11 files changed, 269 insertions, 145 deletions

diff --git a/drivers/scsi/qla2xxx/qla_attr.c b/drivers/scsi/qla2xxx/qla_attr.c
index 2ff4342ae362..bc8194f74625 100644
--- a/drivers/scsi/qla2xxx/qla_attr.c
+++ b/drivers/scsi/qla2xxx/qla_attr.c
@@ -1538,6 +1538,10 @@ qla2x00_dev_loss_tmo_callbk(struct fc_rport *rport)
         if (!fcport)
                 return;
 
+        /* Now that the rport has been deleted, set the fcport state to
+           FCS_DEVICE_DEAD */
+        atomic_set(&fcport->state, FCS_DEVICE_DEAD);
+
         /*
          * Transport has effectively 'deleted' the rport, clear
          * all local references.
diff --git a/drivers/scsi/qla2xxx/qla_bsg.c b/drivers/scsi/qla2xxx/qla_bsg.c
index fdfbf83a6330..31a4121a2be1 100644
--- a/drivers/scsi/qla2xxx/qla_bsg.c
+++ b/drivers/scsi/qla2xxx/qla_bsg.c
@@ -1307,6 +1307,125 @@ qla24xx_iidma(struct fc_bsg_job *bsg_job)
 }
 
 static int
+qla2x00_optrom_setup(struct fc_bsg_job *bsg_job, struct qla_hw_data *ha,
+        uint8_t is_update)
+{
+        uint32_t start = 0;
+        int valid = 0;
+
+        bsg_job->reply->reply_payload_rcv_len = 0;
+
+        if (unlikely(pci_channel_offline(ha->pdev)))
+                return -EINVAL;
+
+        start = bsg_job->request->rqst_data.h_vendor.vendor_cmd[1];
+        if (start > ha->optrom_size)
+                return -EINVAL;
+
+        if (ha->optrom_state != QLA_SWAITING)
+                return -EBUSY;
+
+        ha->optrom_region_start = start;
+
+        if (is_update) {
+                if (ha->optrom_size == OPTROM_SIZE_2300 && start == 0)
+                        valid = 1;
+                else if (start == (ha->flt_region_boot * 4) ||
+                    start == (ha->flt_region_fw * 4))
+                        valid = 1;
+                else if (IS_QLA24XX_TYPE(ha) || IS_QLA25XX(ha) ||
+                    IS_QLA8XXX_TYPE(ha))
+                        valid = 1;
+                if (!valid) {
+                        qla_printk(KERN_WARNING, ha,
+                            "Invalid start region 0x%x/0x%x.\n",
+                            start, bsg_job->request_payload.payload_len);
+                        return -EINVAL;
+                }
+
+                ha->optrom_region_size = start +
+                    bsg_job->request_payload.payload_len > ha->optrom_size ?
+                    ha->optrom_size - start :
+                    bsg_job->request_payload.payload_len;
+                ha->optrom_state = QLA_SWRITING;
+        } else {
+                ha->optrom_region_size = start +
+                    bsg_job->reply_payload.payload_len > ha->optrom_size ?
+                    ha->optrom_size - start :
+                    bsg_job->reply_payload.payload_len;
+                ha->optrom_state = QLA_SREADING;
+        }
+
+        ha->optrom_buffer = vmalloc(ha->optrom_region_size);
+        if (!ha->optrom_buffer) {
+                qla_printk(KERN_WARNING, ha,
+                    "Read: Unable to allocate memory for optrom retrieval "
+                    "(%x).\n", ha->optrom_region_size);
+
+                ha->optrom_state = QLA_SWAITING;
+                return -ENOMEM;
+        }
+
+        memset(ha->optrom_buffer, 0, ha->optrom_region_size);
+        return 0;
+}
+
+static int
+qla2x00_read_optrom(struct fc_bsg_job *bsg_job)
+{
+        struct Scsi_Host *host = bsg_job->shost;
+        scsi_qla_host_t *vha = shost_priv(host);
+        struct qla_hw_data *ha = vha->hw;
+        int rval = 0;
+
+        rval = qla2x00_optrom_setup(bsg_job, ha, 0);
+        if (rval)
+                return rval;
+
+        ha->isp_ops->read_optrom(vha, ha->optrom_buffer,
+            ha->optrom_region_start, ha->optrom_region_size);
+
+        sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
+            bsg_job->reply_payload.sg_cnt, ha->optrom_buffer,
+            ha->optrom_region_size);
+
+        bsg_job->reply->reply_payload_rcv_len = ha->optrom_region_size;
+        bsg_job->reply->result = DID_OK;
+        vfree(ha->optrom_buffer);
+        ha->optrom_buffer = NULL;
+        ha->optrom_state = QLA_SWAITING;
+        bsg_job->job_done(bsg_job);
+        return rval;
+}
+
+static int
+qla2x00_update_optrom(struct fc_bsg_job *bsg_job)
+{
+        struct Scsi_Host *host = bsg_job->shost;
+        scsi_qla_host_t *vha = shost_priv(host);
+        struct qla_hw_data *ha = vha->hw;
+        int rval = 0;
+
+        rval = qla2x00_optrom_setup(bsg_job, ha, 1);
+        if (rval)
+                return rval;
+
+        sg_copy_to_buffer(bsg_job->request_payload.sg_list,
+            bsg_job->request_payload.sg_cnt, ha->optrom_buffer,
+            ha->optrom_region_size);
+
+        ha->isp_ops->write_optrom(vha, ha->optrom_buffer,
+            ha->optrom_region_start, ha->optrom_region_size);
+
+        bsg_job->reply->result = DID_OK;
+        vfree(ha->optrom_buffer);
+        ha->optrom_buffer = NULL;
+        ha->optrom_state = QLA_SWAITING;
+        bsg_job->job_done(bsg_job);
+        return rval;
+}
+
+static int
 qla2x00_process_vendor_specific(struct fc_bsg_job *bsg_job)
 {
         switch (bsg_job->request->rqst_data.h_vendor.vendor_cmd[0]) {
@@ -1328,6 +1447,12 @@ qla2x00_process_vendor_specific(struct fc_bsg_job *bsg_job)
         case QL_VND_FCP_PRIO_CFG_CMD:
                 return qla24xx_proc_fcp_prio_cfg_cmd(bsg_job);
 
