ath6kl: rename vif init and cleanup functions
[cascardo/linux.git] / drivers / net / wireless / ath / ath6kl / cfg80211.c
index f517eb8..7e92dc9 100644 (file)
@@ -15,6 +15,7 @@
  */
 
 #include <linux/moduleparam.h>
+#include <linux/inetdevice.h>
 
 #include "core.h"
 #include "cfg80211.h"
@@ -123,17 +124,50 @@ static struct ieee80211_supported_band ath6kl_band_5ghz = {
        .bitrates = ath6kl_a_rates,
 };
 
-static int ath6kl_set_wpa_version(struct ath6kl *ar,
+#define CCKM_KRK_CIPHER_SUITE 0x004096ff /* use for KRK */
+
+/* returns true if scheduled scan was stopped */
+static bool __ath6kl_cfg80211_sscan_stop(struct ath6kl_vif *vif)
+{
+       struct ath6kl *ar = vif->ar;
+
+       if (ar->state != ATH6KL_STATE_SCHED_SCAN)
+               return false;
+
+       del_timer_sync(&vif->sched_scan_timer);
+
+       ath6kl_wmi_set_host_sleep_mode_cmd(ar->wmi, vif->fw_vif_idx,
+                                          ATH6KL_HOST_MODE_AWAKE);
+
+       ar->state = ATH6KL_STATE_ON;
+
+       return true;
+}
+
+static void ath6kl_cfg80211_sscan_disable(struct ath6kl_vif *vif)
+{
+       struct ath6kl *ar = vif->ar;
+       bool stopped;
+
+       stopped = __ath6kl_cfg80211_sscan_stop(vif);
+
+       if (!stopped)
+               return;
+
+       cfg80211_sched_scan_stopped(ar->wiphy);
+}
+
+static int ath6kl_set_wpa_version(struct ath6kl_vif *vif,
                                  enum nl80211_wpa_versions wpa_version)
 {
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: %u\n", __func__, wpa_version);
 
        if (!wpa_version) {
-               ar->auth_mode = NONE_AUTH;
+               vif->auth_mode = NONE_AUTH;
        } else if (wpa_version & NL80211_WPA_VERSION_2) {
-               ar->auth_mode = WPA2_AUTH;
+               vif->auth_mode = WPA2_AUTH;
        } else if (wpa_version & NL80211_WPA_VERSION_1) {
-               ar->auth_mode = WPA_AUTH;
+               vif->auth_mode = WPA_AUTH;
        } else {
                ath6kl_err("%s: %u not supported\n", __func__, wpa_version);
                return -ENOTSUPP;
@@ -142,25 +176,24 @@ static int ath6kl_set_wpa_version(struct ath6kl *ar,
        return 0;
 }
 
-static int ath6kl_set_auth_type(struct ath6kl *ar,
+static int ath6kl_set_auth_type(struct ath6kl_vif *vif,
                                enum nl80211_auth_type auth_type)
 {
-
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: 0x%x\n", __func__, auth_type);
 
        switch (auth_type) {
        case NL80211_AUTHTYPE_OPEN_SYSTEM:
-               ar->dot11_auth_mode = OPEN_AUTH;
+               vif->dot11_auth_mode = OPEN_AUTH;
                break;
        case NL80211_AUTHTYPE_SHARED_KEY:
-               ar->dot11_auth_mode = SHARED_AUTH;
+               vif->dot11_auth_mode = SHARED_AUTH;
                break;
        case NL80211_AUTHTYPE_NETWORK_EAP:
-               ar->dot11_auth_mode = LEAP_AUTH;
+               vif->dot11_auth_mode = LEAP_AUTH;
                break;
 
        case NL80211_AUTHTYPE_AUTOMATIC:
-               ar->dot11_auth_mode = OPEN_AUTH | SHARED_AUTH;
+               vif->dot11_auth_mode = OPEN_AUTH | SHARED_AUTH;
                break;
 
        default:
@@ -171,11 +204,11 @@ static int ath6kl_set_auth_type(struct ath6kl *ar,
        return 0;
 }
 
-static int ath6kl_set_cipher(struct ath6kl *ar, u32 cipher, bool ucast)
+static int ath6kl_set_cipher(struct ath6kl_vif *vif, u32 cipher, bool ucast)
 {
-       u8 *ar_cipher = ucast ? &ar->prwise_crypto : &ar->grp_crypto;
-       u8 *ar_cipher_len = ucast ? &ar->prwise_crypto_len :
-               &ar->grp_crypto_len;
+       u8 *ar_cipher = ucast ? &vif->prwise_crypto : &vif->grp_crypto;
+       u8 *ar_cipher_len = ucast ? &vif->prwise_crypto_len :
+               &vif->grp_crypto_len;
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: cipher 0x%x, ucast %u\n",
                   __func__, cipher, ucast);
@@ -202,6 +235,10 @@ static int ath6kl_set_cipher(struct ath6kl *ar, u32 cipher, bool ucast)
                *ar_cipher = AES_CRYPT;
                *ar_cipher_len = 0;
                break;
+       case WLAN_CIPHER_SUITE_SMS4:
+               *ar_cipher = WAPI_CRYPT;
+               *ar_cipher_len = 0;
+               break;
        default:
                ath6kl_err("cipher 0x%x not supported\n", cipher);
                return -ENOTSUPP;
@@ -210,28 +247,35 @@ static int ath6kl_set_cipher(struct ath6kl *ar, u32 cipher, bool ucast)
        return 0;
 }
 
-static void ath6kl_set_key_mgmt(struct ath6kl *ar, u32 key_mgmt)
+static void ath6kl_set_key_mgmt(struct ath6kl_vif *vif, u32 key_mgmt)
 {
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: 0x%x\n", __func__, key_mgmt);
 
        if (key_mgmt == WLAN_AKM_SUITE_PSK) {
-               if (ar->auth_mode == WPA_AUTH)
-                       ar->auth_mode = WPA_PSK_AUTH;
-               else if (ar->auth_mode == WPA2_AUTH)
-                       ar->auth_mode = WPA2_PSK_AUTH;
+               if (vif->auth_mode == WPA_AUTH)
+                       vif->auth_mode = WPA_PSK_AUTH;
+               else if (vif->auth_mode == WPA2_AUTH)
+                       vif->auth_mode = WPA2_PSK_AUTH;
+       } else if (key_mgmt == 0x00409600) {
+               if (vif->auth_mode == WPA_AUTH)
+                       vif->auth_mode = WPA_AUTH_CCKM;
+               else if (vif->auth_mode == WPA2_AUTH)
+                       vif->auth_mode = WPA2_AUTH_CCKM;
        } else if (key_mgmt != WLAN_AKM_SUITE_8021X) {
-               ar->auth_mode = NONE_AUTH;
+               vif->auth_mode = NONE_AUTH;
        }
 }
 
-static bool ath6kl_cfg80211_ready(struct ath6kl *ar)
+static bool ath6kl_cfg80211_ready(struct ath6kl_vif *vif)
 {
+       struct ath6kl *ar = vif->ar;
+
        if (!test_bit(WMI_READY, &ar->flag)) {
                ath6kl_err("wmi is not ready\n");
                return false;
        }
 
-       if (!test_bit(WLAN_ENABLED, &ar->flag)) {
+       if (!test_bit(WLAN_ENABLED, &vif->flags)) {
                ath6kl_err("wlan disabled\n");
                return false;
        }
@@ -239,15 +283,146 @@ static bool ath6kl_cfg80211_ready(struct ath6kl *ar)
        return true;
 }
 
+static bool ath6kl_is_wpa_ie(const u8 *pos)
+{
+       return pos[0] == WLAN_EID_WPA && pos[1] >= 4 &&
+               pos[2] == 0x00 && pos[3] == 0x50 &&
+               pos[4] == 0xf2 && pos[5] == 0x01;
+}
+
+static bool ath6kl_is_rsn_ie(const u8 *pos)
+{
+       return pos[0] == WLAN_EID_RSN;
+}
+
+static bool ath6kl_is_wps_ie(const u8 *pos)
+{
+       return (pos[0] == WLAN_EID_VENDOR_SPECIFIC &&
+               pos[1] >= 4 &&
+               pos[2] == 0x00 && pos[3] == 0x50 && pos[4] == 0xf2 &&
+               pos[5] == 0x04);
+}
+
+static int ath6kl_set_assoc_req_ies(struct ath6kl_vif *vif, const u8 *ies,
+                                   size_t ies_len)
+{
+       struct ath6kl *ar = vif->ar;
+       const u8 *pos;
+       u8 *buf = NULL;
+       size_t len = 0;
+       int ret;
+
+       /*
+        * Clear previously set flag
+        */
+
+       ar->connect_ctrl_flags &= ~CONNECT_WPS_FLAG;
+
+       /*
+        * Filter out RSN/WPA IE(s)
+        */
+
+       if (ies && ies_len) {
+               buf = kmalloc(ies_len, GFP_KERNEL);
+               if (buf == NULL)
+                       return -ENOMEM;
+               pos = ies;
+
+               while (pos + 1 < ies + ies_len) {
+                       if (pos + 2 + pos[1] > ies + ies_len)
+                               break;
+                       if (!(ath6kl_is_wpa_ie(pos) || ath6kl_is_rsn_ie(pos))) {
+                               memcpy(buf + len, pos, 2 + pos[1]);
+                               len += 2 + pos[1];
+                       }
+
+                       if (ath6kl_is_wps_ie(pos))
+                               ar->connect_ctrl_flags |= CONNECT_WPS_FLAG;
+
+                       pos += 2 + pos[1];
+               }
+       }
+
+       ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
+                                      WMI_FRAME_ASSOC_REQ, buf, len);
+       kfree(buf);
+       return ret;
+}
+
+static int ath6kl_nliftype_to_drv_iftype(enum nl80211_iftype type, u8 *nw_type)
+{
+       switch (type) {
+       case NL80211_IFTYPE_STATION:
+               *nw_type = INFRA_NETWORK;
+               break;
+       case NL80211_IFTYPE_ADHOC:
+               *nw_type = ADHOC_NETWORK;
+               break;
+       case NL80211_IFTYPE_AP:
+               *nw_type = AP_NETWORK;
+               break;
+       case NL80211_IFTYPE_P2P_CLIENT:
+               *nw_type = INFRA_NETWORK;
+               break;
+       case NL80211_IFTYPE_P2P_GO:
+               *nw_type = AP_NETWORK;
+               break;
+       default:
+               ath6kl_err("invalid interface type %u\n", type);
+               return -ENOTSUPP;
+       }
+
+       return 0;
+}
+
+static bool ath6kl_is_valid_iftype(struct ath6kl *ar, enum nl80211_iftype type,
+                                  u8 *if_idx, u8 *nw_type)
+{
+       int i;
+
+       if (ath6kl_nliftype_to_drv_iftype(type, nw_type))
+               return false;
+
+       if (ar->ibss_if_active || ((type == NL80211_IFTYPE_ADHOC) &&
+           ar->num_vif))
+               return false;
+
+       if (type == NL80211_IFTYPE_STATION ||
+           type == NL80211_IFTYPE_AP || type == NL80211_IFTYPE_ADHOC) {
+               for (i = 0; i < ar->vif_max; i++) {
+                       if ((ar->avail_idx_map >> i) & BIT(0)) {
+                               *if_idx = i;
+                               return true;
+                       }
+               }
+       }
+
+       if (type == NL80211_IFTYPE_P2P_CLIENT ||
+           type == NL80211_IFTYPE_P2P_GO) {
+               for (i = ar->max_norm_iface; i < ar->vif_max; i++) {
+                       if ((ar->avail_idx_map >> i) & BIT(0)) {
+                               *if_idx = i;
+                               return true;
+                       }
+               }
+       }
+
+       return false;
+}
+
 static int ath6kl_cfg80211_connect(struct wiphy *wiphy, struct net_device *dev,
                                   struct cfg80211_connect_params *sme)
 {
        struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
        int status;
+       u8 nw_subtype = (ar->p2p) ? SUBTYPE_P2PDEV : SUBTYPE_NONE;
+
+       ath6kl_cfg80211_sscan_disable(vif);
 
-       ar->sme_state = SME_CONNECTING;
+       vif->sme_state = SME_CONNECTING;
 
-       if (!ath6kl_cfg80211_ready(ar))
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
        if (test_bit(DESTROY_IN_PROGRESS, &ar->flag)) {
@@ -287,12 +462,22 @@ static int ath6kl_cfg80211_connect(struct wiphy *wiphy, struct net_device *dev,
                }
        }
 
-       if (test_bit(CONNECTED, &ar->flag) &&
-           ar->ssid_len == sme->ssid_len &&
-           !memcmp(ar->ssid, sme->ssid, ar->ssid_len)) {
-               ar->reconnect_flag = true;
-               status = ath6kl_wmi_reconnect_cmd(ar->wmi, ar->req_bssid,
-                                                 ar->ch_hint);
+       status = ath6kl_set_assoc_req_ies(vif, sme->ie, sme->ie_len);
+       if (status) {
+               up(&ar->sem);
+               return status;
+       }
+
+       if (sme->ie == NULL || sme->ie_len == 0)
+               ar->connect_ctrl_flags &= ~CONNECT_WPS_FLAG;
+
+       if (test_bit(CONNECTED, &vif->flags) &&
+           vif->ssid_len == sme->ssid_len &&
+           !memcmp(vif->ssid, sme->ssid, vif->ssid_len)) {
+               vif->reconnect_flag = true;
+               status = ath6kl_wmi_reconnect_cmd(ar->wmi, vif->fw_vif_idx,
+                                                 vif->req_bssid,
+                                                 vif->ch_hint);
 
                up(&ar->sem);
                if (status) {
@@ -300,102 +485,106 @@ static int ath6kl_cfg80211_connect(struct wiphy *wiphy, struct net_device *dev,
                        return -EIO;
                }
                return 0;
-       } else if (ar->ssid_len == sme->ssid_len &&
-                  !memcmp(ar->ssid, sme->ssid, ar->ssid_len)) {
-               ath6kl_disconnect(ar);
+       } else if (vif->ssid_len == sme->ssid_len &&
+                  !memcmp(vif->ssid, sme->ssid, vif->ssid_len)) {
+               ath6kl_disconnect(vif);
        }
 
-       memset(ar->ssid, 0, sizeof(ar->ssid));
-       ar->ssid_len = sme->ssid_len;
-       memcpy(ar->ssid, sme->ssid, sme->ssid_len);
+       memset(vif->ssid, 0, sizeof(vif->ssid));
+       vif->ssid_len = sme->ssid_len;
+       memcpy(vif->ssid, sme->ssid, sme->ssid_len);
 
        if (sme->channel)
-               ar->ch_hint = sme->channel->center_freq;
+               vif->ch_hint = sme->channel->center_freq;
 
