Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6

* 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6: (867 commits)
  [SKY2]: status polling loop (post merge)
  [NET]: Fix NAPI completion handling in some drivers.
  [TCP]: Limit processing lost_retrans loop to work-to-do cases
  [TCP]: Fix lost_retrans loop vs fastpath problems
  [TCP]: No need to re-count fackets_out/sacked_out at RTO
  [TCP]: Extract tcp_match_queue_to_sack from sacktag code
  [TCP]: Kill almost unused variable pcount from sacktag
  [TCP]: Fix mark_head_lost to ignore R-bit when trying to mark L
  [TCP]: Add bytes_acked (ABC) clearing to FRTO too
  [IPv6]: Update setsockopt(IPV6_MULTICAST_IF) to support RFC 3493, try2
  [NETFILTER]: x_tables: add missing ip6t_modulename aliases
  [NETFILTER]: nf_conntrack_tcp: fix connection reopening
  [QETH]: fix qeth_main.c
  [NETLINK]: fib_frontend build fixes
  [IPv6]: Export userland ND options through netlink (RDNSS support)
  [9P]: build fix with !CONFIG_SYSCTL
  [NET]: Fix dev_put() and dev_hold() comments
  [NET]: make netlink user -> kernel interface synchronious
  [NET]: unify netlink kernel socket recognition
  [NET]: cleanup 3rd argument in netlink_sendskb
  ...

Fix up conflicts manually in Documentation/feature-removal-schedule.txt
and my new least favourite crap, the "mod_devicetable" support in the
files include/linux/mod_devicetable.h and scripts/mod/file2alias.c.

(The latter files seem to be explicitly _designed_ to get conflicts when
different subsystems work with them - that have an absolutely horrid
lack of subsystem separation!)

Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

116 files changed, 4919 insertions, 1183 deletions

diff --git a/include/crypto/algapi.h b/include/crypto/algapi.h
index b2b1e6efd812..b9b05d399d2b 100644
--- a/include/crypto/algapi.h
+++ b/include/crypto/algapi.h
@@ -91,9 +91,11 @@ struct blkcipher_walk {
         u8 *iv;
 
         int flags;
+        unsigned int blocksize;
 };
 
 extern const struct crypto_type crypto_ablkcipher_type;
+extern const struct crypto_type crypto_aead_type;
 extern const struct crypto_type crypto_blkcipher_type;
 extern const struct crypto_type crypto_hash_type;
 
@@ -111,7 +113,8 @@ struct crypto_tfm *crypto_spawn_tfm(struct crypto_spawn *spawn, u32 type,
 
 struct crypto_attr_type *crypto_get_attr_type(struct rtattr **tb);
 int crypto_check_attr_type(struct rtattr **tb, u32 type);
-struct crypto_alg *crypto_get_attr_alg(struct rtattr **tb, u32 type, u32 mask);
+struct crypto_alg *crypto_attr_alg(struct rtattr *rta, u32 type, u32 mask);
+int crypto_attr_u32(struct rtattr *rta, u32 *num);
 struct crypto_instance *crypto_alloc_instance(const char *name,
                                               struct crypto_alg *alg);
 
@@ -127,6 +130,9 @@ int blkcipher_walk_virt(struct blkcipher_desc *desc,
                         struct blkcipher_walk *walk);
 int blkcipher_walk_phys(struct blkcipher_desc *desc,
                         struct blkcipher_walk *walk);
+int blkcipher_walk_virt_block(struct blkcipher_desc *desc,
+                              struct blkcipher_walk *walk,
+                              unsigned int blocksize);
 
 static inline void *crypto_tfm_ctx_aligned(struct crypto_tfm *tfm)
 {
@@ -160,6 +166,36 @@ static inline void *crypto_ablkcipher_ctx(struct crypto_ablkcipher *tfm)
         return crypto_tfm_ctx(&tfm->base);
 }
 
+static inline void *crypto_ablkcipher_ctx_aligned(struct crypto_ablkcipher *tfm)
+{
+        return crypto_tfm_ctx_aligned(&tfm->base);
+}
+
+static inline struct aead_alg *crypto_aead_alg(struct crypto_aead *tfm)
+{
+        return &crypto_aead_tfm(tfm)->__crt_alg->cra_aead;
+}
+
+static inline void *crypto_aead_ctx(struct crypto_aead *tfm)
+{
+        return crypto_tfm_ctx(&tfm->base);
+}
+
+static inline struct crypto_instance *crypto_aead_alg_instance(
+        struct crypto_aead *aead)
+{
+        return crypto_tfm_alg_instance(&aead->base);
+}
+
+static inline struct crypto_ablkcipher *crypto_spawn_ablkcipher(
+        struct crypto_spawn *spawn)
+{
+        u32 type = CRYPTO_ALG_TYPE_BLKCIPHER;
+        u32 mask = CRYPTO_ALG_TYPE_MASK;
+
+        return __crypto_ablkcipher_cast(crypto_spawn_tfm(spawn, type, mask));
+}
+
 static inline struct crypto_blkcipher *crypto_spawn_blkcipher(
         struct crypto_spawn *spawn)
 {
@@ -223,16 +259,16 @@ static inline struct crypto_async_request *crypto_get_backlog(
                container_of(queue->backlog, struct crypto_async_request, list);
 }
 
-static inline int ablkcipher_enqueue_request(struct ablkcipher_alg *alg,
+static inline int ablkcipher_enqueue_request(struct crypto_queue *queue,
                                              struct ablkcipher_request *request)
 {
-        return crypto_enqueue_request(alg->queue, &request->base);
+        return crypto_enqueue_request(queue, &request->base);
 }
 
 static inline struct ablkcipher_request *ablkcipher_dequeue_request(
-        struct ablkcipher_alg *alg)
+        struct crypto_queue *queue)
 {
-        return ablkcipher_request_cast(crypto_dequeue_request(alg->queue));
+        return ablkcipher_request_cast(crypto_dequeue_request(queue));
 }
 
 static inline void *ablkcipher_request_ctx(struct ablkcipher_request *req)
@@ -240,10 +276,31 @@ static inline void *ablkcipher_request_ctx(struct ablkcipher_request *req)
         return req->__ctx;
 }
 
-static inline int ablkcipher_tfm_in_queue(struct crypto_ablkcipher *tfm)
+static inline int ablkcipher_tfm_in_queue(struct crypto_queue *queue,
+                                          struct crypto_ablkcipher *tfm)
+{
+        return crypto_tfm_in_queue(queue, crypto_ablkcipher_tfm(tfm));
+}
+
+static inline void *aead_request_ctx(struct aead_request *req)
+{
+        return req->__ctx;
+}
+
+static inline void aead_request_complete(struct aead_request *req, int err)
+{
+        req->base.complete(&req->base, err);
+}
+
+static inline u32 aead_request_flags(struct aead_request *req)
+{
+        return req->base.flags;
+}
+
+static inline struct crypto_alg *crypto_get_attr_alg(struct rtattr **tb,
+                                                     u32 type, u32 mask)
 {
-        return crypto_tfm_in_queue(crypto_ablkcipher_alg(tfm)->queue,
-                                   crypto_ablkcipher_tfm(tfm));
+        return crypto_attr_alg(tb[1], type, mask);
 }
 
 #endif  /* _CRYPTO_ALGAPI_H */
diff --git a/include/crypto/gf128mul.h b/include/crypto/gf128mul.h
index 4fd315202442..4086b8ebfafe 100644
--- a/include/crypto/gf128mul.h
+++ b/include/crypto/gf128mul.h
@@ -161,6 +161,8 @@ void gf128mul_lle(be128 *a, const be128 *b);
 
 void gf128mul_bbe(be128 *a, const be128 *b);
 
+/* multiply by x in ble format, needed by XTS */
+void gf128mul_x_ble(be128 *a, const be128 *b);
 
 /* 4k table optimization */
 
diff --git a/include/crypto/sha.h b/include/crypto/sha.h
new file mode 100644
index 000000000000..0686e1f7a24b
--- /dev/null
+++ b/include/crypto/sha.h
@@ -0,0 +1,53 @@
+/*
+ * Common values for SHA algorithms
+ */
+
+#ifndef _CRYPTO_SHA_H
+#define _CRYPTO_SHA_H
+
+#define SHA1_DIGEST_SIZE        20
+#define SHA1_BLOCK_SIZE         64
+
+#define SHA256_DIGEST_SIZE      32
+#define SHA256_BLOCK_SIZE       64
+
+#define SHA384_DIGEST_SIZE      48
+#define SHA384_BLOCK_SIZE       128
+
+#define SHA512_DIGEST_SIZE      64
+#define SHA512_BLOCK_SIZE       128
+
+#define SHA1_H0         0x67452301UL
+#define SHA1_H1         0xefcdab89UL
+#define SHA1_H2         0x98badcfeUL
+#define SHA1_H3         0x10325476UL
+#define SHA1_H4         0xc3d2e1f0UL
+
+#define SHA256_H0       0x6a09e667UL
+#define SHA256_H1       0xbb67ae85UL
+#define SHA256_H2       0x3c6ef372UL
+#define SHA256_H3       0xa54ff53aUL
+#define SHA256_H4       0x510e527fUL
+#define SHA256_H5       0x9b05688cUL
+#define SHA256_H6       0x1f83d9abUL
+#define SHA256_H7       0x5be0cd19UL
+
+#define SHA384_H0       0xcbbb9d5dc1059ed8ULL
+#define SHA384_H1       0x629a292a367cd507ULL
+#define SHA384_H2       0x9159015a3070dd17ULL
+#define SHA384_H3       0x152fecd8f70e5939ULL
+#define SHA384_H4       0x67332667ffc00b31ULL
+#define SHA384_H5       0x8eb44a8768581511ULL
+#define SHA384_H6       0xdb0c2e0d64f98fa7ULL
+#define SHA384_H7       0x47b5481dbefa4fa4ULL
+
+#define SHA512_H0       0x6a09e667f3bcc908ULL
+#define SHA512_H1       0xbb67ae8584caa73bULL
+#define SHA512_H2       0x3c6ef372fe94f82bULL
+#define SHA512_H3       0xa54ff53a5f1d36f1ULL
+#define SHA512_H4       0x510e527fade682d1ULL
+#define SHA512_H5       0x9b05688c2b3e6c1fULL
+#define SHA512_H6       0x1f83d9abfb41bd6bULL
+#define SHA512_H7       0x5be0cd19137e2179ULL
+
+#endif
diff --git a/include/linux/arcdevice.h b/include/linux/arcdevice.h
index 2f85049cfb3d..fde675872c56 100644
--- a/include/linux/arcdevice.h
+++ b/include/linux/arcdevice.h
@@ -214,7 +214,7 @@ extern struct ArcProto *arc_proto_map[256], *arc_proto_default,
  */
 struct Incoming {
         struct sk_buff *skb;    /* packet data buffer             */
-        uint16_t sequence;      /* sequence number of assembly    */
+        __be16 sequence;        /* sequence number of assembly    */
         uint8_t lastpacket,     /* number of last packet (from 1) */
                 numpackets;     /* number of packets in split     */
 };
@@ -292,7 +292,7 @@ struct arcnet_local {
 
         struct {
                 uint16_t sequence;      /* sequence number (incs with each packet) */
-                uint16_t aborted_seq;
+                __be16 aborted_seq;
 
                 struct Incoming incoming[256];  /* one from each address */
         } rfc1201;
diff --git a/include/linux/audit.h b/include/linux/audit.h
index d6579df8dadf..9ae740936a65 100644
--- a/include/linux/audit.h
+++ b/include/linux/audit.h
@@ -108,10 +108,11 @@
 #define AUDIT_MAC_CIPSOV4_DEL   1408    /* NetLabel: del CIPSOv4 DOI entry */
 #define AUDIT_MAC_MAP_ADD       1409    /* NetLabel: add LSM domain mapping */
 #define AUDIT_MAC_MAP_DEL       1410    /* NetLabel: del LSM domain mapping */
-#define AUDIT_MAC_IPSEC_ADDSA   1411    /* Add a XFRM state */
-#define AUDIT_MAC_IPSEC_DELSA   1412    /* Delete a XFRM state */
-#define AUDIT_MAC_IPSEC_ADDSPD  1413    /* Add a XFRM policy */
-#define AUDIT_MAC_IPSEC_DELSPD  1414    /* Delete a XFRM policy */
+#define AUDIT_MAC_IPSEC_ADDSA   1411    /* Not used */
+#define AUDIT_MAC_IPSEC_DELSA   1412    /* Not used  */
+#define AUDIT_MAC_IPSEC_ADDSPD  1413    /* Not used */
+#define AUDIT_MAC_IPSEC_DELSPD  1414    /* Not used */
+#define AUDIT_MAC_IPSEC_EVENT   1415    /* Audit an IPSec event */
 
 #define AUDIT_FIRST_KERN_ANOM_MSG   1700
 #define AUDIT_LAST_KERN_ANOM_MSG    1799
diff --git a/include/linux/connector.h b/include/linux/connector.h
index 10eb56b2940a..b62f823e90cf 100644
--- a/include/linux/connector.h
+++ b/include/linux/connector.h
@@ -153,7 +153,7 @@ struct cn_dev {
 
         u32 seq, groups;
         struct sock *nls;
-        void (*input) (struct sock * sk, int len);
+        void (*input) (struct sk_buff *skb);
 
         struct cn_queue_dev *cbdev;
 };
diff --git a/include/linux/crypto.h b/include/linux/crypto.h
index 357e8cfedc37..fc32694287e2 100644
--- a/include/linux/crypto.h
+++ b/include/linux/crypto.h
@@ -34,6 +34,7 @@
 #define CRYPTO_ALG_TYPE_HASH            0x00000003
 #define CRYPTO_ALG_TYPE_BLKCIPHER       0x00000004
 #define CRYPTO_ALG_TYPE_COMPRESS        0x00000005
+#define CRYPTO_ALG_TYPE_AEAD            0x00000006
 
 #define CRYPTO_ALG_TYPE_HASH_MASK       0x0000000e
 
@@ -91,9 +92,9 @@
 struct scatterlist;
 struct crypto_ablkcipher;
 struct crypto_async_request;
+struct crypto_aead;
 struct crypto_blkcipher;
 struct crypto_hash;
-struct crypto_queue;
 struct crypto_tfm;
 struct crypto_type;
 
@@ -121,6 +122,32 @@ struct ablkcipher_request {
         void *__ctx[] CRYPTO_MINALIGN_ATTR;
 };
 
+/**
+ *      struct aead_request - AEAD request
+ *      @base: Common attributes for async crypto requests
+ *      @assoclen: Length in bytes of associated data for authentication
+ *      @cryptlen: Length of data to be encrypted or decrypted
+ *      @iv: Initialisation vector
+ *      @assoc: Associated data
+ *      @src: Source data
+ *      @dst: Destination data
+ *      @__ctx: Start of private context data
+ */
+struct aead_request {
+        struct crypto_async_request base;
+
+        unsigned int assoclen;
+        unsigned int cryptlen;
+
+        u8 *iv;
+
+        struct scatterlist *assoc;
+        struct scatterlist *src;
+        struct scatterlist *dst;
+
+        void *__ctx[] CRYPTO_MINALIGN_ATTR;
+};
+
 struct blkcipher_desc {
         struct crypto_blkcipher *tfm;
         void *info;
@@ -150,13 +177,21 @@ struct ablkcipher_alg {
         int (*encrypt)(struct ablkcipher_request *req);
         int (*decrypt)(struct ablkcipher_request *req);
 
-        struct crypto_queue *queue;
-
         unsigned int min_keysize;
         unsigned int max_keysize;
         unsigned int ivsize;
 };
 
+struct aead_alg {
+        int (*setkey)(struct crypto_aead *tfm, const u8 *key,
+                      unsigned int keylen);
+        int (*encrypt)(struct aead_request *req);
+        int (*decrypt)(struct aead_request *req);
+
+        unsigned int ivsize;
+        unsigned int authsize;
+};
+
 struct blkcipher_alg {
         int (*setkey)(struct crypto_tfm *tfm, const u8 *key,
                       unsigned int keylen);
@@ -212,6 +247,7 @@ struct compress_alg {
 };
 
 #define cra_ablkcipher  cra_u.ablkcipher
+#define cra_aead        cra_u.aead
 #define cra_blkcipher   cra_u.blkcipher
 #define cra_cipher      cra_u.cipher
 #define cra_digest      cra_u.digest
@@ -237,6 +273,7 @@ struct crypto_alg {
 
         union {
                 struct ablkcipher_alg ablkcipher;
+                struct aead_alg aead;
                 struct blkcipher_alg blkcipher;
                 struct cipher_alg cipher;
                 struct digest_alg digest;
@@ -284,6 +321,16 @@ struct ablkcipher_tfm {
         unsigned int reqsize;
 };
 
+struct aead_tfm {
+        int (*setkey)(struct crypto_aead *tfm, const u8 *key,
+                      unsigned int keylen);
+        int (*encrypt)(struct aead_request *req);
+        int (*decrypt)(struct aead_request *req);
+        unsigned int ivsize;
+        unsigned int authsize;
+        unsigned int reqsize;
+};
+
 struct blkcipher_tfm {
         void *iv;
         int (*setkey)(struct crypto_tfm *tfm, const u8 *key,
@@ -323,6 +370,7 @@ struct compress_tfm {
 };
 
 #define crt_ablkcipher  crt_u.ablkcipher
+#define crt_aead        crt_u.aead
 #define crt_blkcipher   crt_u.blkcipher
 #define crt_cipher      crt_u.cipher
 #define crt_hash        crt_u.hash
@@ -334,6 +382,7 @@ struct crypto_tfm {
         
         union {
                 struct ablkcipher_tfm ablkcipher;
+                struct aead_tfm aead;
                 struct blkcipher_tfm blkcipher;
                 struct cipher_tfm cipher;
                 struct hash_tfm hash;
@@ -349,6 +398,10 @@ struct crypto_ablkcipher {
         struct crypto_tfm base;
 };
 
+struct crypto_aead {
+        struct crypto_tfm base;
+};
+
 struct crypto_blkcipher {
         struct crypto_tfm base;
 };
@@ -369,11 +422,15 @@ enum {
         CRYPTOA_UNSPEC,
         CRYPTOA_ALG,
         CRYPTOA_TYPE,
+        CRYPTOA_U32,
         __CRYPTOA_MAX,
 };
 
 #define CRYPTOA_MAX (__CRYPTOA_MAX - 1)
 
+/* Maximum number of (rtattr) parameters for each template. */
+#define CRYPTO_MAX_ATTRS 32
+
 struct crypto_attr_alg {
         char name[CRYPTO_MAX_ALG_NAME];
 };
@@ -383,6 +440,10 @@ struct crypto_attr_type {
         u32 mask;
 };
 
+struct crypto_attr_u32 {
+        u32 num;
+};
+
 /* 
  * Transform user interface.
  */
@@ -563,7 +624,8 @@ static inline int crypto_ablkcipher_decrypt(struct ablkcipher_request *req)
         return crt->decrypt(req);
 }
 
-static inline int crypto_ablkcipher_reqsize(struct crypto_ablkcipher *tfm)
+static inline unsigned int crypto_ablkcipher_reqsize(
+        struct crypto_ablkcipher *tfm)
 {
         return crypto_ablkcipher_crt(tfm)->reqsize;
 }
@@ -619,6 +681,150 @@ static inline void ablkcipher_request_set_crypt(
         req->info = iv;
 }
 
+static inline struct crypto_aead *__crypto_aead_cast(struct crypto_tfm *tfm)
+{
+        return (struct crypto_aead *)tfm;
+}
+
+static inline struct crypto_aead *crypto_alloc_aead(const char *alg_name,
+                                                    u32 type, u32 mask)
+{
+        type &= ~CRYPTO_ALG_TYPE_MASK;
+        type |= CRYPTO_ALG_TYPE_AEAD;
+        mask |= CRYPTO_ALG_TYPE_MASK;
+
+        return __crypto_aead_cast(crypto_alloc_base(alg_name, type, mask));
+}
+
+static inline struct crypto_tfm *crypto_aead_tfm(struct crypto_aead *tfm)
+{
+        return &tfm->base;
+}
+
+static inline void crypto_free_aead(struct crypto_aead *tfm)
+{
+        crypto_free_tfm(crypto_aead_tfm(tfm));
+}
+
+static inline struct aead_tfm *crypto_aead_crt(struct crypto_aead *tfm)
+{
+        return &crypto_aead_tfm(tfm)->crt_aead;
+}
+
+static inline unsigned int crypto_aead_ivsize(struct crypto_aead *tfm)
+{
+        return crypto_aead_crt(tfm)->ivsize;
+}
+
+static inline unsigned int crypto_aead_authsize(struct crypto_aead *tfm)
+{
+        return crypto_aead_crt(tfm)->authsize;
+}
+
+static inline unsigned int crypto_aead_blocksize(struct crypto_aead *tfm)
+{
+        return crypto_tfm_alg_blocksize(crypto_aead_tfm(tfm));
+}
+
+static inline unsigned int crypto_aead_alignmask(struct crypto_aead *tfm)
+{
+        return crypto_tfm_alg_alignmask(crypto_aead_tfm(tfm));
+}
+
+static inline u32 crypto_aead_get_flags(struct crypto_aead *tfm)
+{
+        return crypto_tfm_get_flags(crypto_aead_tfm(tfm));
+}
+
+static inline void crypto_aead_set_flags(struct crypto_aead *tfm, u32 flags)
+{
+        crypto_tfm_set_flags(crypto_aead_tfm(tfm), flags);
+}
+
+static inline void crypto_aead_clear_flags(struct crypto_aead *tfm, u32 flags)
+{
+        crypto_tfm_clear_flags(crypto_aead_tfm(tfm), flags);
+}
+
+static inline int crypto_aead_setkey(struct crypto_aead *tfm, const u8 *key,
+                                     unsigned int keylen)
+{
+        return crypto_aead_crt(tfm)->setkey(tfm, key, keylen);
+}
+
+static inline struct crypto_aead *crypto_aead_reqtfm(struct aead_request *req)
+{
+        return __crypto_aead_cast(req->base.tfm);
+}
+
+static inline int crypto_aead_encrypt(struct aead_request *req)
+{
+        return crypto_aead_crt(crypto_aead_reqtfm(req))->encrypt(req);
+}
+
+static inline int crypto_aead_decrypt(struct aead_request *req)
+{
+        return crypto_aead_crt(crypto_aead_reqtfm(req))->decrypt(req);
+}
+
+static inline unsigned int crypto_aead_reqsize(struct crypto_aead *tfm)
+{
+        return crypto_aead_crt(tfm)->reqsize;
+}
+
+static inline void aead_request_set_tfm(struct aead_request *req,
+                                        struct crypto_aead *tfm)
+{
+        req->base.tfm = crypto_aead_tfm(tfm);
+}
+
+static inline struct aead_request *aead_request_alloc(struct crypto_aead *tfm,
+                                                      gfp_t gfp)
+{
+        struct aead_request *req;
+
+        req = kmalloc(sizeof(*req) + crypto_aead_reqsize(tfm), gfp);
+
+        if (likely(req))
+                aead_request_set_tfm(req, tfm);
+
+        return req;
+}
+
+static inline void aead_request_free(struct aead_request *req)
+{
+        kfree(req);
+}
+
+static inline void aead_request_set_callback(struct aead_request *req,
+                                             u32 flags,
+                                             crypto_completion_t complete,
+                                             void *data)
+{
+        req->base.complete = complete;
+        req->base.data = data;
+        req->base.flags = flags;
+}
+
+static inline void aead_request_set_crypt(struct aead_request *req,
+                                          struct scatterlist *src,
+                                          struct scatterlist *dst,
+                                          unsigned int cryptlen, u8 *iv)
+{
+        req->src = src;
+        req->dst = dst;
+        req->cryptlen = cryptlen;
+        req->iv = iv;
+}
+
+static inline void aead_request_set_assoc(struct aead_request *req,
+                                          struct scatterlist *assoc,
+                                          unsigned int assoclen)
+{
+        req->assoc = assoc;
+        req->assoclen = assoclen;
+}
+
 static inline struct crypto_blkcipher *__crypto_blkcipher_cast(
         struct crypto_tfm *tfm)
 {
diff --git a/include/linux/dccp.h b/include/linux/dccp.h
index fda2148d8c85..f3fc4392e93d 100644
--- a/include/linux/dccp.h
+++ b/include/linux/dccp.h
@@ -56,10 +56,9 @@ struct dccp_hdr_ext {
 };
 
 /**
- * struct dccp_hdr_request - Conection initiation request header
+ * struct dccp_hdr_request - Connection initiation request header
  *
  * @dccph_req_service - Service to which the client app wants to connect
- * @dccph_req_options - list of options (must be a multiple of 32 bits
  */
 struct dccp_hdr_request {
         __be32  dccph_req_service;
@@ -76,12 +75,10 @@ struct dccp_hdr_ack_bits {
         __be32  dccph_ack_nr_low;
 };
 /**
- * struct dccp_hdr_response - Conection initiation response header
+ * struct dccp_hdr_response - Connection initiation response header
  *
- * @dccph_resp_ack_nr_high - 48 bit ack number high order bits, contains GSR
- * @dccph_resp_ack_nr_low - 48 bit ack number low order bits, contains GSR
+ * @dccph_resp_ack - 48 bit Acknowledgment Number Subheader (5.3)
  * @dccph_resp_service - Echoes the Service Code on a received DCCP-Request
- * @dccph_resp_options - list of options (must be a multiple of 32 bits
  */
 struct dccp_hdr_response {
         struct dccp_hdr_ack_bits        dccph_resp_ack;
@@ -91,8 +88,9 @@ struct dccp_hdr_response {
 /**
  * struct dccp_hdr_reset - Unconditionally shut down a connection
  *
- * @dccph_reset_service - Echoes the Service Code on a received DCCP-Request
- * @dccph_reset_options - list of options (must be a multiple of 32 bits
+ * @dccph_reset_ack - 48 bit Acknowledgment Number Subheader (5.6)
+ * @dccph_reset_code - one of %dccp_reset_codes
+ * @dccph_reset_data - the Data 1 ... Data 3 fields from 5.6
  */
 struct dccp_hdr_reset {
         struct dccp_hdr_ack_bits        dccph_reset_ack;
@@ -204,6 +202,7 @@ struct dccp_so_feat {
 #define DCCP_SOCKOPT_SERVICE            2
 #define DCCP_SOCKOPT_CHANGE_L           3
 #define DCCP_SOCKOPT_CHANGE_R           4
+#define DCCP_SOCKOPT_GET_CUR_MPS        5
 #define DCCP_SOCKOPT_SEND_CSCOV         10
 #define DCCP_SOCKOPT_RECV_CSCOV         11
 #define DCCP_SOCKOPT_CCID_RX_INFO       128
@@ -215,6 +214,7 @@ struct dccp_so_feat {
 #ifdef __KERNEL__
 
 #include <linux/in.h>
+#include <linux/ktime.h>
 #include <linux/list.h>
 #include <linux/uio.h>
 #include <linux/workqueue.h>
@@ -391,7 +391,6 @@ struct dccp_opt_pend {
         struct dccp_opt_conf    *dccpop_sc;
 };
 
-extern void __dccp_minisock_init(struct dccp_minisock *dmsk);
 extern void dccp_minisock_init(struct dccp_minisock *dmsk);
 
 extern int dccp_parse_options(struct sock *sk, struct sk_buff *skb);
@@ -471,6 +470,7 @@ struct dccp_ackvec;
  * @dccps_pcrlen - receiver partial checksum coverage (via sockopt)
  * @dccps_ndp_count - number of Non Data Packets since last data packet
  * @dccps_mss_cache - current value of MSS (path MTU minus header sizes)
+ * @dccps_rate_last - timestamp for rate-limiting DCCP-Sync (RFC 4340, 7.5.4)
  * @dccps_minisock - associated minisock (accessed via dccp_msk)
  * @dccps_hc_rx_ackvec - rx half connection ack vector
  * @dccps_hc_rx_ccid - CCID used for the receiver (or receiving half-connection)
@@ -498,7 +498,7 @@ struct dccp_sock {
         __u64                           dccps_gar;
         __be32                          dccps_service;
         struct dccp_service_list        *dccps_service_list;
-        struct timeval                  dccps_timestamp_time;
+        ktime_t                         dccps_timestamp_time;
         __u32                           dccps_timestamp_echo;
         __u16                           dccps_l_ack_ratio;
         __u16                           dccps_r_ack_ratio;
@@ -506,12 +506,12 @@ struct dccp_sock {
         __u16                           dccps_pcrlen;
         unsigned long                   dccps_ndp_count;
         __u32                           dccps_mss_cache;
+        unsigned long                   dccps_rate_last;
         struct dccp_minisock            dccps_minisock;
         struct dccp_ackvec              *dccps_hc_rx_ackvec;
         struct ccid                     *dccps_hc_rx_ccid;
         struct ccid                     *dccps_hc_tx_ccid;
         struct dccp_options_received    dccps_options_received;
-        struct timeval                  dccps_epoch;
         enum dccp_role                  dccps_role:2;
         __u8                            dccps_hc_rx_insert_options:1;
         __u8                            dccps_hc_tx_insert_options:1;
diff --git a/include/linux/eeprom_93cx6.h b/include/linux/eeprom_93cx6.h
index d774b7778c91..a55c873e8b66 100644
--- a/include/linux/eeprom_93cx6.h
+++ b/include/linux/eeprom_93cx6.h
@@ -21,13 +21,14 @@
 /*
         Module: eeprom_93cx6
         Abstract: EEPROM reader datastructures for 93cx6 chipsets.
-        Supported chipsets: 93c46 & 93c66.
+        Supported chipsets: 93c46, 93c56 and 93c66.
  */
 
 /*
  * EEPROM operation defines.
  */
 #define PCI_EEPROM_WIDTH_93C46  6
+#define PCI_EEPROM_WIDTH_93C56  8
 #define PCI_EEPROM_WIDTH_93C66  8
 #define PCI_EEPROM_WIDTH_OPCODE 3
 #define PCI_EEPROM_WRITE_OPCODE 0x05
diff --git a/include/linux/etherdevice.h b/include/linux/etherdevice.h
index 6cdb97365e47..b7558ec81ed5 100644
--- a/include/linux/etherdevice.h
+++ b/include/linux/etherdevice.h
@@ -29,15 +29,19 @@
 #include <linux/random.h>
 
 #ifdef __KERNEL__
-extern int              eth_header(struct sk_buff *skb, struct net_device *dev,
-                                   unsigned short type, void *daddr,
-                                   void *saddr, unsigned len);
-extern int              eth_rebuild_header(struct sk_buff *skb);
 extern __be16           eth_type_trans(struct sk_buff *skb, struct net_device *dev);
-extern void             eth_header_cache_update(struct hh_cache *hh, struct net_device *dev,
-                                                unsigned char * haddr);
-extern int              eth_header_cache(struct neighbour *neigh,
-                                         struct hh_cache *hh);
+extern const struct header_ops eth_header_ops;
+
+extern int eth_header(struct sk_buff *skb, struct net_device *dev,
+                      unsigned short type,
+                      const void *daddr, const void *saddr, unsigned len);
+extern int eth_rebuild_header(struct sk_buff *skb);
+extern int eth_header_parse(const struct sk_buff *skb, unsigned char *haddr);
+extern int eth_header_cache(const struct neighbour *neigh, struct hh_cache *hh);
+extern void eth_header_cache_update(struct hh_cache *hh,
+                                    const struct net_device *dev,
+                                    const unsigned char *haddr);
+
 
 extern struct net_device *alloc_etherdev_mq(int sizeof_priv, unsigned int queue_count);
 #define alloc_etherdev(sizeof_priv) alloc_etherdev_mq(sizeof_priv, 1)
diff --git a/include/linux/ethtool.h b/include/linux/ethtool.h
index 23ccea811297..71d4ada6f315 100644
--- a/include/linux/ethtool.h
+++ b/include/linux/ethtool.h
@@ -39,7 +39,8 @@ struct ethtool_drvinfo {
         char    bus_info[ETHTOOL_BUSINFO_LEN];  /* Bus info for this IF. */
                                 /* For PCI devices, use pci_name(pci_dev). */
         char    reserved1[32];
-        char    reserved2[16];
+        char    reserved2[12];
+        __u32   n_priv_flags;   /* number of flags valid in ETHTOOL_GPFLAGS */
         __u32   n_stats;        /* number of u64's from ETHTOOL_GSTATS */
         __u32   testinfo_len;
         __u32   eedump_len;     /* Size of data from ETHTOOL_GEEPROM (bytes) */
@@ -219,6 +220,7 @@ struct ethtool_pauseparam {
 enum ethtool_stringset {
         ETH_SS_TEST             = 0,
         ETH_SS_STATS,
+        ETH_SS_PRIV_FLAGS,
 };
 
 /* for passing string sets for data tagging */
@@ -256,6 +258,19 @@ struct ethtool_perm_addr {
         __u8    data[0];
 };
 
+/* boolean flags controlling per-interface behavior characteristics.
+ * When reading, the flag indicates whether or not a certain behavior
+ * is enabled/present.  When writing, the flag indicates whether
+ * or not the driver should turn on (set) or off (clear) a behavior.
+ *
+ * Some behaviors may read-only (unconditionally absent or present).
+ * If such is the case, return EINVAL in the set-flags operation if the
+ * flag differs from the read-only value.
+ */
+enum ethtool_flags {
+        ETH_FLAG_LRO            = (1 << 15),    /* LRO is enabled */
+};
+
 #ifdef __KERNEL__
 
 struct net_device;
@@ -272,6 +287,8 @@ u32 ethtool_op_get_tso(struct net_device *dev);
 int ethtool_op_set_tso(struct net_device *dev, u32 data);
 u32 ethtool_op_get_ufo(struct net_device *dev);
 int ethtool_op_set_ufo(struct net_device *dev, u32 data);
+u32 ethtool_op_get_flags(struct net_device *dev);
+int ethtool_op_set_flags(struct net_device *dev, u32 data);
 
 /**
  * &ethtool_ops - Alter and report network device settings
@@ -307,6 +324,8 @@ int ethtool_op_set_ufo(struct net_device *dev, u32 data);
  * get_strings: Return a set of strings that describe the requested objects 
  * phys_id: Identify the device
  * get_stats: Return statistics about the device
+ * get_flags: get 32-bit flags bitmap
+ * set_flags: set 32-bit flags bitmap
  * 
  * Description:
  *
@@ -359,16 +378,23 @@ struct ethtool_ops {
         int     (*set_sg)(struct net_device *, u32);
         u32     (*get_tso)(struct net_device *);
         int     (*set_tso)(struct net_device *, u32);
-        int     (*self_test_count)(struct net_device *);
         void    (*self_test)(struct net_device *, struct ethtool_test *, u64 *);
         void    (*get_strings)(struct net_device *, u32 stringset, u8 *);
         int     (*phys_id)(struct net_device *, u32);
-        int     (*get_stats_count)(struct net_device *);
         void    (*get_ethtool_stats)(struct net_device *, struct ethtool_stats *, u64 *);
         int     (*begin)(struct net_device *);
         void    (*complete)(struct net_device *);
         u32     (*get_ufo)(struct net_device *);
         int     (*set_ufo)(struct net_device *, u32);
+        u32     (*get_flags)(struct net_device *);
+        int     (*set_flags)(struct net_device *, u32);
+        u32     (*get_priv_flags)(struct net_device *);
+        int     (*set_priv_flags)(struct net_device *, u32);
+        int     (*get_sset_count)(struct net_device *, int);
+
+        /* the following hooks are obsolete */
+        int     (*self_test_count)(struct net_device *);/* use get_sset_count */
+        int     (*get_stats_count)(struct net_device *);/* use get_sset_count */
 };
 #endif /* __KERNEL__ */
 
@@ -410,6 +436,10 @@ struct ethtool_ops {
 #define ETHTOOL_SUFO            0x00000022 /* Set UFO enable (ethtool_value) */
 #define ETHTOOL_GGSO            0x00000023 /* Get GSO enable (ethtool_value) */
 #define ETHTOOL_SGSO            0x00000024 /* Set GSO enable (ethtool_value) */
+#define ETHTOOL_GFLAGS          0x00000025 /* Get flags bitmap(ethtool_value) */
+#define ETHTOOL_SFLAGS          0x00000026 /* Set flags bitmap(ethtool_value) */
+#define ETHTOOL_GPFLAGS         0x00000027 /* Get driver-private flags bitmap */
+#define ETHTOOL_SPFLAGS         0x00000028 /* Set driver-private flags bitmap */
 
 /* compatibility with older code */
 #define SPARC_ETH_GSET          ETHTOOL_GSET
diff --git a/include/linux/fs_enet_pd.h b/include/linux/fs_enet_pd.h
index 543cd3cd9e77..9bc045b8c478 100644
--- a/include/linux/fs_enet_pd.h
+++ b/include/linux/fs_enet_pd.h
@@ -16,6 +16,7 @@
 #ifndef FS_ENET_PD_H
 #define FS_ENET_PD_H
 
+#include <linux/string.h>
 #include <asm/types.h>
 
 #define FS_ENET_NAME    "fs_enet"
@@ -119,6 +120,7 @@ struct fs_platform_info {
 
         u32 cp_page;            /* CPM page */
         u32 cp_block;           /* CPM sblock */
+        u32 cp_command;         /* CPM page/sblock/mcn */
 
         u32 clk_trx;            /* some stuff for pins & mux configuration*/
         u32 clk_rx;
@@ -133,7 +135,11 @@ struct fs_platform_info {
         u32 device_flags;
 
         int phy_addr;           /* the phy address (-1 no phy) */
+#ifdef CONFIG_PPC_CPM_NEW_BINDING
+        char bus_id[16];
+#else
         const char*     bus_id;
+#endif
         int phy_irq;            /* the phy irq (if it exists)  */
 
         const struct fs_mii_bus_info *bus_info;
diff --git a/include/linux/ieee80211.h b/include/linux/ieee80211.h
index 272f8c8c90da..30621c27159f 100644
--- a/include/linux/ieee80211.h
+++ b/include/linux/ieee80211.h
@@ -16,6 +16,7 @@
 #define IEEE80211_H
 
 #include <linux/types.h>
+#include <asm/byteorder.h>
 
 #define FCS_LEN 4
 
@@ -350,4 +351,64 @@ enum ieee80211_eid {
 
 #define WLAN_MAX_KEY_LEN                32
 
+/**
+ * ieee80211_get_SA - get pointer to SA
+ *
+ * Given an 802.11 frame, this function returns the offset
+ * to the source address (SA). It does not verify that the
+ * header is long enough to contain the address, and the
+ * header must be long enough to contain the frame control
+ * field.
+ *
+ * @hdr: the frame
+ */
+static inline u8 *ieee80211_get_SA(struct ieee80211_hdr *hdr)
+{
+        u8 *raw = (u8 *) hdr;
+        u8 tofrom = (*(raw+1)) & 3; /* get the TODS and FROMDS bits */
+
+        switch (tofrom) {
+                case 2:
+                        return hdr->addr3;
+                case 3:
+                        return hdr->addr4;
+        }
+        return hdr->addr2;
+}
+
+/**
+ * ieee80211_get_DA - get pointer to DA
+ *
+ * Given an 802.11 frame, this function returns the offset
+ * to the destination address (DA). It does not verify that
+ * the header is long enough to contain the address, and the
+ * header must be long enough to contain the frame control
+ * field.
+ *
+ * @hdr: the frame
+ */
+static inline u8 *ieee80211_get_DA(struct ieee80211_hdr *hdr)
+{
+        u8 *raw = (u8 *) hdr;
+        u8 to_ds = (*(raw+1)) & 1; /* get the TODS bit */
+
+        if (to_ds)
+                return hdr->addr3;
+        return hdr->addr1;
+}
+
+/**
+ * ieee80211_get_morefrag - determine whether the MOREFRAGS bit is set
+ *
+ * This function determines whether the "more fragments" bit is set
+ * in the frame.
+ *
+ * @hdr: the frame
+ */
+static inline int ieee80211_get_morefrag(struct ieee80211_hdr *hdr)
+{
+        return (le16_to_cpu(hdr->frame_control) &
+                IEEE80211_FCTL_MOREFRAGS) != 0;
+}
+
 #endif /* IEEE80211_H */
diff --git a/include/linux/if_arcnet.h b/include/linux/if_arcnet.h
index af380cb876a0..27ea2ac445ad 100644
--- a/include/linux/if_arcnet.h
+++ b/include/linux/if_arcnet.h
@@ -59,7 +59,7 @@ struct arc_rfc1201
 {
     uint8_t  proto;             /* protocol ID field - varies           */
     uint8_t  split_flag;        /* for use with split packets           */
-    uint16_t sequence;          /* sequence number                      */
+    __be16   sequence;          /* sequence number                      */
     uint8_t  payload[0];        /* space remaining in packet (504 bytes)*/
 };
 #define RFC1201_HDR_SIZE 4
diff --git a/include/linux/if_bridge.h b/include/linux/if_bridge.h
index 4ff211d98769..99e3a1a00099 100644
--- a/include/linux/if_bridge.h
+++ b/include/linux/if_bridge.h
@@ -104,7 +104,7 @@ struct __fdb_entry
 
 #include <linux/netdevice.h>
 
-extern void brioctl_set(int (*ioctl_hook)(unsigned int, void __user *));
+extern void brioctl_set(int (*ioctl_hook)(struct net *, unsigned int, void __user *));
 extern struct sk_buff *(*br_handle_frame_hook)(struct net_bridge_port *p,
                                                struct sk_buff *skb);
 extern int (*br_should_route_hook)(struct sk_buff **pskb);
diff --git a/include/linux/if_eql.h b/include/linux/if_eql.h
index b68752fdc5c4..79c4f268410d 100644
--- a/include/linux/if_eql.h
+++ b/include/linux/if_eql.h
@@ -58,7 +58,6 @@ typedef struct equalizer {
         slave_queue_t           queue;
         int                     min_slaves;
         int                     max_slaves;
-        struct net_device_stats stats;
         struct timer_list       timer;
 } equalizer_t;  
 
diff --git a/include/linux/if_ether.h b/include/linux/if_ether.h
index 3213f6f4aa58..5f9297793661 100644
--- a/include/linux/if_ether.h
+++ b/include/linux/if_ether.h
@@ -117,9 +117,19 @@ static inline struct ethhdr *eth_hdr(const struct sk_buff *skb)
         return (struct ethhdr *)skb_mac_header(skb);
 }
 
+int eth_header_parse(const struct sk_buff *skb, unsigned char *haddr);
+
 #ifdef CONFIG_SYSCTL
 extern struct ctl_table ether_table[];
 #endif
+
+/*
+ *      Display a 6 byte device address (MAC) in a readable format.
+ */
+#define MAC_FMT "%02x:%02x:%02x:%02x:%02x:%02x"
+extern char *print_mac(char *buf, const u8 *addr);
+#define DECLARE_MAC_BUF(var) char var[18] __maybe_unused
+
 #endif
 
 #endif  /* _LINUX_IF_ETHER_H */
diff --git a/include/linux/if_link.h b/include/linux/if_link.h
index 422084d18ce1..84c3492ae5cb 100644
--- a/include/linux/if_link.h
+++ b/include/linux/if_link.h
@@ -78,6 +78,7 @@ enum
         IFLA_LINKMODE,
         IFLA_LINKINFO,
 #define IFLA_LINKINFO IFLA_LINKINFO
+        IFLA_NET_NS_PID,
         __IFLA_MAX
 };
 
diff --git a/include/linux/if_pppox.h b/include/linux/if_pppox.h
index 25652545ba6e..40743e032845 100644
--- a/include/linux/if_pppox.h
+++ b/include/linux/if_pppox.h
@@ -40,7 +40,7 @@
 /************************************************************************ 
  * PPPoE addressing definition 
  */ 
-typedef __u16 sid_t; 
+typedef __be16 sid_t;
 struct pppoe_addr{ 
        sid_t           sid;                    /* Session identifier */ 
        unsigned char   remote[ETH_ALEN];       /* Remote address */ 
@@ -90,8 +90,8 @@ struct sockaddr_pppol2tp {
 #define PADS_CODE       0x65
 #define PADT_CODE       0xa7
 struct pppoe_tag {
-        __u16 tag_type;
-        __u16 tag_len;
+        __be16 tag_type;
+        __be16 tag_len;
         char tag_data[0];
 } __attribute ((packed));
 
@@ -118,8 +118,8 @@ struct pppoe_hdr {
 #error  "Please fix <asm/byteorder.h>"
 #endif
         __u8 code;
-        __u16 sid;
-        __u16 length;
+        __be16 sid;
+        __be16 length;
         struct pppoe_tag tag[0];
 } __attribute__ ((packed));
 
@@ -152,7 +152,7 @@ struct pppox_sock {
         union {
                 struct pppoe_opt pppoe;
         } proto;
-        unsigned short          num;
+        __be16                  num;
 };
 #define pppoe_dev       proto.pppoe.dev
 #define pppoe_ifindex   proto.pppoe.ifindex
@@ -172,7 +172,7 @@ static inline struct sock *sk_pppox(struct pppox_sock *po)
 struct module;
 
 struct pppox_proto {
-        int             (*create)(struct socket *sock);
+        int             (*create)(struct net *net, struct socket *sock);
         int             (*ioctl)(struct socket *sock, unsigned int cmd,
                                  unsigned long arg);
         struct module   *owner;
diff --git a/include/linux/if_shaper.h b/include/linux/if_shaper.h
index 68c896a36a34..3b1b7ba19825 100644
--- a/include/linux/if_shaper.h
+++ b/include/linux/if_shaper.h
@@ -24,19 +24,7 @@ struct shaper
         unsigned long recovery; /* Time we can next clock a packet out on
                                    an empty queue */
         spinlock_t lock;
-        struct net_device_stats stats;
         struct net_device *dev;
-        int  (*hard_start_xmit) (struct sk_buff *skb,
-                struct net_device *dev);
-        int  (*hard_header) (struct sk_buff *skb,
-                struct net_device *dev,
-                unsigned short type,
-                void *daddr,
-                void *saddr,
-                unsigned len);
-        int  (*rebuild_header)(struct sk_buff *skb);
-        int (*hard_header_cache)(struct neighbour *neigh, struct hh_cache *hh);
-        void (*header_cache_update)(struct hh_cache *hh, struct net_device *dev, unsigned char *  haddr);
         struct net_device_stats* (*get_stats)(struct net_device *dev);
         struct timer_list timer;
 };
diff --git a/include/linux/if_tun.h b/include/linux/if_tun.h
index 42eb6945b93e..33e489d5bb33 100644
--- a/include/linux/if_tun.h
+++ b/include/linux/if_tun.h
@@ -42,7 +42,6 @@ struct tun_struct {
         struct sk_buff_head     readq;
 
         struct net_device       *dev;
-        struct net_device_stats stats;
 
         struct fasync_struct    *fasync;
 
diff --git a/include/linux/if_vlan.h b/include/linux/if_vlan.h
index f8443fdb124a..976d4b1067d1 100644
--- a/include/linux/if_vlan.h
+++ b/include/linux/if_vlan.h
@@ -62,7 +62,7 @@ struct vlan_hdr {
 #define VLAN_VID_MASK   0xfff
 
 /* found in socket.c */
-extern void vlan_ioctl_set(int (*hook)(void __user *));
+extern void vlan_ioctl_set(int (*hook)(struct net *, void __user *));
 
 #define VLAN_NAME "vlan"
 
diff --git a/include/linux/inet_lro.h b/include/linux/inet_lro.h
new file mode 100644
index 000000000000..e1fc1d16d3cd
--- /dev/null
+++ b/include/linux/inet_lro.h
@@ -0,0 +1,177 @@
+/*
+ *  linux/include/linux/inet_lro.h
+ *
+ *  Large Receive Offload (ipv4 / tcp)
+ *
+ *  (C) Copyright IBM Corp. 2007
+ *
+ *  Authors:
+ *       Jan-Bernd Themann <themann@de.ibm.com>
+ *       Christoph Raisch <raisch@de.ibm.com>
+ *
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2, or (at your option)
+ * any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+ */
+
+#ifndef __INET_LRO_H_
+#define __INET_LRO_H_
+
+#include <net/ip.h>
+#include <net/tcp.h>
+
+/*
+ * LRO statistics
+ */
+
+struct net_lro_stats {
+        unsigned long aggregated;
+        unsigned long flushed;
+        unsigned long no_desc;
+};
+
+/*
+ * LRO descriptor for a tcp session
+ */
+struct net_lro_desc {
+        struct sk_buff *parent;
+        struct sk_buff *last_skb;
+        struct skb_frag_struct *next_frag;
+        struct iphdr *iph;
+        struct tcphdr *tcph;
+        struct vlan_group *vgrp;
+        __wsum  data_csum;
+        u32 tcp_rcv_tsecr;
+        u32 tcp_rcv_tsval;
+        u32 tcp_ack;
+        u32 tcp_next_seq;
+        u32 skb_tot_frags_len;
+        u16 ip_tot_len;
+        u16 tcp_saw_tstamp;             /* timestamps enabled */
+        u16 tcp_window;
+        u16 vlan_tag;
+        int pkt_aggr_cnt;               /* counts aggregated packets */
+        int vlan_packet;
+        int mss;
+        int active;
+};
+
+/*
+ * Large Receive Offload (LRO) Manager
+ *
+ * Fields must be set by driver
+ */
+
+struct net_lro_mgr {
+        struct net_device *dev;
+        struct net_lro_stats stats;
+
+        /* LRO features */
+        unsigned long features;
+#define LRO_F_NAPI            1  /* Pass packets to stack via NAPI */
+#define LRO_F_EXTRACT_VLAN_ID 2  /* Set flag if VLAN IDs are extracted
+                                    from received packets and eth protocol
+                                    is still ETH_P_8021Q */
+
+        u32 ip_summed;      /* Set in non generated SKBs in page mode */
+        u32 ip_summed_aggr; /* Set in aggregated SKBs: CHECKSUM_UNNECESSARY
+                             * or CHECKSUM_NONE */
+
+        int max_desc; /* Max number of LRO descriptors  */
+        int max_aggr; /* Max number of LRO packets to be aggregated */
+
+        struct net_lro_desc *lro_arr; /* Array of LRO descriptors */
+
+        /*
+         * Optimized driver functions
+         *
+         * get_skb_header: returns tcp and ip header for packet in SKB
+         */
+        int (*get_skb_header)(struct sk_buff *skb, void **ip_hdr,
+                              void **tcpudp_hdr, u64 *hdr_flags, void *priv);
+
+        /* hdr_flags: */
+#define LRO_IPV4 1 /* ip_hdr is IPv4 header */
+#define LRO_TCP  2 /* tcpudp_hdr is TCP header */
+
+        /*
+         * get_frag_header: returns mac, tcp and ip header for packet in SKB
+         *
+         * @hdr_flags: Indicate what kind of LRO has to be done
+         *             (IPv4/IPv6/TCP/UDP)
+         */
+        int (*get_frag_header)(struct skb_frag_struct *frag, void **mac_hdr,
+                               void **ip_hdr, void **tcpudp_hdr, u64 *hdr_flags,
+                               void *priv);
+};
+
+/*
+ * Processes a SKB
+ *
+ * @lro_mgr: LRO manager to use
+ * @skb: SKB to aggregate
+ * @priv: Private data that may be used by driver functions
+ *        (for example get_tcp_ip_hdr)
+ */
+
+void lro_receive_skb(struct net_lro_mgr *lro_mgr,
+                     struct sk_buff *skb,
+                     void *priv);
+
+/*
+ * Processes a SKB with VLAN HW acceleration support
+ */
+
+void lro_vlan_hwaccel_receive_skb(struct net_lro_mgr *lro_mgr,
+                                  struct sk_buff *skb,
+                                  struct vlan_group *vgrp,
+                                  u16 vlan_tag,
+                                  void *priv);
+
+/*
+ * Processes a fragment list
+ *
+ * This functions aggregate fragments and generate SKBs do pass
+ * the packets to the stack.
+ *
+ * @lro_mgr: LRO manager to use
+ * @frags: Fragment to be processed. Must contain entire header in first
+ *         element.
+ * @len: Length of received data
+ * @true_size: Actual size of memory the fragment is consuming
+ * @priv: Private data that may be used by driver functions
+ *        (for example get_tcp_ip_hdr)
+ */
+
+void lro_receive_frags(struct net_lro_mgr *lro_mgr,
+                       struct skb_frag_struct *frags,
+                       int len, int true_size, void *priv, __wsum sum);
+
+void lro_vlan_hwaccel_receive_frags(struct net_lro_mgr *lro_mgr,
+                                    struct skb_frag_struct *frags,
+                                    int len, int true_size,
+                                    struct vlan_group *vgrp,
+                                    u16 vlan_tag,
+                                    void *priv, __wsum sum);
+
+/*
+ * Forward all aggregated SKBs held by lro_mgr to network stack
+ */
+
+void lro_flush_all(struct net_lro_mgr *lro_mgr);
+
+void lro_flush_pkt(struct net_lro_mgr *lro_mgr,
+                   struct iphdr *iph, struct tcphdr *tcph);
+
+#endif
diff --git a/include/linux/init.h b/include/linux/init.h
index 74b1f43bf982..f8d9d0b5cffc 100644
--- a/include/linux/init.h
+++ b/include/linux/init.h
@@ -57,6 +57,7 @@
  * The markers follow same syntax rules as __init / __initdata. */
 #define __init_refok     noinline __attribute__ ((__section__ (".text.init.refok")))
 #define __initdata_refok          __attribute__ ((__section__ (".data.init.refok")))
+#define __exit_refok     noinline __attribute__ ((__section__ (".exit.text.refok")))
 