+        case QL_VND_READ_FLASH:
+                return qla2x00_read_optrom(bsg_job);
+
+        case QL_VND_UPDATE_FLASH:
+                return qla2x00_update_optrom(bsg_job);
+
         default:
                 bsg_job->reply->result = (DID_ERROR << 16);
                 bsg_job->job_done(bsg_job);
diff --git a/drivers/scsi/qla2xxx/qla_bsg.h b/drivers/scsi/qla2xxx/qla_bsg.h
index cc7c52f87a11..074a999c7017 100644
--- a/drivers/scsi/qla2xxx/qla_bsg.h
+++ b/drivers/scsi/qla2xxx/qla_bsg.h
@@ -14,6 +14,8 @@
 #define QL_VND_A84_MGMT_CMD     0x04
 #define QL_VND_IIDMA            0x05
 #define QL_VND_FCP_PRIO_CFG_CMD 0x06
+#define QL_VND_READ_FLASH       0x07
+#define QL_VND_UPDATE_FLASH     0x08
 
 /* BSG definations for interpreting CommandSent field */
 #define INT_DEF_LB_LOOPBACK_CMD         0
diff --git a/drivers/scsi/qla2xxx/qla_def.h b/drivers/scsi/qla2xxx/qla_def.h
index e1d3ad40a946..9ce539d4557e 100644
--- a/drivers/scsi/qla2xxx/qla_def.h
+++ b/drivers/scsi/qla2xxx/qla_def.h
@@ -1700,9 +1700,7 @@ typedef struct fc_port {
         atomic_t state;
         uint32_t flags;
 
-        int port_login_retry_count;
         int login_retry;
-        atomic_t port_down_timer;
 
         struct fc_rport *rport, *drport;
         u32 supported_classes;
@@ -2411,7 +2409,6 @@ struct qla_hw_data {
                 uint32_t        enable_target_reset     :1;
                 uint32_t        enable_lip_full_login   :1;
                 uint32_t        enable_led_scheme       :1;
-                uint32_t        inta_enabled            :1;
                 uint32_t        msi_enabled             :1;
                 uint32_t        msix_enabled            :1;
                 uint32_t        disable_serdes          :1;
diff --git a/drivers/scsi/qla2xxx/qla_gbl.h b/drivers/scsi/qla2xxx/qla_gbl.h
index c33dec827e1e..9382a816c133 100644
--- a/drivers/scsi/qla2xxx/qla_gbl.h
+++ b/drivers/scsi/qla2xxx/qla_gbl.h
@@ -92,6 +92,7 @@ extern int ql2xshiftctondsd;
 extern int ql2xdbwr;
 extern int ql2xdontresethba;
 extern int ql2xasynctmfenable;
+extern int ql2xgffidenable;
 extern int ql2xenabledif;
 extern int ql2xenablehba_err_chk;
 extern int ql2xtargetreset;
diff --git a/drivers/scsi/qla2xxx/qla_init.c b/drivers/scsi/qla2xxx/qla_init.c
index 3cafbef40737..259f51137493 100644
--- a/drivers/scsi/qla2xxx/qla_init.c
+++ b/drivers/scsi/qla2xxx/qla_init.c
@@ -71,7 +71,7 @@ qla2x00_ctx_sp_free(srb_t *sp)
         struct srb_iocb *iocb = ctx->u.iocb_cmd;
         struct scsi_qla_host *vha = sp->fcport->vha;
 
