xref: /linux/include/net/cfg80211.h (revision 0ad9617c78acbc71373fb341a6f75d4012b01d69)
1 /* SPDX-License-Identifier: GPL-2.0-only */
2 #ifndef __NET_CFG80211_H
3 #define __NET_CFG80211_H
4 /*
5  * 802.11 device and configuration interface
6  *
7  * Copyright 2006-2010	Johannes Berg <johannes@sipsolutions.net>
8  * Copyright 2013-2014 Intel Mobile Communications GmbH
9  * Copyright 2015-2017	Intel Deutschland GmbH
10  * Copyright (C) 2018-2024 Intel Corporation
11  */
12 
13 #include <linux/ethtool.h>
14 #include <uapi/linux/rfkill.h>
15 #include <linux/netdevice.h>
16 #include <linux/debugfs.h>
17 #include <linux/list.h>
18 #include <linux/bug.h>
19 #include <linux/netlink.h>
20 #include <linux/skbuff.h>
21 #include <linux/nl80211.h>
22 #include <linux/if_ether.h>
23 #include <linux/ieee80211.h>
24 #include <linux/net.h>
25 #include <linux/rfkill.h>
26 #include <net/regulatory.h>
27 
28 /**
29  * DOC: Introduction
30  *
31  * cfg80211 is the configuration API for 802.11 devices in Linux. It bridges
32  * userspace and drivers, and offers some utility functionality associated
33  * with 802.11. cfg80211 must, directly or indirectly via mac80211, be used
34  * by all modern wireless drivers in Linux, so that they offer a consistent
35  * API through nl80211. For backward compatibility, cfg80211 also offers
36  * wireless extensions to userspace, but hides them from drivers completely.
37  *
38  * Additionally, cfg80211 contains code to help enforce regulatory spectrum
39  * use restrictions.
40  */
41 
42 
43 /**
44  * DOC: Device registration
45  *
46  * In order for a driver to use cfg80211, it must register the hardware device
47  * with cfg80211. This happens through a number of hardware capability structs
48  * described below.
49  *
50  * The fundamental structure for each device is the 'wiphy', of which each
51  * instance describes a physical wireless device connected to the system. Each
52  * such wiphy can have zero, one, or many virtual interfaces associated with
53  * it, which need to be identified as such by pointing the network interface's
54  * @ieee80211_ptr pointer to a &struct wireless_dev which further describes
55  * the wireless part of the interface. Normally this struct is embedded in the
56  * network interface's private data area. Drivers can optionally allow creating
57  * or destroying virtual interfaces on the fly, but without at least one or the
58  * ability to create some the wireless device isn't useful.
59  *
60  * Each wiphy structure contains device capability information, and also has
61  * a pointer to the various operations the driver offers. The definitions and
62  * structures here describe these capabilities in detail.
63  */
64 
65 struct wiphy;
66 
67 /*
68  * wireless hardware capability structures
69  */
70 
71 /**
72  * enum ieee80211_channel_flags - channel flags
73  *
74  * Channel flags set by the regulatory control code.
75  *
76  * @IEEE80211_CHAN_DISABLED: This channel is disabled.
77  * @IEEE80211_CHAN_NO_IR: do not initiate radiation, this includes
78  *	sending probe requests or beaconing.
79  * @IEEE80211_CHAN_PSD: Power spectral density (in dBm) is set for this
80  *	channel.
81  * @IEEE80211_CHAN_RADAR: Radar detection is required on this channel.
82  * @IEEE80211_CHAN_NO_HT40PLUS: extension channel above this channel
83  *	is not permitted.
84  * @IEEE80211_CHAN_NO_HT40MINUS: extension channel below this channel
85  *	is not permitted.
86  * @IEEE80211_CHAN_NO_OFDM: OFDM is not allowed on this channel.
87  * @IEEE80211_CHAN_NO_80MHZ: If the driver supports 80 MHz on the band,
88  *	this flag indicates that an 80 MHz channel cannot use this
89  *	channel as the control or any of the secondary channels.
90  *	This may be due to the driver or due to regulatory bandwidth
91  *	restrictions.
92  * @IEEE80211_CHAN_NO_160MHZ: If the driver supports 160 MHz on the band,
93  *	this flag indicates that an 160 MHz channel cannot use this
94  *	channel as the control or any of the secondary channels.
95  *	This may be due to the driver or due to regulatory bandwidth
96  *	restrictions.
97  * @IEEE80211_CHAN_INDOOR_ONLY: see %NL80211_FREQUENCY_ATTR_INDOOR_ONLY
98  * @IEEE80211_CHAN_IR_CONCURRENT: see %NL80211_FREQUENCY_ATTR_IR_CONCURRENT
99  * @IEEE80211_CHAN_NO_20MHZ: 20 MHz bandwidth is not permitted
100  *	on this channel.
101  * @IEEE80211_CHAN_NO_10MHZ: 10 MHz bandwidth is not permitted
102  *	on this channel.
103  * @IEEE80211_CHAN_NO_HE: HE operation is not permitted on this channel.
104  * @IEEE80211_CHAN_1MHZ: 1 MHz bandwidth is permitted
105  *	on this channel.
106  * @IEEE80211_CHAN_2MHZ: 2 MHz bandwidth is permitted
107  *	on this channel.
108  * @IEEE80211_CHAN_4MHZ: 4 MHz bandwidth is permitted
109  *	on this channel.
110  * @IEEE80211_CHAN_8MHZ: 8 MHz bandwidth is permitted
111  *	on this channel.
112  * @IEEE80211_CHAN_16MHZ: 16 MHz bandwidth is permitted
113  *	on this channel.
114  * @IEEE80211_CHAN_NO_320MHZ: If the driver supports 320 MHz on the band,
115  *	this flag indicates that a 320 MHz channel cannot use this
116  *	channel as the control or any of the secondary channels.
117  *	This may be due to the driver or due to regulatory bandwidth
118  *	restrictions.
119  * @IEEE80211_CHAN_NO_EHT: EHT operation is not permitted on this channel.
120  * @IEEE80211_CHAN_DFS_CONCURRENT: See %NL80211_RRF_DFS_CONCURRENT
121  * @IEEE80211_CHAN_NO_6GHZ_VLP_CLIENT: Client connection with VLP AP
122  *	not permitted using this channel
123  * @IEEE80211_CHAN_NO_6GHZ_AFC_CLIENT: Client connection with AFC AP
124  *	not permitted using this channel
125  * @IEEE80211_CHAN_CAN_MONITOR: This channel can be used for monitor
126  *	mode even in the presence of other (regulatory) restrictions,
127  *	even if it is otherwise disabled.
128  * @IEEE80211_CHAN_ALLOW_6GHZ_VLP_AP: Allow using this channel for AP operation
129  *	with very low power (VLP), even if otherwise set to NO_IR.
130  */
131 enum ieee80211_channel_flags {
132 	IEEE80211_CHAN_DISABLED			= BIT(0),
133 	IEEE80211_CHAN_NO_IR			= BIT(1),
134 	IEEE80211_CHAN_PSD			= BIT(2),
135 	IEEE80211_CHAN_RADAR			= BIT(3),
136 	IEEE80211_CHAN_NO_HT40PLUS		= BIT(4),
137 	IEEE80211_CHAN_NO_HT40MINUS		= BIT(5),
138 	IEEE80211_CHAN_NO_OFDM			= BIT(6),
139 	IEEE80211_CHAN_NO_80MHZ			= BIT(7),
140 	IEEE80211_CHAN_NO_160MHZ		= BIT(8),
141 	IEEE80211_CHAN_INDOOR_ONLY		= BIT(9),
142 	IEEE80211_CHAN_IR_CONCURRENT		= BIT(10),
143 	IEEE80211_CHAN_NO_20MHZ			= BIT(11),
144 	IEEE80211_CHAN_NO_10MHZ			= BIT(12),
145 	IEEE80211_CHAN_NO_HE			= BIT(13),
146 	IEEE80211_CHAN_1MHZ			= BIT(14),
147 	IEEE80211_CHAN_2MHZ			= BIT(15),
148 	IEEE80211_CHAN_4MHZ			= BIT(16),
149 	IEEE80211_CHAN_8MHZ			= BIT(17),
150 	IEEE80211_CHAN_16MHZ			= BIT(18),
151 	IEEE80211_CHAN_NO_320MHZ		= BIT(19),
152 	IEEE80211_CHAN_NO_EHT			= BIT(20),
153 	IEEE80211_CHAN_DFS_CONCURRENT		= BIT(21),
154 	IEEE80211_CHAN_NO_6GHZ_VLP_CLIENT	= BIT(22),
155 	IEEE80211_CHAN_NO_6GHZ_AFC_CLIENT	= BIT(23),
156 	IEEE80211_CHAN_CAN_MONITOR		= BIT(24),
157 	IEEE80211_CHAN_ALLOW_6GHZ_VLP_AP	= BIT(25),
158 };
159 
160 #define IEEE80211_CHAN_NO_HT40 \
161 	(IEEE80211_CHAN_NO_HT40PLUS | IEEE80211_CHAN_NO_HT40MINUS)
162 
163 #define IEEE80211_DFS_MIN_CAC_TIME_MS		60000
164 #define IEEE80211_DFS_MIN_NOP_TIME_MS		(30 * 60 * 1000)
165 
166 /**
167  * struct ieee80211_channel - channel definition
168  *
169  * This structure describes a single channel for use
170  * with cfg80211.
171  *
172  * @center_freq: center frequency in MHz
173  * @freq_offset: offset from @center_freq, in KHz
174  * @hw_value: hardware-specific value for the channel
175  * @flags: channel flags from &enum ieee80211_channel_flags.
176  * @orig_flags: channel flags at registration time, used by regulatory
177  *	code to support devices with additional restrictions
178  * @band: band this channel belongs to.
179  * @max_antenna_gain: maximum antenna gain in dBi
180  * @max_power: maximum transmission power (in dBm)
181  * @max_reg_power: maximum regulatory transmission power (in dBm)
182  * @beacon_found: helper to regulatory code to indicate when a beacon
183  *	has been found on this channel. Use regulatory_hint_found_beacon()
184  *	to enable this, this is useful only on 5 GHz band.
185  * @orig_mag: internal use
186  * @orig_mpwr: internal use
187  * @dfs_state: current state of this channel. Only relevant if radar is required
188  *	on this channel.
189  * @dfs_state_entered: timestamp (jiffies) when the dfs state was entered.
190  * @dfs_cac_ms: DFS CAC time in milliseconds, this is valid for DFS channels.
191  * @psd: power spectral density (in dBm)
192  */
193 struct ieee80211_channel {
194 	enum nl80211_band band;
195 	u32 center_freq;
196 	u16 freq_offset;
197 	u16 hw_value;
198 	u32 flags;
199 	int max_antenna_gain;
200 	int max_power;
201 	int max_reg_power;
202 	bool beacon_found;
203 	u32 orig_flags;
204 	int orig_mag, orig_mpwr;
205 	enum nl80211_dfs_state dfs_state;
206 	unsigned long dfs_state_entered;
207 	unsigned int dfs_cac_ms;
208 	s8 psd;
209 };
210 
211 /**
212  * enum ieee80211_rate_flags - rate flags
213  *
214  * Hardware/specification flags for rates. These are structured
215  * in a way that allows using the same bitrate structure for
216  * different bands/PHY modes.
217  *
218  * @IEEE80211_RATE_SHORT_PREAMBLE: Hardware can send with short
219  *	preamble on this bitrate; only relevant in 2.4GHz band and
220  *	with CCK rates.
221  * @IEEE80211_RATE_MANDATORY_A: This bitrate is a mandatory rate
222  *	when used with 802.11a (on the 5 GHz band); filled by the
223  *	core code when registering the wiphy.
224  * @IEEE80211_RATE_MANDATORY_B: This bitrate is a mandatory rate
225  *	when used with 802.11b (on the 2.4 GHz band); filled by the
226  *	core code when registering the wiphy.
227  * @IEEE80211_RATE_MANDATORY_G: This bitrate is a mandatory rate
228  *	when used with 802.11g (on the 2.4 GHz band); filled by the
229  *	core code when registering the wiphy.
230  * @IEEE80211_RATE_ERP_G: This is an ERP rate in 802.11g mode.
231  * @IEEE80211_RATE_SUPPORTS_5MHZ: Rate can be used in 5 MHz mode
232  * @IEEE80211_RATE_SUPPORTS_10MHZ: Rate can be used in 10 MHz mode
233  */
234 enum ieee80211_rate_flags {
235 	IEEE80211_RATE_SHORT_PREAMBLE	= BIT(0),
236 	IEEE80211_RATE_MANDATORY_A	= BIT(1),
237 	IEEE80211_RATE_MANDATORY_B	= BIT(2),
238 	IEEE80211_RATE_MANDATORY_G	= BIT(3),
239 	IEEE80211_RATE_ERP_G		= BIT(4),
240 	IEEE80211_RATE_SUPPORTS_5MHZ	= BIT(5),
241 	IEEE80211_RATE_SUPPORTS_10MHZ	= BIT(6),
242 };
243 
244 /**
245  * enum ieee80211_bss_type - BSS type filter
246  *
247  * @IEEE80211_BSS_TYPE_ESS: Infrastructure BSS
248  * @IEEE80211_BSS_TYPE_PBSS: Personal BSS
249  * @IEEE80211_BSS_TYPE_IBSS: Independent BSS
250  * @IEEE80211_BSS_TYPE_MBSS: Mesh BSS
251  * @IEEE80211_BSS_TYPE_ANY: Wildcard value for matching any BSS type
252  */
253 enum ieee80211_bss_type {
254 	IEEE80211_BSS_TYPE_ESS,
255 	IEEE80211_BSS_TYPE_PBSS,
256 	IEEE80211_BSS_TYPE_IBSS,
257 	IEEE80211_BSS_TYPE_MBSS,
258 	IEEE80211_BSS_TYPE_ANY
259 };
260 
261 /**
262  * enum ieee80211_privacy - BSS privacy filter
263  *
264  * @IEEE80211_PRIVACY_ON: privacy bit set
265  * @IEEE80211_PRIVACY_OFF: privacy bit clear
266  * @IEEE80211_PRIVACY_ANY: Wildcard value for matching any privacy setting
267  */
268 enum ieee80211_privacy {
269 	IEEE80211_PRIVACY_ON,
270 	IEEE80211_PRIVACY_OFF,
271 	IEEE80211_PRIVACY_ANY
272 };
273 
274 #define IEEE80211_PRIVACY(x)	\
275 	((x) ? IEEE80211_PRIVACY_ON : IEEE80211_PRIVACY_OFF)
276 
277 /**
278  * struct ieee80211_rate - bitrate definition
279  *
280  * This structure describes a bitrate that an 802.11 PHY can
281  * operate with. The two values @hw_value and @hw_value_short
282  * are only for driver use when pointers to this structure are
283  * passed around.
284  *
285  * @flags: rate-specific flags from &enum ieee80211_rate_flags
286  * @bitrate: bitrate in units of 100 Kbps
287  * @hw_value: driver/hardware value for this rate
288  * @hw_value_short: driver/hardware value for this rate when
289  *	short preamble is used
290  */
291 struct ieee80211_rate {
292 	u32 flags;
293 	u16 bitrate;
294 	u16 hw_value, hw_value_short;
295 };
296 
297 /**
298  * struct ieee80211_he_obss_pd - AP settings for spatial reuse
299  *
300  * @enable: is the feature enabled.
301  * @sr_ctrl: The SR Control field of SRP element.
302  * @non_srg_max_offset: non-SRG maximum tx power offset
303  * @min_offset: minimal tx power offset an associated station shall use
304  * @max_offset: maximum tx power offset an associated station shall use
305  * @bss_color_bitmap: bitmap that indicates the BSS color values used by
306  *	members of the SRG
307  * @partial_bssid_bitmap: bitmap that indicates the partial BSSID values
308  *	used by members of the SRG
309  */
310 struct ieee80211_he_obss_pd {
311 	bool enable;
312 	u8 sr_ctrl;
313 	u8 non_srg_max_offset;
314 	u8 min_offset;
315 	u8 max_offset;
316 	u8 bss_color_bitmap[8];
317 	u8 partial_bssid_bitmap[8];
318 };
319 
320 /**
321  * struct cfg80211_he_bss_color - AP settings for BSS coloring
322  *
323  * @color: the current color.
324  * @enabled: HE BSS color is used
325  * @partial: define the AID equation.
326  */
327 struct cfg80211_he_bss_color {
328 	u8 color;
329 	bool enabled;
330 	bool partial;
331 };
332 
333 /**
334  * struct ieee80211_sta_ht_cap - STA's HT capabilities
335  *
336  * This structure describes most essential parameters needed
337  * to describe 802.11n HT capabilities for an STA.
338  *
339  * @ht_supported: is HT supported by the STA
340  * @cap: HT capabilities map as described in 802.11n spec
341  * @ampdu_factor: Maximum A-MPDU length factor
342  * @ampdu_density: Minimum A-MPDU spacing
343  * @mcs: Supported MCS rates
344  */
345 struct ieee80211_sta_ht_cap {
346 	u16 cap; /* use IEEE80211_HT_CAP_ */
347 	bool ht_supported;
348 	u8 ampdu_factor;
349 	u8 ampdu_density;
350 	struct ieee80211_mcs_info mcs;
351 };
352 
353 /**
354  * struct ieee80211_sta_vht_cap - STA's VHT capabilities
355  *
356  * This structure describes most essential parameters needed
357  * to describe 802.11ac VHT capabilities for an STA.
358  *
359  * @vht_supported: is VHT supported by the STA
360  * @cap: VHT capabilities map as described in 802.11ac spec
361  * @vht_mcs: Supported VHT MCS rates
362  */
363 struct ieee80211_sta_vht_cap {
364 	bool vht_supported;
365 	u32 cap; /* use IEEE80211_VHT_CAP_ */
366 	struct ieee80211_vht_mcs_info vht_mcs;
367 };
368 
369 #define IEEE80211_HE_PPE_THRES_MAX_LEN		25
370 
371 /**
372  * struct ieee80211_sta_he_cap - STA's HE capabilities
373  *
374  * This structure describes most essential parameters needed
375  * to describe 802.11ax HE capabilities for a STA.
376  *
377  * @has_he: true iff HE data is valid.
378  * @he_cap_elem: Fixed portion of the HE capabilities element.
379  * @he_mcs_nss_supp: The supported NSS/MCS combinations.
380  * @ppe_thres: Holds the PPE Thresholds data.
381  */
382 struct ieee80211_sta_he_cap {
383 	bool has_he;
384 	struct ieee80211_he_cap_elem he_cap_elem;
385 	struct ieee80211_he_mcs_nss_supp he_mcs_nss_supp;
386 	u8 ppe_thres[IEEE80211_HE_PPE_THRES_MAX_LEN];
387 };
388 
389 /**
390  * struct ieee80211_eht_mcs_nss_supp - EHT max supported NSS per MCS
391  *
392  * See P802.11be_D1.3 Table 9-401k - "Subfields of the Supported EHT-MCS
393  * and NSS Set field"
394  *
395  * @only_20mhz: MCS/NSS support for 20 MHz-only STA.
396  * @bw: MCS/NSS support for 80, 160 and 320 MHz
397  * @bw._80: MCS/NSS support for BW <= 80 MHz
398  * @bw._160: MCS/NSS support for BW = 160 MHz
399  * @bw._320: MCS/NSS support for BW = 320 MHz
400  */
401 struct ieee80211_eht_mcs_nss_supp {
402 	union {
403 		struct ieee80211_eht_mcs_nss_supp_20mhz_only only_20mhz;
404 		struct {
405 			struct ieee80211_eht_mcs_nss_supp_bw _80;
406 			struct ieee80211_eht_mcs_nss_supp_bw _160;
407 			struct ieee80211_eht_mcs_nss_supp_bw _320;
408 		} __packed bw;
409 	} __packed;
410 } __packed;
411 
412 #define IEEE80211_EHT_PPE_THRES_MAX_LEN		32
413 
414 /**
415  * struct ieee80211_sta_eht_cap - STA's EHT capabilities
416  *
417  * This structure describes most essential parameters needed
418  * to describe 802.11be EHT capabilities for a STA.
419  *
420  * @has_eht: true iff EHT data is valid.
421  * @eht_cap_elem: Fixed portion of the eht capabilities element.
422  * @eht_mcs_nss_supp: The supported NSS/MCS combinations.
423  * @eht_ppe_thres: Holds the PPE Thresholds data.
424  */
425 struct ieee80211_sta_eht_cap {
426 	bool has_eht;
427 	struct ieee80211_eht_cap_elem_fixed eht_cap_elem;
428 	struct ieee80211_eht_mcs_nss_supp eht_mcs_nss_supp;
429 	u8 eht_ppe_thres[IEEE80211_EHT_PPE_THRES_MAX_LEN];
430 };
431 
432 /* sparse defines __CHECKER__; see Documentation/dev-tools/sparse.rst */
433 #ifdef __CHECKER__
434 /*
435  * This is used to mark the sband->iftype_data pointer which is supposed
436  * to be an array with special access semantics (per iftype), but a lot
437  * of code got it wrong in the past, so with this marking sparse will be
438  * noisy when the pointer is used directly.
439  */
440 # define __iftd		__attribute__((noderef, address_space(__iftype_data)))
441 #else
442 # define __iftd
443 #endif /* __CHECKER__ */
444 
445 /**
446  * struct ieee80211_sband_iftype_data - sband data per interface type
447  *
448  * This structure encapsulates sband data that is relevant for the
449  * interface types defined in @types_mask.  Each type in the
450  * @types_mask must be unique across all instances of iftype_data.
451  *
452  * @types_mask: interface types mask
453  * @he_cap: holds the HE capabilities
454  * @he_6ghz_capa: HE 6 GHz capabilities, must be filled in for a
455  *	6 GHz band channel (and 0 may be valid value).
456  * @eht_cap: STA's EHT capabilities
457  * @vendor_elems: vendor element(s) to advertise
458  * @vendor_elems.data: vendor element(s) data
459  * @vendor_elems.len: vendor element(s) length
460  */
461 struct ieee80211_sband_iftype_data {
462 	u16 types_mask;
463 	struct ieee80211_sta_he_cap he_cap;
464 	struct ieee80211_he_6ghz_capa he_6ghz_capa;
465 	struct ieee80211_sta_eht_cap eht_cap;
466 	struct {
467 		const u8 *data;
468 		unsigned int len;
469 	} vendor_elems;
470 };
471 
472 /**
473  * enum ieee80211_edmg_bw_config - allowed channel bandwidth configurations
474  *
475  * @IEEE80211_EDMG_BW_CONFIG_4: 2.16GHz
476  * @IEEE80211_EDMG_BW_CONFIG_5: 2.16GHz and 4.32GHz
477  * @IEEE80211_EDMG_BW_CONFIG_6: 2.16GHz, 4.32GHz and 6.48GHz
478  * @IEEE80211_EDMG_BW_CONFIG_7: 2.16GHz, 4.32GHz, 6.48GHz and 8.64GHz
479  * @IEEE80211_EDMG_BW_CONFIG_8: 2.16GHz and 2.16GHz + 2.16GHz
480  * @IEEE80211_EDMG_BW_CONFIG_9: 2.16GHz, 4.32GHz and 2.16GHz + 2.16GHz
481  * @IEEE80211_EDMG_BW_CONFIG_10: 2.16GHz, 4.32GHz, 6.48GHz and 2.16GHz+2.16GHz
482  * @IEEE80211_EDMG_BW_CONFIG_11: 2.16GHz, 4.32GHz, 6.48GHz, 8.64GHz and
483  *	2.16GHz+2.16GHz
484  * @IEEE80211_EDMG_BW_CONFIG_12: 2.16GHz, 2.16GHz + 2.16GHz and
485  *	4.32GHz + 4.32GHz
486  * @IEEE80211_EDMG_BW_CONFIG_13: 2.16GHz, 4.32GHz, 2.16GHz + 2.16GHz and
487  *	4.32GHz + 4.32GHz
488  * @IEEE80211_EDMG_BW_CONFIG_14: 2.16GHz, 4.32GHz, 6.48GHz, 2.16GHz + 2.16GHz
489  *	and 4.32GHz + 4.32GHz
490  * @IEEE80211_EDMG_BW_CONFIG_15: 2.16GHz, 4.32GHz, 6.48GHz, 8.64GHz,
491  *	2.16GHz + 2.16GHz and 4.32GHz + 4.32GHz
492  */
493 enum ieee80211_edmg_bw_config {
494 	IEEE80211_EDMG_BW_CONFIG_4	= 4,
495 	IEEE80211_EDMG_BW_CONFIG_5	= 5,
496 	IEEE80211_EDMG_BW_CONFIG_6	= 6,
497 	IEEE80211_EDMG_BW_CONFIG_7	= 7,
498 	IEEE80211_EDMG_BW_CONFIG_8	= 8,
499 	IEEE80211_EDMG_BW_CONFIG_9	= 9,
500 	IEEE80211_EDMG_BW_CONFIG_10	= 10,
501 	IEEE80211_EDMG_BW_CONFIG_11	= 11,
502 	IEEE80211_EDMG_BW_CONFIG_12	= 12,
503 	IEEE80211_EDMG_BW_CONFIG_13	= 13,
504 	IEEE80211_EDMG_BW_CONFIG_14	= 14,
505 	IEEE80211_EDMG_BW_CONFIG_15	= 15,
506 };
507 
508 /**
509  * struct ieee80211_edmg - EDMG configuration
510  *
511  * This structure describes most essential parameters needed
512  * to describe 802.11ay EDMG configuration
513  *
514  * @channels: bitmap that indicates the 2.16 GHz channel(s)
515  *	that are allowed to be used for transmissions.
516  *	Bit 0 indicates channel 1, bit 1 indicates channel 2, etc.
517  *	Set to 0 indicate EDMG not supported.
518  * @bw_config: Channel BW Configuration subfield encodes
519  *	the allowed channel bandwidth configurations
520  */
521 struct ieee80211_edmg {
522 	u8 channels;
523 	enum ieee80211_edmg_bw_config bw_config;
524 };
525 
526 /**
527  * struct ieee80211_sta_s1g_cap - STA's S1G capabilities
528  *
529  * This structure describes most essential parameters needed
530  * to describe 802.11ah S1G capabilities for a STA.
531  *
532  * @s1g: is STA an S1G STA
533  * @cap: S1G capabilities information
534  * @nss_mcs: Supported NSS MCS set
535  */
536 struct ieee80211_sta_s1g_cap {
537 	bool s1g;
538 	u8 cap[10]; /* use S1G_CAPAB_ */
539 	u8 nss_mcs[5];
540 };
541 
542 /**
543  * struct ieee80211_supported_band - frequency band definition
544  *
545  * This structure describes a frequency band a wiphy
546  * is able to operate in.
547  *
548  * @channels: Array of channels the hardware can operate with
549  *	in this band.
550  * @band: the band this structure represents
551  * @n_channels: Number of channels in @channels
552  * @bitrates: Array of bitrates the hardware can operate with
553  *	in this band. Must be sorted to give a valid "supported
554  *	rates" IE, i.e. CCK rates first, then OFDM.
555  * @n_bitrates: Number of bitrates in @bitrates
556  * @ht_cap: HT capabilities in this band
557  * @vht_cap: VHT capabilities in this band
558  * @s1g_cap: S1G capabilities in this band
559  * @edmg_cap: EDMG capabilities in this band
560  * @s1g_cap: S1G capabilities in this band (S1B band only, of course)
561  * @n_iftype_data: number of iftype data entries
562  * @iftype_data: interface type data entries.  Note that the bits in
563  *	@types_mask inside this structure cannot overlap (i.e. only
564  *	one occurrence of each type is allowed across all instances of
565  *	iftype_data).
566  */
567 struct ieee80211_supported_band {
568 	struct ieee80211_channel *channels;
569 	struct ieee80211_rate *bitrates;
570 	enum nl80211_band band;
571 	int n_channels;
572 	int n_bitrates;
573 	struct ieee80211_sta_ht_cap ht_cap;
574 	struct ieee80211_sta_vht_cap vht_cap;
575 	struct ieee80211_sta_s1g_cap s1g_cap;
576 	struct ieee80211_edmg edmg_cap;
577 	u16 n_iftype_data;
578 	const struct ieee80211_sband_iftype_data __iftd *iftype_data;
579 };
580 
581 /**
582  * _ieee80211_set_sband_iftype_data - set sband iftype data array
583  * @sband: the sband to initialize
584  * @iftd: the iftype data array pointer
585  * @n_iftd: the length of the iftype data array
586  *
587  * Set the sband iftype data array; use this where the length cannot
588  * be derived from the ARRAY_SIZE() of the argument, but prefer
589  * ieee80211_set_sband_iftype_data() where it can be used.
590  */
591 static inline void
592 _ieee80211_set_sband_iftype_data(struct ieee80211_supported_band *sband,
593 				 const struct ieee80211_sband_iftype_data *iftd,
594 				 u16 n_iftd)
595 {
596 	sband->iftype_data = (const void __iftd __force *)iftd;
597 	sband->n_iftype_data = n_iftd;
598 }
599 
600 /**
601  * ieee80211_set_sband_iftype_data - set sband iftype data array
602  * @sband: the sband to initialize
603  * @iftd: the iftype data array
604  */
605 #define ieee80211_set_sband_iftype_data(sband, iftd)	\
606 	_ieee80211_set_sband_iftype_data(sband, iftd, ARRAY_SIZE(iftd))
607 
608 /**
609  * for_each_sband_iftype_data - iterate sband iftype data entries
610  * @sband: the sband whose iftype_data array to iterate
611  * @i: iterator counter
612  * @iftd: iftype data pointer to set
613  */
614 #define for_each_sband_iftype_data(sband, i, iftd)				\
615 	for (i = 0, iftd = (const void __force *)&(sband)->iftype_data[i];	\
616 	     i < (sband)->n_iftype_data;					\
617 	     i++, iftd = (const void __force *)&(sband)->iftype_data[i])
618 
619 /**
620  * ieee80211_get_sband_iftype_data - return sband data for a given iftype
621  * @sband: the sband to search for the STA on
622  * @iftype: enum nl80211_iftype
623  *
624  * Return: pointer to struct ieee80211_sband_iftype_data, or NULL is none found
625  */
626 static inline const struct ieee80211_sband_iftype_data *
627 ieee80211_get_sband_iftype_data(const struct ieee80211_supported_band *sband,
628 				u8 iftype)
629 {
630 	const struct ieee80211_sband_iftype_data *data;
631 	int i;
632 
633 	if (WARN_ON(iftype >= NL80211_IFTYPE_MAX))
634 		return NULL;
635 
636 	if (iftype == NL80211_IFTYPE_AP_VLAN)
637 		iftype = NL80211_IFTYPE_AP;
638 
639 	for_each_sband_iftype_data(sband, i, data) {
640 		if (data->types_mask & BIT(iftype))
641 			return data;
642 	}
643 
644 	return NULL;
645 }
646 
647 /**
648  * ieee80211_get_he_iftype_cap - return HE capabilities for an sband's iftype
649  * @sband: the sband to search for the iftype on
650  * @iftype: enum nl80211_iftype
651  *
652  * Return: pointer to the struct ieee80211_sta_he_cap, or NULL is none found
653  */
654 static inline const struct ieee80211_sta_he_cap *
655 ieee80211_get_he_iftype_cap(const struct ieee80211_supported_band *sband,
656 			    u8 iftype)
657 {
658 	const struct ieee80211_sband_iftype_data *data =
659 		ieee80211_get_sband_iftype_data(sband, iftype);
660 
661 	if (data && data->he_cap.has_he)
662 		return &data->he_cap;
663 
664 	return NULL;
665 }
666 
667 /**
668  * ieee80211_get_he_6ghz_capa - return HE 6 GHz capabilities
669  * @sband: the sband to search for the STA on
670  * @iftype: the iftype to search for
671  *
672  * Return: the 6GHz capabilities
673  */
674 static inline __le16
675 ieee80211_get_he_6ghz_capa(const struct ieee80211_supported_band *sband,
676 			   enum nl80211_iftype iftype)
677 {
678 	const struct ieee80211_sband_iftype_data *data =
679 		ieee80211_get_sband_iftype_data(sband, iftype);
680 
681 	if (WARN_ON(!data || !data->he_cap.has_he))
682 		return 0;
683 
684 	return data->he_6ghz_capa.capa;
685 }
686 
687 /**
688  * ieee80211_get_eht_iftype_cap - return ETH capabilities for an sband's iftype
689  * @sband: the sband to search for the iftype on
690  * @iftype: enum nl80211_iftype
691  *
692  * Return: pointer to the struct ieee80211_sta_eht_cap, or NULL is none found
693  */
694 static inline const struct ieee80211_sta_eht_cap *
695 ieee80211_get_eht_iftype_cap(const struct ieee80211_supported_band *sband,
696 			     enum nl80211_iftype iftype)
697 {
698 	const struct ieee80211_sband_iftype_data *data =
699 		ieee80211_get_sband_iftype_data(sband, iftype);
700 
701 	if (data && data->eht_cap.has_eht)
702 		return &data->eht_cap;
703 
704 	return NULL;
705 }
706 
707 /**
708  * wiphy_read_of_freq_limits - read frequency limits from device tree
709  *
710  * @wiphy: the wireless device to get extra limits for
711  *
712  * Some devices may have extra limitations specified in DT. This may be useful
713  * for chipsets that normally support more bands but are limited due to board
714  * design (e.g. by antennas or external power amplifier).
715  *
716  * This function reads info from DT and uses it to *modify* channels (disable
717  * unavailable ones). It's usually a *bad* idea to use it in drivers with
718  * shared channel data as DT limitations are device specific. You should make
719  * sure to call it only if channels in wiphy are copied and can be modified
720  * without affecting other devices.
721  *
722  * As this function access device node it has to be called after set_wiphy_dev.
723  * It also modifies channels so they have to be set first.
724  * If using this helper, call it before wiphy_register().
725  */
726 #ifdef CONFIG_OF
727 void wiphy_read_of_freq_limits(struct wiphy *wiphy);
728 #else /* CONFIG_OF */
729 static inline void wiphy_read_of_freq_limits(struct wiphy *wiphy)
730 {
731 }
732 #endif /* !CONFIG_OF */
733 
734 
735 /*
736  * Wireless hardware/device configuration structures and methods
737  */
738 
739 /**
740  * DOC: Actions and configuration
741  *
742  * Each wireless device and each virtual interface offer a set of configuration
743  * operations and other actions that are invoked by userspace. Each of these
744  * actions is described in the operations structure, and the parameters these
745  * operations use are described separately.
746  *
747  * Additionally, some operations are asynchronous and expect to get status
748  * information via some functions that drivers need to call.
749  *
750  * Scanning and BSS list handling with its associated functionality is described
751  * in a separate chapter.
752  */
753 
754 #define VHT_MUMIMO_GROUPS_DATA_LEN (WLAN_MEMBERSHIP_LEN +\
755 				    WLAN_USER_POSITION_LEN)
756 
757 /**
758  * struct vif_params - describes virtual interface parameters
759  * @flags: monitor interface flags, unchanged if 0, otherwise
760  *	%MONITOR_FLAG_CHANGED will be set
761  * @use_4addr: use 4-address frames
762  * @macaddr: address to use for this virtual interface.
763  *	If this parameter is set to zero address the driver may
764  *	determine the address as needed.
765  *	This feature is only fully supported by drivers that enable the
766  *	%NL80211_FEATURE_MAC_ON_CREATE flag.  Others may support creating
767  **	only p2p devices with specified MAC.
768  * @vht_mumimo_groups: MU-MIMO groupID, used for monitoring MU-MIMO packets
769  *	belonging to that MU-MIMO groupID; %NULL if not changed
770  * @vht_mumimo_follow_addr: MU-MIMO follow address, used for monitoring
771  *	MU-MIMO packets going to the specified station; %NULL if not changed
772  */
773 struct vif_params {
774 	u32 flags;
775 	int use_4addr;
776 	u8 macaddr[ETH_ALEN];
777 	const u8 *vht_mumimo_groups;
778 	const u8 *vht_mumimo_follow_addr;
779 };
780 
781 /**
782  * struct key_params - key information
783  *
784  * Information about a key
785  *
786  * @key: key material
787  * @key_len: length of key material
788  * @cipher: cipher suite selector
789  * @seq: sequence counter (IV/PN) for TKIP and CCMP keys, only used
790  *	with the get_key() callback, must be in little endian,
791  *	length given by @seq_len.
792  * @seq_len: length of @seq.
793  * @vlan_id: vlan_id for VLAN group key (if nonzero)
794  * @mode: key install mode (RX_TX, NO_TX or SET_TX)
795  */
796 struct key_params {
797 	const u8 *key;
798 	const u8 *seq;
799 	int key_len;
800 	int seq_len;
801 	u16 vlan_id;
802 	u32 cipher;
803 	enum nl80211_key_mode mode;
804 };
805 
806 /**
807  * struct cfg80211_chan_def - channel definition
808  * @chan: the (control) channel
809  * @width: channel width
810  * @center_freq1: center frequency of first segment
811  * @center_freq2: center frequency of second segment
812  *	(only with 80+80 MHz)
813  * @edmg: define the EDMG channels configuration.
814  *	If edmg is requested (i.e. the .channels member is non-zero),
815  *	chan will define the primary channel and all other
816  *	parameters are ignored.
817  * @freq1_offset: offset from @center_freq1, in KHz
818  * @punctured: mask of the punctured 20 MHz subchannels, with
819  *	bits turned on being disabled (punctured); numbered
820  *	from lower to higher frequency (like in the spec)
821  */
822 struct cfg80211_chan_def {
823 	struct ieee80211_channel *chan;
824 	enum nl80211_chan_width width;
825 	u32 center_freq1;
826 	u32 center_freq2;
827 	struct ieee80211_edmg edmg;
828 	u16 freq1_offset;
829 	u16 punctured;
830 };
831 
832 /*
833  * cfg80211_bitrate_mask - masks for bitrate control
834  */
835 struct cfg80211_bitrate_mask {
836 	struct {
837 		u32 legacy;
838 		u8 ht_mcs[IEEE80211_HT_MCS_MASK_LEN];
839 		u16 vht_mcs[NL80211_VHT_NSS_MAX];
840 		u16 he_mcs[NL80211_HE_NSS_MAX];
841 		enum nl80211_txrate_gi gi;
842 		enum nl80211_he_gi he_gi;
843 		enum nl80211_he_ltf he_ltf;
844 	} control[NUM_NL80211_BANDS];
845 };
846 
847 
848 /**
849  * struct cfg80211_tid_cfg - TID specific configuration
850  * @config_override: Flag to notify driver to reset TID configuration
851  *	of the peer.
852  * @tids: bitmap of TIDs to modify
853  * @mask: bitmap of attributes indicating which parameter changed,
854  *	similar to &nl80211_tid_config_supp.
855  * @noack: noack configuration value for the TID
856  * @retry_long: retry count value
857  * @retry_short: retry count value
858  * @ampdu: Enable/Disable MPDU aggregation
859  * @rtscts: Enable/Disable RTS/CTS
860  * @amsdu: Enable/Disable MSDU aggregation
861  * @txrate_type: Tx bitrate mask type
862  * @txrate_mask: Tx bitrate to be applied for the TID
863  */
864 struct cfg80211_tid_cfg {
865 	bool config_override;
866 	u8 tids;
867 	u64 mask;
868 	enum nl80211_tid_config noack;
869 	u8 retry_long, retry_short;
870 	enum nl80211_tid_config ampdu;
871 	enum nl80211_tid_config rtscts;
872 	enum nl80211_tid_config amsdu;
873 	enum nl80211_tx_rate_setting txrate_type;
874 	struct cfg80211_bitrate_mask txrate_mask;
875 };
876 
877 /**
878  * struct cfg80211_tid_config - TID configuration
879  * @peer: Station's MAC address
880  * @n_tid_conf: Number of TID specific configurations to be applied
881  * @tid_conf: Configuration change info
882  */
883 struct cfg80211_tid_config {
884 	const u8 *peer;
885 	u32 n_tid_conf;
886 	struct cfg80211_tid_cfg tid_conf[] __counted_by(n_tid_conf);
887 };
888 
889 /**
890  * struct cfg80211_fils_aad - FILS AAD data
891  * @macaddr: STA MAC address
892  * @kek: FILS KEK
893  * @kek_len: FILS KEK length
894  * @snonce: STA Nonce
895  * @anonce: AP Nonce
896  */
897 struct cfg80211_fils_aad {
898 	const u8 *macaddr;
899 	const u8 *kek;
900 	u8 kek_len;
901 	const u8 *snonce;
902 	const u8 *anonce;
903 };
904 
905 /**
906  * struct cfg80211_set_hw_timestamp - enable/disable HW timestamping
907  * @macaddr: peer MAC address. NULL to enable/disable HW timestamping for all
908  *	addresses.
909  * @enable: if set, enable HW timestamping for the specified MAC address.
910  *	Otherwise disable HW timestamping for the specified MAC address.
911  */
912 struct cfg80211_set_hw_timestamp {
913 	const u8 *macaddr;
914 	bool enable;
915 };
916 
917 /**
918  * cfg80211_get_chandef_type - return old channel type from chandef
919  * @chandef: the channel definition
920  *
921  * Return: The old channel type (NOHT, HT20, HT40+/-) from a given
922  * chandef, which must have a bandwidth allowing this conversion.
923  */
924 static inline enum nl80211_channel_type
925 cfg80211_get_chandef_type(const struct cfg80211_chan_def *chandef)
926 {
927 	switch (chandef->width) {
928 	case NL80211_CHAN_WIDTH_20_NOHT:
929 		return NL80211_CHAN_NO_HT;
930 	case NL80211_CHAN_WIDTH_20:
931 		return NL80211_CHAN_HT20;
932 	case NL80211_CHAN_WIDTH_40:
933 		if (chandef->center_freq1 > chandef->chan->center_freq)
934 			return NL80211_CHAN_HT40PLUS;
935 		return NL80211_CHAN_HT40MINUS;
936 	default:
937 		WARN_ON(1);
938 		return NL80211_CHAN_NO_HT;
939 	}
940 }
941 
942 /**
943  * cfg80211_chandef_create - create channel definition using channel type
944  * @chandef: the channel definition struct to fill
945  * @channel: the control channel
946  * @chantype: the channel type
947  *
948  * Given a channel type, create a channel definition.
949  */
950 void cfg80211_chandef_create(struct cfg80211_chan_def *chandef,
951 			     struct ieee80211_channel *channel,
952 			     enum nl80211_channel_type chantype);
953 
954 /**
955  * cfg80211_chandef_identical - check if two channel definitions are identical
956  * @chandef1: first channel definition
957  * @chandef2: second channel definition
958  *
959  * Return: %true if the channels defined by the channel definitions are
960  * identical, %false otherwise.
961  */
962 static inline bool
963 cfg80211_chandef_identical(const struct cfg80211_chan_def *chandef1,
964 			   const struct cfg80211_chan_def *chandef2)
965 {
966 	return (chandef1->chan == chandef2->chan &&
967 		chandef1->width == chandef2->width &&
968 		chandef1->center_freq1 == chandef2->center_freq1 &&
969 		chandef1->freq1_offset == chandef2->freq1_offset &&
970 		chandef1->center_freq2 == chandef2->center_freq2 &&
971 		chandef1->punctured == chandef2->punctured);
972 }
973 
974 /**
975  * cfg80211_chandef_is_edmg - check if chandef represents an EDMG channel
976  *
977  * @chandef: the channel definition
978  *
979  * Return: %true if EDMG defined, %false otherwise.
980  */
981 static inline bool
982 cfg80211_chandef_is_edmg(const struct cfg80211_chan_def *chandef)
983 {
984 	return chandef->edmg.channels || chandef->edmg.bw_config;
985 }
986 
987 /**
988  * cfg80211_chandef_compatible - check if two channel definitions are compatible
989  * @chandef1: first channel definition
990  * @chandef2: second channel definition
991  *
992  * Return: %NULL if the given channel definitions are incompatible,
993  * chandef1 or chandef2 otherwise.
994  */
995 const struct cfg80211_chan_def *
996 cfg80211_chandef_compatible(const struct cfg80211_chan_def *chandef1,
997 			    const struct cfg80211_chan_def *chandef2);
998 
999 /**
1000  * nl80211_chan_width_to_mhz - get the channel width in MHz
1001  * @chan_width: the channel width from &enum nl80211_chan_width
1002  *
1003  * Return: channel width in MHz if the chan_width from &enum nl80211_chan_width
1004  * is valid. -1 otherwise.
1005  */
1006 int nl80211_chan_width_to_mhz(enum nl80211_chan_width chan_width);
1007 
1008 /**
1009  * cfg80211_chandef_valid - check if a channel definition is valid
1010  * @chandef: the channel definition to check
1011  * Return: %true if the channel definition is valid. %false otherwise.
1012  */
1013 bool cfg80211_chandef_valid(const struct cfg80211_chan_def *chandef);
1014 
1015 /**
1016  * cfg80211_chandef_usable - check if secondary channels can be used
1017  * @wiphy: the wiphy to validate against
1018  * @chandef: the channel definition to check
1019  * @prohibited_flags: the regulatory channel flags that must not be set
1020  * Return: %true if secondary channels are usable. %false otherwise.
1021  */
1022 bool cfg80211_chandef_usable(struct wiphy *wiphy,
1023 			     const struct cfg80211_chan_def *chandef,
1024 			     u32 prohibited_flags);
1025 
1026 /**
1027  * cfg80211_chandef_dfs_required - checks if radar detection is required
1028  * @wiphy: the wiphy to validate against
1029  * @chandef: the channel definition to check
1030  * @iftype: the interface type as specified in &enum nl80211_iftype
1031  * Returns:
1032  *	1 if radar detection is required, 0 if it is not, < 0 on error
1033  */
1034 int cfg80211_chandef_dfs_required(struct wiphy *wiphy,
1035 				  const struct cfg80211_chan_def *chandef,
1036 				  enum nl80211_iftype iftype);
1037 
1038 /**
1039  * cfg80211_chandef_dfs_usable - checks if chandef is DFS usable and we
1040  *				 can/need start CAC on such channel
1041  * @wiphy: the wiphy to validate against
1042  * @chandef: the channel definition to check
1043  *
1044  * Return: true if all channels available and at least
1045  *	   one channel requires CAC (NL80211_DFS_USABLE)
1046  */
1047 bool cfg80211_chandef_dfs_usable(struct wiphy *wiphy,
1048 				 const struct cfg80211_chan_def *chandef);
1049 
1050 /**
1051  * cfg80211_chandef_dfs_cac_time - get the DFS CAC time (in ms) for given
1052  *				   channel definition
1053  * @wiphy: the wiphy to validate against
1054  * @chandef: the channel definition to check
1055  *
1056  * Returns: DFS CAC time (in ms) which applies for this channel definition
1057  */
1058 unsigned int
1059 cfg80211_chandef_dfs_cac_time(struct wiphy *wiphy,
1060 			      const struct cfg80211_chan_def *chandef);
1061 
1062 /**
1063  * cfg80211_chandef_primary - calculate primary 40/80/160 MHz freq
1064  * @chandef: chandef to calculate for
1065  * @primary_chan_width: primary channel width to calculate center for
1066  * @punctured: punctured sub-channel bitmap, will be recalculated
1067  *	according to the new bandwidth, can be %NULL
1068  *
1069  * Returns: the primary 40/80/160 MHz channel center frequency, or -1
1070  *	for errors, updating the punctured bitmap
1071  */
1072 int cfg80211_chandef_primary(const struct cfg80211_chan_def *chandef,
1073 			     enum nl80211_chan_width primary_chan_width,
1074 			     u16 *punctured);
1075 
1076 /**
1077  * nl80211_send_chandef - sends the channel definition.
1078  * @msg: the msg to send channel definition
1079  * @chandef: the channel definition to check
1080  *
1081  * Returns: 0 if sent the channel definition to msg, < 0 on error
1082  **/
1083 int nl80211_send_chandef(struct sk_buff *msg, const struct cfg80211_chan_def *chandef);
1084 
1085 /**
1086  * ieee80211_chanwidth_rate_flags - return rate flags for channel width
1087  * @width: the channel width of the channel
1088  *
1089  * In some channel types, not all rates may be used - for example CCK
1090  * rates may not be used in 5/10 MHz channels.
1091  *
1092  * Returns: rate flags which apply for this channel width
1093  */
1094 static inline enum ieee80211_rate_flags
1095 ieee80211_chanwidth_rate_flags(enum nl80211_chan_width width)
1096 {
1097 	switch (width) {
1098 	case NL80211_CHAN_WIDTH_5:
1099 		return IEEE80211_RATE_SUPPORTS_5MHZ;
1100 	case NL80211_CHAN_WIDTH_10:
1101 		return IEEE80211_RATE_SUPPORTS_10MHZ;
1102 	default:
1103 		break;
1104 	}
1105 	return 0;
1106 }
1107 
1108 /**
1109  * ieee80211_chandef_rate_flags - returns rate flags for a channel
1110  * @chandef: channel definition for the channel
1111  *
1112  * See ieee80211_chanwidth_rate_flags().
1113  *
1114  * Returns: rate flags which apply for this channel
1115  */
1116 static inline enum ieee80211_rate_flags
1117 ieee80211_chandef_rate_flags(struct cfg80211_chan_def *chandef)
1118 {
1119 	return ieee80211_chanwidth_rate_flags(chandef->width);
1120 }
1121 
1122 /**
1123  * ieee80211_chandef_max_power - maximum transmission power for the chandef
1124  *
1125  * In some regulations, the transmit power may depend on the configured channel
1126  * bandwidth which may be defined as dBm/MHz. This function returns the actual
1127  * max_power for non-standard (20 MHz) channels.
1128  *
1129  * @chandef: channel definition for the channel
1130  *
1131  * Returns: maximum allowed transmission power in dBm for the chandef
1132  */
1133 static inline int
1134 ieee80211_chandef_max_power(struct cfg80211_chan_def *chandef)
1135 {
1136 	switch (chandef->width) {
1137 	case NL80211_CHAN_WIDTH_5:
1138 		return min(chandef->chan->max_reg_power - 6,
1139 			   chandef->chan->max_power);
1140 	case NL80211_CHAN_WIDTH_10:
1141 		return min(chandef->chan->max_reg_power - 3,
1142 			   chandef->chan->max_power);
1143 	default:
1144 		break;
1145 	}
1146 	return chandef->chan->max_power;
1147 }
1148 
1149 /**
1150  * cfg80211_any_usable_channels - check for usable channels
1151  * @wiphy: the wiphy to check for
1152  * @band_mask: which bands to check on
1153  * @prohibited_flags: which channels to not consider usable,
1154  *	%IEEE80211_CHAN_DISABLED is always taken into account
1155  *
1156  * Return: %true if usable channels found, %false otherwise
1157  */
1158 bool cfg80211_any_usable_channels(struct wiphy *wiphy,
1159 				  unsigned long band_mask,
1160 				  u32 prohibited_flags);
1161 
1162 /**
1163  * enum survey_info_flags - survey information flags
1164  *
1165  * @SURVEY_INFO_NOISE_DBM: noise (in dBm) was filled in
1166  * @SURVEY_INFO_IN_USE: channel is currently being used
1167  * @SURVEY_INFO_TIME: active time (in ms) was filled in
1168  * @SURVEY_INFO_TIME_BUSY: busy time was filled in
1169  * @SURVEY_INFO_TIME_EXT_BUSY: extension channel busy time was filled in
1170  * @SURVEY_INFO_TIME_RX: receive time was filled in
1171  * @SURVEY_INFO_TIME_TX: transmit time was filled in
1172  * @SURVEY_INFO_TIME_SCAN: scan time was filled in
1173  * @SURVEY_INFO_TIME_BSS_RX: local BSS receive time was filled in
1174  *
1175  * Used by the driver to indicate which info in &struct survey_info
1176  * it has filled in during the get_survey().
1177  */
1178 enum survey_info_flags {
1179 	SURVEY_INFO_NOISE_DBM		= BIT(0),
1180 	SURVEY_INFO_IN_USE		= BIT(1),
1181 	SURVEY_INFO_TIME		= BIT(2),
1182 	SURVEY_INFO_TIME_BUSY		= BIT(3),
1183 	SURVEY_INFO_TIME_EXT_BUSY	= BIT(4),
1184 	SURVEY_INFO_TIME_RX		= BIT(5),
1185 	SURVEY_INFO_TIME_TX		= BIT(6),
1186 	SURVEY_INFO_TIME_SCAN		= BIT(7),
1187 	SURVEY_INFO_TIME_BSS_RX		= BIT(8),
1188 };
1189 
1190 /**
1191  * struct survey_info - channel survey response
1192  *
1193  * @channel: the channel this survey record reports, may be %NULL for a single
1194  *	record to report global statistics
1195  * @filled: bitflag of flags from &enum survey_info_flags
1196  * @noise: channel noise in dBm. This and all following fields are
1197  *	optional
1198  * @time: amount of time in ms the radio was turn on (on the channel)
1199  * @time_busy: amount of time the primary channel was sensed busy
1200  * @time_ext_busy: amount of time the extension channel was sensed busy
1201  * @time_rx: amount of time the radio spent receiving data
1202  * @time_tx: amount of time the radio spent transmitting data
1203  * @time_scan: amount of time the radio spent for scanning
1204  * @time_bss_rx: amount of time the radio spent receiving data on a local BSS
1205  *
1206  * Used by dump_survey() to report back per-channel survey information.
1207  *
1208  * This structure can later be expanded with things like
1209  * channel duty cycle etc.
1210  */
1211 struct survey_info {
1212 	struct ieee80211_channel *channel;
1213 	u64 time;
1214 	u64 time_busy;
1215 	u64 time_ext_busy;
1216 	u64 time_rx;
1217 	u64 time_tx;
1218 	u64 time_scan;
1219 	u64 time_bss_rx;
1220 	u32 filled;
1221 	s8 noise;
1222 };
1223 
1224 #define CFG80211_MAX_NUM_AKM_SUITES	10
1225 
1226 /**
1227  * struct cfg80211_crypto_settings - Crypto settings
1228  * @wpa_versions: indicates which, if any, WPA versions are enabled
1229  *	(from enum nl80211_wpa_versions)
1230  * @cipher_group: group key cipher suite (or 0 if unset)
1231  * @n_ciphers_pairwise: number of AP supported unicast ciphers
1232  * @ciphers_pairwise: unicast key cipher suites
1233  * @n_akm_suites: number of AKM suites
1234  * @akm_suites: AKM suites
1235  * @control_port: Whether user space controls IEEE 802.1X port, i.e.,
1236  *	sets/clears %NL80211_STA_FLAG_AUTHORIZED. If true, the driver is
1237  *	required to assume that the port is unauthorized until authorized by
1238  *	user space. Otherwise, port is marked authorized by default.
1239  * @control_port_ethertype: the control port protocol that should be
1240  *	allowed through even on unauthorized ports
1241  * @control_port_no_encrypt: TRUE to prevent encryption of control port
1242  *	protocol frames.
1243  * @control_port_over_nl80211: TRUE if userspace expects to exchange control
1244  *	port frames over NL80211 instead of the network interface.
1245  * @control_port_no_preauth: disables pre-auth rx over the nl80211 control
1246  *	port for mac80211
1247  * @psk: PSK (for devices supporting 4-way-handshake offload)
1248  * @sae_pwd: password for SAE authentication (for devices supporting SAE
1249  *	offload)
1250  * @sae_pwd_len: length of SAE password (for devices supporting SAE offload)
1251  * @sae_pwe: The mechanisms allowed for SAE PWE derivation:
1252  *
1253  *	NL80211_SAE_PWE_UNSPECIFIED
1254  *	  Not-specified, used to indicate userspace did not specify any
1255  *	  preference. The driver should follow its internal policy in
1256  *	  such a scenario.