-       memset(ar->req_bssid, 0, sizeof(ar->req_bssid));
+       memset(vif->req_bssid, 0, sizeof(vif->req_bssid));
        if (sme->bssid && !is_broadcast_ether_addr(sme->bssid))
-               memcpy(ar->req_bssid, sme->bssid, sizeof(ar->req_bssid));
+               memcpy(vif->req_bssid, sme->bssid, sizeof(vif->req_bssid));
 
-       ath6kl_set_wpa_version(ar, sme->crypto.wpa_versions);
+       ath6kl_set_wpa_version(vif, sme->crypto.wpa_versions);
 
-       status = ath6kl_set_auth_type(ar, sme->auth_type);
+       status = ath6kl_set_auth_type(vif, sme->auth_type);
        if (status) {
                up(&ar->sem);
                return status;
        }
 
        if (sme->crypto.n_ciphers_pairwise)
-               ath6kl_set_cipher(ar, sme->crypto.ciphers_pairwise[0], true);
+               ath6kl_set_cipher(vif, sme->crypto.ciphers_pairwise[0], true);
        else
-               ath6kl_set_cipher(ar, 0, true);
+               ath6kl_set_cipher(vif, 0, true);
 
-       ath6kl_set_cipher(ar, sme->crypto.cipher_group, false);
+       ath6kl_set_cipher(vif, sme->crypto.cipher_group, false);
 
        if (sme->crypto.n_akm_suites)
-               ath6kl_set_key_mgmt(ar, sme->crypto.akm_suites[0]);
+               ath6kl_set_key_mgmt(vif, sme->crypto.akm_suites[0]);
 
        if ((sme->key_len) &&
-           (ar->auth_mode == NONE_AUTH) && (ar->prwise_crypto == WEP_CRYPT)) {
+           (vif->auth_mode == NONE_AUTH) &&
+           (vif->prwise_crypto == WEP_CRYPT)) {
                struct ath6kl_key *key = NULL;
 
-               if (sme->key_idx < WMI_MIN_KEY_INDEX ||
-                   sme->key_idx > WMI_MAX_KEY_INDEX) {
+               if (sme->key_idx > WMI_MAX_KEY_INDEX) {
                        ath6kl_err("key index %d out of bounds\n",
                                   sme->key_idx);
                        up(&ar->sem);
                        return -ENOENT;
                }
 
-               key = &ar->keys[sme->key_idx];
+               key = &vif->keys[sme->key_idx];
                key->key_len = sme->key_len;
                memcpy(key->key, sme->key, key->key_len);
-               key->cipher = ar->prwise_crypto;
-               ar->def_txkey_index = sme->key_idx;
+               key->cipher = vif->prwise_crypto;
+               vif->def_txkey_index = sme->key_idx;
 
-               ath6kl_wmi_addkey_cmd(ar->wmi, sme->key_idx,
-                                     ar->prwise_crypto,
+               ath6kl_wmi_addkey_cmd(ar->wmi, vif->fw_vif_idx, sme->key_idx,
+                                     vif->prwise_crypto,
                                      GROUP_USAGE | TX_USAGE,
                                      key->key_len,
-                                     NULL,
+                                     NULL, 0,
                                      key->key, KEY_OP_INIT_VAL, NULL,
                                      NO_SYNC_WMIFLAG);
        }
 
        if (!ar->usr_bss_filter) {
-               clear_bit(CLEAR_BSSFILTER_ON_BEACON, &ar->flag);
-               if (ath6kl_wmi_bssfilter_cmd(ar->wmi, ALL_BSS_FILTER, 0) != 0) {
+               clear_bit(CLEAR_BSSFILTER_ON_BEACON, &vif->flags);
+               if (ath6kl_wmi_bssfilter_cmd(ar->wmi, vif->fw_vif_idx,
+                   ALL_BSS_FILTER, 0) != 0) {
                        ath6kl_err("couldn't set bss filtering\n");
                        up(&ar->sem);
                        return -EIO;
                }
        }
 
-       ar->nw_type = ar->next_mode;
+       vif->nw_type = vif->next_mode;
+
+       if (vif->wdev.iftype == NL80211_IFTYPE_P2P_CLIENT)
+               nw_subtype = SUBTYPE_P2PCLIENT;
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
                   "%s: connect called with authmode %d dot11 auth %d"
                   " PW crypto %d PW crypto len %d GRP crypto %d"
                   " GRP crypto len %d channel hint %u\n",
                   __func__,
-                  ar->auth_mode, ar->dot11_auth_mode, ar->prwise_crypto,
-                  ar->prwise_crypto_len, ar->grp_crypto,
-                  ar->grp_crypto_len, ar->ch_hint);
-
-       ar->reconnect_flag = 0;
-       status = ath6kl_wmi_connect_cmd(ar->wmi, ar->nw_type,
-                                       ar->dot11_auth_mode, ar->auth_mode,
-                                       ar->prwise_crypto,
-                                       ar->prwise_crypto_len,
-                                       ar->grp_crypto, ar->grp_crypto_len,
-                                       ar->ssid_len, ar->ssid,
-                                       ar->req_bssid, ar->ch_hint,
-                                       ar->connect_ctrl_flags);
+                  vif->auth_mode, vif->dot11_auth_mode, vif->prwise_crypto,
+                  vif->prwise_crypto_len, vif->grp_crypto,
+                  vif->grp_crypto_len, vif->ch_hint);
+
+       vif->reconnect_flag = 0;
+       status = ath6kl_wmi_connect_cmd(ar->wmi, vif->fw_vif_idx, vif->nw_type,
+                                       vif->dot11_auth_mode, vif->auth_mode,
+                                       vif->prwise_crypto,
+                                       vif->prwise_crypto_len,
+                                       vif->grp_crypto, vif->grp_crypto_len,
+                                       vif->ssid_len, vif->ssid,
+                                       vif->req_bssid, vif->ch_hint,
+                                       ar->connect_ctrl_flags, nw_subtype);
 
        up(&ar->sem);
 
        if (status == -EINVAL) {
-               memset(ar->ssid, 0, sizeof(ar->ssid));
-               ar->ssid_len = 0;
+               memset(vif->ssid, 0, sizeof(vif->ssid));
+               vif->ssid_len = 0;
                ath6kl_err("invalid request\n");
                return -ENOENT;
        } else if (status) {
@@ -404,28 +593,42 @@ static int ath6kl_cfg80211_connect(struct wiphy *wiphy, struct net_device *dev,
        }
 
        if ((!(ar->connect_ctrl_flags & CONNECT_DO_WPA_OFFLOAD)) &&
-           ((ar->auth_mode == WPA_PSK_AUTH)
-            || (ar->auth_mode == WPA2_PSK_AUTH))) {
-               mod_timer(&ar->disconnect_timer,
+           ((vif->auth_mode == WPA_PSK_AUTH)
+            || (vif->auth_mode == WPA2_PSK_AUTH))) {
+               mod_timer(&vif->disconnect_timer,
                          jiffies + msecs_to_jiffies(DISCON_TIMER_INTVAL));
        }
 
        ar->connect_ctrl_flags &= ~CONNECT_DO_WPA_OFFLOAD;
-       set_bit(CONNECT_PEND, &ar->flag);
+       set_bit(CONNECT_PEND, &vif->flags);
 
        return 0;
 }
 
-static int ath6kl_add_bss_if_needed(struct ath6kl *ar, const u8 *bssid,
-                                   struct ieee80211_channel *chan,
-                                   const u8 *beacon_ie, size_t beacon_ie_len)
+static struct cfg80211_bss *
+ath6kl_add_bss_if_needed(struct ath6kl_vif *vif,
+                        enum network_type nw_type,
+                        const u8 *bssid,
+                        struct ieee80211_channel *chan,
+                        const u8 *beacon_ie,
+                        size_t beacon_ie_len)
 {
+       struct ath6kl *ar = vif->ar;
        struct cfg80211_bss *bss;
+       u16 cap_mask, cap_val;
        u8 *ie;
 
-       bss = cfg80211_get_bss(ar->wdev->wiphy, chan, bssid,
-                              ar->ssid, ar->ssid_len, WLAN_CAPABILITY_ESS,
-                              WLAN_CAPABILITY_ESS);
+       if (nw_type & ADHOC_NETWORK) {
+               cap_mask = WLAN_CAPABILITY_IBSS;
+               cap_val = WLAN_CAPABILITY_IBSS;
+       } else {
+               cap_mask = WLAN_CAPABILITY_ESS;
+               cap_val = WLAN_CAPABILITY_ESS;
+       }
+
+       bss = cfg80211_get_bss(ar->wiphy, chan, bssid,
+                              vif->ssid, vif->ssid_len,
+                              cap_mask, cap_val);
        if (bss == NULL) {
                /*
                 * Since cfg80211 may not yet know about the BSS,
@@ -435,35 +638,28 @@ static int ath6kl_add_bss_if_needed(struct ath6kl *ar, const u8 *bssid,
                 * Prepend SSID element since it is not included in the Beacon
                 * IEs from the target.
                 */
-               ie = kmalloc(2 + ar->ssid_len + beacon_ie_len, GFP_KERNEL);
+               ie = kmalloc(2 + vif->ssid_len + beacon_ie_len, GFP_KERNEL);
                if (ie == NULL)
-                       return -ENOMEM;
+                       return NULL;
                ie[0] = WLAN_EID_SSID;
-               ie[1] = ar->ssid_len;
-               memcpy(ie + 2, ar->ssid, ar->ssid_len);
-               memcpy(ie + 2 + ar->ssid_len, beacon_ie, beacon_ie_len);
-               bss = cfg80211_inform_bss(ar->wdev->wiphy, chan,
-                                         bssid, 0, WLAN_CAPABILITY_ESS, 100,
-                                         ie, 2 + ar->ssid_len + beacon_ie_len,
+               ie[1] = vif->ssid_len;
+               memcpy(ie + 2, vif->ssid, vif->ssid_len);
+               memcpy(ie + 2 + vif->ssid_len, beacon_ie, beacon_ie_len);
+               bss = cfg80211_inform_bss(ar->wiphy, chan,
+                                         bssid, 0, cap_val, 100,
+                                         ie, 2 + vif->ssid_len + beacon_ie_len,
                                          0, GFP_KERNEL);
                if (bss)
-                       ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "added dummy bss for "
-                                  "%pM prior to indicating connect/roamed "
-                                  "event\n", bssid);
+                       ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "added bss %pM to "
+                                  "cfg80211\n", bssid);
                kfree(ie);
        } else
-               ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "cfg80211 already has a bss "
-                          "entry\n");
-
-       if (bss == NULL)
-               return -ENOMEM;
+               ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "cfg80211 already has a bss\n");
 
-       cfg80211_put_bss(bss);
-
-       return 0;
+       return bss;
 }
 
-void ath6kl_cfg80211_connect_event(struct ath6kl *ar, u16 channel,
+void ath6kl_cfg80211_connect_event(struct ath6kl_vif *vif, u16 channel,
                                   u8 *bssid, u16 listen_intvl,
                                   u16 beacon_intvl,
                                   enum network_type nw_type,
@@ -471,6 +667,8 @@ void ath6kl_cfg80211_connect_event(struct ath6kl *ar, u16 channel,
                                   u8 assoc_resp_len, u8 *assoc_info)
 {
        struct ieee80211_channel *chan;
+       struct ath6kl *ar = vif->ar;
+       struct cfg80211_bss *bss;
 
        /* capinfo + listen interval */
        u8 assoc_req_ie_offset = sizeof(u16) + sizeof(u16);
@@ -489,11 +687,11 @@ void ath6kl_cfg80211_connect_event(struct ath6kl *ar, u16 channel,
         * Store Beacon interval here; DTIM period will be available only once
         * a Beacon frame from the AP is seen.
         */
-       ar->assoc_bss_beacon_int = beacon_intvl;
-       clear_bit(DTIM_PERIOD_AVAIL, &ar->flag);
+       vif->assoc_bss_beacon_int = beacon_intvl;
+       clear_bit(DTIM_PERIOD_AVAIL, &vif->flags);
 
        if (nw_type & ADHOC_NETWORK) {
-               if (ar->wdev->iftype != NL80211_IFTYPE_ADHOC) {
+               if (vif->wdev.iftype != NL80211_IFTYPE_ADHOC) {
                        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
                                   "%s: ath6k not in ibss mode\n", __func__);
                        return;
@@ -501,53 +699,58 @@ void ath6kl_cfg80211_connect_event(struct ath6kl *ar, u16 channel,
        }
 
        if (nw_type & INFRA_NETWORK) {
-               if (ar->wdev->iftype != NL80211_IFTYPE_STATION &&
-                   ar->wdev->iftype != NL80211_IFTYPE_P2P_CLIENT) {
+               if (vif->wdev.iftype != NL80211_IFTYPE_STATION &&
+                   vif->wdev.iftype != NL80211_IFTYPE_P2P_CLIENT) {
                        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
                                   "%s: ath6k not in station mode\n", __func__);
                        return;
                }
        }
 
-       chan = ieee80211_get_channel(ar->wdev->wiphy, (int) channel);
+       chan = ieee80211_get_channel(ar->wiphy, (int) channel);
 
-
-       if (nw_type & ADHOC_NETWORK) {
-               cfg80211_ibss_joined(ar->net_dev, bssid, GFP_KERNEL);
+       bss = ath6kl_add_bss_if_needed(vif, nw_type, bssid, chan,
+                                      assoc_info, beacon_ie_len);
+       if (!bss) {
+               ath6kl_err("could not add cfg80211 bss entry\n");
                return;
        }
 
-       if (ath6kl_add_bss_if_needed(ar, bssid, chan, assoc_info,
-                                    beacon_ie_len) < 0) {
-               ath6kl_err("could not add cfg80211 bss entry for "
-                          "connect/roamed notification\n");
+       if (nw_type & ADHOC_NETWORK) {
+               ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "ad-hoc %s selected\n",
+                          nw_type & ADHOC_CREATOR ? "creator" : "joiner");
+               cfg80211_ibss_joined(vif->ndev, bssid, GFP_KERNEL);
+               cfg80211_put_bss(bss);
                return;
        }
 