-        del_timer_sync(&iocb->timer);
+        del_timer(&iocb->timer);
         kfree(iocb);
         kfree(ctx);
         mempool_free(sp, sp->fcport->vha->hw->srb_mempool);
@@ -1344,6 +1344,13 @@ cont_alloc:
                 qla_printk(KERN_WARNING, ha, "Unable to allocate (%d KB) for "
                     "firmware dump!!!\n", dump_size / 1024);
 
+                if (ha->fce) {
+                        dma_free_coherent(&ha->pdev->dev, FCE_SIZE, ha->fce,
+                            ha->fce_dma);
+                        ha->fce = NULL;
+                        ha->fce_dma = 0;
+                }
+
                 if (ha->eft) {
                         dma_free_coherent(&ha->pdev->dev, eft_size, ha->eft,
                             ha->eft_dma);
@@ -1818,14 +1825,14 @@ qla2x00_init_rings(scsi_qla_host_t *vha)
                 qla2x00_init_response_q_entries(rsp);
         }
 
-        spin_lock_irqsave(&ha->vport_slock, flags);
+        spin_lock(&ha->vport_slock);
         /* Clear RSCN queue. */
         list_for_each_entry(vp, &ha->vp_list, list) {
                 vp->rscn_in_ptr = 0;
                 vp->rscn_out_ptr = 0;
         }
 
-        spin_unlock_irqrestore(&ha->vport_slock, flags);
+        spin_unlock(&ha->vport_slock);
 
         ha->isp_ops->config_rings(vha);
 
@@ -2916,21 +2923,13 @@ qla2x00_reg_remote_port(scsi_qla_host_t *vha, fc_port_t *fcport)
 void
 qla2x00_update_fcport(scsi_qla_host_t *vha, fc_port_t *fcport)
 {
-        struct qla_hw_data *ha = vha->hw;
-
         fcport->vha = vha;
         fcport->login_retry = 0;
-        fcport->port_login_retry_count = ha->port_down_retry_count *
-            PORT_RETRY_TIME;
-        atomic_set(&fcport->port_down_timer, ha->port_down_retry_count *
-            PORT_RETRY_TIME);
         fcport->flags &= ~(FCF_LOGIN_NEEDED | FCF_ASYNC_SENT);
 
         qla2x00_iidma_fcport(vha, fcport);
-
-        atomic_set(&fcport->state, FCS_ONLINE);
-
         qla2x00_reg_remote_port(vha, fcport);
+        atomic_set(&fcport->state, FCS_ONLINE);
 }
 
 /*
@@ -3292,8 +3291,9 @@ qla2x00_find_all_fabric_devs(scsi_qla_host_t *vha,
                         continue;
 
                 /* Bypass ports whose FCP-4 type is not FCP_SCSI */
-                if (new_fcport->fc4_type != FC4_TYPE_FCP_SCSI &&
-                    new_fcport->fc4_type != FC4_TYPE_UNKNOWN)
+                if (ql2xgffidenable &&
+                    (new_fcport->fc4_type != FC4_TYPE_FCP_SCSI &&
+                    new_fcport->fc4_type != FC4_TYPE_UNKNOWN))
                         continue;
 
                 /* Locate matching device in database. */
diff --git a/drivers/scsi/qla2xxx/qla_iocb.c b/drivers/scsi/qla2xxx/qla_iocb.c
index 579f02854665..4c1ba6263eb3 100644
--- a/drivers/scsi/qla2xxx/qla_iocb.c
+++ b/drivers/scsi/qla2xxx/qla_iocb.c
@@ -992,8 +992,8 @@ qla24xx_build_scsi_crc_2_iocbs(srb_t *sp, struct cmd_type_crc_2 *cmd_pkt,
         ha = vha->hw;
 
         DEBUG18(printk(KERN_DEBUG
-            "%s(%ld): Executing cmd sp %p, pid=%ld, prot_op=%u.\n", __func__,
-            vha->host_no, sp, cmd->serial_number, scsi_get_prot_op(sp->cmd)));
+            "%s(%ld): Executing cmd sp %p, prot_op=%u.\n", __func__,
+            vha->host_no, sp, scsi_get_prot_op(sp->cmd)));
 
         cmd_pkt->vp_index = sp->fcport->vp_idx;
 