1257  *
1258  *	NL80211_SAE_PWE_HUNT_AND_PECK
1259  *	  Allow hunting-and-pecking loop only
1260  *
1261  *	NL80211_SAE_PWE_HASH_TO_ELEMENT
1262  *	  Allow hash-to-element only
1263  *
1264  *	NL80211_SAE_PWE_BOTH
1265  *	  Allow either hunting-and-pecking loop or hash-to-element
1266  */
1267 struct cfg80211_crypto_settings {
1268 	u32 wpa_versions;
1269 	u32 cipher_group;
1270 	int n_ciphers_pairwise;
1271 	u32 ciphers_pairwise[NL80211_MAX_NR_CIPHER_SUITES];
1272 	int n_akm_suites;
1273 	u32 akm_suites[CFG80211_MAX_NUM_AKM_SUITES];
1274 	bool control_port;
1275 	__be16 control_port_ethertype;
1276 	bool control_port_no_encrypt;
1277 	bool control_port_over_nl80211;
1278 	bool control_port_no_preauth;
1279 	const u8 *psk;
1280 	const u8 *sae_pwd;
1281 	u8 sae_pwd_len;
1282 	enum nl80211_sae_pwe_mechanism sae_pwe;
1283 };
1284 
1285 /**
1286  * struct cfg80211_mbssid_config - AP settings for multi bssid
1287  *
1288  * @tx_wdev: pointer to the transmitted interface in the MBSSID set
1289  * @index: index of this AP in the multi bssid group.
1290  * @ema: set to true if the beacons should be sent out in EMA mode.
1291  */
1292 struct cfg80211_mbssid_config {
1293 	struct wireless_dev *tx_wdev;
1294 	u8 index;
1295 	bool ema;
1296 };
1297 
1298 /**
1299  * struct cfg80211_mbssid_elems - Multiple BSSID elements
1300  *
1301  * @cnt: Number of elements in array %elems.
1302  *
1303  * @elem: Array of multiple BSSID element(s) to be added into Beacon frames.
1304  * @elem.data: Data for multiple BSSID elements.
1305  * @elem.len: Length of data.
1306  */
1307 struct cfg80211_mbssid_elems {
1308 	u8 cnt;
1309 	struct {
1310 		const u8 *data;
1311 		size_t len;
1312 	} elem[] __counted_by(cnt);
1313 };
1314 
1315 /**
1316  * struct cfg80211_rnr_elems - Reduced neighbor report (RNR) elements
1317  *
1318  * @cnt: Number of elements in array %elems.
1319  *
1320  * @elem: Array of RNR element(s) to be added into Beacon frames.
1321  * @elem.data: Data for RNR elements.
1322  * @elem.len: Length of data.
1323  */
1324 struct cfg80211_rnr_elems {
1325 	u8 cnt;
1326 	struct {
1327 		const u8 *data;
1328 		size_t len;
1329 	} elem[] __counted_by(cnt);
1330 };
1331 
1332 /**
1333  * struct cfg80211_beacon_data - beacon data
1334  * @link_id: the link ID for the AP MLD link sending this beacon
1335  * @head: head portion of beacon (before TIM IE)
1336  *	or %NULL if not changed
1337  * @tail: tail portion of beacon (after TIM IE)
1338  *	or %NULL if not changed
1339  * @head_len: length of @head
1340  * @tail_len: length of @tail
1341  * @beacon_ies: extra information element(s) to add into Beacon frames or %NULL
1342  * @beacon_ies_len: length of beacon_ies in octets
1343  * @proberesp_ies: extra information element(s) to add into Probe Response
1344  *	frames or %NULL
1345  * @proberesp_ies_len: length of proberesp_ies in octets
1346  * @assocresp_ies: extra information element(s) to add into (Re)Association
1347  *	Response frames or %NULL
1348  * @assocresp_ies_len: length of assocresp_ies in octets
1349  * @probe_resp_len: length of probe response template (@probe_resp)
1350  * @probe_resp: probe response template (AP mode only)
1351  * @mbssid_ies: multiple BSSID elements
1352  * @rnr_ies: reduced neighbor report elements
1353  * @ftm_responder: enable FTM responder functionality; -1 for no change
1354  *	(which also implies no change in LCI/civic location data)
1355  * @lci: Measurement Report element content, starting with Measurement Token
1356  *	(measurement type 8)
1357  * @civicloc: Measurement Report element content, starting with Measurement
1358  *	Token (measurement type 11)
1359  * @lci_len: LCI data length
1360  * @civicloc_len: Civic location data length
1361  * @he_bss_color: BSS Color settings
1362  * @he_bss_color_valid: indicates whether bss color
1363  *	attribute is present in beacon data or not.
1364  */
1365 struct cfg80211_beacon_data {
1366 	unsigned int link_id;
1367 
1368 	const u8 *head, *tail;
1369 	const u8 *beacon_ies;
1370 	const u8 *proberesp_ies;
1371 	const u8 *assocresp_ies;
1372 	const u8 *probe_resp;
1373 	const u8 *lci;
1374 	const u8 *civicloc;
1375 	struct cfg80211_mbssid_elems *mbssid_ies;
1376 	struct cfg80211_rnr_elems *rnr_ies;
1377 	s8 ftm_responder;
1378 
1379 	size_t head_len, tail_len;
1380 	size_t beacon_ies_len;
1381 	size_t proberesp_ies_len;
1382 	size_t assocresp_ies_len;
1383 	size_t probe_resp_len;
1384 	size_t lci_len;
1385 	size_t civicloc_len;
1386 	struct cfg80211_he_bss_color he_bss_color;
1387 	bool he_bss_color_valid;
1388 };
1389 
1390 struct mac_address {
1391 	u8 addr[ETH_ALEN];
1392 };
1393 
1394 /**
1395  * struct cfg80211_acl_data - Access control list data
1396  *
1397  * @acl_policy: ACL policy to be applied on the station's
1398  *	entry specified by mac_addr
1399  * @n_acl_entries: Number of MAC address entries passed
1400  * @mac_addrs: List of MAC addresses of stations to be used for ACL
1401  */
1402 struct cfg80211_acl_data {
1403 	enum nl80211_acl_policy acl_policy;
1404 	int n_acl_entries;
1405 
1406 	/* Keep it last */
1407 	struct mac_address mac_addrs[] __counted_by(n_acl_entries);
1408 };
1409 
1410 /**
1411  * struct cfg80211_fils_discovery - FILS discovery parameters from
1412  * IEEE Std 802.11ai-2016, Annex C.3 MIB detail.
1413  *
1414  * @update: Set to true if the feature configuration should be updated.
1415  * @min_interval: Minimum packet interval in TUs (0 - 10000)
1416  * @max_interval: Maximum packet interval in TUs (0 - 10000)
1417  * @tmpl_len: Template length
1418  * @tmpl: Template data for FILS discovery frame including the action
1419  *	frame headers.
1420  */
1421 struct cfg80211_fils_discovery {
1422 	bool update;
1423 	u32 min_interval;
1424 	u32 max_interval;
1425 	size_t tmpl_len;
1426 	const u8 *tmpl;
1427 };
1428 
1429 /**
1430  * struct cfg80211_unsol_bcast_probe_resp - Unsolicited broadcast probe
1431  *	response parameters in 6GHz.
1432  *
1433  * @update: Set to true if the feature configuration should be updated.
1434  * @interval: Packet interval in TUs. Maximum allowed is 20 TU, as mentioned
1435  *	in IEEE P802.11ax/D6.0 26.17.2.3.2 - AP behavior for fast passive
1436  *	scanning
1437  * @tmpl_len: Template length
1438  * @tmpl: Template data for probe response
1439  */
1440 struct cfg80211_unsol_bcast_probe_resp {
1441 	bool update;
1442 	u32 interval;
1443 	size_t tmpl_len;
1444 	const u8 *tmpl;
1445 };
1446 
1447 /**
1448  * struct cfg80211_ap_settings - AP configuration
1449  *
1450  * Used to configure an AP interface.
1451  *
1452  * @chandef: defines the channel to use
1453  * @beacon: beacon data
1454  * @beacon_interval: beacon interval
1455  * @dtim_period: DTIM period
1456  * @ssid: SSID to be used in the BSS (note: may be %NULL if not provided from
1457  *	user space)
1458  * @ssid_len: length of @ssid
1459  * @hidden_ssid: whether to hide the SSID in Beacon/Probe Response frames
1460  * @crypto: crypto settings
1461  * @privacy: the BSS uses privacy
1462  * @auth_type: Authentication type (algorithm)
1463  * @inactivity_timeout: time in seconds to determine station's inactivity.
1464  * @p2p_ctwindow: P2P CT Window
1465  * @p2p_opp_ps: P2P opportunistic PS
1466  * @acl: ACL configuration used by the drivers which has support for
1467  *	MAC address based access control
1468  * @pbss: If set, start as a PCP instead of AP. Relevant for DMG
1469  *	networks.
1470  * @beacon_rate: bitrate to be used for beacons
1471  * @ht_cap: HT capabilities (or %NULL if HT isn't enabled)
1472  * @vht_cap: VHT capabilities (or %NULL if VHT isn't enabled)
1473  * @he_cap: HE capabilities (or %NULL if HE isn't enabled)
1474  * @eht_cap: EHT capabilities (or %NULL if EHT isn't enabled)
1475  * @eht_oper: EHT operation IE (or %NULL if EHT isn't enabled)
1476  * @ht_required: stations must support HT
1477  * @vht_required: stations must support VHT
1478  * @twt_responder: Enable Target Wait Time
1479  * @he_required: stations must support HE
1480  * @sae_h2e_required: stations must support direct H2E technique in SAE
1481  * @flags: flags, as defined in &enum nl80211_ap_settings_flags
1482  * @he_obss_pd: OBSS Packet Detection settings
1483  * @he_oper: HE operation IE (or %NULL if HE isn't enabled)
1484  * @fils_discovery: FILS discovery transmission parameters
1485  * @unsol_bcast_probe_resp: Unsolicited broadcast probe response parameters
1486  * @mbssid_config: AP settings for multiple bssid
1487  */
1488 struct cfg80211_ap_settings {
1489 	struct cfg80211_chan_def chandef;
1490 
1491 	struct cfg80211_beacon_data beacon;
1492 
1493 	int beacon_interval, dtim_period;
1494 	const u8 *ssid;
1495 	size_t ssid_len;
1496 	enum nl80211_hidden_ssid hidden_ssid;
1497 	struct cfg80211_crypto_settings crypto;
1498 	bool privacy;
1499 	enum nl80211_auth_type auth_type;
1500 	int inactivity_timeout;
1501 	u8 p2p_ctwindow;
1502 	bool p2p_opp_ps;
1503 	const struct cfg80211_acl_data *acl;
1504 	bool pbss;
1505 	struct cfg80211_bitrate_mask beacon_rate;
1506 
1507 	const struct ieee80211_ht_cap *ht_cap;
1508 	const struct ieee80211_vht_cap *vht_cap;
1509 	const struct ieee80211_he_cap_elem *he_cap;
1510 	const struct ieee80211_he_operation *he_oper;
1511 	const struct ieee80211_eht_cap_elem *eht_cap;
1512 	const struct ieee80211_eht_operation *eht_oper;
1513 	bool ht_required, vht_required, he_required, sae_h2e_required;
1514 	bool twt_responder;
1515 	u32 flags;
1516 	struct ieee80211_he_obss_pd he_obss_pd;
1517 	struct cfg80211_fils_discovery fils_discovery;
1518 	struct cfg80211_unsol_bcast_probe_resp unsol_bcast_probe_resp;
1519 	struct cfg80211_mbssid_config mbssid_config;
1520 };
1521 
1522 
1523 /**
1524  * struct cfg80211_ap_update - AP configuration update
1525  *
1526  * Subset of &struct cfg80211_ap_settings, for updating a running AP.
1527  *
1528  * @beacon: beacon data
1529  * @fils_discovery: FILS discovery transmission parameters
1530  * @unsol_bcast_probe_resp: Unsolicited broadcast probe response parameters
1531  */
1532 struct cfg80211_ap_update {
1533 	struct cfg80211_beacon_data beacon;
1534 	struct cfg80211_fils_discovery fils_discovery;
1535 	struct cfg80211_unsol_bcast_probe_resp unsol_bcast_probe_resp;
1536 };
1537 
1538 /**
1539  * struct cfg80211_csa_settings - channel switch settings
1540  *
1541  * Used for channel switch
1542  *
1543  * @chandef: defines the channel to use after the switch
1544  * @beacon_csa: beacon data while performing the switch
1545  * @counter_offsets_beacon: offsets of the counters within the beacon (tail)
1546  * @counter_offsets_presp: offsets of the counters within the probe response
1547  * @n_counter_offsets_beacon: number of csa counters the beacon (tail)
1548  * @n_counter_offsets_presp: number of csa counters in the probe response
1549  * @beacon_after: beacon data to be used on the new channel
1550  * @radar_required: whether radar detection is required on the new channel
1551  * @block_tx: whether transmissions should be blocked while changing
1552  * @count: number of beacons until switch
1553  * @link_id: defines the link on which channel switch is expected during
1554  *	MLO. 0 in case of non-MLO.
1555  */
1556 struct cfg80211_csa_settings {
1557 	struct cfg80211_chan_def chandef;
1558 	struct cfg80211_beacon_data beacon_csa;
1559 	const u16 *counter_offsets_beacon;
1560 	const u16 *counter_offsets_presp;
1561 	unsigned int n_counter_offsets_beacon;
1562 	unsigned int n_counter_offsets_presp;
1563 	struct cfg80211_beacon_data beacon_after;
1564 	bool radar_required;
1565 	bool block_tx;
1566 	u8 count;
1567 	u8 link_id;
1568 };
1569 
1570 /**
1571  * struct cfg80211_color_change_settings - color change settings
1572  *
1573  * Used for bss color change
1574  *
1575  * @beacon_color_change: beacon data while performing the color countdown
1576  * @counter_offset_beacon: offsets of the counters within the beacon (tail)
1577  * @counter_offset_presp: offsets of the counters within the probe response
1578  * @beacon_next: beacon data to be used after the color change
1579  * @count: number of beacons until the color change
1580  * @color: the color used after the change
1581  * @link_id: defines the link on which color change is expected during MLO.
1582  *	0 in case of non-MLO.
1583  */
1584 struct cfg80211_color_change_settings {
1585 	struct cfg80211_beacon_data beacon_color_change;
1586 	u16 counter_offset_beacon;
1587 	u16 counter_offset_presp;
1588 	struct cfg80211_beacon_data beacon_next;
1589 	u8 count;
1590 	u8 color;
1591 	u8 link_id;
1592 };
1593 
1594 /**
1595  * struct iface_combination_params - input parameters for interface combinations
1596  *
1597  * Used to pass interface combination parameters
1598  *
1599  * @radio_idx: wiphy radio index or -1 for global
1600  * @num_different_channels: the number of different channels we want
1601  *	to use for verification
1602  * @radar_detect: a bitmap where each bit corresponds to a channel
1603  *	width where radar detection is needed, as in the definition of
1604  *	&struct ieee80211_iface_combination.@radar_detect_widths
1605  * @iftype_num: array with the number of interfaces of each interface
1606  *	type.  The index is the interface type as specified in &enum
1607  *	nl80211_iftype.
1608  * @new_beacon_int: set this to the beacon interval of a new interface
1609  *	that's not operating yet, if such is to be checked as part of
1610  *	the verification
1611  */
1612 struct iface_combination_params {
1613 	int radio_idx;
1614 	int num_different_channels;
1615 	u8 radar_detect;
1616 	int iftype_num[NUM_NL80211_IFTYPES];
1617 	u32 new_beacon_int;
1618 };
1619 
1620 /**
1621  * enum station_parameters_apply_mask - station parameter values to apply
1622  * @STATION_PARAM_APPLY_UAPSD: apply new uAPSD parameters (uapsd_queues, max_sp)
1623  * @STATION_PARAM_APPLY_CAPABILITY: apply new capability
1624  * @STATION_PARAM_APPLY_PLINK_STATE: apply new plink state
1625  *
1626  * Not all station parameters have in-band "no change" signalling,
1627  * for those that don't these flags will are used.
1628  */
1629 enum station_parameters_apply_mask {
1630 	STATION_PARAM_APPLY_UAPSD = BIT(0),
1631 	STATION_PARAM_APPLY_CAPABILITY = BIT(1),
1632 	STATION_PARAM_APPLY_PLINK_STATE = BIT(2),
1633 };
1634 
1635 /**
1636  * struct sta_txpwr - station txpower configuration
1637  *
1638  * Used to configure txpower for station.
1639  *
1640  * @power: tx power (in dBm) to be used for sending data traffic. If tx power
1641  *	is not provided, the default per-interface tx power setting will be
1642  *	overriding. Driver should be picking up the lowest tx power, either tx
1643  *	power per-interface or per-station.
1644  * @type: In particular if TPC %type is NL80211_TX_POWER_LIMITED then tx power
1645  *	will be less than or equal to specified from userspace, whereas if TPC
1646  *	%type is NL80211_TX_POWER_AUTOMATIC then it indicates default tx power.
1647  *	NL80211_TX_POWER_FIXED is not a valid configuration option for
1648  *	per peer TPC.
1649  */
1650 struct sta_txpwr {
1651 	s16 power;
1652 	enum nl80211_tx_power_setting type;
1653 };
1654 
1655 /**
1656  * struct link_station_parameters - link station parameters
1657  *
1658  * Used to change and create a new link station.
1659  *
1660  * @mld_mac: MAC address of the station
1661  * @link_id: the link id (-1 for non-MLD station)
1662  * @link_mac: MAC address of the link
1663  * @supported_rates: supported rates in IEEE 802.11 format
1664  *	(or NULL for no change)
1665  * @supported_rates_len: number of supported rates
1666  * @ht_capa: HT capabilities of station
1667  * @vht_capa: VHT capabilities of station
1668  * @opmode_notif: operating mode field from Operating Mode Notification
1669  * @opmode_notif_used: information if operating mode field is used
1670  * @he_capa: HE capabilities of station
1671  * @he_capa_len: the length of the HE capabilities
1672  * @txpwr: transmit power for an associated station
1673  * @txpwr_set: txpwr field is set
1674  * @he_6ghz_capa: HE 6 GHz Band capabilities of station
1675  * @eht_capa: EHT capabilities of station
1676  * @eht_capa_len: the length of the EHT capabilities
1677  */
1678 struct link_station_parameters {
1679 	const u8 *mld_mac;
1680 	int link_id;
1681 	const u8 *link_mac;
1682 	const u8 *supported_rates;
1683 	u8 supported_rates_len;
1684 	const struct ieee80211_ht_cap *ht_capa;
1685 	const struct ieee80211_vht_cap *vht_capa;
1686 	u8 opmode_notif;
1687 	bool opmode_notif_used;
1688 	const struct ieee80211_he_cap_elem *he_capa;
1689 	u8 he_capa_len;
1690 	struct sta_txpwr txpwr;
1691 	bool txpwr_set;
1692 	const struct ieee80211_he_6ghz_capa *he_6ghz_capa;
1693 	const struct ieee80211_eht_cap_elem *eht_capa;
1694 	u8 eht_capa_len;
1695 };
1696 
1697 /**
1698  * struct link_station_del_parameters - link station deletion parameters
1699  *
1700  * Used to delete a link station entry (or all stations).
1701  *
1702  * @mld_mac: MAC address of the station
1703  * @link_id: the link id
1704  */
1705 struct link_station_del_parameters {
1706 	const u8 *mld_mac;
1707 	u32 link_id;
1708 };
1709 
1710 /**
1711  * struct cfg80211_ttlm_params: TID to link mapping parameters
1712  *
1713  * Used for setting a TID to link mapping.
1714  *
1715  * @dlink: Downlink TID to link mapping, as defined in section 9.4.2.314
1716  *     (TID-To-Link Mapping element) in Draft P802.11be_D4.0.
1717  * @ulink: Uplink TID to link mapping, as defined in section 9.4.2.314
1718  *     (TID-To-Link Mapping element) in Draft P802.11be_D4.0.
1719  */
1720 struct cfg80211_ttlm_params {
1721 	u16 dlink[8];
1722 	u16 ulink[8];
1723 };
1724 
1725 /**
1726  * struct station_parameters - station parameters
1727  *
1728  * Used to change and create a new station.
1729  *
1730  * @vlan: vlan interface station should belong to
1731  * @sta_flags_mask: station flags that changed
1732  *	(bitmask of BIT(%NL80211_STA_FLAG_...))
1733  * @sta_flags_set: station flags values
1734  *	(bitmask of BIT(%NL80211_STA_FLAG_...))
1735  * @listen_interval: listen interval or -1 for no change
1736  * @aid: AID or zero for no change
1737  * @vlan_id: VLAN ID for station (if nonzero)
1738  * @peer_aid: mesh peer AID or zero for no change
1739  * @plink_action: plink action to take
1740  * @plink_state: set the peer link state for a station
1741  * @uapsd_queues: bitmap of queues configured for uapsd. same format
1742  *	as the AC bitmap in the QoS info field
1743  * @max_sp: max Service Period. same format as the MAX_SP in the
1744  *	QoS info field (but already shifted down)
1745  * @sta_modify_mask: bitmap indicating which parameters changed
1746  *	(for those that don't have a natural "no change" value),
1747  *	see &enum station_parameters_apply_mask
1748  * @local_pm: local link-specific mesh power save mode (no change when set
1749  *	to unknown)
1750  * @capability: station capability
1751  * @ext_capab: extended capabilities of the station
1752  * @ext_capab_len: number of extended capabilities
1753  * @supported_channels: supported channels in IEEE 802.11 format
1754  * @supported_channels_len: number of supported channels
1755  * @supported_oper_classes: supported oper classes in IEEE 802.11 format
1756  * @supported_oper_classes_len: number of supported operating classes
1757  * @support_p2p_ps: information if station supports P2P PS mechanism
1758  * @airtime_weight: airtime scheduler weight for this station
1759  * @link_sta_params: link related params.
1760  */
1761 struct station_parameters {
1762 	struct net_device *vlan;
1763 	u32 sta_flags_mask, sta_flags_set;
1764 	u32 sta_modify_mask;
1765 	int listen_interval;
1766 	u16 aid;
1767 	u16 vlan_id;
1768 	u16 peer_aid;
1769 	u8 plink_action;
1770 	u8 plink_state;
1771 	u8 uapsd_queues;
1772 	u8 max_sp;
1773 	enum nl80211_mesh_power_mode local_pm;
1774 	u16 capability;
1775 	const u8 *ext_capab;
1776 	u8 ext_capab_len;
1777 	const u8 *supported_channels;
1778 	u8 supported_channels_len;
1779 	const u8 *supported_oper_classes;
1780 	u8 supported_oper_classes_len;
1781 	int support_p2p_ps;
1782 	u16 airtime_weight;
1783 	struct link_station_parameters link_sta_params;
1784 };
1785 
1786 /**
1787  * struct station_del_parameters - station deletion parameters
1788  *
1789  * Used to delete a station entry (or all stations).
1790  *
1791  * @mac: MAC address of the station to remove or NULL to remove all stations
1792  * @subtype: Management frame subtype to use for indicating removal
1793  *	(10 = Disassociation, 12 = Deauthentication)
1794  * @reason_code: Reason code for the Disassociation/Deauthentication frame
1795  * @link_id: Link ID indicating a link that stations to be flushed must be
1796  *	using; valid only for MLO, but can also be -1 for MLO to really
1797  *	remove all stations.
1798  */
1799 struct station_del_parameters {
1800 	const u8 *mac;
1801 	u8 subtype;
1802 	u16 reason_code;
1803 	int link_id;
1804 };
1805 
1806 /**
1807  * enum cfg80211_station_type - the type of station being modified
1808  * @CFG80211_STA_AP_CLIENT: client of an AP interface
1809  * @CFG80211_STA_AP_CLIENT_UNASSOC: client of an AP interface that is still
1810  *	unassociated (update properties for this type of client is permitted)
1811  * @CFG80211_STA_AP_MLME_CLIENT: client of an AP interface that has
1812  *	the AP MLME in the device
1813  * @CFG80211_STA_AP_STA: AP station on managed interface
1814  * @CFG80211_STA_IBSS: IBSS station
1815  * @CFG80211_STA_TDLS_PEER_SETUP: TDLS peer on managed interface (dummy entry
1816  *	while TDLS setup is in progress, it moves out of this state when
1817  *	being marked authorized; use this only if TDLS with external setup is
1818  *	supported/used)
1819  * @CFG80211_STA_TDLS_PEER_ACTIVE: TDLS peer on managed interface (active
1820  *	entry that is operating, has been marked authorized by userspace)
1821  * @CFG80211_STA_MESH_PEER_KERNEL: peer on mesh interface (kernel managed)
1822  * @CFG80211_STA_MESH_PEER_USER: peer on mesh interface (user managed)
1823  */
1824 enum cfg80211_station_type {
1825 	CFG80211_STA_AP_CLIENT,
1826 	CFG80211_STA_AP_CLIENT_UNASSOC,
1827 	CFG80211_STA_AP_MLME_CLIENT,
1828 	CFG80211_STA_AP_STA,
1829 	CFG80211_STA_IBSS,
1830 	CFG80211_STA_TDLS_PEER_SETUP,
1831 	CFG80211_STA_TDLS_PEER_ACTIVE,
1832 	CFG80211_STA_MESH_PEER_KERNEL,
1833 	CFG80211_STA_MESH_PEER_USER,
1834 };
1835 
1836 /**
1837  * cfg80211_check_station_change - validate parameter changes
1838  * @wiphy: the wiphy this operates on
1839  * @params: the new parameters for a station
1840  * @statype: the type of station being modified
1841  *
1842  * Utility function for the @change_station driver method. Call this function
1843  * with the appropriate station type looking up the station (and checking that
1844  * it exists). It will verify whether the station change is acceptable.
1845  *
1846  * Return: 0 if the change is acceptable, otherwise an error code. Note that
1847  * it may modify the parameters for backward compatibility reasons, so don't
1848  * use them before calling this.
1849  */
1850 int cfg80211_check_station_change(struct wiphy *wiphy,
1851 				  struct station_parameters *params,
1852 				  enum cfg80211_station_type statype);
1853 
1854 /**
1855  * enum rate_info_flags - bitrate info flags
1856  *
1857  * Used by the driver to indicate the specific rate transmission
1858  * type for 802.11n transmissions.
1859  *
1860  * @RATE_INFO_FLAGS_MCS: mcs field filled with HT MCS
1861  * @RATE_INFO_FLAGS_VHT_MCS: mcs field filled with VHT MCS
1862  * @RATE_INFO_FLAGS_SHORT_GI: 400ns guard interval
1863  * @RATE_INFO_FLAGS_DMG: 60GHz MCS
1864  * @RATE_INFO_FLAGS_HE_MCS: HE MCS information
1865  * @RATE_INFO_FLAGS_EDMG: 60GHz MCS in EDMG mode
1866  * @RATE_INFO_FLAGS_EXTENDED_SC_DMG: 60GHz extended SC MCS
1867  * @RATE_INFO_FLAGS_EHT_MCS: EHT MCS information
1868  * @RATE_INFO_FLAGS_S1G_MCS: MCS field filled with S1G MCS
1869  */
1870 enum rate_info_flags {
1871 	RATE_INFO_FLAGS_MCS			= BIT(0),
1872 	RATE_INFO_FLAGS_VHT_MCS			= BIT(1),
1873 	RATE_INFO_FLAGS_SHORT_GI		= BIT(2),
1874 	RATE_INFO_FLAGS_DMG			= BIT(3),
1875 	RATE_INFO_FLAGS_HE_MCS			= BIT(4),
1876 	RATE_INFO_FLAGS_EDMG			= BIT(5),
1877 	RATE_INFO_FLAGS_EXTENDED_SC_DMG		= BIT(6),
1878 	RATE_INFO_FLAGS_EHT_MCS			= BIT(7),
1879 	RATE_INFO_FLAGS_S1G_MCS			= BIT(8),
1880 };
1881 
1882 /**
1883  * enum rate_info_bw - rate bandwidth information
1884  *
1885  * Used by the driver to indicate the rate bandwidth.
1886  *
1887  * @RATE_INFO_BW_5: 5 MHz bandwidth
1888  * @RATE_INFO_BW_10: 10 MHz bandwidth
1889  * @RATE_INFO_BW_20: 20 MHz bandwidth
1890  * @RATE_INFO_BW_40: 40 MHz bandwidth
1891  * @RATE_INFO_BW_80: 80 MHz bandwidth
1892  * @RATE_INFO_BW_160: 160 MHz bandwidth
1893  * @RATE_INFO_BW_HE_RU: bandwidth determined by HE RU allocation
1894  * @RATE_INFO_BW_320: 320 MHz bandwidth
1895  * @RATE_INFO_BW_EHT_RU: bandwidth determined by EHT RU allocation
1896  * @RATE_INFO_BW_1: 1 MHz bandwidth
1897  * @RATE_INFO_BW_2: 2 MHz bandwidth
1898  * @RATE_INFO_BW_4: 4 MHz bandwidth
1899  * @RATE_INFO_BW_8: 8 MHz bandwidth
1900  * @RATE_INFO_BW_16: 16 MHz bandwidth
1901  */
1902 enum rate_info_bw {
1903 	RATE_INFO_BW_20 = 0,
1904 	RATE_INFO_BW_5,
1905 	RATE_INFO_BW_10,
1906 	RATE_INFO_BW_40,
1907 	RATE_INFO_BW_80,
1908 	RATE_INFO_BW_160,
1909 	RATE_INFO_BW_HE_RU,
1910 	RATE_INFO_BW_320,
1911 	RATE_INFO_BW_EHT_RU,
1912 	RATE_INFO_BW_1,
1913 	RATE_INFO_BW_2,
1914 	RATE_INFO_BW_4,
1915 	RATE_INFO_BW_8,
1916 	RATE_INFO_BW_16,
1917 };
1918 
1919 /**
1920  * struct rate_info - bitrate information
1921  *
1922  * Information about a receiving or transmitting bitrate
1923  *
1924  * @flags: bitflag of flags from &enum rate_info_flags
1925  * @legacy: bitrate in 100kbit/s for 802.11abg
1926  * @mcs: mcs index if struct describes an HT/VHT/HE/EHT/S1G rate
1927  * @nss: number of streams (VHT & HE only)
1928  * @bw: bandwidth (from &enum rate_info_bw)
1929  * @he_gi: HE guard interval (from &enum nl80211_he_gi)
1930  * @he_dcm: HE DCM value
1931  * @he_ru_alloc: HE RU allocation (from &enum nl80211_he_ru_alloc,
1932  *	only valid if bw is %RATE_INFO_BW_HE_RU)
1933  * @n_bonded_ch: In case of EDMG the number of bonded channels (1-4)
1934  * @eht_gi: EHT guard interval (from &enum nl80211_eht_gi)
1935  * @eht_ru_alloc: EHT RU allocation (from &enum nl80211_eht_ru_alloc,
1936  *	only valid if bw is %RATE_INFO_BW_EHT_RU)
1937  */
1938 struct rate_info {
1939 	u16 flags;
1940 	u16 legacy;
1941 	u8 mcs;
1942 	u8 nss;
1943 	u8 bw;
1944 	u8 he_gi;
1945 	u8 he_dcm;
1946 	u8 he_ru_alloc;
1947 	u8 n_bonded_ch;
1948 	u8 eht_gi;
1949 	u8 eht_ru_alloc;
1950 };
1951 
1952 /**
1953  * enum bss_param_flags - bitrate info flags
1954  *
1955  * Used by the driver to indicate the specific rate transmission
1956  * type for 802.11n transmissions.
1957  *
1958  * @BSS_PARAM_FLAGS_CTS_PROT: whether CTS protection is enabled
1959  * @BSS_PARAM_FLAGS_SHORT_PREAMBLE: whether short preamble is enabled
1960  * @BSS_PARAM_FLAGS_SHORT_SLOT_TIME: whether short slot time is enabled
1961  */
1962 enum bss_param_flags {
1963 	BSS_PARAM_FLAGS_CTS_PROT	= BIT(0),
1964 	BSS_PARAM_FLAGS_SHORT_PREAMBLE	= BIT(1),
1965 	BSS_PARAM_FLAGS_SHORT_SLOT_TIME	= BIT(2),
1966 };
1967 
1968 /**
1969  * struct sta_bss_parameters - BSS parameters for the attached station
1970  *
1971  * Information about the currently associated BSS
1972  *
1973  * @flags: bitflag of flags from &enum bss_param_flags
1974  * @dtim_period: DTIM period for the BSS
1975  * @beacon_interval: beacon interval
1976  */
1977 struct sta_bss_parameters {
1978 	u8 flags;
1979 	u8 dtim_period;
1980 	u16 beacon_interval;
1981 };
1982 
1983 /**
1984  * struct cfg80211_txq_stats - TXQ statistics for this TID
1985  * @filled: bitmap of flags using the bits of &enum nl80211_txq_stats to
1986  *	indicate the relevant values in this struct are filled
1987  * @backlog_bytes: total number of bytes currently backlogged
1988  * @backlog_packets: total number of packets currently backlogged
1989  * @flows: number of new flows seen
1990  * @drops: total number of packets dropped
1991  * @ecn_marks: total number of packets marked with ECN CE
1992  * @overlimit: number of drops due to queue space overflow
1993  * @overmemory: number of drops due to memory limit overflow
1994  * @collisions: number of hash collisions
1995  * @tx_bytes: total number of bytes dequeued
1996  * @tx_packets: total number of packets dequeued
1997  * @max_flows: maximum number of flows supported
1998  */
1999 struct cfg80211_txq_stats {
2000 	u32 filled;
2001 	u32 backlog_bytes;
2002 	u32 backlog_packets;
2003 	u32 flows;
2004 	u32 drops;
2005 	u32 ecn_marks;
2006 	u32 overlimit;
2007 	u32 overmemory;
2008 	u32 collisions;
2009 	u32 tx_bytes;
2010 	u32 tx_packets;
2011 	u32 max_flows;
2012 };
2013 
2014 /**
2015  * struct cfg80211_tid_stats - per-TID statistics
2016  * @filled: bitmap of flags using the bits of &enum nl80211_tid_stats to
2017  *	indicate the relevant values in this struct are filled
2018  * @rx_msdu: number of received MSDUs
2019  * @tx_msdu: number of (attempted) transmitted MSDUs
2020  * @tx_msdu_retries: number of retries (not counting the first) for
2021  *	transmitted MSDUs
2022  * @tx_msdu_failed: number of failed transmitted MSDUs
2023  * @txq_stats: TXQ statistics
2024  */
2025 struct cfg80211_tid_stats {
2026 	u32 filled;
2027 	u64 rx_msdu;
2028 	u64 tx_msdu;
2029 	u64 tx_msdu_retries;
2030 	u64 tx_msdu_failed;
2031 	struct cfg80211_txq_stats txq_stats;
2032 };
2033 
2034 #define IEEE80211_MAX_CHAINS	4
2035 
2036 /**
2037  * struct station_info - station information
2038  *
2039  * Station information filled by driver for get_station() and dump_station.
2040  *
2041  * @filled: bitflag of flags using the bits of &enum nl80211_sta_info to
2042  *	indicate the relevant values in this struct for them
2043  * @connected_time: time(in secs) since a station is last connected
2044  * @inactive_time: time since last station activity (tx/rx) in milliseconds
2045  * @assoc_at: bootime (ns) of the last association
2046  * @rx_bytes: bytes (size of MPDUs) received from this station
2047  * @tx_bytes: bytes (size of MPDUs) transmitted to this station
2048  * @llid: mesh local link id
2049  * @plid: mesh peer link id
2050  * @plink_state: mesh peer link state
2051  * @signal: The signal strength, type depends on the wiphy's signal_type.
2052  *	For CFG80211_SIGNAL_TYPE_MBM, value is expressed in _dBm_.
2053  * @signal_avg: Average signal strength, type depends on the wiphy's signal_type.
2054  *	For CFG80211_SIGNAL_TYPE_MBM, value is expressed in _dBm_.
2055  * @chains: bitmask for filled values in @chain_signal, @chain_signal_avg
2056  * @chain_signal: per-chain signal strength of last received packet in dBm
2057  * @chain_signal_avg: per-chain signal strength average in dBm
2058  * @txrate: current unicast bitrate from this station
2059  * @rxrate: current unicast bitrate to this station
2060  * @rx_packets: packets (MSDUs & MMPDUs) received from this station
2061  * @tx_packets: packets (MSDUs & MMPDUs) transmitted to this station
2062  * @tx_retries: cumulative retry counts (MPDUs)
2063  * @tx_failed: number of failed transmissions (MPDUs) (retries exceeded, no ACK)
2064  * @rx_dropped_misc:  Dropped for un-specified reason.
2065  * @bss_param: current BSS parameters
2066  * @generation: generation number for nl80211 dumps.
2067  *	This number should increase every time the list of stations
2068  *	changes, i.e. when a station is added or removed, so that
2069  *	userspace can tell whether it got a consistent snapshot.
2070  * @assoc_req_ies: IEs from (Re)Association Request.
2071  *	This is used only when in AP mode with drivers that do not use
2072  *	user space MLME/SME implementation. The information is provided for
2073  *	the cfg80211_new_sta() calls to notify user space of the IEs.
2074  * @assoc_req_ies_len: Length of assoc_req_ies buffer in octets.
2075  * @sta_flags: station flags mask & values
2076  * @beacon_loss_count: Number of times beacon loss event has triggered.
2077  * @t_offset: Time offset of the station relative to this host.
2078  * @local_pm: local mesh STA power save mode
2079  * @peer_pm: peer mesh STA power save mode
2080  * @nonpeer_pm: non-peer mesh STA power save mode
2081  * @expected_throughput: expected throughput in kbps (including 802.11 headers)
2082  *	towards this station.
2083  * @rx_beacon: number of beacons received from this peer
2084  * @rx_beacon_signal_avg: signal strength average (in dBm) for beacons received
2085  *	from this peer
2086  * @connected_to_gate: true if mesh STA has a path to mesh gate
2087  * @rx_duration: aggregate PPDU duration(usecs) for all the frames from a peer
2088  * @tx_duration: aggregate PPDU duration(usecs) for all the frames to a peer
2089  * @airtime_weight: current airtime scheduling weight
2090  * @pertid: per-TID statistics, see &struct cfg80211_tid_stats, using the last
2091  *	(IEEE80211_NUM_TIDS) index for MSDUs not encapsulated in QoS-MPDUs.
2092  *	Note that this doesn't use the @filled bit, but is used if non-NULL.
2093  * @ack_signal: signal strength (in dBm) of the last ACK frame.
2094  * @avg_ack_signal: average rssi value of ack packet for the no of msdu's has
2095  *	been sent.
2096  * @rx_mpdu_count: number of MPDUs received from this station
2097  * @fcs_err_count: number of packets (MPDUs) received from this station with
2098  *	an FCS error. This counter should be incremented only when TA of the
2099  *	received packet with an FCS error matches the peer MAC address.
2100  * @airtime_link_metric: mesh airtime link metric.
2101  * @connected_to_as: true if mesh STA has a path to authentication server
2102  * @mlo_params_valid: Indicates @assoc_link_id and @mld_addr fields are filled
2103  *	by driver. Drivers use this only in cfg80211_new_sta() calls when AP
2104  *	MLD's MLME/SME is offload to driver. Drivers won't fill this
2105  *	information in cfg80211_del_sta_sinfo(), get_station() and
2106  *	dump_station() callbacks.
2107  * @assoc_link_id: Indicates MLO link ID of the AP, with which the station
2108  *	completed (re)association. This information filled for both MLO
2109  *	and non-MLO STA connections when the AP affiliated with an MLD.
2110  * @mld_addr: For MLO STA connection, filled with MLD address of the station.
2111  *	For non-MLO STA connection, filled with all zeros.
2112  * @assoc_resp_ies: IEs from (Re)Association Response.
2113  *	This is used only when in AP mode with drivers that do not use user
2114  *	space MLME/SME implementation. The information is provided only for the
2115  *	cfg80211_new_sta() calls to notify user space of the IEs. Drivers won't
2116  *	fill this information in cfg80211_del_sta_sinfo(), get_station() and
2117  *	dump_station() callbacks. User space needs this information to determine
2118  *	the accepted and rejected affiliated links of the connected station.
2119  * @assoc_resp_ies_len: Length of @assoc_resp_ies buffer in octets.
2120  */
2121 struct station_info {
2122 	u64 filled;
2123 	u32 connected_time;
2124 	u32 inactive_time;
2125 	u64 assoc_at;
2126 	u64 rx_bytes;
2127 	u64 tx_bytes;
2128 	u16 llid;
2129 	u16 plid;
2130 	u8 plink_state;
2131 	s8 signal;
2132 	s8 signal_avg;
2133 
2134 	u8 chains;
2135 	s8 chain_signal[IEEE80211_MAX_CHAINS];
2136 	s8 chain_signal_avg[IEEE80211_MAX_CHAINS];
2137 
2138 	struct rate_info txrate;
2139 	struct rate_info rxrate;
2140 	u32 rx_packets;
2141 	u32 tx_packets;
2142 	u32 tx_retries;
2143 	u32 tx_failed;
2144 	u32 rx_dropped_misc;
2145 	struct sta_bss_parameters bss_param;
2146 	struct nl80211_sta_flag_update sta_flags;
2147 
2148 	int generation;
2149 
2150 	const u8 *assoc_req_ies;
2151 	size_t assoc_req_ies_len;
2152 
2153 	u32 beacon_loss_count;
2154 	s64 t_offset;
2155 	enum nl80211_mesh_power_mode local_pm;
2156 	enum nl80211_mesh_power_mode peer_pm;
2157 	enum nl80211_mesh_power_mode nonpeer_pm;
2158 
2159 	u32 expected_throughput;
2160 
2161 	u64 tx_duration;
2162 	u64 rx_duration;
2163 	u64 rx_beacon;
2164 	u8 rx_beacon_signal_avg;
2165 	u8 connected_to_gate;
2166 
2167 	struct cfg80211_tid_stats *pertid;
2168 	s8 ack_signal;
2169 	s8 avg_ack_signal;
2170 
2171 	u16 airtime_weight;
2172 
2173 	u32 rx_mpdu_count;
2174 	u32 fcs_err_count;
2175 
2176 	u32 airtime_link_metric;
2177 
2178 	u8 connected_to_as;
2179 
2180 	bool mlo_params_valid;
2181 	u8 assoc_link_id;
2182 	u8 mld_addr[ETH_ALEN] __aligned(2);
2183 	const u8 *assoc_resp_ies;
2184 	size_t assoc_resp_ies_len;
2185 };
2186 
2187 /**
2188  * struct cfg80211_sar_sub_specs - sub specs limit
2189  * @power: power limitation in 0.25dbm
2190  * @freq_range_index: index the power limitation applies to
2191  */
2192 struct cfg80211_sar_sub_specs {
2193 	s32 power;
2194 	u32 freq_range_index;
2195 };
2196 
2197 /**
2198  * struct cfg80211_sar_specs - sar limit specs
2199  * @type: it's set with power in 0.25dbm or other types
2200  * @num_sub_specs: number of sar sub specs
2201  * @sub_specs: memory to hold the sar sub specs
2202  */
2203 struct cfg80211_sar_specs {
2204 	enum nl80211_sar_type type;
2205 	u32 num_sub_specs;
2206 	struct cfg80211_sar_sub_specs sub_specs[] __counted_by(num_sub_specs);
2207 };
2208 
2209 
2210 /**
2211  * struct cfg80211_sar_freq_ranges - sar frequency ranges
2212  * @start_freq:  start range edge frequency
2213  * @end_freq:    end range edge frequency
2214  */
2215 struct cfg80211_sar_freq_ranges {
2216 	u32 start_freq;
2217 	u32 end_freq;
2218 };
2219 
2220 /**
2221  * struct cfg80211_sar_capa - sar limit capability
2222  * @type: it's set via power in 0.25dbm or other types
2223  * @num_freq_ranges: number of frequency ranges
2224  * @freq_ranges: memory to hold the freq ranges.
2225  *
2226  * Note: WLAN driver may append new ranges or split an existing
2227  * range to small ones and then append them.
2228  */
2229 struct cfg80211_sar_capa {
2230 	enum nl80211_sar_type type;
2231 	u32 num_freq_ranges;
2232 	const struct cfg80211_sar_freq_ranges *freq_ranges;
2233 };
2234 
2235 #if IS_ENABLED(CONFIG_CFG80211)
2236 /**
2237  * cfg80211_get_station - retrieve information about a given station
2238  * @dev: the device where the station is supposed to be connected to
2239  * @mac_addr: the mac address of the station of interest
2240  * @sinfo: pointer to the structure to fill with the information
2241  *
2242  * Return: 0 on success and sinfo is filled with the available information
2243  * otherwise returns a negative error code and the content of sinfo has to be
2244  * considered undefined.
2245  */
2246 int cfg80211_get_station(struct net_device *dev, const u8 *mac_addr,
2247 			 struct station_info *sinfo);
2248 #else
2249 static inline int cfg80211_get_station(struct net_device *dev,
2250 				       const u8 *mac_addr,
2251 				       struct station_info *sinfo)
2252 {
2253 	return -ENOENT;
2254 }
2255 #endif
2256 
2257 /**
2258  * enum monitor_flags - monitor flags
2259  *
2260  * Monitor interface configuration flags. Note that these must be the bits
2261  * according to the nl80211 flags.
2262  *
2263  * @MONITOR_FLAG_CHANGED: set if the flags were changed
2264  * @MONITOR_FLAG_FCSFAIL: pass frames with bad FCS
2265  * @MONITOR_FLAG_PLCPFAIL: pass frames with bad PLCP
2266  * @MONITOR_FLAG_CONTROL: pass control frames
2267  * @MONITOR_FLAG_OTHER_BSS: disable BSSID filtering
2268  * @MONITOR_FLAG_COOK_FRAMES: report frames after processing
2269  * @MONITOR_FLAG_ACTIVE: active monitor, ACKs frames on its MAC address
2270  * @MONITOR_FLAG_SKIP_TX: do not pass locally transmitted frames
2271  */
2272 enum monitor_flags {
2273 	MONITOR_FLAG_CHANGED		= BIT(__NL80211_MNTR_FLAG_INVALID),
2274 	MONITOR_FLAG_FCSFAIL		= BIT(NL80211_MNTR_FLAG_FCSFAIL),
2275 	MONITOR_FLAG_PLCPFAIL		= BIT(NL80211_MNTR_FLAG_PLCPFAIL),
2276 	MONITOR_FLAG_CONTROL		= BIT(NL80211_MNTR_FLAG_CONTROL),
2277 	MONITOR_FLAG_OTHER_BSS		= BIT(NL80211_MNTR_FLAG_OTHER_BSS),
2278 	MONITOR_FLAG_COOK_FRAMES	= BIT(NL80211_MNTR_FLAG_COOK_FRAMES),
2279 	MONITOR_FLAG_ACTIVE		= BIT(NL80211_MNTR_FLAG_ACTIVE),
2280 	MONITOR_FLAG_SKIP_TX		= BIT(NL80211_MNTR_FLAG_SKIP_TX),
2281 };
2282 
2283 /**
2284  * enum mpath_info_flags -  mesh path information flags
2285  *
2286  * Used by the driver to indicate which info in &struct mpath_info it has filled
2287  * in during get_station() or dump_station().
2288  *
2289  * @MPATH_INFO_FRAME_QLEN: @frame_qlen filled
2290  * @MPATH_INFO_SN: @sn filled
2291  * @MPATH_INFO_METRIC: @metric filled
2292  * @MPATH_INFO_EXPTIME: @exptime filled
2293  * @MPATH_INFO_DISCOVERY_TIMEOUT: @discovery_timeout filled
2294  * @MPATH_INFO_DISCOVERY_RETRIES: @discovery_retries filled
2295  * @MPATH_INFO_FLAGS: @flags filled
2296  * @MPATH_INFO_HOP_COUNT: @hop_count filled
2297  * @MPATH_INFO_PATH_CHANGE: @path_change_count filled
2298  */
2299 enum mpath_info_flags {
2300 	MPATH_INFO_FRAME_QLEN		= BIT(0),
2301 	MPATH_INFO_SN			= BIT(1),
2302 	MPATH_INFO_METRIC		= BIT(2),
2303 	MPATH_INFO_EXPTIME		= BIT(3),
2304 	MPATH_INFO_DISCOVERY_TIMEOUT	= BIT(4),
2305 	MPATH_INFO_DISCOVERY_RETRIES	= BIT(5),
2306 	MPATH_INFO_FLAGS		= BIT(6),
2307 	MPATH_INFO_HOP_COUNT		= BIT(7),
2308 	MPATH_INFO_PATH_CHANGE		= BIT(8),
2309 };
2310 
2311 /**
2312  * struct mpath_info - mesh path information
2313  *
2314  * Mesh path information filled by driver for get_mpath() and dump_mpath().
2315  *
2316  * @filled: bitfield of flags from &enum mpath_info_flags
2317  * @frame_qlen: number of queued frames for this destination
2318  * @sn: target sequence number
2319  * @metric: metric (cost) of this mesh path
2320  * @exptime: expiration time for the mesh path from now, in msecs
2321  * @flags: mesh path flags from &enum mesh_path_flags
2322  * @discovery_timeout: total mesh path discovery timeout, in msecs
2323  * @discovery_retries: mesh path discovery retries
2324  * @generation: generation number for nl80211 dumps.
2325  *	This number should increase every time the list of mesh paths
2326  *	changes, i.e. when a station is added or removed, so that
2327  *	userspace can tell whether it got a consistent snapshot.
2328  * @hop_count: hops to destination
2329  * @path_change_count: total number of path changes to destination
2330  */
2331 struct mpath_info {
2332 	u32 filled;
2333 	u32 frame_qlen;
2334 	u32 sn;
2335 	u32 metric;
2336 	u32 exptime;
2337 	u32 discovery_timeout;
2338 	u8 discovery_retries;
2339 	u8 flags;
2340 	u8 hop_count;
2341 	u32 path_change_count;
2342 
2343 	int generation;
2344 };
2345 
2346 /**
2347  * struct bss_parameters - BSS parameters
2348  *
2349  * Used to change BSS parameters (mainly for AP mode).
2350  *
2351  * @link_id: link_id or -1 for non-MLD
2352  * @use_cts_prot: Whether to use CTS protection
2353  *	(0 = no, 1 = yes, -1 = do not change)
2354  * @use_short_preamble: Whether the use of short preambles is allowed
2355  *	(0 = no, 1 = yes, -1 = do not change)
2356  * @use_short_slot_time: Whether the use of short slot time is allowed
2357  *	(0 = no, 1 = yes, -1 = do not change)
2358  * @basic_rates: basic rates in IEEE 802.11 format
2359  *	(or NULL for no change)
2360  * @basic_rates_len: number of basic rates
2361  * @ap_isolate: do not forward packets between connected stations
2362  *	(0 = no, 1 = yes, -1 = do not change)
2363  * @ht_opmode: HT Operation mode
2364  *	(u16 = opmode, -1 = do not change)
2365  * @p2p_ctwindow: P2P CT Window (-1 = no change)
2366  * @p2p_opp_ps: P2P opportunistic PS (-1 = no change)
2367  */
2368 struct bss_parameters {
2369 	int link_id;
2370 	int use_cts_prot;
2371 	int use_short_preamble;
2372 	int use_short_slot_time;
2373 	const u8 *basic_rates;
2374 	u8 basic_rates_len;
2375 	int ap_isolate;
2376 	int ht_opmode;
2377 	s8 p2p_ctwindow, p2p_opp_ps;
2378 };
2379 
2380 /**
2381  * struct mesh_config - 802.11s mesh configuration
2382  *
2383  * These parameters can be changed while the mesh is active.
2384  *
2385  * @dot11MeshRetryTimeout: the initial retry timeout in millisecond units used
2386  *	by the Mesh Peering Open message
2387  * @dot11MeshConfirmTimeout: the initial retry timeout in millisecond units
2388  *	used by the Mesh Peering Open message
2389  * @dot11MeshHoldingTimeout: the confirm timeout in millisecond units used by
2390  *	the mesh peering management to close a mesh peering
2391  * @dot11MeshMaxPeerLinks: the maximum number of peer links allowed on this
2392  *	mesh interface
2393  * @dot11MeshMaxRetries: the maximum number of peer link open retries that can
2394  *	be sent to establish a new peer link instance in a mesh
2395  * @dot11MeshTTL: the value of TTL field set at a source mesh STA
2396  * @element_ttl: the value of TTL field set at a mesh STA for path selection
2397  *	elements
2398  * @auto_open_plinks: whether we should automatically open peer links when we
2399  *	detect compatible mesh peers
2400  * @dot11MeshNbrOffsetMaxNeighbor: the maximum number of neighbors to
2401  *	synchronize to for 11s default synchronization method
2402  * @dot11MeshHWMPmaxPREQretries: the number of action frames containing a PREQ
2403  *	that an originator mesh STA can send to a particular path target
2404  * @path_refresh_time: how frequently to refresh mesh paths in milliseconds
2405  * @min_discovery_timeout: the minimum length of time to wait until giving up on
2406  *	a path discovery in milliseconds
2407  * @dot11MeshHWMPactivePathTimeout: the time (in TUs) for which mesh STAs
2408  *	receiving a PREQ shall consider the forwarding information from the
2409  *	root to be valid. (TU = time unit)
2410  * @dot11MeshHWMPpreqMinInterval: the minimum interval of time (in TUs) during
2411  *	which a mesh STA can send only one action frame containing a PREQ
2412  *	element
2413  * @dot11MeshHWMPperrMinInterval: the minimum interval of time (in TUs) during
2414  *	which a mesh STA can send only one Action frame containing a PERR
2415  *	element
2416  * @dot11MeshHWMPnetDiameterTraversalTime: the interval of time (in TUs) that
2417  *	it takes for an HWMP information element to propagate across the mesh
2418  * @dot11MeshHWMPRootMode: the configuration of a mesh STA as root mesh STA
2419  * @dot11MeshHWMPRannInterval: the interval of time (in TUs) between root
2420  *	announcements are transmitted
2421  * @dot11MeshGateAnnouncementProtocol: whether to advertise that this mesh
2422  *	station has access to a broader network beyond the MBSS. (This is
2423  *	missnamed in draft 12.0: dot11MeshGateAnnouncementProtocol set to true
2424  *	only means that the station will announce others it's a mesh gate, but
2425  *	not necessarily using the gate announcement protocol. Still keeping the
2426  *	same nomenclature to be in sync with the spec)
2427  * @dot11MeshForwarding: whether the Mesh STA is forwarding or non-forwarding
2428  *	entity (default is TRUE - forwarding entity)
2429  * @rssi_threshold: the threshold for average signal strength of candidate
2430  *	station to establish a peer link
2431  * @ht_opmode: mesh HT protection mode
2432  *
2433  * @dot11MeshHWMPactivePathToRootTimeout: The time (in TUs) for which mesh STAs
2434  *	receiving a proactive PREQ shall consider the forwarding information to
2435  *	the root mesh STA to be valid.
2436  *
2437  * @dot11MeshHWMProotInterval: The interval of time (in TUs) between proactive
2438  *	PREQs are transmitted.
2439  * @dot11MeshHWMPconfirmationInterval: The minimum interval of time (in TUs)
2440  *	during which a mesh STA can send only one Action frame containing
2441  *	a PREQ element for root path confirmation.
2442  * @power_mode: The default mesh power save mode which will be the initial
2443  *	setting for new peer links.
2444  * @dot11MeshAwakeWindowDuration: The duration in TUs the STA will remain awake
2445  *	after transmitting its beacon.
2446  * @plink_timeout: If no tx activity is seen from a STA we've established
2447  *	peering with for longer than this time (in seconds), then remove it
2448  *	from the STA's list of peers.  Default is 30 minutes.
2449  * @dot11MeshConnectedToAuthServer: if set to true then this mesh STA
2450  *	will advertise that it is connected to a authentication server
2451  *	in the mesh formation field.