 #ifdef MODULE
 #define __exit          __attribute__ ((__section__(".exit.text"))) __cold
diff --git a/include/linux/init_task.h b/include/linux/init_task.h
index f8abfa349ef9..513bc3e489f0 100644
--- a/include/linux/init_task.h
+++ b/include/linux/init_task.h
@@ -9,6 +9,7 @@
 #include <linux/ipc.h>
 #include <linux/pid_namespace.h>
 #include <linux/user_namespace.h>
+#include <net/net_namespace.h>
 
 #define INIT_FDTABLE \
 {                                                       \
@@ -78,6 +79,7 @@ extern struct nsproxy init_nsproxy;
         .nslock         = __SPIN_LOCK_UNLOCKED(nsproxy.nslock),         \
         .uts_ns         = &init_uts_ns,                                 \
         .mnt_ns         = NULL,                                         \
+        INIT_NET_NS(net_ns)                                             \
         INIT_IPC_NS(ipc_ns)                                             \
         .user_ns        = &init_user_ns,                                \
 }
diff --git a/include/linux/input.h b/include/linux/input.h
index 36e00aa6f03b..6eb3aead7f1d 100644
--- a/include/linux/input.h
+++ b/include/linux/input.h
@@ -360,6 +360,7 @@ struct input_absinfo {
 
 #define KEY_BLUETOOTH           237
 #define KEY_WLAN                238
+#define KEY_UWB                 239
 
 #define KEY_UNKNOWN             240
 
diff --git a/include/linux/ipv6.h b/include/linux/ipv6.h
index 4ca60c3320fb..5d35a4cc3bff 100644
--- a/include/linux/ipv6.h
+++ b/include/linux/ipv6.h
@@ -96,27 +96,6 @@ struct ipv6_destopt_hao {
         struct in6_addr         addr;
 } __attribute__ ((__packed__));
 
-struct ipv6_auth_hdr {
-        __u8  nexthdr;
-        __u8  hdrlen;           /* This one is measured in 32 bit units! */
-        __be16 reserved;
-        __be32 spi;
-        __be32 seq_no;           /* Sequence number */
-        __u8  auth_data[0];     /* Length variable but >=4. Mind the 64 bit alignment! */
-};
-
-struct ipv6_esp_hdr {
-        __be32 spi;
-        __be32 seq_no;           /* Sequence number */
-        __u8  enc_data[0];      /* Length variable but >=8. Mind the 64 bit alignment! */
-};
-
-struct ipv6_comp_hdr {
-        __u8 nexthdr;
-        __u8 flags;
-        __be16 cpi;
-};
-
 /*
  *      IPv6 fixed header
  *
diff --git a/include/linux/isdn.h b/include/linux/isdn.h
index 3c7875b7ab5b..ad09506554a3 100644
--- a/include/linux/isdn.h
+++ b/include/linux/isdn.h
@@ -353,13 +353,6 @@ typedef struct isdn_net_local_s {
                                        /* a particular channel (including  */
                                        /* the frame_cnt                    */
 
-  int                    (*org_hhc)(
-                                    struct neighbour *neigh,
-                                    struct hh_cache *hh);
-                                       /* Ptr to orig. header_cache_update */
-  void                   (*org_hcu)(struct hh_cache *,
-                                    struct net_device *,
-                                    unsigned char *);
   int  pppbind;                        /* ippp device for bindings         */
   int                                   dialtimeout;    /* How long shall we try on dialing? (jiffies) */
   int                                   dialwait;               /* How long shall we wait after failed attempt? (jiffies) */
@@ -389,7 +382,7 @@ typedef struct isdn_net_dev_s {
                                           online                           */
   spinlock_t queue_lock;               /* lock to protect queue            */
   void *next;                          /* Pointer to next isdn-interface   */
-  struct net_device dev;               /* interface to upper levels        */
+  struct net_device *dev;              /* interface to upper levels        */
 #ifdef CONFIG_ISDN_PPP
   ippp_bundle * pb;             /* pointer to the common bundle structure
                                  * with the per-bundle data */
diff --git a/include/linux/ktime.h b/include/linux/ktime.h
index dae7143644fe..a6ddec141f96 100644
--- a/include/linux/ktime.h
+++ b/include/linux/ktime.h
@@ -102,6 +102,13 @@ static inline ktime_t ktime_set(const long secs, const unsigned long nsecs)
 #define ktime_add_ns(kt, nsval) \
                 ({ (ktime_t){ .tv64 = (kt).tv64 + (nsval) }; })
 
+/*
+ * Subtract a scalar nanosecod from a ktime_t variable
+ * res = kt - nsval:
+ */
+#define ktime_sub_ns(kt, nsval) \
+                ({ (ktime_t){ .tv64 = (kt).tv64 - (nsval) }; })
+
 /* convert a timespec to ktime_t format: */
 static inline ktime_t timespec_to_ktime(struct timespec ts)
 {
@@ -200,6 +207,15 @@ static inline ktime_t ktime_add(const ktime_t add1, const ktime_t add2)
 extern ktime_t ktime_add_ns(const ktime_t kt, u64 nsec);
 
 /**
+ * ktime_sub_ns - Subtract a scalar nanoseconds value from a ktime_t variable
+ * @kt:         minuend
+ * @nsec:       the scalar nsec value to subtract
+ *
+ * Returns the subtraction of @nsec from @kt in ktime_t format
+ */
+extern ktime_t ktime_sub_ns(const ktime_t kt, u64 nsec);
+
+/**
  * timespec_to_ktime - convert a timespec to ktime_t format
  * @ts:         the timespec variable to convert
  *
@@ -289,6 +305,11 @@ static inline ktime_t ktime_add_us(const ktime_t kt, const u64 usec)
         return ktime_add_ns(kt, usec * 1000);
 }
 
+static inline ktime_t ktime_sub_us(const ktime_t kt, const u64 usec)
+{
+        return ktime_sub_ns(kt, usec * 1000);
+}
+
 /*
  * The resolution of the clocks. The resolution value is returned in
  * the clock_getres() system call to give application programmers an
diff --git a/include/linux/list.h b/include/linux/list.h
index f29fc9c1a964..ad9dcb9e3375 100644
--- a/include/linux/list.h
+++ b/include/linux/list.h
@@ -525,6 +525,20 @@ static inline void list_splice_init_rcu(struct list_head *list,
              pos = list_entry(pos->member.next, typeof(*pos), member))
 
 /**
+ * list_for_each_entry_continue_reverse - iterate backwards from the given point
+ * @pos:        the type * to use as a loop cursor.
+ * @head:       the head for your list.
+ * @member:     the name of the list_struct within the struct.
+ *
+ * Start to iterate over list of given type backwards, continuing after
+ * the current position.
+ */
+#define list_for_each_entry_continue_reverse(pos, head, member)         \
+        for (pos = list_entry(pos->member.prev, typeof(*pos), member);  \
+             prefetch(pos->member.prev), &pos->member != (head);        \
+             pos = list_entry(pos->member.prev, typeof(*pos), member))
+
+/**
  * list_for_each_entry_from - iterate over list of given type from the current point
  * @pos:        the type * to use as a loop cursor.
  * @head:       the head for your list.
diff --git a/include/linux/mdio-bitbang.h b/include/linux/mdio-bitbang.h
new file mode 100644
index 000000000000..8ea9a42a4c02
--- /dev/null
+++ b/include/linux/mdio-bitbang.h
@@ -0,0 +1,42 @@
+#ifndef __LINUX_MDIO_BITBANG_H
+#define __LINUX_MDIO_BITBANG_H
+
+#include <linux/phy.h>
+#include <linux/module.h>
+
+struct mdiobb_ctrl;
+
+struct mdiobb_ops {
+        struct module *owner;
+
+        /* Set the Management Data Clock high if level is one,
+         * low if level is zero.
+         */
+        void (*set_mdc)(struct mdiobb_ctrl *ctrl, int level);
+
+        /* Configure the Management Data I/O pin as an input if
+         * "output" is zero, or an output if "output" is one.
+         */
+        void (*set_mdio_dir)(struct mdiobb_ctrl *ctrl, int output);
+
+        /* Set the Management Data I/O pin high if value is one,
+         * low if "value" is zero.  This may only be called
+         * when the MDIO pin is configured as an output.
+         */
+        void (*set_mdio_data)(struct mdiobb_ctrl *ctrl, int value);
+
+        /* Retrieve the state Management Data I/O pin. */
+        int (*get_mdio_data)(struct mdiobb_ctrl *ctrl);
+};
+
+struct mdiobb_ctrl {
+        const struct mdiobb_ops *ops;
+};
+
+/* The returned bus is not yet registered with the phy layer. */
+struct mii_bus *alloc_mdio_bitbang(struct mdiobb_ctrl *ctrl);
+
+/* The bus must already have been unregistered. */
+void free_mdio_bitbang(struct mii_bus *bus);
+
+#endif
diff --git a/include/linux/mod_devicetable.h b/include/linux/mod_devicetable.h
index e47e5951058b..74523d999f7a 100644
--- a/include/linux/mod_devicetable.h
+++ b/include/linux/mod_devicetable.h
@@ -351,4 +351,19 @@ struct sdio_device_id {
         kernel_ulong_t driver_data;     /* Data private to the driver */
 };
 
+/* SSB core, see drivers/ssb/ */
+struct ssb_device_id {
+        __u16   vendor;
+        __u16   coreid;
+        __u8    revision;
+};
+#define SSB_DEVICE(_vendor, _coreid, _revision)  \
+        { .vendor = _vendor, .coreid = _coreid, .revision = _revision, }
+#define SSB_DEVTABLE_END  \
+        { 0, },
+
+#define SSB_ANY_VENDOR          0xFFFF
+#define SSB_ANY_ID              0xFFFF
+#define SSB_ANY_REV             0xFF
+
 #endif /* LINUX_MOD_DEVICETABLE_H */
diff --git a/include/linux/net.h b/include/linux/net.h
index efc45177b503..c136abce7ef6 100644
--- a/include/linux/net.h
+++ b/include/linux/net.h
@@ -23,6 +23,7 @@
 
 struct poll_table_struct;
 struct inode;
+struct net;
 
 #define NPROTO          34              /* should be enough for now..   */
 
@@ -169,7 +170,7 @@ struct proto_ops {
 
 struct net_proto_family {
         int             family;
-        int             (*create)(struct socket *sock, int protocol);
+        int             (*create)(struct net *net, struct socket *sock, int protocol);
         struct module   *owner;
 };
 
diff --git a/include/linux/netdevice.h b/include/linux/netdevice.h
index e679b2751665..5a11f889e56a 100644
--- a/include/linux/netdevice.h
+++ b/include/linux/netdevice.h
@@ -31,6 +31,7 @@
 
 #ifdef __KERNEL__
 #include <linux/timer.h>
+#include <linux/delay.h>
 #include <asm/atomic.h>
 #include <asm/cache.h>
 #include <asm/byteorder.h>
@@ -38,6 +39,9 @@
 #include <linux/device.h>
 #include <linux/percpu.h>
 #include <linux/dmaengine.h>
+#include <linux/workqueue.h>
+
+#include <net/net_namespace.h>
 
 struct vlan_group;
 struct ethtool_ops;
@@ -246,6 +250,19 @@ struct hh_cache
 #define LL_RESERVED_SPACE_EXTRA(dev,extra) \
         ((((dev)->hard_header_len+extra)&~(HH_DATA_MOD - 1)) + HH_DATA_MOD)
 
+struct header_ops {
+        int     (*create) (struct sk_buff *skb, struct net_device *dev,
+                           unsigned short type, const void *daddr,
+                           const void *saddr, unsigned len);
+        int     (*parse)(const struct sk_buff *skb, unsigned char *haddr);
+        int     (*rebuild)(struct sk_buff *skb);
+#define HAVE_HEADER_CACHE
+        int     (*cache)(const struct neighbour *neigh, struct hh_cache *hh);
+        void    (*cache_update)(struct hh_cache *hh,
+                                const struct net_device *dev,
+                                const unsigned char *haddr);
+};
+
 /* These flag bits are private to the generic network queueing
  * layer, they may not be explicitly referenced by any other
  * code.
@@ -258,7 +275,6 @@ enum netdev_state_t
         __LINK_STATE_PRESENT,
         __LINK_STATE_SCHED,
         __LINK_STATE_NOCARRIER,
-        __LINK_STATE_RX_SCHED,
         __LINK_STATE_LINKWATCH_PENDING,
         __LINK_STATE_DORMANT,
         __LINK_STATE_QDISC_RUNNING,
@@ -278,6 +294,120 @@ struct netdev_boot_setup {
 extern int __init netdev_boot_setup(char *str);
 
 /*
+ * Structure for NAPI scheduling similar to tasklet but with weighting
+ */
+struct napi_struct {
+        /* The poll_list must only be managed by the entity which
+         * changes the state of the NAPI_STATE_SCHED bit.  This means
+         * whoever atomically sets that bit can add this napi_struct
+         * to the per-cpu poll_list, and whoever clears that bit
+         * can remove from the list right before clearing the bit.
+         */
+        struct list_head        poll_list;
+
+        unsigned long           state;
+        int                     weight;
+        int                     (*poll)(struct napi_struct *, int);
+#ifdef CONFIG_NETPOLL
+        spinlock_t              poll_lock;
+        int                     poll_owner;
+        struct net_device       *dev;
+        struct list_head        dev_list;
+#endif
+};
+
+enum
+{
+        NAPI_STATE_SCHED,       /* Poll is scheduled */
+};
+
+extern void FASTCALL(__napi_schedule(struct napi_struct *n));
+
+/**
+ *      napi_schedule_prep - check if napi can be scheduled
+ *      @n: napi context
+ *
+ * Test if NAPI routine is already running, and if not mark
+ * it as running.  This is used as a condition variable
+ * insure only one NAPI poll instance runs
+ */
+static inline int napi_schedule_prep(struct napi_struct *n)
+{
+        return !test_and_set_bit(NAPI_STATE_SCHED, &n->state);
+}
+
+/**
+ *      napi_schedule - schedule NAPI poll
+ *      @n: napi context
+ *
+ * Schedule NAPI poll routine to be called if it is not already
+ * running.
+ */
+static inline void napi_schedule(struct napi_struct *n)
+{
+        if (napi_schedule_prep(n))
+                __napi_schedule(n);
+}
+
+/* Try to reschedule poll. Called by dev->poll() after napi_complete().  */
+static inline int napi_reschedule(struct napi_struct *napi)
+{
+        if (napi_schedule_prep(napi)) {
+                __napi_schedule(napi);
+                return 1;
+        }
+        return 0;
+}
+
+/**
+ *      napi_complete - NAPI processing complete
+ *      @n: napi context
+ *
+ * Mark NAPI processing as complete.
+ */
+static inline void __napi_complete(struct napi_struct *n)
+{
+        BUG_ON(!test_bit(NAPI_STATE_SCHED, &n->state));
+        list_del(&n->poll_list);
+        smp_mb__before_clear_bit();
+        clear_bit(NAPI_STATE_SCHED, &n->state);
+}
+
+static inline void napi_complete(struct napi_struct *n)
+{
+        local_irq_disable();
+        __napi_complete(n);
+        local_irq_enable();
+}
+
+/**
+ *      napi_disable - prevent NAPI from scheduling
+ *      @n: napi context
+ *
+ * Stop NAPI from being scheduled on this context.
+ * Waits till any outstanding processing completes.
+ */
+static inline void napi_disable(struct napi_struct *n)
+{
+        while (test_and_set_bit(NAPI_STATE_SCHED, &n->state))
+                msleep_interruptible(1);
+}
+
+/**
+ *      napi_enable - enable NAPI scheduling
+ *      @n: napi context
+ *
+ * Resume NAPI from being scheduled on this context.
+ * Must be paired with napi_disable.
+ */
+static inline void napi_enable(struct napi_struct *n)
+{
+        BUG_ON(!test_bit(NAPI_STATE_SCHED, &n->state));
+        smp_mb__before_clear_bit();
+        clear_bit(NAPI_STATE_SCHED, &n->state);
+}
+
+/*
  *      The DEVICE structure.
  *      Actually, this whole structure is a big mistake.  It mixes I/O
  *      data with strictly "high-level" data, and it has to know about
@@ -319,6 +449,9 @@ struct net_device
         unsigned long           state;
 
         struct list_head        dev_list;
+#ifdef CONFIG_NETPOLL
+        struct list_head        napi_list;
+#endif
         
         /* The device initialization function. Called only once. */
         int                     (*init)(struct net_device *dev);
@@ -339,8 +472,11 @@ struct net_device
 #define NETIF_F_HW_VLAN_FILTER  512     /* Receive filtering on VLAN */
 #define NETIF_F_VLAN_CHALLENGED 1024    /* Device cannot handle VLAN packets */
 #define NETIF_F_GSO             2048    /* Enable software GSO. */
-#define NETIF_F_LLTX            4096    /* LockLess TX */
+#define NETIF_F_LLTX            4096    /* LockLess TX - deprecated. Please */
+                                        /* do not use LLTX in new drivers */
+#define NETIF_F_NETNS_LOCAL     8192    /* Does not change network namespaces */
 #define NETIF_F_MULTI_QUEUE     16384   /* Has multiple TX/RX queues */
+#define NETIF_F_LRO             32768   /* large receive offload */
 
         /* Segmentation offload features */
 #define NETIF_F_GSO_SHIFT       16
@@ -379,6 +515,9 @@ struct net_device
 #endif
         const struct ethtool_ops *ethtool_ops;
 
+        /* Hardware header description */
+        const struct header_ops *header_ops;
+
         /*
          * This marks the end of the "visible" part of the structure. All
          * fields hereafter are internal to the system, and may change at
@@ -430,12 +569,6 @@ struct net_device
 /*
  * Cache line mostly used on receive path (including eth_type_trans())
  */
-        struct list_head        poll_list ____cacheline_aligned_in_smp;
-                                        /* Link to poll list    */
-
-        int                     (*poll) (struct net_device *dev, int *quota);
-        int                     quota;
-        int                     weight;
         unsigned long           last_rx;        /* Time of last Rx      */
         /* Interface address info used in eth_type_trans() */
         unsigned char           dev_addr[MAX_ADDR_LEN]; /* hw address, (before bcast 
@@ -508,13 +641,6 @@ struct net_device
         int                     (*open)(struct net_device *dev);
         int                     (*stop)(struct net_device *dev);
 #define HAVE_NETDEV_POLL
-        int                     (*hard_header) (struct sk_buff *skb,
-                                                struct net_device *dev,
-                                                unsigned short type,
-                                                void *daddr,
-                                                void *saddr,
-                                                unsigned len);
-        int                     (*rebuild_header)(struct sk_buff *skb);
 #define HAVE_CHANGE_RX_FLAGS
         void                    (*change_rx_flags)(struct net_device *dev,
                                                    int flags);
@@ -531,12 +657,6 @@ struct net_device
 #define HAVE_SET_CONFIG
         int                     (*set_config)(struct net_device *dev,
                                               struct ifmap *map);
-#define HAVE_HEADER_CACHE
-        int                     (*hard_header_cache)(struct neighbour *neigh,
-                                                     struct hh_cache *hh);
-        void                    (*header_cache_update)(struct hh_cache *hh,
-                                                       struct net_device *dev,
-                                                       unsigned char *  haddr);
 #define HAVE_CHANGE_MTU
         int                     (*change_mtu)(struct net_device *dev, int new_mtu);
 
@@ -550,8 +670,6 @@ struct net_device
         void                    (*vlan_rx_kill_vid)(struct net_device *dev,
                                                     unsigned short vid);
 
-        int                     (*hard_header_parse)(struct sk_buff *skb,
-                                                     unsigned char *haddr);
         int                     (*neigh_setup)(struct net_device *dev, struct neigh_parms *);
 #ifdef CONFIG_NETPOLL
         struct netpoll_info     *npinfo;
@@ -560,6 +678,9 @@ struct net_device
         void                    (*poll_controller)(struct net_device *dev);
 #endif
 
+        /* Network namespace this network device is inside */
+        struct net              *nd_net;
+
         /* bridge stuff */
         struct net_bridge_port  *br_port;
         /* macvlan */
@@ -582,17 +703,39 @@ struct net_device
 #define NETDEV_ALIGN            32
 #define NETDEV_ALIGN_CONST      (NETDEV_ALIGN - 1)
 
+/**
+ *      netdev_priv - access network device private data
+ *      @dev: network device
+ *
+ * Get network device private data
+ */
 static inline void *netdev_priv(const struct net_device *dev)
 {
         return dev->priv;
 }
 
-#define SET_MODULE_OWNER(dev) do { } while (0)
 /* Set the sysfs physical device reference for the network logical device
  * if set prior to registration will cause a symlink during initialization.
  */
 #define SET_NETDEV_DEV(net, pdev)       ((net)->dev.parent = (pdev))
 
+static inline void netif_napi_add(struct net_device *dev,
+                                  struct napi_struct *napi,
+                                  int (*poll)(struct napi_struct *, int),
+                                  int weight)
+{
+        INIT_LIST_HEAD(&napi->poll_list);
+        napi->poll = poll;
+        napi->weight = weight;
+#ifdef CONFIG_NETPOLL
+        napi->dev = dev;
+        list_add(&napi->dev_list, &dev->napi_list);
+        spin_lock_init(&napi->poll_lock);
+        napi->poll_owner = -1;
+#endif
+        set_bit(NAPI_STATE_SCHED, &napi->state);
+}
+
 struct packet_type {
         __be16                  type;   /* This is really htons(ether_type). */
         struct net_device       *dev;   /* NULL is wildcarded here           */
@@ -610,45 +753,46 @@ struct packet_type {
 #include <linux/interrupt.h>
 #include <linux/notifier.h>
 
-extern struct net_device                loopback_dev;           /* The loopback */
-extern struct list_head                 dev_base_head;          /* All devices */
 extern rwlock_t                         dev_base_lock;          /* Device list lock */
 
-#define for_each_netdev(d)              \
-                list_for_each_entry(d, &dev_base_head, dev_list)
-#define for_each_netdev_safe(d, n)      \
-                list_for_each_entry_safe(d, n, &dev_base_head, dev_list)
-#define for_each_netdev_continue(d)             \
-                list_for_each_entry_continue(d, &dev_base_head, dev_list)
+
+#define for_each_netdev(net, d)         \
+                list_for_each_entry(d, &(net)->dev_base_head, dev_list)
+#define for_each_netdev_safe(net, d, n) \
+                list_for_each_entry_safe(d, n, &(net)->dev_base_head, dev_list)
+#define for_each_netdev_continue(net, d)                \
+                list_for_each_entry_continue(d, &(net)->dev_base_head, dev_list)
 #define net_device_entry(lh)    list_entry(lh, struct net_device, dev_list)
 
 static inline struct net_device *next_net_device(struct net_device *dev)
 {
         struct list_head *lh;
+        struct net *net;
 
+        net = dev->nd_net;
         lh = dev->dev_list.next;
-        return lh == &dev_base_head ? NULL : net_device_entry(lh);
+        return lh == &net->dev_base_head ? NULL : net_device_entry(lh);
 }
 
-static inline struct net_device *first_net_device(void)
+static inline struct net_device *first_net_device(struct net *net)
 {
-        return list_empty(&dev_base_head) ? NULL :
-                net_device_entry(dev_base_head.next);
+        return list_empty(&net->dev_base_head) ? NULL :
+                net_device_entry(net->dev_base_head.next);
 }
 
 extern int                      netdev_boot_setup_check(struct net_device *dev);
 extern unsigned long            netdev_boot_base(const char *prefix, int unit);
-extern struct net_device    *dev_getbyhwaddr(unsigned short type, char *hwaddr);
-extern struct net_device *dev_getfirstbyhwtype(unsigned short type);
-extern struct net_device *__dev_getfirstbyhwtype(unsigned short type);
+extern struct net_device    *dev_getbyhwaddr(struct net *net, unsigned short type, char *hwaddr);
+extern struct net_device *dev_getfirstbyhwtype(struct net *net, unsigned short type);
+extern struct net_device *__dev_getfirstbyhwtype(struct net *net, unsigned short type);
 extern void             dev_add_pack(struct packet_type *pt);
 extern void             dev_remove_pack(struct packet_type *pt);
 extern void             __dev_remove_pack(struct packet_type *pt);
 
-extern struct net_device        *dev_get_by_flags(unsigned short flags,
+extern struct net_device        *dev_get_by_flags(struct net *net, unsigned short flags,
                                                   unsigned short mask);
-extern struct net_device        *dev_get_by_name(const char *name);
-extern struct net_device        *__dev_get_by_name(const char *name);
+extern struct net_device        *dev_get_by_name(struct net *net, const char *name);
+extern struct net_device        *__dev_get_by_name(struct net *net, const char *name);
 extern int              dev_alloc_name(struct net_device *dev, const char *name);
 extern int              dev_open(struct net_device *dev);
 extern int              dev_close(struct net_device *dev);
@@ -659,14 +803,35 @@ extern void		free_netdev(struct net_device *dev);
 extern void             synchronize_net(void);
 extern int              register_netdevice_notifier(struct notifier_block *nb);
 extern int              unregister_netdevice_notifier(struct notifier_block *nb);
-extern int              call_netdevice_notifiers(unsigned long val, void *v);
-extern struct net_device        *dev_get_by_index(int ifindex);
-extern struct net_device        *__dev_get_by_index(int ifindex);
+extern int call_netdevice_notifiers(unsigned long val, struct net_device *dev);
+extern struct net_device        *dev_get_by_index(struct net *net, int ifindex);
+extern struct net_device        *__dev_get_by_index(struct net *net, int ifindex);
 extern int              dev_restart(struct net_device *dev);
 #ifdef CONFIG_NETPOLL_TRAP
 extern int              netpoll_trap(void);
 #endif
 
+static inline int dev_hard_header(struct sk_buff *skb, struct net_device *dev,
+                                  unsigned short type,
+                                  const void *daddr, const void *saddr,
+                                  unsigned len)
+{
+        if (!dev->header_ops)
+                return 0;
+
+        return dev->header_ops->create(skb, dev, type, daddr, saddr, len);
+}
+
+static inline int dev_parse_header(const struct sk_buff *skb,
+                                   unsigned char *haddr)
+{
+        const struct net_device *dev = skb->dev;
+
+        if (!dev->header_ops->parse)
+                return 0;
+        return dev->header_ops->parse(skb, haddr);
+}
+
 typedef int gifconf_func_t(struct net_device * dev, char __user * bufptr, int len);
 extern int              register_gifconf(unsigned int family, gifconf_func_t * gifconf);
 static inline int unregister_gifconf(unsigned int family)
@@ -678,7 +843,6 @@ static inline int unregister_gifconf(unsigned int family)
  * Incoming packets are placed on per-cpu queues so that
  * no locking is needed.
  */
-
 struct softnet_data
 {
         struct net_device       *output_queue;
@@ -686,7 +850,7 @@ struct softnet_data
         struct list_head        poll_list;
         struct sk_buff          *completion_queue;
 
-        struct net_device       backlog_dev;    /* Sorry. 8) */
+        struct napi_struct      backlog;
 #ifdef CONFIG_NET_DMA
         struct dma_chan         *net_dma;
 #endif
@@ -704,11 +868,24 @@ static inline void netif_schedule(struct net_device *dev)
                 __netif_schedule(dev);
 }
 
+/**
+ *      netif_start_queue - allow transmit
+ *      @dev: network device
+ *
+ *      Allow upper layers to call the device hard_start_xmit routine.
+ */
 static inline void netif_start_queue(struct net_device *dev)
 {
         clear_bit(__LINK_STATE_XOFF, &dev->state);
 }
 
+/**
+ *      netif_wake_queue - restart transmit
+ *      @dev: network device
+ *
+ *      Allow upper layers to call the device hard_start_xmit routine.
+ *      Used for flow control when transmit resources are available.
+ */
 static inline void netif_wake_queue(struct net_device *dev)
 {
 #ifdef CONFIG_NETPOLL_TRAP
@@ -721,16 +898,35 @@ static inline void netif_wake_queue(struct net_device *dev)
                 __netif_schedule(dev);
 }
 
+/**
+ *      netif_stop_queue - stop transmitted packets
+ *      @dev: network device
+ *
+ *      Stop upper layers calling the device hard_start_xmit routine.
+ *      Used for flow control when transmit resources are unavailable.
+ */
 static inline void netif_stop_queue(struct net_device *dev)
 {
         set_bit(__LINK_STATE_XOFF, &dev->state);
 }
 
+/**
+ *      netif_queue_stopped - test if transmit queue is flowblocked
+ *      @dev: network device
+ *
+ *      Test if transmit queue on device is currently unable to send.
+ */
 static inline int netif_queue_stopped(const struct net_device *dev)
 {
         return test_bit(__LINK_STATE_XOFF, &dev->state);
 }
 
+/**
+ *      netif_running - test if up
+ *      @dev: network device
+ *
+ *      Test if the device has been brought up.
+ */
 static inline int netif_running(const struct net_device *dev)
 {
         return test_bit(__LINK_STATE_START, &dev->state);
@@ -742,6 +938,14 @@ static inline int netif_running(const struct net_device *dev)
  * done at the overall netdevice level.
  * Also test the device if we're multiqueue.
  */
+
+/**
+ *      netif_start_subqueue - allow sending packets on subqueue
+ *      @dev: network device
+ *      @queue_index: sub queue index
+ *
+ * Start individual transmit queue of a device with multiple transmit queues.
+ */
 static inline void netif_start_subqueue(struct net_device *dev, u16 queue_index)
 {
 #ifdef CONFIG_NETDEVICES_MULTIQUEUE
@@ -749,6 +953,13 @@ static inline void netif_start_subqueue(struct net_device *dev, u16 queue_index)
 #endif
 }
 
+/**
+ *      netif_stop_subqueue - stop sending packets on subqueue
+ *      @dev: network device
+ *      @queue_index: sub queue index
+ *
+ * Stop individual transmit queue of a device with multiple transmit queues.
+ */
 static inline void netif_stop_subqueue(struct net_device *dev, u16 queue_index)
 {
 #ifdef CONFIG_NETDEVICES_MULTIQUEUE
@@ -760,6 +971,13 @@ static inline void netif_stop_subqueue(struct net_device *dev, u16 queue_index)
 #endif
 }
 
+/**
+ *      netif_subqueue_stopped - test status of subqueue
+ *      @dev: network device
+ *      @queue_index: sub queue index
+ *
+ * Check individual transmit queue of a device with multiple transmit queues.
+ */
 static inline int netif_subqueue_stopped(const struct net_device *dev,
                                          u16 queue_index)
 {
@@ -771,6 +989,14 @@ static inline int netif_subqueue_stopped(const struct net_device *dev,
 #endif
 }
 
+
+/**
+ *      netif_wake_subqueue - allow sending packets on subqueue
+ *      @dev: network device
+ *      @queue_index: sub queue index
+ *
+ * Resume individual transmit queue of a device with multiple transmit queues.
+ */
 static inline void netif_wake_subqueue(struct net_device *dev, u16 queue_index)
 {
 #ifdef CONFIG_NETDEVICES_MULTIQUEUE
@@ -784,6 +1010,13 @@ static inline void netif_wake_subqueue(struct net_device *dev, u16 queue_index)
 #endif
 }
 
+/**
+ *      netif_is_multiqueue - test if device has multiple transmit queues
+ *      @dev: network device
+ *
+ * Check if device has multiple transmit queues
+ * Always falls if NETDEVICE_MULTIQUEUE is not configured
+ */
 static inline int netif_is_multiqueue(const struct net_device *dev)
 {
 #ifdef CONFIG_NETDEVICES_MULTIQUEUE
@@ -796,20 +1029,7 @@ static inline int netif_is_multiqueue(const struct net_device *dev)
 /* Use this variant when it is known for sure that it
  * is executing from interrupt context.
  */
-static inline void dev_kfree_skb_irq(struct sk_buff *skb)
-{
-        if (atomic_dec_and_test(&skb->users)) {
-                struct softnet_data *sd;
-                unsigned long flags;
-
-                local_irq_save(flags);
-                sd = &__get_cpu_var(softnet_data);
-                skb->next = sd->completion_queue;
-                sd->completion_queue = skb;
-                raise_softirq_irqoff(NET_TX_SOFTIRQ);
-                local_irq_restore(flags);
-        }
-}
+extern void dev_kfree_skb_irq(struct sk_buff *skb);
 
 /* Use this variant in places where it could be invoked
  * either from interrupt or non-interrupt context.
@@ -822,29 +1042,41 @@ extern int		netif_rx_ni(struct sk_buff *skb);
 #define HAVE_NETIF_RECEIVE_SKB 1
 extern int              netif_receive_skb(struct sk_buff *skb);
 extern int              dev_valid_name(const char *name);
-extern int              dev_ioctl(unsigned int cmd, void __user *);
-extern int              dev_ethtool(struct ifreq *);
+extern int              dev_ioctl(struct net *net, unsigned int cmd, void __user *);
+extern int              dev_ethtool(struct net *net, struct ifreq *);
 extern unsigned         dev_get_flags(const struct net_device *);
 extern int              dev_change_flags(struct net_device *, unsigned);
 extern int              dev_change_name(struct net_device *, char *);
+extern int              dev_change_net_namespace(struct net_device *,
+                                                 struct net *, const char *);
 extern int              dev_set_mtu(struct net_device *, int);
 extern int              dev_set_mac_address(struct net_device *,
                                             struct sockaddr *);
 extern int              dev_hard_start_xmit(struct sk_buff *skb,
                                             struct net_device *dev);
 
-extern void             dev_init(void);
-
 extern int              netdev_budget;
 
 /* Called by rtnetlink.c:rtnl_unlock() */
 extern void netdev_run_todo(void);
 
+/**
+ *      dev_put - release reference to device
+ *      @dev: network device
+ *
+ * Release reference to device to allow it to be freed.
+ */
 static inline void dev_put(struct net_device *dev)
 {
         atomic_dec(&dev->refcnt);
 }
 
+/**
+ *      dev_hold - get reference to device
+ *      @dev: network device
+ *
+ * Hold reference to device to keep it from being freed.
+ */
 static inline void dev_hold(struct net_device *dev)
 {
         atomic_inc(&dev->refcnt);
@@ -861,6 +1093,12 @@ static inline void dev_hold(struct net_device *dev)
 
 extern void linkwatch_fire_event(struct net_device *dev);
 
+/**
+ *      netif_carrier_ok - test if carrier present
+ *      @dev: network device
+ *
+ * Check if carrier is present on device
+ */
 static inline int netif_carrier_ok(const struct net_device *dev)
 {
         return !test_bit(__LINK_STATE_NOCARRIER, &dev->state);
@@ -872,30 +1110,66 @@ extern void netif_carrier_on(struct net_device *dev);
 
 extern void netif_carrier_off(struct net_device *dev);
 
+/**
+ *      netif_dormant_on - mark device as dormant.
+ *      @dev: network device
+ *
+ * Mark device as dormant (as per RFC2863).
+ *
+ * The dormant state indicates that the relevant interface is not
+ * actually in a condition to pass packets (i.e., it is not 'up') but is
+ * in a "pending" state, waiting for some external event.  For "on-
+ * demand" interfaces, this new state identifies the situation where the
+ * interface is waiting for events to place it in the up state.
+ *
+ */
 static inline void netif_dormant_on(struct net_device *dev)
 {
         if (!test_and_set_bit(__LINK_STATE_DORMANT, &dev->state))
                 linkwatch_fire_event(dev);
 }
 
+/**
+ *      netif_dormant_off - set device as not dormant.
+ *      @dev: network device
+ *
+ * Device is not in dormant state.
+ */
 static inline void netif_dormant_off(struct net_device *dev)
 {
         if (test_and_clear_bit(__LINK_STATE_DORMANT, &dev->state))
                 linkwatch_fire_event(dev);
 }
 
+/**
+ *      netif_dormant - test if carrier present
+ *      @dev: network device
+ *
+ * Check if carrier is present on device
+ */
 static inline int netif_dormant(const struct net_device *dev)
 {
         return test_bit(__LINK_STATE_DORMANT, &dev->state);
 }
 
 
+/**
+ *      netif_oper_up - test if device is operational
+ *      @dev: network device
+ *
+ * Check if carrier is operational
+ */
 static inline int netif_oper_up(const struct net_device *dev) {
         return (dev->operstate == IF_OPER_UP ||
                 dev->operstate == IF_OPER_UNKNOWN /* backward compat */);
 }
 
-/* Hot-plugging. */
+/**
+ *      netif_device_present - is device available or removed
+ *      @dev: network device
+ *
+ * Check if device has not been removed from system.
+ */
 static inline int netif_device_present(struct net_device *dev)
 {
         return test_bit(__LINK_STATE_PRESENT, &dev->state);
@@ -955,46 +1229,38 @@ static inline u32 netif_msg_init(int debug_value, int default_msg_enable_bits)
         return (1 << debug_value) - 1;
 }
 
-/* Test if receive needs to be scheduled */
-static inline int __netif_rx_schedule_prep(struct net_device *dev)
-{
-        return !test_and_set_bit(__LINK_STATE_RX_SCHED, &dev->state);
-}
-
 /* Test if receive needs to be scheduled but only if up */
-static inline int netif_rx_schedule_prep(struct net_device *dev)
+static inline int netif_rx_schedule_prep(struct net_device *dev,
+                                         struct napi_struct *napi)
 {
-        return netif_running(dev) && __netif_rx_schedule_prep(dev);
+        return netif_running(dev) && napi_schedule_prep(napi);
 }
 
 /* Add interface to tail of rx poll list. This assumes that _prep has
  * already been called and returned 1.
  */
-
-extern void __netif_rx_schedule(struct net_device *dev);
+static inline void __netif_rx_schedule(struct net_device *dev,
+                                       struct napi_struct *napi)
+{
+        dev_hold(dev);
+        __napi_schedule(napi);
+}
 
 /* Try to reschedule poll. Called by irq handler. */
 
-static inline void netif_rx_schedule(struct net_device *dev)
+static inline void netif_rx_schedule(struct net_device *dev,
+                                     struct napi_struct *napi)
 {
-        if (netif_rx_schedule_prep(dev))
-                __netif_rx_schedule(dev);
+        if (netif_rx_schedule_prep(dev, napi))
+                __netif_rx_schedule(dev, napi);
 }
 
-/* Try to reschedule poll. Called by dev->poll() after netif_rx_complete().
- * Do not inline this?
- */
-static inline int netif_rx_reschedule(struct net_device *dev, int undo)
+/* Try to reschedule poll. Called by dev->poll() after netif_rx_complete().  */
+static inline int netif_rx_reschedule(struct net_device *dev,
+                                      struct napi_struct *napi)
 {
-        if (netif_rx_schedule_prep(dev)) {
-                unsigned long flags;
-
-                dev->quota += undo;
-
-                local_irq_save(flags);
-                list_add_tail(&dev->poll_list, &__get_cpu_var(softnet_data).poll_list);
-                __raise_softirq_irqoff(NET_RX_SOFTIRQ);
-                local_irq_restore(flags);
+        if (napi_schedule_prep(napi)) {
+                __netif_rx_schedule(dev, napi);
                 return 1;
         }
         return 0;
@@ -1003,12 +1269,11 @@ static inline int netif_rx_reschedule(struct net_device *dev, int undo)
 /* same as netif_rx_complete, except that local_irq_save(flags)
  * has already been issued
  */
-static inline void __netif_rx_complete(struct net_device *dev)
+static inline void __netif_rx_complete(struct net_device *dev,
+                                       struct napi_struct *napi)
 {
-        BUG_ON(!test_bit(__LINK_STATE_RX_SCHED, &dev->state));
-        list_del(&dev->poll_list);
-        smp_mb__before_clear_bit();
-        clear_bit(__LINK_STATE_RX_SCHED, &dev->state);
+        __napi_complete(napi);
+        dev_put(dev);
 }
 
 /* Remove interface from poll list: it must be in the poll list
@@ -1016,32 +1281,31 @@ static inline void __netif_rx_complete(struct net_device *dev)
  * it completes the work. The device cannot be out of poll list at this
  * moment, it is BUG().
  */
-static inline void netif_rx_complete(struct net_device *dev)
+static inline void netif_rx_complete(struct net_device *dev,
+                                     struct napi_struct *napi)
 {
         unsigned long flags;
 
         local_irq_save(flags);
-        __netif_rx_complete(dev);
+        __netif_rx_complete(dev, napi);
         local_irq_restore(flags);
 }
 
-static inline void netif_poll_disable(struct net_device *dev)
-{
-        while (test_and_set_bit(__LINK_STATE_RX_SCHED, &dev->state))
-                /* No hurry. */
-                schedule_timeout_interruptible(1);
-}
-
-static inline void netif_poll_enable(struct net_device *dev)
+/**
+ *      netif_tx_lock - grab network device transmit lock
+ *      @dev: network device
+ *
+ * Get network device transmit lock
+ */
+static inline void __netif_tx_lock(struct net_device *dev, int cpu)
 {
-        smp_mb__before_clear_bit();
-        clear_bit(__LINK_STATE_RX_SCHED, &dev->state);
+        spin_lock(&dev->_xmit_lock);
+        dev->xmit_lock_owner = cpu;
 }
 
 static inline void netif_tx_lock(struct net_device *dev)
 {
-        spin_lock(&dev->_xmit_lock);
-        dev->xmit_lock_owner = smp_processor_id();
+        __netif_tx_lock(dev, smp_processor_id());
 }
 
 static inline void netif_tx_lock_bh(struct net_device *dev)
@@ -1070,6 +1334,18 @@ static inline void netif_tx_unlock_bh(struct net_device *dev)
         spin_unlock_bh(&dev->_xmit_lock);
 }
 
+#define HARD_TX_LOCK(dev, cpu) {                        \
+        if ((dev->features & NETIF_F_LLTX) == 0) {      \
+                __netif_tx_lock(dev, cpu);                      \
+        }                                               \
+}
+
+#define HARD_TX_UNLOCK(dev) {                           \
+        if ((dev->features & NETIF_F_LLTX) == 0) {      \
+                netif_tx_unlock(dev);                   \
+        }                                               \
+}
+
 static inline void netif_tx_disable(struct net_device *dev)
 {
         netif_tx_lock_bh(dev);
@@ -1105,7 +1381,7 @@ extern void		dev_set_allmulti(struct net_device *dev, int inc);
 extern void             netdev_state_change(struct net_device *dev);
 extern void             netdev_features_change(struct net_device *dev);
 /* Load a device via the kmod */
-extern void             dev_load(const char *name);
+extern void             dev_load(struct net *net, const char *name);
 extern void             dev_mcast_init(void);
 extern int              netdev_max_backlog;
 extern int              weight_p;
diff --git a/include/linux/netfilter/Kbuild b/include/linux/netfilter/Kbuild
index ab57cb7d7c61..f2eaea2234ec 100644
--- a/include/linux/netfilter/Kbuild
+++ b/include/linux/netfilter/Kbuild
@@ -40,5 +40,6 @@ unifdef-y += nf_conntrack_common.h
 unifdef-y += nf_conntrack_ftp.h
 unifdef-y += nf_conntrack_tcp.h
 unifdef-y += nfnetlink.h
+unifdef-y += nfnetlink_compat.h
 unifdef-y += x_tables.h
 unifdef-y += xt_physdev.h
diff --git a/include/linux/netfilter/nfnetlink.h b/include/linux/netfilter/nfnetlink.h
index 0f9311df1559..0d8424f76899 100644
--- a/include/linux/netfilter/nfnetlink.h
+++ b/include/linux/netfilter/nfnetlink.h
@@ -1,16 +1,7 @@
 #ifndef _NFNETLINK_H
 #define _NFNETLINK_H
 #include <linux/types.h>
-
-#ifndef __KERNEL__
-/* nfnetlink groups: Up to 32 maximum - backwards compatibility for userspace */
-#define NF_NETLINK_CONNTRACK_NEW                0x00000001
-#define NF_NETLINK_CONNTRACK_UPDATE             0x00000002
-#define NF_NETLINK_CONNTRACK_DESTROY            0x00000004
-#define NF_NETLINK_CONNTRACK_EXP_NEW            0x00000008
-#define NF_NETLINK_CONNTRACK_EXP_UPDATE         0x00000010
-#define NF_NETLINK_CONNTRACK_EXP_DESTROY        0x00000020
-#endif
+#include <linux/netfilter/nfnetlink_compat.h>
 
 enum nfnetlink_groups {
         NFNLGRP_NONE,
@@ -31,48 +22,6 @@ enum nfnetlink_groups {
 };
 #define NFNLGRP_MAX     (__NFNLGRP_MAX - 1)
 
-/* Generic structure for encapsulation optional netfilter information.
- * It is reminiscent of sockaddr, but with sa_family replaced
- * with attribute type. 
- * ! This should someday be put somewhere generic as now rtnetlink and
- * ! nfnetlink use the same attributes methods. - J. Schulist.
- */
-
-struct nfattr
-{
-        u_int16_t nfa_len;
-        u_int16_t nfa_type;     /* we use 15 bits for the type, and the highest
-                                 * bit to indicate whether the payload is nested */
-};
-
-/* FIXME: Apart from NFNL_NFA_NESTED shamelessly copy and pasted from
- * rtnetlink.h, it's time to put this in a generic file */
-
-#define NFNL_NFA_NEST   0x8000
-#define NFA_TYPE(attr)  ((attr)->nfa_type & 0x7fff)
-
-#define NFA_ALIGNTO     4
-#define NFA_ALIGN(len)  (((len) + NFA_ALIGNTO - 1) & ~(NFA_ALIGNTO - 1))
-#define NFA_OK(nfa,len) ((len) > 0 && (nfa)->nfa_len >= sizeof(struct nfattr) \
-        && (nfa)->nfa_len <= (len))
-#define NFA_NEXT(nfa,attrlen)   ((attrlen) -= NFA_ALIGN((nfa)->nfa_len), \
-        (struct nfattr *)(((char *)(nfa)) + NFA_ALIGN((nfa)->nfa_len)))
-#define NFA_LENGTH(len) (NFA_ALIGN(sizeof(struct nfattr)) + (len))
-#define NFA_SPACE(len)  NFA_ALIGN(NFA_LENGTH(len))
-#define NFA_DATA(nfa)   ((void *)(((char *)(nfa)) + NFA_LENGTH(0)))
-#define NFA_PAYLOAD(nfa) ((int)((nfa)->nfa_len) - NFA_LENGTH(0))
-#define NFA_NEST(skb, type) \
-({      struct nfattr *__start = (struct nfattr *)skb_tail_pointer(skb); \
-        NFA_PUT(skb, (NFNL_NFA_NEST | type), 0, NULL); \
-        __start;  })
-#define NFA_NEST_END(skb, start) \
-({      (start)->nfa_len = skb_tail_pointer(skb) - (unsigned char *)(start); \
-        (skb)->len; })
-#define NFA_NEST_CANCEL(skb, start) \
-({      if (start) \
-                skb_trim(skb, (unsigned char *) (start) - (skb)->data); \
-        -1; })
-
 /* General form of address family dependent message.
  */
 struct nfgenmsg {
@@ -83,10 +32,6 @@ struct nfgenmsg {
 
 #define NFNETLINK_V0    0
 
-#define NFM_NFA(n)      ((struct nfattr *)(((char *)(n)) \
-        + NLMSG_ALIGN(sizeof(struct nfgenmsg))))
-#define NFM_PAYLOAD(n)  NLMSG_PAYLOAD(n, sizeof(struct nfgenmsg))
-
 /* netfilter netlink message types are split in two pieces:
  * 8 bit subsystem, 8bit operation.
  */
@@ -107,49 +52,26 @@ struct nfgenmsg {
 
 #include <linux/netlink.h>
 #include <linux/capability.h>
+#include <net/netlink.h>
 
 struct nfnl_callback
 {
         int (*call)(struct sock *nl, struct sk_buff *skb, 
-                struct nlmsghdr *nlh, struct nfattr *cda[]);
-        u_int16_t attr_count;   /* number of nfattr's */
+                struct nlmsghdr *nlh, struct nlattr *cda[]);
+        const struct nla_policy *policy;        /* netlink attribute policy */
+        const u_int16_t attr_count;             /* number of nlattr's */
 };
 
 struct nfnetlink_subsystem
 {
         const char *name;
-        __u8 subsys_id;         /* nfnetlink subsystem ID */
-        __u8 cb_count;          /* number of callbacks */
-        struct nfnl_callback *cb; /* callback for individual types */
+        __u8 subsys_id;                 /* nfnetlink subsystem ID */
+        __u8 cb_count;                  /* number of callbacks */
+        const struct nfnl_callback *cb; /* callback for individual types */
 };
 