-       if (ar->sme_state == SME_CONNECTING) {
+       if (vif->sme_state == SME_CONNECTING) {
                /* inform connect result to cfg80211 */
-               ar->sme_state = SME_CONNECTED;
-               cfg80211_connect_result(ar->net_dev, bssid,
+               vif->sme_state = SME_CONNECTED;
+               cfg80211_connect_result(vif->ndev, bssid,
                                        assoc_req_ie, assoc_req_len,
                                        assoc_resp_ie, assoc_resp_len,
                                        WLAN_STATUS_SUCCESS, GFP_KERNEL);
-       } else if (ar->sme_state == SME_CONNECTED) {
+               cfg80211_put_bss(bss);
+       } else if (vif->sme_state == SME_CONNECTED) {
                /* inform roam event to cfg80211 */
-               cfg80211_roamed(ar->net_dev, chan, bssid,
-                               assoc_req_ie, assoc_req_len,
-                               assoc_resp_ie, assoc_resp_len, GFP_KERNEL);
+               cfg80211_roamed_bss(vif->ndev, bss, assoc_req_ie, assoc_req_len,
+                                   assoc_resp_ie, assoc_resp_len, GFP_KERNEL);
        }
 }
 
 static int ath6kl_cfg80211_disconnect(struct wiphy *wiphy,
                                      struct net_device *dev, u16 reason_code)
 {
-       struct ath6kl *ar = (struct ath6kl *)ath6kl_priv(dev);
+       struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: reason=%u\n", __func__,
                   reason_code);
 
-       if (!ath6kl_cfg80211_ready(ar))
+       ath6kl_cfg80211_sscan_disable(vif);
+
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
        if (test_bit(DESTROY_IN_PROGRESS, &ar->flag)) {
@@ -560,44 +763,46 @@ static int ath6kl_cfg80211_disconnect(struct wiphy *wiphy,
                return -ERESTARTSYS;
        }
 
-       ar->reconnect_flag = 0;
-       ath6kl_disconnect(ar);
-       memset(ar->ssid, 0, sizeof(ar->ssid));
-       ar->ssid_len = 0;
+       vif->reconnect_flag = 0;
+       ath6kl_disconnect(vif);
+       memset(vif->ssid, 0, sizeof(vif->ssid));
+       vif->ssid_len = 0;
 
        if (!test_bit(SKIP_SCAN, &ar->flag))
-               memset(ar->req_bssid, 0, sizeof(ar->req_bssid));
+               memset(vif->req_bssid, 0, sizeof(vif->req_bssid));
 
        up(&ar->sem);
 
-       ar->sme_state = SME_DISCONNECTED;
+       vif->sme_state = SME_DISCONNECTED;
 
        return 0;
 }
 
-void ath6kl_cfg80211_disconnect_event(struct ath6kl *ar, u8 reason,
+void ath6kl_cfg80211_disconnect_event(struct ath6kl_vif *vif, u8 reason,
                                      u8 *bssid, u8 assoc_resp_len,
                                      u8 *assoc_info, u16 proto_reason)
 {
-       if (ar->scan_req) {
-               cfg80211_scan_done(ar->scan_req, true);
-               ar->scan_req = NULL;
+       struct ath6kl *ar = vif->ar;
+
+       if (vif->scan_req) {
+               cfg80211_scan_done(vif->scan_req, true);
+               vif->scan_req = NULL;
        }
 
-       if (ar->nw_type & ADHOC_NETWORK) {
-               if (ar->wdev->iftype != NL80211_IFTYPE_ADHOC) {
+       if (vif->nw_type & ADHOC_NETWORK) {
+               if (vif->wdev.iftype != NL80211_IFTYPE_ADHOC) {
                        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
                                   "%s: ath6k not in ibss mode\n", __func__);
                        return;
                }
                memset(bssid, 0, ETH_ALEN);
-               cfg80211_ibss_joined(ar->net_dev, bssid, GFP_KERNEL);
+               cfg80211_ibss_joined(vif->ndev, bssid, GFP_KERNEL);
                return;
        }
 
-       if (ar->nw_type & INFRA_NETWORK) {
-               if (ar->wdev->iftype != NL80211_IFTYPE_STATION &&
-                   ar->wdev->iftype != NL80211_IFTYPE_P2P_CLIENT) {
+       if (vif->nw_type & INFRA_NETWORK) {
+               if (vif->wdev.iftype != NL80211_IFTYPE_STATION &&
+                   vif->wdev.iftype != NL80211_IFTYPE_P2P_CLIENT) {
                        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
                                   "%s: ath6k not in station mode\n", __func__);
                        return;
@@ -614,42 +819,46 @@ void ath6kl_cfg80211_disconnect_event(struct ath6kl *ar, u8 reason,
         */
 
        if (reason != DISCONNECT_CMD) {
-               ath6kl_wmi_disconnect_cmd(ar->wmi);
+               ath6kl_wmi_disconnect_cmd(ar->wmi, vif->fw_vif_idx);
                return;
        }
 
-       clear_bit(CONNECT_PEND, &ar->flag);
+       clear_bit(CONNECT_PEND, &vif->flags);
 
-       if (ar->sme_state == SME_CONNECTING) {
-               cfg80211_connect_result(ar->net_dev,
+       if (vif->sme_state == SME_CONNECTING) {
+               cfg80211_connect_result(vif->ndev,
                                bssid, NULL, 0,
                                NULL, 0,
                                WLAN_STATUS_UNSPECIFIED_FAILURE,
                                GFP_KERNEL);
-       } else if (ar->sme_state == SME_CONNECTED) {
-               cfg80211_disconnected(ar->net_dev, reason,
+       } else if (vif->sme_state == SME_CONNECTED) {
+               cfg80211_disconnected(vif->ndev, reason,
                                NULL, 0, GFP_KERNEL);
        }
 
-       ar->sme_state = SME_DISCONNECTED;
+       vif->sme_state = SME_DISCONNECTED;
 }
 
 static int ath6kl_cfg80211_scan(struct wiphy *wiphy, struct net_device *ndev,
                                struct cfg80211_scan_request *request)
 {
-       struct ath6kl *ar = (struct ath6kl *)ath6kl_priv(ndev);
+       struct ath6kl *ar = ath6kl_priv(ndev);
+       struct ath6kl_vif *vif = netdev_priv(ndev);
        s8 n_channels = 0;
        u16 *channels = NULL;
        int ret = 0;
+       u32 force_fg_scan = 0;
 
-       if (!ath6kl_cfg80211_ready(ar))
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
+       ath6kl_cfg80211_sscan_disable(vif);
+
        if (!ar->usr_bss_filter) {
-               clear_bit(CLEAR_BSSFILTER_ON_BEACON, &ar->flag);
+               clear_bit(CLEAR_BSSFILTER_ON_BEACON, &vif->flags);
                ret = ath6kl_wmi_bssfilter_cmd(
-                       ar->wmi,
-                       (test_bit(CONNECTED, &ar->flag) ?
+                       ar->wmi, vif->fw_vif_idx,
+                       (test_bit(CONNECTED, &vif->flags) ?
                         ALL_BUT_BSS_FILTER : ALL_BSS_FILTER), 0);
                if (ret) {
                        ath6kl_err("couldn't set bss filtering\n");
@@ -664,14 +873,19 @@ static int ath6kl_cfg80211_scan(struct wiphy *wiphy, struct net_device *ndev,
                        request->n_ssids = MAX_PROBED_SSID_INDEX - 1;
 
                for (i = 0; i < request->n_ssids; i++)
-                       ath6kl_wmi_probedssid_cmd(ar->wmi, i + 1,
-                                                 SPECIFIC_SSID_FLAG,
+                       ath6kl_wmi_probedssid_cmd(ar->wmi, vif->fw_vif_idx,
+                                                 i + 1, SPECIFIC_SSID_FLAG,
                                                  request->ssids[i].ssid_len,
                                                  request->ssids[i].ssid);
        }
 
+       /*
+        * FIXME: we should clear the IE in fw if it's not set so just
+        * remove the check altogether
+        */
        if (request->ie) {
-               ret = ath6kl_wmi_set_appie_cmd(ar->wmi, WMI_FRAME_PROBE_REQ,
+               ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
+                                              WMI_FRAME_PROBE_REQ,
                                               request->ie, request->ie_len);
                if (ret) {
                        ath6kl_err("failed to set Probe Request appie for "
@@ -702,44 +916,63 @@ static int ath6kl_cfg80211_scan(struct wiphy *wiphy, struct net_device *ndev,
                        channels[i] = request->channels[i]->center_freq;
        }
 
-       ret = ath6kl_wmi_startscan_cmd(ar->wmi, WMI_LONG_SCAN, 0,
-                                      false, 0, 0, n_channels, channels);
+       if (test_bit(CONNECTED, &vif->flags))
+               force_fg_scan = 1;
+
+       if (test_bit(ATH6KL_FW_CAPABILITY_STA_P2PDEV_DUPLEX,
+                   ar->fw_capabilities)) {
+               /*
+                * If capable of doing P2P mgmt operations using
+                * station interface, send additional information like
+                * supported rates to advertise and xmit rates for
+                * probe requests
+                */
+               ret = ath6kl_wmi_beginscan_cmd(ar->wmi, vif->fw_vif_idx,
+                                               WMI_LONG_SCAN, force_fg_scan,
+                                               false, 0, 0, n_channels,
+                                               channels, request->no_cck,
+                                               request->rates);
+       } else {
+               ret = ath6kl_wmi_startscan_cmd(ar->wmi, vif->fw_vif_idx,
+                                               WMI_LONG_SCAN, force_fg_scan,
+                                               false, 0, 0, n_channels,
+                                               channels);
+       }
        if (ret)
                ath6kl_err("wmi_startscan_cmd failed\n");
        else
-               ar->scan_req = request;
+               vif->scan_req = request;
 
        kfree(channels);
 
        return ret;
 }
 
-void ath6kl_cfg80211_scan_complete_event(struct ath6kl *ar, int status)
+void ath6kl_cfg80211_scan_complete_event(struct ath6kl_vif *vif, bool aborted)
 {
+       struct ath6kl *ar = vif->ar;
        int i;
 
-       ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: status %d\n", __func__, status);
+       ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: status%s\n", __func__,
+                  aborted ? " aborted" : "");
 
-       if (!ar->scan_req)
+       if (!vif->scan_req)
                return;
 
-       if ((status == -ECANCELED) || (status == -EBUSY)) {
-               cfg80211_scan_done(ar->scan_req, true);
+       if (aborted)
                goto out;
-       }
 
-       cfg80211_scan_done(ar->scan_req, false);
-
-       if (ar->scan_req->n_ssids && ar->scan_req->ssids[0].ssid_len) {
-               for (i = 0; i < ar->scan_req->n_ssids; i++) {
-                       ath6kl_wmi_probedssid_cmd(ar->wmi, i + 1,
-                                                 DISABLE_SSID_FLAG,
+       if (vif->scan_req->n_ssids && vif->scan_req->ssids[0].ssid_len) {
+               for (i = 0; i < vif->scan_req->n_ssids; i++) {
+                       ath6kl_wmi_probedssid_cmd(ar->wmi, vif->fw_vif_idx,
+                                                 i + 1, DISABLE_SSID_FLAG,
                                                  0, NULL);
                }
        }
 
 out:
-       ar->scan_req = NULL;
+       cfg80211_scan_done(vif->scan_req, aborted);
+       vif->scan_req = NULL;
 }
 
 static int ath6kl_cfg80211_add_key(struct wiphy *wiphy, struct net_device *ndev,
@@ -747,23 +980,31 @@ static int ath6kl_cfg80211_add_key(struct wiphy *wiphy, struct net_device *ndev,
                                   const u8 *mac_addr,
                                   struct key_params *params)
 {
-       struct ath6kl *ar = (struct ath6kl *)ath6kl_priv(ndev);
+       struct ath6kl *ar = ath6kl_priv(ndev);
+       struct ath6kl_vif *vif = netdev_priv(ndev);
        struct ath6kl_key *key = NULL;
+       int seq_len;
        u8 key_usage;
        u8 key_type;
-       int status = 0;
 
-       if (!ath6kl_cfg80211_ready(ar))
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
-       if (key_index < WMI_MIN_KEY_INDEX || key_index > WMI_MAX_KEY_INDEX) {
+       if (params->cipher == CCKM_KRK_CIPHER_SUITE) {
+               if (params->key_len != WMI_KRK_LEN)
+                       return -EINVAL;
+               return ath6kl_wmi_add_krk_cmd(ar->wmi, vif->fw_vif_idx,
+                                             params->key);
+       }
+
+       if (key_index > WMI_MAX_KEY_INDEX) {
                ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
                           "%s: key index %d out of bounds\n", __func__,
                           key_index);
                return -ENOENT;
        }
 
-       key = &ar->keys[key_index];
+       key = &vif->keys[key_index];
        memset(key, 0, sizeof(struct ath6kl_key));
 
        if (pairwise)
@@ -771,17 +1012,21 @@ static int ath6kl_cfg80211_add_key(struct wiphy *wiphy, struct net_device *ndev,
        else
                key_usage = GROUP_USAGE;
 
-       if (params) {
-               if (params->key_len > WLAN_MAX_KEY_LEN ||
-                   params->seq_len > sizeof(key->seq))
-                       return -EINVAL;
-
-               key->key_len = params->key_len;
-               memcpy(key->key, params->key, key->key_len);
-               key->seq_len = params->seq_len;
-               memcpy(key->seq, params->seq, key->seq_len);
-               key->cipher = params->cipher;
+       seq_len = params->seq_len;
+       if (params->cipher == WLAN_CIPHER_SUITE_SMS4 &&
+           seq_len > ATH6KL_KEY_SEQ_LEN) {
+               /* Only first half of the WPI PN is configured */
+               seq_len = ATH6KL_KEY_SEQ_LEN;
        }
+       if (params->key_len > WLAN_MAX_KEY_LEN ||
+           seq_len > sizeof(key->seq))
+               return -EINVAL;
+
+       key->key_len = params->key_len;
+       memcpy(key->key, params->key, key->key_len);
+       key->seq_len = seq_len;
+       memcpy(key->seq, params->seq, key->seq_len);
+       key->cipher = params->cipher;
 
        switch (key->cipher) {
        case WLAN_CIPHER_SUITE_WEP40:
@@ -796,31 +1041,33 @@ static int ath6kl_cfg80211_add_key(struct wiphy *wiphy, struct net_device *ndev,
        case WLAN_CIPHER_SUITE_CCMP:
                key_type = AES_CRYPT;
                break;
+       case WLAN_CIPHER_SUITE_SMS4:
+               key_type = WAPI_CRYPT;
+               break;
 
        default:
                return -ENOTSUPP;
        }
 
-       if (((ar->auth_mode == WPA_PSK_AUTH)
-            || (ar->auth_mode == WPA2_PSK_AUTH))
+       if (((vif->auth_mode == WPA_PSK_AUTH)
+            || (vif->auth_mode == WPA2_PSK_AUTH))
            && (key_usage & GROUP_USAGE))
-               del_timer(&ar->disconnect_timer);
+               del_timer(&vif->disconnect_timer);
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
                   "%s: index %d, key_len %d, key_type 0x%x, key_usage 0x%x, seq_len %d\n",
                   __func__, key_index, key->key_len, key_type,
                   key_usage, key->seq_len);
 