2452  * @dot11MeshConnectedToMeshGate: if set to true, advertise that this STA is
2453  *      connected to a mesh gate in mesh formation info.  If false, the
2454  *      value in mesh formation is determined by the presence of root paths
2455  *      in the mesh path table
2456  * @dot11MeshNolearn: Try to avoid multi-hop path discovery (e.g. PREQ/PREP
2457  *      for HWMP) if the destination is a direct neighbor. Note that this might
2458  *      not be the optimal decision as a multi-hop route might be better. So
2459  *      if using this setting you will likely also want to disable
2460  *      dot11MeshForwarding and use another mesh routing protocol on top.
2461  */
2462 struct mesh_config {
2463 	u16 dot11MeshRetryTimeout;
2464 	u16 dot11MeshConfirmTimeout;
2465 	u16 dot11MeshHoldingTimeout;
2466 	u16 dot11MeshMaxPeerLinks;
2467 	u8 dot11MeshMaxRetries;
2468 	u8 dot11MeshTTL;
2469 	u8 element_ttl;
2470 	bool auto_open_plinks;
2471 	u32 dot11MeshNbrOffsetMaxNeighbor;
2472 	u8 dot11MeshHWMPmaxPREQretries;
2473 	u32 path_refresh_time;
2474 	u16 min_discovery_timeout;
2475 	u32 dot11MeshHWMPactivePathTimeout;
2476 	u16 dot11MeshHWMPpreqMinInterval;
2477 	u16 dot11MeshHWMPperrMinInterval;
2478 	u16 dot11MeshHWMPnetDiameterTraversalTime;
2479 	u8 dot11MeshHWMPRootMode;
2480 	bool dot11MeshConnectedToMeshGate;
2481 	bool dot11MeshConnectedToAuthServer;
2482 	u16 dot11MeshHWMPRannInterval;
2483 	bool dot11MeshGateAnnouncementProtocol;
2484 	bool dot11MeshForwarding;
2485 	s32 rssi_threshold;
2486 	u16 ht_opmode;
2487 	u32 dot11MeshHWMPactivePathToRootTimeout;
2488 	u16 dot11MeshHWMProotInterval;
2489 	u16 dot11MeshHWMPconfirmationInterval;
2490 	enum nl80211_mesh_power_mode power_mode;
2491 	u16 dot11MeshAwakeWindowDuration;
2492 	u32 plink_timeout;
2493 	bool dot11MeshNolearn;
2494 };
2495 
2496 /**
2497  * struct mesh_setup - 802.11s mesh setup configuration
2498  * @chandef: defines the channel to use
2499  * @mesh_id: the mesh ID
2500  * @mesh_id_len: length of the mesh ID, at least 1 and at most 32 bytes
2501  * @sync_method: which synchronization method to use
2502  * @path_sel_proto: which path selection protocol to use
2503  * @path_metric: which metric to use
2504  * @auth_id: which authentication method this mesh is using
2505  * @ie: vendor information elements (optional)
2506  * @ie_len: length of vendor information elements
2507  * @is_authenticated: this mesh requires authentication
2508  * @is_secure: this mesh uses security
2509  * @user_mpm: userspace handles all MPM functions
2510  * @dtim_period: DTIM period to use
2511  * @beacon_interval: beacon interval to use
2512  * @mcast_rate: multicast rate for Mesh Node [6Mbps is the default for 802.11a]
2513  * @basic_rates: basic rates to use when creating the mesh
2514  * @beacon_rate: bitrate to be used for beacons
2515  * @userspace_handles_dfs: whether user space controls DFS operation, i.e.
2516  *	changes the channel when a radar is detected. This is required
2517  *	to operate on DFS channels.
2518  * @control_port_over_nl80211: TRUE if userspace expects to exchange control
2519  *	port frames over NL80211 instead of the network interface.
2520  *
2521  * These parameters are fixed when the mesh is created.
2522  */
2523 struct mesh_setup {
2524 	struct cfg80211_chan_def chandef;
2525 	const u8 *mesh_id;
2526 	u8 mesh_id_len;
2527 	u8 sync_method;
2528 	u8 path_sel_proto;
2529 	u8 path_metric;
2530 	u8 auth_id;
2531 	const u8 *ie;
2532 	u8 ie_len;
2533 	bool is_authenticated;
2534 	bool is_secure;
2535 	bool user_mpm;
2536 	u8 dtim_period;
2537 	u16 beacon_interval;
2538 	int mcast_rate[NUM_NL80211_BANDS];
2539 	u32 basic_rates;
2540 	struct cfg80211_bitrate_mask beacon_rate;
2541 	bool userspace_handles_dfs;
2542 	bool control_port_over_nl80211;
2543 };
2544 
2545 /**
2546  * struct ocb_setup - 802.11p OCB mode setup configuration
2547  * @chandef: defines the channel to use
2548  *
2549  * These parameters are fixed when connecting to the network
2550  */
2551 struct ocb_setup {
2552 	struct cfg80211_chan_def chandef;
2553 };
2554 
2555 /**
2556  * struct ieee80211_txq_params - TX queue parameters
2557  * @ac: AC identifier
2558  * @txop: Maximum burst time in units of 32 usecs, 0 meaning disabled
2559  * @cwmin: Minimum contention window [a value of the form 2^n-1 in the range
2560  *	1..32767]
2561  * @cwmax: Maximum contention window [a value of the form 2^n-1 in the range
2562  *	1..32767]
2563  * @aifs: Arbitration interframe space [0..255]
2564  * @link_id: link_id or -1 for non-MLD
2565  */
2566 struct ieee80211_txq_params {
2567 	enum nl80211_ac ac;
2568 	u16 txop;
2569 	u16 cwmin;
2570 	u16 cwmax;
2571 	u8 aifs;
2572 	int link_id;
2573 };
2574 
2575 /**
2576  * DOC: Scanning and BSS list handling
2577  *
2578  * The scanning process itself is fairly simple, but cfg80211 offers quite
2579  * a bit of helper functionality. To start a scan, the scan operation will
2580  * be invoked with a scan definition. This scan definition contains the
2581  * channels to scan, and the SSIDs to send probe requests for (including the
2582  * wildcard, if desired). A passive scan is indicated by having no SSIDs to
2583  * probe. Additionally, a scan request may contain extra information elements
2584  * that should be added to the probe request. The IEs are guaranteed to be
2585  * well-formed, and will not exceed the maximum length the driver advertised
2586  * in the wiphy structure.
2587  *
2588  * When scanning finds a BSS, cfg80211 needs to be notified of that, because
2589  * it is responsible for maintaining the BSS list; the driver should not
2590  * maintain a list itself. For this notification, various functions exist.
2591  *
2592  * Since drivers do not maintain a BSS list, there are also a number of
2593  * functions to search for a BSS and obtain information about it from the
2594  * BSS structure cfg80211 maintains. The BSS list is also made available
2595  * to userspace.
2596  */
2597 
2598 /**
2599  * struct cfg80211_ssid - SSID description
2600  * @ssid: the SSID
2601  * @ssid_len: length of the ssid
2602  */
2603 struct cfg80211_ssid {
2604 	u8 ssid[IEEE80211_MAX_SSID_LEN];
2605 	u8 ssid_len;
2606 };
2607 
2608 /**
2609  * struct cfg80211_scan_info - information about completed scan
2610  * @scan_start_tsf: scan start time in terms of the TSF of the BSS that the
2611  *	wireless device that requested the scan is connected to. If this
2612  *	information is not available, this field is left zero.
2613  * @tsf_bssid: the BSSID according to which %scan_start_tsf is set.
2614  * @aborted: set to true if the scan was aborted for any reason,
2615  *	userspace will be notified of that
2616  */
2617 struct cfg80211_scan_info {
2618 	u64 scan_start_tsf;
2619 	u8 tsf_bssid[ETH_ALEN] __aligned(2);
2620 	bool aborted;
2621 };
2622 
2623 /**
2624  * struct cfg80211_scan_6ghz_params - relevant for 6 GHz only
2625  *
2626  * @short_ssid: short ssid to scan for
2627  * @bssid: bssid to scan for
2628  * @channel_idx: idx of the channel in the channel array in the scan request
2629  *	 which the above info is relevant to
2630  * @unsolicited_probe: the AP transmits unsolicited probe response every 20 TU
2631  * @short_ssid_valid: @short_ssid is valid and can be used
2632  * @psc_no_listen: when set, and the channel is a PSC channel, no need to wait
2633  *       20 TUs before starting to send probe requests.
2634  * @psd_20: The AP's 20 MHz PSD value.
2635  */
2636 struct cfg80211_scan_6ghz_params {
2637 	u32 short_ssid;
2638 	u32 channel_idx;
2639 	u8 bssid[ETH_ALEN];
2640 	bool unsolicited_probe;
2641 	bool short_ssid_valid;
2642 	bool psc_no_listen;
2643 	s8 psd_20;
2644 };
2645 
2646 /**
2647  * struct cfg80211_scan_request - scan request description
2648  *
2649  * @ssids: SSIDs to scan for (active scan only)
2650  * @n_ssids: number of SSIDs
2651  * @channels: channels to scan on.
2652  * @n_channels: total number of channels to scan
2653  * @ie: optional information element(s) to add into Probe Request or %NULL
2654  * @ie_len: length of ie in octets
2655  * @duration: how long to listen on each channel, in TUs. If
2656  *	%duration_mandatory is not set, this is the maximum dwell time and
2657  *	the actual dwell time may be shorter.
2658  * @duration_mandatory: if set, the scan duration must be as specified by the
2659  *	%duration field.
2660  * @flags: control flags from &enum nl80211_scan_flags
2661  * @rates: bitmap of rates to advertise for each band
2662  * @wiphy: the wiphy this was for
2663  * @scan_start: time (in jiffies) when the scan started
2664  * @wdev: the wireless device to scan for
2665  * @info: (internal) information about completed scan
2666  * @notified: (internal) scan request was notified as done or aborted
2667  * @no_cck: used to send probe requests at non CCK rate in 2GHz band
2668  * @mac_addr: MAC address used with randomisation
2669  * @mac_addr_mask: MAC address mask used with randomisation, bits that
2670  *	are 0 in the mask should be randomised, bits that are 1 should
2671  *	be taken from the @mac_addr
2672  * @scan_6ghz: relevant for split scan request only,
2673  *	true if this is the second scan request
2674  * @n_6ghz_params: number of 6 GHz params
2675  * @scan_6ghz_params: 6 GHz params
2676  * @bssid: BSSID to scan for (most commonly, the wildcard BSSID)
2677  * @tsf_report_link_id: for MLO, indicates the link ID of the BSS that should be
2678  *      used for TSF reporting. Can be set to -1 to indicate no preference.
2679  */
2680 struct cfg80211_scan_request {
2681 	struct cfg80211_ssid *ssids;
2682 	int n_ssids;
2683 	u32 n_channels;
2684 	const u8 *ie;
2685 	size_t ie_len;
2686 	u16 duration;
2687 	bool duration_mandatory;
2688 	u32 flags;
2689 
2690 	u32 rates[NUM_NL80211_BANDS];
2691 
2692 	struct wireless_dev *wdev;
2693 
2694 	u8 mac_addr[ETH_ALEN] __aligned(2);
2695 	u8 mac_addr_mask[ETH_ALEN] __aligned(2);
2696 	u8 bssid[ETH_ALEN] __aligned(2);
2697 
2698 	/* internal */
2699 	struct wiphy *wiphy;
2700 	unsigned long scan_start;
2701 	struct cfg80211_scan_info info;
2702 	bool notified;
2703 	bool no_cck;
2704 	bool scan_6ghz;
2705 	u32 n_6ghz_params;
2706 	struct cfg80211_scan_6ghz_params *scan_6ghz_params;
2707 	s8 tsf_report_link_id;
2708 
2709 	/* keep last */
2710 	struct ieee80211_channel *channels[] __counted_by(n_channels);
2711 };
2712 
2713 static inline void get_random_mask_addr(u8 *buf, const u8 *addr, const u8 *mask)
2714 {
2715 	int i;
2716 
2717 	get_random_bytes(buf, ETH_ALEN);
2718 	for (i = 0; i < ETH_ALEN; i++) {
2719 		buf[i] &= ~mask[i];
2720 		buf[i] |= addr[i] & mask[i];
2721 	}
2722 }
2723 
2724 /**
2725  * struct cfg80211_match_set - sets of attributes to match
2726  *
2727  * @ssid: SSID to be matched; may be zero-length in case of BSSID match
2728  *	or no match (RSSI only)
2729  * @bssid: BSSID to be matched; may be all-zero BSSID in case of SSID match
2730  *	or no match (RSSI only)
2731  * @rssi_thold: don't report scan results below this threshold (in s32 dBm)
2732  */
2733 struct cfg80211_match_set {
2734 	struct cfg80211_ssid ssid;
2735 	u8 bssid[ETH_ALEN];
2736 	s32 rssi_thold;
2737 };
2738 
2739 /**
2740  * struct cfg80211_sched_scan_plan - scan plan for scheduled scan
2741  *
2742  * @interval: interval between scheduled scan iterations. In seconds.
2743  * @iterations: number of scan iterations in this scan plan. Zero means
2744  *	infinite loop.
2745  *	The last scan plan will always have this parameter set to zero,
2746  *	all other scan plans will have a finite number of iterations.
2747  */
2748 struct cfg80211_sched_scan_plan {
2749 	u32 interval;
2750 	u32 iterations;
2751 };
2752 
2753 /**
2754  * struct cfg80211_bss_select_adjust - BSS selection with RSSI adjustment.
2755  *
2756  * @band: band of BSS which should match for RSSI level adjustment.
2757  * @delta: value of RSSI level adjustment.
2758  */
2759 struct cfg80211_bss_select_adjust {
2760 	enum nl80211_band band;
2761 	s8 delta;
2762 };
2763 
2764 /**
2765  * struct cfg80211_sched_scan_request - scheduled scan request description
2766  *
2767  * @reqid: identifies this request.
2768  * @ssids: SSIDs to scan for (passed in the probe_reqs in active scans)
2769  * @n_ssids: number of SSIDs
2770  * @n_channels: total number of channels to scan
2771  * @ie: optional information element(s) to add into Probe Request or %NULL
2772  * @ie_len: length of ie in octets
2773  * @flags: control flags from &enum nl80211_scan_flags
2774  * @match_sets: sets of parameters to be matched for a scan result
2775  *	entry to be considered valid and to be passed to the host
2776  *	(others are filtered out).
2777  *	If omitted, all results are passed.
2778  * @n_match_sets: number of match sets
2779  * @report_results: indicates that results were reported for this request
2780  * @wiphy: the wiphy this was for
2781  * @dev: the interface
2782  * @scan_start: start time of the scheduled scan
2783  * @channels: channels to scan
2784  * @min_rssi_thold: for drivers only supporting a single threshold, this
2785  *	contains the minimum over all matchsets
2786  * @mac_addr: MAC address used with randomisation
2787  * @mac_addr_mask: MAC address mask used with randomisation, bits that
2788  *	are 0 in the mask should be randomised, bits that are 1 should
2789  *	be taken from the @mac_addr
2790  * @scan_plans: scan plans to be executed in this scheduled scan. Lowest
2791  *	index must be executed first.
2792  * @n_scan_plans: number of scan plans, at least 1.
2793  * @rcu_head: RCU callback used to free the struct
2794  * @owner_nlportid: netlink portid of owner (if this should is a request
2795  *	owned by a particular socket)
2796  * @nl_owner_dead: netlink owner socket was closed - this request be freed
2797  * @list: for keeping list of requests.
2798  * @delay: delay in seconds to use before starting the first scan
2799  *	cycle.  The driver may ignore this parameter and start
2800  *	immediately (or at any other time), if this feature is not
2801  *	supported.
2802  * @relative_rssi_set: Indicates whether @relative_rssi is set or not.
2803  * @relative_rssi: Relative RSSI threshold in dB to restrict scan result
2804  *	reporting in connected state to cases where a matching BSS is determined
2805  *	to have better or slightly worse RSSI than the current connected BSS.
2806  *	The relative RSSI threshold values are ignored in disconnected state.
2807  * @rssi_adjust: delta dB of RSSI preference to be given to the BSSs that belong
2808  *	to the specified band while deciding whether a better BSS is reported
2809  *	using @relative_rssi. If delta is a negative number, the BSSs that
2810  *	belong to the specified band will be penalized by delta dB in relative
2811  *	comparisons.
2812  */
2813 struct cfg80211_sched_scan_request {
2814 	u64 reqid;
2815 	struct cfg80211_ssid *ssids;
2816 	int n_ssids;
2817 	u32 n_channels;
2818 	const u8 *ie;
2819 	size_t ie_len;
2820 	u32 flags;
2821 	struct cfg80211_match_set *match_sets;
2822 	int n_match_sets;
2823 	s32 min_rssi_thold;
2824 	u32 delay;
2825 	struct cfg80211_sched_scan_plan *scan_plans;
2826 	int n_scan_plans;
2827 
2828 	u8 mac_addr[ETH_ALEN] __aligned(2);
2829 	u8 mac_addr_mask[ETH_ALEN] __aligned(2);
2830 
2831 	bool relative_rssi_set;
2832 	s8 relative_rssi;
2833 	struct cfg80211_bss_select_adjust rssi_adjust;
2834 
2835 	/* internal */
2836 	struct wiphy *wiphy;
2837 	struct net_device *dev;
2838 	unsigned long scan_start;
2839 	bool report_results;
2840 	struct rcu_head rcu_head;
2841 	u32 owner_nlportid;
2842 	bool nl_owner_dead;
2843 	struct list_head list;
2844 
2845 	/* keep last */
2846 	struct ieee80211_channel *channels[] __counted_by(n_channels);
2847 };
2848 
2849 /**
2850  * enum cfg80211_signal_type - signal type
2851  *
2852  * @CFG80211_SIGNAL_TYPE_NONE: no signal strength information available
2853  * @CFG80211_SIGNAL_TYPE_MBM: signal strength in mBm (100*dBm)
2854  * @CFG80211_SIGNAL_TYPE_UNSPEC: signal strength, increasing from 0 through 100
2855  */
2856 enum cfg80211_signal_type {
2857 	CFG80211_SIGNAL_TYPE_NONE,
2858 	CFG80211_SIGNAL_TYPE_MBM,
2859 	CFG80211_SIGNAL_TYPE_UNSPEC,
2860 };
2861 
2862 /**
2863  * struct cfg80211_inform_bss - BSS inform data
2864  * @chan: channel the frame was received on
2865  * @signal: signal strength value, according to the wiphy's
2866  *	signal type
2867  * @boottime_ns: timestamp (CLOCK_BOOTTIME) when the information was
2868  *	received; should match the time when the frame was actually
2869  *	received by the device (not just by the host, in case it was
2870  *	buffered on the device) and be accurate to about 10ms.
2871  *	If the frame isn't buffered, just passing the return value of
2872  *	ktime_get_boottime_ns() is likely appropriate.
2873  * @parent_tsf: the time at the start of reception of the first octet of the
2874  *	timestamp field of the frame. The time is the TSF of the BSS specified
2875  *	by %parent_bssid.
2876  * @parent_bssid: the BSS according to which %parent_tsf is set. This is set to
2877  *	the BSS that requested the scan in which the beacon/probe was received.
2878  * @chains: bitmask for filled values in @chain_signal.
2879  * @chain_signal: per-chain signal strength of last received BSS in dBm.
2880  * @restrict_use: restrict usage, if not set, assume @use_for is
2881  *	%NL80211_BSS_USE_FOR_NORMAL.
2882  * @use_for: bitmap of possible usage for this BSS, see
2883  *	&enum nl80211_bss_use_for
2884  * @cannot_use_reasons: the reasons (bitmap) for not being able to connect,
2885  *	if @restrict_use is set and @use_for is zero (empty); may be 0 for
2886  *	unspecified reasons; see &enum nl80211_bss_cannot_use_reasons
2887  * @drv_data: Data to be passed through to @inform_bss
2888  */
2889 struct cfg80211_inform_bss {
2890 	struct ieee80211_channel *chan;
2891 	s32 signal;
2892 	u64 boottime_ns;
2893 	u64 parent_tsf;
2894 	u8 parent_bssid[ETH_ALEN] __aligned(2);
2895 	u8 chains;
2896 	s8 chain_signal[IEEE80211_MAX_CHAINS];
2897 
2898 	u8 restrict_use:1, use_for:7;
2899 	u8 cannot_use_reasons;
2900 
2901 	void *drv_data;
2902 };
2903 
2904 /**
2905  * struct cfg80211_bss_ies - BSS entry IE data
2906  * @tsf: TSF contained in the frame that carried these IEs
2907  * @rcu_head: internal use, for freeing
2908  * @len: length of the IEs
2909  * @from_beacon: these IEs are known to come from a beacon
2910  * @data: IE data
2911  */
2912 struct cfg80211_bss_ies {
2913 	u64 tsf;
2914 	struct rcu_head rcu_head;
2915 	int len;
2916 	bool from_beacon;
2917 	u8 data[];
2918 };
2919 
2920 /**
2921  * struct cfg80211_bss - BSS description
2922  *
2923  * This structure describes a BSS (which may also be a mesh network)
2924  * for use in scan results and similar.
2925  *
2926  * @channel: channel this BSS is on
2927  * @bssid: BSSID of the BSS
2928  * @beacon_interval: the beacon interval as from the frame
2929  * @capability: the capability field in host byte order
2930  * @ies: the information elements (Note that there is no guarantee that these
2931  *	are well-formed!); this is a pointer to either the beacon_ies or
2932  *	proberesp_ies depending on whether Probe Response frame has been
2933  *	received. It is always non-%NULL.
2934  * @beacon_ies: the information elements from the last Beacon frame
2935  *	(implementation note: if @hidden_beacon_bss is set this struct doesn't
2936  *	own the beacon_ies, but they're just pointers to the ones from the
2937  *	@hidden_beacon_bss struct)
2938  * @proberesp_ies: the information elements from the last Probe Response frame
2939  * @proberesp_ecsa_stuck: ECSA element is stuck in the Probe Response frame,
2940  *	cannot rely on it having valid data
2941  * @hidden_beacon_bss: in case this BSS struct represents a probe response from
2942  *	a BSS that hides the SSID in its beacon, this points to the BSS struct
2943  *	that holds the beacon data. @beacon_ies is still valid, of course, and
2944  *	points to the same data as hidden_beacon_bss->beacon_ies in that case.
2945  * @transmitted_bss: pointer to the transmitted BSS, if this is a
2946  *	non-transmitted one (multi-BSSID support)
2947  * @nontrans_list: list of non-transmitted BSS, if this is a transmitted one
2948  *	(multi-BSSID support)
2949  * @signal: signal strength value (type depends on the wiphy's signal_type)
2950  * @chains: bitmask for filled values in @chain_signal.
2951  * @chain_signal: per-chain signal strength of last received BSS in dBm.
2952  * @bssid_index: index in the multiple BSS set
2953  * @max_bssid_indicator: max number of members in the BSS set
2954  * @use_for: bitmap of possible usage for this BSS, see
2955  *	&enum nl80211_bss_use_for
2956  * @cannot_use_reasons: the reasons (bitmap) for not being able to connect,
2957  *	if @restrict_use is set and @use_for is zero (empty); may be 0 for
2958  *	unspecified reasons; see &enum nl80211_bss_cannot_use_reasons
2959  * @priv: private area for driver use, has at least wiphy->bss_priv_size bytes
2960  */
2961 struct cfg80211_bss {
2962 	struct ieee80211_channel *channel;
2963 
2964 	const struct cfg80211_bss_ies __rcu *ies;
2965 	const struct cfg80211_bss_ies __rcu *beacon_ies;
2966 	const struct cfg80211_bss_ies __rcu *proberesp_ies;
2967 
2968 	struct cfg80211_bss *hidden_beacon_bss;
2969 	struct cfg80211_bss *transmitted_bss;
2970 	struct list_head nontrans_list;
2971 
2972 	s32 signal;
2973 
2974 	u16 beacon_interval;
2975 	u16 capability;
2976 
2977 	u8 bssid[ETH_ALEN];
2978 	u8 chains;
2979 	s8 chain_signal[IEEE80211_MAX_CHAINS];
2980 
2981 	u8 proberesp_ecsa_stuck:1;
2982 
2983 	u8 bssid_index;
2984 	u8 max_bssid_indicator;
2985 
2986 	u8 use_for;
2987 	u8 cannot_use_reasons;
2988 
2989 	u8 priv[] __aligned(sizeof(void *));
2990 };
2991 
2992 /**
2993  * ieee80211_bss_get_elem - find element with given ID
2994  * @bss: the bss to search
2995  * @id: the element ID
2996  *
2997  * Note that the return value is an RCU-protected pointer, so
2998  * rcu_read_lock() must be held when calling this function.
2999  * Return: %NULL if not found.
3000  */
3001 const struct element *ieee80211_bss_get_elem(struct cfg80211_bss *bss, u8 id);
3002 
3003 /**
3004  * ieee80211_bss_get_ie - find IE with given ID
3005  * @bss: the bss to search
3006  * @id: the element ID
3007  *
3008  * Note that the return value is an RCU-protected pointer, so
3009  * rcu_read_lock() must be held when calling this function.
3010  * Return: %NULL if not found.
3011  */
3012 static inline const u8 *ieee80211_bss_get_ie(struct cfg80211_bss *bss, u8 id)
3013 {
3014 	return (const void *)ieee80211_bss_get_elem(bss, id);
3015 }
3016 
3017 
3018 /**
3019  * struct cfg80211_auth_request - Authentication request data
3020  *
3021  * This structure provides information needed to complete IEEE 802.11
3022  * authentication.
3023  *
3024  * @bss: The BSS to authenticate with, the callee must obtain a reference
3025  *	to it if it needs to keep it.
3026  * @supported_selectors: List of selectors that should be assumed to be
3027  *	supported by the station.
3028  *	SAE_H2E must be assumed supported if set to %NULL.
3029  * @supported_selectors_len: Length of supported_selectors in octets.
3030  * @auth_type: Authentication type (algorithm)
3031  * @ie: Extra IEs to add to Authentication frame or %NULL
3032  * @ie_len: Length of ie buffer in octets
3033  * @key_len: length of WEP key for shared key authentication
3034  * @key_idx: index of WEP key for shared key authentication
3035  * @key: WEP key for shared key authentication
3036  * @auth_data: Fields and elements in Authentication frames. This contains
3037  *	the authentication frame body (non-IE and IE data), excluding the
3038  *	Authentication algorithm number, i.e., starting at the Authentication
3039  *	transaction sequence number field.
3040  * @auth_data_len: Length of auth_data buffer in octets
3041  * @link_id: if >= 0, indicates authentication should be done as an MLD,
3042  *	the interface address is included as the MLD address and the
3043  *	necessary link (with the given link_id) will be created (and
3044  *	given an MLD address) by the driver
3045  * @ap_mld_addr: AP MLD address in case of authentication request with
3046  *	an AP MLD, valid iff @link_id >= 0
3047  */
3048 struct cfg80211_auth_request {
3049 	struct cfg80211_bss *bss;
3050 	const u8 *ie;
3051 	size_t ie_len;
3052 	const u8 *supported_selectors;
3053 	u8 supported_selectors_len;
3054 	enum nl80211_auth_type auth_type;
3055 	const u8 *key;
3056 	u8 key_len;
3057 	s8 key_idx;
3058 	const u8 *auth_data;
3059 	size_t auth_data_len;
3060 	s8 link_id;
3061 	const u8 *ap_mld_addr;
3062 };
3063 
3064 /**
3065  * struct cfg80211_assoc_link - per-link information for MLO association
3066  * @bss: the BSS pointer, see also &struct cfg80211_assoc_request::bss;
3067  *	if this is %NULL for a link, that link is not requested
3068  * @elems: extra elements for the per-STA profile for this link
3069  * @elems_len: length of the elements
3070  * @disabled: If set this link should be included during association etc. but it
3071  *	should not be used until enabled by the AP MLD.
3072  * @error: per-link error code, must be <= 0. If there is an error, then the
3073  *	operation as a whole must fail.
3074  */
3075 struct cfg80211_assoc_link {
3076 	struct cfg80211_bss *bss;
3077 	const u8 *elems;
3078 	size_t elems_len;
3079 	bool disabled;
3080 	int error;
3081 };
3082 
3083 /**
3084  * enum cfg80211_assoc_req_flags - Over-ride default behaviour in association.
3085  *
3086  * @ASSOC_REQ_DISABLE_HT:  Disable HT (802.11n)
3087  * @ASSOC_REQ_DISABLE_VHT:  Disable VHT
3088  * @ASSOC_REQ_USE_RRM: Declare RRM capability in this association
3089  * @CONNECT_REQ_EXTERNAL_AUTH_SUPPORT: User space indicates external
3090  *	authentication capability. Drivers can offload authentication to
3091  *	userspace if this flag is set. Only applicable for cfg80211_connect()
3092  *	request (connect callback).
3093  * @ASSOC_REQ_DISABLE_HE:  Disable HE
3094  * @ASSOC_REQ_DISABLE_EHT:  Disable EHT
3095  * @CONNECT_REQ_MLO_SUPPORT: Userspace indicates support for handling MLD links.
3096  *	Drivers shall disable MLO features for the current association if this
3097  *	flag is not set.
3098  * @ASSOC_REQ_SPP_AMSDU: SPP A-MSDUs will be used on this connection (if any)
3099  */
3100 enum cfg80211_assoc_req_flags {
3101 	ASSOC_REQ_DISABLE_HT			= BIT(0),
3102 	ASSOC_REQ_DISABLE_VHT			= BIT(1),
3103 	ASSOC_REQ_USE_RRM			= BIT(2),
3104 	CONNECT_REQ_EXTERNAL_AUTH_SUPPORT	= BIT(3),
3105 	ASSOC_REQ_DISABLE_HE			= BIT(4),
3106 	ASSOC_REQ_DISABLE_EHT			= BIT(5),
3107 	CONNECT_REQ_MLO_SUPPORT			= BIT(6),
3108 	ASSOC_REQ_SPP_AMSDU			= BIT(7),
3109 };
3110 
3111 /**
3112  * struct cfg80211_assoc_request - (Re)Association request data
3113  *
3114  * This structure provides information needed to complete IEEE 802.11
3115  * (re)association.
3116  * @bss: The BSS to associate with. If the call is successful the driver is
3117  *	given a reference that it must give back to cfg80211_send_rx_assoc()
3118  *	or to cfg80211_assoc_timeout(). To ensure proper refcounting, new
3119  *	association requests while already associating must be rejected.
3120  *	This also applies to the @links.bss parameter, which is used instead
3121  *	of this one (it is %NULL) for MLO associations.
3122  * @ie: Extra IEs to add to (Re)Association Request frame or %NULL
3123  * @ie_len: Length of ie buffer in octets
3124  * @use_mfp: Use management frame protection (IEEE 802.11w) in this association
3125  * @crypto: crypto settings
3126  * @prev_bssid: previous BSSID, if not %NULL use reassociate frame. This is used
3127  *	to indicate a request to reassociate within the ESS instead of a request
3128  *	do the initial association with the ESS. When included, this is set to
3129  *	the BSSID of the current association, i.e., to the value that is
3130  *	included in the Current AP address field of the Reassociation Request
3131  *	frame.
3132  * @flags:  See &enum cfg80211_assoc_req_flags
3133  * @supported_selectors: supported selectors in IEEE 802.11 format
3134  *	(or %NULL for no change).
3135  *	If %NULL, then support for SAE_H2E should be assumed.
3136  * @supported_selectors_len: Length of supported_selectors in octets.
3137  * @ht_capa:  HT Capabilities over-rides.  Values set in ht_capa_mask
3138  *	will be used in ht_capa.  Un-supported values will be ignored.
3139  * @ht_capa_mask:  The bits of ht_capa which are to be used.
3140  * @vht_capa: VHT capability override
3141  * @vht_capa_mask: VHT capability mask indicating which fields to use
3142  * @fils_kek: FILS KEK for protecting (Re)Association Request/Response frame or
3143  *	%NULL if FILS is not used.
3144  * @fils_kek_len: Length of fils_kek in octets
3145  * @fils_nonces: FILS nonces (part of AAD) for protecting (Re)Association
3146  *	Request/Response frame or %NULL if FILS is not used. This field starts
3147  *	with 16 octets of STA Nonce followed by 16 octets of AP Nonce.
3148  * @s1g_capa: S1G capability override
3149  * @s1g_capa_mask: S1G capability override mask
3150  * @links: per-link information for MLO connections
3151  * @link_id: >= 0 for MLO connections, where links are given, and indicates
3152  *	the link on which the association request should be sent
3153  * @ap_mld_addr: AP MLD address in case of MLO association request,
3154  *	valid iff @link_id >= 0
3155  */
3156 struct cfg80211_assoc_request {
3157 	struct cfg80211_bss *bss;
3158 	const u8 *ie, *prev_bssid;
3159 	size_t ie_len;
3160 	struct cfg80211_crypto_settings crypto;
3161 	bool use_mfp;
3162 	u32 flags;
3163 	const u8 *supported_selectors;
3164 	u8 supported_selectors_len;
3165 	struct ieee80211_ht_cap ht_capa;
3166 	struct ieee80211_ht_cap ht_capa_mask;
3167 	struct ieee80211_vht_cap vht_capa, vht_capa_mask;
3168 	const u8 *fils_kek;
3169 	size_t fils_kek_len;
3170 	const u8 *fils_nonces;
3171 	struct ieee80211_s1g_cap s1g_capa, s1g_capa_mask;
3172 	struct cfg80211_assoc_link links[IEEE80211_MLD_MAX_NUM_LINKS];
3173 	const u8 *ap_mld_addr;
3174 	s8 link_id;
3175 };
3176 
3177 /**
3178  * struct cfg80211_deauth_request - Deauthentication request data
3179  *
3180  * This structure provides information needed to complete IEEE 802.11
3181  * deauthentication.
3182  *
3183  * @bssid: the BSSID or AP MLD address to deauthenticate from
3184  * @ie: Extra IEs to add to Deauthentication frame or %NULL
3185  * @ie_len: Length of ie buffer in octets
3186  * @reason_code: The reason code for the deauthentication
3187  * @local_state_change: if set, change local state only and
3188  *	do not set a deauth frame
3189  */
3190 struct cfg80211_deauth_request {
3191 	const u8 *bssid;
3192 	const u8 *ie;
3193 	size_t ie_len;
3194 	u16 reason_code;
3195 	bool local_state_change;
3196 };
3197 
3198 /**
3199  * struct cfg80211_disassoc_request - Disassociation request data
3200  *
3201  * This structure provides information needed to complete IEEE 802.11
3202  * disassociation.
3203  *
3204  * @ap_addr: the BSSID or AP MLD address to disassociate from
3205  * @ie: Extra IEs to add to Disassociation frame or %NULL
3206  * @ie_len: Length of ie buffer in octets
3207  * @reason_code: The reason code for the disassociation
3208  * @local_state_change: This is a request for a local state only, i.e., no
3209  *	Disassociation frame is to be transmitted.
3210  */
3211 struct cfg80211_disassoc_request {
3212 	const u8 *ap_addr;
3213 	const u8 *ie;
3214 	size_t ie_len;
3215 	u16 reason_code;
3216 	bool local_state_change;
3217 };
3218 
3219 /**
3220  * struct cfg80211_ibss_params - IBSS parameters
3221  *
3222  * This structure defines the IBSS parameters for the join_ibss()
3223  * method.
3224  *
3225  * @ssid: The SSID, will always be non-null.
3226  * @ssid_len: The length of the SSID, will always be non-zero.
3227  * @bssid: Fixed BSSID requested, maybe be %NULL, if set do not
3228  *	search for IBSSs with a different BSSID.
3229  * @chandef: defines the channel to use if no other IBSS to join can be found
3230  * @channel_fixed: The channel should be fixed -- do not search for
3231  *	IBSSs to join on other channels.
3232  * @ie: information element(s) to include in the beacon
3233  * @ie_len: length of that
3234  * @beacon_interval: beacon interval to use
3235  * @privacy: this is a protected network, keys will be configured
3236  *	after joining
3237  * @control_port: whether user space controls IEEE 802.1X port, i.e.,
3238  *	sets/clears %NL80211_STA_FLAG_AUTHORIZED. If true, the driver is
3239  *	required to assume that the port is unauthorized until authorized by
3240  *	user space. Otherwise, port is marked authorized by default.
3241  * @control_port_over_nl80211: TRUE if userspace expects to exchange control
3242  *	port frames over NL80211 instead of the network interface.
3243  * @userspace_handles_dfs: whether user space controls DFS operation, i.e.
3244  *	changes the channel when a radar is detected. This is required
3245  *	to operate on DFS channels.
3246  * @basic_rates: bitmap of basic rates to use when creating the IBSS
3247  * @mcast_rate: per-band multicast rate index + 1 (0: disabled)
3248  * @ht_capa:  HT Capabilities over-rides.  Values set in ht_capa_mask
3249  *	will be used in ht_capa.  Un-supported values will be ignored.
3250  * @ht_capa_mask:  The bits of ht_capa which are to be used.
3251  * @wep_keys: static WEP keys, if not NULL points to an array of
3252  *	CFG80211_MAX_WEP_KEYS WEP keys
3253  * @wep_tx_key: key index (0..3) of the default TX static WEP key
3254  */
3255 struct cfg80211_ibss_params {
3256 	const u8 *ssid;
3257 	const u8 *bssid;
3258 	struct cfg80211_chan_def chandef;
3259 	const u8 *ie;
3260 	u8 ssid_len, ie_len;
3261 	u16 beacon_interval;
3262 	u32 basic_rates;
3263 	bool channel_fixed;
3264 	bool privacy;
3265 	bool control_port;
3266 	bool control_port_over_nl80211;
3267 	bool userspace_handles_dfs;
3268 	int mcast_rate[NUM_NL80211_BANDS];
3269 	struct ieee80211_ht_cap ht_capa;
3270 	struct ieee80211_ht_cap ht_capa_mask;
3271 	struct key_params *wep_keys;
3272 	int wep_tx_key;
3273 };
3274 
3275 /**
3276  * struct cfg80211_bss_selection - connection parameters for BSS selection.
3277  *
3278  * @behaviour: requested BSS selection behaviour.
3279  * @param: parameters for requestion behaviour.
3280  * @param.band_pref: preferred band for %NL80211_BSS_SELECT_ATTR_BAND_PREF.
3281  * @param.adjust: parameters for %NL80211_BSS_SELECT_ATTR_RSSI_ADJUST.
3282  */
3283 struct cfg80211_bss_selection {
3284 	enum nl80211_bss_select_attr behaviour;
3285 	union {
3286 		enum nl80211_band band_pref;
3287 		struct cfg80211_bss_select_adjust adjust;
3288 	} param;
3289 };
3290 
3291 /**
3292  * struct cfg80211_connect_params - Connection parameters
3293  *
3294  * This structure provides information needed to complete IEEE 802.11
3295  * authentication and association.
3296  *
3297  * @channel: The channel to use or %NULL if not specified (auto-select based
3298  *	on scan results)
3299  * @channel_hint: The channel of the recommended BSS for initial connection or
3300  *	%NULL if not specified
3301  * @bssid: The AP BSSID or %NULL if not specified (auto-select based on scan
3302  *	results)
3303  * @bssid_hint: The recommended AP BSSID for initial connection to the BSS or
3304  *	%NULL if not specified. Unlike the @bssid parameter, the driver is
3305  *	allowed to ignore this @bssid_hint if it has knowledge of a better BSS
3306  *	to use.
3307  * @ssid: SSID
3308  * @ssid_len: Length of ssid in octets
3309  * @auth_type: Authentication type (algorithm)
3310  * @ie: IEs for association request
3311  * @ie_len: Length of assoc_ie in octets
3312  * @privacy: indicates whether privacy-enabled APs should be used
3313  * @mfp: indicate whether management frame protection is used
3314  * @crypto: crypto settings
3315  * @key_len: length of WEP key for shared key authentication
3316  * @key_idx: index of WEP key for shared key authentication
3317  * @key: WEP key for shared key authentication
3318  * @flags:  See &enum cfg80211_assoc_req_flags
3319  * @bg_scan_period:  Background scan period in seconds
3320  *	or -1 to indicate that default value is to be used.
3321  * @ht_capa:  HT Capabilities over-rides.  Values set in ht_capa_mask
3322  *	will be used in ht_capa.  Un-supported values will be ignored.
3323  * @ht_capa_mask:  The bits of ht_capa which are to be used.
3324  * @vht_capa:  VHT Capability overrides
3325  * @vht_capa_mask: The bits of vht_capa which are to be used.
3326  * @pbss: if set, connect to a PCP instead of AP. Valid for DMG
3327  *	networks.
3328  * @bss_select: criteria to be used for BSS selection.
3329  * @prev_bssid: previous BSSID, if not %NULL use reassociate frame. This is used
3330  *	to indicate a request to reassociate within the ESS instead of a request
3331  *	do the initial association with the ESS. When included, this is set to
3332  *	the BSSID of the current association, i.e., to the value that is
3333  *	included in the Current AP address field of the Reassociation Request
3334  *	frame.
3335  * @fils_erp_username: EAP re-authentication protocol (ERP) username part of the
3336  *	NAI or %NULL if not specified. This is used to construct FILS wrapped
3337  *	data IE.
3338  * @fils_erp_username_len: Length of @fils_erp_username in octets.
3339  * @fils_erp_realm: EAP re-authentication protocol (ERP) realm part of NAI or
3340  *	%NULL if not specified. This specifies the domain name of ER server and
3341  *	is used to construct FILS wrapped data IE.
3342  * @fils_erp_realm_len: Length of @fils_erp_realm in octets.
3343  * @fils_erp_next_seq_num: The next sequence number to use in the FILS ERP
3344  *	messages. This is also used to construct FILS wrapped data IE.
3345  * @fils_erp_rrk: ERP re-authentication Root Key (rRK) used to derive additional
3346  *	keys in FILS or %NULL if not specified.
3347  * @fils_erp_rrk_len: Length of @fils_erp_rrk in octets.
3348  * @want_1x: indicates user-space supports and wants to use 802.1X driver
3349  *	offload of 4-way handshake.
3350  * @edmg: define the EDMG channels.
3351  *	This may specify multiple channels and bonding options for the driver
3352  *	to choose from, based on BSS configuration.
3353  */
3354 struct cfg80211_connect_params {
3355 	struct ieee80211_channel *channel;
3356 	struct ieee80211_channel *channel_hint;
3357 	const u8 *bssid;
3358 	const u8 *bssid_hint;
3359 	const u8 *ssid;
3360 	size_t ssid_len;
3361 	enum nl80211_auth_type auth_type;
3362 	const u8 *ie;
3363 	size_t ie_len;
3364 	bool privacy;
3365 	enum nl80211_mfp mfp;
3366 	struct cfg80211_crypto_settings crypto;
3367 	const u8 *key;
3368 	u8 key_len, key_idx;
3369 	u32 flags;
3370 	int bg_scan_period;
3371 	struct ieee80211_ht_cap ht_capa;
3372 	struct ieee80211_ht_cap ht_capa_mask;
3373 	struct ieee80211_vht_cap vht_capa;
3374 	struct ieee80211_vht_cap vht_capa_mask;
3375 	bool pbss;
3376 	struct cfg80211_bss_selection bss_select;
3377 	const u8 *prev_bssid;
3378 	const u8 *fils_erp_username;
3379 	size_t fils_erp_username_len;
3380 	const u8 *fils_erp_realm;
3381 	size_t fils_erp_realm_len;
3382 	u16 fils_erp_next_seq_num;
3383 	const u8 *fils_erp_rrk;
3384 	size_t fils_erp_rrk_len;
3385 	bool want_1x;
3386 	struct ieee80211_edmg edmg;
3387 };
3388 
3389 /**
3390  * enum cfg80211_connect_params_changed - Connection parameters being updated
3391  *
3392  * This enum provides information of all connect parameters that
3393  * have to be updated as part of update_connect_params() call.
3394  *
3395  * @UPDATE_ASSOC_IES: Indicates whether association request IEs are updated
3396  * @UPDATE_FILS_ERP_INFO: Indicates that FILS connection parameters (realm,
3397  *	username, erp sequence number and rrk) are updated
3398  * @UPDATE_AUTH_TYPE: Indicates that authentication type is updated
3399  */
3400 enum cfg80211_connect_params_changed {
3401 	UPDATE_ASSOC_IES		= BIT(0),
3402 	UPDATE_FILS_ERP_INFO		= BIT(1),
3403 	UPDATE_AUTH_TYPE		= BIT(2),
3404 };
3405 
3406 /**
3407  * enum wiphy_params_flags - set_wiphy_params bitfield values
3408  * @WIPHY_PARAM_RETRY_SHORT: wiphy->retry_short has changed
3409  * @WIPHY_PARAM_RETRY_LONG: wiphy->retry_long has changed
3410  * @WIPHY_PARAM_FRAG_THRESHOLD: wiphy->frag_threshold has changed
3411  * @WIPHY_PARAM_RTS_THRESHOLD: wiphy->rts_threshold has changed
3412  * @WIPHY_PARAM_COVERAGE_CLASS: coverage class changed
3413  * @WIPHY_PARAM_DYN_ACK: dynack has been enabled
3414  * @WIPHY_PARAM_TXQ_LIMIT: TXQ packet limit has been changed
3415  * @WIPHY_PARAM_TXQ_MEMORY_LIMIT: TXQ memory limit has been changed
3416  * @WIPHY_PARAM_TXQ_QUANTUM: TXQ scheduler quantum
3417  */
3418 enum wiphy_params_flags {
3419 	WIPHY_PARAM_RETRY_SHORT		= BIT(0),
3420 	WIPHY_PARAM_RETRY_LONG		= BIT(1),
3421 	WIPHY_PARAM_FRAG_THRESHOLD	= BIT(2),
3422 	WIPHY_PARAM_RTS_THRESHOLD	= BIT(3),
3423 	WIPHY_PARAM_COVERAGE_CLASS	= BIT(4),
3424 	WIPHY_PARAM_DYN_ACK		= BIT(5),
3425 	WIPHY_PARAM_TXQ_LIMIT		= BIT(6),
3426 	WIPHY_PARAM_TXQ_MEMORY_LIMIT	= BIT(7),
3427 	WIPHY_PARAM_TXQ_QUANTUM		= BIT(8),
3428 };
3429 
3430 #define IEEE80211_DEFAULT_AIRTIME_WEIGHT	256
3431 
3432 /* The per TXQ device queue limit in airtime */
3433 #define IEEE80211_DEFAULT_AQL_TXQ_LIMIT_L	5000
3434 #define IEEE80211_DEFAULT_AQL_TXQ_LIMIT_H	12000
3435 
3436 /* The per interface airtime threshold to switch to lower queue limit */
3437 #define IEEE80211_AQL_THRESHOLD			24000
3438 
3439 /**
3440  * struct cfg80211_pmksa - PMK Security Association
3441  *
3442  * This structure is passed to the set/del_pmksa() method for PMKSA
3443  * caching.
3444  *
3445  * @bssid: The AP's BSSID (may be %NULL).
3446  * @pmkid: The identifier to refer a PMKSA.
3447  * @pmk: The PMK for the PMKSA identified by @pmkid. This is used for key
3448  *	derivation by a FILS STA. Otherwise, %NULL.
3449  * @pmk_len: Length of the @pmk. The length of @pmk can differ depending on
3450  *	the hash algorithm used to generate this.
3451  * @ssid: SSID to specify the ESS within which a PMKSA is valid when using FILS
3452  *	cache identifier (may be %NULL).
3453  * @ssid_len: Length of the @ssid in octets.
3454  * @cache_id: 2-octet cache identifier advertized by a FILS AP identifying the
3455  *	scope of PMKSA. This is valid only if @ssid_len is non-zero (may be
3456  *	%NULL).
3457  * @pmk_lifetime: Maximum lifetime for PMKSA in seconds
3458  *	(dot11RSNAConfigPMKLifetime) or 0 if not specified.
3459  *	The configured PMKSA must not be used for PMKSA caching after
3460  *	expiration and any keys derived from this PMK become invalid on
3461  *	expiration, i.e., the current association must be dropped if the PMK
3462  *	used for it expires.
3463  * @pmk_reauth_threshold: Threshold time for reauthentication (percentage of
3464  *	PMK lifetime, dot11RSNAConfigPMKReauthThreshold) or 0 if not specified.
3465  *	Drivers are expected to trigger a full authentication instead of using
3466  *	this PMKSA for caching when reassociating to a new BSS after this
3467  *	threshold to generate a new PMK before the current one expires.
3468  */
3469 struct cfg80211_pmksa {
3470 	const u8 *bssid;
3471 	const u8 *pmkid;
3472 	const u8 *pmk;
3473 	size_t pmk_len;
3474 	const u8 *ssid;
3475 	size_t ssid_len;
3476 	const u8 *cache_id;
3477 	u32 pmk_lifetime;
3478 	u8 pmk_reauth_threshold;
3479 };
3480 
3481 /**
3482  * struct cfg80211_pkt_pattern - packet pattern
3483  * @mask: bitmask where to match pattern and where to ignore bytes,
3484  *	one bit per byte, in same format as nl80211
3485  * @pattern: bytes to match where bitmask is 1
3486  * @pattern_len: length of pattern (in bytes)
3487  * @pkt_offset: packet offset (in bytes)
3488  *
3489  * Internal note: @mask and @pattern are allocated in one chunk of
3490  * memory, free @mask only!
3491  */
3492 struct cfg80211_pkt_pattern {
3493 	const u8 *mask, *pattern;
3494 	int pattern_len;
3495 	int pkt_offset;
3496 };
3497 
3498 /**
3499  * struct cfg80211_wowlan_tcp - TCP connection parameters
3500  *
3501  * @sock: (internal) socket for source port allocation
3502  * @src: source IP address
3503  * @dst: destination IP address
3504  * @dst_mac: destination MAC address
3505  * @src_port: source port
3506  * @dst_port: destination port
3507  * @payload_len: data payload length
3508  * @payload: data payload buffer
3509  * @payload_seq: payload sequence stamping configuration
3510  * @data_interval: interval at which to send data packets
3511  * @wake_len: wakeup payload match length
3512  * @wake_data: wakeup payload match data
3513  * @wake_mask: wakeup payload match mask
3514  * @tokens_size: length of the tokens buffer
3515  * @payload_tok: payload token usage configuration
3516  */
3517 struct cfg80211_wowlan_tcp {
3518 	struct socket *sock;
3519 	__be32 src, dst;
3520 	u16 src_port, dst_port;
3521 	u8 dst_mac[ETH_ALEN];
3522 	int payload_len;
3523 	const u8 *payload;
3524 	struct nl80211_wowlan_tcp_data_seq payload_seq;
3525 	u32 data_interval;
3526 	u32 wake_len;
3527 	const u8 *wake_data, *wake_mask;
3528 	u32 tokens_size;
3529 	/* must be last, variable member */
3530 	struct nl80211_wowlan_tcp_data_token payload_tok;
3531 };
3532 
3533 /**
3534  * struct cfg80211_wowlan - Wake on Wireless-LAN support info
3535  *
3536  * This structure defines the enabled WoWLAN triggers for the device.
3537  * @any: wake up on any activity -- special trigger if device continues
3538  *	operating as normal during suspend
3539  * @disconnect: wake up if getting disconnected
3540  * @magic_pkt: wake up on receiving magic packet
3541  * @patterns: wake up on receiving packet matching a pattern
3542  * @n_patterns: number of patterns
3543  * @gtk_rekey_failure: wake up on GTK rekey failure
3544  * @eap_identity_req: wake up on EAP identity request packet
3545  * @four_way_handshake: wake up on 4-way handshake
3546  * @rfkill_release: wake up when rfkill is released
3547  * @tcp: TCP connection establishment/wakeup parameters, see nl80211.h.
3548  *	NULL if not configured.
3549  * @nd_config: configuration for the scan to be used for net detect wake.
3550  */
3551 struct cfg80211_wowlan {
3552 	bool any, disconnect, magic_pkt, gtk_rekey_failure,
3553 	     eap_identity_req, four_way_handshake,
3554 	     rfkill_release;
3555 	struct cfg80211_pkt_pattern *patterns;
3556 	struct cfg80211_wowlan_tcp *tcp;
3557 	int n_patterns;
3558 	struct cfg80211_sched_scan_request *nd_config;
3559 };
3560 
3561 /**
3562  * struct cfg80211_coalesce_rules - Coalesce rule parameters
3563  *
3564  * This structure defines coalesce rule for the device.
3565  * @delay: maximum coalescing delay in msecs.
3566  * @condition: condition for packet coalescence.
3567  *	see &enum nl80211_coalesce_condition.
3568  * @patterns: array of packet patterns
3569  * @n_patterns: number of patterns
3570  */
3571 struct cfg80211_coalesce_rules {
3572 	int delay;
3573 	enum nl80211_coalesce_condition condition;
3574 	struct cfg80211_pkt_pattern *patterns;
3575 	int n_patterns;
3576 };
3577 
3578 /**
3579  * struct cfg80211_coalesce - Packet coalescing settings
3580  *
3581  * This structure defines coalescing settings.
3582  * @rules: array of coalesce rules
3583  * @n_rules: number of rules
3584  */
3585 struct cfg80211_coalesce {
3586 	int n_rules;
3587 	struct cfg80211_coalesce_rules rules[] __counted_by(n_rules);
3588 };
3589 
3590 /**
3591  * struct cfg80211_wowlan_nd_match - information about the match
3592  *
3593  * @ssid: SSID of the match that triggered the wake up
3594  * @n_channels: Number of channels where the match occurred.  This
3595  *	value may be zero if the driver can't report the channels.
3596  * @channels: center frequencies of the channels where a match
3597  *	occurred (in MHz)
3598  */
3599 struct cfg80211_wowlan_nd_match {
3600 	struct cfg80211_ssid ssid;
3601 	int n_channels;
3602 	u32 channels[] __counted_by(n_channels);
3603 };
3604 
3605 /**
3606  * struct cfg80211_wowlan_nd_info - net detect wake up information
3607  *
3608  * @n_matches: Number of match information instances provided in
3609  *	@matches.  This value may be zero if the driver can't provide
3610  *	match information.
3611  * @matches: Array of pointers to matches containing information about
3612  *	the matches that triggered the wake up.
3613  */
3614 struct cfg80211_wowlan_nd_info {
3615 	int n_matches;
3616 	struct cfg80211_wowlan_nd_match *matches[] __counted_by(n_matches);
3617 };
3618 
3619 /**
3620  * struct cfg80211_wowlan_wakeup - wakeup report
3621  * @disconnect: woke up by getting disconnected
3622  * @magic_pkt: woke up by receiving magic packet
3623  * @gtk_rekey_failure: woke up by GTK rekey failure
3624  * @eap_identity_req: woke up by EAP identity request packet
3625  * @four_way_handshake: woke up by 4-way handshake
3626  * @rfkill_release: woke up by rfkill being released
3627  * @pattern_idx: pattern that caused wakeup, -1 if not due to pattern
3628  * @packet_present_len: copied wakeup packet data
3629  * @packet_len: original wakeup packet length
3630  * @packet: The packet causing the wakeup, if any.
3631  * @packet_80211:  For pattern match, magic packet and other data
3632  *	frame triggers an 802.3 frame should be reported, for
3633  *	disconnect due to deauth 802.11 frame. This indicates which
3634  *	it is.
3635  * @tcp_match: TCP wakeup packet received
3636  * @tcp_connlost: TCP connection lost or failed to establish
3637  * @tcp_nomoretokens: TCP data ran out of tokens
3638  * @net_detect: if not %NULL, woke up because of net detect
3639  * @unprot_deauth_disassoc: woke up due to unprotected deauth or
3640  *	disassoc frame (in MFP).