-extern void __nfa_fill(struct sk_buff *skb, int attrtype,
-        int attrlen, const void *data);
-#define NFA_PUT(skb, attrtype, attrlen, data) \
-({ if (skb_tailroom(skb) < (int)NFA_SPACE(attrlen)) goto nfattr_failure; \
-   __nfa_fill(skb, attrtype, attrlen, data); })
-
-extern int nfnetlink_subsys_register(struct nfnetlink_subsystem *n);
-extern int nfnetlink_subsys_unregister(struct nfnetlink_subsystem *n);
-
-extern void nfattr_parse(struct nfattr *tb[], int maxattr, 
-                        struct nfattr *nfa, int len);
-
-#define nfattr_parse_nested(tb, max, nfa) \
-        nfattr_parse((tb), (max), NFA_DATA((nfa)), NFA_PAYLOAD((nfa)))
-
-#define nfattr_bad_size(tb, max, cta_min)                               \
-({      int __i, __res = 0;                                             \
-        for (__i=0; __i<max; __i++) {                                   \
-                if (!cta_min[__i])                                      \
-                        continue;                                       \
-                if (tb[__i] && NFA_PAYLOAD(tb[__i]) < cta_min[__i]){    \
-                        __res = 1;                                      \
-                        break;                                          \
-                }                                                       \
-        }                                                               \
-        __res;                                                          \
-})
+extern int nfnetlink_subsys_register(const struct nfnetlink_subsystem *n);
+extern int nfnetlink_subsys_unregister(const struct nfnetlink_subsystem *n);
 
 extern int nfnetlink_has_listeners(unsigned int group);
 extern int nfnetlink_send(struct sk_buff *skb, u32 pid, unsigned group, 
diff --git a/include/linux/netfilter/nfnetlink_compat.h b/include/linux/netfilter/nfnetlink_compat.h
new file mode 100644
index 000000000000..02a42d875cf7
--- /dev/null
+++ b/include/linux/netfilter/nfnetlink_compat.h
@@ -0,0 +1,61 @@
+#ifndef _NFNETLINK_COMPAT_H
+#define _NFNETLINK_COMPAT_H
+#ifndef __KERNEL
+/* Old nfnetlink macros for userspace */
+
+/* nfnetlink groups: Up to 32 maximum */
+#define NF_NETLINK_CONNTRACK_NEW                0x00000001
+#define NF_NETLINK_CONNTRACK_UPDATE             0x00000002
+#define NF_NETLINK_CONNTRACK_DESTROY            0x00000004
+#define NF_NETLINK_CONNTRACK_EXP_NEW            0x00000008
+#define NF_NETLINK_CONNTRACK_EXP_UPDATE         0x00000010
+#define NF_NETLINK_CONNTRACK_EXP_DESTROY        0x00000020
+
+/* Generic structure for encapsulation optional netfilter information.
+ * It is reminiscent of sockaddr, but with sa_family replaced
+ * with attribute type.
+ * ! This should someday be put somewhere generic as now rtnetlink and
+ * ! nfnetlink use the same attributes methods. - J. Schulist.
+ */
+
+struct nfattr
+{
+        u_int16_t nfa_len;
+        u_int16_t nfa_type;     /* we use 15 bits for the type, and the highest
+                                 * bit to indicate whether the payload is nested */
+};
+
+/* FIXME: Apart from NFNL_NFA_NESTED shamelessly copy and pasted from
+ * rtnetlink.h, it's time to put this in a generic file */
+
+#define NFNL_NFA_NEST   0x8000
+#define NFA_TYPE(attr)  ((attr)->nfa_type & 0x7fff)
+
+#define NFA_ALIGNTO     4
+#define NFA_ALIGN(len)  (((len) + NFA_ALIGNTO - 1) & ~(NFA_ALIGNTO - 1))
+#define NFA_OK(nfa,len) ((len) > 0 && (nfa)->nfa_len >= sizeof(struct nfattr) \
+        && (nfa)->nfa_len <= (len))
+#define NFA_NEXT(nfa,attrlen)   ((attrlen) -= NFA_ALIGN((nfa)->nfa_len), \
+        (struct nfattr *)(((char *)(nfa)) + NFA_ALIGN((nfa)->nfa_len)))
+#define NFA_LENGTH(len) (NFA_ALIGN(sizeof(struct nfattr)) + (len))
+#define NFA_SPACE(len)  NFA_ALIGN(NFA_LENGTH(len))
+#define NFA_DATA(nfa)   ((void *)(((char *)(nfa)) + NFA_LENGTH(0)))
+#define NFA_PAYLOAD(nfa) ((int)((nfa)->nfa_len) - NFA_LENGTH(0))
+#define NFA_NEST(skb, type) \
+({      struct nfattr *__start = (struct nfattr *)skb_tail_pointer(skb); \
+        NFA_PUT(skb, (NFNL_NFA_NEST | type), 0, NULL); \
+        __start;  })
+#define NFA_NEST_END(skb, start) \
+({      (start)->nfa_len = skb_tail_pointer(skb) - (unsigned char *)(start); \
+        (skb)->len; })
+#define NFA_NEST_CANCEL(skb, start) \
+({      if (start) \
+                skb_trim(skb, (unsigned char *) (start) - (skb)->data); \
+        -1; })
+
+#define NFM_NFA(n)      ((struct nfattr *)(((char *)(n)) \
+        + NLMSG_ALIGN(sizeof(struct nfgenmsg))))
+#define NFM_PAYLOAD(n)  NLMSG_PAYLOAD(n, sizeof(struct nfgenmsg))
+
+#endif /* ! __KERNEL__ */
+#endif /* _NFNETLINK_COMPAT_H */
diff --git a/include/linux/netfilter/nfnetlink_conntrack.h b/include/linux/netfilter/nfnetlink_conntrack.h
index d7c35039721e..4affa3fe78e0 100644
--- a/include/linux/netfilter/nfnetlink_conntrack.h
+++ b/include/linux/netfilter/nfnetlink_conntrack.h
@@ -36,6 +36,7 @@ enum ctattr_type {
         CTA_USE,
         CTA_ID,
         CTA_NAT_DST,
+        CTA_TUPLE_MASTER,
         __CTA_MAX
 };
 #define CTA_MAX (__CTA_MAX - 1)
diff --git a/include/linux/netfilter/xt_time.h b/include/linux/netfilter/xt_time.h
new file mode 100644
index 000000000000..14b6df412c9f
--- /dev/null
+++ b/include/linux/netfilter/xt_time.h
@@ -0,0 +1,25 @@
+#ifndef _XT_TIME_H
+#define _XT_TIME_H 1
+
+struct xt_time_info {
+        u_int32_t date_start;
+        u_int32_t date_stop;
+        u_int32_t daytime_start;
+        u_int32_t daytime_stop;
+        u_int32_t monthdays_match;
+        u_int8_t weekdays_match;
+        u_int8_t flags;
+};
+
+enum {
+        /* Match against local time (instead of UTC) */
+        XT_TIME_LOCAL_TZ = 1 << 0,
+
+        /* Shortcuts */
+        XT_TIME_ALL_MONTHDAYS = 0xFFFFFFFE,
+        XT_TIME_ALL_WEEKDAYS  = 0xFE,
+        XT_TIME_MIN_DAYTIME   = 0,
+        XT_TIME_MAX_DAYTIME   = 24 * 60 * 60 - 1,
+};
+
+#endif /* _XT_TIME_H */
diff --git a/include/linux/netlink.h b/include/linux/netlink.h
index 83d8239f0cce..7c1f3b1d2ee5 100644
--- a/include/linux/netlink.h
+++ b/include/linux/netlink.h
@@ -27,6 +27,8 @@
 
 #define MAX_LINKS 32            
 
+struct net;
+
 struct sockaddr_nl
 {
         sa_family_t     nl_family;      /* AF_NETLINK   */
@@ -129,6 +131,20 @@ struct nlattr
         __u16           nla_type;
 };
 
+/*
+ * nla_type (16 bits)
+ * +---+---+-------------------------------+
+ * | N | O | Attribute Type                |
+ * +---+---+-------------------------------+
+ * N := Carries nested attributes
+ * O := Payload stored in network byte order
+ *
+ * Note: The N and O flag are mutually exclusive.
+ */
+#define NLA_F_NESTED            (1 << 15)
+#define NLA_F_NET_BYTEORDER     (1 << 14)
+#define NLA_TYPE_MASK           ~(NLA_F_NESTED | NLA_F_NET_BYTEORDER)
+
 #define NLA_ALIGNTO             4
 #define NLA_ALIGN(len)          (((len) + NLA_ALIGNTO - 1) & ~(NLA_ALIGNTO - 1))
 #define NLA_HDRLEN              ((int) NLA_ALIGN(sizeof(struct nlattr)))
@@ -157,8 +173,9 @@ struct netlink_skb_parms
 #define NETLINK_CREDS(skb)      (&NETLINK_CB((skb)).creds)
 
 
-extern struct sock *netlink_kernel_create(int unit, unsigned int groups,
-                                          void (*input)(struct sock *sk, int len),
+extern struct sock *netlink_kernel_create(struct net *net,
+                                          int unit,unsigned int groups,
+                                          void (*input)(struct sk_buff *skb),
                                           struct mutex *cb_mutex,
                                           struct module *module);
 extern int netlink_change_ngroups(struct sock *sk, unsigned int groups);
@@ -177,7 +194,7 @@ struct sock *netlink_getsockbyfilp(struct file *filp);
 int netlink_attachskb(struct sock *sk, struct sk_buff *skb, int nonblock,
                 long timeo, struct sock *ssk);
 void netlink_detachskb(struct sock *sk, struct sk_buff *skb);
-int netlink_sendskb(struct sock *sk, struct sk_buff *skb, int protocol);
+int netlink_sendskb(struct sock *sk, struct sk_buff *skb);
 
 /*
  *      skb should fit one page. This choice is good for headerless malloc.
@@ -206,6 +223,7 @@ struct netlink_callback
 
 struct netlink_notify
 {
+        struct net *net;
         int pid;
         int protocol;
 };
diff --git a/include/linux/netpoll.h b/include/linux/netpoll.h
index 29930b71a9aa..20250d963d72 100644
--- a/include/linux/netpoll.h
+++ b/include/linux/netpoll.h
@@ -25,8 +25,6 @@ struct netpoll {
 
 struct netpoll_info {
         atomic_t refcnt;
-        spinlock_t poll_lock;
-        int poll_owner;
         int rx_flags;
         spinlock_t rx_lock;
         struct netpoll *rx_np; /* netpoll that registered an rx_hook */
@@ -37,6 +35,7 @@ struct netpoll_info {
 
 void netpoll_poll(struct netpoll *np);
 void netpoll_send_udp(struct netpoll *np, const char *msg, int len);
+void netpoll_print_options(struct netpoll *np);
 int netpoll_parse_options(struct netpoll *np, char *opt);
 int netpoll_setup(struct netpoll *np);
 int netpoll_trap(void);
@@ -64,32 +63,61 @@ static inline int netpoll_rx(struct sk_buff *skb)
         return ret;
 }
 
-static inline void *netpoll_poll_lock(struct net_device *dev)
+static inline int netpoll_receive_skb(struct sk_buff *skb)
 {
+        if (!list_empty(&skb->dev->napi_list))
+                return netpoll_rx(skb);
+        return 0;
+}
+
+static inline void *netpoll_poll_lock(struct napi_struct *napi)
+{
+        struct net_device *dev = napi->dev;
+
         rcu_read_lock(); /* deal with race on ->npinfo */
-        if (dev->npinfo) {
-                spin_lock(&dev->npinfo->poll_lock);
-                dev->npinfo->poll_owner = smp_processor_id();
-                return dev->npinfo;
+        if (dev && dev->npinfo) {
+                spin_lock(&napi->poll_lock);
+                napi->poll_owner = smp_processor_id();
+                return napi;
         }
         return NULL;
 }
 
 static inline void netpoll_poll_unlock(void *have)
 {
-        struct netpoll_info *npi = have;
+        struct napi_struct *napi = have;
 
-        if (npi) {
-                npi->poll_owner = -1;
-                spin_unlock(&npi->poll_lock);
+        if (napi) {
+                napi->poll_owner = -1;
+                spin_unlock(&napi->poll_lock);
         }
         rcu_read_unlock();
 }
 
+static inline void netpoll_netdev_init(struct net_device *dev)
+{
+        INIT_LIST_HEAD(&dev->napi_list);
+}
+
 #else
-#define netpoll_rx(a) 0
-#define netpoll_poll_lock(a) NULL
-#define netpoll_poll_unlock(a)
+static inline int netpoll_rx(struct sk_buff *skb)
+{
+        return 0;
+}
+static inline int netpoll_receive_skb(struct sk_buff *skb)
+{
+        return 0;
+}
+static inline void *netpoll_poll_lock(struct napi_struct *napi)
+{
+        return NULL;
+}
+static inline void netpoll_poll_unlock(void *have)
+{
+}
+static inline void netpoll_netdev_init(struct net_device *dev)
+{
+}
 #endif
 
 #endif
diff --git a/include/linux/nl80211.h b/include/linux/nl80211.h
index 9a30ba2ca75e..538ee1dd3d0a 100644
--- a/include/linux/nl80211.h
+++ b/include/linux/nl80211.h
@@ -7,7 +7,97 @@
  */
 
 /**
+ * enum nl80211_commands - supported nl80211 commands
+ *
+ * @NL80211_CMD_UNSPEC: unspecified command to catch errors
+ *
+ * @NL80211_CMD_GET_WIPHY: request information about a wiphy or dump request
+ *      to get a list of all present wiphys.
+ * @NL80211_CMD_SET_WIPHY: set wiphy name, needs %NL80211_ATTR_WIPHY and
+ *      %NL80211_ATTR_WIPHY_NAME.
+ * @NL80211_CMD_NEW_WIPHY: Newly created wiphy, response to get request
+ *      or rename notification. Has attributes %NL80211_ATTR_WIPHY and
+ *      %NL80211_ATTR_WIPHY_NAME.
+ * @NL80211_CMD_DEL_WIPHY: Wiphy deleted. Has attributes
+ *      %NL80211_ATTR_WIPHY and %NL80211_ATTR_WIPHY_NAME.
+ *
+ * @NL80211_CMD_GET_INTERFACE: Request an interface's configuration;
+ *      either a dump request on a %NL80211_ATTR_WIPHY or a specific get
+ *      on an %NL80211_ATTR_IFINDEX is supported.
+ * @NL80211_CMD_SET_INTERFACE: Set type of a virtual interface, requires
+ *      %NL80211_ATTR_IFINDEX and %NL80211_ATTR_IFTYPE.
+ * @NL80211_CMD_NEW_INTERFACE: Newly created virtual interface or response
+ *      to %NL80211_CMD_GET_INTERFACE. Has %NL80211_ATTR_IFINDEX,
+ *      %NL80211_ATTR_WIPHY and %NL80211_ATTR_IFTYPE attributes. Can also
+ *      be sent from userspace to request creation of a new virtual interface,
+ *      then requires attributes %NL80211_ATTR_WIPHY, %NL80211_ATTR_IFTYPE and
+ *      %NL80211_ATTR_IFNAME.
+ * @NL80211_CMD_DEL_INTERFACE: Virtual interface was deleted, has attributes
+ *      %NL80211_ATTR_IFINDEX and %NL80211_ATTR_WIPHY. Can also be sent from
+ *      userspace to request deletion of a virtual interface, then requires
+ *      attribute %NL80211_ATTR_IFINDEX.
+ *
+ * @NL80211_CMD_MAX: highest used command number
+ * @__NL80211_CMD_AFTER_LAST: internal use
+ */
+enum nl80211_commands {
+/* don't change the order or add anything inbetween, this is ABI! */
+        NL80211_CMD_UNSPEC,
+
+        NL80211_CMD_GET_WIPHY,          /* can dump */
+        NL80211_CMD_SET_WIPHY,
+        NL80211_CMD_NEW_WIPHY,
+        NL80211_CMD_DEL_WIPHY,
+
+        NL80211_CMD_GET_INTERFACE,      /* can dump */
+        NL80211_CMD_SET_INTERFACE,
+        NL80211_CMD_NEW_INTERFACE,
+        NL80211_CMD_DEL_INTERFACE,
+
+        /* add commands here */
+
+        /* used to define NL80211_CMD_MAX below */
+        __NL80211_CMD_AFTER_LAST,
+        NL80211_CMD_MAX = __NL80211_CMD_AFTER_LAST - 1
+};
+
+
+/**
+ * enum nl80211_attrs - nl80211 netlink attributes
+ *
+ * @NL80211_ATTR_UNSPEC: unspecified attribute to catch errors
+ *
+ * @NL80211_ATTR_WIPHY: index of wiphy to operate on, cf.
+ *      /sys/class/ieee80211/<phyname>/index
+ * @NL80211_ATTR_WIPHY_NAME: wiphy name (used for renaming)
+ *
+ * @NL80211_ATTR_IFINDEX: network interface index of the device to operate on
+ * @NL80211_ATTR_IFNAME: network interface name
+ * @NL80211_ATTR_IFTYPE: type of virtual interface, see &enum nl80211_iftype
+ *
+ * @NL80211_ATTR_MAX: highest attribute number currently defined
+ * @__NL80211_ATTR_AFTER_LAST: internal use
+ */
+enum nl80211_attrs {
+/* don't change the order or add anything inbetween, this is ABI! */
+        NL80211_ATTR_UNSPEC,
+
+        NL80211_ATTR_WIPHY,
+        NL80211_ATTR_WIPHY_NAME,
+
+        NL80211_ATTR_IFINDEX,
+        NL80211_ATTR_IFNAME,
+        NL80211_ATTR_IFTYPE,
+
+        /* add attributes here, update the policy in nl80211.c */
+
+        __NL80211_ATTR_AFTER_LAST,
+        NL80211_ATTR_MAX = __NL80211_ATTR_AFTER_LAST - 1
+};
+
+/**
  * enum nl80211_iftype - (virtual) interface types
+ *
  * @NL80211_IFTYPE_UNSPECIFIED: unspecified type, driver decides
  * @NL80211_IFTYPE_ADHOC: independent BSS member
  * @NL80211_IFTYPE_STATION: managed BSS member
@@ -15,9 +105,10 @@
  * @NL80211_IFTYPE_AP_VLAN: VLAN interface for access points
  * @NL80211_IFTYPE_WDS: wireless distribution interface
  * @NL80211_IFTYPE_MONITOR: monitor interface receiving all frames
+ * @NL80211_IFTYPE_MAX: highest interface type number currently defined
  * @__NL80211_IFTYPE_AFTER_LAST: internal use
  *
- * These values are used with the NL80211_ATTR_IFTYPE
+ * These values are used with the %NL80211_ATTR_IFTYPE
  * to set the type of an interface.
  *
  */
@@ -31,8 +122,8 @@ enum nl80211_iftype {
         NL80211_IFTYPE_MONITOR,
 
         /* keep last */
-        __NL80211_IFTYPE_AFTER_LAST
+        __NL80211_IFTYPE_AFTER_LAST,
+        NL80211_IFTYPE_MAX = __NL80211_IFTYPE_AFTER_LAST - 1
 };
-#define NL80211_IFTYPE_MAX (__NL80211_IFTYPE_AFTER_LAST - 1)
 
 #endif /* __LINUX_NL80211_H */
diff --git a/include/linux/nsproxy.h b/include/linux/nsproxy.h
index ce06188b7a56..bec4485e3d76 100644
--- a/include/linux/nsproxy.h
+++ b/include/linux/nsproxy.h
@@ -29,6 +29,7 @@ struct nsproxy {
         struct mnt_namespace *mnt_ns;
         struct pid_namespace *pid_ns;
         struct user_namespace *user_ns;
+        struct net           *net_ns;
 };
 extern struct nsproxy init_nsproxy;
 
diff --git a/include/linux/pci_ids.h b/include/linux/pci_ids.h
index cfee06bca2d3..8acae4eeaa76 100644
--- a/include/linux/pci_ids.h
+++ b/include/linux/pci_ids.h
@@ -1848,6 +1848,8 @@
 #define PCI_VENDOR_ID_ABOCOM            0x13D1
 #define PCI_DEVICE_ID_ABOCOM_2BD1       0x2BD1
 
+#define PCI_VENDOR_ID_SUNDANCE          0x13f0
+
 #define PCI_VENDOR_ID_CMEDIA            0x13f6
 #define PCI_DEVICE_ID_CMEDIA_CM8338A    0x0100
 #define PCI_DEVICE_ID_CMEDIA_CM8338B    0x0101
@@ -1955,8 +1957,12 @@
 #define PCI_DEVICE_ID_TIGON3_5751M      0x167d
 #define PCI_DEVICE_ID_TIGON3_5751F      0x167e
 #define PCI_DEVICE_ID_TIGON3_5787F      0x167f
+#define PCI_DEVICE_ID_TIGON3_5761E      0x1680
+#define PCI_DEVICE_ID_TIGON3_5761       0x1681
+#define PCI_DEVICE_ID_TIGON3_5764       0x1684
 #define PCI_DEVICE_ID_TIGON3_5787M      0x1693
 #define PCI_DEVICE_ID_TIGON3_5782       0x1696
+#define PCI_DEVICE_ID_TIGON3_5784       0x1698
 #define PCI_DEVICE_ID_TIGON3_5786       0x169a
 #define PCI_DEVICE_ID_TIGON3_5787       0x169b
 #define PCI_DEVICE_ID_TIGON3_5788       0x169c
@@ -2130,6 +2136,11 @@
 #define PCI_VENDOR_ID_TEKRAM            0x1de1
 #define PCI_DEVICE_ID_TEKRAM_DC290      0xdc29
 
+#define PCI_VENDOR_ID_TEHUTI            0x1fc9
+#define PCI_DEVICE_ID_TEHUTI_3009       0x3009
+#define PCI_DEVICE_ID_TEHUTI_3010       0x3010
+#define PCI_DEVICE_ID_TEHUTI_3014       0x3014
+
 #define PCI_VENDOR_ID_HINT             0x3388
 #define PCI_DEVICE_ID_HINT_VXPROII_IDE 0x8013
 
diff --git a/include/linux/pci_regs.h b/include/linux/pci_regs.h
index 495d368390e0..423d592c55d5 100644
--- a/include/linux/pci_regs.h
+++ b/include/linux/pci_regs.h
@@ -316,7 +316,20 @@
 #define PCI_X_CMD               2       /* Modes & Features */
 #define  PCI_X_CMD_DPERR_E      0x0001  /* Data Parity Error Recovery Enable */
 #define  PCI_X_CMD_ERO          0x0002  /* Enable Relaxed Ordering */
+#define  PCI_X_CMD_READ_512     0x0000  /* 512 byte maximum read byte count */
+#define  PCI_X_CMD_READ_1K      0x0004  /* 1Kbyte maximum read byte count */
+#define  PCI_X_CMD_READ_2K      0x0008  /* 2Kbyte maximum read byte count */
+#define  PCI_X_CMD_READ_4K      0x000c  /* 4Kbyte maximum read byte count */
 #define  PCI_X_CMD_MAX_READ     0x000c  /* Max Memory Read Byte Count */
+                                /* Max # of outstanding split transactions */
+#define  PCI_X_CMD_SPLIT_1      0x0000  /* Max 1 */
+#define  PCI_X_CMD_SPLIT_2      0x0010  /* Max 2 */
+#define  PCI_X_CMD_SPLIT_3      0x0020  /* Max 3 */
+#define  PCI_X_CMD_SPLIT_4      0x0030  /* Max 4 */
+#define  PCI_X_CMD_SPLIT_8      0x0040  /* Max 8 */
+#define  PCI_X_CMD_SPLIT_12     0x0050  /* Max 12 */
+#define  PCI_X_CMD_SPLIT_16     0x0060  /* Max 16 */
+#define  PCI_X_CMD_SPLIT_32     0x0070  /* Max 32 */
 #define  PCI_X_CMD_MAX_SPLIT    0x0070  /* Max Outstanding Split Transactions */
 #define  PCI_X_CMD_VERSION(x)   (((x) >> 12) & 3) /* Version */
 #define PCI_X_STATUS            4       /* PCI-X capabilities */
diff --git a/include/linux/phy.h b/include/linux/phy.h
index 2a659789f9ca..f0742b6aaa64 100644
--- a/include/linux/phy.h
+++ b/include/linux/phy.h
@@ -25,6 +25,8 @@
 #include <linux/timer.h>
 #include <linux/workqueue.h>
 
+#include <asm/atomic.h>
+
 #define PHY_BASIC_FEATURES      (SUPPORTED_10baseT_Half | \
                                  SUPPORTED_10baseT_Full | \
                                  SUPPORTED_100baseT_Half | \
@@ -281,6 +283,7 @@ struct phy_device {
         /* Interrupt and Polling infrastructure */
         struct work_struct phy_queue;
         struct timer_list phy_timer;
+        atomic_t irq_disable;
 
         spinlock_t lock;
 
diff --git a/include/linux/phy_fixed.h b/include/linux/phy_fixed.h
new file mode 100644
index 000000000000..04ba70d49fb8
--- /dev/null
+++ b/include/linux/phy_fixed.h
@@ -0,0 +1,38 @@
+#ifndef __PHY_FIXED_H
+#define __PHY_FIXED_H
+
+#define MII_REGS_NUM    29
+
+/* max number of virtual phy stuff */
+#define MAX_PHY_AMNT    10
+/*
+    The idea is to emulate normal phy behavior by responding with
+    pre-defined values to mii BMCR read, so that read_status hook could
+    take all the needed info.
+*/
+
+struct fixed_phy_status {
+        u8 link;
+        u16 speed;
+        u8 duplex;
+};
+
+/*-----------------------------------------------------------------------------
+ *  Private information hoder for mii_bus
+ *-----------------------------------------------------------------------------*/
+struct fixed_info {
+        u16 *regs;
+        u8 regs_num;
+        struct fixed_phy_status phy_status;
+        struct phy_device *phydev;      /* pointer to the container */
+        /* link & speed cb */
+        int (*link_update) (struct net_device *, struct fixed_phy_status *);
+
+};
+
+
+int fixed_mdio_set_link_update(struct phy_device *,
+       int (*link_update) (struct net_device *, struct fixed_phy_status *));
+struct fixed_info *fixed_mdio_get_phydev (int phydev_ind);
+
+#endif /* __PHY_FIXED_H */
diff --git a/include/linux/pkt_sched.h b/include/linux/pkt_sched.h
index 268c51599eb8..919af93b7059 100644
--- a/include/linux/pkt_sched.h
+++ b/include/linux/pkt_sched.h
@@ -77,8 +77,8 @@ struct tc_ratespec
 {
         unsigned char   cell_log;
         unsigned char   __reserved;
-        unsigned short  feature;
-        short           addend;
+        unsigned short  overhead;
+        short           cell_align;
         unsigned short  mpu;
         __u32           rate;
 };
diff --git a/include/linux/proc_fs.h b/include/linux/proc_fs.h
index cd13a78c5db8..20741f668f7b 100644
--- a/include/linux/proc_fs.h
+++ b/include/linux/proc_fs.h
@@ -7,6 +7,7 @@
 #include <linux/magic.h>
 #include <asm/atomic.h>
 
+struct net;
 struct completion;
 
 /*
@@ -97,8 +98,6 @@ struct vmcore {
 
 extern struct proc_dir_entry proc_root;
 extern struct proc_dir_entry *proc_root_fs;
-extern struct proc_dir_entry *proc_net;
-extern struct proc_dir_entry *proc_net_stat;
 extern struct proc_dir_entry *proc_bus;
 extern struct proc_dir_entry *proc_root_driver;
 extern struct proc_dir_entry *proc_root_kcore;
@@ -192,36 +191,21 @@ static inline struct proc_dir_entry *create_proc_info_entry(const char *name,
         if (res) res->get_info=get_info;
         return res;
 }
- 
-static inline struct proc_dir_entry *proc_net_create(const char *name,
-        mode_t mode, get_info_t *get_info)
-{
-        return create_proc_info_entry(name,mode,proc_net,get_info);
-}
 
-static inline struct proc_dir_entry *proc_net_fops_create(const char *name,
-        mode_t mode, const struct file_operations *fops)
-{
-        struct proc_dir_entry *res = create_proc_entry(name, mode, proc_net);
-        if (res)
-                res->proc_fops = fops;
-        return res;
-}
-
-static inline void proc_net_remove(const char *name)
-{
-        remove_proc_entry(name,proc_net);
-}
+extern struct proc_dir_entry *proc_net_create(struct net *net,
+        const char *name, mode_t mode, get_info_t *get_info);
+extern struct proc_dir_entry *proc_net_fops_create(struct net *net,
+        const char *name, mode_t mode, const struct file_operations *fops);
+extern void proc_net_remove(struct net *net, const char *name);
 
 #else
 
 #define proc_root_driver NULL
-#define proc_net NULL
 #define proc_bus NULL
 
-#define proc_net_fops_create(name, mode, fops)  ({ (void)(mode), NULL; })
-#define proc_net_create(name, mode, info)       ({ (void)(mode), NULL; })
-static inline void proc_net_remove(const char *name) {}
+#define proc_net_fops_create(net, name, mode, fops)  ({ (void)(mode), NULL; })
+#define proc_net_create(net, name, mode, info)  ({ (void)(mode), NULL; })
+static inline void proc_net_remove(struct net *net, const char *name) {}
 
 static inline void proc_flush_task(struct task_struct *task) { }
 
@@ -281,6 +265,13 @@ static inline struct proc_dir_entry *PDE(const struct inode *inode)
         return PROC_I(inode)->pde;
 }
 
+static inline struct net *PDE_NET(struct proc_dir_entry *pde)
+{
+        return pde->parent->data;
+}
+
+struct net *get_proc_net(const struct inode *inode);
+
 struct proc_maps_private {
         struct pid *pid;
         struct task_struct *task;
diff --git a/include/linux/rfkill.h b/include/linux/rfkill.h
index a8a6ea809da0..0ce5e0b52dbd 100644
--- a/include/linux/rfkill.h
+++ b/include/linux/rfkill.h
@@ -2,7 +2,7 @@
 #define __RFKILL_H
 
 /*
- * Copyright (C) 2006 Ivo van Doorn
+ * Copyright (C) 2006 - 2007 Ivo van Doorn
  * Copyright (C) 2007 Dmitry Torokhov
  *
  * This program is free software; you can redistribute it and/or modify
@@ -26,18 +26,19 @@
 #include <linux/list.h>
 #include <linux/mutex.h>
 #include <linux/device.h>
+#include <linux/leds.h>
 
 /**
  * enum rfkill_type - type of rfkill switch.
- * RFKILL_TYPE_WLAN: switch is no a Wireless network devices.
- * RFKILL_TYPE_BlUETOOTH: switch is on a bluetooth device.
- * RFKILL_TYPE_IRDA: switch is on an infrared devices.
+ * RFKILL_TYPE_WLAN: switch is on a 802.11 wireless network device.
+ * RFKILL_TYPE_BLUETOOTH: switch is on a bluetooth device.
+ * RFKILL_TYPE_UWB: switch is on a ultra wideband device.
  */
 enum rfkill_type {
-        RFKILL_TYPE_WLAN = 0,
-        RFKILL_TYPE_BLUETOOTH = 1,
-        RFKILL_TYPE_IRDA = 2,
-        RFKILL_TYPE_MAX = 3,
+        RFKILL_TYPE_WLAN ,
+        RFKILL_TYPE_BLUETOOTH,
+        RFKILL_TYPE_UWB,
+        RFKILL_TYPE_MAX,
 };
 
 enum rfkill_state {
@@ -51,11 +52,14 @@ enum rfkill_state {
  * @type: Radio type which the button controls, the value stored
  *      here should be a value from enum rfkill_type.
  * @state: State of the switch (on/off).
+ * @user_claim_unsupported: Whether the hardware supports exclusive
+ *      RF-kill control by userspace. Set this before registering.
  * @user_claim: Set when the switch is controlled exlusively by userspace.
  * @mutex: Guards switch state transitions
  * @data: Pointer to the RF button drivers private data which will be
  *      passed along when toggling radio state.
  * @toggle_radio(): Mandatory handler to control state of the radio.
+ * @led_trigger: A LED trigger for this button's LED.
  * @dev: Device structure integrating the switch into device tree.
  * @node: Used to place switch into list of all switches known to the
  *      the system.
@@ -67,6 +71,7 @@ struct rfkill {
         enum rfkill_type type;
 
         enum rfkill_state state;
+        bool user_claim_unsupported;
         bool user_claim;
 
         struct mutex mutex;
@@ -74,6 +79,10 @@ struct rfkill {
         void *data;
         int (*toggle_radio)(void *data, enum rfkill_state state);
 
+#ifdef CONFIG_RFKILL_LEDS
+        struct led_trigger led_trigger;
+#endif
+
         struct device dev;
         struct list_head node;
 };
@@ -84,6 +93,19 @@ void rfkill_free(struct rfkill *rfkill);
 int rfkill_register(struct rfkill *rfkill);
 void rfkill_unregister(struct rfkill *rfkill);
 
-void rfkill_switch_all(enum rfkill_type type, enum rfkill_state state);
+/**
+ * rfkill_get_led_name - Get the LED trigger name for the button's LED.
+ * This function might return a NULL pointer if registering of the
+ * LED trigger failed.
+ * Use this as "default_trigger" for the LED.
+ */
+static inline char *rfkill_get_led_name(struct rfkill *rfkill)
+{
+#ifdef CONFIG_RFKILL_LEDS
+        return (char *)(rfkill->led_trigger.name);
+#else
+        return NULL;
+#endif
+}
 
 #endif /* RFKILL_H */
diff --git a/include/linux/rtnetlink.h b/include/linux/rtnetlink.h
index dff3192374f8..5bf618241ab9 100644
--- a/include/linux/rtnetlink.h
+++ b/include/linux/rtnetlink.h
@@ -97,6 +97,9 @@ enum {
         RTM_SETNEIGHTBL,
 #define RTM_SETNEIGHTBL RTM_SETNEIGHTBL
 
+        RTM_NEWNDUSEROPT = 68,
+#define RTM_NEWNDUSEROPT RTM_NEWNDUSEROPT
+
         __RTM_MAX,
 #define RTM_MAX         (((__RTM_MAX + 3) & ~3) - 1)
 };
@@ -479,6 +482,30 @@ enum
 #define TCA_RTA(r)  ((struct rtattr*)(((char*)(r)) + NLMSG_ALIGN(sizeof(struct tcmsg))))
 #define TCA_PAYLOAD(n) NLMSG_PAYLOAD(n,sizeof(struct tcmsg))
 
+/********************************************************************
+ *              Neighbor Discovery userland options
+ ****/
+
+struct nduseroptmsg
+{
+        unsigned char   nduseropt_family;
+        unsigned char   nduseropt_pad1;
+        unsigned short  nduseropt_opts_len;     /* Total length of options */
+        __u8            nduseropt_icmp_type;
+        __u8            nduseropt_icmp_code;
+        unsigned short  nduseropt_pad2;
+        /* Followed by one or more ND options */
+};
+
+enum
+{
+        NDUSEROPT_UNSPEC,
+        NDUSEROPT_SRCADDR,
+        __NDUSEROPT_MAX
+};
+
+#define NDUSEROPT_MAX   (__NDUSEROPT_MAX - 1)
+
 #ifndef __KERNEL__
 /* RTnetlink multicast groups - backwards compatibility for userspace */
 #define RTMGRP_LINK             1
@@ -542,6 +569,8 @@ enum rtnetlink_groups {
 #define RTNLGRP_IPV6_PREFIX     RTNLGRP_IPV6_PREFIX
         RTNLGRP_IPV6_RULE,
 #define RTNLGRP_IPV6_RULE       RTNLGRP_IPV6_RULE
+        RTNLGRP_ND_USEROPT,
+#define RTNLGRP_ND_USEROPT      RTNLGRP_ND_USEROPT
         __RTNLGRP_MAX
 };
 #define RTNLGRP_MAX     (__RTNLGRP_MAX - 1)
diff --git a/include/linux/sched.h b/include/linux/sched.h
index 313c6b6e774f..833f7dc2b8de 100644
--- a/include/linux/sched.h
+++ b/include/linux/sched.h
@@ -27,6 +27,7 @@
 #define CLONE_NEWUTS            0x04000000      /* New utsname group? */
 #define CLONE_NEWIPC            0x08000000      /* New ipcs */
 #define CLONE_NEWUSER           0x10000000      /* New user namespace */
+#define CLONE_NEWNET            0x40000000      /* New network namespace */
 
 /*
  * Scheduling policies
diff --git a/include/linux/sctp.h b/include/linux/sctp.h
index d70df61a029f..5eb38cc0e5a4 100644
--- a/include/linux/sctp.h
+++ b/include/linux/sctp.h
@@ -102,6 +102,9 @@ typedef enum {
         SCTP_CID_ECN_CWR                = 13,
         SCTP_CID_SHUTDOWN_COMPLETE      = 14,
 
+        /* AUTH Extension Section 4.1 */
+        SCTP_CID_AUTH                   = 0x0F,
+
         /* PR-SCTP Sec 3.2 */
         SCTP_CID_FWD_TSN                = 0xC0,
 
@@ -180,6 +183,14 @@ typedef enum {
         SCTP_PARAM_SUPPORTED_ADDRESS_TYPES      = __constant_htons(12),
         SCTP_PARAM_ECN_CAPABLE                  = __constant_htons(0x8000),
 
+        /* AUTH Extension Section 3 */
+        SCTP_PARAM_RANDOM                       = __constant_htons(0x8002),
+        SCTP_PARAM_CHUNKS                       = __constant_htons(0x8003),
+        SCTP_PARAM_HMAC_ALGO                    = __constant_htons(0x8004),
+
+        /* Add-IP: Supported Extensions, Section 4.2 */
+        SCTP_PARAM_SUPPORTED_EXT        = __constant_htons(0x8008),
+
         /* PR-SCTP Sec 3.1 */
         SCTP_PARAM_FWD_TSN_SUPPORT      = __constant_htons(0xc000),
 
@@ -296,6 +307,30 @@ typedef struct sctp_adaptation_ind_param {
         __be32 adaptation_ind;
 } __attribute__((packed)) sctp_adaptation_ind_param_t;
 
+/* ADDIP Section 4.2.7 Supported Extensions Parameter */
+typedef struct sctp_supported_ext_param {
+        struct sctp_paramhdr param_hdr;
+        __u8 chunks[0];
+} __attribute__((packed)) sctp_supported_ext_param_t;
+
+/* AUTH Section 3.1 Random */
+typedef struct sctp_random_param {
+        sctp_paramhdr_t param_hdr;
+        __u8 random_val[0];
+} __attribute__((packed)) sctp_random_param_t;
+
+/* AUTH Section 3.2 Chunk List */
+typedef struct sctp_chunks_param {
+        sctp_paramhdr_t param_hdr;
+        __u8 chunks[0];
+} __attribute__((packed)) sctp_chunks_param_t;
+
+/* AUTH Section 3.3 HMAC Algorithm */
+typedef struct sctp_hmac_algo_param {
+        sctp_paramhdr_t param_hdr;
+        __be16 hmac_ids[0];
+} __attribute__((packed)) sctp_hmac_algo_param_t;
+
 /* RFC 2960.  Section 3.3.3 Initiation Acknowledgement (INIT ACK) (2):
  *   The INIT ACK chunk is used to acknowledge the initiation of an SCTP
  *   association.
@@ -462,7 +497,19 @@ typedef enum {
         SCTP_ERROR_RSRC_LOW     = __constant_htons(0x0101),
         SCTP_ERROR_DEL_SRC_IP   = __constant_htons(0x0102),
         SCTP_ERROR_ASCONF_ACK   = __constant_htons(0x0103),
-        SCTP_ERROR_REQ_REFUSED  = __constant_htons(0x0104)
+        SCTP_ERROR_REQ_REFUSED  = __constant_htons(0x0104),
+
+        /* AUTH Section 4.  New Error Cause
+         *
+         * This section defines a new error cause that will be sent if an AUTH
+         * chunk is received with an unsupported HMAC identifier.
+         * illustrates the new error cause.
+         *
+         * Cause Code      Error Cause Name
+         * --------------------------------------------------------------
+         * 0x0105          Unsupported HMAC Identifier
+         */
+         SCTP_ERROR_UNSUP_HMAC  = __constant_htons(0x0105)
 } sctp_error_t;
 
 
@@ -600,4 +647,64 @@ typedef struct sctp_addip_chunk {
         sctp_addiphdr_t addip_hdr;
 } __attribute__((packed)) sctp_addip_chunk_t;
 
+/* AUTH
+ * Section 4.1  Authentication Chunk (AUTH)
+ *
+ *   This chunk is used to hold the result of the HMAC calculation.
+ *
+ *    0                   1                   2                   3
+ *    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
+ *   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+ *   | Type = 0x0F   |   Flags=0     |             Length            |
+ *   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+ *   |     Shared Key Identifier     |   HMAC Identifier             |
+ *   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+ *   |                                                               |
+ *   \                             HMAC                              /
+ *   /                                                               \
+ *   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+ *
+ *   Type: 1 byte (unsigned integer)
+ *      This value MUST be set to 0x0F for  all AUTH-chunks.
+ *
+ *   Flags: 1 byte (unsigned integer)
+ *      Set to zero on transmit and ignored on receipt.
+ *
+ *   Length: 2 bytes (unsigned integer)
+ *      This value holds the length of the HMAC in bytes plus 8.
+ *
+ *  Shared Key Identifier: 2 bytes (unsigned integer)
+ *      This value describes which endpoint pair shared key is used.
+ *
+ *   HMAC Identifier: 2 bytes (unsigned integer)
+ *      This value describes which message digest is being used.  Table 2
+ *      shows the currently defined values.
+ *
+ *    The following Table 2 shows the currently defined values for HMAC
+ *       identifiers.
+ *
+ *       +-----------------+--------------------------+
+ *       | HMAC Identifier | Message Digest Algorithm |
+ *       +-----------------+--------------------------+
+ *       | 0               | Reserved                 |
+ *       | 1               | SHA-1 defined in [8]     |
+ *       | 2               | Reserved                 |
+ *       | 3               | SHA-256 defined in [8]   |
+ *       +-----------------+--------------------------+
+ *
+ *
+ *   HMAC: n bytes (unsigned integer) This hold the result of the HMAC
+ *      calculation.
+ */
+typedef struct sctp_authhdr {
+        __be16 shkey_id;
+        __be16 hmac_id;
+        __u8   hmac[0];
+} __attribute__((packed)) sctp_authhdr_t;
+
+typedef struct sctp_auth_chunk {
+        sctp_chunkhdr_t chunk_hdr;
+        sctp_authhdr_t auth_hdr;
+} __attribute__((packed)) sctp_auth_chunk_t;
+
 #endif /* __LINUX_SCTP_H__ */
diff --git a/include/linux/seq_file.h b/include/linux/seq_file.h
index 83783ab0f552..8bf1e05115b4 100644
--- a/include/linux/seq_file.h
+++ b/include/linux/seq_file.h
@@ -46,6 +46,8 @@ int seq_path(struct seq_file *, struct vfsmount *, struct dentry *, char *);
 
 int single_open(struct file *, int (*)(struct seq_file *, void *), void *);
 int single_release(struct inode *, struct file *);
+void *__seq_open_private(struct file *, const struct seq_operations *, int);
+int seq_open_private(struct file *, const struct seq_operations *, int);
 int seq_release_private(struct inode *, struct file *);
 
 #define SEQ_START_TOKEN ((void *)1)
diff --git a/include/linux/snmp.h b/include/linux/snmp.h
index 802b3a38b041..89f0c2b5f405 100644
--- a/include/linux/snmp.h
+++ b/include/linux/snmp.h
@@ -82,6 +82,8 @@ enum
         __ICMP_MIB_MAX
 };
 
+#define __ICMPMSG_MIB_MAX 512   /* Out+In for all 8-bit ICMP types */
+
 /* icmp6 mib definitions */
 /*
  * RFC 2466:  ICMPv6-MIB
@@ -91,35 +93,12 @@ enum
         ICMP6_MIB_NUM = 0,
         ICMP6_MIB_INMSGS,                       /* InMsgs */
         ICMP6_MIB_INERRORS,                     /* InErrors */
-        ICMP6_MIB_INDESTUNREACHS,               /* InDestUnreachs */
-        ICMP6_MIB_INPKTTOOBIGS,                 /* InPktTooBigs */
-        ICMP6_MIB_INTIMEEXCDS,                  /* InTimeExcds */
-        ICMP6_MIB_INPARMPROBLEMS,               /* InParmProblems */
-        ICMP6_MIB_INECHOS,                      /* InEchos */
-        ICMP6_MIB_INECHOREPLIES,                /* InEchoReplies */
-        ICMP6_MIB_INGROUPMEMBQUERIES,           /* InGroupMembQueries */
-        ICMP6_MIB_INGROUPMEMBRESPONSES,         /* InGroupMembResponses */
-        ICMP6_MIB_INGROUPMEMBREDUCTIONS,        /* InGroupMembReductions */
-        ICMP6_MIB_INROUTERSOLICITS,             /* InRouterSolicits */
-        ICMP6_MIB_INROUTERADVERTISEMENTS,       /* InRouterAdvertisements */
-        ICMP6_MIB_INNEIGHBORSOLICITS,           /* InNeighborSolicits */
-        ICMP6_MIB_INNEIGHBORADVERTISEMENTS,     /* InNeighborAdvertisements */
-        ICMP6_MIB_INREDIRECTS,                  /* InRedirects */
         ICMP6_MIB_OUTMSGS,                      /* OutMsgs */
-        ICMP6_MIB_OUTDESTUNREACHS,              /* OutDestUnreachs */
-        ICMP6_MIB_OUTPKTTOOBIGS,                /* OutPktTooBigs */
-        ICMP6_MIB_OUTTIMEEXCDS,                 /* OutTimeExcds */
-        ICMP6_MIB_OUTPARMPROBLEMS,              /* OutParmProblems */
-        ICMP6_MIB_OUTECHOREPLIES,               /* OutEchoReplies */
-        ICMP6_MIB_OUTROUTERSOLICITS,            /* OutRouterSolicits */
-        ICMP6_MIB_OUTNEIGHBORSOLICITS,          /* OutNeighborSolicits */
-        ICMP6_MIB_OUTNEIGHBORADVERTISEMENTS,    /* OutNeighborAdvertisements */
-        ICMP6_MIB_OUTREDIRECTS,                 /* OutRedirects */
-        ICMP6_MIB_OUTGROUPMEMBRESPONSES,        /* OutGroupMembResponses */
-        ICMP6_MIB_OUTGROUPMEMBREDUCTIONS,       /* OutGroupMembReductions */
         __ICMP6_MIB_MAX
 };
 
+#define __ICMP6MSG_MIB_MAX 512 /* Out+In for all 8-bit ICMPv6 types */
+
 /* tcp mib definitions */
 /*
  * RFC 1213:  MIB-II TCP group
@@ -231,6 +210,10 @@ enum
         LINUX_MIB_TCPABORTONLINGER,             /* TCPAbortOnLinger */
         LINUX_MIB_TCPABORTFAILED,               /* TCPAbortFailed */
         LINUX_MIB_TCPMEMORYPRESSURES,           /* TCPMemoryPressures */
+        LINUX_MIB_TCPSACKDISCARD,               /* TCPSACKDiscard */
+        LINUX_MIB_TCPDSACKIGNOREDOLD,           /* TCPSACKIgnoredOld */
+        LINUX_MIB_TCPDSACKIGNOREDNOUNDO,        /* TCPSACKIgnoredNoUndo */
+        LINUX_MIB_TCPSPURIOUSRTOS,              /* TCPSpuriousRTOs */
         __LINUX_MIB_MAX
 };
 
