1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3 * Interface handling
4 *
5 * Copyright 2002-2005, Instant802 Networks, Inc.
6 * Copyright 2005-2006, Devicescape Software, Inc.
7 * Copyright (c) 2006 Jiri Benc <jbenc@suse.cz>
8 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
9 * Copyright 2013-2014 Intel Mobile Communications GmbH
10 * Copyright (c) 2016 Intel Deutschland GmbH
11 * Copyright (C) 2018-2025 Intel Corporation
12 */
13 #include <linux/slab.h>
14 #include <linux/kernel.h>
15 #include <linux/if_arp.h>
16 #include <linux/netdevice.h>
17 #include <linux/rtnetlink.h>
18 #include <linux/kcov.h>
19 #include <net/mac80211.h>
20 #include <net/ieee80211_radiotap.h>
21 #include "ieee80211_i.h"
22 #include "sta_info.h"
23 #include "debugfs_netdev.h"
24 #include "mesh.h"
25 #include "led.h"
26 #include "driver-ops.h"
27 #include "wme.h"
28 #include "rate.h"
29
30 /**
31 * DOC: Interface list locking
32 *
33 * The interface list in each struct ieee80211_local is protected
34 * three-fold:
35 *
36 * (1) modifications may only be done under the RTNL *and* wiphy mutex
37 * *and* iflist_mtx
38 * (2) modifications are done in an RCU manner so atomic readers
39 * can traverse the list in RCU-safe blocks.
40 *
41 * As a consequence, reads (traversals) of the list can be protected
42 * by either the RTNL, the wiphy mutex, the iflist_mtx or RCU.
43 */
44
45 static void ieee80211_iface_work(struct wiphy *wiphy, struct wiphy_work *work);
46
__ieee80211_recalc_txpower(struct ieee80211_link_data * link)47 bool __ieee80211_recalc_txpower(struct ieee80211_link_data *link)
48 {
49 struct ieee80211_chanctx_conf *chanctx_conf;
50 int power;
51
52 rcu_read_lock();
53 chanctx_conf = rcu_dereference(link->conf->chanctx_conf);
54 if (!chanctx_conf) {
55 rcu_read_unlock();
56 return false;
57 }
58
59 power = ieee80211_chandef_max_power(&chanctx_conf->def);
60 rcu_read_unlock();
61
62 if (link->user_power_level != IEEE80211_UNSET_POWER_LEVEL)
63 power = min(power, link->user_power_level);
64
65 if (link->ap_power_level != IEEE80211_UNSET_POWER_LEVEL)
66 power = min(power, link->ap_power_level);
67
68 if (power != link->conf->txpower) {
69 link->conf->txpower = power;
70 return true;
71 }
72
73 return false;
74 }
75
ieee80211_recalc_txpower(struct ieee80211_link_data * link,bool update_bss)76 void ieee80211_recalc_txpower(struct ieee80211_link_data *link,
77 bool update_bss)
78 {
79 if (__ieee80211_recalc_txpower(link) ||
80 (update_bss && ieee80211_sdata_running(link->sdata)))
81 ieee80211_link_info_change_notify(link->sdata, link,
82 BSS_CHANGED_TXPOWER);
83 }
84
__ieee80211_idle_off(struct ieee80211_local * local)85 static u32 __ieee80211_idle_off(struct ieee80211_local *local)
86 {
87 if (!(local->hw.conf.flags & IEEE80211_CONF_IDLE))
88 return 0;
89
90 local->hw.conf.flags &= ~IEEE80211_CONF_IDLE;
91 return IEEE80211_CONF_CHANGE_IDLE;
92 }
93
__ieee80211_idle_on(struct ieee80211_local * local)94 static u32 __ieee80211_idle_on(struct ieee80211_local *local)
95 {
96 if (local->hw.conf.flags & IEEE80211_CONF_IDLE)
97 return 0;
98
99 ieee80211_flush_queues(local, NULL, false);
100
101 local->hw.conf.flags |= IEEE80211_CONF_IDLE;
102 return IEEE80211_CONF_CHANGE_IDLE;
103 }
104
__ieee80211_recalc_idle(struct ieee80211_local * local,bool force_active)105 static u32 __ieee80211_recalc_idle(struct ieee80211_local *local,
106 bool force_active)
107 {
108 bool working, scanning, active;
109 unsigned int led_trig_start = 0, led_trig_stop = 0;
110
111 lockdep_assert_wiphy(local->hw.wiphy);
112
113 active = force_active ||
114 !list_empty(&local->chanctx_list) ||
115 local->monitors;
116
117 working = !local->ops->remain_on_channel &&
118 !list_empty(&local->roc_list);
119
120 scanning = test_bit(SCAN_SW_SCANNING, &local->scanning) ||
121 test_bit(SCAN_ONCHANNEL_SCANNING, &local->scanning);
122
123 if (working || scanning)
124 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_WORK;
125 else
126 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_WORK;
127
128 if (active)
129 led_trig_start |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
130 else
131 led_trig_stop |= IEEE80211_TPT_LEDTRIG_FL_CONNECTED;
132
133 ieee80211_mod_tpt_led_trig(local, led_trig_start, led_trig_stop);
134
135 if (working || scanning || active)
136 return __ieee80211_idle_off(local);
137 return __ieee80211_idle_on(local);
138 }
139
ieee80211_idle_off(struct ieee80211_local * local)140 u32 ieee80211_idle_off(struct ieee80211_local *local)
141 {
142 return __ieee80211_recalc_idle(local, true);
143 }
144
ieee80211_recalc_idle(struct ieee80211_local * local)145 void ieee80211_recalc_idle(struct ieee80211_local *local)
146 {
147 u32 change = __ieee80211_recalc_idle(local, false);
148 if (change)
149 ieee80211_hw_config(local, change);
150 }
151
ieee80211_verify_mac(struct ieee80211_sub_if_data * sdata,u8 * addr,bool check_dup)152 static int ieee80211_verify_mac(struct ieee80211_sub_if_data *sdata, u8 *addr,
153 bool check_dup)
154 {
155 struct ieee80211_local *local = sdata->local;
156 struct ieee80211_sub_if_data *iter;
157 u64 new, mask, tmp;
158 u8 *m;
159 int ret = 0;
160
161 lockdep_assert_wiphy(local->hw.wiphy);
162
163 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
164 return 0;
165
166 m = addr;
167 new = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
168 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
169 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
170
171 m = local->hw.wiphy->addr_mask;
172 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
173 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
174 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
175
176 if (!check_dup)
177 return ret;
178
179 list_for_each_entry(iter, &local->interfaces, list) {
180 if (iter == sdata)
181 continue;
182
183 if (iter->vif.type == NL80211_IFTYPE_MONITOR &&
184 !(iter->u.mntr.flags & MONITOR_FLAG_ACTIVE))
185 continue;
186
187 m = iter->vif.addr;
188 tmp = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
189 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
190 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
191
192 if ((new & ~mask) != (tmp & ~mask)) {
193 ret = -EINVAL;
194 break;
195 }
196 }
197
198 return ret;
199 }
200
ieee80211_can_powered_addr_change(struct ieee80211_sub_if_data * sdata)201 static int ieee80211_can_powered_addr_change(struct ieee80211_sub_if_data *sdata)
202 {
203 struct ieee80211_roc_work *roc;
204 struct ieee80211_local *local = sdata->local;
205 struct ieee80211_sub_if_data *scan_sdata;
206 int ret = 0;
207
208 lockdep_assert_wiphy(local->hw.wiphy);
209
210 /* To be the most flexible here we want to only limit changing the
211 * address if the specific interface is doing offchannel work or
212 * scanning.
213 */
214 if (netif_carrier_ok(sdata->dev))
215 return -EBUSY;
216
217 /* First check no ROC work is happening on this iface */
218 list_for_each_entry(roc, &local->roc_list, list) {
219 if (roc->sdata != sdata)
220 continue;
221
222 if (roc->started) {
223 ret = -EBUSY;
224 goto unlock;
225 }
226 }
227
228 /* And if this iface is scanning */
229 if (local->scanning) {
230 scan_sdata = rcu_dereference_protected(local->scan_sdata,
231 lockdep_is_held(&local->hw.wiphy->mtx));
232 if (sdata == scan_sdata)
233 ret = -EBUSY;
234 }
235
236 switch (sdata->vif.type) {
237 case NL80211_IFTYPE_STATION:
238 case NL80211_IFTYPE_P2P_CLIENT:
239 /* More interface types could be added here but changing the
240 * address while powered makes the most sense in client modes.
241 */
242 break;
243 default:
244 ret = -EOPNOTSUPP;
245 }
246
247 unlock:
248 return ret;
249 }
250
_ieee80211_change_mac(struct ieee80211_sub_if_data * sdata,void * addr)251 static int _ieee80211_change_mac(struct ieee80211_sub_if_data *sdata,
252 void *addr)
253 {
254 struct ieee80211_local *local = sdata->local;
255 struct sockaddr *sa = addr;
256 bool check_dup = true;
257 bool live = false;
258 int ret;
259
260 if (ieee80211_sdata_running(sdata)) {
261 ret = ieee80211_can_powered_addr_change(sdata);
262 if (ret)
263 return ret;
264
265 live = true;
266 }
267
268 if (sdata->vif.type == NL80211_IFTYPE_MONITOR &&
269 !(sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE))
270 check_dup = false;
271
272 ret = ieee80211_verify_mac(sdata, sa->sa_data, check_dup);
273 if (ret)
274 return ret;
275
276 if (live)
277 drv_remove_interface(local, sdata);
278 ret = eth_mac_addr(sdata->dev, sa);
279
280 if (ret == 0) {
281 memcpy(sdata->vif.addr, sa->sa_data, ETH_ALEN);
282 ether_addr_copy(sdata->vif.bss_conf.addr, sdata->vif.addr);
283 }
284
285 /* Regardless of eth_mac_addr() return we still want to add the
286 * interface back. This should not fail...
287 */
288 if (live)
289 WARN_ON(drv_add_interface(local, sdata));
290
291 return ret;
292 }
293
ieee80211_change_mac(struct net_device * dev,void * addr)294 static int ieee80211_change_mac(struct net_device *dev, void *addr)
295 {
296 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
297 struct ieee80211_local *local = sdata->local;
298
299 /*
300 * This happens during unregistration if there's a bond device
301 * active (maybe other cases?) and we must get removed from it.
302 * But we really don't care anymore if it's not registered now.
303 */
304 if (!dev->ieee80211_ptr->registered)
305 return 0;
306
307 guard(wiphy)(local->hw.wiphy);
308
309 return _ieee80211_change_mac(sdata, addr);
310 }
311
identical_mac_addr_allowed(int type1,int type2)312 static inline int identical_mac_addr_allowed(int type1, int type2)
313 {
314 return type1 == NL80211_IFTYPE_MONITOR ||
315 type2 == NL80211_IFTYPE_MONITOR ||
316 type1 == NL80211_IFTYPE_P2P_DEVICE ||
317 type2 == NL80211_IFTYPE_P2P_DEVICE ||
318 (type1 == NL80211_IFTYPE_AP && type2 == NL80211_IFTYPE_AP_VLAN) ||
319 (type1 == NL80211_IFTYPE_AP_VLAN &&
320 (type2 == NL80211_IFTYPE_AP ||
321 type2 == NL80211_IFTYPE_AP_VLAN));
322 }
323
ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype iftype)324 static int ieee80211_check_concurrent_iface(struct ieee80211_sub_if_data *sdata,
325 enum nl80211_iftype iftype)
326 {
327 struct ieee80211_local *local = sdata->local;
328 struct ieee80211_sub_if_data *nsdata;
329
330 ASSERT_RTNL();
331 lockdep_assert_wiphy(local->hw.wiphy);
332
333 /* we hold the RTNL here so can safely walk the list */
334 list_for_each_entry(nsdata, &local->interfaces, list) {
335 if (nsdata != sdata && ieee80211_sdata_running(nsdata)) {
336 /*
337 * Only OCB and monitor mode may coexist
338 */
339 if ((sdata->vif.type == NL80211_IFTYPE_OCB &&
340 nsdata->vif.type != NL80211_IFTYPE_MONITOR) ||
341 (sdata->vif.type != NL80211_IFTYPE_MONITOR &&
342 nsdata->vif.type == NL80211_IFTYPE_OCB))
343 return -EBUSY;
344
345 /*
346 * Allow only a single IBSS interface to be up at any
347 * time. This is restricted because beacon distribution
348 * cannot work properly if both are in the same IBSS.