@@ -1061,6 +1061,7 @@ qla24xx_build_scsi_crc_2_iocbs(srb_t *sp, struct cmd_type_crc_2 *cmd_pkt,
                 fcp_cmnd->additional_cdb_len |= 2;
 
         int_to_scsilun(sp->cmd->device->lun, &fcp_cmnd->lun);
+        host_to_fcp_swap((uint8_t *)&fcp_cmnd->lun, sizeof(fcp_cmnd->lun));
         memcpy(fcp_cmnd->cdb, cmd->cmnd, cmd->cmd_len);
         cmd_pkt->fcp_cmnd_dseg_len = cpu_to_le16(fcp_cmnd_len);
         cmd_pkt->fcp_cmnd_dseg_address[0] = cpu_to_le32(
diff --git a/drivers/scsi/qla2xxx/qla_isr.c b/drivers/scsi/qla2xxx/qla_isr.c
index e0e43d9e7ed1..7f77898486a9 100644
--- a/drivers/scsi/qla2xxx/qla_isr.c
+++ b/drivers/scsi/qla2xxx/qla_isr.c
@@ -1240,12 +1240,6 @@ qla24xx_logio_entry(scsi_qla_host_t *vha, struct req_que *req,
         case LSC_SCODE_NPORT_USED:
                 data[0] = MBS_LOOP_ID_USED;
                 break;
-        case LSC_SCODE_CMD_FAILED:
-                if ((iop[1] & 0xff) == 0x05) {
-                        data[0] = MBS_NOT_LOGGED_IN;
-                        break;
-                }
-                /* Fall through. */
         default:
                 data[0] = MBS_COMMAND_ERROR;
                 break;
@@ -1431,9 +1425,8 @@ qla2x00_handle_sense(srb_t *sp, uint8_t *sense_data, uint32_t par_sense_len,
                 rsp->status_srb = sp;
 
         DEBUG5(printk("%s(): Check condition Sense data, scsi(%ld:%d:%d:%d) "
-            "cmd=%p pid=%ld\n", __func__, sp->fcport->vha->host_no,
-            cp->device->channel, cp->device->id, cp->device->lun, cp,
-            cp->serial_number));
+            "cmd=%p\n", __func__, sp->fcport->vha->host_no,
+            cp->device->channel, cp->device->id, cp->device->lun, cp));
         if (sense_len)
                 DEBUG5(qla2x00_dump_buffer(cp->sense_buffer, sense_len));
 }
@@ -1757,6 +1750,8 @@ check_scsi_status:
         case CS_INCOMPLETE:
         case CS_PORT_UNAVAILABLE:
         case CS_TIMEOUT:
+        case CS_RESET:
+
                 /*
                  * We are going to have the fc class block the rport
                  * while we try to recover so instruct the mid layer
@@ -1781,10 +1776,6 @@ check_scsi_status:
                         qla2x00_mark_device_lost(fcport->vha, fcport, 1, 1);
                 break;
 
-        case CS_RESET:
-                cp->result = DID_TRANSPORT_DISRUPTED << 16;
-                break;
-
         case CS_ABORTED:
                 cp->result = DID_RESET << 16;
                 break;
@@ -1801,10 +1792,10 @@ out:
         if (logit)
                 DEBUG2(qla_printk(KERN_INFO, ha,
                     "scsi(%ld:%d:%d) FCP command status: 0x%x-0x%x (0x%x) "
-                    "oxid=0x%x ser=0x%lx cdb=%02x%02x%02x len=0x%x "
+                    "oxid=0x%x cdb=%02x%02x%02x len=0x%x "
                     "rsp_info=0x%x resid=0x%x fw_resid=0x%x\n", vha->host_no,
                     cp->device->id, cp->device->lun, comp_status, scsi_status,
-                    cp->result, ox_id, cp->serial_number, cp->cmnd[0],
+                    cp->result, ox_id, cp->cmnd[0],
                     cp->cmnd[1], cp->cmnd[2], scsi_bufflen(cp), rsp_info_len,
                     resid_len, fw_resid_len));
 
@@ -2500,14 +2491,15 @@ skip_msix:
 skip_msi:
 
         ret = request_irq(ha->pdev->irq, ha->isp_ops->intr_handler,
-            IRQF_SHARED, QLA2XXX_DRIVER_NAME, rsp);
+            ha->flags.msi_enabled ? 0 : IRQF_SHARED,
+            QLA2XXX_DRIVER_NAME, rsp);
         if (ret) {
                 qla_printk(KERN_WARNING, ha,
                     "Failed to reserve interrupt %d already in use.\n",
                     ha->pdev->irq);
                 goto fail;
         }
-        ha->flags.inta_enabled = 1;
+
 clear_risc_ints:
 
         /*
diff --git a/drivers/scsi/qla2xxx/qla_nx.c b/drivers/scsi/qla2xxx/qla_nx.c
index 8d9edfb39803..ae2acacc0003 100644
--- a/drivers/scsi/qla2xxx/qla_nx.c
+++ b/drivers/scsi/qla2xxx/qla_nx.c
@@ -2749,6 +2749,7 @@ sufficient_dsds:
                         goto queuing_error_fcp_cmnd;
 
                 int_to_scsilun(sp->cmd->device->lun, &cmd_pkt->lun);
+                host_to_fcp_swap((uint8_t *)&cmd_pkt->lun, sizeof(cmd_pkt->lun));
 