-       ar->def_txkey_index = key_index;
-
-       if (ar->nw_type == AP_NETWORK && !pairwise &&
-           (key_type == TKIP_CRYPT || key_type == AES_CRYPT) && params) {
+       if (vif->nw_type == AP_NETWORK && !pairwise &&
+           (key_type == TKIP_CRYPT || key_type == AES_CRYPT ||
+            key_type == WAPI_CRYPT) && params) {
                ar->ap_mode_bkey.valid = true;
                ar->ap_mode_bkey.key_index = key_index;
                ar->ap_mode_bkey.key_type = key_type;
                ar->ap_mode_bkey.key_len = key->key_len;
                memcpy(ar->ap_mode_bkey.key, key->key, key->key_len);
-               if (!test_bit(CONNECTED, &ar->flag)) {
+               if (!test_bit(CONNECTED, &vif->flags)) {
                        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "Delay initial group "
                                   "key configuration until AP mode has been "
                                   "started\n");
@@ -832,8 +1079,8 @@ static int ath6kl_cfg80211_add_key(struct wiphy *wiphy, struct net_device *ndev,
                }
        }
 
-       if (ar->next_mode == AP_NETWORK && key_type == WEP_CRYPT &&
-           !test_bit(CONNECTED, &ar->flag)) {
+       if (vif->next_mode == AP_NETWORK && key_type == WEP_CRYPT &&
+           !test_bit(CONNECTED, &vif->flags)) {
                /*
                 * Store the key locally so that it can be re-configured after
                 * the AP mode has properly started
@@ -841,49 +1088,47 @@ static int ath6kl_cfg80211_add_key(struct wiphy *wiphy, struct net_device *ndev,
                 */
                ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "Delay WEP key configuration "
                           "until AP mode has been started\n");
-               ar->wep_key_list[key_index].key_len = key->key_len;
-               memcpy(ar->wep_key_list[key_index].key, key->key, key->key_len);
+               vif->wep_key_list[key_index].key_len = key->key_len;
+               memcpy(vif->wep_key_list[key_index].key, key->key,
+                      key->key_len);
                return 0;
        }
 
-       status = ath6kl_wmi_addkey_cmd(ar->wmi, ar->def_txkey_index,
-                                      key_type, key_usage, key->key_len,
-                                      key->seq, key->key, KEY_OP_INIT_VAL,
-                                      (u8 *) mac_addr, SYNC_BOTH_WMIFLAG);
-
-       if (status)
-               return -EIO;
-
-       return 0;
+       return ath6kl_wmi_addkey_cmd(ar->wmi, vif->fw_vif_idx, key_index,
+                                    key_type, key_usage, key->key_len,
+                                    key->seq, key->seq_len, key->key,
+                                    KEY_OP_INIT_VAL,
+                                    (u8 *) mac_addr, SYNC_BOTH_WMIFLAG);
 }
 
 static int ath6kl_cfg80211_del_key(struct wiphy *wiphy, struct net_device *ndev,
                                   u8 key_index, bool pairwise,
                                   const u8 *mac_addr)
 {
-       struct ath6kl *ar = (struct ath6kl *)ath6kl_priv(ndev);
+       struct ath6kl *ar = ath6kl_priv(ndev);
+       struct ath6kl_vif *vif = netdev_priv(ndev);
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: index %d\n", __func__, key_index);
 
-       if (!ath6kl_cfg80211_ready(ar))
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
-       if (key_index < WMI_MIN_KEY_INDEX || key_index > WMI_MAX_KEY_INDEX) {
+       if (key_index > WMI_MAX_KEY_INDEX) {
                ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
                           "%s: key index %d out of bounds\n", __func__,
                           key_index);
                return -ENOENT;
        }
 
-       if (!ar->keys[key_index].key_len) {
+       if (!vif->keys[key_index].key_len) {
                ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
                           "%s: index %d is empty\n", __func__, key_index);
                return 0;
        }
 
-       ar->keys[key_index].key_len = 0;
+       vif->keys[key_index].key_len = 0;
 
-       return ath6kl_wmi_deletekey_cmd(ar->wmi, key_index);
+       return ath6kl_wmi_deletekey_cmd(ar->wmi, vif->fw_vif_idx, key_index);
 }
 
 static int ath6kl_cfg80211_get_key(struct wiphy *wiphy, struct net_device *ndev,
@@ -892,23 +1137,23 @@ static int ath6kl_cfg80211_get_key(struct wiphy *wiphy, struct net_device *ndev,
                                   void (*callback) (void *cookie,
                                                     struct key_params *))
 {
-       struct ath6kl *ar = (struct ath6kl *)ath6kl_priv(ndev);
+       struct ath6kl_vif *vif = netdev_priv(ndev);
        struct ath6kl_key *key = NULL;
        struct key_params params;
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: index %d\n", __func__, key_index);
 
-       if (!ath6kl_cfg80211_ready(ar))
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
-       if (key_index < WMI_MIN_KEY_INDEX || key_index > WMI_MAX_KEY_INDEX) {
+       if (key_index > WMI_MAX_KEY_INDEX) {
                ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
                           "%s: key index %d out of bounds\n", __func__,
                           key_index);
                return -ENOENT;
        }
 
-       key = &ar->keys[key_index];
+       key = &vif->keys[key_index];
        memset(&params, 0, sizeof(params));
        params.cipher = key->cipher;
        params.key_len = key->key_len;
@@ -926,61 +1171,59 @@ static int ath6kl_cfg80211_set_default_key(struct wiphy *wiphy,
                                           u8 key_index, bool unicast,
                                           bool multicast)
 {
-       struct ath6kl *ar = (struct ath6kl *)ath6kl_priv(ndev);
+       struct ath6kl *ar = ath6kl_priv(ndev);
+       struct ath6kl_vif *vif = netdev_priv(ndev);
        struct ath6kl_key *key = NULL;
-       int status = 0;
        u8 key_usage;
        enum crypto_type key_type = NONE_CRYPT;
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: index %d\n", __func__, key_index);
 
-       if (!ath6kl_cfg80211_ready(ar))
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
-       if (key_index < WMI_MIN_KEY_INDEX || key_index > WMI_MAX_KEY_INDEX) {
+       if (key_index > WMI_MAX_KEY_INDEX) {
                ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
                           "%s: key index %d out of bounds\n",
                           __func__, key_index);
                return -ENOENT;
        }
 
-       if (!ar->keys[key_index].key_len) {
+       if (!vif->keys[key_index].key_len) {
                ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: invalid key index %d\n",
                           __func__, key_index);
                return -EINVAL;
        }
 
-       ar->def_txkey_index = key_index;
-       key = &ar->keys[ar->def_txkey_index];
+       vif->def_txkey_index = key_index;
+       key = &vif->keys[vif->def_txkey_index];
        key_usage = GROUP_USAGE;
-       if (ar->prwise_crypto == WEP_CRYPT)
+       if (vif->prwise_crypto == WEP_CRYPT)
                key_usage |= TX_USAGE;
        if (unicast)
-               key_type = ar->prwise_crypto;
+               key_type = vif->prwise_crypto;
        if (multicast)
-               key_type = ar->grp_crypto;
+               key_type = vif->grp_crypto;
 
-       if (ar->next_mode == AP_NETWORK && !test_bit(CONNECTED, &ar->flag))
+       if (vif->next_mode == AP_NETWORK && !test_bit(CONNECTED, &vif->flags))
                return 0; /* Delay until AP mode has been started */
 
-       status = ath6kl_wmi_addkey_cmd(ar->wmi, ar->def_txkey_index,
-                                      key_type, key_usage,
-                                      key->key_len, key->seq, key->key,
-                                      KEY_OP_INIT_VAL, NULL,
-                                      SYNC_BOTH_WMIFLAG);
-       if (status)
-               return -EIO;
-
-       return 0;
+       return ath6kl_wmi_addkey_cmd(ar->wmi, vif->fw_vif_idx,
+                                    vif->def_txkey_index,
+                                    key_type, key_usage,
+                                    key->key_len, key->seq, key->seq_len,
+                                    key->key,
+                                    KEY_OP_INIT_VAL, NULL,
+                                    SYNC_BOTH_WMIFLAG);
 }
 
-void ath6kl_cfg80211_tkip_micerr_event(struct ath6kl *ar, u8 keyid,
+void ath6kl_cfg80211_tkip_micerr_event(struct ath6kl_vif *vif, u8 keyid,
                                       bool ismcast)
 {
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
                   "%s: keyid %d, ismcast %d\n", __func__, keyid, ismcast);
 
-       cfg80211_michael_mic_failure(ar->net_dev, ar->bssid,
+       cfg80211_michael_mic_failure(vif->ndev, vif->bssid,
                                     (ismcast ? NL80211_KEYTYPE_GROUP :
                                      NL80211_KEYTYPE_PAIRWISE), keyid, NULL,
                                     GFP_KERNEL);
@@ -989,12 +1232,17 @@ void ath6kl_cfg80211_tkip_micerr_event(struct ath6kl *ar, u8 keyid,
 static int ath6kl_cfg80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
 {
        struct ath6kl *ar = (struct ath6kl *)wiphy_priv(wiphy);
+       struct ath6kl_vif *vif;
        int ret;
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: changed 0x%x\n", __func__,
                   changed);
 
-       if (!ath6kl_cfg80211_ready(ar))
+       vif = ath6kl_vif_first(ar);
+       if (!vif)
+               return -EIO;
+
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
        if (changed & WIPHY_PARAM_RTS_THRESHOLD) {
@@ -1014,15 +1262,21 @@ static int ath6kl_cfg80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
 */
 static int ath6kl_cfg80211_set_txpower(struct wiphy *wiphy,
                                       enum nl80211_tx_power_setting type,
-                                      int dbm)
+                                      int mbm)
 {
        struct ath6kl *ar = (struct ath6kl *)wiphy_priv(wiphy);
+       struct ath6kl_vif *vif;
        u8 ath6kl_dbm;
+       int dbm = MBM_TO_DBM(mbm);
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: type 0x%x, dbm %d\n", __func__,
                   type, dbm);
 
-       if (!ath6kl_cfg80211_ready(ar))
+       vif = ath6kl_vif_first(ar);
+       if (!vif)
+               return -EIO;
+
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
        switch (type) {
@@ -1037,7 +1291,7 @@ static int ath6kl_cfg80211_set_txpower(struct wiphy *wiphy,
                return -EOPNOTSUPP;
        }
 
-       ath6kl_wmi_set_tx_pwr_cmd(ar->wmi, ath6kl_dbm);
+       ath6kl_wmi_set_tx_pwr_cmd(ar->wmi, vif->fw_vif_idx, ath6kl_dbm);
 
        return 0;
 }
@@ -1045,14 +1299,19 @@ static int ath6kl_cfg80211_set_txpower(struct wiphy *wiphy,
 static int ath6kl_cfg80211_get_txpower(struct wiphy *wiphy, int *dbm)
 {
        struct ath6kl *ar = (struct ath6kl *)wiphy_priv(wiphy);
+       struct ath6kl_vif *vif;
+
+       vif = ath6kl_vif_first(ar);
+       if (!vif)
+               return -EIO;
 
-       if (!ath6kl_cfg80211_ready(ar))
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
-       if (test_bit(CONNECTED, &ar->flag)) {
+       if (test_bit(CONNECTED, &vif->flags)) {
                ar->tx_pwr = 0;
 
-               if (ath6kl_wmi_get_tx_pwr_cmd(ar->wmi) != 0) {
+               if (ath6kl_wmi_get_tx_pwr_cmd(ar->wmi, vif->fw_vif_idx) != 0) {
                        ath6kl_err("ath6kl_wmi_get_tx_pwr_cmd failed\n");
                        return -EIO;
                }
@@ -1076,11 +1335,12 @@ static int ath6kl_cfg80211_set_power_mgmt(struct wiphy *wiphy,
 {
        struct ath6kl *ar = ath6kl_priv(dev);
        struct wmi_power_mode_cmd mode;
+       struct ath6kl_vif *vif = netdev_priv(dev);
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: pmgmt %d, timeout %d\n",
                   __func__, pmgmt, timeout);
 
-       if (!ath6kl_cfg80211_ready(ar))
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
        if (pmgmt) {
@@ -1091,7 +1351,8 @@ static int ath6kl_cfg80211_set_power_mgmt(struct wiphy *wiphy,
                mode.pwr_mode = MAX_PERF_POWER;
        }
 
-       if (ath6kl_wmi_powermode_cmd(ar->wmi, mode.pwr_mode) != 0) {
+       if (ath6kl_wmi_powermode_cmd(ar->wmi, vif->fw_vif_idx,
+            mode.pwr_mode) != 0) {
                ath6kl_err("wmi_powermode_cmd failed\n");
                return -EIO;
        }
@@ -1099,41 +1360,83 @@ static int ath6kl_cfg80211_set_power_mgmt(struct wiphy *wiphy,
        return 0;
 }
 
+static struct net_device *ath6kl_cfg80211_add_iface(struct wiphy *wiphy,
+                                                   char *name,
+                                                   enum nl80211_iftype type,
+                                                   u32 *flags,
+                                                   struct vif_params *params)
+{
+       struct ath6kl *ar = wiphy_priv(wiphy);
+       struct net_device *ndev;
+       u8 if_idx, nw_type;
+
+       if (ar->num_vif == ar->vif_max) {
+               ath6kl_err("Reached maximum number of supported vif\n");
+               return ERR_PTR(-EINVAL);
+       }
+
+       if (!ath6kl_is_valid_iftype(ar, type, &if_idx, &nw_type)) {
+               ath6kl_err("Not a supported interface type\n");
+               return ERR_PTR(-EINVAL);
+       }
+
+       ndev = ath6kl_interface_add(ar, name, type, if_idx, nw_type);
+       if (!ndev)
+               return ERR_PTR(-ENOMEM);
+
+       ar->num_vif++;
+
+       return ndev;
+}
+
+static int ath6kl_cfg80211_del_iface(struct wiphy *wiphy,
+                                    struct net_device *ndev)
+{
+       struct ath6kl *ar = wiphy_priv(wiphy);
+       struct ath6kl_vif *vif = netdev_priv(ndev);
+
+       spin_lock_bh(&ar->list_lock);
+       list_del(&vif->list);
+       spin_unlock_bh(&ar->list_lock);
+
+       ath6kl_cleanup_vif(vif, test_bit(WMI_READY, &ar->flag));
+
+       ath6kl_cfg80211_vif_cleanup(vif);
+
+       return 0;
+}
+
 static int ath6kl_cfg80211_change_iface(struct wiphy *wiphy,
                                        struct net_device *ndev,
                                        enum nl80211_iftype type, u32 *flags,
                                        struct vif_params *params)
 {
-       struct ath6kl *ar = ath6kl_priv(ndev);
-       struct wireless_dev *wdev = ar->wdev;
+       struct ath6kl_vif *vif = netdev_priv(ndev);
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: type %u\n", __func__, type);
 