349 *
350 * To remove this restriction we'd have to disallow them
351 * from setting the same SSID on different IBSS interfaces
352 * belonging to the same hardware. Then, however, we're
353 * faced with having to adopt two different TSF timers...
354 */
355 if (iftype == NL80211_IFTYPE_ADHOC &&
356 nsdata->vif.type == NL80211_IFTYPE_ADHOC)
357 return -EBUSY;
358 /*
359 * will not add another interface while any channel
360 * switch is active.
361 */
362 if (nsdata->vif.bss_conf.csa_active)
363 return -EBUSY;
364
365 /*
366 * The remaining checks are only performed for interfaces
367 * with the same MAC address.
368 */
369 if (!ether_addr_equal(sdata->vif.addr,
370 nsdata->vif.addr))
371 continue;
372
373 /*
374 * check whether it may have the same address
375 */
376 if (!identical_mac_addr_allowed(iftype,
377 nsdata->vif.type))
378 return -ENOTUNIQ;
379
380 /* No support for VLAN with MLO yet */
381 if (iftype == NL80211_IFTYPE_AP_VLAN &&
382 sdata->wdev.use_4addr &&
383 nsdata->vif.type == NL80211_IFTYPE_AP &&
384 nsdata->vif.valid_links)
385 return -EOPNOTSUPP;
386
387 /*
388 * can only add VLANs to enabled APs
389 */
390 if (iftype == NL80211_IFTYPE_AP_VLAN &&
391 nsdata->vif.type == NL80211_IFTYPE_AP)
392 sdata->bss = &nsdata->u.ap;
393 }
394 }
395
396 return ieee80211_check_combinations(sdata, NULL, 0, 0, -1);
397 }
398
ieee80211_check_queues(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype iftype)399 static int ieee80211_check_queues(struct ieee80211_sub_if_data *sdata,
400 enum nl80211_iftype iftype)
401 {
402 int n_queues = sdata->local->hw.queues;
403 int i;
404
405 if (iftype == NL80211_IFTYPE_NAN)
406 return 0;
407
408 if (iftype != NL80211_IFTYPE_P2P_DEVICE) {
409 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
410 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] ==
411 IEEE80211_INVAL_HW_QUEUE))
412 return -EINVAL;
413 if (WARN_ON_ONCE(sdata->vif.hw_queue[i] >=
414 n_queues))
415 return -EINVAL;
416 }
417 }
418
419 if ((iftype != NL80211_IFTYPE_AP &&
420 iftype != NL80211_IFTYPE_P2P_GO &&
421 iftype != NL80211_IFTYPE_MESH_POINT) ||
422 !ieee80211_hw_check(&sdata->local->hw, QUEUE_CONTROL)) {
423 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
424 return 0;
425 }
426
427 if (WARN_ON_ONCE(sdata->vif.cab_queue == IEEE80211_INVAL_HW_QUEUE))
428 return -EINVAL;
429
430 if (WARN_ON_ONCE(sdata->vif.cab_queue >= n_queues))
431 return -EINVAL;
432
433 return 0;
434 }
435
ieee80211_open(struct net_device * dev)436 static int ieee80211_open(struct net_device *dev)
437 {
438 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
439 int err;
440
441 /* fail early if user set an invalid address */
442 if (!is_valid_ether_addr(dev->dev_addr))
443 return -EADDRNOTAVAIL;
444
445 guard(wiphy)(sdata->local->hw.wiphy);
446
447 err = ieee80211_check_concurrent_iface(sdata, sdata->vif.type);
448 if (err)
449 return err;
450
451 return ieee80211_do_open(&sdata->wdev, true);
452 }
453
ieee80211_do_stop(struct ieee80211_sub_if_data * sdata,bool going_down)454 static void ieee80211_do_stop(struct ieee80211_sub_if_data *sdata, bool going_down)
455 {
456 struct ieee80211_local *local = sdata->local;
457 unsigned long flags;
458 struct sk_buff_head freeq;
459 struct sk_buff *skb, *tmp;
460 u32 hw_reconf_flags = 0;
461 int i, flushed;
462 struct ps_data *ps;
463 struct cfg80211_chan_def chandef;
464 bool cancel_scan;
465 struct cfg80211_nan_func *func;
466
467 lockdep_assert_wiphy(local->hw.wiphy);
468
469 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
470 synchronize_rcu(); /* flush _ieee80211_wake_txqs() */
471
472 cancel_scan = rcu_access_pointer(local->scan_sdata) == sdata;
473 if (cancel_scan)
474 ieee80211_scan_cancel(local);
475
476 ieee80211_roc_purge(local, sdata);
477
478 switch (sdata->vif.type) {
479 case NL80211_IFTYPE_STATION:
480 ieee80211_mgd_stop(sdata);
481 break;
482 case NL80211_IFTYPE_ADHOC:
483 ieee80211_ibss_stop(sdata);
484 break;
485 case NL80211_IFTYPE_MONITOR:
486 list_del_rcu(&sdata->u.mntr.list);
487 break;
488 default:
489 break;
490 }
491
492 /*
493 * Remove all stations associated with this interface.
494 *
495 * This must be done before calling ops->remove_interface()
496 * because otherwise we can later invoke ops->sta_notify()
497 * whenever the STAs are removed, and that invalidates driver
498 * assumptions about always getting a vif pointer that is valid
499 * (because if we remove a STA after ops->remove_interface()
500 * the driver will have removed the vif info already!)
501 *
502 * For AP_VLANs stations may exist since there's nothing else that
503 * would have removed them, but in other modes there shouldn't
504 * be any stations.
505 */
506 flushed = sta_info_flush(sdata, -1);
507 WARN_ON_ONCE(sdata->vif.type != NL80211_IFTYPE_AP_VLAN && flushed > 0);
508
509 /* don't count this interface for allmulti while it is down */
510 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
511 atomic_dec(&local->iff_allmultis);
512
513 if (sdata->vif.type == NL80211_IFTYPE_AP) {
514 local->fif_pspoll--;
515 local->fif_probe_req--;
516 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
517 local->fif_probe_req--;
518 }
519
520 if (sdata->dev) {
521 netif_addr_lock_bh(sdata->dev);
522 spin_lock_bh(&local->filter_lock);
523 __hw_addr_unsync(&local->mc_list, &sdata->dev->mc,
524 sdata->dev->addr_len);
525 spin_unlock_bh(&local->filter_lock);
526 netif_addr_unlock_bh(sdata->dev);
527 }
528
529 del_timer_sync(&local->dynamic_ps_timer);
530 wiphy_work_cancel(local->hw.wiphy, &local->dynamic_ps_enable_work);
531
532 WARN(ieee80211_vif_is_mld(&sdata->vif),
533 "destroying interface with valid links 0x%04x\n",
534 sdata->vif.valid_links);
535
536 sdata->vif.bss_conf.csa_active = false;
537 if (sdata->vif.type == NL80211_IFTYPE_STATION)
538 sdata->deflink.u.mgd.csa.waiting_bcn = false;
539 ieee80211_vif_unblock_queues_csa(sdata);
540
541 wiphy_work_cancel(local->hw.wiphy, &sdata->deflink.csa.finalize_work);
542 wiphy_work_cancel(local->hw.wiphy,
543 &sdata->deflink.color_change_finalize_work);
544 wiphy_delayed_work_cancel(local->hw.wiphy,
545 &sdata->deflink.dfs_cac_timer_work);
546
547 if (sdata->wdev.links[0].cac_started) {
548 chandef = sdata->vif.bss_conf.chanreq.oper;
549 WARN_ON(local->suspended);
550 ieee80211_link_release_channel(&sdata->deflink);
551 cfg80211_cac_event(sdata->dev, &chandef,
552 NL80211_RADAR_CAC_ABORTED,
553 GFP_KERNEL, 0);
554 }
555
556 if (sdata->vif.type == NL80211_IFTYPE_AP) {
557 WARN_ON(!list_empty(&sdata->u.ap.vlans));
558 } else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
559 /* remove all packets in parent bc_buf pointing to this dev */
560 ps = &sdata->bss->ps;
561
562 spin_lock_irqsave(&ps->bc_buf.lock, flags);
563 skb_queue_walk_safe(&ps->bc_buf, skb, tmp) {
564 if (skb->dev == sdata->dev) {
565 __skb_unlink(skb, &ps->bc_buf);
566 local->total_ps_buffered--;
567 ieee80211_free_txskb(&local->hw, skb);
568 }
569 }
570 spin_unlock_irqrestore(&ps->bc_buf.lock, flags);
571 }
572
573 if (going_down)
574 local->open_count--;
575
576 switch (sdata->vif.type) {
577 case NL80211_IFTYPE_AP_VLAN:
578 list_del(&sdata->u.vlan.list);
579 RCU_INIT_POINTER(sdata->vif.bss_conf.chanctx_conf, NULL);
580 /* see comment in the default case below */
581 ieee80211_free_keys(sdata, true);
582 /* no need to tell driver */
583 break;
584 case NL80211_IFTYPE_MONITOR:
585 local->monitors--;
586
587 if (!(sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE) &&
588 !ieee80211_hw_check(&local->hw, NO_VIRTUAL_MONITOR)) {
589
590 local->virt_monitors--;
591 if (local->virt_monitors == 0) {
592 local->hw.conf.flags &= ~IEEE80211_CONF_MONITOR;
593 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
594 }
595
596 ieee80211_adjust_monitor_flags(sdata, -1);
597 }
598 break;
599 case NL80211_IFTYPE_NAN:
600 /* clean all the functions */
601 spin_lock_bh(&sdata->u.nan.func_lock);
602
603 idr_for_each_entry(&sdata->u.nan.function_inst_ids, func, i) {
604 idr_remove(&sdata->u.nan.function_inst_ids, i);
605 cfg80211_free_nan_func(func);
606 }
607 idr_destroy(&sdata->u.nan.function_inst_ids);
608
609 spin_unlock_bh(&sdata->u.nan.func_lock);
610 break;
611 case NL80211_IFTYPE_P2P_DEVICE:
612 /* relies on synchronize_rcu() below */
613 RCU_INIT_POINTER(local->p2p_sdata, NULL);
614 fallthrough;
615 default:
616 wiphy_work_cancel(sdata->local->hw.wiphy, &sdata->work);
617 /*
618 * When we get here, the interface is marked down.
619 * Free the remaining keys, if there are any
620 * (which can happen in AP mode if userspace sets
621 * keys before the interface is operating)
622 *
623 * Force the key freeing to always synchronize_net()
624 * to wait for the RX path in case it is using this
625 * interface enqueuing frames at this very time on
626 * another CPU.
627 */
628 ieee80211_free_keys(sdata, true);
629 skb_queue_purge(&sdata->skb_queue);
630 skb_queue_purge(&sdata->status_queue);
631 }
632
633 /*
634 * Since ieee80211_free_txskb() may issue __dev_queue_xmit()
635 * which should be called with interrupts enabled, reclamation
636 * is done in two phases:
637 */
638 __skb_queue_head_init(&freeq);
639
640 /* unlink from local queues... */
641 spin_lock_irqsave(&local->queue_stop_reason_lock, flags);
642 for (i = 0; i < IEEE80211_MAX_QUEUES; i++) {
643 skb_queue_walk_safe(&local->pending[i], skb, tmp) {
644 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
645 if (info->control.vif == &sdata->vif) {
646 __skb_unlink(skb, &local->pending[i]);
647 __skb_queue_tail(&freeq, skb);
648 }
649 }
650 }
651 spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags);
652
653 /* ... and perform actual reclamation with interrupts enabled. */
654 skb_queue_walk_safe(&freeq, skb, tmp) {
655 __skb_unlink(skb, &freeq);
656 ieee80211_free_txskb(&local->hw, skb);
657 }
658
659 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
660 ieee80211_txq_remove_vlan(local, sdata);
661
662 sdata->bss = NULL;
663
664 if (local->open_count == 0)
665 ieee80211_clear_tx_pending(local);
666
667 sdata->vif.bss_conf.beacon_int = 0;
668
669 /*
670 * If the interface goes down while suspended, presumably because
671 * the device was unplugged and that happens before our resume,
672 * then the driver is already unconfigured and the remainder of
673 * this function isn't needed.