                 /* build FCP_CMND IU */
                 memset(ctx->fcp_cmnd, 0, sizeof(struct fcp_cmnd));
diff --git a/drivers/scsi/qla2xxx/qla_os.c b/drivers/scsi/qla2xxx/qla_os.c
index 800ea9269752..2c0876c81a3f 100644
--- a/drivers/scsi/qla2xxx/qla_os.c
+++ b/drivers/scsi/qla2xxx/qla_os.c
@@ -160,6 +160,11 @@ MODULE_PARM_DESC(ql2xtargetreset,
                  "Enable target reset."
                  "Default is 1 - use hw defaults.");
 
+int ql2xgffidenable;
+module_param(ql2xgffidenable, int, S_IRUGO|S_IRUSR);
+MODULE_PARM_DESC(ql2xgffidenable,
+                "Enables GFF_ID checks of port type. "
+                "Default is 0 - Do not use GFF_ID information.");
 
 int ql2xasynctmfenable;
 module_param(ql2xasynctmfenable, int, S_IRUGO|S_IRUSR);
@@ -174,8 +179,7 @@ static int qla2xxx_slave_alloc(struct scsi_device *);
 static int qla2xxx_scan_finished(struct Scsi_Host *, unsigned long time);
 static void qla2xxx_scan_start(struct Scsi_Host *);
 static void qla2xxx_slave_destroy(struct scsi_device *);
-static int qla2xxx_queuecommand(struct scsi_cmnd *cmd,
-                void (*fn)(struct scsi_cmnd *));
+static int qla2xxx_queuecommand(struct Scsi_Host *h, struct scsi_cmnd *cmd);
 static int qla2xxx_eh_abort(struct scsi_cmnd *);
 static int qla2xxx_eh_device_reset(struct scsi_cmnd *);
 static int qla2xxx_eh_target_reset(struct scsi_cmnd *);
@@ -255,6 +259,7 @@ static void qla2x00_rst_aen(scsi_qla_host_t *);
 
 static int qla2x00_mem_alloc(struct qla_hw_data *, uint16_t, uint16_t,
         struct req_que **, struct rsp_que **);
+static void qla2x00_free_fw_dump(struct qla_hw_data *);
 static void qla2x00_mem_free(struct qla_hw_data *);
 static void qla2x00_sp_free_dma(srb_t *);
 
@@ -529,7 +534,7 @@ qla2x00_get_new_sp(scsi_qla_host_t *vha, fc_port_t *fcport,
 }
 
 static int
-qla2xxx_queuecommand(struct scsi_cmnd *cmd, void (*done)(struct scsi_cmnd *))
+qla2xxx_queuecommand_lck(struct scsi_cmnd *cmd, void (*done)(struct scsi_cmnd *))
 {
         scsi_qla_host_t *vha = shost_priv(cmd->device->host);
         fc_port_t *fcport = (struct fc_port *) cmd->device->hostdata;
@@ -539,6 +544,7 @@ qla2xxx_queuecommand(struct scsi_cmnd *cmd, void (*done)(struct scsi_cmnd *))
         srb_t *sp;
         int rval;
 
+        spin_unlock_irq(vha->host->host_lock);
         if (ha->flags.eeh_busy) {
                 if (ha->flags.pci_channel_io_perm_failure)
                         cmd->result = DID_NO_CONNECT << 16;
@@ -553,10 +559,6 @@ qla2xxx_queuecommand(struct scsi_cmnd *cmd, void (*done)(struct scsi_cmnd *))
                 goto qc24_fail_command;
         }
 
-        /* Close window on fcport/rport state-transitioning. */
-        if (fcport->drport)
-                goto qc24_target_busy;
-
         if (!vha->flags.difdix_supported &&
                 scsi_get_prot_op(cmd) != SCSI_PROT_NORMAL) {
                         DEBUG2(qla_printk(KERN_ERR, ha,
@@ -567,15 +569,14 @@ qla2xxx_queuecommand(struct scsi_cmnd *cmd, void (*done)(struct scsi_cmnd *))
         }
         if (atomic_read(&fcport->state) != FCS_ONLINE) {
                 if (atomic_read(&fcport->state) == FCS_DEVICE_DEAD ||
-                    atomic_read(&base_vha->loop_state) == LOOP_DEAD) {
+                        atomic_read(&fcport->state) == FCS_DEVICE_LOST ||
+                        atomic_read(&base_vha->loop_state) == LOOP_DEAD) {
                         cmd->result = DID_NO_CONNECT << 16;
                         goto qc24_fail_command;
                 }
                 goto qc24_target_busy;
         }
 