3641  */
3642 struct cfg80211_wowlan_wakeup {
3643 	bool disconnect, magic_pkt, gtk_rekey_failure,
3644 	     eap_identity_req, four_way_handshake,
3645 	     rfkill_release, packet_80211,
3646 	     tcp_match, tcp_connlost, tcp_nomoretokens,
3647 	     unprot_deauth_disassoc;
3648 	s32 pattern_idx;
3649 	u32 packet_present_len, packet_len;
3650 	const void *packet;
3651 	struct cfg80211_wowlan_nd_info *net_detect;
3652 };
3653 
3654 /**
3655  * struct cfg80211_gtk_rekey_data - rekey data
3656  * @kek: key encryption key (@kek_len bytes)
3657  * @kck: key confirmation key (@kck_len bytes)
3658  * @replay_ctr: replay counter (NL80211_REPLAY_CTR_LEN bytes)
3659  * @kek_len: length of kek
3660  * @kck_len: length of kck
3661  * @akm: akm (oui, id)
3662  */
3663 struct cfg80211_gtk_rekey_data {
3664 	const u8 *kek, *kck, *replay_ctr;
3665 	u32 akm;
3666 	u8 kek_len, kck_len;
3667 };
3668 
3669 /**
3670  * struct cfg80211_update_ft_ies_params - FT IE Information
3671  *
3672  * This structure provides information needed to update the fast transition IE
3673  *
3674  * @md: The Mobility Domain ID, 2 Octet value
3675  * @ie: Fast Transition IEs
3676  * @ie_len: Length of ft_ie in octets
3677  */
3678 struct cfg80211_update_ft_ies_params {
3679 	u16 md;
3680 	const u8 *ie;
3681 	size_t ie_len;
3682 };
3683 
3684 /**
3685  * struct cfg80211_mgmt_tx_params - mgmt tx parameters
3686  *
3687  * This structure provides information needed to transmit a mgmt frame
3688  *
3689  * @chan: channel to use
3690  * @offchan: indicates whether off channel operation is required
3691  * @wait: duration for ROC
3692  * @buf: buffer to transmit
3693  * @len: buffer length
3694  * @no_cck: don't use cck rates for this frame
3695  * @dont_wait_for_ack: tells the low level not to wait for an ack
3696  * @n_csa_offsets: length of csa_offsets array
3697  * @csa_offsets: array of all the csa offsets in the frame
3698  * @link_id: for MLO, the link ID to transmit on, -1 if not given; note
3699  *	that the link ID isn't validated (much), it's in range but the
3700  *	link might not exist (or be used by the receiver STA)
3701  */
3702 struct cfg80211_mgmt_tx_params {
3703 	struct ieee80211_channel *chan;
3704 	bool offchan;
3705 	unsigned int wait;
3706 	const u8 *buf;
3707 	size_t len;
3708 	bool no_cck;
3709 	bool dont_wait_for_ack;
3710 	int n_csa_offsets;
3711 	const u16 *csa_offsets;
3712 	int link_id;
3713 };
3714 
3715 /**
3716  * struct cfg80211_dscp_exception - DSCP exception
3717  *
3718  * @dscp: DSCP value that does not adhere to the user priority range definition
3719  * @up: user priority value to which the corresponding DSCP value belongs
3720  */
3721 struct cfg80211_dscp_exception {
3722 	u8 dscp;
3723 	u8 up;
3724 };
3725 
3726 /**
3727  * struct cfg80211_dscp_range - DSCP range definition for user priority
3728  *
3729  * @low: lowest DSCP value of this user priority range, inclusive
3730  * @high: highest DSCP value of this user priority range, inclusive
3731  */
3732 struct cfg80211_dscp_range {
3733 	u8 low;
3734 	u8 high;
3735 };
3736 
3737 /* QoS Map Set element length defined in IEEE Std 802.11-2012, 8.4.2.97 */
3738 #define IEEE80211_QOS_MAP_MAX_EX	21
3739 #define IEEE80211_QOS_MAP_LEN_MIN	16
3740 #define IEEE80211_QOS_MAP_LEN_MAX \
3741 	(IEEE80211_QOS_MAP_LEN_MIN + 2 * IEEE80211_QOS_MAP_MAX_EX)
3742 
3743 /**
3744  * struct cfg80211_qos_map - QoS Map Information
3745  *
3746  * This struct defines the Interworking QoS map setting for DSCP values
3747  *
3748  * @num_des: number of DSCP exceptions (0..21)
3749  * @dscp_exception: optionally up to maximum of 21 DSCP exceptions from
3750  *	the user priority DSCP range definition
3751  * @up: DSCP range definition for a particular user priority
3752  */
3753 struct cfg80211_qos_map {
3754 	u8 num_des;
3755 	struct cfg80211_dscp_exception dscp_exception[IEEE80211_QOS_MAP_MAX_EX];
3756 	struct cfg80211_dscp_range up[8];
3757 };
3758 
3759 /**
3760  * struct cfg80211_nan_conf - NAN configuration
3761  *
3762  * This struct defines NAN configuration parameters
3763  *
3764  * @master_pref: master preference (1 - 255)
3765  * @bands: operating bands, a bitmap of &enum nl80211_band values.
3766  *	For instance, for NL80211_BAND_2GHZ, bit 0 would be set
3767  *	(i.e. BIT(NL80211_BAND_2GHZ)).
3768  */
3769 struct cfg80211_nan_conf {
3770 	u8 master_pref;
3771 	u8 bands;
3772 };
3773 
3774 /**
3775  * enum cfg80211_nan_conf_changes - indicates changed fields in NAN
3776  * configuration
3777  *
3778  * @CFG80211_NAN_CONF_CHANGED_PREF: master preference
3779  * @CFG80211_NAN_CONF_CHANGED_BANDS: operating bands
3780  */
3781 enum cfg80211_nan_conf_changes {
3782 	CFG80211_NAN_CONF_CHANGED_PREF = BIT(0),
3783 	CFG80211_NAN_CONF_CHANGED_BANDS = BIT(1),
3784 };
3785 
3786 /**
3787  * struct cfg80211_nan_func_filter - a NAN function Rx / Tx filter
3788  *
3789  * @filter: the content of the filter
3790  * @len: the length of the filter
3791  */
3792 struct cfg80211_nan_func_filter {
3793 	const u8 *filter;
3794 	u8 len;
3795 };
3796 
3797 /**
3798  * struct cfg80211_nan_func - a NAN function
3799  *
3800  * @type: &enum nl80211_nan_function_type
3801  * @service_id: the service ID of the function
3802  * @publish_type: &nl80211_nan_publish_type
3803  * @close_range: if true, the range should be limited. Threshold is
3804  *	implementation specific.
3805  * @publish_bcast: if true, the solicited publish should be broadcasted
3806  * @subscribe_active: if true, the subscribe is active
3807  * @followup_id: the instance ID for follow up
3808  * @followup_reqid: the requester instance ID for follow up
3809  * @followup_dest: MAC address of the recipient of the follow up
3810  * @ttl: time to live counter in DW.
3811  * @serv_spec_info: Service Specific Info
3812  * @serv_spec_info_len: Service Specific Info length
3813  * @srf_include: if true, SRF is inclusive
3814  * @srf_bf: Bloom Filter
3815  * @srf_bf_len: Bloom Filter length
3816  * @srf_bf_idx: Bloom Filter index
3817  * @srf_macs: SRF MAC addresses
3818  * @srf_num_macs: number of MAC addresses in SRF
3819  * @rx_filters: rx filters that are matched with corresponding peer's tx_filter
3820  * @tx_filters: filters that should be transmitted in the SDF.
3821  * @num_rx_filters: length of &rx_filters.
3822  * @num_tx_filters: length of &tx_filters.
3823  * @instance_id: driver allocated id of the function.
3824  * @cookie: unique NAN function identifier.
3825  */
3826 struct cfg80211_nan_func {
3827 	enum nl80211_nan_function_type type;
3828 	u8 service_id[NL80211_NAN_FUNC_SERVICE_ID_LEN];
3829 	u8 publish_type;
3830 	bool close_range;
3831 	bool publish_bcast;
3832 	bool subscribe_active;
3833 	u8 followup_id;
3834 	u8 followup_reqid;
3835 	struct mac_address followup_dest;
3836 	u32 ttl;
3837 	const u8 *serv_spec_info;
3838 	u8 serv_spec_info_len;
3839 	bool srf_include;
3840 	const u8 *srf_bf;
3841 	u8 srf_bf_len;
3842 	u8 srf_bf_idx;
3843 	struct mac_address *srf_macs;
3844 	int srf_num_macs;
3845 	struct cfg80211_nan_func_filter *rx_filters;
3846 	struct cfg80211_nan_func_filter *tx_filters;
3847 	u8 num_tx_filters;
3848 	u8 num_rx_filters;
3849 	u8 instance_id;
3850 	u64 cookie;
3851 };
3852 
3853 /**
3854  * struct cfg80211_pmk_conf - PMK configuration
3855  *
3856  * @aa: authenticator address
3857  * @pmk_len: PMK length in bytes.
3858  * @pmk: the PMK material
3859  * @pmk_r0_name: PMK-R0 Name. NULL if not applicable (i.e., the PMK
3860  *	is not PMK-R0). When pmk_r0_name is not NULL, the pmk field
3861  *	holds PMK-R0.
3862  */
3863 struct cfg80211_pmk_conf {
3864 	const u8 *aa;
3865 	u8 pmk_len;
3866 	const u8 *pmk;
3867 	const u8 *pmk_r0_name;
3868 };
3869 
3870 /**
3871  * struct cfg80211_external_auth_params - Trigger External authentication.
3872  *
3873  * Commonly used across the external auth request and event interfaces.
3874  *
3875  * @action: action type / trigger for external authentication. Only significant
3876  *	for the authentication request event interface (driver to user space).
3877  * @bssid: BSSID of the peer with which the authentication has
3878  *	to happen. Used by both the authentication request event and
3879  *	authentication response command interface.
3880  * @ssid: SSID of the AP.  Used by both the authentication request event and
3881  *	authentication response command interface.
3882  * @key_mgmt_suite: AKM suite of the respective authentication. Used by the
3883  *	authentication request event interface.
3884  * @status: status code, %WLAN_STATUS_SUCCESS for successful authentication,
3885  *	use %WLAN_STATUS_UNSPECIFIED_FAILURE if user space cannot give you
3886  *	the real status code for failures. Used only for the authentication
3887  *	response command interface (user space to driver).
3888  * @pmkid: The identifier to refer a PMKSA.
3889  * @mld_addr: MLD address of the peer. Used by the authentication request event
3890  *	interface. Driver indicates this to enable MLO during the authentication
3891  *	offload to user space. Driver shall look at %NL80211_ATTR_MLO_SUPPORT
3892  *	flag capability in NL80211_CMD_CONNECT to know whether the user space
3893  *	supports enabling MLO during the authentication offload.
3894  *	User space should use the address of the interface (on which the
3895  *	authentication request event reported) as self MLD address. User space
3896  *	and driver should use MLD addresses in RA, TA and BSSID fields of
3897  *	authentication frames sent or received via cfg80211. The driver
3898  *	translates the MLD addresses to/from link addresses based on the link
3899  *	chosen for the authentication.
3900  */
3901 struct cfg80211_external_auth_params {
3902 	enum nl80211_external_auth_action action;
3903 	u8 bssid[ETH_ALEN] __aligned(2);
3904 	struct cfg80211_ssid ssid;
3905 	unsigned int key_mgmt_suite;
3906 	u16 status;
3907 	const u8 *pmkid;
3908 	u8 mld_addr[ETH_ALEN] __aligned(2);
3909 };
3910 
3911 /**
3912  * struct cfg80211_ftm_responder_stats - FTM responder statistics
3913  *
3914  * @filled: bitflag of flags using the bits of &enum nl80211_ftm_stats to
3915  *	indicate the relevant values in this struct for them
3916  * @success_num: number of FTM sessions in which all frames were successfully
3917  *	answered
3918  * @partial_num: number of FTM sessions in which part of frames were
3919  *	successfully answered
3920  * @failed_num: number of failed FTM sessions
3921  * @asap_num: number of ASAP FTM sessions
3922  * @non_asap_num: number of  non-ASAP FTM sessions
3923  * @total_duration_ms: total sessions durations - gives an indication
3924  *	of how much time the responder was busy
3925  * @unknown_triggers_num: number of unknown FTM triggers - triggers from
3926  *	initiators that didn't finish successfully the negotiation phase with
3927  *	the responder
3928  * @reschedule_requests_num: number of FTM reschedule requests - initiator asks
3929  *	for a new scheduling although it already has scheduled FTM slot
3930  * @out_of_window_triggers_num: total FTM triggers out of scheduled window
3931  */
3932 struct cfg80211_ftm_responder_stats {
3933 	u32 filled;
3934 	u32 success_num;
3935 	u32 partial_num;
3936 	u32 failed_num;
3937 	u32 asap_num;
3938 	u32 non_asap_num;
3939 	u64 total_duration_ms;
3940 	u32 unknown_triggers_num;
3941 	u32 reschedule_requests_num;
3942 	u32 out_of_window_triggers_num;
3943 };
3944 
3945 /**
3946  * struct cfg80211_pmsr_ftm_result - FTM result
3947  * @failure_reason: if this measurement failed (PMSR status is
3948  *	%NL80211_PMSR_STATUS_FAILURE), this gives a more precise
3949  *	reason than just "failure"
3950  * @burst_index: if reporting partial results, this is the index
3951  *	in [0 .. num_bursts-1] of the burst that's being reported
3952  * @num_ftmr_attempts: number of FTM request frames transmitted
3953  * @num_ftmr_successes: number of FTM request frames acked
3954  * @busy_retry_time: if failure_reason is %NL80211_PMSR_FTM_FAILURE_PEER_BUSY,
3955  *	fill this to indicate in how many seconds a retry is deemed possible
3956  *	by the responder
3957  * @num_bursts_exp: actual number of bursts exponent negotiated
3958  * @burst_duration: actual burst duration negotiated
3959  * @ftms_per_burst: actual FTMs per burst negotiated
3960  * @lci_len: length of LCI information (if present)
3961  * @civicloc_len: length of civic location information (if present)
3962  * @lci: LCI data (may be %NULL)
3963  * @civicloc: civic location data (may be %NULL)
3964  * @rssi_avg: average RSSI over FTM action frames reported
3965  * @rssi_spread: spread of the RSSI over FTM action frames reported
3966  * @tx_rate: bitrate for transmitted FTM action frame response
3967  * @rx_rate: bitrate of received FTM action frame
3968  * @rtt_avg: average of RTTs measured (must have either this or @dist_avg)
3969  * @rtt_variance: variance of RTTs measured (note that standard deviation is
3970  *	the square root of the variance)
3971  * @rtt_spread: spread of the RTTs measured
3972  * @dist_avg: average of distances (mm) measured
3973  *	(must have either this or @rtt_avg)
3974  * @dist_variance: variance of distances measured (see also @rtt_variance)
3975  * @dist_spread: spread of distances measured (see also @rtt_spread)
3976  * @num_ftmr_attempts_valid: @num_ftmr_attempts is valid
3977  * @num_ftmr_successes_valid: @num_ftmr_successes is valid
3978  * @rssi_avg_valid: @rssi_avg is valid
3979  * @rssi_spread_valid: @rssi_spread is valid
3980  * @tx_rate_valid: @tx_rate is valid
3981  * @rx_rate_valid: @rx_rate is valid
3982  * @rtt_avg_valid: @rtt_avg is valid
3983  * @rtt_variance_valid: @rtt_variance is valid
3984  * @rtt_spread_valid: @rtt_spread is valid
3985  * @dist_avg_valid: @dist_avg is valid
3986  * @dist_variance_valid: @dist_variance is valid
3987  * @dist_spread_valid: @dist_spread is valid
3988  */
3989 struct cfg80211_pmsr_ftm_result {
3990 	const u8 *lci;
3991 	const u8 *civicloc;
3992 	unsigned int lci_len;
3993 	unsigned int civicloc_len;
3994 	enum nl80211_peer_measurement_ftm_failure_reasons failure_reason;
3995 	u32 num_ftmr_attempts, num_ftmr_successes;
3996 	s16 burst_index;
3997 	u8 busy_retry_time;
3998 	u8 num_bursts_exp;
3999 	u8 burst_duration;
4000 	u8 ftms_per_burst;
4001 	s32 rssi_avg;
4002 	s32 rssi_spread;
4003 	struct rate_info tx_rate, rx_rate;
4004 	s64 rtt_avg;
4005 	s64 rtt_variance;
4006 	s64 rtt_spread;
4007 	s64 dist_avg;
4008 	s64 dist_variance;
4009 	s64 dist_spread;
4010 
4011 	u16 num_ftmr_attempts_valid:1,
4012 	    num_ftmr_successes_valid:1,
4013 	    rssi_avg_valid:1,
4014 	    rssi_spread_valid:1,
4015 	    tx_rate_valid:1,
4016 	    rx_rate_valid:1,
4017 	    rtt_avg_valid:1,
4018 	    rtt_variance_valid:1,
4019 	    rtt_spread_valid:1,
4020 	    dist_avg_valid:1,
4021 	    dist_variance_valid:1,
4022 	    dist_spread_valid:1;
4023 };
4024 
4025 /**
4026  * struct cfg80211_pmsr_result - peer measurement result
4027  * @addr: address of the peer
4028  * @host_time: host time (use ktime_get_boottime() adjust to the time when the
4029  *	measurement was made)
4030  * @ap_tsf: AP's TSF at measurement time
4031  * @status: status of the measurement
4032  * @final: if reporting partial results, mark this as the last one; if not
4033  *	reporting partial results always set this flag
4034  * @ap_tsf_valid: indicates the @ap_tsf value is valid
4035  * @type: type of the measurement reported, note that we only support reporting
4036  *	one type at a time, but you can report multiple results separately and
4037  *	they're all aggregated for userspace.
4038  * @ftm: FTM result
4039  */
4040 struct cfg80211_pmsr_result {
4041 	u64 host_time, ap_tsf;
4042 	enum nl80211_peer_measurement_status status;
4043 
4044 	u8 addr[ETH_ALEN];
4045 
4046 	u8 final:1,
4047 	   ap_tsf_valid:1;
4048 
4049 	enum nl80211_peer_measurement_type type;
4050 
4051 	union {
4052 		struct cfg80211_pmsr_ftm_result ftm;
4053 	};
4054 };
4055 
4056 /**
4057  * struct cfg80211_pmsr_ftm_request_peer - FTM request data
4058  * @requested: indicates FTM is requested
4059  * @preamble: frame preamble to use
4060  * @burst_period: burst period to use
4061  * @asap: indicates to use ASAP mode
4062  * @num_bursts_exp: number of bursts exponent
4063  * @burst_duration: burst duration
4064  * @ftms_per_burst: number of FTMs per burst
4065  * @ftmr_retries: number of retries for FTM request
4066  * @request_lci: request LCI information
4067  * @request_civicloc: request civic location information
4068  * @trigger_based: use trigger based ranging for the measurement
4069  *		 If neither @trigger_based nor @non_trigger_based is set,
4070  *		 EDCA based ranging will be used.
4071  * @non_trigger_based: use non trigger based ranging for the measurement
4072  *		 If neither @trigger_based nor @non_trigger_based is set,
4073  *		 EDCA based ranging will be used.
4074  * @lmr_feedback: negotiate for I2R LMR feedback. Only valid if either
4075  *		 @trigger_based or @non_trigger_based is set.
4076  * @bss_color: the bss color of the responder. Optional. Set to zero to
4077  *	indicate the driver should set the BSS color. Only valid if
4078  *	@non_trigger_based or @trigger_based is set.
4079  *
4080  * See also nl80211 for the respective attribute documentation.
4081  */
4082 struct cfg80211_pmsr_ftm_request_peer {
4083 	enum nl80211_preamble preamble;
4084 	u16 burst_period;
4085 	u8 requested:1,
4086 	   asap:1,
4087 	   request_lci:1,
4088 	   request_civicloc:1,
4089 	   trigger_based:1,
4090 	   non_trigger_based:1,
4091 	   lmr_feedback:1;
4092 	u8 num_bursts_exp;
4093 	u8 burst_duration;
4094 	u8 ftms_per_burst;
4095 	u8 ftmr_retries;
4096 	u8 bss_color;
4097 };
4098 
4099 /**
4100  * struct cfg80211_pmsr_request_peer - peer data for a peer measurement request
4101  * @addr: MAC address
4102  * @chandef: channel to use
4103  * @report_ap_tsf: report the associated AP's TSF
4104  * @ftm: FTM data, see &struct cfg80211_pmsr_ftm_request_peer
4105  */
4106 struct cfg80211_pmsr_request_peer {
4107 	u8 addr[ETH_ALEN];
4108 	struct cfg80211_chan_def chandef;
4109 	u8 report_ap_tsf:1;
4110 	struct cfg80211_pmsr_ftm_request_peer ftm;
4111 };
4112 
4113 /**
4114  * struct cfg80211_pmsr_request - peer measurement request
4115  * @cookie: cookie, set by cfg80211
4116  * @nl_portid: netlink portid - used by cfg80211
4117  * @drv_data: driver data for this request, if required for aborting,
4118  *	not otherwise freed or anything by cfg80211
4119  * @mac_addr: MAC address used for (randomised) request
4120  * @mac_addr_mask: MAC address mask used for randomisation, bits that
4121  *	are 0 in the mask should be randomised, bits that are 1 should
4122  *	be taken from the @mac_addr
4123  * @list: used by cfg80211 to hold on to the request
4124  * @timeout: timeout (in milliseconds) for the whole operation, if
4125  *	zero it means there's no timeout
4126  * @n_peers: number of peers to do measurements with
4127  * @peers: per-peer measurement request data
4128  */
4129 struct cfg80211_pmsr_request {
4130 	u64 cookie;
4131 	void *drv_data;
4132 	u32 n_peers;
4133 	u32 nl_portid;
4134 
4135 	u32 timeout;
4136 
4137 	u8 mac_addr[ETH_ALEN] __aligned(2);
4138 	u8 mac_addr_mask[ETH_ALEN] __aligned(2);
4139 
4140 	struct list_head list;
4141 
4142 	struct cfg80211_pmsr_request_peer peers[] __counted_by(n_peers);
4143 };
4144 
4145 /**
4146  * struct cfg80211_update_owe_info - OWE Information
4147  *
4148  * This structure provides information needed for the drivers to offload OWE
4149  * (Opportunistic Wireless Encryption) processing to the user space.
4150  *
4151  * Commonly used across update_owe_info request and event interfaces.
4152  *
4153  * @peer: MAC address of the peer device for which the OWE processing
4154  *	has to be done.
4155  * @status: status code, %WLAN_STATUS_SUCCESS for successful OWE info
4156  *	processing, use %WLAN_STATUS_UNSPECIFIED_FAILURE if user space
4157  *	cannot give you the real status code for failures. Used only for
4158  *	OWE update request command interface (user space to driver).
4159  * @ie: IEs obtained from the peer or constructed by the user space. These are
4160  *	the IEs of the remote peer in the event from the host driver and
4161  *	the constructed IEs by the user space in the request interface.
4162  * @ie_len: Length of IEs in octets.
4163  * @assoc_link_id: MLO link ID of the AP, with which (re)association requested
4164  *	by peer. This will be filled by driver for both MLO and non-MLO station
4165  *	connections when the AP affiliated with an MLD. For non-MLD AP mode, it
4166  *	will be -1. Used only with OWE update event (driver to user space).
4167  * @peer_mld_addr: For MLO connection, MLD address of the peer. For non-MLO
4168  *	connection, it will be all zeros. This is applicable only when
4169  *	@assoc_link_id is not -1, i.e., the AP affiliated with an MLD. Used only
4170  *	with OWE update event (driver to user space).
4171  */
4172 struct cfg80211_update_owe_info {
4173 	u8 peer[ETH_ALEN] __aligned(2);
4174 	u16 status;
4175 	const u8 *ie;
4176 	size_t ie_len;
4177 	int assoc_link_id;
4178 	u8 peer_mld_addr[ETH_ALEN] __aligned(2);
4179 };
4180 
4181 /**
4182  * struct mgmt_frame_regs - management frame registrations data
4183  * @global_stypes: bitmap of management frame subtypes registered
4184  *	for the entire device
4185  * @interface_stypes: bitmap of management frame subtypes registered
4186  *	for the given interface
4187  * @global_mcast_stypes: mcast RX is needed globally for these subtypes
4188  * @interface_mcast_stypes: mcast RX is needed on this interface
4189  *	for these subtypes
4190  */
4191 struct mgmt_frame_regs {
4192 	u32 global_stypes, interface_stypes;
4193 	u32 global_mcast_stypes, interface_mcast_stypes;
4194 };
4195 
4196 /**
4197  * struct cfg80211_ops - backend description for wireless configuration
4198  *
4199  * This struct is registered by fullmac card drivers and/or wireless stacks
4200  * in order to handle configuration requests on their interfaces.
4201  *
4202  * All callbacks except where otherwise noted should return 0
4203  * on success or a negative error code.
4204  *
4205  * All operations are invoked with the wiphy mutex held. The RTNL may be
4206  * held in addition (due to wireless extensions) but this cannot be relied
4207  * upon except in cases where documented below. Note that due to ordering,
4208  * the RTNL also cannot be acquired in any handlers.
4209  *
4210  * @suspend: wiphy device needs to be suspended. The variable @wow will
4211  *	be %NULL or contain the enabled Wake-on-Wireless triggers that are
4212  *	configured for the device.
4213  * @resume: wiphy device needs to be resumed
4214  * @set_wakeup: Called when WoWLAN is enabled/disabled, use this callback
4215  *	to call device_set_wakeup_enable() to enable/disable wakeup from
4216  *	the device.
4217  *
4218  * @add_virtual_intf: create a new virtual interface with the given name,
4219  *	must set the struct wireless_dev's iftype. Beware: You must create
4220  *	the new netdev in the wiphy's network namespace! Returns the struct
4221  *	wireless_dev, or an ERR_PTR. For P2P device wdevs, the driver must
4222  *	also set the address member in the wdev.
4223  *	This additionally holds the RTNL to be able to do netdev changes.
4224  *
4225  * @del_virtual_intf: remove the virtual interface
4226  *	This additionally holds the RTNL to be able to do netdev changes.
4227  *
4228  * @change_virtual_intf: change type/configuration of virtual interface,
4229  *	keep the struct wireless_dev's iftype updated.
4230  *	This additionally holds the RTNL to be able to do netdev changes.
4231  *
4232  * @add_intf_link: Add a new MLO link to the given interface. Note that
4233  *	the wdev->link[] data structure has been updated, so the new link
4234  *	address is available.
4235  * @del_intf_link: Remove an MLO link from the given interface.
4236  *
4237  * @add_key: add a key with the given parameters. @mac_addr will be %NULL
4238  *	when adding a group key. @link_id will be -1 for non-MLO connection.
4239  *	For MLO connection, @link_id will be >= 0 for group key and -1 for
4240  *	pairwise key, @mac_addr will be peer's MLD address for MLO pairwise key.
4241  *
4242  * @get_key: get information about the key with the given parameters.
4243  *	@mac_addr will be %NULL when requesting information for a group
4244  *	key. All pointers given to the @callback function need not be valid
4245  *	after it returns. This function should return an error if it is
4246  *	not possible to retrieve the key, -ENOENT if it doesn't exist.
4247  *	@link_id will be -1 for non-MLO connection. For MLO connection,
4248  *	@link_id will be >= 0 for group key and -1 for pairwise key, @mac_addr
4249  *	will be peer's MLD address for MLO pairwise key.
4250  *
4251  * @del_key: remove a key given the @mac_addr (%NULL for a group key)
4252  *	and @key_index, return -ENOENT if the key doesn't exist. @link_id will
4253  *	be -1 for non-MLO connection. For MLO connection, @link_id will be >= 0
4254  *	for group key and -1 for pairwise key, @mac_addr will be peer's MLD
4255  *	address for MLO pairwise key.
4256  *
4257  * @set_default_key: set the default key on an interface. @link_id will be >= 0
4258  *	for MLO connection and -1 for non-MLO connection.
4259  *
4260  * @set_default_mgmt_key: set the default management frame key on an interface.
4261  *	@link_id will be >= 0 for MLO connection and -1 for non-MLO connection.
4262  *
4263  * @set_default_beacon_key: set the default Beacon frame key on an interface.
4264  *	@link_id will be >= 0 for MLO connection and -1 for non-MLO connection.
4265  *
4266  * @set_rekey_data: give the data necessary for GTK rekeying to the driver
4267  *
4268  * @start_ap: Start acting in AP mode defined by the parameters.
4269  * @change_beacon: Change the beacon parameters for an access point mode
4270  *	interface. This should reject the call when AP mode wasn't started.
4271  * @stop_ap: Stop being an AP, including stopping beaconing.
4272  *
4273  * @add_station: Add a new station.
4274  * @del_station: Remove a station
4275  * @change_station: Modify a given station. Note that flags changes are not much
4276  *	validated in cfg80211, in particular the auth/assoc/authorized flags
4277  *	might come to the driver in invalid combinations -- make sure to check
4278  *	them, also against the existing state! Drivers must call
4279  *	cfg80211_check_station_change() to validate the information.
4280  * @get_station: get station information for the station identified by @mac
4281  * @dump_station: dump station callback -- resume dump at index @idx
4282  *
4283  * @add_mpath: add a fixed mesh path
4284  * @del_mpath: delete a given mesh path
4285  * @change_mpath: change a given mesh path
4286  * @get_mpath: get a mesh path for the given parameters
4287  * @dump_mpath: dump mesh path callback -- resume dump at index @idx
4288  * @get_mpp: get a mesh proxy path for the given parameters
4289  * @dump_mpp: dump mesh proxy path callback -- resume dump at index @idx
4290  * @join_mesh: join the mesh network with the specified parameters
4291  *	(invoked with the wireless_dev mutex held)
4292  * @leave_mesh: leave the current mesh network
4293  *	(invoked with the wireless_dev mutex held)
4294  *
4295  * @get_mesh_config: Get the current mesh configuration
4296  *
4297  * @update_mesh_config: Update mesh parameters on a running mesh.
4298  *	The mask is a bitfield which tells us which parameters to
4299  *	set, and which to leave alone.
4300  *
4301  * @change_bss: Modify parameters for a given BSS.
4302  *
4303  * @inform_bss: Called by cfg80211 while being informed about new BSS data
4304  *	for every BSS found within the reported data or frame. This is called
4305  *	from within the cfg8011 inform_bss handlers while holding the bss_lock.
4306  *	The data parameter is passed through from drv_data inside
4307  *	struct cfg80211_inform_bss.
4308  *	The new IE data for the BSS is explicitly passed.
4309  *
4310  * @set_txq_params: Set TX queue parameters
4311  *
4312  * @libertas_set_mesh_channel: Only for backward compatibility for libertas,
4313  *	as it doesn't implement join_mesh and needs to set the channel to
4314  *	join the mesh instead.
4315  *
4316  * @set_monitor_channel: Set the monitor mode channel for the device. If other
4317  *	interfaces are active this callback should reject the configuration.
4318  *	If no interfaces are active or the device is down, the channel should
4319  *	be stored for when a monitor interface becomes active.
4320  *
4321  * @scan: Request to do a scan. If returning zero, the scan request is given
4322  *	the driver, and will be valid until passed to cfg80211_scan_done().
4323  *	For scan results, call cfg80211_inform_bss(); you can call this outside
4324  *	the scan/scan_done bracket too.
4325  * @abort_scan: Tell the driver to abort an ongoing scan. The driver shall
4326  *	indicate the status of the scan through cfg80211_scan_done().
4327  *
4328  * @auth: Request to authenticate with the specified peer
4329  *	(invoked with the wireless_dev mutex held)
4330  * @assoc: Request to (re)associate with the specified peer
4331  *	(invoked with the wireless_dev mutex held)
4332  * @deauth: Request to deauthenticate from the specified peer
4333  *	(invoked with the wireless_dev mutex held)
4334  * @disassoc: Request to disassociate from the specified peer
4335  *	(invoked with the wireless_dev mutex held)
4336  *
4337  * @connect: Connect to the ESS with the specified parameters. When connected,
4338  *	call cfg80211_connect_result()/cfg80211_connect_bss() with status code
4339  *	%WLAN_STATUS_SUCCESS. If the connection fails for some reason, call
4340  *	cfg80211_connect_result()/cfg80211_connect_bss() with the status code
4341  *	from the AP or cfg80211_connect_timeout() if no frame with status code
4342  *	was received.
4343  *	The driver is allowed to roam to other BSSes within the ESS when the
4344  *	other BSS matches the connect parameters. When such roaming is initiated
4345  *	by the driver, the driver is expected to verify that the target matches
4346  *	the configured security parameters and to use Reassociation Request
4347  *	frame instead of Association Request frame.
4348  *	The connect function can also be used to request the driver to perform a
4349  *	specific roam when connected to an ESS. In that case, the prev_bssid
4350  *	parameter is set to the BSSID of the currently associated BSS as an
4351  *	indication of requesting reassociation.
4352  *	In both the driver-initiated and new connect() call initiated roaming
4353  *	cases, the result of roaming is indicated with a call to
4354  *	cfg80211_roamed(). (invoked with the wireless_dev mutex held)
4355  * @update_connect_params: Update the connect parameters while connected to a
4356  *	BSS. The updated parameters can be used by driver/firmware for
4357  *	subsequent BSS selection (roaming) decisions and to form the
4358  *	Authentication/(Re)Association Request frames. This call does not
4359  *	request an immediate disassociation or reassociation with the current
4360  *	BSS, i.e., this impacts only subsequent (re)associations. The bits in
4361  *	changed are defined in &enum cfg80211_connect_params_changed.
4362  *	(invoked with the wireless_dev mutex held)
4363  * @disconnect: Disconnect from the BSS/ESS or stop connection attempts if
4364  *      connection is in progress. Once done, call cfg80211_disconnected() in
4365  *      case connection was already established (invoked with the
4366  *      wireless_dev mutex held), otherwise call cfg80211_connect_timeout().
4367  *
4368  * @join_ibss: Join the specified IBSS (or create if necessary). Once done, call
4369  *	cfg80211_ibss_joined(), also call that function when changing BSSID due
4370  *	to a merge.
4371  *	(invoked with the wireless_dev mutex held)
4372  * @leave_ibss: Leave the IBSS.
4373  *	(invoked with the wireless_dev mutex held)
4374  *
4375  * @set_mcast_rate: Set the specified multicast rate (only if vif is in ADHOC or
4376  *	MESH mode)
4377  *
4378  * @set_wiphy_params: Notify that wiphy parameters have changed;
4379  *	@changed bitfield (see &enum wiphy_params_flags) describes which values
4380  *	have changed. The actual parameter values are available in
4381  *	struct wiphy. If returning an error, no value should be changed.
4382  *
4383  * @set_tx_power: set the transmit power according to the parameters,
4384  *	the power passed is in mBm, to get dBm use MBM_TO_DBM(). The
4385  *	wdev may be %NULL if power was set for the wiphy, and will
4386  *	always be %NULL unless the driver supports per-vif TX power
4387  *	(as advertised by the nl80211 feature flag.)
4388  * @get_tx_power: store the current TX power into the dbm variable;
4389  *	return 0 if successful
4390  *
4391  * @rfkill_poll: polls the hw rfkill line, use cfg80211 reporting
4392  *	functions to adjust rfkill hw state
4393  *
4394  * @dump_survey: get site survey information.
4395  *
4396  * @remain_on_channel: Request the driver to remain awake on the specified
4397  *	channel for the specified duration to complete an off-channel
4398  *	operation (e.g., public action frame exchange). When the driver is
4399  *	ready on the requested channel, it must indicate this with an event
4400  *	notification by calling cfg80211_ready_on_channel().
4401  * @cancel_remain_on_channel: Cancel an on-going remain-on-channel operation.
4402  *	This allows the operation to be terminated prior to timeout based on
4403  *	the duration value.
4404  * @mgmt_tx: Transmit a management frame.
4405  * @mgmt_tx_cancel_wait: Cancel the wait time from transmitting a management
4406  *	frame on another channel
4407  *
4408  * @testmode_cmd: run a test mode command; @wdev may be %NULL
4409  * @testmode_dump: Implement a test mode dump. The cb->args[2] and up may be
4410  *	used by the function, but 0 and 1 must not be touched. Additionally,
4411  *	return error codes other than -ENOBUFS and -ENOENT will terminate the
4412  *	dump and return to userspace with an error, so be careful. If any data
4413  *	was passed in from userspace then the data/len arguments will be present
4414  *	and point to the data contained in %NL80211_ATTR_TESTDATA.
4415  *
4416  * @set_bitrate_mask: set the bitrate mask configuration
4417  *
4418  * @set_pmksa: Cache a PMKID for a BSSID. This is mostly useful for fullmac
4419  *	devices running firmwares capable of generating the (re) association
4420  *	RSN IE. It allows for faster roaming between WPA2 BSSIDs.
4421  * @del_pmksa: Delete a cached PMKID.
4422  * @flush_pmksa: Flush all cached PMKIDs.
4423  * @set_power_mgmt: Configure WLAN power management. A timeout value of -1
4424  *	allows the driver to adjust the dynamic ps timeout value.
4425  * @set_cqm_rssi_config: Configure connection quality monitor RSSI threshold.
4426  *	After configuration, the driver should (soon) send an event indicating
4427  *	the current level is above/below the configured threshold; this may
4428  *	need some care when the configuration is changed (without first being
4429  *	disabled.)
4430  * @set_cqm_rssi_range_config: Configure two RSSI thresholds in the
4431  *	connection quality monitor.  An event is to be sent only when the
4432  *	signal level is found to be outside the two values.  The driver should
4433  *	set %NL80211_EXT_FEATURE_CQM_RSSI_LIST if this method is implemented.
4434  *	If it is provided then there's no point providing @set_cqm_rssi_config.
4435  * @set_cqm_txe_config: Configure connection quality monitor TX error
4436  *	thresholds.
4437  * @sched_scan_start: Tell the driver to start a scheduled scan.
4438  * @sched_scan_stop: Tell the driver to stop an ongoing scheduled scan with
4439  *	given request id. This call must stop the scheduled scan and be ready
4440  *	for starting a new one before it returns, i.e. @sched_scan_start may be
4441  *	called immediately after that again and should not fail in that case.
4442  *	The driver should not call cfg80211_sched_scan_stopped() for a requested
4443  *	stop (when this method returns 0).
4444  *
4445  * @update_mgmt_frame_registrations: Notify the driver that management frame
4446  *	registrations were updated. The callback is allowed to sleep.
4447  *
4448  * @set_antenna: Set antenna configuration (tx_ant, rx_ant) on the device.
4449  *	Parameters are bitmaps of allowed antennas to use for TX/RX. Drivers may
4450  *	reject TX/RX mask combinations they cannot support by returning -EINVAL
4451  *	(also see nl80211.h @NL80211_ATTR_WIPHY_ANTENNA_TX).
4452  *
4453  * @get_antenna: Get current antenna configuration from device (tx_ant, rx_ant).
4454  *
4455  * @tdls_mgmt: Transmit a TDLS management frame.
4456  * @tdls_oper: Perform a high-level TDLS operation (e.g. TDLS link setup).
4457  *
4458  * @probe_client: probe an associated client, must return a cookie that it
4459  *	later passes to cfg80211_probe_status().
4460  *
4461  * @set_noack_map: Set the NoAck Map for the TIDs.
4462  *
4463  * @get_channel: Get the current operating channel for the virtual interface.
4464  *	For monitor interfaces, it should return %NULL unless there's a single
4465  *	current monitoring channel.
4466  *
4467  * @start_p2p_device: Start the given P2P device.
4468  * @stop_p2p_device: Stop the given P2P device.
4469  *
4470  * @set_mac_acl: Sets MAC address control list in AP and P2P GO mode.
4471  *	Parameters include ACL policy, an array of MAC address of stations
4472  *	and the number of MAC addresses. If there is already a list in driver
4473  *	this new list replaces the existing one. Driver has to clear its ACL
4474  *	when number of MAC addresses entries is passed as 0. Drivers which
4475  *	advertise the support for MAC based ACL have to implement this callback.
4476  *
4477  * @start_radar_detection: Start radar detection in the driver.
4478  *
4479  * @end_cac: End running CAC, probably because a related CAC
4480  *	was finished on another phy.
4481  *
4482  * @update_ft_ies: Provide updated Fast BSS Transition information to the
4483  *	driver. If the SME is in the driver/firmware, this information can be
4484  *	used in building Authentication and Reassociation Request frames.
4485  *
4486  * @crit_proto_start: Indicates a critical protocol needs more link reliability
4487  *	for a given duration (milliseconds). The protocol is provided so the
4488  *	driver can take the most appropriate actions.
4489  * @crit_proto_stop: Indicates critical protocol no longer needs increased link
4490  *	reliability. This operation can not fail.
4491  * @set_coalesce: Set coalesce parameters.
4492  *
4493  * @channel_switch: initiate channel-switch procedure (with CSA). Driver is
4494  *	responsible for veryfing if the switch is possible. Since this is
4495  *	inherently tricky driver may decide to disconnect an interface later
4496  *	with cfg80211_stop_iface(). This doesn't mean driver can accept
4497  *	everything. It should do it's best to verify requests and reject them
4498  *	as soon as possible.
4499  *
4500  * @set_qos_map: Set QoS mapping information to the driver
4501  *
4502  * @set_ap_chanwidth: Set the AP (including P2P GO) mode channel width for the
4503  *	given interface This is used e.g. for dynamic HT 20/40 MHz channel width
4504  *	changes during the lifetime of the BSS.
4505  *
4506  * @add_tx_ts: validate (if admitted_time is 0) or add a TX TS to the device
4507  *	with the given parameters; action frame exchange has been handled by
4508  *	userspace so this just has to modify the TX path to take the TS into
4509  *	account.
4510  *	If the admitted time is 0 just validate the parameters to make sure
4511  *	the session can be created at all; it is valid to just always return
4512  *	success for that but that may result in inefficient behaviour (handshake
4513  *	with the peer followed by immediate teardown when the addition is later
4514  *	rejected)
4515  * @del_tx_ts: remove an existing TX TS
4516  *
4517  * @join_ocb: join the OCB network with the specified parameters
4518  *	(invoked with the wireless_dev mutex held)
4519  * @leave_ocb: leave the current OCB network
4520  *	(invoked with the wireless_dev mutex held)
4521  *
4522  * @tdls_channel_switch: Start channel-switching with a TDLS peer. The driver
4523  *	is responsible for continually initiating channel-switching operations
4524  *	and returning to the base channel for communication with the AP.
4525  * @tdls_cancel_channel_switch: Stop channel-switching with a TDLS peer. Both
4526  *	peers must be on the base channel when the call completes.
4527  * @start_nan: Start the NAN interface.
4528  * @stop_nan: Stop the NAN interface.
4529  * @add_nan_func: Add a NAN function. Returns negative value on failure.
4530  *	On success @nan_func ownership is transferred to the driver and
4531  *	it may access it outside of the scope of this function. The driver
4532  *	should free the @nan_func when no longer needed by calling
4533  *	cfg80211_free_nan_func().
4534  *	On success the driver should assign an instance_id in the
4535  *	provided @nan_func.
4536  * @del_nan_func: Delete a NAN function.
4537  * @nan_change_conf: changes NAN configuration. The changed parameters must
4538  *	be specified in @changes (using &enum cfg80211_nan_conf_changes);
4539  *	All other parameters must be ignored.
4540  *
4541  * @set_multicast_to_unicast: configure multicast to unicast conversion for BSS
4542  *
4543  * @get_txq_stats: Get TXQ stats for interface or phy. If wdev is %NULL, this
4544  *      function should return phy stats, and interface stats otherwise.
4545  *
4546  * @set_pmk: configure the PMK to be used for offloaded 802.1X 4-Way handshake.
4547  *	If not deleted through @del_pmk the PMK remains valid until disconnect
4548  *	upon which the driver should clear it.
4549  *	(invoked with the wireless_dev mutex held)
4550  * @del_pmk: delete the previously configured PMK for the given authenticator.
4551  *	(invoked with the wireless_dev mutex held)
4552  *
4553  * @external_auth: indicates result of offloaded authentication processing from
4554  *     user space
4555  *
4556  * @tx_control_port: TX a control port frame (EAPoL).  The noencrypt parameter
4557  *	tells the driver that the frame should not be encrypted.
4558  *
4559  * @get_ftm_responder_stats: Retrieve FTM responder statistics, if available.
4560  *	Statistics should be cumulative, currently no way to reset is provided.
4561  * @start_pmsr: start peer measurement (e.g. FTM)
4562  * @abort_pmsr: abort peer measurement
4563  *
4564  * @update_owe_info: Provide updated OWE info to driver. Driver implementing SME
4565  *	but offloading OWE processing to the user space will get the updated
4566  *	DH IE through this interface.
4567  *
4568  * @probe_mesh_link: Probe direct Mesh peer's link quality by sending data frame
4569  *	and overrule HWMP path selection algorithm.
4570  * @set_tid_config: TID specific configuration, this can be peer or BSS specific
4571  *	This callback may sleep.
4572  * @reset_tid_config: Reset TID specific configuration for the peer, for the
4573  *	given TIDs. This callback may sleep.
4574  *
4575  * @set_sar_specs: Update the SAR (TX power) settings.
4576  *
4577  * @color_change: Initiate a color change.
4578  *
4579  * @set_fils_aad: Set FILS AAD data to the AP driver so that the driver can use
4580  *	those to decrypt (Re)Association Request and encrypt (Re)Association
4581  *	Response frame.
4582  *
4583  * @set_radar_background: Configure dedicated offchannel chain available for
4584  *	radar/CAC detection on some hw. This chain can't be used to transmit
4585  *	or receive frames and it is bounded to a running wdev.
4586  *	Background radar/CAC detection allows to avoid the CAC downtime
4587  *	switching to a different channel during CAC detection on the selected
4588  *	radar channel.
4589  *	The caller is expected to set chandef pointer to NULL in order to
4590  *	disable background CAC/radar detection.
4591  * @add_link_station: Add a link to a station.
4592  * @mod_link_station: Modify a link of a station.
4593  * @del_link_station: Remove a link of a station.
4594  *
4595  * @set_hw_timestamp: Enable/disable HW timestamping of TM/FTM frames.
4596  * @set_ttlm: set the TID to link mapping.
4597  * @set_epcs: Enable/Disable EPCS for station mode.
4598  * @get_radio_mask: get bitmask of radios in use.
4599  *	(invoked with the wiphy mutex held)
4600  * @assoc_ml_reconf: Request a non-AP MLO connection to perform ML
4601  *	reconfiguration, i.e., add and/or remove links to/from the
4602  *	association using ML reconfiguration action frames. Successfully added
4603  *	links will be added to the set of valid links. Successfully removed
4604  *	links will be removed from the set of valid links. The driver must
4605  *	indicate removed links by calling cfg80211_links_removed() and added
4606  *	links by calling cfg80211_mlo_reconf_add_done(). When calling
4607  *	cfg80211_mlo_reconf_add_done() the bss pointer must be given for each
4608  *	link for which MLO reconfiguration 'add' operation was requested.