674 * XXX: what about WoWLAN? If the device has software state, e.g.
675 * memory allocated, it might expect teardown commands from
676 * mac80211 here?
677 */
678 if (local->suspended) {
679 WARN_ON(local->wowlan);
680 WARN_ON(rcu_access_pointer(local->monitor_sdata));
681 return;
682 }
683
684 switch (sdata->vif.type) {
685 case NL80211_IFTYPE_AP_VLAN:
686 break;
687 case NL80211_IFTYPE_MONITOR:
688 if (local->virt_monitors == 0)
689 ieee80211_del_virtual_monitor(local);
690
691 ieee80211_recalc_idle(local);
692 ieee80211_recalc_offload(local);
693
694 if (!(sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE) &&
695 !ieee80211_hw_check(&local->hw, NO_VIRTUAL_MONITOR))
696 break;
697
698 ieee80211_link_release_channel(&sdata->deflink);
699 fallthrough;
700 default:
701 if (!going_down)
702 break;
703 drv_remove_interface(local, sdata);
704
705 /* Clear private driver data to prevent reuse */
706 memset(sdata->vif.drv_priv, 0, local->hw.vif_data_size);
707 }
708
709 ieee80211_recalc_ps(local);
710
711 if (cancel_scan)
712 wiphy_delayed_work_flush(local->hw.wiphy, &local->scan_work);
713
714 if (local->open_count == 0) {
715 ieee80211_stop_device(local, false);
716
717 /* no reconfiguring after stop! */
718 return;
719 }
720
721 /* do after stop to avoid reconfiguring when we stop anyway */
722 ieee80211_configure_filter(local);
723 ieee80211_hw_config(local, hw_reconf_flags);
724
725 if (local->virt_monitors == local->open_count)
726 ieee80211_add_virtual_monitor(local);
727 }
728
ieee80211_stop_mbssid(struct ieee80211_sub_if_data * sdata)729 static void ieee80211_stop_mbssid(struct ieee80211_sub_if_data *sdata)
730 {
731 struct ieee80211_sub_if_data *tx_sdata, *non_tx_sdata, *tmp_sdata;
732 struct ieee80211_vif *tx_vif = sdata->vif.mbssid_tx_vif;
733
734 if (!tx_vif)
735 return;
736
737 tx_sdata = vif_to_sdata(tx_vif);
738 sdata->vif.mbssid_tx_vif = NULL;
739
740 list_for_each_entry_safe(non_tx_sdata, tmp_sdata,
741 &tx_sdata->local->interfaces, list) {
742 if (non_tx_sdata != sdata && non_tx_sdata != tx_sdata &&
743 non_tx_sdata->vif.mbssid_tx_vif == tx_vif &&
744 ieee80211_sdata_running(non_tx_sdata)) {
745 non_tx_sdata->vif.mbssid_tx_vif = NULL;
746 dev_close(non_tx_sdata->wdev.netdev);
747 }
748 }
749
750 if (sdata != tx_sdata && ieee80211_sdata_running(tx_sdata)) {
751 tx_sdata->vif.mbssid_tx_vif = NULL;
752 dev_close(tx_sdata->wdev.netdev);
753 }
754 }
755
ieee80211_stop(struct net_device * dev)756 static int ieee80211_stop(struct net_device *dev)
757 {
758 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
759
760 /* close dependent VLAN and MBSSID interfaces before locking wiphy */
761 if (sdata->vif.type == NL80211_IFTYPE_AP) {
762 struct ieee80211_sub_if_data *vlan, *tmpsdata;
763
764 list_for_each_entry_safe(vlan, tmpsdata, &sdata->u.ap.vlans,
765 u.vlan.list)
766 dev_close(vlan->dev);
767
768 ieee80211_stop_mbssid(sdata);
769 }
770
771 guard(wiphy)(sdata->local->hw.wiphy);
772
773 wiphy_work_cancel(sdata->local->hw.wiphy, &sdata->activate_links_work);
774
775 ieee80211_do_stop(sdata, true);
776
777 return 0;
778 }
779
ieee80211_set_multicast_list(struct net_device * dev)780 static void ieee80211_set_multicast_list(struct net_device *dev)
781 {
782 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
783 struct ieee80211_local *local = sdata->local;
784 int allmulti, sdata_allmulti;
785
786 allmulti = !!(dev->flags & IFF_ALLMULTI);
787 sdata_allmulti = !!(sdata->flags & IEEE80211_SDATA_ALLMULTI);
788
789 if (allmulti != sdata_allmulti) {
790 if (dev->flags & IFF_ALLMULTI)
791 atomic_inc(&local->iff_allmultis);
792 else
793 atomic_dec(&local->iff_allmultis);
794 sdata->flags ^= IEEE80211_SDATA_ALLMULTI;
795 }
796
797 spin_lock_bh(&local->filter_lock);
798 __hw_addr_sync(&local->mc_list, &dev->mc, dev->addr_len);
799 spin_unlock_bh(&local->filter_lock);
800 wiphy_work_queue(local->hw.wiphy, &local->reconfig_filter);
801 }
802
803 /*
804 * Called when the netdev is removed or, by the code below, before
805 * the interface type changes.
806 */
ieee80211_teardown_sdata(struct ieee80211_sub_if_data * sdata)807 static void ieee80211_teardown_sdata(struct ieee80211_sub_if_data *sdata)
808 {
809 if (WARN_ON(!list_empty(&sdata->work.entry)))
810 wiphy_work_cancel(sdata->local->hw.wiphy, &sdata->work);
811
812 /* free extra data */
813 ieee80211_free_keys(sdata, false);
814
815 ieee80211_debugfs_remove_netdev(sdata);
816
817 ieee80211_destroy_frag_cache(&sdata->frags);
818
819 if (ieee80211_vif_is_mesh(&sdata->vif))
820 ieee80211_mesh_teardown_sdata(sdata);
821
822 ieee80211_vif_clear_links(sdata);
823 ieee80211_link_stop(&sdata->deflink);
824 }
825
ieee80211_uninit(struct net_device * dev)826 static void ieee80211_uninit(struct net_device *dev)
827 {
828 ieee80211_teardown_sdata(IEEE80211_DEV_TO_SUB_IF(dev));
829 }
830
ieee80211_netdev_setup_tc(struct net_device * dev,enum tc_setup_type type,void * type_data)831 static int ieee80211_netdev_setup_tc(struct net_device *dev,
832 enum tc_setup_type type, void *type_data)
833 {
834 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
835 struct ieee80211_local *local = sdata->local;
836
837 return drv_net_setup_tc(local, sdata, dev, type, type_data);
838 }
839
840 static const struct net_device_ops ieee80211_dataif_ops = {
841 .ndo_open = ieee80211_open,
842 .ndo_stop = ieee80211_stop,
843 .ndo_uninit = ieee80211_uninit,
844 .ndo_start_xmit = ieee80211_subif_start_xmit,
845 .ndo_set_rx_mode = ieee80211_set_multicast_list,
846 .ndo_set_mac_address = ieee80211_change_mac,
847 .ndo_setup_tc = ieee80211_netdev_setup_tc,
848 };
849
ieee80211_monitor_select_queue(struct net_device * dev,struct sk_buff * skb,struct net_device * sb_dev)850 static u16 ieee80211_monitor_select_queue(struct net_device *dev,
851 struct sk_buff *skb,
852 struct net_device *sb_dev)
853 {
854 struct ieee80211_sub_if_data *sdata = IEEE80211_DEV_TO_SUB_IF(dev);
855 struct ieee80211_local *local = sdata->local;
856 struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
857 struct ieee80211_hdr *hdr;
858 int len_rthdr;
859
860 if (local->hw.queues < IEEE80211_NUM_ACS)
861 return 0;
862
863 /* reset flags and info before parsing radiotap header */
864 memset(info, 0, sizeof(*info));
865
866 if (!ieee80211_parse_tx_radiotap(skb, dev))
867 return 0; /* doesn't matter, frame will be dropped */
868
869 len_rthdr = ieee80211_get_radiotap_len(skb->data);
870 hdr = (struct ieee80211_hdr *)(skb->data + len_rthdr);
871 if (skb->len < len_rthdr + 2 ||
872 skb->len < len_rthdr + ieee80211_hdrlen(hdr->frame_control))
873 return 0; /* doesn't matter, frame will be dropped */
874
875 return ieee80211_select_queue_80211(sdata, skb, hdr);
876 }
877
878 static const struct net_device_ops ieee80211_monitorif_ops = {
879 .ndo_open = ieee80211_open,
880 .ndo_stop = ieee80211_stop,
881 .ndo_uninit = ieee80211_uninit,
882 .ndo_start_xmit = ieee80211_monitor_start_xmit,
883 .ndo_set_rx_mode = ieee80211_set_multicast_list,
884 .ndo_set_mac_address = ieee80211_change_mac,
885 .ndo_select_queue = ieee80211_monitor_select_queue,
886 };
887
ieee80211_netdev_fill_forward_path(struct net_device_path_ctx * ctx,struct net_device_path * path)888 static int ieee80211_netdev_fill_forward_path(struct net_device_path_ctx *ctx,
889 struct net_device_path *path)
890 {
891 struct ieee80211_sub_if_data *sdata;
892 struct ieee80211_local *local;
893 struct sta_info *sta;
894 int ret = -ENOENT;
895
896 sdata = IEEE80211_DEV_TO_SUB_IF(ctx->dev);
897 local = sdata->local;
898
899 if (!local->ops->net_fill_forward_path)
900 return -EOPNOTSUPP;
901
902 rcu_read_lock();
903 switch (sdata->vif.type) {
904 case NL80211_IFTYPE_AP_VLAN:
905 sta = rcu_dereference(sdata->u.vlan.sta);
906 if (sta)
907 break;
908 if (sdata->wdev.use_4addr)
909 goto out;
910 if (is_multicast_ether_addr(ctx->daddr))
911 goto out;
912 sta = sta_info_get_bss(sdata, ctx->daddr);
913 break;
914 case NL80211_IFTYPE_AP:
915 if (is_multicast_ether_addr(ctx->daddr))
916 goto out;
917 sta = sta_info_get(sdata, ctx->daddr);
918 break;
919 case NL80211_IFTYPE_STATION:
920 if (sdata->wdev.wiphy->flags & WIPHY_FLAG_SUPPORTS_TDLS) {
921 sta = sta_info_get(sdata, ctx->daddr);
922 if (sta && test_sta_flag(sta, WLAN_STA_TDLS_PEER)) {
923 if (!test_sta_flag(sta, WLAN_STA_TDLS_PEER_AUTH))
924 goto out;
925
926 break;
927 }
928 }
929
930 sta = sta_info_get(sdata, sdata->deflink.u.mgd.bssid);
931 break;
932 default:
933 goto out;
934 }
935
936 if (!sta)
937 goto out;
938
939 ret = drv_net_fill_forward_path(local, sdata, &sta->sta, ctx, path);
940 out:
941 rcu_read_unlock();
942
943 return ret;
944 }
945
946 static const struct net_device_ops ieee80211_dataif_8023_ops = {
947 .ndo_open = ieee80211_open,
948 .ndo_stop = ieee80211_stop,
949 .ndo_uninit = ieee80211_uninit,
950 .ndo_start_xmit = ieee80211_subif_start_xmit_8023,
951 .ndo_set_rx_mode = ieee80211_set_multicast_list,
952 .ndo_set_mac_address = ieee80211_change_mac,