-        spin_unlock_irq(vha->host->host_lock);
-
         sp = qla2x00_get_new_sp(base_vha, fcport, cmd, done);
         if (!sp)
                 goto qc24_host_busy_lock;
@@ -597,14 +598,18 @@ qc24_host_busy_lock:
         return SCSI_MLQUEUE_HOST_BUSY;
 
 qc24_target_busy:
+        spin_lock_irq(vha->host->host_lock);
         return SCSI_MLQUEUE_TARGET_BUSY;
 
 qc24_fail_command:
+        spin_lock_irq(vha->host->host_lock);
         done(cmd);
 
         return 0;
 }
 
+static DEF_SCSI_QCMD(qla2xxx_queuecommand)
+
 
 /*
  * qla2x00_eh_wait_on_command
@@ -824,81 +829,58 @@ qla2xxx_eh_abort(struct scsi_cmnd *cmd)
 {
         scsi_qla_host_t *vha = shost_priv(cmd->device->host);
         srb_t *sp;
-        int ret, i;
+        int ret = SUCCESS;
         unsigned int id, lun;
-        unsigned long serial;
         unsigned long flags;
         int wait = 0;
         struct qla_hw_data *ha = vha->hw;
-        struct req_que *req = vha->req;
-        srb_t *spt;
-        int got_ref = 0;
 
         fc_block_scsi_eh(cmd);
 
         if (!CMD_SP(cmd))
                 return SUCCESS;
 
-        ret = SUCCESS;
-
         id = cmd->device->id;
         lun = cmd->device->lun;
-        serial = cmd->serial_number;
-        spt = (srb_t *) CMD_SP(cmd);
-        if (!spt)
-                return SUCCESS;
 
-        /* Check active list for command command. */
         spin_lock_irqsave(&ha->hardware_lock, flags);
-        for (i = 1; i < MAX_OUTSTANDING_COMMANDS; i++) {
-                sp = req->outstanding_cmds[i];
-
-                if (sp == NULL)
-                        continue;
-                if ((sp->ctx) && !(sp->flags & SRB_FCP_CMND_DMA_VALID) &&
-                    !IS_PROT_IO(sp))
-                        continue;
-                if (sp->cmd != cmd)
-                        continue;
+        sp = (srb_t *) CMD_SP(cmd);
+        if (!sp) {
+                spin_unlock_irqrestore(&ha->hardware_lock, flags);
+                return SUCCESS;
+        }
 
-                DEBUG2(printk("%s(%ld): aborting sp %p from RISC."
-                " pid=%ld.\n", __func__, vha->host_no, sp, serial));
+        DEBUG2(printk("%s(%ld): aborting sp %p from RISC.",
+            __func__, vha->host_no, sp));
 
-                /* Get a reference to the sp and drop the lock.*/
-                sp_get(sp);
-                got_ref++;
+        /* Get a reference to the sp and drop the lock.*/
+        sp_get(sp);
 
-                spin_unlock_irqrestore(&ha->hardware_lock, flags);
-                if (ha->isp_ops->abort_command(sp)) {
-                        DEBUG2(printk("%s(%ld): abort_command "
-                        "mbx failed.\n", __func__, vha->host_no));
-                        ret = FAILED;
-                } else {
-                        DEBUG3(printk("%s(%ld): abort_command "
-                        "mbx success.\n", __func__, vha->host_no));
-                        wait = 1;
-                }
-                spin_lock_irqsave(&ha->hardware_lock, flags);
-                break;
-        }
         spin_unlock_irqrestore(&ha->hardware_lock, flags);
+        if (ha->isp_ops->abort_command(sp)) {
+                DEBUG2(printk("%s(%ld): abort_command "
+                "mbx failed.\n", __func__, vha->host_no));
+                ret = FAILED;
+        } else {
+                DEBUG3(printk("%s(%ld): abort_command "
+                "mbx success.\n", __func__, vha->host_no));
+                wait = 1;
+        }
+        qla2x00_sp_compl(ha, sp);
 
         /* Wait for the command to be returned. */
         if (wait) {
                 if (qla2x00_eh_wait_on_command(cmd) != QLA_SUCCESS) {
                         qla_printk(KERN_ERR, ha,
-                            "scsi(%ld:%d:%d): Abort handler timed out -- %lx "
-                            "%x.\n", vha->host_no, id, lun, serial, ret);
+                            "scsi(%ld:%d:%d): Abort handler timed out -- %x.\n",
+                            vha->host_no, id, lun, ret);
                         ret = FAILED;
                 }
         }
 