-       if (!ath6kl_cfg80211_ready(ar))
-               return -EIO;
-
        switch (type) {
        case NL80211_IFTYPE_STATION:
-               ar->next_mode = INFRA_NETWORK;
+               vif->next_mode = INFRA_NETWORK;
                break;
        case NL80211_IFTYPE_ADHOC:
-               ar->next_mode = ADHOC_NETWORK;
+               vif->next_mode = ADHOC_NETWORK;
                break;
        case NL80211_IFTYPE_AP:
-               ar->next_mode = AP_NETWORK;
+               vif->next_mode = AP_NETWORK;
                break;
        case NL80211_IFTYPE_P2P_CLIENT:
-               ar->next_mode = INFRA_NETWORK;
+               vif->next_mode = INFRA_NETWORK;
                break;
        case NL80211_IFTYPE_P2P_GO:
-               ar->next_mode = AP_NETWORK;
+               vif->next_mode = AP_NETWORK;
                break;
        default:
                ath6kl_err("invalid interface type %u\n", type);
                return -EOPNOTSUPP;
        }
 
-       wdev->iftype = type;
+       vif->wdev.iftype = type;
 
        return 0;
 }
@@ -1143,16 +1446,17 @@ static int ath6kl_cfg80211_join_ibss(struct wiphy *wiphy,
                                     struct cfg80211_ibss_params *ibss_param)
 {
        struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
        int status;
 
-       if (!ath6kl_cfg80211_ready(ar))
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
-       ar->ssid_len = ibss_param->ssid_len;
-       memcpy(ar->ssid, ibss_param->ssid, ar->ssid_len);
+       vif->ssid_len = ibss_param->ssid_len;
+       memcpy(vif->ssid, ibss_param->ssid, vif->ssid_len);
 
        if (ibss_param->channel)
-               ar->ch_hint = ibss_param->channel->center_freq;
+               vif->ch_hint = ibss_param->channel->center_freq;
 
        if (ibss_param->channel_fixed) {
                /*
@@ -1164,44 +1468,45 @@ static int ath6kl_cfg80211_join_ibss(struct wiphy *wiphy,
                return -EOPNOTSUPP;
        }
 
-       memset(ar->req_bssid, 0, sizeof(ar->req_bssid));
+       memset(vif->req_bssid, 0, sizeof(vif->req_bssid));
        if (ibss_param->bssid && !is_broadcast_ether_addr(ibss_param->bssid))
-               memcpy(ar->req_bssid, ibss_param->bssid, sizeof(ar->req_bssid));
+               memcpy(vif->req_bssid, ibss_param->bssid,
+                      sizeof(vif->req_bssid));
 
-       ath6kl_set_wpa_version(ar, 0);
+       ath6kl_set_wpa_version(vif, 0);
 
-       status = ath6kl_set_auth_type(ar, NL80211_AUTHTYPE_OPEN_SYSTEM);
+       status = ath6kl_set_auth_type(vif, NL80211_AUTHTYPE_OPEN_SYSTEM);
        if (status)
                return status;
 
        if (ibss_param->privacy) {
-               ath6kl_set_cipher(ar, WLAN_CIPHER_SUITE_WEP40, true);
-               ath6kl_set_cipher(ar, WLAN_CIPHER_SUITE_WEP40, false);
+               ath6kl_set_cipher(vif, WLAN_CIPHER_SUITE_WEP40, true);
+               ath6kl_set_cipher(vif, WLAN_CIPHER_SUITE_WEP40, false);
        } else {
-               ath6kl_set_cipher(ar, 0, true);
-               ath6kl_set_cipher(ar, 0, false);
+               ath6kl_set_cipher(vif, 0, true);
+               ath6kl_set_cipher(vif, 0, false);
        }
 
-       ar->nw_type = ar->next_mode;
+       vif->nw_type = vif->next_mode;
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
                   "%s: connect called with authmode %d dot11 auth %d"
                   " PW crypto %d PW crypto len %d GRP crypto %d"
                   " GRP crypto len %d channel hint %u\n",
                   __func__,
-                  ar->auth_mode, ar->dot11_auth_mode, ar->prwise_crypto,
-                  ar->prwise_crypto_len, ar->grp_crypto,
-                  ar->grp_crypto_len, ar->ch_hint);
-
-       status = ath6kl_wmi_connect_cmd(ar->wmi, ar->nw_type,
-                                       ar->dot11_auth_mode, ar->auth_mode,
-                                       ar->prwise_crypto,
-                                       ar->prwise_crypto_len,
-                                       ar->grp_crypto, ar->grp_crypto_len,
-                                       ar->ssid_len, ar->ssid,
-                                       ar->req_bssid, ar->ch_hint,
-                                       ar->connect_ctrl_flags);
-       set_bit(CONNECT_PEND, &ar->flag);
+                  vif->auth_mode, vif->dot11_auth_mode, vif->prwise_crypto,
+                  vif->prwise_crypto_len, vif->grp_crypto,
+                  vif->grp_crypto_len, vif->ch_hint);
+
+       status = ath6kl_wmi_connect_cmd(ar->wmi, vif->fw_vif_idx, vif->nw_type,
+                                       vif->dot11_auth_mode, vif->auth_mode,
+                                       vif->prwise_crypto,
+                                       vif->prwise_crypto_len,
+                                       vif->grp_crypto, vif->grp_crypto_len,
+                                       vif->ssid_len, vif->ssid,
+                                       vif->req_bssid, vif->ch_hint,
+                                       ar->connect_ctrl_flags, SUBTYPE_NONE);
+       set_bit(CONNECT_PEND, &vif->flags);
 
        return 0;
 }
@@ -1209,14 +1514,14 @@ static int ath6kl_cfg80211_join_ibss(struct wiphy *wiphy,
 static int ath6kl_cfg80211_leave_ibss(struct wiphy *wiphy,
                                      struct net_device *dev)
 {
-       struct ath6kl *ar = (struct ath6kl *)ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
 
-       if (!ath6kl_cfg80211_ready(ar))
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
-       ath6kl_disconnect(ar);
-       memset(ar->ssid, 0, sizeof(ar->ssid));
-       ar->ssid_len = 0;
+       ath6kl_disconnect(vif);
+       memset(vif->ssid, 0, sizeof(vif->ssid));
+       vif->ssid_len = 0;
 
        return 0;
 }
@@ -1226,6 +1531,8 @@ static const u32 cipher_suites[] = {
        WLAN_CIPHER_SUITE_WEP104,
        WLAN_CIPHER_SUITE_TKIP,
        WLAN_CIPHER_SUITE_CCMP,
+       CCKM_KRK_CIPHER_SUITE,
+       WLAN_CIPHER_SUITE_SMS4,
 };
 
 static bool is_rate_legacy(s32 rate)
@@ -1293,21 +1600,22 @@ static int ath6kl_get_station(struct wiphy *wiphy, struct net_device *dev,
                              u8 *mac, struct station_info *sinfo)
 {
        struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
        long left;
        bool sgi;
        s32 rate;
        int ret;
        u8 mcs;
 
-       if (memcmp(mac, ar->bssid, ETH_ALEN) != 0)
+       if (memcmp(mac, vif->bssid, ETH_ALEN) != 0)
                return -ENOENT;
 
        if (down_interruptible(&ar->sem))
                return -EBUSY;
 
-       set_bit(STATS_UPDATE_PEND, &ar->flag);
+       set_bit(STATS_UPDATE_PEND, &vif->flags);
 
-       ret = ath6kl_wmi_get_stats_cmd(ar->wmi);
+       ret = ath6kl_wmi_get_stats_cmd(ar->wmi, vif->fw_vif_idx);
 
        if (ret != 0) {
                up(&ar->sem);
@@ -1316,7 +1624,7 @@ static int ath6kl_get_station(struct wiphy *wiphy, struct net_device *dev,
 
        left = wait_event_interruptible_timeout(ar->event_wq,
                                                !test_bit(STATS_UPDATE_PEND,
-                                                         &ar->flag),
+                                                         &vif->flags),
                                                WMI_TIMEOUT);
 
        up(&ar->sem);
@@ -1326,24 +1634,24 @@ static int ath6kl_get_station(struct wiphy *wiphy, struct net_device *dev,
        else if (left < 0)
                return left;
 
-       if (ar->target_stats.rx_byte) {
-               sinfo->rx_bytes = ar->target_stats.rx_byte;
+       if (vif->target_stats.rx_byte) {
+               sinfo->rx_bytes = vif->target_stats.rx_byte;
                sinfo->filled |= STATION_INFO_RX_BYTES;
-               sinfo->rx_packets = ar->target_stats.rx_pkt;
+               sinfo->rx_packets = vif->target_stats.rx_pkt;
                sinfo->filled |= STATION_INFO_RX_PACKETS;
        }
 
-       if (ar->target_stats.tx_byte) {
-               sinfo->tx_bytes = ar->target_stats.tx_byte;
+       if (vif->target_stats.tx_byte) {
+               sinfo->tx_bytes = vif->target_stats.tx_byte;
                sinfo->filled |= STATION_INFO_TX_BYTES;
-               sinfo->tx_packets = ar->target_stats.tx_pkt;
+               sinfo->tx_packets = vif->target_stats.tx_pkt;
                sinfo->filled |= STATION_INFO_TX_PACKETS;
        }
 
-       sinfo->signal = ar->target_stats.cs_rssi;
+       sinfo->signal = vif->target_stats.cs_rssi;
        sinfo->filled |= STATION_INFO_SIGNAL;
 
-       rate = ar->target_stats.tx_ucast_rate;
+       rate = vif->target_stats.tx_ucast_rate;
 
        if (is_rate_legacy(rate)) {
                sinfo->txrate.legacy = rate / 100;
@@ -1375,13 +1683,13 @@ static int ath6kl_get_station(struct wiphy *wiphy, struct net_device *dev,
 
        sinfo->filled |= STATION_INFO_TX_BITRATE;
 
-       if (test_bit(CONNECTED, &ar->flag) &&
-           test_bit(DTIM_PERIOD_AVAIL, &ar->flag) &&
-           ar->nw_type == INFRA_NETWORK) {
+       if (test_bit(CONNECTED, &vif->flags) &&
+           test_bit(DTIM_PERIOD_AVAIL, &vif->flags) &&
+           vif->nw_type == INFRA_NETWORK) {
                sinfo->filled |= STATION_INFO_BSS_PARAM;
                sinfo->bss_param.flags = 0;
-               sinfo->bss_param.dtim_period = ar->assoc_bss_dtim_period;
-               sinfo->bss_param.beacon_interval = ar->assoc_bss_beacon_int;
+               sinfo->bss_param.dtim_period = vif->assoc_bss_dtim_period;
+               sinfo->bss_param.beacon_interval = vif->assoc_bss_beacon_int;
        }
 
        return 0;
@@ -1391,7 +1699,9 @@ static int ath6kl_set_pmksa(struct wiphy *wiphy, struct net_device *netdev,
                            struct cfg80211_pmksa *pmksa)
 {
        struct ath6kl *ar = ath6kl_priv(netdev);
-       return ath6kl_wmi_setpmkid_cmd(ar->wmi, pmksa->bssid,
+       struct ath6kl_vif *vif = netdev_priv(netdev);
+
+       return ath6kl_wmi_setpmkid_cmd(ar->wmi, vif->fw_vif_idx, pmksa->bssid,
                                       pmksa->pmkid, true);
 }
 
@@ -1399,25 +1709,332 @@ static int ath6kl_del_pmksa(struct wiphy *wiphy, struct net_device *netdev,
                            struct cfg80211_pmksa *pmksa)
 {
        struct ath6kl *ar = ath6kl_priv(netdev);
-       return ath6kl_wmi_setpmkid_cmd(ar->wmi, pmksa->bssid,
+       struct ath6kl_vif *vif = netdev_priv(netdev);
+
+       return ath6kl_wmi_setpmkid_cmd(ar->wmi, vif->fw_vif_idx, pmksa->bssid,
                                       pmksa->pmkid, false);
 }
 