953 .ndo_fill_forward_path = ieee80211_netdev_fill_forward_path,
954 .ndo_setup_tc = ieee80211_netdev_setup_tc,
955 };
956
ieee80211_iftype_supports_hdr_offload(enum nl80211_iftype iftype)957 static bool ieee80211_iftype_supports_hdr_offload(enum nl80211_iftype iftype)
958 {
959 switch (iftype) {
960 /* P2P GO and client are mapped to AP/STATION types */
961 case NL80211_IFTYPE_AP:
962 case NL80211_IFTYPE_STATION:
963 return true;
964 default:
965 return false;
966 }
967 }
968
ieee80211_set_sdata_offload_flags(struct ieee80211_sub_if_data * sdata)969 static bool ieee80211_set_sdata_offload_flags(struct ieee80211_sub_if_data *sdata)
970 {
971 struct ieee80211_local *local = sdata->local;
972 u32 flags;
973
974 flags = sdata->vif.offload_flags;
975
976 if (ieee80211_hw_check(&local->hw, SUPPORTS_TX_ENCAP_OFFLOAD) &&
977 ieee80211_iftype_supports_hdr_offload(sdata->vif.type)) {
978 flags |= IEEE80211_OFFLOAD_ENCAP_ENABLED;
979
980 if (!ieee80211_hw_check(&local->hw, SUPPORTS_TX_FRAG) &&
981 local->hw.wiphy->frag_threshold != (u32)-1)
982 flags &= ~IEEE80211_OFFLOAD_ENCAP_ENABLED;
983
984 if (local->virt_monitors)
985 flags &= ~IEEE80211_OFFLOAD_ENCAP_ENABLED;
986 } else {
987 flags &= ~IEEE80211_OFFLOAD_ENCAP_ENABLED;
988 }
989
990 if (ieee80211_hw_check(&local->hw, SUPPORTS_RX_DECAP_OFFLOAD) &&
991 ieee80211_iftype_supports_hdr_offload(sdata->vif.type)) {
992 flags |= IEEE80211_OFFLOAD_DECAP_ENABLED;
993
994 if (local->virt_monitors &&
995 !ieee80211_hw_check(&local->hw, SUPPORTS_CONC_MON_RX_DECAP))
996 flags &= ~IEEE80211_OFFLOAD_DECAP_ENABLED;
997 } else {
998 flags &= ~IEEE80211_OFFLOAD_DECAP_ENABLED;
999 }
1000
1001 if (sdata->vif.offload_flags == flags)
1002 return false;
1003
1004 sdata->vif.offload_flags = flags;
1005 ieee80211_check_fast_rx_iface(sdata);
1006 return true;
1007 }
1008
ieee80211_set_vif_encap_ops(struct ieee80211_sub_if_data * sdata)1009 static void ieee80211_set_vif_encap_ops(struct ieee80211_sub_if_data *sdata)
1010 {
1011 struct ieee80211_local *local = sdata->local;
1012 struct ieee80211_sub_if_data *bss = sdata;
1013 bool enabled;
1014
1015 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN) {
1016 if (!sdata->bss)
1017 return;
1018
1019 bss = container_of(sdata->bss, struct ieee80211_sub_if_data, u.ap);
1020 }
1021
1022 if (!ieee80211_hw_check(&local->hw, SUPPORTS_TX_ENCAP_OFFLOAD) ||
1023 !ieee80211_iftype_supports_hdr_offload(bss->vif.type))
1024 return;
1025
1026 enabled = bss->vif.offload_flags & IEEE80211_OFFLOAD_ENCAP_ENABLED;
1027 if (sdata->wdev.use_4addr &&
1028 !(bss->vif.offload_flags & IEEE80211_OFFLOAD_ENCAP_4ADDR))
1029 enabled = false;
1030
1031 sdata->dev->netdev_ops = enabled ? &ieee80211_dataif_8023_ops :
1032 &ieee80211_dataif_ops;
1033 }
1034
ieee80211_recalc_sdata_offload(struct ieee80211_sub_if_data * sdata)1035 static void ieee80211_recalc_sdata_offload(struct ieee80211_sub_if_data *sdata)
1036 {
1037 struct ieee80211_local *local = sdata->local;
1038 struct ieee80211_sub_if_data *vsdata;
1039
1040 if (ieee80211_set_sdata_offload_flags(sdata)) {
1041 drv_update_vif_offload(local, sdata);
1042 ieee80211_set_vif_encap_ops(sdata);
1043 }
1044
1045 list_for_each_entry(vsdata, &local->interfaces, list) {
1046 if (vsdata->vif.type != NL80211_IFTYPE_AP_VLAN ||
1047 vsdata->bss != &sdata->u.ap)
1048 continue;
1049
1050 ieee80211_set_vif_encap_ops(vsdata);
1051 }
1052 }
1053
ieee80211_recalc_offload(struct ieee80211_local * local)1054 void ieee80211_recalc_offload(struct ieee80211_local *local)
1055 {
1056 struct ieee80211_sub_if_data *sdata;
1057
1058 if (!ieee80211_hw_check(&local->hw, SUPPORTS_TX_ENCAP_OFFLOAD))
1059 return;
1060
1061 lockdep_assert_wiphy(local->hw.wiphy);
1062
1063 list_for_each_entry(sdata, &local->interfaces, list) {
1064 if (!ieee80211_sdata_running(sdata))
1065 continue;
1066
1067 ieee80211_recalc_sdata_offload(sdata);
1068 }
1069 }
1070
ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data * sdata,const int offset)1071 void ieee80211_adjust_monitor_flags(struct ieee80211_sub_if_data *sdata,
1072 const int offset)
1073 {
1074 struct ieee80211_local *local = sdata->local;
1075 u32 flags = sdata->u.mntr.flags;
1076
1077 #define ADJUST(_f, _s) do { \
1078 if (flags & MONITOR_FLAG_##_f) \
1079 local->fif_##_s += offset; \
1080 } while (0)
1081
1082 ADJUST(FCSFAIL, fcsfail);
1083 ADJUST(PLCPFAIL, plcpfail);
1084 ADJUST(CONTROL, control);
1085 ADJUST(CONTROL, pspoll);
1086 ADJUST(OTHER_BSS, other_bss);
1087 if (!(flags & MONITOR_FLAG_SKIP_TX))
1088 local->tx_mntrs += offset;
1089
1090 #undef ADJUST
1091 }
1092
ieee80211_set_default_queues(struct ieee80211_sub_if_data * sdata)1093 static void ieee80211_set_default_queues(struct ieee80211_sub_if_data *sdata)
1094 {
1095 struct ieee80211_local *local = sdata->local;
1096 int i;
1097
1098 for (i = 0; i < IEEE80211_NUM_ACS; i++) {
1099 if (ieee80211_hw_check(&local->hw, QUEUE_CONTROL))
1100 sdata->vif.hw_queue[i] = IEEE80211_INVAL_HW_QUEUE;
1101 else if (local->hw.queues >= IEEE80211_NUM_ACS)
1102 sdata->vif.hw_queue[i] = i;
1103 else
1104 sdata->vif.hw_queue[i] = 0;
1105 }
1106 sdata->vif.cab_queue = IEEE80211_INVAL_HW_QUEUE;
1107 }
1108
ieee80211_sdata_init(struct ieee80211_local * local,struct ieee80211_sub_if_data * sdata)1109 static void ieee80211_sdata_init(struct ieee80211_local *local,
1110 struct ieee80211_sub_if_data *sdata)
1111 {
1112 sdata->local = local;
1113
1114 /*
1115 * Initialize the default link, so we can use link_id 0 for non-MLD,
1116 * and that continues to work for non-MLD-aware drivers that use just
1117 * vif.bss_conf instead of vif.link_conf.
1118 *
1119 * Note that we never change this, so if link ID 0 isn't used in an
1120 * MLD connection, we get a separate allocation for it.
1121 */
1122 ieee80211_link_init(sdata, -1, &sdata->deflink, &sdata->vif.bss_conf);
1123 }
1124
ieee80211_add_virtual_monitor(struct ieee80211_local * local)1125 int ieee80211_add_virtual_monitor(struct ieee80211_local *local)
1126 {
1127 struct ieee80211_sub_if_data *sdata;
1128 int ret;
1129
1130 ASSERT_RTNL();
1131 lockdep_assert_wiphy(local->hw.wiphy);
1132
1133 if (local->monitor_sdata ||
1134 ieee80211_hw_check(&local->hw, NO_VIRTUAL_MONITOR))
1135 return 0;
1136
1137 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size, GFP_KERNEL);
1138 if (!sdata)
1139 return -ENOMEM;
1140
1141 /* set up data */
1142 sdata->vif.type = NL80211_IFTYPE_MONITOR;
1143 snprintf(sdata->name, IFNAMSIZ, "%s-monitor",
1144 wiphy_name(local->hw.wiphy));
1145 sdata->wdev.iftype = NL80211_IFTYPE_MONITOR;
1146 sdata->wdev.wiphy = local->hw.wiphy;
1147
1148 ieee80211_sdata_init(local, sdata);
1149
1150 ieee80211_set_default_queues(sdata);
1151
1152 if (ieee80211_hw_check(&local->hw, WANT_MONITOR_VIF)) {
1153 ret = drv_add_interface(local, sdata);
1154 if (WARN_ON(ret)) {
1155 /* ok .. stupid driver, it asked for this! */
1156 kfree(sdata);
1157 return ret;
1158 }
1159 }
1160
1161 set_bit(SDATA_STATE_RUNNING, &sdata->state);
1162
1163 ret = ieee80211_check_queues(sdata, NL80211_IFTYPE_MONITOR);
1164 if (ret) {
1165 kfree(sdata);
1166 return ret;
1167 }
1168
1169 mutex_lock(&local->iflist_mtx);
1170 rcu_assign_pointer(local->monitor_sdata, sdata);
1171 mutex_unlock(&local->iflist_mtx);
1172
1173 ret = ieee80211_link_use_channel(&sdata->deflink, &local->monitor_chanreq,
1174 IEEE80211_CHANCTX_EXCLUSIVE);
1175 if (ret) {
1176 mutex_lock(&local->iflist_mtx);
1177 RCU_INIT_POINTER(local->monitor_sdata, NULL);
1178 mutex_unlock(&local->iflist_mtx);
1179 synchronize_net();
1180 drv_remove_interface(local, sdata);
1181 kfree(sdata);
1182 return ret;
1183 }
1184
1185 skb_queue_head_init(&sdata->skb_queue);
1186 skb_queue_head_init(&sdata->status_queue);
1187 wiphy_work_init(&sdata->work, ieee80211_iface_work);
1188
1189 return 0;
1190 }
1191
ieee80211_del_virtual_monitor(struct ieee80211_local * local)1192 void ieee80211_del_virtual_monitor(struct ieee80211_local *local)
1193 {
1194 struct ieee80211_sub_if_data *sdata;
1195
1196 if (ieee80211_hw_check(&local->hw, NO_VIRTUAL_MONITOR))
1197 return;
1198
1199 ASSERT_RTNL();
1200 lockdep_assert_wiphy(local->hw.wiphy);
1201
1202 mutex_lock(&local->iflist_mtx);
1203
1204 sdata = rcu_dereference_protected(local->monitor_sdata,
1205 lockdep_is_held(&local->iflist_mtx));
1206 if (!sdata) {
1207 mutex_unlock(&local->iflist_mtx);
1208 return;
1209 }
1210
1211 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
1212 ieee80211_link_release_channel(&sdata->deflink);
1213
1214 if (ieee80211_hw_check(&local->hw, WANT_MONITOR_VIF))
1215 drv_remove_interface(local, sdata);
1216
1217 RCU_INIT_POINTER(local->monitor_sdata, NULL);
1218 mutex_unlock(&local->iflist_mtx);
1219
1220 synchronize_net();
1221
1222 kfree(sdata);
1223 }
1224
1225 /*
1226 * NOTE: Be very careful when changing this function, it must NOT return
1227 * an error on interface type changes that have been pre-checked, so most
1228 * checks should be in ieee80211_check_concurrent_iface.