4609  */
4610 struct cfg80211_ops {
4611 	int	(*suspend)(struct wiphy *wiphy, struct cfg80211_wowlan *wow);
4612 	int	(*resume)(struct wiphy *wiphy);
4613 	void	(*set_wakeup)(struct wiphy *wiphy, bool enabled);
4614 
4615 	struct wireless_dev * (*add_virtual_intf)(struct wiphy *wiphy,
4616 						  const char *name,
4617 						  unsigned char name_assign_type,
4618 						  enum nl80211_iftype type,
4619 						  struct vif_params *params);
4620 	int	(*del_virtual_intf)(struct wiphy *wiphy,
4621 				    struct wireless_dev *wdev);
4622 	int	(*change_virtual_intf)(struct wiphy *wiphy,
4623 				       struct net_device *dev,
4624 				       enum nl80211_iftype type,
4625 				       struct vif_params *params);
4626 
4627 	int	(*add_intf_link)(struct wiphy *wiphy,
4628 				 struct wireless_dev *wdev,
4629 				 unsigned int link_id);
4630 	void	(*del_intf_link)(struct wiphy *wiphy,
4631 				 struct wireless_dev *wdev,
4632 				 unsigned int link_id);
4633 
4634 	int	(*add_key)(struct wiphy *wiphy, struct net_device *netdev,
4635 			   int link_id, u8 key_index, bool pairwise,
4636 			   const u8 *mac_addr, struct key_params *params);
4637 	int	(*get_key)(struct wiphy *wiphy, struct net_device *netdev,
4638 			   int link_id, u8 key_index, bool pairwise,
4639 			   const u8 *mac_addr, void *cookie,
4640 			   void (*callback)(void *cookie, struct key_params*));
4641 	int	(*del_key)(struct wiphy *wiphy, struct net_device *netdev,
4642 			   int link_id, u8 key_index, bool pairwise,
4643 			   const u8 *mac_addr);
4644 	int	(*set_default_key)(struct wiphy *wiphy,
4645 				   struct net_device *netdev, int link_id,
4646 				   u8 key_index, bool unicast, bool multicast);
4647 	int	(*set_default_mgmt_key)(struct wiphy *wiphy,
4648 					struct net_device *netdev, int link_id,
4649 					u8 key_index);
4650 	int	(*set_default_beacon_key)(struct wiphy *wiphy,
4651 					  struct net_device *netdev,
4652 					  int link_id,
4653 					  u8 key_index);
4654 
4655 	int	(*start_ap)(struct wiphy *wiphy, struct net_device *dev,
4656 			    struct cfg80211_ap_settings *settings);
4657 	int	(*change_beacon)(struct wiphy *wiphy, struct net_device *dev,
4658 				 struct cfg80211_ap_update *info);
4659 	int	(*stop_ap)(struct wiphy *wiphy, struct net_device *dev,
4660 			   unsigned int link_id);
4661 
4662 
4663 	int	(*add_station)(struct wiphy *wiphy, struct net_device *dev,
4664 			       const u8 *mac,
4665 			       struct station_parameters *params);
4666 	int	(*del_station)(struct wiphy *wiphy, struct net_device *dev,
4667 			       struct station_del_parameters *params);
4668 	int	(*change_station)(struct wiphy *wiphy, struct net_device *dev,
4669 				  const u8 *mac,
4670 				  struct station_parameters *params);
4671 	int	(*get_station)(struct wiphy *wiphy, struct net_device *dev,
4672 			       const u8 *mac, struct station_info *sinfo);
4673 	int	(*dump_station)(struct wiphy *wiphy, struct net_device *dev,
4674 				int idx, u8 *mac, struct station_info *sinfo);
4675 
4676 	int	(*add_mpath)(struct wiphy *wiphy, struct net_device *dev,
4677 			       const u8 *dst, const u8 *next_hop);
4678 	int	(*del_mpath)(struct wiphy *wiphy, struct net_device *dev,
4679 			       const u8 *dst);
4680 	int	(*change_mpath)(struct wiphy *wiphy, struct net_device *dev,
4681 				  const u8 *dst, const u8 *next_hop);
4682 	int	(*get_mpath)(struct wiphy *wiphy, struct net_device *dev,
4683 			     u8 *dst, u8 *next_hop, struct mpath_info *pinfo);
4684 	int	(*dump_mpath)(struct wiphy *wiphy, struct net_device *dev,
4685 			      int idx, u8 *dst, u8 *next_hop,
4686 			      struct mpath_info *pinfo);
4687 	int	(*get_mpp)(struct wiphy *wiphy, struct net_device *dev,
4688 			   u8 *dst, u8 *mpp, struct mpath_info *pinfo);
4689 	int	(*dump_mpp)(struct wiphy *wiphy, struct net_device *dev,
4690 			    int idx, u8 *dst, u8 *mpp,
4691 			    struct mpath_info *pinfo);
4692 	int	(*get_mesh_config)(struct wiphy *wiphy,
4693 				struct net_device *dev,
4694 				struct mesh_config *conf);
4695 	int	(*update_mesh_config)(struct wiphy *wiphy,
4696 				      struct net_device *dev, u32 mask,
4697 				      const struct mesh_config *nconf);
4698 	int	(*join_mesh)(struct wiphy *wiphy, struct net_device *dev,
4699 			     const struct mesh_config *conf,
4700 			     const struct mesh_setup *setup);
4701 	int	(*leave_mesh)(struct wiphy *wiphy, struct net_device *dev);
4702 
4703 	int	(*join_ocb)(struct wiphy *wiphy, struct net_device *dev,
4704 			    struct ocb_setup *setup);
4705 	int	(*leave_ocb)(struct wiphy *wiphy, struct net_device *dev);
4706 
4707 	int	(*change_bss)(struct wiphy *wiphy, struct net_device *dev,
4708 			      struct bss_parameters *params);
4709 
4710 	void	(*inform_bss)(struct wiphy *wiphy, struct cfg80211_bss *bss,
4711 			      const struct cfg80211_bss_ies *ies, void *data);
4712 
4713 	int	(*set_txq_params)(struct wiphy *wiphy, struct net_device *dev,
4714 				  struct ieee80211_txq_params *params);
4715 
4716 	int	(*libertas_set_mesh_channel)(struct wiphy *wiphy,
4717 					     struct net_device *dev,
4718 					     struct ieee80211_channel *chan);
4719 
4720 	int	(*set_monitor_channel)(struct wiphy *wiphy,
4721 				       struct net_device *dev,
4722 				       struct cfg80211_chan_def *chandef);
4723 
4724 	int	(*scan)(struct wiphy *wiphy,
4725 			struct cfg80211_scan_request *request);
4726 	void	(*abort_scan)(struct wiphy *wiphy, struct wireless_dev *wdev);
4727 
4728 	int	(*auth)(struct wiphy *wiphy, struct net_device *dev,
4729 			struct cfg80211_auth_request *req);
4730 	int	(*assoc)(struct wiphy *wiphy, struct net_device *dev,
4731 			 struct cfg80211_assoc_request *req);
4732 	int	(*deauth)(struct wiphy *wiphy, struct net_device *dev,
4733 			  struct cfg80211_deauth_request *req);
4734 	int	(*disassoc)(struct wiphy *wiphy, struct net_device *dev,
4735 			    struct cfg80211_disassoc_request *req);
4736 
4737 	int	(*connect)(struct wiphy *wiphy, struct net_device *dev,
4738 			   struct cfg80211_connect_params *sme);
4739 	int	(*update_connect_params)(struct wiphy *wiphy,
4740 					 struct net_device *dev,
4741 					 struct cfg80211_connect_params *sme,
4742 					 u32 changed);
4743 	int	(*disconnect)(struct wiphy *wiphy, struct net_device *dev,
4744 			      u16 reason_code);
4745 
4746 	int	(*join_ibss)(struct wiphy *wiphy, struct net_device *dev,
4747 			     struct cfg80211_ibss_params *params);
4748 	int	(*leave_ibss)(struct wiphy *wiphy, struct net_device *dev);
4749 
4750 	int	(*set_mcast_rate)(struct wiphy *wiphy, struct net_device *dev,
4751 				  int rate[NUM_NL80211_BANDS]);
4752 
4753 	int	(*set_wiphy_params)(struct wiphy *wiphy, u32 changed);
4754 
4755 	int	(*set_tx_power)(struct wiphy *wiphy, struct wireless_dev *wdev,
4756 				enum nl80211_tx_power_setting type, int mbm);
4757 	int	(*get_tx_power)(struct wiphy *wiphy, struct wireless_dev *wdev,
4758 				unsigned int link_id, int *dbm);
4759 
4760 	void	(*rfkill_poll)(struct wiphy *wiphy);
4761 
4762 #ifdef CONFIG_NL80211_TESTMODE
4763 	int	(*testmode_cmd)(struct wiphy *wiphy, struct wireless_dev *wdev,
4764 				void *data, int len);
4765 	int	(*testmode_dump)(struct wiphy *wiphy, struct sk_buff *skb,
4766 				 struct netlink_callback *cb,
4767 				 void *data, int len);
4768 #endif
4769 
4770 	int	(*set_bitrate_mask)(struct wiphy *wiphy,
4771 				    struct net_device *dev,
4772 				    unsigned int link_id,
4773 				    const u8 *peer,
4774 				    const struct cfg80211_bitrate_mask *mask);
4775 
4776 	int	(*dump_survey)(struct wiphy *wiphy, struct net_device *netdev,
4777 			int idx, struct survey_info *info);
4778 
4779 	int	(*set_pmksa)(struct wiphy *wiphy, struct net_device *netdev,
4780 			     struct cfg80211_pmksa *pmksa);
4781 	int	(*del_pmksa)(struct wiphy *wiphy, struct net_device *netdev,
4782 			     struct cfg80211_pmksa *pmksa);
4783 	int	(*flush_pmksa)(struct wiphy *wiphy, struct net_device *netdev);
4784 
4785 	int	(*remain_on_channel)(struct wiphy *wiphy,
4786 				     struct wireless_dev *wdev,
4787 				     struct ieee80211_channel *chan,
4788 				     unsigned int duration,
4789 				     u64 *cookie);
4790 	int	(*cancel_remain_on_channel)(struct wiphy *wiphy,
4791 					    struct wireless_dev *wdev,
4792 					    u64 cookie);
4793 
4794 	int	(*mgmt_tx)(struct wiphy *wiphy, struct wireless_dev *wdev,
4795 			   struct cfg80211_mgmt_tx_params *params,
4796 			   u64 *cookie);
4797 	int	(*mgmt_tx_cancel_wait)(struct wiphy *wiphy,
4798 				       struct wireless_dev *wdev,
4799 				       u64 cookie);
4800 
4801 	int	(*set_power_mgmt)(struct wiphy *wiphy, struct net_device *dev,
4802 				  bool enabled, int timeout);
4803 
4804 	int	(*set_cqm_rssi_config)(struct wiphy *wiphy,
4805 				       struct net_device *dev,
4806 				       s32 rssi_thold, u32 rssi_hyst);
4807 
4808 	int	(*set_cqm_rssi_range_config)(struct wiphy *wiphy,
4809 					     struct net_device *dev,
4810 					     s32 rssi_low, s32 rssi_high);
4811 
4812 	int	(*set_cqm_txe_config)(struct wiphy *wiphy,
4813 				      struct net_device *dev,
4814 				      u32 rate, u32 pkts, u32 intvl);
4815 
4816 	void	(*update_mgmt_frame_registrations)(struct wiphy *wiphy,
4817 						   struct wireless_dev *wdev,
4818 						   struct mgmt_frame_regs *upd);
4819 
4820 	int	(*set_antenna)(struct wiphy *wiphy, u32 tx_ant, u32 rx_ant);
4821 	int	(*get_antenna)(struct wiphy *wiphy, u32 *tx_ant, u32 *rx_ant);
4822 
4823 	int	(*sched_scan_start)(struct wiphy *wiphy,
4824 				struct net_device *dev,
4825 				struct cfg80211_sched_scan_request *request);
4826 	int	(*sched_scan_stop)(struct wiphy *wiphy, struct net_device *dev,
4827 				   u64 reqid);
4828 
4829 	int	(*set_rekey_data)(struct wiphy *wiphy, struct net_device *dev,
4830 				  struct cfg80211_gtk_rekey_data *data);
4831 
4832 	int	(*tdls_mgmt)(struct wiphy *wiphy, struct net_device *dev,
4833 			     const u8 *peer, int link_id,
4834 			     u8 action_code, u8 dialog_token, u16 status_code,
4835 			     u32 peer_capability, bool initiator,
4836 			     const u8 *buf, size_t len);
4837 	int	(*tdls_oper)(struct wiphy *wiphy, struct net_device *dev,
4838 			     const u8 *peer, enum nl80211_tdls_operation oper);
4839 
4840 	int	(*probe_client)(struct wiphy *wiphy, struct net_device *dev,
4841 				const u8 *peer, u64 *cookie);
4842 
4843 	int	(*set_noack_map)(struct wiphy *wiphy,
4844 				  struct net_device *dev,
4845 				  u16 noack_map);
4846 
4847 	int	(*get_channel)(struct wiphy *wiphy,
4848 			       struct wireless_dev *wdev,
4849 			       unsigned int link_id,
4850 			       struct cfg80211_chan_def *chandef);
4851 
4852 	int	(*start_p2p_device)(struct wiphy *wiphy,
4853 				    struct wireless_dev *wdev);
4854 	void	(*stop_p2p_device)(struct wiphy *wiphy,
4855 				   struct wireless_dev *wdev);
4856 
4857 	int	(*set_mac_acl)(struct wiphy *wiphy, struct net_device *dev,
4858 			       const struct cfg80211_acl_data *params);
4859 
4860 	int	(*start_radar_detection)(struct wiphy *wiphy,
4861 					 struct net_device *dev,
4862 					 struct cfg80211_chan_def *chandef,
4863 					 u32 cac_time_ms, int link_id);
4864 	void	(*end_cac)(struct wiphy *wiphy,
4865 			   struct net_device *dev, unsigned int link_id);
4866 	int	(*update_ft_ies)(struct wiphy *wiphy, struct net_device *dev,
4867 				 struct cfg80211_update_ft_ies_params *ftie);
4868 	int	(*crit_proto_start)(struct wiphy *wiphy,
4869 				    struct wireless_dev *wdev,
4870 				    enum nl80211_crit_proto_id protocol,
4871 				    u16 duration);
4872 	void	(*crit_proto_stop)(struct wiphy *wiphy,
4873 				   struct wireless_dev *wdev);
4874 	int	(*set_coalesce)(struct wiphy *wiphy,
4875 				struct cfg80211_coalesce *coalesce);
4876 
4877 	int	(*channel_switch)(struct wiphy *wiphy,
4878 				  struct net_device *dev,
4879 				  struct cfg80211_csa_settings *params);
4880 
4881 	int     (*set_qos_map)(struct wiphy *wiphy,
4882 			       struct net_device *dev,
4883 			       struct cfg80211_qos_map *qos_map);
4884 
4885 	int	(*set_ap_chanwidth)(struct wiphy *wiphy, struct net_device *dev,
4886 				    unsigned int link_id,
4887 				    struct cfg80211_chan_def *chandef);
4888 
4889 	int	(*add_tx_ts)(struct wiphy *wiphy, struct net_device *dev,
4890 			     u8 tsid, const u8 *peer, u8 user_prio,
4891 			     u16 admitted_time);
4892 	int	(*del_tx_ts)(struct wiphy *wiphy, struct net_device *dev,
4893 			     u8 tsid, const u8 *peer);
4894 
4895 	int	(*tdls_channel_switch)(struct wiphy *wiphy,
4896 				       struct net_device *dev,
4897 				       const u8 *addr, u8 oper_class,
4898 				       struct cfg80211_chan_def *chandef);
4899 	void	(*tdls_cancel_channel_switch)(struct wiphy *wiphy,
4900 					      struct net_device *dev,
4901 					      const u8 *addr);
4902 	int	(*start_nan)(struct wiphy *wiphy, struct wireless_dev *wdev,
4903 			     struct cfg80211_nan_conf *conf);
4904 	void	(*stop_nan)(struct wiphy *wiphy, struct wireless_dev *wdev);
4905 	int	(*add_nan_func)(struct wiphy *wiphy, struct wireless_dev *wdev,
4906 				struct cfg80211_nan_func *nan_func);
4907 	void	(*del_nan_func)(struct wiphy *wiphy, struct wireless_dev *wdev,
4908 			       u64 cookie);
4909 	int	(*nan_change_conf)(struct wiphy *wiphy,
4910 				   struct wireless_dev *wdev,
4911 				   struct cfg80211_nan_conf *conf,
4912 				   u32 changes);
4913 
4914 	int	(*set_multicast_to_unicast)(struct wiphy *wiphy,
4915 					    struct net_device *dev,
4916 					    const bool enabled);
4917 
4918 	int	(*get_txq_stats)(struct wiphy *wiphy,
4919 				 struct wireless_dev *wdev,
4920 				 struct cfg80211_txq_stats *txqstats);
4921 
4922 	int	(*set_pmk)(struct wiphy *wiphy, struct net_device *dev,
4923 			   const struct cfg80211_pmk_conf *conf);
4924 	int	(*del_pmk)(struct wiphy *wiphy, struct net_device *dev,
4925 			   const u8 *aa);
4926 	int     (*external_auth)(struct wiphy *wiphy, struct net_device *dev,
4927 				 struct cfg80211_external_auth_params *params);
4928 
4929 	int	(*tx_control_port)(struct wiphy *wiphy,
4930 				   struct net_device *dev,
4931 				   const u8 *buf, size_t len,
4932 				   const u8 *dest, const __be16 proto,
4933 				   const bool noencrypt, int link_id,
4934 				   u64 *cookie);
4935 
4936 	int	(*get_ftm_responder_stats)(struct wiphy *wiphy,
4937 				struct net_device *dev,
4938 				struct cfg80211_ftm_responder_stats *ftm_stats);
4939 
4940 	int	(*start_pmsr)(struct wiphy *wiphy, struct wireless_dev *wdev,
4941 			      struct cfg80211_pmsr_request *request);
4942 	void	(*abort_pmsr)(struct wiphy *wiphy, struct wireless_dev *wdev,
4943 			      struct cfg80211_pmsr_request *request);
4944 	int	(*update_owe_info)(struct wiphy *wiphy, struct net_device *dev,
4945 				   struct cfg80211_update_owe_info *owe_info);
4946 	int	(*probe_mesh_link)(struct wiphy *wiphy, struct net_device *dev,
4947 				   const u8 *buf, size_t len);
4948 	int     (*set_tid_config)(struct wiphy *wiphy, struct net_device *dev,
4949 				  struct cfg80211_tid_config *tid_conf);
4950 	int	(*reset_tid_config)(struct wiphy *wiphy, struct net_device *dev,
4951 				    const u8 *peer, u8 tids);
4952 	int	(*set_sar_specs)(struct wiphy *wiphy,
4953 				 struct cfg80211_sar_specs *sar);
4954 	int	(*color_change)(struct wiphy *wiphy,
4955 				struct net_device *dev,
4956 				struct cfg80211_color_change_settings *params);
4957 	int     (*set_fils_aad)(struct wiphy *wiphy, struct net_device *dev,
4958 				struct cfg80211_fils_aad *fils_aad);
4959 	int	(*set_radar_background)(struct wiphy *wiphy,
4960 					struct cfg80211_chan_def *chandef);
4961 	int	(*add_link_station)(struct wiphy *wiphy, struct net_device *dev,
4962 				    struct link_station_parameters *params);
4963 	int	(*mod_link_station)(struct wiphy *wiphy, struct net_device *dev,
4964 				    struct link_station_parameters *params);
4965 	int	(*del_link_station)(struct wiphy *wiphy, struct net_device *dev,
4966 				    struct link_station_del_parameters *params);
4967 	int	(*set_hw_timestamp)(struct wiphy *wiphy, struct net_device *dev,
4968 				    struct cfg80211_set_hw_timestamp *hwts);
4969 	int	(*set_ttlm)(struct wiphy *wiphy, struct net_device *dev,
4970 			    struct cfg80211_ttlm_params *params);
4971 	u32	(*get_radio_mask)(struct wiphy *wiphy, struct net_device *dev);
4972 	int     (*assoc_ml_reconf)(struct wiphy *wiphy, struct net_device *dev,
4973 				   struct cfg80211_assoc_link *add_links,
4974 				   u16 rem_links);
4975 	int	(*set_epcs)(struct wiphy *wiphy, struct net_device *dev,
4976 			    bool val);
4977 };
4978 
4979 /*
4980  * wireless hardware and networking interfaces structures
4981  * and registration/helper functions
4982  */
4983 
4984 /**
4985  * enum wiphy_flags - wiphy capability flags
4986  *
4987  * @WIPHY_FLAG_SPLIT_SCAN_6GHZ: if set to true, the scan request will be split
4988  *	 into two, first for legacy bands and second for 6 GHz.
4989  * @WIPHY_FLAG_NETNS_OK: if not set, do not allow changing the netns of this
4990  *	wiphy at all
4991  * @WIPHY_FLAG_PS_ON_BY_DEFAULT: if set to true, powersave will be enabled
4992  *	by default -- this flag will be set depending on the kernel's default
4993  *	on wiphy_new(), but can be changed by the driver if it has a good
4994  *	reason to override the default
4995  * @WIPHY_FLAG_4ADDR_AP: supports 4addr mode even on AP (with a single station
4996  *	on a VLAN interface). This flag also serves an extra purpose of
4997  *	supporting 4ADDR AP mode on devices which do not support AP/VLAN iftype.
4998  * @WIPHY_FLAG_4ADDR_STATION: supports 4addr mode even as a station
4999  * @WIPHY_FLAG_CONTROL_PORT_PROTOCOL: This device supports setting the
5000  *	control port protocol ethertype. The device also honours the
5001  *	control_port_no_encrypt flag.
5002  * @WIPHY_FLAG_IBSS_RSN: The device supports IBSS RSN.
5003  * @WIPHY_FLAG_MESH_AUTH: The device supports mesh authentication by routing
5004  *	auth frames to userspace. See @NL80211_MESH_SETUP_USERSPACE_AUTH.
5005  * @WIPHY_FLAG_SUPPORTS_FW_ROAM: The device supports roaming feature in the
5006  *	firmware.
5007  * @WIPHY_FLAG_AP_UAPSD: The device supports uapsd on AP.
5008  * @WIPHY_FLAG_SUPPORTS_TDLS: The device supports TDLS (802.11z) operation.
5009  * @WIPHY_FLAG_TDLS_EXTERNAL_SETUP: The device does not handle TDLS (802.11z)
5010  *	link setup/discovery operations internally. Setup, discovery and
5011  *	teardown packets should be sent through the @NL80211_CMD_TDLS_MGMT
5012  *	command. When this flag is not set, @NL80211_CMD_TDLS_OPER should be
5013  *	used for asking the driver/firmware to perform a TDLS operation.
5014  * @WIPHY_FLAG_HAVE_AP_SME: device integrates AP SME
5015  * @WIPHY_FLAG_REPORTS_OBSS: the device will report beacons from other BSSes
5016  *	when there are virtual interfaces in AP mode by calling
5017  *	cfg80211_report_obss_beacon().
5018  * @WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD: When operating as an AP, the device
5019  *	responds to probe-requests in hardware.
5020  * @WIPHY_FLAG_OFFCHAN_TX: Device supports direct off-channel TX.
5021  * @WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL: Device supports remain-on-channel call.
5022  * @WIPHY_FLAG_SUPPORTS_5_10_MHZ: Device supports 5 MHz and 10 MHz channels.
5023  * @WIPHY_FLAG_HAS_CHANNEL_SWITCH: Device supports channel switch in
5024  *	beaconing mode (AP, IBSS, Mesh, ...).
5025  * @WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK: The device supports bigger kek and kck keys
5026  * @WIPHY_FLAG_SUPPORTS_MLO: This is a temporary flag gating the MLO APIs,
5027  *	in order to not have them reachable in normal drivers, until we have
5028  *	complete feature/interface combinations/etc. advertisement. No driver
5029  *	should set this flag for now.
5030  * @WIPHY_FLAG_SUPPORTS_EXT_KCK_32: The device supports 32-byte KCK keys.
5031  * @WIPHY_FLAG_NOTIFY_REGDOM_BY_DRIVER: The device could handle reg notify for
5032  *	NL80211_REGDOM_SET_BY_DRIVER.
5033  * @WIPHY_FLAG_CHANNEL_CHANGE_ON_BEACON: reg_call_notifier() is called if driver
5034  *	set this flag to update channels on beacon hints.
5035  * @WIPHY_FLAG_SUPPORTS_NSTR_NONPRIMARY: support connection to non-primary link
5036  *	of an NSTR mobile AP MLD.
5037  * @WIPHY_FLAG_DISABLE_WEXT: disable wireless extensions for this device
5038  */
5039 enum wiphy_flags {
5040 	WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK		= BIT(0),
5041 	WIPHY_FLAG_SUPPORTS_MLO			= BIT(1),
5042 	WIPHY_FLAG_SPLIT_SCAN_6GHZ		= BIT(2),
5043 	WIPHY_FLAG_NETNS_OK			= BIT(3),
5044 	WIPHY_FLAG_PS_ON_BY_DEFAULT		= BIT(4),
5045 	WIPHY_FLAG_4ADDR_AP			= BIT(5),
5046 	WIPHY_FLAG_4ADDR_STATION		= BIT(6),
5047 	WIPHY_FLAG_CONTROL_PORT_PROTOCOL	= BIT(7),
5048 	WIPHY_FLAG_IBSS_RSN			= BIT(8),
5049 	WIPHY_FLAG_DISABLE_WEXT			= BIT(9),
5050 	WIPHY_FLAG_MESH_AUTH			= BIT(10),
5051 	WIPHY_FLAG_SUPPORTS_EXT_KCK_32          = BIT(11),
5052 	WIPHY_FLAG_SUPPORTS_NSTR_NONPRIMARY	= BIT(12),
5053 	WIPHY_FLAG_SUPPORTS_FW_ROAM		= BIT(13),
5054 	WIPHY_FLAG_AP_UAPSD			= BIT(14),
5055 	WIPHY_FLAG_SUPPORTS_TDLS		= BIT(15),
5056 	WIPHY_FLAG_TDLS_EXTERNAL_SETUP		= BIT(16),
5057 	WIPHY_FLAG_HAVE_AP_SME			= BIT(17),
5058 	WIPHY_FLAG_REPORTS_OBSS			= BIT(18),
5059 	WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD	= BIT(19),
5060 	WIPHY_FLAG_OFFCHAN_TX			= BIT(20),
5061 	WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL	= BIT(21),
5062 	WIPHY_FLAG_SUPPORTS_5_10_MHZ		= BIT(22),
5063 	WIPHY_FLAG_HAS_CHANNEL_SWITCH		= BIT(23),
5064 	WIPHY_FLAG_NOTIFY_REGDOM_BY_DRIVER	= BIT(24),
5065 	WIPHY_FLAG_CHANNEL_CHANGE_ON_BEACON     = BIT(25),
5066 };
5067 
5068 /**
5069  * struct ieee80211_iface_limit - limit on certain interface types
5070  * @max: maximum number of interfaces of these types
5071  * @types: interface types (bits)
5072  */
5073 struct ieee80211_iface_limit {
5074 	u16 max;
5075 	u16 types;
5076 };
5077 
5078 /**
5079  * struct ieee80211_iface_combination - possible interface combination
5080  *
5081  * With this structure the driver can describe which interface
5082  * combinations it supports concurrently. When set in a struct wiphy_radio,
5083  * the combinations refer to combinations of interfaces currently active on
5084  * that radio.
5085  *
5086  * Examples:
5087  *
5088  * 1. Allow #STA <= 1, #AP <= 1, matching BI, channels = 1, 2 total:
5089  *
5090  *    .. code-block:: c
5091  *
5092  *	struct ieee80211_iface_limit limits1[] = {
5093  *		{ .max = 1, .types = BIT(NL80211_IFTYPE_STATION), },
5094  *		{ .max = 1, .types = BIT(NL80211_IFTYPE_AP), },
5095  *	};
5096  *	struct ieee80211_iface_combination combination1 = {
5097  *		.limits = limits1,
5098  *		.n_limits = ARRAY_SIZE(limits1),
5099  *		.max_interfaces = 2,
5100  *		.beacon_int_infra_match = true,
5101  *	};
5102  *
5103  *
5104  * 2. Allow #{AP, P2P-GO} <= 8, channels = 1, 8 total:
5105  *
5106  *    .. code-block:: c
5107  *
5108  *	struct ieee80211_iface_limit limits2[] = {
5109  *		{ .max = 8, .types = BIT(NL80211_IFTYPE_AP) |
5110  *				     BIT(NL80211_IFTYPE_P2P_GO), },
5111  *	};
5112  *	struct ieee80211_iface_combination combination2 = {
5113  *		.limits = limits2,
5114  *		.n_limits = ARRAY_SIZE(limits2),
5115  *		.max_interfaces = 8,
5116  *		.num_different_channels = 1,
5117  *	};
5118  *
5119  *
5120  * 3. Allow #STA <= 1, #{P2P-client,P2P-GO} <= 3 on two channels, 4 total.
5121  *
5122  *    This allows for an infrastructure connection and three P2P connections.
5123  *
5124  *    .. code-block:: c
5125  *
5126  *	struct ieee80211_iface_limit limits3[] = {
5127  *		{ .max = 1, .types = BIT(NL80211_IFTYPE_STATION), },
5128  *		{ .max = 3, .types = BIT(NL80211_IFTYPE_P2P_GO) |
5129  *				     BIT(NL80211_IFTYPE_P2P_CLIENT), },
5130  *	};
5131  *	struct ieee80211_iface_combination combination3 = {
5132  *		.limits = limits3,
5133  *		.n_limits = ARRAY_SIZE(limits3),
5134  *		.max_interfaces = 4,
5135  *		.num_different_channels = 2,
5136  *	};
5137  *
5138  */
5139 struct ieee80211_iface_combination {
5140 	/**
5141 	 * @limits:
5142 	 * limits for the given interface types
5143 	 */
5144 	const struct ieee80211_iface_limit *limits;
5145 
5146 	/**
5147 	 * @num_different_channels:
5148 	 * can use up to this many different channels
5149 	 */
5150 	u32 num_different_channels;
5151 
5152 	/**
5153 	 * @max_interfaces:
5154 	 * maximum number of interfaces in total allowed in this group
5155 	 */
5156 	u16 max_interfaces;
5157 
5158 	/**
5159 	 * @n_limits:
5160 	 * number of limitations
5161 	 */
5162 	u8 n_limits;
5163 
5164 	/**
5165 	 * @beacon_int_infra_match:
5166 	 * In this combination, the beacon intervals between infrastructure
5167 	 * and AP types must match. This is required only in special cases.
5168 	 */
5169 	bool beacon_int_infra_match;
5170 
5171 	/**
5172 	 * @radar_detect_widths:
5173 	 * bitmap of channel widths supported for radar detection
5174 	 */
5175 	u8 radar_detect_widths;
5176 
5177 	/**
5178 	 * @radar_detect_regions:
5179 	 * bitmap of regions supported for radar detection
5180 	 */
5181 	u8 radar_detect_regions;
5182 
5183 	/**
5184 	 * @beacon_int_min_gcd:
5185 	 * This interface combination supports different beacon intervals.
5186 	 *
5187 	 * = 0
5188 	 *   all beacon intervals for different interface must be same.
5189 	 * > 0
5190 	 *   any beacon interval for the interface part of this combination AND
5191 	 *   GCD of all beacon intervals from beaconing interfaces of this
5192 	 *   combination must be greater or equal to this value.
5193 	 */
5194 	u32 beacon_int_min_gcd;
5195 };
5196 
5197 struct ieee80211_txrx_stypes {
5198 	u16 tx, rx;
5199 };
5200 
5201 /**
5202  * enum wiphy_wowlan_support_flags - WoWLAN support flags
5203  * @WIPHY_WOWLAN_ANY: supports wakeup for the special "any"
5204  *	trigger that keeps the device operating as-is and
5205  *	wakes up the host on any activity, for example a
5206  *	received packet that passed filtering; note that the
5207  *	packet should be preserved in that case
5208  * @WIPHY_WOWLAN_MAGIC_PKT: supports wakeup on magic packet
5209  *	(see nl80211.h)
5210  * @WIPHY_WOWLAN_DISCONNECT: supports wakeup on disconnect
5211  * @WIPHY_WOWLAN_SUPPORTS_GTK_REKEY: supports GTK rekeying while asleep
5212  * @WIPHY_WOWLAN_GTK_REKEY_FAILURE: supports wakeup on GTK rekey failure
5213  * @WIPHY_WOWLAN_EAP_IDENTITY_REQ: supports wakeup on EAP identity request
5214  * @WIPHY_WOWLAN_4WAY_HANDSHAKE: supports wakeup on 4-way handshake failure
5215  * @WIPHY_WOWLAN_RFKILL_RELEASE: supports wakeup on RF-kill release
5216  * @WIPHY_WOWLAN_NET_DETECT: supports wakeup on network detection
5217  */
5218 enum wiphy_wowlan_support_flags {
5219 	WIPHY_WOWLAN_ANY		= BIT(0),
5220 	WIPHY_WOWLAN_MAGIC_PKT		= BIT(1),
5221 	WIPHY_WOWLAN_DISCONNECT		= BIT(2),
5222 	WIPHY_WOWLAN_SUPPORTS_GTK_REKEY	= BIT(3),
5223 	WIPHY_WOWLAN_GTK_REKEY_FAILURE	= BIT(4),
5224 	WIPHY_WOWLAN_EAP_IDENTITY_REQ	= BIT(5),
5225 	WIPHY_WOWLAN_4WAY_HANDSHAKE	= BIT(6),
5226 	WIPHY_WOWLAN_RFKILL_RELEASE	= BIT(7),
5227 	WIPHY_WOWLAN_NET_DETECT		= BIT(8),
5228 };
5229 
5230 struct wiphy_wowlan_tcp_support {
5231 	const struct nl80211_wowlan_tcp_data_token_feature *tok;
5232 	u32 data_payload_max;
5233 	u32 data_interval_max;
5234 	u32 wake_payload_max;
5235 	bool seq;
5236 };
5237 
5238 /**
5239  * struct wiphy_wowlan_support - WoWLAN support data
5240  * @flags: see &enum wiphy_wowlan_support_flags
5241  * @n_patterns: number of supported wakeup patterns
5242  *	(see nl80211.h for the pattern definition)
5243  * @pattern_max_len: maximum length of each pattern
5244  * @pattern_min_len: minimum length of each pattern
5245  * @max_pkt_offset: maximum Rx packet offset
5246  * @max_nd_match_sets: maximum number of matchsets for net-detect,
5247  *	similar, but not necessarily identical, to max_match_sets for
5248  *	scheduled scans.
5249  *	See &struct cfg80211_sched_scan_request.@match_sets for more
5250  *	details.
5251  * @tcp: TCP wakeup support information
5252  */
5253 struct wiphy_wowlan_support {
5254 	u32 flags;
5255 	int n_patterns;
5256 	int pattern_max_len;
5257 	int pattern_min_len;
5258 	int max_pkt_offset;
5259 	int max_nd_match_sets;
5260 	const struct wiphy_wowlan_tcp_support *tcp;
5261 };
5262 
5263 /**
5264  * struct wiphy_coalesce_support - coalesce support data
5265  * @n_rules: maximum number of coalesce rules
5266  * @max_delay: maximum supported coalescing delay in msecs
5267  * @n_patterns: number of supported patterns in a rule
5268  *	(see nl80211.h for the pattern definition)
5269  * @pattern_max_len: maximum length of each pattern
5270  * @pattern_min_len: minimum length of each pattern
5271  * @max_pkt_offset: maximum Rx packet offset
5272  */
5273 struct wiphy_coalesce_support {
5274 	int n_rules;
5275 	int max_delay;
5276 	int n_patterns;
5277 	int pattern_max_len;
5278 	int pattern_min_len;
5279 	int max_pkt_offset;
5280 };
5281 
5282 /**
5283  * enum wiphy_vendor_command_flags - validation flags for vendor commands
5284  * @WIPHY_VENDOR_CMD_NEED_WDEV: vendor command requires wdev
5285  * @WIPHY_VENDOR_CMD_NEED_NETDEV: vendor command requires netdev
5286  * @WIPHY_VENDOR_CMD_NEED_RUNNING: interface/wdev must be up & running
5287  *	(must be combined with %_WDEV or %_NETDEV)
5288  */
5289 enum wiphy_vendor_command_flags {
5290 	WIPHY_VENDOR_CMD_NEED_WDEV = BIT(0),
5291 	WIPHY_VENDOR_CMD_NEED_NETDEV = BIT(1),
5292 	WIPHY_VENDOR_CMD_NEED_RUNNING = BIT(2),
5293 };
5294 
5295 /**
5296  * enum wiphy_opmode_flag - Station's ht/vht operation mode information flags
5297  *
5298  * @STA_OPMODE_MAX_BW_CHANGED: Max Bandwidth changed
5299  * @STA_OPMODE_SMPS_MODE_CHANGED: SMPS mode changed
5300  * @STA_OPMODE_N_SS_CHANGED: max N_SS (number of spatial streams) changed
5301  *
5302  */
5303 enum wiphy_opmode_flag {
5304 	STA_OPMODE_MAX_BW_CHANGED	= BIT(0),
5305 	STA_OPMODE_SMPS_MODE_CHANGED	= BIT(1),
5306 	STA_OPMODE_N_SS_CHANGED		= BIT(2),
5307 };
5308 
5309 /**
5310  * struct sta_opmode_info - Station's ht/vht operation mode information
5311  * @changed: contains value from &enum wiphy_opmode_flag
5312  * @smps_mode: New SMPS mode value from &enum nl80211_smps_mode of a station
5313  * @bw: new max bandwidth value from &enum nl80211_chan_width of a station
5314  * @rx_nss: new rx_nss value of a station
5315  */
5316 
5317 struct sta_opmode_info {
5318 	u32 changed;
5319 	enum nl80211_smps_mode smps_mode;
5320 	enum nl80211_chan_width bw;
5321 	u8 rx_nss;
5322 };
5323 
5324 #define VENDOR_CMD_RAW_DATA ((const struct nla_policy *)(long)(-ENODATA))
5325 
5326 /**
5327  * struct wiphy_vendor_command - vendor command definition
5328  * @info: vendor command identifying information, as used in nl80211
5329  * @flags: flags, see &enum wiphy_vendor_command_flags
5330  * @doit: callback for the operation, note that wdev is %NULL if the
5331  *	flags didn't ask for a wdev and non-%NULL otherwise; the data
5332  *	pointer may be %NULL if userspace provided no data at all
5333  * @dumpit: dump callback, for transferring bigger/multiple items. The
5334  *	@storage points to cb->args[5], ie. is preserved over the multiple
5335  *	dumpit calls.
5336  * @policy: policy pointer for attributes within %NL80211_ATTR_VENDOR_DATA.
5337  *	Set this to %VENDOR_CMD_RAW_DATA if no policy can be given and the
5338  *	attribute is just raw data (e.g. a firmware command).
5339  * @maxattr: highest attribute number in policy
5340  * It's recommended to not have the same sub command with both @doit and
5341  * @dumpit, so that userspace can assume certain ones are get and others
5342  * are used with dump requests.
5343  */
5344 struct wiphy_vendor_command {
5345 	struct nl80211_vendor_cmd_info info;
5346 	u32 flags;
5347 	int (*doit)(struct wiphy *wiphy, struct wireless_dev *wdev,
5348 		    const void *data, int data_len);
5349 	int (*dumpit)(struct wiphy *wiphy, struct wireless_dev *wdev,
5350 		      struct sk_buff *skb, const void *data, int data_len,
5351 		      unsigned long *storage);
5352 	const struct nla_policy *policy;
5353 	unsigned int maxattr;
5354 };
5355 
5356 /**
5357  * struct wiphy_iftype_ext_capab - extended capabilities per interface type
5358  * @iftype: interface type
5359  * @extended_capabilities: extended capabilities supported by the driver,
5360  *	additional capabilities might be supported by userspace; these are the
5361  *	802.11 extended capabilities ("Extended Capabilities element") and are
5362  *	in the same format as in the information element. See IEEE Std
5363  *	802.11-2012 8.4.2.29 for the defined fields.
5364  * @extended_capabilities_mask: mask of the valid values
5365  * @extended_capabilities_len: length of the extended capabilities
5366  * @eml_capabilities: EML capabilities (for MLO)
5367  * @mld_capa_and_ops: MLD capabilities and operations (for MLO)
5368  */
5369 struct wiphy_iftype_ext_capab {
5370 	enum nl80211_iftype iftype;
5371 	const u8 *extended_capabilities;
5372 	const u8 *extended_capabilities_mask;
5373 	u8 extended_capabilities_len;
5374 	u16 eml_capabilities;
5375 	u16 mld_capa_and_ops;
5376 };
5377 
5378 /**
5379  * cfg80211_get_iftype_ext_capa - lookup interface type extended capability
5380  * @wiphy: the wiphy to look up from
5381  * @type: the interface type to look up
5382  *
5383  * Return: The extended capability for the given interface @type, may be %NULL
5384  */
5385 const struct wiphy_iftype_ext_capab *
5386 cfg80211_get_iftype_ext_capa(struct wiphy *wiphy, enum nl80211_iftype type);
5387 
5388 /**
5389  * struct cfg80211_pmsr_capabilities - cfg80211 peer measurement capabilities
5390  * @max_peers: maximum number of peers in a single measurement
5391  * @report_ap_tsf: can report assoc AP's TSF for radio resource measurement
5392  * @randomize_mac_addr: can randomize MAC address for measurement
5393  * @ftm: FTM measurement data
5394  * @ftm.supported: FTM measurement is supported
5395  * @ftm.asap: ASAP-mode is supported
5396  * @ftm.non_asap: non-ASAP-mode is supported
5397  * @ftm.request_lci: can request LCI data
5398  * @ftm.request_civicloc: can request civic location data
5399  * @ftm.preambles: bitmap of preambles supported (&enum nl80211_preamble)
5400  * @ftm.bandwidths: bitmap of bandwidths supported (&enum nl80211_chan_width)
5401  * @ftm.max_bursts_exponent: maximum burst exponent supported
5402  *	(set to -1 if not limited; note that setting this will necessarily
5403  *	forbid using the value 15 to let the responder pick)
5404  * @ftm.max_ftms_per_burst: maximum FTMs per burst supported (set to 0 if
5405  *	not limited)
5406  * @ftm.trigger_based: trigger based ranging measurement is supported
5407  * @ftm.non_trigger_based: non trigger based ranging measurement is supported
5408  */
5409 struct cfg80211_pmsr_capabilities {
5410 	unsigned int max_peers;
5411 	u8 report_ap_tsf:1,
5412 	   randomize_mac_addr:1;
5413 
5414 	struct {
5415 		u32 preambles;
5416 		u32 bandwidths;
5417 		s8 max_bursts_exponent;
5418 		u8 max_ftms_per_burst;
5419 		u8 supported:1,
5420 		   asap:1,
5421 		   non_asap:1,
5422 		   request_lci:1,
5423 		   request_civicloc:1,
5424 		   trigger_based:1,
5425 		   non_trigger_based:1;
5426 	} ftm;
5427 };
5428 
5429 /**
5430  * struct wiphy_iftype_akm_suites - This structure encapsulates supported akm
5431  * suites for interface types defined in @iftypes_mask. Each type in the
5432  * @iftypes_mask must be unique across all instances of iftype_akm_suites.
5433  *
5434  * @iftypes_mask: bitmask of interfaces types
5435  * @akm_suites: points to an array of supported akm suites
5436  * @n_akm_suites: number of supported AKM suites
5437  */
5438 struct wiphy_iftype_akm_suites {
5439 	u16 iftypes_mask;
5440 	const u32 *akm_suites;
5441 	int n_akm_suites;
5442 };
5443 
5444 /**
5445  * struct wiphy_radio_freq_range - wiphy frequency range
5446  * @start_freq:  start range edge frequency (kHz)
5447  * @end_freq:    end range edge frequency (kHz)
5448  */
5449 struct wiphy_radio_freq_range {
5450 	u32 start_freq;
5451 	u32 end_freq;
5452 };
5453 
5454 
5455 /**
5456  * struct wiphy_radio - physical radio of a wiphy
5457  * This structure describes a physical radio belonging to a wiphy.
5458  * It is used to describe concurrent-channel capabilities. Only one channel
5459  * can be active on the radio described by struct wiphy_radio.
5460  *
5461  * @freq_range: frequency range that the radio can operate on.
5462  * @n_freq_range: number of elements in @freq_range
5463  *
5464  * @iface_combinations: Valid interface combinations array, should not
5465  *	list single interface types.
5466  * @n_iface_combinations: number of entries in @iface_combinations array.
5467  *
5468  * @antenna_mask: bitmask of antennas connected to this radio.
5469  */
5470 struct wiphy_radio {
5471 	const struct wiphy_radio_freq_range *freq_range;
5472 	int n_freq_range;
5473 
5474 	const struct ieee80211_iface_combination *iface_combinations;
5475 	int n_iface_combinations;
5476 
5477 	u32 antenna_mask;
5478 };
5479 
5480 #define CFG80211_HW_TIMESTAMP_ALL_PEERS	0xffff
5481 
5482 /**
5483  * struct wiphy - wireless hardware description
5484  * @mtx: mutex for the data (structures) of this device
5485  * @reg_notifier: the driver's regulatory notification callback,
5486  *	note that if your driver uses wiphy_apply_custom_regulatory()
5487  *	the reg_notifier's request can be passed as NULL
5488  * @regd: the driver's regulatory domain, if one was requested via
5489  *	the regulatory_hint() API. This can be used by the driver
5490  *	on the reg_notifier() if it chooses to ignore future
5491  *	regulatory domain changes caused by other drivers.
5492  * @signal_type: signal type reported in &struct cfg80211_bss.
5493  * @cipher_suites: supported cipher suites
5494  * @n_cipher_suites: number of supported cipher suites
5495  * @akm_suites: supported AKM suites. These are the default AKMs supported if
5496  *	the supported AKMs not advertized for a specific interface type in
5497  *	iftype_akm_suites.
5498  * @n_akm_suites: number of supported AKM suites
5499  * @iftype_akm_suites: array of supported akm suites info per interface type.
5500  *	Note that the bits in @iftypes_mask inside this structure cannot
5501  *	overlap (i.e. only one occurrence of each type is allowed across all
5502  *	instances of iftype_akm_suites).
5503  * @num_iftype_akm_suites: number of interface types for which supported akm
5504  *	suites are specified separately.
5505  * @retry_short: Retry limit for short frames (dot11ShortRetryLimit)
5506  * @retry_long: Retry limit for long frames (dot11LongRetryLimit)
5507  * @frag_threshold: Fragmentation threshold (dot11FragmentationThreshold);
5508  *	-1 = fragmentation disabled, only odd values >= 256 used
5509  * @rts_threshold: RTS threshold (dot11RTSThreshold); -1 = RTS/CTS disabled
5510  * @_net: the network namespace this wiphy currently lives in
5511  * @perm_addr: permanent MAC address of this device
5512  * @addr_mask: If the device supports multiple MAC addresses by masking,
5513  *	set this to a mask with variable bits set to 1, e.g. if the last
5514  *	four bits are variable then set it to 00-00-00-00-00-0f. The actual
5515  *	variable bits shall be determined by the interfaces added, with
5516  *	interfaces not matching the mask being rejected to be brought up.
5517  * @n_addresses: number of addresses in @addresses.
5518  * @addresses: If the device has more than one address, set this pointer
5519  *	to a list of addresses (6 bytes each). The first one will be used
5520  *	by default for perm_addr. In this case, the mask should be set to
5521  *	all-zeroes. In this case it is assumed that the device can handle
5522  *	the same number of arbitrary MAC addresses.
5523  * @registered: protects ->resume and ->suspend sysfs callbacks against
5524  *	unregister hardware
5525  * @debugfsdir: debugfs directory used for this wiphy (ieee80211/<wiphyname>).
5526  *	It will be renamed automatically on wiphy renames
5527  * @dev: (virtual) struct device for this wiphy. The item in
5528  *	/sys/class/ieee80211/ points to this. You need use set_wiphy_dev()
5529  *	(see below).
5530  * @wext: wireless extension handlers
5531  * @priv: driver private data (sized according to wiphy_new() parameter)
5532  * @interface_modes: bitmask of interfaces types valid for this wiphy,
5533  *	must be set by driver
5534  * @iface_combinations: Valid interface combinations array, should not
5535  *	list single interface types.
5536  * @n_iface_combinations: number of entries in @iface_combinations array.
5537  * @software_iftypes: bitmask of software interface types, these are not
5538  *	subject to any restrictions since they are purely managed in SW.
5539  * @flags: wiphy flags, see &enum wiphy_flags
5540  * @regulatory_flags: wiphy regulatory flags, see
5541  *	&enum ieee80211_regulatory_flags
5542  * @features: features advertised to nl80211, see &enum nl80211_feature_flags.
5543  * @ext_features: extended features advertised to nl80211, see
5544  *	&enum nl80211_ext_feature_index.
5545  * @bss_priv_size: each BSS struct has private data allocated with it,
5546  *	this variable determines its size
5547  * @max_scan_ssids: maximum number of SSIDs the device can scan for in
5548  *	any given scan
5549  * @max_sched_scan_reqs: maximum number of scheduled scan requests that
5550  *	the device can run concurrently.
5551  * @max_sched_scan_ssids: maximum number of SSIDs the device can scan
5552  *	for in any given scheduled scan
5553  * @max_match_sets: maximum number of match sets the device can handle
5554  *	when performing a scheduled scan, 0 if filtering is not
5555  *	supported.
5556  * @max_scan_ie_len: maximum length of user-controlled IEs device can
5557  *	add to probe request frames transmitted during a scan, must not
5558  *	include fixed IEs like supported rates
5559  * @max_sched_scan_ie_len: same as max_scan_ie_len, but for scheduled
5560  *	scans
5561  * @max_sched_scan_plans: maximum number of scan plans (scan interval and number
5562  *	of iterations) for scheduled scan supported by the device.
5563  * @max_sched_scan_plan_interval: maximum interval (in seconds) for a
5564  *	single scan plan supported by the device.
5565  * @max_sched_scan_plan_iterations: maximum number of iterations for a single
5566  *	scan plan supported by the device.
5567  * @coverage_class: current coverage class
5568  * @fw_version: firmware version for ethtool reporting
5569  * @hw_version: hardware version for ethtool reporting
5570  * @max_num_pmkids: maximum number of PMKIDs supported by device
5571  * @privid: a pointer that drivers can use to identify if an arbitrary
5572  *	wiphy is theirs, e.g. in global notifiers
5573  * @bands: information about bands/channels supported by this device
5574  *
5575  * @mgmt_stypes: bitmasks of frame subtypes that can be subscribed to or
5576  *	transmitted through nl80211, points to an array indexed by interface
5577  *	type
5578  *
5579  * @available_antennas_tx: bitmap of antennas which are available to be
5580  *	configured as TX antennas. Antenna configuration commands will be
5581  *	rejected unless this or @available_antennas_rx is set.
5582  *
5583  * @available_antennas_rx: bitmap of antennas which are available to be
5584  *	configured as RX antennas. Antenna configuration commands will be
5585  *	rejected unless this or @available_antennas_tx is set.
5586  *
5587  * @probe_resp_offload:
5588  *	 Bitmap of supported protocols for probe response offloading.
5589  *	 See &enum nl80211_probe_resp_offload_support_attr. Only valid
5590  *	 when the wiphy flag @WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD is set.
5591  *
5592  * @max_remain_on_channel_duration: Maximum time a remain-on-channel operation
5593  *	may request, if implemented.
5594  *
5595  * @wowlan: WoWLAN support information
5596  * @wowlan_config: current WoWLAN configuration; this should usually not be
5597  *	used since access to it is necessarily racy, use the parameter passed
5598  *	to the suspend() operation instead.
5599  *
5600  * @ap_sme_capa: AP SME capabilities, flags from &enum nl80211_ap_sme_features.
5601  * @ht_capa_mod_mask:  Specify what ht_cap values can be over-ridden.
5602  *	If null, then none can be over-ridden.
5603  * @vht_capa_mod_mask:  Specify what VHT capabilities can be over-ridden.
5604  *	If null, then none can be over-ridden.
5605  *
5606  * @wdev_list: the list of associated (virtual) interfaces; this list must
5607  *	not be modified by the driver, but can be read with RTNL/RCU protection.
5608  *
5609  * @max_acl_mac_addrs: Maximum number of MAC addresses that the device
5610  *	supports for ACL.
5611  *
5612  * @extended_capabilities: extended capabilities supported by the driver,
5613  *	additional capabilities might be supported by userspace; these are
5614  *	the 802.11 extended capabilities ("Extended Capabilities element")
5615  *	and are in the same format as in the information element. See
5616  *	802.11-2012 8.4.2.29 for the defined fields. These are the default
5617  *	extended capabilities to be used if the capabilities are not specified
5618  *	for a specific interface type in iftype_ext_capab.
5619  * @extended_capabilities_mask: mask of the valid values
5620  * @extended_capabilities_len: length of the extended capabilities
5621  * @iftype_ext_capab: array of extended capabilities per interface type
5622  * @num_iftype_ext_capab: number of interface types for which extended
5623  *	capabilities are specified separately.
5624  * @coalesce: packet coalescing support information
5625  *
5626  * @vendor_commands: array of vendor commands supported by the hardware
5627  * @n_vendor_commands: number of vendor commands
5628  * @vendor_events: array of vendor events supported by the hardware
5629  * @n_vendor_events: number of vendor events
5630  *
5631  * @max_ap_assoc_sta: maximum number of associated stations supported in AP mode
5632  *	(including P2P GO) or 0 to indicate no such limit is advertised. The
5633  *	driver is allowed to advertise a theoretical limit that it can reach in
5634  *	some cases, but may not always reach.
5635  *
5636  * @max_num_csa_counters: Number of supported csa_counters in beacons
5637  *	and probe responses.  This value should be set if the driver
5638  *	wishes to limit the number of csa counters. Default (0) means
5639  *	infinite.
5640  * @bss_select_support: bitmask indicating the BSS selection criteria supported
5641  *	by the driver in the .connect() callback. The bit position maps to the
5642  *	attribute indices defined in &enum nl80211_bss_select_attr.
5643  *
5644  * @nan_supported_bands: bands supported by the device in NAN mode, a
5645  *	bitmap of &enum nl80211_band values.  For instance, for
5646  *	NL80211_BAND_2GHZ, bit 0 would be set
5647  *	(i.e. BIT(NL80211_BAND_2GHZ)).
5648  *
5649  * @txq_limit: configuration of internal TX queue frame limit
5650  * @txq_memory_limit: configuration internal TX queue memory limit
5651  * @txq_quantum: configuration of internal TX queue scheduler quantum
5652  *
5653  * @tx_queue_len: allow setting transmit queue len for drivers not using
5654  *	wake_tx_queue
5655  *
5656  * @support_mbssid: can HW support association with nontransmitted AP
5657  * @support_only_he_mbssid: don't parse MBSSID elements if it is not
5658  *	HE AP, in order to avoid compatibility issues.
5659  *	@support_mbssid must be set for this to have any effect.
5660  *
5661  * @pmsr_capa: peer measurement capabilities
5662  *
5663  * @tid_config_support: describes the per-TID config support that the
5664  *	device has
5665  * @tid_config_support.vif: bitmap of attributes (configurations)
5666  *	supported by the driver for each vif
5667  * @tid_config_support.peer: bitmap of attributes (configurations)
5668  *	supported by the driver for each peer
5669  * @tid_config_support.max_retry: maximum supported retry count for
5670  *	long/short retry configuration
5671  *
5672  * @max_data_retry_count: maximum supported per TID retry count for
5673  *	configuration through the %NL80211_TID_CONFIG_ATTR_RETRY_SHORT and
5674  *	%NL80211_TID_CONFIG_ATTR_RETRY_LONG attributes
5675  * @sar_capa: SAR control capabilities
5676  * @rfkill: a pointer to the rfkill structure
5677  *
5678  * @mbssid_max_interfaces: maximum number of interfaces supported by the driver
5679  *	in a multiple BSSID set. This field must be set to a non-zero value
5680  *	by the driver to advertise MBSSID support.
5681  * @ema_max_profile_periodicity: maximum profile periodicity supported by
5682  *	the driver. Setting this field to a non-zero value indicates that the
5683  *	driver supports enhanced multi-BSSID advertisements (EMA AP).
5684  * @max_num_akm_suites: maximum number of AKM suites allowed for
5685  *	configuration through %NL80211_CMD_CONNECT, %NL80211_CMD_ASSOCIATE and
5686  *	%NL80211_CMD_START_AP. Set to NL80211_MAX_NR_AKM_SUITES if not set by
5687  *	driver. If set by driver minimum allowed value is
5688  *	NL80211_MAX_NR_AKM_SUITES in order to avoid compatibility issues with
5689  *	legacy userspace and maximum allowed value is
5690  *	CFG80211_MAX_NUM_AKM_SUITES.
5691  *
5692  * @hw_timestamp_max_peers: maximum number of peers that the driver supports
5693  *	enabling HW timestamping for concurrently. Setting this field to a
5694  *	non-zero value indicates that the driver supports HW timestamping.
5695  *	A value of %CFG80211_HW_TIMESTAMP_ALL_PEERS indicates the driver
5696  *	supports enabling HW timestamping for all peers (i.e. no need to
5697  *	specify a mac address).
5698  *
5699  * @radio: radios belonging to this wiphy
5700  * @n_radio: number of radios
5701  */
5702 struct wiphy {
5703 	struct mutex mtx;
5704 
5705 	/* assign these fields before you register the wiphy */
5706 
5707 	u8 perm_addr[ETH_ALEN];
5708 	u8 addr_mask[ETH_ALEN];
5709 
5710 	struct mac_address *addresses;
5711 
5712 	const struct ieee80211_txrx_stypes *mgmt_stypes;
5713 
5714 	const struct ieee80211_iface_combination *iface_combinations;
5715 	int n_iface_combinations;
5716 	u16 software_iftypes;
5717 
5718 	u16 n_addresses;
5719 
5720 	/* Supported interface modes, OR together BIT(NL80211_IFTYPE_...) */
5721 	u16 interface_modes;
5722 
5723 	u16 max_acl_mac_addrs;
5724 
5725 	u32 flags, regulatory_flags, features;
5726 	u8 ext_features[DIV_ROUND_UP(NUM_NL80211_EXT_FEATURES, 8)];
5727 
5728 	u32 ap_sme_capa;
5729 
5730 	enum cfg80211_signal_type signal_type;
5731 
5732 	int bss_priv_size;
5733 	u8 max_scan_ssids;
5734 	u8 max_sched_scan_reqs;
5735 	u8 max_sched_scan_ssids;
5736 	u8 max_match_sets;
5737 	u16 max_scan_ie_len;
5738 	u16 max_sched_scan_ie_len;
5739 	u32 max_sched_scan_plans;
5740 	u32 max_sched_scan_plan_interval;
5741 	u32 max_sched_scan_plan_iterations;
5742 
5743 	int n_cipher_suites;
5744 	const u32 *cipher_suites;
5745 
5746 	int n_akm_suites;
5747 	const u32 *akm_suites;
5748 
5749 	const struct wiphy_iftype_akm_suites *iftype_akm_suites;
5750 	unsigned int num_iftype_akm_suites;
5751 
5752 	u8 retry_short;
5753 	u8 retry_long;
5754 	u32 frag_threshold;
5755 	u32 rts_threshold;
5756 	u8 coverage_class;
5757 
5758 	char fw_version[ETHTOOL_FWVERS_LEN];
5759 	u32 hw_version;
5760 
5761 #ifdef CONFIG_PM
5762 	const struct wiphy_wowlan_support *wowlan;
5763 	struct cfg80211_wowlan *wowlan_config;
5764 #endif
5765 
5766 	u16 max_remain_on_channel_duration;
5767 
5768 	u8 max_num_pmkids;
5769 
5770 	u32 available_antennas_tx;
5771 	u32 available_antennas_rx;
5772 
5773 	u32 probe_resp_offload;
5774 
5775 	const u8 *extended_capabilities, *extended_capabilities_mask;
5776 	u8 extended_capabilities_len;
5777 
5778 	const struct wiphy_iftype_ext_capab *iftype_ext_capab;
5779 	unsigned int num_iftype_ext_capab;
5780 
5781 	const void *privid;
5782 
5783 	struct ieee80211_supported_band *bands[NUM_NL80211_BANDS];
5784 
5785 	void (*reg_notifier)(struct wiphy *wiphy,
5786 			     struct regulatory_request *request);
5787 
5788 	/* fields below are read-only, assigned by cfg80211 */
5789 
5790 	const struct ieee80211_regdomain __rcu *regd;
5791 
5792 	struct device dev;
5793 
5794 	bool registered;
5795 
5796 	struct dentry *debugfsdir;
5797 
5798 	const struct ieee80211_ht_cap *ht_capa_mod_mask;
5799 	const struct ieee80211_vht_cap *vht_capa_mod_mask;
5800 
5801 	struct list_head wdev_list;
5802 
5803 	possible_net_t _net;
5804 
5805 #ifdef CONFIG_CFG80211_WEXT
5806 	const struct iw_handler_def *wext;
5807 #endif
5808 
5809 	const struct wiphy_coalesce_support *coalesce;
5810 
5811 	const struct wiphy_vendor_command *vendor_commands;
5812 	const struct nl80211_vendor_cmd_info *vendor_events;
5813 	int n_vendor_commands, n_vendor_events;
5814 
5815 	u16 max_ap_assoc_sta;
5816 
5817 	u8 max_num_csa_counters;
5818 
5819 	u32 bss_select_support;
5820 
5821 	u8 nan_supported_bands;
5822 
5823 	u32 txq_limit;
5824 	u32 txq_memory_limit;
5825 	u32 txq_quantum;
5826 
5827 	unsigned long tx_queue_len;
5828 
5829 	u8 support_mbssid:1,
5830 	   support_only_he_mbssid:1;
5831 
5832 	const struct cfg80211_pmsr_capabilities *pmsr_capa;
5833 
5834 	struct {
5835 		u64 peer, vif;
5836 		u8 max_retry;
5837 	} tid_config_support;
5838 
5839 	u8 max_data_retry_count;
5840 
5841 	const struct cfg80211_sar_capa *sar_capa;
5842 
5843 	struct rfkill *rfkill;
5844 
5845 	u8 mbssid_max_interfaces;
5846 	u8 ema_max_profile_periodicity;
5847 	u16 max_num_akm_suites;
5848 
5849 	u16 hw_timestamp_max_peers;
5850 
5851 	int n_radio;
5852 	const struct wiphy_radio *radio;
5853 
5854 	char priv[] __aligned(NETDEV_ALIGN);
5855 };
5856 
5857 static inline struct net *wiphy_net(struct wiphy *wiphy)
5858 {
5859 	return read_pnet(&wiphy->_net);
5860 }
5861 
5862 static inline void wiphy_net_set(struct wiphy *wiphy, struct net *net)
5863 {
5864 	write_pnet(&wiphy->_net, net);
5865 }
5866 
5867 /**
5868  * wiphy_priv - return priv from wiphy
5869  *
5870  * @wiphy: the wiphy whose priv pointer to return
5871  * Return: The priv of @wiphy.
5872  */
5873 static inline void *wiphy_priv(struct wiphy *wiphy)
5874 {
5875 	BUG_ON(!wiphy);
5876 	return &wiphy->priv;
5877 }
5878 
5879 /**
5880  * priv_to_wiphy - return the wiphy containing the priv
5881  *
5882  * @priv: a pointer previously returned by wiphy_priv
5883  * Return: The wiphy of @priv.
5884  */
5885 static inline struct wiphy *priv_to_wiphy(void *priv)
5886 {
5887 	BUG_ON(!priv);
5888 	return container_of(priv, struct wiphy, priv);
5889 }
5890 
5891 /**
5892  * set_wiphy_dev - set device pointer for wiphy
5893  *
5894  * @wiphy: The wiphy whose device to bind
5895  * @dev: The device to parent it to
5896  */
5897 static inline void set_wiphy_dev(struct wiphy *wiphy, struct device *dev)
5898 {
5899 	wiphy->dev.parent = dev;
5900 }
5901 
5902 /**
5903  * wiphy_dev - get wiphy dev pointer
5904  *
5905  * @wiphy: The wiphy whose device struct to look up
5906  * Return: The dev of @wiphy.
5907  */
5908 static inline struct device *wiphy_dev(struct wiphy *wiphy)
5909 {
5910 	return wiphy->dev.parent;
5911 }
5912 
5913 /**
5914  * wiphy_name - get wiphy name
5915  *
5916  * @wiphy: The wiphy whose name to return
5917  * Return: The name of @wiphy.