 static int ath6kl_flush_pmksa(struct wiphy *wiphy, struct net_device *netdev)
 {
        struct ath6kl *ar = ath6kl_priv(netdev);
-       if (test_bit(CONNECTED, &ar->flag))
-               return ath6kl_wmi_setpmkid_cmd(ar->wmi, ar->bssid, NULL, false);
+       struct ath6kl_vif *vif = netdev_priv(netdev);
+
+       if (test_bit(CONNECTED, &vif->flags))
+               return ath6kl_wmi_setpmkid_cmd(ar->wmi, vif->fw_vif_idx,
+                                              vif->bssid, NULL, false);
+       return 0;
+}
+
+static int ath6kl_wow_suspend(struct ath6kl *ar, struct cfg80211_wowlan *wow)
+{
+       struct in_device *in_dev;
+       struct in_ifaddr *ifa;
+       struct ath6kl_vif *vif;
+       int ret, pos, left;
+       u32 filter = 0;
+       u16 i;
+       u8 mask[WOW_MASK_SIZE], index = 0;
+       __be32 ips[MAX_IP_ADDRS];
+
+       vif = ath6kl_vif_first(ar);
+       if (!vif)
+               return -EIO;
+
+       if (!ath6kl_cfg80211_ready(vif))
+               return -EIO;
+
+       if (!test_bit(CONNECTED, &vif->flags))
+               return -EINVAL;
+
+       /* Clear existing WOW patterns */
+       for (i = 0; i < WOW_MAX_FILTERS_PER_LIST; i++)
+               ath6kl_wmi_del_wow_pattern_cmd(ar->wmi, vif->fw_vif_idx,
+                                              WOW_LIST_ID, i);
+       /* Configure new WOW patterns */
+       for (i = 0; i < wow->n_patterns; i++) {
+
+               /*
+                * Convert given nl80211 specific mask value to equivalent
+                * driver specific mask value and send it to the chip along
+                * with patterns. For example, If the mask value defined in
+                * struct cfg80211_wowlan is 0xA (equivalent binary is 1010),
+                * then equivalent driver specific mask value is
+                * "0xFF 0x00 0xFF 0x00".
+                */
+               memset(&mask, 0, sizeof(mask));
+               for (pos = 0; pos < wow->patterns[i].pattern_len; pos++) {
+                       if (wow->patterns[i].mask[pos / 8] & (0x1 << (pos % 8)))
+                               mask[pos] = 0xFF;
+               }
+               /*
+                * Note: Pattern's offset is not passed as part of wowlan
+                * parameter from CFG layer. So it's always passed as ZERO
+                * to the firmware. It means, given WOW patterns are always
+                * matched from the first byte of received pkt in the firmware.
+                */
+               ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
+                                       vif->fw_vif_idx, WOW_LIST_ID,
+                                       wow->patterns[i].pattern_len,
+                                       0 /* pattern offset */,
+                                       wow->patterns[i].pattern, mask);
+               if (ret)
+                       return ret;
+       }
+
+       /* Setup own IP addr for ARP agent. */
+       in_dev = __in_dev_get_rtnl(vif->ndev);
+       if (!in_dev)
+               goto skip_arp;
+
+       ifa = in_dev->ifa_list;
+       memset(&ips, 0, sizeof(ips));
+
+       /* Configure IP addr only if IP address count < MAX_IP_ADDRS */
+       while (index < MAX_IP_ADDRS && ifa) {
+               ips[index] = ifa->ifa_local;
+               ifa = ifa->ifa_next;
+               index++;
+       }
+
+       if (ifa) {
+               ath6kl_err("total IP addr count is exceeding fw limit\n");
+               return -EINVAL;
+       }
+
+       ret = ath6kl_wmi_set_ip_cmd(ar->wmi, vif->fw_vif_idx, ips[0], ips[1]);
+       if (ret) {
+               ath6kl_err("fail to setup ip for arp agent\n");
+               return ret;
+       }
+
+skip_arp:
+       if (wow->disconnect)
+               filter |= WOW_FILTER_OPTION_NWK_DISASSOC;
+
+       if (wow->magic_pkt)
+               filter |= WOW_FILTER_OPTION_MAGIC_PACKET;
+
+       if (wow->gtk_rekey_failure)
+               filter |= WOW_FILTER_OPTION_GTK_ERROR;
+
+       if (wow->eap_identity_req)
+               filter |= WOW_FILTER_OPTION_EAP_REQ;
+
+       if (wow->four_way_handshake)
+               filter |= WOW_FILTER_OPTION_8021X_4WAYHS;
+
+       ret = ath6kl_wmi_set_wow_mode_cmd(ar->wmi, vif->fw_vif_idx,
+                                         ATH6KL_WOW_MODE_ENABLE,
+                                         filter,
+                                         WOW_HOST_REQ_DELAY);
+       if (ret)
+               return ret;
+
+       ret = ath6kl_wmi_set_host_sleep_mode_cmd(ar->wmi, vif->fw_vif_idx,
+                                                ATH6KL_HOST_MODE_ASLEEP);
+       if (ret)
+               return ret;
+
+       if (ar->tx_pending[ar->ctrl_ep]) {
+               left = wait_event_interruptible_timeout(ar->event_wq,
+                               ar->tx_pending[ar->ctrl_ep] == 0, WMI_TIMEOUT);
+               if (left == 0) {
+                       ath6kl_warn("clear wmi ctrl data timeout\n");
+                       ret = -ETIMEDOUT;
+               } else if (left < 0) {
+                       ath6kl_warn("clear wmi ctrl data failed: %d\n", left);
+                       ret = left;
+               }
+       }
+
+       return ret;
+}
+
+static int ath6kl_wow_resume(struct ath6kl *ar)
+{
+       struct ath6kl_vif *vif;
+       int ret;
+
+       vif = ath6kl_vif_first(ar);
+       if (!vif)
+               return -EIO;
+
+       ret = ath6kl_wmi_set_host_sleep_mode_cmd(ar->wmi, vif->fw_vif_idx,
+                                                ATH6KL_HOST_MODE_AWAKE);
+       return ret;
+}
+
+int ath6kl_cfg80211_suspend(struct ath6kl *ar,
+                           enum ath6kl_cfg_suspend_mode mode,
+                           struct cfg80211_wowlan *wow)
+{
+       int ret;
+
+       switch (mode) {
+       case ATH6KL_CFG_SUSPEND_WOW:
+
+               ath6kl_dbg(ATH6KL_DBG_SUSPEND, "wow mode suspend\n");
+
+               /* Flush all non control pkts in TX path */
+               ath6kl_tx_data_cleanup(ar);
+
+               ret = ath6kl_wow_suspend(ar, wow);
+               if (ret) {
+                       ath6kl_err("wow suspend failed: %d\n", ret);
+                       return ret;
+               }
+               ar->state = ATH6KL_STATE_WOW;
+               break;
+
+       case ATH6KL_CFG_SUSPEND_DEEPSLEEP:
+
+               ath6kl_cfg80211_stop_all(ar);
+
+               /* save the current power mode before enabling power save */
+               ar->wmi->saved_pwr_mode = ar->wmi->pwr_mode;
+
+               ret = ath6kl_wmi_powermode_cmd(ar->wmi, 0, REC_POWER);
+               if (ret) {
+                       ath6kl_warn("wmi powermode command failed during suspend: %d\n",
+                                   ret);
+               }
+
+               ar->state = ATH6KL_STATE_DEEPSLEEP;
+
+               break;
+
+       case ATH6KL_CFG_SUSPEND_CUTPOWER:
+
+               ath6kl_cfg80211_stop_all(ar);
+
+               if (ar->state == ATH6KL_STATE_OFF) {
+                       ath6kl_dbg(ATH6KL_DBG_SUSPEND,
+                                  "suspend hw off, no action for cutpower\n");
+                       break;
+               }
+
+               ath6kl_dbg(ATH6KL_DBG_SUSPEND, "suspend cutting power\n");
+
+               ret = ath6kl_init_hw_stop(ar);
+               if (ret) {
+                       ath6kl_warn("failed to stop hw during suspend: %d\n",
+                                   ret);
+               }
+
+               ar->state = ATH6KL_STATE_CUTPOWER;
+
+               break;
+
+       case ATH6KL_CFG_SUSPEND_SCHED_SCAN:
+               /*
+                * Nothing needed for schedule scan, firmware is already in
+                * wow mode and sleeping most of the time.
+                */
+               break;
+
+       default:
+               break;
+       }
+
+       return 0;
+}
+
+int ath6kl_cfg80211_resume(struct ath6kl *ar)
+{
+       int ret;
+
+       switch (ar->state) {
+       case  ATH6KL_STATE_WOW:
+               ath6kl_dbg(ATH6KL_DBG_SUSPEND, "wow mode resume\n");
+
+               ret = ath6kl_wow_resume(ar);
+               if (ret) {
+                       ath6kl_warn("wow mode resume failed: %d\n", ret);
+                       return ret;
+               }
+
+               ar->state = ATH6KL_STATE_ON;
+               break;
+
+       case ATH6KL_STATE_DEEPSLEEP:
+               if (ar->wmi->pwr_mode != ar->wmi->saved_pwr_mode) {
+                       ret = ath6kl_wmi_powermode_cmd(ar->wmi, 0,
+                                                      ar->wmi->saved_pwr_mode);
+                       if (ret) {
+                               ath6kl_warn("wmi powermode command failed during resume: %d\n",
+                                           ret);
+                       }
+               }
+
+               ar->state = ATH6KL_STATE_ON;
+
+               break;
+
+       case ATH6KL_STATE_CUTPOWER:
+               ath6kl_dbg(ATH6KL_DBG_SUSPEND, "resume restoring power\n");
+
+               ret = ath6kl_init_hw_start(ar);
+               if (ret) {
+                       ath6kl_warn("Failed to boot hw in resume: %d\n", ret);
+                       return ret;
+               }
+               break;
+
+       case ATH6KL_STATE_SCHED_SCAN:
+               break;
+
+       default:
+               break;
+       }
+
        return 0;
 }
 
 #ifdef CONFIG_PM
-static int ar6k_cfg80211_suspend(struct wiphy *wiphy,
+
+/* hif layer decides what suspend mode to use */
+static int __ath6kl_cfg80211_suspend(struct wiphy *wiphy,
                                 struct cfg80211_wowlan *wow)
 {
        struct ath6kl *ar = wiphy_priv(wiphy);
 
-       return ath6kl_hif_suspend(ar);
+       return ath6kl_hif_suspend(ar, wow);
+}
+
+static int __ath6kl_cfg80211_resume(struct wiphy *wiphy)
+{
+       struct ath6kl *ar = wiphy_priv(wiphy);
+
+       return ath6kl_hif_resume(ar);
+}
+
+/*
+ * FIXME: WOW suspend mode is selected if the host sdio controller supports
+ * both sdio irq wake up and keep power. The target pulls sdio data line to
+ * wake up the host when WOW pattern matches. This causes sdio irq handler
+ * is being called in the host side which internally hits ath6kl's RX path.
+ *
+ * Since sdio interrupt is not disabled, RX path executes even before
+ * the host executes the actual resume operation from PM module.
+ *
+ * In the current scenario, WOW resume should happen before start processing
+ * any data from the target. So It's required to perform WOW resume in RX path.
+ * Ideally we should perform WOW resume only in the actual platform
+ * resume path. This area needs bit rework to avoid WOW resume in RX path.
+ *
+ * ath6kl_check_wow_status() is called from ath6kl_rx().
+ */
+void ath6kl_check_wow_status(struct ath6kl *ar)
+{
+       if (ar->state == ATH6KL_STATE_WOW)
+               ath6kl_cfg80211_resume(ar);
+}
+
+#else
+
+void ath6kl_check_wow_status(struct ath6kl *ar)
+{
 }
 #endif
 
@@ -1425,14 +2042,25 @@ static int ath6kl_set_channel(struct wiphy *wiphy, struct net_device *dev,
                              struct ieee80211_channel *chan,
                              enum nl80211_channel_type channel_type)
 {
-       struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif;
 
-       if (!ath6kl_cfg80211_ready(ar))
+       /*
+        * 'dev' could be NULL if a channel change is required for the hardware
+        * device itself, instead of a particular VIF.
+        *
+        * FIXME: To be handled properly when monitor mode is supported.
+        */
+       if (!dev)
+               return -EBUSY;
+
+       vif = netdev_priv(dev);
+
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: center_freq=%u hw_value=%u\n",
                   __func__, chan->center_freq, chan->hw_value);
-       ar->next_chan = chan->center_freq;
+       vif->next_chan = chan->center_freq;
 
        return 0;
 }
@@ -1444,9 +2072,10 @@ static bool ath6kl_is_p2p_ie(const u8 *pos)
                pos[4] == 0x9a && pos[5] == 0x09;
 }
 
-static int ath6kl_set_ap_probe_resp_ies(struct ath6kl *ar, const u8 *ies,
-                                       size_t ies_len)
+static int ath6kl_set_ap_probe_resp_ies(struct ath6kl_vif *vif,
+                                       const u8 *ies, size_t ies_len)
 {
+       struct ath6kl *ar = vif->ar;
        const u8 *pos;
        u8 *buf = NULL;
        size_t len = 0;
@@ -1473,8 +2102,8 @@ static int ath6kl_set_ap_probe_resp_ies(struct ath6kl *ar, const u8 *ies,
                }
        }
 
-       ret = ath6kl_wmi_set_appie_cmd(ar->wmi, WMI_FRAME_PROBE_RESP,
-                                      buf, len);
+       ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
+                                      WMI_FRAME_PROBE_RESP, buf, len);
        kfree(buf);
        return ret;
 }
@@ -1483,36 +2112,39 @@ static int ath6kl_ap_beacon(struct wiphy *wiphy, struct net_device *dev,
                            struct beacon_parameters *info, bool add)
 {
        struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
        struct ieee80211_mgmt *mgmt;
        u8 *ies;
        int ies_len;
        struct wmi_connect_cmd p;
        int res;
-       int i;
+       int i, ret;
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: add=%d\n", __func__, add);
 
-       if (!ath6kl_cfg80211_ready(ar))
+       if (!ath6kl_cfg80211_ready(vif))
                return -EIO;
 
-       if (ar->next_mode != AP_NETWORK)
+       if (vif->next_mode != AP_NETWORK)
                return -EOPNOTSUPP;
 
        if (info->beacon_ies) {
-               res = ath6kl_wmi_set_appie_cmd(ar->wmi, WMI_FRAME_BEACON,
+               res = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
+                                              WMI_FRAME_BEACON,
                                               info->beacon_ies,
                                               info->beacon_ies_len);
                if (res)
                        return res;
        }
        if (info->proberesp_ies) {
-               res = ath6kl_set_ap_probe_resp_ies(ar, info->proberesp_ies,
+               res = ath6kl_set_ap_probe_resp_ies(vif, info->proberesp_ies,
                                                   info->proberesp_ies_len);
                if (res)
                        return res;
        }
        if (info->assocresp_ies) {
-               res = ath6kl_wmi_set_appie_cmd(ar->wmi, WMI_FRAME_ASSOC_RESP,
+               res = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
+                                              WMI_FRAME_ASSOC_RESP,
                                               info->assocresp_ies,
                                               info->assocresp_ies_len);
                if (res)
@@ -1539,12 +2171,14 @@ static int ath6kl_ap_beacon(struct wiphy *wiphy, struct net_device *dev,
 
        if (info->ssid == NULL)
                return -EINVAL;
-       memcpy(ar->ssid, info->ssid, info->ssid_len);
-       ar->ssid_len = info->ssid_len;
+       memcpy(vif->ssid, info->ssid, info->ssid_len);
+       vif->ssid_len = info->ssid_len;
        if (info->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE)
                return -EOPNOTSUPP; /* TODO */
 
-       ar->dot11_auth_mode = OPEN_AUTH;
+       ret = ath6kl_set_auth_type(vif, info->auth_type);
+       if (ret)
+               return ret;
 
        memset(&p, 0, sizeof(p));
 
@@ -1566,7 +2200,7 @@ static int ath6kl_ap_beacon(struct wiphy *wiphy, struct net_device *dev,
        }
        if (p.auth_mode == 0)
                p.auth_mode = NONE_AUTH;
-       ar->auth_mode = p.auth_mode;
+       vif->auth_mode = p.auth_mode;
 
        for (i = 0; i < info->crypto.n_ciphers_pairwise; i++) {
                switch (info->crypto.ciphers_pairwise[i]) {
@@ -1580,13 +2214,16 @@ static int ath6kl_ap_beacon(struct wiphy *wiphy, struct net_device *dev,
                case WLAN_CIPHER_SUITE_CCMP:
                        p.prwise_crypto_type |= AES_CRYPT;
                        break;
+               case WLAN_CIPHER_SUITE_SMS4:
+                       p.prwise_crypto_type |= WAPI_CRYPT;
+                       break;
                }
        }
        if (p.prwise_crypto_type == 0) {
                p.prwise_crypto_type = NONE_CRYPT;
-               ath6kl_set_cipher(ar, 0, true);
+               ath6kl_set_cipher(vif, 0, true);
        } else if (info->crypto.n_ciphers_pairwise == 1)
-               ath6kl_set_cipher(ar, info->crypto.ciphers_pairwise[0], true);
+               ath6kl_set_cipher(vif, info->crypto.ciphers_pairwise[0], true);
 
        switch (info->crypto.cipher_group) {
        case WLAN_CIPHER_SUITE_WEP40:
@@ -1599,21 +2236,39 @@ static int ath6kl_ap_beacon(struct wiphy *wiphy, struct net_device *dev,
        case WLAN_CIPHER_SUITE_CCMP:
                p.grp_crypto_type = AES_CRYPT;
                break;
+       case WLAN_CIPHER_SUITE_SMS4:
+               p.grp_crypto_type = WAPI_CRYPT;
+               break;
        default:
                p.grp_crypto_type = NONE_CRYPT;
                break;
        }
-       ath6kl_set_cipher(ar, info->crypto.cipher_group, false);
+       ath6kl_set_cipher(vif, info->crypto.cipher_group, false);
 
        p.nw_type = AP_NETWORK;
-       ar->nw_type = ar->next_mode;
+       vif->nw_type = vif->next_mode;
 