1229 */
ieee80211_do_open(struct wireless_dev * wdev,bool coming_up)1230 int ieee80211_do_open(struct wireless_dev *wdev, bool coming_up)
1231 {
1232 struct ieee80211_sub_if_data *sdata = IEEE80211_WDEV_TO_SUB_IF(wdev);
1233 struct net_device *dev = wdev->netdev;
1234 struct ieee80211_local *local = sdata->local;
1235 u64 changed = 0;
1236 int res;
1237 u32 hw_reconf_flags = 0;
1238
1239 lockdep_assert_wiphy(local->hw.wiphy);
1240
1241 switch (sdata->vif.type) {
1242 case NL80211_IFTYPE_AP_VLAN: {
1243 struct ieee80211_sub_if_data *master;
1244
1245 if (!sdata->bss)
1246 return -ENOLINK;
1247
1248 list_add(&sdata->u.vlan.list, &sdata->bss->vlans);
1249
1250 master = container_of(sdata->bss,
1251 struct ieee80211_sub_if_data, u.ap);
1252 sdata->control_port_protocol =
1253 master->control_port_protocol;
1254 sdata->control_port_no_encrypt =
1255 master->control_port_no_encrypt;
1256 sdata->control_port_over_nl80211 =
1257 master->control_port_over_nl80211;
1258 sdata->control_port_no_preauth =
1259 master->control_port_no_preauth;
1260 sdata->vif.cab_queue = master->vif.cab_queue;
1261 memcpy(sdata->vif.hw_queue, master->vif.hw_queue,
1262 sizeof(sdata->vif.hw_queue));
1263 sdata->vif.bss_conf.chanreq = master->vif.bss_conf.chanreq;
1264
1265 sdata->crypto_tx_tailroom_needed_cnt +=
1266 master->crypto_tx_tailroom_needed_cnt;
1267
1268 break;
1269 }
1270 case NL80211_IFTYPE_AP:
1271 sdata->bss = &sdata->u.ap;
1272 break;
1273 case NL80211_IFTYPE_MESH_POINT:
1274 case NL80211_IFTYPE_STATION:
1275 case NL80211_IFTYPE_MONITOR:
1276 case NL80211_IFTYPE_ADHOC:
1277 case NL80211_IFTYPE_P2P_DEVICE:
1278 case NL80211_IFTYPE_OCB:
1279 case NL80211_IFTYPE_NAN:
1280 /* no special treatment */
1281 break;
1282 case NL80211_IFTYPE_UNSPECIFIED:
1283 case NUM_NL80211_IFTYPES:
1284 case NL80211_IFTYPE_P2P_CLIENT:
1285 case NL80211_IFTYPE_P2P_GO:
1286 case NL80211_IFTYPE_WDS:
1287 /* cannot happen */
1288 WARN_ON(1);
1289 break;
1290 }
1291
1292 if (local->open_count == 0) {
1293 /* here we can consider everything in good order (again) */
1294 local->reconfig_failure = false;
1295
1296 res = drv_start(local);
1297 if (res)
1298 goto err_del_bss;
1299 ieee80211_led_radio(local, true);
1300 ieee80211_mod_tpt_led_trig(local,
1301 IEEE80211_TPT_LEDTRIG_FL_RADIO, 0);
1302 }
1303
1304 /*
1305 * Copy the hopefully now-present MAC address to
1306 * this interface, if it has the special null one.
1307 */
1308 if (dev && is_zero_ether_addr(dev->dev_addr)) {
1309 eth_hw_addr_set(dev, local->hw.wiphy->perm_addr);
1310 memcpy(dev->perm_addr, dev->dev_addr, ETH_ALEN);
1311
1312 if (!is_valid_ether_addr(dev->dev_addr)) {
1313 res = -EADDRNOTAVAIL;
1314 goto err_stop;
1315 }
1316 }
1317
1318 sdata->vif.addr_valid = sdata->vif.type != NL80211_IFTYPE_MONITOR ||
1319 (sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE);
1320 switch (sdata->vif.type) {
1321 case NL80211_IFTYPE_AP_VLAN:
1322 /* no need to tell driver, but set carrier and chanctx */
1323 if (sdata->bss->active) {
1324 ieee80211_link_vlan_copy_chanctx(&sdata->deflink);
1325 netif_carrier_on(dev);
1326 ieee80211_set_vif_encap_ops(sdata);
1327 } else {
1328 netif_carrier_off(dev);
1329 }
1330 break;
1331 case NL80211_IFTYPE_MONITOR:
1332 if ((sdata->u.mntr.flags & MONITOR_FLAG_ACTIVE) ||
1333 ieee80211_hw_check(&local->hw, NO_VIRTUAL_MONITOR)) {
1334 res = drv_add_interface(local, sdata);
1335 if (res)
1336 goto err_stop;
1337 } else {
1338 if (local->virt_monitors == 0 && local->open_count == 0) {
1339 res = ieee80211_add_virtual_monitor(local);
1340 if (res)
1341 goto err_stop;
1342 }
1343 local->virt_monitors++;
1344
1345 /* must be before the call to ieee80211_configure_filter */
1346 if (local->virt_monitors == 1) {
1347 local->hw.conf.flags |= IEEE80211_CONF_MONITOR;
1348 hw_reconf_flags |= IEEE80211_CONF_CHANGE_MONITOR;
1349 }
1350 }
1351
1352 local->monitors++;
1353
1354 ieee80211_adjust_monitor_flags(sdata, 1);
1355 ieee80211_configure_filter(local);
1356 ieee80211_recalc_offload(local);
1357 ieee80211_recalc_idle(local);
1358
1359 netif_carrier_on(dev);
1360 break;
1361 default:
1362 if (coming_up) {
1363 ieee80211_del_virtual_monitor(local);
1364 ieee80211_set_sdata_offload_flags(sdata);
1365
1366 res = drv_add_interface(local, sdata);
1367 if (res)
1368 goto err_stop;
1369
1370 ieee80211_set_vif_encap_ops(sdata);
1371 res = ieee80211_check_queues(sdata,
1372 ieee80211_vif_type_p2p(&sdata->vif));
1373 if (res)
1374 goto err_del_interface;
1375 }
1376
1377 if (sdata->vif.type == NL80211_IFTYPE_AP) {
1378 local->fif_pspoll++;
1379 local->fif_probe_req++;
1380
1381 ieee80211_configure_filter(local);
1382 } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
1383 local->fif_probe_req++;
1384 }
1385
1386 if (sdata->vif.probe_req_reg)
1387 drv_config_iface_filter(local, sdata,
1388 FIF_PROBE_REQ,
1389 FIF_PROBE_REQ);
1390
1391 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE &&
1392 sdata->vif.type != NL80211_IFTYPE_NAN)
1393 changed |= ieee80211_reset_erp_info(sdata);
1394 ieee80211_link_info_change_notify(sdata, &sdata->deflink,
1395 changed);
1396
1397 switch (sdata->vif.type) {
1398 case NL80211_IFTYPE_STATION:
1399 case NL80211_IFTYPE_ADHOC:
1400 case NL80211_IFTYPE_AP:
1401 case NL80211_IFTYPE_MESH_POINT:
1402 case NL80211_IFTYPE_OCB:
1403 netif_carrier_off(dev);
1404 break;
1405 case NL80211_IFTYPE_P2P_DEVICE:
1406 case NL80211_IFTYPE_NAN:
1407 break;
1408 default:
1409 /* not reached */
1410 WARN_ON(1);
1411 }
1412
1413 /*
1414 * Set default queue parameters so drivers don't
1415 * need to initialise the hardware if the hardware
1416 * doesn't start up with sane defaults.
1417 * Enable QoS for anything but station interfaces.
1418 */
1419 ieee80211_set_wmm_default(&sdata->deflink, true,
1420 sdata->vif.type != NL80211_IFTYPE_STATION);
1421 }
1422
1423 switch (sdata->vif.type) {
1424 case NL80211_IFTYPE_P2P_DEVICE:
1425 rcu_assign_pointer(local->p2p_sdata, sdata);
1426 break;
1427 case NL80211_IFTYPE_MONITOR:
1428 list_add_tail_rcu(&sdata->u.mntr.list, &local->mon_list);
1429 break;
1430 default:
1431 break;
1432 }
1433
1434 /*
1435 * set_multicast_list will be invoked by the networking core
1436 * which will check whether any increments here were done in
1437 * error and sync them down to the hardware as filter flags.
1438 */
1439 if (sdata->flags & IEEE80211_SDATA_ALLMULTI)
1440 atomic_inc(&local->iff_allmultis);
1441
1442 if (coming_up)
1443 local->open_count++;
1444
1445 if (local->open_count == 1)
1446 ieee80211_hw_conf_init(local);
1447 else if (hw_reconf_flags)
1448 ieee80211_hw_config(local, hw_reconf_flags);
1449
1450 ieee80211_recalc_ps(local);
1451
1452 set_bit(SDATA_STATE_RUNNING, &sdata->state);
1453
1454 return 0;
1455 err_del_interface:
1456 drv_remove_interface(local, sdata);
1457 err_stop:
1458 if (!local->open_count)
1459 drv_stop(local, false);
1460 err_del_bss:
1461 sdata->bss = NULL;
1462 if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
1463 list_del(&sdata->u.vlan.list);
1464 /* might already be clear but that doesn't matter */
1465 clear_bit(SDATA_STATE_RUNNING, &sdata->state);
1466 return res;
1467 }
1468
ieee80211_if_setup(struct net_device * dev)1469 static void ieee80211_if_setup(struct net_device *dev)
1470 {
1471 ether_setup(dev);
1472 dev->priv_flags &= ~IFF_TX_SKB_SHARING;
1473 dev->priv_flags |= IFF_NO_QUEUE;
1474 dev->netdev_ops = &ieee80211_dataif_ops;
1475 dev->needs_free_netdev = true;
1476 }
1477
ieee80211_iface_process_skb(struct ieee80211_local * local,struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)1478 static void ieee80211_iface_process_skb(struct ieee80211_local *local,
1479 struct ieee80211_sub_if_data *sdata,
1480 struct sk_buff *skb)
1481 {
1482 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1483
1484 lockdep_assert_wiphy(local->hw.wiphy);
1485
1486 if (ieee80211_is_action(mgmt->frame_control) &&
1487 mgmt->u.action.category == WLAN_CATEGORY_BACK) {
1488 struct sta_info *sta;
1489 int len = skb->len;
1490
1491 sta = sta_info_get_bss(sdata, mgmt->sa);
1492 if (sta) {
1493 switch (mgmt->u.action.u.addba_req.action_code) {
1494 case WLAN_ACTION_ADDBA_REQ:
1495 ieee80211_process_addba_request(local, sta,
1496 mgmt, len);
1497 break;
1498 case WLAN_ACTION_ADDBA_RESP:
1499 ieee80211_process_addba_resp(local, sta,
1500 mgmt, len);
1501 break;
1502 case WLAN_ACTION_DELBA:
1503 ieee80211_process_delba(sdata, sta,
1504 mgmt, len);
1505 break;
1506 default:
1507 WARN_ON(1);
1508 break;
1509 }
1510 }
1511 } else if (ieee80211_is_action(mgmt->frame_control) &&
1512 mgmt->u.action.category == WLAN_CATEGORY_VHT) {
1513 switch (mgmt->u.action.u.vht_group_notif.action_code) {
1514 case WLAN_VHT_ACTION_OPMODE_NOTIF: {
1515 struct ieee80211_rx_status *status;
1516 enum nl80211_band band;
1517 struct sta_info *sta;
1518 u8 opmode;
1519
1520 status = IEEE80211_SKB_RXCB(skb);
1521 band = status->band;
1522 opmode = mgmt->u.action.u.vht_opmode_notif.operating_mode;
1523
1524 sta = sta_info_get_bss(sdata, mgmt->sa);
1525
1526 if (sta)
1527 ieee80211_vht_handle_opmode(sdata,
1528 &sta->deflink,
1529 opmode, band);
1530
1531 break;
1532 }
1533 case WLAN_VHT_ACTION_GROUPID_MGMT:
1534 ieee80211_process_mu_groups(sdata, &sdata->deflink,
1535 mgmt);
1536 break;
1537 default:
1538 WARN_ON(1);
1539 break;
1540 }
1541 } else if (ieee80211_is_action(mgmt->frame_control) &&
1542 mgmt->u.action.category == WLAN_CATEGORY_S1G) {
1543 switch (mgmt->u.action.u.s1g.action_code) {
1544 case WLAN_S1G_TWT_TEARDOWN:
1545 case WLAN_S1G_TWT_SETUP:
1546 ieee80211_s1g_rx_twt_action(sdata, skb);
1547 break;
1548 default:
1549 break;
1550 }
1551 } else if (ieee80211_is_action(mgmt->frame_control) &&
1552 mgmt->u.action.category == WLAN_CATEGORY_PROTECTED_EHT) {
1553 if (sdata->vif.type == NL80211_IFTYPE_STATION) {
1554 switch (mgmt->u.action.u.ttlm_req.action_code) {
1555 case WLAN_PROTECTED_EHT_ACTION_TTLM_REQ:
1556 ieee80211_process_neg_ttlm_req(sdata, mgmt,
1557 skb->len);
1558 break;
1559 case WLAN_PROTECTED_EHT_ACTION_TTLM_RES:
1560 ieee80211_process_neg_ttlm_res(sdata, mgmt,
1561 skb->len);
1562 break;
1563 case WLAN_PROTECTED_EHT_ACTION_TTLM_TEARDOWN:
1564 ieee80211_process_ttlm_teardown(sdata);
1565 break;
1566 case WLAN_PROTECTED_EHT_ACTION_LINK_RECONFIG_RESP:
1567 ieee80211_process_ml_reconf_resp(sdata, mgmt,
1568 skb->len);
1569 break;
1570 case WLAN_PROTECTED_EHT_ACTION_EPCS_ENABLE_RESP:
1571 ieee80211_process_epcs_ena_resp(sdata, mgmt,
1572 skb->len);
1573 break;
1574 case WLAN_PROTECTED_EHT_ACTION_EPCS_ENABLE_TEARDOWN:
1575 ieee80211_process_epcs_teardown(sdata, mgmt,
1576 skb->len);
1577 break;
1578 default:
1579 break;
1580 }
1581 }
1582 } else if (ieee80211_is_ext(mgmt->frame_control)) {
1583 if (sdata->vif.type == NL80211_IFTYPE_STATION)
1584 ieee80211_sta_rx_queued_ext(sdata, skb);
1585 else
1586 WARN_ON(1);
1587 } else if (ieee80211_is_data_qos(mgmt->frame_control)) {
1588 struct ieee80211_hdr *hdr = (void *)mgmt;
1589 struct sta_info *sta;
1590
1591 /*
1592 * So the frame isn't mgmt, but frame_control
1593 * is at the right place anyway, of course, so
1594 * the if statement is correct.