5918  */
5919 static inline const char *wiphy_name(const struct wiphy *wiphy)
5920 {
5921 	return dev_name(&wiphy->dev);
5922 }
5923 
5924 /**
5925  * wiphy_new_nm - create a new wiphy for use with cfg80211
5926  *
5927  * @ops: The configuration operations for this device
5928  * @sizeof_priv: The size of the private area to allocate
5929  * @requested_name: Request a particular name.
5930  *	NULL is valid value, and means use the default phy%d naming.
5931  *
5932  * Create a new wiphy and associate the given operations with it.
5933  * @sizeof_priv bytes are allocated for private use.
5934  *
5935  * Return: A pointer to the new wiphy. This pointer must be
5936  * assigned to each netdev's ieee80211_ptr for proper operation.
5937  */
5938 struct wiphy *wiphy_new_nm(const struct cfg80211_ops *ops, int sizeof_priv,
5939 			   const char *requested_name);
5940 
5941 /**
5942  * wiphy_new - create a new wiphy for use with cfg80211
5943  *
5944  * @ops: The configuration operations for this device
5945  * @sizeof_priv: The size of the private area to allocate
5946  *
5947  * Create a new wiphy and associate the given operations with it.
5948  * @sizeof_priv bytes are allocated for private use.
5949  *
5950  * Return: A pointer to the new wiphy. This pointer must be
5951  * assigned to each netdev's ieee80211_ptr for proper operation.
5952  */
5953 static inline struct wiphy *wiphy_new(const struct cfg80211_ops *ops,
5954 				      int sizeof_priv)
5955 {
5956 	return wiphy_new_nm(ops, sizeof_priv, NULL);
5957 }
5958 
5959 /**
5960  * wiphy_register - register a wiphy with cfg80211
5961  *
5962  * @wiphy: The wiphy to register.
5963  *
5964  * Return: A non-negative wiphy index or a negative error code.
5965  */
5966 int wiphy_register(struct wiphy *wiphy);
5967 
5968 /* this is a define for better error reporting (file/line) */
5969 #define lockdep_assert_wiphy(wiphy) lockdep_assert_held(&(wiphy)->mtx)
5970 
5971 /**
5972  * rcu_dereference_wiphy - rcu_dereference with debug checking
5973  * @wiphy: the wiphy to check the locking on
5974  * @p: The pointer to read, prior to dereferencing
5975  *
5976  * Do an rcu_dereference(p), but check caller either holds rcu_read_lock()
5977  * or RTNL. Note: Please prefer wiphy_dereference() or rcu_dereference().
5978  */
5979 #define rcu_dereference_wiphy(wiphy, p)				\
5980         rcu_dereference_check(p, lockdep_is_held(&wiphy->mtx))
5981 
5982 /**
5983  * wiphy_dereference - fetch RCU pointer when updates are prevented by wiphy mtx
5984  * @wiphy: the wiphy to check the locking on
5985  * @p: The pointer to read, prior to dereferencing
5986  *
5987  * Return: the value of the specified RCU-protected pointer, but omit the
5988  * READ_ONCE(), because caller holds the wiphy mutex used for updates.
5989  */
5990 #define wiphy_dereference(wiphy, p)				\
5991         rcu_dereference_protected(p, lockdep_is_held(&wiphy->mtx))
5992 
5993 /**
5994  * get_wiphy_regdom - get custom regdomain for the given wiphy
5995  * @wiphy: the wiphy to get the regdomain from
5996  *
5997  * Context: Requires any of RTNL, wiphy mutex or RCU protection.
5998  *
5999  * Return: pointer to the regulatory domain associated with the wiphy
6000  */
6001 const struct ieee80211_regdomain *get_wiphy_regdom(struct wiphy *wiphy);
6002 
6003 /**
6004  * wiphy_unregister - deregister a wiphy from cfg80211
6005  *
6006  * @wiphy: The wiphy to unregister.
6007  *
6008  * After this call, no more requests can be made with this priv
6009  * pointer, but the call may sleep to wait for an outstanding
6010  * request that is being handled.
6011  */
6012 void wiphy_unregister(struct wiphy *wiphy);
6013 
6014 /**
6015  * wiphy_free - free wiphy
6016  *
6017  * @wiphy: The wiphy to free
6018  */
6019 void wiphy_free(struct wiphy *wiphy);
6020 
6021 /* internal structs */
6022 struct cfg80211_conn;
6023 struct cfg80211_internal_bss;
6024 struct cfg80211_cached_keys;
6025 struct cfg80211_cqm_config;
6026 
6027 /**
6028  * wiphy_lock - lock the wiphy
6029  * @wiphy: the wiphy to lock
6030  *
6031  * This is needed around registering and unregistering netdevs that
6032  * aren't created through cfg80211 calls, since that requires locking
6033  * in cfg80211 when the notifiers is called, but that cannot
6034  * differentiate which way it's called.
6035  *
6036  * It can also be used by drivers for their own purposes.
6037  *
6038  * When cfg80211 ops are called, the wiphy is already locked.
6039  *
6040  * Note that this makes sure that no workers that have been queued
6041  * with wiphy_queue_work() are running.
6042  */
6043 static inline void wiphy_lock(struct wiphy *wiphy)
6044 	__acquires(&wiphy->mtx)
6045 {
6046 	mutex_lock(&wiphy->mtx);
6047 	__acquire(&wiphy->mtx);
6048 }
6049 
6050 /**
6051  * wiphy_unlock - unlock the wiphy again
6052  * @wiphy: the wiphy to unlock
6053  */
6054 static inline void wiphy_unlock(struct wiphy *wiphy)
6055 	__releases(&wiphy->mtx)
6056 {
6057 	__release(&wiphy->mtx);
6058 	mutex_unlock(&wiphy->mtx);
6059 }
6060 
6061 DEFINE_GUARD(wiphy, struct wiphy *,
6062 	     mutex_lock(&_T->mtx),
6063 	     mutex_unlock(&_T->mtx))
6064 
6065 struct wiphy_work;
6066 typedef void (*wiphy_work_func_t)(struct wiphy *, struct wiphy_work *);
6067 
6068 struct wiphy_work {
6069 	struct list_head entry;
6070 	wiphy_work_func_t func;
6071 };
6072 
6073 static inline void wiphy_work_init(struct wiphy_work *work,
6074 				   wiphy_work_func_t func)
6075 {
6076 	INIT_LIST_HEAD(&work->entry);
6077 	work->func = func;
6078 }
6079 
6080 /**
6081  * wiphy_work_queue - queue work for the wiphy
6082  * @wiphy: the wiphy to queue for
6083  * @work: the work item
6084  *
6085  * This is useful for work that must be done asynchronously, and work
6086  * queued here has the special property that the wiphy mutex will be
6087  * held as if wiphy_lock() was called, and that it cannot be running
6088  * after wiphy_lock() was called. Therefore, wiphy_cancel_work() can
6089  * use just cancel_work() instead of cancel_work_sync(), it requires
6090  * being in a section protected by wiphy_lock().
6091  */
6092 void wiphy_work_queue(struct wiphy *wiphy, struct wiphy_work *work);
6093 
6094 /**
6095  * wiphy_work_cancel - cancel previously queued work
6096  * @wiphy: the wiphy, for debug purposes
6097  * @work: the work to cancel
6098  *
6099  * Cancel the work *without* waiting for it, this assumes being
6100  * called under the wiphy mutex acquired by wiphy_lock().
6101  */
6102 void wiphy_work_cancel(struct wiphy *wiphy, struct wiphy_work *work);
6103 
6104 /**
6105  * wiphy_work_flush - flush previously queued work
6106  * @wiphy: the wiphy, for debug purposes
6107  * @work: the work to flush, this can be %NULL to flush all work
6108  *
6109  * Flush the work (i.e. run it if pending). This must be called
6110  * under the wiphy mutex acquired by wiphy_lock().
6111  */
6112 void wiphy_work_flush(struct wiphy *wiphy, struct wiphy_work *work);
6113 
6114 struct wiphy_delayed_work {
6115 	struct wiphy_work work;
6116 	struct wiphy *wiphy;
6117 	struct timer_list timer;
6118 };
6119 
6120 void wiphy_delayed_work_timer(struct timer_list *t);
6121 
6122 static inline void wiphy_delayed_work_init(struct wiphy_delayed_work *dwork,
6123 					   wiphy_work_func_t func)
6124 {
6125 	timer_setup(&dwork->timer, wiphy_delayed_work_timer, 0);
6126 	wiphy_work_init(&dwork->work, func);
6127 }
6128 
6129 /**
6130  * wiphy_delayed_work_queue - queue delayed work for the wiphy
6131  * @wiphy: the wiphy to queue for
6132  * @dwork: the delayable worker
6133  * @delay: number of jiffies to wait before queueing
6134  *
6135  * This is useful for work that must be done asynchronously, and work
6136  * queued here has the special property that the wiphy mutex will be
6137  * held as if wiphy_lock() was called, and that it cannot be running
6138  * after wiphy_lock() was called. Therefore, wiphy_cancel_work() can
6139  * use just cancel_work() instead of cancel_work_sync(), it requires
6140  * being in a section protected by wiphy_lock().
6141  */
6142 void wiphy_delayed_work_queue(struct wiphy *wiphy,
6143 			      struct wiphy_delayed_work *dwork,
6144 			      unsigned long delay);
6145 
6146 /**
6147  * wiphy_delayed_work_cancel - cancel previously queued delayed work
6148  * @wiphy: the wiphy, for debug purposes
6149  * @dwork: the delayed work to cancel
6150  *
6151  * Cancel the work *without* waiting for it, this assumes being
6152  * called under the wiphy mutex acquired by wiphy_lock().
6153  */
6154 void wiphy_delayed_work_cancel(struct wiphy *wiphy,
6155 			       struct wiphy_delayed_work *dwork);
6156 
6157 /**
6158  * wiphy_delayed_work_flush - flush previously queued delayed work
6159  * @wiphy: the wiphy, for debug purposes
6160  * @dwork: the delayed work to flush
6161  *
6162  * Flush the work (i.e. run it if pending). This must be called
6163  * under the wiphy mutex acquired by wiphy_lock().
6164  */
6165 void wiphy_delayed_work_flush(struct wiphy *wiphy,
6166 			      struct wiphy_delayed_work *dwork);
6167 
6168 /**
6169  * wiphy_delayed_work_pending - Find out whether a wiphy delayable
6170  * work item is currently pending.
6171  *
6172  * @wiphy: the wiphy, for debug purposes
6173  * @dwork: the delayed work in question
6174  *
6175  * Return: true if timer is pending, false otherwise
6176  *
6177  * How wiphy_delayed_work_queue() works is by setting a timer which
6178  * when it expires calls wiphy_work_queue() to queue the wiphy work.
6179  * Because wiphy_delayed_work_queue() uses mod_timer(), if it is
6180  * called twice and the second call happens before the first call
6181  * deadline, the work will rescheduled for the second deadline and
6182  * won't run before that.
6183  *
6184  * wiphy_delayed_work_pending() can be used to detect if calling
6185  * wiphy_work_delayed_work_queue() would start a new work schedule
6186  * or delayed a previous one. As seen below it cannot be used to
6187  * detect precisely if the work has finished to execute nor if it
6188  * is currently executing.
6189  *
6190  *      CPU0                                CPU1
6191  * wiphy_delayed_work_queue(wk)
6192  *  mod_timer(wk->timer)
6193  *                                     wiphy_delayed_work_pending(wk) -> true
6194  *
6195  * [...]
6196  * expire_timers(wk->timer)
6197  *  detach_timer(wk->timer)
6198  *                                     wiphy_delayed_work_pending(wk) -> false
6199  *  wk->timer->function()                          |
6200  *   wiphy_work_queue(wk)                          | delayed work pending
6201  *    list_add_tail()                              | returns false but
6202  *    queue_work(cfg80211_wiphy_work)              | wk->func() has not
6203  *                                                 | been run yet
6204  * [...]                                           |
6205  *  cfg80211_wiphy_work()                          |
6206  *   wk->func()                                    V
6207  *
6208  */
6209 bool wiphy_delayed_work_pending(struct wiphy *wiphy,
6210 				struct wiphy_delayed_work *dwork);
6211 
6212 /**
6213  * enum ieee80211_ap_reg_power - regulatory power for an Access Point
6214  *
6215  * @IEEE80211_REG_UNSET_AP: Access Point has no regulatory power mode
6216  * @IEEE80211_REG_LPI_AP: Indoor Access Point
6217  * @IEEE80211_REG_SP_AP: Standard power Access Point
6218  * @IEEE80211_REG_VLP_AP: Very low power Access Point
6219  */
6220 enum ieee80211_ap_reg_power {
6221 	IEEE80211_REG_UNSET_AP,
6222 	IEEE80211_REG_LPI_AP,
6223 	IEEE80211_REG_SP_AP,
6224 	IEEE80211_REG_VLP_AP,
6225 };
6226 
6227 /**
6228  * struct wireless_dev - wireless device state
6229  *
6230  * For netdevs, this structure must be allocated by the driver
6231  * that uses the ieee80211_ptr field in struct net_device (this
6232  * is intentional so it can be allocated along with the netdev.)
6233  * It need not be registered then as netdev registration will
6234  * be intercepted by cfg80211 to see the new wireless device,
6235  * however, drivers must lock the wiphy before registering or
6236  * unregistering netdevs if they pre-create any netdevs (in ops
6237  * called from cfg80211, the wiphy is already locked.)
6238  *
6239  * For non-netdev uses, it must also be allocated by the driver
6240  * in response to the cfg80211 callbacks that require it, as
6241  * there's no netdev registration in that case it may not be
6242  * allocated outside of callback operations that return it.
6243  *
6244  * @wiphy: pointer to hardware description
6245  * @iftype: interface type
6246  * @registered: is this wdev already registered with cfg80211
6247  * @registering: indicates we're doing registration under wiphy lock
6248  *	for the notifier
6249  * @list: (private) Used to collect the interfaces
6250  * @netdev: (private) Used to reference back to the netdev, may be %NULL
6251  * @identifier: (private) Identifier used in nl80211 to identify this
6252  *	wireless device if it has no netdev
6253  * @u: union containing data specific to @iftype
6254  * @connected: indicates if connected or not (STA mode)
6255  * @wext: (private) Used by the internal wireless extensions compat code
6256  * @wext.ibss: (private) IBSS data part of wext handling
6257  * @wext.connect: (private) connection handling data
6258  * @wext.keys: (private) (WEP) key data
6259  * @wext.ie: (private) extra elements for association
6260  * @wext.ie_len: (private) length of extra elements
6261  * @wext.bssid: (private) selected network BSSID
6262  * @wext.ssid: (private) selected network SSID
6263  * @wext.default_key: (private) selected default key index
6264  * @wext.default_mgmt_key: (private) selected default management key index
6265  * @wext.prev_bssid: (private) previous BSSID for reassociation
6266  * @wext.prev_bssid_valid: (private) previous BSSID validity
6267  * @use_4addr: indicates 4addr mode is used on this interface, must be
6268  *	set by driver (if supported) on add_interface BEFORE registering the
6269  *	netdev and may otherwise be used by driver read-only, will be update
6270  *	by cfg80211 on change_interface
6271  * @mgmt_registrations: list of registrations for management frames
6272  * @mgmt_registrations_need_update: mgmt registrations were updated,
6273  *	need to propagate the update to the driver
6274  * @address: The address for this device, valid only if @netdev is %NULL
6275  * @is_running: true if this is a non-netdev device that has been started, e.g.
6276  *	the P2P Device.
6277  * @ps: powersave mode is enabled
6278  * @ps_timeout: dynamic powersave timeout
6279  * @ap_unexpected_nlportid: (private) netlink port ID of application
6280  *	registered for unexpected class 3 frames (AP mode)
6281  * @conn: (private) cfg80211 software SME connection state machine data
6282  * @connect_keys: (private) keys to set after connection is established
6283  * @conn_bss_type: connecting/connected BSS type
6284  * @conn_owner_nlportid: (private) connection owner socket port ID
6285  * @disconnect_wk: (private) auto-disconnect work
6286  * @disconnect_bssid: (private) the BSSID to use for auto-disconnect
6287  * @event_list: (private) list for internal event processing
6288  * @event_lock: (private) lock for event list
6289  * @owner_nlportid: (private) owner socket port ID
6290  * @nl_owner_dead: (private) owner socket went away
6291  * @cqm_rssi_work: (private) CQM RSSI reporting work
6292  * @cqm_config: (private) nl80211 RSSI monitor state
6293  * @pmsr_list: (private) peer measurement requests
6294  * @pmsr_lock: (private) peer measurements requests/results lock
6295  * @pmsr_free_wk: (private) peer measurements cleanup work
6296  * @unprot_beacon_reported: (private) timestamp of last
6297  *	unprotected beacon report
6298  * @links: array of %IEEE80211_MLD_MAX_NUM_LINKS elements containing @addr
6299  *	@ap and @client for each link
6300  * @links.cac_started: true if DFS channel availability check has been
6301  *	started
6302  * @links.cac_start_time: timestamp (jiffies) when the dfs state was
6303  *	entered.
6304  * @links.cac_time_ms: CAC time in ms
6305  * @valid_links: bitmap describing what elements of @links are valid
6306  * @radio_mask: Bitmask of radios that this interface is allowed to operate on.
6307  */
6308 struct wireless_dev {
6309 	struct wiphy *wiphy;
6310 	enum nl80211_iftype iftype;
6311 
6312 	/* the remainder of this struct should be private to cfg80211 */
6313 	struct list_head list;
6314 	struct net_device *netdev;
6315 
6316 	u32 identifier;
6317 
6318 	struct list_head mgmt_registrations;
6319 	u8 mgmt_registrations_need_update:1;
6320 
6321 	bool use_4addr, is_running, registered, registering;
6322 
6323 	u8 address[ETH_ALEN] __aligned(sizeof(u16));
6324 
6325 	/* currently used for IBSS and SME - might be rearranged later */
6326 	struct cfg80211_conn *conn;
6327 	struct cfg80211_cached_keys *connect_keys;
6328 	enum ieee80211_bss_type conn_bss_type;
6329 	u32 conn_owner_nlportid;
6330 
6331 	struct work_struct disconnect_wk;
6332 	u8 disconnect_bssid[ETH_ALEN];
6333 
6334 	struct list_head event_list;
6335 	spinlock_t event_lock;
6336 
6337 	u8 connected:1;
6338 
6339 	bool ps;
6340 	int ps_timeout;
6341 
6342 	u32 ap_unexpected_nlportid;
6343 
6344 	u32 owner_nlportid;
6345 	bool nl_owner_dead;
6346 
6347 #ifdef CONFIG_CFG80211_WEXT
6348 	/* wext data */
6349 	struct {
6350 		struct cfg80211_ibss_params ibss;
6351 		struct cfg80211_connect_params connect;
6352 		struct cfg80211_cached_keys *keys;
6353 		const u8 *ie;
6354 		size_t ie_len;
6355 		u8 bssid[ETH_ALEN];
6356 		u8 prev_bssid[ETH_ALEN];
6357 		u8 ssid[IEEE80211_MAX_SSID_LEN];
6358 		s8 default_key, default_mgmt_key;
6359 		bool prev_bssid_valid;
6360 	} wext;
6361 #endif
6362 
6363 	struct wiphy_work cqm_rssi_work;
6364 	struct cfg80211_cqm_config __rcu *cqm_config;
6365 
6366 	struct list_head pmsr_list;
6367 	spinlock_t pmsr_lock;
6368 	struct work_struct pmsr_free_wk;
6369 
6370 	unsigned long unprot_beacon_reported;
6371 
6372 	union {
6373 		struct {
6374 			u8 connected_addr[ETH_ALEN] __aligned(2);
6375 			u8 ssid[IEEE80211_MAX_SSID_LEN];
6376 			u8 ssid_len;
6377 		} client;
6378 		struct {
6379 			int beacon_interval;
6380 			struct cfg80211_chan_def preset_chandef;
6381 			struct cfg80211_chan_def chandef;
6382 			u8 id[IEEE80211_MAX_MESH_ID_LEN];
6383 			u8 id_len, id_up_len;
6384 		} mesh;
6385 		struct {
6386 			struct cfg80211_chan_def preset_chandef;
6387 			u8 ssid[IEEE80211_MAX_SSID_LEN];
6388 			u8 ssid_len;
6389 		} ap;
6390 		struct {
6391 			struct cfg80211_internal_bss *current_bss;
6392 			struct cfg80211_chan_def chandef;
6393 			int beacon_interval;
6394 			u8 ssid[IEEE80211_MAX_SSID_LEN];
6395 			u8 ssid_len;
6396 		} ibss;
6397 		struct {
6398 			struct cfg80211_chan_def chandef;
6399 		} ocb;
6400 	} u;
6401 
6402 	struct {
6403 		u8 addr[ETH_ALEN] __aligned(2);
6404 		union {
6405 			struct {
6406 				unsigned int beacon_interval;
6407 				struct cfg80211_chan_def chandef;
6408 			} ap;
6409 			struct {
6410 				struct cfg80211_internal_bss *current_bss;
6411 			} client;
6412 		};
6413 
6414 		bool cac_started;
6415 		unsigned long cac_start_time;
6416 		unsigned int cac_time_ms;
6417 	} links[IEEE80211_MLD_MAX_NUM_LINKS];
6418 	u16 valid_links;
6419 
6420 	u32 radio_mask;
6421 };
6422 
6423 static inline const u8 *wdev_address(struct wireless_dev *wdev)
6424 {
6425 	if (wdev->netdev)
6426 		return wdev->netdev->dev_addr;
6427 	return wdev->address;
6428 }
6429 
6430 static inline bool wdev_running(struct wireless_dev *wdev)
6431 {
6432 	if (wdev->netdev)
6433 		return netif_running(wdev->netdev);
6434 	return wdev->is_running;
6435 }
6436 
6437 /**
6438  * wdev_priv - return wiphy priv from wireless_dev
6439  *
6440  * @wdev: The wireless device whose wiphy's priv pointer to return
6441  * Return: The wiphy priv of @wdev.
6442  */
6443 static inline void *wdev_priv(struct wireless_dev *wdev)
6444 {
6445 	BUG_ON(!wdev);
6446 	return wiphy_priv(wdev->wiphy);
6447 }
6448 
6449 /**
6450  * wdev_chandef - return chandef pointer from wireless_dev
6451  * @wdev: the wdev
6452  * @link_id: the link ID for MLO
6453  *
6454  * Return: The chandef depending on the mode, or %NULL.
6455  */
6456 struct cfg80211_chan_def *wdev_chandef(struct wireless_dev *wdev,
6457 				       unsigned int link_id);
6458 
6459 static inline void WARN_INVALID_LINK_ID(struct wireless_dev *wdev,
6460 					unsigned int link_id)
6461 {
6462 	WARN_ON(link_id && !wdev->valid_links);
6463 	WARN_ON(wdev->valid_links &&
6464 		!(wdev->valid_links & BIT(link_id)));
6465 }
6466 
6467 #define for_each_valid_link(link_info, link_id)			\
6468 	for (link_id = 0;					\
6469 	     link_id < ((link_info)->valid_links ?		\
6470 			ARRAY_SIZE((link_info)->links) : 1);	\
6471 	     link_id++)						\
6472 		if (!(link_info)->valid_links ||		\
6473 		    ((link_info)->valid_links & BIT(link_id)))
6474 
6475 /**
6476  * DOC: Utility functions
6477  *
6478  * cfg80211 offers a number of utility functions that can be useful.
6479  */
6480 
6481 /**
6482  * ieee80211_channel_equal - compare two struct ieee80211_channel
6483  *
6484  * @a: 1st struct ieee80211_channel
6485  * @b: 2nd struct ieee80211_channel
6486  * Return: true if center frequency of @a == @b
6487  */
6488 static inline bool
6489 ieee80211_channel_equal(struct ieee80211_channel *a,
6490 			struct ieee80211_channel *b)
6491 {
6492 	return (a->center_freq == b->center_freq &&
6493 		a->freq_offset == b->freq_offset);
6494 }
6495 
6496 /**
6497  * ieee80211_channel_to_khz - convert ieee80211_channel to frequency in KHz
6498  * @chan: struct ieee80211_channel to convert
6499  * Return: The corresponding frequency (in KHz)
6500  */
6501 static inline u32
6502 ieee80211_channel_to_khz(const struct ieee80211_channel *chan)
6503 {
6504 	return MHZ_TO_KHZ(chan->center_freq) + chan->freq_offset;
6505 }
6506 
6507 /**
6508  * ieee80211_s1g_channel_width - get allowed channel width from @chan
6509  *
6510  * Only allowed for band NL80211_BAND_S1GHZ
6511  * @chan: channel
6512  * Return: The allowed channel width for this center_freq
6513  */
6514 enum nl80211_chan_width
6515 ieee80211_s1g_channel_width(const struct ieee80211_channel *chan);
6516 
6517 /**
6518  * ieee80211_channel_to_freq_khz - convert channel number to frequency
6519  * @chan: channel number
6520  * @band: band, necessary due to channel number overlap
6521  * Return: The corresponding frequency (in KHz), or 0 if the conversion failed.
6522  */
6523 u32 ieee80211_channel_to_freq_khz(int chan, enum nl80211_band band);
6524 
6525 /**
6526  * ieee80211_channel_to_frequency - convert channel number to frequency
6527  * @chan: channel number
6528  * @band: band, necessary due to channel number overlap
6529  * Return: The corresponding frequency (in MHz), or 0 if the conversion failed.
6530  */
6531 static inline int
6532 ieee80211_channel_to_frequency(int chan, enum nl80211_band band)
6533 {
6534 	return KHZ_TO_MHZ(ieee80211_channel_to_freq_khz(chan, band));
6535 }
6536 
6537 /**
6538  * ieee80211_freq_khz_to_channel - convert frequency to channel number
6539  * @freq: center frequency in KHz
6540  * Return: The corresponding channel, or 0 if the conversion failed.
6541  */
6542 int ieee80211_freq_khz_to_channel(u32 freq);
6543 
6544 /**
6545  * ieee80211_frequency_to_channel - convert frequency to channel number
6546  * @freq: center frequency in MHz
6547  * Return: The corresponding channel, or 0 if the conversion failed.
6548  */
6549 static inline int
6550 ieee80211_frequency_to_channel(int freq)
6551 {
6552 	return ieee80211_freq_khz_to_channel(MHZ_TO_KHZ(freq));
6553 }
6554 
6555 /**
6556  * ieee80211_get_channel_khz - get channel struct from wiphy for specified
6557  * frequency
6558  * @wiphy: the struct wiphy to get the channel for
6559  * @freq: the center frequency (in KHz) of the channel
6560  * Return: The channel struct from @wiphy at @freq.
6561  */
6562 struct ieee80211_channel *
6563 ieee80211_get_channel_khz(struct wiphy *wiphy, u32 freq);
6564 
6565 /**
6566  * ieee80211_get_channel - get channel struct from wiphy for specified frequency
6567  *
6568  * @wiphy: the struct wiphy to get the channel for
6569  * @freq: the center frequency (in MHz) of the channel
6570  * Return: The channel struct from @wiphy at @freq.
6571  */
6572 static inline struct ieee80211_channel *
6573 ieee80211_get_channel(struct wiphy *wiphy, int freq)
6574 {
6575 	return ieee80211_get_channel_khz(wiphy, MHZ_TO_KHZ(freq));
6576 }
6577 
6578 /**
6579  * cfg80211_channel_is_psc - Check if the channel is a 6 GHz PSC
6580  * @chan: control channel to check
6581  *
6582  * The Preferred Scanning Channels (PSC) are defined in
6583  * Draft IEEE P802.11ax/D5.0, 26.17.2.3.3
6584  *
6585  * Return: %true if channel is a PSC, %false otherwise
6586  */
6587 static inline bool cfg80211_channel_is_psc(struct ieee80211_channel *chan)
6588 {
6589 	if (chan->band != NL80211_BAND_6GHZ)
6590 		return false;
6591 
6592 	return ieee80211_frequency_to_channel(chan->center_freq) % 16 == 5;
6593 }
6594 
6595 /**
6596  * cfg80211_radio_chandef_valid - Check if the radio supports the chandef
6597  *
6598  * @radio: wiphy radio
6599  * @chandef: chandef for current channel
6600  *
6601  * Return: whether or not the given chandef is valid for the given radio
6602  */
6603 bool cfg80211_radio_chandef_valid(const struct wiphy_radio *radio,
6604 				  const struct cfg80211_chan_def *chandef);
6605 
6606 /**
6607  * cfg80211_wdev_channel_allowed - Check if the wdev may use the channel
6608  *
6609  * @wdev: the wireless device
6610  * @chan: channel to check
6611  *
6612  * Return: whether or not the wdev may use the channel
6613  */
6614 bool cfg80211_wdev_channel_allowed(struct wireless_dev *wdev,
6615 				   struct ieee80211_channel *chan);
6616 
6617 /**
6618  * ieee80211_get_response_rate - get basic rate for a given rate
6619  *
6620  * @sband: the band to look for rates in
6621  * @basic_rates: bitmap of basic rates
6622  * @bitrate: the bitrate for which to find the basic rate
6623  *
6624  * Return: The basic rate corresponding to a given bitrate, that
6625  * is the next lower bitrate contained in the basic rate map,
6626  * which is, for this function, given as a bitmap of indices of
6627  * rates in the band's bitrate table.
6628  */
6629 const struct ieee80211_rate *
6630 ieee80211_get_response_rate(struct ieee80211_supported_band *sband,
6631 			    u32 basic_rates, int bitrate);
6632 
6633 /**
6634  * ieee80211_mandatory_rates - get mandatory rates for a given band
6635  * @sband: the band to look for rates in
6636  *
6637  * Return: a bitmap of the mandatory rates for the given band, bits
6638  * are set according to the rate position in the bitrates array.
6639  */
6640 u32 ieee80211_mandatory_rates(struct ieee80211_supported_band *sband);
6641 
6642 /*
6643  * Radiotap parsing functions -- for controlled injection support
6644  *
6645  * Implemented in net/wireless/radiotap.c
6646  * Documentation in Documentation/networking/radiotap-headers.rst
6647  */
6648 
6649 struct radiotap_align_size {
6650 	uint8_t align:4, size:4;
6651 };
6652 
6653 struct ieee80211_radiotap_namespace {
6654 	const struct radiotap_align_size *align_size;
6655 	int n_bits;
6656 	uint32_t oui;
6657 	uint8_t subns;
6658 };
6659 
6660 struct ieee80211_radiotap_vendor_namespaces {
6661 	const struct ieee80211_radiotap_namespace *ns;
6662 	int n_ns;
6663 };
6664 
6665 /**
6666  * struct ieee80211_radiotap_iterator - tracks walk thru present radiotap args
6667  * @this_arg_index: index of current arg, valid after each successful call
6668  *	to ieee80211_radiotap_iterator_next()
6669  * @this_arg: pointer to current radiotap arg; it is valid after each
6670  *	call to ieee80211_radiotap_iterator_next() but also after
6671  *	ieee80211_radiotap_iterator_init() where it will point to
6672  *	the beginning of the actual data portion
6673  * @this_arg_size: length of the current arg, for convenience
6674  * @current_namespace: pointer to the current namespace definition
6675  *	(or internally %NULL if the current namespace is unknown)
6676  * @is_radiotap_ns: indicates whether the current namespace is the default
6677  *	radiotap namespace or not
6678  *
6679  * @_rtheader: pointer to the radiotap header we are walking through
6680  * @_max_length: length of radiotap header in cpu byte ordering
6681  * @_arg_index: next argument index
6682  * @_arg: next argument pointer
6683  * @_next_bitmap: internal pointer to next present u32
6684  * @_bitmap_shifter: internal shifter for curr u32 bitmap, b0 set == arg present
6685  * @_vns: vendor namespace definitions
6686  * @_next_ns_data: beginning of the next namespace's data
6687  * @_reset_on_ext: internal; reset the arg index to 0 when going to the
6688  *	next bitmap word
6689  *
6690  * Describes the radiotap parser state. Fields prefixed with an underscore
6691  * must not be used by users of the parser, only by the parser internally.
6692  */
6693 
6694 struct ieee80211_radiotap_iterator {
6695 	struct ieee80211_radiotap_header *_rtheader;
6696 	const struct ieee80211_radiotap_vendor_namespaces *_vns;
6697 	const struct ieee80211_radiotap_namespace *current_namespace;
6698 
6699 	unsigned char *_arg, *_next_ns_data;
6700 	__le32 *_next_bitmap;
6701 
6702 	unsigned char *this_arg;
6703 	int this_arg_index;
6704 	int this_arg_size;
6705 
6706 	int is_radiotap_ns;
6707 
6708 	int _max_length;
6709 	int _arg_index;
6710 	uint32_t _bitmap_shifter;
6711 	int _reset_on_ext;
6712 };
6713 
6714 int
6715 ieee80211_radiotap_iterator_init(struct ieee80211_radiotap_iterator *iterator,
6716 				 struct ieee80211_radiotap_header *radiotap_header,
6717 				 int max_length,
6718 				 const struct ieee80211_radiotap_vendor_namespaces *vns);
6719 
6720 int
6721 ieee80211_radiotap_iterator_next(struct ieee80211_radiotap_iterator *iterator);
6722 
6723 
6724 extern const unsigned char rfc1042_header[6];
6725 extern const unsigned char bridge_tunnel_header[6];
6726 
6727 /**
6728  * ieee80211_get_hdrlen_from_skb - get header length from data
6729  *
6730  * @skb: the frame
6731  *
6732  * Given an skb with a raw 802.11 header at the data pointer this function
6733  * returns the 802.11 header length.
6734  *
6735  * Return: The 802.11 header length in bytes (not including encryption
6736  * headers). Or 0 if the data in the sk_buff is too short to contain a valid
6737  * 802.11 header.
6738  */
6739 unsigned int ieee80211_get_hdrlen_from_skb(const struct sk_buff *skb);
6740 
6741 /**
6742  * ieee80211_hdrlen - get header length in bytes from frame control
6743  * @fc: frame control field in little-endian format
6744  * Return: The header length in bytes.
6745  */
6746 unsigned int __attribute_const__ ieee80211_hdrlen(__le16 fc);
6747 
6748 /**
6749  * ieee80211_get_mesh_hdrlen - get mesh extension header length
6750  * @meshhdr: the mesh extension header, only the flags field
6751  *	(first byte) will be accessed
6752  * Return: The length of the extension header, which is always at
6753  * least 6 bytes and at most 18 if address 5 and 6 are present.
6754  */
6755 unsigned int ieee80211_get_mesh_hdrlen(struct ieee80211s_hdr *meshhdr);
6756 
6757 /**
6758  * DOC: Data path helpers
6759  *
6760  * In addition to generic utilities, cfg80211 also offers
6761  * functions that help implement the data path for devices
6762  * that do not do the 802.11/802.3 conversion on the device.
6763  */
6764 
6765 /**
6766  * ieee80211_data_to_8023_exthdr - convert an 802.11 data frame to 802.3
6767  * @skb: the 802.11 data frame
6768  * @ehdr: pointer to a &struct ethhdr that will get the header, instead
6769  *	of it being pushed into the SKB
6770  * @addr: the device MAC address
6771  * @iftype: the virtual interface type
6772  * @data_offset: offset of payload after the 802.11 header
6773  * @is_amsdu: true if the 802.11 header is A-MSDU
6774  * Return: 0 on success. Non-zero on error.
6775  */
6776 int ieee80211_data_to_8023_exthdr(struct sk_buff *skb, struct ethhdr *ehdr,
6777 				  const u8 *addr, enum nl80211_iftype iftype,
6778 				  u8 data_offset, bool is_amsdu);
6779 
6780 /**
6781  * ieee80211_data_to_8023 - convert an 802.11 data frame to 802.3
6782  * @skb: the 802.11 data frame
6783  * @addr: the device MAC address
6784  * @iftype: the virtual interface type
6785  * Return: 0 on success. Non-zero on error.
6786  */
6787 static inline int ieee80211_data_to_8023(struct sk_buff *skb, const u8 *addr,
6788 					 enum nl80211_iftype iftype)
6789 {
6790 	return ieee80211_data_to_8023_exthdr(skb, NULL, addr, iftype, 0, false);
6791 }
6792 
6793 /**
6794  * ieee80211_is_valid_amsdu - check if subframe lengths of an A-MSDU are valid
6795  *
6796  * This is used to detect non-standard A-MSDU frames, e.g. the ones generated
6797  * by ath10k and ath11k, where the subframe length includes the length of the
6798  * mesh control field.
6799  *
6800  * @skb: The input A-MSDU frame without any headers.
6801  * @mesh_hdr: the type of mesh header to test
6802  *	0: non-mesh A-MSDU length field
6803  *	1: big-endian mesh A-MSDU length field
6804  *	2: little-endian mesh A-MSDU length field
6805  * Returns: true if subframe header lengths are valid for the @mesh_hdr mode
6806  */
6807 bool ieee80211_is_valid_amsdu(struct sk_buff *skb, u8 mesh_hdr);
6808 
6809 /**
6810  * ieee80211_amsdu_to_8023s - decode an IEEE 802.11n A-MSDU frame
6811  *
6812  * Decode an IEEE 802.11 A-MSDU and convert it to a list of 802.3 frames.
6813  * The @list will be empty if the decode fails. The @skb must be fully
6814  * header-less before being passed in here; it is freed in this function.
6815  *
6816  * @skb: The input A-MSDU frame without any headers.
6817  * @list: The output list of 802.3 frames. It must be allocated and
6818  *	initialized by the caller.
6819  * @addr: The device MAC address.
6820  * @iftype: The device interface type.
6821  * @extra_headroom: The hardware extra headroom for SKBs in the @list.
6822  * @check_da: DA to check in the inner ethernet header, or NULL
6823  * @check_sa: SA to check in the inner ethernet header, or NULL
6824  * @mesh_control: see mesh_hdr in ieee80211_is_valid_amsdu
6825  */
6826 void ieee80211_amsdu_to_8023s(struct sk_buff *skb, struct sk_buff_head *list,
6827 			      const u8 *addr, enum nl80211_iftype iftype,
6828 			      const unsigned int extra_headroom,
6829 			      const u8 *check_da, const u8 *check_sa,
6830 			      u8 mesh_control);
6831 
6832 /**
6833  * ieee80211_get_8023_tunnel_proto - get RFC1042 or bridge tunnel encap protocol
6834  *
6835  * Check for RFC1042 or bridge tunnel header and fetch the encapsulated
6836  * protocol.
6837  *
6838  * @hdr: pointer to the MSDU payload
6839  * @proto: destination pointer to store the protocol
6840  * Return: true if encapsulation was found
6841  */
6842 bool ieee80211_get_8023_tunnel_proto(const void *hdr, __be16 *proto);
6843 
6844 /**
6845  * ieee80211_strip_8023_mesh_hdr - strip mesh header from converted 802.3 frames
6846  *
6847  * Strip the mesh header, which was left in by ieee80211_data_to_8023 as part
6848  * of the MSDU data. Also move any source/destination addresses from the mesh
6849  * header to the ethernet header (if present).
6850  *
6851  * @skb: The 802.3 frame with embedded mesh header
6852  *
6853  * Return: 0 on success. Non-zero on error.
6854  */
6855 int ieee80211_strip_8023_mesh_hdr(struct sk_buff *skb);
6856 
6857 /**
6858  * cfg80211_classify8021d - determine the 802.1p/1d tag for a data frame
6859  * @skb: the data frame
6860  * @qos_map: Interworking QoS mapping or %NULL if not in use
6861  * Return: The 802.1p/1d tag.
6862  */
6863 unsigned int cfg80211_classify8021d(struct sk_buff *skb,
6864 				    struct cfg80211_qos_map *qos_map);
6865 
6866 /**
6867  * cfg80211_find_elem_match - match information element and byte array in data
6868  *
6869  * @eid: element ID
6870  * @ies: data consisting of IEs
6871  * @len: length of data
6872  * @match: byte array to match
6873  * @match_len: number of bytes in the match array
6874  * @match_offset: offset in the IE data where the byte array should match.
6875  *	Note the difference to cfg80211_find_ie_match() which considers
6876  *	the offset to start from the element ID byte, but here we take
6877  *	the data portion instead.
6878  *
6879  * Return: %NULL if the element ID could not be found or if
6880  * the element is invalid (claims to be longer than the given
6881  * data) or if the byte array doesn't match; otherwise return the
6882  * requested element struct.
6883  *
6884  * Note: There are no checks on the element length other than
6885  * having to fit into the given data and being large enough for the
6886  * byte array to match.
6887  */
6888 const struct element *
6889 cfg80211_find_elem_match(u8 eid, const u8 *ies, unsigned int len,
6890 			 const u8 *match, unsigned int match_len,
6891 			 unsigned int match_offset);
6892 
6893 /**
6894  * cfg80211_find_ie_match - match information element and byte array in data
6895  *
6896  * @eid: element ID
6897  * @ies: data consisting of IEs
6898  * @len: length of data
6899  * @match: byte array to match
6900  * @match_len: number of bytes in the match array
6901  * @match_offset: offset in the IE where the byte array should match.
6902  *	If match_len is zero, this must also be set to zero.
6903  *	Otherwise this must be set to 2 or more, because the first
6904  *	byte is the element id, which is already compared to eid, and
6905  *	the second byte is the IE length.
6906  *
6907  * Return: %NULL if the element ID could not be found or if
6908  * the element is invalid (claims to be longer than the given
6909  * data) or if the byte array doesn't match, or a pointer to the first
6910  * byte of the requested element, that is the byte containing the
6911  * element ID.
6912  *
6913  * Note: There are no checks on the element length other than
6914  * having to fit into the given data and being large enough for the
6915  * byte array to match.
6916  */
6917 static inline const u8 *
6918 cfg80211_find_ie_match(u8 eid, const u8 *ies, unsigned int len,
6919 		       const u8 *match, unsigned int match_len,
6920 		       unsigned int match_offset)
6921 {
6922 	/* match_offset can't be smaller than 2, unless match_len is
6923 	 * zero, in which case match_offset must be zero as well.
6924 	 */
6925 	if (WARN_ON((match_len && match_offset < 2) ||
6926 		    (!match_len && match_offset)))
6927 		return NULL;
6928 
6929 	return (const void *)cfg80211_find_elem_match(eid, ies, len,
6930 						      match, match_len,
6931 						      match_offset ?
6932 							match_offset - 2 : 0);
6933 }
6934 
6935 /**
6936  * cfg80211_find_elem - find information element in data
6937  *
6938  * @eid: element ID
6939  * @ies: data consisting of IEs
6940  * @len: length of data
6941  *
6942  * Return: %NULL if the element ID could not be found or if
6943  * the element is invalid (claims to be longer than the given
6944  * data) or if the byte array doesn't match; otherwise return the
6945  * requested element struct.
6946  *
6947  * Note: There are no checks on the element length other than
6948  * having to fit into the given data.
6949  */
6950 static inline const struct element *
6951 cfg80211_find_elem(u8 eid, const u8 *ies, int len)
6952 {
6953 	return cfg80211_find_elem_match(eid, ies, len, NULL, 0, 0);
6954 }
6955 
6956 /**
6957  * cfg80211_find_ie - find information element in data
6958  *
6959  * @eid: element ID
6960  * @ies: data consisting of IEs
6961  * @len: length of data
6962  *
6963  * Return: %NULL if the element ID could not be found or if
6964  * the element is invalid (claims to be longer than the given
6965  * data), or a pointer to the first byte of the requested
6966  * element, that is the byte containing the element ID.
6967  *
6968  * Note: There are no checks on the element length other than
6969  * having to fit into the given data.
6970  */
6971 static inline const u8 *cfg80211_find_ie(u8 eid, const u8 *ies, int len)
6972 {
6973 	return cfg80211_find_ie_match(eid, ies, len, NULL, 0, 0);
6974 }
6975 
6976 /**
6977  * cfg80211_find_ext_elem - find information element with EID Extension in data
6978  *
6979  * @ext_eid: element ID Extension
6980  * @ies: data consisting of IEs
6981  * @len: length of data
6982  *
6983  * Return: %NULL if the extended element could not be found or if
6984  * the element is invalid (claims to be longer than the given
6985  * data) or if the byte array doesn't match; otherwise return the
6986  * requested element struct.
6987  *
6988  * Note: There are no checks on the element length other than
6989  * having to fit into the given data.
6990  */
6991 static inline const struct element *
6992 cfg80211_find_ext_elem(u8 ext_eid, const u8 *ies, int len)
6993 {
6994 	return cfg80211_find_elem_match(WLAN_EID_EXTENSION, ies, len,
6995 					&ext_eid, 1, 0);
6996 }
6997 
6998 /**
6999  * cfg80211_find_ext_ie - find information element with EID Extension in data
7000  *
7001  * @ext_eid: element ID Extension
7002  * @ies: data consisting of IEs
7003  * @len: length of data
7004  *
7005  * Return: %NULL if the extended element ID could not be found or if
7006  * the element is invalid (claims to be longer than the given
7007  * data), or a pointer to the first byte of the requested
7008  * element, that is the byte containing the element ID.
7009  *
7010  * Note: There are no checks on the element length other than
7011  * having to fit into the given data.
7012  */
7013 static inline const u8 *cfg80211_find_ext_ie(u8 ext_eid, const u8 *ies, int len)
7014 {
7015 	return cfg80211_find_ie_match(WLAN_EID_EXTENSION, ies, len,
7016 				      &ext_eid, 1, 2);
7017 }
7018 
7019 /**
7020  * cfg80211_find_vendor_elem - find vendor specific information element in data
7021  *
7022  * @oui: vendor OUI
7023  * @oui_type: vendor-specific OUI type (must be < 0xff), negative means any
7024  * @ies: data consisting of IEs
7025  * @len: length of data
7026  *
7027  * Return: %NULL if the vendor specific element ID could not be found or if the
7028  * element is invalid (claims to be longer than the given data); otherwise
7029  * return the element structure for the requested element.
7030  *
7031  * Note: There are no checks on the element length other than having to fit into
7032  * the given data.
7033  */
7034 const struct element *cfg80211_find_vendor_elem(unsigned int oui, int oui_type,
7035 						const u8 *ies,
7036 						unsigned int len);
7037 
7038 /**
7039  * cfg80211_find_vendor_ie - find vendor specific information element in data
7040  *
7041  * @oui: vendor OUI
7042  * @oui_type: vendor-specific OUI type (must be < 0xff), negative means any
7043  * @ies: data consisting of IEs
7044  * @len: length of data
7045  *
7046  * Return: %NULL if the vendor specific element ID could not be found or if the
7047  * element is invalid (claims to be longer than the given data), or a pointer to
7048  * the first byte of the requested element, that is the byte containing the
7049  * element ID.
7050  *
7051  * Note: There are no checks on the element length other than having to fit into
7052  * the given data.
7053  */
7054 static inline const u8 *
7055 cfg80211_find_vendor_ie(unsigned int oui, int oui_type,
7056 			const u8 *ies, unsigned int len)
7057 {
7058 	return (const void *)cfg80211_find_vendor_elem(oui, oui_type, ies, len);
7059 }
7060 
7061 /**
7062  * enum cfg80211_rnr_iter_ret - reduced neighbor report iteration state
7063  * @RNR_ITER_CONTINUE: continue iterating with the next entry
7064  * @RNR_ITER_BREAK: break iteration and return success
7065  * @RNR_ITER_ERROR: break iteration and return error
7066  */
7067 enum cfg80211_rnr_iter_ret {
7068 	RNR_ITER_CONTINUE,
7069 	RNR_ITER_BREAK,
7070 	RNR_ITER_ERROR,
7071 };
7072 
7073 /**
7074  * cfg80211_iter_rnr - iterate reduced neighbor report entries
7075  * @elems: the frame elements to iterate RNR elements and then
7076  *	their entries in
7077  * @elems_len: length of the elements
7078  * @iter: iteration function, see also &enum cfg80211_rnr_iter_ret
7079  *	for the return value
7080  * @iter_data: additional data passed to the iteration function
7081  * Return: %true on success (after successfully iterating all entries
7082  *	or if the iteration function returned %RNR_ITER_BREAK),
7083  *	%false on error (iteration function returned %RNR_ITER_ERROR
7084  *	or elements were malformed.)
7085  */
7086 bool cfg80211_iter_rnr(const u8 *elems, size_t elems_len,
7087 		       enum cfg80211_rnr_iter_ret
7088 		       (*iter)(void *data, u8 type,
7089 			       const struct ieee80211_neighbor_ap_info *info,
7090 			       const u8 *tbtt_info, u8 tbtt_info_len),
7091 		       void *iter_data);
7092 
7093 /**
7094  * cfg80211_defragment_element - Defrag the given element data into a buffer
7095  *
7096  * @elem: the element to defragment
7097  * @ies: elements where @elem is contained
7098  * @ieslen: length of @ies
7099  * @data: buffer to store element data, or %NULL to just determine size
7100  * @data_len: length of @data, or 0
7101  * @frag_id: the element ID of fragments
7102  *
7103  * Return: length of @data, or -EINVAL on error
7104  *
7105  * Copy out all data from an element that may be fragmented into @data, while
7106  * skipping all headers.
7107  *
7108  * The function uses memmove() internally. It is acceptable to defragment an
7109  * element in-place.
7110  */
7111 ssize_t cfg80211_defragment_element(const struct element *elem, const u8 *ies,
7112 				    size_t ieslen, u8 *data, size_t data_len,
7113 				    u8 frag_id);
7114 
7115 /**
7116  * cfg80211_send_layer2_update - send layer 2 update frame
7117  *
7118  * @dev: network device
7119  * @addr: STA MAC address
7120  *
7121  * Wireless drivers can use this function to update forwarding tables in bridge
7122  * devices upon STA association.
7123  */
7124 void cfg80211_send_layer2_update(struct net_device *dev, const u8 *addr);
7125 
7126 /**
7127  * DOC: Regulatory enforcement infrastructure
7128  *
7129  * TODO
7130  */
7131 
7132 /**
7133  * regulatory_hint - driver hint to the wireless core a regulatory domain
7134  * @wiphy: the wireless device giving the hint (used only for reporting
7135  *	conflicts)
7136  * @alpha2: the ISO/IEC 3166 alpha2 the driver claims its regulatory domain
7137  *	should be in. If @rd is set this should be NULL. Note that if you
7138  *	set this to NULL you should still set rd->alpha2 to some accepted
7139  *	alpha2.
7140  *
7141  * Wireless drivers can use this function to hint to the wireless core
7142  * what it believes should be the current regulatory domain by
7143  * giving it an ISO/IEC 3166 alpha2 country code it knows its regulatory
7144  * domain should be in or by providing a completely build regulatory domain.
7145  * If the driver provides an ISO/IEC 3166 alpha2 userspace will be queried
7146  * for a regulatory domain structure for the respective country.
7147  *
7148  * The wiphy must have been registered to cfg80211 prior to this call.
7149  * For cfg80211 drivers this means you must first use wiphy_register(),
7150  * for mac80211 drivers you must first use ieee80211_register_hw().
7151  *
7152  * Drivers should check the return value, its possible you can get
7153  * an -ENOMEM.
7154  *
7155  * Return: 0 on success. -ENOMEM.
7156  */
7157 int regulatory_hint(struct wiphy *wiphy, const char *alpha2);
7158 
7159 /**
7160  * regulatory_set_wiphy_regd - set regdom info for self managed drivers
7161  * @wiphy: the wireless device we want to process the regulatory domain on
7162  * @rd: the regulatory domain information to use for this wiphy
7163  *
7164  * Set the regulatory domain information for self-managed wiphys, only they
7165  * may use this function. See %REGULATORY_WIPHY_SELF_MANAGED for more
7166  * information.
7167  *
7168  * Return: 0 on success. -EINVAL, -EPERM
7169  */
7170 int regulatory_set_wiphy_regd(struct wiphy *wiphy,
7171 			      struct ieee80211_regdomain *rd);
7172 
7173 /**
7174  * regulatory_set_wiphy_regd_sync - set regdom for self-managed drivers
7175  * @wiphy: the wireless device we want to process the regulatory domain on
7176  * @rd: the regulatory domain information to use for this wiphy
7177  *
7178  * This functions requires the RTNL and the wiphy mutex to be held and
7179  * applies the new regdomain synchronously to this wiphy. For more details
7180  * see regulatory_set_wiphy_regd().
7181  *
7182  * Return: 0 on success. -EINVAL, -EPERM
7183  */
7184 int regulatory_set_wiphy_regd_sync(struct wiphy *wiphy,
7185 				   struct ieee80211_regdomain *rd);
7186 
7187 /**
7188  * wiphy_apply_custom_regulatory - apply a custom driver regulatory domain
7189  * @wiphy: the wireless device we want to process the regulatory domain on
7190  * @regd: the custom regulatory domain to use for this wiphy
7191  *
7192  * Drivers can sometimes have custom regulatory domains which do not apply
7193  * to a specific country. Drivers can use this to apply such custom regulatory
7194  * domains. This routine must be called prior to wiphy registration. The
7195  * custom regulatory domain will be trusted completely and as such previous
7196  * default channel settings will be disregarded. If no rule is found for a
7197  * channel on the regulatory domain the channel will be disabled.
7198  * Drivers using this for a wiphy should also set the wiphy flag
7199  * REGULATORY_CUSTOM_REG or cfg80211 will set it for the wiphy
7200  * that called this helper.
7201  */
7202 void wiphy_apply_custom_regulatory(struct wiphy *wiphy,
7203 				   const struct ieee80211_regdomain *regd);
7204 
7205 /**
7206  * freq_reg_info - get regulatory information for the given frequency
7207  * @wiphy: the wiphy for which we want to process this rule for
7208  * @center_freq: Frequency in KHz for which we want regulatory information for
7209  *
7210  * Use this function to get the regulatory rule for a specific frequency on
7211  * a given wireless device. If the device has a specific regulatory domain
7212  * it wants to follow we respect that unless a country IE has been received
7213  * and processed already.
7214  *
7215  * Return: A valid pointer, or, when an error occurs, for example if no rule
7216  * can be found, the return value is encoded using ERR_PTR(). Use IS_ERR() to
7217  * check and PTR_ERR() to obtain the numeric return value. The numeric return
7218  * value will be -ERANGE if we determine the given center_freq does not even
7219  * have a regulatory rule for a frequency range in the center_freq's band.
7220  * See freq_in_rule_band() for our current definition of a band -- this is
7221  * purely subjective and right now it's 802.11 specific.
7222  */
7223 const struct ieee80211_reg_rule *freq_reg_info(struct wiphy *wiphy,
7224 					       u32 center_freq);
7225 
7226 /**
7227  * reg_initiator_name - map regulatory request initiator enum to name
7228  * @initiator: the regulatory request initiator
7229  *
7230  * You can use this to map the regulatory request initiator enum to a
7231  * proper string representation.
7232  *
7233  * Return: pointer to string representation of the initiator
7234  */
7235 const char *reg_initiator_name(enum nl80211_reg_initiator initiator);
7236 
7237 /**
7238  * regulatory_pre_cac_allowed - check if pre-CAC allowed in the current regdom
7239  * @wiphy: wiphy for which pre-CAC capability is checked.
7240  *
7241  * Pre-CAC is allowed only in some regdomains (notable ETSI).
7242  *
7243  * Return: %true if allowed, %false otherwise
7244  */
7245 bool regulatory_pre_cac_allowed(struct wiphy *wiphy);
7246 
7247 /**
7248  * DOC: Internal regulatory db functions
7249  *
7250  */
7251 
7252 /**
7253  * reg_query_regdb_wmm -  Query internal regulatory db for wmm rule
7254  * Regulatory self-managed driver can use it to proactively
7255  *
7256  * @alpha2: the ISO/IEC 3166 alpha2 wmm rule to be queried.
7257  * @freq: the frequency (in MHz) to be queried.
7258  * @rule: pointer to store the wmm rule from the regulatory db.