-       p.ssid_len = ar->ssid_len;
-       memcpy(p.ssid, ar->ssid, ar->ssid_len);
-       p.dot11_auth_mode = ar->dot11_auth_mode;
-       p.ch = cpu_to_le16(ar->next_chan);
+       p.ssid_len = vif->ssid_len;
+       memcpy(p.ssid, vif->ssid, vif->ssid_len);
+       p.dot11_auth_mode = vif->dot11_auth_mode;
+       p.ch = cpu_to_le16(vif->next_chan);
 
-       res = ath6kl_wmi_ap_profile_commit(ar->wmi, &p);
+       /* Enable uAPSD support by default */
+       res = ath6kl_wmi_ap_set_apsd(ar->wmi, vif->fw_vif_idx, true);
+       if (res < 0)
+               return res;
+
+       if (vif->wdev.iftype == NL80211_IFTYPE_P2P_GO) {
+               p.nw_subtype = SUBTYPE_P2PGO;
+       } else {
+               /*
+                * Due to firmware limitation, it is not possible to
+                * do P2P mgmt operations in AP mode
+                */
+               p.nw_subtype = SUBTYPE_NONE;
+       }
+
+       res = ath6kl_wmi_ap_profile_commit(ar->wmi, vif->fw_vif_idx, &p);
        if (res < 0)
                return res;
 
@@ -1635,24 +2290,39 @@ static int ath6kl_set_beacon(struct wiphy *wiphy, struct net_device *dev,
 static int ath6kl_del_beacon(struct wiphy *wiphy, struct net_device *dev)
 {
        struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
 
-       if (ar->nw_type != AP_NETWORK)
+       if (vif->nw_type != AP_NETWORK)
                return -EOPNOTSUPP;
-       if (!test_bit(CONNECTED, &ar->flag))
+       if (!test_bit(CONNECTED, &vif->flags))
                return -ENOTCONN;
 
-       ath6kl_wmi_disconnect_cmd(ar->wmi);
-       clear_bit(CONNECTED, &ar->flag);
+       ath6kl_wmi_disconnect_cmd(ar->wmi, vif->fw_vif_idx);
+       clear_bit(CONNECTED, &vif->flags);
 
        return 0;
 }
 
+static const u8 bcast_addr[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
+
+static int ath6kl_del_station(struct wiphy *wiphy, struct net_device *dev,
+                             u8 *mac)
+{
+       struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
+       const u8 *addr = mac ? mac : bcast_addr;
+
+       return ath6kl_wmi_ap_set_mlme(ar->wmi, vif->fw_vif_idx, WMI_AP_DEAUTH,
+                                     addr, WLAN_REASON_PREV_AUTH_NOT_VALID);
+}
+
 static int ath6kl_change_station(struct wiphy *wiphy, struct net_device *dev,
                                 u8 *mac, struct station_parameters *params)
 {
        struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
 
-       if (ar->nw_type != AP_NETWORK)
+       if (vif->nw_type != AP_NETWORK)
                return -EOPNOTSUPP;
 
        /* Use this only for authorizing/unauthorizing a station */
@@ -1660,10 +2330,10 @@ static int ath6kl_change_station(struct wiphy *wiphy, struct net_device *dev,
                return -EOPNOTSUPP;
 
        if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED))
-               return ath6kl_wmi_ap_set_mlme(ar->wmi, WMI_AP_MLME_AUTHORIZE,
-                                             mac, 0);
-       return ath6kl_wmi_ap_set_mlme(ar->wmi, WMI_AP_MLME_UNAUTHORIZE, mac,
-                                     0);
+               return ath6kl_wmi_ap_set_mlme(ar->wmi, vif->fw_vif_idx,
+                                             WMI_AP_MLME_AUTHORIZE, mac, 0);
+       return ath6kl_wmi_ap_set_mlme(ar->wmi, vif->fw_vif_idx,
+                                     WMI_AP_MLME_UNAUTHORIZE, mac, 0);
 }
 
 static int ath6kl_remain_on_channel(struct wiphy *wiphy,
@@ -1674,13 +2344,20 @@ static int ath6kl_remain_on_channel(struct wiphy *wiphy,
                                    u64 *cookie)
 {
        struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
+       u32 id;
 
        /* TODO: if already pending or ongoing remain-on-channel,
         * return -EBUSY */
-       *cookie = 1; /* only a single pending request is supported */
+       id = ++vif->last_roc_id;
+       if (id == 0) {
+               /* Do not use 0 as the cookie value */
+               id = ++vif->last_roc_id;
+       }
+       *cookie = id;
 
-       return ath6kl_wmi_remain_on_chnl_cmd(ar->wmi, chan->center_freq,
-                                            duration);
+       return ath6kl_wmi_remain_on_chnl_cmd(ar->wmi, vif->fw_vif_idx,
+                                            chan->center_freq, duration);
 }
 
 static int ath6kl_cancel_remain_on_channel(struct wiphy *wiphy,
@@ -1688,16 +2365,20 @@ static int ath6kl_cancel_remain_on_channel(struct wiphy *wiphy,
                                           u64 cookie)
 {
        struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
 
-       if (cookie != 1)
+       if (cookie != vif->last_roc_id)
                return -ENOENT;
+       vif->last_cancel_roc_id = cookie;
 
-       return ath6kl_wmi_cancel_remain_on_chnl_cmd(ar->wmi);
+       return ath6kl_wmi_cancel_remain_on_chnl_cmd(ar->wmi, vif->fw_vif_idx);
 }
 
-static int ath6kl_send_go_probe_resp(struct ath6kl *ar, const u8 *buf,
-                                    size_t len, unsigned int freq)
+static int ath6kl_send_go_probe_resp(struct ath6kl_vif *vif,
+                                    const u8 *buf, size_t len,
+                                    unsigned int freq)
 {
+       struct ath6kl *ar = vif->ar;
        const u8 *pos;
        u8 *p2p;
        int p2p_len;
@@ -1724,8 +2405,8 @@ static int ath6kl_send_go_probe_resp(struct ath6kl *ar, const u8 *buf,
                pos += 2 + pos[1];
        }
 
-       ret = ath6kl_wmi_send_probe_response_cmd(ar->wmi, freq, mgmt->da,
-                                                p2p, p2p_len);
+       ret = ath6kl_wmi_send_probe_response_cmd(ar->wmi, vif->fw_vif_idx, freq,
+                                                mgmt->da, p2p, p2p_len);
        kfree(p2p);
        return ret;
 }
@@ -1734,44 +2415,61 @@ static int ath6kl_mgmt_tx(struct wiphy *wiphy, struct net_device *dev,
                          struct ieee80211_channel *chan, bool offchan,
                          enum nl80211_channel_type channel_type,
                          bool channel_type_valid, unsigned int wait,
-                         const u8 *buf, size_t len, bool no_cck, u64 *cookie)
+                         const u8 *buf, size_t len, bool no_cck,
+                         bool dont_wait_for_ack, u64 *cookie)
 {
        struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
        u32 id;
        const struct ieee80211_mgmt *mgmt;
 
        mgmt = (const struct ieee80211_mgmt *) buf;
        if (buf + len >= mgmt->u.probe_resp.variable &&
-           ar->nw_type == AP_NETWORK && test_bit(CONNECTED, &ar->flag) &&
+           vif->nw_type == AP_NETWORK && test_bit(CONNECTED, &vif->flags) &&
            ieee80211_is_probe_resp(mgmt->frame_control)) {
                /*
                 * Send Probe Response frame in AP mode using a separate WMI
                 * command to allow the target to fill in the generic IEs.
                 */
                *cookie = 0; /* TX status not supported */
-               return ath6kl_send_go_probe_resp(ar, buf, len,
+               return ath6kl_send_go_probe_resp(vif, buf, len,
                                                 chan->center_freq);
        }
 
-       id = ar->send_action_id++;
+       id = vif->send_action_id++;
        if (id == 0) {
                /*
                 * 0 is a reserved value in the WMI command and shall not be
                 * used for the command.
                 */
-               id = ar->send_action_id++;
+               id = vif->send_action_id++;
        }
 
        *cookie = id;
-       return ath6kl_wmi_send_action_cmd(ar->wmi, id, chan->center_freq, wait,
-                                         buf, len);
+
+       if (test_bit(ATH6KL_FW_CAPABILITY_STA_P2PDEV_DUPLEX,
+                   ar->fw_capabilities)) {
+               /*
+                * If capable of doing P2P mgmt operations using
+                * station interface, send additional information like
+                * supported rates to advertise and xmit rates for
+                * probe requests
+                */
+               return ath6kl_wmi_send_mgmt_cmd(ar->wmi, vif->fw_vif_idx, id,
+                                               chan->center_freq, wait,
+                                               buf, len, no_cck);
+       } else {
+               return ath6kl_wmi_send_action_cmd(ar->wmi, vif->fw_vif_idx, id,
+                                                 chan->center_freq, wait,
+                                                 buf, len);
+       }
 }
 
 static void ath6kl_mgmt_frame_register(struct wiphy *wiphy,
                                       struct net_device *dev,
                                       u16 frame_type, bool reg)
 {
-       struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
 
        ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: frame_type=0x%x reg=%d\n",
                   __func__, frame_type, reg);
@@ -1781,10 +2479,94 @@ static void ath6kl_mgmt_frame_register(struct wiphy *wiphy,
                 * we cannot send WMI_PROBE_REQ_REPORT_CMD here. Instead, we
                 * hardcode target to report Probe Request frames all the time.
                 */
-               ar->probe_req_report = reg;
+               vif->probe_req_report = reg;
        }
 }
 
+static int ath6kl_cfg80211_sscan_start(struct wiphy *wiphy,
+                       struct net_device *dev,
+                       struct cfg80211_sched_scan_request *request)
+{
+       struct ath6kl *ar = ath6kl_priv(dev);
+       struct ath6kl_vif *vif = netdev_priv(dev);
+       u16 interval;
+       int ret;
+       u8 i;
+
+       if (ar->state != ATH6KL_STATE_ON)
+               return -EIO;
+
+       if (vif->sme_state != SME_DISCONNECTED)
+               return -EBUSY;
+
+       for (i = 0; i < ar->wiphy->max_sched_scan_ssids; i++) {
+               ath6kl_wmi_probedssid_cmd(ar->wmi, vif->fw_vif_idx,
+                                         i, DISABLE_SSID_FLAG,
+                                         0, NULL);
+       }
+
+       /* fw uses seconds, also make sure that it's >0 */
+       interval = max_t(u16, 1, request->interval / 1000);
+
+       ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx,
+                                 interval, interval,
+                                 10, 0, 0, 0, 3, 0, 0, 0);
+
+       if (request->n_ssids && request->ssids[0].ssid_len) {
+               for (i = 0; i < request->n_ssids; i++) {
+                       ath6kl_wmi_probedssid_cmd(ar->wmi, vif->fw_vif_idx,
+                                                 i, SPECIFIC_SSID_FLAG,
+                                                 request->ssids[i].ssid_len,
+                                                 request->ssids[i].ssid);
+               }
+       }
+
+       ret = ath6kl_wmi_set_wow_mode_cmd(ar->wmi, vif->fw_vif_idx,
+                                         ATH6KL_WOW_MODE_ENABLE,
+                                         WOW_FILTER_SSID,
+                                         WOW_HOST_REQ_DELAY);
+       if (ret) {
+               ath6kl_warn("Failed to enable wow with ssid filter: %d\n", ret);
+               return ret;
+       }
+
+       /* this also clears IE in fw if it's not set */
+       ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
+                                      WMI_FRAME_PROBE_REQ,
+                                      request->ie, request->ie_len);
+       if (ret) {
+               ath6kl_warn("Failed to set probe request IE for scheduled scan: %d",
+                           ret);
+               return ret;
+       }
+
+       ret = ath6kl_wmi_set_host_sleep_mode_cmd(ar->wmi, vif->fw_vif_idx,
+                                                ATH6KL_HOST_MODE_ASLEEP);
+       if (ret) {
+               ath6kl_warn("Failed to enable host sleep mode for sched scan: %d\n",
+                           ret);
+               return ret;
+       }
+
+       ar->state = ATH6KL_STATE_SCHED_SCAN;
+
+       return ret;
+}
+
+static int ath6kl_cfg80211_sscan_stop(struct wiphy *wiphy,
+                                     struct net_device *dev)
+{
+       struct ath6kl_vif *vif = netdev_priv(dev);
+       bool stopped;
+
+       stopped = __ath6kl_cfg80211_sscan_stop(vif);
+
+       if (!stopped)
+               return -EIO;
+
+       return 0;
+}
+
 static const struct ieee80211_txrx_stypes
 ath6kl_mgmt_stypes[NUM_NL80211_IFTYPES] = {
        [NL80211_IFTYPE_STATION] = {
@@ -1793,6 +2575,12 @@ ath6kl_mgmt_stypes[NUM_NL80211_IFTYPES] = {
                .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
                BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
        },
+       [NL80211_IFTYPE_AP] = {
+               .tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
+               BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
+               .rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
+               BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
+       },
        [NL80211_IFTYPE_P2P_CLIENT] = {
                .tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
                BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
@@ -1808,6 +2596,8 @@ ath6kl_mgmt_stypes[NUM_NL80211_IFTYPES] = {
 };
 
 static struct cfg80211_ops ath6kl_cfg80211_ops = {
+       .add_virtual_intf = ath6kl_cfg80211_add_iface,
+       .del_virtual_intf = ath6kl_cfg80211_del_iface,
        .change_virtual_intf = ath6kl_cfg80211_change_iface,
        .scan = ath6kl_cfg80211_scan,
        .connect = ath6kl_cfg80211_connect,
@@ -1828,89 +2618,297 @@ static struct cfg80211_ops ath6kl_cfg80211_ops = {
        .flush_pmksa = ath6kl_flush_pmksa,
        CFG80211_TESTMODE_CMD(ath6kl_tm_cmd)
 #ifdef CONFIG_PM
-       .suspend = ar6k_cfg80211_suspend,
+       .suspend = __ath6kl_cfg80211_suspend,
+       .resume = __ath6kl_cfg80211_resume,
 #endif
        .set_channel = ath6kl_set_channel,
        .add_beacon = ath6kl_add_beacon,
        .set_beacon = ath6kl_set_beacon,
        .del_beacon = ath6kl_del_beacon,
+       .del_station = ath6kl_del_station,
        .change_station = ath6kl_change_station,
        .remain_on_channel = ath6kl_remain_on_channel,
        .cancel_remain_on_channel = ath6kl_cancel_remain_on_channel,
        .mgmt_tx = ath6kl_mgmt_tx,
        .mgmt_frame_register = ath6kl_mgmt_frame_register,
+       .sched_scan_start = ath6kl_cfg80211_sscan_start,
+       .sched_scan_stop = ath6kl_cfg80211_sscan_stop,
 };
 