1595 *
1596 * Warn if we have other data frame types here,
1597 * they must not get here.
1598 */
1599 WARN_ON(hdr->frame_control &
1600 cpu_to_le16(IEEE80211_STYPE_NULLFUNC));
1601 WARN_ON(!(hdr->seq_ctrl &
1602 cpu_to_le16(IEEE80211_SCTL_FRAG)));
1603 /*
1604 * This was a fragment of a frame, received while
1605 * a block-ack session was active. That cannot be
1606 * right, so terminate the session.
1607 */
1608 sta = sta_info_get_bss(sdata, mgmt->sa);
1609 if (sta) {
1610 u16 tid = ieee80211_get_tid(hdr);
1611
1612 __ieee80211_stop_rx_ba_session(
1613 sta, tid, WLAN_BACK_RECIPIENT,
1614 WLAN_REASON_QSTA_REQUIRE_SETUP,
1615 true);
1616 }
1617 } else switch (sdata->vif.type) {
1618 case NL80211_IFTYPE_STATION:
1619 ieee80211_sta_rx_queued_mgmt(sdata, skb);
1620 break;
1621 case NL80211_IFTYPE_ADHOC:
1622 ieee80211_ibss_rx_queued_mgmt(sdata, skb);
1623 break;
1624 case NL80211_IFTYPE_MESH_POINT:
1625 if (!ieee80211_vif_is_mesh(&sdata->vif))
1626 break;
1627 ieee80211_mesh_rx_queued_mgmt(sdata, skb);
1628 break;
1629 default:
1630 WARN(1, "frame for unexpected interface type");
1631 break;
1632 }
1633 }
1634
ieee80211_iface_process_status(struct ieee80211_sub_if_data * sdata,struct sk_buff * skb)1635 static void ieee80211_iface_process_status(struct ieee80211_sub_if_data *sdata,
1636 struct sk_buff *skb)
1637 {
1638 struct ieee80211_mgmt *mgmt = (void *)skb->data;
1639
1640 if (ieee80211_is_action(mgmt->frame_control) &&
1641 mgmt->u.action.category == WLAN_CATEGORY_S1G) {
1642 switch (mgmt->u.action.u.s1g.action_code) {
1643 case WLAN_S1G_TWT_TEARDOWN:
1644 case WLAN_S1G_TWT_SETUP:
1645 ieee80211_s1g_status_twt_action(sdata, skb);
1646 break;
1647 default:
1648 break;
1649 }
1650 }
1651 }
1652
ieee80211_iface_work(struct wiphy * wiphy,struct wiphy_work * work)1653 static void ieee80211_iface_work(struct wiphy *wiphy, struct wiphy_work *work)
1654 {
1655 struct ieee80211_sub_if_data *sdata =
1656 container_of(work, struct ieee80211_sub_if_data, work);
1657 struct ieee80211_local *local = sdata->local;
1658 struct sk_buff *skb;
1659
1660 if (!ieee80211_sdata_running(sdata))
1661 return;
1662
1663 if (test_bit(SCAN_SW_SCANNING, &local->scanning))
1664 return;
1665
1666 if (!ieee80211_can_run_worker(local))
1667 return;
1668
1669 /* first process frames */
1670 while ((skb = skb_dequeue(&sdata->skb_queue))) {
1671 kcov_remote_start_common(skb_get_kcov_handle(skb));
1672
1673 if (skb->protocol == cpu_to_be16(ETH_P_TDLS))
1674 ieee80211_process_tdls_channel_switch(sdata, skb);
1675 else
1676 ieee80211_iface_process_skb(local, sdata, skb);
1677
1678 kfree_skb(skb);
1679 kcov_remote_stop();
1680 }
1681
1682 /* process status queue */
1683 while ((skb = skb_dequeue(&sdata->status_queue))) {
1684 kcov_remote_start_common(skb_get_kcov_handle(skb));
1685
1686 ieee80211_iface_process_status(sdata, skb);
1687 kfree_skb(skb);
1688
1689 kcov_remote_stop();
1690 }
1691
1692 /* then other type-dependent work */
1693 switch (sdata->vif.type) {
1694 case NL80211_IFTYPE_STATION:
1695 ieee80211_sta_work(sdata);
1696 break;
1697 case NL80211_IFTYPE_ADHOC:
1698 ieee80211_ibss_work(sdata);
1699 break;
1700 case NL80211_IFTYPE_MESH_POINT:
1701 if (!ieee80211_vif_is_mesh(&sdata->vif))
1702 break;
1703 ieee80211_mesh_work(sdata);
1704 break;
1705 case NL80211_IFTYPE_OCB:
1706 ieee80211_ocb_work(sdata);
1707 break;
1708 default:
1709 break;
1710 }
1711 }
1712
ieee80211_activate_links_work(struct wiphy * wiphy,struct wiphy_work * work)1713 static void ieee80211_activate_links_work(struct wiphy *wiphy,
1714 struct wiphy_work *work)
1715 {
1716 struct ieee80211_sub_if_data *sdata =
1717 container_of(work, struct ieee80211_sub_if_data,
1718 activate_links_work);
1719 struct ieee80211_local *local = wiphy_priv(wiphy);
1720
1721 if (local->in_reconfig)
1722 return;
1723
1724 ieee80211_set_active_links(&sdata->vif, sdata->desired_active_links);
1725 sdata->desired_active_links = 0;
1726 }
1727
1728 /*
1729 * Helper function to initialise an interface to a specific type.
1730 */
ieee80211_setup_sdata(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype type)1731 static void ieee80211_setup_sdata(struct ieee80211_sub_if_data *sdata,
1732 enum nl80211_iftype type)
1733 {
1734 static const u8 bssid_wildcard[ETH_ALEN] = {0xff, 0xff, 0xff,
1735 0xff, 0xff, 0xff};
1736
1737 /* clear type-dependent unions */
1738 memset(&sdata->u, 0, sizeof(sdata->u));
1739 memset(&sdata->deflink.u, 0, sizeof(sdata->deflink.u));
1740
1741 /* and set some type-dependent values */
1742 sdata->vif.type = type;
1743 sdata->vif.p2p = false;
1744 sdata->wdev.iftype = type;
1745
1746 sdata->control_port_protocol = cpu_to_be16(ETH_P_PAE);
1747 sdata->control_port_no_encrypt = false;
1748 sdata->control_port_over_nl80211 = false;
1749 sdata->control_port_no_preauth = false;
1750 sdata->vif.cfg.idle = true;
1751 sdata->vif.bss_conf.txpower = INT_MIN; /* unset */
1752
1753 sdata->noack_map = 0;
1754
1755 /* only monitor/p2p-device differ */
1756 if (sdata->dev) {
1757 sdata->dev->netdev_ops = &ieee80211_dataif_ops;
1758 sdata->dev->type = ARPHRD_ETHER;
1759 }
1760
1761 skb_queue_head_init(&sdata->skb_queue);
1762 skb_queue_head_init(&sdata->status_queue);
1763 wiphy_work_init(&sdata->work, ieee80211_iface_work);
1764 wiphy_work_init(&sdata->activate_links_work,
1765 ieee80211_activate_links_work);
1766
1767 switch (type) {
1768 case NL80211_IFTYPE_P2P_GO:
1769 type = NL80211_IFTYPE_AP;
1770 sdata->vif.type = type;
1771 sdata->vif.p2p = true;
1772 fallthrough;
1773 case NL80211_IFTYPE_AP:
1774 skb_queue_head_init(&sdata->u.ap.ps.bc_buf);
1775 INIT_LIST_HEAD(&sdata->u.ap.vlans);
1776 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1777 break;
1778 case NL80211_IFTYPE_P2P_CLIENT:
1779 type = NL80211_IFTYPE_STATION;
1780 sdata->vif.type = type;
1781 sdata->vif.p2p = true;
1782 fallthrough;
1783 case NL80211_IFTYPE_STATION:
1784 sdata->vif.bss_conf.bssid = sdata->deflink.u.mgd.bssid;
1785 ieee80211_sta_setup_sdata(sdata);
1786 break;
1787 case NL80211_IFTYPE_OCB:
1788 sdata->vif.bss_conf.bssid = bssid_wildcard;
1789 ieee80211_ocb_setup_sdata(sdata);
1790 break;
1791 case NL80211_IFTYPE_ADHOC:
1792 sdata->vif.bss_conf.bssid = sdata->u.ibss.bssid;
1793 ieee80211_ibss_setup_sdata(sdata);
1794 break;
1795 case NL80211_IFTYPE_MESH_POINT:
1796 if (ieee80211_vif_is_mesh(&sdata->vif))
1797 ieee80211_mesh_init_sdata(sdata);
1798 break;
1799 case NL80211_IFTYPE_MONITOR:
1800 sdata->dev->type = ARPHRD_IEEE80211_RADIOTAP;
1801 sdata->dev->netdev_ops = &ieee80211_monitorif_ops;
1802 sdata->u.mntr.flags = MONITOR_FLAG_CONTROL |
1803 MONITOR_FLAG_OTHER_BSS;
1804 break;
1805 case NL80211_IFTYPE_NAN:
1806 idr_init(&sdata->u.nan.function_inst_ids);
1807 spin_lock_init(&sdata->u.nan.func_lock);
1808 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1809 break;
1810 case NL80211_IFTYPE_AP_VLAN:
1811 case NL80211_IFTYPE_P2P_DEVICE:
1812 sdata->vif.bss_conf.bssid = sdata->vif.addr;
1813 break;
1814 case NL80211_IFTYPE_UNSPECIFIED:
1815 case NL80211_IFTYPE_WDS:
1816 case NUM_NL80211_IFTYPES:
1817 WARN_ON(1);
1818 break;
1819 }
1820
1821 /* need to do this after the switch so vif.type is correct */
1822 ieee80211_link_setup(&sdata->deflink);
1823
1824 ieee80211_debugfs_recreate_netdev(sdata, false);
1825 }
1826
ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype type)1827 static int ieee80211_runtime_change_iftype(struct ieee80211_sub_if_data *sdata,
1828 enum nl80211_iftype type)
1829 {
1830 struct ieee80211_local *local = sdata->local;
1831 int ret, err;
1832 enum nl80211_iftype internal_type = type;
1833 bool p2p = false;
1834
1835 ASSERT_RTNL();
1836
1837 if (!local->ops->change_interface)
1838 return -EBUSY;
1839
1840 /* for now, don't support changing while links exist */
1841 if (ieee80211_vif_is_mld(&sdata->vif))
1842 return -EBUSY;
1843
1844 switch (sdata->vif.type) {
1845 case NL80211_IFTYPE_AP:
1846 if (!list_empty(&sdata->u.ap.vlans))
1847 return -EBUSY;
1848 break;
1849 case NL80211_IFTYPE_STATION:
1850 case NL80211_IFTYPE_ADHOC:
1851 case NL80211_IFTYPE_OCB:
1852 /*
1853 * Could maybe also all others here?