diff --git a/include/linux/ssb/ssb.h b/include/linux/ssb/ssb.h
new file mode 100644
index 000000000000..2b5c312c4960
--- /dev/null
+++ b/include/linux/ssb/ssb.h
@@ -0,0 +1,424 @@
+#ifndef LINUX_SSB_H_
+#define LINUX_SSB_H_
+
+#include <linux/device.h>
+#include <linux/list.h>
+#include <linux/types.h>
+#include <linux/spinlock.h>
+#include <linux/pci.h>
+#include <linux/mod_devicetable.h>
+
+#include <linux/ssb/ssb_regs.h>
+
+
+struct pcmcia_device;
+struct ssb_bus;
+struct ssb_driver;
+
+
+struct ssb_sprom_r1 {
+        u16 pci_spid;           /* Subsystem Product ID for PCI */
+        u16 pci_svid;           /* Subsystem Vendor ID for PCI */
+        u16 pci_pid;            /* Product ID for PCI */
+        u8 il0mac[6];           /* MAC address for 802.11b/g */
+        u8 et0mac[6];           /* MAC address for Ethernet */
+        u8 et1mac[6];           /* MAC address for 802.11a */
+        u8 et0phyaddr:5;        /* MII address for enet0 */
+        u8 et1phyaddr:5;        /* MII address for enet1 */
+        u8 et0mdcport:1;        /* MDIO for enet0 */
+        u8 et1mdcport:1;        /* MDIO for enet1 */
+        u8 board_rev;           /* Board revision */
+        u8 country_code:4;      /* Country Code */
+        u8 antenna_a:2;         /* Antenna 0/1 available for A-PHY */
+        u8 antenna_bg:2;        /* Antenna 0/1 available for B-PHY and G-PHY */
+        u16 pa0b0;
+        u16 pa0b1;
+        u16 pa0b2;
+        u16 pa1b0;
+        u16 pa1b1;
+        u16 pa1b2;
+        u8 gpio0;               /* GPIO pin 0 */
+        u8 gpio1;               /* GPIO pin 1 */
+        u8 gpio2;               /* GPIO pin 2 */
+        u8 gpio3;               /* GPIO pin 3 */
+        u16 maxpwr_a;           /* A-PHY Power Amplifier Max Power (in dBm Q5.2) */
+        u16 maxpwr_bg;          /* B/G-PHY Power Amplifier Max Power (in dBm Q5.2) */
+        u8 itssi_a;             /* Idle TSSI Target for A-PHY */
+        u8 itssi_bg;            /* Idle TSSI Target for B/G-PHY */
+        u16 boardflags_lo;      /* Boardflags (low 16 bits) */
+        u8 antenna_gain_a;      /* A-PHY Antenna gain (in dBm Q5.2) */
+        u8 antenna_gain_bg;     /* B/G-PHY Antenna gain (in dBm Q5.2) */
+        u8 oem[8];              /* OEM string (rev 1 only) */
+};
+
+struct ssb_sprom_r2 {
+        u16 boardflags_hi;      /* Boardflags (high 16 bits) */
+        u8 maxpwr_a_lo;         /* A-PHY Max Power Low */
+        u8 maxpwr_a_hi;         /* A-PHY Max Power High */
+        u16 pa1lob0;            /* A-PHY PA Low Settings */
+        u16 pa1lob1;            /* A-PHY PA Low Settings */
+        u16 pa1lob2;            /* A-PHY PA Low Settings */
+        u16 pa1hib0;            /* A-PHY PA High Settings */
+        u16 pa1hib1;            /* A-PHY PA High Settings */
+        u16 pa1hib2;            /* A-PHY PA High Settings */
+        u8 ofdm_pwr_off;        /* OFDM Power Offset from CCK Level */
+        u8 country_str[2];      /* Two char Country Code */
+};
+
+struct ssb_sprom_r3 {
+        u32 ofdmapo;            /* A-PHY OFDM Mid Power Offset */
+        u32 ofdmalpo;           /* A-PHY OFDM Low Power Offset */
+        u32 ofdmahpo;           /* A-PHY OFDM High Power Offset */
+        u8 gpioldc_on_cnt;      /* GPIO LED Powersave Duty Cycle ON count */
+        u8 gpioldc_off_cnt;     /* GPIO LED Powersave Duty Cycle OFF count */
+        u8 cckpo_1M:4;          /* CCK Power Offset for Rate 1M */
+        u8 cckpo_2M:4;          /* CCK Power Offset for Rate 2M */
+        u8 cckpo_55M:4;         /* CCK Power Offset for Rate 5.5M */
+        u8 cckpo_11M:4;         /* CCK Power Offset for Rate 11M */
+        u32 ofdmgpo;            /* G-PHY OFDM Power Offset */
+};
+
+struct ssb_sprom_r4 {
+        /* TODO */
+};
+
+struct ssb_sprom {
+        u8 revision;
+        u8 crc;
+        /* The valid r# fields are selected by the "revision".
+         * Revision 3 and lower inherit from lower revisions.
+         */
+        union {
+                struct {
+                        struct ssb_sprom_r1 r1;
+                        struct ssb_sprom_r2 r2;
+                        struct ssb_sprom_r3 r3;
+                };
+                struct ssb_sprom_r4 r4;
+        };
+};
+
+/* Information about the PCB the circuitry is soldered on. */
+struct ssb_boardinfo {
+        u16 vendor;
+        u16 type;
+        u16 rev;
+};
+
+
+struct ssb_device;
+/* Lowlevel read/write operations on the device MMIO.
+ * Internal, don't use that outside of ssb. */
+struct ssb_bus_ops {
+        u16 (*read16)(struct ssb_device *dev, u16 offset);
+        u32 (*read32)(struct ssb_device *dev, u16 offset);
+        void (*write16)(struct ssb_device *dev, u16 offset, u16 value);
+        void (*write32)(struct ssb_device *dev, u16 offset, u32 value);
+};
+
+
+/* Core-ID values. */
+#define SSB_DEV_CHIPCOMMON      0x800
+#define SSB_DEV_ILINE20         0x801
+#define SSB_DEV_SDRAM           0x803
+#define SSB_DEV_PCI             0x804
+#define SSB_DEV_MIPS            0x805
+#define SSB_DEV_ETHERNET        0x806
+#define SSB_DEV_V90             0x807
+#define SSB_DEV_USB11_HOSTDEV   0x808
+#define SSB_DEV_ADSL            0x809
+#define SSB_DEV_ILINE100        0x80A
+#define SSB_DEV_IPSEC           0x80B
+#define SSB_DEV_PCMCIA          0x80D
+#define SSB_DEV_INTERNAL_MEM    0x80E
+#define SSB_DEV_MEMC_SDRAM      0x80F
+#define SSB_DEV_EXTIF           0x811
+#define SSB_DEV_80211           0x812
+#define SSB_DEV_MIPS_3302       0x816
+#define SSB_DEV_USB11_HOST      0x817
+#define SSB_DEV_USB11_DEV       0x818
+#define SSB_DEV_USB20_HOST      0x819
+#define SSB_DEV_USB20_DEV       0x81A
+#define SSB_DEV_SDIO_HOST       0x81B
+#define SSB_DEV_ROBOSWITCH      0x81C
+#define SSB_DEV_PARA_ATA        0x81D
+#define SSB_DEV_SATA_XORDMA     0x81E
+#define SSB_DEV_ETHERNET_GBIT   0x81F
+#define SSB_DEV_PCIE            0x820
+#define SSB_DEV_MIMO_PHY        0x821
+#define SSB_DEV_SRAM_CTRLR      0x822
+#define SSB_DEV_MINI_MACPHY     0x823
+#define SSB_DEV_ARM_1176        0x824
+#define SSB_DEV_ARM_7TDMI       0x825
+
+/* Vendor-ID values */
+#define SSB_VENDOR_BROADCOM     0x4243
+
+/* Some kernel subsystems poke with dev->drvdata, so we must use the
+ * following ugly workaround to get from struct device to struct ssb_device */
+struct __ssb_dev_wrapper {
+        struct device dev;
+        struct ssb_device *sdev;
+};
+
+struct ssb_device {
+        /* Having a copy of the ops pointer in each dev struct
+         * is an optimization. */
+        const struct ssb_bus_ops *ops;
+
+        struct device *dev;
+        struct ssb_bus *bus;
+        struct ssb_device_id id;
+
+        u8 core_index;
+        unsigned int irq;
+
+        /* Internal-only stuff follows. */
+        void *drvdata;          /* Per-device data */
+        void *devtypedata;      /* Per-devicetype (eg 802.11) data */
+};
+
+/* Go from struct device to struct ssb_device. */
+static inline
+struct ssb_device * dev_to_ssb_dev(struct device *dev)
+{
+        struct __ssb_dev_wrapper *wrap;
+        wrap = container_of(dev, struct __ssb_dev_wrapper, dev);
+        return wrap->sdev;
+}
+
+/* Device specific user data */
+static inline
+void ssb_set_drvdata(struct ssb_device *dev, void *data)
+{
+        dev->drvdata = data;
+}
+static inline
+void * ssb_get_drvdata(struct ssb_device *dev)
+{
+        return dev->drvdata;
+}
+
+/* Devicetype specific user data. This is per device-type (not per device) */
+void ssb_set_devtypedata(struct ssb_device *dev, void *data);
+static inline
+void * ssb_get_devtypedata(struct ssb_device *dev)
+{
+        return dev->devtypedata;
+}
+
+
+struct ssb_driver {
+        const char *name;
+        const struct ssb_device_id *id_table;
+
+        int (*probe)(struct ssb_device *dev, const struct ssb_device_id *id);
+        void (*remove)(struct ssb_device *dev);
+        int (*suspend)(struct ssb_device *dev, pm_message_t state);
+        int (*resume)(struct ssb_device *dev);
+        void (*shutdown)(struct ssb_device *dev);
+
+        struct device_driver drv;
+};
+#define drv_to_ssb_drv(_drv) container_of(_drv, struct ssb_driver, drv)
+
+extern int __ssb_driver_register(struct ssb_driver *drv, struct module *owner);
+static inline int ssb_driver_register(struct ssb_driver *drv)
+{
+        return __ssb_driver_register(drv, THIS_MODULE);
+}
+extern void ssb_driver_unregister(struct ssb_driver *drv);
+
+
+
+
+enum ssb_bustype {
+        SSB_BUSTYPE_SSB,        /* This SSB bus is the system bus */
+        SSB_BUSTYPE_PCI,        /* SSB is connected to PCI bus */
+        SSB_BUSTYPE_PCMCIA,     /* SSB is connected to PCMCIA bus */
+};
+
+/* board_vendor */
+#define SSB_BOARDVENDOR_BCM     0x14E4  /* Broadcom */
+#define SSB_BOARDVENDOR_DELL    0x1028  /* Dell */
+#define SSB_BOARDVENDOR_HP      0x0E11  /* HP */
+/* board_type */
+#define SSB_BOARD_BCM94306MP    0x0418
+#define SSB_BOARD_BCM4309G      0x0421
+#define SSB_BOARD_BCM4306CB     0x0417
+#define SSB_BOARD_BCM4309MP     0x040C
+#define SSB_BOARD_MP4318        0x044A
+#define SSB_BOARD_BU4306        0x0416
+#define SSB_BOARD_BU4309        0x040A
+/* chip_package */
+#define SSB_CHIPPACK_BCM4712S   1       /* Small 200pin 4712 */
+#define SSB_CHIPPACK_BCM4712M   2       /* Medium 225pin 4712 */
+#define SSB_CHIPPACK_BCM4712L   0       /* Large 340pin 4712 */
+
+#include <linux/ssb/ssb_driver_chipcommon.h>
+#include <linux/ssb/ssb_driver_mips.h>
+#include <linux/ssb/ssb_driver_extif.h>
+#include <linux/ssb/ssb_driver_pci.h>
+
+struct ssb_bus {
+        /* The MMIO area. */
+        void __iomem *mmio;
+
+        const struct ssb_bus_ops *ops;
+
+        /* The core in the basic address register window. (PCI bus only) */
+        struct ssb_device *mapped_device;
+        /* Currently mapped PCMCIA segment. (bustype == SSB_BUSTYPE_PCMCIA only) */
+        u8 mapped_pcmcia_seg;
+        /* Lock for core and segment switching. */
+        spinlock_t bar_lock;
+
+        /* The bus this backplane is running on. */
+        enum ssb_bustype bustype;
+        /* Pointer to the PCI bus (only valid if bustype == SSB_BUSTYPE_PCI). */
+        struct pci_dev *host_pci;
+        /* Pointer to the PCMCIA device (only if bustype == SSB_BUSTYPE_PCMCIA). */
+        struct pcmcia_device *host_pcmcia;
+
+#ifdef CONFIG_SSB_PCIHOST
+        /* Mutex to protect the SPROM writing. */
+        struct mutex pci_sprom_mutex;
+#endif
+
+        /* ID information about the Chip. */
+        u16 chip_id;
+        u16 chip_rev;
+        u8 chip_package;
+
+        /* List of devices (cores) on the backplane. */
+        struct ssb_device devices[SSB_MAX_NR_CORES];
+        u8 nr_devices;
+
+        /* Reference count. Number of suspended devices. */
+        u8 suspend_cnt;
+
+        /* Software ID number for this bus. */
+        unsigned int busnumber;
+
+        /* The ChipCommon device (if available). */
+        struct ssb_chipcommon chipco;
+        /* The PCI-core device (if available). */
+        struct ssb_pcicore pcicore;
+        /* The MIPS-core device (if available). */
+        struct ssb_mipscore mipscore;
+        /* The EXTif-core device (if available). */
+        struct ssb_extif extif;
+
+        /* The following structure elements are not available in early
+         * SSB initialization. Though, they are available for regular
+         * registered drivers at any stage. So be careful when
+         * using them in the ssb core code. */
+
+        /* ID information about the PCB. */
+        struct ssb_boardinfo boardinfo;
+        /* Contents of the SPROM. */
+        struct ssb_sprom sprom;
+
+        /* Internal-only stuff follows. Do not touch. */
+        struct list_head list;
+#ifdef CONFIG_SSB_DEBUG
+        /* Is the bus already powered up? */
+        bool powered_up;
+        int power_warn_count;
+#endif /* DEBUG */
+};
+
+/* The initialization-invariants. */
+struct ssb_init_invariants {
+        struct ssb_boardinfo boardinfo;
+        struct ssb_sprom sprom;
+};
+/* Type of function to fetch the invariants. */
+typedef int (*ssb_invariants_func_t)(struct ssb_bus *bus,
+                                     struct ssb_init_invariants *iv);
+
+/* Register a SSB system bus. get_invariants() is called after the
+ * basic system devices are initialized.
+ * The invariants are usually fetched from some NVRAM.
+ * Put the invariants into the struct pointed to by iv. */
+extern int ssb_bus_ssbbus_register(struct ssb_bus *bus,
+                                   unsigned long baseaddr,
+                                   ssb_invariants_func_t get_invariants);
+#ifdef CONFIG_SSB_PCIHOST
+extern int ssb_bus_pcibus_register(struct ssb_bus *bus,
+                                   struct pci_dev *host_pci);
+#endif /* CONFIG_SSB_PCIHOST */
+#ifdef CONFIG_SSB_PCMCIAHOST
+extern int ssb_bus_pcmciabus_register(struct ssb_bus *bus,
+                                      struct pcmcia_device *pcmcia_dev,
+                                      unsigned long baseaddr);
+#endif /* CONFIG_SSB_PCMCIAHOST */
+
+extern void ssb_bus_unregister(struct ssb_bus *bus);
+
+extern u32 ssb_clockspeed(struct ssb_bus *bus);
+
+/* Is the device enabled in hardware? */
+int ssb_device_is_enabled(struct ssb_device *dev);
+/* Enable a device and pass device-specific SSB_TMSLOW flags.
+ * If no device-specific flags are available, use 0. */
+void ssb_device_enable(struct ssb_device *dev, u32 core_specific_flags);
+/* Disable a device in hardware and pass SSB_TMSLOW flags (if any). */
+void ssb_device_disable(struct ssb_device *dev, u32 core_specific_flags);
+
+
+/* Device MMIO register read/write functions. */
+static inline u16 ssb_read16(struct ssb_device *dev, u16 offset)
+{
+        return dev->ops->read16(dev, offset);
+}
+static inline u32 ssb_read32(struct ssb_device *dev, u16 offset)
+{
+        return dev->ops->read32(dev, offset);
+}
+static inline void ssb_write16(struct ssb_device *dev, u16 offset, u16 value)
+{
+        dev->ops->write16(dev, offset, value);
+}
+static inline void ssb_write32(struct ssb_device *dev, u16 offset, u32 value)
+{
+        dev->ops->write32(dev, offset, value);
+}
+
+
+/* Translation (routing) bits that need to be ORed to DMA
+ * addresses before they are given to a device. */
+extern u32 ssb_dma_translation(struct ssb_device *dev);
+#define SSB_DMA_TRANSLATION_MASK        0xC0000000
+#define SSB_DMA_TRANSLATION_SHIFT       30
+
+extern int ssb_dma_set_mask(struct ssb_device *ssb_dev, u64 mask);
+
+
+#ifdef CONFIG_SSB_PCIHOST
+/* PCI-host wrapper driver */
+extern int ssb_pcihost_register(struct pci_driver *driver);
+static inline void ssb_pcihost_unregister(struct pci_driver *driver)
+{
+        pci_unregister_driver(driver);
+}
+#endif /* CONFIG_SSB_PCIHOST */
+
+
+/* If a driver is shutdown or suspended, call this to signal
+ * that the bus may be completely powered down. SSB will decide,
+ * if it's really time to power down the bus, based on if there
+ * are other devices that want to run. */
+extern int ssb_bus_may_powerdown(struct ssb_bus *bus);
+/* Before initializing and enabling a device, call this to power-up the bus.
+ * If you want to allow use of dynamic-power-control, pass the flag.
+ * Otherwise static always-on powercontrol will be used. */
+extern int ssb_bus_powerup(struct ssb_bus *bus, bool dynamic_pctl);
+
+
+/* Various helper functions */
+extern u32 ssb_admatch_base(u32 adm);
+extern u32 ssb_admatch_size(u32 adm);
+
+
+#endif /* LINUX_SSB_H_ */
diff --git a/include/linux/ssb/ssb_driver_chipcommon.h b/include/linux/ssb/ssb_driver_chipcommon.h
new file mode 100644
index 000000000000..4cb995494662
--- /dev/null
+++ b/include/linux/ssb/ssb_driver_chipcommon.h
@@ -0,0 +1,396 @@
+#ifndef LINUX_SSB_CHIPCO_H_
+#define LINUX_SSB_CHIPCO_H_
+
+/* SonicsSiliconBackplane CHIPCOMMON core hardware definitions
+ *
+ * The chipcommon core provides chip identification, SB control,
+ * jtag, 0/1/2 uarts, clock frequency control, a watchdog interrupt timer,
+ * gpio interface, extbus, and support for serial and parallel flashes.
+ *
+ * Copyright 2005, Broadcom Corporation
+ * Copyright 2006, Michael Buesch <mb@bu3sch.de>
+ *
+ * Licensed under the GPL version 2. See COPYING for details.
+ */
+
+/** ChipCommon core registers. **/
+
+#define SSB_CHIPCO_CHIPID               0x0000
+#define  SSB_CHIPCO_IDMASK              0x0000FFFF
+#define  SSB_CHIPCO_REVMASK             0x000F0000
+#define  SSB_CHIPCO_REVSHIFT            16
+#define  SSB_CHIPCO_PACKMASK            0x00F00000
+#define  SSB_CHIPCO_PACKSHIFT           20
+#define  SSB_CHIPCO_NRCORESMASK         0x0F000000
+#define  SSB_CHIPCO_NRCORESSHIFT        24
+#define SSB_CHIPCO_CAP                  0x0004          /* Capabilities */
+#define  SSB_CHIPCO_CAP_NRUART          0x00000003      /* # of UARTs */
+#define  SSB_CHIPCO_CAP_MIPSEB          0x00000004      /* MIPS in BigEndian Mode */
+#define  SSB_CHIPCO_CAP_UARTCLK         0x00000018      /* UART clock select */
+#define   SSB_CHIPCO_CAP_UARTCLK_INT    0x00000008      /* UARTs are driven by internal divided clock */
+#define  SSB_CHIPCO_CAP_UARTGPIO        0x00000020      /* UARTs on GPIO 15-12 */
+#define  SSB_CHIPCO_CAP_EXTBUS          0x000000C0      /* External buses present */
+#define  SSB_CHIPCO_CAP_FLASHT          0x00000700      /* Flash Type */
+#define   SSB_CHIPCO_FLASHT_NONE        0x00000000      /* No flash */
+#define   SSB_CHIPCO_FLASHT_STSER       0x00000100      /* ST serial flash */
+#define   SSB_CHIPCO_FLASHT_ATSER       0x00000200      /* Atmel serial flash */
+#define   SSB_CHIPCO_FLASHT_PARA        0x00000700      /* Parallel flash */
+#define  SSB_CHIPCO_CAP_PLLT            0x00038000      /* PLL Type */
+#define   SSB_PLLTYPE_NONE              0x00000000
+#define   SSB_PLLTYPE_1                 0x00010000      /* 48Mhz base, 3 dividers */
+#define   SSB_PLLTYPE_2                 0x00020000      /* 48Mhz, 4 dividers */
+#define   SSB_PLLTYPE_3                 0x00030000      /* 25Mhz, 2 dividers */
+#define   SSB_PLLTYPE_4                 0x00008000      /* 48Mhz, 4 dividers */
+#define   SSB_PLLTYPE_5                 0x00018000      /* 25Mhz, 4 dividers */
+#define   SSB_PLLTYPE_6                 0x00028000      /* 100/200 or 120/240 only */
+#define   SSB_PLLTYPE_7                 0x00038000      /* 25Mhz, 4 dividers */
+#define  SSB_CHIPCO_CAP_PCTL            0x00040000      /* Power Control */
+#define  SSB_CHIPCO_CAP_OTPS            0x00380000      /* OTP size */
+#define  SSB_CHIPCO_CAP_OTPS_SHIFT      19
+#define  SSB_CHIPCO_CAP_OTPS_BASE       5
+#define  SSB_CHIPCO_CAP_JTAGM           0x00400000      /* JTAG master present */
+#define  SSB_CHIPCO_CAP_BROM            0x00800000      /* Internal boot ROM active */
+#define  SSB_CHIPCO_CAP_64BIT           0x08000000      /* 64-bit Backplane */
+#define SSB_CHIPCO_CORECTL              0x0008
+#define  SSB_CHIPCO_CORECTL_UARTCLK0    0x00000001      /* Drive UART with internal clock */
+#define  SSB_CHIPCO_CORECTL_SE          0x00000002      /* sync clk out enable (corerev >= 3) */
+#define SSB_CHIPCO_BIST                 0x000C
+#define SSB_CHIPCO_OTPS                 0x0010          /* OTP status */
+#define  SSB_CHIPCO_OTPS_PROGFAIL       0x80000000
+#define  SSB_CHIPCO_OTPS_PROTECT        0x00000007
+#define  SSB_CHIPCO_OTPS_HW_PROTECT     0x00000001
+#define  SSB_CHIPCO_OTPS_SW_PROTECT     0x00000002
+#define  SSB_CHIPCO_OTPS_CID_PROTECT    0x00000004
+#define SSB_CHIPCO_OTPC                 0x0014          /* OTP control */
+#define  SSB_CHIPCO_OTPC_RECWAIT        0xFF000000
+#define  SSB_CHIPCO_OTPC_PROGWAIT       0x00FFFF00
+#define  SSB_CHIPCO_OTPC_PRW_SHIFT      8
+#define  SSB_CHIPCO_OTPC_MAXFAIL        0x00000038
+#define  SSB_CHIPCO_OTPC_VSEL           0x00000006
+#define  SSB_CHIPCO_OTPC_SELVL          0x00000001
+#define SSB_CHIPCO_OTPP                 0x0018          /* OTP prog */
+#define  SSB_CHIPCO_OTPP_COL            0x000000FF
+#define  SSB_CHIPCO_OTPP_ROW            0x0000FF00
+#define  SSB_CHIPCO_OTPP_ROW_SHIFT      8
+#define  SSB_CHIPCO_OTPP_READERR        0x10000000
+#define  SSB_CHIPCO_OTPP_VALUE          0x20000000
+#define  SSB_CHIPCO_OTPP_READ           0x40000000
+#define  SSB_CHIPCO_OTPP_START          0x80000000
+#define  SSB_CHIPCO_OTPP_BUSY           0x80000000
+#define SSB_CHIPCO_IRQSTAT              0x0020
+#define SSB_CHIPCO_IRQMASK              0x0024
+#define  SSB_CHIPCO_IRQ_GPIO            0x00000001      /* gpio intr */
+#define  SSB_CHIPCO_IRQ_EXT             0x00000002      /* ro: ext intr pin (corerev >= 3) */
+#define  SSB_CHIPCO_IRQ_WDRESET         0x80000000      /* watchdog reset occurred */
+#define SSB_CHIPCO_CHIPCTL              0x0028          /* Rev >= 11 only */
+#define SSB_CHIPCO_CHIPSTAT             0x002C          /* Rev >= 11 only */
+#define SSB_CHIPCO_JCMD                 0x0030          /* Rev >= 10 only */
+#define  SSB_CHIPCO_JCMD_START          0x80000000
+#define  SSB_CHIPCO_JCMD_BUSY           0x80000000
+#define  SSB_CHIPCO_JCMD_PAUSE          0x40000000
+#define  SSB_CHIPCO_JCMD0_ACC_MASK      0x0000F000
+#define  SSB_CHIPCO_JCMD0_ACC_IRDR      0x00000000
+#define  SSB_CHIPCO_JCMD0_ACC_DR        0x00001000
+#define  SSB_CHIPCO_JCMD0_ACC_IR        0x00002000
+#define  SSB_CHIPCO_JCMD0_ACC_RESET     0x00003000
+#define  SSB_CHIPCO_JCMD0_ACC_IRPDR     0x00004000
+#define  SSB_CHIPCO_JCMD0_ACC_PDR       0x00005000
+#define  SSB_CHIPCO_JCMD0_IRW_MASK      0x00000F00
+#define  SSB_CHIPCO_JCMD_ACC_MASK       0x000F0000      /* Changes for corerev 11 */
+#define  SSB_CHIPCO_JCMD_ACC_IRDR       0x00000000
+#define  SSB_CHIPCO_JCMD_ACC_DR         0x00010000
+#define  SSB_CHIPCO_JCMD_ACC_IR         0x00020000
+#define  SSB_CHIPCO_JCMD_ACC_RESET      0x00030000
+#define  SSB_CHIPCO_JCMD_ACC_IRPDR      0x00040000
+#define  SSB_CHIPCO_JCMD_ACC_PDR        0x00050000
+#define  SSB_CHIPCO_JCMD_IRW_MASK       0x00001F00
+#define  SSB_CHIPCO_JCMD_IRW_SHIFT      8
+#define  SSB_CHIPCO_JCMD_DRW_MASK       0x0000003F
+#define SSB_CHIPCO_JIR                  0x0034          /* Rev >= 10 only */
+#define SSB_CHIPCO_JDR                  0x0038          /* Rev >= 10 only */
+#define SSB_CHIPCO_JCTL                 0x003C          /* Rev >= 10 only */
+#define  SSB_CHIPCO_JCTL_FORCE_CLK      4               /* Force clock */
+#define  SSB_CHIPCO_JCTL_EXT_EN         2               /* Enable external targets */
+#define  SSB_CHIPCO_JCTL_EN             1               /* Enable Jtag master */
+#define SSB_CHIPCO_FLASHCTL             0x0040
+#define  SSB_CHIPCO_FLASHCTL_START      0x80000000
+#define  SSB_CHIPCO_FLASHCTL_BUSY       SSB_CHIPCO_FLASHCTL_START
+#define SSB_CHIPCO_FLASHADDR            0x0044
+#define SSB_CHIPCO_FLASHDATA            0x0048
+#define SSB_CHIPCO_BCAST_ADDR           0x0050
+#define SSB_CHIPCO_BCAST_DATA           0x0054
+#define SSB_CHIPCO_GPIOIN               0x0060
+#define SSB_CHIPCO_GPIOOUT              0x0064
+#define SSB_CHIPCO_GPIOOUTEN            0x0068
+#define SSB_CHIPCO_GPIOCTL              0x006C
+#define SSB_CHIPCO_GPIOPOL              0x0070
+#define SSB_CHIPCO_GPIOIRQ              0x0074
+#define SSB_CHIPCO_WATCHDOG             0x0080
+#define SSB_CHIPCO_GPIOTIMER            0x0088          /* LED powersave (corerev >= 16) */
+#define  SSB_CHIPCO_GPIOTIMER_ONTIME_SHIFT      16
+#define SSB_CHIPCO_GPIOTOUTM            0x008C          /* LED powersave (corerev >= 16) */
+#define SSB_CHIPCO_CLOCK_N              0x0090
+#define SSB_CHIPCO_CLOCK_SB             0x0094
+#define SSB_CHIPCO_CLOCK_PCI            0x0098
+#define SSB_CHIPCO_CLOCK_M2             0x009C
+#define SSB_CHIPCO_CLOCK_MIPS           0x00A0
+#define SSB_CHIPCO_CLKDIV               0x00A4          /* Rev >= 3 only */
+#define  SSB_CHIPCO_CLKDIV_SFLASH       0x0F000000
+#define  SSB_CHIPCO_CLKDIV_SFLASH_SHIFT 24
+#define  SSB_CHIPCO_CLKDIV_OTP          0x000F0000
+#define  SSB_CHIPCO_CLKDIV_OTP_SHIFT    16
+#define  SSB_CHIPCO_CLKDIV_JTAG         0x00000F00
+#define  SSB_CHIPCO_CLKDIV_JTAG_SHIFT   8
+#define  SSB_CHIPCO_CLKDIV_UART         0x000000FF
+#define SSB_CHIPCO_PLLONDELAY           0x00B0          /* Rev >= 4 only */
+#define SSB_CHIPCO_FREFSELDELAY         0x00B4          /* Rev >= 4 only */
+#define SSB_CHIPCO_SLOWCLKCTL           0x00B8          /* 6 <= Rev <= 9 only */
+#define  SSB_CHIPCO_SLOWCLKCTL_SRC      0x00000007      /* slow clock source mask */
+#define   SSB_CHIPCO_SLOWCLKCTL_SRC_LPO         0x00000000      /* source of slow clock is LPO */
+#define   SSB_CHIPCO_SLOWCLKCTL_SRC_XTAL        0x00000001      /* source of slow clock is crystal */
+#define   SSB_CHIPCO_SLOECLKCTL_SRC_PCI         0x00000002      /* source of slow clock is PCI */
+#define  SSB_CHIPCO_SLOWCLKCTL_LPOFREQ  0x00000200      /* LPOFreqSel, 1: 160Khz, 0: 32KHz */
+#define  SSB_CHIPCO_SLOWCLKCTL_LPOPD    0x00000400      /* LPOPowerDown, 1: LPO is disabled, 0: LPO is enabled */
+#define  SSB_CHIPCO_SLOWCLKCTL_FSLOW    0x00000800      /* ForceSlowClk, 1: sb/cores running on slow clock, 0: power logic control */
+#define  SSB_CHIPCO_SLOWCLKCTL_IPLL     0x00001000      /* IgnorePllOffReq, 1/0: power logic ignores/honors PLL clock disable requests from core */
+#define  SSB_CHIPCO_SLOWCLKCTL_ENXTAL   0x00002000      /* XtalControlEn, 1/0: power logic does/doesn't disable crystal when appropriate */
+#define  SSB_CHIPCO_SLOWCLKCTL_XTALPU   0x00004000      /* XtalPU (RO), 1/0: crystal running/disabled */
+#define  SSB_CHIPCO_SLOWCLKCTL_CLKDIV   0xFFFF0000      /* ClockDivider (SlowClk = 1/(4+divisor)) */
+#define  SSB_CHIPCO_SLOWCLKCTL_CLKDIV_SHIFT     16
+#define SSB_CHIPCO_SYSCLKCTL            0x00C0          /* Rev >= 3 only */
+#define  SSB_CHIPCO_SYSCLKCTL_IDLPEN    0x00000001      /* ILPen: Enable Idle Low Power */
+#define  SSB_CHIPCO_SYSCLKCTL_ALPEN     0x00000002      /* ALPen: Enable Active Low Power */
+#define  SSB_CHIPCO_SYSCLKCTL_PLLEN     0x00000004      /* ForcePLLOn */
+#define  SSB_CHIPCO_SYSCLKCTL_FORCEALP  0x00000008      /* Force ALP (or HT if ALPen is not set */
+#define  SSB_CHIPCO_SYSCLKCTL_FORCEHT   0x00000010      /* Force HT */
+#define  SSB_CHIPCO_SYSCLKCTL_CLKDIV    0xFFFF0000      /* ClkDiv  (ILP = 1/(4+divisor)) */
+#define  SSB_CHIPCO_SYSCLKCTL_CLKDIV_SHIFT      16
+#define SSB_CHIPCO_CLKSTSTR             0x00C4          /* Rev >= 3 only */
+#define SSB_CHIPCO_PCMCIA_CFG           0x0100
+#define SSB_CHIPCO_PCMCIA_MEMWAIT       0x0104
+#define SSB_CHIPCO_PCMCIA_ATTRWAIT      0x0108
+#define SSB_CHIPCO_PCMCIA_IOWAIT        0x010C
+#define SSB_CHIPCO_IDE_CFG              0x0110
+#define SSB_CHIPCO_IDE_MEMWAIT          0x0114
+#define SSB_CHIPCO_IDE_ATTRWAIT         0x0118
+#define SSB_CHIPCO_IDE_IOWAIT           0x011C
+#define SSB_CHIPCO_PROG_CFG             0x0120
+#define SSB_CHIPCO_PROG_WAITCNT         0x0124
+#define SSB_CHIPCO_FLASH_CFG            0x0128
+#define SSB_CHIPCO_FLASH_WAITCNT        0x012C
+#define SSB_CHIPCO_UART0_DATA           0x0300
+#define SSB_CHIPCO_UART0_IMR            0x0304
+#define SSB_CHIPCO_UART0_FCR            0x0308
+#define SSB_CHIPCO_UART0_LCR            0x030C
+#define SSB_CHIPCO_UART0_MCR            0x0310
+#define SSB_CHIPCO_UART0_LSR            0x0314
+#define SSB_CHIPCO_UART0_MSR            0x0318
+#define SSB_CHIPCO_UART0_SCRATCH        0x031C
+#define SSB_CHIPCO_UART1_DATA           0x0400
+#define SSB_CHIPCO_UART1_IMR            0x0404
+#define SSB_CHIPCO_UART1_FCR            0x0408
+#define SSB_CHIPCO_UART1_LCR            0x040C
+#define SSB_CHIPCO_UART1_MCR            0x0410
+#define SSB_CHIPCO_UART1_LSR            0x0414
+#define SSB_CHIPCO_UART1_MSR            0x0418
+#define SSB_CHIPCO_UART1_SCRATCH        0x041C
+
+
+
+/** Clockcontrol masks and values **/
+
+/* SSB_CHIPCO_CLOCK_N */
+#define SSB_CHIPCO_CLK_N1               0x0000003F      /* n1 control */
+#define SSB_CHIPCO_CLK_N2               0x00003F00      /* n2 control */
+#define SSB_CHIPCO_CLK_N2_SHIFT         8
+#define SSB_CHIPCO_CLK_PLLC             0x000F0000      /* pll control */
+#define SSB_CHIPCO_CLK_PLLC_SHIFT       16
+
+/* SSB_CHIPCO_CLOCK_SB/PCI/UART */
+#define SSB_CHIPCO_CLK_M1               0x0000003F      /* m1 control */
+#define SSB_CHIPCO_CLK_M2               0x00003F00      /* m2 control */
+#define SSB_CHIPCO_CLK_M2_SHIFT         8
+#define SSB_CHIPCO_CLK_M3               0x003F0000      /* m3 control */
+#define SSB_CHIPCO_CLK_M3_SHIFT         16
+#define SSB_CHIPCO_CLK_MC               0x1F000000      /* mux control */
+#define SSB_CHIPCO_CLK_MC_SHIFT         24
+
+/* N3M Clock control magic field values */
+#define SSB_CHIPCO_CLK_F6_2             0x02            /* A factor of 2 in */
+#define SSB_CHIPCO_CLK_F6_3             0x03            /* 6-bit fields like */
+#define SSB_CHIPCO_CLK_F6_4             0x05            /* N1, M1 or M3 */
+#define SSB_CHIPCO_CLK_F6_5             0x09
+#define SSB_CHIPCO_CLK_F6_6             0x11
+#define SSB_CHIPCO_CLK_F6_7             0x21
+
+#define SSB_CHIPCO_CLK_F5_BIAS          5               /* 5-bit fields get this added */
+
+#define SSB_CHIPCO_CLK_MC_BYPASS        0x08
+#define SSB_CHIPCO_CLK_MC_M1            0x04
+#define SSB_CHIPCO_CLK_MC_M1M2          0x02
+#define SSB_CHIPCO_CLK_MC_M1M2M3        0x01
+#define SSB_CHIPCO_CLK_MC_M1M3          0x11
+
+/* Type 2 Clock control magic field values */
+#define SSB_CHIPCO_CLK_T2_BIAS          2               /* n1, n2, m1 & m3 bias */
+#define SSB_CHIPCO_CLK_T2M2_BIAS        3               /* m2 bias */
+
+#define SSB_CHIPCO_CLK_T2MC_M1BYP       1
+#define SSB_CHIPCO_CLK_T2MC_M2BYP       2
+#define SSB_CHIPCO_CLK_T2MC_M3BYP       4
+
+/* Type 6 Clock control magic field values */
+#define SSB_CHIPCO_CLK_T6_MMASK         1               /* bits of interest in m */
+#define SSB_CHIPCO_CLK_T6_M0            120000000       /* sb clock for m = 0 */
+#define SSB_CHIPCO_CLK_T6_M1            100000000       /* sb clock for m = 1 */
+#define SSB_CHIPCO_CLK_SB2MIPS_T6(sb)   (2 * (sb))
+
+/* Common clock base */
+#define SSB_CHIPCO_CLK_BASE1            24000000        /* Half the clock freq */
+#define SSB_CHIPCO_CLK_BASE2            12500000        /* Alternate crystal on some PLL's */
+
+/* Clock control values for 200Mhz in 5350 */
+#define SSB_CHIPCO_CLK_5350_N           0x0311
+#define SSB_CHIPCO_CLK_5350_M           0x04020009
+
+
+/** Bits in the config registers **/
+
+#define SSB_CHIPCO_CFG_EN               0x0001          /* Enable */
+#define SSB_CHIPCO_CFG_EXTM             0x000E          /* Extif Mode */
+#define  SSB_CHIPCO_CFG_EXTM_ASYNC      0x0002          /* Async/Parallel flash */
+#define  SSB_CHIPCO_CFG_EXTM_SYNC       0x0004          /* Synchronous */
+#define  SSB_CHIPCO_CFG_EXTM_PCMCIA     0x0008          /* PCMCIA */
+#define  SSB_CHIPCO_CFG_EXTM_IDE        0x000A          /* IDE */
+#define SSB_CHIPCO_CFG_DS16             0x0010          /* Data size, 0=8bit, 1=16bit */
+#define SSB_CHIPCO_CFG_CLKDIV           0x0060          /* Sync: Clock divisor */
+#define SSB_CHIPCO_CFG_CLKEN            0x0080          /* Sync: Clock enable */
+#define SSB_CHIPCO_CFG_BSTRO            0x0100          /* Sync: Size/Bytestrobe */
+
+
+/** Flash-specific control/status values */
+
+/* flashcontrol opcodes for ST flashes */
+#define SSB_CHIPCO_FLASHCTL_ST_WREN     0x0006          /* Write Enable */
+#define SSB_CHIPCO_FLASHCTL_ST_WRDIS    0x0004          /* Write Disable */
+#define SSB_CHIPCO_FLASHCTL_ST_RDSR     0x0105          /* Read Status Register */
+#define SSB_CHIPCO_FLASHCTL_ST_WRSR     0x0101          /* Write Status Register */
+#define SSB_CHIPCO_FLASHCTL_ST_READ     0x0303          /* Read Data Bytes */
+#define SSB_CHIPCO_FLASHCTL_ST_PP       0x0302          /* Page Program */
+#define SSB_CHIPCO_FLASHCTL_ST_SE       0x02D8          /* Sector Erase */
+#define SSB_CHIPCO_FLASHCTL_ST_BE       0x00C7          /* Bulk Erase */
+#define SSB_CHIPCO_FLASHCTL_ST_DP       0x00B9          /* Deep Power-down */
+#define SSB_CHIPCO_FLASHCTL_ST_RSIG     0x03AB          /* Read Electronic Signature */
+
+/* Status register bits for ST flashes */
+#define SSB_CHIPCO_FLASHSTA_ST_WIP      0x01            /* Write In Progress */
+#define SSB_CHIPCO_FLASHSTA_ST_WEL      0x02            /* Write Enable Latch */
+#define SSB_CHIPCO_FLASHSTA_ST_BP       0x1C            /* Block Protect */
+#define SSB_CHIPCO_FLASHSTA_ST_BP_SHIFT 2
+#define SSB_CHIPCO_FLASHSTA_ST_SRWD     0x80            /* Status Register Write Disable */
+
+/* flashcontrol opcodes for Atmel flashes */
+#define SSB_CHIPCO_FLASHCTL_AT_READ             0x07E8
+#define SSB_CHIPCO_FLASHCTL_AT_PAGE_READ        0x07D2
+#define SSB_CHIPCO_FLASHCTL_AT_BUF1_READ        /* FIXME */
+#define SSB_CHIPCO_FLASHCTL_AT_BUF2_READ        /* FIXME */
+#define SSB_CHIPCO_FLASHCTL_AT_STATUS           0x01D7
+#define SSB_CHIPCO_FLASHCTL_AT_BUF1_WRITE       0x0384
+#define SSB_CHIPCO_FLASHCTL_AT_BUF2_WRITE       0x0387
+#define SSB_CHIPCO_FLASHCTL_AT_BUF1_ERASE_PRGM  0x0283  /* Erase program */
+#define SSB_CHIPCO_FLASHCTL_AT_BUF2_ERASE_PRGM  0x0286  /* Erase program */
+#define SSB_CHIPCO_FLASHCTL_AT_BUF1_PROGRAM     0x0288
+#define SSB_CHIPCO_FLASHCTL_AT_BUF2_PROGRAM     0x0289
+#define SSB_CHIPCO_FLASHCTL_AT_PAGE_ERASE       0x0281
+#define SSB_CHIPCO_FLASHCTL_AT_BLOCK_ERASE      0x0250
+#define SSB_CHIPCO_FLASHCTL_AT_BUF1_WRER_PRGM   0x0382  /* Write erase program */
+#define SSB_CHIPCO_FLASHCTL_AT_BUF2_WRER_PRGM   0x0385  /* Write erase program */
+#define SSB_CHIPCO_FLASHCTL_AT_BUF1_LOAD        0x0253
+#define SSB_CHIPCO_FLASHCTL_AT_BUF2_LOAD        0x0255
+#define SSB_CHIPCO_FLASHCTL_AT_BUF1_COMPARE     0x0260
+#define SSB_CHIPCO_FLASHCTL_AT_BUF2_COMPARE     0x0261
+#define SSB_CHIPCO_FLASHCTL_AT_BUF1_REPROGRAM   0x0258
+#define SSB_CHIPCO_FLASHCTL_AT_BUF2_REPROGRAM   0x0259
+
+/* Status register bits for Atmel flashes */
+#define SSB_CHIPCO_FLASHSTA_AT_READY    0x80
+#define SSB_CHIPCO_FLASHSTA_AT_MISMATCH 0x40
+#define SSB_CHIPCO_FLASHSTA_AT_ID       0x38
+#define SSB_CHIPCO_FLASHSTA_AT_ID_SHIFT 3
+
+
+/** OTP **/
+
+/* OTP regions */
+#define SSB_CHIPCO_OTP_HW_REGION        SSB_CHIPCO_OTPS_HW_PROTECT
+#define SSB_CHIPCO_OTP_SW_REGION        SSB_CHIPCO_OTPS_SW_PROTECT
+#define SSB_CHIPCO_OTP_CID_REGION       SSB_CHIPCO_OTPS_CID_PROTECT
+
+/* OTP regions (Byte offsets from otp size) */
+#define SSB_CHIPCO_OTP_SWLIM_OFF        (-8)
+#define SSB_CHIPCO_OTP_CIDBASE_OFF      0
+#define SSB_CHIPCO_OTP_CIDLIM_OFF       8
+
+/* Predefined OTP words (Word offset from otp size) */
+#define SSB_CHIPCO_OTP_BOUNDARY_OFF     (-4)
+#define SSB_CHIPCO_OTP_HWSIGN_OFF       (-3)
+#define SSB_CHIPCO_OTP_SWSIGN_OFF       (-2)
+#define SSB_CHIPCO_OTP_CIDSIGN_OFF      (-1)
+
+#define SSB_CHIPCO_OTP_CID_OFF          0
+#define SSB_CHIPCO_OTP_PKG_OFF          1
+#define SSB_CHIPCO_OTP_FID_OFF          2
+#define SSB_CHIPCO_OTP_RSV_OFF          3
+#define SSB_CHIPCO_OTP_LIM_OFF          4
+
+#define SSB_CHIPCO_OTP_SIGNATURE        0x578A
+#define SSB_CHIPCO_OTP_MAGIC            0x4E56
+
+
+struct ssb_device;
+struct ssb_serial_port;
+
+struct ssb_chipcommon {
+        struct ssb_device *dev;
+        u32 capabilities;
+        /* Fast Powerup Delay constant */
+        u16 fast_pwrup_delay;
+};
+
+extern void ssb_chipcommon_init(struct ssb_chipcommon *cc);
+
+#include <linux/pm.h>
+extern void ssb_chipco_suspend(struct ssb_chipcommon *cc, pm_message_t state);
+extern void ssb_chipco_resume(struct ssb_chipcommon *cc);
+
+extern void ssb_chipco_get_clockcpu(struct ssb_chipcommon *cc,
+                                    u32 *plltype, u32 *n, u32 *m);
+extern void ssb_chipco_get_clockcontrol(struct ssb_chipcommon *cc,
+                                        u32 *plltype, u32 *n, u32 *m);
+extern void ssb_chipco_timing_init(struct ssb_chipcommon *cc,
+                                   unsigned long ns_per_cycle);
+
+enum ssb_clkmode {
+        SSB_CLKMODE_SLOW,
+        SSB_CLKMODE_FAST,
+        SSB_CLKMODE_DYNAMIC,
+};
+
+extern void ssb_chipco_set_clockmode(struct ssb_chipcommon *cc,
+                                     enum ssb_clkmode mode);
+
+extern void ssb_chipco_watchdog_timer_set(struct ssb_chipcommon *cc,
+                                          u32 ticks);
+
+u32 ssb_chipco_gpio_in(struct ssb_chipcommon *cc, u32 mask);
+
+void ssb_chipco_gpio_out(struct ssb_chipcommon *cc, u32 mask, u32 value);
+
+void ssb_chipco_gpio_outen(struct ssb_chipcommon *cc, u32 mask, u32 value);
+
+#ifdef CONFIG_SSB_SERIAL
+extern int ssb_chipco_serial_init(struct ssb_chipcommon *cc,
+                                  struct ssb_serial_port *ports);
+#endif /* CONFIG_SSB_SERIAL */
+
+#endif /* LINUX_SSB_CHIPCO_H_ */
diff --git a/include/linux/ssb/ssb_driver_extif.h b/include/linux/ssb/ssb_driver_extif.h
new file mode 100644
index 000000000000..a9164357b5ae
--- /dev/null
+++ b/include/linux/ssb/ssb_driver_extif.h
@@ -0,0 +1,204 @@
+/*
+ * Hardware-specific External Interface I/O core definitions
+ * for the BCM47xx family of SiliconBackplane-based chips.
+ *
+ * The External Interface core supports a total of three external chip selects
+ * supporting external interfaces. One of the external chip selects is
+ * used for Flash, one is used for PCMCIA, and the other may be
+ * programmed to support either a synchronous interface or an
+ * asynchronous interface. The asynchronous interface can be used to
+ * support external devices such as UARTs and the BCM2019 Bluetooth
+ * baseband processor.
+ * The external interface core also contains 2 on-chip 16550 UARTs, clock
+ * frequency control, a watchdog interrupt timer, and a GPIO interface.
+ *
+ * Copyright 2005, Broadcom Corporation
+ * Copyright 2006, Michael Buesch
+ *
+ * Licensed under the GPL version 2. See COPYING for details.
+ */
+#ifndef LINUX_SSB_EXTIFCORE_H_
+#define LINUX_SSB_EXTIFCORE_H_
+
+/* external interface address space */
+#define SSB_EXTIF_PCMCIA_MEMBASE(x)     (x)
+#define SSB_EXTIF_PCMCIA_IOBASE(x)      ((x) + 0x100000)
+#define SSB_EXTIF_PCMCIA_CFGBASE(x)     ((x) + 0x200000)
+#define SSB_EXTIF_CFGIF_BASE(x)         ((x) + 0x800000)
+#define SSB_EXTIF_FLASH_BASE(x)         ((x) + 0xc00000)
+
+#define SSB_EXTIF_NR_GPIOOUT            5
+/* GPIO NOTE:
+ * The multiple instances of output and output enable registers
+ * are present to allow driver software for multiple cores to control
+ * gpio outputs without needing to share a single register pair.
+ * Use the following helper macro to get a register offset value.
+ */
+#define SSB_EXTIF_GPIO_OUT(index)       ({              \
+        BUILD_BUG_ON(index >= SSB_EXTIF_NR_GPIOOUT);    \
+        SSB_EXTIF_GPIO_OUT_BASE + ((index) * 8);        \
+                                        })
+#define SSB_EXTIF_GPIO_OUTEN(index)     ({              \
+        BUILD_BUG_ON(index >= SSB_EXTIF_NR_GPIOOUT);    \
+        SSB_EXTIF_GPIO_OUTEN_BASE + ((index) * 8);      \
+                                        })
+
+/** EXTIF core registers **/
+
+#define SSB_EXTIF_CTL                   0x0000
+#define  SSB_EXTIF_CTL_UARTEN           (1 << 0) /* UART enable */
+#define SSB_EXTIF_EXTSTAT               0x0004
+#define  SSB_EXTIF_EXTSTAT_EMODE        (1 << 0) /* Endian mode (ro) */
+#define  SSB_EXTIF_EXTSTAT_EIRQPIN      (1 << 1) /* External interrupt pin (ro) */
+#define  SSB_EXTIF_EXTSTAT_GPIOIRQPIN   (1 << 2) /* GPIO interrupt pin (ro) */
+#define SSB_EXTIF_PCMCIA_CFG            0x0010
+#define SSB_EXTIF_PCMCIA_MEMWAIT        0x0014
+#define SSB_EXTIF_PCMCIA_ATTRWAIT       0x0018
+#define SSB_EXTIF_PCMCIA_IOWAIT         0x001C
+#define SSB_EXTIF_PROG_CFG              0x0020
+#define SSB_EXTIF_PROG_WAITCNT          0x0024
+#define SSB_EXTIF_FLASH_CFG             0x0028
+#define SSB_EXTIF_FLASH_WAITCNT         0x002C
+#define SSB_EXTIF_WATCHDOG              0x0040
+#define SSB_EXTIF_CLOCK_N               0x0044
+#define SSB_EXTIF_CLOCK_SB              0x0048
+#define SSB_EXTIF_CLOCK_PCI             0x004C
+#define SSB_EXTIF_CLOCK_MII             0x0050
+#define SSB_EXTIF_GPIO_IN               0x0060
+#define SSB_EXTIF_GPIO_OUT_BASE         0x0064
+#define SSB_EXTIF_GPIO_OUTEN_BASE       0x0068
+#define SSB_EXTIF_EJTAG_OUTEN           0x0090
+#define SSB_EXTIF_GPIO_INTPOL           0x0094
+#define SSB_EXTIF_GPIO_INTMASK          0x0098
+#define SSB_EXTIF_UART_DATA             0x0300
+#define SSB_EXTIF_UART_TIMER            0x0310
+#define SSB_EXTIF_UART_FCR              0x0320
+#define SSB_EXTIF_UART_LCR              0x0330
+#define SSB_EXTIF_UART_MCR              0x0340
+#define SSB_EXTIF_UART_LSR              0x0350
+#define SSB_EXTIF_UART_MSR              0x0360
+#define SSB_EXTIF_UART_SCRATCH          0x0370
+
+
+
+
+/* pcmcia/prog/flash_config */
+#define SSB_EXTCFG_EN                   (1 << 0)        /* enable */
+#define SSB_EXTCFG_MODE                 0xE             /* mode */
+#define SSB_EXTCFG_MODE_SHIFT           1
+#define  SSB_EXTCFG_MODE_FLASH          0x0             /* flash/asynchronous mode */
+#define  SSB_EXTCFG_MODE_SYNC           0x2             /* synchronous mode */
+#define  SSB_EXTCFG_MODE_PCMCIA         0x4             /* pcmcia mode */
+#define SSB_EXTCFG_DS16                 (1 << 4)        /* destsize:  0=8bit, 1=16bit */
+#define SSB_EXTCFG_BSWAP                (1 << 5)        /* byteswap */
+#define SSB_EXTCFG_CLKDIV               0xC0            /* clock divider */
+#define SSB_EXTCFG_CLKDIV_SHIFT         6
+#define  SSB_EXTCFG_CLKDIV_2            0x0             /* backplane/2 */
+#define  SSB_EXTCFG_CLKDIV_3            0x40            /* backplane/3 */
+#define  SSB_EXTCFG_CLKDIV_4            0x80            /* backplane/4 */
+#define SSB_EXTCFG_CLKEN                (1 << 8)        /* clock enable */
+#define SSB_EXTCFG_STROBE               (1 << 9)        /* size/bytestrobe (synch only) */
+
+/* pcmcia_memwait */
+#define SSB_PCMCIA_MEMW_0               0x0000003F      /* waitcount0 */
+#define SSB_PCMCIA_MEMW_1               0x00001F00      /* waitcount1 */
+#define SSB_PCMCIA_MEMW_1_SHIFT         8
+#define SSB_PCMCIA_MEMW_2               0x001F0000      /* waitcount2 */
+#define SSB_PCMCIA_MEMW_2_SHIFT         16
+#define SSB_PCMCIA_MEMW_3               0x1F000000      /* waitcount3 */
+#define SSB_PCMCIA_MEMW_3_SHIFT         24
+
+/* pcmcia_attrwait */
+#define SSB_PCMCIA_ATTW_0               0x0000003F      /* waitcount0 */
+#define SSB_PCMCIA_ATTW_1               0x00001F00      /* waitcount1 */
+#define SSB_PCMCIA_ATTW_1_SHIFT         8
+#define SSB_PCMCIA_ATTW_2               0x001F0000      /* waitcount2 */
+#define SSB_PCMCIA_ATTW_2_SHIFT         16
+#define SSB_PCMCIA_ATTW_3               0x1F000000      /* waitcount3 */
+#define SSB_PCMCIA_ATTW_3_SHIFT         24
+
+/* pcmcia_iowait */
+#define SSB_PCMCIA_IOW_0                0x0000003F      /* waitcount0 */
+#define SSB_PCMCIA_IOW_1                0x00001F00      /* waitcount1 */
+#define SSB_PCMCIA_IOW_1_SHIFT          8
+#define SSB_PCMCIA_IOW_2                0x001F0000      /* waitcount2 */
+#define SSB_PCMCIA_IOW_2_SHIFT          16
+#define SSB_PCMCIA_IOW_3                0x1F000000      /* waitcount3 */
+#define SSB_PCMCIA_IOW_3_SHIFT          24
+
+/* prog_waitcount */
+#define SSB_PROG_WCNT_0                 0x0000001F      /* waitcount0 */
+#define SSB_PROG_WCNT_1                 0x00001F00      /* waitcount1 */
+#define SSB_PROG_WCNT_1_SHIFT           8
+#define SSB_PROG_WCNT_2                 0x001F0000      /* waitcount2 */
+#define SSB_PROG_WCNT_2_SHIFT           16
+#define SSB_PROG_WCNT_3                 0x1F000000      /* waitcount3 */
+#define SSB_PROG_WCNT_3_SHIFT           24
+
+#define SSB_PROG_W0                     0x0000000C
+#define SSB_PROG_W1                     0x00000A00
+#define SSB_PROG_W2                     0x00020000
+#define SSB_PROG_W3                     0x01000000
+
+/* flash_waitcount */
+#define SSB_FLASH_WCNT_0                0x0000001F      /* waitcount0 */
+#define SSB_FLASH_WCNT_1                0x00001F00      /* waitcount1 */
+#define SSB_FLASH_WCNT_1_SHIFT          8
+#define SSB_FLASH_WCNT_2                0x001F0000      /* waitcount2 */
+#define SSB_FLASH_WCNT_2_SHIFT          16
+#define SSB_FLASH_WCNT_3                0x1F000000      /* waitcount3 */
+#define SSB_FLASH_WCNT_3_SHIFT          24
+
+/* watchdog */
+#define SSB_EXTIF_WATCHDOG_CLK          48000000        /* Hz */
+
+
+
+#ifdef CONFIG_SSB_DRIVER_EXTIF
+
+struct ssb_extif {
+        struct ssb_device *dev;
+};
+
+static inline bool ssb_extif_available(struct ssb_extif *extif)
+{
+        return (extif->dev != NULL);
+}
+
+extern void ssb_extif_get_clockcontrol(struct ssb_extif *extif,
+                                       u32 *plltype, u32 *n, u32 *m);
+
+extern void ssb_extif_timing_init(struct ssb_extif *extif,
+                                  unsigned long ns);
+
+u32 ssb_extif_gpio_in(struct ssb_extif *extif, u32 mask);
+
+void ssb_extif_gpio_out(struct ssb_extif *extif, u32 mask, u32 value);
+
+void ssb_extif_gpio_outen(struct ssb_extif *extif, u32 mask, u32 value);
+
+#ifdef CONFIG_SSB_SERIAL
+extern int ssb_extif_serial_init(struct ssb_extif *extif,
+                                 struct ssb_serial_port *ports);
+#endif /* CONFIG_SSB_SERIAL */
+
+
+#else /* CONFIG_SSB_DRIVER_EXTIF */
+/* extif disabled */
+
+struct ssb_extif {
+};
+
+static inline bool ssb_extif_available(struct ssb_extif *extif)
+{
+        return 0;
+}
+
+static inline
+void ssb_extif_get_clockcontrol(struct ssb_extif *extif,
+                                u32 *plltype, u32 *n, u32 *m)
+{
+}
+
+#endif /* CONFIG_SSB_DRIVER_EXTIF */
+#endif /* LINUX_SSB_EXTIFCORE_H_ */
diff --git a/include/linux/ssb/ssb_driver_mips.h b/include/linux/ssb/ssb_driver_mips.h
new file mode 100644
index 000000000000..5f44e9740cd2
--- /dev/null
+++ b/include/linux/ssb/ssb_driver_mips.h
@@ -0,0 +1,46 @@
+#ifndef LINUX_SSB_MIPSCORE_H_
+#define LINUX_SSB_MIPSCORE_H_
+
+#ifdef CONFIG_SSB_DRIVER_MIPS
+
+struct ssb_device;
+
+struct ssb_serial_port {
+        void *regs;
+        unsigned long clockspeed;
+        unsigned int irq;
+        unsigned int baud_base;
+        unsigned int reg_shift;
+};
+
+
+struct ssb_mipscore {
+        struct ssb_device *dev;
+
+        int nr_serial_ports;
+        struct ssb_serial_port serial_ports[4];
+
+        u8 flash_buswidth;
+        u32 flash_window;
+        u32 flash_window_size;
+};
+
+extern void ssb_mipscore_init(struct ssb_mipscore *mcore);
+extern u32 ssb_cpu_clock(struct ssb_mipscore *mcore);
+
+extern unsigned int ssb_mips_irq(struct ssb_device *dev);
+
+
+#else /* CONFIG_SSB_DRIVER_MIPS */
+
+struct ssb_mipscore {
+};
+
+static inline
+void ssb_mipscore_init(struct ssb_mipscore *mcore)
+{
+}
+
+#endif /* CONFIG_SSB_DRIVER_MIPS */
+
+#endif /* LINUX_SSB_MIPSCORE_H_ */
diff --git a/include/linux/ssb/ssb_driver_pci.h b/include/linux/ssb/ssb_driver_pci.h
new file mode 100644
index 000000000000..9cfffb7b1a27
--- /dev/null
+++ b/include/linux/ssb/ssb_driver_pci.h
@@ -0,0 +1,106 @@
+#ifndef LINUX_SSB_PCICORE_H_
+#define LINUX_SSB_PCICORE_H_
+
+#ifdef CONFIG_SSB_DRIVER_PCICORE
+
+/* PCI core registers. */
+#define SSB_PCICORE_CTL                 0x0000  /* PCI Control */
+#define  SSB_PCICORE_CTL_RST_OE         0x00000001 /* PCI_RESET Output Enable */
+#define  SSB_PCICORE_CTL_RST            0x00000002 /* PCI_RESET driven out to pin */
+#define  SSB_PCICORE_CTL_CLK_OE         0x00000004 /* Clock gate Output Enable */
+#define  SSB_PCICORE_CTL_CLK            0x00000008 /* Gate for clock driven out to pin */
+#define SSB_PCICORE_ARBCTL              0x0010  /* PCI Arbiter Control */
+#define  SSB_PCICORE_ARBCTL_INTERN      0x00000001 /* Use internal arbiter */
+#define  SSB_PCICORE_ARBCTL_EXTERN      0x00000002 /* Use external arbiter */
+#define  SSB_PCICORE_ARBCTL_PARKID      0x00000006 /* Mask, selects which agent is parked on an idle bus */
+#define   SSB_PCICORE_ARBCTL_PARKID_LAST        0x00000000 /* Last requestor */
+#define   SSB_PCICORE_ARBCTL_PARKID_4710        0x00000002 /* 4710 */
+#define   SSB_PCICORE_ARBCTL_PARKID_EXT0        0x00000004 /* External requestor 0 */
+#define   SSB_PCICORE_ARBCTL_PARKID_EXT1        0x00000006 /* External requestor 1 */
+#define SSB_PCICORE_ISTAT               0x0020  /* Interrupt status */
+#define  SSB_PCICORE_ISTAT_INTA         0x00000001 /* PCI INTA# */
+#define  SSB_PCICORE_ISTAT_INTB         0x00000002 /* PCI INTB# */
+#define  SSB_PCICORE_ISTAT_SERR         0x00000004 /* PCI SERR# (write to clear) */
+#define  SSB_PCICORE_ISTAT_PERR         0x00000008 /* PCI PERR# (write to clear) */
+#define  SSB_PCICORE_ISTAT_PME          0x00000010 /* PCI PME# */
+#define SSB_PCICORE_IMASK               0x0024  /* Interrupt mask */
+#define  SSB_PCICORE_IMASK_INTA         0x00000001 /* PCI INTA# */
+#define  SSB_PCICORE_IMASK_INTB         0x00000002 /* PCI INTB# */
+#define  SSB_PCICORE_IMASK_SERR         0x00000004 /* PCI SERR# */
+#define  SSB_PCICORE_IMASK_PERR         0x00000008 /* PCI PERR# */
+#define  SSB_PCICORE_IMASK_PME          0x00000010 /* PCI PME# */
+#define SSB_PCICORE_MBOX                0x0028  /* Backplane to PCI Mailbox */
+#define  SSB_PCICORE_MBOX_F0_0          0x00000100 /* PCI function 0, INT 0 */
+#define  SSB_PCICORE_MBOX_F0_1          0x00000200 /* PCI function 0, INT 1 */
+#define  SSB_PCICORE_MBOX_F1_0          0x00000400 /* PCI function 1, INT 0 */
+#define  SSB_PCICORE_MBOX_F1_1          0x00000800 /* PCI function 1, INT 1 */
+#define  SSB_PCICORE_MBOX_F2_0          0x00001000 /* PCI function 2, INT 0 */
+#define  SSB_PCICORE_MBOX_F2_1          0x00002000 /* PCI function 2, INT 1 */
+#define  SSB_PCICORE_MBOX_F3_0          0x00004000 /* PCI function 3, INT 0 */
+#define  SSB_PCICORE_MBOX_F3_1          0x00008000 /* PCI function 3, INT 1 */
+#define SSB_PCICORE_BCAST_ADDR          0x0050  /* Backplane Broadcast Address */
+#define  SSB_PCICORE_BCAST_ADDR_MASK    0x000000FF
+#define SSB_PCICORE_BCAST_DATA          0x0054  /* Backplane Broadcast Data */
+#define SSB_PCICORE_GPIO_IN             0x0060  /* rev >= 2 only */
+#define SSB_PCICORE_GPIO_OUT            0x0064  /* rev >= 2 only */
+#define SSB_PCICORE_GPIO_ENABLE         0x0068  /* rev >= 2 only */
+#define SSB_PCICORE_GPIO_CTL            0x006C  /* rev >= 2 only */
+#define SSB_PCICORE_SBTOPCI0            0x0100  /* Backplane to PCI translation 0 (sbtopci0) */
+#define  SSB_PCICORE_SBTOPCI0_MASK      0xFC000000
+#define SSB_PCICORE_SBTOPCI1            0x0104  /* Backplane to PCI translation 1 (sbtopci1) */
+#define  SSB_PCICORE_SBTOPCI1_MASK      0xFC000000
+#define SSB_PCICORE_SBTOPCI2            0x0108  /* Backplane to PCI translation 2 (sbtopci2) */
+#define  SSB_PCICORE_SBTOPCI2_MASK      0xC0000000
+
+/* SBtoPCIx */
+#define SSB_PCICORE_SBTOPCI_MEM         0x00000000
+#define SSB_PCICORE_SBTOPCI_IO          0x00000001
+#define SSB_PCICORE_SBTOPCI_CFG0        0x00000002
+#define SSB_PCICORE_SBTOPCI_CFG1        0x00000003
+#define SSB_PCICORE_SBTOPCI_PREF        0x00000004 /* Prefetch enable */
+#define SSB_PCICORE_SBTOPCI_BURST       0x00000008 /* Burst enable */
+#define SSB_PCICORE_SBTOPCI_MRM         0x00000020 /* Memory Read Multiple */
+#define SSB_PCICORE_SBTOPCI_RC          0x00000030 /* Read Command mask (rev >= 11) */
+#define  SSB_PCICORE_SBTOPCI_RC_READ    0x00000000 /* Memory read */
+#define  SSB_PCICORE_SBTOPCI_RC_READL   0x00000010 /* Memory read line */
+#define  SSB_PCICORE_SBTOPCI_RC_READM   0x00000020 /* Memory read multiple */
+
+
+/* PCIcore specific boardflags */
+#define SSB_PCICORE_BFL_NOPCI           0x00000400 /* Board leaves PCI floating */
+
+
+struct ssb_pcicore {
+        struct ssb_device *dev;
+        u8 setup_done:1;
+        u8 hostmode:1;
+        u8 cardbusmode:1;
+};
+
+extern void ssb_pcicore_init(struct ssb_pcicore *pc);
+
+/* Enable IRQ routing for a specific device */
+extern int ssb_pcicore_dev_irqvecs_enable(struct ssb_pcicore *pc,
+                                          struct ssb_device *dev);
+
+
+#else /* CONFIG_SSB_DRIVER_PCICORE */
+
+
+struct ssb_pcicore {
+};
+
+static inline
+void ssb_pcicore_init(struct ssb_pcicore *pc)
+{
+}
+
+static inline
+int ssb_pcicore_dev_irqvecs_enable(struct ssb_pcicore *pc,
+                                   struct ssb_device *dev)
+{
+        return 0;
+}
+
+#endif /* CONFIG_SSB_DRIVER_PCICORE */
+#endif /* LINUX_SSB_PCICORE_H_ */
diff --git a/include/linux/ssb/ssb_regs.h b/include/linux/ssb/ssb_regs.h
new file mode 100644
index 000000000000..47c7c71a5acf
--- /dev/null
+++ b/include/linux/ssb/ssb_regs.h
@@ -0,0 +1,292 @@
+#ifndef LINUX_SSB_REGS_H_
+#define LINUX_SSB_REGS_H_
+
+
+/* SiliconBackplane Address Map.
+ * All regions may not exist on all chips.
+ */
+#define SSB_SDRAM_BASE          0x00000000U     /* Physical SDRAM */
+#define SSB_PCI_MEM             0x08000000U     /* Host Mode sb2pcitranslation0 (64 MB) */
+#define SSB_PCI_CFG             0x0c000000U     /* Host Mode sb2pcitranslation1 (64 MB) */
+#define SSB_SDRAM_SWAPPED       0x10000000U     /* Byteswapped Physical SDRAM */
+#define SSB_ENUM_BASE           0x18000000U     /* Enumeration space base */
+#define SSB_ENUM_LIMIT          0x18010000U     /* Enumeration space limit */
+
+#define SSB_FLASH2              0x1c000000U     /* Flash Region 2 (region 1 shadowed here) */
+#define SSB_FLASH2_SZ           0x02000000U     /* Size of Flash Region 2 */
+
+#define SSB_EXTIF_BASE          0x1f000000U     /* External Interface region base address */
+#define SSB_FLASH1              0x1fc00000U     /* Flash Region 1 */
+#define SSB_FLASH1_SZ           0x00400000U     /* Size of Flash Region 1 */
+
+#define SSB_PCI_DMA             0x40000000U     /* Client Mode sb2pcitranslation2 (1 GB) */
+#define SSB_PCI_DMA_SZ          0x40000000U     /* Client Mode sb2pcitranslation2 size in bytes */
+#define SSB_PCIE_DMA_L32        0x00000000U     /* PCIE Client Mode sb2pcitranslation2 (2 ZettaBytes), low 32 bits */
+#define SSB_PCIE_DMA_H32        0x80000000U     /* PCIE Client Mode sb2pcitranslation2 (2 ZettaBytes), high 32 bits */
+#define SSB_EUART               (SSB_EXTIF_BASE + 0x00800000)
+#define SSB_LED                 (SSB_EXTIF_BASE + 0x00900000)
+
+
+/* Enumeration space constants */
+#define SSB_CORE_SIZE           0x1000  /* Size of a core MMIO area */
+#define SSB_MAX_NR_CORES        ((SSB_ENUM_LIMIT - SSB_ENUM_BASE) / SSB_CORE_SIZE)
+
+
+/* mips address */
+#define SSB_EJTAG               0xff200000      /* MIPS EJTAG space (2M) */
+
+
+/* SSB PCI config space registers. */
+#define SSB_PMCSR               0x44
+#define  SSB_PE                 0x100
+#define SSB_BAR0_WIN            0x80    /* Backplane address space 0 */
+#define SSB_BAR1_WIN            0x84    /* Backplane address space 1 */
+#define SSB_SPROMCTL            0x88    /* SPROM control */
+#define  SSB_SPROMCTL_WE        0x10    /* SPROM write enable */
+#define SSB_BAR1_CONTROL        0x8c    /* Address space 1 burst control */
+#define SSB_PCI_IRQS            0x90    /* PCI interrupts */
+#define SSB_PCI_IRQMASK         0x94    /* PCI IRQ control and mask (pcirev >= 6 only) */
+#define SSB_BACKPLANE_IRQS      0x98    /* Backplane Interrupts */
+#define SSB_GPIO_IN             0xB0    /* GPIO Input (pcirev >= 3 only) */
+#define SSB_GPIO_OUT            0xB4    /* GPIO Output (pcirev >= 3 only) */
+#define SSB_GPIO_OUT_ENABLE     0xB8    /* GPIO Output Enable/Disable (pcirev >= 3 only) */
+#define  SSB_GPIO_SCS           0x10    /* PCI config space bit 4 for 4306c0 slow clock source */
+#define  SSB_GPIO_HWRAD         0x20    /* PCI config space GPIO 13 for hw radio disable */
+#define  SSB_GPIO_XTAL          0x40    /* PCI config space GPIO 14 for Xtal powerup */
+#define  SSB_GPIO_PLL           0x80    /* PCI config space GPIO 15 for PLL powerdown */
+
+
+#define SSB_BAR0_MAX_RETRIES    50
+
+/* Silicon backplane configuration register definitions */
+#define SSB_IPSFLAG             0x0F08
+#define  SSB_IPSFLAG_IRQ1       0x0000003F /* which sbflags get routed to mips interrupt 1 */
+#define  SSB_IPSFLAG_IRQ1_SHIFT 0
+#define  SSB_IPSFLAG_IRQ2       0x00003F00 /* which sbflags get routed to mips interrupt 2 */
+#define  SSB_IPSFLAG_IRQ2_SHIFT 8
+#define  SSB_IPSFLAG_IRQ3       0x003F0000 /* which sbflags get routed to mips interrupt 3 */
+#define  SSB_IPSFLAG_IRQ3_SHIFT 16
+#define  SSB_IPSFLAG_IRQ4       0x3F000000 /* which sbflags get routed to mips interrupt 4 */
+#define  SSB_IPSFLAG_IRQ4_SHIFT 24
+#define SSB_TPSFLAG             0x0F18
+#define  SSB_TPSFLAG_BPFLAG     0x0000003F /* Backplane flag # */
+#define  SSB_TPSFLAG_ALWAYSIRQ  0x00000040 /* IRQ is always sent on the Backplane */
+#define SSB_TMERRLOGA           0x0F48
+#define SSB_TMERRLOG            0x0F50
+#define SSB_ADMATCH3            0x0F60
+#define SSB_ADMATCH2            0x0F68
+#define SSB_ADMATCH1            0x0F70
+#define SSB_IMSTATE             0x0F90     /* SB Initiator Agent State */
+#define  SSB_IMSTATE_PC         0x0000000f /* Pipe Count */
+#define  SSB_IMSTATE_AP_MASK    0x00000030 /* Arbitration Priority */
+#define  SSB_IMSTATE_AP_BOTH    0x00000000 /* Use both timeslices and token */
+#define  SSB_IMSTATE_AP_TS      0x00000010 /* Use timeslices only */
+#define  SSB_IMSTATE_AP_TK      0x00000020 /* Use token only */
+#define  SSB_IMSTATE_AP_RSV     0x00000030 /* Reserved */
+#define  SSB_IMSTATE_IBE        0x00020000 /* In Band Error */
+#define  SSB_IMSTATE_TO         0x00040000 /* Timeout */
+#define SSB_INTVEC              0x0F94     /* SB Interrupt Mask */
+#define  SSB_INTVEC_PCI         0x00000001 /* Enable interrupts for PCI */
+#define  SSB_INTVEC_ENET0       0x00000002 /* Enable interrupts for enet 0 */
+#define  SSB_INTVEC_ILINE20     0x00000004 /* Enable interrupts for iline20 */
+#define  SSB_INTVEC_CODEC       0x00000008 /* Enable interrupts for v90 codec */
+#define  SSB_INTVEC_USB         0x00000010 /* Enable interrupts for usb */
+#define  SSB_INTVEC_EXTIF       0x00000020 /* Enable interrupts for external i/f */
+#define  SSB_INTVEC_ENET1       0x00000040 /* Enable interrupts for enet 1 */
+#define SSB_TMSLOW              0x0F98     /* SB Target State Low */
+#define  SSB_TMSLOW_RESET       0x00000001 /* Reset */
+#define  SSB_TMSLOW_REJECT_22   0x00000002 /* Reject (Backplane rev 2.2) */
+#define  SSB_TMSLOW_REJECT_23   0x00000004 /* Reject (Backplane rev 2.3) */
+#define  SSB_TMSLOW_CLOCK       0x00010000 /* Clock Enable */
+#define  SSB_TMSLOW_FGC         0x00020000 /* Force Gated Clocks On */
+#define  SSB_TMSLOW_PE          0x40000000 /* Power Management Enable */
+#define  SSB_TMSLOW_BE          0x80000000 /* BIST Enable */
+#define SSB_TMSHIGH             0x0F9C     /* SB Target State High */
+#define  SSB_TMSHIGH_SERR       0x00000001 /* S-error */
+#define  SSB_TMSHIGH_INT        0x00000002 /* Interrupt */
+#define  SSB_TMSHIGH_BUSY       0x00000004 /* Busy */
+#define  SSB_TMSHIGH_TO         0x00000020 /* Timeout. Backplane rev >= 2.3 only */
+#define  SSB_TMSHIGH_COREFL     0x1FFF0000 /* Core specific flags */
+#define  SSB_TMSHIGH_COREFL_SHIFT       16
+#define  SSB_TMSHIGH_DMA64      0x10000000 /* 64bit DMA supported */
+#define  SSB_TMSHIGH_GCR        0x20000000 /* Gated Clock Request */
+#define  SSB_TMSHIGH_BISTF      0x40000000 /* BIST Failed */
+#define  SSB_TMSHIGH_BISTD      0x80000000 /* BIST Done */
+#define SSB_BWA0                0x0FA0
+#define SSB_IMCFGLO             0x0FA8
+#define  SSB_IMCFGLO_SERTO      0x00000007 /* Service timeout */
+#define  SSB_IMCFGLO_REQTO      0x00000070 /* Request timeout */
+#define  SSB_IMCFGLO_REQTO_SHIFT        4
+#define  SSB_IMCFGLO_CONNID     0x00FF0000 /* Connection ID */
+#define  SSB_IMCFGLO_CONNID_SHIFT       16
+#define SSB_IMCFGHI             0x0FAC
+#define SSB_ADMATCH0            0x0FB0
+#define SSB_TMCFGLO             0x0FB8
+#define SSB_TMCFGHI             0x0FBC
+#define SSB_BCONFIG             0x0FC0
+#define SSB_BSTATE              0x0FC8
+#define SSB_ACTCFG              0x0FD8
+#define SSB_FLAGST              0x0FE8
+#define SSB_IDLOW               0x0FF8
+#define  SSB_IDLOW_CFGSP        0x00000003 /* Config Space */
+#define  SSB_IDLOW_ADDRNGE      0x00000038 /* Address Ranges supported */
+#define  SSB_IDLOW_ADDRNGE_SHIFT        3
+#define  SSB_IDLOW_SYNC         0x00000040
+#define  SSB_IDLOW_INITIATOR    0x00000080
+#define  SSB_IDLOW_MIBL         0x00000F00 /* Minimum Backplane latency */
+#define  SSB_IDLOW_MIBL_SHIFT   8
+#define  SSB_IDLOW_MABL         0x0000F000 /* Maximum Backplane latency */
+#define  SSB_IDLOW_MABL_SHIFT   12
+#define  SSB_IDLOW_TIF          0x00010000 /* This Initiator is first */
+#define  SSB_IDLOW_CCW          0x000C0000 /* Cycle counter width */
+#define  SSB_IDLOW_CCW_SHIFT    18
+#define  SSB_IDLOW_TPT          0x00F00000 /* Target ports */
+#define  SSB_IDLOW_TPT_SHIFT    20
+#define  SSB_IDLOW_INITP        0x0F000000 /* Initiator ports */
+#define  SSB_IDLOW_INITP_SHIFT  24
+#define  SSB_IDLOW_SSBREV       0xF0000000 /* Sonics Backplane Revision code */
+#define  SSB_IDLOW_SSBREV_22    0x00000000 /* <= 2.2 */
+#define  SSB_IDLOW_SSBREV_23    0x10000000 /* 2.3 */
+#define SSB_IDHIGH              0x0FFC     /* SB Identification High */
+#define  SSB_IDHIGH_RCLO        0x0000000F /* Revision Code (low part) */
+#define  SSB_IDHIGH_CC          0x00008FF0 /* Core Code */
+#define  SSB_IDHIGH_CC_SHIFT    4
+#define  SSB_IDHIGH_RCHI        0x00007000 /* Revision Code (high part) */
+#define  SSB_IDHIGH_RCHI_SHIFT  8          /* yes, shift 8 is right */
+#define  SSB_IDHIGH_VC          0xFFFF0000 /* Vendor Code */
+#define  SSB_IDHIGH_VC_SHIFT    16
+
+/* SPROM shadow area. If not otherwise noted, fields are
+ * two bytes wide. Note that the SPROM can _only_ be read
+ * in two-byte quantinies.
+ */
+#define SSB_SPROMSIZE_WORDS             64
+#define SSB_SPROMSIZE_BYTES             (SSB_SPROMSIZE_WORDS * sizeof(u16))
+#define SSB_SPROM_BASE                  0x1000
+#define SSB_SPROM_REVISION              0x107E
+#define  SSB_SPROM_REVISION_REV         0x00FF  /* SPROM Revision number */
+#define  SSB_SPROM_REVISION_CRC         0xFF00  /* SPROM CRC8 value */
+#define  SSB_SPROM_REVISION_CRC_SHIFT   8
+/* SPROM Revision 1 */
+#define SSB_SPROM1_SPID                 0x1004  /* Subsystem Product ID for PCI */
+#define SSB_SPROM1_SVID                 0x1006  /* Subsystem Vendor ID for PCI */
+#define SSB_SPROM1_PID                  0x1008  /* Product ID for PCI */
+#define SSB_SPROM1_IL0MAC               0x1048  /* 6 bytes MAC address for 802.11b/g */
+#define SSB_SPROM1_ET0MAC               0x104E  /* 6 bytes MAC address for Ethernet */
+#define SSB_SPROM1_ET1MAC               0x1054  /* 6 bytes MAC address for 802.11a */
+#define SSB_SPROM1_ETHPHY               0x105A  /* Ethernet PHY settings */
+#define  SSB_SPROM1_ETHPHY_ET0A         0x001F  /* MII Address for enet0 */
+#define  SSB_SPROM1_ETHPHY_ET1A         0x03E0  /* MII Address for enet1 */
+#define  SSB_SPROM1_ETHPHY_ET1A_SHIFT   5
+#define  SSB_SPROM1_ETHPHY_ET0M         (1<<14) /* MDIO for enet0 */
+#define  SSB_SPROM1_ETHPHY_ET1M         (1<<15) /* MDIO for enet1 */
+#define SSB_SPROM1_BINF                 0x105C  /* Board info */
+#define  SSB_SPROM1_BINF_BREV           0x00FF  /* Board Revision */
+#define  SSB_SPROM1_BINF_CCODE          0x0F00  /* Country Code */
+#define  SSB_SPROM1_BINF_CCODE_SHIFT    8
+#define  SSB_SPROM1_BINF_ANTA           0x3000  /* Available A-PHY antennas */
+#define  SSB_SPROM1_BINF_ANTA_SHIFT     12
+#define  SSB_SPROM1_BINF_ANTBG          0xC000  /* Available B-PHY antennas */
+#define  SSB_SPROM1_BINF_ANTBG_SHIFT    14
+#define SSB_SPROM1_PA0B0                0x105E
+#define SSB_SPROM1_PA0B1                0x1060
+#define SSB_SPROM1_PA0B2                0x1062
+#define SSB_SPROM1_GPIOA                0x1064  /* General Purpose IO pins 0 and 1 */
+#define  SSB_SPROM1_GPIOA_P0            0x00FF  /* Pin 0 */
+#define  SSB_SPROM1_GPIOA_P1            0xFF00  /* Pin 1 */
+#define  SSB_SPROM1_GPIOA_P1_SHIFT      8
+#define SSB_SPROM1_GPIOB                0x1066  /* General Purpuse IO pins 2 and 3 */
+#define  SSB_SPROM1_GPIOB_P2            0x00FF  /* Pin 2 */
+#define  SSB_SPROM1_GPIOB_P3            0xFF00  /* Pin 3 */
+#define  SSB_SPROM1_GPIOB_P3_SHIFT      8
+#define SSB_SPROM1_MAXPWR               0x1068  /* Power Amplifier Max Power */
+#define  SSB_SPROM1_MAXPWR_BG           0x00FF  /* B-PHY and G-PHY (in dBm Q5.2) */
+#define  SSB_SPROM1_MAXPWR_A            0xFF00  /* A-PHY (in dBm Q5.2) */
+#define  SSB_SPROM1_MAXPWR_A_SHIFT      8
+#define SSB_SPROM1_PA1B0                0x106A
+#define SSB_SPROM1_PA1B1                0x106C
+#define SSB_SPROM1_PA1B2                0x106E
+#define SSB_SPROM1_ITSSI                0x1070  /* Idle TSSI Target */
+#define  SSB_SPROM1_ITSSI_BG            0x00FF  /* B-PHY and G-PHY*/
+#define  SSB_SPROM1_ITSSI_A             0xFF00  /* A-PHY */
+#define  SSB_SPROM1_ITSSI_A_SHIFT       8
+#define SSB_SPROM1_BFLLO                0x1072  /* Boardflags (low 16 bits) */
+#define SSB_SPROM1_AGAIN                0x1074  /* Antenna Gain (in dBm Q5.2) */
+#define  SSB_SPROM1_AGAIN_A             0x00FF  /* A-PHY */
+#define  SSB_SPROM1_AGAIN_BG            0xFF00  /* B-PHY and G-PHY */
+#define  SSB_SPROM1_AGAIN_BG_SHIFT      8
+#define SSB_SPROM1_OEM                  0x1076  /* 8 bytes OEM string (rev 1 only) */
+/* SPROM Revision 2 (inherits from rev 1) */
+#define SSB_SPROM2_BFLHI                0x1038  /* Boardflags (high 16 bits) */
+#define SSB_SPROM2_MAXP_A               0x103A  /* A-PHY Max Power */
+#define  SSB_SPROM2_MAXP_A_HI           0x00FF  /* Max Power High */
+#define  SSB_SPROM2_MAXP_A_LO           0xFF00  /* Max Power Low */
+#define  SSB_SPROM2_MAXP_A_LO_SHIFT     8
+#define SSB_SPROM2_PA1LOB0              0x103C  /* A-PHY PowerAmplifier Low Settings */
+#define SSB_SPROM2_PA1LOB1              0x103E  /* A-PHY PowerAmplifier Low Settings */
+#define SSB_SPROM2_PA1LOB2              0x1040  /* A-PHY PowerAmplifier Low Settings */
+#define SSB_SPROM2_PA1HIB0              0x1042  /* A-PHY PowerAmplifier High Settings */
+#define SSB_SPROM2_PA1HIB1              0x1044  /* A-PHY PowerAmplifier High Settings */
+#define SSB_SPROM2_PA1HIB2              0x1046  /* A-PHY PowerAmplifier High Settings */
+#define SSB_SPROM2_OPO                  0x1078  /* OFDM Power Offset from CCK Level */
+#define  SSB_SPROM2_OPO_VALUE           0x00FF
+#define  SSB_SPROM2_OPO_UNUSED          0xFF00
+#define SSB_SPROM2_CCODE                0x107C  /* Two char Country Code */
+/* SPROM Revision 3 (inherits from rev 2) */
+#define SSB_SPROM3_OFDMAPO              0x102C  /* A-PHY OFDM Mid Power Offset (4 bytes, BigEndian) */
+#define SSB_SPROM3_OFDMALPO             0x1030  /* A-PHY OFDM Low Power Offset (4 bytes, BigEndian) */
+#define SSB_SPROM3_OFDMAHPO             0x1034  /* A-PHY OFDM High Power Offset (4 bytes, BigEndian) */
+#define SSB_SPROM3_GPIOLDC              0x1042  /* GPIO LED Powersave Duty Cycle (4 bytes, BigEndian) */
+#define  SSB_SPROM3_GPIOLDC_OFF         0x0000FF00      /* Off Count */
+#define  SSB_SPROM3_GPIOLDC_OFF_SHIFT   8
+#define  SSB_SPROM3_GPIOLDC_ON          0x00FF0000      /* On Count */
+#define  SSB_SPROM3_GPIOLDC_ON_SHIFT    16
+#define SSB_SPROM3_CCKPO                0x1078  /* CCK Power Offset */
+#define  SSB_SPROM3_CCKPO_1M            0x000F  /* 1M Rate PO */
+#define  SSB_SPROM3_CCKPO_2M            0x00F0  /* 2M Rate PO */
+#define  SSB_SPROM3_CCKPO_2M_SHIFT      4
+#define  SSB_SPROM3_CCKPO_55M           0x0F00  /* 5.5M Rate PO */
+#define  SSB_SPROM3_CCKPO_55M_SHIFT     8
+#define  SSB_SPROM3_CCKPO_11M           0xF000  /* 11M Rate PO */
+#define  SSB_SPROM3_CCKPO_11M_SHIFT     12
+#define  SSB_SPROM3_OFDMGPO             0x107A  /* G-PHY OFDM Power Offset (4 bytes, BigEndian) */
+
+/* Values for SSB_SPROM1_BINF_CCODE */
+enum {
+        SSB_SPROM1CCODE_WORLD = 0,
+        SSB_SPROM1CCODE_THAILAND,
+        SSB_SPROM1CCODE_ISRAEL,
+        SSB_SPROM1CCODE_JORDAN,
+        SSB_SPROM1CCODE_CHINA,
+        SSB_SPROM1CCODE_JAPAN,
+        SSB_SPROM1CCODE_USA_CANADA_ANZ,
+        SSB_SPROM1CCODE_EUROPE,
+        SSB_SPROM1CCODE_USA_LOW,
+        SSB_SPROM1CCODE_JAPAN_HIGH,
+        SSB_SPROM1CCODE_ALL,
+        SSB_SPROM1CCODE_NONE,
+};
+
+/* Address-Match values and masks (SSB_ADMATCHxxx) */
+#define SSB_ADM_TYPE                    0x00000003      /* Address type */
+#define  SSB_ADM_TYPE0                  0
+#define  SSB_ADM_TYPE1                  1
+#define  SSB_ADM_TYPE2                  2
+#define SSB_ADM_AD64                    0x00000004
+#define SSB_ADM_SZ0                     0x000000F8      /* Type0 size */
+#define SSB_ADM_SZ0_SHIFT               3
+#define SSB_ADM_SZ1                     0x000001F8      /* Type1 size */
+#define SSB_ADM_SZ1_SHIFT               3
+#define SSB_ADM_SZ2                     0x000001F8      /* Type2 size */
+#define SSB_ADM_SZ2_SHIFT               3
+#define SSB_ADM_EN                      0x00000400      /* Enable */
+#define SSB_ADM_NEG                     0x00000800      /* Negative decode */
+#define SSB_ADM_BASE0                   0xFFFFFF00      /* Type0 base address */
+#define SSB_ADM_BASE0_SHIFT             8
+#define SSB_ADM_BASE1                   0xFFFFF000      /* Type1 base address for the core */
+#define SSB_ADM_BASE1_SHIFT             12
+#define SSB_ADM_BASE2                   0xFFFF0000      /* Type2 base address for the core */
+#define SSB_ADM_BASE2_SHIFT             16
+
+
+#endif /* LINUX_SSB_REGS_H_ */
diff --git a/include/linux/tc_act/tc_nat.h b/include/linux/tc_act/tc_nat.h
new file mode 100644
index 000000000000..e7cf31e8ba79
--- /dev/null
+++ b/include/linux/tc_act/tc_nat.h
@@ -0,0 +1,29 @@
+#ifndef __LINUX_TC_NAT_H
+#define __LINUX_TC_NAT_H
+
+#include <linux/pkt_cls.h>
+#include <linux/types.h>
+
+#define TCA_ACT_NAT 9
+
+enum
+{
+        TCA_NAT_UNSPEC,
+        TCA_NAT_PARMS,
+        TCA_NAT_TM,
+        __TCA_NAT_MAX
+};
+#define TCA_NAT_MAX (__TCA_NAT_MAX - 1)
+
+#define TCA_NAT_FLAG_EGRESS 1
+
+struct tc_nat
+{
+        tc_gen;
+        __be32 old_addr;
+        __be32 new_addr;
+        __be32 mask;
+        __u32 flags;
+};
+
+#endif
diff --git a/include/linux/tcp.h b/include/linux/tcp.h
index c6b9f92e8289..c5b94c1a5ee2 100644
--- a/include/linux/tcp.h
+++ b/include/linux/tcp.h
@@ -304,7 +304,6 @@ struct tcp_sock {
         u32     rtt_seq;        /* sequence number to update rttvar     */
 