-        if (got_ref)
-                qla2x00_sp_compl(ha, sp);
-
         qla_printk(KERN_INFO, ha,
-            "scsi(%ld:%d:%d): Abort command issued -- %d %lx %x.\n",
-            vha->host_no, id, lun, wait, serial, ret);
+            "scsi(%ld:%d:%d): Abort command issued -- %d %x.\n",
+            vha->host_no, id, lun, wait, ret);
 
         return ret;
 }
@@ -1043,13 +1025,11 @@ qla2xxx_eh_bus_reset(struct scsi_cmnd *cmd)
         fc_port_t *fcport = (struct fc_port *) cmd->device->hostdata;
         int ret = FAILED;
         unsigned int id, lun;
-        unsigned long serial;
 
         fc_block_scsi_eh(cmd);
 
         id = cmd->device->id;
         lun = cmd->device->lun;
-        serial = cmd->serial_number;
 
         if (!fcport)
                 return ret;
@@ -1104,14 +1084,12 @@ qla2xxx_eh_host_reset(struct scsi_cmnd *cmd)
         struct qla_hw_data *ha = vha->hw;
         int ret = FAILED;
         unsigned int id, lun;
-        unsigned long serial;
         scsi_qla_host_t *base_vha = pci_get_drvdata(ha->pdev);
 
         fc_block_scsi_eh(cmd);
 
         id = cmd->device->id;
         lun = cmd->device->lun;
-        serial = cmd->serial_number;
 
         if (!fcport)
                 return ret;
@@ -1974,6 +1952,7 @@ qla2x00_probe_one(struct pci_dev *pdev, const struct pci_device_id *id)
         ha->bars = bars;
         ha->mem_only = mem_only;
         spin_lock_init(&ha->hardware_lock);
+        spin_lock_init(&ha->vport_slock);
 
         /* Set ISP-type information. */
         qla2x00_set_isp_flags(ha);
@@ -2085,6 +2064,7 @@ qla2x00_probe_one(struct pci_dev *pdev, const struct pci_device_id *id)
                 ha->init_cb_size = sizeof(struct mid_init_cb_81xx);
                 ha->gid_list_info_size = 8;
                 ha->optrom_size = OPTROM_SIZE_82XX;
+                ha->nvram_npiv_size = QLA_MAX_VPORTS_QLA25XX;
                 ha->isp_ops = &qla82xx_isp_ops;
                 ha->flash_conf_off = FARX_ACCESS_FLASH_CONF;
                 ha->flash_data_off = FARX_ACCESS_FLASH_DATA;
@@ -2342,6 +2322,42 @@ probe_out:
 }
 
 static void
+qla2x00_shutdown(struct pci_dev *pdev)
+{
+        scsi_qla_host_t *vha;
+        struct qla_hw_data  *ha;
+
+        vha = pci_get_drvdata(pdev);
+        ha = vha->hw;
+
+        /* Turn-off FCE trace */
+        if (ha->flags.fce_enabled) {
+                qla2x00_disable_fce_trace(vha, NULL, NULL);
+                ha->flags.fce_enabled = 0;
+        }
+
+        /* Turn-off EFT trace */
+        if (ha->eft)
+                qla2x00_disable_eft_trace(vha);
+
+        /* Stop currently executing firmware. */
+        qla2x00_try_to_stop_firmware(vha);
+
+        /* Turn adapter off line */
+        vha->flags.online = 0;
+
+        /* turn-off interrupts on the card */
+        if (ha->interrupts_on) {
+                vha->flags.init_done = 0;
+                ha->isp_ops->disable_intrs(ha);
+        }
+
+        qla2x00_free_irqs(vha);
+
+        qla2x00_free_fw_dump(ha);
+}
+
+static void
 qla2x00_remove_one(struct pci_dev *pdev)
 {
         scsi_qla_host_t *base_vha, *vha;
@@ -2597,12 +2613,12 @@ qla2x00_mark_all_devices_lost(scsi_qla_host_t *vha, int defer)
                 if (atomic_read(&fcport->state) == FCS_DEVICE_DEAD)
                         continue;
                 if (atomic_read(&fcport->state) == FCS_ONLINE) {
+                        atomic_set(&fcport->state, FCS_DEVICE_LOST);
                         if (defer)
                                 qla2x00_schedule_rport_del(vha, fcport, defer);
                         else if (vha->vp_idx == fcport->vp_idx)
                                 qla2x00_schedule_rport_del(vha, fcport, defer);
                 }
-                atomic_set(&fcport->state, FCS_DEVICE_LOST);
         }
 }
 
@@ -2830,28 +2846,48 @@ fail:
 }
 
 /*
-* qla2x00_mem_free
-*      Frees all adapter allocated memory.
+* qla2x00_free_fw_dump
+*       Frees fw dump stuff.
 *
 * Input:
-*      ha = adapter block pointer.
+*       ha = adapter block pointer.
 */
 static void
-qla2x00_mem_free(struct qla_hw_data *ha)
+qla2x00_free_fw_dump(struct qla_hw_data *ha)
 {
-        if (ha->srb_mempool)
-                mempool_destroy(ha->srb_mempool);
-
         if (ha->fce)
                 dma_free_coherent(&ha->pdev->dev, FCE_SIZE, ha->fce,
-                ha->fce_dma);
+                    ha->fce_dma);
 
