/* only used when pmsr capability is supplied */
        struct cfg80211_pmsr_capabilities pmsr_capa;
+       struct cfg80211_pmsr_request *pmsr_request;
+       struct wireless_dev *pmsr_request_wdev;
 
        struct mac80211_hwsim_link_data link_data[IEEE80211_MLD_MAX_NUM_LINKS];
 };
        return 0;
 }
 
+static int mac80211_hwsim_send_pmsr_ftm_request_peer(struct sk_buff *msg,
+                                                    struct cfg80211_pmsr_ftm_request_peer *request)
+{
+       struct nlattr *ftm;
+
+       if (!request->requested)
+               return -EINVAL;
+
+       ftm = nla_nest_start(msg, NL80211_PMSR_TYPE_FTM);
+       if (!ftm)
+               return -ENOBUFS;
+
+       if (nla_put_u32(msg, NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE, request->preamble))
+               return -ENOBUFS;
+
+       if (nla_put_u16(msg, NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD, request->burst_period))
+               return -ENOBUFS;
+
+       if (request->asap && nla_put_flag(msg, NL80211_PMSR_FTM_REQ_ATTR_ASAP))
+               return -ENOBUFS;
+
+       if (request->request_lci && nla_put_flag(msg, NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI))
+               return -ENOBUFS;
+
+       if (request->request_civicloc &&
+           nla_put_flag(msg, NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC))
+               return -ENOBUFS;
+
+       if (request->trigger_based && nla_put_flag(msg, NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED))
+               return -ENOBUFS;
+
+       if (request->non_trigger_based &&
+           nla_put_flag(msg, NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED))
+               return -ENOBUFS;
+
+       if (request->lmr_feedback && nla_put_flag(msg, NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK))
+               return -ENOBUFS;
+
+       if (nla_put_u8(msg, NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP, request->num_bursts_exp))
+               return -ENOBUFS;
+
+       if (nla_put_u8(msg, NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION, request->burst_duration))
+               return -ENOBUFS;
+
+       if (nla_put_u8(msg, NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST, request->ftms_per_burst))
+               return -ENOBUFS;
+
+       if (nla_put_u8(msg, NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES, request->ftmr_retries))
+               return -ENOBUFS;
+
+       if (nla_put_u8(msg, NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION, request->burst_duration))
+               return -ENOBUFS;
+
+       if (nla_put_u8(msg, NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR, request->bss_color))
+               return -ENOBUFS;
+
+       nla_nest_end(msg, ftm);
+
+       return 0;
+}
+
+static int mac80211_hwsim_send_pmsr_request_peer(struct sk_buff *msg,
+                                                struct cfg80211_pmsr_request_peer *request)
+{
+       struct nlattr *peer, *chandef, *req, *data;
+       int err;
+
+       peer = nla_nest_start(msg, NL80211_PMSR_ATTR_PEERS);
+       if (!peer)
+               return -ENOBUFS;
+
+       if (nla_put(msg, NL80211_PMSR_PEER_ATTR_ADDR, ETH_ALEN,
+                   request->addr))
+               return -ENOBUFS;
+
+       chandef = nla_nest_start(msg, NL80211_PMSR_PEER_ATTR_CHAN);
+       if (!chandef)
+               return -ENOBUFS;
+
+       err = nl80211_send_chandef(msg, &request->chandef);
+       if (err)
+               return err;
+
+       nla_nest_end(msg, chandef);
+
+       req = nla_nest_start(msg, NL80211_PMSR_PEER_ATTR_REQ);
+       if (!req)
+               return -ENOBUFS;
+
+       if (request->report_ap_tsf && nla_put_flag(msg, NL80211_PMSR_REQ_ATTR_GET_AP_TSF))
+               return -ENOBUFS;
+
+       data = nla_nest_start(msg, NL80211_PMSR_REQ_ATTR_DATA);