         u32     packets_out;    /* Packets which are "in flight"        */
-        u32     left_out;       /* Packets which leaved network */
         u32     retrans_out;    /* Retransmitted packets out            */
 /*
  *      Options received (usually on last packet, some only on SYN packets).
@@ -333,6 +332,9 @@ struct tcp_sock {
 
         struct tcp_sack_block_wire recv_sack_cache[4];
 
+        u32     highest_sack;   /* Start seq of globally highest revd SACK
+                                 * (validity guaranteed only if sacked_out > 0) */
+
         /* from STCP, retrans queue hinting */
         struct sk_buff* lost_skb_hint;
 
@@ -341,10 +343,12 @@ struct tcp_sock {
         struct sk_buff *forward_skb_hint;
         struct sk_buff *fastpath_skb_hint;
 
-        int     fastpath_cnt_hint;
+        int     fastpath_cnt_hint;      /* Lags behind by current skb's pcount
+                                         * compared to respective fackets_out */
         int     lost_cnt_hint;
         int     retransmit_cnt_hint;
-        int     forward_cnt_hint;
+
+        u32     lost_retrans_low;       /* Sent seq after any rxmit (lowest) */
 
         u16     advmss;         /* Advertised MSS                       */
         u16     prior_ssthresh; /* ssthresh saved at recovery start     */
diff --git a/include/linux/zlib.h b/include/linux/zlib.h
index 9e3192a7dc6f..40c49cb3eb51 100644
--- a/include/linux/zlib.h
+++ b/include/linux/zlib.h
@@ -82,7 +82,7 @@
 struct internal_state;
 
 typedef struct z_stream_s {
-    Byte    *next_in;   /* next input byte */
+    const Byte *next_in;   /* next input byte */
     uInt     avail_in;  /* number of bytes available at next_in */
     uLong    total_in;  /* total nb of input bytes read so far */
 
@@ -699,4 +699,8 @@ extern int zlib_inflateInit2(z_streamp strm, int  windowBits);
     struct internal_state {int dummy;}; /* hack for buggy compilers */
 #endif
 
+/* Utility function: initialize zlib, unpack binary blob, clean up zlib,
+ * return len or negative error code. */
+extern int zlib_inflate_blob(void *dst, unsigned dst_sz, const void *src, unsigned src_sz);
+
 #endif /* _ZLIB_H */
diff --git a/include/net/9p/9p.h b/include/net/9p/9p.h
index 88884d39f28f..7726ff41c3e6 100644
--- a/include/net/9p/9p.h
+++ b/include/net/9p/9p.h
@@ -412,6 +412,18 @@ int p9_idpool_check(int id, struct p9_idpool *p);
 
 int p9_error_init(void);
 int p9_errstr2errno(char *, int);
+
+#ifdef CONFIG_SYSCTL
 int __init p9_sysctl_register(void);
 void __exit p9_sysctl_unregister(void);
+#else
+static inline int p9_sysctl_register(void)
+{
+        return 0;
+}
+static inline void p9_sysctl_unregister(void)
+{
+}
+#endif
+
 #endif /* NET_9P_H */
diff --git a/include/net/ah.h b/include/net/ah.h
index 8f257c159902..ae1c322f4242 100644
--- a/include/net/ah.h
+++ b/include/net/ah.h
@@ -9,8 +9,6 @@
 
 struct ah_data
 {
-        u8                      *key;
-        int                     key_len;
         u8                      *work_icv;
         int                     icv_full_len;
         int                     icv_trunc_len;
@@ -40,4 +38,11 @@ out:
         return err;
 }
 
+struct ip_auth_hdr;
+
+static inline struct ip_auth_hdr *ip_auth_hdr(const struct sk_buff *skb)
+{
+        return (struct ip_auth_hdr *)skb_transport_header(skb);
+}
+
 #endif
diff --git a/include/net/ax25.h b/include/net/ax25.h
index 99a4e364c74a..4e3cd93f81fc 100644
--- a/include/net/ax25.h
+++ b/include/net/ax25.h
@@ -363,8 +363,11 @@ extern int  ax25_rx_iframe(ax25_cb *, struct sk_buff *);
 extern int  ax25_kiss_rcv(struct sk_buff *, struct net_device *, struct packet_type *, struct net_device *);
 
 /* ax25_ip.c */
-extern int  ax25_hard_header(struct sk_buff *, struct net_device *, unsigned short, void *, void *, unsigned int);
+extern int ax25_hard_header(struct sk_buff *, struct net_device *,
+                            unsigned short, const void *,
+                            const void *, unsigned int);
 extern int  ax25_rebuild_header(struct sk_buff *);
+extern const struct header_ops ax25_header_ops;
 
 /* ax25_out.c */
 extern ax25_cb *ax25_send_frame(struct sk_buff *, int, ax25_address *, ax25_address *, ax25_digi *, struct net_device *);
diff --git a/include/net/ax88796.h b/include/net/ax88796.h
index ee786a043b3d..51329dae44e6 100644
--- a/include/net/ax88796.h
+++ b/include/net/ax88796.h
@@ -14,6 +14,7 @@
 
 #define AXFLG_HAS_EEPROM                (1<<0)
 #define AXFLG_MAC_FROMDEV               (1<<1)  /* device already has MAC */
+#define AXFLG_HAS_93CX6                 (1<<2)  /* use eeprom_93cx6 driver */
 
 struct ax_plat_data {
         unsigned int     flags;
diff --git a/include/net/cfg80211.h b/include/net/cfg80211.h
index 7edaef6b29d6..d30960e1755c 100644
--- a/include/net/cfg80211.h
+++ b/include/net/cfg80211.h
@@ -3,15 +3,15 @@
 
 #include <linux/netlink.h>
 #include <linux/skbuff.h>
+#include <linux/nl80211.h>
 #include <net/genetlink.h>
 
 /*
  * 802.11 configuration in-kernel interface
  *
- * Copyright 2006 Johannes Berg <johannes@sipsolutions.net>
+ * Copyright 2006, 2007 Johannes Berg <johannes@sipsolutions.net>
  */
 
-
 /* Radiotap header iteration
  *   implemented in net/wireless/radiotap.c
  *   docs in Documentation/networking/radiotap-headers.txt
@@ -68,11 +68,16 @@ struct wiphy;
  * @add_virtual_intf: create a new virtual interface with the given name
  *
  * @del_virtual_intf: remove the virtual interface determined by ifindex.
+ *
+ * @change_virtual_intf: change type of virtual interface
+ *
  */
 struct cfg80211_ops {
         int     (*add_virtual_intf)(struct wiphy *wiphy, char *name,
-                                    unsigned int type);
+                                    enum nl80211_iftype type);
         int     (*del_virtual_intf)(struct wiphy *wiphy, int ifindex);
+        int     (*change_virtual_intf)(struct wiphy *wiphy, int ifindex,
+                                       enum nl80211_iftype type);
 };
 
 #endif /* __NET_CFG80211_H */
diff --git a/include/net/dn_route.h b/include/net/dn_route.h
index c10e8e7e59a7..60c9f22d8694 100644
--- a/include/net/dn_route.h
+++ b/include/net/dn_route.h
@@ -100,8 +100,7 @@ static inline void dn_rt_finish_output(struct sk_buff *skb, char *dst, char *src
         if ((dev->type != ARPHRD_ETHER) && (dev->type != ARPHRD_LOOPBACK))
                 dst = NULL;
 
-        if (!dev->hard_header || (dev->hard_header(skb, dev, ETH_P_DNA_RT,
-                        dst, src, skb->len) >= 0))
+        if (dev_hard_header(skb, dev, ETH_P_DNA_RT, dst, src, skb->len) >= 0)
                 dn_rt_send(skb);
         else
                 kfree_skb(skb);
diff --git a/include/net/esp.h b/include/net/esp.h
index d05d8d2c78f4..c1bc529809da 100644
--- a/include/net/esp.h
+++ b/include/net/esp.h
@@ -13,8 +13,6 @@ struct esp_data
 
         /* Confidentiality */
         struct {
-                u8                      *key;           /* Key */
-                int                     key_len;        /* Key length */
                 int                     padlen;         /* 0..255 */
                 /* ivlen is offset from enc_data, where encrypted data start.
                  * It is logically different of crypto_tfm_alg_ivsize(tfm).
@@ -28,14 +26,9 @@ struct esp_data
 
         /* Integrity. It is active when icv_full_len != 0 */
         struct {
-                u8                      *key;           /* Key */
-                int                     key_len;        /* Length of the key */
                 u8                      *work_icv;
                 int                     icv_full_len;
                 int                     icv_trunc_len;
-                void                    (*icv)(struct esp_data*,
-                                               struct sk_buff *skb,
-                                               int offset, int len, u8 *icv);
                 struct crypto_hash      *tfm;
         } auth;
 };
@@ -60,4 +53,11 @@ static inline int esp_mac_digest(struct esp_data *esp, struct sk_buff *skb,
         return crypto_hash_final(&desc, esp->auth.work_icv);
 }
 
+struct ip_esp_hdr;
+
+static inline struct ip_esp_hdr *ip_esp_hdr(const struct sk_buff *skb)
+{
+        return (struct ip_esp_hdr *)skb_transport_header(skb);
+}
+
 #endif
diff --git a/include/net/fib_rules.h b/include/net/fib_rules.h
index 83e41dd15ccd..017aebd90683 100644
--- a/include/net/fib_rules.h
+++ b/include/net/fib_rules.h
@@ -65,7 +65,7 @@ struct fib_rules_ops
 
         int                     nlgroup;
         const struct nla_policy *policy;
-        struct list_head        *rules_list;
+        struct list_head        rules_list;
         struct module           *owner;
 };
 
diff --git a/include/net/icmp.h b/include/net/icmp.h
index dc09474efcf3..9f7ef3c8baef 100644
--- a/include/net/icmp.h
+++ b/include/net/icmp.h
@@ -30,9 +30,16 @@ struct icmp_err {
 
 extern struct icmp_err icmp_err_convert[];
 DECLARE_SNMP_STAT(struct icmp_mib, icmp_statistics);
+DECLARE_SNMP_STAT(struct icmpmsg_mib, icmpmsg_statistics);
 #define ICMP_INC_STATS(field)           SNMP_INC_STATS(icmp_statistics, field)
 #define ICMP_INC_STATS_BH(field)        SNMP_INC_STATS_BH(icmp_statistics, field)
 #define ICMP_INC_STATS_USER(field)      SNMP_INC_STATS_USER(icmp_statistics, field)
+#define ICMPMSGOUT_INC_STATS(field)     SNMP_INC_STATS(icmpmsg_statistics, field+256)
+#define ICMPMSGOUT_INC_STATS_BH(field)  SNMP_INC_STATS_BH(icmpmsg_statistics, field+256)
+#define ICMPMSGOUT_INC_STATS_USER(field)        SNMP_INC_STATS_USER(icmpmsg_statistics, field+256)
+#define ICMPMSGIN_INC_STATS(field)      SNMP_INC_STATS(icmpmsg_statistics, field)
+#define ICMPMSGIN_INC_STATS_BH(field)   SNMP_INC_STATS_BH(icmpmsg_statistics, field)
+#define ICMPMSGIN_INC_STATS_USER(field) SNMP_INC_STATS_USER(icmpmsg_statistics, field)
 
 struct dst_entry;
 struct net_proto_family;
@@ -42,6 +49,7 @@ extern void	icmp_send(struct sk_buff *skb_in,  int type, int code, __be32 info);
 extern int      icmp_rcv(struct sk_buff *skb);
 extern int      icmp_ioctl(struct sock *sk, int cmd, unsigned long arg);
 extern void     icmp_init(struct net_proto_family *ops);
+extern void     icmp_out_count(unsigned char type);
 
 /* Move into dst.h ? */
 extern int      xrlim_allow(struct dst_entry *dst, int timeout);
diff --git a/include/net/ieee80211.h b/include/net/ieee80211.h
index bbd85cd61ed5..164d13211165 100644
--- a/include/net/ieee80211.h
+++ b/include/net/ieee80211.h
@@ -119,11 +119,6 @@ do { if (ieee80211_debug_level & (level)) \
 #define IEEE80211_DEBUG(level, fmt, args...) do {} while (0)
 #endif                          /* CONFIG_IEEE80211_DEBUG */
 
-/* debug macros not dependent on CONFIG_IEEE80211_DEBUG */
-
-#define MAC_FMT "%02x:%02x:%02x:%02x:%02x:%02x"
-#define MAC_ARG(x) ((u8*)(x))[0],((u8*)(x))[1],((u8*)(x))[2],((u8*)(x))[3],((u8*)(x))[4],((u8*)(x))[5]
-
 /* escape_essid() is intended to be used in debug (and possibly error)
  * messages. It should never be used for passing essid to user space. */
 const char *escape_essid(const char *essid, u8 essid_len);
diff --git a/include/net/ieee80211_radiotap.h b/include/net/ieee80211_radiotap.h
index a0c2b41a24d7..dfd8bf66ce27 100644
--- a/include/net/ieee80211_radiotap.h
+++ b/include/net/ieee80211_radiotap.h
@@ -40,6 +40,7 @@
 
 #include <linux/if_ether.h>
 #include <linux/kernel.h>
+#include <asm/unaligned.h>
 
 /* Radiotap header version (from official NetBSD feed) */
 #define IEEE80211RADIOTAP_VERSION       "1.5"
@@ -255,4 +256,13 @@ enum ieee80211_radiotap_type {
         (((x) == 14) ? 2484 : ((x) * 5) + 2407) : \
         ((x) + 1000) * 5)
 
+/* helpers */
+static inline int ieee80211_get_radiotap_len(unsigned char *data)
+{
+        struct ieee80211_radiotap_header *hdr =
+                (struct ieee80211_radiotap_header *)data;
+
+        return le16_to_cpu(get_unaligned(&hdr->it_len));
+}
+
 #endif                          /* IEEE80211_RADIOTAP_H */
diff --git a/include/net/ieee80211softmac.h b/include/net/ieee80211softmac.h
index 89119277553d..1ef6282fdded 100644
--- a/include/net/ieee80211softmac.h
+++ b/include/net/ieee80211softmac.h
@@ -229,6 +229,8 @@ struct ieee80211softmac_device {
         /* this lock protects this structure */
         spinlock_t lock;
 
+        struct workqueue_struct *wq;
+
         u8 running; /* SoftMAC started? */
         u8 scanning;
 
diff --git a/include/net/if_inet6.h b/include/net/if_inet6.h
index 3ec7d07346d6..448eccb20638 100644
--- a/include/net/if_inet6.h
+++ b/include/net/if_inet6.h
@@ -154,6 +154,7 @@ struct ipv6_devstat {
         struct proc_dir_entry   *proc_dir_entry;
         DEFINE_SNMP_STAT(struct ipstats_mib, ipv6);
         DEFINE_SNMP_STAT(struct icmpv6_mib, icmpv6);
+        DEFINE_SNMP_STAT(struct icmpv6msg_mib, icmpv6msg);
 };
 
 struct inet6_dev 
diff --git a/include/net/inet_hashtables.h b/include/net/inet_hashtables.h
index d27ee8c0da3f..8228b57eb18f 100644
--- a/include/net/inet_hashtables.h
+++ b/include/net/inet_hashtables.h
@@ -107,7 +107,7 @@ struct inet_hashinfo {
          */
         struct inet_bind_hashbucket     *bhash;
 
-        int                             bhash_size;
+        unsigned int                    bhash_size;
         unsigned int                    ehash_size;
 
         /* All sockets in TCP_LISTEN state will be in here.  This is the only
diff --git a/include/net/inet_timewait_sock.h b/include/net/inet_timewait_sock.h
index 47d52b2414db..abaff0597270 100644
--- a/include/net/inet_timewait_sock.h
+++ b/include/net/inet_timewait_sock.h
@@ -115,6 +115,7 @@ struct inet_timewait_sock {
 #define tw_refcnt               __tw_common.skc_refcnt
 #define tw_hash                 __tw_common.skc_hash
 #define tw_prot                 __tw_common.skc_prot
+#define tw_net                  __tw_common.skc_net
         volatile unsigned char  tw_substate;
         /* 3 bits hole, try to pack */
         unsigned char           tw_rcv_wscale;
diff --git a/include/net/ip.h b/include/net/ip.h
index abf2820a1125..3af3ed9d320b 100644
--- a/include/net/ip.h
+++ b/include/net/ip.h
@@ -171,7 +171,8 @@ extern unsigned long snmp_fold_field(void *mib[], int offt);
 extern int snmp_mib_init(void *ptr[2], size_t mibsize, size_t mibalign);
 extern void snmp_mib_free(void *ptr[2]);
 
-extern int sysctl_local_port_range[2];
+extern void inet_get_local_port_range(int *low, int *high);
+
 extern int sysctl_ip_default_ttl;
 extern int sysctl_ip_nonlocal_bind;
 
diff --git a/include/net/ip6_fib.h b/include/net/ip6_fib.h
index c48ea873f1e0..857821360bb6 100644
--- a/include/net/ip6_fib.h
+++ b/include/net/ip6_fib.h
@@ -105,6 +105,10 @@ struct rt6_info
         struct rt6key                   rt6i_src;
 
         u8                              rt6i_protocol;
+
+#ifdef CONFIG_XFRM
+        u32                             rt6i_flow_cache_genid;
+#endif
 };
 
 static inline struct inet6_dev *ip6_dst_idev(struct dst_entry *dst)
diff --git a/include/net/ipcomp.h b/include/net/ipcomp.h
index 87c1af3e5e82..330b74e813a9 100644
--- a/include/net/ipcomp.h
+++ b/include/net/ipcomp.h
@@ -1,14 +1,23 @@
 #ifndef _NET_IPCOMP_H
 #define _NET_IPCOMP_H
 
-#include <linux/crypto.h>
 #include <linux/types.h>
 
 #define IPCOMP_SCRATCH_SIZE     65400
 
+struct crypto_comp;
+
 struct ipcomp_data {
         u16 threshold;
         struct crypto_comp **tfms;
 };
 
+struct ip_comp_hdr;
+struct sk_buff;
+
+static inline struct ip_comp_hdr *ip_comp_hdr(const struct sk_buff *skb)
+{
+        return (struct ip_comp_hdr *)skb_transport_header(skb);
+}
+
 #endif
diff --git a/include/net/ipv6.h b/include/net/ipv6.h
index 9059e0ed7fe3..31b3f1b45a2b 100644
--- a/include/net/ipv6.h
+++ b/include/net/ipv6.h
@@ -112,45 +112,28 @@ struct frag_hdr {
 extern int sysctl_ipv6_bindv6only;
 extern int sysctl_mld_max_msf;
 