1854 * Just not sure how that interacts
1855 * with the RX/config path e.g. for
1856 * mesh.
1857 */
1858 break;
1859 default:
1860 return -EBUSY;
1861 }
1862
1863 switch (type) {
1864 case NL80211_IFTYPE_AP:
1865 case NL80211_IFTYPE_STATION:
1866 case NL80211_IFTYPE_ADHOC:
1867 case NL80211_IFTYPE_OCB:
1868 /*
1869 * Could probably support everything
1870 * but here.
1871 */
1872 break;
1873 case NL80211_IFTYPE_P2P_CLIENT:
1874 p2p = true;
1875 internal_type = NL80211_IFTYPE_STATION;
1876 break;
1877 case NL80211_IFTYPE_P2P_GO:
1878 p2p = true;
1879 internal_type = NL80211_IFTYPE_AP;
1880 break;
1881 default:
1882 return -EBUSY;
1883 }
1884
1885 ret = ieee80211_check_concurrent_iface(sdata, internal_type);
1886 if (ret)
1887 return ret;
1888
1889 ieee80211_stop_vif_queues(local, sdata,
1890 IEEE80211_QUEUE_STOP_REASON_IFTYPE_CHANGE);
1891 /* do_stop will synchronize_rcu() first thing */
1892 ieee80211_do_stop(sdata, false);
1893
1894 ieee80211_teardown_sdata(sdata);
1895
1896 ieee80211_set_sdata_offload_flags(sdata);
1897 ret = drv_change_interface(local, sdata, internal_type, p2p);
1898 if (ret)
1899 type = ieee80211_vif_type_p2p(&sdata->vif);
1900
1901 /*
1902 * Ignore return value here, there's not much we can do since
1903 * the driver changed the interface type internally already.
1904 * The warnings will hopefully make driver authors fix it :-)
1905 */
1906 ieee80211_check_queues(sdata, type);
1907
1908 ieee80211_setup_sdata(sdata, type);
1909 ieee80211_set_vif_encap_ops(sdata);
1910
1911 err = ieee80211_do_open(&sdata->wdev, false);
1912 WARN(err, "type change: do_open returned %d", err);
1913
1914 ieee80211_wake_vif_queues(local, sdata,
1915 IEEE80211_QUEUE_STOP_REASON_IFTYPE_CHANGE);
1916 return ret;
1917 }
1918
ieee80211_if_change_type(struct ieee80211_sub_if_data * sdata,enum nl80211_iftype type)1919 int ieee80211_if_change_type(struct ieee80211_sub_if_data *sdata,
1920 enum nl80211_iftype type)
1921 {
1922 int ret;
1923
1924 ASSERT_RTNL();
1925
1926 if (type == ieee80211_vif_type_p2p(&sdata->vif))
1927 return 0;
1928
1929 if (ieee80211_sdata_running(sdata)) {
1930 ret = ieee80211_runtime_change_iftype(sdata, type);
1931 if (ret)
1932 return ret;
1933 } else {
1934 /* Purge and reset type-dependent state. */
1935 ieee80211_teardown_sdata(sdata);
1936 ieee80211_setup_sdata(sdata, type);
1937 }
1938
1939 /* reset some values that shouldn't be kept across type changes */
1940 if (type == NL80211_IFTYPE_STATION)
1941 sdata->u.mgd.use_4addr = false;
1942
1943 return 0;
1944 }
1945
ieee80211_assign_perm_addr(struct ieee80211_local * local,u8 * perm_addr,enum nl80211_iftype type)1946 static void ieee80211_assign_perm_addr(struct ieee80211_local *local,
1947 u8 *perm_addr, enum nl80211_iftype type)
1948 {
1949 struct ieee80211_sub_if_data *sdata;
1950 u64 mask, start, addr, val, inc;
1951 u8 *m;
1952 u8 tmp_addr[ETH_ALEN];
1953 int i;
1954
1955 lockdep_assert_wiphy(local->hw.wiphy);
1956
1957 /* default ... something at least */
1958 memcpy(perm_addr, local->hw.wiphy->perm_addr, ETH_ALEN);
1959
1960 if (is_zero_ether_addr(local->hw.wiphy->addr_mask) &&
1961 local->hw.wiphy->n_addresses <= 1)
1962 return;
1963
1964 switch (type) {
1965 case NL80211_IFTYPE_MONITOR:
1966 /* doesn't matter */
1967 break;
1968 case NL80211_IFTYPE_AP_VLAN:
1969 /* match up with an AP interface */
1970 list_for_each_entry(sdata, &local->interfaces, list) {
1971 if (sdata->vif.type != NL80211_IFTYPE_AP)
1972 continue;
1973 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1974 break;
1975 }
1976 /* keep default if no AP interface present */
1977 break;
1978 case NL80211_IFTYPE_P2P_CLIENT:
1979 case NL80211_IFTYPE_P2P_GO:
1980 if (ieee80211_hw_check(&local->hw, P2P_DEV_ADDR_FOR_INTF)) {
1981 list_for_each_entry(sdata, &local->interfaces, list) {
1982 if (sdata->vif.type != NL80211_IFTYPE_P2P_DEVICE)
1983 continue;
1984 if (!ieee80211_sdata_running(sdata))
1985 continue;
1986 memcpy(perm_addr, sdata->vif.addr, ETH_ALEN);
1987 return;
1988 }
1989 }
1990 fallthrough;
1991 default:
1992 /* assign a new address if possible -- try n_addresses first */
1993 for (i = 0; i < local->hw.wiphy->n_addresses; i++) {
1994 bool used = false;
1995
1996 list_for_each_entry(sdata, &local->interfaces, list) {
1997 if (ether_addr_equal(local->hw.wiphy->addresses[i].addr,
1998 sdata->vif.addr)) {
1999 used = true;
2000 break;
2001 }
2002 }
2003
2004 if (!used) {
2005 memcpy(perm_addr,
2006 local->hw.wiphy->addresses[i].addr,
2007 ETH_ALEN);
2008 break;
2009 }
2010 }
2011
2012 /* try mask if available */
2013 if (is_zero_ether_addr(local->hw.wiphy->addr_mask))
2014 break;
2015
2016 m = local->hw.wiphy->addr_mask;
2017 mask = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
2018 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
2019 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
2020
2021 if (__ffs64(mask) + hweight64(mask) != fls64(mask)) {
2022 /* not a contiguous mask ... not handled now! */
2023 pr_info("not contiguous\n");
2024 break;
2025 }
2026
2027 /*
2028 * Pick address of existing interface in case user changed
2029 * MAC address manually, default to perm_addr.
2030 */
2031 m = local->hw.wiphy->perm_addr;
2032 list_for_each_entry(sdata, &local->interfaces, list) {
2033 if (sdata->vif.type == NL80211_IFTYPE_MONITOR)
2034 continue;
2035 m = sdata->vif.addr;
2036 break;
2037 }
2038 start = ((u64)m[0] << 5*8) | ((u64)m[1] << 4*8) |
2039 ((u64)m[2] << 3*8) | ((u64)m[3] << 2*8) |
2040 ((u64)m[4] << 1*8) | ((u64)m[5] << 0*8);
2041
2042 inc = 1ULL<<__ffs64(mask);
2043 val = (start & mask);
2044 addr = (start & ~mask) | (val & mask);
2045 do {
2046 bool used = false;
2047
2048 tmp_addr[5] = addr >> 0*8;
2049 tmp_addr[4] = addr >> 1*8;
2050 tmp_addr[3] = addr >> 2*8;
2051 tmp_addr[2] = addr >> 3*8;
2052 tmp_addr[1] = addr >> 4*8;
2053 tmp_addr[0] = addr >> 5*8;
2054
2055 val += inc;
2056
2057 list_for_each_entry(sdata, &local->interfaces, list) {
2058 if (ether_addr_equal(tmp_addr, sdata->vif.addr)) {
2059 used = true;
2060 break;
2061 }
2062 }
2063
2064 if (!used) {
2065 memcpy(perm_addr, tmp_addr, ETH_ALEN);
2066 break;
2067 }
2068 addr = (start & ~mask) | (val & mask);
2069 } while (addr != start);
2070
2071 break;
2072 }
2073 }
2074
ieee80211_if_add(struct ieee80211_local * local,const char * name,unsigned char name_assign_type,struct wireless_dev ** new_wdev,enum nl80211_iftype type,struct vif_params * params)2075 int ieee80211_if_add(struct ieee80211_local *local, const char *name,
2076 unsigned char name_assign_type,
2077 struct wireless_dev **new_wdev, enum nl80211_iftype type,
2078 struct vif_params *params)
2079 {
2080 struct net_device *ndev = NULL;
2081 struct ieee80211_sub_if_data *sdata = NULL;
2082 struct txq_info *txqi;
2083 int ret, i;
2084
2085 ASSERT_RTNL();
2086 lockdep_assert_wiphy(local->hw.wiphy);
2087
2088 if (type == NL80211_IFTYPE_P2P_DEVICE || type == NL80211_IFTYPE_NAN) {
2089 struct wireless_dev *wdev;
2090
2091 sdata = kzalloc(sizeof(*sdata) + local->hw.vif_data_size,
2092 GFP_KERNEL);
2093 if (!sdata)
2094 return -ENOMEM;
2095 wdev = &sdata->wdev;
2096
2097 sdata->dev = NULL;
2098 strscpy(sdata->name, name, IFNAMSIZ);
2099 ieee80211_assign_perm_addr(local, wdev->address, type);
2100 memcpy(sdata->vif.addr, wdev->address, ETH_ALEN);
2101 ether_addr_copy(sdata->vif.bss_conf.addr, sdata->vif.addr);
2102 } else {
2103 int size = ALIGN(sizeof(*sdata) + local->hw.vif_data_size,
2104 sizeof(void *));
2105 int txq_size = 0;
2106
2107 if (type != NL80211_IFTYPE_AP_VLAN &&
2108 (type != NL80211_IFTYPE_MONITOR ||
2109 (params->flags & MONITOR_FLAG_ACTIVE)))
2110 txq_size += sizeof(struct txq_info) +
2111 local->hw.txq_data_size;
2112
2113 ndev = alloc_netdev_mqs(size + txq_size,
2114 name, name_assign_type,
2115 ieee80211_if_setup, 1, 1);
2116 if (!ndev)
2117 return -ENOMEM;
2118
2119 dev_net_set(ndev, wiphy_net(local->hw.wiphy));
2120
2121 ndev->pcpu_stat_type = NETDEV_PCPU_STAT_TSTATS;
2122
2123 ndev->needed_headroom = local->tx_headroom +
2124 4*6 /* four MAC addresses */
2125 + 2 + 2 + 2 + 2 /* ctl, dur, seq, qos */
2126 + 6 /* mesh */
2127 + 8 /* rfc1042/bridge tunnel */
2128 - ETH_HLEN /* ethernet hard_header_len */
2129 + IEEE80211_ENCRYPT_HEADROOM;
2130 ndev->needed_tailroom = IEEE80211_ENCRYPT_TAILROOM;
2131
2132 ret = dev_alloc_name(ndev, ndev->name);
2133 if (ret < 0) {
2134 free_netdev(ndev);
2135 return ret;
2136 }
2137
2138 ieee80211_assign_perm_addr(local, ndev->perm_addr, type);