+       if (!data)
+               return -ENOBUFS;
+
+       err = mac80211_hwsim_send_pmsr_ftm_request_peer(msg, &request->ftm);
+       if (err)
+               return err;
+
+       nla_nest_end(msg, data);
+       nla_nest_end(msg, req);
+       nla_nest_end(msg, peer);
+
+       return 0;
+}
+
+static int mac80211_hwsim_send_pmsr_request(struct sk_buff *msg,
+                                           struct cfg80211_pmsr_request *request)
+{
+       struct nlattr *pmsr;
+       int err;
+
+       pmsr = nla_nest_start(msg, NL80211_ATTR_PEER_MEASUREMENTS);
+       if (!pmsr)
+               return -ENOBUFS;
+
+       if (nla_put_u32(msg, NL80211_ATTR_TIMEOUT, request->timeout))
+               return -ENOBUFS;
+
+       if (!is_zero_ether_addr(request->mac_addr)) {
+               if (nla_put(msg, NL80211_ATTR_MAC, ETH_ALEN, request->mac_addr))
+                       return -ENOBUFS;
+               if (nla_put(msg, NL80211_ATTR_MAC_MASK, ETH_ALEN, request->mac_addr_mask))
+                       return -ENOBUFS;
+       }
+
+       for (int i = 0; i < request->n_peers; i++) {
+               err = mac80211_hwsim_send_pmsr_request_peer(msg, &request->peers[i]);
+               if (err)
+                       return err;
+       }
+
+       nla_nest_end(msg, pmsr);
+
+       return 0;
+}
+
+static int mac80211_hwsim_start_pmsr(struct ieee80211_hw *hw,
+                                    struct ieee80211_vif *vif,
+                                    struct cfg80211_pmsr_request *request)
+{
+       struct mac80211_hwsim_data *data;
+       struct sk_buff *skb = NULL;
+       struct nlattr *pmsr;
+       void *msg_head;
+       u32 _portid;
+       int err = 0;
+
+       data = hw->priv;
+       _portid = READ_ONCE(data->wmediumd);
+       if (!_portid && !hwsim_virtio_enabled)
+               return -EOPNOTSUPP;
+
+       mutex_lock(&data->mutex);
+
+       if (data->pmsr_request) {
+               err = -EBUSY;
+               goto out_free;
+       }
+
+       skb = genlmsg_new(GENLMSG_DEFAULT_SIZE, GFP_KERNEL);
+
+       if (!skb) {
+               err = -ENOMEM;
+               goto out_free;
+       }
+
+       msg_head = genlmsg_put(skb, 0, 0, &hwsim_genl_family, 0, HWSIM_CMD_START_PMSR);
+
+       if (nla_put(skb, HWSIM_ATTR_ADDR_TRANSMITTER,
+                   ETH_ALEN, data->addresses[1].addr)) {
+               err = -ENOMEM;
+               goto out_free;
+       }
+
+       pmsr = nla_nest_start(skb, HWSIM_ATTR_PMSR_REQUEST);
+       if (!pmsr) {
+               err = -ENOMEM;
+               goto out_free;
+       }
+
+       err = mac80211_hwsim_send_pmsr_request(skb, request);
+       if (err)
+               goto out_free;
+
+       nla_nest_end(skb, pmsr);
+
+       genlmsg_end(skb, msg_head);
+       if (hwsim_virtio_enabled)
+               hwsim_tx_virtio(data, skb);
+       else
+               hwsim_unicast_netgroup(data, skb, _portid);
+
+       data->pmsr_request = request;
+       data->pmsr_request_wdev = ieee80211_vif_to_wdev(vif);
+
+out_free:
+       if (err && skb)
+               nlmsg_free(skb);
+
+       mutex_unlock(&data->mutex);
+       return err;
+}
+
 #define HWSIM_COMMON_OPS                                       \
        .tx = mac80211_hwsim_tx,                                \
        .wake_tx_queue = ieee80211_handle_wake_tx_queue,        \
        .flush = mac80211_hwsim_flush,                          \
        .get_et_sset_count = mac80211_hwsim_get_et_sset_count,  \
        .get_et_stats = mac80211_hwsim_get_et_stats,            \
-       .get_et_strings = mac80211_hwsim_get_et_strings,
+       .get_et_strings = mac80211_hwsim_get_et_strings,        \
+       .start_pmsr = mac80211_hwsim_start_pmsr,                \
 
 #define HWSIM_NON_MLO_OPS                                      \
        .sta_add = mac80211_hwsim_sta_add,                      \