-/* MIBs */
-DECLARE_SNMP_STAT(struct ipstats_mib, ipv6_statistics);
-#define IP6_INC_STATS(idev,field)               ({                      \
-        struct inet6_dev *_idev = (idev);                               \
-        if (likely(_idev != NULL))                                      \
-                SNMP_INC_STATS(_idev->stats.ipv6, field);               \
-        SNMP_INC_STATS(ipv6_statistics, field);                         \
-})
-#define IP6_INC_STATS_BH(idev,field)            ({                      \
-        struct inet6_dev *_idev = (idev);                               \
-        if (likely(_idev != NULL))                                      \
-                SNMP_INC_STATS_BH(_idev->stats.ipv6, field);            \
-        SNMP_INC_STATS_BH(ipv6_statistics, field);                      \
-})
-#define IP6_INC_STATS_USER(idev,field)          ({                      \
+#define _DEVINC(statname, modifier, idev, field)                        \
+({                                                                      \
         struct inet6_dev *_idev = (idev);                               \
         if (likely(_idev != NULL))                                      \
-                SNMP_INC_STATS_USER(_idev->stats.ipv6, field);          \
-        SNMP_INC_STATS_USER(ipv6_statistics, field);                    \
+                SNMP_INC_STATS##modifier((_idev)->stats.statname, (field)); \
+        SNMP_INC_STATS##modifier(statname##_statistics, (field));       \
 })
+
+/* MIBs */
+DECLARE_SNMP_STAT(struct ipstats_mib, ipv6_statistics);
+
+#define IP6_INC_STATS(idev,field)       _DEVINC(ipv6, , idev, field)
+#define IP6_INC_STATS_BH(idev,field)    _DEVINC(ipv6, _BH, idev, field)
+#define IP6_INC_STATS_USER(idev,field)  _DEVINC(ipv6, _USER, idev, field)
+
 DECLARE_SNMP_STAT(struct icmpv6_mib, icmpv6_statistics);
-#define ICMP6_INC_STATS(idev, field)            ({                      \
-        struct inet6_dev *_idev = (idev);                               \
-        if (likely(_idev != NULL))                                      \
-                SNMP_INC_STATS(idev->stats.icmpv6, field);              \
-        SNMP_INC_STATS(icmpv6_statistics, field);                       \
-})
-#define ICMP6_INC_STATS_BH(idev, field)         ({                      \
-        struct inet6_dev *_idev = (idev);                               \
-        if (likely(_idev != NULL))                                      \
-                SNMP_INC_STATS_BH((_idev)->stats.icmpv6, field);        \
-        SNMP_INC_STATS_BH(icmpv6_statistics, field);                    \
-})
-#define ICMP6_INC_STATS_USER(idev, field)       ({                      \
-        struct inet6_dev *_idev = (idev);                               \
-        if (likely(_idev != NULL))                                      \
-                SNMP_INC_STATS_USER(_idev->stats.icmpv6, field);        \
-        SNMP_INC_STATS_USER(icmpv6_statistics, field);                  \
-})
+DECLARE_SNMP_STAT(struct icmpv6msg_mib, icmpv6msg_statistics);
+
+#define ICMP6_INC_STATS(idev, field)    _DEVINC(icmpv6, , idev, field)
+#define ICMP6_INC_STATS_BH(idev, field) _DEVINC(icmpv6, _BH, idev, field)
+#define ICMP6_INC_STATS_USER(idev, field) _DEVINC(icmpv6, _USER, idev, field)
+
 #define ICMP6_INC_STATS_OFFSET_BH(idev, field, offset)  ({                      \
         struct inet6_dev *_idev = idev;                                         \
         __typeof__(offset) _offset = (offset);                                  \
@@ -158,6 +141,20 @@ DECLARE_SNMP_STAT(struct icmpv6_mib, icmpv6_statistics);
                 SNMP_INC_STATS_OFFSET_BH(_idev->stats.icmpv6, field, _offset);  \
         SNMP_INC_STATS_OFFSET_BH(icmpv6_statistics, field, _offset);            \
 })
+
+#define ICMP6MSGOUT_INC_STATS(idev, field) \
+        _DEVINC(icmpv6msg, , idev, field +256)
+#define ICMP6MSGOUT_INC_STATS_BH(idev, field) \
+        _DEVINC(icmpv6msg, _BH, idev, field +256)
+#define ICMP6MSGOUT_INC_STATS_USER(idev, field) \
+        _DEVINC(icmpv6msg, _USER, idev, field +256)
+#define ICMP6MSGIN_INC_STATS(idev, field) \
+         _DEVINC(icmpv6msg, , idev, field)
+#define ICMP6MSGIN_INC_STATS_BH(idev, field) \
+        _DEVINC(icmpv6msg, _BH, idev, field)
+#define ICMP6MSGIN_INC_STATS_USER(idev, field) \
+        _DEVINC(icmpv6msg, _USER, idev, field)
+
 DECLARE_SNMP_STAT(struct udp_mib, udp_stats_in6);
 DECLARE_SNMP_STAT(struct udp_mib, udplite_stats_in6);
 #define UDP6_INC_STATS_BH(field, is_udplite)                          do  {  \
@@ -377,6 +374,12 @@ static inline int ipv6_addr_any(const struct in6_addr *a)
                  a->s6_addr32[2] | a->s6_addr32[3] ) == 0); 
 }
 
+static inline int ipv6_addr_v4mapped(const struct in6_addr *a)
+{
+        return ((a->s6_addr32[0] | a->s6_addr32[1]) == 0 &&
+                 a->s6_addr32[2] == htonl(0x0000ffff));
+}
+
 /*
  * find the first different bit between two addresses
  * length of address must be a multiple of 32bits
diff --git a/include/net/iucv/af_iucv.h b/include/net/iucv/af_iucv.h
index b6c468cd7f5b..85f80eadfa35 100644
--- a/include/net/iucv/af_iucv.h
+++ b/include/net/iucv/af_iucv.h
@@ -50,6 +50,12 @@ struct sockaddr_iucv {
 
 
 /* Common socket structures and functions */
+struct sock_msg_q {
+        struct iucv_path        *path;
+        struct iucv_message     msg;
+        struct list_head        list;
+        spinlock_t              lock;
+};
 
 #define iucv_sk(__sk) ((struct iucv_sock *) __sk)
 
@@ -65,6 +71,7 @@ struct iucv_sock {
         struct iucv_path        *path;
         struct sk_buff_head     send_skb_q;
         struct sk_buff_head     backlog_skb_q;
+        struct sock_msg_q       message_q;
         unsigned int            send_tag;
 };
 
@@ -74,29 +81,8 @@ struct iucv_sock_list {
         atomic_t          autobind_name;
 };
 
-static void iucv_sock_destruct(struct sock *sk);
-static void iucv_sock_cleanup_listen(struct sock *parent);
-static void iucv_sock_kill(struct sock *sk);
-static void iucv_sock_close(struct sock *sk);
-static int  iucv_sock_create(struct socket *sock, int proto);
-static int  iucv_sock_bind(struct socket *sock, struct sockaddr *addr,
-                        int addr_len);
-static int  iucv_sock_connect(struct socket *sock, struct sockaddr *addr,
-                              int alen, int flags);
-static int  iucv_sock_listen(struct socket *sock, int backlog);
-static int  iucv_sock_accept(struct socket *sock, struct socket *newsock,
-                             int flags);
-static int  iucv_sock_getname(struct socket *sock, struct sockaddr *addr,
-                              int *len, int peer);
-static int  iucv_sock_sendmsg(struct kiocb *iocb, struct socket *sock,
-                              struct msghdr *msg, size_t len);
-static int  iucv_sock_recvmsg(struct kiocb *iocb, struct socket *sock,
-                              struct msghdr *msg, size_t len, int flags);
 unsigned int iucv_sock_poll(struct file *file, struct socket *sock,
                             poll_table *wait);
-static int iucv_sock_release(struct socket *sock);
-static int iucv_sock_shutdown(struct socket *sock, int how);
-
 void iucv_sock_link(struct iucv_sock_list *l, struct sock *s);
 void iucv_sock_unlink(struct iucv_sock_list *l, struct sock *s);
 int  iucv_sock_wait_state(struct sock *sk, int state, int state2,
diff --git a/include/net/iw_handler.h b/include/net/iw_handler.h
index f23d07ca7c59..369d50e08b99 100644
--- a/include/net/iw_handler.h
+++ b/include/net/iw_handler.h
@@ -431,7 +431,13 @@ struct iw_public_data {
  * Those may be called only within the kernel.
  */
 
-/* functions that may be called by driver modules */
+/* First : function strictly used inside the kernel */
+
+/* Handle /proc/net/wireless, called in net/code/dev.c */
+extern int dev_get_wireless_info(char * buffer, char **start, off_t offset,
+                                 int length);
+
+/* Second : functions that may be called by driver modules */
 
 /* Send a single event to user space */
 extern void wireless_send_event(struct net_device *     dev,
diff --git a/include/net/llc_conn.h b/include/net/llc_conn.h
index 00730d21b522..e2374e34989f 100644
--- a/include/net/llc_conn.h
+++ b/include/net/llc_conn.h
@@ -93,7 +93,7 @@ static __inline__ char llc_backlog_type(struct sk_buff *skb)
         return skb->cb[sizeof(skb->cb) - 1];
 }
 
-extern struct sock *llc_sk_alloc(int family, gfp_t priority,
+extern struct sock *llc_sk_alloc(struct net *net, int family, gfp_t priority,
                                  struct proto *prot);
 extern void llc_sk_free(struct sock *sk);
 
diff --git a/include/net/mac80211.h b/include/net/mac80211.h
index c34fd9a6160a..5fcc4c104340 100644
--- a/include/net/mac80211.h
+++ b/include/net/mac80211.h
@@ -1,7 +1,9 @@
 /*
- * Low-level hardware driver -- IEEE 802.11 driver (80211.o) interface
+ * mac80211 <-> driver interface
+ *
  * Copyright 2002-2005, Devicescape Software, Inc.
  * Copyright 2006-2007  Jiri Benc <jbenc@suse.cz>
+ * Copyright 2007       Johannes Berg <johannes@sipsolutions.net>
  *
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU General Public License version 2 as
@@ -20,29 +22,51 @@
 #include <net/wireless.h>
 #include <net/cfg80211.h>
 
-/* Note! Only ieee80211_tx_status_irqsafe() and ieee80211_rx_irqsafe() can be
+/**
+ * DOC: Introduction
+ *
+ * mac80211 is the Linux stack for 802.11 hardware that implements
+ * only partial functionality in hard- or firmware. This document
+ * defines the interface between mac80211 and low-level hardware
+ * drivers.
+ */
+
+/**
+ * DOC: Calling mac80211 from interrupts
+ *
+ * Only ieee80211_tx_status_irqsafe() and ieee80211_rx_irqsafe() can be
  * called in hardware interrupt context. The low-level driver must not call any
  * other functions in hardware interrupt context. If there is a need for such
  * call, the low-level driver should first ACK the interrupt and perform the
- * IEEE 802.11 code call after this, e.g., from a scheduled tasklet (in
- * software interrupt context).
+ * IEEE 802.11 code call after this, e.g. from a scheduled workqueue function.
  */
 
-/*
- * Frame format used when passing frame between low-level hardware drivers
- * and IEEE 802.11 driver the same as used in the wireless media, i.e.,
- * buffers start with IEEE 802.11 header and include the same octets that
- * are sent over air.
- *
- * If hardware uses IEEE 802.3 headers (and perform 802.3 <-> 802.11
- * conversion in firmware), upper layer 802.11 code needs to be changed to
- * support this.
- *
- * If the receive frame format is not the same as the real frame sent
- * on the wireless media (e.g., due to padding etc.), upper layer 802.11 code
- * could be updated to provide support for such format assuming this would
- * optimize the performance, e.g., by removing need to re-allocation and
- * copying of the data.
+/**
+ * DOC: Warning
+ *
+ * If you're reading this document and not the header file itself, it will
+ * be incomplete because not all documentation has been converted yet.
+ */
+
+/**
+ * DOC: Frame format
+ *
+ * As a general rule, when frames are passed between mac80211 and the driver,
+ * they start with the IEEE 802.11 header and include the same octets that are
+ * sent over the air except for the FCS which should be calculated by the
+ * hardware.
+ *
+ * There are, however, various exceptions to this rule for advanced features:
+ *
+ * The first exception is for hardware encryption and decryption offload
+ * where the IV/ICV may or may not be generated in hardware.
+ *
+ * Secondly, when the hardware handles fragmentation, the frame handed to
+ * the driver from mac80211 is the MSDU, not the MPDU.
+ *
+ * Finally, for received frames, the driver is able to indicate that it has
+ * filled a radiotap header and put that in front of the frame; if it does
+ * not do so then mac80211 may add this under certain circumstances.
  */
 
 #define IEEE80211_CHAN_W_SCAN 0x00000001
@@ -71,14 +95,13 @@ struct ieee80211_channel {
 #define IEEE80211_RATE_SUPPORTED 0x00000010
 #define IEEE80211_RATE_OFDM 0x00000020
 #define IEEE80211_RATE_CCK 0x00000040
-#define IEEE80211_RATE_TURBO 0x00000080
 #define IEEE80211_RATE_MANDATORY 0x00000100
 
 #define IEEE80211_RATE_CCK_2 (IEEE80211_RATE_CCK | IEEE80211_RATE_PREAMBLE2)
 #define IEEE80211_RATE_MODULATION(f) \
         (f & (IEEE80211_RATE_CCK | IEEE80211_RATE_OFDM))
 
-/* Low-level driver should set PREAMBLE2, OFDM, CCK, and TURBO flags.
+/* Low-level driver should set PREAMBLE2, OFDM and CCK flags.
  * BASIC, SUPPORTED, ERP, and MANDATORY flags are set in 80211.o based on the
  * configuration. */
 struct ieee80211_rate {
@@ -97,44 +120,96 @@ struct ieee80211_rate {
                        * optimizing channel utilization estimates */
 };
 
-/* 802.11g is backwards-compatible with 802.11b, so a wlan card can
- * actually be both in 11b and 11g modes at the same time. */
-enum {
-        MODE_IEEE80211A, /* IEEE 802.11a */
-        MODE_IEEE80211B, /* IEEE 802.11b only */
-        MODE_ATHEROS_TURBO, /* Atheros Turbo mode (2x.11a at 5 GHz) */
-        MODE_IEEE80211G, /* IEEE 802.11g (and 802.11b compatibility) */
-        MODE_ATHEROS_TURBOG, /* Atheros Turbo mode (2x.11g at 2.4 GHz) */
+/**
+ * enum ieee80211_phymode - PHY modes
+ *
+ * @MODE_IEEE80211A: 5GHz as defined by 802.11a/802.11h
+ * @MODE_IEEE80211B: 2.4 GHz as defined by 802.11b
+ * @MODE_IEEE80211G: 2.4 GHz as defined by 802.11g (with OFDM),
+ *      backwards compatible with 11b mode
+ * @NUM_IEEE80211_MODES: internal
+ */
+enum ieee80211_phymode {
+        MODE_IEEE80211A,
+        MODE_IEEE80211B,
+        MODE_IEEE80211G,
 
         /* keep last */
         NUM_IEEE80211_MODES
 };
 
+/**
+ * struct ieee80211_hw_mode - PHY mode definition
+ *
+ * This structure describes the capabilities supported by the device
+ * in a single PHY mode.
+ *
+ * @mode: the PHY mode for this definition
+ * @num_channels: number of supported channels
+ * @channels: pointer to array of supported channels
+ * @num_rates: number of supported bitrates
+ * @rates: pointer to array of supported bitrates
+ * @list: internal
+ */
 struct ieee80211_hw_mode {
-        int mode; /* MODE_IEEE80211... */
-        int num_channels; /* Number of channels (below) */
-        struct ieee80211_channel *channels; /* Array of supported channels */
-        int num_rates; /* Number of rates (below) */
-        struct ieee80211_rate *rates; /* Array of supported rates */
-
-        struct list_head list; /* Internal, don't touch */
+        struct list_head list;
+        struct ieee80211_channel *channels;
+        struct ieee80211_rate *rates;
+        enum ieee80211_phymode mode;
+        int num_channels;
+        int num_rates;
 };
 
+/**
+ * struct ieee80211_tx_queue_params - transmit queue configuration
+ *
+ * The information provided in this structure is required for QoS
+ * transmit queue configuration.
+ *
+ * @aifs: arbitration interface space [0..255, -1: use default]
+ * @cw_min: minimum contention window [will be a value of the form
+ *      2^n-1 in the range 1..1023; 0: use default]
+ * @cw_max: maximum contention window [like @cw_min]
+ * @burst_time: maximum burst time in units of 0.1ms, 0 meaning disabled
+ */
 struct ieee80211_tx_queue_params {
-        int aifs; /* 0 .. 255; -1 = use default */
-        int cw_min; /* 2^n-1: 1, 3, 7, .. , 1023; 0 = use default */
-        int cw_max; /* 2^n-1: 1, 3, 7, .. , 1023; 0 = use default */
-        int burst_time; /* maximum burst time in 0.1 ms (i.e., 10 = 1 ms);
-                         * 0 = disabled */
+        int aifs;
+        int cw_min;
+        int cw_max;
+        int burst_time;
 };
 
+/**
+ * struct ieee80211_tx_queue_stats_data - transmit queue statistics
+ *
+ * @len: number of packets in queue
+ * @limit: queue length limit
+ * @count: number of frames sent
+ */
 struct ieee80211_tx_queue_stats_data {
-        unsigned int len; /* num packets in queue */
-        unsigned int limit; /* queue len (soft) limit */
-        unsigned int count; /* total num frames sent */
+        unsigned int len;
+        unsigned int limit;
+        unsigned int count;
 };
 
-enum {
+/**
+ * enum ieee80211_tx_queue - transmit queue number
+ *
+ * These constants are used with some callbacks that take a
+ * queue number to set parameters for a queue.
+ *
+ * @IEEE80211_TX_QUEUE_DATA0: data queue 0
+ * @IEEE80211_TX_QUEUE_DATA1: data queue 1
+ * @IEEE80211_TX_QUEUE_DATA2: data queue 2
+ * @IEEE80211_TX_QUEUE_DATA3: data queue 3
+ * @IEEE80211_TX_QUEUE_DATA4: data queue 4
+ * @IEEE80211_TX_QUEUE_SVP: ??
+ * @NUM_TX_DATA_QUEUES: number of data queues
+ * @IEEE80211_TX_QUEUE_AFTER_BEACON: transmit queue for frames to be
+ *      sent after a beacon
+ * @IEEE80211_TX_QUEUE_BEACON: transmit queue for beacon frames
+ */
+enum ieee80211_tx_queue {
         IEEE80211_TX_QUEUE_DATA0,
         IEEE80211_TX_QUEUE_DATA1,
         IEEE80211_TX_QUEUE_DATA2,
@@ -165,7 +240,6 @@ struct ieee80211_low_level_stats {
 /* Transmit control fields. This data structure is passed to low-level driver
  * with each TX frame. The low-level driver is responsible for configuring
  * the hardware to use given values (depending on what is supported). */
-#define HW_KEY_IDX_INVALID -1
 
 struct ieee80211_tx_control {
         int tx_rate; /* Transmit rate, given as the hw specific value for the
@@ -191,22 +265,23 @@ struct ieee80211_tx_control {
 #define IEEE80211_TXCTL_REQUEUE         (1<<7)
 #define IEEE80211_TXCTL_FIRST_FRAGMENT  (1<<8) /* this is a first fragment of
                                                 * the frame */
-#define IEEE80211_TXCTL_TKIP_NEW_PHASE1_KEY (1<<9)
+#define IEEE80211_TXCTL_LONG_RETRY_LIMIT (1<<10) /* this frame should be send
+                                                  * using the through
+                                                  * set_retry_limit configured
+                                                  * long retry value */
         u32 flags;                             /* tx control flags defined
                                                 * above */
-        u8 retry_limit;         /* 1 = only first attempt, 2 = one retry, .. */
+        u8 key_idx;             /* keyidx from hw->set_key(), undefined if
+                                 * IEEE80211_TXCTL_DO_NOT_ENCRYPT is set */
+        u8 retry_limit;         /* 1 = only first attempt, 2 = one retry, ..
+                                 * This could be used when set_retry_limit
+                                 * is not implemented by the driver */
         u8 power_level;         /* per-packet transmit power level, in dBm */
         u8 antenna_sel_tx;      /* 0 = default/diversity, 1 = Ant0, 2 = Ant1 */
-        s8 key_idx;             /* -1 = do not encrypt, >= 0 keyidx from
-                                 * hw->set_key() */
         u8 icv_len;             /* length of the ICV/MIC field in octets */
         u8 iv_len;              /* length of the IV field in octets */
-        u8 tkip_key[16];        /* generated phase2/phase1 key for hw TKIP */
         u8 queue;               /* hardware queue to use for this frame;
                                  * 0 = highest, hw->queues-1 = lowest */
-        u8 sw_retry_attempt;    /* number of times hw has tried to
-                                 * transmit frame (not incl. hw retries) */
-
         struct ieee80211_rate *rate;            /* internal 80211.o rate */
         struct ieee80211_rate *rts_rate;        /* internal 80211.o rate
                                                  * for RTS/CTS */
@@ -219,44 +294,124 @@ struct ieee80211_tx_control {
         int ifindex;    /* internal */
 };
 
-/* Receive status. The low-level driver should provide this information
- * (the subset supported by hardware) to the 802.11 code with each received
- * frame. */
+
+/**
+ * enum mac80211_rx_flags - receive flags
+ *
+ * These flags are used with the @flag member of &struct ieee80211_rx_status.
+ * @RX_FLAG_MMIC_ERROR: Michael MIC error was reported on this frame.
+ *      Use together with %RX_FLAG_MMIC_STRIPPED.
+ * @RX_FLAG_DECRYPTED: This frame was decrypted in hardware.
+ * @RX_FLAG_RADIOTAP: This frame starts with a radiotap header.
+ * @RX_FLAG_MMIC_STRIPPED: the Michael MIC is stripped off this frame,
+ *      verification has been done by the hardware.
+ * @RX_FLAG_IV_STRIPPED: The IV/ICV are stripped from this frame.
+ *      If this flag is set, the stack cannot do any replay detection
+ *      hence the driver or hardware will have to do that.
+ * @RX_FLAG_FAILED_FCS_CRC: Set this flag if the FCS check failed on
+ *      the frame.
+ * @RX_FLAG_FAILED_PLCP_CRC: Set this flag if the PCLP check failed on
+ *      the frame.
+ */
+enum mac80211_rx_flags {
+        RX_FLAG_MMIC_ERROR      = 1<<0,
+        RX_FLAG_DECRYPTED       = 1<<1,
+        RX_FLAG_RADIOTAP        = 1<<2,
+        RX_FLAG_MMIC_STRIPPED   = 1<<3,
+        RX_FLAG_IV_STRIPPED     = 1<<4,
+        RX_FLAG_FAILED_FCS_CRC  = 1<<5,
+        RX_FLAG_FAILED_PLCP_CRC = 1<<6,
+};
+
+/**
+ * struct ieee80211_rx_status - receive status
+ *
+ * The low-level driver should provide this information (the subset
+ * supported by hardware) to the 802.11 code with each received
+ * frame.
+ * @mactime: MAC timestamp as defined by 802.11
+ * @freq: frequency the radio was tuned to when receiving this frame, in MHz
+ * @channel: channel the radio was tuned to
+ * @phymode: active PHY mode
+ * @ssi: signal strength when receiving this frame
+ * @signal: used as 'qual' in statistics reporting
+ * @noise: PHY noise when receiving this frame
+ * @antenna: antenna used
+ * @rate: data rate
+ * @flag: %RX_FLAG_*
+ */
 struct ieee80211_rx_status {
         u64 mactime;
-        int freq; /* receive frequency in Mhz */
+        int freq;
         int channel;
-        int phymode;
+        enum ieee80211_phymode phymode;
         int ssi;
-        int signal; /* used as qual in statistics reporting */
+        int signal;
         int noise;
         int antenna;
         int rate;
-#define RX_FLAG_MMIC_ERROR      (1<<0)
-#define RX_FLAG_DECRYPTED       (1<<1)
-#define RX_FLAG_RADIOTAP        (1<<2)
         int flag;
 };
 
-/* Transmit status. The low-level driver should provide this information
- * (the subset supported by hardware) to the 802.11 code for each transmit
- * frame. */
+/**
+ * enum ieee80211_tx_status_flags - transmit status flags
+ *
+ * Status flags to indicate various transmit conditions.
+ *
+ * @IEEE80211_TX_STATUS_TX_FILTERED: The frame was not transmitted
+ *      because the destination STA was in powersave mode.
+ *
+ * @IEEE80211_TX_STATUS_ACK: Frame was acknowledged
+ */
+enum ieee80211_tx_status_flags {
+        IEEE80211_TX_STATUS_TX_FILTERED = 1<<0,
+        IEEE80211_TX_STATUS_ACK         = 1<<1,
+};
+
+/**
+ * struct ieee80211_tx_status - transmit status
+ *
+ * As much information as possible should be provided for each transmitted
+ * frame with ieee80211_tx_status().
+ *
+ * @control: a copy of the &struct ieee80211_tx_control passed to the driver
+ *      in the tx() callback.
+ *
+ * @flags: transmit status flags, defined above
+ *
+ * @ack_signal: signal strength of the ACK frame
+ *
+ * @excessive_retries: set to 1 if the frame was retried many times
+ *      but not acknowledged
+ *
+ * @retry_count: number of retries
+ *
+ * @queue_length: ?? REMOVE
+ * @queue_number: ?? REMOVE
+ */
 struct ieee80211_tx_status {
-        /* copied ieee80211_tx_control structure */
         struct ieee80211_tx_control control;
-
-#define IEEE80211_TX_STATUS_TX_FILTERED (1<<0)
-#define IEEE80211_TX_STATUS_ACK         (1<<1) /* whether the TX frame was ACKed */
-        u32 flags;              /* tx staus flags defined above */
-
-        int ack_signal; /* measured signal strength of the ACK frame */
-        int excessive_retries;
-        int retry_count;
-
-        int queue_length;      /* information about TX queue */
+        u8 flags;
+        bool excessive_retries;
+        u8 retry_count;
+        int ack_signal;
+        int queue_length;
         int queue_number;
 };
 
+/**
+ * enum ieee80211_conf_flags - configuration flags
+ *
+ * Flags to define PHY configuration options
+ *
+ * @IEEE80211_CONF_SHORT_SLOT_TIME: use 802.11g short slot time
+ * @IEEE80211_CONF_RADIOTAP: add radiotap header at receive time (if supported)
+ *
+ */
+enum ieee80211_conf_flags {
+        IEEE80211_CONF_SHORT_SLOT_TIME  = 1<<0,
+        IEEE80211_CONF_RADIOTAP         = 1<<1,
+};
 
 /**
  * struct ieee80211_conf - configuration of the device
@@ -264,57 +419,46 @@ struct ieee80211_tx_status {
  * This struct indicates how the driver shall configure the hardware.
  *
  * @radio_enabled: when zero, driver is required to switch off the radio.
+ *      TODO make a flag
+ * @channel: IEEE 802.11 channel number
+ * @freq: frequency in MHz
+ * @channel_val: hardware specific channel value for the channel
+ * @phymode: PHY mode to activate (REMOVE)
+ * @chan: channel to switch to, pointer to the channel information
+ * @mode: pointer to mode definition
+ * @regulatory_domain: ??
+ * @beacon_int: beacon interval (TODO make interface config)
+ * @flags: configuration flags defined above
+ * @power_level: transmit power limit for current regulatory domain in dBm
+ * @antenna_max: maximum antenna gain
+ * @antenna_sel_tx: transmit antenna selection, 0: default/diversity,
+ *      1/2: antenna 0/1
+ * @antenna_sel_rx: receive antenna selection, like @antenna_sel_tx
  */
 struct ieee80211_conf {
         int channel;                    /* IEEE 802.11 channel number */
         int freq;                       /* MHz */
         int channel_val;                /* hw specific value for the channel */
 
-        int phymode;                    /* MODE_IEEE80211A, .. */
+        enum ieee80211_phymode phymode;
         struct ieee80211_channel *chan;
         struct ieee80211_hw_mode *mode;
         unsigned int regulatory_domain;
         int radio_enabled;
 
         int beacon_int;
-
-#define IEEE80211_CONF_SHORT_SLOT_TIME  (1<<0) /* use IEEE 802.11g Short Slot
-                                                * Time */
-#define IEEE80211_CONF_SSID_HIDDEN      (1<<1) /* do not broadcast the ssid */
-#define IEEE80211_CONF_RADIOTAP         (1<<2) /* use radiotap if supported
-                                                  check this bit at RX time */
-        u32 flags;                      /* configuration flags defined above */
-
-        u8 power_level;                 /* transmit power limit for current
-                                         * regulatory domain; in dBm */
-        u8 antenna_max;                 /* maximum antenna gain */
-        short tx_power_reduction; /* in 0.1 dBm */
-
-        /* 0 = default/diversity, 1 = Ant0, 2 = Ant1 */
+        u32 flags;
+        u8 power_level;
+        u8 antenna_max;
         u8 antenna_sel_tx;
         u8 antenna_sel_rx;
-
-        int antenna_def;
-        int antenna_mode;
-
-        /* Following five fields are used for IEEE 802.11H */
-        unsigned int radar_detect;
-        unsigned int spect_mgmt;
-        /* All following fields are currently unused. */
-        unsigned int quiet_duration; /* duration of quiet period */
-        unsigned int quiet_offset; /* how far into the beacon is the quiet
-                                    * period */
-        unsigned int quiet_period;
-        u8 radar_firpwr_threshold;
-        u8 radar_rssi_threshold;
-        u8 pulse_height_threshold;
-        u8 pulse_rssi_threshold;
-        u8 pulse_inband_threshold;
 };
 
 /**
  * enum ieee80211_if_types - types of 802.11 network interfaces
  *
+ * @IEEE80211_IF_TYPE_INVALID: invalid interface type, not used
+ *      by mac80211 itself
  * @IEEE80211_IF_TYPE_AP: interface in AP mode.
  * @IEEE80211_IF_TYPE_MGMT: special interface for communication with hostap
  *      daemon. Drivers should never see this type.
@@ -322,16 +466,17 @@ struct ieee80211_conf {
  * @IEEE80211_IF_TYPE_IBSS: interface in IBSS (ad-hoc) mode.
  * @IEEE80211_IF_TYPE_MNTR: interface in monitor (rfmon) mode.
  * @IEEE80211_IF_TYPE_WDS: interface in WDS mode.
- * @IEEE80211_IF_TYPE_VLAN: not used.
+ * @IEEE80211_IF_TYPE_VLAN: VLAN interface bound to an AP, drivers
+ *      will never see this type.
  */
 enum ieee80211_if_types {
-        IEEE80211_IF_TYPE_AP = 0x00000000,
-        IEEE80211_IF_TYPE_MGMT = 0x00000001,
-        IEEE80211_IF_TYPE_STA = 0x00000002,
-        IEEE80211_IF_TYPE_IBSS = 0x00000003,
-        IEEE80211_IF_TYPE_MNTR = 0x00000004,
-        IEEE80211_IF_TYPE_WDS = 0x5A580211,
-        IEEE80211_IF_TYPE_VLAN = 0x00080211,
+        IEEE80211_IF_TYPE_INVALID,
+        IEEE80211_IF_TYPE_AP,
+        IEEE80211_IF_TYPE_STA,
+        IEEE80211_IF_TYPE_IBSS,
+        IEEE80211_IF_TYPE_MNTR,
+        IEEE80211_IF_TYPE_WDS,
+        IEEE80211_IF_TYPE_VLAN,
 };
 
 /**
@@ -347,7 +492,6 @@ enum ieee80211_if_types {
  * @mac_addr: pointer to MAC address of the interface. This pointer is valid
  *      until the interface is removed (i.e. it cannot be used after
  *      remove_interface() callback was called for this interface).
- *      This pointer will be %NULL for monitor interfaces, be careful.
  *
  * This structure is used in add_interface() and remove_interface()
  * callbacks of &struct ieee80211_hw.
@@ -360,7 +504,7 @@ enum ieee80211_if_types {
  */
 struct ieee80211_if_init_conf {
         int if_id;
-        int type;
+        enum ieee80211_if_types type;
         void *mac_addr;
 };
 
@@ -377,11 +521,6 @@ struct ieee80211_if_init_conf {
  *      config_interface() call, so copy the value somewhere if you need
  *      it.
  * @ssid_len: length of the @ssid field.
- * @generic_elem: used (together with @generic_elem_len) by drivers for
- *      hardware that generate beacons independently. The pointer is valid
- *      only during the config_interface() call, so copy the value somewhere
- *      if you need it.
- * @generic_elem_len: length of the generic element.
  * @beacon: beacon template. Valid only if @host_gen_beacon_template in
  *      &struct ieee80211_hw is set. The driver is responsible of freeing
  *      the sk_buff.
@@ -396,368 +535,571 @@ struct ieee80211_if_conf {
         u8 *bssid;
         u8 *ssid;
         size_t ssid_len;
-        u8 *generic_elem;
-        size_t generic_elem_len;
         struct sk_buff *beacon;
         struct ieee80211_tx_control *beacon_control;
 };
 
-typedef enum { ALG_NONE, ALG_WEP, ALG_TKIP, ALG_CCMP, ALG_NULL }
-ieee80211_key_alg;
+/**
+ * enum ieee80211_key_alg - key algorithm
+ * @ALG_WEP: WEP40 or WEP104
+ * @ALG_TKIP: TKIP
+ * @ALG_CCMP: CCMP (AES)
+ */
+enum ieee80211_key_alg {
+        ALG_WEP,
+        ALG_TKIP,
+        ALG_CCMP,
+};
 
 
-struct ieee80211_key_conf {
+/**
+ * enum ieee80211_key_flags - key flags
+ *
+ * These flags are used for communication about keys between the driver
+ * and mac80211, with the @flags parameter of &struct ieee80211_key_conf.
+ *
+ * @IEEE80211_KEY_FLAG_WMM_STA: Set by mac80211, this flag indicates
+ *      that the STA this key will be used with could be using QoS.
+ * @IEEE80211_KEY_FLAG_GENERATE_IV: This flag should be set by the
+ *      driver to indicate that it requires IV generation for this
+ *      particular key.
+ * @IEEE80211_KEY_FLAG_GENERATE_MMIC: This flag should be set by
+ *      the driver for a TKIP key if it requires Michael MIC
+ *      generation in software.
+ */
+enum ieee80211_key_flags {
+        IEEE80211_KEY_FLAG_WMM_STA      = 1<<0,
+        IEEE80211_KEY_FLAG_GENERATE_IV  = 1<<1,
+        IEEE80211_KEY_FLAG_GENERATE_MMIC= 1<<2,
+};
 
-        int hw_key_idx;                 /* filled + used by low-level driver */
-        ieee80211_key_alg alg;
-        int keylen;
-
-#define IEEE80211_KEY_FORCE_SW_ENCRYPT (1<<0) /* to be cleared by low-level
-                                                 driver */
-#define IEEE80211_KEY_DEFAULT_TX_KEY   (1<<1) /* This key is the new default TX
-                                                 key (used only for broadcast
-                                                 keys). */
-#define IEEE80211_KEY_DEFAULT_WEP_ONLY (1<<2) /* static WEP is the only
-                                                 configured security policy;
-                                                 this allows some low-level
-                                                 drivers to determine when
-                                                 hwaccel can be used */
-        u32 flags; /* key configuration flags defined above */
-
-        s8 keyidx;                      /* WEP key index */
+/**
+ * struct ieee80211_key_conf - key information
+ *
+ * This key information is given by mac80211 to the driver by
+ * the set_key() callback in &struct ieee80211_ops.
+ *
+ * @hw_key_idx: To be set by the driver, this is the key index the driver
+ *      wants to be given when a frame is transmitted and needs to be
+ *      encrypted in hardware.
+ * @alg: The key algorithm.
+ * @flags: key flags, see &enum ieee80211_key_flags.
+ * @keyidx: the key index (0-3)
+ * @keylen: key material length
+ * @key: key material
+ */
+struct ieee80211_key_conf {
+        enum ieee80211_key_alg alg;
+        u8 hw_key_idx;
+        u8 flags;
+        s8 keyidx;
+        u8 keylen;
         u8 key[0];
 };
 
 #define IEEE80211_SEQ_COUNTER_RX        0
 #define IEEE80211_SEQ_COUNTER_TX        1
 
-typedef enum {
-        SET_KEY, DISABLE_KEY, REMOVE_ALL_KEYS,
-} set_key_cmd;
+/**
+ * enum set_key_cmd - key command
+ *
+ * Used with the set_key() callback in &struct ieee80211_ops, this
+ * indicates whether a key is being removed or added.
+ *
+ * @SET_KEY: a key is set
+ * @DISABLE_KEY: a key must be disabled
+ */
+enum set_key_cmd {
+        SET_KEY, DISABLE_KEY,
+};
 
-/* This is driver-visible part of the per-hw state the stack keeps. */
-struct ieee80211_hw {
-        /* points to the cfg80211 wiphy for this piece. Note
-         * that you must fill in the perm_addr and dev fields
-         * of this structure, use the macros provided below. */
-        struct wiphy *wiphy;
+/**
+ * enum sta_notify_cmd - sta notify command
+ *
+ * Used with the sta_notify() callback in &struct ieee80211_ops, this
+ * indicates addition and removal of a station to station table
+ *
+ * @STA_NOTIFY_ADD: a station was added to the station table
+ * @STA_NOTIFY_REMOVE: a station being removed from the station table
+ */
+enum sta_notify_cmd {
+        STA_NOTIFY_ADD, STA_NOTIFY_REMOVE
+};
 
-        /* assigned by mac80211, don't write */
-        struct ieee80211_conf conf;
+/**
+ * enum ieee80211_hw_flags - hardware flags
+ *
+ * These flags are used to indicate hardware capabilities to
+ * the stack. Generally, flags here should have their meaning
+ * done in a way that the simplest hardware doesn't need setting
+ * any particular flags. There are some exceptions to this rule,
+ * however, so you are advised to review these flags carefully.
+ *
+ * @IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE:
+ *      The device only needs to be supplied with a beacon template.
+ *      If you need the host to generate each beacon then don't use
+ *      this flag and call ieee80211_beacon_get() when you need the
+ *      next beacon frame. Note that if you set this flag, you must
+ *      implement the set_tim() callback for powersave mode to work
+ *      properly.
+ *      This flag is only relevant for access-point mode.
+ *
+ * @IEEE80211_HW_RX_INCLUDES_FCS:
+ *      Indicates that received frames passed to the stack include
+ *      the FCS at the end.
+ *
+ * @IEEE80211_HW_HOST_BROADCAST_PS_BUFFERING:
+ *      Some wireless LAN chipsets buffer broadcast/multicast frames
+ *      for power saving stations in the hardware/firmware and others
+ *      rely on the host system for such buffering. This option is used
+ *      to configure the IEEE 802.11 upper layer to buffer broadcast and
+ *      multicast frames when there are power saving stations so that
+ *      the driver can fetch them with ieee80211_get_buffered_bc(). Note
+ *      that not setting this flag works properly only when the
+ *      %IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE is also not set because
+ *      otherwise the stack will not know when the DTIM beacon was sent.
+ *
+ * @IEEE80211_HW_DEFAULT_REG_DOMAIN_CONFIGURED:
+ *      Channels are already configured to the default regulatory domain
+ *      specified in the device's EEPROM
+ */
+enum ieee80211_hw_flags {
+        IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE           = 1<<0,
+        IEEE80211_HW_RX_INCLUDES_FCS                    = 1<<1,
+        IEEE80211_HW_HOST_BROADCAST_PS_BUFFERING        = 1<<2,
+        IEEE80211_HW_DEFAULT_REG_DOMAIN_CONFIGURED      = 1<<3,
+};
 
-        /* Single thread workqueue available for driver use
-         * Allocated by mac80211 on registration */
+/**
+ * struct ieee80211_hw - hardware information and state
+ *
+ * This structure contains the configuration and hardware
+ * information for an 802.11 PHY.
+ *
+ * @wiphy: This points to the &struct wiphy allocated for this
+ *      802.11 PHY. You must fill in the @perm_addr and @dev
+ *      members of this structure using SET_IEEE80211_DEV()
+ *      and SET_IEEE80211_PERM_ADDR().
+ *
+ * @conf: &struct ieee80211_conf, device configuration, don't use.
+ *
+ * @workqueue: single threaded workqueue available for driver use,
+ *      allocated by mac80211 on registration and flushed on
+ *      unregistration.
+ *
+ * @priv: pointer to private area that was allocated for driver use
+ *      along with this structure.
+ *
+ * @flags: hardware flags, see &enum ieee80211_hw_flags.
+ *
+ * @extra_tx_headroom: headroom to reserve in each transmit skb
+ *      for use by the driver (e.g. for transmit headers.)
+ *
+ * @channel_change_time: time (in microseconds) it takes to change channels.
+ *
+ * @max_rssi: Maximum value for ssi in RX information, use
+ *      negative numbers for dBm and 0 to indicate no support.
+ *
+ * @max_signal: like @max_rssi, but for the signal value.
+ *
+ * @max_noise: like @max_rssi, but for the noise value.
+ *
+ * @queues: number of available hardware transmit queues for
+ *      data packets. WMM/QoS requires at least four.
+ */
+struct ieee80211_hw {
+        struct ieee80211_conf conf;
+        struct wiphy *wiphy;
         struct workqueue_struct *workqueue;
-
-        /* Pointer to the private area that was
-         * allocated with this struct for you. */
         void *priv;
-
-        /* The rest is information about your hardware */
-
-        /* TODO: frame_type 802.11/802.3, sw_encryption requirements */
-
-        /* Some wireless LAN chipsets generate beacons in the hardware/firmware
-         * and others rely on host generated beacons. This option is used to
-         * configure the upper layer IEEE 802.11 module to generate beacons.
-         * The low-level driver can use ieee80211_beacon_get() to fetch the
-         * next beacon frame. */
-#define IEEE80211_HW_HOST_GEN_BEACON (1<<0)
-
-        /* The device needs to be supplied with a beacon template only. */
-#define IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE (1<<1)
-
-        /* Some devices handle decryption internally and do not
-         * indicate whether the frame was encrypted (unencrypted frames
-         * will be dropped by the hardware, unless specifically allowed
-         * through) */
-#define IEEE80211_HW_DEVICE_HIDES_WEP (1<<2)
-
-        /* Whether RX frames passed to ieee80211_rx() include FCS in the end */
-#define IEEE80211_HW_RX_INCLUDES_FCS (1<<3)
-
-        /* Some wireless LAN chipsets buffer broadcast/multicast frames for
-         * power saving stations in the hardware/firmware and others rely on
-         * the host system for such buffering. This option is used to
-         * configure the IEEE 802.11 upper layer to buffer broadcast/multicast
-         * frames when there are power saving stations so that low-level driver
-         * can fetch them with ieee80211_get_buffered_bc(). */
-#define IEEE80211_HW_HOST_BROADCAST_PS_BUFFERING (1<<4)
-
-#define IEEE80211_HW_WEP_INCLUDE_IV (1<<5)
-
-        /* will data nullfunc frames get proper TX status callback */
-#define IEEE80211_HW_DATA_NULLFUNC_ACK (1<<6)
-
-        /* Force software encryption for TKIP packets if WMM is enabled. */
-#define IEEE80211_HW_NO_TKIP_WMM_HWACCEL (1<<7)
-
-        /* Some devices handle Michael MIC internally and do not include MIC in
-         * the received packets passed up. device_strips_mic must be set
-         * for such devices. The 'encryption' frame control bit is expected to
-         * be still set in the IEEE 802.11 header with this option unlike with
-         * the device_hides_wep configuration option.
-         */
-#define IEEE80211_HW_DEVICE_STRIPS_MIC (1<<8)
-
-        /* Device is capable of performing full monitor mode even during
-         * normal operation. */
-#define IEEE80211_HW_MONITOR_DURING_OPER (1<<9)
-
-        /* Device does not need BSSID filter set to broadcast in order to
-         * receive all probe responses while scanning */
-#define IEEE80211_HW_NO_PROBE_FILTERING (1<<10)
-
-        /* Channels are already configured to the default regulatory domain
-         * specified in the device's EEPROM */
-#define IEEE80211_HW_DEFAULT_REG_DOMAIN_CONFIGURED (1<<11)
-
-        /* calculate Michael MIC for an MSDU when doing hwcrypto */
-#define IEEE80211_HW_TKIP_INCLUDE_MMIC (1<<12)
-        /* Do TKIP phase1 key mixing in stack to support cards only do
-         * phase2 key mixing when doing hwcrypto */
-#define IEEE80211_HW_TKIP_REQ_PHASE1_KEY (1<<13)
-        /* Do TKIP phase1 and phase2 key mixing in stack and send the generated
-         * per-packet RC4 key with each TX frame when doing hwcrypto */
-#define IEEE80211_HW_TKIP_REQ_PHASE2_KEY (1<<14)
-
-        u32 flags;                      /* hardware flags defined above */
-
-        /* Set to the size of a needed device specific skb headroom for TX skbs. */
+        u32 flags;
         unsigned int extra_tx_headroom;
-
-        /* This is the time in us to change channels
-         */
         int channel_change_time;
-        /* Maximum values for various statistics.
-         * Leave at 0 to indicate no support. Use negative numbers for dBm. */
+        u8 queues;
         s8 max_rssi;
         s8 max_signal;
         s8 max_noise;
-
-        /* Number of available hardware TX queues for data packets.
-         * WMM requires at least four queues. */
-        int queues;
 };
 
+/**
+ * SET_IEEE80211_DEV - set device for 802.11 hardware
+ *
+ * @hw: the &struct ieee80211_hw to set the device for
+ * @dev: the &struct device of this 802.11 device
+ */
 static inline void SET_IEEE80211_DEV(struct ieee80211_hw *hw, struct device *dev)
 {
         set_wiphy_dev(hw->wiphy, dev);
 }
 
+/**
+ * SET_IEEE80211_PERM_ADDR - set the permanenet MAC address for 802.11 hardware
+ *
+ * @hw: the &struct ieee80211_hw to set the MAC address for
+ * @addr: the address to set
+ */
 static inline void SET_IEEE80211_PERM_ADDR(struct ieee80211_hw *hw, u8 *addr)
 {
         memcpy(hw->wiphy->perm_addr, addr, ETH_ALEN);
 }
 