2139 if (is_valid_ether_addr(params->macaddr))
2140 eth_hw_addr_set(ndev, params->macaddr);
2141 else
2142 eth_hw_addr_set(ndev, ndev->perm_addr);
2143 SET_NETDEV_DEV(ndev, wiphy_dev(local->hw.wiphy));
2144
2145 /* don't use IEEE80211_DEV_TO_SUB_IF -- it checks too much */
2146 sdata = netdev_priv(ndev);
2147 ndev->ieee80211_ptr = &sdata->wdev;
2148 memcpy(sdata->vif.addr, ndev->dev_addr, ETH_ALEN);
2149 ether_addr_copy(sdata->vif.bss_conf.addr, sdata->vif.addr);
2150 memcpy(sdata->name, ndev->name, IFNAMSIZ);
2151
2152 if (txq_size) {
2153 txqi = netdev_priv(ndev) + size;
2154 ieee80211_txq_init(sdata, NULL, txqi, 0);
2155 }
2156
2157 sdata->dev = ndev;
2158 }
2159
2160 /* initialise type-independent data */
2161 sdata->wdev.wiphy = local->hw.wiphy;
2162
2163 ieee80211_sdata_init(local, sdata);
2164
2165 ieee80211_init_frag_cache(&sdata->frags);
2166
2167 INIT_LIST_HEAD(&sdata->key_list);
2168
2169 wiphy_delayed_work_init(&sdata->dec_tailroom_needed_wk,
2170 ieee80211_delayed_tailroom_dec);
2171
2172 for (i = 0; i < NUM_NL80211_BANDS; i++) {
2173 struct ieee80211_supported_band *sband;
2174 sband = local->hw.wiphy->bands[i];
2175 sdata->rc_rateidx_mask[i] =
2176 sband ? (1 << sband->n_bitrates) - 1 : 0;
2177 if (sband) {
2178 __le16 cap;
2179 u16 *vht_rate_mask;
2180
2181 memcpy(sdata->rc_rateidx_mcs_mask[i],
2182 sband->ht_cap.mcs.rx_mask,
2183 sizeof(sdata->rc_rateidx_mcs_mask[i]));
2184
2185 cap = sband->vht_cap.vht_mcs.rx_mcs_map;
2186 vht_rate_mask = sdata->rc_rateidx_vht_mcs_mask[i];
2187 ieee80211_get_vht_mask_from_cap(cap, vht_rate_mask);
2188 } else {
2189 memset(sdata->rc_rateidx_mcs_mask[i], 0,
2190 sizeof(sdata->rc_rateidx_mcs_mask[i]));
2191 memset(sdata->rc_rateidx_vht_mcs_mask[i], 0,
2192 sizeof(sdata->rc_rateidx_vht_mcs_mask[i]));
2193 }
2194 }
2195
2196 ieee80211_set_default_queues(sdata);
2197
2198 /* setup type-dependent data */
2199 ieee80211_setup_sdata(sdata, type);
2200
2201 if (ndev) {
2202 ndev->ieee80211_ptr->use_4addr = params->use_4addr;
2203 if (type == NL80211_IFTYPE_STATION)
2204 sdata->u.mgd.use_4addr = params->use_4addr;
2205
2206 ndev->features |= local->hw.netdev_features;
2207 ndev->priv_flags |= IFF_LIVE_ADDR_CHANGE;
2208 ndev->hw_features |= ndev->features &
2209 MAC80211_SUPPORTED_FEATURES_TX;
2210 sdata->vif.netdev_features = local->hw.netdev_features;
2211
2212 netdev_set_default_ethtool_ops(ndev, &ieee80211_ethtool_ops);
2213
2214 /* MTU range is normally 256 - 2304, where the upper limit is
2215 * the maximum MSDU size. Monitor interfaces send and receive
2216 * MPDU and A-MSDU frames which may be much larger so we do
2217 * not impose an upper limit in that case.
2218 */
2219 ndev->min_mtu = 256;
2220 if (type == NL80211_IFTYPE_MONITOR)
2221 ndev->max_mtu = 0;
2222 else
2223 ndev->max_mtu = local->hw.max_mtu;
2224
2225 ret = cfg80211_register_netdevice(ndev);
2226 if (ret) {
2227 free_netdev(ndev);
2228 return ret;
2229 }
2230 }
2231
2232 mutex_lock(&local->iflist_mtx);
2233 list_add_tail_rcu(&sdata->list, &local->interfaces);
2234 mutex_unlock(&local->iflist_mtx);
2235
2236 if (new_wdev)
2237 *new_wdev = &sdata->wdev;
2238
2239 return 0;
2240 }
2241
ieee80211_if_remove(struct ieee80211_sub_if_data * sdata)2242 void ieee80211_if_remove(struct ieee80211_sub_if_data *sdata)
2243 {
2244 ASSERT_RTNL();
2245 lockdep_assert_wiphy(sdata->local->hw.wiphy);
2246
2247 mutex_lock(&sdata->local->iflist_mtx);
2248 list_del_rcu(&sdata->list);
2249 mutex_unlock(&sdata->local->iflist_mtx);
2250
2251 if (sdata->vif.txq)
2252 ieee80211_txq_purge(sdata->local, to_txq_info(sdata->vif.txq));
2253
2254 synchronize_rcu();
2255
2256 cfg80211_unregister_wdev(&sdata->wdev);
2257
2258 if (!sdata->dev) {
2259 ieee80211_teardown_sdata(sdata);
2260 kfree(sdata);
2261 }
2262 }
2263
ieee80211_sdata_stop(struct ieee80211_sub_if_data * sdata)2264 void ieee80211_sdata_stop(struct ieee80211_sub_if_data *sdata)
2265 {
2266 if (WARN_ON_ONCE(!test_bit(SDATA_STATE_RUNNING, &sdata->state)))
2267 return;
2268 ieee80211_do_stop(sdata, true);
2269 }
2270
ieee80211_remove_interfaces(struct ieee80211_local * local)2271 void ieee80211_remove_interfaces(struct ieee80211_local *local)
2272 {
2273 struct ieee80211_sub_if_data *sdata, *tmp;
2274 LIST_HEAD(unreg_list);
2275
2276 ASSERT_RTNL();
2277
2278 /* Before destroying the interfaces, make sure they're all stopped so
2279 * that the hardware is stopped. Otherwise, the driver might still be
2280 * iterating the interfaces during the shutdown, e.g. from a worker
2281 * or from RX processing or similar, and if it does so (using atomic
2282 * iteration) while we're manipulating the list, the iteration will
2283 * crash.
2284 *
2285 * After this, the hardware should be stopped and the driver should
2286 * have stopped all of its activities, so that we can do RCU-unaware
2287 * manipulations of the interface list below.
2288 */
2289 cfg80211_shutdown_all_interfaces(local->hw.wiphy);
2290
2291 guard(wiphy)(local->hw.wiphy);
2292
2293 WARN(local->open_count, "%s: open count remains %d\n",
2294 wiphy_name(local->hw.wiphy), local->open_count);
2295
2296 mutex_lock(&local->iflist_mtx);
2297 list_splice_init(&local->interfaces, &unreg_list);
2298 mutex_unlock(&local->iflist_mtx);
2299
2300 list_for_each_entry_safe(sdata, tmp, &unreg_list, list) {
2301 bool netdev = sdata->dev;
2302
2303 /*
2304 * Remove IP addresses explicitly, since the notifier will
2305 * skip the callbacks if wdev->registered is false, since
2306 * we can't acquire the wiphy_lock() again there if already
2307 * inside this locked section.
2308 */
2309 sdata->vif.cfg.arp_addr_cnt = 0;
2310 if (sdata->vif.type == NL80211_IFTYPE_STATION &&
2311 sdata->u.mgd.associated)
2312 ieee80211_vif_cfg_change_notify(sdata,
2313 BSS_CHANGED_ARP_FILTER);
2314
2315 list_del(&sdata->list);
2316 cfg80211_unregister_wdev(&sdata->wdev);
2317
2318 if (!netdev)
2319 kfree(sdata);
2320 }
2321 }
2322
netdev_notify(struct notifier_block * nb,unsigned long state,void * ptr)2323 static int netdev_notify(struct notifier_block *nb,
2324 unsigned long state, void *ptr)
2325 {
2326 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
2327 struct ieee80211_sub_if_data *sdata;
2328
2329 if (state != NETDEV_CHANGENAME)
2330 return NOTIFY_DONE;
2331
2332 if (!dev->ieee80211_ptr || !dev->ieee80211_ptr->wiphy)
2333 return NOTIFY_DONE;
2334
2335 if (dev->ieee80211_ptr->wiphy->privid != mac80211_wiphy_privid)
2336 return NOTIFY_DONE;
2337
2338 sdata = IEEE80211_DEV_TO_SUB_IF(dev);
2339 memcpy(sdata->name, dev->name, IFNAMSIZ);
2340 ieee80211_debugfs_rename_netdev(sdata);
2341
2342 return NOTIFY_OK;
2343 }
2344
2345 static struct notifier_block mac80211_netdev_notifier = {
2346 .notifier_call = netdev_notify,
2347 };
2348
ieee80211_iface_init(void)2349 int ieee80211_iface_init(void)
2350 {
2351 return register_netdevice_notifier(&mac80211_netdev_notifier);
2352 }
2353
ieee80211_iface_exit(void)2354 void ieee80211_iface_exit(void)
2355 {
2356 unregister_netdevice_notifier(&mac80211_netdev_notifier);
2357 }
2358
ieee80211_vif_inc_num_mcast(struct ieee80211_sub_if_data * sdata)2359 void ieee80211_vif_inc_num_mcast(struct ieee80211_sub_if_data *sdata)
2360 {
2361 if (sdata->vif.type == NL80211_IFTYPE_AP)
2362 atomic_inc(&sdata->u.ap.num_mcast_sta);
2363 else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
2364 atomic_inc(&sdata->u.vlan.num_mcast_sta);
2365 }
2366
ieee80211_vif_dec_num_mcast(struct ieee80211_sub_if_data * sdata)2367 void ieee80211_vif_dec_num_mcast(struct ieee80211_sub_if_data *sdata)
2368 {
2369 if (sdata->vif.type == NL80211_IFTYPE_AP)
2370 atomic_dec(&sdata->u.ap.num_mcast_sta);
2371 else if (sdata->vif.type == NL80211_IFTYPE_AP_VLAN)
2372 atomic_dec(&sdata->u.vlan.num_mcast_sta);
2373 }
2374
ieee80211_vif_block_queues_csa(struct ieee80211_sub_if_data * sdata)2375 void ieee80211_vif_block_queues_csa(struct ieee80211_sub_if_data *sdata)
2376 {
2377 struct ieee80211_local *local = sdata->local;
2378
2379 if (ieee80211_hw_check(&local->hw, HANDLES_QUIET_CSA))
2380 return;
2381
2382 ieee80211_stop_vif_queues_norefcount(local, sdata,
2383 IEEE80211_QUEUE_STOP_REASON_CSA);
2384 }
2385
ieee80211_vif_unblock_queues_csa(struct ieee80211_sub_if_data * sdata)2386 void ieee80211_vif_unblock_queues_csa(struct ieee80211_sub_if_data *sdata)
2387 {
2388 struct ieee80211_local *local = sdata->local;
2389
2390 ieee80211_wake_vif_queues_norefcount(local, sdata,
2391 IEEE80211_QUEUE_STOP_REASON_CSA);
2392 }
2393