-struct wireless_dev *ath6kl_cfg80211_init(struct device *dev)
+void ath6kl_cfg80211_stop(struct ath6kl_vif *vif)
 {
-       int ret = 0;
-       struct wireless_dev *wdev;
-       struct ath6kl *ar;
+       ath6kl_cfg80211_sscan_disable(vif);
 
-       wdev = kzalloc(sizeof(struct wireless_dev), GFP_KERNEL);
-       if (!wdev) {
-               ath6kl_err("couldn't allocate wireless device\n");
-               return NULL;
+       switch (vif->sme_state) {
+       case SME_DISCONNECTED:
+               break;
+       case SME_CONNECTING:
+               cfg80211_connect_result(vif->ndev, vif->bssid, NULL, 0,
+                                       NULL, 0,
+                                       WLAN_STATUS_UNSPECIFIED_FAILURE,
+                                       GFP_KERNEL);
+               break;
+       case SME_CONNECTED:
+               cfg80211_disconnected(vif->ndev, 0, NULL, 0, GFP_KERNEL);
+               break;
        }
 
+       if (test_bit(CONNECTED, &vif->flags) ||
+           test_bit(CONNECT_PEND, &vif->flags))
+               ath6kl_wmi_disconnect_cmd(vif->ar->wmi, vif->fw_vif_idx);
+
+       vif->sme_state = SME_DISCONNECTED;
+       clear_bit(CONNECTED, &vif->flags);
+       clear_bit(CONNECT_PEND, &vif->flags);
+
+       /* disable scanning */
+       if (ath6kl_wmi_scanparams_cmd(vif->ar->wmi, vif->fw_vif_idx, 0xFFFF,
+                                     0, 0, 0, 0, 0, 0, 0, 0, 0) != 0)
+               ath6kl_warn("failed to disable scan during stop\n");
+
+       ath6kl_cfg80211_scan_complete_event(vif, true);
+}
+
+void ath6kl_cfg80211_stop_all(struct ath6kl *ar)
+{
+       struct ath6kl_vif *vif;
+
+       vif = ath6kl_vif_first(ar);
+       if (!vif) {
+               /* save the current power mode before enabling power save */
+               ar->wmi->saved_pwr_mode = ar->wmi->pwr_mode;
+
+               if (ath6kl_wmi_powermode_cmd(ar->wmi, 0, REC_POWER) != 0)
+                       ath6kl_warn("ath6kl_deep_sleep_enable: "
+                                   "wmi_powermode_cmd failed\n");
+               return;
+       }
+
+       /*
+        * FIXME: we should take ar->list_lock to protect changes in the
+        * vif_list, but that's not trivial to do as ath6kl_cfg80211_stop()
+        * sleeps.
+        */
+       list_for_each_entry(vif, &ar->vif_list, list)
+               ath6kl_cfg80211_stop(vif);
+}
+
+struct ath6kl *ath6kl_core_alloc(struct device *dev)
+{
+       struct ath6kl *ar;
+       struct wiphy *wiphy;
+       u8 ctr;
+
        /* create a new wiphy for use with cfg80211 */
-       wdev->wiphy = wiphy_new(&ath6kl_cfg80211_ops, sizeof(struct ath6kl));
-       if (!wdev->wiphy) {
+       wiphy = wiphy_new(&ath6kl_cfg80211_ops, sizeof(struct ath6kl));
+
+       if (!wiphy) {
                ath6kl_err("couldn't allocate wiphy device\n");
-               kfree(wdev);
                return NULL;
        }
 
-       ar = wiphy_priv(wdev->wiphy);
+       ar = wiphy_priv(wiphy);
        ar->p2p = !!ath6kl_p2p;
+       ar->wiphy = wiphy;
+       ar->dev = dev;
+
+       ar->vif_max = 1;
+
+       ar->max_norm_iface = 1;
+
+       spin_lock_init(&ar->lock);
+       spin_lock_init(&ar->mcastpsq_lock);
+       spin_lock_init(&ar->list_lock);
+
+       init_waitqueue_head(&ar->event_wq);
+       sema_init(&ar->sem, 1);
+
+       INIT_LIST_HEAD(&ar->amsdu_rx_buffer_queue);
+       INIT_LIST_HEAD(&ar->vif_list);
+
+       clear_bit(WMI_ENABLED, &ar->flag);
+       clear_bit(SKIP_SCAN, &ar->flag);
+       clear_bit(DESTROY_IN_PROGRESS, &ar->flag);
+
+       ar->listen_intvl_b = A_DEFAULT_LISTEN_INTERVAL;
+       ar->tx_pwr = 0;
+
+       ar->intra_bss = 1;
+       ar->lrssi_roam_threshold = DEF_LRSSI_ROAM_THRESHOLD;
+
+       ar->state = ATH6KL_STATE_OFF;
+
+       memset((u8 *)ar->sta_list, 0,
+              AP_MAX_NUM_STA * sizeof(struct ath6kl_sta));
+
+       /* Init the PS queues */
+       for (ctr = 0; ctr < AP_MAX_NUM_STA; ctr++) {
+               spin_lock_init(&ar->sta_list[ctr].psq_lock);
+               skb_queue_head_init(&ar->sta_list[ctr].psq);
+               skb_queue_head_init(&ar->sta_list[ctr].apsdq);
+       }
 
-       wdev->wiphy->mgmt_stypes = ath6kl_mgmt_stypes;
+       skb_queue_head_init(&ar->mcastpsq);
 
-       wdev->wiphy->max_remain_on_channel_duration = 5000;
+       memcpy(ar->ap_country_code, DEF_AP_COUNTRY_CODE, 3);
+
+       return ar;
+}
+
+int ath6kl_register_ieee80211_hw(struct ath6kl *ar)
+{
+       struct wiphy *wiphy = ar->wiphy;
+       int ret;
+
+       wiphy->mgmt_stypes = ath6kl_mgmt_stypes;
+
+       wiphy->max_remain_on_channel_duration = 5000;
 
        /* set device pointer for wiphy */
-       set_wiphy_dev(wdev->wiphy, dev);
+       set_wiphy_dev(wiphy, ar->dev);
 
-       wdev->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
-               BIT(NL80211_IFTYPE_ADHOC) | BIT(NL80211_IFTYPE_AP);
+       wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
+                                BIT(NL80211_IFTYPE_ADHOC) |
+                                BIT(NL80211_IFTYPE_AP);
        if (ar->p2p) {
-               wdev->wiphy->interface_modes |= BIT(NL80211_IFTYPE_P2P_GO) |
-                       BIT(NL80211_IFTYPE_P2P_CLIENT);
+               wiphy->interface_modes |= BIT(NL80211_IFTYPE_P2P_GO) |
+                                         BIT(NL80211_IFTYPE_P2P_CLIENT);
        }
-       /* max num of ssids that can be probed during scanning */
-       wdev->wiphy->max_scan_ssids = MAX_PROBED_SSID_INDEX;
-       wdev->wiphy->max_scan_ie_len = 1000; /* FIX: what is correct limit? */
-       wdev->wiphy->bands[IEEE80211_BAND_2GHZ] = &ath6kl_band_2ghz;
-       wdev->wiphy->bands[IEEE80211_BAND_5GHZ] = &ath6kl_band_5ghz;
-       wdev->wiphy->signal_type = CFG80211_SIGNAL_TYPE_MBM;
 
-       wdev->wiphy->cipher_suites = cipher_suites;
-       wdev->wiphy->n_cipher_suites = ARRAY_SIZE(cipher_suites);
-
-       ret = wiphy_register(wdev->wiphy);
+       /* max num of ssids that can be probed during scanning */
+       wiphy->max_scan_ssids = MAX_PROBED_SSID_INDEX;
+       wiphy->max_scan_ie_len = 1000; /* FIX: what is correct limit? */
+       wiphy->bands[IEEE80211_BAND_2GHZ] = &ath6kl_band_2ghz;
+       wiphy->bands[IEEE80211_BAND_5GHZ] = &ath6kl_band_5ghz;
+       wiphy->signal_type = CFG80211_SIGNAL_TYPE_MBM;
+
+       wiphy->cipher_suites = cipher_suites;
+       wiphy->n_cipher_suites = ARRAY_SIZE(cipher_suites);
+
+       wiphy->wowlan.flags = WIPHY_WOWLAN_MAGIC_PKT |
+                             WIPHY_WOWLAN_DISCONNECT |
+                             WIPHY_WOWLAN_GTK_REKEY_FAILURE  |
+                             WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
+                             WIPHY_WOWLAN_EAP_IDENTITY_REQ   |
+                             WIPHY_WOWLAN_4WAY_HANDSHAKE;
+       wiphy->wowlan.n_patterns = WOW_MAX_FILTERS_PER_LIST;
+       wiphy->wowlan.pattern_min_len = 1;
+       wiphy->wowlan.pattern_max_len = WOW_PATTERN_SIZE;
+
+       wiphy->max_sched_scan_ssids = 10;
+
+       ret = wiphy_register(wiphy);
        if (ret < 0) {
                ath6kl_err("couldn't register wiphy device\n");
-               wiphy_free(wdev->wiphy);
-               kfree(wdev);
-               return NULL;
+               return ret;
        }
 
-       return wdev;
+       return 0;
 }
 
-void ath6kl_cfg80211_deinit(struct ath6kl *ar)
+static int ath6kl_cfg80211_vif_init(struct ath6kl_vif *vif)
 {
-       struct wireless_dev *wdev = ar->wdev;
+       vif->aggr_cntxt = aggr_init(vif->ndev);
+       if (!vif->aggr_cntxt) {
+               ath6kl_err("failed to initialize aggr\n");
+               return -ENOMEM;
+       }
+
+       setup_timer(&vif->disconnect_timer, disconnect_timer_handler,
+                   (unsigned long) vif->ndev);
+       setup_timer(&vif->sched_scan_timer, ath6kl_wmi_sscan_timer,
+                   (unsigned long) vif);
 
-       if (ar->scan_req) {
-               cfg80211_scan_done(ar->scan_req, true);
-               ar->scan_req = NULL;
+       set_bit(WMM_ENABLED, &vif->flags);
+       spin_lock_init(&vif->if_lock);
+
+       INIT_LIST_HEAD(&vif->mc_filter);
+
+       return 0;
+}
+
+void ath6kl_cfg80211_vif_cleanup(struct ath6kl_vif *vif)
+{
+       struct ath6kl *ar = vif->ar;
+       struct ath6kl_mc_filter *mc_filter, *tmp;
+
+       aggr_module_destroy(vif->aggr_cntxt);
+
+       ar->avail_idx_map |= BIT(vif->fw_vif_idx);
+
+       if (vif->nw_type == ADHOC_NETWORK)
+               ar->ibss_if_active = false;
+
+       list_for_each_entry_safe(mc_filter, tmp, &vif->mc_filter, list) {
+               list_del(&mc_filter->list);
+               kfree(mc_filter);
        }
 
-       if (!wdev)
-               return;
+       unregister_netdevice(vif->ndev);
+
+       ar->num_vif--;
+}
+
+struct net_device *ath6kl_interface_add(struct ath6kl *ar, char *name,
+                                       enum nl80211_iftype type, u8 fw_vif_idx,
+                                       u8 nw_type)
+{
+       struct net_device *ndev;
+       struct ath6kl_vif *vif;
 
-       wiphy_unregister(wdev->wiphy);
-       wiphy_free(wdev->wiphy);
-       kfree(wdev);
+       ndev = alloc_netdev(sizeof(*vif), name, ether_setup);
+       if (!ndev)
+               return NULL;
+
+       vif = netdev_priv(ndev);
+       ndev->ieee80211_ptr = &vif->wdev;
+       vif->wdev.wiphy = ar->wiphy;
+       vif->ar = ar;
+       vif->ndev = ndev;
+       SET_NETDEV_DEV(ndev, wiphy_dev(vif->wdev.wiphy));
+       vif->wdev.netdev = ndev;
+       vif->wdev.iftype = type;
+       vif->fw_vif_idx = fw_vif_idx;
+       vif->nw_type = vif->next_mode = nw_type;
+
+       memcpy(ndev->dev_addr, ar->mac_addr, ETH_ALEN);
+       if (fw_vif_idx != 0)
+               ndev->dev_addr[0] = (ndev->dev_addr[0] ^ (1 << fw_vif_idx)) |
+                                    0x2;
+
+       init_netdev(ndev);
+
+       ath6kl_init_control_info(vif);
+
+       if (ath6kl_cfg80211_vif_init(vif))
+               goto err;
+
+       if (register_netdevice(ndev))
+               goto err;
+
+       ar->avail_idx_map &= ~BIT(fw_vif_idx);
+       vif->sme_state = SME_DISCONNECTED;
+       set_bit(WLAN_ENABLED, &vif->flags);
+       ar->wlan_pwr_state = WLAN_POWER_STATE_ON;
+       set_bit(NETDEV_REGISTERED, &vif->flags);
+
+       if (type == NL80211_IFTYPE_ADHOC)
+               ar->ibss_if_active = true;
+
+       spin_lock_bh(&ar->list_lock);
+       list_add_tail(&vif->list, &ar->vif_list);
+       spin_unlock_bh(&ar->list_lock);
+
+       return ndev;
+
+err:
+       aggr_module_destroy(vif->aggr_cntxt);
+       free_netdev(ndev);
+       return NULL;
+}
+
+void ath6kl_deinit_ieee80211_hw(struct ath6kl *ar)
+{
+       wiphy_unregister(ar->wiphy);
+       wiphy_free(ar->wiphy);
 }