-/* Configuration block used by the low-level driver to tell the 802.11 code
- * about supported hardware features and to pass function pointers to callback
- * functions. */
+/**
+ * DOC: Hardware crypto acceleration
+ *
+ * mac80211 is capable of taking advantage of many hardware
+ * acceleration designs for encryption and decryption operations.
+ *
+ * The set_key() callback in the &struct ieee80211_ops for a given
+ * device is called to enable hardware acceleration of encryption and
+ * decryption. The callback takes an @address parameter that will be
+ * the broadcast address for default keys, the other station's hardware
+ * address for individual keys or the zero address for keys that will
+ * be used only for transmission.
+ * Multiple transmission keys with the same key index may be used when
+ * VLANs are configured for an access point.
+ *
+ * The @local_address parameter will always be set to our own address,
+ * this is only relevant if you support multiple local addresses.
+ *
+ * When transmitting, the TX control data will use the @hw_key_idx
+ * selected by the driver by modifying the &struct ieee80211_key_conf
+ * pointed to by the @key parameter to the set_key() function.
+ *
+ * The set_key() call for the %SET_KEY command should return 0 if
+ * the key is now in use, -%EOPNOTSUPP or -%ENOSPC if it couldn't be
+ * added; if you return 0 then hw_key_idx must be assigned to the
+ * hardware key index, you are free to use the full u8 range.
+ *
+ * When the cmd is %DISABLE_KEY then it must succeed.
+ *
+ * Note that it is permissible to not decrypt a frame even if a key
+ * for it has been uploaded to hardware, the stack will not make any
+ * decision based on whether a key has been uploaded or not but rather
+ * based on the receive flags.
+ *
+ * The &struct ieee80211_key_conf structure pointed to by the @key
+ * parameter is guaranteed to be valid until another call to set_key()
+ * removes it, but it can only be used as a cookie to differentiate
+ * keys.
+ */
+
+/**
+ * DOC: Frame filtering
+ *
+ * mac80211 requires to see many management frames for proper
+ * operation, and users may want to see many more frames when
+ * in monitor mode. However, for best CPU usage and power consumption,
+ * having as few frames as possible percolate through the stack is
+ * desirable. Hence, the hardware should filter as much as possible.
+ *
+ * To achieve this, mac80211 uses filter flags (see below) to tell
+ * the driver's configure_filter() function which frames should be
+ * passed to mac80211 and which should be filtered out.
+ *
+ * The configure_filter() callback is invoked with the parameters
+ * @mc_count and @mc_list for the combined multicast address list
+ * of all virtual interfaces, @changed_flags telling which flags
+ * were changed and @total_flags with the new flag states.
+ *
+ * If your device has no multicast address filters your driver will
+ * need to check both the %FIF_ALLMULTI flag and the @mc_count
+ * parameter to see whether multicast frames should be accepted
+ * or dropped.
+ *
+ * All unsupported flags in @total_flags must be cleared, i.e. you
+ * should clear all bits except those you honoured.
+ */
+
+/**
+ * enum ieee80211_filter_flags - hardware filter flags
+ *
+ * These flags determine what the filter in hardware should be
+ * programmed to let through and what should not be passed to the
+ * stack. It is always safe to pass more frames than requested,
+ * but this has negative impact on power consumption.
+ *
+ * @FIF_PROMISC_IN_BSS: promiscuous mode within your BSS,
+ *      think of the BSS as your network segment and then this corresponds
+ *      to the regular ethernet device promiscuous mode.
+ *
+ * @FIF_ALLMULTI: pass all multicast frames, this is used if requested
+ *      by the user or if the hardware is not capable of filtering by
+ *      multicast address.
+ *
+ * @FIF_FCSFAIL: pass frames with failed FCS (but you need to set the
+ *      %RX_FLAG_FAILED_FCS_CRC for them)
+ *
+ * @FIF_PLCPFAIL: pass frames with failed PLCP CRC (but you need to set
+ *      the %RX_FLAG_FAILED_PLCP_CRC for them
+ *
+ * @FIF_BCN_PRBRESP_PROMISC: This flag is set during scanning to indicate
+ *      to the hardware that it should not filter beacons or probe responses
+ *      by BSSID. Filtering them can greatly reduce the amount of processing
+ *      mac80211 needs to do and the amount of CPU wakeups, so you should
+ *      honour this flag if possible.
+ *
+ * @FIF_CONTROL: pass control frames, if PROMISC_IN_BSS is not set then
+ *      only those addressed to this station
+ *
+ * @FIF_OTHER_BSS: pass frames destined to other BSSes
+ */
+enum ieee80211_filter_flags {
+        FIF_PROMISC_IN_BSS      = 1<<0,
+        FIF_ALLMULTI            = 1<<1,
+        FIF_FCSFAIL             = 1<<2,
+        FIF_PLCPFAIL            = 1<<3,
+        FIF_BCN_PRBRESP_PROMISC = 1<<4,
+        FIF_CONTROL             = 1<<5,
+        FIF_OTHER_BSS           = 1<<6,
+};
+
+/**
+ * enum ieee80211_erp_change_flags - erp change flags
+ *
+ * These flags are used with the erp_ie_changed() callback in
+ * &struct ieee80211_ops to indicate which parameter(s) changed.
+ * @IEEE80211_ERP_CHANGE_PROTECTION: protection changed
+ * @IEEE80211_ERP_CHANGE_PREAMBLE: barker preamble mode changed
+ */
+enum ieee80211_erp_change_flags {
+        IEEE80211_ERP_CHANGE_PROTECTION = 1<<0,
+        IEEE80211_ERP_CHANGE_PREAMBLE   = 1<<1,
+};
+
+
+/**
+ * struct ieee80211_ops - callbacks from mac80211 to the driver
+ *
+ * This structure contains various callbacks that the driver may
+ * handle or, in some cases, must handle, for example to configure
+ * the hardware to a new channel or to transmit a frame.
+ *
+ * @tx: Handler that 802.11 module calls for each transmitted frame.
+ *      skb contains the buffer starting from the IEEE 802.11 header.
+ *      The low-level driver should send the frame out based on
+ *      configuration in the TX control data. Must be implemented and
+ *      atomic.
+ *
+ * @start: Called before the first netdevice attached to the hardware
+ *      is enabled. This should turn on the hardware and must turn on
+ *      frame reception (for possibly enabled monitor interfaces.)
+ *      Returns negative error codes, these may be seen in userspace,
+ *      or zero.
+ *      When the device is started it should not have a MAC address
+ *      to avoid acknowledging frames before a non-monitor device
+ *      is added.
+ *      Must be implemented.
+ *
+ * @stop: Called after last netdevice attached to the hardware
+ *      is disabled. This should turn off the hardware (at least
+ *      it must turn off frame reception.)
+ *      May be called right after add_interface if that rejects
+ *      an interface.
+ *      Must be implemented.
+ *
+ * @add_interface: Called when a netdevice attached to the hardware is
+ *      enabled. Because it is not called for monitor mode devices, @open
+ *      and @stop must be implemented.
+ *      The driver should perform any initialization it needs before
+ *      the device can be enabled. The initial configuration for the
+ *      interface is given in the conf parameter.
+ *      The callback may refuse to add an interface by returning a
+ *      negative error code (which will be seen in userspace.)
+ *      Must be implemented.
+ *
+ * @remove_interface: Notifies a driver that an interface is going down.
+ *      The @stop callback is called after this if it is the last interface
+ *      and no monitor interfaces are present.
+ *      When all interfaces are removed, the MAC address in the hardware
+ *      must be cleared so the device no longer acknowledges packets,
+ *      the mac_addr member of the conf structure is, however, set to the
+ *      MAC address of the device going away.
+ *      Hence, this callback must be implemented.
+ *
+ * @config: Handler for configuration requests. IEEE 802.11 code calls this
+ *      function to change hardware configuration, e.g., channel.
+ *
+ * @config_interface: Handler for configuration requests related to interfaces
+ *      (e.g. BSSID changes.)
+ *
+ * @configure_filter: Configure the device's RX filter.
+ *      See the section "Frame filtering" for more information.
+ *      This callback must be implemented and atomic.
+ *
+ * @set_tim: Set TIM bit. If the hardware/firmware takes care of beacon
+ *      generation (that is, %IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE is set)
+ *      mac80211 calls this function when a TIM bit must be set or cleared
+ *      for a given AID. Must be atomic.
+ *
+ * @set_key: See the section "Hardware crypto acceleration"
+ *      This callback can sleep, and is only called between add_interface
+ *      and remove_interface calls, i.e. while the interface with the
+ *      given local_address is enabled.
+ *
+ * @set_ieee8021x: Enable/disable IEEE 802.1X. This item requests wlan card
+ *      to pass unencrypted EAPOL-Key frames even when encryption is
+ *      configured. If the wlan card does not require such a configuration,
+ *      this function pointer can be set to NULL.
+ *
+ * @set_port_auth: Set port authorization state (IEEE 802.1X PAE) to be
+ *      authorized (@authorized=1) or unauthorized (=0). This function can be
+ *      used if the wlan hardware or low-level driver implements PAE.
+ *      mac80211 will filter frames based on authorization state in any case,
+ *      so this function pointer can be NULL if low-level driver does not
+ *      require event notification about port state changes.
+ *
+ * @hw_scan: Ask the hardware to service the scan request, no need to start
+ *      the scan state machine in stack.
+ *
+ * @get_stats: return low-level statistics
+ *
+ * @set_privacy_invoked: For devices that generate their own beacons and probe
+ *      response or association responses this updates the state of privacy_invoked
+ *      returns 0 for success or an error number.
+ *
+ * @get_sequence_counter: For devices that have internal sequence counters this
+ *      callback allows mac80211 to access the current value of a counter.
+ *      This callback seems not well-defined, tell us if you need it.
+ *
+ * @set_rts_threshold: Configuration of RTS threshold (if device needs it)
+ *
+ * @set_frag_threshold: Configuration of fragmentation threshold. Assign this if
+ *      the device does fragmentation by itself; if this method is assigned then
+ *      the stack will not do fragmentation.
+ *
+ * @set_retry_limit: Configuration of retry limits (if device needs it)
+ *
+ * @sta_notify: Notifies low level driver about addition or removal
+ *      of assocaited station or AP.
+ *
+ * @erp_ie_changed: Handle ERP IE change notifications. Must be atomic.
+ *
+ * @conf_tx: Configure TX queue parameters (EDCF (aifs, cw_min, cw_max),
+ *      bursting) for a hardware TX queue. The @queue parameter uses the
+ *      %IEEE80211_TX_QUEUE_* constants. Must be atomic.
+ *
+ * @get_tx_stats: Get statistics of the current TX queue status. This is used
+ *      to get number of currently queued packets (queue length), maximum queue
+ *      size (limit), and total number of packets sent using each TX queue
+ *      (count). This information is used for WMM to find out which TX
+ *      queues have room for more packets and by hostapd to provide
+ *      statistics about the current queueing state to external programs.
+ *
+ * @get_tsf: Get the current TSF timer value from firmware/hardware. Currently,
+ *      this is only used for IBSS mode debugging and, as such, is not a
+ *      required function. Must be atomic.
+ *
+ * @reset_tsf: Reset the TSF timer and allow firmware/hardware to synchronize
+ *      with other STAs in the IBSS. This is only used in IBSS mode. This
+ *      function is optional if the firmware/hardware takes full care of
+ *      TSF synchronization.
+ *
+ * @beacon_update: Setup beacon data for IBSS beacons. Unlike access point,
+ *      IBSS uses a fixed beacon frame which is configured using this
+ *      function.
+ *      If the driver returns success (0) from this callback, it owns
+ *      the skb. That means the driver is responsible to kfree_skb() it.
+ *      The control structure is not dynamically allocated. That means the
+ *      driver does not own the pointer and if it needs it somewhere
+ *      outside of the context of this function, it must copy it
+ *      somewhere else.
+ *      This handler is required only for IBSS mode.
+ *
+ * @tx_last_beacon: Determine whether the last IBSS beacon was sent by us.
+ *      This is needed only for IBSS mode and the result of this function is
+ *      used to determine whether to reply to Probe Requests.
+ */
 struct ieee80211_ops {
-        /* Handler that 802.11 module calls for each transmitted frame.
-         * skb contains the buffer starting from the IEEE 802.11 header.
-         * The low-level driver should send the frame out based on
-         * configuration in the TX control data.
-         * Must be atomic. */
         int (*tx)(struct ieee80211_hw *hw, struct sk_buff *skb,
                   struct ieee80211_tx_control *control);
-
-        /* Handler for performing hardware reset. */
-        int (*reset)(struct ieee80211_hw *hw);
-
-        /* Handler that is called when any netdevice attached to the hardware
-         * device is set UP for the first time. This can be used, e.g., to
-         * enable interrupts and beacon sending. */
-        int (*open)(struct ieee80211_hw *hw);
-
-        /* Handler that is called when the last netdevice attached to the
-         * hardware device is set DOWN. This can be used, e.g., to disable
-         * interrupts and beacon sending. */
-        int (*stop)(struct ieee80211_hw *hw);
-
-        /* Handler for asking a driver if a new interface can be added (or,
-         * more exactly, set UP). If the handler returns zero, the interface
-         * is added. Driver should perform any initialization it needs prior
-         * to returning zero. By returning non-zero addition of the interface
-         * is inhibited. Unless monitor_during_oper is set, it is guaranteed
-         * that monitor interfaces and normal interfaces are mutually
-         * exclusive. If assigned, the open() handler is called after
-         * add_interface() if this is the first device added. The
-         * add_interface() callback has to be assigned because it is the only
-         * way to obtain the requested MAC address for any interface.
-         */
+        int (*start)(struct ieee80211_hw *hw);
+        void (*stop)(struct ieee80211_hw *hw);
         int (*add_interface)(struct ieee80211_hw *hw,
                              struct ieee80211_if_init_conf *conf);
-
-        /* Notify a driver that an interface is going down. The stop() handler
-         * is called prior to this if this is a last interface. */
         void (*remove_interface)(struct ieee80211_hw *hw,
                                  struct ieee80211_if_init_conf *conf);
-
-        /* Handler for configuration requests. IEEE 802.11 code calls this
-         * function to change hardware configuration, e.g., channel. */
         int (*config)(struct ieee80211_hw *hw, struct ieee80211_conf *conf);
-
-        /* Handler for configuration requests related to interfaces (e.g.
-         * BSSID). */
         int (*config_interface)(struct ieee80211_hw *hw,
                                 int if_id, struct ieee80211_if_conf *conf);
-
-        /* ieee80211 drivers do not have access to the &struct net_device
-         * that is (are) connected with their device. Hence (and because
-         * we need to combine the multicast lists and flags for multiple
-         * virtual interfaces), they cannot assign set_multicast_list.
-         * The parameters here replace dev->flags and dev->mc_count,
-         * dev->mc_list is replaced by calling ieee80211_get_mc_list_item.
-         * Must be atomic. */
-        void (*set_multicast_list)(struct ieee80211_hw *hw,
-                                   unsigned short flags, int mc_count);
-
-        /* Set TIM bit handler. If the hardware/firmware takes care of beacon
-         * generation, IEEE 802.11 code uses this function to tell the
-         * low-level to set (or clear if set==0) TIM bit for the given aid. If
-         * host system is used to generate beacons, this handler is not used
-         * and low-level driver should set it to NULL.
-         * Must be atomic. */
+        void (*configure_filter)(struct ieee80211_hw *hw,
+                                 unsigned int changed_flags,
+                                 unsigned int *total_flags,
+                                 int mc_count, struct dev_addr_list *mc_list);
         int (*set_tim)(struct ieee80211_hw *hw, int aid, int set);
-
-        /* Set encryption key. IEEE 802.11 module calls this function to set
-         * encryption keys. addr is ff:ff:ff:ff:ff:ff for default keys and
-         * station hwaddr for individual keys. aid of the station is given
-         * to help low-level driver in selecting which key->hw_key_idx to use
-         * for this key. TX control data will use the hw_key_idx selected by
-         * the low-level driver.
-         * Must be atomic. */
-        int (*set_key)(struct ieee80211_hw *hw, set_key_cmd cmd,
-                       u8 *addr, struct ieee80211_key_conf *key, int aid);
-
-        /* Set TX key index for default/broadcast keys. This is needed in cases
-         * where wlan card is doing full WEP/TKIP encapsulation (wep_include_iv
-         * is not set), in other cases, this function pointer can be set to
-         * NULL since the IEEE 802. 11 module takes care of selecting the key
-         * index for each TX frame. */
-        int (*set_key_idx)(struct ieee80211_hw *hw, int idx);
-
-        /* Enable/disable IEEE 802.1X. This item requests wlan card to pass
-         * unencrypted EAPOL-Key frames even when encryption is configured.
-         * If the wlan card does not require such a configuration, this
-         * function pointer can be set to NULL. */
+        int (*set_key)(struct ieee80211_hw *hw, enum set_key_cmd cmd,
+                       const u8 *local_address, const u8 *address,
+                       struct ieee80211_key_conf *key);
         int (*set_ieee8021x)(struct ieee80211_hw *hw, int use_ieee8021x);
-
-        /* Set port authorization state (IEEE 802.1X PAE) to be authorized
-         * (authorized=1) or unauthorized (authorized=0). This function can be
-         * used if the wlan hardware or low-level driver implements PAE.
-         * 80211.o module will anyway filter frames based on authorization
-         * state, so this function pointer can be NULL if low-level driver does
-         * not require event notification about port state changes.
-         * Currently unused. */
         int (*set_port_auth)(struct ieee80211_hw *hw, u8 *addr,
                              int authorized);
-
-        /* Ask the hardware to service the scan request, no need to start
-         * the scan state machine in stack. */
         int (*hw_scan)(struct ieee80211_hw *hw, u8 *ssid, size_t len);
-
-        /* return low-level statistics */
         int (*get_stats)(struct ieee80211_hw *hw,
                          struct ieee80211_low_level_stats *stats);
-
-        /* For devices that generate their own beacons and probe response
-         * or association responses this updates the state of privacy_invoked
-         * returns 0 for success or an error number */
         int (*set_privacy_invoked)(struct ieee80211_hw *hw,
                                    int privacy_invoked);
-
-        /* For devices that have internal sequence counters, allow 802.11
-         * code to access the current value of a counter */
         int (*get_sequence_counter)(struct ieee80211_hw *hw,
                                     u8* addr, u8 keyidx, u8 txrx,
                                     u32* iv32, u16* iv16);
-
-        /* Configuration of RTS threshold (if device needs it) */
         int (*set_rts_threshold)(struct ieee80211_hw *hw, u32 value);
-
-        /* Configuration of fragmentation threshold.
-         * Assign this if the device does fragmentation by itself,
-         * if this method is assigned then the stack will not do
-         * fragmentation. */
         int (*set_frag_threshold)(struct ieee80211_hw *hw, u32 value);
-
-        /* Configuration of retry limits (if device needs it) */
         int (*set_retry_limit)(struct ieee80211_hw *hw,
                                u32 short_retry, u32 long_retr);
-
-        /* Number of STAs in STA table notification (NULL = disabled).
-         * Must be atomic. */
-        void (*sta_table_notification)(struct ieee80211_hw *hw,
-                                       int num_sta);
-
-        /* Configure TX queue parameters (EDCF (aifs, cw_min, cw_max),
-         * bursting) for a hardware TX queue.
-         * queue = IEEE80211_TX_QUEUE_*.
-         * Must be atomic. */
+        void (*sta_notify)(struct ieee80211_hw *hw, int if_id,
+                        enum sta_notify_cmd, const u8 *addr);
+        void (*erp_ie_changed)(struct ieee80211_hw *hw, u8 changes,
+                               int cts_protection, int preamble);
         int (*conf_tx)(struct ieee80211_hw *hw, int queue,
                        const struct ieee80211_tx_queue_params *params);
-
-        /* Get statistics of the current TX queue status. This is used to get
-         * number of currently queued packets (queue length), maximum queue
-         * size (limit), and total number of packets sent using each TX queue
-         * (count).
-         * Currently unused. */
         int (*get_tx_stats)(struct ieee80211_hw *hw,
                             struct ieee80211_tx_queue_stats *stats);
-
-        /* Get the current TSF timer value from firmware/hardware. Currently,
-         * this is only used for IBSS mode debugging and, as such, is not a
-         * required function.
-         * Must be atomic. */
         u64 (*get_tsf)(struct ieee80211_hw *hw);
-
-        /* Reset the TSF timer and allow firmware/hardware to synchronize with
-         * other STAs in the IBSS. This is only used in IBSS mode. This
-         * function is optional if the firmware/hardware takes full care of
-         * TSF synchronization. */
         void (*reset_tsf)(struct ieee80211_hw *hw);
-
-        /* Setup beacon data for IBSS beacons. Unlike access point (Master),
-         * IBSS uses a fixed beacon frame which is configured using this
-         * function. This handler is required only for IBSS mode. */
         int (*beacon_update)(struct ieee80211_hw *hw,
                              struct sk_buff *skb,
                              struct ieee80211_tx_control *control);
-
-        /* Determine whether the last IBSS beacon was sent by us. This is
-         * needed only for IBSS mode and the result of this function is used to
-         * determine whether to reply to Probe Requests. */
         int (*tx_last_beacon)(struct ieee80211_hw *hw);
 };
 
-/* Allocate a new hardware device. This must be called once for each
- * hardware device. The returned pointer must be used to refer to this
- * device when calling other functions. 802.11 code allocates a private data
- * area for the low-level driver. The size of this area is given as
- * priv_data_len.
+/**
+ * ieee80211_alloc_hw -  Allocate a new hardware device
+ *
+ * This must be called once for each hardware device. The returned pointer
+ * must be used to refer to this device when calling other functions.
+ * mac80211 allocates a private data area for the driver pointed to by
+ * @priv in &struct ieee80211_hw, the size of this area is given as
+ * @priv_data_len.
+ *
+ * @priv_data_len: length of private data
+ * @ops: callbacks for this device
  */
 struct ieee80211_hw *ieee80211_alloc_hw(size_t priv_data_len,
                                         const struct ieee80211_ops *ops);
 
-/* Register hardware device to the IEEE 802.11 code and kernel. Low-level
- * drivers must call this function before using any other IEEE 802.11
- * function except ieee80211_register_hwmode. */
+/**
+ * ieee80211_register_hw - Register hardware device
+ *
+ * You must call this function before any other functions
+ * except ieee80211_register_hwmode.
+ *
+ * @hw: the device to register as returned by ieee80211_alloc_hw()
+ */
 int ieee80211_register_hw(struct ieee80211_hw *hw);
 
-/* driver can use this and ieee80211_get_rx_led_name to get the
- * name of the registered LEDs after ieee80211_register_hw
- * was called.
- * This is useful to set the default trigger on the LED class
- * device that your driver should export for each LED the device
- * has, that way the default behaviour will be as expected but
- * the user can still change it/turn off the LED etc.
- */
 #ifdef CONFIG_MAC80211_LEDS
 extern char *__ieee80211_get_tx_led_name(struct ieee80211_hw *hw);
 extern char *__ieee80211_get_rx_led_name(struct ieee80211_hw *hw);
+extern char *__ieee80211_get_assoc_led_name(struct ieee80211_hw *hw);
 #endif
+/**
+ * ieee80211_get_tx_led_name - get name of TX LED
+ *
+ * mac80211 creates a transmit LED trigger for each wireless hardware
+ * that can be used to drive LEDs if your driver registers a LED device.
+ * This function returns the name (or %NULL if not configured for LEDs)
+ * of the trigger so you can automatically link the LED device.
+ *
+ * @hw: the hardware to get the LED trigger name for
+ */
 static inline char *ieee80211_get_tx_led_name(struct ieee80211_hw *hw)
 {
 #ifdef CONFIG_MAC80211_LEDS
@@ -767,6 +1109,16 @@ static inline char *ieee80211_get_tx_led_name(struct ieee80211_hw *hw)
 #endif
 }
 
+/**
+ * ieee80211_get_rx_led_name - get name of RX LED
+ *
+ * mac80211 creates a receive LED trigger for each wireless hardware
+ * that can be used to drive LEDs if your driver registers a LED device.
+ * This function returns the name (or %NULL if not configured for LEDs)
+ * of the trigger so you can automatically link the LED device.
+ *
+ * @hw: the hardware to get the LED trigger name for
+ */
 static inline char *ieee80211_get_rx_led_name(struct ieee80211_hw *hw)
 {
 #ifdef CONFIG_MAC80211_LEDS
@@ -776,33 +1128,94 @@ static inline char *ieee80211_get_rx_led_name(struct ieee80211_hw *hw)
 #endif
 }
 
+static inline char *ieee80211_get_assoc_led_name(struct ieee80211_hw *hw)
+{
+#ifdef CONFIG_MAC80211_LEDS
+        return __ieee80211_get_assoc_led_name(hw);
+#else
+        return NULL;
+#endif
+}
+
+
 /* Register a new hardware PHYMODE capability to the stack. */
 int ieee80211_register_hwmode(struct ieee80211_hw *hw,
                               struct ieee80211_hw_mode *mode);
 
-/* Unregister a hardware device. This function instructs 802.11 code to free
- * allocated resources and unregister netdevices from the kernel. */
+/**
+ * ieee80211_unregister_hw - Unregister a hardware device
+ *
+ * This function instructs mac80211 to free allocated resources
+ * and unregister netdevices from the networking subsystem.
+ *
+ * @hw: the hardware to unregister
+ */
 void ieee80211_unregister_hw(struct ieee80211_hw *hw);
 
-/* Free everything that was allocated including private data of a driver. */
+/**
+ * ieee80211_free_hw - free hardware descriptor
+ *
+ * This function frees everything that was allocated, including the
+ * private data for the driver. You must call ieee80211_unregister_hw()
+ * before calling this function
+ *
+ * @hw: the hardware to free
+ */
 void ieee80211_free_hw(struct ieee80211_hw *hw);
 
-/* Receive frame callback function. The low-level driver uses this function to
- * send received frames to the IEEE 802.11 code. Receive buffer (skb) must
- * start with IEEE 802.11 header. */
+/* trick to avoid symbol clashes with the ieee80211 subsystem */
 void __ieee80211_rx(struct ieee80211_hw *hw, struct sk_buff *skb,
                     struct ieee80211_rx_status *status);
+
+/**
+ * ieee80211_rx - receive frame
+ *
+ * Use this function to hand received frames to mac80211. The receive
+ * buffer in @skb must start with an IEEE 802.11 header or a radiotap
+ * header if %RX_FLAG_RADIOTAP is set in the @status flags.
+ *
+ * This function may not be called in IRQ context.
+ *
+ * @hw: the hardware this frame came in on
+ * @skb: the buffer to receive, owned by mac80211 after this call
+ * @status: status of this frame; the status pointer need not be valid
+ *      after this function returns
+ */
+static inline void ieee80211_rx(struct ieee80211_hw *hw, struct sk_buff *skb,
+                                struct ieee80211_rx_status *status)
+{
+        __ieee80211_rx(hw, skb, status);
+}
+
+/**
+ * ieee80211_rx_irqsafe - receive frame
+ *
+ * Like ieee80211_rx() but can be called in IRQ context
+ * (internally defers to a workqueue.)
+ *
+ * @hw: the hardware this frame came in on
+ * @skb: the buffer to receive, owned by mac80211 after this call
+ * @status: status of this frame; the status pointer need not be valid
+ *      after this function returns and is not freed by mac80211,
+ *      it is recommended that it points to a stack area
+ */
 void ieee80211_rx_irqsafe(struct ieee80211_hw *hw,
                           struct sk_buff *skb,
                           struct ieee80211_rx_status *status);
 
-/* Transmit status callback function. The low-level driver must call this
- * function to report transmit status for all the TX frames that had
- * req_tx_status set in the transmit control fields. In addition, this should
- * be called at least for all unicast frames to provide information for TX rate
- * control algorithm. In order to maintain all statistics, this function is
- * recommended to be called after each frame, including multicast/broadcast, is
- * sent. */
+/**
+ * ieee80211_tx_status - transmit status callback
+ *
+ * Call this function for all transmitted frames after they have been
+ * transmitted. It is permissible to not call this function for
+ * multicast frames but this can affect statistics.
+ *
+ * @hw: the hardware the frame was transmitted by
+ * @skb: the frame that was transmitted, owned by mac80211 after this call
+ * @status: status information for this frame; the status pointer need not
+ *      be valid after this function returns and is not freed by mac80211,
+ *      it is recommended that it points to a stack area
+ */
 void ieee80211_tx_status(struct ieee80211_hw *hw,
                          struct sk_buff *skb,
                          struct ieee80211_tx_status *status);
@@ -830,6 +1243,7 @@ struct sk_buff *ieee80211_beacon_get(struct ieee80211_hw *hw,
 /**
  * ieee80211_rts_get - RTS frame generation function
  * @hw: pointer obtained from ieee80211_alloc_hw().
+ * @if_id: interface ID from &struct ieee80211_if_init_conf.
  * @frame: pointer to the frame that is going to be protected by the RTS.
  * @frame_len: the frame length (in octets).
  * @frame_txctl: &struct ieee80211_tx_control of the frame.
@@ -840,7 +1254,7 @@ struct sk_buff *ieee80211_beacon_get(struct ieee80211_hw *hw,
  * the next RTS frame from the 802.11 code. The low-level is responsible
  * for calling this function before and RTS frame is needed.
  */
-void ieee80211_rts_get(struct ieee80211_hw *hw,
+void ieee80211_rts_get(struct ieee80211_hw *hw, int if_id,
                        const void *frame, size_t frame_len,
                        const struct ieee80211_tx_control *frame_txctl,
                        struct ieee80211_rts *rts);
@@ -848,6 +1262,7 @@ void ieee80211_rts_get(struct ieee80211_hw *hw,
 /**
  * ieee80211_rts_duration - Get the duration field for an RTS frame
  * @hw: pointer obtained from ieee80211_alloc_hw().
+ * @if_id: interface ID from &struct ieee80211_if_init_conf.
  * @frame_len: the length of the frame that is going to be protected by the RTS.
  * @frame_txctl: &struct ieee80211_tx_control of the frame.
  *
@@ -855,13 +1270,14 @@ void ieee80211_rts_get(struct ieee80211_hw *hw,
  * the duration field, the low-level driver uses this function to receive
  * the duration field value in little-endian byteorder.
  */
-__le16 ieee80211_rts_duration(struct ieee80211_hw *hw,
+__le16 ieee80211_rts_duration(struct ieee80211_hw *hw, int if_id,
                               size_t frame_len,
                               const struct ieee80211_tx_control *frame_txctl);
 
 /**
  * ieee80211_ctstoself_get - CTS-to-self frame generation function
  * @hw: pointer obtained from ieee80211_alloc_hw().
+ * @if_id: interface ID from &struct ieee80211_if_init_conf.
  * @frame: pointer to the frame that is going to be protected by the CTS-to-self.
  * @frame_len: the frame length (in octets).
  * @frame_txctl: &struct ieee80211_tx_control of the frame.
@@ -872,7 +1288,7 @@ __le16 ieee80211_rts_duration(struct ieee80211_hw *hw,
  * the next CTS-to-self frame from the 802.11 code. The low-level is responsible
  * for calling this function before and CTS-to-self frame is needed.
  */
-void ieee80211_ctstoself_get(struct ieee80211_hw *hw,
+void ieee80211_ctstoself_get(struct ieee80211_hw *hw, int if_id,
                              const void *frame, size_t frame_len,
                              const struct ieee80211_tx_control *frame_txctl,
                              struct ieee80211_cts *cts);
@@ -880,6 +1296,7 @@ void ieee80211_ctstoself_get(struct ieee80211_hw *hw,
 /**
  * ieee80211_ctstoself_duration - Get the duration field for a CTS-to-self frame
  * @hw: pointer obtained from ieee80211_alloc_hw().
+ * @if_id: interface ID from &struct ieee80211_if_init_conf.
  * @frame_len: the length of the frame that is going to be protected by the CTS-to-self.
  * @frame_txctl: &struct ieee80211_tx_control of the frame.
  *
@@ -887,20 +1304,21 @@ void ieee80211_ctstoself_get(struct ieee80211_hw *hw,
  * the duration field, the low-level driver uses this function to receive
  * the duration field value in little-endian byteorder.
  */
-__le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw,
+__le16 ieee80211_ctstoself_duration(struct ieee80211_hw *hw, int if_id,
                                     size_t frame_len,
                                     const struct ieee80211_tx_control *frame_txctl);
 
 /**
  * ieee80211_generic_frame_duration - Calculate the duration field for a frame
  * @hw: pointer obtained from ieee80211_alloc_hw().
+ * @if_id: interface ID from &struct ieee80211_if_init_conf.
  * @frame_len: the length of the frame.
  * @rate: the rate (in 100kbps) at which the frame is going to be transmitted.
  *
  * Calculate the duration field of some generic frame, given its
  * length and transmission rate (in 100kbps).
  */
-__le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw,
+__le16 ieee80211_generic_frame_duration(struct ieee80211_hw *hw, int if_id,
                                         size_t frame_len,
                                         int rate);
 
@@ -929,14 +1347,26 @@ struct sk_buff *
 ieee80211_get_buffered_bc(struct ieee80211_hw *hw, int if_id,
                           struct ieee80211_tx_control *control);
 
-/* Given an sk_buff with a raw 802.11 header at the data pointer this function
+/**
+ * ieee80211_get_hdrlen_from_skb - get header length from data
+ *
+ * Given an skb with a raw 802.11 header at the data pointer this function
  * returns the 802.11 header length in bytes (not including encryption
  * headers). If the data in the sk_buff is too short to contain a valid 802.11
  * header the function returns 0.
+ *
+ * @skb: the frame
  */
 int ieee80211_get_hdrlen_from_skb(const struct sk_buff *skb);
 
-/* Like ieee80211_get_hdrlen_from_skb() but takes a FC in CPU order. */
+/**
+ * ieee80211_get_hdrlen - get header length from frame control
+ *
+ * This function returns the 802.11 header length in bytes (not including
+ * encryption headers.)
+ *
+ * @fc: the frame control field (in CPU endianness)
+ */
 int ieee80211_get_hdrlen(u16 fc);
 
 /**
@@ -982,66 +1412,14 @@ void ieee80211_stop_queues(struct ieee80211_hw *hw);
 void ieee80211_wake_queues(struct ieee80211_hw *hw);
 
 /**
- * ieee80211_get_mc_list_item - iteration over items in multicast list
- * @hw: pointer as obtained from ieee80211_alloc_hw().
- * @prev: value returned by previous call to ieee80211_get_mc_list_item() or
- *      NULL to start a new iteration.
- * @ptr: pointer to buffer of void * type for internal usage of
- *      ieee80211_get_mc_list_item().
- *
- * Iterates over items in multicast list of given device. To get the first
- * item, pass NULL in @prev and in *@ptr. In subsequent calls, pass the
- * value returned by previous call in @prev. Don't alter *@ptr during
- * iteration. When there are no more items, NULL is returned.
+ * ieee80211_scan_completed - completed hardware scan
+ *
+ * When hardware scan offload is used (i.e. the hw_scan() callback is
+ * assigned) this function needs to be called by the driver to notify
+ * mac80211 that the scan finished.
+ *
+ * @hw: the hardware that finished the scan
  */
-struct dev_mc_list *
-ieee80211_get_mc_list_item(struct ieee80211_hw *hw,
-                           struct dev_mc_list *prev,
-                           void **ptr);
-
-/* called by driver to notify scan status completed */
 void ieee80211_scan_completed(struct ieee80211_hw *hw);
 
-/* Function to indicate Radar Detection. The low level driver must call this
- * function to indicate the presence of radar in the current channel.
- * Additionally the radar type also could be sent */
-int  ieee80211_radar_status(struct ieee80211_hw *hw, int channel,
-                            int radar, int radar_type);
-
-/* return a pointer to the source address (SA) */
-static inline u8 *ieee80211_get_SA(struct ieee80211_hdr *hdr)
-{
-        u8 *raw = (u8 *) hdr;
-        u8 tofrom = (*(raw+1)) & 3; /* get the TODS and FROMDS bits */
-
-        switch (tofrom) {
-                case 2:
-                        return hdr->addr3;
-                case 3:
-                        return hdr->addr4;
-        }
-        return hdr->addr2;
-}
-
-/* return a pointer to the destination address (DA) */
-static inline u8 *ieee80211_get_DA(struct ieee80211_hdr *hdr)
-{
-        u8 *raw = (u8 *) hdr;
-        u8 to_ds = (*(raw+1)) & 1; /* get the TODS bit */
-
-        if (to_ds)
-                return hdr->addr3;
-        return hdr->addr1;
-}
-
-static inline int ieee80211_get_morefrag(struct ieee80211_hdr *hdr)
-{
-        return (le16_to_cpu(hdr->frame_control) &
-                IEEE80211_FCTL_MOREFRAGS) != 0;
-}
-
-#define MAC_FMT "%02x:%02x:%02x:%02x:%02x:%02x"
-#define MAC_ARG(x) ((u8*)(x))[0], ((u8*)(x))[1], ((u8*)(x))[2], \
-                   ((u8*)(x))[3], ((u8*)(x))[4], ((u8*)(x))[5]
-
 #endif /* MAC80211_H */
diff --git a/include/net/ndisc.h b/include/net/ndisc.h
index 475b10c575b3..6684f7efbeeb 100644
--- a/include/net/ndisc.h
+++ b/include/net/ndisc.h
@@ -24,6 +24,7 @@ enum {
         ND_OPT_MTU = 5,                 /* RFC2461 */
         __ND_OPT_ARRAY_MAX,
         ND_OPT_ROUTE_INFO = 24,         /* RFC4191 */
+        ND_OPT_RDNSS = 25,              /* RFC5006 */
         __ND_OPT_MAX
 };
 
diff --git a/include/net/net_namespace.h b/include/net/net_namespace.h
new file mode 100644
index 000000000000..93aa87d32804
--- /dev/null
+++ b/include/net/net_namespace.h
@@ -0,0 +1,123 @@
+/*
+ * Operations on the network namespace
+ */
+#ifndef __NET_NET_NAMESPACE_H
+#define __NET_NET_NAMESPACE_H
+
+#include <asm/atomic.h>
+#include <linux/workqueue.h>
+#include <linux/list.h>
+
+struct proc_dir_entry;
+struct net_device;
+struct net {
+        atomic_t                count;          /* To decided when the network
+                                                 *  namespace should be freed.
+                                                 */
+        atomic_t                use_count;      /* To track references we
+                                                 * destroy on demand
+                                                 */
+        struct list_head        list;           /* list of network namespaces */
+        struct work_struct      work;           /* work struct for freeing */
+
+        struct proc_dir_entry   *proc_net;
+        struct proc_dir_entry   *proc_net_stat;
+        struct proc_dir_entry   *proc_net_root;
+
+        struct net_device       *loopback_dev;          /* The loopback */
+
+        struct list_head        dev_base_head;
+        struct hlist_head       *dev_name_head;
+        struct hlist_head       *dev_index_head;
+};
+
+#ifdef CONFIG_NET
+/* Init's network namespace */
+extern struct net init_net;
+#define INIT_NET_NS(net_ns) .net_ns = &init_net,
+#else
+#define INIT_NET_NS(net_ns)
+#endif
+
+extern struct list_head net_namespace_list;
+
+#ifdef CONFIG_NET
+extern struct net *copy_net_ns(unsigned long flags, struct net *net_ns);
+#else
+static inline struct net *copy_net_ns(unsigned long flags, struct net *net_ns)
+{
+        /* There is nothing to copy so this is a noop */
+        return net_ns;
+}
+#endif
+
+extern void __put_net(struct net *net);
+
+static inline struct net *get_net(struct net *net)
+{
+#ifdef CONFIG_NET
+        atomic_inc(&net->count);
+#endif
+        return net;
+}
+
+static inline struct net *maybe_get_net(struct net *net)
+{
+        /* Used when we know struct net exists but we
+         * aren't guaranteed a previous reference count
+         * exists.  If the reference count is zero this
+         * function fails and returns NULL.
+         */
+        if (!atomic_inc_not_zero(&net->count))
+                net = NULL;
+        return net;
+}
+
+static inline void put_net(struct net *net)
+{
+#ifdef CONFIG_NET
+        if (atomic_dec_and_test(&net->count))
+                __put_net(net);
+#endif
+}
+
+static inline struct net *hold_net(struct net *net)
+{
+#ifdef CONFIG_NET
+        atomic_inc(&net->use_count);
+#endif
+        return net;
+}
+
+static inline void release_net(struct net *net)
+{
+#ifdef CONFIG_NET
+        atomic_dec(&net->use_count);
+#endif
+}
+
+#define for_each_net(VAR)                               \
+        list_for_each_entry(VAR, &net_namespace_list, list)
+
+#ifdef CONFIG_NET_NS
+#define __net_init
+#define __net_exit
+#define __net_initdata
+#else
+#define __net_init      __init
+#define __net_exit      __exit_refok
+#define __net_initdata  __initdata
+#endif
+
+struct pernet_operations {
+        struct list_head list;
+        int (*init)(struct net *net);
+        void (*exit)(struct net *net);
+};
+
+extern int register_pernet_subsys(struct pernet_operations *);
+extern void unregister_pernet_subsys(struct pernet_operations *);
+extern int register_pernet_device(struct pernet_operations *);
+extern void unregister_pernet_device(struct pernet_operations *);
+
+#endif /* __NET_NET_NAMESPACE_H */
diff --git a/include/net/netfilter/nf_conntrack.h b/include/net/netfilter/nf_conntrack.h
index 810020ec345d..90fb66d99d0c 100644
--- a/include/net/netfilter/nf_conntrack.h
+++ b/include/net/netfilter/nf_conntrack.h
@@ -116,9 +116,6 @@ struct nf_conn
         struct ip_conntrack_counter counters[IP_CT_DIR_MAX];
 #endif
 
-        /* Unique ID that identifies this conntrack*/
-        unsigned int id;
-
 #if defined(CONFIG_NF_CONNTRACK_MARK)
         u_int32_t mark;
 #endif
diff --git a/include/net/netfilter/nf_conntrack_expect.h b/include/net/netfilter/nf_conntrack_expect.h
index cae1a0dce365..b47c04f12dbe 100644
--- a/include/net/netfilter/nf_conntrack_expect.h
+++ b/include/net/netfilter/nf_conntrack_expect.h
@@ -38,9 +38,6 @@ struct nf_conntrack_expect
         /* Usage count. */
         atomic_t use;
 
-        /* Unique ID */
-        unsigned int id;
-
         /* Flags */
         unsigned int flags;
 
diff --git a/include/net/netfilter/nf_conntrack_helper.h b/include/net/netfilter/nf_conntrack_helper.h
index d04f99964d94..0dcc4c828ce9 100644
--- a/include/net/netfilter/nf_conntrack_helper.h
+++ b/include/net/netfilter/nf_conntrack_helper.h
@@ -36,7 +36,7 @@ struct nf_conntrack_helper
 
         void (*destroy)(struct nf_conn *ct);
 
-        int (*to_nfattr)(struct sk_buff *skb, const struct nf_conn *ct);
+        int (*to_nlattr)(struct sk_buff *skb, const struct nf_conn *ct);
 };
 
 extern struct nf_conntrack_helper *
diff --git a/include/net/netfilter/nf_conntrack_l3proto.h b/include/net/netfilter/nf_conntrack_l3proto.h
index 3c58a2c4df28..15888fc7b72d 100644
--- a/include/net/netfilter/nf_conntrack_l3proto.h
+++ b/include/net/netfilter/nf_conntrack_l3proto.h
@@ -11,11 +11,11 @@
 
 #ifndef _NF_CONNTRACK_L3PROTO_H
 #define _NF_CONNTRACK_L3PROTO_H
+#include <linux/netlink.h>
+#include <net/netlink.h>
 #include <linux/seq_file.h>
 #include <net/netfilter/nf_conntrack.h>
 
-struct nfattr;
-
 struct nf_conntrack_l3proto
 {
         /* L3 Protocol Family number. ex) PF_INET */
@@ -64,11 +64,12 @@ struct nf_conntrack_l3proto
         int (*get_l4proto)(const struct sk_buff *skb, unsigned int nhoff,
                            unsigned int *dataoff, u_int8_t *protonum);
 
-        int (*tuple_to_nfattr)(struct sk_buff *skb,
+        int (*tuple_to_nlattr)(struct sk_buff *skb,
                                const struct nf_conntrack_tuple *t);
 
-        int (*nfattr_to_tuple)(struct nfattr *tb[],
+        int (*nlattr_to_tuple)(struct nlattr *tb[],
                                struct nf_conntrack_tuple *t);
+        const struct nla_policy *nla_policy;
 
 #ifdef CONFIG_SYSCTL
         struct ctl_table_header *ctl_table_header;
diff --git a/include/net/netfilter/nf_conntrack_l4proto.h b/include/net/netfilter/nf_conntrack_l4proto.h
index f46cb930414c..fb50c217ba0a 100644
--- a/include/net/netfilter/nf_conntrack_l4proto.h
+++ b/include/net/netfilter/nf_conntrack_l4proto.h
@@ -9,10 +9,11 @@
 
 #ifndef _NF_CONNTRACK_L4PROTO_H
 #define _NF_CONNTRACK_L4PROTO_H
+#include <linux/netlink.h>
+#include <net/netlink.h>
 #include <net/netfilter/nf_conntrack.h>
 
 struct seq_file;
-struct nfattr;
 
 struct nf_conntrack_l4proto
 {
@@ -65,16 +66,17 @@ struct nf_conntrack_l4proto
                      int pf, unsigned int hooknum);
 
         /* convert protoinfo to nfnetink attributes */
-        int (*to_nfattr)(struct sk_buff *skb, struct nfattr *nfa,
+        int (*to_nlattr)(struct sk_buff *skb, struct nlattr *nla,
                          const struct nf_conn *ct);
 
         /* convert nfnetlink attributes to protoinfo */
-        int (*from_nfattr)(struct nfattr *tb[], struct nf_conn *ct);
+        int (*from_nlattr)(struct nlattr *tb[], struct nf_conn *ct);
 
-        int (*tuple_to_nfattr)(struct sk_buff *skb,
+        int (*tuple_to_nlattr)(struct sk_buff *skb,
                                const struct nf_conntrack_tuple *t);
-        int (*nfattr_to_tuple)(struct nfattr *tb[],
+        int (*nlattr_to_tuple)(struct nlattr *tb[],
                                struct nf_conntrack_tuple *t);
+        const struct nla_policy *nla_policy;
 
 #ifdef CONFIG_SYSCTL
         struct ctl_table_header **ctl_table_header;
@@ -111,10 +113,11 @@ extern int nf_conntrack_l4proto_register(struct nf_conntrack_l4proto *proto);
 extern void nf_conntrack_l4proto_unregister(struct nf_conntrack_l4proto *proto);
 
 /* Generic netlink helpers */
-extern int nf_ct_port_tuple_to_nfattr(struct sk_buff *skb,
+extern int nf_ct_port_tuple_to_nlattr(struct sk_buff *skb,
                                       const struct nf_conntrack_tuple *tuple);
-extern int nf_ct_port_nfattr_to_tuple(struct nfattr *tb[],
+extern int nf_ct_port_nlattr_to_tuple(struct nlattr *tb[],
                                       struct nf_conntrack_tuple *t);
+extern const struct nla_policy nf_ct_port_nla_policy[];
 
 /* Log invalid packets */
 extern unsigned int nf_ct_log_invalid;
diff --git a/include/net/netfilter/nf_nat_protocol.h b/include/net/netfilter/nf_nat_protocol.h
index a9ec5ef61468..14c7b2d7263c 100644
--- a/include/net/netfilter/nf_nat_protocol.h
+++ b/include/net/netfilter/nf_nat_protocol.h
@@ -38,10 +38,10 @@ struct nf_nat_protocol
                             enum nf_nat_manip_type maniptype,
                             const struct nf_conn *ct);
 
-        int (*range_to_nfattr)(struct sk_buff *skb,
+        int (*range_to_nlattr)(struct sk_buff *skb,
                                const struct nf_nat_range *range);
 
-        int (*nfattr_to_range)(struct nfattr *tb[],
+        int (*nlattr_to_range)(struct nlattr *tb[],
                                struct nf_nat_range *range);
 };
 
@@ -62,9 +62,9 @@ extern int init_protocols(void) __init;
 extern void cleanup_protocols(void);
 extern struct nf_nat_protocol *find_nat_proto(u_int16_t protonum);
 
-extern int nf_nat_port_range_to_nfattr(struct sk_buff *skb,
+extern int nf_nat_port_range_to_nlattr(struct sk_buff *skb,
                                        const struct nf_nat_range *range);
-extern int nf_nat_port_nfattr_to_range(struct nfattr *tb[],
+extern int nf_nat_port_nlattr_to_range(struct nlattr *tb[],
                                        struct nf_nat_range *range);
 
 #endif /*_NF_NAT_PROTO_H*/
diff --git a/include/net/netlink.h b/include/net/netlink.h
index d7b824be5422..9298218c07f9 100644
--- a/include/net/netlink.h
+++ b/include/net/netlink.h
@@ -84,7 +84,7 @@
  *   nla_next(nla)-----------------------------'
  *
  * Data Structures:
- *   struct nlattr                      netlink attribtue header
+ *   struct nlattr                      netlink attribute header
  *
  * Attribute Construction:
  *   nla_reserve(skb, type, len)        reserve room for an attribute
@@ -220,9 +220,9 @@ struct nl_info {
         u32                     pid;
 };
 
-extern void             netlink_run_queue(struct sock *sk, unsigned int *qlen,
-                                          int (*cb)(struct sk_buff *,
-                                                    struct nlmsghdr *));
+extern int              netlink_rcv_skb(struct sk_buff *skb,
+                                        int (*cb)(struct sk_buff *,
+                                                  struct nlmsghdr *));
 extern int              nlmsg_notify(struct sock *sk, struct sk_buff *skb,
                                      u32 pid, unsigned int group, int report,
                                      gfp_t flags);
@@ -667,6 +667,15 @@ static inline int nla_padlen(int payload)
 }
 
 /**
+ * nla_type - attribute type
+ * @nla: netlink attribute
+ */
+static inline int nla_type(const struct nlattr *nla)
+{
+        return nla->nla_type & NLA_TYPE_MASK;
+}
+
+/**
  * nla_data - head of payload
  * @nla: netlink attribute
  */
@@ -697,7 +706,7 @@ static inline int nla_ok(const struct nlattr *nla, int remaining)
 }
 
 /**
- * nla_next - next netlink attribte in attribute stream
+ * nla_next - next netlink attribute in attribute stream
  * @nla: netlink attribute
  * @remaining: number of bytes remaining in attribute stream
  *
@@ -773,7 +782,7 @@ static inline int __nla_parse_nested_compat(struct nlattr *tb[], int maxtype,
 ({      data = nla_len(nla) >= len ? nla_data(nla) : NULL; \
         __nla_parse_nested_compat(tb, maxtype, nla, policy, len); })
 /**
- * nla_put_u8 - Add a u16 netlink attribute to a socket buffer
+ * nla_put_u8 - Add a u8 netlink attribute to a socket buffer
  * @skb: socket buffer to add attribute to
  * @attrtype: attribute type
  * @value: numeric value
@@ -989,7 +998,7 @@ static inline struct nlattr *nla_nest_start(struct sk_buff *skb, int attrtype)
 
 /**
  * nla_nest_end - Finalize nesting of attributes
- * @skb: socket buffer the attribtues are stored in
+ * @skb: socket buffer the attributes are stored in
  * @start: container attribute
  *
  * Corrects the container attribute header to include the all
@@ -1032,7 +1041,7 @@ static inline struct nlattr *nla_nest_compat_start(struct sk_buff *skb,
 
 /**
  * nla_nest_compat_end - Finalize nesting of compat attributes
- * @skb: socket buffer the attribtues are stored in
+ * @skb: socket buffer the attributes are stored in
  * @start: container attribute
  *
  * Corrects the container attribute header to include the all
diff --git a/include/net/pkt_cls.h b/include/net/pkt_cls.h
index 7968b1d66369..f285de69c615 100644
--- a/include/net/pkt_cls.h
+++ b/include/net/pkt_cls.h
@@ -2,6 +2,7 @@
 #define __NET_PKT_CLS_H
 
 #include <linux/pkt_cls.h>
+#include <net/net_namespace.h>
 #include <net/sch_generic.h>
 #include <net/act_api.h>
 
@@ -351,7 +352,7 @@ tcf_match_indev(struct sk_buff *skb, char *indev)
         if (indev[0]) {
                 if  (!skb->iif)
                         return 0;
-                dev = __dev_get_by_index(skb->iif);
+                dev = __dev_get_by_index(&init_net, skb->iif);
                 if (!dev || strcmp(indev, dev->name))
                         return 0;
         }
diff --git a/include/net/pkt_sched.h b/include/net/pkt_sched.h
index 9e22526e80e7..ab61809a9616 100644
--- a/include/net/pkt_sched.h
+++ b/include/net/pkt_sched.h
@@ -97,10 +97,9 @@ extern int tc_classify(struct sk_buff *skb, struct tcf_proto *tp,
 /* Calculate maximal size of packet seen by hard_start_xmit
    routine of this device.
  */
-static inline unsigned psched_mtu(struct net_device *dev)
+static inline unsigned psched_mtu(const struct net_device *dev)
 {
-        unsigned mtu = dev->mtu;
-        return dev->hard_header ? mtu + dev->hard_header_len : mtu;
+        return dev->mtu + dev->hard_header_len;
 }
 
 #endif
diff --git a/include/net/rtnetlink.h b/include/net/rtnetlink.h
index 3861c05cdf0f..793863e09c69 100644
--- a/include/net/rtnetlink.h
+++ b/include/net/rtnetlink.h
@@ -78,6 +78,10 @@ extern void	__rtnl_link_unregister(struct rtnl_link_ops *ops);
 extern int      rtnl_link_register(struct rtnl_link_ops *ops);
 extern void     rtnl_link_unregister(struct rtnl_link_ops *ops);
 
+extern struct net_device *rtnl_create_link(struct net *net, char *ifname,
+                const struct rtnl_link_ops *ops, struct nlattr *tb[]);
+extern const struct nla_policy ifla_policy[IFLA_MAX+1];
+
 #define MODULE_ALIAS_RTNL_LINK(kind) MODULE_ALIAS("rtnl-link-" kind)
 
 #endif
diff --git a/include/net/sch_generic.h b/include/net/sch_generic.h
index 8a67f24cbe02..a02ec9e5fea5 100644
--- a/include/net/sch_generic.h
+++ b/include/net/sch_generic.h
@@ -302,4 +302,18 @@ drop:
         return NET_XMIT_DROP;
 }
 
+/* Length to Time (L2T) lookup in a qdisc_rate_table, to determine how
+   long it will take to send a packet given its size.
+ */
+static inline u32 qdisc_l2t(struct qdisc_rate_table* rtab, unsigned int pktlen)
+{
+        int slot = pktlen + rtab->rate.cell_align + rtab->rate.overhead;
+        if (slot < 0)
+                slot = 0;
+        slot >>= rtab->rate.cell_log;
+        if (slot > 255)
+                return (rtab->data[255]*(slot >> 8) + rtab->data[slot & 0xFF]);
+        return rtab->data[slot];
+}
+
 #endif
diff --git a/include/net/sctp/auth.h b/include/net/sctp/auth.h
new file mode 100644
index 000000000000..4945954a16af
--- /dev/null
+++ b/include/net/sctp/auth.h
@@ -0,0 +1,128 @@
+/* SCTP kernel reference Implementation
+ * (C) Copyright 2007 Hewlett-Packard Development Company, L.P.
+ *
+ * This file is part of the SCTP kernel reference Implementation
+ *
+ * The SCTP reference implementation is free software;
+ * you can redistribute it and/or modify it under the terms of
+ * the GNU General Public License as published by
+ * the Free Software Foundation; either version 2, or (at your option)
+ * any later version.
+ *
+ * The SCTP reference implementation is distributed in the hope that it
+ * will be useful, but WITHOUT ANY WARRANTY; without even the implied
+ *                 ************************
+ * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ * See the GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with GNU CC; see the file COPYING.  If not, write to
+ * the Free Software Foundation, 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
+ *
+ * Please send any bug reports or fixes you make to the
+ * email address(es):
+ *    lksctp developers <lksctp-developers@lists.sourceforge.net>
+ *
+ * Or submit a bug report through the following website:
+ *    http://www.sf.net/projects/lksctp
+ *
+ * Written or modified by:
+ *   Vlad Yasevich     <vladislav.yasevich@hp.com>
+ *
+ * Any bugs reported given to us we will try to fix... any fixes shared will
+ * be incorporated into the next SCTP release.
+ */
+
+#ifndef __sctp_auth_h__
+#define __sctp_auth_h__
+
+#include <linux/list.h>
+#include <linux/crypto.h>
+
+struct sctp_endpoint;
+struct sctp_association;
+struct sctp_authkey;
+struct sctp_hmacalgo;
+
+/*
+ * Define a generic struct that will hold all the info
+ * necessary for an HMAC transform
+ */
+struct sctp_hmac {
+        __u16 hmac_id;          /* one of the above ids */
+        char *hmac_name;        /* name for loading */
+        __u16 hmac_len;         /* length of the signature */
+};
+
+/* This is generic structure that containst authentication bytes used
+ * as keying material.  It's a what is referred to as byte-vector all
+ * over SCTP-AUTH
+ */
+struct sctp_auth_bytes {
+        atomic_t refcnt;
+        __u32 len;
+        __u8  data[];
+};
+
+/* Definition for a shared key, weather endpoint or association */
+struct sctp_shared_key {
+        struct list_head key_list;
+        __u16 key_id;
+        struct sctp_auth_bytes *key;
+};
+
+#define key_for_each(__key, __list_head) \
+        list_for_each_entry(__key, __list_head, key_list)
+
+#define key_for_each_safe(__key, __tmp, __list_head) \
+        list_for_each_entry_safe(__key, __tmp, __list_head, key_list)
+
+static inline void sctp_auth_key_hold(struct sctp_auth_bytes *key)
+{
+        if (!key)
+                return;
+
+        atomic_inc(&key->refcnt);
+}
+
+void sctp_auth_key_put(struct sctp_auth_bytes *key);
+struct sctp_shared_key *sctp_auth_shkey_create(__u16 key_id, gfp_t gfp);
+void sctp_auth_shkey_free(struct sctp_shared_key *sh_key);
+void sctp_auth_destroy_keys(struct list_head *keys);
+int sctp_auth_asoc_init_active_key(struct sctp_association *asoc, gfp_t gfp);
+struct sctp_shared_key *sctp_auth_get_shkey(
+                                const struct sctp_association *asoc,
+                                __u16 key_id);
+int sctp_auth_asoc_copy_shkeys(const struct sctp_endpoint *ep,
+                                struct sctp_association *asoc,
+                                gfp_t gfp);
+int sctp_auth_init_hmacs(struct sctp_endpoint *ep, gfp_t gfp);
+void sctp_auth_destroy_hmacs(struct crypto_hash *auth_hmacs[]);
+struct sctp_hmac *sctp_auth_get_hmac(__u16 hmac_id);
+struct sctp_hmac *sctp_auth_asoc_get_hmac(const struct sctp_association *asoc);
+void sctp_auth_asoc_set_default_hmac(struct sctp_association *asoc,
+                                     struct sctp_hmac_algo_param *hmacs);
+int sctp_auth_asoc_verify_hmac_id(const struct sctp_association *asoc,
+                                    __u16 hmac_id);
+int sctp_auth_send_cid(sctp_cid_t chunk, const struct sctp_association *asoc);
+int sctp_auth_recv_cid(sctp_cid_t chunk, const struct sctp_association *asoc);
+void sctp_auth_calculate_hmac(const struct sctp_association *asoc,
+                            struct sk_buff *skb,
+                            struct sctp_auth_chunk *auth, gfp_t gfp);
+
+/* API Helpers */
+int sctp_auth_ep_add_chunkid(struct sctp_endpoint *ep, __u8 chunk_id);
+int sctp_auth_ep_set_hmacs(struct sctp_endpoint *ep,
+                            struct sctp_hmacalgo *hmacs);
+int sctp_auth_set_key(struct sctp_endpoint *ep,
+                      struct sctp_association *asoc,
+                      struct sctp_authkey *auth_key);
+int sctp_auth_set_active_key(struct sctp_endpoint *ep,
+                      struct sctp_association *asoc,
+                      __u16 key_id);
+int sctp_auth_del_key_id(struct sctp_endpoint *ep,
+                      struct sctp_association *asoc,
+                      __u16 key_id);
+
+#endif
diff --git a/include/net/sctp/command.h b/include/net/sctp/command.h
index f56c8d695a82..b8733364557f 100644
--- a/include/net/sctp/command.h
+++ b/include/net/sctp/command.h
@@ -102,6 +102,7 @@ typedef enum {
         SCTP_CMD_SET_SK_ERR,     /* Set sk_err */
         SCTP_CMD_ASSOC_CHANGE,   /* generate and send assoc_change event */
         SCTP_CMD_ADAPTATION_IND, /* generate and send adaptation event */
+        SCTP_CMD_ASSOC_SHKEY,    /* generate the association shared keys */
         SCTP_CMD_LAST
 } sctp_verb_t;
 
diff --git a/include/net/sctp/constants.h b/include/net/sctp/constants.h
index bb37724495a5..da8354e8e33c 100644
--- a/include/net/sctp/constants.h
+++ b/include/net/sctp/constants.h
@@ -64,12 +64,18 @@ enum { SCTP_DEFAULT_INSTREAMS = SCTP_MAX_STREAM };
 #define SCTP_CID_MAX                    SCTP_CID_ASCONF_ACK
 