7259  *
7260  * Self-managed wireless drivers can use this function to  query
7261  * the internal regulatory database to check whether the given
7262  * ISO/IEC 3166 alpha2 country and freq have wmm rule limitations.
7263  *
7264  * Drivers should check the return value, its possible you can get
7265  * an -ENODATA.
7266  *
7267  * Return: 0 on success. -ENODATA.
7268  */
7269 int reg_query_regdb_wmm(char *alpha2, int freq,
7270 			struct ieee80211_reg_rule *rule);
7271 
7272 /*
7273  * callbacks for asynchronous cfg80211 methods, notification
7274  * functions and BSS handling helpers
7275  */
7276 
7277 /**
7278  * cfg80211_scan_done - notify that scan finished
7279  *
7280  * @request: the corresponding scan request
7281  * @info: information about the completed scan
7282  */
7283 void cfg80211_scan_done(struct cfg80211_scan_request *request,
7284 			struct cfg80211_scan_info *info);
7285 
7286 /**
7287  * cfg80211_sched_scan_results - notify that new scan results are available
7288  *
7289  * @wiphy: the wiphy which got scheduled scan results
7290  * @reqid: identifier for the related scheduled scan request
7291  */
7292 void cfg80211_sched_scan_results(struct wiphy *wiphy, u64 reqid);
7293 
7294 /**
7295  * cfg80211_sched_scan_stopped - notify that the scheduled scan has stopped
7296  *
7297  * @wiphy: the wiphy on which the scheduled scan stopped
7298  * @reqid: identifier for the related scheduled scan request
7299  *
7300  * The driver can call this function to inform cfg80211 that the
7301  * scheduled scan had to be stopped, for whatever reason.  The driver
7302  * is then called back via the sched_scan_stop operation when done.
7303  */
7304 void cfg80211_sched_scan_stopped(struct wiphy *wiphy, u64 reqid);
7305 
7306 /**
7307  * cfg80211_sched_scan_stopped_locked - notify that the scheduled scan has stopped
7308  *
7309  * @wiphy: the wiphy on which the scheduled scan stopped
7310  * @reqid: identifier for the related scheduled scan request
7311  *
7312  * The driver can call this function to inform cfg80211 that the
7313  * scheduled scan had to be stopped, for whatever reason.  The driver
7314  * is then called back via the sched_scan_stop operation when done.
7315  * This function should be called with the wiphy mutex held.
7316  */
7317 void cfg80211_sched_scan_stopped_locked(struct wiphy *wiphy, u64 reqid);
7318 
7319 /**
7320  * cfg80211_inform_bss_frame_data - inform cfg80211 of a received BSS frame
7321  * @wiphy: the wiphy reporting the BSS
7322  * @data: the BSS metadata
7323  * @mgmt: the management frame (probe response or beacon)
7324  * @len: length of the management frame
7325  * @gfp: context flags
7326  *
7327  * This informs cfg80211 that BSS information was found and
7328  * the BSS should be updated/added.
7329  *
7330  * Return: A referenced struct, must be released with cfg80211_put_bss()!
7331  * Or %NULL on error.
7332  */
7333 struct cfg80211_bss * __must_check
7334 cfg80211_inform_bss_frame_data(struct wiphy *wiphy,
7335 			       struct cfg80211_inform_bss *data,
7336 			       struct ieee80211_mgmt *mgmt, size_t len,
7337 			       gfp_t gfp);
7338 
7339 static inline struct cfg80211_bss * __must_check
7340 cfg80211_inform_bss_frame(struct wiphy *wiphy,
7341 			  struct ieee80211_channel *rx_channel,
7342 			  struct ieee80211_mgmt *mgmt, size_t len,
7343 			  s32 signal, gfp_t gfp)
7344 {
7345 	struct cfg80211_inform_bss data = {
7346 		.chan = rx_channel,
7347 		.signal = signal,
7348 	};
7349 
7350 	return cfg80211_inform_bss_frame_data(wiphy, &data, mgmt, len, gfp);
7351 }
7352 
7353 /**
7354  * cfg80211_gen_new_bssid - generate a nontransmitted BSSID for multi-BSSID
7355  * @bssid: transmitter BSSID
7356  * @max_bssid: max BSSID indicator, taken from Multiple BSSID element
7357  * @mbssid_index: BSSID index, taken from Multiple BSSID index element
7358  * @new_bssid: calculated nontransmitted BSSID
7359  */
7360 static inline void cfg80211_gen_new_bssid(const u8 *bssid, u8 max_bssid,
7361 					  u8 mbssid_index, u8 *new_bssid)
7362 {
7363 	u64 bssid_u64 = ether_addr_to_u64(bssid);
7364 	u64 mask = GENMASK_ULL(max_bssid - 1, 0);
7365 	u64 new_bssid_u64;
7366 
7367 	new_bssid_u64 = bssid_u64 & ~mask;
7368 
7369 	new_bssid_u64 |= ((bssid_u64 & mask) + mbssid_index) & mask;
7370 
7371 	u64_to_ether_addr(new_bssid_u64, new_bssid);
7372 }
7373 
7374 /**
7375  * cfg80211_is_element_inherited - returns if element ID should be inherited
7376  * @element: element to check
7377  * @non_inherit_element: non inheritance element
7378  *
7379  * Return: %true if should be inherited, %false otherwise
7380  */
7381 bool cfg80211_is_element_inherited(const struct element *element,
7382 				   const struct element *non_inherit_element);
7383 
7384 /**
7385  * cfg80211_merge_profile - merges a MBSSID profile if it is split between IEs
7386  * @ie: ies
7387  * @ielen: length of IEs
7388  * @mbssid_elem: current MBSSID element
7389  * @sub_elem: current MBSSID subelement (profile)
7390  * @merged_ie: location of the merged profile
7391  * @max_copy_len: max merged profile length
7392  *
7393  * Return: the number of bytes merged
7394  */
7395 size_t cfg80211_merge_profile(const u8 *ie, size_t ielen,
7396 			      const struct element *mbssid_elem,
7397 			      const struct element *sub_elem,
7398 			      u8 *merged_ie, size_t max_copy_len);
7399 
7400 /**
7401  * enum cfg80211_bss_frame_type - frame type that the BSS data came from
7402  * @CFG80211_BSS_FTYPE_UNKNOWN: driver doesn't know whether the data is
7403  *	from a beacon or probe response
7404  * @CFG80211_BSS_FTYPE_BEACON: data comes from a beacon
7405  * @CFG80211_BSS_FTYPE_PRESP: data comes from a probe response
7406  * @CFG80211_BSS_FTYPE_S1G_BEACON: data comes from an S1G beacon
7407  */
7408 enum cfg80211_bss_frame_type {
7409 	CFG80211_BSS_FTYPE_UNKNOWN,
7410 	CFG80211_BSS_FTYPE_BEACON,
7411 	CFG80211_BSS_FTYPE_PRESP,
7412 	CFG80211_BSS_FTYPE_S1G_BEACON,
7413 };
7414 
7415 /**
7416  * cfg80211_get_ies_channel_number - returns the channel number from ies
7417  * @ie: IEs
7418  * @ielen: length of IEs
7419  * @band: enum nl80211_band of the channel
7420  *
7421  * Return: the channel number, or -1 if none could be determined.
7422  */
7423 int cfg80211_get_ies_channel_number(const u8 *ie, size_t ielen,
7424 				    enum nl80211_band band);
7425 
7426 /**
7427  * cfg80211_ssid_eq - compare two SSIDs
7428  * @a: first SSID
7429  * @b: second SSID
7430  *
7431  * Return: %true if SSIDs are equal, %false otherwise.
7432  */
7433 static inline bool
7434 cfg80211_ssid_eq(struct cfg80211_ssid *a, struct cfg80211_ssid *b)
7435 {
7436 	if (WARN_ON(!a || !b))
7437 		return false;
7438 	if (a->ssid_len != b->ssid_len)
7439 		return false;
7440 	return memcmp(a->ssid, b->ssid, a->ssid_len) ? false : true;
7441 }
7442 
7443 /**
7444  * cfg80211_inform_bss_data - inform cfg80211 of a new BSS
7445  *
7446  * @wiphy: the wiphy reporting the BSS
7447  * @data: the BSS metadata
7448  * @ftype: frame type (if known)
7449  * @bssid: the BSSID of the BSS
7450  * @tsf: the TSF sent by the peer in the beacon/probe response (or 0)
7451  * @capability: the capability field sent by the peer
7452  * @beacon_interval: the beacon interval announced by the peer
7453  * @ie: additional IEs sent by the peer
7454  * @ielen: length of the additional IEs
7455  * @gfp: context flags
7456  *
7457  * This informs cfg80211 that BSS information was found and
7458  * the BSS should be updated/added.
7459  *
7460  * Return: A referenced struct, must be released with cfg80211_put_bss()!
7461  * Or %NULL on error.
7462  */
7463 struct cfg80211_bss * __must_check
7464 cfg80211_inform_bss_data(struct wiphy *wiphy,
7465 			 struct cfg80211_inform_bss *data,
7466 			 enum cfg80211_bss_frame_type ftype,
7467 			 const u8 *bssid, u64 tsf, u16 capability,
7468 			 u16 beacon_interval, const u8 *ie, size_t ielen,
7469 			 gfp_t gfp);
7470 
7471 static inline struct cfg80211_bss * __must_check
7472 cfg80211_inform_bss(struct wiphy *wiphy,
7473 		    struct ieee80211_channel *rx_channel,
7474 		    enum cfg80211_bss_frame_type ftype,
7475 		    const u8 *bssid, u64 tsf, u16 capability,
7476 		    u16 beacon_interval, const u8 *ie, size_t ielen,
7477 		    s32 signal, gfp_t gfp)
7478 {
7479 	struct cfg80211_inform_bss data = {
7480 		.chan = rx_channel,
7481 		.signal = signal,
7482 	};
7483 
7484 	return cfg80211_inform_bss_data(wiphy, &data, ftype, bssid, tsf,
7485 					capability, beacon_interval, ie, ielen,
7486 					gfp);
7487 }
7488 
7489 /**
7490  * __cfg80211_get_bss - get a BSS reference
7491  * @wiphy: the wiphy this BSS struct belongs to
7492  * @channel: the channel to search on (or %NULL)
7493  * @bssid: the desired BSSID (or %NULL)
7494  * @ssid: the desired SSID (or %NULL)
7495  * @ssid_len: length of the SSID (or 0)
7496  * @bss_type: type of BSS, see &enum ieee80211_bss_type
7497  * @privacy: privacy filter, see &enum ieee80211_privacy
7498  * @use_for: indicates which use is intended
7499  *
7500  * Return: Reference-counted BSS on success. %NULL on error.
7501  */
7502 struct cfg80211_bss *__cfg80211_get_bss(struct wiphy *wiphy,
7503 					struct ieee80211_channel *channel,
7504 					const u8 *bssid,
7505 					const u8 *ssid, size_t ssid_len,
7506 					enum ieee80211_bss_type bss_type,
7507 					enum ieee80211_privacy privacy,
7508 					u32 use_for);
7509 
7510 /**
7511  * cfg80211_get_bss - get a BSS reference
7512  * @wiphy: the wiphy this BSS struct belongs to
7513  * @channel: the channel to search on (or %NULL)
7514  * @bssid: the desired BSSID (or %NULL)
7515  * @ssid: the desired SSID (or %NULL)
7516  * @ssid_len: length of the SSID (or 0)
7517  * @bss_type: type of BSS, see &enum ieee80211_bss_type
7518  * @privacy: privacy filter, see &enum ieee80211_privacy
7519  *
7520  * This version implies regular usage, %NL80211_BSS_USE_FOR_NORMAL.
7521  *
7522  * Return: Reference-counted BSS on success. %NULL on error.
7523  */
7524 static inline struct cfg80211_bss *
7525 cfg80211_get_bss(struct wiphy *wiphy, struct ieee80211_channel *channel,
7526 		 const u8 *bssid, const u8 *ssid, size_t ssid_len,
7527 		 enum ieee80211_bss_type bss_type,
7528 		 enum ieee80211_privacy privacy)
7529 {
7530 	return __cfg80211_get_bss(wiphy, channel, bssid, ssid, ssid_len,
7531 				  bss_type, privacy,
7532 				  NL80211_BSS_USE_FOR_NORMAL);
7533 }
7534 
7535 static inline struct cfg80211_bss *
7536 cfg80211_get_ibss(struct wiphy *wiphy,
7537 		  struct ieee80211_channel *channel,
7538 		  const u8 *ssid, size_t ssid_len)
7539 {
7540 	return cfg80211_get_bss(wiphy, channel, NULL, ssid, ssid_len,
7541 				IEEE80211_BSS_TYPE_IBSS,
7542 				IEEE80211_PRIVACY_ANY);
7543 }
7544 
7545 /**
7546  * cfg80211_ref_bss - reference BSS struct
7547  * @wiphy: the wiphy this BSS struct belongs to
7548  * @bss: the BSS struct to reference
7549  *
7550  * Increments the refcount of the given BSS struct.
7551  */
7552 void cfg80211_ref_bss(struct wiphy *wiphy, struct cfg80211_bss *bss);
7553 
7554 /**
7555  * cfg80211_put_bss - unref BSS struct
7556  * @wiphy: the wiphy this BSS struct belongs to
7557  * @bss: the BSS struct
7558  *
7559  * Decrements the refcount of the given BSS struct.
7560  */
7561 void cfg80211_put_bss(struct wiphy *wiphy, struct cfg80211_bss *bss);
7562 
7563 /**
7564  * cfg80211_unlink_bss - unlink BSS from internal data structures
7565  * @wiphy: the wiphy
7566  * @bss: the bss to remove
7567  *
7568  * This function removes the given BSS from the internal data structures
7569  * thereby making it no longer show up in scan results etc. Use this
7570  * function when you detect a BSS is gone. Normally BSSes will also time
7571  * out, so it is not necessary to use this function at all.
7572  */
7573 void cfg80211_unlink_bss(struct wiphy *wiphy, struct cfg80211_bss *bss);
7574 
7575 /**
7576  * cfg80211_bss_iter - iterate all BSS entries
7577  *
7578  * This function iterates over the BSS entries associated with the given wiphy
7579  * and calls the callback for the iterated BSS. The iterator function is not
7580  * allowed to call functions that might modify the internal state of the BSS DB.
7581  *
7582  * @wiphy: the wiphy
7583  * @chandef: if given, the iterator function will be called only if the channel
7584  *     of the currently iterated BSS is a subset of the given channel.
7585  * @iter: the iterator function to call
7586  * @iter_data: an argument to the iterator function
7587  */
7588 void cfg80211_bss_iter(struct wiphy *wiphy,
7589 		       struct cfg80211_chan_def *chandef,
7590 		       void (*iter)(struct wiphy *wiphy,
7591 				    struct cfg80211_bss *bss,
7592 				    void *data),
7593 		       void *iter_data);
7594 
7595 /**
7596  * cfg80211_rx_mlme_mgmt - notification of processed MLME management frame
7597  * @dev: network device
7598  * @buf: authentication frame (header + body)
7599  * @len: length of the frame data
7600  *
7601  * This function is called whenever an authentication, disassociation or
7602  * deauthentication frame has been received and processed in station mode.
7603  * After being asked to authenticate via cfg80211_ops::auth() the driver must
7604  * call either this function or cfg80211_auth_timeout().
7605  * After being asked to associate via cfg80211_ops::assoc() the driver must
7606  * call either this function or cfg80211_auth_timeout().
7607  * While connected, the driver must calls this for received and processed
7608  * disassociation and deauthentication frames. If the frame couldn't be used
7609  * because it was unprotected, the driver must call the function
7610  * cfg80211_rx_unprot_mlme_mgmt() instead.
7611  *
7612  * This function may sleep. The caller must hold the corresponding wdev's mutex.
7613  */
7614 void cfg80211_rx_mlme_mgmt(struct net_device *dev, const u8 *buf, size_t len);
7615 
7616 /**
7617  * cfg80211_auth_timeout - notification of timed out authentication
7618  * @dev: network device
7619  * @addr: The MAC address of the device with which the authentication timed out
7620  *
7621  * This function may sleep. The caller must hold the corresponding wdev's
7622  * mutex.
7623  */
7624 void cfg80211_auth_timeout(struct net_device *dev, const u8 *addr);
7625 
7626 /**
7627  * struct cfg80211_rx_assoc_resp_data - association response data
7628  * @buf: (Re)Association Response frame (header + body)
7629  * @len: length of the frame data
7630  * @uapsd_queues: bitmap of queues configured for uapsd. Same format
7631  *	as the AC bitmap in the QoS info field
7632  * @req_ies: information elements from the (Re)Association Request frame
7633  * @req_ies_len: length of req_ies data
7634  * @ap_mld_addr: AP MLD address (in case of MLO)
7635  * @links: per-link information indexed by link ID, use links[0] for
7636  *	non-MLO connections
7637  * @links.bss: the BSS that association was requested with, ownership of the
7638  *      pointer moves to cfg80211 in the call to cfg80211_rx_assoc_resp()
7639  * @links.status: Set this (along with a BSS pointer) for links that
7640  *	were rejected by the AP.
7641  */
7642 struct cfg80211_rx_assoc_resp_data {
7643 	const u8 *buf;
7644 	size_t len;
7645 	const u8 *req_ies;
7646 	size_t req_ies_len;
7647 	int uapsd_queues;
7648 	const u8 *ap_mld_addr;
7649 	struct {
7650 		u8 addr[ETH_ALEN] __aligned(2);
7651 		struct cfg80211_bss *bss;
7652 		u16 status;
7653 	} links[IEEE80211_MLD_MAX_NUM_LINKS];
7654 };
7655 
7656 /**
7657  * cfg80211_rx_assoc_resp - notification of processed association response
7658  * @dev: network device
7659  * @data: association response data, &struct cfg80211_rx_assoc_resp_data
7660  *
7661  * After being asked to associate via cfg80211_ops::assoc() the driver must
7662  * call either this function or cfg80211_auth_timeout().
7663  *
7664  * This function may sleep. The caller must hold the corresponding wdev's mutex.
7665  */
7666 void cfg80211_rx_assoc_resp(struct net_device *dev,
7667 			    const struct cfg80211_rx_assoc_resp_data *data);
7668 
7669 /**
7670  * struct cfg80211_assoc_failure - association failure data
7671  * @ap_mld_addr: AP MLD address, or %NULL
7672  * @bss: list of BSSes, must use entry 0 for non-MLO connections
7673  *	(@ap_mld_addr is %NULL)
7674  * @timeout: indicates the association failed due to timeout, otherwise
7675  *	the association was abandoned for a reason reported through some
7676  *	other API (e.g. deauth RX)
7677  */
7678 struct cfg80211_assoc_failure {
7679 	const u8 *ap_mld_addr;
7680 	struct cfg80211_bss *bss[IEEE80211_MLD_MAX_NUM_LINKS];
7681 	bool timeout;
7682 };
7683 
7684 /**
7685  * cfg80211_assoc_failure - notification of association failure
7686  * @dev: network device
7687  * @data: data describing the association failure
7688  *
7689  * This function may sleep. The caller must hold the corresponding wdev's mutex.
7690  */
7691 void cfg80211_assoc_failure(struct net_device *dev,
7692 			    struct cfg80211_assoc_failure *data);
7693 
7694 /**
7695  * cfg80211_tx_mlme_mgmt - notification of transmitted deauth/disassoc frame
7696  * @dev: network device
7697  * @buf: 802.11 frame (header + body)
7698  * @len: length of the frame data
7699  * @reconnect: immediate reconnect is desired (include the nl80211 attribute)
7700  *
7701  * This function is called whenever deauthentication has been processed in
7702  * station mode. This includes both received deauthentication frames and
7703  * locally generated ones. This function may sleep. The caller must hold the
7704  * corresponding wdev's mutex.
7705  */
7706 void cfg80211_tx_mlme_mgmt(struct net_device *dev, const u8 *buf, size_t len,
7707 			   bool reconnect);
7708 
7709 /**
7710  * cfg80211_rx_unprot_mlme_mgmt - notification of unprotected mlme mgmt frame
7711  * @dev: network device
7712  * @buf: received management frame (header + body)
7713  * @len: length of the frame data
7714  *
7715  * This function is called whenever a received deauthentication or dissassoc
7716  * frame has been dropped in station mode because of MFP being used but the
7717  * frame was not protected. This is also used to notify reception of a Beacon
7718  * frame that was dropped because it did not include a valid MME MIC while
7719  * beacon protection was enabled (BIGTK configured in station mode).
7720  *
7721  * This function may sleep.
7722  */
7723 void cfg80211_rx_unprot_mlme_mgmt(struct net_device *dev,
7724 				  const u8 *buf, size_t len);
7725 
7726 /**
7727  * cfg80211_michael_mic_failure - notification of Michael MIC failure (TKIP)
7728  * @dev: network device
7729  * @addr: The source MAC address of the frame
7730  * @key_type: The key type that the received frame used
7731  * @key_id: Key identifier (0..3). Can be -1 if missing.
7732  * @tsc: The TSC value of the frame that generated the MIC failure (6 octets)
7733  * @gfp: allocation flags
7734  *
7735  * This function is called whenever the local MAC detects a MIC failure in a
7736  * received frame. This matches with MLME-MICHAELMICFAILURE.indication()
7737  * primitive.
7738  */
7739 void cfg80211_michael_mic_failure(struct net_device *dev, const u8 *addr,
7740 				  enum nl80211_key_type key_type, int key_id,
7741 				  const u8 *tsc, gfp_t gfp);
7742 
7743 /**
7744  * cfg80211_ibss_joined - notify cfg80211 that device joined an IBSS
7745  *
7746  * @dev: network device
7747  * @bssid: the BSSID of the IBSS joined
7748  * @channel: the channel of the IBSS joined
7749  * @gfp: allocation flags
7750  *
7751  * This function notifies cfg80211 that the device joined an IBSS or
7752  * switched to a different BSSID. Before this function can be called,
7753  * either a beacon has to have been received from the IBSS, or one of
7754  * the cfg80211_inform_bss{,_frame} functions must have been called
7755  * with the locally generated beacon -- this guarantees that there is
7756  * always a scan result for this IBSS. cfg80211 will handle the rest.
7757  */
7758 void cfg80211_ibss_joined(struct net_device *dev, const u8 *bssid,
7759 			  struct ieee80211_channel *channel, gfp_t gfp);
7760 
7761 /**
7762  * cfg80211_notify_new_peer_candidate - notify cfg80211 of a new mesh peer
7763  * 					candidate
7764  *
7765  * @dev: network device
7766  * @macaddr: the MAC address of the new candidate
7767  * @ie: information elements advertised by the peer candidate
7768  * @ie_len: length of the information elements buffer
7769  * @sig_dbm: signal level in dBm
7770  * @gfp: allocation flags
7771  *
7772  * This function notifies cfg80211 that the mesh peer candidate has been
7773  * detected, most likely via a beacon or, less likely, via a probe response.
7774  * cfg80211 then sends a notification to userspace.
7775  */
7776 void cfg80211_notify_new_peer_candidate(struct net_device *dev,
7777 		const u8 *macaddr, const u8 *ie, u8 ie_len,
7778 		int sig_dbm, gfp_t gfp);
7779 
7780 /**
7781  * DOC: RFkill integration
7782  *
7783  * RFkill integration in cfg80211 is almost invisible to drivers,
7784  * as cfg80211 automatically registers an rfkill instance for each
7785  * wireless device it knows about. Soft kill is also translated
7786  * into disconnecting and turning all interfaces off. Drivers are
7787  * expected to turn off the device when all interfaces are down.
7788  *
7789  * However, devices may have a hard RFkill line, in which case they
7790  * also need to interact with the rfkill subsystem, via cfg80211.
7791  * They can do this with a few helper functions documented here.
7792  */
7793 
7794 /**
7795  * wiphy_rfkill_set_hw_state_reason - notify cfg80211 about hw block state
7796  * @wiphy: the wiphy
7797  * @blocked: block status
7798  * @reason: one of reasons in &enum rfkill_hard_block_reasons
7799  */
7800 void wiphy_rfkill_set_hw_state_reason(struct wiphy *wiphy, bool blocked,
7801 				      enum rfkill_hard_block_reasons reason);
7802 
7803 static inline void wiphy_rfkill_set_hw_state(struct wiphy *wiphy, bool blocked)
7804 {
7805 	wiphy_rfkill_set_hw_state_reason(wiphy, blocked,
7806 					 RFKILL_HARD_BLOCK_SIGNAL);
7807 }
7808 
7809 /**
7810  * wiphy_rfkill_start_polling - start polling rfkill
7811  * @wiphy: the wiphy
7812  */
7813 void wiphy_rfkill_start_polling(struct wiphy *wiphy);
7814 
7815 /**
7816  * wiphy_rfkill_stop_polling - stop polling rfkill
7817  * @wiphy: the wiphy
7818  */
7819 static inline void wiphy_rfkill_stop_polling(struct wiphy *wiphy)
7820 {
7821 	rfkill_pause_polling(wiphy->rfkill);
7822 }
7823 
7824 /**
7825  * DOC: Vendor commands
7826  *
7827  * Occasionally, there are special protocol or firmware features that
7828  * can't be implemented very openly. For this and similar cases, the
7829  * vendor command functionality allows implementing the features with
7830  * (typically closed-source) userspace and firmware, using nl80211 as
7831  * the configuration mechanism.
7832  *
7833  * A driver supporting vendor commands must register them as an array
7834  * in struct wiphy, with handlers for each one. Each command has an
7835  * OUI and sub command ID to identify it.
7836  *
7837  * Note that this feature should not be (ab)used to implement protocol
7838  * features that could openly be shared across drivers. In particular,
7839  * it must never be required to use vendor commands to implement any
7840  * "normal" functionality that higher-level userspace like connection
7841  * managers etc. need.
7842  */
7843 
7844 struct sk_buff *__cfg80211_alloc_reply_skb(struct wiphy *wiphy,
7845 					   enum nl80211_commands cmd,
7846 					   enum nl80211_attrs attr,
7847 					   int approxlen);
7848 
7849 struct sk_buff *__cfg80211_alloc_event_skb(struct wiphy *wiphy,
7850 					   struct wireless_dev *wdev,
7851 					   enum nl80211_commands cmd,
7852 					   enum nl80211_attrs attr,
7853 					   unsigned int portid,
7854 					   int vendor_event_idx,
7855 					   int approxlen, gfp_t gfp);
7856 
7857 void __cfg80211_send_event_skb(struct sk_buff *skb, gfp_t gfp);
7858 
7859 /**
7860  * cfg80211_vendor_cmd_alloc_reply_skb - allocate vendor command reply
7861  * @wiphy: the wiphy
7862  * @approxlen: an upper bound of the length of the data that will
7863  *	be put into the skb
7864  *
7865  * This function allocates and pre-fills an skb for a reply to
7866  * a vendor command. Since it is intended for a reply, calling
7867  * it outside of a vendor command's doit() operation is invalid.
7868  *
7869  * The returned skb is pre-filled with some identifying data in
7870  * a way that any data that is put into the skb (with skb_put(),
7871  * nla_put() or similar) will end up being within the
7872  * %NL80211_ATTR_VENDOR_DATA attribute, so all that needs to be done
7873  * with the skb is adding data for the corresponding userspace tool
7874  * which can then read that data out of the vendor data attribute.
7875  * You must not modify the skb in any other way.
7876  *
7877  * When done, call cfg80211_vendor_cmd_reply() with the skb and return
7878  * its error code as the result of the doit() operation.
7879  *
7880  * Return: An allocated and pre-filled skb. %NULL if any errors happen.
7881  */
7882 static inline struct sk_buff *
7883 cfg80211_vendor_cmd_alloc_reply_skb(struct wiphy *wiphy, int approxlen)
7884 {
7885 	return __cfg80211_alloc_reply_skb(wiphy, NL80211_CMD_VENDOR,
7886 					  NL80211_ATTR_VENDOR_DATA, approxlen);
7887 }
7888 
7889 /**
7890  * cfg80211_vendor_cmd_reply - send the reply skb
7891  * @skb: The skb, must have been allocated with
7892  *	cfg80211_vendor_cmd_alloc_reply_skb()
7893  *
7894  * Since calling this function will usually be the last thing
7895  * before returning from the vendor command doit() you should
7896  * return the error code.  Note that this function consumes the
7897  * skb regardless of the return value.
7898  *
7899  * Return: An error code or 0 on success.
7900  */
7901 int cfg80211_vendor_cmd_reply(struct sk_buff *skb);
7902 
7903 /**
7904  * cfg80211_vendor_cmd_get_sender - get the current sender netlink ID
7905  * @wiphy: the wiphy
7906  *
7907  * Return: the current netlink port ID in a vendor command handler.
7908  *
7909  * Context: May only be called from a vendor command handler
7910  */
7911 unsigned int cfg80211_vendor_cmd_get_sender(struct wiphy *wiphy);
7912 
7913 /**
7914  * cfg80211_vendor_event_alloc - allocate vendor-specific event skb
7915  * @wiphy: the wiphy
7916  * @wdev: the wireless device
7917  * @event_idx: index of the vendor event in the wiphy's vendor_events
7918  * @approxlen: an upper bound of the length of the data that will
7919  *	be put into the skb
7920  * @gfp: allocation flags
7921  *
7922  * This function allocates and pre-fills an skb for an event on the
7923  * vendor-specific multicast group.
7924  *
7925  * If wdev != NULL, both the ifindex and identifier of the specified
7926  * wireless device are added to the event message before the vendor data
7927  * attribute.
7928  *
7929  * When done filling the skb, call cfg80211_vendor_event() with the
7930  * skb to send the event.
7931  *
7932  * Return: An allocated and pre-filled skb. %NULL if any errors happen.
7933  */
7934 static inline struct sk_buff *
7935 cfg80211_vendor_event_alloc(struct wiphy *wiphy, struct wireless_dev *wdev,
7936 			     int approxlen, int event_idx, gfp_t gfp)
7937 {
7938 	return __cfg80211_alloc_event_skb(wiphy, wdev, NL80211_CMD_VENDOR,
7939 					  NL80211_ATTR_VENDOR_DATA,
7940 					  0, event_idx, approxlen, gfp);
7941 }
7942 
7943 /**
7944  * cfg80211_vendor_event_alloc_ucast - alloc unicast vendor-specific event skb
7945  * @wiphy: the wiphy
7946  * @wdev: the wireless device
7947  * @event_idx: index of the vendor event in the wiphy's vendor_events
7948  * @portid: port ID of the receiver
7949  * @approxlen: an upper bound of the length of the data that will
7950  *	be put into the skb
7951  * @gfp: allocation flags
7952  *
7953  * This function allocates and pre-fills an skb for an event to send to
7954  * a specific (userland) socket. This socket would previously have been
7955  * obtained by cfg80211_vendor_cmd_get_sender(), and the caller MUST take
7956  * care to register a netlink notifier to see when the socket closes.
7957  *
7958  * If wdev != NULL, both the ifindex and identifier of the specified
7959  * wireless device are added to the event message before the vendor data
7960  * attribute.
7961  *
7962  * When done filling the skb, call cfg80211_vendor_event() with the
7963  * skb to send the event.
7964  *
7965  * Return: An allocated and pre-filled skb. %NULL if any errors happen.
7966  */
7967 static inline struct sk_buff *
7968 cfg80211_vendor_event_alloc_ucast(struct wiphy *wiphy,
7969 				  struct wireless_dev *wdev,
7970 				  unsigned int portid, int approxlen,
7971 				  int event_idx, gfp_t gfp)
7972 {
7973 	return __cfg80211_alloc_event_skb(wiphy, wdev, NL80211_CMD_VENDOR,
7974 					  NL80211_ATTR_VENDOR_DATA,
7975 					  portid, event_idx, approxlen, gfp);
7976 }
7977 
7978 /**
7979  * cfg80211_vendor_event - send the event
7980  * @skb: The skb, must have been allocated with cfg80211_vendor_event_alloc()
7981  * @gfp: allocation flags
7982  *
7983  * This function sends the given @skb, which must have been allocated
7984  * by cfg80211_vendor_event_alloc(), as an event. It always consumes it.
7985  */
7986 static inline void cfg80211_vendor_event(struct sk_buff *skb, gfp_t gfp)
7987 {
7988 	__cfg80211_send_event_skb(skb, gfp);
7989 }
7990 
7991 #ifdef CONFIG_NL80211_TESTMODE
7992 /**
7993  * DOC: Test mode
7994  *
7995  * Test mode is a set of utility functions to allow drivers to
7996  * interact with driver-specific tools to aid, for instance,
7997  * factory programming.
7998  *
7999  * This chapter describes how drivers interact with it. For more
8000  * information see the nl80211 book's chapter on it.
8001  */
8002 
8003 /**
8004  * cfg80211_testmode_alloc_reply_skb - allocate testmode reply
8005  * @wiphy: the wiphy
8006  * @approxlen: an upper bound of the length of the data that will
8007  *	be put into the skb
8008  *
8009  * This function allocates and pre-fills an skb for a reply to
8010  * the testmode command. Since it is intended for a reply, calling
8011  * it outside of the @testmode_cmd operation is invalid.
8012  *
8013  * The returned skb is pre-filled with the wiphy index and set up in
8014  * a way that any data that is put into the skb (with skb_put(),
8015  * nla_put() or similar) will end up being within the
8016  * %NL80211_ATTR_TESTDATA attribute, so all that needs to be done
8017  * with the skb is adding data for the corresponding userspace tool
8018  * which can then read that data out of the testdata attribute. You
8019  * must not modify the skb in any other way.
8020  *
8021  * When done, call cfg80211_testmode_reply() with the skb and return
8022  * its error code as the result of the @testmode_cmd operation.
8023  *
8024  * Return: An allocated and pre-filled skb. %NULL if any errors happen.
8025  */
8026 static inline struct sk_buff *
8027 cfg80211_testmode_alloc_reply_skb(struct wiphy *wiphy, int approxlen)
8028 {
8029 	return __cfg80211_alloc_reply_skb(wiphy, NL80211_CMD_TESTMODE,
8030 					  NL80211_ATTR_TESTDATA, approxlen);
8031 }
8032 
8033 /**
8034  * cfg80211_testmode_reply - send the reply skb
8035  * @skb: The skb, must have been allocated with
8036  *	cfg80211_testmode_alloc_reply_skb()
8037  *
8038  * Since calling this function will usually be the last thing
8039  * before returning from the @testmode_cmd you should return
8040  * the error code.  Note that this function consumes the skb
8041  * regardless of the return value.
8042  *
8043  * Return: An error code or 0 on success.
8044  */
8045 static inline int cfg80211_testmode_reply(struct sk_buff *skb)
8046 {
8047 	return cfg80211_vendor_cmd_reply(skb);
8048 }
8049 
8050 /**
8051  * cfg80211_testmode_alloc_event_skb - allocate testmode event
8052  * @wiphy: the wiphy
8053  * @approxlen: an upper bound of the length of the data that will
8054  *	be put into the skb
8055  * @gfp: allocation flags
8056  *
8057  * This function allocates and pre-fills an skb for an event on the
8058  * testmode multicast group.
8059  *
8060  * The returned skb is set up in the same way as with
8061  * cfg80211_testmode_alloc_reply_skb() but prepared for an event. As
8062  * there, you should simply add data to it that will then end up in the
8063  * %NL80211_ATTR_TESTDATA attribute. Again, you must not modify the skb
8064  * in any other way.
8065  *
8066  * When done filling the skb, call cfg80211_testmode_event() with the
8067  * skb to send the event.
8068  *
8069  * Return: An allocated and pre-filled skb. %NULL if any errors happen.
8070  */
8071 static inline struct sk_buff *
8072 cfg80211_testmode_alloc_event_skb(struct wiphy *wiphy, int approxlen, gfp_t gfp)
8073 {
8074 	return __cfg80211_alloc_event_skb(wiphy, NULL, NL80211_CMD_TESTMODE,
8075 					  NL80211_ATTR_TESTDATA, 0, -1,
8076 					  approxlen, gfp);
8077 }
8078 
8079 /**
8080  * cfg80211_testmode_event - send the event
8081  * @skb: The skb, must have been allocated with
8082  *	cfg80211_testmode_alloc_event_skb()
8083  * @gfp: allocation flags
8084  *
8085  * This function sends the given @skb, which must have been allocated
8086  * by cfg80211_testmode_alloc_event_skb(), as an event. It always
8087  * consumes it.
8088  */
8089 static inline void cfg80211_testmode_event(struct sk_buff *skb, gfp_t gfp)
8090 {
8091 	__cfg80211_send_event_skb(skb, gfp);
8092 }
8093 
8094 #define CFG80211_TESTMODE_CMD(cmd)	.testmode_cmd = (cmd),
8095 #define CFG80211_TESTMODE_DUMP(cmd)	.testmode_dump = (cmd),
8096 #else
8097 #define CFG80211_TESTMODE_CMD(cmd)
8098 #define CFG80211_TESTMODE_DUMP(cmd)
8099 #endif
8100 
8101 /**
8102  * struct cfg80211_fils_resp_params - FILS connection response params
8103  * @kek: KEK derived from a successful FILS connection (may be %NULL)
8104  * @kek_len: Length of @fils_kek in octets
8105  * @update_erp_next_seq_num: Boolean value to specify whether the value in
8106  *	@erp_next_seq_num is valid.
8107  * @erp_next_seq_num: The next sequence number to use in ERP message in
8108  *	FILS Authentication. This value should be specified irrespective of the
8109  *	status for a FILS connection.
8110  * @pmk: A new PMK if derived from a successful FILS connection (may be %NULL).
8111  * @pmk_len: Length of @pmk in octets
8112  * @pmkid: A new PMKID if derived from a successful FILS connection or the PMKID
8113  *	used for this FILS connection (may be %NULL).
8114  */
8115 struct cfg80211_fils_resp_params {
8116 	const u8 *kek;
8117 	size_t kek_len;
8118 	bool update_erp_next_seq_num;
8119 	u16 erp_next_seq_num;
8120 	const u8 *pmk;
8121 	size_t pmk_len;
8122 	const u8 *pmkid;
8123 };
8124 
8125 /**
8126  * struct cfg80211_connect_resp_params - Connection response params
8127  * @status: Status code, %WLAN_STATUS_SUCCESS for successful connection, use
8128  *	%WLAN_STATUS_UNSPECIFIED_FAILURE if your device cannot give you
8129  *	the real status code for failures. If this call is used to report a
8130  *	failure due to a timeout (e.g., not receiving an Authentication frame
8131  *	from the AP) instead of an explicit rejection by the AP, -1 is used to
8132  *	indicate that this is a failure, but without a status code.
8133  *	@timeout_reason is used to report the reason for the timeout in that
8134  *	case.
8135  * @req_ie: Association request IEs (may be %NULL)
8136  * @req_ie_len: Association request IEs length
8137  * @resp_ie: Association response IEs (may be %NULL)
8138  * @resp_ie_len: Association response IEs length
8139  * @fils: FILS connection response parameters.
8140  * @timeout_reason: Reason for connection timeout. This is used when the
8141  *	connection fails due to a timeout instead of an explicit rejection from
8142  *	the AP. %NL80211_TIMEOUT_UNSPECIFIED is used when the timeout reason is
8143  *	not known. This value is used only if @status < 0 to indicate that the
8144  *	failure is due to a timeout and not due to explicit rejection by the AP.
8145  *	This value is ignored in other cases (@status >= 0).
8146  * @valid_links: For MLO connection, BIT mask of the valid link ids. Otherwise
8147  *	zero.
8148  * @ap_mld_addr: For MLO connection, MLD address of the AP. Otherwise %NULL.
8149  * @links : For MLO connection, contains link info for the valid links indicated
8150  *	using @valid_links. For non-MLO connection, links[0] contains the
8151  *	connected AP info.
8152  * @links.addr: For MLO connection, MAC address of the STA link. Otherwise
8153  *	%NULL.
8154  * @links.bssid: For MLO connection, MAC address of the AP link. For non-MLO
8155  *	connection, links[0].bssid points to the BSSID of the AP (may be %NULL).
8156  * @links.bss: For MLO connection, entry of bss to which STA link is connected.
8157  *	For non-MLO connection, links[0].bss points to entry of bss to which STA
8158  *	is connected. It can be obtained through cfg80211_get_bss() (may be
8159  *	%NULL). It is recommended to store the bss from the connect_request and
8160  *	hold a reference to it and return through this param to avoid a warning
8161  *	if the bss is expired during the connection, esp. for those drivers
8162  *	implementing connect op. Only one parameter among @bssid and @bss needs
8163  *	to be specified.
8164  * @links.status: per-link status code, to report a status code that's not
8165  *	%WLAN_STATUS_SUCCESS for a given link, it must also be in the
8166  *	@valid_links bitmap and may have a BSS pointer (which is then released)
8167  */
8168 struct cfg80211_connect_resp_params {
8169 	int status;
8170 	const u8 *req_ie;
8171 	size_t req_ie_len;
8172 	const u8 *resp_ie;
8173 	size_t resp_ie_len;
8174 	struct cfg80211_fils_resp_params fils;
8175 	enum nl80211_timeout_reason timeout_reason;
8176 
8177 	const u8 *ap_mld_addr;
8178 	u16 valid_links;
8179 	struct {
8180 		const u8 *addr;
8181 		const u8 *bssid;
8182 		struct cfg80211_bss *bss;
8183 		u16 status;
8184 	} links[IEEE80211_MLD_MAX_NUM_LINKS];
8185 };
8186 
8187 /**
8188  * cfg80211_connect_done - notify cfg80211 of connection result
8189  *
8190  * @dev: network device
8191  * @params: connection response parameters
8192  * @gfp: allocation flags
8193  *
8194  * It should be called by the underlying driver once execution of the connection
8195  * request from connect() has been completed. This is similar to
8196  * cfg80211_connect_bss(), but takes a structure pointer for connection response
8197  * parameters. Only one of the functions among cfg80211_connect_bss(),
8198  * cfg80211_connect_result(), cfg80211_connect_timeout(),
8199  * and cfg80211_connect_done() should be called.
8200  */
8201 void cfg80211_connect_done(struct net_device *dev,
8202 			   struct cfg80211_connect_resp_params *params,
8203 			   gfp_t gfp);
8204 
8205 /**
8206  * cfg80211_connect_bss - notify cfg80211 of connection result
8207  *
8208  * @dev: network device
8209  * @bssid: the BSSID of the AP
8210  * @bss: Entry of bss to which STA got connected to, can be obtained through
8211  *	cfg80211_get_bss() (may be %NULL). But it is recommended to store the
8212  *	bss from the connect_request and hold a reference to it and return
8213  *	through this param to avoid a warning if the bss is expired during the
8214  *	connection, esp. for those drivers implementing connect op.
8215  *	Only one parameter among @bssid and @bss needs to be specified.
8216  * @req_ie: association request IEs (maybe be %NULL)
8217  * @req_ie_len: association request IEs length
8218  * @resp_ie: association response IEs (may be %NULL)
8219  * @resp_ie_len: assoc response IEs length
8220  * @status: status code, %WLAN_STATUS_SUCCESS for successful connection, use
8221  *	%WLAN_STATUS_UNSPECIFIED_FAILURE if your device cannot give you
8222  *	the real status code for failures. If this call is used to report a
8223  *	failure due to a timeout (e.g., not receiving an Authentication frame
8224  *	from the AP) instead of an explicit rejection by the AP, -1 is used to
8225  *	indicate that this is a failure, but without a status code.
8226  *	@timeout_reason is used to report the reason for the timeout in that
8227  *	case.
8228  * @gfp: allocation flags
8229  * @timeout_reason: reason for connection timeout. This is used when the
8230  *	connection fails due to a timeout instead of an explicit rejection from
8231  *	the AP. %NL80211_TIMEOUT_UNSPECIFIED is used when the timeout reason is
8232  *	not known. This value is used only if @status < 0 to indicate that the
8233  *	failure is due to a timeout and not due to explicit rejection by the AP.
8234  *	This value is ignored in other cases (@status >= 0).
8235  *
8236  * It should be called by the underlying driver once execution of the connection
8237  * request from connect() has been completed. This is similar to
8238  * cfg80211_connect_result(), but with the option of identifying the exact bss
8239  * entry for the connection. Only one of the functions among
8240  * cfg80211_connect_bss(), cfg80211_connect_result(),
8241  * cfg80211_connect_timeout(), and cfg80211_connect_done() should be called.
8242  */
8243 static inline void
8244 cfg80211_connect_bss(struct net_device *dev, const u8 *bssid,
8245 		     struct cfg80211_bss *bss, const u8 *req_ie,
8246 		     size_t req_ie_len, const u8 *resp_ie,
8247 		     size_t resp_ie_len, int status, gfp_t gfp,
8248 		     enum nl80211_timeout_reason timeout_reason)
8249 {
8250 	struct cfg80211_connect_resp_params params;
8251 
8252 	memset(&params, 0, sizeof(params));
8253 	params.status = status;
8254 	params.links[0].bssid = bssid;
8255 	params.links[0].bss = bss;
8256 	params.req_ie = req_ie;
8257 	params.req_ie_len = req_ie_len;
8258 	params.resp_ie = resp_ie;
8259 	params.resp_ie_len = resp_ie_len;
8260 	params.timeout_reason = timeout_reason;
8261 
8262 	cfg80211_connect_done(dev, &params, gfp);
8263 }
8264 
8265 /**
8266  * cfg80211_connect_result - notify cfg80211 of connection result
8267  *
8268  * @dev: network device
8269  * @bssid: the BSSID of the AP
8270  * @req_ie: association request IEs (maybe be %NULL)
8271  * @req_ie_len: association request IEs length
8272  * @resp_ie: association response IEs (may be %NULL)
8273  * @resp_ie_len: assoc response IEs length
8274  * @status: status code, %WLAN_STATUS_SUCCESS for successful connection, use
8275  *	%WLAN_STATUS_UNSPECIFIED_FAILURE if your device cannot give you
8276  *	the real status code for failures.
8277  * @gfp: allocation flags
8278  *
8279  * It should be called by the underlying driver once execution of the connection
8280  * request from connect() has been completed. This is similar to
8281  * cfg80211_connect_bss() which allows the exact bss entry to be specified. Only
8282  * one of the functions among cfg80211_connect_bss(), cfg80211_connect_result(),
8283  * cfg80211_connect_timeout(), and cfg80211_connect_done() should be called.
8284  */
8285 static inline void
8286 cfg80211_connect_result(struct net_device *dev, const u8 *bssid,
8287 			const u8 *req_ie, size_t req_ie_len,
8288 			const u8 *resp_ie, size_t resp_ie_len,
8289 			u16 status, gfp_t gfp)
8290 {
8291 	cfg80211_connect_bss(dev, bssid, NULL, req_ie, req_ie_len, resp_ie,
8292 			     resp_ie_len, status, gfp,
8293 			     NL80211_TIMEOUT_UNSPECIFIED);
8294 }
8295 
8296 /**
8297  * cfg80211_connect_timeout - notify cfg80211 of connection timeout
8298  *
8299  * @dev: network device
8300  * @bssid: the BSSID of the AP
8301  * @req_ie: association request IEs (maybe be %NULL)
8302  * @req_ie_len: association request IEs length
8303  * @gfp: allocation flags
8304  * @timeout_reason: reason for connection timeout.
8305  *
8306  * It should be called by the underlying driver whenever connect() has failed
8307  * in a sequence where no explicit authentication/association rejection was
8308  * received from the AP. This could happen, e.g., due to not being able to send
8309  * out the Authentication or Association Request frame or timing out while
8310  * waiting for the response. Only one of the functions among
8311  * cfg80211_connect_bss(), cfg80211_connect_result(),
8312  * cfg80211_connect_timeout(), and cfg80211_connect_done() should be called.
8313  */
8314 static inline void
8315 cfg80211_connect_timeout(struct net_device *dev, const u8 *bssid,
8316 			 const u8 *req_ie, size_t req_ie_len, gfp_t gfp,
8317 			 enum nl80211_timeout_reason timeout_reason)
8318 {
8319 	cfg80211_connect_bss(dev, bssid, NULL, req_ie, req_ie_len, NULL, 0, -1,
8320 			     gfp, timeout_reason);
8321 }
8322 
8323 /**
8324  * struct cfg80211_roam_info - driver initiated roaming information
8325  *
8326  * @req_ie: association request IEs (maybe be %NULL)
8327  * @req_ie_len: association request IEs length
8328  * @resp_ie: association response IEs (may be %NULL)
8329  * @resp_ie_len: assoc response IEs length
8330  * @fils: FILS related roaming information.
8331  * @valid_links: For MLO roaming, BIT mask of the new valid links is set.
8332  *	Otherwise zero.
8333  * @ap_mld_addr: For MLO roaming, MLD address of the new AP. Otherwise %NULL.
8334  * @links : For MLO roaming, contains new link info for the valid links set in
8335  *	@valid_links. For non-MLO roaming, links[0] contains the new AP info.
8336  * @links.addr: For MLO roaming, MAC address of the STA link. Otherwise %NULL.
8337  * @links.bssid: For MLO roaming, MAC address of the new AP link. For non-MLO
8338  *	roaming, links[0].bssid points to the BSSID of the new AP. May be
8339  *	%NULL if %links.bss is set.
8340  * @links.channel: the channel of the new AP.
8341  * @links.bss: For MLO roaming, entry of new bss to which STA link got
8342  *	roamed. For non-MLO roaming, links[0].bss points to entry of bss to
8343  *	which STA got roamed (may be %NULL if %links.bssid is set)
8344  */
8345 struct cfg80211_roam_info {
8346 	const u8 *req_ie;
8347 	size_t req_ie_len;
8348 	const u8 *resp_ie;
8349 	size_t resp_ie_len;
8350 	struct cfg80211_fils_resp_params fils;
8351 
8352 	const u8 *ap_mld_addr;
8353 	u16 valid_links;
8354 	struct {
8355 		const u8 *addr;
8356 		const u8 *bssid;
8357 		struct ieee80211_channel *channel;
8358 		struct cfg80211_bss *bss;
8359 	} links[IEEE80211_MLD_MAX_NUM_LINKS];
8360 };
8361 
8362 /**
8363  * cfg80211_roamed - notify cfg80211 of roaming
8364  *
8365  * @dev: network device
8366  * @info: information about the new BSS. struct &cfg80211_roam_info.
8367  * @gfp: allocation flags
8368  *
8369  * This function may be called with the driver passing either the BSSID of the
8370  * new AP or passing the bss entry to avoid a race in timeout of the bss entry.
8371  * It should be called by the underlying driver whenever it roamed from one AP
8372  * to another while connected. Drivers which have roaming implemented in
8373  * firmware should pass the bss entry to avoid a race in bss entry timeout where
8374  * the bss entry of the new AP is seen in the driver, but gets timed out by the
8375  * time it is accessed in __cfg80211_roamed() due to delay in scheduling
8376  * rdev->event_work. In case of any failures, the reference is released
8377  * either in cfg80211_roamed() or in __cfg80211_romed(), Otherwise, it will be
8378  * released while disconnecting from the current bss.
8379  */
8380 void cfg80211_roamed(struct net_device *dev, struct cfg80211_roam_info *info,
8381 		     gfp_t gfp);
8382 
8383 /**
8384  * cfg80211_port_authorized - notify cfg80211 of successful security association
8385  *
8386  * @dev: network device
8387  * @peer_addr: BSSID of the AP/P2P GO in case of STA/GC or STA/GC MAC address
8388  *	in case of AP/P2P GO
8389  * @td_bitmap: transition disable policy
8390  * @td_bitmap_len: Length of transition disable policy
8391  * @gfp: allocation flags
8392  *
8393  * This function should be called by a driver that supports 4 way handshake
8394  * offload after a security association was successfully established (i.e.,
8395  * the 4 way handshake was completed successfully). The call to this function
8396  * should be preceded with a call to cfg80211_connect_result(),
8397  * cfg80211_connect_done(), cfg80211_connect_bss() or cfg80211_roamed() to
8398  * indicate the 802.11 association.
8399  * This function can also be called by AP/P2P GO driver that supports
8400  * authentication offload. In this case the peer_mac passed is that of
8401  * associated STA/GC.
8402  */
8403 void cfg80211_port_authorized(struct net_device *dev, const u8 *peer_addr,
8404 			      const u8* td_bitmap, u8 td_bitmap_len, gfp_t gfp);
8405 
8406 /**
8407  * cfg80211_disconnected - notify cfg80211 that connection was dropped
8408  *
8409  * @dev: network device
8410  * @ie: information elements of the deauth/disassoc frame (may be %NULL)
8411  * @ie_len: length of IEs
8412  * @reason: reason code for the disconnection, set it to 0 if unknown
8413  * @locally_generated: disconnection was requested locally
8414  * @gfp: allocation flags
8415  *
8416  * After it calls this function, the driver should enter an idle state
8417  * and not try to connect to any AP any more.
8418  */
8419 void cfg80211_disconnected(struct net_device *dev, u16 reason,
8420 			   const u8 *ie, size_t ie_len,
8421 			   bool locally_generated, gfp_t gfp);
8422 
8423 /**
8424  * cfg80211_ready_on_channel - notification of remain_on_channel start
8425  * @wdev: wireless device
8426  * @cookie: the request cookie
8427  * @chan: The current channel (from remain_on_channel request)
8428  * @duration: Duration in milliseconds that the driver intents to remain on the
8429  *	channel
8430  * @gfp: allocation flags
8431  */
8432 void cfg80211_ready_on_channel(struct wireless_dev *wdev, u64 cookie,
8433 			       struct ieee80211_channel *chan,
8434 			       unsigned int duration, gfp_t gfp);
8435 
8436 /**
8437  * cfg80211_remain_on_channel_expired - remain_on_channel duration expired
8438  * @wdev: wireless device
8439  * @cookie: the request cookie
8440  * @chan: The current channel (from remain_on_channel request)
8441  * @gfp: allocation flags
8442  */
8443 void cfg80211_remain_on_channel_expired(struct wireless_dev *wdev, u64 cookie,
8444 					struct ieee80211_channel *chan,
8445 					gfp_t gfp);
8446 
8447 /**
8448  * cfg80211_tx_mgmt_expired - tx_mgmt duration expired
8449  * @wdev: wireless device
8450  * @cookie: the requested cookie
8451  * @chan: The current channel (from tx_mgmt request)
8452  * @gfp: allocation flags
8453  */
8454 void cfg80211_tx_mgmt_expired(struct wireless_dev *wdev, u64 cookie,
8455 			      struct ieee80211_channel *chan, gfp_t gfp);
8456 
8457 /**
8458  * cfg80211_sinfo_alloc_tid_stats - allocate per-tid statistics.
8459  *
8460  * @sinfo: the station information
8461  * @gfp: allocation flags
8462  *
8463  * Return: 0 on success. Non-zero on error.
8464  */
8465 int cfg80211_sinfo_alloc_tid_stats(struct station_info *sinfo, gfp_t gfp);
8466 
8467 /**
8468  * cfg80211_sinfo_release_content - release contents of station info
8469  * @sinfo: the station information
8470  *
8471  * Releases any potentially allocated sub-information of the station
8472  * information, but not the struct itself (since it's typically on
8473  * the stack.)
8474  */
8475 static inline void cfg80211_sinfo_release_content(struct station_info *sinfo)
8476 {
8477 	kfree(sinfo->pertid);
8478 }
8479 
8480 /**
8481  * cfg80211_new_sta - notify userspace about station
8482  *
8483  * @dev: the netdev
8484  * @mac_addr: the station's address
8485  * @sinfo: the station information
8486  * @gfp: allocation flags
8487  */
8488 void cfg80211_new_sta(struct net_device *dev, const u8 *mac_addr,
8489 		      struct station_info *sinfo, gfp_t gfp);
8490 
8491 /**
8492  * cfg80211_del_sta_sinfo - notify userspace about deletion of a station
8493  * @dev: the netdev
8494  * @mac_addr: the station's address. For MLD station, MLD address is used.
