWSIM_REGTEST_CUSTOM_WORLD_2: 6757 if (i == 0) 6758 param.regd = &hwsim_world_regdom_custom_01; 6759 else if (i == 1) 6760 param.regd = &hwsim_world_regdom_custom_02; 6761 break; 6762 case HWSIM_REGTEST_STRICT_FOLLOW: 6763 if (i == 0) { 6764 param.reg_strict = true; 6765 param.reg_alpha2 = hwsim_alpha2s[0]; 6766 } 6767 break; 6768 case HWSIM_REGTEST_STRICT_AND_DRIVER_REG: 6769 if (i == 0) { 6770 param.reg_strict = true; 6771 param.reg_alpha2 = hwsim_alpha2s[0]; 6772 } else if (i == 1) { 6773 param.reg_alpha2 = hwsim_alpha2s[1]; 6774 } 6775 break; 6776 case HWSIM_REGTEST_ALL: 6777 switch (i) { 6778 case 0: 6779 param.regd = &hwsim_world_regdom_custom_01; 6780 break; 6781 case 1: 6782 param.regd = &hwsim_world_regdom_custom_02; 6783 break; 6784 case 2: 6785 param.reg_alpha2 = hwsim_alpha2s[0]; 6786 break; 6787 case 3: 6788 param.reg_alpha2 = hwsim_alpha2s[1]; 6789 break; 6790 case 4: 6791 param.reg_strict = true; 6792 param.reg_alpha2 = hwsim_alpha2s[2]; 6793 break; 6794 } 6795 break; 6796 default: 6797 break; 6798 } 6799 6800 param.p2p_device = support_p2p_device; 6801 param.mlo = mlo; 6802 param.use_chanctx = channels > 1 || mlo; 6803 param.iftypes = HWSIM_IFTYPE_SUPPORT_MASK; 6804 if (param.p2p_device) 6805 param.iftypes |= BIT(NL80211_IFTYPE_P2P_DEVICE); 6806 6807 err = mac80211_hwsim_new_radio(NULL, ¶m); 6808 if (err < 0) 6809 goto out_free_radios; 6810 } 6811 6812 hwsim_mon = alloc_netdev(0, "hwsim%d", NET_NAME_UNKNOWN, 6813 hwsim_mon_setup); 6814 if (hwsim_mon == NULL) { 6815 err = -ENOMEM; 6816 goto out_free_radios; 6817 } 6818 6819 rtnl_lock(); 6820 err = dev_alloc_name(hwsim_mon, hwsim_mon->name); 6821 if (err < 0) { 6822 rtnl_unlock(); 6823 goto out_free_mon; 6824 } 6825 6826 err = register_netdevice(hwsim_mon); 6827 if (err < 0) { 6828 rtnl_unlock(); 6829 goto out_free_mon; 6830 } 6831 rtnl_unlock(); 6832 6833 return 0; 6834 6835out_free_mon: 6836 free_netdev(hwsim_mon); 6837out_free_radios: 6838 mac80211_hwsim_free(); 6839out_exit_virtio: 6840 hwsim_unregister_virtio_driver(); 6841out_exit_netlink: 6842 hwsim_exit_netlink(); 6843out_unregister_driver: 6844 platform_driver_unregister(&mac80211_hwsim_driver); 6845out_unregister_pernet: 6846 unregister_pernet_device(&hwsim_net_ops); 6847out_free_rht: 6848 rhashtable_destroy(&hwsim_radios_rht); 6849 return err; 6850} 6851module_init(init_mac80211_hwsim); 6852 6853static void __exit exit_mac80211_hwsim(void) 6854{ 6855 pr_debug("mac80211_hwsim: unregister radios\n"); 6856 6857 hwsim_unregister_virtio_driver(); 6858 hwsim_exit_netlink(); 6859 6860 mac80211_hwsim_free(); 6861 6862 rhashtable_destroy(&hwsim_radios_rht); 6863 unregister_netdev(hwsim_mon); 6864 platform_driver_unregister(&mac80211_hwsim_driver); 6865 unregister_pernet_device(&hwsim_net_ops); 6866} 6867module_exit(exit_mac80211_hwsim); 6868