 #define SCTP_NUM_BASE_CHUNK_TYPES       (SCTP_CID_BASE_MAX + 1)
-#define SCTP_NUM_CHUNK_TYPES            (SCTP_NUM_BASE_CHUNKTYPES + 2)
 
 #define SCTP_NUM_ADDIP_CHUNK_TYPES      2
 
 #define SCTP_NUM_PRSCTP_CHUNK_TYPES     1
 
+#define SCTP_NUM_AUTH_CHUNK_TYPES       1
+
+#define SCTP_NUM_CHUNK_TYPES            (SCTP_NUM_BASE_CHUNK_TYPES + \
+                                         SCTP_NUM_ADDIP_CHUNK_TYPES +\
+                                         SCTP_NUM_PRSCTP_CHUNK_TYPES +\
+                                         SCTP_NUM_AUTH_CHUNK_TYPES)
+
 /* These are the different flavours of event.  */
 typedef enum {
 
@@ -177,7 +183,9 @@ typedef enum {
         SCTP_IERROR_NO_DATA,
         SCTP_IERROR_BAD_STREAM,
         SCTP_IERROR_BAD_PORTS,
-
+        SCTP_IERROR_AUTH_BAD_HMAC,
+        SCTP_IERROR_AUTH_BAD_KEYID,
+        SCTP_IERROR_PROTO_VIOLATION,
 } sctp_ierror_t;
 
 
@@ -409,4 +417,45 @@ typedef enum {
         SCTP_LOWER_CWND_INACTIVE,
 } sctp_lower_cwnd_t;
 
+
+/* SCTP-AUTH Necessary constants */
+
+/* SCTP-AUTH, Section 3.3
+ *
+ *  The following Table 2 shows the currently defined values for HMAC
+ *  identifiers.
+ *
+ *  +-----------------+--------------------------+
+ *  | HMAC Identifier | Message Digest Algorithm |
+ *  +-----------------+--------------------------+
+ *  | 0               | Reserved                 |
+ *  | 1               | SHA-1 defined in [8]     |
+ *  | 2               | Reserved                 |
+ *  | 3               | SHA-256 defined in [8]   |
+ *  +-----------------+--------------------------+
+ */
+enum {
+        SCTP_AUTH_HMAC_ID_RESERVED_0,
+        SCTP_AUTH_HMAC_ID_SHA1,
+        SCTP_AUTH_HMAC_ID_RESERVED_2,
+        SCTP_AUTH_HMAC_ID_SHA256
+};
+
+#define SCTP_AUTH_HMAC_ID_MAX   SCTP_AUTH_HMAC_ID_SHA256
+#define SCTP_AUTH_NUM_HMACS (SCTP_AUTH_HMAC_ID_SHA256 + 1)
+#define SCTP_SHA1_SIG_SIZE 20
+#define SCTP_SHA256_SIG_SIZE 32
+
+/*  SCTP-AUTH, Section 3.2
+ *     The chunk types for INIT, INIT-ACK, SHUTDOWN-COMPLETE and AUTH chunks
+ *     MUST NOT be listed in the CHUNKS parameter
+ */
+#define SCTP_NUM_NOAUTH_CHUNKS  4
+#define SCTP_AUTH_MAX_CHUNKS    (SCTP_NUM_CHUNK_TYPES - SCTP_NUM_NOAUTH_CHUNKS)
+
+/* SCTP-AUTH Section 6.1
+ * The RANDOM parameter MUST contain a 32 byte random number.
+ */
+#define SCTP_AUTH_RANDOM_LENGTH 32
+
 #endif /* __sctp_constants_h__ */
diff --git a/include/net/sctp/sctp.h b/include/net/sctp/sctp.h
index c9cc00c85782..119f5a1ed499 100644
--- a/include/net/sctp/sctp.h
+++ b/include/net/sctp/sctp.h
@@ -341,6 +341,7 @@ extern atomic_t sctp_dbg_objcnt_bind_bucket;
 extern atomic_t sctp_dbg_objcnt_addr;
 extern atomic_t sctp_dbg_objcnt_ssnmap;
 extern atomic_t sctp_dbg_objcnt_datamsg;
+extern atomic_t sctp_dbg_objcnt_keys;
 
 /* Macros to atomically increment/decrement objcnt counters.  */
 #define SCTP_DBG_OBJCNT_INC(name) \
@@ -469,6 +470,11 @@ static inline void sctp_skb_set_owner_r(struct sk_buff *skb, struct sock *sk)
         skb->sk = sk;
         skb->destructor = sctp_sock_rfree;
         atomic_add(event->rmem_len, &sk->sk_rmem_alloc);
+        /*
+         * This mimics the behavior of
+         * sk_stream_set_owner_r
+         */
+        sk->sk_forward_alloc -= event->rmem_len;
 }
 
 /* Tests if the list has one and only one entry. */
diff --git a/include/net/sctp/sm.h b/include/net/sctp/sm.h
index e8e3a64eb322..bf2f5ed69c15 100644
--- a/include/net/sctp/sm.h
+++ b/include/net/sctp/sm.h
@@ -143,6 +143,7 @@ sctp_state_fn_t sctp_sf_do_asconf_ack;
 sctp_state_fn_t sctp_sf_do_9_2_reshutack;
 sctp_state_fn_t sctp_sf_eat_fwd_tsn;
 sctp_state_fn_t sctp_sf_eat_fwd_tsn_fast;
+sctp_state_fn_t sctp_sf_eat_auth;
 
 /* Prototypes for primitive event state functions.  */
 sctp_state_fn_t sctp_sf_do_prm_asoc;
@@ -256,6 +257,7 @@ int sctp_process_asconf_ack(struct sctp_association *asoc,
 struct sctp_chunk *sctp_make_fwdtsn(const struct sctp_association *asoc,
                                     __u32 new_cum_tsn, size_t nstreams,
                                     struct sctp_fwdtsn_skip *skiplist);
+struct sctp_chunk *sctp_make_auth(const struct sctp_association *asoc);
 
 void sctp_chunk_assign_tsn(struct sctp_chunk *);
 void sctp_chunk_assign_ssn(struct sctp_chunk *);
diff --git a/include/net/sctp/structs.h b/include/net/sctp/structs.h
index baff49dfcdbd..ef892e00c833 100644
--- a/include/net/sctp/structs.h
+++ b/include/net/sctp/structs.h
@@ -64,6 +64,7 @@
 #include <linux/skbuff.h>       /* We need sk_buff_head. */
 #include <linux/workqueue.h>    /* We need tq_struct.    */
 #include <linux/sctp.h>         /* We need sctp* header structs.  */
+#include <net/sctp/auth.h>      /* We need auth specific structs */
 
 /* A convenience structure for handling sockaddr structures.
  * We should wean ourselves off this.
@@ -196,8 +197,6 @@ extern struct sctp_globals {
 
         /* This is the sctp port control hash.  */
         int port_hashsize;
-        int port_rover;
-        spinlock_t port_alloc_lock;  /* Protects port_rover. */
         struct sctp_bind_hashbucket *port_hashtable;
 
         /* This is the global local address list.
@@ -216,6 +215,9 @@ extern struct sctp_globals {
 
         /* Flag to indicate if PR-SCTP is enabled. */
         int prsctp_enable;
+
+        /* Flag to idicate if SCTP-AUTH is enabled */
+        int auth_enable;
 } sctp_globals;
 
 #define sctp_rto_initial                (sctp_globals.rto_initial)
@@ -248,6 +250,7 @@ extern struct sctp_globals {
 #define sctp_local_addr_lock            (sctp_globals.addr_list_lock)
 #define sctp_addip_enable               (sctp_globals.addip_enable)
 #define sctp_prsctp_enable              (sctp_globals.prsctp_enable)
+#define sctp_auth_enable                (sctp_globals.auth_enable)
 
 /* SCTP Socket type: UDP or TCP style. */
 typedef enum {
@@ -397,6 +400,9 @@ struct sctp_cookie {
 
         __u32 adaptation_ind;
 
+        __u8 auth_random[sizeof(sctp_paramhdr_t) + SCTP_AUTH_RANDOM_LENGTH];
+        __u8 auth_hmacs[SCTP_AUTH_NUM_HMACS + 2];
+        __u8 auth_chunks[sizeof(sctp_paramhdr_t) + SCTP_AUTH_MAX_CHUNKS];
 
         /* This is a shim for my peer's INIT packet, followed by
          * a copy of the raw address list of the association.
@@ -440,6 +446,10 @@ union sctp_params {
         struct sctp_ipv6addr_param *v6;
         union sctp_addr_param *addr;
         struct sctp_adaptation_ind_param *aind;
+        struct sctp_supported_ext_param *ext;
+        struct sctp_random_param *random;
+        struct sctp_chunks_param *chunks;
+        struct sctp_hmac_algo_param *hmac_algo;
 };
 
 /* RFC 2960.  Section 3.3.5 Heartbeat.
@@ -678,6 +688,7 @@ struct sctp_chunk {
                 struct sctp_errhdr *err_hdr;
                 struct sctp_addiphdr *addip_hdr;
                 struct sctp_fwdtsn_hdr *fwdtsn_hdr;
+                struct sctp_authhdr *auth_hdr;
         } subh;
 
         __u8 *chunk_end;
@@ -711,6 +722,13 @@ struct sctp_chunk {
          */
         struct sctp_transport *transport;
 
+        /* SCTP-AUTH:  For the special case inbound processing of COOKIE-ECHO
+         * we need save a pointer to the AUTH chunk, since the SCTP-AUTH
+         * spec violates the principle premis that all chunks are processed
+         * in order.
+         */
+        struct sk_buff *auth_chunk;
+
         __u8 rtt_in_progress;   /* Is this chunk used for RTT calculation? */
         __u8 resent;            /* Has this chunk ever been retransmitted. */
         __u8 has_tsn;           /* Does this chunk have a TSN yet? */
@@ -723,6 +741,7 @@ struct sctp_chunk {
         __s8 fast_retransmit;    /* Is this chunk fast retransmitted? */
         __u8 tsn_missing_report; /* Data chunk missing counter. */
         __u8 data_accepted;     /* At least 1 chunk in this packet accepted */
+        __u8 auth;              /* IN: was auth'ed | OUT: needs auth */
 };
 
 void sctp_chunk_hold(struct sctp_chunk *);
@@ -731,7 +750,6 @@ int sctp_user_addto_chunk(struct sctp_chunk *chunk, int off, int len,
                           struct iovec *data);
 void sctp_chunk_free(struct sctp_chunk *);
 void  *sctp_addto_chunk(struct sctp_chunk *, int len, const void *data);
-void  *sctp_addto_param(struct sctp_chunk *, int len, const void *data);
 struct sctp_chunk *sctp_chunkify(struct sk_buff *,
                                  const struct sctp_association *,
                                  struct sock *);
@@ -773,16 +791,25 @@ struct sctp_packet {
          */
         struct sctp_transport *transport;
 
+        /* pointer to the auth chunk for this packet */
+        struct sctp_chunk *auth;
+
         /* This packet contains a COOKIE-ECHO chunk. */
-        char has_cookie_echo;
+        __u8 has_cookie_echo;
+
+        /* This packet contains a SACK chunk. */
+        __u8 has_sack;
+
+        /* This packet contains an AUTH chunk */
+        __u8 has_auth;
 
-        /* This packet containsa SACK chunk. */
-        char has_sack;
+        /* This packet contains at least 1 DATA chunk */
+        __u8 has_data;
 
         /* SCTP cannot fragment this packet. So let ip fragment it. */
-        char ipfragok;
+        __u8 ipfragok;
 
-        int malloced;
+        __u8 malloced;
 };
 
 struct sctp_packet *sctp_packet_init(struct sctp_packet *,
@@ -1045,6 +1072,7 @@ void sctp_inq_init(struct sctp_inq *);
 void sctp_inq_free(struct sctp_inq *);
 void sctp_inq_push(struct sctp_inq *, struct sctp_chunk *packet);
 struct sctp_chunk *sctp_inq_pop(struct sctp_inq *);
+struct sctp_chunkhdr *sctp_inq_peek(struct sctp_inq *);
 void sctp_inq_set_th_handler(struct sctp_inq *, work_func_t);
 
 /* This is the structure we use to hold outbound chunks.  You push
@@ -1291,6 +1319,21 @@ struct sctp_endpoint {
 
         /* rcvbuf acct. policy. */
         __u32 rcvbuf_policy;
+
+        /* SCTP AUTH: array of the HMACs that will be allocated
+         * we need this per association so that we don't serialize
+         */
+        struct crypto_hash **auth_hmacs;
+
+        /* SCTP-AUTH: hmacs for the endpoint encoded into parameter */
+         struct sctp_hmac_algo_param *auth_hmacs_list;
+
+        /* SCTP-AUTH: chunks to authenticate encoded into parameter */
+        struct sctp_chunks_param *auth_chunk_list;
+
+        /* SCTP-AUTH: endpoint shared keys */
+        struct list_head endpoint_shared_keys;
+        __u16 active_key_id;
 };
 
 /* Recover the outter endpoint structure. */
@@ -1497,6 +1540,8 @@ struct sctp_association {
                 __u8    hostname_address;/* Peer understands DNS addresses? */
                 __u8    asconf_capable;  /* Does peer support ADDIP? */
                 __u8    prsctp_capable;  /* Can peer do PR-SCTP? */
+                __u8    auth_capable;    /* Is peer doing SCTP-AUTH? */
+                __u8    addip_capable;   /* Can peer do ADD-IP */
 
                 __u32   adaptation_ind;  /* Adaptation Code point. */
 
@@ -1514,6 +1559,14 @@ struct sctp_association {
                  * Initial TSN Value minus 1
                  */
                 __u32 addip_serial;
+
+                /* SCTP-AUTH: We need to know pears random number, hmac list
+                 * and authenticated chunk list.  All that is part of the
+                 * cookie and these are just pointers to those locations
+                 */
+                sctp_random_param_t *peer_random;
+                sctp_chunks_param_t *peer_chunks;
+                sctp_hmac_algo_param_t *peer_hmacs;
         } peer;
 
         /* State       : A state variable indicating what state the
@@ -1797,6 +1850,24 @@ struct sctp_association {
          */
         __u32 addip_serial;
 
+        /* SCTP AUTH: list of the endpoint shared keys.  These
+         * keys are provided out of band by the user applicaton
+         * and can't change during the lifetime of the association
+         */
+        struct list_head endpoint_shared_keys;
+
+        /* SCTP AUTH:
+         * The current generated assocaition shared key (secret)
+         */
+        struct sctp_auth_bytes *asoc_shared_key;
+
+        /* SCTP AUTH: hmac id of the first peer requested algorithm
+         * that we support.
+         */
+        __u16 default_hmac_id;
+
+        __u16 active_key_id;
+
         /* Need to send an ECNE Chunk? */
         char need_ecne;
 
diff --git a/include/net/sctp/ulpevent.h b/include/net/sctp/ulpevent.h
index de88ed5b0ba6..922a151eb93c 100644
--- a/include/net/sctp/ulpevent.h
+++ b/include/net/sctp/ulpevent.h
@@ -128,6 +128,10 @@ struct sctp_ulpevent *sctp_ulpevent_make_rcvmsg(struct sctp_association *asoc,
         struct sctp_chunk *chunk,
         gfp_t gfp);
 
+struct sctp_ulpevent *sctp_ulpevent_make_authkey(
+        const struct sctp_association *asoc, __u16 key_id,
+        __u32 indication, gfp_t gfp);
+
 void sctp_ulpevent_read_sndrcvinfo(const struct sctp_ulpevent *event,
         struct msghdr *);
 __u16 sctp_ulpevent_get_notification_type(const struct sctp_ulpevent *event);
diff --git a/include/net/sctp/user.h b/include/net/sctp/user.h
index 6d2b57758cca..00848b641f59 100644
--- a/include/net/sctp/user.h
+++ b/include/net/sctp/user.h
@@ -103,6 +103,21 @@ enum sctp_optname {
 #define SCTP_PARTIAL_DELIVERY_POINT SCTP_PARTIAL_DELIVERY_POINT
         SCTP_MAX_BURST,         /* Set/Get max burst */
 #define SCTP_MAX_BURST SCTP_MAX_BURST
+        SCTP_AUTH_CHUNK,        /* Set only: add a chunk type to authenticat */
+#define SCTP_AUTH_CHUNK SCTP_AUTH_CHUNK
+        SCTP_HMAC_IDENT,
+#define SCTP_HMAC_IDENT SCTP_HMAC_IDENT
+        SCTP_AUTH_KEY,
+#define SCTP_AUTH_KEY SCTP_AUTH_KEY
+        SCTP_AUTH_ACTIVE_KEY,
+#define SCTP_AUTH_ACTIVE_KEY SCTP_AUTH_ACTIVE_KEY
+        SCTP_AUTH_DELETE_KEY,
+#define SCTP_AUTH_DELETE_KEY SCTP_AUTH_DELETE_KEY
+        SCTP_PEER_AUTH_CHUNKS,          /* Read only */
+#define SCTP_PEER_AUTH_CHUNKS SCTP_PEER_AUTH_CHUNKS
+        SCTP_LOCAL_AUTH_CHUNKS,         /* Read only */
+#define SCTP_LOCAL_AUTH_CHUNKS SCTP_LOCAL_AUTH_CHUNKS
+
 
         /* Internal Socket Options. Some of the sctp library functions are 
          * implemented using these socket options.
@@ -370,6 +385,19 @@ struct sctp_pdapi_event {
 
 enum { SCTP_PARTIAL_DELIVERY_ABORTED=0, };
 
+struct sctp_authkey_event {
+        __u16 auth_type;
+        __u16 auth_flags;
+        __u32 auth_length;
+        __u16 auth_keynumber;
+        __u16 auth_altkeynumber;
+        __u32 auth_indication;
+        sctp_assoc_t auth_assoc_id;
+};
+
+enum { SCTP_AUTH_NEWKEY = 0, };
+
+
 /*
  * Described in Section 7.3
  *   Ancillary Data and Notification Interest Options
@@ -405,6 +433,7 @@ union sctp_notification {
         struct sctp_shutdown_event sn_shutdown_event;
         struct sctp_adaptation_event sn_adaptation_event;
         struct sctp_pdapi_event sn_pdapi_event;
+        struct sctp_authkey_event sn_authkey_event;
 };
 
 /* Section 5.3.1
@@ -421,6 +450,7 @@ enum sctp_sn_type {
         SCTP_SHUTDOWN_EVENT,
         SCTP_PARTIAL_DELIVERY_EVENT,
         SCTP_ADAPTATION_INDICATION,
+        SCTP_AUTHENTICATION_EVENT,
 };
 
 /* Notification error codes used to fill up the error fields in some
@@ -539,6 +569,54 @@ struct sctp_paddrparams {
         __u32                   spp_flags;
 } __attribute__((packed, aligned(4)));
 
+/*
+ * 7.1.18.  Add a chunk that must be authenticated (SCTP_AUTH_CHUNK)
+ *
+ * This set option adds a chunk type that the user is requesting to be
+ * received only in an authenticated way.  Changes to the list of chunks
+ * will only effect future associations on the socket.
+ */
+struct sctp_authchunk {
+        __u8            sauth_chunk;
+};
+
+/*
+ * 7.1.19.  Get or set the list of supported HMAC Identifiers (SCTP_HMAC_IDENT)
+ *
+ * This option gets or sets the list of HMAC algorithms that the local
+ * endpoint requires the peer to use.
+*/
+struct sctp_hmacalgo {
+        __u16           shmac_num_idents;
+        __u16           shmac_idents[];
+};
+
+/*
+ * 7.1.20.  Set a shared key (SCTP_AUTH_KEY)
+ *
+ * This option will set a shared secret key which is used to build an
+ * association shared key.
+ */
+struct sctp_authkey {
+        sctp_assoc_t    sca_assoc_id;
+        __u16           sca_keynumber;
+        __u16           sca_keylen;
+        __u8            sca_key[];
+};
+
+/*
+ * 7.1.21.  Get or set the active shared key (SCTP_AUTH_ACTIVE_KEY)
+ *
+ * This option will get or set the active shared key to be used to build
+ * the association shared key.
+ */
+
+struct sctp_authkeyid {
+        sctp_assoc_t    scact_assoc_id;
+        __u16           scact_keynumber;
+};
+
+
 /* 7.1.23. Delayed Ack Timer (SCTP_DELAYED_ACK_TIME)
  *
  *   This options will get or set the delayed ack timer.  The time is set
@@ -608,6 +686,18 @@ struct sctp_status {
 };
 
 /*
+ * 7.2.3.  Get the list of chunks the peer requires to be authenticated
+ *         (SCTP_PEER_AUTH_CHUNKS)
+ *
+ * This option gets a list of chunks for a specified association that
+ * the peer requires to be received authenticated only.
+ */
+struct sctp_authchunks {
+        sctp_assoc_t            gauth_assoc_id;
+        uint8_t                 gauth_chunks[];
+};
+
+/*
  * 8.3, 8.5 get all peer/local addresses in an association.
  * This parameter struct is used by SCTP_GET_PEER_ADDRS and 
  * SCTP_GET_LOCAL_ADDRS socket options used internally to implement
diff --git a/include/net/snmp.h b/include/net/snmp.h
index 464970e39ec0..ea206bff0dc4 100644
--- a/include/net/snmp.h
+++ b/include/net/snmp.h
@@ -82,12 +82,23 @@ struct icmp_mib {
         unsigned long   mibs[ICMP_MIB_MAX];
 } __SNMP_MIB_ALIGN__;
 
+#define ICMPMSG_MIB_MAX __ICMPMSG_MIB_MAX
+struct icmpmsg_mib {
+        unsigned long   mibs[ICMPMSG_MIB_MAX];
+} __SNMP_MIB_ALIGN__;
+
 /* ICMP6 (IPv6-ICMP) */
 #define ICMP6_MIB_MAX   __ICMP6_MIB_MAX
 struct icmpv6_mib {
         unsigned long   mibs[ICMP6_MIB_MAX];
 } __SNMP_MIB_ALIGN__;
 
+#define ICMP6MSG_MIB_MAX  __ICMP6MSG_MIB_MAX
+struct icmpv6msg_mib {
+        unsigned long   mibs[ICMP6MSG_MIB_MAX];
+} __SNMP_MIB_ALIGN__;
+
+
 /* TCP */
 #define TCP_MIB_MAX     __TCP_MIB_MAX
 struct tcp_mib {
diff --git a/include/net/sock.h b/include/net/sock.h
index dfeb8b13024f..453c79d0915b 100644
--- a/include/net/sock.h
+++ b/include/net/sock.h
@@ -40,6 +40,7 @@
 #ifndef _SOCK_H
 #define _SOCK_H
 
+#include <linux/kernel.h>
 #include <linux/list.h>
 #include <linux/timer.h>
 #include <linux/cache.h>
@@ -55,6 +56,7 @@
 #include <asm/atomic.h>
 #include <net/dst.h>
 #include <net/checksum.h>
+#include <net/net_namespace.h>
 
 /*
  * This structure really needs to be cleaned up.
@@ -75,10 +77,9 @@
  * between user contexts and software interrupt processing, whereas the
  * mini-semaphore synchronizes multiple users amongst themselves.
  */
-struct sock_iocb;
 typedef struct {
         spinlock_t              slock;
-        struct sock_iocb        *owner;
+        int                     owned;
         wait_queue_head_t       wq;
         /*
          * We express the mutex-alike socket_lock semantics
@@ -105,6 +106,7 @@ struct proto;
  *      @skc_refcnt: reference count
  *      @skc_hash: hash value used with various protocol lookup tables
  *      @skc_prot: protocol handlers inside a network family
+ *      @skc_net: reference to the network namespace of this socket
  *
  *      This is the minimal network layer representation of sockets, the header
  *      for struct sock and struct inet_timewait_sock.
@@ -119,6 +121,7 @@ struct sock_common {
         atomic_t                skc_refcnt;
         unsigned int            skc_hash;
         struct proto            *skc_prot;
+        struct net              *skc_net;
 };
 
 /**
@@ -195,6 +198,7 @@ struct sock {
 #define sk_refcnt               __sk_common.skc_refcnt
 #define sk_hash                 __sk_common.skc_hash
 #define sk_prot                 __sk_common.skc_prot
+#define sk_net                  __sk_common.skc_net
         unsigned char           sk_shutdown : 2,
                                 sk_no_check : 2,
                                 sk_userlocks : 4;
@@ -481,17 +485,17 @@ static inline void sk_add_backlog(struct sock *sk, struct sk_buff *skb)
         skb->next = NULL;
 }
 
-#define sk_wait_event(__sk, __timeo, __condition)               \
-({      int rc;                                                 \
-        release_sock(__sk);                                     \
-        rc = __condition;                                       \
-        if (!rc) {                                              \
-                *(__timeo) = schedule_timeout(*(__timeo));      \
-        }                                                       \
-        lock_sock(__sk);                                        \
-        rc = __condition;                                       \
-        rc;                                                     \
-})
+#define sk_wait_event(__sk, __timeo, __condition)                       \
+        ({      int __rc;                                               \
+                release_sock(__sk);                                     \
+                __rc = __condition;                                     \
+                if (!__rc) {                                            \
+                        *(__timeo) = schedule_timeout(*(__timeo));      \
+                }                                                       \
+                lock_sock(__sk);                                        \
+                __rc = __condition;                                     \
+                __rc;                                                   \
+        })
 
 extern int sk_stream_wait_connect(struct sock *sk, long *timeo_p);
 extern int sk_stream_wait_memory(struct sock *sk, long *timeo_p);
@@ -702,7 +706,7 @@ extern int sk_stream_mem_schedule(struct sock *sk, int size, int kind);
 
 static inline int sk_stream_pages(int amt)
 {
-        return (amt + SK_STREAM_MEM_QUANTUM - 1) / SK_STREAM_MEM_QUANTUM;
+        return DIV_ROUND_UP(amt, SK_STREAM_MEM_QUANTUM);
 }
 
 static inline void sk_stream_mem_reclaim(struct sock *sk)
@@ -736,7 +740,7 @@ static inline int sk_stream_wmem_schedule(struct sock *sk, int size)
  * Since ~2.3.5 it is also exclusive sleep lock serializing
  * accesses from user process context.
  */
-#define sock_owned_by_user(sk)  ((sk)->sk_lock.owner)
+#define sock_owned_by_user(sk)  ((sk)->sk_lock.owned)
 
 /*
  * Macro so as to not evaluate some arguments when
@@ -747,7 +751,7 @@ static inline int sk_stream_wmem_schedule(struct sock *sk, int size)
  */
 #define sock_lock_init_class_and_name(sk, sname, skey, name, key)       \
 do {                                                                    \
-        sk->sk_lock.owner = NULL;                                       \
+        sk->sk_lock.owned = 0;                                  \
         init_waitqueue_head(&sk->sk_lock.wq);                           \
         spin_lock_init(&(sk)->sk_lock.slock);                           \
         debug_check_no_locks_freed((void *)&(sk)->sk_lock,              \
@@ -773,7 +777,7 @@ extern void FASTCALL(release_sock(struct sock *sk));
                                 SINGLE_DEPTH_NESTING)
 #define bh_unlock_sock(__sk)    spin_unlock(&((__sk)->sk_lock.slock))
 
-extern struct sock              *sk_alloc(int family,
+extern struct sock              *sk_alloc(struct net *net, int family,
                                           gfp_t priority,
                                           struct proto *prot, int zero_it);
 extern void                     sk_free(struct sock *sk);
@@ -1002,6 +1006,7 @@ static inline void sock_copy(struct sock *nsk, const struct sock *osk)
 #endif
 
         memcpy(nsk, osk, osk->sk_prot->obj_size);
+        get_net(nsk->sk_net);
 #ifdef CONFIG_SECURITY_NETWORK
         nsk->sk_security = sptr;
         security_sk_clone(osk, nsk);
diff --git a/include/net/tc_act/tc_nat.h b/include/net/tc_act/tc_nat.h
new file mode 100644
index 000000000000..4a691f34d703
--- /dev/null
+++ b/include/net/tc_act/tc_nat.h
@@ -0,0 +1,21 @@
+#ifndef __NET_TC_NAT_H
+#define __NET_TC_NAT_H
+
+#include <linux/types.h>
+#include <net/act_api.h>
+
+struct tcf_nat {
+        struct tcf_common common;
+
+        __be32 old_addr;
+        __be32 new_addr;
+        __be32 mask;
+        u32 flags;
+};
+
+static inline struct tcf_nat *to_tcf_nat(struct tcf_common *pc)
+{
+        return container_of(pc, struct tcf_nat, common);
+}
+
+#endif /* __NET_TC_NAT_H */
diff --git a/include/net/tcp.h b/include/net/tcp.h
index 54053de0bdd7..92049e681258 100644
--- a/include/net/tcp.h
+++ b/include/net/tcp.h
@@ -39,6 +39,7 @@
 #include <net/snmp.h>
 #include <net/ip.h>
 #include <net/tcp_states.h>
+#include <net/inet_ecn.h>
 
 #include <linux/seq_file.h>
 
@@ -330,6 +331,17 @@ static inline void tcp_clear_options(struct tcp_options_received *rx_opt)
         rx_opt->tstamp_ok = rx_opt->sack_ok = rx_opt->wscale_ok = rx_opt->snd_wscale = 0;
 }
 
+#define TCP_ECN_OK              1
+#define TCP_ECN_QUEUE_CWR       2
+#define TCP_ECN_DEMAND_CWR      4
+
+static __inline__ void
+TCP_ECN_create_request(struct request_sock *req, struct tcphdr *th)
+{
+        if (sysctl_tcp_ecn && th->ece && th->cwr)
+                inet_rsk(req)->ecn_ok = 1;
+}
+
 enum tcp_tw_status
 {
         TCP_TW_SUCCESS = 0,
@@ -573,8 +585,6 @@ struct tcp_skb_cb {
 
 #define TCP_SKB_CB(__skb)       ((struct tcp_skb_cb *)&((__skb)->cb[0]))
 
-#include <net/tcp_ecn.h>
-
 /* Due to TSO, an SKB can be composed of multiple actual
  * packets.  To keep these tracked properly, we use this.
  */
@@ -589,32 +599,19 @@ static inline int tcp_skb_mss(const struct sk_buff *skb)
         return skb_shinfo(skb)->gso_size;
 }
 
-static inline void tcp_dec_pcount_approx(__u32 *count,
-                                         const struct sk_buff *skb)
+static inline void tcp_dec_pcount_approx_int(__u32 *count, const int decr)
 {
         if (*count) {
-                *count -= tcp_skb_pcount(skb);
+                *count -= decr;
                 if ((int)*count < 0)
                         *count = 0;
         }
 }
 
-static inline void tcp_packets_out_inc(struct sock *sk,
-                                       const struct sk_buff *skb)
-{
-        struct tcp_sock *tp = tcp_sk(sk);
-        int orig = tp->packets_out;
-
-        tp->packets_out += tcp_skb_pcount(skb);
-        if (!orig)
-                inet_csk_reset_xmit_timer(sk, ICSK_TIME_RETRANS,
-                                          inet_csk(sk)->icsk_rto, TCP_RTO_MAX);
-}
-
-static inline void tcp_packets_out_dec(struct tcp_sock *tp, 
-                                       const struct sk_buff *skb)
+static inline void tcp_dec_pcount_approx(__u32 *count,
+                                         const struct sk_buff *skb)
 {
-        tp->packets_out -= tcp_skb_pcount(skb);
+        tcp_dec_pcount_approx_int(count, tcp_skb_pcount(skb));
 }
 
 /* Events passed to congestion control interface */
@@ -704,6 +701,39 @@ static inline void tcp_ca_event(struct sock *sk, const enum tcp_ca_event event)
                 icsk->icsk_ca_ops->cwnd_event(sk, event);
 }
 
+/* These functions determine how the current flow behaves in respect of SACK
+ * handling. SACK is negotiated with the peer, and therefore it can vary
+ * between different flows.
+ *
+ * tcp_is_sack - SACK enabled
+ * tcp_is_reno - No SACK
+ * tcp_is_fack - FACK enabled, implies SACK enabled
+ */
+static inline int tcp_is_sack(const struct tcp_sock *tp)
+{
+        return tp->rx_opt.sack_ok;
+}
+
+static inline int tcp_is_reno(const struct tcp_sock *tp)
+{
+        return !tcp_is_sack(tp);
+}
+
+static inline int tcp_is_fack(const struct tcp_sock *tp)
+{
+        return tp->rx_opt.sack_ok & 2;
+}
+
+static inline void tcp_enable_fack(struct tcp_sock *tp)
+{
+        tp->rx_opt.sack_ok |= 2;
+}
+
+static inline unsigned int tcp_left_out(const struct tcp_sock *tp)
+{
+        return tp->sacked_out + tp->lost_out;
+}
+
 /* This determines how many packets are "in the network" to the best
  * of our knowledge.  In many cases it is conservative, but where
  * detailed information is available from the receiver (via SACK
@@ -720,7 +750,7 @@ static inline void tcp_ca_event(struct sock *sk, const enum tcp_ca_event event)
  */
 static inline unsigned int tcp_packets_in_flight(const struct tcp_sock *tp)
 {
-        return (tp->packets_out - tp->left_out + tp->retrans_out);
+        return tp->packets_out - tcp_left_out(tp) + tp->retrans_out;
 }
 
 /* If cwnd > ssthresh, we may raise ssthresh to be half-way to cwnd.
@@ -738,12 +768,8 @@ static inline __u32 tcp_current_ssthresh(const struct sock *sk)
                             (tp->snd_cwnd >> 2)));
 }
 
-static inline void tcp_sync_left_out(struct tcp_sock *tp)
-{
-        BUG_ON(tp->rx_opt.sack_ok &&
-               (tp->sacked_out + tp->lost_out > tp->packets_out));
-        tp->left_out = tp->sacked_out + tp->lost_out;
-}
+/* Use define here intentionally to get WARN_ON location shown at the caller */
+#define tcp_verify_left_out(tp) WARN_ON(tcp_left_out(tp) > tp->packets_out)
 
 extern void tcp_enter_cwr(struct sock *sk, const int set_ssthresh);
 extern __u32 tcp_init_cwnd(struct tcp_sock *tp, struct dst_entry *dst);
@@ -1040,12 +1066,18 @@ static inline void tcp_mib_init(void)
         TCP_ADD_STATS_USER(TCP_MIB_MAXCONN, -1);
 }
 
-/*from STCP */
-static inline void clear_all_retrans_hints(struct tcp_sock *tp){
+/* from STCP */
+static inline void tcp_clear_retrans_hints_partial(struct tcp_sock *tp)
+{
         tp->lost_skb_hint = NULL;
         tp->scoreboard_skb_hint = NULL;
         tp->retransmit_skb_hint = NULL;
         tp->forward_skb_hint = NULL;
+}
+
+static inline void tcp_clear_all_retrans_hints(struct tcp_sock *tp)
+{
+        tcp_clear_retrans_hints_partial(tp);
         tp->fastpath_skb_hint = NULL;
 }
 
diff --git a/include/net/tcp_ecn.h b/include/net/tcp_ecn.h
deleted file mode 100644
index 89eb3e05116d..000000000000
--- a/include/net/tcp_ecn.h
+++ /dev/null
@@ -1,130 +0,0 @@
-#ifndef _NET_TCP_ECN_H_
-#define _NET_TCP_ECN_H_ 1
-
-#include <net/inet_ecn.h>
-#include <net/request_sock.h>
-
-#define TCP_HP_BITS (~(TCP_RESERVED_BITS|TCP_FLAG_PSH))
-
-#define TCP_ECN_OK              1
-#define TCP_ECN_QUEUE_CWR       2
-#define TCP_ECN_DEMAND_CWR      4
-
-static inline void TCP_ECN_queue_cwr(struct tcp_sock *tp)
-{
-        if (tp->ecn_flags&TCP_ECN_OK)
-                tp->ecn_flags |= TCP_ECN_QUEUE_CWR;
-}
-
-
-/* Output functions */
-
-static inline void TCP_ECN_send_synack(struct tcp_sock *tp,
-                                       struct sk_buff *skb)
-{
-        TCP_SKB_CB(skb)->flags &= ~TCPCB_FLAG_CWR;
-        if (!(tp->ecn_flags&TCP_ECN_OK))
-                TCP_SKB_CB(skb)->flags &= ~TCPCB_FLAG_ECE;
-}
-
-static inline void TCP_ECN_send_syn(struct sock *sk, struct sk_buff *skb)
-{
-        struct tcp_sock *tp = tcp_sk(sk);
-
-        tp->ecn_flags = 0;
-        if (sysctl_tcp_ecn) {
-                TCP_SKB_CB(skb)->flags |= TCPCB_FLAG_ECE|TCPCB_FLAG_CWR;
-                tp->ecn_flags = TCP_ECN_OK;
-        }
-}
-
-static __inline__ void
-TCP_ECN_make_synack(struct request_sock *req, struct tcphdr *th)
-{
-        if (inet_rsk(req)->ecn_ok)
-                th->ece = 1;
-}
-
-static inline void TCP_ECN_send(struct sock *sk, struct sk_buff *skb,
-                                int tcp_header_len)
-{
-        struct tcp_sock *tp = tcp_sk(sk);
-
-        if (tp->ecn_flags & TCP_ECN_OK) {
-                /* Not-retransmitted data segment: set ECT and inject CWR. */
-                if (skb->len != tcp_header_len &&
-                    !before(TCP_SKB_CB(skb)->seq, tp->snd_nxt)) {
-                        INET_ECN_xmit(sk);
-                        if (tp->ecn_flags&TCP_ECN_QUEUE_CWR) {
-                                tp->ecn_flags &= ~TCP_ECN_QUEUE_CWR;
-                                tcp_hdr(skb)->cwr = 1;
-                                skb_shinfo(skb)->gso_type |= SKB_GSO_TCP_ECN;
-                        }
-                } else {
-                        /* ACK or retransmitted segment: clear ECT|CE */
-                        INET_ECN_dontxmit(sk);
-                }
-                if (tp->ecn_flags & TCP_ECN_DEMAND_CWR)
-                        tcp_hdr(skb)->ece = 1;
-        }
-}
-
-/* Input functions */
-
-static inline void TCP_ECN_accept_cwr(struct tcp_sock *tp, struct sk_buff *skb)
-{
-        if (tcp_hdr(skb)->cwr)
-                tp->ecn_flags &= ~TCP_ECN_DEMAND_CWR;
-}
-
-static inline void TCP_ECN_withdraw_cwr(struct tcp_sock *tp)
-{
-        tp->ecn_flags &= ~TCP_ECN_DEMAND_CWR;
-}
-
-static inline void TCP_ECN_check_ce(struct tcp_sock *tp, struct sk_buff *skb)
-{
-        if (tp->ecn_flags&TCP_ECN_OK) {
-                if (INET_ECN_is_ce(TCP_SKB_CB(skb)->flags))
-                        tp->ecn_flags |= TCP_ECN_DEMAND_CWR;
-                /* Funny extension: if ECT is not set on a segment,
-                 * it is surely retransmit. It is not in ECN RFC,
-                 * but Linux follows this rule. */
-                else if (INET_ECN_is_not_ect((TCP_SKB_CB(skb)->flags)))
-                        tcp_enter_quickack_mode((struct sock *)tp);
-        }
-}
-
-static inline void TCP_ECN_rcv_synack(struct tcp_sock *tp, struct tcphdr *th)
-{
-        if ((tp->ecn_flags&TCP_ECN_OK) && (!th->ece || th->cwr))
-                tp->ecn_flags &= ~TCP_ECN_OK;
-}
-
-static inline void TCP_ECN_rcv_syn(struct tcp_sock *tp, struct tcphdr *th)
-{
-        if ((tp->ecn_flags&TCP_ECN_OK) && (!th->ece || !th->cwr))
-                tp->ecn_flags &= ~TCP_ECN_OK;
-}
-
-static inline int TCP_ECN_rcv_ecn_echo(struct tcp_sock *tp, struct tcphdr *th)
-{
-        if (th->ece && !th->syn && (tp->ecn_flags&TCP_ECN_OK))
-                return 1;
-        return 0;
-}
-
-static inline void TCP_ECN_openreq_child(struct tcp_sock *tp,
-                                         struct request_sock *req)
-{
-        tp->ecn_flags = inet_rsk(req)->ecn_ok ? TCP_ECN_OK : 0;
-}
-
-static __inline__ void
-TCP_ECN_create_request(struct request_sock *req, struct tcphdr *th)
-{
-        if (sysctl_tcp_ecn && th->ece && th->cwr)
-                inet_rsk(req)->ecn_ok = 1;
-}
-
-#endif
diff --git a/include/net/veth.h b/include/net/veth.h
new file mode 100644
index 000000000000..3354c1eb424e
--- /dev/null
+++ b/include/net/veth.h
@@ -0,0 +1,12 @@
+#ifndef __NET_VETH_H_
+#define __NET_VETH_H_
+
+enum {
+        VETH_INFO_UNSPEC,
+        VETH_INFO_PEER,
+
+        __VETH_INFO_MAX
+#define VETH_INFO_MAX   (__VETH_INFO_MAX - 1)
+};
+
+#endif
diff --git a/include/net/wext.h b/include/net/wext.h
index c02b8decf3af..80b31d826b7a 100644
--- a/include/net/wext.h
+++ b/include/net/wext.h
@@ -5,16 +5,23 @@
  * wireless extensions interface to the core code
  */
 
+struct net;
+
 #ifdef CONFIG_WIRELESS_EXT
-extern int wext_proc_init(void);
-extern int wext_handle_ioctl(struct ifreq *ifr, unsigned int cmd,
+extern int wext_proc_init(struct net *net);
+extern void wext_proc_exit(struct net *net);
+extern int wext_handle_ioctl(struct net *net, struct ifreq *ifr, unsigned int cmd,
                              void __user *arg);
 #else
-static inline int wext_proc_init(void)
+static inline int wext_proc_init(struct net *net)
 {
         return 0;
 }
-static inline int wext_handle_ioctl(struct ifreq *ifr, unsigned int cmd,
+static inline void wext_proc_exit(struct net *net)
+{
+        return;
+}
+static inline int wext_handle_ioctl(struct net *net, struct ifreq *ifr, unsigned int cmd,
                                     void __user *arg)
 {
         return -EINVAL;
diff --git a/include/net/xfrm.h b/include/net/xfrm.h
index a5f80bfbaaa4..77be396ca633 100644
--- a/include/net/xfrm.h
+++ b/include/net/xfrm.h
@@ -2,7 +2,6 @@
 #define _NET_XFRM_H
 
 #include <linux/compiler.h>
-#include <linux/in.h>
 #include <linux/xfrm.h>
 #include <linux/spinlock.h>
 #include <linux/list.h>
@@ -12,9 +11,11 @@
 #include <linux/ipsec.h>
 #include <linux/in6.h>
 #include <linux/mutex.h>
+#include <linux/audit.h>
 
 #include <net/sock.h>
 #include <net/dst.h>
+#include <net/ip.h>
 #include <net/route.h>
 #include <net/ipv6.h>
 #include <net/ip6_fib.h>
@@ -278,6 +279,7 @@ struct xfrm_type
         __u8                    proto;
         __u8                    flags;
 #define XFRM_TYPE_NON_FRAGMENT  1
+#define XFRM_TYPE_REPLAY_PROT   2
 
         int                     (*init_state)(struct xfrm_state *x);
         void                    (*destructor)(struct xfrm_state *);
@@ -298,6 +300,18 @@ extern void xfrm_put_type(struct xfrm_type *type);
 
 struct xfrm_mode {
         int (*input)(struct xfrm_state *x, struct sk_buff *skb);
+
+        /*
+         * Add encapsulation header.
+         *
+         * On exit, the transport header will be set to the start of the
+         * encapsulation header to be filled in by x->type->output and
+         * the mac header will be set to the nextheader (protocol for
+         * IPv4) field of the extension header directly preceding the
+         * encapsulation header, or in its absence, that of the top IP
+         * header.  The value of the network header will always point
+         * to the top IP header while skb->data will point to the payload.
+         */
         int (*output)(struct xfrm_state *x,struct sk_buff *skb);
 
         struct module *owner;
@@ -418,18 +432,66 @@ extern int xfrm_unregister_km(struct xfrm_mgr *km);
 
 extern unsigned int xfrm_policy_count[XFRM_POLICY_MAX*2];
 
+/*
+ * This structure is used for the duration where packets are being
+ * transformed by IPsec.  As soon as the packet leaves IPsec the
+ * area beyond the generic IP part may be overwritten.
+ */
+struct xfrm_skb_cb {
+        union {
+                struct inet_skb_parm h4;
+                struct inet6_skb_parm h6;
+        } header;
+
+        /* Sequence number for replay protection. */
+        u64 seq;
+};
+
+#define XFRM_SKB_CB(__skb) ((struct xfrm_skb_cb *)&((__skb)->cb[0]))
+
 /* Audit Information */
 struct xfrm_audit
 {
-        uid_t   loginuid;
+        u32     loginuid;
         u32     secid;
 };
 
 #ifdef CONFIG_AUDITSYSCALL
-extern void xfrm_audit_log(uid_t auid, u32 secid, int type, int result,
-                    struct xfrm_policy *xp, struct xfrm_state *x);
+static inline struct audit_buffer *xfrm_audit_start(u32 auid, u32 sid)
+{
+        struct audit_buffer *audit_buf = NULL;
+        char *secctx;
+        u32 secctx_len;
+
+        audit_buf = audit_log_start(current->audit_context, GFP_ATOMIC,
+                              AUDIT_MAC_IPSEC_EVENT);
+        if (audit_buf == NULL)
+                return NULL;
+
+        audit_log_format(audit_buf, "auid=%u", auid);
+
+        if (sid != 0 &&
+            security_secid_to_secctx(sid, &secctx, &secctx_len) == 0) {
+                audit_log_format(audit_buf, " subj=%s", secctx);
+                security_release_secctx(secctx, secctx_len);
+        } else
+                audit_log_task_context(audit_buf);
+        return audit_buf;
+}
+
+extern void xfrm_audit_policy_add(struct xfrm_policy *xp, int result,
+                                  u32 auid, u32 sid);
+extern void xfrm_audit_policy_delete(struct xfrm_policy *xp, int result,
+                                  u32 auid, u32 sid);
+extern void xfrm_audit_state_add(struct xfrm_state *x, int result,
+                                 u32 auid, u32 sid);
+extern void xfrm_audit_state_delete(struct xfrm_state *x, int result,
+                                    u32 auid, u32 sid);
 #else
-#define xfrm_audit_log(a,s,t,r,p,x) do { ; } while (0)
+#define xfrm_audit_policy_add(x, r, a, s)       do { ; } while (0)
+#define xfrm_audit_policy_delete(x, r, a, s)    do { ; } while (0)
+#define xfrm_audit_state_add(x, r, a, s)        do { ; } while (0)
+#define xfrm_audit_state_delete(x, r, a, s)     do { ; } while (0)
 #endif /* CONFIG_AUDITSYSCALL */
 
 static inline void xfrm_pol_hold(struct xfrm_policy *policy)
@@ -981,9 +1043,9 @@ extern void xfrm_spd_getinfo(struct xfrmk_spdinfo *si);
 extern int xfrm_replay_check(struct xfrm_state *x, __be32 seq);
 extern void xfrm_replay_advance(struct xfrm_state *x, __be32 seq);
 extern void xfrm_replay_notify(struct xfrm_state *x, int event);
-extern int xfrm_state_check(struct xfrm_state *x, struct sk_buff *skb);
 extern int xfrm_state_mtu(struct xfrm_state *x, int mtu);
 extern int xfrm_init_state(struct xfrm_state *x);
+extern int xfrm_output(struct sk_buff *skb);
 extern int xfrm4_rcv(struct sk_buff *skb);
 extern int xfrm4_output(struct sk_buff *skb);
 extern int xfrm4_tunnel_register(struct xfrm_tunnel *handler, unsigned short family);
@@ -1034,7 +1096,7 @@ struct xfrm_policy *xfrm_policy_bysel_ctx(u8 type, int dir,
 struct xfrm_policy *xfrm_policy_byid(u8, int dir, u32 id, int delete, int *err);
 int xfrm_policy_flush(u8 type, struct xfrm_audit *audit_info);
 u32 xfrm_get_acqseq(void);
-void xfrm_alloc_spi(struct xfrm_state *x, __be32 minspi, __be32 maxspi);
+extern int xfrm_alloc_spi(struct xfrm_state *x, u32 minspi, u32 maxspi);
 struct xfrm_state * xfrm_find_acq(u8 mode, u32 reqid, u8 proto,
                                   xfrm_address_t *daddr, xfrm_address_t *saddr,
                                   int create, unsigned short family);
@@ -1113,12 +1175,6 @@ static inline int xfrm_aevent_is_on(void)
         return ret;
 }
 
-static inline void xfrm_aevent_doreplay(struct xfrm_state *x)
-{
-        if (xfrm_aevent_is_on())
-                xfrm_replay_notify(x, XFRM_REPLAY_UPDATE);
-}
-
 #ifdef CONFIG_XFRM_MIGRATE
 static inline struct xfrm_algo *xfrm_algo_clone(struct xfrm_algo *orig)
 {