8495  * @sinfo: the station information/statistics
8496  * @gfp: allocation flags
8497  */
8498 void cfg80211_del_sta_sinfo(struct net_device *dev, const u8 *mac_addr,
8499 			    struct station_info *sinfo, gfp_t gfp);
8500 
8501 /**
8502  * cfg80211_del_sta - notify userspace about deletion of a station
8503  *
8504  * @dev: the netdev
8505  * @mac_addr: the station's address. For MLD station, MLD address is used.
8506  * @gfp: allocation flags
8507  */
8508 static inline void cfg80211_del_sta(struct net_device *dev,
8509 				    const u8 *mac_addr, gfp_t gfp)
8510 {
8511 	cfg80211_del_sta_sinfo(dev, mac_addr, NULL, gfp);
8512 }
8513 
8514 /**
8515  * cfg80211_conn_failed - connection request failed notification
8516  *
8517  * @dev: the netdev
8518  * @mac_addr: the station's address
8519  * @reason: the reason for connection failure
8520  * @gfp: allocation flags
8521  *
8522  * Whenever a station tries to connect to an AP and if the station
8523  * could not connect to the AP as the AP has rejected the connection
8524  * for some reasons, this function is called.
8525  *
8526  * The reason for connection failure can be any of the value from
8527  * nl80211_connect_failed_reason enum
8528  */
8529 void cfg80211_conn_failed(struct net_device *dev, const u8 *mac_addr,
8530 			  enum nl80211_connect_failed_reason reason,
8531 			  gfp_t gfp);
8532 
8533 /**
8534  * struct cfg80211_rx_info - received management frame info
8535  *
8536  * @freq: Frequency on which the frame was received in kHz
8537  * @sig_dbm: signal strength in dBm, or 0 if unknown
8538  * @have_link_id: indicates the frame was received on a link of
8539  *	an MLD, i.e. the @link_id field is valid
8540  * @link_id: the ID of the link the frame was received	on
8541  * @buf: Management frame (header + body)
8542  * @len: length of the frame data
8543  * @flags: flags, as defined in &enum nl80211_rxmgmt_flags
8544  * @rx_tstamp: Hardware timestamp of frame RX in nanoseconds
8545  * @ack_tstamp: Hardware timestamp of ack TX in nanoseconds
8546  */
8547 struct cfg80211_rx_info {
8548 	int freq;
8549 	int sig_dbm;
8550 	bool have_link_id;
8551 	u8 link_id;
8552 	const u8 *buf;
8553 	size_t len;
8554 	u32 flags;
8555 	u64 rx_tstamp;
8556 	u64 ack_tstamp;
8557 };
8558 
8559 /**
8560  * cfg80211_rx_mgmt_ext - management frame notification with extended info
8561  * @wdev: wireless device receiving the frame
8562  * @info: RX info as defined in struct cfg80211_rx_info
8563  *
8564  * This function is called whenever an Action frame is received for a station
8565  * mode interface, but is not processed in kernel.
8566  *
8567  * Return: %true if a user space application has registered for this frame.
8568  * For action frames, that makes it responsible for rejecting unrecognized
8569  * action frames; %false otherwise, in which case for action frames the
8570  * driver is responsible for rejecting the frame.
8571  */
8572 bool cfg80211_rx_mgmt_ext(struct wireless_dev *wdev,
8573 			  struct cfg80211_rx_info *info);
8574 
8575 /**
8576  * cfg80211_rx_mgmt_khz - notification of received, unprocessed management frame
8577  * @wdev: wireless device receiving the frame
8578  * @freq: Frequency on which the frame was received in KHz
8579  * @sig_dbm: signal strength in dBm, or 0 if unknown
8580  * @buf: Management frame (header + body)
8581  * @len: length of the frame data
8582  * @flags: flags, as defined in enum nl80211_rxmgmt_flags
8583  *
8584  * This function is called whenever an Action frame is received for a station
8585  * mode interface, but is not processed in kernel.
8586  *
8587  * Return: %true if a user space application has registered for this frame.
8588  * For action frames, that makes it responsible for rejecting unrecognized
8589  * action frames; %false otherwise, in which case for action frames the
8590  * driver is responsible for rejecting the frame.
8591  */
8592 static inline bool cfg80211_rx_mgmt_khz(struct wireless_dev *wdev, int freq,
8593 					int sig_dbm, const u8 *buf, size_t len,
8594 					u32 flags)
8595 {
8596 	struct cfg80211_rx_info info = {
8597 		.freq = freq,
8598 		.sig_dbm = sig_dbm,
8599 		.buf = buf,
8600 		.len = len,
8601 		.flags = flags
8602 	};
8603 
8604 	return cfg80211_rx_mgmt_ext(wdev, &info);
8605 }
8606 
8607 /**
8608  * cfg80211_rx_mgmt - notification of received, unprocessed management frame
8609  * @wdev: wireless device receiving the frame
8610  * @freq: Frequency on which the frame was received in MHz
8611  * @sig_dbm: signal strength in dBm, or 0 if unknown
8612  * @buf: Management frame (header + body)
8613  * @len: length of the frame data
8614  * @flags: flags, as defined in enum nl80211_rxmgmt_flags
8615  *
8616  * This function is called whenever an Action frame is received for a station
8617  * mode interface, but is not processed in kernel.
8618  *
8619  * Return: %true if a user space application has registered for this frame.
8620  * For action frames, that makes it responsible for rejecting unrecognized
8621  * action frames; %false otherwise, in which case for action frames the
8622  * driver is responsible for rejecting the frame.
8623  */
8624 static inline bool cfg80211_rx_mgmt(struct wireless_dev *wdev, int freq,
8625 				    int sig_dbm, const u8 *buf, size_t len,
8626 				    u32 flags)
8627 {
8628 	struct cfg80211_rx_info info = {
8629 		.freq = MHZ_TO_KHZ(freq),
8630 		.sig_dbm = sig_dbm,
8631 		.buf = buf,
8632 		.len = len,
8633 		.flags = flags
8634 	};
8635 
8636 	return cfg80211_rx_mgmt_ext(wdev, &info);
8637 }
8638 
8639 /**
8640  * struct cfg80211_tx_status - TX status for management frame information
8641  *
8642  * @cookie: Cookie returned by cfg80211_ops::mgmt_tx()
8643  * @tx_tstamp: hardware TX timestamp in nanoseconds
8644  * @ack_tstamp: hardware ack RX timestamp in nanoseconds
8645  * @buf: Management frame (header + body)
8646  * @len: length of the frame data
8647  * @ack: Whether frame was acknowledged
8648  */
8649 struct cfg80211_tx_status {
8650 	u64 cookie;
8651 	u64 tx_tstamp;
8652 	u64 ack_tstamp;
8653 	const u8 *buf;
8654 	size_t len;
8655 	bool ack;
8656 };
8657 
8658 /**
8659  * cfg80211_mgmt_tx_status_ext - TX status notification with extended info
8660  * @wdev: wireless device receiving the frame
8661  * @status: TX status data
8662  * @gfp: context flags
8663  *
8664  * This function is called whenever a management frame was requested to be
8665  * transmitted with cfg80211_ops::mgmt_tx() to report the TX status of the
8666  * transmission attempt with extended info.
8667  */
8668 void cfg80211_mgmt_tx_status_ext(struct wireless_dev *wdev,
8669 				 struct cfg80211_tx_status *status, gfp_t gfp);
8670 
8671 /**
8672  * cfg80211_mgmt_tx_status - notification of TX status for management frame
8673  * @wdev: wireless device receiving the frame
8674  * @cookie: Cookie returned by cfg80211_ops::mgmt_tx()
8675  * @buf: Management frame (header + body)
8676  * @len: length of the frame data
8677  * @ack: Whether frame was acknowledged
8678  * @gfp: context flags
8679  *
8680  * This function is called whenever a management frame was requested to be
8681  * transmitted with cfg80211_ops::mgmt_tx() to report the TX status of the
8682  * transmission attempt.
8683  */
8684 static inline void cfg80211_mgmt_tx_status(struct wireless_dev *wdev,
8685 					   u64 cookie, const u8 *buf,
8686 					   size_t len, bool ack, gfp_t gfp)
8687 {
8688 	struct cfg80211_tx_status status = {
8689 		.cookie = cookie,
8690 		.buf = buf,
8691 		.len = len,
8692 		.ack = ack
8693 	};
8694 
8695 	cfg80211_mgmt_tx_status_ext(wdev, &status, gfp);
8696 }
8697 
8698 /**
8699  * cfg80211_control_port_tx_status - notification of TX status for control
8700  *                                   port frames
8701  * @wdev: wireless device receiving the frame
8702  * @cookie: Cookie returned by cfg80211_ops::tx_control_port()
8703  * @buf: Data frame (header + body)
8704  * @len: length of the frame data
8705  * @ack: Whether frame was acknowledged
8706  * @gfp: context flags
8707  *
8708  * This function is called whenever a control port frame was requested to be
8709  * transmitted with cfg80211_ops::tx_control_port() to report the TX status of
8710  * the transmission attempt.
8711  */
8712 void cfg80211_control_port_tx_status(struct wireless_dev *wdev, u64 cookie,
8713 				     const u8 *buf, size_t len, bool ack,
8714 				     gfp_t gfp);
8715 
8716 /**
8717  * cfg80211_rx_control_port - notification about a received control port frame
8718  * @dev: The device the frame matched to
8719  * @skb: The skbuf with the control port frame.  It is assumed that the skbuf
8720  *	is 802.3 formatted (with 802.3 header).  The skb can be non-linear.
8721  *	This function does not take ownership of the skb, so the caller is
8722  *	responsible for any cleanup.  The caller must also ensure that
8723  *	skb->protocol is set appropriately.
8724  * @unencrypted: Whether the frame was received unencrypted
8725  * @link_id: the link the frame was received on, -1 if not applicable or unknown
8726  *
8727  * This function is used to inform userspace about a received control port
8728  * frame.  It should only be used if userspace indicated it wants to receive
8729  * control port frames over nl80211.
8730  *
8731  * The frame is the data portion of the 802.3 or 802.11 data frame with all
8732  * network layer headers removed (e.g. the raw EAPoL frame).
8733  *
8734  * Return: %true if the frame was passed to userspace
8735  */
8736 bool cfg80211_rx_control_port(struct net_device *dev, struct sk_buff *skb,
8737 			      bool unencrypted, int link_id);
8738 
8739 /**
8740  * cfg80211_cqm_rssi_notify - connection quality monitoring rssi event
8741  * @dev: network device
8742  * @rssi_event: the triggered RSSI event
8743  * @rssi_level: new RSSI level value or 0 if not available
8744  * @gfp: context flags
8745  *
8746  * This function is called when a configured connection quality monitoring
8747  * rssi threshold reached event occurs.
8748  */
8749 void cfg80211_cqm_rssi_notify(struct net_device *dev,
8750 			      enum nl80211_cqm_rssi_threshold_event rssi_event,
8751 			      s32 rssi_level, gfp_t gfp);
8752 
8753 /**
8754  * cfg80211_cqm_pktloss_notify - notify userspace about packetloss to peer
8755  * @dev: network device
8756  * @peer: peer's MAC address
8757  * @num_packets: how many packets were lost -- should be a fixed threshold
8758  *	but probably no less than maybe 50, or maybe a throughput dependent
8759  *	threshold (to account for temporary interference)
8760  * @gfp: context flags
8761  */
8762 void cfg80211_cqm_pktloss_notify(struct net_device *dev,
8763 				 const u8 *peer, u32 num_packets, gfp_t gfp);
8764 
8765 /**
8766  * cfg80211_cqm_txe_notify - TX error rate event
8767  * @dev: network device
8768  * @peer: peer's MAC address
8769  * @num_packets: how many packets were lost
8770  * @rate: % of packets which failed transmission
8771  * @intvl: interval (in s) over which the TX failure threshold was breached.
8772  * @gfp: context flags
8773  *
8774  * Notify userspace when configured % TX failures over number of packets in a
8775  * given interval is exceeded.
8776  */
8777 void cfg80211_cqm_txe_notify(struct net_device *dev, const u8 *peer,
8778 			     u32 num_packets, u32 rate, u32 intvl, gfp_t gfp);
8779 
8780 /**
8781  * cfg80211_cqm_beacon_loss_notify - beacon loss event
8782  * @dev: network device
8783  * @gfp: context flags
8784  *
8785  * Notify userspace about beacon loss from the connected AP.
8786  */
8787 void cfg80211_cqm_beacon_loss_notify(struct net_device *dev, gfp_t gfp);
8788 
8789 /**
8790  * __cfg80211_radar_event - radar detection event
8791  * @wiphy: the wiphy
8792  * @chandef: chandef for the current channel
8793  * @offchan: the radar has been detected on the offchannel chain
8794  * @gfp: context flags
8795  *
8796  * This function is called when a radar is detected on the current chanenl.
8797  */
8798 void __cfg80211_radar_event(struct wiphy *wiphy,
8799 			    struct cfg80211_chan_def *chandef,
8800 			    bool offchan, gfp_t gfp);
8801 
8802 static inline void
8803 cfg80211_radar_event(struct wiphy *wiphy,
8804 		     struct cfg80211_chan_def *chandef,
8805 		     gfp_t gfp)
8806 {
8807 	__cfg80211_radar_event(wiphy, chandef, false, gfp);
8808 }
8809 
8810 static inline void
8811 cfg80211_background_radar_event(struct wiphy *wiphy,
8812 				struct cfg80211_chan_def *chandef,
8813 				gfp_t gfp)
8814 {
8815 	__cfg80211_radar_event(wiphy, chandef, true, gfp);
8816 }
8817 
8818 /**
8819  * cfg80211_sta_opmode_change_notify - STA's ht/vht operation mode change event
8820  * @dev: network device
8821  * @mac: MAC address of a station which opmode got modified
8822  * @sta_opmode: station's current opmode value
8823  * @gfp: context flags
8824  *
8825  * Driver should call this function when station's opmode modified via action
8826  * frame.
8827  */
8828 void cfg80211_sta_opmode_change_notify(struct net_device *dev, const u8 *mac,
8829 				       struct sta_opmode_info *sta_opmode,
8830 				       gfp_t gfp);
8831 
8832 /**
8833  * cfg80211_cac_event - Channel availability check (CAC) event
8834  * @netdev: network device
8835  * @chandef: chandef for the current channel
8836  * @event: type of event
8837  * @gfp: context flags
8838  * @link_id: valid link_id for MLO operation or 0 otherwise.
8839  *
8840  * This function is called when a Channel availability check (CAC) is finished
8841  * or aborted. This must be called to notify the completion of a CAC process,
8842  * also by full-MAC drivers.
8843  */
8844 void cfg80211_cac_event(struct net_device *netdev,
8845 			const struct cfg80211_chan_def *chandef,
8846 			enum nl80211_radar_event event, gfp_t gfp,
8847 			unsigned int link_id);
8848 
8849 /**
8850  * cfg80211_background_cac_abort - Channel Availability Check offchan abort event
8851  * @wiphy: the wiphy
8852  *
8853  * This function is called by the driver when a Channel Availability Check
8854  * (CAC) is aborted by a offchannel dedicated chain.
8855  */
8856 void cfg80211_background_cac_abort(struct wiphy *wiphy);
8857 
8858 /**
8859  * cfg80211_gtk_rekey_notify - notify userspace about driver rekeying
8860  * @dev: network device
8861  * @bssid: BSSID of AP (to avoid races)
8862  * @replay_ctr: new replay counter
8863  * @gfp: allocation flags
8864  */
8865 void cfg80211_gtk_rekey_notify(struct net_device *dev, const u8 *bssid,
8866 			       const u8 *replay_ctr, gfp_t gfp);
8867 
8868 /**
8869  * cfg80211_pmksa_candidate_notify - notify about PMKSA caching candidate
8870  * @dev: network device
8871  * @index: candidate index (the smaller the index, the higher the priority)
8872  * @bssid: BSSID of AP
8873  * @preauth: Whether AP advertises support for RSN pre-authentication
8874  * @gfp: allocation flags
8875  */
8876 void cfg80211_pmksa_candidate_notify(struct net_device *dev, int index,
8877 				     const u8 *bssid, bool preauth, gfp_t gfp);
8878 
8879 /**
8880  * cfg80211_rx_spurious_frame - inform userspace about a spurious frame
8881  * @dev: The device the frame matched to
8882  * @addr: the transmitter address
8883  * @gfp: context flags
8884  *
8885  * This function is used in AP mode (only!) to inform userspace that
8886  * a spurious class 3 frame was received, to be able to deauth the
8887  * sender.
8888  * Return: %true if the frame was passed to userspace (or this failed
8889  * for a reason other than not having a subscription.)
8890  */
8891 bool cfg80211_rx_spurious_frame(struct net_device *dev,
8892 				const u8 *addr, gfp_t gfp);
8893 
8894 /**
8895  * cfg80211_rx_unexpected_4addr_frame - inform about unexpected WDS frame
8896  * @dev: The device the frame matched to
8897  * @addr: the transmitter address
8898  * @gfp: context flags
8899  *
8900  * This function is used in AP mode (only!) to inform userspace that
8901  * an associated station sent a 4addr frame but that wasn't expected.
8902  * It is allowed and desirable to send this event only once for each
8903  * station to avoid event flooding.
8904  * Return: %true if the frame was passed to userspace (or this failed
8905  * for a reason other than not having a subscription.)
8906  */
8907 bool cfg80211_rx_unexpected_4addr_frame(struct net_device *dev,
8908 					const u8 *addr, gfp_t gfp);
8909 
8910 /**
8911  * cfg80211_probe_status - notify userspace about probe status
8912  * @dev: the device the probe was sent on
8913  * @addr: the address of the peer
8914  * @cookie: the cookie filled in @probe_client previously
8915  * @acked: indicates whether probe was acked or not
8916  * @ack_signal: signal strength (in dBm) of the ACK frame.
8917  * @is_valid_ack_signal: indicates the ack_signal is valid or not.
8918  * @gfp: allocation flags
8919  */
8920 void cfg80211_probe_status(struct net_device *dev, const u8 *addr,
8921 			   u64 cookie, bool acked, s32 ack_signal,
8922 			   bool is_valid_ack_signal, gfp_t gfp);
8923 
8924 /**
8925  * cfg80211_report_obss_beacon_khz - report beacon from other APs
8926  * @wiphy: The wiphy that received the beacon
8927  * @frame: the frame
8928  * @len: length of the frame
8929  * @freq: frequency the frame was received on in KHz
8930  * @sig_dbm: signal strength in dBm, or 0 if unknown
8931  *
8932  * Use this function to report to userspace when a beacon was
8933  * received. It is not useful to call this when there is no
8934  * netdev that is in AP/GO mode.
8935  */
8936 void cfg80211_report_obss_beacon_khz(struct wiphy *wiphy, const u8 *frame,
8937 				     size_t len, int freq, int sig_dbm);
8938 
8939 /**
8940  * cfg80211_report_obss_beacon - report beacon from other APs
8941  * @wiphy: The wiphy that received the beacon
8942  * @frame: the frame
8943  * @len: length of the frame
8944  * @freq: frequency the frame was received on
8945  * @sig_dbm: signal strength in dBm, or 0 if unknown
8946  *
8947  * Use this function to report to userspace when a beacon was
8948  * received. It is not useful to call this when there is no
8949  * netdev that is in AP/GO mode.
8950  */
8951 static inline void cfg80211_report_obss_beacon(struct wiphy *wiphy,
8952 					       const u8 *frame, size_t len,
8953 					       int freq, int sig_dbm)
8954 {
8955 	cfg80211_report_obss_beacon_khz(wiphy, frame, len, MHZ_TO_KHZ(freq),
8956 					sig_dbm);
8957 }
8958 
8959 /**
8960  * struct cfg80211_beaconing_check_config - beacon check configuration
8961  * @iftype: the interface type to check for
8962  * @relax: allow IR-relaxation conditions to apply (e.g. another
8963  *	interface connected already on the same channel)
8964  *	NOTE: If this is set, wiphy mutex must be held.
8965  * @reg_power: &enum ieee80211_ap_reg_power value indicating the
8966  *	advertised/used 6 GHz regulatory power setting
8967  */
8968 struct cfg80211_beaconing_check_config {
8969 	enum nl80211_iftype iftype;
8970 	enum ieee80211_ap_reg_power reg_power;
8971 	bool relax;
8972 };
8973 
8974 /**
8975  * cfg80211_reg_check_beaconing - check if beaconing is allowed
8976  * @wiphy: the wiphy
8977  * @chandef: the channel definition
8978  * @cfg: additional parameters for the checking
8979  *
8980  * Return: %true if there is no secondary channel or the secondary channel(s)
8981  * can be used for beaconing (i.e. is not a radar channel etc.)
8982  */
8983 bool cfg80211_reg_check_beaconing(struct wiphy *wiphy,
8984 				  struct cfg80211_chan_def *chandef,
8985 				  struct cfg80211_beaconing_check_config *cfg);
8986 
8987 /**
8988  * cfg80211_reg_can_beacon - check if beaconing is allowed
8989  * @wiphy: the wiphy
8990  * @chandef: the channel definition
8991  * @iftype: interface type
8992  *
8993  * Return: %true if there is no secondary channel or the secondary channel(s)
8994  * can be used for beaconing (i.e. is not a radar channel etc.)
8995  */
8996 static inline bool
8997 cfg80211_reg_can_beacon(struct wiphy *wiphy,
8998 			struct cfg80211_chan_def *chandef,
8999 			enum nl80211_iftype iftype)
9000 {
9001 	struct cfg80211_beaconing_check_config config = {
9002 		.iftype = iftype,
9003 	};
9004 
9005 	return cfg80211_reg_check_beaconing(wiphy, chandef, &config);
9006 }
9007 
9008 /**
9009  * cfg80211_reg_can_beacon_relax - check if beaconing is allowed with relaxation
9010  * @wiphy: the wiphy
9011  * @chandef: the channel definition
9012  * @iftype: interface type
9013  *
9014  * Return: %true if there is no secondary channel or the secondary channel(s)
9015  * can be used for beaconing (i.e. is not a radar channel etc.). This version
9016  * also checks if IR-relaxation conditions apply, to allow beaconing under
9017  * more permissive conditions.
9018  *
9019  * Context: Requires the wiphy mutex to be held.
9020  */
9021 static inline bool
9022 cfg80211_reg_can_beacon_relax(struct wiphy *wiphy,
9023 			      struct cfg80211_chan_def *chandef,
9024 			      enum nl80211_iftype iftype)
9025 {
9026 	struct cfg80211_beaconing_check_config config = {
9027 		.iftype = iftype,
9028 		.relax = true,
9029 	};
9030 
9031 	return cfg80211_reg_check_beaconing(wiphy, chandef, &config);
9032 }
9033 
9034 /**
9035  * cfg80211_ch_switch_notify - update wdev channel and notify userspace
9036  * @dev: the device which switched channels
9037  * @chandef: the new channel definition
9038  * @link_id: the link ID for MLO, must be 0 for non-MLO
9039  *
9040  * Caller must hold wiphy mutex, therefore must only be called from sleepable
9041  * driver context!
9042  */
9043 void cfg80211_ch_switch_notify(struct net_device *dev,
9044 			       struct cfg80211_chan_def *chandef,
9045 			       unsigned int link_id);
9046 
9047 /**
9048  * cfg80211_ch_switch_started_notify - notify channel switch start
9049  * @dev: the device on which the channel switch started
9050  * @chandef: the future channel definition
9051  * @link_id: the link ID for MLO, must be 0 for non-MLO
9052  * @count: the number of TBTTs until the channel switch happens
9053  * @quiet: whether or not immediate quiet was requested by the AP
9054  *
9055  * Inform the userspace about the channel switch that has just
9056  * started, so that it can take appropriate actions (eg. starting
9057  * channel switch on other vifs), if necessary.
9058  */
9059 void cfg80211_ch_switch_started_notify(struct net_device *dev,
9060 				       struct cfg80211_chan_def *chandef,
9061 				       unsigned int link_id, u8 count,
9062 				       bool quiet);
9063 
9064 /**
9065  * ieee80211_operating_class_to_band - convert operating class to band
9066  *
9067  * @operating_class: the operating class to convert
9068  * @band: band pointer to fill
9069  *
9070  * Return: %true if the conversion was successful, %false otherwise.
9071  */
9072 bool ieee80211_operating_class_to_band(u8 operating_class,
9073 				       enum nl80211_band *band);
9074 
9075 /**
9076  * ieee80211_operating_class_to_chandef - convert operating class to chandef
9077  *
9078  * @operating_class: the operating class to convert
9079  * @chan: the ieee80211_channel to convert
9080  * @chandef: a pointer to the resulting chandef
9081  *
9082  * Return: %true if the conversion was successful, %false otherwise.
9083  */
9084 bool ieee80211_operating_class_to_chandef(u8 operating_class,
9085 					  struct ieee80211_channel *chan,
9086 					  struct cfg80211_chan_def *chandef);
9087 
9088 /**
9089  * ieee80211_chandef_to_operating_class - convert chandef to operation class
9090  *
9091  * @chandef: the chandef to convert
9092  * @op_class: a pointer to the resulting operating class
9093  *
9094  * Return: %true if the conversion was successful, %false otherwise.
9095  */
9096 bool ieee80211_chandef_to_operating_class(struct cfg80211_chan_def *chandef,
9097 					  u8 *op_class);
9098 
9099 /**
9100  * ieee80211_chandef_to_khz - convert chandef to frequency in KHz
9101  *
9102  * @chandef: the chandef to convert
9103  *
9104  * Return: the center frequency of chandef (1st segment) in KHz.
9105  */
9106 static inline u32
9107 ieee80211_chandef_to_khz(const struct cfg80211_chan_def *chandef)
9108 {
9109 	return MHZ_TO_KHZ(chandef->center_freq1) + chandef->freq1_offset;
9110 }
9111 
9112 /**
9113  * cfg80211_tdls_oper_request - request userspace to perform TDLS operation
9114  * @dev: the device on which the operation is requested
9115  * @peer: the MAC address of the peer device
9116  * @oper: the requested TDLS operation (NL80211_TDLS_SETUP or
9117  *	NL80211_TDLS_TEARDOWN)
9118  * @reason_code: the reason code for teardown request
9119  * @gfp: allocation flags
9120  *
9121  * This function is used to request userspace to perform TDLS operation that
9122  * requires knowledge of keys, i.e., link setup or teardown when the AP
9123  * connection uses encryption. This is optional mechanism for the driver to use
9124  * if it can automatically determine when a TDLS link could be useful (e.g.,
9125  * based on traffic and signal strength for a peer).
9126  */
9127 void cfg80211_tdls_oper_request(struct net_device *dev, const u8 *peer,
9128 				enum nl80211_tdls_operation oper,
9129 				u16 reason_code, gfp_t gfp);
9130 
9131 /**
9132  * cfg80211_calculate_bitrate - calculate actual bitrate (in 100Kbps units)
9133  * @rate: given rate_info to calculate bitrate from
9134  *
9135  * Return: calculated bitrate
9136  */
9137 u32 cfg80211_calculate_bitrate(struct rate_info *rate);
9138 
9139 /**
9140  * cfg80211_unregister_wdev - remove the given wdev
9141  * @wdev: struct wireless_dev to remove
9142  *
9143  * This function removes the device so it can no longer be used. It is necessary
9144  * to call this function even when cfg80211 requests the removal of the device
9145  * by calling the del_virtual_intf() callback. The function must also be called
9146  * when the driver wishes to unregister the wdev, e.g. when the hardware device
9147  * is unbound from the driver.
9148  *
9149  * Context: Requires the RTNL and wiphy mutex to be held.
9150  */
9151 void cfg80211_unregister_wdev(struct wireless_dev *wdev);
9152 
9153 /**
9154  * cfg80211_register_netdevice - register the given netdev
9155  * @dev: the netdev to register
9156  *
9157  * Note: In contexts coming from cfg80211 callbacks, you must call this rather
9158  * than register_netdevice(), unregister_netdev() is impossible as the RTNL is
9159  * held. Otherwise, both register_netdevice() and register_netdev() are usable
9160  * instead as well.
9161  *
9162  * Context: Requires the RTNL and wiphy mutex to be held.
9163  *
9164  * Return: 0 on success. Non-zero on error.
9165  */
9166 int cfg80211_register_netdevice(struct net_device *dev);
9167 
9168 /**
9169  * cfg80211_unregister_netdevice - unregister the given netdev
9170  * @dev: the netdev to register
9171  *
9172  * Note: In contexts coming from cfg80211 callbacks, you must call this rather
9173  * than unregister_netdevice(), unregister_netdev() is impossible as the RTNL
9174  * is held. Otherwise, both unregister_netdevice() and unregister_netdev() are
9175  * usable instead as well.
9176  *
9177  * Context: Requires the RTNL and wiphy mutex to be held.
9178  */
9179 static inline void cfg80211_unregister_netdevice(struct net_device *dev)
9180 {
9181 #if IS_ENABLED(CONFIG_CFG80211)
9182 	cfg80211_unregister_wdev(dev->ieee80211_ptr);
9183 #endif
9184 }
9185 
9186 /**
9187  * struct cfg80211_ft_event_params - FT Information Elements
9188  * @ies: FT IEs
9189  * @ies_len: length of the FT IE in bytes
9190  * @target_ap: target AP's MAC address
9191  * @ric_ies: RIC IE
9192  * @ric_ies_len: length of the RIC IE in bytes
9193  */
9194 struct cfg80211_ft_event_params {
9195 	const u8 *ies;
9196 	size_t ies_len;
9197 	const u8 *target_ap;
9198 	const u8 *ric_ies;
9199 	size_t ric_ies_len;
9200 };
9201 
9202 /**
9203  * cfg80211_ft_event - notify userspace about FT IE and RIC IE
9204  * @netdev: network device
9205  * @ft_event: IE information
9206  */
9207 void cfg80211_ft_event(struct net_device *netdev,
9208 		       struct cfg80211_ft_event_params *ft_event);
9209 
9210 /**
9211  * cfg80211_get_p2p_attr - find and copy a P2P attribute from IE buffer
9212  * @ies: the input IE buffer
9213  * @len: the input length
9214  * @attr: the attribute ID to find
9215  * @buf: output buffer, can be %NULL if the data isn't needed, e.g.
9216  *	if the function is only called to get the needed buffer size
9217  * @bufsize: size of the output buffer
9218  *
9219  * The function finds a given P2P attribute in the (vendor) IEs and
9220  * copies its contents to the given buffer.
9221  *
9222  * Return: A negative error code (-%EILSEQ or -%ENOENT) if the data is
9223  * malformed or the attribute can't be found (respectively), or the
9224  * length of the found attribute (which can be zero).
9225  */
9226 int cfg80211_get_p2p_attr(const u8 *ies, unsigned int len,
9227 			  enum ieee80211_p2p_attr_id attr,
9228 			  u8 *buf, unsigned int bufsize);
9229 
9230 /**
9231  * ieee80211_ie_split_ric - split an IE buffer according to ordering (with RIC)
9232  * @ies: the IE buffer
9233  * @ielen: the length of the IE buffer
9234  * @ids: an array with element IDs that are allowed before
9235  *	the split. A WLAN_EID_EXTENSION value means that the next
9236  *	EID in the list is a sub-element of the EXTENSION IE.
9237  * @n_ids: the size of the element ID array
9238  * @after_ric: array IE types that come after the RIC element
9239  * @n_after_ric: size of the @after_ric array
9240  * @offset: offset where to start splitting in the buffer
9241  *
9242  * This function splits an IE buffer by updating the @offset
9243  * variable to point to the location where the buffer should be
9244  * split.
9245  *
9246  * It assumes that the given IE buffer is well-formed, this
9247  * has to be guaranteed by the caller!
9248  *
9249  * It also assumes that the IEs in the buffer are ordered
9250  * correctly, if not the result of using this function will not
9251  * be ordered correctly either, i.e. it does no reordering.
9252  *
9253  * Return: The offset where the next part of the buffer starts, which
9254  * may be @ielen if the entire (remainder) of the buffer should be
9255  * used.
9256  */
9257 size_t ieee80211_ie_split_ric(const u8 *ies, size_t ielen,
9258 			      const u8 *ids, int n_ids,
9259 			      const u8 *after_ric, int n_after_ric,
9260 			      size_t offset);
9261 
9262 /**
9263  * ieee80211_ie_split - split an IE buffer according to ordering
9264  * @ies: the IE buffer
9265  * @ielen: the length of the IE buffer
9266  * @ids: an array with element IDs that are allowed before
9267  *	the split. A WLAN_EID_EXTENSION value means that the next
9268  *	EID in the list is a sub-element of the EXTENSION IE.
9269  * @n_ids: the size of the element ID array
9270  * @offset: offset where to start splitting in the buffer
9271  *
9272  * This function splits an IE buffer by updating the @offset
9273  * variable to point to the location where the buffer should be
9274  * split.
9275  *
9276  * It assumes that the given IE buffer is well-formed, this
9277  * has to be guaranteed by the caller!
9278  *
9279  * It also assumes that the IEs in the buffer are ordered
9280  * correctly, if not the result of using this function will not
9281  * be ordered correctly either, i.e. it does no reordering.
9282  *
9283  * Return: The offset where the next part of the buffer starts, which
9284  * may be @ielen if the entire (remainder) of the buffer should be
9285  * used.
9286  */
9287 static inline size_t ieee80211_ie_split(const u8 *ies, size_t ielen,
9288 					const u8 *ids, int n_ids, size_t offset)
9289 {
9290 	return ieee80211_ie_split_ric(ies, ielen, ids, n_ids, NULL, 0, offset);
9291 }
9292 
9293 /**
9294  * ieee80211_fragment_element - fragment the last element in skb
9295  * @skb: The skbuf that the element was added to
9296  * @len_pos: Pointer to length of the element to fragment
9297  * @frag_id: The element ID to use for fragments
9298  *
9299  * This function fragments all data after @len_pos, adding fragmentation
9300  * elements with the given ID as appropriate. The SKB will grow in size
9301  * accordingly.
9302  */
9303 void ieee80211_fragment_element(struct sk_buff *skb, u8 *len_pos, u8 frag_id);
9304 
9305 /**
9306  * cfg80211_report_wowlan_wakeup - report wakeup from WoWLAN
9307  * @wdev: the wireless device reporting the wakeup
9308  * @wakeup: the wakeup report
9309  * @gfp: allocation flags
9310  *
9311  * This function reports that the given device woke up. If it
9312  * caused the wakeup, report the reason(s), otherwise you may
9313  * pass %NULL as the @wakeup parameter to advertise that something
9314  * else caused the wakeup.
9315  */
9316 void cfg80211_report_wowlan_wakeup(struct wireless_dev *wdev,
9317 				   struct cfg80211_wowlan_wakeup *wakeup,
9318 				   gfp_t gfp);
9319 
9320 /**
9321  * cfg80211_crit_proto_stopped() - indicate critical protocol stopped by driver.
9322  *
9323  * @wdev: the wireless device for which critical protocol is stopped.
9324  * @gfp: allocation flags
9325  *
9326  * This function can be called by the driver to indicate it has reverted
9327  * operation back to normal. One reason could be that the duration given
9328  * by .crit_proto_start() has expired.
9329  */
9330 void cfg80211_crit_proto_stopped(struct wireless_dev *wdev, gfp_t gfp);
9331 
9332 /**
9333  * ieee80211_get_num_supported_channels - get number of channels device has
9334  * @wiphy: the wiphy
9335  *
9336  * Return: the number of channels supported by the device.
9337  */
9338 unsigned int ieee80211_get_num_supported_channels(struct wiphy *wiphy);
9339 
9340 /**
9341  * cfg80211_check_combinations - check interface combinations
9342  *
9343  * @wiphy: the wiphy
9344  * @params: the interface combinations parameter
9345  *
9346  * This function can be called by the driver to check whether a
9347  * combination of interfaces and their types are allowed according to
9348  * the interface combinations.
9349  *
9350  * Return: 0 if combinations are allowed. Non-zero on error.
9351  */
9352 int cfg80211_check_combinations(struct wiphy *wiphy,
9353 				struct iface_combination_params *params);
9354 
9355 /**
9356  * cfg80211_iter_combinations - iterate over matching combinations
9357  *
9358  * @wiphy: the wiphy
9359  * @params: the interface combinations parameter
9360  * @iter: function to call for each matching combination
9361  * @data: pointer to pass to iter function
9362  *
9363  * This function can be called by the driver to check what possible
9364  * combinations it fits in at a given moment, e.g. for channel switching
9365  * purposes.
9366  *
9367  * Return: 0 on success. Non-zero on error.
9368  */
9369 int cfg80211_iter_combinations(struct wiphy *wiphy,
9370 			       struct iface_combination_params *params,
9371 			       void (*iter)(const struct ieee80211_iface_combination *c,
9372 					    void *data),
9373 			       void *data);
9374 
9375 /**
9376  * cfg80211_stop_iface - trigger interface disconnection
9377  *
9378  * @wiphy: the wiphy
9379  * @wdev: wireless device
9380  * @gfp: context flags
9381  *
9382  * Trigger interface to be stopped as if AP was stopped, IBSS/mesh left, STA
9383  * disconnected.
9384  *
9385  * Note: This doesn't need any locks and is asynchronous.
9386  */
9387 void cfg80211_stop_iface(struct wiphy *wiphy, struct wireless_dev *wdev,
9388 			 gfp_t gfp);
9389 
9390 /**
9391  * cfg80211_shutdown_all_interfaces - shut down all interfaces for a wiphy
9392  * @wiphy: the wiphy to shut down
9393  *
9394  * This function shuts down all interfaces belonging to this wiphy by
9395  * calling dev_close() (and treating non-netdev interfaces as needed).
9396  * It shouldn't really be used unless there are some fatal device errors
9397  * that really can't be recovered in any other way.
9398  *
9399  * Callers must hold the RTNL and be able to deal with callbacks into
9400  * the driver while the function is running.
9401  */
9402 void cfg80211_shutdown_all_interfaces(struct wiphy *wiphy);
9403 
9404 /**
9405  * wiphy_ext_feature_set - set the extended feature flag
9406  *
9407  * @wiphy: the wiphy to modify.
9408  * @ftidx: extended feature bit index.
9409  *
9410  * The extended features are flagged in multiple bytes (see
9411  * &struct wiphy.@ext_features)
9412  */
9413 static inline void wiphy_ext_feature_set(struct wiphy *wiphy,
9414 					 enum nl80211_ext_feature_index ftidx)
9415 {
9416 	u8 *ft_byte;
9417 
9418 	ft_byte = &wiphy->ext_features[ftidx / 8];
9419 	*ft_byte |= BIT(ftidx % 8);
9420 }
9421 
9422 /**
9423  * wiphy_ext_feature_isset - check the extended feature flag
9424  *
9425  * @wiphy: the wiphy to modify.
9426  * @ftidx: extended feature bit index.
9427  *
9428  * The extended features are flagged in multiple bytes (see
9429  * &struct wiphy.@ext_features)
9430  *
9431  * Return: %true if extended feature flag is set, %false otherwise
9432  */
9433 static inline bool
9434 wiphy_ext_feature_isset(struct wiphy *wiphy,
9435 			enum nl80211_ext_feature_index ftidx)
9436 {
9437 	u8 ft_byte;
9438 
9439 	ft_byte = wiphy->ext_features[ftidx / 8];
9440 	return (ft_byte & BIT(ftidx % 8)) != 0;
9441 }
9442 
9443 /**
9444  * cfg80211_free_nan_func - free NAN function
9445  * @f: NAN function that should be freed
9446  *
9447  * Frees all the NAN function and all it's allocated members.
9448  */
9449 void cfg80211_free_nan_func(struct cfg80211_nan_func *f);
9450 
9451 /**
9452  * struct cfg80211_nan_match_params - NAN match parameters
9453  * @type: the type of the function that triggered a match. If it is
9454  *	 %NL80211_NAN_FUNC_SUBSCRIBE it means that we replied to a subscriber.
9455  *	 If it is %NL80211_NAN_FUNC_PUBLISH, it means that we got a discovery
9456  *	 result.
9457  *	 If it is %NL80211_NAN_FUNC_FOLLOW_UP, we received a follow up.
9458  * @inst_id: the local instance id
9459  * @peer_inst_id: the instance id of the peer's function
9460  * @addr: the MAC address of the peer
9461  * @info_len: the length of the &info
9462  * @info: the Service Specific Info from the peer (if any)
9463  * @cookie: unique identifier of the corresponding function
9464  */
9465 struct cfg80211_nan_match_params {
9466 	enum nl80211_nan_function_type type;
9467 	u8 inst_id;
9468 	u8 peer_inst_id;
9469 	const u8 *addr;
9470 	u8 info_len;
9471 	const u8 *info;
9472 	u64 cookie;
9473 };
9474 
9475 /**
9476  * cfg80211_nan_match - report a match for a NAN function.
9477  * @wdev: the wireless device reporting the match
9478  * @match: match notification parameters
9479  * @gfp: allocation flags
9480  *
9481  * This function reports that the a NAN function had a match. This
9482  * can be a subscribe that had a match or a solicited publish that
9483  * was sent. It can also be a follow up that was received.
9484  */
9485 void cfg80211_nan_match(struct wireless_dev *wdev,
9486 			struct cfg80211_nan_match_params *match, gfp_t gfp);
9487 
9488 /**
9489  * cfg80211_nan_func_terminated - notify about NAN function termination.
9490  *
9491  * @wdev: the wireless device reporting the match
9492  * @inst_id: the local instance id
9493  * @reason: termination reason (one of the NL80211_NAN_FUNC_TERM_REASON_*)
9494  * @cookie: unique NAN function identifier
9495  * @gfp: allocation flags
9496  *
9497  * This function reports that the a NAN function is terminated.
9498  */
9499 void cfg80211_nan_func_terminated(struct wireless_dev *wdev,
9500 				  u8 inst_id,
9501 				  enum nl80211_nan_func_term_reason reason,
9502 				  u64 cookie, gfp_t gfp);
9503 
9504 /* ethtool helper */
9505 void cfg80211_get_drvinfo(struct net_device *dev, struct ethtool_drvinfo *info);
9506 
9507 /**
9508  * cfg80211_external_auth_request - userspace request for authentication
9509  * @netdev: network device
9510  * @params: External authentication parameters
9511  * @gfp: allocation flags
9512  * Returns: 0 on success, < 0 on error
9513  */
9514 int cfg80211_external_auth_request(struct net_device *netdev,
9515 				   struct cfg80211_external_auth_params *params,
9516 				   gfp_t gfp);
9517 
9518 /**
9519  * cfg80211_pmsr_report - report peer measurement result data
9520  * @wdev: the wireless device reporting the measurement
9521  * @req: the original measurement request
9522  * @result: the result data
9523  * @gfp: allocation flags
9524  */
9525 void cfg80211_pmsr_report(struct wireless_dev *wdev,
9526 			  struct cfg80211_pmsr_request *req,
9527 			  struct cfg80211_pmsr_result *result,
9528 			  gfp_t gfp);
9529 
9530 /**
9531  * cfg80211_pmsr_complete - report peer measurement completed
9532  * @wdev: the wireless device reporting the measurement
9533  * @req: the original measurement request
9534  * @gfp: allocation flags
9535  *
9536  * Report that the entire measurement completed, after this
9537  * the request pointer will no longer be valid.
9538  */
9539 void cfg80211_pmsr_complete(struct wireless_dev *wdev,
9540 			    struct cfg80211_pmsr_request *req,
9541 			    gfp_t gfp);
9542 
9543 /**
9544  * cfg80211_iftype_allowed - check whether the interface can be allowed
9545  * @wiphy: the wiphy
9546  * @iftype: interface type
9547  * @is_4addr: use_4addr flag, must be '0' when check_swif is '1'
9548  * @check_swif: check iftype against software interfaces
9549  *
9550  * Check whether the interface is allowed to operate; additionally, this API
9551  * can be used to check iftype against the software interfaces when
9552  * check_swif is '1'.
9553  *
9554  * Return: %true if allowed, %false otherwise
9555  */
9556 bool cfg80211_iftype_allowed(struct wiphy *wiphy, enum nl80211_iftype iftype,
9557 			     bool is_4addr, u8 check_swif);
9558 
9559 
9560 /**
9561  * cfg80211_assoc_comeback - notification of association that was
9562  * temporarily rejected with a comeback
9563  * @netdev: network device
9564  * @ap_addr: AP (MLD) address that rejected the association
9565  * @timeout: timeout interval value TUs.
9566  *
9567  * this function may sleep. the caller must hold the corresponding wdev's mutex.
9568  */
9569 void cfg80211_assoc_comeback(struct net_device *netdev,
9570 			     const u8 *ap_addr, u32 timeout);
9571 
9572 /* Logging, debugging and troubleshooting/diagnostic helpers. */
9573 
9574 /* wiphy_printk helpers, similar to dev_printk */
9575 
9576 #define wiphy_printk(level, wiphy, format, args...)		\
9577 	dev_printk(level, &(wiphy)->dev, format, ##args)
9578 #define wiphy_emerg(wiphy, format, args...)			\
9579 	dev_emerg(&(wiphy)->dev, format, ##args)
9580 #define wiphy_alert(wiphy, format, args...)			\
9581 	dev_alert(&(wiphy)->dev, format, ##args)
9582 #define wiphy_crit(wiphy, format, args...)			\
9583 	dev_crit(&(wiphy)->dev, format, ##args)
9584 #define wiphy_err(wiphy, format, args...)			\
9585 	dev_err(&(wiphy)->dev, format, ##args)
9586 #define wiphy_warn(wiphy, format, args...)			\
9587 	dev_warn(&(wiphy)->dev, format, ##args)
9588 #define wiphy_notice(wiphy, format, args...)			\
9589 	dev_notice(&(wiphy)->dev, format, ##args)
9590 #define wiphy_info(wiphy, format, args...)			\
9591 	dev_info(&(wiphy)->dev, format, ##args)
9592 #define wiphy_info_once(wiphy, format, args...)			\
9593 	dev_info_once(&(wiphy)->dev, format, ##args)
9594 
9595 #define wiphy_err_ratelimited(wiphy, format, args...)		\
9596 	dev_err_ratelimited(&(wiphy)->dev, format, ##args)
9597 #define wiphy_warn_ratelimited(wiphy, format, args...)		\
9598 	dev_warn_ratelimited(&(wiphy)->dev, format, ##args)
9599 
9600 #define wiphy_debug(wiphy, format, args...)			\
9601 	wiphy_printk(KERN_DEBUG, wiphy, format, ##args)
9602 
9603 #define wiphy_dbg(wiphy, format, args...)			\
9604 	dev_dbg(&(wiphy)->dev, format, ##args)
9605 
9606 #if defined(VERBOSE_DEBUG)
9607 #define wiphy_vdbg	wiphy_dbg
9608 #else
9609 #define wiphy_vdbg(wiphy, format, args...)				\
9610 ({									\
9611 	if (0)								\
9612 		wiphy_printk(KERN_DEBUG, wiphy, format, ##args);	\
9613 	0;								\
9614 })
9615 #endif
9616 
9617 /*
9618  * wiphy_WARN() acts like wiphy_printk(), but with the key difference
9619  * of using a WARN/WARN_ON to get the message out, including the
9620  * file/line information and a backtrace.
9621  */
9622 #define wiphy_WARN(wiphy, format, args...)			\
9623 	WARN(1, "wiphy: %s\n" format, wiphy_name(wiphy), ##args);
9624 
9625 /**
9626  * cfg80211_update_owe_info_event - Notify the peer's OWE info to user space
9627  * @netdev: network device
9628  * @owe_info: peer's owe info
9629  * @gfp: allocation flags
9630  */
9631 void cfg80211_update_owe_info_event(struct net_device *netdev,
9632 				    struct cfg80211_update_owe_info *owe_info,
9633 				    gfp_t gfp);
9634 
9635 /**
9636  * cfg80211_bss_flush - resets all the scan entries
9637  * @wiphy: the wiphy
9638  */
9639 void cfg80211_bss_flush(struct wiphy *wiphy);
9640 
9641 /**
9642  * cfg80211_bss_color_notify - notify about bss color event
9643  * @dev: network device
9644  * @cmd: the actual event we want to notify
9645  * @count: the number of TBTTs until the color change happens
9646  * @color_bitmap: representations of the colors that the local BSS is aware of
9647  * @link_id: valid link_id in case of MLO or 0 for non-MLO.
9648  *
9649  * Return: 0 on success. Non-zero on error.
9650  */
9651 int cfg80211_bss_color_notify(struct net_device *dev,
9652 			      enum nl80211_commands cmd, u8 count,
9653 			      u64 color_bitmap, u8 link_id);
9654 
9655 /**
9656  * cfg80211_obss_color_collision_notify - notify about bss color collision
9657  * @dev: network device
9658  * @color_bitmap: representations of the colors that the local BSS is aware of
9659  * @link_id: valid link_id in case of MLO or 0 for non-MLO.
9660  *
9661  * Return: 0 on success. Non-zero on error.
9662  */
9663 static inline int cfg80211_obss_color_collision_notify(struct net_device *dev,
9664 						       u64 color_bitmap,
9665 						       u8 link_id)
9666 {
9667 	return cfg80211_bss_color_notify(dev, NL80211_CMD_OBSS_COLOR_COLLISION,
9668 					 0, color_bitmap, link_id);
9669 }
9670 
9671 /**
9672  * cfg80211_color_change_started_notify - notify color change start
9673  * @dev: the device on which the color is switched
9674  * @count: the number of TBTTs until the color change happens
9675  * @link_id: valid link_id in case of MLO or 0 for non-MLO.
9676  *
9677  * Inform the userspace about the color change that has started.
9678  *
9679  * Return: 0 on success. Non-zero on error.
9680  */
9681 static inline int cfg80211_color_change_started_notify(struct net_device *dev,
9682 						       u8 count, u8 link_id)
9683 {
9684 	return cfg80211_bss_color_notify(dev, NL80211_CMD_COLOR_CHANGE_STARTED,
9685 					 count, 0, link_id);
9686 }
9687 
9688 /**
9689  * cfg80211_color_change_aborted_notify - notify color change abort
9690  * @dev: the device on which the color is switched
9691  * @link_id: valid link_id in case of MLO or 0 for non-MLO.
9692  *
9693  * Inform the userspace about the color change that has aborted.
9694  *
9695  * Return: 0 on success. Non-zero on error.
9696  */
9697 static inline int cfg80211_color_change_aborted_notify(struct net_device *dev,
9698 						       u8 link_id)
9699 {
9700 	return cfg80211_bss_color_notify(dev, NL80211_CMD_COLOR_CHANGE_ABORTED,
9701 					 0, 0, link_id);
9702 }
9703 
9704 /**
9705  * cfg80211_color_change_notify - notify color change completion
9706  * @dev: the device on which the color was switched
9707  * @link_id: valid link_id in case of MLO or 0 for non-MLO.
9708  *
9709  * Inform the userspace about the color change that has completed.
9710  *
9711  * Return: 0 on success. Non-zero on error.
9712  */
9713 static inline int cfg80211_color_change_notify(struct net_device *dev,
9714 					       u8 link_id)
9715 {
9716 	return cfg80211_bss_color_notify(dev,
9717 					 NL80211_CMD_COLOR_CHANGE_COMPLETED,
9718 					 0, 0, link_id);
9719 }
9720 
9721 /**
9722  * cfg80211_links_removed - Notify about removed STA MLD setup links.
9723  * @dev: network device.
9724  * @link_mask: BIT mask of removed STA MLD setup link IDs.
9725  *
9726  * Inform cfg80211 and the userspace about removed STA MLD setup links due to
9727  * AP MLD removing the corresponding affiliated APs with Multi-Link
9728  * reconfiguration. Note that it's not valid to remove all links, in this
9729  * case disconnect instead.
9730  * Also note that the wdev mutex must be held.
9731  */
9732 void cfg80211_links_removed(struct net_device *dev, u16 link_mask);
9733 
9734 /**
9735  * struct cfg80211_mlo_reconf_done_data - MLO reconfiguration data
9736  * @buf: MLO Reconfiguration Response frame (header + body)
9737  * @len: length of the frame data
9738  * @added_links: BIT mask of links successfully added to the association
9739  * @links: per-link information indexed by link ID
9740  * @links.bss: the BSS that MLO reconfiguration was requested for, ownership of
9741  *      the pointer moves to cfg80211 in the call to
9742  *      cfg80211_mlo_reconf_add_done().
9743  *
9744  * The BSS pointer must be set for each link for which 'add' operation was
9745  * requested in the assoc_ml_reconf callback.
9746  */
9747 struct cfg80211_mlo_reconf_done_data {
9748 	const u8 *buf;
9749 	size_t len;
9750 	u16 added_links;
9751 	struct {
9752 		struct cfg80211_bss *bss;
9753 	} links[IEEE80211_MLD_MAX_NUM_LINKS];
9754 };
9755 
9756 /**
9757  * cfg80211_mlo_reconf_add_done - Notify about MLO reconfiguration result
9758  * @dev: network device.
9759  * @data: MLO reconfiguration done data, &struct cfg80211_mlo_reconf_done_data
9760  *
9761  * Inform cfg80211 and the userspace that processing of ML reconfiguration
9762  * request to add links to the association is done.
9763  */
9764 void cfg80211_mlo_reconf_add_done(struct net_device *dev,
9765 				  struct cfg80211_mlo_reconf_done_data *data);
9766 
9767 /**
9768  * cfg80211_schedule_channels_check - schedule regulatory check if needed
9769  * @wdev: the wireless device to check
9770  *
9771  * In case the device supports NO_IR or DFS relaxations, schedule regulatory
9772  * channels check, as previous concurrent operation conditions may not
9773  * hold anymore.
9774  */
9775 void cfg80211_schedule_channels_check(struct wireless_dev *wdev);
9776 
9777 /**
9778  * cfg80211_epcs_changed - Notify about a change in EPCS state
9779  * @netdev: the wireless device whose EPCS state changed
9780  * @enabled: set to true if EPCS was enabled, otherwise set to false.
9781  */
9782 void cfg80211_epcs_changed(struct net_device *netdev, bool enabled);
9783 
9784 #ifdef CONFIG_CFG80211_DEBUGFS
9785 /**
9786  * wiphy_locked_debugfs_read - do a locked read in debugfs
9787  * @wiphy: the wiphy to use
9788  * @file: the file being read
9789  * @buf: the buffer to fill and then read from
9790  * @bufsize: size of the buffer
9791  * @userbuf: the user buffer to copy to
9792  * @count: read count
9793  * @ppos: read position
9794  * @handler: the read handler to call (under wiphy lock)
9795  * @data: additional data to pass to the read handler
9796  *
9797  * Return: the number of characters read, or a negative errno
9798  */
9799 ssize_t wiphy_locked_debugfs_read(struct wiphy *wiphy, struct file *file,
9800 				  char *buf, size_t bufsize,
9801 				  char __user *userbuf, size_t count,
9802 				  loff_t *ppos,
9803 				  ssize_t (*handler)(struct wiphy *wiphy,
9804 						     struct file *file,
9805 						     char *buf,
9806 						     size_t bufsize,
9807 						     void *data),
9808 				  void *data);
9809 
9810 /**
9811  * wiphy_locked_debugfs_write - do a locked write in debugfs
9812  * @wiphy: the wiphy to use
9813  * @file: the file being written to
9814  * @buf: the buffer to copy the user data to
9815  * @bufsize: size of the buffer
9816  * @userbuf: the user buffer to copy from
9817  * @count: read count
9818  * @handler: the write handler to call (under wiphy lock)
9819  * @data: additional data to pass to the write handler
9820  *
9821  * Return: the number of characters written, or a negative errno
9822  */
9823 ssize_t wiphy_locked_debugfs_write(struct wiphy *wiphy, struct file *file,
9824 				   char *buf, size_t bufsize,
9825 				   const char __user *userbuf, size_t count,
9826 				   ssize_t (*handler)(struct wiphy *wiphy,
9827 						      struct file *file,
9828 						      char *buf,
9829 						      size_t count,
9830 						      void *data),
9831 				   void *data);
9832 #endif
9833 
9834 #endif /* __NET_CFG80211_H */
9835