         if (ha->fw_dump) {
                 if (ha->eft)
                         dma_free_coherent(&ha->pdev->dev,
-                        ntohl(ha->fw_dump->eft_size), ha->eft, ha->eft_dma);
+                            ntohl(ha->fw_dump->eft_size), ha->eft, ha->eft_dma);
                 vfree(ha->fw_dump);
         }
+        ha->fce = NULL;
+        ha->fce_dma = 0;
+        ha->eft = NULL;
+        ha->eft_dma = 0;
+        ha->fw_dump = NULL;
+        ha->fw_dumped = 0;
+        ha->fw_dump_reading = 0;
+}
+
+/*
+* qla2x00_mem_free
+*      Frees all adapter allocated memory.
+*
+* Input:
+*      ha = adapter block pointer.
+*/
+static void
+qla2x00_mem_free(struct qla_hw_data *ha)
+{
+        qla2x00_free_fw_dump(ha);
+
+        if (ha->srb_mempool)
+                mempool_destroy(ha->srb_mempool);
 
         if (ha->dcbx_tlv)
                 dma_free_coherent(&ha->pdev->dev, DCBX_TLV_DATA_SIZE,
@@ -2925,8 +2961,6 @@ qla2x00_mem_free(struct qla_hw_data *ha)
 
         ha->srb_mempool = NULL;
         ha->ctx_mempool = NULL;
-        ha->eft = NULL;
-        ha->eft_dma = 0;
         ha->sns_cmd = NULL;
         ha->sns_cmd_dma = 0;
         ha->ct_sns = NULL;
@@ -2946,10 +2980,6 @@ qla2x00_mem_free(struct qla_hw_data *ha)
 
         ha->gid_list = NULL;
         ha->gid_list_dma = 0;
-
-        ha->fw_dump = NULL;
-        ha->fw_dumped = 0;
-        ha->fw_dump_reading = 0;
 }
 
 struct scsi_qla_host *qla2x00_create_host(struct scsi_host_template *sht,
@@ -3547,11 +3577,9 @@ void
 qla2x00_timer(scsi_qla_host_t *vha)
 {
         unsigned long   cpu_flags = 0;
-        fc_port_t       *fcport;
         int             start_dpc = 0;
         int             index;
         srb_t           *sp;
-        int             t;
         uint16_t        w;
         struct qla_hw_data *ha = vha->hw;
         struct req_que *req;
@@ -3567,34 +3595,6 @@ qla2x00_timer(scsi_qla_host_t *vha)
         /* Hardware read to raise pending EEH errors during mailbox waits. */
         if (!pci_channel_offline(ha->pdev))
                 pci_read_config_word(ha->pdev, PCI_VENDOR_ID, &w);
-        /*
-         * Ports - Port down timer.
-         *
-         * Whenever, a port is in the LOST state we start decrementing its port
-         * down timer every second until it reaches zero. Once  it reaches zero
-         * the port it marked DEAD.
-         */
-        t = 0;
-        list_for_each_entry(fcport, &vha->vp_fcports, list) {
-                if (fcport->port_type != FCT_TARGET)
-                        continue;
-
-                if (atomic_read(&fcport->state) == FCS_DEVICE_LOST) {
-
-                        if (atomic_read(&fcport->port_down_timer) == 0)
-                                continue;
-
-                        if (atomic_dec_and_test(&fcport->port_down_timer) != 0)
-                                atomic_set(&fcport->state, FCS_DEVICE_DEAD);
-
-                        DEBUG(printk("scsi(%ld): fcport-%d - port retry count: "
-                            "%d remaining\n",
-                            vha->host_no,
-                            t, atomic_read(&fcport->port_down_timer)));
-                }
-                t++;
-        } /* End of for fcport  */
-
 
         /* Loop down handler. */
         if (atomic_read(&vha->loop_down_timer) > 0 &&
@@ -4079,6 +4079,7 @@ static struct pci_driver qla2xxx_pci_driver = {
         .id_table       = qla2xxx_pci_tbl,
         .probe          = qla2x00_probe_one,
         .remove         = qla2x00_remove_one,
+        .shutdown       = qla2x00_shutdown,
         .err_handler    = &qla2xxx_err_handler,
 };
 
diff --git a/drivers/scsi/qla2xxx/qla_version.h b/drivers/scsi/qla2xxx/qla_version.h
index 8edbccb3232d..cf0075a2d0c2 100644
--- a/drivers/scsi/qla2xxx/qla_version.h
+++ b/drivers/scsi/qla2xxx/qla_version.h
@@ -7,9 +7,9 @@
 /*
  * Driver version
  */
-#define QLA2XXX_VERSION      "8.03.04-k0"
+#define QLA2XXX_VERSION      "8.03.05-k0"
 
 #define QLA_DRIVER_MAJOR_VER    8
 #define QLA_DRIVER_MINOR_VER    3
-#define QLA_DRIVER_PATCH_VER    4
+#define QLA_DRIVER_PATCH_VER    5
 #define QLA_DRIVER_BETA_VER     0